@radhya/mach 1.9.6 → 1.9.8

package/README.md

@@ -29,11 +29,13 @@ mach build --platform android
 | Command                    | Description                                                        |
 | -------------------------- | ------------------------------------------------------------------ |
 | `mach login`               | Authenticate with Mach Dashboard                                   |
+| `mach logout`              | Remove saved local Mach credentials                                |
 | `mach init`                | Create a new Mach project                                          |
 | `mach link`                | Link local directory to an existing project                        |
 | `mach me`                  | Show current logged-in user                                        |
 | `mach build`               | Start a cloud build (iOS / Android)                                |
 | `mach maestro`             | Queue managed Maestro tests for a build or artifact                |
+| `mach update`              | Deploy an OTA update to a channel or branch                        |
 | `mach submit`              | Submit to App Store or Google Play                                 |
 | `mach credentials`         | Manage iOS certificates, provisioning profiles & Android keystores |
 | `mach credentials:service` | Upload App Store Connect or Google Play service credentials        |
@@ -42,7 +44,9 @@ mach build --platform android
 | `mach start`               | Start the Metro development server                                 |
 | `mach device`              | Register test devices for ad-hoc distribution                      |
 | `mach audit`               | Run automated security checks on your project                      |
-| `mach agent`               | Start the local device discovery agent for Install Hub             |
+| `mach agent`               | Manage the local device discovery agent for Install Hub            |
+| `mach host`                | Set up S3 static hosting and CloudFront                            |
+| `mach sitemap`             | Generate sitemap.xml from Expo Router app routes                   |
 
 ## Managed Maestro Testing
 
@@ -55,6 +59,17 @@ mach maestro --build-id <buildId>
 ```
 
 Mach manages the test execution infrastructure for you, so projects do not need a separate Maestro Cloud setup.
+Managed Android Maestro runs need an APK artifact and a `.maestro` flow file or directory in the build source zip. Add the flows before creating the build so the runner can download `builds/<buildId>/source.zip` and execute them.
+
+Useful options:
+
+| Flag                       | Description                                                  |
+| -------------------------- | ------------------------------------------------------------ |
+| `--maestro`                | Queue tests automatically after a successful `mach build`    |
+| `--maestro-flows <path>`   | Flow file or directory, defaults to `.maestro`               |
+| `--maestro-device <name>`  | Managed runner device profile, defaults to Android Pixel 6   |
+| `--maestro-retries <n>`    | Retry count for failed runs, from 0 to 10                    |
+| `--maestro-record`         | Enable recording when supported by the runner                |
 
 ## Cloud Builds
 
@@ -73,6 +88,26 @@ mach build --platform ios --local
 
 Installable artifacts are downloaded through Mach public file routes, not raw S3 URLs. Public build pages and QR install links use the configured files domain (for example `https://files.getmach.dev`) so users do not see bucket names or presigned S3 URLs.
 
+## Local Device Agent
+
+The Install Hub can install builds on connected local devices when the Mach agent is running on your machine.
+
+```bash
+# Run in the foreground
+mach agent
+
+# Install as a background login service/task
+mach agent install
+
+# Inspect or control the background agent
+mach agent status
+mach agent restart
+mach agent stop
+mach agent uninstall
+```
+
+`mach agent` is local-only and does not require Dashboard authentication. It exposes device discovery and install endpoints on `http://127.0.0.1:7070`.
+
 ### Build Options
 
 | Flag             | Description                                                                      |
@@ -404,9 +439,11 @@ mach audit --json   # CI/CD-friendly JSON output
 
 ```bash
 mach login
+mach logout
 ```
 
 Credentials are stored in `~/.mach/credentials.json`.
+`mach logout` removes this local credentials file. If `MACH_TOKEN` is set in the shell, unset it separately.
 
 ### CI/CD (Token-based)
 

package/dist/{chunk-NZ4K6LDA.js → chunk-HIP5BA3H.js}

@@ -1,4 +1,4 @@
-var n={name:"Mach",nameLower:"mach",nameUpper:"MACH",company:"Radhya Softlabs",npmScope:"@radhya",configFileName:"mach.config.json",configDir:".mach",workspacesDir:".mach-workspaces",remoteWorkspacesDir:"mach_workspaces",envPrefix:"MACH_",bucketPrefix:"mach-builds",buildPrefix:"mach-build",credentialsKeychain:"mach-credentials.keychain",keychainPassword:"mach",cliTag:e=>` Mach CLI - ${e} `,fastlanePrefix:"mach",jsonStartMarker:"___MACH_JSON_START___",jsonEndMarker:"___MACH_JSON_END___",prewarmedMarker:"/opt/mach-prewarmed"};import i from"fs";import f from"path";import k from"os";import x from"axios";var m=f.join(k.homedir(),n.configDir),u=f.join(m,"credentials.json");function l(){return process.env[`${n.envPrefix}TOKEN`]?.trim()||void 0}function _(e){i.existsSync(m)||i.mkdirSync(m,{recursive:!0}),i.writeFileSync(u,JSON.stringify(e,null,2))}function c(){let e=l();if(e)return{token:e,email:"token-auth"};if(!i.existsSync(u))return null;try{return JSON.parse(i.readFileSync(u,"utf-8"))}catch{return null}}function w(){let e=l();if(e)return{token:e,email:"token-auth"};let r=c();if(r?.token)return r;console.error(`\x1B[31mAuthentication required.\x1B[0m Either:
+var n={name:"Mach",nameLower:"mach",nameUpper:"MACH",company:"Radhya Softlabs",npmScope:"@radhya",configFileName:"mach.config.json",configDir:".mach",workspacesDir:".mach-workspaces",remoteWorkspacesDir:"mach_workspaces",envPrefix:"MACH_",bucketPrefix:"mach-builds",buildPrefix:"mach-build",credentialsKeychain:"mach-credentials.keychain",keychainPassword:"mach",cliTag:e=>` Mach CLI - ${e} `,fastlanePrefix:"mach",jsonStartMarker:"___MACH_JSON_START___",jsonEndMarker:"___MACH_JSON_END___",prewarmedMarker:"/opt/mach-prewarmed"};import s from"fs";import f from"path";import k from"os";import x from"axios";var u=f.join(k.homedir(),n.configDir),a=f.join(u,"credentials.json");function l(){return process.env[`${n.envPrefix}TOKEN`]?.trim()||void 0}function _(e){s.existsSync(u)||s.mkdirSync(u,{recursive:!0}),s.writeFileSync(a,JSON.stringify(e,null,2))}function m(){let e=l();if(e)return{token:e,email:"token-auth"};if(!s.existsSync(a))return null;try{return JSON.parse(s.readFileSync(a,"utf-8"))}catch{return null}}function w(){return s.existsSync(a)?(s.unlinkSync(a),!0):!1}function D(){let e=l();if(e)return{token:e,email:"token-auth"};let r=m();if(r?.token)return r;console.error(`\x1B[31mAuthentication required.\x1B[0m Either:
   1. Run \x1B[33m${n.nameLower} login\x1B[0m for interactive login
-  2. Set \x1B[33m${n.envPrefix}TOKEN\x1B[0m environment variable for CI/CD`),process.exit(1)}async function d(e){let r=c();if(!r||!r.refreshToken)return null;try{let t=await x.post(`${e}/refresh-token`,{username:r.email,refreshToken:r.refreshToken});if(t.data.status==="success"&&t.data.user){let o={...r,id:t.data.user.id||r.id,token:t.data.user.token,refreshToken:t.data.user.refreshToken||r.refreshToken};return _(o),o.token}}catch{}return null}import g from"axios";import T from"dotenv";import p from"path";import{fileURLToPath as y}from"url";var A=p.dirname(y(import.meta.url));T.config({path:p.join(A,"../.env")});var s=process.env[`${n.envPrefix}API_URL`]||"https://mach-api.securejs.in",C="https://getmach.dev",v=s.includes("localhost:3001")||s.includes("127.0.0.1:3001")?s.replace("3001","8081"):C,j=process.env[`${n.envPrefix}DASHBOARD_URL`]||v;var a=g.create({baseURL:s,headers:{Connection:"close"}});a.interceptors.request.use(e=>{let t=c()?.token||process.env[`${n.envPrefix}TOKEN`];return t&&(e.headers.Authorization=`Bearer ${t}`),e},e=>Promise.reject(e));a.interceptors.response.use(e=>e,async e=>{let{config:r}=e;if((!e.response||e.code==="ECONNRESET"||e.code==="ETIMEDOUT")&&(!r._retryCount||r._retryCount<3)){r._retryCount=(r._retryCount||0)+1;let o=Math.pow(2,r._retryCount-1)*1e3;return console.warn(`\x1B[33m[NETWORK] Transient error (${e.code||"UNKNOWN"}). Retrying in ${o/1e3}s... (Attempt ${r._retryCount}/3)\x1B[0m`),await new Promise(h=>setTimeout(h,o)),a(r)}return Promise.reject(e)});a.interceptors.response.use(e=>e,async e=>{let r=e.config;if(e.response?.status===401&&!r._retry){if(r._retry=!0,process.env[`${n.envPrefix}TOKEN`])return console.error(`\x1B[31mAuthentication failed.\x1B[0m Your ${n.envPrefix}TOKEN may be invalid or expired.
-Generate a new token at the ${n.name} Dashboard \u2192 Settings \u2192 Access Tokens.`),Promise.reject(e);try{let o=await d(s);if(o)return r.headers.Authorization=`Bearer ${o}`,a(r)}catch(o){return Promise.reject(o)}}return Promise.reject(e)});export{n as a,_ as b,c,w as d,s as e,j as f,a as g};
+  2. Set \x1B[33m${n.envPrefix}TOKEN\x1B[0m environment variable for CI/CD`),process.exit(1)}async function d(e){let r=m();if(!r||!r.refreshToken)return null;try{let t=await x.post(`${e}/refresh-token`,{username:r.email,refreshToken:r.refreshToken});if(t.data.status==="success"&&t.data.user){let o={...r,id:t.data.user.id||r.id,token:t.data.user.token,refreshToken:t.data.user.refreshToken||r.refreshToken};return _(o),o.token}}catch{}return null}import g from"axios";import T from"dotenv";import p from"path";import{fileURLToPath as y}from"url";var A=p.dirname(y(import.meta.url));T.config({path:p.join(A,"../.env")});var i=process.env[`${n.envPrefix}API_URL`]||"https://mach-api.securejs.in",C="https://getmach.dev",v=i.includes("localhost:3001")||i.includes("127.0.0.1:3001")?i.replace("3001","8081"):C,L=process.env[`${n.envPrefix}DASHBOARD_URL`]||v;var c=g.create({baseURL:i,headers:{Connection:"close"}});c.interceptors.request.use(e=>{let t=m()?.token||process.env[`${n.envPrefix}TOKEN`];return t&&(e.headers.Authorization=`Bearer ${t}`),e},e=>Promise.reject(e));c.interceptors.response.use(e=>e,async e=>{let{config:r}=e;if((!e.response||e.code==="ECONNRESET"||e.code==="ETIMEDOUT")&&(!r._retryCount||r._retryCount<3)){r._retryCount=(r._retryCount||0)+1;let o=Math.pow(2,r._retryCount-1)*1e3;return console.warn(`\x1B[33m[NETWORK] Transient error (${e.code||"UNKNOWN"}). Retrying in ${o/1e3}s... (Attempt ${r._retryCount}/3)\x1B[0m`),await new Promise(h=>setTimeout(h,o)),c(r)}return Promise.reject(e)});c.interceptors.response.use(e=>e,async e=>{let r=e.config;if(e.response?.status===401&&!r._retry){if(r._retry=!0,process.env[`${n.envPrefix}TOKEN`])return console.error(`\x1B[31mAuthentication failed.\x1B[0m Your ${n.envPrefix}TOKEN may be invalid or expired.
+Generate a new token at the ${n.name} Dashboard \u2192 Settings \u2192 Access Tokens.`),Promise.reject(e);try{let o=await d(i);if(o)return r.headers.Authorization=`Bearer ${o}`,c(r)}catch(o){return Promise.reject(o)}}return Promise.reject(e)});export{n as a,_ as b,m as c,w as d,D as e,i as f,L as g,c as h};

package/dist/chunk-K7ILUOUP.js

@@ -0,0 +1,61 @@
+import{a as m,h as v}from"./chunk-HIP5BA3H.js";import{log as r,spinner as se,text as L,password as le,select as z,confirm as Me,isCancel as k,cancel as _,intro as ze,outro as Qe,note as Ne}from"@clack/prompts";import{log as V,spinner as ie,text as K,select as q,isCancel as E,cancel as O,note as ce,confirm as Se}from"@clack/prompts";import G from"chalk";import{spawnSync as ne}from"child_process";import X from"fs";import x from"path";import Ie from"os";import ae from"fs";function St(e){if(e){if(!ae.existsSync(e))return null;try{return JSON.parse(ae.readFileSync(e,"utf-8"))}catch{return null}}if(!ae.existsSync(`./${m.configFileName}`))return null;try{return JSON.parse(ae.readFileSync(`./${m.configFileName}`,"utf-8"))}catch{return null}}function j(e,t,n=new Set){if(n.has(t))throw new Error(`Circular inheritance detected in profile: ${t}`);n.add(t);let a=e.build?.[t];if(!a)return null;let i={...a};if(a.extends){let s=j(e,a.extends,n);s&&(i={...s,...a,env:{...s.env,...a.env},ios:{...s.ios,...a.ios},android:{...s.android,...a.android}})}if(i.envGroups&&Array.isArray(i.envGroups)){let s={};for(let o of i.envGroups){let g=e.envGroups?.[o];g?Object.assign(s,g):log.warn(`Environment group not found: ${o}`)}i.env={...s,...i.env}}return i}function re(e,t){let n=t?j(e,t)||{}:{};if(n.android?.package)return n.android.package;if(n.androidPackage)return n.androidPackage;if(e.android?.package)return e.android.package;if(e.expo?.android?.package)return e.expo.android.package}function oe(e,t){let n=t?j(e,t)||{}:{};if(n.ios?.bundleIdentifier)return n.ios.bundleIdentifier;if(n.iosBundleIdentifier)return n.iosBundleIdentifier;if(e.ios?.bundleIdentifier)return e.ios.bundleIdentifier;if(e.ios?.bundleId)return e.ios.bundleId;if(e.expo?.ios?.bundleIdentifier)return e.expo.ios.bundleIdentifier}var wt=(e,t=`${m.envPrefix}`)=>{let n={},a=(i,s)=>{if(i)for(let o in i){let g=i[o],d=`${s}${o.toUpperCase().replace(/[^A-Z0-9]/g,"_")}`;g!==null&&typeof g=="object"&&!Array.isArray(g)?a(g,`${d}_`):n[d]=String(g)}};return a(e,t),n};var Te="cmVxdWlyZSAnc3BhY2VzaGlwJwpyZXF1aXJlICdqc29uJwoKZGVmIHJlYWRfdGVhbV9maWVsZCh0ZWFtLCAqa2V5cykKICBrZXlzLmVhY2ggZG8gfGtleXwKICAgIGJlZ2luCiAgICAgIHZhbHVlID0gdGVhbVtrZXldIGlmIHRlYW0ucmVzcG9uZF90bz8oOltdKQogICAgICByZXR1cm4gdmFsdWUgaWYgdmFsdWUgJiYgdmFsdWUudG9fcy5sZW5ndGggPiAwCiAgICByZXNjdWUKICAgIGVuZAoKICAgIG1ldGhvZF9uYW1lID0ga2V5LnRvX3MKICAgIGlmIHRlYW0ucmVzcG9uZF90bz8obWV0aG9kX25hbWUpCiAgICAgIHZhbHVlID0gdGVhbS5wdWJsaWNfc2VuZChtZXRob2RfbmFtZSkKICAgICAgcmV0dXJuIHZhbHVlIGlmIHZhbHVlICYmIHZhbHVlLnRvX3MubGVuZ3RoID4gMAogICAgZW5kCiAgZW5kCgogIG5pbAplbmQKCmRlZiBub3JtYWxpemVfdGVhbV9uYW1lKG5hbWUpCiAgbmFtZS50b19zLmRvd25jYXNlLmdzdWIoL1teYS16MC05XSsvLCAnICcpLnN0cmlwCmVuZAoKZGVmIHBvcnRhbF90ZWFtX25hbWUKICB0ZWFtX2lkID0gRU5WWydGQVNUTEFORV9URUFNX0lEJ10udG9fcwogIHRlYW1zID0gU3BhY2VzaGlwOjpQb3J0YWwuY2xpZW50LnRlYW1zCiAgdGVhbXMgPSB0ZWFtcy52YWx1ZXMgaWYgdGVhbXMuaXNfYT8oSGFzaCkKCiAgdGVhbSA9IEFycmF5KHRlYW1zKS5maW5kIGRvIHx0fAogICAgWwogICAgICByZWFkX3RlYW1fZmllbGQodCwgJ3RlYW1JZCcsIDp0ZWFtSWQpLAogICAgICByZWFkX3RlYW1fZmllbGQodCwgJ3RlYW1faWQnLCA6dGVhbV9pZCksCiAgICAgIHJlYWRfdGVhbV9maWVsZCh0LCAnaWQnLCA6aWQpCiAgICBdLmNvbXBhY3QubWFwKCY6dG9fcykuaW5jbHVkZT8odGVhbV9pZCkKICBlbmQKCiAgcmVhZF90ZWFtX2ZpZWxkKHRlYW0sICduYW1lJywgOm5hbWUsICd0ZWFtTmFtZScsIDp0ZWFtTmFtZSwgJ2Rpc3BsYXlOYW1lJywgOmRpc3BsYXlOYW1lKQpyZXNjdWUgPT4gZQogICRzdGRlcnIucHV0cyAiREVCVUc6IENvdWxkIG5vdCByZXNvbHZlIERldmVsb3BlciBQb3J0YWwgdGVhbSBuYW1lOiAje2UubWVzc2FnZX0iCiAgbmlsCmVuZAoKZGVmIHR1bmVzX3RlYW1faWQodGVhbSkKICByZWFkX3RlYW1fZmllbGQoCiAgICB0ZWFtLAogICAgJ3Byb3ZpZGVySWQnLCA6cHJvdmlkZXJJZCwKICAgICdwcm92aWRlcl9pZCcsIDpwcm92aWRlcl9pZCwKICAgICdjb250ZW50UHJvdmlkZXJJZCcsIDpjb250ZW50UHJvdmlkZXJJZCwKICAgICdjb250ZW50X3Byb3ZpZGVyX2lkJywgOmNvbnRlbnRfcHJvdmlkZXJfaWQsCiAgICAndGVhbUlkJywgOnRlYW1JZCwKICAgICd0ZWFtX2lkJywgOnRlYW1faWQsCiAgICAnaWQnLCA6aWQKICApLnRvX3MKZW5kCgpkZWYgdHVuZXNfdGVhbV9uYW1lKHRlYW0pCiAgcmVhZF90ZWFtX2ZpZWxkKAogICAgdGVhbSwKICAgICduYW1lJywgOm5hbWUsCiAgICAnY29udGVudFByb3ZpZGVyTmFtZScsIDpjb250ZW50UHJvdmlkZXJOYW1lLAogICAgJ2NvbnRlbnRfcHJvdmlkZXJfbmFtZScsIDpjb250ZW50X3Byb3ZpZGVyX25hbWUsCiAgICAndGVhbU5hbWUnLCA6dGVhbU5hbWUsCiAgICAnZGlzcGxheU5hbWUnLCA6ZGlzcGxheU5hbWUKICApLnRvX3MKZW5kCgpkZWYgYXZhaWxhYmxlX3R1bmVzX3RlYW1zCiAgdGVhbXMgPSBTcGFjZXNoaXA6OlR1bmVzLmNsaWVudC50ZWFtcwogIHRlYW1zID0gdGVhbXMudmFsdWVzIGlmIHRlYW1zLmlzX2E/KEhhc2gpCiAgQXJyYXkodGVhbXMpCnJlc2N1ZSA9PiBlCiAgJHN0ZGVyci5wdXRzICJERUJVRzogQ291bGQgbm90IGluc3BlY3QgQXBwIFN0b3JlIENvbm5lY3QgdGVhbXM6ICN7ZS5tZXNzYWdlfSIKICBbXQplbmQKCmRlZiBzZWxlY3RfYXBwX3N0b3JlX2Nvbm5lY3RfdGVhbQogIGV4cGxpY2l0X3RlYW1faWQgPSBFTlZbJ0ZBU1RMQU5FX0lUQ19URUFNX0lEJ10gfHwgRU5WWydGQVNUTEFORV9BU0NfVEVBTV9JRCddCiAgaWYgZXhwbGljaXRfdGVhbV9pZCAmJiBleHBsaWNpdF90ZWFtX2lkLnRvX3MubGVuZ3RoID4gMAogICAgU3BhY2VzaGlwOjpUdW5lcy5zZWxlY3RfdGVhbSh0ZWFtX2lkOiBleHBsaWNpdF90ZWFtX2lkKQogICAgcmV0dXJuIGV4cGxpY2l0X3RlYW1faWQKICBlbmQKCiAgZGV2ZWxvcGVyX3RlYW1faWQgPSBFTlZbJ0ZBU1RMQU5FX1RFQU1fSUQnXS50b19zCiAgZGV2ZWxvcGVyX3RlYW1fbmFtZSA9IHBvcnRhbF90ZWFtX25hbWUKICB0ZWFtcyA9IGF2YWlsYWJsZV90dW5lc190ZWFtcwoKICBpZiBkZXZlbG9wZXJfdGVhbV9uYW1lICYmIGRldmVsb3Blcl90ZWFtX25hbWUubGVuZ3RoID4gMAogICAgbm9ybWFsaXplZF9kZXZlbG9wZXJfbmFtZSA9IG5vcm1hbGl6ZV90ZWFtX25hbWUoZGV2ZWxvcGVyX3RlYW1fbmFtZSkKICAgIG1hdGNoZWRfdGVhbSA9IHRlYW1zLmZpbmQgeyB8dGVhbXwgbm9ybWFsaXplX3RlYW1fbmFtZSh0dW5lc190ZWFtX25hbWUodGVhbSkpID09IG5vcm1hbGl6ZWRfZGV2ZWxvcGVyX25hbWUgfQoKICAgIGlmIG1hdGNoZWRfdGVhbQogICAgICBtYXRjaGVkX2lkID0gdHVuZXNfdGVhbV9pZChtYXRjaGVkX3RlYW0pCiAgICAgIG1hdGNoZWRfbmFtZSA9IHR1bmVzX3RlYW1fbmFtZShtYXRjaGVkX3RlYW0pCiAgICAgIFNwYWNlc2hpcDo6VHVuZXMuc2VsZWN0X3RlYW0odGVhbV9pZDogbWF0Y2hlZF9pZCkKICAgICAgJHN0ZGVyci5wdXRzICJERUJVRzogQXV0by1zZWxlY3RlZCBBcHAgU3RvcmUgQ29ubmVjdCB0ZWFtICN7bWF0Y2hlZF9pZH0gKCN7bWF0Y2hlZF9uYW1lfSkgZm9yIERldmVsb3BlciBUZWFtICN7ZGV2ZWxvcGVyX3RlYW1faWR9IgogICAgICByZXR1cm4gbWF0Y2hlZF9pZAogICAgZW5kCiAgZW5kCgogIGlmIHRlYW1zLmxlbmd0aCA9PSAxCiAgICBvbmx5X3RlYW0gPSB0ZWFtcy5maXJzdAogICAgb25seV90ZWFtX2lkID0gdHVuZXNfdGVhbV9pZChvbmx5X3RlYW0pCiAgICBTcGFjZXNoaXA6OlR1bmVzLnNlbGVjdF90ZWFtKHRlYW1faWQ6IG9ubHlfdGVhbV9pZCkKICAgICRzdGRlcnIucHV0cyAiREVCVUc6IEF1dG8tc2VsZWN0ZWQgb25seSBBcHAgU3RvcmUgQ29ubmVjdCB0ZWFtICN7b25seV90ZWFtX2lkfSAoI3t0dW5lc190ZWFtX25hbWUob25seV90ZWFtKX0pIgogICAgcmV0dXJuIG9ubHlfdGVhbV9pZAogIGVuZAoKICAkc3RkZXJyLnB1dHMgIkVSUk9SOiBDb3VsZCBub3QgbWFwIEFwcGxlIERldmVsb3BlciBUZWFtIElEICcje2RldmVsb3Blcl90ZWFtX2lkfScje2RldmVsb3Blcl90ZWFtX25hbWUgPyAiICgje2RldmVsb3Blcl90ZWFtX25hbWV9KSIgOiAnJ30gdG8gQXBwIFN0b3JlIENvbm5lY3QuIgogICRzdGRlcnIucHV0cyAiQXZhaWxhYmxlIEFwcCBTdG9yZSBDb25uZWN0IHRlYW1zOiIKICB0ZWFtcy5lYWNoIGRvIHx0ZWFtfAogICAgJHN0ZGVyci5wdXRzICItICN7dHVuZXNfdGVhbV9pZCh0ZWFtKX0gKCN7dHVuZXNfdGVhbV9uYW1lKHRlYW0pfSkiCiAgZW5kCiAgZXhpdCAxCmVuZAoKZGVmIGxpc3RfdGVhbXMKICBiZWdpbgogICAgU3BhY2VzaGlwOjpQb3J0YWwubG9naW4oRU5WWydGQVNUTEFORV9VU0VSJ10pCiAgICBTcGFjZXNoaXA6OlBvcnRhbC5zZWxlY3RfdGVhbSh0ZWFtX2lkOiBFTlZbJ0ZBU1RMQU5FX1RFQU1fSUQnXSkKCiAgICBkZXZlbG9wZXJfdGVhbV9uYW1lID0gcG9ydGFsX3RlYW1fbmFtZQoKICAgIFNwYWNlc2hpcDo6VHVuZXMubG9naW4oRU5WWydGQVNUTEFORV9VU0VSJ10pCiAgICBub3JtYWxpemVkX2RldmVsb3Blcl9uYW1lID0gbm9ybWFsaXplX3RlYW1fbmFtZShkZXZlbG9wZXJfdGVhbV9uYW1lKQogICAgdGVhbXMgPSBhdmFpbGFibGVfdHVuZXNfdGVhbXMubWFwIGRvIHx0ZWFtfAogICAgICB0ZWFtX25hbWUgPSB0dW5lc190ZWFtX25hbWUodGVhbSkKICAgICAgewogICAgICAgIGlkOiB0dW5lc190ZWFtX2lkKHRlYW0pLAogICAgICAgIG5hbWU6IHRlYW1fbmFtZSwKICAgICAgICByZWNvbW1lbmRlZDogbm9ybWFsaXplZF9kZXZlbG9wZXJfbmFtZS5sZW5ndGggPiAwICYmIG5vcm1hbGl6ZV90ZWFtX25hbWUodGVhbV9uYW1lKSA9PSBub3JtYWxpemVkX2RldmVsb3Blcl9uYW1lCiAgICAgIH0KICAgIGVuZAoKICAgIHB1dHMgIl9fX01BQ0hfSlNPTl9TVEFSVF9fXyIgKyB7CiAgICAgIGRldmVsb3BlclRlYW1JZDogRU5WWydGQVNUTEFORV9URUFNX0lEJ10sCiAgICAgIGRldmVsb3BlclRlYW1OYW1lOiBkZXZlbG9wZXJfdGVhbV9uYW1lLAogICAgICB0ZWFtczogdGVhbXMKICAgIH0udG9fanNvbiArICJfX19NQUNIX0pTT05fRU5EX19fIgogIHJlc2N1ZSA9PiBlCiAgICAkc3RkZXJyLnB1dHMgIkVSUk9SOiAje2UubWVzc2FnZX0iCiAgICBleGl0IDEKICBlbmQKZW5kCgpkZWYgbGlzdF9rZXlzCiAgYmVnaW4KICAgIFNwYWNlc2hpcDo6UG9ydGFsLmxvZ2luKEVOVlsnRkFTVExBTkVfVVNFUiddKQogICAgU3BhY2VzaGlwOjpQb3J0YWwuc2VsZWN0X3RlYW0odGVhbV9pZDogRU5WWydGQVNUTEFORV9URUFNX0lEJ10pCiAgICAKICAgIFNwYWNlc2hpcDo6VHVuZXMubG9naW4oRU5WWydGQVNUTEFORV9VU0VSJ10pCiAgICBzZWxlY3RfYXBwX3N0b3JlX2Nvbm5lY3RfdGVhbQogICAgCiAgICAjIFVzZSBUdW5lcyBjbGllbnQgd2hpY2ggcG9pbnRzIHRvIGFwcHN0b3JlY29ubmVjdC5hcHBsZS5jb20KICAgIGNsaWVudCA9IFNwYWNlc2hpcDo6VHVuZXMuY2xpZW50CiAgICAjIFVzZSByb290LXJlbGF0aXZlIFVSTCB0byByZXBsYWNlIHRoZSBkZWZhdWx0IFR1bmVzIHBhdGggKC9XZWJPYmplY3RzLy4uLikKICAgIHJlc3BvbnNlID0gY2xpZW50LnJlcXVlc3QoOmdldCwgJy9pcmlzL3YxL2FwaUtleXMnKQogICAgCiAgICBpZiByZXNwb25zZS5ib2R5Lm5pbD8gfHwgIXJlc3BvbnNlLmJvZHkuaXNfYT8oSGFzaCkKICAgICAgcmFpc2UgIkFQSSByZXR1cm5lZCBlbXB0eSBvciBpbnZhbGlkIHJlc3BvbnNlIGJvZHkgZm9yIGxpc3Rpbmcga2V5cyIKICAgIGVuZAogICAgCiAgICAkc3RkZXJyLnB1dHMgIkRFQlVHOiBGdWxsIExpc3QgUmVzcG9uc2U6ICN7cmVzcG9uc2UuYm9keS50b19qc29ufSIKICAgIAogICAga2V5cyA9IHJlc3BvbnNlLmJvZHlbJ2RhdGEnXSB8fCBbXQogICAgCiAgICBvdXRwdXQgPSBrZXlzLm1hcCBkbyB8a3wKICAgICAgYXR0ciA9IGtbJ2F0dHJpYnV0ZXMnXSB8fCB7fQogICAgICB7CiAgICAgICAgaWQ6IGtbJ2lkJ10sCiAgICAgICAgbmFtZTogYXR0clsnbmFtZSddLAogICAgICAgIGlzc3VlcklkOiBhdHRyWydpc3N1ZXJJZCddLAogICAgICAgIHJvbGU6IGF0dHJbJ3JvbGVzJ10mLmZpcnN0LAogICAgICAgIHJldm9jYWJsZTogYXR0clsncmV2b2NhYmxlJ10KICAgICAgfQogICAgZW5kCiAgICAKICAgIHB1dHMgIl9fX01BQ0hfSlNPTl9TVEFSVF9fXyIgKyBvdXRwdXQudG9fanNvbiArICJfX19NQUNIX0pTT05fRU5EX19fIgogIHJlc2N1ZSA9PiBlCiAgICAkc3RkZXJyLnB1dHMgIkVSUk9SOiAje2UubWVzc2FnZX0iCiAgICBpZiBkZWZpbmVkPyhyZXNwb25zZSkgJiYgcmVzcG9uc2UgJiYgcmVzcG9uc2UuYm9keQogICAgICAkc3RkZXJyLnB1dHMgIlJlc3BvbnNlIEJvZHk6ICN7cmVzcG9uc2UuYm9keS50b19qc29ufSIKICAgIGVuZAogICAgZXhpdCAxCiAgZW5kCmVuZAoKZGVmIGNyZWF0ZV9rZXkobmFtZSwgcm9sZSA9ICdBRE1JTicpCiAgYmVnaW4KICAgIFNwYWNlc2hpcDo6UG9ydGFsLmxvZ2luKEVOVlsnRkFTVExBTkVfVVNFUiddKQogICAgU3BhY2VzaGlwOjpQb3J0YWwuc2VsZWN0X3RlYW0odGVhbV9pZDogRU5WWydGQVNUTEFORV9URUFNX0lEJ10pCiAgICAKICAgIFNwYWNlc2hpcDo6VHVuZXMubG9naW4oRU5WWydGQVNUTEFORV9VU0VSJ10pCiAgICBzZWxlY3RfYXBwX3N0b3JlX2Nvbm5lY3RfdGVhbQogICAgCiAgICBjbGllbnQgPSBTcGFjZXNoaXA6OlR1bmVzLmNsaWVudAogICAgCiAgICAjIFRydW5jYXRlIG5pY2tuYW1lIHRvIDMwIGNoYXJzIGFzIHBlciBBcHBsZSdzIGxpbWl0CiAgICAjIFdlIGtlZXAgdGhlIG9yaWdpbmFsICduYW1lJyBmb3IgbG9nZ2luZyBidXQgc2VuZCB0cnVuY2F0ZWQgJ25pY2tuYW1lJyB0byBBUEkKICAgIHNhZmVfbmlja25hbWUgPSBuYW1lWzAsIDMwXQogICAgCiAgICBwYXlsb2FkID0gewogICAgICBkYXRhOiB7CiAgICAgICAgdHlwZTogImFwaUtleXMiLAogICAgICAgIGF0dHJpYnV0ZXM6IHsKICAgICAgICAgIG5pY2tuYW1lOiBzYWZlX25pY2tuYW1lLAogICAgICAgICAga2V5VHlwZTogIlBVQkxJQ19BUEkiLAogICAgICAgICAgcm9sZXM6IFtyb2xlXSwKICAgICAgICAgIGFsbEFwcHNWaXNpYmxlOiB0cnVlCiAgICAgICAgfQogICAgICB9CiAgICB9CiAgICAKICAgIHJlc3BvbnNlID0gY2xpZW50LnJlcXVlc3QoOnBvc3QpIGRvIHxyZXF8CiAgICAgIHJlcS51cmwgIi9pcmlzL3YxL2FwaUtleXMiCiAgICAgIHJlcS5ib2R5ID0gcGF5bG9hZC50b19qc29uCiAgICAgIHJlcS5oZWFkZXJzWydDb250ZW50LVR5cGUnXSA9ICdhcHBsaWNhdGlvbi9qc29uJwogICAgICByZXEuaGVhZGVyc1snQWNjZXB0J10gPSAnYXBwbGljYXRpb24vdm5kLmFwaStqc29uLCBhcHBsaWNhdGlvbi9qc29uLCB0ZXh0L2phdmFzY3JpcHQsICovKjsgcT0wLjAxJwogICAgICByZXEuaGVhZGVyc1snWC1SZXF1ZXN0ZWQtV2l0aCddID0gJ1hNTEh0dHBSZXF1ZXN0JwogICAgICByZXEuaGVhZGVyc1snUmVmZXJlciddID0gJ2h0dHBzOi8vYXBwc3RvcmVjb25uZWN0LmFwcGxlLmNvbS9hY2Nlc3MvYXBpJwogICAgICByZXEuaGVhZGVyc1snWC1BcHBsZS1XaWRnZXQtS2V5J10gPSBjbGllbnQud2lkZ2V0X2tleSBpZiBjbGllbnQucmVzcG9uZF90bz8oOndpZGdldF9rZXkpCiAgICBlbmQKICAgIAogICAgIyBERUJVRzogSW5zcGVjdCB0aGUgcmF3IHJlc3BvbnNlIG9iamVjdAogICAgJHN0ZGVyci5wdXRzICJERUJVRzogUmVzcG9uc2UgQ2xhc3M6ICN7cmVzcG9uc2UuY2xhc3N9IgogICAgJHN0ZGVyci5wdXRzICJERUJVRzogUmVzcG9uc2UgSGVhZGVyczogI3tyZXNwb25zZS5oZWFkZXJzfSIKICAgICRzdGRlcnIucHV0cyAiREVCVUc6IFJlc3BvbnNlIEJvZHk6ICN7cmVzcG9uc2UuYm9keS50b19qc29ufSIKICAgIAogICAgaWYgcmVzcG9uc2UuYm9keS5uaWw/IHx8ICFyZXNwb25zZS5ib2R5LmlzX2E/KEhhc2gpIHx8IHJlc3BvbnNlLmJvZHlbJ2RhdGEnXS5uaWw/CiAgICAgIGVycm9yX21zZyA9ICJBUEkgZmFpbGVkIHRvIGNyZWF0ZSBrZXkuIgogICAgICBpZiByZXNwb25zZS5ib2R5ICYmIHJlc3BvbnNlLmJvZHlbJ2Vycm9ycyddCiAgICAgICAgZXJyb3JfbXNnICs9ICIgRXJyb3JzOiAiICsgcmVzcG9uc2UuYm9keVsnZXJyb3JzJ10ubWFwe3xlfCBlWydkZXRhaWwnXX0uam9pbignLCAnKQogICAgICBlbmQKICAgICAgcmFpc2UgZXJyb3JfbXNnCiAgICBlbmQKICAgIAogICAga2V5X2RhdGEgPSByZXNwb25zZS5ib2R5WydkYXRhJ10KICAgIGF0dHIgPSBrZXlfZGF0YVsnYXR0cmlidXRlcyddIHx8IHt9CgogICAgIyBUaGUgLnA4IGNvbnRlbnQgaXMgdXN1YWxseSBpbiAncHJpdmF0ZUtleScgb3IgJ2tleUNvbnRlbnQnIG9uIHRoZSBJTklUSUFMIENSRUFURSByZXNwb25zZQogICAgcDhfY29udGVudCA9IGF0dHJbJ3ByaXZhdGVLZXknXSB8fCBhdHRyWydrZXlDb250ZW50J10KICAgIAogICAgaWYgcDhfY29udGVudC5uaWw/CiAgICAgICRzdGRlcnIucHV0cyAiREVCVUc6IEtleSBjb250ZW50IG1pc3NpbmcgaW4gcmVzcG9uc2UuIEF0dGVtcHRpbmcgcmV0cmlldmFsIHZpYSBkb3dubG9hZC9leHBvcnQgZW5kcG9pbnRzLi4uIiAKICAgICAgCiAgICAgIHBhdGhzX3RvX3RyeSA9IFsKICAgICAgICAiaHR0cHM6Ly9hcHBzdG9yZWNvbm5lY3QuYXBwbGUuY29tL2lyaXMvdjEvYXBpS2V5cy8je2tleV9kYXRhWydpZCddfS9kb3dubG9hZCIsCiAgICAgICAgImh0dHBzOi8vYXBwc3RvcmVjb25uZWN0LmFwcGxlLmNvbS9pcmlzL3YxL2FwaUtleXMvI3trZXlfZGF0YVsnaWQnXX0vZXhwb3J0IgogICAgICBdCiAgICAgIAogICAgICBwYXRoc190b190cnkuZWFjaCBkbyB8cGF0aHwKICAgICAgICBiZWdpbgogICAgICAgICAgJHN0ZGVyci5wdXRzICJERUJVRzogVHJ5aW5nICN7cGF0aH0uLi4iCiAgICAgICAgICBkb3dubG9hZF9yZXNwID0gY2xpZW50LnJlcXVlc3QoOmdldCkgZG8gfHJlcXwKICAgICAgICAgICAgcmVxLnVybCBwYXRoCiAgICAgICAgICAgIHJlcS5oZWFkZXJzWydBY2NlcHQnXSA9ICdhcHBsaWNhdGlvbi92bmQuYXBpK2pzb24sIGFwcGxpY2F0aW9uL2pzb24sIHRleHQvamF2YXNjcmlwdCwgKi8qOyBxPTAuMDEnCiAgICAgICAgICAgIHJlcS5oZWFkZXJzWydYLVJlcXVlc3RlZC1XaXRoJ10gPSAnWE1MSHR0cFJlcXVlc3QnCiAgICAgICAgICAgIHJlcS5oZWFkZXJzWydSZWZlcmVyJ10gPSAnaHR0cHM6Ly9hcHBzdG9yZWNvbm5lY3QuYXBwbGUuY29tL2FjY2Vzcy9hcGknCiAgICAgICAgICBlbmQKICAgICAgICAgICRzdGRlcnIucHV0cyAiREVCVUc6IFJlc3BvbnNlIENsYXNzOiAje2Rvd25sb2FkX3Jlc3AuYm9keS5jbGFzc30iCiAgICAgICAgICAkc3RkZXJyLnB1dHMgIkRFQlVHOiBSZXNwb25zZSBTdGF0dXM6ICN7ZG93bmxvYWRfcmVzcC5zdGF0dXN9IiBpZiBkb3dubG9hZF9yZXNwLnJlc3BvbmRfdG8/KDpzdGF0dXMpCiAgICAgICAgICAKICAgICAgICAgIGlmIGRvd25sb2FkX3Jlc3AuYm9keSAmJiAhZG93bmxvYWRfcmVzcC5ib2R5LnRvX3MuaW5jbHVkZT8oJyJlcnJvcnMiPT4nKQogICAgICAgICAgICAgaWYgZG93bmxvYWRfcmVzcC5ib2R5LmlzX2E/KEhhc2gpCiAgICAgICAgICAgICAgIHA4X2NvbnRlbnQgPSBkb3dubG9hZF9yZXNwLmJvZHlbJ2tleUNvbnRlbnQnXSB8fCBkb3dubG9hZF9yZXNwLmJvZHlbJ2NvbnRlbnQnXSB8fCBkb3dubG9hZF9yZXNwLmJvZHkuZGlnKCdkYXRhJywgJ2F0dHJpYnV0ZXMnLCAncHJpdmF0ZUtleScpCiAgICAgICAgICAgICBlbHNlCiAgICAgICAgICAgICAgIHA4X2NvbnRlbnQgPSBkb3dubG9hZF9yZXNwLmJvZHkKICAgICAgICAgICAgIGVuZAogICAgICAgICAgICAgCiAgICAgICAgICAgICBpZiBwOF9jb250ZW50ICYmIHA4X2NvbnRlbnQudG9fcy5zdGFydF93aXRoPygnLS0tLS1CRUdJTicpCiAgICAgICAgICAgICAgICRzdGRlcnIucHV0cyAiREVCVUc6IFJldHJpZXZhbCB2aWEgI3twYXRofSBzdWNjZXNzZnVsISBDb250ZW50IGxlbmd0aDogI3twOF9jb250ZW50LnRvX3MubGVuZ3RofSIKICAgICAgICAgICAgICAgYnJlYWsKICAgICAgICAgICAgIGVsc2UKICAgICAgICAgICAgICAgJHN0ZGVyci5wdXRzICJERUJVRzogUmVzcG9uc2UgZnJvbSAje3BhdGh9IGRpZCBub3QgY29udGFpbiBhIHZhbGlkIHByaXZhdGUga2V5LiIKICAgICAgICAgICAgICAgcDhfY29udGVudCA9IG5pbAogICAgICAgICAgICAgZW5kCiAgICAgICAgICBlbHNlCiAgICAgICAgICAgICAkc3RkZXJyLnB1dHMgIkRFQlVHOiBSZXNwb25zZSBmcm9tICN7cGF0aH0gZW1wdHkgb3IgY29udGFpbnMgZXJyb3JzLiIKICAgICAgICAgIGVuZAogICAgICAgIHJlc2N1ZSA9PiBlCiAgICAgICAgICAkc3RkZXJyLnB1dHMgIkRFQlVHOiBBdHRlbXB0IGZvciAje3BhdGh9IGZhaWxlZDogI3tlLm1lc3NhZ2V9IgogICAgICAgIGVuZAogICAgICBlbmQKICAgIGVuZAoKICAgICMgRklOQUwgVkFMSURBVElPTjogRW5zdXJlIGl0J3Mgbm90IGEgUnVieSBoYXNoIHN0cmluZyByZXByZXNlbnRhdGlvbiBvciBlcnJvcgogICAgaWYgcDhfY29udGVudC5pc19hPyhIYXNoKSB8fCBwOF9jb250ZW50LnRvX3MuaW5jbHVkZT8oJyJlcnJvcnMiPT4nKSB8fCAhcDhfY29udGVudC50b19zLnN0YXJ0X3dpdGg/KCctLS0tLUJFR0lOJykKICAgICAgJHN0ZGVyci5wdXRzICJERUJVRzogSW52YWxpZCBrZXkgY29udGVudCBkZXRlY3RlZC4iCiAgICAgIHA4X2NvbnRlbnQgPSBuaWwKICAgIGVuZAoKICAgIGlmIHA4X2NvbnRlbnQubmlsPwogICAgICAkc3RkZXJyLnB1dHMgIkRFQlVHOiBGYWlsZWQgdG8gcmV0cmlldmUga2V5IGNvbnRlbnQuIgogICAgZW5kCiAgICAKICAgIHJlc3VsdCA9IHsKICAgICAgaWQ6IGtleV9kYXRhWydpZCddLAogICAgICBuYW1lOiBhdHRyWyduaWNrbmFtZSddIHx8IGF0dHJbJ25hbWUnXSwKICAgICAgaXNzdWVySWQ6IGF0dHJbJ2lzc3VlcklkJ10sCiAgICAgIGtleUNvbnRlbnQ6IHA4X2NvbnRlbnQsCiAgICAgIHJhd19yZXNwb25zZTogcmVzcG9uc2UuYm9keSAjIEluY2x1ZGUgdGhpcyBmb3IgZGVidWdnaW5nIHdoZW4ga2V5Q29udGVudCBpcyBuaWwKICAgIH0KICAgIAogICAgcHV0cyAiX19fTUFDSF9KU09OX1NUQVJUX19fIiArIHJlc3VsdC50b19qc29uICsgIl9fX01BQ0hfSlNPTl9FTkRfX18iCiAgcmVzY3VlID0+IGUKICAgICRzdGRlcnIucHV0cyAiRVJST1I6ICN7ZS5tZXNzYWdlfSIKICAgIGlmIGRlZmluZWQ/KHJlc3BvbnNlKSAmJiByZXNwb25zZSAmJiByZXNwb25zZS5ib2R5CiAgICAgICAkc3RkZXJyLnB1dHMgIlJlc3BvbnNlIEJvZHk6ICN7cmVzcG9uc2UuYm9keS50b19qc29ufSIKICAgIGVuZAogICAgZXhpdCAxCiAgZW5kCmVuZAoKZGVmIGRlbGV0ZV9rZXkoaWQpCiAgYmVnaW4KICAgIFNwYWNlc2hpcDo6UG9ydGFsLmxvZ2luKEVOVlsnRkFTVExBTkVfVVNFUiddKQogICAgU3BhY2VzaGlwOjpQb3J0YWwuc2VsZWN0X3RlYW0odGVhbV9pZDogRU5WWydGQVNUTEFORV9URUFNX0lEJ10pCiAgICAKICAgIFNwYWNlc2hpcDo6VHVuZXMubG9naW4oRU5WWydGQVNUTEFORV9VU0VSJ10pCiAgICBzZWxlY3RfYXBwX3N0b3JlX2Nvbm5lY3RfdGVhbQogICAgCiAgICBjbGllbnQgPSBTcGFjZXNoaXA6OlR1bmVzLmNsaWVudAogICAgY2xpZW50LnJlcXVlc3QoOmRlbGV0ZSwgIi9pcmlzL3YxL2FwaUtleXMvI3tpZH0iKQogICAgcHV0cyAiU1VDQ0VTUyIKICByZXNjdWUgPT4gZQogICAgJHN0ZGVyci5wdXRzICJFUlJPUjogI3tlLm1lc3NhZ2V9IgogICAgZXhpdCAxCiAgZW5kCmVuZAoKY29tbWFuZCA9IEFSR1ZbMF0KaWYgY29tbWFuZCA9PSAnbGlzdCcKICBsaXN0X2tleXMKZWxzaWYgY29tbWFuZCA9PSAndGVhbXMnCiAgbGlzdF90ZWFtcwplbHNpZiBjb21tYW5kID09ICdjcmVhdGUnCiAgY3JlYXRlX2tleShBUkdWWzFdIHx8ICJNYWNoIEFQSSBLZXkgI3tUaW1lLm5vdy50b19pfSIpCmVsc2lmIGNvbW1hbmQgPT0gJ2RlbGV0ZScKICBkZWxldGVfa2V5KEFSR1ZbMV0pCmVuZAo=";function de(){let e=x.join(Ie.tmpdir(),m.nameLower);X.existsSync(e)||X.mkdirSync(e,{recursive:!0});let t=x.join(e,"manage_asc_keys.rb");return X.writeFileSync(t,Buffer.from(Te,"base64").toString("utf-8"),{mode:493}),t}function ge(){return{...process.env,PATH:`/usr/local/opt/ruby/bin:/usr/local/Cellar/fastlane/2.227.0/libexec/bin:${process.env.HOME}/.local/share/fastlane/3.4.0/bin:${process.env.PATH}`,GEM_HOME:process.env.FASTLANE_GEM_HOME||`${process.env.HOME}/.local/share/fastlane/3.4.0`,GEM_PATH:(process.env.FASTLANE_GEM_HOME||`${process.env.HOME}/.local/share/fastlane/3.4.0`)+":/usr/local/Cellar/fastlane/2.227.0/libexec",FASTLANE_INSTALLED_VIA_HOMEBREW:"true",CI:"1"}}function fe(e){let t=new Map,n=/-\s+(\d+)\s+\(([^)]+)\)/g,a=/\d+\)\s+"([^"]+)"\s+\((\d+)\)/g,i;for(;(i=n.exec(e))!==null;)t.set(i[1],{id:i[1],name:i[2]});for(;(i=a.exec(e))!==null;)t.set(i[2],{id:i[2],name:i[1]});return Array.from(t.values())}function me(e){return e.submit?.production?.ios?.appStoreConnectTeamId||e.submit?.production?.ios?.itcTeamId||e.submit?.production?.ios?.appleConnectTeamId}function we(e,t,n){return{...ge(),FASTLANE_USER:e,FASTLANE_TEAM_ID:t,...n?{FASTLANE_ITC_TEAM_ID:n,FASTLANE_ASC_TEAM_ID:n}:{}}}async function Ue(e,t,n,a){let i=ie();i.start("Fetching App Store Connect providers...");let s=ne("ruby",[e,"teams"],{env:we(n,a),stdio:["inherit","pipe","pipe"],encoding:"utf-8"});if(s.status!==0){i.stop("Could not fetch providers");let u=fe(`${s.stdout||""}
+${s.stderr||""}`);if(u.length>0)return pe(t,u,"Select the App Store Connect provider for this API key:");V.warn(G.yellow(`Could not list App Store Connect providers: ${s.stderr||"Unknown error"}`));return}let o=(s.stdout||"").match(new RegExp(`${m.jsonStartMarker}(.*)${m.jsonEndMarker}`));if(!o){i.stop("Could not parse providers");return}let g=JSON.parse(o[1]),d=(g.teams||[]).filter(u=>u.id&&u.name);if(i.stop(d.length===1?"Found 1 provider":`Found ${d.length} providers`),d.length===0)return;if(d.length===1)return V.success(G.green(`\u2713 Using App Store Connect provider ${d[0].name} (${d[0].id})`)),d[0].id;let A=d.filter(u=>u.recommended),I=d.filter(u=>!u.recommended);return pe(t,[...A,...I],`Select the App Store Connect provider for Developer Team ${g.developerTeamName||a}:`)}async function pe(e,t,n){let a=await q({message:n,options:t.map(s=>({value:s.id,label:s.name,hint:`${s.id}${s.recommended?" \xB7 recommended":""}`}))});if(E(a))return O("Operation cancelled"),null;let i=a;return V.success(G.green(`\u2713 Using App Store Connect Provider ID ${i}`)),i}var Ze=async e=>{let t=ie(),n=e.platform,a=`./${m.configFileName}`;if(!X.existsSync(a)){V.error(`No ${m.configFileName} found. Run \`${m.nameLower} init\` or \`${m.nameLower} link\` first.`);return}let i=JSON.parse(X.readFileSync(a,"utf-8")),{projectId:s}=i,o=e.profile||"production";if(!s){V.error(`${m.configFileName} is missing projectId.`);return}let g=e.file,d=n==="android"?e.packageName||e.bundleId:e.bundleId||oe(i,o)||"*";if(n==="android"&&!d&&(d=await $e(s,i,o),d===null))return;if(n==="ios"&&!g){let p=await q({message:"Manage App Store Connect API Key:",options:[{value:"magic",label:"\u2728 Create new automatically",hint:"Requires Apple ID + 2FA"},{value:"manual",label:"\u{1F50D} Configure manually",hint:"Provide existing .p8 file"},{value:"delete",label:"\u{1F5D1}\uFE0F  Delete an existing Key"}]});if(E(p)){O("Operation cancelled");return}if(p==="magic"){await Oe(s,i);return}if(p==="delete"){await Ke(s,i);return}}if(!g){let p=n==="ios"?"https://appstoreconnect.apple.com/access/api":"https://console.cloud.google.com/apis/credentials";ce(`To submit to the ${n==="ios"?"App Store":"Google Play Store"}, you need a Service Key:
+
+1. Open: ${G.cyan(p)}
+`+(n==="ios"?`2. Generate an "App Store Connect API Key" with ${G.bold("Admin")} role.
+3. Download the ${G.bold(".p8")} file.`:`2. Create a "Service Account", generate a ${G.bold("JSON")} key.
+3. Download the ${G.bold(".json")} file.`),"Guided Setup"),t.start("Scanning for downloaded keys...");let l=Le(n);if(t.stop(l.length>0?`Detected ${l.length} potential key(s)`:"No keys detected automatically"),l.length>0){let y=await q({message:"Found these potential keys. Use one of them?",options:[...l.map(C=>({value:C.path,label:`${x.basename(C.path)} (${C.location})`})),{value:"manual",label:"Enter path manually..."}]});if(E(y)){O("Operation cancelled");return}y!=="manual"&&(g=y)}if(!g){let y=await K({message:`Paste the path to your ${n==="ios"?".p8":".json"} file:`,validate:C=>X.existsSync(C)?void 0:"File not found"});if(E(y)){O("Operation cancelled");return}g=y}}let A=e.issuerId,I=e.keyId;if(n==="ios"){if(!I&&g){let p=x.basename(g).match(/AuthKey_(.*)\.p8/);p&&(I=p[1],V.info(`Auto-detected Key ID from filename: ${G.green(I)}`))}if(!A){let p=await K({message:"Enter App Store Connect Issuer ID (Found on the Keys page):",validate:l=>l.length>0?void 0:"Issuer ID is required"});if(E(p)){O("Operation cancelled");return}A=p}if(!I){let p=await K({message:"Enter App Store Connect Key ID:",validate:l=>l.length>0?void 0:"Key ID is required"});if(E(p)){O("Operation cancelled");return}I=p}}if(n==="android"&&(!d||d==="*")){let p=await Re();if(p===null)return;d=p}let u=i.submit?.production?.ios?.appleTeamId,f=me(i);await ue(s,g,n,A,I,d,{teamId:n==="ios"?u:void 0,developerTeamId:n==="ios"?u:void 0,appStoreConnectTeamId:n==="ios"?f:void 0,providerId:n==="ios"?f:void 0})};async function $e(e,t,n){let a=await He(e),i=De(t,n);if(i&&!a.includes(i)&&a.unshift(i),a.length>0){let s=await q({message:"Select Android package for this Google Play service key:",options:[...a.map(o=>({value:o,label:o,hint:o===i?"from config":void 0})),{value:"manual",label:"Enter another package name..."}]});if(E(s))return O("Operation cancelled"),null;if(s==="manual")return Re();if(s!=="manual")return s}if(i){let s=await Se({message:`Use Android package from local config (${i})?`,initialValue:!0});if(E(s))return O("Operation cancelled"),null;if(s)return i}}async function Re(){let e=await K({message:"Android package name for this Google Play service key:",placeholder:"com.example.app",validate:t=>t.includes(".")?void 0:"Enter a valid package name"});return E(e)?(O("Operation cancelled"),null):e}async function He(e){try{let n=(await v.get(`/credentials/${e}`)).data.credentials||[],a=new Set;for(let i of n)(i.platform==="android"||i.type==="android_keystore"||i.type==="google_service_account")&&i.bundleId&&i.bundleId!=="*"&&a.add(i.bundleId);return Array.from(a).sort()}catch(t){return V.warn(G.yellow(`Could not fetch saved Android package identifiers: ${t.message}`)),[]}}function De(e,t){let n=re(e,t);if(n)return n;let a=x.join(process.cwd(),"app.json");if(X.existsSync(a))try{return JSON.parse(X.readFileSync(a,"utf-8")).expo?.android?.package}catch{}let i=x.join(process.cwd(),"app.config.json");if(X.existsSync(i))try{let s=JSON.parse(X.readFileSync(i,"utf-8"));return s.expo?.android?.package||s.android?.package}catch{}}async function Oe(e,t){let n=ie(),a=t.submit?.production?.ios?.appleId,i=t.submit?.production?.ios?.appleTeamId,s=me(t);if(!a){let d=await K({message:"Apple ID:",placeholder:"your-email@example.com"});if(E(d))return;a=d}if(!i){let d=await K({message:"Apple Team ID:",placeholder:"e.g. 4523G95823"});if(E(d))return;i=d,t.submit||(t.submit={production:{ios:{}}}),t.submit.production||(t.submit.production={ios:{}}),t.submit.production.ios||(t.submit.production.ios={}),t.submit.production.ios.appleTeamId=i,X.writeFileSync(`./${m.configFileName}`,JSON.stringify(t,null,2))}let o=await K({message:"Enter a name for the new API Key:",initialValue:`[${m.name}] Project ${e}`});if(E(o))return;let g=de();if(!X.existsSync(g)){V.error(`Magic Error: Helper script not found at ${g}`);return}try{let d=await Ue(g,t,a,i);if(d===null)return;if(d)s=d;else if(!s)return;n.start("Creating App Store Connect API Key...");let A=S=>ne("ruby",[g,"create",o],{env:we(a,i,S),stdio:["inherit","pipe","pipe"],encoding:"utf-8"}),I=A(s),u=I.stdout||"",f=I.stderr||"";if(I.status!==0){let S=fe(`${u}
+${f}`);if(S.length>0){n.stop("Select App Store Connect team"),ce(`Apple Developer Team IDs look like ${G.bold(i)}.
+App Store Connect API keys use a numeric provider/team ID instead.`,"Team ID mismatch");let R=await pe(t,S,"Select the App Store Connect provider for this API key:");if(!R)return;s=R,n.start("Creating API Key with selected App Store Connect team..."),I=A(s),u=I.stdout||"",f=I.stderr||""}}if(f&&(f.includes("DEBUG:")||f.includes("ERROR:"))&&f.split(`
+`).forEach(S=>{S.trim()&&V.info(G.dim(`[Ruby] ${S.trim()}`))}),I.status!==0){n.stop("Failed"),V.error(`Magic creation failed: ${f}`);return}let p=u.match(new RegExp(`${m.jsonStartMarker}(.*)${m.jsonEndMarker}`));if(!p){n.stop("Parse Error"),V.error("Could not parse response from Apple Portal.");return}let l=JSON.parse(p[1]),{id:y,issuerId:C,keyContent:F}=l;if(n.stop("Key Created Successfully"),V.success(`\u2713 Created Key ID: ${G.green(y)}`),!C){ce(`Your Issuer ID is shown at the top of:
+  ${G.cyan("https://appstoreconnect.apple.com/access/integrations/api")}
+
+It looks like: ${G.dim("xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx")}`,"One More Thing");let S=await K({message:"Enter your App Store Connect Issuer ID:",validate:R=>R.trim().length>0?void 0:"Issuer ID is required"});if(E(S)){O("Operation cancelled.");return}C=S.trim()}if(F){let S=x.join(Ie.tmpdir(),`AuthKey_${y}.p8`);X.writeFileSync(S,F),await ue(e,S,"ios",C,y,t.ios?.bundleIdentifier||"*",{teamId:i,developerTeamId:i,appStoreConnectTeamId:s,providerId:s}),X.unlinkSync(S)}else{V.warn(G.yellow("\u26A0\uFE0F  Apple did not return the private key in the response.")),ce(`Download the .p8 file manually:
+
+  1. Open: ${G.cyan("https://appstoreconnect.apple.com/access/integrations/api")}
+  2. Find Key ID: ${G.green(y)}
+  3. Click ${G.bold("Download API Key")} (only available once)
+  4. Drag & drop the downloaded .p8 file below`,"Manual Step Required");let S=await K({message:"Path to the downloaded .p8 file (drag & drop here):",validate:R=>X.existsSync(R)?void 0:"File not found"});if(E(S)){O("Operation cancelled. Credential ID was registered but key content is missing.");return}await ue(e,S,"ios",C,y,t.ios?.bundleIdentifier||"*",{teamId:i,developerTeamId:i,appStoreConnectTeamId:s,providerId:s})}}catch(d){n.stop("Error"),V.error(`Error: ${d.message}`)}}async function Ke(e,t){let n=ie(),a=t.submit?.production?.ios?.appleId,i=t.submit?.production?.ios?.appleTeamId,s=me(t);if(!a){let g=await K({message:"Apple ID:"});if(E(g))return;a=g}if(!i){let g=await K({message:"Apple Team ID:"});if(E(g))return;i=g,t.submit||(t.submit={production:{ios:{}}}),t.submit.production||(t.submit.production={ios:{}}),t.submit.production.ios||(t.submit.production.ios={}),t.submit.production.ios.appleTeamId=i,X.writeFileSync(`./${m.configFileName}`,JSON.stringify(t,null,2))}n.start("Fetching existing API Keys...");let o=de();if(!X.existsSync(o)){V.error(`Magic Error: Helper script not found at ${o}`);return}try{let g=l=>ne("ruby",[o,"list"],{env:{...ge(),FASTLANE_USER:a,FASTLANE_TEAM_ID:i,...l?{FASTLANE_ITC_TEAM_ID:l,FASTLANE_ASC_TEAM_ID:l}:{}},stdio:["inherit","pipe","pipe"],encoding:"utf-8"}),d=g(s);if(d.status!==0){let l=fe(`${d.stdout||""}
+${d.stderr||""}`);if(l.length>0){n.stop("Select App Store Connect team");let y=await q({message:"Select the App Store Connect team to list API keys:",options:l.map(C=>({value:C.id,label:C.name,hint:C.id}))});if(E(y)){O("Operation cancelled");return}s=y,n.start("Fetching existing API Keys..."),d=g(s)}}if(d.status!==0){n.stop("Failed"),V.error(`Listing failed: ${d.stderr}`);return}let A=d.stdout.match(new RegExp(`${m.jsonStartMarker}(.*)${m.jsonEndMarker}`));if(!A){n.stop("Parse Error");return}let I=JSON.parse(A[1]);if(n.stop(`Found ${I.length} keys`),I.length===0){V.info("No API Keys found on this team.");return}let u=await q({message:"Select a key to delete from Apple Developer Portal:",options:[...I.map(l=>({value:l.id,label:`ID: ${l.id} - ${l.name} (${l.role})`})),{value:"cancel",label:"Cancel"}]});if(E(u)||u==="cancel")return;let f=await Se({message:`Are you sure you want to delete Key ${u}? This cannot be undone.`});if(!f||E(f))return;n.start(`Deleting Key ${u}...`);let p=ne("ruby",[de(),"delete",u],{env:{...ge(),FASTLANE_USER:a,FASTLANE_TEAM_ID:i,...s?{FASTLANE_ITC_TEAM_ID:s,FASTLANE_ASC_TEAM_ID:s}:{}},stdio:"pipe",encoding:"utf-8"});p.status===0?(n.stop("Deleted"),V.success(`\u2713 Key ${u} has been removed from Apple Portal.`)):(n.stop("Deletion Failed"),V.error(`Error: ${p.stderr}`))}catch(g){n.stop("Error"),V.error(`Error: ${g.message}`)}}async function ue(e,t,n,a,i,s="*",o={}){let g=ie();g.start(`Uploading Service Credentials for ${n}...`);try{let d=n==="ios"?"asc_api_key":"google_service_account",A=new URL(import.meta.url),I=x.dirname(A.pathname),u=[x.join(I,"isolated-upload.js"),x.join(I,"commands","isolated-upload.js"),x.resolve(I,"../commands/isolated-upload.js"),x.resolve(process.cwd(),`node_modules/.bin/${m.nameLower}-upload`)],f="";for(let l of u)if(X.existsSync(l)){f=l;break}if(!f)throw new Error("Could not locate isolated-upload.js. Ensure the CLI is properly installed.");let p=ne("node",[f,e,t,d,s,"service","undefined","undefined",a||"undefined",i||"undefined","undefined","undefined","undefined",o.teamId||"undefined",o.teamName||"undefined",o.developerTeamId||"undefined",o.appStoreConnectTeamId||"undefined",o.providerId||"undefined",o.providerName||"undefined"],{stdio:"pipe",encoding:"utf-8",env:{...process.env,AT_CLI_ISOLATED:"1"}});if(p.status!==0){let l=p.stderr||p.stdout||"Unknown upload failure";g.stop("Upload Failed"),V.error(G.red(`Upload Failed: ${l}`));return}p.stdout.includes("SUCCESS")?(g.stop("Upload Success"),V.success(G.green(`\u2713 Service Credentials for ${n} uploaded successfully.`))):(g.stop("Upload Summary"),V.warn(G.yellow(`Upload finished but success not confirmed: ${p.stdout}`)))}catch(d){g.stop("Upload Error"),V.error(G.red(`Error: ${d.message}`))}}function Le(e){let t=e==="ios"?".p8":".json",n=[],a=[{path:"./",label:"Project Root"},{path:x.join(Ie.homedir(),"Downloads"),label:"Downloads"}];for(let i of a)if(X.existsSync(i.path))try{let s=X.readdirSync(i.path);for(let o of s)if(o.endsWith(t)){if(e==="android"&&!X.readFileSync(x.join(i.path,o),"utf8").includes("service_account")||e==="ios"&&!o.startsWith("AuthKey"))continue;n.push({path:x.join(i.path,o),location:i.label})}}catch{}return n}import Be from"axios";import c from"chalk";import{execSync as T,spawnSync as ee}from"child_process";import Ae from"crypto";import h from"fs";import w from"path";import he from"os";import je from"adm-zip";Be.defaults.proxy=!1;function Ce(e,t){if(!h.existsSync(e))return;let n=h.readdirSync(e);for(let a of n){let i=w.join(e,a);if(h.statSync(i).isDirectory()){let o=Ce(i,t);if(o)return o}else if(t.test(a))return i}}var M=e=>String(e||"").trim().toLowerCase().replace(/_/g,"-"),N=e=>{if(typeof e!="string")return;let t=e.trim();return t.length>0?t:void 0},be=e=>N(e.password)||N(e.p12Password)||N(e.certificatePassword)||N(e.meta?.password)||N(e.meta?.p12Password)||N(e.meta?.certificatePassword),Pe=e=>N(e.keystorePassword)||N(e.storePassword)||N(e.meta?.keystorePassword)||N(e.meta?.storePassword),Ye=e=>N(e.keyPassword)||N(e.meta?.keyPassword),qe=e=>N(e.alias)||N(e.meta?.alias),We=e=>e.credentialId||e.id,ve=e=>e.bundleId||e.bundleIdentifier||e.meta?.bundleId||e.meta?.bundleIdentifier,Ve=e=>e.distributionType||e.meta?.distributionType,ke=e=>!!be(e)||!!Pe(e)||!!Ye(e),et=async(e,t,n)=>{if(!["ios_cert","android_keystore"].includes(n.type)||ke(n))return n;let a=ve(n),i=Ve(n);if(!a||!i)return n;try{let o=(await v.get("/credentials/resolve",{params:{projectId:e,platform:t,bundleId:a,distributionType:i}})).data.credentials||[],g=We(n),d=o.find(A=>{if(A.type!==n.type)return!1;let I=We(A);return g&&I===g?!0:ve(A)===a&&M(Ve(A))===M(i)&&ke(A)});return d?{...n,...d,meta:{...n.meta,...d.meta}}:n}catch{return n}},tt=e=>{let t=M(e);return t==="store"||t==="app-store"?"PRODUCTION":["adhoc","ad-hoc","internal","staging","stage"].includes(t)?"STAGING":"DEVELOPMENT"},nt=(e,t)=>{let n=be(e);if(n)return n;let a=tt(e.distributionType);return["IOS_P12_PASSWORD",`${m.envPrefix}P12_PASSWORD`,`IOS_P12_PASSWORD_${a}`,`P12_PASSWORD_${a}`,"MACH_P12_PASSWORD","P12_PASSWORD","CERT_PASSWORD"].map(s=>N(t[s])).find(Boolean)||""},it=(e,t)=>{let n=M(e.distributionType),a=n==="store"?"PRODUCTION":["internal","adhoc","ad-hoc","staging","stage"].includes(n)?"STAGING":"DEVELOPMENT",i=["PRODUCTION","STORE","INTERNAL","STAGING","DEVELOPMENT","RELEASE","DEBUG"],s=[`KEYSTORE_PASSWORD_${a}`,`KEYSTORE_PASSWORD_${String(e.distributionType||"").toUpperCase()}`,...i.map(u=>`KEYSTORE_PASSWORD_${u}`),"ANDROID_STORE_PASSWORD","ANDROID_KEYSTORE_PASSWORD","ANDROID_KEYSTONE_PASSWORD","KEYSTORE_PASSWORD"],o=[`KEY_PASSWORD_${a}`,`KEY_PASSWORD_${String(e.distributionType||"").toUpperCase()}`,"ANDROID_KEY_PASSWORD","KEY_PASSWORD"],g=[`KEYSTORE_ALIAS_${a}`,`KEYSTORE_ALIAS_${String(e.distributionType||"").toUpperCase()}`,...i.map(u=>`KEYSTORE_ALIAS_${u}`),"ANDROID_KEY_ALIAS","KEYSTORE_ALIAS"],d=Pe(e)||be(e)||s.map(u=>N(t[u])).find(Boolean)||"",A=Ye(e)||o.map(u=>N(t[u])).find(Boolean)||d;return{alias:qe(e)||g.map(u=>N(t[u])).find(Boolean)||"",keystorePassword:d,keyPassword:A}},Ge=(e,t,n)=>{let a=e.includes(".")?e.replace(/\.[^.]+$/i,".zip"):`${e}.zip`,i=w.basename(e),s=new je;return s.addLocalFile(e,void 0,i),s.addFile(t,Buffer.from(n.endsWith(`
+`)?n:`${n}
+`,"utf8")),s.writeZip(a),a},Je=e=>{let t=e.toLowerCase();return t==="production"||t==="prod"||t.includes("store")||t.endsWith("-production")||t.endsWith("-prod")},st=e=>{let t=e.toLowerCase();return t==="staging"||t==="stage"||t.includes("preview")||t.includes("adhoc")||t.includes("ad-hoc")||t.endsWith("-staging")||t.endsWith("-stage")},at=(e,t)=>{let n=j(e,t)||{},a=M(n.distribution),i=M(n.iosExportMethod||n.ios?.exportMethod),s=M(n.environment);return i==="app-store"||a==="store"?"store":i==="development"||a==="development"?"development":i==="ad-hoc"||i==="adhoc"||a==="ad-hoc"||a==="adhoc"||a==="internal"?"adhoc":s==="production"||s==="store"?"store":s==="development"||s==="dev"?"development":s==="staging"||s==="stage"||s==="preview"?"adhoc":Je(t)?"store":st(t)?"adhoc":"development"},rt=(e,t)=>{let n=j(e,t)||{},a=M(n.distribution),i=M(n.environment);return a==="store"||i==="production"||i==="store"||Je(t)?"store":"internal"};function ot(e,t,n){let a=h.readFileSync(n,"utf8"),i=Math.floor(Date.now()/1e3),s=Buffer.from(JSON.stringify({alg:"ES256",kid:e,typ:"JWT"})).toString("base64url"),o=Buffer.from(JSON.stringify({iss:t,iat:i,exp:i+1200,aud:"appstoreconnect-v1"})).toString("base64url"),g=`${s}.${o}`,d=Ae.createSign("SHA256");d.update(g);let A=d.sign({key:a,dsaEncoding:"ieee-p1363"}).toString("base64url");return`${g}.${A}`}async function ct(e,t,n,a){let i=ot(t,n,a),s=(await import("axios")).default;for(let o of e)try{await s.post("https://api.appstoreconnect.apple.com/v1/devices",{data:{type:"devices",attributes:{name:o.name,udid:o.udid,platform:"IOS"}}},{headers:{Authorization:`Bearer ${i}`,"Content-Type":"application/json"}}),r.info(c.dim(`  \u2713 Registered: ${o.name}`))}catch(g){let d=g.response?.data?.errors;d?.some(I=>I.code==="ENTITY_ERROR.ATTRIBUTE.INVALID.DUPLICATE"||I.detail?.toLowerCase().includes("already registered")||I.detail?.toLowerCase().includes("already exists"))?r.info(c.dim(`  Already on Portal: ${o.name}`)):r.warn(c.yellow(`  Could not register ${o.name}: ${d?.[0]?.detail||g.message}`))}}var Xe=async e=>{ze(c.bgCyan.black(m.cliTag("Credentials")));let t=await z({message:"Select platform:",options:[{value:"ios",label:"iOS"},{value:"android",label:"Android"}]});k(t)&&(_("Operation cancelled"),process.exit(0));let n=await z({message:"What do you want to do?",options:[{value:"setup",label:"Build Credentials (Certs/Profiles)",hint:"Manage everything needed to build your project"},{value:"download",label:"Download credentials (credentials.json)",hint:"Sync credentials from Dashboard to local project"},{value:"service",label:"App Store Connect API Key (Magic)",hint:"Manage your API Key for automated submission"},{value:"push",label:"Push Notifications (Placeholder)",hint:"Manage your Apple Push Notifications Key"},{value:"back",label:"Go back"},{value:"exit",label:"Exit"}].filter(a=>!(t==="android"&&(a.value==="service"&&(a.label="Google Service Account (JSON)"),a.value==="push")))});if((k(n)||n==="exit")&&(_("Operation cancelled"),process.exit(0)),n==="back")return Xe(e);if(n==="setup")await lt({...e,platform:t});else if(n==="download")await mt({...e,platform:t});else if(n==="service")await Ze({...e,platform:t});else if(n==="push")return Ne("Push Notifications management is coming soon!","Coming Soon"),Xe(e);Qe(c.green("Done!"))},lt=async e=>{let t=se(),n=e.platform,a=e.profile;if(!a){let g=await z({message:"Select credential type:",options:[{value:"development",label:"Development",hint:"Local testing & simulators"},{value:"staging",label:"Ad Hoc / Staging",hint:"Internal distribution & device testing"},{value:"production",label:"Production / App Store",hint:"App Store & Play Store submission"}]});k(g)&&(_("Operation cancelled"),process.exit(0)),a=g}let i=`./${m.configFileName}`;if(!h.existsSync(i)){r.error(`No ${m.configFileName} found. Run \`${m.nameLower} init\` or \`${m.nameLower} link\` first.`);return}let s=JSON.parse(h.readFileSync(i,"utf-8")),{projectId:o}=s;if(!o){r.error(`${m.configFileName} is missing projectId.`);return}if(e.awsProfile&&r.warn(c.yellow(`Ignoring --aws-profile. Authenticating with ${m.name} Cloud...`)),r.info(c.dim(`Setting up credentials for: ${a}`)),n==="ios")await dt(o,a,e,s);else{let g=rt(s,a);await ut(o,a,g,e,s)}};async function dt(e,t,n,a){let i=n.bundleId;if(!i){let d=a.submit?.[t]?.ios?.bundleIdentifier||a.submit?.[t]?.ios?.bundleId||oe(a,t),A=[];try{let u=(await v.get(`/credentials/${e}`)).data.credentials||[];A=[...new Set(u.filter(f=>f.platform==="ios"&&f.bundleId&&f.bundleId!=="*").map(f=>f.bundleId))]}catch{}if(d&&!A.includes(d)&&A.unshift(d),A.length>0){let I=[...A.map(f=>({value:f,label:f,hint:f===d?"from config":void 0})),{value:"__new__",label:"+ Enter a new Bundle ID"}],u=await z({message:"Which Bundle ID are you setting up credentials for?",options:I});if(k(u)&&(_("Operation cancelled"),process.exit(0)),u==="__new__"){let f=await L({message:"iOS Bundle ID (e.g. com.example.app):",placeholder:"com.example.app",validate:p=>p.includes(".")?void 0:"Please enter a valid Bundle ID"});k(f)&&(_("Operation cancelled"),process.exit(0)),i=f}else i=u}else{let I=await L({message:"iOS Bundle ID (e.g. com.example.app):",placeholder:"com.example.app",validate:u=>u.includes(".")?void 0:"Please enter a valid Bundle ID"});k(I)&&(_("Operation cancelled"),process.exit(0)),i=I}}r.info(c.dim(`Bundle ID: ${i}`));let s=at(a,t),o=a.submit?.production?.ios?.appleId;o&&r.info(c.dim(`Using Apple ID from config: ${o}`)),await pt(e,i,t,s,s==="store"?"appstore":s==="adhoc"?"adhoc":"development",n,a,o)}async function gt(e){let t="MATCH_ENCRYPTION_PASSPHRASE";try{let o=((await v.get(`/projects/${e}/secrets/export?env=development`)).data.secrets||{})[t];if(o&&!o.includes("[Decryption Failed]"))return r.info(c.dim("Using existing encryption passphrase from Dashboard")),r.info(c.cyan(`MATCH_PASSWORD: ${o}`)),o;if(o&&o.includes("[Decryption Failed]")){r.warn(c.yellow("\u26A0\uFE0F  Existing MATCH_PASSWORD could not be decrypted (encryption key changed).")),r.info(c.dim("Generating a fresh passphrase and cleaning old certificates..."));let g=Ae.randomBytes(32).toString("base64");try{await v.post(`/projects/${e}/secrets`,{key:t,value:g,type:"managed",description:"Encryption passphrase for iOS certificates (fastlane match)",visibility:"secret"}),r.success(c.green("\u2713 New encryption passphrase generated and saved"))}catch{}try{await v.post("/credentials/clean-match-storage",{projectId:e}),r.success(c.green("\u2713 Cleaned old certificates from storage"))}catch{}return g}}catch(i){r.info(c.dim(`Could not fetch existing passphrase from Dashboard: ${i.message}`))}let n=await z({message:"No active encryption passphrase found on Dashboard. What would you like to do?",options:[{value:"generate",label:"Generate a new secure passphrase",hint:"Safe for first-time setup"},{value:"enter",label:"Enter existing passphrase manually",hint:"Required if you already have certs in S3"},{value:"cancel",label:"Cancel",hint:"Quit"}]});if((k(n)||n==="cancel")&&(_("Operation cancelled"),process.exit(0)),n==="enter"){let i=await le({message:"Enter your MATCH_PASSWORD (encryption passphrase):",validate:o=>o.length>0?void 0:"Passphrase is required"});k(i)&&(_("Operation cancelled"),process.exit(0));let s=i;try{await v.post(`/projects/${e}/secrets`,{key:t,value:s,type:"managed",description:"Encryption passphrase for iOS certificates (fastlane match)"}),r.success(c.green("\u2713 Saved passphrase to Dashboard"))}catch{}return s}let a=Ae.randomBytes(32).toString("base64");try{await v.post(`/projects/${e}/secrets`,{key:t,value:a,type:"managed",description:"Encryption passphrase for iOS certificates (fastlane match)",visibility:"secret"}),r.success(c.green("\u2713 Generated and saved encryption passphrase to Dashboard")),r.info(c.cyan(`MATCH_PASSWORD: ${a}`))}catch(i){r.warn(c.yellow(`Could not save passphrase to Dashboard: ${i.message}`))}return a}async function pt(e,t,n,a,i,s,o,g){let d=se();r.info(c.blue("Configuring iOS certificate management..."));let A;if(!g){let I=await L({message:"Apple ID (for Apple Developer Portal):",placeholder:"your-email@example.com",validate:u=>u.includes("@")?void 0:"Please enter a valid email"});k(I)&&(_("Operation cancelled"),process.exit(0)),g=I}d.start(`Fetching ${i} certificates...`);try{let I=await gt(e),u="",f="";try{let C=await v.post("/credentials/build-server-token",{projectId:e});C.data.status==="success"&&C.data.credentials&&(process.env.AWS_ACCESS_KEY_ID=C.data.credentials.accessKeyId,process.env.AWS_SECRET_ACCESS_KEY=C.data.credentials.secretAccessKey,C.data.credentials.sessionToken&&(process.env.AWS_SESSION_TOKEN=C.data.credentials.sessionToken),f=C.data.credentials.region||"ap-south-1",u=C.data.credentials.bucket||m.bucketPrefix,process.env.AWS_REGION=f,delete process.env.AWS_PROFILE)}catch(C){throw r.error(`Failed to authenticate with ${m.name} Cloud.`),C}if(!u||!f){r.error(`Failed to resolve S3 configuration from ${m.name} Cloud.`);return}let p=s.teamId||o.submit?.production?.ios?.appleTeamId;if(!p)try{let F=(await v.get(`/projects/${e}/secrets`)).data.secrets?.find(S=>S.key==="APPLE_TEAM_ID");F&&(p=F.value,r.info(c.dim(`Using Team ID from Dashboard: ${p}`)))}catch{}if(p&&p===o.submit?.production?.ios?.appleTeamId&&r.info(c.dim(`Using Apple Team ID from config: ${p}`)),!p){r.warn(c.yellow(`
+Apple Team ID is required to fetch certificates.`)),r.info(c.dim("You can find this at: https://developer.apple.com/account \u2192 Membership Details"));let C=await L({message:"Enter your 10-character Apple Team ID:",placeholder:"e.g. SA56KTS33U",validate:F=>F.length===10?void 0:"Team ID must be exactly 10 characters"});k(C)&&(_("Operation cancelled"),process.exit(0)),p=C,await Fe(e,p)}d.stop("Starting certificate sync...");let l=`${m.buildPrefix}-${p}.keychain-db`,y=m.keychainPassword;try{let F=`${process.env.HOME||"/Users/"+(process.env.USER||m.nameLower)}/Library/Keychains/${l}`;r.info(c.dim(`Ensuring keychain exists: ${l}`));try{T(`security create-keychain -p ${y} ${l} 2>/dev/null || true`),T(`security unlock-keychain -p ${y} ${l}`),T(`security set-keychain-settings ${l}`);let b=T("security list-keychains -d user").toString();if(!b.includes(l)){r.info(c.dim(`Adding ${l} to search list`));let Z=[...b.replace(/"/g,"").split(`
+`).map(B=>B.trim()).filter(B=>B.length>0),F].join(" ");T(`security list-keychains -d user -s ${Z}`)}}catch(b){r.warn(c.dim("Keychain setup warning (non-critical): "+b.message))}let S,R;try{let W=((await v.get(`/credentials/${e}`)).data.credentials||[]).find(Z=>Z.type==="asc_api_key"&&Z.issuerId);if(W){let Z=await v.get(`/credentials/${W.credentialId}/download`,{params:{projectId:e,format:"raw"}});if(Z.data.downloadUrl){let J=await(await import("axios")).default.get(Z.data.downloadUrl,{responseType:"arraybuffer"}),Q=w.join(he.tmpdir(),`mach-asc-${Date.now()}`);h.mkdirSync(Q,{recursive:!0}),A=w.join(Q,`AuthKey_${W.keyId}.p8`),h.writeFileSync(A,Buffer.from(J.data)),S=W.keyId,R=W.issuerId,r.success(c.green("\u2713 ASC API key loaded \u2014 no 2FA required for Portal operations"))}}}catch(b){r.warn(c.dim(`Could not load ASC API key: ${b.message}. Will fall back to Apple ID auth.`))}r.info(c.dim("Generating secure P12 export password..."));let H=xe();r.success(c.green("\u2713 Secure P12 password generated."));let P={...process.env,AWS_REGION:process.env.AWS_REGION||"ap-south-1",AWS_ACCESS_KEY_ID:process.env.AWS_ACCESS_KEY_ID,AWS_SECRET_ACCESS_KEY:process.env.AWS_SECRET_ACCESS_KEY,SSL_CERT_FILE:"/etc/ssl/cert.pem",AWS_CA_BUNDLE:"/etc/ssl/cert.pem",FASTLANE_SSL_CA_CERT:"/etc/ssl/cert.pem",MATCH_PASSWORD:I,FASTLANE_USER:g,FASTLANE_SKIP_UPDATE_CHECK:"1",FASTLANE_TEAM_ID:p,MATCH_KEYCHAIN_NAME:F,MATCH_KEYCHAIN_PASSWORD:y,TERM:process.env.TERM||"xterm-256color",SHELL:process.env.SHELL||"/bin/zsh",MATCH_OUTPUT_PATH:w.join(process.cwd(),"temp_match"),MATCH_STORAGE_MODE:"s3",MATCH_S3_REGION:f,MATCH_S3_BUCKET:u,MATCH_S3_OBJECT_PREFIX:"ios-certificates/",MATCH_USERNAME:g,MATCH_APP_IDENTIFIER:t,MATCH_TYPE:i,[`${m.envPrefix}P12_PASSWORD`]:H,...A&&S&&R?{APP_STORE_CONNECT_API_KEY_KEY_ID:S,APP_STORE_CONNECT_API_KEY_ISSUER_ID:R,APP_STORE_CONNECT_API_KEY_KEY_FILEPATH:A,FASTLANE_SKIP_2FA:"1"}:{}};if(s.force){r.warn(c.yellow(`
+\u26A0\uFE0F  Force flag detected: Hard resetting ${i} certificates...`)),r.info(c.dim("Detected decryption failure loop. Clearing remote storage directly to allow fresh generation.")),r.info(c.cyan(`Current MATCH_PASSWORD: ${I}`)),r.info(c.dim(`Cleaning match storage for Team ID: ${p}...`));try{(await v.post("/credentials/clean-match-storage",{projectId:e,teamId:p})).data.status==="success"&&r.success(c.green(`\u2713 Cleared S3 storage for Team ID: ${p}`))}catch(b){r.warn(c.yellow(`S3 cleanup via API failed: ${b.message}`)),r.info(c.dim("Continuing to attempt standard nuke..."))}try{T(`fastlane match nuke ${i} --skip_confirmation`,{stdio:"inherit",cwd:process.cwd(),env:P}),r.success(c.green(`\u2713 Nuked existing ${i} credentials`))}catch{r.warn(c.yellow("Standard nuke failed (likely due to password mismatch).")),r.info(c.dim("Since S3 was cleared manually, proceeding to generation..."))}}if(i==="adhoc"||i==="development")try{r.info(c.blue("Fetching registered devices..."));let W=(await v.get("/devices")).data.devices||[];if(W.length===0)r.warn(c.yellow("No registered devices found. Profile will only include devices already on the Apple Developer Portal.")),r.info(c.dim(`Register devices with: ${m.nameLower} device register`));else{let{multiselect:Z}=await import("@clack/prompts"),B=await Z({message:`Select devices to include in the ${i} profile:`,options:W.map(J=>({value:J.udid,label:`${J.name} (${J.udid.substring(0,12)}...)`,hint:J.model||J.platform})),initialValues:W.map(J=>J.udid)});if(!k(B)&&B.length>0){let J=W.filter(Q=>B.includes(Q.udid));if(r.info(c.blue(`Registering ${J.length} device(s) on Apple Developer Portal...`)),A&&S&&R)await ct(J,S,R,A);else{r.info(c.dim("You will be prompted for a 2FA code once \u2014 type it and press Enter."));for(let Q of J){let _e=Q.name.replace(/"/g,'\\"');ee(`fastlane run register_device name:"${_e}" udid:"${Q.udid}"`,{shell:!0,env:P,stdio:"inherit",cwd:process.cwd()})}}r.info(c.green("\u2713 Device registration complete."))}}}catch(b){r.warn(c.yellow(`Could not fetch registered devices: ${b.message}`)),r.info(c.dim("Continuing without explicit device registration."))}try{let b=ee(`fastlane match ${i} --app_identifier "${t}" --profile_name "${m.nameLower} ${i} ${t}"`,{shell:!0,cwd:process.cwd(),env:P,stdio:"inherit",encoding:"utf-8"});if(b.status!==0){r.warn(c.yellow(`
+Certificate sync failed. Attempting to create App ID and retry...`));try{T(`fastlane produce --app_identifier "${t}" --app_name "${t}" --skip_itc`,{stdio:"inherit",env:P}),r.success(c.green("\u2713 App ID created successfully")),r.info(c.blue("Retrying certificate sync...")),b=ee(`fastlane match ${i} --app_identifier "${t}" --profile_name "${m.nameLower} ${i} ${t}"`,{shell:!0,cwd:process.cwd(),env:P,stdio:"inherit",encoding:"utf-8"})}catch{}if(b.status!==0)throw new Error("fastlane match failed")}}catch(b){r.warn(c.yellow(`
+Sync failed. This often happens if the encryption passphrase (MATCH_PASSWORD) is incorrect or session expired.`)),r.info(c.cyan(`Failed MATCH_PASSWORD was: ${I}`));let W=await z({message:"What would you like to do?",options:[{value:"retry_password",label:"Retry with a different MATCH_PASSWORD",hint:"Manually enter the decryption passphrase"},{value:"check_portal",label:"Check Apple Portal (Resolve certificate limits)",hint:"See if you have too many certificates"},{value:"manual",label:"Fallback to manual upload",hint:"Provide .p12 and .mobileprovision files"},{value:"cancel",label:"Cancel",hint:"Go back"}]});if(k(W)||W==="cancel")throw b;if(W==="retry_password"){r.info(c.dim(`
+You are overriding the dashboard passphrase for this session.`));let Z=await le({message:"Enter the correct MATCH_PASSWORD for this project:"});if(Z&&!k(Z)){I=Z,r.info(c.blue("Retrying with provided passphrase...")),r.info(c.cyan(`New MATCH_PASSWORD: ${I}`));let B={...P,MATCH_PASSWORD:I};if(ee(`fastlane match ${i}`,{shell:!0,stdio:"inherit",cwd:process.cwd(),env:B}).status===0)await v.post(`/projects/${e}/secrets`,{key:"MATCH_ENCRYPTION_PASSPHRASE",value:I,description:"Encryption passphrase for iOS certificates (fastlane match)",visibility:"secret"}),r.success(c.green("\u2713 Dashboard passphrase updated.")),r.info(c.cyan(`MATCH_PASSWORD: ${I}`));else throw new Error("Sync failed again with provided passphrase.")}else throw b}else if(W==="check_portal")try{let Z=await ye(P,i);if(Z.length>0){if(r.info(c.dim(`Found ${Z.length} existing ${i} certificates on the portal.`)),await Ct(i,P,e,Z)&&(r.info(c.blue("Retrying certificate sync...")),ee(`fastlane match ${i}`,{shell:!0,stdio:"inherit",cwd:process.cwd(),env:P}).status!==0))throw new Error("Retry failed")}else throw r.error(c.red("No existing certificates found on portal to resolve.")),b}catch(Z){throw r.warn(c.dim(`Portal check warning: ${Z.message}`)),b}else throw b}r.success(c.green("\u2713 Certificates fetched and synced"));let U=w.join(process.cwd(),"temp_match"),$=w.join(U,`${m.fastlanePrefix}_export.p12`),Y=Ce(U,/\.mobileprovision$/);try{let W=`${process.env.HOME||"/Users/"+(process.env.USER||m.nameLower)}/Library/Keychains/${l}`;h.existsSync(U)||h.mkdirSync(U,{recursive:!0}),r.info(c.dim("Exporting certificate from keychain for dashboard upload..."));let Z=T(`security find-identity -v -p codesigning "${W}"`,{encoding:"utf-8"});r.info(c.dim(`Identities in keychain:
+${Z.trim()}`)),T(`security export -k "${W}" -t identities -f pkcs12 -o "${$}" -P ""`,{stdio:"ignore"});try{let B=T(`openssl pkcs12 -in "${$}" -nokeys -passin pass: -legacy 2>/dev/null || openssl pkcs12 -in "${$}" -nokeys -passin pass: 2>/dev/null`,{encoding:"utf-8"});if(!B.includes(p))throw new Error(`Exported P12 does not contain identity for team ${p}. Found: ${B.substring(0,200)}`);r.success(c.green(`\u2713 P12 verified \u2014 contains correct team identity (${p})`))}catch(B){throw new Error(`P12 verification failed: ${B.message}`)}}catch{r.warn(c.dim("Could not export certificate from keychain."))}s.teamId&&!p&&await Fe(e,s.teamId);let D=h.existsSync($)?$:Ce(U,/\.p12$/);if(D&&Y){let b,W;try{let Z=await ye(P,i);Z.length>0&&(b=Z[0].expires,W=Z[0].id)}catch{r.warn(c.dim("Could not fetch expiration date or ID for dashboard record."))}await te(e,D,"ios_cert",t,a,void 0,b,s.teamId||p,W,H),await te(e,Y,"ios_profile",t,a,void 0,b,s.teamId||p),r.success(c.green("\u2713 Both iOS certificate and provisioning profile uploaded successfully"));try{h.existsSync("./temp_match")&&h.rmSync("./temp_match",{recursive:!0,force:!0})}catch{}}else r.warn(c.yellow("Certificates generated but not found in expected location.")),r.info(c.dim("Falling back to manual upload...")),await Ee(e,t,a)}catch(C){d.stop("Certificate fetch failed"),r.error(c.red(`Error: ${C.message}`)),r.info(c.dim("Falling back to manual upload...")),await Ee(e,t,a)}}catch(I){d.stop("iOS setup failed"),r.error(c.red(`Error: ${I.message}`))}finally{if(A)try{h.rmSync(w.dirname(A),{recursive:!0,force:!0})}catch{}}}async function Fe(e,t){try{await v.post(`/projects/${e}/secrets`,{key:"APPLE_TEAM_ID",value:t,description:"Apple Developer Team ID (used for iOS signing)"}),r.success(c.green(`\u2713 Saved Team ID ${t} to Dashboard`))}catch(n){r.warn(c.yellow(`Could not save Team ID to Dashboard: ${n.message}`))}}async function Ee(e,t,n){r.info(c.yellow(`
+Manual Upload Mode`)),r.info("Please provide your certificate and provisioning profile:");let a=await L({message:"Path to .p12 certificate file:",validate:o=>h.existsSync(o)?void 0:"File not found"});k(a)&&(_("Operation cancelled"),process.exit(0));let i=await L({message:"Path to .mobileprovision file:",validate:o=>h.existsSync(o)?void 0:"File not found"});k(i)&&(_("Operation cancelled"),process.exit(0));let s=se();s.start(`Uploading to ${m.name} Dashboard...`);try{await te(e,a,"ios_cert",t,n),await te(e,i,"ios_profile",t,n),s.stop("Upload complete"),r.success(c.green("\u2713 iOS credentials uploaded successfully"))}catch(o){throw s.stop("Upload failed"),o}}async function ut(e,t,n,a,i){let s=se();r.step(c.blue("Android Credential Setup"));let o=a.bundleId;if(!o){let u=re(i,t),f=[];try{let l=(await v.get(`/credentials/${e}`)).data.credentials||[];f=[...new Set(l.filter(y=>y.platform==="android"&&y.bundleId&&y.bundleId!=="*").map(y=>y.bundleId))]}catch{}if(u&&!f.includes(u)&&f.unshift(u),f.length>0){let p=[...f.map(y=>({value:y,label:y,hint:y===u?"from config":void 0})),{value:"__new__",label:"+ Enter a new Package Name"}],l=await z({message:"Which Package Name are you setting up credentials for?",options:p});if(k(l)&&(_("Operation cancelled"),process.exit(0)),l==="__new__"){let y=await L({message:"Android Package Name (e.g. com.example.app):",placeholder:"com.example.app",validate:C=>C.includes(".")?void 0:"Please enter a valid package name"});k(y)&&(_("Operation cancelled"),process.exit(0)),o=y}else o=l}else{let p=await L({message:"Android Package Name (e.g. com.example.app):",placeholder:"com.example.app",validate:l=>l.includes(".")?void 0:"Please enter a valid package name"});k(p)&&(_("Operation cancelled"),process.exit(0)),o=p}}try{let p=((await v.get(`/credentials/${e}`)).data.credentials||[]).find(l=>l.platform==="android"&&l.distributionType===n&&l.bundleId===o);if(p){r.warn(c.yellow(`\u26A0\uFE0F  Existing Android credentials found for ${n}`));let l=await L({message:"What would you like to do? (use/new/cancel)",validate:y=>{let C=y.toLowerCase();if(!(C==="use"||C==="new"||C==="cancel"))return"Please type: use, new, or cancel"}});if(k(l)||l.toLowerCase()==="cancel")return;if(l.toLowerCase()==="use"){r.success(c.green("\u2713 Using existing credentials."));return}await v.delete(`/credentials/${p.credentialId}?projectId=${e}`)}}catch{}let g="./android/app/my-release-key.jks";if(h.existsSync(g)){let u=await Me({message:"Upload existing keystore?"});if(u&&!k(u)){let f=await L({message:"Key alias:",initialValue:"my-key-alias"});if(k(f))return;let p=await le({message:"Keystore password:"});if(k(p))return;let l=await le({message:"Key password (leave blank if same as keystore password):"});if(k(l))return;let y=l.trim()||p;await te(e,g,"android_keystore",o,n,f,void 0,void 0,void 0,void 0,p,y),r.success(c.green("\u2713 Keystore uploaded"));return}}r.info(c.blue("Generating new Android keystore..."));let d=a.keyAlias||`${m.nameLower}-${At()}`,A=xe(),I=`./${m.nameLower}-${t}.jks`;h.existsSync(I)&&h.unlinkSync(I),s.start("Generating keystore...");try{let u=A.replace(/'/g,"'\\''");T(`keytool -genkeypair -v -keystore "${I}" -alias "${d}" -keyalg RSA -keysize 2048 -validity 10000 -storepass '${u}' -keypass '${u}' -dname "CN=${m.name} Build, OU=Mobile, O=Company, L=City, S=State, C=US"`,{stdio:"inherit"}),s.stop("Keystore generated"),await te(e,I,"android_keystore",o,n,d,void 0,void 0,void 0,void 0,A,A),r.success(c.green("\u2713 Android credentials uploaded successfully")),r.info(c.cyan(`Key Alias: ${d}`))}catch(u){throw s.stop("Generation failed"),new Error(`Keystore generation failed: ${u.message}`)}}var It=e=>new Promise(t=>setTimeout(t,e));function ft(e){return/ECONNRESET|ETIMEDOUT|EAI_AGAIN|ENOTFOUND|ECONNABORTED|socket hang up|network|timeout|temporar/i.test(e)||/API_ERROR:\s*(408|409|425|429|5\d\d)/i.test(e)}async function te(e,t,n,a,i,s,o,g,d,A,I,u){let f=w.basename(t);r.info(c.dim(`Uploading ${f} (Isolated process)...`));let p=new URL(import.meta.url),l=w.dirname(p.pathname),C=[w.join(l,"commands","isolated-upload.js"),e,t,n,a,i,s||"undefined",o||"undefined",g||"undefined",d||"undefined",A||"undefined",I||"undefined",u||"undefined"],F="",S=5;for(let R=1;R<=S;R++){let H=ee("node",C,{stdio:"pipe",encoding:"utf-8",env:{...process.env,AT_CLI_ISOLATED:"1"}});if(H.status===0&&H.stdout.includes("SUCCESS")){r.info(c.dim(`\u2713 ${f} uploaded and registered.`));return}if(H.status===0){r.warn(c.yellow(`Isolated upload finished but success not confirmed: ${H.stdout}`));return}if(F=(H.stderr||H.stdout||H.error?.message||"Unknown isolated upload failure").trim(),!ft(F)||R>=S)throw r.error(c.red(`Isolated Upload Failed: ${F}`)),new Error(F);let U=Math.min(3e4,1500*Math.pow(2,R-1));r.warn(c.yellow(`Upload failed with a transient error. Retrying ${f} in ${Math.round(U/1e3)}s... (${R}/${S})`)),await It(U)}throw new Error(F||"Unknown isolated upload failure")}async function mt(e){let t=se(),n=e.platform,a=`./${m.configFileName}`;if(!h.existsSync(a)){r.error(`No ${m.configFileName} found. Run \`${m.nameLower} init\` or \`${m.nameLower} link\` first.`);return}let i=JSON.parse(h.readFileSync(a,"utf-8")),{projectId:s}=i;if(!s){r.error(`${m.configFileName} is missing projectId.`);return}try{t.start("Fetching project secrets...");let g=(await v.get(`/projects/${s}/secrets/export?env=all`)).data.secrets||{};t.stop("Secrets fetched and merged."),t.start("Fetching credentials...");let A=(await v.get(`/credentials/${s}`)).data.credentials||[];t.stop(`Found ${A.length} metadata records.`);let I=A.filter(l=>l.platform===n);if(I.length===0){r.info(`No ${n} credentials found on Dashboard.`);return}let u="./credentials.json",f={};if(h.existsSync(u))try{f=JSON.parse(h.readFileSync(u,"utf-8"))}catch{r.warn("Could not parse existing credentials.json, creating a new one.")}f[n]||(f[n]={});let p=w.join(process.cwd(),"credentials",n);h.existsSync(p)||h.mkdirSync(p,{recursive:!0});for(let l of I){t.start(`Downloading ${l.type} (${l.distributionType})...`);try{let y=await v.get(`/credentials/${l.credentialId}/download`,{params:{projectId:s,format:"raw"}});if(y.data.status==="success"&&y.data.downloadUrl){let C=w.join(process.cwd(),"credentials",n,l.distributionType);h.existsSync(C)||h.mkdirSync(C,{recursive:!0});let F=l.s3Key?.split(".").pop()||(l.type.includes("keystore")?"jks":l.type.includes("cert")?"p12":"mobileprovision"),S=`${l.type}.${F}`,R=w.join(C,S),H=await Be.get(y.data.downloadUrl,{responseType:"arraybuffer"});h.writeFileSync(R,Buffer.from(H.data));let P=w.join("credentials",n,l.distributionType,S),U="",$="",Y={alias:"",keystorePassword:"",keyPassword:""};if(n==="ios"&&l.type==="ios_cert"||n==="android"&&l.type==="android_keystore"){let D=await et(s,n,l);if(n==="ios"&&l.type==="ios_cert"&&F.toLowerCase()==="p12"){if(U=nt(D,g),U){let b=Ge(R,`${w.basename(R,w.extname(R))}-password.txt`,U);$=w.join("credentials",n,l.distributionType,w.basename(b))}}else if(n==="android"&&l.type==="android_keystore"&&(Y=it(D,g),Y.keystorePassword||Y.keyPassword)){let b=[Y.alias?`keyAlias=${Y.alias}`:void 0,Y.keystorePassword?`keystorePassword=${Y.keystorePassword}`:void 0,Y.keyPassword?`keyPassword=${Y.keyPassword}`:void 0].filter(Boolean).join(`
+`),W=Ge(R,`${w.basename(R,w.extname(R))}-passwords.txt`,b);$=w.join("credentials",n,l.distributionType,w.basename(W))}}if(n==="android")l.type==="android_keystore"&&(f.android.keystore={keystorePath:P,keystorePassword:Y.keystorePassword,keyAlias:Y.alias,keyPassword:Y.keyPassword},$&&(f.android.keystore.keystoreArchivePath=$));else if(n==="ios"){let D=l.distributionType==="store"?"production":l.distributionType==="adhoc"?"staging":"development";f.ios[D]||(f.ios[D]={}),l.type==="ios_cert"?(f.ios[D].certificatePath=P,f.ios[D].certificatePassword=U,$&&(f.ios[D].certificateArchivePath=$)):l.type==="ios_profile"&&(f.ios[D].provisioningProfilePath=P)}t.stop(`\u2713 ${l.type} (${l.distributionType}) saved${$?" with password archive":""}.`)}}catch(y){let C=y.response?.data?.message||y.message;t.stop(c.dim(`- Skipped ${l.type} (${l.distributionType}): ${C}`))}}h.writeFileSync(u,JSON.stringify(f,null,2)),r.success(c.green("\u2713 Local credentials.json updated.")),Ne("Credentials have been synced to your local machine. Ensure credentials.json and credentials/ is added to your .gitignore.","Sync Complete")}catch(o){t.stop(c.red("Sync failed.")),r.error(`Error: ${o.message}`)}}function xe(){let e="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_+=",t="";for(let n=0;n<24;n++)t+=e.charAt(Math.floor(Math.random()*e.length));return t}function At(e=8){let t="abcdefghijklmnopqrstuvwxyz0123456789",n="";for(let a=0;a<e;a++)n+=t.charAt(Math.floor(Math.random()*t.length));return n}async function Ct(e,t,n,a){let i=a||await ye(t,e);if(!i||i.length===0)return!1;let s=await z({message:"Select a certificate to revoke:",options:[...i.map(o=>({value:`revoke:${o.id}`,label:`Revoke: ${o.name} (${o.expires})`})),{value:"nuke",label:"Revoke All"},{value:"cancel",label:"Cancel"}]});return k(s)||s==="cancel"?!1:s==="nuke"?(T(`fastlane match nuke ${e}`,{stdio:"inherit",cwd:process.cwd(),env:t}),!0):typeof s=="string"&&s.startsWith("revoke:")?(await yt(t,s.split(":")[1]),!0):!1}async function ye(e,t){let n=t==="development"?"development":"distribution",a=`
+lane :${m.fastlanePrefix}_list_certs do
+  require 'spaceship'
+  require 'json'
+  begin
+    Spaceship::Portal.login(ENV['FASTLANE_USER'])
+    Spaceship::Portal.select_team(team_id: ENV['FASTLANE_TEAM_ID'])
+    output = Spaceship::Portal.certificate.all.select { |c|
+      if "${n}" == "development"
+        c.type_display_id.downcase.include?("development")
+      else
+        c.type_display_id.downcase.include?("distribution") || c.type_display_id.downcase.include?("production")
+      end
+    }.map { |c| { id: c.id, name: c.name, expires: c.expires.strftime('%Y-%m-%d'), type: c.type_display_id } }
+    puts "${m.jsonStartMarker}" + output.to_json + "${m.jsonEndMarker}"
+  rescue => e
+    $stderr.puts "ERROR: #{e.message}"
+    exit 1
+  end
+end`,i=w.join(he.tmpdir(),`/tmp/${m.nameLower}-list-certs-${Date.now()}`),s=w.join(i,"fastlane"),o=w.join(s,"Fastfile");try{h.existsSync(s)||h.mkdirSync(s,{recursive:!0}),h.writeFileSync(o,a);let d=T(`fastlane ${m.fastlanePrefix}_list_certs`,{env:{...e,CI:"1",FASTLANE_FASTFILE:o},cwd:i,stdio:["inherit","pipe","inherit"]}).toString().match(new RegExp(`${m.jsonStartMarker}(.*)${m.jsonEndMarker}`));return d?JSON.parse(d[1]):[]}finally{h.existsSync(i)&&h.rmSync(i,{recursive:!0,force:!0})}}async function yt(e,t){let n=`
+lane :${m.fastlanePrefix}_revoke_cert do
+  require 'spaceship'
+  begin
+    Spaceship::Portal.login(ENV['FASTLANE_USER'])
+    Spaceship::Portal.select_team(team_id: ENV['FASTLANE_TEAM_ID'])
+    cert = Spaceship::Portal.certificate.all.find { |c| c.id == "${t}" }
+    cert.revoke! if cert
+  rescue => e
+    $stderr.puts "ERROR: #{e.message}"
+    exit 1
+  end
+end`,a=w.join(he.tmpdir(),`/tmp/${m.nameLower}-revoke-cert-${Date.now()}`),i=w.join(a,"fastlane"),s=w.join(i,"Fastfile");try{h.existsSync(i)||h.mkdirSync(i,{recursive:!0}),h.writeFileSync(s,n),T(`fastlane ${m.fastlanePrefix}_revoke_cert`,{env:{...e,CI:"1",FASTLANE_FASTFILE:s},cwd:a,stdio:["inherit","pipe","inherit"]})}finally{h.existsSync(a)&&h.rmSync(a,{recursive:!0,force:!0})}}export{St as a,j as b,re as c,oe as d,wt as e,Ze as f,Xe as g,lt as h,mt as i};

package/dist/commands/isolated-upload.js

@@ -1 +1 @@
-import{g as r}from"../chunk-NZ4K6LDA.js";import P from"fs";import A from"path";var C=n=>new Promise(e=>setTimeout(e,n));function S(n){let e=n?.response?.status,t=n?.code||"",a=n?.message||"";return!e||e===408||e===409||e===425||e===429||e>=500||/ECONNRESET|ETIMEDOUT|EAI_AGAIN|ENOTFOUND|ECONNABORTED|socket hang up|network|timeout/i.test(`${t} ${a}`)}async function u(n,e,t=5){let a;for(let d=1;d<=t;d++)try{return await e()}catch(s){if(a=s,!S(s)||d>=t)break;let o=Math.min(3e4,1500*Math.pow(2,d-1));console.warn(`[UPLOAD_RETRY] ${n} failed transiently. Retrying in ${Math.round(o/1e3)}s... (${d}/${t})`),await C(o)}throw a}async function b(){let[n,e,t,a,d,s,o,f,p,c,l,m,y,I,w,T,R,E]=process.argv.slice(2);try{let i=A.basename(e),h=P.readFileSync(e),N=await u("create upload URL",()=>r.post("/credentials/upload-url",{projectId:n,fileName:i,fileType:"application/octet-stream",type:t,distributionType:d})),{uploadUrl:g,key:O,fileId:$}=N.data,k=(await import("axios")).default;await u("upload file to storage",()=>k.put(g,h,{headers:{"Content-Type":"application/octet-stream"},maxContentLength:1/0,maxBodyLength:1/0,timeout:18e4})),await u("register credential",()=>r.post("/credentials",{projectId:n,id:$,name:`${t} - ${d}`,type:t,bundleId:a,distributionType:d,s3Key:O,alias:s==="undefined"?void 0:s,expiresAt:o==="undefined"?void 0:o,issuerId:f==="undefined"?void 0:f,keyId:p==="undefined"?void 0:p,password:c==="undefined"?void 0:c,keystorePassword:l==="undefined"?void 0:l,keyPassword:m==="undefined"?void 0:m,teamId:y==="undefined"?void 0:y,teamName:I==="undefined"?void 0:I,developerTeamId:w==="undefined"?void 0:w,appStoreConnectTeamId:T==="undefined"?void 0:T,providerId:R==="undefined"?void 0:R,providerName:E==="undefined"?void 0:E})),console.log("SUCCESS"),process.exit(0)}catch(i){i.response?console.error(`API_ERROR: ${i.response.status} - ${JSON.stringify(i.response.data)}`):console.error(`NETWORK_ERROR: ${i.message}`),process.exit(1)}}b();
+import{h as r}from"../chunk-HIP5BA3H.js";import P from"fs";import A from"path";var C=n=>new Promise(e=>setTimeout(e,n));function S(n){let e=n?.response?.status,t=n?.code||"",a=n?.message||"";return!e||e===408||e===409||e===425||e===429||e>=500||/ECONNRESET|ETIMEDOUT|EAI_AGAIN|ENOTFOUND|ECONNABORTED|socket hang up|network|timeout/i.test(`${t} ${a}`)}async function u(n,e,t=5){let a;for(let d=1;d<=t;d++)try{return await e()}catch(s){if(a=s,!S(s)||d>=t)break;let o=Math.min(3e4,1500*Math.pow(2,d-1));console.warn(`[UPLOAD_RETRY] ${n} failed transiently. Retrying in ${Math.round(o/1e3)}s... (${d}/${t})`),await C(o)}throw a}async function b(){let[n,e,t,a,d,s,o,f,p,c,l,m,y,I,w,T,R,E]=process.argv.slice(2);try{let i=A.basename(e),h=P.readFileSync(e),N=await u("create upload URL",()=>r.post("/credentials/upload-url",{projectId:n,fileName:i,fileType:"application/octet-stream",type:t,distributionType:d})),{uploadUrl:g,key:O,fileId:$}=N.data,k=(await import("axios")).default;await u("upload file to storage",()=>k.put(g,h,{headers:{"Content-Type":"application/octet-stream"},maxContentLength:1/0,maxBodyLength:1/0,timeout:18e4})),await u("register credential",()=>r.post("/credentials",{projectId:n,id:$,name:`${t} - ${d}`,type:t,bundleId:a,distributionType:d,s3Key:O,alias:s==="undefined"?void 0:s,expiresAt:o==="undefined"?void 0:o,issuerId:f==="undefined"?void 0:f,keyId:p==="undefined"?void 0:p,password:c==="undefined"?void 0:c,keystorePassword:l==="undefined"?void 0:l,keyPassword:m==="undefined"?void 0:m,teamId:y==="undefined"?void 0:y,teamName:I==="undefined"?void 0:I,developerTeamId:w==="undefined"?void 0:w,appStoreConnectTeamId:T==="undefined"?void 0:T,providerId:R==="undefined"?void 0:R,providerName:E==="undefined"?void 0:E})),console.log("SUCCESS"),process.exit(0)}catch(i){i.response?console.error(`API_ERROR: ${i.response.status} - ${JSON.stringify(i.response.data)}`):console.error(`NETWORK_ERROR: ${i.message}`),process.exit(1)}}b();

package/dist/credentials-G45XNNRU.js

@@ -0,0 +1 @@
+import{g as a,h as b,i as c}from"./chunk-K7ILUOUP.js";import"./chunk-HIP5BA3H.js";export{a as credentialsMainCommand,b as credentialsSetupCommand,c as downloadCredentialsCommand};