@radhya/mach 1.7.1 → 1.8.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@radhya/mach",
-  "version": "1.7.1",
+  "version": "1.8.0",
   "description": "Mach CLI: Cloud Build Orchestrator for React Native & Expo",
   "main": "dist/index.js",
   "type": "module",

package/dist/chunk-SR72G3MN.js

@@ -1,58 +0,0 @@
-import{a as m,g as G}from"./chunk-YBL2LBMW.js";import{log as s,spinner as j,text as $,password as ie,select as K,confirm as Be,isCancel as V,cancel as Y,intro as Ye,outro as Je,note as Ze}from"@clack/prompts";import{log as W,spinner as Q,text as _,select as O,isCancel as X,cancel as P,note as ne,confirm as me}from"@clack/prompts";import v from"chalk";import{spawnSync as z}from"child_process";import R from"fs";import B from"path";import ce from"os";var Ve="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";function se(){let n=B.join(ce.tmpdir(),m.nameLower);R.existsSync(n)||R.mkdirSync(n,{recursive:!0});let e=B.join(n,"manage_asc_keys.rb");return R.writeFileSync(e,Buffer.from(Ve,"base64").toString("utf-8"),{mode:493}),e}function ae(){return{...process.env,PATH:`/usr/local/opt/ruby/bin:/usr/local/Cellar/fastlane/2.227.0/libexec/bin:${process.env.HOME}/.local/share/fastlane/3.4.0/bin:${process.env.PATH}`,GEM_HOME:process.env.FASTLANE_GEM_HOME||`${process.env.HOME}/.local/share/fastlane/3.4.0`,GEM_PATH:(process.env.FASTLANE_GEM_HOME||`${process.env.HOME}/.local/share/fastlane/3.4.0`)+":/usr/local/Cellar/fastlane/2.227.0/libexec",FASTLANE_INSTALLED_VIA_HOMEBREW:"true",CI:"1"}}function le(n){let e=new Map,i=/-\s+(\d+)\s+\(([^)]+)\)/g,o=/\d+\)\s+"([^"]+)"\s+\((\d+)\)/g,t;for(;(t=i.exec(n))!==null;)e.set(t[1],{id:t[1],name:t[2]});for(;(t=o.exec(n))!==null;)e.set(t[2],{id:t[2],name:t[1]});return Array.from(e.values())}function de(n,e){n.submit||(n.submit={production:{ios:{}}}),n.submit.production||(n.submit.production={ios:{}}),n.submit.production.ios||(n.submit.production.ios={}),n.submit.production.ios.appStoreConnectTeamId=e,R.writeFileSync(`./${m.configFileName}`,JSON.stringify(n,null,2))}function Ae(n){return n.submit?.production?.ios?.appStoreConnectTeamId||n.submit?.production?.ios?.itcTeamId||n.submit?.production?.ios?.appleConnectTeamId}function Ce(n,e,i){return{...ae(),FASTLANE_USER:n,FASTLANE_TEAM_ID:e,...i?{FASTLANE_ITC_TEAM_ID:i,FASTLANE_ASC_TEAM_ID:i}:{}}}async function Ge(n,e,i,o){let t=Q();t.start("Fetching App Store Connect providers...");let a=z("ruby",[n,"teams"],{env:Ce(i,o),stdio:["inherit","pipe","pipe"],encoding:"utf-8"});if(a.status!==0){t.stop("Could not fetch providers");let u=le(`${a.stdout||""}
-${a.stderr||""}`);if(u.length>0)return re(e,u,"Select the App Store Connect provider for this API key:");W.warn(v.yellow(`Could not list App Store Connect providers: ${a.stderr||"Unknown error"}`));return}let c=(a.stdout||"").match(new RegExp(`${m.jsonStartMarker}(.*)${m.jsonEndMarker}`));if(!c){t.stop("Could not parse providers");return}let I=JSON.parse(c[1]),p=(I.teams||[]).filter(u=>u.id&&u.name);if(t.stop(p.length===1?"Found 1 provider":`Found ${p.length} providers`),p.length===0)return;if(p.length===1)return de(e,p[0].id),W.success(v.green(`\u2713 Using App Store Connect provider ${p[0].name} (${p[0].id})`)),p[0].id;let C=p.filter(u=>u.recommended),l=p.filter(u=>!u.recommended);return re(e,[...C,...l],`Select the App Store Connect provider for Developer Team ${I.developerTeamName||o}:`)}async function re(n,e,i){let o=await O({message:i,options:e.map(a=>({value:a.id,label:a.name,hint:`${a.id}${a.recommended?" \xB7 recommended":""}`}))});if(X(o))return P("Operation cancelled"),null;let t=o;return de(n,t),W.success(v.green(`\u2713 Saved App Store Connect Provider ID ${t}`)),t}var fe=async n=>{let e=Q(),i=n.platform,o=`./${m.configFileName}`;if(!R.existsSync(o)){W.error(`No ${m.configFileName} found. Run \`${m.nameLower} init\` or \`${m.nameLower} link\` first.`);return}let t=JSON.parse(R.readFileSync(o,"utf-8")),{projectId:a}=t;if(!a){W.error(`${m.configFileName} is missing projectId.`);return}let c=n.file,I=i==="android"?n.packageName||n.bundleId:n.bundleId||t.ios?.bundleIdentifier||"*";if(i==="android"&&!I&&(I=await ve(a,t),I===null))return;if(i==="ios"&&!c){let l=await O({message:"Manage App Store Connect API Key:",options:[{value:"magic",label:"\u2728 Create new automatically",hint:"Requires Apple ID + 2FA"},{value:"manual",label:"\u{1F50D} Configure manually",hint:"Provide existing .p8 file"},{value:"delete",label:"\u{1F5D1}\uFE0F  Delete an existing Key"}]});if(X(l)){P("Operation cancelled");return}if(l==="magic"){await ke(a,t);return}if(l==="delete"){await Ne(a,t);return}}if(!c){let l=i==="ios"?"https://appstoreconnect.apple.com/access/api":"https://console.cloud.google.com/apis/credentials";ne(`To submit to the ${i==="ios"?"App Store":"Google Play Store"}, you need a Service Key:
-
-1. Open: ${v.cyan(l)}
-`+(i==="ios"?`2. Generate an "App Store Connect API Key" with ${v.bold("Admin")} role.
-3. Download the ${v.bold(".p8")} file.`:`2. Create a "Service Account", generate a ${v.bold("JSON")} key.
-3. Download the ${v.bold(".json")} file.`),"Guided Setup"),e.start("Scanning for downloaded keys...");let u=Ee(i);if(e.stop(u.length>0?`Detected ${u.length} potential key(s)`:"No keys detected automatically"),u.length>0){let d=await O({message:"Found these potential keys. Use one of them?",options:[...u.map(g=>({value:g.path,label:`${B.basename(g.path)} (${g.location})`})),{value:"manual",label:"Enter path manually..."}]});if(X(d)){P("Operation cancelled");return}d!=="manual"&&(c=d)}if(!c){let d=await _({message:`Paste the path to your ${i==="ios"?".p8":".json"} file:`,validate:g=>R.existsSync(g)?void 0:"File not found"});if(X(d)){P("Operation cancelled");return}c=d}}let p=n.issuerId,C=n.keyId;if(i==="ios"){if(!C&&c){let l=B.basename(c).match(/AuthKey_(.*)\.p8/);l&&(C=l[1],W.info(`Auto-detected Key ID from filename: ${v.green(C)}`))}if(!p){let l=await _({message:"Enter App Store Connect Issuer ID (Found on the Keys page):",validate:u=>u.length>0?void 0:"Issuer ID is required"});if(X(l)){P("Operation cancelled");return}p=l}if(!C){let l=await _({message:"Enter App Store Connect Key ID:",validate:u=>u.length>0?void 0:"Key ID is required"});if(X(l)){P("Operation cancelled");return}C=l}}if(i==="android"&&(!I||I==="*")){let l=await ye();if(l===null)return;I=l}await oe(a,c,i,p,C,I)};async function ve(n,e){let i=await Fe(n);if(i.length>0){let t=await O({message:"Select Android package for this Google Play service key:",options:[...i.map(a=>({value:a,label:a})),{value:"manual",label:"Enter another package name..."}]});if(X(t))return P("Operation cancelled"),null;if(t==="manual")return ye();if(t!=="manual")return t}let o=Xe(e);if(o){let t=await me({message:`Use Android package from local config (${o})?`,initialValue:!0});if(X(t))return P("Operation cancelled"),null;if(t)return o}}async function ye(){let n=await _({message:"Android package name for this Google Play service key:",placeholder:"com.example.app",validate:e=>e.includes(".")?void 0:"Enter a valid package name"});return X(n)?(P("Operation cancelled"),null):n}async function Fe(n){try{let i=(await G.get(`/credentials/${n}`)).data.credentials||[],o=new Set;for(let t of i)(t.platform==="android"||t.type==="android_keystore"||t.type==="google_service_account")&&t.bundleId&&t.bundleId!=="*"&&o.add(t.bundleId);return Array.from(o).sort()}catch(e){return W.warn(v.yellow(`Could not fetch saved Android package identifiers: ${e.message}`)),[]}}function Xe(n){if(n.android?.package)return n.android.package;if(n.expo?.android?.package)return n.expo.android.package;let e=B.join(process.cwd(),"app.json");if(R.existsSync(e))try{return JSON.parse(R.readFileSync(e,"utf-8")).expo?.android?.package}catch{}let i=B.join(process.cwd(),"app.config.json");if(R.existsSync(i))try{let o=JSON.parse(R.readFileSync(i,"utf-8"));return o.expo?.android?.package||o.android?.package}catch{}}async function ke(n,e){let i=Q(),o=e.submit?.production?.ios?.appleId,t=e.submit?.production?.ios?.appleTeamId,a=Ae(e);if(!o){let p=await _({message:"Apple ID:",placeholder:"your-email@example.com"});if(X(p))return;o=p,e.submit||(e.submit={production:{ios:{}}}),e.submit.production||(e.submit.production={ios:{}}),e.submit.production.ios||(e.submit.production.ios={}),e.submit.production.ios.appleId=o,R.writeFileSync(`./${m.configFileName}`,JSON.stringify(e,null,2))}if(!t){let p=await _({message:"Apple Team ID:",placeholder:"e.g. 4523G95823"});if(X(p))return;t=p,e.submit||(e.submit={production:{ios:{}}}),e.submit.production||(e.submit.production={ios:{}}),e.submit.production.ios||(e.submit.production.ios={}),e.submit.production.ios.appleTeamId=t,R.writeFileSync(`./${m.configFileName}`,JSON.stringify(e,null,2))}let c=await _({message:"Enter a name for the new API Key:",initialValue:`[${m.name}] Project ${n}`});if(X(c))return;let I=se();if(!R.existsSync(I)){W.error(`Magic Error: Helper script not found at ${I}`);return}try{let p=await Ge(I,e,o,t);if(p===null)return;if(p)a=p;else if(!a)return;i.start("Creating App Store Connect API Key...");let C=S=>z("ruby",[I,"create",c],{env:Ce(o,t,S),stdio:["inherit","pipe","pipe"],encoding:"utf-8"}),l=C(a),u=l.stdout||"",d=l.stderr||"";if(l.status!==0){let S=le(`${u}
-${d}`);if(S.length>0){i.stop("Select App Store Connect team"),ne(`Apple Developer Team IDs look like ${v.bold(t)}.
-App Store Connect API keys use a numeric provider/team ID instead.`,"Team ID mismatch");let J=await re(e,S,"Select the App Store Connect provider for this API key:");if(!J)return;a=J,i.start("Creating API Key with selected App Store Connect team..."),l=C(a),u=l.stdout||"",d=l.stderr||""}}if(d&&(d.includes("DEBUG:")||d.includes("ERROR:"))&&d.split(`
-`).forEach(S=>{S.trim()&&W.info(v.dim(`[Ruby] ${S.trim()}`))}),l.status!==0){i.stop("Failed"),W.error(`Magic creation failed: ${d}`);return}let g=u.match(new RegExp(`${m.jsonStartMarker}(.*)${m.jsonEndMarker}`));if(!g){i.stop("Parse Error"),W.error("Could not parse response from Apple Portal.");return}let A=JSON.parse(g[1]),{id:Z,issuerId:y,keyContent:N}=A;if(i.stop("Key Created Successfully"),W.success(`\u2713 Created Key ID: ${v.green(Z)}`),!y){ne(`Your Issuer ID is shown at the top of:
-  ${v.cyan("https://appstoreconnect.apple.com/access/integrations/api")}
-
-It looks like: ${v.dim("xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx")}`,"One More Thing");let S=await _({message:"Enter your App Store Connect Issuer ID:",validate:J=>J.trim().length>0?void 0:"Issuer ID is required"});if(X(S)){P("Operation cancelled.");return}y=S.trim()}if(N){let S=B.join(ce.tmpdir(),`AuthKey_${Z}.p8`);R.writeFileSync(S,N),await oe(n,S,"ios",y,Z,e.ios?.bundleIdentifier||"*"),R.unlinkSync(S)}else{W.warn(v.yellow("\u26A0\uFE0F  Apple did not return the private key in the response.")),ne(`Download the .p8 file manually:
-
-  1. Open: ${v.cyan("https://appstoreconnect.apple.com/access/integrations/api")}
-  2. Find Key ID: ${v.green(Z)}
-  3. Click ${v.bold("Download API Key")} (only available once)
-  4. Drag & drop the downloaded .p8 file below`,"Manual Step Required");let S=await _({message:"Path to the downloaded .p8 file (drag & drop here):",validate:J=>R.existsSync(J)?void 0:"File not found"});if(X(S)){P("Operation cancelled. Credential ID was registered but key content is missing.");return}await oe(n,S,"ios",y,Z,e.ios?.bundleIdentifier||"*")}}catch(p){i.stop("Error"),W.error(`Error: ${p.message}`)}}async function Ne(n,e){let i=Q(),o=e.submit?.production?.ios?.appleId,t=e.submit?.production?.ios?.appleTeamId,a=Ae(e);if(!o){let I=await _({message:"Apple ID:"});if(X(I))return;o=I,e.submit||(e.submit={production:{ios:{}}}),e.submit.production||(e.submit.production={ios:{}}),e.submit.production.ios||(e.submit.production.ios={}),e.submit.production.ios.appleId=o,R.writeFileSync(`./${m.configFileName}`,JSON.stringify(e,null,2))}if(!t){let I=await _({message:"Apple Team ID:"});if(X(I))return;t=I,e.submit||(e.submit={production:{ios:{}}}),e.submit.production||(e.submit.production={ios:{}}),e.submit.production.ios||(e.submit.production.ios={}),e.submit.production.ios.appleTeamId=t,R.writeFileSync(`./${m.configFileName}`,JSON.stringify(e,null,2))}i.start("Fetching existing API Keys...");let c=se();if(!R.existsSync(c)){W.error(`Magic Error: Helper script not found at ${c}`);return}try{let I=A=>z("ruby",[c,"list"],{env:{...ae(),FASTLANE_USER:o,FASTLANE_TEAM_ID:t,...A?{FASTLANE_ITC_TEAM_ID:A,FASTLANE_ASC_TEAM_ID:A}:{}},stdio:["inherit","pipe","pipe"],encoding:"utf-8"}),p=I(a);if(p.status!==0){let A=le(`${p.stdout||""}
-${p.stderr||""}`);if(A.length>0){i.stop("Select App Store Connect team");let Z=await O({message:"Select the App Store Connect team to list API keys:",options:A.map(y=>({value:y.id,label:y.name,hint:y.id}))});if(X(Z)){P("Operation cancelled");return}a=Z,de(e,a),i.start("Fetching existing API Keys..."),p=I(a)}}if(p.status!==0){i.stop("Failed"),W.error(`Listing failed: ${p.stderr}`);return}let C=p.stdout.match(new RegExp(`${m.jsonStartMarker}(.*)${m.jsonEndMarker}`));if(!C){i.stop("Parse Error");return}let l=JSON.parse(C[1]);if(i.stop(`Found ${l.length} keys`),l.length===0){W.info("No API Keys found on this team.");return}let u=await O({message:"Select a key to delete from Apple Developer Portal:",options:[...l.map(A=>({value:A.id,label:`ID: ${A.id} - ${A.name} (${A.role})`})),{value:"cancel",label:"Cancel"}]});if(X(u)||u==="cancel")return;let d=await me({message:`Are you sure you want to delete Key ${u}? This cannot be undone.`});if(!d||X(d))return;i.start(`Deleting Key ${u}...`);let g=z("ruby",[se(),"delete",u],{env:{...ae(),FASTLANE_USER:o,FASTLANE_TEAM_ID:t,...a?{FASTLANE_ITC_TEAM_ID:a,FASTLANE_ASC_TEAM_ID:a}:{}},stdio:"pipe",encoding:"utf-8"});g.status===0?(i.stop("Deleted"),W.success(`\u2713 Key ${u} has been removed from Apple Portal.`)):(i.stop("Deletion Failed"),W.error(`Error: ${g.stderr}`))}catch(I){i.stop("Error"),W.error(`Error: ${I.message}`)}}async function oe(n,e,i,o,t,a="*"){let c=Q();c.start(`Uploading Service Credentials for ${i}...`);try{let I=i==="ios"?"asc_api_key":"google_service_account",p=new URL(import.meta.url),C=B.dirname(p.pathname),l=[B.join(C,"isolated-upload.js"),B.join(C,"commands","isolated-upload.js"),B.resolve(C,"../commands/isolated-upload.js"),B.resolve(process.cwd(),`node_modules/.bin/${m.nameLower}-upload`)],u="";for(let g of l)if(R.existsSync(g)){u=g;break}if(!u)throw new Error("Could not locate isolated-upload.js. Ensure the CLI is properly installed.");let d=z("node",[u,n,e,I,a,"service","undefined","undefined",o||"undefined",t||"undefined"],{stdio:"pipe",encoding:"utf-8",env:{...process.env,AT_CLI_ISOLATED:"1"}});if(d.status!==0){let g=d.stderr||d.stdout||"Unknown upload failure";c.stop("Upload Failed"),W.error(v.red(`Upload Failed: ${g}`));return}d.stdout.includes("SUCCESS")?(c.stop("Upload Success"),W.success(v.green(`\u2713 Service Credentials for ${i} uploaded successfully.`))):(c.stop("Upload Summary"),W.warn(v.yellow(`Upload finished but success not confirmed: ${d.stdout}`)))}catch(I){c.stop("Upload Error"),W.error(v.red(`Error: ${I.message}`))}}function Ee(n){let e=n==="ios"?".p8":".json",i=[],o=[{path:"./",label:"Project Root"},{path:B.join(ce.homedir(),"Downloads"),label:"Downloads"}];for(let t of o)if(R.existsSync(t.path))try{let a=R.readdirSync(t.path);for(let c of a)if(c.endsWith(e)){if(n==="android"&&!R.readFileSync(B.join(t.path,c),"utf8").includes("service_account")||n==="ios"&&!c.startsWith("AuthKey"))continue;i.push({path:B.join(t.path,c),location:t.label})}}catch{}return i}import we from"axios";import r from"chalk";import{execSync as U,spawnSync as L}from"child_process";import ge from"crypto";import f from"fs";import F from"path";import Ie from"os";we.defaults.proxy=!1;function pe(n,e){if(!f.existsSync(n))return;let i=f.readdirSync(n);for(let o of i){let t=F.join(n,o);if(f.statSync(t).isDirectory()){let c=pe(t,e);if(c)return c}else if(e.test(o))return t}}function xe(n,e,i){let o=f.readFileSync(i,"utf8"),t=Math.floor(Date.now()/1e3),a=Buffer.from(JSON.stringify({alg:"ES256",kid:n,typ:"JWT"})).toString("base64url"),c=Buffer.from(JSON.stringify({iss:e,iat:t,exp:t+1200,aud:"appstoreconnect-v1"})).toString("base64url"),I=`${a}.${c}`,p=ge.createSign("SHA256");p.update(I);let C=p.sign({key:o,dsaEncoding:"ieee-p1363"}).toString("base64url");return`${I}.${C}`}async function He(n,e,i,o){let t=xe(e,i,o),a=(await import("axios")).default;for(let c of n)try{await a.post("https://api.appstoreconnect.apple.com/v1/devices",{data:{type:"devices",attributes:{name:c.name,udid:c.udid,platform:"IOS"}}},{headers:{Authorization:`Bearer ${t}`,"Content-Type":"application/json"}}),s.info(r.dim(`  \u2713 Registered: ${c.name}`))}catch(I){let p=I.response?.data?.errors;p?.some(l=>l.code==="ENTITY_ERROR.ATTRIBUTE.INVALID.DUPLICATE"||l.detail?.toLowerCase().includes("already registered")||l.detail?.toLowerCase().includes("already exists"))?s.info(r.dim(`  Already on Portal: ${c.name}`)):s.warn(r.yellow(`  Could not register ${c.name}: ${p?.[0]?.detail||I.message}`))}}var be=async n=>{Ye(r.bgCyan.black(m.cliTag("Credentials")));let e=await K({message:"Select platform:",options:[{value:"ios",label:"iOS"},{value:"android",label:"Android"}]});V(e)&&(Y("Operation cancelled"),process.exit(0));let i=await K({message:"What do you want to do?",options:[{value:"setup",label:"Build Credentials (Certs/Profiles)",hint:"Manage everything needed to build your project"},{value:"download",label:"Download credentials (credentials.json)",hint:"Sync credentials from Dashboard to local project"},{value:"service",label:"App Store Connect API Key (Magic)",hint:"Manage your API Key for automated submission"},{value:"push",label:"Push Notifications (Placeholder)",hint:"Manage your Apple Push Notifications Key"},{value:"back",label:"Go back"},{value:"exit",label:"Exit"}].filter(o=>!(e==="android"&&(o.value==="service"&&(o.label="Google Service Account (JSON)"),o.value==="push")))});if((V(i)||i==="exit")&&(Y("Operation cancelled"),process.exit(0)),i==="back")return be(n);if(i==="setup")await Ue({...n,platform:e});else if(i==="download")await Ke({...n,platform:e});else if(i==="service")await fe({platform:e});else if(i==="push")return Ze("Push Notifications management is coming soon!","Coming Soon"),be(n);Je(r.green("Done!"))},Ue=async n=>{let e=j(),i=n.platform,o=n.profile;if(!o){let I=await K({message:"Select credential type:",options:[{value:"development",label:"Development",hint:"Local testing & simulators"},{value:"staging",label:"Ad Hoc / Staging",hint:"Internal distribution & device testing"},{value:"production",label:"Production / App Store",hint:"App Store & Play Store submission"}]});V(I)&&(Y("Operation cancelled"),process.exit(0)),o=I}let t=`./${m.configFileName}`;if(!f.existsSync(t)){s.error(`No ${m.configFileName} found. Run \`${m.nameLower} init\` or \`${m.nameLower} link\` first.`);return}let a=JSON.parse(f.readFileSync(t,"utf-8")),{projectId:c}=a;if(!c){s.error(`${m.configFileName} is missing projectId.`);return}n.awsProfile&&s.warn(r.yellow(`Ignoring --aws-profile. Authenticating with ${m.name} Cloud...`)),s.info(r.dim(`Setting up credentials for: ${o}`)),i==="ios"?await Pe(c,o,n,a):await Te(c,o,o==="production"?"store":"internal",n)};async function Pe(n,e,i,o){let t=i.bundleId;if(!t){let p=o.submit?.production?.ios?.bundleId||o.ios?.bundleId,C=[];try{let u=(await G.get(`/credentials/${n}`)).data.credentials||[];C=[...new Set(u.filter(d=>d.platform==="ios"&&d.bundleId&&d.bundleId!=="*").map(d=>d.bundleId))]}catch{}if(p&&!C.includes(p)&&C.unshift(p),C.length>0){let l=[...C.map(d=>({value:d,label:d,hint:d===p?"from config":void 0})),{value:"__new__",label:"+ Enter a new Bundle ID"}],u=await K({message:"Which Bundle ID are you setting up credentials for?",options:l});if(V(u)&&(Y("Operation cancelled"),process.exit(0)),u==="__new__"){let d=await $({message:"iOS Bundle ID (e.g. com.example.app):",placeholder:"com.example.app",validate:g=>g.includes(".")?void 0:"Please enter a valid Bundle ID"});V(d)&&(Y("Operation cancelled"),process.exit(0)),t=d}else t=u}else{let l=await $({message:"iOS Bundle ID (e.g. com.example.app):",placeholder:"com.example.app",validate:u=>u.includes(".")?void 0:"Please enter a valid Bundle ID"});V(l)&&(Y("Operation cancelled"),process.exit(0)),t=l}}s.info(r.dim(`Bundle ID: ${t}`));let a=e==="production"?"store":e==="staging"?"adhoc":"development",c=o.submit?.production?.ios?.appleId;c&&s.info(r.dim(`Using Apple ID from config: ${c}`)),await $e(n,t,e,a,a==="store"?"appstore":a==="adhoc"?"adhoc":"development",i,o,c)}async function _e(n){let e="MATCH_ENCRYPTION_PASSPHRASE";try{let c=((await G.get(`/projects/${n}/secrets/export?env=development`)).data.secrets||{})[e];if(c&&!c.includes("[Decryption Failed]"))return s.info(r.dim("Using existing encryption passphrase from Dashboard")),s.info(r.cyan(`MATCH_PASSWORD: ${c}`)),c;if(c&&c.includes("[Decryption Failed]")){s.warn(r.yellow("\u26A0\uFE0F  Existing MATCH_PASSWORD could not be decrypted (encryption key changed).")),s.info(r.dim("Generating a fresh passphrase and cleaning old certificates..."));let I=ge.randomBytes(32).toString("base64");try{await G.post(`/projects/${n}/secrets`,{key:e,value:I,type:"managed",description:"Encryption passphrase for iOS certificates (fastlane match)",visibility:"secret"}),s.success(r.green("\u2713 New encryption passphrase generated and saved"))}catch{}try{await G.post("/credentials/clean-match-storage",{projectId:n}),s.success(r.green("\u2713 Cleaned old certificates from storage"))}catch{}return I}}catch(t){s.info(r.dim(`Could not fetch existing passphrase from Dashboard: ${t.message}`))}let i=await K({message:"No active encryption passphrase found on Dashboard. What would you like to do?",options:[{value:"generate",label:"Generate a new secure passphrase",hint:"Safe for first-time setup"},{value:"enter",label:"Enter existing passphrase manually",hint:"Required if you already have certs in S3"},{value:"cancel",label:"Cancel",hint:"Quit"}]});if((V(i)||i==="cancel")&&(Y("Operation cancelled"),process.exit(0)),i==="enter"){let t=await ie({message:"Enter your MATCH_PASSWORD (encryption passphrase):",validate:c=>c.length>0?void 0:"Passphrase is required"});V(t)&&(Y("Operation cancelled"),process.exit(0));let a=t;try{await G.post(`/projects/${n}/secrets`,{key:e,value:a,type:"managed",description:"Encryption passphrase for iOS certificates (fastlane match)"}),s.success(r.green("\u2713 Saved passphrase to Dashboard"))}catch{}return a}let o=ge.randomBytes(32).toString("base64");try{await G.post(`/projects/${n}/secrets`,{key:e,value:o,type:"managed",description:"Encryption passphrase for iOS certificates (fastlane match)",visibility:"secret"}),s.success(r.green("\u2713 Generated and saved encryption passphrase to Dashboard")),s.info(r.cyan(`MATCH_PASSWORD: ${o}`))}catch(t){s.warn(r.yellow(`Could not save passphrase to Dashboard: ${t.message}`))}return o}async function $e(n,e,i,o,t,a,c,I){let p=j();s.info(r.blue("Configuring iOS certificate management..."));let C;if(!I){let l=await $({message:"Apple ID (for Apple Developer Portal):",placeholder:"your-email@example.com",validate:u=>u.includes("@")?void 0:"Please enter a valid email"});V(l)&&(Y("Operation cancelled"),process.exit(0)),I=l,c.submit||(c.submit={production:{ios:{}}}),c.submit.production||(c.submit.production={ios:{}}),c.submit.production.ios||(c.submit.production.ios={}),c.submit.production.ios.appleId=I,f.writeFileSync(`./${m.configFileName}`,JSON.stringify(c,null,2)),s.success(r.green("\u2713 Apple ID saved to config"))}p.start(`Fetching ${t} certificates...`);try{let l=await _e(n),u="",d="";try{let y=await G.post("/credentials/build-server-token",{projectId:n});y.data.status==="success"&&y.data.credentials&&(process.env.AWS_ACCESS_KEY_ID=y.data.credentials.accessKeyId,process.env.AWS_SECRET_ACCESS_KEY=y.data.credentials.secretAccessKey,y.data.credentials.sessionToken&&(process.env.AWS_SESSION_TOKEN=y.data.credentials.sessionToken),d=y.data.credentials.region||"ap-south-1",u=y.data.credentials.bucket||m.bucketPrefix,process.env.AWS_REGION=d,delete process.env.AWS_PROFILE)}catch(y){throw s.error(`Failed to authenticate with ${m.name} Cloud.`),y}if(!u||!d){s.error(`Failed to resolve S3 configuration from ${m.name} Cloud.`);return}let g=a.teamId||c.submit?.production?.ios?.appleTeamId;if(!g)try{let N=(await G.get(`/projects/${n}/secrets`)).data.secrets?.find(S=>S.key==="APPLE_TEAM_ID");N&&(g=N.value,s.info(r.dim(`Using Team ID from Dashboard: ${g}`)))}catch{}if(g&&g===c.submit?.production?.ios?.appleTeamId&&s.info(r.dim(`Using Apple Team ID from config: ${g}`)),!g){s.warn(r.yellow(`
-Apple Team ID is required to fetch certificates.`)),s.info(r.dim("You can find this at: https://developer.apple.com/account \u2192 Membership Details"));let y=await $({message:"Enter your 10-character Apple Team ID:",placeholder:"e.g. SA56KTS33U",validate:N=>N.length===10?void 0:"Team ID must be exactly 10 characters"});V(y)&&(Y("Operation cancelled"),process.exit(0)),g=y,await he(n,g)}p.stop("Starting certificate sync...");let A=`${m.buildPrefix}-${g}.keychain-db`,Z=m.keychainPassword;try{let N=`${process.env.HOME||"/Users/"+(process.env.USER||m.nameLower)}/Library/Keychains/${A}`;s.info(r.dim(`Ensuring keychain exists: ${A}`));try{U(`security create-keychain -p ${Z} ${A} 2>/dev/null || true`),U(`security unlock-keychain -p ${Z} ${A}`),U(`security set-keychain-settings ${A}`);let h=U("security list-keychains -d user").toString();if(!h.includes(A)){s.info(r.dim(`Adding ${A} to search list`));let b=[...h.replace(/"/g,"").split(`
-`).map(k=>k.trim()).filter(k=>k.length>0),N].join(" ");U(`security list-keychains -d user -s ${b}`)}}catch(h){s.warn(r.dim("Keychain setup warning (non-critical): "+h.message))}let S,J;try{let w=((await G.get(`/credentials/${n}`)).data.credentials||[]).find(b=>b.type==="asc_api_key"&&b.issuerId);if(w){let b=await G.get(`/credentials/${w.credentialId}/download`,{params:{projectId:n}});if(b.data.downloadUrl){let E=await(await import("axios")).default.get(b.data.downloadUrl,{responseType:"arraybuffer"}),D=F.join(Ie.tmpdir(),`mach-asc-${Date.now()}`);f.mkdirSync(D,{recursive:!0}),C=F.join(D,`AuthKey_${w.keyId}.p8`),f.writeFileSync(C,Buffer.from(E.data)),S=w.keyId,J=w.issuerId,s.success(r.green("\u2713 ASC API key loaded \u2014 no 2FA required for Portal operations"))}}}catch(h){s.warn(r.dim(`Could not load ASC API key: ${h.message}. Will fall back to Apple ID auth.`))}s.info(r.dim("Generating secure P12 export password..."));let q=We();s.success(r.green("\u2713 Secure P12 password generated."));let x={...process.env,AWS_REGION:process.env.AWS_REGION||"ap-south-1",AWS_ACCESS_KEY_ID:process.env.AWS_ACCESS_KEY_ID,AWS_SECRET_ACCESS_KEY:process.env.AWS_SECRET_ACCESS_KEY,SSL_CERT_FILE:"/etc/ssl/cert.pem",AWS_CA_BUNDLE:"/etc/ssl/cert.pem",FASTLANE_SSL_CA_CERT:"/etc/ssl/cert.pem",MATCH_PASSWORD:l,FASTLANE_USER:I,FASTLANE_SKIP_UPDATE_CHECK:"1",FASTLANE_TEAM_ID:g,MATCH_KEYCHAIN_NAME:N,MATCH_KEYCHAIN_PASSWORD:Z,TERM:process.env.TERM||"xterm-256color",SHELL:process.env.SHELL||"/bin/zsh",MATCH_OUTPUT_PATH:F.join(process.cwd(),"temp_match"),MATCH_STORAGE_MODE:"s3",MATCH_S3_REGION:d,MATCH_S3_BUCKET:u,MATCH_S3_OBJECT_PREFIX:"ios-certificates/",MATCH_USERNAME:I,MATCH_APP_IDENTIFIER:e,MATCH_TYPE:t,[`${m.envPrefix}P12_PASSWORD`]:q,...C&&S&&J?{APP_STORE_CONNECT_API_KEY_KEY_ID:S,APP_STORE_CONNECT_API_KEY_ISSUER_ID:J,APP_STORE_CONNECT_API_KEY_KEY_FILEPATH:C,FASTLANE_SKIP_2FA:"1"}:{}};if(a.force){s.warn(r.yellow(`
-\u26A0\uFE0F  Force flag detected: Hard resetting ${t} certificates...`)),s.info(r.dim("Detected decryption failure loop. Clearing remote storage directly to allow fresh generation.")),s.info(r.cyan(`Current MATCH_PASSWORD: ${l}`)),s.info(r.dim(`Cleaning match storage for Team ID: ${g}...`));try{(await G.post("/credentials/clean-match-storage",{projectId:n,teamId:g})).data.status==="success"&&s.success(r.green(`\u2713 Cleared S3 storage for Team ID: ${g}`))}catch(h){s.warn(r.yellow(`S3 cleanup via API failed: ${h.message}`)),s.info(r.dim("Continuing to attempt standard nuke..."))}try{U(`fastlane match nuke ${t} --skip_confirmation`,{stdio:"inherit",cwd:process.cwd(),env:x}),s.success(r.green(`\u2713 Nuked existing ${t} credentials`))}catch{s.warn(r.yellow("Standard nuke failed (likely due to password mismatch).")),s.info(r.dim("Since S3 was cleared manually, proceeding to generation..."))}}if(t==="adhoc"||t==="development")try{s.info(r.blue("Fetching registered devices..."));let w=(await G.get("/devices")).data.devices||[];if(w.length===0)s.warn(r.yellow("No registered devices found. Profile will only include devices already on the Apple Developer Portal.")),s.info(r.dim(`Register devices with: ${m.nameLower} device register`));else{let{multiselect:b}=await import("@clack/prompts"),k=await b({message:`Select devices to include in the ${t} profile:`,options:w.map(E=>({value:E.udid,label:`${E.name} (${E.udid.substring(0,12)}...)`,hint:E.model||E.platform})),initialValues:w.map(E=>E.udid)});if(!V(k)&&k.length>0){let E=w.filter(D=>k.includes(D.udid));if(s.info(r.blue(`Registering ${E.length} device(s) on Apple Developer Portal...`)),C&&S&&J)await He(E,S,J,C);else{s.info(r.dim("You will be prompted for a 2FA code once \u2014 type it and press Enter."));for(let D of E){let Re=D.name.replace(/"/g,'\\"');L(`fastlane run register_device name:"${Re}" udid:"${D.udid}"`,{shell:!0,env:x,stdio:"inherit",cwd:process.cwd()})}}s.info(r.green("\u2713 Device registration complete."))}}}catch(h){s.warn(r.yellow(`Could not fetch registered devices: ${h.message}`)),s.info(r.dim("Continuing without explicit device registration."))}try{let h=L(`fastlane match ${t} --app_identifier "${e}" --profile_name "${m.nameLower} ${t} ${e}"`,{shell:!0,cwd:process.cwd(),env:x,stdio:"inherit",encoding:"utf-8"});if(h.status!==0){s.warn(r.yellow(`
-Certificate sync failed. Attempting to create App ID and retry...`));try{U(`fastlane produce --app_identifier "${e}" --app_name "${e}" --skip_itc`,{stdio:"inherit",env:x}),s.success(r.green("\u2713 App ID created successfully")),s.info(r.blue("Retrying certificate sync...")),h=L(`fastlane match ${t} --app_identifier "${e}" --profile_name "${m.nameLower} ${t} ${e}"`,{shell:!0,cwd:process.cwd(),env:x,stdio:"inherit",encoding:"utf-8"})}catch{}if(h.status!==0)throw new Error("fastlane match failed")}}catch(h){s.warn(r.yellow(`
-Sync failed. This often happens if the encryption passphrase (MATCH_PASSWORD) is incorrect or session expired.`)),s.info(r.cyan(`Failed MATCH_PASSWORD was: ${l}`));let w=await K({message:"What would you like to do?",options:[{value:"retry_password",label:"Retry with a different MATCH_PASSWORD",hint:"Manually enter the decryption passphrase"},{value:"check_portal",label:"Check Apple Portal (Resolve certificate limits)",hint:"See if you have too many certificates"},{value:"manual",label:"Fallback to manual upload",hint:"Provide .p12 and .mobileprovision files"},{value:"cancel",label:"Cancel",hint:"Go back"}]});if(V(w)||w==="cancel")throw h;if(w==="retry_password"){s.info(r.dim(`
-You are overriding the dashboard passphrase for this session.`));let b=await ie({message:"Enter the correct MATCH_PASSWORD for this project:"});if(b&&!V(b)){l=b,s.info(r.blue("Retrying with provided passphrase...")),s.info(r.cyan(`New MATCH_PASSWORD: ${l}`));let k={...x,MATCH_PASSWORD:l};if(L(`fastlane match ${t}`,{shell:!0,stdio:"inherit",cwd:process.cwd(),env:k}).status===0)await G.post(`/projects/${n}/secrets`,{key:"MATCH_ENCRYPTION_PASSPHRASE",value:l,description:"Encryption passphrase for iOS certificates (fastlane match)",visibility:"secret"}),s.success(r.green("\u2713 Dashboard passphrase updated.")),s.info(r.cyan(`MATCH_PASSWORD: ${l}`));else throw new Error("Sync failed again with provided passphrase.")}else throw h}else if(w==="check_portal")try{let b=await ue(x,t);if(b.length>0){if(s.info(r.dim(`Found ${b.length} existing ${t} certificates on the portal.`)),await Oe(t,x,n,b)&&(s.info(r.blue("Retrying certificate sync...")),L(`fastlane match ${t}`,{shell:!0,stdio:"inherit",cwd:process.cwd(),env:x}).status!==0))throw new Error("Retry failed")}else throw s.error(r.red("No existing certificates found on portal to resolve.")),h}catch(b){throw s.warn(r.dim(`Portal check warning: ${b.message}`)),h}else throw h}s.success(r.green("\u2713 Certificates fetched and synced"));let H=F.join(process.cwd(),"temp_match"),T=F.join(H,`${m.fastlanePrefix}_export.p12`),ee=pe(H,/\.mobileprovision$/);try{let w=`${process.env.HOME||"/Users/"+(process.env.USER||m.nameLower)}/Library/Keychains/${A}`;f.existsSync(H)||f.mkdirSync(H,{recursive:!0}),s.info(r.dim("Exporting certificate from keychain for dashboard upload..."));let b=U(`security find-identity -v -p codesigning "${w}"`,{encoding:"utf-8"});s.info(r.dim(`Identities in keychain:
-${b.trim()}`)),U(`security export -k "${w}" -t identities -f pkcs12 -o "${T}" -P ""`,{stdio:"ignore"});try{let k=U(`openssl pkcs12 -in "${T}" -nokeys -passin pass: -legacy 2>/dev/null || openssl pkcs12 -in "${T}" -nokeys -passin pass: 2>/dev/null`,{encoding:"utf-8"});if(!k.includes(g))throw new Error(`Exported P12 does not contain identity for team ${g}. Found: ${k.substring(0,200)}`);s.success(r.green(`\u2713 P12 verified \u2014 contains correct team identity (${g})`))}catch(k){throw new Error(`P12 verification failed: ${k.message}`)}}catch{s.warn(r.dim("Could not export certificate from keychain."))}a.teamId&&!g&&await he(n,a.teamId);let te=f.existsSync(T)?T:pe(H,/\.p12$/);if(te&&ee){let h,w;try{let b=await ue(x,t);b.length>0&&(h=b[0].expires,w=b[0].id)}catch{s.warn(r.dim("Could not fetch expiration date or ID for dashboard record."))}await M(n,te,"ios_cert",e,o,void 0,h,a.teamId||g,w,q),await M(n,ee,"ios_profile",e,o,void 0,h,a.teamId||g),s.success(r.green("\u2713 Both iOS certificate and provisioning profile uploaded successfully"));try{f.existsSync("./temp_match")&&f.rmSync("./temp_match",{recursive:!0,force:!0})}catch{}}else s.warn(r.yellow("Certificates generated but not found in expected location.")),s.info(r.dim("Falling back to manual upload...")),await Se(n,e,o)}catch(y){p.stop("Certificate fetch failed"),s.error(r.red(`Error: ${y.message}`)),s.info(r.dim("Falling back to manual upload...")),await Se(n,e,o)}}catch(l){p.stop("iOS setup failed"),s.error(r.red(`Error: ${l.message}`))}finally{if(C)try{f.rmSync(F.dirname(C),{recursive:!0,force:!0})}catch{}}}async function he(n,e){try{await G.post(`/projects/${n}/secrets`,{key:"APPLE_TEAM_ID",value:e,description:"Apple Developer Team ID (used for iOS signing)"}),s.success(r.green(`\u2713 Saved Team ID ${e} to Dashboard`))}catch(i){s.warn(r.yellow(`Could not save Team ID to Dashboard: ${i.message}`))}}async function Se(n,e,i){s.info(r.yellow(`
-Manual Upload Mode`)),s.info("Please provide your certificate and provisioning profile:");let o=await $({message:"Path to .p12 certificate file:",validate:c=>f.existsSync(c)?void 0:"File not found"});V(o)&&(Y("Operation cancelled"),process.exit(0));let t=await $({message:"Path to .mobileprovision file:",validate:c=>f.existsSync(c)?void 0:"File not found"});V(t)&&(Y("Operation cancelled"),process.exit(0));let a=j();a.start(`Uploading to ${m.name} Dashboard...`);try{await M(n,o,"ios_cert",e,i),await M(n,t,"ios_profile",e,i),a.stop("Upload complete"),s.success(r.green("\u2713 iOS credentials uploaded successfully"))}catch(c){throw a.stop("Upload failed"),c}}async function Te(n,e,i,o){let t=j();s.step(r.blue("Android Credential Setup"));let a=o.bundleId;if(!a){let l=[];try{let d=(await G.get(`/credentials/${n}`)).data.credentials||[];l=[...new Set(d.filter(g=>g.platform==="android"&&g.bundleId&&g.bundleId!=="*").map(g=>g.bundleId))]}catch{}if(l.length>0){let u=[...l.map(g=>({value:g,label:g})),{value:"__new__",label:"+ Enter a new Package Name"}],d=await K({message:"Which Package Name are you setting up credentials for?",options:u});if(V(d)&&(Y("Operation cancelled"),process.exit(0)),d==="__new__"){let g=await $({message:"Android Package Name (e.g. com.example.app):",placeholder:"com.example.app",validate:A=>A.includes(".")?void 0:"Please enter a valid package name"});V(g)&&(Y("Operation cancelled"),process.exit(0)),a=g}else a=d}else{let u=await $({message:"Android Package Name (e.g. com.example.app):",placeholder:"com.example.app",validate:d=>d.includes(".")?void 0:"Please enter a valid package name"});V(u)&&(Y("Operation cancelled"),process.exit(0)),a=u}}try{let d=((await G.get(`/credentials/${n}`)).data.credentials||[]).find(g=>g.platform==="android"&&g.distributionType===i&&g.bundleId===a);if(d){s.warn(r.yellow(`\u26A0\uFE0F  Existing Android credentials found for ${i}`));let g=await $({message:"What would you like to do? (use/new/cancel)",validate:A=>{let Z=A.toLowerCase();if(!(Z==="use"||Z==="new"||Z==="cancel"))return"Please type: use, new, or cancel"}});if(V(g)||g.toLowerCase()==="cancel")return;if(g.toLowerCase()==="use"){s.success(r.green("\u2713 Using existing credentials."));return}await G.delete(`/credentials/${d.credentialId}?projectId=${n}`)}}catch{}let c="./android/app/my-release-key.jks";if(f.existsSync(c)){let l=await Be({message:"Upload existing keystore?"});if(l&&!V(l)){let u=await $({message:"Key alias:",initialValue:"my-key-alias"});if(V(u))return;let d=await ie({message:"Keystore password:"});if(V(d))return;let g=await ie({message:"Key password (leave blank if same as keystore password):"});if(V(g))return;let A=g.trim()||d;await M(n,c,"android_keystore",a,i,u,void 0,void 0,void 0,void 0,d,A),s.success(r.green("\u2713 Keystore uploaded"));return}}s.info(r.blue("Generating new Android keystore..."));let I=o.keyAlias||`${m.nameLower}-${De()}`,p=We(),C=`./${m.nameLower}-${e}.jks`;f.existsSync(C)&&f.unlinkSync(C),t.start("Generating keystore...");try{let l=p.replace(/'/g,"'\\''");U(`keytool -genkeypair -v -keystore "${C}" -alias "${I}" -keyalg RSA -keysize 2048 -validity 10000 -storepass '${l}' -keypass '${l}' -dname "CN=${m.name} Build, OU=Mobile, O=Company, L=City, S=State, C=US"`,{stdio:"inherit"}),t.stop("Keystore generated"),await M(n,C,"android_keystore",a,i,I,void 0,void 0,void 0,void 0,p,p),s.success(r.green("\u2713 Android credentials uploaded successfully")),s.info(r.cyan(`Key Alias: ${I}`))}catch(l){throw t.stop("Generation failed"),new Error(`Keystore generation failed: ${l.message}`)}}async function M(n,e,i,o,t,a,c,I,p,C,l,u){let d=F.basename(e);s.info(r.dim(`Uploading ${d} (Isolated process)...`));let g=new URL(import.meta.url),A=F.dirname(g.pathname),Z=F.join(A,"commands","isolated-upload.js"),y=L("node",[Z,n,e,i,o,t,a||"undefined",c||"undefined",I||"undefined",p||"undefined",C||"undefined",l||"undefined",u||"undefined"],{stdio:"pipe",encoding:"utf-8",env:{...process.env,AT_CLI_ISOLATED:"1"}});if(y.status!==0){let N=y.stderr||y.stdout||"Unknown isolated upload failure";throw s.error(r.red(`Isolated Upload Failed: ${N}`)),new Error(N)}y.stdout.includes("SUCCESS")?s.info(r.dim(`\u2713 ${d} uploaded and registered.`)):s.warn(r.yellow(`Isolated upload finished but success not confirmed: ${y.stdout}`))}async function Ke(n){let e=j(),i=n.platform,o=`./${m.configFileName}`;if(!f.existsSync(o)){s.error(`No ${m.configFileName} found. Run \`${m.nameLower} init\` or \`${m.nameLower} link\` first.`);return}let t=JSON.parse(f.readFileSync(o,"utf-8")),{projectId:a}=t;if(!a){s.error(`${m.configFileName} is missing projectId.`);return}try{e.start("Fetching project secrets...");let I=(await G.get(`/projects/${a}/secrets/export?env=all`)).data.secrets||{};e.stop("Secrets fetched and merged."),e.start("Fetching credentials...");let C=(await G.get(`/credentials/${a}`)).data.credentials||[];e.stop(`Found ${C.length} metadata records.`);let l=C.filter(A=>A.platform===i);if(l.length===0){s.info(`No ${i} credentials found on Dashboard.`);return}let u="./credentials.json",d={};if(f.existsSync(u))try{d=JSON.parse(f.readFileSync(u,"utf-8"))}catch{s.warn("Could not parse existing credentials.json, creating a new one.")}d[i]||(d[i]={});let g=F.join(process.cwd(),"credentials",i);f.existsSync(g)||f.mkdirSync(g,{recursive:!0});for(let A of l){e.start(`Downloading ${A.type} (${A.distributionType})...`);try{let Z=await G.get(`/credentials/${A.credentialId}/download?projectId=${a}`);if(Z.data.status==="success"&&Z.data.downloadUrl){let y=F.join(process.cwd(),"credentials",i,A.distributionType);f.existsSync(y)||f.mkdirSync(y,{recursive:!0});let N=A.s3Key?.split(".").pop()||(A.type.includes("keystore")?"jks":A.type.includes("cert")?"p12":"mobileprovision"),S=`${A.type}.${N}`,J=F.join(y,S),q=await we.get(Z.data.downloadUrl,{responseType:"arraybuffer"});f.writeFileSync(J,Buffer.from(q.data));let x=F.join("credentials",i,A.distributionType,S);if(i==="android"){if(A.type==="android_keystore"){let H=A.distributionType==="store"?"PRODUCTION":A.distributionType==="internal"?"STAGING":"DEVELOPMENT",T=["PRODUCTION","STORE","INTERNAL","STAGING","DEVELOPMENT","RELEASE","DEBUG"],ee=[`KEYSTORE_PASSWORD_${H}`,`KEYSTORE_PASSWORD_${A.distributionType.toUpperCase()}`,...T.map(b=>`KEYSTORE_PASSWORD_${b}`),"ANDROID_KEYSTONE_PASSWORD","KEYSTORE_PASSWORD"],te=[`KEYSTORE_ALIAS_${H}`,`KEYSTORE_ALIAS_${A.distributionType.toUpperCase()}`,...T.map(b=>`KEYSTORE_ALIAS_${b}`),"KEYSTORE_ALIAS"],h=ee.map(b=>I[b]).find(b=>!!b)||"",w=te.map(b=>I[b]).find(b=>!!b)||A.meta?.alias||"";d.android.keystore={keystorePath:x,keystorePassword:h,keyAlias:w,keyPassword:h}}}else if(i==="ios"){let H=A.distributionType==="store"?"production":A.distributionType==="adhoc"?"staging":"development";d.ios[H]||(d.ios[H]={}),A.type==="ios_cert"?(d.ios[H].certificatePath=x,d.ios[H].certificatePassword=I.IOS_P12_PASSWORD||""):A.type==="ios_profile"&&(d.ios[H].provisioningProfilePath=x)}e.stop(`\u2713 ${A.type} (${A.distributionType}) saved.`)}}catch(Z){let y=Z.response?.data?.message||Z.message;e.stop(r.dim(`- Skipped ${A.type} (${A.distributionType}): ${y}`))}}f.writeFileSync(u,JSON.stringify(d,null,2)),s.success(r.green("\u2713 Local credentials.json updated.")),Ze("Credentials have been synced to your local machine. Ensure credentials.json and credentials/ is added to your .gitignore.","Sync Complete")}catch(c){e.stop(r.red("Sync failed.")),s.error(`Error: ${c.message}`)}}function We(){let n="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_+=",e="";for(let i=0;i<24;i++)e+=n.charAt(Math.floor(Math.random()*n.length));return e}function De(n=8){let e="abcdefghijklmnopqrstuvwxyz0123456789",i="";for(let o=0;o<n;o++)i+=e.charAt(Math.floor(Math.random()*e.length));return i}async function Oe(n,e,i,o){let t=o||await ue(e,n);if(!t||t.length===0)return!1;let a=await K({message:"Select a certificate to revoke:",options:[...t.map(c=>({value:`revoke:${c.id}`,label:`Revoke: ${c.name} (${c.expires})`})),{value:"nuke",label:"Revoke All"},{value:"cancel",label:"Cancel"}]});return V(a)||a==="cancel"?!1:a==="nuke"?(U(`fastlane match nuke ${n}`,{stdio:"inherit",cwd:process.cwd(),env:e}),!0):typeof a=="string"&&a.startsWith("revoke:")?(await Le(e,a.split(":")[1]),!0):!1}async function ue(n,e){let i=e==="development"?"development":"distribution",o=`
-lane :${m.fastlanePrefix}_list_certs do
-  require 'spaceship'
-  require 'json'
-  begin
-    Spaceship::Portal.login(ENV['FASTLANE_USER'])
-    Spaceship::Portal.select_team(team_id: ENV['FASTLANE_TEAM_ID'])
-    output = Spaceship::Portal.certificate.all.select { |c|
-      if "${i}" == "development"
-        c.type_display_id.downcase.include?("development")
-      else
-        c.type_display_id.downcase.include?("distribution") || c.type_display_id.downcase.include?("production")
-      end
-    }.map { |c| { id: c.id, name: c.name, expires: c.expires.strftime('%Y-%m-%d'), type: c.type_display_id } }
-    puts "${m.jsonStartMarker}" + output.to_json + "${m.jsonEndMarker}"
-  rescue => e
-    $stderr.puts "ERROR: #{e.message}"
-    exit 1
-  end
-end`,t=F.join(Ie.tmpdir(),`/tmp/${m.nameLower}-list-certs-${Date.now()}`),a=F.join(t,"fastlane"),c=F.join(a,"Fastfile");try{f.existsSync(a)||f.mkdirSync(a,{recursive:!0}),f.writeFileSync(c,o);let p=U(`fastlane ${m.fastlanePrefix}_list_certs`,{env:{...n,CI:"1",FASTLANE_FASTFILE:c},cwd:t,stdio:["inherit","pipe","inherit"]}).toString().match(new RegExp(`${m.jsonStartMarker}(.*)${m.jsonEndMarker}`));return p?JSON.parse(p[1]):[]}finally{f.existsSync(t)&&f.rmSync(t,{recursive:!0,force:!0})}}async function Le(n,e){let i=`
-lane :${m.fastlanePrefix}_revoke_cert do
-  require 'spaceship'
-  begin
-    Spaceship::Portal.login(ENV['FASTLANE_USER'])
-    Spaceship::Portal.select_team(team_id: ENV['FASTLANE_TEAM_ID'])
-    cert = Spaceship::Portal.certificate.all.find { |c| c.id == "${e}" }
-    cert.revoke! if cert
-  rescue => e
-    $stderr.puts "ERROR: #{e.message}"
-    exit 1
-  end
-end`,o=F.join(Ie.tmpdir(),`/tmp/${m.nameLower}-revoke-cert-${Date.now()}`),t=F.join(o,"fastlane"),a=F.join(t,"Fastfile");try{f.existsSync(t)||f.mkdirSync(t,{recursive:!0}),f.writeFileSync(a,i),U(`fastlane ${m.fastlanePrefix}_revoke_cert`,{env:{...n,CI:"1",FASTLANE_FASTFILE:a},cwd:o,stdio:["inherit","pipe","inherit"]})}finally{f.existsSync(o)&&f.rmSync(o,{recursive:!0,force:!0})}}export{fe as a,be as b,Ue as c,Ke as d};