@radhya/mach 1.7.1 → 1.8.0

package/dist/index.js

@@ -1,21 +1,21 @@
 #!/usr/bin/env node
-import{a as li,c as Xe}from"./chunk-SR72G3MN.js";import{a as f,b as ai,c as pe,d as ci,e as yt,f as Mt,g as D}from"./chunk-YBL2LBMW.js";import{Command as is,Option as xn}from"commander";import{configDotenv as ns}from"dotenv";import{intro as ue,outro as Ln}from"@clack/prompts";import ae from"chalk";import{text as di,confirm as Un,spinner as Mn,isCancel as Ft,cancel as Ze,note as Fn,outro as Hn}from"@clack/prompts";import Qe from"chalk";async function ui(){try{let e=await di({message:"Enter Bucket Name:",placeholder:"e.g. my-app-dev",validate(o){if(o.length===0)return"Bucket name is required"}});Ft(e)&&(Ze("Operation cancelled."),process.exit(0));let n=await di({message:"Enter Region:",initialValue:"ap-south-1"});Ft(n)&&(Ze("Operation cancelled."),process.exit(0));let i=await Un({message:"Do you want to create a CloudFront Distribution for this bucket?",initialValue:!0});Ft(i)&&(Ze("Operation cancelled."),process.exit(0));let t=Mn();t.start("Setting up hosting infrastructure...");try{let o=await D.post("/hosting/setup",{bucketName:e,region:n,createCloudFront:i});if(o.data.status!=="success")throw new Error(o.data.message||"Hosting setup failed");t.stop("Hosting setup complete!");let r=o.data,c=`Bucket Name:      ${Qe.cyan(r.bucketName)}
-`;c+=`Region:           ${Qe.cyan(r.region)}
-`,c+=`S3 Website URL:   ${Qe.blue(r.s3WebsiteUrl)}`,r.cloudFrontId&&(c+=`
-
-CloudFront ID:    ${Qe.cyan(r.cloudFrontId)}`,c+=`
-CloudFront URL:   ${Qe.blue(r.cloudFrontUrl)}`),Fn(c,"Setup Complete!"),Hn("You are all set!")}catch(o){t.stop("Setup failed"),Ze(`Error: ${o.response?.data?.message||o.message}`)}}catch(e){Ze(`An unexpected error occurred: ${e.message}`)}}import{readdir as Bn,writeFile as Gn,access as jn,mkdir as Kn}from"fs/promises";import{join as pi}from"path";import{spinner as zn,text as fi,isCancel as mi,cancel as Ht,note as Vn,outro as Wn}from"@clack/prompts";import Yn from"chalk";async function Jn(){let e=["./app","./src/app"];for(let n of e)try{return await jn(n),n}catch{}return null}async function gi(e){try{let i=await Jn()||"./app",t=await fi({message:"Enter path to your app directory:",placeholder:i,initialValue:i,validate(l){if(l.length===0)return"Path is required"}});mi(t)&&(Ht("Operation cancelled."),process.exit(0));let o=await fi({message:"Enter your website base URL:",placeholder:"https://example.com",validate(l){if(l.length===0)return"Base URL is required";if(!l.startsWith("http"))return"URL must start with http:// or https://"}});mi(o)&&(Ht("Operation cancelled."),process.exit(0));let r=zn();r.start("Scanning app directory for routes...");let c=await hi(t);r.stop(`Found ${c.length} routes`);let a=qn(c,o),s=e.output||"./public/sitemap.xml";r.start(`Writing sitemap to ${s}...`);let d=s.substring(0,s.lastIndexOf("/"));if(d)try{await Kn(d,{recursive:!0})}catch{}await Gn(s,a,"utf-8"),r.stop("Sitemap generated successfully!"),Vn(`Routes included:
-${c.map(l=>`  \u2022 ${l.path}`).join(`
-`)}`,"Sitemap Summary"),Wn(`Sitemap saved to ${Yn.cyan(s)}`)}catch(n){Ht(`An error occurred: ${n.message}`)}}async function hi(e,n=""){let i=[];try{let t=await Bn(e,{withFileTypes:!0});for(let o of t){let r=pi(e,o.name);if(!(o.name.startsWith("_")||o.name.startsWith("."))){if(o.isDirectory()){let c=await hi(r,pi(n,o.name));i.push(...c)}else if(o.isFile()){if(o.name==="index.tsx"||o.name==="index.ts"||o.name==="index.jsx"||o.name==="index.js"){let c=n===""?"/":`/${n}`;i.push({path:c,file:r})}else if(o.name.match(/\.(tsx|ts|jsx|js)$/)&&!o.name.includes("_layout")&&!o.name.includes("+")){let c=o.name.replace(/\.(tsx|ts|jsx|js)$/,""),a=`/${n}/${c}`.replace(/\/+/g,"/");i.push({path:a,file:r})}}}}}catch(t){throw new Error(`Failed to scan directory ${e}: ${t.message}`)}return i}function qn(e,n){let i=new Date().toISOString().split("T")[0];return`<?xml version="1.0" encoding="UTF-8"?>
+import{a as we,b as Ge,c as pi,d as fi,e as Ke,f as mi,h as et}from"./chunk-NIGYNUTS.js";import{a as f,b as di,c as pe,d as ui,e as At,f as Qe,g as $}from"./chunk-YBL2LBMW.js";import{Command as As,Option as Wn}from"commander";import{configDotenv as Is}from"dotenv";import{intro as de,outro as Yn}from"@clack/prompts";import se from"chalk";import{text as gi,confirm as Jn,spinner as qn,isCancel as Ht,cancel as tt,note as Xn,outro as Zn}from"@clack/prompts";import it from"chalk";async function hi(){try{let e=await gi({message:"Enter Bucket Name:",placeholder:"e.g. my-app-dev",validate(o){if(o.length===0)return"Bucket name is required"}});Ht(e)&&(tt("Operation cancelled."),process.exit(0));let t=await gi({message:"Enter Region:",initialValue:"ap-south-1"});Ht(t)&&(tt("Operation cancelled."),process.exit(0));let i=await Jn({message:"Do you want to create a CloudFront Distribution for this bucket?",initialValue:!0});Ht(i)&&(tt("Operation cancelled."),process.exit(0));let n=qn();n.start("Setting up hosting infrastructure...");try{let o=await $.post("/hosting/setup",{bucketName:e,region:t,createCloudFront:i});if(o.data.status!=="success")throw new Error(o.data.message||"Hosting setup failed");n.stop("Hosting setup complete!");let r=o.data,l=`Bucket Name:      ${it.cyan(r.bucketName)}
+`;l+=`Region:           ${it.cyan(r.region)}
+`,l+=`S3 Website URL:   ${it.blue(r.s3WebsiteUrl)}`,r.cloudFrontId&&(l+=`
+
+CloudFront ID:    ${it.cyan(r.cloudFrontId)}`,l+=`
+CloudFront URL:   ${it.blue(r.cloudFrontUrl)}`),Xn(l,"Setup Complete!"),Zn("You are all set!")}catch(o){n.stop("Setup failed"),tt(`Error: ${o.response?.data?.message||o.message}`)}}catch(e){tt(`An unexpected error occurred: ${e.message}`)}}import{readdir as Qn,writeFile as eo,access as to,mkdir as io}from"fs/promises";import{join as yi}from"path";import{spinner as no,text as Si,isCancel as Ei,cancel as Bt,note as oo,outro as ro}from"@clack/prompts";import so from"chalk";async function ao(){let e=["./app","./src/app"];for(let t of e)try{return await to(t),t}catch{}return null}async function Ai(e){try{let i=await ao()||"./app",n=await Si({message:"Enter path to your app directory:",placeholder:i,initialValue:i,validate(d){if(d.length===0)return"Path is required"}});Ei(n)&&(Bt("Operation cancelled."),process.exit(0));let o=await Si({message:"Enter your website base URL:",placeholder:"https://example.com",validate(d){if(d.length===0)return"Base URL is required";if(!d.startsWith("http"))return"URL must start with http:// or https://"}});Ei(o)&&(Bt("Operation cancelled."),process.exit(0));let r=no();r.start("Scanning app directory for routes...");let l=await Ii(n);r.stop(`Found ${l.length} routes`);let a=lo(l,o),s=e.output||"./public/sitemap.xml";r.start(`Writing sitemap to ${s}...`);let c=s.substring(0,s.lastIndexOf("/"));if(c)try{await io(c,{recursive:!0})}catch{}await eo(s,a,"utf-8"),r.stop("Sitemap generated successfully!"),oo(`Routes included:
+${l.map(d=>`  \u2022 ${d.path}`).join(`
+`)}`,"Sitemap Summary"),ro(`Sitemap saved to ${so.cyan(s)}`)}catch(t){Bt(`An error occurred: ${t.message}`)}}async function Ii(e,t=""){let i=[];try{let n=await Qn(e,{withFileTypes:!0});for(let o of n){let r=yi(e,o.name);if(!(o.name.startsWith("_")||o.name.startsWith("."))){if(o.isDirectory()){let l=await Ii(r,yi(t,o.name));i.push(...l)}else if(o.isFile()){if(o.name==="index.tsx"||o.name==="index.ts"||o.name==="index.jsx"||o.name==="index.js"){let l=t===""?"/":`/${t}`;i.push({path:l,file:r})}else if(o.name.match(/\.(tsx|ts|jsx|js)$/)&&!o.name.includes("_layout")&&!o.name.includes("+")){let l=o.name.replace(/\.(tsx|ts|jsx|js)$/,""),a=`/${t}/${l}`.replace(/\/+/g,"/");i.push({path:a,file:r})}}}}}catch(n){throw new Error(`Failed to scan directory ${e}: ${n.message}`)}return i}function lo(e,t){let i=new Date().toISOString().split("T")[0];return`<?xml version="1.0" encoding="UTF-8"?>
 <urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
 ${e.map(o=>{let r=o.path;return r=r.replace(/\/\([^)]+\)/g,""),r=r.replace(/\/\[.*?\]/g,"/:id"),r=r.replace(/\/+/g,"/"),r===""&&(r="/"),`  <url>
-    <loc>${n}${r}</loc>
+    <loc>${t}${r}</loc>
     <lastmod>${i}</lastmod>
     <changefreq>weekly</changefreq>
     <priority>0.8</priority>
   </url>`}).join(`
 `)}
-</urlset>`}import{randomUUID as So}from"crypto";import he from"path";import it from"axios";import Eo from"os";import{spinner as jt,confirm as wi,isCancel as vi,log as R}from"@clack/prompts";import w from"chalk";import oe from"fs";import{execSync as Oi}from"child_process";import Ci from"adm-zip";import{spinner as Xn,log as St}from"@clack/prompts";import Si from"chalk";import Ei from"fs";import Ai from"path";var yi=`#!/bin/bash
+</urlset>`}import{randomUUID as xo}from"crypto";import he from"path";import rt from"axios";import Lo from"os";import{spinner as Vt,confirm as Ui,isCancel as Mi,log as R}from"@clack/prompts";import w from"chalk";import oe from"fs";import{execSync as Fi}from"child_process";import Hi from"adm-zip";import{spinner as co,log as It}from"@clack/prompts";import _i from"chalk";import Pi from"fs";import $i from"path";var bi=`#!/bin/bash
 # --- Mach Cloud Build Script (Android) ---
 # All S3 operations use presigned URLs via curl \u2014 zero AWS credentials on instance.
 BUILD_ID="{{BUILD_ID}}"
@@ -483,12 +483,12 @@ for pid in "\${cache_pids[@]}"; do wait "$pid" || true; done
 echo "Build orchestrator finished. Auto-terminating instance in 5 seconds..."
 sleep 5
 sudo shutdown -h now
-`;var Ii=async(e,n,i={},t,o)=>{let r=Xn(),c=e.buildProfile||"production",a=c==="production",s=e.apk===!0,d=a?"bundleRelease":"assembleRelease",l=e.buildCommand||(s?"assembleRelease":d),u=e.nodeVersion?[`echo "[NODE] Switching to Node ${e.nodeVersion}..."`,`CURRENT_MAJOR=$(node -e "process.stdout.write(process.version.split('.')[0].replace('v',''))" 2>/dev/null || echo "0")`,`if [ "$CURRENT_MAJOR" != "${e.nodeVersion}" ]; then`,`  curl -fsSL https://deb.nodesource.com/setup_${e.nodeVersion}.x | bash - 2>&1`,"  apt-get install -y nodejs 2>&1",'  echo "[NODE] Installed Node $(node -v)"',"else",'  echo "[NODE] Already on Node $(node -v) \u2014 no switch needed"',"fi"].join(`
-`):"",p;if(o){let S=Ai.isAbsolute(o)?o:Ai.resolve(process.cwd(),o);Ei.existsSync(S)?(p=Ei.readFileSync(S,"utf-8"),St.info(Si.magenta(`\u2713 Loaded preBuild hook: ${o}`))):St.warn(`preBuild script not found at ${S} \u2014 skipping`)}let m=yi.replace(/\{\{BUILD_ID\}\}/g,n).replace(/\{\{BUILD_COMMAND\}\}/g,l).replace("{{NODE_VERSION_SETUP}}",u).replace("{{ENV_VARS}}",`
+`;var Di=async(e,t,i={},n,o)=>{let r=co(),l=e.buildProfile||"production",a=l==="production",s=e.apk===!0,c=a?"bundleRelease":"assembleRelease",d=e.buildCommand||(s?"assembleRelease":c),u=e.nodeVersion?[`echo "[NODE] Switching to Node ${e.nodeVersion}..."`,`CURRENT_MAJOR=$(node -e "process.stdout.write(process.version.split('.')[0].replace('v',''))" 2>/dev/null || echo "0")`,`if [ "$CURRENT_MAJOR" != "${e.nodeVersion}" ]; then`,`  curl -fsSL https://deb.nodesource.com/setup_${e.nodeVersion}.x | bash - 2>&1`,"  apt-get install -y nodejs 2>&1",'  echo "[NODE] Installed Node $(node -v)"',"else",'  echo "[NODE] Already on Node $(node -v) \u2014 no switch needed"',"fi"].join(`
+`):"",p;if(o){let E=$i.isAbsolute(o)?o:$i.resolve(process.cwd(),o);Pi.existsSync(E)?(p=Pi.readFileSync(E,"utf-8"),It.info(_i.magenta(`\u2713 Loaded preBuild hook: ${o}`))):It.warn(`preBuild script not found at ${E} \u2014 skipping`)}let m=bi.replace(/\{\{BUILD_ID\}\}/g,t).replace(/\{\{BUILD_COMMAND\}\}/g,d).replace("{{NODE_VERSION_SETUP}}",u).replace("{{ENV_VARS}}",`
 export MACH_APP_NAME="${e.appName||"App"}"
-export MACH_BUILD_PROFILE="${c}"
+export MACH_BUILD_PROFILE="${l}"
 {{ENV_VARS}}
-    `);if(e.dryRun){St.info("User Data Script (dry run):"),console.log(m);return}r.start("Requesting cloud build instance...");try{let S=await D.post("/builds/launch-android",{projectId:t,buildId:n,platform:e.platform,buildProfile:e.buildProfile,buildCommand:l,instanceType:e.instanceType,ami:e.ami,keepInstance:e.keepInstance,region:e.region,subnet:e.subnet,securityGroup:e.securityGroup,projectSecrets:i,dryRun:e.dryRun,userDataScript:m,preBuildScriptContent:p});if(S.data.status!=="success")throw new Error(S.data.message||"Failed to launch build instance");let $=S.data.instanceId;return r.stop("Build Started"),St.success(Si.green(`Build initiated on cloud instance (${$}).`)),{instanceId:$}}catch(S){r.stop("Android Build Failed");let $=S.response?.data?.message||S.message;throw new Error(`Failed to launch Android build: ${$}`)}};import{spinner as Zn,log as je}from"@clack/prompts";import ke from"chalk";import Qn from"fs";import{execSync as et}from"child_process";var bi=`#!/bin/bash
+    `);if(e.dryRun){It.info("User Data Script (dry run):"),console.log(m);return}r.start("Requesting cloud build instance...");try{let E=await $.post("/builds/launch-android",{projectId:n,buildId:t,platform:e.platform,buildProfile:e.buildProfile,buildCommand:d,instanceType:e.instanceType,ami:e.ami,keepInstance:e.keepInstance,region:e.region,subnet:e.subnet,securityGroup:e.securityGroup,projectSecrets:i,dryRun:e.dryRun,userDataScript:m,preBuildScriptContent:p});if(E.data.status!=="success")throw new Error(E.data.message||"Failed to launch build instance");let P=E.data.instanceId;return r.stop("Build Started"),It.success(_i.green(`Build initiated on cloud instance (${P}).`)),{instanceId:P}}catch(E){r.stop("Android Build Failed");let P=E.response?.data?.message||E.message;throw new Error(`Failed to launch Android build: ${P}`)}};import{spinner as uo,log as ze}from"@clack/prompts";import Le from"chalk";import po from"fs";import{execSync as nt}from"child_process";var Ri=`#!/bin/bash
 # --- Mach Cloud Build Script (iOS) ---
 # All S3 operations use presigned URLs via curl \u2014 zero AWS credentials on Mac.
 
@@ -926,57 +926,57 @@ touch done
 if [ ! -z "$PRESIGNED_DONE_MARKER" ]; then
   curl -X PUT -T done "$PRESIGNED_DONE_MARKER" --silent
 fi
-`;var _i=async(e,n,i={},t)=>{let o=Zn();e.sshHost||(e.sshHost="localhost",je.message(ke.yellow("No SSH host provided, defaulting to localhost."))),o.start(`Connecting to remote Mac at ${ke.cyan(e.sshHost)}...`);let r=e.sshUser||process.env.USER||"ubuntu",c=e.sshKey,a=`${r}@${e.sshHost}`,s=`ssh ${c?`-i ${c}`:""} -o StrictHostKeyChecking=no ${a}`,d=`scp ${c?`-i ${c}`:""} -o StrictHostKeyChecking=no`;try{let l=r==="ubuntu"?"/home/ubuntu":`/Users/${r}`,u=(i.PROJECT_ID||"default_project").replace(/[^a-zA-Z0-9-_]/g,"_"),p=`${l}/${f.remoteWorkspacesDir}/${u}`;o.message(`Preparing stable workspace: ${p}...`),et(`${s} "mkdir -p ${p}"`,{stdio:"inherit"}),o.message("Transferring source code...");let m=`/tmp/${f.nameLower}-source-${n}.zip`;et(`${d} ${m} ${a}:${p}/source.zip`,{stdio:"inherit"});let S=e.iosApiKeyPath?`${p}/api_key.p8`:"",$="";e.iosApiKeyPath&&(o.message("Uploading App Store Connect API key..."),et(`${d} ${e.iosApiKeyPath} ${a}:${S}`),e.iosApiKeyId&&e.iosApiKeyIssuer&&($=`-authenticationKeyID ${e.iosApiKeyId} -authenticationKeyIssuerID ${e.iosApiKeyIssuer} -authenticationKeyPath ${S}`));let v={};if(t)try{let A=await D.post(`/builds/${t}/${n}/build-urls`,{platform:"ios"});A.data.status==="success"&&(v=A.data.urls)}catch(A){je.warn(ke.yellow(`Could not fetch build URLs: ${A.message}`))}let O="";if(v.credentials&&v.credentials.length>0)for(let A of v.credentials)A.type==="p12"?O+=`curl -sf -o "$CERT_DIR/${A.name}" "${A.downloadUrl}" || true
-`:A.type==="mobileprovision"&&(O+=`curl -sf -o "$PROV_TEMP/${A.name}" "${A.downloadUrl}" || true
+`;var wi=async(e,t,i={},n)=>{let o=uo();e.sshHost||(e.sshHost="localhost",ze.message(Le.yellow("No SSH host provided, defaulting to localhost."))),o.start(`Connecting to remote Mac at ${Le.cyan(e.sshHost)}...`);let r=e.sshUser||process.env.USER||"ubuntu",l=e.sshKey,a=`${r}@${e.sshHost}`,s=`ssh ${l?`-i ${l}`:""} -o StrictHostKeyChecking=no ${a}`,c=`scp ${l?`-i ${l}`:""} -o StrictHostKeyChecking=no`;try{let d=r==="ubuntu"?"/home/ubuntu":`/Users/${r}`,u=(i.PROJECT_ID||"default_project").replace(/[^a-zA-Z0-9-_]/g,"_"),p=`${d}/${f.remoteWorkspacesDir}/${u}`;o.message(`Preparing stable workspace: ${p}...`),nt(`${s} "mkdir -p ${p}"`,{stdio:"inherit"}),o.message("Transferring source code...");let m=`/tmp/${f.nameLower}-source-${t}.zip`;nt(`${c} ${m} ${a}:${p}/source.zip`,{stdio:"inherit"});let E=e.iosApiKeyPath?`${p}/api_key.p8`:"",P="";e.iosApiKeyPath&&(o.message("Uploading App Store Connect API key..."),nt(`${c} ${e.iosApiKeyPath} ${a}:${E}`),e.iosApiKeyId&&e.iosApiKeyIssuer&&(P=`-authenticationKeyID ${e.iosApiKeyId} -authenticationKeyIssuerID ${e.iosApiKeyIssuer} -authenticationKeyPath ${E}`));let O={};if(n)try{let y=await $.post(`/builds/${n}/${t}/build-urls`,{platform:"ios"});y.data.status==="success"&&(O=y.data.urls)}catch(y){ze.warn(Le.yellow(`Could not fetch build URLs: ${y.message}`))}let N="";if(O.credentials&&O.credentials.length>0)for(let y of O.credentials)y.type==="p12"?N+=`curl -sf -o "$CERT_DIR/${y.name}" "${y.downloadUrl}" || true
+`:y.type==="mobileprovision"&&(N+=`curl -sf -o "$PROV_TEMP/${y.name}" "${y.downloadUrl}" || true
 `);o.message("Generating macOS build script...");let k=process.env.CODEARTIFACT_AUTH_TOKEN?`export CODEARTIFACT_AUTH_TOKEN="${process.env.CODEARTIFACT_AUTH_TOKEN}"
-`:"";if(i)for(let[A,b]of Object.entries(i)){let C=b.replace(/"/g,'\\"').replace(/\$/g,"\\$").replace(/`/g,"\\`");k+=`export ${A}="${C}"
-`}let x=[k,v.logUpload?`export PRESIGNED_LOG_UPLOAD="${v.logUpload}"`:"",v.doneMarker?`export PRESIGNED_DONE_MARKER="${v.doneMarker}"`:"",v.cacheDerivedDataDownload?`export PRESIGNED_CACHE_DD_DOWNLOAD="${v.cacheDerivedDataDownload}"`:"",v.cacheDerivedDataUpload?`export PRESIGNED_CACHE_DD_UPLOAD="${v.cacheDerivedDataUpload}"`:"",v.cacheNodeModulesDownload?`export PRESIGNED_CACHE_NODE_DOWNLOAD="${v.cacheNodeModulesDownload}"`:"",v.cacheNodeModulesUpload?`export PRESIGNED_CACHE_NODE_UPLOAD="${v.cacheNodeModulesUpload}"`:"",v.cachePodsDownload?`export PRESIGNED_CACHE_PODS_DOWNLOAD="${v.cachePodsDownload}"`:"",v.cachePodsUpload?`export PRESIGNED_CACHE_PODS_UPLOAD="${v.cachePodsUpload}"`:"",v.artifactIpaUpload?`export PRESIGNED_ARTIFACT_IPA_UPLOAD="${v.artifactIpaUpload}"`:"",v.artifactAppZipUpload?`export PRESIGNED_ARTIFACT_APP_ZIP_UPLOAD="${v.artifactAppZipUpload}"`:"",`export BUILD_ID="${n}"`,`export ${f.envPrefix}PROJECT_ID="${u}"`,i.MATCH_ENCRYPTION_PASSPHRASE?`export MATCH_PASSWORD="${i.MATCH_ENCRYPTION_PASSPHRASE}"`:"",i.APPLE_TEAM_ID?`export FASTLANE_TEAM_ID="${i.APPLE_TEAM_ID}"`:"",`export MATCH_KEYCHAIN_NAME="${f.credentialsKeychain}"`,`export MATCH_KEYCHAIN_PASSWORD="${f.keychainPassword}"`].filter(Boolean).join(`
+`:"";if(i)for(let[y,b]of Object.entries(i)){let v=b.replace(/"/g,'\\"').replace(/\$/g,"\\$").replace(/`/g,"\\`");k+=`export ${y}="${v}"
+`}let x=[k,O.logUpload?`export PRESIGNED_LOG_UPLOAD="${O.logUpload}"`:"",O.doneMarker?`export PRESIGNED_DONE_MARKER="${O.doneMarker}"`:"",O.cacheDerivedDataDownload?`export PRESIGNED_CACHE_DD_DOWNLOAD="${O.cacheDerivedDataDownload}"`:"",O.cacheDerivedDataUpload?`export PRESIGNED_CACHE_DD_UPLOAD="${O.cacheDerivedDataUpload}"`:"",O.cacheNodeModulesDownload?`export PRESIGNED_CACHE_NODE_DOWNLOAD="${O.cacheNodeModulesDownload}"`:"",O.cacheNodeModulesUpload?`export PRESIGNED_CACHE_NODE_UPLOAD="${O.cacheNodeModulesUpload}"`:"",O.cachePodsDownload?`export PRESIGNED_CACHE_PODS_DOWNLOAD="${O.cachePodsDownload}"`:"",O.cachePodsUpload?`export PRESIGNED_CACHE_PODS_UPLOAD="${O.cachePodsUpload}"`:"",O.artifactIpaUpload?`export PRESIGNED_ARTIFACT_IPA_UPLOAD="${O.artifactIpaUpload}"`:"",O.artifactAppZipUpload?`export PRESIGNED_ARTIFACT_APP_ZIP_UPLOAD="${O.artifactAppZipUpload}"`:"",`export BUILD_ID="${t}"`,`export ${f.envPrefix}PROJECT_ID="${u}"`,i.MATCH_ENCRYPTION_PASSPHRASE?`export MATCH_PASSWORD="${i.MATCH_ENCRYPTION_PASSPHRASE}"`:"",i.APPLE_TEAM_ID?`export FASTLANE_TEAM_ID="${i.APPLE_TEAM_ID}"`:"",`export MATCH_KEYCHAIN_NAME="${f.credentialsKeychain}"`,`export MATCH_KEYCHAIN_PASSWORD="${f.keychainPassword}"`].filter(Boolean).join(`
 `),I=e.nodeVersion?[`echo "[NODE] Switching to Node ${e.nodeVersion}..."`,'export NVM_DIR="$HOME/.nvm"','[ -s "$NVM_DIR/nvm.sh" ] && . "$NVM_DIR/nvm.sh" --no-use',`nvm install ${e.nodeVersion} 2>/dev/null || true`,`nvm use ${e.nodeVersion} --silent`,`export PATH="$NVM_DIR/versions/node/$(nvm version ${e.nodeVersion})/bin:$PATH"`,'echo "[NODE] Now using: $(node -v) at $(which node)"'].join(`
-`):"",M=bi,g={"{{REMOTE_DIR}}":p,"{{ENV_VARS}}":x,"{{CREDENTIAL_DOWNLOADS}}":O,"{{IOS_SCHEME}}":e.iosScheme||"","{{IOS_CONFIG}}":e.iosConfiguration||"Release","{{TEAM_ID}}":e.iosTeamId||"","{{AUTH_PARAMS}}":$,"{{IS_SIMULATOR}}":e.simulator?"true":"false","{{BUILD_ID}}":n,"{{EXPORT_METHOD}}":e.iosExportMethod||"ad-hoc","{{NODE_VERSION_SETUP}}":I};Object.entries(g).forEach(([A,b])=>{M=M.split(A).join(b)});let P=`/tmp/${f.nameLower}-mac-build-${n}.sh`;if(Qn.writeFileSync(P,M),et(`${d} ${P} ${a}:${p}/build.sh`),o.stop("Remote script uploaded."),je.info(ke.cyan("Executing remote build. This might take a while...")),et(`${s} "bash ${p}/build.sh"`,{stdio:"inherit"}),o.stop("Remote build finished!"),t){o.start("Fetching artifact links...");try{let b=(await D.get(`/builds/${t}/${n}/artifacts`)).data.artifacts||[],C=e.simulator===!0;if(b.length===0&&!C)throw o.stop("Build Failed!"),new Error("Build completed but no artifacts were generated. Check build logs for errors.");if(o.stop("Build Successful!"),b.length>0){je.success("Build Artifacts Ready:");for(let H of b)console.log(`
-${ke.yellow(H.name)}:
-${ke.cyan(H.downloadUrl)}`);console.log(`
-${ke.dim("Note: Links are valid for 7 days.")}`)}else C&&je.warn("Simulator build completed. No artifacts uploaded.")}catch(A){o.stop("Could not fetch artifacts"),je.warn(ke.yellow(`Artifact listing failed: ${A.message}`))}}}catch(l){throw o.stop("iOS Build Failed"),l}};import eo from"crypto";import tt from"axios";async function $i(e,n){try{let i=await to(n),o=(await tt.post(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${e}/edits`,{},{headers:{Authorization:`Bearer ${i}`,Connection:"close"}})).data.id,r=0,a=(await tt.get(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${e}/edits/${o}/tracks`,{headers:{Authorization:`Bearer ${i}`,Connection:"close"}})).data.tracks||[];for(let s of a)if(s.releases){for(let d of s.releases)if(d.versionCodes)for(let l of d.versionCodes){let u=parseInt(l,10);u>r&&(r=u)}}try{let d=(await tt.get(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${e}/edits/${o}/bundles`,{headers:{Authorization:`Bearer ${i}`,Connection:"close"}})).data.bundles||[];for(let l of d)l.versionCode&&l.versionCode>r&&(r=l.versionCode)}catch{}try{let d=(await tt.get(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${e}/edits/${o}/apks`,{headers:{Authorization:`Bearer ${i}`,Connection:"close"}})).data.apks||[];for(let l of d)l.versionCode&&l.versionCode>r&&(r=l.versionCode)}catch{}return r}catch(i){let t=i.response?.data?.error?.message||i.message;throw new Error(`Google Play API Error: ${t}`)}}async function to(e){let n=Math.floor(Date.now()/1e3),i=n+3600,t={alg:"RS256",typ:"JWT"},o={iss:e.client_email,sub:e.client_email,aud:"https://oauth2.googleapis.com/token",iat:n,exp:i,scope:"https://www.googleapis.com/auth/androidpublisher"},r=Buffer.from(JSON.stringify(t)).toString("base64url"),c=Buffer.from(JSON.stringify(o)).toString("base64url"),a=`${r}.${c}`,s=eo.createSign("RSA-SHA256");s.update(a);let d=s.sign(e.private_key,"base64url"),l=`${a}.${d}`;return(await tt.post("https://oauth2.googleapis.com/token",{grant_type:"urn:ietf:params:oauth:grant-type:jwt-bearer",assertion:l},{headers:{Connection:"close"}})).data.access_token}import{spinner as Et,log as E,isCancel as At,confirm as io,select as Bt}from"@clack/prompts";import h from"chalk";import y from"fs";import _ from"path";import{execSync as G,spawn as Di}from"child_process";import be from"os";import no from"crypto";var Ri=(e,n)=>n.filter(i=>y.existsSync(_.join(e,i))).reduce((i,t)=>i.update(y.readFileSync(_.join(e,t))),no.createHash("sha256")).digest("hex").slice(0,16),oo=e=>Ri(e,["package.json","yarn.lock","package-lock.json","bun.lockb"]),ro=e=>Ri(e,["Podfile","Podfile.lock"]),so=e=>{let n=_.join(e,"fingerprint.json");try{return JSON.parse(y.readFileSync(n,"utf-8"))}catch{return{}}},Pi=(e,n)=>{y.mkdirSync(e,{recursive:!0}),y.writeFileSync(_.join(e,"fingerprint.json"),JSON.stringify(n,null,2))},ao=7200*1e3,co=(e,n)=>{y.mkdirSync(e,{recursive:!0});let i=_.join(e,"build.lock");if(y.existsSync(i))try{let t=JSON.parse(y.readFileSync(i,"utf-8")),o=Date.now()-(t.timestamp||0);if(o<ao)throw new Error(`Another build is already running for this project (build ${t.buildId}, started ${Math.round(o/6e4)}m ago). Cancel it from the dashboard first, or wait for it to complete.`)}catch(t){if(t.message.includes("Another build"))throw t}y.writeFileSync(i,JSON.stringify({buildId:n,pid:process.pid,timestamp:Date.now()}))},lo=(e,n)=>{let i=_.join(e,"build.lock");try{y.existsSync(i)&&JSON.parse(y.readFileSync(i,"utf-8")).buildId===n&&y.unlinkSync(i)}catch{}},Re=(e,n,i=process.cwd(),t={},o,r)=>new Promise((c,a)=>{let s=["/opt/homebrew/bin","/usr/local/bin","/usr/bin","/bin","/usr/sbin","/sbin",_.join(be.homedir(),".npm-global/bin")],l=[...(process.env.PATH||"").split(":"),...s].filter((S,$,v)=>S&&v.indexOf(S)===$).join(":");process.env[`${f.envPrefix}DEBUG`]&&console.log(h.magenta(`[${f.nameUpper}_DEBUG] Execution PATH: ${l}`));let u={...process.env,...t,PATH:l,LANG:"en_US.UTF-8",LC_ALL:"en_US.UTF-8"};o&&process.env[`${f.envPrefix}DEBUG`]&&(o(h.magenta(`[ENVIRONMENT] node: ${process.execPath}
-`)),o(h.magenta(`[ENVIRONMENT] PATH: ${l}
-`)),o(h.magenta(`[ENVIRONMENT] command: ${e} ${n.join(" ")}
-`)));let p=e;if(["node","npm","npx","pod"].includes(e)){let S=_.dirname(process.execPath),$=_.join(S,e);y.existsSync($)&&(p=$,o&&o(h.dim(`[EXEC] Using absolute path: ${p}
-`)))}let m=Di(p,n,{stdio:"pipe",cwd:i,shell:!0,env:u,detached:process.platform!=="win32"});if(r){if(r.aborted){if(m.pid)try{process.kill(-m.pid,"SIGTERM")}catch{m.kill()}return a(new Error("Command aborted"))}r.addEventListener("abort",()=>{if(m.pid)try{process.kill(-m.pid,"SIGTERM")}catch{m.kill()}a(new Error("Command aborted"))})}m.stdout.on("data",S=>{let $=S.toString();process.stdout.write($),o&&o($)}),m.stderr.on("data",S=>{let $=S.toString();process.stderr.write($),o&&o($)}),m.on("close",S=>{S===0?c(S):a(new Error(`Command failed with code ${S}: ${e} ${n.join(" ")}`))}),m.on("error",S=>a(S))}),uo=e=>{let n=Math.floor(e/1e3%60),i=Math.floor(e/(1e3*60)%60),t=Math.floor(e/(1e3*60*60)%24),o=[];return t>0&&o.push(`${t}h`),i>0&&o.push(`${i}m`),(n>0||o.length===0)&&o.push(`${n}s`),o.join(" ")},Ke=(e,n)=>{let i=[];try{if(!y.existsSync(e))return i;let t=y.readdirSync(e);for(let o of t){let r=_.join(e,o);try{let c=y.statSync(r);if(n.some(s=>o.endsWith(s))){i.push(_.resolve(r));continue}c.isDirectory()&&(i=i.concat(Ke(r,n)))}catch{}}}catch{}return i},Gt=async(e,n,i={},t,o={})=>{let r=Et(),c=Date.now(),a=e.platform,s=e.buildProfile||"production",d=async(g,P={})=>{if(t)for(let A=1;A<=3;A++)try{await D.patch(`/builds/${t}/${n}`,{status:g,...P});return}catch(b){let C=b?.response?.data?.message||b?.message||String(b);console.error(`[reportStatus] attempt ${A}/3 failed (status=${g}): ${C}`),A<3&&await new Promise(H=>setTimeout(H,2e3))}},l=new AbortController,{signal:u}=l,p=null;t&&(p=setInterval(async()=>{try{(await D.get(`/builds/${t}/${n}`)).data.status==="cancelled"&&(E.warn(h.yellow(`
-\u{1F6D1} Build cancelled from dashboard. Terminating...`)),l.abort(),p&&clearInterval(p))}catch{}},5e3));let m=_.join(process.cwd(),".mach-cache"),S="setup",$="",v=null,O=async()=>{if(!$||!t)return;let g=$;$="";try{let P=g;Object.values(i).forEach(A=>{if(A&&A.length>5){let b=A.replace(/[.*+?^${}()|[\]\\]/g,"\\$&");P=P.replace(new RegExp(b,"g"),"[SECRET]")}}),await D.post(`/builds/${t}/${n}/logs`,{log:P,step:S})}catch{}},k=async()=>{v&&(clearTimeout(v),v=null),await O(),lo(m,n),p&&(clearInterval(p),p=null);try{let g=_.join(be.tmpdir(),`${f.buildPrefix}-${n}.keychain-db`);y.existsSync(g)&&(G(`security delete-keychain "${g}"`,{stdio:"ignore"}),E.info(h.dim("\u{1F511} Build keychain deleted.")))}catch{}try{let g=_.join(be.homedir(),"Library/MobileDevice/Provisioning Profiles");if(y.existsSync(g)){let P=y.readdirSync(g).filter(A=>A.includes(n)||A.startsWith(`${f.nameLower}-temp-${n}`));for(let A of P)y.unlinkSync(_.join(g,A))}}catch{}},x=async g=>{t&&($+=g,$.length>=8192?(v&&(clearTimeout(v),v=null),await O()):v||(v=setTimeout(()=>{v=null,O()},2e3)))},I=async g=>{S=g,await x(`[STEP_START:${g}] ${Math.floor(Date.now()/1e3)}
-`)},M=async(g,P,A,b)=>await Re(g,P,A,b,C=>{x(C)},u);E.info(h.blue(`\u{1F680} Starting local build for ${a} (${s})...`));try{co(m,n)}catch(g){throw await d("failed",{error:g.message}),g}if(await d("building"),await I("setup"),t&&a==="ios"&&!e.simulator)try{let g=parseInt(i.BUILD_NUMBER||"0",10),P=await D.post(`/projects/${t}/next-build-number`,{platform:"ios",startFrom:g});P.data.status==="success"&&(i.BUILD_NUMBER=String(P.data.buildNumber),E.info(h.dim(`Auto build number: ${i.BUILD_NUMBER}`)),await x(`[BUILD_NUMBER] ${i.BUILD_NUMBER}
-`))}catch(g){E.warn(h.yellow(`Could not fetch auto build number: ${g.message}`))}await I("lock"),e.developmentClient?(E.info(h.blue("\u2139\uFE0F  Configuring build to INCLUDE expo-dev-client (Development Client mode)...")),delete process.env.EXPO_NO_DEV_CLIENT,delete process.env.EXPO_AUTOLINKING_EXCLUDE):(E.info(h.blue("\u2139\uFE0F  Configuring build to EXCLUDE expo-dev-client (Production/Staging mode)...")),process.env.EXPO_NO_DEV_CLIENT="1",process.env.EXPO_AUTOLINKING_EXCLUDE="expo-dev-client");try{await I("clone"),E.info(h.dim("Preparing source...")),await I("read_config");let g=_.join(process.cwd(),f.configFileName);if(y.existsSync(g)){let U=JSON.parse(y.readFileSync(g,"utf-8"))?.build?.[s]||{};await x(`[CONFIG] Profile: ${s}, distribution: ${U.distribution||"not set"}, simulator: ${U.simulator||!1}
-`)}if(await I("read_package"),e.nodeVersion){let L=process.env.NVM_DIR||_.join(be.homedir(),".nvm"),U=_.join(L,"versions","node"),q;if(y.existsSync(U)){let T=y.readdirSync(U).sort().reverse(),ne=e.nodeVersion.startsWith("v")?e.nodeVersion:`v${e.nodeVersion}`,V=T.find(J=>J===ne||J.startsWith(ne+".")||J.startsWith(`v${e.nodeVersion}.`));V&&(q=_.join(U,V,"bin"))}if(q&&y.existsSync(q)){let T=process.env.PATH||"";process.env.PATH=`${q}:${T}`,await x(`[NODE] Switched to Node ${e.nodeVersion} \u2014 using ${q}
-`),E.info(h.green(`\u2713 Node switched to ${e.nodeVersion} (${q})`))}else await x(`[NODE] Warning: Node ${e.nodeVersion} not found in nvm. Run: nvm install ${e.nodeVersion} on the build machine.
-`),E.warn(h.yellow(`Node ${e.nodeVersion} not found in nvm \u2014 using system default`))}await I("deps"),r.start("Checking dependencies...");let P=so(m),A=oo(process.cwd()),b=y.existsSync("node_modules"),C=y.existsSync("yarn.lock"),H=y.existsSync("bun.lockb");b&&P.node&&P.node!==A&&(r.stop("Dependency fingerprint changed \u2014 clearing node_modules for clean install..."),await x(`[CACHE] package.json/lockfile changed \u2014 wiping node_modules
-`),y.rmSync(_.join(process.cwd(),"node_modules"),{recursive:!0,force:!0}),b=!1);let B="npm",N=["install","--prefer-offline"];C?(B="yarn",N=["install","--prefer-offline"]):H&&(B="bun",N=["install"]),b?r.stop("Cached node_modules found. Syncing dependencies..."):r.stop("No cached dependencies. Running fresh install..."),e.preBuild&&(E.info(h.blue("Running pre-install hook...")),E.info(h.dim(`> ${e.preBuild}`)),await I("prebuild"),await M("bash",[e.preBuild],process.cwd(),i)),E.info(h.dim(`Running ${B} ${N.join(" ")}...`)),await M(B,N,process.cwd(),i),P.node=A,Pi(m,P);let F=JSON.parse(y.readFileSync("package.json","utf-8")),Z=F.dependencies?.expo||F.devDependencies?.expo,K=e.iosBundleIdentifier||"",j=e.name||"";if(Z){r.start(`Enforcing ${f.name} configuration...`);let L=_.join(process.cwd(),"app.json"),U=null;if(y.existsSync(L)){U=y.readFileSync(L,"utf-8");let T=JSON.parse(U);T.expo=T.expo||{},j||(j=T.expo.name||""),a==="ios"&&!K&&(K=T.expo?.ios?.bundleIdentifier||""),e.name&&(T.expo.name=e.name),e.scheme&&(T.expo.scheme=e.scheme),a==="ios"&&e.iosBundleIdentifier?(T.expo.ios=T.expo.ios||{},T.expo.ios.bundleIdentifier=e.iosBundleIdentifier):a==="android"&&e.androidPackage&&(T.expo.android=T.expo.android||{},T.expo.android.package=e.androidPackage),y.writeFileSync(L,JSON.stringify(T,null,2))}let q=["exec","--","expo","prebuild","--platform",a,"--no-install"];try{if(await I("prebuild"),await M("npm",q,process.cwd(),i),a==="ios"&&y.existsSync("ios")){await I("pods"),E.info(h.blue("Running pod install..."));try{let T=_.resolve("ios"),ne=_.join(T,"Podfile");if(!y.existsSync(ne))throw new Error("ios/Podfile not found. Skipping pod install.");let V=y.readFileSync(ne,"utf-8"),J=e.iosDeploymentTarget||"13.4";if(!e.developmentClient&&(E.info(h.blue("\u2139\uFE0F  Patching Podfile to EXCLUDE expo-dev-client...")),V.includes("use_expo_modules!")&&!V.includes("exclude:"))){let le=/use_expo_modules!(\s*)$/m;le.test(V)?V=V.replace(le,'use_expo_modules!(exclude: ["expo-dev-client"])$1'):V=V.replace("use_expo_modules!",'use_expo_modules!(exclude: ["expo-dev-client"])')}let se=`
+`):"",M=Ri,g={"{{REMOTE_DIR}}":p,"{{ENV_VARS}}":x,"{{CREDENTIAL_DOWNLOADS}}":N,"{{IOS_SCHEME}}":e.iosScheme||"","{{IOS_CONFIG}}":e.iosConfiguration||"Release","{{TEAM_ID}}":e.iosTeamId||"","{{AUTH_PARAMS}}":P,"{{IS_SIMULATOR}}":e.simulator?"true":"false","{{BUILD_ID}}":t,"{{EXPORT_METHOD}}":e.iosExportMethod||"ad-hoc","{{NODE_VERSION_SETUP}}":I};Object.entries(g).forEach(([y,b])=>{M=M.split(y).join(b)});let D=`/tmp/${f.nameLower}-mac-build-${t}.sh`;if(po.writeFileSync(D,M),nt(`${c} ${D} ${a}:${p}/build.sh`),o.stop("Remote script uploaded."),ze.info(Le.cyan("Executing remote build. This might take a while...")),nt(`${s} "bash ${p}/build.sh"`,{stdio:"inherit"}),o.stop("Remote build finished!"),n){o.start("Fetching artifact links...");try{let b=(await $.get(`/builds/${n}/${t}/artifacts`)).data.artifacts||[],v=e.simulator===!0;if(b.length===0&&!v)throw o.stop("Build Failed!"),new Error("Build completed but no artifacts were generated. Check build logs for errors.");if(o.stop("Build Successful!"),b.length>0){ze.success("Build Artifacts Ready:");for(let B of b)console.log(`
+${Le.yellow(B.name)}:
+${Le.cyan(B.downloadUrl)}`);console.log(`
+${Le.dim("Note: Links are valid for 7 days.")}`)}else v&&ze.warn("Simulator build completed. No artifacts uploaded.")}catch(y){o.stop("Could not fetch artifacts"),ze.warn(Le.yellow(`Artifact listing failed: ${y.message}`))}}}catch(d){throw o.stop("iOS Build Failed"),d}};import fo from"crypto";import ot from"axios";async function vi(e,t){try{let i=await mo(t),o=(await ot.post(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${e}/edits`,{},{headers:{Authorization:`Bearer ${i}`,Connection:"close"}})).data.id,r=0,a=(await ot.get(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${e}/edits/${o}/tracks`,{headers:{Authorization:`Bearer ${i}`,Connection:"close"}})).data.tracks||[];for(let s of a)if(s.releases){for(let c of s.releases)if(c.versionCodes)for(let d of c.versionCodes){let u=parseInt(d,10);u>r&&(r=u)}}try{let c=(await ot.get(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${e}/edits/${o}/bundles`,{headers:{Authorization:`Bearer ${i}`,Connection:"close"}})).data.bundles||[];for(let d of c)d.versionCode&&d.versionCode>r&&(r=d.versionCode)}catch{}try{let c=(await ot.get(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${e}/edits/${o}/apks`,{headers:{Authorization:`Bearer ${i}`,Connection:"close"}})).data.apks||[];for(let d of c)d.versionCode&&d.versionCode>r&&(r=d.versionCode)}catch{}return r}catch(i){let n=i.response?.data?.error?.message||i.message;throw new Error(`Google Play API Error: ${n}`)}}async function mo(e){let t=Math.floor(Date.now()/1e3),i=t+3600,n={alg:"RS256",typ:"JWT"},o={iss:e.client_email,sub:e.client_email,aud:"https://oauth2.googleapis.com/token",iat:t,exp:i,scope:"https://www.googleapis.com/auth/androidpublisher"},r=Buffer.from(JSON.stringify(n)).toString("base64url"),l=Buffer.from(JSON.stringify(o)).toString("base64url"),a=`${r}.${l}`,s=fo.createSign("RSA-SHA256");s.update(a);let c=s.sign(e.private_key,"base64url"),d=`${a}.${c}`;return(await ot.post("https://oauth2.googleapis.com/token",{grant_type:"urn:ietf:params:oauth:grant-type:jwt-bearer",assertion:d},{headers:{Connection:"close"}})).data.access_token}import{spinner as bt,log as A,isCancel as _t,confirm as go,select as jt}from"@clack/prompts";import h from"chalk";import S from"fs";import _ from"path";import{execSync as j,spawn as Ci}from"child_process";import be from"os";import ho from"crypto";var Ni=(e,t)=>t.filter(i=>S.existsSync(_.join(e,i))).reduce((i,n)=>i.update(S.readFileSync(_.join(e,n))),ho.createHash("sha256")).digest("hex").slice(0,16),yo=e=>Ni(e,["package.json","yarn.lock","package-lock.json","bun.lockb"]),So=e=>Ni(e,["Podfile","Podfile.lock"]),Eo=e=>{let t=_.join(e,"fingerprint.json");try{return JSON.parse(S.readFileSync(t,"utf-8"))}catch{return{}}},Oi=(e,t)=>{S.mkdirSync(e,{recursive:!0}),S.writeFileSync(_.join(e,"fingerprint.json"),JSON.stringify(t,null,2))},Ao=7200*1e3,Io=(e,t)=>{S.mkdirSync(e,{recursive:!0});let i=_.join(e,"build.lock");if(S.existsSync(i))try{let n=JSON.parse(S.readFileSync(i,"utf-8")),o=Date.now()-(n.timestamp||0);if(o<Ao)throw new Error(`Another build is already running for this project (build ${n.buildId}, started ${Math.round(o/6e4)}m ago). Cancel it from the dashboard first, or wait for it to complete.`)}catch(n){if(n.message.includes("Another build"))throw n}S.writeFileSync(i,JSON.stringify({buildId:t,pid:process.pid,timestamp:Date.now()}))},bo=(e,t)=>{let i=_.join(e,"build.lock");try{S.existsSync(i)&&JSON.parse(S.readFileSync(i,"utf-8")).buildId===t&&S.unlinkSync(i)}catch{}},ve=(e,t,i=process.cwd(),n={},o,r)=>new Promise((l,a)=>{let s=["/opt/homebrew/bin","/usr/local/bin","/usr/bin","/bin","/usr/sbin","/sbin",_.join(be.homedir(),".npm-global/bin")],d=[...(process.env.PATH||"").split(":"),...s].filter((E,P,O)=>E&&O.indexOf(E)===P).join(":");process.env[`${f.envPrefix}DEBUG`]&&console.log(h.magenta(`[${f.nameUpper}_DEBUG] Execution PATH: ${d}`));let u={...process.env,...n,PATH:d,LANG:"en_US.UTF-8",LC_ALL:"en_US.UTF-8"};o&&process.env[`${f.envPrefix}DEBUG`]&&(o(h.magenta(`[ENVIRONMENT] node: ${process.execPath}
+`)),o(h.magenta(`[ENVIRONMENT] PATH: ${d}
+`)),o(h.magenta(`[ENVIRONMENT] command: ${e} ${t.join(" ")}
+`)));let p=e;if(["node","npm","npx","pod"].includes(e)){let E=_.dirname(process.execPath),P=_.join(E,e);S.existsSync(P)&&(p=P,o&&o(h.dim(`[EXEC] Using absolute path: ${p}
+`)))}let m=Ci(p,t,{stdio:"pipe",cwd:i,shell:!0,env:u,detached:process.platform!=="win32"});if(r){if(r.aborted){if(m.pid)try{process.kill(-m.pid,"SIGTERM")}catch{m.kill()}return a(new Error("Command aborted"))}r.addEventListener("abort",()=>{if(m.pid)try{process.kill(-m.pid,"SIGTERM")}catch{m.kill()}a(new Error("Command aborted"))})}m.stdout.on("data",E=>{let P=E.toString();process.stdout.write(P),o&&o(P)}),m.stderr.on("data",E=>{let P=E.toString();process.stderr.write(P),o&&o(P)}),m.on("close",E=>{E===0?l(E):a(new Error(`Command failed with code ${E}: ${e} ${t.join(" ")}`))}),m.on("error",E=>a(E))}),_o=e=>{let t=Math.floor(e/1e3%60),i=Math.floor(e/(1e3*60)%60),n=Math.floor(e/(1e3*60*60)%24),o=[];return n>0&&o.push(`${n}h`),i>0&&o.push(`${i}m`),(t>0||o.length===0)&&o.push(`${t}s`),o.join(" ")},Ve=(e,t)=>{let i=[];try{if(!S.existsSync(e))return i;let n=S.readdirSync(e);for(let o of n){let r=_.join(e,o);try{let l=S.statSync(r);if(t.some(s=>o.endsWith(s))){i.push(_.resolve(r));continue}l.isDirectory()&&(i=i.concat(Ve(r,t)))}catch{}}}catch{}return i},Gt=async(e,t,i={},n,o={})=>{let r=bt(),l=Date.now(),a=e.platform,s=e.buildProfile||"production",c=async(g,D={})=>{if(n)for(let y=1;y<=3;y++)try{await $.patch(`/builds/${n}/${t}`,{status:g,...D});return}catch(b){let v=b?.response?.data?.message||b?.message||String(b);console.error(`[reportStatus] attempt ${y}/3 failed (status=${g}): ${v}`),y<3&&await new Promise(B=>setTimeout(B,2e3))}},d=new AbortController,{signal:u}=d,p=null;n&&(p=setInterval(async()=>{try{(await $.get(`/builds/${n}/${t}`)).data.status==="cancelled"&&(A.warn(h.yellow(`
+\u{1F6D1} Build cancelled from dashboard. Terminating...`)),d.abort(),p&&clearInterval(p))}catch{}},5e3));let m=_.join(process.cwd(),".mach-cache"),E="setup",P="",O=null,N=async()=>{if(!P||!n)return;let g=P;P="";try{let D=g;Object.values(i).forEach(y=>{if(y&&y.length>5){let b=y.replace(/[.*+?^${}()|[\]\\]/g,"\\$&");D=D.replace(new RegExp(b,"g"),"[SECRET]")}}),await $.post(`/builds/${n}/${t}/logs`,{log:D,step:E})}catch{}},k=async()=>{O&&(clearTimeout(O),O=null),await N(),bo(m,t),p&&(clearInterval(p),p=null);try{let g=_.join(be.tmpdir(),`${f.buildPrefix}-${t}.keychain-db`);S.existsSync(g)&&(j(`security delete-keychain "${g}"`,{stdio:"ignore"}),A.info(h.dim("\u{1F511} Build keychain deleted.")))}catch{}try{let g=_.join(be.homedir(),"Library/MobileDevice/Provisioning Profiles");if(S.existsSync(g)){let D=S.readdirSync(g).filter(y=>y.includes(t)||y.startsWith(`${f.nameLower}-temp-${t}`));for(let y of D)S.unlinkSync(_.join(g,y))}}catch{}},x=async g=>{n&&(P+=g,P.length>=8192?(O&&(clearTimeout(O),O=null),await N()):O||(O=setTimeout(()=>{O=null,N()},2e3)))},I=async g=>{E=g,await x(`[STEP_START:${g}] ${Math.floor(Date.now()/1e3)}
+`)},M=async(g,D,y,b)=>await ve(g,D,y,b,v=>{x(v)},u);A.info(h.blue(`\u{1F680} Starting local build for ${a} (${s})...`));try{Io(m,t)}catch(g){throw await c("failed",{error:g.message}),g}if(await c("building"),await I("setup"),n&&a==="ios"&&!e.simulator)try{let g=parseInt(i.BUILD_NUMBER||"0",10),D=await $.post(`/projects/${n}/next-build-number`,{platform:"ios",startFrom:g});D.data.status==="success"&&(i.BUILD_NUMBER=String(D.data.buildNumber),A.info(h.dim(`Auto build number: ${i.BUILD_NUMBER}`)),await x(`[BUILD_NUMBER] ${i.BUILD_NUMBER}
+`))}catch(g){A.warn(h.yellow(`Could not fetch auto build number: ${g.message}`))}await I("lock"),e.developmentClient?(A.info(h.blue("\u2139\uFE0F  Configuring build to INCLUDE expo-dev-client (Development Client mode)...")),delete process.env.EXPO_NO_DEV_CLIENT,delete process.env.EXPO_AUTOLINKING_EXCLUDE):(A.info(h.blue("\u2139\uFE0F  Configuring build to EXCLUDE expo-dev-client (Production/Staging mode)...")),process.env.EXPO_NO_DEV_CLIENT="1",process.env.EXPO_AUTOLINKING_EXCLUDE="expo-dev-client");try{await I("clone"),A.info(h.dim("Preparing source...")),await I("read_config");let g=_.join(process.cwd(),f.configFileName);if(S.existsSync(g)){let U=JSON.parse(S.readFileSync(g,"utf-8"))?.build?.[s]||{};await x(`[CONFIG] Profile: ${s}, distribution: ${U.distribution||"not set"}, simulator: ${U.simulator||!1}
+`)}if(await I("read_package"),e.nodeVersion){let L=process.env.NVM_DIR||_.join(be.homedir(),".nvm"),U=_.join(L,"versions","node"),X;if(S.existsSync(U)){let T=S.readdirSync(U).sort().reverse(),ne=e.nodeVersion.startsWith("v")?e.nodeVersion:`v${e.nodeVersion}`,Y=T.find(q=>q===ne||q.startsWith(ne+".")||q.startsWith(`v${e.nodeVersion}.`));Y&&(X=_.join(U,Y,"bin"))}if(X&&S.existsSync(X)){let T=process.env.PATH||"";process.env.PATH=`${X}:${T}`,await x(`[NODE] Switched to Node ${e.nodeVersion} \u2014 using ${X}
+`),A.info(h.green(`\u2713 Node switched to ${e.nodeVersion} (${X})`))}else await x(`[NODE] Warning: Node ${e.nodeVersion} not found in nvm. Run: nvm install ${e.nodeVersion} on the build machine.
+`),A.warn(h.yellow(`Node ${e.nodeVersion} not found in nvm \u2014 using system default`))}await I("deps"),r.start("Checking dependencies...");let D=Eo(m),y=yo(process.cwd()),b=S.existsSync("node_modules"),v=S.existsSync("yarn.lock"),B=S.existsSync("bun.lockb");b&&D.node&&D.node!==y&&(r.stop("Dependency fingerprint changed \u2014 clearing node_modules for clean install..."),await x(`[CACHE] package.json/lockfile changed \u2014 wiping node_modules
+`),S.rmSync(_.join(process.cwd(),"node_modules"),{recursive:!0,force:!0}),b=!1);let K="npm",C=["install","--prefer-offline"];v?(K="yarn",C=["install","--prefer-offline"]):B&&(K="bun",C=["install"]),b?r.stop("Cached node_modules found. Syncing dependencies..."):r.stop("No cached dependencies. Running fresh install..."),e.preBuild&&(A.info(h.blue("Running pre-install hook...")),A.info(h.dim(`> ${e.preBuild}`)),await I("prebuild"),await M("bash",[e.preBuild],process.cwd(),i)),A.info(h.dim(`Running ${K} ${C.join(" ")}...`)),await M(K,C,process.cwd(),i),D.node=y,Oi(m,D);let z=JSON.parse(S.readFileSync("package.json","utf-8")),F=z.dependencies?.expo||z.devDependencies?.expo,G=e.iosBundleIdentifier||"",H=e.name||"";if(F){r.start(`Enforcing ${f.name} configuration...`);let L=_.join(process.cwd(),"app.json"),U=null;if(S.existsSync(L)){U=S.readFileSync(L,"utf-8");let T=JSON.parse(U);T.expo=T.expo||{},H||(H=T.expo.name||""),a==="ios"&&!G&&(G=T.expo?.ios?.bundleIdentifier||""),e.name&&(T.expo.name=e.name),e.scheme&&(T.expo.scheme=e.scheme),a==="ios"&&e.iosBundleIdentifier?(T.expo.ios=T.expo.ios||{},T.expo.ios.bundleIdentifier=e.iosBundleIdentifier):a==="android"&&e.androidPackage&&(T.expo.android=T.expo.android||{},T.expo.android.package=e.androidPackage),S.writeFileSync(L,JSON.stringify(T,null,2))}let X=["exec","--","expo","prebuild","--platform",a,"--no-install"];try{if(await I("prebuild"),await M("npm",X,process.cwd(),i),a==="ios"&&S.existsSync("ios")){await I("pods"),A.info(h.blue("Running pod install..."));try{let T=_.resolve("ios"),ne=_.join(T,"Podfile");if(!S.existsSync(ne))throw new Error("ios/Podfile not found. Skipping pod install.");let Y=S.readFileSync(ne,"utf-8"),q=e.iosDeploymentTarget||"13.4";if(!e.developmentClient&&(A.info(h.blue("\u2139\uFE0F  Patching Podfile to EXCLUDE expo-dev-client...")),Y.includes("use_expo_modules!")&&!Y.includes("exclude:"))){let ce=/use_expo_modules!(\s*)$/m;ce.test(Y)?Y=Y.replace(ce,'use_expo_modules!(exclude: ["expo-dev-client"])$1'):Y=Y.replace("use_expo_modules!",'use_expo_modules!(exclude: ["expo-dev-client"])')}let ae=`
       installer.generated_projects.each do |project|
         project.targets.each do |target|
           target.build_configurations.each do |config|
-            config.build_settings['IPHONEOS_DEPLOYMENT_TARGET'] = '${J}'
+            config.build_settings['IPHONEOS_DEPLOYMENT_TARGET'] = '${q}'
           end
         end
       end
       installer.pods_project.targets.each do |target|
         target.build_configurations.each do |config|
-          config.build_settings['IPHONEOS_DEPLOYMENT_TARGET'] = '${J}'
+          config.build_settings['IPHONEOS_DEPLOYMENT_TARGET'] = '${q}'
         end
       end
-`,Ie=/post_install\s+do\s+\|installer\|/;if(Ie.test(V))E.info(h.dim(`Injecting deployment target (${J}) into existing post_install hook...`)),V=V.replace(Ie,`post_install do |installer|
-${se}`),y.writeFileSync(ne,V);else{E.info(h.dim(`Appending new post_install hook for deployment target (${J})...`));let le=`
+`,Ie=/post_install\s+do\s+\|installer\|/;if(Ie.test(Y))A.info(h.dim(`Injecting deployment target (${q}) into existing post_install hook...`)),Y=Y.replace(Ie,`post_install do |installer|
+${ae}`),S.writeFileSync(ne,Y);else{A.info(h.dim(`Appending new post_install hook for deployment target (${q})...`));let ce=`
 post_install do |installer|
-${se}
+${ae}
 end
-`;y.appendFileSync(ne,le)}let qe="/opt/homebrew/bin/pod",Ut=y.existsSync(qe)?qe:"pod",Ge=ro(T);y.existsSync(_.join(T,"Pods"))&&P.pods&&P.pods!==Ge&&(await x(`[CACHE] Podfile/Podfile.lock changed \u2014 wiping ios/Pods
-`),E.info(h.dim("Podfile fingerprint changed \u2014 clearing Pods for clean install...")),y.rmSync(_.join(T,"Pods"),{recursive:!0,force:!0})),E.info(h.dim(`Using pod command: ${Ut} in ${T}`)),await M(Ut,["install"],T,i),P.pods=Ge,Pi(m,P)}catch(T){let ne=T.message||"Unknown error";E.warn(h.yellow(`Native "pod" command failed: ${ne}`)),E.info(h.dim("Falling back to npm exec pod-install...")),E.info(h.magenta(`${f.nameUpper}_DEBUG: Executing pod-install override via npx --yes pod-install@latest`)),await M("npx",["--yes","pod-install@latest","ios"],process.cwd(),i)}if(y.existsSync("ios/Pods")){E.info(h.dim("Disabling signing for Pod targets to prevent conflicts..."));try{G(`find ios/Pods -name "project.pbxproj" -exec sed -i '' 's/buildSettings = {/buildSettings = { CODE_SIGNING_ALLOWED = NO; CODE_SIGNING_REQUIRED = NO; PROVISIONING_PROFILE_SPECIFIER = ""; EXPANDED_CODE_SIGN_IDENTITY = "";/g' {} +`,{stdio:"ignore"})}catch{}}}}finally{U&&y.writeFileSync(L,U)}r.stop(`Expo prebuild complete (${f.name} config enforced).`)}let z=[];if(a==="android")await I("build"),z=await po(e,s,i,L=>x(L),u);else if(a==="ios"){await I("signing"),E.info(h.dim("Preparing credentials..."));let L=o?.distributionType;z=await fo(e,n,s,i,t,U=>x(U),u,L,U=>I(U))}e.postBuild&&(E.info(h.blue("Running post-build hook...")),E.info(h.dim(`> ${e.postBuild}`)),await M(e.postBuild,[],process.cwd(),i));let ge=uo(Date.now()-c);if(E.success(h.green(`
-\u2713 Local build completed successfully in ${ge}`)),await d("building",{...K&&{bundleId:K},...j&&{appName:j}}),z.length>0&&(E.info(h.cyan(`
-\u{1F4E6} Generated Artifacts:`)),z.forEach(L=>{let U=_.resolve(L);E.info(h.dim(`  - ${L}`)),E.info(h.gray(`    Path: ${U}`))}),e.interactive)){let L=await io({message:"Install on connected device?"});if(!At(L)&&L){if(a==="android"){let U=z.find(q=>q.endsWith(".apk"))||z[0];await go(U,q=>x(q))}else if(a==="ios"){let U=z.find(T=>T.endsWith(".ipa"))||z.find(T=>T.endsWith(".app"))||z[0],q=Ne("ios");e.simulator?await ho(U,q||"",T=>x(T)):await yo(U,q||"",T=>x(T))}}}await I("upload");let Ce=[];for(let L of z)try{let U=_.join(be.tmpdir(),`${n}-${_.basename(L)}`);y.copyFileSync(L,U),Ce.push(U),E.info(h.dim(`  \u{1F4CB} Preserved artifact: ${_.basename(L)}`))}catch{E.warn(h.yellow(`  Failed to preserve artifact: ${_.basename(L)}`))}z=Ce,E.info(h.dim("\u{1F9F9} Cleaning workspace (preserving dependency cache)..."));try{let L=process.cwd(),U=new Set(["node_modules"]),q=y.readdirSync(L),T=0;for(let ne of q)if(!U.has(ne)){if(ne==="ios"){let V=_.join(L,"ios"),J=y.readdirSync(V);for(let se of J)if(se!=="Pods")try{y.rmSync(_.join(V,se),{recursive:!0,force:!0}),T++}catch{}continue}try{y.rmSync(_.join(L,ne),{recursive:!0,force:!0}),T++}catch{}}E.info(h.dim(`  Cleaned ${T} items. Cached: node_modules${y.existsSync(_.join(L,"ios","Pods"))?", ios/Pods":""}`)),E.info(h.green("\u{1F512} Security: No source code retained on build server. Only public dependencies cached."))}catch{E.warn(h.yellow("Post-build cleanup encountered errors (non-fatal)."))}try{let U=_.join(be.homedir(),f.workspacesDir),q=G(`df -k "${U}" | tail -1 | awk '{print $4}'`,{encoding:"utf8"}).trim(),T=parseInt(q,10)*1024;if(T<53687091200&&y.existsSync(U)){E.info(h.dim(`  \u26A0\uFE0F Low disk space (${(T/1024/1024/1024).toFixed(0)} GB free). Running cache eviction...`));let ne=_.basename(process.cwd()),V=y.readdirSync(U).filter(J=>J!==ne).map(J=>{let se=_.join(U,J);try{let Ie=y.statSync(se);return Ie.isDirectory()?{name:J,dir:se,mtime:Ie.mtimeMs}:null}catch{return null}}).filter(Boolean);V.sort((J,se)=>J.mtime-se.mtime);for(let J of V){if(T>=53687091200)break;try{y.rmSync(J.dir,{recursive:!0,force:!0}),E.info(h.dim(`  \u{1F5D1}\uFE0F Evicted stale workspace: ${J.name}`));let se=G(`df -k "${U}" | tail -1 | awk '{print $4}'`,{encoding:"utf8"}).trim();if(parseInt(se,10)*1024>=53687091200)break}catch{}}}}catch{}return await k(),z}catch(g){throw await k(),g.message==="Command aborted"?(E.warn(h.yellow(`
-\u274C Build aborted.`)),await d("failed",{error:"Aborted by user"}),g):(E.error(h.red(`
-\u2717 Local build failed: ${g.message}`)),await d("failed",{error:g.message}),g)}},po=async(e,n,i={},t,o)=>{let r=y.existsSync("android/gradlew")?"android/gradlew":y.existsSync("gradlew")?"./gradlew":null;if(!r)throw new Error("Could not find gradlew. Is this an Android project?");let c="assembleRelease";e.distribution==="store"?c="bundleRelease":e.distribution==="internal"&&(c="assembleRelease");let a=e.buildCommand||c;E.info(h.blue(`Running Android build: ${a}...`));let s=r.includes("android/")?"android":".",d=(r.includes("android/"),"./gradlew"),l=[a];if(i.ANDROID_VERSION_CODE){let p=_.join(s,"app/build.gradle");if(y.existsSync(p)){let m=i.ANDROID_VERSION_CODE,S=y.readFileSync(p,"utf-8");S=S.replace(/versionCode\s+\d+/,`versionCode ${m}`),y.writeFileSync(p,S),E.info(h.green(`\u2713 Applied Android versionCode ${m}`))}l.push(`-Pandroid.injected.version.code=${i.ANDROID_VERSION_CODE}`)}await Re(d,l,s,i,t,o);let u=_.join(s,"app/build/outputs");return Ke(u,[".apk",".aab"])},fo=async(e,n,i,t={},o,r,c,a,s)=>{if(process.platform!=="darwin")throw new Error("iOS builds can only be run on macOS.");let d=_.resolve(process.cwd(),y.existsSync("ios")?"ios":"."),l=y.readdirSync(d),u=l.find(k=>k.endsWith(".xcworkspace")),p=l.find(k=>k.endsWith(".xcodeproj"));if(!u&&!p)throw new Error("Could not find Xcode workspace or project in ios/ directory.");try{let k=G("xcode-select -p").toString().trim();E.info(h.dim(`Using Xcode at: ${k}`))}catch{E.warn(h.dim("Could not detect Xcode path."))}E.info(h.blue("Running iOS build via xcodebuild..."));let m=u?u.replace(".xcworkspace",""):p?.replace(".xcodeproj",""),S=e.iosScheme||m||e.scheme,$=e.developmentClient?"Debug":e.iosConfiguration||"Release",v=(o||"default").replace(/[^a-zA-Z0-9-_]/g,"_"),O=_.join(be.homedir(),`Library/Developer/Xcode/DerivedData/${f.nameLower}`,v);if(y.mkdirSync(O,{recursive:!0}),e.simulator){E.info(h.dim(`Building for simulator (Scheme: ${S}, Config: ${$})...`)),await Re("xcodebuild",[u?"-workspace":"-project",u||p,"-scheme",S,"-configuration",$,"-sdk","iphonesimulator","-derivedDataPath",O,"CODE_SIGNING_ALLOWED=NO","CODE_SIGNING_REQUIRED=NO"],d,t,r,c);let k=_.join(O,"Build/Products",`${$}-iphonesimulator`),x=Ke(k,[".app"]);if(x.length>0){let I=x[0],M=_.basename(I,".app"),g=_.join(k,`${M}_simulator.zip`);return E.info(h.dim(`Creating simulator artifact: ${g}...`)),G(`cd "${k}" && zip -r "${g}" "${_.basename(I)}"`),[g]}return[]}else{E.info(h.dim(`Archiving (Scheme: ${S}, Config: ${$})...`));let k=_.join(d,"build.xcarchive"),x=_.join(d,"export"),I=t.IOS_DIST_P12,M=t.IOS_PROVISIONING_PROFILE,g=t.IOS_P12_PASSWORD||"",P=[],A,b,C={isAppStore:!1,isDevelopment:!1};if(I&&M){E.info(h.blue("\u{1F510} CI/CD Signing: Importing certificates..."));try{let j=`${f.buildPrefix}-${n}.keychain-db`,z=_.join(be.tmpdir(),j),ge=f.keychainPassword;G(`security create-keychain -p "${ge}" "${z}" 2>/dev/null || true`),G(`security set-keychain-settings -t 3600 -l "${z}"`),G(`security unlock-keychain -p "${ge}" "${z}"`);let Ce=_.join(be.tmpdir(),`cert-${n}.p12`),L=Buffer.from(I,"base64");y.writeFileSync(Ce,L),E.info(h.dim(`P12 data size: ${L.length} bytes, first bytes: ${L.slice(0,4).toString("hex")}`)),(L.length<100||L[0]!==48)&&(E.warn(h.yellow("\u26A0\uFE0F  P12 data looks corrupted or was not decrypted correctly.")),E.warn(h.yellow("    This usually means MACH_ENCRYPTION_KEY on the Remote API differs from when credentials were uploaded.")));let U=[g,"",f.keychainPassword],q=!1;for(let ce of U)try{G(`security import "${Ce}" -k "${z}" -P "${ce}" -A -T /usr/bin/codesign -T /usr/bin/security`,{stdio:"pipe"}),q=!0,E.info(h.dim(`\u2713 P12 imported successfully with password: ${ce?"[set]":"[empty]"}`));break}catch(le){E.info(h.dim(`  P12 import attempt with password ${ce?`"${ce.substring(0,3)}..."`:"[empty]"} failed: ${le.message?.split(`
-`)[0]||"unknown"}`))}if(!q)throw new Error("Failed to import P12.");y.unlinkSync(Ce),G(`security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k "${ge}" "${z}"`);let T=G("security list-keychains -d user",{encoding:"utf-8"}).split(`
-`).map(ce=>ce.trim().replace(/^"|"$/g,"")).filter(ce=>ce.length>0),ne=[z,...T].map(ce=>`"${ce}"`).join(" ");G(`security list-keychains -d user -s ${ne}`),G(`security default-keychain -s "${z}"`);let V=_.join(be.homedir(),"Library/MobileDevice/Provisioning Profiles");y.mkdirSync(V,{recursive:!0});let J=Buffer.from(M,"base64"),se=_.join(V,`${f.nameLower}-temp-${n}.mobileprovision`);y.writeFileSync(se,J);let Ie=J.toString("utf-8"),qe=/<key>get-task-allow<\/key>\s*<true\/>/.test(Ie);C={isAppStore:!Ie.includes("<key>ProvisionedDevices</key>")&&!qe,isDevelopment:qe};try{let le=G(`security cms -D -i "${se}"`,{encoding:"utf-8"}).match(/<key>UUID<\/key>\s*<string>([^<]+)<\/string>/);b=le?le[1]:void 0}catch{let le=Ie.match(/<key>UUID<\/key>\s*<string>([^<]+)<\/string>/);b=le?le[1]:void 0}b||(E.warn("Could not extract UUID from provisioning profile. Using fallback."),b=`${f.nameLower}-${n}`);let Ge=_.join(V,`${b}.mobileprovision`);y.existsSync(Ge)&&y.unlinkSync(Ge),y.renameSync(se,Ge);try{let le=G(`security find-identity -v -p codesigning "${z}"`,{encoding:"utf-8"}).match(/"((?:Apple|iPhone) (?:Distribution|Developer|Development)[^"]*)"/);le&&(A=le[1],E.info(h.blue(`Identity auto-detected from keychain: "${A}"`)))}catch{}A||(A=C.isDevelopment?"Apple Development":"Apple Distribution",E.info(h.blue(`Identity fallback (profile heuristic): "${A}"`))),E.info(h.dim(`Profile type: ${C.isDevelopment?"Development":C.isAppStore?"App Store":"Ad-Hoc"}`)),E.info(h.dim(`Identity Detection: get-task-allow=${C.isDevelopment}, Selected Identity="${A}"`)),P.push("CODE_SIGN_STYLE=Manual"),P.push(`CODE_SIGN_IDENTITY="${A}"`),P.push(`PROVISIONING_PROFILE_SPECIFIER=${b}`),e.iosTeamId&&P.push(`DEVELOPMENT_TEAM=${e.iosTeamId}`)}catch(j){throw E.error(`Signing setup failed: ${j.message}`),j}}else P.push("-allowProvisioningUpdates"),e.iosTeamId&&P.push(`DEVELOPMENT_TEAM=${e.iosTeamId}`);s&&await s("archive"),E.info(h.blue(`Archive detected Identity: "${A}"`)),E.info(h.blue(`Archive detected UUID: "${b}"`)),await Re("xcodebuild",["archive",u?"-workspace":"-project",u||p,"-scheme",S,"-configuration",$,"-archivePath",k,"-derivedDataPath",O,...P],d,t,r,c);let H;b?(C.isAppStore?H="app-store":C.isDevelopment?H="development":H="ad-hoc",E.info(h.blue(`Export method from profile: "${H}"`))):(H=e.distribution==="store"?"app-store":e.distribution==="internal"?"ad-hoc":"development",E.warn(h.yellow(`No profile UUID detected. Export method from distribution flag: "${H}"`)));let B=e.iosExportMethod||H,N=Ne("ios"),F=_.join(d,"ExportOptions.plist"),Z=`<?xml version="1.0" encoding="UTF-8"?>
+`;S.appendFileSync(ne,ce)}let Ze="/opt/homebrew/bin/pod",Ft=S.existsSync(Ze)?Ze:"pod",je=So(T);S.existsSync(_.join(T,"Pods"))&&D.pods&&D.pods!==je&&(await x(`[CACHE] Podfile/Podfile.lock changed \u2014 wiping ios/Pods
+`),A.info(h.dim("Podfile fingerprint changed \u2014 clearing Pods for clean install...")),S.rmSync(_.join(T,"Pods"),{recursive:!0,force:!0})),A.info(h.dim(`Using pod command: ${Ft} in ${T}`)),await M(Ft,["install"],T,i),D.pods=je,Oi(m,D)}catch(T){let ne=T.message||"Unknown error";A.warn(h.yellow(`Native "pod" command failed: ${ne}`)),A.info(h.dim("Falling back to npm exec pod-install...")),A.info(h.magenta(`${f.nameUpper}_DEBUG: Executing pod-install override via npx --yes pod-install@latest`)),await M("npx",["--yes","pod-install@latest","ios"],process.cwd(),i)}if(S.existsSync("ios/Pods")){A.info(h.dim("Disabling signing for Pod targets to prevent conflicts..."));try{j(`find ios/Pods -name "project.pbxproj" -exec sed -i '' 's/buildSettings = {/buildSettings = { CODE_SIGNING_ALLOWED = NO; CODE_SIGNING_REQUIRED = NO; PROVISIONING_PROFILE_SPECIFIER = ""; EXPANDED_CODE_SIGN_IDENTITY = "";/g' {} +`,{stdio:"ignore"})}catch{}}}}finally{U&&S.writeFileSync(L,U)}r.stop(`Expo prebuild complete (${f.name} config enforced).`)}let V=[];if(a==="android")await I("build"),V=await Po(e,s,i,L=>x(L),u);else if(a==="ios"){await I("signing"),A.info(h.dim("Preparing credentials..."));let L=o?.distributionType;V=await $o(e,t,s,i,n,U=>x(U),u,L,U=>I(U))}e.postBuild&&(A.info(h.blue("Running post-build hook...")),A.info(h.dim(`> ${e.postBuild}`)),await M(e.postBuild,[],process.cwd(),i));let ge=_o(Date.now()-l);if(A.success(h.green(`
+\u2713 Local build completed successfully in ${ge}`)),await c("building",{...G&&{bundleId:G},...H&&{appName:H}}),V.length>0&&(A.info(h.cyan(`
+\u{1F4E6} Generated Artifacts:`)),V.forEach(L=>{let U=_.resolve(L);A.info(h.dim(`  - ${L}`)),A.info(h.gray(`    Path: ${U}`))}),e.interactive)){let L=await go({message:"Install on connected device?"});if(!_t(L)&&L){if(a==="android"){let U=V.find(X=>X.endsWith(".apk"))||V[0];await Ro(U,X=>x(X))}else if(a==="ios"){let U=V.find(T=>T.endsWith(".ipa"))||V.find(T=>T.endsWith(".app"))||V[0],X=Te("ios");e.simulator?await wo(U,X||"",T=>x(T)):await vo(U,X||"",T=>x(T))}}}await I("upload");let Ne=[];for(let L of V)try{let U=_.join(be.tmpdir(),`${t}-${_.basename(L)}`);S.copyFileSync(L,U),Ne.push(U),A.info(h.dim(`  \u{1F4CB} Preserved artifact: ${_.basename(L)}`))}catch{A.warn(h.yellow(`  Failed to preserve artifact: ${_.basename(L)}`))}V=Ne,A.info(h.dim("\u{1F9F9} Cleaning workspace (preserving dependency cache)..."));try{let L=process.cwd(),U=new Set(["node_modules"]),X=S.readdirSync(L),T=0;for(let ne of X)if(!U.has(ne)){if(ne==="ios"){let Y=_.join(L,"ios"),q=S.readdirSync(Y);for(let ae of q)if(ae!=="Pods")try{S.rmSync(_.join(Y,ae),{recursive:!0,force:!0}),T++}catch{}continue}try{S.rmSync(_.join(L,ne),{recursive:!0,force:!0}),T++}catch{}}A.info(h.dim(`  Cleaned ${T} items. Cached: node_modules${S.existsSync(_.join(L,"ios","Pods"))?", ios/Pods":""}`)),A.info(h.green("\u{1F512} Security: No source code retained on build server. Only public dependencies cached."))}catch{A.warn(h.yellow("Post-build cleanup encountered errors (non-fatal)."))}try{let U=_.join(be.homedir(),f.workspacesDir),X=j(`df -k "${U}" | tail -1 | awk '{print $4}'`,{encoding:"utf8"}).trim(),T=parseInt(X,10)*1024;if(T<53687091200&&S.existsSync(U)){A.info(h.dim(`  \u26A0\uFE0F Low disk space (${(T/1024/1024/1024).toFixed(0)} GB free). Running cache eviction...`));let ne=_.basename(process.cwd()),Y=S.readdirSync(U).filter(q=>q!==ne).map(q=>{let ae=_.join(U,q);try{let Ie=S.statSync(ae);return Ie.isDirectory()?{name:q,dir:ae,mtime:Ie.mtimeMs}:null}catch{return null}}).filter(Boolean);Y.sort((q,ae)=>q.mtime-ae.mtime);for(let q of Y){if(T>=53687091200)break;try{S.rmSync(q.dir,{recursive:!0,force:!0}),A.info(h.dim(`  \u{1F5D1}\uFE0F Evicted stale workspace: ${q.name}`));let ae=j(`df -k "${U}" | tail -1 | awk '{print $4}'`,{encoding:"utf8"}).trim();if(parseInt(ae,10)*1024>=53687091200)break}catch{}}}}catch{}return await k(),V}catch(g){throw await k(),g.message==="Command aborted"?(A.warn(h.yellow(`
+\u274C Build aborted.`)),await c("failed",{error:"Aborted by user"}),g):(A.error(h.red(`
+\u2717 Local build failed: ${g.message}`)),await c("failed",{error:g.message}),g)}},Po=async(e,t,i={},n,o)=>{let r=S.existsSync("android/gradlew")?"android/gradlew":S.existsSync("gradlew")?"./gradlew":null;if(!r)throw new Error("Could not find gradlew. Is this an Android project?");let l="assembleRelease";e.distribution==="store"?l="bundleRelease":e.distribution==="internal"&&(l="assembleRelease");let a=e.buildCommand||l;A.info(h.blue(`Running Android build: ${a}...`));let s=r.includes("android/")?"android":".",c=(r.includes("android/"),"./gradlew"),d=[a];if(i.ANDROID_VERSION_CODE){let p=_.join(s,"app/build.gradle");if(S.existsSync(p)){let m=i.ANDROID_VERSION_CODE,E=S.readFileSync(p,"utf-8");E=E.replace(/versionCode\s+\d+/,`versionCode ${m}`),S.writeFileSync(p,E),A.info(h.green(`\u2713 Applied Android versionCode ${m}`))}d.push(`-Pandroid.injected.version.code=${i.ANDROID_VERSION_CODE}`)}await ve(c,d,s,i,n,o);let u=_.join(s,"app/build/outputs");return Ve(u,[".apk",".aab"])},$o=async(e,t,i,n={},o,r,l,a,s)=>{if(process.platform!=="darwin")throw new Error("iOS builds can only be run on macOS.");let c=_.resolve(process.cwd(),S.existsSync("ios")?"ios":"."),d=S.readdirSync(c),u=d.find(k=>k.endsWith(".xcworkspace")),p=d.find(k=>k.endsWith(".xcodeproj"));if(!u&&!p)throw new Error("Could not find Xcode workspace or project in ios/ directory.");try{let k=j("xcode-select -p").toString().trim();A.info(h.dim(`Using Xcode at: ${k}`))}catch{A.warn(h.dim("Could not detect Xcode path."))}A.info(h.blue("Running iOS build via xcodebuild..."));let m=u?u.replace(".xcworkspace",""):p?.replace(".xcodeproj",""),E=e.iosScheme||m||e.scheme,P=e.developmentClient?"Debug":e.iosConfiguration||"Release",O=(o||"default").replace(/[^a-zA-Z0-9-_]/g,"_"),N=_.join(be.homedir(),`Library/Developer/Xcode/DerivedData/${f.nameLower}`,O);if(S.mkdirSync(N,{recursive:!0}),e.simulator){A.info(h.dim(`Building for simulator (Scheme: ${E}, Config: ${P})...`)),await ve("xcodebuild",[u?"-workspace":"-project",u||p,"-scheme",E,"-configuration",P,"-sdk","iphonesimulator","-derivedDataPath",N,"CODE_SIGNING_ALLOWED=NO","CODE_SIGNING_REQUIRED=NO"],c,n,r,l);let k=_.join(N,"Build/Products",`${P}-iphonesimulator`),x=Ve(k,[".app"]);if(x.length>0){let I=x[0],M=_.basename(I,".app"),g=_.join(k,`${M}_simulator.zip`);return A.info(h.dim(`Creating simulator artifact: ${g}...`)),j(`cd "${k}" && zip -r "${g}" "${_.basename(I)}"`),[g]}return[]}else{A.info(h.dim(`Archiving (Scheme: ${E}, Config: ${P})...`));let k=_.join(c,"build.xcarchive"),x=_.join(c,"export"),I=n.IOS_DIST_P12,M=n.IOS_PROVISIONING_PROFILE,g=n.IOS_P12_PASSWORD||"",D=[],y,b,v={isAppStore:!1,isDevelopment:!1};if(I&&M){A.info(h.blue("\u{1F510} CI/CD Signing: Importing certificates..."));try{let H=`${f.buildPrefix}-${t}.keychain-db`,V=_.join(be.tmpdir(),H),ge=f.keychainPassword;j(`security create-keychain -p "${ge}" "${V}" 2>/dev/null || true`),j(`security set-keychain-settings -t 3600 -l "${V}"`),j(`security unlock-keychain -p "${ge}" "${V}"`);let Ne=_.join(be.tmpdir(),`cert-${t}.p12`),L=Buffer.from(I,"base64");S.writeFileSync(Ne,L),A.info(h.dim(`P12 data size: ${L.length} bytes, first bytes: ${L.slice(0,4).toString("hex")}`)),(L.length<100||L[0]!==48)&&(A.warn(h.yellow("\u26A0\uFE0F  P12 data looks corrupted or was not decrypted correctly.")),A.warn(h.yellow("    This usually means MACH_ENCRYPTION_KEY on the Remote API differs from when credentials were uploaded.")));let U=[g,"",f.keychainPassword],X=!1;for(let le of U)try{j(`security import "${Ne}" -k "${V}" -P "${le}" -A -T /usr/bin/codesign -T /usr/bin/security`,{stdio:"pipe"}),X=!0,A.info(h.dim(`\u2713 P12 imported successfully with password: ${le?"[set]":"[empty]"}`));break}catch(ce){A.info(h.dim(`  P12 import attempt with password ${le?`"${le.substring(0,3)}..."`:"[empty]"} failed: ${ce.message?.split(`
+`)[0]||"unknown"}`))}if(!X)throw new Error("Failed to import P12.");S.unlinkSync(Ne),j(`security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k "${ge}" "${V}"`);let T=j("security list-keychains -d user",{encoding:"utf-8"}).split(`
+`).map(le=>le.trim().replace(/^"|"$/g,"")).filter(le=>le.length>0),ne=[V,...T].map(le=>`"${le}"`).join(" ");j(`security list-keychains -d user -s ${ne}`),j(`security default-keychain -s "${V}"`);let Y=_.join(be.homedir(),"Library/MobileDevice/Provisioning Profiles");S.mkdirSync(Y,{recursive:!0});let q=Buffer.from(M,"base64"),ae=_.join(Y,`${f.nameLower}-temp-${t}.mobileprovision`);S.writeFileSync(ae,q);let Ie=q.toString("utf-8"),Ze=/<key>get-task-allow<\/key>\s*<true\/>/.test(Ie);v={isAppStore:!Ie.includes("<key>ProvisionedDevices</key>")&&!Ze,isDevelopment:Ze};try{let ce=j(`security cms -D -i "${ae}"`,{encoding:"utf-8"}).match(/<key>UUID<\/key>\s*<string>([^<]+)<\/string>/);b=ce?ce[1]:void 0}catch{let ce=Ie.match(/<key>UUID<\/key>\s*<string>([^<]+)<\/string>/);b=ce?ce[1]:void 0}b||(A.warn("Could not extract UUID from provisioning profile. Using fallback."),b=`${f.nameLower}-${t}`);let je=_.join(Y,`${b}.mobileprovision`);S.existsSync(je)&&S.unlinkSync(je),S.renameSync(ae,je);try{let ce=j(`security find-identity -v -p codesigning "${V}"`,{encoding:"utf-8"}).match(/"((?:Apple|iPhone) (?:Distribution|Developer|Development)[^"]*)"/);ce&&(y=ce[1],A.info(h.blue(`Identity auto-detected from keychain: "${y}"`)))}catch{}y||(y=v.isDevelopment?"Apple Development":"Apple Distribution",A.info(h.blue(`Identity fallback (profile heuristic): "${y}"`))),A.info(h.dim(`Profile type: ${v.isDevelopment?"Development":v.isAppStore?"App Store":"Ad-Hoc"}`)),A.info(h.dim(`Identity Detection: get-task-allow=${v.isDevelopment}, Selected Identity="${y}"`)),D.push("CODE_SIGN_STYLE=Manual"),D.push(`CODE_SIGN_IDENTITY="${y}"`),D.push(`PROVISIONING_PROFILE_SPECIFIER=${b}`),e.iosTeamId&&D.push(`DEVELOPMENT_TEAM=${e.iosTeamId}`)}catch(H){throw A.error(`Signing setup failed: ${H.message}`),H}}else D.push("-allowProvisioningUpdates"),e.iosTeamId&&D.push(`DEVELOPMENT_TEAM=${e.iosTeamId}`);s&&await s("archive"),A.info(h.blue(`Archive detected Identity: "${y}"`)),A.info(h.blue(`Archive detected UUID: "${b}"`)),await ve("xcodebuild",["archive",u?"-workspace":"-project",u||p,"-scheme",E,"-configuration",P,"-archivePath",k,"-derivedDataPath",N,...D],c,n,r,l);let B;b?(v.isAppStore?B="app-store":v.isDevelopment?B="development":B="ad-hoc",A.info(h.blue(`Export method from profile: "${B}"`))):(B=e.distribution==="store"?"app-store":e.distribution==="internal"?"ad-hoc":"development",A.warn(h.yellow(`No profile UUID detected. Export method from distribution flag: "${B}"`)));let K=e.iosExportMethod||B,C=Te("ios"),z=_.join(c,"ExportOptions.plist"),F=`<?xml version="1.0" encoding="UTF-8"?>
 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
 <plist version="1.0">
 <dict>
     <key>method</key>
-    <string>${B}</string>
+    <string>${K}</string>
     <key>destination</key>
     <string>export</string>
     <key>signingStyle</key>
@@ -984,54 +984,55 @@ end
     <key>thinning</key>
     <string>&lt;none&gt;</string>
     ${e.iosTeamId?`<key>teamID</key><string>${e.iosTeamId}</string>`:""}
-    ${N&&b?`
+    ${C&&b?`
     <key>provisioningProfiles</key>
     <dict>
-        <key>${N}</key>
+        <key>${C}</key>
         <string>${b}</string>
     </dict>`:""}
 </dict>
-</plist>`;if(y.writeFileSync(F,Z),process.env[`${f.envPrefix}DEBUG`]&&E.info(h.magenta(`[${f.nameUpper}_DEBUG] ExportOptions.plist:
-${Z}`)),s&&await s("export"),E.info(h.blue(`Exporting with Bundle ID: "${N}"`)),E.info(h.blue(`Exporting with Method: "${B}"`)),r){r(h.magenta(`
+</plist>`;if(S.writeFileSync(z,F),process.env[`${f.envPrefix}DEBUG`]&&A.info(h.magenta(`[${f.nameUpper}_DEBUG] ExportOptions.plist:
+${F}`)),s&&await s("export"),A.info(h.blue(`Exporting with Bundle ID: "${C}"`)),A.info(h.blue(`Exporting with Method: "${K}"`)),r){r(h.magenta(`
 [DIAGNOSTIC] Checking available signing identities...
-`));try{let j=G("security find-identity -v -p codesigning",{encoding:"utf-8"});r(h.magenta(`${j}
-`))}catch(j){r(h.red(`[DIAGNOSTIC] Failed to list identities: ${j.message}
-`))}}await Re("xcodebuild",["-exportArchive","-archivePath",k,"-exportPath",x,"-exportOptionsPlist",F],d,t,r,c),s&&await s("validate");let K=Ke(x,[".ipa"]);for(let j of K)try{G(`unzip -t "${j}"`,{stdio:"pipe"}),r&&r(`[IPA VALID] ${_.basename(j)} \u2014 archive integrity OK
-`)}catch{let ge=`IPA validation failed for ${_.basename(j)}: archive may be corrupt`;throw r&&r(`[IPA CORRUPT] ${ge}
-`),new Error(ge)}return K}},Ne=e=>{try{let n=_.join(process.cwd(),f.configFileName);if(y.existsSync(n)){let i=JSON.parse(y.readFileSync(n,"utf-8"));if(e==="android"&&i.android?.package)return i.android.package;if(e==="ios"&&i.ios?.bundleIdentifier)return i.ios.bundleIdentifier}if(e==="android"){let i=["android/app/build.gradle","app/build.gradle","build.gradle"];for(let t of i)if(y.existsSync(t)){let r=y.readFileSync(t,"utf-8").match(/applicationId\s+['"]([^'"]+)['"]/);if(r)return r[1]}}else{let i=_.resolve(process.cwd(),y.existsSync("ios")?"ios":"."),t=Ke(i,["Info.plist"]).filter(c=>!c.includes("/Pods/")&&!c.includes("/build/")&&!c.includes("/DerivedData/"));t.sort((c,a)=>a.split("/").length-c.split("/").length);for(let c of t){let s=y.readFileSync(c,"utf-8").match(/<key>CFBundleIdentifier<\/key>\s*<string>([^<]+)<\/string>/);if(s&&!s[1].includes("$"))return s[1]}let o=Ke(i,[".xcodeproj"]);if(o.length>0){let c=_.join(o[0],"project.pbxproj");if(y.existsSync(c)){let s=y.readFileSync(c,"utf-8").match(/PRODUCT_BUNDLE_IDENTIFIER\s*=\s*"?([^";\s]+)"?;/);if(s)return s[1]}}let r=["app.json","app.config.json","app.config.js","app.config.ts"];for(let c of r)if(y.existsSync(c)){let s=y.readFileSync(c,"utf-8").match(/"bundleIdentifier":\s*"([^"]+)"/);if(s)return s[1]}}}catch{return null}return null},mo=()=>{try{return G("emulator -version",{stdio:"ignore"}),"emulator"}catch{let n=be.homedir(),i=[_.join(n,"Library/Android/sdk/emulator/emulator"),_.join(n,"Android/Sdk/emulator/emulator"),"/usr/local/lib/android/sdk/emulator/emulator"];for(let t of i)if(y.existsSync(t))return t}return"emulator"},go=async(e,n)=>{let i=Et();try{if(G("adb devices").toString().split(`
-`).slice(1).map(c=>c.trim()).filter(c=>c.length>0&&!c.startsWith("*")).map(c=>c.split("	")[0]).length===0){E.warn(h.yellow("No Android devices or emulators found."));let c=mo(),a=[];try{a=G(`${c} -list-avds`).toString().split(`
-`).filter(s=>s.trim().length>0)}catch{}if(a.length>0){let s=await Bt({message:"Select an emulator to launch:",options:a.map(u=>({value:u,label:u}))});if(At(s))return;i.start(`Launching emulator ${s}...`),Di(c,["-avd",s],{detached:!0,stdio:"ignore"}).unref();let d=0,l=!1;for(;d<60;){try{if(G("adb shell getprop sys.boot_completed",{stdio:"pipe"}).toString().trim()==="1"){l=!0;break}}catch{}await new Promise(u=>setTimeout(u,2e3)),d++}if(!l)throw i.stop("Emulator launch timed out."),new Error("Emulator launch timed out. Please try launching it manually.");i.stop("Emulator launched.")}else throw new Error("No devices found and no emulators available to launch. (Make sure Android SDK is installed)")}i.start("Installing APK on device..."),await Re("adb",["install","-r",e],process.cwd(),{},n),i.stop("Installation complete.");let r=Ne("android");if(r){E.info(h.blue(`\u{1F680} Launching ${r}...`));try{G(`adb shell dumpsys package ${r}`).toString().split(`
-`).find(s=>s.includes("android.intent.action.MAIN")&&s.includes("android.intent.category.LAUNCHER"))?G(`adb shell monkey -p ${r} -c android.intent.category.LAUNCHER 1`,{stdio:"ignore"}):G(`adb shell monkey -p ${r} -c android.intent.category.LAUNCHER 1`,{stdio:"ignore"})}catch{E.warn("Could not auto-launch app. You may need to open it manually.")}}}catch(t){i.stop("Installation failed."),E.error(h.red(`Failed to install APK: ${t.message}`))}},ho=async(e,n,i)=>{let t=Et();try{if(!G("xcrun simctl list devices booted").toString().includes("(Booted)")){E.warn(h.yellow("No iOS Simulator is currently booted."));let r=G("xcrun simctl list devices --json").toString(),c=JSON.parse(r).devices,a=[];Object.keys(c).forEach(u=>{c[u].forEach(p=>{p.isAvailable&&a.push({...p,runtime:u})})});let s=await Bt({message:"Select a simulator to launch:",options:a.map(u=>({value:u.udid,label:`${u.name} (${u.runtime.split(".").pop()})`}))});if(At(s))return;t.start(`Booting ${s}...`),G(`xcrun simctl boot ${s}`),G(`open -a Simulator --args -CurrentDeviceUDID ${s}`);let d=0,l=!1;for(;d<30;){try{if(G("xcrun simctl list devices booted").toString().includes(s)){l=!0;break}}catch{}await new Promise(u=>setTimeout(u,2e3)),d++}if(!l)throw t.stop("Simulator boot timed out."),new Error("Simulator boot timed out.");t.stop("Simulator booted.")}t.start("Installing on iOS Simulator..."),await Re("xcrun",["simctl","install","booted",e],process.cwd(),{},i),t.stop("Installation complete."),E.info(h.blue(`\u{1F680} Launching ${n}...`)),await Re("xcrun",["simctl","launch","booted",n],process.cwd(),{},i)}catch(o){t.stop("Installation failed."),E.error(h.red(`Failed to install on Simulator: ${o.message}`))}},yo=async(e,n,i)=>{let t=Et();t.start("Scanning for connected iOS devices...");try{let o=G("xcrun devicectl list devices --json-output -").toString(),c=(JSON.parse(o).result?.devices||[]).filter(s=>s.connectionProperties?.transportType==="wired"||s.connectionProperties?.transportType==="localNetwork");if(c.length===0)throw t.stop("No connected iOS devices found."),new Error("Please connect your iPhone via USB or ensure it is on the same Wi-Fi for wireless debugging.");let a=c[0].identifier;if(c.length>1){t.stop();let s=await Bt({message:"Select a device to install on:",options:c.map(d=>({value:d.identifier,label:`${d.deviceProperties?.name||d.name||d.model?.name} (${d.model?.name||"iPhone"}) - ${d.identifier}`}))});if(At(s))return;a=s,t.start(`Installing on ${a}...`)}else t.message(`Installing on ${c[0].model.name}...`);await Re("xcrun",["devicectl","device","install","app","--device",a,e],process.cwd(),{},i),t.stop("Installation complete."),E.info(h.blue(`\u{1F680} Launching ${n}...`)),await Re("xcrun",["devicectl","device","launch","app","--device",a,n],process.cwd(),{},i)}catch(o){t.stop("Installation failed."),E.error(h.red(`Failed to install on device: ${o.message}`)),E.info(h.dim('Make sure your device is unlocked and "Developer Mode" is enabled in Settings -> Privacy & Security.'))}};import It from"fs";function xe(e){if(e){if(!It.existsSync(e))return null;try{return JSON.parse(It.readFileSync(e,"utf-8"))}catch{return null}}if(!It.existsSync(`./${f.configFileName}`))return null;try{return JSON.parse(It.readFileSync(`./${f.configFileName}`,"utf-8"))}catch{return null}}function He(e,n,i=new Set){if(i.has(n))throw new Error(`Circular inheritance detected in profile: ${n}`);i.add(n);let t=e.build?.[n];if(!t)return null;let o={...t};if(t.extends){let r=He(e,t.extends,i);r&&(o={...r,...t,env:{...r.env,...t.env},ios:{...r.ios,...t.ios},android:{...r.android,...t.android}})}if(o.envGroups&&Array.isArray(o.envGroups)){let r={};for(let c of o.envGroups){let a=e.envGroups?.[c];a?Object.assign(r,a):log.warn(`Environment group not found: ${c}`)}o.env={...r,...o.env}}return o}var ze=(e,n=`${f.envPrefix}`)=>{let i={},t=(o,r)=>{if(o)for(let c in o){let a=o[c],s=`${r}${c.toUpperCase().replace(/[^A-Z0-9]/g,"_")}`;a!==null&&typeof a=="object"&&!Array.isArray(a)?t(a,`${s}_`):i[s]=String(a)}};return t(e,n),i};var bt=async e=>{e.platform!=="android"&&e.platform!=="ios"&&(R.error(`Platform ${e.platform} is not supported. Use 'android' or 'ios'.`),process.exit(1));let n=jt(),i=e.buildId||So(),t=e.projectId,o=Date.now(),r=!!t,c=async a=>{if(t)try{await D.patch(`/builds/${t}/${i}`,{status:"failed",error:a})}catch{}};if(e.local&&e.buildId){e.quiet||n.start(`Preparing isolated workspace for build: ${e.buildId}`);try{let a=await D.get(`/builds/${t}/${e.buildId}/source-url`);if(a.data.status!=="success")throw new Error("Failed to get source download URL from API");let s=await it.get(a.data.downloadUrl,{responseType:"stream"}),d=(t||e.projectId||"default").replace(/[^a-zA-Z0-9-_]/g,"_"),l=he.join(Eo.homedir(),f.workspacesDir,d);oe.mkdirSync(l,{recursive:!0});let u=new Set(["node_modules",`.${f.nameLower}-cache-meta`]),p=new Set(["Pods"]);if(oe.existsSync(l)){let O=oe.readdirSync(l);for(let k of O){if(u.has(k))continue;if(k==="ios"){let I=he.join(l,"ios");try{let M=oe.readdirSync(I);for(let g of M)if(!p.has(g))try{oe.rmSync(he.join(I,g),{recursive:!0,force:!0})}catch{}}catch{}continue}let x=he.join(l,k);try{oe.rmSync(x,{recursive:!0,force:!0})}catch{}}}let m=he.join(l,"source.zip"),S=s.data,$=oe.createWriteStream(m);await new Promise((O,k)=>{S.pipe($),S.on("error",x=>k(x)),$.on("finish",()=>O())}),new Ci(m).extractAllTo(l,!0);try{oe.unlinkSync(m)}catch{}process.chdir(l),R.info(w.green(`\u2713 Persistent workspace ready: ${l}`)),R.info(w.dim(`  \u{1F4E6} Cached dirs preserved: node_modules=${oe.existsSync(he.join(l,"node_modules"))?"\u2705":"\u274C"}, Pods=${oe.existsSync(he.join(l,"ios","Pods"))?"\u2705":"\u274C"}`)),n.stop()}catch(a){n.stop(`Failed to prepare isolated workspace: ${a.message}`),t&&await c(`Setup Error: ${a.message}`),process.exit(1)}}try{let a=e.repo;if(!a)try{a=Oi("git config --get remote.origin.url").toString().trim()}catch{R.warn("Could not detect git repository URL.")}!a&&e.dryRun,a||(a="https://github.com/placeholder/repo.git"),R.info(`Build ID: ${w.cyan(i)}`);let s={},d={},l=xe(`./${f.configFileName}`);if(l){t=l.projectId;let g=e.buildProfile||"production",P=He(l,g);!P&&e.buildProfile&&(R.error(`Build profile '${g}' not found in ${f.configFileName}`),process.exit(1));let A=P||{};process.env.MACH_DEBUG&&R.info(w.dim(`Build profile: ${g} | Platform: ${e.platform} | Distribution: ${A.distribution||"store"} | Environment: ${A.environment||g}`)),A.env&&(d=A.env,R.info(w.blue(`Use Build Profile: ${g}`)));let b=e.platform,C=A[b]||{},H=["developmentClient","simulator","distribution","buildCommand","apk","iosScheme","preBuild","postBuild","scheme","environment","androidPackage","iosBundleIdentifier","name","iosDeploymentTarget","iosApiKeyId","iosApiKeyIssuer","iosApiKeyPath","iosTeamId","iosConfiguration","iosExportMethod","branch","repo","instanceType","ami","bucket","region","nodeVersion"];e.name=l.name,e.appName=l.name,e.androidPackage=l.android?.package,e.iosBundleIdentifier=l.ios?.bundleIdentifier,e.iosScheme=l.ios?.iosScheme,!e.nodeVersion&&l.nodeVersion&&(e.nodeVersion=l.nodeVersion);for(let F of H){let Z=C[F]!==void 0?C[F]:A[F];Z!==void 0&&e[F]===void 0&&(e[F]=Z)}e.branch=e.branch||"main",e.iosConfiguration=e.iosConfiguration||(e.developmentClient||e.simulator?"Debug":"Release"),e.sshUser=e.sshUser||process.env.USER||"ubuntu",e.simulator===void 0&&(e.simulator=!1),e.local===void 0&&(e.local=!1),e.verbose===void 0&&(e.verbose=!1);let B=F=>{if(!F)return F;if(F.startsWith("scripts.")){let Z=F.split(".")[1],K=l.scripts?.[Z];if(K)return K;R.warn(`Script reference not found: ${F}`)}return F};e.buildCommand=B(e.buildCommand),e.preBuild=B(e.preBuild),e.postBuild=B(e.postBuild),!e.scheme&&l.scheme&&(e.scheme=l.scheme);let N={...ze(l,f.envPrefix),...ze(A,`${f.envPrefix}PROFILE_`)};s={...s,...d,...N},process.env.IOS_P12_PASSWORD&&!s.IOS_P12_PASSWORD&&(s.IOS_P12_PASSWORD=process.env.IOS_P12_PASSWORD),process.env.MATCH_PASSWORD&&!s.MATCH_PASSWORD&&(s.MATCH_PASSWORD=process.env.MATCH_PASSWORD),e.platform==="ios"&&(!e.iosTeamId&&A.ios?.appleTeamId&&(e.iosTeamId=A.ios.appleTeamId),!e.iosTeamId&&l.submit?.[g]?.ios?.appleTeamId&&(e.iosTeamId=l.submit[g].ios.appleTeamId),!e.iosTeamId&&l.submit?.production?.ios?.appleTeamId&&(R.warn(w.yellow(`Check: Using 'production' Team ID for '${g}' build.`)),e.iosTeamId=l.submit.production.ios.appleTeamId),e.iosTeamId?R.info(w.magenta(`\u2713 Injected iOS Team ID from config: ${e.iosTeamId}`)):R.warn(w.yellow("\u26A0\uFE0F No iOS Team ID found. Signing might fail if not managed automatically via Expo.")))}let u="unknown";try{u=Oi("git rev-parse --abbrev-ref HEAD").toString().trim()}catch{R.warn("Failed to detect git branch.")}let p="1.0.0";try{oe.existsSync("./package.json")&&(p=JSON.parse(oe.readFileSync("./package.json","utf-8")).version||"1.0.0")}catch{}let m=e.buildProfile||"production",S="Internal";e.developmentClient?S="DevelopmentClient":m.toLowerCase().includes("store")||m.toLowerCase()==="production"?S="Store":m.toLowerCase().includes("preview")||m.toLowerCase().includes("staging")?S="Staging":(m.toLowerCase().includes("development")||m.toLowerCase().includes("dev"))&&(S="Development");let $=e.platform==="ios"?"iOS":"Android",v=e.platform==="ios"&&e.simulator?" (Simulator)":"",O=`${$}${v} v${p} (${S})`;if(nt(e,{status:"created",projectId:t,buildId:i,platform:e.platform,profile:m,branch:u,version:p,buildType:S,developmentClient:!!e.developmentClient,summary:O}),t){try{let g=e.buildProfile||"production";R.info(w.blue(`Fetching managed secrets for profile: ${g}...`));let P=e.environment||g,b=(await D.get(`/projects/${t}/secrets/export?env=${P}`)).data;b.status==="success"&&b.secrets&&(s={...s,...b.secrets},Object.keys(b.secrets).length>0&&R.info(w.magenta(`\u2713 Injected ${Object.keys(b.secrets).length} secrets from Dashboard.`)))}catch(g){R.warn(`Failed to load managed secrets from Dashboard: ${g.message}`)}try{R.info(w.blue("Fetching managed credentials..."));let g="development";e.distribution==="store"?g="store":e.distribution==="internal"&&(g=e.platform==="ios"?"adhoc":"internal"),S==="Staging"&&e.developmentClient&&(g="development");let P=await D.get("/credentials/resolve",{params:{projectId:t,platform:e.platform,bundleId:e.iosBundleIdentifier||e.androidPackage,distributionType:g}});if(P.data.status==="success"&&P.data.credentials){let A=P.data.credentials;R.info(w.magenta(`\u2713 Found ${A.length} relevant credentials.`));let b=A.filter(N=>{if(N.distributionType){let F=g==="internal"?"adhoc":g;return N.distributionType===F||N.distributionType===g}return!0});R.info(w.dim(`  Filtered to ${b.length} credentials for distributionType: ${g}`));let C=!1,H=!1,B=!1;for(let N of b)if(N.downloadUrl)try{let F="",Z=5;for(;Z>0;)try{let K=await it.get(N.downloadUrl,{responseType:"arraybuffer",timeout:3e4,headers:{Connection:"close"}});F=Buffer.from(K.data).toString("base64");break}catch(K){if(Z--,Z===0)throw K;R.warn(w.dim(`  - Temporary network error downloading ${N.name}. Retrying... (${5-Z}/5)`)),await new Promise(j=>setTimeout(j,2e3))}if(N.type==="ios_cert"&&!C)s.IOS_DIST_P12=F,N.password?(s.IOS_P12_PASSWORD=N.password,R.info(w.dim(`  - Injected ${N.name} as IOS_DIST_P12 with password from credential record`))):R.info(w.dim(`  - Injected ${N.name} as IOS_DIST_P12`)),C=!0;else if(N.type==="ios_profile"&&!H)s.IOS_PROVISIONING_PROFILE=F,R.info(w.dim(`  - Injected ${N.name} as IOS_PROVISIONING_PROFILE`)),H=!0;else if(N.type==="android_keystore"&&!B){s.ANDROID_KEYSTORE_BASE64=F;let K=N.keystorePassword||N.password,j=N.keyPassword||N.keystorePassword||N.password,z=N.alias||N.meta?.alias;if(K)s.ANDROID_STORE_PASSWORD=K,R.info(w.dim("  - Injected keystore password from credential record"));else{let L=["ANDROID_STORE_PASSWORD",...[g==="store"?"PRODUCTION":g==="internal"?"STAGING":"DEVELOPMENT",g.toUpperCase(),"PRODUCTION","STORE","INTERNAL","STAGING","RELEASE","DEBUG"].map(U=>`KEYSTORE_PASSWORD_${U}`),"KEYSTORE_PASSWORD"].find(U=>!!s[U]);L&&s[L]&&(s.ANDROID_STORE_PASSWORD=s[L])}if(j?(s.ANDROID_KEY_PASSWORD=j,R.info(w.dim("  - Injected key password from credential record"))):s.ANDROID_KEY_PASSWORD=s.ANDROID_STORE_PASSWORD||"",z)s.ANDROID_KEY_ALIAS=z;else{let ge=["ANDROID_KEY_ALIAS","KEYSTORE_ALIAS"].find(Ce=>!!s[Ce]);ge&&(s.ANDROID_KEY_ALIAS=s[ge])}R.info(w.dim(`  - Injected ${N.name} as ANDROID_KEYSTORE_BASE64`)),B=!0}}catch(F){R.warn(`Failed to download credential ${N.name}: ${F.message}`)}}if(e.platform==="android"){let A=l.android?.versionCode==="auto"||l.expo?.android?.versionCode==="auto";if(e.autoVersion||A){n.start("Resolving latest versionCode from Google Play...");try{let b=e.androidPackage||l.android?.package||l.expo?.android?.package||l.name,C=(P.data.credentials||[]).find(K=>K.type==="google_service_account"&&(!K.bundleId||K.bundleId===b));if(C||(C=((await D.get(`/credentials/${t}`)).data.credentials||[]).find(j=>j.type==="google_service_account"&&j.bundleId===b)),!C)throw new Error(`Google Service Account not found for package ${b}. Upload it under this package in Dashboard or run '${f.nameLower} credentials:service --platform android --package-name ${b}'.`);let H=await D.get(`/credentials/${C.credentialId}/download`,{params:{projectId:t}});if(H.data.status!=="success"||!H.data.downloadUrl)throw new Error("Failed to get secure download URL for service account");let N=(await it.get(H.data.downloadUrl,{headers:{Connection:"close"}})).data,F=await $i(b,N);if(F==null)throw new Error("Could not retrieve any version information from Google Play.");let Z=F+1;s.ANDROID_VERSION_CODE=Z.toString(),n.stop(`\u2713 Resolved versionCode: ${w.green(Z)} (Latest on Play Store: ${F})`)}catch(b){n.stop("Version resolution failed");let C=b.response?.data?.error?.message||b.message;throw new Error(`Auto-versioning failed: ${C}. Fix Google Play service account permissions or remove android.versionCode="auto".`)}}}if(e.platform==="ios"&&!e.simulator){let A=!!s.IOS_DIST_P12,b=!!s.IOS_PROVISIONING_PROFILE;if(!A||!b){let C=[...A?[]:["Distribution Certificate"],...b?[]:["Provisioning Profile"]].join(" and ");R.error(w.red(`Missing iOS credentials: ${C}`)),e.quiet&&process.exit(1);let H=e.yes||await wi({message:"Would you like to generate these credentials now?",initialValue:!0});if(H&&!vi(H))return await Xe({platform:"ios",profile:m}),e.quiet||R.info(w.green("\u2713 Credentials setup complete! Restarting build phase...")),bt(e);e.quiet||R.info(w.yellow(`Run \`${f.nameLower} credentials\` to set up signing credentials manually.`)),process.exit(1)}}if(e.platform==="android"&&(e.distribution==="internal"||e.distribution==="store")&&!(!!s.ANDROID_KEYSTORE_BASE64||!!s.ANDROID_KEYSTORE)){R.error(w.red("Missing Android credentials: Signing Keystore")),e.quiet&&process.exit(1);let b=e.yes||await wi({message:"Would you like to automatically create and upload an Android Keystore for this profile now?",initialValue:!0});if(b&&!vi(b))return await Xe({platform:"android",profile:m}),e.quiet||R.info(w.green("\u2713 Android Keystore setup complete! Restarting build phase...")),bt(e);e.quiet||R.info(w.yellow(`Run \`${f.nameLower} credentials --platform android\` to set up a signing keystore manually.`)),process.exit(1)}}catch(g){R.warn(`Failed to resolve credentials: ${g.message}`)}}let k=!!(e.local&&e.buildId),x=!!(e.local||e.sshHost),I=!x&&!k;if(k){R.info(w.magenta("\u{1F3D7}\uFE0F Runner Mode: Executing isolated build task..."));let g=await Gt({...e,interactive:!1},i,s,t,{branch:u,version:p,summary:O,buildType:S});await M(g),process.exit(0)}async function M(g){if(t&&g.length>0){let P=jt(),A=[];e.quiet||P.start("Uploading artifacts to Dashboard...");try{for(let b of g){let C=he.basename(b),H=oe.readFileSync(b),B=he.extname(C).toLowerCase(),N="application/octet-stream",F=await D.post(`/builds/${t}/${i}/artifact-upload-url`,{fileName:C,fileType:N});if(F.data.status!=="success")throw new Error(`Failed to get upload URL for ${C}`);let Z=!1;for(let K=1;K<=3;K++)try{await it.put(F.data.uploadUrl,H,{headers:{"Content-Type":N},maxBodyLength:1/0,maxContentLength:1/0,timeout:12e4}),Z=!0;break}catch(j){if(R.warn(w.yellow(`Artifact upload attempt ${K}/3 failed (${j.code||j.message})`)),K<3)await new Promise(z=>setTimeout(z,3e3*K));else throw j}Z&&A.push({name:C,url:F.data.downloadUrl,size:H.length,type:B.substring(1)})}e.quiet||P.stop("Artifacts uploaded.")}catch(b){e.quiet||P.stop("Failed to upload artifacts."),R.error(w.red(`Upload error: ${b.message}`));try{await D.patch(`/builds/${t}/${i}`,{status:"completed",artifacts:g.map(C=>he.basename(C)),endTime:Date.now()})}catch(C){R.warn(w.yellow(`Could not set fallback build status: ${C.message}`))}return}if(t&&A.length>0)try{R.info(w.cyan(`
-\u{1F517} Download Links:`));for(let b of A)R.info(w.dim(`  - ${b.name}: `)+w.blue.underline(b.url));await D.patch(`/builds/${t}/${i}`,{status:"success",artifacts:A,endTime:Date.now()}),nt(e,{status:"success",projectId:t,buildId:i,platform:e.platform,profile:m,branch:u,version:p,buildType:S,developmentClient:!!e.developmentClient,summary:O,artifacts:A}),R.success(w.green(`
-\u2713 Build completed and reported to dashboard.`))}catch(b){R.warn(w.yellow(`
-\u26A0\uFE0F Could not report to dashboard: ${b.message}`))}}else if(t)try{await D.patch(`/builds/${t}/${i}`,{status:"completed",endTime:Date.now()}),nt(e,{status:"completed",projectId:t,buildId:i,platform:e.platform,profile:m,branch:u,version:p,buildType:S,developmentClient:!!e.developmentClient,summary:O})}catch{}}if(x){if(R.info(w.cyan(`\u{1F680} Direct Build Mode: Executing on ${e.sshHost||"local"}...`)),t&&!r){let g=process.argv.slice(3).join(" ");await D.post("/builds",{projectId:t,buildId:i,platform:e.platform,status:"building",branch:u,version:p,summary:O,startTime:o,buildType:S,buildProfile:m,buildArgs:g,simulator:!!e.simulator,developmentClient:!!e.developmentClient})}if(e.sshHost&&e.platform==="ios"){let g=await _i(e,i,s,t)}else{let g=await Gt({...e,interactive:!!e.local},i,s,t,{branch:u,version:p,summary:O,buildType:S});await M(g)}return}if(I&&(R.info(w.blue("\u{1F6F0}\uFE0F Cloud Initiator Mode: Preparing orchestration...")),!e.dryRun)){e.quiet||n.start("Zipping and uploading local source...");let g=await D.post("/builds/source-upload-url",{projectId:t,buildId:i});if(g.data.status!=="success")throw n.stop("Failed to get upload URL."),new Error("Failed to get source upload URL from API");let P=new Ci,A=oe.readdirSync("."),b=["node_modules",".git","dist","build","builds",".gradle",".idea","android/build","ios/build","ios/Pods",`.${f.nameLower}_cli`];for(let B of A){if(b.includes(B))continue;oe.statSync(B).isDirectory()?P.addLocalFolder(B,B):P.addLocalFile(B)}let C=P.toBuffer();e.quiet||n.message(`Uploading source (${(C.length/1024/1024).toFixed(1)} MB)...`);let H=!1;for(let B=1;B<=3;B++)try{await it.put(g.data.uploadUrl,C,{headers:{"Content-Type":"application/zip"},maxBodyLength:1/0,maxContentLength:1/0,timeout:12e4}),H=!0;break}catch(N){if(B<3)n.message(`Upload attempt ${B} failed (${N.code||N.message}), retrying...`),await new Promise(F=>setTimeout(F,2e3*B));else throw N}if(e.quiet||n.stop("Source uploaded"),t){let B=process.argv.slice(3).join(" ");await D.post("/builds",{projectId:t,buildId:i,platform:e.platform,status:"pending",branch:u,version:p,summary:O,startTime:o,buildType:S,buildProfile:m,buildArgs:B,simulator:!!e.simulator,developmentClient:!!e.developmentClient}),R.info(w.green("\u2713 Cloud build registered."))}e.platform==="android"&&await Ii(e,i,s,t,e.preBuild),e.quiet||R.info(w.cyan("\u{1F4E1} Connecting to build stream...")),await Ao(t,i,e);return}}catch(a){let s=a.message||"Build failed";a.response?.data?.message?s=a.response.data.message:a.message.includes("status code 402")?s="Insufficient wallet balance. Please add credits in the Dashboard.":a.message.includes("status code 403")&&(s="Monthly build quota exceeded. Upgrade your plan in the Dashboard."),t&&!e.local&&await c(s),R.error(w.red(`\u2717 Build failed: ${s}`)),process.exit(1)}};function Ni(e){return`${Mt}/build/${e}`}function nt(e,n){if(!e.jsonOutput)return;let i=he.resolve(e.jsonOutput),t={...n,url:n.url||Ni(n.buildId),dashboardUrl:n.dashboardUrl||Ni(n.buildId),updatedAt:new Date().toISOString()};try{let o=he.dirname(i);o&&o!=="."&&oe.mkdirSync(o,{recursive:!0}),oe.writeFileSync(i,JSON.stringify(t,null,2))}catch(o){R.warn(w.yellow(`Could not write build metadata JSON: ${o.message}`))}}async function Ao(e,n,i){let t=jt(),o="pending",r=0,c=0;for(i.quiet||t.start("Connecting to build stream...");;){try{let s=(await D.get(`/builds/${e}/${n}`)).data.build;if(s){if(o=s.status,o==="building")i.quiet||t.message("Build in progress...");else if(o==="failed")i.quiet||t.stop("Build failed."),nt(i,{status:"failed",projectId:e,buildId:n,platform:i.platform,profile:s.buildProfile,buildType:s.buildType,developmentClient:!!s.developmentClient,version:s.version,summary:s.summary,error:s.error||"Unknown error",artifacts:s.artifacts||[]}),R.error(w.red(`
-\u2717 Build failed: ${s.error||"Unknown error"}`)),process.exit(1);else if(o==="completed"||o==="success"){i.quiet||t.stop("Build successful!"),nt(i,{status:o,projectId:e,buildId:n,platform:i.platform,profile:s.buildProfile,buildType:s.buildType,developmentClient:!!s.developmentClient,version:s.version,summary:s.summary,artifacts:s.artifacts||[]}),R.success(w.green(`
+`));try{let H=j("security find-identity -v -p codesigning",{encoding:"utf-8"});r(h.magenta(`${H}
+`))}catch(H){r(h.red(`[DIAGNOSTIC] Failed to list identities: ${H.message}
+`))}}await ve("xcodebuild",["-exportArchive","-archivePath",k,"-exportPath",x,"-exportOptionsPlist",z],c,n,r,l),s&&await s("validate");let G=Ve(x,[".ipa"]);for(let H of G)try{j(`unzip -t "${H}"`,{stdio:"pipe"}),r&&r(`[IPA VALID] ${_.basename(H)} \u2014 archive integrity OK
+`)}catch{let ge=`IPA validation failed for ${_.basename(H)}: archive may be corrupt`;throw r&&r(`[IPA CORRUPT] ${ge}
+`),new Error(ge)}return G}},Te=e=>{try{let t=_.join(process.cwd(),f.configFileName);if(S.existsSync(t)){let i=JSON.parse(S.readFileSync(t,"utf-8"));if(e==="android"&&i.android?.package)return i.android.package;if(e==="ios"&&i.ios?.bundleIdentifier)return i.ios.bundleIdentifier}if(e==="android"){let i=["android/app/build.gradle","app/build.gradle","build.gradle"];for(let n of i)if(S.existsSync(n)){let r=S.readFileSync(n,"utf-8").match(/applicationId\s+['"]([^'"]+)['"]/);if(r)return r[1]}}else{let i=_.resolve(process.cwd(),S.existsSync("ios")?"ios":"."),n=Ve(i,["Info.plist"]).filter(l=>!l.includes("/Pods/")&&!l.includes("/build/")&&!l.includes("/DerivedData/"));n.sort((l,a)=>a.split("/").length-l.split("/").length);for(let l of n){let s=S.readFileSync(l,"utf-8").match(/<key>CFBundleIdentifier<\/key>\s*<string>([^<]+)<\/string>/);if(s&&!s[1].includes("$"))return s[1]}let o=Ve(i,[".xcodeproj"]);if(o.length>0){let l=_.join(o[0],"project.pbxproj");if(S.existsSync(l)){let s=S.readFileSync(l,"utf-8").match(/PRODUCT_BUNDLE_IDENTIFIER\s*=\s*"?([^";\s]+)"?;/);if(s)return s[1]}}let r=["app.json","app.config.json","app.config.js","app.config.ts"];for(let l of r)if(S.existsSync(l)){let s=S.readFileSync(l,"utf-8").match(/"bundleIdentifier":\s*"([^"]+)"/);if(s)return s[1]}}}catch{return null}return null},Do=()=>{try{return j("emulator -version",{stdio:"ignore"}),"emulator"}catch{let t=be.homedir(),i=[_.join(t,"Library/Android/sdk/emulator/emulator"),_.join(t,"Android/Sdk/emulator/emulator"),"/usr/local/lib/android/sdk/emulator/emulator"];for(let n of i)if(S.existsSync(n))return n}return"emulator"},Ro=async(e,t)=>{let i=bt();try{if(j("adb devices").toString().split(`
+`).slice(1).map(l=>l.trim()).filter(l=>l.length>0&&!l.startsWith("*")).map(l=>l.split("	")[0]).length===0){A.warn(h.yellow("No Android devices or emulators found."));let l=Do(),a=[];try{a=j(`${l} -list-avds`).toString().split(`
+`).filter(s=>s.trim().length>0)}catch{}if(a.length>0){let s=await jt({message:"Select an emulator to launch:",options:a.map(u=>({value:u,label:u}))});if(_t(s))return;i.start(`Launching emulator ${s}...`),Ci(l,["-avd",s],{detached:!0,stdio:"ignore"}).unref();let c=0,d=!1;for(;c<60;){try{if(j("adb shell getprop sys.boot_completed",{stdio:"pipe"}).toString().trim()==="1"){d=!0;break}}catch{}await new Promise(u=>setTimeout(u,2e3)),c++}if(!d)throw i.stop("Emulator launch timed out."),new Error("Emulator launch timed out. Please try launching it manually.");i.stop("Emulator launched.")}else throw new Error("No devices found and no emulators available to launch. (Make sure Android SDK is installed)")}i.start("Installing APK on device..."),await ve("adb",["install","-r",e],process.cwd(),{},t),i.stop("Installation complete.");let r=Te("android");if(r){A.info(h.blue(`\u{1F680} Launching ${r}...`));try{j(`adb shell dumpsys package ${r}`).toString().split(`
+`).find(s=>s.includes("android.intent.action.MAIN")&&s.includes("android.intent.category.LAUNCHER"))?j(`adb shell monkey -p ${r} -c android.intent.category.LAUNCHER 1`,{stdio:"ignore"}):j(`adb shell monkey -p ${r} -c android.intent.category.LAUNCHER 1`,{stdio:"ignore"})}catch{A.warn("Could not auto-launch app. You may need to open it manually.")}}}catch(n){i.stop("Installation failed."),A.error(h.red(`Failed to install APK: ${n.message}`))}},wo=async(e,t,i)=>{let n=bt();try{if(!j("xcrun simctl list devices booted").toString().includes("(Booted)")){A.warn(h.yellow("No iOS Simulator is currently booted."));let r=j("xcrun simctl list devices --json").toString(),l=JSON.parse(r).devices,a=[];Object.keys(l).forEach(u=>{l[u].forEach(p=>{p.isAvailable&&a.push({...p,runtime:u})})});let s=await jt({message:"Select a simulator to launch:",options:a.map(u=>({value:u.udid,label:`${u.name} (${u.runtime.split(".").pop()})`}))});if(_t(s))return;n.start(`Booting ${s}...`),j(`xcrun simctl boot ${s}`),j(`open -a Simulator --args -CurrentDeviceUDID ${s}`);let c=0,d=!1;for(;c<30;){try{if(j("xcrun simctl list devices booted").toString().includes(s)){d=!0;break}}catch{}await new Promise(u=>setTimeout(u,2e3)),c++}if(!d)throw n.stop("Simulator boot timed out."),new Error("Simulator boot timed out.");n.stop("Simulator booted.")}n.start("Installing on iOS Simulator..."),await ve("xcrun",["simctl","install","booted",e],process.cwd(),{},i),n.stop("Installation complete."),A.info(h.blue(`\u{1F680} Launching ${t}...`)),await ve("xcrun",["simctl","launch","booted",t],process.cwd(),{},i)}catch(o){n.stop("Installation failed."),A.error(h.red(`Failed to install on Simulator: ${o.message}`))}},vo=async(e,t,i)=>{let n=bt();n.start("Scanning for connected iOS devices...");try{let o=j("xcrun devicectl list devices --json-output -").toString(),l=(JSON.parse(o).result?.devices||[]).filter(s=>s.connectionProperties?.transportType==="wired"||s.connectionProperties?.transportType==="localNetwork");if(l.length===0)throw n.stop("No connected iOS devices found."),new Error("Please connect your iPhone via USB or ensure it is on the same Wi-Fi for wireless debugging.");let a=l[0].identifier;if(l.length>1){n.stop();let s=await jt({message:"Select a device to install on:",options:l.map(c=>({value:c.identifier,label:`${c.deviceProperties?.name||c.name||c.model?.name} (${c.model?.name||"iPhone"}) - ${c.identifier}`}))});if(_t(s))return;a=s,n.start(`Installing on ${a}...`)}else n.message(`Installing on ${l[0].model.name}...`);await ve("xcrun",["devicectl","device","install","app","--device",a,e],process.cwd(),{},i),n.stop("Installation complete."),A.info(h.blue(`\u{1F680} Launching ${t}...`)),await ve("xcrun",["devicectl","device","launch","app","--device",a,t],process.cwd(),{},i)}catch(o){n.stop("Installation failed."),A.error(h.red(`Failed to install on device: ${o.message}`)),A.info(h.dim('Make sure your device is unlocked and "Developer Mode" is enabled in Settings -> Privacy & Security.'))}};import Ti from"fs";import ki from"path";import{isCancel as Kt,log as ke,select as xi,spinner as Oo,text as Co}from"@clack/prompts";import We from"chalk";async function Li(e){let t=await zt(e);t&&(ke.success(We.green(`Maestro run ${t.status||"queued"}: ${t.testRunId}`)),t.launchDeferredReason&&ke.warn(We.yellow(t.launchDeferredReason)),t.dashboardUrl&&ke.info(We.dim("View test run: ")+We.white.underline(t.dashboardUrl)))}async function zt(e){let t=we(`./${f.configFileName}`),i=e.projectId||t?.projectId,n=e.profile||e.buildProfile||"production";if(!i)return ke.error(`No projectId found. Run \`${f.nameLower} link\` first or pass an internal project id.`),null;let o=e.platform;if(!o&&e.latest){let s=await xi({message:"Select platform for the latest build:",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"}]});if(Kt(s))return null;o=s}let r=await No(e);if(!r)return null;if(r.kind==="latest"&&!o)return ke.error("Pass --platform when using --latest."),null;if(r.kind==="artifact-url"&&!o)return ke.error("Pass --platform when using --artifact-url."),null;let l=To(e.maestroRetries);if(l===null)return null;let a=Oo();e.quiet||a.start("Queuing Maestro run...");try{let s=await $.post("/tests/maestro",{projectId:i,platform:o,profile:n,latest:r.kind==="latest",buildId:r.kind==="build-id"?r.value:e.buildId,buildUrl:r.kind==="build-url"?r.value:e.buildUrl,artifactUrl:r.kind==="artifact-url"?r.value:e.artifactUrl,flows:e.maestroFlows||".maestro",device:e.maestroDevice||(o==="ios"?"iphone_15":"pixel_6"),retries:l,record:!!e.maestroRecord});if(s.data.status!=="success")throw new Error(s.data.message||"Failed to queue Maestro run");let c=s.data.testRun,d={testRunId:c.testRunId,status:c.status,projectId:i,buildId:c.buildId,platform:c.platform,dashboardUrl:c.dashboardUrl||`${Qe}/tests/${c.testRunId}`,launchDeferredReason:c.launchDeferredReason};return ko(e,d),e.quiet||a.stop("Maestro run queued"),d}catch(s){e.quiet||a.stop("Could not queue Maestro run");let c=s.response?.data?.message||s.message||"Unknown error";return ke.error(We.red(`Maestro queue failed: ${c}`)),null}}async function No(e){if(e.buildId)return{kind:"build-id",value:e.buildId};if(e.buildUrl)return{kind:"build-url",value:e.buildUrl};if(e.artifactUrl)return{kind:"artifact-url",value:e.artifactUrl};if(e.latest)return{kind:"latest"};let t=await xi({message:"Select app artifact source for Maestro:",options:[{value:"latest",label:"Latest successful build"},{value:"build-id",label:"Build ID"},{value:"build-url",label:`${f.name} build URL`},{value:"artifact-url",label:"Direct artifact URL"}]});if(Kt(t))return null;if(t==="latest")return{kind:"latest"};let i=await Co({message:t==="build-id"?"Enter build ID:":t==="build-url"?`Enter ${f.name} build URL:`:"Enter artifact URL:",validate:n=>{let o=String(n||"").trim();if(!o)return"Value is required";if((t==="build-url"||t==="artifact-url")&&!o.startsWith("http"))return"Must be a URL"}});return Kt(i)?null:{kind:t,value:String(i).trim()}}function To(e){if(e==null||e==="")return 1;let t=Number(e);return!Number.isInteger(t)||t<0||t>10?(ke.error("--maestro-retries must be an integer between 0 and 10."),null):t}function ko(e,t){if(!e.jsonOutput)return;let i=ki.resolve(e.jsonOutput),n={...t,updatedAt:new Date().toISOString()};try{let o=ki.dirname(i);o&&o!=="."&&Ti.mkdirSync(o,{recursive:!0}),Ti.writeFileSync(i,JSON.stringify(n,null,2))}catch(o){ke.warn(We.yellow(`Could not write Maestro metadata JSON: ${o.message}`))}}var Pt=async e=>{e.platform!=="android"&&e.platform!=="ios"&&(R.error(`Platform ${e.platform} is not supported. Use 'android' or 'ios'.`),process.exit(1));let t=Vt(),i=e.buildId||xo(),n=e.projectId,o=Date.now(),r=!!n,l=async a=>{if(n)try{await $.patch(`/builds/${n}/${i}`,{status:"failed",error:a})}catch{}};if(e.local&&e.buildId){e.quiet||t.start(`Preparing isolated workspace for build: ${e.buildId}`);try{let a=await $.get(`/builds/${n}/${e.buildId}/source-url`);if(a.data.status!=="success")throw new Error("Failed to get source download URL from API");let s=await rt.get(a.data.downloadUrl,{responseType:"stream"}),c=(n||e.projectId||"default").replace(/[^a-zA-Z0-9-_]/g,"_"),d=he.join(Lo.homedir(),f.workspacesDir,c);oe.mkdirSync(d,{recursive:!0});let u=new Set(["node_modules",`.${f.nameLower}-cache-meta`]),p=new Set(["Pods"]);if(oe.existsSync(d)){let N=oe.readdirSync(d);for(let k of N){if(u.has(k))continue;if(k==="ios"){let I=he.join(d,"ios");try{let M=oe.readdirSync(I);for(let g of M)if(!p.has(g))try{oe.rmSync(he.join(I,g),{recursive:!0,force:!0})}catch{}}catch{}continue}let x=he.join(d,k);try{oe.rmSync(x,{recursive:!0,force:!0})}catch{}}}let m=he.join(d,"source.zip"),E=s.data,P=oe.createWriteStream(m);await new Promise((N,k)=>{E.pipe(P),E.on("error",x=>k(x)),P.on("finish",()=>N())}),new Hi(m).extractAllTo(d,!0);try{oe.unlinkSync(m)}catch{}process.chdir(d),R.info(w.green(`\u2713 Persistent workspace ready: ${d}`)),R.info(w.dim(`  \u{1F4E6} Cached dirs preserved: node_modules=${oe.existsSync(he.join(d,"node_modules"))?"\u2705":"\u274C"}, Pods=${oe.existsSync(he.join(d,"ios","Pods"))?"\u2705":"\u274C"}`)),t.stop()}catch(a){t.stop(`Failed to prepare isolated workspace: ${a.message}`),n&&await l(`Setup Error: ${a.message}`),process.exit(1)}}try{let a=e.repo;if(!a)try{a=Fi("git config --get remote.origin.url").toString().trim()}catch{R.warn("Could not detect git repository URL.")}!a&&e.dryRun,a||(a="https://github.com/placeholder/repo.git"),R.info(`Build ID: ${w.cyan(i)}`);let s={},c={},d=we(`./${f.configFileName}`);if(d){n=d.projectId;let g=e.buildProfile||"production",D=Ge(d,g);!D&&e.buildProfile&&(R.error(`Build profile '${g}' not found in ${f.configFileName}`),process.exit(1));let y=D||{};process.env.MACH_DEBUG&&R.info(w.dim(`Build profile: ${g} | Platform: ${e.platform} | Distribution: ${y.distribution||"store"} | Environment: ${y.environment||g}`)),y.env&&(c=y.env,R.info(w.blue(`Use Build Profile: ${g}`)));let b=e.platform,v=y[b]||{},B=["developmentClient","simulator","distribution","buildCommand","apk","iosScheme","preBuild","postBuild","scheme","environment","androidPackage","iosBundleIdentifier","name","iosDeploymentTarget","iosApiKeyId","iosApiKeyIssuer","iosApiKeyPath","iosTeamId","iosConfiguration","iosExportMethod","branch","repo","instanceType","ami","bucket","region","nodeVersion"];e.name=d.name,e.appName=d.name,e.androidPackage=d.android?.package,e.iosBundleIdentifier=d.ios?.bundleIdentifier,e.iosScheme=d.ios?.iosScheme,!e.nodeVersion&&d.nodeVersion&&(e.nodeVersion=d.nodeVersion);let K=F=>F==="androidPackage"?v.androidPackage??v.package??y.androidPackage??y.android?.package:F==="iosBundleIdentifier"?v.iosBundleIdentifier??v.bundleIdentifier??y.iosBundleIdentifier??y.ios?.bundleIdentifier:v[F]!==void 0?v[F]:y[F];for(let F of B){let G=K(F),H=F==="androidPackage"||F==="iosBundleIdentifier";G!==void 0&&(e[F]===void 0||H)&&(e[F]=G)}e.branch=e.branch||"main",e.iosConfiguration=e.iosConfiguration||(e.developmentClient||e.simulator?"Debug":"Release"),e.sshUser=e.sshUser||process.env.USER||"ubuntu",e.simulator===void 0&&(e.simulator=!1),e.local===void 0&&(e.local=!1),e.verbose===void 0&&(e.verbose=!1);let C=F=>{if(!F)return F;if(F.startsWith("scripts.")){let G=F.split(".")[1],H=d.scripts?.[G];if(H)return H;R.warn(`Script reference not found: ${F}`)}return F};e.buildCommand=C(e.buildCommand),e.preBuild=C(e.preBuild),e.postBuild=C(e.postBuild),!e.scheme&&d.scheme&&(e.scheme=d.scheme);let z={...Ke(d,f.envPrefix),...Ke(y,`${f.envPrefix}PROFILE_`)};s={...s,...c,...z},process.env.IOS_P12_PASSWORD&&!s.IOS_P12_PASSWORD&&(s.IOS_P12_PASSWORD=process.env.IOS_P12_PASSWORD),process.env.MATCH_PASSWORD&&!s.MATCH_PASSWORD&&(s.MATCH_PASSWORD=process.env.MATCH_PASSWORD),e.platform==="ios"&&(!e.iosTeamId&&y.ios?.appleTeamId&&(e.iosTeamId=y.ios.appleTeamId),!e.iosTeamId&&d.submit?.[g]?.ios?.appleTeamId&&(e.iosTeamId=d.submit[g].ios.appleTeamId),!e.iosTeamId&&d.submit?.production?.ios?.appleTeamId&&(R.warn(w.yellow(`Check: Using 'production' Team ID for '${g}' build.`)),e.iosTeamId=d.submit.production.ios.appleTeamId),e.iosTeamId?R.info(w.magenta(`\u2713 Injected iOS Team ID from config: ${e.iosTeamId}`)):R.warn(w.yellow("\u26A0\uFE0F No iOS Team ID found. Signing might fail if not managed automatically via Expo.")))}let u="unknown";try{u=Fi("git rev-parse --abbrev-ref HEAD").toString().trim()}catch{R.warn("Failed to detect git branch.")}let p="1.0.0";try{oe.existsSync("./package.json")&&(p=JSON.parse(oe.readFileSync("./package.json","utf-8")).version||"1.0.0")}catch{}let m=e.buildProfile||"production",E="Internal";e.developmentClient?E="DevelopmentClient":m.toLowerCase().includes("store")||m.toLowerCase()==="production"?E="Store":m.toLowerCase().includes("preview")||m.toLowerCase().includes("staging")?E="Staging":(m.toLowerCase().includes("development")||m.toLowerCase().includes("dev"))&&(E="Development");let P=e.platform==="ios"?"iOS":"Android",O=e.platform==="ios"&&e.simulator?" (Simulator)":"",N=`${P}${O} v${p} (${E})`;if(st(e,{status:"created",projectId:n,buildId:i,platform:e.platform,profile:m,branch:u,version:p,buildType:E,developmentClient:!!e.developmentClient,summary:N}),n){try{let g=e.buildProfile||"production";R.info(w.blue(`Fetching managed secrets for profile: ${g}...`));let D=e.environment||g,b=(await $.get(`/projects/${n}/secrets/export?env=${D}`)).data;b.status==="success"&&b.secrets&&(s={...s,...b.secrets},Object.keys(b.secrets).length>0&&R.info(w.magenta(`\u2713 Injected ${Object.keys(b.secrets).length} secrets from Dashboard.`)))}catch(g){R.warn(`Failed to load managed secrets from Dashboard: ${g.message}`)}try{R.info(w.blue("Fetching managed credentials..."));let g="development";e.distribution==="store"?g="store":e.distribution==="internal"&&(g=e.platform==="ios"?"adhoc":"internal"),E==="Staging"&&e.developmentClient&&(g="development");let D=await $.get("/credentials/resolve",{params:{projectId:n,platform:e.platform,bundleId:e.iosBundleIdentifier||e.androidPackage,distributionType:g}});if(D.data.status==="success"&&D.data.credentials){let y=D.data.credentials;R.info(w.magenta(`\u2713 Found ${y.length} relevant credentials.`));let b=y.filter(C=>{if(C.distributionType){let z=g==="internal"?"adhoc":g;return C.distributionType===z||C.distributionType===g}return!0});R.info(w.dim(`  Filtered to ${b.length} credentials for distributionType: ${g}`));let v=!1,B=!1,K=!1;for(let C of b)if(C.downloadUrl)try{let z="",F=5;for(;F>0;)try{let G=await rt.get(C.downloadUrl,{responseType:"arraybuffer",timeout:3e4,headers:{Connection:"close"}});z=Buffer.from(G.data).toString("base64");break}catch(G){if(F--,F===0)throw G;R.warn(w.dim(`  - Temporary network error downloading ${C.name}. Retrying... (${5-F}/5)`)),await new Promise(H=>setTimeout(H,2e3))}if(C.type==="ios_cert"&&!v)s.IOS_DIST_P12=z,C.password?(s.IOS_P12_PASSWORD=C.password,R.info(w.dim(`  - Injected ${C.name} as IOS_DIST_P12 with password from credential record`))):R.info(w.dim(`  - Injected ${C.name} as IOS_DIST_P12`)),v=!0;else if(C.type==="ios_profile"&&!B)s.IOS_PROVISIONING_PROFILE=z,R.info(w.dim(`  - Injected ${C.name} as IOS_PROVISIONING_PROFILE`)),B=!0;else if(C.type==="android_keystore"&&!K){s.ANDROID_KEYSTORE_BASE64=z;let G=C.keystorePassword||C.password,H=C.keyPassword||C.keystorePassword||C.password,V=C.alias||C.meta?.alias;if(G)s.ANDROID_STORE_PASSWORD=G,R.info(w.dim("  - Injected keystore password from credential record"));else{let L=["ANDROID_STORE_PASSWORD",...[g==="store"?"PRODUCTION":g==="internal"?"STAGING":"DEVELOPMENT",g.toUpperCase(),"PRODUCTION","STORE","INTERNAL","STAGING","RELEASE","DEBUG"].map(U=>`KEYSTORE_PASSWORD_${U}`),"KEYSTORE_PASSWORD"].find(U=>!!s[U]);L&&s[L]&&(s.ANDROID_STORE_PASSWORD=s[L])}if(H?(s.ANDROID_KEY_PASSWORD=H,R.info(w.dim("  - Injected key password from credential record"))):s.ANDROID_KEY_PASSWORD=s.ANDROID_STORE_PASSWORD||"",V)s.ANDROID_KEY_ALIAS=V;else{let ge=["ANDROID_KEY_ALIAS","KEYSTORE_ALIAS"].find(Ne=>!!s[Ne]);ge&&(s.ANDROID_KEY_ALIAS=s[ge])}R.info(w.dim(`  - Injected ${C.name} as ANDROID_KEYSTORE_BASE64`)),K=!0}}catch(z){R.warn(`Failed to download credential ${C.name}: ${z.message}`)}}if(e.platform==="android"){let y=d.android?.versionCode==="auto"||d.expo?.android?.versionCode==="auto";if(e.autoVersion||y){t.start("Resolving latest versionCode from Google Play...");try{let b=e.androidPackage||d.android?.package||d.expo?.android?.package||d.name,v=(D.data.credentials||[]).find(G=>G.type==="google_service_account"&&(!G.bundleId||G.bundleId===b));if(v||(v=((await $.get(`/credentials/${n}`)).data.credentials||[]).find(H=>H.type==="google_service_account"&&H.bundleId===b)),!v)throw new Error(`Google Service Account not found for package ${b}. Upload it under this package in Dashboard or run '${f.nameLower} credentials:service --platform android --package-name ${b}'.`);let B=await $.get(`/credentials/${v.credentialId}/download`,{params:{projectId:n}});if(B.data.status!=="success"||!B.data.downloadUrl)throw new Error("Failed to get secure download URL for service account");let C=(await rt.get(B.data.downloadUrl,{headers:{Connection:"close"}})).data,z=await vi(b,C);if(z==null)throw new Error("Could not retrieve any version information from Google Play.");let F=z+1;s.ANDROID_VERSION_CODE=F.toString(),t.stop(`\u2713 Resolved versionCode: ${w.green(F)} (Latest on Play Store: ${z})`)}catch(b){t.stop("Version resolution failed");let v=b.response?.data?.error?.message||b.message;throw new Error(`Auto-versioning failed: ${v}. Fix Google Play service account permissions or remove android.versionCode="auto".`)}}}if(e.platform==="ios"&&!e.simulator){let y=!!s.IOS_DIST_P12,b=!!s.IOS_PROVISIONING_PROFILE;if(!y||!b){let v=[...y?[]:["Distribution Certificate"],...b?[]:["Provisioning Profile"]].join(" and ");R.error(w.red(`Missing iOS credentials: ${v}`)),e.quiet&&process.exit(1);let B=e.yes||await Ui({message:"Would you like to generate these credentials now?",initialValue:!0});if(B&&!Mi(B))return await et({platform:"ios",profile:m}),e.quiet||R.info(w.green("\u2713 Credentials setup complete! Restarting build phase...")),Pt(e);e.quiet||R.info(w.yellow(`Run \`${f.nameLower} credentials\` to set up signing credentials manually.`)),process.exit(1)}}if(e.platform==="android"&&(e.distribution==="internal"||e.distribution==="store")&&!(!!s.ANDROID_KEYSTORE_BASE64||!!s.ANDROID_KEYSTORE)){R.error(w.red("Missing Android credentials: Signing Keystore")),e.quiet&&process.exit(1);let b=e.yes||await Ui({message:"Would you like to automatically create and upload an Android Keystore for this profile now?",initialValue:!0});if(b&&!Mi(b))return await et({platform:"android",profile:m}),e.quiet||R.info(w.green("\u2713 Android Keystore setup complete! Restarting build phase...")),Pt(e);e.quiet||R.info(w.yellow(`Run \`${f.nameLower} credentials --platform android\` to set up a signing keystore manually.`)),process.exit(1)}}catch(g){R.warn(`Failed to resolve credentials: ${g.message}`)}}let k=!!(e.local&&e.buildId),x=!!(e.local||e.sshHost),I=!x&&!k;if(k){R.info(w.magenta("\u{1F3D7}\uFE0F Runner Mode: Executing isolated build task..."));let g=await Gt({...e,interactive:!1},i,s,n,{branch:u,version:p,summary:N,buildType:E});await M(g),process.exit(0)}async function M(g){if(n&&g.length>0){let D=Vt(),y=[];e.quiet||D.start("Uploading artifacts to Dashboard...");try{for(let b of g){let v=he.basename(b),B=oe.readFileSync(b),K=he.extname(v).toLowerCase(),C="application/octet-stream",z=await $.post(`/builds/${n}/${i}/artifact-upload-url`,{fileName:v,fileType:C});if(z.data.status!=="success")throw new Error(`Failed to get upload URL for ${v}`);let F=!1;for(let G=1;G<=3;G++)try{await rt.put(z.data.uploadUrl,B,{headers:{"Content-Type":C},maxBodyLength:1/0,maxContentLength:1/0,timeout:12e4}),F=!0;break}catch(H){if(R.warn(w.yellow(`Artifact upload attempt ${G}/3 failed (${H.code||H.message})`)),G<3)await new Promise(V=>setTimeout(V,3e3*G));else throw H}F&&y.push({name:v,url:z.data.downloadUrl,size:B.length,type:K.substring(1)})}e.quiet||D.stop("Artifacts uploaded.")}catch(b){e.quiet||D.stop("Failed to upload artifacts."),R.error(w.red(`Upload error: ${b.message}`));try{await $.patch(`/builds/${n}/${i}`,{status:"completed",artifacts:g.map(v=>he.basename(v)),endTime:Date.now()})}catch(v){R.warn(w.yellow(`Could not set fallback build status: ${v.message}`))}return}if(n&&y.length>0)try{R.info(w.cyan(`
+\u{1F517} Download Links:`));for(let b of y)R.info(w.dim(`  - ${b.name}: `)+w.blue.underline(b.url));await $.patch(`/builds/${n}/${i}`,{status:"success",artifacts:y,endTime:Date.now()}),st(e,{status:"success",projectId:n,buildId:i,platform:e.platform,profile:m,branch:u,version:p,buildType:E,developmentClient:!!e.developmentClient,summary:N,artifacts:y}),R.success(w.green(`
+\u2713 Build completed and reported to dashboard.`)),e.maestro&&!k&&await Bi(n,i,e,m)}catch(b){R.warn(w.yellow(`
+\u26A0\uFE0F Could not report to dashboard: ${b.message}`))}}else if(n)try{await $.patch(`/builds/${n}/${i}`,{status:"completed",endTime:Date.now()}),st(e,{status:"completed",projectId:n,buildId:i,platform:e.platform,profile:m,branch:u,version:p,buildType:E,developmentClient:!!e.developmentClient,summary:N})}catch{}}if(x){if(R.info(w.cyan(`\u{1F680} Direct Build Mode: Executing on ${e.sshHost||"local"}...`)),n&&!r){let g=process.argv.slice(3).join(" ");await $.post("/builds",{projectId:n,buildId:i,platform:e.platform,status:"building",branch:u,version:p,summary:N,startTime:o,buildType:E,buildProfile:m,buildArgs:g,simulator:!!e.simulator,developmentClient:!!e.developmentClient})}if(e.sshHost&&e.platform==="ios"){let g=await wi(e,i,s,n)}else{let g=await Gt({...e,interactive:!!e.local},i,s,n,{branch:u,version:p,summary:N,buildType:E});await M(g)}return}if(I&&(R.info(w.blue("\u{1F6F0}\uFE0F Cloud Initiator Mode: Preparing orchestration...")),!e.dryRun)){e.quiet||t.start("Zipping and uploading local source...");let g=await $.post("/builds/source-upload-url",{projectId:n,buildId:i});if(g.data.status!=="success")throw t.stop("Failed to get upload URL."),new Error("Failed to get source upload URL from API");let D=new Hi,y=oe.readdirSync("."),b=["node_modules",".git","dist","build","builds",".gradle",".idea","android/build","ios/build","ios/Pods",`.${f.nameLower}_cli`];for(let K of y){if(b.includes(K))continue;oe.statSync(K).isDirectory()?D.addLocalFolder(K,K):D.addLocalFile(K)}let v=D.toBuffer();e.quiet||t.message(`Uploading source (${(v.length/1024/1024).toFixed(1)} MB)...`);let B=!1;for(let K=1;K<=3;K++)try{await rt.put(g.data.uploadUrl,v,{headers:{"Content-Type":"application/zip"},maxBodyLength:1/0,maxContentLength:1/0,timeout:12e4}),B=!0;break}catch(C){if(K<3)t.message(`Upload attempt ${K} failed (${C.code||C.message}), retrying...`),await new Promise(z=>setTimeout(z,2e3*K));else throw C}if(e.quiet||t.stop("Source uploaded"),n){let K=process.argv.slice(3).join(" ");await $.post("/builds",{projectId:n,buildId:i,platform:e.platform,status:"pending",branch:u,version:p,summary:N,startTime:o,buildType:E,buildProfile:m,buildArgs:K,simulator:!!e.simulator,developmentClient:!!e.developmentClient}),R.info(w.green("\u2713 Cloud build registered."))}e.platform==="android"&&await Di(e,i,s,n,e.preBuild),e.quiet||R.info(w.cyan("\u{1F4E1} Connecting to build stream...")),await Uo(n,i,e),e.maestro&&await Bi(n,i,e,m);return}}catch(a){let s=a.message||"Build failed";a.response?.data?.message?s=a.response.data.message:a.message.includes("status code 402")?s="Insufficient wallet balance. Please add credits in the Dashboard.":a.message.includes("status code 403")&&(s="Monthly build quota exceeded. Upgrade your plan in the Dashboard."),n&&!e.local&&await l(s),R.error(w.red(`\u2717 Build failed: ${s}`)),process.exit(1)}};async function Bi(e,t,i,n){R.info(w.cyan(`
+\u{1F3BC} Queuing managed Maestro test...`)),await zt({projectId:e,buildId:t,platform:i.platform,profile:n,maestroFlows:i.maestroFlows,maestroDevice:i.maestroDevice,maestroRetries:i.maestroRetries,maestroRecord:i.maestroRecord,quiet:i.quiet})}function ji(e){return`${Qe}/build/${e}`}function st(e,t){if(!e.jsonOutput)return;let i=he.resolve(e.jsonOutput),n={...t,url:t.url||ji(t.buildId),dashboardUrl:t.dashboardUrl||ji(t.buildId),updatedAt:new Date().toISOString()};try{let o=he.dirname(i);o&&o!=="."&&oe.mkdirSync(o,{recursive:!0}),oe.writeFileSync(i,JSON.stringify(n,null,2))}catch(o){R.warn(w.yellow(`Could not write build metadata JSON: ${o.message}`))}}async function Uo(e,t,i){let n=Vt(),o="pending",r=0,l=0;for(i.quiet||n.start("Connecting to build stream...");;){try{let s=(await $.get(`/builds/${e}/${t}`)).data.build;if(s){if(o=s.status,o==="building")i.quiet||n.message("Build in progress...");else if(o==="failed")i.quiet||n.stop("Build failed."),st(i,{status:"failed",projectId:e,buildId:t,platform:i.platform,profile:s.buildProfile,buildType:s.buildType,developmentClient:!!s.developmentClient,version:s.version,summary:s.summary,error:s.error||"Unknown error",artifacts:s.artifacts||[]}),R.error(w.red(`
+\u2717 Build failed: ${s.error||"Unknown error"}`)),process.exit(1);else if(o==="completed"||o==="success"){i.quiet||n.stop("Build successful!"),st(i,{status:o,projectId:e,buildId:t,platform:i.platform,profile:s.buildProfile,buildType:s.buildType,developmentClient:!!s.developmentClient,version:s.version,summary:s.summary,artifacts:s.artifacts||[]}),R.success(w.green(`
 \u2713 Build completed successfully!`));try{i.quiet||(R.info(w.magenta(`
-\u{1F4F1} Installation Hub:`)),R.info(w.dim("  - View & Install Build: ")+w.white.underline(`${Mt}/build/${n}`)))}catch{}return}else if(o!=="pending"){i.quiet||t.stop(`Build status: ${o}`);return}}try{let l=(await D.get(`/builds/${e}/${n}/logs`)).data;if(l&&typeof l=="string"&&!i.quiet){let u=l.split(`
-`);if(u.length>r){for(let p=r;p<u.length;p++)u[p].trim()&&console.log(w.dim(`  ${u[p]}`));r=u.length}}}catch{}c=0}catch{c++,c>10&&(t.stop("Connection lost."),R.error(w.red(`
-\u2717 Lost connection to Dashboard API.`)),process.exit(1))}await new Promise(a=>setTimeout(a,3e3))}}import Io from"http";import{execSync as we}from"child_process";import Kt from"chalk";import{log as Ve}from"@clack/prompts";import bo from"axios";import Vt from"fs";import _o from"os";import zt from"path";var ot=7070;function $o(){let e=[];try{let n=we("adb devices -l",{stdio:"pipe"}).toString(),i=new Set;n.split(`
-`).forEach(t=>{if(t.includes("List of devices")||!t.trim())return;let o=t.split(/\s+/);if(o.length<2||o[1]!=="device")return;let r=o[0];i.add(r);let c=t.match(/model:([^\s]+)/);e.push({id:r,platform:"android",type:r.startsWith("emulator-")?"emulator":"physical",name:c?c[1].replace(/_/g," "):r,status:"online",details:t.trim()})})}catch{}try{let n=`${process.env.ANDROID_HOME||`${process.env.HOME}/Library/Android/sdk`}/emulator/emulator`,t=we(`${n} -list-avds`,{stdio:"pipe"}).toString().split(`
-`).filter(r=>!!r.trim()),o=e.some(r=>r.platform==="android"&&r.id.startsWith("emulator-"));t.forEach(r=>{o||e.push({id:r,platform:"android",type:"emulator",name:r.replace(/_/g," "),status:"offline",details:`Android Virtual Device: ${r}`})})}catch{}if(process.platform!=="darwin")return e;try{let n=we("/usr/bin/xcrun simctl list devices --json",{stdio:"pipe"}).toString(),i=JSON.parse(n);Object.entries(i.devices).forEach(([t,o])=>{o.forEach(r=>{r.isAvailable&&e.push({id:r.udid,platform:"ios",type:"simulator",name:r.name,status:r.state?.toLowerCase()==="booted"?"online":"offline",runtime:t,details:`${r.name} (${t})`})})})}catch{}try{let n=we("/usr/bin/xcrun devicectl list devices --json-output -",{stdio:"pipe"}).toString();(JSON.parse(n).result?.devices||[]).forEach(t=>{let o=t.connectionProperties?.transportType;(o==="wired"||o==="localNetwork")&&e.push({id:t.identifier,platform:"ios",type:"physical",name:t.deviceProperties?.name||"iPhone",status:"online",details:`${t.deviceProperties?.name||"iPhone"} (${t.model?.name||t.hardwareModel||""}) - ${o}`})})}catch{}return e}async function Po(e){let n=[];for await(let i of e)n.push(Buffer.isBuffer(i)?i:Buffer.from(i));return n.length===0?{}:JSON.parse(Buffer.concat(n).toString("utf-8"))}async function Do(e,n){let i=await bo({method:"GET",url:e,responseType:"stream",timeout:12e4}),t=Vt.createWriteStream(n);i.data.pipe(t),await new Promise((o,r)=>{t.on("finish",o),t.on("error",r)})}async function Ro(e,n,i){let t=i||(n.toLowerCase().includes(".apk")?"android":"ios"),o=n.toLowerCase().includes(".ipa"),r=Vt.mkdtempSync(zt.join(_o.tmpdir(),`${ot}-install-`)),c=zt.join(r,t==="android"?"install.apk":o?"install.ipa":"install.zip");try{if(await Do(n,c),t==="android"){we(`adb -s ${JSON.stringify(e)} install -r ${JSON.stringify(c)}`,{stdio:"pipe"});return}if(process.platform!=="darwin")throw new Error("iOS local install requires macOS.");we(`unzip -o ${JSON.stringify(c)} -d ${JSON.stringify(r)}`,{stdio:"pipe"});let a="";try{a=we(`find ${JSON.stringify(zt.join(r,"Payload"))} -maxdepth 1 -name "*.app" 2>/dev/null | head -n 1`,{stdio:"pipe"}).toString().trim()}catch{}if(a||(a=we(`find ${JSON.stringify(r)} -name "*.app" -type d | head -n 1`,{stdio:"pipe"}).toString().trim()),!a)throw new Error(`No .app bundle found inside the ${o?"IPA":"archive"}.`);try{we(`/usr/bin/xcrun devicectl device install app --device ${JSON.stringify(e)} ${JSON.stringify(a)}`,{stdio:"pipe"})}catch(s){try{we(`/usr/bin/xcrun simctl install ${JSON.stringify(e)} ${JSON.stringify(a)}`,{stdio:"pipe"})}catch{throw new Error(s.stderr?.toString().trim()||s.message||"iOS install failed.")}}}finally{Vt.rmSync(r,{recursive:!0,force:!0})}}async function Ti(){process.platform!=="darwin"&&Ve.warn("Running on non-macOS \u2014 iOS discovery unavailable, Android only.");let e=Io.createServer((i,t)=>{if(t.setHeader("Access-Control-Allow-Origin","*"),t.setHeader("Access-Control-Allow-Methods","GET, POST, OPTIONS"),t.setHeader("Access-Control-Allow-Headers","Content-Type, Authorization"),i.method==="OPTIONS"){t.writeHead(204),t.end();return}let o=new URL(i.url||"/",`http://localhost:${ot}`);if(i.method==="GET"&&o.pathname==="/local/devices"){try{let r=$o();t.writeHead(200,{"Content-Type":"application/json"}),t.end(JSON.stringify({status:"success",targets:r}))}catch(r){t.writeHead(500,{"Content-Type":"application/json"}),t.end(JSON.stringify({status:"error",message:r.message}))}return}if(i.method==="POST"&&o.pathname==="/install-local"){n(i,t);return}t.writeHead(404),t.end()}),n=async(i,t)=>{try{let{deviceId:o,artifactUrl:r,platform:c}=await Po(i);if(!o||!r){t.writeHead(400,{"Content-Type":"application/json"}),t.end(JSON.stringify({status:"error",message:"deviceId and artifactUrl are required"}));return}await Ro(o,r,c),t.writeHead(200,{"Content-Type":"application/json"}),t.end(JSON.stringify({status:"success",message:`Installed on ${o}`}))}catch(o){t.writeHead(500,{"Content-Type":"application/json"}),t.end(JSON.stringify({status:"error",message:o.message||"Local install failed"}))}};e.listen(ot,"127.0.0.1",()=>{Ve.success(Kt.green(`Local device agent running on http://localhost:${ot}`)),Ve.info(Kt.dim("Keep this running while using the Install Hub on the dashboard.")),Ve.info(Kt.dim("Press Ctrl+C to stop."))}),e.on("error",i=>{i.code==="EADDRINUSE"?Ve.error(`Port ${ot} is already in use \u2014 agent may already be running.`):Ve.error(`Agent error: ${i.message}`),process.exit(1)}),await new Promise(()=>{})}import{createRequire as rs}from"module";import{text as vo,password as Oo,spinner as Co,isCancel as Li}from"@clack/prompts";import qt from"chalk";import rt from"fs";import ki from"path";import wo from"os";var Wt=ki.join(wo.homedir(),f.configDir),Yt=ki.join(Wt,"config.json");function Jt(){if(!rt.existsSync(Yt))return{};try{return JSON.parse(rt.readFileSync(Yt,"utf-8"))}catch{return{}}}function xi(e){rt.existsSync(Wt)||rt.mkdirSync(Wt,{recursive:!0});let i={...Jt(),...e};rt.writeFileSync(Yt,JSON.stringify(i,null,2))}async function Ui(){let e=Jt(),n=await vo({message:"Enter your email:",placeholder:"user@example.com",initialValue:e.lastLoginEmail,validate(o){if(o.length===0)return"Email is required!"}});if(Li(n))return;let i=await Oo({message:"Enter your password:",validate(o){if(o.length===0)return"Password is required!"}});if(Li(i))return;let t=Co();t.start("Authenticating...");try{let r=await(await fetch(`${yt}/login`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({username:n,password:i})})).json();r.status==="success"&&r.user.token?(ai({id:r.user.id,email:n,token:r.user.token,refreshToken:r.user.refreshToken}),xi({lastLoginEmail:n}),t.stop(qt.green("Login successful!"))):t.stop(qt.red("Login failed: "+(r.message||"Unknown error")))}catch(o){t.stop(qt.red("Network error: "+o.message))}}import{outro as No,select as To,spinner as ko,isCancel as xo}from"@clack/prompts";import _t from"chalk";import Xt from"fs";import Lo from"path";async function Mi(){if(!pe()){console.log(_t.red(`You are not logged in. Run \`${f.nameLower} login\` first.`));return}let n=ko();n.start("Fetching projects...");try{let{data:i}=await D.get("/projects");if(n.stop("Projects loaded."),i.status!=="success"||!i.projects||i.projects.length===0){console.log(_t.yellow(`No projects found. Run \`${f.nameLower} init\` to create one.`));return}let t=i.projects.map(u=>({value:u.projectId,label:`${u.name} (${u.slug})`})),o=await To({message:"Select a project to link:",options:t});if(xo(o))return;let r=Lo.join(process.cwd(),f.configFileName),c={};if(Xt.existsSync(r))try{c=JSON.parse(Xt.readFileSync(r,"utf-8"))}catch{}let a=i.projects.find(u=>u.projectId===o),s=c.android?.package||Ne("android"),d=c.ios?.bundleIdentifier||Ne("ios"),l={projectId:o,name:a?.name,slug:a?.slug,scheme:a?.slug?.toLowerCase()||"app",android:{package:s||""},ios:{bundleIdentifier:d||""},build:{development:{environment:"development",distribution:"internal"},staging:{environment:"staging",distribution:"internal"},production:{environment:"production",distribution:"store"}},submit:{production:{android:c.submit?.production?.android||{track:"internal"},ios:{ascAppId:c.submit?.production?.ios?.ascAppId||"1234567890",appleTeamId:c.submit?.production?.ios?.appleTeamId||"ABC123DEFG"}}}};Xt.writeFileSync(r,JSON.stringify(l,null,2)),No(_t.green(`Linked to project ${l.name} (${l.slug})`))}catch(i){n.stop(_t.red("Error fetching projects: "+i.message))}}import{outro as Uo,text as $t,select as Mo,spinner as Fo,isCancel as st}from"@clack/prompts";import at from"chalk";import Ho from"fs";import Bo from"path";import{randomUUID as Go}from"crypto";async function Fi(){if(!pe()){console.log(at.red(`You are not logged in. Run \`${f.nameLower} login\` first.`));return}let n=await $t({message:"Project Name:",placeholder:"My Awesome App",validate(a){if(a.length===0)return"Name is required!"}});if(st(n))return;let i=await $t({message:"Project Slug (URL friendly):",placeholder:"my-awesome-app",validate(a){if(a.length===0)return"Slug is required!";if(!/^[a-z0-9-]+$/.test(a))return"Slug must be lowercase alphanumeric with dashes."}});if(st(i))return;let t=await Mo({message:"Platform:",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"},{value:"web",label:"Web"},{value:"all",label:"All Platforms"}]});if(st(t))return;let o="";if(t==="android"||t==="all"){let a=Ne("android");if(o=await $t({message:"Android Package Name:",initialValue:a||"",placeholder:"com.example.app",validate(s){if(s.length===0)return"Package name is required for Android!"}}),st(o))return}let r="";if(t==="ios"||t==="all"){let a=Ne("ios");if(r=await $t({message:"iOS Bundle Identifier:",initialValue:a||"",placeholder:"com.example.app",validate(s){if(s.length===0)return"Bundle ID is required for iOS!"}}),st(r))return}let c=Fo();c.start("Creating project...");try{let a=Go(),d={projectId:a,name:n,slug:i,storageType:"managed",platforms:t==="all"?["android","ios","web"]:[t]},{data:l}=await D.post("/projects",d);if(l.status==="success"){c.stop(at.green("Project created successfully!"));let u=Bo.join(process.cwd(),f.configFileName);Ho.writeFileSync(u,JSON.stringify({projectId:a,name:n,slug:i,...o?{android:{package:o}}:{},...r?{ios:{bundleIdentifier:r}}:{},build:{development:{environment:"development",distribution:"internal"},staging:{environment:"staging",distribution:"internal"},production:{environment:"production",distribution:"store"}},submit:{production:{android:{track:"internal"},ios:{ascAppId:"1234567890",appleTeamId:"ABC123DEFG",...r?{bundleId:r}:{}}}}},null,2)),Uo(at.green(`Initialized project ${n} and linked locally!`))}else c.stop(at.red("creation failed: "+l.message))}catch(a){c.stop(at.red("Network error: "+a.message))}}import{spinner as Bi,log as ye}from"@clack/prompts";import Pt from"chalk";import Hi from"fs";import jo from"path";async function Gi(e,n){let i=pe();if(!i){ye.error(`You are not logged in. Run \`${f.nameLower} login\` first.`);return}let t=jo.join(process.cwd(),f.configFileName);if(!Hi.existsSync(t)){ye.error(`No ${f.configFileName} found. Run \`${f.nameLower} init\` or \`${f.nameLower} link\` first.`);return}let o;try{o=JSON.parse(Hi.readFileSync(t,"utf-8"))}catch{ye.error(`Failed to parse ${f.configFileName}`);return}let{projectId:r}=o;if(!r){ye.error(`${f.configFileName} is missing projectId.`);return}e==="set"?await Ko(r,n,i):e==="list"?await zo(r,i):ye.error(`Unknown env action: ${e}. Use 'set' or 'list'.`)}async function Ko(e,n,i){if(n.length===0){ye.error(`Usage: ${f.nameLower} env set KEY=VALUE [KEY2=VALUE2 ...]`);return}let t=Bi();t.start("Setting environment variables...");let o=0,r=0;for(let c of n){let[a,...s]=c.split("="),d=s.join("=");if(!a||d===void 0){ye.warn(`Invalid format for argument: ${c}. Expected KEY=VALUE.`),r++;continue}try{let l={key:a.trim(),value:d,type:"env",environment:"global",visibility:"secret"},{data:u}=await D.post(`/projects/${e}/secrets`,l);u.status==="success"?o++:(ye.error(`Failed to set ${a}: ${u.message}`),r++)}catch(l){ye.error(`Network error setting ${a}: ${l.message}`),r++}}t.stop(`Set ${o} variable(s). ${r>0?`${r} failed.`:""}`)}async function zo(e,n){let i=Bi();i.start("Fetching environment variables...");try{let{data:t}=await D.get(`/projects/${e}/secrets`);if(t.status==="success"){i.stop("Fetched variables.");let o=t.secrets||[];o.length===0?ye.info("No environment variables found for this project."):(ye.info(Pt.bold("Environment Variables (Global & Scoped):")),o.forEach(r=>{let c=r.visibility==="plain"?r.value:"********";console.log(`  ${Pt.cyan(r.key)} = ${c}  ${Pt.gray(`[${r.environment}]`)}`)}))}else i.stop(Pt.red(`Failed to fetch variables: ${t.message}`))}catch(t){i.stop("Failed to fetch variables."),ye.error(`Network error: ${t.message}`)}}import{spinner as lt,text as ct,select as Qt,isCancel as Le,cancel as ei}from"@clack/prompts";import re from"chalk";import ie from"fs";import Ue from"path";import{spawn as Ki}from"child_process";import zi from"axios";import ti from"os";import Vo from"crypto";async function Vi(e){let n=lt(),i=pe(),t=`./${f.configFileName}`;if(!ie.existsSync(t)){de(`No ${f.configFileName} found. Run \`${f.nameLower} init\` or \`${f.nameLower} link\` first.`);return}let o=JSON.parse(ie.readFileSync(t,"utf-8")),{projectId:r}=o,c=e.profile||e.buildProfile||"production";if(!r){de(`${f.configFileName} is missing projectId.`);return}ve(re.dim(`Submit for project: ${o.name||r} | Profile: ${c}`));let a=e.platform;if(!a){let O=await Qt({message:"Select platform to submit:",options:[{value:"ios",label:"iOS (App Store Connect / TestFlight)"},{value:"android",label:"Android (Google Play Console)"}]});if(Le(O)){ei("Operation cancelled");return}a=O}let s=await Yo(r,a,e,i?.token);if(!s)return;ve(`Using artifact: ${re.green(Ue.basename(s))} `);let d=a==="android"?Wo(o,c):void 0;n.start("Fetching submission credentials from Dashboard...");let l;try{let k=(await D.get(`/credentials/${r}`)).data.credentials||[];if(a==="android"&&!d){n.stop("Package name missing"),de("Could not resolve Android package name. Set android.package in mach.config.json/app.json.");return}let x=k.filter(I=>a==="ios"?I.type==="asc_api_key":I.type==="google_service_account"&&I.bundleId===d);if(x.length===0){n.stop("Credentials missing"),de(a==="android"?`No Google Play service credential found for package ${d}.`:`No Service Credentials found for ${a}.`),ve(a==="android"?`Use '${f.nameLower} credentials:service --platform android --package-name ${d}' or upload it under that package in the Dashboard.`:`Use '${f.nameLower} credentials:service --platform ${a}' or use the Dashboard to upload them.`);return}if(x.length===1)l=x[0],n.stop(`Using: ${l.name}`);else{n.stop("Multiple credentials found");let I=await Qt({message:`Choose a ${a==="ios"?"App Store Connect":"Google Play"} credential:`,options:x.map(M=>({value:M.credentialId,label:M.name,hint:`${M.keyId?`ID: ${M.keyId}`:""} ${M.issuerId?`(Issuer: ${M.issuerId.substring(0,8)}...)`:""}`}))});if(Le(I)){ei("Submission cancelled");return}l=x.find(M=>M.credentialId===I),ve(`Using selected: ${re.green(l.name)}`)}}catch(O){n.stop("Failed to fetch credentials"),de(`API Error: ${O.message} `);return}let u=ie.mkdtempSync(Ue.join(ti.tmpdir(),`${f.nameLower}-submit-`)),p=l.keyId||l.meta?.keyId,m=l.issuerId||l.meta?.issuerId,S=l.type==="asc_api_key"?`AuthKey_${p}.p8`:"service-account.json",$=Ue.join(u,S);n.start("Downloading secure key...");try{let O=await D.get(`/credentials/${l.credentialId}/download`,{params:{projectId:r}});if(O.data.status!=="success"||!O.data.downloadUrl)throw new Error("Failed to get secure download URL");let k=await zi.get(O.data.downloadUrl,{responseType:"arraybuffer"});ie.writeFileSync($,Buffer.from(k.data)),n.stop("Key downloaded to secure temp storage")}catch(O){n.stop("Download failed"),de(`Failed to download key: ${O.message}`);try{ie.rmSync(u,{recursive:!0,force:!0})}catch{}return}ve(re.blue(`Initiating ${a==="ios"?"TestFlight":"Google Play"} submission...`));let v=a==="android"?e.track||o.submit?.[c]?.android?.track||o.submit?.production?.android?.track||"internal":void 0;try{if(a==="ios"){if(!p){let x=await ct({message:"Enter App Store Connect Key ID (e.g. 2X948D...):",validate:I=>I.length>0?void 0:"Key ID is required"});if(Le(x))return;p=x}if(!m||m==="undefined"){let x=await ct({message:"Enter App Store Connect Issuer ID (Found on ASC Keys page):",validate:I=>I.length>0?void 0:"Issuer ID is required"});if(Le(x))return;m=x}ve(`Using ASC Key ID: ${p}`),ve(`Using ASC Issuer ID: ${m}`);let O=o.submit?.[c]?.ios?.bundleId||o.ios?.bundleIdentifier,k=await Jo(s,$,m,p,O);if(k&&k.apiKeyJsonPath)throw ve(re.cyan(`
+\u{1F4F1} Installation Hub:`)),R.info(w.dim("  - View & Install Build: ")+w.white.underline(`${Qe}/build/${t}`)))}catch{}return}else if(o!=="pending"){i.quiet||n.stop(`Build status: ${o}`);return}}try{let d=(await $.get(`/builds/${e}/${t}/logs`)).data;if(d&&typeof d=="string"&&!i.quiet){let u=d.split(`
+`);if(u.length>r){for(let p=r;p<u.length;p++)u[p].trim()&&console.log(w.dim(`  ${u[p]}`));r=u.length}}}catch{}l=0}catch{l++,l>10&&(n.stop("Connection lost."),R.error(w.red(`
+\u2717 Lost connection to Dashboard API.`)),process.exit(1))}await new Promise(a=>setTimeout(a,3e3))}}import Mo from"http";import{execSync as _e,spawn as Gi}from"child_process";import Wt from"chalk";import{log as Ye}from"@clack/prompts";import Fo from"axios";import Jt from"fs";import Ho from"os";import Yt from"path";var at=7070;function Bo(){let e=[];try{let t=_e("adb devices -l",{stdio:"pipe"}).toString(),i=new Set;t.split(`
+`).forEach(n=>{if(n.includes("List of devices")||!n.trim())return;let o=n.split(/\s+/);if(o.length<2||o[1]!=="device")return;let r=o[0];i.add(r);let l=n.match(/model:([^\s]+)/);e.push({id:r,platform:"android",type:r.startsWith("emulator-")?"emulator":"physical",name:l?l[1].replace(/_/g," "):r,status:"online",details:n.trim()})})}catch{}try{let t=`${process.env.ANDROID_HOME||`${process.env.HOME}/Library/Android/sdk`}/emulator/emulator`,n=_e(`${t} -list-avds`,{stdio:"pipe"}).toString().split(`
+`).filter(r=>!!r.trim()),o=e.some(r=>r.platform==="android"&&r.id.startsWith("emulator-"));n.forEach(r=>{o||e.push({id:r,platform:"android",type:"emulator",name:r.replace(/_/g," "),status:"offline",details:`Android Virtual Device: ${r}`})})}catch{}if(process.platform!=="darwin")return e;try{let t=_e("/usr/bin/xcrun simctl list devices --json",{stdio:"pipe"}).toString(),i=JSON.parse(t);Object.entries(i.devices).forEach(([n,o])=>{o.forEach(r=>{r.isAvailable&&e.push({id:r.udid,platform:"ios",type:"simulator",name:r.name,status:r.state?.toLowerCase()==="booted"?"online":"offline",runtime:n,details:`${r.name} (${n})`})})})}catch{}try{let t=_e("/usr/bin/xcrun devicectl list devices --json-output -",{stdio:"pipe"}).toString();(JSON.parse(t).result?.devices||[]).forEach(n=>{let o=n.connectionProperties?.transportType;(o==="wired"||o==="localNetwork")&&e.push({id:n.identifier,platform:"ios",type:"physical",name:n.deviceProperties?.name||"iPhone",status:"online",details:`${n.deviceProperties?.name||"iPhone"} (${n.model?.name||n.hardwareModel||""}) - ${o}`})})}catch{}return e}async function Ki(e){let t=[];for await(let i of e)t.push(Buffer.isBuffer(i)?i:Buffer.from(i));return t.length===0?{}:JSON.parse(Buffer.concat(t).toString("utf-8"))}async function jo(e,t){let i=await Fo({method:"GET",url:e,responseType:"stream",timeout:12e4}),n=Jt.createWriteStream(t);i.data.pipe(n),await new Promise((o,r)=>{n.on("finish",o),n.on("error",r)})}async function Go(e,t,i){let n=i||(t.toLowerCase().includes(".apk")?"android":"ios"),o=t.toLowerCase().includes(".ipa"),r=Jt.mkdtempSync(Yt.join(Ho.tmpdir(),`${at}-install-`)),l=Yt.join(r,n==="android"?"install.apk":o?"install.ipa":"install.zip");try{if(await jo(t,l),n==="android"){_e(`adb -s ${JSON.stringify(e)} install -r ${JSON.stringify(l)}`,{stdio:"pipe"});return}if(process.platform!=="darwin")throw new Error("iOS local install requires macOS.");_e(`unzip -o ${JSON.stringify(l)} -d ${JSON.stringify(r)}`,{stdio:"pipe"});let a="";try{a=_e(`find ${JSON.stringify(Yt.join(r,"Payload"))} -maxdepth 1 -name "*.app" 2>/dev/null | head -n 1`,{stdio:"pipe"}).toString().trim()}catch{}if(a||(a=_e(`find ${JSON.stringify(r)} -name "*.app" -type d | head -n 1`,{stdio:"pipe"}).toString().trim()),!a)throw new Error(`No .app bundle found inside the ${o?"IPA":"archive"}.`);try{_e(`/usr/bin/xcrun devicectl device install app --device ${JSON.stringify(e)} ${JSON.stringify(a)}`,{stdio:"pipe"})}catch(s){try{_e(`/usr/bin/xcrun simctl install ${JSON.stringify(e)} ${JSON.stringify(a)}`,{stdio:"pipe"})}catch{throw new Error(s.stderr?.toString().trim()||s.message||"iOS install failed.")}}}finally{Jt.rmSync(r,{recursive:!0,force:!0})}}function Ko(e,t){if(!e)throw new Error("Device id is required.");if(t==="ios"){if(process.platform!=="darwin")throw new Error("iOS Simulator launch requires macOS.");return _e(`/usr/bin/xcrun simctl boot ${JSON.stringify(e)}`,{stdio:"pipe"}),Gi("open",["-a","Simulator"],{detached:!0,stdio:"ignore"}).unref(),"Simulator booting..."}if(t==="android"){let i=`${process.env.ANDROID_HOME||`${process.env.HOME}/Library/Android/sdk`}/emulator/emulator`;return Gi(i,["-avd",e],{detached:!0,stdio:"ignore"}).unref(),"Emulator booting in background..."}throw new Error("Invalid platform.")}async function zi(){process.platform!=="darwin"&&Ye.warn("Running on non-macOS \u2014 iOS discovery unavailable, Android only.");let e=Mo.createServer((n,o)=>{if(o.setHeader("Access-Control-Allow-Origin","*"),o.setHeader("Access-Control-Allow-Methods","GET, POST, OPTIONS"),o.setHeader("Access-Control-Allow-Headers","Content-Type, Authorization"),n.method==="OPTIONS"){o.writeHead(204),o.end();return}let r=new URL(n.url||"/",`http://localhost:${at}`);if(n.method==="GET"&&r.pathname==="/local/devices"){try{let l=Bo();o.writeHead(200,{"Content-Type":"application/json"}),o.end(JSON.stringify({status:"success",targets:l}))}catch(l){o.writeHead(500,{"Content-Type":"application/json"}),o.end(JSON.stringify({status:"error",message:l.message}))}return}if(n.method==="POST"&&r.pathname==="/install-local"){t(n,o);return}if(n.method==="POST"&&r.pathname==="/local/boot"){i(n,o);return}o.writeHead(404),o.end()}),t=async(n,o)=>{try{let{deviceId:r,artifactUrl:l,platform:a}=await Ki(n);if(!r||!l){o.writeHead(400,{"Content-Type":"application/json"}),o.end(JSON.stringify({status:"error",message:"deviceId and artifactUrl are required"}));return}await Go(r,l,a),o.writeHead(200,{"Content-Type":"application/json"}),o.end(JSON.stringify({status:"success",message:`Installed on ${r}`}))}catch(r){o.writeHead(500,{"Content-Type":"application/json"}),o.end(JSON.stringify({status:"error",message:r.message||"Local install failed"}))}},i=async(n,o)=>{try{let{id:r,platform:l}=await Ki(n),a=Ko(r,l);o.writeHead(200,{"Content-Type":"application/json"}),o.end(JSON.stringify({status:"success",message:a}))}catch(r){o.writeHead(500,{"Content-Type":"application/json"}),o.end(JSON.stringify({status:"error",message:r.message||"Local device launch failed"}))}};e.listen(at,"127.0.0.1",()=>{Ye.success(Wt.green(`Local device agent running on http://localhost:${at}`)),Ye.info(Wt.dim("Keep this running while using the Install Hub on the dashboard.")),Ye.info(Wt.dim("Press Ctrl+C to stop."))}),e.on("error",n=>{n.code==="EADDRINUSE"?Ye.error(`Port ${at} is already in use \u2014 agent may already be running.`):Ye.error(`Agent error: ${n.message}`),process.exit(1)}),await new Promise(()=>{})}import{createRequire as _s}from"module";import{text as Vo,password as Wo,spinner as Yo,isCancel as Yi}from"@clack/prompts";import Qt from"chalk";import lt from"fs";import Vi from"path";import zo from"os";var qt=Vi.join(zo.homedir(),f.configDir),Xt=Vi.join(qt,"config.json");function Zt(){if(!lt.existsSync(Xt))return{};try{return JSON.parse(lt.readFileSync(Xt,"utf-8"))}catch{return{}}}function Wi(e){lt.existsSync(qt)||lt.mkdirSync(qt,{recursive:!0});let i={...Zt(),...e};lt.writeFileSync(Xt,JSON.stringify(i,null,2))}async function Ji(){let e=Zt(),t=await Vo({message:"Enter your email:",placeholder:"user@example.com",initialValue:e.lastLoginEmail,validate(o){if(o.length===0)return"Email is required!"}});if(Yi(t))return;let i=await Wo({message:"Enter your password:",validate(o){if(o.length===0)return"Password is required!"}});if(Yi(i))return;let n=Yo();n.start("Authenticating...");try{let r=await(await fetch(`${At}/login`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({username:t,password:i})})).json();r.status==="success"&&r.user.token?(di({id:r.user.id,email:t,token:r.user.token,refreshToken:r.user.refreshToken}),Wi({lastLoginEmail:t}),n.stop(Qt.green("Login successful!"))):n.stop(Qt.red("Login failed: "+(r.message||"Unknown error")))}catch(o){n.stop(Qt.red("Network error: "+o.message))}}import{outro as Jo,select as qo,spinner as Xo,isCancel as Zo}from"@clack/prompts";import $t from"chalk";import ei from"fs";import Qo from"path";async function qi(){if(!pe()){console.log($t.red(`You are not logged in. Run \`${f.nameLower} login\` first.`));return}let t=Xo();t.start("Fetching projects...");try{let{data:i}=await $.get("/projects");if(t.stop("Projects loaded."),i.status!=="success"||!i.projects||i.projects.length===0){console.log($t.yellow(`No projects found. Run \`${f.nameLower} init\` to create one.`));return}let n=i.projects.map(u=>({value:u.projectId,label:`${u.name} (${u.slug})`})),o=await qo({message:"Select a project to link:",options:n});if(Zo(o))return;let r=Qo.join(process.cwd(),f.configFileName),l={};if(ei.existsSync(r))try{l=JSON.parse(ei.readFileSync(r,"utf-8"))}catch{}let a=i.projects.find(u=>u.projectId===o),s=l.android?.package||Te("android"),c=l.ios?.bundleIdentifier||Te("ios"),d={projectId:o,name:a?.name,slug:a?.slug,scheme:a?.slug?.toLowerCase()||"app",android:{package:s||""},ios:{bundleIdentifier:c||""},build:{development:{environment:"development",distribution:"internal"},staging:{environment:"staging",distribution:"internal"},production:{environment:"production",distribution:"store"}},submit:{production:{android:l.submit?.production?.android||{track:"internal"},ios:{ascAppId:l.submit?.production?.ios?.ascAppId||"1234567890",appleTeamId:l.submit?.production?.ios?.appleTeamId||"ABC123DEFG"}}}};ei.writeFileSync(r,JSON.stringify(d,null,2)),Jo($t.green(`Linked to project ${d.name} (${d.slug})`))}catch(i){t.stop($t.red("Error fetching projects: "+i.message))}}import{outro as er,text as Dt,select as tr,spinner as ir,isCancel as ct}from"@clack/prompts";import dt from"chalk";import nr from"fs";import or from"path";import{randomUUID as rr}from"crypto";async function Xi(){if(!pe()){console.log(dt.red(`You are not logged in. Run \`${f.nameLower} login\` first.`));return}let t=await Dt({message:"Project Name:",placeholder:"My Awesome App",validate(a){if(a.length===0)return"Name is required!"}});if(ct(t))return;let i=await Dt({message:"Project Slug (URL friendly):",placeholder:"my-awesome-app",validate(a){if(a.length===0)return"Slug is required!";if(!/^[a-z0-9-]+$/.test(a))return"Slug must be lowercase alphanumeric with dashes."}});if(ct(i))return;let n=await tr({message:"Platform:",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"},{value:"web",label:"Web"},{value:"all",label:"All Platforms"}]});if(ct(n))return;let o="";if(n==="android"||n==="all"){let a=Te("android");if(o=await Dt({message:"Android Package Name:",initialValue:a||"",placeholder:"com.example.app",validate(s){if(s.length===0)return"Package name is required for Android!"}}),ct(o))return}let r="";if(n==="ios"||n==="all"){let a=Te("ios");if(r=await Dt({message:"iOS Bundle Identifier:",initialValue:a||"",placeholder:"com.example.app",validate(s){if(s.length===0)return"Bundle ID is required for iOS!"}}),ct(r))return}let l=ir();l.start("Creating project...");try{let a=rr(),c={projectId:a,name:t,slug:i,storageType:"managed",platforms:n==="all"?["android","ios","web"]:[n]},{data:d}=await $.post("/projects",c);if(d.status==="success"){l.stop(dt.green("Project created successfully!"));let u=or.join(process.cwd(),f.configFileName);nr.writeFileSync(u,JSON.stringify({projectId:a,name:t,slug:i,...o?{android:{package:o}}:{},...r?{ios:{bundleIdentifier:r}}:{},build:{development:{environment:"development",distribution:"internal"},staging:{environment:"staging",distribution:"internal"},production:{environment:"production",distribution:"store"}},submit:{production:{android:{track:"internal"},ios:{ascAppId:"1234567890",appleTeamId:"ABC123DEFG",...r?{bundleId:r}:{}}}}},null,2)),er(dt.green(`Initialized project ${t} and linked locally!`))}else l.stop(dt.red("creation failed: "+d.message))}catch(a){l.stop(dt.red("Network error: "+a.message))}}import{spinner as Qi,log as ye}from"@clack/prompts";import Rt from"chalk";import Zi from"fs";import sr from"path";async function en(e,t){let i=pe();if(!i){ye.error(`You are not logged in. Run \`${f.nameLower} login\` first.`);return}let n=sr.join(process.cwd(),f.configFileName);if(!Zi.existsSync(n)){ye.error(`No ${f.configFileName} found. Run \`${f.nameLower} init\` or \`${f.nameLower} link\` first.`);return}let o;try{o=JSON.parse(Zi.readFileSync(n,"utf-8"))}catch{ye.error(`Failed to parse ${f.configFileName}`);return}let{projectId:r}=o;if(!r){ye.error(`${f.configFileName} is missing projectId.`);return}e==="set"?await ar(r,t,i):e==="list"?await lr(r,i):ye.error(`Unknown env action: ${e}. Use 'set' or 'list'.`)}async function ar(e,t,i){if(t.length===0){ye.error(`Usage: ${f.nameLower} env set KEY=VALUE [KEY2=VALUE2 ...]`);return}let n=Qi();n.start("Setting environment variables...");let o=0,r=0;for(let l of t){let[a,...s]=l.split("="),c=s.join("=");if(!a||c===void 0){ye.warn(`Invalid format for argument: ${l}. Expected KEY=VALUE.`),r++;continue}try{let d={key:a.trim(),value:c,type:"env",environment:"global",visibility:"secret"},{data:u}=await $.post(`/projects/${e}/secrets`,d);u.status==="success"?o++:(ye.error(`Failed to set ${a}: ${u.message}`),r++)}catch(d){ye.error(`Network error setting ${a}: ${d.message}`),r++}}n.stop(`Set ${o} variable(s). ${r>0?`${r} failed.`:""}`)}async function lr(e,t){let i=Qi();i.start("Fetching environment variables...");try{let{data:n}=await $.get(`/projects/${e}/secrets`);if(n.status==="success"){i.stop("Fetched variables.");let o=n.secrets||[];o.length===0?ye.info("No environment variables found for this project."):(ye.info(Rt.bold("Environment Variables (Global & Scoped):")),o.forEach(r=>{let l=r.visibility==="plain"?r.value:"********";console.log(`  ${Rt.cyan(r.key)} = ${l}  ${Rt.gray(`[${r.environment}]`)}`)}))}else i.stop(Rt.red(`Failed to fetch variables: ${n.message}`))}catch(n){i.stop("Failed to fetch variables."),ye.error(`Network error: ${n.message}`)}}import{spinner as pt,text as ut,select as ii,isCancel as Ue,cancel as ni}from"@clack/prompts";import re from"chalk";import ie from"fs";import Me from"path";import{spawn as nn}from"child_process";import on from"axios";import oi from"os";import cr from"crypto";async function rn(e){let t=pt(),i=pe(),n=`./${f.configFileName}`;if(!ie.existsSync(n)){ue(`No ${f.configFileName} found. Run \`${f.nameLower} init\` or \`${f.nameLower} link\` first.`);return}let o=JSON.parse(ie.readFileSync(n,"utf-8")),{projectId:r}=o,l=e.profile||e.buildProfile||"production";if(!r){ue(`${f.configFileName} is missing projectId.`);return}Oe(re.dim(`Submit for project: ${o.name||r} | Profile: ${l}`));let a=e.platform;if(!a){let N=await ii({message:"Select platform to submit:",options:[{value:"ios",label:"iOS (App Store Connect / TestFlight)"},{value:"android",label:"Android (Google Play Console)"}]});if(Ue(N)){ni("Operation cancelled");return}a=N}let s=await pr(r,a,e,i?.token);if(!s)return;Oe(`Using artifact: ${re.green(Me.basename(s))} `);let c=a==="android"?dr(o,l):void 0;t.start("Fetching submission credentials from Dashboard...");let d;try{let k=(await $.get(`/credentials/${r}`)).data.credentials||[];if(a==="android"&&!c){t.stop("Package name missing"),ue("Could not resolve Android package name. Set android.package in mach.config.json/app.json.");return}let x=k.filter(I=>a==="ios"?I.type==="asc_api_key":I.type==="google_service_account"&&I.bundleId===c);if(x.length===0){t.stop("Credentials missing"),ue(a==="android"?`No Google Play service credential found for package ${c}.`:`No Service Credentials found for ${a}.`),Oe(a==="android"?`Use '${f.nameLower} credentials:service --platform android --package-name ${c}' or upload it under that package in the Dashboard.`:`Use '${f.nameLower} credentials:service --platform ${a}' or use the Dashboard to upload them.`);return}if(x.length===1)d=x[0],t.stop(`Using: ${d.name}`);else{t.stop("Multiple credentials found");let I=await ii({message:`Choose a ${a==="ios"?"App Store Connect":"Google Play"} credential:`,options:x.map(M=>({value:M.credentialId,label:M.name,hint:`${M.keyId?`ID: ${M.keyId}`:""} ${M.issuerId?`(Issuer: ${M.issuerId.substring(0,8)}...)`:""}`}))});if(Ue(I)){ni("Submission cancelled");return}d=x.find(M=>M.credentialId===I),Oe(`Using selected: ${re.green(d.name)}`)}}catch(N){t.stop("Failed to fetch credentials"),ue(`API Error: ${N.message} `);return}let u=ie.mkdtempSync(Me.join(oi.tmpdir(),`${f.nameLower}-submit-`)),p=d.keyId||d.meta?.keyId,m=d.issuerId||d.meta?.issuerId,E=d.type==="asc_api_key"?`AuthKey_${p}.p8`:"service-account.json",P=Me.join(u,E);t.start("Downloading secure key...");try{let N=await $.get(`/credentials/${d.credentialId}/download`,{params:{projectId:r}});if(N.data.status!=="success"||!N.data.downloadUrl)throw new Error("Failed to get secure download URL");let k=await on.get(N.data.downloadUrl,{responseType:"arraybuffer"});ie.writeFileSync(P,Buffer.from(k.data)),t.stop("Key downloaded to secure temp storage")}catch(N){t.stop("Download failed"),ue(`Failed to download key: ${N.message}`);try{ie.rmSync(u,{recursive:!0,force:!0})}catch{}return}Oe(re.blue(`Initiating ${a==="ios"?"TestFlight":"Google Play"} submission...`));let O=a==="android"?e.track||o.submit?.[l]?.android?.track||o.submit?.production?.android?.track||"internal":void 0;try{if(a==="ios"){if(!p){let x=await ut({message:"Enter App Store Connect Key ID (e.g. 2X948D...):",validate:I=>I.length>0?void 0:"Key ID is required"});if(Ue(x))return;p=x}if(!m||m==="undefined"){let x=await ut({message:"Enter App Store Connect Issuer ID (Found on ASC Keys page):",validate:I=>I.length>0?void 0:"Issuer ID is required"});if(Ue(x))return;m=x}Oe(`Using ASC Key ID: ${p}`),Oe(`Using ASC Issuer ID: ${m}`);let N=ur(o,l),k=await fr(s,P,m,p,N);if(k&&k.apiKeyJsonPath)throw Oe(re.cyan(`
 [DIAGNOSTIC] API key written to: ${k.apiKeyJsonPath}
-`)),new Error("fastlane pilot execution failed");ji(`${a==="ios"?"App Store":"Google Play"} submission successful!`)}else await qo(s,$,v,d),ji("Google Play submission successful!")}catch(O){de(`Submission failed: ${O.message}`)}finally{Zo(u),s.includes(`${f.nameLower}-artifact-`)}}function Wo(e,n){if(e.submit?.[n]?.android?.package)return e.submit[n].android.package;if(e.android?.package)return e.android.package;if(e.expo?.android?.package)return e.expo.android.package;let i=Ue.join(process.cwd(),"app.json");if(ie.existsSync(i))try{return JSON.parse(ie.readFileSync(i,"utf-8")).expo?.android?.package}catch{}let t=Ue.join(process.cwd(),"app.config.json");if(ie.existsSync(t))try{let o=JSON.parse(ie.readFileSync(t,"utf-8"));return o.expo?.android?.package||o.android?.package}catch{}}async function Yo(e,n,i,t){let o=i.buildId?"id":i.latest?"latest":null;if(!o){let c=await Qt({message:"Select artifact source:",options:[{value:"latest",label:`Latest Production Build (${f.name})`},{value:"id",label:`Input Build ID (${f.name})`},{value:"url",label:"Remote URL"},{value:"local",label:"Local File Path"}]});if(Le(c))return ei("Operation cancelled"),null;o=c}if(o==="local"){let c=await ct({message:"Enter path to artifact (.ipa/.aab):",validate:a=>{if(!ie.existsSync(a))return"File not found";if(n==="ios"&&!a.endsWith(".ipa"))return"Must be an .ipa file";if(n==="android"&&!a.endsWith(".aab"))return"Must be an .aab file"}});return Le(c)?null:c}let r=lt();if(o==="latest"){let c=i.profile||i.buildProfile;r.start(`Fetching latest${c?` ${c}`:""} build...`);try{let a=await D.get(`/builds/${e}`,{params:{limit:50}});if(a.data.status!=="success")throw new Error(a.data.message);let s=a.data.builds||[],d=c?.toLowerCase(),l=I=>I.platform?.toLowerCase()===n.toLowerCase()&&I.status?.toLowerCase()==="success",u=I=>d?[I.buildProfile,I.profile,I.profileName,I.buildType].filter(Boolean).some(M=>String(M).toLowerCase()===d):!0,p=s.filter(I=>l(I)&&u(I)),m=p.find(I=>I.buildType?.toLowerCase()==="store"||I.distribution?.toLowerCase()==="store")||p[0],S=s.some(I=>I.platform?.toLowerCase()===n.toLowerCase()&&I.status?.toLowerCase()==="success");if(!m)return r.stop("No suitable build found"),de(c&&S?`No successful ${n} builds found for profile "${c}".`:"No successful builds found for this platform."),null;r.stop(`Found build: ${m.buildId}`);let $=m.artifacts||[];if($.length===0||$.every(I=>!(I.url||I.downloadUrl)))try{let I=await D.get(`/builds/${e}/${m.buildId}/artifacts`);I.data.status==="success"&&I.data.artifacts?.length>0?($=I.data.artifacts.map(M=>({...M,url:M.url||M.downloadUrl})),console.log(re.cyan(`  [RECOVERY] Fetched ${$.length} artifact(s) with download URLs.`))):console.log(re.yellow("  [RECOVERY] /artifacts endpoint returned 0 artifacts."))}catch(I){console.log(re.red(`  [RECOVERY] /artifacts fetch failed: ${I.message}`))}let O=n==="ios",k=$.find(I=>{let M=(I.type||"").toLowerCase(),g=(I.name||"").toLowerCase();if(console.log(re.dim(`    - Checking: ${I.name} (Type: ${I.type}, HasLink: ${!!(I.url||I.downloadUrl)})`)),M)return M===(O?"ipa":"aab");let P=O?".ipa":".aab",A=(I.url||I.downloadUrl||"").toLowerCase();return g.endsWith(P)||A.includes(P)});if(!k||!(k.url||k.downloadUrl))return de("Build found but artifact URL is missing."),null;let x=k.url||k.downloadUrl;return await Zt(x,O?"ios":"android")}catch(a){return r.stop("Fetch failed"),de(`API Error: ${a.message}`),null}}if(o==="id"){let c=i.buildId||await ct({message:"Enter Build ID:",validate:a=>a.length<5?"Invalid ID":void 0});if(Le(c))return null;r.start("Fetching build...");try{let a=await D.get(`/build/${c}`);if(a.data.status!=="success")throw new Error(a.data.message);let s=a.data.build;if(!s)throw new Error("Build not found");let d=n==="ios",l=s.artifacts?.find(u=>{if(u.type)return u.type===(d?"ipa":"aab");let p=d?".ipa":".aab";return u.name&&u.name.endsWith(p)||u.url&&u.url.includes(p)});return!l||!l.url?(r.stop("Missing artifact"),de("Artifact URL not found on build record."),null):(r.stop(`Found build: ${s.buildId}`),await Zt(l.url,d?"ios":"android"))}catch(a){return r.stop("Fetch failed"),de(a.message),null}}if(o==="url"){let c=await ct({message:"Enter Artifact URL:",validate:a=>a.startsWith("http")?void 0:"Must be a valid URL"});return Le(c)?null:await Zt(c,n)}return null}async function Zt(e,n,i=3){let t=lt();t.start("Downloading artifact...");let o=ie.mkdtempSync(Ue.join(ti.tmpdir(),`${f.nameLower}-artifact-`)),r=`app.${n==="ios"?"ipa":"aab"}`,c=Ue.join(o,r);for(let a=1;a<=i;a++)try{a>1&&(t.message(`Downloading artifact (Retry ${a}/${i})...`),await new Promise(l=>setTimeout(l,2e3*a)));let s=ie.createWriteStream(c),d=await zi({url:e,method:"GET",responseType:"stream",timeout:6e4});return await new Promise((l,u)=>{d.data.pipe(s);let p=!1;d.data.on("error",m=>{p||(p=!0,s.close(),u(m))}),s.on("finish",()=>{p||l()}),s.on("error",m=>{p||(p=!0,u(m))})}),t.stop("Download complete"),c}catch(s){if(a===i)throw t.stop("Download failed"),s}throw new Error("Download failed after retries")}async function Jo(e,n,i,t,o){let r=lt();if(o&&ve(`Bundled ID: ${re.green(o)}`),!i||!t)throw de(`Missing credentials: issuerId=${i}, keyId=${t}. Check your Dashboard.`),new Error("Missing ASC API Key Metadata (IssuerID or KeyID)");let c=ie.readFileSync(n,"utf8"),a;try{a=Vo.createPrivateKey(c).export({type:"pkcs8",format:"pem"})}catch{ve("Key normalization failed, falling back to manual re-wrapping..."),a=`-----BEGIN PRIVATE KEY-----
-${(c.replace(/-----BEGIN[^-]*-----/g,"").replace(/-----END[^-]*-----/g,"").replace(/\s+/g,"").match(/.{1,64}/g)||[]).join(`
+`)),new Error("fastlane pilot execution failed");tn(`${a==="ios"?"App Store":"Google Play"} submission successful!`)}else await mr(s,P,O,c),tn("Google Play submission successful!")}catch(N){ue(`Submission failed: ${N.message}`)}finally{hr(u),s.includes(`${f.nameLower}-artifact-`)}}function dr(e,t){if(e.submit?.[t]?.android?.package)return e.submit[t].android.package;let i=pi(e,t);if(i)return i;let n=Me.join(process.cwd(),"app.json");if(ie.existsSync(n))try{return JSON.parse(ie.readFileSync(n,"utf-8")).expo?.android?.package}catch{}let o=Me.join(process.cwd(),"app.config.json");if(ie.existsSync(o))try{let r=JSON.parse(ie.readFileSync(o,"utf-8"));return r.expo?.android?.package||r.android?.package}catch{}}function ur(e,t){return e.submit?.[t]?.ios?.bundleIdentifier?e.submit[t].ios.bundleIdentifier:e.submit?.[t]?.ios?.bundleId?e.submit[t].ios.bundleId:fi(e,t)}async function pr(e,t,i,n){let o=i.buildId?"id":i.latest?"latest":null;if(!o){let l=await ii({message:"Select artifact source:",options:[{value:"latest",label:`Latest Production Build (${f.name})`},{value:"id",label:`Input Build ID (${f.name})`},{value:"url",label:"Remote URL"},{value:"local",label:"Local File Path"}]});if(Ue(l))return ni("Operation cancelled"),null;o=l}if(o==="local"){let l=await ut({message:"Enter path to artifact (.ipa/.aab):",validate:a=>{if(!ie.existsSync(a))return"File not found";if(t==="ios"&&!a.endsWith(".ipa"))return"Must be an .ipa file";if(t==="android"&&!a.endsWith(".aab"))return"Must be an .aab file"}});return Ue(l)?null:l}let r=pt();if(o==="latest"){let l=i.profile||i.buildProfile;r.start(`Fetching latest${l?` ${l}`:""} build...`);try{let a=await $.get(`/builds/${e}`,{params:{limit:50}});if(a.data.status!=="success")throw new Error(a.data.message);let s=a.data.builds||[],c=l?.toLowerCase(),d=I=>I.platform?.toLowerCase()===t.toLowerCase()&&I.status?.toLowerCase()==="success",u=I=>c?[I.buildProfile,I.profile,I.profileName,I.buildType].filter(Boolean).some(M=>String(M).toLowerCase()===c):!0,p=s.filter(I=>d(I)&&u(I)),m=p.find(I=>I.buildType?.toLowerCase()==="store"||I.distribution?.toLowerCase()==="store")||p[0],E=s.some(I=>I.platform?.toLowerCase()===t.toLowerCase()&&I.status?.toLowerCase()==="success");if(!m)return r.stop("No suitable build found"),ue(l&&E?`No successful ${t} builds found for profile "${l}".`:"No successful builds found for this platform."),null;r.stop(`Found build: ${m.buildId}`);let P=m.artifacts||[];if(P.length===0||P.every(I=>!(I.url||I.downloadUrl)))try{let I=await $.get(`/builds/${e}/${m.buildId}/artifacts`);I.data.status==="success"&&I.data.artifacts?.length>0?(P=I.data.artifacts.map(M=>({...M,url:M.url||M.downloadUrl})),console.log(re.cyan(`  [RECOVERY] Fetched ${P.length} artifact(s) with download URLs.`))):console.log(re.yellow("  [RECOVERY] /artifacts endpoint returned 0 artifacts."))}catch(I){console.log(re.red(`  [RECOVERY] /artifacts fetch failed: ${I.message}`))}let N=t==="ios",k=P.find(I=>{let M=(I.type||"").toLowerCase(),g=(I.name||"").toLowerCase();if(console.log(re.dim(`    - Checking: ${I.name} (Type: ${I.type}, HasLink: ${!!(I.url||I.downloadUrl)})`)),M)return M===(N?"ipa":"aab");let D=N?".ipa":".aab",y=(I.url||I.downloadUrl||"").toLowerCase();return g.endsWith(D)||y.includes(D)});if(!k||!(k.url||k.downloadUrl))return ue("Build found but artifact URL is missing."),null;let x=k.url||k.downloadUrl;return await ti(x,N?"ios":"android")}catch(a){return r.stop("Fetch failed"),ue(`API Error: ${a.message}`),null}}if(o==="id"){let l=i.buildId||await ut({message:"Enter Build ID:",validate:a=>a.length<5?"Invalid ID":void 0});if(Ue(l))return null;r.start("Fetching build...");try{let a=await $.get(`/build/${l}`);if(a.data.status!=="success")throw new Error(a.data.message);let s=a.data.build;if(!s)throw new Error("Build not found");let c=t==="ios",d=s.artifacts?.find(u=>{if(u.type)return u.type===(c?"ipa":"aab");let p=c?".ipa":".aab";return u.name&&u.name.endsWith(p)||u.url&&u.url.includes(p)});return!d||!d.url?(r.stop("Missing artifact"),ue("Artifact URL not found on build record."),null):(r.stop(`Found build: ${s.buildId}`),await ti(d.url,c?"ios":"android"))}catch(a){return r.stop("Fetch failed"),ue(a.message),null}}if(o==="url"){let l=await ut({message:"Enter Artifact URL:",validate:a=>a.startsWith("http")?void 0:"Must be a valid URL"});return Ue(l)?null:await ti(l,t)}return null}async function ti(e,t,i=3){let n=pt();n.start("Downloading artifact...");let o=ie.mkdtempSync(Me.join(oi.tmpdir(),`${f.nameLower}-artifact-`)),r=`app.${t==="ios"?"ipa":"aab"}`,l=Me.join(o,r);for(let a=1;a<=i;a++)try{a>1&&(n.message(`Downloading artifact (Retry ${a}/${i})...`),await new Promise(d=>setTimeout(d,2e3*a)));let s=ie.createWriteStream(l),c=await on({url:e,method:"GET",responseType:"stream",timeout:6e4});return await new Promise((d,u)=>{c.data.pipe(s);let p=!1;c.data.on("error",m=>{p||(p=!0,s.close(),u(m))}),s.on("finish",()=>{p||d()}),s.on("error",m=>{p||(p=!0,u(m))})}),n.stop("Download complete"),l}catch(s){if(a===i)throw n.stop("Download failed"),s}throw new Error("Download failed after retries")}async function fr(e,t,i,n,o){let r=pt();if(o&&Oe(`Bundled ID: ${re.green(o)}`),!i||!n)throw ue(`Missing credentials: issuerId=${i}, keyId=${n}. Check your Dashboard.`),new Error("Missing ASC API Key Metadata (IssuerID or KeyID)");let l=ie.readFileSync(t,"utf8"),a;try{a=cr.createPrivateKey(l).export({type:"pkcs8",format:"pem"})}catch{Oe("Key normalization failed, falling back to manual re-wrapping..."),a=`-----BEGIN PRIVATE KEY-----
+${(l.replace(/-----BEGIN[^-]*-----/g,"").replace(/-----END[^-]*-----/g,"").replace(/\s+/g,"").match(/.{1,64}/g)||[]).join(`
 `)}
 -----END PRIVATE KEY-----`}console.log(re.yellow(`
-[DIAGNOSTIC] Key ID: ${t}`)),console.log(re.yellow(`[DIAGNOSTIC] Issuer ID: ${i}`)),console.log(re.yellow(`[DIAGNOSTIC] Key Checksum (Start): ${a.substring(0,45).replace(/\n/g,"\\n")}`)),console.log(re.yellow(`[DIAGNOSTIC] Key Checksum (End):   ${a.substring(a.length-28).replace(/\n/g,"\\n")}
-`)),r.start("Uploading to TestFlight (pilot)...");let s=Ue.join(ti.tmpdir(),`api_key_${t}.json`),d={key_id:t,issuer_id:i,key:a,in_house:!1};return ie.writeFileSync(s,JSON.stringify(d,null,2)),new Promise((l,u)=>{let p=Ki("fastlane",["pilot","upload","--ipa",e,"--api_key_path",s,"--skip_submission","true","--skip_waiting_for_build_processing","true"],{stdio:"inherit",env:Wi()});p.on("close",m=>{if(m!==0)r.stop("Pilot failed"),l({apiKeyJsonPath:s});else{r.stop("IPA uploaded to TestFlight");try{ie.unlinkSync(s)}catch{}l({apiKeyJsonPath:null})}}),p.on("error",m=>{try{ie.unlinkSync(s)}catch{}r.stop("Pilot execution error"),u(m)})})}async function qo(e,n,i="internal",t){let o=lt();o.start(`Uploading to Google Play ${i} track (supply)...`);let r=["supply","--aab",e,"--json_key",n,"--track",i];t&&t!=="*"&&r.push("--package_name",t),await new Promise((c,a)=>{let s=Ki("fastlane",r,{stdio:["inherit","pipe","pipe"],env:Wi()}),d="";s.stdout.on("data",l=>{let u=l.toString();d+=u,process.stdout.write(u)}),s.stderr.on("data",l=>{let u=l.toString();d+=u,process.stderr.write(u)}),s.on("error",l=>{o.stop("Supply execution error"),a(l)}),s.on("close",l=>{if(l===0){o.stop(`AAB uploaded to ${i} track`),c();return}o.stop("Supply failed"),a(new Error(Xo(d,i,t)))})})}function Wi(){return{...process.env,FASTLANE_SKIP_UPDATE_CHECK:"1",FASTLANE_HIDE_CHANGELOG:"1"}}function Xo(e,n,i){if(e.includes("does not allow any existing users to upgrade"))return["Google Play rejected this release because the uploaded AAB is not an upgrade for existing users.",`Package: ${i||"unknown"} | Track: ${n}`,"Build a new Android artifact with a higher versionCode, then submit that build.",`Recommended: ${f.nameLower} build --platform android --profile production --auto-version`,`Then: ${f.nameLower} submit --latest --platform android --profile production --track ${n}`].join(`
-`);let t=e.match(/Google Api Error:[^\n]+/);return t?t[0]:"fastlane supply execution failed"}function Zo(e){try{ie.existsSync(e)&&ie.rmSync(e,{recursive:!0,force:!0})}catch{}}function de(e){console.log(re.red(`\u274C ${e}`))}function ve(e){console.log(re.gray(`\u2022 ${e}`))}function ji(e){console.log(re.green(`\u2713 ${e}`))}import{spinner as Qo,log as Be,outro as er}from"@clack/prompts";import ii from"chalk";import Yi from"fs";import tr from"path";import{execSync as ir}from"child_process";import nr from"adm-zip";import or from"axios";import{randomUUID as rr}from"crypto";async function Ji(e){Be.info(ii.magenta("\u{1F680} Starting Over-The-Air (OTA) Update via Mach..."));let n=xe();(!n||!n.projectId)&&(Be.error(`No ${f.configFileName} found or missing projectId. Run \`mach link\` first.`),process.exit(1));let i=n.projectId,t=e.branch||"production",o="1.0.0";try{o=JSON.parse(Yi.readFileSync("./package.json","utf-8")).version||"1.0.0"}catch{Be.warn("Could not read package.json version. Defaulting to 1.0.0")}let r=Qo();r.start(`Compiling JavaScript bundles for OTA (Channel: ${t}, Runtime: ${o})...`);try{ir("npx expo export --platform all",{stdio:"ignore"})}catch(d){r.stop("Compilation failed."),Be.error(`Failed to export JS bundles using Expo: ${d.message}`),process.exit(1)}r.message("Zipping artifact payload...");let c=tr.join(process.cwd(),"dist");Yi.existsSync(c)||(r.stop("Missing dist folder."),Be.error("The `dist` directory was not created. Export failed."),process.exit(1));let a=new nr;a.addLocalFolder(c,"dist");let s=a.toBuffer();r.message("Uploading payload to Mach Cloud...");try{let d=rr(),l=await D.post("/builds/source-upload-url",{projectId:i,buildId:d});if(l.data.status!=="success")throw new Error("Could not secure upload bucket URL");let{uploadUrl:u,key:p}=l.data;await or.put(u,s,{headers:{"Content-Type":"application/zip"},maxBodyLength:1/0,maxContentLength:1/0}),r.message(`Promoting Update to ${t}...`),await D.post("/updates/publish",{projectId:i,channelName:t,runtimeVersion:o,platform:"android",updateId:`${d}-android`,manifestKey:p}),await D.post("/updates/publish",{projectId:i,channelName:t,runtimeVersion:o,platform:"ios",updateId:`${d}-ios`,manifestKey:p}),r.stop("Update Live!"),er(ii.green(`\u2713 OTA Update natively shipped to the '${t}' channel.`)),Be.info(ii.dim(`Any app running runtime '${o}' will download this bundle smoothly.`))}catch(d){r.stop("Update failed during Cloud Sync."),Be.error(`Upload error: ${d.message}`),process.exit(1)}}import{intro as sr,outro as qi,log as We}from"@clack/prompts";import Oe from"chalk";async function Xi(){sr(Oe.blue(`${f.name} CLI - User Profile`));let e=pe();if(!e){We.warn(Oe.yellow("You are not logged in.")),We.info(`Run \`${f.nameLower} login\` to authenticate.`),qi();return}We.info(`${Oe.bold("Logged in as:")} ${Oe.green(e.email)}`);try{await D.get("/projects");let i=pe().token.split(".");if(i.length===3){let t=JSON.parse(Buffer.from(i[1],"base64").toString());if(t.exp){let o=new Date(t.exp*1e3),r=new Date,c=o.getTime()-r.getTime();if(c>0){let a=Math.round(c/6e4),s=(a/60).toFixed(1);We.info(`${Oe.bold("Token status:")} Valid (Expires in ~${s}h / ${a}m)`)}else We.warn(`${Oe.bold("Token status:")} ${Oe.red("Expired")} (Auto-refresh failed)`)}}}catch{We.warn(`${Oe.bold("Token status:")} ${Oe.red("Unreachable")} (Session might be truly expired)${yt}`)}qi(Oe.blue("---"))}import{spawn as lr}from"child_process";import{log as Me}from"@clack/prompts";import Se from"chalk";import dr from"fs";import ar from"net";async function cr(e){return new Promise(n=>{let i=ar.createServer();i.once("error",t=>{t.code==="EADDRINUSE"?n(!0):n(!1)}),i.once("listening",()=>{i.close(),n(!1)}),i.listen(e,"0.0.0.0")})}async function Zi(e,n=20){let i=e;for(;i<e+n;){if(!await cr(i))return i;i++}throw new Error(`Could not find an available port after ${n} attempts starting from ${e}.`)}var Qi=async e=>{Me.info(Se.blue(`Starting ${f.name} Dev Orchestrator...`));let n=xe(),i=e.buildProfile||"development",t=n?He(n,i):null,o={...process.env};if(n?.projectId)try{Me.info(Se.dim(`Fetching managed secrets for profile: ${i}...`));let u=await D.get(`/projects/${n.projectId}/secrets/export?env=${i}`);u.data?.status==="success"&&u.data.secrets&&(Object.assign(o,u.data.secrets),Me.info(Se.magenta(`\u2713 Injected secrets from ${f.name} Dashboard.`)))}catch{Me.warn("Could not fetch managed secrets. Running with local env only.")}n&&Object.assign(o,ze(n,f.envPrefix)),t&&(Object.assign(o,ze(t,`${f.envPrefix}PROFILE_`)),t.env&&Object.assign(o,t.env));let r=!1;try{let u=JSON.parse(dr.readFileSync("package.json","utf-8"));r=!!(u.dependencies?.expo||u.devDependencies?.expo)}catch{Me.warn("Could not parse package.json. Defaulting to Bare React Native mode.")}let c=Number(e.port||t?.port||8081),a=await Zi(c);a!==c&&Me.info(Se.yellow(`Port ${c} is busy. ${f.name} is using ${a} instead.`));let s=process.platform==="win32"?"npx.cmd":"npx",d=[];if(r?(d=["expo","start","--port",String(a)],e.clear&&d.push("--clear"),e.tunnel&&d.push("--tunnel"),e.lan&&d.push("--lan"),e.localhost&&d.push("--localhost"),e.ios&&d.push("--ios"),e.android&&d.push("--android"),e.web&&d.push("--web")):(d=["react-native","start","--port",String(a)],e.clear&&d.push("--clear")),r){let u=[`${Se.cyan("i")}  open iOS simulator`,`${Se.cyan("a")}  open Android emulator/device`,`${Se.cyan("w")}  open web`,`${Se.cyan("r")}  reload app`];Me.info([Se.bold("Launch controls"),...u.map(p=>`  ${p}`),"",Se.dim("Direct launch: mach start --ios | --android | --web"),Se.dim(`Metro URL: http://localhost:${a}`)].join(`
-`))}else Me.info(Se.dim(`Metro URL: http://localhost:${a}`));let l=lr(s,d,{stdio:"inherit",env:o});return new Promise((u,p)=>{l.on("exit",m=>{m===0?u():p(new Error(`Dev server exited with code ${m}`))}),l.on("error",m=>{p(m)})})};import{log as fe}from"@clack/prompts";import _e from"chalk";var en=async e=>{let n=xe();n||(fe.error(_e.red(`No ${f.configFileName} found in the current directory.`)),process.exit(1));let i=e.profile||"development",t=He(n,i);if(e.json){console.log(JSON.stringify({project:n,resolved:t},null,2));return}fe.info(_e.bgBlue.white(` Resolved ${f.name} Config [${i}] `)),fe.info(_e.dim("----------------------------------------")),fe.info(`${_e.blue("Project ID:")} ${n.projectId}`),fe.info(`${_e.blue("Name:")} ${n.name}`),fe.info(`${_e.blue("Scheme:")} ${n.scheme}`),t?(fe.info(_e.dim(`
-Profile Settings:`)),fe.info(`${_e.cyan("Distribution:")} ${t.distribution||"none"}`),fe.info(`${_e.cyan("Development Client:")} ${t.developmentClient||"false"}`),t.env&&Object.keys(t.env).length>0&&(fe.info(_e.dim(`
-Environment Variables:`)),Object.entries(t.env).forEach(([o,r])=>{fe.info(`  ${o}=${r}`)}))):fe.warn(`Profile '${i}' not found.`),fe.info(_e.dim("----------------------------------------"))};import{log as $e,spinner as pt,text as tn,select as nn,confirm as ur,isCancel as dt,cancel as ut,outro as ft,note as pr}from"@clack/prompts";import W from"chalk";import{execSync as fr}from"child_process";async function mr(){try{let e=fr("xcrun devicectl list devices --json-output -",{stdio:["pipe","pipe","pipe"]}).toString();return(JSON.parse(e).result?.devices||[]).filter(t=>t.connectionProperties?.transportType==="wired"||t.connectionProperties?.transportType==="localNetwork").map(t=>({udid:t.identifier,name:t.deviceProperties?.name||"Unknown Device",model:t.hardwareProperties?.marketingName||"iPhone"}))}catch{return[]}}async function gr(e){let n=e.udid,i=e.name,t="";if(!n){let r=pt();r.start("Scanning for connected iOS devices...");let c=await mr();if(r.stop(c.length>0?`Found ${c.length} device(s)`:"No devices detected"),c.length===1)n=c[0].udid,i=i||c[0].name,t=c[0].model,$e.info(`Detected: ${W.bold(i)} (${W.dim(n.substring(0,12)+"...")})`);else if(c.length>1){let a=await nn({message:"Select a device to register:",options:c.map(d=>({value:d.udid,label:`${d.name} (${d.model})`,hint:d.udid.substring(0,12)+"..."}))});if(dt(a)){ut("Cancelled");return}n=a;let s=c.find(d=>d.udid===n);i=i||s.name,t=s.model}else{$e.info(W.dim("No connected devices found. Enter UDID manually."));let a=await tn({message:"Device UDID:",placeholder:"00008101-XXXXXXXXXXXX",validate(s){if(s.length<10)return"UDID seems too short"}});if(dt(a)){ut("Cancelled");return}n=a}}if(!i){let r=await tn({message:"Device name:",placeholder:"Nitesh's iPhone",validate(c){if(c.length===0)return"Name is required"}});if(dt(r)){ut("Cancelled");return}i=r}let o=pt();o.start("Registering device...");try{await D.post("/devices",{udid:n,name:i,platform:"ios",model:t||void 0,addedVia:"cli"}),o.stop(W.green("Device registered!")),$e.info(`  ${W.bold("Name:")} ${i}`),$e.info(`  ${W.bold("UDID:")} ${W.dim(n)}`)}catch(r){o.stop(W.red("Failed to register device")),$e.error(r.response?.data?.message||r.message)}ft(W.blue("---"))}async function hr(){let e=pt();e.start("Fetching registered devices...");try{let i=(await D.get("/devices")).data.devices||[];if(e.stop(`${i.length} device(s) registered`),i.length===0){$e.info(W.dim(`No devices registered yet. Run \`${f.nameLower} device register\` to add one.`)),ft(W.blue("---"));return}let t=i.map(o=>{let r=new Date(o.createdAt).toLocaleDateString();return`  ${W.bold(o.name.padEnd(24))} ${W.dim(o.udid.padEnd(28))} ${W.cyan(o.addedVia.padEnd(10))} ${W.dim(r)}`});pr(`  ${W.bold("Name".padEnd(24))} ${"UDID".padEnd(28)} ${"Via".padEnd(10)} Date
-`+t.join(`
-`),"Registered Devices")}catch(n){e.stop(W.red("Failed to fetch devices")),$e.error(n.response?.data?.message||n.message)}ft(W.blue("---"))}async function yr(e){let n=e.udid;if(!n){let o=pt();o.start("Fetching registered devices...");try{let c=(await D.get("/devices")).data.devices||[];if(o.stop(`${c.length} device(s) found`),c.length===0){$e.info(W.dim("No devices to remove.")),ft(W.blue("---"));return}let a=await nn({message:"Select device to remove:",options:c.map(s=>({value:s.udid,label:s.name,hint:s.udid.substring(0,12)+"..."}))});if(dt(a)){ut("Cancelled");return}n=a}catch(r){o.stop(W.red("Failed to fetch devices")),$e.error(r.response?.data?.message||r.message);return}}let i=await ur({message:`Remove device ${W.dim(n.substring(0,12)+"...")}?`});if(dt(i)||!i){ut("Cancelled");return}let t=pt();t.start("Removing device...");try{await D.delete(`/devices/${encodeURIComponent(n)}`),t.stop(W.green("Device removed"))}catch(o){t.stop(W.red("Failed to remove device")),$e.error(o.response?.data?.message||o.message)}ft(W.blue("---"))}async function Dt(e,n){switch(e){case"register":await gr(n);break;case"list":await hr();break;case"remove":await yr(n);break;default:$e.error(`Unknown action: ${e}`)}}import{log as Ae,spinner as Nn}from"@clack/prompts";import De from"chalk";import Lt from"path";import ht from"fs";import Xr from"os";import Zr from"axios";var Ee=(r=>(r.CRITICAL="critical",r.HIGH="high",r.MEDIUM="medium",r.LOW="low",r.INFO="info",r))(Ee||{}),Pe=(s=>(s.PERMISSIONS="permissions",s.SECRETS="secrets",s.DEPENDENCIES="dependencies",s.STORAGE="storage",s.NETWORK="network",s.DEBUG="debug",s.MANIFEST="manifest",s.ATS="ats",s))(Pe||{});import{spinner as bn,log as gt}from"@clack/prompts";import me from"chalk";import{execSync as Br}from"child_process";import _n from"fs";import $n from"path";import Fe from"fs";import mt from"path";import{execSync as Sr}from"child_process";var on={"android.permission.READ_PHONE_STATE":{severity:"high",description:"Can read phone number, IMEI, carrier info"},"android.permission.CALL_PHONE":{severity:"high",description:"Can make calls without user interaction"},"android.permission.SEND_SMS":{severity:"high",description:"Can send SMS without user interaction"},"android.permission.READ_SMS":{severity:"high",description:"Can read user SMS messages"},"android.permission.READ_CONTACTS":{severity:"medium",description:"Can read user contacts"},"android.permission.WRITE_CONTACTS":{severity:"medium",description:"Can modify user contacts"},"android.permission.READ_CALL_LOG":{severity:"high",description:"Can read call history"},"android.permission.CAMERA":{severity:"medium",description:"Camera access"},"android.permission.RECORD_AUDIO":{severity:"medium",description:"Microphone access"},"android.permission.ACCESS_FINE_LOCATION":{severity:"medium",description:"Precise GPS location"},"android.permission.ACCESS_COARSE_LOCATION":{severity:"medium",description:"Approximate location"},"android.permission.ACCESS_BACKGROUND_LOCATION":{severity:"high",description:"Background location tracking"},"android.permission.READ_EXTERNAL_STORAGE":{severity:"medium",description:"Read files on device"},"android.permission.WRITE_EXTERNAL_STORAGE":{severity:"medium",description:"Write files on device"},"android.permission.READ_MEDIA_IMAGES":{severity:"low",description:"Read photos"},"android.permission.READ_MEDIA_VIDEO":{severity:"low",description:"Read videos"},"android.permission.SYSTEM_ALERT_WINDOW":{severity:"high",description:"Draw overlays on other apps"},"android.permission.REQUEST_INSTALL_PACKAGES":{severity:"high",description:"Can install APKs"}},Er={NSCameraUsageDescription:{severity:"medium",description:"Camera access declared"},NSMicrophoneUsageDescription:{severity:"medium",description:"Microphone access declared"},NSLocationWhenInUseUsageDescription:{severity:"medium",description:"Location (in-use) declared"},NSLocationAlwaysUsageDescription:{severity:"high",description:"Background location declared"},NSContactsUsageDescription:{severity:"medium",description:"Contacts access declared"},NSCalendarsUsageDescription:{severity:"low",description:"Calendar access declared"},NSPhotoLibraryUsageDescription:{severity:"low",description:"Photo library access declared"}};function Ar(e){try{let i=Sr("npx expo config --type introspect --json 2>/dev/null",{cwd:e,encoding:"utf-8",timeout:3e4});return JSON.parse(i)}catch{}let n=mt.join(e,"app.json");if(Fe.existsSync(n))try{let i=JSON.parse(Fe.readFileSync(n,"utf-8"));return i.expo||i}catch{}return null}function Ir(e){let n=[],i=mt.join(e,"node_modules");if(!Fe.existsSync(i))return n;let t=/<uses-permission\s+android:name="([^"]+)"/g;function o(r,c){let a=mt.join(r,"android","src","main","AndroidManifest.xml");if(!Fe.existsSync(a))return;let s=Fe.readFileSync(a,"utf-8"),d;for(;(d=t.exec(s))!==null;)n.push({pkg:c,permission:d[1]});t.lastIndex=0}for(let r of Fe.readdirSync(i)){if(r.startsWith("."))continue;let c=mt.join(i,r);if(r.startsWith("@")){if(!Fe.statSync(c).isDirectory())continue;for(let a of Fe.readdirSync(c))o(mt.join(c,a),`${r}/${a}`)}else o(c,r)}return n}async function rn(e,n){let i=[],t=1,o=Ar(e),r=o?.android?.permissions||[],c=o?.android?.blockedPermissions||[];for(let d of r){let l=on[d];l&&i.push({id:`PERM-${String(t++).padStart(3,"0")}`,title:`${d.split(".").pop()} declared`,description:l.description,severity:l.severity,category:"permissions",file:"app.config.ts",recommendation:"Remove from permissions if not needed, or add justification."})}let a=Ir(e);for(let{pkg:d,permission:l}of a){let u=on[l];u&&(c.includes(l)||r.includes(l)||i.push({id:`PERM-${String(t++).padStart(3,"0")}`,title:`${l.split(".").pop()} injected by ${d}`,description:`${u.description}. Auto-injected via ${d} AndroidManifest.xml`,severity:u.severity,category:"permissions",file:`node_modules/${d}/android/src/main/AndroidManifest.xml`,recommendation:`Add "${l}" to blockedPermissions if not needed.`,autoFixable:!0}))}let s=o?.ios?.infoPlist||{};for(let[d,l]of Object.entries(Er))d in s&&i.push({id:`PERM-${String(t++).padStart(3,"0")}`,title:`iOS: ${d} declared`,description:l.description,severity:l.severity,category:"permissions",file:"app.config.ts",recommendation:`Remove ${d} from infoPlist if the app does not use this capability.`});return{category:"permissions",label:"Permission Audit",findings:i,durationMs:0}}import ni from"fs";import Rt from"path";var br=[{id:"SEC-001",pattern:/(['"`])(?:sk|pk)_(?:live|test)_[a-zA-Z0-9]{20,}\1/g,severity:"critical",label:"Stripe API Key"},{id:"SEC-002",pattern:/(['"`])AIza[0-9A-Za-z\-_]{35}\1/g,severity:"high",label:"Google API Key"},{id:"SEC-003",pattern:/(['"`])AKIA[0-9A-Z]{16}\1/g,severity:"critical",label:"AWS Access Key ID"},{id:"SEC-004",pattern:/-----BEGIN (?:RSA |EC )?PRIVATE KEY-----/g,severity:"critical",label:"Private key in source"},{id:"SEC-005",pattern:/(?:ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9_]{36,}/g,severity:"high",label:"GitHub Token"},{id:"SEC-006",pattern:/xox[bpors]-[a-zA-Z0-9-]{10,}/g,severity:"high",label:"Slack Token"},{id:"SEC-007",pattern:/(?:password|secret|apikey|api_key)\s*[:=]\s*['"`][^'"`\n]{8,}['"`]/gi,severity:"high",label:"Hardcoded credential"}],_r=new Set([".ts",".tsx",".js",".jsx"]),$r=new Set(["node_modules",".expo",".git","android","ios","dist","build","__tests__","__mocks__"]);function sn(e){let n=[],i=ni.readdirSync(e,{withFileTypes:!0});for(let t of i){if($r.has(t.name))continue;let o=Rt.join(e,t.name);t.isDirectory()?n.push(...sn(o)):_r.has(Rt.extname(t.name))&&n.push(o)}return n}function Pr(e){let n=e.trim();return n.startsWith("//")||n.startsWith("*")||n.startsWith("/*")}function Dr(e){return/process\.env\./i.test(e)||/import\.meta\.env/i.test(e)}async function an(e,n){let i=[],t=Rt.join(e,"src"),o=ni.existsSync(t)?t:e,r=sn(o);for(let c of r){let s=ni.readFileSync(c,"utf-8").split(`
-`),d=Rt.relative(e,c);for(let l=0;l<s.length;l++){let u=s[l];if(!Pr(u)&&!Dr(u))for(let{id:p,pattern:m,severity:S,label:$}of br)m.lastIndex=0,m.test(u)&&i.push({id:p,title:$,description:`Potential ${$.toLowerCase()} found in source code`,severity:S,category:"secrets",file:d,line:l+1,recommendation:`Move to environment variables or a secrets manager. Use \`${f.nameLower} env set\` for managed secrets.`})}}return{category:"secrets",label:"Secrets Detection",findings:i,durationMs:0}}import{execSync as Rr}from"child_process";var wr={critical:"critical",high:"high",moderate:"medium",low:"low",info:"info"};async function cn(e,n){let i=[],t=1,o;try{o=Rr("npm audit --json 2>/dev/null",{cwd:e,encoding:"utf-8",timeout:6e4})}catch(a){if(o=a.stdout||"",!o)return{category:"dependencies",label:"Dependency CVEs",findings:[],durationMs:0,error:"Failed to run npm audit. Ensure npm is available and dependencies are installed."}}let r;try{r=JSON.parse(o)}catch{return{category:"dependencies",label:"Dependency CVEs",findings:[],durationMs:0,error:"Failed to parse npm audit output."}}let c=r.vulnerabilities||{};for(let[a,s]of Object.entries(c)){let d=wr[s.severity]||"info",l=Array.isArray(s.via)?s.via.map(u=>typeof u=="string"?u:u.title||u.name).join(", "):String(s.via);i.push({id:`DEP-${String(t++).padStart(3,"0")}`,title:`${a} \u2014 ${s.severity}`,description:`Via: ${l}. Range: ${s.range||"unknown"}`,severity:d,category:"dependencies",recommendation:s.fixAvailable?`Run \`npm audit fix\` or update ${a} to a patched version.`:"No fix available yet. Monitor for updates or evaluate alternatives.",autoFixable:!!s.fixAvailable})}return{category:"dependencies",label:"Dependency CVEs",findings:i,durationMs:0}}import wt from"fs";import vt from"path";var vr=/(?:token|password|credential|secret|apiKey|api_key|session|auth|jwt|refresh_token|access_token|private_key|pin|otp)/i,ln=/AsyncStorage\s*\.\s*(?:setItem|mergeItem)\s*\(\s*['"`]([^'"`]+)['"`]/g,Or=/from\s+['"]@react-native-async-storage\/async-storage['"]|from\s+['"]react-native['"].*AsyncStorage/,Cr=new Set([".ts",".tsx",".js",".jsx"]),Nr=new Set(["node_modules",".expo",".git","android","ios","dist","build"]);function dn(e){let n=[];if(!wt.existsSync(e))return n;let i=wt.readdirSync(e,{withFileTypes:!0});for(let t of i){if(Nr.has(t.name))continue;let o=vt.join(e,t.name);t.isDirectory()?n.push(...dn(o)):Cr.has(vt.extname(t.name))&&n.push(o)}return n}async function un(e,n){let i=[],t=1,o=vt.join(e,"src"),r=wt.existsSync(o)?o:e,c=dn(r);for(let a of c){let s=wt.readFileSync(a,"utf-8");if(!Or.test(s))continue;let d=s.split(`
-`),l=vt.relative(e,a);for(let u=0;u<d.length;u++){let p=d[u];ln.lastIndex=0;let m;for(;(m=ln.exec(p))!==null;){let S=m[1];vr.test(S)&&i.push({id:`STOR-${String(t++).padStart(3,"0")}`,title:`AsyncStorage used for "${S}"`,description:`Sensitive data key "${S}" stored in AsyncStorage (unencrypted).`,severity:"high",category:"storage",file:l,line:u+1,recommendation:"Use expo-secure-store (SecureStore) for sensitive data instead of AsyncStorage."})}}}return{category:"storage",label:"Insecure Storage",findings:i,durationMs:0}}import Ot from"fs";import Ct from"path";var pn=/['"`](http:\/\/(?!localhost|127\.0\.0\.1|10\.|192\.168\.|0\.0\.0\.0|172\.(?:1[6-9]|2\d|3[01])\.)[^'"`\s]+)['"`]/g,Tr=/\/api\/|\/v[0-9]+\/|\/graphql|\/rest\//i,kr=new Set([".ts",".tsx",".js",".jsx"]),xr=new Set(["node_modules",".expo",".git","android","ios","dist","build","__tests__","__mocks__"]);function fn(e){let n=[];if(!Ot.existsSync(e))return n;let i=Ot.readdirSync(e,{withFileTypes:!0});for(let t of i){if(xr.has(t.name))continue;let o=Ct.join(e,t.name);t.isDirectory()?n.push(...fn(o)):kr.has(Ct.extname(t.name))&&n.push(o)}return n}async function mn(e,n){let i=[],t=1,o=Ct.join(e,"src"),r=Ot.existsSync(o)?o:e,c=fn(r);for(let a of c){let d=Ot.readFileSync(a,"utf-8").split(`
-`),l=Ct.relative(e,a);for(let u=0;u<d.length;u++){let p=d[u],m=p.trim();if(m.startsWith("//")||m.startsWith("*"))continue;pn.lastIndex=0;let S;for(;(S=pn.exec(p))!==null;){let $=S[1],v=Tr.test($);i.push({id:`NET-${String(t++).padStart(3,"0")}`,title:`Insecure HTTP URL${v?" (API endpoint)":""}`,description:`Plain HTTP URL found: ${$}`,severity:v?"high":"medium",category:"network",file:l,line:u+1,recommendation:"Use HTTPS instead of HTTP for all network requests."})}}}return{category:"network",label:"HTTP URLs",findings:i,durationMs:0}}import Nt from"fs";import Tt from"path";var gn=/(?:debug|debugMode|devMode|enableDebug)\s*[:=]\s*true/gi,hn=/console\.(?:log|warn|info|debug)\s*\([^)]*(?:token|password|secret|credential|key|auth)/gi,Lr=new Set([".ts",".tsx",".js",".jsx"]),Ur=new Set(["node_modules",".expo",".git","android","ios","dist","build","__tests__","__mocks__"]);function yn(e){let n=[];if(!Nt.existsSync(e))return n;let i=Nt.readdirSync(e,{withFileTypes:!0});for(let t of i){if(Ur.has(t.name))continue;let o=Tt.join(e,t.name);t.isDirectory()?n.push(...yn(o)):Lr.has(Tt.extname(t.name))&&n.push(o)}return n}async function Sn(e,n){let i=[],t=1,o=Tt.join(e,"src"),r=Nt.existsSync(o)?o:e,c=yn(r);for(let a of c){let d=Nt.readFileSync(a,"utf-8").split(`
-`),l=Tt.relative(e,a);for(let u=0;u<d.length;u++){let p=d[u],m=p.trim();if(!(m.startsWith("//")||m.startsWith("*"))&&(gn.lastIndex=0,gn.test(p)&&i.push({id:`DBG-${String(t++).padStart(3,"0")}`,title:"Hardcoded debug flag",description:"Debug/dev mode enabled in source code",severity:"medium",category:"debug",file:l,line:u+1,recommendation:"Use __DEV__ or environment variables instead of hardcoded debug flags."}),hn.lastIndex=0,hn.test(p))){let S=d.slice(Math.max(0,u-3),u).join(`
-`);/__DEV__/.test(S)||i.push({id:`DBG-${String(t++).padStart(3,"0")}`,title:"Sensitive data in console log",description:"Console log may expose sensitive data (token, password, etc.) in production",severity:"medium",category:"debug",file:l,line:u+1,recommendation:"Wrap in __DEV__ check or remove sensitive data from console output."})}}}return{category:"debug",label:"Debug/Dev Flags",findings:i,durationMs:0}}import En from"fs";import oi from"path";var Mr=new Set(["androidx.work.impl.background.systemjob.SystemJobService","androidx.work.impl.diagnostics.DiagnosticsReceiver","com.google.firebase.iid.FirebaseInstanceIdReceiver","com.google.android.gms.auth.api.signin.RevocationBoundService","androidx.profileinstaller.ProfileInstallReceiver","com.google.firebase.messaging.FirebaseMessagingService","com.google.android.gms.measurement.AppMeasurementService","com.google.android.gms.measurement.AppMeasurementJobService"]);function Fr(e){let n=[oi.join(e,"android","app","src","main","AndroidManifest.xml"),oi.join(e,"android","AndroidManifest.xml")];for(let i of n)if(En.existsSync(i))return i;return null}async function An(e,n){let i=[],t=1,o=Fr(e);if(!o)return{category:"manifest",label:"Android Manifest",findings:[],durationMs:0,error:"No AndroidManifest.xml found. Run with --prebuild or run `expo prebuild` first."};let r=En.readFileSync(o,"utf-8"),c=oi.relative(e,o),a=/<(activity|service|receiver|provider)\s+([^>]*?)(?:\/>|>)/gs,s;for(;(s=a.exec(r))!==null;){let d=s[1],l=s[2],p=l.match(/android:name="([^"]+)"/)?.[1]||"unknown";if(Mr.has(p))continue;let m=/android:exported="true"/.test(l),S=/android:permission="/.test(l);m&&!S&&i.push({id:`MAN-${String(t++).padStart(3,"0")}`,title:`Exported ${d}: ${p.split(".").pop()}`,description:`${p} is exported=true without android:permission protection`,severity:"medium",category:"manifest",file:c,recommendation:'Set android:exported="false" or add an android:permission attribute.'})}return/android:allowBackup="true"/.test(r)&&i.push({id:`MAN-${String(t++).padStart(3,"0")}`,title:"allowBackup is enabled",description:'android:allowBackup="true" allows data extraction via ADB backup',severity:"medium",category:"manifest",file:c,recommendation:'Set android:allowBackup="false" via expo-build-properties plugin.',autoFixable:!0}),/android:debuggable="true"/.test(r)&&i.push({id:`MAN-${String(t++).padStart(3,"0")}`,title:"App is debuggable",description:'android:debuggable="true" allows attaching a debugger in production',severity:"critical",category:"manifest",file:c,recommendation:"Ensure debuggable is false for production builds. This is usually set automatically for release builds."}),{category:"manifest",label:"Android Manifest",findings:i,durationMs:0}}import kt from"fs";import ri from"path";function Hr(e){let n=ri.join(e,"ios");if(!kt.existsSync(n))return null;let i=kt.readdirSync(n,{withFileTypes:!0});for(let t of i){if(!t.isDirectory()||t.name==="Pods"||t.name.startsWith("."))continue;let o=ri.join(n,t.name,"Info.plist");if(kt.existsSync(o))return o}return null}async function In(e,n){let i=[],t=1,o=Hr(e);if(!o)return{category:"ats",label:"iOS ATS Config",findings:[],durationMs:0,error:"No Info.plist found. Run with --prebuild or run `expo prebuild` first."};let r=kt.readFileSync(o,"utf-8"),c=ri.relative(e,o),a=r.match(/<key>NSAppTransportSecurity<\/key>\s*<dict>([\s\S]*?)<\/dict>/);if(a){let s=a[1];/<key>NSAllowsArbitraryLoads<\/key>\s*<true\s*\/>/.test(s)&&i.push({id:`ATS-${String(t++).padStart(3,"0")}`,title:"ATS disabled \u2014 NSAllowsArbitraryLoads",description:"App Transport Security is completely disabled. All HTTP connections are allowed.",severity:"critical",category:"ats",file:c,recommendation:"Remove NSAllowsArbitraryLoads or set to false. Use domain-specific exceptions only if absolutely necessary."});let d=s.match(/<key>NSExceptionDomains<\/key>\s*<dict>([\s\S]*?)<\/dict>/);if(d){let l=d[1].match(/<key>([^<]+)<\/key>/g);if(l)for(let u of l){let p=u.replace(/<\/?key>/g,"");p!=="NSExceptionDomains"&&i.push({id:`ATS-${String(t++).padStart(3,"0")}`,title:`ATS exception: ${p}`,description:`ATS exception configured for ${p}`,severity:"low",category:"ats",file:c,recommendation:`Verify that the ATS exception for ${p} is necessary. Use HTTPS where possible.`})}}}return{category:"ats",label:"iOS ATS Config",findings:i,durationMs:0}}var Gr=[{category:"permissions",label:"Permission Audit",fn:rn,requiresPrebuild:!1},{category:"secrets",label:"Secrets Detection",fn:an,requiresPrebuild:!1},{category:"dependencies",label:"Dependency CVEs",fn:cn,requiresPrebuild:!1},{category:"storage",label:"Insecure Storage",fn:un,requiresPrebuild:!1},{category:"network",label:"HTTP URLs",fn:mn,requiresPrebuild:!1},{category:"debug",label:"Debug/Dev Flags",fn:Sn,requiresPrebuild:!1},{category:"manifest",label:"Android Manifest",fn:An,requiresPrebuild:!0},{category:"ats",label:"iOS ATS Config",fn:In,requiresPrebuild:!0}];async function Pn(e,n){let i=Gr;n.category&&(i=i.filter(c=>c.category===n.category),i.length===0&&(gt.error(me.red(`Unknown category: ${n.category}`)),gt.info(me.dim(`Available: ${Object.values(Pe).join(", ")}`)),process.exit(1)));let t=i.filter(c=>!c.requiresPrebuild),o=i.filter(c=>c.requiresPrebuild),r=[];for(let c of t){let a=bn();a.start(me.dim(`Running ${c.label}...`));try{let s=Date.now(),d=await c.fn(e,n);d.durationMs=Date.now()-s,r.push(d);let l=d.findings.length;a.stop(l>0?me.yellow(`${c.label} \u2014 ${l} finding(s)`):me.green(`${c.label} \u2014 clean`))}catch(s){a.stop(me.red(`${c.label} \u2014 error`)),r.push({category:c.category,label:c.label,findings:[],durationMs:0,error:s.message})}}if(o.length>0){let c=$n.join(e,"android"),a=$n.join(e,"ios"),s=_n.existsSync(c)||_n.existsSync(a);if(!s&&n.prebuild){n.json||gt.info(me.dim(`
-Running expo prebuild for deeper analysis...`));try{Br("npx expo prebuild --no-install",{cwd:e,stdio:"pipe"})}catch{return gt.warn(me.yellow("Prebuild failed \u2014 skipping manifest/plist checks.")),r}}else if(!s)return n.json||gt.info(me.dim(`
-Skipping manifest/plist checks \u2014 no android/ios dirs. Use --prebuild to generate them.`)),r;for(let d of o){let l=bn();l.start(me.dim(`Running ${d.label}...`));try{let u=Date.now(),p=await d.fn(e,n);p.durationMs=Date.now()-u,r.push(p);let m=p.findings.length;l.stop(m>0?me.yellow(`${d.label} \u2014 ${m} finding(s)`):me.green(`${d.label} \u2014 clean`))}catch(u){l.stop(me.red(`${d.label} \u2014 error`)),r.push({category:d.category,label:d.label,findings:[],durationMs:0,error:u.message})}}}return r}import te from"chalk";import{log as Q}from"@clack/prompts";var Ye={critical:te.bgRed.white.bold,high:te.red.bold,medium:te.yellow.bold,low:te.blue,info:te.dim},xt={critical:0,high:1,medium:2,low:3,info:4};function jr(e,n){if(!n)return!0;let i=xt[n];return i===void 0?!0:xt[e]<=i}function Dn(e,n){let i=0,t={critical:0,high:0,medium:0,low:0,info:0};for(let c of e){let a=c.findings.filter(d=>jr(d.severity,n));if(a.length===0&&!c.error)continue;if(Q.info(""),Q.info(te.bold(`  ${c.label}`)+te.dim(`  ${a.length} finding(s)`)),Q.info(te.dim("  "+"\u2500".repeat(60))),c.error){Q.error(te.red(`  Error: ${c.error}`));continue}let s=[...a].sort((d,l)=>xt[d.severity]-xt[l.severity]);for(let d of s){let l=Ye[d.severity](` ${d.severity.toUpperCase()} `);Q.info(`  ${l}  ${te.bold(d.id)}  ${d.title}`),Q.info(te.dim(`          ${d.description}`)),d.file&&Q.info(te.dim(`          File: ${d.file}${d.line?`:${d.line}`:""}`)),Q.info(te.cyan(`          Fix: ${d.recommendation}`)),Q.info(""),t[d.severity]++,i++}}Q.info(""),Q.info(te.bold("  Summary")),Q.info(te.dim("  "+"\u2500".repeat(60))),Q.info(`  Total: ${te.bold(String(i))} finding(s)`),Q.info(`  ${Ye.critical(` ${t.critical} Critical `)}  ${Ye.high(` ${t.high} High `)}  ${Ye.medium(` ${t.medium} Medium `)}  ${Ye.low(` ${t.low} Low `)}  ${Ye.info(` ${t.info} Info `)}`);let o=t.critical>0,r=t.high>0;o||r?(Q.info(""),Q.error(te.red.bold(`  FAIL \u2014 ${t.critical} critical, ${t.high} high issue(s) found`))):i>0?(Q.info(""),Q.warn(te.yellow("  PASS (with warnings) \u2014 no critical or high issues"))):(Q.info(""),Q.success(te.green.bold("  PASS \u2014 no issues found")))}function Rn(e,n){let i=e.flatMap(o=>o.findings),t={};for(let o of Object.values(Ee))t[o]=i.filter(r=>r.severity===o).length;return{version:"1.0.0",timestamp:new Date().toISOString(),project:n.name||"unknown",projectVersion:n.version||"0.0.0",summary:{total:i.length,...t},passed:t.critical===0&&t.high===0,checks:e.map(o=>({category:o.category,label:o.label,findingCount:o.findings.length,durationMs:o.durationMs,error:o.error||null})),findings:i}}import{log as ee,spinner as Kr}from"@clack/prompts";import X from"chalk";import Te from"fs";import zr from"os";import Je from"path";import{execSync as Vr}from"child_process";var wn=16384,Wr=1,Yr=Buffer.from([127,69,76,70]);async function vn(e){ee.info(X.bold.underline("16KB Page Alignment Check")),console.log("");let n=Je.resolve(e);if(!Te.existsSync(n))return ee.error(X.red(`APK file not found: ${n}`)),!1;if(!n.endsWith(".apk"))return ee.error(X.red("The provided file is not an APK file.")),!1;let i=Kr();i.start("Extracting and analyzing native libraries...");let t=Te.mkdtempSync(Je.join(zr.tmpdir(),"mach-16kb-"));try{try{Vr(`unzip -o -q "${n}" "lib/arm64-v8a/*.so" "lib/x86_64/*.so" -d "${t}" 2>/dev/null`,{encoding:"utf-8",maxBuffer:50*1024*1024})}catch{}let o=On(Je.join(t,"lib"));if(o.length===0)return i.stop("Analysis complete."),ee.info(X.yellow("No arm64-v8a or x86_64 native libraries found in the APK.")),ee.info(X.dim("16KB alignment check only applies to arm64-v8a and x86_64 architectures.")),!0;let r=[];for(let s of o){let d=Je.relative(t,s),l=qr(d),u=Je.basename(s),p=Jr(s);p!==null&&r.push({name:u,filePath:d,arch:l,align:p,compatible:p>=wn})}if(i.stop("Analysis complete."),r.length===0)return ee.info(X.yellow("No valid ELF shared libraries found.")),!0;let c=r.filter(s=>!s.compatible),a=r.filter(s=>s.compatible);if(ee.info(X.dim(`Checked ${r.length} native librar${r.length===1?"y":"ies"}
-`)),c.length>0){ee.info(X.red.bold(`Incompatible libraries:
-`));for(let s of c)ee.error(X.red(`${X.bold(s.name)} ${X.dim(`(${s.arch})`)}`)),ee.info(X.dim(`  PT_LOAD alignment: 2**${Math.log2(s.align)} (${s.align} bytes, needs 2**14 = ${wn})`))}return a.length>0&&(console.log(""),ee.success(X.green(`${a.length} librar${a.length===1?"y":"ies"} correctly aligned (2**14 or higher).`))),console.log(""),c.length===0?(ee.success(X.green.bold("ELF Verification Successful. APK is 16KB compatible.")),!0):(ee.error(X.red.bold(`Found ${c.length} unaligned lib${c.length===1?"":"s"} (arm64-v8a/x86_64 libs need to be aligned).`)),console.log(""),ee.info(X.yellow("To fix this:")),ee.info(X.dim("  1. Rebuild with NDK r28+ which defaults to 16KB page alignment")),ee.info(X.dim("  2. Or set -DANDROID_SUPPORT_FLEXIBLE_PAGE_SIZES=ON in CMake")),ee.info(X.dim("  3. Update third-party libraries that ship prebuilt .so files")),ee.info(X.dim("  4. After rebuilding: zipalign -p -f -v 16 input.apk output.apk")),console.log(""),ee.info(X.dim("Reference: https://developer.android.com/guide/practices/page-sizes")),!1)}catch(o){return i.stop("Analysis failed."),ee.error(X.red(`Failed to analyze APK: ${o.message}`)),!1}finally{try{Te.rmSync(t,{recursive:!0,force:!0})}catch{}}}function Jr(e){let n=Te.openSync(e,"r");try{let i=Buffer.alloc(64);if(Te.readSync(n,i,0,64,0),!i.subarray(0,4).equals(Yr))return null;let t=i[4]===2,o=i[5]===1,r=(p,m)=>o?p.readUInt16LE(m):p.readUInt16BE(m),c=(p,m)=>o?p.readUInt32LE(m):p.readUInt32BE(m),a=(p,m)=>Number(o?p.readBigUInt64LE(m):p.readBigUInt64BE(m)),s,d,l;t?(s=a(i,32),d=r(i,54),l=r(i,56)):(s=c(i,28),d=r(i,42),l=r(i,44));let u=null;for(let p=0;p<l;p++){let m=Buffer.alloc(d);if(Te.readSync(n,m,0,d,s+p*d),c(m,0)!==Wr)continue;let $;t?$=a(m,48):$=c(m,28),$>0&&(u===null||$<u)&&(u=$)}return u??0}catch{return null}finally{Te.closeSync(n)}}function On(e){let n=[];if(!Te.existsSync(e))return n;let i=Te.readdirSync(e,{withFileTypes:!0});for(let t of i){let o=Je.join(e,t.name);t.isDirectory()?n.push(...On(o)):t.name.endsWith(".so")&&n.push(o)}return n}function qr(e){return e.includes("arm64-v8a")?"arm64-v8a":e.includes("x86_64")?"x86_64":"unknown"}var Tn=async e=>{if(pe()||(Ae.error(De.red(`You are not logged in. Run \`${f.nameLower} login\` first.`)),process.exit(1)),e.apk){await Qr(e);return}let i=process.cwd(),t=Lt.join(i,"package.json");ht.existsSync(t)||(Ae.error(De.red("No package.json found. Run this command from a project root.")),process.exit(1));let o=JSON.parse(ht.readFileSync(t,"utf-8")),r=!!(o.dependencies?.expo||o.devDependencies?.expo);e.json||(Ae.info(De.dim(`Project: ${o.name||"unknown"} v${o.version||"0.0.0"}`)),Ae.info(De.dim(`Type: ${r?"Expo":"Bare React Native"}`)),Ae.info(""));let c={json:e.json,fix:e.fix,category:e.category,severity:e.severity,prebuild:e.prebuild},a=await Pn(i,c);e.json?console.log(JSON.stringify(Rn(a,o),null,2)):Dn(a,e.severity);let s=a.some(l=>l.findings.some(u=>u.severity==="critical")),d=a.some(l=>l.findings.some(u=>u.severity==="high"));(s||d)&&process.exit(1)},Cn=["16kb"];async function Qr(e){let n=e.category?.toLowerCase();n&&!Cn.includes(n)&&(Ae.error(De.red(`Unknown APK check category: "${n}"`)),Ae.info(De.dim(`Available APK checks: ${Cn.join(", ")}`)),process.exit(1));let i=await es(e.apk);i||process.exit(1);let t=!n,o=!1;(t||n==="16kb")&&(await vn(i)||(o=!0)),o&&process.exit(1)}async function es(e){if(e.startsWith("build:")){let i=e.slice(6);return await ts(i)}if(e.startsWith("http://")||e.startsWith("https://"))return await kn(e);let n=Lt.resolve(e);return ht.existsSync(n)?n:(Ae.error(De.red(`APK file not found: ${n}`)),null)}async function ts(e){let n=Nn();n.start(`Fetching APK from build ${e}...`);try{let i=await D.get(`/build/${e}`);if(i.data.status!=="success")throw new Error(i.data.message);let t=i.data.build;if(!t)throw new Error("Build not found");let o=t.artifacts?.find(r=>r.type?r.type==="apk":r.name?.endsWith(".apk")||r.url?.includes(".apk"));return!o||!o.url?(n.stop("No APK artifact found"),Ae.error(De.red("This build does not have an APK artifact.")),Ae.info(De.dim("Make sure the build produced an APK (not just an AAB).")),null):(n.stop(`Found build: ${t.buildId||e}`),await kn(o.url))}catch(i){return n.stop("Failed to fetch build"),Ae.error(De.red(i.message)),null}}async function kn(e){let n=Nn();n.start("Downloading APK...");try{let i=ht.mkdtempSync(Lt.join(Xr.tmpdir(),`${f.nameLower}-audit-`)),t=Lt.join(i,"app.apk"),o=await Zr.get(e,{responseType:"arraybuffer"});ht.writeFileSync(t,o.data);let r=(o.data.length/(1024*1024)).toFixed(1);return n.stop(`Downloaded APK (${r} MB)`),t}catch(i){return n.stop("Download failed"),Ae.error(De.red(`Failed to download APK: ${i.message}`)),null}}var os=console.log;console.log=()=>{};ns();console.log=os;ue(ae.bgCyan.black(f.cliTag("Production Build Orchestrator")));var ss=rs(import.meta.url),as=ss("../package.json"),Y=new is;Y.name(f.nameLower).description(`${f.name} CLI: Powerful Cloud Infrastructure Tools`).version(as.version).option("-y, --yes","Automatically answer yes to all prompts",!1).option("--quiet","Suppress non-essential output",!1);Y.command("agent").description("Start local device discovery agent for the Install Hub (port 7070)").action(async()=>{await Ti()});Y.command("host").description("Setup AWS S3 static hosting and CloudFront").action(async()=>{ue(ae.bgCyan.black(f.cliTag("Hosting"))),await ui()});Y.command("sitemap").description("Generate sitemap.xml from Expo Router app structure").option("-o, --output <path>","Output path for sitemap.xml","./public/sitemap.xml").action(async e=>{ue(ae.bgCyan.black(f.cliTag("Sitemap Generator"))),await gi(e)});Y.command("build").description("Run a build on a cloud provider (AWS Spot Instances)").argument("[platform]","Target platform (android, ios)").option("--platform <os>","Target platform alias (android, ios) [Optional]").option("--repo <url>","Git Repository URL").option("--branch <name>","Git Branch").option("--ami <id>","AMI ID").option("--bucket <name>","S3 Bucket for artifacts").option("--region <region>","AWS Region").option("--aws-profile <name>","AWS Credentials Profile").option("-p, --build-profile <name>","Build Profile (e.g. production, staging)","production").option("--profile <name>","Build Profile (alias for --build-profile)").option("--dry-run","Generate User Data script without launching").option("--keep-instance","Do not terminate the instance after build").option("--subnet <id>","VPC Subnet ID to launch the instance in").option("--security-group <id>","VPC Security Group ID to use").option("--ssh-host <host>","Remote host for iOS build (SSH)").option("--ssh-user <user>","SSH username for remote host").option("--ssh-key <path>","Path to private SSH key for remote host").option("--ios-scheme <scheme>","iOS Scheme to build").option("--ios-team-id <id>","Apple Development Team ID").option("--ios-configuration <config>","Xcode configuration (Release/Debug)").option("--ios-export-method <method>","Export method (ad-hoc, app-store, development, enterprise)").option("--ios-api-key-id <id>","App Store Connect API Key ID").option("--ios-api-key-issuer <id>","App Store Connect API Key Issuer ID").option("--ios-api-key-path <path>","Path to App Store Connect API Key (.p8) file").option("--simulator","Build for iOS Simulator (no signing required)").addOption(new xn("--build-id <id>","Internal build ID").hideHelp()).addOption(new xn("--project-id <id>","Internal project ID").hideHelp()).option("--local","Run build on local machine").option("--auto-version","Automatically fetch and increment versionCode from Google Play").option("--verbose","Enable verbose logging").option("--json-output <path>","Write build metadata JSON to a file for CI/CD").option("-y, --yes","Automatically answer yes to all prompts",!1).option("--quiet","Suppress non-essential output",!1).action(async(e,n)=>{let i=Y.opts();n.yes=n.yes||i.yes,n.quiet=n.quiet||i.quiet,n.platform=e||n.platform,n.buildProfile=n.profile||n.buildProfile,n.quiet||ue(ae.bgCyan.black(f.cliTag("Cloud Build"))),await bt(n)});Y.command("update").description("Deploy an Over-The-Air (OTA) update to your live channel").option("--branch <name>","Channel or Branch to deploy to (e.g., production)","production").action(async e=>{ue(ae.bgCyan.black(f.cliTag("OTA Update"))),await Ji(e)});Y.command("submit").description("Automated Store Submission (App Store / Google Play)").option("--platform <os>","Target platform (ios/android)").option("-p, --profile <name>","Build/submission profile to submit from (e.g. production, preprod)").option("--track <track>","Google Play Track (internal, alpha, beta, production)").option("--latest","Use the latest successful build for submission").option("--build-id <id>","Use a specific build ID for submission").action(async e=>{ue(ae.bgCyan.black(f.cliTag("Store Submission"))),await Vi(e)});Y.command("login").description(`Login to ${f.name} Dashboard`).action(async()=>{ue(ae.bgCyan.black(f.cliTag("Login"))),await Ui()});Y.command("link").description(`Link local directory to a ${f.name} Project`).action(async()=>{ue(ae.bgCyan.black(f.cliTag("Link Project"))),await Mi()});Y.command("me").description("Display currently logged in user details").action(async()=>{await Xi()});Y.command("init").description(`Create a new ${f.name} Project`).action(async()=>{ue(ae.bgCyan.black(f.cliTag("Init Project"))),await Fi()});Y.command("env").description("Manage Environment Variables").argument("<action>","Action to perform: set or list").argument("[args...]","Key=Value pairs for set action").action(async(e,n)=>{ue(ae.bgCyan.black(f.cliTag("Env Manager"))),await Gi(e,n)});Y.command("start").description("Start the development server (Metro)").option("-p, --build-profile <name>","Build profile (e.g. development, staging)","development").option("--tunnel","Use ngrok tunnel").option("--lan","Use LAN IP").option("--localhost","Use localhost").option("-c, --clear","Clear Metro cache").option("--port <number>","Port to listen on").option("--ios","Start on iOS").option("--android","Start on Android").option("--web","Start on Web").action(async e=>{ue(ae.bgCyan.black(f.cliTag("Dev Server"))),await Qi(e)});Y.command("config").description("Show resolved configuration for a profile").option("-p, --profile <name>","Build profile to resolve","development").option("--json","Output as JSON").action(async e=>{await en(e)});Y.command("credentials").description("Unified, interactive credential management (iOS/Android)").option("-p, --profile <name>","Build profile (production, staging, development)").option("--force","Force recreate certificates (nuke existing on Apple Portal)",!1).action(async e=>{let{credentialsMainCommand:n}=await import("./credentials-5FL2C6KC.js");await n(e)});Y.command("credentials:setup").description("Automated credential provisioning (iOS/Android) [Legacy]").requiredOption("--platform <os>","Platform: ios or android").option("--profile <name>","Build profile (production, staging, development)").option("--bundle-id <id>","Bundle ID / Package Name (optional, auto-detected)").option("--team-id <id>","Apple Team ID (iOS only)").option("--key-alias <alias>","Android keystore alias (optional, auto-generated)").option("--aws-profile <name>","AWS Credentials Profile (for S3 storage)").option("--force","Force recreate certificates (nuke existing on Apple Portal)",!1).action(async e=>{ue(ae.bgCyan.black(f.cliTag("Credentials Setup"))),await Xe(e),Ln(ae.green("Done!"))});Y.command("credentials:service").description("Upload Service Credentials (ASC API Key / Google Service JSON) [Legacy]").requiredOption("--platform <os>","Platform: ios or android").option("--file <path>","Path to credential file (.p8 or .json)").option("--issuer-id <id>","ASC API Key Issuer ID (iOS only)").option("--key-id <id>","ASC API Key ID (iOS only)").option("--bundle-id <id>","Bundle identifier / Android package name to attach this service credential to").option("--package-name <name>","Android package name to attach this service credential to").action(async e=>{ue(ae.bgCyan.black(f.cliTag("Service Credentials"))),await li(e),Ln(ae.green("Done!"))});var si=Y.command("device").description("Manage registered iOS test devices");si.command("register").description("Register a connected iOS device or enter UDID manually").option("--udid <udid>","Device UDID (skip auto-detection)").option("--name <name>","Device name").action(async e=>{await Dt("register",e)});si.command("list").description("List all registered devices").action(async()=>{await Dt("list",{})});si.command("remove").description("Remove a registered device").option("--udid <udid>","Device UDID to remove").action(async e=>{await Dt("remove",e)});Y.command("audit").description("Run automated security audit on the project or APK").option("--apk <path>","Path to APK file (runs APK diagnostics like 16KB alignment)").option("--json","Output results as JSON (for CI/CD)").option("--fix","Auto-apply fixes where possible").option("--category <name>","Run only a specific check category (e.g. 16kb, permissions, secrets)").option("--severity <level>","Minimum severity to display (critical, high, medium, low, info)").option("--prebuild","Run expo prebuild for deeper manifest/plist analysis").action(async e=>{ue(ae.bgCyan.black(f.cliTag(e.apk?"APK Audit":"Security Audit"))),await Tn(e)});var cs=new Set(["login"]);Y.hook("preAction",(e,n)=>{let i=n.name();cs.has(i)||ci()});Y.on("command:*",()=>{console.error(`Invalid command: %s
-See --help for a list of available commands.`,Y.args.join(" ")),process.exit(1)});process.argv.slice(2).length||Y.help();Y.parse(process.argv);
+[DIAGNOSTIC] Key ID: ${n}`)),console.log(re.yellow(`[DIAGNOSTIC] Issuer ID: ${i}`)),console.log(re.yellow(`[DIAGNOSTIC] Key Checksum (Start): ${a.substring(0,45).replace(/\n/g,"\\n")}`)),console.log(re.yellow(`[DIAGNOSTIC] Key Checksum (End):   ${a.substring(a.length-28).replace(/\n/g,"\\n")}
+`)),r.start("Uploading to TestFlight (pilot)...");let s=Me.join(oi.tmpdir(),`api_key_${n}.json`),c={key_id:n,issuer_id:i,key:a,in_house:!1};return ie.writeFileSync(s,JSON.stringify(c,null,2)),new Promise((d,u)=>{let p=nn("fastlane",["pilot","upload","--ipa",e,"--api_key_path",s,"--skip_submission","true","--skip_waiting_for_build_processing","true"],{stdio:"inherit",env:sn()});p.on("close",m=>{if(m!==0)r.stop("Pilot failed"),d({apiKeyJsonPath:s});else{r.stop("IPA uploaded to TestFlight");try{ie.unlinkSync(s)}catch{}d({apiKeyJsonPath:null})}}),p.on("error",m=>{try{ie.unlinkSync(s)}catch{}r.stop("Pilot execution error"),u(m)})})}async function mr(e,t,i="internal",n){let o=pt();o.start(`Uploading to Google Play ${i} track (supply)...`);let r=["supply","--aab",e,"--json_key",t,"--track",i];n&&n!=="*"&&r.push("--package_name",n),await new Promise((l,a)=>{let s=nn("fastlane",r,{stdio:["inherit","pipe","pipe"],env:sn()}),c="";s.stdout.on("data",d=>{let u=d.toString();c+=u,process.stdout.write(u)}),s.stderr.on("data",d=>{let u=d.toString();c+=u,process.stderr.write(u)}),s.on("error",d=>{o.stop("Supply execution error"),a(d)}),s.on("close",d=>{if(d===0){o.stop(`AAB uploaded to ${i} track`),l();return}o.stop("Supply failed"),a(new Error(gr(c,i,n)))})})}function sn(){return{...process.env,FASTLANE_SKIP_UPDATE_CHECK:"1",FASTLANE_HIDE_CHANGELOG:"1"}}function gr(e,t,i){if(e.includes("does not allow any existing users to upgrade"))return["Google Play rejected this release because the uploaded AAB is not an upgrade for existing users.",`Package: ${i||"unknown"} | Track: ${t}`,"Build a new Android artifact with a higher versionCode, then submit that build.",`Recommended: ${f.nameLower} build --platform android --profile production --auto-version`,`Then: ${f.nameLower} submit --latest --platform android --profile production --track ${t}`].join(`
+`);let n=e.match(/Google Api Error:[^\n]+/);return n?n[0]:"fastlane supply execution failed"}function hr(e){try{ie.existsSync(e)&&ie.rmSync(e,{recursive:!0,force:!0})}catch{}}function ue(e){console.log(re.red(`\u274C ${e}`))}function Oe(e){console.log(re.gray(`\u2022 ${e}`))}function tn(e){console.log(re.green(`\u2713 ${e}`))}import{spinner as yr,log as Be,outro as Sr}from"@clack/prompts";import ri from"chalk";import an from"fs";import Er from"path";import{execSync as Ar}from"child_process";import Ir from"adm-zip";import br from"axios";import{randomUUID as _r}from"crypto";async function ln(e){Be.info(ri.magenta("\u{1F680} Starting Over-The-Air (OTA) Update via Mach..."));let t=we();(!t||!t.projectId)&&(Be.error(`No ${f.configFileName} found or missing projectId. Run \`mach link\` first.`),process.exit(1));let i=t.projectId,n=e.branch||"production",o="1.0.0";try{o=JSON.parse(an.readFileSync("./package.json","utf-8")).version||"1.0.0"}catch{Be.warn("Could not read package.json version. Defaulting to 1.0.0")}let r=yr();r.start(`Compiling JavaScript bundles for OTA (Channel: ${n}, Runtime: ${o})...`);try{Ar("npx expo export --platform all",{stdio:"ignore"})}catch(c){r.stop("Compilation failed."),Be.error(`Failed to export JS bundles using Expo: ${c.message}`),process.exit(1)}r.message("Zipping artifact payload...");let l=Er.join(process.cwd(),"dist");an.existsSync(l)||(r.stop("Missing dist folder."),Be.error("The `dist` directory was not created. Export failed."),process.exit(1));let a=new Ir;a.addLocalFolder(l,"dist");let s=a.toBuffer();r.message("Uploading payload to Mach Cloud...");try{let c=_r(),d=await $.post("/builds/source-upload-url",{projectId:i,buildId:c});if(d.data.status!=="success")throw new Error("Could not secure upload bucket URL");let{uploadUrl:u,key:p}=d.data;await br.put(u,s,{headers:{"Content-Type":"application/zip"},maxBodyLength:1/0,maxContentLength:1/0}),r.message(`Promoting Update to ${n}...`),await $.post("/updates/publish",{projectId:i,channelName:n,runtimeVersion:o,platform:"android",updateId:`${c}-android`,manifestKey:p}),await $.post("/updates/publish",{projectId:i,channelName:n,runtimeVersion:o,platform:"ios",updateId:`${c}-ios`,manifestKey:p}),r.stop("Update Live!"),Sr(ri.green(`\u2713 OTA Update natively shipped to the '${n}' channel.`)),Be.info(ri.dim(`Any app running runtime '${o}' will download this bundle smoothly.`))}catch(c){r.stop("Update failed during Cloud Sync."),Be.error(`Upload error: ${c.message}`),process.exit(1)}}import{intro as Pr,outro as cn,log as Je}from"@clack/prompts";import Ce from"chalk";async function dn(){Pr(Ce.blue(`${f.name} CLI - User Profile`));let e=pe();if(!e){Je.warn(Ce.yellow("You are not logged in.")),Je.info(`Run \`${f.nameLower} login\` to authenticate.`),cn();return}Je.info(`${Ce.bold("Logged in as:")} ${Ce.green(e.email)}`);try{await $.get("/projects");let i=pe().token.split(".");if(i.length===3){let n=JSON.parse(Buffer.from(i[1],"base64").toString());if(n.exp){let o=new Date(n.exp*1e3),r=new Date,l=o.getTime()-r.getTime();if(l>0){let a=Math.round(l/6e4),s=(a/60).toFixed(1);Je.info(`${Ce.bold("Token status:")} Valid (Expires in ~${s}h / ${a}m)`)}else Je.warn(`${Ce.bold("Token status:")} ${Ce.red("Expired")} (Auto-refresh failed)`)}}}catch{Je.warn(`${Ce.bold("Token status:")} ${Ce.red("Unreachable")} (Session might be truly expired)${At}`)}cn(Ce.blue("---"))}import{spawn as Rr}from"child_process";import{log as Fe}from"@clack/prompts";import Se from"chalk";import wr from"fs";import $r from"net";async function Dr(e){return new Promise(t=>{let i=$r.createServer();i.once("error",n=>{n.code==="EADDRINUSE"?t(!0):t(!1)}),i.once("listening",()=>{i.close(),t(!1)}),i.listen(e,"0.0.0.0")})}async function un(e,t=20){let i=e;for(;i<e+t;){if(!await Dr(i))return i;i++}throw new Error(`Could not find an available port after ${t} attempts starting from ${e}.`)}var pn=async e=>{Fe.info(Se.blue(`Starting ${f.name} Dev Orchestrator...`));let t=we(),i=e.buildProfile||"development",n=t?Ge(t,i):null,o={...process.env};if(t?.projectId)try{Fe.info(Se.dim(`Fetching managed secrets for profile: ${i}...`));let u=await $.get(`/projects/${t.projectId}/secrets/export?env=${i}`);u.data?.status==="success"&&u.data.secrets&&(Object.assign(o,u.data.secrets),Fe.info(Se.magenta(`\u2713 Injected secrets from ${f.name} Dashboard.`)))}catch{Fe.warn("Could not fetch managed secrets. Running with local env only.")}t&&Object.assign(o,Ke(t,f.envPrefix)),n&&(Object.assign(o,Ke(n,`${f.envPrefix}PROFILE_`)),n.env&&Object.assign(o,n.env));let r=!1;try{let u=JSON.parse(wr.readFileSync("package.json","utf-8"));r=!!(u.dependencies?.expo||u.devDependencies?.expo)}catch{Fe.warn("Could not parse package.json. Defaulting to Bare React Native mode.")}let l=Number(e.port||n?.port||8081),a=await un(l);a!==l&&Fe.info(Se.yellow(`Port ${l} is busy. ${f.name} is using ${a} instead.`));let s=process.platform==="win32"?"npx.cmd":"npx",c=[];if(r?(c=["expo","start","--port",String(a)],e.clear&&c.push("--clear"),e.tunnel&&c.push("--tunnel"),e.lan&&c.push("--lan"),e.localhost&&c.push("--localhost"),e.ios&&c.push("--ios"),e.android&&c.push("--android"),e.web&&c.push("--web")):(c=["react-native","start","--port",String(a)],e.clear&&c.push("--clear")),r){let u=[`${Se.cyan("i")}  open iOS simulator`,`${Se.cyan("a")}  open Android emulator/device`,`${Se.cyan("w")}  open web`,`${Se.cyan("r")}  reload app`];Fe.info([Se.bold("Launch controls"),...u.map(p=>`  ${p}`),"",Se.dim("Direct launch: mach start --ios | --android | --web"),Se.dim(`Metro URL: http://localhost:${a}`)].join(`
+`))}else Fe.info(Se.dim(`Metro URL: http://localhost:${a}`));let d=Rr(s,c,{stdio:"inherit",env:o});return new Promise((u,p)=>{d.on("exit",m=>{m===0?u():p(new Error(`Dev server exited with code ${m}`))}),d.on("error",m=>{p(m)})})};import{log as fe}from"@clack/prompts";import Pe from"chalk";var fn=async e=>{let t=we();t||(fe.error(Pe.red(`No ${f.configFileName} found in the current directory.`)),process.exit(1));let i=e.profile||"development",n=Ge(t,i);if(e.json){console.log(JSON.stringify({project:t,resolved:n},null,2));return}fe.info(Pe.bgBlue.white(` Resolved ${f.name} Config [${i}] `)),fe.info(Pe.dim("----------------------------------------")),fe.info(`${Pe.blue("Project ID:")} ${t.projectId}`),fe.info(`${Pe.blue("Name:")} ${t.name}`),fe.info(`${Pe.blue("Scheme:")} ${t.scheme}`),n?(fe.info(Pe.dim(`
+Profile Settings:`)),fe.info(`${Pe.cyan("Distribution:")} ${n.distribution||"none"}`),fe.info(`${Pe.cyan("Development Client:")} ${n.developmentClient||"false"}`),n.env&&Object.keys(n.env).length>0&&(fe.info(Pe.dim(`
+Environment Variables:`)),Object.entries(n.env).forEach(([o,r])=>{fe.info(`  ${o}=${r}`)}))):fe.warn(`Profile '${i}' not found.`),fe.info(Pe.dim("----------------------------------------"))};import{log as $e,spinner as gt,text as mn,select as gn,confirm as vr,isCancel as ft,cancel as mt,outro as ht,note as Or}from"@clack/prompts";import J from"chalk";import{execSync as Cr}from"child_process";async function Nr(){try{let e=Cr("xcrun devicectl list devices --json-output -",{stdio:["pipe","pipe","pipe"]}).toString();return(JSON.parse(e).result?.devices||[]).filter(n=>n.connectionProperties?.transportType==="wired"||n.connectionProperties?.transportType==="localNetwork").map(n=>({udid:n.identifier,name:n.deviceProperties?.name||"Unknown Device",model:n.hardwareProperties?.marketingName||"iPhone"}))}catch{return[]}}async function Tr(e){let t=e.udid,i=e.name,n="";if(!t){let r=gt();r.start("Scanning for connected iOS devices...");let l=await Nr();if(r.stop(l.length>0?`Found ${l.length} device(s)`:"No devices detected"),l.length===1)t=l[0].udid,i=i||l[0].name,n=l[0].model,$e.info(`Detected: ${J.bold(i)} (${J.dim(t.substring(0,12)+"...")})`);else if(l.length>1){let a=await gn({message:"Select a device to register:",options:l.map(c=>({value:c.udid,label:`${c.name} (${c.model})`,hint:c.udid.substring(0,12)+"..."}))});if(ft(a)){mt("Cancelled");return}t=a;let s=l.find(c=>c.udid===t);i=i||s.name,n=s.model}else{$e.info(J.dim("No connected devices found. Enter UDID manually."));let a=await mn({message:"Device UDID:",placeholder:"00008101-XXXXXXXXXXXX",validate(s){if(s.length<10)return"UDID seems too short"}});if(ft(a)){mt("Cancelled");return}t=a}}if(!i){let r=await mn({message:"Device name:",placeholder:"Nitesh's iPhone",validate(l){if(l.length===0)return"Name is required"}});if(ft(r)){mt("Cancelled");return}i=r}let o=gt();o.start("Registering device...");try{await $.post("/devices",{udid:t,name:i,platform:"ios",model:n||void 0,addedVia:"cli"}),o.stop(J.green("Device registered!")),$e.info(`  ${J.bold("Name:")} ${i}`),$e.info(`  ${J.bold("UDID:")} ${J.dim(t)}`)}catch(r){o.stop(J.red("Failed to register device")),$e.error(r.response?.data?.message||r.message)}ht(J.blue("---"))}async function kr(){let e=gt();e.start("Fetching registered devices...");try{let i=(await $.get("/devices")).data.devices||[];if(e.stop(`${i.length} device(s) registered`),i.length===0){$e.info(J.dim(`No devices registered yet. Run \`${f.nameLower} device register\` to add one.`)),ht(J.blue("---"));return}let n=i.map(o=>{let r=new Date(o.createdAt).toLocaleDateString();return`  ${J.bold(o.name.padEnd(24))} ${J.dim(o.udid.padEnd(28))} ${J.cyan(o.addedVia.padEnd(10))} ${J.dim(r)}`});Or(`  ${J.bold("Name".padEnd(24))} ${"UDID".padEnd(28)} ${"Via".padEnd(10)} Date
+`+n.join(`
+`),"Registered Devices")}catch(t){e.stop(J.red("Failed to fetch devices")),$e.error(t.response?.data?.message||t.message)}ht(J.blue("---"))}async function xr(e){let t=e.udid;if(!t){let o=gt();o.start("Fetching registered devices...");try{let l=(await $.get("/devices")).data.devices||[];if(o.stop(`${l.length} device(s) found`),l.length===0){$e.info(J.dim("No devices to remove.")),ht(J.blue("---"));return}let a=await gn({message:"Select device to remove:",options:l.map(s=>({value:s.udid,label:s.name,hint:s.udid.substring(0,12)+"..."}))});if(ft(a)){mt("Cancelled");return}t=a}catch(r){o.stop(J.red("Failed to fetch devices")),$e.error(r.response?.data?.message||r.message);return}}let i=await vr({message:`Remove device ${J.dim(t.substring(0,12)+"...")}?`});if(ft(i)||!i){mt("Cancelled");return}let n=gt();n.start("Removing device...");try{await $.delete(`/devices/${encodeURIComponent(t)}`),n.stop(J.green("Device removed"))}catch(o){n.stop(J.red("Failed to remove device")),$e.error(o.response?.data?.message||o.message)}ht(J.blue("---"))}async function wt(e,t){switch(e){case"register":await Tr(t);break;case"list":await kr();break;case"remove":await xr(t);break;default:$e.error(`Unknown action: ${e}`)}}import{log as Ae,spinner as Kn}from"@clack/prompts";import Re from"chalk";import Mt from"path";import Et from"fs";import gs from"os";import hs from"axios";var Ee=(r=>(r.CRITICAL="critical",r.HIGH="high",r.MEDIUM="medium",r.LOW="low",r.INFO="info",r))(Ee||{}),De=(s=>(s.PERMISSIONS="permissions",s.SECRETS="secrets",s.DEPENDENCIES="dependencies",s.STORAGE="storage",s.NETWORK="network",s.DEBUG="debug",s.MANIFEST="manifest",s.ATS="ats",s))(De||{});import{spinner as kn,log as St}from"@clack/prompts";import me from"chalk";import{execSync as rs}from"child_process";import xn from"fs";import Ln from"path";import He from"fs";import yt from"path";import{execSync as Lr}from"child_process";var hn={"android.permission.READ_PHONE_STATE":{severity:"high",description:"Can read phone number, IMEI, carrier info"},"android.permission.CALL_PHONE":{severity:"high",description:"Can make calls without user interaction"},"android.permission.SEND_SMS":{severity:"high",description:"Can send SMS without user interaction"},"android.permission.READ_SMS":{severity:"high",description:"Can read user SMS messages"},"android.permission.READ_CONTACTS":{severity:"medium",description:"Can read user contacts"},"android.permission.WRITE_CONTACTS":{severity:"medium",description:"Can modify user contacts"},"android.permission.READ_CALL_LOG":{severity:"high",description:"Can read call history"},"android.permission.CAMERA":{severity:"medium",description:"Camera access"},"android.permission.RECORD_AUDIO":{severity:"medium",description:"Microphone access"},"android.permission.ACCESS_FINE_LOCATION":{severity:"medium",description:"Precise GPS location"},"android.permission.ACCESS_COARSE_LOCATION":{severity:"medium",description:"Approximate location"},"android.permission.ACCESS_BACKGROUND_LOCATION":{severity:"high",description:"Background location tracking"},"android.permission.READ_EXTERNAL_STORAGE":{severity:"medium",description:"Read files on device"},"android.permission.WRITE_EXTERNAL_STORAGE":{severity:"medium",description:"Write files on device"},"android.permission.READ_MEDIA_IMAGES":{severity:"low",description:"Read photos"},"android.permission.READ_MEDIA_VIDEO":{severity:"low",description:"Read videos"},"android.permission.SYSTEM_ALERT_WINDOW":{severity:"high",description:"Draw overlays on other apps"},"android.permission.REQUEST_INSTALL_PACKAGES":{severity:"high",description:"Can install APKs"}},Ur={NSCameraUsageDescription:{severity:"medium",description:"Camera access declared"},NSMicrophoneUsageDescription:{severity:"medium",description:"Microphone access declared"},NSLocationWhenInUseUsageDescription:{severity:"medium",description:"Location (in-use) declared"},NSLocationAlwaysUsageDescription:{severity:"high",description:"Background location declared"},NSContactsUsageDescription:{severity:"medium",description:"Contacts access declared"},NSCalendarsUsageDescription:{severity:"low",description:"Calendar access declared"},NSPhotoLibraryUsageDescription:{severity:"low",description:"Photo library access declared"}};function Mr(e){try{let i=Lr("npx expo config --type introspect --json 2>/dev/null",{cwd:e,encoding:"utf-8",timeout:3e4});return JSON.parse(i)}catch{}let t=yt.join(e,"app.json");if(He.existsSync(t))try{let i=JSON.parse(He.readFileSync(t,"utf-8"));return i.expo||i}catch{}return null}function Fr(e){let t=[],i=yt.join(e,"node_modules");if(!He.existsSync(i))return t;let n=/<uses-permission\s+android:name="([^"]+)"/g;function o(r,l){let a=yt.join(r,"android","src","main","AndroidManifest.xml");if(!He.existsSync(a))return;let s=He.readFileSync(a,"utf-8"),c;for(;(c=n.exec(s))!==null;)t.push({pkg:l,permission:c[1]});n.lastIndex=0}for(let r of He.readdirSync(i)){if(r.startsWith("."))continue;let l=yt.join(i,r);if(r.startsWith("@")){if(!He.statSync(l).isDirectory())continue;for(let a of He.readdirSync(l))o(yt.join(l,a),`${r}/${a}`)}else o(l,r)}return t}async function yn(e,t){let i=[],n=1,o=Mr(e),r=o?.android?.permissions||[],l=o?.android?.blockedPermissions||[];for(let c of r){let d=hn[c];d&&i.push({id:`PERM-${String(n++).padStart(3,"0")}`,title:`${c.split(".").pop()} declared`,description:d.description,severity:d.severity,category:"permissions",file:"app.config.ts",recommendation:"Remove from permissions if not needed, or add justification."})}let a=Fr(e);for(let{pkg:c,permission:d}of a){let u=hn[d];u&&(l.includes(d)||r.includes(d)||i.push({id:`PERM-${String(n++).padStart(3,"0")}`,title:`${d.split(".").pop()} injected by ${c}`,description:`${u.description}. Auto-injected via ${c} AndroidManifest.xml`,severity:u.severity,category:"permissions",file:`node_modules/${c}/android/src/main/AndroidManifest.xml`,recommendation:`Add "${d}" to blockedPermissions if not needed.`,autoFixable:!0}))}let s=o?.ios?.infoPlist||{};for(let[c,d]of Object.entries(Ur))c in s&&i.push({id:`PERM-${String(n++).padStart(3,"0")}`,title:`iOS: ${c} declared`,description:d.description,severity:d.severity,category:"permissions",file:"app.config.ts",recommendation:`Remove ${c} from infoPlist if the app does not use this capability.`});return{category:"permissions",label:"Permission Audit",findings:i,durationMs:0}}import si from"fs";import vt from"path";var Hr=[{id:"SEC-001",pattern:/(['"`])(?:sk|pk)_(?:live|test)_[a-zA-Z0-9]{20,}\1/g,severity:"critical",label:"Stripe API Key"},{id:"SEC-002",pattern:/(['"`])AIza[0-9A-Za-z\-_]{35}\1/g,severity:"high",label:"Google API Key"},{id:"SEC-003",pattern:/(['"`])AKIA[0-9A-Z]{16}\1/g,severity:"critical",label:"AWS Access Key ID"},{id:"SEC-004",pattern:/-----BEGIN (?:RSA |EC )?PRIVATE KEY-----/g,severity:"critical",label:"Private key in source"},{id:"SEC-005",pattern:/(?:ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9_]{36,}/g,severity:"high",label:"GitHub Token"},{id:"SEC-006",pattern:/xox[bpors]-[a-zA-Z0-9-]{10,}/g,severity:"high",label:"Slack Token"},{id:"SEC-007",pattern:/(?:password|secret|apikey|api_key)\s*[:=]\s*['"`][^'"`\n]{8,}['"`]/gi,severity:"high",label:"Hardcoded credential"}],Br=new Set([".ts",".tsx",".js",".jsx"]),jr=new Set(["node_modules",".expo",".git","android","ios","dist","build","__tests__","__mocks__"]);function Sn(e){let t=[],i=si.readdirSync(e,{withFileTypes:!0});for(let n of i){if(jr.has(n.name))continue;let o=vt.join(e,n.name);n.isDirectory()?t.push(...Sn(o)):Br.has(vt.extname(n.name))&&t.push(o)}return t}function Gr(e){let t=e.trim();return t.startsWith("//")||t.startsWith("*")||t.startsWith("/*")}function Kr(e){return/process\.env\./i.test(e)||/import\.meta\.env/i.test(e)}async function En(e,t){let i=[],n=vt.join(e,"src"),o=si.existsSync(n)?n:e,r=Sn(o);for(let l of r){let s=si.readFileSync(l,"utf-8").split(`
+`),c=vt.relative(e,l);for(let d=0;d<s.length;d++){let u=s[d];if(!Gr(u)&&!Kr(u))for(let{id:p,pattern:m,severity:E,label:P}of Hr)m.lastIndex=0,m.test(u)&&i.push({id:p,title:P,description:`Potential ${P.toLowerCase()} found in source code`,severity:E,category:"secrets",file:c,line:d+1,recommendation:`Move to environment variables or a secrets manager. Use \`${f.nameLower} env set\` for managed secrets.`})}}return{category:"secrets",label:"Secrets Detection",findings:i,durationMs:0}}import{execSync as zr}from"child_process";var Vr={critical:"critical",high:"high",moderate:"medium",low:"low",info:"info"};async function An(e,t){let i=[],n=1,o;try{o=zr("npm audit --json 2>/dev/null",{cwd:e,encoding:"utf-8",timeout:6e4})}catch(a){if(o=a.stdout||"",!o)return{category:"dependencies",label:"Dependency CVEs",findings:[],durationMs:0,error:"Failed to run npm audit. Ensure npm is available and dependencies are installed."}}let r;try{r=JSON.parse(o)}catch{return{category:"dependencies",label:"Dependency CVEs",findings:[],durationMs:0,error:"Failed to parse npm audit output."}}let l=r.vulnerabilities||{};for(let[a,s]of Object.entries(l)){let c=Vr[s.severity]||"info",d=Array.isArray(s.via)?s.via.map(u=>typeof u=="string"?u:u.title||u.name).join(", "):String(s.via);i.push({id:`DEP-${String(n++).padStart(3,"0")}`,title:`${a} \u2014 ${s.severity}`,description:`Via: ${d}. Range: ${s.range||"unknown"}`,severity:c,category:"dependencies",recommendation:s.fixAvailable?`Run \`npm audit fix\` or update ${a} to a patched version.`:"No fix available yet. Monitor for updates or evaluate alternatives.",autoFixable:!!s.fixAvailable})}return{category:"dependencies",label:"Dependency CVEs",findings:i,durationMs:0}}import Ot from"fs";import Ct from"path";var Wr=/(?:token|password|credential|secret|apiKey|api_key|session|auth|jwt|refresh_token|access_token|private_key|pin|otp)/i,In=/AsyncStorage\s*\.\s*(?:setItem|mergeItem)\s*\(\s*['"`]([^'"`]+)['"`]/g,Yr=/from\s+['"]@react-native-async-storage\/async-storage['"]|from\s+['"]react-native['"].*AsyncStorage/,Jr=new Set([".ts",".tsx",".js",".jsx"]),qr=new Set(["node_modules",".expo",".git","android","ios","dist","build"]);function bn(e){let t=[];if(!Ot.existsSync(e))return t;let i=Ot.readdirSync(e,{withFileTypes:!0});for(let n of i){if(qr.has(n.name))continue;let o=Ct.join(e,n.name);n.isDirectory()?t.push(...bn(o)):Jr.has(Ct.extname(n.name))&&t.push(o)}return t}async function _n(e,t){let i=[],n=1,o=Ct.join(e,"src"),r=Ot.existsSync(o)?o:e,l=bn(r);for(let a of l){let s=Ot.readFileSync(a,"utf-8");if(!Yr.test(s))continue;let c=s.split(`
+`),d=Ct.relative(e,a);for(let u=0;u<c.length;u++){let p=c[u];In.lastIndex=0;let m;for(;(m=In.exec(p))!==null;){let E=m[1];Wr.test(E)&&i.push({id:`STOR-${String(n++).padStart(3,"0")}`,title:`AsyncStorage used for "${E}"`,description:`Sensitive data key "${E}" stored in AsyncStorage (unencrypted).`,severity:"high",category:"storage",file:d,line:u+1,recommendation:"Use expo-secure-store (SecureStore) for sensitive data instead of AsyncStorage."})}}}return{category:"storage",label:"Insecure Storage",findings:i,durationMs:0}}import Nt from"fs";import Tt from"path";var Pn=/['"`](http:\/\/(?!localhost|127\.0\.0\.1|10\.|192\.168\.|0\.0\.0\.0|172\.(?:1[6-9]|2\d|3[01])\.)[^'"`\s]+)['"`]/g,Xr=/\/api\/|\/v[0-9]+\/|\/graphql|\/rest\//i,Zr=new Set([".ts",".tsx",".js",".jsx"]),Qr=new Set(["node_modules",".expo",".git","android","ios","dist","build","__tests__","__mocks__"]);function $n(e){let t=[];if(!Nt.existsSync(e))return t;let i=Nt.readdirSync(e,{withFileTypes:!0});for(let n of i){if(Qr.has(n.name))continue;let o=Tt.join(e,n.name);n.isDirectory()?t.push(...$n(o)):Zr.has(Tt.extname(n.name))&&t.push(o)}return t}async function Dn(e,t){let i=[],n=1,o=Tt.join(e,"src"),r=Nt.existsSync(o)?o:e,l=$n(r);for(let a of l){let c=Nt.readFileSync(a,"utf-8").split(`
+`),d=Tt.relative(e,a);for(let u=0;u<c.length;u++){let p=c[u],m=p.trim();if(m.startsWith("//")||m.startsWith("*"))continue;Pn.lastIndex=0;let E;for(;(E=Pn.exec(p))!==null;){let P=E[1],O=Xr.test(P);i.push({id:`NET-${String(n++).padStart(3,"0")}`,title:`Insecure HTTP URL${O?" (API endpoint)":""}`,description:`Plain HTTP URL found: ${P}`,severity:O?"high":"medium",category:"network",file:d,line:u+1,recommendation:"Use HTTPS instead of HTTP for all network requests."})}}}return{category:"network",label:"HTTP URLs",findings:i,durationMs:0}}import kt from"fs";import xt from"path";var Rn=/(?:debug|debugMode|devMode|enableDebug)\s*[:=]\s*true/gi,wn=/console\.(?:log|warn|info|debug)\s*\([^)]*(?:token|password|secret|credential|key|auth)/gi,es=new Set([".ts",".tsx",".js",".jsx"]),ts=new Set(["node_modules",".expo",".git","android","ios","dist","build","__tests__","__mocks__"]);function vn(e){let t=[];if(!kt.existsSync(e))return t;let i=kt.readdirSync(e,{withFileTypes:!0});for(let n of i){if(ts.has(n.name))continue;let o=xt.join(e,n.name);n.isDirectory()?t.push(...vn(o)):es.has(xt.extname(n.name))&&t.push(o)}return t}async function On(e,t){let i=[],n=1,o=xt.join(e,"src"),r=kt.existsSync(o)?o:e,l=vn(r);for(let a of l){let c=kt.readFileSync(a,"utf-8").split(`
+`),d=xt.relative(e,a);for(let u=0;u<c.length;u++){let p=c[u],m=p.trim();if(!(m.startsWith("//")||m.startsWith("*"))&&(Rn.lastIndex=0,Rn.test(p)&&i.push({id:`DBG-${String(n++).padStart(3,"0")}`,title:"Hardcoded debug flag",description:"Debug/dev mode enabled in source code",severity:"medium",category:"debug",file:d,line:u+1,recommendation:"Use __DEV__ or environment variables instead of hardcoded debug flags."}),wn.lastIndex=0,wn.test(p))){let E=c.slice(Math.max(0,u-3),u).join(`
+`);/__DEV__/.test(E)||i.push({id:`DBG-${String(n++).padStart(3,"0")}`,title:"Sensitive data in console log",description:"Console log may expose sensitive data (token, password, etc.) in production",severity:"medium",category:"debug",file:d,line:u+1,recommendation:"Wrap in __DEV__ check or remove sensitive data from console output."})}}}return{category:"debug",label:"Debug/Dev Flags",findings:i,durationMs:0}}import Cn from"fs";import ai from"path";var is=new Set(["androidx.work.impl.background.systemjob.SystemJobService","androidx.work.impl.diagnostics.DiagnosticsReceiver","com.google.firebase.iid.FirebaseInstanceIdReceiver","com.google.android.gms.auth.api.signin.RevocationBoundService","androidx.profileinstaller.ProfileInstallReceiver","com.google.firebase.messaging.FirebaseMessagingService","com.google.android.gms.measurement.AppMeasurementService","com.google.android.gms.measurement.AppMeasurementJobService"]);function ns(e){let t=[ai.join(e,"android","app","src","main","AndroidManifest.xml"),ai.join(e,"android","AndroidManifest.xml")];for(let i of t)if(Cn.existsSync(i))return i;return null}async function Nn(e,t){let i=[],n=1,o=ns(e);if(!o)return{category:"manifest",label:"Android Manifest",findings:[],durationMs:0,error:"No AndroidManifest.xml found. Run with --prebuild or run `expo prebuild` first."};let r=Cn.readFileSync(o,"utf-8"),l=ai.relative(e,o),a=/<(activity|service|receiver|provider)\s+([^>]*?)(?:\/>|>)/gs,s;for(;(s=a.exec(r))!==null;){let c=s[1],d=s[2],p=d.match(/android:name="([^"]+)"/)?.[1]||"unknown";if(is.has(p))continue;let m=/android:exported="true"/.test(d),E=/android:permission="/.test(d);m&&!E&&i.push({id:`MAN-${String(n++).padStart(3,"0")}`,title:`Exported ${c}: ${p.split(".").pop()}`,description:`${p} is exported=true without android:permission protection`,severity:"medium",category:"manifest",file:l,recommendation:'Set android:exported="false" or add an android:permission attribute.'})}return/android:allowBackup="true"/.test(r)&&i.push({id:`MAN-${String(n++).padStart(3,"0")}`,title:"allowBackup is enabled",description:'android:allowBackup="true" allows data extraction via ADB backup',severity:"medium",category:"manifest",file:l,recommendation:'Set android:allowBackup="false" via expo-build-properties plugin.',autoFixable:!0}),/android:debuggable="true"/.test(r)&&i.push({id:`MAN-${String(n++).padStart(3,"0")}`,title:"App is debuggable",description:'android:debuggable="true" allows attaching a debugger in production',severity:"critical",category:"manifest",file:l,recommendation:"Ensure debuggable is false for production builds. This is usually set automatically for release builds."}),{category:"manifest",label:"Android Manifest",findings:i,durationMs:0}}import Lt from"fs";import li from"path";function os(e){let t=li.join(e,"ios");if(!Lt.existsSync(t))return null;let i=Lt.readdirSync(t,{withFileTypes:!0});for(let n of i){if(!n.isDirectory()||n.name==="Pods"||n.name.startsWith("."))continue;let o=li.join(t,n.name,"Info.plist");if(Lt.existsSync(o))return o}return null}async function Tn(e,t){let i=[],n=1,o=os(e);if(!o)return{category:"ats",label:"iOS ATS Config",findings:[],durationMs:0,error:"No Info.plist found. Run with --prebuild or run `expo prebuild` first."};let r=Lt.readFileSync(o,"utf-8"),l=li.relative(e,o),a=r.match(/<key>NSAppTransportSecurity<\/key>\s*<dict>([\s\S]*?)<\/dict>/);if(a){let s=a[1];/<key>NSAllowsArbitraryLoads<\/key>\s*<true\s*\/>/.test(s)&&i.push({id:`ATS-${String(n++).padStart(3,"0")}`,title:"ATS disabled \u2014 NSAllowsArbitraryLoads",description:"App Transport Security is completely disabled. All HTTP connections are allowed.",severity:"critical",category:"ats",file:l,recommendation:"Remove NSAllowsArbitraryLoads or set to false. Use domain-specific exceptions only if absolutely necessary."});let c=s.match(/<key>NSExceptionDomains<\/key>\s*<dict>([\s\S]*?)<\/dict>/);if(c){let d=c[1].match(/<key>([^<]+)<\/key>/g);if(d)for(let u of d){let p=u.replace(/<\/?key>/g,"");p!=="NSExceptionDomains"&&i.push({id:`ATS-${String(n++).padStart(3,"0")}`,title:`ATS exception: ${p}`,description:`ATS exception configured for ${p}`,severity:"low",category:"ats",file:l,recommendation:`Verify that the ATS exception for ${p} is necessary. Use HTTPS where possible.`})}}}return{category:"ats",label:"iOS ATS Config",findings:i,durationMs:0}}var ss=[{category:"permissions",label:"Permission Audit",fn:yn,requiresPrebuild:!1},{category:"secrets",label:"Secrets Detection",fn:En,requiresPrebuild:!1},{category:"dependencies",label:"Dependency CVEs",fn:An,requiresPrebuild:!1},{category:"storage",label:"Insecure Storage",fn:_n,requiresPrebuild:!1},{category:"network",label:"HTTP URLs",fn:Dn,requiresPrebuild:!1},{category:"debug",label:"Debug/Dev Flags",fn:On,requiresPrebuild:!1},{category:"manifest",label:"Android Manifest",fn:Nn,requiresPrebuild:!0},{category:"ats",label:"iOS ATS Config",fn:Tn,requiresPrebuild:!0}];async function Un(e,t){let i=ss;t.category&&(i=i.filter(l=>l.category===t.category),i.length===0&&(St.error(me.red(`Unknown category: ${t.category}`)),St.info(me.dim(`Available: ${Object.values(De).join(", ")}`)),process.exit(1)));let n=i.filter(l=>!l.requiresPrebuild),o=i.filter(l=>l.requiresPrebuild),r=[];for(let l of n){let a=kn();a.start(me.dim(`Running ${l.label}...`));try{let s=Date.now(),c=await l.fn(e,t);c.durationMs=Date.now()-s,r.push(c);let d=c.findings.length;a.stop(d>0?me.yellow(`${l.label} \u2014 ${d} finding(s)`):me.green(`${l.label} \u2014 clean`))}catch(s){a.stop(me.red(`${l.label} \u2014 error`)),r.push({category:l.category,label:l.label,findings:[],durationMs:0,error:s.message})}}if(o.length>0){let l=Ln.join(e,"android"),a=Ln.join(e,"ios"),s=xn.existsSync(l)||xn.existsSync(a);if(!s&&t.prebuild){t.json||St.info(me.dim(`
+Running expo prebuild for deeper analysis...`));try{rs("npx expo prebuild --no-install",{cwd:e,stdio:"pipe"})}catch{return St.warn(me.yellow("Prebuild failed \u2014 skipping manifest/plist checks.")),r}}else if(!s)return t.json||St.info(me.dim(`
+Skipping manifest/plist checks \u2014 no android/ios dirs. Use --prebuild to generate them.`)),r;for(let c of o){let d=kn();d.start(me.dim(`Running ${c.label}...`));try{let u=Date.now(),p=await c.fn(e,t);p.durationMs=Date.now()-u,r.push(p);let m=p.findings.length;d.stop(m>0?me.yellow(`${c.label} \u2014 ${m} finding(s)`):me.green(`${c.label} \u2014 clean`))}catch(u){d.stop(me.red(`${c.label} \u2014 error`)),r.push({category:c.category,label:c.label,findings:[],durationMs:0,error:u.message})}}}return r}import te from"chalk";import{log as Q}from"@clack/prompts";var qe={critical:te.bgRed.white.bold,high:te.red.bold,medium:te.yellow.bold,low:te.blue,info:te.dim},Ut={critical:0,high:1,medium:2,low:3,info:4};function as(e,t){if(!t)return!0;let i=Ut[t];return i===void 0?!0:Ut[e]<=i}function Mn(e,t){let i=0,n={critical:0,high:0,medium:0,low:0,info:0};for(let l of e){let a=l.findings.filter(c=>as(c.severity,t));if(a.length===0&&!l.error)continue;if(Q.info(""),Q.info(te.bold(`  ${l.label}`)+te.dim(`  ${a.length} finding(s)`)),Q.info(te.dim("  "+"\u2500".repeat(60))),l.error){Q.error(te.red(`  Error: ${l.error}`));continue}let s=[...a].sort((c,d)=>Ut[c.severity]-Ut[d.severity]);for(let c of s){let d=qe[c.severity](` ${c.severity.toUpperCase()} `);Q.info(`  ${d}  ${te.bold(c.id)}  ${c.title}`),Q.info(te.dim(`          ${c.description}`)),c.file&&Q.info(te.dim(`          File: ${c.file}${c.line?`:${c.line}`:""}`)),Q.info(te.cyan(`          Fix: ${c.recommendation}`)),Q.info(""),n[c.severity]++,i++}}Q.info(""),Q.info(te.bold("  Summary")),Q.info(te.dim("  "+"\u2500".repeat(60))),Q.info(`  Total: ${te.bold(String(i))} finding(s)`),Q.info(`  ${qe.critical(` ${n.critical} Critical `)}  ${qe.high(` ${n.high} High `)}  ${qe.medium(` ${n.medium} Medium `)}  ${qe.low(` ${n.low} Low `)}  ${qe.info(` ${n.info} Info `)}`);let o=n.critical>0,r=n.high>0;o||r?(Q.info(""),Q.error(te.red.bold(`  FAIL \u2014 ${n.critical} critical, ${n.high} high issue(s) found`))):i>0?(Q.info(""),Q.warn(te.yellow("  PASS (with warnings) \u2014 no critical or high issues"))):(Q.info(""),Q.success(te.green.bold("  PASS \u2014 no issues found")))}function Fn(e,t){let i=e.flatMap(o=>o.findings),n={};for(let o of Object.values(Ee))n[o]=i.filter(r=>r.severity===o).length;return{version:"1.0.0",timestamp:new Date().toISOString(),project:t.name||"unknown",projectVersion:t.version||"0.0.0",summary:{total:i.length,...n},passed:n.critical===0&&n.high===0,checks:e.map(o=>({category:o.category,label:o.label,findingCount:o.findings.length,durationMs:o.durationMs,error:o.error||null})),findings:i}}import{log as ee,spinner as ls}from"@clack/prompts";import Z from"chalk";import xe from"fs";import cs from"os";import Xe from"path";import{execSync as ds}from"child_process";var Hn=16384,us=1,ps=Buffer.from([127,69,76,70]);async function Bn(e){ee.info(Z.bold.underline("16KB Page Alignment Check")),console.log("");let t=Xe.resolve(e);if(!xe.existsSync(t))return ee.error(Z.red(`APK file not found: ${t}`)),!1;if(!t.endsWith(".apk"))return ee.error(Z.red("The provided file is not an APK file.")),!1;let i=ls();i.start("Extracting and analyzing native libraries...");let n=xe.mkdtempSync(Xe.join(cs.tmpdir(),"mach-16kb-"));try{try{ds(`unzip -o -q "${t}" "lib/arm64-v8a/*.so" "lib/x86_64/*.so" -d "${n}" 2>/dev/null`,{encoding:"utf-8",maxBuffer:50*1024*1024})}catch{}let o=jn(Xe.join(n,"lib"));if(o.length===0)return i.stop("Analysis complete."),ee.info(Z.yellow("No arm64-v8a or x86_64 native libraries found in the APK.")),ee.info(Z.dim("16KB alignment check only applies to arm64-v8a and x86_64 architectures.")),!0;let r=[];for(let s of o){let c=Xe.relative(n,s),d=ms(c),u=Xe.basename(s),p=fs(s);p!==null&&r.push({name:u,filePath:c,arch:d,align:p,compatible:p>=Hn})}if(i.stop("Analysis complete."),r.length===0)return ee.info(Z.yellow("No valid ELF shared libraries found.")),!0;let l=r.filter(s=>!s.compatible),a=r.filter(s=>s.compatible);if(ee.info(Z.dim(`Checked ${r.length} native librar${r.length===1?"y":"ies"}
+`)),l.length>0){ee.info(Z.red.bold(`Incompatible libraries:
+`));for(let s of l)ee.error(Z.red(`${Z.bold(s.name)} ${Z.dim(`(${s.arch})`)}`)),ee.info(Z.dim(`  PT_LOAD alignment: 2**${Math.log2(s.align)} (${s.align} bytes, needs 2**14 = ${Hn})`))}return a.length>0&&(console.log(""),ee.success(Z.green(`${a.length} librar${a.length===1?"y":"ies"} correctly aligned (2**14 or higher).`))),console.log(""),l.length===0?(ee.success(Z.green.bold("ELF Verification Successful. APK is 16KB compatible.")),!0):(ee.error(Z.red.bold(`Found ${l.length} unaligned lib${l.length===1?"":"s"} (arm64-v8a/x86_64 libs need to be aligned).`)),console.log(""),ee.info(Z.yellow("To fix this:")),ee.info(Z.dim("  1. Rebuild with NDK r28+ which defaults to 16KB page alignment")),ee.info(Z.dim("  2. Or set -DANDROID_SUPPORT_FLEXIBLE_PAGE_SIZES=ON in CMake")),ee.info(Z.dim("  3. Update third-party libraries that ship prebuilt .so files")),ee.info(Z.dim("  4. After rebuilding: zipalign -p -f -v 16 input.apk output.apk")),console.log(""),ee.info(Z.dim("Reference: https://developer.android.com/guide/practices/page-sizes")),!1)}catch(o){return i.stop("Analysis failed."),ee.error(Z.red(`Failed to analyze APK: ${o.message}`)),!1}finally{try{xe.rmSync(n,{recursive:!0,force:!0})}catch{}}}function fs(e){let t=xe.openSync(e,"r");try{let i=Buffer.alloc(64);if(xe.readSync(t,i,0,64,0),!i.subarray(0,4).equals(ps))return null;let n=i[4]===2,o=i[5]===1,r=(p,m)=>o?p.readUInt16LE(m):p.readUInt16BE(m),l=(p,m)=>o?p.readUInt32LE(m):p.readUInt32BE(m),a=(p,m)=>Number(o?p.readBigUInt64LE(m):p.readBigUInt64BE(m)),s,c,d;n?(s=a(i,32),c=r(i,54),d=r(i,56)):(s=l(i,28),c=r(i,42),d=r(i,44));let u=null;for(let p=0;p<d;p++){let m=Buffer.alloc(c);if(xe.readSync(t,m,0,c,s+p*c),l(m,0)!==us)continue;let P;n?P=a(m,48):P=l(m,28),P>0&&(u===null||P<u)&&(u=P)}return u??0}catch{return null}finally{xe.closeSync(t)}}function jn(e){let t=[];if(!xe.existsSync(e))return t;let i=xe.readdirSync(e,{withFileTypes:!0});for(let n of i){let o=Xe.join(e,n.name);n.isDirectory()?t.push(...jn(o)):n.name.endsWith(".so")&&t.push(o)}return t}function ms(e){return e.includes("arm64-v8a")?"arm64-v8a":e.includes("x86_64")?"x86_64":"unknown"}var zn=async e=>{if(pe()||(Ae.error(Re.red(`You are not logged in. Run \`${f.nameLower} login\` first.`)),process.exit(1)),e.apk){await ys(e);return}let i=process.cwd(),n=Mt.join(i,"package.json");Et.existsSync(n)||(Ae.error(Re.red("No package.json found. Run this command from a project root.")),process.exit(1));let o=JSON.parse(Et.readFileSync(n,"utf-8")),r=!!(o.dependencies?.expo||o.devDependencies?.expo);e.json||(Ae.info(Re.dim(`Project: ${o.name||"unknown"} v${o.version||"0.0.0"}`)),Ae.info(Re.dim(`Type: ${r?"Expo":"Bare React Native"}`)),Ae.info(""));let l={json:e.json,fix:e.fix,category:e.category,severity:e.severity,prebuild:e.prebuild},a=await Un(i,l);e.json?console.log(JSON.stringify(Fn(a,o),null,2)):Mn(a,e.severity);let s=a.some(d=>d.findings.some(u=>u.severity==="critical")),c=a.some(d=>d.findings.some(u=>u.severity==="high"));(s||c)&&process.exit(1)},Gn=["16kb"];async function ys(e){let t=e.category?.toLowerCase();t&&!Gn.includes(t)&&(Ae.error(Re.red(`Unknown APK check category: "${t}"`)),Ae.info(Re.dim(`Available APK checks: ${Gn.join(", ")}`)),process.exit(1));let i=await Ss(e.apk);i||process.exit(1);let n=!t,o=!1;(n||t==="16kb")&&(await Bn(i)||(o=!0)),o&&process.exit(1)}async function Ss(e){if(e.startsWith("build:")){let i=e.slice(6);return await Es(i)}if(e.startsWith("http://")||e.startsWith("https://"))return await Vn(e);let t=Mt.resolve(e);return Et.existsSync(t)?t:(Ae.error(Re.red(`APK file not found: ${t}`)),null)}async function Es(e){let t=Kn();t.start(`Fetching APK from build ${e}...`);try{let i=await $.get(`/build/${e}`);if(i.data.status!=="success")throw new Error(i.data.message);let n=i.data.build;if(!n)throw new Error("Build not found");let o=n.artifacts?.find(r=>r.type?r.type==="apk":r.name?.endsWith(".apk")||r.url?.includes(".apk"));return!o||!o.url?(t.stop("No APK artifact found"),Ae.error(Re.red("This build does not have an APK artifact.")),Ae.info(Re.dim("Make sure the build produced an APK (not just an AAB).")),null):(t.stop(`Found build: ${n.buildId||e}`),await Vn(o.url))}catch(i){return t.stop("Failed to fetch build"),Ae.error(Re.red(i.message)),null}}async function Vn(e){let t=Kn();t.start("Downloading APK...");try{let i=Et.mkdtempSync(Mt.join(gs.tmpdir(),`${f.nameLower}-audit-`)),n=Mt.join(i,"app.apk"),o=await hs.get(e,{responseType:"arraybuffer"});Et.writeFileSync(n,o.data);let r=(o.data.length/(1024*1024)).toFixed(1);return t.stop(`Downloaded APK (${r} MB)`),n}catch(i){return t.stop("Download failed"),Ae.error(Re.red(`Failed to download APK: ${i.message}`)),null}}var bs=console.log;console.log=()=>{};Is();console.log=bs;de(se.bgCyan.black(f.cliTag("Production Build Orchestrator")));var Ps=_s(import.meta.url),$s=Ps("../package.json"),W=new As;W.name(f.nameLower).description(`${f.name} CLI: Powerful Cloud Infrastructure Tools`).version($s.version).option("-y, --yes","Automatically answer yes to all prompts",!1).option("--quiet","Suppress non-essential output",!1);W.command("agent").description("Start local device discovery agent for the Install Hub (port 7070)").action(async()=>{await zi()});W.command("host").description("Setup AWS S3 static hosting and CloudFront").action(async()=>{de(se.bgCyan.black(f.cliTag("Hosting"))),await hi()});W.command("sitemap").description("Generate sitemap.xml from Expo Router app structure").option("-o, --output <path>","Output path for sitemap.xml","./public/sitemap.xml").action(async e=>{de(se.bgCyan.black(f.cliTag("Sitemap Generator"))),await Ai(e)});W.command("build").description("Run a build on a cloud provider (AWS Spot Instances)").argument("[platform]","Target platform (android, ios)").option("--platform <os>","Target platform alias (android, ios) [Optional]").option("--repo <url>","Git Repository URL").option("--branch <name>","Git Branch").option("--ami <id>","AMI ID").option("--bucket <name>","S3 Bucket for artifacts").option("--region <region>","AWS Region").option("--aws-profile <name>","AWS Credentials Profile").option("-p, --build-profile <name>","Build Profile (e.g. production, staging)","production").option("--profile <name>","Build Profile (alias for --build-profile)").option("--dry-run","Generate User Data script without launching").option("--keep-instance","Do not terminate the instance after build").option("--subnet <id>","VPC Subnet ID to launch the instance in").option("--security-group <id>","VPC Security Group ID to use").option("--ssh-host <host>","Remote host for iOS build (SSH)").option("--ssh-user <user>","SSH username for remote host").option("--ssh-key <path>","Path to private SSH key for remote host").option("--ios-scheme <scheme>","iOS Scheme to build").option("--ios-team-id <id>","Apple Development Team ID").option("--ios-configuration <config>","Xcode configuration (Release/Debug)").option("--ios-export-method <method>","Export method (ad-hoc, app-store, development, enterprise)").option("--ios-api-key-id <id>","App Store Connect API Key ID").option("--ios-api-key-issuer <id>","App Store Connect API Key Issuer ID").option("--ios-api-key-path <path>","Path to App Store Connect API Key (.p8) file").option("--simulator","Build for iOS Simulator (no signing required)").addOption(new Wn("--build-id <id>","Internal build ID").hideHelp()).addOption(new Wn("--project-id <id>","Internal project ID").hideHelp()).option("--local","Run build on local machine").option("--auto-version","Automatically fetch and increment versionCode from Google Play").option("--verbose","Enable verbose logging").option("--json-output <path>","Write build metadata JSON to a file for CI/CD").option("--maestro","Queue a managed Maestro test run after a successful build").option("--maestro-flows <path>","Maestro flow file or directory (default: .maestro)").option("--maestro-device <device>","Managed Maestro device profile").option("--maestro-retries <n>","Retries for the Maestro run","1").option("--maestro-record","Enable screen recording where supported").option("-y, --yes","Automatically answer yes to all prompts",!1).option("--quiet","Suppress non-essential output",!1).action(async(e,t)=>{let i=W.opts();t.yes=t.yes||i.yes,t.quiet=t.quiet||i.quiet,t.platform=e||t.platform,t.buildProfile=t.profile||t.buildProfile,t.quiet||de(se.bgCyan.black(f.cliTag("Cloud Build"))),await Pt(t)});W.command("maestro").description("Run managed Maestro tests for an existing Mach build or artifact").option("--platform <os>","Target platform (android/ios)").option("-p, --profile <name>","Build profile to resolve when using --latest","production").option("--latest","Use the latest successful build for the platform/profile").option("--build-id <id>","Use a specific Mach build ID").option("--build-url <url>","Use a Mach build URL").option("--artifact-url <url>","Use a direct APK or iOS simulator app artifact URL").option("--maestro-flows <path>","Maestro flow file or directory (default: .maestro)").option("--maestro-device <device>","Managed Maestro device profile").option("--maestro-retries <n>","Retries for the Maestro run","1").option("--maestro-record","Enable screen recording where supported").option("--json-output <path>","Write test run metadata JSON to a file for CI/CD").action(async e=>{de(se.bgCyan.black(f.cliTag("Maestro Testing"))),await Li(e)});W.command("update").description("Deploy an Over-The-Air (OTA) update to your live channel").option("--branch <name>","Channel or Branch to deploy to (e.g., production)","production").action(async e=>{de(se.bgCyan.black(f.cliTag("OTA Update"))),await ln(e)});W.command("submit").description("Automated Store Submission (App Store / Google Play)").option("--platform <os>","Target platform (ios/android)").option("-p, --profile <name>","Build/submission profile to submit from (e.g. production, preprod)").option("--track <track>","Google Play Track (internal, alpha, beta, production)").option("--latest","Use the latest successful build for submission").option("--build-id <id>","Use a specific build ID for submission").action(async e=>{de(se.bgCyan.black(f.cliTag("Store Submission"))),await rn(e)});W.command("login").description(`Login to ${f.name} Dashboard`).action(async()=>{de(se.bgCyan.black(f.cliTag("Login"))),await Ji()});W.command("link").description(`Link local directory to a ${f.name} Project`).action(async()=>{de(se.bgCyan.black(f.cliTag("Link Project"))),await qi()});W.command("me").description("Display currently logged in user details").action(async()=>{await dn()});W.command("init").description(`Create a new ${f.name} Project`).action(async()=>{de(se.bgCyan.black(f.cliTag("Init Project"))),await Xi()});W.command("env").description("Manage Environment Variables").argument("<action>","Action to perform: set or list").argument("[args...]","Key=Value pairs for set action").action(async(e,t)=>{de(se.bgCyan.black(f.cliTag("Env Manager"))),await en(e,t)});W.command("start").description("Start the development server (Metro)").option("-p, --build-profile <name>","Build profile (e.g. development, staging)","development").option("--tunnel","Use ngrok tunnel").option("--lan","Use LAN IP").option("--localhost","Use localhost").option("-c, --clear","Clear Metro cache").option("--port <number>","Port to listen on").option("--ios","Start on iOS").option("--android","Start on Android").option("--web","Start on Web").action(async e=>{de(se.bgCyan.black(f.cliTag("Dev Server"))),await pn(e)});W.command("config").description("Show resolved configuration for a profile").option("-p, --profile <name>","Build profile to resolve","development").option("--json","Output as JSON").action(async e=>{await fn(e)});W.command("credentials").description("Unified, interactive credential management (iOS/Android)").option("-p, --profile <name>","Build profile (production, staging, development)").option("--force","Force recreate certificates (nuke existing on Apple Portal)",!1).action(async e=>{let{credentialsMainCommand:t}=await import("./credentials-UTJERDGT.js");await t(e)});W.command("credentials:setup").description("Automated credential provisioning (iOS/Android) [Legacy]").requiredOption("--platform <os>","Platform: ios or android").option("--profile <name>","Build profile (production, staging, development)").option("--bundle-id <id>","Bundle ID / Package Name (optional, auto-detected)").option("--team-id <id>","Apple Team ID (iOS only)").option("--key-alias <alias>","Android keystore alias (optional, auto-generated)").option("--aws-profile <name>","AWS Credentials Profile (for S3 storage)").option("--force","Force recreate certificates (nuke existing on Apple Portal)",!1).action(async e=>{de(se.bgCyan.black(f.cliTag("Credentials Setup"))),await et(e),Yn(se.green("Done!"))});W.command("credentials:service").description("Upload Service Credentials (ASC API Key / Google Service JSON) [Legacy]").requiredOption("--platform <os>","Platform: ios or android").option("--file <path>","Path to credential file (.p8 or .json)").option("--issuer-id <id>","ASC API Key Issuer ID (iOS only)").option("--key-id <id>","ASC API Key ID (iOS only)").option("--bundle-id <id>","Bundle identifier / Android package name to attach this service credential to").option("--package-name <name>","Android package name to attach this service credential to").option("-p, --profile <name>","Build profile to resolve package/bundle identifier from config").action(async e=>{de(se.bgCyan.black(f.cliTag("Service Credentials"))),await mi(e),Yn(se.green("Done!"))});var ci=W.command("device").description("Manage registered iOS test devices");ci.command("register").description("Register a connected iOS device or enter UDID manually").option("--udid <udid>","Device UDID (skip auto-detection)").option("--name <name>","Device name").action(async e=>{await wt("register",e)});ci.command("list").description("List all registered devices").action(async()=>{await wt("list",{})});ci.command("remove").description("Remove a registered device").option("--udid <udid>","Device UDID to remove").action(async e=>{await wt("remove",e)});W.command("audit").description("Run automated security audit on the project or APK").option("--apk <path>","Path to APK file (runs APK diagnostics like 16KB alignment)").option("--json","Output results as JSON (for CI/CD)").option("--fix","Auto-apply fixes where possible").option("--category <name>","Run only a specific check category (e.g. 16kb, permissions, secrets)").option("--severity <level>","Minimum severity to display (critical, high, medium, low, info)").option("--prebuild","Run expo prebuild for deeper manifest/plist analysis").action(async e=>{de(se.bgCyan.black(f.cliTag(e.apk?"APK Audit":"Security Audit"))),await zn(e)});var Ds=new Set(["login"]);W.hook("preAction",(e,t)=>{let i=t.name();Ds.has(i)||ui()});W.on("command:*",()=>{console.error(`Invalid command: %s
+See --help for a list of available commands.`,W.args.join(" ")),process.exit(1)});process.argv.slice(2).length||W.help();W.parse(process.argv);