@radhya/mach 1.7.2 → 1.8.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +30 -7
- package/dist/chunk-NIGYNUTS.js +58 -0
- package/dist/{credentials-5FL2C6KC.js → credentials-UTJERDGT.js} +1 -1
- package/dist/index.js +95 -94
- package/package.json +1 -1
- package/dist/chunk-SR72G3MN.js +0 -58
package/dist/index.js
CHANGED
|
@@ -1,21 +1,21 @@
|
|
|
1
1
|
#!/usr/bin/env node
|
|
2
|
-
import{a as
|
|
3
|
-
`;
|
|
4
|
-
`,
|
|
5
|
-
|
|
6
|
-
CloudFront ID: ${
|
|
7
|
-
CloudFront URL: ${
|
|
8
|
-
${
|
|
9
|
-
`)}`,"Sitemap Summary"),
|
|
2
|
+
import{a as ve,b as Be,c as pi,d as fi,e as Ke,f as mi,h as et}from"./chunk-NIGYNUTS.js";import{a as f,b as di,c as fe,d as ui,e as At,f as Qe,g as $}from"./chunk-YBL2LBMW.js";import{Command as bs,Option as Wn}from"commander";import{configDotenv as Is}from"dotenv";import{intro as ue,outro as Yn}from"@clack/prompts";import ae from"chalk";import{text as gi,confirm as Jn,spinner as qn,isCancel as Ht,cancel as tt,note as Xn,outro as Zn}from"@clack/prompts";import it from"chalk";async function hi(){try{let e=await gi({message:"Enter Bucket Name:",placeholder:"e.g. my-app-dev",validate(o){if(o.length===0)return"Bucket name is required"}});Ht(e)&&(tt("Operation cancelled."),process.exit(0));let t=await gi({message:"Enter Region:",initialValue:"ap-south-1"});Ht(t)&&(tt("Operation cancelled."),process.exit(0));let i=await Jn({message:"Do you want to create a CloudFront Distribution for this bucket?",initialValue:!0});Ht(i)&&(tt("Operation cancelled."),process.exit(0));let n=qn();n.start("Setting up hosting infrastructure...");try{let o=await $.post("/hosting/setup",{bucketName:e,region:t,createCloudFront:i});if(o.data.status!=="success")throw new Error(o.data.message||"Hosting setup failed");n.stop("Hosting setup complete!");let r=o.data,l=`Bucket Name: ${it.cyan(r.bucketName)}
|
|
3
|
+
`;l+=`Region: ${it.cyan(r.region)}
|
|
4
|
+
`,l+=`S3 Website URL: ${it.blue(r.s3WebsiteUrl)}`,r.cloudFrontId&&(l+=`
|
|
5
|
+
|
|
6
|
+
CloudFront ID: ${it.cyan(r.cloudFrontId)}`,l+=`
|
|
7
|
+
CloudFront URL: ${it.blue(r.cloudFrontUrl)}`),Xn(l,"Setup Complete!"),Zn("You are all set!")}catch(o){n.stop("Setup failed"),tt(`Error: ${o.response?.data?.message||o.message}`)}}catch(e){tt(`An unexpected error occurred: ${e.message}`)}}import{readdir as Qn,writeFile as eo,access as to,mkdir as io}from"fs/promises";import{join as yi}from"path";import{spinner as no,text as Si,isCancel as Ei,cancel as Bt,note as oo,outro as ro}from"@clack/prompts";import so from"chalk";async function ao(){let e=["./app","./src/app"];for(let t of e)try{return await to(t),t}catch{}return null}async function Ai(e){try{let i=await ao()||"./app",n=await Si({message:"Enter path to your app directory:",placeholder:i,initialValue:i,validate(d){if(d.length===0)return"Path is required"}});Ei(n)&&(Bt("Operation cancelled."),process.exit(0));let o=await Si({message:"Enter your website base URL:",placeholder:"https://example.com",validate(d){if(d.length===0)return"Base URL is required";if(!d.startsWith("http"))return"URL must start with http:// or https://"}});Ei(o)&&(Bt("Operation cancelled."),process.exit(0));let r=no();r.start("Scanning app directory for routes...");let l=await bi(n);r.stop(`Found ${l.length} routes`);let a=lo(l,o),s=e.output||"./public/sitemap.xml";r.start(`Writing sitemap to ${s}...`);let c=s.substring(0,s.lastIndexOf("/"));if(c)try{await io(c,{recursive:!0})}catch{}await eo(s,a,"utf-8"),r.stop("Sitemap generated successfully!"),oo(`Routes included:
|
|
8
|
+
${l.map(d=>` \u2022 ${d.path}`).join(`
|
|
9
|
+
`)}`,"Sitemap Summary"),ro(`Sitemap saved to ${so.cyan(s)}`)}catch(t){Bt(`An error occurred: ${t.message}`)}}async function bi(e,t=""){let i=[];try{let n=await Qn(e,{withFileTypes:!0});for(let o of n){let r=yi(e,o.name);if(!(o.name.startsWith("_")||o.name.startsWith("."))){if(o.isDirectory()){let l=await bi(r,yi(t,o.name));i.push(...l)}else if(o.isFile()){if(o.name==="index.tsx"||o.name==="index.ts"||o.name==="index.jsx"||o.name==="index.js"){let l=t===""?"/":`/${t}`;i.push({path:l,file:r})}else if(o.name.match(/\.(tsx|ts|jsx|js)$/)&&!o.name.includes("_layout")&&!o.name.includes("+")){let l=o.name.replace(/\.(tsx|ts|jsx|js)$/,""),a=`/${t}/${l}`.replace(/\/+/g,"/");i.push({path:a,file:r})}}}}}catch(n){throw new Error(`Failed to scan directory ${e}: ${n.message}`)}return i}function lo(e,t){let i=new Date().toISOString().split("T")[0];return`<?xml version="1.0" encoding="UTF-8"?>
|
|
10
10
|
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
|
|
11
11
|
${e.map(o=>{let r=o.path;return r=r.replace(/\/\([^)]+\)/g,""),r=r.replace(/\/\[.*?\]/g,"/:id"),r=r.replace(/\/+/g,"/"),r===""&&(r="/"),` <url>
|
|
12
|
-
<loc>${
|
|
12
|
+
<loc>${t}${r}</loc>
|
|
13
13
|
<lastmod>${i}</lastmod>
|
|
14
14
|
<changefreq>weekly</changefreq>
|
|
15
15
|
<priority>0.8</priority>
|
|
16
16
|
</url>`}).join(`
|
|
17
17
|
`)}
|
|
18
|
-
</urlset>`}import{randomUUID as
|
|
18
|
+
</urlset>`}import{randomUUID as xo}from"crypto";import ye from"path";import rt from"axios";import Lo from"os";import{spinner as Vt,confirm as Ui,isCancel as Mi,log as R}from"@clack/prompts";import v from"chalk";import re from"fs";import{execSync as Fi}from"child_process";import Hi from"adm-zip";import{spinner as co,log as bt}from"@clack/prompts";import _i from"chalk";import Pi from"fs";import $i from"path";var Ii=`#!/bin/bash
|
|
19
19
|
# --- Mach Cloud Build Script (Android) ---
|
|
20
20
|
# All S3 operations use presigned URLs via curl \u2014 zero AWS credentials on instance.
|
|
21
21
|
BUILD_ID="{{BUILD_ID}}"
|
|
@@ -483,12 +483,12 @@ for pid in "\${cache_pids[@]}"; do wait "$pid" || true; done
|
|
|
483
483
|
echo "Build orchestrator finished. Auto-terminating instance in 5 seconds..."
|
|
484
484
|
sleep 5
|
|
485
485
|
sudo shutdown -h now
|
|
486
|
-
`;var
|
|
487
|
-
`):"",p;if(o){let
|
|
486
|
+
`;var Di=async(e,t,i={},n,o)=>{let r=co(),l=e.buildProfile||"production",a=l==="production",s=e.apk===!0,c=a?"bundleRelease":"assembleRelease",d=e.buildCommand||(s?"assembleRelease":c),u=e.nodeVersion?[`echo "[NODE] Switching to Node ${e.nodeVersion}..."`,`CURRENT_MAJOR=$(node -e "process.stdout.write(process.version.split('.')[0].replace('v',''))" 2>/dev/null || echo "0")`,`if [ "$CURRENT_MAJOR" != "${e.nodeVersion}" ]; then`,` curl -fsSL https://deb.nodesource.com/setup_${e.nodeVersion}.x | bash - 2>&1`," apt-get install -y nodejs 2>&1",' echo "[NODE] Installed Node $(node -v)"',"else",' echo "[NODE] Already on Node $(node -v) \u2014 no switch needed"',"fi"].join(`
|
|
487
|
+
`):"",p;if(o){let E=$i.isAbsolute(o)?o:$i.resolve(process.cwd(),o);Pi.existsSync(E)?(p=Pi.readFileSync(E,"utf-8"),bt.info(_i.magenta(`\u2713 Loaded preBuild hook: ${o}`))):bt.warn(`preBuild script not found at ${E} \u2014 skipping`)}let g=Ii.replace(/\{\{BUILD_ID\}\}/g,t).replace(/\{\{BUILD_COMMAND\}\}/g,d).replace("{{NODE_VERSION_SETUP}}",u).replace("{{ENV_VARS}}",`
|
|
488
488
|
export MACH_APP_NAME="${e.appName||"App"}"
|
|
489
|
-
export MACH_BUILD_PROFILE="${
|
|
489
|
+
export MACH_BUILD_PROFILE="${l}"
|
|
490
490
|
{{ENV_VARS}}
|
|
491
|
-
`);if(e.dryRun){
|
|
491
|
+
`);if(e.dryRun){bt.info("User Data Script (dry run):"),console.log(g);return}r.start("Requesting cloud build instance...");try{let E=await $.post("/builds/launch-android",{projectId:n,buildId:t,platform:e.platform,buildProfile:e.buildProfile,buildCommand:d,instanceType:e.instanceType,ami:e.ami,keepInstance:e.keepInstance,region:e.region,subnet:e.subnet,securityGroup:e.securityGroup,projectSecrets:i,dryRun:e.dryRun,userDataScript:g,preBuildScriptContent:p});if(E.data.status!=="success")throw new Error(E.data.message||"Failed to launch build instance");let P=E.data.instanceId;return r.stop("Build Started"),bt.success(_i.green(`Build initiated on cloud instance (${P}).`)),{instanceId:P}}catch(E){r.stop("Android Build Failed");let P=E.response?.data?.message||E.message;throw new Error(`Failed to launch Android build: ${P}`)}};import{spinner as uo,log as ze}from"@clack/prompts";import Le from"chalk";import po from"fs";import{execSync as nt}from"child_process";var Ri=`#!/bin/bash
|
|
492
492
|
# --- Mach Cloud Build Script (iOS) ---
|
|
493
493
|
# All S3 operations use presigned URLs via curl \u2014 zero AWS credentials on Mac.
|
|
494
494
|
|
|
@@ -926,112 +926,113 @@ touch done
|
|
|
926
926
|
if [ ! -z "$PRESIGNED_DONE_MARKER" ]; then
|
|
927
927
|
curl -X PUT -T done "$PRESIGNED_DONE_MARKER" --silent
|
|
928
928
|
fi
|
|
929
|
-
`;var
|
|
930
|
-
`:
|
|
931
|
-
`);o.message("Generating macOS build script...");let
|
|
932
|
-
`:"";if(i)for(let[
|
|
933
|
-
`}let
|
|
934
|
-
`),
|
|
935
|
-
`):"",
|
|
936
|
-
${
|
|
937
|
-
${
|
|
938
|
-
${
|
|
939
|
-
`)),o(h.magenta(`[ENVIRONMENT] PATH: ${
|
|
940
|
-
`)),o(h.magenta(`[ENVIRONMENT] command: ${e} ${
|
|
941
|
-
`)));let p=e;if(["node","npm","npx","pod"].includes(e)){let
|
|
942
|
-
`)))}let
|
|
943
|
-
\u{1F6D1} Build cancelled from dashboard. Terminating...`)),
|
|
944
|
-
`)},
|
|
945
|
-
`))}catch(
|
|
946
|
-
`)}if(await
|
|
947
|
-
`),
|
|
948
|
-
`),
|
|
949
|
-
`),
|
|
929
|
+
`;var wi=async(e,t,i={},n)=>{let o=uo();e.sshHost||(e.sshHost="localhost",ze.message(Le.yellow("No SSH host provided, defaulting to localhost."))),o.start(`Connecting to remote Mac at ${Le.cyan(e.sshHost)}...`);let r=e.sshUser||process.env.USER||"ubuntu",l=e.sshKey,a=`${r}@${e.sshHost}`,s=`ssh ${l?`-i ${l}`:""} -o StrictHostKeyChecking=no ${a}`,c=`scp ${l?`-i ${l}`:""} -o StrictHostKeyChecking=no`;try{let d=r==="ubuntu"?"/home/ubuntu":`/Users/${r}`,u=(i.PROJECT_ID||"default_project").replace(/[^a-zA-Z0-9-_]/g,"_"),p=`${d}/${f.remoteWorkspacesDir}/${u}`;o.message(`Preparing stable workspace: ${p}...`),nt(`${s} "mkdir -p ${p}"`,{stdio:"inherit"}),o.message("Transferring source code...");let g=`/tmp/${f.nameLower}-source-${t}.zip`;nt(`${c} ${g} ${a}:${p}/source.zip`,{stdio:"inherit"});let E=e.iosApiKeyPath?`${p}/api_key.p8`:"",P="";e.iosApiKeyPath&&(o.message("Uploading App Store Connect API key..."),nt(`${c} ${e.iosApiKeyPath} ${a}:${E}`),e.iosApiKeyId&&e.iosApiKeyIssuer&&(P=`-authenticationKeyID ${e.iosApiKeyId} -authenticationKeyIssuerID ${e.iosApiKeyIssuer} -authenticationKeyPath ${E}`));let C={};if(n)try{let y=await $.post(`/builds/${n}/${t}/build-urls`,{platform:"ios"});y.data.status==="success"&&(C=y.data.urls)}catch(y){ze.warn(Le.yellow(`Could not fetch build URLs: ${y.message}`))}let B="";if(C.credentials&&C.credentials.length>0)for(let y of C.credentials)y.type==="p12"?B+=`curl -sf -o "$CERT_DIR/${y.name}" "${y.downloadUrl}" || true
|
|
930
|
+
`:y.type==="mobileprovision"&&(B+=`curl -sf -o "$PROV_TEMP/${y.name}" "${y.downloadUrl}" || true
|
|
931
|
+
`);o.message("Generating macOS build script...");let w=process.env.CODEARTIFACT_AUTH_TOKEN?`export CODEARTIFACT_AUTH_TOKEN="${process.env.CODEARTIFACT_AUTH_TOKEN}"
|
|
932
|
+
`:"";if(i)for(let[y,I]of Object.entries(i)){let x=I.replace(/"/g,'\\"').replace(/\$/g,"\\$").replace(/`/g,"\\`");w+=`export ${y}="${x}"
|
|
933
|
+
`}let U=[w,C.logUpload?`export PRESIGNED_LOG_UPLOAD="${C.logUpload}"`:"",C.doneMarker?`export PRESIGNED_DONE_MARKER="${C.doneMarker}"`:"",C.cacheDerivedDataDownload?`export PRESIGNED_CACHE_DD_DOWNLOAD="${C.cacheDerivedDataDownload}"`:"",C.cacheDerivedDataUpload?`export PRESIGNED_CACHE_DD_UPLOAD="${C.cacheDerivedDataUpload}"`:"",C.cacheNodeModulesDownload?`export PRESIGNED_CACHE_NODE_DOWNLOAD="${C.cacheNodeModulesDownload}"`:"",C.cacheNodeModulesUpload?`export PRESIGNED_CACHE_NODE_UPLOAD="${C.cacheNodeModulesUpload}"`:"",C.cachePodsDownload?`export PRESIGNED_CACHE_PODS_DOWNLOAD="${C.cachePodsDownload}"`:"",C.cachePodsUpload?`export PRESIGNED_CACHE_PODS_UPLOAD="${C.cachePodsUpload}"`:"",C.artifactIpaUpload?`export PRESIGNED_ARTIFACT_IPA_UPLOAD="${C.artifactIpaUpload}"`:"",C.artifactAppZipUpload?`export PRESIGNED_ARTIFACT_APP_ZIP_UPLOAD="${C.artifactAppZipUpload}"`:"",`export BUILD_ID="${t}"`,`export ${f.envPrefix}PROJECT_ID="${u}"`,i.MATCH_ENCRYPTION_PASSPHRASE?`export MATCH_PASSWORD="${i.MATCH_ENCRYPTION_PASSPHRASE}"`:"",i.APPLE_TEAM_ID?`export FASTLANE_TEAM_ID="${i.APPLE_TEAM_ID}"`:"",`export MATCH_KEYCHAIN_NAME="${f.credentialsKeychain}"`,`export MATCH_KEYCHAIN_PASSWORD="${f.keychainPassword}"`].filter(Boolean).join(`
|
|
934
|
+
`),b=e.nodeVersion?[`echo "[NODE] Switching to Node ${e.nodeVersion}..."`,'export NVM_DIR="$HOME/.nvm"','[ -s "$NVM_DIR/nvm.sh" ] && . "$NVM_DIR/nvm.sh" --no-use',`nvm install ${e.nodeVersion} 2>/dev/null || true`,`nvm use ${e.nodeVersion} --silent`,`export PATH="$NVM_DIR/versions/node/$(nvm version ${e.nodeVersion})/bin:$PATH"`,'echo "[NODE] Now using: $(node -v) at $(which node)"'].join(`
|
|
935
|
+
`):"",L=Ri,m={"{{REMOTE_DIR}}":p,"{{ENV_VARS}}":U,"{{CREDENTIAL_DOWNLOADS}}":B,"{{IOS_SCHEME}}":e.iosScheme||"","{{IOS_CONFIG}}":e.iosConfiguration||"Release","{{TEAM_ID}}":e.iosTeamId||"","{{AUTH_PARAMS}}":P,"{{IS_SIMULATOR}}":e.simulator?"true":"false","{{BUILD_ID}}":t,"{{EXPORT_METHOD}}":e.iosExportMethod||"ad-hoc","{{NODE_VERSION_SETUP}}":b};Object.entries(m).forEach(([y,I])=>{L=L.split(y).join(I)});let D=`/tmp/${f.nameLower}-mac-build-${t}.sh`;if(po.writeFileSync(D,L),nt(`${c} ${D} ${a}:${p}/build.sh`),o.stop("Remote script uploaded."),ze.info(Le.cyan("Executing remote build. This might take a while...")),nt(`${s} "bash ${p}/build.sh"`,{stdio:"inherit"}),o.stop("Remote build finished!"),n){o.start("Fetching artifact links...");try{let I=(await $.get(`/builds/${n}/${t}/artifacts`)).data.artifacts||[],x=e.simulator===!0;if(I.length===0&&!x)throw o.stop("Build Failed!"),new Error("Build completed but no artifacts were generated. Check build logs for errors.");if(o.stop("Build Successful!"),I.length>0){ze.success("Build Artifacts Ready:");for(let W of I)console.log(`
|
|
936
|
+
${Le.yellow(W.name)}:
|
|
937
|
+
${Le.cyan(W.downloadUrl)}`);console.log(`
|
|
938
|
+
${Le.dim("Note: Links are valid for 7 days.")}`)}else x&&ze.warn("Simulator build completed. No artifacts uploaded.")}catch(y){o.stop("Could not fetch artifacts"),ze.warn(Le.yellow(`Artifact listing failed: ${y.message}`))}}}catch(d){throw o.stop("iOS Build Failed"),d}};import fo from"crypto";import ot from"axios";async function vi(e,t){try{let i=await mo(t),o=(await ot.post(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${e}/edits`,{},{headers:{Authorization:`Bearer ${i}`,Connection:"close"}})).data.id,r=0,a=(await ot.get(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${e}/edits/${o}/tracks`,{headers:{Authorization:`Bearer ${i}`,Connection:"close"}})).data.tracks||[];for(let s of a)if(s.releases){for(let c of s.releases)if(c.versionCodes)for(let d of c.versionCodes){let u=parseInt(d,10);u>r&&(r=u)}}try{let c=(await ot.get(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${e}/edits/${o}/bundles`,{headers:{Authorization:`Bearer ${i}`,Connection:"close"}})).data.bundles||[];for(let d of c)d.versionCode&&d.versionCode>r&&(r=d.versionCode)}catch{}try{let c=(await ot.get(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${e}/edits/${o}/apks`,{headers:{Authorization:`Bearer ${i}`,Connection:"close"}})).data.apks||[];for(let d of c)d.versionCode&&d.versionCode>r&&(r=d.versionCode)}catch{}return r}catch(i){let n=i.response?.data?.error?.message||i.message;throw new Error(`Google Play API Error: ${n}`)}}async function mo(e){let t=Math.floor(Date.now()/1e3),i=t+3600,n={alg:"RS256",typ:"JWT"},o={iss:e.client_email,sub:e.client_email,aud:"https://oauth2.googleapis.com/token",iat:t,exp:i,scope:"https://www.googleapis.com/auth/androidpublisher"},r=Buffer.from(JSON.stringify(n)).toString("base64url"),l=Buffer.from(JSON.stringify(o)).toString("base64url"),a=`${r}.${l}`,s=fo.createSign("RSA-SHA256");s.update(a);let c=s.sign(e.private_key,"base64url"),d=`${a}.${c}`;return(await ot.post("https://oauth2.googleapis.com/token",{grant_type:"urn:ietf:params:oauth:grant-type:jwt-bearer",assertion:d},{headers:{Connection:"close"}})).data.access_token}import{spinner as It,log as A,isCancel as _t,confirm as go,select as jt}from"@clack/prompts";import h from"chalk";import S from"fs";import _ from"path";import{execSync as G,spawn as Ci}from"child_process";import _e from"os";import ho from"crypto";var Ni=(e,t)=>t.filter(i=>S.existsSync(_.join(e,i))).reduce((i,n)=>i.update(S.readFileSync(_.join(e,n))),ho.createHash("sha256")).digest("hex").slice(0,16),yo=e=>Ni(e,["package.json","yarn.lock","package-lock.json","bun.lockb"]),So=e=>Ni(e,["Podfile","Podfile.lock"]),Eo=e=>{let t=_.join(e,"fingerprint.json");try{return JSON.parse(S.readFileSync(t,"utf-8"))}catch{return{}}},Oi=(e,t)=>{S.mkdirSync(e,{recursive:!0}),S.writeFileSync(_.join(e,"fingerprint.json"),JSON.stringify(t,null,2))},Ao=7200*1e3,bo=(e,t)=>{S.mkdirSync(e,{recursive:!0});let i=_.join(e,"build.lock");if(S.existsSync(i))try{let n=JSON.parse(S.readFileSync(i,"utf-8")),o=Date.now()-(n.timestamp||0);if(o<Ao)throw new Error(`Another build is already running for this project (build ${n.buildId}, started ${Math.round(o/6e4)}m ago). Cancel it from the dashboard first, or wait for it to complete.`)}catch(n){if(n.message.includes("Another build"))throw n}S.writeFileSync(i,JSON.stringify({buildId:t,pid:process.pid,timestamp:Date.now()}))},Io=(e,t)=>{let i=_.join(e,"build.lock");try{S.existsSync(i)&&JSON.parse(S.readFileSync(i,"utf-8")).buildId===t&&S.unlinkSync(i)}catch{}},Oe=(e,t,i=process.cwd(),n={},o,r)=>new Promise((l,a)=>{let s=["/opt/homebrew/bin","/usr/local/bin","/usr/bin","/bin","/usr/sbin","/sbin",_.join(_e.homedir(),".npm-global/bin")],d=[...(process.env.PATH||"").split(":"),...s].filter((E,P,C)=>E&&C.indexOf(E)===P).join(":");process.env[`${f.envPrefix}DEBUG`]&&console.log(h.magenta(`[${f.nameUpper}_DEBUG] Execution PATH: ${d}`));let u={...process.env,...n,PATH:d,LANG:"en_US.UTF-8",LC_ALL:"en_US.UTF-8"};o&&process.env[`${f.envPrefix}DEBUG`]&&(o(h.magenta(`[ENVIRONMENT] node: ${process.execPath}
|
|
939
|
+
`)),o(h.magenta(`[ENVIRONMENT] PATH: ${d}
|
|
940
|
+
`)),o(h.magenta(`[ENVIRONMENT] command: ${e} ${t.join(" ")}
|
|
941
|
+
`)));let p=e;if(["node","npm","npx","pod"].includes(e)){let E=_.dirname(process.execPath),P=_.join(E,e);S.existsSync(P)&&(p=P,o&&o(h.dim(`[EXEC] Using absolute path: ${p}
|
|
942
|
+
`)))}let g=Ci(p,t,{stdio:"pipe",cwd:i,shell:!0,env:u,detached:process.platform!=="win32"});if(r){if(r.aborted){if(g.pid)try{process.kill(-g.pid,"SIGTERM")}catch{g.kill()}return a(new Error("Command aborted"))}r.addEventListener("abort",()=>{if(g.pid)try{process.kill(-g.pid,"SIGTERM")}catch{g.kill()}a(new Error("Command aborted"))})}g.stdout.on("data",E=>{let P=E.toString();process.stdout.write(P),o&&o(P)}),g.stderr.on("data",E=>{let P=E.toString();process.stderr.write(P),o&&o(P)}),g.on("close",E=>{E===0?l(E):a(new Error(`Command failed with code ${E}: ${e} ${t.join(" ")}`))}),g.on("error",E=>a(E))}),_o=e=>{let t=Math.floor(e/1e3%60),i=Math.floor(e/(1e3*60)%60),n=Math.floor(e/(1e3*60*60)%24),o=[];return n>0&&o.push(`${n}h`),i>0&&o.push(`${i}m`),(t>0||o.length===0)&&o.push(`${t}s`),o.join(" ")},Ve=(e,t)=>{let i=[];try{if(!S.existsSync(e))return i;let n=S.readdirSync(e);for(let o of n){let r=_.join(e,o);try{let l=S.statSync(r);if(t.some(s=>o.endsWith(s))){i.push(_.resolve(r));continue}l.isDirectory()&&(i=i.concat(Ve(r,t)))}catch{}}}catch{}return i},Gt=async(e,t,i={},n,o={})=>{let r=It(),l=Date.now(),a=e.platform,s=e.buildProfile||"production",c=async(m,D={})=>{if(n)for(let y=1;y<=3;y++)try{await $.patch(`/builds/${n}/${t}`,{status:m,...D});return}catch(I){let x=I?.response?.data?.message||I?.message||String(I);console.error(`[reportStatus] attempt ${y}/3 failed (status=${m}): ${x}`),y<3&&await new Promise(W=>setTimeout(W,2e3))}},d=new AbortController,{signal:u}=d,p=null;n&&(p=setInterval(async()=>{try{(await $.get(`/builds/${n}/${t}`)).data.status==="cancelled"&&(A.warn(h.yellow(`
|
|
943
|
+
\u{1F6D1} Build cancelled from dashboard. Terminating...`)),d.abort(),p&&clearInterval(p))}catch{}},5e3));let g=_.join(process.cwd(),".mach-cache"),E="setup",P="",C=null,B=async()=>{if(!P||!n)return;let m=P;P="";try{let D=m;Object.values(i).forEach(y=>{if(y&&y.length>5){let I=y.replace(/[.*+?^${}()|[\]\\]/g,"\\$&");D=D.replace(new RegExp(I,"g"),"[SECRET]")}}),await $.post(`/builds/${n}/${t}/logs`,{log:D,step:E})}catch{}},w=async()=>{C&&(clearTimeout(C),C=null),await B(),Io(g,t),p&&(clearInterval(p),p=null);try{let m=_.join(_e.tmpdir(),`${f.buildPrefix}-${t}.keychain-db`);S.existsSync(m)&&(G(`security delete-keychain "${m}"`,{stdio:"ignore"}),A.info(h.dim("\u{1F511} Build keychain deleted.")))}catch{}try{let m=_.join(_e.homedir(),"Library/MobileDevice/Provisioning Profiles");if(S.existsSync(m)){let D=S.readdirSync(m).filter(y=>y.includes(t)||y.startsWith(`${f.nameLower}-temp-${t}`));for(let y of D)S.unlinkSync(_.join(m,y))}}catch{}},U=async m=>{n&&(P+=m,P.length>=8192?(C&&(clearTimeout(C),C=null),await B()):C||(C=setTimeout(()=>{C=null,B()},2e3)))},b=async m=>{E=m,await U(`[STEP_START:${m}] ${Math.floor(Date.now()/1e3)}
|
|
944
|
+
`)},L=async(m,D,y,I)=>await Oe(m,D,y,I,x=>{U(x)},u);A.info(h.blue(`\u{1F680} Starting local build for ${a} (${s})...`));try{bo(g,t)}catch(m){throw await c("failed",{error:m.message}),m}if(await c("building"),await b("setup"),n&&a==="ios"&&!e.simulator)try{let m=parseInt(i.BUILD_NUMBER||"0",10),D=await $.post(`/projects/${n}/next-build-number`,{platform:"ios",startFrom:m});D.data.status==="success"&&(i.BUILD_NUMBER=String(D.data.buildNumber),A.info(h.dim(`Auto build number: ${i.BUILD_NUMBER}`)),await U(`[BUILD_NUMBER] ${i.BUILD_NUMBER}
|
|
945
|
+
`))}catch(m){A.warn(h.yellow(`Could not fetch auto build number: ${m.message}`))}await b("lock"),e.developmentClient?(A.info(h.blue("\u2139\uFE0F Configuring build to INCLUDE expo-dev-client (Development Client mode)...")),delete process.env.EXPO_NO_DEV_CLIENT,delete process.env.EXPO_AUTOLINKING_EXCLUDE):(A.info(h.blue("\u2139\uFE0F Configuring build to EXCLUDE expo-dev-client (Production/Staging mode)...")),process.env.EXPO_NO_DEV_CLIENT="1",process.env.EXPO_AUTOLINKING_EXCLUDE="expo-dev-client");try{await b("clone"),A.info(h.dim("Preparing source...")),await b("read_config");let m=_.join(process.cwd(),f.configFileName);if(S.existsSync(m)){let k=JSON.parse(S.readFileSync(m,"utf-8"))?.build?.[s]||{};await U(`[CONFIG] Profile: ${s}, distribution: ${k.distribution||"not set"}, simulator: ${k.simulator||!1}
|
|
946
|
+
`)}if(await b("read_package"),e.nodeVersion){let T=process.env.NVM_DIR||_.join(_e.homedir(),".nvm"),k=_.join(T,"versions","node"),V;if(S.existsSync(k)){let N=S.readdirSync(k).sort().reverse(),oe=e.nodeVersion.startsWith("v")?e.nodeVersion:`v${e.nodeVersion}`,J=N.find(X=>X===oe||X.startsWith(oe+".")||X.startsWith(`v${e.nodeVersion}.`));J&&(V=_.join(k,J,"bin"))}if(V&&S.existsSync(V)){let N=process.env.PATH||"";process.env.PATH=`${V}:${N}`,await U(`[NODE] Switched to Node ${e.nodeVersion} \u2014 using ${V}
|
|
947
|
+
`),A.info(h.green(`\u2713 Node switched to ${e.nodeVersion} (${V})`))}else await U(`[NODE] Warning: Node ${e.nodeVersion} not found in nvm. Run: nvm install ${e.nodeVersion} on the build machine.
|
|
948
|
+
`),A.warn(h.yellow(`Node ${e.nodeVersion} not found in nvm \u2014 using system default`))}await b("deps"),r.start("Checking dependencies...");let D=Eo(g),y=yo(process.cwd()),I=S.existsSync("node_modules"),x=S.existsSync("yarn.lock"),W=S.existsSync("bun.lockb");I&&D.node&&D.node!==y&&(r.stop("Dependency fingerprint changed \u2014 clearing node_modules for clean install..."),await U(`[CACHE] package.json/lockfile changed \u2014 wiping node_modules
|
|
949
|
+
`),S.rmSync(_.join(process.cwd(),"node_modules"),{recursive:!0,force:!0}),I=!1);let j="npm",O=["install","--prefer-offline"];x?(j="yarn",O=["install","--prefer-offline"]):W&&(j="bun",O=["install"]),I?r.stop("Cached node_modules found. Syncing dependencies..."):r.stop("No cached dependencies. Running fresh install..."),e.preBuild&&(A.info(h.blue("Running pre-install hook...")),A.info(h.dim(`> ${e.preBuild}`)),await b("prebuild"),await L("bash",[e.preBuild],process.cwd(),i)),A.info(h.dim(`Running ${j} ${O.join(" ")}...`)),await L(j,O,process.cwd(),i),D.node=y,Oi(g,D);let F=JSON.parse(S.readFileSync("package.json","utf-8")),M=F.dependencies?.expo||F.devDependencies?.expo,K=e.iosBundleIdentifier||"",H=e.name||"";if(M){r.start(`Enforcing ${f.name} configuration...`);let T=_.join(process.cwd(),"app.json"),k=null;if(S.existsSync(T)){k=S.readFileSync(T,"utf-8");let N=JSON.parse(k);N.expo=N.expo||{},H||(H=N.expo.name||""),a==="ios"&&!K&&(K=N.expo?.ios?.bundleIdentifier||""),e.name&&(N.expo.name=e.name),e.scheme&&(N.expo.scheme=e.scheme),a==="ios"&&e.iosBundleIdentifier?(N.expo.ios=N.expo.ios||{},N.expo.ios.bundleIdentifier=e.iosBundleIdentifier):a==="android"&&e.androidPackage&&(N.expo.android=N.expo.android||{},N.expo.android.package=e.androidPackage),S.writeFileSync(T,JSON.stringify(N,null,2))}let V=["exec","--","expo","prebuild","--platform",a,"--no-install"];try{if(await b("prebuild"),await L("npm",V,process.cwd(),i),a==="ios"&&S.existsSync("ios")){await b("pods"),A.info(h.blue("Running pod install..."));try{let N=_.resolve("ios"),oe=_.join(N,"Podfile");if(!S.existsSync(oe))throw new Error("ios/Podfile not found. Skipping pod install.");let J=S.readFileSync(oe,"utf-8"),X=e.iosDeploymentTarget||"13.4";if(!e.developmentClient&&(A.info(h.blue("\u2139\uFE0F Patching Podfile to EXCLUDE expo-dev-client...")),J.includes("use_expo_modules!")&&!J.includes("exclude:"))){let de=/use_expo_modules!(\s*)$/m;de.test(J)?J=J.replace(de,'use_expo_modules!(exclude: ["expo-dev-client"])$1'):J=J.replace("use_expo_modules!",'use_expo_modules!(exclude: ["expo-dev-client"])')}let le=`
|
|
950
950
|
installer.generated_projects.each do |project|
|
|
951
951
|
project.targets.each do |target|
|
|
952
952
|
target.build_configurations.each do |config|
|
|
953
|
-
config.build_settings['IPHONEOS_DEPLOYMENT_TARGET'] = '${
|
|
953
|
+
config.build_settings['IPHONEOS_DEPLOYMENT_TARGET'] = '${X}'
|
|
954
954
|
end
|
|
955
955
|
end
|
|
956
956
|
end
|
|
957
957
|
installer.pods_project.targets.each do |target|
|
|
958
958
|
target.build_configurations.each do |config|
|
|
959
|
-
config.build_settings['IPHONEOS_DEPLOYMENT_TARGET'] = '${
|
|
959
|
+
config.build_settings['IPHONEOS_DEPLOYMENT_TARGET'] = '${X}'
|
|
960
960
|
end
|
|
961
961
|
end
|
|
962
|
-
`,Ie=/post_install\s+do\s+\|installer\|/;if(Ie.test(
|
|
963
|
-
${
|
|
962
|
+
`,Ie=/post_install\s+do\s+\|installer\|/;if(Ie.test(J))A.info(h.dim(`Injecting deployment target (${X}) into existing post_install hook...`)),J=J.replace(Ie,`post_install do |installer|
|
|
963
|
+
${le}`),S.writeFileSync(oe,J);else{A.info(h.dim(`Appending new post_install hook for deployment target (${X})...`));let de=`
|
|
964
964
|
post_install do |installer|
|
|
965
|
-
${
|
|
965
|
+
${le}
|
|
966
966
|
end
|
|
967
|
-
`;
|
|
968
|
-
`),
|
|
969
|
-
\u2713 Local build completed successfully in ${
|
|
970
|
-
\u{1F4E6} Generated Artifacts:`)),z.forEach(
|
|
971
|
-
\u274C Build aborted.`)),await
|
|
972
|
-
\u2717 Local build failed: ${
|
|
973
|
-
`)[0]||"unknown"}`))}if(!
|
|
974
|
-
`).map(ce=>ce.trim().replace(/^"|"$/g,"")).filter(ce=>ce.length>0),
|
|
967
|
+
`;S.appendFileSync(oe,de)}let Ze="/opt/homebrew/bin/pod",Ft=S.existsSync(Ze)?Ze:"pod",Ge=So(N);S.existsSync(_.join(N,"Pods"))&&D.pods&&D.pods!==Ge&&(await U(`[CACHE] Podfile/Podfile.lock changed \u2014 wiping ios/Pods
|
|
968
|
+
`),A.info(h.dim("Podfile fingerprint changed \u2014 clearing Pods for clean install...")),S.rmSync(_.join(N,"Pods"),{recursive:!0,force:!0})),A.info(h.dim(`Using pod command: ${Ft} in ${N}`)),await L(Ft,["install"],N,i),D.pods=Ge,Oi(g,D)}catch(N){let oe=N.message||"Unknown error";A.warn(h.yellow(`Native "pod" command failed: ${oe}`)),A.info(h.dim("Falling back to npm exec pod-install...")),A.info(h.magenta(`${f.nameUpper}_DEBUG: Executing pod-install override via npx --yes pod-install@latest`)),await L("npx",["--yes","pod-install@latest","ios"],process.cwd(),i)}if(S.existsSync("ios/Pods")){A.info(h.dim("Disabling signing for Pod targets to prevent conflicts..."));try{G(`find ios/Pods -name "project.pbxproj" -exec sed -i '' 's/buildSettings = {/buildSettings = { CODE_SIGNING_ALLOWED = NO; CODE_SIGNING_REQUIRED = NO; PROVISIONING_PROFILE_SPECIFIER = ""; EXPANDED_CODE_SIGN_IDENTITY = "";/g' {} +`,{stdio:"ignore"})}catch{}}}}finally{k&&S.writeFileSync(T,k)}r.stop(`Expo prebuild complete (${f.name} config enforced).`)}let z=[];if(a==="android")await b("build"),z=await Po(e,s,i,T=>U(T),u);else if(a==="ios"){await b("signing"),A.info(h.dim("Preparing credentials..."));let T=o?.distributionType;z=await $o(e,t,s,i,n,k=>U(k),u,T,k=>b(k))}e.postBuild&&(A.info(h.blue("Running post-build hook...")),A.info(h.dim(`> ${e.postBuild}`)),await L(e.postBuild,[],process.cwd(),i));let ne=_o(Date.now()-l);if(A.success(h.green(`
|
|
969
|
+
\u2713 Local build completed successfully in ${ne}`)),await c("building",{...K&&{bundleId:K},...H&&{appName:H}}),z.length>0&&(A.info(h.cyan(`
|
|
970
|
+
\u{1F4E6} Generated Artifacts:`)),z.forEach(T=>{let k=_.resolve(T);A.info(h.dim(` - ${T}`)),A.info(h.gray(` Path: ${k}`))}),e.interactive)){let T=await go({message:"Install on connected device?"});if(!_t(T)&&T){if(a==="android"){let k=z.find(V=>V.endsWith(".apk"))||z[0];await Ro(k,V=>U(V))}else if(a==="ios"){let k=z.find(N=>N.endsWith(".ipa"))||z.find(N=>N.endsWith(".app"))||z[0],V=Te("ios");e.simulator?await wo(k,V||"",N=>U(N)):await vo(k,V||"",N=>U(N))}}}await b("upload");let he=[];for(let T of z)try{let k=_.join(_e.tmpdir(),`${t}-${_.basename(T)}`);S.copyFileSync(T,k),he.push(k),A.info(h.dim(` \u{1F4CB} Preserved artifact: ${_.basename(T)}`))}catch{A.warn(h.yellow(` Failed to preserve artifact: ${_.basename(T)}`))}z=he,A.info(h.dim("\u{1F9F9} Cleaning workspace (preserving dependency cache)..."));try{let T=process.cwd(),k=new Set(["node_modules"]),V=S.readdirSync(T),N=0;for(let oe of V)if(!k.has(oe)){if(oe==="ios"){let J=_.join(T,"ios"),X=S.readdirSync(J);for(let le of X)if(le!=="Pods")try{S.rmSync(_.join(J,le),{recursive:!0,force:!0}),N++}catch{}continue}try{S.rmSync(_.join(T,oe),{recursive:!0,force:!0}),N++}catch{}}A.info(h.dim(` Cleaned ${N} items. Cached: node_modules${S.existsSync(_.join(T,"ios","Pods"))?", ios/Pods":""}`)),A.info(h.green("\u{1F512} Security: No source code retained on build server. Only public dependencies cached."))}catch{A.warn(h.yellow("Post-build cleanup encountered errors (non-fatal)."))}try{let k=_.join(_e.homedir(),f.workspacesDir),V=G(`df -k "${k}" | tail -1 | awk '{print $4}'`,{encoding:"utf8"}).trim(),N=parseInt(V,10)*1024;if(N<53687091200&&S.existsSync(k)){A.info(h.dim(` \u26A0\uFE0F Low disk space (${(N/1024/1024/1024).toFixed(0)} GB free). Running cache eviction...`));let oe=_.basename(process.cwd()),J=S.readdirSync(k).filter(X=>X!==oe).map(X=>{let le=_.join(k,X);try{let Ie=S.statSync(le);return Ie.isDirectory()?{name:X,dir:le,mtime:Ie.mtimeMs}:null}catch{return null}}).filter(Boolean);J.sort((X,le)=>X.mtime-le.mtime);for(let X of J){if(N>=53687091200)break;try{S.rmSync(X.dir,{recursive:!0,force:!0}),A.info(h.dim(` \u{1F5D1}\uFE0F Evicted stale workspace: ${X.name}`));let le=G(`df -k "${k}" | tail -1 | awk '{print $4}'`,{encoding:"utf8"}).trim();if(parseInt(le,10)*1024>=53687091200)break}catch{}}}}catch{}return await w(),z}catch(m){throw await w(),m.message==="Command aborted"?(A.warn(h.yellow(`
|
|
971
|
+
\u274C Build aborted.`)),await c("failed",{error:"Aborted by user"}),m):(A.error(h.red(`
|
|
972
|
+
\u2717 Local build failed: ${m.message}`)),await c("failed",{error:m.message}),m)}},Po=async(e,t,i={},n,o)=>{let r=S.existsSync("android/gradlew")?"android/gradlew":S.existsSync("gradlew")?"./gradlew":null;if(!r)throw new Error("Could not find gradlew. Is this an Android project?");let l="assembleRelease";e.distribution==="store"?l="bundleRelease":e.distribution==="internal"&&(l="assembleRelease");let a=e.buildCommand||l;A.info(h.blue(`Running Android build: ${a}...`));let s=r.includes("android/")?"android":".",c=(r.includes("android/"),"./gradlew"),d=[a];if(i.ANDROID_VERSION_CODE){let p=_.join(s,"app/build.gradle");if(S.existsSync(p)){let g=i.ANDROID_VERSION_CODE,E=S.readFileSync(p,"utf-8");E=E.replace(/versionCode\s+\d+/,`versionCode ${g}`),S.writeFileSync(p,E),A.info(h.green(`\u2713 Applied Android versionCode ${g}`))}d.push(`-Pandroid.injected.version.code=${i.ANDROID_VERSION_CODE}`)}await Oe(c,d,s,i,n,o);let u=_.join(s,"app/build/outputs");return Ve(u,[".apk",".aab"])},$o=async(e,t,i,n={},o,r,l,a,s)=>{if(process.platform!=="darwin")throw new Error("iOS builds can only be run on macOS.");let c=_.resolve(process.cwd(),S.existsSync("ios")?"ios":"."),d=S.readdirSync(c),u=d.find(w=>w.endsWith(".xcworkspace")),p=d.find(w=>w.endsWith(".xcodeproj"));if(!u&&!p)throw new Error("Could not find Xcode workspace or project in ios/ directory.");try{let w=G("xcode-select -p").toString().trim();A.info(h.dim(`Using Xcode at: ${w}`))}catch{A.warn(h.dim("Could not detect Xcode path."))}A.info(h.blue("Running iOS build via xcodebuild..."));let g=u?u.replace(".xcworkspace",""):p?.replace(".xcodeproj",""),E=e.iosScheme||g||e.scheme,P=e.developmentClient?"Debug":e.iosConfiguration||"Release",C=(o||"default").replace(/[^a-zA-Z0-9-_]/g,"_"),B=_.join(_e.homedir(),`Library/Developer/Xcode/DerivedData/${f.nameLower}`,C);if(S.mkdirSync(B,{recursive:!0}),e.simulator){A.info(h.dim(`Building for simulator (Scheme: ${E}, Config: ${P})...`)),await Oe("xcodebuild",[u?"-workspace":"-project",u||p,"-scheme",E,"-configuration",P,"-sdk","iphonesimulator","-derivedDataPath",B,"CODE_SIGNING_ALLOWED=NO","CODE_SIGNING_REQUIRED=NO"],c,n,r,l);let w=_.join(B,"Build/Products",`${P}-iphonesimulator`),U=Ve(w,[".app"]);if(U.length>0){let b=U[0],L=_.basename(b,".app"),m=_.join(w,`${L}_simulator.zip`);return A.info(h.dim(`Creating simulator artifact: ${m}...`)),G(`cd "${w}" && zip -r "${m}" "${_.basename(b)}"`),[m]}return[]}else{A.info(h.dim(`Archiving (Scheme: ${E}, Config: ${P})...`));let w=_.join(c,"build.xcarchive"),U=_.join(c,"export"),b=n.IOS_DIST_P12,L=n.IOS_PROVISIONING_PROFILE,m=n.IOS_P12_PASSWORD||"",D=[],y,I,x={isAppStore:!1,isDevelopment:!1};if(b&&L){A.info(h.blue("\u{1F510} CI/CD Signing: Importing certificates..."));try{let H=`${f.buildPrefix}-${t}.keychain-db`,z=_.join(_e.tmpdir(),H),ne=f.keychainPassword;G(`security create-keychain -p "${ne}" "${z}" 2>/dev/null || true`),G(`security set-keychain-settings -t 3600 -l "${z}"`),G(`security unlock-keychain -p "${ne}" "${z}"`);let he=_.join(_e.tmpdir(),`cert-${t}.p12`),T=Buffer.from(b,"base64");S.writeFileSync(he,T),A.info(h.dim(`P12 data size: ${T.length} bytes, first bytes: ${T.slice(0,4).toString("hex")}`)),(T.length<100||T[0]!==48)&&(A.warn(h.yellow("\u26A0\uFE0F P12 data looks corrupted or was not decrypted correctly.")),A.warn(h.yellow(" This usually means MACH_ENCRYPTION_KEY on the Remote API differs from when credentials were uploaded.")));let k=[m,"",f.keychainPassword],V=!1;for(let ce of k)try{G(`security import "${he}" -k "${z}" -P "${ce}" -A -T /usr/bin/codesign -T /usr/bin/security`,{stdio:"pipe"}),V=!0,A.info(h.dim(`\u2713 P12 imported successfully with password: ${ce?"[set]":"[empty]"}`));break}catch(de){A.info(h.dim(` P12 import attempt with password ${ce?`"${ce.substring(0,3)}..."`:"[empty]"} failed: ${de.message?.split(`
|
|
973
|
+
`)[0]||"unknown"}`))}if(!V)throw new Error("Failed to import P12.");S.unlinkSync(he),G(`security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k "${ne}" "${z}"`);let N=G("security list-keychains -d user",{encoding:"utf-8"}).split(`
|
|
974
|
+
`).map(ce=>ce.trim().replace(/^"|"$/g,"")).filter(ce=>ce.length>0),oe=[z,...N].map(ce=>`"${ce}"`).join(" ");G(`security list-keychains -d user -s ${oe}`),G(`security default-keychain -s "${z}"`);let J=_.join(_e.homedir(),"Library/MobileDevice/Provisioning Profiles");S.mkdirSync(J,{recursive:!0});let X=Buffer.from(L,"base64"),le=_.join(J,`${f.nameLower}-temp-${t}.mobileprovision`);S.writeFileSync(le,X);let Ie=X.toString("utf-8"),Ze=/<key>get-task-allow<\/key>\s*<true\/>/.test(Ie);x={isAppStore:!Ie.includes("<key>ProvisionedDevices</key>")&&!Ze,isDevelopment:Ze};try{let de=G(`security cms -D -i "${le}"`,{encoding:"utf-8"}).match(/<key>UUID<\/key>\s*<string>([^<]+)<\/string>/);I=de?de[1]:void 0}catch{let de=Ie.match(/<key>UUID<\/key>\s*<string>([^<]+)<\/string>/);I=de?de[1]:void 0}I||(A.warn("Could not extract UUID from provisioning profile. Using fallback."),I=`${f.nameLower}-${t}`);let Ge=_.join(J,`${I}.mobileprovision`);S.existsSync(Ge)&&S.unlinkSync(Ge),S.renameSync(le,Ge);try{let de=G(`security find-identity -v -p codesigning "${z}"`,{encoding:"utf-8"}).match(/"((?:Apple|iPhone) (?:Distribution|Developer|Development)[^"]*)"/);de&&(y=de[1],A.info(h.blue(`Identity auto-detected from keychain: "${y}"`)))}catch{}y||(y=x.isDevelopment?"Apple Development":"Apple Distribution",A.info(h.blue(`Identity fallback (profile heuristic): "${y}"`))),A.info(h.dim(`Profile type: ${x.isDevelopment?"Development":x.isAppStore?"App Store":"Ad-Hoc"}`)),A.info(h.dim(`Identity Detection: get-task-allow=${x.isDevelopment}, Selected Identity="${y}"`)),D.push("CODE_SIGN_STYLE=Manual"),D.push(`CODE_SIGN_IDENTITY="${y}"`),D.push(`PROVISIONING_PROFILE_SPECIFIER=${I}`),e.iosTeamId&&D.push(`DEVELOPMENT_TEAM=${e.iosTeamId}`)}catch(H){throw A.error(`Signing setup failed: ${H.message}`),H}}else D.push("-allowProvisioningUpdates"),e.iosTeamId&&D.push(`DEVELOPMENT_TEAM=${e.iosTeamId}`);s&&await s("archive"),A.info(h.blue(`Archive detected Identity: "${y}"`)),A.info(h.blue(`Archive detected UUID: "${I}"`)),await Oe("xcodebuild",["archive",u?"-workspace":"-project",u||p,"-scheme",E,"-configuration",P,"-archivePath",w,"-derivedDataPath",B,...D],c,n,r,l);let W;I?(x.isAppStore?W="app-store":x.isDevelopment?W="development":W="ad-hoc",A.info(h.blue(`Export method from profile: "${W}"`))):(W=e.distribution==="store"?"app-store":e.distribution==="internal"?"ad-hoc":"development",A.warn(h.yellow(`No profile UUID detected. Export method from distribution flag: "${W}"`)));let j=e.iosExportMethod||W,O=Te("ios"),F=_.join(c,"ExportOptions.plist"),M=`<?xml version="1.0" encoding="UTF-8"?>
|
|
975
975
|
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
|
|
976
976
|
<plist version="1.0">
|
|
977
977
|
<dict>
|
|
978
978
|
<key>method</key>
|
|
979
|
-
<string>${
|
|
979
|
+
<string>${j}</string>
|
|
980
980
|
<key>destination</key>
|
|
981
981
|
<string>export</string>
|
|
982
982
|
<key>signingStyle</key>
|
|
983
|
-
<string>${
|
|
983
|
+
<string>${I?"manual":"automatic"}</string>
|
|
984
984
|
<key>thinning</key>
|
|
985
985
|
<string><none></string>
|
|
986
986
|
${e.iosTeamId?`<key>teamID</key><string>${e.iosTeamId}</string>`:""}
|
|
987
|
-
${
|
|
987
|
+
${O&&I?`
|
|
988
988
|
<key>provisioningProfiles</key>
|
|
989
989
|
<dict>
|
|
990
|
-
<key>${
|
|
991
|
-
<string>${
|
|
990
|
+
<key>${O}</key>
|
|
991
|
+
<string>${I}</string>
|
|
992
992
|
</dict>`:""}
|
|
993
993
|
</dict>
|
|
994
|
-
</plist>`;if(
|
|
995
|
-
${
|
|
994
|
+
</plist>`;if(S.writeFileSync(F,M),process.env[`${f.envPrefix}DEBUG`]&&A.info(h.magenta(`[${f.nameUpper}_DEBUG] ExportOptions.plist:
|
|
995
|
+
${M}`)),s&&await s("export"),A.info(h.blue(`Exporting with Bundle ID: "${O}"`)),A.info(h.blue(`Exporting with Method: "${j}"`)),r){r(h.magenta(`
|
|
996
996
|
[DIAGNOSTIC] Checking available signing identities...
|
|
997
|
-
`));try{let
|
|
998
|
-
`))}catch(
|
|
999
|
-
`))}}await
|
|
1000
|
-
`)}catch{let
|
|
1001
|
-
`),new Error(
|
|
1002
|
-
`).slice(1).map(
|
|
1003
|
-
`).filter(s=>s.trim().length>0)}catch{}if(a.length>0){let s=await
|
|
1004
|
-
`).find(s=>s.includes("android.intent.action.MAIN")&&s.includes("android.intent.category.LAUNCHER"))?G(`adb shell monkey -p ${r} -c android.intent.category.LAUNCHER 1`,{stdio:"ignore"}):G(`adb shell monkey -p ${r} -c android.intent.category.LAUNCHER 1`,{stdio:"ignore"})}catch{E.warn("Could not auto-launch app. You may need to open it manually.")}}}catch(t){i.stop("Installation failed."),E.error(h.red(`Failed to install APK: ${t.message}`))}},So=async(e,n,i)=>{let t=Et();try{if(!G("xcrun simctl list devices booted").toString().includes("(Booted)")){E.warn(h.yellow("No iOS Simulator is currently booted."));let r=G("xcrun simctl list devices --json").toString(),c=JSON.parse(r).devices,a=[];Object.keys(c).forEach(u=>{c[u].forEach(p=>{p.isAvailable&&a.push({...p,runtime:u})})});let s=await Bt({message:"Select a simulator to launch:",options:a.map(u=>({value:u.udid,label:`${u.name} (${u.runtime.split(".").pop()})`}))});if(At(s))return;t.start(`Booting ${s}...`),G(`xcrun simctl boot ${s}`),G(`open -a Simulator --args -CurrentDeviceUDID ${s}`);let d=0,l=!1;for(;d<30;){try{if(G("xcrun simctl list devices booted").toString().includes(s)){l=!0;break}}catch{}await new Promise(u=>setTimeout(u,2e3)),d++}if(!l)throw t.stop("Simulator boot timed out."),new Error("Simulator boot timed out.");t.stop("Simulator booted.")}t.start("Installing on iOS Simulator..."),await we("xcrun",["simctl","install","booted",e],process.cwd(),{},i),t.stop("Installation complete."),E.info(h.blue(`\u{1F680} Launching ${n}...`)),await we("xcrun",["simctl","launch","booted",n],process.cwd(),{},i)}catch(o){t.stop("Installation failed."),E.error(h.red(`Failed to install on Simulator: ${o.message}`))}},Eo=async(e,n,i)=>{let t=Et();t.start("Scanning for connected iOS devices...");try{let o=G("xcrun devicectl list devices --json-output -").toString(),c=(JSON.parse(o).result?.devices||[]).filter(s=>s.connectionProperties?.transportType==="wired"||s.connectionProperties?.transportType==="localNetwork");if(c.length===0)throw t.stop("No connected iOS devices found."),new Error("Please connect your iPhone via USB or ensure it is on the same Wi-Fi for wireless debugging.");let a=c[0].identifier;if(c.length>1){t.stop();let s=await Bt({message:"Select a device to install on:",options:c.map(d=>({value:d.identifier,label:`${d.deviceProperties?.name||d.name||d.model?.name} (${d.model?.name||"iPhone"}) - ${d.identifier}`}))});if(At(s))return;a=s,t.start(`Installing on ${a}...`)}else t.message(`Installing on ${c[0].model.name}...`);await we("xcrun",["devicectl","device","install","app","--device",a,e],process.cwd(),{},i),t.stop("Installation complete."),E.info(h.blue(`\u{1F680} Launching ${n}...`)),await we("xcrun",["devicectl","device","launch","app","--device",a,n],process.cwd(),{},i)}catch(o){t.stop("Installation failed."),E.error(h.red(`Failed to install on device: ${o.message}`)),E.info(h.dim('Make sure your device is unlocked and "Developer Mode" is enabled in Settings -> Privacy & Security.'))}};import It from"fs";function xe(e){if(e){if(!It.existsSync(e))return null;try{return JSON.parse(It.readFileSync(e,"utf-8"))}catch{return null}}if(!It.existsSync(`./${f.configFileName}`))return null;try{return JSON.parse(It.readFileSync(`./${f.configFileName}`,"utf-8"))}catch{return null}}function He(e,n,i=new Set){if(i.has(n))throw new Error(`Circular inheritance detected in profile: ${n}`);i.add(n);let t=e.build?.[n];if(!t)return null;let o={...t};if(t.extends){let r=He(e,t.extends,i);r&&(o={...r,...t,env:{...r.env,...t.env},ios:{...r.ios,...t.ios},android:{...r.android,...t.android}})}if(o.envGroups&&Array.isArray(o.envGroups)){let r={};for(let c of o.envGroups){let a=e.envGroups?.[c];a?Object.assign(r,a):log.warn(`Environment group not found: ${c}`)}o.env={...r,...o.env}}return o}var ze=(e,n=`${f.envPrefix}`)=>{let i={},t=(o,r)=>{if(o)for(let c in o){let a=o[c],s=`${r}${c.toUpperCase().replace(/[^A-Z0-9]/g,"_")}`;a!==null&&typeof a=="object"&&!Array.isArray(a)?t(a,`${s}_`):i[s]=String(a)}};return t(e,n),i};var bt=async e=>{e.platform!=="android"&&e.platform!=="ios"&&(R.error(`Platform ${e.platform} is not supported. Use 'android' or 'ios'.`),process.exit(1));let n=jt(),i=e.buildId||Ao(),t=e.projectId,o=Date.now(),r=!!t,c=async a=>{if(t)try{await D.patch(`/builds/${t}/${i}`,{status:"failed",error:a})}catch{}};if(e.local&&e.buildId){e.quiet||n.start(`Preparing isolated workspace for build: ${e.buildId}`);try{let a=await D.get(`/builds/${t}/${e.buildId}/source-url`);if(a.data.status!=="success")throw new Error("Failed to get source download URL from API");let s=await it.get(a.data.downloadUrl,{responseType:"stream"}),d=(t||e.projectId||"default").replace(/[^a-zA-Z0-9-_]/g,"_"),l=he.join(Io.homedir(),f.workspacesDir,d);oe.mkdirSync(l,{recursive:!0});let u=new Set(["node_modules",`.${f.nameLower}-cache-meta`]),p=new Set(["Pods"]);if(oe.existsSync(l)){let O=oe.readdirSync(l);for(let k of O){if(u.has(k))continue;if(k==="ios"){let I=he.join(l,"ios");try{let M=oe.readdirSync(I);for(let g of M)if(!p.has(g))try{oe.rmSync(he.join(I,g),{recursive:!0,force:!0})}catch{}}catch{}continue}let x=he.join(l,k);try{oe.rmSync(x,{recursive:!0,force:!0})}catch{}}}let m=he.join(l,"source.zip"),S=s.data,$=oe.createWriteStream(m);await new Promise((O,k)=>{S.pipe($),S.on("error",x=>k(x)),$.on("finish",()=>O())}),new Ci(m).extractAllTo(l,!0);try{oe.unlinkSync(m)}catch{}process.chdir(l),R.info(w.green(`\u2713 Persistent workspace ready: ${l}`)),R.info(w.dim(` \u{1F4E6} Cached dirs preserved: node_modules=${oe.existsSync(he.join(l,"node_modules"))?"\u2705":"\u274C"}, Pods=${oe.existsSync(he.join(l,"ios","Pods"))?"\u2705":"\u274C"}`)),n.stop()}catch(a){n.stop(`Failed to prepare isolated workspace: ${a.message}`),t&&await c(`Setup Error: ${a.message}`),process.exit(1)}}try{let a=e.repo;if(!a)try{a=Oi("git config --get remote.origin.url").toString().trim()}catch{R.warn("Could not detect git repository URL.")}!a&&e.dryRun,a||(a="https://github.com/placeholder/repo.git"),R.info(`Build ID: ${w.cyan(i)}`);let s={},d={},l=xe(`./${f.configFileName}`);if(l){t=l.projectId;let g=e.buildProfile||"production",P=He(l,g);!P&&e.buildProfile&&(R.error(`Build profile '${g}' not found in ${f.configFileName}`),process.exit(1));let A=P||{};process.env.MACH_DEBUG&&R.info(w.dim(`Build profile: ${g} | Platform: ${e.platform} | Distribution: ${A.distribution||"store"} | Environment: ${A.environment||g}`)),A.env&&(d=A.env,R.info(w.blue(`Use Build Profile: ${g}`)));let b=e.platform,C=A[b]||{},H=["developmentClient","simulator","distribution","buildCommand","apk","iosScheme","preBuild","postBuild","scheme","environment","androidPackage","iosBundleIdentifier","name","iosDeploymentTarget","iosApiKeyId","iosApiKeyIssuer","iosApiKeyPath","iosTeamId","iosConfiguration","iosExportMethod","branch","repo","instanceType","ami","bucket","region","nodeVersion"];e.name=l.name,e.appName=l.name,e.androidPackage=l.android?.package,e.iosBundleIdentifier=l.ios?.bundleIdentifier,e.iosScheme=l.ios?.iosScheme,!e.nodeVersion&&l.nodeVersion&&(e.nodeVersion=l.nodeVersion);for(let F of H){let Z=C[F]!==void 0?C[F]:A[F];Z!==void 0&&e[F]===void 0&&(e[F]=Z)}e.branch=e.branch||"main",e.iosConfiguration=e.iosConfiguration||(e.developmentClient||e.simulator?"Debug":"Release"),e.sshUser=e.sshUser||process.env.USER||"ubuntu",e.simulator===void 0&&(e.simulator=!1),e.local===void 0&&(e.local=!1),e.verbose===void 0&&(e.verbose=!1);let B=F=>{if(!F)return F;if(F.startsWith("scripts.")){let Z=F.split(".")[1],K=l.scripts?.[Z];if(K)return K;R.warn(`Script reference not found: ${F}`)}return F};e.buildCommand=B(e.buildCommand),e.preBuild=B(e.preBuild),e.postBuild=B(e.postBuild),!e.scheme&&l.scheme&&(e.scheme=l.scheme);let N={...ze(l,f.envPrefix),...ze(A,`${f.envPrefix}PROFILE_`)};s={...s,...d,...N},process.env.IOS_P12_PASSWORD&&!s.IOS_P12_PASSWORD&&(s.IOS_P12_PASSWORD=process.env.IOS_P12_PASSWORD),process.env.MATCH_PASSWORD&&!s.MATCH_PASSWORD&&(s.MATCH_PASSWORD=process.env.MATCH_PASSWORD),e.platform==="ios"&&(!e.iosTeamId&&A.ios?.appleTeamId&&(e.iosTeamId=A.ios.appleTeamId),!e.iosTeamId&&l.submit?.[g]?.ios?.appleTeamId&&(e.iosTeamId=l.submit[g].ios.appleTeamId),!e.iosTeamId&&l.submit?.production?.ios?.appleTeamId&&(R.warn(w.yellow(`Check: Using 'production' Team ID for '${g}' build.`)),e.iosTeamId=l.submit.production.ios.appleTeamId),e.iosTeamId?R.info(w.magenta(`\u2713 Injected iOS Team ID from config: ${e.iosTeamId}`)):R.warn(w.yellow("\u26A0\uFE0F No iOS Team ID found. Signing might fail if not managed automatically via Expo.")))}let u="unknown";try{u=Oi("git rev-parse --abbrev-ref HEAD").toString().trim()}catch{R.warn("Failed to detect git branch.")}let p="1.0.0";try{oe.existsSync("./package.json")&&(p=JSON.parse(oe.readFileSync("./package.json","utf-8")).version||"1.0.0")}catch{}let m=e.buildProfile||"production",S="Internal";e.developmentClient?S="DevelopmentClient":m.toLowerCase().includes("store")||m.toLowerCase()==="production"?S="Store":m.toLowerCase().includes("preview")||m.toLowerCase().includes("staging")?S="Staging":(m.toLowerCase().includes("development")||m.toLowerCase().includes("dev"))&&(S="Development");let $=e.platform==="ios"?"iOS":"Android",v=e.platform==="ios"&&e.simulator?" (Simulator)":"",O=`${$}${v} v${p} (${S})`;if(nt(e,{status:"created",projectId:t,buildId:i,platform:e.platform,profile:m,branch:u,version:p,buildType:S,developmentClient:!!e.developmentClient,summary:O}),t){try{let g=e.buildProfile||"production";R.info(w.blue(`Fetching managed secrets for profile: ${g}...`));let P=e.environment||g,b=(await D.get(`/projects/${t}/secrets/export?env=${P}`)).data;b.status==="success"&&b.secrets&&(s={...s,...b.secrets},Object.keys(b.secrets).length>0&&R.info(w.magenta(`\u2713 Injected ${Object.keys(b.secrets).length} secrets from Dashboard.`)))}catch(g){R.warn(`Failed to load managed secrets from Dashboard: ${g.message}`)}try{R.info(w.blue("Fetching managed credentials..."));let g="development";e.distribution==="store"?g="store":e.distribution==="internal"&&(g=e.platform==="ios"?"adhoc":"internal"),S==="Staging"&&e.developmentClient&&(g="development");let P=await D.get("/credentials/resolve",{params:{projectId:t,platform:e.platform,bundleId:e.iosBundleIdentifier||e.androidPackage,distributionType:g}});if(P.data.status==="success"&&P.data.credentials){let A=P.data.credentials;R.info(w.magenta(`\u2713 Found ${A.length} relevant credentials.`));let b=A.filter(N=>{if(N.distributionType){let F=g==="internal"?"adhoc":g;return N.distributionType===F||N.distributionType===g}return!0});R.info(w.dim(` Filtered to ${b.length} credentials for distributionType: ${g}`));let C=!1,H=!1,B=!1;for(let N of b)if(N.downloadUrl)try{let F="",Z=5;for(;Z>0;)try{let K=await it.get(N.downloadUrl,{responseType:"arraybuffer",timeout:3e4,headers:{Connection:"close"}});F=Buffer.from(K.data).toString("base64");break}catch(K){if(Z--,Z===0)throw K;R.warn(w.dim(` - Temporary network error downloading ${N.name}. Retrying... (${5-Z}/5)`)),await new Promise(j=>setTimeout(j,2e3))}if(N.type==="ios_cert"&&!C)s.IOS_DIST_P12=F,N.password?(s.IOS_P12_PASSWORD=N.password,R.info(w.dim(` - Injected ${N.name} as IOS_DIST_P12 with password from credential record`))):R.info(w.dim(` - Injected ${N.name} as IOS_DIST_P12`)),C=!0;else if(N.type==="ios_profile"&&!H)s.IOS_PROVISIONING_PROFILE=F,R.info(w.dim(` - Injected ${N.name} as IOS_PROVISIONING_PROFILE`)),H=!0;else if(N.type==="android_keystore"&&!B){s.ANDROID_KEYSTORE_BASE64=F;let K=N.keystorePassword||N.password,j=N.keyPassword||N.keystorePassword||N.password,z=N.alias||N.meta?.alias;if(K)s.ANDROID_STORE_PASSWORD=K,R.info(w.dim(" - Injected keystore password from credential record"));else{let L=["ANDROID_STORE_PASSWORD",...[g==="store"?"PRODUCTION":g==="internal"?"STAGING":"DEVELOPMENT",g.toUpperCase(),"PRODUCTION","STORE","INTERNAL","STAGING","RELEASE","DEBUG"].map(U=>`KEYSTORE_PASSWORD_${U}`),"KEYSTORE_PASSWORD"].find(U=>!!s[U]);L&&s[L]&&(s.ANDROID_STORE_PASSWORD=s[L])}if(j?(s.ANDROID_KEY_PASSWORD=j,R.info(w.dim(" - Injected key password from credential record"))):s.ANDROID_KEY_PASSWORD=s.ANDROID_STORE_PASSWORD||"",z)s.ANDROID_KEY_ALIAS=z;else{let ge=["ANDROID_KEY_ALIAS","KEYSTORE_ALIAS"].find(Ce=>!!s[Ce]);ge&&(s.ANDROID_KEY_ALIAS=s[ge])}R.info(w.dim(` - Injected ${N.name} as ANDROID_KEYSTORE_BASE64`)),B=!0}}catch(F){R.warn(`Failed to download credential ${N.name}: ${F.message}`)}}if(e.platform==="android"){let A=l.android?.versionCode==="auto"||l.expo?.android?.versionCode==="auto";if(e.autoVersion||A){n.start("Resolving latest versionCode from Google Play...");try{let b=e.androidPackage||l.android?.package||l.expo?.android?.package||l.name,C=(P.data.credentials||[]).find(K=>K.type==="google_service_account"&&(!K.bundleId||K.bundleId===b));if(C||(C=((await D.get(`/credentials/${t}`)).data.credentials||[]).find(j=>j.type==="google_service_account"&&j.bundleId===b)),!C)throw new Error(`Google Service Account not found for package ${b}. Upload it under this package in Dashboard or run '${f.nameLower} credentials:service --platform android --package-name ${b}'.`);let H=await D.get(`/credentials/${C.credentialId}/download`,{params:{projectId:t}});if(H.data.status!=="success"||!H.data.downloadUrl)throw new Error("Failed to get secure download URL for service account");let N=(await it.get(H.data.downloadUrl,{headers:{Connection:"close"}})).data,F=await $i(b,N);if(F==null)throw new Error("Could not retrieve any version information from Google Play.");let Z=F+1;s.ANDROID_VERSION_CODE=Z.toString(),n.stop(`\u2713 Resolved versionCode: ${w.green(Z)} (Latest on Play Store: ${F})`)}catch(b){n.stop("Version resolution failed");let C=b.response?.data?.error?.message||b.message;throw new Error(`Auto-versioning failed: ${C}. Fix Google Play service account permissions or remove android.versionCode="auto".`)}}}if(e.platform==="ios"&&!e.simulator){let A=!!s.IOS_DIST_P12,b=!!s.IOS_PROVISIONING_PROFILE;if(!A||!b){let C=[...A?[]:["Distribution Certificate"],...b?[]:["Provisioning Profile"]].join(" and ");R.error(w.red(`Missing iOS credentials: ${C}`)),e.quiet&&process.exit(1);let H=e.yes||await wi({message:"Would you like to generate these credentials now?",initialValue:!0});if(H&&!vi(H))return await Xe({platform:"ios",profile:m}),e.quiet||R.info(w.green("\u2713 Credentials setup complete! Restarting build phase...")),bt(e);e.quiet||R.info(w.yellow(`Run \`${f.nameLower} credentials\` to set up signing credentials manually.`)),process.exit(1)}}if(e.platform==="android"&&(e.distribution==="internal"||e.distribution==="store")&&!(!!s.ANDROID_KEYSTORE_BASE64||!!s.ANDROID_KEYSTORE)){R.error(w.red("Missing Android credentials: Signing Keystore")),e.quiet&&process.exit(1);let b=e.yes||await wi({message:"Would you like to automatically create and upload an Android Keystore for this profile now?",initialValue:!0});if(b&&!vi(b))return await Xe({platform:"android",profile:m}),e.quiet||R.info(w.green("\u2713 Android Keystore setup complete! Restarting build phase...")),bt(e);e.quiet||R.info(w.yellow(`Run \`${f.nameLower} credentials --platform android\` to set up a signing keystore manually.`)),process.exit(1)}}catch(g){R.warn(`Failed to resolve credentials: ${g.message}`)}}let k=!!(e.local&&e.buildId),x=!!(e.local||e.sshHost),I=!x&&!k;if(k){R.info(w.magenta("\u{1F3D7}\uFE0F Runner Mode: Executing isolated build task..."));let g=await Gt({...e,interactive:!1},i,s,t,{branch:u,version:p,summary:O,buildType:S});await M(g),process.exit(0)}async function M(g){if(t&&g.length>0){let P=jt(),A=[];e.quiet||P.start("Uploading artifacts to Dashboard...");try{for(let b of g){let C=he.basename(b),H=oe.readFileSync(b),B=he.extname(C).toLowerCase(),N="application/octet-stream",F=await D.post(`/builds/${t}/${i}/artifact-upload-url`,{fileName:C,fileType:N});if(F.data.status!=="success")throw new Error(`Failed to get upload URL for ${C}`);let Z=!1;for(let K=1;K<=3;K++)try{await it.put(F.data.uploadUrl,H,{headers:{"Content-Type":N},maxBodyLength:1/0,maxContentLength:1/0,timeout:12e4}),Z=!0;break}catch(j){if(R.warn(w.yellow(`Artifact upload attempt ${K}/3 failed (${j.code||j.message})`)),K<3)await new Promise(z=>setTimeout(z,3e3*K));else throw j}Z&&A.push({name:C,url:F.data.downloadUrl,size:H.length,type:B.substring(1)})}e.quiet||P.stop("Artifacts uploaded.")}catch(b){e.quiet||P.stop("Failed to upload artifacts."),R.error(w.red(`Upload error: ${b.message}`));try{await D.patch(`/builds/${t}/${i}`,{status:"completed",artifacts:g.map(C=>he.basename(C)),endTime:Date.now()})}catch(C){R.warn(w.yellow(`Could not set fallback build status: ${C.message}`))}return}if(t&&A.length>0)try{R.info(w.cyan(`
|
|
1005
|
-
\u{1F517} Download Links:`));for(let
|
|
1006
|
-
\u2713 Build completed and reported to dashboard.`))}catch(
|
|
1007
|
-
\u26A0\uFE0F Could not report to dashboard: ${
|
|
1008
|
-
\
|
|
1009
|
-
\
|
|
1010
|
-
\
|
|
1011
|
-
|
|
1012
|
-
|
|
1013
|
-
|
|
1014
|
-
`).filter(r=>!!r.trim()),o=e.some(r=>r.platform==="android"&&r.id.startsWith("emulator-"));t.forEach(r=>{o||e.push({id:r,platform:"android",type:"emulator",name:r.replace(/_/g," "),status:"offline",details:`Android Virtual Device: ${r}`})})}catch{}if(process.platform!=="darwin")return e;try{let n=_e("/usr/bin/xcrun simctl list devices --json",{stdio:"pipe"}).toString(),i=JSON.parse(n);Object.entries(i.devices).forEach(([t,o])=>{o.forEach(r=>{r.isAvailable&&e.push({id:r.udid,platform:"ios",type:"simulator",name:r.name,status:r.state?.toLowerCase()==="booted"?"online":"offline",runtime:t,details:`${r.name} (${t})`})})})}catch{}try{let n=_e("/usr/bin/xcrun devicectl list devices --json-output -",{stdio:"pipe"}).toString();(JSON.parse(n).result?.devices||[]).forEach(t=>{let o=t.connectionProperties?.transportType;(o==="wired"||o==="localNetwork")&&e.push({id:t.identifier,platform:"ios",type:"physical",name:t.deviceProperties?.name||"iPhone",status:"online",details:`${t.deviceProperties?.name||"iPhone"} (${t.model?.name||t.hardwareModel||""}) - ${o}`})})}catch{}return e}async function ki(e){let n=[];for await(let i of e)n.push(Buffer.isBuffer(i)?i:Buffer.from(i));return n.length===0?{}:JSON.parse(Buffer.concat(n).toString("utf-8"))}async function Ro(e,n){let i=await $o({method:"GET",url:e,responseType:"stream",timeout:12e4}),t=Vt.createWriteStream(n);i.data.pipe(t),await new Promise((o,r)=>{t.on("finish",o),t.on("error",r)})}async function wo(e,n,i){let t=i||(n.toLowerCase().includes(".apk")?"android":"ios"),o=n.toLowerCase().includes(".ipa"),r=Vt.mkdtempSync(zt.join(Po.tmpdir(),`${ot}-install-`)),c=zt.join(r,t==="android"?"install.apk":o?"install.ipa":"install.zip");try{if(await Ro(n,c),t==="android"){_e(`adb -s ${JSON.stringify(e)} install -r ${JSON.stringify(c)}`,{stdio:"pipe"});return}if(process.platform!=="darwin")throw new Error("iOS local install requires macOS.");_e(`unzip -o ${JSON.stringify(c)} -d ${JSON.stringify(r)}`,{stdio:"pipe"});let a="";try{a=_e(`find ${JSON.stringify(zt.join(r,"Payload"))} -maxdepth 1 -name "*.app" 2>/dev/null | head -n 1`,{stdio:"pipe"}).toString().trim()}catch{}if(a||(a=_e(`find ${JSON.stringify(r)} -name "*.app" -type d | head -n 1`,{stdio:"pipe"}).toString().trim()),!a)throw new Error(`No .app bundle found inside the ${o?"IPA":"archive"}.`);try{_e(`/usr/bin/xcrun devicectl device install app --device ${JSON.stringify(e)} ${JSON.stringify(a)}`,{stdio:"pipe"})}catch(s){try{_e(`/usr/bin/xcrun simctl install ${JSON.stringify(e)} ${JSON.stringify(a)}`,{stdio:"pipe"})}catch{throw new Error(s.stderr?.toString().trim()||s.message||"iOS install failed.")}}}finally{Vt.rmSync(r,{recursive:!0,force:!0})}}function vo(e,n){if(!e)throw new Error("Device id is required.");if(n==="ios"){if(process.platform!=="darwin")throw new Error("iOS Simulator launch requires macOS.");return _e(`/usr/bin/xcrun simctl boot ${JSON.stringify(e)}`,{stdio:"pipe"}),Ti("open",["-a","Simulator"],{detached:!0,stdio:"ignore"}).unref(),"Simulator booting..."}if(n==="android"){let i=`${process.env.ANDROID_HOME||`${process.env.HOME}/Library/Android/sdk`}/emulator/emulator`;return Ti(i,["-avd",e],{detached:!0,stdio:"ignore"}).unref(),"Emulator booting in background..."}throw new Error("Invalid platform.")}async function xi(){process.platform!=="darwin"&&Ve.warn("Running on non-macOS \u2014 iOS discovery unavailable, Android only.");let e=_o.createServer((t,o)=>{if(o.setHeader("Access-Control-Allow-Origin","*"),o.setHeader("Access-Control-Allow-Methods","GET, POST, OPTIONS"),o.setHeader("Access-Control-Allow-Headers","Content-Type, Authorization"),t.method==="OPTIONS"){o.writeHead(204),o.end();return}let r=new URL(t.url||"/",`http://localhost:${ot}`);if(t.method==="GET"&&r.pathname==="/local/devices"){try{let c=Do();o.writeHead(200,{"Content-Type":"application/json"}),o.end(JSON.stringify({status:"success",targets:c}))}catch(c){o.writeHead(500,{"Content-Type":"application/json"}),o.end(JSON.stringify({status:"error",message:c.message}))}return}if(t.method==="POST"&&r.pathname==="/install-local"){n(t,o);return}if(t.method==="POST"&&r.pathname==="/local/boot"){i(t,o);return}o.writeHead(404),o.end()}),n=async(t,o)=>{try{let{deviceId:r,artifactUrl:c,platform:a}=await ki(t);if(!r||!c){o.writeHead(400,{"Content-Type":"application/json"}),o.end(JSON.stringify({status:"error",message:"deviceId and artifactUrl are required"}));return}await wo(r,c,a),o.writeHead(200,{"Content-Type":"application/json"}),o.end(JSON.stringify({status:"success",message:`Installed on ${r}`}))}catch(r){o.writeHead(500,{"Content-Type":"application/json"}),o.end(JSON.stringify({status:"error",message:r.message||"Local install failed"}))}},i=async(t,o)=>{try{let{id:r,platform:c}=await ki(t),a=vo(r,c);o.writeHead(200,{"Content-Type":"application/json"}),o.end(JSON.stringify({status:"success",message:a}))}catch(r){o.writeHead(500,{"Content-Type":"application/json"}),o.end(JSON.stringify({status:"error",message:r.message||"Local device launch failed"}))}};e.listen(ot,"127.0.0.1",()=>{Ve.success(Kt.green(`Local device agent running on http://localhost:${ot}`)),Ve.info(Kt.dim("Keep this running while using the Install Hub on the dashboard.")),Ve.info(Kt.dim("Press Ctrl+C to stop."))}),e.on("error",t=>{t.code==="EADDRINUSE"?Ve.error(`Port ${ot} is already in use \u2014 agent may already be running.`):Ve.error(`Agent error: ${t.message}`),process.exit(1)}),await new Promise(()=>{})}import{createRequire as as}from"module";import{text as Co,password as No,spinner as To,isCancel as Mi}from"@clack/prompts";import qt from"chalk";import rt from"fs";import Li from"path";import Oo from"os";var Wt=Li.join(Oo.homedir(),f.configDir),Yt=Li.join(Wt,"config.json");function Jt(){if(!rt.existsSync(Yt))return{};try{return JSON.parse(rt.readFileSync(Yt,"utf-8"))}catch{return{}}}function Ui(e){rt.existsSync(Wt)||rt.mkdirSync(Wt,{recursive:!0});let i={...Jt(),...e};rt.writeFileSync(Yt,JSON.stringify(i,null,2))}async function Fi(){let e=Jt(),n=await Co({message:"Enter your email:",placeholder:"user@example.com",initialValue:e.lastLoginEmail,validate(o){if(o.length===0)return"Email is required!"}});if(Mi(n))return;let i=await No({message:"Enter your password:",validate(o){if(o.length===0)return"Password is required!"}});if(Mi(i))return;let t=To();t.start("Authenticating...");try{let r=await(await fetch(`${yt}/login`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({username:n,password:i})})).json();r.status==="success"&&r.user.token?(ai({id:r.user.id,email:n,token:r.user.token,refreshToken:r.user.refreshToken}),Ui({lastLoginEmail:n}),t.stop(qt.green("Login successful!"))):t.stop(qt.red("Login failed: "+(r.message||"Unknown error")))}catch(o){t.stop(qt.red("Network error: "+o.message))}}import{outro as ko,select as xo,spinner as Lo,isCancel as Uo}from"@clack/prompts";import _t from"chalk";import Xt from"fs";import Mo from"path";async function Hi(){if(!pe()){console.log(_t.red(`You are not logged in. Run \`${f.nameLower} login\` first.`));return}let n=Lo();n.start("Fetching projects...");try{let{data:i}=await D.get("/projects");if(n.stop("Projects loaded."),i.status!=="success"||!i.projects||i.projects.length===0){console.log(_t.yellow(`No projects found. Run \`${f.nameLower} init\` to create one.`));return}let t=i.projects.map(u=>({value:u.projectId,label:`${u.name} (${u.slug})`})),o=await xo({message:"Select a project to link:",options:t});if(Uo(o))return;let r=Mo.join(process.cwd(),f.configFileName),c={};if(Xt.existsSync(r))try{c=JSON.parse(Xt.readFileSync(r,"utf-8"))}catch{}let a=i.projects.find(u=>u.projectId===o),s=c.android?.package||Ne("android"),d=c.ios?.bundleIdentifier||Ne("ios"),l={projectId:o,name:a?.name,slug:a?.slug,scheme:a?.slug?.toLowerCase()||"app",android:{package:s||""},ios:{bundleIdentifier:d||""},build:{development:{environment:"development",distribution:"internal"},staging:{environment:"staging",distribution:"internal"},production:{environment:"production",distribution:"store"}},submit:{production:{android:c.submit?.production?.android||{track:"internal"},ios:{ascAppId:c.submit?.production?.ios?.ascAppId||"1234567890",appleTeamId:c.submit?.production?.ios?.appleTeamId||"ABC123DEFG"}}}};Xt.writeFileSync(r,JSON.stringify(l,null,2)),ko(_t.green(`Linked to project ${l.name} (${l.slug})`))}catch(i){n.stop(_t.red("Error fetching projects: "+i.message))}}import{outro as Fo,text as $t,select as Ho,spinner as Bo,isCancel as st}from"@clack/prompts";import at from"chalk";import Go from"fs";import jo from"path";import{randomUUID as Ko}from"crypto";async function Bi(){if(!pe()){console.log(at.red(`You are not logged in. Run \`${f.nameLower} login\` first.`));return}let n=await $t({message:"Project Name:",placeholder:"My Awesome App",validate(a){if(a.length===0)return"Name is required!"}});if(st(n))return;let i=await $t({message:"Project Slug (URL friendly):",placeholder:"my-awesome-app",validate(a){if(a.length===0)return"Slug is required!";if(!/^[a-z0-9-]+$/.test(a))return"Slug must be lowercase alphanumeric with dashes."}});if(st(i))return;let t=await Ho({message:"Platform:",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"},{value:"web",label:"Web"},{value:"all",label:"All Platforms"}]});if(st(t))return;let o="";if(t==="android"||t==="all"){let a=Ne("android");if(o=await $t({message:"Android Package Name:",initialValue:a||"",placeholder:"com.example.app",validate(s){if(s.length===0)return"Package name is required for Android!"}}),st(o))return}let r="";if(t==="ios"||t==="all"){let a=Ne("ios");if(r=await $t({message:"iOS Bundle Identifier:",initialValue:a||"",placeholder:"com.example.app",validate(s){if(s.length===0)return"Bundle ID is required for iOS!"}}),st(r))return}let c=Bo();c.start("Creating project...");try{let a=Ko(),d={projectId:a,name:n,slug:i,storageType:"managed",platforms:t==="all"?["android","ios","web"]:[t]},{data:l}=await D.post("/projects",d);if(l.status==="success"){c.stop(at.green("Project created successfully!"));let u=jo.join(process.cwd(),f.configFileName);Go.writeFileSync(u,JSON.stringify({projectId:a,name:n,slug:i,...o?{android:{package:o}}:{},...r?{ios:{bundleIdentifier:r}}:{},build:{development:{environment:"development",distribution:"internal"},staging:{environment:"staging",distribution:"internal"},production:{environment:"production",distribution:"store"}},submit:{production:{android:{track:"internal"},ios:{ascAppId:"1234567890",appleTeamId:"ABC123DEFG",...r?{bundleId:r}:{}}}}},null,2)),Fo(at.green(`Initialized project ${n} and linked locally!`))}else c.stop(at.red("creation failed: "+l.message))}catch(a){c.stop(at.red("Network error: "+a.message))}}import{spinner as ji,log as ye}from"@clack/prompts";import Pt from"chalk";import Gi from"fs";import zo from"path";async function Ki(e,n){let i=pe();if(!i){ye.error(`You are not logged in. Run \`${f.nameLower} login\` first.`);return}let t=zo.join(process.cwd(),f.configFileName);if(!Gi.existsSync(t)){ye.error(`No ${f.configFileName} found. Run \`${f.nameLower} init\` or \`${f.nameLower} link\` first.`);return}let o;try{o=JSON.parse(Gi.readFileSync(t,"utf-8"))}catch{ye.error(`Failed to parse ${f.configFileName}`);return}let{projectId:r}=o;if(!r){ye.error(`${f.configFileName} is missing projectId.`);return}e==="set"?await Vo(r,n,i):e==="list"?await Wo(r,i):ye.error(`Unknown env action: ${e}. Use 'set' or 'list'.`)}async function Vo(e,n,i){if(n.length===0){ye.error(`Usage: ${f.nameLower} env set KEY=VALUE [KEY2=VALUE2 ...]`);return}let t=ji();t.start("Setting environment variables...");let o=0,r=0;for(let c of n){let[a,...s]=c.split("="),d=s.join("=");if(!a||d===void 0){ye.warn(`Invalid format for argument: ${c}. Expected KEY=VALUE.`),r++;continue}try{let l={key:a.trim(),value:d,type:"env",environment:"global",visibility:"secret"},{data:u}=await D.post(`/projects/${e}/secrets`,l);u.status==="success"?o++:(ye.error(`Failed to set ${a}: ${u.message}`),r++)}catch(l){ye.error(`Network error setting ${a}: ${l.message}`),r++}}t.stop(`Set ${o} variable(s). ${r>0?`${r} failed.`:""}`)}async function Wo(e,n){let i=ji();i.start("Fetching environment variables...");try{let{data:t}=await D.get(`/projects/${e}/secrets`);if(t.status==="success"){i.stop("Fetched variables.");let o=t.secrets||[];o.length===0?ye.info("No environment variables found for this project."):(ye.info(Pt.bold("Environment Variables (Global & Scoped):")),o.forEach(r=>{let c=r.visibility==="plain"?r.value:"********";console.log(` ${Pt.cyan(r.key)} = ${c} ${Pt.gray(`[${r.environment}]`)}`)}))}else i.stop(Pt.red(`Failed to fetch variables: ${t.message}`))}catch(t){i.stop("Failed to fetch variables."),ye.error(`Network error: ${t.message}`)}}import{spinner as lt,text as ct,select as Qt,isCancel as Le,cancel as ei}from"@clack/prompts";import re from"chalk";import ie from"fs";import Ue from"path";import{spawn as Vi}from"child_process";import Wi from"axios";import ti from"os";import Yo from"crypto";async function Yi(e){let n=lt(),i=pe(),t=`./${f.configFileName}`;if(!ie.existsSync(t)){de(`No ${f.configFileName} found. Run \`${f.nameLower} init\` or \`${f.nameLower} link\` first.`);return}let o=JSON.parse(ie.readFileSync(t,"utf-8")),{projectId:r}=o,c=e.profile||e.buildProfile||"production";if(!r){de(`${f.configFileName} is missing projectId.`);return}ve(re.dim(`Submit for project: ${o.name||r} | Profile: ${c}`));let a=e.platform;if(!a){let O=await Qt({message:"Select platform to submit:",options:[{value:"ios",label:"iOS (App Store Connect / TestFlight)"},{value:"android",label:"Android (Google Play Console)"}]});if(Le(O)){ei("Operation cancelled");return}a=O}let s=await qo(r,a,e,i?.token);if(!s)return;ve(`Using artifact: ${re.green(Ue.basename(s))} `);let d=a==="android"?Jo(o,c):void 0;n.start("Fetching submission credentials from Dashboard...");let l;try{let k=(await D.get(`/credentials/${r}`)).data.credentials||[];if(a==="android"&&!d){n.stop("Package name missing"),de("Could not resolve Android package name. Set android.package in mach.config.json/app.json.");return}let x=k.filter(I=>a==="ios"?I.type==="asc_api_key":I.type==="google_service_account"&&I.bundleId===d);if(x.length===0){n.stop("Credentials missing"),de(a==="android"?`No Google Play service credential found for package ${d}.`:`No Service Credentials found for ${a}.`),ve(a==="android"?`Use '${f.nameLower} credentials:service --platform android --package-name ${d}' or upload it under that package in the Dashboard.`:`Use '${f.nameLower} credentials:service --platform ${a}' or use the Dashboard to upload them.`);return}if(x.length===1)l=x[0],n.stop(`Using: ${l.name}`);else{n.stop("Multiple credentials found");let I=await Qt({message:`Choose a ${a==="ios"?"App Store Connect":"Google Play"} credential:`,options:x.map(M=>({value:M.credentialId,label:M.name,hint:`${M.keyId?`ID: ${M.keyId}`:""} ${M.issuerId?`(Issuer: ${M.issuerId.substring(0,8)}...)`:""}`}))});if(Le(I)){ei("Submission cancelled");return}l=x.find(M=>M.credentialId===I),ve(`Using selected: ${re.green(l.name)}`)}}catch(O){n.stop("Failed to fetch credentials"),de(`API Error: ${O.message} `);return}let u=ie.mkdtempSync(Ue.join(ti.tmpdir(),`${f.nameLower}-submit-`)),p=l.keyId||l.meta?.keyId,m=l.issuerId||l.meta?.issuerId,S=l.type==="asc_api_key"?`AuthKey_${p}.p8`:"service-account.json",$=Ue.join(u,S);n.start("Downloading secure key...");try{let O=await D.get(`/credentials/${l.credentialId}/download`,{params:{projectId:r}});if(O.data.status!=="success"||!O.data.downloadUrl)throw new Error("Failed to get secure download URL");let k=await Wi.get(O.data.downloadUrl,{responseType:"arraybuffer"});ie.writeFileSync($,Buffer.from(k.data)),n.stop("Key downloaded to secure temp storage")}catch(O){n.stop("Download failed"),de(`Failed to download key: ${O.message}`);try{ie.rmSync(u,{recursive:!0,force:!0})}catch{}return}ve(re.blue(`Initiating ${a==="ios"?"TestFlight":"Google Play"} submission...`));let v=a==="android"?e.track||o.submit?.[c]?.android?.track||o.submit?.production?.android?.track||"internal":void 0;try{if(a==="ios"){if(!p){let x=await ct({message:"Enter App Store Connect Key ID (e.g. 2X948D...):",validate:I=>I.length>0?void 0:"Key ID is required"});if(Le(x))return;p=x}if(!m||m==="undefined"){let x=await ct({message:"Enter App Store Connect Issuer ID (Found on ASC Keys page):",validate:I=>I.length>0?void 0:"Issuer ID is required"});if(Le(x))return;m=x}ve(`Using ASC Key ID: ${p}`),ve(`Using ASC Issuer ID: ${m}`);let O=o.submit?.[c]?.ios?.bundleId||o.ios?.bundleIdentifier,k=await Xo(s,$,m,p,O);if(k&&k.apiKeyJsonPath)throw ve(re.cyan(`
|
|
1015
|
-
[DIAGNOSTIC] API key written to: ${k.apiKeyJsonPath}
|
|
1016
|
-
|
|
1017
|
-
|
|
997
|
+
`));try{let H=G("security find-identity -v -p codesigning",{encoding:"utf-8"});r(h.magenta(`${H}
|
|
998
|
+
`))}catch(H){r(h.red(`[DIAGNOSTIC] Failed to list identities: ${H.message}
|
|
999
|
+
`))}}await Oe("xcodebuild",["-exportArchive","-archivePath",w,"-exportPath",U,"-exportOptionsPlist",F],c,n,r,l),s&&await s("validate");let K=Ve(U,[".ipa"]);for(let H of K)try{G(`unzip -t "${H}"`,{stdio:"pipe"}),r&&r(`[IPA VALID] ${_.basename(H)} \u2014 archive integrity OK
|
|
1000
|
+
`)}catch{let ne=`IPA validation failed for ${_.basename(H)}: archive may be corrupt`;throw r&&r(`[IPA CORRUPT] ${ne}
|
|
1001
|
+
`),new Error(ne)}return K}},Te=e=>{try{let t=_.join(process.cwd(),f.configFileName);if(S.existsSync(t)){let i=JSON.parse(S.readFileSync(t,"utf-8"));if(e==="android"&&i.android?.package)return i.android.package;if(e==="ios"&&i.ios?.bundleIdentifier)return i.ios.bundleIdentifier}if(e==="android"){let i=["android/app/build.gradle","app/build.gradle","build.gradle"];for(let n of i)if(S.existsSync(n)){let r=S.readFileSync(n,"utf-8").match(/applicationId\s+['"]([^'"]+)['"]/);if(r)return r[1]}}else{let i=_.resolve(process.cwd(),S.existsSync("ios")?"ios":"."),n=Ve(i,["Info.plist"]).filter(l=>!l.includes("/Pods/")&&!l.includes("/build/")&&!l.includes("/DerivedData/"));n.sort((l,a)=>a.split("/").length-l.split("/").length);for(let l of n){let s=S.readFileSync(l,"utf-8").match(/<key>CFBundleIdentifier<\/key>\s*<string>([^<]+)<\/string>/);if(s&&!s[1].includes("$"))return s[1]}let o=Ve(i,[".xcodeproj"]);if(o.length>0){let l=_.join(o[0],"project.pbxproj");if(S.existsSync(l)){let s=S.readFileSync(l,"utf-8").match(/PRODUCT_BUNDLE_IDENTIFIER\s*=\s*"?([^";\s]+)"?;/);if(s)return s[1]}}let r=["app.json","app.config.json","app.config.js","app.config.ts"];for(let l of r)if(S.existsSync(l)){let s=S.readFileSync(l,"utf-8").match(/"bundleIdentifier":\s*"([^"]+)"/);if(s)return s[1]}}}catch{return null}return null},Do=()=>{try{return G("emulator -version",{stdio:"ignore"}),"emulator"}catch{let t=_e.homedir(),i=[_.join(t,"Library/Android/sdk/emulator/emulator"),_.join(t,"Android/Sdk/emulator/emulator"),"/usr/local/lib/android/sdk/emulator/emulator"];for(let n of i)if(S.existsSync(n))return n}return"emulator"},Ro=async(e,t)=>{let i=It();try{if(G("adb devices").toString().split(`
|
|
1002
|
+
`).slice(1).map(l=>l.trim()).filter(l=>l.length>0&&!l.startsWith("*")).map(l=>l.split(" ")[0]).length===0){A.warn(h.yellow("No Android devices or emulators found."));let l=Do(),a=[];try{a=G(`${l} -list-avds`).toString().split(`
|
|
1003
|
+
`).filter(s=>s.trim().length>0)}catch{}if(a.length>0){let s=await jt({message:"Select an emulator to launch:",options:a.map(u=>({value:u,label:u}))});if(_t(s))return;i.start(`Launching emulator ${s}...`),Ci(l,["-avd",s],{detached:!0,stdio:"ignore"}).unref();let c=0,d=!1;for(;c<60;){try{if(G("adb shell getprop sys.boot_completed",{stdio:"pipe"}).toString().trim()==="1"){d=!0;break}}catch{}await new Promise(u=>setTimeout(u,2e3)),c++}if(!d)throw i.stop("Emulator launch timed out."),new Error("Emulator launch timed out. Please try launching it manually.");i.stop("Emulator launched.")}else throw new Error("No devices found and no emulators available to launch. (Make sure Android SDK is installed)")}i.start("Installing APK on device..."),await Oe("adb",["install","-r",e],process.cwd(),{},t),i.stop("Installation complete.");let r=Te("android");if(r){A.info(h.blue(`\u{1F680} Launching ${r}...`));try{G(`adb shell dumpsys package ${r}`).toString().split(`
|
|
1004
|
+
`).find(s=>s.includes("android.intent.action.MAIN")&&s.includes("android.intent.category.LAUNCHER"))?G(`adb shell monkey -p ${r} -c android.intent.category.LAUNCHER 1`,{stdio:"ignore"}):G(`adb shell monkey -p ${r} -c android.intent.category.LAUNCHER 1`,{stdio:"ignore"})}catch{A.warn("Could not auto-launch app. You may need to open it manually.")}}}catch(n){i.stop("Installation failed."),A.error(h.red(`Failed to install APK: ${n.message}`))}},wo=async(e,t,i)=>{let n=It();try{if(!G("xcrun simctl list devices booted").toString().includes("(Booted)")){A.warn(h.yellow("No iOS Simulator is currently booted."));let r=G("xcrun simctl list devices --json").toString(),l=JSON.parse(r).devices,a=[];Object.keys(l).forEach(u=>{l[u].forEach(p=>{p.isAvailable&&a.push({...p,runtime:u})})});let s=await jt({message:"Select a simulator to launch:",options:a.map(u=>({value:u.udid,label:`${u.name} (${u.runtime.split(".").pop()})`}))});if(_t(s))return;n.start(`Booting ${s}...`),G(`xcrun simctl boot ${s}`),G(`open -a Simulator --args -CurrentDeviceUDID ${s}`);let c=0,d=!1;for(;c<30;){try{if(G("xcrun simctl list devices booted").toString().includes(s)){d=!0;break}}catch{}await new Promise(u=>setTimeout(u,2e3)),c++}if(!d)throw n.stop("Simulator boot timed out."),new Error("Simulator boot timed out.");n.stop("Simulator booted.")}n.start("Installing on iOS Simulator..."),await Oe("xcrun",["simctl","install","booted",e],process.cwd(),{},i),n.stop("Installation complete."),A.info(h.blue(`\u{1F680} Launching ${t}...`)),await Oe("xcrun",["simctl","launch","booted",t],process.cwd(),{},i)}catch(o){n.stop("Installation failed."),A.error(h.red(`Failed to install on Simulator: ${o.message}`))}},vo=async(e,t,i)=>{let n=It();n.start("Scanning for connected iOS devices...");try{let o=G("xcrun devicectl list devices --json-output -").toString(),l=(JSON.parse(o).result?.devices||[]).filter(s=>s.connectionProperties?.transportType==="wired"||s.connectionProperties?.transportType==="localNetwork");if(l.length===0)throw n.stop("No connected iOS devices found."),new Error("Please connect your iPhone via USB or ensure it is on the same Wi-Fi for wireless debugging.");let a=l[0].identifier;if(l.length>1){n.stop();let s=await jt({message:"Select a device to install on:",options:l.map(c=>({value:c.identifier,label:`${c.deviceProperties?.name||c.name||c.model?.name} (${c.model?.name||"iPhone"}) - ${c.identifier}`}))});if(_t(s))return;a=s,n.start(`Installing on ${a}...`)}else n.message(`Installing on ${l[0].model.name}...`);await Oe("xcrun",["devicectl","device","install","app","--device",a,e],process.cwd(),{},i),n.stop("Installation complete."),A.info(h.blue(`\u{1F680} Launching ${t}...`)),await Oe("xcrun",["devicectl","device","launch","app","--device",a,t],process.cwd(),{},i)}catch(o){n.stop("Installation failed."),A.error(h.red(`Failed to install on device: ${o.message}`)),A.info(h.dim('Make sure your device is unlocked and "Developer Mode" is enabled in Settings -> Privacy & Security.'))}};import Ti from"fs";import ki from"path";import{isCancel as Kt,log as ke,select as xi,spinner as Oo,text as Co}from"@clack/prompts";import We from"chalk";async function Li(e){let t=await zt(e);t&&(ke.success(We.green(`Maestro run ${t.status||"queued"}: ${t.testRunId}`)),t.launchDeferredReason&&ke.warn(We.yellow(t.launchDeferredReason)),t.dashboardUrl&&ke.info(We.dim("View test run: ")+We.white.underline(t.dashboardUrl)))}async function zt(e){let t=ve(`./${f.configFileName}`),i=e.projectId||t?.projectId,n=e.profile||e.buildProfile||"production";if(!i)return ke.error(`No projectId found. Run \`${f.nameLower} link\` first or pass an internal project id.`),null;let o=e.platform;if(!o&&e.latest){let s=await xi({message:"Select platform for the latest build:",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"}]});if(Kt(s))return null;o=s}let r=await No(e);if(!r)return null;if(r.kind==="latest"&&!o)return ke.error("Pass --platform when using --latest."),null;if(r.kind==="artifact-url"&&!o)return ke.error("Pass --platform when using --artifact-url."),null;let l=To(e.maestroRetries);if(l===null)return null;let a=Oo();e.quiet||a.start("Queuing Maestro run...");try{let s=await $.post("/tests/maestro",{projectId:i,platform:o,profile:n,latest:r.kind==="latest",buildId:r.kind==="build-id"?r.value:e.buildId,buildUrl:r.kind==="build-url"?r.value:e.buildUrl,artifactUrl:r.kind==="artifact-url"?r.value:e.artifactUrl,flows:e.maestroFlows||".maestro",device:e.maestroDevice||(o==="ios"?"iphone_15":"pixel_6"),retries:l,record:!!e.maestroRecord});if(s.data.status!=="success")throw new Error(s.data.message||"Failed to queue Maestro run");let c=s.data.testRun,d={testRunId:c.testRunId,status:c.status,projectId:i,buildId:c.buildId,platform:c.platform,dashboardUrl:c.dashboardUrl||`${Qe}/tests/${c.testRunId}`,launchDeferredReason:c.launchDeferredReason};return ko(e,d),e.quiet||a.stop("Maestro run queued"),d}catch(s){e.quiet||a.stop("Could not queue Maestro run");let c=s.response?.data?.message||s.message||"Unknown error";return ke.error(We.red(`Maestro queue failed: ${c}`)),null}}async function No(e){if(e.buildId)return{kind:"build-id",value:e.buildId};if(e.buildUrl)return{kind:"build-url",value:e.buildUrl};if(e.artifactUrl)return{kind:"artifact-url",value:e.artifactUrl};if(e.latest)return{kind:"latest"};let t=await xi({message:"Select app artifact source for Maestro:",options:[{value:"latest",label:"Latest successful build"},{value:"build-id",label:"Build ID"},{value:"build-url",label:`${f.name} build URL`},{value:"artifact-url",label:"Direct artifact URL"}]});if(Kt(t))return null;if(t==="latest")return{kind:"latest"};let i=await Co({message:t==="build-id"?"Enter build ID:":t==="build-url"?`Enter ${f.name} build URL:`:"Enter artifact URL:",validate:n=>{let o=String(n||"").trim();if(!o)return"Value is required";if((t==="build-url"||t==="artifact-url")&&!o.startsWith("http"))return"Must be a URL"}});return Kt(i)?null:{kind:t,value:String(i).trim()}}function To(e){if(e==null||e==="")return 1;let t=Number(e);return!Number.isInteger(t)||t<0||t>10?(ke.error("--maestro-retries must be an integer between 0 and 10."),null):t}function ko(e,t){if(!e.jsonOutput)return;let i=ki.resolve(e.jsonOutput),n={...t,updatedAt:new Date().toISOString()};try{let o=ki.dirname(i);o&&o!=="."&&Ti.mkdirSync(o,{recursive:!0}),Ti.writeFileSync(i,JSON.stringify(n,null,2))}catch(o){ke.warn(We.yellow(`Could not write Maestro metadata JSON: ${o.message}`))}}var Pt=async e=>{e.platform!=="android"&&e.platform!=="ios"&&(R.error(`Platform ${e.platform} is not supported. Use 'android' or 'ios'.`),process.exit(1));let t=Vt(),i=e.buildId||xo(),n=e.projectId,o=Date.now(),r=!!n,l=async a=>{if(n)try{await $.patch(`/builds/${n}/${i}`,{status:"failed",error:a})}catch{}};if(e.local&&e.buildId){e.quiet||t.start(`Preparing isolated workspace for build: ${e.buildId}`);try{let a=await $.get(`/builds/${n}/${e.buildId}/source-url`);if(a.data.status!=="success")throw new Error("Failed to get source download URL from API");let s=await rt.get(a.data.downloadUrl,{responseType:"stream"}),c=(n||e.projectId||"default").replace(/[^a-zA-Z0-9-_]/g,"_"),d=ye.join(Lo.homedir(),f.workspacesDir,c);re.mkdirSync(d,{recursive:!0});let u=new Set(["node_modules",`.${f.nameLower}-cache-meta`]),p=new Set(["Pods"]);if(re.existsSync(d)){let B=re.readdirSync(d);for(let w of B){if(u.has(w))continue;if(w==="ios"){let b=ye.join(d,"ios");try{let L=re.readdirSync(b);for(let m of L)if(!p.has(m))try{re.rmSync(ye.join(b,m),{recursive:!0,force:!0})}catch{}}catch{}continue}let U=ye.join(d,w);try{re.rmSync(U,{recursive:!0,force:!0})}catch{}}}let g=ye.join(d,"source.zip"),E=s.data,P=re.createWriteStream(g);await new Promise((B,w)=>{E.pipe(P),E.on("error",U=>w(U)),P.on("finish",()=>B())}),new Hi(g).extractAllTo(d,!0);try{re.unlinkSync(g)}catch{}process.chdir(d),R.info(v.green(`\u2713 Persistent workspace ready: ${d}`)),R.info(v.dim(` \u{1F4E6} Cached dirs preserved: node_modules=${re.existsSync(ye.join(d,"node_modules"))?"\u2705":"\u274C"}, Pods=${re.existsSync(ye.join(d,"ios","Pods"))?"\u2705":"\u274C"}`)),t.stop()}catch(a){t.stop(`Failed to prepare isolated workspace: ${a.message}`),n&&await l(`Setup Error: ${a.message}`),process.exit(1)}}try{let a=e.repo;if(!a)try{a=Fi("git config --get remote.origin.url").toString().trim()}catch{R.warn("Could not detect git repository URL.")}!a&&e.dryRun,a||(a="https://github.com/placeholder/repo.git"),R.info(`Build ID: ${v.cyan(i)}`);let s={},c={},d=ve(`./${f.configFileName}`);if(d){n=d.projectId;let m=e.buildProfile||"production",D=Be(d,m);!D&&e.buildProfile&&(R.error(`Build profile '${m}' not found in ${f.configFileName}`),process.exit(1));let y=D||{};process.env.MACH_DEBUG&&R.info(v.dim(`Build profile: ${m} | Platform: ${e.platform} | Distribution: ${y.distribution||"store"} | Environment: ${y.environment||m}`)),y.env&&(c=y.env,R.info(v.blue(`Use Build Profile: ${m}`)));let I=e.platform,x=y[I]||{},W=["developmentClient","simulator","distribution","buildCommand","apk","iosScheme","preBuild","postBuild","scheme","environment","androidPackage","iosBundleIdentifier","name","iosDeploymentTarget","iosApiKeyId","iosApiKeyIssuer","iosApiKeyPath","iosTeamId","iosConfiguration","iosExportMethod","branch","repo","instanceType","ami","bucket","region","nodeVersion"];e.name=d.name,e.appName=d.name,e.androidPackage=d.android?.package,e.iosBundleIdentifier=d.ios?.bundleIdentifier,e.iosScheme=d.ios?.iosScheme,!e.nodeVersion&&d.nodeVersion&&(e.nodeVersion=d.nodeVersion);let j=M=>M==="androidPackage"?x.androidPackage??x.package??y.androidPackage??y.android?.package:M==="iosBundleIdentifier"?x.iosBundleIdentifier??x.bundleIdentifier??y.iosBundleIdentifier??y.ios?.bundleIdentifier:x[M]!==void 0?x[M]:y[M];for(let M of W){let K=j(M),H=M==="androidPackage"||M==="iosBundleIdentifier";K!==void 0&&(e[M]===void 0||H)&&(e[M]=K)}e.branch=e.branch||"main",e.iosConfiguration=e.iosConfiguration||(e.developmentClient||e.simulator?"Debug":"Release"),e.sshUser=e.sshUser||process.env.USER||"ubuntu",e.simulator===void 0&&(e.simulator=!1),e.local===void 0&&(e.local=!1),e.verbose===void 0&&(e.verbose=!1);let O=M=>{if(!M)return M;if(M.startsWith("scripts.")){let K=M.split(".")[1],H=d.scripts?.[K];if(H)return H;R.warn(`Script reference not found: ${M}`)}return M};e.buildCommand=O(e.buildCommand),e.preBuild=O(e.preBuild),e.postBuild=O(e.postBuild),!e.scheme&&d.scheme&&(e.scheme=d.scheme);let F={...Ke(d,f.envPrefix),...Ke(y,`${f.envPrefix}PROFILE_`)};s={...s,...c,...F},process.env.IOS_P12_PASSWORD&&!s.IOS_P12_PASSWORD&&(s.IOS_P12_PASSWORD=process.env.IOS_P12_PASSWORD),process.env.MATCH_PASSWORD&&!s.MATCH_PASSWORD&&(s.MATCH_PASSWORD=process.env.MATCH_PASSWORD),e.platform==="ios"&&(!e.iosTeamId&&y.ios?.appleTeamId&&(e.iosTeamId=y.ios.appleTeamId),!e.iosTeamId&&d.submit?.[m]?.ios?.appleTeamId&&(e.iosTeamId=d.submit[m].ios.appleTeamId),!e.iosTeamId&&d.submit?.production?.ios?.appleTeamId&&(R.warn(v.yellow(`Check: Using 'production' Team ID for '${m}' build.`)),e.iosTeamId=d.submit.production.ios.appleTeamId),e.iosTeamId?R.info(v.magenta(`\u2713 Injected iOS Team ID from config: ${e.iosTeamId}`)):R.warn(v.yellow("\u26A0\uFE0F No iOS Team ID found. Signing might fail if not managed automatically via Expo.")))}let u="unknown";try{u=Fi("git rev-parse --abbrev-ref HEAD").toString().trim()}catch{R.warn("Failed to detect git branch.")}let p="1.0.0";try{re.existsSync("./package.json")&&(p=JSON.parse(re.readFileSync("./package.json","utf-8")).version||"1.0.0")}catch{}let g=e.buildProfile||"production",E="Internal";e.developmentClient?E="DevelopmentClient":g.toLowerCase().includes("store")||g.toLowerCase()==="production"?E="Store":g.toLowerCase().includes("preview")||g.toLowerCase().includes("staging")?E="Staging":(g.toLowerCase().includes("development")||g.toLowerCase().includes("dev"))&&(E="Development");let P=e.platform==="ios"?"iOS":"Android",C=e.platform==="ios"&&e.simulator?" (Simulator)":"",B=`${P}${C} v${p} (${E})`;if(st(e,{status:"created",projectId:n,buildId:i,platform:e.platform,profile:g,branch:u,version:p,buildType:E,developmentClient:!!e.developmentClient,summary:B}),n){try{let m=e.buildProfile||"production";R.info(v.blue(`Fetching managed secrets for profile: ${m}...`));let D=e.environment||m,I=(await $.get(`/projects/${n}/secrets/export?env=${D}`)).data;I.status==="success"&&I.secrets&&(s={...s,...I.secrets},Object.keys(I.secrets).length>0&&R.info(v.magenta(`\u2713 Injected ${Object.keys(I.secrets).length} secrets from Dashboard.`)))}catch(m){R.warn(`Failed to load managed secrets from Dashboard: ${m.message}`)}try{R.info(v.blue("Fetching managed credentials..."));let m="development";e.distribution==="store"?m="store":e.distribution==="internal"&&(m=e.platform==="ios"?"adhoc":"internal"),e.developmentClient&&(m="development");let D=await $.get("/credentials/resolve",{params:{projectId:n,platform:e.platform,bundleId:e.iosBundleIdentifier||e.androidPackage,distributionType:m}});if(D.data.status==="success"&&D.data.credentials){let y=D.data.credentials;R.info(v.magenta(`\u2713 Found ${y.length} relevant credentials.`));let I=y.filter(O=>{if(O.distributionType){let F=m==="internal"?"adhoc":m;return O.distributionType===F||O.distributionType===m}return!0});R.info(v.dim(` Filtered to ${I.length} credentials for distributionType: ${m}`));let x=!1,W=!1,j=!1;for(let O of I)if(O.downloadUrl)try{let F="",M=5;for(;M>0;)try{let K=await rt.get(O.downloadUrl,{responseType:"arraybuffer",timeout:3e4,headers:{Connection:"close"}});F=Buffer.from(K.data).toString("base64");break}catch(K){if(M--,M===0)throw K;R.warn(v.dim(` - Temporary network error downloading ${O.name}. Retrying... (${5-M}/5)`)),await new Promise(H=>setTimeout(H,2e3))}if(O.type==="ios_cert"&&!x)s.IOS_DIST_P12=F,O.password?(s.IOS_P12_PASSWORD=O.password,R.info(v.dim(` - Injected ${O.name} as IOS_DIST_P12 with password from credential record`))):R.info(v.dim(` - Injected ${O.name} as IOS_DIST_P12`)),x=!0;else if(O.type==="ios_profile"&&!W)s.IOS_PROVISIONING_PROFILE=F,R.info(v.dim(` - Injected ${O.name} as IOS_PROVISIONING_PROFILE`)),W=!0;else if(O.type==="android_keystore"&&!j){s.ANDROID_KEYSTORE_BASE64=F;let K=O.keystorePassword||O.password,H=O.keyPassword||O.keystorePassword||O.password,z=O.alias||O.meta?.alias;if(K)s.ANDROID_STORE_PASSWORD=K,R.info(v.dim(" - Injected keystore password from credential record"));else{let T=["ANDROID_STORE_PASSWORD",...[m==="store"?"PRODUCTION":m==="internal"?"STAGING":"DEVELOPMENT",m.toUpperCase(),"PRODUCTION","STORE","INTERNAL","STAGING","RELEASE","DEBUG"].map(k=>`KEYSTORE_PASSWORD_${k}`),"KEYSTORE_PASSWORD"].find(k=>!!s[k]);T&&s[T]&&(s.ANDROID_STORE_PASSWORD=s[T])}if(H?(s.ANDROID_KEY_PASSWORD=H,R.info(v.dim(" - Injected key password from credential record"))):s.ANDROID_KEY_PASSWORD=s.ANDROID_STORE_PASSWORD||"",z)s.ANDROID_KEY_ALIAS=z;else{let ne=["ANDROID_KEY_ALIAS","KEYSTORE_ALIAS"].find(he=>!!s[he]);ne&&(s.ANDROID_KEY_ALIAS=s[ne])}R.info(v.dim(` - Injected ${O.name} as ANDROID_KEYSTORE_BASE64`)),j=!0}}catch(F){R.warn(`Failed to download credential ${O.name}: ${F.message}`)}}if(e.platform==="android"){let y=e.buildProfile||"production",I=Be(d,y)||{},j=((I.android||{}).versionCode??I.androidVersionCode??d.android?.versionCode??d.expo?.android?.versionCode)==="auto",O=e.autoVersion||j&&e.distribution==="store";if(j&&!O&&R.info(v.dim(` Skipping Google Play versionCode lookup for ${e.distribution||"non-store"} build. Pass --auto-version to force it.`)),O){t.start("Resolving latest versionCode from Google Play...");try{let F=e.androidPackage||d.android?.package||d.expo?.android?.package||d.name,M=(D.data.credentials||[]).find(T=>T.type==="google_service_account"&&(!T.bundleId||T.bundleId===F));if(!M){let k=((await $.get(`/credentials/${n}`)).data.credentials||[]).filter(V=>V.type==="google_service_account");if(M=k.find(V=>V.type==="google_service_account"&&V.bundleId===F),!M&&k.length>0){let V=k.map(N=>N.bundleId).filter(Boolean).join(", ");throw new Error(`Google Service Account not found for package ${F}. Found service credential(s) for: ${V}.`)}}if(!M)throw new Error(`Google Service Account not found for package ${F}. Upload it under this package in Dashboard or run '${f.nameLower} credentials:service --platform android --package-name ${F}'.`);let K=await $.get(`/credentials/${M.credentialId}/download`,{params:{projectId:n}});if(K.data.status!=="success"||!K.data.downloadUrl)throw new Error("Failed to get secure download URL for service account");let z=(await rt.get(K.data.downloadUrl,{headers:{Connection:"close"}})).data,ne=await vi(F,z);if(ne==null)throw new Error("Could not retrieve any version information from Google Play.");let he=ne+1;s.ANDROID_VERSION_CODE=he.toString(),t.stop(`\u2713 Resolved versionCode: ${v.green(he)} (Latest on Play Store: ${ne})`)}catch(F){t.stop("Version resolution failed");let M=F.response?.data?.error?.message||F.message;throw new Error(`Auto-versioning failed: ${M}. Fix Google Play service account permissions or remove android.versionCode="auto".`)}}}if(e.platform==="ios"&&!e.simulator){let y=!!s.IOS_DIST_P12,I=!!s.IOS_PROVISIONING_PROFILE;if(!y||!I){let x=[...y?[]:["Distribution Certificate"],...I?[]:["Provisioning Profile"]].join(" and ");R.error(v.red(`Missing iOS credentials: ${x}`)),e.quiet&&process.exit(1);let W=e.yes||await Ui({message:"Would you like to generate these credentials now?",initialValue:!0});if(W&&!Mi(W))return await et({platform:"ios",profile:g}),e.quiet||R.info(v.green("\u2713 Credentials setup complete! Restarting build phase...")),Pt(e);e.quiet||R.info(v.yellow(`Run \`${f.nameLower} credentials\` to set up signing credentials manually.`)),process.exit(1)}}if(e.platform==="android"&&(e.distribution==="internal"||e.distribution==="store")&&!(!!s.ANDROID_KEYSTORE_BASE64||!!s.ANDROID_KEYSTORE)){R.error(v.red("Missing Android credentials: Signing Keystore")),e.quiet&&process.exit(1);let I=e.yes||await Ui({message:"Would you like to automatically create and upload an Android Keystore for this profile now?",initialValue:!0});if(I&&!Mi(I))return await et({platform:"android",profile:g}),e.quiet||R.info(v.green("\u2713 Android Keystore setup complete! Restarting build phase...")),Pt(e);e.quiet||R.info(v.yellow(`Run \`${f.nameLower} credentials --platform android\` to set up a signing keystore manually.`)),process.exit(1)}}catch(m){R.warn(`Failed to resolve credentials: ${m.message}`)}}let w=!!(e.local&&e.buildId),U=!!(e.local||e.sshHost),b=!U&&!w;if(w){R.info(v.magenta("\u{1F3D7}\uFE0F Runner Mode: Executing isolated build task..."));let m=await Gt({...e,interactive:!1},i,s,n,{branch:u,version:p,summary:B,buildType:E});await L(m),process.exit(0)}async function L(m){if(n&&m.length>0){let D=Vt(),y=[];e.quiet||D.start("Uploading artifacts to Dashboard...");try{for(let I of m){let x=ye.basename(I),W=re.readFileSync(I),j=ye.extname(x).toLowerCase(),O="application/octet-stream",F=await $.post(`/builds/${n}/${i}/artifact-upload-url`,{fileName:x,fileType:O});if(F.data.status!=="success")throw new Error(`Failed to get upload URL for ${x}`);let M=!1;for(let K=1;K<=3;K++)try{await rt.put(F.data.uploadUrl,W,{headers:{"Content-Type":O},maxBodyLength:1/0,maxContentLength:1/0,timeout:12e4}),M=!0;break}catch(H){if(R.warn(v.yellow(`Artifact upload attempt ${K}/3 failed (${H.code||H.message})`)),K<3)await new Promise(z=>setTimeout(z,3e3*K));else throw H}M&&y.push({name:x,url:F.data.downloadUrl,size:W.length,type:j.substring(1)})}e.quiet||D.stop("Artifacts uploaded.")}catch(I){e.quiet||D.stop("Failed to upload artifacts."),R.error(v.red(`Upload error: ${I.message}`));try{await $.patch(`/builds/${n}/${i}`,{status:"completed",artifacts:m.map(x=>ye.basename(x)),endTime:Date.now()})}catch(x){R.warn(v.yellow(`Could not set fallback build status: ${x.message}`))}return}if(n&&y.length>0)try{R.info(v.cyan(`
|
|
1005
|
+
\u{1F517} Download Links:`));for(let I of y)R.info(v.dim(` - ${I.name}: `)+v.blue.underline(I.url));await $.patch(`/builds/${n}/${i}`,{status:"success",artifacts:y,endTime:Date.now()}),st(e,{status:"success",projectId:n,buildId:i,platform:e.platform,profile:g,branch:u,version:p,buildType:E,developmentClient:!!e.developmentClient,summary:B,artifacts:y}),R.success(v.green(`
|
|
1006
|
+
\u2713 Build completed and reported to dashboard.`)),e.maestro&&!w&&await Bi(n,i,e,g)}catch(I){R.warn(v.yellow(`
|
|
1007
|
+
\u26A0\uFE0F Could not report to dashboard: ${I.message}`))}}else if(n)try{await $.patch(`/builds/${n}/${i}`,{status:"completed",endTime:Date.now()}),st(e,{status:"completed",projectId:n,buildId:i,platform:e.platform,profile:g,branch:u,version:p,buildType:E,developmentClient:!!e.developmentClient,summary:B})}catch{}}if(U){if(R.info(v.cyan(`\u{1F680} Direct Build Mode: Executing on ${e.sshHost||"local"}...`)),n&&!r){let m=process.argv.slice(3).join(" ");await $.post("/builds",{projectId:n,buildId:i,platform:e.platform,status:"building",branch:u,version:p,summary:B,startTime:o,buildType:E,buildProfile:g,buildArgs:m,simulator:!!e.simulator,developmentClient:!!e.developmentClient})}if(e.sshHost&&e.platform==="ios"){let m=await wi(e,i,s,n)}else{let m=await Gt({...e,interactive:!!e.local},i,s,n,{branch:u,version:p,summary:B,buildType:E});await L(m)}return}if(b&&(R.info(v.blue("\u{1F6F0}\uFE0F Cloud Initiator Mode: Preparing orchestration...")),!e.dryRun)){e.quiet||t.start("Zipping and uploading local source...");let m=await $.post("/builds/source-upload-url",{projectId:n,buildId:i});if(m.data.status!=="success")throw t.stop("Failed to get upload URL."),new Error("Failed to get source upload URL from API");let D=new Hi,y=re.readdirSync("."),I=["node_modules",".git","dist","build","builds",".gradle",".idea","android/build","ios/build","ios/Pods",`.${f.nameLower}_cli`];for(let j of y){if(I.includes(j))continue;re.statSync(j).isDirectory()?D.addLocalFolder(j,j):D.addLocalFile(j)}let x=D.toBuffer();e.quiet||t.message(`Uploading source (${(x.length/1024/1024).toFixed(1)} MB)...`);let W=!1;for(let j=1;j<=3;j++)try{await rt.put(m.data.uploadUrl,x,{headers:{"Content-Type":"application/zip"},maxBodyLength:1/0,maxContentLength:1/0,timeout:12e4}),W=!0;break}catch(O){if(j<3)t.message(`Upload attempt ${j} failed (${O.code||O.message}), retrying...`),await new Promise(F=>setTimeout(F,2e3*j));else throw O}if(e.quiet||t.stop("Source uploaded"),n){let j=process.argv.slice(3).join(" ");await $.post("/builds",{projectId:n,buildId:i,platform:e.platform,status:"pending",branch:u,version:p,summary:B,startTime:o,buildType:E,buildProfile:g,buildArgs:j,simulator:!!e.simulator,developmentClient:!!e.developmentClient}),R.info(v.green("\u2713 Cloud build registered."))}e.platform==="android"&&await Di(e,i,s,n,e.preBuild),e.quiet||R.info(v.cyan("\u{1F4E1} Connecting to build stream...")),await Uo(n,i,e),e.maestro&&await Bi(n,i,e,g);return}}catch(a){let s=a.message||"Build failed";a.response?.data?.message?s=a.response.data.message:a.message.includes("status code 402")?s="Insufficient wallet balance. Please add credits in the Dashboard.":a.message.includes("status code 403")&&(s="Monthly build quota exceeded. Upgrade your plan in the Dashboard."),n&&!e.local&&await l(s),R.error(v.red(`\u2717 Build failed: ${s}`)),process.exit(1)}};async function Bi(e,t,i,n){R.info(v.cyan(`
|
|
1008
|
+
\u{1F3BC} Queuing managed Maestro test...`)),await zt({projectId:e,buildId:t,platform:i.platform,profile:n,maestroFlows:i.maestroFlows,maestroDevice:i.maestroDevice,maestroRetries:i.maestroRetries,maestroRecord:i.maestroRecord,quiet:i.quiet})}function ji(e){return`${Qe}/build/${e}`}function st(e,t){if(!e.jsonOutput)return;let i=ye.resolve(e.jsonOutput),n={...t,url:t.url||ji(t.buildId),dashboardUrl:t.dashboardUrl||ji(t.buildId),updatedAt:new Date().toISOString()};try{let o=ye.dirname(i);o&&o!=="."&&re.mkdirSync(o,{recursive:!0}),re.writeFileSync(i,JSON.stringify(n,null,2))}catch(o){R.warn(v.yellow(`Could not write build metadata JSON: ${o.message}`))}}async function Uo(e,t,i){let n=Vt(),o="pending",r=0,l=0;for(i.quiet||n.start("Connecting to build stream...");;){try{let s=(await $.get(`/builds/${e}/${t}`)).data.build;if(s){if(o=s.status,o==="building")i.quiet||n.message("Build in progress...");else if(o==="failed")i.quiet||n.stop("Build failed."),st(i,{status:"failed",projectId:e,buildId:t,platform:i.platform,profile:s.buildProfile,buildType:s.buildType,developmentClient:!!s.developmentClient,version:s.version,summary:s.summary,error:s.error||"Unknown error",artifacts:s.artifacts||[]}),R.error(v.red(`
|
|
1009
|
+
\u2717 Build failed: ${s.error||"Unknown error"}`)),process.exit(1);else if(o==="completed"||o==="success"){i.quiet||n.stop("Build successful!"),st(i,{status:o,projectId:e,buildId:t,platform:i.platform,profile:s.buildProfile,buildType:s.buildType,developmentClient:!!s.developmentClient,version:s.version,summary:s.summary,artifacts:s.artifacts||[]}),R.success(v.green(`
|
|
1010
|
+
\u2713 Build completed successfully!`));try{i.quiet||(R.info(v.magenta(`
|
|
1011
|
+
\u{1F4F1} Installation Hub:`)),R.info(v.dim(" - View & Install Build: ")+v.white.underline(`${Qe}/build/${t}`)))}catch{}return}else if(o!=="pending"){i.quiet||n.stop(`Build status: ${o}`);return}}try{let d=(await $.get(`/builds/${e}/${t}/logs`)).data;if(d&&typeof d=="string"&&!i.quiet){let u=d.split(`
|
|
1012
|
+
`);if(u.length>r){for(let p=r;p<u.length;p++)u[p].trim()&&console.log(v.dim(` ${u[p]}`));r=u.length}}}catch{}l=0}catch{l++,l>10&&(n.stop("Connection lost."),R.error(v.red(`
|
|
1013
|
+
\u2717 Lost connection to Dashboard API.`)),process.exit(1))}await new Promise(a=>setTimeout(a,3e3))}}import Mo from"http";import{execSync as Pe,spawn as Gi}from"child_process";import Wt from"chalk";import{log as Ye}from"@clack/prompts";import Fo from"axios";import Jt from"fs";import Ho from"os";import Yt from"path";var at=7070;function Bo(){let e=[];try{let t=Pe("adb devices -l",{stdio:"pipe"}).toString(),i=new Set;t.split(`
|
|
1014
|
+
`).forEach(n=>{if(n.includes("List of devices")||!n.trim())return;let o=n.split(/\s+/);if(o.length<2||o[1]!=="device")return;let r=o[0];i.add(r);let l=n.match(/model:([^\s]+)/);e.push({id:r,platform:"android",type:r.startsWith("emulator-")?"emulator":"physical",name:l?l[1].replace(/_/g," "):r,status:"online",details:n.trim()})})}catch{}try{let t=`${process.env.ANDROID_HOME||`${process.env.HOME}/Library/Android/sdk`}/emulator/emulator`,n=Pe(`${t} -list-avds`,{stdio:"pipe"}).toString().split(`
|
|
1015
|
+
`).filter(r=>!!r.trim()),o=e.some(r=>r.platform==="android"&&r.id.startsWith("emulator-"));n.forEach(r=>{o||e.push({id:r,platform:"android",type:"emulator",name:r.replace(/_/g," "),status:"offline",details:`Android Virtual Device: ${r}`})})}catch{}if(process.platform!=="darwin")return e;try{let t=Pe("/usr/bin/xcrun simctl list devices --json",{stdio:"pipe"}).toString(),i=JSON.parse(t);Object.entries(i.devices).forEach(([n,o])=>{o.forEach(r=>{r.isAvailable&&e.push({id:r.udid,platform:"ios",type:"simulator",name:r.name,status:r.state?.toLowerCase()==="booted"?"online":"offline",runtime:n,details:`${r.name} (${n})`})})})}catch{}try{let t=Pe("/usr/bin/xcrun devicectl list devices --json-output -",{stdio:"pipe"}).toString();(JSON.parse(t).result?.devices||[]).forEach(n=>{let o=n.connectionProperties?.transportType;(o==="wired"||o==="localNetwork")&&e.push({id:n.identifier,platform:"ios",type:"physical",name:n.deviceProperties?.name||"iPhone",status:"online",details:`${n.deviceProperties?.name||"iPhone"} (${n.model?.name||n.hardwareModel||""}) - ${o}`})})}catch{}return e}async function Ki(e){let t=[];for await(let i of e)t.push(Buffer.isBuffer(i)?i:Buffer.from(i));return t.length===0?{}:JSON.parse(Buffer.concat(t).toString("utf-8"))}async function jo(e,t){let i=await Fo({method:"GET",url:e,responseType:"stream",timeout:12e4}),n=Jt.createWriteStream(t);i.data.pipe(n),await new Promise((o,r)=>{n.on("finish",o),n.on("error",r)})}async function Go(e,t,i){let n=i||(t.toLowerCase().includes(".apk")?"android":"ios"),o=t.toLowerCase().includes(".ipa"),r=Jt.mkdtempSync(Yt.join(Ho.tmpdir(),`${at}-install-`)),l=Yt.join(r,n==="android"?"install.apk":o?"install.ipa":"install.zip");try{if(await jo(t,l),n==="android"){Pe(`adb -s ${JSON.stringify(e)} install -r ${JSON.stringify(l)}`,{stdio:"pipe"});return}if(process.platform!=="darwin")throw new Error("iOS local install requires macOS.");Pe(`unzip -o ${JSON.stringify(l)} -d ${JSON.stringify(r)}`,{stdio:"pipe"});let a="";try{a=Pe(`find ${JSON.stringify(Yt.join(r,"Payload"))} -maxdepth 1 -name "*.app" 2>/dev/null | head -n 1`,{stdio:"pipe"}).toString().trim()}catch{}if(a||(a=Pe(`find ${JSON.stringify(r)} -name "*.app" -type d | head -n 1`,{stdio:"pipe"}).toString().trim()),!a)throw new Error(`No .app bundle found inside the ${o?"IPA":"archive"}.`);try{Pe(`/usr/bin/xcrun devicectl device install app --device ${JSON.stringify(e)} ${JSON.stringify(a)}`,{stdio:"pipe"})}catch(s){try{Pe(`/usr/bin/xcrun simctl install ${JSON.stringify(e)} ${JSON.stringify(a)}`,{stdio:"pipe"})}catch{throw new Error(s.stderr?.toString().trim()||s.message||"iOS install failed.")}}}finally{Jt.rmSync(r,{recursive:!0,force:!0})}}function Ko(e,t){if(!e)throw new Error("Device id is required.");if(t==="ios"){if(process.platform!=="darwin")throw new Error("iOS Simulator launch requires macOS.");return Pe(`/usr/bin/xcrun simctl boot ${JSON.stringify(e)}`,{stdio:"pipe"}),Gi("open",["-a","Simulator"],{detached:!0,stdio:"ignore"}).unref(),"Simulator booting..."}if(t==="android"){let i=`${process.env.ANDROID_HOME||`${process.env.HOME}/Library/Android/sdk`}/emulator/emulator`;return Gi(i,["-avd",e],{detached:!0,stdio:"ignore"}).unref(),"Emulator booting in background..."}throw new Error("Invalid platform.")}async function zi(){process.platform!=="darwin"&&Ye.warn("Running on non-macOS \u2014 iOS discovery unavailable, Android only.");let e=Mo.createServer((n,o)=>{if(o.setHeader("Access-Control-Allow-Origin","*"),o.setHeader("Access-Control-Allow-Methods","GET, POST, OPTIONS"),o.setHeader("Access-Control-Allow-Headers","Content-Type, Authorization"),n.method==="OPTIONS"){o.writeHead(204),o.end();return}let r=new URL(n.url||"/",`http://localhost:${at}`);if(n.method==="GET"&&r.pathname==="/local/devices"){try{let l=Bo();o.writeHead(200,{"Content-Type":"application/json"}),o.end(JSON.stringify({status:"success",targets:l}))}catch(l){o.writeHead(500,{"Content-Type":"application/json"}),o.end(JSON.stringify({status:"error",message:l.message}))}return}if(n.method==="POST"&&r.pathname==="/install-local"){t(n,o);return}if(n.method==="POST"&&r.pathname==="/local/boot"){i(n,o);return}o.writeHead(404),o.end()}),t=async(n,o)=>{try{let{deviceId:r,artifactUrl:l,platform:a}=await Ki(n);if(!r||!l){o.writeHead(400,{"Content-Type":"application/json"}),o.end(JSON.stringify({status:"error",message:"deviceId and artifactUrl are required"}));return}await Go(r,l,a),o.writeHead(200,{"Content-Type":"application/json"}),o.end(JSON.stringify({status:"success",message:`Installed on ${r}`}))}catch(r){o.writeHead(500,{"Content-Type":"application/json"}),o.end(JSON.stringify({status:"error",message:r.message||"Local install failed"}))}},i=async(n,o)=>{try{let{id:r,platform:l}=await Ki(n),a=Ko(r,l);o.writeHead(200,{"Content-Type":"application/json"}),o.end(JSON.stringify({status:"success",message:a}))}catch(r){o.writeHead(500,{"Content-Type":"application/json"}),o.end(JSON.stringify({status:"error",message:r.message||"Local device launch failed"}))}};e.listen(at,"127.0.0.1",()=>{Ye.success(Wt.green(`Local device agent running on http://localhost:${at}`)),Ye.info(Wt.dim("Keep this running while using the Install Hub on the dashboard.")),Ye.info(Wt.dim("Press Ctrl+C to stop."))}),e.on("error",n=>{n.code==="EADDRINUSE"?Ye.error(`Port ${at} is already in use \u2014 agent may already be running.`):Ye.error(`Agent error: ${n.message}`),process.exit(1)}),await new Promise(()=>{})}import{createRequire as Ps}from"module";import{text as Vo,password as Wo,spinner as Yo,isCancel as Yi}from"@clack/prompts";import Qt from"chalk";import lt from"fs";import Vi from"path";import zo from"os";var qt=Vi.join(zo.homedir(),f.configDir),Xt=Vi.join(qt,"config.json");function Zt(){if(!lt.existsSync(Xt))return{};try{return JSON.parse(lt.readFileSync(Xt,"utf-8"))}catch{return{}}}function Wi(e){lt.existsSync(qt)||lt.mkdirSync(qt,{recursive:!0});let i={...Zt(),...e};lt.writeFileSync(Xt,JSON.stringify(i,null,2))}async function Ji(){let e=Zt(),t=await Vo({message:"Enter your email:",placeholder:"user@example.com",initialValue:e.lastLoginEmail,validate(o){if(o.length===0)return"Email is required!"}});if(Yi(t))return;let i=await Wo({message:"Enter your password:",validate(o){if(o.length===0)return"Password is required!"}});if(Yi(i))return;let n=Yo();n.start("Authenticating...");try{let r=await(await fetch(`${At}/login`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({username:t,password:i})})).json();r.status==="success"&&r.user.token?(di({id:r.user.id,email:t,token:r.user.token,refreshToken:r.user.refreshToken}),Wi({lastLoginEmail:t}),n.stop(Qt.green("Login successful!"))):n.stop(Qt.red("Login failed: "+(r.message||"Unknown error")))}catch(o){n.stop(Qt.red("Network error: "+o.message))}}import{outro as Jo,select as qo,spinner as Xo,isCancel as Zo}from"@clack/prompts";import $t from"chalk";import ei from"fs";import Qo from"path";async function qi(){if(!fe()){console.log($t.red(`You are not logged in. Run \`${f.nameLower} login\` first.`));return}let t=Xo();t.start("Fetching projects...");try{let{data:i}=await $.get("/projects");if(t.stop("Projects loaded."),i.status!=="success"||!i.projects||i.projects.length===0){console.log($t.yellow(`No projects found. Run \`${f.nameLower} init\` to create one.`));return}let n=i.projects.map(p=>({value:p.projectId,label:`${p.name} (${p.slug})`})),o=await qo({message:"Select a project to link:",options:n});if(Zo(o))return;let r=Qo.join(process.cwd(),f.configFileName),l={};if(ei.existsSync(r))try{l=JSON.parse(ei.readFileSync(r,"utf-8"))}catch{}let a=i.projects.find(p=>p.projectId===o),s=l.android?.package||Te("android"),c=l.ios?.bundleIdentifier||Te("ios"),d=l.submit?.production?.android||{},u={projectId:o,name:a?.name,slug:a?.slug,scheme:a?.slug?.toLowerCase()||"app",android:{package:s||""},ios:{bundleIdentifier:c||""},build:{development:{environment:"development",distribution:"internal"},staging:{environment:"staging",distribution:"internal"},production:{environment:"production",distribution:"store"}},submit:{production:{android:{...d,track:d.track||"internal",releaseStatus:d.releaseStatus||"completed"},ios:{ascAppId:l.submit?.production?.ios?.ascAppId||"1234567890",appleTeamId:l.submit?.production?.ios?.appleTeamId||"ABC123DEFG"}}}};ei.writeFileSync(r,JSON.stringify(u,null,2)),Jo($t.green(`Linked to project ${u.name} (${u.slug})`))}catch(i){t.stop($t.red("Error fetching projects: "+i.message))}}import{outro as er,text as Dt,select as tr,spinner as ir,isCancel as ct}from"@clack/prompts";import dt from"chalk";import nr from"fs";import or from"path";import{randomUUID as rr}from"crypto";async function Xi(){if(!fe()){console.log(dt.red(`You are not logged in. Run \`${f.nameLower} login\` first.`));return}let t=await Dt({message:"Project Name:",placeholder:"My Awesome App",validate(a){if(a.length===0)return"Name is required!"}});if(ct(t))return;let i=await Dt({message:"Project Slug (URL friendly):",placeholder:"my-awesome-app",validate(a){if(a.length===0)return"Slug is required!";if(!/^[a-z0-9-]+$/.test(a))return"Slug must be lowercase alphanumeric with dashes."}});if(ct(i))return;let n=await tr({message:"Platform:",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"},{value:"web",label:"Web"},{value:"all",label:"All Platforms"}]});if(ct(n))return;let o="";if(n==="android"||n==="all"){let a=Te("android");if(o=await Dt({message:"Android Package Name:",initialValue:a||"",placeholder:"com.example.app",validate(s){if(s.length===0)return"Package name is required for Android!"}}),ct(o))return}let r="";if(n==="ios"||n==="all"){let a=Te("ios");if(r=await Dt({message:"iOS Bundle Identifier:",initialValue:a||"",placeholder:"com.example.app",validate(s){if(s.length===0)return"Bundle ID is required for iOS!"}}),ct(r))return}let l=ir();l.start("Creating project...");try{let a=rr(),c={projectId:a,name:t,slug:i,storageType:"managed",platforms:n==="all"?["android","ios","web"]:[n]},{data:d}=await $.post("/projects",c);if(d.status==="success"){l.stop(dt.green("Project created successfully!"));let u=or.join(process.cwd(),f.configFileName);nr.writeFileSync(u,JSON.stringify({projectId:a,name:t,slug:i,...o?{android:{package:o}}:{},...r?{ios:{bundleIdentifier:r}}:{},build:{development:{environment:"development",distribution:"internal"},staging:{environment:"staging",distribution:"internal"},production:{environment:"production",distribution:"store"}},submit:{production:{android:{track:"internal",releaseStatus:"completed"},ios:{ascAppId:"1234567890",appleTeamId:"ABC123DEFG",...r?{bundleId:r}:{}}}}},null,2)),er(dt.green(`Initialized project ${t} and linked locally!`))}else l.stop(dt.red("creation failed: "+d.message))}catch(a){l.stop(dt.red("Network error: "+a.message))}}import{spinner as Qi,log as Se}from"@clack/prompts";import Rt from"chalk";import Zi from"fs";import sr from"path";async function en(e,t){let i=fe();if(!i){Se.error(`You are not logged in. Run \`${f.nameLower} login\` first.`);return}let n=sr.join(process.cwd(),f.configFileName);if(!Zi.existsSync(n)){Se.error(`No ${f.configFileName} found. Run \`${f.nameLower} init\` or \`${f.nameLower} link\` first.`);return}let o;try{o=JSON.parse(Zi.readFileSync(n,"utf-8"))}catch{Se.error(`Failed to parse ${f.configFileName}`);return}let{projectId:r}=o;if(!r){Se.error(`${f.configFileName} is missing projectId.`);return}e==="set"?await ar(r,t,i):e==="list"?await lr(r,i):Se.error(`Unknown env action: ${e}. Use 'set' or 'list'.`)}async function ar(e,t,i){if(t.length===0){Se.error(`Usage: ${f.nameLower} env set KEY=VALUE [KEY2=VALUE2 ...]`);return}let n=Qi();n.start("Setting environment variables...");let o=0,r=0;for(let l of t){let[a,...s]=l.split("="),c=s.join("=");if(!a||c===void 0){Se.warn(`Invalid format for argument: ${l}. Expected KEY=VALUE.`),r++;continue}try{let d={key:a.trim(),value:c,type:"env",environment:"global",visibility:"secret"},{data:u}=await $.post(`/projects/${e}/secrets`,d);u.status==="success"?o++:(Se.error(`Failed to set ${a}: ${u.message}`),r++)}catch(d){Se.error(`Network error setting ${a}: ${d.message}`),r++}}n.stop(`Set ${o} variable(s). ${r>0?`${r} failed.`:""}`)}async function lr(e,t){let i=Qi();i.start("Fetching environment variables...");try{let{data:n}=await $.get(`/projects/${e}/secrets`);if(n.status==="success"){i.stop("Fetched variables.");let o=n.secrets||[];o.length===0?Se.info("No environment variables found for this project."):(Se.info(Rt.bold("Environment Variables (Global & Scoped):")),o.forEach(r=>{let l=r.visibility==="plain"?r.value:"********";console.log(` ${Rt.cyan(r.key)} = ${l} ${Rt.gray(`[${r.environment}]`)}`)}))}else i.stop(Rt.red(`Failed to fetch variables: ${n.message}`))}catch(n){i.stop("Failed to fetch variables."),Se.error(`Network error: ${n.message}`)}}import{spinner as pt,text as ut,select as ii,isCancel as Ue,cancel as ni}from"@clack/prompts";import se from"chalk";import ie from"fs";import Me from"path";import{spawn as nn}from"child_process";import on from"axios";import oi from"os";import cr from"crypto";async function rn(e){let t=pt(),i=fe(),n=`./${f.configFileName}`;if(!ie.existsSync(n)){pe(`No ${f.configFileName} found. Run \`${f.nameLower} init\` or \`${f.nameLower} link\` first.`);return}let o=JSON.parse(ie.readFileSync(n,"utf-8")),{projectId:r}=o,l=e.profile||e.buildProfile||"production";if(!r){pe(`${f.configFileName} is missing projectId.`);return}Ce(se.dim(`Submit for project: ${o.name||r} | Profile: ${l}`));let a=e.platform;if(!a){let w=await ii({message:"Select platform to submit:",options:[{value:"ios",label:"iOS (App Store Connect / TestFlight)"},{value:"android",label:"Android (Google Play Console)"}]});if(Ue(w)){ni("Operation cancelled");return}a=w}let s=await fr(r,a,e,i?.token);if(!s)return;Ce(`Using artifact: ${se.green(Me.basename(s))} `);let c=a==="android"?dr(o,l):void 0;t.start("Fetching submission credentials from Dashboard...");let d;try{let U=(await $.get(`/credentials/${r}`)).data.credentials||[];if(a==="android"&&!c){t.stop("Package name missing"),pe("Could not resolve Android package name. Set android.package in mach.config.json/app.json.");return}let b=U.filter(L=>a==="ios"?L.type==="asc_api_key":L.type==="google_service_account"&&L.bundleId===c);if(b.length===0){t.stop("Credentials missing"),pe(a==="android"?`No Google Play service credential found for package ${c}.`:`No Service Credentials found for ${a}.`),Ce(a==="android"?`Use '${f.nameLower} credentials:service --platform android --package-name ${c}' or upload it under that package in the Dashboard.`:`Use '${f.nameLower} credentials:service --platform ${a}' or use the Dashboard to upload them.`);return}if(b.length===1)d=b[0],t.stop(`Using: ${d.name}`);else{t.stop("Multiple credentials found");let L=await ii({message:`Choose a ${a==="ios"?"App Store Connect":"Google Play"} credential:`,options:b.map(m=>({value:m.credentialId,label:m.name,hint:`${m.keyId?`ID: ${m.keyId}`:""} ${m.issuerId?`(Issuer: ${m.issuerId.substring(0,8)}...)`:""}`}))});if(Ue(L)){ni("Submission cancelled");return}d=b.find(m=>m.credentialId===L),Ce(`Using selected: ${se.green(d.name)}`)}}catch(w){t.stop("Failed to fetch credentials"),pe(`API Error: ${w.message} `);return}let u=ie.mkdtempSync(Me.join(oi.tmpdir(),`${f.nameLower}-submit-`)),p=d.keyId||d.meta?.keyId,g=d.issuerId||d.meta?.issuerId,E=d.type==="asc_api_key"?`AuthKey_${p}.p8`:"service-account.json",P=Me.join(u,E);t.start("Downloading secure key...");try{let w=await $.get(`/credentials/${d.credentialId}/download`,{params:{projectId:r}});if(w.data.status!=="success"||!w.data.downloadUrl)throw new Error("Failed to get secure download URL");let U=await on.get(w.data.downloadUrl,{responseType:"arraybuffer"});ie.writeFileSync(P,Buffer.from(U.data)),t.stop("Key downloaded to secure temp storage")}catch(w){t.stop("Download failed"),pe(`Failed to download key: ${w.message}`);try{ie.rmSync(u,{recursive:!0,force:!0})}catch{}return}Ce(se.blue(`Initiating ${a==="ios"?"TestFlight":"Google Play"} submission...`));let C=a==="android"?e.track||o.submit?.[l]?.android?.track||o.submit?.production?.android?.track||"internal":void 0,B=a==="android"?pr(o,l,e.releaseStatus):void 0;try{if(a==="ios"){if(!p){let b=await ut({message:"Enter App Store Connect Key ID (e.g. 2X948D...):",validate:L=>L.length>0?void 0:"Key ID is required"});if(Ue(b))return;p=b}if(!g||g==="undefined"){let b=await ut({message:"Enter App Store Connect Issuer ID (Found on ASC Keys page):",validate:L=>L.length>0?void 0:"Issuer ID is required"});if(Ue(b))return;g=b}Ce(`Using ASC Key ID: ${p}`),Ce(`Using ASC Issuer ID: ${g}`);let w=ur(o,l),U=await mr(s,P,g,p,w);if(U&&U.apiKeyJsonPath)throw Ce(se.cyan(`
|
|
1016
|
+
[DIAGNOSTIC] API key written to: ${U.apiKeyJsonPath}
|
|
1017
|
+
`)),new Error("fastlane pilot execution failed");tn(`${a==="ios"?"App Store":"Google Play"} submission successful!`)}else await gr(s,P,C,c,B),tn("Google Play submission successful!")}catch(w){pe(`Submission failed: ${w.message}`)}finally{yr(u),s.includes(`${f.nameLower}-artifact-`)}}function dr(e,t){if(e.submit?.[t]?.android?.package)return e.submit[t].android.package;let i=pi(e,t);if(i)return i;let n=Me.join(process.cwd(),"app.json");if(ie.existsSync(n))try{return JSON.parse(ie.readFileSync(n,"utf-8")).expo?.android?.package}catch{}let o=Me.join(process.cwd(),"app.config.json");if(ie.existsSync(o))try{let r=JSON.parse(ie.readFileSync(o,"utf-8"));return r.expo?.android?.package||r.android?.package}catch{}}function ur(e,t){return e.submit?.[t]?.ios?.bundleIdentifier?e.submit[t].ios.bundleIdentifier:e.submit?.[t]?.ios?.bundleId?e.submit[t].ios.bundleId:fi(e,t)}function pr(e,t,i){return i||e.submit?.[t]?.android?.releaseStatus||e.submit?.production?.android?.releaseStatus||"completed"}async function fr(e,t,i,n){let o=i.buildId?"id":i.latest?"latest":null;if(!o){let l=await ii({message:"Select artifact source:",options:[{value:"latest",label:`Latest Production Build (${f.name})`},{value:"id",label:`Input Build ID (${f.name})`},{value:"url",label:"Remote URL"},{value:"local",label:"Local File Path"}]});if(Ue(l))return ni("Operation cancelled"),null;o=l}if(o==="local"){let l=await ut({message:"Enter path to artifact (.ipa/.aab):",validate:a=>{if(!ie.existsSync(a))return"File not found";if(t==="ios"&&!a.endsWith(".ipa"))return"Must be an .ipa file";if(t==="android"&&!a.endsWith(".aab"))return"Must be an .aab file"}});return Ue(l)?null:l}let r=pt();if(o==="latest"){let l=i.profile||i.buildProfile;r.start(`Fetching latest${l?` ${l}`:""} build...`);try{let a=await $.get(`/builds/${e}`,{params:{limit:50}});if(a.data.status!=="success")throw new Error(a.data.message);let s=a.data.builds||[],c=l?.toLowerCase(),d=b=>b.platform?.toLowerCase()===t.toLowerCase()&&b.status?.toLowerCase()==="success",u=b=>c?[b.buildProfile,b.profile,b.profileName,b.buildType].filter(Boolean).some(L=>String(L).toLowerCase()===c):!0,p=s.filter(b=>d(b)&&u(b)),g=p.find(b=>b.buildType?.toLowerCase()==="store"||b.distribution?.toLowerCase()==="store")||p[0],E=s.some(b=>b.platform?.toLowerCase()===t.toLowerCase()&&b.status?.toLowerCase()==="success");if(!g)return r.stop("No suitable build found"),pe(l&&E?`No successful ${t} builds found for profile "${l}".`:"No successful builds found for this platform."),null;r.stop(`Found build: ${g.buildId}`);let P=g.artifacts||[];if(P.length===0||P.every(b=>!(b.url||b.downloadUrl)))try{let b=await $.get(`/builds/${e}/${g.buildId}/artifacts`);b.data.status==="success"&&b.data.artifacts?.length>0?(P=b.data.artifacts.map(L=>({...L,url:L.url||L.downloadUrl})),console.log(se.cyan(` [RECOVERY] Fetched ${P.length} artifact(s) with download URLs.`))):console.log(se.yellow(" [RECOVERY] /artifacts endpoint returned 0 artifacts."))}catch(b){console.log(se.red(` [RECOVERY] /artifacts fetch failed: ${b.message}`))}let B=t==="ios",w=P.find(b=>{let L=(b.type||"").toLowerCase(),m=(b.name||"").toLowerCase();if(console.log(se.dim(` - Checking: ${b.name} (Type: ${b.type}, HasLink: ${!!(b.url||b.downloadUrl)})`)),L)return L===(B?"ipa":"aab");let D=B?".ipa":".aab",y=(b.url||b.downloadUrl||"").toLowerCase();return m.endsWith(D)||y.includes(D)});if(!w||!(w.url||w.downloadUrl))return pe("Build found but artifact URL is missing."),null;let U=w.url||w.downloadUrl;return await ti(U,B?"ios":"android")}catch(a){return r.stop("Fetch failed"),pe(`API Error: ${a.message}`),null}}if(o==="id"){let l=i.buildId||await ut({message:"Enter Build ID:",validate:a=>a.length<5?"Invalid ID":void 0});if(Ue(l))return null;r.start("Fetching build...");try{let a=await $.get(`/build/${l}`);if(a.data.status!=="success")throw new Error(a.data.message);let s=a.data.build;if(!s)throw new Error("Build not found");let c=t==="ios",d=s.artifacts?.find(u=>{if(u.type)return u.type===(c?"ipa":"aab");let p=c?".ipa":".aab";return u.name&&u.name.endsWith(p)||u.url&&u.url.includes(p)});return!d||!d.url?(r.stop("Missing artifact"),pe("Artifact URL not found on build record."),null):(r.stop(`Found build: ${s.buildId}`),await ti(d.url,c?"ios":"android"))}catch(a){return r.stop("Fetch failed"),pe(a.message),null}}if(o==="url"){let l=await ut({message:"Enter Artifact URL:",validate:a=>a.startsWith("http")?void 0:"Must be a valid URL"});return Ue(l)?null:await ti(l,t)}return null}async function ti(e,t,i=3){let n=pt();n.start("Downloading artifact...");let o=ie.mkdtempSync(Me.join(oi.tmpdir(),`${f.nameLower}-artifact-`)),r=`app.${t==="ios"?"ipa":"aab"}`,l=Me.join(o,r);for(let a=1;a<=i;a++)try{a>1&&(n.message(`Downloading artifact (Retry ${a}/${i})...`),await new Promise(d=>setTimeout(d,2e3*a)));let s=ie.createWriteStream(l),c=await on({url:e,method:"GET",responseType:"stream",timeout:6e4});return await new Promise((d,u)=>{c.data.pipe(s);let p=!1;c.data.on("error",g=>{p||(p=!0,s.close(),u(g))}),s.on("finish",()=>{p||d()}),s.on("error",g=>{p||(p=!0,u(g))})}),n.stop("Download complete"),l}catch(s){if(a===i)throw n.stop("Download failed"),s}throw new Error("Download failed after retries")}async function mr(e,t,i,n,o){let r=pt();if(o&&Ce(`Bundled ID: ${se.green(o)}`),!i||!n)throw pe(`Missing credentials: issuerId=${i}, keyId=${n}. Check your Dashboard.`),new Error("Missing ASC API Key Metadata (IssuerID or KeyID)");let l=ie.readFileSync(t,"utf8"),a;try{a=cr.createPrivateKey(l).export({type:"pkcs8",format:"pem"})}catch{Ce("Key normalization failed, falling back to manual re-wrapping..."),a=`-----BEGIN PRIVATE KEY-----
|
|
1018
|
+
${(l.replace(/-----BEGIN[^-]*-----/g,"").replace(/-----END[^-]*-----/g,"").replace(/\s+/g,"").match(/.{1,64}/g)||[]).join(`
|
|
1018
1019
|
`)}
|
|
1019
|
-
-----END PRIVATE KEY-----`}console.log(
|
|
1020
|
-
[DIAGNOSTIC] Key ID: ${
|
|
1021
|
-
`)),r.start("Uploading to TestFlight (pilot)...");let s=
|
|
1022
|
-
`);let
|
|
1023
|
-
`))}else
|
|
1024
|
-
Profile Settings:`)),
|
|
1025
|
-
Environment Variables:`)),Object.entries(
|
|
1026
|
-
`+
|
|
1027
|
-
`),"Registered Devices")}catch(
|
|
1028
|
-
`),
|
|
1029
|
-
`),
|
|
1030
|
-
`),
|
|
1031
|
-
`),
|
|
1032
|
-
`);/__DEV__/.test(
|
|
1033
|
-
Running expo prebuild for deeper analysis...`));try{
|
|
1034
|
-
Skipping manifest/plist checks \u2014 no android/ios dirs. Use --prebuild to generate them.`)),r;for(let
|
|
1035
|
-
`)),
|
|
1036
|
-
`));for(let s of c)ee.error(X.red(`${X.bold(s.name)} ${X.dim(`(${s.arch})`)}`)),ee.info(X.dim(` PT_LOAD alignment: 2**${Math.log2(s.align)} (${s.align} bytes, needs 2**14 = ${On})`))}return a.length>0&&(console.log(""),ee.success(X.green(`${a.length} librar${a.length===1?"y":"ies"} correctly aligned (2**14 or higher).`))),console.log(""),c.length===0?(ee.success(X.green.bold("ELF Verification Successful. APK is 16KB compatible.")),!0):(ee.error(X.red.bold(`Found ${c.length} unaligned lib${c.length===1?"":"s"} (arm64-v8a/x86_64 libs need to be aligned).`)),console.log(""),ee.info(X.yellow("To fix this:")),ee.info(X.dim(" 1. Rebuild with NDK r28+ which defaults to 16KB page alignment")),ee.info(X.dim(" 2. Or set -DANDROID_SUPPORT_FLEXIBLE_PAGE_SIZES=ON in CMake")),ee.info(X.dim(" 3. Update third-party libraries that ship prebuilt .so files")),ee.info(X.dim(" 4. After rebuilding: zipalign -p -f -v 16 input.apk output.apk")),console.log(""),ee.info(X.dim("Reference: https://developer.android.com/guide/practices/page-sizes")),!1)}catch(o){return i.stop("Analysis failed."),ee.error(X.red(`Failed to analyze APK: ${o.message}`)),!1}finally{try{Te.rmSync(t,{recursive:!0,force:!0})}catch{}}}function Xr(e){let n=Te.openSync(e,"r");try{let i=Buffer.alloc(64);if(Te.readSync(n,i,0,64,0),!i.subarray(0,4).equals(qr))return null;let t=i[4]===2,o=i[5]===1,r=(p,m)=>o?p.readUInt16LE(m):p.readUInt16BE(m),c=(p,m)=>o?p.readUInt32LE(m):p.readUInt32BE(m),a=(p,m)=>Number(o?p.readBigUInt64LE(m):p.readBigUInt64BE(m)),s,d,l;t?(s=a(i,32),d=r(i,54),l=r(i,56)):(s=c(i,28),d=r(i,42),l=r(i,44));let u=null;for(let p=0;p<l;p++){let m=Buffer.alloc(d);if(Te.readSync(n,m,0,d,s+p*d),c(m,0)!==Jr)continue;let $;t?$=a(m,48):$=c(m,28),$>0&&(u===null||$<u)&&(u=$)}return u??0}catch{return null}finally{Te.closeSync(n)}}function Nn(e){let n=[];if(!Te.existsSync(e))return n;let i=Te.readdirSync(e,{withFileTypes:!0});for(let t of i){let o=Je.join(e,t.name);t.isDirectory()?n.push(...Nn(o)):t.name.endsWith(".so")&&n.push(o)}return n}function Zr(e){return e.includes("arm64-v8a")?"arm64-v8a":e.includes("x86_64")?"x86_64":"unknown"}var xn=async e=>{if(pe()||(Ae.error(Re.red(`You are not logged in. Run \`${f.nameLower} login\` first.`)),process.exit(1)),e.apk){await ts(e);return}let i=process.cwd(),t=Lt.join(i,"package.json");ht.existsSync(t)||(Ae.error(Re.red("No package.json found. Run this command from a project root.")),process.exit(1));let o=JSON.parse(ht.readFileSync(t,"utf-8")),r=!!(o.dependencies?.expo||o.devDependencies?.expo);e.json||(Ae.info(Re.dim(`Project: ${o.name||"unknown"} v${o.version||"0.0.0"}`)),Ae.info(Re.dim(`Type: ${r?"Expo":"Bare React Native"}`)),Ae.info(""));let c={json:e.json,fix:e.fix,category:e.category,severity:e.severity,prebuild:e.prebuild},a=await Rn(i,c);e.json?console.log(JSON.stringify(vn(a,o),null,2)):wn(a,e.severity);let s=a.some(l=>l.findings.some(u=>u.severity==="critical")),d=a.some(l=>l.findings.some(u=>u.severity==="high"));(s||d)&&process.exit(1)},Tn=["16kb"];async function ts(e){let n=e.category?.toLowerCase();n&&!Tn.includes(n)&&(Ae.error(Re.red(`Unknown APK check category: "${n}"`)),Ae.info(Re.dim(`Available APK checks: ${Tn.join(", ")}`)),process.exit(1));let i=await is(e.apk);i||process.exit(1);let t=!n,o=!1;(t||n==="16kb")&&(await Cn(i)||(o=!0)),o&&process.exit(1)}async function is(e){if(e.startsWith("build:")){let i=e.slice(6);return await ns(i)}if(e.startsWith("http://")||e.startsWith("https://"))return await Ln(e);let n=Lt.resolve(e);return ht.existsSync(n)?n:(Ae.error(Re.red(`APK file not found: ${n}`)),null)}async function ns(e){let n=kn();n.start(`Fetching APK from build ${e}...`);try{let i=await D.get(`/build/${e}`);if(i.data.status!=="success")throw new Error(i.data.message);let t=i.data.build;if(!t)throw new Error("Build not found");let o=t.artifacts?.find(r=>r.type?r.type==="apk":r.name?.endsWith(".apk")||r.url?.includes(".apk"));return!o||!o.url?(n.stop("No APK artifact found"),Ae.error(Re.red("This build does not have an APK artifact.")),Ae.info(Re.dim("Make sure the build produced an APK (not just an AAB).")),null):(n.stop(`Found build: ${t.buildId||e}`),await Ln(o.url))}catch(i){return n.stop("Failed to fetch build"),Ae.error(Re.red(i.message)),null}}async function Ln(e){let n=kn();n.start("Downloading APK...");try{let i=ht.mkdtempSync(Lt.join(Qr.tmpdir(),`${f.nameLower}-audit-`)),t=Lt.join(i,"app.apk"),o=await es.get(e,{responseType:"arraybuffer"});ht.writeFileSync(t,o.data);let r=(o.data.length/(1024*1024)).toFixed(1);return n.stop(`Downloaded APK (${r} MB)`),t}catch(i){return n.stop("Download failed"),Ae.error(Re.red(`Failed to download APK: ${i.message}`)),null}}var ss=console.log;console.log=()=>{};rs();console.log=ss;ue(ae.bgCyan.black(f.cliTag("Production Build Orchestrator")));var cs=as(import.meta.url),ls=cs("../package.json"),Y=new os;Y.name(f.nameLower).description(`${f.name} CLI: Powerful Cloud Infrastructure Tools`).version(ls.version).option("-y, --yes","Automatically answer yes to all prompts",!1).option("--quiet","Suppress non-essential output",!1);Y.command("agent").description("Start local device discovery agent for the Install Hub (port 7070)").action(async()=>{await xi()});Y.command("host").description("Setup AWS S3 static hosting and CloudFront").action(async()=>{ue(ae.bgCyan.black(f.cliTag("Hosting"))),await ui()});Y.command("sitemap").description("Generate sitemap.xml from Expo Router app structure").option("-o, --output <path>","Output path for sitemap.xml","./public/sitemap.xml").action(async e=>{ue(ae.bgCyan.black(f.cliTag("Sitemap Generator"))),await gi(e)});Y.command("build").description("Run a build on a cloud provider (AWS Spot Instances)").argument("[platform]","Target platform (android, ios)").option("--platform <os>","Target platform alias (android, ios) [Optional]").option("--repo <url>","Git Repository URL").option("--branch <name>","Git Branch").option("--ami <id>","AMI ID").option("--bucket <name>","S3 Bucket for artifacts").option("--region <region>","AWS Region").option("--aws-profile <name>","AWS Credentials Profile").option("-p, --build-profile <name>","Build Profile (e.g. production, staging)","production").option("--profile <name>","Build Profile (alias for --build-profile)").option("--dry-run","Generate User Data script without launching").option("--keep-instance","Do not terminate the instance after build").option("--subnet <id>","VPC Subnet ID to launch the instance in").option("--security-group <id>","VPC Security Group ID to use").option("--ssh-host <host>","Remote host for iOS build (SSH)").option("--ssh-user <user>","SSH username for remote host").option("--ssh-key <path>","Path to private SSH key for remote host").option("--ios-scheme <scheme>","iOS Scheme to build").option("--ios-team-id <id>","Apple Development Team ID").option("--ios-configuration <config>","Xcode configuration (Release/Debug)").option("--ios-export-method <method>","Export method (ad-hoc, app-store, development, enterprise)").option("--ios-api-key-id <id>","App Store Connect API Key ID").option("--ios-api-key-issuer <id>","App Store Connect API Key Issuer ID").option("--ios-api-key-path <path>","Path to App Store Connect API Key (.p8) file").option("--simulator","Build for iOS Simulator (no signing required)").addOption(new Un("--build-id <id>","Internal build ID").hideHelp()).addOption(new Un("--project-id <id>","Internal project ID").hideHelp()).option("--local","Run build on local machine").option("--auto-version","Automatically fetch and increment versionCode from Google Play").option("--verbose","Enable verbose logging").option("--json-output <path>","Write build metadata JSON to a file for CI/CD").option("-y, --yes","Automatically answer yes to all prompts",!1).option("--quiet","Suppress non-essential output",!1).action(async(e,n)=>{let i=Y.opts();n.yes=n.yes||i.yes,n.quiet=n.quiet||i.quiet,n.platform=e||n.platform,n.buildProfile=n.profile||n.buildProfile,n.quiet||ue(ae.bgCyan.black(f.cliTag("Cloud Build"))),await bt(n)});Y.command("update").description("Deploy an Over-The-Air (OTA) update to your live channel").option("--branch <name>","Channel or Branch to deploy to (e.g., production)","production").action(async e=>{ue(ae.bgCyan.black(f.cliTag("OTA Update"))),await Xi(e)});Y.command("submit").description("Automated Store Submission (App Store / Google Play)").option("--platform <os>","Target platform (ios/android)").option("-p, --profile <name>","Build/submission profile to submit from (e.g. production, preprod)").option("--track <track>","Google Play Track (internal, alpha, beta, production)").option("--latest","Use the latest successful build for submission").option("--build-id <id>","Use a specific build ID for submission").action(async e=>{ue(ae.bgCyan.black(f.cliTag("Store Submission"))),await Yi(e)});Y.command("login").description(`Login to ${f.name} Dashboard`).action(async()=>{ue(ae.bgCyan.black(f.cliTag("Login"))),await Fi()});Y.command("link").description(`Link local directory to a ${f.name} Project`).action(async()=>{ue(ae.bgCyan.black(f.cliTag("Link Project"))),await Hi()});Y.command("me").description("Display currently logged in user details").action(async()=>{await Qi()});Y.command("init").description(`Create a new ${f.name} Project`).action(async()=>{ue(ae.bgCyan.black(f.cliTag("Init Project"))),await Bi()});Y.command("env").description("Manage Environment Variables").argument("<action>","Action to perform: set or list").argument("[args...]","Key=Value pairs for set action").action(async(e,n)=>{ue(ae.bgCyan.black(f.cliTag("Env Manager"))),await Ki(e,n)});Y.command("start").description("Start the development server (Metro)").option("-p, --build-profile <name>","Build profile (e.g. development, staging)","development").option("--tunnel","Use ngrok tunnel").option("--lan","Use LAN IP").option("--localhost","Use localhost").option("-c, --clear","Clear Metro cache").option("--port <number>","Port to listen on").option("--ios","Start on iOS").option("--android","Start on Android").option("--web","Start on Web").action(async e=>{ue(ae.bgCyan.black(f.cliTag("Dev Server"))),await tn(e)});Y.command("config").description("Show resolved configuration for a profile").option("-p, --profile <name>","Build profile to resolve","development").option("--json","Output as JSON").action(async e=>{await nn(e)});Y.command("credentials").description("Unified, interactive credential management (iOS/Android)").option("-p, --profile <name>","Build profile (production, staging, development)").option("--force","Force recreate certificates (nuke existing on Apple Portal)",!1).action(async e=>{let{credentialsMainCommand:n}=await import("./credentials-5FL2C6KC.js");await n(e)});Y.command("credentials:setup").description("Automated credential provisioning (iOS/Android) [Legacy]").requiredOption("--platform <os>","Platform: ios or android").option("--profile <name>","Build profile (production, staging, development)").option("--bundle-id <id>","Bundle ID / Package Name (optional, auto-detected)").option("--team-id <id>","Apple Team ID (iOS only)").option("--key-alias <alias>","Android keystore alias (optional, auto-generated)").option("--aws-profile <name>","AWS Credentials Profile (for S3 storage)").option("--force","Force recreate certificates (nuke existing on Apple Portal)",!1).action(async e=>{ue(ae.bgCyan.black(f.cliTag("Credentials Setup"))),await Xe(e),Mn(ae.green("Done!"))});Y.command("credentials:service").description("Upload Service Credentials (ASC API Key / Google Service JSON) [Legacy]").requiredOption("--platform <os>","Platform: ios or android").option("--file <path>","Path to credential file (.p8 or .json)").option("--issuer-id <id>","ASC API Key Issuer ID (iOS only)").option("--key-id <id>","ASC API Key ID (iOS only)").option("--bundle-id <id>","Bundle identifier / Android package name to attach this service credential to").option("--package-name <name>","Android package name to attach this service credential to").action(async e=>{ue(ae.bgCyan.black(f.cliTag("Service Credentials"))),await li(e),Mn(ae.green("Done!"))});var si=Y.command("device").description("Manage registered iOS test devices");si.command("register").description("Register a connected iOS device or enter UDID manually").option("--udid <udid>","Device UDID (skip auto-detection)").option("--name <name>","Device name").action(async e=>{await Dt("register",e)});si.command("list").description("List all registered devices").action(async()=>{await Dt("list",{})});si.command("remove").description("Remove a registered device").option("--udid <udid>","Device UDID to remove").action(async e=>{await Dt("remove",e)});Y.command("audit").description("Run automated security audit on the project or APK").option("--apk <path>","Path to APK file (runs APK diagnostics like 16KB alignment)").option("--json","Output results as JSON (for CI/CD)").option("--fix","Auto-apply fixes where possible").option("--category <name>","Run only a specific check category (e.g. 16kb, permissions, secrets)").option("--severity <level>","Minimum severity to display (critical, high, medium, low, info)").option("--prebuild","Run expo prebuild for deeper manifest/plist analysis").action(async e=>{ue(ae.bgCyan.black(f.cliTag(e.apk?"APK Audit":"Security Audit"))),await xn(e)});var ds=new Set(["login"]);Y.hook("preAction",(e,n)=>{let i=n.name();ds.has(i)||ci()});Y.on("command:*",()=>{console.error(`Invalid command: %s
|
|
1020
|
+
-----END PRIVATE KEY-----`}console.log(se.yellow(`
|
|
1021
|
+
[DIAGNOSTIC] Key ID: ${n}`)),console.log(se.yellow(`[DIAGNOSTIC] Issuer ID: ${i}`)),console.log(se.yellow(`[DIAGNOSTIC] Key Checksum (Start): ${a.substring(0,45).replace(/\n/g,"\\n")}`)),console.log(se.yellow(`[DIAGNOSTIC] Key Checksum (End): ${a.substring(a.length-28).replace(/\n/g,"\\n")}
|
|
1022
|
+
`)),r.start("Uploading to TestFlight (pilot)...");let s=Me.join(oi.tmpdir(),`api_key_${n}.json`),c={key_id:n,issuer_id:i,key:a,in_house:!1};return ie.writeFileSync(s,JSON.stringify(c,null,2)),new Promise((d,u)=>{let p=nn("fastlane",["pilot","upload","--ipa",e,"--api_key_path",s,"--skip_submission","true","--skip_waiting_for_build_processing","true"],{stdio:"inherit",env:sn()});p.on("close",g=>{if(g!==0)r.stop("Pilot failed"),d({apiKeyJsonPath:s});else{r.stop("IPA uploaded to TestFlight");try{ie.unlinkSync(s)}catch{}d({apiKeyJsonPath:null})}}),p.on("error",g=>{try{ie.unlinkSync(s)}catch{}r.stop("Pilot execution error"),u(g)})})}async function gr(e,t,i="internal",n,o="completed"){let r=pt();r.start(`Uploading to Google Play ${i} track with ${o} release status (supply)...`);let l=["supply","--aab",e,"--json_key",t,"--track",i,"--release_status",o];n&&n!=="*"&&l.push("--package_name",n),await new Promise((a,s)=>{let c=nn("fastlane",l,{stdio:["inherit","pipe","pipe"],env:sn()}),d="";c.stdout.on("data",u=>{let p=u.toString();d+=p,process.stdout.write(p)}),c.stderr.on("data",u=>{let p=u.toString();d+=p,process.stderr.write(p)}),c.on("error",u=>{r.stop("Supply execution error"),s(u)}),c.on("close",u=>{if(u===0){r.stop(`AAB uploaded to ${i} track`),a();return}r.stop("Supply failed"),s(new Error(hr(d,i,n)))})})}function sn(){return{...process.env,FASTLANE_SKIP_UPDATE_CHECK:"1",FASTLANE_HIDE_CHANGELOG:"1"}}function hr(e,t,i){if(e.includes("does not allow any existing users to upgrade"))return["Google Play rejected this release because the uploaded AAB is not an upgrade for existing users.",`Package: ${i||"unknown"} | Track: ${t}`,"Build a new Android artifact with a higher versionCode, then submit that build.",`Recommended: ${f.nameLower} build --platform android --profile production --auto-version`,`Then: ${f.nameLower} submit --latest --platform android --profile production --track ${t}`].join(`
|
|
1023
|
+
`);let n=e.match(/Google Api Error:[^\n]+/);return n?n[0]:"fastlane supply execution failed"}function yr(e){try{ie.existsSync(e)&&ie.rmSync(e,{recursive:!0,force:!0})}catch{}}function pe(e){console.log(se.red(`\u274C ${e}`))}function Ce(e){console.log(se.gray(`\u2022 ${e}`))}function tn(e){console.log(se.green(`\u2713 ${e}`))}import{spinner as Sr,log as je,outro as Er}from"@clack/prompts";import ri from"chalk";import an from"fs";import Ar from"path";import{execSync as br}from"child_process";import Ir from"adm-zip";import _r from"axios";import{randomUUID as Pr}from"crypto";async function ln(e){je.info(ri.magenta("\u{1F680} Starting Over-The-Air (OTA) Update via Mach..."));let t=ve();(!t||!t.projectId)&&(je.error(`No ${f.configFileName} found or missing projectId. Run \`mach link\` first.`),process.exit(1));let i=t.projectId,n=e.branch||"production",o="1.0.0";try{o=JSON.parse(an.readFileSync("./package.json","utf-8")).version||"1.0.0"}catch{je.warn("Could not read package.json version. Defaulting to 1.0.0")}let r=Sr();r.start(`Compiling JavaScript bundles for OTA (Channel: ${n}, Runtime: ${o})...`);try{br("npx expo export --platform all",{stdio:"ignore"})}catch(c){r.stop("Compilation failed."),je.error(`Failed to export JS bundles using Expo: ${c.message}`),process.exit(1)}r.message("Zipping artifact payload...");let l=Ar.join(process.cwd(),"dist");an.existsSync(l)||(r.stop("Missing dist folder."),je.error("The `dist` directory was not created. Export failed."),process.exit(1));let a=new Ir;a.addLocalFolder(l,"dist");let s=a.toBuffer();r.message("Uploading payload to Mach Cloud...");try{let c=Pr(),d=await $.post("/builds/source-upload-url",{projectId:i,buildId:c});if(d.data.status!=="success")throw new Error("Could not secure upload bucket URL");let{uploadUrl:u,key:p}=d.data;await _r.put(u,s,{headers:{"Content-Type":"application/zip"},maxBodyLength:1/0,maxContentLength:1/0}),r.message(`Promoting Update to ${n}...`),await $.post("/updates/publish",{projectId:i,channelName:n,runtimeVersion:o,platform:"android",updateId:`${c}-android`,manifestKey:p}),await $.post("/updates/publish",{projectId:i,channelName:n,runtimeVersion:o,platform:"ios",updateId:`${c}-ios`,manifestKey:p}),r.stop("Update Live!"),Er(ri.green(`\u2713 OTA Update natively shipped to the '${n}' channel.`)),je.info(ri.dim(`Any app running runtime '${o}' will download this bundle smoothly.`))}catch(c){r.stop("Update failed during Cloud Sync."),je.error(`Upload error: ${c.message}`),process.exit(1)}}import{intro as $r,outro as cn,log as Je}from"@clack/prompts";import Ne from"chalk";async function dn(){$r(Ne.blue(`${f.name} CLI - User Profile`));let e=fe();if(!e){Je.warn(Ne.yellow("You are not logged in.")),Je.info(`Run \`${f.nameLower} login\` to authenticate.`),cn();return}Je.info(`${Ne.bold("Logged in as:")} ${Ne.green(e.email)}`);try{await $.get("/projects");let i=fe().token.split(".");if(i.length===3){let n=JSON.parse(Buffer.from(i[1],"base64").toString());if(n.exp){let o=new Date(n.exp*1e3),r=new Date,l=o.getTime()-r.getTime();if(l>0){let a=Math.round(l/6e4),s=(a/60).toFixed(1);Je.info(`${Ne.bold("Token status:")} Valid (Expires in ~${s}h / ${a}m)`)}else Je.warn(`${Ne.bold("Token status:")} ${Ne.red("Expired")} (Auto-refresh failed)`)}}}catch{Je.warn(`${Ne.bold("Token status:")} ${Ne.red("Unreachable")} (Session might be truly expired)${At}`)}cn(Ne.blue("---"))}import{spawn as wr}from"child_process";import{log as Fe}from"@clack/prompts";import Ee from"chalk";import vr from"fs";import Dr from"net";async function Rr(e){return new Promise(t=>{let i=Dr.createServer();i.once("error",n=>{n.code==="EADDRINUSE"?t(!0):t(!1)}),i.once("listening",()=>{i.close(),t(!1)}),i.listen(e,"0.0.0.0")})}async function un(e,t=20){let i=e;for(;i<e+t;){if(!await Rr(i))return i;i++}throw new Error(`Could not find an available port after ${t} attempts starting from ${e}.`)}var pn=async e=>{Fe.info(Ee.blue(`Starting ${f.name} Dev Orchestrator...`));let t=ve(),i=e.buildProfile||"development",n=t?Be(t,i):null,o={...process.env};if(t?.projectId)try{Fe.info(Ee.dim(`Fetching managed secrets for profile: ${i}...`));let u=await $.get(`/projects/${t.projectId}/secrets/export?env=${i}`);u.data?.status==="success"&&u.data.secrets&&(Object.assign(o,u.data.secrets),Fe.info(Ee.magenta(`\u2713 Injected secrets from ${f.name} Dashboard.`)))}catch{Fe.warn("Could not fetch managed secrets. Running with local env only.")}t&&Object.assign(o,Ke(t,f.envPrefix)),n&&(Object.assign(o,Ke(n,`${f.envPrefix}PROFILE_`)),n.env&&Object.assign(o,n.env));let r=!1;try{let u=JSON.parse(vr.readFileSync("package.json","utf-8"));r=!!(u.dependencies?.expo||u.devDependencies?.expo)}catch{Fe.warn("Could not parse package.json. Defaulting to Bare React Native mode.")}let l=Number(e.port||n?.port||8081),a=await un(l);a!==l&&Fe.info(Ee.yellow(`Port ${l} is busy. ${f.name} is using ${a} instead.`));let s=process.platform==="win32"?"npx.cmd":"npx",c=[];if(r?(c=["expo","start","--port",String(a)],e.clear&&c.push("--clear"),e.tunnel&&c.push("--tunnel"),e.lan&&c.push("--lan"),e.localhost&&c.push("--localhost"),e.ios&&c.push("--ios"),e.android&&c.push("--android"),e.web&&c.push("--web")):(c=["react-native","start","--port",String(a)],e.clear&&c.push("--clear")),r){let u=[`${Ee.cyan("i")} open iOS simulator`,`${Ee.cyan("a")} open Android emulator/device`,`${Ee.cyan("w")} open web`,`${Ee.cyan("r")} reload app`];Fe.info([Ee.bold("Launch controls"),...u.map(p=>` ${p}`),"",Ee.dim("Direct launch: mach start --ios | --android | --web"),Ee.dim(`Metro URL: http://localhost:${a}`)].join(`
|
|
1024
|
+
`))}else Fe.info(Ee.dim(`Metro URL: http://localhost:${a}`));let d=wr(s,c,{stdio:"inherit",env:o});return new Promise((u,p)=>{d.on("exit",g=>{g===0?u():p(new Error(`Dev server exited with code ${g}`))}),d.on("error",g=>{p(g)})})};import{log as me}from"@clack/prompts";import $e from"chalk";var fn=async e=>{let t=ve();t||(me.error($e.red(`No ${f.configFileName} found in the current directory.`)),process.exit(1));let i=e.profile||"development",n=Be(t,i);if(e.json){console.log(JSON.stringify({project:t,resolved:n},null,2));return}me.info($e.bgBlue.white(` Resolved ${f.name} Config [${i}] `)),me.info($e.dim("----------------------------------------")),me.info(`${$e.blue("Project ID:")} ${t.projectId}`),me.info(`${$e.blue("Name:")} ${t.name}`),me.info(`${$e.blue("Scheme:")} ${t.scheme}`),n?(me.info($e.dim(`
|
|
1025
|
+
Profile Settings:`)),me.info(`${$e.cyan("Distribution:")} ${n.distribution||"none"}`),me.info(`${$e.cyan("Development Client:")} ${n.developmentClient||"false"}`),n.env&&Object.keys(n.env).length>0&&(me.info($e.dim(`
|
|
1026
|
+
Environment Variables:`)),Object.entries(n.env).forEach(([o,r])=>{me.info(` ${o}=${r}`)}))):me.warn(`Profile '${i}' not found.`),me.info($e.dim("----------------------------------------"))};import{log as De,spinner as gt,text as mn,select as gn,confirm as Or,isCancel as ft,cancel as mt,outro as ht,note as Cr}from"@clack/prompts";import q from"chalk";import{execSync as Nr}from"child_process";async function Tr(){try{let e=Nr("xcrun devicectl list devices --json-output -",{stdio:["pipe","pipe","pipe"]}).toString();return(JSON.parse(e).result?.devices||[]).filter(n=>n.connectionProperties?.transportType==="wired"||n.connectionProperties?.transportType==="localNetwork").map(n=>({udid:n.identifier,name:n.deviceProperties?.name||"Unknown Device",model:n.hardwareProperties?.marketingName||"iPhone"}))}catch{return[]}}async function kr(e){let t=e.udid,i=e.name,n="";if(!t){let r=gt();r.start("Scanning for connected iOS devices...");let l=await Tr();if(r.stop(l.length>0?`Found ${l.length} device(s)`:"No devices detected"),l.length===1)t=l[0].udid,i=i||l[0].name,n=l[0].model,De.info(`Detected: ${q.bold(i)} (${q.dim(t.substring(0,12)+"...")})`);else if(l.length>1){let a=await gn({message:"Select a device to register:",options:l.map(c=>({value:c.udid,label:`${c.name} (${c.model})`,hint:c.udid.substring(0,12)+"..."}))});if(ft(a)){mt("Cancelled");return}t=a;let s=l.find(c=>c.udid===t);i=i||s.name,n=s.model}else{De.info(q.dim("No connected devices found. Enter UDID manually."));let a=await mn({message:"Device UDID:",placeholder:"00008101-XXXXXXXXXXXX",validate(s){if(s.length<10)return"UDID seems too short"}});if(ft(a)){mt("Cancelled");return}t=a}}if(!i){let r=await mn({message:"Device name:",placeholder:"Nitesh's iPhone",validate(l){if(l.length===0)return"Name is required"}});if(ft(r)){mt("Cancelled");return}i=r}let o=gt();o.start("Registering device...");try{await $.post("/devices",{udid:t,name:i,platform:"ios",model:n||void 0,addedVia:"cli"}),o.stop(q.green("Device registered!")),De.info(` ${q.bold("Name:")} ${i}`),De.info(` ${q.bold("UDID:")} ${q.dim(t)}`)}catch(r){o.stop(q.red("Failed to register device")),De.error(r.response?.data?.message||r.message)}ht(q.blue("---"))}async function xr(){let e=gt();e.start("Fetching registered devices...");try{let i=(await $.get("/devices")).data.devices||[];if(e.stop(`${i.length} device(s) registered`),i.length===0){De.info(q.dim(`No devices registered yet. Run \`${f.nameLower} device register\` to add one.`)),ht(q.blue("---"));return}let n=i.map(o=>{let r=new Date(o.createdAt).toLocaleDateString();return` ${q.bold(o.name.padEnd(24))} ${q.dim(o.udid.padEnd(28))} ${q.cyan(o.addedVia.padEnd(10))} ${q.dim(r)}`});Cr(` ${q.bold("Name".padEnd(24))} ${"UDID".padEnd(28)} ${"Via".padEnd(10)} Date
|
|
1027
|
+
`+n.join(`
|
|
1028
|
+
`),"Registered Devices")}catch(t){e.stop(q.red("Failed to fetch devices")),De.error(t.response?.data?.message||t.message)}ht(q.blue("---"))}async function Lr(e){let t=e.udid;if(!t){let o=gt();o.start("Fetching registered devices...");try{let l=(await $.get("/devices")).data.devices||[];if(o.stop(`${l.length} device(s) found`),l.length===0){De.info(q.dim("No devices to remove.")),ht(q.blue("---"));return}let a=await gn({message:"Select device to remove:",options:l.map(s=>({value:s.udid,label:s.name,hint:s.udid.substring(0,12)+"..."}))});if(ft(a)){mt("Cancelled");return}t=a}catch(r){o.stop(q.red("Failed to fetch devices")),De.error(r.response?.data?.message||r.message);return}}let i=await Or({message:`Remove device ${q.dim(t.substring(0,12)+"...")}?`});if(ft(i)||!i){mt("Cancelled");return}let n=gt();n.start("Removing device...");try{await $.delete(`/devices/${encodeURIComponent(t)}`),n.stop(q.green("Device removed"))}catch(o){n.stop(q.red("Failed to remove device")),De.error(o.response?.data?.message||o.message)}ht(q.blue("---"))}async function wt(e,t){switch(e){case"register":await kr(t);break;case"list":await xr();break;case"remove":await Lr(t);break;default:De.error(`Unknown action: ${e}`)}}import{log as be,spinner as Kn}from"@clack/prompts";import we from"chalk";import Mt from"path";import Et from"fs";import hs from"os";import ys from"axios";var Ae=(r=>(r.CRITICAL="critical",r.HIGH="high",r.MEDIUM="medium",r.LOW="low",r.INFO="info",r))(Ae||{}),Re=(s=>(s.PERMISSIONS="permissions",s.SECRETS="secrets",s.DEPENDENCIES="dependencies",s.STORAGE="storage",s.NETWORK="network",s.DEBUG="debug",s.MANIFEST="manifest",s.ATS="ats",s))(Re||{});import{spinner as kn,log as St}from"@clack/prompts";import ge from"chalk";import{execSync as ss}from"child_process";import xn from"fs";import Ln from"path";import He from"fs";import yt from"path";import{execSync as Ur}from"child_process";var hn={"android.permission.READ_PHONE_STATE":{severity:"high",description:"Can read phone number, IMEI, carrier info"},"android.permission.CALL_PHONE":{severity:"high",description:"Can make calls without user interaction"},"android.permission.SEND_SMS":{severity:"high",description:"Can send SMS without user interaction"},"android.permission.READ_SMS":{severity:"high",description:"Can read user SMS messages"},"android.permission.READ_CONTACTS":{severity:"medium",description:"Can read user contacts"},"android.permission.WRITE_CONTACTS":{severity:"medium",description:"Can modify user contacts"},"android.permission.READ_CALL_LOG":{severity:"high",description:"Can read call history"},"android.permission.CAMERA":{severity:"medium",description:"Camera access"},"android.permission.RECORD_AUDIO":{severity:"medium",description:"Microphone access"},"android.permission.ACCESS_FINE_LOCATION":{severity:"medium",description:"Precise GPS location"},"android.permission.ACCESS_COARSE_LOCATION":{severity:"medium",description:"Approximate location"},"android.permission.ACCESS_BACKGROUND_LOCATION":{severity:"high",description:"Background location tracking"},"android.permission.READ_EXTERNAL_STORAGE":{severity:"medium",description:"Read files on device"},"android.permission.WRITE_EXTERNAL_STORAGE":{severity:"medium",description:"Write files on device"},"android.permission.READ_MEDIA_IMAGES":{severity:"low",description:"Read photos"},"android.permission.READ_MEDIA_VIDEO":{severity:"low",description:"Read videos"},"android.permission.SYSTEM_ALERT_WINDOW":{severity:"high",description:"Draw overlays on other apps"},"android.permission.REQUEST_INSTALL_PACKAGES":{severity:"high",description:"Can install APKs"}},Mr={NSCameraUsageDescription:{severity:"medium",description:"Camera access declared"},NSMicrophoneUsageDescription:{severity:"medium",description:"Microphone access declared"},NSLocationWhenInUseUsageDescription:{severity:"medium",description:"Location (in-use) declared"},NSLocationAlwaysUsageDescription:{severity:"high",description:"Background location declared"},NSContactsUsageDescription:{severity:"medium",description:"Contacts access declared"},NSCalendarsUsageDescription:{severity:"low",description:"Calendar access declared"},NSPhotoLibraryUsageDescription:{severity:"low",description:"Photo library access declared"}};function Fr(e){try{let i=Ur("npx expo config --type introspect --json 2>/dev/null",{cwd:e,encoding:"utf-8",timeout:3e4});return JSON.parse(i)}catch{}let t=yt.join(e,"app.json");if(He.existsSync(t))try{let i=JSON.parse(He.readFileSync(t,"utf-8"));return i.expo||i}catch{}return null}function Hr(e){let t=[],i=yt.join(e,"node_modules");if(!He.existsSync(i))return t;let n=/<uses-permission\s+android:name="([^"]+)"/g;function o(r,l){let a=yt.join(r,"android","src","main","AndroidManifest.xml");if(!He.existsSync(a))return;let s=He.readFileSync(a,"utf-8"),c;for(;(c=n.exec(s))!==null;)t.push({pkg:l,permission:c[1]});n.lastIndex=0}for(let r of He.readdirSync(i)){if(r.startsWith("."))continue;let l=yt.join(i,r);if(r.startsWith("@")){if(!He.statSync(l).isDirectory())continue;for(let a of He.readdirSync(l))o(yt.join(l,a),`${r}/${a}`)}else o(l,r)}return t}async function yn(e,t){let i=[],n=1,o=Fr(e),r=o?.android?.permissions||[],l=o?.android?.blockedPermissions||[];for(let c of r){let d=hn[c];d&&i.push({id:`PERM-${String(n++).padStart(3,"0")}`,title:`${c.split(".").pop()} declared`,description:d.description,severity:d.severity,category:"permissions",file:"app.config.ts",recommendation:"Remove from permissions if not needed, or add justification."})}let a=Hr(e);for(let{pkg:c,permission:d}of a){let u=hn[d];u&&(l.includes(d)||r.includes(d)||i.push({id:`PERM-${String(n++).padStart(3,"0")}`,title:`${d.split(".").pop()} injected by ${c}`,description:`${u.description}. Auto-injected via ${c} AndroidManifest.xml`,severity:u.severity,category:"permissions",file:`node_modules/${c}/android/src/main/AndroidManifest.xml`,recommendation:`Add "${d}" to blockedPermissions if not needed.`,autoFixable:!0}))}let s=o?.ios?.infoPlist||{};for(let[c,d]of Object.entries(Mr))c in s&&i.push({id:`PERM-${String(n++).padStart(3,"0")}`,title:`iOS: ${c} declared`,description:d.description,severity:d.severity,category:"permissions",file:"app.config.ts",recommendation:`Remove ${c} from infoPlist if the app does not use this capability.`});return{category:"permissions",label:"Permission Audit",findings:i,durationMs:0}}import si from"fs";import vt from"path";var Br=[{id:"SEC-001",pattern:/(['"`])(?:sk|pk)_(?:live|test)_[a-zA-Z0-9]{20,}\1/g,severity:"critical",label:"Stripe API Key"},{id:"SEC-002",pattern:/(['"`])AIza[0-9A-Za-z\-_]{35}\1/g,severity:"high",label:"Google API Key"},{id:"SEC-003",pattern:/(['"`])AKIA[0-9A-Z]{16}\1/g,severity:"critical",label:"AWS Access Key ID"},{id:"SEC-004",pattern:/-----BEGIN (?:RSA |EC )?PRIVATE KEY-----/g,severity:"critical",label:"Private key in source"},{id:"SEC-005",pattern:/(?:ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9_]{36,}/g,severity:"high",label:"GitHub Token"},{id:"SEC-006",pattern:/xox[bpors]-[a-zA-Z0-9-]{10,}/g,severity:"high",label:"Slack Token"},{id:"SEC-007",pattern:/(?:password|secret|apikey|api_key)\s*[:=]\s*['"`][^'"`\n]{8,}['"`]/gi,severity:"high",label:"Hardcoded credential"}],jr=new Set([".ts",".tsx",".js",".jsx"]),Gr=new Set(["node_modules",".expo",".git","android","ios","dist","build","__tests__","__mocks__"]);function Sn(e){let t=[],i=si.readdirSync(e,{withFileTypes:!0});for(let n of i){if(Gr.has(n.name))continue;let o=vt.join(e,n.name);n.isDirectory()?t.push(...Sn(o)):jr.has(vt.extname(n.name))&&t.push(o)}return t}function Kr(e){let t=e.trim();return t.startsWith("//")||t.startsWith("*")||t.startsWith("/*")}function zr(e){return/process\.env\./i.test(e)||/import\.meta\.env/i.test(e)}async function En(e,t){let i=[],n=vt.join(e,"src"),o=si.existsSync(n)?n:e,r=Sn(o);for(let l of r){let s=si.readFileSync(l,"utf-8").split(`
|
|
1029
|
+
`),c=vt.relative(e,l);for(let d=0;d<s.length;d++){let u=s[d];if(!Kr(u)&&!zr(u))for(let{id:p,pattern:g,severity:E,label:P}of Br)g.lastIndex=0,g.test(u)&&i.push({id:p,title:P,description:`Potential ${P.toLowerCase()} found in source code`,severity:E,category:"secrets",file:c,line:d+1,recommendation:`Move to environment variables or a secrets manager. Use \`${f.nameLower} env set\` for managed secrets.`})}}return{category:"secrets",label:"Secrets Detection",findings:i,durationMs:0}}import{execSync as Vr}from"child_process";var Wr={critical:"critical",high:"high",moderate:"medium",low:"low",info:"info"};async function An(e,t){let i=[],n=1,o;try{o=Vr("npm audit --json 2>/dev/null",{cwd:e,encoding:"utf-8",timeout:6e4})}catch(a){if(o=a.stdout||"",!o)return{category:"dependencies",label:"Dependency CVEs",findings:[],durationMs:0,error:"Failed to run npm audit. Ensure npm is available and dependencies are installed."}}let r;try{r=JSON.parse(o)}catch{return{category:"dependencies",label:"Dependency CVEs",findings:[],durationMs:0,error:"Failed to parse npm audit output."}}let l=r.vulnerabilities||{};for(let[a,s]of Object.entries(l)){let c=Wr[s.severity]||"info",d=Array.isArray(s.via)?s.via.map(u=>typeof u=="string"?u:u.title||u.name).join(", "):String(s.via);i.push({id:`DEP-${String(n++).padStart(3,"0")}`,title:`${a} \u2014 ${s.severity}`,description:`Via: ${d}. Range: ${s.range||"unknown"}`,severity:c,category:"dependencies",recommendation:s.fixAvailable?`Run \`npm audit fix\` or update ${a} to a patched version.`:"No fix available yet. Monitor for updates or evaluate alternatives.",autoFixable:!!s.fixAvailable})}return{category:"dependencies",label:"Dependency CVEs",findings:i,durationMs:0}}import Ot from"fs";import Ct from"path";var Yr=/(?:token|password|credential|secret|apiKey|api_key|session|auth|jwt|refresh_token|access_token|private_key|pin|otp)/i,bn=/AsyncStorage\s*\.\s*(?:setItem|mergeItem)\s*\(\s*['"`]([^'"`]+)['"`]/g,Jr=/from\s+['"]@react-native-async-storage\/async-storage['"]|from\s+['"]react-native['"].*AsyncStorage/,qr=new Set([".ts",".tsx",".js",".jsx"]),Xr=new Set(["node_modules",".expo",".git","android","ios","dist","build"]);function In(e){let t=[];if(!Ot.existsSync(e))return t;let i=Ot.readdirSync(e,{withFileTypes:!0});for(let n of i){if(Xr.has(n.name))continue;let o=Ct.join(e,n.name);n.isDirectory()?t.push(...In(o)):qr.has(Ct.extname(n.name))&&t.push(o)}return t}async function _n(e,t){let i=[],n=1,o=Ct.join(e,"src"),r=Ot.existsSync(o)?o:e,l=In(r);for(let a of l){let s=Ot.readFileSync(a,"utf-8");if(!Jr.test(s))continue;let c=s.split(`
|
|
1030
|
+
`),d=Ct.relative(e,a);for(let u=0;u<c.length;u++){let p=c[u];bn.lastIndex=0;let g;for(;(g=bn.exec(p))!==null;){let E=g[1];Yr.test(E)&&i.push({id:`STOR-${String(n++).padStart(3,"0")}`,title:`AsyncStorage used for "${E}"`,description:`Sensitive data key "${E}" stored in AsyncStorage (unencrypted).`,severity:"high",category:"storage",file:d,line:u+1,recommendation:"Use expo-secure-store (SecureStore) for sensitive data instead of AsyncStorage."})}}}return{category:"storage",label:"Insecure Storage",findings:i,durationMs:0}}import Nt from"fs";import Tt from"path";var Pn=/['"`](http:\/\/(?!localhost|127\.0\.0\.1|10\.|192\.168\.|0\.0\.0\.0|172\.(?:1[6-9]|2\d|3[01])\.)[^'"`\s]+)['"`]/g,Zr=/\/api\/|\/v[0-9]+\/|\/graphql|\/rest\//i,Qr=new Set([".ts",".tsx",".js",".jsx"]),es=new Set(["node_modules",".expo",".git","android","ios","dist","build","__tests__","__mocks__"]);function $n(e){let t=[];if(!Nt.existsSync(e))return t;let i=Nt.readdirSync(e,{withFileTypes:!0});for(let n of i){if(es.has(n.name))continue;let o=Tt.join(e,n.name);n.isDirectory()?t.push(...$n(o)):Qr.has(Tt.extname(n.name))&&t.push(o)}return t}async function Dn(e,t){let i=[],n=1,o=Tt.join(e,"src"),r=Nt.existsSync(o)?o:e,l=$n(r);for(let a of l){let c=Nt.readFileSync(a,"utf-8").split(`
|
|
1031
|
+
`),d=Tt.relative(e,a);for(let u=0;u<c.length;u++){let p=c[u],g=p.trim();if(g.startsWith("//")||g.startsWith("*"))continue;Pn.lastIndex=0;let E;for(;(E=Pn.exec(p))!==null;){let P=E[1],C=Zr.test(P);i.push({id:`NET-${String(n++).padStart(3,"0")}`,title:`Insecure HTTP URL${C?" (API endpoint)":""}`,description:`Plain HTTP URL found: ${P}`,severity:C?"high":"medium",category:"network",file:d,line:u+1,recommendation:"Use HTTPS instead of HTTP for all network requests."})}}}return{category:"network",label:"HTTP URLs",findings:i,durationMs:0}}import kt from"fs";import xt from"path";var Rn=/(?:debug|debugMode|devMode|enableDebug)\s*[:=]\s*true/gi,wn=/console\.(?:log|warn|info|debug)\s*\([^)]*(?:token|password|secret|credential|key|auth)/gi,ts=new Set([".ts",".tsx",".js",".jsx"]),is=new Set(["node_modules",".expo",".git","android","ios","dist","build","__tests__","__mocks__"]);function vn(e){let t=[];if(!kt.existsSync(e))return t;let i=kt.readdirSync(e,{withFileTypes:!0});for(let n of i){if(is.has(n.name))continue;let o=xt.join(e,n.name);n.isDirectory()?t.push(...vn(o)):ts.has(xt.extname(n.name))&&t.push(o)}return t}async function On(e,t){let i=[],n=1,o=xt.join(e,"src"),r=kt.existsSync(o)?o:e,l=vn(r);for(let a of l){let c=kt.readFileSync(a,"utf-8").split(`
|
|
1032
|
+
`),d=xt.relative(e,a);for(let u=0;u<c.length;u++){let p=c[u],g=p.trim();if(!(g.startsWith("//")||g.startsWith("*"))&&(Rn.lastIndex=0,Rn.test(p)&&i.push({id:`DBG-${String(n++).padStart(3,"0")}`,title:"Hardcoded debug flag",description:"Debug/dev mode enabled in source code",severity:"medium",category:"debug",file:d,line:u+1,recommendation:"Use __DEV__ or environment variables instead of hardcoded debug flags."}),wn.lastIndex=0,wn.test(p))){let E=c.slice(Math.max(0,u-3),u).join(`
|
|
1033
|
+
`);/__DEV__/.test(E)||i.push({id:`DBG-${String(n++).padStart(3,"0")}`,title:"Sensitive data in console log",description:"Console log may expose sensitive data (token, password, etc.) in production",severity:"medium",category:"debug",file:d,line:u+1,recommendation:"Wrap in __DEV__ check or remove sensitive data from console output."})}}}return{category:"debug",label:"Debug/Dev Flags",findings:i,durationMs:0}}import Cn from"fs";import ai from"path";var ns=new Set(["androidx.work.impl.background.systemjob.SystemJobService","androidx.work.impl.diagnostics.DiagnosticsReceiver","com.google.firebase.iid.FirebaseInstanceIdReceiver","com.google.android.gms.auth.api.signin.RevocationBoundService","androidx.profileinstaller.ProfileInstallReceiver","com.google.firebase.messaging.FirebaseMessagingService","com.google.android.gms.measurement.AppMeasurementService","com.google.android.gms.measurement.AppMeasurementJobService"]);function os(e){let t=[ai.join(e,"android","app","src","main","AndroidManifest.xml"),ai.join(e,"android","AndroidManifest.xml")];for(let i of t)if(Cn.existsSync(i))return i;return null}async function Nn(e,t){let i=[],n=1,o=os(e);if(!o)return{category:"manifest",label:"Android Manifest",findings:[],durationMs:0,error:"No AndroidManifest.xml found. Run with --prebuild or run `expo prebuild` first."};let r=Cn.readFileSync(o,"utf-8"),l=ai.relative(e,o),a=/<(activity|service|receiver|provider)\s+([^>]*?)(?:\/>|>)/gs,s;for(;(s=a.exec(r))!==null;){let c=s[1],d=s[2],p=d.match(/android:name="([^"]+)"/)?.[1]||"unknown";if(ns.has(p))continue;let g=/android:exported="true"/.test(d),E=/android:permission="/.test(d);g&&!E&&i.push({id:`MAN-${String(n++).padStart(3,"0")}`,title:`Exported ${c}: ${p.split(".").pop()}`,description:`${p} is exported=true without android:permission protection`,severity:"medium",category:"manifest",file:l,recommendation:'Set android:exported="false" or add an android:permission attribute.'})}return/android:allowBackup="true"/.test(r)&&i.push({id:`MAN-${String(n++).padStart(3,"0")}`,title:"allowBackup is enabled",description:'android:allowBackup="true" allows data extraction via ADB backup',severity:"medium",category:"manifest",file:l,recommendation:'Set android:allowBackup="false" via expo-build-properties plugin.',autoFixable:!0}),/android:debuggable="true"/.test(r)&&i.push({id:`MAN-${String(n++).padStart(3,"0")}`,title:"App is debuggable",description:'android:debuggable="true" allows attaching a debugger in production',severity:"critical",category:"manifest",file:l,recommendation:"Ensure debuggable is false for production builds. This is usually set automatically for release builds."}),{category:"manifest",label:"Android Manifest",findings:i,durationMs:0}}import Lt from"fs";import li from"path";function rs(e){let t=li.join(e,"ios");if(!Lt.existsSync(t))return null;let i=Lt.readdirSync(t,{withFileTypes:!0});for(let n of i){if(!n.isDirectory()||n.name==="Pods"||n.name.startsWith("."))continue;let o=li.join(t,n.name,"Info.plist");if(Lt.existsSync(o))return o}return null}async function Tn(e,t){let i=[],n=1,o=rs(e);if(!o)return{category:"ats",label:"iOS ATS Config",findings:[],durationMs:0,error:"No Info.plist found. Run with --prebuild or run `expo prebuild` first."};let r=Lt.readFileSync(o,"utf-8"),l=li.relative(e,o),a=r.match(/<key>NSAppTransportSecurity<\/key>\s*<dict>([\s\S]*?)<\/dict>/);if(a){let s=a[1];/<key>NSAllowsArbitraryLoads<\/key>\s*<true\s*\/>/.test(s)&&i.push({id:`ATS-${String(n++).padStart(3,"0")}`,title:"ATS disabled \u2014 NSAllowsArbitraryLoads",description:"App Transport Security is completely disabled. All HTTP connections are allowed.",severity:"critical",category:"ats",file:l,recommendation:"Remove NSAllowsArbitraryLoads or set to false. Use domain-specific exceptions only if absolutely necessary."});let c=s.match(/<key>NSExceptionDomains<\/key>\s*<dict>([\s\S]*?)<\/dict>/);if(c){let d=c[1].match(/<key>([^<]+)<\/key>/g);if(d)for(let u of d){let p=u.replace(/<\/?key>/g,"");p!=="NSExceptionDomains"&&i.push({id:`ATS-${String(n++).padStart(3,"0")}`,title:`ATS exception: ${p}`,description:`ATS exception configured for ${p}`,severity:"low",category:"ats",file:l,recommendation:`Verify that the ATS exception for ${p} is necessary. Use HTTPS where possible.`})}}}return{category:"ats",label:"iOS ATS Config",findings:i,durationMs:0}}var as=[{category:"permissions",label:"Permission Audit",fn:yn,requiresPrebuild:!1},{category:"secrets",label:"Secrets Detection",fn:En,requiresPrebuild:!1},{category:"dependencies",label:"Dependency CVEs",fn:An,requiresPrebuild:!1},{category:"storage",label:"Insecure Storage",fn:_n,requiresPrebuild:!1},{category:"network",label:"HTTP URLs",fn:Dn,requiresPrebuild:!1},{category:"debug",label:"Debug/Dev Flags",fn:On,requiresPrebuild:!1},{category:"manifest",label:"Android Manifest",fn:Nn,requiresPrebuild:!0},{category:"ats",label:"iOS ATS Config",fn:Tn,requiresPrebuild:!0}];async function Un(e,t){let i=as;t.category&&(i=i.filter(l=>l.category===t.category),i.length===0&&(St.error(ge.red(`Unknown category: ${t.category}`)),St.info(ge.dim(`Available: ${Object.values(Re).join(", ")}`)),process.exit(1)));let n=i.filter(l=>!l.requiresPrebuild),o=i.filter(l=>l.requiresPrebuild),r=[];for(let l of n){let a=kn();a.start(ge.dim(`Running ${l.label}...`));try{let s=Date.now(),c=await l.fn(e,t);c.durationMs=Date.now()-s,r.push(c);let d=c.findings.length;a.stop(d>0?ge.yellow(`${l.label} \u2014 ${d} finding(s)`):ge.green(`${l.label} \u2014 clean`))}catch(s){a.stop(ge.red(`${l.label} \u2014 error`)),r.push({category:l.category,label:l.label,findings:[],durationMs:0,error:s.message})}}if(o.length>0){let l=Ln.join(e,"android"),a=Ln.join(e,"ios"),s=xn.existsSync(l)||xn.existsSync(a);if(!s&&t.prebuild){t.json||St.info(ge.dim(`
|
|
1034
|
+
Running expo prebuild for deeper analysis...`));try{ss("npx expo prebuild --no-install",{cwd:e,stdio:"pipe"})}catch{return St.warn(ge.yellow("Prebuild failed \u2014 skipping manifest/plist checks.")),r}}else if(!s)return t.json||St.info(ge.dim(`
|
|
1035
|
+
Skipping manifest/plist checks \u2014 no android/ios dirs. Use --prebuild to generate them.`)),r;for(let c of o){let d=kn();d.start(ge.dim(`Running ${c.label}...`));try{let u=Date.now(),p=await c.fn(e,t);p.durationMs=Date.now()-u,r.push(p);let g=p.findings.length;d.stop(g>0?ge.yellow(`${c.label} \u2014 ${g} finding(s)`):ge.green(`${c.label} \u2014 clean`))}catch(u){d.stop(ge.red(`${c.label} \u2014 error`)),r.push({category:c.category,label:c.label,findings:[],durationMs:0,error:u.message})}}}return r}import te from"chalk";import{log as Q}from"@clack/prompts";var qe={critical:te.bgRed.white.bold,high:te.red.bold,medium:te.yellow.bold,low:te.blue,info:te.dim},Ut={critical:0,high:1,medium:2,low:3,info:4};function ls(e,t){if(!t)return!0;let i=Ut[t];return i===void 0?!0:Ut[e]<=i}function Mn(e,t){let i=0,n={critical:0,high:0,medium:0,low:0,info:0};for(let l of e){let a=l.findings.filter(c=>ls(c.severity,t));if(a.length===0&&!l.error)continue;if(Q.info(""),Q.info(te.bold(` ${l.label}`)+te.dim(` ${a.length} finding(s)`)),Q.info(te.dim(" "+"\u2500".repeat(60))),l.error){Q.error(te.red(` Error: ${l.error}`));continue}let s=[...a].sort((c,d)=>Ut[c.severity]-Ut[d.severity]);for(let c of s){let d=qe[c.severity](` ${c.severity.toUpperCase()} `);Q.info(` ${d} ${te.bold(c.id)} ${c.title}`),Q.info(te.dim(` ${c.description}`)),c.file&&Q.info(te.dim(` File: ${c.file}${c.line?`:${c.line}`:""}`)),Q.info(te.cyan(` Fix: ${c.recommendation}`)),Q.info(""),n[c.severity]++,i++}}Q.info(""),Q.info(te.bold(" Summary")),Q.info(te.dim(" "+"\u2500".repeat(60))),Q.info(` Total: ${te.bold(String(i))} finding(s)`),Q.info(` ${qe.critical(` ${n.critical} Critical `)} ${qe.high(` ${n.high} High `)} ${qe.medium(` ${n.medium} Medium `)} ${qe.low(` ${n.low} Low `)} ${qe.info(` ${n.info} Info `)}`);let o=n.critical>0,r=n.high>0;o||r?(Q.info(""),Q.error(te.red.bold(` FAIL \u2014 ${n.critical} critical, ${n.high} high issue(s) found`))):i>0?(Q.info(""),Q.warn(te.yellow(" PASS (with warnings) \u2014 no critical or high issues"))):(Q.info(""),Q.success(te.green.bold(" PASS \u2014 no issues found")))}function Fn(e,t){let i=e.flatMap(o=>o.findings),n={};for(let o of Object.values(Ae))n[o]=i.filter(r=>r.severity===o).length;return{version:"1.0.0",timestamp:new Date().toISOString(),project:t.name||"unknown",projectVersion:t.version||"0.0.0",summary:{total:i.length,...n},passed:n.critical===0&&n.high===0,checks:e.map(o=>({category:o.category,label:o.label,findingCount:o.findings.length,durationMs:o.durationMs,error:o.error||null})),findings:i}}import{log as ee,spinner as cs}from"@clack/prompts";import Z from"chalk";import xe from"fs";import ds from"os";import Xe from"path";import{execSync as us}from"child_process";var Hn=16384,ps=1,fs=Buffer.from([127,69,76,70]);async function Bn(e){ee.info(Z.bold.underline("16KB Page Alignment Check")),console.log("");let t=Xe.resolve(e);if(!xe.existsSync(t))return ee.error(Z.red(`APK file not found: ${t}`)),!1;if(!t.endsWith(".apk"))return ee.error(Z.red("The provided file is not an APK file.")),!1;let i=cs();i.start("Extracting and analyzing native libraries...");let n=xe.mkdtempSync(Xe.join(ds.tmpdir(),"mach-16kb-"));try{try{us(`unzip -o -q "${t}" "lib/arm64-v8a/*.so" "lib/x86_64/*.so" -d "${n}" 2>/dev/null`,{encoding:"utf-8",maxBuffer:50*1024*1024})}catch{}let o=jn(Xe.join(n,"lib"));if(o.length===0)return i.stop("Analysis complete."),ee.info(Z.yellow("No arm64-v8a or x86_64 native libraries found in the APK.")),ee.info(Z.dim("16KB alignment check only applies to arm64-v8a and x86_64 architectures.")),!0;let r=[];for(let s of o){let c=Xe.relative(n,s),d=gs(c),u=Xe.basename(s),p=ms(s);p!==null&&r.push({name:u,filePath:c,arch:d,align:p,compatible:p>=Hn})}if(i.stop("Analysis complete."),r.length===0)return ee.info(Z.yellow("No valid ELF shared libraries found.")),!0;let l=r.filter(s=>!s.compatible),a=r.filter(s=>s.compatible);if(ee.info(Z.dim(`Checked ${r.length} native librar${r.length===1?"y":"ies"}
|
|
1036
|
+
`)),l.length>0){ee.info(Z.red.bold(`Incompatible libraries:
|
|
1037
|
+
`));for(let s of l)ee.error(Z.red(`${Z.bold(s.name)} ${Z.dim(`(${s.arch})`)}`)),ee.info(Z.dim(` PT_LOAD alignment: 2**${Math.log2(s.align)} (${s.align} bytes, needs 2**14 = ${Hn})`))}return a.length>0&&(console.log(""),ee.success(Z.green(`${a.length} librar${a.length===1?"y":"ies"} correctly aligned (2**14 or higher).`))),console.log(""),l.length===0?(ee.success(Z.green.bold("ELF Verification Successful. APK is 16KB compatible.")),!0):(ee.error(Z.red.bold(`Found ${l.length} unaligned lib${l.length===1?"":"s"} (arm64-v8a/x86_64 libs need to be aligned).`)),console.log(""),ee.info(Z.yellow("To fix this:")),ee.info(Z.dim(" 1. Rebuild with NDK r28+ which defaults to 16KB page alignment")),ee.info(Z.dim(" 2. Or set -DANDROID_SUPPORT_FLEXIBLE_PAGE_SIZES=ON in CMake")),ee.info(Z.dim(" 3. Update third-party libraries that ship prebuilt .so files")),ee.info(Z.dim(" 4. After rebuilding: zipalign -p -f -v 16 input.apk output.apk")),console.log(""),ee.info(Z.dim("Reference: https://developer.android.com/guide/practices/page-sizes")),!1)}catch(o){return i.stop("Analysis failed."),ee.error(Z.red(`Failed to analyze APK: ${o.message}`)),!1}finally{try{xe.rmSync(n,{recursive:!0,force:!0})}catch{}}}function ms(e){let t=xe.openSync(e,"r");try{let i=Buffer.alloc(64);if(xe.readSync(t,i,0,64,0),!i.subarray(0,4).equals(fs))return null;let n=i[4]===2,o=i[5]===1,r=(p,g)=>o?p.readUInt16LE(g):p.readUInt16BE(g),l=(p,g)=>o?p.readUInt32LE(g):p.readUInt32BE(g),a=(p,g)=>Number(o?p.readBigUInt64LE(g):p.readBigUInt64BE(g)),s,c,d;n?(s=a(i,32),c=r(i,54),d=r(i,56)):(s=l(i,28),c=r(i,42),d=r(i,44));let u=null;for(let p=0;p<d;p++){let g=Buffer.alloc(c);if(xe.readSync(t,g,0,c,s+p*c),l(g,0)!==ps)continue;let P;n?P=a(g,48):P=l(g,28),P>0&&(u===null||P<u)&&(u=P)}return u??0}catch{return null}finally{xe.closeSync(t)}}function jn(e){let t=[];if(!xe.existsSync(e))return t;let i=xe.readdirSync(e,{withFileTypes:!0});for(let n of i){let o=Xe.join(e,n.name);n.isDirectory()?t.push(...jn(o)):n.name.endsWith(".so")&&t.push(o)}return t}function gs(e){return e.includes("arm64-v8a")?"arm64-v8a":e.includes("x86_64")?"x86_64":"unknown"}var zn=async e=>{if(fe()||(be.error(we.red(`You are not logged in. Run \`${f.nameLower} login\` first.`)),process.exit(1)),e.apk){await Ss(e);return}let i=process.cwd(),n=Mt.join(i,"package.json");Et.existsSync(n)||(be.error(we.red("No package.json found. Run this command from a project root.")),process.exit(1));let o=JSON.parse(Et.readFileSync(n,"utf-8")),r=!!(o.dependencies?.expo||o.devDependencies?.expo);e.json||(be.info(we.dim(`Project: ${o.name||"unknown"} v${o.version||"0.0.0"}`)),be.info(we.dim(`Type: ${r?"Expo":"Bare React Native"}`)),be.info(""));let l={json:e.json,fix:e.fix,category:e.category,severity:e.severity,prebuild:e.prebuild},a=await Un(i,l);e.json?console.log(JSON.stringify(Fn(a,o),null,2)):Mn(a,e.severity);let s=a.some(d=>d.findings.some(u=>u.severity==="critical")),c=a.some(d=>d.findings.some(u=>u.severity==="high"));(s||c)&&process.exit(1)},Gn=["16kb"];async function Ss(e){let t=e.category?.toLowerCase();t&&!Gn.includes(t)&&(be.error(we.red(`Unknown APK check category: "${t}"`)),be.info(we.dim(`Available APK checks: ${Gn.join(", ")}`)),process.exit(1));let i=await Es(e.apk);i||process.exit(1);let n=!t,o=!1;(n||t==="16kb")&&(await Bn(i)||(o=!0)),o&&process.exit(1)}async function Es(e){if(e.startsWith("build:")){let i=e.slice(6);return await As(i)}if(e.startsWith("http://")||e.startsWith("https://"))return await Vn(e);let t=Mt.resolve(e);return Et.existsSync(t)?t:(be.error(we.red(`APK file not found: ${t}`)),null)}async function As(e){let t=Kn();t.start(`Fetching APK from build ${e}...`);try{let i=await $.get(`/build/${e}`);if(i.data.status!=="success")throw new Error(i.data.message);let n=i.data.build;if(!n)throw new Error("Build not found");let o=n.artifacts?.find(r=>r.type?r.type==="apk":r.name?.endsWith(".apk")||r.url?.includes(".apk"));return!o||!o.url?(t.stop("No APK artifact found"),be.error(we.red("This build does not have an APK artifact.")),be.info(we.dim("Make sure the build produced an APK (not just an AAB).")),null):(t.stop(`Found build: ${n.buildId||e}`),await Vn(o.url))}catch(i){return t.stop("Failed to fetch build"),be.error(we.red(i.message)),null}}async function Vn(e){let t=Kn();t.start("Downloading APK...");try{let i=Et.mkdtempSync(Mt.join(hs.tmpdir(),`${f.nameLower}-audit-`)),n=Mt.join(i,"app.apk"),o=await ys.get(e,{responseType:"arraybuffer"});Et.writeFileSync(n,o.data);let r=(o.data.length/(1024*1024)).toFixed(1);return t.stop(`Downloaded APK (${r} MB)`),n}catch(i){return t.stop("Download failed"),be.error(we.red(`Failed to download APK: ${i.message}`)),null}}var _s=console.log;console.log=()=>{};Is();console.log=_s;ue(ae.bgCyan.black(f.cliTag("Production Build Orchestrator")));var $s=Ps(import.meta.url),Ds=$s("../package.json"),Y=new bs;Y.name(f.nameLower).description(`${f.name} CLI: Powerful Cloud Infrastructure Tools`).version(Ds.version).option("-y, --yes","Automatically answer yes to all prompts",!1).option("--quiet","Suppress non-essential output",!1);Y.command("agent").description("Start local device discovery agent for the Install Hub (port 7070)").action(async()=>{await zi()});Y.command("host").description("Setup AWS S3 static hosting and CloudFront").action(async()=>{ue(ae.bgCyan.black(f.cliTag("Hosting"))),await hi()});Y.command("sitemap").description("Generate sitemap.xml from Expo Router app structure").option("-o, --output <path>","Output path for sitemap.xml","./public/sitemap.xml").action(async e=>{ue(ae.bgCyan.black(f.cliTag("Sitemap Generator"))),await Ai(e)});Y.command("build").description("Run a build on a cloud provider (AWS Spot Instances)").argument("[platform]","Target platform (android, ios)").option("--platform <os>","Target platform alias (android, ios) [Optional]").option("--repo <url>","Git Repository URL").option("--branch <name>","Git Branch").option("--ami <id>","AMI ID").option("--bucket <name>","S3 Bucket for artifacts").option("--region <region>","AWS Region").option("--aws-profile <name>","AWS Credentials Profile").option("-p, --build-profile <name>","Build Profile (e.g. production, staging)","production").option("--profile <name>","Build Profile (alias for --build-profile)").option("--dry-run","Generate User Data script without launching").option("--keep-instance","Do not terminate the instance after build").option("--subnet <id>","VPC Subnet ID to launch the instance in").option("--security-group <id>","VPC Security Group ID to use").option("--ssh-host <host>","Remote host for iOS build (SSH)").option("--ssh-user <user>","SSH username for remote host").option("--ssh-key <path>","Path to private SSH key for remote host").option("--ios-scheme <scheme>","iOS Scheme to build").option("--ios-team-id <id>","Apple Development Team ID").option("--ios-configuration <config>","Xcode configuration (Release/Debug)").option("--ios-export-method <method>","Export method (ad-hoc, app-store, development, enterprise)").option("--ios-api-key-id <id>","App Store Connect API Key ID").option("--ios-api-key-issuer <id>","App Store Connect API Key Issuer ID").option("--ios-api-key-path <path>","Path to App Store Connect API Key (.p8) file").option("--simulator","Build for iOS Simulator (no signing required)").addOption(new Wn("--build-id <id>","Internal build ID").hideHelp()).addOption(new Wn("--project-id <id>","Internal project ID").hideHelp()).option("--local","Run build on local machine").option("--auto-version","Automatically fetch and increment versionCode from Google Play").option("--verbose","Enable verbose logging").option("--json-output <path>","Write build metadata JSON to a file for CI/CD").option("--maestro","Queue a managed Maestro test run after a successful build").option("--maestro-flows <path>","Maestro flow file or directory (default: .maestro)").option("--maestro-device <device>","Managed Maestro device profile").option("--maestro-retries <n>","Retries for the Maestro run","1").option("--maestro-record","Enable screen recording where supported").option("-y, --yes","Automatically answer yes to all prompts",!1).option("--quiet","Suppress non-essential output",!1).action(async(e,t)=>{let i=Y.opts();t.yes=t.yes||i.yes,t.quiet=t.quiet||i.quiet,t.platform=e||t.platform,t.buildProfile=t.profile||t.buildProfile,t.quiet||ue(ae.bgCyan.black(f.cliTag("Cloud Build"))),await Pt(t)});Y.command("maestro").description("Run managed Maestro tests for an existing Mach build or artifact").option("--platform <os>","Target platform (android/ios)").option("-p, --profile <name>","Build profile to resolve when using --latest","production").option("--latest","Use the latest successful build for the platform/profile").option("--build-id <id>","Use a specific Mach build ID").option("--build-url <url>","Use a Mach build URL").option("--artifact-url <url>","Use a direct APK or iOS simulator app artifact URL").option("--maestro-flows <path>","Maestro flow file or directory (default: .maestro)").option("--maestro-device <device>","Managed Maestro device profile").option("--maestro-retries <n>","Retries for the Maestro run","1").option("--maestro-record","Enable screen recording where supported").option("--json-output <path>","Write test run metadata JSON to a file for CI/CD").action(async e=>{ue(ae.bgCyan.black(f.cliTag("Maestro Testing"))),await Li(e)});Y.command("update").description("Deploy an Over-The-Air (OTA) update to your live channel").option("--branch <name>","Channel or Branch to deploy to (e.g., production)","production").action(async e=>{ue(ae.bgCyan.black(f.cliTag("OTA Update"))),await ln(e)});Y.command("submit").description("Automated Store Submission (App Store / Google Play)").option("--platform <os>","Target platform (ios/android)").option("-p, --profile <name>","Build/submission profile to submit from (e.g. production, preprod)").option("--track <track>","Google Play Track (internal, alpha, beta, production)").option("--release-status <status>","Google Play release status (completed, draft, halted, inProgress)").option("--latest","Use the latest successful build for submission").option("--build-id <id>","Use a specific build ID for submission").action(async e=>{ue(ae.bgCyan.black(f.cliTag("Store Submission"))),await rn(e)});Y.command("login").description(`Login to ${f.name} Dashboard`).action(async()=>{ue(ae.bgCyan.black(f.cliTag("Login"))),await Ji()});Y.command("link").description(`Link local directory to a ${f.name} Project`).action(async()=>{ue(ae.bgCyan.black(f.cliTag("Link Project"))),await qi()});Y.command("me").description("Display currently logged in user details").action(async()=>{await dn()});Y.command("init").description(`Create a new ${f.name} Project`).action(async()=>{ue(ae.bgCyan.black(f.cliTag("Init Project"))),await Xi()});Y.command("env").description("Manage Environment Variables").argument("<action>","Action to perform: set or list").argument("[args...]","Key=Value pairs for set action").action(async(e,t)=>{ue(ae.bgCyan.black(f.cliTag("Env Manager"))),await en(e,t)});Y.command("start").description("Start the development server (Metro)").option("-p, --build-profile <name>","Build profile (e.g. development, staging)","development").option("--tunnel","Use ngrok tunnel").option("--lan","Use LAN IP").option("--localhost","Use localhost").option("-c, --clear","Clear Metro cache").option("--port <number>","Port to listen on").option("--ios","Start on iOS").option("--android","Start on Android").option("--web","Start on Web").action(async e=>{ue(ae.bgCyan.black(f.cliTag("Dev Server"))),await pn(e)});Y.command("config").description("Show resolved configuration for a profile").option("-p, --profile <name>","Build profile to resolve","development").option("--json","Output as JSON").action(async e=>{await fn(e)});Y.command("credentials").description("Unified, interactive credential management (iOS/Android)").option("-p, --profile <name>","Build profile (production, staging, development)").option("--force","Force recreate certificates (nuke existing on Apple Portal)",!1).action(async e=>{let{credentialsMainCommand:t}=await import("./credentials-UTJERDGT.js");await t(e)});Y.command("credentials:setup").description("Automated credential provisioning (iOS/Android) [Legacy]").requiredOption("--platform <os>","Platform: ios or android").option("--profile <name>","Build profile (production, staging, development)").option("--bundle-id <id>","Bundle ID / Package Name (optional, auto-detected)").option("--team-id <id>","Apple Team ID (iOS only)").option("--key-alias <alias>","Android keystore alias (optional, auto-generated)").option("--aws-profile <name>","AWS Credentials Profile (for S3 storage)").option("--force","Force recreate certificates (nuke existing on Apple Portal)",!1).action(async e=>{ue(ae.bgCyan.black(f.cliTag("Credentials Setup"))),await et(e),Yn(ae.green("Done!"))});Y.command("credentials:service").description("Upload Service Credentials (ASC API Key / Google Service JSON) [Legacy]").requiredOption("--platform <os>","Platform: ios or android").option("--file <path>","Path to credential file (.p8 or .json)").option("--issuer-id <id>","ASC API Key Issuer ID (iOS only)").option("--key-id <id>","ASC API Key ID (iOS only)").option("--bundle-id <id>","Bundle identifier / Android package name to attach this service credential to").option("--package-name <name>","Android package name to attach this service credential to").option("-p, --profile <name>","Build profile to resolve package/bundle identifier from config").action(async e=>{ue(ae.bgCyan.black(f.cliTag("Service Credentials"))),await mi(e),Yn(ae.green("Done!"))});var ci=Y.command("device").description("Manage registered iOS test devices");ci.command("register").description("Register a connected iOS device or enter UDID manually").option("--udid <udid>","Device UDID (skip auto-detection)").option("--name <name>","Device name").action(async e=>{await wt("register",e)});ci.command("list").description("List all registered devices").action(async()=>{await wt("list",{})});ci.command("remove").description("Remove a registered device").option("--udid <udid>","Device UDID to remove").action(async e=>{await wt("remove",e)});Y.command("audit").description("Run automated security audit on the project or APK").option("--apk <path>","Path to APK file (runs APK diagnostics like 16KB alignment)").option("--json","Output results as JSON (for CI/CD)").option("--fix","Auto-apply fixes where possible").option("--category <name>","Run only a specific check category (e.g. 16kb, permissions, secrets)").option("--severity <level>","Minimum severity to display (critical, high, medium, low, info)").option("--prebuild","Run expo prebuild for deeper manifest/plist analysis").action(async e=>{ue(ae.bgCyan.black(f.cliTag(e.apk?"APK Audit":"Security Audit"))),await zn(e)});var Rs=new Set(["login"]);Y.hook("preAction",(e,t)=>{let i=t.name();Rs.has(i)||ui()});Y.on("command:*",()=>{console.error(`Invalid command: %s
|
|
1037
1038
|
See --help for a list of available commands.`,Y.args.join(" ")),process.exit(1)});process.argv.slice(2).length||Y.help();Y.parse(process.argv);
|