@radhya/mach 2.0.14 → 2.0.24

package/dist/index.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import{a as fn,b as gr,c as hr,d as Sr,e as $e,f as lt,g as yr,h as br,i as Pt,j as Er,l as Ht}from"./chunk-XW3V7PJM.js";import{a as m,b as pr,c as Pe,d as fr,e as mr,f as vt,g as Je,h as k}from"./chunk-S64YFTRR.js";import{Command as wf,Option as Fe}from"commander";import{configDotenv as _f}from"dotenv";import{intro as we,outro as Ca}from"@clack/prompts";import Ee from"chalk";import{text as Ar,confirm as La,spinner as xa,isCancel as ni,cancel as jt,note as Ma,outro as Ua}from"@clack/prompts";import Gt from"chalk";async function Ir(){try{let e=await Ar({message:"Enter Bucket Name:",placeholder:"e.g. my-app-dev",validate(r){if(r.length===0)return"Bucket name is required"}});ni(e)&&(jt("Operation cancelled."),process.exit(0));let t=await Ar({message:"Enter Region:",initialValue:"ap-south-1"});ni(t)&&(jt("Operation cancelled."),process.exit(0));let n=await La({message:"Do you want to create a CloudFront Distribution for this bucket?",initialValue:!0});ni(n)&&(jt("Operation cancelled."),process.exit(0));let i=xa();i.start("Setting up hosting infrastructure...");try{let r=await k.post("/hosting/setup",{bucketName:e,region:t,createCloudFront:n});if(r.data.status!=="success")throw new Error(r.data.message||"Hosting setup failed");i.stop("Hosting setup complete!");let o=r.data,s=`Bucket Name:      ${Gt.cyan(o.bucketName)}
+import{a as fn,b as gr,c as hr,d as Sr,e as $e,f as lt,g as yr,h as br,i as Pt,j as Er,l as Ht}from"./chunk-VX4DWB47.js";import{a as m,b as pr,c as Pe,d as fr,e as mr,f as vt,g as Je,h as k}from"./chunk-S64YFTRR.js";import{Command as wf,Option as Fe}from"commander";import{configDotenv as _f}from"dotenv";import{intro as we,outro as Ca}from"@clack/prompts";import Ee from"chalk";import{text as Ar,confirm as La,spinner as xa,isCancel as ni,cancel as jt,note as Ma,outro as Ua}from"@clack/prompts";import Gt from"chalk";async function Ir(){try{let e=await Ar({message:"Enter Bucket Name:",placeholder:"e.g. my-app-dev",validate(r){if(r.length===0)return"Bucket name is required"}});ni(e)&&(jt("Operation cancelled."),process.exit(0));let t=await Ar({message:"Enter Region:",initialValue:"ap-south-1"});ni(t)&&(jt("Operation cancelled."),process.exit(0));let n=await La({message:"Do you want to create a CloudFront Distribution for this bucket?",initialValue:!0});ni(n)&&(jt("Operation cancelled."),process.exit(0));let i=xa();i.start("Setting up hosting infrastructure...");try{let r=await k.post("/hosting/setup",{bucketName:e,region:t,createCloudFront:n});if(r.data.status!=="success")throw new Error(r.data.message||"Hosting setup failed");i.stop("Hosting setup complete!");let o=r.data,s=`Bucket Name:      ${Gt.cyan(o.bucketName)}
 `;s+=`Region:           ${Gt.cyan(o.region)}
 `,s+=`S3 Website URL:   ${Gt.blue(o.s3WebsiteUrl)}`,o.cloudFrontId&&(s+=`
 
@@ -15,7 +15,7 @@ ${e.map(r=>{let o=r.path;return o=o.replace(/\/\([^)]+\)/g,""),o=o.replace(/\/\[
     <priority>0.8</priority>
   </url>`}).join(`
 `)}
-</urlset>`}import{randomUUID as Ld}from"crypto";import ge from"path";import $n from"axios";import xd from"os";import{spinner as Bi,select as Fo,confirm as Bo,isCancel as vn,cancel as Ho,log as $}from"@clack/prompts";import v from"chalk";import ce from"fs";import{execSync as jo}from"child_process";import Go from"adm-zip";import{spinner as il,log as mn}from"@clack/prompts";import Dr from"chalk";import Cr from"fs";import Nr from"path";var Pr=`#!/bin/bash
+</urlset>`}import{randomUUID as Ld}from"crypto";import ge from"path";import $n from"axios";import xd from"os";import{spinner as Bi,select as Fo,confirm as Bo,isCancel as vn,cancel as Ho,log as $}from"@clack/prompts";import v from"chalk";import de from"fs";import{execSync as jo}from"child_process";import Go from"adm-zip";import{spinner as il,log as mn}from"@clack/prompts";import Dr from"chalk";import Cr from"fs";import Nr from"path";var Pr=`#!/bin/bash
 # --- Mach Cloud Build Script (Android) ---
 # All S3 operations use presigned URLs via curl \u2014 zero AWS credentials on instance.
 BUILD_ID="{{BUILD_ID}}"
@@ -585,7 +585,7 @@ fi
 echo "expo.enableHermes=true" >> gradle.properties
 `,androidRemoteReleaseGradlePropertiesScript:()=>`
 echo "expo.enableProguardInReleaseBuilds=true" >> gradle.properties
-`,prepareLocalProject:async e=>{let{platform:t,options:n,cacheMeta:i,cacheMetaDir:r,currentBuildEnv:o,reportStep:s,loggedRun:l,configureXcodeNodeBinary:a,podsFingerprint:d,writeCacheMeta:u}=e,c=n.iosBundleIdentifier||"",f=n.name||"",p=Ot.join(process.cwd(),"app.json"),g=null;Oe.info(De.blue(`Running Expo prebuild for ${t}...`));try{if(Ce.existsSync(p)){g=Ce.readFileSync(p,"utf-8");let _=JSON.parse(g);_.expo=_.expo||{},f||(f=_.expo.name||""),t==="ios"&&!c&&(c=_.expo?.ios?.bundleIdentifier||""),n.name&&(_.expo.name=n.name),n.scheme&&(_.expo.scheme=n.scheme),t==="ios"&&n.iosBundleIdentifier?(_.expo.ios=_.expo.ios||{},_.expo.ios.bundleIdentifier=n.iosBundleIdentifier):t==="android"&&n.androidPackage&&(_.expo.android=_.expo.android||{},_.expo.android.package=n.androidPackage),Ce.writeFileSync(p,JSON.stringify(_,null,2))}let y=["exec","--","expo","prebuild","--platform",t,"--no-install"];if(await s("prebuild"),await l("npm",y,process.cwd(),o()),t!=="ios"||!Ce.existsSync("ios"))return{appName:f,bundleId:c};await s("pods"),Oe.info(De.blue("Running pod install..."));try{let _=Ot.resolve("ios"),D=Ot.join(_,"Podfile");if(!Ce.existsSync(D))throw new Error("ios/Podfile not found. Skipping pod install.");let b=o();a(_,b);let L=Ce.readFileSync(D,"utf-8"),A=n.iosDeploymentTarget||"13.4";if(!n.developmentClient&&(Oe.info(De.blue("\u2139\uFE0F  Patching Podfile to EXCLUDE expo-dev-client...")),L.includes("use_expo_modules!")&&!L.includes("exclude:"))){let C=/use_expo_modules!(\s*)$/m;C.test(L)?L=L.replace(C,'use_expo_modules!(exclude: ["expo-dev-client"])$1'):L=L.replace("use_expo_modules!",'use_expo_modules!(exclude: ["expo-dev-client"])')}let B=`
+`,prepareLocalProject:async e=>{let{platform:t,options:n,cacheMeta:i,cacheMetaDir:r,currentBuildEnv:o,reportStep:s,loggedRun:l,configureXcodeNodeBinary:a,podsFingerprint:d,writeCacheMeta:u}=e,c=n.iosBundleIdentifier||"",f=n.name||"",p=Ot.join(process.cwd(),"app.json"),g=null;Oe.info(De.blue(`Running Expo prebuild for ${t}...`));try{if(Ce.existsSync(p)){g=Ce.readFileSync(p,"utf-8");let _=JSON.parse(g);_.expo=_.expo||{},f||(f=_.expo.name||""),t==="ios"&&!c&&(c=_.expo?.ios?.bundleIdentifier||""),n.name&&(_.expo.name=n.name),n.scheme&&(_.expo.scheme=n.scheme),t==="ios"&&n.iosBundleIdentifier?(_.expo.ios=_.expo.ios||{},_.expo.ios.bundleIdentifier=n.iosBundleIdentifier):t==="android"&&n.androidPackage&&(_.expo.android=_.expo.android||{},_.expo.android.package=n.androidPackage),Ce.writeFileSync(p,JSON.stringify(_,null,2))}let y=["exec","--","expo","prebuild","--platform",t,"--no-install"];if(await s("prebuild"),await l("npm",y,process.cwd(),o()),t!=="ios"||!Ce.existsSync("ios"))return{appName:f,bundleId:c};await s("pods"),Oe.info(De.blue("Running pod install..."));try{let _=Ot.resolve("ios"),D=Ot.join(_,"Podfile");if(!Ce.existsSync(D))throw new Error("ios/Podfile not found. Skipping pod install.");let b=o();a(_,b);let L=Ce.readFileSync(D,"utf-8"),A=n.iosDeploymentTarget||"13.4";if(!n.developmentClient&&(Oe.info(De.blue("\u2139\uFE0F  Patching Podfile to EXCLUDE expo-dev-client...")),L.includes("use_expo_modules!")&&!L.includes("exclude:"))){let N=/use_expo_modules!(\s*)$/m;N.test(L)?L=L.replace(N,'use_expo_modules!(exclude: ["expo-dev-client"])$1'):L=L.replace("use_expo_modules!",'use_expo_modules!(exclude: ["expo-dev-client"])')}let B=`
       installer.generated_projects.each do |project|
         project.targets.each do |target|
           target.build_configurations.each do |config|
@@ -599,11 +599,11 @@ echo "expo.enableProguardInReleaseBuilds=true" >> gradle.properties
         end
       end
 `,q=/post_install\s+do\s+\|installer\|/;if(q.test(L))Oe.info(De.dim(`Injecting deployment target (${A}) into existing post_install hook...`)),L=L.replace(q,`post_install do |installer|
-${B}`),Ce.writeFileSync(D,L);else{Oe.info(De.dim(`Appending new post_install hook for deployment target (${A})...`));let C=`
+${B}`),Ce.writeFileSync(D,L);else{Oe.info(De.dim(`Appending new post_install hook for deployment target (${A})...`));let N=`
 post_install do |installer|
 ${B}
 end
-`;Ce.appendFileSync(D,C)}let P="/opt/homebrew/bin/pod",I=Ce.existsSync(P)?P:"pod",T=d(_);Ce.existsSync(Ot.join(_,"Pods"))&&i.pods&&i.pods!==T&&(await e.reportLog(`[CACHE] Podfile/Podfile.lock changed \u2014 wiping ios/Pods
+`;Ce.appendFileSync(D,N)}let P="/opt/homebrew/bin/pod",I=Ce.existsSync(P)?P:"pod",T=d(_);Ce.existsSync(Ot.join(_,"Pods"))&&i.pods&&i.pods!==T&&(await e.reportLog(`[CACHE] Podfile/Podfile.lock changed \u2014 wiping ios/Pods
 `),Oe.info(De.dim("Podfile fingerprint changed \u2014 clearing Pods for clean install...")),Ce.rmSync(Ot.join(_,"Pods"),{recursive:!0,force:!0})),Oe.info(De.dim(`Using pod command: ${I} in ${_}`)),await l(I,["install"],_,b),i.pods=T,u(r,i)}catch(_){let D=_.message||"Unknown error";Oe.warn(De.yellow(`Native "pod" command failed: ${D}`)),Oe.info(De.dim("Falling back to npm exec pod-install..."));let b=o();a(Ot.resolve("ios"),b),Oe.info(De.magenta(`${m.nameUpper}_DEBUG: Executing pod-install override via npx --yes pod-install@latest`)),await l("npx",["--yes","pod-install@latest","ios"],process.cwd(),b)}if(Ce.existsSync("ios/Pods")){Oe.info(De.dim("Disabling signing for Pod targets to prevent conflicts..."));try{Ja(`find ios/Pods -name "project.pbxproj" -exec sed -i '' 's/buildSettings = {/buildSettings = { CODE_SIGNING_ALLOWED = NO; CODE_SIGNING_REQUIRED = NO; PROVISIONING_PROFILE_SPECIFIER = ""; EXPANDED_CODE_SIGN_IDENTITY = "";/g' {} +`,{stdio:"ignore"})}catch{}}return{appName:f,bundleId:c}}finally{g&&Ce.writeFileSync(p,g)}}};import{log as St}from"@clack/prompts";import yt from"chalk";import Ze from"fs";import Kt from"path";var Xa=(e,t)=>!Ze.existsSync(e)||!Ze.existsSync(t)?!1:Ze.readFileSync(e,"utf-8")!==Ze.readFileSync(t,"utf-8"),ri={id:"react-native",displayName:"React Native",applyLocalProcessEnv:e=>{delete process.env.EXPO_NO_DEV_CLIENT,delete process.env.EXPO_AUTOLINKING_EXCLUDE,delete process.env.EXPO_NO_DOTENV},localAndroidEnv:(e,t)=>({MACH_FRAMEWORK:"react-native",MACH_BUILD_PROFILE:t}),remoteEnvSetupScript:()=>`
 export MACH_FRAMEWORK="react-native"
 echo "[ENV] MACH_FRAMEWORK=$MACH_FRAMEWORK"
@@ -1315,7 +1315,7 @@ fi
 `:"";if(n)for(let[h,M]of Object.entries(n)){let U=M.replace(/"/g,'\\"').replace(/\$/g,"\\$").replace(/`/g,"\\`");L+=`export ${h}="${U}"
 `}let A=e.buildProfile||"production",B=bt(n,A,e),q=Dt(B);Et.info(et.dim(`iOS remote build config: simulator=${String(!!e.simulator)}, configuration=${e.iosConfiguration||"Release"}, scheme=${e.iosScheme||"auto"}`));let P=[L,D.logUpload?`export PRESIGNED_LOG_UPLOAD="${D.logUpload}"`:"",D.doneMarker?`export PRESIGNED_DONE_MARKER="${D.doneMarker}"`:"",D.cacheDerivedDataDownload?`export PRESIGNED_CACHE_DD_DOWNLOAD="${D.cacheDerivedDataDownload}"`:"",D.cacheDerivedDataUpload?`export PRESIGNED_CACHE_DD_UPLOAD="${D.cacheDerivedDataUpload}"`:"",D.cacheNodeModulesDownload?`export PRESIGNED_CACHE_NODE_DOWNLOAD="${D.cacheNodeModulesDownload}"`:"",D.cacheNodeModulesUpload?`export PRESIGNED_CACHE_NODE_UPLOAD="${D.cacheNodeModulesUpload}"`:"",D.cachePodsDownload?`export PRESIGNED_CACHE_PODS_DOWNLOAD="${D.cachePodsDownload}"`:"",D.cachePodsUpload?`export PRESIGNED_CACHE_PODS_UPLOAD="${D.cachePodsUpload}"`:"",D.artifactIpaUpload?`export PRESIGNED_ARTIFACT_IPA_UPLOAD="${D.artifactIpaUpload}"`:"",D.artifactAppZipUpload?`export PRESIGNED_ARTIFACT_APP_ZIP_UPLOAD="${D.artifactAppZipUpload}"`:"",`export BUILD_ID="${t}"`,`export MACH_BUILD_PROFILE="${Lr(A)}"`,`export MACH_APP_NAME="${Lr(B.MACH_APP_NAME)}"`,`export MACH_ENV_FINGERPRINT="${q}"`,o.remoteEnvSetupScript().trim(),`export ${m.envPrefix}PROJECT_ID="${f}"`,n.MATCH_ENCRYPTION_PASSPHRASE?`export MATCH_PASSWORD="${n.MATCH_ENCRYPTION_PASSPHRASE}"`:"",n.APPLE_TEAM_ID?`export FASTLANE_TEAM_ID="${n.APPLE_TEAM_ID}"`:"",`export MATCH_KEYCHAIN_NAME="${m.credentialsKeychain}"`,`export MATCH_KEYCHAIN_PASSWORD="${m.keychainPassword}"`].filter(Boolean).join(`
 `),I=e.nodeVersion?[`echo "[NODE] Switching to Node ${e.nodeVersion}..."`,'export NVM_DIR="$HOME/.nvm"','[ -s "$NVM_DIR/nvm.sh" ] && . "$NVM_DIR/nvm.sh" --no-use',`nvm install ${e.nodeVersion} 2>/dev/null || true`,`nvm use ${e.nodeVersion} --silent`,`export PATH="$NVM_DIR/versions/node/$(nvm version ${e.nodeVersion})/bin:$PATH"`,'echo "[NODE] Now using: $(node -v) at $(which node)"'].join(`
-`):"",T=kr,w={"{{REMOTE_DIR}}":p,"{{ENV_VARS}}":P,"{{CREDENTIAL_DOWNLOADS}}":b,"{{IOS_SCHEME}}":e.iosScheme||"","{{IOS_CONFIG}}":e.iosConfiguration||"Release","{{TEAM_ID}}":e.iosTeamId||"","{{AUTH_PARAMS}}":_,"{{IS_SIMULATOR}}":e.simulator?"true":"false","{{BUILD_ID}}":t,"{{EXPORT_METHOD}}":e.iosExportMethod||"ad-hoc","{{NODE_VERSION_SETUP}}":I,"{{FRAMEWORK_PREBUILD}}":o.iosRemotePrebuildScript().trim()};Object.entries(w).forEach(([h,M])=>{T=T.split(h).join(M)});let C=`/tmp/${m.nameLower}-mac-build-${t}.sh`;if(al.writeFileSync(C,T),Vt(`${u} ${C} ${a}:${p}/build.sh`),r.stop("Remote script uploaded."),Et.info(et.cyan("Executing remote build. This might take a while...")),Vt(`${d} "bash ${p}/build.sh"`,{stdio:"inherit"}),r.stop("Remote build finished!"),i){r.start("Fetching artifact links...");try{let M=(await k.get(`/builds/${i}/${t}/artifacts`)).data.artifacts||[],U=e.simulator===!0;if(M.length===0&&!U)throw r.stop("Build Failed!"),new Error("Build completed but no artifacts were generated. Check build logs for errors.");if(r.stop("Build Successful!"),M.length>0){Et.success("Build Artifacts Ready:");for(let j of M)console.log(`
+`):"",T=kr,w={"{{REMOTE_DIR}}":p,"{{ENV_VARS}}":P,"{{CREDENTIAL_DOWNLOADS}}":b,"{{IOS_SCHEME}}":e.iosScheme||"","{{IOS_CONFIG}}":e.iosConfiguration||"Release","{{TEAM_ID}}":e.iosTeamId||"","{{AUTH_PARAMS}}":_,"{{IS_SIMULATOR}}":e.simulator?"true":"false","{{BUILD_ID}}":t,"{{EXPORT_METHOD}}":e.iosExportMethod||"ad-hoc","{{NODE_VERSION_SETUP}}":I,"{{FRAMEWORK_PREBUILD}}":o.iosRemotePrebuildScript().trim()};Object.entries(w).forEach(([h,M])=>{T=T.split(h).join(M)});let N=`/tmp/${m.nameLower}-mac-build-${t}.sh`;if(al.writeFileSync(N,T),Vt(`${u} ${N} ${a}:${p}/build.sh`),r.stop("Remote script uploaded."),Et.info(et.cyan("Executing remote build. This might take a while...")),Vt(`${d} "bash ${p}/build.sh"`,{stdio:"inherit"}),r.stop("Remote build finished!"),i){r.start("Fetching artifact links...");try{let M=(await k.get(`/builds/${i}/${t}/artifacts`)).data.artifacts||[],U=e.simulator===!0;if(M.length===0&&!U)throw r.stop("Build Failed!"),new Error("Build completed but no artifacts were generated. Check build logs for errors.");if(r.stop("Build Successful!"),M.length>0){Et.success("Build Artifacts Ready:");for(let j of M)console.log(`
 ${et.yellow(j.name)}:
 ${et.cyan(j.downloadUrl)}`);console.log(`
 ${et.dim("Note: Links are valid for 7 days.")}`)}else U&&Et.warn("Simulator build completed. No artifacts uploaded.")}catch(h){r.stop("Could not fetch artifacts"),Et.warn(et.yellow(`Artifact listing failed: ${h.message}`))}}}catch(c){throw r.stop("iOS Build Failed"),c}};import ll from"crypto";import He from"axios";import Mr from"fs";var Xe=6e4,cl=12e4,ai=4,tt=e=>encodeURIComponent(e),dl=e=>new Promise(t=>setTimeout(t,e));async function je(e,t){let n;for(let i=1;i<=ai;i++)try{return await t()}catch(r){if(n=r,i>=ai||!ul(r))throw r;let o=Number(r.response?.headers?.["retry-after"]),s=Number.isFinite(o)&&o>0?o*1e3:Math.min(2e3*i*i,15e3);console.log(`[Google Play] ${e} failed (attempt ${i}/${ai}); retrying in ${Math.round(s/1e3)}s...`),await dl(s)}throw n}function ul(e){let t=e.response?.status;return t?t===408||t===409||t===425||t===429||t>=500:!0}async function Ur(e,t){let n;try{let i=await gn(t),r=tt(e);if(n=(await je("create edit",()=>He.post(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${r}/edits`,{},{headers:{Authorization:`Bearer ${i}`,Connection:"close"},timeout:Xe}))).data.id,!n)throw new Error("Google Play edit insert succeeded but did not return an edit id.");let s=tt(n),l=0,d=(await je("list tracks",()=>He.get(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${r}/edits/${s}/tracks`,{headers:{Authorization:`Bearer ${i}`,Connection:"close"},timeout:Xe}))).data.tracks||[];for(let u of d)if(u.releases){for(let c of u.releases)if(c.versionCodes)for(let f of c.versionCodes){let p=parseInt(f,10);p>l&&(l=p)}}try{let c=(await je("list bundles",()=>He.get(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${r}/edits/${s}/bundles`,{headers:{Authorization:`Bearer ${i}`,Connection:"close"},timeout:Xe}))).data.bundles||[];for(let f of c)f.versionCode&&f.versionCode>l&&(l=f.versionCode)}catch{}try{let c=(await je("list APKs",()=>He.get(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${r}/edits/${s}/apks`,{headers:{Authorization:`Bearer ${i}`,Connection:"close"},timeout:Xe}))).data.apks||[];for(let f of c)f.versionCode&&f.versionCode>l&&(l=f.versionCode)}catch{}return l}catch(i){let r=i.response?.data?.error?.message||i.message;throw new Error(`Google Play API Error: ${r}`)}finally{if(n)try{let i=await gn(t);await je("delete edit",()=>He.delete(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${tt(e)}/edits/${tt(n)}`,{headers:{Authorization:`Bearer ${i}`,Connection:"close"},timeout:Xe}))}catch{}}}async function Fr(e){let{packageName:t,serviceAccount:n,aabPath:i,track:r,releaseStatus:o,userFraction:s,changesNotSentForReview:l}=e,a;try{let u={Authorization:`Bearer ${await gn(n)}`,Connection:"close"},c=tt(t);if(a=(await je("create edit",()=>He.post(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${c}/edits`,{},{headers:u,timeout:Xe}))).data.id,!a)throw new Error("Google Play edit insert succeeded but did not return an edit id.");let p=tt(a),g=Mr.statSync(i),y=await je("upload AAB",()=>He.post(`https://androidpublisher.googleapis.com/upload/androidpublisher/v3/applications/${c}/edits/${p}/bundles`,Mr.createReadStream(i),{headers:{...u,"Content-Type":"application/octet-stream","Content-Length":g.size},maxBodyLength:1/0,maxContentLength:1/0,params:{uploadType:"media"},timeout:cl})),_=Number(y.data.versionCode);if(!_)throw new Error("Google Play upload succeeded but did not return a versionCode.");let D={versionCodes:[String(_)],status:o};return(o==="inProgress"||o==="halted")&&typeof s=="number"&&(D.userFraction=s),await je("update track",()=>He.put(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${c}/edits/${p}/tracks/${tt(r)}`,{releases:[D]},{headers:u,timeout:Xe})),await je("commit edit",()=>He.post(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${c}/edits/${p}:commit`,{},{headers:u,params:l?{changesNotSentForReview:!0}:void 0,timeout:Xe})),{editId:a,versionCode:_,track:r,releaseStatus:o,userFraction:s}}catch(d){if(a)try{let c=await gn(n);await je("delete edit",()=>He.delete(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${tt(t)}/edits/${tt(a)}`,{headers:{Authorization:`Bearer ${c}`,Connection:"close"},timeout:Xe}))}catch{}let u=d.response?.data?.error?.message||d.message;throw new Error(`Google Play API Error: ${u}`)}}async function gn(e){let t=Math.floor(Date.now()/1e3),n=t+3600,i={alg:"RS256",typ:"JWT"},r={iss:e.client_email,sub:e.client_email,aud:"https://oauth2.googleapis.com/token",iat:t,exp:n,scope:"https://www.googleapis.com/auth/androidpublisher"},o=Buffer.from(JSON.stringify(i)).toString("base64url"),s=Buffer.from(JSON.stringify(r)).toString("base64url"),l=`${o}.${s}`,a=ll.createSign("RSA-SHA256");a.update(l);let d=a.sign(e.private_key,"base64url"),u=`${l}.${d}`;return(await je("OAuth token exchange",()=>He.post("https://oauth2.googleapis.com/token",{grant_type:"urn:ietf:params:oauth:grant-type:jwt-bearer",assertion:u},{headers:{Connection:"close"},timeout:Xe}))).data.access_token}import pl from"crypto";import Br from"axios";var ci="https://api.appstoreconnect.apple.com/v1",Hr=6e4,li=4,fl=e=>new Promise(t=>setTimeout(t,e));function ml(e,t,n){let i=Math.floor(Date.now()/1e3),r=Buffer.from(JSON.stringify({alg:"ES256",kid:e,typ:"JWT"})).toString("base64url"),o=Buffer.from(JSON.stringify({iss:t,iat:i,exp:i+1200,aud:"appstoreconnect-v1"})).toString("base64url"),s=`${r}.${o}`,l=pl.createSign("SHA256");l.update(s);let a=l.sign({key:n,dsaEncoding:"ieee-p1363"}).toString("base64url");return`${s}.${a}`}function gl(e){let t=e.response?.status;return t?t===408||t===409||t===425||t===429||t>=500:!0}async function jr(e,t){let n;for(let i=1;i<=li;i++)try{return await t()}catch(r){if(n=r,i>=li||!gl(r))throw r;let o=Number(r.response?.headers?.["retry-after"]),s=Number.isFinite(o)&&o>0?o*1e3:Math.min(2e3*i*i,15e3);console.log(`[App Store Connect] ${e} failed (attempt ${i}/${li}); retrying in ${Math.round(s/1e3)}s...`),await fl(s)}throw n}function Gr(e){return{Authorization:`Bearer ${ml(e.keyId,e.issuerId,e.privateKey)}`,"Content-Type":"application/json",Connection:"close"}}function hl(e){let t=e.response?.data?.errors;return Array.isArray(t)&&t.length>0?t.map(n=>n.detail||n.title||n.code).filter(Boolean).join("; "):e.response?.data?.error?.message||e.message||"Unknown App Store Connect error"}function hn(e){let t=String(e||"").trim();if(/^\d+(?:\.\d+){0,2}$/.test(t))return t.split(".").map(n=>Number(n))}function Sl(e,t){let n=hn(e),i=hn(t);if(!n&&!i)return 0;if(!n)return-1;if(!i)return 1;let r=Math.max(n.length,i.length);for(let o=0;o<r;o++){let s=n[o]||0,l=i[o]||0;if(s!==l)return s>l?1:-1}return 0}function yl(e){let t=hn(e);return!t||t.length===0?"1":(t[t.length-1]+=1,t.join("."))}async function bl(e,t,n){if(t)return t;if(!n)throw new Error("Set ios.ascAppId or ios.bundleIdentifier so Mach can find the App Store Connect app.");let r=(await jr("lookup app by bundle ID",()=>Br.get(`${ci}/apps`,{headers:Gr(e),params:{"filter[bundleId]":n,limit:1},timeout:Hr}))).data?.data?.[0];if(!r?.id)throw new Error(`No App Store Connect app found for bundle ID ${n}. Set ios.ascAppId in mach.config.json if the app exists.`);return r.id}async function Kr(e){let t={keyId:e.keyId,issuerId:e.issuerId,privateKey:e.privateKey};try{let n=await bl(t,e.ascAppId,e.bundleId),i=`${ci}/builds`,r="0",o,s=0;for(;i&&s<10;){s+=1;let l=await jr("list builds",()=>Br.get(i,{headers:Gr(t),params:i===`${ci}/builds`?{"filter[app]":n,"fields[builds]":"version,uploadedDate",sort:"-uploadedDate",limit:200}:void 0,timeout:Hr})),a=l.data?.data||[];for(let d of a){let u=String(d.attributes?.version||"").trim();hn(u)&&Sl(u,r)>0&&(r=u,o=d.attributes?.uploadedDate)}i=l.data?.links?.next}return{appId:n,latestBuildNumber:r,nextBuildNumber:yl(r),latestUploadedDate:o}}catch(n){throw new Error(`App Store Connect API Error: ${hl(n)}`)}}import{spinner as yn,log as O,isCancel as bn,confirm as El,select as ui}from"@clack/prompts";import R from"chalk";import S from"fs";import E from"path";import{execFileSync as nt,execSync as te,spawn as Xr}from"child_process";import Ae from"os";import Al from"crypto";var qr=(e,t)=>t.filter(n=>S.existsSync(E.join(e,n))).reduce((n,i)=>n.update(S.readFileSync(E.join(e,i))),Al.createHash("sha256")).digest("hex").slice(0,16),Il=e=>qr(e,["package.json","yarn.lock","package-lock.json","bun.lockb"]),wl=e=>qr(e,["Podfile","Podfile.lock"]),_l=e=>{let t=E.join(e,"fingerprint.json");try{return JSON.parse(S.readFileSync(t,"utf-8"))}catch{return{}}},Vr=(e,t)=>{S.mkdirSync(e,{recursive:!0}),S.writeFileSync(E.join(e,"fingerprint.json"),JSON.stringify(t,null,2))},Rl=7200*1e3,$l=(e,t)=>{S.mkdirSync(e,{recursive:!0});let n=E.join(e,"build.lock");if(S.existsSync(n))try{let i=JSON.parse(S.readFileSync(n,"utf-8")),r=Date.now()-(i.timestamp||0);if(r<Rl)throw new Error(`Another build is already running for this project (build ${i.buildId}, started ${Math.round(r/6e4)}m ago). Cancel it from the dashboard first, or wait for it to complete.`)}catch(i){if(i.message.includes("Another build"))throw i}S.writeFileSync(n,JSON.stringify({buildId:t,pid:process.pid,timestamp:Date.now()}))},vl=(e,t)=>{let n=E.join(e,"build.lock");try{S.existsSync(n)&&JSON.parse(S.readFileSync(n,"utf-8")).buildId===t&&S.unlinkSync(n)}catch{}},zr=15e5,Wr=(e,t)=>{let n=e+t;return n.length>zr?n.slice(-zr):n},Zr=e=>e.replace(/\u001b\[[0-9;]*m/g,""),Qr=e=>/\berror:|fatal error:|xcodebuild: error|The following build commands failed|Command PhaseScriptExecution failed|PhaseScriptExecution|Command .* failed|CodeSign|Provisioning profile|No profiles|requires a provisioning profile|Undefined symbols|ld:|clang: error|SwiftCompile|CompileC|node: command not found|env: node|No such file or directory|Permission denied/i.test(e),Pl=e=>{let t=new Set,n=[];e.forEach((r,o)=>{Qr(r)&&n.push(o)});for(let r of n){let o=/PhaseScriptExecution|Command PhaseScriptExecution failed|The following build commands failed/i.test(e[r])?18:8,s=/The following build commands failed/i.test(e[r])?18:10;for(let l=Math.max(0,r-o);l<=Math.min(e.length-1,r+s);l++)t.add(l)}if(t.size===0)return e.slice(-120);let i=Array.from(t).sort((r,o)=>r-o).map(r=>e[r]);return i.length>160?i.slice(-160):i},Ol=(e,t,n,i)=>{let r=Zr(i).replace(/\r/g,`
@@ -1336,28 +1336,28 @@ ${s.join(`
 `),u=B)};_.stdout.on("data",b=>{let L=b.toString();a=Wr(a,L),D(L,process.stdout),r&&r(L)}),_.stderr.on("data",b=>{let L=b.toString();a=Wr(a,L),D(L,process.stderr),r&&r(L)}),_.on("close",b=>{b===0?s(b):l(new Error(Ol(e,t,b,a)))}),_.on("error",b=>l(b))}),Sn=async(e,t,n,i,r)=>{try{await it("xcodebuild",e,t,n,i,r)}catch(o){if(!Ll(o))throw o;O.warn(R.yellow("CocoaPods script permission denied. Repairing Pods script permissions and retrying xcodebuild once...")),eo(t),await it("xcodebuild",e,t,n,i,r)}},Ml=e=>{let t=Math.floor(e/1e3%60),n=Math.floor(e/(1e3*60)%60),i=Math.floor(e/(1e3*60*60)%24),r=[];return i>0&&r.push(`${i}h`),n>0&&r.push(`${n}m`),(t>0||r.length===0)&&r.push(`${t}s`),r.join(" ")},At=(e,t)=>{let n=[];try{if(!S.existsSync(e))return n;let i=S.readdirSync(e);for(let r of i){let o=E.join(e,r);try{let s=S.statSync(o);if(t.some(a=>r.endsWith(a))){n.push(E.resolve(o));continue}s.isDirectory()&&(n=n.concat(At(o,t)))}catch{}}}catch{}return n},Ul=/^\d+(?:\.\d+){0,2}$/,pi=e=>{let t=String(e||"").trim();return!t||t==="undefined"||t==="null"?null:Ul.test(t)?t:null},to=(e,t)=>{let n=pi(e);if(!n)throw new Error(`Invalid iOS CFBundleVersion from ${t}: "${e||""}". Apple requires one to three period-separated integers, for example "42" or "1.2.3". If you see "[Decryption Failed]", fix/remove the broken BUILD_NUMBER secret and rebuild.`);return n},fi=(e,t)=>nt("/usr/libexec/PlistBuddy",["-c",`Print :${t}`,e],{encoding:"utf-8"}).trim(),Ct=(e,t)=>{try{return fi(e,t)}catch{return""}},Yr=e=>String(e||"").replace(/\.app$/i,"").replace(/[^a-z0-9]/gi,"").toLowerCase(),Fl=e=>{try{return S.statSync(e).isDirectory()}catch{return!1}},Bl=(e,t,n)=>{if(!S.existsSync(e))throw new Error(`iOS simulator build output directory was not found: ${e}`);let i=S.readdirSync(e).filter(d=>d.endsWith(".app")).map(d=>E.join(e,d)).filter(Fl);if(i.length===0){let u=At(e,[".app"]).map(c=>E.relative(e,c)).join(", ");throw new Error(`No top-level iOS simulator .app product was found in ${e}.`+(u?` Nested .app bundles found but ignored: ${u}`:""))}let r=new Set([t,n.iosScheme,n.scheme,n.appName].filter(Boolean).map(d=>Yr(String(d))).filter(Boolean)),o=i.map(d=>{let u=E.join(d,"Info.plist"),c=S.existsSync(u)?Ct(u,"CFBundleName"):"",f=S.existsSync(u)?Ct(u,"CFBundleDisplayName"):"",p=S.existsSync(u)?Ct(u,"CFBundleExecutable"):"",g=S.existsSync(u)?Ct(u,"CFBundleIdentifier"):"",y=p?E.join(d,p):"";return{appPath:d,bundleIdentifier:g,executable:p,isValid:S.existsSync(u)&&!!p&&S.existsSync(y),names:[E.basename(d,".app"),c,f,p].map(Yr).filter(Boolean)}}),s=o.filter(d=>d.isValid);if(s.length===0)throw new Error(`No valid iOS simulator .app product was found in ${e}. Candidates: `+o.map(d=>E.basename(d.appPath)).join(", "));let a=s.find(d=>d.names.some(u=>r.has(u)))||(s.length===1?s[0]:null);if(!a)throw new Error(`Multiple iOS simulator .app products were found in ${e}: `+s.map(d=>{let u=d.bundleIdentifier?` (${d.bundleIdentifier})`:"";return`${E.basename(d.appPath)}${u}`}).join(", ")+`. Set ios.scheme in ${m.configFileName} so ${m.name} can select the app target safely.`);return a.appPath},Jr=e=>{let t=E.join(e,"Info.plist");if(!S.existsSync(t))throw new Error(`Could not validate iOS build number: ${t} not found.`);return to(fi(t,"CFBundleVersion"),t)},no=e=>{let t=E.join(e,"Info.plist");if(!S.existsSync(t))throw new Error(`Could not validate iOS app executable: ${t} not found.`);let n=Ct(t,"CFBundleExecutable");if(!n)throw new Error(`Could not validate iOS app executable: CFBundleExecutable missing in ${t}.`);let i=E.join(e,n);if(!S.existsSync(i))throw new Error(`Could not validate iOS app executable: ${i} not found.`);return i},Hl=()=>process.arch==="arm64"?"arm64":"x86_64",io=e=>{let t=no(e),n="";try{n=nt("lipo",["-info",t],{encoding:"utf-8"}).trim()}catch(r){throw new Error(`Could not inspect iOS simulator executable architecture for ${E.basename(e)}: ${r.message}`)}let i=Hl();if(!new RegExp(`\\b${i}\\b`).test(n))throw new Error(`iOS simulator app ${E.basename(e)} cannot be installed on this runner because its executable does not include the required ${i} simulator architecture. lipo output: ${n}. Check the React Native iOS project ARCHS/EXCLUDED_ARCHS settings for iphonesimulator builds.`);return n},jl=e=>{try{return nt("xcrun",["vtool","-show-build",e],{encoding:"utf-8"}).trim()}catch(t){throw new Error(`Could not inspect iOS executable build platform for ${E.basename(e)}: ${t.message}`)}},ro=e=>{let t=no(e),n=jl(t);if(!/\bplatform\s+IOSSIMULATOR\b/i.test(n))throw new Error(`iOS simulator app ${E.basename(e)} was built for the wrong Apple platform. A simulator artifact must contain PLATFORM IOSSIMULATOR, not an iPhone device binary. vtool output: ${n}`);return n},Gl=e=>{let n=nt("unzip",["-Z1",e],{encoding:"utf-8"}).split(`
 `).find(r=>/^Payload\/[^/]+\.app\/Info\.plist$/.test(r.trim()));if(!n)throw new Error(`Could not validate iOS build number: ${E.basename(e)} has no Payload/*.app/Info.plist.`);let i=S.mkdtempSync(E.join(Ae.tmpdir(),`${m.nameLower}-ipa-plist-`));try{let r=E.join(i,"Info.plist"),o=nt("unzip",["-p",e,n.trim()]);return S.writeFileSync(r,o),to(fi(r,"CFBundleVersion"),`${E.basename(e)}:${n.trim()}`)}finally{S.rmSync(i,{recursive:!0,force:!0})}},Kl=e=>`'${e.replace(/'/g,"'\\''")}'`,Vl=()=>process.execPath&&S.existsSync(process.execPath)?process.execPath:nt("which",["node"],{encoding:"utf-8"}).trim(),oo=(e,t,n)=>{if(!S.existsSync(e))return;let i=Vl();t.NODE_BINARY=i;let r=E.join(e,".xcode.env.local");S.writeFileSync(r,`export NODE_BINARY=${Kl(i)}
 `);let o=`[NODE] Xcode NODE_BINARY: ${i}
-`;n&&n(R.dim(o)),O.info(R.dim(o.trim()))},mi=async(e,t,n={},i,r={})=>{let o=yn(),s=Date.now(),l=e.platform,a=e.buildProfile||"production",d=Qe(e.framework),u=()=>bt(n,a,e),c=async(I,T={})=>{if(i)for(let w=1;w<=3;w++)try{await k.patch(`/builds/${i}/${t}`,{status:I,...T});return}catch(C){let h=C?.response?.data?.message||C?.message||String(C);console.error(`[reportStatus] attempt ${w}/3 failed (status=${I}): ${h}`),w<3&&await new Promise(M=>setTimeout(M,2e3))}},f=new AbortController,{signal:p}=f,g=null;i&&(g=setInterval(async()=>{try{(await k.get(`/builds/${i}/${t}`)).data.status==="cancelled"&&(O.warn(R.yellow(`
-\u{1F6D1} Build cancelled from dashboard. Terminating...`)),f.abort(),g&&clearInterval(g))}catch{}},5e3));let y=E.join(process.cwd(),".mach-cache"),_="setup",D="",b=null,L=async()=>{if(!D||!i)return;let I=D;D="";try{let T=I;Object.values(n).forEach(w=>{if(w&&w.length>5){let C=w.replace(/[.*+?^${}()|[\]\\]/g,"\\$&");T=T.replace(new RegExp(C,"g"),"[SECRET]")}}),await k.post(`/builds/${i}/${t}/logs`,{log:T,step:_})}catch{}},A=async()=>{b&&(clearTimeout(b),b=null),await L(),vl(y,t),g&&(clearInterval(g),g=null);try{let I=E.join(Ae.tmpdir(),`${m.buildPrefix}-${t}.keychain-db`);S.existsSync(I)&&(te(`security delete-keychain "${I}"`,{stdio:"ignore"}),O.info(R.dim("\u{1F511} Build keychain deleted.")))}catch{}try{let I=E.join(Ae.homedir(),"Library/MobileDevice/Provisioning Profiles");if(S.existsSync(I)){let T=S.readdirSync(I).filter(w=>w.includes(t)||w.startsWith(`${m.nameLower}-temp-${t}`));for(let w of T)S.unlinkSync(E.join(I,w))}}catch{}},B=async I=>{i&&(D+=I,D.length>=8192?(b&&(clearTimeout(b),b=null),await L()):b||(b=setTimeout(()=>{b=null,L()},2e3)))},q=async I=>{_=I,await B(`[STEP_START:${I}] ${Math.floor(Date.now()/1e3)}
-`)},P=async(I,T,w,C)=>await it(I,T,w,C,h=>{B(h)},p);O.info(R.blue(`\u{1F680} Starting local build for ${l} (${a})...`));try{$l(y,t)}catch(I){throw await c("failed",{error:I.message,endTime:Date.now()}),I}if(await c("building"),await q("setup"),l==="ios"&&!e.simulator&&n.MACH_IOS_BUILD_NUMBER_LOCKED==="1"&&n.BUILD_NUMBER)O.info(R.dim(`Auto build number: ${n.BUILD_NUMBER}`)),await B(`[BUILD_NUMBER] ${n.BUILD_NUMBER}
-`);else if(i&&l==="ios"&&!e.simulator)try{let I=parseInt(n.BUILD_NUMBER||"0",10),T=Number.isFinite(I)?I:0,w=await k.post(`/projects/${i}/next-build-number`,{platform:"ios",startFrom:T});if(w.data.status==="success"){let C=pi(String(w.data.buildNumber||""));if(!C)throw new Error(`Dashboard returned invalid iOS build number: "${w.data.buildNumber||""}"`);let h=parseInt(C,10),M=T>0&&Number.isFinite(h)&&h<T?String(T):C;M!==C&&(O.warn(R.yellow(`Dashboard build counter returned ${C}; using minimum ${M}.`)),await B(`[BUILD_NUMBER] Dashboard returned ${C}; using minimum ${M}
+`;n&&n(R.dim(o)),O.info(R.dim(o.trim()))},mi=async(e,t,n={},i,r={})=>{let o=yn(),s=Date.now(),l=e.platform,a=e.buildProfile||"production",d=Qe(e.framework),u=()=>bt(n,a,e),c=async(I,T={})=>{if(i)for(let w=1;w<=3;w++)try{await k.patch(`/builds/${i}/${t}`,{status:I,...T});return}catch(N){let h=N?.response?.data?.message||N?.message||String(N);console.error(`[reportStatus] attempt ${w}/3 failed (status=${I}): ${h}`),w<3&&await new Promise(M=>setTimeout(M,2e3))}},f=new AbortController,{signal:p}=f,g=null;i&&(g=setInterval(async()=>{try{(await k.get(`/builds/${i}/${t}`)).data.status==="cancelled"&&(O.warn(R.yellow(`
+\u{1F6D1} Build cancelled from dashboard. Terminating...`)),f.abort(),g&&clearInterval(g))}catch{}},5e3));let y=E.join(process.cwd(),".mach-cache"),_="setup",D="",b=null,L=async()=>{if(!D||!i)return;let I=D;D="";try{let T=I;Object.values(n).forEach(w=>{if(w&&w.length>5){let N=w.replace(/[.*+?^${}()|[\]\\]/g,"\\$&");T=T.replace(new RegExp(N,"g"),"[SECRET]")}}),await k.post(`/builds/${i}/${t}/logs`,{log:T,step:_})}catch{}},A=async()=>{b&&(clearTimeout(b),b=null),await L(),vl(y,t),g&&(clearInterval(g),g=null);try{let I=E.join(Ae.tmpdir(),`${m.buildPrefix}-${t}.keychain-db`);S.existsSync(I)&&(te(`security delete-keychain "${I}"`,{stdio:"ignore"}),O.info(R.dim("\u{1F511} Build keychain deleted.")))}catch{}try{let I=E.join(Ae.homedir(),"Library/MobileDevice/Provisioning Profiles");if(S.existsSync(I)){let T=S.readdirSync(I).filter(w=>w.includes(t)||w.startsWith(`${m.nameLower}-temp-${t}`));for(let w of T)S.unlinkSync(E.join(I,w))}}catch{}},B=async I=>{i&&(D+=I,D.length>=8192?(b&&(clearTimeout(b),b=null),await L()):b||(b=setTimeout(()=>{b=null,L()},2e3)))},q=async I=>{_=I,await B(`[STEP_START:${I}] ${Math.floor(Date.now()/1e3)}
+`)},P=async(I,T,w,N)=>await it(I,T,w,N,h=>{B(h)},p);O.info(R.blue(`\u{1F680} Starting local build for ${l} (${a})...`));try{$l(y,t)}catch(I){throw await c("failed",{error:I.message,endTime:Date.now()}),I}if(await c("building"),await q("setup"),l==="ios"&&!e.simulator&&n.MACH_IOS_BUILD_NUMBER_LOCKED==="1"&&n.BUILD_NUMBER)O.info(R.dim(`Auto build number: ${n.BUILD_NUMBER}`)),await B(`[BUILD_NUMBER] ${n.BUILD_NUMBER}
+`);else if(i&&l==="ios"&&!e.simulator)try{let I=parseInt(n.BUILD_NUMBER||"0",10),T=Number.isFinite(I)?I:0,w=await k.post(`/projects/${i}/next-build-number`,{platform:"ios",startFrom:T});if(w.data.status==="success"){let N=pi(String(w.data.buildNumber||""));if(!N)throw new Error(`Dashboard returned invalid iOS build number: "${w.data.buildNumber||""}"`);let h=parseInt(N,10),M=T>0&&Number.isFinite(h)&&h<T?String(T):N;M!==N&&(O.warn(R.yellow(`Dashboard build counter returned ${N}; using minimum ${M}.`)),await B(`[BUILD_NUMBER] Dashboard returned ${N}; using minimum ${M}
 `)),n.BUILD_NUMBER=M,O.info(R.dim(`Auto build number: ${n.BUILD_NUMBER}`)),await B(`[BUILD_NUMBER] ${n.BUILD_NUMBER}
 `)}}catch(I){O.warn(R.yellow(`Could not fetch auto build number: ${I.message}`))}await q("lock"),d.applyLocalProcessEnv(e);try{await q("clone"),O.info(R.dim("Preparing source...")),await q("read_config");let I=E.join(process.cwd(),m.configFileName);if(S.existsSync(I)){let G=JSON.parse(S.readFileSync(I,"utf-8"))?.build?.[a]||{};await B(`[CONFIG] Profile: ${a}, distribution: ${G.distribution||"not set"}, simulator: ${G.simulator||!1}
-`)}if(await q("read_package"),e.nodeVersion){let V=process.env.NVM_DIR||E.join(Ae.homedir(),".nvm"),G=E.join(V,"versions","node"),Q;if(S.existsSync(G)){let z=S.readdirSync(G).sort().reverse(),J=e.nodeVersion.startsWith("v")?e.nodeVersion:`v${e.nodeVersion}`,ae=z.find(ye=>ye===J||ye.startsWith(J+".")||ye.startsWith(`v${e.nodeVersion}.`));ae&&(Q=E.join(G,ae,"bin"))}if(Q&&S.existsSync(Q)){let z=process.env.PATH||"";process.env.PATH=`${Q}:${z}`,await B(`[NODE] Switched to Node ${e.nodeVersion} \u2014 using ${Q}
+`)}if(await q("read_package"),e.nodeVersion){let z=process.env.NVM_DIR||E.join(Ae.homedir(),".nvm"),G=E.join(z,"versions","node"),Q;if(S.existsSync(G)){let W=S.readdirSync(G).sort().reverse(),J=e.nodeVersion.startsWith("v")?e.nodeVersion:`v${e.nodeVersion}`,le=W.find(ye=>ye===J||ye.startsWith(J+".")||ye.startsWith(`v${e.nodeVersion}.`));le&&(Q=E.join(G,le,"bin"))}if(Q&&S.existsSync(Q)){let W=process.env.PATH||"";process.env.PATH=`${Q}:${W}`,await B(`[NODE] Switched to Node ${e.nodeVersion} \u2014 using ${Q}
 `),O.info(R.green(`\u2713 Node switched to ${e.nodeVersion} (${Q})`))}else await B(`[NODE] Warning: Node ${e.nodeVersion} not found in nvm. Run: nvm install ${e.nodeVersion} on the build machine.
-`),O.warn(R.yellow(`Node ${e.nodeVersion} not found in nvm \u2014 using system default`))}await q("deps"),o.start("Checking dependencies...");let T=_l(y),w=Il(process.cwd()),C=S.existsSync("node_modules"),h=S.existsSync("yarn.lock"),M=S.existsSync("bun.lockb");C&&T.node&&T.node!==w&&(o.stop("Dependency fingerprint changed \u2014 clearing node_modules for clean install..."),await B(`[CACHE] package.json/lockfile changed \u2014 wiping node_modules
-`),S.rmSync(E.join(process.cwd(),"node_modules"),{recursive:!0,force:!0}),C=!1);let U="npm",j=["install","--prefer-offline"];h?(U="yarn",j=["install","--prefer-offline"]):M&&(U="bun",j=["install"]),C?o.stop("Cached node_modules found. Syncing dependencies..."):o.stop("No cached dependencies. Running fresh install..."),e.preBuild&&(O.info(R.blue("Running pre-install hook...")),O.info(R.dim(`> ${e.preBuild}`)),await q("prebuild"),await P("bash",[e.preBuild],process.cwd(),u())),O.info(R.dim(`Running ${U} ${j.join(" ")}...`)),await P(U,j,process.cwd(),u()),T.node=w,Vr(y,T);let X=await d.prepareLocalProject({platform:l,options:e,cacheMeta:T,cacheMetaDir:y,currentBuildEnv:u,reportStep:q,reportLog:B,loggedRun:P,configureXcodeNodeBinary:oo,podsFingerprint:wl,writeCacheMeta:Vr}),H=X.bundleId||e.iosBundleIdentifier||"",N=X.appName||e.name||"",W=[];if(l==="android")await q("build"),W=await zl(e,a,n,V=>B(V),p);else if(l==="ios"){await q("signing"),O.info(R.dim("Preparing credentials..."));let V=r?.distributionType;W=await Wl(e,t,a,n,i,G=>B(G),p,V,G=>q(G))}e.postBuild&&(O.info(R.blue("Running post-build hook...")),O.info(R.dim(`> ${e.postBuild}`)),await P(e.postBuild,[],process.cwd(),u()));let de=Ml(Date.now()-s);if(O.success(R.green(`
-\u2713 Local build completed successfully in ${de}`)),await c("building",{...H&&{bundleId:H},...N&&{appName:N}}),W.length>0&&(O.info(R.cyan(`
-\u{1F4E6} Generated Artifacts:`)),W.forEach(V=>{let G=E.resolve(V);O.info(R.dim(`  - ${V}`)),O.info(R.gray(`    Path: ${G}`))}),e.interactive)){let V=await El({message:"Install on connected device?"});if(!bn(V)&&V){if(l==="android"){let G=W.find(Q=>Q.endsWith(".apk"))||W[0];await Jl(G,Q=>B(Q))}else if(l==="ios"){let G=W.find(z=>z.endsWith(".ipa"))||W.find(z=>z.endsWith(".app"))||W[0],Q=rt("ios");e.simulator?await Xl(G,Q||"",z=>B(z)):await ql(G,Q||"",z=>B(z))}}}await q("upload");let ue=[];for(let V of W)try{let G=E.join(Ae.tmpdir(),`${t}-${E.basename(V)}`);S.copyFileSync(V,G),ue.push(G),O.info(R.dim(`  \u{1F4CB} Preserved artifact: ${E.basename(V)}`))}catch{O.warn(R.yellow(`  Failed to preserve artifact: ${E.basename(V)}`))}W=ue,O.info(R.dim("\u{1F9F9} Cleaning workspace (preserving dependency cache)..."));try{let V=process.cwd(),G=new Set(["node_modules"]),Q=S.readdirSync(V),z=0;for(let J of Q)if(!G.has(J)){if(J==="ios"){let ae=E.join(V,"ios"),ye=S.readdirSync(ae);for(let _e of ye)if(_e!=="Pods")try{S.rmSync(E.join(ae,_e),{recursive:!0,force:!0}),z++}catch{}continue}try{S.rmSync(E.join(V,J),{recursive:!0,force:!0}),z++}catch{}}O.info(R.dim(`  Cleaned ${z} items. Cached: node_modules${S.existsSync(E.join(V,"ios","Pods"))?", ios/Pods":""}`)),O.info(R.green("\u{1F512} Security: No source code retained on build server. Only public dependencies cached."))}catch{O.warn(R.yellow("Post-build cleanup encountered errors (non-fatal)."))}try{let G=E.join(Ae.homedir(),m.workspacesDir),Q=te(`df -k "${G}" | tail -1 | awk '{print $4}'`,{encoding:"utf8"}).trim(),z=parseInt(Q,10)*1024;if(z<53687091200&&S.existsSync(G)){O.info(R.dim(`  \u26A0\uFE0F Low disk space (${(z/1024/1024/1024).toFixed(0)} GB free). Running cache eviction...`));let J=E.basename(process.cwd()),ae=S.readdirSync(G).filter(ye=>ye!==J).map(ye=>{let _e=E.join(G,ye);try{let $t=S.statSync(_e);return $t.isDirectory()?{name:ye,dir:_e,mtime:$t.mtimeMs}:null}catch{return null}}).filter(Boolean);ae.sort((ye,_e)=>ye.mtime-_e.mtime);for(let ye of ae){if(z>=53687091200)break;try{S.rmSync(ye.dir,{recursive:!0,force:!0}),O.info(R.dim(`  \u{1F5D1}\uFE0F Evicted stale workspace: ${ye.name}`));let _e=te(`df -k "${G}" | tail -1 | awk '{print $4}'`,{encoding:"utf8"}).trim();if(parseInt(_e,10)*1024>=53687091200)break}catch{}}}}catch{}return await A(),W}catch(I){throw await A(),I.message==="Command aborted"?(O.warn(R.yellow(`
+`),O.warn(R.yellow(`Node ${e.nodeVersion} not found in nvm \u2014 using system default`))}await q("deps"),o.start("Checking dependencies...");let T=_l(y),w=Il(process.cwd()),N=S.existsSync("node_modules"),h=S.existsSync("yarn.lock"),M=S.existsSync("bun.lockb");N&&T.node&&T.node!==w&&(o.stop("Dependency fingerprint changed \u2014 clearing node_modules for clean install..."),await B(`[CACHE] package.json/lockfile changed \u2014 wiping node_modules
+`),S.rmSync(E.join(process.cwd(),"node_modules"),{recursive:!0,force:!0}),N=!1);let U="npm",j=["install","--prefer-offline"];h?(U="yarn",j=["install","--prefer-offline"]):M&&(U="bun",j=["install"]),N?o.stop("Cached node_modules found. Syncing dependencies..."):o.stop("No cached dependencies. Running fresh install..."),e.preBuild&&(O.info(R.blue("Running pre-install hook...")),O.info(R.dim(`> ${e.preBuild}`)),await q("prebuild"),await P("bash",[e.preBuild],process.cwd(),u())),O.info(R.dim(`Running ${U} ${j.join(" ")}...`)),await P(U,j,process.cwd(),u()),T.node=w,Vr(y,T);let X=await d.prepareLocalProject({platform:l,options:e,cacheMeta:T,cacheMetaDir:y,currentBuildEnv:u,reportStep:q,reportLog:B,loggedRun:P,configureXcodeNodeBinary:oo,podsFingerprint:wl,writeCacheMeta:Vr}),H=X.bundleId||e.iosBundleIdentifier||"",C=X.appName||e.name||"",V=[];if(l==="android")await q("build"),V=await zl(e,a,n,z=>B(z),p);else if(l==="ios"){await q("signing"),O.info(R.dim("Preparing credentials..."));let z=r?.distributionType;V=await Wl(e,t,a,n,i,G=>B(G),p,z,G=>q(G))}e.postBuild&&(O.info(R.blue("Running post-build hook...")),O.info(R.dim(`> ${e.postBuild}`)),await P(e.postBuild,[],process.cwd(),u()));let se=Ml(Date.now()-s);if(O.success(R.green(`
+\u2713 Local build completed successfully in ${se}`)),await c("building",{...H&&{bundleId:H},...C&&{appName:C}}),V.length>0&&(O.info(R.cyan(`
+\u{1F4E6} Generated Artifacts:`)),V.forEach(z=>{let G=E.resolve(z);O.info(R.dim(`  - ${z}`)),O.info(R.gray(`    Path: ${G}`))}),e.interactive)){let z=await El({message:"Install on connected device?"});if(!bn(z)&&z){if(l==="android"){let G=V.find(Q=>Q.endsWith(".apk"))||V[0];await Jl(G,Q=>B(Q))}else if(l==="ios"){let G=V.find(W=>W.endsWith(".ipa"))||V.find(W=>W.endsWith(".app"))||V[0],Q=rt("ios");e.simulator?await Xl(G,Q||"",W=>B(W)):await ql(G,Q||"",W=>B(W))}}}await q("upload");let ue=[];for(let z of V)try{let G=E.join(Ae.tmpdir(),`${t}-${E.basename(z)}`);S.copyFileSync(z,G),ue.push(G),O.info(R.dim(`  \u{1F4CB} Preserved artifact: ${E.basename(z)}`))}catch{O.warn(R.yellow(`  Failed to preserve artifact: ${E.basename(z)}`))}V=ue,O.info(R.dim("\u{1F9F9} Cleaning workspace (preserving dependency cache)..."));try{let z=process.cwd(),G=new Set(["node_modules"]),Q=S.readdirSync(z),W=0;for(let J of Q)if(!G.has(J)){if(J==="ios"){let le=E.join(z,"ios"),ye=S.readdirSync(le);for(let _e of ye)if(_e!=="Pods")try{S.rmSync(E.join(le,_e),{recursive:!0,force:!0}),W++}catch{}continue}try{S.rmSync(E.join(z,J),{recursive:!0,force:!0}),W++}catch{}}O.info(R.dim(`  Cleaned ${W} items. Cached: node_modules${S.existsSync(E.join(z,"ios","Pods"))?", ios/Pods":""}`)),O.info(R.green("\u{1F512} Security: No source code retained on build server. Only public dependencies cached."))}catch{O.warn(R.yellow("Post-build cleanup encountered errors (non-fatal)."))}try{let G=E.join(Ae.homedir(),m.workspacesDir),Q=te(`df -k "${G}" | tail -1 | awk '{print $4}'`,{encoding:"utf8"}).trim(),W=parseInt(Q,10)*1024;if(W<53687091200&&S.existsSync(G)){O.info(R.dim(`  \u26A0\uFE0F Low disk space (${(W/1024/1024/1024).toFixed(0)} GB free). Running cache eviction...`));let J=E.basename(process.cwd()),le=S.readdirSync(G).filter(ye=>ye!==J).map(ye=>{let _e=E.join(G,ye);try{let $t=S.statSync(_e);return $t.isDirectory()?{name:ye,dir:_e,mtime:$t.mtimeMs}:null}catch{return null}}).filter(Boolean);le.sort((ye,_e)=>ye.mtime-_e.mtime);for(let ye of le){if(W>=53687091200)break;try{S.rmSync(ye.dir,{recursive:!0,force:!0}),O.info(R.dim(`  \u{1F5D1}\uFE0F Evicted stale workspace: ${ye.name}`));let _e=te(`df -k "${G}" | tail -1 | awk '{print $4}'`,{encoding:"utf8"}).trim();if(parseInt(_e,10)*1024>=53687091200)break}catch{}}}}catch{}return await A(),V}catch(I){throw await A(),I.message==="Command aborted"?(O.warn(R.yellow(`
 \u274C Build aborted.`)),await c("failed",{error:"Aborted by user",endTime:Date.now()}),I):(O.error(R.red(`
-\u2717 Local build failed: ${I.message}`)),await c("failed",{error:I.message,endTime:Date.now()}),I)}},zl=async(e,t,n={},i,r)=>{let o=S.existsSync("android/gradlew")?"android/gradlew":S.existsSync("gradlew")?"./gradlew":null;if(!o)throw new Error("Could not find gradlew. Is this an Android project?");let s=e.developmentClient?"assembleDebug":"assembleRelease";!e.developmentClient&&e.distribution==="store"?s="bundleRelease":!e.developmentClient&&e.distribution==="internal"&&(s="assembleRelease");let l=e.buildCommand||s;O.info(R.blue(`Running Android build: ${l}...`));let a=o.includes("android/")?"android":".",d=(o.includes("android/"),"./gradlew"),u=[l],c=Qe(e.framework),f={...n,...c.localAndroidEnv(e,t),MACH_APP_NAME:e.appName||e.name||"App"};if(n.ANDROID_VERSION_CODE){let g=E.join(a,"app/build.gradle");if(S.existsSync(g)){let y=n.ANDROID_VERSION_CODE,_=S.readFileSync(g,"utf-8");_=_.replace(/versionCode\s+\d+/,`versionCode ${y}`),S.writeFileSync(g,_),O.info(R.green(`\u2713 Applied Android versionCode ${y}`))}u.push(`-Pandroid.injected.version.code=${n.ANDROID_VERSION_CODE}`)}for(let g of["app/build","build",".cxx"]){let y=E.join(a,g);S.existsSync(y)&&S.rmSync(y,{recursive:!0,force:!0})}di(process.cwd()),await it(d,u,a,f,i,r);let p=E.join(a,"app/build/outputs");return At(p,[".apk",".aab"])},Wl=async(e,t,n,i={},r,o,s,l,a)=>{if(process.platform!=="darwin")throw new Error("iOS builds can only be run on macOS.");let d=E.resolve(process.cwd(),S.existsSync("ios")?"ios":".");eo(d);let u=S.readdirSync(d),c=u.find(T=>T.endsWith(".xcworkspace")),f=u.find(T=>T.endsWith(".xcodeproj")),p=bt(i,n,e);oo(d,p,o);let g=pi(p.BUILD_NUMBER||p.CURRENT_PROJECT_VERSION);if((p.BUILD_NUMBER||p.CURRENT_PROJECT_VERSION)&&!g)throw new Error(`Invalid iOS BUILD_NUMBER/CURRENT_PROJECT_VERSION: "${p.BUILD_NUMBER||p.CURRENT_PROJECT_VERSION}". Apple requires one to three period-separated integers. Fix the Dashboard secret or remove it so Mach can use its auto build number.`);let y=g?[`BUILD_NUMBER=${g}`,`CURRENT_PROJECT_VERSION=${g}`]:[];if(g&&(p.BUILD_NUMBER=g,p.CURRENT_PROJECT_VERSION=g,O.info(R.dim(`Using iOS build number: ${g}`))),!c&&!f)throw new Error("Could not find Xcode workspace or project in ios/ directory.");try{let T=te("xcode-select -p").toString().trim();O.info(R.dim(`Using Xcode at: ${T}`))}catch{O.warn(R.dim("Could not detect Xcode path."))}O.info(R.blue("Running iOS build via xcodebuild..."));let _=c?c.replace(".xcworkspace",""):f?.replace(".xcodeproj",""),D=e.iosScheme||_||e.scheme,b=e.developmentClient?"Debug":e.iosConfiguration||"Release",L=(r||"default").replace(/[^a-zA-Z0-9-_]/g,"_"),A=E.join(Ae.homedir(),`Library/Developer/Xcode/DerivedData/${m.nameLower}`,L);S.mkdirSync(A,{recursive:!0});let B=Dt(p),q=E.join(A,".mach-env-hash"),P=E.join(A,"Build"),I=S.existsSync(q)?S.readFileSync(q,"utf-8").trim():"";if(S.existsSync(P)){let T=I&&I!==B?"Build environment changed \u2014 clearing iOS DerivedData build products.":I?"Clearing iOS DerivedData build products to force a fresh JS bundle.":"DerivedData has no environment stamp \u2014 clearing iOS build products.";O.info(R.dim(T)),S.rmSync(P,{recursive:!0,force:!0})}if(S.writeFileSync(q,B),di(process.cwd()),e.simulator){let T=xl(d,c,f,D,b),w=T||"generic/platform=iOS Simulator",C=["-destination",w];O.info(R.dim(T?`Building for simulator (Scheme: ${D}, Config: ${b}, Destination: ${w})...`:`Building for simulator (Scheme: ${D}, Config: ${b}, Destination: ${w})...`));let h=[c?"-workspace":"-project",c||f,"-scheme",D,"-configuration",b,"-sdk","iphonesimulator",...C,"-derivedDataPath",A,...y,"COMPILER_INDEX_STORE_ENABLE=NO","CODE_SIGNING_ALLOWED=NO","CODE_SIGNING_REQUIRED=NO","ONLY_ACTIVE_ARCH=NO","EXCLUDED_ARCHS=","SUPPORTED_PLATFORMS=iphonesimulator"];try{await Sn(h,d,p,o,s)}catch(ue){if(!Tl(ue))throw ue;kl(A),di(process.cwd()),await Sn(h,d,p,o,s)}let M=E.join(A,"Build/Products",`${b}-iphonesimulator`),U=Bl(M,D,e),j=E.basename(U,".app"),X=Ct(E.join(U,"Info.plist"),"CFBundleIdentifier")||"unknown bundle",H=Jr(U),N=io(U),W=ro(U),de=E.join(M,`${j}_simulator.zip`);return O.info(R.dim(`Selected simulator app: ${E.relative(M,U)} (${X}, build ${H})`)),O.info(R.dim(`Simulator executable architecture: ${N}`)),O.info(R.dim(`Simulator executable platform: ${W.split(`
-`).find(ue=>/\bplatform\b/i.test(ue))?.trim()||"IOSSIMULATOR"}`)),O.info(R.dim(`Creating simulator artifact: ${de}...`)),ke(de),nt("zip",["-r",de,E.basename(U)],{cwd:E.dirname(U),stdio:"pipe"}),[de]}else{O.info(R.dim(`Archiving (Scheme: ${D}, Config: ${b})...`));let T=E.join(d,"build.xcarchive"),w=E.join(d,"export");S.rmSync(T,{recursive:!0,force:!0}),S.rmSync(w,{recursive:!0,force:!0});let C=i.IOS_DIST_P12,h=i.IOS_PROVISIONING_PROFILE,M=i.IOS_P12_PASSWORD||"",U=[],j,X,H={isAppStore:!1,isDevelopment:!1};if(C&&h){O.info(R.blue("\u{1F510} CI/CD Signing: Importing certificates..."));try{let z=`${m.buildPrefix}-${t}.keychain-db`,J=E.join(Ae.tmpdir(),z),ae=m.keychainPassword;te(`security create-keychain -p "${ae}" "${J}" 2>/dev/null || true`),te(`security set-keychain-settings -t 3600 -l "${J}"`),te(`security unlock-keychain -p "${ae}" "${J}"`);let ye=E.join(Ae.tmpdir(),`cert-${t}.p12`),_e=Buffer.from(C,"base64");S.writeFileSync(ye,_e),O.info(R.dim(`P12 data size: ${_e.length} bytes, first bytes: ${_e.slice(0,4).toString("hex")}`)),(_e.length<100||_e[0]!==48)&&(O.warn(R.yellow("\u26A0\uFE0F  P12 data looks corrupted or was not decrypted correctly.")),O.warn(R.yellow("    This usually means MACH_ENCRYPTION_KEY on the Remote API differs from when credentials were uploaded.")));let $t=[M,"",m.keychainPassword],ar=!1;for(let Re of $t)try{te(`security import "${ye}" -k "${J}" -P "${Re}" -A -T /usr/bin/codesign -T /usr/bin/security`,{stdio:"pipe"}),ar=!0,O.info(R.dim(`\u2713 P12 imported successfully with password: ${Re?"[set]":"[empty]"}`));break}catch(Be){O.info(R.dim(`  P12 import attempt with password ${Re?`"${Re.substring(0,3)}..."`:"[empty]"} failed: ${Be.message?.split(`
-`)[0]||"unknown"}`))}if(!ar)throw new Error("Failed to import P12.");S.unlinkSync(ye),te(`security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k "${ae}" "${J}"`);let Ta=te("security list-keychains -d user",{encoding:"utf-8"}).split(`
-`).map(Re=>Re.trim().replace(/^"|"$/g,"")).filter(Re=>Re.length>0),ka=[J,...Ta].map(Re=>`"${Re}"`).join(" ");te(`security list-keychains -d user -s ${ka}`),te(`security default-keychain -s "${J}"`);let Zn=E.join(Ae.homedir(),"Library/MobileDevice/Provisioning Profiles");S.mkdirSync(Zn,{recursive:!0});let lr=Buffer.from(h,"base64"),Qn=E.join(Zn,`${m.nameLower}-temp-${t}.mobileprovision`);S.writeFileSync(Qn,lr);let ei=lr.toString("utf-8"),cr=/<key>get-task-allow<\/key>\s*<true\/>/.test(ei);H={isAppStore:!ei.includes("<key>ProvisionedDevices</key>")&&!cr,isDevelopment:cr};try{let Be=te(`security cms -D -i "${Qn}"`,{encoding:"utf-8"}).match(/<key>UUID<\/key>\s*<string>([^<]+)<\/string>/);X=Be?Be[1]:void 0}catch{let Be=ei.match(/<key>UUID<\/key>\s*<string>([^<]+)<\/string>/);X=Be?Be[1]:void 0}X||(O.warn("Could not extract UUID from provisioning profile. Using fallback."),X=`${m.nameLower}-${t}`);let ti=E.join(Zn,`${X}.mobileprovision`);S.existsSync(ti)&&S.unlinkSync(ti),S.renameSync(Qn,ti);try{let Re=te(`security find-identity -v -p codesigning "${J}"`,{encoding:"utf-8"}),Be=Array.from(Re.matchAll(/"((?:Apple|iPhone) (?:Distribution|Developer|Development)[^"]*)"/g),Bt=>Bt[1]),dr=H.isDevelopment?Be.find(Bt=>/\b(Development|Developer)\b/.test(Bt)):Be.find(Bt=>/\bDistribution\b/.test(Bt)),ur=Be[0];(dr||ur)&&(j=dr||ur,O.info(R.blue(`Identity auto-detected from keychain: "${j}"`)))}catch{}j||(j=H.isDevelopment?"Apple Development":"Apple Distribution",O.info(R.blue(`Identity fallback (profile heuristic): "${j}"`))),O.info(R.dim(`Profile type: ${H.isDevelopment?"Development":H.isAppStore?"App Store":"Ad-Hoc"}`)),O.info(R.dim(`Identity Detection: get-task-allow=${H.isDevelopment}, Selected Identity="${j}"`)),U.push("CODE_SIGN_STYLE=Manual"),U.push(`CODE_SIGN_IDENTITY="${j}"`),U.push(`PROVISIONING_PROFILE_SPECIFIER=${X}`),e.iosTeamId&&U.push(`DEVELOPMENT_TEAM=${e.iosTeamId}`)}catch(z){throw O.error(`Signing setup failed: ${z.message}`),z}}else U.push("-allowProvisioningUpdates"),e.iosTeamId&&U.push(`DEVELOPMENT_TEAM=${e.iosTeamId}`);a&&await a("archive"),O.info(R.blue(`Archive detected Identity: "${j}"`)),O.info(R.blue(`Archive detected UUID: "${X}"`)),await Sn(["archive",c?"-workspace":"-project",c||f,"-scheme",D,"-configuration",b,"-archivePath",T,"-derivedDataPath",A,...y,...U],d,p,o,s);let N=At(E.join(T,"Products","Applications"),[".app"]);for(let z of N){let J=Jr(z);O.info(R.dim(`Validated iOS CFBundleVersion ${J} in ${E.basename(z)}`))}let W;X?(H.isAppStore?W="app-store":H.isDevelopment?W="development":W="ad-hoc",O.info(R.blue(`Export method from profile: "${W}"`))):(W=e.distribution==="store"?"app-store":e.distribution==="internal"?"ad-hoc":"development",O.warn(R.yellow(`No profile UUID detected. Export method from distribution flag: "${W}"`)));let de=e.iosExportMethod||W,ue=e.iosBundleIdentifier||rt("ios"),V=E.join(d,"ExportOptions.plist"),G=`<?xml version="1.0" encoding="UTF-8"?>
+\u2717 Local build failed: ${I.message}`)),await c("failed",{error:I.message,endTime:Date.now()}),I)}},zl=async(e,t,n={},i,r)=>{let o=S.existsSync("android/gradlew")?"android/gradlew":S.existsSync("gradlew")?"./gradlew":null;if(!o)throw new Error("Could not find gradlew. Is this an Android project?");let s=e.developmentClient?"assembleDebug":"assembleRelease";!e.developmentClient&&e.distribution==="store"?s="bundleRelease":!e.developmentClient&&e.distribution==="internal"&&(s="assembleRelease");let l=e.buildCommand||s;O.info(R.blue(`Running Android build: ${l}...`));let a=o.includes("android/")?"android":".",d=(o.includes("android/"),"./gradlew"),u=[l],c=Qe(e.framework),f={...n,...c.localAndroidEnv(e,t),MACH_APP_NAME:e.appName||e.name||"App"};if(n.ANDROID_VERSION_CODE){let g=E.join(a,"app/build.gradle");if(S.existsSync(g)){let y=n.ANDROID_VERSION_CODE,_=S.readFileSync(g,"utf-8");_=_.replace(/versionCode\s+\d+/,`versionCode ${y}`),S.writeFileSync(g,_),O.info(R.green(`\u2713 Applied Android versionCode ${y}`))}u.push(`-Pandroid.injected.version.code=${n.ANDROID_VERSION_CODE}`)}for(let g of["app/build","build",".cxx"]){let y=E.join(a,g);S.existsSync(y)&&S.rmSync(y,{recursive:!0,force:!0})}di(process.cwd()),await it(d,u,a,f,i,r);let p=E.join(a,"app/build/outputs");return At(p,[".apk",".aab"])},Wl=async(e,t,n,i={},r,o,s,l,a)=>{if(process.platform!=="darwin")throw new Error("iOS builds can only be run on macOS.");let d=E.resolve(process.cwd(),S.existsSync("ios")?"ios":".");eo(d);let u=S.readdirSync(d),c=u.find(T=>T.endsWith(".xcworkspace")),f=u.find(T=>T.endsWith(".xcodeproj")),p=bt(i,n,e);oo(d,p,o);let g=pi(p.BUILD_NUMBER||p.CURRENT_PROJECT_VERSION);if((p.BUILD_NUMBER||p.CURRENT_PROJECT_VERSION)&&!g)throw new Error(`Invalid iOS BUILD_NUMBER/CURRENT_PROJECT_VERSION: "${p.BUILD_NUMBER||p.CURRENT_PROJECT_VERSION}". Apple requires one to three period-separated integers. Fix the Dashboard secret or remove it so Mach can use its auto build number.`);let y=g?[`BUILD_NUMBER=${g}`,`CURRENT_PROJECT_VERSION=${g}`]:[];if(g&&(p.BUILD_NUMBER=g,p.CURRENT_PROJECT_VERSION=g,O.info(R.dim(`Using iOS build number: ${g}`))),!c&&!f)throw new Error("Could not find Xcode workspace or project in ios/ directory.");try{let T=te("xcode-select -p").toString().trim();O.info(R.dim(`Using Xcode at: ${T}`))}catch{O.warn(R.dim("Could not detect Xcode path."))}O.info(R.blue("Running iOS build via xcodebuild..."));let _=c?c.replace(".xcworkspace",""):f?.replace(".xcodeproj",""),D=e.iosScheme||_||e.scheme,b=e.developmentClient?"Debug":e.iosConfiguration||"Release",L=(r||"default").replace(/[^a-zA-Z0-9-_]/g,"_"),A=E.join(Ae.homedir(),`Library/Developer/Xcode/DerivedData/${m.nameLower}`,L);S.mkdirSync(A,{recursive:!0});let B=Dt(p),q=E.join(A,".mach-env-hash"),P=E.join(A,"Build"),I=S.existsSync(q)?S.readFileSync(q,"utf-8").trim():"";if(S.existsSync(P)){let T=I&&I!==B?"Build environment changed \u2014 clearing iOS DerivedData build products.":I?"Clearing iOS DerivedData build products to force a fresh JS bundle.":"DerivedData has no environment stamp \u2014 clearing iOS build products.";O.info(R.dim(T)),S.rmSync(P,{recursive:!0,force:!0})}if(S.writeFileSync(q,B),di(process.cwd()),e.simulator){let T=xl(d,c,f,D,b),w=T||"generic/platform=iOS Simulator",N=["-destination",w];O.info(R.dim(T?`Building for simulator (Scheme: ${D}, Config: ${b}, Destination: ${w})...`:`Building for simulator (Scheme: ${D}, Config: ${b}, Destination: ${w})...`));let h=[c?"-workspace":"-project",c||f,"-scheme",D,"-configuration",b,"-sdk","iphonesimulator",...N,"-derivedDataPath",A,...y,"COMPILER_INDEX_STORE_ENABLE=NO","CODE_SIGNING_ALLOWED=NO","CODE_SIGNING_REQUIRED=NO","ONLY_ACTIVE_ARCH=NO","EXCLUDED_ARCHS=","SUPPORTED_PLATFORMS=iphonesimulator"];try{await Sn(h,d,p,o,s)}catch(ue){if(!Tl(ue))throw ue;kl(A),di(process.cwd()),await Sn(h,d,p,o,s)}let M=E.join(A,"Build/Products",`${b}-iphonesimulator`),U=Bl(M,D,e),j=E.basename(U,".app"),X=Ct(E.join(U,"Info.plist"),"CFBundleIdentifier")||"unknown bundle",H=Jr(U),C=io(U),V=ro(U),se=E.join(M,`${j}_simulator.zip`);return O.info(R.dim(`Selected simulator app: ${E.relative(M,U)} (${X}, build ${H})`)),O.info(R.dim(`Simulator executable architecture: ${C}`)),O.info(R.dim(`Simulator executable platform: ${V.split(`
+`).find(ue=>/\bplatform\b/i.test(ue))?.trim()||"IOSSIMULATOR"}`)),O.info(R.dim(`Creating simulator artifact: ${se}...`)),ke(se),nt("zip",["-r",se,E.basename(U)],{cwd:E.dirname(U),stdio:"pipe"}),[se]}else{O.info(R.dim(`Archiving (Scheme: ${D}, Config: ${b})...`));let T=E.join(d,"build.xcarchive"),w=E.join(d,"export");S.rmSync(T,{recursive:!0,force:!0}),S.rmSync(w,{recursive:!0,force:!0});let N=i.IOS_DIST_P12,h=i.IOS_PROVISIONING_PROFILE,M=i.IOS_P12_PASSWORD||"",U=[],j,X,H={isAppStore:!1,isDevelopment:!1};if(N&&h){O.info(R.blue("\u{1F510} CI/CD Signing: Importing certificates..."));try{let W=`${m.buildPrefix}-${t}.keychain-db`,J=E.join(Ae.tmpdir(),W),le=m.keychainPassword;te(`security create-keychain -p "${le}" "${J}" 2>/dev/null || true`),te(`security set-keychain-settings -t 3600 -l "${J}"`),te(`security unlock-keychain -p "${le}" "${J}"`);let ye=E.join(Ae.tmpdir(),`cert-${t}.p12`),_e=Buffer.from(N,"base64");S.writeFileSync(ye,_e),O.info(R.dim(`P12 data size: ${_e.length} bytes, first bytes: ${_e.slice(0,4).toString("hex")}`)),(_e.length<100||_e[0]!==48)&&(O.warn(R.yellow("\u26A0\uFE0F  P12 data looks corrupted or was not decrypted correctly.")),O.warn(R.yellow("    This usually means MACH_ENCRYPTION_KEY on the Remote API differs from when credentials were uploaded.")));let $t=[M,"",m.keychainPassword],ar=!1;for(let Re of $t)try{te(`security import "${ye}" -k "${J}" -P "${Re}" -A -T /usr/bin/codesign -T /usr/bin/security`,{stdio:"pipe"}),ar=!0,O.info(R.dim(`\u2713 P12 imported successfully with password: ${Re?"[set]":"[empty]"}`));break}catch(Be){O.info(R.dim(`  P12 import attempt with password ${Re?`"${Re.substring(0,3)}..."`:"[empty]"} failed: ${Be.message?.split(`
+`)[0]||"unknown"}`))}if(!ar)throw new Error("Failed to import P12.");S.unlinkSync(ye),te(`security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k "${le}" "${J}"`);let Ta=te("security list-keychains -d user",{encoding:"utf-8"}).split(`
+`).map(Re=>Re.trim().replace(/^"|"$/g,"")).filter(Re=>Re.length>0),ka=[J,...Ta].map(Re=>`"${Re}"`).join(" ");te(`security list-keychains -d user -s ${ka}`),te(`security default-keychain -s "${J}"`);let Zn=E.join(Ae.homedir(),"Library/MobileDevice/Provisioning Profiles");S.mkdirSync(Zn,{recursive:!0});let lr=Buffer.from(h,"base64"),Qn=E.join(Zn,`${m.nameLower}-temp-${t}.mobileprovision`);S.writeFileSync(Qn,lr);let ei=lr.toString("utf-8"),cr=/<key>get-task-allow<\/key>\s*<true\/>/.test(ei);H={isAppStore:!ei.includes("<key>ProvisionedDevices</key>")&&!cr,isDevelopment:cr};try{let Be=te(`security cms -D -i "${Qn}"`,{encoding:"utf-8"}).match(/<key>UUID<\/key>\s*<string>([^<]+)<\/string>/);X=Be?Be[1]:void 0}catch{let Be=ei.match(/<key>UUID<\/key>\s*<string>([^<]+)<\/string>/);X=Be?Be[1]:void 0}X||(O.warn("Could not extract UUID from provisioning profile. Using fallback."),X=`${m.nameLower}-${t}`);let ti=E.join(Zn,`${X}.mobileprovision`);S.existsSync(ti)&&S.unlinkSync(ti),S.renameSync(Qn,ti);try{let Re=te(`security find-identity -v -p codesigning "${J}"`,{encoding:"utf-8"}),Be=Array.from(Re.matchAll(/"((?:Apple|iPhone) (?:Distribution|Developer|Development)[^"]*)"/g),Bt=>Bt[1]),dr=H.isDevelopment?Be.find(Bt=>/\b(Development|Developer)\b/.test(Bt)):Be.find(Bt=>/\bDistribution\b/.test(Bt)),ur=Be[0];(dr||ur)&&(j=dr||ur,O.info(R.blue(`Identity auto-detected from keychain: "${j}"`)))}catch{}j||(j=H.isDevelopment?"Apple Development":"Apple Distribution",O.info(R.blue(`Identity fallback (profile heuristic): "${j}"`))),O.info(R.dim(`Profile type: ${H.isDevelopment?"Development":H.isAppStore?"App Store":"Ad-Hoc"}`)),O.info(R.dim(`Identity Detection: get-task-allow=${H.isDevelopment}, Selected Identity="${j}"`)),U.push("CODE_SIGN_STYLE=Manual"),U.push(`CODE_SIGN_IDENTITY="${j}"`),U.push(`PROVISIONING_PROFILE_SPECIFIER=${X}`),e.iosTeamId&&U.push(`DEVELOPMENT_TEAM=${e.iosTeamId}`)}catch(W){throw O.error(`Signing setup failed: ${W.message}`),W}}else U.push("-allowProvisioningUpdates"),e.iosTeamId&&U.push(`DEVELOPMENT_TEAM=${e.iosTeamId}`);a&&await a("archive"),O.info(R.blue(`Archive detected Identity: "${j}"`)),O.info(R.blue(`Archive detected UUID: "${X}"`)),await Sn(["archive",c?"-workspace":"-project",c||f,"-scheme",D,"-configuration",b,"-archivePath",T,"-derivedDataPath",A,...y,...U],d,p,o,s);let C=At(E.join(T,"Products","Applications"),[".app"]);for(let W of C){let J=Jr(W);O.info(R.dim(`Validated iOS CFBundleVersion ${J} in ${E.basename(W)}`))}let V;X?(H.isAppStore?V="app-store":H.isDevelopment?V="development":V="ad-hoc",O.info(R.blue(`Export method from profile: "${V}"`))):(V=e.distribution==="store"?"app-store":e.distribution==="internal"?"ad-hoc":"development",O.warn(R.yellow(`No profile UUID detected. Export method from distribution flag: "${V}"`)));let se=e.iosExportMethod||V,ue=e.iosBundleIdentifier||rt("ios"),z=E.join(d,"ExportOptions.plist"),G=`<?xml version="1.0" encoding="UTF-8"?>
 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
 <plist version="1.0">
 <dict>
     <key>method</key>
-    <string>${de}</string>
+    <string>${se}</string>
     <key>destination</key>
     <string>export</string>
     <key>signingStyle</key>
@@ -1372,20 +1372,20 @@ ${s.join(`
         <string>${X}</string>
     </dict>`:""}
 </dict>
-</plist>`;if(S.writeFileSync(V,G),process.env[`${m.envPrefix}DEBUG`]&&O.info(R.magenta(`[${m.nameUpper}_DEBUG] ExportOptions.plist:
-${G}`)),a&&await a("export"),O.info(R.blue(`Exporting with Bundle ID: "${ue}"`)),O.info(R.blue(`Exporting with Method: "${de}"`)),o){o(R.magenta(`
+</plist>`;if(S.writeFileSync(z,G),process.env[`${m.envPrefix}DEBUG`]&&O.info(R.magenta(`[${m.nameUpper}_DEBUG] ExportOptions.plist:
+${G}`)),a&&await a("export"),O.info(R.blue(`Exporting with Bundle ID: "${ue}"`)),O.info(R.blue(`Exporting with Method: "${se}"`)),o){o(R.magenta(`
 [DIAGNOSTIC] Checking available signing identities...
-`));try{let z=te("security find-identity -v -p codesigning",{encoding:"utf-8"});o(R.magenta(`${z}
-`))}catch(z){o(R.red(`[DIAGNOSTIC] Failed to list identities: ${z.message}
-`))}}await Sn(["-exportArchive","-archivePath",T,"-exportPath",w,"-exportOptionsPlist",V],d,p,o,s),a&&await a("validate");let Q=At(w,[".ipa"]);for(let z of Q)try{te(`unzip -t "${z}"`,{stdio:"pipe"});let J=Gl(z);o&&o(`[IPA VALID] ${E.basename(z)} \u2014 archive integrity OK
+`));try{let W=te("security find-identity -v -p codesigning",{encoding:"utf-8"});o(R.magenta(`${W}
+`))}catch(W){o(R.red(`[DIAGNOSTIC] Failed to list identities: ${W.message}
+`))}}await Sn(["-exportArchive","-archivePath",T,"-exportPath",w,"-exportOptionsPlist",z],d,p,o,s),a&&await a("validate");let Q=At(w,[".ipa"]);for(let W of Q)try{te(`unzip -t "${W}"`,{stdio:"pipe"});let J=Gl(W);o&&o(`[IPA VALID] ${E.basename(W)} \u2014 archive integrity OK
 `),o&&o(`[IPA VALID] CFBundleVersion ${J}
-`)}catch(J){let ae=`IPA validation failed for ${E.basename(z)}: ${J.message||"archive may be corrupt"}`;throw o&&o(`[IPA CORRUPT] ${ae}
-`),new Error(ae)}return Q}},rt=e=>{try{let t=E.join(process.cwd(),m.configFileName);if(S.existsSync(t)){let n=JSON.parse(S.readFileSync(t,"utf-8"));if(e==="android"&&n.android?.package)return n.android.package;if(e==="ios"&&n.ios?.bundleIdentifier)return n.ios.bundleIdentifier}if(e==="android"){let n=["android/app/build.gradle","app/build.gradle","build.gradle"];for(let i of n)if(S.existsSync(i)){let o=S.readFileSync(i,"utf-8").match(/applicationId\s+['"]([^'"]+)['"]/);if(o)return o[1]}}else{let n=E.resolve(process.cwd(),S.existsSync("ios")?"ios":"."),i=At(n,["Info.plist"]).filter(s=>!s.includes("/Pods/")&&!s.includes("/build/")&&!s.includes("/DerivedData/"));i.sort((s,l)=>l.split("/").length-s.split("/").length);for(let s of i){let a=S.readFileSync(s,"utf-8").match(/<key>CFBundleIdentifier<\/key>\s*<string>([^<]+)<\/string>/);if(a&&!a[1].includes("$"))return a[1]}let r=At(n,[".xcodeproj"]);if(r.length>0){let s=E.join(r[0],"project.pbxproj");if(S.existsSync(s)){let a=S.readFileSync(s,"utf-8").match(/PRODUCT_BUNDLE_IDENTIFIER\s*=\s*"?([^";\s]+)"?;/);if(a)return a[1]}}let o=["app.json","app.config.json","app.config.js","app.config.ts"];for(let s of o)if(S.existsSync(s)){let a=S.readFileSync(s,"utf-8").match(/"bundleIdentifier":\s*"([^"]+)"/);if(a)return a[1]}}}catch{return null}return null},Yl=()=>{try{return te("emulator -version",{stdio:"ignore"}),"emulator"}catch{let t=Ae.homedir(),n=[E.join(t,"Library/Android/sdk/emulator/emulator"),E.join(t,"Android/Sdk/emulator/emulator"),"/usr/local/lib/android/sdk/emulator/emulator"];for(let i of n)if(S.existsSync(i))return i}return"emulator"},Jl=async(e,t)=>{let n=yn();try{if(te("adb devices").toString().split(`
+`)}catch(J){let le=`IPA validation failed for ${E.basename(W)}: ${J.message||"archive may be corrupt"}`;throw o&&o(`[IPA CORRUPT] ${le}
+`),new Error(le)}return Q}},rt=e=>{try{let t=E.join(process.cwd(),m.configFileName);if(S.existsSync(t)){let n=JSON.parse(S.readFileSync(t,"utf-8"));if(e==="android"&&n.android?.package)return n.android.package;if(e==="ios"&&n.ios?.bundleIdentifier)return n.ios.bundleIdentifier}if(e==="android"){let n=["android/app/build.gradle","app/build.gradle","build.gradle"];for(let i of n)if(S.existsSync(i)){let o=S.readFileSync(i,"utf-8").match(/applicationId\s+['"]([^'"]+)['"]/);if(o)return o[1]}}else{let n=E.resolve(process.cwd(),S.existsSync("ios")?"ios":"."),i=At(n,["Info.plist"]).filter(s=>!s.includes("/Pods/")&&!s.includes("/build/")&&!s.includes("/DerivedData/"));i.sort((s,l)=>l.split("/").length-s.split("/").length);for(let s of i){let a=S.readFileSync(s,"utf-8").match(/<key>CFBundleIdentifier<\/key>\s*<string>([^<]+)<\/string>/);if(a&&!a[1].includes("$"))return a[1]}let r=At(n,[".xcodeproj"]);if(r.length>0){let s=E.join(r[0],"project.pbxproj");if(S.existsSync(s)){let a=S.readFileSync(s,"utf-8").match(/PRODUCT_BUNDLE_IDENTIFIER\s*=\s*"?([^";\s]+)"?;/);if(a)return a[1]}}let o=["app.json","app.config.json","app.config.js","app.config.ts"];for(let s of o)if(S.existsSync(s)){let a=S.readFileSync(s,"utf-8").match(/"bundleIdentifier":\s*"([^"]+)"/);if(a)return a[1]}}}catch{return null}return null},Yl=()=>{try{return te("emulator -version",{stdio:"ignore"}),"emulator"}catch{let t=Ae.homedir(),n=[E.join(t,"Library/Android/sdk/emulator/emulator"),E.join(t,"Android/Sdk/emulator/emulator"),"/usr/local/lib/android/sdk/emulator/emulator"];for(let i of n)if(S.existsSync(i))return i}return"emulator"},Jl=async(e,t)=>{let n=yn();try{if(te("adb devices").toString().split(`
 `).slice(1).map(s=>s.trim()).filter(s=>s.length>0&&!s.startsWith("*")).map(s=>s.split("	")[0]).length===0){O.warn(R.yellow("No Android devices or emulators found."));let s=Yl(),l=[];try{l=te(`${s} -list-avds`).toString().split(`
 `).filter(a=>a.trim().length>0)}catch{}if(l.length>0){let a=await ui({message:"Select an emulator to launch:",options:l.map(c=>({value:c,label:c}))});if(bn(a))return;n.start(`Launching emulator ${a}...`),Xr(s,["-avd",a],{detached:!0,stdio:"ignore"}).unref();let d=0,u=!1;for(;d<60;){try{if(te("adb shell getprop sys.boot_completed",{stdio:"pipe"}).toString().trim()==="1"){u=!0;break}}catch{}await new Promise(c=>setTimeout(c,2e3)),d++}if(!u)throw n.stop("Emulator launch timed out."),new Error("Emulator launch timed out. Please try launching it manually.");n.stop("Emulator launched.")}else throw new Error("No devices found and no emulators available to launch. (Make sure Android SDK is installed)")}n.start("Installing APK on device..."),await it("adb",["install","-r",e],process.cwd(),{},t),n.stop("Installation complete.");let o=rt("android");if(o){O.info(R.blue(`\u{1F680} Launching ${o}...`));try{te(`adb shell dumpsys package ${o}`).toString().split(`
 `).find(a=>a.includes("android.intent.action.MAIN")&&a.includes("android.intent.category.LAUNCHER"))?te(`adb shell monkey -p ${o} -c android.intent.category.LAUNCHER 1`,{stdio:"ignore"}):te(`adb shell monkey -p ${o} -c android.intent.category.LAUNCHER 1`,{stdio:"ignore"})}catch{O.warn("Could not auto-launch app. You may need to open it manually.")}}}catch(i){n.stop("Installation failed."),O.error(R.red(`Failed to install APK: ${i.message}`))}},Xl=async(e,t,n)=>{let i=yn();try{if(!te("xcrun simctl list devices booted").toString().includes("(Booted)")){O.warn(R.yellow("No iOS Simulator is currently booted."));let o=te("xcrun simctl list devices --json").toString(),s=JSON.parse(o).devices,l=[];Object.keys(s).forEach(c=>{s[c].forEach(f=>{f.isAvailable&&l.push({...f,runtime:c})})});let a=await ui({message:"Select a simulator to launch:",options:l.map(c=>({value:c.udid,label:`${c.name} (${c.runtime.split(".").pop()})`}))});if(bn(a))return;i.start(`Booting ${a}...`),te(`xcrun simctl boot ${a}`),te(`open -a Simulator --args -CurrentDeviceUDID ${a}`);let d=0,u=!1;for(;d<30;){try{if(te("xcrun simctl list devices booted").toString().includes(a)){u=!0;break}}catch{}await new Promise(c=>setTimeout(c,2e3)),d++}if(!u)throw i.stop("Simulator boot timed out."),new Error("Simulator boot timed out.");i.stop("Simulator booted.")}i.start("Installing on iOS Simulator..."),io(e),ro(e),await it("xcrun",["simctl","install","booted",e],process.cwd(),{},n),i.stop("Installation complete."),O.info(R.blue(`\u{1F680} Launching ${t}...`)),await it("xcrun",["simctl","launch","booted",t],process.cwd(),{},n)}catch(r){i.stop("Installation failed."),O.error(R.red(`Failed to install on Simulator: ${r.message}`))}},ql=async(e,t,n)=>{let i=yn();i.start("Scanning for connected iOS devices...");try{let r=te("xcrun devicectl list devices --json-output -").toString(),s=(JSON.parse(r).result?.devices||[]).filter(a=>a.connectionProperties?.transportType==="wired"||a.connectionProperties?.transportType==="localNetwork");if(s.length===0)throw i.stop("No connected iOS devices found."),new Error("Please connect your iPhone via USB or ensure it is on the same Wi-Fi for wireless debugging.");let l=s[0].identifier;if(s.length>1){i.stop();let a=await ui({message:"Select a device to install on:",options:s.map(d=>({value:d.identifier,label:`${d.deviceProperties?.name||d.name||d.model?.name} (${d.model?.name||"iPhone"}) - ${d.identifier}`}))});if(bn(a))return;l=a,i.start(`Installing on ${l}...`)}else i.message(`Installing on ${s[0].model.name}...`);await it("xcrun",["devicectl","device","install","app","--device",l,e],process.cwd(),{},n),i.stop("Installation complete."),O.info(R.blue(`\u{1F680} Launching ${t}...`)),await it("xcrun",["devicectl","device","launch","app","--device",l,t],process.cwd(),{},n)}catch(r){i.stop("Installation failed."),O.error(R.red(`Failed to install on device: ${r.message}`)),O.info(R.dim('Make sure your device is unlocked and "Developer Mode" is enabled in Settings -> Privacy & Security.'))}};import x from"fs";import Tt from"os";import Y from"path";import{spawn as mo,spawnSync as Ge}from"child_process";import{randomUUID as Zl}from"crypto";import{pipeline as Ql}from"stream/promises";import{isCancel as yi,log as F,select as go,spinner as Wt,text as ec}from"@clack/prompts";import zt from"axios";import K from"chalk";import En from"adm-zip";async function ho(e){if(e.localRunner){let n=await oc(e);process.exitCode=n?n.exitCode:1;return}if(e.local){let n=await sc(e);n&&(process.exitCode=n.exitCode);return}let t=await Ii(e);if(t&&(F.success(K.green(`Maestro run ${t.status||"queued"}: ${t.testRunId}`)),t.launchDeferredReason&&F.warn(K.yellow(t.launchDeferredReason)),t.dashboardUrl&&F.info(K.dim("View test run: ")+K.white.underline(t.dashboardUrl)),e.wait)){let n=await ac(e,t);n&&(process.exitCode=n.status==="passed"?0:1)}}var tc=new Set(["passed","failed","cancelled","interrupted"]),so=Number(process.env.MACH_FLOW_UPLOAD_MAX_ATTEMPTS||4),nc=Number(process.env.MACH_FLOW_UPLOAD_TIMEOUT_MS||12e4),So=process.env.MACH_MAESTRO_FAST_FAIL_RETRY==="1";function Ai(e){let t=Array.isArray(e)?e:e?[e]:[];return[...new Set(t.flatMap(n=>String(n||"").split(",")).map(n=>n.trim()).filter(Boolean))]}function ic(e){let t=Ai(e);if(t.length===0)return;let n={};for(let i of t){let r=process.env[i];r!==void 0&&(n[i]=r)}return Object.keys(n).length>0?n:void 0}function rc(e){let t={};for(let[i,r]of Object.entries(process.env))i.startsWith("MAESTRO_TEST_")&&r!==void 0&&(t[i]=r);let n=Ai(e);for(let i of n){let r=process.env[i];r!==void 0&&(t[i]=r)}return t}async function oc(e){let t=e.projectId,n=e.testRunId,i=e.runnerToken||process.env.MACH_RUNNER_TOKEN||process.env.MACH_TOKEN,r=(process.env.MACH_API_URL||vt).replace(/\/$/,""),o=x.mkdtempSync(Y.join(Tt.tmpdir(),"mach-maestro-runner-")),s=Y.join(o,"mach-maestro-output"),l=Y.join(o,"runner.log");if(x.mkdirSync(s,{recursive:!0}),!t||!n||!i)return F.error(K.red("--local-runner requires --project-id, --test-run-id, and a runner token.")),{status:"failed",exitCode:1,attempts:0,flows:".maestro",platform:e.platform};let a=null,d=null,u=null,c=p=>{x.appendFileSync(l,`${p}${p.endsWith(`
 `)?"":`
-`}`)},f=async(p,g)=>{try{await zt.post(`${r}/internal/tests/${encodeURIComponent(n)}/runner`,{projectId:t,runnerToken:i,status:p,error:g,logPreview:gc(l),junitUrl:a?.urls?.junitDownloadUrl,logsUrl:a?.urls?.logsDownloadUrl,artifactsUrl:a?.urls?.artifactsDownloadUrl})}catch(y){c(`[WARN] Could not post runner update: ${y.message||y}`)}};try{c(`Mach Maestro local runner starting for ${n}`);let p=await zt.post(`${r}/internal/tests/${encodeURIComponent(n)}/runner-payload`,{projectId:t,runnerToken:i});if(p.data?.status!=="success"||!p.data?.payload)throw new Error(p.data?.message||"Runner payload was not returned.");a=p.data.payload;let g=Object.keys(a.env||{});c(`Using Maestro env vars: ${g.length>0?g.join(", "):"none"}`);let y={...process.env,...a.env||{}},_=hc(a.env);_.length>0&&c(`Passing Maestro env vars to test command: ${g.sort().join(", ")}`),await f("running");let D=a.platform==="android"?"app.apk":"app.zip",b=Y.join(o,D),L=Y.join(o,"source.zip"),A=Y.join(o,"source");x.mkdirSync(A,{recursive:!0}),c("Downloading app artifact..."),await bi(a.artifactUrl,b),c(`Downloaded app artifact: ${D} (${lo(x.statSync(b).size)})`),c("Downloading Maestro source..."),await bi(a.urls.sourceUrl,L),c(`Downloaded Maestro source: source.zip (${lo(x.statSync(L).size)})`),new En(L).extractAllTo(A,!0);let B=Sc(A,a.flowPath||".maestro");if(!x.existsSync(B))throw new Error(`Maestro flow path not found: ${a.flowPath||".maestro"}`);if(c(`Resolved Maestro flow path: ${Y.relative(A,B)||"."}`),a.platform==="ios"){await wc(a.device||"iphone_15",l);let C=_c(b,o),h=wo(C,l);c(`Resolved iOS app bundle: ${C}`),c(`Resolved iOS bundle id: ${h||"unknown"}`),$c(C,l),Ei("xcrun",["simctl","install","booted",C],l),h&&(u={platform:a.platform,appId:h}),h&&ot("xcrun",["simctl","get_app_container","booted",h,"app"],l),gi(s,l,"ios-before-maestro.png"),a.record&&(d=Rc(s,l))}else{let C=Oc(b,l),h=Pc(a.device,l),M=h?["-s",h]:[];c(`Resolved Android application id: ${C||"unknown"}`),Ei("adb",[...M,"install","-r",b],l),C&&(u={platform:a.platform,appId:C,deviceId:h||void 0})}let P=Math.max(0,Math.min(10,Number(a.retries??1)))+1,I=Y.join(s,"report.xml"),T=Ac(l);if(!T)throw new Error("Maestro CLI not found on this runner. Install Maestro or set MAESTRO_BIN to the full maestro path.");let w=1;for(let C=1;C<=P;C+=1){c(`Running Maestro attempt ${C}/${P}...`);let h=["test","--platform",a.platform,..._,B,"--format","junit","--output",I,"--test-output-dir",s];if(So&&C<P?w=(await Io(T,h,{logPath:l,env:y,fastFailOnFlowFailure:!0})).exitCode:w=ot(T,h,l,void 0,y),w===0)break}return a.platform==="ios"&&gi(s,l,"ios-after-maestro.png"),await co(d,l),d=null,await fo(a.urls,o,s,l),w===0?(await f("passed"),F.success(K.green(`Managed Maestro run passed: ${n}`)),{status:"passed",exitCode:0,attempts:P,flows:a.flowPath,platform:a.platform}):(await f("failed",`Maestro exited with code ${w}`),F.error(K.red(`Managed Maestro run failed with exit code ${w}`)),{status:"failed",exitCode:w,attempts:P,flows:a.flowPath,platform:a.platform})}catch(p){let g=p.message||String(p);return c(`MACH_MAESTRO_RUN_FAILED: ${g}`),a?.platform==="ios"&&gi(s,l,"ios-after-failure.png"),await co(d,l),a?.urls&&await fo(a.urls,o,s,l),await f("failed",g),F.error(K.red(`Managed Maestro runner failed: ${g}`)),{status:"failed",exitCode:1,attempts:0,flows:a?.flowPath||".maestro",platform:a?.platform||e.platform}}finally{vc(u,l)}}async function sc(e){let t=e.maestroFlows||".maestro",n=bo(e.maestroRetries);if(n===null)return null;let i=Y.resolve(t);if(!x.existsSync(i))return F.error(K.red(`Maestro flows not found: ${t}`)),{status:"failed",exitCode:1,attempts:0,flows:t,platform:e.platform};let r=await pc(e);if(r?.url){if(!await mc(r))return{status:"failed",exitCode:1,attempts:0,flows:t,platform:r.platform||e.platform}}else if(e.buildId||e.buildUrl||e.artifactUrl||e.latest)return{status:"failed",exitCode:1,attempts:0,flows:t,platform:e.platform};e.maestroRecord&&F.warn(K.yellow("--maestro-record is managed-runner only and is ignored in --local mode."));let o=r?.platform||e.platform,s=["test"];o&&s.push("--platform",o),e.maestroDevice&&s.push("--device",String(e.maestroDevice));let l=rc(e.maestroEnv),a=Object.keys(l);if(a.length>0){F.info(K.dim(`Passing Maestro env vars to local run: ${a.join(", ")}`));for(let[p,g]of Object.entries(l))s.push("-e",`${p}=${g}`)}s.push(t);let d=n+1,u=1;for(let p=1;p<=d;p+=1){if(F.info(K.dim(`Running local Maestro attempt ${p}/${d}...`)),So&&p<d){let g=await Io("maestro",s,{cwd:process.cwd(),env:process.env,echoOutput:!0,fastFailOnFlowFailure:!0});if(g.error){let y=g.error.message||"Failed to run Maestro";F.error(K.red(`Local Maestro failed to start: ${y}`)),F.info(K.dim("Install Maestro locally, then retry: https://maestro.mobile.dev/getting-started/installing-maestro")),u=1;break}u=g.exitCode}else{let g=Ge("maestro",s,{cwd:process.cwd(),stdio:"inherit",env:process.env});if(g.error){let y=g.error.message||"Failed to run Maestro";F.error(K.red(`Local Maestro failed to start: ${y}`)),F.info(K.dim("Install Maestro locally, then retry: https://maestro.mobile.dev/getting-started/installing-maestro")),u=1;break}u=typeof g.status=="number"?g.status:1}if(u===0)break}let c=u===0?"passed":"failed",f={status:c,exitCode:u,attempts:d,flows:t,platform:o};return xc(e,f),c==="passed"?F.success(K.green("Local Maestro run passed")):F.error(K.red(`Local Maestro run failed with exit code ${u}`)),f}async function Ii(e){let t=$e(`./${m.configFileName}`),n=e.projectId||t?.projectId,i=String(e.profile||e.buildProfile||"production").toLowerCase();if(!n)return F.error(`No projectId found. Run \`${m.nameLower} link\` first or pass an internal project id.`),null;let r=e.platform;if(!r&&e.latest){let c=await go({message:"Select platform for the latest build:",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"}]});if(yi(c))return null;r=c}let o=await uc(e);if(!o)return null;if(o.kind==="latest"&&!r)return F.error("Pass --platform when using --latest."),null;if(o.kind==="artifact-url"&&!r)return F.error("Pass --platform when using --artifact-url."),null;let s=bo(e.maestroRetries);if(s===null)return null;let l=Ai(e.maestroEnv),a=ic(e.maestroEnv);!e.quiet&&l.length>0&&F.info(K.dim(`Forwarding Maestro env vars by name: ${l.join(", ")}`));let d=await lc(e,n);if(d===null)return null;let u=Wt();e.quiet||u.start("Queuing Maestro run...");try{let c=await k.post("/tests/maestro",{projectId:n,platform:r,profile:i,latest:o.kind==="latest",buildId:o.kind==="build-id"?o.value:e.buildId,buildUrl:o.kind==="build-url"?o.value:e.buildUrl,artifactUrl:o.kind==="artifact-url"?o.value:e.artifactUrl,flowSourceKey:d,flows:e.maestroFlows||".maestro",device:e.maestroDevice||(r==="ios"?"iphone_15":"pixel_6"),retries:s,record:!!e.maestroRecord,...l.length>0?{envNames:l}:{},...a?{env:a}:{}});if(c.data.status!=="success")throw new Error(c.data.message||"Failed to queue Maestro run");let f=c.data.testRun,p={testRunId:f.testRunId,status:f.status,projectId:n,buildId:f.buildId,platform:f.platform,dashboardUrl:f.dashboardUrl||`${Je}/tests/${f.testRunId}`,launchDeferredReason:f.launchDeferredReason};return Ro(e,p),e.quiet||u.stop("Maestro run queued"),p}catch(c){e.quiet||u.stop("Could not queue Maestro run");let f=c.response?.data?.message||c.message||"Unknown error";return F.error(K.red(`Maestro queue failed: ${f}`)),null}}async function ac(e,t){let n=ao(e.waitTimeout,60,"--wait-timeout"),i=ao(e.waitInterval,15,"--wait-interval");if(n===null||i===null)return null;let r=n*60*1e3,o=Math.max(5,i)*1e3,s=Date.now(),l=t.status||"queued";for(F.info(K.dim(`Waiting for Maestro run ${t.testRunId} to finish...`));Date.now()-s<=r;){let a=await dc(t.projectId,t.testRunId);if(!a)return null;if(a.status&&a.status!==l&&(l=a.status,F.info(K.dim(`Maestro status: ${l}`))),tc.has(String(a.status)))return Ro(e,a),a.status==="passed"?F.success(K.green(`Maestro run passed: ${a.testRunId}`)):(F.error(K.red(`Maestro run ${a.status}: ${a.testRunId}`)),a.error&&F.error(K.red(String(a.error)))),a;await wi(o)}return F.error(K.red(`Timed out waiting for Maestro run ${t.testRunId} after ${n} minute(s).`)),{...t,status:"timeout"}}async function lc(e,t){if(e.maestroUseBuildSource)return;let n=e.maestroFlows||".maestro",i=Y.resolve(n);if(!x.existsSync(i))return e.maestroFlows?(F.error(K.red(`Maestro flows not found: ${n}`)),null):void 0;let r=Y.relative(process.cwd(),i);if(!r||r.startsWith("..")||Y.isAbsolute(r))return F.error(K.red("Managed Maestro flow uploads must be inside the current project directory.")),null;let o=Wt();e.quiet||o.start(`Uploading Maestro flows from ${r}...`);try{let s=await k.post("/tests/maestro/source-upload-url",{projectId:t,uploadId:Zl()});if(s.data.status!=="success"||!s.data.uploadUrl||!s.data.key)throw new Error(s.data.message||"Failed to get Maestro flow upload URL");let l=new En;if(x.statSync(i).isDirectory())l.addLocalFolder(i,r);else{let u=Y.dirname(r);l.addLocalFile(i,u==="."?void 0:u,Y.basename(r))}let d=l.toBuffer();return await cc(s.data.uploadUrl,d,"application/zip","Maestro flow upload",u=>{e.quiet||o.message(u)}),e.quiet||o.stop("Maestro flows uploaded"),s.data.key}catch(s){e.quiet||o.stop("Could not upload Maestro flows");let l=s.response?.data?.message||s.message||"Unknown error";return F.error(K.red(`Maestro flow upload failed: ${l}`)),null}}function yo(e){let t=e.response?.status,n=e.code||"",i=e.message||"";return t&&![408,409,425,429].includes(t)&&t<500?!1:/ECONNRESET|ETIMEDOUT|EAI_AGAIN|ENOTFOUND|ECONNABORTED|socket hang up|network|timeout/i.test(`${n} ${i}`)||!t}async function cc(e,t,n,i,r){let o;for(let s=1;s<=so;s+=1)try{await zt.put(e,t,{headers:{"Content-Type":n},maxBodyLength:1/0,maxContentLength:1/0,timeout:nc});return}catch(l){if(o=l,!yo(l)||s>=so)break;let a=Math.min(2e4,2e3*s),d=l.code||l.response?.status||l.message||"network error";r?.(`${i} attempt ${s} failed (${d}), retrying...`),await wi(a)}throw o}async function dc(e,t){try{let n=await k.get(`/tests/${encodeURIComponent(t)}`,{params:{projectId:e}});if(n.data.status!=="success")throw new Error(n.data.message||"Failed to fetch Maestro run");let i=n.data.testRun;return{testRunId:i.testRunId,status:i.status,projectId:e,buildId:i.buildId,platform:i.platform,dashboardUrl:i.dashboardUrl||`${Je}/tests/${i.testRunId}`,launchDeferredReason:i.launchDeferredReason,...i.error?{error:i.error}:{}}}catch(n){let i=n.response?.data?.message||n.message||"Unknown error";return F.error(K.red(`Could not fetch Maestro run status: ${i}`)),null}}async function uc(e){if(e.buildId)return{kind:"build-id",value:e.buildId};if(e.buildUrl)return{kind:"build-url",value:e.buildUrl};if(e.artifactUrl)return{kind:"artifact-url",value:e.artifactUrl};if(e.latest)return{kind:"latest"};let t=await go({message:"Select app artifact source for Maestro:",options:[{value:"latest",label:"Latest successful build"},{value:"build-id",label:"Build ID"},{value:"build-url",label:`${m.name} build URL`},{value:"artifact-url",label:"Direct artifact URL"}]});if(yi(t))return null;if(t==="latest")return{kind:"latest"};let n=await ec({message:t==="build-id"?"Enter build ID:":t==="build-url"?`Enter ${m.name} build URL:`:"Enter artifact URL:",validate:i=>{let r=String(i||"").trim();if(!r)return"Value is required";if((t==="build-url"||t==="artifact-url")&&!r.startsWith("http"))return"Must be a URL"}});return yi(n)?null:{kind:t,value:String(n).trim()}}function ao(e,t,n){if(e==null||e==="")return t;let i=Number(e);return!Number.isFinite(i)||i<=0?(F.error(`${n} must be a positive number.`),null):i}function wi(e){return new Promise(t=>setTimeout(t,e))}function bo(e){if(e==null||e==="")return 1;let t=Number(e);return!Number.isInteger(t)||t<0||t>10?(F.error("--maestro-retries must be an integer between 0 and 10."),null):t}async function pc(e){if(e.artifactUrl)return{url:e.artifactUrl,platform:e.platform||Ri(e.artifactUrl),name:_o(e.artifactUrl)};let t=e.buildId||Lc(e.buildUrl);return t?Eo(t,e.platform):e.latest?fc(e):null}async function Eo(e,t){let n=Wt();n.start(`Resolving build ${e}...`);try{let i=await k.get(`/public/builds/${encodeURIComponent(e)}`);if(i.data.status!=="success")throw new Error(i.data.message||"Build lookup failed");let r=t||i.data.build?.platform,o=kc(i.data.artifacts||[],r);if(!o?.downloadUrl)throw new Error("No installable APK or simulator app artifact found for this build.");return n.stop("Build artifact resolved"),{url:o.downloadUrl,platform:r||Ri(o.name||o.downloadUrl),name:o.name}}catch(i){n.stop("Could not resolve build artifact");let r=i.response?.data?.message||i.message||"Unknown error";return F.error(K.red(`Local Maestro artifact lookup failed: ${r}`)),null}}async function fc(e){let t=$e(`./${m.configFileName}`),n=e.projectId||t?.projectId,i=String(e.profile||e.buildProfile||"production").toLowerCase();if(!n)return F.error(`No projectId found. Run \`${m.nameLower} link\` first or pass --build-id/--artifact-url.`),null;if(!e.platform)return F.error("Pass --platform when using --latest with --local."),null;let r=Wt();r.start("Resolving latest build...");try{let o=await k.get(`/builds/${n}`,{params:{limit:100}}),l=(Array.isArray(o.data.builds)?o.data.builds:[]).find(a=>a.status==="success"&&a.platform===e.platform&&String(a.buildProfile||a.buildType||"production").toLowerCase()===i);if(!l?.buildId)throw new Error(`No successful ${e.platform} build found for profile ${i}.`);return r.stop(`Latest build resolved: ${l.buildId}`),Eo(l.buildId,e.platform)}catch(o){r.stop("Could not resolve latest build");let s=o.response?.data?.message||o.message||"Unknown error";return F.error(K.red(`Latest build lookup failed: ${s}`)),null}}async function mc(e){let t=e.platform||Ri(e.url);if(!t)return F.error(K.red("Could not infer platform for local install. Pass --platform android or --platform ios.")),!1;let n=x.mkdtempSync(Y.join(Tt.tmpdir(),"mach-maestro-")),i=e.name||_o(e.url)||(t==="android"?"app.apk":"app.zip"),r=Y.join(n,i),o=Wt();o.start(`Downloading ${i}...`);try{await bi(e.url,r),o.stop("Artifact downloaded")}catch(s){return o.stop("Artifact download failed"),F.error(K.red(s.message||"Failed to download artifact")),!1}return t==="android"?Nc(r):Tc(r,n)}async function bi(e,t){let n=await zt.get(e,{responseType:"stream"});await Ql(n.data,x.createWriteStream(t))}function gc(e,t=12e3){try{return x.readFileSync(e,"utf-8").slice(-t)}catch{return""}}function lo(e){if(!Number.isFinite(e)||e<0)return"unknown size";if(e<1024)return`${e} B`;let t=["KB","MB","GB"],n=e/1024,i=t[0];for(let r=1;n>=1024&&r<t.length;r+=1)n/=1024,i=t[r];return`${n.toFixed(n>=10?1:2)} ${i}`}function hc(e){return Object.entries(e||{}).filter(([t,n])=>!!t&&n!==void 0).sort(([t],[n])=>t.localeCompare(n)).flatMap(([t,n])=>["-e",`${t}=${n}`])}function Sc(e,t){let n=Y.resolve(e,t||".maestro"),i=Y.relative(e,n);if(i.startsWith("..")||Y.isAbsolute(i))throw new Error("Maestro flow path must stay inside the build source.");return n}function Ao(e,t){let n=[e];for(let i=0;i<t.length;i+=1){let r=t[i],o=t[i-1];(o==="-e"||o==="--env")&&/^[A-Za-z_][A-Za-z0-9_]*=/.test(r)?n.push(`${r.slice(0,r.indexOf("="))}=<redacted>`):n.push(r)}return n.join(" ")}function yc(e){return/\[Failed\]\s+/.test(e)}function bc(e){if(!e.killed){try{e.kill("SIGTERM")}catch{}setTimeout(()=>{try{e.kill("SIGKILL")}catch{}},5e3).unref()}}function Io(e,t,n={}){let{cwd:i,env:r=process.env,logPath:o,echoOutput:s=!1,fastFailOnFlowFailure:l=!1}=n;return o&&x.appendFileSync(o,`
+`}`)},f=async(p,g)=>{try{await zt.post(`${r}/internal/tests/${encodeURIComponent(n)}/runner`,{projectId:t,runnerToken:i,status:p,error:g,logPreview:gc(l),junitUrl:a?.urls?.junitDownloadUrl,logsUrl:a?.urls?.logsDownloadUrl,artifactsUrl:a?.urls?.artifactsDownloadUrl})}catch(y){c(`[WARN] Could not post runner update: ${y.message||y}`)}};try{c(`Mach Maestro local runner starting for ${n}`);let p=await zt.post(`${r}/internal/tests/${encodeURIComponent(n)}/runner-payload`,{projectId:t,runnerToken:i});if(p.data?.status!=="success"||!p.data?.payload)throw new Error(p.data?.message||"Runner payload was not returned.");a=p.data.payload;let g=Object.keys(a.env||{});c(`Using Maestro env vars: ${g.length>0?g.join(", "):"none"}`);let y={...process.env,...a.env||{}},_=hc(a.env);_.length>0&&c(`Passing Maestro env vars to test command: ${g.sort().join(", ")}`),await f("running");let D=a.platform==="android"?"app.apk":"app.zip",b=Y.join(o,D),L=Y.join(o,"source.zip"),A=Y.join(o,"source");x.mkdirSync(A,{recursive:!0}),c("Downloading app artifact..."),await bi(a.artifactUrl,b),c(`Downloaded app artifact: ${D} (${lo(x.statSync(b).size)})`),c("Downloading Maestro source..."),await bi(a.urls.sourceUrl,L),c(`Downloaded Maestro source: source.zip (${lo(x.statSync(L).size)})`),new En(L).extractAllTo(A,!0);let B=Sc(A,a.flowPath||".maestro");if(!x.existsSync(B))throw new Error(`Maestro flow path not found: ${a.flowPath||".maestro"}`);if(c(`Resolved Maestro flow path: ${Y.relative(A,B)||"."}`),a.platform==="ios"){await wc(a.device||"iphone_15",l);let N=_c(b,o),h=wo(N,l);c(`Resolved iOS app bundle: ${N}`),c(`Resolved iOS bundle id: ${h||"unknown"}`),$c(N,l),Ei("xcrun",["simctl","install","booted",N],l),h&&(u={platform:a.platform,appId:h}),h&&ot("xcrun",["simctl","get_app_container","booted",h,"app"],l),gi(s,l,"ios-before-maestro.png"),a.record&&(d=Rc(s,l))}else{let N=Oc(b,l),h=Pc(a.device,l),M=h?["-s",h]:[];c(`Resolved Android application id: ${N||"unknown"}`),Ei("adb",[...M,"install","-r",b],l),N&&(u={platform:a.platform,appId:N,deviceId:h||void 0})}let P=Math.max(0,Math.min(10,Number(a.retries??1)))+1,I=Y.join(s,"report.xml"),T=Ac(l);if(!T)throw new Error("Maestro CLI not found on this runner. Install Maestro or set MAESTRO_BIN to the full maestro path.");let w=1;for(let N=1;N<=P;N+=1){c(`Running Maestro attempt ${N}/${P}...`);let h=["test","--platform",a.platform,..._,B,"--format","junit","--output",I,"--test-output-dir",s];if(So&&N<P?w=(await Io(T,h,{logPath:l,env:y,fastFailOnFlowFailure:!0})).exitCode:w=ot(T,h,l,void 0,y),w===0)break}return a.platform==="ios"&&gi(s,l,"ios-after-maestro.png"),await co(d,l),d=null,await fo(a.urls,o,s,l),w===0?(await f("passed"),F.success(K.green(`Managed Maestro run passed: ${n}`)),{status:"passed",exitCode:0,attempts:P,flows:a.flowPath,platform:a.platform}):(await f("failed",`Maestro exited with code ${w}`),F.error(K.red(`Managed Maestro run failed with exit code ${w}`)),{status:"failed",exitCode:w,attempts:P,flows:a.flowPath,platform:a.platform})}catch(p){let g=p.message||String(p);return c(`MACH_MAESTRO_RUN_FAILED: ${g}`),a?.platform==="ios"&&gi(s,l,"ios-after-failure.png"),await co(d,l),a?.urls&&await fo(a.urls,o,s,l),await f("failed",g),F.error(K.red(`Managed Maestro runner failed: ${g}`)),{status:"failed",exitCode:1,attempts:0,flows:a?.flowPath||".maestro",platform:a?.platform||e.platform}}finally{vc(u,l)}}async function sc(e){let t=e.maestroFlows||".maestro",n=bo(e.maestroRetries);if(n===null)return null;let i=Y.resolve(t);if(!x.existsSync(i))return F.error(K.red(`Maestro flows not found: ${t}`)),{status:"failed",exitCode:1,attempts:0,flows:t,platform:e.platform};let r=await pc(e);if(r?.url){if(!await mc(r))return{status:"failed",exitCode:1,attempts:0,flows:t,platform:r.platform||e.platform}}else if(e.buildId||e.buildUrl||e.artifactUrl||e.latest)return{status:"failed",exitCode:1,attempts:0,flows:t,platform:e.platform};e.maestroRecord&&F.warn(K.yellow("--maestro-record is managed-runner only and is ignored in --local mode."));let o=r?.platform||e.platform,s=["test"];o&&s.push("--platform",o),e.maestroDevice&&s.push("--device",String(e.maestroDevice));let l=rc(e.maestroEnv),a=Object.keys(l);if(a.length>0){F.info(K.dim(`Passing Maestro env vars to local run: ${a.join(", ")}`));for(let[p,g]of Object.entries(l))s.push("-e",`${p}=${g}`)}s.push(t);let d=n+1,u=1;for(let p=1;p<=d;p+=1){if(F.info(K.dim(`Running local Maestro attempt ${p}/${d}...`)),So&&p<d){let g=await Io("maestro",s,{cwd:process.cwd(),env:process.env,echoOutput:!0,fastFailOnFlowFailure:!0});if(g.error){let y=g.error.message||"Failed to run Maestro";F.error(K.red(`Local Maestro failed to start: ${y}`)),F.info(K.dim("Install Maestro locally, then retry: https://maestro.mobile.dev/getting-started/installing-maestro")),u=1;break}u=g.exitCode}else{let g=Ge("maestro",s,{cwd:process.cwd(),stdio:"inherit",env:process.env});if(g.error){let y=g.error.message||"Failed to run Maestro";F.error(K.red(`Local Maestro failed to start: ${y}`)),F.info(K.dim("Install Maestro locally, then retry: https://maestro.mobile.dev/getting-started/installing-maestro")),u=1;break}u=typeof g.status=="number"?g.status:1}if(u===0)break}let c=u===0?"passed":"failed",f={status:c,exitCode:u,attempts:d,flows:t,platform:o};return xc(e,f),c==="passed"?F.success(K.green("Local Maestro run passed")):F.error(K.red(`Local Maestro run failed with exit code ${u}`)),f}async function Ii(e){let t=$e(`./${m.configFileName}`),n=e.projectId||t?.projectId,i=String(e.profile||e.buildProfile||"production").toLowerCase();if(!n)return F.error(`No projectId found. Run \`${m.nameLower} link\` first or pass an internal project id.`),null;let r=e.platform;if(!r&&e.latest){let c=await go({message:"Select platform for the latest build:",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"}]});if(yi(c))return null;r=c}let o=await uc(e);if(!o)return null;if(o.kind==="latest"&&!r)return F.error("Pass --platform when using --latest."),null;if(o.kind==="artifact-url"&&!r)return F.error("Pass --platform when using --artifact-url."),null;let s=bo(e.maestroRetries);if(s===null)return null;let l=Ai(e.maestroEnv),a=ic(e.maestroEnv);!e.quiet&&l.length>0&&F.info(K.dim(`Forwarding Maestro env vars by name: ${l.join(", ")}`));let d=await lc(e,n);if(d===null)return null;let u=Wt();e.quiet||u.start("Queuing Maestro run...");try{let c=await k.post("/tests/maestro",{projectId:n,platform:r,profile:i,latest:o.kind==="latest",buildId:o.kind==="build-id"?o.value:e.buildId,buildUrl:o.kind==="build-url"?o.value:e.buildUrl,artifactUrl:o.kind==="artifact-url"?o.value:e.artifactUrl,flowSourceKey:d,flows:e.maestroFlows||".maestro",device:e.maestroDevice||(r==="ios"?"iphone_15":"pixel_6"),retries:s,record:!!e.maestroRecord,...l.length>0?{envNames:l}:{},...a?{env:a}:{}});if(c.data.status!=="success")throw new Error(c.data.message||"Failed to queue Maestro run");let f=c.data.testRun,p={testRunId:f.testRunId,status:f.status,projectId:n,buildId:f.buildId,platform:f.platform,dashboardUrl:f.dashboardUrl||`${Je}/tests/${f.testRunId}`,launchDeferredReason:f.launchDeferredReason};return Ro(e,p),e.quiet||u.stop("Maestro run queued"),p}catch(c){e.quiet||u.stop("Could not queue Maestro run");let f=c.response?.data?.message||c.message||"Unknown error";return F.error(K.red(`Maestro queue failed: ${f}`)),null}}async function ac(e,t){let n=ao(e.waitTimeout,60,"--wait-timeout"),i=ao(e.waitInterval,15,"--wait-interval");if(n===null||i===null)return null;let r=n*60*1e3,o=Math.max(5,i)*1e3,s=Date.now(),l=t.status||"queued";for(F.info(K.dim(`Waiting for Maestro run ${t.testRunId} to finish...`));Date.now()-s<=r;){let a=await dc(t.projectId,t.testRunId);if(!a)return null;if(a.status&&a.status!==l&&(l=a.status,F.info(K.dim(`Maestro status: ${l}`))),tc.has(String(a.status)))return Ro(e,a),a.status==="passed"?F.success(K.green(`Maestro run passed: ${a.testRunId}`)):(F.error(K.red(`Maestro run ${a.status}: ${a.testRunId}`)),a.error&&F.error(K.red(String(a.error)))),a;await wi(o)}return F.error(K.red(`Timed out waiting for Maestro run ${t.testRunId} after ${n} minute(s).`)),{...t,status:"timeout"}}async function lc(e,t){if(e.maestroUseBuildSource)return;let n=e.maestroFlows||".maestro",i=Y.resolve(n);if(!x.existsSync(i))return e.maestroFlows?(F.error(K.red(`Maestro flows not found: ${n}`)),null):void 0;let r=Y.relative(process.cwd(),i);if(!r||r.startsWith("..")||Y.isAbsolute(r))return F.error(K.red("Managed Maestro flow uploads must be inside the current project directory.")),null;let o=Wt();e.quiet||o.start(`Uploading Maestro flows from ${r}...`);try{let s=await k.post("/tests/maestro/source-upload-url",{projectId:t,uploadId:Zl()});if(s.data.status!=="success"||!s.data.uploadUrl||!s.data.key)throw new Error(s.data.message||"Failed to get Maestro flow upload URL");let l=new En;if(x.statSync(i).isDirectory())l.addLocalFolder(i,r);else{let u=Y.dirname(r);l.addLocalFile(i,u==="."?void 0:u,Y.basename(r))}let d=l.toBuffer();return await cc(s.data.uploadUrl,d,"application/zip","Maestro flow upload",u=>{e.quiet||o.message(u)}),e.quiet||o.stop("Maestro flows uploaded"),s.data.key}catch(s){e.quiet||o.stop("Could not upload Maestro flows");let l=s.response?.data?.message||s.message||"Unknown error";return F.error(K.red(`Maestro flow upload failed: ${l}`)),null}}function yo(e){let t=e.response?.status,n=e.code||"",i=e.message||"";return t&&![408,409,425,429].includes(t)&&t<500?!1:/ECONNRESET|ETIMEDOUT|EAI_AGAIN|ENOTFOUND|ECONNABORTED|socket hang up|network|timeout/i.test(`${n} ${i}`)||!t}async function cc(e,t,n,i,r){let o;for(let s=1;s<=so;s+=1)try{await zt.put(e,t,{headers:{"Content-Type":n},maxBodyLength:1/0,maxContentLength:1/0,timeout:nc});return}catch(l){if(o=l,!yo(l)||s>=so)break;let a=Math.min(2e4,2e3*s),d=l.code||l.response?.status||l.message||"network error";r?.(`${i} attempt ${s} failed (${d}), retrying...`),await wi(a)}throw o}async function dc(e,t){try{let n=await k.get(`/tests/${encodeURIComponent(t)}`,{params:{projectId:e}});if(n.data.status!=="success")throw new Error(n.data.message||"Failed to fetch Maestro run");let i=n.data.testRun;return{testRunId:i.testRunId,status:i.status,projectId:e,buildId:i.buildId,platform:i.platform,dashboardUrl:i.dashboardUrl||`${Je}/tests/${i.testRunId}`,launchDeferredReason:i.launchDeferredReason,...i.error?{error:i.error}:{}}}catch(n){let i=n.response?.data?.message||n.message||"Unknown error";return F.error(K.red(`Could not fetch Maestro run status: ${i}`)),null}}async function uc(e){if(e.buildId)return{kind:"build-id",value:e.buildId};if(e.buildUrl)return{kind:"build-url",value:e.buildUrl};if(e.artifactUrl)return{kind:"artifact-url",value:e.artifactUrl};if(e.latest)return{kind:"latest"};let t=await go({message:"Select app artifact source for Maestro:",options:[{value:"latest",label:"Latest successful build"},{value:"build-id",label:"Build ID"},{value:"build-url",label:`${m.name} build URL`},{value:"artifact-url",label:"Direct artifact URL"}]});if(yi(t))return null;if(t==="latest")return{kind:"latest"};let n=await ec({message:t==="build-id"?"Enter build ID:":t==="build-url"?`Enter ${m.name} build URL:`:"Enter artifact URL:",validate:i=>{let r=String(i||"").trim();if(!r)return"Value is required";if((t==="build-url"||t==="artifact-url")&&!r.startsWith("http"))return"Must be a URL"}});return yi(n)?null:{kind:t,value:String(n).trim()}}function ao(e,t,n){if(e==null||e==="")return t;let i=Number(e);return!Number.isFinite(i)||i<=0?(F.error(`${n} must be a positive number.`),null):i}function wi(e){return new Promise(t=>setTimeout(t,e))}function bo(e){if(e==null||e==="")return 1;let t=Number(e);return!Number.isInteger(t)||t<0||t>10?(F.error("--maestro-retries must be an integer between 0 and 10."),null):t}async function pc(e){if(e.artifactUrl)return{url:e.artifactUrl,platform:e.platform||Ri(e.artifactUrl),name:_o(e.artifactUrl)};let t=e.buildId||Lc(e.buildUrl);return t?Eo(t,e.platform):e.latest?fc(e):null}async function Eo(e,t){let n=Wt();n.start(`Resolving build ${e}...`);try{let i=await k.get(`/public/builds/${encodeURIComponent(e)}`);if(i.data.status!=="success")throw new Error(i.data.message||"Build lookup failed");let r=t||i.data.build?.platform,o=kc(i.data.artifacts||[],r);if(!o?.downloadUrl)throw new Error("No installable APK or simulator app artifact found for this build.");return n.stop("Build artifact resolved"),{url:o.downloadUrl,platform:r||Ri(o.name||o.downloadUrl),name:o.name}}catch(i){n.stop("Could not resolve build artifact");let r=i.response?.data?.message||i.message||"Unknown error";return F.error(K.red(`Local Maestro artifact lookup failed: ${r}`)),null}}async function fc(e){let t=$e(`./${m.configFileName}`),n=e.projectId||t?.projectId,i=String(e.profile||e.buildProfile||"production").toLowerCase();if(!n)return F.error(`No projectId found. Run \`${m.nameLower} link\` first or pass --build-id/--artifact-url.`),null;if(!e.platform)return F.error("Pass --platform when using --latest with --local."),null;let r=Wt();r.start("Resolving latest build...");try{let o=await k.get(`/builds/${n}`,{params:{limit:100}}),l=(Array.isArray(o.data.builds)?o.data.builds:[]).find(a=>a.status==="success"&&a.platform===e.platform&&String(a.buildProfile||a.buildType||"production").toLowerCase()===i);if(!l?.buildId)throw new Error(`No successful ${e.platform} build found for profile ${i}.`);return r.stop(`Latest build resolved: ${l.buildId}`),Eo(l.buildId,e.platform)}catch(o){r.stop("Could not resolve latest build");let s=o.response?.data?.message||o.message||"Unknown error";return F.error(K.red(`Latest build lookup failed: ${s}`)),null}}async function mc(e){let t=e.platform||Ri(e.url);if(!t)return F.error(K.red("Could not infer platform for local install. Pass --platform android or --platform ios.")),!1;let n=x.mkdtempSync(Y.join(Tt.tmpdir(),"mach-maestro-")),i=e.name||_o(e.url)||(t==="android"?"app.apk":"app.zip"),r=Y.join(n,i),o=Wt();o.start(`Downloading ${i}...`);try{await bi(e.url,r),o.stop("Artifact downloaded")}catch(s){return o.stop("Artifact download failed"),F.error(K.red(s.message||"Failed to download artifact")),!1}return t==="android"?Nc(r):Tc(r,n)}async function bi(e,t){let n=await zt.get(e,{responseType:"stream"});await Ql(n.data,x.createWriteStream(t))}function gc(e,t=12e3){try{return x.readFileSync(e,"utf-8").slice(-t)}catch{return""}}function lo(e){if(!Number.isFinite(e)||e<0)return"unknown size";if(e<1024)return`${e} B`;let t=["KB","MB","GB"],n=e/1024,i=t[0];for(let r=1;n>=1024&&r<t.length;r+=1)n/=1024,i=t[r];return`${n.toFixed(n>=10?1:2)} ${i}`}function hc(e){return Object.entries(e||{}).filter(([t,n])=>!!t&&n!==void 0).sort(([t],[n])=>t.localeCompare(n)).flatMap(([t,n])=>["-e",`${t}=${n}`])}function Sc(e,t){let n=Y.resolve(e,t||".maestro"),i=Y.relative(e,n);if(i.startsWith("..")||Y.isAbsolute(i))throw new Error("Maestro flow path must stay inside the build source.");return n}function Ao(e,t){let n=[e];for(let i=0;i<t.length;i+=1){let r=t[i],o=t[i-1];(o==="-e"||o==="--env")&&/^[A-Za-z_][A-Za-z0-9_]*=/.test(r)?n.push(`${r.slice(0,r.indexOf("="))}=<redacted>`):n.push(r)}return n.join(" ")}function yc(e){return/\[Failed\]\s+/.test(e)}function bc(e){if(!e.killed){try{e.kill("SIGTERM")}catch{}setTimeout(()=>{try{e.kill("SIGKILL")}catch{}},5e3).unref()}}function Io(e,t,n={}){let{cwd:i,env:r=process.env,logPath:o,echoOutput:s=!1,fastFailOnFlowFailure:l=!1}=n;return o&&x.appendFileSync(o,`
 $ ${Ao(e,t)}
 `),new Promise(a=>{let d=!1,u=!1,c="",f=y=>{u||(u=!0,a(y))},p=mo(e,t,{cwd:i,env:r,stdio:["ignore","pipe","pipe"]}),g=y=>{c+=y;let _=c.split(/\r?\n/);c=_.pop()||"";for(let D of _)if(l&&yc(D)&&!d){d=!0;let b="Mach fast-fail: detected failed Maestro flow; stopping this attempt early to retry...";o&&x.appendFileSync(o,`
 ${b}
@@ -1425,8 +1425,8 @@ $ ${Ao(e,t)}
 `)[0]?.trim()||null}async function Si(e,t,n){if(!x.existsSync(e))return;let i=x.readFileSync(e),r;for(let o=1;o<=3;o+=1)try{await zt.put(t,i,{headers:{"Content-Type":n,"Content-Length":String(i.length)},maxBodyLength:1/0,maxContentLength:1/0,timeout:12e4});return}catch(s){if(r=s,!yo(s)||o>=3)break;await wi(2e3*o)}throw r}async function fo(e,t,n,i){let r=Y.join(n,"report.xml"),o=Y.join(t,"artifacts.tar.gz");try{await Si(r,e.junitUploadUrl,"application/xml")}catch(s){x.appendFileSync(i,`[WARN] Failed to upload JUnit report: ${s.message||s}
 `)}try{await Si(i,e.logUploadUrl,"text/plain")}catch(s){x.appendFileSync(i,`[WARN] Failed to upload runner log: ${s.message||s}
 `)}try{ot("tar",["-czf",o,"-C",t,Y.basename(n)],i),await Si(o,e.artifactsUploadUrl,"application/gzip")}catch(s){x.appendFileSync(i,`[WARN] Failed to upload Maestro artifacts: ${s.message||s}
-`)}}function Nc(e){if(!e.endsWith(".apk"))return F.error(K.red("Local Android Maestro runs need an APK artifact.")),!1;F.info(K.dim("Installing APK on local Android device/emulator..."));let t=Ge("adb",["install","-r",e],{stdio:"inherit",env:process.env});return t.error?(F.error(K.red(`adb failed to start: ${t.error.message}`)),!1):t.status!==0?(F.error(K.red(`adb install failed with exit code ${t.status??1}`)),!1):!0}function Tc(e,t){if(e.endsWith(".ipa"))return F.error(K.red("Local iOS Maestro runs need an iOS Simulator .app.zip artifact, not an App Store .ipa.")),!1;let n=e;if(e.endsWith(".zip")){let r=Y.join(t,"ios-app");x.mkdirSync(r,{recursive:!0}),new En(e).extractAllTo(r,!0);let o=_i(r);if(!o)return F.error(K.red("Could not find a .app bundle inside the downloaded zip.")),!1;n=o}if(!n.endsWith(".app"))return F.error(K.red("Local iOS Maestro runs need an iOS Simulator .app bundle or .app.zip artifact.")),!1;F.info(K.dim("Installing app on booted iOS Simulator..."));let i=Ge("xcrun",["simctl","install","booted",n],{stdio:"inherit",env:process.env});return i.error?(F.error(K.red(`xcrun failed to start: ${i.error.message}`)),!1):i.status!==0?(F.error(K.red(`iOS Simulator install failed with exit code ${i.status??1}`)),!1):!0}function _i(e){let t=x.readdirSync(e,{withFileTypes:!0});for(let n of t){let i=Y.join(e,n.name);if(n.isDirectory()&&n.name.endsWith(".app"))return i;if(n.isDirectory()){let r=_i(i);if(r)return r}}return null}function kc(e,t){let n=String(t||"").toLowerCase();return n==="android"?e.find(i=>Nt(i,".apk")):n==="ios"?e.find(i=>Nt(i,".app.zip"))||e.find(i=>Nt(i,".zip")):e.find(i=>Nt(i,".apk"))||e.find(i=>Nt(i,".app.zip"))||e.find(i=>Nt(i,".zip"))}function Nt(e,t){return String(e?.name||e?.downloadUrl||e?.url||"").toLowerCase().endsWith(t)}function Ri(e){let t=String(e||"").toLowerCase();if(t.includes(".apk"))return"android";if(t.includes(".app.zip")||t.endsWith(".app")||t.includes(".ipa"))return"ios"}function _o(e){if(e)try{return Y.basename(new URL(e).pathname)||void 0}catch{return Y.basename(e)||void 0}}function Lc(e){return e?e.match(/[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/i)?.[0]:void 0}function Ro(e,t){if(!e.jsonOutput)return;let n=Y.resolve(e.jsonOutput),i={...t,updatedAt:new Date().toISOString()};try{let r=Y.dirname(n);r&&r!=="."&&x.mkdirSync(r,{recursive:!0}),x.writeFileSync(n,JSON.stringify(i,null,2))}catch(r){F.warn(K.yellow(`Could not write Maestro metadata JSON: ${r.message}`))}}function xc(e,t){if(!e.jsonOutput)return;let n=Y.resolve(e.jsonOutput),i={mode:"local",...t,updatedAt:new Date().toISOString()};try{let r=Y.dirname(n);r&&r!=="."&&x.mkdirSync(r,{recursive:!0}),x.writeFileSync(n,JSON.stringify(i,null,2))}catch(r){F.warn(K.yellow(`Could not write Maestro metadata JSON: ${r.message}`))}}import{spinner as ut,text as Yt,select as Di,isCancel as ct,cancel as Ci,log as No}from"@clack/prompts";import ne from"chalk";import oe from"fs";import Ie from"path";import{spawn as Mc,spawnSync as It}from"child_process";import To from"axios";import _t from"os";import ki from"crypto";var Uc=5e3,Fc=12,ko=100,$i=24,$o=8e3,Bc={completed:"completed",draft:"draft",halted:"halted",inprogress:"inProgress","in-progress":"inProgress"},Hc=e=>e?.type==="google_service_account",In=e=>e?.bundleId||e?.packageName||e?.meta?.packageName||e?.meta?.bundleId,Lo=e=>e.submitArgs||process.argv.slice(3).join(" ");async function wn(e){let t=ut(),n=Pe(),i=jc(e);if(!i){process.exitCode=1;return}let r=e.projectId||i.projectId,o=e.profile||e.buildProfile||"production";if(!r){le(`${m.configFileName} is missing projectId. Pass --project-id in runner mode.`),process.exitCode=1;return}i.projectId=r,me(ne.dim(`Submit for project: ${i.name||r} | Profile: ${o}`));let s=e.platform;if(!s){let h=await Di({message:"Select platform to submit:",options:[{value:"ios",label:"iOS (App Store Connect / TestFlight)"},{value:"android",label:"Android (Google Play Console)"}]});if(ct(h)){Ci("Operation cancelled");return}s=h}if(s=String(s).toLowerCase(),s!=="ios"&&s!=="android"){le(`Platform ${s} is not supported. Use 'ios' or 'android'.`),process.exitCode=1;return}let l=s==="ios"&&!e.local&&e.sshHost?rd(i,o,e):null;if(s==="ios"&&!e.local&&!l){await Gc(i,o,e);return}let a=e.submitId,d=!!(e.local&&a),u=a||null,c=async(h,M={})=>{u&&await Wc(r,u,{status:h,...M})},f=s==="android"?e.packageName||e.androidPackage||td(i,o):void 0,p=s==="ios"?e.bundleId||e.iosBundleIdentifier||id(i,o):void 0,g,y,_,D=!1;try{s==="android"&&(g=e.track||i.submit?.[o]?.android?.track||i.submit?.production?.android?.track||"internal",y=od(i,o,e.releaseStatus),_=ad(i,o,e.rollout),D=ld(i,o,e.changesNotSentForReview),cd(y,_))}catch(h){le(h.message),process.exitCode=1;return}if(s==="android"&&!d&&(u=await Kc(i,r,s,o,e,{packageName:f,track:g,releaseStatus:y,rollout:_,changesNotSentForReview:D}),!u)){le("Could not create submission tracking record. Submission was not started."),process.exitCode=1;return}await c("running",{platform:s,profile:o,packageName:f,track:g,releaseStatus:y,rollout:_,startTime:Date.now(),...d?Jc():{}});let b=null,L=null;try{L=await dd(r,s,e,n?.token),b=L?.filePath||null}catch(h){await c("failed",{error:`Failed to resolve submission artifact: ${h.message}`,endTime:Date.now()}),le(`Failed to resolve submission artifact: ${h.message}`),process.exitCode=1;return}if(!b){let h=pd(s,e);await c("failed",{error:h,endTime:Date.now()}),le(h),process.exitCode=1;return}await c("running",{buildId:L?.buildId,artifactName:L?.artifactName,artifactSource:L?.source}),me(`Using artifact: ${ne.green(Ie.basename(b))} `),t.start("Fetching submission credentials from Dashboard...");let A;try{let M=(await k.get(`/credentials/${r}`)).data.credentials||[];if(s==="android"&&!f){t.stop("Package name missing"),le("Could not resolve Android package name. Set android.package in mach.config.json/app.json."),await c("failed",{error:"Could not resolve Android package name.",endTime:Date.now()}),process.exitCode=1;return}let U=M.filter(Hc),j=s==="ios"?M.filter(X=>X.type==="asc_api_key"):nd(U,f);if(j.length===0){if(t.stop("Credentials missing"),le(s==="android"?`No Google Play service credential found for package ${f}.`:`No Service Credentials found for ${s}.`),s==="android"){let X=U.map(In).filter(Boolean).join(", ");X&&me(`Found Google Play service credential(s) for: ${X}`),me(`Use '${m.nameLower} credentials:service --platform android --package-name ${f}' or upload it under that package in the Dashboard.`)}else me(`Use '${m.nameLower} credentials:service --platform ${s}' or use the Dashboard to upload them.`);await c("failed",{error:`No submission credentials found for ${s}.`,endTime:Date.now()}),process.exitCode=1;return}if(A=qc(j,e.credentialId),!A&&s==="ios"&&p&&(A=Zc(j,p)),A||j.length===1)A=A||j[0],t.stop(`Using: ${A.name}`),s==="android"&&In(A)==="*"&&me(ne.yellow(`Using legacy wildcard Google Play credential for ${f}. Upload a package-scoped credential when possible.`));else{if(t.stop("Multiple credentials found"),Qc()){let H=j.map(N=>`${N.name||"credential"} (${N.credentialId||N.id||"no-id"})`).join(", ");le(`Multiple ${s==="ios"?"App Store Connect":"Google Play"} credentials found. Use --credential-id in CI. Available: ${H}`),await c("failed",{error:"Multiple submission credentials found; --credential-id is required in CI.",endTime:Date.now()}),process.exitCode=1;return}let X=await Di({message:`Choose a ${s==="ios"?"App Store Connect":"Google Play"} credential:`,options:j.map(H=>({value:H.credentialId,label:H.name,hint:`${H.keyId?`ID: ${H.keyId}`:""} ${H.issuerId?`(Issuer: ${H.issuerId.substring(0,8)}...)`:""}`}))});if(ct(X)){Ci("Submission cancelled"),await c("failed",{error:"Submission cancelled while selecting credential.",endTime:Date.now()}),process.exitCode=1;return}A=j.find(H=>H.credentialId===X),me(`Using selected: ${ne.green(A.name)}`)}}catch(h){t.stop("Failed to fetch credentials"),le(`API Error: ${h.message} `),await c("failed",{error:`Failed to fetch credentials: ${h.message}`,endTime:Date.now()}),process.exitCode=1;return}let B=oe.mkdtempSync(Ie.join(_t.tmpdir(),`${m.nameLower}-submit-`)),q=A.keyId||A.meta?.keyId,P=A.issuerId||A.meta?.issuerId,I=A.type==="asc_api_key"?`AuthKey_${q}.p8`:"service-account.json",T=Ie.join(B,I);t.start("Downloading secure key...");try{let h=await k.get(`/credentials/${A.credentialId}/download`,{params:{projectId:r,format:"raw"}});if(h.data.status!=="success"||!h.data.downloadUrl)throw new Error("Failed to get secure download URL");let M=await To.get(h.data.downloadUrl,{responseType:"arraybuffer"});oe.writeFileSync(T,Buffer.from(M.data)),t.stop("Key downloaded to secure temp storage")}catch(h){t.stop("Download failed"),le(`Failed to download key: ${h.message}`);try{oe.rmSync(B,{recursive:!0,force:!0})}catch{}await c("failed",{error:`Failed to download credential key: ${h.message}`,endTime:Date.now()}),process.exitCode=1;return}me(ne.blue(`Initiating ${s==="ios"?"TestFlight":"Google Play"} submission...`));let w=!1,C;try{if(s==="ios"){if(!q){let M=await Yt({message:"Enter App Store Connect Key ID (e.g. 2X948D...):",validate:U=>U.length>0?void 0:"Key ID is required"});if(ct(M)){await c("failed",{error:"Submission cancelled while entering ASC Key ID.",endTime:Date.now()}),process.exitCode=1;return}q=M}if(!P||P==="undefined"){let M=await Yt({message:"Enter App Store Connect Issuer ID (Found on ASC Keys page):",validate:U=>U.length>0?void 0:"Issuer ID is required"});if(ct(M)){await c("failed",{error:"Submission cancelled while entering ASC Issuer ID.",endTime:Date.now()}),process.exitCode=1;return}P=M}me(`Using ASC Key ID: ${q}`),me(`Using ASC Issuer ID: ${P}`);let h=l?await md(b,T,P,q,p,l):await fd(b,T,P,q,p);Ti(`${s==="ios"?"App Store":"Google Play"} submission successful!`),w=!0}else C=await bd(b,T,g||"internal",f,y||"completed",_,D,o),Ti("Google Play submission successful!"),w=!0}catch(h){le(`Submission failed: ${h.message}`),await c("failed",{error:h.message,endTime:Date.now()}),dt(e,{status:"failed",projectId:r,submitId:u,platform:s,profile:o,buildId:L?.buildId||e.buildId,artifactName:L?.artifactName,error:h.message,dashboardUrl:u?wt(u,r):void 0}),process.exitCode=1}finally{w&&(await c("success",{endTime:Date.now(),versionCode:C?.versionCode,track:g,releaseStatus:y}),dt(e,{status:"success",projectId:r,submitId:u,platform:s,profile:o,buildId:L?.buildId||e.buildId,artifactName:L?.artifactName,versionCode:C?.versionCode,track:g,releaseStatus:y,dashboardUrl:u?wt(u,r):void 0})),kd(B),b&&b.includes(`${m.nameLower}-artifact-`)}}function jc(e){let t=`./${m.configFileName}`;if(oe.existsSync(t))try{return JSON.parse(oe.readFileSync(t,"utf-8"))}catch(n){return le(`Failed to read ${m.configFileName}: ${n.message}`),null}return e.projectId?{projectId:e.projectId}:(le(`No ${m.configFileName} found. Run \`${m.nameLower} init\` or \`${m.nameLower} link\` first.`),null)}async function Gc(e,t,n){let i=n.projectId||e.projectId;if(!i){le(`${m.configFileName} is missing projectId.`),process.exitCode=1;return}let r=n.submitId||ki.randomUUID(),o=!!n.latest||!n.buildId,s=Vc({...n,latest:o,profile:t,projectId:i,submitId:r}),l={projectId:i,submitId:r,platform:"ios",profile:t,latest:o,buildId:n.buildId,credentialId:n.credentialId,status:"pending",source:"cli",submitArgs:Lo(n),runnerArgs:s,runnerCommand:[m.nameLower,"submit",...s].map(ed).join(" "),appName:e.name,startTime:Date.now()},a=ut();a.start("Queuing iOS submit on macOS runner...");try{let d=await k.post("/submissions",l),u=d.data?.submission||d.data?.submit||{},c=d.data?.dashboardUrl||wt(r,i);a.stop("iOS submit queued"),me(`Submission ID: ${ne.cyan(r)}`),me(`Dashboard: ${ne.blue.underline(c)}`),dt(n,{status:"pending",projectId:i,submitId:r,platform:"ios",profile:t,latest:o,buildId:n.buildId,dashboardUrl:c}),await zc(i,r,n)}catch(d){a.stop("Could not queue iOS submit"),le(Xc(d)),process.exitCode=1}}async function Kc(e,t,n,i,r,o={}){let s=r.submitId||ki.randomUUID(),l=!!r.latest||!r.buildId,a={projectId:t,submitId:s,platform:n,profile:i,latest:l,buildId:r.buildId,credentialId:r.credentialId,status:"running",source:"cli-direct",submitArgs:Lo(r),appName:e.name,startTime:Date.now(),...o};try{let d=await k.post("/submissions",a),u=d.data?.submission||d.data?.submit||{},c=d.data?.dashboardUrl||u.dashboardUrl||wt(s,t);return me(`Submission ID: ${ne.cyan(s)}`),me(`Dashboard: ${ne.blue.underline(c)}`),dt(r,{status:"running",projectId:t,submitId:s,platform:n,profile:i,latest:l,buildId:r.buildId,dashboardUrl:c}),s}catch(d){let u=d.response?.data?.message||d.response?.data?.error||d.message;return me(ne.yellow(`Could not create submission tracking record: ${u}`)),null}}function Vc(e){let t=["--local","--submit-id",e.submitId,"--project-id",e.projectId,"--platform","ios","--profile",e.profile||"production"];return e.buildId?t.push("--build-id",e.buildId):t.push("--latest"),e.credentialId&&t.push("--credential-id",e.credentialId),e.bundleId&&t.push("--bundle-id",e.bundleId),e.packageName&&t.push("--package-name",e.packageName),e.quiet&&t.push("--quiet"),e.jsonOutput&&t.push("--json-output",e.jsonOutput),t.filter(n=>n!=null&&n!=="")}async function zc(e,t,n){let i=ut(),r=0,o=0;for(n.quiet||i.start("Waiting for iOS submit runner...");;)try{let s=await k.get(`/submissions/${e}/${t}`),l=s.data?.submission||s.data?.submit||s.data,a=String(l?.status||"pending").toLowerCase();r=0;let d=Array.isArray(l?.logs)?l.logs:[];for(let u=o;u<d.length;u++){let c=d[u];c&&console.log(ne.dim(String(c)))}if(o=d.length,["success","completed","succeeded"].includes(a)){n.quiet||i.stop("iOS submit completed"),Ti("App Store submission successful!"),dt(n,{status:"success",projectId:e,submitId:t,platform:"ios",profile:l?.profile||n.profile||"production",buildId:l?.buildId||n.buildId,artifactName:l?.artifactName,dashboardUrl:l?.dashboardUrl||wt(t,e)});return}if(["failed","error","cancelled","canceled"].includes(a)){n.quiet||i.stop("iOS submit failed");let u=l?.error||l?.message||"Unknown iOS submit failure.";le(u),dt(n,{status:"failed",projectId:e,submitId:t,platform:"ios",profile:l?.profile||n.profile||"production",buildId:l?.buildId||n.buildId,artifactName:l?.artifactName,error:u,dashboardUrl:l?.dashboardUrl||wt(t,e)}),process.exitCode=1;return}n.quiet||i.message(`iOS submit ${a}...`),await Ni(Uc)}catch(s){if(r++,r>=Fc){n.quiet||i.stop("Lost connection to iOS submit status"),le(`Could not fetch iOS submit status after ${r} attempts: ${s.message}`),process.exitCode=1;return}await Ni(Math.min(2e3*r,15e3))}}async function Wc(e,t,n){let i;for(let r=1;r<=3;r++)try{await k.patch(`/submissions/${e}/${t}`,n);return}catch(o){if(i=o,r>=3||!Yc(o))break;await Ni(1e3*r)}No.warn(ne.dim(`Could not report submission status: ${i?.message||i}`))}function Yc(e){let t=e.response?.status;return!t||t===408||t===409||t===425||t===429||t>=500}function Jc(){let e={gitlabJobId:process.env.CI_JOB_ID,gitlabJobUrl:process.env.CI_JOB_URL,gitlabPipelineId:process.env.CI_PIPELINE_ID,gitlabProjectId:process.env.CI_PROJECT_ID,gitlabProjectPath:process.env.CI_PROJECT_PATH};return Object.fromEntries(Object.entries(e).filter(([,t])=>!!t))}function Xc(e){let t=e.response?.status,n=e.response?.data?.message||e.response?.data?.error;return t===404||t===405?["Managed iOS submit is not enabled on this Mach API yet.","Deploy the API/dashboard submission orchestration endpoint, then retry the same command.","Expected API: POST /submissions and GET/PATCH /submissions/:projectId/:submitId."].join(`
-`):n||e.message||String(e)}function wt(e,t){if(!e)return Je;let n=t?`?projectId=${encodeURIComponent(t)}`:"";return`${Je}/submissions/${e}${n}`}function dt(e,t){if(!e.jsonOutput)return;let n=Ie.resolve(e.jsonOutput),i={...t,url:t.url||t.dashboardUrl||wt(t.submitId,t.projectId),updatedAt:new Date().toISOString()};try{let r=Ie.dirname(n);r&&r!=="."&&oe.mkdirSync(r,{recursive:!0}),oe.writeFileSync(n,JSON.stringify(i,null,2))}catch(r){No.warn(ne.yellow(`Could not write submission metadata JSON: ${r.message}`))}}function qc(e,t){return t&&e.find(n=>n.credentialId===t||n.id===t||n.keyId===t||n.meta?.keyId===t)||null}function Zc(e,t){let n=e.filter(i=>[i.bundleId,i.bundleIdentifier,i.appIdentifier,i.meta?.bundleId,i.meta?.bundleIdentifier,i.meta?.appIdentifier].filter(Boolean).map(String).includes(t));return n.length===1?n[0]:null}function Qc(){return process.env.CI==="true"||process.env.CI==="1"||!process.stdin.isTTY}function Ni(e){return new Promise(t=>setTimeout(t,e))}function ed(e){return/^[a-zA-Z0-9_./:=@-]+$/.test(e)?e:`'${e.replace(/'/g,"'\\''")}'`}function td(e,t){if(e.submit?.[t]?.android?.package)return e.submit[t].android.package;let n=yr(e,t);if(n)return n;let i=Ie.join(process.cwd(),"app.json");if(oe.existsSync(i))try{return JSON.parse(oe.readFileSync(i,"utf-8")).expo?.android?.package}catch{}let r=Ie.join(process.cwd(),"app.config.json");if(oe.existsSync(r))try{let o=JSON.parse(oe.readFileSync(r,"utf-8"));return o.expo?.android?.package||o.android?.package}catch{}}function nd(e,t){let n=e.filter(o=>In(o)===t);if(n.length>0)return n;let i=e.filter(o=>{let s=In(o);return!s||s==="*"});return e.length>0&&e.length===i.length?i:[]}function id(e,t){return e.submit?.[t]?.ios?.bundleIdentifier?e.submit[t].ios.bundleIdentifier:e.submit?.[t]?.ios?.bundleId?e.submit[t].ios.bundleId:br(e,t)}function rd(e,t,n){let i=e.submit?.[t]?.ios||{},r=e.submit?.production?.ios||{},o=n.sshHost||i.sshHost||r.sshHost||process.env.MACH_IOS_SUBMIT_SSH_HOST;return o?{sshHost:o,sshUser:n.sshUser||i.sshUser||r.sshUser||process.env.MACH_IOS_SUBMIT_SSH_USER||process.env.USER||"ubuntu",sshKey:n.sshKey||i.sshKey||r.sshKey||process.env.MACH_IOS_SUBMIT_SSH_KEY}:null}function od(e,t,n){let i=n||e.submit?.[t]?.android?.releaseStatus||e.submit?.production?.android?.releaseStatus||"completed";return sd(i)}function sd(e){let t=Bc[String(e).trim().toLowerCase()];if(!t)throw new Error(`Invalid Android release status "${e}". Use completed, draft, halted, or inProgress.`);return t}function ad(e,t,n){let i=n??e.submit?.[t]?.android?.rollout??e.submit?.[t]?.android?.userFraction??e.submit?.[t]?.android?.rolloutFraction??e.submit?.production?.android?.rollout??e.submit?.production?.android?.userFraction??e.submit?.production?.android?.rolloutFraction;if(i==null||i==="")return;let r=Number(i);if(!Number.isFinite(r)||r<=0||r>=1)throw new Error(`Invalid Android rollout fraction "${i}". Use a number greater than 0 and less than 1, for example 0.1.`);return r}function ld(e,t,n){let i=n??e.submit?.[t]?.android?.changesNotSentForReview??e.submit?.[t]?.android?.changes_not_sent_for_review??e.submit?.production?.android?.changesNotSentForReview??e.submit?.production?.android?.changes_not_sent_for_review??!1;return i===!0||i==="true"||i==="1"}function cd(e,t){if(e==="inProgress"&&t===void 0)throw new Error("Google Play staged rollout requires --rollout <fraction> when --release-status inProgress is used.");if(e!=="inProgress"&&e!=="halted"&&t!==void 0)throw new Error("Android rollout fraction can only be used with --release-status inProgress or halted.")}async function dd(e,t,n,i){let r=n.buildId?"id":n.latest?"latest":null;if(!r){let s=await Di({message:"Select artifact source:",options:[{value:"latest",label:`Latest Production Build (${m.name})`},{value:"id",label:`Input Build ID (${m.name})`},{value:"url",label:"Remote URL"},{value:"local",label:"Local File Path"}]});if(ct(s))return Ci("Operation cancelled"),null;r=s}if(r==="local"){let s=await Yt({message:"Enter path to artifact (.ipa/.aab):",validate:l=>{if(!oe.existsSync(l))return"File not found";if(t==="ios"&&!l.endsWith(".ipa"))return"Must be an .ipa file";if(t==="android"&&!l.endsWith(".aab"))return"Must be an .aab file"}});return ct(s)?null:{filePath:s,source:"local"}}let o=ut();if(r==="latest"){let s=n.profile||n.buildProfile;o.start(`Fetching latest${s?` ${s}`:""} build...`);try{let l=await k.get(`/builds/${e}`,{params:{limit:50}});if(l.data.status!=="success")throw new Error(l.data.message);let a=l.data.builds||[],d=s?.toLowerCase(),u=A=>A.platform?.toLowerCase()===t.toLowerCase()&&A.status?.toLowerCase()==="success",c=A=>d?[A.buildProfile,A.profile,A.profileName,A.buildType].filter(Boolean).some(B=>String(B).toLowerCase()===d):!0,f=a.filter(A=>u(A)&&c(A)),p=f.find(A=>A.buildType?.toLowerCase()==="store"||A.distribution?.toLowerCase()==="store")||f[0],g=a.some(A=>A.platform?.toLowerCase()===t.toLowerCase()&&A.status?.toLowerCase()==="success");if(!p)return o.stop("No suitable build found"),le(s&&g?`No successful ${t} builds found for profile "${s}".`:"No successful builds found for this platform."),null;o.stop(`Found build: ${p.buildId}`);let y=p.artifacts||[];if(y.length===0||y.every(A=>!(A.url||A.downloadUrl)))try{let A=await k.get(`/builds/${e}/${p.buildId}/artifacts`);A.data.status==="success"&&A.data.artifacts?.length>0?(y=A.data.artifacts.map(B=>({...B,url:B.url||B.downloadUrl})),console.log(ne.cyan(`  [RECOVERY] Fetched ${y.length} artifact(s) with download URLs.`))):console.log(ne.yellow("  [RECOVERY] /artifacts endpoint returned 0 artifacts."))}catch(A){console.log(ne.red(`  [RECOVERY] /artifacts fetch failed: ${A.message}`))}let D=t==="ios",b=y.find(A=>{let B=(A.type||"").toLowerCase(),q=(A.name||"").toLowerCase();if(console.log(ne.dim(`    - Checking: ${A.name} (Type: ${A.type}, HasLink: ${!!(A.url||A.downloadUrl)})`)),B)return B===(D?"ipa":"aab");let P=D?".ipa":".aab",I=(A.url||A.downloadUrl||"").toLowerCase();return q.endsWith(P)||I.includes(P)});if(!b||!(b.url||b.downloadUrl))return le("Build found but artifact URL is missing."),null;let L=b.url||b.downloadUrl;return{filePath:await vi(L,D?"ios":"android"),buildId:p.buildId,artifactName:b.name,source:"latest"}}catch(l){return o.stop("Fetch failed"),le(`API Error: ${l.message}`),null}}if(r==="id"){let s=n.buildId||await Yt({message:"Enter Build ID:",validate:a=>a.length<5?"Invalid ID":void 0});if(ct(s))return null;let l=String(s);o.start("Fetching build...");try{let a=null;try{let p=await k.get(`/builds/${e}/${l}`);p.data.status==="success"&&(a=p.data.build)}catch(p){p.response?.status!==404&&console.log(ne.dim(`  [RECOVERY] Project build lookup skipped: ${p.message}`))}if(!a){let p=await k.get(`/build/${l}`);if(p.data.status!=="success")throw new Error(p.data.message);a=p.data.build}if(!a)throw new Error(`Build ${l} was not found.`);let d=t==="ios",u=An(a.artifacts);ud(u)||(u=await Po(e,l,u));let c=vo(u,t);if(c||(u=await Po(e,l,u),c=vo(u,t)),!c)throw new Error(`No ${d?".ipa":".aab"} artifact found for build ${l}. The build exists, but its artifact list does not contain a downloadable submission artifact.`);let f=c.url||c.downloadUrl;if(!f)throw new Error(`Artifact ${c.name||"(unnamed)"} for build ${l} has no download URL. Retry after the build artifact upload is visible in the Installation Hub.`);return o.stop(`Found build: ${a.buildId||l}`),{filePath:await vi(f,d?"ios":"android"),buildId:a.buildId||l,artifactName:c.name,source:"id"}}catch(a){throw o.stop("Fetch failed"),a}}if(r==="url"){let s=await Yt({message:"Enter Artifact URL:",validate:l=>l.startsWith("http")?void 0:"Must be a valid URL"});return ct(s)?null:{filePath:await vi(s,t),source:"url"}}return null}function An(e){return(e||[]).map(t=>({...t,url:t.url||t.downloadUrl}))}function ud(e){return e.some(t=>!!(t.url||t.downloadUrl))}function vo(e,t){let n=t==="ios",i=n?"ipa":"aab",r=n?".ipa":".aab";return e.find(o=>{let s=String(o.type||"").toLowerCase(),l=String(o.name||"").toLowerCase(),a=String(o.url||o.downloadUrl||"").toLowerCase();return s?s===i:l.endsWith(r)||a.includes(r)})||null}function pd(e,t){let n=e==="ios"?".ipa":".aab";if(t.buildId)return`No downloadable ${n} artifact found for build ${t.buildId}. Check that the build finished artifact upload before submitting.`;if(t.latest){let i=t.profile||t.buildProfile;return`No latest successful ${e}${i?` ${i}`:""} build has a downloadable ${n} artifact.`}return`No downloadable ${n} artifact was selected for submission.`}async function Po(e,t,n){try{let i=await k.get(`/builds/${e}/${t}/artifacts`);if(i.data.status==="success"&&i.data.artifacts?.length>0){let r=An(i.data.artifacts);return console.log(ne.cyan(`  [RECOVERY] Fetched ${r.length} artifact(s) with download URLs.`)),r}}catch(i){console.log(ne.dim(`  [RECOVERY] Project artifact lookup skipped: ${i.message}`))}try{let i=await k.get(`/public/builds/${t}`);if(i.data.status==="success"&&i.data.artifacts?.length>0){let r=An(i.data.artifacts);return console.log(ne.cyan(`  [RECOVERY] Fetched ${r.length} public artifact(s) with download URLs.`)),r}}catch(i){console.log(ne.dim(`  [RECOVERY] Public artifact lookup skipped: ${i.message}`))}return An(n)}async function vi(e,t,n=3){let i=ut();i.start("Downloading artifact...");let r=oe.mkdtempSync(Ie.join(_t.tmpdir(),`${m.nameLower}-artifact-`)),o=`app.${t==="ios"?"ipa":"aab"}`,s=Ie.join(r,o);for(let l=1;l<=n;l++)try{l>1&&(i.message(`Downloading artifact (Retry ${l}/${n})...`),await new Promise(u=>setTimeout(u,2e3*l)));let a=oe.createWriteStream(s),d=await To({url:e,method:"GET",responseType:"stream",timeout:6e4});return await new Promise((u,c)=>{d.data.pipe(a);let f=!1;d.data.on("error",p=>{f||(f=!0,a.close(),c(p))}),a.on("finish",()=>{f||u()}),a.on("error",p=>{f||(f=!0,c(p))})}),i.stop("Download complete"),s}catch(a){if(l===n)throw i.stop("Download failed"),a}throw new Error("Download failed after retries")}async function fd(e,t,n,i,r){let o=ut();if(r&&me(`Bundle ID: ${ne.green(r)}`),!n||!i)throw le(`Missing credentials: issuerId=${n}, keyId=${i}. Check your Dashboard.`),new Error("Missing ASC API Key Metadata (IssuerID or KeyID)");let s=xo(t,n,i),l=Ad();return o.start("Uploading to TestFlight (pilot)..."),new Promise((a,d)=>{let u=wd(),c=Mc(l.command,["pilot","upload","--ipa",e,"--api_key_path",s,"--skip_submission","true","--skip_waiting_for_build_processing","true"],{stdio:["ignore","pipe","pipe"],env:l.env});c.stdout?.on("data",f=>u.append(f,process.stdout)),c.stderr?.on("data",f=>u.append(f,process.stderr)),c.on("close",f=>{if(u.flush(),f!==0){o.stop("Pilot failed");try{oe.unlinkSync(s)}catch{}d(_d(f,u.lines()))}else{o.stop("IPA uploaded to TestFlight");try{oe.unlinkSync(s)}catch{}a({})}}),c.on("error",f=>{u.flush();try{oe.unlinkSync(s)}catch{}o.stop("Pilot execution error");let p=Nd(f);p.logs=u.lines(),d(p)})})}async function md(e,t,n,i,r,o){let s=ut();if(r&&me(`Bundle ID: ${ne.green(r)}`),!n||!i)throw le(`Missing credentials: issuerId=${n}, keyId=${i}. Check your Dashboard.`),new Error("Missing ASC API Key Metadata (IssuerID or KeyID)");let l=xo(t,n,i),a=`${o.sshUser}@${o.sshHost}`,d=gd(o),u=hd(o),c="",f="";try{if(s.start(`Preparing remote iOS submit runner (${a})...`),c=Sd("ssh",[...d,"mktemp -d /tmp/mach-submit.XXXXXX"]).trim(),!c)throw new Error("Remote runner did not return a temp directory.");s.stop(`Remote runner ready: ${a}`),s.start("Uploading IPA and App Store Connect key to remote runner..."),Pi("scp",[...u,e,`${a}:${c}/app.ipa`],"IPA upload to remote runner"),Pi("scp",[...u,l,`${a}:${c}/api_key.json`],"ASC key upload to remote runner"),f=Ie.join(_t.tmpdir(),`${m.nameLower}-ios-submit-${Date.now()}.sh`),oe.writeFileSync(f,yd(c)),Pi("scp",[...u,f,`${a}:${c}/submit.sh`],"submit script upload to remote runner"),s.stop("Remote submit inputs uploaded"),s.start("Uploading to TestFlight on remote runner...");let p=`chmod +x ${Jt(`${c}/submit.sh`)} && bash ${Jt(`${c}/submit.sh`)}`,g=It("ssh",[...d,p],{stdio:"inherit"});if(g.error)throw Li("ssh",g.error);if(g.status!==0)throw new Error(`Remote iOS submit failed with exit code ${g.status}.`);return s.stop("IPA uploaded to TestFlight"),{apiKeyJsonPath:null}}catch(p){throw s.stop("Remote iOS submit failed"),p}finally{try{oe.unlinkSync(l)}catch{}if(f)try{oe.unlinkSync(f)}catch{}if(c)try{It("ssh",[...d,`rm -rf ${Jt(c)}`],{stdio:"ignore"})}catch{}}}function xo(e,t,n){let i=oe.readFileSync(e,"utf8"),r;try{r=ki.createPrivateKey(i).export({type:"pkcs8",format:"pem"})}catch{me("Key normalization failed, falling back to manual re-wrapping..."),r=`-----BEGIN PRIVATE KEY-----
+`)}}function Nc(e){if(!e.endsWith(".apk"))return F.error(K.red("Local Android Maestro runs need an APK artifact.")),!1;F.info(K.dim("Installing APK on local Android device/emulator..."));let t=Ge("adb",["install","-r",e],{stdio:"inherit",env:process.env});return t.error?(F.error(K.red(`adb failed to start: ${t.error.message}`)),!1):t.status!==0?(F.error(K.red(`adb install failed with exit code ${t.status??1}`)),!1):!0}function Tc(e,t){if(e.endsWith(".ipa"))return F.error(K.red("Local iOS Maestro runs need an iOS Simulator .app.zip artifact, not an App Store .ipa.")),!1;let n=e;if(e.endsWith(".zip")){let r=Y.join(t,"ios-app");x.mkdirSync(r,{recursive:!0}),new En(e).extractAllTo(r,!0);let o=_i(r);if(!o)return F.error(K.red("Could not find a .app bundle inside the downloaded zip.")),!1;n=o}if(!n.endsWith(".app"))return F.error(K.red("Local iOS Maestro runs need an iOS Simulator .app bundle or .app.zip artifact.")),!1;F.info(K.dim("Installing app on booted iOS Simulator..."));let i=Ge("xcrun",["simctl","install","booted",n],{stdio:"inherit",env:process.env});return i.error?(F.error(K.red(`xcrun failed to start: ${i.error.message}`)),!1):i.status!==0?(F.error(K.red(`iOS Simulator install failed with exit code ${i.status??1}`)),!1):!0}function _i(e){let t=x.readdirSync(e,{withFileTypes:!0});for(let n of t){let i=Y.join(e,n.name);if(n.isDirectory()&&n.name.endsWith(".app"))return i;if(n.isDirectory()){let r=_i(i);if(r)return r}}return null}function kc(e,t){let n=String(t||"").toLowerCase();return n==="android"?e.find(i=>Nt(i,".apk")):n==="ios"?e.find(i=>Nt(i,".app.zip"))||e.find(i=>Nt(i,".zip")):e.find(i=>Nt(i,".apk"))||e.find(i=>Nt(i,".app.zip"))||e.find(i=>Nt(i,".zip"))}function Nt(e,t){return String(e?.name||e?.downloadUrl||e?.url||"").toLowerCase().endsWith(t)}function Ri(e){let t=String(e||"").toLowerCase();if(t.includes(".apk"))return"android";if(t.includes(".app.zip")||t.endsWith(".app")||t.includes(".ipa"))return"ios"}function _o(e){if(e)try{return Y.basename(new URL(e).pathname)||void 0}catch{return Y.basename(e)||void 0}}function Lc(e){return e?e.match(/[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/i)?.[0]:void 0}function Ro(e,t){if(!e.jsonOutput)return;let n=Y.resolve(e.jsonOutput),i={...t,updatedAt:new Date().toISOString()};try{let r=Y.dirname(n);r&&r!=="."&&x.mkdirSync(r,{recursive:!0}),x.writeFileSync(n,JSON.stringify(i,null,2))}catch(r){F.warn(K.yellow(`Could not write Maestro metadata JSON: ${r.message}`))}}function xc(e,t){if(!e.jsonOutput)return;let n=Y.resolve(e.jsonOutput),i={mode:"local",...t,updatedAt:new Date().toISOString()};try{let r=Y.dirname(n);r&&r!=="."&&x.mkdirSync(r,{recursive:!0}),x.writeFileSync(n,JSON.stringify(i,null,2))}catch(r){F.warn(K.yellow(`Could not write Maestro metadata JSON: ${r.message}`))}}import{spinner as ut,text as Yt,select as Di,isCancel as ct,cancel as Ci,log as No}from"@clack/prompts";import ne from"chalk";import oe from"fs";import Ie from"path";import{spawn as Mc,spawnSync as It}from"child_process";import To from"axios";import _t from"os";import ki from"crypto";var Uc=5e3,Fc=12,ko=100,$i=24,$o=8e3,Bc={completed:"completed",draft:"draft",halted:"halted",inprogress:"inProgress","in-progress":"inProgress"},Hc=e=>e?.type==="google_service_account",In=e=>e?.bundleId||e?.packageName||e?.meta?.packageName||e?.meta?.bundleId,Lo=e=>e.submitArgs||process.argv.slice(3).join(" ");async function wn(e){let t=ut(),n=Pe(),i=jc(e);if(!i){process.exitCode=1;return}let r=e.projectId||i.projectId,o=e.profile||e.buildProfile||"production";if(!r){ce(`${m.configFileName} is missing projectId. Pass --project-id in runner mode.`),process.exitCode=1;return}i.projectId=r,me(ne.dim(`Submit for project: ${i.name||r} | Profile: ${o}`));let s=e.platform;if(!s){let h=await Di({message:"Select platform to submit:",options:[{value:"ios",label:"iOS (App Store Connect / TestFlight)"},{value:"android",label:"Android (Google Play Console)"}]});if(ct(h)){Ci("Operation cancelled");return}s=h}if(s=String(s).toLowerCase(),s!=="ios"&&s!=="android"){ce(`Platform ${s} is not supported. Use 'ios' or 'android'.`),process.exitCode=1;return}let l=s==="ios"&&!e.local&&e.sshHost?rd(i,o,e):null;if(s==="ios"&&!e.local&&!l){await Gc(i,o,e);return}let a=e.submitId,d=!!(e.local&&a),u=a||null,c=async(h,M={})=>{u&&await Wc(r,u,{status:h,...M})},f=s==="android"?e.packageName||e.androidPackage||td(i,o):void 0,p=s==="ios"?e.bundleId||e.iosBundleIdentifier||id(i,o):void 0,g,y,_,D=!1;try{s==="android"&&(g=e.track||i.submit?.[o]?.android?.track||i.submit?.production?.android?.track||"internal",y=od(i,o,e.releaseStatus),_=ad(i,o,e.rollout),D=ld(i,o,e.changesNotSentForReview),cd(y,_))}catch(h){ce(h.message),process.exitCode=1;return}if(s==="android"&&!d&&(u=await Kc(i,r,s,o,e,{packageName:f,track:g,releaseStatus:y,rollout:_,changesNotSentForReview:D}),!u)){ce("Could not create submission tracking record. Submission was not started."),process.exitCode=1;return}await c("running",{platform:s,profile:o,packageName:f,track:g,releaseStatus:y,rollout:_,startTime:Date.now(),...d?Jc():{}});let b=null,L=null;try{L=await dd(r,s,e,n?.token),b=L?.filePath||null}catch(h){await c("failed",{error:`Failed to resolve submission artifact: ${h.message}`,endTime:Date.now()}),ce(`Failed to resolve submission artifact: ${h.message}`),process.exitCode=1;return}if(!b){let h=pd(s,e);await c("failed",{error:h,endTime:Date.now()}),ce(h),process.exitCode=1;return}await c("running",{buildId:L?.buildId,artifactName:L?.artifactName,artifactSource:L?.source}),me(`Using artifact: ${ne.green(Ie.basename(b))} `),t.start("Fetching submission credentials from Dashboard...");let A;try{let M=(await k.get(`/credentials/${r}`)).data.credentials||[];if(s==="android"&&!f){t.stop("Package name missing"),ce("Could not resolve Android package name. Set android.package in mach.config.json/app.json."),await c("failed",{error:"Could not resolve Android package name.",endTime:Date.now()}),process.exitCode=1;return}let U=M.filter(Hc),j=s==="ios"?M.filter(X=>X.type==="asc_api_key"):nd(U,f);if(j.length===0){if(t.stop("Credentials missing"),ce(s==="android"?`No Google Play service credential found for package ${f}.`:`No Service Credentials found for ${s}.`),s==="android"){let X=U.map(In).filter(Boolean).join(", ");X&&me(`Found Google Play service credential(s) for: ${X}`),me(`Use '${m.nameLower} credentials:service --platform android --package-name ${f}' or upload it under that package in the Dashboard.`)}else me(`Use '${m.nameLower} credentials:service --platform ${s}' or use the Dashboard to upload them.`);await c("failed",{error:`No submission credentials found for ${s}.`,endTime:Date.now()}),process.exitCode=1;return}if(A=qc(j,e.credentialId),!A&&s==="ios"&&p&&(A=Zc(j,p)),A||j.length===1)A=A||j[0],t.stop(`Using: ${A.name}`),s==="android"&&In(A)==="*"&&me(ne.yellow(`Using legacy wildcard Google Play credential for ${f}. Upload a package-scoped credential when possible.`));else{if(t.stop("Multiple credentials found"),Qc()){let H=j.map(C=>`${C.name||"credential"} (${C.credentialId||C.id||"no-id"})`).join(", ");ce(`Multiple ${s==="ios"?"App Store Connect":"Google Play"} credentials found. Use --credential-id in CI. Available: ${H}`),await c("failed",{error:"Multiple submission credentials found; --credential-id is required in CI.",endTime:Date.now()}),process.exitCode=1;return}let X=await Di({message:`Choose a ${s==="ios"?"App Store Connect":"Google Play"} credential:`,options:j.map(H=>({value:H.credentialId,label:H.name,hint:`${H.keyId?`ID: ${H.keyId}`:""} ${H.issuerId?`(Issuer: ${H.issuerId.substring(0,8)}...)`:""}`}))});if(ct(X)){Ci("Submission cancelled"),await c("failed",{error:"Submission cancelled while selecting credential.",endTime:Date.now()}),process.exitCode=1;return}A=j.find(H=>H.credentialId===X),me(`Using selected: ${ne.green(A.name)}`)}}catch(h){t.stop("Failed to fetch credentials"),ce(`API Error: ${h.message} `),await c("failed",{error:`Failed to fetch credentials: ${h.message}`,endTime:Date.now()}),process.exitCode=1;return}let B=oe.mkdtempSync(Ie.join(_t.tmpdir(),`${m.nameLower}-submit-`)),q=A.keyId||A.meta?.keyId,P=A.issuerId||A.meta?.issuerId,I=A.type==="asc_api_key"?`AuthKey_${q}.p8`:"service-account.json",T=Ie.join(B,I);t.start("Downloading secure key...");try{let h=await k.get(`/credentials/${A.credentialId}/download`,{params:{projectId:r,format:"raw"}});if(h.data.status!=="success"||!h.data.downloadUrl)throw new Error("Failed to get secure download URL");let M=await To.get(h.data.downloadUrl,{responseType:"arraybuffer"});oe.writeFileSync(T,Buffer.from(M.data)),t.stop("Key downloaded to secure temp storage")}catch(h){t.stop("Download failed"),ce(`Failed to download key: ${h.message}`);try{oe.rmSync(B,{recursive:!0,force:!0})}catch{}await c("failed",{error:`Failed to download credential key: ${h.message}`,endTime:Date.now()}),process.exitCode=1;return}me(ne.blue(`Initiating ${s==="ios"?"TestFlight":"Google Play"} submission...`));let w=!1,N;try{if(s==="ios"){if(!q){let M=await Yt({message:"Enter App Store Connect Key ID (e.g. 2X948D...):",validate:U=>U.length>0?void 0:"Key ID is required"});if(ct(M)){await c("failed",{error:"Submission cancelled while entering ASC Key ID.",endTime:Date.now()}),process.exitCode=1;return}q=M}if(!P||P==="undefined"){let M=await Yt({message:"Enter App Store Connect Issuer ID (Found on ASC Keys page):",validate:U=>U.length>0?void 0:"Issuer ID is required"});if(ct(M)){await c("failed",{error:"Submission cancelled while entering ASC Issuer ID.",endTime:Date.now()}),process.exitCode=1;return}P=M}me(`Using ASC Key ID: ${q}`),me(`Using ASC Issuer ID: ${P}`);let h=l?await md(b,T,P,q,p,l):await fd(b,T,P,q,p);Ti(`${s==="ios"?"App Store":"Google Play"} submission successful!`),w=!0}else N=await bd(b,T,g||"internal",f,y||"completed",_,D,o),Ti("Google Play submission successful!"),w=!0}catch(h){ce(`Submission failed: ${h.message}`),await c("failed",{error:h.message,endTime:Date.now()}),dt(e,{status:"failed",projectId:r,submitId:u,platform:s,profile:o,buildId:L?.buildId||e.buildId,artifactName:L?.artifactName,error:h.message,dashboardUrl:u?wt(u,r):void 0}),process.exitCode=1}finally{w&&(await c("success",{endTime:Date.now(),versionCode:N?.versionCode,track:g,releaseStatus:y}),dt(e,{status:"success",projectId:r,submitId:u,platform:s,profile:o,buildId:L?.buildId||e.buildId,artifactName:L?.artifactName,versionCode:N?.versionCode,track:g,releaseStatus:y,dashboardUrl:u?wt(u,r):void 0})),kd(B),b&&b.includes(`${m.nameLower}-artifact-`)}}function jc(e){let t=`./${m.configFileName}`;if(oe.existsSync(t))try{return JSON.parse(oe.readFileSync(t,"utf-8"))}catch(n){return ce(`Failed to read ${m.configFileName}: ${n.message}`),null}return e.projectId?{projectId:e.projectId}:(ce(`No ${m.configFileName} found. Run \`${m.nameLower} init\` or \`${m.nameLower} link\` first.`),null)}async function Gc(e,t,n){let i=n.projectId||e.projectId;if(!i){ce(`${m.configFileName} is missing projectId.`),process.exitCode=1;return}let r=n.submitId||ki.randomUUID(),o=!!n.latest||!n.buildId,s=Vc({...n,latest:o,profile:t,projectId:i,submitId:r}),l={projectId:i,submitId:r,platform:"ios",profile:t,latest:o,buildId:n.buildId,credentialId:n.credentialId,status:"pending",source:"cli",submitArgs:Lo(n),runnerArgs:s,runnerCommand:[m.nameLower,"submit",...s].map(ed).join(" "),appName:e.name,startTime:Date.now()},a=ut();a.start("Queuing iOS submit on macOS runner...");try{let d=await k.post("/submissions",l),u=d.data?.submission||d.data?.submit||{},c=d.data?.dashboardUrl||wt(r,i);a.stop("iOS submit queued"),me(`Submission ID: ${ne.cyan(r)}`),me(`Dashboard: ${ne.blue.underline(c)}`),dt(n,{status:"pending",projectId:i,submitId:r,platform:"ios",profile:t,latest:o,buildId:n.buildId,dashboardUrl:c}),await zc(i,r,n)}catch(d){a.stop("Could not queue iOS submit"),ce(Xc(d)),process.exitCode=1}}async function Kc(e,t,n,i,r,o={}){let s=r.submitId||ki.randomUUID(),l=!!r.latest||!r.buildId,a={projectId:t,submitId:s,platform:n,profile:i,latest:l,buildId:r.buildId,credentialId:r.credentialId,status:"running",source:"cli-direct",submitArgs:Lo(r),appName:e.name,startTime:Date.now(),...o};try{let d=await k.post("/submissions",a),u=d.data?.submission||d.data?.submit||{},c=d.data?.dashboardUrl||u.dashboardUrl||wt(s,t);return me(`Submission ID: ${ne.cyan(s)}`),me(`Dashboard: ${ne.blue.underline(c)}`),dt(r,{status:"running",projectId:t,submitId:s,platform:n,profile:i,latest:l,buildId:r.buildId,dashboardUrl:c}),s}catch(d){let u=d.response?.data?.message||d.response?.data?.error||d.message;return me(ne.yellow(`Could not create submission tracking record: ${u}`)),null}}function Vc(e){let t=["--local","--submit-id",e.submitId,"--project-id",e.projectId,"--platform","ios","--profile",e.profile||"production"];return e.buildId?t.push("--build-id",e.buildId):t.push("--latest"),e.credentialId&&t.push("--credential-id",e.credentialId),e.bundleId&&t.push("--bundle-id",e.bundleId),e.packageName&&t.push("--package-name",e.packageName),e.quiet&&t.push("--quiet"),e.jsonOutput&&t.push("--json-output",e.jsonOutput),t.filter(n=>n!=null&&n!=="")}async function zc(e,t,n){let i=ut(),r=0,o=0;for(n.quiet||i.start("Waiting for iOS submit runner...");;)try{let s=await k.get(`/submissions/${e}/${t}`),l=s.data?.submission||s.data?.submit||s.data,a=String(l?.status||"pending").toLowerCase();r=0;let d=Array.isArray(l?.logs)?l.logs:[];for(let u=o;u<d.length;u++){let c=d[u];c&&console.log(ne.dim(String(c)))}if(o=d.length,["success","completed","succeeded"].includes(a)){n.quiet||i.stop("iOS submit completed"),Ti("App Store submission successful!"),dt(n,{status:"success",projectId:e,submitId:t,platform:"ios",profile:l?.profile||n.profile||"production",buildId:l?.buildId||n.buildId,artifactName:l?.artifactName,dashboardUrl:l?.dashboardUrl||wt(t,e)});return}if(["failed","error","cancelled","canceled"].includes(a)){n.quiet||i.stop("iOS submit failed");let u=l?.error||l?.message||"Unknown iOS submit failure.";ce(u),dt(n,{status:"failed",projectId:e,submitId:t,platform:"ios",profile:l?.profile||n.profile||"production",buildId:l?.buildId||n.buildId,artifactName:l?.artifactName,error:u,dashboardUrl:l?.dashboardUrl||wt(t,e)}),process.exitCode=1;return}n.quiet||i.message(`iOS submit ${a}...`),await Ni(Uc)}catch(s){if(r++,r>=Fc){n.quiet||i.stop("Lost connection to iOS submit status"),ce(`Could not fetch iOS submit status after ${r} attempts: ${s.message}`),process.exitCode=1;return}await Ni(Math.min(2e3*r,15e3))}}async function Wc(e,t,n){let i;for(let r=1;r<=3;r++)try{await k.patch(`/submissions/${e}/${t}`,n);return}catch(o){if(i=o,r>=3||!Yc(o))break;await Ni(1e3*r)}No.warn(ne.dim(`Could not report submission status: ${i?.message||i}`))}function Yc(e){let t=e.response?.status;return!t||t===408||t===409||t===425||t===429||t>=500}function Jc(){let e={gitlabJobId:process.env.CI_JOB_ID,gitlabJobUrl:process.env.CI_JOB_URL,gitlabPipelineId:process.env.CI_PIPELINE_ID,gitlabProjectId:process.env.CI_PROJECT_ID,gitlabProjectPath:process.env.CI_PROJECT_PATH};return Object.fromEntries(Object.entries(e).filter(([,t])=>!!t))}function Xc(e){let t=e.response?.status,n=e.response?.data?.message||e.response?.data?.error;return t===404||t===405?["Managed iOS submit is not enabled on this Mach API yet.","Deploy the API/dashboard submission orchestration endpoint, then retry the same command.","Expected API: POST /submissions and GET/PATCH /submissions/:projectId/:submitId."].join(`
+`):n||e.message||String(e)}function wt(e,t){if(!e)return Je;let n=t?`?projectId=${encodeURIComponent(t)}`:"";return`${Je}/submissions/${e}${n}`}function dt(e,t){if(!e.jsonOutput)return;let n=Ie.resolve(e.jsonOutput),i={...t,url:t.url||t.dashboardUrl||wt(t.submitId,t.projectId),updatedAt:new Date().toISOString()};try{let r=Ie.dirname(n);r&&r!=="."&&oe.mkdirSync(r,{recursive:!0}),oe.writeFileSync(n,JSON.stringify(i,null,2))}catch(r){No.warn(ne.yellow(`Could not write submission metadata JSON: ${r.message}`))}}function qc(e,t){return t&&e.find(n=>n.credentialId===t||n.id===t||n.keyId===t||n.meta?.keyId===t)||null}function Zc(e,t){let n=e.filter(i=>[i.bundleId,i.bundleIdentifier,i.appIdentifier,i.meta?.bundleId,i.meta?.bundleIdentifier,i.meta?.appIdentifier].filter(Boolean).map(String).includes(t));return n.length===1?n[0]:null}function Qc(){return process.env.CI==="true"||process.env.CI==="1"||!process.stdin.isTTY}function Ni(e){return new Promise(t=>setTimeout(t,e))}function ed(e){return/^[a-zA-Z0-9_./:=@-]+$/.test(e)?e:`'${e.replace(/'/g,"'\\''")}'`}function td(e,t){if(e.submit?.[t]?.android?.package)return e.submit[t].android.package;let n=yr(e,t);if(n)return n;let i=Ie.join(process.cwd(),"app.json");if(oe.existsSync(i))try{return JSON.parse(oe.readFileSync(i,"utf-8")).expo?.android?.package}catch{}let r=Ie.join(process.cwd(),"app.config.json");if(oe.existsSync(r))try{let o=JSON.parse(oe.readFileSync(r,"utf-8"));return o.expo?.android?.package||o.android?.package}catch{}}function nd(e,t){let n=e.filter(o=>In(o)===t);if(n.length>0)return n;let i=e.filter(o=>{let s=In(o);return!s||s==="*"});return e.length>0&&e.length===i.length?i:[]}function id(e,t){return e.submit?.[t]?.ios?.bundleIdentifier?e.submit[t].ios.bundleIdentifier:e.submit?.[t]?.ios?.bundleId?e.submit[t].ios.bundleId:br(e,t)}function rd(e,t,n){let i=e.submit?.[t]?.ios||{},r=e.submit?.production?.ios||{},o=n.sshHost||i.sshHost||r.sshHost||process.env.MACH_IOS_SUBMIT_SSH_HOST;return o?{sshHost:o,sshUser:n.sshUser||i.sshUser||r.sshUser||process.env.MACH_IOS_SUBMIT_SSH_USER||process.env.USER||"ubuntu",sshKey:n.sshKey||i.sshKey||r.sshKey||process.env.MACH_IOS_SUBMIT_SSH_KEY}:null}function od(e,t,n){let i=n||e.submit?.[t]?.android?.releaseStatus||e.submit?.production?.android?.releaseStatus||"completed";return sd(i)}function sd(e){let t=Bc[String(e).trim().toLowerCase()];if(!t)throw new Error(`Invalid Android release status "${e}". Use completed, draft, halted, or inProgress.`);return t}function ad(e,t,n){let i=n??e.submit?.[t]?.android?.rollout??e.submit?.[t]?.android?.userFraction??e.submit?.[t]?.android?.rolloutFraction??e.submit?.production?.android?.rollout??e.submit?.production?.android?.userFraction??e.submit?.production?.android?.rolloutFraction;if(i==null||i==="")return;let r=Number(i);if(!Number.isFinite(r)||r<=0||r>=1)throw new Error(`Invalid Android rollout fraction "${i}". Use a number greater than 0 and less than 1, for example 0.1.`);return r}function ld(e,t,n){let i=n??e.submit?.[t]?.android?.changesNotSentForReview??e.submit?.[t]?.android?.changes_not_sent_for_review??e.submit?.production?.android?.changesNotSentForReview??e.submit?.production?.android?.changes_not_sent_for_review??!1;return i===!0||i==="true"||i==="1"}function cd(e,t){if(e==="inProgress"&&t===void 0)throw new Error("Google Play staged rollout requires --rollout <fraction> when --release-status inProgress is used.");if(e!=="inProgress"&&e!=="halted"&&t!==void 0)throw new Error("Android rollout fraction can only be used with --release-status inProgress or halted.")}async function dd(e,t,n,i){let r=n.buildId?"id":n.latest?"latest":null;if(!r){let s=await Di({message:"Select artifact source:",options:[{value:"latest",label:`Latest Production Build (${m.name})`},{value:"id",label:`Input Build ID (${m.name})`},{value:"url",label:"Remote URL"},{value:"local",label:"Local File Path"}]});if(ct(s))return Ci("Operation cancelled"),null;r=s}if(r==="local"){let s=await Yt({message:"Enter path to artifact (.ipa/.aab):",validate:l=>{if(!oe.existsSync(l))return"File not found";if(t==="ios"&&!l.endsWith(".ipa"))return"Must be an .ipa file";if(t==="android"&&!l.endsWith(".aab"))return"Must be an .aab file"}});return ct(s)?null:{filePath:s,source:"local"}}let o=ut();if(r==="latest"){let s=n.profile||n.buildProfile;o.start(`Fetching latest${s?` ${s}`:""} build...`);try{let l=await k.get(`/builds/${e}`,{params:{limit:50}});if(l.data.status!=="success")throw new Error(l.data.message);let a=l.data.builds||[],d=s?.toLowerCase(),u=A=>A.platform?.toLowerCase()===t.toLowerCase()&&A.status?.toLowerCase()==="success",c=A=>d?[A.buildProfile,A.profile,A.profileName,A.buildType].filter(Boolean).some(B=>String(B).toLowerCase()===d):!0,f=a.filter(A=>u(A)&&c(A)),p=f.find(A=>A.buildType?.toLowerCase()==="store"||A.distribution?.toLowerCase()==="store")||f[0],g=a.some(A=>A.platform?.toLowerCase()===t.toLowerCase()&&A.status?.toLowerCase()==="success");if(!p)return o.stop("No suitable build found"),ce(s&&g?`No successful ${t} builds found for profile "${s}".`:"No successful builds found for this platform."),null;o.stop(`Found build: ${p.buildId}`);let y=p.artifacts||[];if(y.length===0||y.every(A=>!(A.url||A.downloadUrl)))try{let A=await k.get(`/builds/${e}/${p.buildId}/artifacts`);A.data.status==="success"&&A.data.artifacts?.length>0?(y=A.data.artifacts.map(B=>({...B,url:B.url||B.downloadUrl})),console.log(ne.cyan(`  [RECOVERY] Fetched ${y.length} artifact(s) with download URLs.`))):console.log(ne.yellow("  [RECOVERY] /artifacts endpoint returned 0 artifacts."))}catch(A){console.log(ne.red(`  [RECOVERY] /artifacts fetch failed: ${A.message}`))}let D=t==="ios",b=y.find(A=>{let B=(A.type||"").toLowerCase(),q=(A.name||"").toLowerCase();if(console.log(ne.dim(`    - Checking: ${A.name} (Type: ${A.type}, HasLink: ${!!(A.url||A.downloadUrl)})`)),B)return B===(D?"ipa":"aab");let P=D?".ipa":".aab",I=(A.url||A.downloadUrl||"").toLowerCase();return q.endsWith(P)||I.includes(P)});if(!b||!(b.url||b.downloadUrl))return ce("Build found but artifact URL is missing."),null;let L=b.url||b.downloadUrl;return{filePath:await vi(L,D?"ios":"android"),buildId:p.buildId,artifactName:b.name,source:"latest"}}catch(l){return o.stop("Fetch failed"),ce(`API Error: ${l.message}`),null}}if(r==="id"){let s=n.buildId||await Yt({message:"Enter Build ID:",validate:a=>a.length<5?"Invalid ID":void 0});if(ct(s))return null;let l=String(s);o.start("Fetching build...");try{let a=null;try{let p=await k.get(`/builds/${e}/${l}`);p.data.status==="success"&&(a=p.data.build)}catch(p){p.response?.status!==404&&console.log(ne.dim(`  [RECOVERY] Project build lookup skipped: ${p.message}`))}if(!a){let p=await k.get(`/build/${l}`);if(p.data.status!=="success")throw new Error(p.data.message);a=p.data.build}if(!a)throw new Error(`Build ${l} was not found.`);let d=t==="ios",u=An(a.artifacts);ud(u)||(u=await Po(e,l,u));let c=vo(u,t);if(c||(u=await Po(e,l,u),c=vo(u,t)),!c)throw new Error(`No ${d?".ipa":".aab"} artifact found for build ${l}. The build exists, but its artifact list does not contain a downloadable submission artifact.`);let f=c.url||c.downloadUrl;if(!f)throw new Error(`Artifact ${c.name||"(unnamed)"} for build ${l} has no download URL. Retry after the build artifact upload is visible in the Installation Hub.`);return o.stop(`Found build: ${a.buildId||l}`),{filePath:await vi(f,d?"ios":"android"),buildId:a.buildId||l,artifactName:c.name,source:"id"}}catch(a){throw o.stop("Fetch failed"),a}}if(r==="url"){let s=await Yt({message:"Enter Artifact URL:",validate:l=>l.startsWith("http")?void 0:"Must be a valid URL"});return ct(s)?null:{filePath:await vi(s,t),source:"url"}}return null}function An(e){return(e||[]).map(t=>({...t,url:t.url||t.downloadUrl}))}function ud(e){return e.some(t=>!!(t.url||t.downloadUrl))}function vo(e,t){let n=t==="ios",i=n?"ipa":"aab",r=n?".ipa":".aab";return e.find(o=>{let s=String(o.type||"").toLowerCase(),l=String(o.name||"").toLowerCase(),a=String(o.url||o.downloadUrl||"").toLowerCase();return s?s===i:l.endsWith(r)||a.includes(r)})||null}function pd(e,t){let n=e==="ios"?".ipa":".aab";if(t.buildId)return`No downloadable ${n} artifact found for build ${t.buildId}. Check that the build finished artifact upload before submitting.`;if(t.latest){let i=t.profile||t.buildProfile;return`No latest successful ${e}${i?` ${i}`:""} build has a downloadable ${n} artifact.`}return`No downloadable ${n} artifact was selected for submission.`}async function Po(e,t,n){try{let i=await k.get(`/builds/${e}/${t}/artifacts`);if(i.data.status==="success"&&i.data.artifacts?.length>0){let r=An(i.data.artifacts);return console.log(ne.cyan(`  [RECOVERY] Fetched ${r.length} artifact(s) with download URLs.`)),r}}catch(i){console.log(ne.dim(`  [RECOVERY] Project artifact lookup skipped: ${i.message}`))}try{let i=await k.get(`/public/builds/${t}`);if(i.data.status==="success"&&i.data.artifacts?.length>0){let r=An(i.data.artifacts);return console.log(ne.cyan(`  [RECOVERY] Fetched ${r.length} public artifact(s) with download URLs.`)),r}}catch(i){console.log(ne.dim(`  [RECOVERY] Public artifact lookup skipped: ${i.message}`))}return An(n)}async function vi(e,t,n=3){let i=ut();i.start("Downloading artifact...");let r=oe.mkdtempSync(Ie.join(_t.tmpdir(),`${m.nameLower}-artifact-`)),o=`app.${t==="ios"?"ipa":"aab"}`,s=Ie.join(r,o);for(let l=1;l<=n;l++)try{l>1&&(i.message(`Downloading artifact (Retry ${l}/${n})...`),await new Promise(u=>setTimeout(u,2e3*l)));let a=oe.createWriteStream(s),d=await To({url:e,method:"GET",responseType:"stream",timeout:6e4});return await new Promise((u,c)=>{d.data.pipe(a);let f=!1;d.data.on("error",p=>{f||(f=!0,a.close(),c(p))}),a.on("finish",()=>{f||u()}),a.on("error",p=>{f||(f=!0,c(p))})}),i.stop("Download complete"),s}catch(a){if(l===n)throw i.stop("Download failed"),a}throw new Error("Download failed after retries")}async function fd(e,t,n,i,r){let o=ut();if(r&&me(`Bundle ID: ${ne.green(r)}`),!n||!i)throw ce(`Missing credentials: issuerId=${n}, keyId=${i}. Check your Dashboard.`),new Error("Missing ASC API Key Metadata (IssuerID or KeyID)");let s=xo(t,n,i),l=Ad();return o.start("Uploading to TestFlight (pilot)..."),new Promise((a,d)=>{let u=wd(),c=Mc(l.command,["pilot","upload","--ipa",e,"--api_key_path",s,"--skip_submission","true","--skip_waiting_for_build_processing","true"],{stdio:["ignore","pipe","pipe"],env:l.env});c.stdout?.on("data",f=>u.append(f,process.stdout)),c.stderr?.on("data",f=>u.append(f,process.stderr)),c.on("close",f=>{if(u.flush(),f!==0){o.stop("Pilot failed");try{oe.unlinkSync(s)}catch{}d(_d(f,u.lines()))}else{o.stop("IPA uploaded to TestFlight");try{oe.unlinkSync(s)}catch{}a({})}}),c.on("error",f=>{u.flush();try{oe.unlinkSync(s)}catch{}o.stop("Pilot execution error");let p=Nd(f);p.logs=u.lines(),d(p)})})}async function md(e,t,n,i,r,o){let s=ut();if(r&&me(`Bundle ID: ${ne.green(r)}`),!n||!i)throw ce(`Missing credentials: issuerId=${n}, keyId=${i}. Check your Dashboard.`),new Error("Missing ASC API Key Metadata (IssuerID or KeyID)");let l=xo(t,n,i),a=`${o.sshUser}@${o.sshHost}`,d=gd(o),u=hd(o),c="",f="";try{if(s.start(`Preparing remote iOS submit runner (${a})...`),c=Sd("ssh",[...d,"mktemp -d /tmp/mach-submit.XXXXXX"]).trim(),!c)throw new Error("Remote runner did not return a temp directory.");s.stop(`Remote runner ready: ${a}`),s.start("Uploading IPA and App Store Connect key to remote runner..."),Pi("scp",[...u,e,`${a}:${c}/app.ipa`],"IPA upload to remote runner"),Pi("scp",[...u,l,`${a}:${c}/api_key.json`],"ASC key upload to remote runner"),f=Ie.join(_t.tmpdir(),`${m.nameLower}-ios-submit-${Date.now()}.sh`),oe.writeFileSync(f,yd(c)),Pi("scp",[...u,f,`${a}:${c}/submit.sh`],"submit script upload to remote runner"),s.stop("Remote submit inputs uploaded"),s.start("Uploading to TestFlight on remote runner...");let p=`chmod +x ${Jt(`${c}/submit.sh`)} && bash ${Jt(`${c}/submit.sh`)}`,g=It("ssh",[...d,p],{stdio:"inherit"});if(g.error)throw Li("ssh",g.error);if(g.status!==0)throw new Error(`Remote iOS submit failed with exit code ${g.status}.`);return s.stop("IPA uploaded to TestFlight"),{apiKeyJsonPath:null}}catch(p){throw s.stop("Remote iOS submit failed"),p}finally{try{oe.unlinkSync(l)}catch{}if(f)try{oe.unlinkSync(f)}catch{}if(c)try{It("ssh",[...d,`rm -rf ${Jt(c)}`],{stdio:"ignore"})}catch{}}}function xo(e,t,n){let i=oe.readFileSync(e,"utf8"),r;try{r=ki.createPrivateKey(i).export({type:"pkcs8",format:"pem"})}catch{me("Key normalization failed, falling back to manual re-wrapping..."),r=`-----BEGIN PRIVATE KEY-----
 ${(i.replace(/-----BEGIN[^-]*-----/g,"").replace(/-----END[^-]*-----/g,"").replace(/\s+/g,"").match(/.{1,64}/g)||[]).join(`
 `)}
 -----END PRIVATE KEY-----`}let o=Ie.join(_t.tmpdir(),`api_key_${n}_${Date.now()}.json`),s={key_id:n,issuer_id:t,key:r,in_house:!1};return oe.writeFileSync(o,JSON.stringify(s,null,2)),o}function gd(e){let t=["-o","StrictHostKeyChecking=no","-o","ServerAliveInterval=30"];return e.sshKey&&t.push("-i",e.sshKey),t.push(`${e.sshUser}@${e.sshHost}`),t}function hd(e){let t=["-o","StrictHostKeyChecking=no","-o","ServerAliveInterval=30"];return e.sshKey&&t.push("-i",e.sshKey),t}function Sd(e,t){let n=It(e,t,{encoding:"utf-8",stdio:["ignore","pipe","inherit"]});if(n.error)throw Li(e,n.error);if(n.status!==0)throw new Error(`${e} failed with exit code ${n.status}.`);return n.stdout||""}function Pi(e,t,n){let i=It(e,t,{stdio:"inherit"});if(i.error)throw Li(e,i.error);if(i.status!==0)throw new Error(`${n} failed with exit code ${i.status}.`)}function Li(e,t){return t?.code==="ENOENT"?new Error(`${e} was not found on this machine. Install OpenSSH client tools or run iOS submit directly on the macOS runner.`):t}function Jt(e){return`'${e.replace(/'/g,"'\\''")}'`}function yd(e){let t=Jt(`${e}/app.ipa`),n=Jt(`${e}/api_key.json`);return`#!/bin/bash
@@ -1469,19 +1469,19 @@ ${i.join(`
 `);if(/only releases with status draft|draft app/i.test(r))return["Google Play requires a draft release for this app state.",`Package: ${n||"unknown"} | Track: ${t}`,`Retry with: ${m.nameLower} submit --latest --platform android --profile ${i} --track ${t} --release-status draft`].join(`
 `);if(r.includes("does not allow any existing users to upgrade"))return["Google Play rejected this release because the uploaded AAB is not an upgrade for existing users.",`Package: ${n||"unknown"} | Track: ${t}`,"Build a new Android artifact with a higher versionCode, then submit that build.",`Recommended: ${m.nameLower} build --platform android --profile ${i} --auto-version`,`Then: ${m.nameLower} submit --latest --platform android --profile ${i} --track ${t}`].join(`
 `);if(/version code \d+ has already been used/i.test(r))return[r.match(/version code \d+ has already been used[^\n]*/i)?.[0]||"Version code has already been used.",`Package: ${n||"unknown"} | Track: ${t}`,"Build a new Android artifact with a higher versionCode, then submit that build.",`Recommended: ${m.nameLower} build --platform android --profile ${i} --auto-version`].join(`
-`);let o=r.match(/Google Api Error:[^\n]+/)||r.match(/Google Play API Error:[^\n]+/);return o?o[0]:r||"Google Play submission failed"}function kd(e){try{oe.existsSync(e)&&oe.rmSync(e,{recursive:!0,force:!0})}catch{}}function le(e){console.log(ne.red(`\u274C ${e}`))}function me(e){console.log(ne.gray(`\u2022 ${e}`))}function Ti(e){console.log(ne.green(`\u2713 ${e}`))}var xi=8,Md=6,Ko=Number(process.env.MACH_ARTIFACT_UPLOAD_MAX_ATTEMPTS||2),Mi=Number(process.env.MACH_ARTIFACT_UPLOAD_TIMEOUT_MS||12e4),Ui="ap-south-1",Ud=`${m.envPrefix}S3_DEBUG`,Fd=()=>["1","true","yes","on"].includes(String(process.env[Ud]||"").trim().toLowerCase()),Hi=(e,t)=>{if(Fd()&&t)try{let n=new URL(t);$.info(v.dim(`[S3_DEBUG] ${e} host=${n.hostname} expectedRegion=${Ui}`)),n.hostname.includes(Ui)||$.warn(v.yellow(`[S3_DEBUG] ${e} host ${n.hostname} does not include ${Ui}`))}catch(n){$.warn(v.yellow(`[S3_DEBUG] Could not parse ${e} presigned URL host: ${n.message}`))}},Vo=new Set([".git",".gradle",".idea",".mach-cache",".expo",".turbo",".yarn/cache","build","builds","coverage","dist","node_modules",`${m.nameLower}_cli`,`.${m.nameLower}_cli`]),Bd=new Set(["android/.gradle","android/.cxx","android/app/.cxx","android/app/build","android/build","ios/Pods","ios/build","ios/DerivedData"]),Hd=[{value:"production",label:"production",hint:"Store / release build"},{value:"staging",label:"staging",hint:"Internal testing build"},{value:"development",label:"development",hint:"Development build"}],rs=e=>new Promise(t=>setTimeout(t,e)),os=e=>e.split(ge.sep).filter(Boolean).join("/"),jd=(e,t)=>{let n=os(e),i=n.split("/")[0];return n?!!(Vo.has(n)||Vo.has(i)||Bd.has(n)||t==="ios"&&i==="android"||t==="android"&&i==="ios"):!1},Gd=(e,t,n)=>{let i=0,r=new Set,o=(s,l)=>{let a=os(l);if(jd(a,n)){r.add(a.split("/")[0]||a);return}let d=ce.lstatSync(s);if(!d.isSymbolicLink()){if(d.isDirectory()){for(let u of ce.readdirSync(s))o(ge.join(s,u),ge.join(l,u));return}if(d.isFile()){let u=ge.dirname(a);e.addLocalFile(s,u==="."?void 0:u,ge.basename(a)),i++}}};for(let s of ce.readdirSync(t))o(ge.join(t,s),s);return{files:i,skipped:Array.from(r).sort()}},Kd=e=>!e.yes&&!e.failOnly&&!e.buildId&&process.stdin.isTTY&&process.stdout.isTTY,Vd=e=>{if(!e||typeof e!="object")return;let t=[e.distribution?`distribution: ${e.distribution}`:void 0,e.environment?`env: ${e.environment}`:void 0,e.developmentClient?"development client":void 0,e.simulator?"simulator":void 0].filter(Boolean);return t.length>0?t.join(", "):void 0},zd=()=>{let e=$e(`./${m.configFileName}`),t=e?.build&&typeof e.build=="object"?e.build:{},n=Object.keys(t);return n.length===0?Hd:n.map(i=>({value:i,label:i,hint:Vd(t[i])}))},Wd=async e=>{let t=Kd(e);if(!e.platform&&t){let n=await Fo({message:"Select platform",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"}]});vn(n)&&(Ho("Build cancelled."),process.exit(0)),e.platform=n}if(!e.buildProfile&&t){let n=zd(),i=await Fo({message:"Select build profile",options:n,initialValue:n.find(r=>r.value==="production")?.value||n[0]?.value});vn(i)&&(Ho("Build cancelled."),process.exit(0)),e.buildProfile=i}e.buildProfile||(e.buildProfile="production")},zo=e=>{if(e===!0||e===!1)return e;if(e===1||e==="1")return!0;if(e===0||e==="0")return!1;if(typeof e!="string")return;let t=e.trim().toLowerCase();if(["true","yes","on"].includes(t))return!0;if(["false","no","off"].includes(t))return!1},ss=(e,t)=>{if(e)for(let n of t){let i=n.replace(/[.*+?^${}()|[\]\\]/g,"\\$&"),r=e.match(new RegExp(`(?:^|\\s)${i}(?:=|\\s+)([^\\s]+)`));if(r?.[1])return r[1].replace(/^["']|["']$/g,"")}},Yd=(e,t)=>!!e&&t.some(n=>new RegExp(`(?:^|\\s)${n.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}(?:\\s|$)`).test(e)),Jd=e=>{let n=ss(e,["--platform"])||e?.split(/\s+/).find(i=>i==="ios"||i==="android");return n==="ios"||n==="android"?n:void 0},Xd=async e=>{if(!(!e.projectId||!e.buildId))try{let t=await k.get(`/builds/${e.projectId}/${e.buildId}`),n=t.data?.build||t.data;if(!n||typeof n!="object")return;let i=typeof n.buildArgs=="string"?n.buildArgs:void 0;if(!e.platform){let r=n.platform||Jd(i);(r==="ios"||r==="android")&&(e.platform=r)}if(e.buildProfile||(e.buildProfile=n.buildProfile||n.profile||n.profileName||ss(i,["--profile","--build-profile","-p"])),e.simulator===void 0){let r=zo(n.simulator??n.isSimulator);r!==void 0?e.simulator=r:Yd(i,["--simulator"])&&(e.simulator=!0)}if(e.developmentClient===void 0){let r=zo(n.developmentClient??n.devClient);r!==void 0&&(e.developmentClient=r)}}catch(t){$.warn(v.yellow(`Could not load saved build options for runner: ${t.message}`))}},qd=e=>{if(!Number.isFinite(e)||e<=0)return"0 B";let t=["B","KB","MB","GB"],n=Math.min(Math.floor(Math.log(e)/Math.log(1024)),t.length-1);return`${(e/Math.pow(1024,n)).toFixed(n===0?0:1)} ${t[n]}`},Zd=e=>{let t=e.response?.status,n=e.code||"",i=e.message||"";return t?t===408||t===409||t===425||t===429||t>=500||/ECONNRESET|ETIMEDOUT|EAI_AGAIN|ENOTFOUND|ECONNABORTED|socket hang up|network|timeout/i.test(`${n} ${i}`):!0},_n=async(e,t,n=Md)=>{let i;for(let r=1;r<=n;r++)try{return await t()}catch(o){if(i=o,!Zd(o)||r>=n)break;let s=Math.min(6e4,2e3*Math.pow(2,r-1)),l=o.response?.status||o.code||o.message||"network error";$.warn(v.yellow(`${e} failed transiently (${l}). Retrying in ${Math.round(s/1e3)}s... (${r}/${n})`)),await rs(s)}throw i},Qd=async(e,t,n)=>{let i=ge.basename(e),r=ce.statSync(e).size,o=Math.round(Mi/1e3);Hi(`ARTIFACT_UPLOAD ${i}`,t);try{await _n(`Upload artifact ${i}`,async()=>{let s=new AbortController,l=ce.createReadStream(e),a=setTimeout(()=>{l.destroy(new Error(`Artifact upload timed out after ${o}s`)),s.abort()},Mi);try{await $n.put(t,l,{headers:{"Content-Type":n,"Content-Length":r,Connection:"close"},maxBodyLength:1/0,maxContentLength:1/0,timeout:Mi,timeoutErrorMessage:`Artifact upload timed out after ${o}s`,signal:s.signal})}finally{clearTimeout(a)}},Ko)}catch(s){throw new Error(`${i} (${qd(r)}) failed after ${Ko} upload attempt(s): ${s.message||s}`)}return r},eu=e=>{let t=e.response?.status;return t?t===408||t===429||t>=500:!0},Xt=e=>e.credentialId||e.id,tu=async(e,t)=>{let n=Xt(e);if(!n)return e.downloadUrl;let i=await k.get(`/credentials/${n}/download`,{params:{projectId:t,format:"raw"}});return i.data?.status==="success"&&i.data?.downloadUrl?i.data.downloadUrl:e.downloadUrl},as=async(e,t)=>{let n=e.downloadUrl;for(let i=1;i<=xi;i++)try{if((!n||i>1)&&(n=await tu(e,t)),!n)throw new Error(`Credential ${e.name||Xt(e)||"unknown"} has no download URL.`);let r=await $n.get(n,{responseType:"arraybuffer",timeout:6e4,maxContentLength:1/0,maxBodyLength:1/0,headers:{Connection:"close"}});return Buffer.from(r.data).toString("base64")}catch(r){if(i>=xi||!eu(r))throw r;let o=Math.min(1500*i*i,15e3);$.warn(v.dim(`  - Temporary network error downloading ${e.name}. Retrying... (${i}/${xi})`)),await rs(o)}throw new Error(`Failed to download credential ${e.name||Xt(e)||"unknown"}.`)},Wo=async(e,t)=>{let n=await as(e,t);return Buffer.from(n,"base64").toString("utf8")},nu=(e,t)=>{try{return JSON.parse(e)}catch{throw new Error(`${t} is not valid JSON.`)}},iu=e=>/ECONNRESET|ETIMEDOUT|EAI_AGAIN|ENOTFOUND|ECONNABORTED|socket hang up|network|timeout/i.test(e),ru=(e,t)=>t?.ios?.buildNumber??t?.iosBuildNumber??e?.ios?.buildNumber??e?.expo?.ios?.buildNumber,ou=(e,t,n)=>t?.ios?.ascAppId??t?.ascAppId??e?.ios?.ascAppId??e?.submit?.[n]?.ios?.ascAppId??e?.submit?.production?.ios?.ascAppId,Yo=e=>e.bundleId||e.bundleIdentifier||e.meta?.bundleId||e.meta?.bundleIdentifier,Jo=(e,t)=>{let n=e.filter(i=>i.type==="asc_api_key");if(n.length!==0){if(t){let i=n.find(o=>Yo(o)===t);if(i)return i;let r=n.find(o=>Yo(o)==="*");if(r)return r}return n[0]}},su=e=>typeof e=="string"&&e.trim().toLowerCase()==="auto",ls=(e,t,n=[])=>{if(!ce.existsSync(e))return n;let i;try{i=ce.readdirSync(e,{withFileTypes:!0})}catch{return n}for(let r of i){if(r.name==="Pods"||r.name==="build"||r.name==="DerivedData")continue;let o=ge.join(e,r.name);r.isDirectory()?ls(o,t,n):r.name===t&&n.push(o)}return n},au=(e,t,n)=>{let i=`${n} ${t.environment||""}`.toLowerCase(),r=e.toLowerCase(),o=0;return(i.includes("development")||i.includes("dev"))&&/(^|[.-])dev(elopment)?($|[.-])/.test(r)&&(o+=20),(i.includes("staging")||i.includes("stage"))&&/(^|[.-])stag(e|ing)?($|[.-])/.test(r)&&(o+=20),(i.includes("production")||i.includes("prod"))&&(/(^|[.-])(dev|development|stag|stage|staging)($|[.-])/.test(r)||(o+=20)),o},lu=(e,t)=>{let n=ge.resolve(process.cwd(),ce.existsSync("ios")?"ios":"."),i=ls(n,"project.pbxproj"),r=[];for(let o of i)try{let l=ce.readFileSync(o,"utf8").matchAll(/PRODUCT_BUNDLE_IDENTIFIER\s*=\s*"?([^";\s]+)"?;/g);for(let a of l){let d=a[1]?.trim();d&&!d.includes("$")&&!d.startsWith("com.apple.")&&!r.includes(d)&&r.push(d)}}catch{}if(r.length!==0)return r.length===1?r[0]:r.map(o=>({bundleId:o,score:au(o,e,t)})).sort((o,s)=>s.score-o.score)[0]?.bundleId},Rn=e=>String(e||"").trim().toLowerCase().replace(/_/g,"-"),Pn=(e,t)=>{let n=Rn(e);return t==="ios"&&(n==="internal"||n==="ad-hoc")?"adhoc":t==="android"&&["internal","adhoc","ad-hoc","development","dev","staging","stage"].includes(n)?"internal":n},Xo=(e,t,n)=>{let i=Pn(e.distributionType||e.meta?.distributionType,n);return i?i===Pn(t,n):!0},qo=(e,t,n)=>{let i=Pn(e.distributionType||e.meta?.distributionType,n),r=Pn(t,n);return i?i===r?3:n==="android"&&r!=="store"&&i!=="store"?2:0:1},cu=e=>{let t=e.toLowerCase();return t==="development"||t==="dev"||t.startsWith("development-")||t.startsWith("dev-")||t.endsWith("-development")||t.endsWith("-dev")},du=e=>{let t=e.toLowerCase();return t.includes("staging")||t.includes("stage")||t.includes("preview")||t.includes("adhoc")||t.includes("ad-hoc")},uu=(e,t)=>{let n=Rn(e.distribution),i=Rn(e.iosExportMethod),r=Rn(e.environment);return e.platform!=="ios"?n==="store"?"store":"internal":e.developmentClient||e.simulator?"development":i==="app-store"||n==="store"?"store":i==="development"||n==="development"?"development":i==="ad-hoc"||i==="adhoc"||n==="ad-hoc"||n==="adhoc"||n==="internal"?"adhoc":r==="production"||r==="store"?"store":r==="development"||r==="dev"?"development":r==="staging"||r==="stage"||r==="preview"?"adhoc":t.toLowerCase()==="production"||t.toLowerCase().includes("store")?"store":cu(t)?"development":(du(t),"adhoc")},cs=e=>e.bundleId||e.bundleIdentifier||e.packageName||e.meta?.bundleId||e.meta?.bundleIdentifier||e.meta?.packageName,Zo=(e,t)=>{if(!t)return!0;let n=cs(e);return!n||n==="*"||n===t},Qo=(e,t)=>{let n=cs(e);return!t||!n?0:n===t?2:n==="*"?1:-1},ds=e=>{try{let t=Buffer.from(e,"base64").toString("utf8"),n=t.match(/<key>application-identifier<\/key>\s*<string>([^<]+)<\/string>/)?.[1]?.trim();if(!n)return;let i=t.match(/<key>TeamIdentifier<\/key>\s*<array>\s*<string>([^<]+)<\/string>/)?.[1]?.trim();if(i&&n.startsWith(`${i}.`))return n.slice(i.length+1);let r=n.indexOf(".");return r>=0?n.slice(r+1):n}catch{return}},pu=(e,t)=>{if(e===t||e==="*")return!0;if(e.endsWith(".*")){let n=e.slice(0,-2);return t.startsWith(`${n}.`)}return!1},fu=(e,t)=>{if(!t)return!0;let n=ds(e);if(n)return pu(n,t);try{return Buffer.from(e,"base64").toString("latin1").includes(t)}catch{return!0}},On=async e=>{if(e.failOnly){(!e.projectId||!e.buildId)&&($.error(v.red("--project-id and --build-id are required with --fail-only.")),process.exit(1));let l=e.error||"Build runner failed before it could report a final status.";try{await k.patch(`/builds/${e.projectId}/${e.buildId}`,{status:"failed",error:l,endTime:Date.now()}),$.info(v.yellow(`Marked build ${e.buildId} as failed.`));return}catch(a){$.error(v.red(`Could not mark build failed: ${a.message}`)),process.exit(1)}}await Xd(e),await Wd(e),e.platform!=="android"&&e.platform!=="ios"&&($.error(`Platform ${e.platform} is not supported. Use 'android' or 'ios'.`),process.exit(1)),e.autoSubmit&&e.platform==="ios"&&e.simulator&&($.error(v.red("--auto-submit cannot be used with --simulator because simulator builds are not App Store artifacts.")),process.exit(1)),e.autoSubmit&&e.dryRun&&$.warn(v.yellow("--auto-submit is ignored during --dry-run."));let t=Bi(),n=e.buildId||Ld(),i=e.projectId,r=Date.now(),o=!!i,s=async l=>{if(i)try{await k.patch(`/builds/${i}/${n}`,{status:"failed",error:l,endTime:Date.now()})}catch{}};if(e.local&&e.buildId){e.quiet||t.start(`Preparing isolated workspace for build: ${e.buildId}`);try{let l=await k.get(`/builds/${i}/${e.buildId}/source-url`);if(l.data.status!=="success")throw new Error("Failed to get source download URL from API");Hi("SOURCE_DOWNLOAD",l.data.downloadUrl);let a=await $n.get(l.data.downloadUrl,{responseType:"stream"}),d=(i||e.projectId||"default").replace(/[^a-zA-Z0-9-_]/g,"_"),u=ge.join(xd.homedir(),m.workspacesDir,d);ce.mkdirSync(u,{recursive:!0});let c=new Set(["node_modules",`.${m.nameLower}-cache-meta`]),f=new Set(["Pods"]);if(ce.existsSync(u)){let D=ce.readdirSync(u);for(let b of D){if(c.has(b))continue;if(b==="ios"){let A=ge.join(u,"ios");try{let B=ce.readdirSync(A);for(let q of B)if(!f.has(q))try{ce.rmSync(ge.join(A,q),{recursive:!0,force:!0})}catch{}}catch{}continue}let L=ge.join(u,b);try{ce.rmSync(L,{recursive:!0,force:!0})}catch{}}}let p=ge.join(u,"source.zip"),g=a.data,y=ce.createWriteStream(p);await new Promise((D,b)=>{g.pipe(y),g.on("error",L=>b(L)),y.on("finish",()=>D())}),new Go(p).extractAllTo(u,!0);try{ce.unlinkSync(p)}catch{}process.chdir(u),$.info(v.green(`\u2713 Persistent workspace ready: ${u}`)),$.info(v.dim(`  \u{1F4E6} Cached dirs preserved: node_modules=${ce.existsSync(ge.join(u,"node_modules"))?"\u2705":"\u274C"}, Pods=${ce.existsSync(ge.join(u,"ios","Pods"))?"\u2705":"\u274C"}`)),t.stop()}catch(l){t.stop(`Failed to prepare isolated workspace: ${l.message}`),i&&await s(`Setup Error: ${l.message}`),process.exit(1)}}try{let l=e.repo;if(!l)try{l=jo("git config --get remote.origin.url").toString().trim()}catch{$.warn("Could not detect git repository URL.")}!l&&e.dryRun,l||(l="https://github.com/placeholder/repo.git"),$.info(`Build ID: ${v.cyan(n)}`);let a={},d={},u=null,c=$e(`./${m.configFileName}`);if(c||($.error(v.red(`${m.configFileName} not found. Run \`${m.nameLower} init\` or \`${m.nameLower} link\` first.`)),process.exit(1)),c){u=c;let P=hr(c);e.framework=P,i=c.projectId;let I=e.buildProfile||"production",T=lt(c,I);!T&&e.buildProfile&&($.error(`Build profile '${I}' not found in ${m.configFileName}`),process.exit(1));let w=T||{};process.env.MACH_DEBUG&&$.info(v.dim(`Framework: ${P} | Build profile: ${I} | Platform: ${e.platform} | Distribution: ${w.distribution||"store"} | Environment: ${w.environment||I}`)),w.env&&(d=w.env,$.info(v.blue(`Use Build Profile: ${I}`)));let C=e.platform,h=w[C]||{},M=["developmentClient","simulator","distribution","buildCommand","apk","iosScheme","preBuild","postBuild","scheme","environment","androidPackage","iosBundleIdentifier","name","iosDeploymentTarget","iosApiKeyId","iosApiKeyIssuer","iosApiKeyPath","iosTeamId","iosConfiguration","iosExportMethod","branch","repo","instanceType","ami","bucket","region","nodeVersion"];e.name=c.name,e.appName=c.name,e.androidPackage=c.android?.package,e.iosBundleIdentifier=c.ios?.bundleIdentifier,e.iosScheme=c.ios?.iosScheme,!e.nodeVersion&&c.nodeVersion&&(e.nodeVersion=c.nodeVersion);let U=H=>H==="androidPackage"?h.androidPackage??h.package??w.androidPackage??w.android?.package:H==="iosBundleIdentifier"?h.iosBundleIdentifier??h.bundleIdentifier??w.iosBundleIdentifier??w.ios?.bundleIdentifier:h[H]!==void 0?h[H]:w[H];for(let H of M){let N=U(H),W=H==="androidPackage"||H==="iosBundleIdentifier";N!==void 0&&(e[H]===void 0||W)&&(e[H]=N)}if(e.platform==="ios"&&!(h.iosBundleIdentifier??h.bundleIdentifier??w.iosBundleIdentifier??w.ios?.bundleIdentifier)){let N=lu(e,I);N&&N!==e.iosBundleIdentifier&&($.warn(v.yellow(`Detected native iOS bundle identifier ${N}; using it for credential lookup. Set build.${I}.ios.bundleIdentifier to make this explicit.`)),e.iosBundleIdentifier=N)}e.branch=e.branch||"main",e.iosConfiguration=e.iosConfiguration||(e.developmentClient?"Debug":"Release"),e.sshUser=e.sshUser||process.env.USER||"ubuntu",e.simulator===void 0&&(e.simulator=!1),e.local===void 0&&(e.local=!1),e.verbose===void 0&&(e.verbose=!1),$.info(v.dim(`Resolved build config: framework=${P}, profile=${I}, platform=${e.platform}, simulator=${e.platform==="ios"?String(!!e.simulator):"n/a"}, developmentClient=${String(!!e.developmentClient)}, distribution=${e.distribution||w.distribution||"store"}, iosConfiguration=${e.platform==="ios"?e.iosConfiguration||"Release":"n/a"}`));let j=H=>{if(!H)return H;if(H.startsWith("scripts.")){let N=H.split(".")[1],W=c.scripts?.[N];if(W)return W;$.warn(`Script reference not found: ${H}`)}return H};e.buildCommand=j(e.buildCommand),e.preBuild=j(e.preBuild),e.postBuild=j(e.postBuild),!e.scheme&&c.scheme&&(e.scheme=c.scheme);let X={...Pt(c,m.envPrefix),...Pt(w,`${m.envPrefix}PROFILE_`)};a={...a,...d,...X},process.env.IOS_P12_PASSWORD&&!a.IOS_P12_PASSWORD&&(a.IOS_P12_PASSWORD=process.env.IOS_P12_PASSWORD),process.env.MATCH_PASSWORD&&!a.MATCH_PASSWORD&&(a.MATCH_PASSWORD=process.env.MATCH_PASSWORD),e.platform==="ios"&&(!e.iosTeamId&&w.ios?.appleTeamId&&(e.iosTeamId=w.ios.appleTeamId),!e.iosTeamId&&c.submit?.[I]?.ios?.appleTeamId&&(e.iosTeamId=c.submit[I].ios.appleTeamId),!e.iosTeamId&&c.submit?.production?.ios?.appleTeamId&&($.warn(v.yellow(`Check: Using 'production' Team ID for '${I}' build.`)),e.iosTeamId=c.submit.production.ios.appleTeamId),e.iosTeamId?$.info(v.magenta(`\u2713 Injected iOS Team ID from config: ${e.iosTeamId}`)):e.simulator||$.warn(v.yellow("\u26A0\uFE0F No iOS Team ID found. Device or archive signing may fail unless managed iOS credentials provide the team automatically.")))}let f="unknown";try{f=jo("git rev-parse --abbrev-ref HEAD").toString().trim()}catch{$.warn("Failed to detect git branch.")}let p="1.0.0";try{ce.existsSync("./package.json")&&(p=JSON.parse(ce.readFileSync("./package.json","utf-8")).version||"1.0.0")}catch{}let g=e.buildProfile||"production",y="Internal";e.developmentClient?y="DevelopmentClient":g.toLowerCase().includes("store")||g.toLowerCase()==="production"?y="Store":g.toLowerCase().includes("preview")||g.toLowerCase().includes("staging")?y="Staging":(g.toLowerCase().includes("development")||g.toLowerCase().includes("dev"))&&(y="Development");let _=e.platform==="ios"?"iOS":"Android",D=e.platform==="ios"&&e.simulator?" (Simulator)":"",b=`${_}${D} v${p} (${y})`;if(Dn(e,{status:"created",projectId:i,buildId:n,platform:e.platform,profile:g,branch:f,version:p,buildType:y,developmentClient:!!e.developmentClient,summary:b}),i){try{let P=e.buildProfile||"production",I=e.environment||P;$.info(v.blue(`Fetching managed secrets for profile: ${P} (environment: ${I})...`));let w=(await k.get(`/projects/${i}/secrets/export?env=${I}`)).data;w.status==="success"&&w.secrets&&(a={...a,...w.secrets},Object.keys(w.secrets).length>0&&$.info(v.magenta(`\u2713 Injected ${Object.keys(w.secrets).length} secrets from Dashboard.`)))}catch(P){$.warn(`Failed to load managed secrets from Dashboard: ${P.message}`)}if(e.platform==="ios"&&e.simulator)$.info(v.dim("Skipping managed iOS signing credentials for simulator build."));else try{$.info(v.blue("Fetching managed credentials..."));let P=uu(e,g),I=e.platform==="ios"?e.iosBundleIdentifier:e.androidPackage,T=e.platform==="ios"?"bundle":"package";$.info(v.dim(`  Credential target: ${T} ${I||"not set"} (${P})`));let w=await k.get("/credentials/resolve",{params:{projectId:i,platform:e.platform,bundleId:I,distributionType:P,teamId:e.platform==="ios"?e.iosTeamId:void 0}});if(w.data.status==="success"&&w.data.credentials){let C=w.data.credentials;$.info(v.magenta(`\u2713 Found ${C.length} relevant credentials.`));let h=C.filter(N=>e.platform==="ios"&&N.type==="ios_profile"?Xo(N,P,e.platform)?Zo(N,I):!1:e.platform==="android"&&N.type==="android_keystore"?Zo(N,I):!!Xo(N,P,e.platform)).sort((N,W)=>Qo(W,I)*10+qo(W,P,e.platform)-(Qo(N,I)*10+qo(N,P,e.platform)));$.info(v.dim(`  Filtered to ${h.length} credentials for distributionType: ${P}`));let M=!1,U=!1,j=!1,X=[];for(let N of h)if(!(N.type==="ios_cert"&&M||N.type==="ios_profile"&&U||N.type==="android_keystore"&&j)&&["ios_cert","ios_profile","android_keystore"].includes(N.type)&&(N.downloadUrl||Xt(N)))try{let de=await as(N,i);if(N.type==="ios_cert"&&!M)a.IOS_DIST_P12=de,N.password?(a.IOS_P12_PASSWORD=N.password,$.info(v.dim(`  - Injected ${N.name} as IOS_DIST_P12 with password from credential record`))):$.info(v.dim(`  - Injected ${N.name} as IOS_DIST_P12`)),M=!0;else if(N.type==="ios_profile"&&!U){if(!fu(de,I)){let ue=ds(de)||"unknown";throw new Error(`Provisioning profile ${N.name||Xt(N)||"unknown"} is for a different bundle ID. Expected ${I}, found ${ue}. Upload a ${P} profile for ${I}.`)}a.IOS_PROVISIONING_PROFILE=de,$.info(v.dim(`  - Injected ${N.name} as IOS_PROVISIONING_PROFILE`)),U=!0}else if(N.type==="android_keystore"&&!j){a.ANDROID_KEYSTORE_BASE64=de;let ue=N.keystorePassword||N.password,V=N.keyPassword||N.keystorePassword||N.password,G=N.alias||N.meta?.alias;if(ue)a.ANDROID_STORE_PASSWORD=ue,$.info(v.dim("  - Injected keystore password from credential record"));else{let J=["ANDROID_STORE_PASSWORD",...[P==="store"?"PRODUCTION":P==="internal"||P==="adhoc"?"STAGING":"DEVELOPMENT",P.toUpperCase(),"PRODUCTION","STORE","INTERNAL","STAGING","RELEASE","DEBUG"].map(ae=>`KEYSTORE_PASSWORD_${ae}`),"KEYSTORE_PASSWORD"].find(ae=>!!a[ae]);J&&a[J]&&(a.ANDROID_STORE_PASSWORD=a[J])}if(V?(a.ANDROID_KEY_PASSWORD=V,$.info(v.dim("  - Injected key password from credential record"))):a.ANDROID_KEY_PASSWORD=a.ANDROID_STORE_PASSWORD||"",G)a.ANDROID_KEY_ALIAS=G;else{let Q=["ANDROID_KEY_ALIAS","KEYSTORE_ALIAS"].find(z=>!!a[z]);Q&&(a.ANDROID_KEY_ALIAS=a[Q])}$.info(v.dim(`  - Injected ${N.name} as ANDROID_KEYSTORE_BASE64`)),j=!0}}catch(de){X.push(`${N.name||N.type}: ${de.message}`)}let H=e.platform==="ios"?e.simulator||M&&U:j||!h.some(N=>N.type==="android_keystore");if(X.length>0&&!H)throw new Error(`Credential setup failed:
-${X.map(N=>`- ${N}`).join(`
-`)}`);X.length>0&&$.warn(v.dim(`  Skipped ${X.length} stale or unusable credential(s).`))}if(e.platform==="ios"&&!e.simulator){let C=e.buildProfile||"production",h=lt(c,C)||{},M=ru(c,h),U=su(M),j=e.distribution!==void 0?e.distribution==="store":y==="Store",X=M===void 0&&j,H=e.autoVersion||U&&j||X,N=e.autoVersion||U&&j;if(U&&!j&&$.info(v.dim(`  Skipping App Store Connect buildNumber lookup for ${e.distribution||"non-store"} build. Pass --auto-version to force it.`)),H){let W=e.iosBundleIdentifier||c.ios?.bundleIdentifier||c.expo?.ios?.bundleIdentifier,de=ou(c,h,C),ue=w.data.credentials||[],V=Jo(ue,W);if(!V&&(N||X)){let G=await k.get(`/credentials/${i}`);V=Jo(G.data.credentials||[],W)}if(V){t.start("Resolving latest iOS buildNumber from App Store Connect...");try{let G=V.keyId||V.meta?.keyId,Q=V.issuerId||V.meta?.issuerId;if(!G||!Q)throw new Error("App Store Connect credential is missing keyId or issuerId.");let z=await Wo(V,i),J=await Kr({keyId:G,issuerId:Q,privateKey:z,ascAppId:de,bundleId:W}),ae=/^\d+$/.test(J.latestBuildNumber);ae?(a.BUILD_NUMBER=J.nextBuildNumber,delete a.MACH_IOS_BUILD_NUMBER_LOCKED):(a.BUILD_NUMBER=J.nextBuildNumber,a.CURRENT_PROJECT_VERSION=J.nextBuildNumber,a.MACH_IOS_BUILD_NUMBER_LOCKED="1"),t.stop(ae?`\u2713 Latest iOS buildNumber on App Store Connect: ${v.green(J.latestBuildNumber)} (Mach will assign >= ${J.nextBuildNumber})`:`\u2713 Resolved iOS buildNumber: ${v.green(J.nextBuildNumber)} (Latest on App Store Connect: ${J.latestBuildNumber})`)}catch(G){t.stop("iOS buildNumber lookup failed");let Q=G.response?.data?.error?.message||G.message;if(N)throw new Error(`Auto-versioning failed: ${Q}. Fix App Store Connect API key permissions or remove ios.buildNumber="auto".`);$.warn(v.yellow(`Could not check App Store Connect buildNumber: ${Q}. Falling back to Mach counter.`))}}else if(N)throw new Error(`Auto-versioning failed: App Store Connect API key not found. Upload it with '${m.nameLower} credentials:service --platform ios'.`)}}if(e.platform==="android"){let C=e.buildProfile||"production",h=lt(c,C)||{},j=((h.android||{}).versionCode??h.androidVersionCode??c.android?.versionCode??c.expo?.android?.versionCode)==="auto",X=e.distribution!==void 0?e.distribution==="store":y==="Store",H=e.autoVersion||j&&X;if(j&&!H&&$.info(v.dim(`  Skipping Google Play versionCode lookup for ${e.distribution||"non-store"} build. Pass --auto-version to force it.`)),H){t.start("Resolving latest versionCode from Google Play...");try{let N=e.androidPackage||c.android?.package||c.expo?.android?.package||c.name,W=(w.data.credentials||[]).find(Q=>Q.type==="google_service_account"&&(!Q.bundleId||Q.bundleId===N));if(!W){let z=((await k.get(`/credentials/${i}`)).data.credentials||[]).filter(J=>J.type==="google_service_account");if(W=z.find(J=>J.type==="google_service_account"&&J.bundleId===N),!W&&z.length>0){let J=z.map(ae=>ae.bundleId).filter(Boolean).join(", ");throw new Error(`Google Service Account not found for package ${N}. Found service credential(s) for: ${J}.`)}}if(!W)throw new Error(`Google Service Account not found for package ${N}. Upload it under this package in Dashboard or run '${m.nameLower} credentials:service --platform android --package-name ${N}'.`);let de=await Wo(W,i),ue=nu(de,"Google Play service account");if(!ue.client_email||!ue.private_key)throw new Error("Google Play service account JSON is missing client_email or private_key.");let V=await Ur(N,ue);if(V==null)throw new Error("Could not retrieve any version information from Google Play.");let G=V+1;a.ANDROID_VERSION_CODE=G.toString(),t.stop(`\u2713 Resolved versionCode: ${v.green(G)} (Latest on Play Store: ${V})`)}catch(N){t.stop("Version resolution failed");let W=N.response?.data?.error?.message||N.message,de=iu(W)?"This looks like a temporary network error while contacting Mach or Google Play. Retry the command, or build and submit as separate steps if it continues.":'Fix Google Play service account permissions or remove android.versionCode="auto".';throw new Error(`Auto-versioning failed: ${W}. ${de}`)}}}if(e.platform==="ios"&&!e.simulator){let C=!!a.IOS_DIST_P12,h=!!a.IOS_PROVISIONING_PROFILE;if(!C||!h){let M=[...C?[]:["Distribution Certificate"],...h?[]:["Provisioning Profile"]].join(" and ");if(e.local&&e.buildId)throw new Error(`Missing iOS credentials: ${M}. Expected ${P} credentials for ${I||"the selected bundle ID"}. Run \`${m.nameLower} credentials --platform ios --profile ${g}\` and select ${I||"the correct bundle ID"}.`);$.error(v.red(`Missing iOS credentials: ${M}`)),e.quiet&&process.exit(1);let U=e.yes||await Bo({message:"Would you like to generate these credentials now?",initialValue:!0});if(U&&!vn(U))return await Ht({platform:"ios",profile:g}),e.quiet||$.info(v.green("\u2713 Credentials setup complete! Restarting build phase...")),On(e);e.quiet||$.info(v.yellow(`Run \`${m.nameLower} credentials\` to set up signing credentials manually.`)),process.exit(1)}}if(e.platform==="android"&&!e.developmentClient&&(e.distribution==="internal"||e.distribution==="store")&&!(!!a.ANDROID_KEYSTORE_BASE64||!!a.ANDROID_KEYSTORE)){$.error(v.red("Missing Android credentials: Signing Keystore")),e.quiet&&process.exit(1);let h=e.yes||await Bo({message:"Would you like to automatically create and upload an Android Keystore for this profile now?",initialValue:!0});if(h&&!vn(h))return await Ht({platform:"android",profile:g}),e.quiet||$.info(v.green("\u2713 Android Keystore setup complete! Restarting build phase...")),On(e);e.quiet||$.info(v.yellow(`Run \`${m.nameLower} credentials --platform android\` to set up a signing keystore manually.`)),process.exit(1)}}catch(P){(String(P.message||"").startsWith("Credential download failed")||String(P.message||"").startsWith("Credential setup failed")||String(P.message||"").startsWith("Missing iOS credentials")||String(P.message||"").startsWith("Auto-versioning failed"))&&($.error(v.red(P.message)),process.exit(1)),e.platform==="ios"&&e.local&&e.buildId&&($.error(v.red(`Failed to resolve iOS credentials: ${P.message}`)),process.exit(1)),$.warn(`Failed to resolve credentials: ${P.message}`)}}let L=!!(e.local&&e.buildId),A=!!(e.local||e.sshHost),B=!A&&!L;if(L){$.info(v.magenta("\u{1F3D7}\uFE0F Runner Mode: Executing isolated build task..."));let P=await mi({...e,interactive:!1},n,a,i,{branch:f,version:p,summary:b,buildType:y});await q(P),process.exit(0)}async function q(P){let I=async T=>{if(i)try{await _n("Report failed build status",()=>k.patch(`/builds/${i}/${n}`,{status:"failed",error:T,endTime:Date.now()}),3)}catch(w){$.warn(v.yellow(`Could not report failed build status: ${w.message}`))}};if(i&&P.length>0){let T=Bi(),w=[];e.quiet||T.start("Uploading artifacts to Dashboard...");try{for(let C of P){let h=ge.basename(C),M=ce.statSync(C).size,U=ge.extname(h).toLowerCase(),j="application/octet-stream",X=await _n(`Create artifact upload URL for ${h}`,()=>k.post(`/builds/${i}/${n}/artifact-upload-url`,{fileName:h,fileType:j}));if(X.data.status!=="success")throw new Error(`Failed to get upload URL for ${h}`);await Qd(C,X.data.uploadUrl,j),w.push({name:h,url:X.data.downloadUrl,size:M,type:U.substring(1)})}e.quiet||T.stop("Artifacts uploaded.")}catch(C){e.quiet||T.stop("Failed to upload artifacts.");let h=`Artifact upload failed: ${C.message}`;throw $.error(v.red(h)),await I(h),new Error(h)}if(i&&w.length>0)try{$.info(v.cyan(`
-\u{1F517} Download Links:`));for(let C of w)$.info(v.dim(`  - ${C.name}: `)+v.blue.underline(C.url));await _n("Finalize build in dashboard",()=>k.patch(`/builds/${i}/${n}`,{status:"success",artifacts:w,endTime:Date.now()})),Dn(e,{status:"success",projectId:i,buildId:n,platform:e.platform,profile:g,branch:f,version:p,buildType:y,developmentClient:!!e.developmentClient,summary:b,artifacts:w}),$.success(v.green(`
-\u2713 Build completed and reported to dashboard.`)),e.maestro&&!L&&await es(i,n,e,g),e.autoSubmit&&!L&&await Fi(i,n,e,g)}catch(C){let h=`Build artifact uploaded but dashboard finalization failed: ${C.message}`;throw $.error(v.red(`
-${h}`)),await I(h),new Error(h)}}else if(i){let T="Build completed but produced no uploadable artifacts.";throw $.error(v.red(T)),await I(T),new Error(T)}}if(A){if($.info(v.cyan(`\u{1F680} Direct Build Mode: Executing on ${e.sshHost||"local"}...`)),i&&!o){let P=process.argv.slice(3).join(" ");await k.post("/builds",{projectId:i,buildId:n,platform:e.platform,status:"building",branch:f,version:p,summary:b,startTime:r,buildType:y,buildProfile:g,buildArgs:P,framework:e.framework,simulator:!!e.simulator,developmentClient:!!e.developmentClient,...ts(e,n,g,u)}),ns(e)}if(e.sshHost&&e.platform==="ios")await xr(e,n,a,i),e.autoSubmit&&await Fi(i,n,e,g);else{let P=await mi({...e,interactive:!!e.local},n,a,i,{branch:f,version:p,summary:b,buildType:y});await q(P)}return}if(B&&($.info(v.blue("\u{1F6F0}\uFE0F Cloud Initiator Mode: Preparing orchestration...")),!e.dryRun)){e.quiet||t.start("Zipping and uploading local source...");let P=await k.post("/builds/source-upload-url",{projectId:i,buildId:n});if(P.data.status!=="success")throw t.stop("Failed to get upload URL."),new Error("Failed to get source upload URL from API");Hi("SOURCE_UPLOAD",P.data.uploadUrl);let I=new Go,T=Gd(I,process.cwd(),e.platform),w=I.toBuffer();if(!e.quiet){let h=T.skipped.length>0?` Skipped: ${T.skipped.join(", ")}.`:"";t.message(`Prepared source (${T.files} files).${h}`)}e.quiet||t.message(`Uploading source (${(w.length/1024/1024).toFixed(1)} MB)...`);let C=!1;for(let h=1;h<=3;h++)try{await $n.put(P.data.uploadUrl,w,{headers:{"Content-Type":"application/zip"},maxBodyLength:1/0,maxContentLength:1/0,timeout:12e4}),C=!0;break}catch(M){if(h<3)t.message(`Upload attempt ${h} failed (${M.code||M.message}), retrying...`),await new Promise(U=>setTimeout(U,2e3*h));else throw M}if(e.quiet||t.stop("Source uploaded"),i){let h=process.argv.slice(3).join(" ");await k.post("/builds",{projectId:i,buildId:n,platform:e.platform,status:"pending",branch:f,version:p,summary:b,startTime:r,buildType:y,buildProfile:g,buildArgs:h,framework:e.framework,simulator:!!e.simulator,developmentClient:!!e.developmentClient,...ts(e,n,g,u)}),$.info(v.green("\u2713 Cloud build registered.")),ns(e)}e.platform==="android"&&await Tr(e,n,a,i,e.preBuild),e.quiet||$.info(v.cyan("\u{1F4E1} Connecting to build stream...")),await hu(i,n,e),e.maestro&&await es(i,n,e,g),e.autoSubmit&&await Fi(i,n,e,g);return}}catch(l){let a=l.message||"Build failed";l.response?.data?.message?a=l.response.data.message:l.message.includes("status code 402")?a="Insufficient wallet balance. Please add credits in the Dashboard.":l.message.includes("status code 403")&&(a="Monthly build quota exceeded. Upgrade your plan in the Dashboard."),i&&await s(a),$.error(v.red(`\u2717 Build failed: ${a}`)),process.exit(1)}};async function es(e,t,n,i){$.info(v.cyan(`
+`);let o=r.match(/Google Api Error:[^\n]+/)||r.match(/Google Play API Error:[^\n]+/);return o?o[0]:r||"Google Play submission failed"}function kd(e){try{oe.existsSync(e)&&oe.rmSync(e,{recursive:!0,force:!0})}catch{}}function ce(e){console.log(ne.red(`\u274C ${e}`))}function me(e){console.log(ne.gray(`\u2022 ${e}`))}function Ti(e){console.log(ne.green(`\u2713 ${e}`))}var xi=8,Md=6,Ko=Number(process.env.MACH_ARTIFACT_UPLOAD_MAX_ATTEMPTS||2),Mi=Number(process.env.MACH_ARTIFACT_UPLOAD_TIMEOUT_MS||12e4),Ui="ap-south-1",Ud=`${m.envPrefix}S3_DEBUG`,Fd=()=>["1","true","yes","on"].includes(String(process.env[Ud]||"").trim().toLowerCase()),Hi=(e,t)=>{if(Fd()&&t)try{let n=new URL(t);$.info(v.dim(`[S3_DEBUG] ${e} host=${n.hostname} expectedRegion=${Ui}`)),n.hostname.includes(Ui)||$.warn(v.yellow(`[S3_DEBUG] ${e} host ${n.hostname} does not include ${Ui}`))}catch(n){$.warn(v.yellow(`[S3_DEBUG] Could not parse ${e} presigned URL host: ${n.message}`))}},Vo=new Set([".git",".gradle",".idea",".mach-cache",".expo",".turbo",".yarn/cache","build","builds","coverage","dist","node_modules",`${m.nameLower}_cli`,`.${m.nameLower}_cli`]),Bd=new Set(["android/.gradle","android/.cxx","android/app/.cxx","android/app/build","android/build","ios/Pods","ios/build","ios/DerivedData"]),Hd=[{value:"production",label:"production",hint:"Store / release build"},{value:"staging",label:"staging",hint:"Internal testing build"},{value:"development",label:"development",hint:"Development build"}],rs=e=>new Promise(t=>setTimeout(t,e)),os=e=>e.split(ge.sep).filter(Boolean).join("/"),jd=(e,t)=>{let n=os(e),i=n.split("/")[0];return n?!!(Vo.has(n)||Vo.has(i)||Bd.has(n)||t==="ios"&&i==="android"||t==="android"&&i==="ios"):!1},Gd=(e,t,n)=>{let i=0,r=new Set,o=(s,l)=>{let a=os(l);if(jd(a,n)){r.add(a.split("/")[0]||a);return}let d=de.lstatSync(s);if(!d.isSymbolicLink()){if(d.isDirectory()){for(let u of de.readdirSync(s))o(ge.join(s,u),ge.join(l,u));return}if(d.isFile()){let u=ge.dirname(a);e.addLocalFile(s,u==="."?void 0:u,ge.basename(a)),i++}}};for(let s of de.readdirSync(t))o(ge.join(t,s),s);return{files:i,skipped:Array.from(r).sort()}},Kd=e=>!e.yes&&!e.failOnly&&!e.buildId&&process.stdin.isTTY&&process.stdout.isTTY,Vd=e=>{if(!e||typeof e!="object")return;let t=[e.distribution?`distribution: ${e.distribution}`:void 0,e.environment?`env: ${e.environment}`:void 0,e.developmentClient?"development client":void 0,e.simulator?"simulator":void 0].filter(Boolean);return t.length>0?t.join(", "):void 0},zd=()=>{let e=$e(`./${m.configFileName}`),t=e?.build&&typeof e.build=="object"?e.build:{},n=Object.keys(t);return n.length===0?Hd:n.map(i=>({value:i,label:i,hint:Vd(t[i])}))},Wd=async e=>{let t=Kd(e);if(!e.platform&&t){let n=await Fo({message:"Select platform",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"}]});vn(n)&&(Ho("Build cancelled."),process.exit(0)),e.platform=n}if(!e.buildProfile&&t){let n=zd(),i=await Fo({message:"Select build profile",options:n,initialValue:n.find(r=>r.value==="production")?.value||n[0]?.value});vn(i)&&(Ho("Build cancelled."),process.exit(0)),e.buildProfile=i}e.buildProfile||(e.buildProfile="production")},zo=e=>{if(e===!0||e===!1)return e;if(e===1||e==="1")return!0;if(e===0||e==="0")return!1;if(typeof e!="string")return;let t=e.trim().toLowerCase();if(["true","yes","on"].includes(t))return!0;if(["false","no","off"].includes(t))return!1},ss=(e,t)=>{if(e)for(let n of t){let i=n.replace(/[.*+?^${}()|[\]\\]/g,"\\$&"),r=e.match(new RegExp(`(?:^|\\s)${i}(?:=|\\s+)([^\\s]+)`));if(r?.[1])return r[1].replace(/^["']|["']$/g,"")}},Yd=(e,t)=>!!e&&t.some(n=>new RegExp(`(?:^|\\s)${n.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}(?:\\s|$)`).test(e)),Jd=e=>{let n=ss(e,["--platform"])||e?.split(/\s+/).find(i=>i==="ios"||i==="android");return n==="ios"||n==="android"?n:void 0},Xd=async e=>{if(!(!e.projectId||!e.buildId))try{let t=await k.get(`/builds/${e.projectId}/${e.buildId}`),n=t.data?.build||t.data;if(!n||typeof n!="object")return;let i=typeof n.buildArgs=="string"?n.buildArgs:void 0;if(!e.platform){let r=n.platform||Jd(i);(r==="ios"||r==="android")&&(e.platform=r)}if(e.buildProfile||(e.buildProfile=n.buildProfile||n.profile||n.profileName||ss(i,["--profile","--build-profile","-p"])),e.simulator===void 0){let r=zo(n.simulator??n.isSimulator);r!==void 0?e.simulator=r:Yd(i,["--simulator"])&&(e.simulator=!0)}if(e.developmentClient===void 0){let r=zo(n.developmentClient??n.devClient);r!==void 0&&(e.developmentClient=r)}}catch(t){$.warn(v.yellow(`Could not load saved build options for runner: ${t.message}`))}},qd=e=>{if(!Number.isFinite(e)||e<=0)return"0 B";let t=["B","KB","MB","GB"],n=Math.min(Math.floor(Math.log(e)/Math.log(1024)),t.length-1);return`${(e/Math.pow(1024,n)).toFixed(n===0?0:1)} ${t[n]}`},Zd=e=>{let t=e.response?.status,n=e.code||"",i=e.message||"";return t?t===408||t===409||t===425||t===429||t>=500||/ECONNRESET|ETIMEDOUT|EAI_AGAIN|ENOTFOUND|ECONNABORTED|socket hang up|network|timeout/i.test(`${n} ${i}`):!0},_n=async(e,t,n=Md)=>{let i;for(let r=1;r<=n;r++)try{return await t()}catch(o){if(i=o,!Zd(o)||r>=n)break;let s=Math.min(6e4,2e3*Math.pow(2,r-1)),l=o.response?.status||o.code||o.message||"network error";$.warn(v.yellow(`${e} failed transiently (${l}). Retrying in ${Math.round(s/1e3)}s... (${r}/${n})`)),await rs(s)}throw i},Qd=async(e,t,n)=>{let i=ge.basename(e),r=de.statSync(e).size,o=Math.round(Mi/1e3);Hi(`ARTIFACT_UPLOAD ${i}`,t);try{await _n(`Upload artifact ${i}`,async()=>{let s=new AbortController,l=de.createReadStream(e),a=setTimeout(()=>{l.destroy(new Error(`Artifact upload timed out after ${o}s`)),s.abort()},Mi);try{await $n.put(t,l,{headers:{"Content-Type":n,"Content-Length":r,Connection:"close"},maxBodyLength:1/0,maxContentLength:1/0,timeout:Mi,timeoutErrorMessage:`Artifact upload timed out after ${o}s`,signal:s.signal})}finally{clearTimeout(a)}},Ko)}catch(s){throw new Error(`${i} (${qd(r)}) failed after ${Ko} upload attempt(s): ${s.message||s}`)}return r},eu=e=>{let t=e.response?.status;return t?t===408||t===429||t>=500:!0},Xt=e=>e.credentialId||e.id,tu=async(e,t)=>{let n=Xt(e);if(!n)return e.downloadUrl;let i=await k.get(`/credentials/${n}/download`,{params:{projectId:t,format:"raw"}});return i.data?.status==="success"&&i.data?.downloadUrl?i.data.downloadUrl:e.downloadUrl},as=async(e,t)=>{let n=e.downloadUrl;for(let i=1;i<=xi;i++)try{if((!n||i>1)&&(n=await tu(e,t)),!n)throw new Error(`Credential ${e.name||Xt(e)||"unknown"} has no download URL.`);let r=await $n.get(n,{responseType:"arraybuffer",timeout:6e4,maxContentLength:1/0,maxBodyLength:1/0,headers:{Connection:"close"}});return Buffer.from(r.data).toString("base64")}catch(r){if(i>=xi||!eu(r))throw r;let o=Math.min(1500*i*i,15e3);$.warn(v.dim(`  - Temporary network error downloading ${e.name}. Retrying... (${i}/${xi})`)),await rs(o)}throw new Error(`Failed to download credential ${e.name||Xt(e)||"unknown"}.`)},Wo=async(e,t)=>{let n=await as(e,t);return Buffer.from(n,"base64").toString("utf8")},nu=(e,t)=>{try{return JSON.parse(e)}catch{throw new Error(`${t} is not valid JSON.`)}},iu=e=>/ECONNRESET|ETIMEDOUT|EAI_AGAIN|ENOTFOUND|ECONNABORTED|socket hang up|network|timeout/i.test(e),ru=(e,t)=>t?.ios?.buildNumber??t?.iosBuildNumber??e?.ios?.buildNumber??e?.expo?.ios?.buildNumber,ou=(e,t,n)=>t?.ios?.ascAppId??t?.ascAppId??e?.ios?.ascAppId??e?.submit?.[n]?.ios?.ascAppId??e?.submit?.production?.ios?.ascAppId,Yo=e=>e.bundleId||e.bundleIdentifier||e.meta?.bundleId||e.meta?.bundleIdentifier,Jo=(e,t)=>{let n=e.filter(i=>i.type==="asc_api_key");if(n.length!==0){if(t){let i=n.find(o=>Yo(o)===t);if(i)return i;let r=n.find(o=>Yo(o)==="*");if(r)return r}return n[0]}},su=e=>typeof e=="string"&&e.trim().toLowerCase()==="auto",ls=(e,t,n=[])=>{if(!de.existsSync(e))return n;let i;try{i=de.readdirSync(e,{withFileTypes:!0})}catch{return n}for(let r of i){if(r.name==="Pods"||r.name==="build"||r.name==="DerivedData")continue;let o=ge.join(e,r.name);r.isDirectory()?ls(o,t,n):r.name===t&&n.push(o)}return n},au=(e,t,n)=>{let i=`${n} ${t.environment||""}`.toLowerCase(),r=e.toLowerCase(),o=0;return(i.includes("development")||i.includes("dev"))&&/(^|[.-])dev(elopment)?($|[.-])/.test(r)&&(o+=20),(i.includes("staging")||i.includes("stage"))&&/(^|[.-])stag(e|ing)?($|[.-])/.test(r)&&(o+=20),(i.includes("production")||i.includes("prod"))&&(/(^|[.-])(dev|development|stag|stage|staging)($|[.-])/.test(r)||(o+=20)),o},lu=(e,t)=>{let n=ge.resolve(process.cwd(),de.existsSync("ios")?"ios":"."),i=ls(n,"project.pbxproj"),r=[];for(let o of i)try{let l=de.readFileSync(o,"utf8").matchAll(/PRODUCT_BUNDLE_IDENTIFIER\s*=\s*"?([^";\s]+)"?;/g);for(let a of l){let d=a[1]?.trim();d&&!d.includes("$")&&!d.startsWith("com.apple.")&&!r.includes(d)&&r.push(d)}}catch{}if(r.length!==0)return r.length===1?r[0]:r.map(o=>({bundleId:o,score:au(o,e,t)})).sort((o,s)=>s.score-o.score)[0]?.bundleId},Rn=e=>String(e||"").trim().toLowerCase().replace(/_/g,"-"),Pn=(e,t)=>{let n=Rn(e);return t==="ios"&&(n==="internal"||n==="ad-hoc")?"adhoc":t==="android"&&["internal","adhoc","ad-hoc","development","dev","staging","stage"].includes(n)?"internal":n},Xo=(e,t,n)=>{let i=Pn(e.distributionType||e.meta?.distributionType,n);return i?i===Pn(t,n):!0},qo=(e,t,n)=>{let i=Pn(e.distributionType||e.meta?.distributionType,n),r=Pn(t,n);return i?i===r?3:n==="android"&&r!=="store"&&i!=="store"?2:0:1},cu=e=>{let t=e.toLowerCase();return t==="development"||t==="dev"||t.startsWith("development-")||t.startsWith("dev-")||t.endsWith("-development")||t.endsWith("-dev")},du=e=>{let t=e.toLowerCase();return t.includes("staging")||t.includes("stage")||t.includes("preview")||t.includes("adhoc")||t.includes("ad-hoc")},uu=(e,t)=>{let n=Rn(e.distribution),i=Rn(e.iosExportMethod),r=Rn(e.environment);return e.platform!=="ios"?n==="store"?"store":"internal":e.developmentClient||e.simulator?"development":i==="app-store"||n==="store"?"store":i==="development"||n==="development"?"development":i==="ad-hoc"||i==="adhoc"||n==="ad-hoc"||n==="adhoc"||n==="internal"?"adhoc":r==="production"||r==="store"?"store":r==="development"||r==="dev"?"development":r==="staging"||r==="stage"||r==="preview"?"adhoc":t.toLowerCase()==="production"||t.toLowerCase().includes("store")?"store":cu(t)?"development":(du(t),"adhoc")},cs=e=>e.bundleId||e.bundleIdentifier||e.packageName||e.meta?.bundleId||e.meta?.bundleIdentifier||e.meta?.packageName,Zo=(e,t)=>{if(!t)return!0;let n=cs(e);return!n||n==="*"||n===t},Qo=(e,t)=>{let n=cs(e);return!t||!n?0:n===t?2:n==="*"?1:-1},ds=e=>{try{let t=Buffer.from(e,"base64").toString("utf8"),n=t.match(/<key>application-identifier<\/key>\s*<string>([^<]+)<\/string>/)?.[1]?.trim();if(!n)return;let i=t.match(/<key>TeamIdentifier<\/key>\s*<array>\s*<string>([^<]+)<\/string>/)?.[1]?.trim();if(i&&n.startsWith(`${i}.`))return n.slice(i.length+1);let r=n.indexOf(".");return r>=0?n.slice(r+1):n}catch{return}},pu=(e,t)=>{if(e===t||e==="*")return!0;if(e.endsWith(".*")){let n=e.slice(0,-2);return t.startsWith(`${n}.`)}return!1},fu=(e,t)=>{if(!t)return!0;let n=ds(e);if(n)return pu(n,t);try{return Buffer.from(e,"base64").toString("latin1").includes(t)}catch{return!0}},On=async e=>{if(e.failOnly){(!e.projectId||!e.buildId)&&($.error(v.red("--project-id and --build-id are required with --fail-only.")),process.exit(1));let l=e.error||"Build runner failed before it could report a final status.";try{await k.patch(`/builds/${e.projectId}/${e.buildId}`,{status:"failed",error:l,endTime:Date.now()}),$.info(v.yellow(`Marked build ${e.buildId} as failed.`));return}catch(a){$.error(v.red(`Could not mark build failed: ${a.message}`)),process.exit(1)}}await Xd(e),await Wd(e),e.platform!=="android"&&e.platform!=="ios"&&($.error(`Platform ${e.platform} is not supported. Use 'android' or 'ios'.`),process.exit(1)),e.autoSubmit&&e.platform==="ios"&&e.simulator&&($.error(v.red("--auto-submit cannot be used with --simulator because simulator builds are not App Store artifacts.")),process.exit(1)),e.autoSubmit&&e.dryRun&&$.warn(v.yellow("--auto-submit is ignored during --dry-run."));let t=Bi(),n=e.buildId||Ld(),i=e.projectId,r=Date.now(),o=!!i,s=async l=>{if(i)try{await k.patch(`/builds/${i}/${n}`,{status:"failed",error:l,endTime:Date.now()})}catch{}};if(e.local&&e.buildId){e.quiet||t.start(`Preparing isolated workspace for build: ${e.buildId}`);try{let l=await k.get(`/builds/${i}/${e.buildId}/source-url`);if(l.data.status!=="success")throw new Error("Failed to get source download URL from API");Hi("SOURCE_DOWNLOAD",l.data.downloadUrl);let a=await $n.get(l.data.downloadUrl,{responseType:"stream"}),d=(i||e.projectId||"default").replace(/[^a-zA-Z0-9-_]/g,"_"),u=ge.join(xd.homedir(),m.workspacesDir,d);de.mkdirSync(u,{recursive:!0});let c=new Set(["node_modules",`.${m.nameLower}-cache-meta`]),f=new Set(["Pods"]);if(de.existsSync(u)){let D=de.readdirSync(u);for(let b of D){if(c.has(b))continue;if(b==="ios"){let A=ge.join(u,"ios");try{let B=de.readdirSync(A);for(let q of B)if(!f.has(q))try{de.rmSync(ge.join(A,q),{recursive:!0,force:!0})}catch{}}catch{}continue}let L=ge.join(u,b);try{de.rmSync(L,{recursive:!0,force:!0})}catch{}}}let p=ge.join(u,"source.zip"),g=a.data,y=de.createWriteStream(p);await new Promise((D,b)=>{g.pipe(y),g.on("error",L=>b(L)),y.on("finish",()=>D())}),new Go(p).extractAllTo(u,!0);try{de.unlinkSync(p)}catch{}process.chdir(u),$.info(v.green(`\u2713 Persistent workspace ready: ${u}`)),$.info(v.dim(`  \u{1F4E6} Cached dirs preserved: node_modules=${de.existsSync(ge.join(u,"node_modules"))?"\u2705":"\u274C"}, Pods=${de.existsSync(ge.join(u,"ios","Pods"))?"\u2705":"\u274C"}`)),t.stop()}catch(l){t.stop(`Failed to prepare isolated workspace: ${l.message}`),i&&await s(`Setup Error: ${l.message}`),process.exit(1)}}try{let l=e.repo;if(!l)try{l=jo("git config --get remote.origin.url").toString().trim()}catch{$.warn("Could not detect git repository URL.")}!l&&e.dryRun,l||(l="https://github.com/placeholder/repo.git"),$.info(`Build ID: ${v.cyan(n)}`);let a={},d={},u=null,c=$e(`./${m.configFileName}`);if(c||($.error(v.red(`${m.configFileName} not found. Run \`${m.nameLower} init\` or \`${m.nameLower} link\` first.`)),process.exit(1)),c){u=c;let P=hr(c);e.framework=P,i=c.projectId;let I=e.buildProfile||"production",T=lt(c,I);!T&&e.buildProfile&&($.error(`Build profile '${I}' not found in ${m.configFileName}`),process.exit(1));let w=T||{};process.env.MACH_DEBUG&&$.info(v.dim(`Framework: ${P} | Build profile: ${I} | Platform: ${e.platform} | Distribution: ${w.distribution||"store"} | Environment: ${w.environment||I}`)),w.env&&(d=w.env,$.info(v.blue(`Use Build Profile: ${I}`)));let N=e.platform,h=w[N]||{},M=["developmentClient","simulator","distribution","buildCommand","apk","iosScheme","preBuild","postBuild","scheme","environment","androidPackage","iosBundleIdentifier","name","iosDeploymentTarget","iosApiKeyId","iosApiKeyIssuer","iosApiKeyPath","iosTeamId","iosConfiguration","iosExportMethod","branch","repo","instanceType","ami","bucket","region","nodeVersion"];e.name=c.name,e.appName=c.name,e.androidPackage=c.android?.package,e.iosBundleIdentifier=c.ios?.bundleIdentifier,e.iosScheme=c.ios?.iosScheme,!e.nodeVersion&&c.nodeVersion&&(e.nodeVersion=c.nodeVersion);let U=H=>H==="androidPackage"?h.androidPackage??h.package??w.androidPackage??w.android?.package:H==="iosBundleIdentifier"?h.iosBundleIdentifier??h.bundleIdentifier??w.iosBundleIdentifier??w.ios?.bundleIdentifier:h[H]!==void 0?h[H]:w[H];for(let H of M){let C=U(H),V=H==="androidPackage"||H==="iosBundleIdentifier";C!==void 0&&(e[H]===void 0||V)&&(e[H]=C)}if(e.platform==="ios"&&!(h.iosBundleIdentifier??h.bundleIdentifier??w.iosBundleIdentifier??w.ios?.bundleIdentifier)){let C=lu(e,I);C&&C!==e.iosBundleIdentifier&&($.warn(v.yellow(`Detected native iOS bundle identifier ${C}; using it for credential lookup. Set build.${I}.ios.bundleIdentifier to make this explicit.`)),e.iosBundleIdentifier=C)}e.branch=e.branch||"main",e.iosConfiguration=e.iosConfiguration||(e.developmentClient?"Debug":"Release"),e.sshUser=e.sshUser||process.env.USER||"ubuntu",e.simulator===void 0&&(e.simulator=!1),e.local===void 0&&(e.local=!1),e.verbose===void 0&&(e.verbose=!1),$.info(v.dim(`Resolved build config: framework=${P}, profile=${I}, platform=${e.platform}, simulator=${e.platform==="ios"?String(!!e.simulator):"n/a"}, developmentClient=${String(!!e.developmentClient)}, distribution=${e.distribution||w.distribution||"store"}, iosConfiguration=${e.platform==="ios"?e.iosConfiguration||"Release":"n/a"}`));let j=H=>{if(!H)return H;if(H.startsWith("scripts.")){let C=H.split(".")[1],V=c.scripts?.[C];if(V)return V;$.warn(`Script reference not found: ${H}`)}return H};e.buildCommand=j(e.buildCommand),e.preBuild=j(e.preBuild),e.postBuild=j(e.postBuild),!e.scheme&&c.scheme&&(e.scheme=c.scheme);let X={...Pt(c,m.envPrefix),...Pt(w,`${m.envPrefix}PROFILE_`)};a={...a,...d,...X},process.env.IOS_P12_PASSWORD&&!a.IOS_P12_PASSWORD&&(a.IOS_P12_PASSWORD=process.env.IOS_P12_PASSWORD),process.env.MATCH_PASSWORD&&!a.MATCH_PASSWORD&&(a.MATCH_PASSWORD=process.env.MATCH_PASSWORD),e.platform==="ios"&&(!e.iosTeamId&&w.ios?.appleTeamId&&(e.iosTeamId=w.ios.appleTeamId),!e.iosTeamId&&c.submit?.[I]?.ios?.appleTeamId&&(e.iosTeamId=c.submit[I].ios.appleTeamId),!e.iosTeamId&&c.submit?.production?.ios?.appleTeamId&&($.warn(v.yellow(`Check: Using 'production' Team ID for '${I}' build.`)),e.iosTeamId=c.submit.production.ios.appleTeamId),e.iosTeamId?$.info(v.magenta(`\u2713 Injected iOS Team ID from config: ${e.iosTeamId}`)):e.simulator||$.warn(v.yellow("\u26A0\uFE0F No iOS Team ID found. Device or archive signing may fail unless managed iOS credentials provide the team automatically.")))}let f="unknown";try{f=jo("git rev-parse --abbrev-ref HEAD").toString().trim()}catch{$.warn("Failed to detect git branch.")}let p="1.0.0";try{de.existsSync("./package.json")&&(p=JSON.parse(de.readFileSync("./package.json","utf-8")).version||"1.0.0")}catch{}let g=e.buildProfile||"production",y="Internal";e.developmentClient?y="DevelopmentClient":g.toLowerCase().includes("store")||g.toLowerCase()==="production"?y="Store":g.toLowerCase().includes("preview")||g.toLowerCase().includes("staging")?y="Staging":(g.toLowerCase().includes("development")||g.toLowerCase().includes("dev"))&&(y="Development");let _=e.platform==="ios"?"iOS":"Android",D=e.platform==="ios"&&e.simulator?" (Simulator)":"",b=`${_}${D} v${p} (${y})`;if(Dn(e,{status:"created",projectId:i,buildId:n,platform:e.platform,profile:g,branch:f,version:p,buildType:y,developmentClient:!!e.developmentClient,summary:b}),i){try{let P=e.buildProfile||"production",I=e.environment||P;$.info(v.blue(`Fetching managed secrets for profile: ${P} (environment: ${I})...`));let w=(await k.get(`/projects/${i}/secrets/export?env=${I}`)).data;w.status==="success"&&w.secrets&&(a={...a,...w.secrets},Object.keys(w.secrets).length>0&&$.info(v.magenta(`\u2713 Injected ${Object.keys(w.secrets).length} secrets from Dashboard.`)))}catch(P){$.warn(`Failed to load managed secrets from Dashboard: ${P.message}`)}if(e.platform==="ios"&&e.simulator)$.info(v.dim("Skipping managed iOS signing credentials for simulator build."));else try{$.info(v.blue("Fetching managed credentials..."));let P=uu(e,g),I=e.platform==="ios"?e.iosBundleIdentifier:e.androidPackage,T=e.platform==="ios"?"bundle":"package";$.info(v.dim(`  Credential target: ${T} ${I||"not set"} (${P})`));let w=await k.get("/credentials/resolve",{params:{projectId:i,platform:e.platform,bundleId:I,distributionType:P,teamId:e.platform==="ios"?e.iosTeamId:void 0}});if(w.data.status==="success"&&w.data.credentials){let N=w.data.credentials;$.info(v.magenta(`\u2713 Found ${N.length} relevant credentials.`));let h=N.filter(C=>e.platform==="ios"&&C.type==="ios_profile"?Xo(C,P,e.platform)?Zo(C,I):!1:e.platform==="android"&&C.type==="android_keystore"?Zo(C,I):!!Xo(C,P,e.platform)).sort((C,V)=>{let se=Qo(V,I)*10+qo(V,P,e.platform)-(Qo(C,I)*10+qo(C,P,e.platform));return se!==0?se:(V.createdAt||0)-(C.createdAt||0)});$.info(v.dim(`  Filtered to ${h.length} credentials for distributionType: ${P}`));let M=!1,U=!1,j=!1,X=[];for(let C of h)if(!(C.type==="ios_cert"&&M||C.type==="ios_profile"&&U||C.type==="android_keystore"&&j)&&["ios_cert","ios_profile","android_keystore"].includes(C.type)&&(C.downloadUrl||Xt(C)))try{let se=await as(C,i);if(C.type==="ios_cert"&&!M)a.IOS_DIST_P12=se,C.password?(a.IOS_P12_PASSWORD=C.password,$.info(v.dim(`  - Injected ${C.name} as IOS_DIST_P12 with password from credential record`))):$.info(v.dim(`  - Injected ${C.name} as IOS_DIST_P12`)),M=!0;else if(C.type==="ios_profile"&&!U){if(!fu(se,I)){let ue=ds(se)||"unknown";throw new Error(`Provisioning profile ${C.name||Xt(C)||"unknown"} is for a different bundle ID. Expected ${I}, found ${ue}. Upload a ${P} profile for ${I}.`)}a.IOS_PROVISIONING_PROFILE=se,$.info(v.dim(`  - Injected ${C.name} as IOS_PROVISIONING_PROFILE`)),U=!0}else if(C.type==="android_keystore"&&!j){a.ANDROID_KEYSTORE_BASE64=se;let ue=C.keystorePassword||C.password,z=C.keyPassword||C.keystorePassword||C.password,G=C.alias||C.meta?.alias;if(ue)a.ANDROID_STORE_PASSWORD=ue,$.info(v.dim("  - Injected keystore password from credential record"));else{let J=["ANDROID_STORE_PASSWORD",...[P==="store"?"PRODUCTION":P==="internal"||P==="adhoc"?"STAGING":"DEVELOPMENT",P.toUpperCase(),"PRODUCTION","STORE","INTERNAL","STAGING","RELEASE","DEBUG"].map(le=>`KEYSTORE_PASSWORD_${le}`),"KEYSTORE_PASSWORD"].find(le=>!!a[le]);J&&a[J]&&(a.ANDROID_STORE_PASSWORD=a[J])}if(z?(a.ANDROID_KEY_PASSWORD=z,$.info(v.dim("  - Injected key password from credential record"))):a.ANDROID_KEY_PASSWORD=a.ANDROID_STORE_PASSWORD||"",G)a.ANDROID_KEY_ALIAS=G;else{let Q=["ANDROID_KEY_ALIAS","KEYSTORE_ALIAS"].find(W=>!!a[W]);Q&&(a.ANDROID_KEY_ALIAS=a[Q])}$.info(v.dim(`  - Injected ${C.name} as ANDROID_KEYSTORE_BASE64`)),j=!0}}catch(se){X.push(`${C.name||C.type}: ${se.message}`)}let H=e.platform==="ios"?e.simulator||M&&U:j||!h.some(C=>C.type==="android_keystore");if(X.length>0&&!H)throw new Error(`Credential setup failed:
+${X.map(C=>`- ${C}`).join(`
+`)}`);X.length>0&&$.warn(v.dim(`  Skipped ${X.length} stale or unusable credential(s).`))}if(e.platform==="ios"&&!e.simulator){let N=e.buildProfile||"production",h=lt(c,N)||{},M=ru(c,h),U=su(M),j=e.distribution!==void 0?e.distribution==="store":y==="Store",X=M===void 0&&j,H=e.autoVersion||U&&j||X,C=e.autoVersion||U&&j;if(U&&!j&&$.info(v.dim(`  Skipping App Store Connect buildNumber lookup for ${e.distribution||"non-store"} build. Pass --auto-version to force it.`)),H){let V=e.iosBundleIdentifier||c.ios?.bundleIdentifier||c.expo?.ios?.bundleIdentifier,se=ou(c,h,N),ue=w.data.credentials||[],z=Jo(ue,V);if(!z&&(C||X)){let G=await k.get(`/credentials/${i}`);z=Jo(G.data.credentials||[],V)}if(z){t.start("Resolving latest iOS buildNumber from App Store Connect...");try{let G=z.keyId||z.meta?.keyId,Q=z.issuerId||z.meta?.issuerId;if(!G||!Q)throw new Error("App Store Connect credential is missing keyId or issuerId.");let W=await Wo(z,i),J=await Kr({keyId:G,issuerId:Q,privateKey:W,ascAppId:se,bundleId:V}),le=/^\d+$/.test(J.latestBuildNumber);le?(a.BUILD_NUMBER=J.nextBuildNumber,delete a.MACH_IOS_BUILD_NUMBER_LOCKED):(a.BUILD_NUMBER=J.nextBuildNumber,a.CURRENT_PROJECT_VERSION=J.nextBuildNumber,a.MACH_IOS_BUILD_NUMBER_LOCKED="1"),t.stop(le?`\u2713 Latest iOS buildNumber on App Store Connect: ${v.green(J.latestBuildNumber)} (Mach will assign >= ${J.nextBuildNumber})`:`\u2713 Resolved iOS buildNumber: ${v.green(J.nextBuildNumber)} (Latest on App Store Connect: ${J.latestBuildNumber})`)}catch(G){t.stop("iOS buildNumber lookup failed");let Q=G.response?.data?.error?.message||G.message;if(C)throw new Error(`Auto-versioning failed: ${Q}. Fix App Store Connect API key permissions or remove ios.buildNumber="auto".`);$.warn(v.yellow(`Could not check App Store Connect buildNumber: ${Q}. Falling back to Mach counter.`))}}else if(C)throw new Error(`Auto-versioning failed: App Store Connect API key not found. Upload it with '${m.nameLower} credentials:service --platform ios'.`)}}if(e.platform==="android"){let N=e.buildProfile||"production",h=lt(c,N)||{},j=((h.android||{}).versionCode??h.androidVersionCode??c.android?.versionCode??c.expo?.android?.versionCode)==="auto",X=e.distribution!==void 0?e.distribution==="store":y==="Store",H=e.autoVersion||j&&X;if(j&&!H&&$.info(v.dim(`  Skipping Google Play versionCode lookup for ${e.distribution||"non-store"} build. Pass --auto-version to force it.`)),H){t.start("Resolving latest versionCode from Google Play...");try{let C=e.androidPackage||c.android?.package||c.expo?.android?.package||c.name,V=(w.data.credentials||[]).find(Q=>Q.type==="google_service_account"&&(!Q.bundleId||Q.bundleId===C));if(!V){let W=((await k.get(`/credentials/${i}`)).data.credentials||[]).filter(J=>J.type==="google_service_account");if(V=W.find(J=>J.type==="google_service_account"&&J.bundleId===C),!V&&W.length>0){let J=W.map(le=>le.bundleId).filter(Boolean).join(", ");throw new Error(`Google Service Account not found for package ${C}. Found service credential(s) for: ${J}.`)}}if(!V)throw new Error(`Google Service Account not found for package ${C}. Upload it under this package in Dashboard or run '${m.nameLower} credentials:service --platform android --package-name ${C}'.`);let se=await Wo(V,i),ue=nu(se,"Google Play service account");if(!ue.client_email||!ue.private_key)throw new Error("Google Play service account JSON is missing client_email or private_key.");let z=await Ur(C,ue);if(z==null)throw new Error("Could not retrieve any version information from Google Play.");let G=z+1;a.ANDROID_VERSION_CODE=G.toString(),t.stop(`\u2713 Resolved versionCode: ${v.green(G)} (Latest on Play Store: ${z})`)}catch(C){t.stop("Version resolution failed");let V=C.response?.data?.error?.message||C.message,se=iu(V)?"This looks like a temporary network error while contacting Mach or Google Play. Retry the command, or build and submit as separate steps if it continues.":'Fix Google Play service account permissions or remove android.versionCode="auto".';throw new Error(`Auto-versioning failed: ${V}. ${se}`)}}}if(e.platform==="ios"&&!e.simulator){let N=!!a.IOS_DIST_P12,h=!!a.IOS_PROVISIONING_PROFILE;if(!N||!h){let M=[...N?[]:["Distribution Certificate"],...h?[]:["Provisioning Profile"]].join(" and ");if(e.local&&e.buildId)throw new Error(`Missing iOS credentials: ${M}. Expected ${P} credentials for ${I||"the selected bundle ID"}. Run \`${m.nameLower} credentials --platform ios --profile ${g}\` and select ${I||"the correct bundle ID"}.`);$.error(v.red(`Missing iOS credentials: ${M}`)),e.quiet&&process.exit(1);let U=e.yes||await Bo({message:"Would you like to generate these credentials now?",initialValue:!0});if(U&&!vn(U))return await Ht({platform:"ios",profile:g}),e.quiet||$.info(v.green("\u2713 Credentials setup complete! Restarting build phase...")),On(e);e.quiet||$.info(v.yellow(`Run \`${m.nameLower} credentials\` to set up signing credentials manually.`)),process.exit(1)}}if(e.platform==="android"&&!e.developmentClient&&(e.distribution==="internal"||e.distribution==="store")&&!(!!a.ANDROID_KEYSTORE_BASE64||!!a.ANDROID_KEYSTORE)){$.error(v.red("Missing Android credentials: Signing Keystore")),e.quiet&&process.exit(1);let h=e.yes||await Bo({message:"Would you like to automatically create and upload an Android Keystore for this profile now?",initialValue:!0});if(h&&!vn(h))return await Ht({platform:"android",profile:g}),e.quiet||$.info(v.green("\u2713 Android Keystore setup complete! Restarting build phase...")),On(e);e.quiet||$.info(v.yellow(`Run \`${m.nameLower} credentials --platform android\` to set up a signing keystore manually.`)),process.exit(1)}}catch(P){(String(P.message||"").startsWith("Credential download failed")||String(P.message||"").startsWith("Credential setup failed")||String(P.message||"").startsWith("Missing iOS credentials")||String(P.message||"").startsWith("Auto-versioning failed"))&&($.error(v.red(P.message)),process.exit(1)),e.platform==="ios"&&e.local&&e.buildId&&($.error(v.red(`Failed to resolve iOS credentials: ${P.message}`)),process.exit(1)),$.warn(`Failed to resolve credentials: ${P.message}`)}}let L=!!(e.local&&e.buildId),A=!!(e.local||e.sshHost),B=!A&&!L;if(L){$.info(v.magenta("\u{1F3D7}\uFE0F Runner Mode: Executing isolated build task..."));let P=await mi({...e,interactive:!1},n,a,i,{branch:f,version:p,summary:b,buildType:y});await q(P),process.exit(0)}async function q(P){let I=async T=>{if(i)try{await _n("Report failed build status",()=>k.patch(`/builds/${i}/${n}`,{status:"failed",error:T,endTime:Date.now()}),3)}catch(w){$.warn(v.yellow(`Could not report failed build status: ${w.message}`))}};if(i&&P.length>0){let T=Bi(),w=[];e.quiet||T.start("Uploading artifacts to Dashboard...");try{for(let N of P){let h=ge.basename(N),M=de.statSync(N).size,U=ge.extname(h).toLowerCase(),j="application/octet-stream",X=await _n(`Create artifact upload URL for ${h}`,()=>k.post(`/builds/${i}/${n}/artifact-upload-url`,{fileName:h,fileType:j}));if(X.data.status!=="success")throw new Error(`Failed to get upload URL for ${h}`);await Qd(N,X.data.uploadUrl,j),w.push({name:h,url:X.data.downloadUrl,size:M,type:U.substring(1)})}e.quiet||T.stop("Artifacts uploaded.")}catch(N){e.quiet||T.stop("Failed to upload artifacts.");let h=`Artifact upload failed: ${N.message}`;throw $.error(v.red(h)),await I(h),new Error(h)}if(i&&w.length>0)try{$.info(v.cyan(`
+\u{1F517} Download Links:`));for(let N of w)$.info(v.dim(`  - ${N.name}: `)+v.blue.underline(N.url));await _n("Finalize build in dashboard",()=>k.patch(`/builds/${i}/${n}`,{status:"success",artifacts:w,endTime:Date.now()})),Dn(e,{status:"success",projectId:i,buildId:n,platform:e.platform,profile:g,branch:f,version:p,buildType:y,developmentClient:!!e.developmentClient,summary:b,artifacts:w}),$.success(v.green(`
+\u2713 Build completed and reported to dashboard.`)),e.maestro&&!L&&await es(i,n,e,g),e.autoSubmit&&!L&&await Fi(i,n,e,g)}catch(N){let h=`Build artifact uploaded but dashboard finalization failed: ${N.message}`;throw $.error(v.red(`
+${h}`)),await I(h),new Error(h)}}else if(i){let T="Build completed but produced no uploadable artifacts.";throw $.error(v.red(T)),await I(T),new Error(T)}}if(A){if($.info(v.cyan(`\u{1F680} Direct Build Mode: Executing on ${e.sshHost||"local"}...`)),i&&!o){let P=process.argv.slice(3).join(" ");await k.post("/builds",{projectId:i,buildId:n,platform:e.platform,status:"building",branch:f,version:p,summary:b,startTime:r,buildType:y,buildProfile:g,buildArgs:P,framework:e.framework,simulator:!!e.simulator,developmentClient:!!e.developmentClient,...ts(e,n,g,u)}),ns(e)}if(e.sshHost&&e.platform==="ios")await xr(e,n,a,i),e.autoSubmit&&await Fi(i,n,e,g);else{let P=await mi({...e,interactive:!!e.local},n,a,i,{branch:f,version:p,summary:b,buildType:y});await q(P)}return}if(B&&($.info(v.blue("\u{1F6F0}\uFE0F Cloud Initiator Mode: Preparing orchestration...")),!e.dryRun)){e.quiet||t.start("Zipping and uploading local source...");let P=await k.post("/builds/source-upload-url",{projectId:i,buildId:n});if(P.data.status!=="success")throw t.stop("Failed to get upload URL."),new Error("Failed to get source upload URL from API");Hi("SOURCE_UPLOAD",P.data.uploadUrl);let I=new Go,T=Gd(I,process.cwd(),e.platform),w=I.toBuffer();if(!e.quiet){let h=T.skipped.length>0?` Skipped: ${T.skipped.join(", ")}.`:"";t.message(`Prepared source (${T.files} files).${h}`)}e.quiet||t.message(`Uploading source (${(w.length/1024/1024).toFixed(1)} MB)...`);let N=!1;for(let h=1;h<=3;h++)try{await $n.put(P.data.uploadUrl,w,{headers:{"Content-Type":"application/zip"},maxBodyLength:1/0,maxContentLength:1/0,timeout:12e4}),N=!0;break}catch(M){if(h<3)t.message(`Upload attempt ${h} failed (${M.code||M.message}), retrying...`),await new Promise(U=>setTimeout(U,2e3*h));else throw M}if(e.quiet||t.stop("Source uploaded"),i){let h=process.argv.slice(3).join(" ");await k.post("/builds",{projectId:i,buildId:n,platform:e.platform,status:"pending",branch:f,version:p,summary:b,startTime:r,buildType:y,buildProfile:g,buildArgs:h,framework:e.framework,simulator:!!e.simulator,developmentClient:!!e.developmentClient,...ts(e,n,g,u)}),$.info(v.green("\u2713 Cloud build registered.")),ns(e)}e.platform==="android"&&await Tr(e,n,a,i,e.preBuild),e.quiet||$.info(v.cyan("\u{1F4E1} Connecting to build stream...")),await hu(i,n,e),e.maestro&&await es(i,n,e,g),e.autoSubmit&&await Fi(i,n,e,g);return}}catch(l){let a=l.message||"Build failed";l.response?.data?.message?a=l.response.data.message:l.message.includes("status code 402")?a="Insufficient wallet balance. Please add credits in the Dashboard.":l.message.includes("status code 403")&&(a="Monthly build quota exceeded. Upgrade your plan in the Dashboard."),i&&await s(a),$.error(v.red(`\u2717 Build failed: ${a}`)),process.exit(1)}};async function es(e,t,n,i){$.info(v.cyan(`
 \u{1F3BC} Queuing managed Maestro test...`)),await Ii({projectId:e,buildId:t,platform:n.platform,profile:i,maestroFlows:n.maestroFlows,maestroDevice:n.maestroDevice,maestroRetries:n.maestroRetries,maestroRecord:n.maestroRecord,maestroUseBuildSource:n.maestroUseBuildSource,maestroEnv:n.maestroEnv,quiet:n.quiet})}async function Fi(e,t,n,i){if(!e){$.error(v.red("Auto-submit requires a linked Mach project. Run `mach link` or pass --project-id.")),process.exitCode=1;return}$.info(v.cyan(`
-Auto-submit: submitting the successful build...`));try{let r=await mu(e,t);if(r?.autoSubmit){let o=r.submissionId?`${Je}/submissions/${r.submissionId}?projectId=${encodeURIComponent(e)}`:void 0,s=String(r.status||"").toLowerCase(),l=String(r.autoSubmitStatus||"").toLowerCase(),a=r.submissionId||["success","completed","succeeded"].includes(s)||["starting","submitted","failed","skipped"].includes(l);if(r.submissionId?($.info(v.green(`Auto-submit is already queued by Mach backend: ${r.submissionId}`)),$.info(v.dim(`Dashboard: ${o}`))):r.autoSubmitStatus==="failed"?$.warn(v.yellow(`Backend auto-submit failed: ${r.autoSubmitError||"Unknown error"}`)):a&&$.info(v.green("Auto-submit is registered with Mach backend; skipping local duplicate submit.")),a){dt(n,{status:r.autoSubmitStatus||"pending",projectId:e,submitId:r.submissionId,platform:n.platform,profile:i,buildId:t,dashboardUrl:o});return}}await wn({platform:n.platform,profile:i,buildProfile:i,buildId:t,projectId:e,yes:n.yes,quiet:n.quiet,track:n.submitTrack,releaseStatus:n.submitReleaseStatus,rollout:n.submitRollout,changesNotSentForReview:n.submitChangesNotSentForReview,credentialId:n.submitCredentialId,packageName:n.androidPackage,jsonOutput:n.submitJsonOutput,submitArgs:us(n,t,i)})}catch(r){$.error(v.red(`Auto-submit failed: ${r.message||r}`)),process.exitCode=1}}function us(e,t,n){let i=["--platform",e.platform,"--profile",n,"--build-id",t];return e.submitTrack&&i.push("--track",String(e.submitTrack)),e.submitReleaseStatus&&i.push("--release-status",String(e.submitReleaseStatus)),e.submitRollout!==void 0&&i.push("--rollout",String(e.submitRollout)),e.submitChangesNotSentForReview&&i.push("--changes-not-sent-for-review"),e.submitCredentialId&&i.push("--credential-id",e.submitCredentialId),e.platform==="android"&&e.androidPackage&&i.push("--package-name",e.androidPackage),e.platform==="ios"&&e.iosBundleIdentifier&&i.push("--bundle-id",e.iosBundleIdentifier),e.submitJsonOutput&&i.push("--json-output",e.submitJsonOutput),i.join(" ")}async function mu(e,t){try{let i=(await k.get(`/builds/${e}/${t}`)).data?.build;if(i?.autoSubmit)return i}catch(n){$.warn(v.dim(`Could not check backend auto-submit status: ${n.message}`))}return null}function ps(e){for(let t of Object.keys(e))e[t]===void 0&&delete e[t];return e}function gu(e,t,n){let i=n?.submit?.[t]?.android||{},r=n?.submit?.production?.android||{},o=e.submitTrack||i.track||r.track,s=e.submitReleaseStatus||i.releaseStatus||r.releaseStatus,l=e.submitRollout??i.rollout??i.userFraction??i.rolloutFraction??r.rollout??r.userFraction??r.rolloutFraction,a=e.submitChangesNotSentForReview??i.changesNotSentForReview??i.changes_not_sent_for_review??r.changesNotSentForReview??r.changes_not_sent_for_review;return ps({track:o,releaseStatus:s,rollout:l,changesNotSentForReview:a===void 0?!1:a===!0||a==="true"||a==="1"})}function ts(e,t,n,i){if(!e.autoSubmit||e.dryRun)return{};let r=e.platform==="android"?gu(e,n,i):{};return{autoSubmit:!0,autoSubmitStatus:"pending",autoSubmitOptions:ps({platform:e.platform,profile:n,buildId:t,latest:!1,...r,credentialId:e.submitCredentialId,packageName:e.platform==="android"?e.androidPackage:void 0,bundleId:e.platform==="ios"?e.iosBundleIdentifier:void 0,submitArgs:us(e,t,n)})}}function ns(e){!e.autoSubmit||e.dryRun||e.quiet||($.info(v.green("\u2713 Auto-submit has been registered with the build.")),$.info(v.dim("  You can close this terminal; submission will start after build success.")))}function is(e){return`${Je}/build/${e}`}function Dn(e,t){if(!e.jsonOutput)return;let n=ge.resolve(e.jsonOutput),i={...t,url:t.url||is(t.buildId),dashboardUrl:t.dashboardUrl||is(t.buildId),updatedAt:new Date().toISOString()};try{let r=ge.dirname(n);r&&r!=="."&&ce.mkdirSync(r,{recursive:!0}),ce.writeFileSync(n,JSON.stringify(i,null,2))}catch(r){$.warn(v.yellow(`Could not write build metadata JSON: ${r.message}`))}}async function hu(e,t,n){let i=Bi(),r="pending",o=0,s=0;for(n.quiet||i.start("Connecting to build stream...");;){try{let a=(await k.get(`/builds/${e}/${t}`)).data.build;if(a){if(r=a.status,r==="building")n.quiet||i.message("Build in progress...");else if(r==="failed")n.quiet||i.stop("Build failed."),Dn(n,{status:"failed",projectId:e,buildId:t,platform:n.platform,profile:a.buildProfile,buildType:a.buildType,developmentClient:!!a.developmentClient,version:a.version,summary:a.summary,error:a.error||"Unknown error",artifacts:a.artifacts||[]}),$.error(v.red(`
+Auto-submit: submitting the successful build...`));try{let r=await mu(e,t);if(r?.autoSubmit){let o=r.submissionId?`${Je}/submissions/${r.submissionId}?projectId=${encodeURIComponent(e)}`:void 0,s=String(r.status||"").toLowerCase(),l=String(r.autoSubmitStatus||"").toLowerCase(),a=r.submissionId||["success","completed","succeeded"].includes(s)||["starting","submitted","failed","skipped"].includes(l);if(r.submissionId?($.info(v.green(`Auto-submit is already queued by Mach backend: ${r.submissionId}`)),$.info(v.dim(`Dashboard: ${o}`))):r.autoSubmitStatus==="failed"?$.warn(v.yellow(`Backend auto-submit failed: ${r.autoSubmitError||"Unknown error"}`)):a&&$.info(v.green("Auto-submit is registered with Mach backend; skipping local duplicate submit.")),a){dt(n,{status:r.autoSubmitStatus||"pending",projectId:e,submitId:r.submissionId,platform:n.platform,profile:i,buildId:t,dashboardUrl:o});return}}await wn({platform:n.platform,profile:i,buildProfile:i,buildId:t,projectId:e,yes:n.yes,quiet:n.quiet,track:n.submitTrack,releaseStatus:n.submitReleaseStatus,rollout:n.submitRollout,changesNotSentForReview:n.submitChangesNotSentForReview,credentialId:n.submitCredentialId,packageName:n.androidPackage,jsonOutput:n.submitJsonOutput,submitArgs:us(n,t,i)})}catch(r){$.error(v.red(`Auto-submit failed: ${r.message||r}`)),process.exitCode=1}}function us(e,t,n){let i=["--platform",e.platform,"--profile",n,"--build-id",t];return e.submitTrack&&i.push("--track",String(e.submitTrack)),e.submitReleaseStatus&&i.push("--release-status",String(e.submitReleaseStatus)),e.submitRollout!==void 0&&i.push("--rollout",String(e.submitRollout)),e.submitChangesNotSentForReview&&i.push("--changes-not-sent-for-review"),e.submitCredentialId&&i.push("--credential-id",e.submitCredentialId),e.platform==="android"&&e.androidPackage&&i.push("--package-name",e.androidPackage),e.platform==="ios"&&e.iosBundleIdentifier&&i.push("--bundle-id",e.iosBundleIdentifier),e.submitJsonOutput&&i.push("--json-output",e.submitJsonOutput),i.join(" ")}async function mu(e,t){try{let i=(await k.get(`/builds/${e}/${t}`)).data?.build;if(i?.autoSubmit)return i}catch(n){$.warn(v.dim(`Could not check backend auto-submit status: ${n.message}`))}return null}function ps(e){for(let t of Object.keys(e))e[t]===void 0&&delete e[t];return e}function gu(e,t,n){let i=n?.submit?.[t]?.android||{},r=n?.submit?.production?.android||{},o=e.submitTrack||i.track||r.track,s=e.submitReleaseStatus||i.releaseStatus||r.releaseStatus,l=e.submitRollout??i.rollout??i.userFraction??i.rolloutFraction??r.rollout??r.userFraction??r.rolloutFraction,a=e.submitChangesNotSentForReview??i.changesNotSentForReview??i.changes_not_sent_for_review??r.changesNotSentForReview??r.changes_not_sent_for_review;return ps({track:o,releaseStatus:s,rollout:l,changesNotSentForReview:a===void 0?!1:a===!0||a==="true"||a==="1"})}function ts(e,t,n,i){if(!e.autoSubmit||e.dryRun)return{};let r=e.platform==="android"?gu(e,n,i):{};return{autoSubmit:!0,autoSubmitStatus:"pending",autoSubmitOptions:ps({platform:e.platform,profile:n,buildId:t,latest:!1,...r,credentialId:e.submitCredentialId,packageName:e.platform==="android"?e.androidPackage:void 0,bundleId:e.platform==="ios"?e.iosBundleIdentifier:void 0,submitArgs:us(e,t,n)})}}function ns(e){!e.autoSubmit||e.dryRun||e.quiet||($.info(v.green("\u2713 Auto-submit has been registered with the build.")),$.info(v.dim("  You can close this terminal; submission will start after build success.")))}function is(e){return`${Je}/build/${e}`}function Dn(e,t){if(!e.jsonOutput)return;let n=ge.resolve(e.jsonOutput),i={...t,url:t.url||is(t.buildId),dashboardUrl:t.dashboardUrl||is(t.buildId),updatedAt:new Date().toISOString()};try{let r=ge.dirname(n);r&&r!=="."&&de.mkdirSync(r,{recursive:!0}),de.writeFileSync(n,JSON.stringify(i,null,2))}catch(r){$.warn(v.yellow(`Could not write build metadata JSON: ${r.message}`))}}async function hu(e,t,n){let i=Bi(),r="pending",o=0,s=0;for(n.quiet||i.start("Connecting to build stream...");;){try{let a=(await k.get(`/builds/${e}/${t}`)).data.build;if(a){if(r=a.status,r==="building")n.quiet||i.message("Build in progress...");else if(r==="failed")n.quiet||i.stop("Build failed."),Dn(n,{status:"failed",projectId:e,buildId:t,platform:n.platform,profile:a.buildProfile,buildType:a.buildType,developmentClient:!!a.developmentClient,version:a.version,summary:a.summary,error:a.error||"Unknown error",artifacts:a.artifacts||[]}),$.error(v.red(`
 \u2717 Build failed: ${a.error||"Unknown error"}`)),process.exit(1);else if(r==="completed"||r==="success"){n.quiet||i.stop("Build successful!"),Dn(n,{status:r,projectId:e,buildId:t,platform:n.platform,profile:a.buildProfile,buildType:a.buildType,developmentClient:!!a.developmentClient,version:a.version,summary:a.summary,artifacts:a.artifacts||[]}),$.success(v.green(`
 \u2713 Build completed successfully!`));try{n.quiet||($.info(v.magenta(`
 \u{1F4F1} Installation Hub:`)),$.info(v.dim("  - View & Install Build: ")+v.white.underline(`${Je}/build/${t}`)))}catch{}return}else if(r!=="pending"){n.quiet||i.stop(`Build status: ${r}`);return}}try{let u=(await k.get(`/builds/${e}/${t}/logs`)).data;if(u&&typeof u=="string"&&!n.quiet){let c=u.split(`
 `);if(c.length>o){for(let f=o;f<c.length;f++)c[f].trim()&&console.log(v.dim(`  ${c[f]}`));o=c.length}}}catch{}s=0}catch{s++,s>10&&(i.stop("Connection lost."),$.error(v.red(`
-\u2717 Lost connection to Dashboard API.`)),process.exit(1))}await new Promise(l=>setTimeout(l,3e3))}}import*as xn from"http";import*as bs from"net";import{execFile as Su,execFileSync as mt,execSync as Tn,spawn as fs}from"child_process";import pe from"chalk";import{log as ee}from"@clack/prompts";import yu from"axios";import se from"fs";import Ke from"os";import Z from"path";var st=7070,Zt=`http://127.0.0.1:${st}`,Lt="com.radhya.mach.agent",kt="Mach Agent",xt=`${Lt}.service`,bu=5e3,Eu=3e3,Cn=null,Nn=null,Ve=()=>Z.join(Ke.homedir(),m.configDir),Es=()=>Z.join(Ke.homedir(),"Library","LaunchAgents"),kn=()=>Z.join(Es(),`${Lt}.plist`),As=()=>Z.join(Ke.homedir(),".config","systemd","user"),Gi=()=>Z.join(As(),xt),Ki=()=>Z.join(Ve(),"agent.cmd");function Vi(){return`gui/${process.getuid?.()||Number(Tn("id -u").toString().trim())}`}function Is(e){return e.replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;").replace(/"/g,"&quot;").replace(/'/g,"&apos;")}function qt(e){return`<string>${Is(e)}</string>`}function zi(){let e=process.argv[1]?se.realpathSync(process.argv[1]):"";if(!e||!se.existsSync(e))throw new Error("Could not resolve the current Mach CLI entrypoint.");return[process.execPath,e,"agent","run"]}function Wi(){let e=ws(),t=process.platform==="win32"?[process.env.SystemRoot?Z.join(process.env.SystemRoot,"System32"):void 0,process.env.SystemRoot]:["/opt/homebrew/bin","/usr/local/bin","/usr/bin","/bin","/usr/sbin","/sbin"],n={HOME:Ke.homedir(),PATH:[process.env.PATH,...e.flatMap(i=>[Z.join(i,"platform-tools"),Z.join(i,"emulator"),Z.join(i,"cmdline-tools","latest","bin"),Z.join(i,"tools","bin")]),...t].filter(Boolean).join(Z.delimiter)};for(let i of["ANDROID_HOME","ANDROID_SDK_ROOT","JAVA_HOME","SHELL"])process.env[i]&&(n[i]=process.env[i]);return n}function ws(){let e=[process.env.ANDROID_HOME,process.env.ANDROID_SDK_ROOT];if(process.platform==="darwin")e.push(Z.join(Ke.homedir(),"Library","Android","sdk"));else if(process.platform==="linux")e.push(Z.join(Ke.homedir(),"Android","Sdk"),Z.join(Ke.homedir(),"Android","sdk"),"/opt/android-sdk","/usr/lib/android-sdk");else if(process.platform==="win32"){let t=process.env.LOCALAPPDATA,n=process.env.USERPROFILE||Ke.homedir();e.push(t?Z.join(t,"Android","Sdk"):void 0,Z.join(n,"AppData","Local","Android","Sdk"))}return Array.from(new Set(e.filter(t=>!!t)))}function Au(e){return process.platform==="win32"&&!e.toLowerCase().endsWith(".exe")?`${e}.exe`:e}function _s(e,t){let n=Au(e);for(let i of ws()){let r=Z.join(i,t,n);if(se.existsSync(r))return r}return n}function Rs(){return _s("adb","platform-tools")}function $s(){return _s("emulator","emulator")}function ji(e){return`"${e.replace(/\\/g,"\\\\").replace(/"/g,'\\"').replace(/%/g,"%%")}"`}function Iu(){if(process.platform!=="linux")throw new Error("Linux service install requires Linux.");se.mkdirSync(Ve(),{recursive:!0}),se.mkdirSync(As(),{recursive:!0});let e=zi(),t=Wi(),n=Object.entries(t).map(([r,o])=>`Environment=${ji(`${r}=${o}`)}`).join(`
+\u2717 Lost connection to Dashboard API.`)),process.exit(1))}await new Promise(l=>setTimeout(l,3e3))}}import*as xn from"http";import*as bs from"net";import{execFile as Su,execFileSync as mt,execSync as Tn,spawn as fs}from"child_process";import pe from"chalk";import{log as ee}from"@clack/prompts";import yu from"axios";import ae from"fs";import Ke from"os";import Z from"path";var st=7070,Zt=`http://127.0.0.1:${st}`,Lt="com.radhya.mach.agent",kt="Mach Agent",xt=`${Lt}.service`,bu=5e3,Eu=3e3,Cn=null,Nn=null,Ve=()=>Z.join(Ke.homedir(),m.configDir),Es=()=>Z.join(Ke.homedir(),"Library","LaunchAgents"),kn=()=>Z.join(Es(),`${Lt}.plist`),As=()=>Z.join(Ke.homedir(),".config","systemd","user"),Gi=()=>Z.join(As(),xt),Ki=()=>Z.join(Ve(),"agent.cmd");function Vi(){return`gui/${process.getuid?.()||Number(Tn("id -u").toString().trim())}`}function Is(e){return e.replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;").replace(/"/g,"&quot;").replace(/'/g,"&apos;")}function qt(e){return`<string>${Is(e)}</string>`}function zi(){let e=process.argv[1]?ae.realpathSync(process.argv[1]):"";if(!e||!ae.existsSync(e))throw new Error("Could not resolve the current Mach CLI entrypoint.");return[process.execPath,e,"agent","run"]}function Wi(){let e=ws(),t=process.platform==="win32"?[process.env.SystemRoot?Z.join(process.env.SystemRoot,"System32"):void 0,process.env.SystemRoot]:["/opt/homebrew/bin","/usr/local/bin","/usr/bin","/bin","/usr/sbin","/sbin"],n={HOME:Ke.homedir(),PATH:[process.env.PATH,...e.flatMap(i=>[Z.join(i,"platform-tools"),Z.join(i,"emulator"),Z.join(i,"cmdline-tools","latest","bin"),Z.join(i,"tools","bin")]),...t].filter(Boolean).join(Z.delimiter)};for(let i of["ANDROID_HOME","ANDROID_SDK_ROOT","JAVA_HOME","SHELL"])process.env[i]&&(n[i]=process.env[i]);return n}function ws(){let e=[process.env.ANDROID_HOME,process.env.ANDROID_SDK_ROOT];if(process.platform==="darwin")e.push(Z.join(Ke.homedir(),"Library","Android","sdk"));else if(process.platform==="linux")e.push(Z.join(Ke.homedir(),"Android","Sdk"),Z.join(Ke.homedir(),"Android","sdk"),"/opt/android-sdk","/usr/lib/android-sdk");else if(process.platform==="win32"){let t=process.env.LOCALAPPDATA,n=process.env.USERPROFILE||Ke.homedir();e.push(t?Z.join(t,"Android","Sdk"):void 0,Z.join(n,"AppData","Local","Android","Sdk"))}return Array.from(new Set(e.filter(t=>!!t)))}function Au(e){return process.platform==="win32"&&!e.toLowerCase().endsWith(".exe")?`${e}.exe`:e}function _s(e,t){let n=Au(e);for(let i of ws()){let r=Z.join(i,t,n);if(ae.existsSync(r))return r}return n}function Rs(){return _s("adb","platform-tools")}function $s(){return _s("emulator","emulator")}function ji(e){return`"${e.replace(/\\/g,"\\\\").replace(/"/g,'\\"').replace(/%/g,"%%")}"`}function Iu(){if(process.platform!=="linux")throw new Error("Linux service install requires Linux.");ae.mkdirSync(Ve(),{recursive:!0}),ae.mkdirSync(As(),{recursive:!0});let e=zi(),t=Wi(),n=Object.entries(t).map(([r,o])=>`Environment=${ji(`${r}=${o}`)}`).join(`
 `),i=`[Unit]
 Description=Mach local device agent
 After=default.target
@@ -1498,12 +1498,12 @@ StandardError=append:%h/${m.configDir}/agent.error.log
 
 [Install]
 WantedBy=default.target
-`;return se.writeFileSync(Gi(),i),Gi()}function ft(e,t={}){try{return mt("systemctl",["--user",...e],{stdio:t.ignoreError?"ignore":"pipe"}),!0}catch(n){if(t.ignoreError)return!1;throw n}}function wu(){if(process.platform!=="win32")throw new Error("Windows agent script requires Windows.");se.mkdirSync(Ve(),{recursive:!0});let e=Wi(),[t,n,...i]=zi(),r=Z.join(Ve(),"agent.log"),o=Z.join(Ve(),"agent.error.log"),s=Object.entries(e).map(([d,u])=>`set "${d}=${u}"`).join(`\r
+`;return ae.writeFileSync(Gi(),i),Gi()}function ft(e,t={}){try{return mt("systemctl",["--user",...e],{stdio:t.ignoreError?"ignore":"pipe"}),!0}catch(n){if(t.ignoreError)return!1;throw n}}function wu(){if(process.platform!=="win32")throw new Error("Windows agent script requires Windows.");ae.mkdirSync(Ve(),{recursive:!0});let e=Wi(),[t,n,...i]=zi(),r=Z.join(Ve(),"agent.log"),o=Z.join(Ve(),"agent.error.log"),s=Object.entries(e).map(([d,u])=>`set "${d}=${u}"`).join(`\r
 `),l=i.map(d=>`"${d.replace(/"/g,'\\"')}"`).join(" "),a=`@echo off\r
 ${s}\r
 cd /d "${Ke.homedir()}"\r
 "${t}" "${n}" ${l} >> "${r}" 2>> "${o}"\r
-`;return se.writeFileSync(Ki(),a),Ki()}function Qt(e,t={}){try{return mt("schtasks.exe",e,{stdio:t.ignoreError?"ignore":"pipe"}),!0}catch(n){if(t.ignoreError)return!1;throw n}}function _u(){if(process.platform!=="darwin")throw new Error("Background agent install currently supports macOS only.");se.mkdirSync(Ve(),{recursive:!0}),se.mkdirSync(Es(),{recursive:!0});let e=zi(),t=Wi(),n=Z.join(Ve(),"agent.log"),i=Z.join(Ve(),"agent.error.log"),r=Object.entries(t).map(([l,a])=>`      <key>${Is(l)}</key>
+`;return ae.writeFileSync(Ki(),a),Ki()}function Qt(e,t={}){try{return mt("schtasks.exe",e,{stdio:t.ignoreError?"ignore":"pipe"}),!0}catch(n){if(t.ignoreError)return!1;throw n}}function _u(){if(process.platform!=="darwin")throw new Error("Background agent install currently supports macOS only.");ae.mkdirSync(Ve(),{recursive:!0}),ae.mkdirSync(Es(),{recursive:!0});let e=zi(),t=Wi(),n=Z.join(Ve(),"agent.log"),i=Z.join(Ve(),"agent.error.log"),r=Object.entries(t).map(([l,a])=>`      <key>${Is(l)}</key>
       ${qt(a)}`).join(`
 `),o=e.map(l=>`      ${qt(l)}`).join(`
 `),s=`<?xml version="1.0" encoding="UTF-8"?>
@@ -1528,9 +1528,9 @@ ${r}
   ${qt(i)}
 </dict>
 </plist>
-`;return se.writeFileSync(kn(),s),kn()}function pt(e,t={}){try{return mt("launchctl",e,{stdio:t.ignoreError?"ignore":"pipe"}),!0}catch(n){if(t.ignoreError)return!1;throw n}}function Ru(e){return new Promise(t=>setTimeout(t,e))}function Ln(e,t,n=bu){return new Promise((i,r)=>{Su(e,t,{timeout:n,maxBuffer:10*1024*1024,windowsHide:!0},(o,s,l)=>{if(o){let a=l?.toString().trim();r(new Error(a||o.message));return}i(s?.toString()||"")})})}async function vs(){if(typeof fetch=="function"){let e=new AbortController,t=setTimeout(()=>e.abort(),3e3);try{return(await fetch(`${Zt}/health`,{signal:e.signal})).ok}catch{return!1}finally{clearTimeout(t)}}return new Promise(e=>{let t=!1,n=r=>{t||(t=!0,e(r))},i=xn.get(`${Zt}/health`,r=>{r.resume(),n(r.statusCode===200)});i.setTimeout(3e3,()=>{i.destroy(),n(!1)}),i.on("error",()=>n(!1))})}async function $u(e=8e3){let t=Date.now()+e;for(;Date.now()<t;){if(await vs())return!0;await Ru(250)}return!1}async function Ps(){return new Promise(e=>{let t=!1,n=bs.createConnection({host:"127.0.0.1",port:st}),i=r=>{t||(t=!0,n.destroy(),e(r))};n.setTimeout(1e3),n.once("connect",()=>i(!0)),n.once("timeout",()=>i(!1)),n.once("error",()=>i(!1))})}async function Yi(){if(await $u()){ee.success(pe.green("Mach agent installed and started."));return}if(await Ps()){ee.warn(`Mach agent service is installed, but port ${st} is held by a process that is not answering /health.`),ee.info(pe.dim(`Run \`${m.nameLower} agent stop\`, close any foreground \`${m.nameLower} agent\` terminal, then run \`${m.nameLower} agent install\` again.`));return}ee.warn(`Mach agent service is installed, but it did not start listening on ${Zt}.`)}async function vu(){let e=_u(),t=Vi();pt(["bootout",t,e],{ignoreError:!0}),pt(["bootstrap",t,e],{ignoreError:!0})||pt(["load","-w",e]),pt(["enable",`${t}/${Lt}`],{ignoreError:!0}),pt(["kickstart","-k",`${t}/${Lt}`],{ignoreError:!0}),await Yi(),ee.info(pe.dim(`It will start automatically when you log in. Plist: ${e}`)),ee.info(pe.dim(`Logs: ${Z.join(Ve(),"agent.log")}`))}async function Os(){let e=kn(),t=Vi();pt(["bootout",t,e],{ignoreError:!0})||pt(["unload","-w",e],{ignoreError:!0})?ee.success(pe.green("Mach agent service stopped.")):ee.warn("Mach agent service was not loaded.")}async function Pu(){await Os();let e=kn();se.existsSync(e)&&se.unlinkSync(e),ee.success(pe.green("Mach agent service uninstalled."))}async function Ou(){let e=Iu();ft(["daemon-reload"]),ft(["enable","--now",xt]),await Yi(),ee.info(pe.dim(`It will start automatically when you log in. Service: ${e}`)),ee.info(pe.dim(`Logs: ${Z.join(Ve(),"agent.log")}`))}async function Du(){ft(["stop",xt],{ignoreError:!0})?ee.success(pe.green("Mach agent service stopped.")):ee.warn("Mach agent service was not running.")}async function Cu(){ft(["disable","--now",xt],{ignoreError:!0}),ft(["daemon-reload"],{ignoreError:!0});let e=Gi();se.existsSync(e)&&se.unlinkSync(e),ft(["daemon-reload"],{ignoreError:!0}),ee.success(pe.green("Mach agent service uninstalled."))}async function Nu(){let e=wu();Qt(["/Create","/TN",kt,"/SC","ONLOGON","/TR",`"${e}"`,"/RL","LIMITED","/F"]),Qt(["/Run","/TN",kt],{ignoreError:!0}),await Yi(),ee.info(pe.dim(`It will start automatically when you log in. Task: ${kt}`)),ee.info(pe.dim(`Logs: ${Z.join(Ve(),"agent.log")}`))}async function Ds(){Qt(["/End","/TN",kt],{ignoreError:!0})?ee.success(pe.green("Mach agent task stopped.")):ee.warn("Mach agent task was not running.")}async function Tu(){await Ds(),Qt(["/Delete","/TN",kt,"/F"],{ignoreError:!0});let e=Ki();se.existsSync(e)&&se.unlinkSync(e),ee.success(pe.green("Mach agent task uninstalled."))}async function ms(){if(process.platform==="darwin")return vu();if(process.platform==="linux")return Ou();if(process.platform==="win32")return Nu();throw new Error(`Background agent install is not supported on ${process.platform}.`)}async function gs(){if(process.platform==="darwin")return Os();if(process.platform==="linux")return Du();if(process.platform==="win32")return Ds();ee.warn(`Background agent service control is not supported on ${process.platform}.`)}async function ku(){if(process.platform==="darwin")return Pu();if(process.platform==="linux")return Cu();if(process.platform==="win32")return Tu();ee.warn(`Background agent uninstall is not supported on ${process.platform}.`)}async function Lu(){let e=await vs(),t=e?!0:await Ps();if(e?ee.success(pe.green(`Mach agent is online at ${Zt}`)):t?ee.warn(`Mach agent port is open, but /health did not respond. Run \`${m.nameLower} agent restart\` if the dashboard still shows offline.`):ee.warn(`Mach agent is not responding at ${Zt}`),process.platform==="darwin"){let n=pt(["print",`${Vi()}/${Lt}`],{ignoreError:!0});ee.info(pe.dim(`Login service: ${n?"installed/loaded":"not loaded"}`))}else if(process.platform==="linux"){let n=ft(["is-enabled",xt],{ignoreError:!0}),i=ft(["is-active",xt],{ignoreError:!0});ee.info(pe.dim(`Login service: ${n?"enabled":"not enabled"} / ${i?"active":"inactive"}`))}else if(process.platform==="win32"){let n=Qt(["/Query","/TN",kt],{ignoreError:!0});ee.info(pe.dim(`Login task: ${n?"installed":"not installed"}`))}}async function xu(){let e=[];try{(await Ln(Rs(),["devices","-l"])).split(`
+`;return ae.writeFileSync(kn(),s),kn()}function pt(e,t={}){try{return mt("launchctl",e,{stdio:t.ignoreError?"ignore":"pipe"}),!0}catch(n){if(t.ignoreError)return!1;throw n}}function Ru(e){return new Promise(t=>setTimeout(t,e))}function Ln(e,t,n=bu){return new Promise((i,r)=>{Su(e,t,{timeout:n,maxBuffer:10*1024*1024,windowsHide:!0},(o,s,l)=>{if(o){let a=l?.toString().trim();r(new Error(a||o.message));return}i(s?.toString()||"")})})}async function vs(){if(typeof fetch=="function"){let e=new AbortController,t=setTimeout(()=>e.abort(),3e3);try{return(await fetch(`${Zt}/health`,{signal:e.signal})).ok}catch{return!1}finally{clearTimeout(t)}}return new Promise(e=>{let t=!1,n=r=>{t||(t=!0,e(r))},i=xn.get(`${Zt}/health`,r=>{r.resume(),n(r.statusCode===200)});i.setTimeout(3e3,()=>{i.destroy(),n(!1)}),i.on("error",()=>n(!1))})}async function $u(e=8e3){let t=Date.now()+e;for(;Date.now()<t;){if(await vs())return!0;await Ru(250)}return!1}async function Ps(){return new Promise(e=>{let t=!1,n=bs.createConnection({host:"127.0.0.1",port:st}),i=r=>{t||(t=!0,n.destroy(),e(r))};n.setTimeout(1e3),n.once("connect",()=>i(!0)),n.once("timeout",()=>i(!1)),n.once("error",()=>i(!1))})}async function Yi(){if(await $u()){ee.success(pe.green("Mach agent installed and started."));return}if(await Ps()){ee.warn(`Mach agent service is installed, but port ${st} is held by a process that is not answering /health.`),ee.info(pe.dim(`Run \`${m.nameLower} agent stop\`, close any foreground \`${m.nameLower} agent\` terminal, then run \`${m.nameLower} agent install\` again.`));return}ee.warn(`Mach agent service is installed, but it did not start listening on ${Zt}.`)}async function vu(){let e=_u(),t=Vi();pt(["bootout",t,e],{ignoreError:!0}),pt(["bootstrap",t,e],{ignoreError:!0})||pt(["load","-w",e]),pt(["enable",`${t}/${Lt}`],{ignoreError:!0}),pt(["kickstart","-k",`${t}/${Lt}`],{ignoreError:!0}),await Yi(),ee.info(pe.dim(`It will start automatically when you log in. Plist: ${e}`)),ee.info(pe.dim(`Logs: ${Z.join(Ve(),"agent.log")}`))}async function Os(){let e=kn(),t=Vi();pt(["bootout",t,e],{ignoreError:!0})||pt(["unload","-w",e],{ignoreError:!0})?ee.success(pe.green("Mach agent service stopped.")):ee.warn("Mach agent service was not loaded.")}async function Pu(){await Os();let e=kn();ae.existsSync(e)&&ae.unlinkSync(e),ee.success(pe.green("Mach agent service uninstalled."))}async function Ou(){let e=Iu();ft(["daemon-reload"]),ft(["enable","--now",xt]),await Yi(),ee.info(pe.dim(`It will start automatically when you log in. Service: ${e}`)),ee.info(pe.dim(`Logs: ${Z.join(Ve(),"agent.log")}`))}async function Du(){ft(["stop",xt],{ignoreError:!0})?ee.success(pe.green("Mach agent service stopped.")):ee.warn("Mach agent service was not running.")}async function Cu(){ft(["disable","--now",xt],{ignoreError:!0}),ft(["daemon-reload"],{ignoreError:!0});let e=Gi();ae.existsSync(e)&&ae.unlinkSync(e),ft(["daemon-reload"],{ignoreError:!0}),ee.success(pe.green("Mach agent service uninstalled."))}async function Nu(){let e=wu();Qt(["/Create","/TN",kt,"/SC","ONLOGON","/TR",`"${e}"`,"/RL","LIMITED","/F"]),Qt(["/Run","/TN",kt],{ignoreError:!0}),await Yi(),ee.info(pe.dim(`It will start automatically when you log in. Task: ${kt}`)),ee.info(pe.dim(`Logs: ${Z.join(Ve(),"agent.log")}`))}async function Ds(){Qt(["/End","/TN",kt],{ignoreError:!0})?ee.success(pe.green("Mach agent task stopped.")):ee.warn("Mach agent task was not running.")}async function Tu(){await Ds(),Qt(["/Delete","/TN",kt,"/F"],{ignoreError:!0});let e=Ki();ae.existsSync(e)&&ae.unlinkSync(e),ee.success(pe.green("Mach agent task uninstalled."))}async function ms(){if(process.platform==="darwin")return vu();if(process.platform==="linux")return Ou();if(process.platform==="win32")return Nu();throw new Error(`Background agent install is not supported on ${process.platform}.`)}async function gs(){if(process.platform==="darwin")return Os();if(process.platform==="linux")return Du();if(process.platform==="win32")return Ds();ee.warn(`Background agent service control is not supported on ${process.platform}.`)}async function ku(){if(process.platform==="darwin")return Pu();if(process.platform==="linux")return Cu();if(process.platform==="win32")return Tu();ee.warn(`Background agent uninstall is not supported on ${process.platform}.`)}async function Lu(){let e=await vs(),t=e?!0:await Ps();if(e?ee.success(pe.green(`Mach agent is online at ${Zt}`)):t?ee.warn(`Mach agent port is open, but /health did not respond. Run \`${m.nameLower} agent restart\` if the dashboard still shows offline.`):ee.warn(`Mach agent is not responding at ${Zt}`),process.platform==="darwin"){let n=pt(["print",`${Vi()}/${Lt}`],{ignoreError:!0});ee.info(pe.dim(`Login service: ${n?"installed/loaded":"not loaded"}`))}else if(process.platform==="linux"){let n=ft(["is-enabled",xt],{ignoreError:!0}),i=ft(["is-active",xt],{ignoreError:!0});ee.info(pe.dim(`Login service: ${n?"enabled":"not enabled"} / ${i?"active":"inactive"}`))}else if(process.platform==="win32"){let n=Qt(["/Query","/TN",kt],{ignoreError:!0});ee.info(pe.dim(`Login task: ${n?"installed":"not installed"}`))}}async function xu(){let e=[];try{(await Ln(Rs(),["devices","-l"])).split(`
 `).forEach(n=>{if(n.includes("List of devices")||!n.trim())return;let i=n.split(/\s+/);if(i.length<2||i[1]!=="device")return;let r=i[0],o=n.match(/model:([^\s]+)/);e.push({id:r,platform:"android",type:r.startsWith("emulator-")?"emulator":"physical",name:o?o[1].replace(/_/g," "):r,status:"online",details:n.trim()})})}catch{}try{let n=(await Ln($s(),["-list-avds"])).split(`
-`).filter(r=>!!r.trim()),i=e.some(r=>r.platform==="android"&&r.id.startsWith("emulator-"));n.forEach(r=>{i||e.push({id:r,platform:"android",type:"emulator",name:r.replace(/_/g," "),status:"offline",details:`Android Virtual Device: ${r}`})})}catch{}return e}async function Cs(){if(process.platform!=="darwin")return[];try{let e=await Ln("/usr/bin/xcrun",["simctl","list","devices","--json"]),t=JSON.parse(e),n=[];return Object.entries(t.devices||{}).forEach(([i,r])=>{r.forEach(o=>{o.isAvailable&&n.push({id:o.udid,platform:"ios",type:"simulator",name:o.name,status:o.state?.toLowerCase()==="booted"?"online":"offline",runtime:i,details:`${o.name} (${i})`})})}),n}catch{return[]}}async function Mu(){if(process.platform!=="darwin")return[];try{let e=await Ln("/usr/bin/xcrun",["devicectl","list","devices","--json-output","-"]);return(JSON.parse(e).result?.devices||[]).filter(n=>{let i=n.connectionProperties?.transportType;return i==="wired"||i==="localNetwork"}).map(n=>{let i=n.connectionProperties?.transportType,r=n.deviceProperties?.name||"iPhone";return{id:n.identifier,platform:"ios",type:"physical",name:r,status:"online",details:`${r} (${n.model?.name||n.hardwareModel||""}) - ${i}`}})}catch{return[]}}async function Uu(e){let t=await Cs(),n=t.find(r=>r.id===e);if(n)return n;let i=t.filter(r=>r.status==="online");return i.length===1?i[0]:null}async function Fu(){let[e,t,n]=await Promise.all([xu(),Cs(),Mu()]);return[...e,...t,...n]}async function Bu(){let e=Date.now();return Cn&&e-Cn.updatedAt<Eu?Cn.targets:(Nn||(Nn=Fu().then(t=>(Cn={targets:t,updatedAt:Date.now()},t)).finally(()=>{Nn=null})),Nn)}async function hs(e){let t=[];for await(let n of e)t.push(Buffer.isBuffer(n)?n:Buffer.from(n));return t.length===0?{}:JSON.parse(Buffer.concat(t).toString("utf-8"))}async function Hu(e,t){let n=await yu({method:"GET",url:e,responseType:"stream",timeout:12e4}),i=se.createWriteStream(t);n.data.pipe(i),await new Promise((r,o)=>{i.on("finish",r),i.on("error",o)})}function Ss(e,t){let n=e?.stderr?.toString?.().trim();if(n)return n;let i=e?.stdout?.toString?.().trim();return i||e?.message||t}function ju(e,t){return mt("/usr/libexec/PlistBuddy",["-c",`Print :${t}`,e],{encoding:"utf-8"}).trim()}function Gu(e){let t=Z.join(e,"Info.plist");if(!se.existsSync(t))throw new Error(`Could not validate iOS app executable: ${t} not found.`);let n=ju(t,"CFBundleExecutable"),i=Z.join(e,n);if(!se.existsSync(i))throw new Error(`Could not validate iOS app executable: ${i} not found.`);return i}function Ku(){return process.arch==="arm64"?"arm64":"x86_64"}function Vu(e){return se.existsSync(e)?se.readdirSync(e).map(t=>Z.join(e,t)).filter(t=>t.endsWith(".app")&&se.statSync(t).isDirectory()):[]}function ys(e,t){let n=Vu(e);if(n.length===1)return n[0];if(n.length>1)throw new Error(`Multiple .app bundles found in ${t}: ${n.map(i=>Z.basename(i)).join(", ")}. Mach cannot safely choose which app to install.`);return""}function zu(e){let t=Gu(e),n=Ku(),i="",r="";try{i=mt("lipo",["-info",t],{encoding:"utf-8"}).trim()}catch(o){throw new Error(`Could not inspect iOS simulator app architecture for ${Z.basename(e)}: ${o.message}`)}if(!new RegExp(`\\b${n}\\b`).test(i))throw new Error(`This iOS simulator artifact cannot be installed because ${Z.basename(e)} does not include the ${n} simulator architecture. lipo output: ${i}. Rebuild the app with the latest Mach CLI and make sure the profile is a simulator build.`);try{r=mt("/usr/bin/xcrun",["vtool","-show-build",t],{encoding:"utf-8"}).trim()}catch(o){throw new Error(`Could not inspect iOS simulator app platform for ${Z.basename(e)}: ${o.message}`)}if(!/\bplatform\s+IOSSIMULATOR\b/i.test(r))throw new Error(`This iOS simulator artifact cannot be installed because ${Z.basename(e)} was built for the wrong Apple platform. A simulator artifact must contain platform IOSSIMULATOR. vtool output: ${r}. Rebuild the app with the latest Mach CLI.`)}async function Wu(e,t,n){let i=n||(t.toLowerCase().includes(".apk")?"android":"ios"),r=t.toLowerCase().includes(".ipa"),o=se.mkdtempSync(Z.join(Ke.tmpdir(),`${st}-install-`)),s=Z.join(o,i==="android"?"install.apk":r?"install.ipa":"install.zip");try{if(await Hu(t,s),i==="android"){mt(Rs(),["-s",e,"install","-r",s],{stdio:"pipe"});return}if(process.platform!=="darwin")throw new Error("iOS local install requires macOS.");Tn(`unzip -o ${JSON.stringify(s)} -d ${JSON.stringify(o)}`,{stdio:"pipe"});let l=Z.join(o,"Payload"),a=se.existsSync(l),d=r||a,u="";if(d?u=ys(l,"Payload"):u=ys(o,"the simulator artifact"),!u)throw new Error(`No .app bundle found inside the ${r?"IPA":"archive"}.`);let c=d?null:await Uu(e);if(c){try{zu(u),mt("/usr/bin/xcrun",["simctl","install",c.id,u],{stdio:"pipe"})}catch(f){throw new Error(Ss(f,"iOS Simulator install failed."))}return}if(!d)throw new Error("Selected iOS Simulator was not found. Refresh Install Hub devices or boot one simulator and try again.");try{Tn(`/usr/bin/xcrun devicectl device install app --device ${JSON.stringify(e)} ${JSON.stringify(u)}`,{stdio:"pipe"})}catch(f){throw new Error(Ss(f,"iOS device install failed."))}}finally{se.rmSync(o,{recursive:!0,force:!0})}}function Yu(e,t){if(!e)throw new Error("Device id is required.");if(t==="ios"){if(process.platform!=="darwin")throw new Error("iOS Simulator launch requires macOS.");return Tn(`/usr/bin/xcrun simctl boot ${JSON.stringify(e)}`,{stdio:"pipe"}),fs("open",["-a","Simulator"],{detached:!0,stdio:"ignore"}).unref(),"Simulator booting..."}if(t==="android")return fs($s(),["-avd",e],{detached:!0,stdio:"ignore",windowsHide:!0}).unref(),"Emulator booting in background...";throw new Error("Invalid platform.")}async function Ju(){process.platform!=="darwin"&&ee.warn("Running on non-macOS \u2014 iOS discovery unavailable, Android only.");let e=xn.createServer((i,r)=>{if(r.setHeader("Access-Control-Allow-Origin","*"),r.setHeader("Access-Control-Allow-Methods","GET, POST, OPTIONS"),r.setHeader("Access-Control-Allow-Headers","Content-Type, Authorization"),i.method==="OPTIONS"){r.writeHead(204),r.end();return}let o=new URL(i.url||"/",`http://localhost:${st}`);if(i.method==="GET"&&o.pathname==="/local/devices"){Bu().then(s=>{r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",targets:s}))}).catch(s=>{r.writeHead(500,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:s.message}))});return}if(i.method==="GET"&&o.pathname==="/health"){r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",service:"mach-agent",port:st,platform:process.platform}));return}if(i.method==="POST"&&o.pathname==="/install-local"){t(i,r);return}if(i.method==="POST"&&o.pathname==="/local/boot"){n(i,r);return}r.writeHead(404),r.end()}),t=async(i,r)=>{try{let{deviceId:o,artifactUrl:s,platform:l}=await hs(i);if(!o||!s){r.writeHead(400,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:"deviceId and artifactUrl are required"}));return}await Wu(o,s,l),r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",message:`Installed on ${o}`}))}catch(o){r.writeHead(500,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:o.message||"Local install failed"}))}},n=async(i,r)=>{try{let{id:o,platform:s}=await hs(i),l=Yu(o,s);r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",message:l}))}catch(o){r.writeHead(500,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:o.message||"Local device launch failed"}))}};e.listen(st,"127.0.0.1",()=>{ee.success(pe.green(`Local device agent running on http://localhost:${st}`)),ee.info(pe.dim("Keep this running while using the Install Hub on the dashboard.")),ee.info(pe.dim("Press Ctrl+C to stop."))}),e.on("error",i=>{i.code==="EADDRINUSE"?ee.error(`Port ${st} is already in use \u2014 agent may already be running.`):ee.error(`Agent error: ${i.message}`),process.exit(1)}),await new Promise(()=>{})}async function Ns(e="start"){let t=String(e||"start").toLowerCase();if(t==="start"||t==="run"){await Ju();return}if(t==="install"){await ms();return}if(t==="status"){await Lu();return}if(t==="stop"){await gs();return}if(t==="uninstall"){await ku();return}if(t==="restart"){await gs(),await ms();return}ee.error(`Unknown agent action: ${e}`),ee.info(pe.dim(`Use: ${m.nameLower} agent start | install | status | restart | stop | uninstall`)),process.exit(1)}import{createRequire as $f}from"module";import{text as qu,password as Zu,spinner as Qu,isCancel as Ls}from"@clack/prompts";import Zi from"chalk";import en from"fs";import Ts from"path";import Xu from"os";var Ji=Ts.join(Xu.homedir(),m.configDir),Xi=Ts.join(Ji,"config.json");function qi(){if(!en.existsSync(Xi))return{};try{return JSON.parse(en.readFileSync(Xi,"utf-8"))}catch{return{}}}function ks(e){en.existsSync(Ji)||en.mkdirSync(Ji,{recursive:!0});let n={...qi(),...e};en.writeFileSync(Xi,JSON.stringify(n,null,2))}async function xs(){let e=qi(),t=await qu({message:"Enter your email:",placeholder:"user@example.com",initialValue:e.lastLoginEmail,validate(r){if(r.length===0)return"Email is required!"}});if(Ls(t))return;let n=await Zu({message:"Enter your password:",validate(r){if(r.length===0)return"Password is required!"}});if(Ls(n))return;let i=Qu();i.start("Authenticating...");try{let o=await(await fetch(`${vt}/login`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({username:t,password:n})})).json();o.status==="success"&&o.user.token?(pr({id:o.user.id,email:t,token:o.user.token,refreshToken:o.user.refreshToken}),ks({lastLoginEmail:t}),i.stop(Zi.green("Login successful!"))):i.stop(Zi.red("Login failed: "+(o.message||"Unknown error")))}catch(r){i.stop(Zi.red("Network error: "+r.message))}}import{log as Mn,outro as ep}from"@clack/prompts";import tn from"chalk";async function Ms(){let e=fr(),t=`${m.envPrefix}TOKEN`;e?Mn.success(tn.green(`Logged out. Removed saved credentials from ~/${m.configDir}/credentials.json.`)):Mn.warn(tn.yellow(`No saved ${m.name} credentials found.`)),process.env[t]&&(Mn.warn(tn.yellow(`${t} is still set in this shell. Commands will continue to authenticate with that token until you unset it.`)),Mn.info(tn.dim(`Run: unset ${t}`))),ep(tn.blue("---"))}import{outro as tp,select as np,spinner as ip,isCancel as rp}from"@clack/prompts";import Un from"chalk";import Qi from"fs";import op from"path";var Us=e=>e==="1234567890"||e==="ABC123DEFG"||e==="XXXXXXXXXX"?"":typeof e=="string"?e:"",sp=()=>process.versions.node.split(".")[0]||"24";async function Fs(){if(!Pe()){console.log(Un.red(`You are not logged in. Run \`${m.nameLower} login\` first.`));return}let t=ip();t.start("Fetching projects...");try{let{data:n}=await k.get("/projects");if(t.stop("Projects loaded."),n.status!=="success"||!n.projects||n.projects.length===0){console.log(Un.yellow(`No projects found. Run \`${m.nameLower} init\` to create one.`));return}let i=n.projects.map(g=>({value:g.projectId,label:`${g.name} (${g.slug})`})),r=await np({message:"Select a project to link:",options:i});if(rp(r))return;let o=op.join(process.cwd(),m.configFileName),s={};if(Qi.existsSync(o))try{s=JSON.parse(Qi.readFileSync(o,"utf-8"))}catch{}let l=n.projects.find(g=>g.projectId===r),a=s.android?.package||rt("android"),d=s.ios?.bundleIdentifier||rt("ios"),u=s.android||{},c=s.submit?.production?.android||{},f=s.submit?.production?.ios||{},p={projectId:r,framework:gr(s.framework)||fn,name:l?.name,slug:l?.slug,nodeVersion:s.nodeVersion||sp(),scheme:l?.slug?.toLowerCase()||"app",android:{...u,package:a||"",versionCode:u.versionCode||"auto"},ios:{bundleIdentifier:d||"",buildNumber:s.ios?.buildNumber||"auto"},build:{development:{environment:"development",distribution:"development"},staging:{environment:"staging",distribution:"internal"},production:{environment:"production",distribution:"store"}},submit:{production:{android:{...c,track:c.track||"internal",releaseStatus:c.releaseStatus||"completed"},ios:{ascAppId:Us(f.ascAppId),appleTeamId:Us(f.appleTeamId)}}}};Qi.writeFileSync(o,JSON.stringify(p,null,2)),tp(Un.green(`Linked to project ${p.name} (${p.slug})`))}catch(n){t.stop(Un.red("Error fetching projects: "+n.message))}}import{outro as ap,text as Fn,select as lp,spinner as cp,isCancel as nn}from"@clack/prompts";import rn from"chalk";import dp from"fs";import up from"path";import{randomUUID as pp}from"crypto";var fp=()=>process.versions.node.split(".")[0]||"24";async function Bs(){if(!Pe()){console.log(rn.red(`You are not logged in. Run \`${m.nameLower} login\` first.`));return}let t=await Fn({message:"Project Name:",placeholder:"My Awesome App",validate(l){if(l.length===0)return"Name is required!"}});if(nn(t))return;let n=await Fn({message:"Project Slug (URL friendly):",placeholder:"my-awesome-app",validate(l){if(l.length===0)return"Slug is required!";if(!/^[a-z0-9-]+$/.test(l))return"Slug must be lowercase alphanumeric with dashes."}});if(nn(n))return;let i=await lp({message:"Platform:",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"},{value:"web",label:"Web"},{value:"all",label:"All Platforms"}]});if(nn(i))return;let r="";if(i==="android"||i==="all"){let l=rt("android");if(r=await Fn({message:"Android Package Name:",initialValue:l||"",placeholder:"com.example.app",validate(a){if(a.length===0)return"Package name is required for Android!"}}),nn(r))return}let o="";if(i==="ios"||i==="all"){let l=rt("ios");if(o=await Fn({message:"iOS Bundle Identifier:",initialValue:l||"",placeholder:"com.example.app",validate(a){if(a.length===0)return"Bundle ID is required for iOS!"}}),nn(o))return}let s=cp();s.start("Creating project...");try{let l=pp(),d={projectId:l,name:t,slug:n,storageType:"managed",platforms:i==="all"?["android","ios","web"]:[i]},{data:u}=await k.post("/projects",d);if(u.status==="success"){s.stop(rn.green("Project created successfully!"));let c=up.join(process.cwd(),m.configFileName);dp.writeFileSync(c,JSON.stringify({projectId:l,framework:fn,name:t,slug:n,nodeVersion:fp(),...r?{android:{package:r,versionCode:"auto"}}:{},...o?{ios:{bundleIdentifier:o,buildNumber:"auto"}}:{},build:{development:{environment:"development",distribution:"development"},staging:{environment:"staging",distribution:"internal"},production:{environment:"production",distribution:"store"}},submit:{production:{android:{track:"internal",releaseStatus:"completed"},ios:{ascAppId:"",appleTeamId:""}}}},null,2)),ap(rn.green(`Initialized project ${t} and linked locally!`))}else s.stop(rn.red("creation failed: "+u.message))}catch(l){s.stop(rn.red("Network error: "+l.message))}}import{spinner as er,log as ve}from"@clack/prompts";import on from"chalk";import Bn from"fs";import Hs from"path";function tr(e,t,n,i){let r=e?.response?.status,o=e?.response?.data?.message||e?.response?.data?.error,s=i?` ${i}`:"";return r===401?`Not logged in or token expired while trying to ${n}${s}. Run \`${m.nameLower} login\` and try again.`:r===403?[`Permission denied while trying to ${n}${s}.`,o?`API says: ${o}.`:void 0,`Current Mach account/token does not have access to project ${t}.`,`Run \`${m.nameLower} login\` with the correct account, or ask a project owner to grant access.`].filter(Boolean).join(" "):r===404?[`Project or environment endpoint was not found while trying to ${n}${s}.`,`Project ID: ${t}.`,o?`API says: ${o}.`:void 0].filter(Boolean).join(" "):r?`Failed to ${n}${s}: ${o||`API returned HTTP ${r}`}`:`Network error while trying to ${n}${s}: ${e?.message||"Unknown error"}`}function mp(e){let t=String(e??"");return t===""?'""':/^[A-Za-z0-9_./:@%+-]+$/.test(t)?t:JSON.stringify(t)}function gp(e,t){return`${[`# Generated by ${m.nameLower} env pull --environment ${t}`,"# Do not commit this file.","",...Object.keys(e).sort((i,r)=>i.localeCompare(r)).map(i=>`${i}=${mp(e[i])}`)].join(`
+`).filter(r=>!!r.trim()),i=e.some(r=>r.platform==="android"&&r.id.startsWith("emulator-"));n.forEach(r=>{i||e.push({id:r,platform:"android",type:"emulator",name:r.replace(/_/g," "),status:"offline",details:`Android Virtual Device: ${r}`})})}catch{}return e}async function Cs(){if(process.platform!=="darwin")return[];try{let e=await Ln("/usr/bin/xcrun",["simctl","list","devices","--json"]),t=JSON.parse(e),n=[];return Object.entries(t.devices||{}).forEach(([i,r])=>{r.forEach(o=>{o.isAvailable&&n.push({id:o.udid,platform:"ios",type:"simulator",name:o.name,status:o.state?.toLowerCase()==="booted"?"online":"offline",runtime:i,details:`${o.name} (${i})`})})}),n}catch{return[]}}async function Mu(){if(process.platform!=="darwin")return[];try{let e=await Ln("/usr/bin/xcrun",["devicectl","list","devices","--json-output","-"]);return(JSON.parse(e).result?.devices||[]).filter(n=>{let i=n.connectionProperties?.transportType;return i==="wired"||i==="localNetwork"}).map(n=>{let i=n.connectionProperties?.transportType,r=n.deviceProperties?.name||"iPhone";return{id:n.identifier,platform:"ios",type:"physical",name:r,status:"online",details:`${r} (${n.model?.name||n.hardwareModel||""}) - ${i}`}})}catch{return[]}}async function Uu(e){let t=await Cs(),n=t.find(r=>r.id===e);if(n)return n;let i=t.filter(r=>r.status==="online");return i.length===1?i[0]:null}async function Fu(){let[e,t,n]=await Promise.all([xu(),Cs(),Mu()]);return[...e,...t,...n]}async function Bu(){let e=Date.now();return Cn&&e-Cn.updatedAt<Eu?Cn.targets:(Nn||(Nn=Fu().then(t=>(Cn={targets:t,updatedAt:Date.now()},t)).finally(()=>{Nn=null})),Nn)}async function hs(e){let t=[];for await(let n of e)t.push(Buffer.isBuffer(n)?n:Buffer.from(n));return t.length===0?{}:JSON.parse(Buffer.concat(t).toString("utf-8"))}async function Hu(e,t){let n=await yu({method:"GET",url:e,responseType:"stream",timeout:12e4}),i=ae.createWriteStream(t);n.data.pipe(i),await new Promise((r,o)=>{i.on("finish",r),i.on("error",o)})}function Ss(e,t){let n=e?.stderr?.toString?.().trim();if(n)return n;let i=e?.stdout?.toString?.().trim();return i||e?.message||t}function ju(e,t){return mt("/usr/libexec/PlistBuddy",["-c",`Print :${t}`,e],{encoding:"utf-8"}).trim()}function Gu(e){let t=Z.join(e,"Info.plist");if(!ae.existsSync(t))throw new Error(`Could not validate iOS app executable: ${t} not found.`);let n=ju(t,"CFBundleExecutable"),i=Z.join(e,n);if(!ae.existsSync(i))throw new Error(`Could not validate iOS app executable: ${i} not found.`);return i}function Ku(){return process.arch==="arm64"?"arm64":"x86_64"}function Vu(e){return ae.existsSync(e)?ae.readdirSync(e).map(t=>Z.join(e,t)).filter(t=>t.endsWith(".app")&&ae.statSync(t).isDirectory()):[]}function ys(e,t){let n=Vu(e);if(n.length===1)return n[0];if(n.length>1)throw new Error(`Multiple .app bundles found in ${t}: ${n.map(i=>Z.basename(i)).join(", ")}. Mach cannot safely choose which app to install.`);return""}function zu(e){let t=Gu(e),n=Ku(),i="",r="";try{i=mt("lipo",["-info",t],{encoding:"utf-8"}).trim()}catch(o){throw new Error(`Could not inspect iOS simulator app architecture for ${Z.basename(e)}: ${o.message}`)}if(!new RegExp(`\\b${n}\\b`).test(i))throw new Error(`This iOS simulator artifact cannot be installed because ${Z.basename(e)} does not include the ${n} simulator architecture. lipo output: ${i}. Rebuild the app with the latest Mach CLI and make sure the profile is a simulator build.`);try{r=mt("/usr/bin/xcrun",["vtool","-show-build",t],{encoding:"utf-8"}).trim()}catch(o){throw new Error(`Could not inspect iOS simulator app platform for ${Z.basename(e)}: ${o.message}`)}if(!/\bplatform\s+IOSSIMULATOR\b/i.test(r))throw new Error(`This iOS simulator artifact cannot be installed because ${Z.basename(e)} was built for the wrong Apple platform. A simulator artifact must contain platform IOSSIMULATOR. vtool output: ${r}. Rebuild the app with the latest Mach CLI.`)}async function Wu(e,t,n){let i=n||(t.toLowerCase().includes(".apk")?"android":"ios"),r=t.toLowerCase().includes(".ipa"),o=ae.mkdtempSync(Z.join(Ke.tmpdir(),`${st}-install-`)),s=Z.join(o,i==="android"?"install.apk":r?"install.ipa":"install.zip");try{if(await Hu(t,s),i==="android"){mt(Rs(),["-s",e,"install","-r",s],{stdio:"pipe"});return}if(process.platform!=="darwin")throw new Error("iOS local install requires macOS.");Tn(`unzip -o ${JSON.stringify(s)} -d ${JSON.stringify(o)}`,{stdio:"pipe"});let l=Z.join(o,"Payload"),a=ae.existsSync(l),d=r||a,u="";if(d?u=ys(l,"Payload"):u=ys(o,"the simulator artifact"),!u)throw new Error(`No .app bundle found inside the ${r?"IPA":"archive"}.`);let c=d?null:await Uu(e);if(c){try{zu(u),mt("/usr/bin/xcrun",["simctl","install",c.id,u],{stdio:"pipe"})}catch(f){throw new Error(Ss(f,"iOS Simulator install failed."))}return}if(!d)throw new Error("Selected iOS Simulator was not found. Refresh Install Hub devices or boot one simulator and try again.");try{Tn(`/usr/bin/xcrun devicectl device install app --device ${JSON.stringify(e)} ${JSON.stringify(u)}`,{stdio:"pipe"})}catch(f){throw new Error(Ss(f,"iOS device install failed."))}}finally{ae.rmSync(o,{recursive:!0,force:!0})}}function Yu(e,t){if(!e)throw new Error("Device id is required.");if(t==="ios"){if(process.platform!=="darwin")throw new Error("iOS Simulator launch requires macOS.");return Tn(`/usr/bin/xcrun simctl boot ${JSON.stringify(e)}`,{stdio:"pipe"}),fs("open",["-a","Simulator"],{detached:!0,stdio:"ignore"}).unref(),"Simulator booting..."}if(t==="android")return fs($s(),["-avd",e],{detached:!0,stdio:"ignore",windowsHide:!0}).unref(),"Emulator booting in background...";throw new Error("Invalid platform.")}async function Ju(){process.platform!=="darwin"&&ee.warn("Running on non-macOS \u2014 iOS discovery unavailable, Android only.");let e=xn.createServer((i,r)=>{if(r.setHeader("Access-Control-Allow-Origin","*"),r.setHeader("Access-Control-Allow-Methods","GET, POST, OPTIONS"),r.setHeader("Access-Control-Allow-Headers","Content-Type, Authorization"),i.method==="OPTIONS"){r.writeHead(204),r.end();return}let o=new URL(i.url||"/",`http://localhost:${st}`);if(i.method==="GET"&&o.pathname==="/local/devices"){Bu().then(s=>{r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",targets:s}))}).catch(s=>{r.writeHead(500,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:s.message}))});return}if(i.method==="GET"&&o.pathname==="/health"){r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",service:"mach-agent",port:st,platform:process.platform}));return}if(i.method==="POST"&&o.pathname==="/install-local"){t(i,r);return}if(i.method==="POST"&&o.pathname==="/local/boot"){n(i,r);return}r.writeHead(404),r.end()}),t=async(i,r)=>{try{let{deviceId:o,artifactUrl:s,platform:l}=await hs(i);if(!o||!s){r.writeHead(400,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:"deviceId and artifactUrl are required"}));return}await Wu(o,s,l),r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",message:`Installed on ${o}`}))}catch(o){r.writeHead(500,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:o.message||"Local install failed"}))}},n=async(i,r)=>{try{let{id:o,platform:s}=await hs(i),l=Yu(o,s);r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",message:l}))}catch(o){r.writeHead(500,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:o.message||"Local device launch failed"}))}};e.listen(st,"127.0.0.1",()=>{ee.success(pe.green(`Local device agent running on http://localhost:${st}`)),ee.info(pe.dim("Keep this running while using the Install Hub on the dashboard.")),ee.info(pe.dim("Press Ctrl+C to stop."))}),e.on("error",i=>{i.code==="EADDRINUSE"?ee.error(`Port ${st} is already in use \u2014 agent may already be running.`):ee.error(`Agent error: ${i.message}`),process.exit(1)}),await new Promise(()=>{})}async function Ns(e="start"){let t=String(e||"start").toLowerCase();if(t==="start"||t==="run"){await Ju();return}if(t==="install"){await ms();return}if(t==="status"){await Lu();return}if(t==="stop"){await gs();return}if(t==="uninstall"){await ku();return}if(t==="restart"){await gs(),await ms();return}ee.error(`Unknown agent action: ${e}`),ee.info(pe.dim(`Use: ${m.nameLower} agent start | install | status | restart | stop | uninstall`)),process.exit(1)}import{createRequire as $f}from"module";import{text as qu,password as Zu,spinner as Qu,isCancel as Ls}from"@clack/prompts";import Zi from"chalk";import en from"fs";import Ts from"path";import Xu from"os";var Ji=Ts.join(Xu.homedir(),m.configDir),Xi=Ts.join(Ji,"config.json");function qi(){if(!en.existsSync(Xi))return{};try{return JSON.parse(en.readFileSync(Xi,"utf-8"))}catch{return{}}}function ks(e){en.existsSync(Ji)||en.mkdirSync(Ji,{recursive:!0});let n={...qi(),...e};en.writeFileSync(Xi,JSON.stringify(n,null,2))}async function xs(){let e=qi(),t=await qu({message:"Enter your email:",placeholder:"user@example.com",initialValue:e.lastLoginEmail,validate(r){if(r.length===0)return"Email is required!"}});if(Ls(t))return;let n=await Zu({message:"Enter your password:",validate(r){if(r.length===0)return"Password is required!"}});if(Ls(n))return;let i=Qu();i.start("Authenticating...");try{let o=await(await fetch(`${vt}/login`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({username:t,password:n})})).json();o.status==="success"&&o.user.token?(pr({id:o.user.id,email:t,token:o.user.token,refreshToken:o.user.refreshToken}),ks({lastLoginEmail:t}),i.stop(Zi.green("Login successful!"))):i.stop(Zi.red("Login failed: "+(o.message||"Unknown error")))}catch(r){i.stop(Zi.red("Network error: "+r.message))}}import{log as Mn,outro as ep}from"@clack/prompts";import tn from"chalk";async function Ms(){let e=fr(),t=`${m.envPrefix}TOKEN`;e?Mn.success(tn.green(`Logged out. Removed saved credentials from ~/${m.configDir}/credentials.json.`)):Mn.warn(tn.yellow(`No saved ${m.name} credentials found.`)),process.env[t]&&(Mn.warn(tn.yellow(`${t} is still set in this shell. Commands will continue to authenticate with that token until you unset it.`)),Mn.info(tn.dim(`Run: unset ${t}`))),ep(tn.blue("---"))}import{outro as tp,select as np,spinner as ip,isCancel as rp}from"@clack/prompts";import Un from"chalk";import Qi from"fs";import op from"path";var Us=e=>e==="1234567890"||e==="ABC123DEFG"||e==="XXXXXXXXXX"?"":typeof e=="string"?e:"",sp=()=>process.versions.node.split(".")[0]||"24";async function Fs(){if(!Pe()){console.log(Un.red(`You are not logged in. Run \`${m.nameLower} login\` first.`));return}let t=ip();t.start("Fetching projects...");try{let{data:n}=await k.get("/projects");if(t.stop("Projects loaded."),n.status!=="success"||!n.projects||n.projects.length===0){console.log(Un.yellow(`No projects found. Run \`${m.nameLower} init\` to create one.`));return}let i=n.projects.map(g=>({value:g.projectId,label:`${g.name} (${g.slug})`})),r=await np({message:"Select a project to link:",options:i});if(rp(r))return;let o=op.join(process.cwd(),m.configFileName),s={};if(Qi.existsSync(o))try{s=JSON.parse(Qi.readFileSync(o,"utf-8"))}catch{}let l=n.projects.find(g=>g.projectId===r),a=s.android?.package||rt("android"),d=s.ios?.bundleIdentifier||rt("ios"),u=s.android||{},c=s.submit?.production?.android||{},f=s.submit?.production?.ios||{},p={projectId:r,framework:gr(s.framework)||fn,name:l?.name,slug:l?.slug,nodeVersion:s.nodeVersion||sp(),scheme:l?.slug?.toLowerCase()||"app",android:{...u,package:a||"",versionCode:u.versionCode||"auto"},ios:{bundleIdentifier:d||"",buildNumber:s.ios?.buildNumber||"auto"},build:{development:{environment:"development",distribution:"development"},staging:{environment:"staging",distribution:"internal"},production:{environment:"production",distribution:"store"}},submit:{production:{android:{...c,track:c.track||"internal",releaseStatus:c.releaseStatus||"completed"},ios:{ascAppId:Us(f.ascAppId),appleTeamId:Us(f.appleTeamId)}}}};Qi.writeFileSync(o,JSON.stringify(p,null,2)),tp(Un.green(`Linked to project ${p.name} (${p.slug})`))}catch(n){t.stop(Un.red("Error fetching projects: "+n.message))}}import{outro as ap,text as Fn,select as lp,spinner as cp,isCancel as nn}from"@clack/prompts";import rn from"chalk";import dp from"fs";import up from"path";import{randomUUID as pp}from"crypto";var fp=()=>process.versions.node.split(".")[0]||"24";async function Bs(){if(!Pe()){console.log(rn.red(`You are not logged in. Run \`${m.nameLower} login\` first.`));return}let t=await Fn({message:"Project Name:",placeholder:"My Awesome App",validate(l){if(l.length===0)return"Name is required!"}});if(nn(t))return;let n=await Fn({message:"Project Slug (URL friendly):",placeholder:"my-awesome-app",validate(l){if(l.length===0)return"Slug is required!";if(!/^[a-z0-9-]+$/.test(l))return"Slug must be lowercase alphanumeric with dashes."}});if(nn(n))return;let i=await lp({message:"Platform:",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"},{value:"web",label:"Web"},{value:"all",label:"All Platforms"}]});if(nn(i))return;let r="";if(i==="android"||i==="all"){let l=rt("android");if(r=await Fn({message:"Android Package Name:",initialValue:l||"",placeholder:"com.example.app",validate(a){if(a.length===0)return"Package name is required for Android!"}}),nn(r))return}let o="";if(i==="ios"||i==="all"){let l=rt("ios");if(o=await Fn({message:"iOS Bundle Identifier:",initialValue:l||"",placeholder:"com.example.app",validate(a){if(a.length===0)return"Bundle ID is required for iOS!"}}),nn(o))return}let s=cp();s.start("Creating project...");try{let l=pp(),d={projectId:l,name:t,slug:n,storageType:"managed",platforms:i==="all"?["android","ios","web"]:[i]},{data:u}=await k.post("/projects",d);if(u.status==="success"){s.stop(rn.green("Project created successfully!"));let c=up.join(process.cwd(),m.configFileName);dp.writeFileSync(c,JSON.stringify({projectId:l,framework:fn,name:t,slug:n,nodeVersion:fp(),...r?{android:{package:r,versionCode:"auto"}}:{},...o?{ios:{bundleIdentifier:o,buildNumber:"auto"}}:{},build:{development:{environment:"development",distribution:"development"},staging:{environment:"staging",distribution:"internal"},production:{environment:"production",distribution:"store"}},submit:{production:{android:{track:"internal",releaseStatus:"completed"},ios:{ascAppId:"",appleTeamId:""}}}},null,2)),ap(rn.green(`Initialized project ${t} and linked locally!`))}else s.stop(rn.red("creation failed: "+u.message))}catch(l){s.stop(rn.red("Network error: "+l.message))}}import{spinner as er,log as ve}from"@clack/prompts";import on from"chalk";import Bn from"fs";import Hs from"path";function tr(e,t,n,i){let r=e?.response?.status,o=e?.response?.data?.message||e?.response?.data?.error,s=i?` ${i}`:"";return r===401?`Not logged in or token expired while trying to ${n}${s}. Run \`${m.nameLower} login\` and try again.`:r===403?[`Permission denied while trying to ${n}${s}.`,o?`API says: ${o}.`:void 0,`Current Mach account/token does not have access to project ${t}.`,`Run \`${m.nameLower} login\` with the correct account, or ask a project owner to grant access.`].filter(Boolean).join(" "):r===404?[`Project or environment endpoint was not found while trying to ${n}${s}.`,`Project ID: ${t}.`,o?`API says: ${o}.`:void 0].filter(Boolean).join(" "):r?`Failed to ${n}${s}: ${o||`API returned HTTP ${r}`}`:`Network error while trying to ${n}${s}: ${e?.message||"Unknown error"}`}function mp(e){let t=String(e??"");return t===""?'""':/^[A-Za-z0-9_./:@%+-]+$/.test(t)?t:JSON.stringify(t)}function gp(e,t){return`${[`# Generated by ${m.nameLower} env pull --environment ${t}`,"# Do not commit this file.","",...Object.keys(e).sort((i,r)=>i.localeCompare(r)).map(i=>`${i}=${mp(e[i])}`)].join(`
 `)}
 `}async function js(e,t,n={}){let i=Pe();if(!i){ve.error(`You are not logged in. Run \`${m.nameLower} login\` first.`);return}let r=Hs.join(process.cwd(),m.configFileName);if(!Bn.existsSync(r)){ve.error(`No ${m.configFileName} found. Run \`${m.nameLower} init\` or \`${m.nameLower} link\` first.`);return}let o;try{o=JSON.parse(Bn.readFileSync(r,"utf-8"))}catch{ve.error(`Failed to parse ${m.configFileName}`);return}let{projectId:s}=o;if(!s){ve.error(`${m.configFileName} is missing projectId.`);return}e==="set"?await hp(s,t,i):e==="list"?await Sp(s,i):e==="pull"||e==="download"||e==="export"?await yp(s,n):ve.error(`Unknown env action: ${e}. Use 'set', 'list', or 'pull'.`)}async function hp(e,t,n){if(t.length===0){ve.error(`Usage: ${m.nameLower} env set KEY=VALUE [KEY2=VALUE2 ...]`);return}let i=er();i.start("Setting environment variables...");let r=0,o=0;for(let s of t){let[l,...a]=s.split("="),d=a.join("=");if(!l||d===void 0){ve.warn(`Invalid format for argument: ${s}. Expected KEY=VALUE.`),o++;continue}try{let u={key:l.trim(),value:d,type:"env",environment:"global",visibility:"secret"},{data:c}=await k.post(`/projects/${e}/secrets`,u);c.status==="success"?r++:(ve.error(`Failed to set ${l}: ${c.message}`),o++)}catch(u){ve.error(tr(u,e,"set",l)),o++}}i.stop(`Set ${r} variable(s). ${o>0?`${o} failed.`:""}`)}async function Sp(e,t){let n=er();n.start("Fetching environment variables...");try{let{data:i}=await k.get(`/projects/${e}/secrets`);if(i.status==="success"){n.stop("Fetched variables.");let r=i.secrets||[];r.length===0?ve.info("No environment variables found for this project."):(ve.info(on.bold("Environment Variables (Global & Scoped):")),r.forEach(o=>{let s=o.visibility==="plain"?o.value:"********";console.log(`  ${on.cyan(o.key)} = ${s}  ${on.gray(`[${o.environment}]`)}`)}))}else n.stop(on.red(`Failed to fetch variables: ${i.message}`))}catch(i){n.stop("Failed to fetch variables."),ve.error(tr(i,e,"list"))}}async function yp(e,t){let n=(t.environment||"development").trim(),i=t.out||".env.local",r=Hs.resolve(process.cwd(),i);if(Bn.existsSync(r)&&!t.overwrite){ve.error(`${i} already exists. Re-run with \`--overwrite\` to replace it.`);return}let o=er();o.start(`Downloading ${n} environment variables...`);try{let{data:s}=await k.get(`/projects/${e}/secrets/export?env=${encodeURIComponent(n)}`);if(s.status!=="success"){o.stop(on.red(`Failed to download variables: ${s.message||"Unknown API error"}`));return}let l=s.secrets||{},a=gp(l,n);Bn.writeFileSync(r,a,{encoding:"utf-8",mode:384}),o.stop(`Wrote ${Object.keys(l).length} variable(s) to ${i}.`)}catch(s){o.stop("Failed to download variables."),ve.error(tr(s,e,"pull"))}}import{spinner as bp,log as Rt,outro as Ep}from"@clack/prompts";import nr from"chalk";import Gs from"fs";import Ap from"path";import{execSync as Ip}from"child_process";import wp from"adm-zip";import _p from"axios";import{randomUUID as Rp}from"crypto";async function Ks(e){Rt.info(nr.magenta("\u{1F680} Starting Over-The-Air (OTA) Update via Mach..."));let t=$e();(!t||!t.projectId)&&(Rt.error(`No ${m.configFileName} found or missing projectId. Run \`mach link\` first.`),process.exit(1));let n=t.projectId,i=e.branch||"production",r="1.0.0";try{r=JSON.parse(Gs.readFileSync("./package.json","utf-8")).version||"1.0.0"}catch{Rt.warn("Could not read package.json version. Defaulting to 1.0.0")}let o=bp();o.start(`Compiling JavaScript bundles for OTA (Channel: ${i}, Runtime: ${r})...`);try{Ip("npx expo export --platform all",{stdio:"ignore"})}catch(d){o.stop("Compilation failed."),Rt.error(`Failed to export JS bundles using Expo: ${d.message}`),process.exit(1)}o.message("Zipping artifact payload...");let s=Ap.join(process.cwd(),"dist");Gs.existsSync(s)||(o.stop("Missing dist folder."),Rt.error("The `dist` directory was not created. Export failed."),process.exit(1));let l=new wp;l.addLocalFolder(s,"dist");let a=l.toBuffer();o.message("Uploading payload to Mach Cloud...");try{let d=Rp(),u=await k.post("/builds/source-upload-url",{projectId:n,buildId:d});if(u.data.status!=="success")throw new Error("Could not secure upload bucket URL");let{uploadUrl:c,key:f}=u.data;await _p.put(c,a,{headers:{"Content-Type":"application/zip"},maxBodyLength:1/0,maxContentLength:1/0}),o.message(`Promoting Update to ${i}...`),await k.post("/updates/publish",{projectId:n,channelName:i,runtimeVersion:r,platform:"android",updateId:`${d}-android`,manifestKey:f}),await k.post("/updates/publish",{projectId:n,channelName:i,runtimeVersion:r,platform:"ios",updateId:`${d}-ios`,manifestKey:f}),o.stop("Update Live!"),Ep(nr.green(`\u2713 OTA Update natively shipped to the '${i}' channel.`)),Rt.info(nr.dim(`Any app running runtime '${r}' will download this bundle smoothly.`))}catch(d){o.stop("Update failed during Cloud Sync."),Rt.error(`Upload error: ${d.message}`),process.exit(1)}}import{intro as $p,outro as Vs,log as Mt}from"@clack/prompts";import qe from"chalk";async function zs(){$p(qe.blue(`${m.name} CLI - User Profile`));let e=Pe();if(!e){Mt.warn(qe.yellow("You are not logged in.")),Mt.info(`Run \`${m.nameLower} login\` to authenticate.`),Vs();return}Mt.info(`${qe.bold("Logged in as:")} ${qe.green(e.email)}`);try{await k.get("/projects");let n=Pe().token.split(".");if(n.length===3){let i=JSON.parse(Buffer.from(n[1],"base64").toString());if(i.exp){let r=new Date(i.exp*1e3),o=new Date,s=r.getTime()-o.getTime();if(s>0){let l=Math.round(s/6e4),a=(l/60).toFixed(1);Mt.info(`${qe.bold("Token status:")} Valid (Expires in ~${a}h / ${l}m)`)}else Mt.warn(`${qe.bold("Token status:")} ${qe.red("Expired")} (Auto-refresh failed)`)}}}catch{Mt.warn(`${qe.bold("Token status:")} ${qe.red("Unreachable")} (Session might be truly expired)${vt}`)}Vs(qe.blue("---"))}import{spawn as Op}from"child_process";import{log as gt}from"@clack/prompts";import Le from"chalk";import Dp from"fs";import vp from"net";async function Pp(e){return new Promise(t=>{let n=vp.createServer();n.once("error",i=>{i.code==="EADDRINUSE"?t(!0):t(!1)}),n.once("listening",()=>{n.close(),t(!1)}),n.listen(e,"0.0.0.0")})}async function Ws(e,t=20){let n=e;for(;n<e+t;){if(!await Pp(n))return n;n++}throw new Error(`Could not find an available port after ${t} attempts starting from ${e}.`)}var Ys=async e=>{gt.info(Le.blue(`Starting ${m.name} Dev Orchestrator...`));let t=$e(),n=e.buildProfile||"development",i=t?lt(t,n):null,r={...process.env};if(t?.projectId)try{gt.info(Le.dim(`Fetching managed secrets for profile: ${n}...`));let c=await k.get(`/projects/${t.projectId}/secrets/export?env=${n}`);c.data?.status==="success"&&c.data.secrets&&(Object.assign(r,c.data.secrets),gt.info(Le.magenta(`\u2713 Injected secrets from ${m.name} Dashboard.`)))}catch{gt.warn("Could not fetch managed secrets. Running with local env only.")}t&&Object.assign(r,Pt(t,m.envPrefix)),i&&(Object.assign(r,Pt(i,`${m.envPrefix}PROFILE_`)),i.env&&Object.assign(r,i.env));let o=!1;try{let c=JSON.parse(Dp.readFileSync("package.json","utf-8"));o=!!(c.dependencies?.expo||c.devDependencies?.expo)}catch{gt.warn("Could not parse package.json. Defaulting to Bare React Native mode.")}let s=Number(e.port||i?.port||8081),l=await Ws(s);l!==s&&gt.info(Le.yellow(`Port ${s} is busy. ${m.name} is using ${l} instead.`));let a=process.platform==="win32"?"npx.cmd":"npx",d=[];if(o?(d=["expo","start","--port",String(l)],e.clear&&d.push("--clear"),e.tunnel&&d.push("--tunnel"),e.lan&&d.push("--lan"),e.localhost&&d.push("--localhost"),e.ios&&d.push("--ios"),e.android&&d.push("--android"),e.web&&d.push("--web")):(d=["react-native","start","--port",String(l)],e.clear&&d.push("--clear")),o){let c=[`${Le.cyan("i")}  open iOS simulator`,`${Le.cyan("a")}  open Android emulator/device`,`${Le.cyan("w")}  open web`,`${Le.cyan("r")}  reload app`];gt.info([Le.bold("Launch controls"),...c.map(f=>`  ${f}`),"",Le.dim("Direct launch: mach start --ios | --android | --web"),Le.dim(`Metro URL: http://localhost:${l}`)].join(`
 `))}else gt.info(Le.dim(`Metro URL: http://localhost:${l}`));let u=Op(a,d,{stdio:"inherit",env:r});return new Promise((c,f)=>{u.on("exit",p=>{p===0?c():f(new Error(`Dev server exited with code ${p}`))}),u.on("error",p=>{f(p)})})};import{log as Ne}from"@clack/prompts";import ze from"chalk";var Js=async e=>{let t=$e();t||(Ne.error(ze.red(`No ${m.configFileName} found in the current directory.`)),process.exit(1));let n=e.profile||"development",i=lt(t,n);if(e.json){console.log(JSON.stringify({project:t,resolved:i},null,2));return}Ne.info(ze.bgBlue.white(` Resolved ${m.name} Config [${n}] `)),Ne.info(ze.dim("----------------------------------------")),Ne.info(`${ze.blue("Project ID:")} ${t.projectId}`),Ne.info(`${ze.blue("Name:")} ${t.name}`),Ne.info(`${ze.blue("Scheme:")} ${t.scheme}`),i?(Ne.info(ze.dim(`
@@ -1546,5 +1546,5 @@ Environment Variables:`)),Object.entries(i.env).forEach(([r,o])=>{Ne.info(`  ${r
 Running expo prebuild for deeper analysis...`));try{lf("npx expo prebuild --no-install",{cwd:e,stdio:"pipe"})}catch{return un.warn(Te.yellow("Prebuild failed \u2014 skipping manifest/plist checks.")),o}}else if(!a)return t.json||un.info(Te.dim(`
 Skipping manifest/plist checks \u2014 no android/ios dirs. Use --prebuild to generate them.`)),o;for(let d of r){let u=ya();u.start(Te.dim(`Running ${d.label}...`));try{let c=Date.now(),f=await d.fn(e,t);f.durationMs=Date.now()-c,o.push(f);let p=f.findings.length;u.stop(p>0?Te.yellow(`${d.label} \u2014 ${p} finding(s)`):Te.green(`${d.label} \u2014 clean`))}catch(c){u.stop(Te.red(`${d.label} \u2014 error`)),o.push({category:d.category,label:d.label,findings:[],durationMs:0,error:c.message})}}}return o}import be from"chalk";import{log as he}from"@clack/prompts";var Ut={critical:be.bgRed.white.bold,high:be.red.bold,medium:be.yellow.bold,low:be.blue,info:be.dim},Xn={critical:0,high:1,medium:2,low:3,info:4};function df(e,t){if(!t)return!0;let n=Xn[t];return n===void 0?!0:Xn[e]<=n}function Ia(e,t){let n=0,i={critical:0,high:0,medium:0,low:0,info:0};for(let s of e){let l=s.findings.filter(d=>df(d.severity,t));if(l.length===0&&!s.error)continue;if(he.info(""),he.info(be.bold(`  ${s.label}`)+be.dim(`  ${l.length} finding(s)`)),he.info(be.dim("  "+"\u2500".repeat(60))),s.error){he.error(be.red(`  Error: ${s.error}`));continue}let a=[...l].sort((d,u)=>Xn[d.severity]-Xn[u.severity]);for(let d of a){let u=Ut[d.severity](` ${d.severity.toUpperCase()} `);he.info(`  ${u}  ${be.bold(d.id)}  ${d.title}`),he.info(be.dim(`          ${d.description}`)),d.file&&he.info(be.dim(`          File: ${d.file}${d.line?`:${d.line}`:""}`)),he.info(be.cyan(`          Fix: ${d.recommendation}`)),he.info(""),i[d.severity]++,n++}}he.info(""),he.info(be.bold("  Summary")),he.info(be.dim("  "+"\u2500".repeat(60))),he.info(`  Total: ${be.bold(String(n))} finding(s)`),he.info(`  ${Ut.critical(` ${i.critical} Critical `)}  ${Ut.high(` ${i.high} High `)}  ${Ut.medium(` ${i.medium} Medium `)}  ${Ut.low(` ${i.low} Low `)}  ${Ut.info(` ${i.info} Info `)}`);let r=i.critical>0,o=i.high>0;r||o?(he.info(""),he.error(be.red.bold(`  FAIL \u2014 ${i.critical} critical, ${i.high} high issue(s) found`))):n>0?(he.info(""),he.warn(be.yellow("  PASS (with warnings) \u2014 no critical or high issues"))):(he.info(""),he.success(be.green.bold("  PASS \u2014 no issues found")))}function wa(e,t){let n=e.flatMap(r=>r.findings),i={};for(let r of Object.values(Me))i[r]=n.filter(o=>o.severity===r).length;return{version:"1.0.0",timestamp:new Date().toISOString(),project:t.name||"unknown",projectVersion:t.version||"0.0.0",summary:{total:n.length,...i},passed:i.critical===0&&i.high===0,checks:e.map(r=>({category:r.category,label:r.label,findingCount:r.findings.length,durationMs:r.durationMs,error:r.error||null})),findings:n}}import{log as Se,spinner as uf}from"@clack/prompts";import fe from"chalk";import at from"fs";import pf from"os";import Ft from"path";import{execSync as ff}from"child_process";var _a=16384,mf=1,gf=Buffer.from([127,69,76,70]);async function Ra(e){Se.info(fe.bold.underline("16KB Page Alignment Check")),console.log("");let t=Ft.resolve(e);if(!at.existsSync(t))return Se.error(fe.red(`APK file not found: ${t}`)),!1;if(!t.endsWith(".apk"))return Se.error(fe.red("The provided file is not an APK file.")),!1;let n=uf();n.start("Extracting and analyzing native libraries...");let i=at.mkdtempSync(Ft.join(pf.tmpdir(),"mach-16kb-"));try{try{ff(`unzip -o -q "${t}" "lib/arm64-v8a/*.so" "lib/x86_64/*.so" -d "${i}" 2>/dev/null`,{encoding:"utf-8",maxBuffer:50*1024*1024})}catch{}let r=$a(Ft.join(i,"lib"));if(r.length===0)return n.stop("Analysis complete."),Se.info(fe.yellow("No arm64-v8a or x86_64 native libraries found in the APK.")),Se.info(fe.dim("16KB alignment check only applies to arm64-v8a and x86_64 architectures.")),!0;let o=[];for(let a of r){let d=Ft.relative(i,a),u=Sf(d),c=Ft.basename(a),f=hf(a);f!==null&&o.push({name:c,filePath:d,arch:u,align:f,compatible:f>=_a})}if(n.stop("Analysis complete."),o.length===0)return Se.info(fe.yellow("No valid ELF shared libraries found.")),!0;let s=o.filter(a=>!a.compatible),l=o.filter(a=>a.compatible);if(Se.info(fe.dim(`Checked ${o.length} native librar${o.length===1?"y":"ies"}
 `)),s.length>0){Se.info(fe.red.bold(`Incompatible libraries:
-`));for(let a of s)Se.error(fe.red(`${fe.bold(a.name)} ${fe.dim(`(${a.arch})`)}`)),Se.info(fe.dim(`  PT_LOAD alignment: 2**${Math.log2(a.align)} (${a.align} bytes, needs 2**14 = ${_a})`))}return l.length>0&&(console.log(""),Se.success(fe.green(`${l.length} librar${l.length===1?"y":"ies"} correctly aligned (2**14 or higher).`))),console.log(""),s.length===0?(Se.success(fe.green.bold("ELF Verification Successful. APK is 16KB compatible.")),!0):(Se.error(fe.red.bold(`Found ${s.length} unaligned lib${s.length===1?"":"s"} (arm64-v8a/x86_64 libs need to be aligned).`)),console.log(""),Se.info(fe.yellow("To fix this:")),Se.info(fe.dim("  1. Rebuild with NDK r28+ which defaults to 16KB page alignment")),Se.info(fe.dim("  2. Or set -DANDROID_SUPPORT_FLEXIBLE_PAGE_SIZES=ON in CMake")),Se.info(fe.dim("  3. Update third-party libraries that ship prebuilt .so files")),Se.info(fe.dim("  4. After rebuilding: zipalign -p -f -v 16 input.apk output.apk")),console.log(""),Se.info(fe.dim("Reference: https://developer.android.com/guide/practices/page-sizes")),!1)}catch(r){return n.stop("Analysis failed."),Se.error(fe.red(`Failed to analyze APK: ${r.message}`)),!1}finally{try{at.rmSync(i,{recursive:!0,force:!0})}catch{}}}function hf(e){let t=at.openSync(e,"r");try{let n=Buffer.alloc(64);if(at.readSync(t,n,0,64,0),!n.subarray(0,4).equals(gf))return null;let i=n[4]===2,r=n[5]===1,o=(f,p)=>r?f.readUInt16LE(p):f.readUInt16BE(p),s=(f,p)=>r?f.readUInt32LE(p):f.readUInt32BE(p),l=(f,p)=>Number(r?f.readBigUInt64LE(p):f.readBigUInt64BE(p)),a,d,u;i?(a=l(n,32),d=o(n,54),u=o(n,56)):(a=s(n,28),d=o(n,42),u=o(n,44));let c=null;for(let f=0;f<u;f++){let p=Buffer.alloc(d);if(at.readSync(t,p,0,d,a+f*d),s(p,0)!==mf)continue;let y;i?y=l(p,48):y=s(p,28),y>0&&(c===null||y<c)&&(c=y)}return c??0}catch{return null}finally{at.closeSync(t)}}function $a(e){let t=[];if(!at.existsSync(e))return t;let n=at.readdirSync(e,{withFileTypes:!0});for(let i of n){let r=Ft.join(e,i.name);i.isDirectory()?t.push(...$a(r)):i.name.endsWith(".so")&&t.push(r)}return t}function Sf(e){return e.includes("arm64-v8a")?"arm64-v8a":e.includes("x86_64")?"x86_64":"unknown"}var Oa=async e=>{if(Pe()||(Ue.error(Ye.red(`You are not logged in. Run \`${m.nameLower} login\` first.`)),process.exit(1)),e.apk){await Ef(e);return}let n=process.cwd(),i=qn.join(n,"package.json");pn.existsSync(i)||(Ue.error(Ye.red("No package.json found. Run this command from a project root.")),process.exit(1));let r=JSON.parse(pn.readFileSync(i,"utf-8")),o=!!(r.dependencies?.expo||r.devDependencies?.expo);e.json||(Ue.info(Ye.dim(`Project: ${r.name||"unknown"} v${r.version||"0.0.0"}`)),Ue.info(Ye.dim(`Type: ${o?"Expo":"Bare React Native"}`)),Ue.info(""));let s={json:e.json,fix:e.fix,category:e.category,severity:e.severity,prebuild:e.prebuild},l=await Aa(n,s);e.json?console.log(JSON.stringify(wa(l,r),null,2)):Ia(l,e.severity);let a=l.some(u=>u.findings.some(c=>c.severity==="critical")),d=l.some(u=>u.findings.some(c=>c.severity==="high"));(a||d)&&process.exit(1)},va=["16kb"];async function Ef(e){let t=e.category?.toLowerCase();t&&!va.includes(t)&&(Ue.error(Ye.red(`Unknown APK check category: "${t}"`)),Ue.info(Ye.dim(`Available APK checks: ${va.join(", ")}`)),process.exit(1));let n=await Af(e.apk);n||process.exit(1);let i=!t,r=!1;(i||t==="16kb")&&(await Ra(n)||(r=!0)),r&&process.exit(1)}async function Af(e){if(e.startsWith("build:")){let n=e.slice(6);return await If(n)}if(e.startsWith("http://")||e.startsWith("https://"))return await Da(e);let t=qn.resolve(e);return pn.existsSync(t)?t:(Ue.error(Ye.red(`APK file not found: ${t}`)),null)}async function If(e){let t=Pa();t.start(`Fetching APK from build ${e}...`);try{let n=await k.get(`/build/${e}`);if(n.data.status!=="success")throw new Error(n.data.message);let i=n.data.build;if(!i)throw new Error("Build not found");let r=i.artifacts?.find(o=>o.type?o.type==="apk":o.name?.endsWith(".apk")||o.url?.includes(".apk"));return!r||!r.url?(t.stop("No APK artifact found"),Ue.error(Ye.red("This build does not have an APK artifact.")),Ue.info(Ye.dim("Make sure the build produced an APK (not just an AAB).")),null):(t.stop(`Found build: ${i.buildId||e}`),await Da(r.url))}catch(n){return t.stop("Failed to fetch build"),Ue.error(Ye.red(n.message)),null}}async function Da(e){let t=Pa();t.start("Downloading APK...");try{let n=pn.mkdtempSync(qn.join(yf.tmpdir(),`${m.nameLower}-audit-`)),i=qn.join(n,"app.apk"),r=await bf.get(e,{responseType:"arraybuffer"});pn.writeFileSync(i,r.data);let o=(r.data.length/(1024*1024)).toFixed(1);return t.stop(`Downloaded APK (${o} MB)`),i}catch(n){return t.stop("Download failed"),Ue.error(Ye.red(`Failed to download APK: ${n.message}`)),null}}var Rf=console.log;console.log=()=>{};_f();console.log=Rf;we(Ee.bgCyan.black(m.cliTag("Production Build Orchestrator")));var vf=$f(import.meta.url),Pf=vf("../package.json"),Na=(e,t=[])=>t.concat(e),re=new wf;re.name(m.nameLower).description(`${m.name} CLI: Powerful Cloud Infrastructure Tools`).version(Pf.version).option("-y, --yes","Automatically answer yes to all prompts",!1).option("--quiet","Suppress non-essential output",!1);re.command("agent").description("Manage local device discovery agent for the Install Hub (port 7070)").argument("[action]","start, run, install, status, restart, stop, or uninstall","start").action(async e=>{await Ns(e)});re.command("host").description("Setup AWS S3 static hosting and CloudFront").action(async()=>{we(Ee.bgCyan.black(m.cliTag("Hosting"))),await Ir()});re.command("sitemap").description("Generate sitemap.xml from Expo Router app structure").option("-o, --output <path>","Output path for sitemap.xml","./public/sitemap.xml").action(async e=>{we(Ee.bgCyan.black(m.cliTag("Sitemap Generator"))),await $r(e)});re.command("build").description("Run a build on a cloud provider (AWS Spot Instances)").argument("[platform]","Target platform (android, ios)").option("--platform <os>","Target platform alias (android, ios) [Optional]").option("--repo <url>","Git Repository URL").option("--branch <name>","Git Branch").option("--ami <id>","AMI ID").option("--bucket <name>","S3 Bucket for artifacts").option("--region <region>","AWS Region").option("--aws-profile <name>","AWS Credentials Profile").option("-p, --build-profile <name>","Build Profile (e.g. production, staging)").option("--profile <name>","Build Profile (alias for --build-profile)").option("--dry-run","Generate User Data script without launching").option("--keep-instance","Do not terminate the instance after build").option("--subnet <id>","VPC Subnet ID to launch the instance in").option("--security-group <id>","VPC Security Group ID to use").option("--ssh-host <host>","Remote host for iOS build (SSH)").option("--ssh-user <user>","SSH username for remote host").option("--ssh-key <path>","Path to private SSH key for remote host").option("--ios-scheme <scheme>","iOS Scheme to build").option("--ios-team-id <id>","Apple Development Team ID").option("--ios-configuration <config>","Xcode configuration (Release/Debug)").option("--ios-export-method <method>","Export method (ad-hoc, app-store, development, enterprise)").option("--ios-api-key-id <id>","App Store Connect API Key ID").option("--ios-api-key-issuer <id>","App Store Connect API Key Issuer ID").option("--ios-api-key-path <path>","Path to App Store Connect API Key (.p8) file").option("--simulator","Build for iOS Simulator (no signing required)").addOption(new Fe("--build-id <id>","Internal build ID").hideHelp()).addOption(new Fe("--project-id <id>","Internal project ID").hideHelp()).addOption(new Fe("--fail-only","Internal: mark an existing build failed").hideHelp()).addOption(new Fe("--error <message>","Internal failure message").hideHelp()).option("--local","Run build on local machine").option("--auto-version","Automatically fetch and increment Android versionCode or iOS buildNumber from the store").option("--auto-submit","Submit this build after it completes successfully").option("--submit-track <track>","Google Play track to use with --auto-submit").option("--submit-release-status <status>","Google Play release status to use with --auto-submit").option("--submit-rollout <fraction>","Google Play staged rollout fraction to use with --auto-submit").option("--submit-changes-not-sent-for-review","Commit Google Play changes without automatically sending them for review when using --auto-submit").option("--submit-credential-id <id>","Service credential ID to use with --auto-submit").option("--submit-json-output <path>","Write auto-submit metadata JSON to a file for CI/CD").option("--verbose","Enable verbose logging").option("--json-output <path>","Write build metadata JSON to a file for CI/CD").option("--maestro","Queue a managed Maestro test run after a successful build").option("--maestro-flows <path>","Maestro flow file or directory (default: .maestro)").option("--maestro-device <device>","Managed Maestro device profile").option("--maestro-retries <n>","Retries for the Maestro run","1").option("--maestro-record","Enable screen recording where supported").option("--maestro-use-build-source","Use Maestro flows from the build source snapshot instead of uploading local flows").option("--maestro-env <name>","Forward an environment variable to the managed Maestro runner; repeat or comma-separate names",Na,[]).option("-y, --yes","Automatically answer yes to all prompts",!1).option("--quiet","Suppress non-essential output",!1).action(async(e,t)=>{let n=re.opts();t.yes=t.yes||n.yes,t.quiet=t.quiet||n.quiet,t.platform=e||t.platform,t.buildProfile=t.profile||t.buildProfile,t.quiet||we(Ee.bgCyan.black(m.cliTag("Cloud Build"))),await On(t)});re.command("maestro").description("Run Maestro tests locally or with the managed Mach runner").option("--platform <os>","Target platform (android/ios)").option("-p, --profile <name>","Build profile to resolve when using --latest","production").option("--latest","Use the latest successful build for the platform/profile").option("--build-id <id>","Use a specific Mach build ID").option("--build-url <url>","Use a Mach build URL").option("--artifact-url <url>","Use a direct APK or iOS simulator app artifact URL").option("--local","Run Maestro on a connected local emulator/device instead of the managed runner").option("--maestro-flows <path>","Maestro flow file or directory (default: .maestro)").option("--maestro-device <device>","Managed Maestro device profile").option("--maestro-retries <n>","Retries for the Maestro run","1").option("--maestro-record","Enable screen recording where supported").option("--maestro-use-build-source","Use Maestro flows from the build source snapshot instead of uploading local flows").option("--maestro-env <name>","Forward an environment variable to the managed Maestro runner; repeat or comma-separate names",Na,[]).option("--wait","Wait for managed Maestro completion and exit non-zero on failure").option("--wait-timeout <minutes>","Maximum minutes to wait for managed Maestro completion","60").option("--wait-interval <seconds>","Polling interval while waiting for managed Maestro completion","15").option("--json-output <path>","Write test run metadata JSON to a file for CI/CD").addOption(new Fe("--local-runner","Internal: execute a managed Maestro run on this machine").hideHelp()).addOption(new Fe("--test-run-id <id>","Internal test run ID").hideHelp()).addOption(new Fe("--project-id <id>","Internal project ID").hideHelp()).addOption(new Fe("--runner-token <token>","Internal runner token").hideHelp()).action(async e=>{we(Ee.bgCyan.black(m.cliTag("Maestro Testing"))),await ho(e)});re.command("update").description("Deploy an Over-The-Air (OTA) update to your live channel").option("--branch <name>","Channel or Branch to deploy to (e.g., production)","production").action(async e=>{we(Ee.bgCyan.black(m.cliTag("OTA Update"))),await Ks(e)});re.command("submit").description("Automated Store Submission (App Store / Google Play)").option("--platform <os>","Target platform (ios/android)").option("-p, --profile <name>","Build/submission profile to submit from (e.g. production, preprod)").option("--track <track>","Google Play Track (internal, alpha, beta, production)").option("--release-status <status>","Google Play release status (completed, draft, halted, inProgress)").option("--rollout <fraction>","Google Play staged rollout fraction for inProgress releases (example: 0.1)").option("--changes-not-sent-for-review","Commit Google Play changes without automatically sending them for review").option("--ssh-host <host>","Remote macOS host for iOS submission").option("--ssh-user <user>","SSH username for remote iOS submission").option("--ssh-key <path>","Path to private SSH key for remote iOS submission").option("--credential-id <id>","Service credential ID to use when multiple submission credentials exist").option("--local","Run submission on this machine (internal runner mode for iOS)").addOption(new Fe("--submit-id <id>","Internal submission ID").hideHelp()).addOption(new Fe("--project-id <id>","Internal project ID").hideHelp()).addOption(new Fe("--package-name <name>","Internal Android package name").hideHelp()).addOption(new Fe("--bundle-id <id>","Internal iOS bundle identifier").hideHelp()).option("--json-output <path>","Write submission metadata JSON to a file for CI/CD").option("--latest","Use the latest successful build for submission").option("--build-id <id>","Use a specific build ID for submission").action(async e=>{let t=re.opts();e.quiet=e.quiet||t.quiet,e.yes=e.yes||t.yes,we(Ee.bgCyan.black(m.cliTag("Store Submission"))),await wn(e)});re.command("login").description(`Login to ${m.name} Dashboard`).action(async()=>{we(Ee.bgCyan.black(m.cliTag("Login"))),await xs()});re.command("logout").description(`Logout from ${m.name} on this machine`).action(async()=>{we(Ee.bgCyan.black(m.cliTag("Logout"))),await Ms()});re.command("link").description(`Link local directory to a ${m.name} Project`).action(async()=>{we(Ee.bgCyan.black(m.cliTag("Link Project"))),await Fs()});re.command("me").description("Display currently logged in user details").action(async()=>{await zs()});re.command("init").description(`Create a new ${m.name} Project`).action(async()=>{we(Ee.bgCyan.black(m.cliTag("Init Project"))),await Bs()});re.command("env").description("Manage Environment Variables").argument("<action>","Action to perform: set, list, pull, download, or export").argument("[args...]","Key=Value pairs for set action").option("-e, --environment <name>","Environment to pull/download","development").option("-o, --out <file>","Output file for pull/download",".env.local").option("--overwrite","Overwrite output file if it already exists").action(async(e,t,n)=>{we(Ee.bgCyan.black(m.cliTag("Env Manager"))),await js(e,t,n)});re.command("start").description("Start the development server (Metro)").option("-p, --build-profile <name>","Build profile (e.g. development, staging)","development").option("--tunnel","Use ngrok tunnel").option("--lan","Use LAN IP").option("--localhost","Use localhost").option("-c, --clear","Clear Metro cache").option("--port <number>","Port to listen on").option("--ios","Start on iOS").option("--android","Start on Android").option("--web","Start on Web").action(async e=>{we(Ee.bgCyan.black(m.cliTag("Dev Server"))),await Ys(e)});re.command("config").description("Show resolved configuration for a profile").option("-p, --profile <name>","Build profile to resolve","development").option("--json","Output as JSON").action(async e=>{await Js(e)});re.command("credentials").description("Unified, interactive credential management (iOS/Android)").option("-p, --profile <name>","Build profile (production, staging, development)").option("--force","Force recreate certificates (nuke existing on Apple Portal)",!1).action(async e=>{let{credentialsMainCommand:t}=await import("./credentials-CT2WW52S.js");await t(e)});re.command("credentials:setup").description("Automated credential provisioning (iOS/Android) [Legacy]").requiredOption("--platform <os>","Platform: ios or android").option("--profile <name>","Build profile (production, staging, development)").option("--bundle-id <id>","Bundle ID / Package Name (optional, auto-detected)").option("--team-id <id>","Apple Team ID (iOS only)").option("--key-alias <alias>","Android keystore alias (optional, auto-generated)").option("--aws-profile <name>","AWS Credentials Profile (for S3 storage)").option("--force","Force recreate certificates (nuke existing on Apple Portal)",!1).action(async e=>{we(Ee.bgCyan.black(m.cliTag("Credentials Setup"))),await Ht(e),Ca(Ee.green("Done!"))});re.command("credentials:service").description("Upload Service Credentials (ASC API Key / Google Service JSON) [Legacy]").requiredOption("--platform <os>","Platform: ios or android").option("--file <path>","Path to credential file (.p8 or .json)").option("--issuer-id <id>","ASC API Key Issuer ID (iOS only)").option("--key-id <id>","ASC API Key ID (iOS only)").option("--bundle-id <id>","Bundle identifier / Android package name to attach this service credential to").option("--package-name <name>","Android package name to attach this service credential to").option("-p, --profile <name>","Build profile to resolve package/bundle identifier from config").action(async e=>{we(Ee.bgCyan.black(m.cliTag("Service Credentials"))),await Er(e),Ca(Ee.green("Done!"))});var sr=re.command("device").description("Manage registered iOS test devices");sr.command("register").description("Register a connected iOS device or enter UDID manually").option("--udid <udid>","Device UDID (skip auto-detection)").option("--name <name>","Device name").option("--team-id <id>","Apple Developer Team ID for this device").action(async e=>{await Hn("register",e)});sr.command("list").description("List all registered devices").option("--team-id <id>","Filter by Apple Developer Team ID").action(async e=>{await Hn("list",e)});sr.command("remove").description("Remove a registered device").option("--udid <udid>","Device UDID to remove").option("--team-id <id>","Apple Developer Team ID for this device").action(async e=>{await Hn("remove",e)});re.command("audit").description("Run automated security audit on the project or APK").option("--apk <path>","Path to APK file (runs APK diagnostics like 16KB alignment)").option("--json","Output results as JSON (for CI/CD)").option("--fix","Auto-apply fixes where possible").option("--category <name>","Run only a specific check category (e.g. 16kb, permissions, secrets)").option("--severity <level>","Minimum severity to display (critical, high, medium, low, info)").option("--prebuild","Run expo prebuild for deeper manifest/plist analysis").action(async e=>{we(Ee.bgCyan.black(m.cliTag(e.apk?"APK Audit":"Security Audit"))),await Oa(e)});var Of=new Set(["login","logout","agent"]);re.hook("preAction",(e,t)=>{let n=t.name(),i=t.opts?.()||{};n==="maestro"&&(i.local||i.localRunner)||Of.has(n)||mr()});re.on("command:*",()=>{console.error(`Invalid command: %s
+`));for(let a of s)Se.error(fe.red(`${fe.bold(a.name)} ${fe.dim(`(${a.arch})`)}`)),Se.info(fe.dim(`  PT_LOAD alignment: 2**${Math.log2(a.align)} (${a.align} bytes, needs 2**14 = ${_a})`))}return l.length>0&&(console.log(""),Se.success(fe.green(`${l.length} librar${l.length===1?"y":"ies"} correctly aligned (2**14 or higher).`))),console.log(""),s.length===0?(Se.success(fe.green.bold("ELF Verification Successful. APK is 16KB compatible.")),!0):(Se.error(fe.red.bold(`Found ${s.length} unaligned lib${s.length===1?"":"s"} (arm64-v8a/x86_64 libs need to be aligned).`)),console.log(""),Se.info(fe.yellow("To fix this:")),Se.info(fe.dim("  1. Rebuild with NDK r28+ which defaults to 16KB page alignment")),Se.info(fe.dim("  2. Or set -DANDROID_SUPPORT_FLEXIBLE_PAGE_SIZES=ON in CMake")),Se.info(fe.dim("  3. Update third-party libraries that ship prebuilt .so files")),Se.info(fe.dim("  4. After rebuilding: zipalign -p -f -v 16 input.apk output.apk")),console.log(""),Se.info(fe.dim("Reference: https://developer.android.com/guide/practices/page-sizes")),!1)}catch(r){return n.stop("Analysis failed."),Se.error(fe.red(`Failed to analyze APK: ${r.message}`)),!1}finally{try{at.rmSync(i,{recursive:!0,force:!0})}catch{}}}function hf(e){let t=at.openSync(e,"r");try{let n=Buffer.alloc(64);if(at.readSync(t,n,0,64,0),!n.subarray(0,4).equals(gf))return null;let i=n[4]===2,r=n[5]===1,o=(f,p)=>r?f.readUInt16LE(p):f.readUInt16BE(p),s=(f,p)=>r?f.readUInt32LE(p):f.readUInt32BE(p),l=(f,p)=>Number(r?f.readBigUInt64LE(p):f.readBigUInt64BE(p)),a,d,u;i?(a=l(n,32),d=o(n,54),u=o(n,56)):(a=s(n,28),d=o(n,42),u=o(n,44));let c=null;for(let f=0;f<u;f++){let p=Buffer.alloc(d);if(at.readSync(t,p,0,d,a+f*d),s(p,0)!==mf)continue;let y;i?y=l(p,48):y=s(p,28),y>0&&(c===null||y<c)&&(c=y)}return c??0}catch{return null}finally{at.closeSync(t)}}function $a(e){let t=[];if(!at.existsSync(e))return t;let n=at.readdirSync(e,{withFileTypes:!0});for(let i of n){let r=Ft.join(e,i.name);i.isDirectory()?t.push(...$a(r)):i.name.endsWith(".so")&&t.push(r)}return t}function Sf(e){return e.includes("arm64-v8a")?"arm64-v8a":e.includes("x86_64")?"x86_64":"unknown"}var Oa=async e=>{if(Pe()||(Ue.error(Ye.red(`You are not logged in. Run \`${m.nameLower} login\` first.`)),process.exit(1)),e.apk){await Ef(e);return}let n=process.cwd(),i=qn.join(n,"package.json");pn.existsSync(i)||(Ue.error(Ye.red("No package.json found. Run this command from a project root.")),process.exit(1));let r=JSON.parse(pn.readFileSync(i,"utf-8")),o=!!(r.dependencies?.expo||r.devDependencies?.expo);e.json||(Ue.info(Ye.dim(`Project: ${r.name||"unknown"} v${r.version||"0.0.0"}`)),Ue.info(Ye.dim(`Type: ${o?"Expo":"Bare React Native"}`)),Ue.info(""));let s={json:e.json,fix:e.fix,category:e.category,severity:e.severity,prebuild:e.prebuild},l=await Aa(n,s);e.json?console.log(JSON.stringify(wa(l,r),null,2)):Ia(l,e.severity);let a=l.some(u=>u.findings.some(c=>c.severity==="critical")),d=l.some(u=>u.findings.some(c=>c.severity==="high"));(a||d)&&process.exit(1)},va=["16kb"];async function Ef(e){let t=e.category?.toLowerCase();t&&!va.includes(t)&&(Ue.error(Ye.red(`Unknown APK check category: "${t}"`)),Ue.info(Ye.dim(`Available APK checks: ${va.join(", ")}`)),process.exit(1));let n=await Af(e.apk);n||process.exit(1);let i=!t,r=!1;(i||t==="16kb")&&(await Ra(n)||(r=!0)),r&&process.exit(1)}async function Af(e){if(e.startsWith("build:")){let n=e.slice(6);return await If(n)}if(e.startsWith("http://")||e.startsWith("https://"))return await Da(e);let t=qn.resolve(e);return pn.existsSync(t)?t:(Ue.error(Ye.red(`APK file not found: ${t}`)),null)}async function If(e){let t=Pa();t.start(`Fetching APK from build ${e}...`);try{let n=await k.get(`/build/${e}`);if(n.data.status!=="success")throw new Error(n.data.message);let i=n.data.build;if(!i)throw new Error("Build not found");let r=i.artifacts?.find(o=>o.type?o.type==="apk":o.name?.endsWith(".apk")||o.url?.includes(".apk"));return!r||!r.url?(t.stop("No APK artifact found"),Ue.error(Ye.red("This build does not have an APK artifact.")),Ue.info(Ye.dim("Make sure the build produced an APK (not just an AAB).")),null):(t.stop(`Found build: ${i.buildId||e}`),await Da(r.url))}catch(n){return t.stop("Failed to fetch build"),Ue.error(Ye.red(n.message)),null}}async function Da(e){let t=Pa();t.start("Downloading APK...");try{let n=pn.mkdtempSync(qn.join(yf.tmpdir(),`${m.nameLower}-audit-`)),i=qn.join(n,"app.apk"),r=await bf.get(e,{responseType:"arraybuffer"});pn.writeFileSync(i,r.data);let o=(r.data.length/(1024*1024)).toFixed(1);return t.stop(`Downloaded APK (${o} MB)`),i}catch(n){return t.stop("Download failed"),Ue.error(Ye.red(`Failed to download APK: ${n.message}`)),null}}var Rf=console.log;console.log=()=>{};_f();console.log=Rf;we(Ee.bgCyan.black(m.cliTag("Production Build Orchestrator")));var vf=$f(import.meta.url),Pf=vf("../package.json"),Na=(e,t=[])=>t.concat(e),re=new wf;re.name(m.nameLower).description(`${m.name} CLI: Powerful Cloud Infrastructure Tools`).version(Pf.version).option("-y, --yes","Automatically answer yes to all prompts",!1).option("--quiet","Suppress non-essential output",!1);re.command("agent").description("Manage local device discovery agent for the Install Hub (port 7070)").argument("[action]","start, run, install, status, restart, stop, or uninstall","start").action(async e=>{await Ns(e)});re.command("host").description("Setup AWS S3 static hosting and CloudFront").action(async()=>{we(Ee.bgCyan.black(m.cliTag("Hosting"))),await Ir()});re.command("sitemap").description("Generate sitemap.xml from Expo Router app structure").option("-o, --output <path>","Output path for sitemap.xml","./public/sitemap.xml").action(async e=>{we(Ee.bgCyan.black(m.cliTag("Sitemap Generator"))),await $r(e)});re.command("build").description("Run a build on a cloud provider (AWS Spot Instances)").argument("[platform]","Target platform (android, ios)").option("--platform <os>","Target platform alias (android, ios) [Optional]").option("--repo <url>","Git Repository URL").option("--branch <name>","Git Branch").option("--ami <id>","AMI ID").option("--bucket <name>","S3 Bucket for artifacts").option("--region <region>","AWS Region").option("--aws-profile <name>","AWS Credentials Profile").option("-p, --build-profile <name>","Build Profile (e.g. production, staging)").option("--profile <name>","Build Profile (alias for --build-profile)").option("--dry-run","Generate User Data script without launching").option("--keep-instance","Do not terminate the instance after build").option("--subnet <id>","VPC Subnet ID to launch the instance in").option("--security-group <id>","VPC Security Group ID to use").option("--ssh-host <host>","Remote host for iOS build (SSH)").option("--ssh-user <user>","SSH username for remote host").option("--ssh-key <path>","Path to private SSH key for remote host").option("--ios-scheme <scheme>","iOS Scheme to build").option("--ios-team-id <id>","Apple Development Team ID").option("--ios-configuration <config>","Xcode configuration (Release/Debug)").option("--ios-export-method <method>","Export method (ad-hoc, app-store, development, enterprise)").option("--ios-api-key-id <id>","App Store Connect API Key ID").option("--ios-api-key-issuer <id>","App Store Connect API Key Issuer ID").option("--ios-api-key-path <path>","Path to App Store Connect API Key (.p8) file").option("--simulator","Build for iOS Simulator (no signing required)").addOption(new Fe("--build-id <id>","Internal build ID").hideHelp()).addOption(new Fe("--project-id <id>","Internal project ID").hideHelp()).addOption(new Fe("--fail-only","Internal: mark an existing build failed").hideHelp()).addOption(new Fe("--error <message>","Internal failure message").hideHelp()).option("--local","Run build on local machine").option("--auto-version","Automatically fetch and increment Android versionCode or iOS buildNumber from the store").option("--auto-submit","Submit this build after it completes successfully").option("--submit-track <track>","Google Play track to use with --auto-submit").option("--submit-release-status <status>","Google Play release status to use with --auto-submit").option("--submit-rollout <fraction>","Google Play staged rollout fraction to use with --auto-submit").option("--submit-changes-not-sent-for-review","Commit Google Play changes without automatically sending them for review when using --auto-submit").option("--submit-credential-id <id>","Service credential ID to use with --auto-submit").option("--submit-json-output <path>","Write auto-submit metadata JSON to a file for CI/CD").option("--verbose","Enable verbose logging").option("--json-output <path>","Write build metadata JSON to a file for CI/CD").option("--maestro","Queue a managed Maestro test run after a successful build").option("--maestro-flows <path>","Maestro flow file or directory (default: .maestro)").option("--maestro-device <device>","Managed Maestro device profile").option("--maestro-retries <n>","Retries for the Maestro run","1").option("--maestro-record","Enable screen recording where supported").option("--maestro-use-build-source","Use Maestro flows from the build source snapshot instead of uploading local flows").option("--maestro-env <name>","Forward an environment variable to the managed Maestro runner; repeat or comma-separate names",Na,[]).option("-y, --yes","Automatically answer yes to all prompts",!1).option("--quiet","Suppress non-essential output",!1).action(async(e,t)=>{let n=re.opts();t.yes=t.yes||n.yes,t.quiet=t.quiet||n.quiet,t.platform=e||t.platform,t.buildProfile=t.profile||t.buildProfile,t.quiet||we(Ee.bgCyan.black(m.cliTag("Cloud Build"))),await On(t)});re.command("maestro").description("Run Maestro tests locally or with the managed Mach runner").option("--platform <os>","Target platform (android/ios)").option("-p, --profile <name>","Build profile to resolve when using --latest","production").option("--latest","Use the latest successful build for the platform/profile").option("--build-id <id>","Use a specific Mach build ID").option("--build-url <url>","Use a Mach build URL").option("--artifact-url <url>","Use a direct APK or iOS simulator app artifact URL").option("--local","Run Maestro on a connected local emulator/device instead of the managed runner").option("--maestro-flows <path>","Maestro flow file or directory (default: .maestro)").option("--maestro-device <device>","Managed Maestro device profile").option("--maestro-retries <n>","Retries for the Maestro run","1").option("--maestro-record","Enable screen recording where supported").option("--maestro-use-build-source","Use Maestro flows from the build source snapshot instead of uploading local flows").option("--maestro-env <name>","Forward an environment variable to the managed Maestro runner; repeat or comma-separate names",Na,[]).option("--wait","Wait for managed Maestro completion and exit non-zero on failure").option("--wait-timeout <minutes>","Maximum minutes to wait for managed Maestro completion","60").option("--wait-interval <seconds>","Polling interval while waiting for managed Maestro completion","15").option("--json-output <path>","Write test run metadata JSON to a file for CI/CD").addOption(new Fe("--local-runner","Internal: execute a managed Maestro run on this machine").hideHelp()).addOption(new Fe("--test-run-id <id>","Internal test run ID").hideHelp()).addOption(new Fe("--project-id <id>","Internal project ID").hideHelp()).addOption(new Fe("--runner-token <token>","Internal runner token").hideHelp()).action(async e=>{we(Ee.bgCyan.black(m.cliTag("Maestro Testing"))),await ho(e)});re.command("update").description("Deploy an Over-The-Air (OTA) update to your live channel").option("--branch <name>","Channel or Branch to deploy to (e.g., production)","production").action(async e=>{we(Ee.bgCyan.black(m.cliTag("OTA Update"))),await Ks(e)});re.command("submit").description("Automated Store Submission (App Store / Google Play)").option("--platform <os>","Target platform (ios/android)").option("-p, --profile <name>","Build/submission profile to submit from (e.g. production, preprod)").option("--track <track>","Google Play Track (internal, alpha, beta, production)").option("--release-status <status>","Google Play release status (completed, draft, halted, inProgress)").option("--rollout <fraction>","Google Play staged rollout fraction for inProgress releases (example: 0.1)").option("--changes-not-sent-for-review","Commit Google Play changes without automatically sending them for review").option("--ssh-host <host>","Remote macOS host for iOS submission").option("--ssh-user <user>","SSH username for remote iOS submission").option("--ssh-key <path>","Path to private SSH key for remote iOS submission").option("--credential-id <id>","Service credential ID to use when multiple submission credentials exist").option("--local","Run submission on this machine (internal runner mode for iOS)").addOption(new Fe("--submit-id <id>","Internal submission ID").hideHelp()).addOption(new Fe("--project-id <id>","Internal project ID").hideHelp()).addOption(new Fe("--package-name <name>","Internal Android package name").hideHelp()).addOption(new Fe("--bundle-id <id>","Internal iOS bundle identifier").hideHelp()).option("--json-output <path>","Write submission metadata JSON to a file for CI/CD").option("--latest","Use the latest successful build for submission").option("--build-id <id>","Use a specific build ID for submission").action(async e=>{let t=re.opts();e.quiet=e.quiet||t.quiet,e.yes=e.yes||t.yes,we(Ee.bgCyan.black(m.cliTag("Store Submission"))),await wn(e)});re.command("login").description(`Login to ${m.name} Dashboard`).action(async()=>{we(Ee.bgCyan.black(m.cliTag("Login"))),await xs()});re.command("logout").description(`Logout from ${m.name} on this machine`).action(async()=>{we(Ee.bgCyan.black(m.cliTag("Logout"))),await Ms()});re.command("link").description(`Link local directory to a ${m.name} Project`).action(async()=>{we(Ee.bgCyan.black(m.cliTag("Link Project"))),await Fs()});re.command("me").description("Display currently logged in user details").action(async()=>{await zs()});re.command("init").description(`Create a new ${m.name} Project`).action(async()=>{we(Ee.bgCyan.black(m.cliTag("Init Project"))),await Bs()});re.command("env").description("Manage Environment Variables").argument("<action>","Action to perform: set, list, pull, download, or export").argument("[args...]","Key=Value pairs for set action").option("-e, --environment <name>","Environment to pull/download","development").option("-o, --out <file>","Output file for pull/download",".env.local").option("--overwrite","Overwrite output file if it already exists").action(async(e,t,n)=>{we(Ee.bgCyan.black(m.cliTag("Env Manager"))),await js(e,t,n)});re.command("start").description("Start the development server (Metro)").option("-p, --build-profile <name>","Build profile (e.g. development, staging)","development").option("--tunnel","Use ngrok tunnel").option("--lan","Use LAN IP").option("--localhost","Use localhost").option("-c, --clear","Clear Metro cache").option("--port <number>","Port to listen on").option("--ios","Start on iOS").option("--android","Start on Android").option("--web","Start on Web").action(async e=>{we(Ee.bgCyan.black(m.cliTag("Dev Server"))),await Ys(e)});re.command("config").description("Show resolved configuration for a profile").option("-p, --profile <name>","Build profile to resolve","development").option("--json","Output as JSON").action(async e=>{await Js(e)});re.command("credentials").description("Unified, interactive credential management (iOS/Android)").option("-p, --profile <name>","Build profile (production, staging, development)").option("--force","Force recreate certificates (nuke existing on Apple Portal)",!1).action(async e=>{let{credentialsMainCommand:t}=await import("./credentials-PS7URNCB.js");await t(e)});re.command("credentials:setup").description("Automated credential provisioning (iOS/Android) [Legacy]").requiredOption("--platform <os>","Platform: ios or android").option("--profile <name>","Build profile (production, staging, development)").option("--bundle-id <id>","Bundle ID / Package Name (optional, auto-detected)").option("--team-id <id>","Apple Team ID (iOS only)").option("--key-alias <alias>","Android keystore alias (optional, auto-generated)").option("--aws-profile <name>","AWS Credentials Profile (for S3 storage)").option("--force","Force recreate certificates (nuke existing on Apple Portal)",!1).action(async e=>{we(Ee.bgCyan.black(m.cliTag("Credentials Setup"))),await Ht(e),Ca(Ee.green("Done!"))});re.command("credentials:service").description("Upload Service Credentials (ASC API Key / Google Service JSON) [Legacy]").requiredOption("--platform <os>","Platform: ios or android").option("--file <path>","Path to credential file (.p8 or .json)").option("--issuer-id <id>","ASC API Key Issuer ID (iOS only)").option("--key-id <id>","ASC API Key ID (iOS only)").option("--bundle-id <id>","Bundle identifier / Android package name to attach this service credential to").option("--package-name <name>","Android package name to attach this service credential to").option("-p, --profile <name>","Build profile to resolve package/bundle identifier from config").action(async e=>{we(Ee.bgCyan.black(m.cliTag("Service Credentials"))),await Er(e),Ca(Ee.green("Done!"))});var sr=re.command("device").description("Manage registered iOS test devices");sr.command("register").description("Register a connected iOS device or enter UDID manually").option("--udid <udid>","Device UDID (skip auto-detection)").option("--name <name>","Device name").option("--team-id <id>","Apple Developer Team ID for this device").action(async e=>{await Hn("register",e)});sr.command("list").description("List all registered devices").option("--team-id <id>","Filter by Apple Developer Team ID").action(async e=>{await Hn("list",e)});sr.command("remove").description("Remove a registered device").option("--udid <udid>","Device UDID to remove").option("--team-id <id>","Apple Developer Team ID for this device").action(async e=>{await Hn("remove",e)});re.command("audit").description("Run automated security audit on the project or APK").option("--apk <path>","Path to APK file (runs APK diagnostics like 16KB alignment)").option("--json","Output results as JSON (for CI/CD)").option("--fix","Auto-apply fixes where possible").option("--category <name>","Run only a specific check category (e.g. 16kb, permissions, secrets)").option("--severity <level>","Minimum severity to display (critical, high, medium, low, info)").option("--prebuild","Run expo prebuild for deeper manifest/plist analysis").action(async e=>{we(Ee.bgCyan.black(m.cliTag(e.apk?"APK Audit":"Security Audit"))),await Oa(e)});var Of=new Set(["login","logout","agent"]);re.hook("preAction",(e,t)=>{let n=t.name(),i=t.opts?.()||{};n==="maestro"&&(i.local||i.localRunner)||Of.has(n)||mr()});re.on("command:*",()=>{console.error(`Invalid command: %s
 See --help for a list of available commands.`,re.args.join(" ")),process.exit(1)});process.argv.slice(2).length||re.help();re.parse(process.argv);