@radhya/mach 1.9.6 → 1.9.8
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +38 -1
- package/dist/{chunk-NZ4K6LDA.js → chunk-HIP5BA3H.js} +3 -3
- package/dist/chunk-K7ILUOUP.js +61 -0
- package/dist/commands/isolated-upload.js +1 -1
- package/dist/credentials-G45XNNRU.js +1 -0
- package/dist/index.js +143 -96
- package/package.json +1 -1
- package/dist/chunk-H4NBOSTT.js +0 -58
- package/dist/credentials-Y4SOYAM2.js +0 -1
package/dist/index.js
CHANGED
|
@@ -1,12 +1,12 @@
|
|
|
1
1
|
#!/usr/bin/env node
|
|
2
|
-
import{a as
|
|
3
|
-
`;s+=`Region: ${
|
|
4
|
-
`,s+=`S3 Website URL: ${
|
|
5
|
-
|
|
6
|
-
CloudFront ID: ${
|
|
7
|
-
CloudFront URL: ${
|
|
8
|
-
${s.map(
|
|
9
|
-
`)}`,"Sitemap Summary"),
|
|
2
|
+
import{a as Ue,b as Je,c as In,d as _n,e as pt,f as wn,h as $t}from"./chunk-K7ILUOUP.js";import{a as p,b as En,c as Ie,d as bn,e as An,f as Xt,g as Ye,h as C}from"./chunk-HIP5BA3H.js";import{Command as sd,Option as _t}from"commander";import{configDotenv as ad}from"dotenv";import{intro as Se,outro as Yo}from"@clack/prompts";import ge from"chalk";import{text as $n,confirm as Jo,spinner as Xo,isCancel as Ni,cancel as Pt,note as qo,outro as Zo}from"@clack/prompts";import vt from"chalk";async function Pn(){try{let e=await $n({message:"Enter Bucket Name:",placeholder:"e.g. my-app-dev",validate(r){if(r.length===0)return"Bucket name is required"}});Ni(e)&&(Pt("Operation cancelled."),process.exit(0));let t=await $n({message:"Enter Region:",initialValue:"ap-south-1"});Ni(t)&&(Pt("Operation cancelled."),process.exit(0));let i=await Jo({message:"Do you want to create a CloudFront Distribution for this bucket?",initialValue:!0});Ni(i)&&(Pt("Operation cancelled."),process.exit(0));let n=Xo();n.start("Setting up hosting infrastructure...");try{let r=await C.post("/hosting/setup",{bucketName:e,region:t,createCloudFront:i});if(r.data.status!=="success")throw new Error(r.data.message||"Hosting setup failed");n.stop("Hosting setup complete!");let o=r.data,s=`Bucket Name: ${vt.cyan(o.bucketName)}
|
|
3
|
+
`;s+=`Region: ${vt.cyan(o.region)}
|
|
4
|
+
`,s+=`S3 Website URL: ${vt.blue(o.s3WebsiteUrl)}`,o.cloudFrontId&&(s+=`
|
|
5
|
+
|
|
6
|
+
CloudFront ID: ${vt.cyan(o.cloudFrontId)}`,s+=`
|
|
7
|
+
CloudFront URL: ${vt.blue(o.cloudFrontUrl)}`),qo(s,"Setup Complete!"),Zo("You are all set!")}catch(r){n.stop("Setup failed"),Pt(`Error: ${r.response?.data?.message||r.message}`)}}catch(e){Pt(`An unexpected error occurred: ${e.message}`)}}import{readdir as Qo,writeFile as es,access as ts,mkdir as is}from"fs/promises";import{join as vn}from"path";import{spinner as ns,text as Dn,isCancel as Rn,cancel as Ti,note as rs,outro as os}from"@clack/prompts";import ss from"chalk";async function as(){let e=["./app","./src/app"];for(let t of e)try{return await ts(t),t}catch{}return null}async function On(e){try{let i=await as()||"./app",n=await Dn({message:"Enter path to your app directory:",placeholder:i,initialValue:i,validate(d){if(d.length===0)return"Path is required"}});Rn(n)&&(Ti("Operation cancelled."),process.exit(0));let r=await Dn({message:"Enter your website base URL:",placeholder:"https://example.com",validate(d){if(d.length===0)return"Base URL is required";if(!d.startsWith("http"))return"URL must start with http:// or https://"}});Rn(r)&&(Ti("Operation cancelled."),process.exit(0));let o=ns();o.start("Scanning app directory for routes...");let s=await Cn(n);o.stop(`Found ${s.length} routes`);let l=ls(s,r),a=e.output||"./public/sitemap.xml";o.start(`Writing sitemap to ${a}...`);let c=a.substring(0,a.lastIndexOf("/"));if(c)try{await is(c,{recursive:!0})}catch{}await es(a,l,"utf-8"),o.stop("Sitemap generated successfully!"),rs(`Routes included:
|
|
8
|
+
${s.map(d=>` \u2022 ${d.path}`).join(`
|
|
9
|
+
`)}`,"Sitemap Summary"),os(`Sitemap saved to ${ss.cyan(a)}`)}catch(t){Ti(`An error occurred: ${t.message}`)}}async function Cn(e,t=""){let i=[];try{let n=await Qo(e,{withFileTypes:!0});for(let r of n){let o=vn(e,r.name);if(!(r.name.startsWith("_")||r.name.startsWith("."))){if(r.isDirectory()){let s=await Cn(o,vn(t,r.name));i.push(...s)}else if(r.isFile()){if(r.name==="index.tsx"||r.name==="index.ts"||r.name==="index.jsx"||r.name==="index.js"){let s=t===""?"/":`/${t}`;i.push({path:s,file:o})}else if(r.name.match(/\.(tsx|ts|jsx|js)$/)&&!r.name.includes("_layout")&&!r.name.includes("+")){let s=r.name.replace(/\.(tsx|ts|jsx|js)$/,""),l=`/${t}/${s}`.replace(/\/+/g,"/");i.push({path:l,file:o})}}}}}catch(n){throw new Error(`Failed to scan directory ${e}: ${n.message}`)}return i}function ls(e,t){let i=new Date().toISOString().split("T")[0];return`<?xml version="1.0" encoding="UTF-8"?>
|
|
10
10
|
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
|
|
11
11
|
${e.map(r=>{let o=r.path;return o=o.replace(/\/\([^)]+\)/g,""),o=o.replace(/\/\[.*?\]/g,"/:id"),o=o.replace(/\/+/g,"/"),o===""&&(o="/"),` <url>
|
|
12
12
|
<loc>${t}${o}</loc>
|
|
@@ -15,7 +15,7 @@ ${e.map(r=>{let o=r.path;return o=o.replace(/\/\([^)]+\)/g,""),o=o.replace(/\/\[
|
|
|
15
15
|
<priority>0.8</priority>
|
|
16
16
|
</url>`}).join(`
|
|
17
17
|
`)}
|
|
18
|
-
</urlset>`}import{randomUUID as
|
|
18
|
+
</urlset>`}import{randomUUID as ia}from"crypto";import be from"path";import Rt from"axios";import na from"os";import{spinner as Ki,confirm as cr,isCancel as dr,log as R}from"@clack/prompts";import N from"chalk";import oe from"fs";import{execSync as ur}from"child_process";import pr from"adm-zip";import{spinner as ms,log as qt}from"@clack/prompts";import Tn from"chalk";import kn from"fs";import xn from"path";var Nn=`#!/bin/bash
|
|
19
19
|
# --- Mach Cloud Build Script (Android) ---
|
|
20
20
|
# All S3 operations use presigned URLs via curl \u2014 zero AWS credentials on instance.
|
|
21
21
|
BUILD_ID="{{BUILD_ID}}"
|
|
@@ -520,14 +520,14 @@ for pid in "\${cache_pids[@]}"; do wait "$pid" || true; done
|
|
|
520
520
|
echo "Build orchestrator finished. Auto-terminating instance in 5 seconds..."
|
|
521
521
|
sleep 5
|
|
522
522
|
sudo shutdown -h now
|
|
523
|
-
`;import
|
|
524
|
-
`):"",
|
|
525
|
-
export MACH_APP_NAME="${
|
|
526
|
-
export MACH_BUILD_PROFILE="${
|
|
523
|
+
`;import cs from"crypto";var ds="mach-env-v2-js-bundle-cache",us=new Set(["BUILD_ID","BUILD_NUMBER","ANDROID_VERSION_CODE","MACH_TOKEN","MACH_DEBUG","MACH_ENV_FINGERPRINT","CODEARTIFACT_AUTH_TOKEN","EXPO_ZQRN_BB_REPO_TOKEN","SENTRY_AUTH_TOKEN","IOS_DIST_P12","IOS_PROVISIONING_PROFILE","IOS_P12_PASSWORD","MATCH_ENCRYPTION_PASSPHRASE","MATCH_PASSWORD","MATCH_KEYCHAIN_NAME","MATCH_KEYCHAIN_PASSWORD","APPLE_TEAM_ID","FASTLANE_TEAM_ID","ANDROID_KEYSTORE","ANDROID_KEYSTORE_BASE64","ANDROID_STORE_PASSWORD","ANDROID_KEY_PASSWORD","ANDROID_KEY_ALIAS","KEYSTORE_PASSWORD","KEYSTORE_ALIAS","AWS_ACCESS_KEY_ID","AWS_SECRET_ACCESS_KEY","AWS_SESSION_TOKEN","AWS_SECURITY_TOKEN","GITHUB_TOKEN","NPM_TOKEN"]),ps=["PRESIGNED_","KEYSTORE_PASSWORD_"],fs=e=>!e||us.has(e)?!1:!ps.some(t=>e.startsWith(t)),rt=(e,t,i)=>({...e,EXPO_NO_DOTENV:"1",MACH_BUILD_PROFILE:t,MACH_APP_NAME:i.appName||i.name||"App"}),ft=e=>{let t=Object.entries(e).filter(([i])=>fs(i)).sort(([i],[n])=>i.localeCompare(n));return cs.createHash("sha256").update(JSON.stringify({version:ds,entries:t})).digest("hex")};var Ln=e=>e.replace(/\\/g,"\\\\").replace(/"/g,'\\"').replace(/\$/g,"\\$").replace(/`/g,"\\`"),Mn=async(e,t,i={},n,r)=>{let o=ms(),s=e.buildProfile||"production",l=s==="production",a=e.apk===!0,c=e.developmentClient?"assembleDebug":l?"bundleRelease":"assembleRelease",d=e.buildCommand||(a?"assembleRelease":c),u=e.nodeVersion?[`echo "[NODE] Switching to Node ${e.nodeVersion}..."`,`CURRENT_MAJOR=$(node -e "process.stdout.write(process.version.split('.')[0].replace('v',''))" 2>/dev/null || echo "0")`,`if [ "$CURRENT_MAJOR" != "${e.nodeVersion}" ]; then`,` curl -fsSL https://deb.nodesource.com/setup_${e.nodeVersion}.x | bash - 2>&1`," apt-get install -y nodejs 2>&1",' echo "[NODE] Installed Node $(node -v)"',"else",' echo "[NODE] Already on Node $(node -v) \u2014 no switch needed"',"fi"].join(`
|
|
524
|
+
`):"",f;if(r){let P=xn.isAbsolute(r)?r:xn.resolve(process.cwd(),r);kn.existsSync(P)?(f=kn.readFileSync(P,"utf-8"),qt.info(Tn.magenta(`\u2713 Loaded preBuild hook: ${r}`))):qt.warn(`preBuild script not found at ${P} \u2014 skipping`)}let m=rt(i,s,e),I=ft(m),L=Nn.replace(/\{\{BUILD_ID\}\}/g,t).replace(/\{\{BUILD_COMMAND\}\}/g,d).replace("{{NODE_VERSION_SETUP}}",u).replace("{{ENV_VARS}}",`
|
|
525
|
+
export MACH_APP_NAME="${Ln(m.MACH_APP_NAME)}"
|
|
526
|
+
export MACH_BUILD_PROFILE="${Ln(s)}"
|
|
527
527
|
export MACH_ENV_FINGERPRINT="${I}"
|
|
528
528
|
export EXPO_NO_DOTENV=1
|
|
529
529
|
{{ENV_VARS}}
|
|
530
|
-
`);if(e.dryRun){
|
|
530
|
+
`);if(e.dryRun){qt.info("User Data Script (dry run):"),console.log(L);return}o.start("Requesting cloud build instance...");try{let P=await C.post("/builds/launch-android",{projectId:n,buildId:t,platform:e.platform,buildProfile:e.buildProfile,buildCommand:d,instanceType:e.instanceType,ami:e.ami,keepInstance:e.keepInstance,region:e.region,subnet:e.subnet,securityGroup:e.securityGroup,projectSecrets:i,dryRun:e.dryRun,userDataScript:L,preBuildScriptContent:f});if(P.data.status!=="success")throw new Error(P.data.message||"Failed to launch build instance");let B=P.data.instanceId;return o.stop("Build Started"),qt.success(Tn.green(`Build initiated on cloud instance (${B}).`)),{instanceId:B}}catch(P){o.stop("Android Build Failed");let B=P.response?.data?.message||P.message;throw new Error(`Failed to launch Android build: ${B}`)}};import{spinner as gs,log as mt}from"@clack/prompts";import Xe from"chalk";import hs from"fs";import{execSync as Dt}from"child_process";var Un=`#!/bin/bash
|
|
531
531
|
# --- Mach Cloud Build Script (iOS) ---
|
|
532
532
|
# All S3 operations use presigned URLs via curl \u2014 zero AWS credentials on Mac.
|
|
533
533
|
|
|
@@ -1011,69 +1011,69 @@ touch done
|
|
|
1011
1011
|
if [ ! -z "$PRESIGNED_DONE_MARKER" ]; then
|
|
1012
1012
|
curl -X PUT -T done "$PRESIGNED_DONE_MARKER" --silent
|
|
1013
1013
|
fi
|
|
1014
|
-
`;var
|
|
1015
|
-
`:
|
|
1014
|
+
`;var Bn=e=>e.replace(/\\/g,"\\\\").replace(/"/g,'\\"').replace(/\$/g,"\\$").replace(/`/g,"\\`"),Fn=async(e,t,i={},n)=>{let r=gs();e.sshHost||(e.sshHost="localhost",mt.message(Xe.yellow("No SSH host provided, defaulting to localhost."))),r.start(`Connecting to remote Mac at ${Xe.cyan(e.sshHost)}...`);let o=e.sshUser||process.env.USER||"ubuntu",s=e.sshKey,l=`${o}@${e.sshHost}`,a=`ssh ${s?`-i ${s}`:""} -o StrictHostKeyChecking=no ${l}`,c=`scp ${s?`-i ${s}`:""} -o StrictHostKeyChecking=no`;try{let d=o==="ubuntu"?"/home/ubuntu":`/Users/${o}`,u=(i.PROJECT_ID||"default_project").replace(/[^a-zA-Z0-9-_]/g,"_"),f=`${d}/${p.remoteWorkspacesDir}/${u}`;r.message(`Preparing stable workspace: ${f}...`),Dt(`${a} "mkdir -p ${f}"`,{stdio:"inherit"}),r.message("Transferring source code...");let m=`/tmp/${p.nameLower}-source-${t}.zip`;Dt(`${c} ${m} ${l}:${f}/source.zip`,{stdio:"inherit"});let I=e.iosApiKeyPath?`${f}/api_key.p8`:"",L="";e.iosApiKeyPath&&(r.message("Uploading App Store Connect API key..."),Dt(`${c} ${e.iosApiKeyPath} ${l}:${I}`),e.iosApiKeyId&&e.iosApiKeyIssuer&&(L=`-authenticationKeyID ${e.iosApiKeyId} -authenticationKeyIssuerID ${e.iosApiKeyIssuer} -authenticationKeyPath ${I}`));let P={};if(n)try{let D=await C.post(`/builds/${n}/${t}/build-urls`,{platform:"ios"});D.data.status==="success"&&(P=D.data.urls)}catch(D){mt.warn(Xe.yellow(`Could not fetch build URLs: ${D.message}`))}let B="";if(P.credentials&&P.credentials.length>0)for(let D of P.credentials)D.type==="p12"?B+=`curl -sf -o "$CERT_DIR/${D.name}" "${D.downloadUrl}" || true
|
|
1015
|
+
`:D.type==="mobileprovision"&&(B+=`curl -sf -o "$PROV_TEMP/${D.name}" "${D.downloadUrl}" || true
|
|
1016
1016
|
`);r.message("Generating macOS build script...");let k=process.env.CODEARTIFACT_AUTH_TOKEN?`export CODEARTIFACT_AUTH_TOKEN="${process.env.CODEARTIFACT_AUTH_TOKEN}"
|
|
1017
|
-
`:"";if(i)for(let[
|
|
1018
|
-
`}let j=e.buildProfile||"production",h=
|
|
1017
|
+
`:"";if(i)for(let[D,$]of Object.entries(i)){let M=$.replace(/"/g,'\\"').replace(/\$/g,"\\$").replace(/`/g,"\\`");k+=`export ${D}="${M}"
|
|
1018
|
+
`}let j=e.buildProfile||"production",h=rt(i,j,e),K=ft(h),_=[k,P.logUpload?`export PRESIGNED_LOG_UPLOAD="${P.logUpload}"`:"",P.doneMarker?`export PRESIGNED_DONE_MARKER="${P.doneMarker}"`:"",P.cacheDerivedDataDownload?`export PRESIGNED_CACHE_DD_DOWNLOAD="${P.cacheDerivedDataDownload}"`:"",P.cacheDerivedDataUpload?`export PRESIGNED_CACHE_DD_UPLOAD="${P.cacheDerivedDataUpload}"`:"",P.cacheNodeModulesDownload?`export PRESIGNED_CACHE_NODE_DOWNLOAD="${P.cacheNodeModulesDownload}"`:"",P.cacheNodeModulesUpload?`export PRESIGNED_CACHE_NODE_UPLOAD="${P.cacheNodeModulesUpload}"`:"",P.cachePodsDownload?`export PRESIGNED_CACHE_PODS_DOWNLOAD="${P.cachePodsDownload}"`:"",P.cachePodsUpload?`export PRESIGNED_CACHE_PODS_UPLOAD="${P.cachePodsUpload}"`:"",P.artifactIpaUpload?`export PRESIGNED_ARTIFACT_IPA_UPLOAD="${P.artifactIpaUpload}"`:"",P.artifactAppZipUpload?`export PRESIGNED_ARTIFACT_APP_ZIP_UPLOAD="${P.artifactAppZipUpload}"`:"",`export BUILD_ID="${t}"`,`export MACH_BUILD_PROFILE="${Bn(j)}"`,`export MACH_APP_NAME="${Bn(h.MACH_APP_NAME)}"`,`export MACH_ENV_FINGERPRINT="${K}"`,"export EXPO_NO_DOTENV=1",`export ${p.envPrefix}PROJECT_ID="${u}"`,i.MATCH_ENCRYPTION_PASSPHRASE?`export MATCH_PASSWORD="${i.MATCH_ENCRYPTION_PASSPHRASE}"`:"",i.APPLE_TEAM_ID?`export FASTLANE_TEAM_ID="${i.APPLE_TEAM_ID}"`:"",`export MATCH_KEYCHAIN_NAME="${p.credentialsKeychain}"`,`export MATCH_KEYCHAIN_PASSWORD="${p.keychainPassword}"`].filter(Boolean).join(`
|
|
1019
1019
|
`),S=e.nodeVersion?[`echo "[NODE] Switching to Node ${e.nodeVersion}..."`,'export NVM_DIR="$HOME/.nvm"','[ -s "$NVM_DIR/nvm.sh" ] && . "$NVM_DIR/nvm.sh" --no-use',`nvm install ${e.nodeVersion} 2>/dev/null || true`,`nvm use ${e.nodeVersion} --silent`,`export PATH="$NVM_DIR/versions/node/$(nvm version ${e.nodeVersion})/bin:$PATH"`,'echo "[NODE] Now using: $(node -v) at $(which node)"'].join(`
|
|
1020
|
-
`):"",O=
|
|
1021
|
-
${
|
|
1022
|
-
${
|
|
1023
|
-
${
|
|
1020
|
+
`):"",O=Un,v={"{{REMOTE_DIR}}":f,"{{ENV_VARS}}":_,"{{CREDENTIAL_DOWNLOADS}}":B,"{{IOS_SCHEME}}":e.iosScheme||"","{{IOS_CONFIG}}":e.iosConfiguration||"Release","{{TEAM_ID}}":e.iosTeamId||"","{{AUTH_PARAMS}}":L,"{{IS_SIMULATOR}}":e.simulator?"true":"false","{{BUILD_ID}}":t,"{{EXPORT_METHOD}}":e.iosExportMethod||"ad-hoc","{{NODE_VERSION_SETUP}}":S};Object.entries(v).forEach(([D,$])=>{O=O.split(D).join($)});let T=`/tmp/${p.nameLower}-mac-build-${t}.sh`;if(hs.writeFileSync(T,O),Dt(`${c} ${T} ${l}:${f}/build.sh`),r.stop("Remote script uploaded."),mt.info(Xe.cyan("Executing remote build. This might take a while...")),Dt(`${a} "bash ${f}/build.sh"`,{stdio:"inherit"}),r.stop("Remote build finished!"),n){r.start("Fetching artifact links...");try{let $=(await C.get(`/builds/${n}/${t}/artifacts`)).data.artifacts||[],M=e.simulator===!0;if($.length===0&&!M)throw r.stop("Build Failed!"),new Error("Build completed but no artifacts were generated. Check build logs for errors.");if(r.stop("Build Successful!"),$.length>0){mt.success("Build Artifacts Ready:");for(let G of $)console.log(`
|
|
1021
|
+
${Xe.yellow(G.name)}:
|
|
1022
|
+
${Xe.cyan(G.downloadUrl)}`);console.log(`
|
|
1023
|
+
${Xe.dim("Note: Links are valid for 7 days.")}`)}else M&&mt.warn("Simulator build completed. No artifacts uploaded.")}catch(D){r.stop("Could not fetch artifacts"),mt.warn(Xe.yellow(`Artifact listing failed: ${D.message}`))}}}catch(d){throw r.stop("iOS Build Failed"),d}};import ys from"crypto";import Re from"axios";import Hn from"fs";var Be=6e4,Ss=12e4,ki=4,Ge=e=>encodeURIComponent(e),Es=e=>new Promise(t=>setTimeout(t,e));async function Oe(e,t){let i;for(let n=1;n<=ki;n++)try{return await t()}catch(r){if(i=r,n>=ki||!bs(r))throw r;let o=Number(r.response?.headers?.["retry-after"]),s=Number.isFinite(o)&&o>0?o*1e3:Math.min(2e3*n*n,15e3);console.log(`[Google Play] ${e} failed (attempt ${n}/${ki}); retrying in ${Math.round(s/1e3)}s...`),await Es(s)}throw i}function bs(e){let t=e.response?.status;return t?t===408||t===409||t===425||t===429||t>=500:!0}async function jn(e,t){let i;try{let n=await Zt(t),r=Ge(e);if(i=(await Oe("create edit",()=>Re.post(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${r}/edits`,{},{headers:{Authorization:`Bearer ${n}`,Connection:"close"},timeout:Be}))).data.id,!i)throw new Error("Google Play edit insert succeeded but did not return an edit id.");let s=Ge(i),l=0,c=(await Oe("list tracks",()=>Re.get(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${r}/edits/${s}/tracks`,{headers:{Authorization:`Bearer ${n}`,Connection:"close"},timeout:Be}))).data.tracks||[];for(let d of c)if(d.releases){for(let u of d.releases)if(u.versionCodes)for(let f of u.versionCodes){let m=parseInt(f,10);m>l&&(l=m)}}try{let u=(await Oe("list bundles",()=>Re.get(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${r}/edits/${s}/bundles`,{headers:{Authorization:`Bearer ${n}`,Connection:"close"},timeout:Be}))).data.bundles||[];for(let f of u)f.versionCode&&f.versionCode>l&&(l=f.versionCode)}catch{}try{let u=(await Oe("list APKs",()=>Re.get(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${r}/edits/${s}/apks`,{headers:{Authorization:`Bearer ${n}`,Connection:"close"},timeout:Be}))).data.apks||[];for(let f of u)f.versionCode&&f.versionCode>l&&(l=f.versionCode)}catch{}return l}catch(n){let r=n.response?.data?.error?.message||n.message;throw new Error(`Google Play API Error: ${r}`)}finally{if(i)try{let n=await Zt(t);await Oe("delete edit",()=>Re.delete(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${Ge(e)}/edits/${Ge(i)}`,{headers:{Authorization:`Bearer ${n}`,Connection:"close"},timeout:Be}))}catch{}}}async function Gn(e){let{packageName:t,serviceAccount:i,aabPath:n,track:r,releaseStatus:o,userFraction:s,changesNotSentForReview:l}=e,a;try{let d={Authorization:`Bearer ${await Zt(i)}`,Connection:"close"},u=Ge(t);if(a=(await Oe("create edit",()=>Re.post(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${u}/edits`,{},{headers:d,timeout:Be}))).data.id,!a)throw new Error("Google Play edit insert succeeded but did not return an edit id.");let m=Ge(a),I=Hn.statSync(n),L=await Oe("upload AAB",()=>Re.post(`https://androidpublisher.googleapis.com/upload/androidpublisher/v3/applications/${u}/edits/${m}/bundles`,Hn.createReadStream(n),{headers:{...d,"Content-Type":"application/octet-stream","Content-Length":I.size},maxBodyLength:1/0,maxContentLength:1/0,params:{uploadType:"media"},timeout:Ss})),P=Number(L.data.versionCode);if(!P)throw new Error("Google Play upload succeeded but did not return a versionCode.");let B={versionCodes:[String(P)],status:o};return(o==="inProgress"||o==="halted")&&typeof s=="number"&&(B.userFraction=s),await Oe("update track",()=>Re.put(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${u}/edits/${m}/tracks/${Ge(r)}`,{releases:[B]},{headers:d,timeout:Be})),await Oe("commit edit",()=>Re.post(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${u}/edits/${m}:commit`,{},{headers:d,params:l?{changesNotSentForReview:!0}:void 0,timeout:Be})),{editId:a,versionCode:P,track:r,releaseStatus:o,userFraction:s}}catch(c){if(a)try{let u=await Zt(i);await Oe("delete edit",()=>Re.delete(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${Ge(t)}/edits/${Ge(a)}`,{headers:{Authorization:`Bearer ${u}`,Connection:"close"},timeout:Be}))}catch{}let d=c.response?.data?.error?.message||c.message;throw new Error(`Google Play API Error: ${d}`)}}async function Zt(e){let t=Math.floor(Date.now()/1e3),i=t+3600,n={alg:"RS256",typ:"JWT"},r={iss:e.client_email,sub:e.client_email,aud:"https://oauth2.googleapis.com/token",iat:t,exp:i,scope:"https://www.googleapis.com/auth/androidpublisher"},o=Buffer.from(JSON.stringify(n)).toString("base64url"),s=Buffer.from(JSON.stringify(r)).toString("base64url"),l=`${o}.${s}`,a=ys.createSign("RSA-SHA256");a.update(l);let c=a.sign(e.private_key,"base64url"),d=`${l}.${c}`;return(await Oe("OAuth token exchange",()=>Re.post("https://oauth2.googleapis.com/token",{grant_type:"urn:ietf:params:oauth:grant-type:jwt-bearer",assertion:d},{headers:{Connection:"close"},timeout:Be}))).data.access_token}import As from"crypto";import Kn from"axios";var Li="https://api.appstoreconnect.apple.com/v1",Vn=6e4,xi=4,Is=e=>new Promise(t=>setTimeout(t,e));function _s(e,t,i){let n=Math.floor(Date.now()/1e3),r=Buffer.from(JSON.stringify({alg:"ES256",kid:e,typ:"JWT"})).toString("base64url"),o=Buffer.from(JSON.stringify({iss:t,iat:n,exp:n+1200,aud:"appstoreconnect-v1"})).toString("base64url"),s=`${r}.${o}`,l=As.createSign("SHA256");l.update(s);let a=l.sign({key:i,dsaEncoding:"ieee-p1363"}).toString("base64url");return`${s}.${a}`}function ws(e){let t=e.response?.status;return t?t===408||t===409||t===425||t===429||t>=500:!0}async function zn(e,t){let i;for(let n=1;n<=xi;n++)try{return await t()}catch(r){if(i=r,n>=xi||!ws(r))throw r;let o=Number(r.response?.headers?.["retry-after"]),s=Number.isFinite(o)&&o>0?o*1e3:Math.min(2e3*n*n,15e3);console.log(`[App Store Connect] ${e} failed (attempt ${n}/${xi}); retrying in ${Math.round(s/1e3)}s...`),await Is(s)}throw i}function Wn(e){return{Authorization:`Bearer ${_s(e.keyId,e.issuerId,e.privateKey)}`,"Content-Type":"application/json",Connection:"close"}}function $s(e){let t=e.response?.data?.errors;return Array.isArray(t)&&t.length>0?t.map(i=>i.detail||i.title||i.code).filter(Boolean).join("; "):e.response?.data?.error?.message||e.message||"Unknown App Store Connect error"}function Qt(e){let t=String(e||"").trim();if(/^\d+(?:\.\d+){0,2}$/.test(t))return t.split(".").map(i=>Number(i))}function Ps(e,t){let i=Qt(e),n=Qt(t);if(!i&&!n)return 0;if(!i)return-1;if(!n)return 1;let r=Math.max(i.length,n.length);for(let o=0;o<r;o++){let s=i[o]||0,l=n[o]||0;if(s!==l)return s>l?1:-1}return 0}function vs(e){let t=Qt(e);return!t||t.length===0?"1":(t[t.length-1]+=1,t.join("."))}async function Ds(e,t,i){if(t)return t;if(!i)throw new Error("Set ios.ascAppId or ios.bundleIdentifier so Mach can find the App Store Connect app.");let r=(await zn("lookup app by bundle ID",()=>Kn.get(`${Li}/apps`,{headers:Wn(e),params:{"filter[bundleId]":i,limit:1},timeout:Vn}))).data?.data?.[0];if(!r?.id)throw new Error(`No App Store Connect app found for bundle ID ${i}. Set ios.ascAppId in mach.config.json if the app exists.`);return r.id}async function Yn(e){let t={keyId:e.keyId,issuerId:e.issuerId,privateKey:e.privateKey};try{let i=await Ds(t,e.ascAppId,e.bundleId),n=`${Li}/builds`,r="0",o,s=0;for(;n&&s<10;){s+=1;let l=await zn("list builds",()=>Kn.get(n,{headers:Wn(t),params:n===`${Li}/builds`?{"filter[app]":i,"fields[builds]":"version,uploadedDate",sort:"-uploadedDate",limit:200}:void 0,timeout:Vn})),a=l.data?.data||[];for(let c of a){let d=String(c.attributes?.version||"").trim();Qt(d)&&Ps(d,r)>0&&(r=d,o=c.attributes?.uploadedDate)}n=l.data?.links?.next}return{appId:i,latestBuildNumber:r,nextBuildNumber:vs(r),latestUploadedDate:o}}catch(i){throw new Error(`App Store Connect API Error: ${$s(i)}`)}}import{spinner as ei,log as b,isCancel as ti,confirm as Rs,select as Ui}from"@clack/prompts";import y from"chalk";import g from"fs";import w from"path";import{execFileSync as Mi,execSync as J,spawn as Zn}from"child_process";import he from"os";import Os from"crypto";var Qn=(e,t)=>t.filter(i=>g.existsSync(w.join(e,i))).reduce((i,n)=>i.update(g.readFileSync(w.join(e,n))),Os.createHash("sha256")).digest("hex").slice(0,16),Cs=e=>Qn(e,["package.json","yarn.lock","package-lock.json","bun.lockb"]),Ns=e=>Qn(e,["Podfile","Podfile.lock"]),Ts=e=>{let t=w.join(e,"fingerprint.json");try{return JSON.parse(g.readFileSync(t,"utf-8"))}catch{return{}}},Jn=(e,t)=>{g.mkdirSync(e,{recursive:!0}),g.writeFileSync(w.join(e,"fingerprint.json"),JSON.stringify(t,null,2))},ks=7200*1e3,xs=(e,t)=>{g.mkdirSync(e,{recursive:!0});let i=w.join(e,"build.lock");if(g.existsSync(i))try{let n=JSON.parse(g.readFileSync(i,"utf-8")),r=Date.now()-(n.timestamp||0);if(r<ks)throw new Error(`Another build is already running for this project (build ${n.buildId}, started ${Math.round(r/6e4)}m ago). Cancel it from the dashboard first, or wait for it to complete.`)}catch(n){if(n.message.includes("Another build"))throw n}g.writeFileSync(i,JSON.stringify({buildId:t,pid:process.pid,timestamp:Date.now()}))},Ls=(e,t)=>{let i=w.join(e,"build.lock");try{g.existsSync(i)&&JSON.parse(g.readFileSync(i,"utf-8")).buildId===t&&g.unlinkSync(i)}catch{}},Xn=2e5,qn=(e,t)=>{let i=e+t;return i.length>Xn?i.slice(-Xn):i},er=e=>e.replace(/\u001b\[[0-9;]*m/g,""),Ms=(e,t,i,n)=>{let r=er(n).replace(/\r/g,`
|
|
1024
1024
|
`).split(`
|
|
1025
1025
|
`).map(a=>a.trimEnd()).filter(Boolean),o=r.filter(a=>/\berror:|fatal error:|xcodebuild: error|The following build commands failed|Command PhaseScriptExecution failed|CodeSign|Provisioning profile|No profiles|requires a provisioning profile|Undefined symbols|ld:|clang: error|SwiftCompile|CompileC/i.test(a)),s=o.length>0?o.slice(-40):r.slice(-80),l=o.length>0?"Key failure output":"Last command output";return[`Command failed with code ${i}: ${e} ${t.join(" ")}`,s.length>0?`
|
|
1026
1026
|
${l}:
|
|
1027
1027
|
${s.join(`
|
|
1028
|
-
`)}`:""].join("")},
|
|
1028
|
+
`)}`:""].join("")},Us=e=>e==="xcodebuild"&&process.env.MACH_XCODE_FULL_LOGS!=="1",Bs=e=>{let t=er(e).trim();return t?/\berror:|fatal error:|xcodebuild: error|The following build commands failed|Command PhaseScriptExecution failed|CodeSign|Provisioning profile|No profiles|requires a provisioning profile|Undefined symbols|ld:|clang: error|SwiftCompile|CompileC|CFBundleVersion|ARCHIVE SUCCEEDED|ARCHIVE FAILED|EXPORT SUCCEEDED|EXPORT FAILED|Exported .* to:|\[IPA VALID\]/i.test(t):!1},ot=e=>{try{g.existsSync(e)&&g.rmSync(e,{recursive:!0,force:!0})}catch{}},Fs=(e,t)=>{try{if(!g.existsSync(e))return;for(let i of g.readdirSync(e))t(i)&&ot(w.join(e,i))}catch{}},tr=e=>{b.info(y.dim("Clearing Metro/Hermes JS transform caches..."));let t=he.tmpdir();Fs(t,i=>i==="metro-cache"||i.startsWith("metro-")||i.startsWith("haste-map-")||i.startsWith("react-native-packager-cache-")),ot(w.join(e,".expo")),ot(w.join(e,"node_modules/.cache/metro")),ot(w.join(he.homedir(),".cache/metro")),ot(w.join(he.homedir(),".cache/react-native-packager")),ot(w.join(he.homedir(),"Library/Caches/metro")),ot(w.join(he.homedir(),"Library/Caches/react-native-packager"))},Fe=(e,t,i=process.cwd(),n={},r,o)=>new Promise((s,l)=>{let a="",c=Us(e),d=Date.now(),u=["/opt/homebrew/bin","/usr/local/bin","/usr/bin","/bin","/usr/sbin","/sbin",w.join(he.homedir(),".npm-global/bin")],m=[...(process.env.PATH||"").split(":"),...u].filter((k,j,h)=>k&&h.indexOf(k)===j).join(":");process.env[`${p.envPrefix}DEBUG`]&&console.log(y.magenta(`[${p.nameUpper}_DEBUG] Execution PATH: ${m}`));let I={...process.env,...n,PATH:m,LANG:"en_US.UTF-8",LC_ALL:"en_US.UTF-8"};r&&process.env[`${p.envPrefix}DEBUG`]&&(r(y.magenta(`[ENVIRONMENT] node: ${process.execPath}
|
|
1029
1029
|
`)),r(y.magenta(`[ENVIRONMENT] PATH: ${m}
|
|
1030
1030
|
`)),r(y.magenta(`[ENVIRONMENT] command: ${e} ${t.join(" ")}
|
|
1031
|
-
`)));let L=e;if(["node","npm","npx","pod"].includes(e)){let k=
|
|
1032
|
-
`)))}let
|
|
1031
|
+
`)));let L=e;if(["node","npm","npx","pod"].includes(e)){let k=w.dirname(process.execPath),j=w.join(k,e);g.existsSync(j)&&(L=j,r&&r(y.dim(`[EXEC] Using absolute path: ${L}
|
|
1032
|
+
`)))}let P=Zn(L,t,{stdio:"pipe",cwd:i,shell:!0,env:I,detached:process.platform!=="win32"});if(o){if(o.aborted){if(P.pid)try{process.kill(-P.pid,"SIGTERM")}catch{P.kill()}return l(new Error("Command aborted"))}o.addEventListener("abort",()=>{if(P.pid)try{process.kill(-P.pid,"SIGTERM")}catch{P.kill()}l(new Error("Command aborted"))})}let B=(k,j)=>{if(!c){j.write(k);return}let h=k.replace(/\r/g,`
|
|
1033
1033
|
`).split(`
|
|
1034
|
-
`).filter(
|
|
1034
|
+
`).filter(Bs);if(h.length>0){j.write(`${h.join(`
|
|
1035
1035
|
`)}
|
|
1036
|
-
`),
|
|
1037
|
-
`),
|
|
1038
|
-
`).find(r=>/^Payload\/[^/]+\.app\/Info\.plist$/.test(r.trim()));if(!i)throw new Error(`Could not validate iOS build number: ${
|
|
1039
|
-
\u{1F6D1} Build cancelled from dashboard. Terminating...`)),u.abort(),m&&clearInterval(m))}catch{}},5e3));let I=
|
|
1040
|
-
`)},_=async(S,O,
|
|
1041
|
-
`);else if(n&&l==="ios"&&!e.simulator)try{let S=parseInt(i.BUILD_NUMBER||"0",10),O=Number.isFinite(S)?S:0,
|
|
1042
|
-
`))}catch(S){b.warn(y.yellow(`Could not fetch auto build number: ${S.message}`))}await K("lock"),e.developmentClient?(b.info(y.blue("\u2139\uFE0F Configuring build to INCLUDE expo-dev-client (Development Client mode)...")),delete process.env.EXPO_NO_DEV_CLIENT,delete process.env.EXPO_AUTOLINKING_EXCLUDE):(b.info(y.blue("\u2139\uFE0F Configuring build to EXCLUDE expo-dev-client (Production/Staging mode)...")),process.env.EXPO_NO_DEV_CLIENT="1",process.env.EXPO_AUTOLINKING_EXCLUDE="expo-dev-client");try{await K("clone"),b.info(y.dim("Preparing source...")),await K("read_config");let S=
|
|
1043
|
-
`)}if(await K("read_package"),e.nodeVersion){let F=process.env.NVM_DIR||
|
|
1044
|
-
`),b.info(y.green(`\u2713 Node switched to ${e.nodeVersion} (${
|
|
1045
|
-
`),b.warn(y.yellow(`Node ${e.nodeVersion} not found in nvm \u2014 using system default`))}await K("deps"),o.start("Checking dependencies...");let O=
|
|
1046
|
-
`),g.rmSync(
|
|
1036
|
+
`),d=Date.now();return}let K=Date.now();K-d>3e4&&(j.write(`[xcodebuild] still running; detailed output is streamed to Mach logs.
|
|
1037
|
+
`),d=K)};P.stdout.on("data",k=>{let j=k.toString();a=qn(a,j),B(j,process.stdout),r&&r(j)}),P.stderr.on("data",k=>{let j=k.toString();a=qn(a,j),B(j,process.stderr),r&&r(j)}),P.on("close",k=>{k===0?s(k):l(new Error(Ms(e,t,k,a)))}),P.on("error",k=>l(k))}),Hs=e=>{let t=Math.floor(e/1e3%60),i=Math.floor(e/(1e3*60)%60),n=Math.floor(e/(1e3*60*60)%24),r=[];return n>0&&r.push(`${n}h`),i>0&&r.push(`${i}m`),(t>0||r.length===0)&&r.push(`${t}s`),r.join(" ")},st=(e,t)=>{let i=[];try{if(!g.existsSync(e))return i;let n=g.readdirSync(e);for(let r of n){let o=w.join(e,r);try{let s=g.statSync(o);if(t.some(a=>r.endsWith(a))){i.push(w.resolve(o));continue}s.isDirectory()&&(i=i.concat(st(o,t)))}catch{}}}catch{}return i},js=/^\d+(?:\.\d+){0,2}$/,ir=e=>{let t=String(e||"").trim();return!t||t==="undefined"||t==="null"?null:js.test(t)?t:null},nr=(e,t)=>{let i=ir(e);if(!i)throw new Error(`Invalid iOS CFBundleVersion from ${t}: "${e||""}". Apple requires one to three period-separated integers, for example "42" or "1.2.3". If you see "[Decryption Failed]", fix/remove the broken BUILD_NUMBER secret and rebuild.`);return i},rr=(e,t)=>Mi("/usr/libexec/PlistBuddy",["-c",`Print :${t}`,e],{encoding:"utf-8"}).trim(),Gs=e=>{let t=w.join(e,"Info.plist");if(!g.existsSync(t))throw new Error(`Could not validate iOS build number: ${t} not found.`);return nr(rr(t,"CFBundleVersion"),t)},Ks=e=>{let i=Mi("unzip",["-Z1",e],{encoding:"utf-8"}).split(`
|
|
1038
|
+
`).find(r=>/^Payload\/[^/]+\.app\/Info\.plist$/.test(r.trim()));if(!i)throw new Error(`Could not validate iOS build number: ${w.basename(e)} has no Payload/*.app/Info.plist.`);let n=g.mkdtempSync(w.join(he.tmpdir(),`${p.nameLower}-ipa-plist-`));try{let r=w.join(n,"Info.plist"),o=Mi("unzip",["-p",e,i.trim()]);return g.writeFileSync(r,o),nr(rr(r,"CFBundleVersion"),`${w.basename(e)}:${i.trim()}`)}finally{g.rmSync(n,{recursive:!0,force:!0})}},Bi=async(e,t,i={},n,r={})=>{let o=ei(),s=Date.now(),l=e.platform,a=e.buildProfile||"production",c=()=>rt(i,a,e),d=async(S,O={})=>{if(n)for(let v=1;v<=3;v++)try{await C.patch(`/builds/${n}/${t}`,{status:S,...O});return}catch(T){let D=T?.response?.data?.message||T?.message||String(T);console.error(`[reportStatus] attempt ${v}/3 failed (status=${S}): ${D}`),v<3&&await new Promise($=>setTimeout($,2e3))}},u=new AbortController,{signal:f}=u,m=null;n&&(m=setInterval(async()=>{try{(await C.get(`/builds/${n}/${t}`)).data.status==="cancelled"&&(b.warn(y.yellow(`
|
|
1039
|
+
\u{1F6D1} Build cancelled from dashboard. Terminating...`)),u.abort(),m&&clearInterval(m))}catch{}},5e3));let I=w.join(process.cwd(),".mach-cache"),L="setup",P="",B=null,k=async()=>{if(!P||!n)return;let S=P;P="";try{let O=S;Object.values(i).forEach(v=>{if(v&&v.length>5){let T=v.replace(/[.*+?^${}()|[\]\\]/g,"\\$&");O=O.replace(new RegExp(T,"g"),"[SECRET]")}}),await C.post(`/builds/${n}/${t}/logs`,{log:O,step:L})}catch{}},j=async()=>{B&&(clearTimeout(B),B=null),await k(),Ls(I,t),m&&(clearInterval(m),m=null);try{let S=w.join(he.tmpdir(),`${p.buildPrefix}-${t}.keychain-db`);g.existsSync(S)&&(J(`security delete-keychain "${S}"`,{stdio:"ignore"}),b.info(y.dim("\u{1F511} Build keychain deleted.")))}catch{}try{let S=w.join(he.homedir(),"Library/MobileDevice/Provisioning Profiles");if(g.existsSync(S)){let O=g.readdirSync(S).filter(v=>v.includes(t)||v.startsWith(`${p.nameLower}-temp-${t}`));for(let v of O)g.unlinkSync(w.join(S,v))}}catch{}},h=async S=>{n&&(P+=S,P.length>=8192?(B&&(clearTimeout(B),B=null),await k()):B||(B=setTimeout(()=>{B=null,k()},2e3)))},K=async S=>{L=S,await h(`[STEP_START:${S}] ${Math.floor(Date.now()/1e3)}
|
|
1040
|
+
`)},_=async(S,O,v,T)=>await Fe(S,O,v,T,D=>{h(D)},f);b.info(y.blue(`\u{1F680} Starting local build for ${l} (${a})...`));try{xs(I,t)}catch(S){throw await d("failed",{error:S.message}),S}if(await d("building"),await K("setup"),l==="ios"&&!e.simulator&&i.MACH_IOS_BUILD_NUMBER_LOCKED==="1"&&i.BUILD_NUMBER)b.info(y.dim(`Auto build number: ${i.BUILD_NUMBER}`)),await h(`[BUILD_NUMBER] ${i.BUILD_NUMBER}
|
|
1041
|
+
`);else if(n&&l==="ios"&&!e.simulator)try{let S=parseInt(i.BUILD_NUMBER||"0",10),O=Number.isFinite(S)?S:0,v=await C.post(`/projects/${n}/next-build-number`,{platform:"ios",startFrom:O});v.data.status==="success"&&(i.BUILD_NUMBER=String(v.data.buildNumber),b.info(y.dim(`Auto build number: ${i.BUILD_NUMBER}`)),await h(`[BUILD_NUMBER] ${i.BUILD_NUMBER}
|
|
1042
|
+
`))}catch(S){b.warn(y.yellow(`Could not fetch auto build number: ${S.message}`))}await K("lock"),e.developmentClient?(b.info(y.blue("\u2139\uFE0F Configuring build to INCLUDE expo-dev-client (Development Client mode)...")),delete process.env.EXPO_NO_DEV_CLIENT,delete process.env.EXPO_AUTOLINKING_EXCLUDE):(b.info(y.blue("\u2139\uFE0F Configuring build to EXCLUDE expo-dev-client (Production/Staging mode)...")),process.env.EXPO_NO_DEV_CLIENT="1",process.env.EXPO_AUTOLINKING_EXCLUDE="expo-dev-client");try{await K("clone"),b.info(y.dim("Preparing source...")),await K("read_config");let S=w.join(process.cwd(),p.configFileName);if(g.existsSync(S)){let U=JSON.parse(g.readFileSync(S,"utf-8"))?.build?.[a]||{};await h(`[CONFIG] Profile: ${a}, distribution: ${U.distribution||"not set"}, simulator: ${U.simulator||!1}
|
|
1043
|
+
`)}if(await K("read_package"),e.nodeVersion){let F=process.env.NVM_DIR||w.join(he.homedir(),".nvm"),U=w.join(F,"versions","node"),Y;if(g.existsSync(U)){let A=g.readdirSync(U).sort().reverse(),V=e.nodeVersion.startsWith("v")?e.nodeVersion:`v${e.nodeVersion}`,X=A.find(ie=>ie===V||ie.startsWith(V+".")||ie.startsWith(`v${e.nodeVersion}.`));X&&(Y=w.join(U,X,"bin"))}if(Y&&g.existsSync(Y)){let A=process.env.PATH||"";process.env.PATH=`${Y}:${A}`,await h(`[NODE] Switched to Node ${e.nodeVersion} \u2014 using ${Y}
|
|
1044
|
+
`),b.info(y.green(`\u2713 Node switched to ${e.nodeVersion} (${Y})`))}else await h(`[NODE] Warning: Node ${e.nodeVersion} not found in nvm. Run: nvm install ${e.nodeVersion} on the build machine.
|
|
1045
|
+
`),b.warn(y.yellow(`Node ${e.nodeVersion} not found in nvm \u2014 using system default`))}await K("deps"),o.start("Checking dependencies...");let O=Ts(I),v=Cs(process.cwd()),T=g.existsSync("node_modules"),D=g.existsSync("yarn.lock"),$=g.existsSync("bun.lockb");T&&O.node&&O.node!==v&&(o.stop("Dependency fingerprint changed \u2014 clearing node_modules for clean install..."),await h(`[CACHE] package.json/lockfile changed \u2014 wiping node_modules
|
|
1046
|
+
`),g.rmSync(w.join(process.cwd(),"node_modules"),{recursive:!0,force:!0}),T=!1);let M="npm",G=["install","--prefer-offline"];D?(M="yarn",G=["install","--prefer-offline"]):$&&(M="bun",G=["install"]),T?o.stop("Cached node_modules found. Syncing dependencies..."):o.stop("No cached dependencies. Running fresh install..."),e.preBuild&&(b.info(y.blue("Running pre-install hook...")),b.info(y.dim(`> ${e.preBuild}`)),await K("prebuild"),await _("bash",[e.preBuild],process.cwd(),c())),b.info(y.dim(`Running ${M} ${G.join(" ")}...`)),await _(M,G,process.cwd(),c()),O.node=v,Jn(I,O);let x=JSON.parse(g.readFileSync("package.json","utf-8")),H=x.dependencies?.expo||x.devDependencies?.expo,E=e.iosBundleIdentifier||"",se=e.name||"";if(H){o.start(`Enforcing ${p.name} configuration...`);let F=w.join(process.cwd(),"app.json"),U=null;if(g.existsSync(F)){U=g.readFileSync(F,"utf-8");let A=JSON.parse(U);A.expo=A.expo||{},se||(se=A.expo.name||""),l==="ios"&&!E&&(E=A.expo?.ios?.bundleIdentifier||""),e.name&&(A.expo.name=e.name),e.scheme&&(A.expo.scheme=e.scheme),l==="ios"&&e.iosBundleIdentifier?(A.expo.ios=A.expo.ios||{},A.expo.ios.bundleIdentifier=e.iosBundleIdentifier):l==="android"&&e.androidPackage&&(A.expo.android=A.expo.android||{},A.expo.android.package=e.androidPackage),g.writeFileSync(F,JSON.stringify(A,null,2))}let Y=["exec","--","expo","prebuild","--platform",l,"--no-install"];try{if(await K("prebuild"),await _("npm",Y,process.cwd(),c()),l==="ios"&&g.existsSync("ios")){await K("pods"),b.info(y.blue("Running pod install..."));try{let A=w.resolve("ios"),V=w.join(A,"Podfile");if(!g.existsSync(V))throw new Error("ios/Podfile not found. Skipping pod install.");let X=g.readFileSync(V,"utf-8"),ie=e.iosDeploymentTarget||"13.4";if(!e.developmentClient&&(b.info(y.blue("\u2139\uFE0F Patching Podfile to EXCLUDE expo-dev-client...")),X.includes("use_expo_modules!")&&!X.includes("exclude:"))){let nt=/use_expo_modules!(\s*)$/m;nt.test(X)?X=X.replace(nt,'use_expo_modules!(exclude: ["expo-dev-client"])$1'):X=X.replace("use_expo_modules!",'use_expo_modules!(exclude: ["expo-dev-client"])')}let me=`
|
|
1047
1047
|
installer.generated_projects.each do |project|
|
|
1048
1048
|
project.targets.each do |target|
|
|
1049
1049
|
target.build_configurations.each do |config|
|
|
1050
|
-
config.build_settings['IPHONEOS_DEPLOYMENT_TARGET'] = '${
|
|
1050
|
+
config.build_settings['IPHONEOS_DEPLOYMENT_TARGET'] = '${ie}'
|
|
1051
1051
|
end
|
|
1052
1052
|
end
|
|
1053
1053
|
end
|
|
1054
1054
|
installer.pods_project.targets.each do |target|
|
|
1055
1055
|
target.build_configurations.each do |config|
|
|
1056
|
-
config.build_settings['IPHONEOS_DEPLOYMENT_TARGET'] = '${
|
|
1056
|
+
config.build_settings['IPHONEOS_DEPLOYMENT_TARGET'] = '${ie}'
|
|
1057
1057
|
end
|
|
1058
1058
|
end
|
|
1059
|
-
`,
|
|
1060
|
-
${
|
|
1059
|
+
`,je=/post_install\s+do\s+\|installer\|/;if(je.test(X))b.info(y.dim(`Injecting deployment target (${ie}) into existing post_install hook...`)),X=X.replace(je,`post_install do |installer|
|
|
1060
|
+
${me}`),g.writeFileSync(V,X);else{b.info(y.dim(`Appending new post_install hook for deployment target (${ie})...`));let nt=`
|
|
1061
1061
|
post_install do |installer|
|
|
1062
|
-
${
|
|
1062
|
+
${me}
|
|
1063
1063
|
end
|
|
1064
|
-
`;g.appendFileSync(V,
|
|
1065
|
-
`),b.info(y.dim("Podfile fingerprint changed \u2014 clearing Pods for clean install...")),g.rmSync(
|
|
1066
|
-
\u2713 Local build completed successfully in ${
|
|
1067
|
-
\u{1F4E6} Generated Artifacts:`)),
|
|
1068
|
-
\u274C Build aborted.`)),await
|
|
1069
|
-
\u2717 Local build failed: ${S.message}`)),await
|
|
1070
|
-
`)[0]||"unknown"}`))}if(!
|
|
1071
|
-
`).map(
|
|
1064
|
+
`;g.appendFileSync(V,nt)}let wt="/opt/homebrew/bin/pod",Wt=g.existsSync(wt)?wt:"pod",Yt=Ns(A);g.existsSync(w.join(A,"Pods"))&&O.pods&&O.pods!==Yt&&(await h(`[CACHE] Podfile/Podfile.lock changed \u2014 wiping ios/Pods
|
|
1065
|
+
`),b.info(y.dim("Podfile fingerprint changed \u2014 clearing Pods for clean install...")),g.rmSync(w.join(A,"Pods"),{recursive:!0,force:!0})),b.info(y.dim(`Using pod command: ${Wt} in ${A}`)),await _(Wt,["install"],A,c()),O.pods=Yt,Jn(I,O)}catch(A){let V=A.message||"Unknown error";b.warn(y.yellow(`Native "pod" command failed: ${V}`)),b.info(y.dim("Falling back to npm exec pod-install...")),b.info(y.magenta(`${p.nameUpper}_DEBUG: Executing pod-install override via npx --yes pod-install@latest`)),await _("npx",["--yes","pod-install@latest","ios"],process.cwd(),c())}if(g.existsSync("ios/Pods")){b.info(y.dim("Disabling signing for Pod targets to prevent conflicts..."));try{J(`find ios/Pods -name "project.pbxproj" -exec sed -i '' 's/buildSettings = {/buildSettings = { CODE_SIGNING_ALLOWED = NO; CODE_SIGNING_REQUIRED = NO; PROVISIONING_PROFILE_SPECIFIER = ""; EXPANDED_CODE_SIGN_IDENTITY = "";/g' {} +`,{stdio:"ignore"})}catch{}}}}finally{U&&g.writeFileSync(F,U)}o.stop(`Expo prebuild complete (${p.name} config enforced).`)}let W=[];if(l==="android")await K("build"),W=await Vs(e,a,i,F=>h(F),f);else if(l==="ios"){await K("signing"),b.info(y.dim("Preparing credentials..."));let F=r?.distributionType;W=await zs(e,t,a,i,n,U=>h(U),f,F,U=>K(U))}e.postBuild&&(b.info(y.blue("Running post-build hook...")),b.info(y.dim(`> ${e.postBuild}`)),await _(e.postBuild,[],process.cwd(),c()));let Ae=Hs(Date.now()-s);if(b.success(y.green(`
|
|
1066
|
+
\u2713 Local build completed successfully in ${Ae}`)),await d("building",{...E&&{bundleId:E},...se&&{appName:se}}),W.length>0&&(b.info(y.cyan(`
|
|
1067
|
+
\u{1F4E6} Generated Artifacts:`)),W.forEach(F=>{let U=w.resolve(F);b.info(y.dim(` - ${F}`)),b.info(y.gray(` Path: ${U}`))}),e.interactive)){let F=await Rs({message:"Install on connected device?"});if(!ti(F)&&F){if(l==="android"){let U=W.find(Y=>Y.endsWith(".apk"))||W[0];await Ys(U,Y=>h(Y))}else if(l==="ios"){let U=W.find(A=>A.endsWith(".ipa"))||W.find(A=>A.endsWith(".app"))||W[0],Y=Ke("ios");e.simulator?await Js(U,Y||"",A=>h(A)):await Xs(U,Y||"",A=>h(A))}}}await K("upload");let re=[];for(let F of W)try{let U=w.join(he.tmpdir(),`${t}-${w.basename(F)}`);g.copyFileSync(F,U),re.push(U),b.info(y.dim(` \u{1F4CB} Preserved artifact: ${w.basename(F)}`))}catch{b.warn(y.yellow(` Failed to preserve artifact: ${w.basename(F)}`))}W=re,b.info(y.dim("\u{1F9F9} Cleaning workspace (preserving dependency cache)..."));try{let F=process.cwd(),U=new Set(["node_modules"]),Y=g.readdirSync(F),A=0;for(let V of Y)if(!U.has(V)){if(V==="ios"){let X=w.join(F,"ios"),ie=g.readdirSync(X);for(let me of ie)if(me!=="Pods")try{g.rmSync(w.join(X,me),{recursive:!0,force:!0}),A++}catch{}continue}try{g.rmSync(w.join(F,V),{recursive:!0,force:!0}),A++}catch{}}b.info(y.dim(` Cleaned ${A} items. Cached: node_modules${g.existsSync(w.join(F,"ios","Pods"))?", ios/Pods":""}`)),b.info(y.green("\u{1F512} Security: No source code retained on build server. Only public dependencies cached."))}catch{b.warn(y.yellow("Post-build cleanup encountered errors (non-fatal)."))}try{let U=w.join(he.homedir(),p.workspacesDir),Y=J(`df -k "${U}" | tail -1 | awk '{print $4}'`,{encoding:"utf8"}).trim(),A=parseInt(Y,10)*1024;if(A<53687091200&&g.existsSync(U)){b.info(y.dim(` \u26A0\uFE0F Low disk space (${(A/1024/1024/1024).toFixed(0)} GB free). Running cache eviction...`));let V=w.basename(process.cwd()),X=g.readdirSync(U).filter(ie=>ie!==V).map(ie=>{let me=w.join(U,ie);try{let je=g.statSync(me);return je.isDirectory()?{name:ie,dir:me,mtime:je.mtimeMs}:null}catch{return null}}).filter(Boolean);X.sort((ie,me)=>ie.mtime-me.mtime);for(let ie of X){if(A>=53687091200)break;try{g.rmSync(ie.dir,{recursive:!0,force:!0}),b.info(y.dim(` \u{1F5D1}\uFE0F Evicted stale workspace: ${ie.name}`));let me=J(`df -k "${U}" | tail -1 | awk '{print $4}'`,{encoding:"utf8"}).trim();if(parseInt(me,10)*1024>=53687091200)break}catch{}}}}catch{}return await j(),W}catch(S){throw await j(),S.message==="Command aborted"?(b.warn(y.yellow(`
|
|
1068
|
+
\u274C Build aborted.`)),await d("failed",{error:"Aborted by user"}),S):(b.error(y.red(`
|
|
1069
|
+
\u2717 Local build failed: ${S.message}`)),await d("failed",{error:S.message}),S)}},Vs=async(e,t,i={},n,r)=>{let o=g.existsSync("android/gradlew")?"android/gradlew":g.existsSync("gradlew")?"./gradlew":null;if(!o)throw new Error("Could not find gradlew. Is this an Android project?");let s=e.developmentClient?"assembleDebug":"assembleRelease";!e.developmentClient&&e.distribution==="store"?s="bundleRelease":!e.developmentClient&&e.distribution==="internal"&&(s="assembleRelease");let l=e.buildCommand||s;b.info(y.blue(`Running Android build: ${l}...`));let a=o.includes("android/")?"android":".",c=(o.includes("android/"),"./gradlew"),d=[l],u={...i,EXPO_NO_DOTENV:"1",MACH_BUILD_PROFILE:t,MACH_APP_NAME:e.appName||e.name||"App"};if(i.ANDROID_VERSION_CODE){let m=w.join(a,"app/build.gradle");if(g.existsSync(m)){let I=i.ANDROID_VERSION_CODE,L=g.readFileSync(m,"utf-8");L=L.replace(/versionCode\s+\d+/,`versionCode ${I}`),g.writeFileSync(m,L),b.info(y.green(`\u2713 Applied Android versionCode ${I}`))}d.push(`-Pandroid.injected.version.code=${i.ANDROID_VERSION_CODE}`)}for(let m of["app/build","build",".cxx"]){let I=w.join(a,m);g.existsSync(I)&&g.rmSync(I,{recursive:!0,force:!0})}tr(process.cwd()),await Fe(c,d,a,u,n,r);let f=w.join(a,"app/build/outputs");return st(f,[".apk",".aab"])},zs=async(e,t,i,n={},r,o,s,l,a)=>{if(process.platform!=="darwin")throw new Error("iOS builds can only be run on macOS.");let c=w.resolve(process.cwd(),g.existsSync("ios")?"ios":"."),d=g.readdirSync(c),u=d.find(v=>v.endsWith(".xcworkspace")),f=d.find(v=>v.endsWith(".xcodeproj")),m=rt(n,i,e),I=ir(m.BUILD_NUMBER||m.CURRENT_PROJECT_VERSION);if((m.BUILD_NUMBER||m.CURRENT_PROJECT_VERSION)&&!I)throw new Error(`Invalid iOS BUILD_NUMBER/CURRENT_PROJECT_VERSION: "${m.BUILD_NUMBER||m.CURRENT_PROJECT_VERSION}". Apple requires one to three period-separated integers. Fix the Dashboard secret or remove it so Mach can use its auto build number.`);let L=I?[`BUILD_NUMBER=${I}`,`CURRENT_PROJECT_VERSION=${I}`]:[];if(I&&(m.BUILD_NUMBER=I,m.CURRENT_PROJECT_VERSION=I,b.info(y.dim(`Using iOS build number: ${I}`))),!u&&!f)throw new Error("Could not find Xcode workspace or project in ios/ directory.");try{let v=J("xcode-select -p").toString().trim();b.info(y.dim(`Using Xcode at: ${v}`))}catch{b.warn(y.dim("Could not detect Xcode path."))}b.info(y.blue("Running iOS build via xcodebuild..."));let P=u?u.replace(".xcworkspace",""):f?.replace(".xcodeproj",""),B=e.iosScheme||P||e.scheme,k=e.developmentClient?"Debug":e.iosConfiguration||"Release",j=(r||"default").replace(/[^a-zA-Z0-9-_]/g,"_"),h=w.join(he.homedir(),`Library/Developer/Xcode/DerivedData/${p.nameLower}`,j);g.mkdirSync(h,{recursive:!0});let K=ft(m),_=w.join(h,".mach-env-hash"),S=w.join(h,"Build"),O=g.existsSync(_)?g.readFileSync(_,"utf-8").trim():"";if(g.existsSync(S)){let v=O&&O!==K?"Build environment changed \u2014 clearing iOS DerivedData build products.":O?"Clearing iOS DerivedData build products to force a fresh JS bundle.":"DerivedData has no environment stamp \u2014 clearing iOS build products.";b.info(y.dim(v)),g.rmSync(S,{recursive:!0,force:!0})}if(g.writeFileSync(_,K),tr(process.cwd()),e.simulator){b.info(y.dim(`Building for simulator (Scheme: ${B}, Config: ${k})...`)),await Fe("xcodebuild",[u?"-workspace":"-project",u||f,"-scheme",B,"-configuration",k,"-sdk","iphonesimulator","-derivedDataPath",h,...L,"CODE_SIGNING_ALLOWED=NO","CODE_SIGNING_REQUIRED=NO"],c,m,o,s);let v=w.join(h,"Build/Products",`${k}-iphonesimulator`),T=st(v,[".app"]);if(T.length>0){let D=T[0],$=w.basename(D,".app"),M=w.join(v,`${$}_simulator.zip`);return b.info(y.dim(`Creating simulator artifact: ${M}...`)),J(`cd "${v}" && zip -r "${M}" "${w.basename(D)}"`),[M]}return[]}else{b.info(y.dim(`Archiving (Scheme: ${B}, Config: ${k})...`));let v=w.join(c,"build.xcarchive"),T=w.join(c,"export");g.rmSync(v,{recursive:!0,force:!0}),g.rmSync(T,{recursive:!0,force:!0});let D=n.IOS_DIST_P12,$=n.IOS_PROVISIONING_PROFILE,M=n.IOS_P12_PASSWORD||"",G=[],x,H,E={isAppStore:!1,isDevelopment:!1};if(D&&$){b.info(y.blue("\u{1F510} CI/CD Signing: Importing certificates..."));try{let A=`${p.buildPrefix}-${t}.keychain-db`,V=w.join(he.tmpdir(),A),X=p.keychainPassword;J(`security create-keychain -p "${X}" "${V}" 2>/dev/null || true`),J(`security set-keychain-settings -t 3600 -l "${V}"`),J(`security unlock-keychain -p "${X}" "${V}"`);let ie=w.join(he.tmpdir(),`cert-${t}.p12`),me=Buffer.from(D,"base64");g.writeFileSync(ie,me),b.info(y.dim(`P12 data size: ${me.length} bytes, first bytes: ${me.slice(0,4).toString("hex")}`)),(me.length<100||me[0]!==48)&&(b.warn(y.yellow("\u26A0\uFE0F P12 data looks corrupted or was not decrypted correctly.")),b.warn(y.yellow(" This usually means MACH_ENCRYPTION_KEY on the Remote API differs from when credentials were uploaded.")));let je=[M,"",p.keychainPassword],wt=!1;for(let Ee of je)try{J(`security import "${ie}" -k "${V}" -P "${Ee}" -A -T /usr/bin/codesign -T /usr/bin/security`,{stdio:"pipe"}),wt=!0,b.info(y.dim(`\u2713 P12 imported successfully with password: ${Ee?"[set]":"[empty]"}`));break}catch(Me){b.info(y.dim(` P12 import attempt with password ${Ee?`"${Ee.substring(0,3)}..."`:"[empty]"} failed: ${Me.message?.split(`
|
|
1070
|
+
`)[0]||"unknown"}`))}if(!wt)throw new Error("Failed to import P12.");g.unlinkSync(ie),J(`security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k "${X}" "${V}"`);let Wt=J("security list-keychains -d user",{encoding:"utf-8"}).split(`
|
|
1071
|
+
`).map(Ee=>Ee.trim().replace(/^"|"$/g,"")).filter(Ee=>Ee.length>0),Yt=[V,...Wt].map(Ee=>`"${Ee}"`).join(" ");J(`security list-keychains -d user -s ${Yt}`),J(`security default-keychain -s "${V}"`);let Jt=w.join(he.homedir(),"Library/MobileDevice/Provisioning Profiles");g.mkdirSync(Jt,{recursive:!0});let nt=Buffer.from($,"base64"),Ri=w.join(Jt,`${p.nameLower}-temp-${t}.mobileprovision`);g.writeFileSync(Ri,nt);let Oi=nt.toString("utf-8"),Sn=/<key>get-task-allow<\/key>\s*<true\/>/.test(Oi);E={isAppStore:!Oi.includes("<key>ProvisionedDevices</key>")&&!Sn,isDevelopment:Sn};try{let Me=J(`security cms -D -i "${Ri}"`,{encoding:"utf-8"}).match(/<key>UUID<\/key>\s*<string>([^<]+)<\/string>/);H=Me?Me[1]:void 0}catch{let Me=Oi.match(/<key>UUID<\/key>\s*<string>([^<]+)<\/string>/);H=Me?Me[1]:void 0}H||(b.warn("Could not extract UUID from provisioning profile. Using fallback."),H=`${p.nameLower}-${t}`);let Ci=w.join(Jt,`${H}.mobileprovision`);g.existsSync(Ci)&&g.unlinkSync(Ci),g.renameSync(Ri,Ci);try{let Me=J(`security find-identity -v -p codesigning "${V}"`,{encoding:"utf-8"}).match(/"((?:Apple|iPhone) (?:Distribution|Developer|Development)[^"]*)"/);Me&&(x=Me[1],b.info(y.blue(`Identity auto-detected from keychain: "${x}"`)))}catch{}x||(x=E.isDevelopment?"Apple Development":"Apple Distribution",b.info(y.blue(`Identity fallback (profile heuristic): "${x}"`))),b.info(y.dim(`Profile type: ${E.isDevelopment?"Development":E.isAppStore?"App Store":"Ad-Hoc"}`)),b.info(y.dim(`Identity Detection: get-task-allow=${E.isDevelopment}, Selected Identity="${x}"`)),G.push("CODE_SIGN_STYLE=Manual"),G.push(`CODE_SIGN_IDENTITY="${x}"`),G.push(`PROVISIONING_PROFILE_SPECIFIER=${H}`),e.iosTeamId&&G.push(`DEVELOPMENT_TEAM=${e.iosTeamId}`)}catch(A){throw b.error(`Signing setup failed: ${A.message}`),A}}else G.push("-allowProvisioningUpdates"),e.iosTeamId&&G.push(`DEVELOPMENT_TEAM=${e.iosTeamId}`);a&&await a("archive"),b.info(y.blue(`Archive detected Identity: "${x}"`)),b.info(y.blue(`Archive detected UUID: "${H}"`)),await Fe("xcodebuild",["archive",u?"-workspace":"-project",u||f,"-scheme",B,"-configuration",k,"-archivePath",v,"-derivedDataPath",h,...L,...G],c,m,o,s);let se=st(w.join(v,"Products","Applications"),[".app"]);for(let A of se){let V=Gs(A);b.info(y.dim(`Validated iOS CFBundleVersion ${V} in ${w.basename(A)}`))}let W;H?(E.isAppStore?W="app-store":E.isDevelopment?W="development":W="ad-hoc",b.info(y.blue(`Export method from profile: "${W}"`))):(W=e.distribution==="store"?"app-store":e.distribution==="internal"?"ad-hoc":"development",b.warn(y.yellow(`No profile UUID detected. Export method from distribution flag: "${W}"`)));let Ae=e.iosExportMethod||W,re=e.iosBundleIdentifier||Ke("ios"),F=w.join(c,"ExportOptions.plist"),U=`<?xml version="1.0" encoding="UTF-8"?>
|
|
1072
1072
|
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
|
|
1073
1073
|
<plist version="1.0">
|
|
1074
1074
|
<dict>
|
|
1075
1075
|
<key>method</key>
|
|
1076
|
-
<string>${
|
|
1076
|
+
<string>${Ae}</string>
|
|
1077
1077
|
<key>destination</key>
|
|
1078
1078
|
<string>export</string>
|
|
1079
1079
|
<key>signingStyle</key>
|
|
@@ -1081,42 +1081,89 @@ end
|
|
|
1081
1081
|
<key>thinning</key>
|
|
1082
1082
|
<string><none></string>
|
|
1083
1083
|
${e.iosTeamId?`<key>teamID</key><string>${e.iosTeamId}</string>`:""}
|
|
1084
|
-
${
|
|
1084
|
+
${re&&H?`
|
|
1085
1085
|
<key>provisioningProfiles</key>
|
|
1086
1086
|
<dict>
|
|
1087
|
-
<key>${
|
|
1087
|
+
<key>${re}</key>
|
|
1088
1088
|
<string>${H}</string>
|
|
1089
1089
|
</dict>`:""}
|
|
1090
1090
|
</dict>
|
|
1091
|
-
</plist>`;if(g.writeFileSync(F,
|
|
1092
|
-
${
|
|
1091
|
+
</plist>`;if(g.writeFileSync(F,U),process.env[`${p.envPrefix}DEBUG`]&&b.info(y.magenta(`[${p.nameUpper}_DEBUG] ExportOptions.plist:
|
|
1092
|
+
${U}`)),a&&await a("export"),b.info(y.blue(`Exporting with Bundle ID: "${re}"`)),b.info(y.blue(`Exporting with Method: "${Ae}"`)),o){o(y.magenta(`
|
|
1093
1093
|
[DIAGNOSTIC] Checking available signing identities...
|
|
1094
|
-
`));try{let A=
|
|
1094
|
+
`));try{let A=J("security find-identity -v -p codesigning",{encoding:"utf-8"});o(y.magenta(`${A}
|
|
1095
1095
|
`))}catch(A){o(y.red(`[DIAGNOSTIC] Failed to list identities: ${A.message}
|
|
1096
|
-
`))}}await
|
|
1096
|
+
`))}}await Fe("xcodebuild",["-exportArchive","-archivePath",v,"-exportPath",T,"-exportOptionsPlist",F],c,m,o,s),a&&await a("validate");let Y=st(T,[".ipa"]);for(let A of Y)try{J(`unzip -t "${A}"`,{stdio:"pipe"});let V=Ks(A);o&&o(`[IPA VALID] ${w.basename(A)} \u2014 archive integrity OK
|
|
1097
1097
|
`),o&&o(`[IPA VALID] CFBundleVersion ${V}
|
|
1098
|
-
`)}catch(V){let
|
|
1099
|
-
`),new Error(
|
|
1100
|
-
`).slice(1).map(s=>s.trim()).filter(s=>s.length>0&&!s.startsWith("*")).map(s=>s.split(" ")[0]).length===0){b.warn(y.yellow("No Android devices or emulators found."));let s=
|
|
1101
|
-
`).filter(a=>a.trim().length>0)}catch{}if(l.length>0){let a=await
|
|
1102
|
-
`).find(a=>a.includes("android.intent.action.MAIN")&&a.includes("android.intent.category.LAUNCHER"))?Y(`adb shell monkey -p ${o} -c android.intent.category.LAUNCHER 1`,{stdio:"ignore"}):Y(`adb shell monkey -p ${o} -c android.intent.category.LAUNCHER 1`,{stdio:"ignore"})}catch{b.warn("Could not auto-launch app. You may need to open it manually.")}}}catch(n){i.stop("Installation failed."),b.error(y.red(`Failed to install APK: ${n.message}`))}},ss=async(e,t,i)=>{let n=Ft();try{if(!Y("xcrun simctl list devices booted").toString().includes("(Booted)")){b.warn(y.yellow("No iOS Simulator is currently booted."));let o=Y("xcrun simctl list devices --json").toString(),s=JSON.parse(o).devices,l=[];Object.keys(s).forEach(u=>{s[u].forEach(p=>{p.isAvailable&&l.push({...p,runtime:u})})});let a=await yi({message:"Select a simulator to launch:",options:l.map(u=>({value:u.udid,label:`${u.name} (${u.runtime.split(".").pop()})`}))});if(Ht(a))return;n.start(`Booting ${a}...`),Y(`xcrun simctl boot ${a}`),Y(`open -a Simulator --args -CurrentDeviceUDID ${a}`);let d=0,c=!1;for(;d<30;){try{if(Y("xcrun simctl list devices booted").toString().includes(a)){c=!0;break}}catch{}await new Promise(u=>setTimeout(u,2e3)),d++}if(!c)throw n.stop("Simulator boot timed out."),new Error("Simulator boot timed out.");n.stop("Simulator booted.")}n.start("Installing on iOS Simulator..."),await xe("xcrun",["simctl","install","booted",e],process.cwd(),{},i),n.stop("Installation complete."),b.info(y.blue(`\u{1F680} Launching ${t}...`)),await xe("xcrun",["simctl","launch","booted",t],process.cwd(),{},i)}catch(r){n.stop("Installation failed."),b.error(y.red(`Failed to install on Simulator: ${r.message}`))}},as=async(e,t,i)=>{let n=Ft();n.start("Scanning for connected iOS devices...");try{let r=Y("xcrun devicectl list devices --json-output -").toString(),s=(JSON.parse(r).result?.devices||[]).filter(a=>a.connectionProperties?.transportType==="wired"||a.connectionProperties?.transportType==="localNetwork");if(s.length===0)throw n.stop("No connected iOS devices found."),new Error("Please connect your iPhone via USB or ensure it is on the same Wi-Fi for wireless debugging.");let l=s[0].identifier;if(s.length>1){n.stop();let a=await yi({message:"Select a device to install on:",options:s.map(d=>({value:d.identifier,label:`${d.deviceProperties?.name||d.name||d.model?.name} (${d.model?.name||"iPhone"}) - ${d.identifier}`}))});if(Ht(a))return;l=a,n.start(`Installing on ${l}...`)}else n.message(`Installing on ${s[0].model.name}...`);await xe("xcrun",["devicectl","device","install","app","--device",l,e],process.cwd(),{},i),n.stop("Installation complete."),b.info(y.blue(`\u{1F680} Launching ${t}...`)),await xe("xcrun",["devicectl","device","launch","app","--device",l,t],process.cwd(),{},i)}catch(r){n.stop("Installation failed."),b.error(y.red(`Failed to install on device: ${r.message}`)),b.info(y.dim('Make sure your device is unlocked and "Developer Mode" is enabled in Settings -> Privacy & Security.'))}};import Nn from"fs";import Tn from"path";import{isCancel as Ei,log as Fe,select as kn,spinner as ls,text as ds}from"@clack/prompts";import st from"chalk";async function xn(e){let t=await bi(e);t&&(Fe.success(st.green(`Maestro run ${t.status||"queued"}: ${t.testRunId}`)),t.launchDeferredReason&&Fe.warn(st.yellow(t.launchDeferredReason)),t.dashboardUrl&&Fe.info(st.dim("View test run: ")+st.white.underline(t.dashboardUrl)))}async function bi(e){let t=Te(`./${f.configFileName}`),i=e.projectId||t?.projectId,n=e.profile||e.buildProfile||"production";if(!i)return Fe.error(`No projectId found. Run \`${f.nameLower} link\` first or pass an internal project id.`),null;let r=e.platform;if(!r&&e.latest){let a=await kn({message:"Select platform for the latest build:",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"}]});if(Ei(a))return null;r=a}let o=await cs(e);if(!o)return null;if(o.kind==="latest"&&!r)return Fe.error("Pass --platform when using --latest."),null;if(o.kind==="artifact-url"&&!r)return Fe.error("Pass --platform when using --artifact-url."),null;let s=us(e.maestroRetries);if(s===null)return null;let l=ls();e.quiet||l.start("Queuing Maestro run...");try{let a=await C.post("/tests/maestro",{projectId:i,platform:r,profile:n,latest:o.kind==="latest",buildId:o.kind==="build-id"?o.value:e.buildId,buildUrl:o.kind==="build-url"?o.value:e.buildUrl,artifactUrl:o.kind==="artifact-url"?o.value:e.artifactUrl,flows:e.maestroFlows||".maestro",device:e.maestroDevice||(r==="ios"?"iphone_15":"pixel_6"),retries:s,record:!!e.maestroRecord});if(a.data.status!=="success")throw new Error(a.data.message||"Failed to queue Maestro run");let d=a.data.testRun,c={testRunId:d.testRunId,status:d.status,projectId:i,buildId:d.buildId,platform:d.platform,dashboardUrl:d.dashboardUrl||`${je}/tests/${d.testRunId}`,launchDeferredReason:d.launchDeferredReason};return ps(e,c),e.quiet||l.stop("Maestro run queued"),c}catch(a){e.quiet||l.stop("Could not queue Maestro run");let d=a.response?.data?.message||a.message||"Unknown error";return Fe.error(st.red(`Maestro queue failed: ${d}`)),null}}async function cs(e){if(e.buildId)return{kind:"build-id",value:e.buildId};if(e.buildUrl)return{kind:"build-url",value:e.buildUrl};if(e.artifactUrl)return{kind:"artifact-url",value:e.artifactUrl};if(e.latest)return{kind:"latest"};let t=await kn({message:"Select app artifact source for Maestro:",options:[{value:"latest",label:"Latest successful build"},{value:"build-id",label:"Build ID"},{value:"build-url",label:`${f.name} build URL`},{value:"artifact-url",label:"Direct artifact URL"}]});if(Ei(t))return null;if(t==="latest")return{kind:"latest"};let i=await ds({message:t==="build-id"?"Enter build ID:":t==="build-url"?`Enter ${f.name} build URL:`:"Enter artifact URL:",validate:n=>{let r=String(n||"").trim();if(!r)return"Value is required";if((t==="build-url"||t==="artifact-url")&&!r.startsWith("http"))return"Must be a URL"}});return Ei(i)?null:{kind:t,value:String(i).trim()}}function us(e){if(e==null||e==="")return 1;let t=Number(e);return!Number.isInteger(t)||t<0||t>10?(Fe.error("--maestro-retries must be an integer between 0 and 10."),null):t}function ps(e,t){if(!e.jsonOutput)return;let i=Tn.resolve(e.jsonOutput),n={...t,updatedAt:new Date().toISOString()};try{let r=Tn.dirname(i);r&&r!=="."&&Nn.mkdirSync(r,{recursive:!0}),Nn.writeFileSync(i,JSON.stringify(n,null,2))}catch(r){Fe.warn(st.yellow(`Could not write Maestro metadata JSON: ${r.message}`))}}var Ai=8,gs=6,Yn=e=>new Promise(t=>setTimeout(t,e)),hs=e=>{let t=e.response?.status,i=e.code||"",n=e.message||"";return t?t===408||t===409||t===425||t===429||t>=500||/ECONNRESET|ETIMEDOUT|EAI_AGAIN|ENOTFOUND|ECONNABORTED|socket hang up|network|timeout/i.test(`${i} ${n}`):!0},jt=async(e,t,i=gs)=>{let n;for(let r=1;r<=i;r++)try{return await t()}catch(o){if(n=o,!hs(o)||r>=i)break;let s=Math.min(6e4,2e3*Math.pow(2,r-1)),l=o.response?.status||o.code||o.message||"network error";v.warn(N.yellow(`${e} failed transiently (${l}). Retrying in ${Math.round(s/1e3)}s... (${r}/${i})`)),await Yn(s)}throw n},ys=e=>{let t=e.response?.status;return t?t===408||t===429||t>=500:!0},Et=e=>e.credentialId||e.id,Ss=async(e,t)=>{let i=Et(e);if(!i)return e.downloadUrl;let n=await C.get(`/credentials/${i}/download`,{params:{projectId:t}});return n.data?.status==="success"&&n.data?.downloadUrl?n.data.downloadUrl:e.downloadUrl},Jn=async(e,t)=>{let i=e.downloadUrl;for(let n=1;n<=Ai;n++)try{if((!i||n>1)&&(i=await Ss(e,t)),!i)throw new Error(`Credential ${e.name||Et(e)||"unknown"} has no download URL.`);let r=await St.get(i,{responseType:"arraybuffer",timeout:6e4,maxContentLength:1/0,maxBodyLength:1/0,headers:{Connection:"close"}});return Buffer.from(r.data).toString("base64")}catch(r){if(n>=Ai||!ys(r))throw r;let o=Math.min(1500*n*n,15e3);v.warn(N.dim(` - Temporary network error downloading ${e.name}. Retrying... (${n}/${Ai})`)),await Yn(o)}throw new Error(`Failed to download credential ${e.name||Et(e)||"unknown"}.`)},Es=async(e,t)=>{let i=await Jn(e,t);return Buffer.from(i,"base64").toString("utf8")},bs=(e,t)=>t?.ios?.buildNumber??t?.iosBuildNumber??e?.ios?.buildNumber??e?.expo?.ios?.buildNumber,As=(e,t,i)=>t?.ios?.ascAppId??t?.ascAppId??e?.ios?.ascAppId??e?.submit?.[i]?.ios?.ascAppId??e?.submit?.production?.ios?.ascAppId,Fn=e=>e.bundleId||e.bundleIdentifier||e.meta?.bundleId||e.meta?.bundleIdentifier,Hn=(e,t)=>{let i=e.filter(n=>n.type==="asc_api_key");if(i.length!==0){if(t){let n=i.find(o=>Fn(o)===t);if(n)return n;let r=i.find(o=>Fn(o)==="*");if(r)return r}return i[0]}},Is=e=>typeof e=="string"&&e.trim().toLowerCase()==="auto",Xn=(e,t,i=[])=>{if(!oe.existsSync(e))return i;let n;try{n=oe.readdirSync(e,{withFileTypes:!0})}catch{return i}for(let r of n){if(r.name==="Pods"||r.name==="build"||r.name==="DerivedData")continue;let o=Se.join(e,r.name);r.isDirectory()?Xn(o,t,i):r.name===t&&i.push(o)}return i},_s=(e,t,i)=>{let n=`${i} ${t.environment||""}`.toLowerCase(),r=e.toLowerCase(),o=0;return(n.includes("development")||n.includes("dev"))&&/(^|[.-])dev(elopment)?($|[.-])/.test(r)&&(o+=20),(n.includes("staging")||n.includes("stage"))&&/(^|[.-])stag(e|ing)?($|[.-])/.test(r)&&(o+=20),(n.includes("production")||n.includes("prod"))&&(/(^|[.-])(dev|development|stag|stage|staging)($|[.-])/.test(r)||(o+=20)),o},Ps=(e,t)=>{let i=Se.resolve(process.cwd(),oe.existsSync("ios")?"ios":"."),n=Xn(i,"project.pbxproj"),r=[];for(let o of n)try{let l=oe.readFileSync(o,"utf8").matchAll(/PRODUCT_BUNDLE_IDENTIFIER\s*=\s*"?([^";\s]+)"?;/g);for(let a of l){let d=a[1]?.trim();d&&!d.includes("$")&&!d.startsWith("com.apple.")&&!r.includes(d)&&r.push(d)}}catch{}if(r.length!==0)return r.length===1?r[0]:r.map(o=>({bundleId:o,score:_s(o,e,t)})).sort((o,s)=>s.score-o.score)[0]?.bundleId},Gt=e=>String(e||"").trim().toLowerCase().replace(/_/g,"-"),Kt=(e,t)=>{let i=Gt(e);return t==="ios"&&(i==="internal"||i==="ad-hoc")?"adhoc":t==="android"&&["internal","adhoc","ad-hoc","development","dev","staging","stage"].includes(i)?"internal":i},jn=(e,t,i)=>{let n=Kt(e.distributionType||e.meta?.distributionType,i);return n?n===Kt(t,i):!0},Gn=(e,t,i)=>{let n=Kt(e.distributionType||e.meta?.distributionType,i),r=Kt(t,i);return n?n===r?3:i==="android"&&r!=="store"&&n!=="store"?2:0:1},$s=e=>{let t=e.toLowerCase();return t==="development"||t==="dev"||t.startsWith("development-")||t.startsWith("dev-")||t.endsWith("-development")||t.endsWith("-dev")},ws=e=>{let t=e.toLowerCase();return t.includes("staging")||t.includes("stage")||t.includes("preview")||t.includes("adhoc")||t.includes("ad-hoc")},Ds=(e,t)=>{let i=Gt(e.distribution),n=Gt(e.iosExportMethod),r=Gt(e.environment);return e.platform!=="ios"?i==="store"?"store":"internal":e.developmentClient||e.simulator?"development":n==="app-store"||i==="store"?"store":n==="development"||i==="development"?"development":n==="ad-hoc"||n==="adhoc"||i==="ad-hoc"||i==="adhoc"||i==="internal"?"adhoc":r==="production"||r==="store"?"store":r==="development"||r==="dev"?"development":r==="staging"||r==="stage"||r==="preview"?"adhoc":t.toLowerCase()==="production"||t.toLowerCase().includes("store")?"store":$s(t)?"development":(ws(t),"adhoc")},qn=e=>e.bundleId||e.bundleIdentifier||e.packageName||e.meta?.bundleId||e.meta?.bundleIdentifier||e.meta?.packageName,Kn=(e,t)=>{if(!t)return!0;let i=qn(e);return!i||i==="*"||i===t},Vn=(e,t)=>{let i=qn(e);return!t||!i?0:i===t?2:i==="*"?1:-1},Zn=e=>{try{let t=Buffer.from(e,"base64").toString("utf8"),i=t.match(/<key>application-identifier<\/key>\s*<string>([^<]+)<\/string>/)?.[1]?.trim();if(!i)return;let n=t.match(/<key>TeamIdentifier<\/key>\s*<array>\s*<string>([^<]+)<\/string>/)?.[1]?.trim();if(n&&i.startsWith(`${n}.`))return i.slice(n.length+1);let r=i.indexOf(".");return r>=0?i.slice(r+1):i}catch{return}},Rs=(e,t)=>{if(e===t||e==="*")return!0;if(e.endsWith(".*")){let i=e.slice(0,-2);return t.startsWith(`${i}.`)}return!1},vs=(e,t)=>{if(!t)return!0;let i=Zn(e);if(i)return Rs(i,t);try{return Buffer.from(e,"base64").toString("latin1").includes(t)}catch{return!0}},Vt=async e=>{if(e.failOnly){(!e.projectId||!e.buildId)&&(v.error(N.red("--project-id and --build-id are required with --fail-only.")),process.exit(1));let l=e.error||"Build runner failed before it could report a final status.";try{await C.patch(`/builds/${e.projectId}/${e.buildId}`,{status:"failed",error:l,endTime:Date.now()}),v.info(N.yellow(`Marked build ${e.buildId} as failed.`));return}catch(a){v.error(N.red(`Could not mark build failed: ${a.message}`)),process.exit(1)}}e.platform!=="android"&&e.platform!=="ios"&&(v.error(`Platform ${e.platform} is not supported. Use 'android' or 'ios'.`),process.exit(1));let t=Ii(),i=e.buildId||fs(),n=e.projectId,r=Date.now(),o=!!n,s=async l=>{if(n)try{await C.patch(`/builds/${n}/${i}`,{status:"failed",error:l})}catch{}};if(e.local&&e.buildId){e.quiet||t.start(`Preparing isolated workspace for build: ${e.buildId}`);try{let l=await C.get(`/builds/${n}/${e.buildId}/source-url`);if(l.data.status!=="success")throw new Error("Failed to get source download URL from API");let a=await St.get(l.data.downloadUrl,{responseType:"stream"}),d=(n||e.projectId||"default").replace(/[^a-zA-Z0-9-_]/g,"_"),c=Se.join(ms.homedir(),f.workspacesDir,d);oe.mkdirSync(c,{recursive:!0});let u=new Set(["node_modules",`.${f.nameLower}-cache-meta`]),p=new Set(["Pods"]);if(oe.existsSync(c)){let B=oe.readdirSync(c);for(let k of B){if(u.has(k))continue;if(k==="ios"){let h=Se.join(c,"ios");try{let K=oe.readdirSync(h);for(let _ of K)if(!p.has(_))try{oe.rmSync(Se.join(h,_),{recursive:!0,force:!0})}catch{}}catch{}continue}let j=Se.join(c,k);try{oe.rmSync(j,{recursive:!0,force:!0})}catch{}}}let m=Se.join(c,"source.zip"),I=a.data,L=oe.createWriteStream(m);await new Promise((B,k)=>{I.pipe(L),I.on("error",j=>k(j)),L.on("finish",()=>B())}),new Bn(m).extractAllTo(c,!0);try{oe.unlinkSync(m)}catch{}process.chdir(c),v.info(N.green(`\u2713 Persistent workspace ready: ${c}`)),v.info(N.dim(` \u{1F4E6} Cached dirs preserved: node_modules=${oe.existsSync(Se.join(c,"node_modules"))?"\u2705":"\u274C"}, Pods=${oe.existsSync(Se.join(c,"ios","Pods"))?"\u2705":"\u274C"}`)),t.stop()}catch(l){t.stop(`Failed to prepare isolated workspace: ${l.message}`),n&&await s(`Setup Error: ${l.message}`),process.exit(1)}}try{let l=e.repo;if(!l)try{l=Mn("git config --get remote.origin.url").toString().trim()}catch{v.warn("Could not detect git repository URL.")}!l&&e.dryRun,l||(l="https://github.com/placeholder/repo.git"),v.info(`Build ID: ${N.cyan(i)}`);let a={},d={},c=Te(`./${f.configFileName}`);if(c){n=c.projectId;let _=e.buildProfile||"production",S=Ge(c,_);!S&&e.buildProfile&&(v.error(`Build profile '${_}' not found in ${f.configFileName}`),process.exit(1));let O=S||{};process.env.MACH_DEBUG&&v.info(N.dim(`Build profile: ${_} | Platform: ${e.platform} | Distribution: ${O.distribution||"store"} | Environment: ${O.environment||_}`)),O.env&&(d=O.env,v.info(N.blue(`Use Build Profile: ${_}`)));let D=e.platform,T=O[D]||{},R=["developmentClient","simulator","distribution","buildCommand","apk","iosScheme","preBuild","postBuild","scheme","environment","androidPackage","iosBundleIdentifier","name","iosDeploymentTarget","iosApiKeyId","iosApiKeyIssuer","iosApiKeyPath","iosTeamId","iosConfiguration","iosExportMethod","branch","repo","instanceType","ami","bucket","region","nodeVersion"];e.name=c.name,e.appName=c.name,e.androidPackage=c.android?.package,e.iosBundleIdentifier=c.ios?.bundleIdentifier,e.iosScheme=c.ios?.iosScheme,!e.nodeVersion&&c.nodeVersion&&(e.nodeVersion=c.nodeVersion);let $=x=>x==="androidPackage"?T.androidPackage??T.package??O.androidPackage??O.android?.package:x==="iosBundleIdentifier"?T.iosBundleIdentifier??T.bundleIdentifier??O.iosBundleIdentifier??O.ios?.bundleIdentifier:T[x]!==void 0?T[x]:O[x];for(let x of R){let H=$(x),E=x==="androidPackage"||x==="iosBundleIdentifier";H!==void 0&&(e[x]===void 0||E)&&(e[x]=H)}if(e.platform==="ios"&&!(T.iosBundleIdentifier??T.bundleIdentifier??O.iosBundleIdentifier??O.ios?.bundleIdentifier)){let H=Ps(e,_);H&&H!==e.iosBundleIdentifier&&(v.warn(N.yellow(`Detected native iOS bundle identifier ${H}; using it for credential lookup. Set build.${_}.ios.bundleIdentifier to make this explicit.`)),e.iosBundleIdentifier=H)}e.branch=e.branch||"main",e.iosConfiguration=e.iosConfiguration||(e.developmentClient||e.simulator?"Debug":"Release"),e.sshUser=e.sshUser||process.env.USER||"ubuntu",e.simulator===void 0&&(e.simulator=!1),e.local===void 0&&(e.local=!1),e.verbose===void 0&&(e.verbose=!1);let U=x=>{if(!x)return x;if(x.startsWith("scripts.")){let H=x.split(".")[1],E=c.scripts?.[H];if(E)return E;v.warn(`Script reference not found: ${x}`)}return x};e.buildCommand=U(e.buildCommand),e.preBuild=U(e.preBuild),e.postBuild=U(e.postBuild),!e.scheme&&c.scheme&&(e.scheme=c.scheme);let G={...nt(c,f.envPrefix),...nt(O,`${f.envPrefix}PROFILE_`)};a={...a,...d,...G},process.env.IOS_P12_PASSWORD&&!a.IOS_P12_PASSWORD&&(a.IOS_P12_PASSWORD=process.env.IOS_P12_PASSWORD),process.env.MATCH_PASSWORD&&!a.MATCH_PASSWORD&&(a.MATCH_PASSWORD=process.env.MATCH_PASSWORD),e.platform==="ios"&&(!e.iosTeamId&&O.ios?.appleTeamId&&(e.iosTeamId=O.ios.appleTeamId),!e.iosTeamId&&c.submit?.[_]?.ios?.appleTeamId&&(e.iosTeamId=c.submit[_].ios.appleTeamId),!e.iosTeamId&&c.submit?.production?.ios?.appleTeamId&&(v.warn(N.yellow(`Check: Using 'production' Team ID for '${_}' build.`)),e.iosTeamId=c.submit.production.ios.appleTeamId),e.iosTeamId?v.info(N.magenta(`\u2713 Injected iOS Team ID from config: ${e.iosTeamId}`)):v.warn(N.yellow("\u26A0\uFE0F No iOS Team ID found. Signing might fail if not managed automatically via Expo.")))}let u="unknown";try{u=Mn("git rev-parse --abbrev-ref HEAD").toString().trim()}catch{v.warn("Failed to detect git branch.")}let p="1.0.0";try{oe.existsSync("./package.json")&&(p=JSON.parse(oe.readFileSync("./package.json","utf-8")).version||"1.0.0")}catch{}let m=e.buildProfile||"production",I="Internal";e.developmentClient?I="DevelopmentClient":m.toLowerCase().includes("store")||m.toLowerCase()==="production"?I="Store":m.toLowerCase().includes("preview")||m.toLowerCase().includes("staging")?I="Staging":(m.toLowerCase().includes("development")||m.toLowerCase().includes("dev"))&&(I="Development");let L=e.platform==="ios"?"iOS":"Android",w=e.platform==="ios"&&e.simulator?" (Simulator)":"",B=`${L}${w} v${p} (${I})`;if(zt(e,{status:"created",projectId:n,buildId:i,platform:e.platform,profile:m,branch:u,version:p,buildType:I,developmentClient:!!e.developmentClient,summary:B}),n){try{let _=e.buildProfile||"production",S=e.environment||_;v.info(N.blue(`Fetching managed secrets for profile: ${_} (environment: ${S})...`));let D=(await C.get(`/projects/${n}/secrets/export?env=${S}`)).data;D.status==="success"&&D.secrets&&(a={...a,...D.secrets},Object.keys(D.secrets).length>0&&v.info(N.magenta(`\u2713 Injected ${Object.keys(D.secrets).length} secrets from Dashboard.`)))}catch(_){v.warn(`Failed to load managed secrets from Dashboard: ${_.message}`)}try{v.info(N.blue("Fetching managed credentials..."));let _=Ds(e,m),S=e.platform==="ios"?e.iosBundleIdentifier:e.androidPackage,O=e.platform==="ios"?"bundle":"package";v.info(N.dim(` Credential target: ${O} ${S||"not set"} (${_})`));let D=await C.get("/credentials/resolve",{params:{projectId:n,platform:e.platform,bundleId:S,distributionType:_}});if(D.data.status==="success"&&D.data.credentials){let T=D.data.credentials;v.info(N.magenta(`\u2713 Found ${T.length} relevant credentials.`));let R=T.filter(E=>e.platform==="ios"&&E.type==="ios_profile"?jn(E,_,e.platform)?Kn(E,S):!1:e.platform==="android"&&E.type==="android_keystore"?Kn(E,S):!!jn(E,_,e.platform)).sort((E,ne)=>Vn(ne,S)*10+Gn(ne,_,e.platform)-(Vn(E,S)*10+Gn(E,_,e.platform)));v.info(N.dim(` Filtered to ${R.length} credentials for distributionType: ${_}`));let $=!1,U=!1,G=!1,x=[];for(let E of R)if(!(E.type==="ios_cert"&&$||E.type==="ios_profile"&&U||E.type==="android_keystore"&&G)&&["ios_cert","ios_profile","android_keystore"].includes(E.type)&&(E.downloadUrl||Et(E)))try{let z=await Jn(E,n);if(E.type==="ios_cert"&&!$)a.IOS_DIST_P12=z,E.password?(a.IOS_P12_PASSWORD=E.password,v.info(N.dim(` - Injected ${E.name} as IOS_DIST_P12 with password from credential record`))):v.info(N.dim(` - Injected ${E.name} as IOS_DIST_P12`)),$=!0;else if(E.type==="ios_profile"&&!U){if(!vs(z,S)){let he=Zn(z)||"unknown";throw new Error(`Provisioning profile ${E.name||Et(E)||"unknown"} is for a different bundle ID. Expected ${S}, found ${he}. Upload a ${_} profile for ${S}.`)}a.IOS_PROVISIONING_PROFILE=z,v.info(N.dim(` - Injected ${E.name} as IOS_PROVISIONING_PROFILE`)),U=!0}else if(E.type==="android_keystore"&&!G){a.ANDROID_KEYSTORE_BASE64=z;let he=E.keystorePassword||E.password,ie=E.keyPassword||E.keystorePassword||E.password,F=E.alias||E.meta?.alias;if(he)a.ANDROID_STORE_PASSWORD=he,v.info(N.dim(" - Injected keystore password from credential record"));else{let A=["ANDROID_STORE_PASSWORD",...[_==="store"?"PRODUCTION":_==="internal"||_==="adhoc"?"STAGING":"DEVELOPMENT",_.toUpperCase(),"PRODUCTION","STORE","INTERNAL","STAGING","RELEASE","DEBUG"].map(V=>`KEYSTORE_PASSWORD_${V}`),"KEYSTORE_PASSWORD"].find(V=>!!a[V]);A&&a[A]&&(a.ANDROID_STORE_PASSWORD=a[A])}if(ie?(a.ANDROID_KEY_PASSWORD=ie,v.info(N.dim(" - Injected key password from credential record"))):a.ANDROID_KEY_PASSWORD=a.ANDROID_STORE_PASSWORD||"",F)a.ANDROID_KEY_ALIAS=F;else{let M=["ANDROID_KEY_ALIAS","KEYSTORE_ALIAS"].find(W=>!!a[W]);M&&(a.ANDROID_KEY_ALIAS=a[M])}v.info(N.dim(` - Injected ${E.name} as ANDROID_KEYSTORE_BASE64`)),G=!0}}catch(z){x.push(`${E.name||E.type}: ${z.message}`)}let H=e.platform==="ios"?e.simulator||$&&U:G||!R.some(E=>E.type==="android_keystore");if(x.length>0&&!H)throw new Error(`Credential setup failed:
|
|
1098
|
+
`)}catch(V){let X=`IPA validation failed for ${w.basename(A)}: ${V.message||"archive may be corrupt"}`;throw o&&o(`[IPA CORRUPT] ${X}
|
|
1099
|
+
`),new Error(X)}return Y}},Ke=e=>{try{let t=w.join(process.cwd(),p.configFileName);if(g.existsSync(t)){let i=JSON.parse(g.readFileSync(t,"utf-8"));if(e==="android"&&i.android?.package)return i.android.package;if(e==="ios"&&i.ios?.bundleIdentifier)return i.ios.bundleIdentifier}if(e==="android"){let i=["android/app/build.gradle","app/build.gradle","build.gradle"];for(let n of i)if(g.existsSync(n)){let o=g.readFileSync(n,"utf-8").match(/applicationId\s+['"]([^'"]+)['"]/);if(o)return o[1]}}else{let i=w.resolve(process.cwd(),g.existsSync("ios")?"ios":"."),n=st(i,["Info.plist"]).filter(s=>!s.includes("/Pods/")&&!s.includes("/build/")&&!s.includes("/DerivedData/"));n.sort((s,l)=>l.split("/").length-s.split("/").length);for(let s of n){let a=g.readFileSync(s,"utf-8").match(/<key>CFBundleIdentifier<\/key>\s*<string>([^<]+)<\/string>/);if(a&&!a[1].includes("$"))return a[1]}let r=st(i,[".xcodeproj"]);if(r.length>0){let s=w.join(r[0],"project.pbxproj");if(g.existsSync(s)){let a=g.readFileSync(s,"utf-8").match(/PRODUCT_BUNDLE_IDENTIFIER\s*=\s*"?([^";\s]+)"?;/);if(a)return a[1]}}let o=["app.json","app.config.json","app.config.js","app.config.ts"];for(let s of o)if(g.existsSync(s)){let a=g.readFileSync(s,"utf-8").match(/"bundleIdentifier":\s*"([^"]+)"/);if(a)return a[1]}}}catch{return null}return null},Ws=()=>{try{return J("emulator -version",{stdio:"ignore"}),"emulator"}catch{let t=he.homedir(),i=[w.join(t,"Library/Android/sdk/emulator/emulator"),w.join(t,"Android/Sdk/emulator/emulator"),"/usr/local/lib/android/sdk/emulator/emulator"];for(let n of i)if(g.existsSync(n))return n}return"emulator"},Ys=async(e,t)=>{let i=ei();try{if(J("adb devices").toString().split(`
|
|
1100
|
+
`).slice(1).map(s=>s.trim()).filter(s=>s.length>0&&!s.startsWith("*")).map(s=>s.split(" ")[0]).length===0){b.warn(y.yellow("No Android devices or emulators found."));let s=Ws(),l=[];try{l=J(`${s} -list-avds`).toString().split(`
|
|
1101
|
+
`).filter(a=>a.trim().length>0)}catch{}if(l.length>0){let a=await Ui({message:"Select an emulator to launch:",options:l.map(u=>({value:u,label:u}))});if(ti(a))return;i.start(`Launching emulator ${a}...`),Zn(s,["-avd",a],{detached:!0,stdio:"ignore"}).unref();let c=0,d=!1;for(;c<60;){try{if(J("adb shell getprop sys.boot_completed",{stdio:"pipe"}).toString().trim()==="1"){d=!0;break}}catch{}await new Promise(u=>setTimeout(u,2e3)),c++}if(!d)throw i.stop("Emulator launch timed out."),new Error("Emulator launch timed out. Please try launching it manually.");i.stop("Emulator launched.")}else throw new Error("No devices found and no emulators available to launch. (Make sure Android SDK is installed)")}i.start("Installing APK on device..."),await Fe("adb",["install","-r",e],process.cwd(),{},t),i.stop("Installation complete.");let o=Ke("android");if(o){b.info(y.blue(`\u{1F680} Launching ${o}...`));try{J(`adb shell dumpsys package ${o}`).toString().split(`
|
|
1102
|
+
`).find(a=>a.includes("android.intent.action.MAIN")&&a.includes("android.intent.category.LAUNCHER"))?J(`adb shell monkey -p ${o} -c android.intent.category.LAUNCHER 1`,{stdio:"ignore"}):J(`adb shell monkey -p ${o} -c android.intent.category.LAUNCHER 1`,{stdio:"ignore"})}catch{b.warn("Could not auto-launch app. You may need to open it manually.")}}}catch(n){i.stop("Installation failed."),b.error(y.red(`Failed to install APK: ${n.message}`))}},Js=async(e,t,i)=>{let n=ei();try{if(!J("xcrun simctl list devices booted").toString().includes("(Booted)")){b.warn(y.yellow("No iOS Simulator is currently booted."));let o=J("xcrun simctl list devices --json").toString(),s=JSON.parse(o).devices,l=[];Object.keys(s).forEach(u=>{s[u].forEach(f=>{f.isAvailable&&l.push({...f,runtime:u})})});let a=await Ui({message:"Select a simulator to launch:",options:l.map(u=>({value:u.udid,label:`${u.name} (${u.runtime.split(".").pop()})`}))});if(ti(a))return;n.start(`Booting ${a}...`),J(`xcrun simctl boot ${a}`),J(`open -a Simulator --args -CurrentDeviceUDID ${a}`);let c=0,d=!1;for(;c<30;){try{if(J("xcrun simctl list devices booted").toString().includes(a)){d=!0;break}}catch{}await new Promise(u=>setTimeout(u,2e3)),c++}if(!d)throw n.stop("Simulator boot timed out."),new Error("Simulator boot timed out.");n.stop("Simulator booted.")}n.start("Installing on iOS Simulator..."),await Fe("xcrun",["simctl","install","booted",e],process.cwd(),{},i),n.stop("Installation complete."),b.info(y.blue(`\u{1F680} Launching ${t}...`)),await Fe("xcrun",["simctl","launch","booted",t],process.cwd(),{},i)}catch(r){n.stop("Installation failed."),b.error(y.red(`Failed to install on Simulator: ${r.message}`))}},Xs=async(e,t,i)=>{let n=ei();n.start("Scanning for connected iOS devices...");try{let r=J("xcrun devicectl list devices --json-output -").toString(),s=(JSON.parse(r).result?.devices||[]).filter(a=>a.connectionProperties?.transportType==="wired"||a.connectionProperties?.transportType==="localNetwork");if(s.length===0)throw n.stop("No connected iOS devices found."),new Error("Please connect your iPhone via USB or ensure it is on the same Wi-Fi for wireless debugging.");let l=s[0].identifier;if(s.length>1){n.stop();let a=await Ui({message:"Select a device to install on:",options:s.map(c=>({value:c.identifier,label:`${c.deviceProperties?.name||c.name||c.model?.name} (${c.model?.name||"iPhone"}) - ${c.identifier}`}))});if(ti(a))return;l=a,n.start(`Installing on ${l}...`)}else n.message(`Installing on ${s[0].model.name}...`);await Fe("xcrun",["devicectl","device","install","app","--device",l,e],process.cwd(),{},i),n.stop("Installation complete."),b.info(y.blue(`\u{1F680} Launching ${t}...`)),await Fe("xcrun",["devicectl","device","launch","app","--device",l,t],process.cwd(),{},i)}catch(r){n.stop("Installation failed."),b.error(y.red(`Failed to install on device: ${r.message}`)),b.info(y.dim('Make sure your device is unlocked and "Developer Mode" is enabled in Settings -> Privacy & Security.'))}};import or from"fs";import sr from"path";import{isCancel as Fi,log as Ve,select as ar,spinner as qs,text as Zs}from"@clack/prompts";import gt from"chalk";async function lr(e){let t=await Hi(e);t&&(Ve.success(gt.green(`Maestro run ${t.status||"queued"}: ${t.testRunId}`)),t.launchDeferredReason&&Ve.warn(gt.yellow(t.launchDeferredReason)),t.dashboardUrl&&Ve.info(gt.dim("View test run: ")+gt.white.underline(t.dashboardUrl)))}async function Hi(e){let t=Ue(`./${p.configFileName}`),i=e.projectId||t?.projectId,n=e.profile||e.buildProfile||"production";if(!i)return Ve.error(`No projectId found. Run \`${p.nameLower} link\` first or pass an internal project id.`),null;let r=e.platform;if(!r&&e.latest){let a=await ar({message:"Select platform for the latest build:",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"}]});if(Fi(a))return null;r=a}let o=await Qs(e);if(!o)return null;if(o.kind==="latest"&&!r)return Ve.error("Pass --platform when using --latest."),null;if(o.kind==="artifact-url"&&!r)return Ve.error("Pass --platform when using --artifact-url."),null;let s=ea(e.maestroRetries);if(s===null)return null;let l=qs();e.quiet||l.start("Queuing Maestro run...");try{let a=await C.post("/tests/maestro",{projectId:i,platform:r,profile:n,latest:o.kind==="latest",buildId:o.kind==="build-id"?o.value:e.buildId,buildUrl:o.kind==="build-url"?o.value:e.buildUrl,artifactUrl:o.kind==="artifact-url"?o.value:e.artifactUrl,flows:e.maestroFlows||".maestro",device:e.maestroDevice||(r==="ios"?"iphone_15":"pixel_6"),retries:s,record:!!e.maestroRecord});if(a.data.status!=="success")throw new Error(a.data.message||"Failed to queue Maestro run");let c=a.data.testRun,d={testRunId:c.testRunId,status:c.status,projectId:i,buildId:c.buildId,platform:c.platform,dashboardUrl:c.dashboardUrl||`${Ye}/tests/${c.testRunId}`,launchDeferredReason:c.launchDeferredReason};return ta(e,d),e.quiet||l.stop("Maestro run queued"),d}catch(a){e.quiet||l.stop("Could not queue Maestro run");let c=a.response?.data?.message||a.message||"Unknown error";return Ve.error(gt.red(`Maestro queue failed: ${c}`)),null}}async function Qs(e){if(e.buildId)return{kind:"build-id",value:e.buildId};if(e.buildUrl)return{kind:"build-url",value:e.buildUrl};if(e.artifactUrl)return{kind:"artifact-url",value:e.artifactUrl};if(e.latest)return{kind:"latest"};let t=await ar({message:"Select app artifact source for Maestro:",options:[{value:"latest",label:"Latest successful build"},{value:"build-id",label:"Build ID"},{value:"build-url",label:`${p.name} build URL`},{value:"artifact-url",label:"Direct artifact URL"}]});if(Fi(t))return null;if(t==="latest")return{kind:"latest"};let i=await Zs({message:t==="build-id"?"Enter build ID:":t==="build-url"?`Enter ${p.name} build URL:`:"Enter artifact URL:",validate:n=>{let r=String(n||"").trim();if(!r)return"Value is required";if((t==="build-url"||t==="artifact-url")&&!r.startsWith("http"))return"Must be a URL"}});return Fi(i)?null:{kind:t,value:String(i).trim()}}function ea(e){if(e==null||e==="")return 1;let t=Number(e);return!Number.isInteger(t)||t<0||t>10?(Ve.error("--maestro-retries must be an integer between 0 and 10."),null):t}function ta(e,t){if(!e.jsonOutput)return;let i=sr.resolve(e.jsonOutput),n={...t,updatedAt:new Date().toISOString()};try{let r=sr.dirname(i);r&&r!=="."&&or.mkdirSync(r,{recursive:!0}),or.writeFileSync(i,JSON.stringify(n,null,2))}catch(r){Ve.warn(gt.yellow(`Could not write Maestro metadata JSON: ${r.message}`))}}var ji=8,ra=6,fr=Number(process.env.MACH_ARTIFACT_UPLOAD_MAX_ATTEMPTS||2),Gi=Number(process.env.MACH_ARTIFACT_UPLOAD_TIMEOUT_MS||12e4),Ir=e=>new Promise(t=>setTimeout(t,e)),oa=e=>{if(!Number.isFinite(e)||e<=0)return"0 B";let t=["B","KB","MB","GB"],i=Math.min(Math.floor(Math.log(e)/Math.log(1024)),t.length-1);return`${(e/Math.pow(1024,i)).toFixed(i===0?0:1)} ${t[i]}`},sa=e=>{let t=e.response?.status,i=e.code||"",n=e.message||"";return t?t===408||t===409||t===425||t===429||t>=500||/ECONNRESET|ETIMEDOUT|EAI_AGAIN|ENOTFOUND|ECONNABORTED|socket hang up|network|timeout/i.test(`${i} ${n}`):!0},ii=async(e,t,i=ra)=>{let n;for(let r=1;r<=i;r++)try{return await t()}catch(o){if(n=o,!sa(o)||r>=i)break;let s=Math.min(6e4,2e3*Math.pow(2,r-1)),l=o.response?.status||o.code||o.message||"network error";R.warn(N.yellow(`${e} failed transiently (${l}). Retrying in ${Math.round(s/1e3)}s... (${r}/${i})`)),await Ir(s)}throw n},aa=async(e,t,i)=>{let n=be.basename(e),r=oe.statSync(e).size,o=Math.round(Gi/1e3);try{await ii(`Upload artifact ${n}`,async()=>{let s=new AbortController,l=oe.createReadStream(e),a=setTimeout(()=>{l.destroy(new Error(`Artifact upload timed out after ${o}s`)),s.abort()},Gi);try{await Rt.put(t,l,{headers:{"Content-Type":i,"Content-Length":r,Connection:"close"},maxBodyLength:1/0,maxContentLength:1/0,timeout:Gi,timeoutErrorMessage:`Artifact upload timed out after ${o}s`,signal:s.signal})}finally{clearTimeout(a)}},fr)}catch(s){throw new Error(`${n} (${oa(r)}) failed after ${fr} upload attempt(s): ${s.message||s}`)}return r},la=e=>{let t=e.response?.status;return t?t===408||t===429||t>=500:!0},Ot=e=>e.credentialId||e.id,ca=async(e,t)=>{let i=Ot(e);if(!i)return e.downloadUrl;let n=await C.get(`/credentials/${i}/download`,{params:{projectId:t,format:"raw"}});return n.data?.status==="success"&&n.data?.downloadUrl?n.data.downloadUrl:e.downloadUrl},_r=async(e,t)=>{let i=e.downloadUrl;for(let n=1;n<=ji;n++)try{if((!i||n>1)&&(i=await ca(e,t)),!i)throw new Error(`Credential ${e.name||Ot(e)||"unknown"} has no download URL.`);let r=await Rt.get(i,{responseType:"arraybuffer",timeout:6e4,maxContentLength:1/0,maxBodyLength:1/0,headers:{Connection:"close"}});return Buffer.from(r.data).toString("base64")}catch(r){if(n>=ji||!la(r))throw r;let o=Math.min(1500*n*n,15e3);R.warn(N.dim(` - Temporary network error downloading ${e.name}. Retrying... (${n}/${ji})`)),await Ir(o)}throw new Error(`Failed to download credential ${e.name||Ot(e)||"unknown"}.`)},da=async(e,t)=>{let i=await _r(e,t);return Buffer.from(i,"base64").toString("utf8")},ua=(e,t)=>t?.ios?.buildNumber??t?.iosBuildNumber??e?.ios?.buildNumber??e?.expo?.ios?.buildNumber,pa=(e,t,i)=>t?.ios?.ascAppId??t?.ascAppId??e?.ios?.ascAppId??e?.submit?.[i]?.ios?.ascAppId??e?.submit?.production?.ios?.ascAppId,mr=e=>e.bundleId||e.bundleIdentifier||e.meta?.bundleId||e.meta?.bundleIdentifier,gr=(e,t)=>{let i=e.filter(n=>n.type==="asc_api_key");if(i.length!==0){if(t){let n=i.find(o=>mr(o)===t);if(n)return n;let r=i.find(o=>mr(o)==="*");if(r)return r}return i[0]}},fa=e=>typeof e=="string"&&e.trim().toLowerCase()==="auto",wr=(e,t,i=[])=>{if(!oe.existsSync(e))return i;let n;try{n=oe.readdirSync(e,{withFileTypes:!0})}catch{return i}for(let r of n){if(r.name==="Pods"||r.name==="build"||r.name==="DerivedData")continue;let o=be.join(e,r.name);r.isDirectory()?wr(o,t,i):r.name===t&&i.push(o)}return i},ma=(e,t,i)=>{let n=`${i} ${t.environment||""}`.toLowerCase(),r=e.toLowerCase(),o=0;return(n.includes("development")||n.includes("dev"))&&/(^|[.-])dev(elopment)?($|[.-])/.test(r)&&(o+=20),(n.includes("staging")||n.includes("stage"))&&/(^|[.-])stag(e|ing)?($|[.-])/.test(r)&&(o+=20),(n.includes("production")||n.includes("prod"))&&(/(^|[.-])(dev|development|stag|stage|staging)($|[.-])/.test(r)||(o+=20)),o},ga=(e,t)=>{let i=be.resolve(process.cwd(),oe.existsSync("ios")?"ios":"."),n=wr(i,"project.pbxproj"),r=[];for(let o of n)try{let l=oe.readFileSync(o,"utf8").matchAll(/PRODUCT_BUNDLE_IDENTIFIER\s*=\s*"?([^";\s]+)"?;/g);for(let a of l){let c=a[1]?.trim();c&&!c.includes("$")&&!c.startsWith("com.apple.")&&!r.includes(c)&&r.push(c)}}catch{}if(r.length!==0)return r.length===1?r[0]:r.map(o=>({bundleId:o,score:ma(o,e,t)})).sort((o,s)=>s.score-o.score)[0]?.bundleId},ni=e=>String(e||"").trim().toLowerCase().replace(/_/g,"-"),ri=(e,t)=>{let i=ni(e);return t==="ios"&&(i==="internal"||i==="ad-hoc")?"adhoc":t==="android"&&["internal","adhoc","ad-hoc","development","dev","staging","stage"].includes(i)?"internal":i},hr=(e,t,i)=>{let n=ri(e.distributionType||e.meta?.distributionType,i);return n?n===ri(t,i):!0},yr=(e,t,i)=>{let n=ri(e.distributionType||e.meta?.distributionType,i),r=ri(t,i);return n?n===r?3:i==="android"&&r!=="store"&&n!=="store"?2:0:1},ha=e=>{let t=e.toLowerCase();return t==="development"||t==="dev"||t.startsWith("development-")||t.startsWith("dev-")||t.endsWith("-development")||t.endsWith("-dev")},ya=e=>{let t=e.toLowerCase();return t.includes("staging")||t.includes("stage")||t.includes("preview")||t.includes("adhoc")||t.includes("ad-hoc")},Sa=(e,t)=>{let i=ni(e.distribution),n=ni(e.iosExportMethod),r=ni(e.environment);return e.platform!=="ios"?i==="store"?"store":"internal":e.developmentClient||e.simulator?"development":n==="app-store"||i==="store"?"store":n==="development"||i==="development"?"development":n==="ad-hoc"||n==="adhoc"||i==="ad-hoc"||i==="adhoc"||i==="internal"?"adhoc":r==="production"||r==="store"?"store":r==="development"||r==="dev"?"development":r==="staging"||r==="stage"||r==="preview"?"adhoc":t.toLowerCase()==="production"||t.toLowerCase().includes("store")?"store":ha(t)?"development":(ya(t),"adhoc")},$r=e=>e.bundleId||e.bundleIdentifier||e.packageName||e.meta?.bundleId||e.meta?.bundleIdentifier||e.meta?.packageName,Sr=(e,t)=>{if(!t)return!0;let i=$r(e);return!i||i==="*"||i===t},Er=(e,t)=>{let i=$r(e);return!t||!i?0:i===t?2:i==="*"?1:-1},Pr=e=>{try{let t=Buffer.from(e,"base64").toString("utf8"),i=t.match(/<key>application-identifier<\/key>\s*<string>([^<]+)<\/string>/)?.[1]?.trim();if(!i)return;let n=t.match(/<key>TeamIdentifier<\/key>\s*<array>\s*<string>([^<]+)<\/string>/)?.[1]?.trim();if(n&&i.startsWith(`${n}.`))return i.slice(n.length+1);let r=i.indexOf(".");return r>=0?i.slice(r+1):i}catch{return}},Ea=(e,t)=>{if(e===t||e==="*")return!0;if(e.endsWith(".*")){let i=e.slice(0,-2);return t.startsWith(`${i}.`)}return!1},ba=(e,t)=>{if(!t)return!0;let i=Pr(e);if(i)return Ea(i,t);try{return Buffer.from(e,"base64").toString("latin1").includes(t)}catch{return!0}},oi=async e=>{if(e.failOnly){(!e.projectId||!e.buildId)&&(R.error(N.red("--project-id and --build-id are required with --fail-only.")),process.exit(1));let l=e.error||"Build runner failed before it could report a final status.";try{await C.patch(`/builds/${e.projectId}/${e.buildId}`,{status:"failed",error:l,endTime:Date.now()}),R.info(N.yellow(`Marked build ${e.buildId} as failed.`));return}catch(a){R.error(N.red(`Could not mark build failed: ${a.message}`)),process.exit(1)}}e.platform!=="android"&&e.platform!=="ios"&&(R.error(`Platform ${e.platform} is not supported. Use 'android' or 'ios'.`),process.exit(1));let t=Ki(),i=e.buildId||ia(),n=e.projectId,r=Date.now(),o=!!n,s=async l=>{if(n)try{await C.patch(`/builds/${n}/${i}`,{status:"failed",error:l})}catch{}};if(e.local&&e.buildId){e.quiet||t.start(`Preparing isolated workspace for build: ${e.buildId}`);try{let l=await C.get(`/builds/${n}/${e.buildId}/source-url`);if(l.data.status!=="success")throw new Error("Failed to get source download URL from API");let a=await Rt.get(l.data.downloadUrl,{responseType:"stream"}),c=(n||e.projectId||"default").replace(/[^a-zA-Z0-9-_]/g,"_"),d=be.join(na.homedir(),p.workspacesDir,c);oe.mkdirSync(d,{recursive:!0});let u=new Set(["node_modules",`.${p.nameLower}-cache-meta`]),f=new Set(["Pods"]);if(oe.existsSync(d)){let B=oe.readdirSync(d);for(let k of B){if(u.has(k))continue;if(k==="ios"){let h=be.join(d,"ios");try{let K=oe.readdirSync(h);for(let _ of K)if(!f.has(_))try{oe.rmSync(be.join(h,_),{recursive:!0,force:!0})}catch{}}catch{}continue}let j=be.join(d,k);try{oe.rmSync(j,{recursive:!0,force:!0})}catch{}}}let m=be.join(d,"source.zip"),I=a.data,L=oe.createWriteStream(m);await new Promise((B,k)=>{I.pipe(L),I.on("error",j=>k(j)),L.on("finish",()=>B())}),new pr(m).extractAllTo(d,!0);try{oe.unlinkSync(m)}catch{}process.chdir(d),R.info(N.green(`\u2713 Persistent workspace ready: ${d}`)),R.info(N.dim(` \u{1F4E6} Cached dirs preserved: node_modules=${oe.existsSync(be.join(d,"node_modules"))?"\u2705":"\u274C"}, Pods=${oe.existsSync(be.join(d,"ios","Pods"))?"\u2705":"\u274C"}`)),t.stop()}catch(l){t.stop(`Failed to prepare isolated workspace: ${l.message}`),n&&await s(`Setup Error: ${l.message}`),process.exit(1)}}try{let l=e.repo;if(!l)try{l=ur("git config --get remote.origin.url").toString().trim()}catch{R.warn("Could not detect git repository URL.")}!l&&e.dryRun,l||(l="https://github.com/placeholder/repo.git"),R.info(`Build ID: ${N.cyan(i)}`);let a={},c={},d=Ue(`./${p.configFileName}`);if(d){n=d.projectId;let _=e.buildProfile||"production",S=Je(d,_);!S&&e.buildProfile&&(R.error(`Build profile '${_}' not found in ${p.configFileName}`),process.exit(1));let O=S||{};process.env.MACH_DEBUG&&R.info(N.dim(`Build profile: ${_} | Platform: ${e.platform} | Distribution: ${O.distribution||"store"} | Environment: ${O.environment||_}`)),O.env&&(c=O.env,R.info(N.blue(`Use Build Profile: ${_}`)));let v=e.platform,T=O[v]||{},D=["developmentClient","simulator","distribution","buildCommand","apk","iosScheme","preBuild","postBuild","scheme","environment","androidPackage","iosBundleIdentifier","name","iosDeploymentTarget","iosApiKeyId","iosApiKeyIssuer","iosApiKeyPath","iosTeamId","iosConfiguration","iosExportMethod","branch","repo","instanceType","ami","bucket","region","nodeVersion"];e.name=d.name,e.appName=d.name,e.androidPackage=d.android?.package,e.iosBundleIdentifier=d.ios?.bundleIdentifier,e.iosScheme=d.ios?.iosScheme,!e.nodeVersion&&d.nodeVersion&&(e.nodeVersion=d.nodeVersion);let $=x=>x==="androidPackage"?T.androidPackage??T.package??O.androidPackage??O.android?.package:x==="iosBundleIdentifier"?T.iosBundleIdentifier??T.bundleIdentifier??O.iosBundleIdentifier??O.ios?.bundleIdentifier:T[x]!==void 0?T[x]:O[x];for(let x of D){let H=$(x),E=x==="androidPackage"||x==="iosBundleIdentifier";H!==void 0&&(e[x]===void 0||E)&&(e[x]=H)}if(e.platform==="ios"&&!(T.iosBundleIdentifier??T.bundleIdentifier??O.iosBundleIdentifier??O.ios?.bundleIdentifier)){let H=ga(e,_);H&&H!==e.iosBundleIdentifier&&(R.warn(N.yellow(`Detected native iOS bundle identifier ${H}; using it for credential lookup. Set build.${_}.ios.bundleIdentifier to make this explicit.`)),e.iosBundleIdentifier=H)}e.branch=e.branch||"main",e.iosConfiguration=e.iosConfiguration||(e.developmentClient||e.simulator?"Debug":"Release"),e.sshUser=e.sshUser||process.env.USER||"ubuntu",e.simulator===void 0&&(e.simulator=!1),e.local===void 0&&(e.local=!1),e.verbose===void 0&&(e.verbose=!1);let M=x=>{if(!x)return x;if(x.startsWith("scripts.")){let H=x.split(".")[1],E=d.scripts?.[H];if(E)return E;R.warn(`Script reference not found: ${x}`)}return x};e.buildCommand=M(e.buildCommand),e.preBuild=M(e.preBuild),e.postBuild=M(e.postBuild),!e.scheme&&d.scheme&&(e.scheme=d.scheme);let G={...pt(d,p.envPrefix),...pt(O,`${p.envPrefix}PROFILE_`)};a={...a,...c,...G},process.env.IOS_P12_PASSWORD&&!a.IOS_P12_PASSWORD&&(a.IOS_P12_PASSWORD=process.env.IOS_P12_PASSWORD),process.env.MATCH_PASSWORD&&!a.MATCH_PASSWORD&&(a.MATCH_PASSWORD=process.env.MATCH_PASSWORD),e.platform==="ios"&&(!e.iosTeamId&&O.ios?.appleTeamId&&(e.iosTeamId=O.ios.appleTeamId),!e.iosTeamId&&d.submit?.[_]?.ios?.appleTeamId&&(e.iosTeamId=d.submit[_].ios.appleTeamId),!e.iosTeamId&&d.submit?.production?.ios?.appleTeamId&&(R.warn(N.yellow(`Check: Using 'production' Team ID for '${_}' build.`)),e.iosTeamId=d.submit.production.ios.appleTeamId),e.iosTeamId?R.info(N.magenta(`\u2713 Injected iOS Team ID from config: ${e.iosTeamId}`)):R.warn(N.yellow("\u26A0\uFE0F No iOS Team ID found. Signing might fail if not managed automatically via Expo.")))}let u="unknown";try{u=ur("git rev-parse --abbrev-ref HEAD").toString().trim()}catch{R.warn("Failed to detect git branch.")}let f="1.0.0";try{oe.existsSync("./package.json")&&(f=JSON.parse(oe.readFileSync("./package.json","utf-8")).version||"1.0.0")}catch{}let m=e.buildProfile||"production",I="Internal";e.developmentClient?I="DevelopmentClient":m.toLowerCase().includes("store")||m.toLowerCase()==="production"?I="Store":m.toLowerCase().includes("preview")||m.toLowerCase().includes("staging")?I="Staging":(m.toLowerCase().includes("development")||m.toLowerCase().includes("dev"))&&(I="Development");let L=e.platform==="ios"?"iOS":"Android",P=e.platform==="ios"&&e.simulator?" (Simulator)":"",B=`${L}${P} v${f} (${I})`;if(si(e,{status:"created",projectId:n,buildId:i,platform:e.platform,profile:m,branch:u,version:f,buildType:I,developmentClient:!!e.developmentClient,summary:B}),n){try{let _=e.buildProfile||"production",S=e.environment||_;R.info(N.blue(`Fetching managed secrets for profile: ${_} (environment: ${S})...`));let v=(await C.get(`/projects/${n}/secrets/export?env=${S}`)).data;v.status==="success"&&v.secrets&&(a={...a,...v.secrets},Object.keys(v.secrets).length>0&&R.info(N.magenta(`\u2713 Injected ${Object.keys(v.secrets).length} secrets from Dashboard.`)))}catch(_){R.warn(`Failed to load managed secrets from Dashboard: ${_.message}`)}try{R.info(N.blue("Fetching managed credentials..."));let _=Sa(e,m),S=e.platform==="ios"?e.iosBundleIdentifier:e.androidPackage,O=e.platform==="ios"?"bundle":"package";R.info(N.dim(` Credential target: ${O} ${S||"not set"} (${_})`));let v=await C.get("/credentials/resolve",{params:{projectId:n,platform:e.platform,bundleId:S,distributionType:_}});if(v.data.status==="success"&&v.data.credentials){let T=v.data.credentials;R.info(N.magenta(`\u2713 Found ${T.length} relevant credentials.`));let D=T.filter(E=>e.platform==="ios"&&E.type==="ios_profile"?hr(E,_,e.platform)?Sr(E,S):!1:e.platform==="android"&&E.type==="android_keystore"?Sr(E,S):!!hr(E,_,e.platform)).sort((E,se)=>Er(se,S)*10+yr(se,_,e.platform)-(Er(E,S)*10+yr(E,_,e.platform)));R.info(N.dim(` Filtered to ${D.length} credentials for distributionType: ${_}`));let $=!1,M=!1,G=!1,x=[];for(let E of D)if(!(E.type==="ios_cert"&&$||E.type==="ios_profile"&&M||E.type==="android_keystore"&&G)&&["ios_cert","ios_profile","android_keystore"].includes(E.type)&&(E.downloadUrl||Ot(E)))try{let W=await _r(E,n);if(E.type==="ios_cert"&&!$)a.IOS_DIST_P12=W,E.password?(a.IOS_P12_PASSWORD=E.password,R.info(N.dim(` - Injected ${E.name} as IOS_DIST_P12 with password from credential record`))):R.info(N.dim(` - Injected ${E.name} as IOS_DIST_P12`)),$=!0;else if(E.type==="ios_profile"&&!M){if(!ba(W,S)){let Ae=Pr(W)||"unknown";throw new Error(`Provisioning profile ${E.name||Ot(E)||"unknown"} is for a different bundle ID. Expected ${S}, found ${Ae}. Upload a ${_} profile for ${S}.`)}a.IOS_PROVISIONING_PROFILE=W,R.info(N.dim(` - Injected ${E.name} as IOS_PROVISIONING_PROFILE`)),M=!0}else if(E.type==="android_keystore"&&!G){a.ANDROID_KEYSTORE_BASE64=W;let Ae=E.keystorePassword||E.password,re=E.keyPassword||E.keystorePassword||E.password,F=E.alias||E.meta?.alias;if(Ae)a.ANDROID_STORE_PASSWORD=Ae,R.info(N.dim(" - Injected keystore password from credential record"));else{let A=["ANDROID_STORE_PASSWORD",...[_==="store"?"PRODUCTION":_==="internal"||_==="adhoc"?"STAGING":"DEVELOPMENT",_.toUpperCase(),"PRODUCTION","STORE","INTERNAL","STAGING","RELEASE","DEBUG"].map(V=>`KEYSTORE_PASSWORD_${V}`),"KEYSTORE_PASSWORD"].find(V=>!!a[V]);A&&a[A]&&(a.ANDROID_STORE_PASSWORD=a[A])}if(re?(a.ANDROID_KEY_PASSWORD=re,R.info(N.dim(" - Injected key password from credential record"))):a.ANDROID_KEY_PASSWORD=a.ANDROID_STORE_PASSWORD||"",F)a.ANDROID_KEY_ALIAS=F;else{let U=["ANDROID_KEY_ALIAS","KEYSTORE_ALIAS"].find(Y=>!!a[Y]);U&&(a.ANDROID_KEY_ALIAS=a[U])}R.info(N.dim(` - Injected ${E.name} as ANDROID_KEYSTORE_BASE64`)),G=!0}}catch(W){x.push(`${E.name||E.type}: ${W.message}`)}let H=e.platform==="ios"?e.simulator||$&&M:G||!D.some(E=>E.type==="android_keystore");if(x.length>0&&!H)throw new Error(`Credential setup failed:
|
|
1103
1103
|
${x.map(E=>`- ${E}`).join(`
|
|
1104
|
-
`)}`);x.length>0&&
|
|
1105
|
-
\u{1F517} Download Links:`));for(let T of
|
|
1106
|
-
\u2713 Build completed and reported to dashboard.`)),e.maestro&&!k&&await
|
|
1107
|
-
${
|
|
1108
|
-
\u{1F3BC} Queuing managed Maestro test...`)),await
|
|
1109
|
-
\u2717 Build failed: ${a.error||"Unknown error"}`)),process.exit(1);else if(r==="completed"||r==="success"){i.quiet||n.stop("Build successful!"),
|
|
1110
|
-
\u2713 Build completed successfully!`));try{i.quiet||(
|
|
1111
|
-
\u{1F4F1} Installation Hub:`)),
|
|
1112
|
-
`);if(u.length>o){for(let
|
|
1113
|
-
\u2717 Lost connection to Dashboard API.`)),process.exit(1))}await new Promise(l=>setTimeout(l,3e3))}}import
|
|
1114
|
-
`)
|
|
1115
|
-
`).filter(o=>!!o.trim()),r=e.some(o=>o.platform==="android"&&o.id.startsWith("emulator-"));n.forEach(o=>{r||e.push({id:o,platform:"android",type:"emulator",name:o.replace(/_/g," "),status:"offline",details:`Android Virtual Device: ${o}`})})}catch{}if(process.platform!=="darwin")return e;try{let t=De("/usr/bin/xcrun simctl list devices --json",{stdio:"pipe"}).toString(),i=JSON.parse(t);Object.entries(i.devices).forEach(([n,r])=>{r.forEach(o=>{o.isAvailable&&e.push({id:o.udid,platform:"ios",type:"simulator",name:o.name,status:o.state?.toLowerCase()==="booted"?"online":"offline",runtime:n,details:`${o.name} (${n})`})})})}catch{}try{let t=De("/usr/bin/xcrun devicectl list devices --json-output -",{stdio:"pipe"}).toString();(JSON.parse(t).result?.devices||[]).forEach(n=>{let r=n.connectionProperties?.transportType;(r==="wired"||r==="localNetwork")&&e.push({id:n.identifier,platform:"ios",type:"physical",name:n.deviceProperties?.name||"iPhone",status:"online",details:`${n.deviceProperties?.name||"iPhone"} (${n.model?.name||n.hardwareModel||""}) - ${r}`})})}catch{}return e}async function er(e){let t=[];for await(let i of e)t.push(Buffer.isBuffer(i)?i:Buffer.from(i));return t.length===0?{}:JSON.parse(Buffer.concat(t).toString("utf-8"))}async function xs(e,t){let i=await Ns({method:"GET",url:e,responseType:"stream",timeout:12e4}),n=$i.createWriteStream(t);i.data.pipe(n),await new Promise((r,o)=>{n.on("finish",r),n.on("error",o)})}async function Ls(e,t,i){let n=i||(t.toLowerCase().includes(".apk")?"android":"ios"),r=t.toLowerCase().includes(".ipa"),o=$i.mkdtempSync(Pi.join(Ts.tmpdir(),`${bt}-install-`)),s=Pi.join(o,n==="android"?"install.apk":r?"install.ipa":"install.zip");try{if(await xs(t,s),n==="android"){De(`adb -s ${JSON.stringify(e)} install -r ${JSON.stringify(s)}`,{stdio:"pipe"});return}if(process.platform!=="darwin")throw new Error("iOS local install requires macOS.");De(`unzip -o ${JSON.stringify(s)} -d ${JSON.stringify(o)}`,{stdio:"pipe"});let l="";try{l=De(`find ${JSON.stringify(Pi.join(o,"Payload"))} -maxdepth 1 -name "*.app" 2>/dev/null | head -n 1`,{stdio:"pipe"}).toString().trim()}catch{}if(l||(l=De(`find ${JSON.stringify(o)} -name "*.app" -type d | head -n 1`,{stdio:"pipe"}).toString().trim()),!l)throw new Error(`No .app bundle found inside the ${r?"IPA":"archive"}.`);try{De(`/usr/bin/xcrun devicectl device install app --device ${JSON.stringify(e)} ${JSON.stringify(l)}`,{stdio:"pipe"})}catch(a){try{De(`/usr/bin/xcrun simctl install ${JSON.stringify(e)} ${JSON.stringify(l)}`,{stdio:"pipe"})}catch{throw new Error(a.stderr?.toString().trim()||a.message||"iOS install failed.")}}}finally{$i.rmSync(o,{recursive:!0,force:!0})}}function Us(e,t){if(!e)throw new Error("Device id is required.");if(t==="ios"){if(process.platform!=="darwin")throw new Error("iOS Simulator launch requires macOS.");return De(`/usr/bin/xcrun simctl boot ${JSON.stringify(e)}`,{stdio:"pipe"}),Qn("open",["-a","Simulator"],{detached:!0,stdio:"ignore"}).unref(),"Simulator booting..."}if(t==="android"){let i=`${process.env.ANDROID_HOME||`${process.env.HOME}/Library/Android/sdk`}/emulator/emulator`;return Qn(i,["-avd",e],{detached:!0,stdio:"ignore"}).unref(),"Emulator booting in background..."}throw new Error("Invalid platform.")}async function tr(){process.platform!=="darwin"&&at.warn("Running on non-macOS \u2014 iOS discovery unavailable, Android only.");let e=Cs.createServer((n,r)=>{if(r.setHeader("Access-Control-Allow-Origin","*"),r.setHeader("Access-Control-Allow-Methods","GET, POST, OPTIONS"),r.setHeader("Access-Control-Allow-Headers","Content-Type, Authorization"),n.method==="OPTIONS"){r.writeHead(204),r.end();return}let o=new URL(n.url||"/",`http://localhost:${bt}`);if(n.method==="GET"&&o.pathname==="/local/devices"){try{let s=ks();r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",targets:s}))}catch(s){r.writeHead(500,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:s.message}))}return}if(n.method==="POST"&&o.pathname==="/install-local"){t(n,r);return}if(n.method==="POST"&&o.pathname==="/local/boot"){i(n,r);return}r.writeHead(404),r.end()}),t=async(n,r)=>{try{let{deviceId:o,artifactUrl:s,platform:l}=await er(n);if(!o||!s){r.writeHead(400,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:"deviceId and artifactUrl are required"}));return}await Ls(o,s,l),r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",message:`Installed on ${o}`}))}catch(o){r.writeHead(500,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:o.message||"Local install failed"}))}},i=async(n,r)=>{try{let{id:o,platform:s}=await er(n),l=Us(o,s);r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",message:l}))}catch(o){r.writeHead(500,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:o.message||"Local device launch failed"}))}};e.listen(bt,"127.0.0.1",()=>{at.success(_i.green(`Local device agent running on http://localhost:${bt}`)),at.info(_i.dim("Keep this running while using the Install Hub on the dashboard.")),at.info(_i.dim("Press Ctrl+C to stop."))}),e.on("error",n=>{n.code==="EADDRINUSE"?at.error(`Port ${bt} is already in use \u2014 agent may already be running.`):at.error(`Agent error: ${n.message}`),process.exit(1)}),await new Promise(()=>{})}import{createRequire as Xl}from"module";import{text as Bs,password as Fs,spinner as Hs,isCancel as rr}from"@clack/prompts";import vi from"chalk";import At from"fs";import ir from"path";import Ms from"os";var wi=ir.join(Ms.homedir(),f.configDir),Di=ir.join(wi,"config.json");function Ri(){if(!At.existsSync(Di))return{};try{return JSON.parse(At.readFileSync(Di,"utf-8"))}catch{return{}}}function nr(e){At.existsSync(wi)||At.mkdirSync(wi,{recursive:!0});let i={...Ri(),...e};At.writeFileSync(Di,JSON.stringify(i,null,2))}async function or(){let e=Ri(),t=await Bs({message:"Enter your email:",placeholder:"user@example.com",initialValue:e.lastLoginEmail,validate(r){if(r.length===0)return"Email is required!"}});if(rr(t))return;let i=await Fs({message:"Enter your password:",validate(r){if(r.length===0)return"Password is required!"}});if(rr(i))return;let n=Hs();n.start("Authenticating...");try{let o=await(await fetch(`${Lt}/login`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({username:t,password:i})})).json();o.status==="success"&&o.user.token?(zi({id:o.user.id,email:t,token:o.user.token,refreshToken:o.user.refreshToken}),nr({lastLoginEmail:t}),n.stop(vi.green("Login successful!"))):n.stop(vi.red("Login failed: "+(o.message||"Unknown error")))}catch(r){n.stop(vi.red("Network error: "+r.message))}}import{outro as js,select as Gs,spinner as Ks,isCancel as Vs}from"@clack/prompts";import Wt from"chalk";import Oi from"fs";import zs from"path";var sr=e=>e==="1234567890"||e==="ABC123DEFG"||e==="XXXXXXXXXX"?"":typeof e=="string"?e:"",Ws=()=>process.versions.node.split(".")[0]||"24";async function ar(){if(!ye()){console.log(Wt.red(`You are not logged in. Run \`${f.nameLower} login\` first.`));return}let t=Ks();t.start("Fetching projects...");try{let{data:i}=await C.get("/projects");if(t.stop("Projects loaded."),i.status!=="success"||!i.projects||i.projects.length===0){console.log(Wt.yellow(`No projects found. Run \`${f.nameLower} init\` to create one.`));return}let n=i.projects.map(I=>({value:I.projectId,label:`${I.name} (${I.slug})`})),r=await Gs({message:"Select a project to link:",options:n});if(Vs(r))return;let o=zs.join(process.cwd(),f.configFileName),s={};if(Oi.existsSync(o))try{s=JSON.parse(Oi.readFileSync(o,"utf-8"))}catch{}let l=i.projects.find(I=>I.projectId===r),a=s.android?.package||Be("android"),d=s.ios?.bundleIdentifier||Be("ios"),c=s.android||{},u=s.submit?.production?.android||{},p=s.submit?.production?.ios||{},m={projectId:r,name:l?.name,slug:l?.slug,nodeVersion:s.nodeVersion||Ws(),scheme:l?.slug?.toLowerCase()||"app",android:{...c,package:a||"",versionCode:c.versionCode||"auto"},ios:{bundleIdentifier:d||"",buildNumber:s.ios?.buildNumber||"auto"},build:{development:{environment:"development",distribution:"development"},staging:{environment:"staging",distribution:"internal"},production:{environment:"production",distribution:"store"}},submit:{production:{android:{...u,track:u.track||"internal",releaseStatus:u.releaseStatus||"completed"},ios:{ascAppId:sr(p.ascAppId),appleTeamId:sr(p.appleTeamId)}}}};Oi.writeFileSync(o,JSON.stringify(m,null,2)),js(Wt.green(`Linked to project ${m.name} (${m.slug})`))}catch(i){t.stop(Wt.red("Error fetching projects: "+i.message))}}import{outro as Ys,text as Yt,select as Js,spinner as Xs,isCancel as It}from"@clack/prompts";import _t from"chalk";import qs from"fs";import Zs from"path";import{randomUUID as Qs}from"crypto";var ea=()=>process.versions.node.split(".")[0]||"24";async function lr(){if(!ye()){console.log(_t.red(`You are not logged in. Run \`${f.nameLower} login\` first.`));return}let t=await Yt({message:"Project Name:",placeholder:"My Awesome App",validate(l){if(l.length===0)return"Name is required!"}});if(It(t))return;let i=await Yt({message:"Project Slug (URL friendly):",placeholder:"my-awesome-app",validate(l){if(l.length===0)return"Slug is required!";if(!/^[a-z0-9-]+$/.test(l))return"Slug must be lowercase alphanumeric with dashes."}});if(It(i))return;let n=await Js({message:"Platform:",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"},{value:"web",label:"Web"},{value:"all",label:"All Platforms"}]});if(It(n))return;let r="";if(n==="android"||n==="all"){let l=Be("android");if(r=await Yt({message:"Android Package Name:",initialValue:l||"",placeholder:"com.example.app",validate(a){if(a.length===0)return"Package name is required for Android!"}}),It(r))return}let o="";if(n==="ios"||n==="all"){let l=Be("ios");if(o=await Yt({message:"iOS Bundle Identifier:",initialValue:l||"",placeholder:"com.example.app",validate(a){if(a.length===0)return"Bundle ID is required for iOS!"}}),It(o))return}let s=Xs();s.start("Creating project...");try{let l=Qs(),d={projectId:l,name:t,slug:i,storageType:"managed",platforms:n==="all"?["android","ios","web"]:[n]},{data:c}=await C.post("/projects",d);if(c.status==="success"){s.stop(_t.green("Project created successfully!"));let u=Zs.join(process.cwd(),f.configFileName);qs.writeFileSync(u,JSON.stringify({projectId:l,name:t,slug:i,nodeVersion:ea(),...r?{android:{package:r,versionCode:"auto"}}:{},...o?{ios:{bundleIdentifier:o,buildNumber:"auto"}}:{},build:{development:{environment:"development",distribution:"development"},staging:{environment:"staging",distribution:"internal"},production:{environment:"production",distribution:"store"}},submit:{production:{android:{track:"internal",releaseStatus:"completed"},ios:{ascAppId:"",appleTeamId:""}}}},null,2)),Ys(_t.green(`Initialized project ${t} and linked locally!`))}else s.stop(_t.red("creation failed: "+c.message))}catch(l){s.stop(_t.red("Network error: "+l.message))}}import{spinner as cr,log as Ae}from"@clack/prompts";import Jt from"chalk";import dr from"fs";import ta from"path";function ur(e,t,i,n){let r=e?.response?.status,o=e?.response?.data?.message||e?.response?.data?.error,s=n?` ${n}`:"";return r===401?`Not logged in or token expired while trying to ${i}${s}. Run \`${f.nameLower} login\` and try again.`:r===403?[`Permission denied while trying to ${i}${s}.`,o?`API says: ${o}.`:void 0,`Current Mach account/token does not have access to project ${t}.`,`Run \`${f.nameLower} login\` with the correct account, or ask a project owner to grant access.`].filter(Boolean).join(" "):r===404?[`Project or environment endpoint was not found while trying to ${i}${s}.`,`Project ID: ${t}.`,o?`API says: ${o}.`:void 0].filter(Boolean).join(" "):r?`Failed to ${i}${s}: ${o||`API returned HTTP ${r}`}`:`Network error while trying to ${i}${s}: ${e?.message||"Unknown error"}`}async function pr(e,t){let i=ye();if(!i){Ae.error(`You are not logged in. Run \`${f.nameLower} login\` first.`);return}let n=ta.join(process.cwd(),f.configFileName);if(!dr.existsSync(n)){Ae.error(`No ${f.configFileName} found. Run \`${f.nameLower} init\` or \`${f.nameLower} link\` first.`);return}let r;try{r=JSON.parse(dr.readFileSync(n,"utf-8"))}catch{Ae.error(`Failed to parse ${f.configFileName}`);return}let{projectId:o}=r;if(!o){Ae.error(`${f.configFileName} is missing projectId.`);return}e==="set"?await ia(o,t,i):e==="list"?await na(o,i):Ae.error(`Unknown env action: ${e}. Use 'set' or 'list'.`)}async function ia(e,t,i){if(t.length===0){Ae.error(`Usage: ${f.nameLower} env set KEY=VALUE [KEY2=VALUE2 ...]`);return}let n=cr();n.start("Setting environment variables...");let r=0,o=0;for(let s of t){let[l,...a]=s.split("="),d=a.join("=");if(!l||d===void 0){Ae.warn(`Invalid format for argument: ${s}. Expected KEY=VALUE.`),o++;continue}try{let c={key:l.trim(),value:d,type:"env",environment:"global",visibility:"secret"},{data:u}=await C.post(`/projects/${e}/secrets`,c);u.status==="success"?r++:(Ae.error(`Failed to set ${l}: ${u.message}`),o++)}catch(c){Ae.error(ur(c,e,"set",l)),o++}}n.stop(`Set ${r} variable(s). ${o>0?`${o} failed.`:""}`)}async function na(e,t){let i=cr();i.start("Fetching environment variables...");try{let{data:n}=await C.get(`/projects/${e}/secrets`);if(n.status==="success"){i.stop("Fetched variables.");let r=n.secrets||[];r.length===0?Ae.info("No environment variables found for this project."):(Ae.info(Jt.bold("Environment Variables (Global & Scoped):")),r.forEach(o=>{let s=o.visibility==="plain"?o.value:"********";console.log(` ${Jt.cyan(o.key)} = ${s} ${Jt.gray(`[${o.environment}]`)}`)}))}else i.stop(Jt.red(`Failed to fetch variables: ${n.message}`))}catch(n){i.stop("Failed to fetch variables."),Ae.error(ur(n,e,"list"))}}import{spinner as ze,text as Pt,select as ki,isCancel as Ve,cancel as xi,log as mr}from"@clack/prompts";import te from"chalk";import X from"fs";import pe from"path";import{spawn as ra,spawnSync as Qe}from"child_process";import gr from"axios";import tt from"os";import Mi from"crypto";var oa=5e3,sa=12,aa={completed:"completed",draft:"draft",halted:"halted",inprogress:"inProgress","in-progress":"inProgress"},la=e=>e?.type==="google_service_account",Xt=e=>e?.bundleId||e?.packageName||e?.meta?.packageName||e?.meta?.bundleId;async function hr(e){let t=ze(),i=ye(),n=da(e);if(!n){process.exitCode=1;return}let r=e.projectId||n.projectId,o=e.profile||e.buildProfile||"production";if(!r){Z(`${f.configFileName} is missing projectId. Pass --project-id in runner mode.`),process.exitCode=1;return}n.projectId=r,se(te.dim(`Submit for project: ${n.name||r} | Profile: ${o}`));let s=e.platform;if(!s){let $=await ki({message:"Select platform to submit:",options:[{value:"ios",label:"iOS (App Store Connect / TestFlight)"},{value:"android",label:"Android (Google Play Console)"}]});if(Ve($)){xi("Operation cancelled");return}s=$}if(s=String(s).toLowerCase(),s!=="ios"&&s!=="android"){Z(`Platform ${s} is not supported. Use 'ios' or 'android'.`),process.exitCode=1;return}let l=s==="ios"&&!e.local&&e.sshHost?Pa(n,o,e):null;if(s==="ios"&&!e.local&&!l){await ca(n,o,e);return}let a=e.submitId,d=!!(e.local&&a),c=a||null,u=async($,U={})=>{c&&await ma(r,c,{status:$,...U})},p=s==="android"?Aa(n,o):void 0,m=s==="ios"?_a(n,o):void 0,I,L,w,B=!1;try{s==="android"&&(I=e.track||n.submit?.[o]?.android?.track||n.submit?.production?.android?.track||"internal",L=$a(n,o,e.releaseStatus),w=Da(n,o,e.rollout),B=Ra(n,o,e.changesNotSentForReview),va(L,w))}catch($){Z($.message),process.exitCode=1;return}if(s==="android"&&!d&&(c=await ua(n,r,s,o,e,{packageName:p,track:I,releaseStatus:L,rollout:w,changesNotSentForReview:B}),!c)){Z("Could not create submission tracking record. Submission was not started."),process.exitCode=1;return}await u("running",{platform:s,profile:o,packageName:p,track:I,releaseStatus:L,rollout:w,startTime:Date.now()});let k=null,j=null;try{j=await Oa(r,s,e,i?.token),k=j?.filePath||null}catch($){await u("failed",{error:`Failed to resolve submission artifact: ${$.message}`,endTime:Date.now()}),Z(`Failed to resolve submission artifact: ${$.message}`),process.exitCode=1;return}if(!k){await u("failed",{error:"No suitable artifact found for submission.",endTime:Date.now()}),process.exitCode=1;return}await u("running",{buildId:j?.buildId,artifactName:j?.artifactName,artifactSource:j?.source}),se(`Using artifact: ${te.green(pe.basename(k))} `),t.start("Fetching submission credentials from Dashboard...");let h;try{let U=(await C.get(`/credentials/${r}`)).data.credentials||[];if(s==="android"&&!p){t.stop("Package name missing"),Z("Could not resolve Android package name. Set android.package in mach.config.json/app.json."),await u("failed",{error:"Could not resolve Android package name.",endTime:Date.now()}),process.exitCode=1;return}let G=U.filter(la),x=s==="ios"?U.filter(H=>H.type==="asc_api_key"):Ia(G,p);if(x.length===0){if(t.stop("Credentials missing"),Z(s==="android"?`No Google Play service credential found for package ${p}.`:`No Service Credentials found for ${s}.`),s==="android"){let H=G.map(Xt).filter(Boolean).join(", ");H&&se(`Found Google Play service credential(s) for: ${H}`),se(`Use '${f.nameLower} credentials:service --platform android --package-name ${p}' or upload it under that package in the Dashboard.`)}else se(`Use '${f.nameLower} credentials:service --platform ${s}' or use the Dashboard to upload them.`);await u("failed",{error:`No submission credentials found for ${s}.`,endTime:Date.now()}),process.exitCode=1;return}if(h=ya(x,e.credentialId),!h&&s==="ios"&&m&&(h=Sa(x,m)),h||x.length===1)h=h||x[0],t.stop(`Using: ${h.name}`),s==="android"&&Xt(h)==="*"&&se(te.yellow(`Using legacy wildcard Google Play credential for ${p}. Upload a package-scoped credential when possible.`));else{if(t.stop("Multiple credentials found"),Ea()){let E=x.map(ne=>`${ne.name||"credential"} (${ne.credentialId||ne.id||"no-id"})`).join(", ");Z(`Multiple ${s==="ios"?"App Store Connect":"Google Play"} credentials found. Use --credential-id in CI. Available: ${E}`),await u("failed",{error:"Multiple submission credentials found; --credential-id is required in CI.",endTime:Date.now()}),process.exitCode=1;return}let H=await ki({message:`Choose a ${s==="ios"?"App Store Connect":"Google Play"} credential:`,options:x.map(E=>({value:E.credentialId,label:E.name,hint:`${E.keyId?`ID: ${E.keyId}`:""} ${E.issuerId?`(Issuer: ${E.issuerId.substring(0,8)}...)`:""}`}))});if(Ve(H)){xi("Submission cancelled"),await u("failed",{error:"Submission cancelled while selecting credential.",endTime:Date.now()}),process.exitCode=1;return}h=x.find(E=>E.credentialId===H),se(`Using selected: ${te.green(h.name)}`)}}catch($){t.stop("Failed to fetch credentials"),Z(`API Error: ${$.message} `),await u("failed",{error:`Failed to fetch credentials: ${$.message}`,endTime:Date.now()}),process.exitCode=1;return}let K=X.mkdtempSync(pe.join(tt.tmpdir(),`${f.nameLower}-submit-`)),_=h.keyId||h.meta?.keyId,S=h.issuerId||h.meta?.issuerId,O=h.type==="asc_api_key"?`AuthKey_${_}.p8`:"service-account.json",D=pe.join(K,O);t.start("Downloading secure key...");try{let $=await C.get(`/credentials/${h.credentialId}/download`,{params:{projectId:r}});if($.data.status!=="success"||!$.data.downloadUrl)throw new Error("Failed to get secure download URL");let U=await gr.get($.data.downloadUrl,{responseType:"arraybuffer"});X.writeFileSync(D,Buffer.from(U.data)),t.stop("Key downloaded to secure temp storage")}catch($){t.stop("Download failed"),Z(`Failed to download key: ${$.message}`);try{X.rmSync(K,{recursive:!0,force:!0})}catch{}await u("failed",{error:`Failed to download credential key: ${$.message}`,endTime:Date.now()}),process.exitCode=1;return}se(te.blue(`Initiating ${s==="ios"?"TestFlight":"Google Play"} submission...`));let T=!1,R;try{if(s==="ios"){if(!_){let U=await Pt({message:"Enter App Store Connect Key ID (e.g. 2X948D...):",validate:G=>G.length>0?void 0:"Key ID is required"});if(Ve(U)){await u("failed",{error:"Submission cancelled while entering ASC Key ID.",endTime:Date.now()}),process.exitCode=1;return}_=U}if(!S||S==="undefined"){let U=await Pt({message:"Enter App Store Connect Issuer ID (Found on ASC Keys page):",validate:G=>G.length>0?void 0:"Issuer ID is required"});if(Ve(U)){await u("failed",{error:"Submission cancelled while entering ASC Issuer ID.",endTime:Date.now()}),process.exitCode=1;return}S=U}se(`Using ASC Key ID: ${_}`),se(`Using ASC Issuer ID: ${S}`);let $=l?await Na(k,D,S,_,m,l):await Ca(k,D,S,_,m);Ui(`${s==="ios"?"App Store":"Google Play"} submission successful!`),T=!0}else R=await Ua(k,D,I||"internal",p,L||"completed",w,B,o),Ui("Google Play submission successful!"),T=!0}catch($){Z(`Submission failed: ${$.message}`),await u("failed",{error:$.message,endTime:Date.now()}),lt(e,{status:"failed",projectId:r,submitId:c,platform:s,profile:o,buildId:j?.buildId||e.buildId,artifactName:j?.artifactName,error:$.message,dashboardUrl:c?et(c,r):void 0}),process.exitCode=1}finally{T&&(await u("success",{endTime:Date.now(),versionCode:R?.versionCode,track:I,releaseStatus:L}),lt(e,{status:"success",projectId:r,submitId:c,platform:s,profile:o,buildId:j?.buildId||e.buildId,artifactName:j?.artifactName,versionCode:R?.versionCode,track:I,releaseStatus:L,dashboardUrl:c?et(c,r):void 0})),Ga(K),k&&k.includes(`${f.nameLower}-artifact-`)}}function da(e){let t=`./${f.configFileName}`;if(X.existsSync(t))try{return JSON.parse(X.readFileSync(t,"utf-8"))}catch(i){return Z(`Failed to read ${f.configFileName}: ${i.message}`),null}return e.projectId?{projectId:e.projectId}:(Z(`No ${f.configFileName} found. Run \`${f.nameLower} init\` or \`${f.nameLower} link\` first.`),null)}async function ca(e,t,i){let n=i.projectId||e.projectId;if(!n){Z(`${f.configFileName} is missing projectId.`),process.exitCode=1;return}let r=i.submitId||Mi.randomUUID(),o=!!i.latest||!i.buildId,s=pa({...i,latest:o,profile:t,projectId:n,submitId:r}),l={projectId:n,submitId:r,platform:"ios",profile:t,latest:o,buildId:i.buildId,credentialId:i.credentialId,status:"pending",source:"cli",submitArgs:process.argv.slice(3).join(" "),runnerArgs:s,runnerCommand:[f.nameLower,"submit",...s].map(ba).join(" "),appName:e.name,startTime:Date.now()},a=ze();a.start("Queuing iOS submit on macOS runner...");try{let d=await C.post("/submissions",l),c=d.data?.submission||d.data?.submit||{},u=d.data?.dashboardUrl||et(r,n);a.stop("iOS submit queued"),se(`Submission ID: ${te.cyan(r)}`),se(`Dashboard: ${te.blue.underline(u)}`),lt(i,{status:"pending",projectId:n,submitId:r,platform:"ios",profile:t,latest:o,buildId:i.buildId,dashboardUrl:u}),await fa(n,r,i)}catch(d){a.stop("Could not queue iOS submit"),Z(ha(d)),process.exitCode=1}}async function ua(e,t,i,n,r,o={}){let s=r.submitId||Mi.randomUUID(),l=!!r.latest||!r.buildId,a={projectId:t,submitId:s,platform:i,profile:n,latest:l,buildId:r.buildId,credentialId:r.credentialId,status:"running",source:"cli-direct",submitArgs:process.argv.slice(3).join(" "),appName:e.name,startTime:Date.now(),...o};try{let d=await C.post("/submissions",a),c=d.data?.submission||d.data?.submit||{},u=d.data?.dashboardUrl||c.dashboardUrl||et(s,t);return se(`Submission ID: ${te.cyan(s)}`),se(`Dashboard: ${te.blue.underline(u)}`),lt(r,{status:"running",projectId:t,submitId:s,platform:i,profile:n,latest:l,buildId:r.buildId,dashboardUrl:u}),s}catch(d){let c=d.response?.data?.message||d.response?.data?.error||d.message;return se(te.yellow(`Could not create submission tracking record: ${c}`)),null}}function pa(e){let t=["--local","--submit-id",e.submitId,"--project-id",e.projectId,"--platform","ios","--profile",e.profile||"production"];return e.buildId?t.push("--build-id",e.buildId):t.push("--latest"),e.credentialId&&t.push("--credential-id",e.credentialId),e.quiet&&t.push("--quiet"),e.jsonOutput&&t.push("--json-output",e.jsonOutput),t.filter(i=>i!=null&&i!=="")}async function fa(e,t,i){let n=ze(),r=0,o=0;for(i.quiet||n.start("Waiting for iOS submit runner...");;)try{let s=await C.get(`/submissions/${e}/${t}`),l=s.data?.submission||s.data?.submit||s.data,a=String(l?.status||"pending").toLowerCase();r=0;let d=Array.isArray(l?.logs)?l.logs:[];for(let c=o;c<d.length;c++){let u=d[c];u&&console.log(te.dim(String(u)))}if(o=d.length,["success","completed","succeeded"].includes(a)){i.quiet||n.stop("iOS submit completed"),Ui("App Store submission successful!"),lt(i,{status:"success",projectId:e,submitId:t,platform:"ios",profile:l?.profile||i.profile||"production",buildId:l?.buildId||i.buildId,artifactName:l?.artifactName,dashboardUrl:l?.dashboardUrl||et(t,e)});return}if(["failed","error","cancelled","canceled"].includes(a)){i.quiet||n.stop("iOS submit failed");let c=l?.error||l?.message||"Unknown iOS submit failure.";Z(c),lt(i,{status:"failed",projectId:e,submitId:t,platform:"ios",profile:l?.profile||i.profile||"production",buildId:l?.buildId||i.buildId,artifactName:l?.artifactName,error:c,dashboardUrl:l?.dashboardUrl||et(t,e)}),process.exitCode=1;return}i.quiet||n.message(`iOS submit ${a}...`),await Li(oa)}catch(s){if(r++,r>=sa){i.quiet||n.stop("Lost connection to iOS submit status"),Z(`Could not fetch iOS submit status after ${r} attempts: ${s.message}`),process.exitCode=1;return}await Li(Math.min(2e3*r,15e3))}}async function ma(e,t,i){let n;for(let r=1;r<=3;r++)try{await C.patch(`/submissions/${e}/${t}`,i);return}catch(o){if(n=o,r>=3||!ga(o))break;await Li(1e3*r)}mr.warn(te.dim(`Could not report submission status: ${n?.message||n}`))}function ga(e){let t=e.response?.status;return!t||t===408||t===409||t===425||t===429||t>=500}function ha(e){let t=e.response?.status,i=e.response?.data?.message||e.response?.data?.error;return t===404||t===405?["Managed iOS submit is not enabled on this Mach API yet.","Deploy the API/dashboard submission orchestration endpoint, then retry the same command.","Expected API: POST /submissions and GET/PATCH /submissions/:projectId/:submitId."].join(`
|
|
1116
|
-
`):i||e.message||String(e)}function et(e,t){if(!e)return je;let i=t?`?projectId=${encodeURIComponent(t)}`:"";return`${je}/submissions/${e}${i}`}function lt(e,t){if(!e.jsonOutput)return;let i=pe.resolve(e.jsonOutput),n={...t,url:t.url||t.dashboardUrl||et(t.submitId,t.projectId),updatedAt:new Date().toISOString()};try{let r=pe.dirname(i);r&&r!=="."&&X.mkdirSync(r,{recursive:!0}),X.writeFileSync(i,JSON.stringify(n,null,2))}catch(r){mr.warn(te.yellow(`Could not write submission metadata JSON: ${r.message}`))}}function ya(e,t){return t&&e.find(i=>i.credentialId===t||i.id===t||i.keyId===t||i.meta?.keyId===t)||null}function Sa(e,t){let i=e.filter(n=>[n.bundleId,n.bundleIdentifier,n.appIdentifier,n.meta?.bundleId,n.meta?.bundleIdentifier,n.meta?.appIdentifier].filter(Boolean).map(String).includes(t));return i.length===1?i[0]:null}function Ea(){return process.env.CI==="true"||process.env.CI==="1"||!process.stdin.isTTY}function Li(e){return new Promise(t=>setTimeout(t,e))}function ba(e){return/^[a-zA-Z0-9_./:=@-]+$/.test(e)?e:`'${e.replace(/'/g,"'\\''")}'`}function Aa(e,t){if(e.submit?.[t]?.android?.package)return e.submit[t].android.package;let i=Yi(e,t);if(i)return i;let n=pe.join(process.cwd(),"app.json");if(X.existsSync(n))try{return JSON.parse(X.readFileSync(n,"utf-8")).expo?.android?.package}catch{}let r=pe.join(process.cwd(),"app.config.json");if(X.existsSync(r))try{let o=JSON.parse(X.readFileSync(r,"utf-8"));return o.expo?.android?.package||o.android?.package}catch{}}function Ia(e,t){let i=e.filter(o=>Xt(o)===t);if(i.length>0)return i;let n=e.filter(o=>{let s=Xt(o);return!s||s==="*"});return e.length>0&&e.length===n.length?n:[]}function _a(e,t){return e.submit?.[t]?.ios?.bundleIdentifier?e.submit[t].ios.bundleIdentifier:e.submit?.[t]?.ios?.bundleId?e.submit[t].ios.bundleId:Ji(e,t)}function Pa(e,t,i){let n=e.submit?.[t]?.ios||{},r=e.submit?.production?.ios||{},o=i.sshHost||n.sshHost||r.sshHost||process.env.MACH_IOS_SUBMIT_SSH_HOST;return o?{sshHost:o,sshUser:i.sshUser||n.sshUser||r.sshUser||process.env.MACH_IOS_SUBMIT_SSH_USER||process.env.USER||"ubuntu",sshKey:i.sshKey||n.sshKey||r.sshKey||process.env.MACH_IOS_SUBMIT_SSH_KEY}:null}function $a(e,t,i){let n=i||e.submit?.[t]?.android?.releaseStatus||e.submit?.production?.android?.releaseStatus||"completed";return wa(n)}function wa(e){let t=aa[String(e).trim().toLowerCase()];if(!t)throw new Error(`Invalid Android release status "${e}". Use completed, draft, halted, or inProgress.`);return t}function Da(e,t,i){let n=i??e.submit?.[t]?.android?.rollout??e.submit?.[t]?.android?.userFraction??e.submit?.[t]?.android?.rolloutFraction??e.submit?.production?.android?.rollout??e.submit?.production?.android?.userFraction??e.submit?.production?.android?.rolloutFraction;if(n==null||n==="")return;let r=Number(n);if(!Number.isFinite(r)||r<=0||r>=1)throw new Error(`Invalid Android rollout fraction "${n}". Use a number greater than 0 and less than 1, for example 0.1.`);return r}function Ra(e,t,i){let n=i??e.submit?.[t]?.android?.changesNotSentForReview??e.submit?.[t]?.android?.changes_not_sent_for_review??e.submit?.production?.android?.changesNotSentForReview??e.submit?.production?.android?.changes_not_sent_for_review??!1;return n===!0||n==="true"||n==="1"}function va(e,t){if(e==="inProgress"&&t===void 0)throw new Error("Google Play staged rollout requires --rollout <fraction> when --release-status inProgress is used.");if(e!=="inProgress"&&e!=="halted"&&t!==void 0)throw new Error("Android rollout fraction can only be used with --release-status inProgress or halted.")}async function Oa(e,t,i,n){let r=i.buildId?"id":i.latest?"latest":null;if(!r){let s=await ki({message:"Select artifact source:",options:[{value:"latest",label:`Latest Production Build (${f.name})`},{value:"id",label:`Input Build ID (${f.name})`},{value:"url",label:"Remote URL"},{value:"local",label:"Local File Path"}]});if(Ve(s))return xi("Operation cancelled"),null;r=s}if(r==="local"){let s=await Pt({message:"Enter path to artifact (.ipa/.aab):",validate:l=>{if(!X.existsSync(l))return"File not found";if(t==="ios"&&!l.endsWith(".ipa"))return"Must be an .ipa file";if(t==="android"&&!l.endsWith(".aab"))return"Must be an .aab file"}});return Ve(s)?null:{filePath:s,source:"local"}}let o=ze();if(r==="latest"){let s=i.profile||i.buildProfile;o.start(`Fetching latest${s?` ${s}`:""} build...`);try{let l=await C.get(`/builds/${e}`,{params:{limit:50}});if(l.data.status!=="success")throw new Error(l.data.message);let a=l.data.builds||[],d=s?.toLowerCase(),c=h=>h.platform?.toLowerCase()===t.toLowerCase()&&h.status?.toLowerCase()==="success",u=h=>d?[h.buildProfile,h.profile,h.profileName,h.buildType].filter(Boolean).some(K=>String(K).toLowerCase()===d):!0,p=a.filter(h=>c(h)&&u(h)),m=p.find(h=>h.buildType?.toLowerCase()==="store"||h.distribution?.toLowerCase()==="store")||p[0],I=a.some(h=>h.platform?.toLowerCase()===t.toLowerCase()&&h.status?.toLowerCase()==="success");if(!m)return o.stop("No suitable build found"),Z(s&&I?`No successful ${t} builds found for profile "${s}".`:"No successful builds found for this platform."),null;o.stop(`Found build: ${m.buildId}`);let L=m.artifacts||[];if(L.length===0||L.every(h=>!(h.url||h.downloadUrl)))try{let h=await C.get(`/builds/${e}/${m.buildId}/artifacts`);h.data.status==="success"&&h.data.artifacts?.length>0?(L=h.data.artifacts.map(K=>({...K,url:K.url||K.downloadUrl})),console.log(te.cyan(` [RECOVERY] Fetched ${L.length} artifact(s) with download URLs.`))):console.log(te.yellow(" [RECOVERY] /artifacts endpoint returned 0 artifacts."))}catch(h){console.log(te.red(` [RECOVERY] /artifacts fetch failed: ${h.message}`))}let B=t==="ios",k=L.find(h=>{let K=(h.type||"").toLowerCase(),_=(h.name||"").toLowerCase();if(console.log(te.dim(` - Checking: ${h.name} (Type: ${h.type}, HasLink: ${!!(h.url||h.downloadUrl)})`)),K)return K===(B?"ipa":"aab");let S=B?".ipa":".aab",O=(h.url||h.downloadUrl||"").toLowerCase();return _.endsWith(S)||O.includes(S)});if(!k||!(k.url||k.downloadUrl))return Z("Build found but artifact URL is missing."),null;let j=k.url||k.downloadUrl;return{filePath:await Ci(j,B?"ios":"android"),buildId:m.buildId,artifactName:k.name,source:"latest"}}catch(l){return o.stop("Fetch failed"),Z(`API Error: ${l.message}`),null}}if(r==="id"){let s=i.buildId||await Pt({message:"Enter Build ID:",validate:l=>l.length<5?"Invalid ID":void 0});if(Ve(s))return null;o.start("Fetching build...");try{let l=await C.get(`/build/${s}`);if(l.data.status!=="success")throw new Error(l.data.message);let a=l.data.build;if(!a)throw new Error("Build not found");let d=t==="ios",c=a.artifacts?.find(u=>{if(u.type)return u.type===(d?"ipa":"aab");let p=d?".ipa":".aab";return u.name&&u.name.endsWith(p)||u.url&&u.url.includes(p)});return!c||!c.url?(o.stop("Missing artifact"),Z("Artifact URL not found on build record."),null):(o.stop(`Found build: ${a.buildId}`),{filePath:await Ci(c.url,d?"ios":"android"),buildId:a.buildId||String(s),artifactName:c.name,source:"id"})}catch(l){return o.stop("Fetch failed"),Z(l.message),null}}if(r==="url"){let s=await Pt({message:"Enter Artifact URL:",validate:l=>l.startsWith("http")?void 0:"Must be a valid URL"});return Ve(s)?null:{filePath:await Ci(s,t),source:"url"}}return null}async function Ci(e,t,i=3){let n=ze();n.start("Downloading artifact...");let r=X.mkdtempSync(pe.join(tt.tmpdir(),`${f.nameLower}-artifact-`)),o=`app.${t==="ios"?"ipa":"aab"}`,s=pe.join(r,o);for(let l=1;l<=i;l++)try{l>1&&(n.message(`Downloading artifact (Retry ${l}/${i})...`),await new Promise(c=>setTimeout(c,2e3*l)));let a=X.createWriteStream(s),d=await gr({url:e,method:"GET",responseType:"stream",timeout:6e4});return await new Promise((c,u)=>{d.data.pipe(a);let p=!1;d.data.on("error",m=>{p||(p=!0,a.close(),u(m))}),a.on("finish",()=>{p||c()}),a.on("error",m=>{p||(p=!0,u(m))})}),n.stop("Download complete"),s}catch(a){if(l===i)throw n.stop("Download failed"),a}throw new Error("Download failed after retries")}async function Ca(e,t,i,n,r){let o=ze();if(r&&se(`Bundle ID: ${te.green(r)}`),!i||!n)throw Z(`Missing credentials: issuerId=${i}, keyId=${n}. Check your Dashboard.`),new Error("Missing ASC API Key Metadata (IssuerID or KeyID)");let s=yr(t,i,n),l=Ba();return o.start("Uploading to TestFlight (pilot)..."),new Promise((a,d)=>{let c=ra(l.command,["pilot","upload","--ipa",e,"--api_key_path",s,"--skip_submission","true","--skip_waiting_for_build_processing","true"],{stdio:"inherit",env:l.env});c.on("close",u=>{if(u!==0){o.stop("Pilot failed");try{X.unlinkSync(s)}catch{}d(new Error(`fastlane pilot failed with exit code ${u??"unknown"}.`))}else{o.stop("IPA uploaded to TestFlight");try{X.unlinkSync(s)}catch{}a({})}}),c.on("error",u=>{try{X.unlinkSync(s)}catch{}o.stop("Pilot execution error"),d(Ha(u))})})}async function Na(e,t,i,n,r,o){let s=ze();if(r&&se(`Bundle ID: ${te.green(r)}`),!i||!n)throw Z(`Missing credentials: issuerId=${i}, keyId=${n}. Check your Dashboard.`),new Error("Missing ASC API Key Metadata (IssuerID or KeyID)");let l=yr(t,i,n),a=`${o.sshUser}@${o.sshHost}`,d=Ta(o),c=ka(o),u="",p="";try{if(s.start(`Preparing remote iOS submit runner (${a})...`),u=xa("ssh",[...d,"mktemp -d /tmp/mach-submit.XXXXXX"]).trim(),!u)throw new Error("Remote runner did not return a temp directory.");s.stop(`Remote runner ready: ${a}`),s.start("Uploading IPA and App Store Connect key to remote runner..."),Ni("scp",[...c,e,`${a}:${u}/app.ipa`],"IPA upload to remote runner"),Ni("scp",[...c,l,`${a}:${u}/api_key.json`],"ASC key upload to remote runner"),p=pe.join(tt.tmpdir(),`${f.nameLower}-ios-submit-${Date.now()}.sh`),X.writeFileSync(p,La(u)),Ni("scp",[...c,p,`${a}:${u}/submit.sh`],"submit script upload to remote runner"),s.stop("Remote submit inputs uploaded"),s.start("Uploading to TestFlight on remote runner...");let m=`chmod +x ${$t(`${u}/submit.sh`)} && bash ${$t(`${u}/submit.sh`)}`,I=Qe("ssh",[...d,m],{stdio:"inherit"});if(I.error)throw Bi("ssh",I.error);if(I.status!==0)throw new Error(`Remote iOS submit failed with exit code ${I.status}.`);return s.stop("IPA uploaded to TestFlight"),{apiKeyJsonPath:null}}catch(m){throw s.stop("Remote iOS submit failed"),m}finally{try{X.unlinkSync(l)}catch{}if(p)try{X.unlinkSync(p)}catch{}if(u)try{Qe("ssh",[...d,`rm -rf ${$t(u)}`],{stdio:"ignore"})}catch{}}}function yr(e,t,i){let n=X.readFileSync(e,"utf8"),r;try{r=Mi.createPrivateKey(n).export({type:"pkcs8",format:"pem"})}catch{se("Key normalization failed, falling back to manual re-wrapping..."),r=`-----BEGIN PRIVATE KEY-----
|
|
1104
|
+
`)}`);x.length>0&&R.warn(N.dim(` Skipped ${x.length} stale or unusable credential(s).`))}if(e.platform==="ios"&&!e.simulator){let T=e.buildProfile||"production",D=Je(d,T)||{},$=ua(d,D),M=fa($),G=e.distribution==="store",x=$===void 0&&G,H=e.autoVersion||M&&G||x,E=e.autoVersion||M&&G;if(M&&!G&&R.info(N.dim(` Skipping App Store Connect buildNumber lookup for ${e.distribution||"non-store"} build. Pass --auto-version to force it.`)),H){let se=e.iosBundleIdentifier||d.ios?.bundleIdentifier||d.expo?.ios?.bundleIdentifier,W=pa(d,D,T),Ae=v.data.credentials||[],re=gr(Ae,se);if(!re&&(E||x)){let F=await C.get(`/credentials/${n}`);re=gr(F.data.credentials||[],se)}if(re){t.start("Resolving latest iOS buildNumber from App Store Connect...");try{let F=re.keyId||re.meta?.keyId,U=re.issuerId||re.meta?.issuerId;if(!F||!U)throw new Error("App Store Connect credential is missing keyId or issuerId.");let Y=await da(re,n),A=await Yn({keyId:F,issuerId:U,privateKey:Y,ascAppId:W,bundleId:se}),V=/^\d+$/.test(A.latestBuildNumber);V?(a.BUILD_NUMBER=A.latestBuildNumber,delete a.MACH_IOS_BUILD_NUMBER_LOCKED):(a.BUILD_NUMBER=A.nextBuildNumber,a.CURRENT_PROJECT_VERSION=A.nextBuildNumber,a.MACH_IOS_BUILD_NUMBER_LOCKED="1"),t.stop(V?`\u2713 Latest iOS buildNumber on App Store Connect: ${N.green(A.latestBuildNumber)} (Mach will assign >= ${A.nextBuildNumber})`:`\u2713 Resolved iOS buildNumber: ${N.green(A.nextBuildNumber)} (Latest on App Store Connect: ${A.latestBuildNumber})`)}catch(F){t.stop("iOS buildNumber lookup failed");let U=F.response?.data?.error?.message||F.message;if(E)throw new Error(`Auto-versioning failed: ${U}. Fix App Store Connect API key permissions or remove ios.buildNumber="auto".`);R.warn(N.yellow(`Could not check App Store Connect buildNumber: ${U}. Falling back to Mach counter.`))}}else if(E)throw new Error(`Auto-versioning failed: App Store Connect API key not found. Upload it with '${p.nameLower} credentials:service --platform ios'.`)}}if(e.platform==="android"){let T=e.buildProfile||"production",D=Je(d,T)||{},G=((D.android||{}).versionCode??D.androidVersionCode??d.android?.versionCode??d.expo?.android?.versionCode)==="auto",x=e.autoVersion||G&&e.distribution==="store";if(G&&!x&&R.info(N.dim(` Skipping Google Play versionCode lookup for ${e.distribution||"non-store"} build. Pass --auto-version to force it.`)),x){t.start("Resolving latest versionCode from Google Play...");try{let H=e.androidPackage||d.android?.package||d.expo?.android?.package||d.name,E=(v.data.credentials||[]).find(U=>U.type==="google_service_account"&&(!U.bundleId||U.bundleId===H));if(!E){let Y=((await C.get(`/credentials/${n}`)).data.credentials||[]).filter(A=>A.type==="google_service_account");if(E=Y.find(A=>A.type==="google_service_account"&&A.bundleId===H),!E&&Y.length>0){let A=Y.map(V=>V.bundleId).filter(Boolean).join(", ");throw new Error(`Google Service Account not found for package ${H}. Found service credential(s) for: ${A}.`)}}if(!E)throw new Error(`Google Service Account not found for package ${H}. Upload it under this package in Dashboard or run '${p.nameLower} credentials:service --platform android --package-name ${H}'.`);let se=await C.get(`/credentials/${E.credentialId}/download`,{params:{projectId:n,format:"raw"}});if(se.data.status!=="success"||!se.data.downloadUrl)throw new Error("Failed to get secure download URL for service account");let Ae=(await Rt.get(se.data.downloadUrl,{headers:{Connection:"close"}})).data,re=await jn(H,Ae);if(re==null)throw new Error("Could not retrieve any version information from Google Play.");let F=re+1;a.ANDROID_VERSION_CODE=F.toString(),t.stop(`\u2713 Resolved versionCode: ${N.green(F)} (Latest on Play Store: ${re})`)}catch(H){t.stop("Version resolution failed");let E=H.response?.data?.error?.message||H.message;throw new Error(`Auto-versioning failed: ${E}. Fix Google Play service account permissions or remove android.versionCode="auto".`)}}}if(e.platform==="ios"&&!e.simulator){let T=!!a.IOS_DIST_P12,D=!!a.IOS_PROVISIONING_PROFILE;if(!T||!D){let $=[...T?[]:["Distribution Certificate"],...D?[]:["Provisioning Profile"]].join(" and ");if(e.local&&e.buildId)throw new Error(`Missing iOS credentials: ${$}. Expected ${_} credentials for ${S||"the selected bundle ID"}. Run \`${p.nameLower} credentials --platform ios --profile ${m}\` and select ${S||"the correct bundle ID"}.`);R.error(N.red(`Missing iOS credentials: ${$}`)),e.quiet&&process.exit(1);let M=e.yes||await cr({message:"Would you like to generate these credentials now?",initialValue:!0});if(M&&!dr(M))return await $t({platform:"ios",profile:m}),e.quiet||R.info(N.green("\u2713 Credentials setup complete! Restarting build phase...")),oi(e);e.quiet||R.info(N.yellow(`Run \`${p.nameLower} credentials\` to set up signing credentials manually.`)),process.exit(1)}}if(e.platform==="android"&&!e.developmentClient&&(e.distribution==="internal"||e.distribution==="store")&&!(!!a.ANDROID_KEYSTORE_BASE64||!!a.ANDROID_KEYSTORE)){R.error(N.red("Missing Android credentials: Signing Keystore")),e.quiet&&process.exit(1);let D=e.yes||await cr({message:"Would you like to automatically create and upload an Android Keystore for this profile now?",initialValue:!0});if(D&&!dr(D))return await $t({platform:"android",profile:m}),e.quiet||R.info(N.green("\u2713 Android Keystore setup complete! Restarting build phase...")),oi(e);e.quiet||R.info(N.yellow(`Run \`${p.nameLower} credentials --platform android\` to set up a signing keystore manually.`)),process.exit(1)}}catch(_){(String(_.message||"").startsWith("Credential download failed")||String(_.message||"").startsWith("Credential setup failed")||String(_.message||"").startsWith("Missing iOS credentials")||String(_.message||"").startsWith("Auto-versioning failed"))&&(R.error(N.red(_.message)),process.exit(1)),e.platform==="ios"&&e.local&&e.buildId&&(R.error(N.red(`Failed to resolve iOS credentials: ${_.message}`)),process.exit(1)),R.warn(`Failed to resolve credentials: ${_.message}`)}}let k=!!(e.local&&e.buildId),j=!!(e.local||e.sshHost),h=!j&&!k;if(k){R.info(N.magenta("\u{1F3D7}\uFE0F Runner Mode: Executing isolated build task..."));let _=await Bi({...e,interactive:!1},i,a,n,{branch:u,version:f,summary:B,buildType:I});await K(_),process.exit(0)}async function K(_){let S=async O=>{if(n)try{await ii("Report failed build status",()=>C.patch(`/builds/${n}/${i}`,{status:"failed",error:O,endTime:Date.now()}),3)}catch(v){R.warn(N.yellow(`Could not report failed build status: ${v.message}`))}};if(n&&_.length>0){let O=Ki(),v=[];e.quiet||O.start("Uploading artifacts to Dashboard...");try{for(let T of _){let D=be.basename(T),$=oe.statSync(T).size,M=be.extname(D).toLowerCase(),G="application/octet-stream",x=await ii(`Create artifact upload URL for ${D}`,()=>C.post(`/builds/${n}/${i}/artifact-upload-url`,{fileName:D,fileType:G}));if(x.data.status!=="success")throw new Error(`Failed to get upload URL for ${D}`);await aa(T,x.data.uploadUrl,G),v.push({name:D,url:x.data.downloadUrl,size:$,type:M.substring(1)})}e.quiet||O.stop("Artifacts uploaded.")}catch(T){e.quiet||O.stop("Failed to upload artifacts.");let D=`Artifact upload failed: ${T.message}`;throw R.error(N.red(D)),await S(D),new Error(D)}if(n&&v.length>0)try{R.info(N.cyan(`
|
|
1105
|
+
\u{1F517} Download Links:`));for(let T of v)R.info(N.dim(` - ${T.name}: `)+N.blue.underline(T.url));await ii("Finalize build in dashboard",()=>C.patch(`/builds/${n}/${i}`,{status:"success",artifacts:v,endTime:Date.now()})),si(e,{status:"success",projectId:n,buildId:i,platform:e.platform,profile:m,branch:u,version:f,buildType:I,developmentClient:!!e.developmentClient,summary:B,artifacts:v}),R.success(N.green(`
|
|
1106
|
+
\u2713 Build completed and reported to dashboard.`)),e.maestro&&!k&&await br(n,i,e,m)}catch(T){let D=`Build artifact uploaded but dashboard finalization failed: ${T.message}`;throw R.error(N.red(`
|
|
1107
|
+
${D}`)),await S(D),new Error(D)}}else if(n){let O="Build completed but produced no uploadable artifacts.";throw R.error(N.red(O)),await S(O),new Error(O)}}if(j){if(R.info(N.cyan(`\u{1F680} Direct Build Mode: Executing on ${e.sshHost||"local"}...`)),n&&!o){let _=process.argv.slice(3).join(" ");await C.post("/builds",{projectId:n,buildId:i,platform:e.platform,status:"building",branch:u,version:f,summary:B,startTime:r,buildType:I,buildProfile:m,buildArgs:_,simulator:!!e.simulator,developmentClient:!!e.developmentClient})}if(e.sshHost&&e.platform==="ios"){let _=await Fn(e,i,a,n)}else{let _=await Bi({...e,interactive:!!e.local},i,a,n,{branch:u,version:f,summary:B,buildType:I});await K(_)}return}if(h&&(R.info(N.blue("\u{1F6F0}\uFE0F Cloud Initiator Mode: Preparing orchestration...")),!e.dryRun)){e.quiet||t.start("Zipping and uploading local source...");let _=await C.post("/builds/source-upload-url",{projectId:n,buildId:i});if(_.data.status!=="success")throw t.stop("Failed to get upload URL."),new Error("Failed to get source upload URL from API");let S=new pr,O=oe.readdirSync("."),v=["node_modules",".git","dist","build","builds",".gradle",".idea","android/build","ios/build","ios/Pods",`.${p.nameLower}_cli`];for(let $ of O){if(v.includes($))continue;oe.statSync($).isDirectory()?S.addLocalFolder($,$):S.addLocalFile($)}let T=S.toBuffer();e.quiet||t.message(`Uploading source (${(T.length/1024/1024).toFixed(1)} MB)...`);let D=!1;for(let $=1;$<=3;$++)try{await Rt.put(_.data.uploadUrl,T,{headers:{"Content-Type":"application/zip"},maxBodyLength:1/0,maxContentLength:1/0,timeout:12e4}),D=!0;break}catch(M){if($<3)t.message(`Upload attempt ${$} failed (${M.code||M.message}), retrying...`),await new Promise(G=>setTimeout(G,2e3*$));else throw M}if(e.quiet||t.stop("Source uploaded"),n){let $=process.argv.slice(3).join(" ");await C.post("/builds",{projectId:n,buildId:i,platform:e.platform,status:"pending",branch:u,version:f,summary:B,startTime:r,buildType:I,buildProfile:m,buildArgs:$,simulator:!!e.simulator,developmentClient:!!e.developmentClient}),R.info(N.green("\u2713 Cloud build registered."))}e.platform==="android"&&await Mn(e,i,a,n,e.preBuild),e.quiet||R.info(N.cyan("\u{1F4E1} Connecting to build stream...")),await Aa(n,i,e),e.maestro&&await br(n,i,e,m);return}}catch(l){let a=l.message||"Build failed";l.response?.data?.message?a=l.response.data.message:l.message.includes("status code 402")?a="Insufficient wallet balance. Please add credits in the Dashboard.":l.message.includes("status code 403")&&(a="Monthly build quota exceeded. Upgrade your plan in the Dashboard."),n&&!e.local&&await s(a),R.error(N.red(`\u2717 Build failed: ${a}`)),process.exit(1)}};async function br(e,t,i,n){R.info(N.cyan(`
|
|
1108
|
+
\u{1F3BC} Queuing managed Maestro test...`)),await Hi({projectId:e,buildId:t,platform:i.platform,profile:n,maestroFlows:i.maestroFlows,maestroDevice:i.maestroDevice,maestroRetries:i.maestroRetries,maestroRecord:i.maestroRecord,quiet:i.quiet})}function Ar(e){return`${Ye}/build/${e}`}function si(e,t){if(!e.jsonOutput)return;let i=be.resolve(e.jsonOutput),n={...t,url:t.url||Ar(t.buildId),dashboardUrl:t.dashboardUrl||Ar(t.buildId),updatedAt:new Date().toISOString()};try{let r=be.dirname(i);r&&r!=="."&&oe.mkdirSync(r,{recursive:!0}),oe.writeFileSync(i,JSON.stringify(n,null,2))}catch(r){R.warn(N.yellow(`Could not write build metadata JSON: ${r.message}`))}}async function Aa(e,t,i){let n=Ki(),r="pending",o=0,s=0;for(i.quiet||n.start("Connecting to build stream...");;){try{let a=(await C.get(`/builds/${e}/${t}`)).data.build;if(a){if(r=a.status,r==="building")i.quiet||n.message("Build in progress...");else if(r==="failed")i.quiet||n.stop("Build failed."),si(i,{status:"failed",projectId:e,buildId:t,platform:i.platform,profile:a.buildProfile,buildType:a.buildType,developmentClient:!!a.developmentClient,version:a.version,summary:a.summary,error:a.error||"Unknown error",artifacts:a.artifacts||[]}),R.error(N.red(`
|
|
1109
|
+
\u2717 Build failed: ${a.error||"Unknown error"}`)),process.exit(1);else if(r==="completed"||r==="success"){i.quiet||n.stop("Build successful!"),si(i,{status:r,projectId:e,buildId:t,platform:i.platform,profile:a.buildProfile,buildType:a.buildType,developmentClient:!!a.developmentClient,version:a.version,summary:a.summary,artifacts:a.artifacts||[]}),R.success(N.green(`
|
|
1110
|
+
\u2713 Build completed successfully!`));try{i.quiet||(R.info(N.magenta(`
|
|
1111
|
+
\u{1F4F1} Installation Hub:`)),R.info(N.dim(" - View & Install Build: ")+N.white.underline(`${Ye}/build/${t}`)))}catch{}return}else if(r!=="pending"){i.quiet||n.stop(`Build status: ${r}`);return}}try{let d=(await C.get(`/builds/${e}/${t}/logs`)).data;if(d&&typeof d=="string"&&!i.quiet){let u=d.split(`
|
|
1112
|
+
`);if(u.length>o){for(let f=o;f<u.length;f++)u[f].trim()&&console.log(N.dim(` ${u[f]}`));o=u.length}}}catch{}s=0}catch{s++,s>10&&(n.stop("Connection lost."),R.error(N.red(`
|
|
1113
|
+
\u2717 Lost connection to Dashboard API.`)),process.exit(1))}await new Promise(l=>setTimeout(l,3e3))}}import*as ui from"http";import*as Cr from"net";import{execFile as Ia,execFileSync as pi,execSync as at,spawn as vr}from"child_process";import ae from"chalk";import{log as z}from"@clack/prompts";import _a from"axios";import ce from"fs";import Ce from"os";import q from"path";var ze=7070,Nt=`http://127.0.0.1:${ze}`,yt="com.radhya.mach.agent",ht="Mach Agent",St=`${yt}.service`,wa=5e3,$a=3e3,ai=null,li=null,Ne=()=>q.join(Ce.homedir(),p.configDir),Nr=()=>q.join(Ce.homedir(),"Library","LaunchAgents"),ci=()=>q.join(Nr(),`${yt}.plist`),Tr=()=>q.join(Ce.homedir(),".config","systemd","user"),zi=()=>q.join(Tr(),St),Wi=()=>q.join(Ne(),"agent.cmd");function Yi(){return`gui/${process.getuid?.()||Number(at("id -u").toString().trim())}`}function kr(e){return e.replace(/&/g,"&").replace(/</g,"<").replace(/>/g,">").replace(/"/g,""").replace(/'/g,"'")}function Ct(e){return`<string>${kr(e)}</string>`}function Ji(){let e=process.argv[1]?ce.realpathSync(process.argv[1]):"";if(!e||!ce.existsSync(e))throw new Error("Could not resolve the current Mach CLI entrypoint.");return[process.execPath,e,"agent","run"]}function Xi(){let e=xr(),t=process.platform==="win32"?[process.env.SystemRoot?q.join(process.env.SystemRoot,"System32"):void 0,process.env.SystemRoot]:["/opt/homebrew/bin","/usr/local/bin","/usr/bin","/bin","/usr/sbin","/sbin"],i={HOME:Ce.homedir(),PATH:[process.env.PATH,...e.flatMap(n=>[q.join(n,"platform-tools"),q.join(n,"emulator"),q.join(n,"cmdline-tools","latest","bin"),q.join(n,"tools","bin")]),...t].filter(Boolean).join(q.delimiter)};for(let n of["ANDROID_HOME","ANDROID_SDK_ROOT","JAVA_HOME","SHELL"])process.env[n]&&(i[n]=process.env[n]);return i}function xr(){let e=[process.env.ANDROID_HOME,process.env.ANDROID_SDK_ROOT];if(process.platform==="darwin")e.push(q.join(Ce.homedir(),"Library","Android","sdk"));else if(process.platform==="linux")e.push(q.join(Ce.homedir(),"Android","Sdk"),q.join(Ce.homedir(),"Android","sdk"),"/opt/android-sdk","/usr/lib/android-sdk");else if(process.platform==="win32"){let t=process.env.LOCALAPPDATA,i=process.env.USERPROFILE||Ce.homedir();e.push(t?q.join(t,"Android","Sdk"):void 0,q.join(i,"AppData","Local","Android","Sdk"))}return Array.from(new Set(e.filter(t=>!!t)))}function Pa(e){return process.platform==="win32"&&!e.toLowerCase().endsWith(".exe")?`${e}.exe`:e}function Lr(e,t){let i=Pa(e);for(let n of xr()){let r=q.join(n,t,i);if(ce.existsSync(r))return r}return i}function Mr(){return Lr("adb","platform-tools")}function Ur(){return Lr("emulator","emulator")}function Vi(e){return`"${e.replace(/\\/g,"\\\\").replace(/"/g,'\\"').replace(/%/g,"%%")}"`}function va(){if(process.platform!=="linux")throw new Error("Linux service install requires Linux.");ce.mkdirSync(Ne(),{recursive:!0}),ce.mkdirSync(Tr(),{recursive:!0});let e=Ji(),t=Xi(),i=Object.entries(t).map(([r,o])=>`Environment=${Vi(`${r}=${o}`)}`).join(`
|
|
1114
|
+
`),n=`[Unit]
|
|
1115
|
+
Description=Mach local device agent
|
|
1116
|
+
After=default.target
|
|
1117
|
+
|
|
1118
|
+
[Service]
|
|
1119
|
+
Type=simple
|
|
1120
|
+
ExecStart=${e.map(Vi).join(" ")}
|
|
1121
|
+
WorkingDirectory=${Vi(Ce.homedir())}
|
|
1122
|
+
${i}
|
|
1123
|
+
Restart=on-failure
|
|
1124
|
+
RestartSec=5
|
|
1125
|
+
StandardOutput=append:%h/${p.configDir}/agent.log
|
|
1126
|
+
StandardError=append:%h/${p.configDir}/agent.error.log
|
|
1127
|
+
|
|
1128
|
+
[Install]
|
|
1129
|
+
WantedBy=default.target
|
|
1130
|
+
`;return ce.writeFileSync(zi(),n),zi()}function Ze(e,t={}){try{return pi("systemctl",["--user",...e],{stdio:t.ignoreError?"ignore":"pipe"}),!0}catch(i){if(t.ignoreError)return!1;throw i}}function Da(){if(process.platform!=="win32")throw new Error("Windows agent script requires Windows.");ce.mkdirSync(Ne(),{recursive:!0});let e=Xi(),[t,i,...n]=Ji(),r=q.join(Ne(),"agent.log"),o=q.join(Ne(),"agent.error.log"),s=Object.entries(e).map(([c,d])=>`set "${c}=${d}"`).join(`\r
|
|
1131
|
+
`),l=n.map(c=>`"${c.replace(/"/g,'\\"')}"`).join(" "),a=`@echo off\r
|
|
1132
|
+
${s}\r
|
|
1133
|
+
cd /d "${Ce.homedir()}"\r
|
|
1134
|
+
"${t}" "${i}" ${l} >> "${r}" 2>> "${o}"\r
|
|
1135
|
+
`;return ce.writeFileSync(Wi(),a),Wi()}function Tt(e,t={}){try{return pi("schtasks.exe",e,{stdio:t.ignoreError?"ignore":"pipe"}),!0}catch(i){if(t.ignoreError)return!1;throw i}}function Ra(){if(process.platform!=="darwin")throw new Error("Background agent install currently supports macOS only.");ce.mkdirSync(Ne(),{recursive:!0}),ce.mkdirSync(Nr(),{recursive:!0});let e=Ji(),t=Xi(),i=q.join(Ne(),"agent.log"),n=q.join(Ne(),"agent.error.log"),r=Object.entries(t).map(([l,a])=>` <key>${kr(l)}</key>
|
|
1136
|
+
${Ct(a)}`).join(`
|
|
1137
|
+
`),o=e.map(l=>` ${Ct(l)}`).join(`
|
|
1138
|
+
`),s=`<?xml version="1.0" encoding="UTF-8"?>
|
|
1139
|
+
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
|
|
1140
|
+
<plist version="1.0">
|
|
1141
|
+
<dict>
|
|
1142
|
+
<key>Label</key>
|
|
1143
|
+
${Ct(yt)}
|
|
1144
|
+
<key>ProgramArguments</key>
|
|
1145
|
+
<array>
|
|
1146
|
+
${o}
|
|
1147
|
+
</array>
|
|
1148
|
+
<key>EnvironmentVariables</key>
|
|
1149
|
+
<dict>
|
|
1150
|
+
${r}
|
|
1151
|
+
</dict>
|
|
1152
|
+
<key>RunAtLoad</key>
|
|
1153
|
+
<true/>
|
|
1154
|
+
<key>StandardOutPath</key>
|
|
1155
|
+
${Ct(i)}
|
|
1156
|
+
<key>StandardErrorPath</key>
|
|
1157
|
+
${Ct(n)}
|
|
1158
|
+
</dict>
|
|
1159
|
+
</plist>
|
|
1160
|
+
`;return ce.writeFileSync(ci(),s),ci()}function qe(e,t={}){try{return pi("launchctl",e,{stdio:t.ignoreError?"ignore":"pipe"}),!0}catch(i){if(t.ignoreError)return!1;throw i}}function Oa(e){return new Promise(t=>setTimeout(t,e))}function di(e,t,i=wa){return new Promise((n,r)=>{Ia(e,t,{timeout:i,maxBuffer:10*1024*1024,windowsHide:!0},(o,s,l)=>{if(o){let a=l?.toString().trim();r(new Error(a||o.message));return}n(s?.toString()||"")})})}async function Br(){if(typeof fetch=="function"){let e=new AbortController,t=setTimeout(()=>e.abort(),3e3);try{return(await fetch(`${Nt}/health`,{signal:e.signal})).ok}catch{return!1}finally{clearTimeout(t)}}return new Promise(e=>{let t=!1,i=r=>{t||(t=!0,e(r))},n=ui.get(`${Nt}/health`,r=>{r.resume(),i(r.statusCode===200)});n.setTimeout(3e3,()=>{n.destroy(),i(!1)}),n.on("error",()=>i(!1))})}async function Ca(e=8e3){let t=Date.now()+e;for(;Date.now()<t;){if(await Br())return!0;await Oa(250)}return!1}async function Fr(){return new Promise(e=>{let t=!1,i=Cr.createConnection({host:"127.0.0.1",port:ze}),n=r=>{t||(t=!0,i.destroy(),e(r))};i.setTimeout(1e3),i.once("connect",()=>n(!0)),i.once("timeout",()=>n(!1)),i.once("error",()=>n(!1))})}async function qi(){if(await Ca()){z.success(ae.green("Mach agent installed and started."));return}if(await Fr()){z.warn(`Mach agent service is installed, but port ${ze} is held by a process that is not answering /health.`),z.info(ae.dim(`Run \`${p.nameLower} agent stop\`, close any foreground \`${p.nameLower} agent\` terminal, then run \`${p.nameLower} agent install\` again.`));return}z.warn(`Mach agent service is installed, but it did not start listening on ${Nt}.`)}async function Na(){let e=Ra(),t=Yi();qe(["bootout",t,e],{ignoreError:!0}),qe(["bootstrap",t,e],{ignoreError:!0})||qe(["load","-w",e]),qe(["enable",`${t}/${yt}`],{ignoreError:!0}),qe(["kickstart","-k",`${t}/${yt}`],{ignoreError:!0}),await qi(),z.info(ae.dim(`It will start automatically when you log in. Plist: ${e}`)),z.info(ae.dim(`Logs: ${q.join(Ne(),"agent.log")}`))}async function Hr(){let e=ci(),t=Yi();qe(["bootout",t,e],{ignoreError:!0})||qe(["unload","-w",e],{ignoreError:!0})?z.success(ae.green("Mach agent service stopped.")):z.warn("Mach agent service was not loaded.")}async function Ta(){await Hr();let e=ci();ce.existsSync(e)&&ce.unlinkSync(e),z.success(ae.green("Mach agent service uninstalled."))}async function ka(){let e=va();Ze(["daemon-reload"]),Ze(["enable","--now",St]),await qi(),z.info(ae.dim(`It will start automatically when you log in. Service: ${e}`)),z.info(ae.dim(`Logs: ${q.join(Ne(),"agent.log")}`))}async function xa(){Ze(["stop",St],{ignoreError:!0})?z.success(ae.green("Mach agent service stopped.")):z.warn("Mach agent service was not running.")}async function La(){Ze(["disable","--now",St],{ignoreError:!0}),Ze(["daemon-reload"],{ignoreError:!0});let e=zi();ce.existsSync(e)&&ce.unlinkSync(e),Ze(["daemon-reload"],{ignoreError:!0}),z.success(ae.green("Mach agent service uninstalled."))}async function Ma(){let e=Da();Tt(["/Create","/TN",ht,"/SC","ONLOGON","/TR",`"${e}"`,"/RL","LIMITED","/F"]),Tt(["/Run","/TN",ht],{ignoreError:!0}),await qi(),z.info(ae.dim(`It will start automatically when you log in. Task: ${ht}`)),z.info(ae.dim(`Logs: ${q.join(Ne(),"agent.log")}`))}async function jr(){Tt(["/End","/TN",ht],{ignoreError:!0})?z.success(ae.green("Mach agent task stopped.")):z.warn("Mach agent task was not running.")}async function Ua(){await jr(),Tt(["/Delete","/TN",ht,"/F"],{ignoreError:!0});let e=Wi();ce.existsSync(e)&&ce.unlinkSync(e),z.success(ae.green("Mach agent task uninstalled."))}async function Dr(){if(process.platform==="darwin")return Na();if(process.platform==="linux")return ka();if(process.platform==="win32")return Ma();throw new Error(`Background agent install is not supported on ${process.platform}.`)}async function Rr(){if(process.platform==="darwin")return Hr();if(process.platform==="linux")return xa();if(process.platform==="win32")return jr();z.warn(`Background agent service control is not supported on ${process.platform}.`)}async function Ba(){if(process.platform==="darwin")return Ta();if(process.platform==="linux")return La();if(process.platform==="win32")return Ua();z.warn(`Background agent uninstall is not supported on ${process.platform}.`)}async function Fa(){let e=await Br(),t=e?!0:await Fr();if(e?z.success(ae.green(`Mach agent is online at ${Nt}`)):t?z.warn(`Mach agent port is open, but /health did not respond. Run \`${p.nameLower} agent restart\` if the dashboard still shows offline.`):z.warn(`Mach agent is not responding at ${Nt}`),process.platform==="darwin"){let i=qe(["print",`${Yi()}/${yt}`],{ignoreError:!0});z.info(ae.dim(`Login service: ${i?"installed/loaded":"not loaded"}`))}else if(process.platform==="linux"){let i=Ze(["is-enabled",St],{ignoreError:!0}),n=Ze(["is-active",St],{ignoreError:!0});z.info(ae.dim(`Login service: ${i?"enabled":"not enabled"} / ${n?"active":"inactive"}`))}else if(process.platform==="win32"){let i=Tt(["/Query","/TN",ht],{ignoreError:!0});z.info(ae.dim(`Login task: ${i?"installed":"not installed"}`))}}async function Ha(){let e=[];try{(await di(Mr(),["devices","-l"])).split(`
|
|
1161
|
+
`).forEach(i=>{if(i.includes("List of devices")||!i.trim())return;let n=i.split(/\s+/);if(n.length<2||n[1]!=="device")return;let r=n[0],o=i.match(/model:([^\s]+)/);e.push({id:r,platform:"android",type:r.startsWith("emulator-")?"emulator":"physical",name:o?o[1].replace(/_/g," "):r,status:"online",details:i.trim()})})}catch{}try{let i=(await di(Ur(),["-list-avds"])).split(`
|
|
1162
|
+
`).filter(r=>!!r.trim()),n=e.some(r=>r.platform==="android"&&r.id.startsWith("emulator-"));i.forEach(r=>{n||e.push({id:r,platform:"android",type:"emulator",name:r.replace(/_/g," "),status:"offline",details:`Android Virtual Device: ${r}`})})}catch{}return e}async function ja(){if(process.platform!=="darwin")return[];try{let e=await di("/usr/bin/xcrun",["simctl","list","devices","--json"]),t=JSON.parse(e),i=[];return Object.entries(t.devices||{}).forEach(([n,r])=>{r.forEach(o=>{o.isAvailable&&i.push({id:o.udid,platform:"ios",type:"simulator",name:o.name,status:o.state?.toLowerCase()==="booted"?"online":"offline",runtime:n,details:`${o.name} (${n})`})})}),i}catch{return[]}}async function Ga(){if(process.platform!=="darwin")return[];try{let e=await di("/usr/bin/xcrun",["devicectl","list","devices","--json-output","-"]);return(JSON.parse(e).result?.devices||[]).filter(i=>{let n=i.connectionProperties?.transportType;return n==="wired"||n==="localNetwork"}).map(i=>{let n=i.connectionProperties?.transportType,r=i.deviceProperties?.name||"iPhone";return{id:i.identifier,platform:"ios",type:"physical",name:r,status:"online",details:`${r} (${i.model?.name||i.hardwareModel||""}) - ${n}`}})}catch{return[]}}async function Ka(){let[e,t,i]=await Promise.all([Ha(),ja(),Ga()]);return[...e,...t,...i]}async function Va(){let e=Date.now();return ai&&e-ai.updatedAt<$a?ai.targets:(li||(li=Ka().then(t=>(ai={targets:t,updatedAt:Date.now()},t)).finally(()=>{li=null})),li)}async function Or(e){let t=[];for await(let i of e)t.push(Buffer.isBuffer(i)?i:Buffer.from(i));return t.length===0?{}:JSON.parse(Buffer.concat(t).toString("utf-8"))}async function za(e,t){let i=await _a({method:"GET",url:e,responseType:"stream",timeout:12e4}),n=ce.createWriteStream(t);i.data.pipe(n),await new Promise((r,o)=>{n.on("finish",r),n.on("error",o)})}async function Wa(e,t,i){let n=i||(t.toLowerCase().includes(".apk")?"android":"ios"),r=t.toLowerCase().includes(".ipa"),o=ce.mkdtempSync(q.join(Ce.tmpdir(),`${ze}-install-`)),s=q.join(o,n==="android"?"install.apk":r?"install.ipa":"install.zip");try{if(await za(t,s),n==="android"){pi(Mr(),["-s",e,"install","-r",s],{stdio:"pipe"});return}if(process.platform!=="darwin")throw new Error("iOS local install requires macOS.");at(`unzip -o ${JSON.stringify(s)} -d ${JSON.stringify(o)}`,{stdio:"pipe"});let l="";try{l=at(`find ${JSON.stringify(q.join(o,"Payload"))} -maxdepth 1 -name "*.app" 2>/dev/null | head -n 1`,{stdio:"pipe"}).toString().trim()}catch{}if(l||(l=at(`find ${JSON.stringify(o)} -name "*.app" -type d | head -n 1`,{stdio:"pipe"}).toString().trim()),!l)throw new Error(`No .app bundle found inside the ${r?"IPA":"archive"}.`);try{at(`/usr/bin/xcrun devicectl device install app --device ${JSON.stringify(e)} ${JSON.stringify(l)}`,{stdio:"pipe"})}catch(a){try{at(`/usr/bin/xcrun simctl install ${JSON.stringify(e)} ${JSON.stringify(l)}`,{stdio:"pipe"})}catch{throw new Error(a.stderr?.toString().trim()||a.message||"iOS install failed.")}}}finally{ce.rmSync(o,{recursive:!0,force:!0})}}function Ya(e,t){if(!e)throw new Error("Device id is required.");if(t==="ios"){if(process.platform!=="darwin")throw new Error("iOS Simulator launch requires macOS.");return at(`/usr/bin/xcrun simctl boot ${JSON.stringify(e)}`,{stdio:"pipe"}),vr("open",["-a","Simulator"],{detached:!0,stdio:"ignore"}).unref(),"Simulator booting..."}if(t==="android")return vr(Ur(),["-avd",e],{detached:!0,stdio:"ignore",windowsHide:!0}).unref(),"Emulator booting in background...";throw new Error("Invalid platform.")}async function Ja(){process.platform!=="darwin"&&z.warn("Running on non-macOS \u2014 iOS discovery unavailable, Android only.");let e=ui.createServer((n,r)=>{if(r.setHeader("Access-Control-Allow-Origin","*"),r.setHeader("Access-Control-Allow-Methods","GET, POST, OPTIONS"),r.setHeader("Access-Control-Allow-Headers","Content-Type, Authorization"),n.method==="OPTIONS"){r.writeHead(204),r.end();return}let o=new URL(n.url||"/",`http://localhost:${ze}`);if(n.method==="GET"&&o.pathname==="/local/devices"){Va().then(s=>{r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",targets:s}))}).catch(s=>{r.writeHead(500,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:s.message}))});return}if(n.method==="GET"&&o.pathname==="/health"){r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",service:"mach-agent",port:ze,platform:process.platform}));return}if(n.method==="POST"&&o.pathname==="/install-local"){t(n,r);return}if(n.method==="POST"&&o.pathname==="/local/boot"){i(n,r);return}r.writeHead(404),r.end()}),t=async(n,r)=>{try{let{deviceId:o,artifactUrl:s,platform:l}=await Or(n);if(!o||!s){r.writeHead(400,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:"deviceId and artifactUrl are required"}));return}await Wa(o,s,l),r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",message:`Installed on ${o}`}))}catch(o){r.writeHead(500,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:o.message||"Local install failed"}))}},i=async(n,r)=>{try{let{id:o,platform:s}=await Or(n),l=Ya(o,s);r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",message:l}))}catch(o){r.writeHead(500,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:o.message||"Local device launch failed"}))}};e.listen(ze,"127.0.0.1",()=>{z.success(ae.green(`Local device agent running on http://localhost:${ze}`)),z.info(ae.dim("Keep this running while using the Install Hub on the dashboard.")),z.info(ae.dim("Press Ctrl+C to stop."))}),e.on("error",n=>{n.code==="EADDRINUSE"?z.error(`Port ${ze} is already in use \u2014 agent may already be running.`):z.error(`Agent error: ${n.message}`),process.exit(1)}),await new Promise(()=>{})}async function Gr(e="start"){let t=String(e||"start").toLowerCase();if(t==="start"||t==="run"){await Ja();return}if(t==="install"){await Dr();return}if(t==="status"){await Fa();return}if(t==="stop"){await Rr();return}if(t==="uninstall"){await Ba();return}if(t==="restart"){await Rr(),await Dr();return}z.error(`Unknown agent action: ${e}`),z.info(ae.dim(`Use: ${p.nameLower} agent start | install | status | restart | stop | uninstall`)),process.exit(1)}import{createRequire as cd}from"module";import{text as qa,password as Za,spinner as Qa,isCancel as zr}from"@clack/prompts";import tn from"chalk";import kt from"fs";import Kr from"path";import Xa from"os";var Zi=Kr.join(Xa.homedir(),p.configDir),Qi=Kr.join(Zi,"config.json");function en(){if(!kt.existsSync(Qi))return{};try{return JSON.parse(kt.readFileSync(Qi,"utf-8"))}catch{return{}}}function Vr(e){kt.existsSync(Zi)||kt.mkdirSync(Zi,{recursive:!0});let i={...en(),...e};kt.writeFileSync(Qi,JSON.stringify(i,null,2))}async function Wr(){let e=en(),t=await qa({message:"Enter your email:",placeholder:"user@example.com",initialValue:e.lastLoginEmail,validate(r){if(r.length===0)return"Email is required!"}});if(zr(t))return;let i=await Za({message:"Enter your password:",validate(r){if(r.length===0)return"Password is required!"}});if(zr(i))return;let n=Qa();n.start("Authenticating...");try{let o=await(await fetch(`${Xt}/login`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({username:t,password:i})})).json();o.status==="success"&&o.user.token?(En({id:o.user.id,email:t,token:o.user.token,refreshToken:o.user.refreshToken}),Vr({lastLoginEmail:t}),n.stop(tn.green("Login successful!"))):n.stop(tn.red("Login failed: "+(o.message||"Unknown error")))}catch(r){n.stop(tn.red("Network error: "+r.message))}}import{log as fi,outro as el}from"@clack/prompts";import xt from"chalk";async function Yr(){let e=bn(),t=`${p.envPrefix}TOKEN`;e?fi.success(xt.green(`Logged out. Removed saved credentials from ~/${p.configDir}/credentials.json.`)):fi.warn(xt.yellow(`No saved ${p.name} credentials found.`)),process.env[t]&&(fi.warn(xt.yellow(`${t} is still set in this shell. Commands will continue to authenticate with that token until you unset it.`)),fi.info(xt.dim(`Run: unset ${t}`))),el(xt.blue("---"))}import{outro as tl,select as il,spinner as nl,isCancel as rl}from"@clack/prompts";import mi from"chalk";import nn from"fs";import ol from"path";var Jr=e=>e==="1234567890"||e==="ABC123DEFG"||e==="XXXXXXXXXX"?"":typeof e=="string"?e:"",sl=()=>process.versions.node.split(".")[0]||"24";async function Xr(){if(!Ie()){console.log(mi.red(`You are not logged in. Run \`${p.nameLower} login\` first.`));return}let t=nl();t.start("Fetching projects...");try{let{data:i}=await C.get("/projects");if(t.stop("Projects loaded."),i.status!=="success"||!i.projects||i.projects.length===0){console.log(mi.yellow(`No projects found. Run \`${p.nameLower} init\` to create one.`));return}let n=i.projects.map(I=>({value:I.projectId,label:`${I.name} (${I.slug})`})),r=await il({message:"Select a project to link:",options:n});if(rl(r))return;let o=ol.join(process.cwd(),p.configFileName),s={};if(nn.existsSync(o))try{s=JSON.parse(nn.readFileSync(o,"utf-8"))}catch{}let l=i.projects.find(I=>I.projectId===r),a=s.android?.package||Ke("android"),c=s.ios?.bundleIdentifier||Ke("ios"),d=s.android||{},u=s.submit?.production?.android||{},f=s.submit?.production?.ios||{},m={projectId:r,name:l?.name,slug:l?.slug,nodeVersion:s.nodeVersion||sl(),scheme:l?.slug?.toLowerCase()||"app",android:{...d,package:a||"",versionCode:d.versionCode||"auto"},ios:{bundleIdentifier:c||"",buildNumber:s.ios?.buildNumber||"auto"},build:{development:{environment:"development",distribution:"development"},staging:{environment:"staging",distribution:"internal"},production:{environment:"production",distribution:"store"}},submit:{production:{android:{...u,track:u.track||"internal",releaseStatus:u.releaseStatus||"completed"},ios:{ascAppId:Jr(f.ascAppId),appleTeamId:Jr(f.appleTeamId)}}}};nn.writeFileSync(o,JSON.stringify(m,null,2)),tl(mi.green(`Linked to project ${m.name} (${m.slug})`))}catch(i){t.stop(mi.red("Error fetching projects: "+i.message))}}import{outro as al,text as gi,select as ll,spinner as cl,isCancel as Lt}from"@clack/prompts";import Mt from"chalk";import dl from"fs";import ul from"path";import{randomUUID as pl}from"crypto";var fl=()=>process.versions.node.split(".")[0]||"24";async function qr(){if(!Ie()){console.log(Mt.red(`You are not logged in. Run \`${p.nameLower} login\` first.`));return}let t=await gi({message:"Project Name:",placeholder:"My Awesome App",validate(l){if(l.length===0)return"Name is required!"}});if(Lt(t))return;let i=await gi({message:"Project Slug (URL friendly):",placeholder:"my-awesome-app",validate(l){if(l.length===0)return"Slug is required!";if(!/^[a-z0-9-]+$/.test(l))return"Slug must be lowercase alphanumeric with dashes."}});if(Lt(i))return;let n=await ll({message:"Platform:",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"},{value:"web",label:"Web"},{value:"all",label:"All Platforms"}]});if(Lt(n))return;let r="";if(n==="android"||n==="all"){let l=Ke("android");if(r=await gi({message:"Android Package Name:",initialValue:l||"",placeholder:"com.example.app",validate(a){if(a.length===0)return"Package name is required for Android!"}}),Lt(r))return}let o="";if(n==="ios"||n==="all"){let l=Ke("ios");if(o=await gi({message:"iOS Bundle Identifier:",initialValue:l||"",placeholder:"com.example.app",validate(a){if(a.length===0)return"Bundle ID is required for iOS!"}}),Lt(o))return}let s=cl();s.start("Creating project...");try{let l=pl(),c={projectId:l,name:t,slug:i,storageType:"managed",platforms:n==="all"?["android","ios","web"]:[n]},{data:d}=await C.post("/projects",c);if(d.status==="success"){s.stop(Mt.green("Project created successfully!"));let u=ul.join(process.cwd(),p.configFileName);dl.writeFileSync(u,JSON.stringify({projectId:l,name:t,slug:i,nodeVersion:fl(),...r?{android:{package:r,versionCode:"auto"}}:{},...o?{ios:{bundleIdentifier:o,buildNumber:"auto"}}:{},build:{development:{environment:"development",distribution:"development"},staging:{environment:"staging",distribution:"internal"},production:{environment:"production",distribution:"store"}},submit:{production:{android:{track:"internal",releaseStatus:"completed"},ios:{ascAppId:"",appleTeamId:""}}}},null,2)),al(Mt.green(`Initialized project ${t} and linked locally!`))}else s.stop(Mt.red("creation failed: "+d.message))}catch(l){s.stop(Mt.red("Network error: "+l.message))}}import{spinner as Qr,log as $e}from"@clack/prompts";import hi from"chalk";import Zr from"fs";import ml from"path";function eo(e,t,i,n){let r=e?.response?.status,o=e?.response?.data?.message||e?.response?.data?.error,s=n?` ${n}`:"";return r===401?`Not logged in or token expired while trying to ${i}${s}. Run \`${p.nameLower} login\` and try again.`:r===403?[`Permission denied while trying to ${i}${s}.`,o?`API says: ${o}.`:void 0,`Current Mach account/token does not have access to project ${t}.`,`Run \`${p.nameLower} login\` with the correct account, or ask a project owner to grant access.`].filter(Boolean).join(" "):r===404?[`Project or environment endpoint was not found while trying to ${i}${s}.`,`Project ID: ${t}.`,o?`API says: ${o}.`:void 0].filter(Boolean).join(" "):r?`Failed to ${i}${s}: ${o||`API returned HTTP ${r}`}`:`Network error while trying to ${i}${s}: ${e?.message||"Unknown error"}`}async function to(e,t){let i=Ie();if(!i){$e.error(`You are not logged in. Run \`${p.nameLower} login\` first.`);return}let n=ml.join(process.cwd(),p.configFileName);if(!Zr.existsSync(n)){$e.error(`No ${p.configFileName} found. Run \`${p.nameLower} init\` or \`${p.nameLower} link\` first.`);return}let r;try{r=JSON.parse(Zr.readFileSync(n,"utf-8"))}catch{$e.error(`Failed to parse ${p.configFileName}`);return}let{projectId:o}=r;if(!o){$e.error(`${p.configFileName} is missing projectId.`);return}e==="set"?await gl(o,t,i):e==="list"?await hl(o,i):$e.error(`Unknown env action: ${e}. Use 'set' or 'list'.`)}async function gl(e,t,i){if(t.length===0){$e.error(`Usage: ${p.nameLower} env set KEY=VALUE [KEY2=VALUE2 ...]`);return}let n=Qr();n.start("Setting environment variables...");let r=0,o=0;for(let s of t){let[l,...a]=s.split("="),c=a.join("=");if(!l||c===void 0){$e.warn(`Invalid format for argument: ${s}. Expected KEY=VALUE.`),o++;continue}try{let d={key:l.trim(),value:c,type:"env",environment:"global",visibility:"secret"},{data:u}=await C.post(`/projects/${e}/secrets`,d);u.status==="success"?r++:($e.error(`Failed to set ${l}: ${u.message}`),o++)}catch(d){$e.error(eo(d,e,"set",l)),o++}}n.stop(`Set ${r} variable(s). ${o>0?`${o} failed.`:""}`)}async function hl(e,t){let i=Qr();i.start("Fetching environment variables...");try{let{data:n}=await C.get(`/projects/${e}/secrets`);if(n.status==="success"){i.stop("Fetched variables.");let r=n.secrets||[];r.length===0?$e.info("No environment variables found for this project."):($e.info(hi.bold("Environment Variables (Global & Scoped):")),r.forEach(o=>{let s=o.visibility==="plain"?o.value:"********";console.log(` ${hi.cyan(o.key)} = ${s} ${hi.gray(`[${o.environment}]`)}`)}))}else i.stop(hi.red(`Failed to fetch variables: ${n.message}`))}catch(n){i.stop("Failed to fetch variables."),$e.error(eo(n,e,"list"))}}import{spinner as et,text as Ut,select as an,isCancel as Qe,cancel as ln,log as no}from"@clack/prompts";import ne from"chalk";import Q from"fs";import ye from"path";import{spawn as yl,spawnSync as lt}from"child_process";import ro from"axios";import dt from"os";import un from"crypto";var Sl=5e3,El=12,bl={completed:"completed",draft:"draft",halted:"halted",inprogress:"inProgress","in-progress":"inProgress"},Al=e=>e?.type==="google_service_account",yi=e=>e?.bundleId||e?.packageName||e?.meta?.packageName||e?.meta?.bundleId;async function oo(e){let t=et(),i=Ie(),n=Il(e);if(!n){process.exitCode=1;return}let r=e.projectId||n.projectId,o=e.profile||e.buildProfile||"production";if(!r){ee(`${p.configFileName} is missing projectId. Pass --project-id in runner mode.`),process.exitCode=1;return}n.projectId=r,de(ne.dim(`Submit for project: ${n.name||r} | Profile: ${o}`));let s=e.platform;if(!s){let $=await an({message:"Select platform to submit:",options:[{value:"ios",label:"iOS (App Store Connect / TestFlight)"},{value:"android",label:"Android (Google Play Console)"}]});if(Qe($)){ln("Operation cancelled");return}s=$}if(s=String(s).toLowerCase(),s!=="ios"&&s!=="android"){ee(`Platform ${s} is not supported. Use 'ios' or 'android'.`),process.exitCode=1;return}let l=s==="ios"&&!e.local&&e.sshHost?Ml(n,o,e):null;if(s==="ios"&&!e.local&&!l){await _l(n,o,e);return}let a=e.submitId,c=!!(e.local&&a),d=a||null,u=async($,M={})=>{d&&await vl(r,d,{status:$,...M})},f=s==="android"?kl(n,o):void 0,m=s==="ios"?Ll(n,o):void 0,I,L,P,B=!1;try{s==="android"&&(I=e.track||n.submit?.[o]?.android?.track||n.submit?.production?.android?.track||"internal",L=Ul(n,o,e.releaseStatus),P=Fl(n,o,e.rollout),B=Hl(n,o,e.changesNotSentForReview),jl(L,P))}catch($){ee($.message),process.exitCode=1;return}if(s==="android"&&!c&&(d=await wl(n,r,s,o,e,{packageName:f,track:I,releaseStatus:L,rollout:P,changesNotSentForReview:B}),!d)){ee("Could not create submission tracking record. Submission was not started."),process.exitCode=1;return}await u("running",{platform:s,profile:o,packageName:f,track:I,releaseStatus:L,rollout:P,startTime:Date.now()});let k=null,j=null;try{j=await Gl(r,s,e,i?.token),k=j?.filePath||null}catch($){await u("failed",{error:`Failed to resolve submission artifact: ${$.message}`,endTime:Date.now()}),ee(`Failed to resolve submission artifact: ${$.message}`),process.exitCode=1;return}if(!k){await u("failed",{error:"No suitable artifact found for submission.",endTime:Date.now()}),process.exitCode=1;return}await u("running",{buildId:j?.buildId,artifactName:j?.artifactName,artifactSource:j?.source}),de(`Using artifact: ${ne.green(ye.basename(k))} `),t.start("Fetching submission credentials from Dashboard...");let h;try{let M=(await C.get(`/credentials/${r}`)).data.credentials||[];if(s==="android"&&!f){t.stop("Package name missing"),ee("Could not resolve Android package name. Set android.package in mach.config.json/app.json."),await u("failed",{error:"Could not resolve Android package name.",endTime:Date.now()}),process.exitCode=1;return}let G=M.filter(Al),x=s==="ios"?M.filter(H=>H.type==="asc_api_key"):xl(G,f);if(x.length===0){if(t.stop("Credentials missing"),ee(s==="android"?`No Google Play service credential found for package ${f}.`:`No Service Credentials found for ${s}.`),s==="android"){let H=G.map(yi).filter(Boolean).join(", ");H&&de(`Found Google Play service credential(s) for: ${H}`),de(`Use '${p.nameLower} credentials:service --platform android --package-name ${f}' or upload it under that package in the Dashboard.`)}else de(`Use '${p.nameLower} credentials:service --platform ${s}' or use the Dashboard to upload them.`);await u("failed",{error:`No submission credentials found for ${s}.`,endTime:Date.now()}),process.exitCode=1;return}if(h=Ol(x,e.credentialId),!h&&s==="ios"&&m&&(h=Cl(x,m)),h||x.length===1)h=h||x[0],t.stop(`Using: ${h.name}`),s==="android"&&yi(h)==="*"&&de(ne.yellow(`Using legacy wildcard Google Play credential for ${f}. Upload a package-scoped credential when possible.`));else{if(t.stop("Multiple credentials found"),Nl()){let E=x.map(se=>`${se.name||"credential"} (${se.credentialId||se.id||"no-id"})`).join(", ");ee(`Multiple ${s==="ios"?"App Store Connect":"Google Play"} credentials found. Use --credential-id in CI. Available: ${E}`),await u("failed",{error:"Multiple submission credentials found; --credential-id is required in CI.",endTime:Date.now()}),process.exitCode=1;return}let H=await an({message:`Choose a ${s==="ios"?"App Store Connect":"Google Play"} credential:`,options:x.map(E=>({value:E.credentialId,label:E.name,hint:`${E.keyId?`ID: ${E.keyId}`:""} ${E.issuerId?`(Issuer: ${E.issuerId.substring(0,8)}...)`:""}`}))});if(Qe(H)){ln("Submission cancelled"),await u("failed",{error:"Submission cancelled while selecting credential.",endTime:Date.now()}),process.exitCode=1;return}h=x.find(E=>E.credentialId===H),de(`Using selected: ${ne.green(h.name)}`)}}catch($){t.stop("Failed to fetch credentials"),ee(`API Error: ${$.message} `),await u("failed",{error:`Failed to fetch credentials: ${$.message}`,endTime:Date.now()}),process.exitCode=1;return}let K=Q.mkdtempSync(ye.join(dt.tmpdir(),`${p.nameLower}-submit-`)),_=h.keyId||h.meta?.keyId,S=h.issuerId||h.meta?.issuerId,O=h.type==="asc_api_key"?`AuthKey_${_}.p8`:"service-account.json",v=ye.join(K,O);t.start("Downloading secure key...");try{let $=await C.get(`/credentials/${h.credentialId}/download`,{params:{projectId:r,format:"raw"}});if($.data.status!=="success"||!$.data.downloadUrl)throw new Error("Failed to get secure download URL");let M=await ro.get($.data.downloadUrl,{responseType:"arraybuffer"});Q.writeFileSync(v,Buffer.from(M.data)),t.stop("Key downloaded to secure temp storage")}catch($){t.stop("Download failed"),ee(`Failed to download key: ${$.message}`);try{Q.rmSync(K,{recursive:!0,force:!0})}catch{}await u("failed",{error:`Failed to download credential key: ${$.message}`,endTime:Date.now()}),process.exitCode=1;return}de(ne.blue(`Initiating ${s==="ios"?"TestFlight":"Google Play"} submission...`));let T=!1,D;try{if(s==="ios"){if(!_){let M=await Ut({message:"Enter App Store Connect Key ID (e.g. 2X948D...):",validate:G=>G.length>0?void 0:"Key ID is required"});if(Qe(M)){await u("failed",{error:"Submission cancelled while entering ASC Key ID.",endTime:Date.now()}),process.exitCode=1;return}_=M}if(!S||S==="undefined"){let M=await Ut({message:"Enter App Store Connect Issuer ID (Found on ASC Keys page):",validate:G=>G.length>0?void 0:"Issuer ID is required"});if(Qe(M)){await u("failed",{error:"Submission cancelled while entering ASC Issuer ID.",endTime:Date.now()}),process.exitCode=1;return}S=M}de(`Using ASC Key ID: ${_}`),de(`Using ASC Issuer ID: ${S}`);let $=l?await Vl(k,v,S,_,m,l):await Kl(k,v,S,_,m);dn(`${s==="ios"?"App Store":"Google Play"} submission successful!`),T=!0}else D=await Xl(k,v,I||"internal",f,L||"completed",P,B,o),dn("Google Play submission successful!"),T=!0}catch($){ee(`Submission failed: ${$.message}`),await u("failed",{error:$.message,endTime:Date.now()}),Et(e,{status:"failed",projectId:r,submitId:d,platform:s,profile:o,buildId:j?.buildId||e.buildId,artifactName:j?.artifactName,error:$.message,dashboardUrl:d?ct(d,r):void 0}),process.exitCode=1}finally{T&&(await u("success",{endTime:Date.now(),versionCode:D?.versionCode,track:I,releaseStatus:L}),Et(e,{status:"success",projectId:r,submitId:d,platform:s,profile:o,buildId:j?.buildId||e.buildId,artifactName:j?.artifactName,versionCode:D?.versionCode,track:I,releaseStatus:L,dashboardUrl:d?ct(d,r):void 0})),ic(K),k&&k.includes(`${p.nameLower}-artifact-`)}}function Il(e){let t=`./${p.configFileName}`;if(Q.existsSync(t))try{return JSON.parse(Q.readFileSync(t,"utf-8"))}catch(i){return ee(`Failed to read ${p.configFileName}: ${i.message}`),null}return e.projectId?{projectId:e.projectId}:(ee(`No ${p.configFileName} found. Run \`${p.nameLower} init\` or \`${p.nameLower} link\` first.`),null)}async function _l(e,t,i){let n=i.projectId||e.projectId;if(!n){ee(`${p.configFileName} is missing projectId.`),process.exitCode=1;return}let r=i.submitId||un.randomUUID(),o=!!i.latest||!i.buildId,s=$l({...i,latest:o,profile:t,projectId:n,submitId:r}),l={projectId:n,submitId:r,platform:"ios",profile:t,latest:o,buildId:i.buildId,credentialId:i.credentialId,status:"pending",source:"cli",submitArgs:process.argv.slice(3).join(" "),runnerArgs:s,runnerCommand:[p.nameLower,"submit",...s].map(Tl).join(" "),appName:e.name,startTime:Date.now()},a=et();a.start("Queuing iOS submit on macOS runner...");try{let c=await C.post("/submissions",l),d=c.data?.submission||c.data?.submit||{},u=c.data?.dashboardUrl||ct(r,n);a.stop("iOS submit queued"),de(`Submission ID: ${ne.cyan(r)}`),de(`Dashboard: ${ne.blue.underline(u)}`),Et(i,{status:"pending",projectId:n,submitId:r,platform:"ios",profile:t,latest:o,buildId:i.buildId,dashboardUrl:u}),await Pl(n,r,i)}catch(c){a.stop("Could not queue iOS submit"),ee(Rl(c)),process.exitCode=1}}async function wl(e,t,i,n,r,o={}){let s=r.submitId||un.randomUUID(),l=!!r.latest||!r.buildId,a={projectId:t,submitId:s,platform:i,profile:n,latest:l,buildId:r.buildId,credentialId:r.credentialId,status:"running",source:"cli-direct",submitArgs:process.argv.slice(3).join(" "),appName:e.name,startTime:Date.now(),...o};try{let c=await C.post("/submissions",a),d=c.data?.submission||c.data?.submit||{},u=c.data?.dashboardUrl||d.dashboardUrl||ct(s,t);return de(`Submission ID: ${ne.cyan(s)}`),de(`Dashboard: ${ne.blue.underline(u)}`),Et(r,{status:"running",projectId:t,submitId:s,platform:i,profile:n,latest:l,buildId:r.buildId,dashboardUrl:u}),s}catch(c){let d=c.response?.data?.message||c.response?.data?.error||c.message;return de(ne.yellow(`Could not create submission tracking record: ${d}`)),null}}function $l(e){let t=["--local","--submit-id",e.submitId,"--project-id",e.projectId,"--platform","ios","--profile",e.profile||"production"];return e.buildId?t.push("--build-id",e.buildId):t.push("--latest"),e.credentialId&&t.push("--credential-id",e.credentialId),e.quiet&&t.push("--quiet"),e.jsonOutput&&t.push("--json-output",e.jsonOutput),t.filter(i=>i!=null&&i!=="")}async function Pl(e,t,i){let n=et(),r=0,o=0;for(i.quiet||n.start("Waiting for iOS submit runner...");;)try{let s=await C.get(`/submissions/${e}/${t}`),l=s.data?.submission||s.data?.submit||s.data,a=String(l?.status||"pending").toLowerCase();r=0;let c=Array.isArray(l?.logs)?l.logs:[];for(let d=o;d<c.length;d++){let u=c[d];u&&console.log(ne.dim(String(u)))}if(o=c.length,["success","completed","succeeded"].includes(a)){i.quiet||n.stop("iOS submit completed"),dn("App Store submission successful!"),Et(i,{status:"success",projectId:e,submitId:t,platform:"ios",profile:l?.profile||i.profile||"production",buildId:l?.buildId||i.buildId,artifactName:l?.artifactName,dashboardUrl:l?.dashboardUrl||ct(t,e)});return}if(["failed","error","cancelled","canceled"].includes(a)){i.quiet||n.stop("iOS submit failed");let d=l?.error||l?.message||"Unknown iOS submit failure.";ee(d),Et(i,{status:"failed",projectId:e,submitId:t,platform:"ios",profile:l?.profile||i.profile||"production",buildId:l?.buildId||i.buildId,artifactName:l?.artifactName,error:d,dashboardUrl:l?.dashboardUrl||ct(t,e)}),process.exitCode=1;return}i.quiet||n.message(`iOS submit ${a}...`),await cn(Sl)}catch(s){if(r++,r>=El){i.quiet||n.stop("Lost connection to iOS submit status"),ee(`Could not fetch iOS submit status after ${r} attempts: ${s.message}`),process.exitCode=1;return}await cn(Math.min(2e3*r,15e3))}}async function vl(e,t,i){let n;for(let r=1;r<=3;r++)try{await C.patch(`/submissions/${e}/${t}`,i);return}catch(o){if(n=o,r>=3||!Dl(o))break;await cn(1e3*r)}no.warn(ne.dim(`Could not report submission status: ${n?.message||n}`))}function Dl(e){let t=e.response?.status;return!t||t===408||t===409||t===425||t===429||t>=500}function Rl(e){let t=e.response?.status,i=e.response?.data?.message||e.response?.data?.error;return t===404||t===405?["Managed iOS submit is not enabled on this Mach API yet.","Deploy the API/dashboard submission orchestration endpoint, then retry the same command.","Expected API: POST /submissions and GET/PATCH /submissions/:projectId/:submitId."].join(`
|
|
1163
|
+
`):i||e.message||String(e)}function ct(e,t){if(!e)return Ye;let i=t?`?projectId=${encodeURIComponent(t)}`:"";return`${Ye}/submissions/${e}${i}`}function Et(e,t){if(!e.jsonOutput)return;let i=ye.resolve(e.jsonOutput),n={...t,url:t.url||t.dashboardUrl||ct(t.submitId,t.projectId),updatedAt:new Date().toISOString()};try{let r=ye.dirname(i);r&&r!=="."&&Q.mkdirSync(r,{recursive:!0}),Q.writeFileSync(i,JSON.stringify(n,null,2))}catch(r){no.warn(ne.yellow(`Could not write submission metadata JSON: ${r.message}`))}}function Ol(e,t){return t&&e.find(i=>i.credentialId===t||i.id===t||i.keyId===t||i.meta?.keyId===t)||null}function Cl(e,t){let i=e.filter(n=>[n.bundleId,n.bundleIdentifier,n.appIdentifier,n.meta?.bundleId,n.meta?.bundleIdentifier,n.meta?.appIdentifier].filter(Boolean).map(String).includes(t));return i.length===1?i[0]:null}function Nl(){return process.env.CI==="true"||process.env.CI==="1"||!process.stdin.isTTY}function cn(e){return new Promise(t=>setTimeout(t,e))}function Tl(e){return/^[a-zA-Z0-9_./:=@-]+$/.test(e)?e:`'${e.replace(/'/g,"'\\''")}'`}function kl(e,t){if(e.submit?.[t]?.android?.package)return e.submit[t].android.package;let i=In(e,t);if(i)return i;let n=ye.join(process.cwd(),"app.json");if(Q.existsSync(n))try{return JSON.parse(Q.readFileSync(n,"utf-8")).expo?.android?.package}catch{}let r=ye.join(process.cwd(),"app.config.json");if(Q.existsSync(r))try{let o=JSON.parse(Q.readFileSync(r,"utf-8"));return o.expo?.android?.package||o.android?.package}catch{}}function xl(e,t){let i=e.filter(o=>yi(o)===t);if(i.length>0)return i;let n=e.filter(o=>{let s=yi(o);return!s||s==="*"});return e.length>0&&e.length===n.length?n:[]}function Ll(e,t){return e.submit?.[t]?.ios?.bundleIdentifier?e.submit[t].ios.bundleIdentifier:e.submit?.[t]?.ios?.bundleId?e.submit[t].ios.bundleId:_n(e,t)}function Ml(e,t,i){let n=e.submit?.[t]?.ios||{},r=e.submit?.production?.ios||{},o=i.sshHost||n.sshHost||r.sshHost||process.env.MACH_IOS_SUBMIT_SSH_HOST;return o?{sshHost:o,sshUser:i.sshUser||n.sshUser||r.sshUser||process.env.MACH_IOS_SUBMIT_SSH_USER||process.env.USER||"ubuntu",sshKey:i.sshKey||n.sshKey||r.sshKey||process.env.MACH_IOS_SUBMIT_SSH_KEY}:null}function Ul(e,t,i){let n=i||e.submit?.[t]?.android?.releaseStatus||e.submit?.production?.android?.releaseStatus||"completed";return Bl(n)}function Bl(e){let t=bl[String(e).trim().toLowerCase()];if(!t)throw new Error(`Invalid Android release status "${e}". Use completed, draft, halted, or inProgress.`);return t}function Fl(e,t,i){let n=i??e.submit?.[t]?.android?.rollout??e.submit?.[t]?.android?.userFraction??e.submit?.[t]?.android?.rolloutFraction??e.submit?.production?.android?.rollout??e.submit?.production?.android?.userFraction??e.submit?.production?.android?.rolloutFraction;if(n==null||n==="")return;let r=Number(n);if(!Number.isFinite(r)||r<=0||r>=1)throw new Error(`Invalid Android rollout fraction "${n}". Use a number greater than 0 and less than 1, for example 0.1.`);return r}function Hl(e,t,i){let n=i??e.submit?.[t]?.android?.changesNotSentForReview??e.submit?.[t]?.android?.changes_not_sent_for_review??e.submit?.production?.android?.changesNotSentForReview??e.submit?.production?.android?.changes_not_sent_for_review??!1;return n===!0||n==="true"||n==="1"}function jl(e,t){if(e==="inProgress"&&t===void 0)throw new Error("Google Play staged rollout requires --rollout <fraction> when --release-status inProgress is used.");if(e!=="inProgress"&&e!=="halted"&&t!==void 0)throw new Error("Android rollout fraction can only be used with --release-status inProgress or halted.")}async function Gl(e,t,i,n){let r=i.buildId?"id":i.latest?"latest":null;if(!r){let s=await an({message:"Select artifact source:",options:[{value:"latest",label:`Latest Production Build (${p.name})`},{value:"id",label:`Input Build ID (${p.name})`},{value:"url",label:"Remote URL"},{value:"local",label:"Local File Path"}]});if(Qe(s))return ln("Operation cancelled"),null;r=s}if(r==="local"){let s=await Ut({message:"Enter path to artifact (.ipa/.aab):",validate:l=>{if(!Q.existsSync(l))return"File not found";if(t==="ios"&&!l.endsWith(".ipa"))return"Must be an .ipa file";if(t==="android"&&!l.endsWith(".aab"))return"Must be an .aab file"}});return Qe(s)?null:{filePath:s,source:"local"}}let o=et();if(r==="latest"){let s=i.profile||i.buildProfile;o.start(`Fetching latest${s?` ${s}`:""} build...`);try{let l=await C.get(`/builds/${e}`,{params:{limit:50}});if(l.data.status!=="success")throw new Error(l.data.message);let a=l.data.builds||[],c=s?.toLowerCase(),d=h=>h.platform?.toLowerCase()===t.toLowerCase()&&h.status?.toLowerCase()==="success",u=h=>c?[h.buildProfile,h.profile,h.profileName,h.buildType].filter(Boolean).some(K=>String(K).toLowerCase()===c):!0,f=a.filter(h=>d(h)&&u(h)),m=f.find(h=>h.buildType?.toLowerCase()==="store"||h.distribution?.toLowerCase()==="store")||f[0],I=a.some(h=>h.platform?.toLowerCase()===t.toLowerCase()&&h.status?.toLowerCase()==="success");if(!m)return o.stop("No suitable build found"),ee(s&&I?`No successful ${t} builds found for profile "${s}".`:"No successful builds found for this platform."),null;o.stop(`Found build: ${m.buildId}`);let L=m.artifacts||[];if(L.length===0||L.every(h=>!(h.url||h.downloadUrl)))try{let h=await C.get(`/builds/${e}/${m.buildId}/artifacts`);h.data.status==="success"&&h.data.artifacts?.length>0?(L=h.data.artifacts.map(K=>({...K,url:K.url||K.downloadUrl})),console.log(ne.cyan(` [RECOVERY] Fetched ${L.length} artifact(s) with download URLs.`))):console.log(ne.yellow(" [RECOVERY] /artifacts endpoint returned 0 artifacts."))}catch(h){console.log(ne.red(` [RECOVERY] /artifacts fetch failed: ${h.message}`))}let B=t==="ios",k=L.find(h=>{let K=(h.type||"").toLowerCase(),_=(h.name||"").toLowerCase();if(console.log(ne.dim(` - Checking: ${h.name} (Type: ${h.type}, HasLink: ${!!(h.url||h.downloadUrl)})`)),K)return K===(B?"ipa":"aab");let S=B?".ipa":".aab",O=(h.url||h.downloadUrl||"").toLowerCase();return _.endsWith(S)||O.includes(S)});if(!k||!(k.url||k.downloadUrl))return ee("Build found but artifact URL is missing."),null;let j=k.url||k.downloadUrl;return{filePath:await rn(j,B?"ios":"android"),buildId:m.buildId,artifactName:k.name,source:"latest"}}catch(l){return o.stop("Fetch failed"),ee(`API Error: ${l.message}`),null}}if(r==="id"){let s=i.buildId||await Ut({message:"Enter Build ID:",validate:l=>l.length<5?"Invalid ID":void 0});if(Qe(s))return null;o.start("Fetching build...");try{let l=await C.get(`/build/${s}`);if(l.data.status!=="success")throw new Error(l.data.message);let a=l.data.build;if(!a)throw new Error("Build not found");let c=t==="ios",d=a.artifacts?.find(u=>{if(u.type)return u.type===(c?"ipa":"aab");let f=c?".ipa":".aab";return u.name&&u.name.endsWith(f)||u.url&&u.url.includes(f)});return!d||!d.url?(o.stop("Missing artifact"),ee("Artifact URL not found on build record."),null):(o.stop(`Found build: ${a.buildId}`),{filePath:await rn(d.url,c?"ios":"android"),buildId:a.buildId||String(s),artifactName:d.name,source:"id"})}catch(l){return o.stop("Fetch failed"),ee(l.message),null}}if(r==="url"){let s=await Ut({message:"Enter Artifact URL:",validate:l=>l.startsWith("http")?void 0:"Must be a valid URL"});return Qe(s)?null:{filePath:await rn(s,t),source:"url"}}return null}async function rn(e,t,i=3){let n=et();n.start("Downloading artifact...");let r=Q.mkdtempSync(ye.join(dt.tmpdir(),`${p.nameLower}-artifact-`)),o=`app.${t==="ios"?"ipa":"aab"}`,s=ye.join(r,o);for(let l=1;l<=i;l++)try{l>1&&(n.message(`Downloading artifact (Retry ${l}/${i})...`),await new Promise(d=>setTimeout(d,2e3*l)));let a=Q.createWriteStream(s),c=await ro({url:e,method:"GET",responseType:"stream",timeout:6e4});return await new Promise((d,u)=>{c.data.pipe(a);let f=!1;c.data.on("error",m=>{f||(f=!0,a.close(),u(m))}),a.on("finish",()=>{f||d()}),a.on("error",m=>{f||(f=!0,u(m))})}),n.stop("Download complete"),s}catch(a){if(l===i)throw n.stop("Download failed"),a}throw new Error("Download failed after retries")}async function Kl(e,t,i,n,r){let o=et();if(r&&de(`Bundle ID: ${ne.green(r)}`),!i||!n)throw ee(`Missing credentials: issuerId=${i}, keyId=${n}. Check your Dashboard.`),new Error("Missing ASC API Key Metadata (IssuerID or KeyID)");let s=so(t,i,n),l=Zl();return o.start("Uploading to TestFlight (pilot)..."),new Promise((a,c)=>{let d=yl(l.command,["pilot","upload","--ipa",e,"--api_key_path",s,"--skip_submission","true","--skip_waiting_for_build_processing","true"],{stdio:"inherit",env:l.env});d.on("close",u=>{if(u!==0){o.stop("Pilot failed");try{Q.unlinkSync(s)}catch{}c(new Error(`fastlane pilot failed with exit code ${u??"unknown"}.`))}else{o.stop("IPA uploaded to TestFlight");try{Q.unlinkSync(s)}catch{}a({})}}),d.on("error",u=>{try{Q.unlinkSync(s)}catch{}o.stop("Pilot execution error"),c(ec(u))})})}async function Vl(e,t,i,n,r,o){let s=et();if(r&&de(`Bundle ID: ${ne.green(r)}`),!i||!n)throw ee(`Missing credentials: issuerId=${i}, keyId=${n}. Check your Dashboard.`),new Error("Missing ASC API Key Metadata (IssuerID or KeyID)");let l=so(t,i,n),a=`${o.sshUser}@${o.sshHost}`,c=zl(o),d=Wl(o),u="",f="";try{if(s.start(`Preparing remote iOS submit runner (${a})...`),u=Yl("ssh",[...c,"mktemp -d /tmp/mach-submit.XXXXXX"]).trim(),!u)throw new Error("Remote runner did not return a temp directory.");s.stop(`Remote runner ready: ${a}`),s.start("Uploading IPA and App Store Connect key to remote runner..."),on("scp",[...d,e,`${a}:${u}/app.ipa`],"IPA upload to remote runner"),on("scp",[...d,l,`${a}:${u}/api_key.json`],"ASC key upload to remote runner"),f=ye.join(dt.tmpdir(),`${p.nameLower}-ios-submit-${Date.now()}.sh`),Q.writeFileSync(f,Jl(u)),on("scp",[...d,f,`${a}:${u}/submit.sh`],"submit script upload to remote runner"),s.stop("Remote submit inputs uploaded"),s.start("Uploading to TestFlight on remote runner...");let m=`chmod +x ${Bt(`${u}/submit.sh`)} && bash ${Bt(`${u}/submit.sh`)}`,I=lt("ssh",[...c,m],{stdio:"inherit"});if(I.error)throw pn("ssh",I.error);if(I.status!==0)throw new Error(`Remote iOS submit failed with exit code ${I.status}.`);return s.stop("IPA uploaded to TestFlight"),{apiKeyJsonPath:null}}catch(m){throw s.stop("Remote iOS submit failed"),m}finally{try{Q.unlinkSync(l)}catch{}if(f)try{Q.unlinkSync(f)}catch{}if(u)try{lt("ssh",[...c,`rm -rf ${Bt(u)}`],{stdio:"ignore"})}catch{}}}function so(e,t,i){let n=Q.readFileSync(e,"utf8"),r;try{r=un.createPrivateKey(n).export({type:"pkcs8",format:"pem"})}catch{de("Key normalization failed, falling back to manual re-wrapping..."),r=`-----BEGIN PRIVATE KEY-----
|
|
1117
1164
|
${(n.replace(/-----BEGIN[^-]*-----/g,"").replace(/-----END[^-]*-----/g,"").replace(/\s+/g,"").match(/.{1,64}/g)||[]).join(`
|
|
1118
1165
|
`)}
|
|
1119
|
-
-----END PRIVATE KEY-----`}let o=
|
|
1166
|
+
-----END PRIVATE KEY-----`}let o=ye.join(dt.tmpdir(),`api_key_${i}_${Date.now()}.json`),s={key_id:i,issuer_id:t,key:r,in_house:!1};return Q.writeFileSync(o,JSON.stringify(s,null,2)),o}function zl(e){let t=["-o","StrictHostKeyChecking=no","-o","ServerAliveInterval=30"];return e.sshKey&&t.push("-i",e.sshKey),t.push(`${e.sshUser}@${e.sshHost}`),t}function Wl(e){let t=["-o","StrictHostKeyChecking=no","-o","ServerAliveInterval=30"];return e.sshKey&&t.push("-i",e.sshKey),t}function Yl(e,t){let i=lt(e,t,{encoding:"utf-8",stdio:["ignore","pipe","inherit"]});if(i.error)throw pn(e,i.error);if(i.status!==0)throw new Error(`${e} failed with exit code ${i.status}.`);return i.stdout||""}function on(e,t,i){let n=lt(e,t,{stdio:"inherit"});if(n.error)throw pn(e,n.error);if(n.status!==0)throw new Error(`${i} failed with exit code ${n.status}.`)}function pn(e,t){return t?.code==="ENOENT"?new Error(`${e} was not found on this machine. Install OpenSSH client tools or run iOS submit directly on the macOS runner.`):t}function Bt(e){return`'${e.replace(/'/g,"'\\''")}'`}function Jl(e){let t=Bt(`${e}/app.ipa`),i=Bt(`${e}/api_key.json`);return`#!/bin/bash
|
|
1120
1167
|
set -euo pipefail
|
|
1121
1168
|
|
|
1122
1169
|
export PATH="/opt/homebrew/bin:/usr/local/bin:/usr/bin:/bin:/usr/sbin:/sbin:$HOME/.local/share/fastlane/3.4.0/bin:$PATH"
|
|
@@ -1144,26 +1191,26 @@ fastlane pilot upload \\
|
|
|
1144
1191
|
--api_key_path ${i} \\
|
|
1145
1192
|
--skip_submission true \\
|
|
1146
1193
|
--skip_waiting_for_build_processing true
|
|
1147
|
-
`}async function
|
|
1148
|
-
`))}function
|
|
1194
|
+
`}async function Xl(e,t,i="internal",n,r="completed",o,s=!1,l="production"){let a=et();if(!n||n==="*")throw new Error("Android package name is required for Google Play submission.");let c=o!==void 0?` (${o} rollout)`:"";a.start(`Uploading to Google Play ${i} track with ${r} release status${c}...`);try{let d=JSON.parse(Q.readFileSync(t,"utf-8"));ql(d);let u=await Gn({packageName:n,serviceAccount:d,aabPath:e,track:i,releaseStatus:r,userFraction:o,changesNotSentForReview:s});return a.stop(`AAB uploaded to ${i} track (versionCode ${u.versionCode})`),u}catch(d){throw a.stop("Google Play upload failed"),new Error(tc(d,i,n,l))}}function ql(e){if(!e?.client_email||!e?.private_key)throw new Error("Invalid Google service account JSON: missing client_email or private_key.")}function sn(){let e=process.env.HOME||dt.homedir(),t=process.env.FASTLANE_GEM_HOME||ye.join(e,".local/share/fastlane/3.4.0"),i=[process.env.FASTLANE_BIN_DIR,"/usr/local/opt/ruby/bin","/opt/homebrew/opt/ruby/bin","/usr/local/bin","/opt/homebrew/bin","/usr/local/Cellar/fastlane/2.227.0/libexec/bin",ye.join(t,"bin"),process.env.PATH].filter(Boolean).join(":");return{...process.env,PATH:i,GEM_HOME:t,GEM_PATH:[t,"/usr/local/Cellar/fastlane/2.227.0/libexec",process.env.GEM_PATH].filter(Boolean).join(":"),FASTLANE_INSTALLED_VIA_HOMEBREW:"true",FASTLANE_SKIP_UPDATE_CHECK:"1",FASTLANE_HIDE_CHANGELOG:"1",LANG:process.env.LANG||"en_US.UTF-8",LC_ALL:process.env.LC_ALL||"en_US.UTF-8",CI:process.env.CI||"1"}}function Zl(){let e=sn(),t=io(e);if(t)return t;if(process.env.MACH_SKIP_FASTLANE_INSTALL!=="1"){Ql(e);let i=io(sn());if(i)return i}return{command:"fastlane",env:sn()}}function io(e){let t=process.env.HOME||dt.homedir(),i=[process.env.FASTLANE_BINARY,"/usr/local/bin/fastlane","/opt/homebrew/bin/fastlane","/usr/local/Cellar/fastlane/2.227.0/libexec/bin/fastlane",ye.join(process.env.FASTLANE_GEM_HOME||ye.join(t,".local/share/fastlane/3.4.0"),"bin/fastlane"),"fastlane"].filter(Boolean);for(let n of i){if(n.includes("/")&&!Q.existsSync(n))continue;if(!lt(n,["--version"],{env:e,stdio:"ignore"}).error)return{command:n,env:e}}return null}function Ql(e){let t=lt("gem",["--version"],{env:e,stdio:"ignore"});if(t.error||t.status!==0)return;let i=process.env.HOME||dt.homedir(),n=process.env.FASTLANE_GEM_HOME||ye.join(i,".local/share/fastlane/3.4.0"),r=ye.join(n,"bin");Q.mkdirSync(r,{recursive:!0}),de(ne.dim("fastlane not found. Installing fastlane into the local Mach runner cache..."));let o=lt("gem",["install","fastlane","-NV","--install-dir",n,"--bindir",r],{env:{...e,GEM_HOME:n,GEM_PATH:[n,e.GEM_PATH].filter(Boolean).join(":")},stdio:"inherit"});(o.error||o.status!==0)&&de(ne.yellow("Automatic fastlane install failed; Mach will try PATH resolution once more."))}function ec(e){return e?.code!=="ENOENT"?e:new Error(["fastlane was not found on PATH.","Mach submit uses Fastlane for iOS TestFlight/App Store uploads.","Run iOS submit on a macOS runner with Fastlane, or expose it via FASTLANE_BINARY / FASTLANE_BIN_DIR.","Example: gem install fastlane -NV"].join(`
|
|
1195
|
+
`))}function tc(e,t,i,n="production"){let r=e?.message||String(e);if(/changesNotSentForReview/i.test(r))return["Google Play rejected the commit because this change may need explicit review handling.",`Package: ${i||"unknown"} | Track: ${t}`,`Retry with: ${p.nameLower} submit --latest --platform android --profile ${n} --track ${t} --changes-not-sent-for-review`,"Then send the change for review from Google Play Console if required."].join(`
|
|
1149
1196
|
`);if(/caller does not have permission|permission denied|insufficient permissions|not authorized/i.test(r))return["Google Play rejected the service account permissions.",`Package: ${i||"unknown"} | Track: ${t}`,"Grant this service account access to the app in Play Console with release permissions, then retry."].join(`
|
|
1150
1197
|
`);if(/package.*not found|application.*not found|no application was found/i.test(r))return["Google Play could not find this package for the selected service account.",`Package: ${i||"unknown"} | Track: ${t}`,"Check android.package / submit.<profile>.android.package and make sure the app exists in this Play Console account."].join(`
|
|
1151
|
-
`);if(/only releases with status draft|draft app/i.test(r))return["Google Play requires a draft release for this app state.",`Package: ${i||"unknown"} | Track: ${t}`,`Retry with: ${
|
|
1152
|
-
`);if(r.includes("does not allow any existing users to upgrade"))return["Google Play rejected this release because the uploaded AAB is not an upgrade for existing users.",`Package: ${i||"unknown"} | Track: ${t}`,"Build a new Android artifact with a higher versionCode, then submit that build.",`Recommended: ${
|
|
1153
|
-
`);if(/version code \d+ has already been used/i.test(r))return[r.match(/version code \d+ has already been used[^\n]*/i)?.[0]||"Version code has already been used.",`Package: ${i||"unknown"} | Track: ${t}`,"Build a new Android artifact with a higher versionCode, then submit that build.",`Recommended: ${
|
|
1154
|
-
`);let o=r.match(/Google Api Error:[^\n]+/)||r.match(/Google Play API Error:[^\n]+/);return o?o[0]:r||"Google Play submission failed"}function
|
|
1155
|
-
`))}else
|
|
1156
|
-
Profile Settings:`)),
|
|
1157
|
-
Environment Variables:`)),Object.entries(n.env).forEach(([r,o])=>{
|
|
1198
|
+
`);if(/only releases with status draft|draft app/i.test(r))return["Google Play requires a draft release for this app state.",`Package: ${i||"unknown"} | Track: ${t}`,`Retry with: ${p.nameLower} submit --latest --platform android --profile ${n} --track ${t} --release-status draft`].join(`
|
|
1199
|
+
`);if(r.includes("does not allow any existing users to upgrade"))return["Google Play rejected this release because the uploaded AAB is not an upgrade for existing users.",`Package: ${i||"unknown"} | Track: ${t}`,"Build a new Android artifact with a higher versionCode, then submit that build.",`Recommended: ${p.nameLower} build --platform android --profile ${n} --auto-version`,`Then: ${p.nameLower} submit --latest --platform android --profile ${n} --track ${t}`].join(`
|
|
1200
|
+
`);if(/version code \d+ has already been used/i.test(r))return[r.match(/version code \d+ has already been used[^\n]*/i)?.[0]||"Version code has already been used.",`Package: ${i||"unknown"} | Track: ${t}`,"Build a new Android artifact with a higher versionCode, then submit that build.",`Recommended: ${p.nameLower} build --platform android --profile ${n} --auto-version`].join(`
|
|
1201
|
+
`);let o=r.match(/Google Api Error:[^\n]+/)||r.match(/Google Play API Error:[^\n]+/);return o?o[0]:r||"Google Play submission failed"}function ic(e){try{Q.existsSync(e)&&Q.rmSync(e,{recursive:!0,force:!0})}catch{}}function ee(e){console.log(ne.red(`\u274C ${e}`))}function de(e){console.log(ne.gray(`\u2022 ${e}`))}function dn(e){console.log(ne.green(`\u2713 ${e}`))}import{spinner as nc,log as ut,outro as rc}from"@clack/prompts";import fn from"chalk";import ao from"fs";import oc from"path";import{execSync as sc}from"child_process";import ac from"adm-zip";import lc from"axios";import{randomUUID as cc}from"crypto";async function lo(e){ut.info(fn.magenta("\u{1F680} Starting Over-The-Air (OTA) Update via Mach..."));let t=Ue();(!t||!t.projectId)&&(ut.error(`No ${p.configFileName} found or missing projectId. Run \`mach link\` first.`),process.exit(1));let i=t.projectId,n=e.branch||"production",r="1.0.0";try{r=JSON.parse(ao.readFileSync("./package.json","utf-8")).version||"1.0.0"}catch{ut.warn("Could not read package.json version. Defaulting to 1.0.0")}let o=nc();o.start(`Compiling JavaScript bundles for OTA (Channel: ${n}, Runtime: ${r})...`);try{sc("npx expo export --platform all",{stdio:"ignore"})}catch(c){o.stop("Compilation failed."),ut.error(`Failed to export JS bundles using Expo: ${c.message}`),process.exit(1)}o.message("Zipping artifact payload...");let s=oc.join(process.cwd(),"dist");ao.existsSync(s)||(o.stop("Missing dist folder."),ut.error("The `dist` directory was not created. Export failed."),process.exit(1));let l=new ac;l.addLocalFolder(s,"dist");let a=l.toBuffer();o.message("Uploading payload to Mach Cloud...");try{let c=cc(),d=await C.post("/builds/source-upload-url",{projectId:i,buildId:c});if(d.data.status!=="success")throw new Error("Could not secure upload bucket URL");let{uploadUrl:u,key:f}=d.data;await lc.put(u,a,{headers:{"Content-Type":"application/zip"},maxBodyLength:1/0,maxContentLength:1/0}),o.message(`Promoting Update to ${n}...`),await C.post("/updates/publish",{projectId:i,channelName:n,runtimeVersion:r,platform:"android",updateId:`${c}-android`,manifestKey:f}),await C.post("/updates/publish",{projectId:i,channelName:n,runtimeVersion:r,platform:"ios",updateId:`${c}-ios`,manifestKey:f}),o.stop("Update Live!"),rc(fn.green(`\u2713 OTA Update natively shipped to the '${n}' channel.`)),ut.info(fn.dim(`Any app running runtime '${r}' will download this bundle smoothly.`))}catch(c){o.stop("Update failed during Cloud Sync."),ut.error(`Upload error: ${c.message}`),process.exit(1)}}import{intro as dc,outro as co,log as bt}from"@clack/prompts";import He from"chalk";async function uo(){dc(He.blue(`${p.name} CLI - User Profile`));let e=Ie();if(!e){bt.warn(He.yellow("You are not logged in.")),bt.info(`Run \`${p.nameLower} login\` to authenticate.`),co();return}bt.info(`${He.bold("Logged in as:")} ${He.green(e.email)}`);try{await C.get("/projects");let i=Ie().token.split(".");if(i.length===3){let n=JSON.parse(Buffer.from(i[1],"base64").toString());if(n.exp){let r=new Date(n.exp*1e3),o=new Date,s=r.getTime()-o.getTime();if(s>0){let l=Math.round(s/6e4),a=(l/60).toFixed(1);bt.info(`${He.bold("Token status:")} Valid (Expires in ~${a}h / ${l}m)`)}else bt.warn(`${He.bold("Token status:")} ${He.red("Expired")} (Auto-refresh failed)`)}}}catch{bt.warn(`${He.bold("Token status:")} ${He.red("Unreachable")} (Session might be truly expired)${Xt}`)}co(He.blue("---"))}import{spawn as fc}from"child_process";import{log as tt}from"@clack/prompts";import Pe from"chalk";import mc from"fs";import uc from"net";async function pc(e){return new Promise(t=>{let i=uc.createServer();i.once("error",n=>{n.code==="EADDRINUSE"?t(!0):t(!1)}),i.once("listening",()=>{i.close(),t(!1)}),i.listen(e,"0.0.0.0")})}async function po(e,t=20){let i=e;for(;i<e+t;){if(!await pc(i))return i;i++}throw new Error(`Could not find an available port after ${t} attempts starting from ${e}.`)}var fo=async e=>{tt.info(Pe.blue(`Starting ${p.name} Dev Orchestrator...`));let t=Ue(),i=e.buildProfile||"development",n=t?Je(t,i):null,r={...process.env};if(t?.projectId)try{tt.info(Pe.dim(`Fetching managed secrets for profile: ${i}...`));let u=await C.get(`/projects/${t.projectId}/secrets/export?env=${i}`);u.data?.status==="success"&&u.data.secrets&&(Object.assign(r,u.data.secrets),tt.info(Pe.magenta(`\u2713 Injected secrets from ${p.name} Dashboard.`)))}catch{tt.warn("Could not fetch managed secrets. Running with local env only.")}t&&Object.assign(r,pt(t,p.envPrefix)),n&&(Object.assign(r,pt(n,`${p.envPrefix}PROFILE_`)),n.env&&Object.assign(r,n.env));let o=!1;try{let u=JSON.parse(mc.readFileSync("package.json","utf-8"));o=!!(u.dependencies?.expo||u.devDependencies?.expo)}catch{tt.warn("Could not parse package.json. Defaulting to Bare React Native mode.")}let s=Number(e.port||n?.port||8081),l=await po(s);l!==s&&tt.info(Pe.yellow(`Port ${s} is busy. ${p.name} is using ${l} instead.`));let a=process.platform==="win32"?"npx.cmd":"npx",c=[];if(o?(c=["expo","start","--port",String(l)],e.clear&&c.push("--clear"),e.tunnel&&c.push("--tunnel"),e.lan&&c.push("--lan"),e.localhost&&c.push("--localhost"),e.ios&&c.push("--ios"),e.android&&c.push("--android"),e.web&&c.push("--web")):(c=["react-native","start","--port",String(l)],e.clear&&c.push("--clear")),o){let u=[`${Pe.cyan("i")} open iOS simulator`,`${Pe.cyan("a")} open Android emulator/device`,`${Pe.cyan("w")} open web`,`${Pe.cyan("r")} reload app`];tt.info([Pe.bold("Launch controls"),...u.map(f=>` ${f}`),"",Pe.dim("Direct launch: mach start --ios | --android | --web"),Pe.dim(`Metro URL: http://localhost:${l}`)].join(`
|
|
1202
|
+
`))}else tt.info(Pe.dim(`Metro URL: http://localhost:${l}`));let d=fc(a,c,{stdio:"inherit",env:r});return new Promise((u,f)=>{d.on("exit",m=>{m===0?u():f(new Error(`Dev server exited with code ${m}`))}),d.on("error",m=>{f(m)})})};import{log as _e}from"@clack/prompts";import Te from"chalk";var mo=async e=>{let t=Ue();t||(_e.error(Te.red(`No ${p.configFileName} found in the current directory.`)),process.exit(1));let i=e.profile||"development",n=Je(t,i);if(e.json){console.log(JSON.stringify({project:t,resolved:n},null,2));return}_e.info(Te.bgBlue.white(` Resolved ${p.name} Config [${i}] `)),_e.info(Te.dim("----------------------------------------")),_e.info(`${Te.blue("Project ID:")} ${t.projectId}`),_e.info(`${Te.blue("Name:")} ${t.name}`),_e.info(`${Te.blue("Scheme:")} ${t.scheme}`),n?(_e.info(Te.dim(`
|
|
1203
|
+
Profile Settings:`)),_e.info(`${Te.cyan("Distribution:")} ${n.distribution||"none"}`),_e.info(`${Te.cyan("Development Client:")} ${n.developmentClient||"false"}`),n.env&&Object.keys(n.env).length>0&&(_e.info(Te.dim(`
|
|
1204
|
+
Environment Variables:`)),Object.entries(n.env).forEach(([r,o])=>{_e.info(` ${r}=${o}`)}))):_e.warn(`Profile '${i}' not found.`),_e.info(Te.dim("----------------------------------------"))};import{log as ke,spinner as jt,text as go,select as ho,confirm as gc,isCancel as Ft,cancel as Ht,outro as Gt,note as hc}from"@clack/prompts";import te from"chalk";import{execSync as yc}from"child_process";async function Sc(){try{let e=yc("xcrun devicectl list devices --json-output -",{stdio:["pipe","pipe","pipe"]}).toString();return(JSON.parse(e).result?.devices||[]).filter(n=>n.connectionProperties?.transportType==="wired"||n.connectionProperties?.transportType==="localNetwork").map(n=>({udid:n.identifier,name:n.deviceProperties?.name||"Unknown Device",model:n.hardwareProperties?.marketingName||"iPhone"}))}catch{return[]}}async function Ec(e){let t=e.udid,i=e.name,n="";if(!t){let o=jt();o.start("Scanning for connected iOS devices...");let s=await Sc();if(o.stop(s.length>0?`Found ${s.length} device(s)`:"No devices detected"),s.length===1)t=s[0].udid,i=i||s[0].name,n=s[0].model,ke.info(`Detected: ${te.bold(i)} (${te.dim(t.substring(0,12)+"...")})`);else if(s.length>1){let l=await ho({message:"Select a device to register:",options:s.map(c=>({value:c.udid,label:`${c.name} (${c.model})`,hint:c.udid.substring(0,12)+"..."}))});if(Ft(l)){Ht("Cancelled");return}t=l;let a=s.find(c=>c.udid===t);i=i||a.name,n=a.model}else{ke.info(te.dim("No connected devices found. Enter UDID manually."));let l=await go({message:"Device UDID:",placeholder:"00008101-XXXXXXXXXXXX",validate(a){if(a.length<10)return"UDID seems too short"}});if(Ft(l)){Ht("Cancelled");return}t=l}}if(!i){let o=await go({message:"Device name:",placeholder:"Nitesh's iPhone",validate(s){if(s.length===0)return"Name is required"}});if(Ft(o)){Ht("Cancelled");return}i=o}let r=jt();r.start("Registering device...");try{await C.post("/devices",{udid:t,name:i,platform:"ios",model:n||void 0,addedVia:"cli"}),r.stop(te.green("Device registered!")),ke.info(` ${te.bold("Name:")} ${i}`),ke.info(` ${te.bold("UDID:")} ${te.dim(t)}`)}catch(o){r.stop(te.red("Failed to register device")),ke.error(o.response?.data?.message||o.message)}Gt(te.blue("---"))}async function bc(){let e=jt();e.start("Fetching registered devices...");try{let i=(await C.get("/devices")).data.devices||[];if(e.stop(`${i.length} device(s) registered`),i.length===0){ke.info(te.dim(`No devices registered yet. Run \`${p.nameLower} device register\` to add one.`)),Gt(te.blue("---"));return}let n=i.map(r=>{let o=new Date(r.createdAt).toLocaleDateString();return` ${te.bold(r.name.padEnd(24))} ${te.dim(r.udid.padEnd(28))} ${te.cyan(r.addedVia.padEnd(10))} ${te.dim(o)}`});hc(` ${te.bold("Name".padEnd(24))} ${"UDID".padEnd(28)} ${"Via".padEnd(10)} Date
|
|
1158
1205
|
`+n.join(`
|
|
1159
|
-
`),"Registered Devices")}catch(t){e.stop(
|
|
1160
|
-
`),
|
|
1161
|
-
`),
|
|
1162
|
-
`),
|
|
1163
|
-
`),
|
|
1164
|
-
`);/__DEV__/.test(I)||i.push({id:`DBG-${String(n++).padStart(3,"0")}`,title:"Sensitive data in console log",description:"Console log may expose sensitive data (token, password, etc.) in production",severity:"medium",category:"debug",file:
|
|
1165
|
-
Running expo prebuild for deeper analysis...`));try{
|
|
1166
|
-
Skipping manifest/plist checks \u2014 no android/ios dirs. Use --prebuild to generate them.`)),o;for(let
|
|
1167
|
-
`)),s.length>0){
|
|
1168
|
-
`));for(let a of s)le.error(re.red(`${re.bold(a.name)} ${re.dim(`(${a.arch})`)}`)),le.info(re.dim(` PT_LOAD alignment: 2**${Math.log2(a.align)} (${a.align} bytes, needs 2**14 = ${qr})`))}return l.length>0&&(console.log(""),le.success(re.green(`${l.length} librar${l.length===1?"y":"ies"} correctly aligned (2**14 or higher).`))),console.log(""),s.length===0?(le.success(re.green.bold("ELF Verification Successful. APK is 16KB compatible.")),!0):(le.error(re.red.bold(`Found ${s.length} unaligned lib${s.length===1?"":"s"} (arm64-v8a/x86_64 libs need to be aligned).`)),console.log(""),le.info(re.yellow("To fix this:")),le.info(re.dim(" 1. Rebuild with NDK r28+ which defaults to 16KB page alignment")),le.info(re.dim(" 2. Or set -DANDROID_SUPPORT_FLEXIBLE_PAGE_SIZES=ON in CMake")),le.info(re.dim(" 3. Update third-party libraries that ship prebuilt .so files")),le.info(re.dim(" 4. After rebuilding: zipalign -p -f -v 16 input.apk output.apk")),console.log(""),le.info(re.dim("Reference: https://developer.android.com/guide/practices/page-sizes")),!1)}catch(r){return i.stop("Analysis failed."),le.error(re.red(`Failed to analyze APK: ${r.message}`)),!1}finally{try{He.rmSync(n,{recursive:!0,force:!0})}catch{}}}function Fl(e){let t=He.openSync(e,"r");try{let i=Buffer.alloc(64);if(He.readSync(t,i,0,64,0),!i.subarray(0,4).equals(Bl))return null;let n=i[4]===2,r=i[5]===1,o=(p,m)=>r?p.readUInt16LE(m):p.readUInt16BE(m),s=(p,m)=>r?p.readUInt32LE(m):p.readUInt32BE(m),l=(p,m)=>Number(r?p.readBigUInt64LE(m):p.readBigUInt64BE(m)),a,d,c;n?(a=l(i,32),d=o(i,54),c=o(i,56)):(a=s(i,28),d=o(i,42),c=o(i,44));let u=null;for(let p=0;p<c;p++){let m=Buffer.alloc(d);if(He.readSync(t,m,0,d,a+p*d),s(m,0)!==Ml)continue;let L;n?L=l(m,48):L=s(m,28),L>0&&(u===null||L<u)&&(u=L)}return u??0}catch{return null}finally{He.closeSync(t)}}function Qr(e){let t=[];if(!He.existsSync(e))return t;let i=He.readdirSync(e,{withFileTypes:!0});for(let n of i){let r=ut.join(e,n.name);n.isDirectory()?t.push(...Qr(r)):n.name.endsWith(".so")&&t.push(r)}return t}function Hl(e){return e.includes("arm64-v8a")?"arm64-v8a":e.includes("x86_64")?"x86_64":"unknown"}var io=async e=>{if(ye()||(Pe.error(Ce.red(`You are not logged in. Run \`${f.nameLower} login\` first.`)),process.exit(1)),e.apk){await Kl(e);return}let i=process.cwd(),n=ai.join(i,"package.json");Nt.existsSync(n)||(Pe.error(Ce.red("No package.json found. Run this command from a project root.")),process.exit(1));let r=JSON.parse(Nt.readFileSync(n,"utf-8")),o=!!(r.dependencies?.expo||r.devDependencies?.expo);e.json||(Pe.info(Ce.dim(`Project: ${r.name||"unknown"} v${r.version||"0.0.0"}`)),Pe.info(Ce.dim(`Type: ${o?"Expo":"Bare React Native"}`)),Pe.info(""));let s={json:e.json,fix:e.fix,category:e.category,severity:e.severity,prebuild:e.prebuild},l=await Yr(i,s);e.json?console.log(JSON.stringify(Xr(l,r),null,2)):Jr(l,e.severity);let a=l.some(c=>c.findings.some(u=>u.severity==="critical")),d=l.some(c=>c.findings.some(u=>u.severity==="high"));(a||d)&&process.exit(1)},eo=["16kb"];async function Kl(e){let t=e.category?.toLowerCase();t&&!eo.includes(t)&&(Pe.error(Ce.red(`Unknown APK check category: "${t}"`)),Pe.info(Ce.dim(`Available APK checks: ${eo.join(", ")}`)),process.exit(1));let i=await Vl(e.apk);i||process.exit(1);let n=!t,r=!1;(n||t==="16kb")&&(await Zr(i)||(r=!0)),r&&process.exit(1)}async function Vl(e){if(e.startsWith("build:")){let i=e.slice(6);return await zl(i)}if(e.startsWith("http://")||e.startsWith("https://"))return await no(e);let t=ai.resolve(e);return Nt.existsSync(t)?t:(Pe.error(Ce.red(`APK file not found: ${t}`)),null)}async function zl(e){let t=to();t.start(`Fetching APK from build ${e}...`);try{let i=await C.get(`/build/${e}`);if(i.data.status!=="success")throw new Error(i.data.message);let n=i.data.build;if(!n)throw new Error("Build not found");let r=n.artifacts?.find(o=>o.type?o.type==="apk":o.name?.endsWith(".apk")||o.url?.includes(".apk"));return!r||!r.url?(t.stop("No APK artifact found"),Pe.error(Ce.red("This build does not have an APK artifact.")),Pe.info(Ce.dim("Make sure the build produced an APK (not just an AAB).")),null):(t.stop(`Found build: ${n.buildId||e}`),await no(r.url))}catch(i){return t.stop("Failed to fetch build"),Pe.error(Ce.red(i.message)),null}}async function no(e){let t=to();t.start("Downloading APK...");try{let i=Nt.mkdtempSync(ai.join(jl.tmpdir(),`${f.nameLower}-audit-`)),n=ai.join(i,"app.apk"),r=await Gl.get(e,{responseType:"arraybuffer"});Nt.writeFileSync(n,r.data);let o=(r.data.length/(1024*1024)).toFixed(1);return t.stop(`Downloaded APK (${o} MB)`),n}catch(i){return t.stop("Download failed"),Pe.error(Ce.red(`Failed to download APK: ${i.message}`)),null}}var Jl=console.log;console.log=()=>{};Yl();console.log=Jl;me(fe.bgCyan.black(f.cliTag("Production Build Orchestrator")));var ql=Xl(import.meta.url),Zl=ql("../package.json"),q=new Wl;q.name(f.nameLower).description(`${f.name} CLI: Powerful Cloud Infrastructure Tools`).version(Zl.version).option("-y, --yes","Automatically answer yes to all prompts",!1).option("--quiet","Suppress non-essential output",!1);q.command("agent").description("Start local device discovery agent for the Install Hub (port 7070)").action(async()=>{await tr()});q.command("host").description("Setup AWS S3 static hosting and CloudFront").action(async()=>{me(fe.bgCyan.black(f.cliTag("Hosting"))),await Zi()});q.command("sitemap").description("Generate sitemap.xml from Expo Router app structure").option("-o, --output <path>","Output path for sitemap.xml","./public/sitemap.xml").action(async e=>{me(fe.bgCyan.black(f.cliTag("Sitemap Generator"))),await nn(e)});q.command("build").description("Run a build on a cloud provider (AWS Spot Instances)").argument("[platform]","Target platform (android, ios)").option("--platform <os>","Target platform alias (android, ios) [Optional]").option("--repo <url>","Git Repository URL").option("--branch <name>","Git Branch").option("--ami <id>","AMI ID").option("--bucket <name>","S3 Bucket for artifacts").option("--region <region>","AWS Region").option("--aws-profile <name>","AWS Credentials Profile").option("-p, --build-profile <name>","Build Profile (e.g. production, staging)","production").option("--profile <name>","Build Profile (alias for --build-profile)").option("--dry-run","Generate User Data script without launching").option("--keep-instance","Do not terminate the instance after build").option("--subnet <id>","VPC Subnet ID to launch the instance in").option("--security-group <id>","VPC Security Group ID to use").option("--ssh-host <host>","Remote host for iOS build (SSH)").option("--ssh-user <user>","SSH username for remote host").option("--ssh-key <path>","Path to private SSH key for remote host").option("--ios-scheme <scheme>","iOS Scheme to build").option("--ios-team-id <id>","Apple Development Team ID").option("--ios-configuration <config>","Xcode configuration (Release/Debug)").option("--ios-export-method <method>","Export method (ad-hoc, app-store, development, enterprise)").option("--ios-api-key-id <id>","App Store Connect API Key ID").option("--ios-api-key-issuer <id>","App Store Connect API Key Issuer ID").option("--ios-api-key-path <path>","Path to App Store Connect API Key (.p8) file").option("--simulator","Build for iOS Simulator (no signing required)").addOption(new pt("--build-id <id>","Internal build ID").hideHelp()).addOption(new pt("--project-id <id>","Internal project ID").hideHelp()).addOption(new pt("--fail-only","Internal: mark an existing build failed").hideHelp()).addOption(new pt("--error <message>","Internal failure message").hideHelp()).option("--local","Run build on local machine").option("--auto-version","Automatically fetch and increment Android versionCode or iOS buildNumber from the store").option("--verbose","Enable verbose logging").option("--json-output <path>","Write build metadata JSON to a file for CI/CD").option("--maestro","Queue a managed Maestro test run after a successful build").option("--maestro-flows <path>","Maestro flow file or directory (default: .maestro)").option("--maestro-device <device>","Managed Maestro device profile").option("--maestro-retries <n>","Retries for the Maestro run","1").option("--maestro-record","Enable screen recording where supported").option("-y, --yes","Automatically answer yes to all prompts",!1).option("--quiet","Suppress non-essential output",!1).action(async(e,t)=>{let i=q.opts();t.yes=t.yes||i.yes,t.quiet=t.quiet||i.quiet,t.platform=e||t.platform,t.buildProfile=t.profile||t.buildProfile,t.quiet||me(fe.bgCyan.black(f.cliTag("Cloud Build"))),await Vt(t)});q.command("maestro").description("Run managed Maestro tests for an existing Mach build or artifact").option("--platform <os>","Target platform (android/ios)").option("-p, --profile <name>","Build profile to resolve when using --latest","production").option("--latest","Use the latest successful build for the platform/profile").option("--build-id <id>","Use a specific Mach build ID").option("--build-url <url>","Use a Mach build URL").option("--artifact-url <url>","Use a direct APK or iOS simulator app artifact URL").option("--maestro-flows <path>","Maestro flow file or directory (default: .maestro)").option("--maestro-device <device>","Managed Maestro device profile").option("--maestro-retries <n>","Retries for the Maestro run","1").option("--maestro-record","Enable screen recording where supported").option("--json-output <path>","Write test run metadata JSON to a file for CI/CD").action(async e=>{me(fe.bgCyan.black(f.cliTag("Maestro Testing"))),await xn(e)});q.command("update").description("Deploy an Over-The-Air (OTA) update to your live channel").option("--branch <name>","Channel or Branch to deploy to (e.g., production)","production").action(async e=>{me(fe.bgCyan.black(f.cliTag("OTA Update"))),await Er(e)});q.command("submit").description("Automated Store Submission (App Store / Google Play)").option("--platform <os>","Target platform (ios/android)").option("-p, --profile <name>","Build/submission profile to submit from (e.g. production, preprod)").option("--track <track>","Google Play Track (internal, alpha, beta, production)").option("--release-status <status>","Google Play release status (completed, draft, halted, inProgress)").option("--rollout <fraction>","Google Play staged rollout fraction for inProgress releases (example: 0.1)").option("--changes-not-sent-for-review","Commit Google Play changes without automatically sending them for review").option("--ssh-host <host>","Remote macOS host for iOS submission").option("--ssh-user <user>","SSH username for remote iOS submission").option("--ssh-key <path>","Path to private SSH key for remote iOS submission").option("--credential-id <id>","Service credential ID to use when multiple submission credentials exist").option("--local","Run submission on this machine (internal runner mode for iOS)").addOption(new pt("--submit-id <id>","Internal submission ID").hideHelp()).addOption(new pt("--project-id <id>","Internal project ID").hideHelp()).option("--json-output <path>","Write submission metadata JSON to a file for CI/CD").option("--latest","Use the latest successful build for submission").option("--build-id <id>","Use a specific build ID for submission").action(async e=>{let t=q.opts();e.quiet=e.quiet||t.quiet,e.yes=e.yes||t.yes,me(fe.bgCyan.black(f.cliTag("Store Submission"))),await hr(e)});q.command("login").description(`Login to ${f.name} Dashboard`).action(async()=>{me(fe.bgCyan.black(f.cliTag("Login"))),await or()});q.command("link").description(`Link local directory to a ${f.name} Project`).action(async()=>{me(fe.bgCyan.black(f.cliTag("Link Project"))),await ar()});q.command("me").description("Display currently logged in user details").action(async()=>{await Ar()});q.command("init").description(`Create a new ${f.name} Project`).action(async()=>{me(fe.bgCyan.black(f.cliTag("Init Project"))),await lr()});q.command("env").description("Manage Environment Variables").argument("<action>","Action to perform: set or list").argument("[args...]","Key=Value pairs for set action").action(async(e,t)=>{me(fe.bgCyan.black(f.cliTag("Env Manager"))),await pr(e,t)});q.command("start").description("Start the development server (Metro)").option("-p, --build-profile <name>","Build profile (e.g. development, staging)","development").option("--tunnel","Use ngrok tunnel").option("--lan","Use LAN IP").option("--localhost","Use localhost").option("-c, --clear","Clear Metro cache").option("--port <number>","Port to listen on").option("--ios","Start on iOS").option("--android","Start on Android").option("--web","Start on Web").action(async e=>{me(fe.bgCyan.black(f.cliTag("Dev Server"))),await _r(e)});q.command("config").description("Show resolved configuration for a profile").option("-p, --profile <name>","Build profile to resolve","development").option("--json","Output as JSON").action(async e=>{await Pr(e)});q.command("credentials").description("Unified, interactive credential management (iOS/Android)").option("-p, --profile <name>","Build profile (production, staging, development)").option("--force","Force recreate certificates (nuke existing on Apple Portal)",!1).action(async e=>{let{credentialsMainCommand:t}=await import("./credentials-Y4SOYAM2.js");await t(e)});q.command("credentials:setup").description("Automated credential provisioning (iOS/Android) [Legacy]").requiredOption("--platform <os>","Platform: ios or android").option("--profile <name>","Build profile (production, staging, development)").option("--bundle-id <id>","Bundle ID / Package Name (optional, auto-detected)").option("--team-id <id>","Apple Team ID (iOS only)").option("--key-alias <alias>","Android keystore alias (optional, auto-generated)").option("--aws-profile <name>","AWS Credentials Profile (for S3 storage)").option("--force","Force recreate certificates (nuke existing on Apple Portal)",!1).action(async e=>{me(fe.bgCyan.black(f.cliTag("Credentials Setup"))),await mt(e),ro(fe.green("Done!"))});q.command("credentials:service").description("Upload Service Credentials (ASC API Key / Google Service JSON) [Legacy]").requiredOption("--platform <os>","Platform: ios or android").option("--file <path>","Path to credential file (.p8 or .json)").option("--issuer-id <id>","ASC API Key Issuer ID (iOS only)").option("--key-id <id>","ASC API Key ID (iOS only)").option("--bundle-id <id>","Bundle identifier / Android package name to attach this service credential to").option("--package-name <name>","Android package name to attach this service credential to").option("-p, --profile <name>","Build profile to resolve package/bundle identifier from config").action(async e=>{me(fe.bgCyan.black(f.cliTag("Service Credentials"))),await Xi(e),ro(fe.green("Done!"))});var Ki=q.command("device").description("Manage registered iOS test devices");Ki.command("register").description("Register a connected iOS device or enter UDID manually").option("--udid <udid>","Device UDID (skip auto-detection)").option("--name <name>","Device name").action(async e=>{await qt("register",e)});Ki.command("list").description("List all registered devices").action(async()=>{await qt("list",{})});Ki.command("remove").description("Remove a registered device").option("--udid <udid>","Device UDID to remove").action(async e=>{await qt("remove",e)});q.command("audit").description("Run automated security audit on the project or APK").option("--apk <path>","Path to APK file (runs APK diagnostics like 16KB alignment)").option("--json","Output results as JSON (for CI/CD)").option("--fix","Auto-apply fixes where possible").option("--category <name>","Run only a specific check category (e.g. 16kb, permissions, secrets)").option("--severity <level>","Minimum severity to display (critical, high, medium, low, info)").option("--prebuild","Run expo prebuild for deeper manifest/plist analysis").action(async e=>{me(fe.bgCyan.black(f.cliTag(e.apk?"APK Audit":"Security Audit"))),await io(e)});var Ql=new Set(["login"]);q.hook("preAction",(e,t)=>{let i=t.name();Ql.has(i)||Wi()});q.on("command:*",()=>{console.error(`Invalid command: %s
|
|
1169
|
-
See --help for a list of available commands.`,
|
|
1206
|
+
`),"Registered Devices")}catch(t){e.stop(te.red("Failed to fetch devices")),ke.error(t.response?.data?.message||t.message)}Gt(te.blue("---"))}async function Ac(e){let t=e.udid;if(!t){let r=jt();r.start("Fetching registered devices...");try{let s=(await C.get("/devices")).data.devices||[];if(r.stop(`${s.length} device(s) found`),s.length===0){ke.info(te.dim("No devices to remove.")),Gt(te.blue("---"));return}let l=await ho({message:"Select device to remove:",options:s.map(a=>({value:a.udid,label:a.name,hint:a.udid.substring(0,12)+"..."}))});if(Ft(l)){Ht("Cancelled");return}t=l}catch(o){r.stop(te.red("Failed to fetch devices")),ke.error(o.response?.data?.message||o.message);return}}let i=await gc({message:`Remove device ${te.dim(t.substring(0,12)+"...")}?`});if(Ft(i)||!i){Ht("Cancelled");return}let n=jt();n.start("Removing device...");try{await C.delete(`/devices/${encodeURIComponent(t)}`),n.stop(te.green("Device removed"))}catch(r){n.stop(te.red("Failed to remove device")),ke.error(r.response?.data?.message||r.message)}Gt(te.blue("---"))}async function Si(e,t){switch(e){case"register":await Ec(t);break;case"list":await bc();break;case"remove":await Ac(t);break;default:ke.error(`Unknown action: ${e}`)}}import{log as De,spinner as Vo}from"@clack/prompts";import Le from"chalk";import Di from"path";import zt from"fs";import td from"os";import id from"axios";var ve=(o=>(o.CRITICAL="critical",o.HIGH="high",o.MEDIUM="medium",o.LOW="low",o.INFO="info",o))(ve||{}),xe=(a=>(a.PERMISSIONS="permissions",a.SECRETS="secrets",a.DEPENDENCIES="dependencies",a.STORAGE="storage",a.NETWORK="network",a.DEBUG="debug",a.MANIFEST="manifest",a.ATS="ats",a))(xe||{});import{spinner as xo,log as Vt}from"@clack/prompts";import we from"chalk";import{execSync as Vc}from"child_process";import Lo from"fs";import Mo from"path";import it from"fs";import Kt from"path";import{execSync as Ic}from"child_process";var yo={"android.permission.READ_PHONE_STATE":{severity:"high",description:"Can read phone number, IMEI, carrier info"},"android.permission.CALL_PHONE":{severity:"high",description:"Can make calls without user interaction"},"android.permission.SEND_SMS":{severity:"high",description:"Can send SMS without user interaction"},"android.permission.READ_SMS":{severity:"high",description:"Can read user SMS messages"},"android.permission.READ_CONTACTS":{severity:"medium",description:"Can read user contacts"},"android.permission.WRITE_CONTACTS":{severity:"medium",description:"Can modify user contacts"},"android.permission.READ_CALL_LOG":{severity:"high",description:"Can read call history"},"android.permission.CAMERA":{severity:"medium",description:"Camera access"},"android.permission.RECORD_AUDIO":{severity:"medium",description:"Microphone access"},"android.permission.ACCESS_FINE_LOCATION":{severity:"medium",description:"Precise GPS location"},"android.permission.ACCESS_COARSE_LOCATION":{severity:"medium",description:"Approximate location"},"android.permission.ACCESS_BACKGROUND_LOCATION":{severity:"high",description:"Background location tracking"},"android.permission.READ_EXTERNAL_STORAGE":{severity:"medium",description:"Read files on device"},"android.permission.WRITE_EXTERNAL_STORAGE":{severity:"medium",description:"Write files on device"},"android.permission.READ_MEDIA_IMAGES":{severity:"low",description:"Read photos"},"android.permission.READ_MEDIA_VIDEO":{severity:"low",description:"Read videos"},"android.permission.SYSTEM_ALERT_WINDOW":{severity:"high",description:"Draw overlays on other apps"},"android.permission.REQUEST_INSTALL_PACKAGES":{severity:"high",description:"Can install APKs"}},_c={NSCameraUsageDescription:{severity:"medium",description:"Camera access declared"},NSMicrophoneUsageDescription:{severity:"medium",description:"Microphone access declared"},NSLocationWhenInUseUsageDescription:{severity:"medium",description:"Location (in-use) declared"},NSLocationAlwaysUsageDescription:{severity:"high",description:"Background location declared"},NSContactsUsageDescription:{severity:"medium",description:"Contacts access declared"},NSCalendarsUsageDescription:{severity:"low",description:"Calendar access declared"},NSPhotoLibraryUsageDescription:{severity:"low",description:"Photo library access declared"}};function wc(e){try{let i=Ic("npx expo config --type introspect --json 2>/dev/null",{cwd:e,encoding:"utf-8",timeout:3e4});return JSON.parse(i)}catch{}let t=Kt.join(e,"app.json");if(it.existsSync(t))try{let i=JSON.parse(it.readFileSync(t,"utf-8"));return i.expo||i}catch{}return null}function $c(e){let t=[],i=Kt.join(e,"node_modules");if(!it.existsSync(i))return t;let n=/<uses-permission\s+android:name="([^"]+)"/g;function r(o,s){let l=Kt.join(o,"android","src","main","AndroidManifest.xml");if(!it.existsSync(l))return;let a=it.readFileSync(l,"utf-8"),c;for(;(c=n.exec(a))!==null;)t.push({pkg:s,permission:c[1]});n.lastIndex=0}for(let o of it.readdirSync(i)){if(o.startsWith("."))continue;let s=Kt.join(i,o);if(o.startsWith("@")){if(!it.statSync(s).isDirectory())continue;for(let l of it.readdirSync(s))r(Kt.join(s,l),`${o}/${l}`)}else r(s,o)}return t}async function So(e,t){let i=[],n=1,r=wc(e),o=r?.android?.permissions||[],s=r?.android?.blockedPermissions||[];for(let c of o){let d=yo[c];d&&i.push({id:`PERM-${String(n++).padStart(3,"0")}`,title:`${c.split(".").pop()} declared`,description:d.description,severity:d.severity,category:"permissions",file:"app.config.ts",recommendation:"Remove from permissions if not needed, or add justification."})}let l=$c(e);for(let{pkg:c,permission:d}of l){let u=yo[d];u&&(s.includes(d)||o.includes(d)||i.push({id:`PERM-${String(n++).padStart(3,"0")}`,title:`${d.split(".").pop()} injected by ${c}`,description:`${u.description}. Auto-injected via ${c} AndroidManifest.xml`,severity:u.severity,category:"permissions",file:`node_modules/${c}/android/src/main/AndroidManifest.xml`,recommendation:`Add "${d}" to blockedPermissions if not needed.`,autoFixable:!0}))}let a=r?.ios?.infoPlist||{};for(let[c,d]of Object.entries(_c))c in a&&i.push({id:`PERM-${String(n++).padStart(3,"0")}`,title:`iOS: ${c} declared`,description:d.description,severity:d.severity,category:"permissions",file:"app.config.ts",recommendation:`Remove ${c} from infoPlist if the app does not use this capability.`});return{category:"permissions",label:"Permission Audit",findings:i,durationMs:0}}import mn from"fs";import Ei from"path";var Pc=[{id:"SEC-001",pattern:/(['"`])(?:sk|pk)_(?:live|test)_[a-zA-Z0-9]{20,}\1/g,severity:"critical",label:"Stripe API Key"},{id:"SEC-002",pattern:/(['"`])AIza[0-9A-Za-z\-_]{35}\1/g,severity:"high",label:"Google API Key"},{id:"SEC-003",pattern:/(['"`])AKIA[0-9A-Z]{16}\1/g,severity:"critical",label:"AWS Access Key ID"},{id:"SEC-004",pattern:/-----BEGIN (?:RSA |EC )?PRIVATE KEY-----/g,severity:"critical",label:"Private key in source"},{id:"SEC-005",pattern:/(?:ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9_]{36,}/g,severity:"high",label:"GitHub Token"},{id:"SEC-006",pattern:/xox[bpors]-[a-zA-Z0-9-]{10,}/g,severity:"high",label:"Slack Token"},{id:"SEC-007",pattern:/(?:password|secret|apikey|api_key)\s*[:=]\s*['"`][^'"`\n]{8,}['"`]/gi,severity:"high",label:"Hardcoded credential"}],vc=new Set([".ts",".tsx",".js",".jsx"]),Dc=new Set(["node_modules",".expo",".git","android","ios","dist","build","__tests__","__mocks__"]);function Eo(e){let t=[],i=mn.readdirSync(e,{withFileTypes:!0});for(let n of i){if(Dc.has(n.name))continue;let r=Ei.join(e,n.name);n.isDirectory()?t.push(...Eo(r)):vc.has(Ei.extname(n.name))&&t.push(r)}return t}function Rc(e){let t=e.trim();return t.startsWith("//")||t.startsWith("*")||t.startsWith("/*")}function Oc(e){return/process\.env\./i.test(e)||/import\.meta\.env/i.test(e)}async function bo(e,t){let i=[],n=Ei.join(e,"src"),r=mn.existsSync(n)?n:e,o=Eo(r);for(let s of o){let a=mn.readFileSync(s,"utf-8").split(`
|
|
1207
|
+
`),c=Ei.relative(e,s);for(let d=0;d<a.length;d++){let u=a[d];if(!Rc(u)&&!Oc(u))for(let{id:f,pattern:m,severity:I,label:L}of Pc)m.lastIndex=0,m.test(u)&&i.push({id:f,title:L,description:`Potential ${L.toLowerCase()} found in source code`,severity:I,category:"secrets",file:c,line:d+1,recommendation:`Move to environment variables or a secrets manager. Use \`${p.nameLower} env set\` for managed secrets.`})}}return{category:"secrets",label:"Secrets Detection",findings:i,durationMs:0}}import{execSync as Cc}from"child_process";var Nc={critical:"critical",high:"high",moderate:"medium",low:"low",info:"info"};async function Ao(e,t){let i=[],n=1,r;try{r=Cc("npm audit --json 2>/dev/null",{cwd:e,encoding:"utf-8",timeout:6e4})}catch(l){if(r=l.stdout||"",!r)return{category:"dependencies",label:"Dependency CVEs",findings:[],durationMs:0,error:"Failed to run npm audit. Ensure npm is available and dependencies are installed."}}let o;try{o=JSON.parse(r)}catch{return{category:"dependencies",label:"Dependency CVEs",findings:[],durationMs:0,error:"Failed to parse npm audit output."}}let s=o.vulnerabilities||{};for(let[l,a]of Object.entries(s)){let c=Nc[a.severity]||"info",d=Array.isArray(a.via)?a.via.map(u=>typeof u=="string"?u:u.title||u.name).join(", "):String(a.via);i.push({id:`DEP-${String(n++).padStart(3,"0")}`,title:`${l} \u2014 ${a.severity}`,description:`Via: ${d}. Range: ${a.range||"unknown"}`,severity:c,category:"dependencies",recommendation:a.fixAvailable?`Run \`npm audit fix\` or update ${l} to a patched version.`:"No fix available yet. Monitor for updates or evaluate alternatives.",autoFixable:!!a.fixAvailable})}return{category:"dependencies",label:"Dependency CVEs",findings:i,durationMs:0}}import bi from"fs";import Ai from"path";var Tc=/(?:token|password|credential|secret|apiKey|api_key|session|auth|jwt|refresh_token|access_token|private_key|pin|otp)/i,Io=/AsyncStorage\s*\.\s*(?:setItem|mergeItem)\s*\(\s*['"`]([^'"`]+)['"`]/g,kc=/from\s+['"]@react-native-async-storage\/async-storage['"]|from\s+['"]react-native['"].*AsyncStorage/,xc=new Set([".ts",".tsx",".js",".jsx"]),Lc=new Set(["node_modules",".expo",".git","android","ios","dist","build"]);function _o(e){let t=[];if(!bi.existsSync(e))return t;let i=bi.readdirSync(e,{withFileTypes:!0});for(let n of i){if(Lc.has(n.name))continue;let r=Ai.join(e,n.name);n.isDirectory()?t.push(..._o(r)):xc.has(Ai.extname(n.name))&&t.push(r)}return t}async function wo(e,t){let i=[],n=1,r=Ai.join(e,"src"),o=bi.existsSync(r)?r:e,s=_o(o);for(let l of s){let a=bi.readFileSync(l,"utf-8");if(!kc.test(a))continue;let c=a.split(`
|
|
1208
|
+
`),d=Ai.relative(e,l);for(let u=0;u<c.length;u++){let f=c[u];Io.lastIndex=0;let m;for(;(m=Io.exec(f))!==null;){let I=m[1];Tc.test(I)&&i.push({id:`STOR-${String(n++).padStart(3,"0")}`,title:`AsyncStorage used for "${I}"`,description:`Sensitive data key "${I}" stored in AsyncStorage (unencrypted).`,severity:"high",category:"storage",file:d,line:u+1,recommendation:"Use expo-secure-store (SecureStore) for sensitive data instead of AsyncStorage."})}}}return{category:"storage",label:"Insecure Storage",findings:i,durationMs:0}}import Ii from"fs";import _i from"path";var $o=/['"`](http:\/\/(?!localhost|127\.0\.0\.1|10\.|192\.168\.|0\.0\.0\.0|172\.(?:1[6-9]|2\d|3[01])\.)[^'"`\s]+)['"`]/g,Mc=/\/api\/|\/v[0-9]+\/|\/graphql|\/rest\//i,Uc=new Set([".ts",".tsx",".js",".jsx"]),Bc=new Set(["node_modules",".expo",".git","android","ios","dist","build","__tests__","__mocks__"]);function Po(e){let t=[];if(!Ii.existsSync(e))return t;let i=Ii.readdirSync(e,{withFileTypes:!0});for(let n of i){if(Bc.has(n.name))continue;let r=_i.join(e,n.name);n.isDirectory()?t.push(...Po(r)):Uc.has(_i.extname(n.name))&&t.push(r)}return t}async function vo(e,t){let i=[],n=1,r=_i.join(e,"src"),o=Ii.existsSync(r)?r:e,s=Po(o);for(let l of s){let c=Ii.readFileSync(l,"utf-8").split(`
|
|
1209
|
+
`),d=_i.relative(e,l);for(let u=0;u<c.length;u++){let f=c[u],m=f.trim();if(m.startsWith("//")||m.startsWith("*"))continue;$o.lastIndex=0;let I;for(;(I=$o.exec(f))!==null;){let L=I[1],P=Mc.test(L);i.push({id:`NET-${String(n++).padStart(3,"0")}`,title:`Insecure HTTP URL${P?" (API endpoint)":""}`,description:`Plain HTTP URL found: ${L}`,severity:P?"high":"medium",category:"network",file:d,line:u+1,recommendation:"Use HTTPS instead of HTTP for all network requests."})}}}return{category:"network",label:"HTTP URLs",findings:i,durationMs:0}}import wi from"fs";import $i from"path";var Do=/(?:debug|debugMode|devMode|enableDebug)\s*[:=]\s*true/gi,Ro=/console\.(?:log|warn|info|debug)\s*\([^)]*(?:token|password|secret|credential|key|auth)/gi,Fc=new Set([".ts",".tsx",".js",".jsx"]),Hc=new Set(["node_modules",".expo",".git","android","ios","dist","build","__tests__","__mocks__"]);function Oo(e){let t=[];if(!wi.existsSync(e))return t;let i=wi.readdirSync(e,{withFileTypes:!0});for(let n of i){if(Hc.has(n.name))continue;let r=$i.join(e,n.name);n.isDirectory()?t.push(...Oo(r)):Fc.has($i.extname(n.name))&&t.push(r)}return t}async function Co(e,t){let i=[],n=1,r=$i.join(e,"src"),o=wi.existsSync(r)?r:e,s=Oo(o);for(let l of s){let c=wi.readFileSync(l,"utf-8").split(`
|
|
1210
|
+
`),d=$i.relative(e,l);for(let u=0;u<c.length;u++){let f=c[u],m=f.trim();if(!(m.startsWith("//")||m.startsWith("*"))&&(Do.lastIndex=0,Do.test(f)&&i.push({id:`DBG-${String(n++).padStart(3,"0")}`,title:"Hardcoded debug flag",description:"Debug/dev mode enabled in source code",severity:"medium",category:"debug",file:d,line:u+1,recommendation:"Use __DEV__ or environment variables instead of hardcoded debug flags."}),Ro.lastIndex=0,Ro.test(f))){let I=c.slice(Math.max(0,u-3),u).join(`
|
|
1211
|
+
`);/__DEV__/.test(I)||i.push({id:`DBG-${String(n++).padStart(3,"0")}`,title:"Sensitive data in console log",description:"Console log may expose sensitive data (token, password, etc.) in production",severity:"medium",category:"debug",file:d,line:u+1,recommendation:"Wrap in __DEV__ check or remove sensitive data from console output."})}}}return{category:"debug",label:"Debug/Dev Flags",findings:i,durationMs:0}}import No from"fs";import gn from"path";var jc=new Set(["androidx.work.impl.background.systemjob.SystemJobService","androidx.work.impl.diagnostics.DiagnosticsReceiver","com.google.firebase.iid.FirebaseInstanceIdReceiver","com.google.android.gms.auth.api.signin.RevocationBoundService","androidx.profileinstaller.ProfileInstallReceiver","com.google.firebase.messaging.FirebaseMessagingService","com.google.android.gms.measurement.AppMeasurementService","com.google.android.gms.measurement.AppMeasurementJobService"]);function Gc(e){let t=[gn.join(e,"android","app","src","main","AndroidManifest.xml"),gn.join(e,"android","AndroidManifest.xml")];for(let i of t)if(No.existsSync(i))return i;return null}async function To(e,t){let i=[],n=1,r=Gc(e);if(!r)return{category:"manifest",label:"Android Manifest",findings:[],durationMs:0,error:"No AndroidManifest.xml found. Run with --prebuild or run `expo prebuild` first."};let o=No.readFileSync(r,"utf-8"),s=gn.relative(e,r),l=/<(activity|service|receiver|provider)\s+([^>]*?)(?:\/>|>)/gs,a;for(;(a=l.exec(o))!==null;){let c=a[1],d=a[2],f=d.match(/android:name="([^"]+)"/)?.[1]||"unknown";if(jc.has(f))continue;let m=/android:exported="true"/.test(d),I=/android:permission="/.test(d);m&&!I&&i.push({id:`MAN-${String(n++).padStart(3,"0")}`,title:`Exported ${c}: ${f.split(".").pop()}`,description:`${f} is exported=true without android:permission protection`,severity:"medium",category:"manifest",file:s,recommendation:'Set android:exported="false" or add an android:permission attribute.'})}return/android:allowBackup="true"/.test(o)&&i.push({id:`MAN-${String(n++).padStart(3,"0")}`,title:"allowBackup is enabled",description:'android:allowBackup="true" allows data extraction via ADB backup',severity:"medium",category:"manifest",file:s,recommendation:'Set android:allowBackup="false" via expo-build-properties plugin.',autoFixable:!0}),/android:debuggable="true"/.test(o)&&i.push({id:`MAN-${String(n++).padStart(3,"0")}`,title:"App is debuggable",description:'android:debuggable="true" allows attaching a debugger in production',severity:"critical",category:"manifest",file:s,recommendation:"Ensure debuggable is false for production builds. This is usually set automatically for release builds."}),{category:"manifest",label:"Android Manifest",findings:i,durationMs:0}}import Pi from"fs";import hn from"path";function Kc(e){let t=hn.join(e,"ios");if(!Pi.existsSync(t))return null;let i=Pi.readdirSync(t,{withFileTypes:!0});for(let n of i){if(!n.isDirectory()||n.name==="Pods"||n.name.startsWith("."))continue;let r=hn.join(t,n.name,"Info.plist");if(Pi.existsSync(r))return r}return null}async function ko(e,t){let i=[],n=1,r=Kc(e);if(!r)return{category:"ats",label:"iOS ATS Config",findings:[],durationMs:0,error:"No Info.plist found. Run with --prebuild or run `expo prebuild` first."};let o=Pi.readFileSync(r,"utf-8"),s=hn.relative(e,r),l=o.match(/<key>NSAppTransportSecurity<\/key>\s*<dict>([\s\S]*?)<\/dict>/);if(l){let a=l[1];/<key>NSAllowsArbitraryLoads<\/key>\s*<true\s*\/>/.test(a)&&i.push({id:`ATS-${String(n++).padStart(3,"0")}`,title:"ATS disabled \u2014 NSAllowsArbitraryLoads",description:"App Transport Security is completely disabled. All HTTP connections are allowed.",severity:"critical",category:"ats",file:s,recommendation:"Remove NSAllowsArbitraryLoads or set to false. Use domain-specific exceptions only if absolutely necessary."});let c=a.match(/<key>NSExceptionDomains<\/key>\s*<dict>([\s\S]*?)<\/dict>/);if(c){let d=c[1].match(/<key>([^<]+)<\/key>/g);if(d)for(let u of d){let f=u.replace(/<\/?key>/g,"");f!=="NSExceptionDomains"&&i.push({id:`ATS-${String(n++).padStart(3,"0")}`,title:`ATS exception: ${f}`,description:`ATS exception configured for ${f}`,severity:"low",category:"ats",file:s,recommendation:`Verify that the ATS exception for ${f} is necessary. Use HTTPS where possible.`})}}}return{category:"ats",label:"iOS ATS Config",findings:i,durationMs:0}}var zc=[{category:"permissions",label:"Permission Audit",fn:So,requiresPrebuild:!1},{category:"secrets",label:"Secrets Detection",fn:bo,requiresPrebuild:!1},{category:"dependencies",label:"Dependency CVEs",fn:Ao,requiresPrebuild:!1},{category:"storage",label:"Insecure Storage",fn:wo,requiresPrebuild:!1},{category:"network",label:"HTTP URLs",fn:vo,requiresPrebuild:!1},{category:"debug",label:"Debug/Dev Flags",fn:Co,requiresPrebuild:!1},{category:"manifest",label:"Android Manifest",fn:To,requiresPrebuild:!0},{category:"ats",label:"iOS ATS Config",fn:ko,requiresPrebuild:!0}];async function Uo(e,t){let i=zc;t.category&&(i=i.filter(s=>s.category===t.category),i.length===0&&(Vt.error(we.red(`Unknown category: ${t.category}`)),Vt.info(we.dim(`Available: ${Object.values(xe).join(", ")}`)),process.exit(1)));let n=i.filter(s=>!s.requiresPrebuild),r=i.filter(s=>s.requiresPrebuild),o=[];for(let s of n){let l=xo();l.start(we.dim(`Running ${s.label}...`));try{let a=Date.now(),c=await s.fn(e,t);c.durationMs=Date.now()-a,o.push(c);let d=c.findings.length;l.stop(d>0?we.yellow(`${s.label} \u2014 ${d} finding(s)`):we.green(`${s.label} \u2014 clean`))}catch(a){l.stop(we.red(`${s.label} \u2014 error`)),o.push({category:s.category,label:s.label,findings:[],durationMs:0,error:a.message})}}if(r.length>0){let s=Mo.join(e,"android"),l=Mo.join(e,"ios"),a=Lo.existsSync(s)||Lo.existsSync(l);if(!a&&t.prebuild){t.json||Vt.info(we.dim(`
|
|
1212
|
+
Running expo prebuild for deeper analysis...`));try{Vc("npx expo prebuild --no-install",{cwd:e,stdio:"pipe"})}catch{return Vt.warn(we.yellow("Prebuild failed \u2014 skipping manifest/plist checks.")),o}}else if(!a)return t.json||Vt.info(we.dim(`
|
|
1213
|
+
Skipping manifest/plist checks \u2014 no android/ios dirs. Use --prebuild to generate them.`)),o;for(let c of r){let d=xo();d.start(we.dim(`Running ${c.label}...`));try{let u=Date.now(),f=await c.fn(e,t);f.durationMs=Date.now()-u,o.push(f);let m=f.findings.length;d.stop(m>0?we.yellow(`${c.label} \u2014 ${m} finding(s)`):we.green(`${c.label} \u2014 clean`))}catch(u){d.stop(we.red(`${c.label} \u2014 error`)),o.push({category:c.category,label:c.label,findings:[],durationMs:0,error:u.message})}}}return o}import fe from"chalk";import{log as ue}from"@clack/prompts";var At={critical:fe.bgRed.white.bold,high:fe.red.bold,medium:fe.yellow.bold,low:fe.blue,info:fe.dim},vi={critical:0,high:1,medium:2,low:3,info:4};function Wc(e,t){if(!t)return!0;let i=vi[t];return i===void 0?!0:vi[e]<=i}function Bo(e,t){let i=0,n={critical:0,high:0,medium:0,low:0,info:0};for(let s of e){let l=s.findings.filter(c=>Wc(c.severity,t));if(l.length===0&&!s.error)continue;if(ue.info(""),ue.info(fe.bold(` ${s.label}`)+fe.dim(` ${l.length} finding(s)`)),ue.info(fe.dim(" "+"\u2500".repeat(60))),s.error){ue.error(fe.red(` Error: ${s.error}`));continue}let a=[...l].sort((c,d)=>vi[c.severity]-vi[d.severity]);for(let c of a){let d=At[c.severity](` ${c.severity.toUpperCase()} `);ue.info(` ${d} ${fe.bold(c.id)} ${c.title}`),ue.info(fe.dim(` ${c.description}`)),c.file&&ue.info(fe.dim(` File: ${c.file}${c.line?`:${c.line}`:""}`)),ue.info(fe.cyan(` Fix: ${c.recommendation}`)),ue.info(""),n[c.severity]++,i++}}ue.info(""),ue.info(fe.bold(" Summary")),ue.info(fe.dim(" "+"\u2500".repeat(60))),ue.info(` Total: ${fe.bold(String(i))} finding(s)`),ue.info(` ${At.critical(` ${n.critical} Critical `)} ${At.high(` ${n.high} High `)} ${At.medium(` ${n.medium} Medium `)} ${At.low(` ${n.low} Low `)} ${At.info(` ${n.info} Info `)}`);let r=n.critical>0,o=n.high>0;r||o?(ue.info(""),ue.error(fe.red.bold(` FAIL \u2014 ${n.critical} critical, ${n.high} high issue(s) found`))):i>0?(ue.info(""),ue.warn(fe.yellow(" PASS (with warnings) \u2014 no critical or high issues"))):(ue.info(""),ue.success(fe.green.bold(" PASS \u2014 no issues found")))}function Fo(e,t){let i=e.flatMap(r=>r.findings),n={};for(let r of Object.values(ve))n[r]=i.filter(o=>o.severity===r).length;return{version:"1.0.0",timestamp:new Date().toISOString(),project:t.name||"unknown",projectVersion:t.version||"0.0.0",summary:{total:i.length,...n},passed:n.critical===0&&n.high===0,checks:e.map(r=>({category:r.category,label:r.label,findingCount:r.findings.length,durationMs:r.durationMs,error:r.error||null})),findings:i}}import{log as pe,spinner as Yc}from"@clack/prompts";import le from"chalk";import We from"fs";import Jc from"os";import It from"path";import{execSync as Xc}from"child_process";var Ho=16384,qc=1,Zc=Buffer.from([127,69,76,70]);async function jo(e){pe.info(le.bold.underline("16KB Page Alignment Check")),console.log("");let t=It.resolve(e);if(!We.existsSync(t))return pe.error(le.red(`APK file not found: ${t}`)),!1;if(!t.endsWith(".apk"))return pe.error(le.red("The provided file is not an APK file.")),!1;let i=Yc();i.start("Extracting and analyzing native libraries...");let n=We.mkdtempSync(It.join(Jc.tmpdir(),"mach-16kb-"));try{try{Xc(`unzip -o -q "${t}" "lib/arm64-v8a/*.so" "lib/x86_64/*.so" -d "${n}" 2>/dev/null`,{encoding:"utf-8",maxBuffer:50*1024*1024})}catch{}let r=Go(It.join(n,"lib"));if(r.length===0)return i.stop("Analysis complete."),pe.info(le.yellow("No arm64-v8a or x86_64 native libraries found in the APK.")),pe.info(le.dim("16KB alignment check only applies to arm64-v8a and x86_64 architectures.")),!0;let o=[];for(let a of r){let c=It.relative(n,a),d=ed(c),u=It.basename(a),f=Qc(a);f!==null&&o.push({name:u,filePath:c,arch:d,align:f,compatible:f>=Ho})}if(i.stop("Analysis complete."),o.length===0)return pe.info(le.yellow("No valid ELF shared libraries found.")),!0;let s=o.filter(a=>!a.compatible),l=o.filter(a=>a.compatible);if(pe.info(le.dim(`Checked ${o.length} native librar${o.length===1?"y":"ies"}
|
|
1214
|
+
`)),s.length>0){pe.info(le.red.bold(`Incompatible libraries:
|
|
1215
|
+
`));for(let a of s)pe.error(le.red(`${le.bold(a.name)} ${le.dim(`(${a.arch})`)}`)),pe.info(le.dim(` PT_LOAD alignment: 2**${Math.log2(a.align)} (${a.align} bytes, needs 2**14 = ${Ho})`))}return l.length>0&&(console.log(""),pe.success(le.green(`${l.length} librar${l.length===1?"y":"ies"} correctly aligned (2**14 or higher).`))),console.log(""),s.length===0?(pe.success(le.green.bold("ELF Verification Successful. APK is 16KB compatible.")),!0):(pe.error(le.red.bold(`Found ${s.length} unaligned lib${s.length===1?"":"s"} (arm64-v8a/x86_64 libs need to be aligned).`)),console.log(""),pe.info(le.yellow("To fix this:")),pe.info(le.dim(" 1. Rebuild with NDK r28+ which defaults to 16KB page alignment")),pe.info(le.dim(" 2. Or set -DANDROID_SUPPORT_FLEXIBLE_PAGE_SIZES=ON in CMake")),pe.info(le.dim(" 3. Update third-party libraries that ship prebuilt .so files")),pe.info(le.dim(" 4. After rebuilding: zipalign -p -f -v 16 input.apk output.apk")),console.log(""),pe.info(le.dim("Reference: https://developer.android.com/guide/practices/page-sizes")),!1)}catch(r){return i.stop("Analysis failed."),pe.error(le.red(`Failed to analyze APK: ${r.message}`)),!1}finally{try{We.rmSync(n,{recursive:!0,force:!0})}catch{}}}function Qc(e){let t=We.openSync(e,"r");try{let i=Buffer.alloc(64);if(We.readSync(t,i,0,64,0),!i.subarray(0,4).equals(Zc))return null;let n=i[4]===2,r=i[5]===1,o=(f,m)=>r?f.readUInt16LE(m):f.readUInt16BE(m),s=(f,m)=>r?f.readUInt32LE(m):f.readUInt32BE(m),l=(f,m)=>Number(r?f.readBigUInt64LE(m):f.readBigUInt64BE(m)),a,c,d;n?(a=l(i,32),c=o(i,54),d=o(i,56)):(a=s(i,28),c=o(i,42),d=o(i,44));let u=null;for(let f=0;f<d;f++){let m=Buffer.alloc(c);if(We.readSync(t,m,0,c,a+f*c),s(m,0)!==qc)continue;let L;n?L=l(m,48):L=s(m,28),L>0&&(u===null||L<u)&&(u=L)}return u??0}catch{return null}finally{We.closeSync(t)}}function Go(e){let t=[];if(!We.existsSync(e))return t;let i=We.readdirSync(e,{withFileTypes:!0});for(let n of i){let r=It.join(e,n.name);n.isDirectory()?t.push(...Go(r)):n.name.endsWith(".so")&&t.push(r)}return t}function ed(e){return e.includes("arm64-v8a")?"arm64-v8a":e.includes("x86_64")?"x86_64":"unknown"}var zo=async e=>{if(Ie()||(De.error(Le.red(`You are not logged in. Run \`${p.nameLower} login\` first.`)),process.exit(1)),e.apk){await nd(e);return}let i=process.cwd(),n=Di.join(i,"package.json");zt.existsSync(n)||(De.error(Le.red("No package.json found. Run this command from a project root.")),process.exit(1));let r=JSON.parse(zt.readFileSync(n,"utf-8")),o=!!(r.dependencies?.expo||r.devDependencies?.expo);e.json||(De.info(Le.dim(`Project: ${r.name||"unknown"} v${r.version||"0.0.0"}`)),De.info(Le.dim(`Type: ${o?"Expo":"Bare React Native"}`)),De.info(""));let s={json:e.json,fix:e.fix,category:e.category,severity:e.severity,prebuild:e.prebuild},l=await Uo(i,s);e.json?console.log(JSON.stringify(Fo(l,r),null,2)):Bo(l,e.severity);let a=l.some(d=>d.findings.some(u=>u.severity==="critical")),c=l.some(d=>d.findings.some(u=>u.severity==="high"));(a||c)&&process.exit(1)},Ko=["16kb"];async function nd(e){let t=e.category?.toLowerCase();t&&!Ko.includes(t)&&(De.error(Le.red(`Unknown APK check category: "${t}"`)),De.info(Le.dim(`Available APK checks: ${Ko.join(", ")}`)),process.exit(1));let i=await rd(e.apk);i||process.exit(1);let n=!t,r=!1;(n||t==="16kb")&&(await jo(i)||(r=!0)),r&&process.exit(1)}async function rd(e){if(e.startsWith("build:")){let i=e.slice(6);return await od(i)}if(e.startsWith("http://")||e.startsWith("https://"))return await Wo(e);let t=Di.resolve(e);return zt.existsSync(t)?t:(De.error(Le.red(`APK file not found: ${t}`)),null)}async function od(e){let t=Vo();t.start(`Fetching APK from build ${e}...`);try{let i=await C.get(`/build/${e}`);if(i.data.status!=="success")throw new Error(i.data.message);let n=i.data.build;if(!n)throw new Error("Build not found");let r=n.artifacts?.find(o=>o.type?o.type==="apk":o.name?.endsWith(".apk")||o.url?.includes(".apk"));return!r||!r.url?(t.stop("No APK artifact found"),De.error(Le.red("This build does not have an APK artifact.")),De.info(Le.dim("Make sure the build produced an APK (not just an AAB).")),null):(t.stop(`Found build: ${n.buildId||e}`),await Wo(r.url))}catch(i){return t.stop("Failed to fetch build"),De.error(Le.red(i.message)),null}}async function Wo(e){let t=Vo();t.start("Downloading APK...");try{let i=zt.mkdtempSync(Di.join(td.tmpdir(),`${p.nameLower}-audit-`)),n=Di.join(i,"app.apk"),r=await id.get(e,{responseType:"arraybuffer"});zt.writeFileSync(n,r.data);let o=(r.data.length/(1024*1024)).toFixed(1);return t.stop(`Downloaded APK (${o} MB)`),n}catch(i){return t.stop("Download failed"),De.error(Le.red(`Failed to download APK: ${i.message}`)),null}}var ld=console.log;console.log=()=>{};ad();console.log=ld;Se(ge.bgCyan.black(p.cliTag("Production Build Orchestrator")));var dd=cd(import.meta.url),ud=dd("../package.json"),Z=new sd;Z.name(p.nameLower).description(`${p.name} CLI: Powerful Cloud Infrastructure Tools`).version(ud.version).option("-y, --yes","Automatically answer yes to all prompts",!1).option("--quiet","Suppress non-essential output",!1);Z.command("agent").description("Manage local device discovery agent for the Install Hub (port 7070)").argument("[action]","start, run, install, status, restart, stop, or uninstall","start").action(async e=>{await Gr(e)});Z.command("host").description("Setup AWS S3 static hosting and CloudFront").action(async()=>{Se(ge.bgCyan.black(p.cliTag("Hosting"))),await Pn()});Z.command("sitemap").description("Generate sitemap.xml from Expo Router app structure").option("-o, --output <path>","Output path for sitemap.xml","./public/sitemap.xml").action(async e=>{Se(ge.bgCyan.black(p.cliTag("Sitemap Generator"))),await On(e)});Z.command("build").description("Run a build on a cloud provider (AWS Spot Instances)").argument("[platform]","Target platform (android, ios)").option("--platform <os>","Target platform alias (android, ios) [Optional]").option("--repo <url>","Git Repository URL").option("--branch <name>","Git Branch").option("--ami <id>","AMI ID").option("--bucket <name>","S3 Bucket for artifacts").option("--region <region>","AWS Region").option("--aws-profile <name>","AWS Credentials Profile").option("-p, --build-profile <name>","Build Profile (e.g. production, staging)","production").option("--profile <name>","Build Profile (alias for --build-profile)").option("--dry-run","Generate User Data script without launching").option("--keep-instance","Do not terminate the instance after build").option("--subnet <id>","VPC Subnet ID to launch the instance in").option("--security-group <id>","VPC Security Group ID to use").option("--ssh-host <host>","Remote host for iOS build (SSH)").option("--ssh-user <user>","SSH username for remote host").option("--ssh-key <path>","Path to private SSH key for remote host").option("--ios-scheme <scheme>","iOS Scheme to build").option("--ios-team-id <id>","Apple Development Team ID").option("--ios-configuration <config>","Xcode configuration (Release/Debug)").option("--ios-export-method <method>","Export method (ad-hoc, app-store, development, enterprise)").option("--ios-api-key-id <id>","App Store Connect API Key ID").option("--ios-api-key-issuer <id>","App Store Connect API Key Issuer ID").option("--ios-api-key-path <path>","Path to App Store Connect API Key (.p8) file").option("--simulator","Build for iOS Simulator (no signing required)").addOption(new _t("--build-id <id>","Internal build ID").hideHelp()).addOption(new _t("--project-id <id>","Internal project ID").hideHelp()).addOption(new _t("--fail-only","Internal: mark an existing build failed").hideHelp()).addOption(new _t("--error <message>","Internal failure message").hideHelp()).option("--local","Run build on local machine").option("--auto-version","Automatically fetch and increment Android versionCode or iOS buildNumber from the store").option("--verbose","Enable verbose logging").option("--json-output <path>","Write build metadata JSON to a file for CI/CD").option("--maestro","Queue a managed Maestro test run after a successful build").option("--maestro-flows <path>","Maestro flow file or directory (default: .maestro)").option("--maestro-device <device>","Managed Maestro device profile").option("--maestro-retries <n>","Retries for the Maestro run","1").option("--maestro-record","Enable screen recording where supported").option("-y, --yes","Automatically answer yes to all prompts",!1).option("--quiet","Suppress non-essential output",!1).action(async(e,t)=>{let i=Z.opts();t.yes=t.yes||i.yes,t.quiet=t.quiet||i.quiet,t.platform=e||t.platform,t.buildProfile=t.profile||t.buildProfile,t.quiet||Se(ge.bgCyan.black(p.cliTag("Cloud Build"))),await oi(t)});Z.command("maestro").description("Run managed Maestro tests for an existing Mach build or artifact").option("--platform <os>","Target platform (android/ios)").option("-p, --profile <name>","Build profile to resolve when using --latest","production").option("--latest","Use the latest successful build for the platform/profile").option("--build-id <id>","Use a specific Mach build ID").option("--build-url <url>","Use a Mach build URL").option("--artifact-url <url>","Use a direct APK or iOS simulator app artifact URL").option("--maestro-flows <path>","Maestro flow file or directory (default: .maestro)").option("--maestro-device <device>","Managed Maestro device profile").option("--maestro-retries <n>","Retries for the Maestro run","1").option("--maestro-record","Enable screen recording where supported").option("--json-output <path>","Write test run metadata JSON to a file for CI/CD").action(async e=>{Se(ge.bgCyan.black(p.cliTag("Maestro Testing"))),await lr(e)});Z.command("update").description("Deploy an Over-The-Air (OTA) update to your live channel").option("--branch <name>","Channel or Branch to deploy to (e.g., production)","production").action(async e=>{Se(ge.bgCyan.black(p.cliTag("OTA Update"))),await lo(e)});Z.command("submit").description("Automated Store Submission (App Store / Google Play)").option("--platform <os>","Target platform (ios/android)").option("-p, --profile <name>","Build/submission profile to submit from (e.g. production, preprod)").option("--track <track>","Google Play Track (internal, alpha, beta, production)").option("--release-status <status>","Google Play release status (completed, draft, halted, inProgress)").option("--rollout <fraction>","Google Play staged rollout fraction for inProgress releases (example: 0.1)").option("--changes-not-sent-for-review","Commit Google Play changes without automatically sending them for review").option("--ssh-host <host>","Remote macOS host for iOS submission").option("--ssh-user <user>","SSH username for remote iOS submission").option("--ssh-key <path>","Path to private SSH key for remote iOS submission").option("--credential-id <id>","Service credential ID to use when multiple submission credentials exist").option("--local","Run submission on this machine (internal runner mode for iOS)").addOption(new _t("--submit-id <id>","Internal submission ID").hideHelp()).addOption(new _t("--project-id <id>","Internal project ID").hideHelp()).option("--json-output <path>","Write submission metadata JSON to a file for CI/CD").option("--latest","Use the latest successful build for submission").option("--build-id <id>","Use a specific build ID for submission").action(async e=>{let t=Z.opts();e.quiet=e.quiet||t.quiet,e.yes=e.yes||t.yes,Se(ge.bgCyan.black(p.cliTag("Store Submission"))),await oo(e)});Z.command("login").description(`Login to ${p.name} Dashboard`).action(async()=>{Se(ge.bgCyan.black(p.cliTag("Login"))),await Wr()});Z.command("logout").description(`Logout from ${p.name} on this machine`).action(async()=>{Se(ge.bgCyan.black(p.cliTag("Logout"))),await Yr()});Z.command("link").description(`Link local directory to a ${p.name} Project`).action(async()=>{Se(ge.bgCyan.black(p.cliTag("Link Project"))),await Xr()});Z.command("me").description("Display currently logged in user details").action(async()=>{await uo()});Z.command("init").description(`Create a new ${p.name} Project`).action(async()=>{Se(ge.bgCyan.black(p.cliTag("Init Project"))),await qr()});Z.command("env").description("Manage Environment Variables").argument("<action>","Action to perform: set or list").argument("[args...]","Key=Value pairs for set action").action(async(e,t)=>{Se(ge.bgCyan.black(p.cliTag("Env Manager"))),await to(e,t)});Z.command("start").description("Start the development server (Metro)").option("-p, --build-profile <name>","Build profile (e.g. development, staging)","development").option("--tunnel","Use ngrok tunnel").option("--lan","Use LAN IP").option("--localhost","Use localhost").option("-c, --clear","Clear Metro cache").option("--port <number>","Port to listen on").option("--ios","Start on iOS").option("--android","Start on Android").option("--web","Start on Web").action(async e=>{Se(ge.bgCyan.black(p.cliTag("Dev Server"))),await fo(e)});Z.command("config").description("Show resolved configuration for a profile").option("-p, --profile <name>","Build profile to resolve","development").option("--json","Output as JSON").action(async e=>{await mo(e)});Z.command("credentials").description("Unified, interactive credential management (iOS/Android)").option("-p, --profile <name>","Build profile (production, staging, development)").option("--force","Force recreate certificates (nuke existing on Apple Portal)",!1).action(async e=>{let{credentialsMainCommand:t}=await import("./credentials-G45XNNRU.js");await t(e)});Z.command("credentials:setup").description("Automated credential provisioning (iOS/Android) [Legacy]").requiredOption("--platform <os>","Platform: ios or android").option("--profile <name>","Build profile (production, staging, development)").option("--bundle-id <id>","Bundle ID / Package Name (optional, auto-detected)").option("--team-id <id>","Apple Team ID (iOS only)").option("--key-alias <alias>","Android keystore alias (optional, auto-generated)").option("--aws-profile <name>","AWS Credentials Profile (for S3 storage)").option("--force","Force recreate certificates (nuke existing on Apple Portal)",!1).action(async e=>{Se(ge.bgCyan.black(p.cliTag("Credentials Setup"))),await $t(e),Yo(ge.green("Done!"))});Z.command("credentials:service").description("Upload Service Credentials (ASC API Key / Google Service JSON) [Legacy]").requiredOption("--platform <os>","Platform: ios or android").option("--file <path>","Path to credential file (.p8 or .json)").option("--issuer-id <id>","ASC API Key Issuer ID (iOS only)").option("--key-id <id>","ASC API Key ID (iOS only)").option("--bundle-id <id>","Bundle identifier / Android package name to attach this service credential to").option("--package-name <name>","Android package name to attach this service credential to").option("-p, --profile <name>","Build profile to resolve package/bundle identifier from config").action(async e=>{Se(ge.bgCyan.black(p.cliTag("Service Credentials"))),await wn(e),Yo(ge.green("Done!"))});var yn=Z.command("device").description("Manage registered iOS test devices");yn.command("register").description("Register a connected iOS device or enter UDID manually").option("--udid <udid>","Device UDID (skip auto-detection)").option("--name <name>","Device name").action(async e=>{await Si("register",e)});yn.command("list").description("List all registered devices").action(async()=>{await Si("list",{})});yn.command("remove").description("Remove a registered device").option("--udid <udid>","Device UDID to remove").action(async e=>{await Si("remove",e)});Z.command("audit").description("Run automated security audit on the project or APK").option("--apk <path>","Path to APK file (runs APK diagnostics like 16KB alignment)").option("--json","Output results as JSON (for CI/CD)").option("--fix","Auto-apply fixes where possible").option("--category <name>","Run only a specific check category (e.g. 16kb, permissions, secrets)").option("--severity <level>","Minimum severity to display (critical, high, medium, low, info)").option("--prebuild","Run expo prebuild for deeper manifest/plist analysis").action(async e=>{Se(ge.bgCyan.black(p.cliTag(e.apk?"APK Audit":"Security Audit"))),await zo(e)});var pd=new Set(["login","logout","agent"]);Z.hook("preAction",(e,t)=>{let i=t.name();pd.has(i)||An()});Z.on("command:*",()=>{console.error(`Invalid command: %s
|
|
1216
|
+
See --help for a list of available commands.`,Z.args.join(" ")),process.exit(1)});process.argv.slice(2).length||Z.help();Z.parse(process.argv);
|