@radhya/mach 2.0.24 → 2.0.30
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +39 -0
- package/dist/{chunk-VX4DWB47.js → chunk-6LOQKG2J.js} +18 -18
- package/dist/{credentials-PS7URNCB.js → credentials-P3555DXZ.js} +1 -1
- package/dist/index.js +291 -162
- package/docs/deep-links.md +173 -0
- package/expo-plugin/index.js +119 -0
- package/expo-plugin/package.json +4 -0
- package/package.json +4 -2
package/dist/index.js
CHANGED
|
@@ -1,12 +1,12 @@
|
|
|
1
1
|
#!/usr/bin/env node
|
|
2
|
-
import{a as
|
|
3
|
-
`;s+=`Region: ${
|
|
4
|
-
`,s+=`S3 Website URL: ${
|
|
2
|
+
import{a as Ht,b as nn,c as oo,d as Rt,e as _e,f as ke,g as so,h as ao,i as jt,j as lo,l as rn}from"./chunk-6LOQKG2J.js";import{a as m,b as no,c as Ce,d as io,e as ro,f as Bt,g as nt,h as T}from"./chunk-S64YFTRR.js";import{Command as og,Option as Ke}from"commander";import{configDotenv as sg}from"dotenv";import{intro as we,outro as jl}from"@clack/prompts";import be from"chalk";import{text as co,confirm as zl,spinner as Wl,isCancel as Ti,cancel as on,note as Jl,outro as Yl}from"@clack/prompts";import sn from"chalk";async function uo(){try{let e=await co({message:"Enter Bucket Name:",placeholder:"e.g. my-app-dev",validate(r){if(r.length===0)return"Bucket name is required"}});Ti(e)&&(on("Operation cancelled."),process.exit(0));let t=await co({message:"Enter Region:",initialValue:"ap-south-1"});Ti(t)&&(on("Operation cancelled."),process.exit(0));let n=await zl({message:"Do you want to create a CloudFront Distribution for this bucket?",initialValue:!0});Ti(n)&&(on("Operation cancelled."),process.exit(0));let i=Wl();i.start("Setting up hosting infrastructure...");try{let r=await T.post("/hosting/setup",{bucketName:e,region:t,createCloudFront:n});if(r.data.status!=="success")throw new Error(r.data.message||"Hosting setup failed");i.stop("Hosting setup complete!");let o=r.data,s=`Bucket Name: ${sn.cyan(o.bucketName)}
|
|
3
|
+
`;s+=`Region: ${sn.cyan(o.region)}
|
|
4
|
+
`,s+=`S3 Website URL: ${sn.blue(o.s3WebsiteUrl)}`,o.cloudFrontId&&(s+=`
|
|
5
5
|
|
|
6
|
-
CloudFront ID: ${
|
|
7
|
-
CloudFront URL: ${
|
|
6
|
+
CloudFront ID: ${sn.cyan(o.cloudFrontId)}`,s+=`
|
|
7
|
+
CloudFront URL: ${sn.blue(o.cloudFrontUrl)}`),Jl(s,"Setup Complete!"),Yl("You are all set!")}catch(r){i.stop("Setup failed"),on(`Error: ${r.response?.data?.message||r.message}`)}}catch(e){on(`An unexpected error occurred: ${e.message}`)}}import{readdir as ql,writeFile as Xl,access as Zl,mkdir as Ql}from"fs/promises";import{join as po}from"path";import{spinner as ec,text as fo,isCancel as mo,cancel as xi,note as tc,outro as nc}from"@clack/prompts";import ic from"chalk";async function rc(){let e=["./app","./src/app"];for(let t of e)try{return await Zl(t),t}catch{}return null}async function go(e){try{let n=await rc()||"./app",i=await fo({message:"Enter path to your app directory:",placeholder:n,initialValue:n,validate(u){if(u.length===0)return"Path is required"}});mo(i)&&(xi("Operation cancelled."),process.exit(0));let r=await fo({message:"Enter your website base URL:",placeholder:"https://example.com",validate(u){if(u.length===0)return"Base URL is required";if(!u.startsWith("http"))return"URL must start with http:// or https://"}});mo(r)&&(xi("Operation cancelled."),process.exit(0));let o=ec();o.start("Scanning app directory for routes...");let s=await ho(i);o.stop(`Found ${s.length} routes`);let l=oc(s,r),a=e.output||"./public/sitemap.xml";o.start(`Writing sitemap to ${a}...`);let d=a.substring(0,a.lastIndexOf("/"));if(d)try{await Ql(d,{recursive:!0})}catch{}await Xl(a,l,"utf-8"),o.stop("Sitemap generated successfully!"),tc(`Routes included:
|
|
8
8
|
${s.map(u=>` \u2022 ${u.path}`).join(`
|
|
9
|
-
`)}`,"Sitemap Summary"),
|
|
9
|
+
`)}`,"Sitemap Summary"),nc(`Sitemap saved to ${ic.cyan(a)}`)}catch(t){xi(`An error occurred: ${t.message}`)}}async function ho(e,t=""){let n=[];try{let i=await ql(e,{withFileTypes:!0});for(let r of i){let o=po(e,r.name);if(!(r.name.startsWith("_")||r.name.startsWith("."))){if(r.isDirectory()){let s=await ho(o,po(t,r.name));n.push(...s)}else if(r.isFile()){if(r.name==="index.tsx"||r.name==="index.ts"||r.name==="index.jsx"||r.name==="index.js"){let s=t===""?"/":`/${t}`;n.push({path:s,file:o})}else if(r.name.match(/\.(tsx|ts|jsx|js)$/)&&!r.name.includes("_layout")&&!r.name.includes("+")){let s=r.name.replace(/\.(tsx|ts|jsx|js)$/,""),l=`/${t}/${s}`.replace(/\/+/g,"/");n.push({path:l,file:o})}}}}}catch(i){throw new Error(`Failed to scan directory ${e}: ${i.message}`)}return n}function oc(e,t){let n=new Date().toISOString().split("T")[0];return`<?xml version="1.0" encoding="UTF-8"?>
|
|
10
10
|
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
|
|
11
11
|
${e.map(r=>{let o=r.path;return o=o.replace(/\/\([^)]+\)/g,""),o=o.replace(/\/\[.*?\]/g,"/:id"),o=o.replace(/\/+/g,"/"),o===""&&(o="/"),` <url>
|
|
12
12
|
<loc>${t}${o}</loc>
|
|
@@ -15,7 +15,7 @@ ${e.map(r=>{let o=r.path;return o=o.replace(/\/\([^)]+\)/g,""),o=o.replace(/\/\[
|
|
|
15
15
|
<priority>0.8</priority>
|
|
16
16
|
</url>`}).join(`
|
|
17
17
|
`)}
|
|
18
|
-
</urlset>`}import{randomUUID as
|
|
18
|
+
</urlset>`}import{randomUUID as zu}from"crypto";import he from"path";import zn from"axios";import Wu from"os";import{spinner as Sr,select as Rs,confirm as Ds,isCancel as Wn,cancel as Ps,log as R}from"@clack/prompts";import P from"chalk";import ue from"fs";import{execSync as Os}from"child_process";import Cs from"adm-zip";import{spinner as mc,log as Tn}from"@clack/prompts";import bo from"chalk";import Ao from"fs";import Eo from"path";var yo=`#!/bin/bash
|
|
19
19
|
# --- Mach Cloud Build Script (Android) ---
|
|
20
20
|
# All S3 operations use presigned URLs via curl \u2014 zero AWS credentials on instance.
|
|
21
21
|
BUILD_ID="{{BUILD_ID}}"
|
|
@@ -533,7 +533,7 @@ for pid in "\${cache_pids[@]}"; do wait "$pid" || true; done
|
|
|
533
533
|
echo "Build orchestrator finished. Auto-terminating instance in 5 seconds..."
|
|
534
534
|
sleep 5
|
|
535
535
|
sudo shutdown -h now
|
|
536
|
-
`;import
|
|
536
|
+
`;import cc from"crypto";import{log as Ne}from"@clack/prompts";import Te from"chalk";import{execSync as sc}from"child_process";import xe from"fs";import Gt from"path";var So={id:"expo",displayName:"Expo",applyLocalProcessEnv:e=>{e.developmentClient?(Ne.info(Te.blue("\u2139\uFE0F Configuring Expo build to INCLUDE expo-dev-client (Development Client mode)...")),delete process.env.EXPO_NO_DEV_CLIENT,delete process.env.EXPO_AUTOLINKING_EXCLUDE):(Ne.info(Te.blue("\u2139\uFE0F Configuring Expo build to EXCLUDE expo-dev-client (Production/Staging mode)...")),process.env.EXPO_NO_DEV_CLIENT="1",process.env.EXPO_AUTOLINKING_EXCLUDE="expo-dev-client")},localAndroidEnv:(e,t)=>({EXPO_NO_DOTENV:"1",MACH_FRAMEWORK:"expo",MACH_BUILD_PROFILE:t}),remoteEnvSetupScript:()=>`
|
|
537
537
|
export MACH_FRAMEWORK="expo"
|
|
538
538
|
echo "[ENV] MACH_FRAMEWORK=$MACH_FRAMEWORK"
|
|
539
539
|
export EXPO_NO_DOTENV="\${EXPO_NO_DOTENV:-1}"
|
|
@@ -585,26 +585,26 @@ fi
|
|
|
585
585
|
echo "expo.enableHermes=true" >> gradle.properties
|
|
586
586
|
`,androidRemoteReleaseGradlePropertiesScript:()=>`
|
|
587
587
|
echo "expo.enableProguardInReleaseBuilds=true" >> gradle.properties
|
|
588
|
-
`,prepareLocalProject:async e=>{let{platform:t,options:n,cacheMeta:i,cacheMetaDir:r,currentBuildEnv:o,reportStep:s,loggedRun:l,configureXcodeNodeBinary:a,podsFingerprint:d,writeCacheMeta:u}=e,c=n.iosBundleIdentifier||"",
|
|
588
|
+
`,prepareLocalProject:async e=>{let{platform:t,options:n,cacheMeta:i,cacheMetaDir:r,currentBuildEnv:o,reportStep:s,loggedRun:l,configureXcodeNodeBinary:a,podsFingerprint:d,writeCacheMeta:u}=e,c=n.iosBundleIdentifier||"",p=n.name||"",f=Gt.join(process.cwd(),"app.json"),g=null;Ne.info(Te.blue(`Running Expo prebuild for ${t}...`));try{if(xe.existsSync(f)){g=xe.readFileSync(f,"utf-8");let w=JSON.parse(g);w.expo=w.expo||{},p||(p=w.expo.name||""),t==="ios"&&!c&&(c=w.expo?.ios?.bundleIdentifier||""),n.name&&(w.expo.name=n.name),n.scheme&&(w.expo.scheme=n.scheme),t==="ios"&&n.iosBundleIdentifier?(w.expo.ios=w.expo.ios||{},w.expo.ios.bundleIdentifier=n.iosBundleIdentifier):t==="android"&&n.androidPackage&&(w.expo.android=w.expo.android||{},w.expo.android.package=n.androidPackage),xe.writeFileSync(f,JSON.stringify(w,null,2))}let y=["exec","--","expo","prebuild","--platform",t,"--no-install"];if(await s("prebuild"),await l("npm",y,process.cwd(),o()),t!=="ios"||!xe.existsSync("ios"))return{appName:p,bundleId:c};await s("pods"),Ne.info(Te.blue("Running pod install..."));try{let w=Gt.resolve("ios"),$=Gt.join(w,"Podfile");if(!xe.existsSync($))throw new Error("ios/Podfile not found. Skipping pod install.");let b=o();a(w,b);let x=xe.readFileSync($,"utf-8"),E=n.iosDeploymentTarget||"13.4";if(!n.developmentClient&&(Ne.info(Te.blue("\u2139\uFE0F Patching Podfile to EXCLUDE expo-dev-client...")),x.includes("use_expo_modules!")&&!x.includes("exclude:"))){let O=/use_expo_modules!(\s*)$/m;O.test(x)?x=x.replace(O,'use_expo_modules!(exclude: ["expo-dev-client"])$1'):x=x.replace("use_expo_modules!",'use_expo_modules!(exclude: ["expo-dev-client"])')}let F=`
|
|
589
589
|
installer.generated_projects.each do |project|
|
|
590
590
|
project.targets.each do |target|
|
|
591
591
|
target.build_configurations.each do |config|
|
|
592
|
-
config.build_settings['IPHONEOS_DEPLOYMENT_TARGET'] = '${
|
|
592
|
+
config.build_settings['IPHONEOS_DEPLOYMENT_TARGET'] = '${E}'
|
|
593
593
|
end
|
|
594
594
|
end
|
|
595
595
|
end
|
|
596
596
|
installer.pods_project.targets.each do |target|
|
|
597
597
|
target.build_configurations.each do |config|
|
|
598
|
-
config.build_settings['IPHONEOS_DEPLOYMENT_TARGET'] = '${
|
|
598
|
+
config.build_settings['IPHONEOS_DEPLOYMENT_TARGET'] = '${E}'
|
|
599
599
|
end
|
|
600
600
|
end
|
|
601
|
-
`,
|
|
602
|
-
${
|
|
601
|
+
`,X=/post_install\s+do\s+\|installer\|/;if(X.test(x))Ne.info(Te.dim(`Injecting deployment target (${E}) into existing post_install hook...`)),x=x.replace(X,`post_install do |installer|
|
|
602
|
+
${F}`),xe.writeFileSync($,x);else{Ne.info(Te.dim(`Appending new post_install hook for deployment target (${E})...`));let O=`
|
|
603
603
|
post_install do |installer|
|
|
604
|
-
${
|
|
604
|
+
${F}
|
|
605
605
|
end
|
|
606
|
-
`;
|
|
607
|
-
`),
|
|
606
|
+
`;xe.appendFileSync($,O)}let D="/opt/homebrew/bin/pod",I=xe.existsSync(D)?D:"pod",N=d(w);xe.existsSync(Gt.join(w,"Pods"))&&i.pods&&i.pods!==N&&(await e.reportLog(`[CACHE] Podfile/Podfile.lock changed \u2014 wiping ios/Pods
|
|
607
|
+
`),Ne.info(Te.dim("Podfile fingerprint changed \u2014 clearing Pods for clean install...")),xe.rmSync(Gt.join(w,"Pods"),{recursive:!0,force:!0})),Ne.info(Te.dim(`Using pod command: ${I} in ${w}`)),await l(I,["install"],w,b),i.pods=N,u(r,i)}catch(w){let $=w.message||"Unknown error";Ne.warn(Te.yellow(`Native "pod" command failed: ${$}`)),Ne.info(Te.dim("Falling back to npm exec pod-install..."));let b=o();a(Gt.resolve("ios"),b),Ne.info(Te.magenta(`${m.nameUpper}_DEBUG: Executing pod-install override via npx --yes pod-install@latest`)),await l("npx",["--yes","pod-install@latest","ios"],process.cwd(),b)}if(xe.existsSync("ios/Pods")){Ne.info(Te.dim("Disabling signing for Pod targets to prevent conflicts..."));try{sc(`find ios/Pods -name "project.pbxproj" -exec sed -i '' 's/buildSettings = {/buildSettings = { CODE_SIGNING_ALLOWED = NO; CODE_SIGNING_REQUIRED = NO; PROVISIONING_PROFILE_SPECIFIER = ""; EXPANDED_CODE_SIGN_IDENTITY = "";/g' {} +`,{stdio:"ignore"})}catch{}}return{appName:p,bundleId:c}}finally{g&&xe.writeFileSync(f,g)}}};import{log as Dt}from"@clack/prompts";import Pt from"chalk";import st from"fs";import an from"path";var ac=(e,t)=>!st.existsSync(e)||!st.existsSync(t)?!1:st.readFileSync(e,"utf-8")!==st.readFileSync(t,"utf-8"),Li={id:"react-native",displayName:"React Native",applyLocalProcessEnv:e=>{delete process.env.EXPO_NO_DEV_CLIENT,delete process.env.EXPO_AUTOLINKING_EXCLUDE,delete process.env.EXPO_NO_DOTENV},localAndroidEnv:(e,t)=>({MACH_FRAMEWORK:"react-native",MACH_BUILD_PROFILE:t}),remoteEnvSetupScript:()=>`
|
|
608
608
|
export MACH_FRAMEWORK="react-native"
|
|
609
609
|
echo "[ENV] MACH_FRAMEWORK=$MACH_FRAMEWORK"
|
|
610
610
|
unset EXPO_NO_DOTENV
|
|
@@ -619,17 +619,17 @@ echo "[PREBUILD] React Native framework configured. Skipping Expo prebuild."
|
|
|
619
619
|
:
|
|
620
620
|
`,androidRemoteReleaseGradlePropertiesScript:()=>`
|
|
621
621
|
:
|
|
622
|
-
`,prepareLocalProject:async e=>{let{platform:t,cacheMeta:n,cacheMetaDir:i,currentBuildEnv:r,reportStep:o,reportLog:s,loggedRun:l,configureXcodeNodeBinary:a,podsFingerprint:d,writeCacheMeta:u}=e;if(t!=="ios")return{};let c=
|
|
623
|
-
`),
|
|
624
|
-
`),
|
|
625
|
-
`):"",
|
|
626
|
-
export MACH_APP_NAME="${
|
|
627
|
-
export MACH_BUILD_PROFILE="${
|
|
628
|
-
export MACH_ANDROID_RELEASE_ABIS="${
|
|
629
|
-
export MACH_ENV_FINGERPRINT="${
|
|
622
|
+
`,prepareLocalProject:async e=>{let{platform:t,cacheMeta:n,cacheMetaDir:i,currentBuildEnv:r,reportStep:o,reportLog:s,loggedRun:l,configureXcodeNodeBinary:a,podsFingerprint:d,writeCacheMeta:u}=e;if(t!=="ios")return{};let c=an.resolve("ios"),p=an.join(c,"Podfile");if(!st.existsSync(p))throw new Error("React Native iOS build requires ios/Podfile. Commit the ios directory for vanilla React Native projects.");await o("pods"),Dt.info(Pt.blue("Running React Native pod install..."));let f=r();a(c,f);let g=an.join(c,"Pods"),y=an.join(c,"Podfile.lock"),w=an.join(g,"Manifest.lock"),$=st.existsSync(g),b=d(c);$&&n.reactNativePods&&n.reactNativePods!==b?(await s(`[CACHE] React Native Podfile/Podfile.lock changed - wiping ios/Pods
|
|
623
|
+
`),Dt.info(Pt.dim("React Native Podfile fingerprint changed - clearing Pods for clean install...")),st.rmSync(g,{recursive:!0,force:!0})):$&&ac(y,w)&&(await s(`[CACHE] React Native Pods Manifest.lock is out of sync - wiping ios/Pods
|
|
624
|
+
`),Dt.info(Pt.dim("React Native Pods manifest is out of sync - clearing Pods for clean install...")),st.rmSync(g,{recursive:!0,force:!0}));let x="/opt/homebrew/bin/pod",E=st.existsSync(x)?x:"pod";try{Dt.info(Pt.dim(`Using pod command: ${E} in ${c}`)),await l(E,["install"],c,f)}catch(F){let X=F.message||"Unknown error";Dt.warn(Pt.yellow(`Native "pod" command failed: ${X}`)),Dt.info(Pt.dim("Falling back to npx pod-install..."));let D=r();a(c,D),Dt.info(Pt.magenta(`${m.nameUpper}_DEBUG: Executing pod-install fallback via npx --yes pod-install@latest`)),await l("npx",["--yes","pod-install@latest","ios"],process.cwd(),D)}return n.reactNativePods=d(c),u(i,n),{}}};var lc={expo:So,"react-native":Li};function at(e){if(!e)return Li;if(e!=="flutter")return lc[e];throw new Error('Flutter builds are not implemented yet. Set framework to "expo" or "react-native" for this build.')}var dc="mach-env-v2-js-bundle-cache",uc=new Set(["BUILD_ID","BUILD_NUMBER","ANDROID_VERSION_CODE","MACH_TOKEN","MACH_DEBUG","MACH_S3_DEBUG","MACH_ENV_FINGERPRINT","CODEARTIFACT_AUTH_TOKEN","EXPO_ZQRN_BB_REPO_TOKEN","SENTRY_AUTH_TOKEN","IOS_DIST_P12","IOS_PROVISIONING_PROFILE","IOS_P12_PASSWORD","MATCH_ENCRYPTION_PASSPHRASE","MATCH_PASSWORD","MATCH_KEYCHAIN_NAME","MATCH_KEYCHAIN_PASSWORD","APPLE_TEAM_ID","FASTLANE_TEAM_ID","ANDROID_KEYSTORE","ANDROID_KEYSTORE_BASE64","ANDROID_STORE_PASSWORD","ANDROID_KEY_PASSWORD","ANDROID_KEY_ALIAS","KEYSTORE_PASSWORD","KEYSTORE_ALIAS","AWS_ACCESS_KEY_ID","AWS_SECRET_ACCESS_KEY","AWS_SESSION_TOKEN","AWS_SECURITY_TOKEN","GITHUB_TOKEN","NPM_TOKEN"]),pc=["PRESIGNED_","KEYSTORE_PASSWORD_"],fc=e=>!e||uc.has(e)?!1:!pc.some(t=>e.startsWith(t)),Ot=(e,t,n)=>{let i=at(n.framework);return{...e,...i.localAndroidEnv(n,t),MACH_APP_NAME:n.appName||n.name||"App"}},Kt=e=>{let t=Object.entries(e).filter(([n])=>fc(n)).sort(([n],[i])=>n.localeCompare(i));return cc.createHash("sha256").update(JSON.stringify({version:dc,entries:t})).digest("hex")};var Mi=e=>e.replace(/\\/g,"\\\\").replace(/"/g,'\\"').replace(/\$/g,"\\$").replace(/`/g,"\\`"),Ui=e=>["1","true","yes","on"].includes(String(e||"").trim().toLowerCase()),gc=e=>/(^|[-_])(maestro|e2e|test|emulator)([-_]|$)/i.test(e),hc=(e,t,n)=>{let i=n.MACH_ANDROID_RELEASE_ABIS||n.MACH_ANDROID_ABIS||n.MACH_PROFILE_ANDROID_RELEASE_ABIS||n.MACH_PROFILE_ANDROID_ABIS||n.MACH_PROFILE_ANDROID_ARCHITECTURES||n.MACH_PROFILE_ANDROID_REACT_NATIVE_ARCHITECTURES;return i||(!!e.maestro||gc(t)||Ui(n.MACH_PROFILE_ANDROID_EMULATOR)||Ui(n.MACH_ANDROID_INCLUDE_EMULATOR_ABIS)||Ui(n.MACH_PROFILE_ANDROID_INCLUDE_EMULATOR_ABIS)?"armeabi-v7a,arm64-v8a,x86_64":"armeabi-v7a,arm64-v8a")},Io=async(e,t,n={},i,r)=>{let o=mc(),s=at(e.framework),l=e.buildProfile||"production",a=l==="production",d=e.apk===!0,u=e.developmentClient?"assembleDebug":a?"bundleRelease":"assembleRelease",c=e.buildCommand||(d?"assembleRelease":u),p=e.nodeVersion?[`echo "[NODE] Switching to Node ${e.nodeVersion}..."`,`CURRENT_MAJOR=$(node -e "process.stdout.write(process.version.split('.')[0].replace('v',''))" 2>/dev/null || echo "0")`,`if [ "$CURRENT_MAJOR" != "${e.nodeVersion}" ]; then`,` curl -fsSL https://deb.nodesource.com/setup_${e.nodeVersion}.x | bash - 2>&1`," apt-get install -y nodejs 2>&1",' echo "[NODE] Installed Node $(node -v)"',"else",' echo "[NODE] Already on Node $(node -v) \u2014 no switch needed"',"fi"].join(`
|
|
625
|
+
`):"",f;if(r){let b=Eo.isAbsolute(r)?r:Eo.resolve(process.cwd(),r);Ao.existsSync(b)?(f=Ao.readFileSync(b,"utf-8"),Tn.info(bo.magenta(`\u2713 Loaded preBuild hook: ${r}`))):Tn.warn(`preBuild script not found at ${b} \u2014 skipping`)}let g=hc(e,l,n),y={...Ot(n,l,e),MACH_ANDROID_RELEASE_ABIS:g},w=Kt(y),$=yo.replace(/\{\{BUILD_ID\}\}/g,t).replace(/\{\{BUILD_COMMAND\}\}/g,c).replace("{{NODE_VERSION_SETUP}}",p).replace("{{ENV_VARS}}",`
|
|
626
|
+
export MACH_APP_NAME="${Mi(y.MACH_APP_NAME)}"
|
|
627
|
+
export MACH_BUILD_PROFILE="${Mi(l)}"
|
|
628
|
+
export MACH_ANDROID_RELEASE_ABIS="${Mi(g)}"
|
|
629
|
+
export MACH_ENV_FINGERPRINT="${w}"
|
|
630
630
|
${s.remoteEnvSetupScript().trim()}
|
|
631
631
|
{{ENV_VARS}}
|
|
632
|
-
`).replace("{{FRAMEWORK_ANDROID_VERSION_CODE}}",s.androidRemoteVersionCodeScript().trim()).replace("{{FRAMEWORK_ANDROID_PREBUILD}}",s.androidRemotePrebuildScript().trim()).replace("{{FRAMEWORK_ANDROID_GRADLE_PROPERTIES}}",s.androidRemoteGradlePropertiesScript().trim()).replace("{{FRAMEWORK_ANDROID_RELEASE_GRADLE_PROPERTIES}}",s.androidRemoteReleaseGradlePropertiesScript().trim());if(e.dryRun){
|
|
632
|
+
`).replace("{{FRAMEWORK_ANDROID_VERSION_CODE}}",s.androidRemoteVersionCodeScript().trim()).replace("{{FRAMEWORK_ANDROID_PREBUILD}}",s.androidRemotePrebuildScript().trim()).replace("{{FRAMEWORK_ANDROID_GRADLE_PROPERTIES}}",s.androidRemoteGradlePropertiesScript().trim()).replace("{{FRAMEWORK_ANDROID_RELEASE_GRADLE_PROPERTIES}}",s.androidRemoteReleaseGradlePropertiesScript().trim());if(e.dryRun){Tn.info("User Data Script (dry run):"),console.log($);return}o.start("Requesting cloud build instance...");try{let b=await T.post("/builds/launch-android",{projectId:i,buildId:t,platform:e.platform,buildProfile:e.buildProfile,buildCommand:c,instanceType:e.instanceType,ami:e.ami,keepInstance:e.keepInstance,region:e.region,subnet:e.subnet,securityGroup:e.securityGroup,projectSecrets:n,dryRun:e.dryRun,userDataScript:$,preBuildScriptContent:f});if(b.data.status!=="success")throw new Error(b.data.message||"Failed to launch build instance");let x=b.data.instanceId;return o.stop("Build Started"),Tn.success(bo.green(`Build initiated on cloud instance (${x}).`)),{instanceId:x}}catch(b){o.stop("Android Build Failed");let x=b.response?.data?.message||b.message;throw new Error(`Failed to launch Android build: ${x}`)}};import{spinner as yc,log as Ct}from"@clack/prompts";import lt from"chalk";import Sc from"fs";import{execSync as ln}from"child_process";var wo=`#!/bin/bash
|
|
633
633
|
# --- Mach Cloud Build Script (iOS) ---
|
|
634
634
|
# All S3 operations use presigned URLs via curl \u2014 zero AWS credentials on Mac.
|
|
635
635
|
|
|
@@ -1309,127 +1309,127 @@ touch done
|
|
|
1309
1309
|
if [ ! -z "$PRESIGNED_DONE_MARKER" ]; then
|
|
1310
1310
|
curl -X PUT -T done "$PRESIGNED_DONE_MARKER" --silent
|
|
1311
1311
|
fi
|
|
1312
|
-
`;var
|
|
1312
|
+
`;var _o=e=>e.replace(/\\/g,"\\\\").replace(/"/g,'\\"').replace(/\$/g,"\\$").replace(/`/g,"\\`"),$o=async(e,t,n={},i)=>{let r=yc(),o=at(e.framework);e.sshHost||(e.sshHost="localhost",Ct.message(lt.yellow("No SSH host provided, defaulting to localhost."))),r.start(`Connecting to remote Mac at ${lt.cyan(e.sshHost)}...`);let s=e.sshUser||process.env.USER||"ubuntu",l=e.sshKey,a=`${s}@${e.sshHost}`,d=`ssh ${l?`-i ${l}`:""} -o StrictHostKeyChecking=no ${a}`,u=`scp ${l?`-i ${l}`:""} -o StrictHostKeyChecking=no`;try{let c=s==="ubuntu"?"/home/ubuntu":`/Users/${s}`,p=(n.PROJECT_ID||"default_project").replace(/[^a-zA-Z0-9-_]/g,"_"),f=`${c}/${m.remoteWorkspacesDir}/${p}`;r.message(`Preparing stable workspace: ${f}...`),ln(`${d} "mkdir -p ${f}"`,{stdio:"inherit"}),r.message("Transferring source code...");let g=`/tmp/${m.nameLower}-source-${t}.zip`;ln(`${u} ${g} ${a}:${f}/source.zip`,{stdio:"inherit"});let y=e.iosApiKeyPath?`${f}/api_key.p8`:"",w="";e.iosApiKeyPath&&(r.message("Uploading App Store Connect API key..."),ln(`${u} ${e.iosApiKeyPath} ${a}:${y}`),e.iosApiKeyId&&e.iosApiKeyIssuer&&(w=`-authenticationKeyID ${e.iosApiKeyId} -authenticationKeyIssuerID ${e.iosApiKeyIssuer} -authenticationKeyPath ${y}`));let $={};if(i)try{let h=await T.post(`/builds/${i}/${t}/build-urls`,{platform:"ios"});h.data.status==="success"&&($=h.data.urls)}catch(h){Ct.warn(lt.yellow(`Could not fetch build URLs: ${h.message}`))}let b="";if($.credentials&&$.credentials.length>0)for(let h of $.credentials)h.type==="p12"?b+=`curl -sf -o "$CERT_DIR/${h.name}" "${h.downloadUrl}" || true
|
|
1313
1313
|
`:h.type==="mobileprovision"&&(b+=`curl -sf -o "$PROV_TEMP/${h.name}" "${h.downloadUrl}" || true
|
|
1314
|
-
`);r.message("Generating macOS build script...");let
|
|
1315
|
-
`:"";if(n)for(let[h,M]of Object.entries(n)){let U=M.replace(/"/g,'\\"').replace(/\$/g,"\\$").replace(/`/g,"\\`");
|
|
1316
|
-
`}let
|
|
1314
|
+
`);r.message("Generating macOS build script...");let x=process.env.CODEARTIFACT_AUTH_TOKEN?`export CODEARTIFACT_AUTH_TOKEN="${process.env.CODEARTIFACT_AUTH_TOKEN}"
|
|
1315
|
+
`:"";if(n)for(let[h,M]of Object.entries(n)){let U=M.replace(/"/g,'\\"').replace(/\$/g,"\\$").replace(/`/g,"\\`");x+=`export ${h}="${U}"
|
|
1316
|
+
`}let E=e.buildProfile||"production",F=Ot(n,E,e),X=Kt(F);Ct.info(lt.dim(`iOS remote build config: simulator=${String(!!e.simulator)}, configuration=${e.iosConfiguration||"Release"}, scheme=${e.iosScheme||"auto"}`));let D=[x,$.logUpload?`export PRESIGNED_LOG_UPLOAD="${$.logUpload}"`:"",$.doneMarker?`export PRESIGNED_DONE_MARKER="${$.doneMarker}"`:"",$.cacheDerivedDataDownload?`export PRESIGNED_CACHE_DD_DOWNLOAD="${$.cacheDerivedDataDownload}"`:"",$.cacheDerivedDataUpload?`export PRESIGNED_CACHE_DD_UPLOAD="${$.cacheDerivedDataUpload}"`:"",$.cacheNodeModulesDownload?`export PRESIGNED_CACHE_NODE_DOWNLOAD="${$.cacheNodeModulesDownload}"`:"",$.cacheNodeModulesUpload?`export PRESIGNED_CACHE_NODE_UPLOAD="${$.cacheNodeModulesUpload}"`:"",$.cachePodsDownload?`export PRESIGNED_CACHE_PODS_DOWNLOAD="${$.cachePodsDownload}"`:"",$.cachePodsUpload?`export PRESIGNED_CACHE_PODS_UPLOAD="${$.cachePodsUpload}"`:"",$.artifactIpaUpload?`export PRESIGNED_ARTIFACT_IPA_UPLOAD="${$.artifactIpaUpload}"`:"",$.artifactAppZipUpload?`export PRESIGNED_ARTIFACT_APP_ZIP_UPLOAD="${$.artifactAppZipUpload}"`:"",`export BUILD_ID="${t}"`,`export MACH_BUILD_PROFILE="${_o(E)}"`,`export MACH_APP_NAME="${_o(F.MACH_APP_NAME)}"`,`export MACH_ENV_FINGERPRINT="${X}"`,o.remoteEnvSetupScript().trim(),`export ${m.envPrefix}PROJECT_ID="${p}"`,n.MATCH_ENCRYPTION_PASSPHRASE?`export MATCH_PASSWORD="${n.MATCH_ENCRYPTION_PASSPHRASE}"`:"",n.APPLE_TEAM_ID?`export FASTLANE_TEAM_ID="${n.APPLE_TEAM_ID}"`:"",`export MATCH_KEYCHAIN_NAME="${m.credentialsKeychain}"`,`export MATCH_KEYCHAIN_PASSWORD="${m.keychainPassword}"`].filter(Boolean).join(`
|
|
1317
1317
|
`),I=e.nodeVersion?[`echo "[NODE] Switching to Node ${e.nodeVersion}..."`,'export NVM_DIR="$HOME/.nvm"','[ -s "$NVM_DIR/nvm.sh" ] && . "$NVM_DIR/nvm.sh" --no-use',`nvm install ${e.nodeVersion} 2>/dev/null || true`,`nvm use ${e.nodeVersion} --silent`,`export PATH="$NVM_DIR/versions/node/$(nvm version ${e.nodeVersion})/bin:$PATH"`,'echo "[NODE] Now using: $(node -v) at $(which node)"'].join(`
|
|
1318
|
-
`):"",
|
|
1319
|
-
${
|
|
1320
|
-
${
|
|
1321
|
-
${et.dim("Note: Links are valid for 7 days.")}`)}else U&&Et.warn("Simulator build completed. No artifacts uploaded.")}catch(h){r.stop("Could not fetch artifacts"),Et.warn(et.yellow(`Artifact listing failed: ${h.message}`))}}}catch(c){throw r.stop("iOS Build Failed"),c}};import ll from"crypto";import He from"axios";import Mr from"fs";var Xe=6e4,cl=12e4,ai=4,tt=e=>encodeURIComponent(e),dl=e=>new Promise(t=>setTimeout(t,e));async function je(e,t){let n;for(let i=1;i<=ai;i++)try{return await t()}catch(r){if(n=r,i>=ai||!ul(r))throw r;let o=Number(r.response?.headers?.["retry-after"]),s=Number.isFinite(o)&&o>0?o*1e3:Math.min(2e3*i*i,15e3);console.log(`[Google Play] ${e} failed (attempt ${i}/${ai}); retrying in ${Math.round(s/1e3)}s...`),await dl(s)}throw n}function ul(e){let t=e.response?.status;return t?t===408||t===409||t===425||t===429||t>=500:!0}async function Ur(e,t){let n;try{let i=await gn(t),r=tt(e);if(n=(await je("create edit",()=>He.post(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${r}/edits`,{},{headers:{Authorization:`Bearer ${i}`,Connection:"close"},timeout:Xe}))).data.id,!n)throw new Error("Google Play edit insert succeeded but did not return an edit id.");let s=tt(n),l=0,d=(await je("list tracks",()=>He.get(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${r}/edits/${s}/tracks`,{headers:{Authorization:`Bearer ${i}`,Connection:"close"},timeout:Xe}))).data.tracks||[];for(let u of d)if(u.releases){for(let c of u.releases)if(c.versionCodes)for(let f of c.versionCodes){let p=parseInt(f,10);p>l&&(l=p)}}try{let c=(await je("list bundles",()=>He.get(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${r}/edits/${s}/bundles`,{headers:{Authorization:`Bearer ${i}`,Connection:"close"},timeout:Xe}))).data.bundles||[];for(let f of c)f.versionCode&&f.versionCode>l&&(l=f.versionCode)}catch{}try{let c=(await je("list APKs",()=>He.get(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${r}/edits/${s}/apks`,{headers:{Authorization:`Bearer ${i}`,Connection:"close"},timeout:Xe}))).data.apks||[];for(let f of c)f.versionCode&&f.versionCode>l&&(l=f.versionCode)}catch{}return l}catch(i){let r=i.response?.data?.error?.message||i.message;throw new Error(`Google Play API Error: ${r}`)}finally{if(n)try{let i=await gn(t);await je("delete edit",()=>He.delete(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${tt(e)}/edits/${tt(n)}`,{headers:{Authorization:`Bearer ${i}`,Connection:"close"},timeout:Xe}))}catch{}}}async function Fr(e){let{packageName:t,serviceAccount:n,aabPath:i,track:r,releaseStatus:o,userFraction:s,changesNotSentForReview:l}=e,a;try{let u={Authorization:`Bearer ${await gn(n)}`,Connection:"close"},c=tt(t);if(a=(await je("create edit",()=>He.post(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${c}/edits`,{},{headers:u,timeout:Xe}))).data.id,!a)throw new Error("Google Play edit insert succeeded but did not return an edit id.");let p=tt(a),g=Mr.statSync(i),y=await je("upload AAB",()=>He.post(`https://androidpublisher.googleapis.com/upload/androidpublisher/v3/applications/${c}/edits/${p}/bundles`,Mr.createReadStream(i),{headers:{...u,"Content-Type":"application/octet-stream","Content-Length":g.size},maxBodyLength:1/0,maxContentLength:1/0,params:{uploadType:"media"},timeout:cl})),_=Number(y.data.versionCode);if(!_)throw new Error("Google Play upload succeeded but did not return a versionCode.");let D={versionCodes:[String(_)],status:o};return(o==="inProgress"||o==="halted")&&typeof s=="number"&&(D.userFraction=s),await je("update track",()=>He.put(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${c}/edits/${p}/tracks/${tt(r)}`,{releases:[D]},{headers:u,timeout:Xe})),await je("commit edit",()=>He.post(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${c}/edits/${p}:commit`,{},{headers:u,params:l?{changesNotSentForReview:!0}:void 0,timeout:Xe})),{editId:a,versionCode:_,track:r,releaseStatus:o,userFraction:s}}catch(d){if(a)try{let c=await gn(n);await je("delete edit",()=>He.delete(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${tt(t)}/edits/${tt(a)}`,{headers:{Authorization:`Bearer ${c}`,Connection:"close"},timeout:Xe}))}catch{}let u=d.response?.data?.error?.message||d.message;throw new Error(`Google Play API Error: ${u}`)}}async function gn(e){let t=Math.floor(Date.now()/1e3),n=t+3600,i={alg:"RS256",typ:"JWT"},r={iss:e.client_email,sub:e.client_email,aud:"https://oauth2.googleapis.com/token",iat:t,exp:n,scope:"https://www.googleapis.com/auth/androidpublisher"},o=Buffer.from(JSON.stringify(i)).toString("base64url"),s=Buffer.from(JSON.stringify(r)).toString("base64url"),l=`${o}.${s}`,a=ll.createSign("RSA-SHA256");a.update(l);let d=a.sign(e.private_key,"base64url"),u=`${l}.${d}`;return(await je("OAuth token exchange",()=>He.post("https://oauth2.googleapis.com/token",{grant_type:"urn:ietf:params:oauth:grant-type:jwt-bearer",assertion:u},{headers:{Connection:"close"},timeout:Xe}))).data.access_token}import pl from"crypto";import Br from"axios";var ci="https://api.appstoreconnect.apple.com/v1",Hr=6e4,li=4,fl=e=>new Promise(t=>setTimeout(t,e));function ml(e,t,n){let i=Math.floor(Date.now()/1e3),r=Buffer.from(JSON.stringify({alg:"ES256",kid:e,typ:"JWT"})).toString("base64url"),o=Buffer.from(JSON.stringify({iss:t,iat:i,exp:i+1200,aud:"appstoreconnect-v1"})).toString("base64url"),s=`${r}.${o}`,l=pl.createSign("SHA256");l.update(s);let a=l.sign({key:n,dsaEncoding:"ieee-p1363"}).toString("base64url");return`${s}.${a}`}function gl(e){let t=e.response?.status;return t?t===408||t===409||t===425||t===429||t>=500:!0}async function jr(e,t){let n;for(let i=1;i<=li;i++)try{return await t()}catch(r){if(n=r,i>=li||!gl(r))throw r;let o=Number(r.response?.headers?.["retry-after"]),s=Number.isFinite(o)&&o>0?o*1e3:Math.min(2e3*i*i,15e3);console.log(`[App Store Connect] ${e} failed (attempt ${i}/${li}); retrying in ${Math.round(s/1e3)}s...`),await fl(s)}throw n}function Gr(e){return{Authorization:`Bearer ${ml(e.keyId,e.issuerId,e.privateKey)}`,"Content-Type":"application/json",Connection:"close"}}function hl(e){let t=e.response?.data?.errors;return Array.isArray(t)&&t.length>0?t.map(n=>n.detail||n.title||n.code).filter(Boolean).join("; "):e.response?.data?.error?.message||e.message||"Unknown App Store Connect error"}function hn(e){let t=String(e||"").trim();if(/^\d+(?:\.\d+){0,2}$/.test(t))return t.split(".").map(n=>Number(n))}function Sl(e,t){let n=hn(e),i=hn(t);if(!n&&!i)return 0;if(!n)return-1;if(!i)return 1;let r=Math.max(n.length,i.length);for(let o=0;o<r;o++){let s=n[o]||0,l=i[o]||0;if(s!==l)return s>l?1:-1}return 0}function yl(e){let t=hn(e);return!t||t.length===0?"1":(t[t.length-1]+=1,t.join("."))}async function bl(e,t,n){if(t)return t;if(!n)throw new Error("Set ios.ascAppId or ios.bundleIdentifier so Mach can find the App Store Connect app.");let r=(await jr("lookup app by bundle ID",()=>Br.get(`${ci}/apps`,{headers:Gr(e),params:{"filter[bundleId]":n,limit:1},timeout:Hr}))).data?.data?.[0];if(!r?.id)throw new Error(`No App Store Connect app found for bundle ID ${n}. Set ios.ascAppId in mach.config.json if the app exists.`);return r.id}async function Kr(e){let t={keyId:e.keyId,issuerId:e.issuerId,privateKey:e.privateKey};try{let n=await bl(t,e.ascAppId,e.bundleId),i=`${ci}/builds`,r="0",o,s=0;for(;i&&s<10;){s+=1;let l=await jr("list builds",()=>Br.get(i,{headers:Gr(t),params:i===`${ci}/builds`?{"filter[app]":n,"fields[builds]":"version,uploadedDate",sort:"-uploadedDate",limit:200}:void 0,timeout:Hr})),a=l.data?.data||[];for(let d of a){let u=String(d.attributes?.version||"").trim();hn(u)&&Sl(u,r)>0&&(r=u,o=d.attributes?.uploadedDate)}i=l.data?.links?.next}return{appId:n,latestBuildNumber:r,nextBuildNumber:yl(r),latestUploadedDate:o}}catch(n){throw new Error(`App Store Connect API Error: ${hl(n)}`)}}import{spinner as yn,log as O,isCancel as bn,confirm as El,select as ui}from"@clack/prompts";import R from"chalk";import S from"fs";import E from"path";import{execFileSync as nt,execSync as te,spawn as Xr}from"child_process";import Ae from"os";import Al from"crypto";var qr=(e,t)=>t.filter(n=>S.existsSync(E.join(e,n))).reduce((n,i)=>n.update(S.readFileSync(E.join(e,i))),Al.createHash("sha256")).digest("hex").slice(0,16),Il=e=>qr(e,["package.json","yarn.lock","package-lock.json","bun.lockb"]),wl=e=>qr(e,["Podfile","Podfile.lock"]),_l=e=>{let t=E.join(e,"fingerprint.json");try{return JSON.parse(S.readFileSync(t,"utf-8"))}catch{return{}}},Vr=(e,t)=>{S.mkdirSync(e,{recursive:!0}),S.writeFileSync(E.join(e,"fingerprint.json"),JSON.stringify(t,null,2))},Rl=7200*1e3,$l=(e,t)=>{S.mkdirSync(e,{recursive:!0});let n=E.join(e,"build.lock");if(S.existsSync(n))try{let i=JSON.parse(S.readFileSync(n,"utf-8")),r=Date.now()-(i.timestamp||0);if(r<Rl)throw new Error(`Another build is already running for this project (build ${i.buildId}, started ${Math.round(r/6e4)}m ago). Cancel it from the dashboard first, or wait for it to complete.`)}catch(i){if(i.message.includes("Another build"))throw i}S.writeFileSync(n,JSON.stringify({buildId:t,pid:process.pid,timestamp:Date.now()}))},vl=(e,t)=>{let n=E.join(e,"build.lock");try{S.existsSync(n)&&JSON.parse(S.readFileSync(n,"utf-8")).buildId===t&&S.unlinkSync(n)}catch{}},zr=15e5,Wr=(e,t)=>{let n=e+t;return n.length>zr?n.slice(-zr):n},Zr=e=>e.replace(/\u001b\[[0-9;]*m/g,""),Qr=e=>/\berror:|fatal error:|xcodebuild: error|The following build commands failed|Command PhaseScriptExecution failed|PhaseScriptExecution|Command .* failed|CodeSign|Provisioning profile|No profiles|requires a provisioning profile|Undefined symbols|ld:|clang: error|SwiftCompile|CompileC|node: command not found|env: node|No such file or directory|Permission denied/i.test(e),Pl=e=>{let t=new Set,n=[];e.forEach((r,o)=>{Qr(r)&&n.push(o)});for(let r of n){let o=/PhaseScriptExecution|Command PhaseScriptExecution failed|The following build commands failed/i.test(e[r])?18:8,s=/The following build commands failed/i.test(e[r])?18:10;for(let l=Math.max(0,r-o);l<=Math.min(e.length-1,r+s);l++)t.add(l)}if(t.size===0)return e.slice(-120);let i=Array.from(t).sort((r,o)=>r-o).map(r=>e[r]);return i.length>160?i.slice(-160):i},Ol=(e,t,n,i)=>{let r=Zr(i).replace(/\r/g,`
|
|
1318
|
+
`):"",N=wo,_={"{{REMOTE_DIR}}":f,"{{ENV_VARS}}":D,"{{CREDENTIAL_DOWNLOADS}}":b,"{{IOS_SCHEME}}":e.iosScheme||"","{{IOS_CONFIG}}":e.iosConfiguration||"Release","{{TEAM_ID}}":e.iosTeamId||"","{{AUTH_PARAMS}}":w,"{{IS_SIMULATOR}}":e.simulator?"true":"false","{{BUILD_ID}}":t,"{{EXPORT_METHOD}}":e.iosExportMethod||"ad-hoc","{{NODE_VERSION_SETUP}}":I,"{{FRAMEWORK_PREBUILD}}":o.iosRemotePrebuildScript().trim()};Object.entries(_).forEach(([h,M])=>{N=N.split(h).join(M)});let O=`/tmp/${m.nameLower}-mac-build-${t}.sh`;if(Sc.writeFileSync(O,N),ln(`${u} ${O} ${a}:${f}/build.sh`),r.stop("Remote script uploaded."),Ct.info(lt.cyan("Executing remote build. This might take a while...")),ln(`${d} "bash ${f}/build.sh"`,{stdio:"inherit"}),r.stop("Remote build finished!"),i){r.start("Fetching artifact links...");try{let M=(await T.get(`/builds/${i}/${t}/artifacts`)).data.artifacts||[],U=e.simulator===!0;if(M.length===0&&!U)throw r.stop("Build Failed!"),new Error("Build completed but no artifacts were generated. Check build logs for errors.");if(r.stop("Build Successful!"),M.length>0){Ct.success("Build Artifacts Ready:");for(let H of M)console.log(`
|
|
1319
|
+
${lt.yellow(H.name)}:
|
|
1320
|
+
${lt.cyan(H.downloadUrl)}`);console.log(`
|
|
1321
|
+
${lt.dim("Note: Links are valid for 7 days.")}`)}else U&&Ct.warn("Simulator build completed. No artifacts uploaded.")}catch(h){r.stop("Could not fetch artifacts"),Ct.warn(lt.yellow(`Artifact listing failed: ${h.message}`))}}}catch(c){throw r.stop("iOS Build Failed"),c}};import bc from"crypto";import ze from"axios";import vo from"fs";var it=6e4,Ac=12e4,Fi=4,ct=e=>encodeURIComponent(e),Ec=e=>new Promise(t=>setTimeout(t,e));async function We(e,t){let n;for(let i=1;i<=Fi;i++)try{return await t()}catch(r){if(n=r,i>=Fi||!Ic(r))throw r;let o=Number(r.response?.headers?.["retry-after"]),s=Number.isFinite(o)&&o>0?o*1e3:Math.min(2e3*i*i,15e3);console.log(`[Google Play] ${e} failed (attempt ${i}/${Fi}); retrying in ${Math.round(s/1e3)}s...`),await Ec(s)}throw n}function Ic(e){let t=e.response?.status;return t?t===408||t===409||t===425||t===429||t>=500:!0}async function Ro(e,t){let n;try{let i=await xn(t),r=ct(e);if(n=(await We("create edit",()=>ze.post(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${r}/edits`,{},{headers:{Authorization:`Bearer ${i}`,Connection:"close"},timeout:it}))).data.id,!n)throw new Error("Google Play edit insert succeeded but did not return an edit id.");let s=ct(n),l=0,d=(await We("list tracks",()=>ze.get(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${r}/edits/${s}/tracks`,{headers:{Authorization:`Bearer ${i}`,Connection:"close"},timeout:it}))).data.tracks||[];for(let u of d)if(u.releases){for(let c of u.releases)if(c.versionCodes)for(let p of c.versionCodes){let f=parseInt(p,10);f>l&&(l=f)}}try{let c=(await We("list bundles",()=>ze.get(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${r}/edits/${s}/bundles`,{headers:{Authorization:`Bearer ${i}`,Connection:"close"},timeout:it}))).data.bundles||[];for(let p of c)p.versionCode&&p.versionCode>l&&(l=p.versionCode)}catch{}try{let c=(await We("list APKs",()=>ze.get(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${r}/edits/${s}/apks`,{headers:{Authorization:`Bearer ${i}`,Connection:"close"},timeout:it}))).data.apks||[];for(let p of c)p.versionCode&&p.versionCode>l&&(l=p.versionCode)}catch{}return l}catch(i){let r=i.response?.data?.error?.message||i.message;throw new Error(`Google Play API Error: ${r}`)}finally{if(n)try{let i=await xn(t);await We("delete edit",()=>ze.delete(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${ct(e)}/edits/${ct(n)}`,{headers:{Authorization:`Bearer ${i}`,Connection:"close"},timeout:it}))}catch{}}}async function Do(e){let{packageName:t,serviceAccount:n,aabPath:i,track:r,releaseStatus:o,userFraction:s,changesNotSentForReview:l}=e,a;try{let u={Authorization:`Bearer ${await xn(n)}`,Connection:"close"},c=ct(t);if(a=(await We("create edit",()=>ze.post(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${c}/edits`,{},{headers:u,timeout:it}))).data.id,!a)throw new Error("Google Play edit insert succeeded but did not return an edit id.");let f=ct(a),g=vo.statSync(i),y=await We("upload AAB",()=>ze.post(`https://androidpublisher.googleapis.com/upload/androidpublisher/v3/applications/${c}/edits/${f}/bundles`,vo.createReadStream(i),{headers:{...u,"Content-Type":"application/octet-stream","Content-Length":g.size},maxBodyLength:1/0,maxContentLength:1/0,params:{uploadType:"media"},timeout:Ac})),w=Number(y.data.versionCode);if(!w)throw new Error("Google Play upload succeeded but did not return a versionCode.");let $={versionCodes:[String(w)],status:o};return(o==="inProgress"||o==="halted")&&typeof s=="number"&&($.userFraction=s),await We("update track",()=>ze.put(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${c}/edits/${f}/tracks/${ct(r)}`,{releases:[$]},{headers:u,timeout:it})),await We("commit edit",()=>ze.post(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${c}/edits/${f}:commit`,{},{headers:u,params:l?{changesNotSentForReview:!0}:void 0,timeout:it})),{editId:a,versionCode:w,track:r,releaseStatus:o,userFraction:s}}catch(d){if(a)try{let c=await xn(n);await We("delete edit",()=>ze.delete(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${ct(t)}/edits/${ct(a)}`,{headers:{Authorization:`Bearer ${c}`,Connection:"close"},timeout:it}))}catch{}let u=d.response?.data?.error?.message||d.message;throw new Error(`Google Play API Error: ${u}`)}}async function xn(e){let t=Math.floor(Date.now()/1e3),n=t+3600,i={alg:"RS256",typ:"JWT"},r={iss:e.client_email,sub:e.client_email,aud:"https://oauth2.googleapis.com/token",iat:t,exp:n,scope:"https://www.googleapis.com/auth/androidpublisher"},o=Buffer.from(JSON.stringify(i)).toString("base64url"),s=Buffer.from(JSON.stringify(r)).toString("base64url"),l=`${o}.${s}`,a=bc.createSign("RSA-SHA256");a.update(l);let d=a.sign(e.private_key,"base64url"),u=`${l}.${d}`;return(await We("OAuth token exchange",()=>ze.post("https://oauth2.googleapis.com/token",{grant_type:"urn:ietf:params:oauth:grant-type:jwt-bearer",assertion:u},{headers:{Connection:"close"},timeout:it}))).data.access_token}import wc from"crypto";import Po from"axios";var Hi="https://api.appstoreconnect.apple.com/v1",Oo=6e4,Bi=4,_c=e=>new Promise(t=>setTimeout(t,e));function $c(e,t,n){let i=Math.floor(Date.now()/1e3),r=Buffer.from(JSON.stringify({alg:"ES256",kid:e,typ:"JWT"})).toString("base64url"),o=Buffer.from(JSON.stringify({iss:t,iat:i,exp:i+1200,aud:"appstoreconnect-v1"})).toString("base64url"),s=`${r}.${o}`,l=wc.createSign("SHA256");l.update(s);let a=l.sign({key:n,dsaEncoding:"ieee-p1363"}).toString("base64url");return`${s}.${a}`}function vc(e){let t=e.response?.status;return t?t===408||t===409||t===425||t===429||t>=500:!0}async function Co(e,t){let n;for(let i=1;i<=Bi;i++)try{return await t()}catch(r){if(n=r,i>=Bi||!vc(r))throw r;let o=Number(r.response?.headers?.["retry-after"]),s=Number.isFinite(o)&&o>0?o*1e3:Math.min(2e3*i*i,15e3);console.log(`[App Store Connect] ${e} failed (attempt ${i}/${Bi}); retrying in ${Math.round(s/1e3)}s...`),await _c(s)}throw n}function ko(e){return{Authorization:`Bearer ${$c(e.keyId,e.issuerId,e.privateKey)}`,"Content-Type":"application/json",Connection:"close"}}function Rc(e){let t=e.response?.data?.errors;return Array.isArray(t)&&t.length>0?t.map(n=>n.detail||n.title||n.code).filter(Boolean).join("; "):e.response?.data?.error?.message||e.message||"Unknown App Store Connect error"}function Ln(e){let t=String(e||"").trim();if(/^\d+(?:\.\d+){0,2}$/.test(t))return t.split(".").map(n=>Number(n))}function Dc(e,t){let n=Ln(e),i=Ln(t);if(!n&&!i)return 0;if(!n)return-1;if(!i)return 1;let r=Math.max(n.length,i.length);for(let o=0;o<r;o++){let s=n[o]||0,l=i[o]||0;if(s!==l)return s>l?1:-1}return 0}function Pc(e){let t=Ln(e);return!t||t.length===0?"1":(t[t.length-1]+=1,t.join("."))}async function Oc(e,t,n){if(t)return t;if(!n)throw new Error("Set ios.ascAppId or ios.bundleIdentifier so Mach can find the App Store Connect app.");let r=(await Co("lookup app by bundle ID",()=>Po.get(`${Hi}/apps`,{headers:ko(e),params:{"filter[bundleId]":n,limit:1},timeout:Oo}))).data?.data?.[0];if(!r?.id)throw new Error(`No App Store Connect app found for bundle ID ${n}. Set ios.ascAppId in mach.config.json if the app exists.`);return r.id}async function No(e){let t={keyId:e.keyId,issuerId:e.issuerId,privateKey:e.privateKey};try{let n=await Oc(t,e.ascAppId,e.bundleId),i=`${Hi}/builds`,r="0",o,s=0;for(;i&&s<10;){s+=1;let l=await Co("list builds",()=>Po.get(i,{headers:ko(t),params:i===`${Hi}/builds`?{"filter[app]":n,"fields[builds]":"version,uploadedDate",sort:"-uploadedDate",limit:200}:void 0,timeout:Oo})),a=l.data?.data||[];for(let d of a){let u=String(d.attributes?.version||"").trim();Ln(u)&&Dc(u,r)>0&&(r=u,o=d.attributes?.uploadedDate)}i=l.data?.links?.next}return{appId:n,latestBuildNumber:r,nextBuildNumber:Pc(r),latestUploadedDate:o}}catch(n){throw new Error(`App Store Connect API Error: ${Rc(n)}`)}}import{spinner as Un,log as C,isCancel as Fn,confirm as Cc,select as Gi}from"@clack/prompts";import v from"chalk";import S from"fs";import A from"path";import{execFileSync as dt,execSync as ie,spawn as Fo}from"child_process";import $e from"os";import kc from"crypto";var Bo=(e,t)=>t.filter(n=>S.existsSync(A.join(e,n))).reduce((n,i)=>n.update(S.readFileSync(A.join(e,i))),kc.createHash("sha256")).digest("hex").slice(0,16),Nc=e=>Bo(e,["package.json","yarn.lock","package-lock.json","bun.lockb"]),Tc=e=>Bo(e,["Podfile","Podfile.lock"]),xc=e=>{let t=A.join(e,"fingerprint.json");try{return JSON.parse(S.readFileSync(t,"utf-8"))}catch{return{}}},To=(e,t)=>{S.mkdirSync(e,{recursive:!0}),S.writeFileSync(A.join(e,"fingerprint.json"),JSON.stringify(t,null,2))},Lc=7200*1e3,Mc=(e,t)=>{S.mkdirSync(e,{recursive:!0});let n=A.join(e,"build.lock");if(S.existsSync(n))try{let i=JSON.parse(S.readFileSync(n,"utf-8")),r=Date.now()-(i.timestamp||0);if(r<Lc)throw new Error(`Another build is already running for this project (build ${i.buildId}, started ${Math.round(r/6e4)}m ago). Cancel it from the dashboard first, or wait for it to complete.`)}catch(i){if(i.message.includes("Another build"))throw i}S.writeFileSync(n,JSON.stringify({buildId:t,pid:process.pid,timestamp:Date.now()}))},Uc=(e,t)=>{let n=A.join(e,"build.lock");try{S.existsSync(n)&&JSON.parse(S.readFileSync(n,"utf-8")).buildId===t&&S.unlinkSync(n)}catch{}},xo=15e5,Lo=(e,t)=>{let n=e+t;return n.length>xo?n.slice(-xo):n},Ho=e=>e.replace(/\u001b\[[0-9;]*m/g,""),jo=e=>/\berror:|fatal error:|xcodebuild: error|The following build commands failed|Command PhaseScriptExecution failed|PhaseScriptExecution|Command .* failed|CodeSign|Provisioning profile|No profiles|requires a provisioning profile|Undefined symbols|ld:|clang: error|SwiftCompile|CompileC|node: command not found|env: node|No such file or directory|Permission denied/i.test(e),Fc=e=>{let t=new Set,n=[];e.forEach((r,o)=>{jo(r)&&n.push(o)});for(let r of n){let o=/PhaseScriptExecution|Command PhaseScriptExecution failed|The following build commands failed/i.test(e[r])?18:8,s=/The following build commands failed/i.test(e[r])?18:10;for(let l=Math.max(0,r-o);l<=Math.min(e.length-1,r+s);l++)t.add(l)}if(t.size===0)return e.slice(-120);let i=Array.from(t).sort((r,o)=>r-o).map(r=>e[r]);return i.length>160?i.slice(-160):i},Bc=(e,t,n,i)=>{let r=Ho(i).replace(/\r/g,`
|
|
1322
1322
|
`).split(`
|
|
1323
|
-
`).map(a=>a.trimEnd()).filter(Boolean),o=r.filter(
|
|
1323
|
+
`).map(a=>a.trimEnd()).filter(Boolean),o=r.filter(jo),s=o.length>0?Fc(r):r.slice(-80),l=o.length>0?"Key failure output":"Last command output";return[`Command failed with code ${n}: ${e} ${t.join(" ")}`,s.length>0?`
|
|
1324
1324
|
${l}:
|
|
1325
1325
|
${s.join(`
|
|
1326
|
-
`)}`:""].join("")},
|
|
1327
|
-
`)){if(/Ineligible destinations/i.test(c)&&(u=!0),u||!c.includes("platform:iOS Simulator")||c.includes("error:"))continue;let
|
|
1328
|
-
`)),r(
|
|
1329
|
-
`)),r(
|
|
1330
|
-
`)));let y=e;if(["node","npm","npx","pod"].includes(e)){let b=
|
|
1331
|
-
`)))}let
|
|
1326
|
+
`)}`:""].join("")},Hc=e=>e==="xcodebuild"&&process.env.MACH_XCODE_FULL_LOGS!=="1",jc=e=>{let t=Ho(e).trim();return t?/\berror:|fatal error:|xcodebuild: error|The following build commands failed|Command PhaseScriptExecution failed|CodeSign|Provisioning profile|No profiles|requires a provisioning profile|Undefined symbols|ld:|clang: error|SwiftCompile|CompileC|CFBundleVersion|ARCHIVE SUCCEEDED|ARCHIVE FAILED|EXPORT SUCCEEDED|EXPORT FAILED|Exported .* to:|\[IPA VALID\]/i.test(t):!1},Fe=e=>{try{S.existsSync(e)&&S.rmSync(e,{recursive:!0,force:!0})}catch{}},Gc=(e,t)=>{try{if(!S.existsSync(e))return;for(let n of S.readdirSync(e))t(n)&&Fe(A.join(e,n))}catch{}},ji=e=>{C.info(v.dim("Clearing Metro/Hermes JS transform caches..."));let t=$e.tmpdir();Gc(t,n=>n==="metro-cache"||n.startsWith("metro-")||n.startsWith("haste-map-")||n.startsWith("react-native-packager-cache-")),Fe(A.join(e,".expo")),Fe(A.join(e,"node_modules/.cache/metro")),Fe(A.join($e.homedir(),".cache/metro")),Fe(A.join($e.homedir(),".cache/react-native-packager")),Fe(A.join($e.homedir(),"Library/Caches/metro")),Fe(A.join($e.homedir(),"Library/Caches/react-native-packager"))},Kc=e=>/Internal inconsistency error|never received target ended message/i.test(String(e?.message||e)),Vc=e=>{C.warn(v.yellow("Xcode build system hit an internal inconsistency. Clearing simulator build state and retrying once...")),Fe(A.join(e,"Build")),Fe(A.join(e,"Index.noindex")),Fe(A.join(e,"ModuleCache.noindex")),Fe(A.join(e,"SourcePackages"))},zc=e=>{let t=String(e?.message||e);return/Permission denied/i.test(t)&&/Pods\/.*\.sh/i.test(t)},Go=e=>{let t=A.join(e,"Pods"),i=[A.join(t,"Target Support Files"),t].filter(l=>S.existsSync(l)),r=new Set,o=0,s=l=>{let a=l;try{a=S.realpathSync(l)}catch{}if(r.has(a))return;r.add(a);let d;try{d=S.readdirSync(l,{withFileTypes:!0})}catch{return}for(let u of d){let c=A.join(l,u.name);if(u.isDirectory()){s(c);continue}if(!(!u.isFile()||!u.name.endsWith(".sh")))try{let p=S.statSync(c),f=p.mode|493;f!==p.mode&&(S.chmodSync(c,f),o+=1)}catch{}}};for(let l of i)s(l);return o>0&&C.info(v.dim(`Repaired executable permissions on ${o} CocoaPods script${o===1?"":"s"}.`)),o},Wc=(e,t,n,i,r)=>{let o=a=>{let d=a.filter(c=>c?.id&&String(c?.platform||"").includes("iOS Simulator")&&!c?.error),u=d.find(c=>/iphone/i.test(c.name||""))||d[0];return u?.id?`id=${u.id}`:void 0},s=a=>{let d=[],u=!1;for(let c of a.split(`
|
|
1327
|
+
`)){if(/Ineligible destinations/i.test(c)&&(u=!0),u||!c.includes("platform:iOS Simulator")||c.includes("error:"))continue;let p=c.match(/\bid:([^,}]+)/)?.[1]?.trim(),f=c.match(/\bname:([^,}]+)/)?.[1]?.trim();p&&d.push({id:p,name:f,platform:"iOS Simulator"})}return o(d)},l=[t?"-workspace":"-project",t||n,"-scheme",i,"-configuration",r,"-sdk","iphonesimulator","-showdestinations"];try{let a=dt("xcodebuild",[...l,"-json"],{cwd:e,encoding:"utf-8",stdio:["ignore","pipe","ignore"]}),d=JSON.parse(a),u=Array.isArray(d.destinations)?d.destinations:Array.isArray(d.availableDestinations)?d.availableDestinations:[],c=o(u);if(c)return c}catch{}try{let a=dt("xcodebuild",l,{cwd:e,encoding:"utf-8",stdio:["ignore","pipe","ignore"]});return s(a)}catch{}},ut=(e,t,n=process.cwd(),i={},r,o)=>new Promise((s,l)=>{let a="",d=Hc(e),u=Date.now(),c=["/opt/homebrew/bin","/usr/local/bin","/usr/bin","/bin","/usr/sbin","/sbin",A.join($e.homedir(),".npm-global/bin")],f=[...(process.env.PATH||"").split(":"),...c].filter((b,x,E)=>b&&E.indexOf(b)===x).join(":");process.env[`${m.envPrefix}DEBUG`]&&console.log(v.magenta(`[${m.nameUpper}_DEBUG] Execution PATH: ${f}`));let g={...process.env,...i,PATH:f,LANG:"en_US.UTF-8",LC_ALL:"en_US.UTF-8"};r&&process.env[`${m.envPrefix}DEBUG`]&&(r(v.magenta(`[ENVIRONMENT] node: ${process.execPath}
|
|
1328
|
+
`)),r(v.magenta(`[ENVIRONMENT] PATH: ${f}
|
|
1329
|
+
`)),r(v.magenta(`[ENVIRONMENT] command: ${e} ${t.join(" ")}
|
|
1330
|
+
`)));let y=e;if(["node","npm","npx","pod"].includes(e)){let b=A.dirname(process.execPath),x=A.join(b,e);S.existsSync(x)&&(y=x,r&&r(v.dim(`[EXEC] Using absolute path: ${y}
|
|
1331
|
+
`)))}let w=Fo(y,t,{stdio:"pipe",cwd:n,shell:!0,env:g,detached:process.platform!=="win32"});if(o){if(o.aborted){if(w.pid)try{process.kill(-w.pid,"SIGTERM")}catch{w.kill()}return l(new Error("Command aborted"))}o.addEventListener("abort",()=>{if(w.pid)try{process.kill(-w.pid,"SIGTERM")}catch{w.kill()}l(new Error("Command aborted"))})}let $=(b,x)=>{if(!d){x.write(b);return}let E=b.replace(/\r/g,`
|
|
1332
1332
|
`).split(`
|
|
1333
|
-
`).filter(
|
|
1333
|
+
`).filter(jc);if(E.length>0){x.write(`${E.join(`
|
|
1334
1334
|
`)}
|
|
1335
|
-
`),u=Date.now();return}let
|
|
1336
|
-
`),u=
|
|
1337
|
-
`).find(r=>/^Payload\/[^/]+\.app\/Info\.plist$/.test(r.trim()));if(!n)throw new Error(`Could not validate iOS build number: ${
|
|
1335
|
+
`),u=Date.now();return}let F=Date.now();F-u>3e4&&(x.write(`[xcodebuild] still running; detailed output is streamed to Mach logs.
|
|
1336
|
+
`),u=F)};w.stdout.on("data",b=>{let x=b.toString();a=Lo(a,x),$(x,process.stdout),r&&r(x)}),w.stderr.on("data",b=>{let x=b.toString();a=Lo(a,x),$(x,process.stderr),r&&r(x)}),w.on("close",b=>{b===0?s(b):l(new Error(Bc(e,t,b,a)))}),w.on("error",b=>l(b))}),Mn=async(e,t,n,i,r)=>{try{await ut("xcodebuild",e,t,n,i,r)}catch(o){if(!zc(o))throw o;C.warn(v.yellow("CocoaPods script permission denied. Repairing Pods script permissions and retrying xcodebuild once...")),Go(t),await ut("xcodebuild",e,t,n,i,r)}},Jc=e=>{let t=Math.floor(e/1e3%60),n=Math.floor(e/(1e3*60)%60),i=Math.floor(e/(1e3*60*60)%24),r=[];return i>0&&r.push(`${i}h`),n>0&&r.push(`${n}m`),(t>0||r.length===0)&&r.push(`${t}s`),r.join(" ")},kt=(e,t)=>{let n=[];try{if(!S.existsSync(e))return n;let i=S.readdirSync(e);for(let r of i){let o=A.join(e,r);try{let s=S.statSync(o);if(t.some(a=>r.endsWith(a))){n.push(A.resolve(o));continue}s.isDirectory()&&(n=n.concat(kt(o,t)))}catch{}}}catch{}return n},Yc=/^\d+(?:\.\d+){0,2}$/,Ki=e=>{let t=String(e||"").trim();return!t||t==="undefined"||t==="null"?null:Yc.test(t)?t:null},Ko=(e,t)=>{let n=Ki(e);if(!n)throw new Error(`Invalid iOS CFBundleVersion from ${t}: "${e||""}". Apple requires one to three period-separated integers, for example "42" or "1.2.3". If you see "[Decryption Failed]", fix/remove the broken BUILD_NUMBER secret and rebuild.`);return n},Vi=(e,t)=>dt("/usr/libexec/PlistBuddy",["-c",`Print :${t}`,e],{encoding:"utf-8"}).trim(),Vt=(e,t)=>{try{return Vi(e,t)}catch{return""}},Mo=e=>String(e||"").replace(/\.app$/i,"").replace(/[^a-z0-9]/gi,"").toLowerCase(),qc=e=>{try{return S.statSync(e).isDirectory()}catch{return!1}},Xc=(e,t,n)=>{if(!S.existsSync(e))throw new Error(`iOS simulator build output directory was not found: ${e}`);let i=S.readdirSync(e).filter(d=>d.endsWith(".app")).map(d=>A.join(e,d)).filter(qc);if(i.length===0){let u=kt(e,[".app"]).map(c=>A.relative(e,c)).join(", ");throw new Error(`No top-level iOS simulator .app product was found in ${e}.`+(u?` Nested .app bundles found but ignored: ${u}`:""))}let r=new Set([t,n.iosScheme,n.scheme,n.appName].filter(Boolean).map(d=>Mo(String(d))).filter(Boolean)),o=i.map(d=>{let u=A.join(d,"Info.plist"),c=S.existsSync(u)?Vt(u,"CFBundleName"):"",p=S.existsSync(u)?Vt(u,"CFBundleDisplayName"):"",f=S.existsSync(u)?Vt(u,"CFBundleExecutable"):"",g=S.existsSync(u)?Vt(u,"CFBundleIdentifier"):"",y=f?A.join(d,f):"";return{appPath:d,bundleIdentifier:g,executable:f,isValid:S.existsSync(u)&&!!f&&S.existsSync(y),names:[A.basename(d,".app"),c,p,f].map(Mo).filter(Boolean)}}),s=o.filter(d=>d.isValid);if(s.length===0)throw new Error(`No valid iOS simulator .app product was found in ${e}. Candidates: `+o.map(d=>A.basename(d.appPath)).join(", "));let a=s.find(d=>d.names.some(u=>r.has(u)))||(s.length===1?s[0]:null);if(!a)throw new Error(`Multiple iOS simulator .app products were found in ${e}: `+s.map(d=>{let u=d.bundleIdentifier?` (${d.bundleIdentifier})`:"";return`${A.basename(d.appPath)}${u}`}).join(", ")+`. Set ios.scheme in ${m.configFileName} so ${m.name} can select the app target safely.`);return a.appPath},Uo=e=>{let t=A.join(e,"Info.plist");if(!S.existsSync(t))throw new Error(`Could not validate iOS build number: ${t} not found.`);return Ko(Vi(t,"CFBundleVersion"),t)},Vo=e=>{let t=A.join(e,"Info.plist");if(!S.existsSync(t))throw new Error(`Could not validate iOS app executable: ${t} not found.`);let n=Vt(t,"CFBundleExecutable");if(!n)throw new Error(`Could not validate iOS app executable: CFBundleExecutable missing in ${t}.`);let i=A.join(e,n);if(!S.existsSync(i))throw new Error(`Could not validate iOS app executable: ${i} not found.`);return i},Zc=()=>process.arch==="arm64"?"arm64":"x86_64",zo=e=>{let t=Vo(e),n="";try{n=dt("lipo",["-info",t],{encoding:"utf-8"}).trim()}catch(r){throw new Error(`Could not inspect iOS simulator executable architecture for ${A.basename(e)}: ${r.message}`)}let i=Zc();if(!new RegExp(`\\b${i}\\b`).test(n))throw new Error(`iOS simulator app ${A.basename(e)} cannot be installed on this runner because its executable does not include the required ${i} simulator architecture. lipo output: ${n}. Check the React Native iOS project ARCHS/EXCLUDED_ARCHS settings for iphonesimulator builds.`);return n},Qc=e=>{try{return dt("xcrun",["vtool","-show-build",e],{encoding:"utf-8"}).trim()}catch(t){throw new Error(`Could not inspect iOS executable build platform for ${A.basename(e)}: ${t.message}`)}},Wo=e=>{let t=Vo(e),n=Qc(t);if(!/\bplatform\s+IOSSIMULATOR\b/i.test(n))throw new Error(`iOS simulator app ${A.basename(e)} was built for the wrong Apple platform. A simulator artifact must contain PLATFORM IOSSIMULATOR, not an iPhone device binary. vtool output: ${n}`);return n},ed=e=>{let n=dt("unzip",["-Z1",e],{encoding:"utf-8"}).split(`
|
|
1337
|
+
`).find(r=>/^Payload\/[^/]+\.app\/Info\.plist$/.test(r.trim()));if(!n)throw new Error(`Could not validate iOS build number: ${A.basename(e)} has no Payload/*.app/Info.plist.`);let i=S.mkdtempSync(A.join($e.tmpdir(),`${m.nameLower}-ipa-plist-`));try{let r=A.join(i,"Info.plist"),o=dt("unzip",["-p",e,n.trim()]);return S.writeFileSync(r,o),Ko(Vi(r,"CFBundleVersion"),`${A.basename(e)}:${n.trim()}`)}finally{S.rmSync(i,{recursive:!0,force:!0})}},td=e=>`'${e.replace(/'/g,"'\\''")}'`,nd=()=>process.execPath&&S.existsSync(process.execPath)?process.execPath:dt("which",["node"],{encoding:"utf-8"}).trim(),Jo=(e,t,n)=>{if(!S.existsSync(e))return;let i=nd();t.NODE_BINARY=i;let r=A.join(e,".xcode.env.local");S.writeFileSync(r,`export NODE_BINARY=${td(i)}
|
|
1338
1338
|
`);let o=`[NODE] Xcode NODE_BINARY: ${i}
|
|
1339
|
-
`;n&&n(
|
|
1340
|
-
\u{1F6D1} Build cancelled from dashboard. Terminating...`)),
|
|
1341
|
-
`)},
|
|
1342
|
-
`);else if(i&&l==="ios"&&!e.simulator)try{let I=parseInt(n.BUILD_NUMBER||"0",10),
|
|
1343
|
-
`)),n.BUILD_NUMBER=M,
|
|
1344
|
-
`)}}catch(I){
|
|
1345
|
-
`)}if(await
|
|
1346
|
-
`),
|
|
1347
|
-
`),
|
|
1348
|
-
`),S.rmSync(
|
|
1349
|
-
\u2713 Local build completed successfully in ${
|
|
1350
|
-
\u{1F4E6} Generated Artifacts:`)),V.forEach(z=>{let G=
|
|
1351
|
-
\u274C Build aborted.`)),await c("failed",{error:"Aborted by user",endTime:Date.now()}),I):(
|
|
1352
|
-
\u2717 Local build failed: ${I.message}`)),await c("failed",{error:I.message,endTime:Date.now()}),I)}},
|
|
1353
|
-
`).find(
|
|
1354
|
-
`)[0]||"unknown"}`))}if(!
|
|
1355
|
-
`).map(
|
|
1339
|
+
`;n&&n(v.dim(o)),C.info(v.dim(o.trim()))},zi=async(e,t,n={},i,r={})=>{let o=Un(),s=Date.now(),l=e.platform,a=e.buildProfile||"production",d=at(e.framework),u=()=>Ot(n,a,e),c=async(I,N={})=>{if(i)for(let _=1;_<=3;_++)try{await T.patch(`/builds/${i}/${t}`,{status:I,...N});return}catch(O){let h=O?.response?.data?.message||O?.message||String(O);console.error(`[reportStatus] attempt ${_}/3 failed (status=${I}): ${h}`),_<3&&await new Promise(M=>setTimeout(M,2e3))}},p=new AbortController,{signal:f}=p,g=null;i&&(g=setInterval(async()=>{try{(await T.get(`/builds/${i}/${t}`)).data.status==="cancelled"&&(C.warn(v.yellow(`
|
|
1340
|
+
\u{1F6D1} Build cancelled from dashboard. Terminating...`)),p.abort(),g&&clearInterval(g))}catch{}},5e3));let y=A.join(process.cwd(),".mach-cache"),w="setup",$="",b=null,x=async()=>{if(!$||!i)return;let I=$;$="";try{let N=I;Object.values(n).forEach(_=>{if(_&&_.length>5){let O=_.replace(/[.*+?^${}()|[\]\\]/g,"\\$&");N=N.replace(new RegExp(O,"g"),"[SECRET]")}}),await T.post(`/builds/${i}/${t}/logs`,{log:N,step:w})}catch{}},E=async()=>{b&&(clearTimeout(b),b=null),await x(),Uc(y,t),g&&(clearInterval(g),g=null);try{let I=A.join($e.tmpdir(),`${m.buildPrefix}-${t}.keychain-db`);S.existsSync(I)&&(ie(`security delete-keychain "${I}"`,{stdio:"ignore"}),C.info(v.dim("\u{1F511} Build keychain deleted.")))}catch{}try{let I=A.join($e.homedir(),"Library/MobileDevice/Provisioning Profiles");if(S.existsSync(I)){let N=S.readdirSync(I).filter(_=>_.includes(t)||_.startsWith(`${m.nameLower}-temp-${t}`));for(let _ of N)S.unlinkSync(A.join(I,_))}}catch{}},F=async I=>{i&&($+=I,$.length>=8192?(b&&(clearTimeout(b),b=null),await x()):b||(b=setTimeout(()=>{b=null,x()},2e3)))},X=async I=>{w=I,await F(`[STEP_START:${I}] ${Math.floor(Date.now()/1e3)}
|
|
1341
|
+
`)},D=async(I,N,_,O)=>await ut(I,N,_,O,h=>{F(h)},f);C.info(v.blue(`\u{1F680} Starting local build for ${l} (${a})...`));try{Mc(y,t)}catch(I){throw await c("failed",{error:I.message,endTime:Date.now()}),I}if(await c("building"),await X("setup"),l==="ios"&&!e.simulator&&n.MACH_IOS_BUILD_NUMBER_LOCKED==="1"&&n.BUILD_NUMBER)C.info(v.dim(`Auto build number: ${n.BUILD_NUMBER}`)),await F(`[BUILD_NUMBER] ${n.BUILD_NUMBER}
|
|
1342
|
+
`);else if(i&&l==="ios"&&!e.simulator)try{let I=parseInt(n.BUILD_NUMBER||"0",10),N=Number.isFinite(I)?I:0,_=await T.post(`/projects/${i}/next-build-number`,{platform:"ios",startFrom:N});if(_.data.status==="success"){let O=Ki(String(_.data.buildNumber||""));if(!O)throw new Error(`Dashboard returned invalid iOS build number: "${_.data.buildNumber||""}"`);let h=parseInt(O,10),M=N>0&&Number.isFinite(h)&&h<N?String(N):O;M!==O&&(C.warn(v.yellow(`Dashboard build counter returned ${O}; using minimum ${M}.`)),await F(`[BUILD_NUMBER] Dashboard returned ${O}; using minimum ${M}
|
|
1343
|
+
`)),n.BUILD_NUMBER=M,C.info(v.dim(`Auto build number: ${n.BUILD_NUMBER}`)),await F(`[BUILD_NUMBER] ${n.BUILD_NUMBER}
|
|
1344
|
+
`)}}catch(I){C.warn(v.yellow(`Could not fetch auto build number: ${I.message}`))}await X("lock"),d.applyLocalProcessEnv(e);try{await X("clone"),C.info(v.dim("Preparing source...")),await X("read_config");let I=A.join(process.cwd(),m.configFileName);if(S.existsSync(I)){let G=JSON.parse(S.readFileSync(I,"utf-8"))?.build?.[a]||{};await F(`[CONFIG] Profile: ${a}, distribution: ${G.distribution||"not set"}, simulator: ${G.simulator||!1}
|
|
1345
|
+
`)}if(await X("read_package"),e.nodeVersion){let z=process.env.NVM_DIR||A.join($e.homedir(),".nvm"),G=A.join(z,"versions","node"),ee;if(S.existsSync(G)){let W=S.readdirSync(G).sort().reverse(),q=e.nodeVersion.startsWith("v")?e.nodeVersion:`v${e.nodeVersion}`,ce=W.find(Ae=>Ae===q||Ae.startsWith(q+".")||Ae.startsWith(`v${e.nodeVersion}.`));ce&&(ee=A.join(G,ce,"bin"))}if(ee&&S.existsSync(ee)){let W=process.env.PATH||"";process.env.PATH=`${ee}:${W}`,await F(`[NODE] Switched to Node ${e.nodeVersion} \u2014 using ${ee}
|
|
1346
|
+
`),C.info(v.green(`\u2713 Node switched to ${e.nodeVersion} (${ee})`))}else await F(`[NODE] Warning: Node ${e.nodeVersion} not found in nvm. Run: nvm install ${e.nodeVersion} on the build machine.
|
|
1347
|
+
`),C.warn(v.yellow(`Node ${e.nodeVersion} not found in nvm \u2014 using system default`))}await X("deps"),o.start("Checking dependencies...");let N=xc(y),_=Nc(process.cwd()),O=S.existsSync("node_modules"),h=S.existsSync("yarn.lock"),M=S.existsSync("bun.lockb");O&&N.node&&N.node!==_&&(o.stop("Dependency fingerprint changed \u2014 clearing node_modules for clean install..."),await F(`[CACHE] package.json/lockfile changed \u2014 wiping node_modules
|
|
1348
|
+
`),S.rmSync(A.join(process.cwd(),"node_modules"),{recursive:!0,force:!0}),O=!1);let U="npm",H=["install","--prefer-offline"];h?(U="yarn",H=["install","--prefer-offline"]):M&&(U="bun",H=["install"]),O?o.stop("Cached node_modules found. Syncing dependencies..."):o.stop("No cached dependencies. Running fresh install..."),e.preBuild&&(C.info(v.blue("Running pre-install hook...")),C.info(v.dim(`> ${e.preBuild}`)),await X("prebuild"),await D("bash",[e.preBuild],process.cwd(),u())),C.info(v.dim(`Running ${U} ${H.join(" ")}...`)),await D(U,H,process.cwd(),u()),N.node=_,To(y,N);let Z=await d.prepareLocalProject({platform:l,options:e,cacheMeta:N,cacheMetaDir:y,currentBuildEnv:u,reportStep:X,reportLog:F,loggedRun:D,configureXcodeNodeBinary:Jo,podsFingerprint:Tc,writeCacheMeta:To}),j=Z.bundleId||e.iosBundleIdentifier||"",k=Z.appName||e.name||"",V=[];if(l==="android")await X("build"),V=await id(e,a,n,z=>F(z),f);else if(l==="ios"){await X("signing"),C.info(v.dim("Preparing credentials..."));let z=r?.distributionType;V=await rd(e,t,a,n,i,G=>F(G),f,z,G=>X(G))}e.postBuild&&(C.info(v.blue("Running post-build hook...")),C.info(v.dim(`> ${e.postBuild}`)),await D(e.postBuild,[],process.cwd(),u()));let ae=Jc(Date.now()-s);if(C.success(v.green(`
|
|
1349
|
+
\u2713 Local build completed successfully in ${ae}`)),await c("building",{...j&&{bundleId:j},...k&&{appName:k}}),V.length>0&&(C.info(v.cyan(`
|
|
1350
|
+
\u{1F4E6} Generated Artifacts:`)),V.forEach(z=>{let G=A.resolve(z);C.info(v.dim(` - ${z}`)),C.info(v.gray(` Path: ${G}`))}),e.interactive)){let z=await Cc({message:"Install on connected device?"});if(!Fn(z)&&z){if(l==="android"){let G=V.find(ee=>ee.endsWith(".apk"))||V[0];await sd(G,ee=>F(ee))}else if(l==="ios"){let G=V.find(W=>W.endsWith(".ipa"))||V.find(W=>W.endsWith(".app"))||V[0],ee=pt("ios");e.simulator?await ad(G,ee||"",W=>F(W)):await ld(G,ee||"",W=>F(W))}}}await X("upload");let pe=[];for(let z of V)try{let G=A.join($e.tmpdir(),`${t}-${A.basename(z)}`);S.copyFileSync(z,G),pe.push(G),C.info(v.dim(` \u{1F4CB} Preserved artifact: ${A.basename(z)}`))}catch{C.warn(v.yellow(` Failed to preserve artifact: ${A.basename(z)}`))}V=pe,C.info(v.dim("\u{1F9F9} Cleaning workspace (preserving dependency cache)..."));try{let z=process.cwd(),G=new Set(["node_modules"]),ee=S.readdirSync(z),W=0;for(let q of ee)if(!G.has(q)){if(q==="ios"){let ce=A.join(z,"ios"),Ae=S.readdirSync(ce);for(let De of Ae)if(De!=="Pods")try{S.rmSync(A.join(ce,De),{recursive:!0,force:!0}),W++}catch{}continue}try{S.rmSync(A.join(z,q),{recursive:!0,force:!0}),W++}catch{}}C.info(v.dim(` Cleaned ${W} items. Cached: node_modules${S.existsSync(A.join(z,"ios","Pods"))?", ios/Pods":""}`)),C.info(v.green("\u{1F512} Security: No source code retained on build server. Only public dependencies cached."))}catch{C.warn(v.yellow("Post-build cleanup encountered errors (non-fatal)."))}try{let G=A.join($e.homedir(),m.workspacesDir),ee=ie(`df -k "${G}" | tail -1 | awk '{print $4}'`,{encoding:"utf8"}).trim(),W=parseInt(ee,10)*1024;if(W<53687091200&&S.existsSync(G)){C.info(v.dim(` \u26A0\uFE0F Low disk space (${(W/1024/1024/1024).toFixed(0)} GB free). Running cache eviction...`));let q=A.basename(process.cwd()),ce=S.readdirSync(G).filter(Ae=>Ae!==q).map(Ae=>{let De=A.join(G,Ae);try{let Ft=S.statSync(De);return Ft.isDirectory()?{name:Ae,dir:De,mtime:Ft.mtimeMs}:null}catch{return null}}).filter(Boolean);ce.sort((Ae,De)=>Ae.mtime-De.mtime);for(let Ae of ce){if(W>=53687091200)break;try{S.rmSync(Ae.dir,{recursive:!0,force:!0}),C.info(v.dim(` \u{1F5D1}\uFE0F Evicted stale workspace: ${Ae.name}`));let De=ie(`df -k "${G}" | tail -1 | awk '{print $4}'`,{encoding:"utf8"}).trim();if(parseInt(De,10)*1024>=53687091200)break}catch{}}}}catch{}return await E(),V}catch(I){throw await E(),I.message==="Command aborted"?(C.warn(v.yellow(`
|
|
1351
|
+
\u274C Build aborted.`)),await c("failed",{error:"Aborted by user",endTime:Date.now()}),I):(C.error(v.red(`
|
|
1352
|
+
\u2717 Local build failed: ${I.message}`)),await c("failed",{error:I.message,endTime:Date.now()}),I)}},id=async(e,t,n={},i,r)=>{let o=S.existsSync("android/gradlew")?"android/gradlew":S.existsSync("gradlew")?"./gradlew":null;if(!o)throw new Error("Could not find gradlew. Is this an Android project?");let s=e.developmentClient?"assembleDebug":"assembleRelease";!e.developmentClient&&e.distribution==="store"?s="bundleRelease":!e.developmentClient&&e.distribution==="internal"&&(s="assembleRelease");let l=e.buildCommand||s;C.info(v.blue(`Running Android build: ${l}...`));let a=o.includes("android/")?"android":".",d=(o.includes("android/"),"./gradlew"),u=[l],c=at(e.framework),p={...n,...c.localAndroidEnv(e,t),MACH_APP_NAME:e.appName||e.name||"App"};if(n.ANDROID_VERSION_CODE){let g=A.join(a,"app/build.gradle");if(S.existsSync(g)){let y=n.ANDROID_VERSION_CODE,w=S.readFileSync(g,"utf-8");w=w.replace(/versionCode\s+\d+/,`versionCode ${y}`),S.writeFileSync(g,w),C.info(v.green(`\u2713 Applied Android versionCode ${y}`))}u.push(`-Pandroid.injected.version.code=${n.ANDROID_VERSION_CODE}`)}for(let g of["app/build","build",".cxx"]){let y=A.join(a,g);S.existsSync(y)&&S.rmSync(y,{recursive:!0,force:!0})}ji(process.cwd()),await ut(d,u,a,p,i,r);let f=A.join(a,"app/build/outputs");return kt(f,[".apk",".aab"])},rd=async(e,t,n,i={},r,o,s,l,a)=>{if(process.platform!=="darwin")throw new Error("iOS builds can only be run on macOS.");let d=A.resolve(process.cwd(),S.existsSync("ios")?"ios":".");Go(d);let u=S.readdirSync(d),c=u.find(N=>N.endsWith(".xcworkspace")),p=u.find(N=>N.endsWith(".xcodeproj")),f=Ot(i,n,e);Jo(d,f,o);let g=Ki(f.BUILD_NUMBER||f.CURRENT_PROJECT_VERSION);if((f.BUILD_NUMBER||f.CURRENT_PROJECT_VERSION)&&!g)throw new Error(`Invalid iOS BUILD_NUMBER/CURRENT_PROJECT_VERSION: "${f.BUILD_NUMBER||f.CURRENT_PROJECT_VERSION}". Apple requires one to three period-separated integers. Fix the Dashboard secret or remove it so Mach can use its auto build number.`);let y=g?[`BUILD_NUMBER=${g}`,`CURRENT_PROJECT_VERSION=${g}`]:[];if(g&&(f.BUILD_NUMBER=g,f.CURRENT_PROJECT_VERSION=g,C.info(v.dim(`Using iOS build number: ${g}`))),!c&&!p)throw new Error("Could not find Xcode workspace or project in ios/ directory.");try{let N=ie("xcode-select -p").toString().trim();C.info(v.dim(`Using Xcode at: ${N}`))}catch{C.warn(v.dim("Could not detect Xcode path."))}C.info(v.blue("Running iOS build via xcodebuild..."));let w=c?c.replace(".xcworkspace",""):p?.replace(".xcodeproj",""),$=e.iosScheme||w||e.scheme,b=e.developmentClient?"Debug":e.iosConfiguration||"Release",x=(r||"default").replace(/[^a-zA-Z0-9-_]/g,"_"),E=A.join($e.homedir(),`Library/Developer/Xcode/DerivedData/${m.nameLower}`,x);S.mkdirSync(E,{recursive:!0});let F=Kt(f),X=A.join(E,".mach-env-hash"),D=A.join(E,"Build"),I=S.existsSync(X)?S.readFileSync(X,"utf-8").trim():"";if(S.existsSync(D)){let N=I&&I!==F?"Build environment changed \u2014 clearing iOS DerivedData build products.":I?"Clearing iOS DerivedData build products to force a fresh JS bundle.":"DerivedData has no environment stamp \u2014 clearing iOS build products.";C.info(v.dim(N)),S.rmSync(D,{recursive:!0,force:!0})}if(S.writeFileSync(X,F),ji(process.cwd()),e.simulator){let N=Wc(d,c,p,$,b),_=N||"generic/platform=iOS Simulator",O=["-destination",_];C.info(v.dim(N?`Building for simulator (Scheme: ${$}, Config: ${b}, Destination: ${_})...`:`Building for simulator (Scheme: ${$}, Config: ${b}, Destination: ${_})...`));let h=[c?"-workspace":"-project",c||p,"-scheme",$,"-configuration",b,"-sdk","iphonesimulator",...O,"-derivedDataPath",E,...y,"COMPILER_INDEX_STORE_ENABLE=NO","CODE_SIGNING_ALLOWED=NO","CODE_SIGNING_REQUIRED=NO","ONLY_ACTIVE_ARCH=NO","EXCLUDED_ARCHS=","SUPPORTED_PLATFORMS=iphonesimulator"];try{await Mn(h,d,f,o,s)}catch(pe){if(!Kc(pe))throw pe;Vc(E),ji(process.cwd()),await Mn(h,d,f,o,s)}let M=A.join(E,"Build/Products",`${b}-iphonesimulator`),U=Xc(M,$,e),H=A.basename(U,".app"),Z=Vt(A.join(U,"Info.plist"),"CFBundleIdentifier")||"unknown bundle",j=Uo(U),k=zo(U),V=Wo(U),ae=A.join(M,`${H}_simulator.zip`);return C.info(v.dim(`Selected simulator app: ${A.relative(M,U)} (${Z}, build ${j})`)),C.info(v.dim(`Simulator executable architecture: ${k}`)),C.info(v.dim(`Simulator executable platform: ${V.split(`
|
|
1353
|
+
`).find(pe=>/\bplatform\b/i.test(pe))?.trim()||"IOSSIMULATOR"}`)),C.info(v.dim(`Creating simulator artifact: ${ae}...`)),Fe(ae),dt("zip",["-r",ae,A.basename(U)],{cwd:A.dirname(U),stdio:"pipe"}),[ae]}else{C.info(v.dim(`Archiving (Scheme: ${$}, Config: ${b})...`));let N=A.join(d,"build.xcarchive"),_=A.join(d,"export");S.rmSync(N,{recursive:!0,force:!0}),S.rmSync(_,{recursive:!0,force:!0});let O=i.IOS_DIST_P12,h=i.IOS_PROVISIONING_PROFILE,M=i.IOS_P12_PASSWORD||"",U=[],H,Z,j={isAppStore:!1,isDevelopment:!1};if(O&&h){C.info(v.blue("\u{1F510} CI/CD Signing: Importing certificates..."));try{let W=`${m.buildPrefix}-${t}.keychain-db`,q=A.join($e.tmpdir(),W),ce=m.keychainPassword;ie(`security create-keychain -p "${ce}" "${q}" 2>/dev/null || true`),ie(`security set-keychain-settings -t 3600 -l "${q}"`),ie(`security unlock-keychain -p "${ce}" "${q}"`);let Ae=A.join($e.tmpdir(),`cert-${t}.p12`),De=Buffer.from(O,"base64");S.writeFileSync(Ae,De),C.info(v.dim(`P12 data size: ${De.length} bytes, first bytes: ${De.slice(0,4).toString("hex")}`)),(De.length<100||De[0]!==48)&&(C.warn(v.yellow("\u26A0\uFE0F P12 data looks corrupted or was not decrypted correctly.")),C.warn(v.yellow(" This usually means MACH_ENCRYPTION_KEY on the Remote API differs from when credentials were uploaded.")));let Ft=[M,"",m.keychainPassword],Xr=!1;for(let Pe of Ft)try{ie(`security import "${Ae}" -k "${q}" -P "${Pe}" -A -T /usr/bin/codesign -T /usr/bin/security`,{stdio:"pipe"}),Xr=!0,C.info(v.dim(`\u2713 P12 imported successfully with password: ${Pe?"[set]":"[empty]"}`));break}catch(Ve){C.info(v.dim(` P12 import attempt with password ${Pe?`"${Pe.substring(0,3)}..."`:"[empty]"} failed: ${Ve.message?.split(`
|
|
1354
|
+
`)[0]||"unknown"}`))}if(!Xr)throw new Error("Failed to import P12.");S.unlinkSync(Ae),ie(`security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k "${ce}" "${q}"`);let Kl=ie("security list-keychains -d user",{encoding:"utf-8"}).split(`
|
|
1355
|
+
`).map(Pe=>Pe.trim().replace(/^"|"$/g,"")).filter(Pe=>Pe.length>0),Vl=[q,...Kl].map(Pe=>`"${Pe}"`).join(" ");ie(`security list-keychains -d user -s ${Vl}`),ie(`security default-keychain -s "${q}"`);let Oi=A.join($e.homedir(),"Library/MobileDevice/Provisioning Profiles");S.mkdirSync(Oi,{recursive:!0});let Zr=Buffer.from(h,"base64"),Ci=A.join(Oi,`${m.nameLower}-temp-${t}.mobileprovision`);S.writeFileSync(Ci,Zr);let ki=Zr.toString("utf-8"),Qr=/<key>get-task-allow<\/key>\s*<true\/>/.test(ki);j={isAppStore:!ki.includes("<key>ProvisionedDevices</key>")&&!Qr,isDevelopment:Qr};try{let Ve=ie(`security cms -D -i "${Ci}"`,{encoding:"utf-8"}).match(/<key>UUID<\/key>\s*<string>([^<]+)<\/string>/);Z=Ve?Ve[1]:void 0}catch{let Ve=ki.match(/<key>UUID<\/key>\s*<string>([^<]+)<\/string>/);Z=Ve?Ve[1]:void 0}Z||(C.warn("Could not extract UUID from provisioning profile. Using fallback."),Z=`${m.nameLower}-${t}`);let Ni=A.join(Oi,`${Z}.mobileprovision`);S.existsSync(Ni)&&S.unlinkSync(Ni),S.renameSync(Ci,Ni);try{let Pe=ie(`security find-identity -v -p codesigning "${q}"`,{encoding:"utf-8"}),Ve=Array.from(Pe.matchAll(/"((?:Apple|iPhone) (?:Distribution|Developer|Development)[^"]*)"/g),tn=>tn[1]),eo=j.isDevelopment?Ve.find(tn=>/\b(Development|Developer)\b/.test(tn)):Ve.find(tn=>/\bDistribution\b/.test(tn)),to=Ve[0];(eo||to)&&(H=eo||to,C.info(v.blue(`Identity auto-detected from keychain: "${H}"`)))}catch{}H||(H=j.isDevelopment?"Apple Development":"Apple Distribution",C.info(v.blue(`Identity fallback (profile heuristic): "${H}"`))),C.info(v.dim(`Profile type: ${j.isDevelopment?"Development":j.isAppStore?"App Store":"Ad-Hoc"}`)),C.info(v.dim(`Identity Detection: get-task-allow=${j.isDevelopment}, Selected Identity="${H}"`)),U.push("CODE_SIGN_STYLE=Manual"),U.push(`CODE_SIGN_IDENTITY="${H}"`),U.push(`PROVISIONING_PROFILE_SPECIFIER=${Z}`),e.iosTeamId&&U.push(`DEVELOPMENT_TEAM=${e.iosTeamId}`)}catch(W){throw C.error(`Signing setup failed: ${W.message}`),W}}else U.push("-allowProvisioningUpdates"),e.iosTeamId&&U.push(`DEVELOPMENT_TEAM=${e.iosTeamId}`);a&&await a("archive"),C.info(v.blue(`Archive detected Identity: "${H}"`)),C.info(v.blue(`Archive detected UUID: "${Z}"`)),await Mn(["archive",c?"-workspace":"-project",c||p,"-scheme",$,"-configuration",b,"-archivePath",N,"-derivedDataPath",E,...y,...U],d,f,o,s);let k=kt(A.join(N,"Products","Applications"),[".app"]);for(let W of k){let q=Uo(W);C.info(v.dim(`Validated iOS CFBundleVersion ${q} in ${A.basename(W)}`))}let V;Z?(j.isAppStore?V="app-store":j.isDevelopment?V="development":V="ad-hoc",C.info(v.blue(`Export method from profile: "${V}"`))):(V=e.distribution==="store"?"app-store":e.distribution==="internal"?"ad-hoc":"development",C.warn(v.yellow(`No profile UUID detected. Export method from distribution flag: "${V}"`)));let ae=e.iosExportMethod||V,pe=e.iosBundleIdentifier||pt("ios"),z=A.join(d,"ExportOptions.plist"),G=`<?xml version="1.0" encoding="UTF-8"?>
|
|
1356
1356
|
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
|
|
1357
1357
|
<plist version="1.0">
|
|
1358
1358
|
<dict>
|
|
1359
1359
|
<key>method</key>
|
|
1360
|
-
<string>${
|
|
1360
|
+
<string>${ae}</string>
|
|
1361
1361
|
<key>destination</key>
|
|
1362
1362
|
<string>export</string>
|
|
1363
1363
|
<key>signingStyle</key>
|
|
1364
|
-
<string>${
|
|
1364
|
+
<string>${Z?"manual":"automatic"}</string>
|
|
1365
1365
|
<key>thinning</key>
|
|
1366
1366
|
<string><none></string>
|
|
1367
1367
|
${e.iosTeamId?`<key>teamID</key><string>${e.iosTeamId}</string>`:""}
|
|
1368
|
-
${
|
|
1368
|
+
${pe&&Z?`
|
|
1369
1369
|
<key>provisioningProfiles</key>
|
|
1370
1370
|
<dict>
|
|
1371
|
-
<key>${
|
|
1372
|
-
<string>${
|
|
1371
|
+
<key>${pe}</key>
|
|
1372
|
+
<string>${Z}</string>
|
|
1373
1373
|
</dict>`:""}
|
|
1374
1374
|
</dict>
|
|
1375
|
-
</plist>`;if(S.writeFileSync(z,G),process.env[`${m.envPrefix}DEBUG`]&&
|
|
1376
|
-
${G}`)),a&&await a("export"),
|
|
1375
|
+
</plist>`;if(S.writeFileSync(z,G),process.env[`${m.envPrefix}DEBUG`]&&C.info(v.magenta(`[${m.nameUpper}_DEBUG] ExportOptions.plist:
|
|
1376
|
+
${G}`)),a&&await a("export"),C.info(v.blue(`Exporting with Bundle ID: "${pe}"`)),C.info(v.blue(`Exporting with Method: "${ae}"`)),o){o(v.magenta(`
|
|
1377
1377
|
[DIAGNOSTIC] Checking available signing identities...
|
|
1378
|
-
`));try{let W=
|
|
1379
|
-
`))}catch(W){o(
|
|
1380
|
-
`))}}await
|
|
1381
|
-
`),o&&o(`[IPA VALID] CFBundleVersion ${
|
|
1382
|
-
`)}catch(
|
|
1383
|
-
`),new Error(
|
|
1384
|
-
`).slice(1).map(s=>s.trim()).filter(s=>s.length>0&&!s.startsWith("*")).map(s=>s.split(" ")[0]).length===0){
|
|
1385
|
-
`).filter(a=>a.trim().length>0)}catch{}if(l.length>0){let a=await
|
|
1386
|
-
`).find(a=>a.includes("android.intent.action.MAIN")&&a.includes("android.intent.category.LAUNCHER"))?
|
|
1378
|
+
`));try{let W=ie("security find-identity -v -p codesigning",{encoding:"utf-8"});o(v.magenta(`${W}
|
|
1379
|
+
`))}catch(W){o(v.red(`[DIAGNOSTIC] Failed to list identities: ${W.message}
|
|
1380
|
+
`))}}await Mn(["-exportArchive","-archivePath",N,"-exportPath",_,"-exportOptionsPlist",z],d,f,o,s),a&&await a("validate");let ee=kt(_,[".ipa"]);for(let W of ee)try{ie(`unzip -t "${W}"`,{stdio:"pipe"});let q=ed(W);o&&o(`[IPA VALID] ${A.basename(W)} \u2014 archive integrity OK
|
|
1381
|
+
`),o&&o(`[IPA VALID] CFBundleVersion ${q}
|
|
1382
|
+
`)}catch(q){let ce=`IPA validation failed for ${A.basename(W)}: ${q.message||"archive may be corrupt"}`;throw o&&o(`[IPA CORRUPT] ${ce}
|
|
1383
|
+
`),new Error(ce)}return ee}},pt=e=>{try{let t=A.join(process.cwd(),m.configFileName);if(S.existsSync(t)){let n=JSON.parse(S.readFileSync(t,"utf-8"));if(e==="android"&&n.android?.package)return n.android.package;if(e==="ios"&&n.ios?.bundleIdentifier)return n.ios.bundleIdentifier}if(e==="android"){let n=["android/app/build.gradle","app/build.gradle","build.gradle"];for(let i of n)if(S.existsSync(i)){let o=S.readFileSync(i,"utf-8").match(/applicationId\s+['"]([^'"]+)['"]/);if(o)return o[1]}}else{let n=A.resolve(process.cwd(),S.existsSync("ios")?"ios":"."),i=kt(n,["Info.plist"]).filter(s=>!s.includes("/Pods/")&&!s.includes("/build/")&&!s.includes("/DerivedData/"));i.sort((s,l)=>l.split("/").length-s.split("/").length);for(let s of i){let a=S.readFileSync(s,"utf-8").match(/<key>CFBundleIdentifier<\/key>\s*<string>([^<]+)<\/string>/);if(a&&!a[1].includes("$"))return a[1]}let r=kt(n,[".xcodeproj"]);if(r.length>0){let s=A.join(r[0],"project.pbxproj");if(S.existsSync(s)){let a=S.readFileSync(s,"utf-8").match(/PRODUCT_BUNDLE_IDENTIFIER\s*=\s*"?([^";\s]+)"?;/);if(a)return a[1]}}let o=["app.json","app.config.json","app.config.js","app.config.ts"];for(let s of o)if(S.existsSync(s)){let a=S.readFileSync(s,"utf-8").match(/"bundleIdentifier":\s*"([^"]+)"/);if(a)return a[1]}}}catch{return null}return null},od=()=>{try{return ie("emulator -version",{stdio:"ignore"}),"emulator"}catch{let t=$e.homedir(),n=[A.join(t,"Library/Android/sdk/emulator/emulator"),A.join(t,"Android/Sdk/emulator/emulator"),"/usr/local/lib/android/sdk/emulator/emulator"];for(let i of n)if(S.existsSync(i))return i}return"emulator"},sd=async(e,t)=>{let n=Un();try{if(ie("adb devices").toString().split(`
|
|
1384
|
+
`).slice(1).map(s=>s.trim()).filter(s=>s.length>0&&!s.startsWith("*")).map(s=>s.split(" ")[0]).length===0){C.warn(v.yellow("No Android devices or emulators found."));let s=od(),l=[];try{l=ie(`${s} -list-avds`).toString().split(`
|
|
1385
|
+
`).filter(a=>a.trim().length>0)}catch{}if(l.length>0){let a=await Gi({message:"Select an emulator to launch:",options:l.map(c=>({value:c,label:c}))});if(Fn(a))return;n.start(`Launching emulator ${a}...`),Fo(s,["-avd",a],{detached:!0,stdio:"ignore"}).unref();let d=0,u=!1;for(;d<60;){try{if(ie("adb shell getprop sys.boot_completed",{stdio:"pipe"}).toString().trim()==="1"){u=!0;break}}catch{}await new Promise(c=>setTimeout(c,2e3)),d++}if(!u)throw n.stop("Emulator launch timed out."),new Error("Emulator launch timed out. Please try launching it manually.");n.stop("Emulator launched.")}else throw new Error("No devices found and no emulators available to launch. (Make sure Android SDK is installed)")}n.start("Installing APK on device..."),await ut("adb",["install","-r",e],process.cwd(),{},t),n.stop("Installation complete.");let o=pt("android");if(o){C.info(v.blue(`\u{1F680} Launching ${o}...`));try{ie(`adb shell dumpsys package ${o}`).toString().split(`
|
|
1386
|
+
`).find(a=>a.includes("android.intent.action.MAIN")&&a.includes("android.intent.category.LAUNCHER"))?ie(`adb shell monkey -p ${o} -c android.intent.category.LAUNCHER 1`,{stdio:"ignore"}):ie(`adb shell monkey -p ${o} -c android.intent.category.LAUNCHER 1`,{stdio:"ignore"})}catch{C.warn("Could not auto-launch app. You may need to open it manually.")}}}catch(i){n.stop("Installation failed."),C.error(v.red(`Failed to install APK: ${i.message}`))}},ad=async(e,t,n)=>{let i=Un();try{if(!ie("xcrun simctl list devices booted").toString().includes("(Booted)")){C.warn(v.yellow("No iOS Simulator is currently booted."));let o=ie("xcrun simctl list devices --json").toString(),s=JSON.parse(o).devices,l=[];Object.keys(s).forEach(c=>{s[c].forEach(p=>{p.isAvailable&&l.push({...p,runtime:c})})});let a=await Gi({message:"Select a simulator to launch:",options:l.map(c=>({value:c.udid,label:`${c.name} (${c.runtime.split(".").pop()})`}))});if(Fn(a))return;i.start(`Booting ${a}...`),ie(`xcrun simctl boot ${a}`),ie(`open -a Simulator --args -CurrentDeviceUDID ${a}`);let d=0,u=!1;for(;d<30;){try{if(ie("xcrun simctl list devices booted").toString().includes(a)){u=!0;break}}catch{}await new Promise(c=>setTimeout(c,2e3)),d++}if(!u)throw i.stop("Simulator boot timed out."),new Error("Simulator boot timed out.");i.stop("Simulator booted.")}i.start("Installing on iOS Simulator..."),zo(e),Wo(e),await ut("xcrun",["simctl","install","booted",e],process.cwd(),{},n),i.stop("Installation complete."),C.info(v.blue(`\u{1F680} Launching ${t}...`)),await ut("xcrun",["simctl","launch","booted",t],process.cwd(),{},n)}catch(r){i.stop("Installation failed."),C.error(v.red(`Failed to install on Simulator: ${r.message}`))}},ld=async(e,t,n)=>{let i=Un();i.start("Scanning for connected iOS devices...");try{let r=ie("xcrun devicectl list devices --json-output -").toString(),s=(JSON.parse(r).result?.devices||[]).filter(a=>a.connectionProperties?.transportType==="wired"||a.connectionProperties?.transportType==="localNetwork");if(s.length===0)throw i.stop("No connected iOS devices found."),new Error("Please connect your iPhone via USB or ensure it is on the same Wi-Fi for wireless debugging.");let l=s[0].identifier;if(s.length>1){i.stop();let a=await Gi({message:"Select a device to install on:",options:s.map(d=>({value:d.identifier,label:`${d.deviceProperties?.name||d.name||d.model?.name} (${d.model?.name||"iPhone"}) - ${d.identifier}`}))});if(Fn(a))return;l=a,i.start(`Installing on ${l}...`)}else i.message(`Installing on ${s[0].model.name}...`);await ut("xcrun",["devicectl","device","install","app","--device",l,e],process.cwd(),{},n),i.stop("Installation complete."),C.info(v.blue(`\u{1F680} Launching ${t}...`)),await ut("xcrun",["devicectl","device","launch","app","--device",l,t],process.cwd(),{},n)}catch(r){i.stop("Installation failed."),C.error(v.red(`Failed to install on device: ${r.message}`)),C.info(v.dim('Make sure your device is unlocked and "Developer Mode" is enabled in Settings -> Privacy & Security.'))}};import L from"fs";import Wt from"os";import Y from"path";import{spawn as ns,spawnSync as Je}from"child_process";import{randomUUID as cd}from"crypto";import{pipeline as dd}from"stream/promises";import{isCancel as qi,log as B,select as is,spinner as dn,text as ud}from"@clack/prompts";import cn from"axios";import K from"chalk";import Bn from"adm-zip";async function rs(e){if(e.localRunner){let n=await hd(e);process.exitCode=n?n.exitCode:1;return}if(e.local){let n=await yd(e);n&&(process.exitCode=n.exitCode);return}let t=await er(e);if(t&&(B.success(K.green(`Maestro run ${t.status||"queued"}: ${t.testRunId}`)),t.launchDeferredReason&&B.warn(K.yellow(t.launchDeferredReason)),t.dashboardUrl&&B.info(K.dim("View test run: ")+K.white.underline(t.dashboardUrl)),e.wait)){let n=await Sd(e,t);n&&(process.exitCode=n.status==="passed"?0:1)}}var pd=new Set(["passed","failed","cancelled","interrupted"]),Yo=Number(process.env.MACH_FLOW_UPLOAD_MAX_ATTEMPTS||4),fd=Number(process.env.MACH_FLOW_UPLOAD_TIMEOUT_MS||12e4),os=process.env.MACH_MAESTRO_FAST_FAIL_RETRY==="1";function Qi(e){let t=Array.isArray(e)?e:e?[e]:[];return[...new Set(t.flatMap(n=>String(n||"").split(",")).map(n=>n.trim()).filter(Boolean))]}function md(e){let t=Qi(e);if(t.length===0)return;let n={};for(let i of t){let r=process.env[i];r!==void 0&&(n[i]=r)}return Object.keys(n).length>0?n:void 0}function gd(e){let t={};for(let[i,r]of Object.entries(process.env))i.startsWith("MAESTRO_TEST_")&&r!==void 0&&(t[i]=r);let n=Qi(e);for(let i of n){let r=process.env[i];r!==void 0&&(t[i]=r)}return t}async function hd(e){let t=e.projectId,n=e.testRunId,i=e.runnerToken||process.env.MACH_RUNNER_TOKEN||process.env.MACH_TOKEN,r=(process.env.MACH_API_URL||Bt).replace(/\/$/,""),o=L.mkdtempSync(Y.join(Wt.tmpdir(),"mach-maestro-runner-")),s=Y.join(o,"mach-maestro-output"),l=Y.join(o,"runner.log");if(L.mkdirSync(s,{recursive:!0}),!t||!n||!i)return B.error(K.red("--local-runner requires --project-id, --test-run-id, and a runner token.")),{status:"failed",exitCode:1,attempts:0,flows:".maestro",platform:e.platform};let a=null,d=null,u=null,c=f=>{L.appendFileSync(l,`${f}${f.endsWith(`
|
|
1387
1387
|
`)?"":`
|
|
1388
|
-
`}`)},f=async(p,g)=>{try{await zt.post(`${r}/internal/tests/${encodeURIComponent(n)}/runner`,{projectId:t,runnerToken:i,status:p,error:g,logPreview:gc(l),junitUrl:a?.urls?.junitDownloadUrl,logsUrl:a?.urls?.logsDownloadUrl,artifactsUrl:a?.urls?.artifactsDownloadUrl})}catch(y){c(`[WARN] Could not post runner update: ${y.message||y}`)}};try{c(`Mach Maestro local runner starting for ${n}`);let p=await zt.post(`${r}/internal/tests/${encodeURIComponent(n)}/runner-payload`,{projectId:t,runnerToken:i});if(p.data?.status!=="success"||!p.data?.payload)throw new Error(p.data?.message||"Runner payload was not returned.");a=p.data.payload;let g=Object.keys(a.env||{});c(`Using Maestro env vars: ${g.length>0?g.join(", "):"none"}`);let y={...process.env,...a.env||{}},_=hc(a.env);_.length>0&&c(`Passing Maestro env vars to test command: ${g.sort().join(", ")}`),await f("running");let D=a.platform==="android"?"app.apk":"app.zip",b=Y.join(o,D),L=Y.join(o,"source.zip"),A=Y.join(o,"source");x.mkdirSync(A,{recursive:!0}),c("Downloading app artifact..."),await bi(a.artifactUrl,b),c(`Downloaded app artifact: ${D} (${lo(x.statSync(b).size)})`),c("Downloading Maestro source..."),await bi(a.urls.sourceUrl,L),c(`Downloaded Maestro source: source.zip (${lo(x.statSync(L).size)})`),new En(L).extractAllTo(A,!0);let B=Sc(A,a.flowPath||".maestro");if(!x.existsSync(B))throw new Error(`Maestro flow path not found: ${a.flowPath||".maestro"}`);if(c(`Resolved Maestro flow path: ${Y.relative(A,B)||"."}`),a.platform==="ios"){await wc(a.device||"iphone_15",l);let N=_c(b,o),h=wo(N,l);c(`Resolved iOS app bundle: ${N}`),c(`Resolved iOS bundle id: ${h||"unknown"}`),$c(N,l),Ei("xcrun",["simctl","install","booted",N],l),h&&(u={platform:a.platform,appId:h}),h&&ot("xcrun",["simctl","get_app_container","booted",h,"app"],l),gi(s,l,"ios-before-maestro.png"),a.record&&(d=Rc(s,l))}else{let N=Oc(b,l),h=Pc(a.device,l),M=h?["-s",h]:[];c(`Resolved Android application id: ${N||"unknown"}`),Ei("adb",[...M,"install","-r",b],l),N&&(u={platform:a.platform,appId:N,deviceId:h||void 0})}let P=Math.max(0,Math.min(10,Number(a.retries??1)))+1,I=Y.join(s,"report.xml"),T=Ac(l);if(!T)throw new Error("Maestro CLI not found on this runner. Install Maestro or set MAESTRO_BIN to the full maestro path.");let w=1;for(let N=1;N<=P;N+=1){c(`Running Maestro attempt ${N}/${P}...`);let h=["test","--platform",a.platform,..._,B,"--format","junit","--output",I,"--test-output-dir",s];if(So&&N<P?w=(await Io(T,h,{logPath:l,env:y,fastFailOnFlowFailure:!0})).exitCode:w=ot(T,h,l,void 0,y),w===0)break}return a.platform==="ios"&&gi(s,l,"ios-after-maestro.png"),await co(d,l),d=null,await fo(a.urls,o,s,l),w===0?(await f("passed"),F.success(K.green(`Managed Maestro run passed: ${n}`)),{status:"passed",exitCode:0,attempts:P,flows:a.flowPath,platform:a.platform}):(await f("failed",`Maestro exited with code ${w}`),F.error(K.red(`Managed Maestro run failed with exit code ${w}`)),{status:"failed",exitCode:w,attempts:P,flows:a.flowPath,platform:a.platform})}catch(p){let g=p.message||String(p);return c(`MACH_MAESTRO_RUN_FAILED: ${g}`),a?.platform==="ios"&&gi(s,l,"ios-after-failure.png"),await co(d,l),a?.urls&&await fo(a.urls,o,s,l),await f("failed",g),F.error(K.red(`Managed Maestro runner failed: ${g}`)),{status:"failed",exitCode:1,attempts:0,flows:a?.flowPath||".maestro",platform:a?.platform||e.platform}}finally{vc(u,l)}}async function sc(e){let t=e.maestroFlows||".maestro",n=bo(e.maestroRetries);if(n===null)return null;let i=Y.resolve(t);if(!x.existsSync(i))return F.error(K.red(`Maestro flows not found: ${t}`)),{status:"failed",exitCode:1,attempts:0,flows:t,platform:e.platform};let r=await pc(e);if(r?.url){if(!await mc(r))return{status:"failed",exitCode:1,attempts:0,flows:t,platform:r.platform||e.platform}}else if(e.buildId||e.buildUrl||e.artifactUrl||e.latest)return{status:"failed",exitCode:1,attempts:0,flows:t,platform:e.platform};e.maestroRecord&&F.warn(K.yellow("--maestro-record is managed-runner only and is ignored in --local mode."));let o=r?.platform||e.platform,s=["test"];o&&s.push("--platform",o),e.maestroDevice&&s.push("--device",String(e.maestroDevice));let l=rc(e.maestroEnv),a=Object.keys(l);if(a.length>0){F.info(K.dim(`Passing Maestro env vars to local run: ${a.join(", ")}`));for(let[p,g]of Object.entries(l))s.push("-e",`${p}=${g}`)}s.push(t);let d=n+1,u=1;for(let p=1;p<=d;p+=1){if(F.info(K.dim(`Running local Maestro attempt ${p}/${d}...`)),So&&p<d){let g=await Io("maestro",s,{cwd:process.cwd(),env:process.env,echoOutput:!0,fastFailOnFlowFailure:!0});if(g.error){let y=g.error.message||"Failed to run Maestro";F.error(K.red(`Local Maestro failed to start: ${y}`)),F.info(K.dim("Install Maestro locally, then retry: https://maestro.mobile.dev/getting-started/installing-maestro")),u=1;break}u=g.exitCode}else{let g=Ge("maestro",s,{cwd:process.cwd(),stdio:"inherit",env:process.env});if(g.error){let y=g.error.message||"Failed to run Maestro";F.error(K.red(`Local Maestro failed to start: ${y}`)),F.info(K.dim("Install Maestro locally, then retry: https://maestro.mobile.dev/getting-started/installing-maestro")),u=1;break}u=typeof g.status=="number"?g.status:1}if(u===0)break}let c=u===0?"passed":"failed",f={status:c,exitCode:u,attempts:d,flows:t,platform:o};return xc(e,f),c==="passed"?F.success(K.green("Local Maestro run passed")):F.error(K.red(`Local Maestro run failed with exit code ${u}`)),f}async function Ii(e){let t=$e(`./${m.configFileName}`),n=e.projectId||t?.projectId,i=String(e.profile||e.buildProfile||"production").toLowerCase();if(!n)return F.error(`No projectId found. Run \`${m.nameLower} link\` first or pass an internal project id.`),null;let r=e.platform;if(!r&&e.latest){let c=await go({message:"Select platform for the latest build:",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"}]});if(yi(c))return null;r=c}let o=await uc(e);if(!o)return null;if(o.kind==="latest"&&!r)return F.error("Pass --platform when using --latest."),null;if(o.kind==="artifact-url"&&!r)return F.error("Pass --platform when using --artifact-url."),null;let s=bo(e.maestroRetries);if(s===null)return null;let l=Ai(e.maestroEnv),a=ic(e.maestroEnv);!e.quiet&&l.length>0&&F.info(K.dim(`Forwarding Maestro env vars by name: ${l.join(", ")}`));let d=await lc(e,n);if(d===null)return null;let u=Wt();e.quiet||u.start("Queuing Maestro run...");try{let c=await k.post("/tests/maestro",{projectId:n,platform:r,profile:i,latest:o.kind==="latest",buildId:o.kind==="build-id"?o.value:e.buildId,buildUrl:o.kind==="build-url"?o.value:e.buildUrl,artifactUrl:o.kind==="artifact-url"?o.value:e.artifactUrl,flowSourceKey:d,flows:e.maestroFlows||".maestro",device:e.maestroDevice||(r==="ios"?"iphone_15":"pixel_6"),retries:s,record:!!e.maestroRecord,...l.length>0?{envNames:l}:{},...a?{env:a}:{}});if(c.data.status!=="success")throw new Error(c.data.message||"Failed to queue Maestro run");let f=c.data.testRun,p={testRunId:f.testRunId,status:f.status,projectId:n,buildId:f.buildId,platform:f.platform,dashboardUrl:f.dashboardUrl||`${Je}/tests/${f.testRunId}`,launchDeferredReason:f.launchDeferredReason};return Ro(e,p),e.quiet||u.stop("Maestro run queued"),p}catch(c){e.quiet||u.stop("Could not queue Maestro run");let f=c.response?.data?.message||c.message||"Unknown error";return F.error(K.red(`Maestro queue failed: ${f}`)),null}}async function ac(e,t){let n=ao(e.waitTimeout,60,"--wait-timeout"),i=ao(e.waitInterval,15,"--wait-interval");if(n===null||i===null)return null;let r=n*60*1e3,o=Math.max(5,i)*1e3,s=Date.now(),l=t.status||"queued";for(F.info(K.dim(`Waiting for Maestro run ${t.testRunId} to finish...`));Date.now()-s<=r;){let a=await dc(t.projectId,t.testRunId);if(!a)return null;if(a.status&&a.status!==l&&(l=a.status,F.info(K.dim(`Maestro status: ${l}`))),tc.has(String(a.status)))return Ro(e,a),a.status==="passed"?F.success(K.green(`Maestro run passed: ${a.testRunId}`)):(F.error(K.red(`Maestro run ${a.status}: ${a.testRunId}`)),a.error&&F.error(K.red(String(a.error)))),a;await wi(o)}return F.error(K.red(`Timed out waiting for Maestro run ${t.testRunId} after ${n} minute(s).`)),{...t,status:"timeout"}}async function lc(e,t){if(e.maestroUseBuildSource)return;let n=e.maestroFlows||".maestro",i=Y.resolve(n);if(!x.existsSync(i))return e.maestroFlows?(F.error(K.red(`Maestro flows not found: ${n}`)),null):void 0;let r=Y.relative(process.cwd(),i);if(!r||r.startsWith("..")||Y.isAbsolute(r))return F.error(K.red("Managed Maestro flow uploads must be inside the current project directory.")),null;let o=Wt();e.quiet||o.start(`Uploading Maestro flows from ${r}...`);try{let s=await k.post("/tests/maestro/source-upload-url",{projectId:t,uploadId:Zl()});if(s.data.status!=="success"||!s.data.uploadUrl||!s.data.key)throw new Error(s.data.message||"Failed to get Maestro flow upload URL");let l=new En;if(x.statSync(i).isDirectory())l.addLocalFolder(i,r);else{let u=Y.dirname(r);l.addLocalFile(i,u==="."?void 0:u,Y.basename(r))}let d=l.toBuffer();return await cc(s.data.uploadUrl,d,"application/zip","Maestro flow upload",u=>{e.quiet||o.message(u)}),e.quiet||o.stop("Maestro flows uploaded"),s.data.key}catch(s){e.quiet||o.stop("Could not upload Maestro flows");let l=s.response?.data?.message||s.message||"Unknown error";return F.error(K.red(`Maestro flow upload failed: ${l}`)),null}}function yo(e){let t=e.response?.status,n=e.code||"",i=e.message||"";return t&&![408,409,425,429].includes(t)&&t<500?!1:/ECONNRESET|ETIMEDOUT|EAI_AGAIN|ENOTFOUND|ECONNABORTED|socket hang up|network|timeout/i.test(`${n} ${i}`)||!t}async function cc(e,t,n,i,r){let o;for(let s=1;s<=so;s+=1)try{await zt.put(e,t,{headers:{"Content-Type":n},maxBodyLength:1/0,maxContentLength:1/0,timeout:nc});return}catch(l){if(o=l,!yo(l)||s>=so)break;let a=Math.min(2e4,2e3*s),d=l.code||l.response?.status||l.message||"network error";r?.(`${i} attempt ${s} failed (${d}), retrying...`),await wi(a)}throw o}async function dc(e,t){try{let n=await k.get(`/tests/${encodeURIComponent(t)}`,{params:{projectId:e}});if(n.data.status!=="success")throw new Error(n.data.message||"Failed to fetch Maestro run");let i=n.data.testRun;return{testRunId:i.testRunId,status:i.status,projectId:e,buildId:i.buildId,platform:i.platform,dashboardUrl:i.dashboardUrl||`${Je}/tests/${i.testRunId}`,launchDeferredReason:i.launchDeferredReason,...i.error?{error:i.error}:{}}}catch(n){let i=n.response?.data?.message||n.message||"Unknown error";return F.error(K.red(`Could not fetch Maestro run status: ${i}`)),null}}async function uc(e){if(e.buildId)return{kind:"build-id",value:e.buildId};if(e.buildUrl)return{kind:"build-url",value:e.buildUrl};if(e.artifactUrl)return{kind:"artifact-url",value:e.artifactUrl};if(e.latest)return{kind:"latest"};let t=await go({message:"Select app artifact source for Maestro:",options:[{value:"latest",label:"Latest successful build"},{value:"build-id",label:"Build ID"},{value:"build-url",label:`${m.name} build URL`},{value:"artifact-url",label:"Direct artifact URL"}]});if(yi(t))return null;if(t==="latest")return{kind:"latest"};let n=await ec({message:t==="build-id"?"Enter build ID:":t==="build-url"?`Enter ${m.name} build URL:`:"Enter artifact URL:",validate:i=>{let r=String(i||"").trim();if(!r)return"Value is required";if((t==="build-url"||t==="artifact-url")&&!r.startsWith("http"))return"Must be a URL"}});return yi(n)?null:{kind:t,value:String(n).trim()}}function ao(e,t,n){if(e==null||e==="")return t;let i=Number(e);return!Number.isFinite(i)||i<=0?(F.error(`${n} must be a positive number.`),null):i}function wi(e){return new Promise(t=>setTimeout(t,e))}function bo(e){if(e==null||e==="")return 1;let t=Number(e);return!Number.isInteger(t)||t<0||t>10?(F.error("--maestro-retries must be an integer between 0 and 10."),null):t}async function pc(e){if(e.artifactUrl)return{url:e.artifactUrl,platform:e.platform||Ri(e.artifactUrl),name:_o(e.artifactUrl)};let t=e.buildId||Lc(e.buildUrl);return t?Eo(t,e.platform):e.latest?fc(e):null}async function Eo(e,t){let n=Wt();n.start(`Resolving build ${e}...`);try{let i=await k.get(`/public/builds/${encodeURIComponent(e)}`);if(i.data.status!=="success")throw new Error(i.data.message||"Build lookup failed");let r=t||i.data.build?.platform,o=kc(i.data.artifacts||[],r);if(!o?.downloadUrl)throw new Error("No installable APK or simulator app artifact found for this build.");return n.stop("Build artifact resolved"),{url:o.downloadUrl,platform:r||Ri(o.name||o.downloadUrl),name:o.name}}catch(i){n.stop("Could not resolve build artifact");let r=i.response?.data?.message||i.message||"Unknown error";return F.error(K.red(`Local Maestro artifact lookup failed: ${r}`)),null}}async function fc(e){let t=$e(`./${m.configFileName}`),n=e.projectId||t?.projectId,i=String(e.profile||e.buildProfile||"production").toLowerCase();if(!n)return F.error(`No projectId found. Run \`${m.nameLower} link\` first or pass --build-id/--artifact-url.`),null;if(!e.platform)return F.error("Pass --platform when using --latest with --local."),null;let r=Wt();r.start("Resolving latest build...");try{let o=await k.get(`/builds/${n}`,{params:{limit:100}}),l=(Array.isArray(o.data.builds)?o.data.builds:[]).find(a=>a.status==="success"&&a.platform===e.platform&&String(a.buildProfile||a.buildType||"production").toLowerCase()===i);if(!l?.buildId)throw new Error(`No successful ${e.platform} build found for profile ${i}.`);return r.stop(`Latest build resolved: ${l.buildId}`),Eo(l.buildId,e.platform)}catch(o){r.stop("Could not resolve latest build");let s=o.response?.data?.message||o.message||"Unknown error";return F.error(K.red(`Latest build lookup failed: ${s}`)),null}}async function mc(e){let t=e.platform||Ri(e.url);if(!t)return F.error(K.red("Could not infer platform for local install. Pass --platform android or --platform ios.")),!1;let n=x.mkdtempSync(Y.join(Tt.tmpdir(),"mach-maestro-")),i=e.name||_o(e.url)||(t==="android"?"app.apk":"app.zip"),r=Y.join(n,i),o=Wt();o.start(`Downloading ${i}...`);try{await bi(e.url,r),o.stop("Artifact downloaded")}catch(s){return o.stop("Artifact download failed"),F.error(K.red(s.message||"Failed to download artifact")),!1}return t==="android"?Nc(r):Tc(r,n)}async function bi(e,t){let n=await zt.get(e,{responseType:"stream"});await Ql(n.data,x.createWriteStream(t))}function gc(e,t=12e3){try{return x.readFileSync(e,"utf-8").slice(-t)}catch{return""}}function lo(e){if(!Number.isFinite(e)||e<0)return"unknown size";if(e<1024)return`${e} B`;let t=["KB","MB","GB"],n=e/1024,i=t[0];for(let r=1;n>=1024&&r<t.length;r+=1)n/=1024,i=t[r];return`${n.toFixed(n>=10?1:2)} ${i}`}function hc(e){return Object.entries(e||{}).filter(([t,n])=>!!t&&n!==void 0).sort(([t],[n])=>t.localeCompare(n)).flatMap(([t,n])=>["-e",`${t}=${n}`])}function Sc(e,t){let n=Y.resolve(e,t||".maestro"),i=Y.relative(e,n);if(i.startsWith("..")||Y.isAbsolute(i))throw new Error("Maestro flow path must stay inside the build source.");return n}function Ao(e,t){let n=[e];for(let i=0;i<t.length;i+=1){let r=t[i],o=t[i-1];(o==="-e"||o==="--env")&&/^[A-Za-z_][A-Za-z0-9_]*=/.test(r)?n.push(`${r.slice(0,r.indexOf("="))}=<redacted>`):n.push(r)}return n.join(" ")}function yc(e){return/\[Failed\]\s+/.test(e)}function bc(e){if(!e.killed){try{e.kill("SIGTERM")}catch{}setTimeout(()=>{try{e.kill("SIGKILL")}catch{}},5e3).unref()}}function Io(e,t,n={}){let{cwd:i,env:r=process.env,logPath:o,echoOutput:s=!1,fastFailOnFlowFailure:l=!1}=n;return o&&x.appendFileSync(o,`
|
|
1389
|
-
$ ${
|
|
1390
|
-
`),new Promise(a=>{let d=!1,u=!1,c="",
|
|
1388
|
+
`}`)},p=async(f,g)=>{try{await cn.post(`${r}/internal/tests/${encodeURIComponent(n)}/runner`,{projectId:t,runnerToken:i,status:f,error:g,logPreview:vd(l),junitUrl:a?.urls?.junitDownloadUrl,logsUrl:a?.urls?.logsDownloadUrl,artifactsUrl:a?.urls?.artifactsDownloadUrl})}catch(y){c(`[WARN] Could not post runner update: ${y.message||y}`)}};try{c(`Mach Maestro local runner starting for ${n}`);let f=await cn.post(`${r}/internal/tests/${encodeURIComponent(n)}/runner-payload`,{projectId:t,runnerToken:i});if(f.data?.status!=="success"||!f.data?.payload)throw new Error(f.data?.message||"Runner payload was not returned.");a=f.data.payload;let g=Object.keys(a.env||{});c(`Using Maestro env vars: ${g.length>0?g.join(", "):"none"}`);let y={...process.env,...a.env||{}},w=Rd(a.env);w.length>0&&c(`Passing Maestro env vars to test command: ${g.sort().join(", ")}`),await p("running");let $=a.platform==="android"?"app.apk":"app.zip",b=Y.join(o,$),x=Y.join(o,"source.zip"),E=Y.join(o,"source");L.mkdirSync(E,{recursive:!0}),c("Downloading app artifact..."),await Xi(a.artifactUrl,b),c(`Downloaded app artifact: ${$} (${Xo(L.statSync(b).size)})`),c("Downloading Maestro source..."),await Xi(a.urls.sourceUrl,x),c(`Downloaded Maestro source: source.zip (${Xo(L.statSync(x).size)})`),new Bn(x).extractAllTo(E,!0);let F=Dd(E,a.flowPath||".maestro");if(!L.existsSync(F))throw new Error(`Maestro flow path not found: ${a.flowPath||".maestro"}`);if(c(`Resolved Maestro flow path: ${Y.relative(E,F)||"."}`),a.platform==="ios"){await Td(a.device||"iphone_15",l);let O=xd(b,o),h=us(O,l);c(`Resolved iOS app bundle: ${O}`),c(`Resolved iOS bundle id: ${h||"unknown"}`),Md(O,l),Zi("xcrun",["simctl","install","booted",O],l),h&&(u={platform:a.platform,appId:h}),h&&ft("xcrun",["simctl","get_app_container","booted",h,"app"],l),Wi(s,l,"ios-before-maestro.png"),a.record&&(d=Ld(s,l))}else{let O=Bd(b,l),h=Fd(a.device,l),M=h?["-s",h]:[];c(`Resolved Android application id: ${O||"unknown"}`),Zi("adb",[...M,"install","-r",b],l),O&&(u={platform:a.platform,appId:O,deviceId:h||void 0})}let D=Math.max(0,Math.min(10,Number(a.retries??1)))+1,I=Y.join(s,"report.xml"),N=kd(l);if(!N)throw new Error("Maestro CLI not found on this runner. Install Maestro or set MAESTRO_BIN to the full maestro path.");let _=1;for(let O=1;O<=D;O+=1){c(`Running Maestro attempt ${O}/${D}...`);let h=["test","--platform",a.platform,...w,F,"--format","junit","--output",I,"--test-output-dir",s];if(os&&O<D?_=(await ds(N,h,{logPath:l,env:y,fastFailOnFlowFailure:!0})).exitCode:_=ft(N,h,l,void 0,y),_===0)break}return a.platform==="ios"&&Wi(s,l,"ios-after-maestro.png"),await Zo(d,l),d=null,await ts(a.urls,o,s,l),_===0?(await p("passed"),B.success(K.green(`Managed Maestro run passed: ${n}`)),{status:"passed",exitCode:0,attempts:D,flows:a.flowPath,platform:a.platform}):(await p("failed",`Maestro exited with code ${_}`),B.error(K.red(`Managed Maestro run failed with exit code ${_}`)),{status:"failed",exitCode:_,attempts:D,flows:a.flowPath,platform:a.platform})}catch(f){let g=f.message||String(f);return c(`MACH_MAESTRO_RUN_FAILED: ${g}`),a?.platform==="ios"&&Wi(s,l,"ios-after-failure.png"),await Zo(d,l),a?.urls&&await ts(a.urls,o,s,l),await p("failed",g),B.error(K.red(`Managed Maestro runner failed: ${g}`)),{status:"failed",exitCode:1,attempts:0,flows:a?.flowPath||".maestro",platform:a?.platform||e.platform}}finally{Ud(u,l)}}async function yd(e){let t=e.maestroFlows||".maestro",n=as(e.maestroRetries);if(n===null)return null;let i=Y.resolve(t);if(!L.existsSync(i))return B.error(K.red(`Maestro flows not found: ${t}`)),{status:"failed",exitCode:1,attempts:0,flows:t,platform:e.platform};let r=await wd(e);if(r?.url){if(!await $d(r))return{status:"failed",exitCode:1,attempts:0,flows:t,platform:r.platform||e.platform}}else if(e.buildId||e.buildUrl||e.artifactUrl||e.latest)return{status:"failed",exitCode:1,attempts:0,flows:t,platform:e.platform};e.maestroRecord&&B.warn(K.yellow("--maestro-record is managed-runner only and is ignored in --local mode."));let o=r?.platform||e.platform,s=["test"];o&&s.push("--platform",o),e.maestroDevice&&s.push("--device",String(e.maestroDevice));let l=gd(e.maestroEnv),a=Object.keys(l);if(a.length>0){B.info(K.dim(`Passing Maestro env vars to local run: ${a.join(", ")}`));for(let[f,g]of Object.entries(l))s.push("-e",`${f}=${g}`)}s.push(t);let d=n+1,u=1;for(let f=1;f<=d;f+=1){if(B.info(K.dim(`Running local Maestro attempt ${f}/${d}...`)),os&&f<d){let g=await ds("maestro",s,{cwd:process.cwd(),env:process.env,echoOutput:!0,fastFailOnFlowFailure:!0});if(g.error){let y=g.error.message||"Failed to run Maestro";B.error(K.red(`Local Maestro failed to start: ${y}`)),B.info(K.dim("Install Maestro locally, then retry: https://maestro.mobile.dev/getting-started/installing-maestro")),u=1;break}u=g.exitCode}else{let g=Je("maestro",s,{cwd:process.cwd(),stdio:"inherit",env:process.env});if(g.error){let y=g.error.message||"Failed to run Maestro";B.error(K.red(`Local Maestro failed to start: ${y}`)),B.info(K.dim("Install Maestro locally, then retry: https://maestro.mobile.dev/getting-started/installing-maestro")),u=1;break}u=typeof g.status=="number"?g.status:1}if(u===0)break}let c=u===0?"passed":"failed",p={status:c,exitCode:u,attempts:d,flows:t,platform:o};return Wd(e,p),c==="passed"?B.success(K.green("Local Maestro run passed")):B.error(K.red(`Local Maestro run failed with exit code ${u}`)),p}async function er(e){let t=_e(`./${m.configFileName}`),n=e.projectId||t?.projectId,i=String(e.profile||e.buildProfile||"production").toLowerCase();if(!n)return B.error(`No projectId found. Run \`${m.nameLower} link\` first or pass an internal project id.`),null;let r=e.platform;if(!r&&e.latest){let c=await is({message:"Select platform for the latest build:",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"}]});if(qi(c))return null;r=c}let o=await Id(e);if(!o)return null;if(o.kind==="latest"&&!r)return B.error("Pass --platform when using --latest."),null;if(o.kind==="artifact-url"&&!r)return B.error("Pass --platform when using --artifact-url."),null;let s=as(e.maestroRetries);if(s===null)return null;let l=Qi(e.maestroEnv),a=md(e.maestroEnv);!e.quiet&&l.length>0&&B.info(K.dim(`Forwarding Maestro env vars by name: ${l.join(", ")}`));let d=await bd(e,n);if(d===null)return null;let u=dn();e.quiet||u.start("Queuing Maestro run...");try{let c=await T.post("/tests/maestro",{projectId:n,platform:r,profile:i,latest:o.kind==="latest",buildId:o.kind==="build-id"?o.value:e.buildId,buildUrl:o.kind==="build-url"?o.value:e.buildUrl,artifactUrl:o.kind==="artifact-url"?o.value:e.artifactUrl,flowSourceKey:d,flows:e.maestroFlows||".maestro",device:e.maestroDevice||(r==="ios"?"iphone_15":"pixel_6"),retries:s,record:!!e.maestroRecord,...l.length>0?{envNames:l}:{},...a?{env:a}:{}});if(c.data.status!=="success")throw new Error(c.data.message||"Failed to queue Maestro run");let p=c.data.testRun,f={testRunId:p.testRunId,status:p.status,projectId:n,buildId:p.buildId,platform:p.platform,dashboardUrl:p.dashboardUrl||`${nt}/tests/${p.testRunId}`,launchDeferredReason:p.launchDeferredReason};return fs(e,f),e.quiet||u.stop("Maestro run queued"),f}catch(c){e.quiet||u.stop("Could not queue Maestro run");let p=c.response?.data?.message||c.message||"Unknown error";return B.error(K.red(`Maestro queue failed: ${p}`)),null}}async function Sd(e,t){let n=qo(e.waitTimeout,60,"--wait-timeout"),i=qo(e.waitInterval,15,"--wait-interval");if(n===null||i===null)return null;let r=n*60*1e3,o=Math.max(5,i)*1e3,s=Date.now(),l=t.status||"queued";for(B.info(K.dim(`Waiting for Maestro run ${t.testRunId} to finish...`));Date.now()-s<=r;){let a=await Ed(t.projectId,t.testRunId);if(!a)return null;if(a.status&&a.status!==l&&(l=a.status,B.info(K.dim(`Maestro status: ${l}`))),pd.has(String(a.status)))return fs(e,a),a.status==="passed"?B.success(K.green(`Maestro run passed: ${a.testRunId}`)):(B.error(K.red(`Maestro run ${a.status}: ${a.testRunId}`)),a.error&&B.error(K.red(String(a.error)))),a;await tr(o)}return B.error(K.red(`Timed out waiting for Maestro run ${t.testRunId} after ${n} minute(s).`)),{...t,status:"timeout"}}async function bd(e,t){if(e.maestroUseBuildSource)return;let n=e.maestroFlows||".maestro",i=Y.resolve(n);if(!L.existsSync(i))return e.maestroFlows?(B.error(K.red(`Maestro flows not found: ${n}`)),null):void 0;let r=Y.relative(process.cwd(),i);if(!r||r.startsWith("..")||Y.isAbsolute(r))return B.error(K.red("Managed Maestro flow uploads must be inside the current project directory.")),null;let o=dn();e.quiet||o.start(`Uploading Maestro flows from ${r}...`);try{let s=await T.post("/tests/maestro/source-upload-url",{projectId:t,uploadId:cd()});if(s.data.status!=="success"||!s.data.uploadUrl||!s.data.key)throw new Error(s.data.message||"Failed to get Maestro flow upload URL");let l=new Bn;if(L.statSync(i).isDirectory())l.addLocalFolder(i,r);else{let u=Y.dirname(r);l.addLocalFile(i,u==="."?void 0:u,Y.basename(r))}let d=l.toBuffer();return await Ad(s.data.uploadUrl,d,"application/zip","Maestro flow upload",u=>{e.quiet||o.message(u)}),e.quiet||o.stop("Maestro flows uploaded"),s.data.key}catch(s){e.quiet||o.stop("Could not upload Maestro flows");let l=s.response?.data?.message||s.message||"Unknown error";return B.error(K.red(`Maestro flow upload failed: ${l}`)),null}}function ss(e){let t=e.response?.status,n=e.code||"",i=e.message||"";return t&&![408,409,425,429].includes(t)&&t<500?!1:/ECONNRESET|ETIMEDOUT|EAI_AGAIN|ENOTFOUND|ECONNABORTED|socket hang up|network|timeout/i.test(`${n} ${i}`)||!t}async function Ad(e,t,n,i,r){let o;for(let s=1;s<=Yo;s+=1)try{await cn.put(e,t,{headers:{"Content-Type":n},maxBodyLength:1/0,maxContentLength:1/0,timeout:fd});return}catch(l){if(o=l,!ss(l)||s>=Yo)break;let a=Math.min(2e4,2e3*s),d=l.code||l.response?.status||l.message||"network error";r?.(`${i} attempt ${s} failed (${d}), retrying...`),await tr(a)}throw o}async function Ed(e,t){try{let n=await T.get(`/tests/${encodeURIComponent(t)}`,{params:{projectId:e}});if(n.data.status!=="success")throw new Error(n.data.message||"Failed to fetch Maestro run");let i=n.data.testRun;return{testRunId:i.testRunId,status:i.status,projectId:e,buildId:i.buildId,platform:i.platform,dashboardUrl:i.dashboardUrl||`${nt}/tests/${i.testRunId}`,launchDeferredReason:i.launchDeferredReason,...i.error?{error:i.error}:{}}}catch(n){let i=n.response?.data?.message||n.message||"Unknown error";return B.error(K.red(`Could not fetch Maestro run status: ${i}`)),null}}async function Id(e){if(e.buildId)return{kind:"build-id",value:e.buildId};if(e.buildUrl)return{kind:"build-url",value:e.buildUrl};if(e.artifactUrl)return{kind:"artifact-url",value:e.artifactUrl};if(e.latest)return{kind:"latest"};let t=await is({message:"Select app artifact source for Maestro:",options:[{value:"latest",label:"Latest successful build"},{value:"build-id",label:"Build ID"},{value:"build-url",label:`${m.name} build URL`},{value:"artifact-url",label:"Direct artifact URL"}]});if(qi(t))return null;if(t==="latest")return{kind:"latest"};let n=await ud({message:t==="build-id"?"Enter build ID:":t==="build-url"?`Enter ${m.name} build URL:`:"Enter artifact URL:",validate:i=>{let r=String(i||"").trim();if(!r)return"Value is required";if((t==="build-url"||t==="artifact-url")&&!r.startsWith("http"))return"Must be a URL"}});return qi(n)?null:{kind:t,value:String(n).trim()}}function qo(e,t,n){if(e==null||e==="")return t;let i=Number(e);return!Number.isFinite(i)||i<=0?(B.error(`${n} must be a positive number.`),null):i}function tr(e){return new Promise(t=>setTimeout(t,e))}function as(e){if(e==null||e==="")return 1;let t=Number(e);return!Number.isInteger(t)||t<0||t>10?(B.error("--maestro-retries must be an integer between 0 and 10."),null):t}async function wd(e){if(e.artifactUrl)return{url:e.artifactUrl,platform:e.platform||ir(e.artifactUrl),name:ps(e.artifactUrl)};let t=e.buildId||zd(e.buildUrl);return t?ls(t,e.platform):e.latest?_d(e):null}async function ls(e,t){let n=dn();n.start(`Resolving build ${e}...`);try{let i=await T.get(`/public/builds/${encodeURIComponent(e)}`);if(i.data.status!=="success")throw new Error(i.data.message||"Build lookup failed");let r=t||i.data.build?.platform,o=Vd(i.data.artifacts||[],r);if(!o?.downloadUrl)throw new Error("No installable APK or simulator app artifact found for this build.");return n.stop("Build artifact resolved"),{url:o.downloadUrl,platform:r||ir(o.name||o.downloadUrl),name:o.name}}catch(i){n.stop("Could not resolve build artifact");let r=i.response?.data?.message||i.message||"Unknown error";return B.error(K.red(`Local Maestro artifact lookup failed: ${r}`)),null}}async function _d(e){let t=_e(`./${m.configFileName}`),n=e.projectId||t?.projectId,i=String(e.profile||e.buildProfile||"production").toLowerCase();if(!n)return B.error(`No projectId found. Run \`${m.nameLower} link\` first or pass --build-id/--artifact-url.`),null;if(!e.platform)return B.error("Pass --platform when using --latest with --local."),null;let r=dn();r.start("Resolving latest build...");try{let o=await T.get(`/builds/${n}`,{params:{limit:100}}),l=(Array.isArray(o.data.builds)?o.data.builds:[]).find(a=>a.status==="success"&&a.platform===e.platform&&String(a.buildProfile||a.buildType||"production").toLowerCase()===i);if(!l?.buildId)throw new Error(`No successful ${e.platform} build found for profile ${i}.`);return r.stop(`Latest build resolved: ${l.buildId}`),ls(l.buildId,e.platform)}catch(o){r.stop("Could not resolve latest build");let s=o.response?.data?.message||o.message||"Unknown error";return B.error(K.red(`Latest build lookup failed: ${s}`)),null}}async function $d(e){let t=e.platform||ir(e.url);if(!t)return B.error(K.red("Could not infer platform for local install. Pass --platform android or --platform ios.")),!1;let n=L.mkdtempSync(Y.join(Wt.tmpdir(),"mach-maestro-")),i=e.name||ps(e.url)||(t==="android"?"app.apk":"app.zip"),r=Y.join(n,i),o=dn();o.start(`Downloading ${i}...`);try{await Xi(e.url,r),o.stop("Artifact downloaded")}catch(s){return o.stop("Artifact download failed"),B.error(K.red(s.message||"Failed to download artifact")),!1}return t==="android"?Gd(r):Kd(r,n)}async function Xi(e,t){let n=await cn.get(e,{responseType:"stream"});await dd(n.data,L.createWriteStream(t))}function vd(e,t=12e3){try{return L.readFileSync(e,"utf-8").slice(-t)}catch{return""}}function Xo(e){if(!Number.isFinite(e)||e<0)return"unknown size";if(e<1024)return`${e} B`;let t=["KB","MB","GB"],n=e/1024,i=t[0];for(let r=1;n>=1024&&r<t.length;r+=1)n/=1024,i=t[r];return`${n.toFixed(n>=10?1:2)} ${i}`}function Rd(e){return Object.entries(e||{}).filter(([t,n])=>!!t&&n!==void 0).sort(([t],[n])=>t.localeCompare(n)).flatMap(([t,n])=>["-e",`${t}=${n}`])}function Dd(e,t){let n=Y.resolve(e,t||".maestro"),i=Y.relative(e,n);if(i.startsWith("..")||Y.isAbsolute(i))throw new Error("Maestro flow path must stay inside the build source.");return n}function cs(e,t){let n=[e];for(let i=0;i<t.length;i+=1){let r=t[i],o=t[i-1];(o==="-e"||o==="--env")&&/^[A-Za-z_][A-Za-z0-9_]*=/.test(r)?n.push(`${r.slice(0,r.indexOf("="))}=<redacted>`):n.push(r)}return n.join(" ")}function Pd(e){return/\[Failed\]\s+/.test(e)}function Od(e){if(!e.killed){try{e.kill("SIGTERM")}catch{}setTimeout(()=>{try{e.kill("SIGKILL")}catch{}},5e3).unref()}}function ds(e,t,n={}){let{cwd:i,env:r=process.env,logPath:o,echoOutput:s=!1,fastFailOnFlowFailure:l=!1}=n;return o&&L.appendFileSync(o,`
|
|
1389
|
+
$ ${cs(e,t)}
|
|
1390
|
+
`),new Promise(a=>{let d=!1,u=!1,c="",p=y=>{u||(u=!0,a(y))},f=ns(e,t,{cwd:i,env:r,stdio:["ignore","pipe","pipe"]}),g=y=>{c+=y;let w=c.split(/\r?\n/);c=w.pop()||"";for(let $ of w)if(l&&Pd($)&&!d){d=!0;let b="Mach fast-fail: detected failed Maestro flow; stopping this attempt early to retry...";o&&L.appendFileSync(o,`
|
|
1391
1391
|
${b}
|
|
1392
1392
|
`),s&&process.stderr.write(`${b}
|
|
1393
|
-
`),
|
|
1394
|
-
`),
|
|
1395
|
-
`),
|
|
1396
|
-
$ ${
|
|
1397
|
-
`);let o=
|
|
1398
|
-
`),1):typeof o.status=="number"?o.status:1}function
|
|
1399
|
-
`)[0]?.trim():"";i&&t.unshift(i);for(let r of t)if(r&&
|
|
1400
|
-
`),r;return e&&
|
|
1401
|
-
`),null}function
|
|
1402
|
-
`);return}let i=
|
|
1403
|
-
`),
|
|
1404
|
-
`),
|
|
1405
|
-
`),null;let i=
|
|
1406
|
-
`),null):r}function
|
|
1407
|
-
`)}function
|
|
1408
|
-
`);let i=
|
|
1409
|
-
`)}),i}async function
|
|
1410
|
-
`),e.kill("SIGINT")),setTimeout(()=>{!i&&!e.killed&&(
|
|
1411
|
-
`),e.kill("SIGKILL")),r()},5e3).unref?.()})}function
|
|
1412
|
-
`),
|
|
1413
|
-
`)}function
|
|
1414
|
-
`),e.platform==="ios"){let r=
|
|
1415
|
-
`):
|
|
1416
|
-
`);return}let n=e.deviceId?["-s",e.deviceId]:[],i=
|
|
1417
|
-
`):
|
|
1418
|
-
`)}function
|
|
1393
|
+
`),Od(f)}};f.stdout?.on("data",y=>{let w=y.toString();o&&L.appendFileSync(o,w),s&&process.stdout.write(w),g(w)}),f.stderr?.on("data",y=>{let w=y.toString();o&&L.appendFileSync(o,w),s&&process.stderr.write(w),g(w)}),f.on("error",y=>{o&&L.appendFileSync(o,`${y.message}
|
|
1394
|
+
`),p({exitCode:1,fastFailed:d,error:y})}),f.on("close",(y,w)=>{d&&o&&L.appendFileSync(o,`Maestro attempt stopped after first failed flow${w?` (${w})`:""}.
|
|
1395
|
+
`),p({exitCode:typeof y=="number"?y:1,fastFailed:d})})})}function ft(e,t,n,i,r=process.env){L.appendFileSync(n,`
|
|
1396
|
+
$ ${cs(e,t)}
|
|
1397
|
+
`);let o=Je(e,t,{cwd:i,encoding:"utf-8",env:r});return o.stdout&&L.appendFileSync(n,o.stdout),o.stderr&&L.appendFileSync(n,o.stderr),o.error?(L.appendFileSync(n,`${o.error.message}
|
|
1398
|
+
`),1):typeof o.status=="number"?o.status:1}function Zi(e,t,n,i){let r=ft(e,t,n,i);if(r!==0)throw new Error(`${e} ${t.join(" ")} failed with exit code ${r}`)}function Cd(e){try{return L.accessSync(e,L.constants.X_OK),!0}catch{return!1}}function kd(e){let t=[process.env.MAESTRO_BIN,Y.join(Wt.homedir(),".maestro","bin","maestro"),"/opt/homebrew/bin/maestro","/usr/local/bin/maestro"].filter(Boolean),n=Je("/usr/bin/env",["which","maestro"],{encoding:"utf-8",env:process.env}),i=n.status===0?String(n.stdout||"").split(`
|
|
1399
|
+
`)[0]?.trim():"";i&&t.unshift(i);for(let r of t)if(r&&Cd(r))return e&&L.appendFileSync(e,`Using Maestro CLI at ${r}
|
|
1400
|
+
`),r;return e&&L.appendFileSync(e,`Maestro CLI not found. Checked: ${t.join(", ")}
|
|
1401
|
+
`),null}function Nd(e){let t=String(e||"").trim();return t?t.replace(/_/g," ").replace(/\bios\b/gi,"").replace(/\biphone\b/i,"iPhone").replace(/\s+/g," ").trim():"iPhone 15"}async function Td(e,t){if((Je("xcrun",["simctl","list","devices","booted"],{encoding:"utf-8"}).stdout||"").includes("(Booted)")){L.appendFileSync(t,`Using already booted iOS Simulator.
|
|
1402
|
+
`);return}let i=Nd(e),r=Je("xcrun",["simctl","list","devices","--json"],{encoding:"utf-8"});if(r.status!==0||!r.stdout)throw new Error("Could not list iOS simulators.");let o=JSON.parse(r.stdout),s=Object.values(o.devices||{}).flatMap(d=>Array.isArray(d)?d:[]).filter(d=>d?.isAvailable),l=s.find(d=>d.name===i)||s.find(d=>String(d.name||"").toLowerCase().includes(i.toLowerCase()))||s.find(d=>String(d.name||"").startsWith("iPhone"));if(!l?.udid)throw new Error(`No available iOS Simulator found for ${i}.`);L.appendFileSync(t,`Booting iOS Simulator ${l.name} (${l.udid})...
|
|
1403
|
+
`),ft("xcrun",["simctl","boot",l.udid],t)!==0&&L.appendFileSync(t,`simctl boot returned non-zero; continuing to bootstatus in case it was already booting.
|
|
1404
|
+
`),Zi("xcrun",["simctl","bootstatus",l.udid,"-b"],t)}function xd(e,t){if(e.endsWith(".ipa"))throw new Error("iOS Maestro runs need a simulator .app.zip artifact, not an App Store .ipa.");if(e.endsWith(".zip")){let n=Y.join(t,"ios-app");L.mkdirSync(n,{recursive:!0}),new Bn(e).extractAllTo(n,!0);let i=nr(n);if(!i)throw new Error("Could not find a .app bundle inside the iOS artifact zip.");return i}if(e.endsWith(".app"))return e;throw new Error("iOS Maestro runs need a .app bundle or .app.zip artifact.")}function us(e,t){let n=Y.join(e,"Info.plist");if(!L.existsSync(n))return L.appendFileSync(t,`Could not find Info.plist in ${e}; skipping uninstall.
|
|
1405
|
+
`),null;let i=Je("/usr/bin/plutil",["-extract","CFBundleIdentifier","raw","-o","-",n],{encoding:"utf-8",env:process.env}),r=String(i.stdout||"").trim();return i.status!==0||!r?(L.appendFileSync(t,`Could not read CFBundleIdentifier from Info.plist; skipping uninstall.
|
|
1406
|
+
`),null):r}function Wi(e,t,n){let i=Y.join(e,n);ft("xcrun",["simctl","io","booted","screenshot",i],t)!==0&&L.appendFileSync(t,`[WARN] Could not capture iOS simulator screenshot: ${n}
|
|
1407
|
+
`)}function Ld(e,t){let n=Y.join(e,"ios-simulator-recording.mp4");L.appendFileSync(t,`Starting iOS simulator recording: ${n}
|
|
1408
|
+
`);let i=ns("xcrun",["simctl","io","booted","recordVideo",n],{stdio:["ignore","pipe","pipe"],env:process.env});return i.stdout?.on("data",r=>{L.appendFileSync(t,r)}),i.stderr?.on("data",r=>{L.appendFileSync(t,r)}),i.on("error",r=>{L.appendFileSync(t,`[WARN] Could not start iOS simulator recording: ${r.message}
|
|
1409
|
+
`)}),i}async function Zo(e,t){e&&await new Promise(n=>{let i=!1,r=()=>{i||(i=!0,n())};e.once("exit",r),e.once("close",r),e.killed||(L.appendFileSync(t,`Stopping iOS simulator recording...
|
|
1410
|
+
`),e.kill("SIGINT")),setTimeout(()=>{!i&&!e.killed&&(L.appendFileSync(t,`[WARN] iOS simulator recording did not stop after SIGINT; sending SIGKILL.
|
|
1411
|
+
`),e.kill("SIGKILL")),r()},5e3).unref?.()})}function Md(e,t){let n=us(e,t);if(!n)return;L.appendFileSync(t,`Uninstalling existing iOS app data for ${n} if present...
|
|
1412
|
+
`),ft("xcrun",["simctl","uninstall","booted",n],t)!==0&&L.appendFileSync(t,`No existing app install removed for ${n}; continuing.
|
|
1413
|
+
`)}function Ud(e,t){if(!e?.appId)return;if(L.appendFileSync(t,`Cleaning up installed app after Maestro run...
|
|
1414
|
+
`),e.platform==="ios"){let r=ft("xcrun",["simctl","uninstall","booted",e.appId],t);r===0?L.appendFileSync(t,`Uninstalled iOS app ${e.appId} after Maestro run.
|
|
1415
|
+
`):L.appendFileSync(t,`Warning: failed to uninstall iOS app ${e.appId} after Maestro run: xcrun simctl uninstall exited with code ${r}
|
|
1416
|
+
`);return}let n=e.deviceId?["-s",e.deviceId]:[],i=ft("adb",[...n,"uninstall",e.appId],t);i===0?L.appendFileSync(t,`Uninstalled Android app ${e.appId} after Maestro run.
|
|
1417
|
+
`):L.appendFileSync(t,`Warning: failed to uninstall Android app ${e.appId} after Maestro run: adb uninstall exited with code ${i}
|
|
1418
|
+
`)}function Fd(e,t){let n=Je("adb",["devices"],{encoding:"utf-8",env:process.env});if(n.status!==0||n.error)return L.appendFileSync(t,`[WARN] Could not list Android devices before install; using adb default target.
|
|
1419
1419
|
`),null;let i=String(n.stdout||"").split(`
|
|
1420
|
-
`).map(r=>r.trim().split(/\s+/)).filter(r=>r.length>=2&&r[1]==="device").map(r=>r[0]).filter(Boolean);return e&&i.includes(e)?(
|
|
1421
|
-
`),e):i.length===1?(
|
|
1422
|
-
`),i[0]):(i.length>1&&
|
|
1423
|
-
`),null)}function
|
|
1424
|
-
`),null)}function
|
|
1425
|
-
`)[0]?.trim()||null}async function
|
|
1426
|
-
`)}try{await
|
|
1427
|
-
`)}try{
|
|
1428
|
-
`)}}function Nc(e){if(!e.endsWith(".apk"))return F.error(K.red("Local Android Maestro runs need an APK artifact.")),!1;F.info(K.dim("Installing APK on local Android device/emulator..."));let t=Ge("adb",["install","-r",e],{stdio:"inherit",env:process.env});return t.error?(F.error(K.red(`adb failed to start: ${t.error.message}`)),!1):t.status!==0?(F.error(K.red(`adb install failed with exit code ${t.status??1}`)),!1):!0}function Tc(e,t){if(e.endsWith(".ipa"))return F.error(K.red("Local iOS Maestro runs need an iOS Simulator .app.zip artifact, not an App Store .ipa.")),!1;let n=e;if(e.endsWith(".zip")){let r=Y.join(t,"ios-app");x.mkdirSync(r,{recursive:!0}),new En(e).extractAllTo(r,!0);let o=_i(r);if(!o)return F.error(K.red("Could not find a .app bundle inside the downloaded zip.")),!1;n=o}if(!n.endsWith(".app"))return F.error(K.red("Local iOS Maestro runs need an iOS Simulator .app bundle or .app.zip artifact.")),!1;F.info(K.dim("Installing app on booted iOS Simulator..."));let i=Ge("xcrun",["simctl","install","booted",n],{stdio:"inherit",env:process.env});return i.error?(F.error(K.red(`xcrun failed to start: ${i.error.message}`)),!1):i.status!==0?(F.error(K.red(`iOS Simulator install failed with exit code ${i.status??1}`)),!1):!0}function _i(e){let t=x.readdirSync(e,{withFileTypes:!0});for(let n of t){let i=Y.join(e,n.name);if(n.isDirectory()&&n.name.endsWith(".app"))return i;if(n.isDirectory()){let r=_i(i);if(r)return r}}return null}function kc(e,t){let n=String(t||"").toLowerCase();return n==="android"?e.find(i=>Nt(i,".apk")):n==="ios"?e.find(i=>Nt(i,".app.zip"))||e.find(i=>Nt(i,".zip")):e.find(i=>Nt(i,".apk"))||e.find(i=>Nt(i,".app.zip"))||e.find(i=>Nt(i,".zip"))}function Nt(e,t){return String(e?.name||e?.downloadUrl||e?.url||"").toLowerCase().endsWith(t)}function Ri(e){let t=String(e||"").toLowerCase();if(t.includes(".apk"))return"android";if(t.includes(".app.zip")||t.endsWith(".app")||t.includes(".ipa"))return"ios"}function _o(e){if(e)try{return Y.basename(new URL(e).pathname)||void 0}catch{return Y.basename(e)||void 0}}function Lc(e){return e?e.match(/[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/i)?.[0]:void 0}function Ro(e,t){if(!e.jsonOutput)return;let n=Y.resolve(e.jsonOutput),i={...t,updatedAt:new Date().toISOString()};try{let r=Y.dirname(n);r&&r!=="."&&x.mkdirSync(r,{recursive:!0}),x.writeFileSync(n,JSON.stringify(i,null,2))}catch(r){F.warn(K.yellow(`Could not write Maestro metadata JSON: ${r.message}`))}}function xc(e,t){if(!e.jsonOutput)return;let n=Y.resolve(e.jsonOutput),i={mode:"local",...t,updatedAt:new Date().toISOString()};try{let r=Y.dirname(n);r&&r!=="."&&x.mkdirSync(r,{recursive:!0}),x.writeFileSync(n,JSON.stringify(i,null,2))}catch(r){F.warn(K.yellow(`Could not write Maestro metadata JSON: ${r.message}`))}}import{spinner as ut,text as Yt,select as Di,isCancel as ct,cancel as Ci,log as No}from"@clack/prompts";import ne from"chalk";import oe from"fs";import Ie from"path";import{spawn as Mc,spawnSync as It}from"child_process";import To from"axios";import _t from"os";import ki from"crypto";var Uc=5e3,Fc=12,ko=100,$i=24,$o=8e3,Bc={completed:"completed",draft:"draft",halted:"halted",inprogress:"inProgress","in-progress":"inProgress"},Hc=e=>e?.type==="google_service_account",In=e=>e?.bundleId||e?.packageName||e?.meta?.packageName||e?.meta?.bundleId,Lo=e=>e.submitArgs||process.argv.slice(3).join(" ");async function wn(e){let t=ut(),n=Pe(),i=jc(e);if(!i){process.exitCode=1;return}let r=e.projectId||i.projectId,o=e.profile||e.buildProfile||"production";if(!r){ce(`${m.configFileName} is missing projectId. Pass --project-id in runner mode.`),process.exitCode=1;return}i.projectId=r,me(ne.dim(`Submit for project: ${i.name||r} | Profile: ${o}`));let s=e.platform;if(!s){let h=await Di({message:"Select platform to submit:",options:[{value:"ios",label:"iOS (App Store Connect / TestFlight)"},{value:"android",label:"Android (Google Play Console)"}]});if(ct(h)){Ci("Operation cancelled");return}s=h}if(s=String(s).toLowerCase(),s!=="ios"&&s!=="android"){ce(`Platform ${s} is not supported. Use 'ios' or 'android'.`),process.exitCode=1;return}let l=s==="ios"&&!e.local&&e.sshHost?rd(i,o,e):null;if(s==="ios"&&!e.local&&!l){await Gc(i,o,e);return}let a=e.submitId,d=!!(e.local&&a),u=a||null,c=async(h,M={})=>{u&&await Wc(r,u,{status:h,...M})},f=s==="android"?e.packageName||e.androidPackage||td(i,o):void 0,p=s==="ios"?e.bundleId||e.iosBundleIdentifier||id(i,o):void 0,g,y,_,D=!1;try{s==="android"&&(g=e.track||i.submit?.[o]?.android?.track||i.submit?.production?.android?.track||"internal",y=od(i,o,e.releaseStatus),_=ad(i,o,e.rollout),D=ld(i,o,e.changesNotSentForReview),cd(y,_))}catch(h){ce(h.message),process.exitCode=1;return}if(s==="android"&&!d&&(u=await Kc(i,r,s,o,e,{packageName:f,track:g,releaseStatus:y,rollout:_,changesNotSentForReview:D}),!u)){ce("Could not create submission tracking record. Submission was not started."),process.exitCode=1;return}await c("running",{platform:s,profile:o,packageName:f,track:g,releaseStatus:y,rollout:_,startTime:Date.now(),...d?Jc():{}});let b=null,L=null;try{L=await dd(r,s,e,n?.token),b=L?.filePath||null}catch(h){await c("failed",{error:`Failed to resolve submission artifact: ${h.message}`,endTime:Date.now()}),ce(`Failed to resolve submission artifact: ${h.message}`),process.exitCode=1;return}if(!b){let h=pd(s,e);await c("failed",{error:h,endTime:Date.now()}),ce(h),process.exitCode=1;return}await c("running",{buildId:L?.buildId,artifactName:L?.artifactName,artifactSource:L?.source}),me(`Using artifact: ${ne.green(Ie.basename(b))} `),t.start("Fetching submission credentials from Dashboard...");let A;try{let M=(await k.get(`/credentials/${r}`)).data.credentials||[];if(s==="android"&&!f){t.stop("Package name missing"),ce("Could not resolve Android package name. Set android.package in mach.config.json/app.json."),await c("failed",{error:"Could not resolve Android package name.",endTime:Date.now()}),process.exitCode=1;return}let U=M.filter(Hc),j=s==="ios"?M.filter(X=>X.type==="asc_api_key"):nd(U,f);if(j.length===0){if(t.stop("Credentials missing"),ce(s==="android"?`No Google Play service credential found for package ${f}.`:`No Service Credentials found for ${s}.`),s==="android"){let X=U.map(In).filter(Boolean).join(", ");X&&me(`Found Google Play service credential(s) for: ${X}`),me(`Use '${m.nameLower} credentials:service --platform android --package-name ${f}' or upload it under that package in the Dashboard.`)}else me(`Use '${m.nameLower} credentials:service --platform ${s}' or use the Dashboard to upload them.`);await c("failed",{error:`No submission credentials found for ${s}.`,endTime:Date.now()}),process.exitCode=1;return}if(A=qc(j,e.credentialId),!A&&s==="ios"&&p&&(A=Zc(j,p)),A||j.length===1)A=A||j[0],t.stop(`Using: ${A.name}`),s==="android"&&In(A)==="*"&&me(ne.yellow(`Using legacy wildcard Google Play credential for ${f}. Upload a package-scoped credential when possible.`));else{if(t.stop("Multiple credentials found"),Qc()){let H=j.map(C=>`${C.name||"credential"} (${C.credentialId||C.id||"no-id"})`).join(", ");ce(`Multiple ${s==="ios"?"App Store Connect":"Google Play"} credentials found. Use --credential-id in CI. Available: ${H}`),await c("failed",{error:"Multiple submission credentials found; --credential-id is required in CI.",endTime:Date.now()}),process.exitCode=1;return}let X=await Di({message:`Choose a ${s==="ios"?"App Store Connect":"Google Play"} credential:`,options:j.map(H=>({value:H.credentialId,label:H.name,hint:`${H.keyId?`ID: ${H.keyId}`:""} ${H.issuerId?`(Issuer: ${H.issuerId.substring(0,8)}...)`:""}`}))});if(ct(X)){Ci("Submission cancelled"),await c("failed",{error:"Submission cancelled while selecting credential.",endTime:Date.now()}),process.exitCode=1;return}A=j.find(H=>H.credentialId===X),me(`Using selected: ${ne.green(A.name)}`)}}catch(h){t.stop("Failed to fetch credentials"),ce(`API Error: ${h.message} `),await c("failed",{error:`Failed to fetch credentials: ${h.message}`,endTime:Date.now()}),process.exitCode=1;return}let B=oe.mkdtempSync(Ie.join(_t.tmpdir(),`${m.nameLower}-submit-`)),q=A.keyId||A.meta?.keyId,P=A.issuerId||A.meta?.issuerId,I=A.type==="asc_api_key"?`AuthKey_${q}.p8`:"service-account.json",T=Ie.join(B,I);t.start("Downloading secure key...");try{let h=await k.get(`/credentials/${A.credentialId}/download`,{params:{projectId:r,format:"raw"}});if(h.data.status!=="success"||!h.data.downloadUrl)throw new Error("Failed to get secure download URL");let M=await To.get(h.data.downloadUrl,{responseType:"arraybuffer"});oe.writeFileSync(T,Buffer.from(M.data)),t.stop("Key downloaded to secure temp storage")}catch(h){t.stop("Download failed"),ce(`Failed to download key: ${h.message}`);try{oe.rmSync(B,{recursive:!0,force:!0})}catch{}await c("failed",{error:`Failed to download credential key: ${h.message}`,endTime:Date.now()}),process.exitCode=1;return}me(ne.blue(`Initiating ${s==="ios"?"TestFlight":"Google Play"} submission...`));let w=!1,N;try{if(s==="ios"){if(!q){let M=await Yt({message:"Enter App Store Connect Key ID (e.g. 2X948D...):",validate:U=>U.length>0?void 0:"Key ID is required"});if(ct(M)){await c("failed",{error:"Submission cancelled while entering ASC Key ID.",endTime:Date.now()}),process.exitCode=1;return}q=M}if(!P||P==="undefined"){let M=await Yt({message:"Enter App Store Connect Issuer ID (Found on ASC Keys page):",validate:U=>U.length>0?void 0:"Issuer ID is required"});if(ct(M)){await c("failed",{error:"Submission cancelled while entering ASC Issuer ID.",endTime:Date.now()}),process.exitCode=1;return}P=M}me(`Using ASC Key ID: ${q}`),me(`Using ASC Issuer ID: ${P}`);let h=l?await md(b,T,P,q,p,l):await fd(b,T,P,q,p);Ti(`${s==="ios"?"App Store":"Google Play"} submission successful!`),w=!0}else N=await bd(b,T,g||"internal",f,y||"completed",_,D,o),Ti("Google Play submission successful!"),w=!0}catch(h){ce(`Submission failed: ${h.message}`),await c("failed",{error:h.message,endTime:Date.now()}),dt(e,{status:"failed",projectId:r,submitId:u,platform:s,profile:o,buildId:L?.buildId||e.buildId,artifactName:L?.artifactName,error:h.message,dashboardUrl:u?wt(u,r):void 0}),process.exitCode=1}finally{w&&(await c("success",{endTime:Date.now(),versionCode:N?.versionCode,track:g,releaseStatus:y}),dt(e,{status:"success",projectId:r,submitId:u,platform:s,profile:o,buildId:L?.buildId||e.buildId,artifactName:L?.artifactName,versionCode:N?.versionCode,track:g,releaseStatus:y,dashboardUrl:u?wt(u,r):void 0})),kd(B),b&&b.includes(`${m.nameLower}-artifact-`)}}function jc(e){let t=`./${m.configFileName}`;if(oe.existsSync(t))try{return JSON.parse(oe.readFileSync(t,"utf-8"))}catch(n){return ce(`Failed to read ${m.configFileName}: ${n.message}`),null}return e.projectId?{projectId:e.projectId}:(ce(`No ${m.configFileName} found. Run \`${m.nameLower} init\` or \`${m.nameLower} link\` first.`),null)}async function Gc(e,t,n){let i=n.projectId||e.projectId;if(!i){ce(`${m.configFileName} is missing projectId.`),process.exitCode=1;return}let r=n.submitId||ki.randomUUID(),o=!!n.latest||!n.buildId,s=Vc({...n,latest:o,profile:t,projectId:i,submitId:r}),l={projectId:i,submitId:r,platform:"ios",profile:t,latest:o,buildId:n.buildId,credentialId:n.credentialId,status:"pending",source:"cli",submitArgs:Lo(n),runnerArgs:s,runnerCommand:[m.nameLower,"submit",...s].map(ed).join(" "),appName:e.name,startTime:Date.now()},a=ut();a.start("Queuing iOS submit on macOS runner...");try{let d=await k.post("/submissions",l),u=d.data?.submission||d.data?.submit||{},c=d.data?.dashboardUrl||wt(r,i);a.stop("iOS submit queued"),me(`Submission ID: ${ne.cyan(r)}`),me(`Dashboard: ${ne.blue.underline(c)}`),dt(n,{status:"pending",projectId:i,submitId:r,platform:"ios",profile:t,latest:o,buildId:n.buildId,dashboardUrl:c}),await zc(i,r,n)}catch(d){a.stop("Could not queue iOS submit"),ce(Xc(d)),process.exitCode=1}}async function Kc(e,t,n,i,r,o={}){let s=r.submitId||ki.randomUUID(),l=!!r.latest||!r.buildId,a={projectId:t,submitId:s,platform:n,profile:i,latest:l,buildId:r.buildId,credentialId:r.credentialId,status:"running",source:"cli-direct",submitArgs:Lo(r),appName:e.name,startTime:Date.now(),...o};try{let d=await k.post("/submissions",a),u=d.data?.submission||d.data?.submit||{},c=d.data?.dashboardUrl||u.dashboardUrl||wt(s,t);return me(`Submission ID: ${ne.cyan(s)}`),me(`Dashboard: ${ne.blue.underline(c)}`),dt(r,{status:"running",projectId:t,submitId:s,platform:n,profile:i,latest:l,buildId:r.buildId,dashboardUrl:c}),s}catch(d){let u=d.response?.data?.message||d.response?.data?.error||d.message;return me(ne.yellow(`Could not create submission tracking record: ${u}`)),null}}function Vc(e){let t=["--local","--submit-id",e.submitId,"--project-id",e.projectId,"--platform","ios","--profile",e.profile||"production"];return e.buildId?t.push("--build-id",e.buildId):t.push("--latest"),e.credentialId&&t.push("--credential-id",e.credentialId),e.bundleId&&t.push("--bundle-id",e.bundleId),e.packageName&&t.push("--package-name",e.packageName),e.quiet&&t.push("--quiet"),e.jsonOutput&&t.push("--json-output",e.jsonOutput),t.filter(n=>n!=null&&n!=="")}async function zc(e,t,n){let i=ut(),r=0,o=0;for(n.quiet||i.start("Waiting for iOS submit runner...");;)try{let s=await k.get(`/submissions/${e}/${t}`),l=s.data?.submission||s.data?.submit||s.data,a=String(l?.status||"pending").toLowerCase();r=0;let d=Array.isArray(l?.logs)?l.logs:[];for(let u=o;u<d.length;u++){let c=d[u];c&&console.log(ne.dim(String(c)))}if(o=d.length,["success","completed","succeeded"].includes(a)){n.quiet||i.stop("iOS submit completed"),Ti("App Store submission successful!"),dt(n,{status:"success",projectId:e,submitId:t,platform:"ios",profile:l?.profile||n.profile||"production",buildId:l?.buildId||n.buildId,artifactName:l?.artifactName,dashboardUrl:l?.dashboardUrl||wt(t,e)});return}if(["failed","error","cancelled","canceled"].includes(a)){n.quiet||i.stop("iOS submit failed");let u=l?.error||l?.message||"Unknown iOS submit failure.";ce(u),dt(n,{status:"failed",projectId:e,submitId:t,platform:"ios",profile:l?.profile||n.profile||"production",buildId:l?.buildId||n.buildId,artifactName:l?.artifactName,error:u,dashboardUrl:l?.dashboardUrl||wt(t,e)}),process.exitCode=1;return}n.quiet||i.message(`iOS submit ${a}...`),await Ni(Uc)}catch(s){if(r++,r>=Fc){n.quiet||i.stop("Lost connection to iOS submit status"),ce(`Could not fetch iOS submit status after ${r} attempts: ${s.message}`),process.exitCode=1;return}await Ni(Math.min(2e3*r,15e3))}}async function Wc(e,t,n){let i;for(let r=1;r<=3;r++)try{await k.patch(`/submissions/${e}/${t}`,n);return}catch(o){if(i=o,r>=3||!Yc(o))break;await Ni(1e3*r)}No.warn(ne.dim(`Could not report submission status: ${i?.message||i}`))}function Yc(e){let t=e.response?.status;return!t||t===408||t===409||t===425||t===429||t>=500}function Jc(){let e={gitlabJobId:process.env.CI_JOB_ID,gitlabJobUrl:process.env.CI_JOB_URL,gitlabPipelineId:process.env.CI_PIPELINE_ID,gitlabProjectId:process.env.CI_PROJECT_ID,gitlabProjectPath:process.env.CI_PROJECT_PATH};return Object.fromEntries(Object.entries(e).filter(([,t])=>!!t))}function Xc(e){let t=e.response?.status,n=e.response?.data?.message||e.response?.data?.error;return t===404||t===405?["Managed iOS submit is not enabled on this Mach API yet.","Deploy the API/dashboard submission orchestration endpoint, then retry the same command.","Expected API: POST /submissions and GET/PATCH /submissions/:projectId/:submitId."].join(`
|
|
1429
|
-
`):n||e.message||String(e)}function wt(e,t){if(!e)return Je;let n=t?`?projectId=${encodeURIComponent(t)}`:"";return`${Je}/submissions/${e}${n}`}function dt(e,t){if(!e.jsonOutput)return;let n=Ie.resolve(e.jsonOutput),i={...t,url:t.url||t.dashboardUrl||wt(t.submitId,t.projectId),updatedAt:new Date().toISOString()};try{let r=Ie.dirname(n);r&&r!=="."&&oe.mkdirSync(r,{recursive:!0}),oe.writeFileSync(n,JSON.stringify(i,null,2))}catch(r){No.warn(ne.yellow(`Could not write submission metadata JSON: ${r.message}`))}}function qc(e,t){return t&&e.find(n=>n.credentialId===t||n.id===t||n.keyId===t||n.meta?.keyId===t)||null}function Zc(e,t){let n=e.filter(i=>[i.bundleId,i.bundleIdentifier,i.appIdentifier,i.meta?.bundleId,i.meta?.bundleIdentifier,i.meta?.appIdentifier].filter(Boolean).map(String).includes(t));return n.length===1?n[0]:null}function Qc(){return process.env.CI==="true"||process.env.CI==="1"||!process.stdin.isTTY}function Ni(e){return new Promise(t=>setTimeout(t,e))}function ed(e){return/^[a-zA-Z0-9_./:=@-]+$/.test(e)?e:`'${e.replace(/'/g,"'\\''")}'`}function td(e,t){if(e.submit?.[t]?.android?.package)return e.submit[t].android.package;let n=yr(e,t);if(n)return n;let i=Ie.join(process.cwd(),"app.json");if(oe.existsSync(i))try{return JSON.parse(oe.readFileSync(i,"utf-8")).expo?.android?.package}catch{}let r=Ie.join(process.cwd(),"app.config.json");if(oe.existsSync(r))try{let o=JSON.parse(oe.readFileSync(r,"utf-8"));return o.expo?.android?.package||o.android?.package}catch{}}function nd(e,t){let n=e.filter(o=>In(o)===t);if(n.length>0)return n;let i=e.filter(o=>{let s=In(o);return!s||s==="*"});return e.length>0&&e.length===i.length?i:[]}function id(e,t){return e.submit?.[t]?.ios?.bundleIdentifier?e.submit[t].ios.bundleIdentifier:e.submit?.[t]?.ios?.bundleId?e.submit[t].ios.bundleId:br(e,t)}function rd(e,t,n){let i=e.submit?.[t]?.ios||{},r=e.submit?.production?.ios||{},o=n.sshHost||i.sshHost||r.sshHost||process.env.MACH_IOS_SUBMIT_SSH_HOST;return o?{sshHost:o,sshUser:n.sshUser||i.sshUser||r.sshUser||process.env.MACH_IOS_SUBMIT_SSH_USER||process.env.USER||"ubuntu",sshKey:n.sshKey||i.sshKey||r.sshKey||process.env.MACH_IOS_SUBMIT_SSH_KEY}:null}function od(e,t,n){let i=n||e.submit?.[t]?.android?.releaseStatus||e.submit?.production?.android?.releaseStatus||"completed";return sd(i)}function sd(e){let t=Bc[String(e).trim().toLowerCase()];if(!t)throw new Error(`Invalid Android release status "${e}". Use completed, draft, halted, or inProgress.`);return t}function ad(e,t,n){let i=n??e.submit?.[t]?.android?.rollout??e.submit?.[t]?.android?.userFraction??e.submit?.[t]?.android?.rolloutFraction??e.submit?.production?.android?.rollout??e.submit?.production?.android?.userFraction??e.submit?.production?.android?.rolloutFraction;if(i==null||i==="")return;let r=Number(i);if(!Number.isFinite(r)||r<=0||r>=1)throw new Error(`Invalid Android rollout fraction "${i}". Use a number greater than 0 and less than 1, for example 0.1.`);return r}function ld(e,t,n){let i=n??e.submit?.[t]?.android?.changesNotSentForReview??e.submit?.[t]?.android?.changes_not_sent_for_review??e.submit?.production?.android?.changesNotSentForReview??e.submit?.production?.android?.changes_not_sent_for_review??!1;return i===!0||i==="true"||i==="1"}function cd(e,t){if(e==="inProgress"&&t===void 0)throw new Error("Google Play staged rollout requires --rollout <fraction> when --release-status inProgress is used.");if(e!=="inProgress"&&e!=="halted"&&t!==void 0)throw new Error("Android rollout fraction can only be used with --release-status inProgress or halted.")}async function dd(e,t,n,i){let r=n.buildId?"id":n.latest?"latest":null;if(!r){let s=await Di({message:"Select artifact source:",options:[{value:"latest",label:`Latest Production Build (${m.name})`},{value:"id",label:`Input Build ID (${m.name})`},{value:"url",label:"Remote URL"},{value:"local",label:"Local File Path"}]});if(ct(s))return Ci("Operation cancelled"),null;r=s}if(r==="local"){let s=await Yt({message:"Enter path to artifact (.ipa/.aab):",validate:l=>{if(!oe.existsSync(l))return"File not found";if(t==="ios"&&!l.endsWith(".ipa"))return"Must be an .ipa file";if(t==="android"&&!l.endsWith(".aab"))return"Must be an .aab file"}});return ct(s)?null:{filePath:s,source:"local"}}let o=ut();if(r==="latest"){let s=n.profile||n.buildProfile;o.start(`Fetching latest${s?` ${s}`:""} build...`);try{let l=await k.get(`/builds/${e}`,{params:{limit:50}});if(l.data.status!=="success")throw new Error(l.data.message);let a=l.data.builds||[],d=s?.toLowerCase(),u=A=>A.platform?.toLowerCase()===t.toLowerCase()&&A.status?.toLowerCase()==="success",c=A=>d?[A.buildProfile,A.profile,A.profileName,A.buildType].filter(Boolean).some(B=>String(B).toLowerCase()===d):!0,f=a.filter(A=>u(A)&&c(A)),p=f.find(A=>A.buildType?.toLowerCase()==="store"||A.distribution?.toLowerCase()==="store")||f[0],g=a.some(A=>A.platform?.toLowerCase()===t.toLowerCase()&&A.status?.toLowerCase()==="success");if(!p)return o.stop("No suitable build found"),ce(s&&g?`No successful ${t} builds found for profile "${s}".`:"No successful builds found for this platform."),null;o.stop(`Found build: ${p.buildId}`);let y=p.artifacts||[];if(y.length===0||y.every(A=>!(A.url||A.downloadUrl)))try{let A=await k.get(`/builds/${e}/${p.buildId}/artifacts`);A.data.status==="success"&&A.data.artifacts?.length>0?(y=A.data.artifacts.map(B=>({...B,url:B.url||B.downloadUrl})),console.log(ne.cyan(` [RECOVERY] Fetched ${y.length} artifact(s) with download URLs.`))):console.log(ne.yellow(" [RECOVERY] /artifacts endpoint returned 0 artifacts."))}catch(A){console.log(ne.red(` [RECOVERY] /artifacts fetch failed: ${A.message}`))}let D=t==="ios",b=y.find(A=>{let B=(A.type||"").toLowerCase(),q=(A.name||"").toLowerCase();if(console.log(ne.dim(` - Checking: ${A.name} (Type: ${A.type}, HasLink: ${!!(A.url||A.downloadUrl)})`)),B)return B===(D?"ipa":"aab");let P=D?".ipa":".aab",I=(A.url||A.downloadUrl||"").toLowerCase();return q.endsWith(P)||I.includes(P)});if(!b||!(b.url||b.downloadUrl))return ce("Build found but artifact URL is missing."),null;let L=b.url||b.downloadUrl;return{filePath:await vi(L,D?"ios":"android"),buildId:p.buildId,artifactName:b.name,source:"latest"}}catch(l){return o.stop("Fetch failed"),ce(`API Error: ${l.message}`),null}}if(r==="id"){let s=n.buildId||await Yt({message:"Enter Build ID:",validate:a=>a.length<5?"Invalid ID":void 0});if(ct(s))return null;let l=String(s);o.start("Fetching build...");try{let a=null;try{let p=await k.get(`/builds/${e}/${l}`);p.data.status==="success"&&(a=p.data.build)}catch(p){p.response?.status!==404&&console.log(ne.dim(` [RECOVERY] Project build lookup skipped: ${p.message}`))}if(!a){let p=await k.get(`/build/${l}`);if(p.data.status!=="success")throw new Error(p.data.message);a=p.data.build}if(!a)throw new Error(`Build ${l} was not found.`);let d=t==="ios",u=An(a.artifacts);ud(u)||(u=await Po(e,l,u));let c=vo(u,t);if(c||(u=await Po(e,l,u),c=vo(u,t)),!c)throw new Error(`No ${d?".ipa":".aab"} artifact found for build ${l}. The build exists, but its artifact list does not contain a downloadable submission artifact.`);let f=c.url||c.downloadUrl;if(!f)throw new Error(`Artifact ${c.name||"(unnamed)"} for build ${l} has no download URL. Retry after the build artifact upload is visible in the Installation Hub.`);return o.stop(`Found build: ${a.buildId||l}`),{filePath:await vi(f,d?"ios":"android"),buildId:a.buildId||l,artifactName:c.name,source:"id"}}catch(a){throw o.stop("Fetch failed"),a}}if(r==="url"){let s=await Yt({message:"Enter Artifact URL:",validate:l=>l.startsWith("http")?void 0:"Must be a valid URL"});return ct(s)?null:{filePath:await vi(s,t),source:"url"}}return null}function An(e){return(e||[]).map(t=>({...t,url:t.url||t.downloadUrl}))}function ud(e){return e.some(t=>!!(t.url||t.downloadUrl))}function vo(e,t){let n=t==="ios",i=n?"ipa":"aab",r=n?".ipa":".aab";return e.find(o=>{let s=String(o.type||"").toLowerCase(),l=String(o.name||"").toLowerCase(),a=String(o.url||o.downloadUrl||"").toLowerCase();return s?s===i:l.endsWith(r)||a.includes(r)})||null}function pd(e,t){let n=e==="ios"?".ipa":".aab";if(t.buildId)return`No downloadable ${n} artifact found for build ${t.buildId}. Check that the build finished artifact upload before submitting.`;if(t.latest){let i=t.profile||t.buildProfile;return`No latest successful ${e}${i?` ${i}`:""} build has a downloadable ${n} artifact.`}return`No downloadable ${n} artifact was selected for submission.`}async function Po(e,t,n){try{let i=await k.get(`/builds/${e}/${t}/artifacts`);if(i.data.status==="success"&&i.data.artifacts?.length>0){let r=An(i.data.artifacts);return console.log(ne.cyan(` [RECOVERY] Fetched ${r.length} artifact(s) with download URLs.`)),r}}catch(i){console.log(ne.dim(` [RECOVERY] Project artifact lookup skipped: ${i.message}`))}try{let i=await k.get(`/public/builds/${t}`);if(i.data.status==="success"&&i.data.artifacts?.length>0){let r=An(i.data.artifacts);return console.log(ne.cyan(` [RECOVERY] Fetched ${r.length} public artifact(s) with download URLs.`)),r}}catch(i){console.log(ne.dim(` [RECOVERY] Public artifact lookup skipped: ${i.message}`))}return An(n)}async function vi(e,t,n=3){let i=ut();i.start("Downloading artifact...");let r=oe.mkdtempSync(Ie.join(_t.tmpdir(),`${m.nameLower}-artifact-`)),o=`app.${t==="ios"?"ipa":"aab"}`,s=Ie.join(r,o);for(let l=1;l<=n;l++)try{l>1&&(i.message(`Downloading artifact (Retry ${l}/${n})...`),await new Promise(u=>setTimeout(u,2e3*l)));let a=oe.createWriteStream(s),d=await To({url:e,method:"GET",responseType:"stream",timeout:6e4});return await new Promise((u,c)=>{d.data.pipe(a);let f=!1;d.data.on("error",p=>{f||(f=!0,a.close(),c(p))}),a.on("finish",()=>{f||u()}),a.on("error",p=>{f||(f=!0,c(p))})}),i.stop("Download complete"),s}catch(a){if(l===n)throw i.stop("Download failed"),a}throw new Error("Download failed after retries")}async function fd(e,t,n,i,r){let o=ut();if(r&&me(`Bundle ID: ${ne.green(r)}`),!n||!i)throw ce(`Missing credentials: issuerId=${n}, keyId=${i}. Check your Dashboard.`),new Error("Missing ASC API Key Metadata (IssuerID or KeyID)");let s=xo(t,n,i),l=Ad();return o.start("Uploading to TestFlight (pilot)..."),new Promise((a,d)=>{let u=wd(),c=Mc(l.command,["pilot","upload","--ipa",e,"--api_key_path",s,"--skip_submission","true","--skip_waiting_for_build_processing","true"],{stdio:["ignore","pipe","pipe"],env:l.env});c.stdout?.on("data",f=>u.append(f,process.stdout)),c.stderr?.on("data",f=>u.append(f,process.stderr)),c.on("close",f=>{if(u.flush(),f!==0){o.stop("Pilot failed");try{oe.unlinkSync(s)}catch{}d(_d(f,u.lines()))}else{o.stop("IPA uploaded to TestFlight");try{oe.unlinkSync(s)}catch{}a({})}}),c.on("error",f=>{u.flush();try{oe.unlinkSync(s)}catch{}o.stop("Pilot execution error");let p=Nd(f);p.logs=u.lines(),d(p)})})}async function md(e,t,n,i,r,o){let s=ut();if(r&&me(`Bundle ID: ${ne.green(r)}`),!n||!i)throw ce(`Missing credentials: issuerId=${n}, keyId=${i}. Check your Dashboard.`),new Error("Missing ASC API Key Metadata (IssuerID or KeyID)");let l=xo(t,n,i),a=`${o.sshUser}@${o.sshHost}`,d=gd(o),u=hd(o),c="",f="";try{if(s.start(`Preparing remote iOS submit runner (${a})...`),c=Sd("ssh",[...d,"mktemp -d /tmp/mach-submit.XXXXXX"]).trim(),!c)throw new Error("Remote runner did not return a temp directory.");s.stop(`Remote runner ready: ${a}`),s.start("Uploading IPA and App Store Connect key to remote runner..."),Pi("scp",[...u,e,`${a}:${c}/app.ipa`],"IPA upload to remote runner"),Pi("scp",[...u,l,`${a}:${c}/api_key.json`],"ASC key upload to remote runner"),f=Ie.join(_t.tmpdir(),`${m.nameLower}-ios-submit-${Date.now()}.sh`),oe.writeFileSync(f,yd(c)),Pi("scp",[...u,f,`${a}:${c}/submit.sh`],"submit script upload to remote runner"),s.stop("Remote submit inputs uploaded"),s.start("Uploading to TestFlight on remote runner...");let p=`chmod +x ${Jt(`${c}/submit.sh`)} && bash ${Jt(`${c}/submit.sh`)}`,g=It("ssh",[...d,p],{stdio:"inherit"});if(g.error)throw Li("ssh",g.error);if(g.status!==0)throw new Error(`Remote iOS submit failed with exit code ${g.status}.`);return s.stop("IPA uploaded to TestFlight"),{apiKeyJsonPath:null}}catch(p){throw s.stop("Remote iOS submit failed"),p}finally{try{oe.unlinkSync(l)}catch{}if(f)try{oe.unlinkSync(f)}catch{}if(c)try{It("ssh",[...d,`rm -rf ${Jt(c)}`],{stdio:"ignore"})}catch{}}}function xo(e,t,n){let i=oe.readFileSync(e,"utf8"),r;try{r=ki.createPrivateKey(i).export({type:"pkcs8",format:"pem"})}catch{me("Key normalization failed, falling back to manual re-wrapping..."),r=`-----BEGIN PRIVATE KEY-----
|
|
1420
|
+
`).map(r=>r.trim().split(/\s+/)).filter(r=>r.length>=2&&r[1]==="device").map(r=>r[0]).filter(Boolean);return e&&i.includes(e)?(L.appendFileSync(t,`Using Android device ${e} for install and cleanup.
|
|
1421
|
+
`),e):i.length===1?(L.appendFileSync(t,`Using Android device ${i[0]} for install and cleanup.
|
|
1422
|
+
`),i[0]):(i.length>1&&L.appendFileSync(t,`[WARN] Multiple Android devices are connected; using adb default target for install and cleanup.
|
|
1423
|
+
`),null)}function Bd(e,t){let i=(Ji("aapt",["dump","badging",e])||Ji("aapt2",["dump","badging",e]))?.match(/package:\s+name='([^']+)'/);if(i?.[1])return i[1];let o=Ji("apkanalyzer",["manifest","application-id",e])?.split(/\s+/).find(Boolean);return o||(L.appendFileSync(t,`[WARN] Could not determine Android application id from APK; post-run uninstall will be skipped.
|
|
1424
|
+
`),null)}function Ji(e,t){for(let n of Hd(e)){let i=Je(n,t,{encoding:"utf-8",env:process.env,maxBuffer:10485760});if(i.status===0&&i.stdout)return String(i.stdout).trim()}return null}function Hd(e){let t=process.platform==="win32"&&!e.endsWith(".exe")?`${e}.exe`:e,n=[];if(e==="aapt"||e==="aapt2")for(let r of Qo()){let o=Y.join(r,"build-tools");for(let s of es(o))n.push(Y.join(o,s,t))}if(e==="apkanalyzer")for(let r of Qo()){n.push(Y.join(r,"cmdline-tools","latest","bin",t));let o=Y.join(r,"cmdline-tools");for(let s of es(o))n.push(Y.join(o,s,"bin",t));n.push(Y.join(r,"tools","bin",t))}let i=jd(e);return i&&n.unshift(i),n.push(t),[...new Set(n)]}function Qo(){let e=[process.env.ANDROID_HOME,process.env.ANDROID_SDK_ROOT];return process.platform==="darwin"?e.push(Y.join(Wt.homedir(),"Library","Android","sdk")):process.platform==="linux"&&e.push(Y.join(Wt.homedir(),"Android","Sdk"),Y.join(Wt.homedir(),"Android","sdk"),"/opt/android-sdk","/usr/lib/android-sdk"),[...new Set(e.filter(t=>!!t))]}function es(e){try{return L.readdirSync(e,{withFileTypes:!0}).filter(t=>t.isDirectory()).map(t=>t.name).sort((t,n)=>n.localeCompare(t,void 0,{numeric:!0}))}catch{return[]}}function jd(e){let t=process.platform==="win32"?"where":"/usr/bin/env",n=process.platform==="win32"?[e]:["which",e],i=Je(t,n,{encoding:"utf-8",env:process.env});return i.status!==0||!i.stdout?null:String(i.stdout).split(`
|
|
1425
|
+
`)[0]?.trim()||null}async function Yi(e,t,n){if(!L.existsSync(e))return;let i=L.readFileSync(e),r;for(let o=1;o<=3;o+=1)try{await cn.put(t,i,{headers:{"Content-Type":n,"Content-Length":String(i.length)},maxBodyLength:1/0,maxContentLength:1/0,timeout:12e4});return}catch(s){if(r=s,!ss(s)||o>=3)break;await tr(2e3*o)}throw r}async function ts(e,t,n,i){let r=Y.join(n,"report.xml"),o=Y.join(t,"artifacts.tar.gz");try{await Yi(r,e.junitUploadUrl,"application/xml")}catch(s){L.appendFileSync(i,`[WARN] Failed to upload JUnit report: ${s.message||s}
|
|
1426
|
+
`)}try{await Yi(i,e.logUploadUrl,"text/plain")}catch(s){L.appendFileSync(i,`[WARN] Failed to upload runner log: ${s.message||s}
|
|
1427
|
+
`)}try{ft("tar",["-czf",o,"-C",t,Y.basename(n)],i),await Yi(o,e.artifactsUploadUrl,"application/gzip")}catch(s){L.appendFileSync(i,`[WARN] Failed to upload Maestro artifacts: ${s.message||s}
|
|
1428
|
+
`)}}function Gd(e){if(!e.endsWith(".apk"))return B.error(K.red("Local Android Maestro runs need an APK artifact.")),!1;B.info(K.dim("Installing APK on local Android device/emulator..."));let t=Je("adb",["install","-r",e],{stdio:"inherit",env:process.env});return t.error?(B.error(K.red(`adb failed to start: ${t.error.message}`)),!1):t.status!==0?(B.error(K.red(`adb install failed with exit code ${t.status??1}`)),!1):!0}function Kd(e,t){if(e.endsWith(".ipa"))return B.error(K.red("Local iOS Maestro runs need an iOS Simulator .app.zip artifact, not an App Store .ipa.")),!1;let n=e;if(e.endsWith(".zip")){let r=Y.join(t,"ios-app");L.mkdirSync(r,{recursive:!0}),new Bn(e).extractAllTo(r,!0);let o=nr(r);if(!o)return B.error(K.red("Could not find a .app bundle inside the downloaded zip.")),!1;n=o}if(!n.endsWith(".app"))return B.error(K.red("Local iOS Maestro runs need an iOS Simulator .app bundle or .app.zip artifact.")),!1;B.info(K.dim("Installing app on booted iOS Simulator..."));let i=Je("xcrun",["simctl","install","booted",n],{stdio:"inherit",env:process.env});return i.error?(B.error(K.red(`xcrun failed to start: ${i.error.message}`)),!1):i.status!==0?(B.error(K.red(`iOS Simulator install failed with exit code ${i.status??1}`)),!1):!0}function nr(e){let t=L.readdirSync(e,{withFileTypes:!0});for(let n of t){let i=Y.join(e,n.name);if(n.isDirectory()&&n.name.endsWith(".app"))return i;if(n.isDirectory()){let r=nr(i);if(r)return r}}return null}function Vd(e,t){let n=String(t||"").toLowerCase();return n==="android"?e.find(i=>zt(i,".apk")):n==="ios"?e.find(i=>zt(i,".app.zip"))||e.find(i=>zt(i,".zip")):e.find(i=>zt(i,".apk"))||e.find(i=>zt(i,".app.zip"))||e.find(i=>zt(i,".zip"))}function zt(e,t){return String(e?.name||e?.downloadUrl||e?.url||"").toLowerCase().endsWith(t)}function ir(e){let t=String(e||"").toLowerCase();if(t.includes(".apk"))return"android";if(t.includes(".app.zip")||t.endsWith(".app")||t.includes(".ipa"))return"ios"}function ps(e){if(e)try{return Y.basename(new URL(e).pathname)||void 0}catch{return Y.basename(e)||void 0}}function zd(e){return e?e.match(/[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/i)?.[0]:void 0}function fs(e,t){if(!e.jsonOutput)return;let n=Y.resolve(e.jsonOutput),i={...t,updatedAt:new Date().toISOString()};try{let r=Y.dirname(n);r&&r!=="."&&L.mkdirSync(r,{recursive:!0}),L.writeFileSync(n,JSON.stringify(i,null,2))}catch(r){B.warn(K.yellow(`Could not write Maestro metadata JSON: ${r.message}`))}}function Wd(e,t){if(!e.jsonOutput)return;let n=Y.resolve(e.jsonOutput),i={mode:"local",...t,updatedAt:new Date().toISOString()};try{let r=Y.dirname(n);r&&r!=="."&&L.mkdirSync(r,{recursive:!0}),L.writeFileSync(n,JSON.stringify(i,null,2))}catch(r){B.warn(K.yellow(`Could not write Maestro metadata JSON: ${r.message}`))}}import{spinner as bt,text as un,select as lr,isCancel as yt,cancel as cr,log as As}from"@clack/prompts";import re from"chalk";import se from"fs";import ve from"path";import{spawn as Jd,spawnSync as Nt}from"child_process";import Es from"axios";import xt from"os";import pr from"crypto";var Yd=5e3,qd=12,Is=100,rr=24,ms=8e3,Xd={completed:"completed",draft:"draft",halted:"halted",inprogress:"inProgress","in-progress":"inProgress"},Zd=e=>e?.type==="google_service_account",jn=e=>e?.bundleId||e?.packageName||e?.meta?.packageName||e?.meta?.bundleId,ws=e=>e.submitArgs||process.argv.slice(3).join(" ");async function Gn(e){let t=bt(),n=Ce(),i=Qd(e);if(!i){process.exitCode=1;return}let r=e.projectId||i.projectId,o=e.profile||e.buildProfile||"production";if(!r){de(`${m.configFileName} is missing projectId. Pass --project-id in runner mode.`),process.exitCode=1;return}i.projectId=r,ge(re.dim(`Submit for project: ${i.name||r} | Profile: ${o}`));let s=e.platform;if(!s){let h=await lr({message:"Select platform to submit:",options:[{value:"ios",label:"iOS (App Store Connect / TestFlight)"},{value:"android",label:"Android (Google Play Console)"}]});if(yt(h)){cr("Operation cancelled");return}s=h}if(s=String(s).toLowerCase(),s!=="ios"&&s!=="android"){de(`Platform ${s} is not supported. Use 'ios' or 'android'.`),process.exitCode=1;return}let l=s==="ios"&&!e.local&&e.sshHost?gu(i,o,e):null;if(s==="ios"&&!e.local&&!l){await eu(i,o,e);return}let a=e.submitId,d=!!(e.local&&a),u=a||null,c=async(h,M={})=>{u&&await ru(r,u,{status:h,...M})},p=s==="android"?e.packageName||e.androidPackage||pu(i,o):void 0,f=s==="ios"?e.bundleId||e.iosBundleIdentifier||mu(i,o):void 0,g,y,w,$=!1;try{s==="android"&&(g=e.track||i.submit?.[o]?.android?.track||i.submit?.production?.android?.track||"internal",y=hu(i,o,e.releaseStatus),w=Su(i,o,e.rollout),$=bu(i,o,e.changesNotSentForReview),Au(y,w))}catch(h){de(h.message),process.exitCode=1;return}if(s==="android"&&!d&&(u=await tu(i,r,s,o,e,{packageName:p,track:g,releaseStatus:y,rollout:w,changesNotSentForReview:$}),!u)){de("Could not create submission tracking record. Submission was not started."),process.exitCode=1;return}await c("running",{platform:s,profile:o,packageName:p,track:g,releaseStatus:y,rollout:w,startTime:Date.now(),...d?su():{}});let b=null,x=null;try{x=await Eu(r,s,e,n?.token),b=x?.filePath||null}catch(h){await c("failed",{error:`Failed to resolve submission artifact: ${h.message}`,endTime:Date.now()}),de(`Failed to resolve submission artifact: ${h.message}`),process.exitCode=1;return}if(!b){let h=wu(s,e);await c("failed",{error:h,endTime:Date.now()}),de(h),process.exitCode=1;return}await c("running",{buildId:x?.buildId,artifactName:x?.artifactName,artifactSource:x?.source}),ge(`Using artifact: ${re.green(ve.basename(b))} `),t.start("Fetching submission credentials from Dashboard...");let E;try{let M=(await T.get(`/credentials/${r}`)).data.credentials||[];if(s==="android"&&!p){t.stop("Package name missing"),de("Could not resolve Android package name. Set android.package in mach.config.json/app.json."),await c("failed",{error:"Could not resolve Android package name.",endTime:Date.now()}),process.exitCode=1;return}let U=M.filter(Zd),H=s==="ios"?M.filter(Z=>Z.type==="asc_api_key"):fu(U,p);if(H.length===0){if(t.stop("Credentials missing"),de(s==="android"?`No Google Play service credential found for package ${p}.`:`No Service Credentials found for ${s}.`),s==="android"){let Z=U.map(jn).filter(Boolean).join(", ");Z&&ge(`Found Google Play service credential(s) for: ${Z}`),ge(`Use '${m.nameLower} credentials:service --platform android --package-name ${p}' or upload it under that package in the Dashboard.`)}else ge(`Use '${m.nameLower} credentials:service --platform ${s}' or use the Dashboard to upload them.`);await c("failed",{error:`No submission credentials found for ${s}.`,endTime:Date.now()}),process.exitCode=1;return}if(E=lu(H,e.credentialId),!E&&s==="ios"&&f&&(E=cu(H,f)),E||H.length===1)E=E||H[0],t.stop(`Using: ${E.name}`),s==="android"&&jn(E)==="*"&&ge(re.yellow(`Using legacy wildcard Google Play credential for ${p}. Upload a package-scoped credential when possible.`));else{if(t.stop("Multiple credentials found"),du()){let j=H.map(k=>`${k.name||"credential"} (${k.credentialId||k.id||"no-id"})`).join(", ");de(`Multiple ${s==="ios"?"App Store Connect":"Google Play"} credentials found. Use --credential-id in CI. Available: ${j}`),await c("failed",{error:"Multiple submission credentials found; --credential-id is required in CI.",endTime:Date.now()}),process.exitCode=1;return}let Z=await lr({message:`Choose a ${s==="ios"?"App Store Connect":"Google Play"} credential:`,options:H.map(j=>({value:j.credentialId,label:j.name,hint:`${j.keyId?`ID: ${j.keyId}`:""} ${j.issuerId?`(Issuer: ${j.issuerId.substring(0,8)}...)`:""}`}))});if(yt(Z)){cr("Submission cancelled"),await c("failed",{error:"Submission cancelled while selecting credential.",endTime:Date.now()}),process.exitCode=1;return}E=H.find(j=>j.credentialId===Z),ge(`Using selected: ${re.green(E.name)}`)}}catch(h){t.stop("Failed to fetch credentials"),de(`API Error: ${h.message} `),await c("failed",{error:`Failed to fetch credentials: ${h.message}`,endTime:Date.now()}),process.exitCode=1;return}let F=se.mkdtempSync(ve.join(xt.tmpdir(),`${m.nameLower}-submit-`)),X=E.keyId||E.meta?.keyId,D=E.issuerId||E.meta?.issuerId,I=E.type==="asc_api_key"?`AuthKey_${X}.p8`:"service-account.json",N=ve.join(F,I);t.start("Downloading secure key...");try{let h=await T.get(`/credentials/${E.credentialId}/download`,{params:{projectId:r,format:"raw"}});if(h.data.status!=="success"||!h.data.downloadUrl)throw new Error("Failed to get secure download URL");let M=await Es.get(h.data.downloadUrl,{responseType:"arraybuffer"});se.writeFileSync(N,Buffer.from(M.data)),t.stop("Key downloaded to secure temp storage")}catch(h){t.stop("Download failed"),de(`Failed to download key: ${h.message}`);try{se.rmSync(F,{recursive:!0,force:!0})}catch{}await c("failed",{error:`Failed to download credential key: ${h.message}`,endTime:Date.now()}),process.exitCode=1;return}ge(re.blue(`Initiating ${s==="ios"?"TestFlight":"Google Play"} submission...`));let _=!1,O;try{if(s==="ios"){if(!X){let M=await un({message:"Enter App Store Connect Key ID (e.g. 2X948D...):",validate:U=>U.length>0?void 0:"Key ID is required"});if(yt(M)){await c("failed",{error:"Submission cancelled while entering ASC Key ID.",endTime:Date.now()}),process.exitCode=1;return}X=M}if(!D||D==="undefined"){let M=await un({message:"Enter App Store Connect Issuer ID (Found on ASC Keys page):",validate:U=>U.length>0?void 0:"Issuer ID is required"});if(yt(M)){await c("failed",{error:"Submission cancelled while entering ASC Issuer ID.",endTime:Date.now()}),process.exitCode=1;return}D=M}ge(`Using ASC Key ID: ${X}`),ge(`Using ASC Issuer ID: ${D}`);let h=l?await $u(b,N,D,X,f,l):await _u(b,N,D,X,f);ur(`${s==="ios"?"App Store":"Google Play"} submission successful!`),_=!0}else O=await Ou(b,N,g||"internal",p,y||"completed",w,$,o),ur("Google Play submission successful!"),_=!0}catch(h){de(`Submission failed: ${h.message}`),await c("failed",{error:h.message,endTime:Date.now()}),St(e,{status:"failed",projectId:r,submitId:u,platform:s,profile:o,buildId:x?.buildId||e.buildId,artifactName:x?.artifactName,error:h.message,dashboardUrl:u?Tt(u,r):void 0}),process.exitCode=1}finally{_&&(await c("success",{endTime:Date.now(),versionCode:O?.versionCode,track:g,releaseStatus:y}),St(e,{status:"success",projectId:r,submitId:u,platform:s,profile:o,buildId:x?.buildId||e.buildId,artifactName:x?.artifactName,versionCode:O?.versionCode,track:g,releaseStatus:y,dashboardUrl:u?Tt(u,r):void 0})),Vu(F),b&&b.includes(`${m.nameLower}-artifact-`)}}function Qd(e){let t=`./${m.configFileName}`;if(se.existsSync(t))try{return JSON.parse(se.readFileSync(t,"utf-8"))}catch(n){return de(`Failed to read ${m.configFileName}: ${n.message}`),null}return e.projectId?{projectId:e.projectId}:(de(`No ${m.configFileName} found. Run \`${m.nameLower} init\` or \`${m.nameLower} link\` first.`),null)}async function eu(e,t,n){let i=n.projectId||e.projectId;if(!i){de(`${m.configFileName} is missing projectId.`),process.exitCode=1;return}let r=n.submitId||pr.randomUUID(),o=!!n.latest||!n.buildId,s=nu({...n,latest:o,profile:t,projectId:i,submitId:r}),l={projectId:i,submitId:r,platform:"ios",profile:t,latest:o,buildId:n.buildId,credentialId:n.credentialId,status:"pending",source:"cli",submitArgs:ws(n),runnerArgs:s,runnerCommand:[m.nameLower,"submit",...s].map(uu).join(" "),appName:e.name,startTime:Date.now()},a=bt();a.start("Queuing iOS submit on macOS runner...");try{let d=await T.post("/submissions",l),u=d.data?.submission||d.data?.submit||{},c=d.data?.dashboardUrl||Tt(r,i);a.stop("iOS submit queued"),ge(`Submission ID: ${re.cyan(r)}`),ge(`Dashboard: ${re.blue.underline(c)}`),St(n,{status:"pending",projectId:i,submitId:r,platform:"ios",profile:t,latest:o,buildId:n.buildId,dashboardUrl:c}),await iu(i,r,n)}catch(d){a.stop("Could not queue iOS submit"),de(au(d)),process.exitCode=1}}async function tu(e,t,n,i,r,o={}){let s=r.submitId||pr.randomUUID(),l=!!r.latest||!r.buildId,a={projectId:t,submitId:s,platform:n,profile:i,latest:l,buildId:r.buildId,credentialId:r.credentialId,status:"running",source:"cli-direct",submitArgs:ws(r),appName:e.name,startTime:Date.now(),...o};try{let d=await T.post("/submissions",a),u=d.data?.submission||d.data?.submit||{},c=d.data?.dashboardUrl||u.dashboardUrl||Tt(s,t);return ge(`Submission ID: ${re.cyan(s)}`),ge(`Dashboard: ${re.blue.underline(c)}`),St(r,{status:"running",projectId:t,submitId:s,platform:n,profile:i,latest:l,buildId:r.buildId,dashboardUrl:c}),s}catch(d){let u=d.response?.data?.message||d.response?.data?.error||d.message;return ge(re.yellow(`Could not create submission tracking record: ${u}`)),null}}function nu(e){let t=["--local","--submit-id",e.submitId,"--project-id",e.projectId,"--platform","ios","--profile",e.profile||"production"];return e.buildId?t.push("--build-id",e.buildId):t.push("--latest"),e.credentialId&&t.push("--credential-id",e.credentialId),e.bundleId&&t.push("--bundle-id",e.bundleId),e.packageName&&t.push("--package-name",e.packageName),e.quiet&&t.push("--quiet"),e.jsonOutput&&t.push("--json-output",e.jsonOutput),t.filter(n=>n!=null&&n!=="")}async function iu(e,t,n){let i=bt(),r=0,o=0;for(n.quiet||i.start("Waiting for iOS submit runner...");;)try{let s=await T.get(`/submissions/${e}/${t}`),l=s.data?.submission||s.data?.submit||s.data,a=String(l?.status||"pending").toLowerCase();r=0;let d=Array.isArray(l?.logs)?l.logs:[];for(let u=o;u<d.length;u++){let c=d[u];c&&console.log(re.dim(String(c)))}if(o=d.length,["success","completed","succeeded"].includes(a)){n.quiet||i.stop("iOS submit completed"),ur("App Store submission successful!"),St(n,{status:"success",projectId:e,submitId:t,platform:"ios",profile:l?.profile||n.profile||"production",buildId:l?.buildId||n.buildId,artifactName:l?.artifactName,dashboardUrl:l?.dashboardUrl||Tt(t,e)});return}if(["failed","error","cancelled","canceled"].includes(a)){n.quiet||i.stop("iOS submit failed");let u=l?.error||l?.message||"Unknown iOS submit failure.";de(u),St(n,{status:"failed",projectId:e,submitId:t,platform:"ios",profile:l?.profile||n.profile||"production",buildId:l?.buildId||n.buildId,artifactName:l?.artifactName,error:u,dashboardUrl:l?.dashboardUrl||Tt(t,e)}),process.exitCode=1;return}n.quiet||i.message(`iOS submit ${a}...`),await dr(Yd)}catch(s){if(r++,r>=qd){n.quiet||i.stop("Lost connection to iOS submit status"),de(`Could not fetch iOS submit status after ${r} attempts: ${s.message}`),process.exitCode=1;return}await dr(Math.min(2e3*r,15e3))}}async function ru(e,t,n){let i;for(let r=1;r<=3;r++)try{await T.patch(`/submissions/${e}/${t}`,n);return}catch(o){if(i=o,r>=3||!ou(o))break;await dr(1e3*r)}As.warn(re.dim(`Could not report submission status: ${i?.message||i}`))}function ou(e){let t=e.response?.status;return!t||t===408||t===409||t===425||t===429||t>=500}function su(){let e={gitlabJobId:process.env.CI_JOB_ID,gitlabJobUrl:process.env.CI_JOB_URL,gitlabPipelineId:process.env.CI_PIPELINE_ID,gitlabProjectId:process.env.CI_PROJECT_ID,gitlabProjectPath:process.env.CI_PROJECT_PATH};return Object.fromEntries(Object.entries(e).filter(([,t])=>!!t))}function au(e){let t=e.response?.status,n=e.response?.data?.message||e.response?.data?.error;return t===404||t===405?["Managed iOS submit is not enabled on this Mach API yet.","Deploy the API/dashboard submission orchestration endpoint, then retry the same command.","Expected API: POST /submissions and GET/PATCH /submissions/:projectId/:submitId."].join(`
|
|
1429
|
+
`):n||e.message||String(e)}function Tt(e,t){if(!e)return nt;let n=t?`?projectId=${encodeURIComponent(t)}`:"";return`${nt}/submissions/${e}${n}`}function St(e,t){if(!e.jsonOutput)return;let n=ve.resolve(e.jsonOutput),i={...t,url:t.url||t.dashboardUrl||Tt(t.submitId,t.projectId),updatedAt:new Date().toISOString()};try{let r=ve.dirname(n);r&&r!=="."&&se.mkdirSync(r,{recursive:!0}),se.writeFileSync(n,JSON.stringify(i,null,2))}catch(r){As.warn(re.yellow(`Could not write submission metadata JSON: ${r.message}`))}}function lu(e,t){return t&&e.find(n=>n.credentialId===t||n.id===t||n.keyId===t||n.meta?.keyId===t)||null}function cu(e,t){let n=e.filter(i=>[i.bundleId,i.bundleIdentifier,i.appIdentifier,i.meta?.bundleId,i.meta?.bundleIdentifier,i.meta?.appIdentifier].filter(Boolean).map(String).includes(t));return n.length===1?n[0]:null}function du(){return process.env.CI==="true"||process.env.CI==="1"||!process.stdin.isTTY}function dr(e){return new Promise(t=>setTimeout(t,e))}function uu(e){return/^[a-zA-Z0-9_./:=@-]+$/.test(e)?e:`'${e.replace(/'/g,"'\\''")}'`}function pu(e,t){if(e.submit?.[t]?.android?.package)return e.submit[t].android.package;let n=so(e,t);if(n)return n;let i=ve.join(process.cwd(),"app.json");if(se.existsSync(i))try{return JSON.parse(se.readFileSync(i,"utf-8")).expo?.android?.package}catch{}let r=ve.join(process.cwd(),"app.config.json");if(se.existsSync(r))try{let o=JSON.parse(se.readFileSync(r,"utf-8"));return o.expo?.android?.package||o.android?.package}catch{}}function fu(e,t){let n=e.filter(o=>jn(o)===t);if(n.length>0)return n;let i=e.filter(o=>{let s=jn(o);return!s||s==="*"});return e.length>0&&e.length===i.length?i:[]}function mu(e,t){return e.submit?.[t]?.ios?.bundleIdentifier?e.submit[t].ios.bundleIdentifier:e.submit?.[t]?.ios?.bundleId?e.submit[t].ios.bundleId:ao(e,t)}function gu(e,t,n){let i=e.submit?.[t]?.ios||{},r=e.submit?.production?.ios||{},o=n.sshHost||i.sshHost||r.sshHost||process.env.MACH_IOS_SUBMIT_SSH_HOST;return o?{sshHost:o,sshUser:n.sshUser||i.sshUser||r.sshUser||process.env.MACH_IOS_SUBMIT_SSH_USER||process.env.USER||"ubuntu",sshKey:n.sshKey||i.sshKey||r.sshKey||process.env.MACH_IOS_SUBMIT_SSH_KEY}:null}function hu(e,t,n){let i=n||e.submit?.[t]?.android?.releaseStatus||e.submit?.production?.android?.releaseStatus||"completed";return yu(i)}function yu(e){let t=Xd[String(e).trim().toLowerCase()];if(!t)throw new Error(`Invalid Android release status "${e}". Use completed, draft, halted, or inProgress.`);return t}function Su(e,t,n){let i=n??e.submit?.[t]?.android?.rollout??e.submit?.[t]?.android?.userFraction??e.submit?.[t]?.android?.rolloutFraction??e.submit?.production?.android?.rollout??e.submit?.production?.android?.userFraction??e.submit?.production?.android?.rolloutFraction;if(i==null||i==="")return;let r=Number(i);if(!Number.isFinite(r)||r<=0||r>=1)throw new Error(`Invalid Android rollout fraction "${i}". Use a number greater than 0 and less than 1, for example 0.1.`);return r}function bu(e,t,n){let i=n??e.submit?.[t]?.android?.changesNotSentForReview??e.submit?.[t]?.android?.changes_not_sent_for_review??e.submit?.production?.android?.changesNotSentForReview??e.submit?.production?.android?.changes_not_sent_for_review??!1;return i===!0||i==="true"||i==="1"}function Au(e,t){if(e==="inProgress"&&t===void 0)throw new Error("Google Play staged rollout requires --rollout <fraction> when --release-status inProgress is used.");if(e!=="inProgress"&&e!=="halted"&&t!==void 0)throw new Error("Android rollout fraction can only be used with --release-status inProgress or halted.")}async function Eu(e,t,n,i){let r=n.buildId?"id":n.latest?"latest":null;if(!r){let s=await lr({message:"Select artifact source:",options:[{value:"latest",label:`Latest Production Build (${m.name})`},{value:"id",label:`Input Build ID (${m.name})`},{value:"url",label:"Remote URL"},{value:"local",label:"Local File Path"}]});if(yt(s))return cr("Operation cancelled"),null;r=s}if(r==="local"){let s=await un({message:"Enter path to artifact (.ipa/.aab):",validate:l=>{if(!se.existsSync(l))return"File not found";if(t==="ios"&&!l.endsWith(".ipa"))return"Must be an .ipa file";if(t==="android"&&!l.endsWith(".aab"))return"Must be an .aab file"}});return yt(s)?null:{filePath:s,source:"local"}}let o=bt();if(r==="latest"){let s=n.profile||n.buildProfile;o.start(`Fetching latest${s?` ${s}`:""} build...`);try{let l=await T.get(`/builds/${e}`,{params:{limit:50}});if(l.data.status!=="success")throw new Error(l.data.message);let a=l.data.builds||[],d=s?.toLowerCase(),u=E=>E.platform?.toLowerCase()===t.toLowerCase()&&E.status?.toLowerCase()==="success",c=E=>d?[E.buildProfile,E.profile,E.profileName,E.buildType].filter(Boolean).some(F=>String(F).toLowerCase()===d):!0,p=a.filter(E=>u(E)&&c(E)),f=p.find(E=>E.buildType?.toLowerCase()==="store"||E.distribution?.toLowerCase()==="store")||p[0],g=a.some(E=>E.platform?.toLowerCase()===t.toLowerCase()&&E.status?.toLowerCase()==="success");if(!f)return o.stop("No suitable build found"),de(s&&g?`No successful ${t} builds found for profile "${s}".`:"No successful builds found for this platform."),null;o.stop(`Found build: ${f.buildId}`);let y=f.artifacts||[];if(y.length===0||y.every(E=>!(E.url||E.downloadUrl)))try{let E=await T.get(`/builds/${e}/${f.buildId}/artifacts`);E.data.status==="success"&&E.data.artifacts?.length>0?(y=E.data.artifacts.map(F=>({...F,url:F.url||F.downloadUrl})),console.log(re.cyan(` [RECOVERY] Fetched ${y.length} artifact(s) with download URLs.`))):console.log(re.yellow(" [RECOVERY] /artifacts endpoint returned 0 artifacts."))}catch(E){console.log(re.red(` [RECOVERY] /artifacts fetch failed: ${E.message}`))}let $=t==="ios",b=y.find(E=>{let F=(E.type||"").toLowerCase(),X=(E.name||"").toLowerCase();if(console.log(re.dim(` - Checking: ${E.name} (Type: ${E.type}, HasLink: ${!!(E.url||E.downloadUrl)})`)),F)return F===($?"ipa":"aab");let D=$?".ipa":".aab",I=(E.url||E.downloadUrl||"").toLowerCase();return X.endsWith(D)||I.includes(D)});if(!b||!(b.url||b.downloadUrl))return de("Build found but artifact URL is missing."),null;let x=b.url||b.downloadUrl;return{filePath:await or(x,$?"ios":"android"),buildId:f.buildId,artifactName:b.name,source:"latest"}}catch(l){return o.stop("Fetch failed"),de(`API Error: ${l.message}`),null}}if(r==="id"){let s=n.buildId||await un({message:"Enter Build ID:",validate:a=>a.length<5?"Invalid ID":void 0});if(yt(s))return null;let l=String(s);o.start("Fetching build...");try{let a=null;try{let f=await T.get(`/builds/${e}/${l}`);f.data.status==="success"&&(a=f.data.build)}catch(f){f.response?.status!==404&&console.log(re.dim(` [RECOVERY] Project build lookup skipped: ${f.message}`))}if(!a){let f=await T.get(`/build/${l}`);if(f.data.status!=="success")throw new Error(f.data.message);a=f.data.build}if(!a)throw new Error(`Build ${l} was not found.`);let d=t==="ios",u=Hn(a.artifacts);Iu(u)||(u=await hs(e,l,u));let c=gs(u,t);if(c||(u=await hs(e,l,u),c=gs(u,t)),!c)throw new Error(`No ${d?".ipa":".aab"} artifact found for build ${l}. The build exists, but its artifact list does not contain a downloadable submission artifact.`);let p=c.url||c.downloadUrl;if(!p)throw new Error(`Artifact ${c.name||"(unnamed)"} for build ${l} has no download URL. Retry after the build artifact upload is visible in the Installation Hub.`);return o.stop(`Found build: ${a.buildId||l}`),{filePath:await or(p,d?"ios":"android"),buildId:a.buildId||l,artifactName:c.name,source:"id"}}catch(a){throw o.stop("Fetch failed"),a}}if(r==="url"){let s=await un({message:"Enter Artifact URL:",validate:l=>l.startsWith("http")?void 0:"Must be a valid URL"});return yt(s)?null:{filePath:await or(s,t),source:"url"}}return null}function Hn(e){return(e||[]).map(t=>({...t,url:t.url||t.downloadUrl}))}function Iu(e){return e.some(t=>!!(t.url||t.downloadUrl))}function gs(e,t){let n=t==="ios",i=n?"ipa":"aab",r=n?".ipa":".aab";return e.find(o=>{let s=String(o.type||"").toLowerCase(),l=String(o.name||"").toLowerCase(),a=String(o.url||o.downloadUrl||"").toLowerCase();return s?s===i:l.endsWith(r)||a.includes(r)})||null}function wu(e,t){let n=e==="ios"?".ipa":".aab";if(t.buildId)return`No downloadable ${n} artifact found for build ${t.buildId}. Check that the build finished artifact upload before submitting.`;if(t.latest){let i=t.profile||t.buildProfile;return`No latest successful ${e}${i?` ${i}`:""} build has a downloadable ${n} artifact.`}return`No downloadable ${n} artifact was selected for submission.`}async function hs(e,t,n){try{let i=await T.get(`/builds/${e}/${t}/artifacts`);if(i.data.status==="success"&&i.data.artifacts?.length>0){let r=Hn(i.data.artifacts);return console.log(re.cyan(` [RECOVERY] Fetched ${r.length} artifact(s) with download URLs.`)),r}}catch(i){console.log(re.dim(` [RECOVERY] Project artifact lookup skipped: ${i.message}`))}try{let i=await T.get(`/public/builds/${t}`);if(i.data.status==="success"&&i.data.artifacts?.length>0){let r=Hn(i.data.artifacts);return console.log(re.cyan(` [RECOVERY] Fetched ${r.length} public artifact(s) with download URLs.`)),r}}catch(i){console.log(re.dim(` [RECOVERY] Public artifact lookup skipped: ${i.message}`))}return Hn(n)}async function or(e,t,n=3){let i=bt();i.start("Downloading artifact...");let r=se.mkdtempSync(ve.join(xt.tmpdir(),`${m.nameLower}-artifact-`)),o=`app.${t==="ios"?"ipa":"aab"}`,s=ve.join(r,o);for(let l=1;l<=n;l++)try{l>1&&(i.message(`Downloading artifact (Retry ${l}/${n})...`),await new Promise(u=>setTimeout(u,2e3*l)));let a=se.createWriteStream(s),d=await Es({url:e,method:"GET",responseType:"stream",timeout:6e4});return await new Promise((u,c)=>{d.data.pipe(a);let p=!1;d.data.on("error",f=>{p||(p=!0,a.close(),c(f))}),a.on("finish",()=>{p||u()}),a.on("error",f=>{p||(p=!0,c(f))})}),i.stop("Download complete"),s}catch(a){if(l===n)throw i.stop("Download failed"),a}throw new Error("Download failed after retries")}async function _u(e,t,n,i,r){let o=bt();if(r&&ge(`Bundle ID: ${re.green(r)}`),!n||!i)throw de(`Missing credentials: issuerId=${n}, keyId=${i}. Check your Dashboard.`),new Error("Missing ASC API Key Metadata (IssuerID or KeyID)");let s=_s(t,n,i),l=ku();return o.start("Uploading to TestFlight (pilot)..."),new Promise((a,d)=>{let u=Tu(),c=Jd(l.command,["pilot","upload","--ipa",e,"--api_key_path",s,"--skip_submission","true","--skip_waiting_for_build_processing","true"],{stdio:["ignore","pipe","pipe"],env:l.env});c.stdout?.on("data",p=>u.append(p,process.stdout)),c.stderr?.on("data",p=>u.append(p,process.stderr)),c.on("close",p=>{if(u.flush(),p!==0){o.stop("Pilot failed");try{se.unlinkSync(s)}catch{}d(xu(p,u.lines()))}else{o.stop("IPA uploaded to TestFlight");try{se.unlinkSync(s)}catch{}a({})}}),c.on("error",p=>{u.flush();try{se.unlinkSync(s)}catch{}o.stop("Pilot execution error");let f=Gu(p);f.logs=u.lines(),d(f)})})}async function $u(e,t,n,i,r,o){let s=bt();if(r&&ge(`Bundle ID: ${re.green(r)}`),!n||!i)throw de(`Missing credentials: issuerId=${n}, keyId=${i}. Check your Dashboard.`),new Error("Missing ASC API Key Metadata (IssuerID or KeyID)");let l=_s(t,n,i),a=`${o.sshUser}@${o.sshHost}`,d=vu(o),u=Ru(o),c="",p="";try{if(s.start(`Preparing remote iOS submit runner (${a})...`),c=Du("ssh",[...d,"mktemp -d /tmp/mach-submit.XXXXXX"]).trim(),!c)throw new Error("Remote runner did not return a temp directory.");s.stop(`Remote runner ready: ${a}`),s.start("Uploading IPA and App Store Connect key to remote runner..."),sr("scp",[...u,e,`${a}:${c}/app.ipa`],"IPA upload to remote runner"),sr("scp",[...u,l,`${a}:${c}/api_key.json`],"ASC key upload to remote runner"),p=ve.join(xt.tmpdir(),`${m.nameLower}-ios-submit-${Date.now()}.sh`),se.writeFileSync(p,Pu(c)),sr("scp",[...u,p,`${a}:${c}/submit.sh`],"submit script upload to remote runner"),s.stop("Remote submit inputs uploaded"),s.start("Uploading to TestFlight on remote runner...");let f=`chmod +x ${pn(`${c}/submit.sh`)} && bash ${pn(`${c}/submit.sh`)}`,g=Nt("ssh",[...d,f],{stdio:"inherit"});if(g.error)throw fr("ssh",g.error);if(g.status!==0)throw new Error(`Remote iOS submit failed with exit code ${g.status}.`);return s.stop("IPA uploaded to TestFlight"),{apiKeyJsonPath:null}}catch(f){throw s.stop("Remote iOS submit failed"),f}finally{try{se.unlinkSync(l)}catch{}if(p)try{se.unlinkSync(p)}catch{}if(c)try{Nt("ssh",[...d,`rm -rf ${pn(c)}`],{stdio:"ignore"})}catch{}}}function _s(e,t,n){let i=se.readFileSync(e,"utf8"),r;try{r=pr.createPrivateKey(i).export({type:"pkcs8",format:"pem"})}catch{ge("Key normalization failed, falling back to manual re-wrapping..."),r=`-----BEGIN PRIVATE KEY-----
|
|
1430
1430
|
${(i.replace(/-----BEGIN[^-]*-----/g,"").replace(/-----END[^-]*-----/g,"").replace(/\s+/g,"").match(/.{1,64}/g)||[]).join(`
|
|
1431
1431
|
`)}
|
|
1432
|
-
-----END PRIVATE KEY-----`}let o=
|
|
1432
|
+
-----END PRIVATE KEY-----`}let o=ve.join(xt.tmpdir(),`api_key_${n}_${Date.now()}.json`),s={key_id:n,issuer_id:t,key:r,in_house:!1};return se.writeFileSync(o,JSON.stringify(s,null,2)),o}function vu(e){let t=["-o","StrictHostKeyChecking=no","-o","ServerAliveInterval=30"];return e.sshKey&&t.push("-i",e.sshKey),t.push(`${e.sshUser}@${e.sshHost}`),t}function Ru(e){let t=["-o","StrictHostKeyChecking=no","-o","ServerAliveInterval=30"];return e.sshKey&&t.push("-i",e.sshKey),t}function Du(e,t){let n=Nt(e,t,{encoding:"utf-8",stdio:["ignore","pipe","inherit"]});if(n.error)throw fr(e,n.error);if(n.status!==0)throw new Error(`${e} failed with exit code ${n.status}.`);return n.stdout||""}function sr(e,t,n){let i=Nt(e,t,{stdio:"inherit"});if(i.error)throw fr(e,i.error);if(i.status!==0)throw new Error(`${n} failed with exit code ${i.status}.`)}function fr(e,t){return t?.code==="ENOENT"?new Error(`${e} was not found on this machine. Install OpenSSH client tools or run iOS submit directly on the macOS runner.`):t}function pn(e){return`'${e.replace(/'/g,"'\\''")}'`}function Pu(e){let t=pn(`${e}/app.ipa`),n=pn(`${e}/api_key.json`);return`#!/bin/bash
|
|
1433
1433
|
set -euo pipefail
|
|
1434
1434
|
|
|
1435
1435
|
export PATH="/opt/homebrew/bin:/usr/local/bin:/usr/bin:/bin:/usr/sbin:/sbin:$HOME/.local/share/fastlane/3.4.0/bin:$PATH"
|
|
@@ -1457,39 +1457,39 @@ fastlane pilot upload \\
|
|
|
1457
1457
|
--api_key_path ${n} \\
|
|
1458
1458
|
--skip_submission true \\
|
|
1459
1459
|
--skip_waiting_for_build_processing true
|
|
1460
|
-
`}async function
|
|
1460
|
+
`}async function Ou(e,t,n="internal",i,r="completed",o,s=!1,l="production"){let a=bt();if(!i||i==="*")throw new Error("Android package name is required for Google Play submission.");let d=o!==void 0?` (${o} rollout)`:"";a.start(`Uploading to Google Play ${n} track with ${r} release status${d}...`);try{let u=JSON.parse(se.readFileSync(t,"utf-8"));Cu(u);let c=await Do({packageName:i,serviceAccount:u,aabPath:e,track:n,releaseStatus:r,userFraction:o,changesNotSentForReview:s});return a.stop(`AAB uploaded to ${n} track (versionCode ${c.versionCode})`),c}catch(u){throw a.stop("Google Play upload failed"),new Error(Ku(u,n,i,l))}}function Cu(e){if(!e?.client_email||!e?.private_key)throw new Error("Invalid Google service account JSON: missing client_email or private_key.")}function ar(){let e=process.env.HOME||xt.homedir(),t=process.env.FASTLANE_GEM_HOME||ve.join(e,".local/share/fastlane/3.4.0"),n=[process.env.FASTLANE_BIN_DIR,"/usr/local/opt/ruby/bin","/opt/homebrew/opt/ruby/bin","/usr/local/bin","/opt/homebrew/bin","/usr/local/Cellar/fastlane/2.227.0/libexec/bin",ve.join(t,"bin"),process.env.PATH].filter(Boolean).join(":");return{...process.env,PATH:n,GEM_HOME:t,GEM_PATH:[t,"/usr/local/Cellar/fastlane/2.227.0/libexec",process.env.GEM_PATH].filter(Boolean).join(":"),FASTLANE_INSTALLED_VIA_HOMEBREW:"true",FASTLANE_SKIP_UPDATE_CHECK:"1",FASTLANE_HIDE_CHANGELOG:"1",LANG:process.env.LANG||"en_US.UTF-8",LC_ALL:process.env.LC_ALL||"en_US.UTF-8",CI:process.env.CI||"1"}}function ku(){let e=ar(),t=ys(e);if(t)return t;if(process.env.MACH_SKIP_FASTLANE_INSTALL!=="1"){Nu(e);let n=ys(ar());if(n)return n}return{command:"fastlane",env:ar()}}function ys(e){let t=process.env.HOME||xt.homedir(),n=[process.env.FASTLANE_BINARY,"/usr/local/bin/fastlane","/opt/homebrew/bin/fastlane","/usr/local/Cellar/fastlane/2.227.0/libexec/bin/fastlane",ve.join(process.env.FASTLANE_GEM_HOME||ve.join(t,".local/share/fastlane/3.4.0"),"bin/fastlane"),"fastlane"].filter(Boolean);for(let i of n){if(i.includes("/")&&!se.existsSync(i))continue;if(!Nt(i,["--version"],{env:e,stdio:"ignore"}).error)return{command:i,env:e}}return null}function Nu(e){let t=Nt("gem",["--version"],{env:e,stdio:"ignore"});if(t.error||t.status!==0)return;let n=process.env.HOME||xt.homedir(),i=process.env.FASTLANE_GEM_HOME||ve.join(n,".local/share/fastlane/3.4.0"),r=ve.join(i,"bin");se.mkdirSync(r,{recursive:!0}),ge(re.dim("fastlane not found. Installing fastlane into the local Mach runner cache..."));let o=Nt("gem",["install","fastlane","-NV","--install-dir",i,"--bindir",r],{env:{...e,GEM_HOME:i,GEM_PATH:[i,e.GEM_PATH].filter(Boolean).join(":")},stdio:"inherit"});(o.error||o.status!==0)&&ge(re.yellow("Automatic fastlane install failed; Mach will try PATH resolution once more."))}function Tu(e=Is){let t=[],n="",i=r=>{let o=vs(r);if(o)for(t.push(o);t.length>e;)t.shift()};return{append(r,o){let s=Buffer.isBuffer(r)?r.toString("utf8"):String(r);o.write(s),n+=s;let l=n.split(/\r?\n/);n=l.pop()||"";for(let a of l)i(a)},flush(){n.trim()&&i(n),n=""},lines(){return t.slice()}}}function xu(e,t){let n=new Error(Lu(e,t));return n.logs=$s(t),n.exitCode=e,n}function Lu(e,t){let n=`fastlane pilot failed with exit code ${e??"unknown"}.`,i=Mu(t);return i.length===0?n:`${n}
|
|
1461
1461
|
|
|
1462
1462
|
Fastlane output:
|
|
1463
1463
|
${i.join(`
|
|
1464
|
-
`)}`}function
|
|
1465
|
-
`),n=t.match(/CFBundleShortVersionString\s*\[([^\]]+)\]/i)?.[1]||t.match(/train version ['"]([^'"]+)['"]/i)?.[1];if(/Invalid Pre-Release Train/i.test(t)||/CFBundleShortVersionString[\s\S]*must contain a higher version/i.test(t))return[`App Store Connect rejected CFBundleShortVersionString${n?` ${n}`:""}: this App Store version train is closed or not higher than the approved version.`,'ios.buildNumber="auto" only changes CFBundleVersion; bump the marketing version (Expo app.json "expo.version" / iOS MARKETING_VERSION), rebuild, then submit the new build.'].join(" ");if(!/bundle version must be higher than the previously uploaded version/i.test(t))return null;let i=t.match(/previous(?:ly)?BundleVersion\s*:\s*([0-9.]+)/i)?.[1]||t.match(/previously uploaded version:\s*[‘'"]?([0-9.]+)/i)?.[1];return`App Store Connect rejected CFBundleVersion: the bundle version must be higher than the previously uploaded version.${i?` Previous uploaded build: ${i}.`:""}`}function
|
|
1466
|
-
`))}function
|
|
1464
|
+
`)}`}function Mu(e){let t=$s(e);if(t.length===0)return[];let n=Ss(t.filter(Fu)),i=Uu(t);if(i)return[i,...bs(n,rr-1,ms)];let r=n.length>0?n:t.slice(-rr);return bs(Ss(r),rr,ms)}function Uu(e){let t=e.join(`
|
|
1465
|
+
`),n=t.match(/CFBundleShortVersionString\s*\[([^\]]+)\]/i)?.[1]||t.match(/train version ['"]([^'"]+)['"]/i)?.[1];if(/Invalid Pre-Release Train/i.test(t)||/CFBundleShortVersionString[\s\S]*must contain a higher version/i.test(t))return[`App Store Connect rejected CFBundleShortVersionString${n?` ${n}`:""}: this App Store version train is closed or not higher than the approved version.`,'ios.buildNumber="auto" only changes CFBundleVersion; bump the marketing version (Expo app.json "expo.version" / iOS MARKETING_VERSION), rebuild, then submit the new build.'].join(" ");if(!/bundle version must be higher than the previously uploaded version/i.test(t))return null;let i=t.match(/previous(?:ly)?BundleVersion\s*:\s*([0-9.]+)/i)?.[1]||t.match(/previously uploaded version:\s*[‘'"]?([0-9.]+)/i)?.[1];return`App Store Connect rejected CFBundleVersion: the bundle version must be higher than the previously uploaded version.${i?` Previous uploaded build: ${i}.`:""}`}function Fu(e){return/\[!\]|ERROR ITMS-\d+|ITMS-\d+|ENTITY_ERROR|previousBundleVersion|CFBundleVersion|Application Loader Error Output|Transporter Error|Transporter transfer failed|Asset validation failed|Validation failed|Error Domain=|The request could not be completed|No suitable application records|Could not|authentication|unauthori[sz]ed|invalid|failed|exception/i.test(e)}function Ss(e){let t=new Set,n=[];for(let i of e){let r=i.trim();!r||t.has(r)||(t.add(r),n.push(i))}return n}function bs(e,t,n){let i=[],r=0;for(let o=e.length-1;o>=0&&i.length<t;o--){let s=e[o],l=r+s.length+1;if(l>n&&i.length>0)break;i.unshift(s.length>n?`${s.slice(0,n-18)}... [truncated]`:s),r=l}return i}function $s(e){if(!Array.isArray(e))return[];let t=[];for(let n of e){let i=String(n).split(/\r?\n/);for(let r of i){let o=vs(r);o&&t.push(o)}}return t.slice(-Is)}function vs(e){return Hu(Bu(e).trimEnd()).trim()}function Bu(e){return e.replace(/[\u001b\u009b][[\]()#;?]*(?:(?:(?:[a-zA-Z\d]*(?:;[a-zA-Z\d]*)*)?\u0007)|(?:(?:\d{1,4}(?:;\d{0,4})*)?[\dA-PR-TZcf-nq-uy=><~]))/g,"")}function Hu(e){let t=e.replace(/-----BEGIN [^-]+-----[\s\S]*?-----END [^-]+-----/g,"[REDACTED_PRIVATE_KEY]").replace(/(authorization:\s*bearer\s+)[A-Za-z0-9._-]+/ig,"$1[REDACTED]").replace(/((?:password|token|secret|private[_-]?key)\s*[:=]\s*)("[^"]+"|'[^']+'|[^\s,]+)/ig,"$1[REDACTED]");for(let[n,i]of Object.entries(process.env))!i||i.length<8||/(TOKEN|SECRET|PASSWORD|PASS|PRIVATE|CREDENTIAL)/i.test(n)&&(t=t.replace(new RegExp(ju(i),"g"),"[REDACTED]"));return t}function ju(e){return e.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}function Gu(e){return e?.code!=="ENOENT"?e:new Error(["fastlane was not found on PATH.","Mach submit uses Fastlane for iOS TestFlight/App Store uploads.","Run iOS submit on a macOS runner with Fastlane, or expose it via FASTLANE_BINARY / FASTLANE_BIN_DIR.","Example: gem install fastlane -NV"].join(`
|
|
1466
|
+
`))}function Ku(e,t,n,i="production"){let r=e?.message||String(e);if(/changesNotSentForReview/i.test(r))return["Google Play rejected the commit because this change may need explicit review handling.",`Package: ${n||"unknown"} | Track: ${t}`,`Retry with: ${m.nameLower} submit --latest --platform android --profile ${i} --track ${t} --changes-not-sent-for-review`,"Then send the change for review from Google Play Console if required."].join(`
|
|
1467
1467
|
`);if(/caller does not have permission|permission denied|insufficient permissions|not authorized/i.test(r))return["Google Play rejected the service account permissions.",`Package: ${n||"unknown"} | Track: ${t}`,"Grant this service account access to the app in Play Console with release permissions, then retry."].join(`
|
|
1468
1468
|
`);if(/package.*not found|application.*not found|no application was found/i.test(r))return["Google Play could not find this package for the selected service account.",`Package: ${n||"unknown"} | Track: ${t}`,"Check android.package / submit.<profile>.android.package and make sure the app exists in this Play Console account."].join(`
|
|
1469
1469
|
`);if(/only releases with status draft|draft app/i.test(r))return["Google Play requires a draft release for this app state.",`Package: ${n||"unknown"} | Track: ${t}`,`Retry with: ${m.nameLower} submit --latest --platform android --profile ${i} --track ${t} --release-status draft`].join(`
|
|
1470
1470
|
`);if(r.includes("does not allow any existing users to upgrade"))return["Google Play rejected this release because the uploaded AAB is not an upgrade for existing users.",`Package: ${n||"unknown"} | Track: ${t}`,"Build a new Android artifact with a higher versionCode, then submit that build.",`Recommended: ${m.nameLower} build --platform android --profile ${i} --auto-version`,`Then: ${m.nameLower} submit --latest --platform android --profile ${i} --track ${t}`].join(`
|
|
1471
1471
|
`);if(/version code \d+ has already been used/i.test(r))return[r.match(/version code \d+ has already been used[^\n]*/i)?.[0]||"Version code has already been used.",`Package: ${n||"unknown"} | Track: ${t}`,"Build a new Android artifact with a higher versionCode, then submit that build.",`Recommended: ${m.nameLower} build --platform android --profile ${i} --auto-version`].join(`
|
|
1472
|
-
`);let o=r.match(/Google Api Error:[^\n]+/)||r.match(/Google Play API Error:[^\n]+/);return o?o[0]:r||"Google Play submission failed"}function kd(e){try{oe.existsSync(e)&&oe.rmSync(e,{recursive:!0,force:!0})}catch{}}function ce(e){console.log(ne.red(`\u274C ${e}`))}function me(e){console.log(ne.gray(`\u2022 ${e}`))}function Ti(e){console.log(ne.green(`\u2713 ${e}`))}var xi=8,Md=6,Ko=Number(process.env.MACH_ARTIFACT_UPLOAD_MAX_ATTEMPTS||2),Mi=Number(process.env.MACH_ARTIFACT_UPLOAD_TIMEOUT_MS||12e4),Ui="ap-south-1",Ud=`${m.envPrefix}S3_DEBUG`,Fd=()=>["1","true","yes","on"].includes(String(process.env[Ud]||"").trim().toLowerCase()),Hi=(e,t)=>{if(Fd()&&t)try{let n=new URL(t);$.info(v.dim(`[S3_DEBUG] ${e} host=${n.hostname} expectedRegion=${Ui}`)),n.hostname.includes(Ui)||$.warn(v.yellow(`[S3_DEBUG] ${e} host ${n.hostname} does not include ${Ui}`))}catch(n){$.warn(v.yellow(`[S3_DEBUG] Could not parse ${e} presigned URL host: ${n.message}`))}},Vo=new Set([".git",".gradle",".idea",".mach-cache",".expo",".turbo",".yarn/cache","build","builds","coverage","dist","node_modules",`${m.nameLower}_cli`,`.${m.nameLower}_cli`]),Bd=new Set(["android/.gradle","android/.cxx","android/app/.cxx","android/app/build","android/build","ios/Pods","ios/build","ios/DerivedData"]),Hd=[{value:"production",label:"production",hint:"Store / release build"},{value:"staging",label:"staging",hint:"Internal testing build"},{value:"development",label:"development",hint:"Development build"}],rs=e=>new Promise(t=>setTimeout(t,e)),os=e=>e.split(ge.sep).filter(Boolean).join("/"),jd=(e,t)=>{let n=os(e),i=n.split("/")[0];return n?!!(Vo.has(n)||Vo.has(i)||Bd.has(n)||t==="ios"&&i==="android"||t==="android"&&i==="ios"):!1},Gd=(e,t,n)=>{let i=0,r=new Set,o=(s,l)=>{let a=os(l);if(jd(a,n)){r.add(a.split("/")[0]||a);return}let d=de.lstatSync(s);if(!d.isSymbolicLink()){if(d.isDirectory()){for(let u of de.readdirSync(s))o(ge.join(s,u),ge.join(l,u));return}if(d.isFile()){let u=ge.dirname(a);e.addLocalFile(s,u==="."?void 0:u,ge.basename(a)),i++}}};for(let s of de.readdirSync(t))o(ge.join(t,s),s);return{files:i,skipped:Array.from(r).sort()}},Kd=e=>!e.yes&&!e.failOnly&&!e.buildId&&process.stdin.isTTY&&process.stdout.isTTY,Vd=e=>{if(!e||typeof e!="object")return;let t=[e.distribution?`distribution: ${e.distribution}`:void 0,e.environment?`env: ${e.environment}`:void 0,e.developmentClient?"development client":void 0,e.simulator?"simulator":void 0].filter(Boolean);return t.length>0?t.join(", "):void 0},zd=()=>{let e=$e(`./${m.configFileName}`),t=e?.build&&typeof e.build=="object"?e.build:{},n=Object.keys(t);return n.length===0?Hd:n.map(i=>({value:i,label:i,hint:Vd(t[i])}))},Wd=async e=>{let t=Kd(e);if(!e.platform&&t){let n=await Fo({message:"Select platform",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"}]});vn(n)&&(Ho("Build cancelled."),process.exit(0)),e.platform=n}if(!e.buildProfile&&t){let n=zd(),i=await Fo({message:"Select build profile",options:n,initialValue:n.find(r=>r.value==="production")?.value||n[0]?.value});vn(i)&&(Ho("Build cancelled."),process.exit(0)),e.buildProfile=i}e.buildProfile||(e.buildProfile="production")},zo=e=>{if(e===!0||e===!1)return e;if(e===1||e==="1")return!0;if(e===0||e==="0")return!1;if(typeof e!="string")return;let t=e.trim().toLowerCase();if(["true","yes","on"].includes(t))return!0;if(["false","no","off"].includes(t))return!1},ss=(e,t)=>{if(e)for(let n of t){let i=n.replace(/[.*+?^${}()|[\]\\]/g,"\\$&"),r=e.match(new RegExp(`(?:^|\\s)${i}(?:=|\\s+)([^\\s]+)`));if(r?.[1])return r[1].replace(/^["']|["']$/g,"")}},Yd=(e,t)=>!!e&&t.some(n=>new RegExp(`(?:^|\\s)${n.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}(?:\\s|$)`).test(e)),Jd=e=>{let n=ss(e,["--platform"])||e?.split(/\s+/).find(i=>i==="ios"||i==="android");return n==="ios"||n==="android"?n:void 0},Xd=async e=>{if(!(!e.projectId||!e.buildId))try{let t=await k.get(`/builds/${e.projectId}/${e.buildId}`),n=t.data?.build||t.data;if(!n||typeof n!="object")return;let i=typeof n.buildArgs=="string"?n.buildArgs:void 0;if(!e.platform){let r=n.platform||Jd(i);(r==="ios"||r==="android")&&(e.platform=r)}if(e.buildProfile||(e.buildProfile=n.buildProfile||n.profile||n.profileName||ss(i,["--profile","--build-profile","-p"])),e.simulator===void 0){let r=zo(n.simulator??n.isSimulator);r!==void 0?e.simulator=r:Yd(i,["--simulator"])&&(e.simulator=!0)}if(e.developmentClient===void 0){let r=zo(n.developmentClient??n.devClient);r!==void 0&&(e.developmentClient=r)}}catch(t){$.warn(v.yellow(`Could not load saved build options for runner: ${t.message}`))}},qd=e=>{if(!Number.isFinite(e)||e<=0)return"0 B";let t=["B","KB","MB","GB"],n=Math.min(Math.floor(Math.log(e)/Math.log(1024)),t.length-1);return`${(e/Math.pow(1024,n)).toFixed(n===0?0:1)} ${t[n]}`},Zd=e=>{let t=e.response?.status,n=e.code||"",i=e.message||"";return t?t===408||t===409||t===425||t===429||t>=500||/ECONNRESET|ETIMEDOUT|EAI_AGAIN|ENOTFOUND|ECONNABORTED|socket hang up|network|timeout/i.test(`${n} ${i}`):!0},_n=async(e,t,n=Md)=>{let i;for(let r=1;r<=n;r++)try{return await t()}catch(o){if(i=o,!Zd(o)||r>=n)break;let s=Math.min(6e4,2e3*Math.pow(2,r-1)),l=o.response?.status||o.code||o.message||"network error";$.warn(v.yellow(`${e} failed transiently (${l}). Retrying in ${Math.round(s/1e3)}s... (${r}/${n})`)),await rs(s)}throw i},Qd=async(e,t,n)=>{let i=ge.basename(e),r=de.statSync(e).size,o=Math.round(Mi/1e3);Hi(`ARTIFACT_UPLOAD ${i}`,t);try{await _n(`Upload artifact ${i}`,async()=>{let s=new AbortController,l=de.createReadStream(e),a=setTimeout(()=>{l.destroy(new Error(`Artifact upload timed out after ${o}s`)),s.abort()},Mi);try{await $n.put(t,l,{headers:{"Content-Type":n,"Content-Length":r,Connection:"close"},maxBodyLength:1/0,maxContentLength:1/0,timeout:Mi,timeoutErrorMessage:`Artifact upload timed out after ${o}s`,signal:s.signal})}finally{clearTimeout(a)}},Ko)}catch(s){throw new Error(`${i} (${qd(r)}) failed after ${Ko} upload attempt(s): ${s.message||s}`)}return r},eu=e=>{let t=e.response?.status;return t?t===408||t===429||t>=500:!0},Xt=e=>e.credentialId||e.id,tu=async(e,t)=>{let n=Xt(e);if(!n)return e.downloadUrl;let i=await k.get(`/credentials/${n}/download`,{params:{projectId:t,format:"raw"}});return i.data?.status==="success"&&i.data?.downloadUrl?i.data.downloadUrl:e.downloadUrl},as=async(e,t)=>{let n=e.downloadUrl;for(let i=1;i<=xi;i++)try{if((!n||i>1)&&(n=await tu(e,t)),!n)throw new Error(`Credential ${e.name||Xt(e)||"unknown"} has no download URL.`);let r=await $n.get(n,{responseType:"arraybuffer",timeout:6e4,maxContentLength:1/0,maxBodyLength:1/0,headers:{Connection:"close"}});return Buffer.from(r.data).toString("base64")}catch(r){if(i>=xi||!eu(r))throw r;let o=Math.min(1500*i*i,15e3);$.warn(v.dim(` - Temporary network error downloading ${e.name}. Retrying... (${i}/${xi})`)),await rs(o)}throw new Error(`Failed to download credential ${e.name||Xt(e)||"unknown"}.`)},Wo=async(e,t)=>{let n=await as(e,t);return Buffer.from(n,"base64").toString("utf8")},nu=(e,t)=>{try{return JSON.parse(e)}catch{throw new Error(`${t} is not valid JSON.`)}},iu=e=>/ECONNRESET|ETIMEDOUT|EAI_AGAIN|ENOTFOUND|ECONNABORTED|socket hang up|network|timeout/i.test(e),ru=(e,t)=>t?.ios?.buildNumber??t?.iosBuildNumber??e?.ios?.buildNumber??e?.expo?.ios?.buildNumber,ou=(e,t,n)=>t?.ios?.ascAppId??t?.ascAppId??e?.ios?.ascAppId??e?.submit?.[n]?.ios?.ascAppId??e?.submit?.production?.ios?.ascAppId,Yo=e=>e.bundleId||e.bundleIdentifier||e.meta?.bundleId||e.meta?.bundleIdentifier,Jo=(e,t)=>{let n=e.filter(i=>i.type==="asc_api_key");if(n.length!==0){if(t){let i=n.find(o=>Yo(o)===t);if(i)return i;let r=n.find(o=>Yo(o)==="*");if(r)return r}return n[0]}},su=e=>typeof e=="string"&&e.trim().toLowerCase()==="auto",ls=(e,t,n=[])=>{if(!de.existsSync(e))return n;let i;try{i=de.readdirSync(e,{withFileTypes:!0})}catch{return n}for(let r of i){if(r.name==="Pods"||r.name==="build"||r.name==="DerivedData")continue;let o=ge.join(e,r.name);r.isDirectory()?ls(o,t,n):r.name===t&&n.push(o)}return n},au=(e,t,n)=>{let i=`${n} ${t.environment||""}`.toLowerCase(),r=e.toLowerCase(),o=0;return(i.includes("development")||i.includes("dev"))&&/(^|[.-])dev(elopment)?($|[.-])/.test(r)&&(o+=20),(i.includes("staging")||i.includes("stage"))&&/(^|[.-])stag(e|ing)?($|[.-])/.test(r)&&(o+=20),(i.includes("production")||i.includes("prod"))&&(/(^|[.-])(dev|development|stag|stage|staging)($|[.-])/.test(r)||(o+=20)),o},lu=(e,t)=>{let n=ge.resolve(process.cwd(),de.existsSync("ios")?"ios":"."),i=ls(n,"project.pbxproj"),r=[];for(let o of i)try{let l=de.readFileSync(o,"utf8").matchAll(/PRODUCT_BUNDLE_IDENTIFIER\s*=\s*"?([^";\s]+)"?;/g);for(let a of l){let d=a[1]?.trim();d&&!d.includes("$")&&!d.startsWith("com.apple.")&&!r.includes(d)&&r.push(d)}}catch{}if(r.length!==0)return r.length===1?r[0]:r.map(o=>({bundleId:o,score:au(o,e,t)})).sort((o,s)=>s.score-o.score)[0]?.bundleId},Rn=e=>String(e||"").trim().toLowerCase().replace(/_/g,"-"),Pn=(e,t)=>{let n=Rn(e);return t==="ios"&&(n==="internal"||n==="ad-hoc")?"adhoc":t==="android"&&["internal","adhoc","ad-hoc","development","dev","staging","stage"].includes(n)?"internal":n},Xo=(e,t,n)=>{let i=Pn(e.distributionType||e.meta?.distributionType,n);return i?i===Pn(t,n):!0},qo=(e,t,n)=>{let i=Pn(e.distributionType||e.meta?.distributionType,n),r=Pn(t,n);return i?i===r?3:n==="android"&&r!=="store"&&i!=="store"?2:0:1},cu=e=>{let t=e.toLowerCase();return t==="development"||t==="dev"||t.startsWith("development-")||t.startsWith("dev-")||t.endsWith("-development")||t.endsWith("-dev")},du=e=>{let t=e.toLowerCase();return t.includes("staging")||t.includes("stage")||t.includes("preview")||t.includes("adhoc")||t.includes("ad-hoc")},uu=(e,t)=>{let n=Rn(e.distribution),i=Rn(e.iosExportMethod),r=Rn(e.environment);return e.platform!=="ios"?n==="store"?"store":"internal":e.developmentClient||e.simulator?"development":i==="app-store"||n==="store"?"store":i==="development"||n==="development"?"development":i==="ad-hoc"||i==="adhoc"||n==="ad-hoc"||n==="adhoc"||n==="internal"?"adhoc":r==="production"||r==="store"?"store":r==="development"||r==="dev"?"development":r==="staging"||r==="stage"||r==="preview"?"adhoc":t.toLowerCase()==="production"||t.toLowerCase().includes("store")?"store":cu(t)?"development":(du(t),"adhoc")},cs=e=>e.bundleId||e.bundleIdentifier||e.packageName||e.meta?.bundleId||e.meta?.bundleIdentifier||e.meta?.packageName,Zo=(e,t)=>{if(!t)return!0;let n=cs(e);return!n||n==="*"||n===t},Qo=(e,t)=>{let n=cs(e);return!t||!n?0:n===t?2:n==="*"?1:-1},ds=e=>{try{let t=Buffer.from(e,"base64").toString("utf8"),n=t.match(/<key>application-identifier<\/key>\s*<string>([^<]+)<\/string>/)?.[1]?.trim();if(!n)return;let i=t.match(/<key>TeamIdentifier<\/key>\s*<array>\s*<string>([^<]+)<\/string>/)?.[1]?.trim();if(i&&n.startsWith(`${i}.`))return n.slice(i.length+1);let r=n.indexOf(".");return r>=0?n.slice(r+1):n}catch{return}},pu=(e,t)=>{if(e===t||e==="*")return!0;if(e.endsWith(".*")){let n=e.slice(0,-2);return t.startsWith(`${n}.`)}return!1},fu=(e,t)=>{if(!t)return!0;let n=ds(e);if(n)return pu(n,t);try{return Buffer.from(e,"base64").toString("latin1").includes(t)}catch{return!0}},On=async e=>{if(e.failOnly){(!e.projectId||!e.buildId)&&($.error(v.red("--project-id and --build-id are required with --fail-only.")),process.exit(1));let l=e.error||"Build runner failed before it could report a final status.";try{await k.patch(`/builds/${e.projectId}/${e.buildId}`,{status:"failed",error:l,endTime:Date.now()}),$.info(v.yellow(`Marked build ${e.buildId} as failed.`));return}catch(a){$.error(v.red(`Could not mark build failed: ${a.message}`)),process.exit(1)}}await Xd(e),await Wd(e),e.platform!=="android"&&e.platform!=="ios"&&($.error(`Platform ${e.platform} is not supported. Use 'android' or 'ios'.`),process.exit(1)),e.autoSubmit&&e.platform==="ios"&&e.simulator&&($.error(v.red("--auto-submit cannot be used with --simulator because simulator builds are not App Store artifacts.")),process.exit(1)),e.autoSubmit&&e.dryRun&&$.warn(v.yellow("--auto-submit is ignored during --dry-run."));let t=Bi(),n=e.buildId||Ld(),i=e.projectId,r=Date.now(),o=!!i,s=async l=>{if(i)try{await k.patch(`/builds/${i}/${n}`,{status:"failed",error:l,endTime:Date.now()})}catch{}};if(e.local&&e.buildId){e.quiet||t.start(`Preparing isolated workspace for build: ${e.buildId}`);try{let l=await k.get(`/builds/${i}/${e.buildId}/source-url`);if(l.data.status!=="success")throw new Error("Failed to get source download URL from API");Hi("SOURCE_DOWNLOAD",l.data.downloadUrl);let a=await $n.get(l.data.downloadUrl,{responseType:"stream"}),d=(i||e.projectId||"default").replace(/[^a-zA-Z0-9-_]/g,"_"),u=ge.join(xd.homedir(),m.workspacesDir,d);de.mkdirSync(u,{recursive:!0});let c=new Set(["node_modules",`.${m.nameLower}-cache-meta`]),f=new Set(["Pods"]);if(de.existsSync(u)){let D=de.readdirSync(u);for(let b of D){if(c.has(b))continue;if(b==="ios"){let A=ge.join(u,"ios");try{let B=de.readdirSync(A);for(let q of B)if(!f.has(q))try{de.rmSync(ge.join(A,q),{recursive:!0,force:!0})}catch{}}catch{}continue}let L=ge.join(u,b);try{de.rmSync(L,{recursive:!0,force:!0})}catch{}}}let p=ge.join(u,"source.zip"),g=a.data,y=de.createWriteStream(p);await new Promise((D,b)=>{g.pipe(y),g.on("error",L=>b(L)),y.on("finish",()=>D())}),new Go(p).extractAllTo(u,!0);try{de.unlinkSync(p)}catch{}process.chdir(u),$.info(v.green(`\u2713 Persistent workspace ready: ${u}`)),$.info(v.dim(` \u{1F4E6} Cached dirs preserved: node_modules=${de.existsSync(ge.join(u,"node_modules"))?"\u2705":"\u274C"}, Pods=${de.existsSync(ge.join(u,"ios","Pods"))?"\u2705":"\u274C"}`)),t.stop()}catch(l){t.stop(`Failed to prepare isolated workspace: ${l.message}`),i&&await s(`Setup Error: ${l.message}`),process.exit(1)}}try{let l=e.repo;if(!l)try{l=jo("git config --get remote.origin.url").toString().trim()}catch{$.warn("Could not detect git repository URL.")}!l&&e.dryRun,l||(l="https://github.com/placeholder/repo.git"),$.info(`Build ID: ${v.cyan(n)}`);let a={},d={},u=null,c=$e(`./${m.configFileName}`);if(c||($.error(v.red(`${m.configFileName} not found. Run \`${m.nameLower} init\` or \`${m.nameLower} link\` first.`)),process.exit(1)),c){u=c;let P=hr(c);e.framework=P,i=c.projectId;let I=e.buildProfile||"production",T=lt(c,I);!T&&e.buildProfile&&($.error(`Build profile '${I}' not found in ${m.configFileName}`),process.exit(1));let w=T||{};process.env.MACH_DEBUG&&$.info(v.dim(`Framework: ${P} | Build profile: ${I} | Platform: ${e.platform} | Distribution: ${w.distribution||"store"} | Environment: ${w.environment||I}`)),w.env&&(d=w.env,$.info(v.blue(`Use Build Profile: ${I}`)));let N=e.platform,h=w[N]||{},M=["developmentClient","simulator","distribution","buildCommand","apk","iosScheme","preBuild","postBuild","scheme","environment","androidPackage","iosBundleIdentifier","name","iosDeploymentTarget","iosApiKeyId","iosApiKeyIssuer","iosApiKeyPath","iosTeamId","iosConfiguration","iosExportMethod","branch","repo","instanceType","ami","bucket","region","nodeVersion"];e.name=c.name,e.appName=c.name,e.androidPackage=c.android?.package,e.iosBundleIdentifier=c.ios?.bundleIdentifier,e.iosScheme=c.ios?.iosScheme,!e.nodeVersion&&c.nodeVersion&&(e.nodeVersion=c.nodeVersion);let U=H=>H==="androidPackage"?h.androidPackage??h.package??w.androidPackage??w.android?.package:H==="iosBundleIdentifier"?h.iosBundleIdentifier??h.bundleIdentifier??w.iosBundleIdentifier??w.ios?.bundleIdentifier:h[H]!==void 0?h[H]:w[H];for(let H of M){let C=U(H),V=H==="androidPackage"||H==="iosBundleIdentifier";C!==void 0&&(e[H]===void 0||V)&&(e[H]=C)}if(e.platform==="ios"&&!(h.iosBundleIdentifier??h.bundleIdentifier??w.iosBundleIdentifier??w.ios?.bundleIdentifier)){let C=lu(e,I);C&&C!==e.iosBundleIdentifier&&($.warn(v.yellow(`Detected native iOS bundle identifier ${C}; using it for credential lookup. Set build.${I}.ios.bundleIdentifier to make this explicit.`)),e.iosBundleIdentifier=C)}e.branch=e.branch||"main",e.iosConfiguration=e.iosConfiguration||(e.developmentClient?"Debug":"Release"),e.sshUser=e.sshUser||process.env.USER||"ubuntu",e.simulator===void 0&&(e.simulator=!1),e.local===void 0&&(e.local=!1),e.verbose===void 0&&(e.verbose=!1),$.info(v.dim(`Resolved build config: framework=${P}, profile=${I}, platform=${e.platform}, simulator=${e.platform==="ios"?String(!!e.simulator):"n/a"}, developmentClient=${String(!!e.developmentClient)}, distribution=${e.distribution||w.distribution||"store"}, iosConfiguration=${e.platform==="ios"?e.iosConfiguration||"Release":"n/a"}`));let j=H=>{if(!H)return H;if(H.startsWith("scripts.")){let C=H.split(".")[1],V=c.scripts?.[C];if(V)return V;$.warn(`Script reference not found: ${H}`)}return H};e.buildCommand=j(e.buildCommand),e.preBuild=j(e.preBuild),e.postBuild=j(e.postBuild),!e.scheme&&c.scheme&&(e.scheme=c.scheme);let X={...Pt(c,m.envPrefix),...Pt(w,`${m.envPrefix}PROFILE_`)};a={...a,...d,...X},process.env.IOS_P12_PASSWORD&&!a.IOS_P12_PASSWORD&&(a.IOS_P12_PASSWORD=process.env.IOS_P12_PASSWORD),process.env.MATCH_PASSWORD&&!a.MATCH_PASSWORD&&(a.MATCH_PASSWORD=process.env.MATCH_PASSWORD),e.platform==="ios"&&(!e.iosTeamId&&w.ios?.appleTeamId&&(e.iosTeamId=w.ios.appleTeamId),!e.iosTeamId&&c.submit?.[I]?.ios?.appleTeamId&&(e.iosTeamId=c.submit[I].ios.appleTeamId),!e.iosTeamId&&c.submit?.production?.ios?.appleTeamId&&($.warn(v.yellow(`Check: Using 'production' Team ID for '${I}' build.`)),e.iosTeamId=c.submit.production.ios.appleTeamId),e.iosTeamId?$.info(v.magenta(`\u2713 Injected iOS Team ID from config: ${e.iosTeamId}`)):e.simulator||$.warn(v.yellow("\u26A0\uFE0F No iOS Team ID found. Device or archive signing may fail unless managed iOS credentials provide the team automatically.")))}let f="unknown";try{f=jo("git rev-parse --abbrev-ref HEAD").toString().trim()}catch{$.warn("Failed to detect git branch.")}let p="1.0.0";try{de.existsSync("./package.json")&&(p=JSON.parse(de.readFileSync("./package.json","utf-8")).version||"1.0.0")}catch{}let g=e.buildProfile||"production",y="Internal";e.developmentClient?y="DevelopmentClient":g.toLowerCase().includes("store")||g.toLowerCase()==="production"?y="Store":g.toLowerCase().includes("preview")||g.toLowerCase().includes("staging")?y="Staging":(g.toLowerCase().includes("development")||g.toLowerCase().includes("dev"))&&(y="Development");let _=e.platform==="ios"?"iOS":"Android",D=e.platform==="ios"&&e.simulator?" (Simulator)":"",b=`${_}${D} v${p} (${y})`;if(Dn(e,{status:"created",projectId:i,buildId:n,platform:e.platform,profile:g,branch:f,version:p,buildType:y,developmentClient:!!e.developmentClient,summary:b}),i){try{let P=e.buildProfile||"production",I=e.environment||P;$.info(v.blue(`Fetching managed secrets for profile: ${P} (environment: ${I})...`));let w=(await k.get(`/projects/${i}/secrets/export?env=${I}`)).data;w.status==="success"&&w.secrets&&(a={...a,...w.secrets},Object.keys(w.secrets).length>0&&$.info(v.magenta(`\u2713 Injected ${Object.keys(w.secrets).length} secrets from Dashboard.`)))}catch(P){$.warn(`Failed to load managed secrets from Dashboard: ${P.message}`)}if(e.platform==="ios"&&e.simulator)$.info(v.dim("Skipping managed iOS signing credentials for simulator build."));else try{$.info(v.blue("Fetching managed credentials..."));let P=uu(e,g),I=e.platform==="ios"?e.iosBundleIdentifier:e.androidPackage,T=e.platform==="ios"?"bundle":"package";$.info(v.dim(` Credential target: ${T} ${I||"not set"} (${P})`));let w=await k.get("/credentials/resolve",{params:{projectId:i,platform:e.platform,bundleId:I,distributionType:P,teamId:e.platform==="ios"?e.iosTeamId:void 0}});if(w.data.status==="success"&&w.data.credentials){let N=w.data.credentials;$.info(v.magenta(`\u2713 Found ${N.length} relevant credentials.`));let h=N.filter(C=>e.platform==="ios"&&C.type==="ios_profile"?Xo(C,P,e.platform)?Zo(C,I):!1:e.platform==="android"&&C.type==="android_keystore"?Zo(C,I):!!Xo(C,P,e.platform)).sort((C,V)=>{let se=Qo(V,I)*10+qo(V,P,e.platform)-(Qo(C,I)*10+qo(C,P,e.platform));return se!==0?se:(V.createdAt||0)-(C.createdAt||0)});$.info(v.dim(` Filtered to ${h.length} credentials for distributionType: ${P}`));let M=!1,U=!1,j=!1,X=[];for(let C of h)if(!(C.type==="ios_cert"&&M||C.type==="ios_profile"&&U||C.type==="android_keystore"&&j)&&["ios_cert","ios_profile","android_keystore"].includes(C.type)&&(C.downloadUrl||Xt(C)))try{let se=await as(C,i);if(C.type==="ios_cert"&&!M)a.IOS_DIST_P12=se,C.password?(a.IOS_P12_PASSWORD=C.password,$.info(v.dim(` - Injected ${C.name} as IOS_DIST_P12 with password from credential record`))):$.info(v.dim(` - Injected ${C.name} as IOS_DIST_P12`)),M=!0;else if(C.type==="ios_profile"&&!U){if(!fu(se,I)){let ue=ds(se)||"unknown";throw new Error(`Provisioning profile ${C.name||Xt(C)||"unknown"} is for a different bundle ID. Expected ${I}, found ${ue}. Upload a ${P} profile for ${I}.`)}a.IOS_PROVISIONING_PROFILE=se,$.info(v.dim(` - Injected ${C.name} as IOS_PROVISIONING_PROFILE`)),U=!0}else if(C.type==="android_keystore"&&!j){a.ANDROID_KEYSTORE_BASE64=se;let ue=C.keystorePassword||C.password,z=C.keyPassword||C.keystorePassword||C.password,G=C.alias||C.meta?.alias;if(ue)a.ANDROID_STORE_PASSWORD=ue,$.info(v.dim(" - Injected keystore password from credential record"));else{let J=["ANDROID_STORE_PASSWORD",...[P==="store"?"PRODUCTION":P==="internal"||P==="adhoc"?"STAGING":"DEVELOPMENT",P.toUpperCase(),"PRODUCTION","STORE","INTERNAL","STAGING","RELEASE","DEBUG"].map(le=>`KEYSTORE_PASSWORD_${le}`),"KEYSTORE_PASSWORD"].find(le=>!!a[le]);J&&a[J]&&(a.ANDROID_STORE_PASSWORD=a[J])}if(z?(a.ANDROID_KEY_PASSWORD=z,$.info(v.dim(" - Injected key password from credential record"))):a.ANDROID_KEY_PASSWORD=a.ANDROID_STORE_PASSWORD||"",G)a.ANDROID_KEY_ALIAS=G;else{let Q=["ANDROID_KEY_ALIAS","KEYSTORE_ALIAS"].find(W=>!!a[W]);Q&&(a.ANDROID_KEY_ALIAS=a[Q])}$.info(v.dim(` - Injected ${C.name} as ANDROID_KEYSTORE_BASE64`)),j=!0}}catch(se){X.push(`${C.name||C.type}: ${se.message}`)}let H=e.platform==="ios"?e.simulator||M&&U:j||!h.some(C=>C.type==="android_keystore");if(X.length>0&&!H)throw new Error(`Credential setup failed:
|
|
1473
|
-
${
|
|
1474
|
-
`)}`);
|
|
1475
|
-
\u{1F517} Download Links:`));for(let
|
|
1476
|
-
\u2713 Build completed and reported to dashboard.`)),e.maestro&&!
|
|
1477
|
-
${h}`)),await I(h),new Error(h)}}else if(i){let
|
|
1478
|
-
\u{1F3BC} Queuing managed Maestro test...`)),await
|
|
1479
|
-
Auto-submit: submitting the successful build...`));try{let r=await
|
|
1480
|
-
\u2717 Build failed: ${a.error||"Unknown error"}`)),process.exit(1);else if(r==="completed"||r==="success"){n.quiet||i.stop("Build successful!"),
|
|
1481
|
-
\u2713 Build completed successfully!`));try{n.quiet||(
|
|
1482
|
-
\u{1F4F1} Installation Hub:`))
|
|
1483
|
-
`);if(c.length>o){for(let
|
|
1484
|
-
\u2717 Lost connection to Dashboard API.`)),process.exit(1))}await new Promise(l=>setTimeout(l,3e3))}}import*as
|
|
1472
|
+
`);let o=r.match(/Google Api Error:[^\n]+/)||r.match(/Google Play API Error:[^\n]+/);return o?o[0]:r||"Google Play submission failed"}function Vu(e){try{se.existsSync(e)&&se.rmSync(e,{recursive:!0,force:!0})}catch{}}function de(e){console.log(re.red(`\u274C ${e}`))}function ge(e){console.log(re.gray(`\u2022 ${e}`))}function ur(e){console.log(re.green(`\u2713 ${e}`))}var mr=8,Ju=6,ks=Number(process.env.MACH_ARTIFACT_UPLOAD_MAX_ATTEMPTS||2),gr=Number(process.env.MACH_ARTIFACT_UPLOAD_TIMEOUT_MS||12e4),hr="ap-south-1",Yu=`${m.envPrefix}S3_DEBUG`,qu=()=>["1","true","yes","on"].includes(String(process.env[Yu]||"").trim().toLowerCase()),br=(e,t)=>{if(qu()&&t)try{let n=new URL(t);R.info(P.dim(`[S3_DEBUG] ${e} host=${n.hostname} expectedRegion=${hr}`)),n.hostname.includes(hr)||R.warn(P.yellow(`[S3_DEBUG] ${e} host ${n.hostname} does not include ${hr}`))}catch(n){R.warn(P.yellow(`[S3_DEBUG] Could not parse ${e} presigned URL host: ${n.message}`))}},Ns=new Set([".git",".gradle",".idea",".mach-cache",".expo",".turbo",".yarn/cache","build","builds","coverage","dist","node_modules",`${m.nameLower}_cli`,`.${m.nameLower}_cli`]),Xu=new Set(["android/.gradle","android/.cxx","android/app/.cxx","android/app/build","android/build","ios/Pods","ios/build","ios/DerivedData"]),Zu=[{value:"production",label:"production",hint:"Store / release build"},{value:"staging",label:"staging",hint:"Internal testing build"},{value:"development",label:"development",hint:"Development build"}],zs=e=>new Promise(t=>setTimeout(t,e)),Ws=e=>e.split(he.sep).filter(Boolean).join("/"),Qu=(e,t)=>{let n=Ws(e),i=n.split("/")[0];return n?!!(Ns.has(n)||Ns.has(i)||Xu.has(n)||t==="ios"&&i==="android"||t==="android"&&i==="ios"):!1},ep=(e,t,n)=>{let i=0,r=new Set,o=(s,l)=>{let a=Ws(l);if(Qu(a,n)){r.add(a.split("/")[0]||a);return}let d=ue.lstatSync(s);if(!d.isSymbolicLink()){if(d.isDirectory()){for(let u of ue.readdirSync(s))o(he.join(s,u),he.join(l,u));return}if(d.isFile()){let u=he.dirname(a);e.addLocalFile(s,u==="."?void 0:u,he.basename(a)),i++}}};for(let s of ue.readdirSync(t))o(he.join(t,s),s);return{files:i,skipped:Array.from(r).sort()}},tp=e=>!e.yes&&!e.failOnly&&!e.buildId&&process.stdin.isTTY&&process.stdout.isTTY,np=e=>{if(!e||typeof e!="object")return;let t=[e.distribution?`distribution: ${e.distribution}`:void 0,e.environment?`env: ${e.environment}`:void 0,e.developmentClient?"development client":void 0,e.simulator?"simulator":void 0].filter(Boolean);return t.length>0?t.join(", "):void 0},ip=()=>{let e=_e(`./${m.configFileName}`),t=e?.build&&typeof e.build=="object"?e.build:{},n=Object.keys(t);return n.length===0?Zu:n.map(i=>({value:i,label:i,hint:np(t[i])}))},rp=async e=>{let t=tp(e);if(!e.platform&&t){let n=await Rs({message:"Select platform",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"}]});Wn(n)&&(Ps("Build cancelled."),process.exit(0)),e.platform=n}if(!e.buildProfile&&t){let n=ip(),i=await Rs({message:"Select build profile",options:n,initialValue:n.find(r=>r.value==="production")?.value||n[0]?.value});Wn(i)&&(Ps("Build cancelled."),process.exit(0)),e.buildProfile=i}e.buildProfile||(e.buildProfile="production")},Ts=e=>{if(e===!0||e===!1)return e;if(e===1||e==="1")return!0;if(e===0||e==="0")return!1;if(typeof e!="string")return;let t=e.trim().toLowerCase();if(["true","yes","on"].includes(t))return!0;if(["false","no","off"].includes(t))return!1},Js=(e,t)=>{if(e)for(let n of t){let i=n.replace(/[.*+?^${}()|[\]\\]/g,"\\$&"),r=e.match(new RegExp(`(?:^|\\s)${i}(?:=|\\s+)([^\\s]+)`));if(r?.[1])return r[1].replace(/^["']|["']$/g,"")}},op=(e,t)=>!!e&&t.some(n=>new RegExp(`(?:^|\\s)${n.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}(?:\\s|$)`).test(e)),sp=e=>{let n=Js(e,["--platform"])||e?.split(/\s+/).find(i=>i==="ios"||i==="android");return n==="ios"||n==="android"?n:void 0},ap=async e=>{if(!(!e.projectId||!e.buildId))try{let t=await T.get(`/builds/${e.projectId}/${e.buildId}`),n=t.data?.build||t.data;if(!n||typeof n!="object")return;let i=typeof n.buildArgs=="string"?n.buildArgs:void 0;if(!e.platform){let r=n.platform||sp(i);(r==="ios"||r==="android")&&(e.platform=r)}if(e.buildProfile||(e.buildProfile=n.buildProfile||n.profile||n.profileName||Js(i,["--profile","--build-profile","-p"])),e.simulator===void 0){let r=Ts(n.simulator??n.isSimulator);r!==void 0?e.simulator=r:op(i,["--simulator"])&&(e.simulator=!0)}if(e.developmentClient===void 0){let r=Ts(n.developmentClient??n.devClient);r!==void 0&&(e.developmentClient=r)}}catch(t){R.warn(P.yellow(`Could not load saved build options for runner: ${t.message}`))}},lp=e=>{if(!Number.isFinite(e)||e<=0)return"0 B";let t=["B","KB","MB","GB"],n=Math.min(Math.floor(Math.log(e)/Math.log(1024)),t.length-1);return`${(e/Math.pow(1024,n)).toFixed(n===0?0:1)} ${t[n]}`},cp=e=>{let t=e.response?.status,n=e.code||"",i=e.message||"";return t?t===408||t===409||t===425||t===429||t>=500||/ECONNRESET|ETIMEDOUT|EAI_AGAIN|ENOTFOUND|ECONNABORTED|socket hang up|network|timeout/i.test(`${n} ${i}`):!0},Kn=async(e,t,n=Ju)=>{let i;for(let r=1;r<=n;r++)try{return await t()}catch(o){if(i=o,!cp(o)||r>=n)break;let s=Math.min(6e4,2e3*Math.pow(2,r-1)),l=o.response?.status||o.code||o.message||"network error";R.warn(P.yellow(`${e} failed transiently (${l}). Retrying in ${Math.round(s/1e3)}s... (${r}/${n})`)),await zs(s)}throw i},dp=async(e,t,n)=>{let i=he.basename(e),r=ue.statSync(e).size,o=Math.round(gr/1e3);br(`ARTIFACT_UPLOAD ${i}`,t);try{await Kn(`Upload artifact ${i}`,async()=>{let s=new AbortController,l=ue.createReadStream(e),a=setTimeout(()=>{l.destroy(new Error(`Artifact upload timed out after ${o}s`)),s.abort()},gr);try{await zn.put(t,l,{headers:{"Content-Type":n,"Content-Length":r,Connection:"close"},maxBodyLength:1/0,maxContentLength:1/0,timeout:gr,timeoutErrorMessage:`Artifact upload timed out after ${o}s`,signal:s.signal})}finally{clearTimeout(a)}},ks)}catch(s){throw new Error(`${i} (${lp(r)}) failed after ${ks} upload attempt(s): ${s.message||s}`)}return r},up=e=>{let t=e.response?.status;return t?t===408||t===429||t>=500:!0},fn=e=>e.credentialId||e.id,pp=async(e,t)=>{let n=fn(e);if(!n)return e.downloadUrl;let i=await T.get(`/credentials/${n}/download`,{params:{projectId:t,format:"raw"}});return i.data?.status==="success"&&i.data?.downloadUrl?i.data.downloadUrl:e.downloadUrl},Ys=async(e,t)=>{let n=e.downloadUrl;for(let i=1;i<=mr;i++)try{if((!n||i>1)&&(n=await pp(e,t)),!n)throw new Error(`Credential ${e.name||fn(e)||"unknown"} has no download URL.`);let r=await zn.get(n,{responseType:"arraybuffer",timeout:6e4,maxContentLength:1/0,maxBodyLength:1/0,headers:{Connection:"close"}});return Buffer.from(r.data).toString("base64")}catch(r){if(i>=mr||!up(r))throw r;let o=Math.min(1500*i*i,15e3);R.warn(P.dim(` - Temporary network error downloading ${e.name}. Retrying... (${i}/${mr})`)),await zs(o)}throw new Error(`Failed to download credential ${e.name||fn(e)||"unknown"}.`)},xs=async(e,t)=>{let n=await Ys(e,t);return Buffer.from(n,"base64").toString("utf8")},fp=(e,t)=>{try{return JSON.parse(e)}catch{throw new Error(`${t} is not valid JSON.`)}},mp=e=>/ECONNRESET|ETIMEDOUT|EAI_AGAIN|ENOTFOUND|ECONNABORTED|socket hang up|network|timeout/i.test(e),gp=(e,t)=>t?.ios?.buildNumber??t?.iosBuildNumber??e?.ios?.buildNumber??e?.expo?.ios?.buildNumber,hp=(e,t,n)=>t?.ios?.ascAppId??t?.ascAppId??e?.ios?.ascAppId??e?.submit?.[n]?.ios?.ascAppId??e?.submit?.production?.ios?.ascAppId,Ls=e=>e.bundleId||e.bundleIdentifier||e.meta?.bundleId||e.meta?.bundleIdentifier,Ms=(e,t)=>{let n=e.filter(i=>i.type==="asc_api_key");if(n.length!==0){if(t){let i=n.find(o=>Ls(o)===t);if(i)return i;let r=n.find(o=>Ls(o)==="*");if(r)return r}return n[0]}},yp=e=>typeof e=="string"&&e.trim().toLowerCase()==="auto",qs=(e,t,n=[])=>{if(!ue.existsSync(e))return n;let i;try{i=ue.readdirSync(e,{withFileTypes:!0})}catch{return n}for(let r of i){if(r.name==="Pods"||r.name==="build"||r.name==="DerivedData")continue;let o=he.join(e,r.name);r.isDirectory()?qs(o,t,n):r.name===t&&n.push(o)}return n},Sp=(e,t,n)=>{let i=`${n} ${t.environment||""}`.toLowerCase(),r=e.toLowerCase(),o=0;return(i.includes("development")||i.includes("dev"))&&/(^|[.-])dev(elopment)?($|[.-])/.test(r)&&(o+=20),(i.includes("staging")||i.includes("stage"))&&/(^|[.-])stag(e|ing)?($|[.-])/.test(r)&&(o+=20),(i.includes("production")||i.includes("prod"))&&(/(^|[.-])(dev|development|stag|stage|staging)($|[.-])/.test(r)||(o+=20)),o},bp=(e,t)=>{let n=he.resolve(process.cwd(),ue.existsSync("ios")?"ios":"."),i=qs(n,"project.pbxproj"),r=[];for(let o of i)try{let l=ue.readFileSync(o,"utf8").matchAll(/PRODUCT_BUNDLE_IDENTIFIER\s*=\s*"?([^";\s]+)"?;/g);for(let a of l){let d=a[1]?.trim();d&&!d.includes("$")&&!d.startsWith("com.apple.")&&!r.includes(d)&&r.push(d)}}catch{}if(r.length!==0)return r.length===1?r[0]:r.map(o=>({bundleId:o,score:Sp(o,e,t)})).sort((o,s)=>s.score-o.score)[0]?.bundleId},Vn=e=>String(e||"").trim().toLowerCase().replace(/_/g,"-"),Jn=(e,t)=>{let n=Vn(e);return t==="ios"&&(n==="internal"||n==="ad-hoc")?"adhoc":t==="android"&&["internal","adhoc","ad-hoc","development","dev","staging","stage"].includes(n)?"internal":n},Us=(e,t,n)=>{let i=Jn(e.distributionType||e.meta?.distributionType,n);return i?i===Jn(t,n):!0},Fs=(e,t,n)=>{let i=Jn(e.distributionType||e.meta?.distributionType,n),r=Jn(t,n);return i?i===r?3:n==="android"&&r!=="store"&&i!=="store"?2:0:1},Ap=e=>{let t=e.toLowerCase();return t==="development"||t==="dev"||t.startsWith("development-")||t.startsWith("dev-")||t.endsWith("-development")||t.endsWith("-dev")},Ep=e=>{let t=e.toLowerCase();return t.includes("staging")||t.includes("stage")||t.includes("preview")||t.includes("adhoc")||t.includes("ad-hoc")},Ip=(e,t)=>{let n=Vn(e.distribution),i=Vn(e.iosExportMethod),r=Vn(e.environment);return e.platform!=="ios"?n==="store"?"store":"internal":e.developmentClient||e.simulator?"development":i==="app-store"||n==="store"?"store":i==="development"||n==="development"?"development":i==="ad-hoc"||i==="adhoc"||n==="ad-hoc"||n==="adhoc"||n==="internal"?"adhoc":r==="production"||r==="store"?"store":r==="development"||r==="dev"?"development":r==="staging"||r==="stage"||r==="preview"?"adhoc":t.toLowerCase()==="production"||t.toLowerCase().includes("store")?"store":Ap(t)?"development":(Ep(t),"adhoc")},Xs=e=>e.bundleId||e.bundleIdentifier||e.packageName||e.meta?.bundleId||e.meta?.bundleIdentifier||e.meta?.packageName,Bs=(e,t)=>{if(!t)return!0;let n=Xs(e);return!n||n==="*"||n===t},Hs=(e,t)=>{let n=Xs(e);return!t||!n?0:n===t?2:n==="*"?1:-1},Zs=e=>{try{let t=Buffer.from(e,"base64").toString("utf8"),n=t.match(/<key>application-identifier<\/key>\s*<string>([^<]+)<\/string>/)?.[1]?.trim();if(!n)return;let i=t.match(/<key>TeamIdentifier<\/key>\s*<array>\s*<string>([^<]+)<\/string>/)?.[1]?.trim();if(i&&n.startsWith(`${i}.`))return n.slice(i.length+1);let r=n.indexOf(".");return r>=0?n.slice(r+1):n}catch{return}},wp=(e,t)=>{if(e===t||e==="*")return!0;if(e.endsWith(".*")){let n=e.slice(0,-2);return t.startsWith(`${n}.`)}return!1},_p=(e,t)=>{if(!t)return!0;let n=Zs(e);if(n)return wp(n,t);try{return Buffer.from(e,"base64").toString("latin1").includes(t)}catch{return!0}},Yn=async e=>{if(e.failOnly){(!e.projectId||!e.buildId)&&(R.error(P.red("--project-id and --build-id are required with --fail-only.")),process.exit(1));let l=e.error||"Build runner failed before it could report a final status.";try{await T.patch(`/builds/${e.projectId}/${e.buildId}`,{status:"failed",error:l,endTime:Date.now()}),R.info(P.yellow(`Marked build ${e.buildId} as failed.`));return}catch(a){R.error(P.red(`Could not mark build failed: ${a.message}`)),process.exit(1)}}await ap(e),await rp(e),e.platform!=="android"&&e.platform!=="ios"&&(R.error(`Platform ${e.platform} is not supported. Use 'android' or 'ios'.`),process.exit(1)),e.autoSubmit&&e.platform==="ios"&&e.simulator&&(R.error(P.red("--auto-submit cannot be used with --simulator because simulator builds are not App Store artifacts.")),process.exit(1)),e.autoSubmit&&e.dryRun&&R.warn(P.yellow("--auto-submit is ignored during --dry-run."));let t=Sr(),n=e.buildId||zu(),i=e.projectId,r=Date.now(),o=!!i,s=async l=>{if(i)try{await T.patch(`/builds/${i}/${n}`,{status:"failed",error:l,endTime:Date.now()})}catch{}};if(e.local&&e.buildId){e.quiet||t.start(`Preparing isolated workspace for build: ${e.buildId}`);try{let l=await T.get(`/builds/${i}/${e.buildId}/source-url`);if(l.data.status!=="success")throw new Error("Failed to get source download URL from API");br("SOURCE_DOWNLOAD",l.data.downloadUrl);let a=await zn.get(l.data.downloadUrl,{responseType:"stream"}),d=(i||e.projectId||"default").replace(/[^a-zA-Z0-9-_]/g,"_"),u=he.join(Wu.homedir(),m.workspacesDir,d);ue.mkdirSync(u,{recursive:!0});let c=new Set(["node_modules",`.${m.nameLower}-cache-meta`]),p=new Set(["Pods"]);if(ue.existsSync(u)){let $=ue.readdirSync(u);for(let b of $){if(c.has(b))continue;if(b==="ios"){let E=he.join(u,"ios");try{let F=ue.readdirSync(E);for(let X of F)if(!p.has(X))try{ue.rmSync(he.join(E,X),{recursive:!0,force:!0})}catch{}}catch{}continue}let x=he.join(u,b);try{ue.rmSync(x,{recursive:!0,force:!0})}catch{}}}let f=he.join(u,"source.zip"),g=a.data,y=ue.createWriteStream(f);await new Promise(($,b)=>{g.pipe(y),g.on("error",x=>b(x)),y.on("finish",()=>$())}),new Cs(f).extractAllTo(u,!0);try{ue.unlinkSync(f)}catch{}process.chdir(u),R.info(P.green(`\u2713 Persistent workspace ready: ${u}`)),R.info(P.dim(` \u{1F4E6} Cached dirs preserved: node_modules=${ue.existsSync(he.join(u,"node_modules"))?"\u2705":"\u274C"}, Pods=${ue.existsSync(he.join(u,"ios","Pods"))?"\u2705":"\u274C"}`)),t.stop()}catch(l){t.stop(`Failed to prepare isolated workspace: ${l.message}`),i&&await s(`Setup Error: ${l.message}`),process.exit(1)}}try{let l=e.repo;if(!l)try{l=Os("git config --get remote.origin.url").toString().trim()}catch{R.warn("Could not detect git repository URL.")}!l&&e.dryRun,l||(l="https://github.com/placeholder/repo.git"),R.info(`Build ID: ${P.cyan(n)}`);let a={},d={},u=null,c=_e(`./${m.configFileName}`);if(c||(R.error(P.red(`${m.configFileName} not found. Run \`${m.nameLower} init\` or \`${m.nameLower} link\` first.`)),process.exit(1)),c){u=c;let D=oo(c);e.framework=D,i=c.projectId;let I=e.buildProfile||"production",N=ke(c,I);!N&&e.buildProfile&&(R.error(`Build profile '${I}' not found in ${m.configFileName}`),process.exit(1));let _=N||{};process.env.MACH_DEBUG&&R.info(P.dim(`Framework: ${D} | Build profile: ${I} | Platform: ${e.platform} | Distribution: ${_.distribution||"store"} | Environment: ${_.environment||I}`)),_.env&&(d=_.env,R.info(P.blue(`Use Build Profile: ${I}`)));let O=e.platform,h=_[O]||{},M=["developmentClient","simulator","distribution","buildCommand","apk","iosScheme","preBuild","postBuild","scheme","environment","androidPackage","iosBundleIdentifier","name","iosDeploymentTarget","iosApiKeyId","iosApiKeyIssuer","iosApiKeyPath","iosTeamId","iosConfiguration","iosExportMethod","branch","repo","instanceType","ami","bucket","region","nodeVersion"];e.name=c.name,e.appName=c.name,e.androidPackage=c.android?.package,e.iosBundleIdentifier=c.ios?.bundleIdentifier,e.iosScheme=c.ios?.iosScheme,!e.nodeVersion&&c.nodeVersion&&(e.nodeVersion=c.nodeVersion);let U=j=>j==="androidPackage"?h.androidPackage??h.package??_.androidPackage??_.android?.package:j==="iosBundleIdentifier"?h.iosBundleIdentifier??h.bundleIdentifier??_.iosBundleIdentifier??_.ios?.bundleIdentifier:h[j]!==void 0?h[j]:_[j];for(let j of M){let k=U(j),V=j==="androidPackage"||j==="iosBundleIdentifier";k!==void 0&&(e[j]===void 0||V)&&(e[j]=k)}if(e.platform==="ios"&&!(h.iosBundleIdentifier??h.bundleIdentifier??_.iosBundleIdentifier??_.ios?.bundleIdentifier)){let k=bp(e,I);k&&k!==e.iosBundleIdentifier&&(R.warn(P.yellow(`Detected native iOS bundle identifier ${k}; using it for credential lookup. Set build.${I}.ios.bundleIdentifier to make this explicit.`)),e.iosBundleIdentifier=k)}e.branch=e.branch||"main",e.iosConfiguration=e.iosConfiguration||(e.developmentClient?"Debug":"Release"),e.sshUser=e.sshUser||process.env.USER||"ubuntu",e.simulator===void 0&&(e.simulator=!1),e.local===void 0&&(e.local=!1),e.verbose===void 0&&(e.verbose=!1),R.info(P.dim(`Resolved build config: framework=${D}, profile=${I}, platform=${e.platform}, simulator=${e.platform==="ios"?String(!!e.simulator):"n/a"}, developmentClient=${String(!!e.developmentClient)}, distribution=${e.distribution||_.distribution||"store"}, iosConfiguration=${e.platform==="ios"?e.iosConfiguration||"Release":"n/a"}`));let H=j=>{if(!j)return j;if(j.startsWith("scripts.")){let k=j.split(".")[1],V=c.scripts?.[k];if(V)return V;R.warn(`Script reference not found: ${j}`)}return j};e.buildCommand=H(e.buildCommand),e.preBuild=H(e.preBuild),e.postBuild=H(e.postBuild),!e.scheme&&c.scheme&&(e.scheme=c.scheme);let Z={...jt(c,m.envPrefix),...jt(_,`${m.envPrefix}PROFILE_`)};a={...a,...d,...Z},process.env.IOS_P12_PASSWORD&&!a.IOS_P12_PASSWORD&&(a.IOS_P12_PASSWORD=process.env.IOS_P12_PASSWORD),process.env.MATCH_PASSWORD&&!a.MATCH_PASSWORD&&(a.MATCH_PASSWORD=process.env.MATCH_PASSWORD),e.platform==="ios"&&(!e.iosTeamId&&_.ios?.appleTeamId&&(e.iosTeamId=_.ios.appleTeamId),!e.iosTeamId&&c.submit?.[I]?.ios?.appleTeamId&&(e.iosTeamId=c.submit[I].ios.appleTeamId),!e.iosTeamId&&c.submit?.production?.ios?.appleTeamId&&(R.warn(P.yellow(`Check: Using 'production' Team ID for '${I}' build.`)),e.iosTeamId=c.submit.production.ios.appleTeamId),e.iosTeamId?R.info(P.magenta(`\u2713 Injected iOS Team ID from config: ${e.iosTeamId}`)):e.simulator||R.warn(P.yellow("\u26A0\uFE0F No iOS Team ID found. Device or archive signing may fail unless managed iOS credentials provide the team automatically.")))}let p="unknown";try{p=Os("git rev-parse --abbrev-ref HEAD").toString().trim()}catch{R.warn("Failed to detect git branch.")}let f="1.0.0";try{ue.existsSync("./package.json")&&(f=JSON.parse(ue.readFileSync("./package.json","utf-8")).version||"1.0.0")}catch{}let g=e.buildProfile||"production",y="Internal";e.developmentClient?y="DevelopmentClient":g.toLowerCase().includes("store")||g.toLowerCase()==="production"?y="Store":g.toLowerCase().includes("preview")||g.toLowerCase().includes("staging")?y="Staging":(g.toLowerCase().includes("development")||g.toLowerCase().includes("dev"))&&(y="Development");let w=e.platform==="ios"?"iOS":"Android",$=e.platform==="ios"&&e.simulator?" (Simulator)":"",b=`${w}${$} v${f} (${y})`;if(qn(e,{status:"created",projectId:i,buildId:n,platform:e.platform,profile:g,branch:p,version:f,buildType:y,developmentClient:!!e.developmentClient,summary:b}),i){try{let D=e.buildProfile||"production",I=e.environment||D;R.info(P.blue(`Fetching managed secrets for profile: ${D} (environment: ${I})...`));let _=(await T.get(`/projects/${i}/secrets/export?env=${I}`)).data;_.status==="success"&&_.secrets&&(a={...a,..._.secrets},Object.keys(_.secrets).length>0&&R.info(P.magenta(`\u2713 Injected ${Object.keys(_.secrets).length} secrets from Dashboard.`)))}catch(D){R.warn(`Failed to load managed secrets from Dashboard: ${D.message}`)}if(e.platform==="ios"&&e.simulator)R.info(P.dim("Skipping managed iOS signing credentials for simulator build."));else try{R.info(P.blue("Fetching managed credentials..."));let D=Ip(e,g),I=e.platform==="ios"?e.iosBundleIdentifier:e.androidPackage,N=e.platform==="ios"?"bundle":"package";R.info(P.dim(` Credential target: ${N} ${I||"not set"} (${D})`));let _=await T.get("/credentials/resolve",{params:{projectId:i,platform:e.platform,bundleId:I,distributionType:D,teamId:e.platform==="ios"?e.iosTeamId:void 0}});if(_.data.status==="success"&&_.data.credentials){let O=_.data.credentials;R.info(P.magenta(`\u2713 Found ${O.length} relevant credentials.`));let h=O.filter(k=>e.platform==="ios"&&k.type==="ios_profile"?Us(k,D,e.platform)?Bs(k,I):!1:e.platform==="android"&&k.type==="android_keystore"?Bs(k,I):!!Us(k,D,e.platform)).sort((k,V)=>{let ae=Hs(V,I)*10+Fs(V,D,e.platform)-(Hs(k,I)*10+Fs(k,D,e.platform));return ae!==0?ae:(V.createdAt||0)-(k.createdAt||0)});R.info(P.dim(` Filtered to ${h.length} credentials for distributionType: ${D}`));let M=!1,U=!1,H=!1,Z=[];for(let k of h)if(!(k.type==="ios_cert"&&M||k.type==="ios_profile"&&U||k.type==="android_keystore"&&H)&&["ios_cert","ios_profile","android_keystore"].includes(k.type)&&(k.downloadUrl||fn(k)))try{let ae=await Ys(k,i);if(k.type==="ios_cert"&&!M)a.IOS_DIST_P12=ae,k.password?(a.IOS_P12_PASSWORD=k.password,R.info(P.dim(` - Injected ${k.name} as IOS_DIST_P12 with password from credential record`))):R.info(P.dim(` - Injected ${k.name} as IOS_DIST_P12`)),M=!0;else if(k.type==="ios_profile"&&!U){if(!_p(ae,I)){let pe=Zs(ae)||"unknown";throw new Error(`Provisioning profile ${k.name||fn(k)||"unknown"} is for a different bundle ID. Expected ${I}, found ${pe}. Upload a ${D} profile for ${I}.`)}a.IOS_PROVISIONING_PROFILE=ae,R.info(P.dim(` - Injected ${k.name} as IOS_PROVISIONING_PROFILE`)),U=!0}else if(k.type==="android_keystore"&&!H){a.ANDROID_KEYSTORE_BASE64=ae;let pe=k.keystorePassword||k.password,z=k.keyPassword||k.keystorePassword||k.password,G=k.alias||k.meta?.alias;if(pe)a.ANDROID_STORE_PASSWORD=pe,R.info(P.dim(" - Injected keystore password from credential record"));else{let q=["ANDROID_STORE_PASSWORD",...[D==="store"?"PRODUCTION":D==="internal"||D==="adhoc"?"STAGING":"DEVELOPMENT",D.toUpperCase(),"PRODUCTION","STORE","INTERNAL","STAGING","RELEASE","DEBUG"].map(ce=>`KEYSTORE_PASSWORD_${ce}`),"KEYSTORE_PASSWORD"].find(ce=>!!a[ce]);q&&a[q]&&(a.ANDROID_STORE_PASSWORD=a[q])}if(z?(a.ANDROID_KEY_PASSWORD=z,R.info(P.dim(" - Injected key password from credential record"))):a.ANDROID_KEY_PASSWORD=a.ANDROID_STORE_PASSWORD||"",G)a.ANDROID_KEY_ALIAS=G;else{let ee=["ANDROID_KEY_ALIAS","KEYSTORE_ALIAS"].find(W=>!!a[W]);ee&&(a.ANDROID_KEY_ALIAS=a[ee])}R.info(P.dim(` - Injected ${k.name} as ANDROID_KEYSTORE_BASE64`)),H=!0}}catch(ae){Z.push(`${k.name||k.type}: ${ae.message}`)}let j=e.platform==="ios"?e.simulator||M&&U:H||!h.some(k=>k.type==="android_keystore");if(Z.length>0&&!j)throw new Error(`Credential setup failed:
|
|
1473
|
+
${Z.map(k=>`- ${k}`).join(`
|
|
1474
|
+
`)}`);Z.length>0&&R.warn(P.dim(` Skipped ${Z.length} stale or unusable credential(s).`))}if(e.platform==="ios"&&!e.simulator){let O=e.buildProfile||"production",h=ke(c,O)||{},M=gp(c,h),U=yp(M),H=e.distribution!==void 0?e.distribution==="store":y==="Store",Z=M===void 0&&H,j=e.autoVersion||U&&H||Z,k=e.autoVersion||U&&H;if(U&&!H&&R.info(P.dim(` Skipping App Store Connect buildNumber lookup for ${e.distribution||"non-store"} build. Pass --auto-version to force it.`)),j){let V=e.iosBundleIdentifier||c.ios?.bundleIdentifier||c.expo?.ios?.bundleIdentifier,ae=hp(c,h,O),pe=_.data.credentials||[],z=Ms(pe,V);if(!z&&(k||Z)){let G=await T.get(`/credentials/${i}`);z=Ms(G.data.credentials||[],V)}if(z){t.start("Resolving latest iOS buildNumber from App Store Connect...");try{let G=z.keyId||z.meta?.keyId,ee=z.issuerId||z.meta?.issuerId;if(!G||!ee)throw new Error("App Store Connect credential is missing keyId or issuerId.");let W=await xs(z,i),q=await No({keyId:G,issuerId:ee,privateKey:W,ascAppId:ae,bundleId:V}),ce=/^\d+$/.test(q.latestBuildNumber);ce?(a.BUILD_NUMBER=q.nextBuildNumber,delete a.MACH_IOS_BUILD_NUMBER_LOCKED):(a.BUILD_NUMBER=q.nextBuildNumber,a.CURRENT_PROJECT_VERSION=q.nextBuildNumber,a.MACH_IOS_BUILD_NUMBER_LOCKED="1"),t.stop(ce?`\u2713 Latest iOS buildNumber on App Store Connect: ${P.green(q.latestBuildNumber)} (Mach will assign >= ${q.nextBuildNumber})`:`\u2713 Resolved iOS buildNumber: ${P.green(q.nextBuildNumber)} (Latest on App Store Connect: ${q.latestBuildNumber})`)}catch(G){t.stop("iOS buildNumber lookup failed");let ee=G.response?.data?.error?.message||G.message;if(k)throw new Error(`Auto-versioning failed: ${ee}. Fix App Store Connect API key permissions or remove ios.buildNumber="auto".`);R.warn(P.yellow(`Could not check App Store Connect buildNumber: ${ee}. Falling back to Mach counter.`))}}else if(k)throw new Error(`Auto-versioning failed: App Store Connect API key not found. Upload it with '${m.nameLower} credentials:service --platform ios'.`)}}if(e.platform==="android"){let O=e.buildProfile||"production",h=ke(c,O)||{},H=((h.android||{}).versionCode??h.androidVersionCode??c.android?.versionCode??c.expo?.android?.versionCode)==="auto",Z=e.distribution!==void 0?e.distribution==="store":y==="Store",j=e.autoVersion||H&&Z;if(H&&!j&&R.info(P.dim(` Skipping Google Play versionCode lookup for ${e.distribution||"non-store"} build. Pass --auto-version to force it.`)),j){t.start("Resolving latest versionCode from Google Play...");try{let k=e.androidPackage||c.android?.package||c.expo?.android?.package||c.name,V=(_.data.credentials||[]).find(ee=>ee.type==="google_service_account"&&(!ee.bundleId||ee.bundleId===k));if(!V){let W=((await T.get(`/credentials/${i}`)).data.credentials||[]).filter(q=>q.type==="google_service_account");if(V=W.find(q=>q.type==="google_service_account"&&q.bundleId===k),!V&&W.length>0){let q=W.map(ce=>ce.bundleId).filter(Boolean).join(", ");throw new Error(`Google Service Account not found for package ${k}. Found service credential(s) for: ${q}.`)}}if(!V)throw new Error(`Google Service Account not found for package ${k}. Upload it under this package in Dashboard or run '${m.nameLower} credentials:service --platform android --package-name ${k}'.`);let ae=await xs(V,i),pe=fp(ae,"Google Play service account");if(!pe.client_email||!pe.private_key)throw new Error("Google Play service account JSON is missing client_email or private_key.");let z=await Ro(k,pe);if(z==null)throw new Error("Could not retrieve any version information from Google Play.");let G=z+1;a.ANDROID_VERSION_CODE=G.toString(),t.stop(`\u2713 Resolved versionCode: ${P.green(G)} (Latest on Play Store: ${z})`)}catch(k){t.stop("Version resolution failed");let V=k.response?.data?.error?.message||k.message,ae=mp(V)?"This looks like a temporary network error while contacting Mach or Google Play. Retry the command, or build and submit as separate steps if it continues.":'Fix Google Play service account permissions or remove android.versionCode="auto".';throw new Error(`Auto-versioning failed: ${V}. ${ae}`)}}}if(e.platform==="ios"&&!e.simulator){let O=!!a.IOS_DIST_P12,h=!!a.IOS_PROVISIONING_PROFILE;if(!O||!h){let M=[...O?[]:["Distribution Certificate"],...h?[]:["Provisioning Profile"]].join(" and ");if(e.local&&e.buildId)throw new Error(`Missing iOS credentials: ${M}. Expected ${D} credentials for ${I||"the selected bundle ID"}. Run \`${m.nameLower} credentials --platform ios --profile ${g}\` and select ${I||"the correct bundle ID"}.`);R.error(P.red(`Missing iOS credentials: ${M}`)),e.quiet&&process.exit(1);let U=e.yes||await Ds({message:"Would you like to generate these credentials now?",initialValue:!0});if(U&&!Wn(U))return await rn({platform:"ios",profile:g}),e.quiet||R.info(P.green("\u2713 Credentials setup complete! Restarting build phase...")),Yn(e);e.quiet||R.info(P.yellow(`Run \`${m.nameLower} credentials\` to set up signing credentials manually.`)),process.exit(1)}}if(e.platform==="android"&&!e.developmentClient&&(e.distribution==="internal"||e.distribution==="store")&&!(!!a.ANDROID_KEYSTORE_BASE64||!!a.ANDROID_KEYSTORE)){R.error(P.red("Missing Android credentials: Signing Keystore")),e.quiet&&process.exit(1);let h=e.yes||await Ds({message:"Would you like to automatically create and upload an Android Keystore for this profile now?",initialValue:!0});if(h&&!Wn(h))return await rn({platform:"android",profile:g}),e.quiet||R.info(P.green("\u2713 Android Keystore setup complete! Restarting build phase...")),Yn(e);e.quiet||R.info(P.yellow(`Run \`${m.nameLower} credentials --platform android\` to set up a signing keystore manually.`)),process.exit(1)}}catch(D){(String(D.message||"").startsWith("Credential download failed")||String(D.message||"").startsWith("Credential setup failed")||String(D.message||"").startsWith("Missing iOS credentials")||String(D.message||"").startsWith("Auto-versioning failed"))&&(R.error(P.red(D.message)),process.exit(1)),e.platform==="ios"&&e.local&&e.buildId&&(R.error(P.red(`Failed to resolve iOS credentials: ${D.message}`)),process.exit(1)),R.warn(`Failed to resolve credentials: ${D.message}`)}}let x=!!(e.local&&e.buildId),E=!!(e.local||e.sshHost),F=!E&&!x;if(x){R.info(P.magenta("\u{1F3D7}\uFE0F Runner Mode: Executing isolated build task..."));let D=await zi({...e,interactive:!1},n,a,i,{branch:p,version:f,summary:b,buildType:y});await X(D),process.exit(0)}async function X(D){let I=async N=>{if(i)try{await Kn("Report failed build status",()=>T.patch(`/builds/${i}/${n}`,{status:"failed",error:N,endTime:Date.now()}),3)}catch(_){R.warn(P.yellow(`Could not report failed build status: ${_.message}`))}};if(i&&D.length>0){let N=Sr(),_=[];e.quiet||N.start("Uploading artifacts to Dashboard...");try{for(let O of D){let h=he.basename(O),M=ue.statSync(O).size,U=he.extname(h).toLowerCase(),H="application/octet-stream",Z=await Kn(`Create artifact upload URL for ${h}`,()=>T.post(`/builds/${i}/${n}/artifact-upload-url`,{fileName:h,fileType:H}));if(Z.data.status!=="success")throw new Error(`Failed to get upload URL for ${h}`);await dp(O,Z.data.uploadUrl,H),_.push({name:h,url:Z.data.downloadUrl,size:M,type:U.substring(1)})}e.quiet||N.stop("Artifacts uploaded.")}catch(O){e.quiet||N.stop("Failed to upload artifacts.");let h=`Artifact upload failed: ${O.message}`;throw R.error(P.red(h)),await I(h),new Error(h)}if(i&&_.length>0)try{R.info(P.cyan(`
|
|
1475
|
+
\u{1F517} Download Links:`));for(let O of _)R.info(P.dim(` - ${O.name}: `)+P.blue.underline(O.url));await Kn("Finalize build in dashboard",()=>T.patch(`/builds/${i}/${n}`,{status:"success",artifacts:_,endTime:Date.now()})),qn(e,{status:"success",projectId:i,buildId:n,platform:e.platform,profile:g,branch:p,version:f,buildType:y,developmentClient:!!e.developmentClient,summary:b,artifacts:_}),R.success(P.green(`
|
|
1476
|
+
\u2713 Build completed and reported to dashboard.`)),e.maestro&&!x&&await js(i,n,e,g),e.autoSubmit&&!x&&await yr(i,n,e,g)}catch(O){let h=`Build artifact uploaded but dashboard finalization failed: ${O.message}`;throw R.error(P.red(`
|
|
1477
|
+
${h}`)),await I(h),new Error(h)}}else if(i){let N="Build completed but produced no uploadable artifacts.";throw R.error(P.red(N)),await I(N),new Error(N)}}if(E){if(R.info(P.cyan(`\u{1F680} Direct Build Mode: Executing on ${e.sshHost||"local"}...`)),i&&!o){let D=process.argv.slice(3).join(" ");await T.post("/builds",{projectId:i,buildId:n,platform:e.platform,status:"building",branch:p,version:f,summary:b,startTime:r,buildType:y,buildProfile:g,buildArgs:D,framework:e.framework,simulator:!!e.simulator,developmentClient:!!e.developmentClient,...Gs(e,n,g,u)}),Ks(e)}if(e.sshHost&&e.platform==="ios")await $o(e,n,a,i),e.autoSubmit&&await yr(i,n,e,g);else{let D=await zi({...e,interactive:!!e.local},n,a,i,{branch:p,version:f,summary:b,buildType:y});await X(D)}return}if(F&&(R.info(P.blue("\u{1F6F0}\uFE0F Cloud Initiator Mode: Preparing orchestration...")),!e.dryRun)){e.quiet||t.start("Zipping and uploading local source...");let D=await T.post("/builds/source-upload-url",{projectId:i,buildId:n});if(D.data.status!=="success")throw t.stop("Failed to get upload URL."),new Error("Failed to get source upload URL from API");br("SOURCE_UPLOAD",D.data.uploadUrl);let I=new Cs,N=ep(I,process.cwd(),e.platform),_=I.toBuffer();if(!e.quiet){let h=N.skipped.length>0?` Skipped: ${N.skipped.join(", ")}.`:"";t.message(`Prepared source (${N.files} files).${h}`)}e.quiet||t.message(`Uploading source (${(_.length/1024/1024).toFixed(1)} MB)...`);let O=!1;for(let h=1;h<=3;h++)try{await zn.put(D.data.uploadUrl,_,{headers:{"Content-Type":"application/zip"},maxBodyLength:1/0,maxContentLength:1/0,timeout:12e4}),O=!0;break}catch(M){if(h<3)t.message(`Upload attempt ${h} failed (${M.code||M.message}), retrying...`),await new Promise(U=>setTimeout(U,2e3*h));else throw M}if(e.quiet||t.stop("Source uploaded"),i){let h=process.argv.slice(3).join(" ");await T.post("/builds",{projectId:i,buildId:n,platform:e.platform,status:"pending",branch:p,version:f,summary:b,startTime:r,buildType:y,buildProfile:g,buildArgs:h,framework:e.framework,simulator:!!e.simulator,developmentClient:!!e.developmentClient,...Gs(e,n,g,u)}),R.info(P.green("\u2713 Cloud build registered.")),Ks(e)}e.platform==="android"&&await Io(e,n,a,i,e.preBuild),e.quiet||R.info(P.cyan("\u{1F4E1} Connecting to build stream...")),await Rp(i,n,e),e.maestro&&await js(i,n,e,g),e.autoSubmit&&await yr(i,n,e,g);return}}catch(l){let a=l.message||"Build failed";l.response?.data?.message?a=l.response.data.message:l.message.includes("status code 402")?a="Insufficient wallet balance. Please add credits in the Dashboard.":l.message.includes("status code 403")&&(a="Monthly build quota exceeded. Upgrade your plan in the Dashboard."),i&&await s(a),R.error(P.red(`\u2717 Build failed: ${a}`)),process.exit(1)}};async function js(e,t,n,i){R.info(P.cyan(`
|
|
1478
|
+
\u{1F3BC} Queuing managed Maestro test...`)),await er({projectId:e,buildId:t,platform:n.platform,profile:i,maestroFlows:n.maestroFlows,maestroDevice:n.maestroDevice,maestroRetries:n.maestroRetries,maestroRecord:n.maestroRecord,maestroUseBuildSource:n.maestroUseBuildSource,maestroEnv:n.maestroEnv,quiet:n.quiet})}async function yr(e,t,n,i){if(!e){R.error(P.red("Auto-submit requires a linked Mach project. Run `mach link` or pass --project-id.")),process.exitCode=1;return}R.info(P.cyan(`
|
|
1479
|
+
Auto-submit: submitting the successful build...`));try{let r=await $p(e,t);if(r?.autoSubmit){let o=r.submissionId?`${nt}/submissions/${r.submissionId}?projectId=${encodeURIComponent(e)}`:void 0,s=String(r.status||"").toLowerCase(),l=String(r.autoSubmitStatus||"").toLowerCase(),a=r.submissionId||["success","completed","succeeded"].includes(s)||["starting","submitted","failed","skipped"].includes(l);if(r.submissionId?(R.info(P.green(`Auto-submit is already queued by Mach backend: ${r.submissionId}`)),R.info(P.dim(`Dashboard: ${o}`))):r.autoSubmitStatus==="failed"?R.warn(P.yellow(`Backend auto-submit failed: ${r.autoSubmitError||"Unknown error"}`)):a&&R.info(P.green("Auto-submit is registered with Mach backend; skipping local duplicate submit.")),a){St(n,{status:r.autoSubmitStatus||"pending",projectId:e,submitId:r.submissionId,platform:n.platform,profile:i,buildId:t,dashboardUrl:o});return}}await Gn({platform:n.platform,profile:i,buildProfile:i,buildId:t,projectId:e,yes:n.yes,quiet:n.quiet,track:n.submitTrack,releaseStatus:n.submitReleaseStatus,rollout:n.submitRollout,changesNotSentForReview:n.submitChangesNotSentForReview,credentialId:n.submitCredentialId,packageName:n.androidPackage,jsonOutput:n.submitJsonOutput,submitArgs:Qs(n,t,i)})}catch(r){R.error(P.red(`Auto-submit failed: ${r.message||r}`)),process.exitCode=1}}function Qs(e,t,n){let i=["--platform",e.platform,"--profile",n,"--build-id",t];return e.submitTrack&&i.push("--track",String(e.submitTrack)),e.submitReleaseStatus&&i.push("--release-status",String(e.submitReleaseStatus)),e.submitRollout!==void 0&&i.push("--rollout",String(e.submitRollout)),e.submitChangesNotSentForReview&&i.push("--changes-not-sent-for-review"),e.submitCredentialId&&i.push("--credential-id",e.submitCredentialId),e.platform==="android"&&e.androidPackage&&i.push("--package-name",e.androidPackage),e.platform==="ios"&&e.iosBundleIdentifier&&i.push("--bundle-id",e.iosBundleIdentifier),e.submitJsonOutput&&i.push("--json-output",e.submitJsonOutput),i.join(" ")}async function $p(e,t){try{let i=(await T.get(`/builds/${e}/${t}`)).data?.build;if(i?.autoSubmit)return i}catch(n){R.warn(P.dim(`Could not check backend auto-submit status: ${n.message}`))}return null}function ea(e){for(let t of Object.keys(e))e[t]===void 0&&delete e[t];return e}function vp(e,t,n){let i=n?.submit?.[t]?.android||{},r=n?.submit?.production?.android||{},o=e.submitTrack||i.track||r.track,s=e.submitReleaseStatus||i.releaseStatus||r.releaseStatus,l=e.submitRollout??i.rollout??i.userFraction??i.rolloutFraction??r.rollout??r.userFraction??r.rolloutFraction,a=e.submitChangesNotSentForReview??i.changesNotSentForReview??i.changes_not_sent_for_review??r.changesNotSentForReview??r.changes_not_sent_for_review;return ea({track:o,releaseStatus:s,rollout:l,changesNotSentForReview:a===void 0?!1:a===!0||a==="true"||a==="1"})}function Gs(e,t,n,i){if(!e.autoSubmit||e.dryRun)return{};let r=e.platform==="android"?vp(e,n,i):{};return{autoSubmit:!0,autoSubmitStatus:"pending",autoSubmitOptions:ea({platform:e.platform,profile:n,buildId:t,latest:!1,...r,credentialId:e.submitCredentialId,packageName:e.platform==="android"?e.androidPackage:void 0,bundleId:e.platform==="ios"?e.iosBundleIdentifier:void 0,submitArgs:Qs(e,t,n)})}}function Ks(e){!e.autoSubmit||e.dryRun||e.quiet||(R.info(P.green("\u2713 Auto-submit has been registered with the build.")),R.info(P.dim(" You can close this terminal; submission will start after build success.")))}function Vs(e){return`${nt}/build/${e}`}function qn(e,t){if(!e.jsonOutput)return;let n=he.resolve(e.jsonOutput),i={...t,url:t.url||Vs(t.buildId),dashboardUrl:t.dashboardUrl||Vs(t.buildId),updatedAt:new Date().toISOString()};try{let r=he.dirname(n);r&&r!=="."&&ue.mkdirSync(r,{recursive:!0}),ue.writeFileSync(n,JSON.stringify(i,null,2))}catch(r){R.warn(P.yellow(`Could not write build metadata JSON: ${r.message}`))}}async function Rp(e,t,n){let i=Sr(),r="pending",o=0,s=0;for(n.quiet||i.start("Connecting to build stream...");;){try{let a=(await T.get(`/builds/${e}/${t}`)).data.build;if(a){if(r=a.status,r==="building")n.quiet||i.message("Build in progress...");else if(r==="failed")n.quiet||i.stop("Build failed."),qn(n,{status:"failed",projectId:e,buildId:t,platform:n.platform,profile:a.buildProfile,buildType:a.buildType,developmentClient:!!a.developmentClient,version:a.version,summary:a.summary,error:a.error||"Unknown error",artifacts:a.artifacts||[]}),R.error(P.red(`
|
|
1480
|
+
\u2717 Build failed: ${a.error||"Unknown error"}`)),process.exit(1);else if(r==="completed"||r==="success"){n.quiet||i.stop("Build successful!"),qn(n,{status:r,projectId:e,buildId:t,platform:n.platform,profile:a.buildProfile,buildType:a.buildType,developmentClient:!!a.developmentClient,version:a.version,summary:a.summary,artifacts:a.artifacts||[]}),R.success(P.green(`
|
|
1481
|
+
\u2713 Build completed successfully!`));try{n.quiet||(R.info(P.magenta(`
|
|
1482
|
+
\u{1F4F1} Installation Hub:`)),R.info(P.dim(" - View & Install Build: ")+P.white.underline(`${nt}/build/${t}`)))}catch{}return}else if(r!=="pending"){n.quiet||i.stop(`Build status: ${r}`);return}}try{let u=(await T.get(`/builds/${e}/${t}/logs`)).data;if(u&&typeof u=="string"&&!n.quiet){let c=u.split(`
|
|
1483
|
+
`);if(c.length>o){for(let p=o;p<c.length;p++)c[p].trim()&&console.log(P.dim(` ${c[p]}`));o=c.length}}}catch{}s=0}catch{s++,s>10&&(i.stop("Connection lost."),R.error(P.red(`
|
|
1484
|
+
\u2717 Lost connection to Dashboard API.`)),process.exit(1))}await new Promise(l=>setTimeout(l,3e3))}}import*as ni from"http";import*as aa from"net";import{execFile as Dp,execFileSync as It,execSync as Qn,spawn as ta}from"child_process";import fe from"chalk";import{log as te}from"@clack/prompts";import Pp from"axios";import le from"fs";import Ye from"os";import Q from"path";var mt=7070,gn=`http://127.0.0.1:${mt}`,Yt="com.radhya.mach.agent",Jt="Mach Agent",qt=`${Yt}.service`,Op=5e3,Cp=3e3,Xn=null,Zn=null,qe=()=>Q.join(Ye.homedir(),m.configDir),la=()=>Q.join(Ye.homedir(),"Library","LaunchAgents"),ei=()=>Q.join(la(),`${Yt}.plist`),ca=()=>Q.join(Ye.homedir(),".config","systemd","user"),Er=()=>Q.join(ca(),qt),Ir=()=>Q.join(qe(),"agent.cmd");function wr(){return`gui/${process.getuid?.()||Number(Qn("id -u").toString().trim())}`}function da(e){return e.replace(/&/g,"&").replace(/</g,"<").replace(/>/g,">").replace(/"/g,""").replace(/'/g,"'")}function mn(e){return`<string>${da(e)}</string>`}function _r(){let e=process.argv[1]?le.realpathSync(process.argv[1]):"";if(!e||!le.existsSync(e))throw new Error("Could not resolve the current Mach CLI entrypoint.");return[process.execPath,e,"agent","run"]}function $r(){let e=ua(),t=process.platform==="win32"?[process.env.SystemRoot?Q.join(process.env.SystemRoot,"System32"):void 0,process.env.SystemRoot]:["/opt/homebrew/bin","/usr/local/bin","/usr/bin","/bin","/usr/sbin","/sbin"],n={HOME:Ye.homedir(),PATH:[process.env.PATH,...e.flatMap(i=>[Q.join(i,"platform-tools"),Q.join(i,"emulator"),Q.join(i,"cmdline-tools","latest","bin"),Q.join(i,"tools","bin")]),...t].filter(Boolean).join(Q.delimiter)};for(let i of["ANDROID_HOME","ANDROID_SDK_ROOT","JAVA_HOME","SHELL"])process.env[i]&&(n[i]=process.env[i]);return n}function ua(){let e=[process.env.ANDROID_HOME,process.env.ANDROID_SDK_ROOT];if(process.platform==="darwin")e.push(Q.join(Ye.homedir(),"Library","Android","sdk"));else if(process.platform==="linux")e.push(Q.join(Ye.homedir(),"Android","Sdk"),Q.join(Ye.homedir(),"Android","sdk"),"/opt/android-sdk","/usr/lib/android-sdk");else if(process.platform==="win32"){let t=process.env.LOCALAPPDATA,n=process.env.USERPROFILE||Ye.homedir();e.push(t?Q.join(t,"Android","Sdk"):void 0,Q.join(n,"AppData","Local","Android","Sdk"))}return Array.from(new Set(e.filter(t=>!!t)))}function kp(e){return process.platform==="win32"&&!e.toLowerCase().endsWith(".exe")?`${e}.exe`:e}function pa(e,t){let n=kp(e);for(let i of ua()){let r=Q.join(i,t,n);if(le.existsSync(r))return r}return n}function fa(){return pa("adb","platform-tools")}function ma(){return pa("emulator","emulator")}function Ar(e){return`"${e.replace(/\\/g,"\\\\").replace(/"/g,'\\"').replace(/%/g,"%%")}"`}function Np(){if(process.platform!=="linux")throw new Error("Linux service install requires Linux.");le.mkdirSync(qe(),{recursive:!0}),le.mkdirSync(ca(),{recursive:!0});let e=_r(),t=$r(),n=Object.entries(t).map(([r,o])=>`Environment=${Ar(`${r}=${o}`)}`).join(`
|
|
1485
1485
|
`),i=`[Unit]
|
|
1486
1486
|
Description=Mach local device agent
|
|
1487
1487
|
After=default.target
|
|
1488
1488
|
|
|
1489
1489
|
[Service]
|
|
1490
1490
|
Type=simple
|
|
1491
|
-
ExecStart=${e.map(
|
|
1492
|
-
WorkingDirectory=${
|
|
1491
|
+
ExecStart=${e.map(Ar).join(" ")}
|
|
1492
|
+
WorkingDirectory=${Ar(Ye.homedir())}
|
|
1493
1493
|
${n}
|
|
1494
1494
|
Restart=on-failure
|
|
1495
1495
|
RestartSec=5
|
|
@@ -1498,20 +1498,20 @@ StandardError=append:%h/${m.configDir}/agent.error.log
|
|
|
1498
1498
|
|
|
1499
1499
|
[Install]
|
|
1500
1500
|
WantedBy=default.target
|
|
1501
|
-
`;return
|
|
1501
|
+
`;return le.writeFileSync(Er(),i),Er()}function Et(e,t={}){try{return It("systemctl",["--user",...e],{stdio:t.ignoreError?"ignore":"pipe"}),!0}catch(n){if(t.ignoreError)return!1;throw n}}function Tp(){if(process.platform!=="win32")throw new Error("Windows agent script requires Windows.");le.mkdirSync(qe(),{recursive:!0});let e=$r(),[t,n,...i]=_r(),r=Q.join(qe(),"agent.log"),o=Q.join(qe(),"agent.error.log"),s=Object.entries(e).map(([d,u])=>`set "${d}=${u}"`).join(`\r
|
|
1502
1502
|
`),l=i.map(d=>`"${d.replace(/"/g,'\\"')}"`).join(" "),a=`@echo off\r
|
|
1503
1503
|
${s}\r
|
|
1504
|
-
cd /d "${
|
|
1504
|
+
cd /d "${Ye.homedir()}"\r
|
|
1505
1505
|
"${t}" "${n}" ${l} >> "${r}" 2>> "${o}"\r
|
|
1506
|
-
`;return
|
|
1507
|
-
${
|
|
1508
|
-
`),o=e.map(l=>` ${
|
|
1506
|
+
`;return le.writeFileSync(Ir(),a),Ir()}function hn(e,t={}){try{return It("schtasks.exe",e,{stdio:t.ignoreError?"ignore":"pipe"}),!0}catch(n){if(t.ignoreError)return!1;throw n}}function xp(){if(process.platform!=="darwin")throw new Error("Background agent install currently supports macOS only.");le.mkdirSync(qe(),{recursive:!0}),le.mkdirSync(la(),{recursive:!0});let e=_r(),t=$r(),n=Q.join(qe(),"agent.log"),i=Q.join(qe(),"agent.error.log"),r=Object.entries(t).map(([l,a])=>` <key>${da(l)}</key>
|
|
1507
|
+
${mn(a)}`).join(`
|
|
1508
|
+
`),o=e.map(l=>` ${mn(l)}`).join(`
|
|
1509
1509
|
`),s=`<?xml version="1.0" encoding="UTF-8"?>
|
|
1510
1510
|
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
|
|
1511
1511
|
<plist version="1.0">
|
|
1512
1512
|
<dict>
|
|
1513
1513
|
<key>Label</key>
|
|
1514
|
-
${
|
|
1514
|
+
${mn(Yt)}
|
|
1515
1515
|
<key>ProgramArguments</key>
|
|
1516
1516
|
<array>
|
|
1517
1517
|
${o}
|
|
@@ -1523,28 +1523,157 @@ ${r}
|
|
|
1523
1523
|
<key>RunAtLoad</key>
|
|
1524
1524
|
<true/>
|
|
1525
1525
|
<key>StandardOutPath</key>
|
|
1526
|
-
${
|
|
1526
|
+
${mn(n)}
|
|
1527
1527
|
<key>StandardErrorPath</key>
|
|
1528
|
-
${
|
|
1528
|
+
${mn(i)}
|
|
1529
1529
|
</dict>
|
|
1530
1530
|
</plist>
|
|
1531
|
-
`;return
|
|
1532
|
-
`).forEach(n=>{if(n.includes("List of devices")||!n.trim())return;let i=n.split(/\s+/);if(i.length<2||i[1]!=="device")return;let r=i[0],o=n.match(/model:([^\s]+)/);e.push({id:r,platform:"android",type:r.startsWith("emulator-")?"emulator":"physical",name:o?o[1].replace(/_/g," "):r,status:"online",details:n.trim()})})}catch{}try{let n=(await
|
|
1533
|
-
`).filter(r=>!!r.trim()),i=e.some(r=>r.platform==="android"&&r.id.startsWith("emulator-"));n.forEach(r=>{i||e.push({id:r,platform:"android",type:"emulator",name:r.replace(/_/g," "),status:"offline",details:`Android Virtual Device: ${r}`})})}catch{}return e}async function Cs(){if(process.platform!=="darwin")return[];try{let e=await Ln("/usr/bin/xcrun",["simctl","list","devices","--json"]),t=JSON.parse(e),n=[];return Object.entries(t.devices||{}).forEach(([i,r])=>{r.forEach(o=>{o.isAvailable&&n.push({id:o.udid,platform:"ios",type:"simulator",name:o.name,status:o.state?.toLowerCase()==="booted"?"online":"offline",runtime:i,details:`${o.name} (${i})`})})}),n}catch{return[]}}async function Mu(){if(process.platform!=="darwin")return[];try{let e=await Ln("/usr/bin/xcrun",["devicectl","list","devices","--json-output","-"]);return(JSON.parse(e).result?.devices||[]).filter(n=>{let i=n.connectionProperties?.transportType;return i==="wired"||i==="localNetwork"}).map(n=>{let i=n.connectionProperties?.transportType,r=n.deviceProperties?.name||"iPhone";return{id:n.identifier,platform:"ios",type:"physical",name:r,status:"online",details:`${r} (${n.model?.name||n.hardwareModel||""}) - ${i}`}})}catch{return[]}}async function Uu(e){let t=await Cs(),n=t.find(r=>r.id===e);if(n)return n;let i=t.filter(r=>r.status==="online");return i.length===1?i[0]:null}async function Fu(){let[e,t,n]=await Promise.all([xu(),Cs(),Mu()]);return[...e,...t,...n]}async function Bu(){let e=Date.now();return Cn&&e-Cn.updatedAt<Eu?Cn.targets:(Nn||(Nn=Fu().then(t=>(Cn={targets:t,updatedAt:Date.now()},t)).finally(()=>{Nn=null})),Nn)}async function hs(e){let t=[];for await(let n of e)t.push(Buffer.isBuffer(n)?n:Buffer.from(n));return t.length===0?{}:JSON.parse(Buffer.concat(t).toString("utf-8"))}async function Hu(e,t){let n=await yu({method:"GET",url:e,responseType:"stream",timeout:12e4}),i=ae.createWriteStream(t);n.data.pipe(i),await new Promise((r,o)=>{i.on("finish",r),i.on("error",o)})}function Ss(e,t){let n=e?.stderr?.toString?.().trim();if(n)return n;let i=e?.stdout?.toString?.().trim();return i||e?.message||t}function ju(e,t){return mt("/usr/libexec/PlistBuddy",["-c",`Print :${t}`,e],{encoding:"utf-8"}).trim()}function Gu(e){let t=Z.join(e,"Info.plist");if(!ae.existsSync(t))throw new Error(`Could not validate iOS app executable: ${t} not found.`);let n=ju(t,"CFBundleExecutable"),i=Z.join(e,n);if(!ae.existsSync(i))throw new Error(`Could not validate iOS app executable: ${i} not found.`);return i}function Ku(){return process.arch==="arm64"?"arm64":"x86_64"}function Vu(e){return ae.existsSync(e)?ae.readdirSync(e).map(t=>Z.join(e,t)).filter(t=>t.endsWith(".app")&&ae.statSync(t).isDirectory()):[]}function ys(e,t){let n=Vu(e);if(n.length===1)return n[0];if(n.length>1)throw new Error(`Multiple .app bundles found in ${t}: ${n.map(i=>Z.basename(i)).join(", ")}. Mach cannot safely choose which app to install.`);return""}function zu(e){let t=Gu(e),n=Ku(),i="",r="";try{i=mt("lipo",["-info",t],{encoding:"utf-8"}).trim()}catch(o){throw new Error(`Could not inspect iOS simulator app architecture for ${Z.basename(e)}: ${o.message}`)}if(!new RegExp(`\\b${n}\\b`).test(i))throw new Error(`This iOS simulator artifact cannot be installed because ${Z.basename(e)} does not include the ${n} simulator architecture. lipo output: ${i}. Rebuild the app with the latest Mach CLI and make sure the profile is a simulator build.`);try{r=mt("/usr/bin/xcrun",["vtool","-show-build",t],{encoding:"utf-8"}).trim()}catch(o){throw new Error(`Could not inspect iOS simulator app platform for ${Z.basename(e)}: ${o.message}`)}if(!/\bplatform\s+IOSSIMULATOR\b/i.test(r))throw new Error(`This iOS simulator artifact cannot be installed because ${Z.basename(e)} was built for the wrong Apple platform. A simulator artifact must contain platform IOSSIMULATOR. vtool output: ${r}. Rebuild the app with the latest Mach CLI.`)}async function Wu(e,t,n){let i=n||(t.toLowerCase().includes(".apk")?"android":"ios"),r=t.toLowerCase().includes(".ipa"),o=ae.mkdtempSync(Z.join(Ke.tmpdir(),`${st}-install-`)),s=Z.join(o,i==="android"?"install.apk":r?"install.ipa":"install.zip");try{if(await Hu(t,s),i==="android"){mt(Rs(),["-s",e,"install","-r",s],{stdio:"pipe"});return}if(process.platform!=="darwin")throw new Error("iOS local install requires macOS.");Tn(`unzip -o ${JSON.stringify(s)} -d ${JSON.stringify(o)}`,{stdio:"pipe"});let l=Z.join(o,"Payload"),a=ae.existsSync(l),d=r||a,u="";if(d?u=ys(l,"Payload"):u=ys(o,"the simulator artifact"),!u)throw new Error(`No .app bundle found inside the ${r?"IPA":"archive"}.`);let c=d?null:await Uu(e);if(c){try{zu(u),mt("/usr/bin/xcrun",["simctl","install",c.id,u],{stdio:"pipe"})}catch(f){throw new Error(Ss(f,"iOS Simulator install failed."))}return}if(!d)throw new Error("Selected iOS Simulator was not found. Refresh Install Hub devices or boot one simulator and try again.");try{Tn(`/usr/bin/xcrun devicectl device install app --device ${JSON.stringify(e)} ${JSON.stringify(u)}`,{stdio:"pipe"})}catch(f){throw new Error(Ss(f,"iOS device install failed."))}}finally{ae.rmSync(o,{recursive:!0,force:!0})}}function Yu(e,t){if(!e)throw new Error("Device id is required.");if(t==="ios"){if(process.platform!=="darwin")throw new Error("iOS Simulator launch requires macOS.");return Tn(`/usr/bin/xcrun simctl boot ${JSON.stringify(e)}`,{stdio:"pipe"}),fs("open",["-a","Simulator"],{detached:!0,stdio:"ignore"}).unref(),"Simulator booting..."}if(t==="android")return fs($s(),["-avd",e],{detached:!0,stdio:"ignore",windowsHide:!0}).unref(),"Emulator booting in background...";throw new Error("Invalid platform.")}async function Ju(){process.platform!=="darwin"&&ee.warn("Running on non-macOS \u2014 iOS discovery unavailable, Android only.");let e=xn.createServer((i,r)=>{if(r.setHeader("Access-Control-Allow-Origin","*"),r.setHeader("Access-Control-Allow-Methods","GET, POST, OPTIONS"),r.setHeader("Access-Control-Allow-Headers","Content-Type, Authorization"),i.method==="OPTIONS"){r.writeHead(204),r.end();return}let o=new URL(i.url||"/",`http://localhost:${st}`);if(i.method==="GET"&&o.pathname==="/local/devices"){Bu().then(s=>{r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",targets:s}))}).catch(s=>{r.writeHead(500,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:s.message}))});return}if(i.method==="GET"&&o.pathname==="/health"){r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",service:"mach-agent",port:st,platform:process.platform}));return}if(i.method==="POST"&&o.pathname==="/install-local"){t(i,r);return}if(i.method==="POST"&&o.pathname==="/local/boot"){n(i,r);return}r.writeHead(404),r.end()}),t=async(i,r)=>{try{let{deviceId:o,artifactUrl:s,platform:l}=await hs(i);if(!o||!s){r.writeHead(400,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:"deviceId and artifactUrl are required"}));return}await Wu(o,s,l),r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",message:`Installed on ${o}`}))}catch(o){r.writeHead(500,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:o.message||"Local install failed"}))}},n=async(i,r)=>{try{let{id:o,platform:s}=await hs(i),l=Yu(o,s);r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",message:l}))}catch(o){r.writeHead(500,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:o.message||"Local device launch failed"}))}};e.listen(st,"127.0.0.1",()=>{ee.success(pe.green(`Local device agent running on http://localhost:${st}`)),ee.info(pe.dim("Keep this running while using the Install Hub on the dashboard.")),ee.info(pe.dim("Press Ctrl+C to stop."))}),e.on("error",i=>{i.code==="EADDRINUSE"?ee.error(`Port ${st} is already in use \u2014 agent may already be running.`):ee.error(`Agent error: ${i.message}`),process.exit(1)}),await new Promise(()=>{})}async function Ns(e="start"){let t=String(e||"start").toLowerCase();if(t==="start"||t==="run"){await Ju();return}if(t==="install"){await ms();return}if(t==="status"){await Lu();return}if(t==="stop"){await gs();return}if(t==="uninstall"){await ku();return}if(t==="restart"){await gs(),await ms();return}ee.error(`Unknown agent action: ${e}`),ee.info(pe.dim(`Use: ${m.nameLower} agent start | install | status | restart | stop | uninstall`)),process.exit(1)}import{createRequire as $f}from"module";import{text as qu,password as Zu,spinner as Qu,isCancel as Ls}from"@clack/prompts";import Zi from"chalk";import en from"fs";import Ts from"path";import Xu from"os";var Ji=Ts.join(Xu.homedir(),m.configDir),Xi=Ts.join(Ji,"config.json");function qi(){if(!en.existsSync(Xi))return{};try{return JSON.parse(en.readFileSync(Xi,"utf-8"))}catch{return{}}}function ks(e){en.existsSync(Ji)||en.mkdirSync(Ji,{recursive:!0});let n={...qi(),...e};en.writeFileSync(Xi,JSON.stringify(n,null,2))}async function xs(){let e=qi(),t=await qu({message:"Enter your email:",placeholder:"user@example.com",initialValue:e.lastLoginEmail,validate(r){if(r.length===0)return"Email is required!"}});if(Ls(t))return;let n=await Zu({message:"Enter your password:",validate(r){if(r.length===0)return"Password is required!"}});if(Ls(n))return;let i=Qu();i.start("Authenticating...");try{let o=await(await fetch(`${vt}/login`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({username:t,password:n})})).json();o.status==="success"&&o.user.token?(pr({id:o.user.id,email:t,token:o.user.token,refreshToken:o.user.refreshToken}),ks({lastLoginEmail:t}),i.stop(Zi.green("Login successful!"))):i.stop(Zi.red("Login failed: "+(o.message||"Unknown error")))}catch(r){i.stop(Zi.red("Network error: "+r.message))}}import{log as Mn,outro as ep}from"@clack/prompts";import tn from"chalk";async function Ms(){let e=fr(),t=`${m.envPrefix}TOKEN`;e?Mn.success(tn.green(`Logged out. Removed saved credentials from ~/${m.configDir}/credentials.json.`)):Mn.warn(tn.yellow(`No saved ${m.name} credentials found.`)),process.env[t]&&(Mn.warn(tn.yellow(`${t} is still set in this shell. Commands will continue to authenticate with that token until you unset it.`)),Mn.info(tn.dim(`Run: unset ${t}`))),ep(tn.blue("---"))}import{outro as tp,select as np,spinner as ip,isCancel as rp}from"@clack/prompts";import Un from"chalk";import Qi from"fs";import op from"path";var Us=e=>e==="1234567890"||e==="ABC123DEFG"||e==="XXXXXXXXXX"?"":typeof e=="string"?e:"",sp=()=>process.versions.node.split(".")[0]||"24";async function Fs(){if(!Pe()){console.log(Un.red(`You are not logged in. Run \`${m.nameLower} login\` first.`));return}let t=ip();t.start("Fetching projects...");try{let{data:n}=await k.get("/projects");if(t.stop("Projects loaded."),n.status!=="success"||!n.projects||n.projects.length===0){console.log(Un.yellow(`No projects found. Run \`${m.nameLower} init\` to create one.`));return}let i=n.projects.map(g=>({value:g.projectId,label:`${g.name} (${g.slug})`})),r=await np({message:"Select a project to link:",options:i});if(rp(r))return;let o=op.join(process.cwd(),m.configFileName),s={};if(Qi.existsSync(o))try{s=JSON.parse(Qi.readFileSync(o,"utf-8"))}catch{}let l=n.projects.find(g=>g.projectId===r),a=s.android?.package||rt("android"),d=s.ios?.bundleIdentifier||rt("ios"),u=s.android||{},c=s.submit?.production?.android||{},f=s.submit?.production?.ios||{},p={projectId:r,framework:gr(s.framework)||fn,name:l?.name,slug:l?.slug,nodeVersion:s.nodeVersion||sp(),scheme:l?.slug?.toLowerCase()||"app",android:{...u,package:a||"",versionCode:u.versionCode||"auto"},ios:{bundleIdentifier:d||"",buildNumber:s.ios?.buildNumber||"auto"},build:{development:{environment:"development",distribution:"development"},staging:{environment:"staging",distribution:"internal"},production:{environment:"production",distribution:"store"}},submit:{production:{android:{...c,track:c.track||"internal",releaseStatus:c.releaseStatus||"completed"},ios:{ascAppId:Us(f.ascAppId),appleTeamId:Us(f.appleTeamId)}}}};Qi.writeFileSync(o,JSON.stringify(p,null,2)),tp(Un.green(`Linked to project ${p.name} (${p.slug})`))}catch(n){t.stop(Un.red("Error fetching projects: "+n.message))}}import{outro as ap,text as Fn,select as lp,spinner as cp,isCancel as nn}from"@clack/prompts";import rn from"chalk";import dp from"fs";import up from"path";import{randomUUID as pp}from"crypto";var fp=()=>process.versions.node.split(".")[0]||"24";async function Bs(){if(!Pe()){console.log(rn.red(`You are not logged in. Run \`${m.nameLower} login\` first.`));return}let t=await Fn({message:"Project Name:",placeholder:"My Awesome App",validate(l){if(l.length===0)return"Name is required!"}});if(nn(t))return;let n=await Fn({message:"Project Slug (URL friendly):",placeholder:"my-awesome-app",validate(l){if(l.length===0)return"Slug is required!";if(!/^[a-z0-9-]+$/.test(l))return"Slug must be lowercase alphanumeric with dashes."}});if(nn(n))return;let i=await lp({message:"Platform:",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"},{value:"web",label:"Web"},{value:"all",label:"All Platforms"}]});if(nn(i))return;let r="";if(i==="android"||i==="all"){let l=rt("android");if(r=await Fn({message:"Android Package Name:",initialValue:l||"",placeholder:"com.example.app",validate(a){if(a.length===0)return"Package name is required for Android!"}}),nn(r))return}let o="";if(i==="ios"||i==="all"){let l=rt("ios");if(o=await Fn({message:"iOS Bundle Identifier:",initialValue:l||"",placeholder:"com.example.app",validate(a){if(a.length===0)return"Bundle ID is required for iOS!"}}),nn(o))return}let s=cp();s.start("Creating project...");try{let l=pp(),d={projectId:l,name:t,slug:n,storageType:"managed",platforms:i==="all"?["android","ios","web"]:[i]},{data:u}=await k.post("/projects",d);if(u.status==="success"){s.stop(rn.green("Project created successfully!"));let c=up.join(process.cwd(),m.configFileName);dp.writeFileSync(c,JSON.stringify({projectId:l,framework:fn,name:t,slug:n,nodeVersion:fp(),...r?{android:{package:r,versionCode:"auto"}}:{},...o?{ios:{bundleIdentifier:o,buildNumber:"auto"}}:{},build:{development:{environment:"development",distribution:"development"},staging:{environment:"staging",distribution:"internal"},production:{environment:"production",distribution:"store"}},submit:{production:{android:{track:"internal",releaseStatus:"completed"},ios:{ascAppId:"",appleTeamId:""}}}},null,2)),ap(rn.green(`Initialized project ${t} and linked locally!`))}else s.stop(rn.red("creation failed: "+u.message))}catch(l){s.stop(rn.red("Network error: "+l.message))}}import{spinner as er,log as ve}from"@clack/prompts";import on from"chalk";import Bn from"fs";import Hs from"path";function tr(e,t,n,i){let r=e?.response?.status,o=e?.response?.data?.message||e?.response?.data?.error,s=i?` ${i}`:"";return r===401?`Not logged in or token expired while trying to ${n}${s}. Run \`${m.nameLower} login\` and try again.`:r===403?[`Permission denied while trying to ${n}${s}.`,o?`API says: ${o}.`:void 0,`Current Mach account/token does not have access to project ${t}.`,`Run \`${m.nameLower} login\` with the correct account, or ask a project owner to grant access.`].filter(Boolean).join(" "):r===404?[`Project or environment endpoint was not found while trying to ${n}${s}.`,`Project ID: ${t}.`,o?`API says: ${o}.`:void 0].filter(Boolean).join(" "):r?`Failed to ${n}${s}: ${o||`API returned HTTP ${r}`}`:`Network error while trying to ${n}${s}: ${e?.message||"Unknown error"}`}function mp(e){let t=String(e??"");return t===""?'""':/^[A-Za-z0-9_./:@%+-]+$/.test(t)?t:JSON.stringify(t)}function gp(e,t){return`${[`# Generated by ${m.nameLower} env pull --environment ${t}`,"# Do not commit this file.","",...Object.keys(e).sort((i,r)=>i.localeCompare(r)).map(i=>`${i}=${mp(e[i])}`)].join(`
|
|
1531
|
+
`;return le.writeFileSync(ei(),s),ei()}function At(e,t={}){try{return It("launchctl",e,{stdio:t.ignoreError?"ignore":"pipe"}),!0}catch(n){if(t.ignoreError)return!1;throw n}}function Lp(e){return new Promise(t=>setTimeout(t,e))}function ti(e,t,n=Op){return new Promise((i,r)=>{Dp(e,t,{timeout:n,maxBuffer:10*1024*1024,windowsHide:!0},(o,s,l)=>{if(o){let a=l?.toString().trim();r(new Error(a||o.message));return}i(s?.toString()||"")})})}async function ga(){if(typeof fetch=="function"){let e=new AbortController,t=setTimeout(()=>e.abort(),3e3);try{return(await fetch(`${gn}/health`,{signal:e.signal})).ok}catch{return!1}finally{clearTimeout(t)}}return new Promise(e=>{let t=!1,n=r=>{t||(t=!0,e(r))},i=ni.get(`${gn}/health`,r=>{r.resume(),n(r.statusCode===200)});i.setTimeout(3e3,()=>{i.destroy(),n(!1)}),i.on("error",()=>n(!1))})}async function Mp(e=8e3){let t=Date.now()+e;for(;Date.now()<t;){if(await ga())return!0;await Lp(250)}return!1}async function ha(){return new Promise(e=>{let t=!1,n=aa.createConnection({host:"127.0.0.1",port:mt}),i=r=>{t||(t=!0,n.destroy(),e(r))};n.setTimeout(1e3),n.once("connect",()=>i(!0)),n.once("timeout",()=>i(!1)),n.once("error",()=>i(!1))})}async function vr(){if(await Mp()){te.success(fe.green("Mach agent installed and started."));return}if(await ha()){te.warn(`Mach agent service is installed, but port ${mt} is held by a process that is not answering /health.`),te.info(fe.dim(`Run \`${m.nameLower} agent stop\`, close any foreground \`${m.nameLower} agent\` terminal, then run \`${m.nameLower} agent install\` again.`));return}te.warn(`Mach agent service is installed, but it did not start listening on ${gn}.`)}async function Up(){let e=xp(),t=wr();At(["bootout",t,e],{ignoreError:!0}),At(["bootstrap",t,e],{ignoreError:!0})||At(["load","-w",e]),At(["enable",`${t}/${Yt}`],{ignoreError:!0}),At(["kickstart","-k",`${t}/${Yt}`],{ignoreError:!0}),await vr(),te.info(fe.dim(`It will start automatically when you log in. Plist: ${e}`)),te.info(fe.dim(`Logs: ${Q.join(qe(),"agent.log")}`))}async function ya(){let e=ei(),t=wr();At(["bootout",t,e],{ignoreError:!0})||At(["unload","-w",e],{ignoreError:!0})?te.success(fe.green("Mach agent service stopped.")):te.warn("Mach agent service was not loaded.")}async function Fp(){await ya();let e=ei();le.existsSync(e)&&le.unlinkSync(e),te.success(fe.green("Mach agent service uninstalled."))}async function Bp(){let e=Np();Et(["daemon-reload"]),Et(["enable","--now",qt]),await vr(),te.info(fe.dim(`It will start automatically when you log in. Service: ${e}`)),te.info(fe.dim(`Logs: ${Q.join(qe(),"agent.log")}`))}async function Hp(){Et(["stop",qt],{ignoreError:!0})?te.success(fe.green("Mach agent service stopped.")):te.warn("Mach agent service was not running.")}async function jp(){Et(["disable","--now",qt],{ignoreError:!0}),Et(["daemon-reload"],{ignoreError:!0});let e=Er();le.existsSync(e)&&le.unlinkSync(e),Et(["daemon-reload"],{ignoreError:!0}),te.success(fe.green("Mach agent service uninstalled."))}async function Gp(){let e=Tp();hn(["/Create","/TN",Jt,"/SC","ONLOGON","/TR",`"${e}"`,"/RL","LIMITED","/F"]),hn(["/Run","/TN",Jt],{ignoreError:!0}),await vr(),te.info(fe.dim(`It will start automatically when you log in. Task: ${Jt}`)),te.info(fe.dim(`Logs: ${Q.join(qe(),"agent.log")}`))}async function Sa(){hn(["/End","/TN",Jt],{ignoreError:!0})?te.success(fe.green("Mach agent task stopped.")):te.warn("Mach agent task was not running.")}async function Kp(){await Sa(),hn(["/Delete","/TN",Jt,"/F"],{ignoreError:!0});let e=Ir();le.existsSync(e)&&le.unlinkSync(e),te.success(fe.green("Mach agent task uninstalled."))}async function na(){if(process.platform==="darwin")return Up();if(process.platform==="linux")return Bp();if(process.platform==="win32")return Gp();throw new Error(`Background agent install is not supported on ${process.platform}.`)}async function ia(){if(process.platform==="darwin")return ya();if(process.platform==="linux")return Hp();if(process.platform==="win32")return Sa();te.warn(`Background agent service control is not supported on ${process.platform}.`)}async function Vp(){if(process.platform==="darwin")return Fp();if(process.platform==="linux")return jp();if(process.platform==="win32")return Kp();te.warn(`Background agent uninstall is not supported on ${process.platform}.`)}async function zp(){let e=await ga(),t=e?!0:await ha();if(e?te.success(fe.green(`Mach agent is online at ${gn}`)):t?te.warn(`Mach agent port is open, but /health did not respond. Run \`${m.nameLower} agent restart\` if the dashboard still shows offline.`):te.warn(`Mach agent is not responding at ${gn}`),process.platform==="darwin"){let n=At(["print",`${wr()}/${Yt}`],{ignoreError:!0});te.info(fe.dim(`Login service: ${n?"installed/loaded":"not loaded"}`))}else if(process.platform==="linux"){let n=Et(["is-enabled",qt],{ignoreError:!0}),i=Et(["is-active",qt],{ignoreError:!0});te.info(fe.dim(`Login service: ${n?"enabled":"not enabled"} / ${i?"active":"inactive"}`))}else if(process.platform==="win32"){let n=hn(["/Query","/TN",Jt],{ignoreError:!0});te.info(fe.dim(`Login task: ${n?"installed":"not installed"}`))}}async function Wp(){let e=[];try{(await ti(fa(),["devices","-l"])).split(`
|
|
1532
|
+
`).forEach(n=>{if(n.includes("List of devices")||!n.trim())return;let i=n.split(/\s+/);if(i.length<2||i[1]!=="device")return;let r=i[0],o=n.match(/model:([^\s]+)/);e.push({id:r,platform:"android",type:r.startsWith("emulator-")?"emulator":"physical",name:o?o[1].replace(/_/g," "):r,status:"online",details:n.trim()})})}catch{}try{let n=(await ti(ma(),["-list-avds"])).split(`
|
|
1533
|
+
`).filter(r=>!!r.trim()),i=e.some(r=>r.platform==="android"&&r.id.startsWith("emulator-"));n.forEach(r=>{i||e.push({id:r,platform:"android",type:"emulator",name:r.replace(/_/g," "),status:"offline",details:`Android Virtual Device: ${r}`})})}catch{}return e}async function ba(){if(process.platform!=="darwin")return[];try{let e=await ti("/usr/bin/xcrun",["simctl","list","devices","--json"]),t=JSON.parse(e),n=[];return Object.entries(t.devices||{}).forEach(([i,r])=>{r.forEach(o=>{o.isAvailable&&n.push({id:o.udid,platform:"ios",type:"simulator",name:o.name,status:o.state?.toLowerCase()==="booted"?"online":"offline",runtime:i,details:`${o.name} (${i})`})})}),n}catch{return[]}}async function Jp(){if(process.platform!=="darwin")return[];try{let e=await ti("/usr/bin/xcrun",["devicectl","list","devices","--json-output","-"]);return(JSON.parse(e).result?.devices||[]).filter(n=>{let i=n.connectionProperties?.transportType;return i==="wired"||i==="localNetwork"}).map(n=>{let i=n.connectionProperties?.transportType,r=n.deviceProperties?.name||"iPhone";return{id:n.identifier,platform:"ios",type:"physical",name:r,status:"online",details:`${r} (${n.model?.name||n.hardwareModel||""}) - ${i}`}})}catch{return[]}}async function Yp(e){let t=await ba(),n=t.find(r=>r.id===e);if(n)return n;let i=t.filter(r=>r.status==="online");return i.length===1?i[0]:null}async function qp(){let[e,t,n]=await Promise.all([Wp(),ba(),Jp()]);return[...e,...t,...n]}async function Xp(){let e=Date.now();return Xn&&e-Xn.updatedAt<Cp?Xn.targets:(Zn||(Zn=qp().then(t=>(Xn={targets:t,updatedAt:Date.now()},t)).finally(()=>{Zn=null})),Zn)}async function ra(e){let t=[];for await(let n of e)t.push(Buffer.isBuffer(n)?n:Buffer.from(n));return t.length===0?{}:JSON.parse(Buffer.concat(t).toString("utf-8"))}async function Zp(e,t){let n=await Pp({method:"GET",url:e,responseType:"stream",timeout:12e4}),i=le.createWriteStream(t);n.data.pipe(i),await new Promise((r,o)=>{i.on("finish",r),i.on("error",o)})}function oa(e,t){let n=e?.stderr?.toString?.().trim();if(n)return n;let i=e?.stdout?.toString?.().trim();return i||e?.message||t}function Qp(e,t){return It("/usr/libexec/PlistBuddy",["-c",`Print :${t}`,e],{encoding:"utf-8"}).trim()}function ef(e){let t=Q.join(e,"Info.plist");if(!le.existsSync(t))throw new Error(`Could not validate iOS app executable: ${t} not found.`);let n=Qp(t,"CFBundleExecutable"),i=Q.join(e,n);if(!le.existsSync(i))throw new Error(`Could not validate iOS app executable: ${i} not found.`);return i}function tf(){return process.arch==="arm64"?"arm64":"x86_64"}function nf(e){return le.existsSync(e)?le.readdirSync(e).map(t=>Q.join(e,t)).filter(t=>t.endsWith(".app")&&le.statSync(t).isDirectory()):[]}function sa(e,t){let n=nf(e);if(n.length===1)return n[0];if(n.length>1)throw new Error(`Multiple .app bundles found in ${t}: ${n.map(i=>Q.basename(i)).join(", ")}. Mach cannot safely choose which app to install.`);return""}function rf(e){let t=ef(e),n=tf(),i="",r="";try{i=It("lipo",["-info",t],{encoding:"utf-8"}).trim()}catch(o){throw new Error(`Could not inspect iOS simulator app architecture for ${Q.basename(e)}: ${o.message}`)}if(!new RegExp(`\\b${n}\\b`).test(i))throw new Error(`This iOS simulator artifact cannot be installed because ${Q.basename(e)} does not include the ${n} simulator architecture. lipo output: ${i}. Rebuild the app with the latest Mach CLI and make sure the profile is a simulator build.`);try{r=It("/usr/bin/xcrun",["vtool","-show-build",t],{encoding:"utf-8"}).trim()}catch(o){throw new Error(`Could not inspect iOS simulator app platform for ${Q.basename(e)}: ${o.message}`)}if(!/\bplatform\s+IOSSIMULATOR\b/i.test(r))throw new Error(`This iOS simulator artifact cannot be installed because ${Q.basename(e)} was built for the wrong Apple platform. A simulator artifact must contain platform IOSSIMULATOR. vtool output: ${r}. Rebuild the app with the latest Mach CLI.`)}async function of(e,t,n){let i=n||(t.toLowerCase().includes(".apk")?"android":"ios"),r=t.toLowerCase().includes(".ipa"),o=le.mkdtempSync(Q.join(Ye.tmpdir(),`${mt}-install-`)),s=Q.join(o,i==="android"?"install.apk":r?"install.ipa":"install.zip");try{if(await Zp(t,s),i==="android"){It(fa(),["-s",e,"install","-r",s],{stdio:"pipe"});return}if(process.platform!=="darwin")throw new Error("iOS local install requires macOS.");Qn(`unzip -o ${JSON.stringify(s)} -d ${JSON.stringify(o)}`,{stdio:"pipe"});let l=Q.join(o,"Payload"),a=le.existsSync(l),d=r||a,u="";if(d?u=sa(l,"Payload"):u=sa(o,"the simulator artifact"),!u)throw new Error(`No .app bundle found inside the ${r?"IPA":"archive"}.`);let c=d?null:await Yp(e);if(c){try{rf(u),It("/usr/bin/xcrun",["simctl","install",c.id,u],{stdio:"pipe"})}catch(p){throw new Error(oa(p,"iOS Simulator install failed."))}return}if(!d)throw new Error("Selected iOS Simulator was not found. Refresh Install Hub devices or boot one simulator and try again.");try{Qn(`/usr/bin/xcrun devicectl device install app --device ${JSON.stringify(e)} ${JSON.stringify(u)}`,{stdio:"pipe"})}catch(p){throw new Error(oa(p,"iOS device install failed."))}}finally{le.rmSync(o,{recursive:!0,force:!0})}}function sf(e,t){if(!e)throw new Error("Device id is required.");if(t==="ios"){if(process.platform!=="darwin")throw new Error("iOS Simulator launch requires macOS.");return Qn(`/usr/bin/xcrun simctl boot ${JSON.stringify(e)}`,{stdio:"pipe"}),ta("open",["-a","Simulator"],{detached:!0,stdio:"ignore"}).unref(),"Simulator booting..."}if(t==="android")return ta(ma(),["-avd",e],{detached:!0,stdio:"ignore",windowsHide:!0}).unref(),"Emulator booting in background...";throw new Error("Invalid platform.")}async function af(){process.platform!=="darwin"&&te.warn("Running on non-macOS \u2014 iOS discovery unavailable, Android only.");let e=ni.createServer((i,r)=>{if(r.setHeader("Access-Control-Allow-Origin","*"),r.setHeader("Access-Control-Allow-Methods","GET, POST, OPTIONS"),r.setHeader("Access-Control-Allow-Headers","Content-Type, Authorization"),i.method==="OPTIONS"){r.writeHead(204),r.end();return}let o=new URL(i.url||"/",`http://localhost:${mt}`);if(i.method==="GET"&&o.pathname==="/local/devices"){Xp().then(s=>{r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",targets:s}))}).catch(s=>{r.writeHead(500,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:s.message}))});return}if(i.method==="GET"&&o.pathname==="/health"){r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",service:"mach-agent",port:mt,platform:process.platform}));return}if(i.method==="POST"&&o.pathname==="/install-local"){t(i,r);return}if(i.method==="POST"&&o.pathname==="/local/boot"){n(i,r);return}r.writeHead(404),r.end()}),t=async(i,r)=>{try{let{deviceId:o,artifactUrl:s,platform:l}=await ra(i);if(!o||!s){r.writeHead(400,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:"deviceId and artifactUrl are required"}));return}await of(o,s,l),r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",message:`Installed on ${o}`}))}catch(o){r.writeHead(500,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:o.message||"Local install failed"}))}},n=async(i,r)=>{try{let{id:o,platform:s}=await ra(i),l=sf(o,s);r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",message:l}))}catch(o){r.writeHead(500,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:o.message||"Local device launch failed"}))}};e.listen(mt,"127.0.0.1",()=>{te.success(fe.green(`Local device agent running on http://localhost:${mt}`)),te.info(fe.dim("Keep this running while using the Install Hub on the dashboard.")),te.info(fe.dim("Press Ctrl+C to stop."))}),e.on("error",i=>{i.code==="EADDRINUSE"?te.error(`Port ${mt} is already in use \u2014 agent may already be running.`):te.error(`Agent error: ${i.message}`),process.exit(1)}),await new Promise(()=>{})}async function Aa(e="start"){let t=String(e||"start").toLowerCase();if(t==="start"||t==="run"){await af();return}if(t==="install"){await na();return}if(t==="status"){await zp();return}if(t==="stop"){await ia();return}if(t==="uninstall"){await Vp();return}if(t==="restart"){await ia(),await na();return}te.error(`Unknown agent action: ${e}`),te.info(fe.dim(`Use: ${m.nameLower} agent start | install | status | restart | stop | uninstall`)),process.exit(1)}import{createRequire as lg}from"module";import{text as cf,password as df,spinner as uf,isCancel as wa}from"@clack/prompts";import Or from"chalk";import yn from"fs";import Ea from"path";import lf from"os";var Rr=Ea.join(lf.homedir(),m.configDir),Dr=Ea.join(Rr,"config.json");function Pr(){if(!yn.existsSync(Dr))return{};try{return JSON.parse(yn.readFileSync(Dr,"utf-8"))}catch{return{}}}function Ia(e){yn.existsSync(Rr)||yn.mkdirSync(Rr,{recursive:!0});let n={...Pr(),...e};yn.writeFileSync(Dr,JSON.stringify(n,null,2))}async function _a(){let e=Pr(),t=await cf({message:"Enter your email:",placeholder:"user@example.com",initialValue:e.lastLoginEmail,validate(r){if(r.length===0)return"Email is required!"}});if(wa(t))return;let n=await df({message:"Enter your password:",validate(r){if(r.length===0)return"Password is required!"}});if(wa(n))return;let i=uf();i.start("Authenticating...");try{let o=await(await fetch(`${Bt}/login`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({username:t,password:n})})).json();o.status==="success"&&o.user.token?(no({id:o.user.id,email:t,token:o.user.token,refreshToken:o.user.refreshToken}),Ia({lastLoginEmail:t}),i.stop(Or.green("Login successful!"))):i.stop(Or.red("Login failed: "+(o.message||"Unknown error")))}catch(r){i.stop(Or.red("Network error: "+r.message))}}import{log as ii,outro as pf}from"@clack/prompts";import Sn from"chalk";async function $a(){let e=io(),t=`${m.envPrefix}TOKEN`;e?ii.success(Sn.green(`Logged out. Removed saved credentials from ~/${m.configDir}/credentials.json.`)):ii.warn(Sn.yellow(`No saved ${m.name} credentials found.`)),process.env[t]&&(ii.warn(Sn.yellow(`${t} is still set in this shell. Commands will continue to authenticate with that token until you unset it.`)),ii.info(Sn.dim(`Run: unset ${t}`))),pf(Sn.blue("---"))}import{outro as ff,select as mf,spinner as gf,isCancel as hf}from"@clack/prompts";import ri from"chalk";import Cr from"fs";import yf from"path";var va=e=>e==="1234567890"||e==="ABC123DEFG"||e==="XXXXXXXXXX"?"":typeof e=="string"?e:"",Sf=()=>process.versions.node.split(".")[0]||"24";async function Ra(){if(!Ce()){console.log(ri.red(`You are not logged in. Run \`${m.nameLower} login\` first.`));return}let t=gf();t.start("Fetching projects...");try{let{data:n}=await T.get("/projects");if(t.stop("Projects loaded."),n.status!=="success"||!n.projects||n.projects.length===0){console.log(ri.yellow(`No projects found. Run \`${m.nameLower} init\` to create one.`));return}let i=n.projects.map(g=>({value:g.projectId,label:`${g.name} (${g.slug})`})),r=await mf({message:"Select a project to link:",options:i});if(hf(r))return;let o=yf.join(process.cwd(),m.configFileName),s={};if(Cr.existsSync(o))try{s=JSON.parse(Cr.readFileSync(o,"utf-8"))}catch{}let l=n.projects.find(g=>g.projectId===r),a=s.android?.package||pt("android"),d=s.ios?.bundleIdentifier||pt("ios"),u=s.android||{},c=s.submit?.production?.android||{},p=s.submit?.production?.ios||{},f={projectId:r,framework:nn(s.framework)||Ht,name:l?.name,slug:l?.slug,nodeVersion:s.nodeVersion||Sf(),scheme:l?.slug?.toLowerCase()||"app",android:{...u,package:a||"",versionCode:u.versionCode||"auto"},ios:{bundleIdentifier:d||"",buildNumber:s.ios?.buildNumber||"auto"},build:{development:{environment:"development",distribution:"development"},staging:{environment:"staging",distribution:"internal"},production:{environment:"production",distribution:"store"}},submit:{production:{android:{...c,track:c.track||"internal",releaseStatus:c.releaseStatus||"completed"},ios:{ascAppId:va(p.ascAppId),appleTeamId:va(p.appleTeamId)}}}};Cr.writeFileSync(o,JSON.stringify(f,null,2)),ff(ri.green(`Linked to project ${f.name} (${f.slug})`))}catch(n){t.stop(ri.red("Error fetching projects: "+n.message))}}import{outro as bf,text as oi,select as Af,spinner as Ef,isCancel as bn}from"@clack/prompts";import An from"chalk";import If from"fs";import wf from"path";import{randomUUID as _f}from"crypto";var $f=()=>process.versions.node.split(".")[0]||"24";async function Da(){if(!Ce()){console.log(An.red(`You are not logged in. Run \`${m.nameLower} login\` first.`));return}let t=await oi({message:"Project Name:",placeholder:"My Awesome App",validate(l){if(l.length===0)return"Name is required!"}});if(bn(t))return;let n=await oi({message:"Project Slug (URL friendly):",placeholder:"my-awesome-app",validate(l){if(l.length===0)return"Slug is required!";if(!/^[a-z0-9-]+$/.test(l))return"Slug must be lowercase alphanumeric with dashes."}});if(bn(n))return;let i=await Af({message:"Platform:",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"},{value:"web",label:"Web"},{value:"all",label:"All Platforms"}]});if(bn(i))return;let r="";if(i==="android"||i==="all"){let l=pt("android");if(r=await oi({message:"Android Package Name:",initialValue:l||"",placeholder:"com.example.app",validate(a){if(a.length===0)return"Package name is required for Android!"}}),bn(r))return}let o="";if(i==="ios"||i==="all"){let l=pt("ios");if(o=await oi({message:"iOS Bundle Identifier:",initialValue:l||"",placeholder:"com.example.app",validate(a){if(a.length===0)return"Bundle ID is required for iOS!"}}),bn(o))return}let s=Ef();s.start("Creating project...");try{let l=_f(),d={projectId:l,name:t,slug:n,storageType:"managed",platforms:i==="all"?["android","ios","web"]:[i]},{data:u}=await T.post("/projects",d);if(u.status==="success"){s.stop(An.green("Project created successfully!"));let c=wf.join(process.cwd(),m.configFileName);If.writeFileSync(c,JSON.stringify({projectId:l,framework:Ht,name:t,slug:n,nodeVersion:$f(),...r?{android:{package:r,versionCode:"auto"}}:{},...o?{ios:{bundleIdentifier:o,buildNumber:"auto"}}:{},build:{development:{environment:"development",distribution:"development"},staging:{environment:"staging",distribution:"internal"},production:{environment:"production",distribution:"store"}},submit:{production:{android:{track:"internal",releaseStatus:"completed"},ios:{ascAppId:"",appleTeamId:""}}}},null,2)),bf(An.green(`Initialized project ${t} and linked locally!`))}else s.stop(An.red("creation failed: "+u.message))}catch(l){s.stop(An.red("Network error: "+l.message))}}import{spinner as kr,log as Oe}from"@clack/prompts";import En from"chalk";import si from"fs";import Pa from"path";function Nr(e,t,n,i){let r=e?.response?.status,o=e?.response?.data?.message||e?.response?.data?.error,s=i?` ${i}`:"";return r===401?`Not logged in or token expired while trying to ${n}${s}. Run \`${m.nameLower} login\` and try again.`:r===403?[`Permission denied while trying to ${n}${s}.`,o?`API says: ${o}.`:void 0,`Current Mach account/token does not have access to project ${t}.`,`Run \`${m.nameLower} login\` with the correct account, or ask a project owner to grant access.`].filter(Boolean).join(" "):r===404?[`Project or environment endpoint was not found while trying to ${n}${s}.`,`Project ID: ${t}.`,o?`API says: ${o}.`:void 0].filter(Boolean).join(" "):r?`Failed to ${n}${s}: ${o||`API returned HTTP ${r}`}`:`Network error while trying to ${n}${s}: ${e?.message||"Unknown error"}`}function vf(e){let t=String(e??"");return t===""?'""':/^[A-Za-z0-9_./:@%+-]+$/.test(t)?t:JSON.stringify(t)}function Rf(e,t){return`${[`# Generated by ${m.nameLower} env pull --environment ${t}`,"# Do not commit this file.","",...Object.keys(e).sort((i,r)=>i.localeCompare(r)).map(i=>`${i}=${vf(e[i])}`)].join(`
|
|
1534
1534
|
`)}
|
|
1535
|
-
`}async function
|
|
1536
|
-
`))}else
|
|
1537
|
-
Profile Settings:`)),
|
|
1538
|
-
Environment Variables:`)),Object.entries(i.env).forEach(([r,o])=>{
|
|
1535
|
+
`}async function Oa(e,t,n={}){let i=Ce();if(!i){Oe.error(`You are not logged in. Run \`${m.nameLower} login\` first.`);return}let r=Pa.join(process.cwd(),m.configFileName);if(!si.existsSync(r)){Oe.error(`No ${m.configFileName} found. Run \`${m.nameLower} init\` or \`${m.nameLower} link\` first.`);return}let o;try{o=JSON.parse(si.readFileSync(r,"utf-8"))}catch{Oe.error(`Failed to parse ${m.configFileName}`);return}let{projectId:s}=o;if(!s){Oe.error(`${m.configFileName} is missing projectId.`);return}e==="set"?await Df(s,t,i):e==="list"?await Pf(s,i):e==="pull"||e==="download"||e==="export"?await Of(s,n):Oe.error(`Unknown env action: ${e}. Use 'set', 'list', or 'pull'.`)}async function Df(e,t,n){if(t.length===0){Oe.error(`Usage: ${m.nameLower} env set KEY=VALUE [KEY2=VALUE2 ...]`);return}let i=kr();i.start("Setting environment variables...");let r=0,o=0;for(let s of t){let[l,...a]=s.split("="),d=a.join("=");if(!l||d===void 0){Oe.warn(`Invalid format for argument: ${s}. Expected KEY=VALUE.`),o++;continue}try{let u={key:l.trim(),value:d,type:"env",environment:"global",visibility:"secret"},{data:c}=await T.post(`/projects/${e}/secrets`,u);c.status==="success"?r++:(Oe.error(`Failed to set ${l}: ${c.message}`),o++)}catch(u){Oe.error(Nr(u,e,"set",l)),o++}}i.stop(`Set ${r} variable(s). ${o>0?`${o} failed.`:""}`)}async function Pf(e,t){let n=kr();n.start("Fetching environment variables...");try{let{data:i}=await T.get(`/projects/${e}/secrets`);if(i.status==="success"){n.stop("Fetched variables.");let r=i.secrets||[];r.length===0?Oe.info("No environment variables found for this project."):(Oe.info(En.bold("Environment Variables (Global & Scoped):")),r.forEach(o=>{let s=o.visibility==="plain"?o.value:"********";console.log(` ${En.cyan(o.key)} = ${s} ${En.gray(`[${o.environment}]`)}`)}))}else n.stop(En.red(`Failed to fetch variables: ${i.message}`))}catch(i){n.stop("Failed to fetch variables."),Oe.error(Nr(i,e,"list"))}}async function Of(e,t){let n=(t.environment||"development").trim(),i=t.out||".env.local",r=Pa.resolve(process.cwd(),i);if(si.existsSync(r)&&!t.overwrite){Oe.error(`${i} already exists. Re-run with \`--overwrite\` to replace it.`);return}let o=kr();o.start(`Downloading ${n} environment variables...`);try{let{data:s}=await T.get(`/projects/${e}/secrets/export?env=${encodeURIComponent(n)}`);if(s.status!=="success"){o.stop(En.red(`Failed to download variables: ${s.message||"Unknown API error"}`));return}let l=s.secrets||{},a=Rf(l,n);si.writeFileSync(r,a,{encoding:"utf-8",mode:384}),o.stop(`Wrote ${Object.keys(l).length} variable(s) to ${i}.`)}catch(s){o.stop("Failed to download variables."),Oe.error(Nr(s,e,"pull"))}}import{spinner as Cf,log as Lt,outro as kf}from"@clack/prompts";import Tr from"chalk";import Ca from"fs";import Nf from"path";import{execSync as Tf}from"child_process";import xf from"adm-zip";import Lf from"axios";import{randomUUID as Mf}from"crypto";async function ka(e){Lt.info(Tr.magenta("\u{1F680} Starting Over-The-Air (OTA) Update via Mach..."));let t=_e();(!t||!t.projectId)&&(Lt.error(`No ${m.configFileName} found or missing projectId. Run \`mach link\` first.`),process.exit(1));let n=t.projectId,i=e.branch||"production",r="1.0.0";try{r=JSON.parse(Ca.readFileSync("./package.json","utf-8")).version||"1.0.0"}catch{Lt.warn("Could not read package.json version. Defaulting to 1.0.0")}let o=Cf();o.start(`Compiling JavaScript bundles for OTA (Channel: ${i}, Runtime: ${r})...`);try{Tf("npx expo export --platform all",{stdio:"ignore"})}catch(d){o.stop("Compilation failed."),Lt.error(`Failed to export JS bundles using Expo: ${d.message}`),process.exit(1)}o.message("Zipping artifact payload...");let s=Nf.join(process.cwd(),"dist");Ca.existsSync(s)||(o.stop("Missing dist folder."),Lt.error("The `dist` directory was not created. Export failed."),process.exit(1));let l=new xf;l.addLocalFolder(s,"dist");let a=l.toBuffer();o.message("Uploading payload to Mach Cloud...");try{let d=Mf(),u=await T.post("/builds/source-upload-url",{projectId:n,buildId:d});if(u.data.status!=="success")throw new Error("Could not secure upload bucket URL");let{uploadUrl:c,key:p}=u.data;await Lf.put(c,a,{headers:{"Content-Type":"application/zip"},maxBodyLength:1/0,maxContentLength:1/0}),o.message(`Promoting Update to ${i}...`),await T.post("/updates/publish",{projectId:n,channelName:i,runtimeVersion:r,platform:"android",updateId:`${d}-android`,manifestKey:p}),await T.post("/updates/publish",{projectId:n,channelName:i,runtimeVersion:r,platform:"ios",updateId:`${d}-ios`,manifestKey:p}),o.stop("Update Live!"),kf(Tr.green(`\u2713 OTA Update natively shipped to the '${i}' channel.`)),Lt.info(Tr.dim(`Any app running runtime '${r}' will download this bundle smoothly.`))}catch(d){o.stop("Update failed during Cloud Sync."),Lt.error(`Upload error: ${d.message}`),process.exit(1)}}import{intro as Uf,outro as Na,log as Xt}from"@clack/prompts";import rt from"chalk";async function Ta(){Uf(rt.blue(`${m.name} CLI - User Profile`));let e=Ce();if(!e){Xt.warn(rt.yellow("You are not logged in.")),Xt.info(`Run \`${m.nameLower} login\` to authenticate.`),Na();return}Xt.info(`${rt.bold("Logged in as:")} ${rt.green(e.email)}`);try{await T.get("/projects");let n=Ce().token.split(".");if(n.length===3){let i=JSON.parse(Buffer.from(n[1],"base64").toString());if(i.exp){let r=new Date(i.exp*1e3),o=new Date,s=r.getTime()-o.getTime();if(s>0){let l=Math.round(s/6e4),a=(l/60).toFixed(1);Xt.info(`${rt.bold("Token status:")} Valid (Expires in ~${a}h / ${l}m)`)}else Xt.warn(`${rt.bold("Token status:")} ${rt.red("Expired")} (Auto-refresh failed)`)}}}catch{Xt.warn(`${rt.bold("Token status:")} ${rt.red("Unreachable")} (Session might be truly expired)${Bt}`)}Na(rt.blue("---"))}import{spawn as Hf}from"child_process";import{log as wt}from"@clack/prompts";import Be from"chalk";import jf from"fs";import Ff from"net";async function Bf(e){return new Promise(t=>{let n=Ff.createServer();n.once("error",i=>{i.code==="EADDRINUSE"?t(!0):t(!1)}),n.once("listening",()=>{n.close(),t(!1)}),n.listen(e,"0.0.0.0")})}async function xa(e,t=20){let n=e;for(;n<e+t;){if(!await Bf(n))return n;n++}throw new Error(`Could not find an available port after ${t} attempts starting from ${e}.`)}var La=async e=>{wt.info(Be.blue(`Starting ${m.name} Dev Orchestrator...`));let t=_e(),n=e.buildProfile||"development",i=t?ke(t,n):null,r={...process.env};if(t?.projectId)try{wt.info(Be.dim(`Fetching managed secrets for profile: ${n}...`));let c=await T.get(`/projects/${t.projectId}/secrets/export?env=${n}`);c.data?.status==="success"&&c.data.secrets&&(Object.assign(r,c.data.secrets),wt.info(Be.magenta(`\u2713 Injected secrets from ${m.name} Dashboard.`)))}catch{wt.warn("Could not fetch managed secrets. Running with local env only.")}t&&Object.assign(r,jt(t,m.envPrefix)),i&&(Object.assign(r,jt(i,`${m.envPrefix}PROFILE_`)),i.env&&Object.assign(r,i.env));let o=!1;try{let c=JSON.parse(jf.readFileSync("package.json","utf-8"));o=!!(c.dependencies?.expo||c.devDependencies?.expo)}catch{wt.warn("Could not parse package.json. Defaulting to Bare React Native mode.")}let s=Number(e.port||i?.port||8081),l=await xa(s);l!==s&&wt.info(Be.yellow(`Port ${s} is busy. ${m.name} is using ${l} instead.`));let a=process.platform==="win32"?"npx.cmd":"npx",d=[];if(o?(d=["expo","start","--port",String(l)],e.clear&&d.push("--clear"),e.tunnel&&d.push("--tunnel"),e.lan&&d.push("--lan"),e.localhost&&d.push("--localhost"),e.ios&&d.push("--ios"),e.android&&d.push("--android"),e.web&&d.push("--web")):(d=["react-native","start","--port",String(l)],e.clear&&d.push("--clear")),o){let c=[`${Be.cyan("i")} open iOS simulator`,`${Be.cyan("a")} open Android emulator/device`,`${Be.cyan("w")} open web`,`${Be.cyan("r")} reload app`];wt.info([Be.bold("Launch controls"),...c.map(p=>` ${p}`),"",Be.dim("Direct launch: mach start --ios | --android | --web"),Be.dim(`Metro URL: http://localhost:${l}`)].join(`
|
|
1536
|
+
`))}else wt.info(Be.dim(`Metro URL: http://localhost:${l}`));let u=Hf(a,d,{stdio:"inherit",env:r});return new Promise((c,p)=>{u.on("exit",f=>{f===0?c():p(new Error(`Dev server exited with code ${f}`))}),u.on("error",f=>{p(f)})})};import{log as Le}from"@clack/prompts";import Xe from"chalk";var Ma=async e=>{let t=_e();t||(Le.error(Xe.red(`No ${m.configFileName} found in the current directory.`)),process.exit(1));let n=e.profile||"development",i=ke(t,n);if(e.json){console.log(JSON.stringify({project:t,resolved:i},null,2));return}Le.info(Xe.bgBlue.white(` Resolved ${m.name} Config [${n}] `)),Le.info(Xe.dim("----------------------------------------")),Le.info(`${Xe.blue("Project ID:")} ${t.projectId}`),Le.info(`${Xe.blue("Name:")} ${t.name}`),Le.info(`${Xe.blue("Scheme:")} ${t.scheme}`),i?(Le.info(Xe.dim(`
|
|
1537
|
+
Profile Settings:`)),Le.info(`${Xe.cyan("Distribution:")} ${i.distribution||"none"}`),Le.info(`${Xe.cyan("Development Client:")} ${i.developmentClient||"false"}`),i.env&&Object.keys(i.env).length>0&&(Le.info(Xe.dim(`
|
|
1538
|
+
Environment Variables:`)),Object.entries(i.env).forEach(([r,o])=>{Le.info(` ${r}=${o}`)}))):Le.warn(`Profile '${n}' not found.`),Le.info(Xe.dim("----------------------------------------"))};import{cancel as am,confirm as tl,isCancel as _n,log as yi,note as lm,outro as Si,select as cm,text as nl}from"@clack/prompts";import Qe from"chalk";import dm from"fs";import Qa from"path";import Mt from"fs";import Zt from"path";var In="./plugins/withMachDeepLinks",xr="mach.deep-links.json",Fa=["/*"],Lr=e=>{if(typeof e!="string")return;let t=e.trim();return t.length>0?t:void 0},li=e=>{let t=new Set,n=[];for(let i of e){let r=Lr(i);!r||t.has(r)||(t.add(r),n.push(r))}return n},Ze=(...e)=>{for(let t of e){let n=Lr(t);if(n)return n}},Ua=(e,t)=>e.length!==t.length?!1:e.every((n,i)=>n===t[i]);function Ba(e){if(typeof e!="string")return;let t=e.trim().toLowerCase();if(t==="ios"||t==="android"||t==="all")return t}function wn(e){let t=e.includes("://")?e:`https://${e}`,n=new URL(t),i=n.pathname==="/"?"":n.pathname.replace(/\/+$/,"");return`${n.protocol}//${n.host}${i}`}function ai(e){return new URL(wn(e)).hostname}function ci(e){return e.trim().toLowerCase().replace(/[^a-z0-9+.-]/g,"-").replace(/^-+|-+$/g,"")||"app"}function Ha(e=process.cwd()){let t=Zt.join(e,"package.json"),n=["app.json","app.config.json","app.config.js","app.config.ts"].some(r=>Mt.existsSync(Zt.join(e,r))),i=!1;if(Mt.existsSync(t))try{let r=JSON.parse(Mt.readFileSync(t,"utf-8"));i=!!(r.dependencies?.expo||r.devDependencies?.expo)}catch{i=!1}return n&&i?"expo":Mt.existsSync(Zt.join(e,"ios"))||Mt.existsSync(Zt.join(e,"android"))?"react-native":Ht}function ja(e,t,n){if(t)return t;let i=!!(e.ios?.bundleIdentifier||n?.ios?.bundleIdentifier||e.deepLinks?.ios?.bundleIdentifier),r=!!(e.android?.package||n?.android?.package||n?.android?.applicationId||e.deepLinks?.android?.package);return i&&!r?"ios":r&&!i?"android":"all"}function di(e=process.cwd(),t){let n=t?.deepLinks?.web?.outputDir;return n||(Mt.existsSync(Zt.join(e,"public"))?"public":"deep-links")}function Ga(e,t){let n=e.deepLinks,i=wn(t.baseUrl||n?.baseUrl||(t.domain?`https://${t.domain}`:"")),r=Lr(t.domain)||(t.baseUrl?ai(i):n?.domain)||ai(i),o=t.profile||n?.profile||"production",s=ke(e,o)||{},l=s.ios||{},a=s.android||{},d=e.submit?.[o]?.ios||{},u=e.submit?.[o]?.android||{},c=ci(t.scheme||n?.scheme||l.scheme||e.scheme||e.slug||e.name||"app"),p=Rt(e,o),f=li([...t.androidFingerprint||[],...n?.android?.sha256CertFingerprints||[],...a.sha256CertFingerprints||[],...e.android?.sha256CertFingerprints||[]]);return{baseUrl:i,domain:r,scheme:c,profile:o!=="production"?o:void 0,paths:n?.paths?.length?n.paths:["/*"],ios:{appStoreId:Ze(t.appStoreId,n?.ios?.appStoreId,l.ascAppId,d.ascAppId,e.ios?.ascAppId),appleTeamId:Ze(t.appleTeamId,n?.ios?.appleTeamId,l.appleTeamId,l.developerTeamId,d.appleTeamId,d.developerTeamId,e.ios?.appleTeamId,e.ios?.developerTeamId,p.teamId),bundleIdentifier:Ze(t.iosBundleId,n?.ios?.bundleIdentifier,l.bundleIdentifier,l.bundleId,e.ios?.bundleIdentifier,e.ios?.bundleId,e.expo?.ios?.bundleIdentifier),webCredentials:!!n?.ios?.webCredentials,activityContinuation:!!n?.ios?.activityContinuation},android:{package:Ze(t.androidPackage,n?.android?.package,a.package,a.applicationId,e.android?.package,e.expo?.android?.package,u.packageName,u.package),sha256CertFingerprints:f},web:{smartAppBanner:n?.web?.smartAppBanner??!0,outputDir:t.output||n?.web?.outputDir||di(process.cwd(),e)}}}function ui(e,t={}){let n=e.deepLinks,i=t.profile||n?.profile||"production",r=t.expoHints||null,o=Ze(n?.baseUrl,r?.domain?`https://${r.domain}`:void 0);if(!o)return null;let s=wn(o),l=ke(e,i)||{},a=l.ios||{},d=l.android||{},u=e.submit?.[i]?.ios||{},c=e.submit?.[i]?.android||{},p=Rt(e,i),f=Ze(n?.domain,r?.domain)||ai(s),g=ci(Ze(n?.scheme,a.scheme,e.scheme,r?.scheme,e.slug,e.name,"app")||"app"),y=n?.paths?.length?n.paths:[...Fa];return{baseUrl:s,domain:f,scheme:g,profile:i!=="production"?i:void 0,paths:y,ios:{appStoreId:Ze(n?.ios?.appStoreId,a.ascAppId,u.ascAppId,e.ios?.ascAppId),appleTeamId:Ze(n?.ios?.appleTeamId,a.appleTeamId,a.developerTeamId,u.appleTeamId,u.developerTeamId,e.ios?.appleTeamId,e.ios?.developerTeamId,p.teamId),bundleIdentifier:Ze(n?.ios?.bundleIdentifier,a.bundleIdentifier,a.bundleId,e.ios?.bundleIdentifier,e.ios?.bundleId,e.expo?.ios?.bundleIdentifier,r?.iosBundleIdentifier),webCredentials:!!n?.ios?.webCredentials,activityContinuation:!!n?.ios?.activityContinuation},android:{package:Ze(n?.android?.package,d.package,d.applicationId,e.android?.package,e.expo?.android?.package,c.packageName,c.package,r?.androidPackage),sha256CertFingerprints:li([...n?.android?.sha256CertFingerprints||[],...d.sha256CertFingerprints||[],...e.android?.sha256CertFingerprints||[]])},web:{smartAppBanner:n?.web?.smartAppBanner??!0,outputDir:n?.web?.outputDir||di(t.cwd||process.cwd(),e)}}}function pi(e,t,n="production",i=process.cwd()){return t?.domain?ui({...e,deepLinks:{baseUrl:`https://${t.domain}`,domain:t.domain,scheme:t.scheme}},{profile:n,cwd:i,expoHints:t}):null}function Gf(e,t,n=t.profile||"production"){let i=ui({...e,deepLinks:{baseUrl:t.baseUrl}},{profile:n}),r={baseUrl:t.baseUrl};n!=="production"&&(r.profile=n),t.domain&&t.domain!==ai(t.baseUrl)&&(r.domain=t.domain),t.scheme&&t.scheme!==i?.scheme&&(r.scheme=t.scheme),t.paths?.length&&!Ua(t.paths,Fa)&&(r.paths=t.paths);let o={};t.ios?.bundleIdentifier&&t.ios.bundleIdentifier!==i?.ios?.bundleIdentifier&&(o.bundleIdentifier=t.ios.bundleIdentifier),t.ios?.appleTeamId&&t.ios.appleTeamId!==i?.ios?.appleTeamId&&(o.appleTeamId=t.ios.appleTeamId),t.ios?.appStoreId&&t.ios.appStoreId!==i?.ios?.appStoreId&&(o.appStoreId=t.ios.appStoreId),t.ios?.webCredentials&&(o.webCredentials=!0),t.ios?.activityContinuation&&(o.activityContinuation=!0),Object.keys(o).length>0&&(r.ios=o);let s={};t.android?.package&&t.android.package!==i?.android?.package&&(s.package=t.android.package);let l=t.android?.sha256CertFingerprints||[],a=i?.android?.sha256CertFingerprints||[];l.length>0&&!Ua(l,a)&&(s.sha256CertFingerprints=l),Object.keys(s).length>0&&(r.android=s);let d={outputDir:t.web?.outputDir||"deep-links"};return t.web?.smartAppBanner===!1&&(d.smartAppBanner=!1),r.web=d,r}function Ka(e,t,n,i=n.profile||"production"){let r={...e,framework:t,scheme:e.scheme||n.scheme};return{...r,deepLinks:Gf(r,n,i)}}function Va(e,t=process.cwd()){let n=Zt.join(t,"mach.config.json");return Mt.writeFileSync(n,`${JSON.stringify(e,null,2)}
|
|
1539
|
+
`),n}import Ie from"fs";import Re from"path";import{spawnSync as za}from"child_process";var fi="@radhya/mach/expo-plugin",Kf=`const fs = require('fs')
|
|
1540
|
+
const path = require('path')
|
|
1541
|
+
|
|
1542
|
+
const unique = values => Array.from(new Set(values.filter(Boolean)))
|
|
1543
|
+
const nonEmpty = value => typeof value === 'string' && value.trim().length > 0 ? value.trim() : undefined
|
|
1544
|
+
const first = (...values) => values.map(nonEmpty).find(Boolean)
|
|
1545
|
+
|
|
1546
|
+
const sanitizeScheme = value => {
|
|
1547
|
+
const normalized = nonEmpty(value)
|
|
1548
|
+
if (!normalized) return 'app'
|
|
1549
|
+
return normalized
|
|
1550
|
+
.toLowerCase()
|
|
1551
|
+
.replace(/[^a-z0-9+.-]/g, '-')
|
|
1552
|
+
.replace(/^-+|-+$/g, '') || 'app'
|
|
1553
|
+
}
|
|
1554
|
+
|
|
1555
|
+
const normalizeBaseUrl = value => {
|
|
1556
|
+
const normalized = nonEmpty(value)
|
|
1557
|
+
if (!normalized) return undefined
|
|
1558
|
+
const parsed = new URL(normalized.includes('://') ? normalized : \`https://\${normalized}\`)
|
|
1559
|
+
const pathname = parsed.pathname === '/' ? '' : parsed.pathname.replace(/\\/+$/, '')
|
|
1560
|
+
return \`\${parsed.protocol}//\${parsed.host}\${pathname}\`
|
|
1561
|
+
}
|
|
1562
|
+
|
|
1563
|
+
const domainFromBaseUrl = value => {
|
|
1564
|
+
try {
|
|
1565
|
+
const normalized = normalizeBaseUrl(value)
|
|
1566
|
+
return normalized ? new URL(normalized).hostname : undefined
|
|
1567
|
+
} catch {
|
|
1568
|
+
return undefined
|
|
1569
|
+
}
|
|
1570
|
+
}
|
|
1571
|
+
|
|
1572
|
+
const readMachConfig = config => {
|
|
1573
|
+
const projectRoot = config && config._internal && config._internal.projectRoot
|
|
1574
|
+
? config._internal.projectRoot
|
|
1575
|
+
: process.cwd()
|
|
1576
|
+
const configPath = path.join(projectRoot, 'mach.config.json')
|
|
1577
|
+
if (!fs.existsSync(configPath)) return {}
|
|
1578
|
+
return JSON.parse(fs.readFileSync(configPath, 'utf-8'))
|
|
1579
|
+
}
|
|
1580
|
+
|
|
1581
|
+
const resolveBuildProfile = (machConfig, name, seen = new Set()) => {
|
|
1582
|
+
const MACH_CONFIG = machConfig || {}
|
|
1583
|
+
const profiles = MACH_CONFIG.build || {}
|
|
1584
|
+
const profile = profiles[name]
|
|
1585
|
+
if (!profile || typeof profile !== 'object') return {}
|
|
1586
|
+
if (seen.has(name)) throw new Error(\`Circular Mach build profile inheritance: \${name}\`)
|
|
1587
|
+
seen.add(name)
|
|
1588
|
+
|
|
1589
|
+
if (!profile.extends) return { ...profile }
|
|
1590
|
+
const parent = resolveBuildProfile(MACH_CONFIG, profile.extends, seen)
|
|
1591
|
+
return {
|
|
1592
|
+
...parent,
|
|
1593
|
+
...profile,
|
|
1594
|
+
env: { ...(parent.env || {}), ...(profile.env || {}) },
|
|
1595
|
+
ios: { ...(parent.ios || {}), ...(profile.ios || {}) },
|
|
1596
|
+
android: { ...(parent.android || {}), ...(profile.android || {}) },
|
|
1597
|
+
}
|
|
1598
|
+
}
|
|
1599
|
+
|
|
1600
|
+
const hasDomainFilter = (filter, domain) => {
|
|
1601
|
+
const data = Array.isArray(filter && filter.data) ? filter.data : []
|
|
1602
|
+
return data.some(item => item && item.scheme === 'https' && item.host === domain)
|
|
1603
|
+
}
|
|
1604
|
+
|
|
1605
|
+
const resolveDeepLinks = config => {
|
|
1606
|
+
const MACH_CONFIG = readMachConfig(config)
|
|
1607
|
+
const deepLinks = MACH_CONFIG.deepLinks || {}
|
|
1608
|
+
const profileName = deepLinks.profile || process.env.MACH_PROFILE || process.env.EAS_BUILD_PROFILE || 'production'
|
|
1609
|
+
const profile = resolveBuildProfile(MACH_CONFIG, profileName)
|
|
1610
|
+
const baseUrl = normalizeBaseUrl(deepLinks.baseUrl)
|
|
1611
|
+
const domain = first(deepLinks.domain, domainFromBaseUrl(baseUrl))
|
|
1612
|
+
const scheme = sanitizeScheme(first(
|
|
1613
|
+
deepLinks.scheme,
|
|
1614
|
+
profile.ios && profile.ios.scheme,
|
|
1615
|
+
MACH_CONFIG.scheme,
|
|
1616
|
+
config.scheme,
|
|
1617
|
+
MACH_CONFIG.slug,
|
|
1618
|
+
MACH_CONFIG.name,
|
|
1619
|
+
config.slug,
|
|
1620
|
+
config.name,
|
|
1621
|
+
'app'
|
|
1622
|
+
))
|
|
1623
|
+
|
|
1624
|
+
return { ...deepLinks, baseUrl, domain, scheme }
|
|
1625
|
+
}
|
|
1626
|
+
|
|
1627
|
+
module.exports = function withMachDeepLinks(config) {
|
|
1628
|
+
const deepLinks = resolveDeepLinks(config)
|
|
1629
|
+
if (!deepLinks.baseUrl || !deepLinks.domain) return config
|
|
1630
|
+
|
|
1631
|
+
config.scheme = deepLinks.scheme
|
|
1632
|
+
config.extra = { ...(config.extra || {}), deepLinkBaseUrl: deepLinks.baseUrl }
|
|
1633
|
+
|
|
1634
|
+
config.ios = config.ios || {}
|
|
1635
|
+
config.ios.associatedDomains = unique([
|
|
1636
|
+
...(config.ios.associatedDomains || []),
|
|
1637
|
+
deepLinks.domain ? \`applinks:\${deepLinks.domain}\` : null,
|
|
1638
|
+
deepLinks.ios && deepLinks.ios.webCredentials ? \`webcredentials:\${deepLinks.domain}\` : null,
|
|
1639
|
+
deepLinks.ios && deepLinks.ios.activityContinuation ? \`activitycontinuation:\${deepLinks.domain}\` : null,
|
|
1640
|
+
])
|
|
1641
|
+
|
|
1642
|
+
config.android = config.android || {}
|
|
1643
|
+
const intentFilters = Array.isArray(config.android.intentFilters)
|
|
1644
|
+
? config.android.intentFilters
|
|
1645
|
+
: []
|
|
1646
|
+
|
|
1647
|
+
if (!intentFilters.some(filter => hasDomainFilter(filter, deepLinks.domain))) {
|
|
1648
|
+
intentFilters.push({
|
|
1649
|
+
action: 'VIEW',
|
|
1650
|
+
autoVerify: true,
|
|
1651
|
+
data: [{ scheme: 'https', host: deepLinks.domain, pathPattern: '.*' }],
|
|
1652
|
+
category: ['BROWSABLE', 'DEFAULT'],
|
|
1653
|
+
})
|
|
1654
|
+
}
|
|
1655
|
+
|
|
1656
|
+
config.android.intentFilters = intentFilters
|
|
1657
|
+
return config
|
|
1658
|
+
}
|
|
1659
|
+
`,Mr=e=>typeof e=="string"?e===In||e===In.replace(/^\.\//,"")||e===fi:Array.isArray(e)?Mr(e[0]):!1,Vf=(e,t)=>{let n=Array.isArray(e.plugins)?e.plugins:[];n.some(Mr)||n.push(t),e.plugins=n},Wa=/['"`](?:(?:\.\/)?plugins\/withMachDeepLinks|@radhya\/mach\/expo-plugin)['"`]/;function mi(e){let t=Re.join(e,"package.json");if(!Ie.existsSync(t))return!1;try{let n=JSON.parse(Ie.readFileSync(t,"utf-8"));return!!(n.dependencies?.["@radhya/mach"]||n.devDependencies?.["@radhya/mach"])}catch{return!1}}function zf(e){return Ie.existsSync(Re.join(e,"pnpm-lock.yaml"))?{command:"pnpm",args:["add","-D","@radhya/mach@latest"],label:"pnpm add -D @radhya/mach@latest"}:Ie.existsSync(Re.join(e,"yarn.lock"))?{command:"yarn",args:["add","-D","@radhya/mach@latest"],label:"yarn add -D @radhya/mach@latest"}:Ie.existsSync(Re.join(e,"bun.lockb"))||Ie.existsSync(Re.join(e,"bun.lock"))?{command:"bun",args:["add","-d","@radhya/mach@latest"],label:"bun add -d @radhya/mach@latest"}:{command:"npm",args:["install","--save-dev","@radhya/mach@latest"],label:"npm install --save-dev @radhya/mach@latest"}}function Wf(e){let t=zf(e),n=za(t.command,t.args,{cwd:e,stdio:"inherit",env:{...process.env}});return n.error?{ok:!1,label:t.label,error:n.error.message}:n.status!==0?{ok:!1,label:t.label,error:`${t.command} exited with code ${n.status}`}:{ok:mi(e),label:t.label}}function Jf(e,t){let n=Ie.readFileSync(e,"utf-8");if(Wa.test(n))return"already";let i=/(^[ \t]*)plugins\s*:\s*\[([\s\S]*?)\]/m.exec(n);if(!i||i.index===void 0)return"unsupported";let r=n.includes(`\r
|
|
1660
|
+
`)?`\r
|
|
1661
|
+
`:`
|
|
1662
|
+
`,o=i[1]||"",s=i[2]||"",a=s.match(/\r?\n([ \t]+)\S/)?.[1]||`${o} `,d=s.trim().length===0?`${r}${a}'${t}',${r}${o}`:s.includes(`
|
|
1663
|
+
`)||s.includes("\r")?`${r}${a}'${t}',${s}`:`${r}${a}'${t}',${r}${a}${s.trim()}${r}${o}`,u=`${i[0].slice(0,i[0].indexOf("[")+1)}${d}]`;return Ie.writeFileSync(e,`${n.slice(0,i.index)}${u}${n.slice(i.index+i[0].length)}`),"inserted"}function Ja(e,t,n={}){let i=[],r=[],o=[],s=mi(e);if(!s&&n.installPackage){o.push("Installing @radhya/mach locally so Expo can use @radhya/mach/expo-plugin.");let c=Wf(e);c.ok?(s=!0,o.push(`Installed @radhya/mach with ${c.label}.`)):o.push(`Could not install @radhya/mach with ${c.label}: ${c.error||"unknown error"}. Falling back to local plugin.`)}let l=s?fi:In;if(s)o.push(`Using packaged Expo plugin ${fi}.`);else{let c=Re.join(e,"plugins/withMachDeepLinks.js");Ie.mkdirSync(Re.dirname(c),{recursive:!0}),Ie.writeFileSync(c,Kf),i.push(Re.relative(e,c)),o.push(`Using local Expo plugin fallback ${In}. Install @radhya/mach in this app to use ${fi}.`)}let a=["app.config.ts","app.config.js"].find(c=>Ie.existsSync(Re.join(e,c)));if(a){let c=Re.join(e,a),p=Jf(c,l);return p==="inserted"?i.push(a):p==="already"?o.push(`${a} already includes the Mach Expo plugin.`):o.push(`Add "${l}" to the plugins array in ${a}. Mach could not safely auto-edit this dynamic config.`),{written:i,skipped:r,notes:o}}let d=["app.config.json","app.json"].find(c=>Ie.existsSync(Re.join(e,c)));if(!d)return r.push("Expo config plugin insertion: no app.json or app.config.json found."),{written:i,skipped:r,notes:o};let u=Re.join(e,d);try{let c=JSON.parse(Ie.readFileSync(u,"utf-8")),p=c.expo&&typeof c.expo=="object"?c.expo:c;Vf(p,l),Ie.writeFileSync(u,`${JSON.stringify(c,null,2)}
|
|
1664
|
+
`),i.push(d)}catch(c){r.push(`Expo config plugin insertion failed: ${c.message}`)}return{written:i,skipped:r,notes:o}}function Ya(e){let t=["app.config.ts","app.config.js"].find(i=>Ie.existsSync(Re.join(e,i)));if(t){let i=Ie.readFileSync(Re.join(e,t),"utf-8");return Wa.test(i)?"manual":"missing"}let n=["app.config.json","app.json"].find(i=>Ie.existsSync(Re.join(e,i)));if(!n)return"missing";try{let i=JSON.parse(Ie.readFileSync(Re.join(e,n),"utf-8")),r=i.expo&&typeof i.expo=="object"?i.expo:i;return Array.isArray(r.plugins)&&r.plugins.some(Mr)?"wired":"missing"}catch{return"missing"}}function Ur(e){let t=za("npx",["--no-install","expo","config","--type","public","--json"],{cwd:e,encoding:"utf-8",timeout:8e3,env:{...process.env,CI:"1",EXPO_NO_TELEMETRY:"1"}});if(t.error||t.status!==0||!t.stdout)return null;let n=t.stdout.trim(),i=n.indexOf("{");if(i<0)return null;try{return JSON.parse(n.slice(i))}catch{return null}}function Yf(e){if(!e||typeof e!="object")return null;let n=(Array.isArray(e.ios?.associatedDomains)?e.ios.associatedDomains:[]).map(s=>typeof s=="string"?s.match(/^applinks:(.+)$/)?.[1]:void 0).find(Boolean),r=(Array.isArray(e.android?.intentFilters)?e.android.intentFilters:[]).flatMap(s=>Array.isArray(s?.data)?s.data:[]).find(s=>s?.scheme==="https"&&typeof s.host=="string")?.host,o=n||r;return!o&&!e.scheme&&!e.ios?.bundleIdentifier&&!e.android?.package?null:{domain:o,scheme:typeof e.scheme=="string"?e.scheme:void 0,iosBundleIdentifier:typeof e.ios?.bundleIdentifier=="string"?e.ios.bundleIdentifier:void 0,androidPackage:typeof e.android?.package=="string"?e.android.package:void 0}}function gi(e){return Yf(Ur(e))}import ot from"fs";import Me from"path";var qf=e=>{ot.mkdirSync(Me.dirname(e),{recursive:!0})},qa=(e,t)=>{qf(e),ot.writeFileSync(e,`${JSON.stringify(t,null,2)}
|
|
1665
|
+
`)};var Xf=e=>{let t=e.ios?.appleTeamId,n=e.ios?.bundleIdentifier;return!t||!n?null:`${t}.${n}`};function Fr(e){let t=Xf(e);if(!t)return null;let n=e.paths?.length?e.paths:["/*"],i=n.map(s=>s==="/*"?"*":s),r=n.map(s=>({"/":s,comment:s==="/*"?"Matches all URLs":`Matches ${s}`})),o={applinks:{apps:[],details:[{appIDs:[t],components:r,appID:t,paths:i}]}};return e.ios?.webCredentials&&(o.webcredentials={apps:[t]}),e.ios?.activityContinuation&&(o.activitycontinuation={apps:[t]}),o}function Zf(e){let t=e.android?.package;return t?[{relation:["delegate_permission/common.handle_all_urls"],target:{namespace:"android_app",package_name:t,sha256_cert_fingerprints:e.android?.sha256CertFingerprints||[]}}]:null}function Qf(e,t){let n=t.ios?.appStoreId;if(!n||!ot.existsSync(e))return!1;let i=`<meta name="apple-itunes-app" content="app-id=${n}, app-argument=${t.baseUrl}" />`,r=ot.readFileSync(e,"utf-8");if(/name=["']apple-itunes-app["']/i.test(r)){let o=r.replace(/<meta[^>]+name=["']apple-itunes-app["'][^>]*>/i,i);return ot.writeFileSync(e,o),!0}return/<head[^>]*>/i.test(r)?(ot.writeFileSync(e,r.replace(/<head([^>]*)>/i,`<head$1>
|
|
1666
|
+
${i}`)),!0):!1}function Xa(e,t){let n=[],i=[],r=[],o=t.web?.outputDir||"deep-links",s=Me.join(e,o),l=Fr(t);if(l){let c=li([Me.join(s,".well-known/apple-app-site-association"),Me.join(s,".well-known/apple-app-site-association.json"),Me.join(s,"apple-app-site-association"),Me.join(s,"apple-app-site-association.json")]);for(let p of c)qa(p,l),n.push(Me.relative(e,p))}else i.push("Apple AASA files: missing ios.appleTeamId or ios.bundleIdentifier");let a=Zf(t);if(a){let c=Me.join(s,".well-known/assetlinks.json");qa(c,a),n.push(Me.relative(e,c)),t.android?.sha256CertFingerprints?.length||r.push("assetlinks.json was generated without SHA256 fingerprints. Add them before Android App Links can verify.")}else i.push("Android assetlinks.json: missing android.package");let d=Me.join(e,xr);ot.existsSync(d)&&(ot.unlinkSync(d),r.push(`Removed legacy ${xr}; mach.config.json is now the source of truth.`));let u=Me.join(s,"index.html");return t.web?.smartAppBanner&&Qf(u,t)?n.push(Me.relative(e,u)):t.web?.smartAppBanner&&t.ios?.appStoreId?r.push(`Smart App Banner skipped because ${Me.relative(e,u)} was not found.`):t.web?.smartAppBanner&&r.push("Smart App Banner skipped because ios.appStoreId is not configured."),o!=="public"&&r.push(`Host ${o}/.well-known files at https://${t.domain}/.well-known/.`),{written:n,skipped:i,notes:r}}function Br(e){if(!ot.existsSync(e))return null;try{return JSON.parse(ot.readFileSync(e,"utf-8"))}catch{return null}}import _t from"fs";import $t from"path";import{spawnSync as em}from"child_process";var J=(e,t)=>({level:e,message:t}),Za=(e,t)=>$t.join(e,t.web?.outputDir||"deep-links");function tm(e,t,n="fail"){let i=[],r=Za(e,t),o=$t.join(r,".well-known/apple-app-site-association");if(!Fr(t))return i.push(J("warn","Skipping AASA verification because ios.appleTeamId or ios.bundleIdentifier is missing.")),i;if(!_t.existsSync(o))return i.push(J(n,`${$t.relative(e,o)} is missing.`)),i;_t.statSync(o).size>128*1024?i.push(J("fail","Apple AASA file is larger than 128 KB.")):i.push(J("pass","Apple AASA file is under 128 KB."));let a=Br(o);if(!a)return i.push(J("fail","Apple AASA file is not valid JSON.")),i;let d=`${t.ios?.appleTeamId}.${t.ios?.bundleIdentifier}`,u=a.applinks?.details||[],c=Array.isArray(u)&&u.some(p=>p.appID===d||p.appIDs?.includes(d));return i.push(c?J("pass",`AASA contains ${d}.`):J("fail",`AASA does not contain ${d}.`)),i}function nm(e,t,n="fail"){let i=[],r=Za(e,t),o=$t.join(r,".well-known/assetlinks.json");if(!t.android?.package)return i.push(J("warn","Skipping Android Asset Links verification because android.package is missing.")),i;if(!_t.existsSync(o))return i.push(J(n,`${$t.relative(e,o)} is missing.`)),i;let s=Br(o);if(!s||!Array.isArray(s))return i.push(J("fail","assetlinks.json is not a valid JSON array.")),i;let l=s.find(d=>d?.target?.package_name===t.android?.package);i.push(l?J("pass",`assetlinks.json contains ${t.android.package}.`):J("fail",`assetlinks.json does not contain ${t.android.package}.`));let a=l?.target?.sha256_cert_fingerprints;return i.push(Array.isArray(a)&&a.length>0?J("pass","assetlinks.json has at least one SHA256 fingerprint."):J("warn","assetlinks.json has no SHA256 fingerprints.")),i}function im(e,t,n,i){if(t.framework!=="expo")return[];let r=[],o=Ur(e),l=(Array.isArray(o?.ios?.associatedDomains)?o.ios.associatedDomains:[]).includes(`applinks:${n.domain}`);r.push(l?J("pass",`Expo iOS config contains applinks:${n.domain}.`):J(i?"warn":"fail",`Expo iOS config does not contain applinks:${n.domain}.`));let d=(Array.isArray(o?.android?.intentFilters)?o.android.intentFilters:[]).flatMap(c=>Array.isArray(c?.data)?c.data:[]).some(c=>c?.scheme==="https"&&c.host===n.domain);if(r.push(d?J("pass",`Expo Android config contains App Link host ${n.domain}.`):J(i?"warn":"fail",`Expo Android config does not contain App Link host ${n.domain}.`)),i)return r.push(J("warn","mach.config.json is missing deepLinks; values were inferred from Expo config. Run `mach deeplink setup` to persist Mach metadata and generate hosted files.")),r;let u=Ya(e);return u==="wired"?r.push(J("pass","Expo deep link plugin is wired into Expo config and derives values from mach.config.json.")):u==="manual"&&l&&d?r.push(J("pass","Expo resolved config contains the deep-link settings from the dynamic config.")):u==="manual"?r.push(J("warn","Expo deep link plugin exists, but dynamic or missing Expo config means manual plugin insertion must be confirmed.")):l&&d?r.push(J("warn","Expo plugin is not wired, but resolved Expo config already contains the deep-link settings.")):r.push(J("fail","Expo deep link plugin is missing or not wired into Expo config.")),r}function rm(e,t,n){if(t.framework!=="react-native")return[];let i=[],r=$t.join(e,"android/app/src/main/AndroidManifest.xml");if(_t.existsSync(r)){let s=_t.readFileSync(r,"utf-8");i.push(s.includes(`android:host="${n.domain}"`)?J("pass","AndroidManifest.xml contains the App Links host."):J("warn","AndroidManifest.xml does not contain the App Links host. Native patching is planned for a later phase."))}let o=$t.join(e,"ios");if(_t.existsSync(o)){let l=_t.readdirSync(o,{recursive:!0}).filter(a=>typeof a=="string"&&a.endsWith(".entitlements")).some(a=>_t.readFileSync($t.join(o,a),"utf-8").includes(`applinks:${n.domain}`));i.push(l?J("pass","iOS entitlements contain the associated domain."):J("warn","iOS entitlements do not contain the associated domain. Native patching is planned for a later phase."))}return i}async function Hr(e,t){let n=[];try{let i=await fetch(e,{redirect:"manual"});if(i.status>=300&&i.status<400&&!t)return n.push(J("fail",`${e} redirects. Apple AASA endpoints must not redirect.`)),n;n.push(i.status===200?J("pass",`${e} returned HTTP 200.`):J("fail",`${e} returned HTTP ${i.status}.`));let r=i.headers.get("content-type")||"";!r.includes("application/json")&&!r.includes("text/json")&&n.push(J("warn",`${e} content-type is "${r||"missing"}"; application/json is recommended.`)),JSON.parse(await i.text()),n.push(J("pass",`${e} contains valid JSON.`))}catch(i){n.push(J("fail",`${e} check failed: ${i.message}`))}return n}async function om(e){let t=e.domain;return(await Promise.all([Hr(`https://${t}/.well-known/apple-app-site-association`,!1),Hr(`https://${t}/apple-app-site-association`,!1),Hr(`https://${t}/.well-known/assetlinks.json`,!0)])).flat()}function sm(e){let t=e.android?.package;if(!t)return[J("warn","Cannot print Android device verification commands because android.package is missing.")];let i=em("adb",["version"],{encoding:"utf-8"}).status===0?"Run":"Install Android platform-tools, then run";return[J("info",`${i}: adb shell pm set-app-links --package ${t} 0 all`),J("info",`${i}: adb shell pm verify-app-links --re-verify ${t}`),J("info",`${i}: adb shell pm get-app-links ${t}`)]}async function jr(e,t,n){let i=n.profile||t.deepLinks?.profile||"production",r=t.framework==="expo"?gi(e):null,o=t.framework==="expo"?pi(t,r,i,e):null,s=!t.deepLinks&&!!o,l=t.deepLinks?ui(t,{profile:i,cwd:e,expoHints:r}):o,a=[];if(!l)return[J("fail","mach.config.json is missing deepLinks and Mach could not infer existing deep-link settings. Run `mach deeplink setup`.")];a.push(l.baseUrl?J("pass","deepLinks.baseUrl is configured."):J("fail","deepLinks.baseUrl is missing.")),a.push(l.domain?J("pass","deepLinks.domain is configured."):J("fail","deepLinks.domain is missing.")),a.push(l.scheme?J("pass","deepLinks.scheme is configured."):J("fail","deepLinks.scheme is missing."));let d=s?"warn":"fail";return a.push(...tm(e,l,d)),a.push(...nm(e,l,d)),a.push(...im(e,t,l,s)),a.push(...rm(e,t,l)),n.live&&a.push(...await om(l)),n.androidDevice&&a.push(...sm(l)),a}var $n=()=>process.stdin.isTTY&&process.stdout.isTTY,el=`${m.npmScope}/mach`,vn=()=>{am("Operation cancelled."),process.exit(0)},Vr=e=>{if(typeof e!="string")return;let t=e.trim();return t.length>0?t:void 0},gt=(...e)=>{for(let t of e){let n=Vr(t);if(n)return n}},Ut=async(e,t,n,i,r)=>{if(t)return t;if(r||!$n()){if(i)throw new Error(`${e.replace(/:$/,"")} is required. Pass it as an option or run interactively.`);return}let o=await nl({message:e,initialValue:t||"",placeholder:n,validate(s){if(i&&s.trim().length===0)return"Required."}});return _n(o)&&vn(),Vr(o)};async function um(e,t,n){let i=nn(e.framework),r=nn(t);if(r)return r;if(i)return i;let o=Ha();if(n||!$n())return o;let s=await cm({message:`Which framework should ${m.name} configure?`,initialValue:o,options:[{value:"expo",label:"Expo"},{value:"react-native",label:"React Native"},{value:"flutter",label:"Flutter (not supported yet)"}]});return _n(s)&&vn(),s}var hi=e=>e==="ios"||e==="all",Gr=e=>e==="android"||e==="all";async function pm(e,t,n){if(t!=="expo"||mi(e)||n.installPlugin===!1)return!1;if(n.installPlugin===!0||n.yes)return!0;if(!$n())return!1;let i=await tl({message:`Install ${el} locally so Expo can use ${el}/expo-plugin?`,initialValue:!0});return _n(i)&&vn(),!!i}async function fm(e,t){let n=!!t.yes,i=t.profile||e.deepLinks?.profile||"production",r=ke(e,i)||{},o=r.ios||{},s=r.android||{},l=e.submit?.[i]?.ios||{},a=e.submit?.[i]?.android||{},d=Rt(e,i),u=await um(e,t.framework,n);if(u==="flutter")throw new Error("Flutter deep-link automation is planned but not supported yet.");let c=ja(e,Ba(t.platform),r),p=e.deepLinks,g=u==="expo"&&(!gt(t.baseUrl,p?.baseUrl,t.domain?`https://${t.domain}`:void 0)||!gt(t.scheme,p?.scheme,o.scheme,e.scheme,e.slug,e.name)||hi(c)&&!gt(t.iosBundleId,p?.ios?.bundleIdentifier,o.bundleIdentifier,o.bundleId,e.ios?.bundleIdentifier)||Gr(c)&&!gt(t.androidPackage,p?.android?.package,s.package,s.applicationId,e.android?.package,a.packageName,a.package))?pi(e,gi(process.cwd()),i,process.cwd()):null,y=t.output||p?.web?.outputDir||di(process.cwd(),e),w=await Ut("Deep link base URL:",t.baseUrl||p?.baseUrl||(t.domain?`https://${t.domain}`:void 0)||g?.baseUrl,"https://app.example.com",!0,n),$=wn(w),b=t.baseUrl?new URL($).hostname:void 0,x=await Ut("Associated domain:",t.domain||b||p?.domain||g?.domain||new URL($).hostname,"app.example.com",!0,n),E=ci(await Ut("URI scheme:",gt(t.scheme,p?.scheme,o.scheme,e.scheme,g?.scheme,e.slug,e.name,"app"),"myapp",!0,n)||"app"),F=hi(c)?await Ut("iOS bundle identifier:",gt(t.iosBundleId,p?.ios?.bundleIdentifier,o.bundleIdentifier,o.bundleId,e.ios?.bundleIdentifier,g?.ios?.bundleIdentifier),"com.example.app",!0,n):p?.ios?.bundleIdentifier||e.ios?.bundleIdentifier,X=hi(c)?await Ut("Apple Team ID:",gt(t.appleTeamId,p?.ios?.appleTeamId,o.appleTeamId,o.developerTeamId,l.appleTeamId,l.developerTeamId,e.ios?.appleTeamId,e.ios?.developerTeamId,d.teamId),"ABCDE12345",!0,n):p?.ios?.appleTeamId||e.ios?.appleTeamId,D=hi(c)?await Ut("App Store ID (optional, for Smart App Banner):",gt(t.appStoreId,p?.ios?.appStoreId,o.ascAppId,l.ascAppId,e.ios?.ascAppId),"1234567890",!1,n):p?.ios?.appStoreId,I=Gr(c)?await Ut("Android package name:",gt(t.androidPackage,p?.android?.package,s.package,s.applicationId,e.android?.package,a.packageName,a.package,g?.android?.package),"com.example.app",!0,n):p?.android?.package||e.android?.package,N=p?.android?.sha256CertFingerprints||[],_=t.androidFingerprint||[],O=e.android?.sha256CertFingerprints||[],h=s.sha256CertFingerprints||[],M=[..._,...N,...h,...O].filter(Boolean);if(Gr(c)&&M.length===0&&!n&&$n()){let H=await nl({message:"Android SHA256 fingerprint (optional now, required for verified App Links):",placeholder:"AA:BB:CC:..."});_n(H)&&vn(),Vr(H)&&M.push(H)}let U=Ga(e,{...t,baseUrl:$,domain:x,scheme:E,output:y,appleTeamId:X,appStoreId:D,androidFingerprint:M});return U.ios={...U.ios||{},bundleIdentifier:F,appleTeamId:X,appStoreId:D},U.android={...U.android||{},package:I,sha256CertFingerprints:Array.from(new Set(M))},{framework:u,platform:c,deepLinks:U}}var Kr=(e,t)=>{t.length!==0&&lm(t.map(n=>`- ${n}`).join(`
|
|
1667
|
+
`),e)},il=e=>e.filter(t=>t.level==="fail").length;function rl(e){for(let t of e){let n=t.level==="pass"?Qe.green("PASS"):t.level==="warn"?Qe.yellow("WARN"):t.level==="info"?Qe.cyan("INFO"):Qe.red("FAIL");yi.info(`${n} ${t.message}`)}}async function ol(e){try{let t=process.cwd(),n=Qa.join(t,m.configFileName),i=_e()||{};if(!dm.existsSync(n)){let $=e.yes||!$n()?!0:await tl({message:`${m.configFileName} was not found. Create one with deep link settings?`,initialValue:!0});if(_n($)&&vn(),!$)return}let{framework:r,deepLinks:o}=await fm(i,e),s=e.profile||i.deepLinks?.profile||"production",l=Ka(i,r,o,s),a=Va(l,t),d=Xa(t,o),u=await pm(t,r,e),c=r==="expo"?Ja(t,o,{installPackage:u}):{written:[],skipped:[],notes:r==="react-native"?["React Native native patching is planned for a later phase. Hosted files were generated now."]:[]},p=[Qa.relative(t,a),...d.written,...c.written],f=[...d.skipped,...c.skipped],g=[...d.notes,...c.notes];Kr("Written",p),Kr("Skipped",f),Kr("Notes",g);let y=await jr(t,l,{});rl(y);let w=il(y);if(w>0){Si(Qe.yellow(`Deep link setup finished with ${w} verification issue(s).`));return}Si(Qe.green("Deep link setup complete."))}catch(t){yi.error(Qe.red(t.message||"Deep link setup failed.")),process.exit(1)}}async function sl(e){try{let t=_e();t||(yi.error(Qe.red(`No ${m.configFileName} found in the current directory.`)),process.exit(1));let n=await jr(process.cwd(),t,e);rl(n);let i=il(n);i>0&&(Si(Qe.red(`Deep link verification failed with ${i} issue(s).`)),process.exit(1)),Si(Qe.green("Deep link verification passed."))}catch(t){yi.error(Qe.red(t.message||"Deep link verification failed.")),process.exit(1)}}import{log as He,spinner as Pn,text as al,select as ll,confirm as mm,isCancel as Rn,cancel as Dn,outro as On,note as gm}from"@clack/prompts";import oe from"chalk";import{execSync as hm}from"child_process";async function ym(){try{let e=hm("xcrun devicectl list devices --json-output -",{stdio:["pipe","pipe","pipe"]}).toString();return(JSON.parse(e).result?.devices||[]).filter(i=>i.connectionProperties?.transportType==="wired"||i.connectionProperties?.transportType==="localNetwork").map(i=>({udid:i.identifier,name:i.deviceProperties?.name||"Unknown Device",model:i.hardwareProperties?.marketingName||"iPhone"}))}catch{return[]}}var cl=e=>e?.trim().toUpperCase()||void 0;function dl(e){let t=_e(),n=t?Rt(t):{},i=cl(e.teamId),r=i||n.teamId;return{...n,teamId:r,developerTeamId:i||n.developerTeamId||r}}async function Sm(e){let t=e.udid,n=e.name,i=dl(e),r=i.teamId;if(!t){let s=Pn();s.start("Scanning for connected iOS devices...");let l=await ym();if(s.stop(l.length>0?`Found ${l.length} device(s)`:"No devices detected"),l.length===1)t=l[0].udid,n=n||l[0].name,He.info(`Detected: ${oe.bold(n)} (${oe.dim(t.substring(0,12)+"...")})`);else if(l.length>1){let a=await ll({message:"Select a device to register:",options:l.map(u=>({value:u.udid,label:`${u.name} (${u.model})`,hint:u.udid.substring(0,12)+"..."}))});if(Rn(a)){Dn("Cancelled");return}t=a;let d=l.find(u=>u.udid===t);n=n||d.name}else{He.info(oe.dim("No connected devices found. Enter UDID manually."));let a=await al({message:"Device UDID:",placeholder:"00008101-XXXXXXXXXXXX",validate(d){if(d.length<10)return"UDID seems too short"}});if(Rn(a)){Dn("Cancelled");return}t=a}}if(!n){let s=await al({message:"Device name:",placeholder:"Nitesh's iPhone",validate(l){if(l.length===0)return"Name is required"}});if(Rn(s)){Dn("Cancelled");return}n=s}let o=Pn();o.start("Registering device...");try{await T.post("/devices",{udid:t,name:n,platform:"ios",addedVia:"cli",teamId:r,teamName:i.teamName,developerTeamId:i.developerTeamId,appStoreConnectTeamId:i.appStoreConnectTeamId,providerId:i.providerId,providerName:i.providerName}),o.stop(oe.green("Device registered!")),He.info(` ${oe.bold("Name:")} ${n}`),He.info(` ${oe.bold("UDID:")} ${oe.dim(t)}`),r&&He.info(` ${oe.bold("Team:")} ${oe.dim(r)}`)}catch(s){o.stop(oe.red("Failed to register device")),He.error(s.response?.data?.message||s.message)}On(oe.blue("---"))}async function bm(e={}){let t=cl(e.teamId),n=Pn();n.start("Fetching registered devices...");try{let r=(await T.get("/devices",t?{params:{teamId:t}}:void 0)).data.devices||[];if(n.stop(`${r.length} device(s) registered${t?` for team ${t}`:""}`),r.length===0){He.info(oe.dim(`No devices registered yet. Run \`${m.nameLower} device register\` to add one.`)),On(oe.blue("---"));return}let o=r.map(s=>{let l=new Date(s.createdAt).toLocaleDateString();return` ${oe.bold(s.name.padEnd(24))} ${oe.dim(s.udid.padEnd(28))} ${oe.dim((s.teamId||"-").padEnd(12))} ${oe.cyan((s.addedVia||"-").padEnd(10))} ${oe.dim(l)}`});gm(` ${oe.bold("Name".padEnd(24))} ${"UDID".padEnd(28)} ${"Team".padEnd(12)} ${"Via".padEnd(10)} Date
|
|
1539
1668
|
`+o.join(`
|
|
1540
|
-
`),"Registered Devices")}catch(i){n.stop(
|
|
1541
|
-
`),d=
|
|
1542
|
-
`),u=
|
|
1543
|
-
`),u=
|
|
1544
|
-
`),u=
|
|
1545
|
-
`);/__DEV__/.test(g)||n.push({id:`DBG-${String(i++).padStart(3,"0")}`,title:"Sensitive data in console log",description:"Console log may expose sensitive data (token, password, etc.) in production",severity:"medium",category:"debug",file:u,line:c+1,recommendation:"Wrap in __DEV__ check or remove sensitive data from console output."})}}}return{category:"debug",label:"Debug/Dev Flags",findings:n,durationMs:0}}import
|
|
1546
|
-
Running expo prebuild for deeper analysis...`));try{
|
|
1547
|
-
Skipping manifest/plist checks \u2014 no android/ios dirs. Use --prebuild to generate them.`)),o;for(let d of r){let u=
|
|
1548
|
-
`)),s.length>0){Se.info(
|
|
1549
|
-
`));for(let a of s)Se.error(fe.red(`${fe.bold(a.name)} ${fe.dim(`(${a.arch})`)}`)),Se.info(fe.dim(` PT_LOAD alignment: 2**${Math.log2(a.align)} (${a.align} bytes, needs 2**14 = ${_a})`))}return l.length>0&&(console.log(""),Se.success(fe.green(`${l.length} librar${l.length===1?"y":"ies"} correctly aligned (2**14 or higher).`))),console.log(""),s.length===0?(Se.success(fe.green.bold("ELF Verification Successful. APK is 16KB compatible.")),!0):(Se.error(fe.red.bold(`Found ${s.length} unaligned lib${s.length===1?"":"s"} (arm64-v8a/x86_64 libs need to be aligned).`)),console.log(""),Se.info(fe.yellow("To fix this:")),Se.info(fe.dim(" 1. Rebuild with NDK r28+ which defaults to 16KB page alignment")),Se.info(fe.dim(" 2. Or set -DANDROID_SUPPORT_FLEXIBLE_PAGE_SIZES=ON in CMake")),Se.info(fe.dim(" 3. Update third-party libraries that ship prebuilt .so files")),Se.info(fe.dim(" 4. After rebuilding: zipalign -p -f -v 16 input.apk output.apk")),console.log(""),Se.info(fe.dim("Reference: https://developer.android.com/guide/practices/page-sizes")),!1)}catch(r){return n.stop("Analysis failed."),Se.error(fe.red(`Failed to analyze APK: ${r.message}`)),!1}finally{try{at.rmSync(i,{recursive:!0,force:!0})}catch{}}}function hf(e){let t=at.openSync(e,"r");try{let n=Buffer.alloc(64);if(at.readSync(t,n,0,64,0),!n.subarray(0,4).equals(gf))return null;let i=n[4]===2,r=n[5]===1,o=(f,p)=>r?f.readUInt16LE(p):f.readUInt16BE(p),s=(f,p)=>r?f.readUInt32LE(p):f.readUInt32BE(p),l=(f,p)=>Number(r?f.readBigUInt64LE(p):f.readBigUInt64BE(p)),a,d,u;i?(a=l(n,32),d=o(n,54),u=o(n,56)):(a=s(n,28),d=o(n,42),u=o(n,44));let c=null;for(let f=0;f<u;f++){let p=Buffer.alloc(d);if(at.readSync(t,p,0,d,a+f*d),s(p,0)!==mf)continue;let y;i?y=l(p,48):y=s(p,28),y>0&&(c===null||y<c)&&(c=y)}return c??0}catch{return null}finally{at.closeSync(t)}}function $a(e){let t=[];if(!at.existsSync(e))return t;let n=at.readdirSync(e,{withFileTypes:!0});for(let i of n){let r=Ft.join(e,i.name);i.isDirectory()?t.push(...$a(r)):i.name.endsWith(".so")&&t.push(r)}return t}function Sf(e){return e.includes("arm64-v8a")?"arm64-v8a":e.includes("x86_64")?"x86_64":"unknown"}var Oa=async e=>{if(Pe()||(Ue.error(Ye.red(`You are not logged in. Run \`${m.nameLower} login\` first.`)),process.exit(1)),e.apk){await Ef(e);return}let n=process.cwd(),i=qn.join(n,"package.json");pn.existsSync(i)||(Ue.error(Ye.red("No package.json found. Run this command from a project root.")),process.exit(1));let r=JSON.parse(pn.readFileSync(i,"utf-8")),o=!!(r.dependencies?.expo||r.devDependencies?.expo);e.json||(Ue.info(Ye.dim(`Project: ${r.name||"unknown"} v${r.version||"0.0.0"}`)),Ue.info(Ye.dim(`Type: ${o?"Expo":"Bare React Native"}`)),Ue.info(""));let s={json:e.json,fix:e.fix,category:e.category,severity:e.severity,prebuild:e.prebuild},l=await Aa(n,s);e.json?console.log(JSON.stringify(wa(l,r),null,2)):Ia(l,e.severity);let a=l.some(u=>u.findings.some(c=>c.severity==="critical")),d=l.some(u=>u.findings.some(c=>c.severity==="high"));(a||d)&&process.exit(1)},va=["16kb"];async function Ef(e){let t=e.category?.toLowerCase();t&&!va.includes(t)&&(Ue.error(Ye.red(`Unknown APK check category: "${t}"`)),Ue.info(Ye.dim(`Available APK checks: ${va.join(", ")}`)),process.exit(1));let n=await Af(e.apk);n||process.exit(1);let i=!t,r=!1;(i||t==="16kb")&&(await Ra(n)||(r=!0)),r&&process.exit(1)}async function Af(e){if(e.startsWith("build:")){let n=e.slice(6);return await If(n)}if(e.startsWith("http://")||e.startsWith("https://"))return await Da(e);let t=qn.resolve(e);return pn.existsSync(t)?t:(Ue.error(Ye.red(`APK file not found: ${t}`)),null)}async function If(e){let t=Pa();t.start(`Fetching APK from build ${e}...`);try{let n=await k.get(`/build/${e}`);if(n.data.status!=="success")throw new Error(n.data.message);let i=n.data.build;if(!i)throw new Error("Build not found");let r=i.artifacts?.find(o=>o.type?o.type==="apk":o.name?.endsWith(".apk")||o.url?.includes(".apk"));return!r||!r.url?(t.stop("No APK artifact found"),Ue.error(Ye.red("This build does not have an APK artifact.")),Ue.info(Ye.dim("Make sure the build produced an APK (not just an AAB).")),null):(t.stop(`Found build: ${i.buildId||e}`),await Da(r.url))}catch(n){return t.stop("Failed to fetch build"),Ue.error(Ye.red(n.message)),null}}async function Da(e){let t=Pa();t.start("Downloading APK...");try{let n=pn.mkdtempSync(qn.join(yf.tmpdir(),`${m.nameLower}-audit-`)),i=qn.join(n,"app.apk"),r=await bf.get(e,{responseType:"arraybuffer"});pn.writeFileSync(i,r.data);let o=(r.data.length/(1024*1024)).toFixed(1);return t.stop(`Downloaded APK (${o} MB)`),i}catch(n){return t.stop("Download failed"),Ue.error(Ye.red(`Failed to download APK: ${n.message}`)),null}}var Rf=console.log;console.log=()=>{};_f();console.log=Rf;we(Ee.bgCyan.black(m.cliTag("Production Build Orchestrator")));var vf=$f(import.meta.url),Pf=vf("../package.json"),Na=(e,t=[])=>t.concat(e),re=new wf;re.name(m.nameLower).description(`${m.name} CLI: Powerful Cloud Infrastructure Tools`).version(Pf.version).option("-y, --yes","Automatically answer yes to all prompts",!1).option("--quiet","Suppress non-essential output",!1);re.command("agent").description("Manage local device discovery agent for the Install Hub (port 7070)").argument("[action]","start, run, install, status, restart, stop, or uninstall","start").action(async e=>{await Ns(e)});re.command("host").description("Setup AWS S3 static hosting and CloudFront").action(async()=>{we(Ee.bgCyan.black(m.cliTag("Hosting"))),await Ir()});re.command("sitemap").description("Generate sitemap.xml from Expo Router app structure").option("-o, --output <path>","Output path for sitemap.xml","./public/sitemap.xml").action(async e=>{we(Ee.bgCyan.black(m.cliTag("Sitemap Generator"))),await $r(e)});re.command("build").description("Run a build on a cloud provider (AWS Spot Instances)").argument("[platform]","Target platform (android, ios)").option("--platform <os>","Target platform alias (android, ios) [Optional]").option("--repo <url>","Git Repository URL").option("--branch <name>","Git Branch").option("--ami <id>","AMI ID").option("--bucket <name>","S3 Bucket for artifacts").option("--region <region>","AWS Region").option("--aws-profile <name>","AWS Credentials Profile").option("-p, --build-profile <name>","Build Profile (e.g. production, staging)").option("--profile <name>","Build Profile (alias for --build-profile)").option("--dry-run","Generate User Data script without launching").option("--keep-instance","Do not terminate the instance after build").option("--subnet <id>","VPC Subnet ID to launch the instance in").option("--security-group <id>","VPC Security Group ID to use").option("--ssh-host <host>","Remote host for iOS build (SSH)").option("--ssh-user <user>","SSH username for remote host").option("--ssh-key <path>","Path to private SSH key for remote host").option("--ios-scheme <scheme>","iOS Scheme to build").option("--ios-team-id <id>","Apple Development Team ID").option("--ios-configuration <config>","Xcode configuration (Release/Debug)").option("--ios-export-method <method>","Export method (ad-hoc, app-store, development, enterprise)").option("--ios-api-key-id <id>","App Store Connect API Key ID").option("--ios-api-key-issuer <id>","App Store Connect API Key Issuer ID").option("--ios-api-key-path <path>","Path to App Store Connect API Key (.p8) file").option("--simulator","Build for iOS Simulator (no signing required)").addOption(new Fe("--build-id <id>","Internal build ID").hideHelp()).addOption(new Fe("--project-id <id>","Internal project ID").hideHelp()).addOption(new Fe("--fail-only","Internal: mark an existing build failed").hideHelp()).addOption(new Fe("--error <message>","Internal failure message").hideHelp()).option("--local","Run build on local machine").option("--auto-version","Automatically fetch and increment Android versionCode or iOS buildNumber from the store").option("--auto-submit","Submit this build after it completes successfully").option("--submit-track <track>","Google Play track to use with --auto-submit").option("--submit-release-status <status>","Google Play release status to use with --auto-submit").option("--submit-rollout <fraction>","Google Play staged rollout fraction to use with --auto-submit").option("--submit-changes-not-sent-for-review","Commit Google Play changes without automatically sending them for review when using --auto-submit").option("--submit-credential-id <id>","Service credential ID to use with --auto-submit").option("--submit-json-output <path>","Write auto-submit metadata JSON to a file for CI/CD").option("--verbose","Enable verbose logging").option("--json-output <path>","Write build metadata JSON to a file for CI/CD").option("--maestro","Queue a managed Maestro test run after a successful build").option("--maestro-flows <path>","Maestro flow file or directory (default: .maestro)").option("--maestro-device <device>","Managed Maestro device profile").option("--maestro-retries <n>","Retries for the Maestro run","1").option("--maestro-record","Enable screen recording where supported").option("--maestro-use-build-source","Use Maestro flows from the build source snapshot instead of uploading local flows").option("--maestro-env <name>","Forward an environment variable to the managed Maestro runner; repeat or comma-separate names",Na,[]).option("-y, --yes","Automatically answer yes to all prompts",!1).option("--quiet","Suppress non-essential output",!1).action(async(e,t)=>{let n=re.opts();t.yes=t.yes||n.yes,t.quiet=t.quiet||n.quiet,t.platform=e||t.platform,t.buildProfile=t.profile||t.buildProfile,t.quiet||we(Ee.bgCyan.black(m.cliTag("Cloud Build"))),await On(t)});re.command("maestro").description("Run Maestro tests locally or with the managed Mach runner").option("--platform <os>","Target platform (android/ios)").option("-p, --profile <name>","Build profile to resolve when using --latest","production").option("--latest","Use the latest successful build for the platform/profile").option("--build-id <id>","Use a specific Mach build ID").option("--build-url <url>","Use a Mach build URL").option("--artifact-url <url>","Use a direct APK or iOS simulator app artifact URL").option("--local","Run Maestro on a connected local emulator/device instead of the managed runner").option("--maestro-flows <path>","Maestro flow file or directory (default: .maestro)").option("--maestro-device <device>","Managed Maestro device profile").option("--maestro-retries <n>","Retries for the Maestro run","1").option("--maestro-record","Enable screen recording where supported").option("--maestro-use-build-source","Use Maestro flows from the build source snapshot instead of uploading local flows").option("--maestro-env <name>","Forward an environment variable to the managed Maestro runner; repeat or comma-separate names",Na,[]).option("--wait","Wait for managed Maestro completion and exit non-zero on failure").option("--wait-timeout <minutes>","Maximum minutes to wait for managed Maestro completion","60").option("--wait-interval <seconds>","Polling interval while waiting for managed Maestro completion","15").option("--json-output <path>","Write test run metadata JSON to a file for CI/CD").addOption(new Fe("--local-runner","Internal: execute a managed Maestro run on this machine").hideHelp()).addOption(new Fe("--test-run-id <id>","Internal test run ID").hideHelp()).addOption(new Fe("--project-id <id>","Internal project ID").hideHelp()).addOption(new Fe("--runner-token <token>","Internal runner token").hideHelp()).action(async e=>{we(Ee.bgCyan.black(m.cliTag("Maestro Testing"))),await ho(e)});re.command("update").description("Deploy an Over-The-Air (OTA) update to your live channel").option("--branch <name>","Channel or Branch to deploy to (e.g., production)","production").action(async e=>{we(Ee.bgCyan.black(m.cliTag("OTA Update"))),await Ks(e)});re.command("submit").description("Automated Store Submission (App Store / Google Play)").option("--platform <os>","Target platform (ios/android)").option("-p, --profile <name>","Build/submission profile to submit from (e.g. production, preprod)").option("--track <track>","Google Play Track (internal, alpha, beta, production)").option("--release-status <status>","Google Play release status (completed, draft, halted, inProgress)").option("--rollout <fraction>","Google Play staged rollout fraction for inProgress releases (example: 0.1)").option("--changes-not-sent-for-review","Commit Google Play changes without automatically sending them for review").option("--ssh-host <host>","Remote macOS host for iOS submission").option("--ssh-user <user>","SSH username for remote iOS submission").option("--ssh-key <path>","Path to private SSH key for remote iOS submission").option("--credential-id <id>","Service credential ID to use when multiple submission credentials exist").option("--local","Run submission on this machine (internal runner mode for iOS)").addOption(new Fe("--submit-id <id>","Internal submission ID").hideHelp()).addOption(new Fe("--project-id <id>","Internal project ID").hideHelp()).addOption(new Fe("--package-name <name>","Internal Android package name").hideHelp()).addOption(new Fe("--bundle-id <id>","Internal iOS bundle identifier").hideHelp()).option("--json-output <path>","Write submission metadata JSON to a file for CI/CD").option("--latest","Use the latest successful build for submission").option("--build-id <id>","Use a specific build ID for submission").action(async e=>{let t=re.opts();e.quiet=e.quiet||t.quiet,e.yes=e.yes||t.yes,we(Ee.bgCyan.black(m.cliTag("Store Submission"))),await wn(e)});re.command("login").description(`Login to ${m.name} Dashboard`).action(async()=>{we(Ee.bgCyan.black(m.cliTag("Login"))),await xs()});re.command("logout").description(`Logout from ${m.name} on this machine`).action(async()=>{we(Ee.bgCyan.black(m.cliTag("Logout"))),await Ms()});re.command("link").description(`Link local directory to a ${m.name} Project`).action(async()=>{we(Ee.bgCyan.black(m.cliTag("Link Project"))),await Fs()});re.command("me").description("Display currently logged in user details").action(async()=>{await zs()});re.command("init").description(`Create a new ${m.name} Project`).action(async()=>{we(Ee.bgCyan.black(m.cliTag("Init Project"))),await Bs()});re.command("env").description("Manage Environment Variables").argument("<action>","Action to perform: set, list, pull, download, or export").argument("[args...]","Key=Value pairs for set action").option("-e, --environment <name>","Environment to pull/download","development").option("-o, --out <file>","Output file for pull/download",".env.local").option("--overwrite","Overwrite output file if it already exists").action(async(e,t,n)=>{we(Ee.bgCyan.black(m.cliTag("Env Manager"))),await js(e,t,n)});re.command("start").description("Start the development server (Metro)").option("-p, --build-profile <name>","Build profile (e.g. development, staging)","development").option("--tunnel","Use ngrok tunnel").option("--lan","Use LAN IP").option("--localhost","Use localhost").option("-c, --clear","Clear Metro cache").option("--port <number>","Port to listen on").option("--ios","Start on iOS").option("--android","Start on Android").option("--web","Start on Web").action(async e=>{we(Ee.bgCyan.black(m.cliTag("Dev Server"))),await Ys(e)});re.command("config").description("Show resolved configuration for a profile").option("-p, --profile <name>","Build profile to resolve","development").option("--json","Output as JSON").action(async e=>{await Js(e)});re.command("credentials").description("Unified, interactive credential management (iOS/Android)").option("-p, --profile <name>","Build profile (production, staging, development)").option("--force","Force recreate certificates (nuke existing on Apple Portal)",!1).action(async e=>{let{credentialsMainCommand:t}=await import("./credentials-PS7URNCB.js");await t(e)});re.command("credentials:setup").description("Automated credential provisioning (iOS/Android) [Legacy]").requiredOption("--platform <os>","Platform: ios or android").option("--profile <name>","Build profile (production, staging, development)").option("--bundle-id <id>","Bundle ID / Package Name (optional, auto-detected)").option("--team-id <id>","Apple Team ID (iOS only)").option("--key-alias <alias>","Android keystore alias (optional, auto-generated)").option("--aws-profile <name>","AWS Credentials Profile (for S3 storage)").option("--force","Force recreate certificates (nuke existing on Apple Portal)",!1).action(async e=>{we(Ee.bgCyan.black(m.cliTag("Credentials Setup"))),await Ht(e),Ca(Ee.green("Done!"))});re.command("credentials:service").description("Upload Service Credentials (ASC API Key / Google Service JSON) [Legacy]").requiredOption("--platform <os>","Platform: ios or android").option("--file <path>","Path to credential file (.p8 or .json)").option("--issuer-id <id>","ASC API Key Issuer ID (iOS only)").option("--key-id <id>","ASC API Key ID (iOS only)").option("--bundle-id <id>","Bundle identifier / Android package name to attach this service credential to").option("--package-name <name>","Android package name to attach this service credential to").option("-p, --profile <name>","Build profile to resolve package/bundle identifier from config").action(async e=>{we(Ee.bgCyan.black(m.cliTag("Service Credentials"))),await Er(e),Ca(Ee.green("Done!"))});var sr=re.command("device").description("Manage registered iOS test devices");sr.command("register").description("Register a connected iOS device or enter UDID manually").option("--udid <udid>","Device UDID (skip auto-detection)").option("--name <name>","Device name").option("--team-id <id>","Apple Developer Team ID for this device").action(async e=>{await Hn("register",e)});sr.command("list").description("List all registered devices").option("--team-id <id>","Filter by Apple Developer Team ID").action(async e=>{await Hn("list",e)});sr.command("remove").description("Remove a registered device").option("--udid <udid>","Device UDID to remove").option("--team-id <id>","Apple Developer Team ID for this device").action(async e=>{await Hn("remove",e)});re.command("audit").description("Run automated security audit on the project or APK").option("--apk <path>","Path to APK file (runs APK diagnostics like 16KB alignment)").option("--json","Output results as JSON (for CI/CD)").option("--fix","Auto-apply fixes where possible").option("--category <name>","Run only a specific check category (e.g. 16kb, permissions, secrets)").option("--severity <level>","Minimum severity to display (critical, high, medium, low, info)").option("--prebuild","Run expo prebuild for deeper manifest/plist analysis").action(async e=>{we(Ee.bgCyan.black(m.cliTag(e.apk?"APK Audit":"Security Audit"))),await Oa(e)});var Of=new Set(["login","logout","agent"]);re.hook("preAction",(e,t)=>{let n=t.name(),i=t.opts?.()||{};n==="maestro"&&(i.local||i.localRunner)||Of.has(n)||mr()});re.on("command:*",()=>{console.error(`Invalid command: %s
|
|
1550
|
-
See --help for a list of available commands.`,
|
|
1669
|
+
`),"Registered Devices")}catch(i){n.stop(oe.red("Failed to fetch devices")),He.error(i.response?.data?.message||i.message)}On(oe.blue("---"))}async function Am(e){let t=e.udid,n=dl(e).teamId;if(!t){let o=Pn();o.start("Fetching registered devices...");try{let l=(await T.get("/devices",n?{params:{teamId:n}}:void 0)).data.devices||[];if(o.stop(`${l.length} device(s) found`),l.length===0){He.info(oe.dim("No devices to remove.")),On(oe.blue("---"));return}let a=await ll({message:"Select device to remove:",options:l.map(u=>({value:u.deviceKey||u.udid,label:u.name,hint:`${u.udid.substring(0,12)}...${u.teamId?` \xB7 ${u.teamId}`:""}`}))});if(Rn(a)){Dn("Cancelled");return}let d=l.find(u=>(u.deviceKey||u.udid)===a);t=d?.udid||a,n=d?.teamId||n}catch(s){o.stop(oe.red("Failed to fetch devices")),He.error(s.response?.data?.message||s.message);return}}let i=await mm({message:`Remove device ${oe.dim(t.substring(0,12)+"...")}?`});if(Rn(i)||!i){Dn("Cancelled");return}let r=Pn();r.start("Removing device...");try{await T.delete(`/devices/${encodeURIComponent(t)}`,n?{params:{teamId:n}}:void 0),r.stop(oe.green("Device removed"))}catch(o){r.stop(oe.red("Failed to remove device")),He.error(o.response?.data?.message||o.message)}On(oe.blue("---"))}async function bi(e,t){switch(e){case"register":await Sm(t);break;case"list":await bm(t);break;case"remove":await Am(t);break;default:He.error(`Unknown action: ${e}`)}}import{log as Ge,spinner as Fl}from"@clack/prompts";import tt from"chalk";import Pi from"path";import Nn from"fs";import eg from"os";import tg from"axios";var je=(o=>(o.CRITICAL="critical",o.HIGH="high",o.MEDIUM="medium",o.LOW="low",o.INFO="info",o))(je||{}),et=(a=>(a.PERMISSIONS="permissions",a.SECRETS="secrets",a.DEPENDENCIES="dependencies",a.STORAGE="storage",a.NETWORK="network",a.DEBUG="debug",a.MANIFEST="manifest",a.ATS="ats",a))(et||{});import{spinner as Pl,log as kn}from"@clack/prompts";import Ue from"chalk";import{execSync as Km}from"child_process";import Ol from"fs";import Cl from"path";import vt from"fs";import Cn from"path";import{execSync as Em}from"child_process";var ul={"android.permission.READ_PHONE_STATE":{severity:"high",description:"Can read phone number, IMEI, carrier info"},"android.permission.CALL_PHONE":{severity:"high",description:"Can make calls without user interaction"},"android.permission.SEND_SMS":{severity:"high",description:"Can send SMS without user interaction"},"android.permission.READ_SMS":{severity:"high",description:"Can read user SMS messages"},"android.permission.READ_CONTACTS":{severity:"medium",description:"Can read user contacts"},"android.permission.WRITE_CONTACTS":{severity:"medium",description:"Can modify user contacts"},"android.permission.READ_CALL_LOG":{severity:"high",description:"Can read call history"},"android.permission.CAMERA":{severity:"medium",description:"Camera access"},"android.permission.RECORD_AUDIO":{severity:"medium",description:"Microphone access"},"android.permission.ACCESS_FINE_LOCATION":{severity:"medium",description:"Precise GPS location"},"android.permission.ACCESS_COARSE_LOCATION":{severity:"medium",description:"Approximate location"},"android.permission.ACCESS_BACKGROUND_LOCATION":{severity:"high",description:"Background location tracking"},"android.permission.READ_EXTERNAL_STORAGE":{severity:"medium",description:"Read files on device"},"android.permission.WRITE_EXTERNAL_STORAGE":{severity:"medium",description:"Write files on device"},"android.permission.READ_MEDIA_IMAGES":{severity:"low",description:"Read photos"},"android.permission.READ_MEDIA_VIDEO":{severity:"low",description:"Read videos"},"android.permission.SYSTEM_ALERT_WINDOW":{severity:"high",description:"Draw overlays on other apps"},"android.permission.REQUEST_INSTALL_PACKAGES":{severity:"high",description:"Can install APKs"}},Im={NSCameraUsageDescription:{severity:"medium",description:"Camera access declared"},NSMicrophoneUsageDescription:{severity:"medium",description:"Microphone access declared"},NSLocationWhenInUseUsageDescription:{severity:"medium",description:"Location (in-use) declared"},NSLocationAlwaysUsageDescription:{severity:"high",description:"Background location declared"},NSContactsUsageDescription:{severity:"medium",description:"Contacts access declared"},NSCalendarsUsageDescription:{severity:"low",description:"Calendar access declared"},NSPhotoLibraryUsageDescription:{severity:"low",description:"Photo library access declared"}};function wm(e){try{let n=Em("npx expo config --type introspect --json 2>/dev/null",{cwd:e,encoding:"utf-8",timeout:3e4});return JSON.parse(n)}catch{}let t=Cn.join(e,"app.json");if(vt.existsSync(t))try{let n=JSON.parse(vt.readFileSync(t,"utf-8"));return n.expo||n}catch{}return null}function _m(e){let t=[],n=Cn.join(e,"node_modules");if(!vt.existsSync(n))return t;let i=/<uses-permission\s+android:name="([^"]+)"/g;function r(o,s){let l=Cn.join(o,"android","src","main","AndroidManifest.xml");if(!vt.existsSync(l))return;let a=vt.readFileSync(l,"utf-8"),d;for(;(d=i.exec(a))!==null;)t.push({pkg:s,permission:d[1]});i.lastIndex=0}for(let o of vt.readdirSync(n)){if(o.startsWith("."))continue;let s=Cn.join(n,o);if(o.startsWith("@")){if(!vt.statSync(s).isDirectory())continue;for(let l of vt.readdirSync(s))r(Cn.join(s,l),`${o}/${l}`)}else r(s,o)}return t}async function pl(e,t){let n=[],i=1,r=wm(e),o=r?.android?.permissions||[],s=r?.android?.blockedPermissions||[];for(let d of o){let u=ul[d];u&&n.push({id:`PERM-${String(i++).padStart(3,"0")}`,title:`${d.split(".").pop()} declared`,description:u.description,severity:u.severity,category:"permissions",file:"app.config.ts",recommendation:"Remove from permissions if not needed, or add justification."})}let l=_m(e);for(let{pkg:d,permission:u}of l){let c=ul[u];c&&(s.includes(u)||o.includes(u)||n.push({id:`PERM-${String(i++).padStart(3,"0")}`,title:`${u.split(".").pop()} injected by ${d}`,description:`${c.description}. Auto-injected via ${d} AndroidManifest.xml`,severity:c.severity,category:"permissions",file:`node_modules/${d}/android/src/main/AndroidManifest.xml`,recommendation:`Add "${u}" to blockedPermissions if not needed.`,autoFixable:!0}))}let a=r?.ios?.infoPlist||{};for(let[d,u]of Object.entries(Im))d in a&&n.push({id:`PERM-${String(i++).padStart(3,"0")}`,title:`iOS: ${d} declared`,description:u.description,severity:u.severity,category:"permissions",file:"app.config.ts",recommendation:`Remove ${d} from infoPlist if the app does not use this capability.`});return{category:"permissions",label:"Permission Audit",findings:n,durationMs:0}}import zr from"fs";import Ai from"path";var $m=[{id:"SEC-001",pattern:/(['"`])(?:sk|pk)_(?:live|test)_[a-zA-Z0-9]{20,}\1/g,severity:"critical",label:"Stripe API Key"},{id:"SEC-002",pattern:/(['"`])AIza[0-9A-Za-z\-_]{35}\1/g,severity:"high",label:"Google API Key"},{id:"SEC-003",pattern:/(['"`])AKIA[0-9A-Z]{16}\1/g,severity:"critical",label:"AWS Access Key ID"},{id:"SEC-004",pattern:/-----BEGIN (?:RSA |EC )?PRIVATE KEY-----/g,severity:"critical",label:"Private key in source"},{id:"SEC-005",pattern:/(?:ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9_]{36,}/g,severity:"high",label:"GitHub Token"},{id:"SEC-006",pattern:/xox[bpors]-[a-zA-Z0-9-]{10,}/g,severity:"high",label:"Slack Token"},{id:"SEC-007",pattern:/(?:password|secret|apikey|api_key)\s*[:=]\s*['"`][^'"`\n]{8,}['"`]/gi,severity:"high",label:"Hardcoded credential"}],vm=new Set([".ts",".tsx",".js",".jsx"]),Rm=new Set(["node_modules",".expo",".git","android","ios","dist","build","__tests__","__mocks__"]);function fl(e){let t=[],n=zr.readdirSync(e,{withFileTypes:!0});for(let i of n){if(Rm.has(i.name))continue;let r=Ai.join(e,i.name);i.isDirectory()?t.push(...fl(r)):vm.has(Ai.extname(i.name))&&t.push(r)}return t}function Dm(e){let t=e.trim();return t.startsWith("//")||t.startsWith("*")||t.startsWith("/*")}function Pm(e){return/process\.env\./i.test(e)||/import\.meta\.env/i.test(e)}async function ml(e,t){let n=[],i=Ai.join(e,"src"),r=zr.existsSync(i)?i:e,o=fl(r);for(let s of o){let a=zr.readFileSync(s,"utf-8").split(`
|
|
1670
|
+
`),d=Ai.relative(e,s);for(let u=0;u<a.length;u++){let c=a[u];if(!Dm(c)&&!Pm(c))for(let{id:p,pattern:f,severity:g,label:y}of $m)f.lastIndex=0,f.test(c)&&n.push({id:p,title:y,description:`Potential ${y.toLowerCase()} found in source code`,severity:g,category:"secrets",file:d,line:u+1,recommendation:`Move to environment variables or a secrets manager. Use \`${m.nameLower} env set\` for managed secrets.`})}}return{category:"secrets",label:"Secrets Detection",findings:n,durationMs:0}}import{execSync as Om}from"child_process";var Cm={critical:"critical",high:"high",moderate:"medium",low:"low",info:"info"};async function gl(e,t){let n=[],i=1,r;try{r=Om("npm audit --json 2>/dev/null",{cwd:e,encoding:"utf-8",timeout:6e4})}catch(l){if(r=l.stdout||"",!r)return{category:"dependencies",label:"Dependency CVEs",findings:[],durationMs:0,error:"Failed to run npm audit. Ensure npm is available and dependencies are installed."}}let o;try{o=JSON.parse(r)}catch{return{category:"dependencies",label:"Dependency CVEs",findings:[],durationMs:0,error:"Failed to parse npm audit output."}}let s=o.vulnerabilities||{};for(let[l,a]of Object.entries(s)){let d=Cm[a.severity]||"info",u=Array.isArray(a.via)?a.via.map(c=>typeof c=="string"?c:c.title||c.name).join(", "):String(a.via);n.push({id:`DEP-${String(i++).padStart(3,"0")}`,title:`${l} \u2014 ${a.severity}`,description:`Via: ${u}. Range: ${a.range||"unknown"}`,severity:d,category:"dependencies",recommendation:a.fixAvailable?`Run \`npm audit fix\` or update ${l} to a patched version.`:"No fix available yet. Monitor for updates or evaluate alternatives.",autoFixable:!!a.fixAvailable})}return{category:"dependencies",label:"Dependency CVEs",findings:n,durationMs:0}}import Ei from"fs";import Ii from"path";var km=/(?:token|password|credential|secret|apiKey|api_key|session|auth|jwt|refresh_token|access_token|private_key|pin|otp)/i,hl=/AsyncStorage\s*\.\s*(?:setItem|mergeItem)\s*\(\s*['"`]([^'"`]+)['"`]/g,Nm=/from\s+['"]@react-native-async-storage\/async-storage['"]|from\s+['"]react-native['"].*AsyncStorage/,Tm=new Set([".ts",".tsx",".js",".jsx"]),xm=new Set(["node_modules",".expo",".git","android","ios","dist","build"]);function yl(e){let t=[];if(!Ei.existsSync(e))return t;let n=Ei.readdirSync(e,{withFileTypes:!0});for(let i of n){if(xm.has(i.name))continue;let r=Ii.join(e,i.name);i.isDirectory()?t.push(...yl(r)):Tm.has(Ii.extname(i.name))&&t.push(r)}return t}async function Sl(e,t){let n=[],i=1,r=Ii.join(e,"src"),o=Ei.existsSync(r)?r:e,s=yl(o);for(let l of s){let a=Ei.readFileSync(l,"utf-8");if(!Nm.test(a))continue;let d=a.split(`
|
|
1671
|
+
`),u=Ii.relative(e,l);for(let c=0;c<d.length;c++){let p=d[c];hl.lastIndex=0;let f;for(;(f=hl.exec(p))!==null;){let g=f[1];km.test(g)&&n.push({id:`STOR-${String(i++).padStart(3,"0")}`,title:`AsyncStorage used for "${g}"`,description:`Sensitive data key "${g}" stored in AsyncStorage (unencrypted).`,severity:"high",category:"storage",file:u,line:c+1,recommendation:"Use expo-secure-store (SecureStore) for sensitive data instead of AsyncStorage."})}}}return{category:"storage",label:"Insecure Storage",findings:n,durationMs:0}}import wi from"fs";import _i from"path";var bl=/['"`](http:\/\/(?!localhost|127\.0\.0\.1|10\.|192\.168\.|0\.0\.0\.0|172\.(?:1[6-9]|2\d|3[01])\.)[^'"`\s]+)['"`]/g,Lm=/\/api\/|\/v[0-9]+\/|\/graphql|\/rest\//i,Mm=new Set([".ts",".tsx",".js",".jsx"]),Um=new Set(["node_modules",".expo",".git","android","ios","dist","build","__tests__","__mocks__"]);function Al(e){let t=[];if(!wi.existsSync(e))return t;let n=wi.readdirSync(e,{withFileTypes:!0});for(let i of n){if(Um.has(i.name))continue;let r=_i.join(e,i.name);i.isDirectory()?t.push(...Al(r)):Mm.has(_i.extname(i.name))&&t.push(r)}return t}async function El(e,t){let n=[],i=1,r=_i.join(e,"src"),o=wi.existsSync(r)?r:e,s=Al(o);for(let l of s){let d=wi.readFileSync(l,"utf-8").split(`
|
|
1672
|
+
`),u=_i.relative(e,l);for(let c=0;c<d.length;c++){let p=d[c],f=p.trim();if(f.startsWith("//")||f.startsWith("*"))continue;bl.lastIndex=0;let g;for(;(g=bl.exec(p))!==null;){let y=g[1],w=Lm.test(y);n.push({id:`NET-${String(i++).padStart(3,"0")}`,title:`Insecure HTTP URL${w?" (API endpoint)":""}`,description:`Plain HTTP URL found: ${y}`,severity:w?"high":"medium",category:"network",file:u,line:c+1,recommendation:"Use HTTPS instead of HTTP for all network requests."})}}}return{category:"network",label:"HTTP URLs",findings:n,durationMs:0}}import $i from"fs";import vi from"path";var Il=/(?:debug|debugMode|devMode|enableDebug)\s*[:=]\s*true/gi,wl=/console\.(?:log|warn|info|debug)\s*\([^)]*(?:token|password|secret|credential|key|auth)/gi,Fm=new Set([".ts",".tsx",".js",".jsx"]),Bm=new Set(["node_modules",".expo",".git","android","ios","dist","build","__tests__","__mocks__"]);function _l(e){let t=[];if(!$i.existsSync(e))return t;let n=$i.readdirSync(e,{withFileTypes:!0});for(let i of n){if(Bm.has(i.name))continue;let r=vi.join(e,i.name);i.isDirectory()?t.push(..._l(r)):Fm.has(vi.extname(i.name))&&t.push(r)}return t}async function $l(e,t){let n=[],i=1,r=vi.join(e,"src"),o=$i.existsSync(r)?r:e,s=_l(o);for(let l of s){let d=$i.readFileSync(l,"utf-8").split(`
|
|
1673
|
+
`),u=vi.relative(e,l);for(let c=0;c<d.length;c++){let p=d[c],f=p.trim();if(!(f.startsWith("//")||f.startsWith("*"))&&(Il.lastIndex=0,Il.test(p)&&n.push({id:`DBG-${String(i++).padStart(3,"0")}`,title:"Hardcoded debug flag",description:"Debug/dev mode enabled in source code",severity:"medium",category:"debug",file:u,line:c+1,recommendation:"Use __DEV__ or environment variables instead of hardcoded debug flags."}),wl.lastIndex=0,wl.test(p))){let g=d.slice(Math.max(0,c-3),c).join(`
|
|
1674
|
+
`);/__DEV__/.test(g)||n.push({id:`DBG-${String(i++).padStart(3,"0")}`,title:"Sensitive data in console log",description:"Console log may expose sensitive data (token, password, etc.) in production",severity:"medium",category:"debug",file:u,line:c+1,recommendation:"Wrap in __DEV__ check or remove sensitive data from console output."})}}}return{category:"debug",label:"Debug/Dev Flags",findings:n,durationMs:0}}import vl from"fs";import Wr from"path";var Hm=new Set(["androidx.work.impl.background.systemjob.SystemJobService","androidx.work.impl.diagnostics.DiagnosticsReceiver","com.google.firebase.iid.FirebaseInstanceIdReceiver","com.google.android.gms.auth.api.signin.RevocationBoundService","androidx.profileinstaller.ProfileInstallReceiver","com.google.firebase.messaging.FirebaseMessagingService","com.google.android.gms.measurement.AppMeasurementService","com.google.android.gms.measurement.AppMeasurementJobService"]);function jm(e){let t=[Wr.join(e,"android","app","src","main","AndroidManifest.xml"),Wr.join(e,"android","AndroidManifest.xml")];for(let n of t)if(vl.existsSync(n))return n;return null}async function Rl(e,t){let n=[],i=1,r=jm(e);if(!r)return{category:"manifest",label:"Android Manifest",findings:[],durationMs:0,error:"No AndroidManifest.xml found. Run with --prebuild or run `expo prebuild` first."};let o=vl.readFileSync(r,"utf-8"),s=Wr.relative(e,r),l=/<(activity|service|receiver|provider)\s+([^>]*?)(?:\/>|>)/gs,a;for(;(a=l.exec(o))!==null;){let d=a[1],u=a[2],p=u.match(/android:name="([^"]+)"/)?.[1]||"unknown";if(Hm.has(p))continue;let f=/android:exported="true"/.test(u),g=/android:permission="/.test(u);f&&!g&&n.push({id:`MAN-${String(i++).padStart(3,"0")}`,title:`Exported ${d}: ${p.split(".").pop()}`,description:`${p} is exported=true without android:permission protection`,severity:"medium",category:"manifest",file:s,recommendation:'Set android:exported="false" or add an android:permission attribute.'})}return/android:allowBackup="true"/.test(o)&&n.push({id:`MAN-${String(i++).padStart(3,"0")}`,title:"allowBackup is enabled",description:'android:allowBackup="true" allows data extraction via ADB backup',severity:"medium",category:"manifest",file:s,recommendation:'Set android:allowBackup="false" via expo-build-properties plugin.',autoFixable:!0}),/android:debuggable="true"/.test(o)&&n.push({id:`MAN-${String(i++).padStart(3,"0")}`,title:"App is debuggable",description:'android:debuggable="true" allows attaching a debugger in production',severity:"critical",category:"manifest",file:s,recommendation:"Ensure debuggable is false for production builds. This is usually set automatically for release builds."}),{category:"manifest",label:"Android Manifest",findings:n,durationMs:0}}import Ri from"fs";import Jr from"path";function Gm(e){let t=Jr.join(e,"ios");if(!Ri.existsSync(t))return null;let n=Ri.readdirSync(t,{withFileTypes:!0});for(let i of n){if(!i.isDirectory()||i.name==="Pods"||i.name.startsWith("."))continue;let r=Jr.join(t,i.name,"Info.plist");if(Ri.existsSync(r))return r}return null}async function Dl(e,t){let n=[],i=1,r=Gm(e);if(!r)return{category:"ats",label:"iOS ATS Config",findings:[],durationMs:0,error:"No Info.plist found. Run with --prebuild or run `expo prebuild` first."};let o=Ri.readFileSync(r,"utf-8"),s=Jr.relative(e,r),l=o.match(/<key>NSAppTransportSecurity<\/key>\s*<dict>([\s\S]*?)<\/dict>/);if(l){let a=l[1];/<key>NSAllowsArbitraryLoads<\/key>\s*<true\s*\/>/.test(a)&&n.push({id:`ATS-${String(i++).padStart(3,"0")}`,title:"ATS disabled \u2014 NSAllowsArbitraryLoads",description:"App Transport Security is completely disabled. All HTTP connections are allowed.",severity:"critical",category:"ats",file:s,recommendation:"Remove NSAllowsArbitraryLoads or set to false. Use domain-specific exceptions only if absolutely necessary."});let d=a.match(/<key>NSExceptionDomains<\/key>\s*<dict>([\s\S]*?)<\/dict>/);if(d){let u=d[1].match(/<key>([^<]+)<\/key>/g);if(u)for(let c of u){let p=c.replace(/<\/?key>/g,"");p!=="NSExceptionDomains"&&n.push({id:`ATS-${String(i++).padStart(3,"0")}`,title:`ATS exception: ${p}`,description:`ATS exception configured for ${p}`,severity:"low",category:"ats",file:s,recommendation:`Verify that the ATS exception for ${p} is necessary. Use HTTPS where possible.`})}}}return{category:"ats",label:"iOS ATS Config",findings:n,durationMs:0}}var Vm=[{category:"permissions",label:"Permission Audit",fn:pl,requiresPrebuild:!1},{category:"secrets",label:"Secrets Detection",fn:ml,requiresPrebuild:!1},{category:"dependencies",label:"Dependency CVEs",fn:gl,requiresPrebuild:!1},{category:"storage",label:"Insecure Storage",fn:Sl,requiresPrebuild:!1},{category:"network",label:"HTTP URLs",fn:El,requiresPrebuild:!1},{category:"debug",label:"Debug/Dev Flags",fn:$l,requiresPrebuild:!1},{category:"manifest",label:"Android Manifest",fn:Rl,requiresPrebuild:!0},{category:"ats",label:"iOS ATS Config",fn:Dl,requiresPrebuild:!0}];async function kl(e,t){let n=Vm;t.category&&(n=n.filter(s=>s.category===t.category),n.length===0&&(kn.error(Ue.red(`Unknown category: ${t.category}`)),kn.info(Ue.dim(`Available: ${Object.values(et).join(", ")}`)),process.exit(1)));let i=n.filter(s=>!s.requiresPrebuild),r=n.filter(s=>s.requiresPrebuild),o=[];for(let s of i){let l=Pl();l.start(Ue.dim(`Running ${s.label}...`));try{let a=Date.now(),d=await s.fn(e,t);d.durationMs=Date.now()-a,o.push(d);let u=d.findings.length;l.stop(u>0?Ue.yellow(`${s.label} \u2014 ${u} finding(s)`):Ue.green(`${s.label} \u2014 clean`))}catch(a){l.stop(Ue.red(`${s.label} \u2014 error`)),o.push({category:s.category,label:s.label,findings:[],durationMs:0,error:a.message})}}if(r.length>0){let s=Cl.join(e,"android"),l=Cl.join(e,"ios"),a=Ol.existsSync(s)||Ol.existsSync(l);if(!a&&t.prebuild){t.json||kn.info(Ue.dim(`
|
|
1675
|
+
Running expo prebuild for deeper analysis...`));try{Km("npx expo prebuild --no-install",{cwd:e,stdio:"pipe"})}catch{return kn.warn(Ue.yellow("Prebuild failed \u2014 skipping manifest/plist checks.")),o}}else if(!a)return t.json||kn.info(Ue.dim(`
|
|
1676
|
+
Skipping manifest/plist checks \u2014 no android/ios dirs. Use --prebuild to generate them.`)),o;for(let d of r){let u=Pl();u.start(Ue.dim(`Running ${d.label}...`));try{let c=Date.now(),p=await d.fn(e,t);p.durationMs=Date.now()-c,o.push(p);let f=p.findings.length;u.stop(f>0?Ue.yellow(`${d.label} \u2014 ${f} finding(s)`):Ue.green(`${d.label} \u2014 clean`))}catch(c){u.stop(Ue.red(`${d.label} \u2014 error`)),o.push({category:d.category,label:d.label,findings:[],durationMs:0,error:c.message})}}}return o}import Ee from"chalk";import{log as ye}from"@clack/prompts";var Qt={critical:Ee.bgRed.white.bold,high:Ee.red.bold,medium:Ee.yellow.bold,low:Ee.blue,info:Ee.dim},Di={critical:0,high:1,medium:2,low:3,info:4};function zm(e,t){if(!t)return!0;let n=Di[t];return n===void 0?!0:Di[e]<=n}function Nl(e,t){let n=0,i={critical:0,high:0,medium:0,low:0,info:0};for(let s of e){let l=s.findings.filter(d=>zm(d.severity,t));if(l.length===0&&!s.error)continue;if(ye.info(""),ye.info(Ee.bold(` ${s.label}`)+Ee.dim(` ${l.length} finding(s)`)),ye.info(Ee.dim(" "+"\u2500".repeat(60))),s.error){ye.error(Ee.red(` Error: ${s.error}`));continue}let a=[...l].sort((d,u)=>Di[d.severity]-Di[u.severity]);for(let d of a){let u=Qt[d.severity](` ${d.severity.toUpperCase()} `);ye.info(` ${u} ${Ee.bold(d.id)} ${d.title}`),ye.info(Ee.dim(` ${d.description}`)),d.file&&ye.info(Ee.dim(` File: ${d.file}${d.line?`:${d.line}`:""}`)),ye.info(Ee.cyan(` Fix: ${d.recommendation}`)),ye.info(""),i[d.severity]++,n++}}ye.info(""),ye.info(Ee.bold(" Summary")),ye.info(Ee.dim(" "+"\u2500".repeat(60))),ye.info(` Total: ${Ee.bold(String(n))} finding(s)`),ye.info(` ${Qt.critical(` ${i.critical} Critical `)} ${Qt.high(` ${i.high} High `)} ${Qt.medium(` ${i.medium} Medium `)} ${Qt.low(` ${i.low} Low `)} ${Qt.info(` ${i.info} Info `)}`);let r=i.critical>0,o=i.high>0;r||o?(ye.info(""),ye.error(Ee.red.bold(` FAIL \u2014 ${i.critical} critical, ${i.high} high issue(s) found`))):n>0?(ye.info(""),ye.warn(Ee.yellow(" PASS (with warnings) \u2014 no critical or high issues"))):(ye.info(""),ye.success(Ee.green.bold(" PASS \u2014 no issues found")))}function Tl(e,t){let n=e.flatMap(r=>r.findings),i={};for(let r of Object.values(je))i[r]=n.filter(o=>o.severity===r).length;return{version:"1.0.0",timestamp:new Date().toISOString(),project:t.name||"unknown",projectVersion:t.version||"0.0.0",summary:{total:n.length,...i},passed:i.critical===0&&i.high===0,checks:e.map(r=>({category:r.category,label:r.label,findingCount:r.findings.length,durationMs:r.durationMs,error:r.error||null})),findings:n}}import{log as Se,spinner as Wm}from"@clack/prompts";import me from"chalk";import ht from"fs";import Jm from"os";import en from"path";import{execSync as Ym}from"child_process";var xl=16384,qm=1,Xm=Buffer.from([127,69,76,70]);async function Ll(e){Se.info(me.bold.underline("16KB Page Alignment Check")),console.log("");let t=en.resolve(e);if(!ht.existsSync(t))return Se.error(me.red(`APK file not found: ${t}`)),!1;if(!t.endsWith(".apk"))return Se.error(me.red("The provided file is not an APK file.")),!1;let n=Wm();n.start("Extracting and analyzing native libraries...");let i=ht.mkdtempSync(en.join(Jm.tmpdir(),"mach-16kb-"));try{try{Ym(`unzip -o -q "${t}" "lib/arm64-v8a/*.so" "lib/x86_64/*.so" -d "${i}" 2>/dev/null`,{encoding:"utf-8",maxBuffer:50*1024*1024})}catch{}let r=Ml(en.join(i,"lib"));if(r.length===0)return n.stop("Analysis complete."),Se.info(me.yellow("No arm64-v8a or x86_64 native libraries found in the APK.")),Se.info(me.dim("16KB alignment check only applies to arm64-v8a and x86_64 architectures.")),!0;let o=[];for(let a of r){let d=en.relative(i,a),u=Qm(d),c=en.basename(a),p=Zm(a);p!==null&&o.push({name:c,filePath:d,arch:u,align:p,compatible:p>=xl})}if(n.stop("Analysis complete."),o.length===0)return Se.info(me.yellow("No valid ELF shared libraries found.")),!0;let s=o.filter(a=>!a.compatible),l=o.filter(a=>a.compatible);if(Se.info(me.dim(`Checked ${o.length} native librar${o.length===1?"y":"ies"}
|
|
1677
|
+
`)),s.length>0){Se.info(me.red.bold(`Incompatible libraries:
|
|
1678
|
+
`));for(let a of s)Se.error(me.red(`${me.bold(a.name)} ${me.dim(`(${a.arch})`)}`)),Se.info(me.dim(` PT_LOAD alignment: 2**${Math.log2(a.align)} (${a.align} bytes, needs 2**14 = ${xl})`))}return l.length>0&&(console.log(""),Se.success(me.green(`${l.length} librar${l.length===1?"y":"ies"} correctly aligned (2**14 or higher).`))),console.log(""),s.length===0?(Se.success(me.green.bold("ELF Verification Successful. APK is 16KB compatible.")),!0):(Se.error(me.red.bold(`Found ${s.length} unaligned lib${s.length===1?"":"s"} (arm64-v8a/x86_64 libs need to be aligned).`)),console.log(""),Se.info(me.yellow("To fix this:")),Se.info(me.dim(" 1. Rebuild with NDK r28+ which defaults to 16KB page alignment")),Se.info(me.dim(" 2. Or set -DANDROID_SUPPORT_FLEXIBLE_PAGE_SIZES=ON in CMake")),Se.info(me.dim(" 3. Update third-party libraries that ship prebuilt .so files")),Se.info(me.dim(" 4. After rebuilding: zipalign -p -f -v 16 input.apk output.apk")),console.log(""),Se.info(me.dim("Reference: https://developer.android.com/guide/practices/page-sizes")),!1)}catch(r){return n.stop("Analysis failed."),Se.error(me.red(`Failed to analyze APK: ${r.message}`)),!1}finally{try{ht.rmSync(i,{recursive:!0,force:!0})}catch{}}}function Zm(e){let t=ht.openSync(e,"r");try{let n=Buffer.alloc(64);if(ht.readSync(t,n,0,64,0),!n.subarray(0,4).equals(Xm))return null;let i=n[4]===2,r=n[5]===1,o=(p,f)=>r?p.readUInt16LE(f):p.readUInt16BE(f),s=(p,f)=>r?p.readUInt32LE(f):p.readUInt32BE(f),l=(p,f)=>Number(r?p.readBigUInt64LE(f):p.readBigUInt64BE(f)),a,d,u;i?(a=l(n,32),d=o(n,54),u=o(n,56)):(a=s(n,28),d=o(n,42),u=o(n,44));let c=null;for(let p=0;p<u;p++){let f=Buffer.alloc(d);if(ht.readSync(t,f,0,d,a+p*d),s(f,0)!==qm)continue;let y;i?y=l(f,48):y=s(f,28),y>0&&(c===null||y<c)&&(c=y)}return c??0}catch{return null}finally{ht.closeSync(t)}}function Ml(e){let t=[];if(!ht.existsSync(e))return t;let n=ht.readdirSync(e,{withFileTypes:!0});for(let i of n){let r=en.join(e,i.name);i.isDirectory()?t.push(...Ml(r)):i.name.endsWith(".so")&&t.push(r)}return t}function Qm(e){return e.includes("arm64-v8a")?"arm64-v8a":e.includes("x86_64")?"x86_64":"unknown"}var Bl=async e=>{if(Ce()||(Ge.error(tt.red(`You are not logged in. Run \`${m.nameLower} login\` first.`)),process.exit(1)),e.apk){await ng(e);return}let n=process.cwd(),i=Pi.join(n,"package.json");Nn.existsSync(i)||(Ge.error(tt.red("No package.json found. Run this command from a project root.")),process.exit(1));let r=JSON.parse(Nn.readFileSync(i,"utf-8")),o=!!(r.dependencies?.expo||r.devDependencies?.expo);e.json||(Ge.info(tt.dim(`Project: ${r.name||"unknown"} v${r.version||"0.0.0"}`)),Ge.info(tt.dim(`Type: ${o?"Expo":"Bare React Native"}`)),Ge.info(""));let s={json:e.json,fix:e.fix,category:e.category,severity:e.severity,prebuild:e.prebuild},l=await kl(n,s);e.json?console.log(JSON.stringify(Tl(l,r),null,2)):Nl(l,e.severity);let a=l.some(u=>u.findings.some(c=>c.severity==="critical")),d=l.some(u=>u.findings.some(c=>c.severity==="high"));(a||d)&&process.exit(1)},Ul=["16kb"];async function ng(e){let t=e.category?.toLowerCase();t&&!Ul.includes(t)&&(Ge.error(tt.red(`Unknown APK check category: "${t}"`)),Ge.info(tt.dim(`Available APK checks: ${Ul.join(", ")}`)),process.exit(1));let n=await ig(e.apk);n||process.exit(1);let i=!t,r=!1;(i||t==="16kb")&&(await Ll(n)||(r=!0)),r&&process.exit(1)}async function ig(e){if(e.startsWith("build:")){let n=e.slice(6);return await rg(n)}if(e.startsWith("http://")||e.startsWith("https://"))return await Hl(e);let t=Pi.resolve(e);return Nn.existsSync(t)?t:(Ge.error(tt.red(`APK file not found: ${t}`)),null)}async function rg(e){let t=Fl();t.start(`Fetching APK from build ${e}...`);try{let n=await T.get(`/build/${e}`);if(n.data.status!=="success")throw new Error(n.data.message);let i=n.data.build;if(!i)throw new Error("Build not found");let r=i.artifacts?.find(o=>o.type?o.type==="apk":o.name?.endsWith(".apk")||o.url?.includes(".apk"));return!r||!r.url?(t.stop("No APK artifact found"),Ge.error(tt.red("This build does not have an APK artifact.")),Ge.info(tt.dim("Make sure the build produced an APK (not just an AAB).")),null):(t.stop(`Found build: ${i.buildId||e}`),await Hl(r.url))}catch(n){return t.stop("Failed to fetch build"),Ge.error(tt.red(n.message)),null}}async function Hl(e){let t=Fl();t.start("Downloading APK...");try{let n=Nn.mkdtempSync(Pi.join(eg.tmpdir(),`${m.nameLower}-audit-`)),i=Pi.join(n,"app.apk"),r=await tg.get(e,{responseType:"arraybuffer"});Nn.writeFileSync(i,r.data);let o=(r.data.length/(1024*1024)).toFixed(1);return t.stop(`Downloaded APK (${o} MB)`),i}catch(n){return t.stop("Download failed"),Ge.error(tt.red(`Failed to download APK: ${n.message}`)),null}}var ag=console.log;console.log=()=>{};sg();console.log=ag;we(be.bgCyan.black(m.cliTag("Production Build Orchestrator")));var cg=lg(import.meta.url),dg=cg("../package.json"),Yr=(e,t=[])=>t.concat(e),ne=new og;ne.name(m.nameLower).description(`${m.name} CLI: Powerful Cloud Infrastructure Tools`).version(dg.version).option("-y, --yes","Automatically answer yes to all prompts",!1).option("--quiet","Suppress non-essential output",!1);ne.command("agent").description("Manage local device discovery agent for the Install Hub (port 7070)").argument("[action]","start, run, install, status, restart, stop, or uninstall","start").action(async e=>{await Aa(e)});ne.command("host").description("Setup AWS S3 static hosting and CloudFront").action(async()=>{we(be.bgCyan.black(m.cliTag("Hosting"))),await uo()});ne.command("sitemap").description("Generate sitemap.xml from Expo Router app structure").option("-o, --output <path>","Output path for sitemap.xml","./public/sitemap.xml").action(async e=>{we(be.bgCyan.black(m.cliTag("Sitemap Generator"))),await go(e)});ne.command("build").description("Run a build on a cloud provider (AWS Spot Instances)").argument("[platform]","Target platform (android, ios)").option("--platform <os>","Target platform alias (android, ios) [Optional]").option("--repo <url>","Git Repository URL").option("--branch <name>","Git Branch").option("--ami <id>","AMI ID").option("--bucket <name>","S3 Bucket for artifacts").option("--region <region>","AWS Region").option("--aws-profile <name>","AWS Credentials Profile").option("-p, --build-profile <name>","Build Profile (e.g. production, staging)").option("--profile <name>","Build Profile (alias for --build-profile)").option("--dry-run","Generate User Data script without launching").option("--keep-instance","Do not terminate the instance after build").option("--subnet <id>","VPC Subnet ID to launch the instance in").option("--security-group <id>","VPC Security Group ID to use").option("--ssh-host <host>","Remote host for iOS build (SSH)").option("--ssh-user <user>","SSH username for remote host").option("--ssh-key <path>","Path to private SSH key for remote host").option("--ios-scheme <scheme>","iOS Scheme to build").option("--ios-team-id <id>","Apple Development Team ID").option("--ios-configuration <config>","Xcode configuration (Release/Debug)").option("--ios-export-method <method>","Export method (ad-hoc, app-store, development, enterprise)").option("--ios-api-key-id <id>","App Store Connect API Key ID").option("--ios-api-key-issuer <id>","App Store Connect API Key Issuer ID").option("--ios-api-key-path <path>","Path to App Store Connect API Key (.p8) file").option("--simulator","Build for iOS Simulator (no signing required)").addOption(new Ke("--build-id <id>","Internal build ID").hideHelp()).addOption(new Ke("--project-id <id>","Internal project ID").hideHelp()).addOption(new Ke("--fail-only","Internal: mark an existing build failed").hideHelp()).addOption(new Ke("--error <message>","Internal failure message").hideHelp()).option("--local","Run build on local machine").option("--auto-version","Automatically fetch and increment Android versionCode or iOS buildNumber from the store").option("--auto-submit","Submit this build after it completes successfully").option("--submit-track <track>","Google Play track to use with --auto-submit").option("--submit-release-status <status>","Google Play release status to use with --auto-submit").option("--submit-rollout <fraction>","Google Play staged rollout fraction to use with --auto-submit").option("--submit-changes-not-sent-for-review","Commit Google Play changes without automatically sending them for review when using --auto-submit").option("--submit-credential-id <id>","Service credential ID to use with --auto-submit").option("--submit-json-output <path>","Write auto-submit metadata JSON to a file for CI/CD").option("--verbose","Enable verbose logging").option("--json-output <path>","Write build metadata JSON to a file for CI/CD").option("--maestro","Queue a managed Maestro test run after a successful build").option("--maestro-flows <path>","Maestro flow file or directory (default: .maestro)").option("--maestro-device <device>","Managed Maestro device profile").option("--maestro-retries <n>","Retries for the Maestro run","1").option("--maestro-record","Enable screen recording where supported").option("--maestro-use-build-source","Use Maestro flows from the build source snapshot instead of uploading local flows").option("--maestro-env <name>","Forward an environment variable to the managed Maestro runner; repeat or comma-separate names",Yr,[]).option("-y, --yes","Automatically answer yes to all prompts",!1).option("--quiet","Suppress non-essential output",!1).action(async(e,t)=>{let n=ne.opts();t.yes=t.yes||n.yes,t.quiet=t.quiet||n.quiet,t.platform=e||t.platform,t.buildProfile=t.profile||t.buildProfile,t.quiet||we(be.bgCyan.black(m.cliTag("Cloud Build"))),await Yn(t)});ne.command("maestro").description("Run Maestro tests locally or with the managed Mach runner").option("--platform <os>","Target platform (android/ios)").option("-p, --profile <name>","Build profile to resolve when using --latest","production").option("--latest","Use the latest successful build for the platform/profile").option("--build-id <id>","Use a specific Mach build ID").option("--build-url <url>","Use a Mach build URL").option("--artifact-url <url>","Use a direct APK or iOS simulator app artifact URL").option("--local","Run Maestro on a connected local emulator/device instead of the managed runner").option("--maestro-flows <path>","Maestro flow file or directory (default: .maestro)").option("--maestro-device <device>","Managed Maestro device profile").option("--maestro-retries <n>","Retries for the Maestro run","1").option("--maestro-record","Enable screen recording where supported").option("--maestro-use-build-source","Use Maestro flows from the build source snapshot instead of uploading local flows").option("--maestro-env <name>","Forward an environment variable to the managed Maestro runner; repeat or comma-separate names",Yr,[]).option("--wait","Wait for managed Maestro completion and exit non-zero on failure").option("--wait-timeout <minutes>","Maximum minutes to wait for managed Maestro completion","60").option("--wait-interval <seconds>","Polling interval while waiting for managed Maestro completion","15").option("--json-output <path>","Write test run metadata JSON to a file for CI/CD").addOption(new Ke("--local-runner","Internal: execute a managed Maestro run on this machine").hideHelp()).addOption(new Ke("--test-run-id <id>","Internal test run ID").hideHelp()).addOption(new Ke("--project-id <id>","Internal project ID").hideHelp()).addOption(new Ke("--runner-token <token>","Internal runner token").hideHelp()).action(async e=>{we(be.bgCyan.black(m.cliTag("Maestro Testing"))),await rs(e)});ne.command("update").description("Deploy an Over-The-Air (OTA) update to your live channel").option("--branch <name>","Channel or Branch to deploy to (e.g., production)","production").action(async e=>{we(be.bgCyan.black(m.cliTag("OTA Update"))),await ka(e)});ne.command("submit").description("Automated Store Submission (App Store / Google Play)").option("--platform <os>","Target platform (ios/android)").option("-p, --profile <name>","Build/submission profile to submit from (e.g. production, preprod)").option("--track <track>","Google Play Track (internal, alpha, beta, production)").option("--release-status <status>","Google Play release status (completed, draft, halted, inProgress)").option("--rollout <fraction>","Google Play staged rollout fraction for inProgress releases (example: 0.1)").option("--changes-not-sent-for-review","Commit Google Play changes without automatically sending them for review").option("--ssh-host <host>","Remote macOS host for iOS submission").option("--ssh-user <user>","SSH username for remote iOS submission").option("--ssh-key <path>","Path to private SSH key for remote iOS submission").option("--credential-id <id>","Service credential ID to use when multiple submission credentials exist").option("--local","Run submission on this machine (internal runner mode for iOS)").addOption(new Ke("--submit-id <id>","Internal submission ID").hideHelp()).addOption(new Ke("--project-id <id>","Internal project ID").hideHelp()).addOption(new Ke("--package-name <name>","Internal Android package name").hideHelp()).addOption(new Ke("--bundle-id <id>","Internal iOS bundle identifier").hideHelp()).option("--json-output <path>","Write submission metadata JSON to a file for CI/CD").option("--latest","Use the latest successful build for submission").option("--build-id <id>","Use a specific build ID for submission").action(async e=>{let t=ne.opts();e.quiet=e.quiet||t.quiet,e.yes=e.yes||t.yes,we(be.bgCyan.black(m.cliTag("Store Submission"))),await Gn(e)});ne.command("login").description(`Login to ${m.name} Dashboard`).action(async()=>{we(be.bgCyan.black(m.cliTag("Login"))),await _a()});ne.command("logout").description(`Logout from ${m.name} on this machine`).action(async()=>{we(be.bgCyan.black(m.cliTag("Logout"))),await $a()});ne.command("link").description(`Link local directory to a ${m.name} Project`).action(async()=>{we(be.bgCyan.black(m.cliTag("Link Project"))),await Ra()});ne.command("me").description("Display currently logged in user details").action(async()=>{await Ta()});ne.command("init").description(`Create a new ${m.name} Project`).action(async()=>{we(be.bgCyan.black(m.cliTag("Init Project"))),await Da()});ne.command("env").description("Manage Environment Variables").argument("<action>","Action to perform: set, list, pull, download, or export").argument("[args...]","Key=Value pairs for set action").option("-e, --environment <name>","Environment to pull/download","development").option("-o, --out <file>","Output file for pull/download",".env.local").option("--overwrite","Overwrite output file if it already exists").action(async(e,t,n)=>{we(be.bgCyan.black(m.cliTag("Env Manager"))),await Oa(e,t,n)});ne.command("start").description("Start the development server (Metro)").option("-p, --build-profile <name>","Build profile (e.g. development, staging)","development").option("--tunnel","Use ngrok tunnel").option("--lan","Use LAN IP").option("--localhost","Use localhost").option("-c, --clear","Clear Metro cache").option("--port <number>","Port to listen on").option("--ios","Start on iOS").option("--android","Start on Android").option("--web","Start on Web").action(async e=>{we(be.bgCyan.black(m.cliTag("Dev Server"))),await La(e)});ne.command("config").description("Show resolved configuration for a profile").option("-p, --profile <name>","Build profile to resolve","development").option("--json","Output as JSON").action(async e=>{await Ma(e)});var Gl=ne.command("deeplink").description("Configure and verify app links, universal links, and URI schemes");Gl.command("setup").description("Generate deep link config, hosted association files, and Expo plugin support").option("--domain <domain>","Associated domain, e.g. app.example.com").option("--base-url <url>","Base URL, e.g. https://app.example.com").option("-p, --profile <name>","Profile used for build/submit overrides").option("--platform <platform>","ios, android, or all").option("--framework <framework>","expo or react-native").option("--scheme <scheme>","URI scheme, e.g. myapp").option("--ios-bundle-id <id>","iOS bundle identifier").option("--android-package <name>","Android package name").option("--apple-team-id <id>","Apple Developer Team ID").option("--app-store-id <id>","App Store app ID for Smart App Banner").option("--android-fingerprint <sha256>","Android SHA256 signing certificate fingerprint; repeatable",Yr,[]).option("--output <dir>","Directory for hosted files, e.g. public or deep-links").option("--install-plugin","Install @radhya/mach locally so Expo can use the packaged config plugin").option("--no-install-plugin","Do not install @radhya/mach for Expo projects; use the local plugin fallback if the package is missing").option("-y, --yes","Automatically answer yes to prompts",!1).action(async e=>{let t=ne.opts();e.yes=e.yes||t.yes,we(be.bgCyan.black(m.cliTag("Deep Links"))),await ol(e)});Gl.command("verify").description("Verify local and optionally live deep link configuration").option("-p, --profile <name>","Profile used for build/submit overrides").option("--live","Check hosted files over HTTPS").option("--android-device","Print Android device verification commands").action(async e=>{we(be.bgCyan.black(m.cliTag("Deep Link Verify"))),await sl(e)});ne.command("credentials").description("Unified, interactive credential management (iOS/Android)").option("-p, --profile <name>","Build profile (production, staging, development)").option("--force","Force recreate certificates (nuke existing on Apple Portal)",!1).action(async e=>{let{credentialsMainCommand:t}=await import("./credentials-P3555DXZ.js");await t(e)});ne.command("credentials:setup").description("Automated credential provisioning (iOS/Android) [Legacy]").requiredOption("--platform <os>","Platform: ios or android").option("--profile <name>","Build profile (production, staging, development)").option("--bundle-id <id>","Bundle ID / Package Name (optional, auto-detected)").option("--team-id <id>","Apple Team ID (iOS only)").option("--key-alias <alias>","Android keystore alias (optional, auto-generated)").option("--aws-profile <name>","AWS Credentials Profile (for S3 storage)").option("--force","Force recreate certificates (nuke existing on Apple Portal)",!1).action(async e=>{we(be.bgCyan.black(m.cliTag("Credentials Setup"))),await rn(e),jl(be.green("Done!"))});ne.command("credentials:service").description("Upload Service Credentials (ASC API Key / Google Service JSON) [Legacy]").requiredOption("--platform <os>","Platform: ios or android").option("--file <path>","Path to credential file (.p8 or .json)").option("--issuer-id <id>","ASC API Key Issuer ID (iOS only)").option("--key-id <id>","ASC API Key ID (iOS only)").option("--bundle-id <id>","Bundle identifier / Android package name to attach this service credential to").option("--package-name <name>","Android package name to attach this service credential to").option("-p, --profile <name>","Build profile to resolve package/bundle identifier from config").action(async e=>{we(be.bgCyan.black(m.cliTag("Service Credentials"))),await lo(e),jl(be.green("Done!"))});var qr=ne.command("device").description("Manage registered iOS test devices");qr.command("register").description("Register a connected iOS device or enter UDID manually").option("--udid <udid>","Device UDID (skip auto-detection)").option("--name <name>","Device name").option("--team-id <id>","Apple Developer Team ID for this device").action(async e=>{await bi("register",e)});qr.command("list").description("List all registered devices").option("--team-id <id>","Filter by Apple Developer Team ID").action(async e=>{await bi("list",e)});qr.command("remove").description("Remove a registered device").option("--udid <udid>","Device UDID to remove").option("--team-id <id>","Apple Developer Team ID for this device").action(async e=>{await bi("remove",e)});ne.command("audit").description("Run automated security audit on the project or APK").option("--apk <path>","Path to APK file (runs APK diagnostics like 16KB alignment)").option("--json","Output results as JSON (for CI/CD)").option("--fix","Auto-apply fixes where possible").option("--category <name>","Run only a specific check category (e.g. 16kb, permissions, secrets)").option("--severity <level>","Minimum severity to display (critical, high, medium, low, info)").option("--prebuild","Run expo prebuild for deeper manifest/plist analysis").action(async e=>{we(be.bgCyan.black(m.cliTag(e.apk?"APK Audit":"Security Audit"))),await Bl(e)});var ug=new Set(["login","logout","agent"]);ne.hook("preAction",(e,t)=>{let n=t.name(),i=t.opts?.()||{};n==="maestro"&&(i.local||i.localRunner)||t.parent?.name()!=="deeplink"&&(ug.has(n)||ro())});ne.on("command:*",()=>{console.error(`Invalid command: %s
|
|
1679
|
+
See --help for a list of available commands.`,ne.args.join(" ")),process.exit(1)});process.argv.slice(2).length||ne.help();ne.parse(process.argv);
|