@radhya/mach 1.9.6 → 1.9.7

package/dist/chunk-DHVPMCZJ.js

@@ -0,0 +1,61 @@
+import{a as m,g as v}from"./chunk-NZ4K6LDA.js";import{log as r,spinner as se,text as L,password as le,select as z,confirm as Me,isCancel as k,cancel as _,intro as ze,outro as Qe,note as Ne}from"@clack/prompts";import{log as V,spinner as ie,text as K,select as q,isCancel as E,cancel as O,note as ce,confirm as Se}from"@clack/prompts";import G from"chalk";import{spawnSync as ne}from"child_process";import X from"fs";import x from"path";import Ie from"os";import ae from"fs";function St(e){if(e){if(!ae.existsSync(e))return null;try{return JSON.parse(ae.readFileSync(e,"utf-8"))}catch{return null}}if(!ae.existsSync(`./${m.configFileName}`))return null;try{return JSON.parse(ae.readFileSync(`./${m.configFileName}`,"utf-8"))}catch{return null}}function j(e,t,n=new Set){if(n.has(t))throw new Error(`Circular inheritance detected in profile: ${t}`);n.add(t);let a=e.build?.[t];if(!a)return null;let i={...a};if(a.extends){let s=j(e,a.extends,n);s&&(i={...s,...a,env:{...s.env,...a.env},ios:{...s.ios,...a.ios},android:{...s.android,...a.android}})}if(i.envGroups&&Array.isArray(i.envGroups)){let s={};for(let o of i.envGroups){let g=e.envGroups?.[o];g?Object.assign(s,g):log.warn(`Environment group not found: ${o}`)}i.env={...s,...i.env}}return i}function re(e,t){let n=t?j(e,t)||{}:{};if(n.android?.package)return n.android.package;if(n.androidPackage)return n.androidPackage;if(e.android?.package)return e.android.package;if(e.expo?.android?.package)return e.expo.android.package}function oe(e,t){let n=t?j(e,t)||{}:{};if(n.ios?.bundleIdentifier)return n.ios.bundleIdentifier;if(n.iosBundleIdentifier)return n.iosBundleIdentifier;if(e.ios?.bundleIdentifier)return e.ios.bundleIdentifier;if(e.ios?.bundleId)return e.ios.bundleId;if(e.expo?.ios?.bundleIdentifier)return e.expo.ios.bundleIdentifier}var wt=(e,t=`${m.envPrefix}`)=>{let n={},a=(i,s)=>{if(i)for(let o in i){let g=i[o],d=`${s}${o.toUpperCase().replace(/[^A-Z0-9]/g,"_")}`;g!==null&&typeof g=="object"&&!Array.isArray(g)?a(g,`${d}_`):n[d]=String(g)}};return a(e,t),n};var Te="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";function de(){let e=x.join(Ie.tmpdir(),m.nameLower);X.existsSync(e)||X.mkdirSync(e,{recursive:!0});let t=x.join(e,"manage_asc_keys.rb");return X.writeFileSync(t,Buffer.from(Te,"base64").toString("utf-8"),{mode:493}),t}function ge(){return{...process.env,PATH:`/usr/local/opt/ruby/bin:/usr/local/Cellar/fastlane/2.227.0/libexec/bin:${process.env.HOME}/.local/share/fastlane/3.4.0/bin:${process.env.PATH}`,GEM_HOME:process.env.FASTLANE_GEM_HOME||`${process.env.HOME}/.local/share/fastlane/3.4.0`,GEM_PATH:(process.env.FASTLANE_GEM_HOME||`${process.env.HOME}/.local/share/fastlane/3.4.0`)+":/usr/local/Cellar/fastlane/2.227.0/libexec",FASTLANE_INSTALLED_VIA_HOMEBREW:"true",CI:"1"}}function fe(e){let t=new Map,n=/-\s+(\d+)\s+\(([^)]+)\)/g,a=/\d+\)\s+"([^"]+)"\s+\((\d+)\)/g,i;for(;(i=n.exec(e))!==null;)t.set(i[1],{id:i[1],name:i[2]});for(;(i=a.exec(e))!==null;)t.set(i[2],{id:i[2],name:i[1]});return Array.from(t.values())}function me(e){return e.submit?.production?.ios?.appStoreConnectTeamId||e.submit?.production?.ios?.itcTeamId||e.submit?.production?.ios?.appleConnectTeamId}function we(e,t,n){return{...ge(),FASTLANE_USER:e,FASTLANE_TEAM_ID:t,...n?{FASTLANE_ITC_TEAM_ID:n,FASTLANE_ASC_TEAM_ID:n}:{}}}async function Ue(e,t,n,a){let i=ie();i.start("Fetching App Store Connect providers...");let s=ne("ruby",[e,"teams"],{env:we(n,a),stdio:["inherit","pipe","pipe"],encoding:"utf-8"});if(s.status!==0){i.stop("Could not fetch providers");let u=fe(`${s.stdout||""}
+${s.stderr||""}`);if(u.length>0)return pe(t,u,"Select the App Store Connect provider for this API key:");V.warn(G.yellow(`Could not list App Store Connect providers: ${s.stderr||"Unknown error"}`));return}let o=(s.stdout||"").match(new RegExp(`${m.jsonStartMarker}(.*)${m.jsonEndMarker}`));if(!o){i.stop("Could not parse providers");return}let g=JSON.parse(o[1]),d=(g.teams||[]).filter(u=>u.id&&u.name);if(i.stop(d.length===1?"Found 1 provider":`Found ${d.length} providers`),d.length===0)return;if(d.length===1)return V.success(G.green(`\u2713 Using App Store Connect provider ${d[0].name} (${d[0].id})`)),d[0].id;let A=d.filter(u=>u.recommended),I=d.filter(u=>!u.recommended);return pe(t,[...A,...I],`Select the App Store Connect provider for Developer Team ${g.developerTeamName||a}:`)}async function pe(e,t,n){let a=await q({message:n,options:t.map(s=>({value:s.id,label:s.name,hint:`${s.id}${s.recommended?" \xB7 recommended":""}`}))});if(E(a))return O("Operation cancelled"),null;let i=a;return V.success(G.green(`\u2713 Using App Store Connect Provider ID ${i}`)),i}var Ze=async e=>{let t=ie(),n=e.platform,a=`./${m.configFileName}`;if(!X.existsSync(a)){V.error(`No ${m.configFileName} found. Run \`${m.nameLower} init\` or \`${m.nameLower} link\` first.`);return}let i=JSON.parse(X.readFileSync(a,"utf-8")),{projectId:s}=i,o=e.profile||"production";if(!s){V.error(`${m.configFileName} is missing projectId.`);return}let g=e.file,d=n==="android"?e.packageName||e.bundleId:e.bundleId||oe(i,o)||"*";if(n==="android"&&!d&&(d=await $e(s,i,o),d===null))return;if(n==="ios"&&!g){let p=await q({message:"Manage App Store Connect API Key:",options:[{value:"magic",label:"\u2728 Create new automatically",hint:"Requires Apple ID + 2FA"},{value:"manual",label:"\u{1F50D} Configure manually",hint:"Provide existing .p8 file"},{value:"delete",label:"\u{1F5D1}\uFE0F  Delete an existing Key"}]});if(E(p)){O("Operation cancelled");return}if(p==="magic"){await Oe(s,i);return}if(p==="delete"){await Ke(s,i);return}}if(!g){let p=n==="ios"?"https://appstoreconnect.apple.com/access/api":"https://console.cloud.google.com/apis/credentials";ce(`To submit to the ${n==="ios"?"App Store":"Google Play Store"}, you need a Service Key:
+
+1. Open: ${G.cyan(p)}
+`+(n==="ios"?`2. Generate an "App Store Connect API Key" with ${G.bold("Admin")} role.
+3. Download the ${G.bold(".p8")} file.`:`2. Create a "Service Account", generate a ${G.bold("JSON")} key.
+3. Download the ${G.bold(".json")} file.`),"Guided Setup"),t.start("Scanning for downloaded keys...");let l=Le(n);if(t.stop(l.length>0?`Detected ${l.length} potential key(s)`:"No keys detected automatically"),l.length>0){let y=await q({message:"Found these potential keys. Use one of them?",options:[...l.map(C=>({value:C.path,label:`${x.basename(C.path)} (${C.location})`})),{value:"manual",label:"Enter path manually..."}]});if(E(y)){O("Operation cancelled");return}y!=="manual"&&(g=y)}if(!g){let y=await K({message:`Paste the path to your ${n==="ios"?".p8":".json"} file:`,validate:C=>X.existsSync(C)?void 0:"File not found"});if(E(y)){O("Operation cancelled");return}g=y}}let A=e.issuerId,I=e.keyId;if(n==="ios"){if(!I&&g){let p=x.basename(g).match(/AuthKey_(.*)\.p8/);p&&(I=p[1],V.info(`Auto-detected Key ID from filename: ${G.green(I)}`))}if(!A){let p=await K({message:"Enter App Store Connect Issuer ID (Found on the Keys page):",validate:l=>l.length>0?void 0:"Issuer ID is required"});if(E(p)){O("Operation cancelled");return}A=p}if(!I){let p=await K({message:"Enter App Store Connect Key ID:",validate:l=>l.length>0?void 0:"Key ID is required"});if(E(p)){O("Operation cancelled");return}I=p}}if(n==="android"&&(!d||d==="*")){let p=await Re();if(p===null)return;d=p}let u=i.submit?.production?.ios?.appleTeamId,f=me(i);await ue(s,g,n,A,I,d,{teamId:n==="ios"?u:void 0,developerTeamId:n==="ios"?u:void 0,appStoreConnectTeamId:n==="ios"?f:void 0,providerId:n==="ios"?f:void 0})};async function $e(e,t,n){let a=await He(e),i=De(t,n);if(i&&!a.includes(i)&&a.unshift(i),a.length>0){let s=await q({message:"Select Android package for this Google Play service key:",options:[...a.map(o=>({value:o,label:o,hint:o===i?"from config":void 0})),{value:"manual",label:"Enter another package name..."}]});if(E(s))return O("Operation cancelled"),null;if(s==="manual")return Re();if(s!=="manual")return s}if(i){let s=await Se({message:`Use Android package from local config (${i})?`,initialValue:!0});if(E(s))return O("Operation cancelled"),null;if(s)return i}}async function Re(){let e=await K({message:"Android package name for this Google Play service key:",placeholder:"com.example.app",validate:t=>t.includes(".")?void 0:"Enter a valid package name"});return E(e)?(O("Operation cancelled"),null):e}async function He(e){try{let n=(await v.get(`/credentials/${e}`)).data.credentials||[],a=new Set;for(let i of n)(i.platform==="android"||i.type==="android_keystore"||i.type==="google_service_account")&&i.bundleId&&i.bundleId!=="*"&&a.add(i.bundleId);return Array.from(a).sort()}catch(t){return V.warn(G.yellow(`Could not fetch saved Android package identifiers: ${t.message}`)),[]}}function De(e,t){let n=re(e,t);if(n)return n;let a=x.join(process.cwd(),"app.json");if(X.existsSync(a))try{return JSON.parse(X.readFileSync(a,"utf-8")).expo?.android?.package}catch{}let i=x.join(process.cwd(),"app.config.json");if(X.existsSync(i))try{let s=JSON.parse(X.readFileSync(i,"utf-8"));return s.expo?.android?.package||s.android?.package}catch{}}async function Oe(e,t){let n=ie(),a=t.submit?.production?.ios?.appleId,i=t.submit?.production?.ios?.appleTeamId,s=me(t);if(!a){let d=await K({message:"Apple ID:",placeholder:"your-email@example.com"});if(E(d))return;a=d}if(!i){let d=await K({message:"Apple Team ID:",placeholder:"e.g. 4523G95823"});if(E(d))return;i=d,t.submit||(t.submit={production:{ios:{}}}),t.submit.production||(t.submit.production={ios:{}}),t.submit.production.ios||(t.submit.production.ios={}),t.submit.production.ios.appleTeamId=i,X.writeFileSync(`./${m.configFileName}`,JSON.stringify(t,null,2))}let o=await K({message:"Enter a name for the new API Key:",initialValue:`[${m.name}] Project ${e}`});if(E(o))return;let g=de();if(!X.existsSync(g)){V.error(`Magic Error: Helper script not found at ${g}`);return}try{let d=await Ue(g,t,a,i);if(d===null)return;if(d)s=d;else if(!s)return;n.start("Creating App Store Connect API Key...");let A=S=>ne("ruby",[g,"create",o],{env:we(a,i,S),stdio:["inherit","pipe","pipe"],encoding:"utf-8"}),I=A(s),u=I.stdout||"",f=I.stderr||"";if(I.status!==0){let S=fe(`${u}
+${f}`);if(S.length>0){n.stop("Select App Store Connect team"),ce(`Apple Developer Team IDs look like ${G.bold(i)}.
+App Store Connect API keys use a numeric provider/team ID instead.`,"Team ID mismatch");let R=await pe(t,S,"Select the App Store Connect provider for this API key:");if(!R)return;s=R,n.start("Creating API Key with selected App Store Connect team..."),I=A(s),u=I.stdout||"",f=I.stderr||""}}if(f&&(f.includes("DEBUG:")||f.includes("ERROR:"))&&f.split(`
+`).forEach(S=>{S.trim()&&V.info(G.dim(`[Ruby] ${S.trim()}`))}),I.status!==0){n.stop("Failed"),V.error(`Magic creation failed: ${f}`);return}let p=u.match(new RegExp(`${m.jsonStartMarker}(.*)${m.jsonEndMarker}`));if(!p){n.stop("Parse Error"),V.error("Could not parse response from Apple Portal.");return}let l=JSON.parse(p[1]),{id:y,issuerId:C,keyContent:F}=l;if(n.stop("Key Created Successfully"),V.success(`\u2713 Created Key ID: ${G.green(y)}`),!C){ce(`Your Issuer ID is shown at the top of:
+  ${G.cyan("https://appstoreconnect.apple.com/access/integrations/api")}
+
+It looks like: ${G.dim("xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx")}`,"One More Thing");let S=await K({message:"Enter your App Store Connect Issuer ID:",validate:R=>R.trim().length>0?void 0:"Issuer ID is required"});if(E(S)){O("Operation cancelled.");return}C=S.trim()}if(F){let S=x.join(Ie.tmpdir(),`AuthKey_${y}.p8`);X.writeFileSync(S,F),await ue(e,S,"ios",C,y,t.ios?.bundleIdentifier||"*",{teamId:i,developerTeamId:i,appStoreConnectTeamId:s,providerId:s}),X.unlinkSync(S)}else{V.warn(G.yellow("\u26A0\uFE0F  Apple did not return the private key in the response.")),ce(`Download the .p8 file manually:
+
+  1. Open: ${G.cyan("https://appstoreconnect.apple.com/access/integrations/api")}
+  2. Find Key ID: ${G.green(y)}
+  3. Click ${G.bold("Download API Key")} (only available once)
+  4. Drag & drop the downloaded .p8 file below`,"Manual Step Required");let S=await K({message:"Path to the downloaded .p8 file (drag & drop here):",validate:R=>X.existsSync(R)?void 0:"File not found"});if(E(S)){O("Operation cancelled. Credential ID was registered but key content is missing.");return}await ue(e,S,"ios",C,y,t.ios?.bundleIdentifier||"*",{teamId:i,developerTeamId:i,appStoreConnectTeamId:s,providerId:s})}}catch(d){n.stop("Error"),V.error(`Error: ${d.message}`)}}async function Ke(e,t){let n=ie(),a=t.submit?.production?.ios?.appleId,i=t.submit?.production?.ios?.appleTeamId,s=me(t);if(!a){let g=await K({message:"Apple ID:"});if(E(g))return;a=g}if(!i){let g=await K({message:"Apple Team ID:"});if(E(g))return;i=g,t.submit||(t.submit={production:{ios:{}}}),t.submit.production||(t.submit.production={ios:{}}),t.submit.production.ios||(t.submit.production.ios={}),t.submit.production.ios.appleTeamId=i,X.writeFileSync(`./${m.configFileName}`,JSON.stringify(t,null,2))}n.start("Fetching existing API Keys...");let o=de();if(!X.existsSync(o)){V.error(`Magic Error: Helper script not found at ${o}`);return}try{let g=l=>ne("ruby",[o,"list"],{env:{...ge(),FASTLANE_USER:a,FASTLANE_TEAM_ID:i,...l?{FASTLANE_ITC_TEAM_ID:l,FASTLANE_ASC_TEAM_ID:l}:{}},stdio:["inherit","pipe","pipe"],encoding:"utf-8"}),d=g(s);if(d.status!==0){let l=fe(`${d.stdout||""}
+${d.stderr||""}`);if(l.length>0){n.stop("Select App Store Connect team");let y=await q({message:"Select the App Store Connect team to list API keys:",options:l.map(C=>({value:C.id,label:C.name,hint:C.id}))});if(E(y)){O("Operation cancelled");return}s=y,n.start("Fetching existing API Keys..."),d=g(s)}}if(d.status!==0){n.stop("Failed"),V.error(`Listing failed: ${d.stderr}`);return}let A=d.stdout.match(new RegExp(`${m.jsonStartMarker}(.*)${m.jsonEndMarker}`));if(!A){n.stop("Parse Error");return}let I=JSON.parse(A[1]);if(n.stop(`Found ${I.length} keys`),I.length===0){V.info("No API Keys found on this team.");return}let u=await q({message:"Select a key to delete from Apple Developer Portal:",options:[...I.map(l=>({value:l.id,label:`ID: ${l.id} - ${l.name} (${l.role})`})),{value:"cancel",label:"Cancel"}]});if(E(u)||u==="cancel")return;let f=await Se({message:`Are you sure you want to delete Key ${u}? This cannot be undone.`});if(!f||E(f))return;n.start(`Deleting Key ${u}...`);let p=ne("ruby",[de(),"delete",u],{env:{...ge(),FASTLANE_USER:a,FASTLANE_TEAM_ID:i,...s?{FASTLANE_ITC_TEAM_ID:s,FASTLANE_ASC_TEAM_ID:s}:{}},stdio:"pipe",encoding:"utf-8"});p.status===0?(n.stop("Deleted"),V.success(`\u2713 Key ${u} has been removed from Apple Portal.`)):(n.stop("Deletion Failed"),V.error(`Error: ${p.stderr}`))}catch(g){n.stop("Error"),V.error(`Error: ${g.message}`)}}async function ue(e,t,n,a,i,s="*",o={}){let g=ie();g.start(`Uploading Service Credentials for ${n}...`);try{let d=n==="ios"?"asc_api_key":"google_service_account",A=new URL(import.meta.url),I=x.dirname(A.pathname),u=[x.join(I,"isolated-upload.js"),x.join(I,"commands","isolated-upload.js"),x.resolve(I,"../commands/isolated-upload.js"),x.resolve(process.cwd(),`node_modules/.bin/${m.nameLower}-upload`)],f="";for(let l of u)if(X.existsSync(l)){f=l;break}if(!f)throw new Error("Could not locate isolated-upload.js. Ensure the CLI is properly installed.");let p=ne("node",[f,e,t,d,s,"service","undefined","undefined",a||"undefined",i||"undefined","undefined","undefined","undefined",o.teamId||"undefined",o.teamName||"undefined",o.developerTeamId||"undefined",o.appStoreConnectTeamId||"undefined",o.providerId||"undefined",o.providerName||"undefined"],{stdio:"pipe",encoding:"utf-8",env:{...process.env,AT_CLI_ISOLATED:"1"}});if(p.status!==0){let l=p.stderr||p.stdout||"Unknown upload failure";g.stop("Upload Failed"),V.error(G.red(`Upload Failed: ${l}`));return}p.stdout.includes("SUCCESS")?(g.stop("Upload Success"),V.success(G.green(`\u2713 Service Credentials for ${n} uploaded successfully.`))):(g.stop("Upload Summary"),V.warn(G.yellow(`Upload finished but success not confirmed: ${p.stdout}`)))}catch(d){g.stop("Upload Error"),V.error(G.red(`Error: ${d.message}`))}}function Le(e){let t=e==="ios"?".p8":".json",n=[],a=[{path:"./",label:"Project Root"},{path:x.join(Ie.homedir(),"Downloads"),label:"Downloads"}];for(let i of a)if(X.existsSync(i.path))try{let s=X.readdirSync(i.path);for(let o of s)if(o.endsWith(t)){if(e==="android"&&!X.readFileSync(x.join(i.path,o),"utf8").includes("service_account")||e==="ios"&&!o.startsWith("AuthKey"))continue;n.push({path:x.join(i.path,o),location:i.label})}}catch{}return n}import Be from"axios";import c from"chalk";import{execSync as T,spawnSync as ee}from"child_process";import Ae from"crypto";import h from"fs";import w from"path";import he from"os";import je from"adm-zip";Be.defaults.proxy=!1;function Ce(e,t){if(!h.existsSync(e))return;let n=h.readdirSync(e);for(let a of n){let i=w.join(e,a);if(h.statSync(i).isDirectory()){let o=Ce(i,t);if(o)return o}else if(t.test(a))return i}}var M=e=>String(e||"").trim().toLowerCase().replace(/_/g,"-"),N=e=>{if(typeof e!="string")return;let t=e.trim();return t.length>0?t:void 0},be=e=>N(e.password)||N(e.p12Password)||N(e.certificatePassword)||N(e.meta?.password)||N(e.meta?.p12Password)||N(e.meta?.certificatePassword),Pe=e=>N(e.keystorePassword)||N(e.storePassword)||N(e.meta?.keystorePassword)||N(e.meta?.storePassword),Ye=e=>N(e.keyPassword)||N(e.meta?.keyPassword),qe=e=>N(e.alias)||N(e.meta?.alias),We=e=>e.credentialId||e.id,ve=e=>e.bundleId||e.bundleIdentifier||e.meta?.bundleId||e.meta?.bundleIdentifier,Ve=e=>e.distributionType||e.meta?.distributionType,ke=e=>!!be(e)||!!Pe(e)||!!Ye(e),et=async(e,t,n)=>{if(!["ios_cert","android_keystore"].includes(n.type)||ke(n))return n;let a=ve(n),i=Ve(n);if(!a||!i)return n;try{let o=(await v.get("/credentials/resolve",{params:{projectId:e,platform:t,bundleId:a,distributionType:i}})).data.credentials||[],g=We(n),d=o.find(A=>{if(A.type!==n.type)return!1;let I=We(A);return g&&I===g?!0:ve(A)===a&&M(Ve(A))===M(i)&&ke(A)});return d?{...n,...d,meta:{...n.meta,...d.meta}}:n}catch{return n}},tt=e=>{let t=M(e);return t==="store"||t==="app-store"?"PRODUCTION":["adhoc","ad-hoc","internal","staging","stage"].includes(t)?"STAGING":"DEVELOPMENT"},nt=(e,t)=>{let n=be(e);if(n)return n;let a=tt(e.distributionType);return["IOS_P12_PASSWORD",`${m.envPrefix}P12_PASSWORD`,`IOS_P12_PASSWORD_${a}`,`P12_PASSWORD_${a}`,"MACH_P12_PASSWORD","P12_PASSWORD","CERT_PASSWORD"].map(s=>N(t[s])).find(Boolean)||""},it=(e,t)=>{let n=M(e.distributionType),a=n==="store"?"PRODUCTION":["internal","adhoc","ad-hoc","staging","stage"].includes(n)?"STAGING":"DEVELOPMENT",i=["PRODUCTION","STORE","INTERNAL","STAGING","DEVELOPMENT","RELEASE","DEBUG"],s=[`KEYSTORE_PASSWORD_${a}`,`KEYSTORE_PASSWORD_${String(e.distributionType||"").toUpperCase()}`,...i.map(u=>`KEYSTORE_PASSWORD_${u}`),"ANDROID_STORE_PASSWORD","ANDROID_KEYSTORE_PASSWORD","ANDROID_KEYSTONE_PASSWORD","KEYSTORE_PASSWORD"],o=[`KEY_PASSWORD_${a}`,`KEY_PASSWORD_${String(e.distributionType||"").toUpperCase()}`,"ANDROID_KEY_PASSWORD","KEY_PASSWORD"],g=[`KEYSTORE_ALIAS_${a}`,`KEYSTORE_ALIAS_${String(e.distributionType||"").toUpperCase()}`,...i.map(u=>`KEYSTORE_ALIAS_${u}`),"ANDROID_KEY_ALIAS","KEYSTORE_ALIAS"],d=Pe(e)||be(e)||s.map(u=>N(t[u])).find(Boolean)||"",A=Ye(e)||o.map(u=>N(t[u])).find(Boolean)||d;return{alias:qe(e)||g.map(u=>N(t[u])).find(Boolean)||"",keystorePassword:d,keyPassword:A}},Ge=(e,t,n)=>{let a=e.includes(".")?e.replace(/\.[^.]+$/i,".zip"):`${e}.zip`,i=w.basename(e),s=new je;return s.addLocalFile(e,void 0,i),s.addFile(t,Buffer.from(n.endsWith(`
+`)?n:`${n}
+`,"utf8")),s.writeZip(a),a},Je=e=>{let t=e.toLowerCase();return t==="production"||t==="prod"||t.includes("store")||t.endsWith("-production")||t.endsWith("-prod")},st=e=>{let t=e.toLowerCase();return t==="staging"||t==="stage"||t.includes("preview")||t.includes("adhoc")||t.includes("ad-hoc")||t.endsWith("-staging")||t.endsWith("-stage")},at=(e,t)=>{let n=j(e,t)||{},a=M(n.distribution),i=M(n.iosExportMethod||n.ios?.exportMethod),s=M(n.environment);return i==="app-store"||a==="store"?"store":i==="development"||a==="development"?"development":i==="ad-hoc"||i==="adhoc"||a==="ad-hoc"||a==="adhoc"||a==="internal"?"adhoc":s==="production"||s==="store"?"store":s==="development"||s==="dev"?"development":s==="staging"||s==="stage"||s==="preview"?"adhoc":Je(t)?"store":st(t)?"adhoc":"development"},rt=(e,t)=>{let n=j(e,t)||{},a=M(n.distribution),i=M(n.environment);return a==="store"||i==="production"||i==="store"||Je(t)?"store":"internal"};function ot(e,t,n){let a=h.readFileSync(n,"utf8"),i=Math.floor(Date.now()/1e3),s=Buffer.from(JSON.stringify({alg:"ES256",kid:e,typ:"JWT"})).toString("base64url"),o=Buffer.from(JSON.stringify({iss:t,iat:i,exp:i+1200,aud:"appstoreconnect-v1"})).toString("base64url"),g=`${s}.${o}`,d=Ae.createSign("SHA256");d.update(g);let A=d.sign({key:a,dsaEncoding:"ieee-p1363"}).toString("base64url");return`${g}.${A}`}async function ct(e,t,n,a){let i=ot(t,n,a),s=(await import("axios")).default;for(let o of e)try{await s.post("https://api.appstoreconnect.apple.com/v1/devices",{data:{type:"devices",attributes:{name:o.name,udid:o.udid,platform:"IOS"}}},{headers:{Authorization:`Bearer ${i}`,"Content-Type":"application/json"}}),r.info(c.dim(`  \u2713 Registered: ${o.name}`))}catch(g){let d=g.response?.data?.errors;d?.some(I=>I.code==="ENTITY_ERROR.ATTRIBUTE.INVALID.DUPLICATE"||I.detail?.toLowerCase().includes("already registered")||I.detail?.toLowerCase().includes("already exists"))?r.info(c.dim(`  Already on Portal: ${o.name}`)):r.warn(c.yellow(`  Could not register ${o.name}: ${d?.[0]?.detail||g.message}`))}}var Xe=async e=>{ze(c.bgCyan.black(m.cliTag("Credentials")));let t=await z({message:"Select platform:",options:[{value:"ios",label:"iOS"},{value:"android",label:"Android"}]});k(t)&&(_("Operation cancelled"),process.exit(0));let n=await z({message:"What do you want to do?",options:[{value:"setup",label:"Build Credentials (Certs/Profiles)",hint:"Manage everything needed to build your project"},{value:"download",label:"Download credentials (credentials.json)",hint:"Sync credentials from Dashboard to local project"},{value:"service",label:"App Store Connect API Key (Magic)",hint:"Manage your API Key for automated submission"},{value:"push",label:"Push Notifications (Placeholder)",hint:"Manage your Apple Push Notifications Key"},{value:"back",label:"Go back"},{value:"exit",label:"Exit"}].filter(a=>!(t==="android"&&(a.value==="service"&&(a.label="Google Service Account (JSON)"),a.value==="push")))});if((k(n)||n==="exit")&&(_("Operation cancelled"),process.exit(0)),n==="back")return Xe(e);if(n==="setup")await lt({...e,platform:t});else if(n==="download")await mt({...e,platform:t});else if(n==="service")await Ze({...e,platform:t});else if(n==="push")return Ne("Push Notifications management is coming soon!","Coming Soon"),Xe(e);Qe(c.green("Done!"))},lt=async e=>{let t=se(),n=e.platform,a=e.profile;if(!a){let g=await z({message:"Select credential type:",options:[{value:"development",label:"Development",hint:"Local testing & simulators"},{value:"staging",label:"Ad Hoc / Staging",hint:"Internal distribution & device testing"},{value:"production",label:"Production / App Store",hint:"App Store & Play Store submission"}]});k(g)&&(_("Operation cancelled"),process.exit(0)),a=g}let i=`./${m.configFileName}`;if(!h.existsSync(i)){r.error(`No ${m.configFileName} found. Run \`${m.nameLower} init\` or \`${m.nameLower} link\` first.`);return}let s=JSON.parse(h.readFileSync(i,"utf-8")),{projectId:o}=s;if(!o){r.error(`${m.configFileName} is missing projectId.`);return}if(e.awsProfile&&r.warn(c.yellow(`Ignoring --aws-profile. Authenticating with ${m.name} Cloud...`)),r.info(c.dim(`Setting up credentials for: ${a}`)),n==="ios")await dt(o,a,e,s);else{let g=rt(s,a);await ut(o,a,g,e,s)}};async function dt(e,t,n,a){let i=n.bundleId;if(!i){let d=a.submit?.[t]?.ios?.bundleIdentifier||a.submit?.[t]?.ios?.bundleId||oe(a,t),A=[];try{let u=(await v.get(`/credentials/${e}`)).data.credentials||[];A=[...new Set(u.filter(f=>f.platform==="ios"&&f.bundleId&&f.bundleId!=="*").map(f=>f.bundleId))]}catch{}if(d&&!A.includes(d)&&A.unshift(d),A.length>0){let I=[...A.map(f=>({value:f,label:f,hint:f===d?"from config":void 0})),{value:"__new__",label:"+ Enter a new Bundle ID"}],u=await z({message:"Which Bundle ID are you setting up credentials for?",options:I});if(k(u)&&(_("Operation cancelled"),process.exit(0)),u==="__new__"){let f=await L({message:"iOS Bundle ID (e.g. com.example.app):",placeholder:"com.example.app",validate:p=>p.includes(".")?void 0:"Please enter a valid Bundle ID"});k(f)&&(_("Operation cancelled"),process.exit(0)),i=f}else i=u}else{let I=await L({message:"iOS Bundle ID (e.g. com.example.app):",placeholder:"com.example.app",validate:u=>u.includes(".")?void 0:"Please enter a valid Bundle ID"});k(I)&&(_("Operation cancelled"),process.exit(0)),i=I}}r.info(c.dim(`Bundle ID: ${i}`));let s=at(a,t),o=a.submit?.production?.ios?.appleId;o&&r.info(c.dim(`Using Apple ID from config: ${o}`)),await pt(e,i,t,s,s==="store"?"appstore":s==="adhoc"?"adhoc":"development",n,a,o)}async function gt(e){let t="MATCH_ENCRYPTION_PASSPHRASE";try{let o=((await v.get(`/projects/${e}/secrets/export?env=development`)).data.secrets||{})[t];if(o&&!o.includes("[Decryption Failed]"))return r.info(c.dim("Using existing encryption passphrase from Dashboard")),r.info(c.cyan(`MATCH_PASSWORD: ${o}`)),o;if(o&&o.includes("[Decryption Failed]")){r.warn(c.yellow("\u26A0\uFE0F  Existing MATCH_PASSWORD could not be decrypted (encryption key changed).")),r.info(c.dim("Generating a fresh passphrase and cleaning old certificates..."));let g=Ae.randomBytes(32).toString("base64");try{await v.post(`/projects/${e}/secrets`,{key:t,value:g,type:"managed",description:"Encryption passphrase for iOS certificates (fastlane match)",visibility:"secret"}),r.success(c.green("\u2713 New encryption passphrase generated and saved"))}catch{}try{await v.post("/credentials/clean-match-storage",{projectId:e}),r.success(c.green("\u2713 Cleaned old certificates from storage"))}catch{}return g}}catch(i){r.info(c.dim(`Could not fetch existing passphrase from Dashboard: ${i.message}`))}let n=await z({message:"No active encryption passphrase found on Dashboard. What would you like to do?",options:[{value:"generate",label:"Generate a new secure passphrase",hint:"Safe for first-time setup"},{value:"enter",label:"Enter existing passphrase manually",hint:"Required if you already have certs in S3"},{value:"cancel",label:"Cancel",hint:"Quit"}]});if((k(n)||n==="cancel")&&(_("Operation cancelled"),process.exit(0)),n==="enter"){let i=await le({message:"Enter your MATCH_PASSWORD (encryption passphrase):",validate:o=>o.length>0?void 0:"Passphrase is required"});k(i)&&(_("Operation cancelled"),process.exit(0));let s=i;try{await v.post(`/projects/${e}/secrets`,{key:t,value:s,type:"managed",description:"Encryption passphrase for iOS certificates (fastlane match)"}),r.success(c.green("\u2713 Saved passphrase to Dashboard"))}catch{}return s}let a=Ae.randomBytes(32).toString("base64");try{await v.post(`/projects/${e}/secrets`,{key:t,value:a,type:"managed",description:"Encryption passphrase for iOS certificates (fastlane match)",visibility:"secret"}),r.success(c.green("\u2713 Generated and saved encryption passphrase to Dashboard")),r.info(c.cyan(`MATCH_PASSWORD: ${a}`))}catch(i){r.warn(c.yellow(`Could not save passphrase to Dashboard: ${i.message}`))}return a}async function pt(e,t,n,a,i,s,o,g){let d=se();r.info(c.blue("Configuring iOS certificate management..."));let A;if(!g){let I=await L({message:"Apple ID (for Apple Developer Portal):",placeholder:"your-email@example.com",validate:u=>u.includes("@")?void 0:"Please enter a valid email"});k(I)&&(_("Operation cancelled"),process.exit(0)),g=I}d.start(`Fetching ${i} certificates...`);try{let I=await gt(e),u="",f="";try{let C=await v.post("/credentials/build-server-token",{projectId:e});C.data.status==="success"&&C.data.credentials&&(process.env.AWS_ACCESS_KEY_ID=C.data.credentials.accessKeyId,process.env.AWS_SECRET_ACCESS_KEY=C.data.credentials.secretAccessKey,C.data.credentials.sessionToken&&(process.env.AWS_SESSION_TOKEN=C.data.credentials.sessionToken),f=C.data.credentials.region||"ap-south-1",u=C.data.credentials.bucket||m.bucketPrefix,process.env.AWS_REGION=f,delete process.env.AWS_PROFILE)}catch(C){throw r.error(`Failed to authenticate with ${m.name} Cloud.`),C}if(!u||!f){r.error(`Failed to resolve S3 configuration from ${m.name} Cloud.`);return}let p=s.teamId||o.submit?.production?.ios?.appleTeamId;if(!p)try{let F=(await v.get(`/projects/${e}/secrets`)).data.secrets?.find(S=>S.key==="APPLE_TEAM_ID");F&&(p=F.value,r.info(c.dim(`Using Team ID from Dashboard: ${p}`)))}catch{}if(p&&p===o.submit?.production?.ios?.appleTeamId&&r.info(c.dim(`Using Apple Team ID from config: ${p}`)),!p){r.warn(c.yellow(`
+Apple Team ID is required to fetch certificates.`)),r.info(c.dim("You can find this at: https://developer.apple.com/account \u2192 Membership Details"));let C=await L({message:"Enter your 10-character Apple Team ID:",placeholder:"e.g. SA56KTS33U",validate:F=>F.length===10?void 0:"Team ID must be exactly 10 characters"});k(C)&&(_("Operation cancelled"),process.exit(0)),p=C,await Fe(e,p)}d.stop("Starting certificate sync...");let l=`${m.buildPrefix}-${p}.keychain-db`,y=m.keychainPassword;try{let F=`${process.env.HOME||"/Users/"+(process.env.USER||m.nameLower)}/Library/Keychains/${l}`;r.info(c.dim(`Ensuring keychain exists: ${l}`));try{T(`security create-keychain -p ${y} ${l} 2>/dev/null || true`),T(`security unlock-keychain -p ${y} ${l}`),T(`security set-keychain-settings ${l}`);let b=T("security list-keychains -d user").toString();if(!b.includes(l)){r.info(c.dim(`Adding ${l} to search list`));let Z=[...b.replace(/"/g,"").split(`
+`).map(B=>B.trim()).filter(B=>B.length>0),F].join(" ");T(`security list-keychains -d user -s ${Z}`)}}catch(b){r.warn(c.dim("Keychain setup warning (non-critical): "+b.message))}let S,R;try{let W=((await v.get(`/credentials/${e}`)).data.credentials||[]).find(Z=>Z.type==="asc_api_key"&&Z.issuerId);if(W){let Z=await v.get(`/credentials/${W.credentialId}/download`,{params:{projectId:e,format:"raw"}});if(Z.data.downloadUrl){let J=await(await import("axios")).default.get(Z.data.downloadUrl,{responseType:"arraybuffer"}),Q=w.join(he.tmpdir(),`mach-asc-${Date.now()}`);h.mkdirSync(Q,{recursive:!0}),A=w.join(Q,`AuthKey_${W.keyId}.p8`),h.writeFileSync(A,Buffer.from(J.data)),S=W.keyId,R=W.issuerId,r.success(c.green("\u2713 ASC API key loaded \u2014 no 2FA required for Portal operations"))}}}catch(b){r.warn(c.dim(`Could not load ASC API key: ${b.message}. Will fall back to Apple ID auth.`))}r.info(c.dim("Generating secure P12 export password..."));let H=xe();r.success(c.green("\u2713 Secure P12 password generated."));let P={...process.env,AWS_REGION:process.env.AWS_REGION||"ap-south-1",AWS_ACCESS_KEY_ID:process.env.AWS_ACCESS_KEY_ID,AWS_SECRET_ACCESS_KEY:process.env.AWS_SECRET_ACCESS_KEY,SSL_CERT_FILE:"/etc/ssl/cert.pem",AWS_CA_BUNDLE:"/etc/ssl/cert.pem",FASTLANE_SSL_CA_CERT:"/etc/ssl/cert.pem",MATCH_PASSWORD:I,FASTLANE_USER:g,FASTLANE_SKIP_UPDATE_CHECK:"1",FASTLANE_TEAM_ID:p,MATCH_KEYCHAIN_NAME:F,MATCH_KEYCHAIN_PASSWORD:y,TERM:process.env.TERM||"xterm-256color",SHELL:process.env.SHELL||"/bin/zsh",MATCH_OUTPUT_PATH:w.join(process.cwd(),"temp_match"),MATCH_STORAGE_MODE:"s3",MATCH_S3_REGION:f,MATCH_S3_BUCKET:u,MATCH_S3_OBJECT_PREFIX:"ios-certificates/",MATCH_USERNAME:g,MATCH_APP_IDENTIFIER:t,MATCH_TYPE:i,[`${m.envPrefix}P12_PASSWORD`]:H,...A&&S&&R?{APP_STORE_CONNECT_API_KEY_KEY_ID:S,APP_STORE_CONNECT_API_KEY_ISSUER_ID:R,APP_STORE_CONNECT_API_KEY_KEY_FILEPATH:A,FASTLANE_SKIP_2FA:"1"}:{}};if(s.force){r.warn(c.yellow(`
+\u26A0\uFE0F  Force flag detected: Hard resetting ${i} certificates...`)),r.info(c.dim("Detected decryption failure loop. Clearing remote storage directly to allow fresh generation.")),r.info(c.cyan(`Current MATCH_PASSWORD: ${I}`)),r.info(c.dim(`Cleaning match storage for Team ID: ${p}...`));try{(await v.post("/credentials/clean-match-storage",{projectId:e,teamId:p})).data.status==="success"&&r.success(c.green(`\u2713 Cleared S3 storage for Team ID: ${p}`))}catch(b){r.warn(c.yellow(`S3 cleanup via API failed: ${b.message}`)),r.info(c.dim("Continuing to attempt standard nuke..."))}try{T(`fastlane match nuke ${i} --skip_confirmation`,{stdio:"inherit",cwd:process.cwd(),env:P}),r.success(c.green(`\u2713 Nuked existing ${i} credentials`))}catch{r.warn(c.yellow("Standard nuke failed (likely due to password mismatch).")),r.info(c.dim("Since S3 was cleared manually, proceeding to generation..."))}}if(i==="adhoc"||i==="development")try{r.info(c.blue("Fetching registered devices..."));let W=(await v.get("/devices")).data.devices||[];if(W.length===0)r.warn(c.yellow("No registered devices found. Profile will only include devices already on the Apple Developer Portal.")),r.info(c.dim(`Register devices with: ${m.nameLower} device register`));else{let{multiselect:Z}=await import("@clack/prompts"),B=await Z({message:`Select devices to include in the ${i} profile:`,options:W.map(J=>({value:J.udid,label:`${J.name} (${J.udid.substring(0,12)}...)`,hint:J.model||J.platform})),initialValues:W.map(J=>J.udid)});if(!k(B)&&B.length>0){let J=W.filter(Q=>B.includes(Q.udid));if(r.info(c.blue(`Registering ${J.length} device(s) on Apple Developer Portal...`)),A&&S&&R)await ct(J,S,R,A);else{r.info(c.dim("You will be prompted for a 2FA code once \u2014 type it and press Enter."));for(let Q of J){let _e=Q.name.replace(/"/g,'\\"');ee(`fastlane run register_device name:"${_e}" udid:"${Q.udid}"`,{shell:!0,env:P,stdio:"inherit",cwd:process.cwd()})}}r.info(c.green("\u2713 Device registration complete."))}}}catch(b){r.warn(c.yellow(`Could not fetch registered devices: ${b.message}`)),r.info(c.dim("Continuing without explicit device registration."))}try{let b=ee(`fastlane match ${i} --app_identifier "${t}" --profile_name "${m.nameLower} ${i} ${t}"`,{shell:!0,cwd:process.cwd(),env:P,stdio:"inherit",encoding:"utf-8"});if(b.status!==0){r.warn(c.yellow(`
+Certificate sync failed. Attempting to create App ID and retry...`));try{T(`fastlane produce --app_identifier "${t}" --app_name "${t}" --skip_itc`,{stdio:"inherit",env:P}),r.success(c.green("\u2713 App ID created successfully")),r.info(c.blue("Retrying certificate sync...")),b=ee(`fastlane match ${i} --app_identifier "${t}" --profile_name "${m.nameLower} ${i} ${t}"`,{shell:!0,cwd:process.cwd(),env:P,stdio:"inherit",encoding:"utf-8"})}catch{}if(b.status!==0)throw new Error("fastlane match failed")}}catch(b){r.warn(c.yellow(`
+Sync failed. This often happens if the encryption passphrase (MATCH_PASSWORD) is incorrect or session expired.`)),r.info(c.cyan(`Failed MATCH_PASSWORD was: ${I}`));let W=await z({message:"What would you like to do?",options:[{value:"retry_password",label:"Retry with a different MATCH_PASSWORD",hint:"Manually enter the decryption passphrase"},{value:"check_portal",label:"Check Apple Portal (Resolve certificate limits)",hint:"See if you have too many certificates"},{value:"manual",label:"Fallback to manual upload",hint:"Provide .p12 and .mobileprovision files"},{value:"cancel",label:"Cancel",hint:"Go back"}]});if(k(W)||W==="cancel")throw b;if(W==="retry_password"){r.info(c.dim(`
+You are overriding the dashboard passphrase for this session.`));let Z=await le({message:"Enter the correct MATCH_PASSWORD for this project:"});if(Z&&!k(Z)){I=Z,r.info(c.blue("Retrying with provided passphrase...")),r.info(c.cyan(`New MATCH_PASSWORD: ${I}`));let B={...P,MATCH_PASSWORD:I};if(ee(`fastlane match ${i}`,{shell:!0,stdio:"inherit",cwd:process.cwd(),env:B}).status===0)await v.post(`/projects/${e}/secrets`,{key:"MATCH_ENCRYPTION_PASSPHRASE",value:I,description:"Encryption passphrase for iOS certificates (fastlane match)",visibility:"secret"}),r.success(c.green("\u2713 Dashboard passphrase updated.")),r.info(c.cyan(`MATCH_PASSWORD: ${I}`));else throw new Error("Sync failed again with provided passphrase.")}else throw b}else if(W==="check_portal")try{let Z=await ye(P,i);if(Z.length>0){if(r.info(c.dim(`Found ${Z.length} existing ${i} certificates on the portal.`)),await Ct(i,P,e,Z)&&(r.info(c.blue("Retrying certificate sync...")),ee(`fastlane match ${i}`,{shell:!0,stdio:"inherit",cwd:process.cwd(),env:P}).status!==0))throw new Error("Retry failed")}else throw r.error(c.red("No existing certificates found on portal to resolve.")),b}catch(Z){throw r.warn(c.dim(`Portal check warning: ${Z.message}`)),b}else throw b}r.success(c.green("\u2713 Certificates fetched and synced"));let U=w.join(process.cwd(),"temp_match"),$=w.join(U,`${m.fastlanePrefix}_export.p12`),Y=Ce(U,/\.mobileprovision$/);try{let W=`${process.env.HOME||"/Users/"+(process.env.USER||m.nameLower)}/Library/Keychains/${l}`;h.existsSync(U)||h.mkdirSync(U,{recursive:!0}),r.info(c.dim("Exporting certificate from keychain for dashboard upload..."));let Z=T(`security find-identity -v -p codesigning "${W}"`,{encoding:"utf-8"});r.info(c.dim(`Identities in keychain:
+${Z.trim()}`)),T(`security export -k "${W}" -t identities -f pkcs12 -o "${$}" -P ""`,{stdio:"ignore"});try{let B=T(`openssl pkcs12 -in "${$}" -nokeys -passin pass: -legacy 2>/dev/null || openssl pkcs12 -in "${$}" -nokeys -passin pass: 2>/dev/null`,{encoding:"utf-8"});if(!B.includes(p))throw new Error(`Exported P12 does not contain identity for team ${p}. Found: ${B.substring(0,200)}`);r.success(c.green(`\u2713 P12 verified \u2014 contains correct team identity (${p})`))}catch(B){throw new Error(`P12 verification failed: ${B.message}`)}}catch{r.warn(c.dim("Could not export certificate from keychain."))}s.teamId&&!p&&await Fe(e,s.teamId);let D=h.existsSync($)?$:Ce(U,/\.p12$/);if(D&&Y){let b,W;try{let Z=await ye(P,i);Z.length>0&&(b=Z[0].expires,W=Z[0].id)}catch{r.warn(c.dim("Could not fetch expiration date or ID for dashboard record."))}await te(e,D,"ios_cert",t,a,void 0,b,s.teamId||p,W,H),await te(e,Y,"ios_profile",t,a,void 0,b,s.teamId||p),r.success(c.green("\u2713 Both iOS certificate and provisioning profile uploaded successfully"));try{h.existsSync("./temp_match")&&h.rmSync("./temp_match",{recursive:!0,force:!0})}catch{}}else r.warn(c.yellow("Certificates generated but not found in expected location.")),r.info(c.dim("Falling back to manual upload...")),await Ee(e,t,a)}catch(C){d.stop("Certificate fetch failed"),r.error(c.red(`Error: ${C.message}`)),r.info(c.dim("Falling back to manual upload...")),await Ee(e,t,a)}}catch(I){d.stop("iOS setup failed"),r.error(c.red(`Error: ${I.message}`))}finally{if(A)try{h.rmSync(w.dirname(A),{recursive:!0,force:!0})}catch{}}}async function Fe(e,t){try{await v.post(`/projects/${e}/secrets`,{key:"APPLE_TEAM_ID",value:t,description:"Apple Developer Team ID (used for iOS signing)"}),r.success(c.green(`\u2713 Saved Team ID ${t} to Dashboard`))}catch(n){r.warn(c.yellow(`Could not save Team ID to Dashboard: ${n.message}`))}}async function Ee(e,t,n){r.info(c.yellow(`
+Manual Upload Mode`)),r.info("Please provide your certificate and provisioning profile:");let a=await L({message:"Path to .p12 certificate file:",validate:o=>h.existsSync(o)?void 0:"File not found"});k(a)&&(_("Operation cancelled"),process.exit(0));let i=await L({message:"Path to .mobileprovision file:",validate:o=>h.existsSync(o)?void 0:"File not found"});k(i)&&(_("Operation cancelled"),process.exit(0));let s=se();s.start(`Uploading to ${m.name} Dashboard...`);try{await te(e,a,"ios_cert",t,n),await te(e,i,"ios_profile",t,n),s.stop("Upload complete"),r.success(c.green("\u2713 iOS credentials uploaded successfully"))}catch(o){throw s.stop("Upload failed"),o}}async function ut(e,t,n,a,i){let s=se();r.step(c.blue("Android Credential Setup"));let o=a.bundleId;if(!o){let u=re(i,t),f=[];try{let l=(await v.get(`/credentials/${e}`)).data.credentials||[];f=[...new Set(l.filter(y=>y.platform==="android"&&y.bundleId&&y.bundleId!=="*").map(y=>y.bundleId))]}catch{}if(u&&!f.includes(u)&&f.unshift(u),f.length>0){let p=[...f.map(y=>({value:y,label:y,hint:y===u?"from config":void 0})),{value:"__new__",label:"+ Enter a new Package Name"}],l=await z({message:"Which Package Name are you setting up credentials for?",options:p});if(k(l)&&(_("Operation cancelled"),process.exit(0)),l==="__new__"){let y=await L({message:"Android Package Name (e.g. com.example.app):",placeholder:"com.example.app",validate:C=>C.includes(".")?void 0:"Please enter a valid package name"});k(y)&&(_("Operation cancelled"),process.exit(0)),o=y}else o=l}else{let p=await L({message:"Android Package Name (e.g. com.example.app):",placeholder:"com.example.app",validate:l=>l.includes(".")?void 0:"Please enter a valid package name"});k(p)&&(_("Operation cancelled"),process.exit(0)),o=p}}try{let p=((await v.get(`/credentials/${e}`)).data.credentials||[]).find(l=>l.platform==="android"&&l.distributionType===n&&l.bundleId===o);if(p){r.warn(c.yellow(`\u26A0\uFE0F  Existing Android credentials found for ${n}`));let l=await L({message:"What would you like to do? (use/new/cancel)",validate:y=>{let C=y.toLowerCase();if(!(C==="use"||C==="new"||C==="cancel"))return"Please type: use, new, or cancel"}});if(k(l)||l.toLowerCase()==="cancel")return;if(l.toLowerCase()==="use"){r.success(c.green("\u2713 Using existing credentials."));return}await v.delete(`/credentials/${p.credentialId}?projectId=${e}`)}}catch{}let g="./android/app/my-release-key.jks";if(h.existsSync(g)){let u=await Me({message:"Upload existing keystore?"});if(u&&!k(u)){let f=await L({message:"Key alias:",initialValue:"my-key-alias"});if(k(f))return;let p=await le({message:"Keystore password:"});if(k(p))return;let l=await le({message:"Key password (leave blank if same as keystore password):"});if(k(l))return;let y=l.trim()||p;await te(e,g,"android_keystore",o,n,f,void 0,void 0,void 0,void 0,p,y),r.success(c.green("\u2713 Keystore uploaded"));return}}r.info(c.blue("Generating new Android keystore..."));let d=a.keyAlias||`${m.nameLower}-${At()}`,A=xe(),I=`./${m.nameLower}-${t}.jks`;h.existsSync(I)&&h.unlinkSync(I),s.start("Generating keystore...");try{let u=A.replace(/'/g,"'\\''");T(`keytool -genkeypair -v -keystore "${I}" -alias "${d}" -keyalg RSA -keysize 2048 -validity 10000 -storepass '${u}' -keypass '${u}' -dname "CN=${m.name} Build, OU=Mobile, O=Company, L=City, S=State, C=US"`,{stdio:"inherit"}),s.stop("Keystore generated"),await te(e,I,"android_keystore",o,n,d,void 0,void 0,void 0,void 0,A,A),r.success(c.green("\u2713 Android credentials uploaded successfully")),r.info(c.cyan(`Key Alias: ${d}`))}catch(u){throw s.stop("Generation failed"),new Error(`Keystore generation failed: ${u.message}`)}}var It=e=>new Promise(t=>setTimeout(t,e));function ft(e){return/ECONNRESET|ETIMEDOUT|EAI_AGAIN|ENOTFOUND|ECONNABORTED|socket hang up|network|timeout|temporar/i.test(e)||/API_ERROR:\s*(408|409|425|429|5\d\d)/i.test(e)}async function te(e,t,n,a,i,s,o,g,d,A,I,u){let f=w.basename(t);r.info(c.dim(`Uploading ${f} (Isolated process)...`));let p=new URL(import.meta.url),l=w.dirname(p.pathname),C=[w.join(l,"commands","isolated-upload.js"),e,t,n,a,i,s||"undefined",o||"undefined",g||"undefined",d||"undefined",A||"undefined",I||"undefined",u||"undefined"],F="",S=5;for(let R=1;R<=S;R++){let H=ee("node",C,{stdio:"pipe",encoding:"utf-8",env:{...process.env,AT_CLI_ISOLATED:"1"}});if(H.status===0&&H.stdout.includes("SUCCESS")){r.info(c.dim(`\u2713 ${f} uploaded and registered.`));return}if(H.status===0){r.warn(c.yellow(`Isolated upload finished but success not confirmed: ${H.stdout}`));return}if(F=(H.stderr||H.stdout||H.error?.message||"Unknown isolated upload failure").trim(),!ft(F)||R>=S)throw r.error(c.red(`Isolated Upload Failed: ${F}`)),new Error(F);let U=Math.min(3e4,1500*Math.pow(2,R-1));r.warn(c.yellow(`Upload failed with a transient error. Retrying ${f} in ${Math.round(U/1e3)}s... (${R}/${S})`)),await It(U)}throw new Error(F||"Unknown isolated upload failure")}async function mt(e){let t=se(),n=e.platform,a=`./${m.configFileName}`;if(!h.existsSync(a)){r.error(`No ${m.configFileName} found. Run \`${m.nameLower} init\` or \`${m.nameLower} link\` first.`);return}let i=JSON.parse(h.readFileSync(a,"utf-8")),{projectId:s}=i;if(!s){r.error(`${m.configFileName} is missing projectId.`);return}try{t.start("Fetching project secrets...");let g=(await v.get(`/projects/${s}/secrets/export?env=all`)).data.secrets||{};t.stop("Secrets fetched and merged."),t.start("Fetching credentials...");let A=(await v.get(`/credentials/${s}`)).data.credentials||[];t.stop(`Found ${A.length} metadata records.`);let I=A.filter(l=>l.platform===n);if(I.length===0){r.info(`No ${n} credentials found on Dashboard.`);return}let u="./credentials.json",f={};if(h.existsSync(u))try{f=JSON.parse(h.readFileSync(u,"utf-8"))}catch{r.warn("Could not parse existing credentials.json, creating a new one.")}f[n]||(f[n]={});let p=w.join(process.cwd(),"credentials",n);h.existsSync(p)||h.mkdirSync(p,{recursive:!0});for(let l of I){t.start(`Downloading ${l.type} (${l.distributionType})...`);try{let y=await v.get(`/credentials/${l.credentialId}/download`,{params:{projectId:s,format:"raw"}});if(y.data.status==="success"&&y.data.downloadUrl){let C=w.join(process.cwd(),"credentials",n,l.distributionType);h.existsSync(C)||h.mkdirSync(C,{recursive:!0});let F=l.s3Key?.split(".").pop()||(l.type.includes("keystore")?"jks":l.type.includes("cert")?"p12":"mobileprovision"),S=`${l.type}.${F}`,R=w.join(C,S),H=await Be.get(y.data.downloadUrl,{responseType:"arraybuffer"});h.writeFileSync(R,Buffer.from(H.data));let P=w.join("credentials",n,l.distributionType,S),U="",$="",Y={alias:"",keystorePassword:"",keyPassword:""};if(n==="ios"&&l.type==="ios_cert"||n==="android"&&l.type==="android_keystore"){let D=await et(s,n,l);if(n==="ios"&&l.type==="ios_cert"&&F.toLowerCase()==="p12"){if(U=nt(D,g),U){let b=Ge(R,`${w.basename(R,w.extname(R))}-password.txt`,U);$=w.join("credentials",n,l.distributionType,w.basename(b))}}else if(n==="android"&&l.type==="android_keystore"&&(Y=it(D,g),Y.keystorePassword||Y.keyPassword)){let b=[Y.alias?`keyAlias=${Y.alias}`:void 0,Y.keystorePassword?`keystorePassword=${Y.keystorePassword}`:void 0,Y.keyPassword?`keyPassword=${Y.keyPassword}`:void 0].filter(Boolean).join(`
+`),W=Ge(R,`${w.basename(R,w.extname(R))}-passwords.txt`,b);$=w.join("credentials",n,l.distributionType,w.basename(W))}}if(n==="android")l.type==="android_keystore"&&(f.android.keystore={keystorePath:P,keystorePassword:Y.keystorePassword,keyAlias:Y.alias,keyPassword:Y.keyPassword},$&&(f.android.keystore.keystoreArchivePath=$));else if(n==="ios"){let D=l.distributionType==="store"?"production":l.distributionType==="adhoc"?"staging":"development";f.ios[D]||(f.ios[D]={}),l.type==="ios_cert"?(f.ios[D].certificatePath=P,f.ios[D].certificatePassword=U,$&&(f.ios[D].certificateArchivePath=$)):l.type==="ios_profile"&&(f.ios[D].provisioningProfilePath=P)}t.stop(`\u2713 ${l.type} (${l.distributionType}) saved${$?" with password archive":""}.`)}}catch(y){let C=y.response?.data?.message||y.message;t.stop(c.dim(`- Skipped ${l.type} (${l.distributionType}): ${C}`))}}h.writeFileSync(u,JSON.stringify(f,null,2)),r.success(c.green("\u2713 Local credentials.json updated.")),Ne("Credentials have been synced to your local machine. Ensure credentials.json and credentials/ is added to your .gitignore.","Sync Complete")}catch(o){t.stop(c.red("Sync failed.")),r.error(`Error: ${o.message}`)}}function xe(){let e="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_+=",t="";for(let n=0;n<24;n++)t+=e.charAt(Math.floor(Math.random()*e.length));return t}function At(e=8){let t="abcdefghijklmnopqrstuvwxyz0123456789",n="";for(let a=0;a<e;a++)n+=t.charAt(Math.floor(Math.random()*t.length));return n}async function Ct(e,t,n,a){let i=a||await ye(t,e);if(!i||i.length===0)return!1;let s=await z({message:"Select a certificate to revoke:",options:[...i.map(o=>({value:`revoke:${o.id}`,label:`Revoke: ${o.name} (${o.expires})`})),{value:"nuke",label:"Revoke All"},{value:"cancel",label:"Cancel"}]});return k(s)||s==="cancel"?!1:s==="nuke"?(T(`fastlane match nuke ${e}`,{stdio:"inherit",cwd:process.cwd(),env:t}),!0):typeof s=="string"&&s.startsWith("revoke:")?(await yt(t,s.split(":")[1]),!0):!1}async function ye(e,t){let n=t==="development"?"development":"distribution",a=`
+lane :${m.fastlanePrefix}_list_certs do
+  require 'spaceship'
+  require 'json'
+  begin
+    Spaceship::Portal.login(ENV['FASTLANE_USER'])
+    Spaceship::Portal.select_team(team_id: ENV['FASTLANE_TEAM_ID'])
+    output = Spaceship::Portal.certificate.all.select { |c|
+      if "${n}" == "development"
+        c.type_display_id.downcase.include?("development")
+      else
+        c.type_display_id.downcase.include?("distribution") || c.type_display_id.downcase.include?("production")
+      end
+    }.map { |c| { id: c.id, name: c.name, expires: c.expires.strftime('%Y-%m-%d'), type: c.type_display_id } }
+    puts "${m.jsonStartMarker}" + output.to_json + "${m.jsonEndMarker}"
+  rescue => e
+    $stderr.puts "ERROR: #{e.message}"
+    exit 1
+  end
+end`,i=w.join(he.tmpdir(),`/tmp/${m.nameLower}-list-certs-${Date.now()}`),s=w.join(i,"fastlane"),o=w.join(s,"Fastfile");try{h.existsSync(s)||h.mkdirSync(s,{recursive:!0}),h.writeFileSync(o,a);let d=T(`fastlane ${m.fastlanePrefix}_list_certs`,{env:{...e,CI:"1",FASTLANE_FASTFILE:o},cwd:i,stdio:["inherit","pipe","inherit"]}).toString().match(new RegExp(`${m.jsonStartMarker}(.*)${m.jsonEndMarker}`));return d?JSON.parse(d[1]):[]}finally{h.existsSync(i)&&h.rmSync(i,{recursive:!0,force:!0})}}async function yt(e,t){let n=`
+lane :${m.fastlanePrefix}_revoke_cert do
+  require 'spaceship'
+  begin
+    Spaceship::Portal.login(ENV['FASTLANE_USER'])
+    Spaceship::Portal.select_team(team_id: ENV['FASTLANE_TEAM_ID'])
+    cert = Spaceship::Portal.certificate.all.find { |c| c.id == "${t}" }
+    cert.revoke! if cert
+  rescue => e
+    $stderr.puts "ERROR: #{e.message}"
+    exit 1
+  end
+end`,a=w.join(he.tmpdir(),`/tmp/${m.nameLower}-revoke-cert-${Date.now()}`),i=w.join(a,"fastlane"),s=w.join(i,"Fastfile");try{h.existsSync(i)||h.mkdirSync(i,{recursive:!0}),h.writeFileSync(s,n),T(`fastlane ${m.fastlanePrefix}_revoke_cert`,{env:{...e,CI:"1",FASTLANE_FASTFILE:s},cwd:a,stdio:["inherit","pipe","inherit"]})}finally{h.existsSync(a)&&h.rmSync(a,{recursive:!0,force:!0})}}export{St as a,j as b,re as c,oe as d,wt as e,Ze as f,Xe as g,lt as h,mt as i};

package/dist/{credentials-Y4SOYAM2.js → credentials-LDTYEZRC.js}

@@ -1 +1 @@
-import{g as a,h as b,i as c}from"./chunk-H4NBOSTT.js";import"./chunk-NZ4K6LDA.js";export{a as credentialsMainCommand,b as credentialsSetupCommand,c as downloadCredentialsCommand};
+import{g as a,h as b,i as c}from"./chunk-DHVPMCZJ.js";import"./chunk-NZ4K6LDA.js";export{a as credentialsMainCommand,b as credentialsSetupCommand,c as downloadCredentialsCommand};

package/dist/index.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import{a as Te,b as Ge,c as Yi,d as Ji,e as nt,f as Xi,h as mt}from"./chunk-H4NBOSTT.js";import{a as f,b as zi,c as ye,d as Wi,e as Lt,f as je,g as C}from"./chunk-NZ4K6LDA.js";import{Command as Wl,Option as pt}from"commander";import{configDotenv as Yl}from"dotenv";import{intro as me,outro as ro}from"@clack/prompts";import fe from"chalk";import{text as qi,confirm as oo,spinner as so,isCancel as ui,cancel as gt,note as ao,outro as lo}from"@clack/prompts";import ht from"chalk";async function Zi(){try{let e=await qi({message:"Enter Bucket Name:",placeholder:"e.g. my-app-dev",validate(r){if(r.length===0)return"Bucket name is required"}});ui(e)&&(gt("Operation cancelled."),process.exit(0));let t=await qi({message:"Enter Region:",initialValue:"ap-south-1"});ui(t)&&(gt("Operation cancelled."),process.exit(0));let i=await oo({message:"Do you want to create a CloudFront Distribution for this bucket?",initialValue:!0});ui(i)&&(gt("Operation cancelled."),process.exit(0));let n=so();n.start("Setting up hosting infrastructure...");try{let r=await C.post("/hosting/setup",{bucketName:e,region:t,createCloudFront:i});if(r.data.status!=="success")throw new Error(r.data.message||"Hosting setup failed");n.stop("Hosting setup complete!");let o=r.data,s=`Bucket Name:      ${ht.cyan(o.bucketName)}
+import{a as Te,b as Ge,c as Yi,d as Ji,e as nt,f as Xi,h as mt}from"./chunk-DHVPMCZJ.js";import{a as f,b as zi,c as ye,d as Wi,e as Lt,f as je,g as C}from"./chunk-NZ4K6LDA.js";import{Command as Wl,Option as pt}from"commander";import{configDotenv as Yl}from"dotenv";import{intro as me,outro as ro}from"@clack/prompts";import fe from"chalk";import{text as qi,confirm as oo,spinner as so,isCancel as ui,cancel as gt,note as ao,outro as lo}from"@clack/prompts";import ht from"chalk";async function Zi(){try{let e=await qi({message:"Enter Bucket Name:",placeholder:"e.g. my-app-dev",validate(r){if(r.length===0)return"Bucket name is required"}});ui(e)&&(gt("Operation cancelled."),process.exit(0));let t=await qi({message:"Enter Region:",initialValue:"ap-south-1"});ui(t)&&(gt("Operation cancelled."),process.exit(0));let i=await oo({message:"Do you want to create a CloudFront Distribution for this bucket?",initialValue:!0});ui(i)&&(gt("Operation cancelled."),process.exit(0));let n=so();n.start("Setting up hosting infrastructure...");try{let r=await C.post("/hosting/setup",{bucketName:e,region:t,createCloudFront:i});if(r.data.status!=="success")throw new Error(r.data.message||"Hosting setup failed");n.stop("Hosting setup complete!");let o=r.data,s=`Bucket Name:      ${ht.cyan(o.bucketName)}
 `;s+=`Region:           ${ht.cyan(o.region)}
 `,s+=`S3 Website URL:   ${ht.blue(o.s3WebsiteUrl)}`,o.cloudFrontId&&(s+=`
 
@@ -1099,9 +1099,9 @@ ${M}`)),a&&await a("export"),b.info(y.blue(`Exporting with Bundle ID: "${ie}"`))
 `),new Error(J)}return W}},Be=e=>{try{let t=P.join(process.cwd(),f.configFileName);if(g.existsSync(t)){let i=JSON.parse(g.readFileSync(t,"utf-8"));if(e==="android"&&i.android?.package)return i.android.package;if(e==="ios"&&i.ios?.bundleIdentifier)return i.ios.bundleIdentifier}if(e==="android"){let i=["android/app/build.gradle","app/build.gradle","build.gradle"];for(let n of i)if(g.existsSync(n)){let o=g.readFileSync(n,"utf-8").match(/applicationId\s+['"]([^'"]+)['"]/);if(o)return o[1]}}else{let i=P.resolve(process.cwd(),g.existsSync("ios")?"ios":"."),n=Ze(i,["Info.plist"]).filter(s=>!s.includes("/Pods/")&&!s.includes("/build/")&&!s.includes("/DerivedData/"));n.sort((s,l)=>l.split("/").length-s.split("/").length);for(let s of n){let a=g.readFileSync(s,"utf-8").match(/<key>CFBundleIdentifier<\/key>\s*<string>([^<]+)<\/string>/);if(a&&!a[1].includes("$"))return a[1]}let r=Ze(i,[".xcodeproj"]);if(r.length>0){let s=P.join(r[0],"project.pbxproj");if(g.existsSync(s)){let a=g.readFileSync(s,"utf-8").match(/PRODUCT_BUNDLE_IDENTIFIER\s*=\s*"?([^";\s]+)"?;/);if(a)return a[1]}}let o=["app.json","app.config.json","app.config.js","app.config.ts"];for(let s of o)if(g.existsSync(s)){let a=g.readFileSync(s,"utf-8").match(/"bundleIdentifier":\s*"([^"]+)"/);if(a)return a[1]}}}catch{return null}return null},rs=()=>{try{return Y("emulator -version",{stdio:"ignore"}),"emulator"}catch{let t=ue.homedir(),i=[P.join(t,"Library/Android/sdk/emulator/emulator"),P.join(t,"Android/Sdk/emulator/emulator"),"/usr/local/lib/android/sdk/emulator/emulator"];for(let n of i)if(g.existsSync(n))return n}return"emulator"},os=async(e,t)=>{let i=Ft();try{if(Y("adb devices").toString().split(`
 `).slice(1).map(s=>s.trim()).filter(s=>s.length>0&&!s.startsWith("*")).map(s=>s.split("	")[0]).length===0){b.warn(y.yellow("No Android devices or emulators found."));let s=rs(),l=[];try{l=Y(`${s} -list-avds`).toString().split(`
 `).filter(a=>a.trim().length>0)}catch{}if(l.length>0){let a=await yi({message:"Select an emulator to launch:",options:l.map(u=>({value:u,label:u}))});if(Ht(a))return;i.start(`Launching emulator ${a}...`),$n(s,["-avd",a],{detached:!0,stdio:"ignore"}).unref();let d=0,c=!1;for(;d<60;){try{if(Y("adb shell getprop sys.boot_completed",{stdio:"pipe"}).toString().trim()==="1"){c=!0;break}}catch{}await new Promise(u=>setTimeout(u,2e3)),d++}if(!c)throw i.stop("Emulator launch timed out."),new Error("Emulator launch timed out. Please try launching it manually.");i.stop("Emulator launched.")}else throw new Error("No devices found and no emulators available to launch. (Make sure Android SDK is installed)")}i.start("Installing APK on device..."),await xe("adb",["install","-r",e],process.cwd(),{},t),i.stop("Installation complete.");let o=Be("android");if(o){b.info(y.blue(`\u{1F680} Launching ${o}...`));try{Y(`adb shell dumpsys package ${o}`).toString().split(`
-`).find(a=>a.includes("android.intent.action.MAIN")&&a.includes("android.intent.category.LAUNCHER"))?Y(`adb shell monkey -p ${o} -c android.intent.category.LAUNCHER 1`,{stdio:"ignore"}):Y(`adb shell monkey -p ${o} -c android.intent.category.LAUNCHER 1`,{stdio:"ignore"})}catch{b.warn("Could not auto-launch app. You may need to open it manually.")}}}catch(n){i.stop("Installation failed."),b.error(y.red(`Failed to install APK: ${n.message}`))}},ss=async(e,t,i)=>{let n=Ft();try{if(!Y("xcrun simctl list devices booted").toString().includes("(Booted)")){b.warn(y.yellow("No iOS Simulator is currently booted."));let o=Y("xcrun simctl list devices --json").toString(),s=JSON.parse(o).devices,l=[];Object.keys(s).forEach(u=>{s[u].forEach(p=>{p.isAvailable&&l.push({...p,runtime:u})})});let a=await yi({message:"Select a simulator to launch:",options:l.map(u=>({value:u.udid,label:`${u.name} (${u.runtime.split(".").pop()})`}))});if(Ht(a))return;n.start(`Booting ${a}...`),Y(`xcrun simctl boot ${a}`),Y(`open -a Simulator --args -CurrentDeviceUDID ${a}`);let d=0,c=!1;for(;d<30;){try{if(Y("xcrun simctl list devices booted").toString().includes(a)){c=!0;break}}catch{}await new Promise(u=>setTimeout(u,2e3)),d++}if(!c)throw n.stop("Simulator boot timed out."),new Error("Simulator boot timed out.");n.stop("Simulator booted.")}n.start("Installing on iOS Simulator..."),await xe("xcrun",["simctl","install","booted",e],process.cwd(),{},i),n.stop("Installation complete."),b.info(y.blue(`\u{1F680} Launching ${t}...`)),await xe("xcrun",["simctl","launch","booted",t],process.cwd(),{},i)}catch(r){n.stop("Installation failed."),b.error(y.red(`Failed to install on Simulator: ${r.message}`))}},as=async(e,t,i)=>{let n=Ft();n.start("Scanning for connected iOS devices...");try{let r=Y("xcrun devicectl list devices --json-output -").toString(),s=(JSON.parse(r).result?.devices||[]).filter(a=>a.connectionProperties?.transportType==="wired"||a.connectionProperties?.transportType==="localNetwork");if(s.length===0)throw n.stop("No connected iOS devices found."),new Error("Please connect your iPhone via USB or ensure it is on the same Wi-Fi for wireless debugging.");let l=s[0].identifier;if(s.length>1){n.stop();let a=await yi({message:"Select a device to install on:",options:s.map(d=>({value:d.identifier,label:`${d.deviceProperties?.name||d.name||d.model?.name} (${d.model?.name||"iPhone"}) - ${d.identifier}`}))});if(Ht(a))return;l=a,n.start(`Installing on ${l}...`)}else n.message(`Installing on ${s[0].model.name}...`);await xe("xcrun",["devicectl","device","install","app","--device",l,e],process.cwd(),{},i),n.stop("Installation complete."),b.info(y.blue(`\u{1F680} Launching ${t}...`)),await xe("xcrun",["devicectl","device","launch","app","--device",l,t],process.cwd(),{},i)}catch(r){n.stop("Installation failed."),b.error(y.red(`Failed to install on device: ${r.message}`)),b.info(y.dim('Make sure your device is unlocked and "Developer Mode" is enabled in Settings -> Privacy & Security.'))}};import Nn from"fs";import Tn from"path";import{isCancel as Ei,log as Fe,select as kn,spinner as ls,text as ds}from"@clack/prompts";import st from"chalk";async function xn(e){let t=await bi(e);t&&(Fe.success(st.green(`Maestro run ${t.status||"queued"}: ${t.testRunId}`)),t.launchDeferredReason&&Fe.warn(st.yellow(t.launchDeferredReason)),t.dashboardUrl&&Fe.info(st.dim("View test run: ")+st.white.underline(t.dashboardUrl)))}async function bi(e){let t=Te(`./${f.configFileName}`),i=e.projectId||t?.projectId,n=e.profile||e.buildProfile||"production";if(!i)return Fe.error(`No projectId found. Run \`${f.nameLower} link\` first or pass an internal project id.`),null;let r=e.platform;if(!r&&e.latest){let a=await kn({message:"Select platform for the latest build:",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"}]});if(Ei(a))return null;r=a}let o=await cs(e);if(!o)return null;if(o.kind==="latest"&&!r)return Fe.error("Pass --platform when using --latest."),null;if(o.kind==="artifact-url"&&!r)return Fe.error("Pass --platform when using --artifact-url."),null;let s=us(e.maestroRetries);if(s===null)return null;let l=ls();e.quiet||l.start("Queuing Maestro run...");try{let a=await C.post("/tests/maestro",{projectId:i,platform:r,profile:n,latest:o.kind==="latest",buildId:o.kind==="build-id"?o.value:e.buildId,buildUrl:o.kind==="build-url"?o.value:e.buildUrl,artifactUrl:o.kind==="artifact-url"?o.value:e.artifactUrl,flows:e.maestroFlows||".maestro",device:e.maestroDevice||(r==="ios"?"iphone_15":"pixel_6"),retries:s,record:!!e.maestroRecord});if(a.data.status!=="success")throw new Error(a.data.message||"Failed to queue Maestro run");let d=a.data.testRun,c={testRunId:d.testRunId,status:d.status,projectId:i,buildId:d.buildId,platform:d.platform,dashboardUrl:d.dashboardUrl||`${je}/tests/${d.testRunId}`,launchDeferredReason:d.launchDeferredReason};return ps(e,c),e.quiet||l.stop("Maestro run queued"),c}catch(a){e.quiet||l.stop("Could not queue Maestro run");let d=a.response?.data?.message||a.message||"Unknown error";return Fe.error(st.red(`Maestro queue failed: ${d}`)),null}}async function cs(e){if(e.buildId)return{kind:"build-id",value:e.buildId};if(e.buildUrl)return{kind:"build-url",value:e.buildUrl};if(e.artifactUrl)return{kind:"artifact-url",value:e.artifactUrl};if(e.latest)return{kind:"latest"};let t=await kn({message:"Select app artifact source for Maestro:",options:[{value:"latest",label:"Latest successful build"},{value:"build-id",label:"Build ID"},{value:"build-url",label:`${f.name} build URL`},{value:"artifact-url",label:"Direct artifact URL"}]});if(Ei(t))return null;if(t==="latest")return{kind:"latest"};let i=await ds({message:t==="build-id"?"Enter build ID:":t==="build-url"?`Enter ${f.name} build URL:`:"Enter artifact URL:",validate:n=>{let r=String(n||"").trim();if(!r)return"Value is required";if((t==="build-url"||t==="artifact-url")&&!r.startsWith("http"))return"Must be a URL"}});return Ei(i)?null:{kind:t,value:String(i).trim()}}function us(e){if(e==null||e==="")return 1;let t=Number(e);return!Number.isInteger(t)||t<0||t>10?(Fe.error("--maestro-retries must be an integer between 0 and 10."),null):t}function ps(e,t){if(!e.jsonOutput)return;let i=Tn.resolve(e.jsonOutput),n={...t,updatedAt:new Date().toISOString()};try{let r=Tn.dirname(i);r&&r!=="."&&Nn.mkdirSync(r,{recursive:!0}),Nn.writeFileSync(i,JSON.stringify(n,null,2))}catch(r){Fe.warn(st.yellow(`Could not write Maestro metadata JSON: ${r.message}`))}}var Ai=8,gs=6,Yn=e=>new Promise(t=>setTimeout(t,e)),hs=e=>{let t=e.response?.status,i=e.code||"",n=e.message||"";return t?t===408||t===409||t===425||t===429||t>=500||/ECONNRESET|ETIMEDOUT|EAI_AGAIN|ENOTFOUND|ECONNABORTED|socket hang up|network|timeout/i.test(`${i} ${n}`):!0},jt=async(e,t,i=gs)=>{let n;for(let r=1;r<=i;r++)try{return await t()}catch(o){if(n=o,!hs(o)||r>=i)break;let s=Math.min(6e4,2e3*Math.pow(2,r-1)),l=o.response?.status||o.code||o.message||"network error";v.warn(N.yellow(`${e} failed transiently (${l}). Retrying in ${Math.round(s/1e3)}s... (${r}/${i})`)),await Yn(s)}throw n},ys=e=>{let t=e.response?.status;return t?t===408||t===429||t>=500:!0},Et=e=>e.credentialId||e.id,Ss=async(e,t)=>{let i=Et(e);if(!i)return e.downloadUrl;let n=await C.get(`/credentials/${i}/download`,{params:{projectId:t}});return n.data?.status==="success"&&n.data?.downloadUrl?n.data.downloadUrl:e.downloadUrl},Jn=async(e,t)=>{let i=e.downloadUrl;for(let n=1;n<=Ai;n++)try{if((!i||n>1)&&(i=await Ss(e,t)),!i)throw new Error(`Credential ${e.name||Et(e)||"unknown"} has no download URL.`);let r=await St.get(i,{responseType:"arraybuffer",timeout:6e4,maxContentLength:1/0,maxBodyLength:1/0,headers:{Connection:"close"}});return Buffer.from(r.data).toString("base64")}catch(r){if(n>=Ai||!ys(r))throw r;let o=Math.min(1500*n*n,15e3);v.warn(N.dim(`  - Temporary network error downloading ${e.name}. Retrying... (${n}/${Ai})`)),await Yn(o)}throw new Error(`Failed to download credential ${e.name||Et(e)||"unknown"}.`)},Es=async(e,t)=>{let i=await Jn(e,t);return Buffer.from(i,"base64").toString("utf8")},bs=(e,t)=>t?.ios?.buildNumber??t?.iosBuildNumber??e?.ios?.buildNumber??e?.expo?.ios?.buildNumber,As=(e,t,i)=>t?.ios?.ascAppId??t?.ascAppId??e?.ios?.ascAppId??e?.submit?.[i]?.ios?.ascAppId??e?.submit?.production?.ios?.ascAppId,Fn=e=>e.bundleId||e.bundleIdentifier||e.meta?.bundleId||e.meta?.bundleIdentifier,Hn=(e,t)=>{let i=e.filter(n=>n.type==="asc_api_key");if(i.length!==0){if(t){let n=i.find(o=>Fn(o)===t);if(n)return n;let r=i.find(o=>Fn(o)==="*");if(r)return r}return i[0]}},Is=e=>typeof e=="string"&&e.trim().toLowerCase()==="auto",Xn=(e,t,i=[])=>{if(!oe.existsSync(e))return i;let n;try{n=oe.readdirSync(e,{withFileTypes:!0})}catch{return i}for(let r of n){if(r.name==="Pods"||r.name==="build"||r.name==="DerivedData")continue;let o=Se.join(e,r.name);r.isDirectory()?Xn(o,t,i):r.name===t&&i.push(o)}return i},_s=(e,t,i)=>{let n=`${i} ${t.environment||""}`.toLowerCase(),r=e.toLowerCase(),o=0;return(n.includes("development")||n.includes("dev"))&&/(^|[.-])dev(elopment)?($|[.-])/.test(r)&&(o+=20),(n.includes("staging")||n.includes("stage"))&&/(^|[.-])stag(e|ing)?($|[.-])/.test(r)&&(o+=20),(n.includes("production")||n.includes("prod"))&&(/(^|[.-])(dev|development|stag|stage|staging)($|[.-])/.test(r)||(o+=20)),o},Ps=(e,t)=>{let i=Se.resolve(process.cwd(),oe.existsSync("ios")?"ios":"."),n=Xn(i,"project.pbxproj"),r=[];for(let o of n)try{let l=oe.readFileSync(o,"utf8").matchAll(/PRODUCT_BUNDLE_IDENTIFIER\s*=\s*"?([^";\s]+)"?;/g);for(let a of l){let d=a[1]?.trim();d&&!d.includes("$")&&!d.startsWith("com.apple.")&&!r.includes(d)&&r.push(d)}}catch{}if(r.length!==0)return r.length===1?r[0]:r.map(o=>({bundleId:o,score:_s(o,e,t)})).sort((o,s)=>s.score-o.score)[0]?.bundleId},Gt=e=>String(e||"").trim().toLowerCase().replace(/_/g,"-"),Kt=(e,t)=>{let i=Gt(e);return t==="ios"&&(i==="internal"||i==="ad-hoc")?"adhoc":t==="android"&&["internal","adhoc","ad-hoc","development","dev","staging","stage"].includes(i)?"internal":i},jn=(e,t,i)=>{let n=Kt(e.distributionType||e.meta?.distributionType,i);return n?n===Kt(t,i):!0},Gn=(e,t,i)=>{let n=Kt(e.distributionType||e.meta?.distributionType,i),r=Kt(t,i);return n?n===r?3:i==="android"&&r!=="store"&&n!=="store"?2:0:1},$s=e=>{let t=e.toLowerCase();return t==="development"||t==="dev"||t.startsWith("development-")||t.startsWith("dev-")||t.endsWith("-development")||t.endsWith("-dev")},ws=e=>{let t=e.toLowerCase();return t.includes("staging")||t.includes("stage")||t.includes("preview")||t.includes("adhoc")||t.includes("ad-hoc")},Ds=(e,t)=>{let i=Gt(e.distribution),n=Gt(e.iosExportMethod),r=Gt(e.environment);return e.platform!=="ios"?i==="store"?"store":"internal":e.developmentClient||e.simulator?"development":n==="app-store"||i==="store"?"store":n==="development"||i==="development"?"development":n==="ad-hoc"||n==="adhoc"||i==="ad-hoc"||i==="adhoc"||i==="internal"?"adhoc":r==="production"||r==="store"?"store":r==="development"||r==="dev"?"development":r==="staging"||r==="stage"||r==="preview"?"adhoc":t.toLowerCase()==="production"||t.toLowerCase().includes("store")?"store":$s(t)?"development":(ws(t),"adhoc")},qn=e=>e.bundleId||e.bundleIdentifier||e.packageName||e.meta?.bundleId||e.meta?.bundleIdentifier||e.meta?.packageName,Kn=(e,t)=>{if(!t)return!0;let i=qn(e);return!i||i==="*"||i===t},Vn=(e,t)=>{let i=qn(e);return!t||!i?0:i===t?2:i==="*"?1:-1},Zn=e=>{try{let t=Buffer.from(e,"base64").toString("utf8"),i=t.match(/<key>application-identifier<\/key>\s*<string>([^<]+)<\/string>/)?.[1]?.trim();if(!i)return;let n=t.match(/<key>TeamIdentifier<\/key>\s*<array>\s*<string>([^<]+)<\/string>/)?.[1]?.trim();if(n&&i.startsWith(`${n}.`))return i.slice(n.length+1);let r=i.indexOf(".");return r>=0?i.slice(r+1):i}catch{return}},Rs=(e,t)=>{if(e===t||e==="*")return!0;if(e.endsWith(".*")){let i=e.slice(0,-2);return t.startsWith(`${i}.`)}return!1},vs=(e,t)=>{if(!t)return!0;let i=Zn(e);if(i)return Rs(i,t);try{return Buffer.from(e,"base64").toString("latin1").includes(t)}catch{return!0}},Vt=async e=>{if(e.failOnly){(!e.projectId||!e.buildId)&&(v.error(N.red("--project-id and --build-id are required with --fail-only.")),process.exit(1));let l=e.error||"Build runner failed before it could report a final status.";try{await C.patch(`/builds/${e.projectId}/${e.buildId}`,{status:"failed",error:l,endTime:Date.now()}),v.info(N.yellow(`Marked build ${e.buildId} as failed.`));return}catch(a){v.error(N.red(`Could not mark build failed: ${a.message}`)),process.exit(1)}}e.platform!=="android"&&e.platform!=="ios"&&(v.error(`Platform ${e.platform} is not supported. Use 'android' or 'ios'.`),process.exit(1));let t=Ii(),i=e.buildId||fs(),n=e.projectId,r=Date.now(),o=!!n,s=async l=>{if(n)try{await C.patch(`/builds/${n}/${i}`,{status:"failed",error:l})}catch{}};if(e.local&&e.buildId){e.quiet||t.start(`Preparing isolated workspace for build: ${e.buildId}`);try{let l=await C.get(`/builds/${n}/${e.buildId}/source-url`);if(l.data.status!=="success")throw new Error("Failed to get source download URL from API");let a=await St.get(l.data.downloadUrl,{responseType:"stream"}),d=(n||e.projectId||"default").replace(/[^a-zA-Z0-9-_]/g,"_"),c=Se.join(ms.homedir(),f.workspacesDir,d);oe.mkdirSync(c,{recursive:!0});let u=new Set(["node_modules",`.${f.nameLower}-cache-meta`]),p=new Set(["Pods"]);if(oe.existsSync(c)){let B=oe.readdirSync(c);for(let k of B){if(u.has(k))continue;if(k==="ios"){let h=Se.join(c,"ios");try{let K=oe.readdirSync(h);for(let _ of K)if(!p.has(_))try{oe.rmSync(Se.join(h,_),{recursive:!0,force:!0})}catch{}}catch{}continue}let j=Se.join(c,k);try{oe.rmSync(j,{recursive:!0,force:!0})}catch{}}}let m=Se.join(c,"source.zip"),I=a.data,L=oe.createWriteStream(m);await new Promise((B,k)=>{I.pipe(L),I.on("error",j=>k(j)),L.on("finish",()=>B())}),new Bn(m).extractAllTo(c,!0);try{oe.unlinkSync(m)}catch{}process.chdir(c),v.info(N.green(`\u2713 Persistent workspace ready: ${c}`)),v.info(N.dim(`  \u{1F4E6} Cached dirs preserved: node_modules=${oe.existsSync(Se.join(c,"node_modules"))?"\u2705":"\u274C"}, Pods=${oe.existsSync(Se.join(c,"ios","Pods"))?"\u2705":"\u274C"}`)),t.stop()}catch(l){t.stop(`Failed to prepare isolated workspace: ${l.message}`),n&&await s(`Setup Error: ${l.message}`),process.exit(1)}}try{let l=e.repo;if(!l)try{l=Mn("git config --get remote.origin.url").toString().trim()}catch{v.warn("Could not detect git repository URL.")}!l&&e.dryRun,l||(l="https://github.com/placeholder/repo.git"),v.info(`Build ID: ${N.cyan(i)}`);let a={},d={},c=Te(`./${f.configFileName}`);if(c){n=c.projectId;let _=e.buildProfile||"production",S=Ge(c,_);!S&&e.buildProfile&&(v.error(`Build profile '${_}' not found in ${f.configFileName}`),process.exit(1));let O=S||{};process.env.MACH_DEBUG&&v.info(N.dim(`Build profile: ${_} | Platform: ${e.platform} | Distribution: ${O.distribution||"store"} | Environment: ${O.environment||_}`)),O.env&&(d=O.env,v.info(N.blue(`Use Build Profile: ${_}`)));let D=e.platform,T=O[D]||{},R=["developmentClient","simulator","distribution","buildCommand","apk","iosScheme","preBuild","postBuild","scheme","environment","androidPackage","iosBundleIdentifier","name","iosDeploymentTarget","iosApiKeyId","iosApiKeyIssuer","iosApiKeyPath","iosTeamId","iosConfiguration","iosExportMethod","branch","repo","instanceType","ami","bucket","region","nodeVersion"];e.name=c.name,e.appName=c.name,e.androidPackage=c.android?.package,e.iosBundleIdentifier=c.ios?.bundleIdentifier,e.iosScheme=c.ios?.iosScheme,!e.nodeVersion&&c.nodeVersion&&(e.nodeVersion=c.nodeVersion);let $=x=>x==="androidPackage"?T.androidPackage??T.package??O.androidPackage??O.android?.package:x==="iosBundleIdentifier"?T.iosBundleIdentifier??T.bundleIdentifier??O.iosBundleIdentifier??O.ios?.bundleIdentifier:T[x]!==void 0?T[x]:O[x];for(let x of R){let H=$(x),E=x==="androidPackage"||x==="iosBundleIdentifier";H!==void 0&&(e[x]===void 0||E)&&(e[x]=H)}if(e.platform==="ios"&&!(T.iosBundleIdentifier??T.bundleIdentifier??O.iosBundleIdentifier??O.ios?.bundleIdentifier)){let H=Ps(e,_);H&&H!==e.iosBundleIdentifier&&(v.warn(N.yellow(`Detected native iOS bundle identifier ${H}; using it for credential lookup. Set build.${_}.ios.bundleIdentifier to make this explicit.`)),e.iosBundleIdentifier=H)}e.branch=e.branch||"main",e.iosConfiguration=e.iosConfiguration||(e.developmentClient||e.simulator?"Debug":"Release"),e.sshUser=e.sshUser||process.env.USER||"ubuntu",e.simulator===void 0&&(e.simulator=!1),e.local===void 0&&(e.local=!1),e.verbose===void 0&&(e.verbose=!1);let U=x=>{if(!x)return x;if(x.startsWith("scripts.")){let H=x.split(".")[1],E=c.scripts?.[H];if(E)return E;v.warn(`Script reference not found: ${x}`)}return x};e.buildCommand=U(e.buildCommand),e.preBuild=U(e.preBuild),e.postBuild=U(e.postBuild),!e.scheme&&c.scheme&&(e.scheme=c.scheme);let G={...nt(c,f.envPrefix),...nt(O,`${f.envPrefix}PROFILE_`)};a={...a,...d,...G},process.env.IOS_P12_PASSWORD&&!a.IOS_P12_PASSWORD&&(a.IOS_P12_PASSWORD=process.env.IOS_P12_PASSWORD),process.env.MATCH_PASSWORD&&!a.MATCH_PASSWORD&&(a.MATCH_PASSWORD=process.env.MATCH_PASSWORD),e.platform==="ios"&&(!e.iosTeamId&&O.ios?.appleTeamId&&(e.iosTeamId=O.ios.appleTeamId),!e.iosTeamId&&c.submit?.[_]?.ios?.appleTeamId&&(e.iosTeamId=c.submit[_].ios.appleTeamId),!e.iosTeamId&&c.submit?.production?.ios?.appleTeamId&&(v.warn(N.yellow(`Check: Using 'production' Team ID for '${_}' build.`)),e.iosTeamId=c.submit.production.ios.appleTeamId),e.iosTeamId?v.info(N.magenta(`\u2713 Injected iOS Team ID from config: ${e.iosTeamId}`)):v.warn(N.yellow("\u26A0\uFE0F No iOS Team ID found. Signing might fail if not managed automatically via Expo.")))}let u="unknown";try{u=Mn("git rev-parse --abbrev-ref HEAD").toString().trim()}catch{v.warn("Failed to detect git branch.")}let p="1.0.0";try{oe.existsSync("./package.json")&&(p=JSON.parse(oe.readFileSync("./package.json","utf-8")).version||"1.0.0")}catch{}let m=e.buildProfile||"production",I="Internal";e.developmentClient?I="DevelopmentClient":m.toLowerCase().includes("store")||m.toLowerCase()==="production"?I="Store":m.toLowerCase().includes("preview")||m.toLowerCase().includes("staging")?I="Staging":(m.toLowerCase().includes("development")||m.toLowerCase().includes("dev"))&&(I="Development");let L=e.platform==="ios"?"iOS":"Android",w=e.platform==="ios"&&e.simulator?" (Simulator)":"",B=`${L}${w} v${p} (${I})`;if(zt(e,{status:"created",projectId:n,buildId:i,platform:e.platform,profile:m,branch:u,version:p,buildType:I,developmentClient:!!e.developmentClient,summary:B}),n){try{let _=e.buildProfile||"production",S=e.environment||_;v.info(N.blue(`Fetching managed secrets for profile: ${_} (environment: ${S})...`));let D=(await C.get(`/projects/${n}/secrets/export?env=${S}`)).data;D.status==="success"&&D.secrets&&(a={...a,...D.secrets},Object.keys(D.secrets).length>0&&v.info(N.magenta(`\u2713 Injected ${Object.keys(D.secrets).length} secrets from Dashboard.`)))}catch(_){v.warn(`Failed to load managed secrets from Dashboard: ${_.message}`)}try{v.info(N.blue("Fetching managed credentials..."));let _=Ds(e,m),S=e.platform==="ios"?e.iosBundleIdentifier:e.androidPackage,O=e.platform==="ios"?"bundle":"package";v.info(N.dim(`  Credential target: ${O} ${S||"not set"} (${_})`));let D=await C.get("/credentials/resolve",{params:{projectId:n,platform:e.platform,bundleId:S,distributionType:_}});if(D.data.status==="success"&&D.data.credentials){let T=D.data.credentials;v.info(N.magenta(`\u2713 Found ${T.length} relevant credentials.`));let R=T.filter(E=>e.platform==="ios"&&E.type==="ios_profile"?jn(E,_,e.platform)?Kn(E,S):!1:e.platform==="android"&&E.type==="android_keystore"?Kn(E,S):!!jn(E,_,e.platform)).sort((E,ne)=>Vn(ne,S)*10+Gn(ne,_,e.platform)-(Vn(E,S)*10+Gn(E,_,e.platform)));v.info(N.dim(`  Filtered to ${R.length} credentials for distributionType: ${_}`));let $=!1,U=!1,G=!1,x=[];for(let E of R)if(!(E.type==="ios_cert"&&$||E.type==="ios_profile"&&U||E.type==="android_keystore"&&G)&&["ios_cert","ios_profile","android_keystore"].includes(E.type)&&(E.downloadUrl||Et(E)))try{let z=await Jn(E,n);if(E.type==="ios_cert"&&!$)a.IOS_DIST_P12=z,E.password?(a.IOS_P12_PASSWORD=E.password,v.info(N.dim(`  - Injected ${E.name} as IOS_DIST_P12 with password from credential record`))):v.info(N.dim(`  - Injected ${E.name} as IOS_DIST_P12`)),$=!0;else if(E.type==="ios_profile"&&!U){if(!vs(z,S)){let he=Zn(z)||"unknown";throw new Error(`Provisioning profile ${E.name||Et(E)||"unknown"} is for a different bundle ID. Expected ${S}, found ${he}. Upload a ${_} profile for ${S}.`)}a.IOS_PROVISIONING_PROFILE=z,v.info(N.dim(`  - Injected ${E.name} as IOS_PROVISIONING_PROFILE`)),U=!0}else if(E.type==="android_keystore"&&!G){a.ANDROID_KEYSTORE_BASE64=z;let he=E.keystorePassword||E.password,ie=E.keyPassword||E.keystorePassword||E.password,F=E.alias||E.meta?.alias;if(he)a.ANDROID_STORE_PASSWORD=he,v.info(N.dim("  - Injected keystore password from credential record"));else{let A=["ANDROID_STORE_PASSWORD",...[_==="store"?"PRODUCTION":_==="internal"||_==="adhoc"?"STAGING":"DEVELOPMENT",_.toUpperCase(),"PRODUCTION","STORE","INTERNAL","STAGING","RELEASE","DEBUG"].map(V=>`KEYSTORE_PASSWORD_${V}`),"KEYSTORE_PASSWORD"].find(V=>!!a[V]);A&&a[A]&&(a.ANDROID_STORE_PASSWORD=a[A])}if(ie?(a.ANDROID_KEY_PASSWORD=ie,v.info(N.dim("  - Injected key password from credential record"))):a.ANDROID_KEY_PASSWORD=a.ANDROID_STORE_PASSWORD||"",F)a.ANDROID_KEY_ALIAS=F;else{let M=["ANDROID_KEY_ALIAS","KEYSTORE_ALIAS"].find(W=>!!a[W]);M&&(a.ANDROID_KEY_ALIAS=a[M])}v.info(N.dim(`  - Injected ${E.name} as ANDROID_KEYSTORE_BASE64`)),G=!0}}catch(z){x.push(`${E.name||E.type}: ${z.message}`)}let H=e.platform==="ios"?e.simulator||$&&U:G||!R.some(E=>E.type==="android_keystore");if(x.length>0&&!H)throw new Error(`Credential setup failed:
+`).find(a=>a.includes("android.intent.action.MAIN")&&a.includes("android.intent.category.LAUNCHER"))?Y(`adb shell monkey -p ${o} -c android.intent.category.LAUNCHER 1`,{stdio:"ignore"}):Y(`adb shell monkey -p ${o} -c android.intent.category.LAUNCHER 1`,{stdio:"ignore"})}catch{b.warn("Could not auto-launch app. You may need to open it manually.")}}}catch(n){i.stop("Installation failed."),b.error(y.red(`Failed to install APK: ${n.message}`))}},ss=async(e,t,i)=>{let n=Ft();try{if(!Y("xcrun simctl list devices booted").toString().includes("(Booted)")){b.warn(y.yellow("No iOS Simulator is currently booted."));let o=Y("xcrun simctl list devices --json").toString(),s=JSON.parse(o).devices,l=[];Object.keys(s).forEach(u=>{s[u].forEach(p=>{p.isAvailable&&l.push({...p,runtime:u})})});let a=await yi({message:"Select a simulator to launch:",options:l.map(u=>({value:u.udid,label:`${u.name} (${u.runtime.split(".").pop()})`}))});if(Ht(a))return;n.start(`Booting ${a}...`),Y(`xcrun simctl boot ${a}`),Y(`open -a Simulator --args -CurrentDeviceUDID ${a}`);let d=0,c=!1;for(;d<30;){try{if(Y("xcrun simctl list devices booted").toString().includes(a)){c=!0;break}}catch{}await new Promise(u=>setTimeout(u,2e3)),d++}if(!c)throw n.stop("Simulator boot timed out."),new Error("Simulator boot timed out.");n.stop("Simulator booted.")}n.start("Installing on iOS Simulator..."),await xe("xcrun",["simctl","install","booted",e],process.cwd(),{},i),n.stop("Installation complete."),b.info(y.blue(`\u{1F680} Launching ${t}...`)),await xe("xcrun",["simctl","launch","booted",t],process.cwd(),{},i)}catch(r){n.stop("Installation failed."),b.error(y.red(`Failed to install on Simulator: ${r.message}`))}},as=async(e,t,i)=>{let n=Ft();n.start("Scanning for connected iOS devices...");try{let r=Y("xcrun devicectl list devices --json-output -").toString(),s=(JSON.parse(r).result?.devices||[]).filter(a=>a.connectionProperties?.transportType==="wired"||a.connectionProperties?.transportType==="localNetwork");if(s.length===0)throw n.stop("No connected iOS devices found."),new Error("Please connect your iPhone via USB or ensure it is on the same Wi-Fi for wireless debugging.");let l=s[0].identifier;if(s.length>1){n.stop();let a=await yi({message:"Select a device to install on:",options:s.map(d=>({value:d.identifier,label:`${d.deviceProperties?.name||d.name||d.model?.name} (${d.model?.name||"iPhone"}) - ${d.identifier}`}))});if(Ht(a))return;l=a,n.start(`Installing on ${l}...`)}else n.message(`Installing on ${s[0].model.name}...`);await xe("xcrun",["devicectl","device","install","app","--device",l,e],process.cwd(),{},i),n.stop("Installation complete."),b.info(y.blue(`\u{1F680} Launching ${t}...`)),await xe("xcrun",["devicectl","device","launch","app","--device",l,t],process.cwd(),{},i)}catch(r){n.stop("Installation failed."),b.error(y.red(`Failed to install on device: ${r.message}`)),b.info(y.dim('Make sure your device is unlocked and "Developer Mode" is enabled in Settings -> Privacy & Security.'))}};import Nn from"fs";import Tn from"path";import{isCancel as Ei,log as Fe,select as kn,spinner as ls,text as ds}from"@clack/prompts";import st from"chalk";async function xn(e){let t=await bi(e);t&&(Fe.success(st.green(`Maestro run ${t.status||"queued"}: ${t.testRunId}`)),t.launchDeferredReason&&Fe.warn(st.yellow(t.launchDeferredReason)),t.dashboardUrl&&Fe.info(st.dim("View test run: ")+st.white.underline(t.dashboardUrl)))}async function bi(e){let t=Te(`./${f.configFileName}`),i=e.projectId||t?.projectId,n=e.profile||e.buildProfile||"production";if(!i)return Fe.error(`No projectId found. Run \`${f.nameLower} link\` first or pass an internal project id.`),null;let r=e.platform;if(!r&&e.latest){let a=await kn({message:"Select platform for the latest build:",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"}]});if(Ei(a))return null;r=a}let o=await cs(e);if(!o)return null;if(o.kind==="latest"&&!r)return Fe.error("Pass --platform when using --latest."),null;if(o.kind==="artifact-url"&&!r)return Fe.error("Pass --platform when using --artifact-url."),null;let s=us(e.maestroRetries);if(s===null)return null;let l=ls();e.quiet||l.start("Queuing Maestro run...");try{let a=await C.post("/tests/maestro",{projectId:i,platform:r,profile:n,latest:o.kind==="latest",buildId:o.kind==="build-id"?o.value:e.buildId,buildUrl:o.kind==="build-url"?o.value:e.buildUrl,artifactUrl:o.kind==="artifact-url"?o.value:e.artifactUrl,flows:e.maestroFlows||".maestro",device:e.maestroDevice||(r==="ios"?"iphone_15":"pixel_6"),retries:s,record:!!e.maestroRecord});if(a.data.status!=="success")throw new Error(a.data.message||"Failed to queue Maestro run");let d=a.data.testRun,c={testRunId:d.testRunId,status:d.status,projectId:i,buildId:d.buildId,platform:d.platform,dashboardUrl:d.dashboardUrl||`${je}/tests/${d.testRunId}`,launchDeferredReason:d.launchDeferredReason};return ps(e,c),e.quiet||l.stop("Maestro run queued"),c}catch(a){e.quiet||l.stop("Could not queue Maestro run");let d=a.response?.data?.message||a.message||"Unknown error";return Fe.error(st.red(`Maestro queue failed: ${d}`)),null}}async function cs(e){if(e.buildId)return{kind:"build-id",value:e.buildId};if(e.buildUrl)return{kind:"build-url",value:e.buildUrl};if(e.artifactUrl)return{kind:"artifact-url",value:e.artifactUrl};if(e.latest)return{kind:"latest"};let t=await kn({message:"Select app artifact source for Maestro:",options:[{value:"latest",label:"Latest successful build"},{value:"build-id",label:"Build ID"},{value:"build-url",label:`${f.name} build URL`},{value:"artifact-url",label:"Direct artifact URL"}]});if(Ei(t))return null;if(t==="latest")return{kind:"latest"};let i=await ds({message:t==="build-id"?"Enter build ID:":t==="build-url"?`Enter ${f.name} build URL:`:"Enter artifact URL:",validate:n=>{let r=String(n||"").trim();if(!r)return"Value is required";if((t==="build-url"||t==="artifact-url")&&!r.startsWith("http"))return"Must be a URL"}});return Ei(i)?null:{kind:t,value:String(i).trim()}}function us(e){if(e==null||e==="")return 1;let t=Number(e);return!Number.isInteger(t)||t<0||t>10?(Fe.error("--maestro-retries must be an integer between 0 and 10."),null):t}function ps(e,t){if(!e.jsonOutput)return;let i=Tn.resolve(e.jsonOutput),n={...t,updatedAt:new Date().toISOString()};try{let r=Tn.dirname(i);r&&r!=="."&&Nn.mkdirSync(r,{recursive:!0}),Nn.writeFileSync(i,JSON.stringify(n,null,2))}catch(r){Fe.warn(st.yellow(`Could not write Maestro metadata JSON: ${r.message}`))}}var Ai=8,gs=6,Yn=e=>new Promise(t=>setTimeout(t,e)),hs=e=>{let t=e.response?.status,i=e.code||"",n=e.message||"";return t?t===408||t===409||t===425||t===429||t>=500||/ECONNRESET|ETIMEDOUT|EAI_AGAIN|ENOTFOUND|ECONNABORTED|socket hang up|network|timeout/i.test(`${i} ${n}`):!0},jt=async(e,t,i=gs)=>{let n;for(let r=1;r<=i;r++)try{return await t()}catch(o){if(n=o,!hs(o)||r>=i)break;let s=Math.min(6e4,2e3*Math.pow(2,r-1)),l=o.response?.status||o.code||o.message||"network error";v.warn(N.yellow(`${e} failed transiently (${l}). Retrying in ${Math.round(s/1e3)}s... (${r}/${i})`)),await Yn(s)}throw n},ys=e=>{let t=e.response?.status;return t?t===408||t===429||t>=500:!0},Et=e=>e.credentialId||e.id,Ss=async(e,t)=>{let i=Et(e);if(!i)return e.downloadUrl;let n=await C.get(`/credentials/${i}/download`,{params:{projectId:t,format:"raw"}});return n.data?.status==="success"&&n.data?.downloadUrl?n.data.downloadUrl:e.downloadUrl},Jn=async(e,t)=>{let i=e.downloadUrl;for(let n=1;n<=Ai;n++)try{if((!i||n>1)&&(i=await Ss(e,t)),!i)throw new Error(`Credential ${e.name||Et(e)||"unknown"} has no download URL.`);let r=await St.get(i,{responseType:"arraybuffer",timeout:6e4,maxContentLength:1/0,maxBodyLength:1/0,headers:{Connection:"close"}});return Buffer.from(r.data).toString("base64")}catch(r){if(n>=Ai||!ys(r))throw r;let o=Math.min(1500*n*n,15e3);v.warn(N.dim(`  - Temporary network error downloading ${e.name}. Retrying... (${n}/${Ai})`)),await Yn(o)}throw new Error(`Failed to download credential ${e.name||Et(e)||"unknown"}.`)},Es=async(e,t)=>{let i=await Jn(e,t);return Buffer.from(i,"base64").toString("utf8")},bs=(e,t)=>t?.ios?.buildNumber??t?.iosBuildNumber??e?.ios?.buildNumber??e?.expo?.ios?.buildNumber,As=(e,t,i)=>t?.ios?.ascAppId??t?.ascAppId??e?.ios?.ascAppId??e?.submit?.[i]?.ios?.ascAppId??e?.submit?.production?.ios?.ascAppId,Fn=e=>e.bundleId||e.bundleIdentifier||e.meta?.bundleId||e.meta?.bundleIdentifier,Hn=(e,t)=>{let i=e.filter(n=>n.type==="asc_api_key");if(i.length!==0){if(t){let n=i.find(o=>Fn(o)===t);if(n)return n;let r=i.find(o=>Fn(o)==="*");if(r)return r}return i[0]}},Is=e=>typeof e=="string"&&e.trim().toLowerCase()==="auto",Xn=(e,t,i=[])=>{if(!oe.existsSync(e))return i;let n;try{n=oe.readdirSync(e,{withFileTypes:!0})}catch{return i}for(let r of n){if(r.name==="Pods"||r.name==="build"||r.name==="DerivedData")continue;let o=Se.join(e,r.name);r.isDirectory()?Xn(o,t,i):r.name===t&&i.push(o)}return i},_s=(e,t,i)=>{let n=`${i} ${t.environment||""}`.toLowerCase(),r=e.toLowerCase(),o=0;return(n.includes("development")||n.includes("dev"))&&/(^|[.-])dev(elopment)?($|[.-])/.test(r)&&(o+=20),(n.includes("staging")||n.includes("stage"))&&/(^|[.-])stag(e|ing)?($|[.-])/.test(r)&&(o+=20),(n.includes("production")||n.includes("prod"))&&(/(^|[.-])(dev|development|stag|stage|staging)($|[.-])/.test(r)||(o+=20)),o},Ps=(e,t)=>{let i=Se.resolve(process.cwd(),oe.existsSync("ios")?"ios":"."),n=Xn(i,"project.pbxproj"),r=[];for(let o of n)try{let l=oe.readFileSync(o,"utf8").matchAll(/PRODUCT_BUNDLE_IDENTIFIER\s*=\s*"?([^";\s]+)"?;/g);for(let a of l){let d=a[1]?.trim();d&&!d.includes("$")&&!d.startsWith("com.apple.")&&!r.includes(d)&&r.push(d)}}catch{}if(r.length!==0)return r.length===1?r[0]:r.map(o=>({bundleId:o,score:_s(o,e,t)})).sort((o,s)=>s.score-o.score)[0]?.bundleId},Gt=e=>String(e||"").trim().toLowerCase().replace(/_/g,"-"),Kt=(e,t)=>{let i=Gt(e);return t==="ios"&&(i==="internal"||i==="ad-hoc")?"adhoc":t==="android"&&["internal","adhoc","ad-hoc","development","dev","staging","stage"].includes(i)?"internal":i},jn=(e,t,i)=>{let n=Kt(e.distributionType||e.meta?.distributionType,i);return n?n===Kt(t,i):!0},Gn=(e,t,i)=>{let n=Kt(e.distributionType||e.meta?.distributionType,i),r=Kt(t,i);return n?n===r?3:i==="android"&&r!=="store"&&n!=="store"?2:0:1},$s=e=>{let t=e.toLowerCase();return t==="development"||t==="dev"||t.startsWith("development-")||t.startsWith("dev-")||t.endsWith("-development")||t.endsWith("-dev")},ws=e=>{let t=e.toLowerCase();return t.includes("staging")||t.includes("stage")||t.includes("preview")||t.includes("adhoc")||t.includes("ad-hoc")},Ds=(e,t)=>{let i=Gt(e.distribution),n=Gt(e.iosExportMethod),r=Gt(e.environment);return e.platform!=="ios"?i==="store"?"store":"internal":e.developmentClient||e.simulator?"development":n==="app-store"||i==="store"?"store":n==="development"||i==="development"?"development":n==="ad-hoc"||n==="adhoc"||i==="ad-hoc"||i==="adhoc"||i==="internal"?"adhoc":r==="production"||r==="store"?"store":r==="development"||r==="dev"?"development":r==="staging"||r==="stage"||r==="preview"?"adhoc":t.toLowerCase()==="production"||t.toLowerCase().includes("store")?"store":$s(t)?"development":(ws(t),"adhoc")},qn=e=>e.bundleId||e.bundleIdentifier||e.packageName||e.meta?.bundleId||e.meta?.bundleIdentifier||e.meta?.packageName,Kn=(e,t)=>{if(!t)return!0;let i=qn(e);return!i||i==="*"||i===t},Vn=(e,t)=>{let i=qn(e);return!t||!i?0:i===t?2:i==="*"?1:-1},Zn=e=>{try{let t=Buffer.from(e,"base64").toString("utf8"),i=t.match(/<key>application-identifier<\/key>\s*<string>([^<]+)<\/string>/)?.[1]?.trim();if(!i)return;let n=t.match(/<key>TeamIdentifier<\/key>\s*<array>\s*<string>([^<]+)<\/string>/)?.[1]?.trim();if(n&&i.startsWith(`${n}.`))return i.slice(n.length+1);let r=i.indexOf(".");return r>=0?i.slice(r+1):i}catch{return}},Rs=(e,t)=>{if(e===t||e==="*")return!0;if(e.endsWith(".*")){let i=e.slice(0,-2);return t.startsWith(`${i}.`)}return!1},vs=(e,t)=>{if(!t)return!0;let i=Zn(e);if(i)return Rs(i,t);try{return Buffer.from(e,"base64").toString("latin1").includes(t)}catch{return!0}},Vt=async e=>{if(e.failOnly){(!e.projectId||!e.buildId)&&(v.error(N.red("--project-id and --build-id are required with --fail-only.")),process.exit(1));let l=e.error||"Build runner failed before it could report a final status.";try{await C.patch(`/builds/${e.projectId}/${e.buildId}`,{status:"failed",error:l,endTime:Date.now()}),v.info(N.yellow(`Marked build ${e.buildId} as failed.`));return}catch(a){v.error(N.red(`Could not mark build failed: ${a.message}`)),process.exit(1)}}e.platform!=="android"&&e.platform!=="ios"&&(v.error(`Platform ${e.platform} is not supported. Use 'android' or 'ios'.`),process.exit(1));let t=Ii(),i=e.buildId||fs(),n=e.projectId,r=Date.now(),o=!!n,s=async l=>{if(n)try{await C.patch(`/builds/${n}/${i}`,{status:"failed",error:l})}catch{}};if(e.local&&e.buildId){e.quiet||t.start(`Preparing isolated workspace for build: ${e.buildId}`);try{let l=await C.get(`/builds/${n}/${e.buildId}/source-url`);if(l.data.status!=="success")throw new Error("Failed to get source download URL from API");let a=await St.get(l.data.downloadUrl,{responseType:"stream"}),d=(n||e.projectId||"default").replace(/[^a-zA-Z0-9-_]/g,"_"),c=Se.join(ms.homedir(),f.workspacesDir,d);oe.mkdirSync(c,{recursive:!0});let u=new Set(["node_modules",`.${f.nameLower}-cache-meta`]),p=new Set(["Pods"]);if(oe.existsSync(c)){let B=oe.readdirSync(c);for(let k of B){if(u.has(k))continue;if(k==="ios"){let h=Se.join(c,"ios");try{let K=oe.readdirSync(h);for(let _ of K)if(!p.has(_))try{oe.rmSync(Se.join(h,_),{recursive:!0,force:!0})}catch{}}catch{}continue}let j=Se.join(c,k);try{oe.rmSync(j,{recursive:!0,force:!0})}catch{}}}let m=Se.join(c,"source.zip"),I=a.data,L=oe.createWriteStream(m);await new Promise((B,k)=>{I.pipe(L),I.on("error",j=>k(j)),L.on("finish",()=>B())}),new Bn(m).extractAllTo(c,!0);try{oe.unlinkSync(m)}catch{}process.chdir(c),v.info(N.green(`\u2713 Persistent workspace ready: ${c}`)),v.info(N.dim(`  \u{1F4E6} Cached dirs preserved: node_modules=${oe.existsSync(Se.join(c,"node_modules"))?"\u2705":"\u274C"}, Pods=${oe.existsSync(Se.join(c,"ios","Pods"))?"\u2705":"\u274C"}`)),t.stop()}catch(l){t.stop(`Failed to prepare isolated workspace: ${l.message}`),n&&await s(`Setup Error: ${l.message}`),process.exit(1)}}try{let l=e.repo;if(!l)try{l=Mn("git config --get remote.origin.url").toString().trim()}catch{v.warn("Could not detect git repository URL.")}!l&&e.dryRun,l||(l="https://github.com/placeholder/repo.git"),v.info(`Build ID: ${N.cyan(i)}`);let a={},d={},c=Te(`./${f.configFileName}`);if(c){n=c.projectId;let _=e.buildProfile||"production",S=Ge(c,_);!S&&e.buildProfile&&(v.error(`Build profile '${_}' not found in ${f.configFileName}`),process.exit(1));let O=S||{};process.env.MACH_DEBUG&&v.info(N.dim(`Build profile: ${_} | Platform: ${e.platform} | Distribution: ${O.distribution||"store"} | Environment: ${O.environment||_}`)),O.env&&(d=O.env,v.info(N.blue(`Use Build Profile: ${_}`)));let D=e.platform,T=O[D]||{},R=["developmentClient","simulator","distribution","buildCommand","apk","iosScheme","preBuild","postBuild","scheme","environment","androidPackage","iosBundleIdentifier","name","iosDeploymentTarget","iosApiKeyId","iosApiKeyIssuer","iosApiKeyPath","iosTeamId","iosConfiguration","iosExportMethod","branch","repo","instanceType","ami","bucket","region","nodeVersion"];e.name=c.name,e.appName=c.name,e.androidPackage=c.android?.package,e.iosBundleIdentifier=c.ios?.bundleIdentifier,e.iosScheme=c.ios?.iosScheme,!e.nodeVersion&&c.nodeVersion&&(e.nodeVersion=c.nodeVersion);let $=x=>x==="androidPackage"?T.androidPackage??T.package??O.androidPackage??O.android?.package:x==="iosBundleIdentifier"?T.iosBundleIdentifier??T.bundleIdentifier??O.iosBundleIdentifier??O.ios?.bundleIdentifier:T[x]!==void 0?T[x]:O[x];for(let x of R){let H=$(x),E=x==="androidPackage"||x==="iosBundleIdentifier";H!==void 0&&(e[x]===void 0||E)&&(e[x]=H)}if(e.platform==="ios"&&!(T.iosBundleIdentifier??T.bundleIdentifier??O.iosBundleIdentifier??O.ios?.bundleIdentifier)){let H=Ps(e,_);H&&H!==e.iosBundleIdentifier&&(v.warn(N.yellow(`Detected native iOS bundle identifier ${H}; using it for credential lookup. Set build.${_}.ios.bundleIdentifier to make this explicit.`)),e.iosBundleIdentifier=H)}e.branch=e.branch||"main",e.iosConfiguration=e.iosConfiguration||(e.developmentClient||e.simulator?"Debug":"Release"),e.sshUser=e.sshUser||process.env.USER||"ubuntu",e.simulator===void 0&&(e.simulator=!1),e.local===void 0&&(e.local=!1),e.verbose===void 0&&(e.verbose=!1);let U=x=>{if(!x)return x;if(x.startsWith("scripts.")){let H=x.split(".")[1],E=c.scripts?.[H];if(E)return E;v.warn(`Script reference not found: ${x}`)}return x};e.buildCommand=U(e.buildCommand),e.preBuild=U(e.preBuild),e.postBuild=U(e.postBuild),!e.scheme&&c.scheme&&(e.scheme=c.scheme);let G={...nt(c,f.envPrefix),...nt(O,`${f.envPrefix}PROFILE_`)};a={...a,...d,...G},process.env.IOS_P12_PASSWORD&&!a.IOS_P12_PASSWORD&&(a.IOS_P12_PASSWORD=process.env.IOS_P12_PASSWORD),process.env.MATCH_PASSWORD&&!a.MATCH_PASSWORD&&(a.MATCH_PASSWORD=process.env.MATCH_PASSWORD),e.platform==="ios"&&(!e.iosTeamId&&O.ios?.appleTeamId&&(e.iosTeamId=O.ios.appleTeamId),!e.iosTeamId&&c.submit?.[_]?.ios?.appleTeamId&&(e.iosTeamId=c.submit[_].ios.appleTeamId),!e.iosTeamId&&c.submit?.production?.ios?.appleTeamId&&(v.warn(N.yellow(`Check: Using 'production' Team ID for '${_}' build.`)),e.iosTeamId=c.submit.production.ios.appleTeamId),e.iosTeamId?v.info(N.magenta(`\u2713 Injected iOS Team ID from config: ${e.iosTeamId}`)):v.warn(N.yellow("\u26A0\uFE0F No iOS Team ID found. Signing might fail if not managed automatically via Expo.")))}let u="unknown";try{u=Mn("git rev-parse --abbrev-ref HEAD").toString().trim()}catch{v.warn("Failed to detect git branch.")}let p="1.0.0";try{oe.existsSync("./package.json")&&(p=JSON.parse(oe.readFileSync("./package.json","utf-8")).version||"1.0.0")}catch{}let m=e.buildProfile||"production",I="Internal";e.developmentClient?I="DevelopmentClient":m.toLowerCase().includes("store")||m.toLowerCase()==="production"?I="Store":m.toLowerCase().includes("preview")||m.toLowerCase().includes("staging")?I="Staging":(m.toLowerCase().includes("development")||m.toLowerCase().includes("dev"))&&(I="Development");let L=e.platform==="ios"?"iOS":"Android",w=e.platform==="ios"&&e.simulator?" (Simulator)":"",B=`${L}${w} v${p} (${I})`;if(zt(e,{status:"created",projectId:n,buildId:i,platform:e.platform,profile:m,branch:u,version:p,buildType:I,developmentClient:!!e.developmentClient,summary:B}),n){try{let _=e.buildProfile||"production",S=e.environment||_;v.info(N.blue(`Fetching managed secrets for profile: ${_} (environment: ${S})...`));let D=(await C.get(`/projects/${n}/secrets/export?env=${S}`)).data;D.status==="success"&&D.secrets&&(a={...a,...D.secrets},Object.keys(D.secrets).length>0&&v.info(N.magenta(`\u2713 Injected ${Object.keys(D.secrets).length} secrets from Dashboard.`)))}catch(_){v.warn(`Failed to load managed secrets from Dashboard: ${_.message}`)}try{v.info(N.blue("Fetching managed credentials..."));let _=Ds(e,m),S=e.platform==="ios"?e.iosBundleIdentifier:e.androidPackage,O=e.platform==="ios"?"bundle":"package";v.info(N.dim(`  Credential target: ${O} ${S||"not set"} (${_})`));let D=await C.get("/credentials/resolve",{params:{projectId:n,platform:e.platform,bundleId:S,distributionType:_}});if(D.data.status==="success"&&D.data.credentials){let T=D.data.credentials;v.info(N.magenta(`\u2713 Found ${T.length} relevant credentials.`));let R=T.filter(E=>e.platform==="ios"&&E.type==="ios_profile"?jn(E,_,e.platform)?Kn(E,S):!1:e.platform==="android"&&E.type==="android_keystore"?Kn(E,S):!!jn(E,_,e.platform)).sort((E,ne)=>Vn(ne,S)*10+Gn(ne,_,e.platform)-(Vn(E,S)*10+Gn(E,_,e.platform)));v.info(N.dim(`  Filtered to ${R.length} credentials for distributionType: ${_}`));let $=!1,U=!1,G=!1,x=[];for(let E of R)if(!(E.type==="ios_cert"&&$||E.type==="ios_profile"&&U||E.type==="android_keystore"&&G)&&["ios_cert","ios_profile","android_keystore"].includes(E.type)&&(E.downloadUrl||Et(E)))try{let z=await Jn(E,n);if(E.type==="ios_cert"&&!$)a.IOS_DIST_P12=z,E.password?(a.IOS_P12_PASSWORD=E.password,v.info(N.dim(`  - Injected ${E.name} as IOS_DIST_P12 with password from credential record`))):v.info(N.dim(`  - Injected ${E.name} as IOS_DIST_P12`)),$=!0;else if(E.type==="ios_profile"&&!U){if(!vs(z,S)){let he=Zn(z)||"unknown";throw new Error(`Provisioning profile ${E.name||Et(E)||"unknown"} is for a different bundle ID. Expected ${S}, found ${he}. Upload a ${_} profile for ${S}.`)}a.IOS_PROVISIONING_PROFILE=z,v.info(N.dim(`  - Injected ${E.name} as IOS_PROVISIONING_PROFILE`)),U=!0}else if(E.type==="android_keystore"&&!G){a.ANDROID_KEYSTORE_BASE64=z;let he=E.keystorePassword||E.password,ie=E.keyPassword||E.keystorePassword||E.password,F=E.alias||E.meta?.alias;if(he)a.ANDROID_STORE_PASSWORD=he,v.info(N.dim("  - Injected keystore password from credential record"));else{let A=["ANDROID_STORE_PASSWORD",...[_==="store"?"PRODUCTION":_==="internal"||_==="adhoc"?"STAGING":"DEVELOPMENT",_.toUpperCase(),"PRODUCTION","STORE","INTERNAL","STAGING","RELEASE","DEBUG"].map(V=>`KEYSTORE_PASSWORD_${V}`),"KEYSTORE_PASSWORD"].find(V=>!!a[V]);A&&a[A]&&(a.ANDROID_STORE_PASSWORD=a[A])}if(ie?(a.ANDROID_KEY_PASSWORD=ie,v.info(N.dim("  - Injected key password from credential record"))):a.ANDROID_KEY_PASSWORD=a.ANDROID_STORE_PASSWORD||"",F)a.ANDROID_KEY_ALIAS=F;else{let M=["ANDROID_KEY_ALIAS","KEYSTORE_ALIAS"].find(W=>!!a[W]);M&&(a.ANDROID_KEY_ALIAS=a[M])}v.info(N.dim(`  - Injected ${E.name} as ANDROID_KEYSTORE_BASE64`)),G=!0}}catch(z){x.push(`${E.name||E.type}: ${z.message}`)}let H=e.platform==="ios"?e.simulator||$&&U:G||!R.some(E=>E.type==="android_keystore");if(x.length>0&&!H)throw new Error(`Credential setup failed:
 ${x.map(E=>`- ${E}`).join(`
-`)}`);x.length>0&&v.warn(N.dim(`  Skipped ${x.length} stale or unusable credential(s).`))}if(e.platform==="ios"&&!e.simulator){let T=e.buildProfile||"production",R=Ge(c,T)||{},$=bs(c,R),U=Is($),G=e.distribution==="store",x=$===void 0&&G,H=e.autoVersion||U&&G||x,E=e.autoVersion||U&&G;if(U&&!G&&v.info(N.dim(`  Skipping App Store Connect buildNumber lookup for ${e.distribution||"non-store"} build. Pass --auto-version to force it.`)),H){let ne=e.iosBundleIdentifier||c.ios?.bundleIdentifier||c.expo?.ios?.bundleIdentifier,z=As(c,R,T),he=D.data.credentials||[],ie=Hn(he,ne);if(!ie&&(E||x)){let F=await C.get(`/credentials/${n}`);ie=Hn(F.data.credentials||[],ne)}if(ie){t.start("Resolving latest iOS buildNumber from App Store Connect...");try{let F=ie.keyId||ie.meta?.keyId,M=ie.issuerId||ie.meta?.issuerId;if(!F||!M)throw new Error("App Store Connect credential is missing keyId or issuerId.");let W=await Es(ie,n),A=await An({keyId:F,issuerId:M,privateKey:W,ascAppId:z,bundleId:ne}),V=/^\d+$/.test(A.latestBuildNumber);V?(a.BUILD_NUMBER=A.latestBuildNumber,delete a.MACH_IOS_BUILD_NUMBER_LOCKED):(a.BUILD_NUMBER=A.nextBuildNumber,a.CURRENT_PROJECT_VERSION=A.nextBuildNumber,a.MACH_IOS_BUILD_NUMBER_LOCKED="1"),t.stop(V?`\u2713 Latest iOS buildNumber on App Store Connect: ${N.green(A.latestBuildNumber)} (Mach will assign >= ${A.nextBuildNumber})`:`\u2713 Resolved iOS buildNumber: ${N.green(A.nextBuildNumber)} (Latest on App Store Connect: ${A.latestBuildNumber})`)}catch(F){t.stop("iOS buildNumber lookup failed");let M=F.response?.data?.error?.message||F.message;if(E)throw new Error(`Auto-versioning failed: ${M}. Fix App Store Connect API key permissions or remove ios.buildNumber="auto".`);v.warn(N.yellow(`Could not check App Store Connect buildNumber: ${M}. Falling back to Mach counter.`))}}else if(E)throw new Error(`Auto-versioning failed: App Store Connect API key not found. Upload it with '${f.nameLower} credentials:service --platform ios'.`)}}if(e.platform==="android"){let T=e.buildProfile||"production",R=Ge(c,T)||{},G=((R.android||{}).versionCode??R.androidVersionCode??c.android?.versionCode??c.expo?.android?.versionCode)==="auto",x=e.autoVersion||G&&e.distribution==="store";if(G&&!x&&v.info(N.dim(`  Skipping Google Play versionCode lookup for ${e.distribution||"non-store"} build. Pass --auto-version to force it.`)),x){t.start("Resolving latest versionCode from Google Play...");try{let H=e.androidPackage||c.android?.package||c.expo?.android?.package||c.name,E=(D.data.credentials||[]).find(M=>M.type==="google_service_account"&&(!M.bundleId||M.bundleId===H));if(!E){let W=((await C.get(`/credentials/${n}`)).data.credentials||[]).filter(A=>A.type==="google_service_account");if(E=W.find(A=>A.type==="google_service_account"&&A.bundleId===H),!E&&W.length>0){let A=W.map(V=>V.bundleId).filter(Boolean).join(", ");throw new Error(`Google Service Account not found for package ${H}. Found service credential(s) for: ${A}.`)}}if(!E)throw new Error(`Google Service Account not found for package ${H}. Upload it under this package in Dashboard or run '${f.nameLower} credentials:service --platform android --package-name ${H}'.`);let ne=await C.get(`/credentials/${E.credentialId}/download`,{params:{projectId:n}});if(ne.data.status!=="success"||!ne.data.downloadUrl)throw new Error("Failed to get secure download URL for service account");let he=(await St.get(ne.data.downloadUrl,{headers:{Connection:"close"}})).data,ie=await gn(H,he);if(ie==null)throw new Error("Could not retrieve any version information from Google Play.");let F=ie+1;a.ANDROID_VERSION_CODE=F.toString(),t.stop(`\u2713 Resolved versionCode: ${N.green(F)} (Latest on Play Store: ${ie})`)}catch(H){t.stop("Version resolution failed");let E=H.response?.data?.error?.message||H.message;throw new Error(`Auto-versioning failed: ${E}. Fix Google Play service account permissions or remove android.versionCode="auto".`)}}}if(e.platform==="ios"&&!e.simulator){let T=!!a.IOS_DIST_P12,R=!!a.IOS_PROVISIONING_PROFILE;if(!T||!R){let $=[...T?[]:["Distribution Certificate"],...R?[]:["Provisioning Profile"]].join(" and ");if(e.local&&e.buildId)throw new Error(`Missing iOS credentials: ${$}. Expected ${_} credentials for ${S||"the selected bundle ID"}. Run \`${f.nameLower} credentials --platform ios --profile ${m}\` and select ${S||"the correct bundle ID"}.`);v.error(N.red(`Missing iOS credentials: ${$}`)),e.quiet&&process.exit(1);let U=e.yes||await Ln({message:"Would you like to generate these credentials now?",initialValue:!0});if(U&&!Un(U))return await mt({platform:"ios",profile:m}),e.quiet||v.info(N.green("\u2713 Credentials setup complete! Restarting build phase...")),Vt(e);e.quiet||v.info(N.yellow(`Run \`${f.nameLower} credentials\` to set up signing credentials manually.`)),process.exit(1)}}if(e.platform==="android"&&!e.developmentClient&&(e.distribution==="internal"||e.distribution==="store")&&!(!!a.ANDROID_KEYSTORE_BASE64||!!a.ANDROID_KEYSTORE)){v.error(N.red("Missing Android credentials: Signing Keystore")),e.quiet&&process.exit(1);let R=e.yes||await Ln({message:"Would you like to automatically create and upload an Android Keystore for this profile now?",initialValue:!0});if(R&&!Un(R))return await mt({platform:"android",profile:m}),e.quiet||v.info(N.green("\u2713 Android Keystore setup complete! Restarting build phase...")),Vt(e);e.quiet||v.info(N.yellow(`Run \`${f.nameLower} credentials --platform android\` to set up a signing keystore manually.`)),process.exit(1)}}catch(_){(String(_.message||"").startsWith("Credential download failed")||String(_.message||"").startsWith("Credential setup failed")||String(_.message||"").startsWith("Missing iOS credentials")||String(_.message||"").startsWith("Auto-versioning failed"))&&(v.error(N.red(_.message)),process.exit(1)),e.platform==="ios"&&e.local&&e.buildId&&(v.error(N.red(`Failed to resolve iOS credentials: ${_.message}`)),process.exit(1)),v.warn(`Failed to resolve credentials: ${_.message}`)}}let k=!!(e.local&&e.buildId),j=!!(e.local||e.sshHost),h=!j&&!k;if(k){v.info(N.magenta("\u{1F3D7}\uFE0F Runner Mode: Executing isolated build task..."));let _=await Si({...e,interactive:!1},i,a,n,{branch:u,version:p,summary:B,buildType:I});await K(_),process.exit(0)}async function K(_){let S=async O=>{if(n)try{await jt("Report failed build status",()=>C.patch(`/builds/${n}/${i}`,{status:"failed",error:O,endTime:Date.now()}),3)}catch(D){v.warn(N.yellow(`Could not report failed build status: ${D.message}`))}};if(n&&_.length>0){let O=Ii(),D=[];e.quiet||O.start("Uploading artifacts to Dashboard...");try{for(let T of _){let R=Se.basename(T),$=oe.readFileSync(T),U=Se.extname(R).toLowerCase(),G="application/octet-stream",x=await jt(`Create artifact upload URL for ${R}`,()=>C.post(`/builds/${n}/${i}/artifact-upload-url`,{fileName:R,fileType:G}));if(x.data.status!=="success")throw new Error(`Failed to get upload URL for ${R}`);await jt(`Upload artifact ${R}`,()=>St.put(x.data.uploadUrl,$,{headers:{"Content-Type":G,Connection:"close"},maxBodyLength:1/0,maxContentLength:1/0,timeout:3e5})),D.push({name:R,url:x.data.downloadUrl,size:$.length,type:U.substring(1)})}e.quiet||O.stop("Artifacts uploaded.")}catch(T){e.quiet||O.stop("Failed to upload artifacts.");let R=`Artifact upload failed: ${T.message}`;throw v.error(N.red(R)),await S(R),new Error(R)}if(n&&D.length>0)try{v.info(N.cyan(`
+`)}`);x.length>0&&v.warn(N.dim(`  Skipped ${x.length} stale or unusable credential(s).`))}if(e.platform==="ios"&&!e.simulator){let T=e.buildProfile||"production",R=Ge(c,T)||{},$=bs(c,R),U=Is($),G=e.distribution==="store",x=$===void 0&&G,H=e.autoVersion||U&&G||x,E=e.autoVersion||U&&G;if(U&&!G&&v.info(N.dim(`  Skipping App Store Connect buildNumber lookup for ${e.distribution||"non-store"} build. Pass --auto-version to force it.`)),H){let ne=e.iosBundleIdentifier||c.ios?.bundleIdentifier||c.expo?.ios?.bundleIdentifier,z=As(c,R,T),he=D.data.credentials||[],ie=Hn(he,ne);if(!ie&&(E||x)){let F=await C.get(`/credentials/${n}`);ie=Hn(F.data.credentials||[],ne)}if(ie){t.start("Resolving latest iOS buildNumber from App Store Connect...");try{let F=ie.keyId||ie.meta?.keyId,M=ie.issuerId||ie.meta?.issuerId;if(!F||!M)throw new Error("App Store Connect credential is missing keyId or issuerId.");let W=await Es(ie,n),A=await An({keyId:F,issuerId:M,privateKey:W,ascAppId:z,bundleId:ne}),V=/^\d+$/.test(A.latestBuildNumber);V?(a.BUILD_NUMBER=A.latestBuildNumber,delete a.MACH_IOS_BUILD_NUMBER_LOCKED):(a.BUILD_NUMBER=A.nextBuildNumber,a.CURRENT_PROJECT_VERSION=A.nextBuildNumber,a.MACH_IOS_BUILD_NUMBER_LOCKED="1"),t.stop(V?`\u2713 Latest iOS buildNumber on App Store Connect: ${N.green(A.latestBuildNumber)} (Mach will assign >= ${A.nextBuildNumber})`:`\u2713 Resolved iOS buildNumber: ${N.green(A.nextBuildNumber)} (Latest on App Store Connect: ${A.latestBuildNumber})`)}catch(F){t.stop("iOS buildNumber lookup failed");let M=F.response?.data?.error?.message||F.message;if(E)throw new Error(`Auto-versioning failed: ${M}. Fix App Store Connect API key permissions or remove ios.buildNumber="auto".`);v.warn(N.yellow(`Could not check App Store Connect buildNumber: ${M}. Falling back to Mach counter.`))}}else if(E)throw new Error(`Auto-versioning failed: App Store Connect API key not found. Upload it with '${f.nameLower} credentials:service --platform ios'.`)}}if(e.platform==="android"){let T=e.buildProfile||"production",R=Ge(c,T)||{},G=((R.android||{}).versionCode??R.androidVersionCode??c.android?.versionCode??c.expo?.android?.versionCode)==="auto",x=e.autoVersion||G&&e.distribution==="store";if(G&&!x&&v.info(N.dim(`  Skipping Google Play versionCode lookup for ${e.distribution||"non-store"} build. Pass --auto-version to force it.`)),x){t.start("Resolving latest versionCode from Google Play...");try{let H=e.androidPackage||c.android?.package||c.expo?.android?.package||c.name,E=(D.data.credentials||[]).find(M=>M.type==="google_service_account"&&(!M.bundleId||M.bundleId===H));if(!E){let W=((await C.get(`/credentials/${n}`)).data.credentials||[]).filter(A=>A.type==="google_service_account");if(E=W.find(A=>A.type==="google_service_account"&&A.bundleId===H),!E&&W.length>0){let A=W.map(V=>V.bundleId).filter(Boolean).join(", ");throw new Error(`Google Service Account not found for package ${H}. Found service credential(s) for: ${A}.`)}}if(!E)throw new Error(`Google Service Account not found for package ${H}. Upload it under this package in Dashboard or run '${f.nameLower} credentials:service --platform android --package-name ${H}'.`);let ne=await C.get(`/credentials/${E.credentialId}/download`,{params:{projectId:n,format:"raw"}});if(ne.data.status!=="success"||!ne.data.downloadUrl)throw new Error("Failed to get secure download URL for service account");let he=(await St.get(ne.data.downloadUrl,{headers:{Connection:"close"}})).data,ie=await gn(H,he);if(ie==null)throw new Error("Could not retrieve any version information from Google Play.");let F=ie+1;a.ANDROID_VERSION_CODE=F.toString(),t.stop(`\u2713 Resolved versionCode: ${N.green(F)} (Latest on Play Store: ${ie})`)}catch(H){t.stop("Version resolution failed");let E=H.response?.data?.error?.message||H.message;throw new Error(`Auto-versioning failed: ${E}. Fix Google Play service account permissions or remove android.versionCode="auto".`)}}}if(e.platform==="ios"&&!e.simulator){let T=!!a.IOS_DIST_P12,R=!!a.IOS_PROVISIONING_PROFILE;if(!T||!R){let $=[...T?[]:["Distribution Certificate"],...R?[]:["Provisioning Profile"]].join(" and ");if(e.local&&e.buildId)throw new Error(`Missing iOS credentials: ${$}. Expected ${_} credentials for ${S||"the selected bundle ID"}. Run \`${f.nameLower} credentials --platform ios --profile ${m}\` and select ${S||"the correct bundle ID"}.`);v.error(N.red(`Missing iOS credentials: ${$}`)),e.quiet&&process.exit(1);let U=e.yes||await Ln({message:"Would you like to generate these credentials now?",initialValue:!0});if(U&&!Un(U))return await mt({platform:"ios",profile:m}),e.quiet||v.info(N.green("\u2713 Credentials setup complete! Restarting build phase...")),Vt(e);e.quiet||v.info(N.yellow(`Run \`${f.nameLower} credentials\` to set up signing credentials manually.`)),process.exit(1)}}if(e.platform==="android"&&!e.developmentClient&&(e.distribution==="internal"||e.distribution==="store")&&!(!!a.ANDROID_KEYSTORE_BASE64||!!a.ANDROID_KEYSTORE)){v.error(N.red("Missing Android credentials: Signing Keystore")),e.quiet&&process.exit(1);let R=e.yes||await Ln({message:"Would you like to automatically create and upload an Android Keystore for this profile now?",initialValue:!0});if(R&&!Un(R))return await mt({platform:"android",profile:m}),e.quiet||v.info(N.green("\u2713 Android Keystore setup complete! Restarting build phase...")),Vt(e);e.quiet||v.info(N.yellow(`Run \`${f.nameLower} credentials --platform android\` to set up a signing keystore manually.`)),process.exit(1)}}catch(_){(String(_.message||"").startsWith("Credential download failed")||String(_.message||"").startsWith("Credential setup failed")||String(_.message||"").startsWith("Missing iOS credentials")||String(_.message||"").startsWith("Auto-versioning failed"))&&(v.error(N.red(_.message)),process.exit(1)),e.platform==="ios"&&e.local&&e.buildId&&(v.error(N.red(`Failed to resolve iOS credentials: ${_.message}`)),process.exit(1)),v.warn(`Failed to resolve credentials: ${_.message}`)}}let k=!!(e.local&&e.buildId),j=!!(e.local||e.sshHost),h=!j&&!k;if(k){v.info(N.magenta("\u{1F3D7}\uFE0F Runner Mode: Executing isolated build task..."));let _=await Si({...e,interactive:!1},i,a,n,{branch:u,version:p,summary:B,buildType:I});await K(_),process.exit(0)}async function K(_){let S=async O=>{if(n)try{await jt("Report failed build status",()=>C.patch(`/builds/${n}/${i}`,{status:"failed",error:O,endTime:Date.now()}),3)}catch(D){v.warn(N.yellow(`Could not report failed build status: ${D.message}`))}};if(n&&_.length>0){let O=Ii(),D=[];e.quiet||O.start("Uploading artifacts to Dashboard...");try{for(let T of _){let R=Se.basename(T),$=oe.readFileSync(T),U=Se.extname(R).toLowerCase(),G="application/octet-stream",x=await jt(`Create artifact upload URL for ${R}`,()=>C.post(`/builds/${n}/${i}/artifact-upload-url`,{fileName:R,fileType:G}));if(x.data.status!=="success")throw new Error(`Failed to get upload URL for ${R}`);await jt(`Upload artifact ${R}`,()=>St.put(x.data.uploadUrl,$,{headers:{"Content-Type":G,Connection:"close"},maxBodyLength:1/0,maxContentLength:1/0,timeout:3e5})),D.push({name:R,url:x.data.downloadUrl,size:$.length,type:U.substring(1)})}e.quiet||O.stop("Artifacts uploaded.")}catch(T){e.quiet||O.stop("Failed to upload artifacts.");let R=`Artifact upload failed: ${T.message}`;throw v.error(N.red(R)),await S(R),new Error(R)}if(n&&D.length>0)try{v.info(N.cyan(`
 \u{1F517} Download Links:`));for(let T of D)v.info(N.dim(`  - ${T.name}: `)+N.blue.underline(T.url));await jt("Finalize build in dashboard",()=>C.patch(`/builds/${n}/${i}`,{status:"success",artifacts:D,endTime:Date.now()})),zt(e,{status:"success",projectId:n,buildId:i,platform:e.platform,profile:m,branch:u,version:p,buildType:I,developmentClient:!!e.developmentClient,summary:B,artifacts:D}),v.success(N.green(`
 \u2713 Build completed and reported to dashboard.`)),e.maestro&&!k&&await zn(n,i,e,m)}catch(T){let R=`Build artifact uploaded but dashboard finalization failed: ${T.message}`;throw v.error(N.red(`
 ${R}`)),await S(R),new Error(R)}}else if(n){let O="Build completed but produced no uploadable artifacts.";throw v.error(N.red(O)),await S(O),new Error(O)}}if(j){if(v.info(N.cyan(`\u{1F680} Direct Build Mode: Executing on ${e.sshHost||"local"}...`)),n&&!o){let _=process.argv.slice(3).join(" ");await C.post("/builds",{projectId:n,buildId:i,platform:e.platform,status:"building",branch:u,version:p,summary:B,startTime:r,buildType:I,buildProfile:m,buildArgs:_,simulator:!!e.simulator,developmentClient:!!e.developmentClient})}if(e.sshHost&&e.platform==="ios"){let _=await fn(e,i,a,n)}else{let _=await Si({...e,interactive:!!e.local},i,a,n,{branch:u,version:p,summary:B,buildType:I});await K(_)}return}if(h&&(v.info(N.blue("\u{1F6F0}\uFE0F Cloud Initiator Mode: Preparing orchestration...")),!e.dryRun)){e.quiet||t.start("Zipping and uploading local source...");let _=await C.post("/builds/source-upload-url",{projectId:n,buildId:i});if(_.data.status!=="success")throw t.stop("Failed to get upload URL."),new Error("Failed to get source upload URL from API");let S=new Bn,O=oe.readdirSync("."),D=["node_modules",".git","dist","build","builds",".gradle",".idea","android/build","ios/build","ios/Pods",`.${f.nameLower}_cli`];for(let $ of O){if(D.includes($))continue;oe.statSync($).isDirectory()?S.addLocalFolder($,$):S.addLocalFile($)}let T=S.toBuffer();e.quiet||t.message(`Uploading source (${(T.length/1024/1024).toFixed(1)} MB)...`);let R=!1;for(let $=1;$<=3;$++)try{await St.put(_.data.uploadUrl,T,{headers:{"Content-Type":"application/zip"},maxBodyLength:1/0,maxContentLength:1/0,timeout:12e4}),R=!0;break}catch(U){if($<3)t.message(`Upload attempt ${$} failed (${U.code||U.message}), retrying...`),await new Promise(G=>setTimeout(G,2e3*$));else throw U}if(e.quiet||t.stop("Source uploaded"),n){let $=process.argv.slice(3).join(" ");await C.post("/builds",{projectId:n,buildId:i,platform:e.platform,status:"pending",branch:u,version:p,summary:B,startTime:r,buildType:I,buildProfile:m,buildArgs:$,simulator:!!e.simulator,developmentClient:!!e.developmentClient}),v.info(N.green("\u2713 Cloud build registered."))}e.platform==="android"&&await cn(e,i,a,n,e.preBuild),e.quiet||v.info(N.cyan("\u{1F4E1} Connecting to build stream...")),await Os(n,i,e),e.maestro&&await zn(n,i,e,m);return}}catch(l){let a=l.message||"Build failed";l.response?.data?.message?a=l.response.data.message:l.message.includes("status code 402")?a="Insufficient wallet balance. Please add credits in the Dashboard.":l.message.includes("status code 403")&&(a="Monthly build quota exceeded. Upgrade your plan in the Dashboard."),n&&!e.local&&await s(a),v.error(N.red(`\u2717 Build failed: ${a}`)),process.exit(1)}};async function zn(e,t,i,n){v.info(N.cyan(`
@@ -1112,7 +1112,7 @@ ${R}`)),await S(R),new Error(R)}}else if(n){let O="Build completed but produced
 `);if(u.length>o){for(let p=o;p<u.length;p++)u[p].trim()&&console.log(N.dim(`  ${u[p]}`));o=u.length}}}catch{}s=0}catch{s++,s>10&&(n.stop("Connection lost."),v.error(N.red(`
 \u2717 Lost connection to Dashboard API.`)),process.exit(1))}await new Promise(l=>setTimeout(l,3e3))}}import Cs from"http";import{execSync as De,spawn as Qn}from"child_process";import _i from"chalk";import{log as at}from"@clack/prompts";import Ns from"axios";import $i from"fs";import Ts from"os";import Pi from"path";var bt=7070;function ks(){let e=[];try{let t=De("adb devices -l",{stdio:"pipe"}).toString(),i=new Set;t.split(`
 `).forEach(n=>{if(n.includes("List of devices")||!n.trim())return;let r=n.split(/\s+/);if(r.length<2||r[1]!=="device")return;let o=r[0];i.add(o);let s=n.match(/model:([^\s]+)/);e.push({id:o,platform:"android",type:o.startsWith("emulator-")?"emulator":"physical",name:s?s[1].replace(/_/g," "):o,status:"online",details:n.trim()})})}catch{}try{let t=`${process.env.ANDROID_HOME||`${process.env.HOME}/Library/Android/sdk`}/emulator/emulator`,n=De(`${t} -list-avds`,{stdio:"pipe"}).toString().split(`
-`).filter(o=>!!o.trim()),r=e.some(o=>o.platform==="android"&&o.id.startsWith("emulator-"));n.forEach(o=>{r||e.push({id:o,platform:"android",type:"emulator",name:o.replace(/_/g," "),status:"offline",details:`Android Virtual Device: ${o}`})})}catch{}if(process.platform!=="darwin")return e;try{let t=De("/usr/bin/xcrun simctl list devices --json",{stdio:"pipe"}).toString(),i=JSON.parse(t);Object.entries(i.devices).forEach(([n,r])=>{r.forEach(o=>{o.isAvailable&&e.push({id:o.udid,platform:"ios",type:"simulator",name:o.name,status:o.state?.toLowerCase()==="booted"?"online":"offline",runtime:n,details:`${o.name} (${n})`})})})}catch{}try{let t=De("/usr/bin/xcrun devicectl list devices --json-output -",{stdio:"pipe"}).toString();(JSON.parse(t).result?.devices||[]).forEach(n=>{let r=n.connectionProperties?.transportType;(r==="wired"||r==="localNetwork")&&e.push({id:n.identifier,platform:"ios",type:"physical",name:n.deviceProperties?.name||"iPhone",status:"online",details:`${n.deviceProperties?.name||"iPhone"} (${n.model?.name||n.hardwareModel||""}) - ${r}`})})}catch{}return e}async function er(e){let t=[];for await(let i of e)t.push(Buffer.isBuffer(i)?i:Buffer.from(i));return t.length===0?{}:JSON.parse(Buffer.concat(t).toString("utf-8"))}async function xs(e,t){let i=await Ns({method:"GET",url:e,responseType:"stream",timeout:12e4}),n=$i.createWriteStream(t);i.data.pipe(n),await new Promise((r,o)=>{n.on("finish",r),n.on("error",o)})}async function Ls(e,t,i){let n=i||(t.toLowerCase().includes(".apk")?"android":"ios"),r=t.toLowerCase().includes(".ipa"),o=$i.mkdtempSync(Pi.join(Ts.tmpdir(),`${bt}-install-`)),s=Pi.join(o,n==="android"?"install.apk":r?"install.ipa":"install.zip");try{if(await xs(t,s),n==="android"){De(`adb -s ${JSON.stringify(e)} install -r ${JSON.stringify(s)}`,{stdio:"pipe"});return}if(process.platform!=="darwin")throw new Error("iOS local install requires macOS.");De(`unzip -o ${JSON.stringify(s)} -d ${JSON.stringify(o)}`,{stdio:"pipe"});let l="";try{l=De(`find ${JSON.stringify(Pi.join(o,"Payload"))} -maxdepth 1 -name "*.app" 2>/dev/null | head -n 1`,{stdio:"pipe"}).toString().trim()}catch{}if(l||(l=De(`find ${JSON.stringify(o)} -name "*.app" -type d | head -n 1`,{stdio:"pipe"}).toString().trim()),!l)throw new Error(`No .app bundle found inside the ${r?"IPA":"archive"}.`);try{De(`/usr/bin/xcrun devicectl device install app --device ${JSON.stringify(e)} ${JSON.stringify(l)}`,{stdio:"pipe"})}catch(a){try{De(`/usr/bin/xcrun simctl install ${JSON.stringify(e)} ${JSON.stringify(l)}`,{stdio:"pipe"})}catch{throw new Error(a.stderr?.toString().trim()||a.message||"iOS install failed.")}}}finally{$i.rmSync(o,{recursive:!0,force:!0})}}function Us(e,t){if(!e)throw new Error("Device id is required.");if(t==="ios"){if(process.platform!=="darwin")throw new Error("iOS Simulator launch requires macOS.");return De(`/usr/bin/xcrun simctl boot ${JSON.stringify(e)}`,{stdio:"pipe"}),Qn("open",["-a","Simulator"],{detached:!0,stdio:"ignore"}).unref(),"Simulator booting..."}if(t==="android"){let i=`${process.env.ANDROID_HOME||`${process.env.HOME}/Library/Android/sdk`}/emulator/emulator`;return Qn(i,["-avd",e],{detached:!0,stdio:"ignore"}).unref(),"Emulator booting in background..."}throw new Error("Invalid platform.")}async function tr(){process.platform!=="darwin"&&at.warn("Running on non-macOS \u2014 iOS discovery unavailable, Android only.");let e=Cs.createServer((n,r)=>{if(r.setHeader("Access-Control-Allow-Origin","*"),r.setHeader("Access-Control-Allow-Methods","GET, POST, OPTIONS"),r.setHeader("Access-Control-Allow-Headers","Content-Type, Authorization"),n.method==="OPTIONS"){r.writeHead(204),r.end();return}let o=new URL(n.url||"/",`http://localhost:${bt}`);if(n.method==="GET"&&o.pathname==="/local/devices"){try{let s=ks();r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",targets:s}))}catch(s){r.writeHead(500,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:s.message}))}return}if(n.method==="POST"&&o.pathname==="/install-local"){t(n,r);return}if(n.method==="POST"&&o.pathname==="/local/boot"){i(n,r);return}r.writeHead(404),r.end()}),t=async(n,r)=>{try{let{deviceId:o,artifactUrl:s,platform:l}=await er(n);if(!o||!s){r.writeHead(400,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:"deviceId and artifactUrl are required"}));return}await Ls(o,s,l),r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",message:`Installed on ${o}`}))}catch(o){r.writeHead(500,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:o.message||"Local install failed"}))}},i=async(n,r)=>{try{let{id:o,platform:s}=await er(n),l=Us(o,s);r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",message:l}))}catch(o){r.writeHead(500,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:o.message||"Local device launch failed"}))}};e.listen(bt,"127.0.0.1",()=>{at.success(_i.green(`Local device agent running on http://localhost:${bt}`)),at.info(_i.dim("Keep this running while using the Install Hub on the dashboard.")),at.info(_i.dim("Press Ctrl+C to stop."))}),e.on("error",n=>{n.code==="EADDRINUSE"?at.error(`Port ${bt} is already in use \u2014 agent may already be running.`):at.error(`Agent error: ${n.message}`),process.exit(1)}),await new Promise(()=>{})}import{createRequire as Xl}from"module";import{text as Bs,password as Fs,spinner as Hs,isCancel as rr}from"@clack/prompts";import vi from"chalk";import At from"fs";import ir from"path";import Ms from"os";var wi=ir.join(Ms.homedir(),f.configDir),Di=ir.join(wi,"config.json");function Ri(){if(!At.existsSync(Di))return{};try{return JSON.parse(At.readFileSync(Di,"utf-8"))}catch{return{}}}function nr(e){At.existsSync(wi)||At.mkdirSync(wi,{recursive:!0});let i={...Ri(),...e};At.writeFileSync(Di,JSON.stringify(i,null,2))}async function or(){let e=Ri(),t=await Bs({message:"Enter your email:",placeholder:"user@example.com",initialValue:e.lastLoginEmail,validate(r){if(r.length===0)return"Email is required!"}});if(rr(t))return;let i=await Fs({message:"Enter your password:",validate(r){if(r.length===0)return"Password is required!"}});if(rr(i))return;let n=Hs();n.start("Authenticating...");try{let o=await(await fetch(`${Lt}/login`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({username:t,password:i})})).json();o.status==="success"&&o.user.token?(zi({id:o.user.id,email:t,token:o.user.token,refreshToken:o.user.refreshToken}),nr({lastLoginEmail:t}),n.stop(vi.green("Login successful!"))):n.stop(vi.red("Login failed: "+(o.message||"Unknown error")))}catch(r){n.stop(vi.red("Network error: "+r.message))}}import{outro as js,select as Gs,spinner as Ks,isCancel as Vs}from"@clack/prompts";import Wt from"chalk";import Oi from"fs";import zs from"path";var sr=e=>e==="1234567890"||e==="ABC123DEFG"||e==="XXXXXXXXXX"?"":typeof e=="string"?e:"",Ws=()=>process.versions.node.split(".")[0]||"24";async function ar(){if(!ye()){console.log(Wt.red(`You are not logged in. Run \`${f.nameLower} login\` first.`));return}let t=Ks();t.start("Fetching projects...");try{let{data:i}=await C.get("/projects");if(t.stop("Projects loaded."),i.status!=="success"||!i.projects||i.projects.length===0){console.log(Wt.yellow(`No projects found. Run \`${f.nameLower} init\` to create one.`));return}let n=i.projects.map(I=>({value:I.projectId,label:`${I.name} (${I.slug})`})),r=await Gs({message:"Select a project to link:",options:n});if(Vs(r))return;let o=zs.join(process.cwd(),f.configFileName),s={};if(Oi.existsSync(o))try{s=JSON.parse(Oi.readFileSync(o,"utf-8"))}catch{}let l=i.projects.find(I=>I.projectId===r),a=s.android?.package||Be("android"),d=s.ios?.bundleIdentifier||Be("ios"),c=s.android||{},u=s.submit?.production?.android||{},p=s.submit?.production?.ios||{},m={projectId:r,name:l?.name,slug:l?.slug,nodeVersion:s.nodeVersion||Ws(),scheme:l?.slug?.toLowerCase()||"app",android:{...c,package:a||"",versionCode:c.versionCode||"auto"},ios:{bundleIdentifier:d||"",buildNumber:s.ios?.buildNumber||"auto"},build:{development:{environment:"development",distribution:"development"},staging:{environment:"staging",distribution:"internal"},production:{environment:"production",distribution:"store"}},submit:{production:{android:{...u,track:u.track||"internal",releaseStatus:u.releaseStatus||"completed"},ios:{ascAppId:sr(p.ascAppId),appleTeamId:sr(p.appleTeamId)}}}};Oi.writeFileSync(o,JSON.stringify(m,null,2)),js(Wt.green(`Linked to project ${m.name} (${m.slug})`))}catch(i){t.stop(Wt.red("Error fetching projects: "+i.message))}}import{outro as Ys,text as Yt,select as Js,spinner as Xs,isCancel as It}from"@clack/prompts";import _t from"chalk";import qs from"fs";import Zs from"path";import{randomUUID as Qs}from"crypto";var ea=()=>process.versions.node.split(".")[0]||"24";async function lr(){if(!ye()){console.log(_t.red(`You are not logged in. Run \`${f.nameLower} login\` first.`));return}let t=await Yt({message:"Project Name:",placeholder:"My Awesome App",validate(l){if(l.length===0)return"Name is required!"}});if(It(t))return;let i=await Yt({message:"Project Slug (URL friendly):",placeholder:"my-awesome-app",validate(l){if(l.length===0)return"Slug is required!";if(!/^[a-z0-9-]+$/.test(l))return"Slug must be lowercase alphanumeric with dashes."}});if(It(i))return;let n=await Js({message:"Platform:",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"},{value:"web",label:"Web"},{value:"all",label:"All Platforms"}]});if(It(n))return;let r="";if(n==="android"||n==="all"){let l=Be("android");if(r=await Yt({message:"Android Package Name:",initialValue:l||"",placeholder:"com.example.app",validate(a){if(a.length===0)return"Package name is required for Android!"}}),It(r))return}let o="";if(n==="ios"||n==="all"){let l=Be("ios");if(o=await Yt({message:"iOS Bundle Identifier:",initialValue:l||"",placeholder:"com.example.app",validate(a){if(a.length===0)return"Bundle ID is required for iOS!"}}),It(o))return}let s=Xs();s.start("Creating project...");try{let l=Qs(),d={projectId:l,name:t,slug:i,storageType:"managed",platforms:n==="all"?["android","ios","web"]:[n]},{data:c}=await C.post("/projects",d);if(c.status==="success"){s.stop(_t.green("Project created successfully!"));let u=Zs.join(process.cwd(),f.configFileName);qs.writeFileSync(u,JSON.stringify({projectId:l,name:t,slug:i,nodeVersion:ea(),...r?{android:{package:r,versionCode:"auto"}}:{},...o?{ios:{bundleIdentifier:o,buildNumber:"auto"}}:{},build:{development:{environment:"development",distribution:"development"},staging:{environment:"staging",distribution:"internal"},production:{environment:"production",distribution:"store"}},submit:{production:{android:{track:"internal",releaseStatus:"completed"},ios:{ascAppId:"",appleTeamId:""}}}},null,2)),Ys(_t.green(`Initialized project ${t} and linked locally!`))}else s.stop(_t.red("creation failed: "+c.message))}catch(l){s.stop(_t.red("Network error: "+l.message))}}import{spinner as cr,log as Ae}from"@clack/prompts";import Jt from"chalk";import dr from"fs";import ta from"path";function ur(e,t,i,n){let r=e?.response?.status,o=e?.response?.data?.message||e?.response?.data?.error,s=n?` ${n}`:"";return r===401?`Not logged in or token expired while trying to ${i}${s}. Run \`${f.nameLower} login\` and try again.`:r===403?[`Permission denied while trying to ${i}${s}.`,o?`API says: ${o}.`:void 0,`Current Mach account/token does not have access to project ${t}.`,`Run \`${f.nameLower} login\` with the correct account, or ask a project owner to grant access.`].filter(Boolean).join(" "):r===404?[`Project or environment endpoint was not found while trying to ${i}${s}.`,`Project ID: ${t}.`,o?`API says: ${o}.`:void 0].filter(Boolean).join(" "):r?`Failed to ${i}${s}: ${o||`API returned HTTP ${r}`}`:`Network error while trying to ${i}${s}: ${e?.message||"Unknown error"}`}async function pr(e,t){let i=ye();if(!i){Ae.error(`You are not logged in. Run \`${f.nameLower} login\` first.`);return}let n=ta.join(process.cwd(),f.configFileName);if(!dr.existsSync(n)){Ae.error(`No ${f.configFileName} found. Run \`${f.nameLower} init\` or \`${f.nameLower} link\` first.`);return}let r;try{r=JSON.parse(dr.readFileSync(n,"utf-8"))}catch{Ae.error(`Failed to parse ${f.configFileName}`);return}let{projectId:o}=r;if(!o){Ae.error(`${f.configFileName} is missing projectId.`);return}e==="set"?await ia(o,t,i):e==="list"?await na(o,i):Ae.error(`Unknown env action: ${e}. Use 'set' or 'list'.`)}async function ia(e,t,i){if(t.length===0){Ae.error(`Usage: ${f.nameLower} env set KEY=VALUE [KEY2=VALUE2 ...]`);return}let n=cr();n.start("Setting environment variables...");let r=0,o=0;for(let s of t){let[l,...a]=s.split("="),d=a.join("=");if(!l||d===void 0){Ae.warn(`Invalid format for argument: ${s}. Expected KEY=VALUE.`),o++;continue}try{let c={key:l.trim(),value:d,type:"env",environment:"global",visibility:"secret"},{data:u}=await C.post(`/projects/${e}/secrets`,c);u.status==="success"?r++:(Ae.error(`Failed to set ${l}: ${u.message}`),o++)}catch(c){Ae.error(ur(c,e,"set",l)),o++}}n.stop(`Set ${r} variable(s). ${o>0?`${o} failed.`:""}`)}async function na(e,t){let i=cr();i.start("Fetching environment variables...");try{let{data:n}=await C.get(`/projects/${e}/secrets`);if(n.status==="success"){i.stop("Fetched variables.");let r=n.secrets||[];r.length===0?Ae.info("No environment variables found for this project."):(Ae.info(Jt.bold("Environment Variables (Global & Scoped):")),r.forEach(o=>{let s=o.visibility==="plain"?o.value:"********";console.log(`  ${Jt.cyan(o.key)} = ${s}  ${Jt.gray(`[${o.environment}]`)}`)}))}else i.stop(Jt.red(`Failed to fetch variables: ${n.message}`))}catch(n){i.stop("Failed to fetch variables."),Ae.error(ur(n,e,"list"))}}import{spinner as ze,text as Pt,select as ki,isCancel as Ve,cancel as xi,log as mr}from"@clack/prompts";import te from"chalk";import X from"fs";import pe from"path";import{spawn as ra,spawnSync as Qe}from"child_process";import gr from"axios";import tt from"os";import Mi from"crypto";var oa=5e3,sa=12,aa={completed:"completed",draft:"draft",halted:"halted",inprogress:"inProgress","in-progress":"inProgress"},la=e=>e?.type==="google_service_account",Xt=e=>e?.bundleId||e?.packageName||e?.meta?.packageName||e?.meta?.bundleId;async function hr(e){let t=ze(),i=ye(),n=da(e);if(!n){process.exitCode=1;return}let r=e.projectId||n.projectId,o=e.profile||e.buildProfile||"production";if(!r){Z(`${f.configFileName} is missing projectId. Pass --project-id in runner mode.`),process.exitCode=1;return}n.projectId=r,se(te.dim(`Submit for project: ${n.name||r} | Profile: ${o}`));let s=e.platform;if(!s){let $=await ki({message:"Select platform to submit:",options:[{value:"ios",label:"iOS (App Store Connect / TestFlight)"},{value:"android",label:"Android (Google Play Console)"}]});if(Ve($)){xi("Operation cancelled");return}s=$}if(s=String(s).toLowerCase(),s!=="ios"&&s!=="android"){Z(`Platform ${s} is not supported. Use 'ios' or 'android'.`),process.exitCode=1;return}let l=s==="ios"&&!e.local&&e.sshHost?Pa(n,o,e):null;if(s==="ios"&&!e.local&&!l){await ca(n,o,e);return}let a=e.submitId,d=!!(e.local&&a),c=a||null,u=async($,U={})=>{c&&await ma(r,c,{status:$,...U})},p=s==="android"?Aa(n,o):void 0,m=s==="ios"?_a(n,o):void 0,I,L,w,B=!1;try{s==="android"&&(I=e.track||n.submit?.[o]?.android?.track||n.submit?.production?.android?.track||"internal",L=$a(n,o,e.releaseStatus),w=Da(n,o,e.rollout),B=Ra(n,o,e.changesNotSentForReview),va(L,w))}catch($){Z($.message),process.exitCode=1;return}if(s==="android"&&!d&&(c=await ua(n,r,s,o,e,{packageName:p,track:I,releaseStatus:L,rollout:w,changesNotSentForReview:B}),!c)){Z("Could not create submission tracking record. Submission was not started."),process.exitCode=1;return}await u("running",{platform:s,profile:o,packageName:p,track:I,releaseStatus:L,rollout:w,startTime:Date.now()});let k=null,j=null;try{j=await Oa(r,s,e,i?.token),k=j?.filePath||null}catch($){await u("failed",{error:`Failed to resolve submission artifact: ${$.message}`,endTime:Date.now()}),Z(`Failed to resolve submission artifact: ${$.message}`),process.exitCode=1;return}if(!k){await u("failed",{error:"No suitable artifact found for submission.",endTime:Date.now()}),process.exitCode=1;return}await u("running",{buildId:j?.buildId,artifactName:j?.artifactName,artifactSource:j?.source}),se(`Using artifact: ${te.green(pe.basename(k))} `),t.start("Fetching submission credentials from Dashboard...");let h;try{let U=(await C.get(`/credentials/${r}`)).data.credentials||[];if(s==="android"&&!p){t.stop("Package name missing"),Z("Could not resolve Android package name. Set android.package in mach.config.json/app.json."),await u("failed",{error:"Could not resolve Android package name.",endTime:Date.now()}),process.exitCode=1;return}let G=U.filter(la),x=s==="ios"?U.filter(H=>H.type==="asc_api_key"):Ia(G,p);if(x.length===0){if(t.stop("Credentials missing"),Z(s==="android"?`No Google Play service credential found for package ${p}.`:`No Service Credentials found for ${s}.`),s==="android"){let H=G.map(Xt).filter(Boolean).join(", ");H&&se(`Found Google Play service credential(s) for: ${H}`),se(`Use '${f.nameLower} credentials:service --platform android --package-name ${p}' or upload it under that package in the Dashboard.`)}else se(`Use '${f.nameLower} credentials:service --platform ${s}' or use the Dashboard to upload them.`);await u("failed",{error:`No submission credentials found for ${s}.`,endTime:Date.now()}),process.exitCode=1;return}if(h=ya(x,e.credentialId),!h&&s==="ios"&&m&&(h=Sa(x,m)),h||x.length===1)h=h||x[0],t.stop(`Using: ${h.name}`),s==="android"&&Xt(h)==="*"&&se(te.yellow(`Using legacy wildcard Google Play credential for ${p}. Upload a package-scoped credential when possible.`));else{if(t.stop("Multiple credentials found"),Ea()){let E=x.map(ne=>`${ne.name||"credential"} (${ne.credentialId||ne.id||"no-id"})`).join(", ");Z(`Multiple ${s==="ios"?"App Store Connect":"Google Play"} credentials found. Use --credential-id in CI. Available: ${E}`),await u("failed",{error:"Multiple submission credentials found; --credential-id is required in CI.",endTime:Date.now()}),process.exitCode=1;return}let H=await ki({message:`Choose a ${s==="ios"?"App Store Connect":"Google Play"} credential:`,options:x.map(E=>({value:E.credentialId,label:E.name,hint:`${E.keyId?`ID: ${E.keyId}`:""} ${E.issuerId?`(Issuer: ${E.issuerId.substring(0,8)}...)`:""}`}))});if(Ve(H)){xi("Submission cancelled"),await u("failed",{error:"Submission cancelled while selecting credential.",endTime:Date.now()}),process.exitCode=1;return}h=x.find(E=>E.credentialId===H),se(`Using selected: ${te.green(h.name)}`)}}catch($){t.stop("Failed to fetch credentials"),Z(`API Error: ${$.message} `),await u("failed",{error:`Failed to fetch credentials: ${$.message}`,endTime:Date.now()}),process.exitCode=1;return}let K=X.mkdtempSync(pe.join(tt.tmpdir(),`${f.nameLower}-submit-`)),_=h.keyId||h.meta?.keyId,S=h.issuerId||h.meta?.issuerId,O=h.type==="asc_api_key"?`AuthKey_${_}.p8`:"service-account.json",D=pe.join(K,O);t.start("Downloading secure key...");try{let $=await C.get(`/credentials/${h.credentialId}/download`,{params:{projectId:r}});if($.data.status!=="success"||!$.data.downloadUrl)throw new Error("Failed to get secure download URL");let U=await gr.get($.data.downloadUrl,{responseType:"arraybuffer"});X.writeFileSync(D,Buffer.from(U.data)),t.stop("Key downloaded to secure temp storage")}catch($){t.stop("Download failed"),Z(`Failed to download key: ${$.message}`);try{X.rmSync(K,{recursive:!0,force:!0})}catch{}await u("failed",{error:`Failed to download credential key: ${$.message}`,endTime:Date.now()}),process.exitCode=1;return}se(te.blue(`Initiating ${s==="ios"?"TestFlight":"Google Play"} submission...`));let T=!1,R;try{if(s==="ios"){if(!_){let U=await Pt({message:"Enter App Store Connect Key ID (e.g. 2X948D...):",validate:G=>G.length>0?void 0:"Key ID is required"});if(Ve(U)){await u("failed",{error:"Submission cancelled while entering ASC Key ID.",endTime:Date.now()}),process.exitCode=1;return}_=U}if(!S||S==="undefined"){let U=await Pt({message:"Enter App Store Connect Issuer ID (Found on ASC Keys page):",validate:G=>G.length>0?void 0:"Issuer ID is required"});if(Ve(U)){await u("failed",{error:"Submission cancelled while entering ASC Issuer ID.",endTime:Date.now()}),process.exitCode=1;return}S=U}se(`Using ASC Key ID: ${_}`),se(`Using ASC Issuer ID: ${S}`);let $=l?await Na(k,D,S,_,m,l):await Ca(k,D,S,_,m);Ui(`${s==="ios"?"App Store":"Google Play"} submission successful!`),T=!0}else R=await Ua(k,D,I||"internal",p,L||"completed",w,B,o),Ui("Google Play submission successful!"),T=!0}catch($){Z(`Submission failed: ${$.message}`),await u("failed",{error:$.message,endTime:Date.now()}),lt(e,{status:"failed",projectId:r,submitId:c,platform:s,profile:o,buildId:j?.buildId||e.buildId,artifactName:j?.artifactName,error:$.message,dashboardUrl:c?et(c,r):void 0}),process.exitCode=1}finally{T&&(await u("success",{endTime:Date.now(),versionCode:R?.versionCode,track:I,releaseStatus:L}),lt(e,{status:"success",projectId:r,submitId:c,platform:s,profile:o,buildId:j?.buildId||e.buildId,artifactName:j?.artifactName,versionCode:R?.versionCode,track:I,releaseStatus:L,dashboardUrl:c?et(c,r):void 0})),Ga(K),k&&k.includes(`${f.nameLower}-artifact-`)}}function da(e){let t=`./${f.configFileName}`;if(X.existsSync(t))try{return JSON.parse(X.readFileSync(t,"utf-8"))}catch(i){return Z(`Failed to read ${f.configFileName}: ${i.message}`),null}return e.projectId?{projectId:e.projectId}:(Z(`No ${f.configFileName} found. Run \`${f.nameLower} init\` or \`${f.nameLower} link\` first.`),null)}async function ca(e,t,i){let n=i.projectId||e.projectId;if(!n){Z(`${f.configFileName} is missing projectId.`),process.exitCode=1;return}let r=i.submitId||Mi.randomUUID(),o=!!i.latest||!i.buildId,s=pa({...i,latest:o,profile:t,projectId:n,submitId:r}),l={projectId:n,submitId:r,platform:"ios",profile:t,latest:o,buildId:i.buildId,credentialId:i.credentialId,status:"pending",source:"cli",submitArgs:process.argv.slice(3).join(" "),runnerArgs:s,runnerCommand:[f.nameLower,"submit",...s].map(ba).join(" "),appName:e.name,startTime:Date.now()},a=ze();a.start("Queuing iOS submit on macOS runner...");try{let d=await C.post("/submissions",l),c=d.data?.submission||d.data?.submit||{},u=d.data?.dashboardUrl||et(r,n);a.stop("iOS submit queued"),se(`Submission ID: ${te.cyan(r)}`),se(`Dashboard: ${te.blue.underline(u)}`),lt(i,{status:"pending",projectId:n,submitId:r,platform:"ios",profile:t,latest:o,buildId:i.buildId,dashboardUrl:u}),await fa(n,r,i)}catch(d){a.stop("Could not queue iOS submit"),Z(ha(d)),process.exitCode=1}}async function ua(e,t,i,n,r,o={}){let s=r.submitId||Mi.randomUUID(),l=!!r.latest||!r.buildId,a={projectId:t,submitId:s,platform:i,profile:n,latest:l,buildId:r.buildId,credentialId:r.credentialId,status:"running",source:"cli-direct",submitArgs:process.argv.slice(3).join(" "),appName:e.name,startTime:Date.now(),...o};try{let d=await C.post("/submissions",a),c=d.data?.submission||d.data?.submit||{},u=d.data?.dashboardUrl||c.dashboardUrl||et(s,t);return se(`Submission ID: ${te.cyan(s)}`),se(`Dashboard: ${te.blue.underline(u)}`),lt(r,{status:"running",projectId:t,submitId:s,platform:i,profile:n,latest:l,buildId:r.buildId,dashboardUrl:u}),s}catch(d){let c=d.response?.data?.message||d.response?.data?.error||d.message;return se(te.yellow(`Could not create submission tracking record: ${c}`)),null}}function pa(e){let t=["--local","--submit-id",e.submitId,"--project-id",e.projectId,"--platform","ios","--profile",e.profile||"production"];return e.buildId?t.push("--build-id",e.buildId):t.push("--latest"),e.credentialId&&t.push("--credential-id",e.credentialId),e.quiet&&t.push("--quiet"),e.jsonOutput&&t.push("--json-output",e.jsonOutput),t.filter(i=>i!=null&&i!=="")}async function fa(e,t,i){let n=ze(),r=0,o=0;for(i.quiet||n.start("Waiting for iOS submit runner...");;)try{let s=await C.get(`/submissions/${e}/${t}`),l=s.data?.submission||s.data?.submit||s.data,a=String(l?.status||"pending").toLowerCase();r=0;let d=Array.isArray(l?.logs)?l.logs:[];for(let c=o;c<d.length;c++){let u=d[c];u&&console.log(te.dim(String(u)))}if(o=d.length,["success","completed","succeeded"].includes(a)){i.quiet||n.stop("iOS submit completed"),Ui("App Store submission successful!"),lt(i,{status:"success",projectId:e,submitId:t,platform:"ios",profile:l?.profile||i.profile||"production",buildId:l?.buildId||i.buildId,artifactName:l?.artifactName,dashboardUrl:l?.dashboardUrl||et(t,e)});return}if(["failed","error","cancelled","canceled"].includes(a)){i.quiet||n.stop("iOS submit failed");let c=l?.error||l?.message||"Unknown iOS submit failure.";Z(c),lt(i,{status:"failed",projectId:e,submitId:t,platform:"ios",profile:l?.profile||i.profile||"production",buildId:l?.buildId||i.buildId,artifactName:l?.artifactName,error:c,dashboardUrl:l?.dashboardUrl||et(t,e)}),process.exitCode=1;return}i.quiet||n.message(`iOS submit ${a}...`),await Li(oa)}catch(s){if(r++,r>=sa){i.quiet||n.stop("Lost connection to iOS submit status"),Z(`Could not fetch iOS submit status after ${r} attempts: ${s.message}`),process.exitCode=1;return}await Li(Math.min(2e3*r,15e3))}}async function ma(e,t,i){let n;for(let r=1;r<=3;r++)try{await C.patch(`/submissions/${e}/${t}`,i);return}catch(o){if(n=o,r>=3||!ga(o))break;await Li(1e3*r)}mr.warn(te.dim(`Could not report submission status: ${n?.message||n}`))}function ga(e){let t=e.response?.status;return!t||t===408||t===409||t===425||t===429||t>=500}function ha(e){let t=e.response?.status,i=e.response?.data?.message||e.response?.data?.error;return t===404||t===405?["Managed iOS submit is not enabled on this Mach API yet.","Deploy the API/dashboard submission orchestration endpoint, then retry the same command.","Expected API: POST /submissions and GET/PATCH /submissions/:projectId/:submitId."].join(`
+`).filter(o=>!!o.trim()),r=e.some(o=>o.platform==="android"&&o.id.startsWith("emulator-"));n.forEach(o=>{r||e.push({id:o,platform:"android",type:"emulator",name:o.replace(/_/g," "),status:"offline",details:`Android Virtual Device: ${o}`})})}catch{}if(process.platform!=="darwin")return e;try{let t=De("/usr/bin/xcrun simctl list devices --json",{stdio:"pipe"}).toString(),i=JSON.parse(t);Object.entries(i.devices).forEach(([n,r])=>{r.forEach(o=>{o.isAvailable&&e.push({id:o.udid,platform:"ios",type:"simulator",name:o.name,status:o.state?.toLowerCase()==="booted"?"online":"offline",runtime:n,details:`${o.name} (${n})`})})})}catch{}try{let t=De("/usr/bin/xcrun devicectl list devices --json-output -",{stdio:"pipe"}).toString();(JSON.parse(t).result?.devices||[]).forEach(n=>{let r=n.connectionProperties?.transportType;(r==="wired"||r==="localNetwork")&&e.push({id:n.identifier,platform:"ios",type:"physical",name:n.deviceProperties?.name||"iPhone",status:"online",details:`${n.deviceProperties?.name||"iPhone"} (${n.model?.name||n.hardwareModel||""}) - ${r}`})})}catch{}return e}async function er(e){let t=[];for await(let i of e)t.push(Buffer.isBuffer(i)?i:Buffer.from(i));return t.length===0?{}:JSON.parse(Buffer.concat(t).toString("utf-8"))}async function xs(e,t){let i=await Ns({method:"GET",url:e,responseType:"stream",timeout:12e4}),n=$i.createWriteStream(t);i.data.pipe(n),await new Promise((r,o)=>{n.on("finish",r),n.on("error",o)})}async function Ls(e,t,i){let n=i||(t.toLowerCase().includes(".apk")?"android":"ios"),r=t.toLowerCase().includes(".ipa"),o=$i.mkdtempSync(Pi.join(Ts.tmpdir(),`${bt}-install-`)),s=Pi.join(o,n==="android"?"install.apk":r?"install.ipa":"install.zip");try{if(await xs(t,s),n==="android"){De(`adb -s ${JSON.stringify(e)} install -r ${JSON.stringify(s)}`,{stdio:"pipe"});return}if(process.platform!=="darwin")throw new Error("iOS local install requires macOS.");De(`unzip -o ${JSON.stringify(s)} -d ${JSON.stringify(o)}`,{stdio:"pipe"});let l="";try{l=De(`find ${JSON.stringify(Pi.join(o,"Payload"))} -maxdepth 1 -name "*.app" 2>/dev/null | head -n 1`,{stdio:"pipe"}).toString().trim()}catch{}if(l||(l=De(`find ${JSON.stringify(o)} -name "*.app" -type d | head -n 1`,{stdio:"pipe"}).toString().trim()),!l)throw new Error(`No .app bundle found inside the ${r?"IPA":"archive"}.`);try{De(`/usr/bin/xcrun devicectl device install app --device ${JSON.stringify(e)} ${JSON.stringify(l)}`,{stdio:"pipe"})}catch(a){try{De(`/usr/bin/xcrun simctl install ${JSON.stringify(e)} ${JSON.stringify(l)}`,{stdio:"pipe"})}catch{throw new Error(a.stderr?.toString().trim()||a.message||"iOS install failed.")}}}finally{$i.rmSync(o,{recursive:!0,force:!0})}}function Us(e,t){if(!e)throw new Error("Device id is required.");if(t==="ios"){if(process.platform!=="darwin")throw new Error("iOS Simulator launch requires macOS.");return De(`/usr/bin/xcrun simctl boot ${JSON.stringify(e)}`,{stdio:"pipe"}),Qn("open",["-a","Simulator"],{detached:!0,stdio:"ignore"}).unref(),"Simulator booting..."}if(t==="android"){let i=`${process.env.ANDROID_HOME||`${process.env.HOME}/Library/Android/sdk`}/emulator/emulator`;return Qn(i,["-avd",e],{detached:!0,stdio:"ignore"}).unref(),"Emulator booting in background..."}throw new Error("Invalid platform.")}async function tr(){process.platform!=="darwin"&&at.warn("Running on non-macOS \u2014 iOS discovery unavailable, Android only.");let e=Cs.createServer((n,r)=>{if(r.setHeader("Access-Control-Allow-Origin","*"),r.setHeader("Access-Control-Allow-Methods","GET, POST, OPTIONS"),r.setHeader("Access-Control-Allow-Headers","Content-Type, Authorization"),n.method==="OPTIONS"){r.writeHead(204),r.end();return}let o=new URL(n.url||"/",`http://localhost:${bt}`);if(n.method==="GET"&&o.pathname==="/local/devices"){try{let s=ks();r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",targets:s}))}catch(s){r.writeHead(500,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:s.message}))}return}if(n.method==="POST"&&o.pathname==="/install-local"){t(n,r);return}if(n.method==="POST"&&o.pathname==="/local/boot"){i(n,r);return}r.writeHead(404),r.end()}),t=async(n,r)=>{try{let{deviceId:o,artifactUrl:s,platform:l}=await er(n);if(!o||!s){r.writeHead(400,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:"deviceId and artifactUrl are required"}));return}await Ls(o,s,l),r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",message:`Installed on ${o}`}))}catch(o){r.writeHead(500,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:o.message||"Local install failed"}))}},i=async(n,r)=>{try{let{id:o,platform:s}=await er(n),l=Us(o,s);r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",message:l}))}catch(o){r.writeHead(500,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:o.message||"Local device launch failed"}))}};e.listen(bt,"127.0.0.1",()=>{at.success(_i.green(`Local device agent running on http://localhost:${bt}`)),at.info(_i.dim("Keep this running while using the Install Hub on the dashboard.")),at.info(_i.dim("Press Ctrl+C to stop."))}),e.on("error",n=>{n.code==="EADDRINUSE"?at.error(`Port ${bt} is already in use \u2014 agent may already be running.`):at.error(`Agent error: ${n.message}`),process.exit(1)}),await new Promise(()=>{})}import{createRequire as Xl}from"module";import{text as Bs,password as Fs,spinner as Hs,isCancel as rr}from"@clack/prompts";import vi from"chalk";import At from"fs";import ir from"path";import Ms from"os";var wi=ir.join(Ms.homedir(),f.configDir),Di=ir.join(wi,"config.json");function Ri(){if(!At.existsSync(Di))return{};try{return JSON.parse(At.readFileSync(Di,"utf-8"))}catch{return{}}}function nr(e){At.existsSync(wi)||At.mkdirSync(wi,{recursive:!0});let i={...Ri(),...e};At.writeFileSync(Di,JSON.stringify(i,null,2))}async function or(){let e=Ri(),t=await Bs({message:"Enter your email:",placeholder:"user@example.com",initialValue:e.lastLoginEmail,validate(r){if(r.length===0)return"Email is required!"}});if(rr(t))return;let i=await Fs({message:"Enter your password:",validate(r){if(r.length===0)return"Password is required!"}});if(rr(i))return;let n=Hs();n.start("Authenticating...");try{let o=await(await fetch(`${Lt}/login`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({username:t,password:i})})).json();o.status==="success"&&o.user.token?(zi({id:o.user.id,email:t,token:o.user.token,refreshToken:o.user.refreshToken}),nr({lastLoginEmail:t}),n.stop(vi.green("Login successful!"))):n.stop(vi.red("Login failed: "+(o.message||"Unknown error")))}catch(r){n.stop(vi.red("Network error: "+r.message))}}import{outro as js,select as Gs,spinner as Ks,isCancel as Vs}from"@clack/prompts";import Wt from"chalk";import Oi from"fs";import zs from"path";var sr=e=>e==="1234567890"||e==="ABC123DEFG"||e==="XXXXXXXXXX"?"":typeof e=="string"?e:"",Ws=()=>process.versions.node.split(".")[0]||"24";async function ar(){if(!ye()){console.log(Wt.red(`You are not logged in. Run \`${f.nameLower} login\` first.`));return}let t=Ks();t.start("Fetching projects...");try{let{data:i}=await C.get("/projects");if(t.stop("Projects loaded."),i.status!=="success"||!i.projects||i.projects.length===0){console.log(Wt.yellow(`No projects found. Run \`${f.nameLower} init\` to create one.`));return}let n=i.projects.map(I=>({value:I.projectId,label:`${I.name} (${I.slug})`})),r=await Gs({message:"Select a project to link:",options:n});if(Vs(r))return;let o=zs.join(process.cwd(),f.configFileName),s={};if(Oi.existsSync(o))try{s=JSON.parse(Oi.readFileSync(o,"utf-8"))}catch{}let l=i.projects.find(I=>I.projectId===r),a=s.android?.package||Be("android"),d=s.ios?.bundleIdentifier||Be("ios"),c=s.android||{},u=s.submit?.production?.android||{},p=s.submit?.production?.ios||{},m={projectId:r,name:l?.name,slug:l?.slug,nodeVersion:s.nodeVersion||Ws(),scheme:l?.slug?.toLowerCase()||"app",android:{...c,package:a||"",versionCode:c.versionCode||"auto"},ios:{bundleIdentifier:d||"",buildNumber:s.ios?.buildNumber||"auto"},build:{development:{environment:"development",distribution:"development"},staging:{environment:"staging",distribution:"internal"},production:{environment:"production",distribution:"store"}},submit:{production:{android:{...u,track:u.track||"internal",releaseStatus:u.releaseStatus||"completed"},ios:{ascAppId:sr(p.ascAppId),appleTeamId:sr(p.appleTeamId)}}}};Oi.writeFileSync(o,JSON.stringify(m,null,2)),js(Wt.green(`Linked to project ${m.name} (${m.slug})`))}catch(i){t.stop(Wt.red("Error fetching projects: "+i.message))}}import{outro as Ys,text as Yt,select as Js,spinner as Xs,isCancel as It}from"@clack/prompts";import _t from"chalk";import qs from"fs";import Zs from"path";import{randomUUID as Qs}from"crypto";var ea=()=>process.versions.node.split(".")[0]||"24";async function lr(){if(!ye()){console.log(_t.red(`You are not logged in. Run \`${f.nameLower} login\` first.`));return}let t=await Yt({message:"Project Name:",placeholder:"My Awesome App",validate(l){if(l.length===0)return"Name is required!"}});if(It(t))return;let i=await Yt({message:"Project Slug (URL friendly):",placeholder:"my-awesome-app",validate(l){if(l.length===0)return"Slug is required!";if(!/^[a-z0-9-]+$/.test(l))return"Slug must be lowercase alphanumeric with dashes."}});if(It(i))return;let n=await Js({message:"Platform:",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"},{value:"web",label:"Web"},{value:"all",label:"All Platforms"}]});if(It(n))return;let r="";if(n==="android"||n==="all"){let l=Be("android");if(r=await Yt({message:"Android Package Name:",initialValue:l||"",placeholder:"com.example.app",validate(a){if(a.length===0)return"Package name is required for Android!"}}),It(r))return}let o="";if(n==="ios"||n==="all"){let l=Be("ios");if(o=await Yt({message:"iOS Bundle Identifier:",initialValue:l||"",placeholder:"com.example.app",validate(a){if(a.length===0)return"Bundle ID is required for iOS!"}}),It(o))return}let s=Xs();s.start("Creating project...");try{let l=Qs(),d={projectId:l,name:t,slug:i,storageType:"managed",platforms:n==="all"?["android","ios","web"]:[n]},{data:c}=await C.post("/projects",d);if(c.status==="success"){s.stop(_t.green("Project created successfully!"));let u=Zs.join(process.cwd(),f.configFileName);qs.writeFileSync(u,JSON.stringify({projectId:l,name:t,slug:i,nodeVersion:ea(),...r?{android:{package:r,versionCode:"auto"}}:{},...o?{ios:{bundleIdentifier:o,buildNumber:"auto"}}:{},build:{development:{environment:"development",distribution:"development"},staging:{environment:"staging",distribution:"internal"},production:{environment:"production",distribution:"store"}},submit:{production:{android:{track:"internal",releaseStatus:"completed"},ios:{ascAppId:"",appleTeamId:""}}}},null,2)),Ys(_t.green(`Initialized project ${t} and linked locally!`))}else s.stop(_t.red("creation failed: "+c.message))}catch(l){s.stop(_t.red("Network error: "+l.message))}}import{spinner as cr,log as Ae}from"@clack/prompts";import Jt from"chalk";import dr from"fs";import ta from"path";function ur(e,t,i,n){let r=e?.response?.status,o=e?.response?.data?.message||e?.response?.data?.error,s=n?` ${n}`:"";return r===401?`Not logged in or token expired while trying to ${i}${s}. Run \`${f.nameLower} login\` and try again.`:r===403?[`Permission denied while trying to ${i}${s}.`,o?`API says: ${o}.`:void 0,`Current Mach account/token does not have access to project ${t}.`,`Run \`${f.nameLower} login\` with the correct account, or ask a project owner to grant access.`].filter(Boolean).join(" "):r===404?[`Project or environment endpoint was not found while trying to ${i}${s}.`,`Project ID: ${t}.`,o?`API says: ${o}.`:void 0].filter(Boolean).join(" "):r?`Failed to ${i}${s}: ${o||`API returned HTTP ${r}`}`:`Network error while trying to ${i}${s}: ${e?.message||"Unknown error"}`}async function pr(e,t){let i=ye();if(!i){Ae.error(`You are not logged in. Run \`${f.nameLower} login\` first.`);return}let n=ta.join(process.cwd(),f.configFileName);if(!dr.existsSync(n)){Ae.error(`No ${f.configFileName} found. Run \`${f.nameLower} init\` or \`${f.nameLower} link\` first.`);return}let r;try{r=JSON.parse(dr.readFileSync(n,"utf-8"))}catch{Ae.error(`Failed to parse ${f.configFileName}`);return}let{projectId:o}=r;if(!o){Ae.error(`${f.configFileName} is missing projectId.`);return}e==="set"?await ia(o,t,i):e==="list"?await na(o,i):Ae.error(`Unknown env action: ${e}. Use 'set' or 'list'.`)}async function ia(e,t,i){if(t.length===0){Ae.error(`Usage: ${f.nameLower} env set KEY=VALUE [KEY2=VALUE2 ...]`);return}let n=cr();n.start("Setting environment variables...");let r=0,o=0;for(let s of t){let[l,...a]=s.split("="),d=a.join("=");if(!l||d===void 0){Ae.warn(`Invalid format for argument: ${s}. Expected KEY=VALUE.`),o++;continue}try{let c={key:l.trim(),value:d,type:"env",environment:"global",visibility:"secret"},{data:u}=await C.post(`/projects/${e}/secrets`,c);u.status==="success"?r++:(Ae.error(`Failed to set ${l}: ${u.message}`),o++)}catch(c){Ae.error(ur(c,e,"set",l)),o++}}n.stop(`Set ${r} variable(s). ${o>0?`${o} failed.`:""}`)}async function na(e,t){let i=cr();i.start("Fetching environment variables...");try{let{data:n}=await C.get(`/projects/${e}/secrets`);if(n.status==="success"){i.stop("Fetched variables.");let r=n.secrets||[];r.length===0?Ae.info("No environment variables found for this project."):(Ae.info(Jt.bold("Environment Variables (Global & Scoped):")),r.forEach(o=>{let s=o.visibility==="plain"?o.value:"********";console.log(`  ${Jt.cyan(o.key)} = ${s}  ${Jt.gray(`[${o.environment}]`)}`)}))}else i.stop(Jt.red(`Failed to fetch variables: ${n.message}`))}catch(n){i.stop("Failed to fetch variables."),Ae.error(ur(n,e,"list"))}}import{spinner as ze,text as Pt,select as ki,isCancel as Ve,cancel as xi,log as mr}from"@clack/prompts";import te from"chalk";import X from"fs";import pe from"path";import{spawn as ra,spawnSync as Qe}from"child_process";import gr from"axios";import tt from"os";import Mi from"crypto";var oa=5e3,sa=12,aa={completed:"completed",draft:"draft",halted:"halted",inprogress:"inProgress","in-progress":"inProgress"},la=e=>e?.type==="google_service_account",Xt=e=>e?.bundleId||e?.packageName||e?.meta?.packageName||e?.meta?.bundleId;async function hr(e){let t=ze(),i=ye(),n=da(e);if(!n){process.exitCode=1;return}let r=e.projectId||n.projectId,o=e.profile||e.buildProfile||"production";if(!r){Z(`${f.configFileName} is missing projectId. Pass --project-id in runner mode.`),process.exitCode=1;return}n.projectId=r,se(te.dim(`Submit for project: ${n.name||r} | Profile: ${o}`));let s=e.platform;if(!s){let $=await ki({message:"Select platform to submit:",options:[{value:"ios",label:"iOS (App Store Connect / TestFlight)"},{value:"android",label:"Android (Google Play Console)"}]});if(Ve($)){xi("Operation cancelled");return}s=$}if(s=String(s).toLowerCase(),s!=="ios"&&s!=="android"){Z(`Platform ${s} is not supported. Use 'ios' or 'android'.`),process.exitCode=1;return}let l=s==="ios"&&!e.local&&e.sshHost?Pa(n,o,e):null;if(s==="ios"&&!e.local&&!l){await ca(n,o,e);return}let a=e.submitId,d=!!(e.local&&a),c=a||null,u=async($,U={})=>{c&&await ma(r,c,{status:$,...U})},p=s==="android"?Aa(n,o):void 0,m=s==="ios"?_a(n,o):void 0,I,L,w,B=!1;try{s==="android"&&(I=e.track||n.submit?.[o]?.android?.track||n.submit?.production?.android?.track||"internal",L=$a(n,o,e.releaseStatus),w=Da(n,o,e.rollout),B=Ra(n,o,e.changesNotSentForReview),va(L,w))}catch($){Z($.message),process.exitCode=1;return}if(s==="android"&&!d&&(c=await ua(n,r,s,o,e,{packageName:p,track:I,releaseStatus:L,rollout:w,changesNotSentForReview:B}),!c)){Z("Could not create submission tracking record. Submission was not started."),process.exitCode=1;return}await u("running",{platform:s,profile:o,packageName:p,track:I,releaseStatus:L,rollout:w,startTime:Date.now()});let k=null,j=null;try{j=await Oa(r,s,e,i?.token),k=j?.filePath||null}catch($){await u("failed",{error:`Failed to resolve submission artifact: ${$.message}`,endTime:Date.now()}),Z(`Failed to resolve submission artifact: ${$.message}`),process.exitCode=1;return}if(!k){await u("failed",{error:"No suitable artifact found for submission.",endTime:Date.now()}),process.exitCode=1;return}await u("running",{buildId:j?.buildId,artifactName:j?.artifactName,artifactSource:j?.source}),se(`Using artifact: ${te.green(pe.basename(k))} `),t.start("Fetching submission credentials from Dashboard...");let h;try{let U=(await C.get(`/credentials/${r}`)).data.credentials||[];if(s==="android"&&!p){t.stop("Package name missing"),Z("Could not resolve Android package name. Set android.package in mach.config.json/app.json."),await u("failed",{error:"Could not resolve Android package name.",endTime:Date.now()}),process.exitCode=1;return}let G=U.filter(la),x=s==="ios"?U.filter(H=>H.type==="asc_api_key"):Ia(G,p);if(x.length===0){if(t.stop("Credentials missing"),Z(s==="android"?`No Google Play service credential found for package ${p}.`:`No Service Credentials found for ${s}.`),s==="android"){let H=G.map(Xt).filter(Boolean).join(", ");H&&se(`Found Google Play service credential(s) for: ${H}`),se(`Use '${f.nameLower} credentials:service --platform android --package-name ${p}' or upload it under that package in the Dashboard.`)}else se(`Use '${f.nameLower} credentials:service --platform ${s}' or use the Dashboard to upload them.`);await u("failed",{error:`No submission credentials found for ${s}.`,endTime:Date.now()}),process.exitCode=1;return}if(h=ya(x,e.credentialId),!h&&s==="ios"&&m&&(h=Sa(x,m)),h||x.length===1)h=h||x[0],t.stop(`Using: ${h.name}`),s==="android"&&Xt(h)==="*"&&se(te.yellow(`Using legacy wildcard Google Play credential for ${p}. Upload a package-scoped credential when possible.`));else{if(t.stop("Multiple credentials found"),Ea()){let E=x.map(ne=>`${ne.name||"credential"} (${ne.credentialId||ne.id||"no-id"})`).join(", ");Z(`Multiple ${s==="ios"?"App Store Connect":"Google Play"} credentials found. Use --credential-id in CI. Available: ${E}`),await u("failed",{error:"Multiple submission credentials found; --credential-id is required in CI.",endTime:Date.now()}),process.exitCode=1;return}let H=await ki({message:`Choose a ${s==="ios"?"App Store Connect":"Google Play"} credential:`,options:x.map(E=>({value:E.credentialId,label:E.name,hint:`${E.keyId?`ID: ${E.keyId}`:""} ${E.issuerId?`(Issuer: ${E.issuerId.substring(0,8)}...)`:""}`}))});if(Ve(H)){xi("Submission cancelled"),await u("failed",{error:"Submission cancelled while selecting credential.",endTime:Date.now()}),process.exitCode=1;return}h=x.find(E=>E.credentialId===H),se(`Using selected: ${te.green(h.name)}`)}}catch($){t.stop("Failed to fetch credentials"),Z(`API Error: ${$.message} `),await u("failed",{error:`Failed to fetch credentials: ${$.message}`,endTime:Date.now()}),process.exitCode=1;return}let K=X.mkdtempSync(pe.join(tt.tmpdir(),`${f.nameLower}-submit-`)),_=h.keyId||h.meta?.keyId,S=h.issuerId||h.meta?.issuerId,O=h.type==="asc_api_key"?`AuthKey_${_}.p8`:"service-account.json",D=pe.join(K,O);t.start("Downloading secure key...");try{let $=await C.get(`/credentials/${h.credentialId}/download`,{params:{projectId:r,format:"raw"}});if($.data.status!=="success"||!$.data.downloadUrl)throw new Error("Failed to get secure download URL");let U=await gr.get($.data.downloadUrl,{responseType:"arraybuffer"});X.writeFileSync(D,Buffer.from(U.data)),t.stop("Key downloaded to secure temp storage")}catch($){t.stop("Download failed"),Z(`Failed to download key: ${$.message}`);try{X.rmSync(K,{recursive:!0,force:!0})}catch{}await u("failed",{error:`Failed to download credential key: ${$.message}`,endTime:Date.now()}),process.exitCode=1;return}se(te.blue(`Initiating ${s==="ios"?"TestFlight":"Google Play"} submission...`));let T=!1,R;try{if(s==="ios"){if(!_){let U=await Pt({message:"Enter App Store Connect Key ID (e.g. 2X948D...):",validate:G=>G.length>0?void 0:"Key ID is required"});if(Ve(U)){await u("failed",{error:"Submission cancelled while entering ASC Key ID.",endTime:Date.now()}),process.exitCode=1;return}_=U}if(!S||S==="undefined"){let U=await Pt({message:"Enter App Store Connect Issuer ID (Found on ASC Keys page):",validate:G=>G.length>0?void 0:"Issuer ID is required"});if(Ve(U)){await u("failed",{error:"Submission cancelled while entering ASC Issuer ID.",endTime:Date.now()}),process.exitCode=1;return}S=U}se(`Using ASC Key ID: ${_}`),se(`Using ASC Issuer ID: ${S}`);let $=l?await Na(k,D,S,_,m,l):await Ca(k,D,S,_,m);Ui(`${s==="ios"?"App Store":"Google Play"} submission successful!`),T=!0}else R=await Ua(k,D,I||"internal",p,L||"completed",w,B,o),Ui("Google Play submission successful!"),T=!0}catch($){Z(`Submission failed: ${$.message}`),await u("failed",{error:$.message,endTime:Date.now()}),lt(e,{status:"failed",projectId:r,submitId:c,platform:s,profile:o,buildId:j?.buildId||e.buildId,artifactName:j?.artifactName,error:$.message,dashboardUrl:c?et(c,r):void 0}),process.exitCode=1}finally{T&&(await u("success",{endTime:Date.now(),versionCode:R?.versionCode,track:I,releaseStatus:L}),lt(e,{status:"success",projectId:r,submitId:c,platform:s,profile:o,buildId:j?.buildId||e.buildId,artifactName:j?.artifactName,versionCode:R?.versionCode,track:I,releaseStatus:L,dashboardUrl:c?et(c,r):void 0})),Ga(K),k&&k.includes(`${f.nameLower}-artifact-`)}}function da(e){let t=`./${f.configFileName}`;if(X.existsSync(t))try{return JSON.parse(X.readFileSync(t,"utf-8"))}catch(i){return Z(`Failed to read ${f.configFileName}: ${i.message}`),null}return e.projectId?{projectId:e.projectId}:(Z(`No ${f.configFileName} found. Run \`${f.nameLower} init\` or \`${f.nameLower} link\` first.`),null)}async function ca(e,t,i){let n=i.projectId||e.projectId;if(!n){Z(`${f.configFileName} is missing projectId.`),process.exitCode=1;return}let r=i.submitId||Mi.randomUUID(),o=!!i.latest||!i.buildId,s=pa({...i,latest:o,profile:t,projectId:n,submitId:r}),l={projectId:n,submitId:r,platform:"ios",profile:t,latest:o,buildId:i.buildId,credentialId:i.credentialId,status:"pending",source:"cli",submitArgs:process.argv.slice(3).join(" "),runnerArgs:s,runnerCommand:[f.nameLower,"submit",...s].map(ba).join(" "),appName:e.name,startTime:Date.now()},a=ze();a.start("Queuing iOS submit on macOS runner...");try{let d=await C.post("/submissions",l),c=d.data?.submission||d.data?.submit||{},u=d.data?.dashboardUrl||et(r,n);a.stop("iOS submit queued"),se(`Submission ID: ${te.cyan(r)}`),se(`Dashboard: ${te.blue.underline(u)}`),lt(i,{status:"pending",projectId:n,submitId:r,platform:"ios",profile:t,latest:o,buildId:i.buildId,dashboardUrl:u}),await fa(n,r,i)}catch(d){a.stop("Could not queue iOS submit"),Z(ha(d)),process.exitCode=1}}async function ua(e,t,i,n,r,o={}){let s=r.submitId||Mi.randomUUID(),l=!!r.latest||!r.buildId,a={projectId:t,submitId:s,platform:i,profile:n,latest:l,buildId:r.buildId,credentialId:r.credentialId,status:"running",source:"cli-direct",submitArgs:process.argv.slice(3).join(" "),appName:e.name,startTime:Date.now(),...o};try{let d=await C.post("/submissions",a),c=d.data?.submission||d.data?.submit||{},u=d.data?.dashboardUrl||c.dashboardUrl||et(s,t);return se(`Submission ID: ${te.cyan(s)}`),se(`Dashboard: ${te.blue.underline(u)}`),lt(r,{status:"running",projectId:t,submitId:s,platform:i,profile:n,latest:l,buildId:r.buildId,dashboardUrl:u}),s}catch(d){let c=d.response?.data?.message||d.response?.data?.error||d.message;return se(te.yellow(`Could not create submission tracking record: ${c}`)),null}}function pa(e){let t=["--local","--submit-id",e.submitId,"--project-id",e.projectId,"--platform","ios","--profile",e.profile||"production"];return e.buildId?t.push("--build-id",e.buildId):t.push("--latest"),e.credentialId&&t.push("--credential-id",e.credentialId),e.quiet&&t.push("--quiet"),e.jsonOutput&&t.push("--json-output",e.jsonOutput),t.filter(i=>i!=null&&i!=="")}async function fa(e,t,i){let n=ze(),r=0,o=0;for(i.quiet||n.start("Waiting for iOS submit runner...");;)try{let s=await C.get(`/submissions/${e}/${t}`),l=s.data?.submission||s.data?.submit||s.data,a=String(l?.status||"pending").toLowerCase();r=0;let d=Array.isArray(l?.logs)?l.logs:[];for(let c=o;c<d.length;c++){let u=d[c];u&&console.log(te.dim(String(u)))}if(o=d.length,["success","completed","succeeded"].includes(a)){i.quiet||n.stop("iOS submit completed"),Ui("App Store submission successful!"),lt(i,{status:"success",projectId:e,submitId:t,platform:"ios",profile:l?.profile||i.profile||"production",buildId:l?.buildId||i.buildId,artifactName:l?.artifactName,dashboardUrl:l?.dashboardUrl||et(t,e)});return}if(["failed","error","cancelled","canceled"].includes(a)){i.quiet||n.stop("iOS submit failed");let c=l?.error||l?.message||"Unknown iOS submit failure.";Z(c),lt(i,{status:"failed",projectId:e,submitId:t,platform:"ios",profile:l?.profile||i.profile||"production",buildId:l?.buildId||i.buildId,artifactName:l?.artifactName,error:c,dashboardUrl:l?.dashboardUrl||et(t,e)}),process.exitCode=1;return}i.quiet||n.message(`iOS submit ${a}...`),await Li(oa)}catch(s){if(r++,r>=sa){i.quiet||n.stop("Lost connection to iOS submit status"),Z(`Could not fetch iOS submit status after ${r} attempts: ${s.message}`),process.exitCode=1;return}await Li(Math.min(2e3*r,15e3))}}async function ma(e,t,i){let n;for(let r=1;r<=3;r++)try{await C.patch(`/submissions/${e}/${t}`,i);return}catch(o){if(n=o,r>=3||!ga(o))break;await Li(1e3*r)}mr.warn(te.dim(`Could not report submission status: ${n?.message||n}`))}function ga(e){let t=e.response?.status;return!t||t===408||t===409||t===425||t===429||t>=500}function ha(e){let t=e.response?.status,i=e.response?.data?.message||e.response?.data?.error;return t===404||t===405?["Managed iOS submit is not enabled on this Mach API yet.","Deploy the API/dashboard submission orchestration endpoint, then retry the same command.","Expected API: POST /submissions and GET/PATCH /submissions/:projectId/:submitId."].join(`
 `):i||e.message||String(e)}function et(e,t){if(!e)return je;let i=t?`?projectId=${encodeURIComponent(t)}`:"";return`${je}/submissions/${e}${i}`}function lt(e,t){if(!e.jsonOutput)return;let i=pe.resolve(e.jsonOutput),n={...t,url:t.url||t.dashboardUrl||et(t.submitId,t.projectId),updatedAt:new Date().toISOString()};try{let r=pe.dirname(i);r&&r!=="."&&X.mkdirSync(r,{recursive:!0}),X.writeFileSync(i,JSON.stringify(n,null,2))}catch(r){mr.warn(te.yellow(`Could not write submission metadata JSON: ${r.message}`))}}function ya(e,t){return t&&e.find(i=>i.credentialId===t||i.id===t||i.keyId===t||i.meta?.keyId===t)||null}function Sa(e,t){let i=e.filter(n=>[n.bundleId,n.bundleIdentifier,n.appIdentifier,n.meta?.bundleId,n.meta?.bundleIdentifier,n.meta?.appIdentifier].filter(Boolean).map(String).includes(t));return i.length===1?i[0]:null}function Ea(){return process.env.CI==="true"||process.env.CI==="1"||!process.stdin.isTTY}function Li(e){return new Promise(t=>setTimeout(t,e))}function ba(e){return/^[a-zA-Z0-9_./:=@-]+$/.test(e)?e:`'${e.replace(/'/g,"'\\''")}'`}function Aa(e,t){if(e.submit?.[t]?.android?.package)return e.submit[t].android.package;let i=Yi(e,t);if(i)return i;let n=pe.join(process.cwd(),"app.json");if(X.existsSync(n))try{return JSON.parse(X.readFileSync(n,"utf-8")).expo?.android?.package}catch{}let r=pe.join(process.cwd(),"app.config.json");if(X.existsSync(r))try{let o=JSON.parse(X.readFileSync(r,"utf-8"));return o.expo?.android?.package||o.android?.package}catch{}}function Ia(e,t){let i=e.filter(o=>Xt(o)===t);if(i.length>0)return i;let n=e.filter(o=>{let s=Xt(o);return!s||s==="*"});return e.length>0&&e.length===n.length?n:[]}function _a(e,t){return e.submit?.[t]?.ios?.bundleIdentifier?e.submit[t].ios.bundleIdentifier:e.submit?.[t]?.ios?.bundleId?e.submit[t].ios.bundleId:Ji(e,t)}function Pa(e,t,i){let n=e.submit?.[t]?.ios||{},r=e.submit?.production?.ios||{},o=i.sshHost||n.sshHost||r.sshHost||process.env.MACH_IOS_SUBMIT_SSH_HOST;return o?{sshHost:o,sshUser:i.sshUser||n.sshUser||r.sshUser||process.env.MACH_IOS_SUBMIT_SSH_USER||process.env.USER||"ubuntu",sshKey:i.sshKey||n.sshKey||r.sshKey||process.env.MACH_IOS_SUBMIT_SSH_KEY}:null}function $a(e,t,i){let n=i||e.submit?.[t]?.android?.releaseStatus||e.submit?.production?.android?.releaseStatus||"completed";return wa(n)}function wa(e){let t=aa[String(e).trim().toLowerCase()];if(!t)throw new Error(`Invalid Android release status "${e}". Use completed, draft, halted, or inProgress.`);return t}function Da(e,t,i){let n=i??e.submit?.[t]?.android?.rollout??e.submit?.[t]?.android?.userFraction??e.submit?.[t]?.android?.rolloutFraction??e.submit?.production?.android?.rollout??e.submit?.production?.android?.userFraction??e.submit?.production?.android?.rolloutFraction;if(n==null||n==="")return;let r=Number(n);if(!Number.isFinite(r)||r<=0||r>=1)throw new Error(`Invalid Android rollout fraction "${n}". Use a number greater than 0 and less than 1, for example 0.1.`);return r}function Ra(e,t,i){let n=i??e.submit?.[t]?.android?.changesNotSentForReview??e.submit?.[t]?.android?.changes_not_sent_for_review??e.submit?.production?.android?.changesNotSentForReview??e.submit?.production?.android?.changes_not_sent_for_review??!1;return n===!0||n==="true"||n==="1"}function va(e,t){if(e==="inProgress"&&t===void 0)throw new Error("Google Play staged rollout requires --rollout <fraction> when --release-status inProgress is used.");if(e!=="inProgress"&&e!=="halted"&&t!==void 0)throw new Error("Android rollout fraction can only be used with --release-status inProgress or halted.")}async function Oa(e,t,i,n){let r=i.buildId?"id":i.latest?"latest":null;if(!r){let s=await ki({message:"Select artifact source:",options:[{value:"latest",label:`Latest Production Build (${f.name})`},{value:"id",label:`Input Build ID (${f.name})`},{value:"url",label:"Remote URL"},{value:"local",label:"Local File Path"}]});if(Ve(s))return xi("Operation cancelled"),null;r=s}if(r==="local"){let s=await Pt({message:"Enter path to artifact (.ipa/.aab):",validate:l=>{if(!X.existsSync(l))return"File not found";if(t==="ios"&&!l.endsWith(".ipa"))return"Must be an .ipa file";if(t==="android"&&!l.endsWith(".aab"))return"Must be an .aab file"}});return Ve(s)?null:{filePath:s,source:"local"}}let o=ze();if(r==="latest"){let s=i.profile||i.buildProfile;o.start(`Fetching latest${s?` ${s}`:""} build...`);try{let l=await C.get(`/builds/${e}`,{params:{limit:50}});if(l.data.status!=="success")throw new Error(l.data.message);let a=l.data.builds||[],d=s?.toLowerCase(),c=h=>h.platform?.toLowerCase()===t.toLowerCase()&&h.status?.toLowerCase()==="success",u=h=>d?[h.buildProfile,h.profile,h.profileName,h.buildType].filter(Boolean).some(K=>String(K).toLowerCase()===d):!0,p=a.filter(h=>c(h)&&u(h)),m=p.find(h=>h.buildType?.toLowerCase()==="store"||h.distribution?.toLowerCase()==="store")||p[0],I=a.some(h=>h.platform?.toLowerCase()===t.toLowerCase()&&h.status?.toLowerCase()==="success");if(!m)return o.stop("No suitable build found"),Z(s&&I?`No successful ${t} builds found for profile "${s}".`:"No successful builds found for this platform."),null;o.stop(`Found build: ${m.buildId}`);let L=m.artifacts||[];if(L.length===0||L.every(h=>!(h.url||h.downloadUrl)))try{let h=await C.get(`/builds/${e}/${m.buildId}/artifacts`);h.data.status==="success"&&h.data.artifacts?.length>0?(L=h.data.artifacts.map(K=>({...K,url:K.url||K.downloadUrl})),console.log(te.cyan(`  [RECOVERY] Fetched ${L.length} artifact(s) with download URLs.`))):console.log(te.yellow("  [RECOVERY] /artifacts endpoint returned 0 artifacts."))}catch(h){console.log(te.red(`  [RECOVERY] /artifacts fetch failed: ${h.message}`))}let B=t==="ios",k=L.find(h=>{let K=(h.type||"").toLowerCase(),_=(h.name||"").toLowerCase();if(console.log(te.dim(`    - Checking: ${h.name} (Type: ${h.type}, HasLink: ${!!(h.url||h.downloadUrl)})`)),K)return K===(B?"ipa":"aab");let S=B?".ipa":".aab",O=(h.url||h.downloadUrl||"").toLowerCase();return _.endsWith(S)||O.includes(S)});if(!k||!(k.url||k.downloadUrl))return Z("Build found but artifact URL is missing."),null;let j=k.url||k.downloadUrl;return{filePath:await Ci(j,B?"ios":"android"),buildId:m.buildId,artifactName:k.name,source:"latest"}}catch(l){return o.stop("Fetch failed"),Z(`API Error: ${l.message}`),null}}if(r==="id"){let s=i.buildId||await Pt({message:"Enter Build ID:",validate:l=>l.length<5?"Invalid ID":void 0});if(Ve(s))return null;o.start("Fetching build...");try{let l=await C.get(`/build/${s}`);if(l.data.status!=="success")throw new Error(l.data.message);let a=l.data.build;if(!a)throw new Error("Build not found");let d=t==="ios",c=a.artifacts?.find(u=>{if(u.type)return u.type===(d?"ipa":"aab");let p=d?".ipa":".aab";return u.name&&u.name.endsWith(p)||u.url&&u.url.includes(p)});return!c||!c.url?(o.stop("Missing artifact"),Z("Artifact URL not found on build record."),null):(o.stop(`Found build: ${a.buildId}`),{filePath:await Ci(c.url,d?"ios":"android"),buildId:a.buildId||String(s),artifactName:c.name,source:"id"})}catch(l){return o.stop("Fetch failed"),Z(l.message),null}}if(r==="url"){let s=await Pt({message:"Enter Artifact URL:",validate:l=>l.startsWith("http")?void 0:"Must be a valid URL"});return Ve(s)?null:{filePath:await Ci(s,t),source:"url"}}return null}async function Ci(e,t,i=3){let n=ze();n.start("Downloading artifact...");let r=X.mkdtempSync(pe.join(tt.tmpdir(),`${f.nameLower}-artifact-`)),o=`app.${t==="ios"?"ipa":"aab"}`,s=pe.join(r,o);for(let l=1;l<=i;l++)try{l>1&&(n.message(`Downloading artifact (Retry ${l}/${i})...`),await new Promise(c=>setTimeout(c,2e3*l)));let a=X.createWriteStream(s),d=await gr({url:e,method:"GET",responseType:"stream",timeout:6e4});return await new Promise((c,u)=>{d.data.pipe(a);let p=!1;d.data.on("error",m=>{p||(p=!0,a.close(),u(m))}),a.on("finish",()=>{p||c()}),a.on("error",m=>{p||(p=!0,u(m))})}),n.stop("Download complete"),s}catch(a){if(l===i)throw n.stop("Download failed"),a}throw new Error("Download failed after retries")}async function Ca(e,t,i,n,r){let o=ze();if(r&&se(`Bundle ID: ${te.green(r)}`),!i||!n)throw Z(`Missing credentials: issuerId=${i}, keyId=${n}. Check your Dashboard.`),new Error("Missing ASC API Key Metadata (IssuerID or KeyID)");let s=yr(t,i,n),l=Ba();return o.start("Uploading to TestFlight (pilot)..."),new Promise((a,d)=>{let c=ra(l.command,["pilot","upload","--ipa",e,"--api_key_path",s,"--skip_submission","true","--skip_waiting_for_build_processing","true"],{stdio:"inherit",env:l.env});c.on("close",u=>{if(u!==0){o.stop("Pilot failed");try{X.unlinkSync(s)}catch{}d(new Error(`fastlane pilot failed with exit code ${u??"unknown"}.`))}else{o.stop("IPA uploaded to TestFlight");try{X.unlinkSync(s)}catch{}a({})}}),c.on("error",u=>{try{X.unlinkSync(s)}catch{}o.stop("Pilot execution error"),d(Ha(u))})})}async function Na(e,t,i,n,r,o){let s=ze();if(r&&se(`Bundle ID: ${te.green(r)}`),!i||!n)throw Z(`Missing credentials: issuerId=${i}, keyId=${n}. Check your Dashboard.`),new Error("Missing ASC API Key Metadata (IssuerID or KeyID)");let l=yr(t,i,n),a=`${o.sshUser}@${o.sshHost}`,d=Ta(o),c=ka(o),u="",p="";try{if(s.start(`Preparing remote iOS submit runner (${a})...`),u=xa("ssh",[...d,"mktemp -d /tmp/mach-submit.XXXXXX"]).trim(),!u)throw new Error("Remote runner did not return a temp directory.");s.stop(`Remote runner ready: ${a}`),s.start("Uploading IPA and App Store Connect key to remote runner..."),Ni("scp",[...c,e,`${a}:${u}/app.ipa`],"IPA upload to remote runner"),Ni("scp",[...c,l,`${a}:${u}/api_key.json`],"ASC key upload to remote runner"),p=pe.join(tt.tmpdir(),`${f.nameLower}-ios-submit-${Date.now()}.sh`),X.writeFileSync(p,La(u)),Ni("scp",[...c,p,`${a}:${u}/submit.sh`],"submit script upload to remote runner"),s.stop("Remote submit inputs uploaded"),s.start("Uploading to TestFlight on remote runner...");let m=`chmod +x ${$t(`${u}/submit.sh`)} && bash ${$t(`${u}/submit.sh`)}`,I=Qe("ssh",[...d,m],{stdio:"inherit"});if(I.error)throw Bi("ssh",I.error);if(I.status!==0)throw new Error(`Remote iOS submit failed with exit code ${I.status}.`);return s.stop("IPA uploaded to TestFlight"),{apiKeyJsonPath:null}}catch(m){throw s.stop("Remote iOS submit failed"),m}finally{try{X.unlinkSync(l)}catch{}if(p)try{X.unlinkSync(p)}catch{}if(u)try{Qe("ssh",[...d,`rm -rf ${$t(u)}`],{stdio:"ignore"})}catch{}}}function yr(e,t,i){let n=X.readFileSync(e,"utf8"),r;try{r=Mi.createPrivateKey(n).export({type:"pkcs8",format:"pem"})}catch{se("Key normalization failed, falling back to manual re-wrapping..."),r=`-----BEGIN PRIVATE KEY-----
 ${(n.replace(/-----BEGIN[^-]*-----/g,"").replace(/-----END[^-]*-----/g,"").replace(/\s+/g,"").match(/.{1,64}/g)||[]).join(`
 `)}
@@ -1165,5 +1165,5 @@ Environment Variables:`)),Object.entries(n.env).forEach(([r,o])=>{Ee.info(`  ${r
 Running expo prebuild for deeper analysis...`));try{Nl("npx expo prebuild --no-install",{cwd:e,stdio:"pipe"})}catch{return Ct.warn(be.yellow("Prebuild failed \u2014 skipping manifest/plist checks.")),o}}else if(!a)return t.json||Ct.info(be.dim(`
 Skipping manifest/plist checks \u2014 no android/ios dirs. Use --prebuild to generate them.`)),o;for(let d of r){let c=Vr();c.start(be.dim(`Running ${d.label}...`));try{let u=Date.now(),p=await d.fn(e,t);p.durationMs=Date.now()-u,o.push(p);let m=p.findings.length;c.stop(m>0?be.yellow(`${d.label} \u2014 ${m} finding(s)`):be.green(`${d.label} \u2014 clean`))}catch(u){c.stop(be.red(`${d.label} \u2014 error`)),o.push({category:d.category,label:d.label,findings:[],durationMs:0,error:u.message})}}}return o}import de from"chalk";import{log as ae}from"@clack/prompts";var ct={critical:de.bgRed.white.bold,high:de.red.bold,medium:de.yellow.bold,low:de.blue,info:de.dim},si={critical:0,high:1,medium:2,low:3,info:4};function kl(e,t){if(!t)return!0;let i=si[t];return i===void 0?!0:si[e]<=i}function Jr(e,t){let i=0,n={critical:0,high:0,medium:0,low:0,info:0};for(let s of e){let l=s.findings.filter(d=>kl(d.severity,t));if(l.length===0&&!s.error)continue;if(ae.info(""),ae.info(de.bold(`  ${s.label}`)+de.dim(`  ${l.length} finding(s)`)),ae.info(de.dim("  "+"\u2500".repeat(60))),s.error){ae.error(de.red(`  Error: ${s.error}`));continue}let a=[...l].sort((d,c)=>si[d.severity]-si[c.severity]);for(let d of a){let c=ct[d.severity](` ${d.severity.toUpperCase()} `);ae.info(`  ${c}  ${de.bold(d.id)}  ${d.title}`),ae.info(de.dim(`          ${d.description}`)),d.file&&ae.info(de.dim(`          File: ${d.file}${d.line?`:${d.line}`:""}`)),ae.info(de.cyan(`          Fix: ${d.recommendation}`)),ae.info(""),n[d.severity]++,i++}}ae.info(""),ae.info(de.bold("  Summary")),ae.info(de.dim("  "+"\u2500".repeat(60))),ae.info(`  Total: ${de.bold(String(i))} finding(s)`),ae.info(`  ${ct.critical(` ${n.critical} Critical `)}  ${ct.high(` ${n.high} High `)}  ${ct.medium(` ${n.medium} Medium `)}  ${ct.low(` ${n.low} Low `)}  ${ct.info(` ${n.info} Info `)}`);let r=n.critical>0,o=n.high>0;r||o?(ae.info(""),ae.error(de.red.bold(`  FAIL \u2014 ${n.critical} critical, ${n.high} high issue(s) found`))):i>0?(ae.info(""),ae.warn(de.yellow("  PASS (with warnings) \u2014 no critical or high issues"))):(ae.info(""),ae.success(de.green.bold("  PASS \u2014 no issues found")))}function Xr(e,t){let i=e.flatMap(r=>r.findings),n={};for(let r of Object.values(_e))n[r]=i.filter(o=>o.severity===r).length;return{version:"1.0.0",timestamp:new Date().toISOString(),project:t.name||"unknown",projectVersion:t.version||"0.0.0",summary:{total:i.length,...n},passed:n.critical===0&&n.high===0,checks:e.map(r=>({category:r.category,label:r.label,findingCount:r.findings.length,durationMs:r.durationMs,error:r.error||null})),findings:i}}import{log as le,spinner as xl}from"@clack/prompts";import re from"chalk";import He from"fs";import Ll from"os";import ut from"path";import{execSync as Ul}from"child_process";var qr=16384,Ml=1,Bl=Buffer.from([127,69,76,70]);async function Zr(e){le.info(re.bold.underline("16KB Page Alignment Check")),console.log("");let t=ut.resolve(e);if(!He.existsSync(t))return le.error(re.red(`APK file not found: ${t}`)),!1;if(!t.endsWith(".apk"))return le.error(re.red("The provided file is not an APK file.")),!1;let i=xl();i.start("Extracting and analyzing native libraries...");let n=He.mkdtempSync(ut.join(Ll.tmpdir(),"mach-16kb-"));try{try{Ul(`unzip -o -q "${t}" "lib/arm64-v8a/*.so" "lib/x86_64/*.so" -d "${n}" 2>/dev/null`,{encoding:"utf-8",maxBuffer:50*1024*1024})}catch{}let r=Qr(ut.join(n,"lib"));if(r.length===0)return i.stop("Analysis complete."),le.info(re.yellow("No arm64-v8a or x86_64 native libraries found in the APK.")),le.info(re.dim("16KB alignment check only applies to arm64-v8a and x86_64 architectures.")),!0;let o=[];for(let a of r){let d=ut.relative(n,a),c=Hl(d),u=ut.basename(a),p=Fl(a);p!==null&&o.push({name:u,filePath:d,arch:c,align:p,compatible:p>=qr})}if(i.stop("Analysis complete."),o.length===0)return le.info(re.yellow("No valid ELF shared libraries found.")),!0;let s=o.filter(a=>!a.compatible),l=o.filter(a=>a.compatible);if(le.info(re.dim(`Checked ${o.length} native librar${o.length===1?"y":"ies"}
 `)),s.length>0){le.info(re.red.bold(`Incompatible libraries:
-`));for(let a of s)le.error(re.red(`${re.bold(a.name)} ${re.dim(`(${a.arch})`)}`)),le.info(re.dim(`  PT_LOAD alignment: 2**${Math.log2(a.align)} (${a.align} bytes, needs 2**14 = ${qr})`))}return l.length>0&&(console.log(""),le.success(re.green(`${l.length} librar${l.length===1?"y":"ies"} correctly aligned (2**14 or higher).`))),console.log(""),s.length===0?(le.success(re.green.bold("ELF Verification Successful. APK is 16KB compatible.")),!0):(le.error(re.red.bold(`Found ${s.length} unaligned lib${s.length===1?"":"s"} (arm64-v8a/x86_64 libs need to be aligned).`)),console.log(""),le.info(re.yellow("To fix this:")),le.info(re.dim("  1. Rebuild with NDK r28+ which defaults to 16KB page alignment")),le.info(re.dim("  2. Or set -DANDROID_SUPPORT_FLEXIBLE_PAGE_SIZES=ON in CMake")),le.info(re.dim("  3. Update third-party libraries that ship prebuilt .so files")),le.info(re.dim("  4. After rebuilding: zipalign -p -f -v 16 input.apk output.apk")),console.log(""),le.info(re.dim("Reference: https://developer.android.com/guide/practices/page-sizes")),!1)}catch(r){return i.stop("Analysis failed."),le.error(re.red(`Failed to analyze APK: ${r.message}`)),!1}finally{try{He.rmSync(n,{recursive:!0,force:!0})}catch{}}}function Fl(e){let t=He.openSync(e,"r");try{let i=Buffer.alloc(64);if(He.readSync(t,i,0,64,0),!i.subarray(0,4).equals(Bl))return null;let n=i[4]===2,r=i[5]===1,o=(p,m)=>r?p.readUInt16LE(m):p.readUInt16BE(m),s=(p,m)=>r?p.readUInt32LE(m):p.readUInt32BE(m),l=(p,m)=>Number(r?p.readBigUInt64LE(m):p.readBigUInt64BE(m)),a,d,c;n?(a=l(i,32),d=o(i,54),c=o(i,56)):(a=s(i,28),d=o(i,42),c=o(i,44));let u=null;for(let p=0;p<c;p++){let m=Buffer.alloc(d);if(He.readSync(t,m,0,d,a+p*d),s(m,0)!==Ml)continue;let L;n?L=l(m,48):L=s(m,28),L>0&&(u===null||L<u)&&(u=L)}return u??0}catch{return null}finally{He.closeSync(t)}}function Qr(e){let t=[];if(!He.existsSync(e))return t;let i=He.readdirSync(e,{withFileTypes:!0});for(let n of i){let r=ut.join(e,n.name);n.isDirectory()?t.push(...Qr(r)):n.name.endsWith(".so")&&t.push(r)}return t}function Hl(e){return e.includes("arm64-v8a")?"arm64-v8a":e.includes("x86_64")?"x86_64":"unknown"}var io=async e=>{if(ye()||(Pe.error(Ce.red(`You are not logged in. Run \`${f.nameLower} login\` first.`)),process.exit(1)),e.apk){await Kl(e);return}let i=process.cwd(),n=ai.join(i,"package.json");Nt.existsSync(n)||(Pe.error(Ce.red("No package.json found. Run this command from a project root.")),process.exit(1));let r=JSON.parse(Nt.readFileSync(n,"utf-8")),o=!!(r.dependencies?.expo||r.devDependencies?.expo);e.json||(Pe.info(Ce.dim(`Project: ${r.name||"unknown"} v${r.version||"0.0.0"}`)),Pe.info(Ce.dim(`Type: ${o?"Expo":"Bare React Native"}`)),Pe.info(""));let s={json:e.json,fix:e.fix,category:e.category,severity:e.severity,prebuild:e.prebuild},l=await Yr(i,s);e.json?console.log(JSON.stringify(Xr(l,r),null,2)):Jr(l,e.severity);let a=l.some(c=>c.findings.some(u=>u.severity==="critical")),d=l.some(c=>c.findings.some(u=>u.severity==="high"));(a||d)&&process.exit(1)},eo=["16kb"];async function Kl(e){let t=e.category?.toLowerCase();t&&!eo.includes(t)&&(Pe.error(Ce.red(`Unknown APK check category: "${t}"`)),Pe.info(Ce.dim(`Available APK checks: ${eo.join(", ")}`)),process.exit(1));let i=await Vl(e.apk);i||process.exit(1);let n=!t,r=!1;(n||t==="16kb")&&(await Zr(i)||(r=!0)),r&&process.exit(1)}async function Vl(e){if(e.startsWith("build:")){let i=e.slice(6);return await zl(i)}if(e.startsWith("http://")||e.startsWith("https://"))return await no(e);let t=ai.resolve(e);return Nt.existsSync(t)?t:(Pe.error(Ce.red(`APK file not found: ${t}`)),null)}async function zl(e){let t=to();t.start(`Fetching APK from build ${e}...`);try{let i=await C.get(`/build/${e}`);if(i.data.status!=="success")throw new Error(i.data.message);let n=i.data.build;if(!n)throw new Error("Build not found");let r=n.artifacts?.find(o=>o.type?o.type==="apk":o.name?.endsWith(".apk")||o.url?.includes(".apk"));return!r||!r.url?(t.stop("No APK artifact found"),Pe.error(Ce.red("This build does not have an APK artifact.")),Pe.info(Ce.dim("Make sure the build produced an APK (not just an AAB).")),null):(t.stop(`Found build: ${n.buildId||e}`),await no(r.url))}catch(i){return t.stop("Failed to fetch build"),Pe.error(Ce.red(i.message)),null}}async function no(e){let t=to();t.start("Downloading APK...");try{let i=Nt.mkdtempSync(ai.join(jl.tmpdir(),`${f.nameLower}-audit-`)),n=ai.join(i,"app.apk"),r=await Gl.get(e,{responseType:"arraybuffer"});Nt.writeFileSync(n,r.data);let o=(r.data.length/(1024*1024)).toFixed(1);return t.stop(`Downloaded APK (${o} MB)`),n}catch(i){return t.stop("Download failed"),Pe.error(Ce.red(`Failed to download APK: ${i.message}`)),null}}var Jl=console.log;console.log=()=>{};Yl();console.log=Jl;me(fe.bgCyan.black(f.cliTag("Production Build Orchestrator")));var ql=Xl(import.meta.url),Zl=ql("../package.json"),q=new Wl;q.name(f.nameLower).description(`${f.name} CLI: Powerful Cloud Infrastructure Tools`).version(Zl.version).option("-y, --yes","Automatically answer yes to all prompts",!1).option("--quiet","Suppress non-essential output",!1);q.command("agent").description("Start local device discovery agent for the Install Hub (port 7070)").action(async()=>{await tr()});q.command("host").description("Setup AWS S3 static hosting and CloudFront").action(async()=>{me(fe.bgCyan.black(f.cliTag("Hosting"))),await Zi()});q.command("sitemap").description("Generate sitemap.xml from Expo Router app structure").option("-o, --output <path>","Output path for sitemap.xml","./public/sitemap.xml").action(async e=>{me(fe.bgCyan.black(f.cliTag("Sitemap Generator"))),await nn(e)});q.command("build").description("Run a build on a cloud provider (AWS Spot Instances)").argument("[platform]","Target platform (android, ios)").option("--platform <os>","Target platform alias (android, ios) [Optional]").option("--repo <url>","Git Repository URL").option("--branch <name>","Git Branch").option("--ami <id>","AMI ID").option("--bucket <name>","S3 Bucket for artifacts").option("--region <region>","AWS Region").option("--aws-profile <name>","AWS Credentials Profile").option("-p, --build-profile <name>","Build Profile (e.g. production, staging)","production").option("--profile <name>","Build Profile (alias for --build-profile)").option("--dry-run","Generate User Data script without launching").option("--keep-instance","Do not terminate the instance after build").option("--subnet <id>","VPC Subnet ID to launch the instance in").option("--security-group <id>","VPC Security Group ID to use").option("--ssh-host <host>","Remote host for iOS build (SSH)").option("--ssh-user <user>","SSH username for remote host").option("--ssh-key <path>","Path to private SSH key for remote host").option("--ios-scheme <scheme>","iOS Scheme to build").option("--ios-team-id <id>","Apple Development Team ID").option("--ios-configuration <config>","Xcode configuration (Release/Debug)").option("--ios-export-method <method>","Export method (ad-hoc, app-store, development, enterprise)").option("--ios-api-key-id <id>","App Store Connect API Key ID").option("--ios-api-key-issuer <id>","App Store Connect API Key Issuer ID").option("--ios-api-key-path <path>","Path to App Store Connect API Key (.p8) file").option("--simulator","Build for iOS Simulator (no signing required)").addOption(new pt("--build-id <id>","Internal build ID").hideHelp()).addOption(new pt("--project-id <id>","Internal project ID").hideHelp()).addOption(new pt("--fail-only","Internal: mark an existing build failed").hideHelp()).addOption(new pt("--error <message>","Internal failure message").hideHelp()).option("--local","Run build on local machine").option("--auto-version","Automatically fetch and increment Android versionCode or iOS buildNumber from the store").option("--verbose","Enable verbose logging").option("--json-output <path>","Write build metadata JSON to a file for CI/CD").option("--maestro","Queue a managed Maestro test run after a successful build").option("--maestro-flows <path>","Maestro flow file or directory (default: .maestro)").option("--maestro-device <device>","Managed Maestro device profile").option("--maestro-retries <n>","Retries for the Maestro run","1").option("--maestro-record","Enable screen recording where supported").option("-y, --yes","Automatically answer yes to all prompts",!1).option("--quiet","Suppress non-essential output",!1).action(async(e,t)=>{let i=q.opts();t.yes=t.yes||i.yes,t.quiet=t.quiet||i.quiet,t.platform=e||t.platform,t.buildProfile=t.profile||t.buildProfile,t.quiet||me(fe.bgCyan.black(f.cliTag("Cloud Build"))),await Vt(t)});q.command("maestro").description("Run managed Maestro tests for an existing Mach build or artifact").option("--platform <os>","Target platform (android/ios)").option("-p, --profile <name>","Build profile to resolve when using --latest","production").option("--latest","Use the latest successful build for the platform/profile").option("--build-id <id>","Use a specific Mach build ID").option("--build-url <url>","Use a Mach build URL").option("--artifact-url <url>","Use a direct APK or iOS simulator app artifact URL").option("--maestro-flows <path>","Maestro flow file or directory (default: .maestro)").option("--maestro-device <device>","Managed Maestro device profile").option("--maestro-retries <n>","Retries for the Maestro run","1").option("--maestro-record","Enable screen recording where supported").option("--json-output <path>","Write test run metadata JSON to a file for CI/CD").action(async e=>{me(fe.bgCyan.black(f.cliTag("Maestro Testing"))),await xn(e)});q.command("update").description("Deploy an Over-The-Air (OTA) update to your live channel").option("--branch <name>","Channel or Branch to deploy to (e.g., production)","production").action(async e=>{me(fe.bgCyan.black(f.cliTag("OTA Update"))),await Er(e)});q.command("submit").description("Automated Store Submission (App Store / Google Play)").option("--platform <os>","Target platform (ios/android)").option("-p, --profile <name>","Build/submission profile to submit from (e.g. production, preprod)").option("--track <track>","Google Play Track (internal, alpha, beta, production)").option("--release-status <status>","Google Play release status (completed, draft, halted, inProgress)").option("--rollout <fraction>","Google Play staged rollout fraction for inProgress releases (example: 0.1)").option("--changes-not-sent-for-review","Commit Google Play changes without automatically sending them for review").option("--ssh-host <host>","Remote macOS host for iOS submission").option("--ssh-user <user>","SSH username for remote iOS submission").option("--ssh-key <path>","Path to private SSH key for remote iOS submission").option("--credential-id <id>","Service credential ID to use when multiple submission credentials exist").option("--local","Run submission on this machine (internal runner mode for iOS)").addOption(new pt("--submit-id <id>","Internal submission ID").hideHelp()).addOption(new pt("--project-id <id>","Internal project ID").hideHelp()).option("--json-output <path>","Write submission metadata JSON to a file for CI/CD").option("--latest","Use the latest successful build for submission").option("--build-id <id>","Use a specific build ID for submission").action(async e=>{let t=q.opts();e.quiet=e.quiet||t.quiet,e.yes=e.yes||t.yes,me(fe.bgCyan.black(f.cliTag("Store Submission"))),await hr(e)});q.command("login").description(`Login to ${f.name} Dashboard`).action(async()=>{me(fe.bgCyan.black(f.cliTag("Login"))),await or()});q.command("link").description(`Link local directory to a ${f.name} Project`).action(async()=>{me(fe.bgCyan.black(f.cliTag("Link Project"))),await ar()});q.command("me").description("Display currently logged in user details").action(async()=>{await Ar()});q.command("init").description(`Create a new ${f.name} Project`).action(async()=>{me(fe.bgCyan.black(f.cliTag("Init Project"))),await lr()});q.command("env").description("Manage Environment Variables").argument("<action>","Action to perform: set or list").argument("[args...]","Key=Value pairs for set action").action(async(e,t)=>{me(fe.bgCyan.black(f.cliTag("Env Manager"))),await pr(e,t)});q.command("start").description("Start the development server (Metro)").option("-p, --build-profile <name>","Build profile (e.g. development, staging)","development").option("--tunnel","Use ngrok tunnel").option("--lan","Use LAN IP").option("--localhost","Use localhost").option("-c, --clear","Clear Metro cache").option("--port <number>","Port to listen on").option("--ios","Start on iOS").option("--android","Start on Android").option("--web","Start on Web").action(async e=>{me(fe.bgCyan.black(f.cliTag("Dev Server"))),await _r(e)});q.command("config").description("Show resolved configuration for a profile").option("-p, --profile <name>","Build profile to resolve","development").option("--json","Output as JSON").action(async e=>{await Pr(e)});q.command("credentials").description("Unified, interactive credential management (iOS/Android)").option("-p, --profile <name>","Build profile (production, staging, development)").option("--force","Force recreate certificates (nuke existing on Apple Portal)",!1).action(async e=>{let{credentialsMainCommand:t}=await import("./credentials-Y4SOYAM2.js");await t(e)});q.command("credentials:setup").description("Automated credential provisioning (iOS/Android) [Legacy]").requiredOption("--platform <os>","Platform: ios or android").option("--profile <name>","Build profile (production, staging, development)").option("--bundle-id <id>","Bundle ID / Package Name (optional, auto-detected)").option("--team-id <id>","Apple Team ID (iOS only)").option("--key-alias <alias>","Android keystore alias (optional, auto-generated)").option("--aws-profile <name>","AWS Credentials Profile (for S3 storage)").option("--force","Force recreate certificates (nuke existing on Apple Portal)",!1).action(async e=>{me(fe.bgCyan.black(f.cliTag("Credentials Setup"))),await mt(e),ro(fe.green("Done!"))});q.command("credentials:service").description("Upload Service Credentials (ASC API Key / Google Service JSON) [Legacy]").requiredOption("--platform <os>","Platform: ios or android").option("--file <path>","Path to credential file (.p8 or .json)").option("--issuer-id <id>","ASC API Key Issuer ID (iOS only)").option("--key-id <id>","ASC API Key ID (iOS only)").option("--bundle-id <id>","Bundle identifier / Android package name to attach this service credential to").option("--package-name <name>","Android package name to attach this service credential to").option("-p, --profile <name>","Build profile to resolve package/bundle identifier from config").action(async e=>{me(fe.bgCyan.black(f.cliTag("Service Credentials"))),await Xi(e),ro(fe.green("Done!"))});var Ki=q.command("device").description("Manage registered iOS test devices");Ki.command("register").description("Register a connected iOS device or enter UDID manually").option("--udid <udid>","Device UDID (skip auto-detection)").option("--name <name>","Device name").action(async e=>{await qt("register",e)});Ki.command("list").description("List all registered devices").action(async()=>{await qt("list",{})});Ki.command("remove").description("Remove a registered device").option("--udid <udid>","Device UDID to remove").action(async e=>{await qt("remove",e)});q.command("audit").description("Run automated security audit on the project or APK").option("--apk <path>","Path to APK file (runs APK diagnostics like 16KB alignment)").option("--json","Output results as JSON (for CI/CD)").option("--fix","Auto-apply fixes where possible").option("--category <name>","Run only a specific check category (e.g. 16kb, permissions, secrets)").option("--severity <level>","Minimum severity to display (critical, high, medium, low, info)").option("--prebuild","Run expo prebuild for deeper manifest/plist analysis").action(async e=>{me(fe.bgCyan.black(f.cliTag(e.apk?"APK Audit":"Security Audit"))),await io(e)});var Ql=new Set(["login"]);q.hook("preAction",(e,t)=>{let i=t.name();Ql.has(i)||Wi()});q.on("command:*",()=>{console.error(`Invalid command: %s
+`));for(let a of s)le.error(re.red(`${re.bold(a.name)} ${re.dim(`(${a.arch})`)}`)),le.info(re.dim(`  PT_LOAD alignment: 2**${Math.log2(a.align)} (${a.align} bytes, needs 2**14 = ${qr})`))}return l.length>0&&(console.log(""),le.success(re.green(`${l.length} librar${l.length===1?"y":"ies"} correctly aligned (2**14 or higher).`))),console.log(""),s.length===0?(le.success(re.green.bold("ELF Verification Successful. APK is 16KB compatible.")),!0):(le.error(re.red.bold(`Found ${s.length} unaligned lib${s.length===1?"":"s"} (arm64-v8a/x86_64 libs need to be aligned).`)),console.log(""),le.info(re.yellow("To fix this:")),le.info(re.dim("  1. Rebuild with NDK r28+ which defaults to 16KB page alignment")),le.info(re.dim("  2. Or set -DANDROID_SUPPORT_FLEXIBLE_PAGE_SIZES=ON in CMake")),le.info(re.dim("  3. Update third-party libraries that ship prebuilt .so files")),le.info(re.dim("  4. After rebuilding: zipalign -p -f -v 16 input.apk output.apk")),console.log(""),le.info(re.dim("Reference: https://developer.android.com/guide/practices/page-sizes")),!1)}catch(r){return i.stop("Analysis failed."),le.error(re.red(`Failed to analyze APK: ${r.message}`)),!1}finally{try{He.rmSync(n,{recursive:!0,force:!0})}catch{}}}function Fl(e){let t=He.openSync(e,"r");try{let i=Buffer.alloc(64);if(He.readSync(t,i,0,64,0),!i.subarray(0,4).equals(Bl))return null;let n=i[4]===2,r=i[5]===1,o=(p,m)=>r?p.readUInt16LE(m):p.readUInt16BE(m),s=(p,m)=>r?p.readUInt32LE(m):p.readUInt32BE(m),l=(p,m)=>Number(r?p.readBigUInt64LE(m):p.readBigUInt64BE(m)),a,d,c;n?(a=l(i,32),d=o(i,54),c=o(i,56)):(a=s(i,28),d=o(i,42),c=o(i,44));let u=null;for(let p=0;p<c;p++){let m=Buffer.alloc(d);if(He.readSync(t,m,0,d,a+p*d),s(m,0)!==Ml)continue;let L;n?L=l(m,48):L=s(m,28),L>0&&(u===null||L<u)&&(u=L)}return u??0}catch{return null}finally{He.closeSync(t)}}function Qr(e){let t=[];if(!He.existsSync(e))return t;let i=He.readdirSync(e,{withFileTypes:!0});for(let n of i){let r=ut.join(e,n.name);n.isDirectory()?t.push(...Qr(r)):n.name.endsWith(".so")&&t.push(r)}return t}function Hl(e){return e.includes("arm64-v8a")?"arm64-v8a":e.includes("x86_64")?"x86_64":"unknown"}var io=async e=>{if(ye()||(Pe.error(Ce.red(`You are not logged in. Run \`${f.nameLower} login\` first.`)),process.exit(1)),e.apk){await Kl(e);return}let i=process.cwd(),n=ai.join(i,"package.json");Nt.existsSync(n)||(Pe.error(Ce.red("No package.json found. Run this command from a project root.")),process.exit(1));let r=JSON.parse(Nt.readFileSync(n,"utf-8")),o=!!(r.dependencies?.expo||r.devDependencies?.expo);e.json||(Pe.info(Ce.dim(`Project: ${r.name||"unknown"} v${r.version||"0.0.0"}`)),Pe.info(Ce.dim(`Type: ${o?"Expo":"Bare React Native"}`)),Pe.info(""));let s={json:e.json,fix:e.fix,category:e.category,severity:e.severity,prebuild:e.prebuild},l=await Yr(i,s);e.json?console.log(JSON.stringify(Xr(l,r),null,2)):Jr(l,e.severity);let a=l.some(c=>c.findings.some(u=>u.severity==="critical")),d=l.some(c=>c.findings.some(u=>u.severity==="high"));(a||d)&&process.exit(1)},eo=["16kb"];async function Kl(e){let t=e.category?.toLowerCase();t&&!eo.includes(t)&&(Pe.error(Ce.red(`Unknown APK check category: "${t}"`)),Pe.info(Ce.dim(`Available APK checks: ${eo.join(", ")}`)),process.exit(1));let i=await Vl(e.apk);i||process.exit(1);let n=!t,r=!1;(n||t==="16kb")&&(await Zr(i)||(r=!0)),r&&process.exit(1)}async function Vl(e){if(e.startsWith("build:")){let i=e.slice(6);return await zl(i)}if(e.startsWith("http://")||e.startsWith("https://"))return await no(e);let t=ai.resolve(e);return Nt.existsSync(t)?t:(Pe.error(Ce.red(`APK file not found: ${t}`)),null)}async function zl(e){let t=to();t.start(`Fetching APK from build ${e}...`);try{let i=await C.get(`/build/${e}`);if(i.data.status!=="success")throw new Error(i.data.message);let n=i.data.build;if(!n)throw new Error("Build not found");let r=n.artifacts?.find(o=>o.type?o.type==="apk":o.name?.endsWith(".apk")||o.url?.includes(".apk"));return!r||!r.url?(t.stop("No APK artifact found"),Pe.error(Ce.red("This build does not have an APK artifact.")),Pe.info(Ce.dim("Make sure the build produced an APK (not just an AAB).")),null):(t.stop(`Found build: ${n.buildId||e}`),await no(r.url))}catch(i){return t.stop("Failed to fetch build"),Pe.error(Ce.red(i.message)),null}}async function no(e){let t=to();t.start("Downloading APK...");try{let i=Nt.mkdtempSync(ai.join(jl.tmpdir(),`${f.nameLower}-audit-`)),n=ai.join(i,"app.apk"),r=await Gl.get(e,{responseType:"arraybuffer"});Nt.writeFileSync(n,r.data);let o=(r.data.length/(1024*1024)).toFixed(1);return t.stop(`Downloaded APK (${o} MB)`),n}catch(i){return t.stop("Download failed"),Pe.error(Ce.red(`Failed to download APK: ${i.message}`)),null}}var Jl=console.log;console.log=()=>{};Yl();console.log=Jl;me(fe.bgCyan.black(f.cliTag("Production Build Orchestrator")));var ql=Xl(import.meta.url),Zl=ql("../package.json"),q=new Wl;q.name(f.nameLower).description(`${f.name} CLI: Powerful Cloud Infrastructure Tools`).version(Zl.version).option("-y, --yes","Automatically answer yes to all prompts",!1).option("--quiet","Suppress non-essential output",!1);q.command("agent").description("Start local device discovery agent for the Install Hub (port 7070)").action(async()=>{await tr()});q.command("host").description("Setup AWS S3 static hosting and CloudFront").action(async()=>{me(fe.bgCyan.black(f.cliTag("Hosting"))),await Zi()});q.command("sitemap").description("Generate sitemap.xml from Expo Router app structure").option("-o, --output <path>","Output path for sitemap.xml","./public/sitemap.xml").action(async e=>{me(fe.bgCyan.black(f.cliTag("Sitemap Generator"))),await nn(e)});q.command("build").description("Run a build on a cloud provider (AWS Spot Instances)").argument("[platform]","Target platform (android, ios)").option("--platform <os>","Target platform alias (android, ios) [Optional]").option("--repo <url>","Git Repository URL").option("--branch <name>","Git Branch").option("--ami <id>","AMI ID").option("--bucket <name>","S3 Bucket for artifacts").option("--region <region>","AWS Region").option("--aws-profile <name>","AWS Credentials Profile").option("-p, --build-profile <name>","Build Profile (e.g. production, staging)","production").option("--profile <name>","Build Profile (alias for --build-profile)").option("--dry-run","Generate User Data script without launching").option("--keep-instance","Do not terminate the instance after build").option("--subnet <id>","VPC Subnet ID to launch the instance in").option("--security-group <id>","VPC Security Group ID to use").option("--ssh-host <host>","Remote host for iOS build (SSH)").option("--ssh-user <user>","SSH username for remote host").option("--ssh-key <path>","Path to private SSH key for remote host").option("--ios-scheme <scheme>","iOS Scheme to build").option("--ios-team-id <id>","Apple Development Team ID").option("--ios-configuration <config>","Xcode configuration (Release/Debug)").option("--ios-export-method <method>","Export method (ad-hoc, app-store, development, enterprise)").option("--ios-api-key-id <id>","App Store Connect API Key ID").option("--ios-api-key-issuer <id>","App Store Connect API Key Issuer ID").option("--ios-api-key-path <path>","Path to App Store Connect API Key (.p8) file").option("--simulator","Build for iOS Simulator (no signing required)").addOption(new pt("--build-id <id>","Internal build ID").hideHelp()).addOption(new pt("--project-id <id>","Internal project ID").hideHelp()).addOption(new pt("--fail-only","Internal: mark an existing build failed").hideHelp()).addOption(new pt("--error <message>","Internal failure message").hideHelp()).option("--local","Run build on local machine").option("--auto-version","Automatically fetch and increment Android versionCode or iOS buildNumber from the store").option("--verbose","Enable verbose logging").option("--json-output <path>","Write build metadata JSON to a file for CI/CD").option("--maestro","Queue a managed Maestro test run after a successful build").option("--maestro-flows <path>","Maestro flow file or directory (default: .maestro)").option("--maestro-device <device>","Managed Maestro device profile").option("--maestro-retries <n>","Retries for the Maestro run","1").option("--maestro-record","Enable screen recording where supported").option("-y, --yes","Automatically answer yes to all prompts",!1).option("--quiet","Suppress non-essential output",!1).action(async(e,t)=>{let i=q.opts();t.yes=t.yes||i.yes,t.quiet=t.quiet||i.quiet,t.platform=e||t.platform,t.buildProfile=t.profile||t.buildProfile,t.quiet||me(fe.bgCyan.black(f.cliTag("Cloud Build"))),await Vt(t)});q.command("maestro").description("Run managed Maestro tests for an existing Mach build or artifact").option("--platform <os>","Target platform (android/ios)").option("-p, --profile <name>","Build profile to resolve when using --latest","production").option("--latest","Use the latest successful build for the platform/profile").option("--build-id <id>","Use a specific Mach build ID").option("--build-url <url>","Use a Mach build URL").option("--artifact-url <url>","Use a direct APK or iOS simulator app artifact URL").option("--maestro-flows <path>","Maestro flow file or directory (default: .maestro)").option("--maestro-device <device>","Managed Maestro device profile").option("--maestro-retries <n>","Retries for the Maestro run","1").option("--maestro-record","Enable screen recording where supported").option("--json-output <path>","Write test run metadata JSON to a file for CI/CD").action(async e=>{me(fe.bgCyan.black(f.cliTag("Maestro Testing"))),await xn(e)});q.command("update").description("Deploy an Over-The-Air (OTA) update to your live channel").option("--branch <name>","Channel or Branch to deploy to (e.g., production)","production").action(async e=>{me(fe.bgCyan.black(f.cliTag("OTA Update"))),await Er(e)});q.command("submit").description("Automated Store Submission (App Store / Google Play)").option("--platform <os>","Target platform (ios/android)").option("-p, --profile <name>","Build/submission profile to submit from (e.g. production, preprod)").option("--track <track>","Google Play Track (internal, alpha, beta, production)").option("--release-status <status>","Google Play release status (completed, draft, halted, inProgress)").option("--rollout <fraction>","Google Play staged rollout fraction for inProgress releases (example: 0.1)").option("--changes-not-sent-for-review","Commit Google Play changes without automatically sending them for review").option("--ssh-host <host>","Remote macOS host for iOS submission").option("--ssh-user <user>","SSH username for remote iOS submission").option("--ssh-key <path>","Path to private SSH key for remote iOS submission").option("--credential-id <id>","Service credential ID to use when multiple submission credentials exist").option("--local","Run submission on this machine (internal runner mode for iOS)").addOption(new pt("--submit-id <id>","Internal submission ID").hideHelp()).addOption(new pt("--project-id <id>","Internal project ID").hideHelp()).option("--json-output <path>","Write submission metadata JSON to a file for CI/CD").option("--latest","Use the latest successful build for submission").option("--build-id <id>","Use a specific build ID for submission").action(async e=>{let t=q.opts();e.quiet=e.quiet||t.quiet,e.yes=e.yes||t.yes,me(fe.bgCyan.black(f.cliTag("Store Submission"))),await hr(e)});q.command("login").description(`Login to ${f.name} Dashboard`).action(async()=>{me(fe.bgCyan.black(f.cliTag("Login"))),await or()});q.command("link").description(`Link local directory to a ${f.name} Project`).action(async()=>{me(fe.bgCyan.black(f.cliTag("Link Project"))),await ar()});q.command("me").description("Display currently logged in user details").action(async()=>{await Ar()});q.command("init").description(`Create a new ${f.name} Project`).action(async()=>{me(fe.bgCyan.black(f.cliTag("Init Project"))),await lr()});q.command("env").description("Manage Environment Variables").argument("<action>","Action to perform: set or list").argument("[args...]","Key=Value pairs for set action").action(async(e,t)=>{me(fe.bgCyan.black(f.cliTag("Env Manager"))),await pr(e,t)});q.command("start").description("Start the development server (Metro)").option("-p, --build-profile <name>","Build profile (e.g. development, staging)","development").option("--tunnel","Use ngrok tunnel").option("--lan","Use LAN IP").option("--localhost","Use localhost").option("-c, --clear","Clear Metro cache").option("--port <number>","Port to listen on").option("--ios","Start on iOS").option("--android","Start on Android").option("--web","Start on Web").action(async e=>{me(fe.bgCyan.black(f.cliTag("Dev Server"))),await _r(e)});q.command("config").description("Show resolved configuration for a profile").option("-p, --profile <name>","Build profile to resolve","development").option("--json","Output as JSON").action(async e=>{await Pr(e)});q.command("credentials").description("Unified, interactive credential management (iOS/Android)").option("-p, --profile <name>","Build profile (production, staging, development)").option("--force","Force recreate certificates (nuke existing on Apple Portal)",!1).action(async e=>{let{credentialsMainCommand:t}=await import("./credentials-LDTYEZRC.js");await t(e)});q.command("credentials:setup").description("Automated credential provisioning (iOS/Android) [Legacy]").requiredOption("--platform <os>","Platform: ios or android").option("--profile <name>","Build profile (production, staging, development)").option("--bundle-id <id>","Bundle ID / Package Name (optional, auto-detected)").option("--team-id <id>","Apple Team ID (iOS only)").option("--key-alias <alias>","Android keystore alias (optional, auto-generated)").option("--aws-profile <name>","AWS Credentials Profile (for S3 storage)").option("--force","Force recreate certificates (nuke existing on Apple Portal)",!1).action(async e=>{me(fe.bgCyan.black(f.cliTag("Credentials Setup"))),await mt(e),ro(fe.green("Done!"))});q.command("credentials:service").description("Upload Service Credentials (ASC API Key / Google Service JSON) [Legacy]").requiredOption("--platform <os>","Platform: ios or android").option("--file <path>","Path to credential file (.p8 or .json)").option("--issuer-id <id>","ASC API Key Issuer ID (iOS only)").option("--key-id <id>","ASC API Key ID (iOS only)").option("--bundle-id <id>","Bundle identifier / Android package name to attach this service credential to").option("--package-name <name>","Android package name to attach this service credential to").option("-p, --profile <name>","Build profile to resolve package/bundle identifier from config").action(async e=>{me(fe.bgCyan.black(f.cliTag("Service Credentials"))),await Xi(e),ro(fe.green("Done!"))});var Ki=q.command("device").description("Manage registered iOS test devices");Ki.command("register").description("Register a connected iOS device or enter UDID manually").option("--udid <udid>","Device UDID (skip auto-detection)").option("--name <name>","Device name").action(async e=>{await qt("register",e)});Ki.command("list").description("List all registered devices").action(async()=>{await qt("list",{})});Ki.command("remove").description("Remove a registered device").option("--udid <udid>","Device UDID to remove").action(async e=>{await qt("remove",e)});q.command("audit").description("Run automated security audit on the project or APK").option("--apk <path>","Path to APK file (runs APK diagnostics like 16KB alignment)").option("--json","Output results as JSON (for CI/CD)").option("--fix","Auto-apply fixes where possible").option("--category <name>","Run only a specific check category (e.g. 16kb, permissions, secrets)").option("--severity <level>","Minimum severity to display (critical, high, medium, low, info)").option("--prebuild","Run expo prebuild for deeper manifest/plist analysis").action(async e=>{me(fe.bgCyan.black(f.cliTag(e.apk?"APK Audit":"Security Audit"))),await io(e)});var Ql=new Set(["login"]);q.hook("preAction",(e,t)=>{let i=t.name();Ql.has(i)||Wi()});q.on("command:*",()=>{console.error(`Invalid command: %s
 See --help for a list of available commands.`,q.args.join(" ")),process.exit(1)});process.argv.slice(2).length||q.help();q.parse(process.argv);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@radhya/mach",
-  "version": "1.9.6",
+  "version": "1.9.7",
   "description": "Mach CLI: Cloud Build Orchestrator for React Native & Expo",
   "main": "dist/index.js",
   "type": "module",

package/dist/chunk-H4NBOSTT.js

@@ -1,58 +0,0 @@
-import{a as f,g as V}from"./chunk-NZ4K6LDA.js";import{log as r,spinner as ne,text as _,password as ce,select as K,confirm as He,isCancel as v,cancel as U,intro as Pe,outro as Te,note as ve}from"@clack/prompts";import{log as W,spinner as te,text as $,select as M,isCancel as N,cancel as T,note as oe,confirm as he}from"@clack/prompts";import G from"chalk";import{spawnSync as ee}from"child_process";import k from"fs";import x from"path";import ue from"os";import se from"fs";function ot(n){if(n){if(!se.existsSync(n))return null;try{return JSON.parse(se.readFileSync(n,"utf-8"))}catch{return null}}if(!se.existsSync(`./${f.configFileName}`))return null;try{return JSON.parse(se.readFileSync(`./${f.configFileName}`,"utf-8"))}catch{return null}}function L(n,e,i=new Set){if(i.has(e))throw new Error(`Circular inheritance detected in profile: ${e}`);i.add(e);let a=n.build?.[e];if(!a)return null;let t={...a};if(a.extends){let s=L(n,a.extends,i);s&&(t={...s,...a,env:{...s.env,...a.env},ios:{...s.ios,...a.ios},android:{...s.android,...a.android}})}if(t.envGroups&&Array.isArray(t.envGroups)){let s={};for(let c of t.envGroups){let d=n.envGroups?.[c];d?Object.assign(s,d):log.warn(`Environment group not found: ${c}`)}t.env={...s,...t.env}}return t}function ae(n,e){let i=e?L(n,e)||{}:{};if(i.android?.package)return i.android.package;if(i.androidPackage)return i.androidPackage;if(n.android?.package)return n.android.package;if(n.expo?.android?.package)return n.expo.android.package}function re(n,e){let i=e?L(n,e)||{}:{};if(i.ios?.bundleIdentifier)return i.ios.bundleIdentifier;if(i.iosBundleIdentifier)return i.iosBundleIdentifier;if(n.ios?.bundleIdentifier)return n.ios.bundleIdentifier;if(n.ios?.bundleId)return n.ios.bundleId;if(n.expo?.ios?.bundleIdentifier)return n.expo.ios.bundleIdentifier}var ct=(n,e=`${f.envPrefix}`)=>{let i={},a=(t,s)=>{if(t)for(let c in t){let d=t[c],g=`${s}${c.toUpperCase().replace(/[^A-Z0-9]/g,"_")}`;d!==null&&typeof d=="object"&&!Array.isArray(d)?a(d,`${g}_`):i[g]=String(d)}};return a(n,e),i};var Fe="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";function le(){let n=x.join(ue.tmpdir(),f.nameLower);k.existsSync(n)||k.mkdirSync(n,{recursive:!0});let e=x.join(n,"manage_asc_keys.rb");return k.writeFileSync(e,Buffer.from(Fe,"base64").toString("utf-8"),{mode:493}),e}function de(){return{...process.env,PATH:`/usr/local/opt/ruby/bin:/usr/local/Cellar/fastlane/2.227.0/libexec/bin:${process.env.HOME}/.local/share/fastlane/3.4.0/bin:${process.env.PATH}`,GEM_HOME:process.env.FASTLANE_GEM_HOME||`${process.env.HOME}/.local/share/fastlane/3.4.0`,GEM_PATH:(process.env.FASTLANE_GEM_HOME||`${process.env.HOME}/.local/share/fastlane/3.4.0`)+":/usr/local/Cellar/fastlane/2.227.0/libexec",FASTLANE_INSTALLED_VIA_HOMEBREW:"true",CI:"1"}}function Ie(n){let e=new Map,i=/-\s+(\d+)\s+\(([^)]+)\)/g,a=/\d+\)\s+"([^"]+)"\s+\((\d+)\)/g,t;for(;(t=i.exec(n))!==null;)e.set(t[1],{id:t[1],name:t[2]});for(;(t=a.exec(n))!==null;)e.set(t[2],{id:t[2],name:t[1]});return Array.from(e.values())}function me(n){return n.submit?.production?.ios?.appStoreConnectTeamId||n.submit?.production?.ios?.itcTeamId||n.submit?.production?.ios?.appleConnectTeamId}function be(n,e,i){return{...de(),FASTLANE_USER:n,FASTLANE_TEAM_ID:e,...i?{FASTLANE_ITC_TEAM_ID:i,FASTLANE_ASC_TEAM_ID:i}:{}}}async function Ne(n,e,i,a){let t=te();t.start("Fetching App Store Connect providers...");let s=ee("ruby",[n,"teams"],{env:be(i,a),stdio:["inherit","pipe","pipe"],encoding:"utf-8"});if(s.status!==0){t.stop("Could not fetch providers");let I=Ie(`${s.stdout||""}
-${s.stderr||""}`);if(I.length>0)return ge(e,I,"Select the App Store Connect provider for this API key:");W.warn(G.yellow(`Could not list App Store Connect providers: ${s.stderr||"Unknown error"}`));return}let c=(s.stdout||"").match(new RegExp(`${f.jsonStartMarker}(.*)${f.jsonEndMarker}`));if(!c){t.stop("Could not parse providers");return}let d=JSON.parse(c[1]),g=(d.teams||[]).filter(I=>I.id&&I.name);if(t.stop(g.length===1?"Found 1 provider":`Found ${g.length} providers`),g.length===0)return;if(g.length===1)return W.success(G.green(`\u2713 Using App Store Connect provider ${g[0].name} (${g[0].id})`)),g[0].id;let y=g.filter(I=>I.recommended),u=g.filter(I=>!I.recommended);return ge(e,[...y,...u],`Select the App Store Connect provider for Developer Team ${d.developerTeamName||a}:`)}async function ge(n,e,i){let a=await M({message:i,options:e.map(s=>({value:s.id,label:s.name,hint:`${s.id}${s.recommended?" \xB7 recommended":""}`}))});if(N(a))return T("Operation cancelled"),null;let t=a;return W.success(G.green(`\u2713 Using App Store Connect Provider ID ${t}`)),t}var Se=async n=>{let e=te(),i=n.platform,a=`./${f.configFileName}`;if(!k.existsSync(a)){W.error(`No ${f.configFileName} found. Run \`${f.nameLower} init\` or \`${f.nameLower} link\` first.`);return}let t=JSON.parse(k.readFileSync(a,"utf-8")),{projectId:s}=t,c=n.profile||"production";if(!s){W.error(`${f.configFileName} is missing projectId.`);return}let d=n.file,g=i==="android"?n.packageName||n.bundleId:n.bundleId||re(t,c)||"*";if(i==="android"&&!g&&(g=await Ee(s,t,c),g===null))return;if(i==="ios"&&!d){let p=await M({message:"Manage App Store Connect API Key:",options:[{value:"magic",label:"\u2728 Create new automatically",hint:"Requires Apple ID + 2FA"},{value:"manual",label:"\u{1F50D} Configure manually",hint:"Provide existing .p8 file"},{value:"delete",label:"\u{1F5D1}\uFE0F  Delete an existing Key"}]});if(N(p)){T("Operation cancelled");return}if(p==="magic"){await Je(s,t);return}if(p==="delete"){await xe(s,t);return}}if(!d){let p=i==="ios"?"https://appstoreconnect.apple.com/access/api":"https://console.cloud.google.com/apis/credentials";oe(`To submit to the ${i==="ios"?"App Store":"Google Play Store"}, you need a Service Key:
-
-1. Open: ${G.cyan(p)}
-`+(i==="ios"?`2. Generate an "App Store Connect API Key" with ${G.bold("Admin")} role.
-3. Download the ${G.bold(".p8")} file.`:`2. Create a "Service Account", generate a ${G.bold("JSON")} key.
-3. Download the ${G.bold(".json")} file.`),"Guided Setup"),e.start("Scanning for downloaded keys...");let l=Ue(i);if(e.stop(l.length>0?`Detected ${l.length} potential key(s)`:"No keys detected automatically"),l.length>0){let C=await M({message:"Found these potential keys. Use one of them?",options:[...l.map(A=>({value:A.path,label:`${x.basename(A.path)} (${A.location})`})),{value:"manual",label:"Enter path manually..."}]});if(N(C)){T("Operation cancelled");return}C!=="manual"&&(d=C)}if(!d){let C=await $({message:`Paste the path to your ${i==="ios"?".p8":".json"} file:`,validate:A=>k.existsSync(A)?void 0:"File not found"});if(N(C)){T("Operation cancelled");return}d=C}}let y=n.issuerId,u=n.keyId;if(i==="ios"){if(!u&&d){let p=x.basename(d).match(/AuthKey_(.*)\.p8/);p&&(u=p[1],W.info(`Auto-detected Key ID from filename: ${G.green(u)}`))}if(!y){let p=await $({message:"Enter App Store Connect Issuer ID (Found on the Keys page):",validate:l=>l.length>0?void 0:"Issuer ID is required"});if(N(p)){T("Operation cancelled");return}y=p}if(!u){let p=await $({message:"Enter App Store Connect Key ID:",validate:l=>l.length>0?void 0:"Key ID is required"});if(N(p)){T("Operation cancelled");return}u=p}}if(i==="android"&&(!g||g==="*")){let p=await Ze();if(p===null)return;g=p}let I=t.submit?.production?.ios?.appleTeamId,m=me(t);await pe(s,d,i,y,u,g,{teamId:i==="ios"?I:void 0,developerTeamId:i==="ios"?I:void 0,appStoreConnectTeamId:i==="ios"?m:void 0,providerId:i==="ios"?m:void 0})};async function Ee(n,e,i){let a=await Be(n),t=Ye(e,i);if(t&&!a.includes(t)&&a.unshift(t),a.length>0){let s=await M({message:"Select Android package for this Google Play service key:",options:[...a.map(c=>({value:c,label:c,hint:c===t?"from config":void 0})),{value:"manual",label:"Enter another package name..."}]});if(N(s))return T("Operation cancelled"),null;if(s==="manual")return Ze();if(s!=="manual")return s}if(t){let s=await he({message:`Use Android package from local config (${t})?`,initialValue:!0});if(N(s))return T("Operation cancelled"),null;if(s)return t}}async function Ze(){let n=await $({message:"Android package name for this Google Play service key:",placeholder:"com.example.app",validate:e=>e.includes(".")?void 0:"Enter a valid package name"});return N(n)?(T("Operation cancelled"),null):n}async function Be(n){try{let i=(await V.get(`/credentials/${n}`)).data.credentials||[],a=new Set;for(let t of i)(t.platform==="android"||t.type==="android_keystore"||t.type==="google_service_account")&&t.bundleId&&t.bundleId!=="*"&&a.add(t.bundleId);return Array.from(a).sort()}catch(e){return W.warn(G.yellow(`Could not fetch saved Android package identifiers: ${e.message}`)),[]}}function Ye(n,e){let i=ae(n,e);if(i)return i;let a=x.join(process.cwd(),"app.json");if(k.existsSync(a))try{return JSON.parse(k.readFileSync(a,"utf-8")).expo?.android?.package}catch{}let t=x.join(process.cwd(),"app.config.json");if(k.existsSync(t))try{let s=JSON.parse(k.readFileSync(t,"utf-8"));return s.expo?.android?.package||s.android?.package}catch{}}async function Je(n,e){let i=te(),a=e.submit?.production?.ios?.appleId,t=e.submit?.production?.ios?.appleTeamId,s=me(e);if(!a){let g=await $({message:"Apple ID:",placeholder:"your-email@example.com"});if(N(g))return;a=g}if(!t){let g=await $({message:"Apple Team ID:",placeholder:"e.g. 4523G95823"});if(N(g))return;t=g,e.submit||(e.submit={production:{ios:{}}}),e.submit.production||(e.submit.production={ios:{}}),e.submit.production.ios||(e.submit.production.ios={}),e.submit.production.ios.appleTeamId=t,k.writeFileSync(`./${f.configFileName}`,JSON.stringify(e,null,2))}let c=await $({message:"Enter a name for the new API Key:",initialValue:`[${f.name}] Project ${n}`});if(N(c))return;let d=le();if(!k.existsSync(d)){W.error(`Magic Error: Helper script not found at ${d}`);return}try{let g=await Ne(d,e,a,t);if(g===null)return;if(g)s=g;else if(!s)return;i.start("Creating App Store Connect API Key...");let y=b=>ee("ruby",[d,"create",c],{env:be(a,t,b),stdio:["inherit","pipe","pipe"],encoding:"utf-8"}),u=y(s),I=u.stdout||"",m=u.stderr||"";if(u.status!==0){let b=Ie(`${I}
-${m}`);if(b.length>0){i.stop("Select App Store Connect team"),oe(`Apple Developer Team IDs look like ${G.bold(t)}.
-App Store Connect API keys use a numeric provider/team ID instead.`,"Team ID mismatch");let X=await ge(e,b,"Select the App Store Connect provider for this API key:");if(!X)return;s=X,i.start("Creating API Key with selected App Store Connect team..."),u=y(s),I=u.stdout||"",m=u.stderr||""}}if(m&&(m.includes("DEBUG:")||m.includes("ERROR:"))&&m.split(`
-`).forEach(b=>{b.trim()&&W.info(G.dim(`[Ruby] ${b.trim()}`))}),u.status!==0){i.stop("Failed"),W.error(`Magic creation failed: ${m}`);return}let p=I.match(new RegExp(`${f.jsonStartMarker}(.*)${f.jsonEndMarker}`));if(!p){i.stop("Parse Error"),W.error("Could not parse response from Apple Portal.");return}let l=JSON.parse(p[1]),{id:C,issuerId:A,keyContent:E}=l;if(i.stop("Key Created Successfully"),W.success(`\u2713 Created Key ID: ${G.green(C)}`),!A){oe(`Your Issuer ID is shown at the top of:
-  ${G.cyan("https://appstoreconnect.apple.com/access/integrations/api")}
-
-It looks like: ${G.dim("xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx")}`,"One More Thing");let b=await $({message:"Enter your App Store Connect Issuer ID:",validate:X=>X.trim().length>0?void 0:"Issuer ID is required"});if(N(b)){T("Operation cancelled.");return}A=b.trim()}if(E){let b=x.join(ue.tmpdir(),`AuthKey_${C}.p8`);k.writeFileSync(b,E),await pe(n,b,"ios",A,C,e.ios?.bundleIdentifier||"*",{teamId:t,developerTeamId:t,appStoreConnectTeamId:s,providerId:s}),k.unlinkSync(b)}else{W.warn(G.yellow("\u26A0\uFE0F  Apple did not return the private key in the response.")),oe(`Download the .p8 file manually:
-
-  1. Open: ${G.cyan("https://appstoreconnect.apple.com/access/integrations/api")}
-  2. Find Key ID: ${G.green(C)}
-  3. Click ${G.bold("Download API Key")} (only available once)
-  4. Drag & drop the downloaded .p8 file below`,"Manual Step Required");let b=await $({message:"Path to the downloaded .p8 file (drag & drop here):",validate:X=>k.existsSync(X)?void 0:"File not found"});if(N(b)){T("Operation cancelled. Credential ID was registered but key content is missing.");return}await pe(n,b,"ios",A,C,e.ios?.bundleIdentifier||"*",{teamId:t,developerTeamId:t,appStoreConnectTeamId:s,providerId:s})}}catch(g){i.stop("Error"),W.error(`Error: ${g.message}`)}}async function xe(n,e){let i=te(),a=e.submit?.production?.ios?.appleId,t=e.submit?.production?.ios?.appleTeamId,s=me(e);if(!a){let d=await $({message:"Apple ID:"});if(N(d))return;a=d}if(!t){let d=await $({message:"Apple Team ID:"});if(N(d))return;t=d,e.submit||(e.submit={production:{ios:{}}}),e.submit.production||(e.submit.production={ios:{}}),e.submit.production.ios||(e.submit.production.ios={}),e.submit.production.ios.appleTeamId=t,k.writeFileSync(`./${f.configFileName}`,JSON.stringify(e,null,2))}i.start("Fetching existing API Keys...");let c=le();if(!k.existsSync(c)){W.error(`Magic Error: Helper script not found at ${c}`);return}try{let d=l=>ee("ruby",[c,"list"],{env:{...de(),FASTLANE_USER:a,FASTLANE_TEAM_ID:t,...l?{FASTLANE_ITC_TEAM_ID:l,FASTLANE_ASC_TEAM_ID:l}:{}},stdio:["inherit","pipe","pipe"],encoding:"utf-8"}),g=d(s);if(g.status!==0){let l=Ie(`${g.stdout||""}
-${g.stderr||""}`);if(l.length>0){i.stop("Select App Store Connect team");let C=await M({message:"Select the App Store Connect team to list API keys:",options:l.map(A=>({value:A.id,label:A.name,hint:A.id}))});if(N(C)){T("Operation cancelled");return}s=C,i.start("Fetching existing API Keys..."),g=d(s)}}if(g.status!==0){i.stop("Failed"),W.error(`Listing failed: ${g.stderr}`);return}let y=g.stdout.match(new RegExp(`${f.jsonStartMarker}(.*)${f.jsonEndMarker}`));if(!y){i.stop("Parse Error");return}let u=JSON.parse(y[1]);if(i.stop(`Found ${u.length} keys`),u.length===0){W.info("No API Keys found on this team.");return}let I=await M({message:"Select a key to delete from Apple Developer Portal:",options:[...u.map(l=>({value:l.id,label:`ID: ${l.id} - ${l.name} (${l.role})`})),{value:"cancel",label:"Cancel"}]});if(N(I)||I==="cancel")return;let m=await he({message:`Are you sure you want to delete Key ${I}? This cannot be undone.`});if(!m||N(m))return;i.start(`Deleting Key ${I}...`);let p=ee("ruby",[le(),"delete",I],{env:{...de(),FASTLANE_USER:a,FASTLANE_TEAM_ID:t,...s?{FASTLANE_ITC_TEAM_ID:s,FASTLANE_ASC_TEAM_ID:s}:{}},stdio:"pipe",encoding:"utf-8"});p.status===0?(i.stop("Deleted"),W.success(`\u2713 Key ${I} has been removed from Apple Portal.`)):(i.stop("Deletion Failed"),W.error(`Error: ${p.stderr}`))}catch(d){i.stop("Error"),W.error(`Error: ${d.message}`)}}async function pe(n,e,i,a,t,s="*",c={}){let d=te();d.start(`Uploading Service Credentials for ${i}...`);try{let g=i==="ios"?"asc_api_key":"google_service_account",y=new URL(import.meta.url),u=x.dirname(y.pathname),I=[x.join(u,"isolated-upload.js"),x.join(u,"commands","isolated-upload.js"),x.resolve(u,"../commands/isolated-upload.js"),x.resolve(process.cwd(),`node_modules/.bin/${f.nameLower}-upload`)],m="";for(let l of I)if(k.existsSync(l)){m=l;break}if(!m)throw new Error("Could not locate isolated-upload.js. Ensure the CLI is properly installed.");let p=ee("node",[m,n,e,g,s,"service","undefined","undefined",a||"undefined",t||"undefined","undefined","undefined","undefined",c.teamId||"undefined",c.teamName||"undefined",c.developerTeamId||"undefined",c.appStoreConnectTeamId||"undefined",c.providerId||"undefined",c.providerName||"undefined"],{stdio:"pipe",encoding:"utf-8",env:{...process.env,AT_CLI_ISOLATED:"1"}});if(p.status!==0){let l=p.stderr||p.stdout||"Unknown upload failure";d.stop("Upload Failed"),W.error(G.red(`Upload Failed: ${l}`));return}p.stdout.includes("SUCCESS")?(d.stop("Upload Success"),W.success(G.green(`\u2713 Service Credentials for ${i} uploaded successfully.`))):(d.stop("Upload Summary"),W.warn(G.yellow(`Upload finished but success not confirmed: ${p.stdout}`)))}catch(g){d.stop("Upload Error"),W.error(G.red(`Error: ${g.message}`))}}function Ue(n){let e=n==="ios"?".p8":".json",i=[],a=[{path:"./",label:"Project Root"},{path:x.join(ue.homedir(),"Downloads"),label:"Downloads"}];for(let t of a)if(k.existsSync(t.path))try{let s=k.readdirSync(t.path);for(let c of s)if(c.endsWith(e)){if(n==="android"&&!k.readFileSync(x.join(t.path,c),"utf8").includes("service_account")||n==="ios"&&!c.startsWith("AuthKey"))continue;i.push({path:x.join(t.path,c),location:t.label})}}catch{}return i}import Ve from"axios";import o from"chalk";import{execSync as H,spawnSync as z}from"child_process";import fe from"crypto";import h from"fs";import F from"path";import ye from"os";Ve.defaults.proxy=!1;function Ae(n,e){if(!h.existsSync(n))return;let i=h.readdirSync(n);for(let a of i){let t=F.join(n,a);if(h.statSync(t).isDirectory()){let c=Ae(t,e);if(c)return c}else if(e.test(a))return t}}var Q=n=>String(n||"").trim().toLowerCase().replace(/_/g,"-"),Ge=n=>{let e=n.toLowerCase();return e==="production"||e==="prod"||e.includes("store")||e.endsWith("-production")||e.endsWith("-prod")},$e=n=>{let e=n.toLowerCase();return e==="staging"||e==="stage"||e.includes("preview")||e.includes("adhoc")||e.includes("ad-hoc")||e.endsWith("-staging")||e.endsWith("-stage")},_e=(n,e)=>{let i=L(n,e)||{},a=Q(i.distribution),t=Q(i.iosExportMethod||i.ios?.exportMethod),s=Q(i.environment);return t==="app-store"||a==="store"?"store":t==="development"||a==="development"?"development":t==="ad-hoc"||t==="adhoc"||a==="ad-hoc"||a==="adhoc"||a==="internal"?"adhoc":s==="production"||s==="store"?"store":s==="development"||s==="dev"?"development":s==="staging"||s==="stage"||s==="preview"?"adhoc":Ge(e)?"store":$e(e)?"adhoc":"development"},De=(n,e)=>{let i=L(n,e)||{},a=Q(i.distribution),t=Q(i.environment);return a==="store"||t==="production"||t==="store"||Ge(e)?"store":"internal"};function Ke(n,e,i){let a=h.readFileSync(i,"utf8"),t=Math.floor(Date.now()/1e3),s=Buffer.from(JSON.stringify({alg:"ES256",kid:n,typ:"JWT"})).toString("base64url"),c=Buffer.from(JSON.stringify({iss:e,iat:t,exp:t+1200,aud:"appstoreconnect-v1"})).toString("base64url"),d=`${s}.${c}`,g=fe.createSign("SHA256");g.update(d);let y=g.sign({key:a,dsaEncoding:"ieee-p1363"}).toString("base64url");return`${d}.${y}`}async function Oe(n,e,i,a){let t=Ke(e,i,a),s=(await import("axios")).default;for(let c of n)try{await s.post("https://api.appstoreconnect.apple.com/v1/devices",{data:{type:"devices",attributes:{name:c.name,udid:c.udid,platform:"IOS"}}},{headers:{Authorization:`Bearer ${t}`,"Content-Type":"application/json"}}),r.info(o.dim(`  \u2713 Registered: ${c.name}`))}catch(d){let g=d.response?.data?.errors;g?.some(u=>u.code==="ENTITY_ERROR.ATTRIBUTE.INVALID.DUPLICATE"||u.detail?.toLowerCase().includes("already registered")||u.detail?.toLowerCase().includes("already exists"))?r.info(o.dim(`  Already on Portal: ${c.name}`)):r.warn(o.yellow(`  Could not register ${c.name}: ${g?.[0]?.detail||d.message}`))}}var we=async n=>{Pe(o.bgCyan.black(f.cliTag("Credentials")));let e=await K({message:"Select platform:",options:[{value:"ios",label:"iOS"},{value:"android",label:"Android"}]});v(e)&&(U("Operation cancelled"),process.exit(0));let i=await K({message:"What do you want to do?",options:[{value:"setup",label:"Build Credentials (Certs/Profiles)",hint:"Manage everything needed to build your project"},{value:"download",label:"Download credentials (credentials.json)",hint:"Sync credentials from Dashboard to local project"},{value:"service",label:"App Store Connect API Key (Magic)",hint:"Manage your API Key for automated submission"},{value:"push",label:"Push Notifications (Placeholder)",hint:"Manage your Apple Push Notifications Key"},{value:"back",label:"Go back"},{value:"exit",label:"Exit"}].filter(a=>!(e==="android"&&(a.value==="service"&&(a.label="Google Service Account (JSON)"),a.value==="push")))});if((v(i)||i==="exit")&&(U("Operation cancelled"),process.exit(0)),i==="back")return we(n);if(i==="setup")await Le({...n,platform:e});else if(i==="download")await tt({...n,platform:e});else if(i==="service")await Se({...n,platform:e});else if(i==="push")return ve("Push Notifications management is coming soon!","Coming Soon"),we(n);Te(o.green("Done!"))},Le=async n=>{let e=ne(),i=n.platform,a=n.profile;if(!a){let d=await K({message:"Select credential type:",options:[{value:"development",label:"Development",hint:"Local testing & simulators"},{value:"staging",label:"Ad Hoc / Staging",hint:"Internal distribution & device testing"},{value:"production",label:"Production / App Store",hint:"App Store & Play Store submission"}]});v(d)&&(U("Operation cancelled"),process.exit(0)),a=d}let t=`./${f.configFileName}`;if(!h.existsSync(t)){r.error(`No ${f.configFileName} found. Run \`${f.nameLower} init\` or \`${f.nameLower} link\` first.`);return}let s=JSON.parse(h.readFileSync(t,"utf-8")),{projectId:c}=s;if(!c){r.error(`${f.configFileName} is missing projectId.`);return}if(n.awsProfile&&r.warn(o.yellow(`Ignoring --aws-profile. Authenticating with ${f.name} Cloud...`)),r.info(o.dim(`Setting up credentials for: ${a}`)),i==="ios")await Me(c,a,n,s);else{let d=De(s,a);await je(c,a,d,n,s)}};async function Me(n,e,i,a){let t=i.bundleId;if(!t){let g=a.submit?.[e]?.ios?.bundleIdentifier||a.submit?.[e]?.ios?.bundleId||re(a,e),y=[];try{let I=(await V.get(`/credentials/${n}`)).data.credentials||[];y=[...new Set(I.filter(m=>m.platform==="ios"&&m.bundleId&&m.bundleId!=="*").map(m=>m.bundleId))]}catch{}if(g&&!y.includes(g)&&y.unshift(g),y.length>0){let u=[...y.map(m=>({value:m,label:m,hint:m===g?"from config":void 0})),{value:"__new__",label:"+ Enter a new Bundle ID"}],I=await K({message:"Which Bundle ID are you setting up credentials for?",options:u});if(v(I)&&(U("Operation cancelled"),process.exit(0)),I==="__new__"){let m=await _({message:"iOS Bundle ID (e.g. com.example.app):",placeholder:"com.example.app",validate:p=>p.includes(".")?void 0:"Please enter a valid Bundle ID"});v(m)&&(U("Operation cancelled"),process.exit(0)),t=m}else t=I}else{let u=await _({message:"iOS Bundle ID (e.g. com.example.app):",placeholder:"com.example.app",validate:I=>I.includes(".")?void 0:"Please enter a valid Bundle ID"});v(u)&&(U("Operation cancelled"),process.exit(0)),t=u}}r.info(o.dim(`Bundle ID: ${t}`));let s=_e(a,e),c=a.submit?.production?.ios?.appleId;c&&r.info(o.dim(`Using Apple ID from config: ${c}`)),await Qe(n,t,e,s,s==="store"?"appstore":s==="adhoc"?"adhoc":"development",i,a,c)}async function ze(n){let e="MATCH_ENCRYPTION_PASSPHRASE";try{let c=((await V.get(`/projects/${n}/secrets/export?env=development`)).data.secrets||{})[e];if(c&&!c.includes("[Decryption Failed]"))return r.info(o.dim("Using existing encryption passphrase from Dashboard")),r.info(o.cyan(`MATCH_PASSWORD: ${c}`)),c;if(c&&c.includes("[Decryption Failed]")){r.warn(o.yellow("\u26A0\uFE0F  Existing MATCH_PASSWORD could not be decrypted (encryption key changed).")),r.info(o.dim("Generating a fresh passphrase and cleaning old certificates..."));let d=fe.randomBytes(32).toString("base64");try{await V.post(`/projects/${n}/secrets`,{key:e,value:d,type:"managed",description:"Encryption passphrase for iOS certificates (fastlane match)",visibility:"secret"}),r.success(o.green("\u2713 New encryption passphrase generated and saved"))}catch{}try{await V.post("/credentials/clean-match-storage",{projectId:n}),r.success(o.green("\u2713 Cleaned old certificates from storage"))}catch{}return d}}catch(t){r.info(o.dim(`Could not fetch existing passphrase from Dashboard: ${t.message}`))}let i=await K({message:"No active encryption passphrase found on Dashboard. What would you like to do?",options:[{value:"generate",label:"Generate a new secure passphrase",hint:"Safe for first-time setup"},{value:"enter",label:"Enter existing passphrase manually",hint:"Required if you already have certs in S3"},{value:"cancel",label:"Cancel",hint:"Quit"}]});if((v(i)||i==="cancel")&&(U("Operation cancelled"),process.exit(0)),i==="enter"){let t=await ce({message:"Enter your MATCH_PASSWORD (encryption passphrase):",validate:c=>c.length>0?void 0:"Passphrase is required"});v(t)&&(U("Operation cancelled"),process.exit(0));let s=t;try{await V.post(`/projects/${n}/secrets`,{key:e,value:s,type:"managed",description:"Encryption passphrase for iOS certificates (fastlane match)"}),r.success(o.green("\u2713 Saved passphrase to Dashboard"))}catch{}return s}let a=fe.randomBytes(32).toString("base64");try{await V.post(`/projects/${n}/secrets`,{key:e,value:a,type:"managed",description:"Encryption passphrase for iOS certificates (fastlane match)",visibility:"secret"}),r.success(o.green("\u2713 Generated and saved encryption passphrase to Dashboard")),r.info(o.cyan(`MATCH_PASSWORD: ${a}`))}catch(t){r.warn(o.yellow(`Could not save passphrase to Dashboard: ${t.message}`))}return a}async function Qe(n,e,i,a,t,s,c,d){let g=ne();r.info(o.blue("Configuring iOS certificate management..."));let y;if(!d){let u=await _({message:"Apple ID (for Apple Developer Portal):",placeholder:"your-email@example.com",validate:I=>I.includes("@")?void 0:"Please enter a valid email"});v(u)&&(U("Operation cancelled"),process.exit(0)),d=u}g.start(`Fetching ${t} certificates...`);try{let u=await ze(n),I="",m="";try{let A=await V.post("/credentials/build-server-token",{projectId:n});A.data.status==="success"&&A.data.credentials&&(process.env.AWS_ACCESS_KEY_ID=A.data.credentials.accessKeyId,process.env.AWS_SECRET_ACCESS_KEY=A.data.credentials.secretAccessKey,A.data.credentials.sessionToken&&(process.env.AWS_SESSION_TOKEN=A.data.credentials.sessionToken),m=A.data.credentials.region||"ap-south-1",I=A.data.credentials.bucket||f.bucketPrefix,process.env.AWS_REGION=m,delete process.env.AWS_PROFILE)}catch(A){throw r.error(`Failed to authenticate with ${f.name} Cloud.`),A}if(!I||!m){r.error(`Failed to resolve S3 configuration from ${f.name} Cloud.`);return}let p=s.teamId||c.submit?.production?.ios?.appleTeamId;if(!p)try{let E=(await V.get(`/projects/${n}/secrets`)).data.secrets?.find(b=>b.key==="APPLE_TEAM_ID");E&&(p=E.value,r.info(o.dim(`Using Team ID from Dashboard: ${p}`)))}catch{}if(p&&p===c.submit?.production?.ios?.appleTeamId&&r.info(o.dim(`Using Apple Team ID from config: ${p}`)),!p){r.warn(o.yellow(`
-Apple Team ID is required to fetch certificates.`)),r.info(o.dim("You can find this at: https://developer.apple.com/account \u2192 Membership Details"));let A=await _({message:"Enter your 10-character Apple Team ID:",placeholder:"e.g. SA56KTS33U",validate:E=>E.length===10?void 0:"Team ID must be exactly 10 characters"});v(A)&&(U("Operation cancelled"),process.exit(0)),p=A,await Re(n,p)}g.stop("Starting certificate sync...");let l=`${f.buildPrefix}-${p}.keychain-db`,C=f.keychainPassword;try{let E=`${process.env.HOME||"/Users/"+(process.env.USER||f.nameLower)}/Library/Keychains/${l}`;r.info(o.dim(`Ensuring keychain exists: ${l}`));try{H(`security create-keychain -p ${C} ${l} 2>/dev/null || true`),H(`security unlock-keychain -p ${C} ${l}`),H(`security set-keychain-settings ${l}`);let S=H("security list-keychains -d user").toString();if(!S.includes(l)){r.info(o.dim(`Adding ${l} to search list`));let Z=[...S.replace(/"/g,"").split(`
-`).map(w=>w.trim()).filter(w=>w.length>0),E].join(" ");H(`security list-keychains -d user -s ${Z}`)}}catch(S){r.warn(o.dim("Keychain setup warning (non-critical): "+S.message))}let b,X;try{let R=((await V.get(`/credentials/${n}`)).data.credentials||[]).find(Z=>Z.type==="asc_api_key"&&Z.issuerId);if(R){let Z=await V.get(`/credentials/${R.credentialId}/download`,{params:{projectId:n}});if(Z.data.downloadUrl){let J=await(await import("axios")).default.get(Z.data.downloadUrl,{responseType:"arraybuffer"}),O=F.join(ye.tmpdir(),`mach-asc-${Date.now()}`);h.mkdirSync(O,{recursive:!0}),y=F.join(O,`AuthKey_${R.keyId}.p8`),h.writeFileSync(y,Buffer.from(J.data)),b=R.keyId,X=R.issuerId,r.success(o.green("\u2713 ASC API key loaded \u2014 no 2FA required for Portal operations"))}}}catch(S){r.warn(o.dim(`Could not load ASC API key: ${S.message}. Will fall back to Apple ID auth.`))}r.info(o.dim("Generating secure P12 export password..."));let P=ke();r.success(o.green("\u2713 Secure P12 password generated."));let Y={...process.env,AWS_REGION:process.env.AWS_REGION||"ap-south-1",AWS_ACCESS_KEY_ID:process.env.AWS_ACCESS_KEY_ID,AWS_SECRET_ACCESS_KEY:process.env.AWS_SECRET_ACCESS_KEY,SSL_CERT_FILE:"/etc/ssl/cert.pem",AWS_CA_BUNDLE:"/etc/ssl/cert.pem",FASTLANE_SSL_CA_CERT:"/etc/ssl/cert.pem",MATCH_PASSWORD:u,FASTLANE_USER:d,FASTLANE_SKIP_UPDATE_CHECK:"1",FASTLANE_TEAM_ID:p,MATCH_KEYCHAIN_NAME:E,MATCH_KEYCHAIN_PASSWORD:C,TERM:process.env.TERM||"xterm-256color",SHELL:process.env.SHELL||"/bin/zsh",MATCH_OUTPUT_PATH:F.join(process.cwd(),"temp_match"),MATCH_STORAGE_MODE:"s3",MATCH_S3_REGION:m,MATCH_S3_BUCKET:I,MATCH_S3_OBJECT_PREFIX:"ios-certificates/",MATCH_USERNAME:d,MATCH_APP_IDENTIFIER:e,MATCH_TYPE:t,[`${f.envPrefix}P12_PASSWORD`]:P,...y&&b&&X?{APP_STORE_CONNECT_API_KEY_KEY_ID:b,APP_STORE_CONNECT_API_KEY_ISSUER_ID:X,APP_STORE_CONNECT_API_KEY_KEY_FILEPATH:y,FASTLANE_SKIP_2FA:"1"}:{}};if(s.force){r.warn(o.yellow(`
-\u26A0\uFE0F  Force flag detected: Hard resetting ${t} certificates...`)),r.info(o.dim("Detected decryption failure loop. Clearing remote storage directly to allow fresh generation.")),r.info(o.cyan(`Current MATCH_PASSWORD: ${u}`)),r.info(o.dim(`Cleaning match storage for Team ID: ${p}...`));try{(await V.post("/credentials/clean-match-storage",{projectId:n,teamId:p})).data.status==="success"&&r.success(o.green(`\u2713 Cleared S3 storage for Team ID: ${p}`))}catch(S){r.warn(o.yellow(`S3 cleanup via API failed: ${S.message}`)),r.info(o.dim("Continuing to attempt standard nuke..."))}try{H(`fastlane match nuke ${t} --skip_confirmation`,{stdio:"inherit",cwd:process.cwd(),env:Y}),r.success(o.green(`\u2713 Nuked existing ${t} credentials`))}catch{r.warn(o.yellow("Standard nuke failed (likely due to password mismatch).")),r.info(o.dim("Since S3 was cleared manually, proceeding to generation..."))}}if(t==="adhoc"||t==="development")try{r.info(o.blue("Fetching registered devices..."));let R=(await V.get("/devices")).data.devices||[];if(R.length===0)r.warn(o.yellow("No registered devices found. Profile will only include devices already on the Apple Developer Portal.")),r.info(o.dim(`Register devices with: ${f.nameLower} device register`));else{let{multiselect:Z}=await import("@clack/prompts"),w=await Z({message:`Select devices to include in the ${t} profile:`,options:R.map(J=>({value:J.udid,label:`${J.name} (${J.udid.substring(0,12)}...)`,hint:J.model||J.platform})),initialValues:R.map(J=>J.udid)});if(!v(w)&&w.length>0){let J=R.filter(O=>w.includes(O.udid));if(r.info(o.blue(`Registering ${J.length} device(s) on Apple Developer Portal...`)),y&&b&&X)await Oe(J,b,X,y);else{r.info(o.dim("You will be prompted for a 2FA code once \u2014 type it and press Enter."));for(let O of J){let Xe=O.name.replace(/"/g,'\\"');z(`fastlane run register_device name:"${Xe}" udid:"${O.udid}"`,{shell:!0,env:Y,stdio:"inherit",cwd:process.cwd()})}}r.info(o.green("\u2713 Device registration complete."))}}}catch(S){r.warn(o.yellow(`Could not fetch registered devices: ${S.message}`)),r.info(o.dim("Continuing without explicit device registration."))}try{let S=z(`fastlane match ${t} --app_identifier "${e}" --profile_name "${f.nameLower} ${t} ${e}"`,{shell:!0,cwd:process.cwd(),env:Y,stdio:"inherit",encoding:"utf-8"});if(S.status!==0){r.warn(o.yellow(`
-Certificate sync failed. Attempting to create App ID and retry...`));try{H(`fastlane produce --app_identifier "${e}" --app_name "${e}" --skip_itc`,{stdio:"inherit",env:Y}),r.success(o.green("\u2713 App ID created successfully")),r.info(o.blue("Retrying certificate sync...")),S=z(`fastlane match ${t} --app_identifier "${e}" --profile_name "${f.nameLower} ${t} ${e}"`,{shell:!0,cwd:process.cwd(),env:Y,stdio:"inherit",encoding:"utf-8"})}catch{}if(S.status!==0)throw new Error("fastlane match failed")}}catch(S){r.warn(o.yellow(`
-Sync failed. This often happens if the encryption passphrase (MATCH_PASSWORD) is incorrect or session expired.`)),r.info(o.cyan(`Failed MATCH_PASSWORD was: ${u}`));let R=await K({message:"What would you like to do?",options:[{value:"retry_password",label:"Retry with a different MATCH_PASSWORD",hint:"Manually enter the decryption passphrase"},{value:"check_portal",label:"Check Apple Portal (Resolve certificate limits)",hint:"See if you have too many certificates"},{value:"manual",label:"Fallback to manual upload",hint:"Provide .p12 and .mobileprovision files"},{value:"cancel",label:"Cancel",hint:"Go back"}]});if(v(R)||R==="cancel")throw S;if(R==="retry_password"){r.info(o.dim(`
-You are overriding the dashboard passphrase for this session.`));let Z=await ce({message:"Enter the correct MATCH_PASSWORD for this project:"});if(Z&&!v(Z)){u=Z,r.info(o.blue("Retrying with provided passphrase...")),r.info(o.cyan(`New MATCH_PASSWORD: ${u}`));let w={...Y,MATCH_PASSWORD:u};if(z(`fastlane match ${t}`,{shell:!0,stdio:"inherit",cwd:process.cwd(),env:w}).status===0)await V.post(`/projects/${n}/secrets`,{key:"MATCH_ENCRYPTION_PASSPHRASE",value:u,description:"Encryption passphrase for iOS certificates (fastlane match)",visibility:"secret"}),r.success(o.green("\u2713 Dashboard passphrase updated.")),r.info(o.cyan(`MATCH_PASSWORD: ${u}`));else throw new Error("Sync failed again with provided passphrase.")}else throw S}else if(R==="check_portal")try{let Z=await Ce(Y,t);if(Z.length>0){if(r.info(o.dim(`Found ${Z.length} existing ${t} certificates on the portal.`)),await it(t,Y,n,Z)&&(r.info(o.blue("Retrying certificate sync...")),z(`fastlane match ${t}`,{shell:!0,stdio:"inherit",cwd:process.cwd(),env:Y}).status!==0))throw new Error("Retry failed")}else throw r.error(o.red("No existing certificates found on portal to resolve.")),S}catch(Z){throw r.warn(o.dim(`Portal check warning: ${Z.message}`)),S}else throw S}r.success(o.green("\u2713 Certificates fetched and synced"));let B=F.join(process.cwd(),"temp_match"),D=F.join(B,`${f.fastlanePrefix}_export.p12`),q=Ae(B,/\.mobileprovision$/);try{let R=`${process.env.HOME||"/Users/"+(process.env.USER||f.nameLower)}/Library/Keychains/${l}`;h.existsSync(B)||h.mkdirSync(B,{recursive:!0}),r.info(o.dim("Exporting certificate from keychain for dashboard upload..."));let Z=H(`security find-identity -v -p codesigning "${R}"`,{encoding:"utf-8"});r.info(o.dim(`Identities in keychain:
-${Z.trim()}`)),H(`security export -k "${R}" -t identities -f pkcs12 -o "${D}" -P ""`,{stdio:"ignore"});try{let w=H(`openssl pkcs12 -in "${D}" -nokeys -passin pass: -legacy 2>/dev/null || openssl pkcs12 -in "${D}" -nokeys -passin pass: 2>/dev/null`,{encoding:"utf-8"});if(!w.includes(p))throw new Error(`Exported P12 does not contain identity for team ${p}. Found: ${w.substring(0,200)}`);r.success(o.green(`\u2713 P12 verified \u2014 contains correct team identity (${p})`))}catch(w){throw new Error(`P12 verification failed: ${w.message}`)}}catch{r.warn(o.dim("Could not export certificate from keychain."))}s.teamId&&!p&&await Re(n,s.teamId);let ie=h.existsSync(D)?D:Ae(B,/\.p12$/);if(ie&&q){let S,R;try{let Z=await Ce(Y,t);Z.length>0&&(S=Z[0].expires,R=Z[0].id)}catch{r.warn(o.dim("Could not fetch expiration date or ID for dashboard record."))}await j(n,ie,"ios_cert",e,a,void 0,S,s.teamId||p,R,P),await j(n,q,"ios_profile",e,a,void 0,S,s.teamId||p),r.success(o.green("\u2713 Both iOS certificate and provisioning profile uploaded successfully"));try{h.existsSync("./temp_match")&&h.rmSync("./temp_match",{recursive:!0,force:!0})}catch{}}else r.warn(o.yellow("Certificates generated but not found in expected location.")),r.info(o.dim("Falling back to manual upload...")),await We(n,e,a)}catch(A){g.stop("Certificate fetch failed"),r.error(o.red(`Error: ${A.message}`)),r.info(o.dim("Falling back to manual upload...")),await We(n,e,a)}}catch(u){g.stop("iOS setup failed"),r.error(o.red(`Error: ${u.message}`))}finally{if(y)try{h.rmSync(F.dirname(y),{recursive:!0,force:!0})}catch{}}}async function Re(n,e){try{await V.post(`/projects/${n}/secrets`,{key:"APPLE_TEAM_ID",value:e,description:"Apple Developer Team ID (used for iOS signing)"}),r.success(o.green(`\u2713 Saved Team ID ${e} to Dashboard`))}catch(i){r.warn(o.yellow(`Could not save Team ID to Dashboard: ${i.message}`))}}async function We(n,e,i){r.info(o.yellow(`
-Manual Upload Mode`)),r.info("Please provide your certificate and provisioning profile:");let a=await _({message:"Path to .p12 certificate file:",validate:c=>h.existsSync(c)?void 0:"File not found"});v(a)&&(U("Operation cancelled"),process.exit(0));let t=await _({message:"Path to .mobileprovision file:",validate:c=>h.existsSync(c)?void 0:"File not found"});v(t)&&(U("Operation cancelled"),process.exit(0));let s=ne();s.start(`Uploading to ${f.name} Dashboard...`);try{await j(n,a,"ios_cert",e,i),await j(n,t,"ios_profile",e,i),s.stop("Upload complete"),r.success(o.green("\u2713 iOS credentials uploaded successfully"))}catch(c){throw s.stop("Upload failed"),c}}async function je(n,e,i,a,t){let s=ne();r.step(o.blue("Android Credential Setup"));let c=a.bundleId;if(!c){let I=ae(t,e),m=[];try{let l=(await V.get(`/credentials/${n}`)).data.credentials||[];m=[...new Set(l.filter(C=>C.platform==="android"&&C.bundleId&&C.bundleId!=="*").map(C=>C.bundleId))]}catch{}if(I&&!m.includes(I)&&m.unshift(I),m.length>0){let p=[...m.map(C=>({value:C,label:C,hint:C===I?"from config":void 0})),{value:"__new__",label:"+ Enter a new Package Name"}],l=await K({message:"Which Package Name are you setting up credentials for?",options:p});if(v(l)&&(U("Operation cancelled"),process.exit(0)),l==="__new__"){let C=await _({message:"Android Package Name (e.g. com.example.app):",placeholder:"com.example.app",validate:A=>A.includes(".")?void 0:"Please enter a valid package name"});v(C)&&(U("Operation cancelled"),process.exit(0)),c=C}else c=l}else{let p=await _({message:"Android Package Name (e.g. com.example.app):",placeholder:"com.example.app",validate:l=>l.includes(".")?void 0:"Please enter a valid package name"});v(p)&&(U("Operation cancelled"),process.exit(0)),c=p}}try{let p=((await V.get(`/credentials/${n}`)).data.credentials||[]).find(l=>l.platform==="android"&&l.distributionType===i&&l.bundleId===c);if(p){r.warn(o.yellow(`\u26A0\uFE0F  Existing Android credentials found for ${i}`));let l=await _({message:"What would you like to do? (use/new/cancel)",validate:C=>{let A=C.toLowerCase();if(!(A==="use"||A==="new"||A==="cancel"))return"Please type: use, new, or cancel"}});if(v(l)||l.toLowerCase()==="cancel")return;if(l.toLowerCase()==="use"){r.success(o.green("\u2713 Using existing credentials."));return}await V.delete(`/credentials/${p.credentialId}?projectId=${n}`)}}catch{}let d="./android/app/my-release-key.jks";if(h.existsSync(d)){let I=await He({message:"Upload existing keystore?"});if(I&&!v(I)){let m=await _({message:"Key alias:",initialValue:"my-key-alias"});if(v(m))return;let p=await ce({message:"Keystore password:"});if(v(p))return;let l=await ce({message:"Key password (leave blank if same as keystore password):"});if(v(l))return;let C=l.trim()||p;await j(n,d,"android_keystore",c,i,m,void 0,void 0,void 0,void 0,p,C),r.success(o.green("\u2713 Keystore uploaded"));return}}r.info(o.blue("Generating new Android keystore..."));let g=a.keyAlias||`${f.nameLower}-${nt()}`,y=ke(),u=`./${f.nameLower}-${e}.jks`;h.existsSync(u)&&h.unlinkSync(u),s.start("Generating keystore...");try{let I=y.replace(/'/g,"'\\''");H(`keytool -genkeypair -v -keystore "${u}" -alias "${g}" -keyalg RSA -keysize 2048 -validity 10000 -storepass '${I}' -keypass '${I}' -dname "CN=${f.name} Build, OU=Mobile, O=Company, L=City, S=State, C=US"`,{stdio:"inherit"}),s.stop("Keystore generated"),await j(n,u,"android_keystore",c,i,g,void 0,void 0,void 0,void 0,y,y),r.success(o.green("\u2713 Android credentials uploaded successfully")),r.info(o.cyan(`Key Alias: ${g}`))}catch(I){throw s.stop("Generation failed"),new Error(`Keystore generation failed: ${I.message}`)}}var qe=n=>new Promise(e=>setTimeout(e,n));function et(n){return/ECONNRESET|ETIMEDOUT|EAI_AGAIN|ENOTFOUND|ECONNABORTED|socket hang up|network|timeout|temporar/i.test(n)||/API_ERROR:\s*(408|409|425|429|5\d\d)/i.test(n)}async function j(n,e,i,a,t,s,c,d,g,y,u,I){let m=F.basename(e);r.info(o.dim(`Uploading ${m} (Isolated process)...`));let p=new URL(import.meta.url),l=F.dirname(p.pathname),A=[F.join(l,"commands","isolated-upload.js"),n,e,i,a,t,s||"undefined",c||"undefined",d||"undefined",g||"undefined",y||"undefined",u||"undefined",I||"undefined"],E="",b=5;for(let X=1;X<=b;X++){let P=z("node",A,{stdio:"pipe",encoding:"utf-8",env:{...process.env,AT_CLI_ISOLATED:"1"}});if(P.status===0&&P.stdout.includes("SUCCESS")){r.info(o.dim(`\u2713 ${m} uploaded and registered.`));return}if(P.status===0){r.warn(o.yellow(`Isolated upload finished but success not confirmed: ${P.stdout}`));return}if(E=(P.stderr||P.stdout||P.error?.message||"Unknown isolated upload failure").trim(),!et(E)||X>=b)throw r.error(o.red(`Isolated Upload Failed: ${E}`)),new Error(E);let B=Math.min(3e4,1500*Math.pow(2,X-1));r.warn(o.yellow(`Upload failed with a transient error. Retrying ${m} in ${Math.round(B/1e3)}s... (${X}/${b})`)),await qe(B)}throw new Error(E||"Unknown isolated upload failure")}async function tt(n){let e=ne(),i=n.platform,a=`./${f.configFileName}`;if(!h.existsSync(a)){r.error(`No ${f.configFileName} found. Run \`${f.nameLower} init\` or \`${f.nameLower} link\` first.`);return}let t=JSON.parse(h.readFileSync(a,"utf-8")),{projectId:s}=t;if(!s){r.error(`${f.configFileName} is missing projectId.`);return}try{e.start("Fetching project secrets...");let d=(await V.get(`/projects/${s}/secrets/export?env=all`)).data.secrets||{};e.stop("Secrets fetched and merged."),e.start("Fetching credentials...");let y=(await V.get(`/credentials/${s}`)).data.credentials||[];e.stop(`Found ${y.length} metadata records.`);let u=y.filter(l=>l.platform===i);if(u.length===0){r.info(`No ${i} credentials found on Dashboard.`);return}let I="./credentials.json",m={};if(h.existsSync(I))try{m=JSON.parse(h.readFileSync(I,"utf-8"))}catch{r.warn("Could not parse existing credentials.json, creating a new one.")}m[i]||(m[i]={});let p=F.join(process.cwd(),"credentials",i);h.existsSync(p)||h.mkdirSync(p,{recursive:!0});for(let l of u){e.start(`Downloading ${l.type} (${l.distributionType})...`);try{let C=await V.get(`/credentials/${l.credentialId}/download?projectId=${s}`);if(C.data.status==="success"&&C.data.downloadUrl){let A=F.join(process.cwd(),"credentials",i,l.distributionType);h.existsSync(A)||h.mkdirSync(A,{recursive:!0});let E=l.s3Key?.split(".").pop()||(l.type.includes("keystore")?"jks":l.type.includes("cert")?"p12":"mobileprovision"),b=`${l.type}.${E}`,X=F.join(A,b),P=await Ve.get(C.data.downloadUrl,{responseType:"arraybuffer"});h.writeFileSync(X,Buffer.from(P.data));let Y=F.join("credentials",i,l.distributionType,b);if(i==="android"){if(l.type==="android_keystore"){let B=Q(l.distributionType),D=B==="store"?"PRODUCTION":["internal","adhoc","ad-hoc","staging","stage"].includes(B)?"STAGING":"DEVELOPMENT",q=["PRODUCTION","STORE","INTERNAL","STAGING","DEVELOPMENT","RELEASE","DEBUG"],ie=[`KEYSTORE_PASSWORD_${D}`,`KEYSTORE_PASSWORD_${l.distributionType.toUpperCase()}`,...q.map(w=>`KEYSTORE_PASSWORD_${w}`),"ANDROID_KEYSTONE_PASSWORD","KEYSTORE_PASSWORD"],S=[`KEYSTORE_ALIAS_${D}`,`KEYSTORE_ALIAS_${l.distributionType.toUpperCase()}`,...q.map(w=>`KEYSTORE_ALIAS_${w}`),"KEYSTORE_ALIAS"],R=ie.map(w=>d[w]).find(w=>!!w)||"",Z=S.map(w=>d[w]).find(w=>!!w)||l.meta?.alias||"";m.android.keystore={keystorePath:Y,keystorePassword:R,keyAlias:Z,keyPassword:R}}}else if(i==="ios"){let B=l.distributionType==="store"?"production":l.distributionType==="adhoc"?"staging":"development";m.ios[B]||(m.ios[B]={}),l.type==="ios_cert"?(m.ios[B].certificatePath=Y,m.ios[B].certificatePassword=d.IOS_P12_PASSWORD||""):l.type==="ios_profile"&&(m.ios[B].provisioningProfilePath=Y)}e.stop(`\u2713 ${l.type} (${l.distributionType}) saved.`)}}catch(C){let A=C.response?.data?.message||C.message;e.stop(o.dim(`- Skipped ${l.type} (${l.distributionType}): ${A}`))}}h.writeFileSync(I,JSON.stringify(m,null,2)),r.success(o.green("\u2713 Local credentials.json updated.")),ve("Credentials have been synced to your local machine. Ensure credentials.json and credentials/ is added to your .gitignore.","Sync Complete")}catch(c){e.stop(o.red("Sync failed.")),r.error(`Error: ${c.message}`)}}function ke(){let n="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_+=",e="";for(let i=0;i<24;i++)e+=n.charAt(Math.floor(Math.random()*n.length));return e}function nt(n=8){let e="abcdefghijklmnopqrstuvwxyz0123456789",i="";for(let a=0;a<n;a++)i+=e.charAt(Math.floor(Math.random()*e.length));return i}async function it(n,e,i,a){let t=a||await Ce(e,n);if(!t||t.length===0)return!1;let s=await K({message:"Select a certificate to revoke:",options:[...t.map(c=>({value:`revoke:${c.id}`,label:`Revoke: ${c.name} (${c.expires})`})),{value:"nuke",label:"Revoke All"},{value:"cancel",label:"Cancel"}]});return v(s)||s==="cancel"?!1:s==="nuke"?(H(`fastlane match nuke ${n}`,{stdio:"inherit",cwd:process.cwd(),env:e}),!0):typeof s=="string"&&s.startsWith("revoke:")?(await st(e,s.split(":")[1]),!0):!1}async function Ce(n,e){let i=e==="development"?"development":"distribution",a=`
-lane :${f.fastlanePrefix}_list_certs do
-  require 'spaceship'
-  require 'json'
-  begin
-    Spaceship::Portal.login(ENV['FASTLANE_USER'])
-    Spaceship::Portal.select_team(team_id: ENV['FASTLANE_TEAM_ID'])
-    output = Spaceship::Portal.certificate.all.select { |c|
-      if "${i}" == "development"
-        c.type_display_id.downcase.include?("development")
-      else
-        c.type_display_id.downcase.include?("distribution") || c.type_display_id.downcase.include?("production")
-      end
-    }.map { |c| { id: c.id, name: c.name, expires: c.expires.strftime('%Y-%m-%d'), type: c.type_display_id } }
-    puts "${f.jsonStartMarker}" + output.to_json + "${f.jsonEndMarker}"
-  rescue => e
-    $stderr.puts "ERROR: #{e.message}"
-    exit 1
-  end
-end`,t=F.join(ye.tmpdir(),`/tmp/${f.nameLower}-list-certs-${Date.now()}`),s=F.join(t,"fastlane"),c=F.join(s,"Fastfile");try{h.existsSync(s)||h.mkdirSync(s,{recursive:!0}),h.writeFileSync(c,a);let g=H(`fastlane ${f.fastlanePrefix}_list_certs`,{env:{...n,CI:"1",FASTLANE_FASTFILE:c},cwd:t,stdio:["inherit","pipe","inherit"]}).toString().match(new RegExp(`${f.jsonStartMarker}(.*)${f.jsonEndMarker}`));return g?JSON.parse(g[1]):[]}finally{h.existsSync(t)&&h.rmSync(t,{recursive:!0,force:!0})}}async function st(n,e){let i=`
-lane :${f.fastlanePrefix}_revoke_cert do
-  require 'spaceship'
-  begin
-    Spaceship::Portal.login(ENV['FASTLANE_USER'])
-    Spaceship::Portal.select_team(team_id: ENV['FASTLANE_TEAM_ID'])
-    cert = Spaceship::Portal.certificate.all.find { |c| c.id == "${e}" }
-    cert.revoke! if cert
-  rescue => e
-    $stderr.puts "ERROR: #{e.message}"
-    exit 1
-  end
-end`,a=F.join(ye.tmpdir(),`/tmp/${f.nameLower}-revoke-cert-${Date.now()}`),t=F.join(a,"fastlane"),s=F.join(t,"Fastfile");try{h.existsSync(t)||h.mkdirSync(t,{recursive:!0}),h.writeFileSync(s,i),H(`fastlane ${f.fastlanePrefix}_revoke_cert`,{env:{...n,CI:"1",FASTLANE_FASTFILE:s},cwd:a,stdio:["inherit","pipe","inherit"]})}finally{h.existsSync(a)&&h.rmSync(a,{recursive:!0,force:!0})}}export{ot as a,L as b,ae as c,re as d,ct as e,Se as f,we as g,Le as h,tt as i};