@radhya/mach 2.0.31 → 2.0.33

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/dist/index.js CHANGED
@@ -1,12 +1,12 @@
1
1
  #!/usr/bin/env node
2
- import{a as Ht,b as rn,c as ao,d as Rt,e as _e,f as ke,g as lo,h as co,i as jt,j as uo,l as on}from"./chunk-6LOQKG2J.js";import{a as m,b as ro,c as Ce,d as oo,e as so,f as Bt,g as nt,h as T}from"./chunk-S64YFTRR.js";import{Command as dg,Option as Ke}from"commander";import{configDotenv as cg}from"dotenv";import{intro as we,outro as Kl}from"@clack/prompts";import be from"chalk";import{text as po,confirm as Jl,spinner as Yl,isCancel as xi,cancel as sn,note as ql,outro as Xl}from"@clack/prompts";import an from"chalk";async function fo(){try{let e=await po({message:"Enter Bucket Name:",placeholder:"e.g. my-app-dev",validate(r){if(r.length===0)return"Bucket name is required"}});xi(e)&&(sn("Operation cancelled."),process.exit(0));let t=await po({message:"Enter Region:",initialValue:"ap-south-1"});xi(t)&&(sn("Operation cancelled."),process.exit(0));let n=await Jl({message:"Do you want to create a CloudFront Distribution for this bucket?",initialValue:!0});xi(n)&&(sn("Operation cancelled."),process.exit(0));let i=Yl();i.start("Setting up hosting infrastructure...");try{let r=await T.post("/hosting/setup",{bucketName:e,region:t,createCloudFront:n});if(r.data.status!=="success")throw new Error(r.data.message||"Hosting setup failed");i.stop("Hosting setup complete!");let o=r.data,s=`Bucket Name: ${an.cyan(o.bucketName)}
3
- `;s+=`Region: ${an.cyan(o.region)}
4
- `,s+=`S3 Website URL: ${an.blue(o.s3WebsiteUrl)}`,o.cloudFrontId&&(s+=`
2
+ import{a as Yt,b as at,c as wo,d as Lt,e as ve,f as xe,g as _o,h as $o,i as qt,j as vo,l as gn}from"./chunk-ZPETQEMG.js";import{a as m,b as Eo,c as Ne,d as Io,e as Jt,f as ft,g as st,h as N}from"./chunk-S64YFTRR.js";import{Command as Qg,Option as We}from"commander";import{configDotenv as eh}from"dotenv";import{intro as me,outro as gc}from"@clack/prompts";import ce from"chalk";import{text as Ro,confirm as bc,spinner as Ac,isCancel as Wi,cancel as hn,note as Ec,outro as Ic}from"@clack/prompts";import yn from"chalk";async function Po(){try{let e=await Ro({message:"Enter Bucket Name:",placeholder:"e.g. my-app-dev",validate(r){if(r.length===0)return"Bucket name is required"}});Wi(e)&&(hn("Operation cancelled."),process.exit(0));let t=await Ro({message:"Enter Region:",initialValue:"ap-south-1"});Wi(t)&&(hn("Operation cancelled."),process.exit(0));let n=await bc({message:"Do you want to create a CloudFront Distribution for this bucket?",initialValue:!0});Wi(n)&&(hn("Operation cancelled."),process.exit(0));let i=Ac();i.start("Setting up hosting infrastructure...");try{let r=await N.post("/hosting/setup",{bucketName:e,region:t,createCloudFront:n});if(r.data.status!=="success")throw new Error(r.data.message||"Hosting setup failed");i.stop("Hosting setup complete!");let o=r.data,s=`Bucket Name: ${yn.cyan(o.bucketName)}
3
+ `;s+=`Region: ${yn.cyan(o.region)}
4
+ `,s+=`S3 Website URL: ${yn.blue(o.s3WebsiteUrl)}`,o.cloudFrontId&&(s+=`
5
5
 
6
- CloudFront ID: ${an.cyan(o.cloudFrontId)}`,s+=`
7
- CloudFront URL: ${an.blue(o.cloudFrontUrl)}`),ql(s,"Setup Complete!"),Xl("You are all set!")}catch(r){i.stop("Setup failed"),sn(`Error: ${r.response?.data?.message||r.message}`)}}catch(e){sn(`An unexpected error occurred: ${e.message}`)}}import{readdir as Zl,writeFile as Ql,access as ed,mkdir as td}from"fs/promises";import{join as mo}from"path";import{spinner as nd,text as go,isCancel as ho,cancel as Li,note as id,outro as rd}from"@clack/prompts";import od from"chalk";async function sd(){let e=["./app","./src/app"];for(let t of e)try{return await ed(t),t}catch{}return null}async function yo(e){try{let n=await sd()||"./app",i=await go({message:"Enter path to your app directory:",placeholder:n,initialValue:n,validate(u){if(u.length===0)return"Path is required"}});ho(i)&&(Li("Operation cancelled."),process.exit(0));let r=await go({message:"Enter your website base URL:",placeholder:"https://example.com",validate(u){if(u.length===0)return"Base URL is required";if(!u.startsWith("http"))return"URL must start with http:// or https://"}});ho(r)&&(Li("Operation cancelled."),process.exit(0));let o=nd();o.start("Scanning app directory for routes...");let s=await So(i);o.stop(`Found ${s.length} routes`);let l=ad(s,r),a=e.output||"./public/sitemap.xml";o.start(`Writing sitemap to ${a}...`);let c=a.substring(0,a.lastIndexOf("/"));if(c)try{await td(c,{recursive:!0})}catch{}await Ql(a,l,"utf-8"),o.stop("Sitemap generated successfully!"),id(`Routes included:
6
+ CloudFront ID: ${yn.cyan(o.cloudFrontId)}`,s+=`
7
+ CloudFront URL: ${yn.blue(o.cloudFrontUrl)}`),Ec(s,"Setup Complete!"),Ic("You are all set!")}catch(r){i.stop("Setup failed"),hn(`Error: ${r.response?.data?.message||r.message}`)}}catch(e){hn(`An unexpected error occurred: ${e.message}`)}}import{readdir as wc,writeFile as _c,access as $c,mkdir as vc}from"fs/promises";import{join as Do}from"path";import{spinner as Rc,text as Oo,isCancel as Co,cancel as Ji,note as Pc,outro as Dc}from"@clack/prompts";import Oc from"chalk";async function Cc(){let e=["./app","./src/app"];for(let t of e)try{return await $c(t),t}catch{}return null}async function ko(e){try{let n=await Cc()||"./app",i=await Oo({message:"Enter path to your app directory:",placeholder:n,initialValue:n,validate(u){if(u.length===0)return"Path is required"}});Co(i)&&(Ji("Operation cancelled."),process.exit(0));let r=await Oo({message:"Enter your website base URL:",placeholder:"https://example.com",validate(u){if(u.length===0)return"Base URL is required";if(!u.startsWith("http"))return"URL must start with http:// or https://"}});Co(r)&&(Ji("Operation cancelled."),process.exit(0));let o=Rc();o.start("Scanning app directory for routes...");let s=await To(i);o.stop(`Found ${s.length} routes`);let l=kc(s,r),a=e.output||"./public/sitemap.xml";o.start(`Writing sitemap to ${a}...`);let d=a.substring(0,a.lastIndexOf("/"));if(d)try{await vc(d,{recursive:!0})}catch{}await _c(a,l,"utf-8"),o.stop("Sitemap generated successfully!"),Pc(`Routes included:
8
8
  ${s.map(u=>` \u2022 ${u.path}`).join(`
9
- `)}`,"Sitemap Summary"),rd(`Sitemap saved to ${od.cyan(a)}`)}catch(t){Li(`An error occurred: ${t.message}`)}}async function So(e,t=""){let n=[];try{let i=await Zl(e,{withFileTypes:!0});for(let r of i){let o=mo(e,r.name);if(!(r.name.startsWith("_")||r.name.startsWith("."))){if(r.isDirectory()){let s=await So(o,mo(t,r.name));n.push(...s)}else if(r.isFile()){if(r.name==="index.tsx"||r.name==="index.ts"||r.name==="index.jsx"||r.name==="index.js"){let s=t===""?"/":`/${t}`;n.push({path:s,file:o})}else if(r.name.match(/\.(tsx|ts|jsx|js)$/)&&!r.name.includes("_layout")&&!r.name.includes("+")){let s=r.name.replace(/\.(tsx|ts|jsx|js)$/,""),l=`/${t}/${s}`.replace(/\/+/g,"/");n.push({path:l,file:o})}}}}}catch(i){throw new Error(`Failed to scan directory ${e}: ${i.message}`)}return n}function ad(e,t){let n=new Date().toISOString().split("T")[0];return`<?xml version="1.0" encoding="UTF-8"?>
9
+ `)}`,"Sitemap Summary"),Dc(`Sitemap saved to ${Oc.cyan(a)}`)}catch(t){Ji(`An error occurred: ${t.message}`)}}async function To(e,t=""){let n=[];try{let i=await wc(e,{withFileTypes:!0});for(let r of i){let o=Do(e,r.name);if(!(r.name.startsWith("_")||r.name.startsWith("."))){if(r.isDirectory()){let s=await To(o,Do(t,r.name));n.push(...s)}else if(r.isFile()){if(r.name==="index.tsx"||r.name==="index.ts"||r.name==="index.jsx"||r.name==="index.js"){let s=t===""?"/":`/${t}`;n.push({path:s,file:o})}else if(r.name.match(/\.(tsx|ts|jsx|js)$/)&&!r.name.includes("_layout")&&!r.name.includes("+")){let s=r.name.replace(/\.(tsx|ts|jsx|js)$/,""),l=`/${t}/${s}`.replace(/\/+/g,"/");n.push({path:l,file:o})}}}}}catch(i){throw new Error(`Failed to scan directory ${e}: ${i.message}`)}return n}function kc(e,t){let n=new Date().toISOString().split("T")[0];return`<?xml version="1.0" encoding="UTF-8"?>
10
10
  <urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
11
11
  ${e.map(r=>{let o=r.path;return o=o.replace(/\/\([^)]+\)/g,""),o=o.replace(/\/\[.*?\]/g,"/:id"),o=o.replace(/\/+/g,"/"),o===""&&(o="/"),` <url>
12
12
  <loc>${t}${o}</loc>
@@ -15,7 +15,7 @@ ${e.map(r=>{let o=r.path;return o=o.replace(/\/\([^)]+\)/g,""),o=o.replace(/\/\[
15
15
  <priority>0.8</priority>
16
16
  </url>`}).join(`
17
17
  `)}
18
- </urlset>`}import{randomUUID as Ju}from"crypto";import he from"path";import Jn from"axios";import Yu from"os";import{spinner as br,select as Ps,confirm as Os,isCancel as Yn,cancel as Cs,log as R}from"@clack/prompts";import P from"chalk";import ue from"fs";import{execSync as ks}from"child_process";import Ns from"adm-zip";import{spinner as hd,log as Ln}from"@clack/prompts";import Eo from"chalk";import Io from"fs";import wo from"path";var bo=`#!/bin/bash
18
+ </urlset>`}import{randomUUID as bp}from"crypto";import Ae from"path";import si from"axios";import Ap from"os";import{spinner as Cr,select as Vs,confirm as Ks,isCancel as ai,cancel as zs,log as R}from"@clack/prompts";import D from"chalk";import fe from"fs";import{execSync as Ws}from"child_process";import Js from"adm-zip";import{spinner as jc,log as Jn}from"@clack/prompts";import Lo from"chalk";import Mo from"fs";import Uo from"path";var No=`#!/bin/bash
19
19
  # --- Mach Cloud Build Script (Android) ---
20
20
  # All S3 operations use presigned URLs via curl \u2014 zero AWS credentials on instance.
21
21
  BUILD_ID="{{BUILD_ID}}"
@@ -533,7 +533,7 @@ for pid in "\${cache_pids[@]}"; do wait "$pid" || true; done
533
533
  echo "Build orchestrator finished. Auto-terminating instance in 5 seconds..."
534
534
  sleep 5
535
535
  sudo shutdown -h now
536
- `;import ud from"crypto";import{log as Ne}from"@clack/prompts";import Te from"chalk";import{execSync as ld}from"child_process";import xe from"fs";import Gt from"path";var Ao={id:"expo",displayName:"Expo",applyLocalProcessEnv:e=>{e.developmentClient?(Ne.info(Te.blue("\u2139\uFE0F Configuring Expo build to INCLUDE expo-dev-client (Development Client mode)...")),delete process.env.EXPO_NO_DEV_CLIENT,delete process.env.EXPO_AUTOLINKING_EXCLUDE):(Ne.info(Te.blue("\u2139\uFE0F Configuring Expo build to EXCLUDE expo-dev-client (Production/Staging mode)...")),process.env.EXPO_NO_DEV_CLIENT="1",process.env.EXPO_AUTOLINKING_EXCLUDE="expo-dev-client")},localAndroidEnv:(e,t)=>({EXPO_NO_DOTENV:"1",MACH_FRAMEWORK:"expo",MACH_BUILD_PROFILE:t}),remoteEnvSetupScript:()=>`
536
+ `;import Lc from"crypto";import{log as Le}from"@clack/prompts";import Me from"chalk";import{execSync as Tc}from"child_process";import Ue from"fs";import Xt from"path";var xo={id:"expo",displayName:"Expo",applyLocalProcessEnv:e=>{e.developmentClient?(Le.info(Me.blue("\u2139\uFE0F Configuring Expo build to INCLUDE expo-dev-client (Development Client mode)...")),delete process.env.EXPO_NO_DEV_CLIENT,delete process.env.EXPO_AUTOLINKING_EXCLUDE):(Le.info(Me.blue("\u2139\uFE0F Configuring Expo build to EXCLUDE expo-dev-client (Production/Staging mode)...")),process.env.EXPO_NO_DEV_CLIENT="1",process.env.EXPO_AUTOLINKING_EXCLUDE="expo-dev-client")},localAndroidEnv:(e,t)=>({EXPO_NO_DOTENV:"1",MACH_FRAMEWORK:"expo",MACH_BUILD_PROFILE:t}),remoteEnvSetupScript:()=>`
537
537
  export MACH_FRAMEWORK="expo"
538
538
  echo "[ENV] MACH_FRAMEWORK=$MACH_FRAMEWORK"
539
539
  export EXPO_NO_DOTENV="\${EXPO_NO_DOTENV:-1}"
@@ -585,7 +585,7 @@ fi
585
585
  echo "expo.enableHermes=true" >> gradle.properties
586
586
  `,androidRemoteReleaseGradlePropertiesScript:()=>`
587
587
  echo "expo.enableProguardInReleaseBuilds=true" >> gradle.properties
588
- `,prepareLocalProject:async e=>{let{platform:t,options:n,cacheMeta:i,cacheMetaDir:r,currentBuildEnv:o,reportStep:s,loggedRun:l,configureXcodeNodeBinary:a,podsFingerprint:c,writeCacheMeta:u}=e,d=n.iosBundleIdentifier||"",p=n.name||"",f=Gt.join(process.cwd(),"app.json"),g=null;Ne.info(Te.blue(`Running Expo prebuild for ${t}...`));try{if(xe.existsSync(f)){g=xe.readFileSync(f,"utf-8");let E=JSON.parse(g);E.expo=E.expo||{},p||(p=E.expo.name||""),t==="ios"&&!d&&(d=E.expo?.ios?.bundleIdentifier||""),n.name&&(E.expo.name=n.name),n.scheme&&(E.expo.scheme=n.scheme),t==="ios"&&n.iosBundleIdentifier?(E.expo.ios=E.expo.ios||{},E.expo.ios.bundleIdentifier=n.iosBundleIdentifier):t==="android"&&n.androidPackage&&(E.expo.android=E.expo.android||{},E.expo.android.package=n.androidPackage),xe.writeFileSync(f,JSON.stringify(E,null,2))}let y=["exec","--","expo","prebuild","--platform",t,"--no-install"];if(await s("prebuild"),await l("npm",y,process.cwd(),o()),t!=="ios"||!xe.existsSync("ios"))return{appName:p,bundleId:d};await s("pods"),Ne.info(Te.blue("Running pod install..."));try{let E=Gt.resolve("ios"),_=Gt.join(E,"Podfile");if(!xe.existsSync(_))throw new Error("ios/Podfile not found. Skipping pod install.");let b=o();a(E,b);let x=xe.readFileSync(_,"utf-8"),I=n.iosDeploymentTarget||"13.4";if(!n.developmentClient&&(Ne.info(Te.blue("\u2139\uFE0F Patching Podfile to EXCLUDE expo-dev-client...")),x.includes("use_expo_modules!")&&!x.includes("exclude:"))){let O=/use_expo_modules!(\s*)$/m;O.test(x)?x=x.replace(O,'use_expo_modules!(exclude: ["expo-dev-client"])$1'):x=x.replace("use_expo_modules!",'use_expo_modules!(exclude: ["expo-dev-client"])')}let F=`
588
+ `,prepareLocalProject:async e=>{let{platform:t,options:n,cacheMeta:i,cacheMetaDir:r,currentBuildEnv:o,reportStep:s,loggedRun:l,configureXcodeNodeBinary:a,podsFingerprint:d,writeCacheMeta:u}=e,c=n.iosBundleIdentifier||"",p=n.name||"",f=Xt.join(process.cwd(),"app.json"),g=null;Le.info(Me.blue(`Running Expo prebuild for ${t}...`));try{if(Ue.existsSync(f)){g=Ue.readFileSync(f,"utf-8");let E=JSON.parse(g);E.expo=E.expo||{},p||(p=E.expo.name||""),t==="ios"&&!c&&(c=E.expo?.ios?.bundleIdentifier||""),n.name&&(E.expo.name=n.name),n.scheme&&(E.expo.scheme=n.scheme),t==="ios"&&n.iosBundleIdentifier?(E.expo.ios=E.expo.ios||{},E.expo.ios.bundleIdentifier=n.iosBundleIdentifier):t==="android"&&n.androidPackage&&(E.expo.android=E.expo.android||{},E.expo.android.package=n.androidPackage),Ue.writeFileSync(f,JSON.stringify(E,null,2))}let y=["exec","--","expo","prebuild","--platform",t,"--no-install"];if(await s("prebuild"),await l("npm",y,process.cwd(),o()),t!=="ios"||!Ue.existsSync("ios"))return{appName:p,bundleId:c};await s("pods"),Le.info(Me.blue("Running pod install..."));try{let E=Xt.resolve("ios"),_=Xt.join(E,"Podfile");if(!Ue.existsSync(_))throw new Error("ios/Podfile not found. Skipping pod install.");let b=o();a(E,b);let x=Ue.readFileSync(_,"utf-8"),I=n.iosDeploymentTarget||"13.4";if(!n.developmentClient&&(Le.info(Me.blue("\u2139\uFE0F Patching Podfile to EXCLUDE expo-dev-client...")),x.includes("use_expo_modules!")&&!x.includes("exclude:"))){let O=/use_expo_modules!(\s*)$/m;O.test(x)?x=x.replace(O,'use_expo_modules!(exclude: ["expo-dev-client"])$1'):x=x.replace("use_expo_modules!",'use_expo_modules!(exclude: ["expo-dev-client"])')}let F=`
589
589
  installer.generated_projects.each do |project|
590
590
  project.targets.each do |target|
591
591
  target.build_configurations.each do |config|
@@ -598,13 +598,13 @@ echo "expo.enableProguardInReleaseBuilds=true" >> gradle.properties
598
598
  config.build_settings['IPHONEOS_DEPLOYMENT_TARGET'] = '${I}'
599
599
  end
600
600
  end
601
- `,X=/post_install\s+do\s+\|installer\|/;if(X.test(x))Ne.info(Te.dim(`Injecting deployment target (${I}) into existing post_install hook...`)),x=x.replace(X,`post_install do |installer|
602
- ${F}`),xe.writeFileSync(_,x);else{Ne.info(Te.dim(`Appending new post_install hook for deployment target (${I})...`));let O=`
601
+ `,X=/post_install\s+do\s+\|installer\|/;if(X.test(x))Le.info(Me.dim(`Injecting deployment target (${I}) into existing post_install hook...`)),x=x.replace(X,`post_install do |installer|
602
+ ${F}`),Ue.writeFileSync(_,x);else{Le.info(Me.dim(`Appending new post_install hook for deployment target (${I})...`));let O=`
603
603
  post_install do |installer|
604
604
  ${F}
605
605
  end
606
- `;xe.appendFileSync(_,O)}let D="/opt/homebrew/bin/pod",w=xe.existsSync(D)?D:"pod",N=c(E);xe.existsSync(Gt.join(E,"Pods"))&&i.pods&&i.pods!==N&&(await e.reportLog(`[CACHE] Podfile/Podfile.lock changed \u2014 wiping ios/Pods
607
- `),Ne.info(Te.dim("Podfile fingerprint changed \u2014 clearing Pods for clean install...")),xe.rmSync(Gt.join(E,"Pods"),{recursive:!0,force:!0})),Ne.info(Te.dim(`Using pod command: ${w} in ${E}`)),await l(w,["install"],E,b),i.pods=N,u(r,i)}catch(E){let _=E.message||"Unknown error";Ne.warn(Te.yellow(`Native "pod" command failed: ${_}`)),Ne.info(Te.dim("Falling back to npm exec pod-install..."));let b=o();a(Gt.resolve("ios"),b),Ne.info(Te.magenta(`${m.nameUpper}_DEBUG: Executing pod-install override via npx --yes pod-install@latest`)),await l("npx",["--yes","pod-install@latest","ios"],process.cwd(),b)}if(xe.existsSync("ios/Pods")){Ne.info(Te.dim("Disabling signing for Pod targets to prevent conflicts..."));try{ld(`find ios/Pods -name "project.pbxproj" -exec sed -i '' 's/buildSettings = {/buildSettings = { CODE_SIGNING_ALLOWED = NO; CODE_SIGNING_REQUIRED = NO; PROVISIONING_PROFILE_SPECIFIER = ""; EXPANDED_CODE_SIGN_IDENTITY = "";/g' {} +`,{stdio:"ignore"})}catch{}}return{appName:p,bundleId:d}}finally{g&&xe.writeFileSync(f,g)}}};import{log as Dt}from"@clack/prompts";import Pt from"chalk";import st from"fs";import ln from"path";var dd=(e,t)=>!st.existsSync(e)||!st.existsSync(t)?!1:st.readFileSync(e,"utf-8")!==st.readFileSync(t,"utf-8"),Mi={id:"react-native",displayName:"React Native",applyLocalProcessEnv:e=>{delete process.env.EXPO_NO_DEV_CLIENT,delete process.env.EXPO_AUTOLINKING_EXCLUDE,delete process.env.EXPO_NO_DOTENV},localAndroidEnv:(e,t)=>({MACH_FRAMEWORK:"react-native",MACH_BUILD_PROFILE:t}),remoteEnvSetupScript:()=>`
606
+ `;Ue.appendFileSync(_,O)}let P="/opt/homebrew/bin/pod",w=Ue.existsSync(P)?P:"pod",T=d(E);Ue.existsSync(Xt.join(E,"Pods"))&&i.pods&&i.pods!==T&&(await e.reportLog(`[CACHE] Podfile/Podfile.lock changed \u2014 wiping ios/Pods
607
+ `),Le.info(Me.dim("Podfile fingerprint changed \u2014 clearing Pods for clean install...")),Ue.rmSync(Xt.join(E,"Pods"),{recursive:!0,force:!0})),Le.info(Me.dim(`Using pod command: ${w} in ${E}`)),await l(w,["install"],E,b),i.pods=T,u(r,i)}catch(E){let _=E.message||"Unknown error";Le.warn(Me.yellow(`Native "pod" command failed: ${_}`)),Le.info(Me.dim("Falling back to npm exec pod-install..."));let b=o();a(Xt.resolve("ios"),b),Le.info(Me.magenta(`${m.nameUpper}_DEBUG: Executing pod-install override via npx --yes pod-install@latest`)),await l("npx",["--yes","pod-install@latest","ios"],process.cwd(),b)}if(Ue.existsSync("ios/Pods")){Le.info(Me.dim("Disabling signing for Pod targets to prevent conflicts..."));try{Tc(`find ios/Pods -name "project.pbxproj" -exec sed -i '' 's/buildSettings = {/buildSettings = { CODE_SIGNING_ALLOWED = NO; CODE_SIGNING_REQUIRED = NO; PROVISIONING_PROFILE_SPECIFIER = ""; EXPANDED_CODE_SIGN_IDENTITY = "";/g' {} +`,{stdio:"ignore"})}catch{}}return{appName:p,bundleId:c}}finally{g&&Ue.writeFileSync(f,g)}}};import{log as Mt}from"@clack/prompts";import Ut from"chalk";import mt from"fs";import Sn from"path";var Nc=(e,t)=>!mt.existsSync(e)||!mt.existsSync(t)?!1:mt.readFileSync(e,"utf-8")!==mt.readFileSync(t,"utf-8"),Yi={id:"react-native",displayName:"React Native",applyLocalProcessEnv:e=>{delete process.env.EXPO_NO_DEV_CLIENT,delete process.env.EXPO_AUTOLINKING_EXCLUDE,delete process.env.EXPO_NO_DOTENV},localAndroidEnv:(e,t)=>({MACH_FRAMEWORK:"react-native",MACH_BUILD_PROFILE:t}),remoteEnvSetupScript:()=>`
608
608
  export MACH_FRAMEWORK="react-native"
609
609
  echo "[ENV] MACH_FRAMEWORK=$MACH_FRAMEWORK"
610
610
  unset EXPO_NO_DOTENV
@@ -619,17 +619,17 @@ echo "[PREBUILD] React Native framework configured. Skipping Expo prebuild."
619
619
  :
620
620
  `,androidRemoteReleaseGradlePropertiesScript:()=>`
621
621
  :
622
- `,prepareLocalProject:async e=>{let{platform:t,cacheMeta:n,cacheMetaDir:i,currentBuildEnv:r,reportStep:o,reportLog:s,loggedRun:l,configureXcodeNodeBinary:a,podsFingerprint:c,writeCacheMeta:u}=e;if(t!=="ios")return{};let d=ln.resolve("ios"),p=ln.join(d,"Podfile");if(!st.existsSync(p))throw new Error("React Native iOS build requires ios/Podfile. Commit the ios directory for vanilla React Native projects.");await o("pods"),Dt.info(Pt.blue("Running React Native pod install..."));let f=r();a(d,f);let g=ln.join(d,"Pods"),y=ln.join(d,"Podfile.lock"),E=ln.join(g,"Manifest.lock"),_=st.existsSync(g),b=c(d);_&&n.reactNativePods&&n.reactNativePods!==b?(await s(`[CACHE] React Native Podfile/Podfile.lock changed - wiping ios/Pods
623
- `),Dt.info(Pt.dim("React Native Podfile fingerprint changed - clearing Pods for clean install...")),st.rmSync(g,{recursive:!0,force:!0})):_&&dd(y,E)&&(await s(`[CACHE] React Native Pods Manifest.lock is out of sync - wiping ios/Pods
624
- `),Dt.info(Pt.dim("React Native Pods manifest is out of sync - clearing Pods for clean install...")),st.rmSync(g,{recursive:!0,force:!0}));let x="/opt/homebrew/bin/pod",I=st.existsSync(x)?x:"pod";try{Dt.info(Pt.dim(`Using pod command: ${I} in ${d}`)),await l(I,["install"],d,f)}catch(F){let X=F.message||"Unknown error";Dt.warn(Pt.yellow(`Native "pod" command failed: ${X}`)),Dt.info(Pt.dim("Falling back to npx pod-install..."));let D=r();a(d,D),Dt.info(Pt.magenta(`${m.nameUpper}_DEBUG: Executing pod-install fallback via npx --yes pod-install@latest`)),await l("npx",["--yes","pod-install@latest","ios"],process.cwd(),D)}return n.reactNativePods=c(d),u(i,n),{}}};var cd={expo:Ao,"react-native":Mi};function at(e){if(!e)return Mi;if(e!=="flutter")return cd[e];throw new Error('Flutter builds are not implemented yet. Set framework to "expo" or "react-native" for this build.')}var pd="mach-env-v2-js-bundle-cache",fd=new Set(["BUILD_ID","BUILD_NUMBER","ANDROID_VERSION_CODE","MACH_TOKEN","MACH_DEBUG","MACH_S3_DEBUG","MACH_ENV_FINGERPRINT","CODEARTIFACT_AUTH_TOKEN","EXPO_ZQRN_BB_REPO_TOKEN","SENTRY_AUTH_TOKEN","IOS_DIST_P12","IOS_PROVISIONING_PROFILE","IOS_P12_PASSWORD","MATCH_ENCRYPTION_PASSPHRASE","MATCH_PASSWORD","MATCH_KEYCHAIN_NAME","MATCH_KEYCHAIN_PASSWORD","APPLE_TEAM_ID","FASTLANE_TEAM_ID","ANDROID_KEYSTORE","ANDROID_KEYSTORE_BASE64","ANDROID_STORE_PASSWORD","ANDROID_KEY_PASSWORD","ANDROID_KEY_ALIAS","KEYSTORE_PASSWORD","KEYSTORE_ALIAS","AWS_ACCESS_KEY_ID","AWS_SECRET_ACCESS_KEY","AWS_SESSION_TOKEN","AWS_SECURITY_TOKEN","GITHUB_TOKEN","NPM_TOKEN"]),md=["PRESIGNED_","KEYSTORE_PASSWORD_"],gd=e=>!e||fd.has(e)?!1:!md.some(t=>e.startsWith(t)),Ot=(e,t,n)=>{let i=at(n.framework);return{...e,...i.localAndroidEnv(n,t),MACH_APP_NAME:n.appName||n.name||"App"}},Kt=e=>{let t=Object.entries(e).filter(([n])=>gd(n)).sort(([n],[i])=>n.localeCompare(i));return ud.createHash("sha256").update(JSON.stringify({version:pd,entries:t})).digest("hex")};var Ui=e=>e.replace(/\\/g,"\\\\").replace(/"/g,'\\"').replace(/\$/g,"\\$").replace(/`/g,"\\`"),Fi=e=>["1","true","yes","on"].includes(String(e||"").trim().toLowerCase()),yd=e=>/(^|[-_])(maestro|e2e|test|emulator)([-_]|$)/i.test(e),Sd=(e,t,n)=>{let i=n.MACH_ANDROID_RELEASE_ABIS||n.MACH_ANDROID_ABIS||n.MACH_PROFILE_ANDROID_RELEASE_ABIS||n.MACH_PROFILE_ANDROID_ABIS||n.MACH_PROFILE_ANDROID_ARCHITECTURES||n.MACH_PROFILE_ANDROID_REACT_NATIVE_ARCHITECTURES;return i||(!!e.maestro||yd(t)||Fi(n.MACH_PROFILE_ANDROID_EMULATOR)||Fi(n.MACH_ANDROID_INCLUDE_EMULATOR_ABIS)||Fi(n.MACH_PROFILE_ANDROID_INCLUDE_EMULATOR_ABIS)?"armeabi-v7a,arm64-v8a,x86_64":"armeabi-v7a,arm64-v8a")},_o=async(e,t,n={},i,r)=>{let o=hd(),s=at(e.framework),l=e.buildProfile||"production",a=l==="production",c=e.apk===!0,u=e.developmentClient?"assembleDebug":a?"bundleRelease":"assembleRelease",d=e.buildCommand||(c?"assembleRelease":u),p=e.nodeVersion?[`echo "[NODE] Switching to Node ${e.nodeVersion}..."`,`CURRENT_MAJOR=$(node -e "process.stdout.write(process.version.split('.')[0].replace('v',''))" 2>/dev/null || echo "0")`,`if [ "$CURRENT_MAJOR" != "${e.nodeVersion}" ]; then`,` curl -fsSL https://deb.nodesource.com/setup_${e.nodeVersion}.x | bash - 2>&1`," apt-get install -y nodejs 2>&1",' echo "[NODE] Installed Node $(node -v)"',"else",' echo "[NODE] Already on Node $(node -v) \u2014 no switch needed"',"fi"].join(`
625
- `):"",f;if(r){let b=wo.isAbsolute(r)?r:wo.resolve(process.cwd(),r);Io.existsSync(b)?(f=Io.readFileSync(b,"utf-8"),Ln.info(Eo.magenta(`\u2713 Loaded preBuild hook: ${r}`))):Ln.warn(`preBuild script not found at ${b} \u2014 skipping`)}let g=Sd(e,l,n),y={...Ot(n,l,e),MACH_ANDROID_RELEASE_ABIS:g},E=Kt(y),_=bo.replace(/\{\{BUILD_ID\}\}/g,t).replace(/\{\{BUILD_COMMAND\}\}/g,d).replace("{{NODE_VERSION_SETUP}}",p).replace("{{ENV_VARS}}",`
626
- export MACH_APP_NAME="${Ui(y.MACH_APP_NAME)}"
627
- export MACH_BUILD_PROFILE="${Ui(l)}"
628
- export MACH_ANDROID_RELEASE_ABIS="${Ui(g)}"
622
+ `,prepareLocalProject:async e=>{let{platform:t,cacheMeta:n,cacheMetaDir:i,currentBuildEnv:r,reportStep:o,reportLog:s,loggedRun:l,configureXcodeNodeBinary:a,podsFingerprint:d,writeCacheMeta:u}=e;if(t!=="ios")return{};let c=Sn.resolve("ios"),p=Sn.join(c,"Podfile");if(!mt.existsSync(p))throw new Error("React Native iOS build requires ios/Podfile. Commit the ios directory for vanilla React Native projects.");await o("pods"),Mt.info(Ut.blue("Running React Native pod install..."));let f=r();a(c,f);let g=Sn.join(c,"Pods"),y=Sn.join(c,"Podfile.lock"),E=Sn.join(g,"Manifest.lock"),_=mt.existsSync(g),b=d(c);_&&n.reactNativePods&&n.reactNativePods!==b?(await s(`[CACHE] React Native Podfile/Podfile.lock changed - wiping ios/Pods
623
+ `),Mt.info(Ut.dim("React Native Podfile fingerprint changed - clearing Pods for clean install...")),mt.rmSync(g,{recursive:!0,force:!0})):_&&Nc(y,E)&&(await s(`[CACHE] React Native Pods Manifest.lock is out of sync - wiping ios/Pods
624
+ `),Mt.info(Ut.dim("React Native Pods manifest is out of sync - clearing Pods for clean install...")),mt.rmSync(g,{recursive:!0,force:!0}));let x="/opt/homebrew/bin/pod",I=mt.existsSync(x)?x:"pod";try{Mt.info(Ut.dim(`Using pod command: ${I} in ${c}`)),await l(I,["install"],c,f)}catch(F){let X=F.message||"Unknown error";Mt.warn(Ut.yellow(`Native "pod" command failed: ${X}`)),Mt.info(Ut.dim("Falling back to npx pod-install..."));let P=r();a(c,P),Mt.info(Ut.magenta(`${m.nameUpper}_DEBUG: Executing pod-install fallback via npx --yes pod-install@latest`)),await l("npx",["--yes","pod-install@latest","ios"],process.cwd(),P)}return n.reactNativePods=d(c),u(i,n),{}}};var xc={expo:xo,"react-native":Yi};function gt(e){if(!e)return Yi;if(e!=="flutter")return xc[e];throw new Error('Flutter builds are not implemented yet. Set framework to "expo" or "react-native" for this build.')}var Mc="mach-env-v2-js-bundle-cache",Uc=new Set(["BUILD_ID","BUILD_NUMBER","ANDROID_VERSION_CODE","MACH_TOKEN","MACH_DEBUG","MACH_S3_DEBUG","MACH_ENV_FINGERPRINT","CODEARTIFACT_AUTH_TOKEN","EXPO_ZQRN_BB_REPO_TOKEN","SENTRY_AUTH_TOKEN","IOS_DIST_P12","IOS_PROVISIONING_PROFILE","IOS_P12_PASSWORD","MATCH_ENCRYPTION_PASSPHRASE","MATCH_PASSWORD","MATCH_KEYCHAIN_NAME","MATCH_KEYCHAIN_PASSWORD","APPLE_TEAM_ID","FASTLANE_TEAM_ID","ANDROID_KEYSTORE","ANDROID_KEYSTORE_BASE64","ANDROID_STORE_PASSWORD","ANDROID_KEY_PASSWORD","ANDROID_KEY_ALIAS","KEYSTORE_PASSWORD","KEYSTORE_ALIAS","AWS_ACCESS_KEY_ID","AWS_SECRET_ACCESS_KEY","AWS_SESSION_TOKEN","AWS_SECURITY_TOKEN","GITHUB_TOKEN","NPM_TOKEN"]),Fc=["PRESIGNED_","KEYSTORE_PASSWORD_"],Bc=e=>!e||Uc.has(e)?!1:!Fc.some(t=>e.startsWith(t)),Ft=(e,t,n)=>{let i=gt(n.framework);return{...e,...i.localAndroidEnv(n,t),MACH_APP_NAME:n.appName||n.name||"App"}},Zt=e=>{let t=Object.entries(e).filter(([n])=>Bc(n)).sort(([n],[i])=>n.localeCompare(i));return Lc.createHash("sha256").update(JSON.stringify({version:Mc,entries:t})).digest("hex")};var qi=e=>e.replace(/\\/g,"\\\\").replace(/"/g,'\\"').replace(/\$/g,"\\$").replace(/`/g,"\\`"),Xi=e=>["1","true","yes","on"].includes(String(e||"").trim().toLowerCase()),Hc=e=>/(^|[-_])(maestro|e2e|test|emulator)([-_]|$)/i.test(e),Gc=(e,t,n)=>{let i=n.MACH_ANDROID_RELEASE_ABIS||n.MACH_ANDROID_ABIS||n.MACH_PROFILE_ANDROID_RELEASE_ABIS||n.MACH_PROFILE_ANDROID_ABIS||n.MACH_PROFILE_ANDROID_ARCHITECTURES||n.MACH_PROFILE_ANDROID_REACT_NATIVE_ARCHITECTURES;return i||(!!e.maestro||Hc(t)||Xi(n.MACH_PROFILE_ANDROID_EMULATOR)||Xi(n.MACH_ANDROID_INCLUDE_EMULATOR_ABIS)||Xi(n.MACH_PROFILE_ANDROID_INCLUDE_EMULATOR_ABIS)?"armeabi-v7a,arm64-v8a,x86_64":"armeabi-v7a,arm64-v8a")},Fo=async(e,t,n={},i,r)=>{let o=jc(),s=gt(e.framework),l=e.buildProfile||"production",a=l==="production",d=e.apk===!0,u=e.developmentClient?"assembleDebug":a?"bundleRelease":"assembleRelease",c=e.buildCommand||(d?"assembleRelease":u),p=e.nodeVersion?[`echo "[NODE] Switching to Node ${e.nodeVersion}..."`,`CURRENT_MAJOR=$(node -e "process.stdout.write(process.version.split('.')[0].replace('v',''))" 2>/dev/null || echo "0")`,`if [ "$CURRENT_MAJOR" != "${e.nodeVersion}" ]; then`,` curl -fsSL https://deb.nodesource.com/setup_${e.nodeVersion}.x | bash - 2>&1`," apt-get install -y nodejs 2>&1",' echo "[NODE] Installed Node $(node -v)"',"else",' echo "[NODE] Already on Node $(node -v) \u2014 no switch needed"',"fi"].join(`
625
+ `):"",f;if(r){let b=Uo.isAbsolute(r)?r:Uo.resolve(process.cwd(),r);Mo.existsSync(b)?(f=Mo.readFileSync(b,"utf-8"),Jn.info(Lo.magenta(`\u2713 Loaded preBuild hook: ${r}`))):Jn.warn(`preBuild script not found at ${b} \u2014 skipping`)}let g=Gc(e,l,n),y={...Ft(n,l,e),MACH_ANDROID_RELEASE_ABIS:g},E=Zt(y),_=No.replace(/\{\{BUILD_ID\}\}/g,t).replace(/\{\{BUILD_COMMAND\}\}/g,c).replace("{{NODE_VERSION_SETUP}}",p).replace("{{ENV_VARS}}",`
626
+ export MACH_APP_NAME="${qi(y.MACH_APP_NAME)}"
627
+ export MACH_BUILD_PROFILE="${qi(l)}"
628
+ export MACH_ANDROID_RELEASE_ABIS="${qi(g)}"
629
629
  export MACH_ENV_FINGERPRINT="${E}"
630
630
  ${s.remoteEnvSetupScript().trim()}
631
631
  {{ENV_VARS}}
632
- `).replace("{{FRAMEWORK_ANDROID_VERSION_CODE}}",s.androidRemoteVersionCodeScript().trim()).replace("{{FRAMEWORK_ANDROID_PREBUILD}}",s.androidRemotePrebuildScript().trim()).replace("{{FRAMEWORK_ANDROID_GRADLE_PROPERTIES}}",s.androidRemoteGradlePropertiesScript().trim()).replace("{{FRAMEWORK_ANDROID_RELEASE_GRADLE_PROPERTIES}}",s.androidRemoteReleaseGradlePropertiesScript().trim());if(e.dryRun){Ln.info("User Data Script (dry run):"),console.log(_);return}o.start("Requesting cloud build instance...");try{let b=await T.post("/builds/launch-android",{projectId:i,buildId:t,platform:e.platform,buildProfile:e.buildProfile,buildCommand:d,instanceType:e.instanceType,ami:e.ami,keepInstance:e.keepInstance,region:e.region,subnet:e.subnet,securityGroup:e.securityGroup,projectSecrets:n,dryRun:e.dryRun,userDataScript:_,preBuildScriptContent:f});if(b.data.status!=="success")throw new Error(b.data.message||"Failed to launch build instance");let x=b.data.instanceId;return o.stop("Build Started"),Ln.success(Eo.green(`Build initiated on cloud instance (${x}).`)),{instanceId:x}}catch(b){o.stop("Android Build Failed");let x=b.response?.data?.message||b.message;throw new Error(`Failed to launch Android build: ${x}`)}};import{spinner as bd,log as Ct}from"@clack/prompts";import lt from"chalk";import Ad from"fs";import{execSync as dn}from"child_process";var $o=`#!/bin/bash
632
+ `).replace("{{FRAMEWORK_ANDROID_VERSION_CODE}}",s.androidRemoteVersionCodeScript().trim()).replace("{{FRAMEWORK_ANDROID_PREBUILD}}",s.androidRemotePrebuildScript().trim()).replace("{{FRAMEWORK_ANDROID_GRADLE_PROPERTIES}}",s.androidRemoteGradlePropertiesScript().trim()).replace("{{FRAMEWORK_ANDROID_RELEASE_GRADLE_PROPERTIES}}",s.androidRemoteReleaseGradlePropertiesScript().trim());if(e.dryRun){Jn.info("User Data Script (dry run):"),console.log(_);return}o.start("Requesting cloud build instance...");try{let b=await N.post("/builds/launch-android",{projectId:i,buildId:t,platform:e.platform,buildProfile:e.buildProfile,buildCommand:c,instanceType:e.instanceType,ami:e.ami,keepInstance:e.keepInstance,region:e.region,subnet:e.subnet,securityGroup:e.securityGroup,projectSecrets:n,dryRun:e.dryRun,userDataScript:_,preBuildScriptContent:f});if(b.data.status!=="success")throw new Error(b.data.message||"Failed to launch build instance");let x=b.data.instanceId;return o.stop("Build Started"),Jn.success(Lo.green(`Build initiated on cloud instance (${x}).`)),{instanceId:x}}catch(b){o.stop("Android Build Failed");let x=b.response?.data?.message||b.message;throw new Error(`Failed to launch Android build: ${x}`)}};import{spinner as Vc,log as Bt}from"@clack/prompts";import ht from"chalk";import Kc from"fs";import{execSync as bn}from"child_process";var Bo=`#!/bin/bash
633
633
  # --- Mach Cloud Build Script (iOS) ---
634
634
  # All S3 operations use presigned URLs via curl \u2014 zero AWS credentials on Mac.
635
635
 
@@ -1309,50 +1309,50 @@ touch done
1309
1309
  if [ ! -z "$PRESIGNED_DONE_MARKER" ]; then
1310
1310
  curl -X PUT -T done "$PRESIGNED_DONE_MARKER" --silent
1311
1311
  fi
1312
- `;var vo=e=>e.replace(/\\/g,"\\\\").replace(/"/g,'\\"').replace(/\$/g,"\\$").replace(/`/g,"\\`"),Ro=async(e,t,n={},i)=>{let r=bd(),o=at(e.framework);e.sshHost||(e.sshHost="localhost",Ct.message(lt.yellow("No SSH host provided, defaulting to localhost."))),r.start(`Connecting to remote Mac at ${lt.cyan(e.sshHost)}...`);let s=e.sshUser||process.env.USER||"ubuntu",l=e.sshKey,a=`${s}@${e.sshHost}`,c=`ssh ${l?`-i ${l}`:""} -o StrictHostKeyChecking=no ${a}`,u=`scp ${l?`-i ${l}`:""} -o StrictHostKeyChecking=no`;try{let d=s==="ubuntu"?"/home/ubuntu":`/Users/${s}`,p=(n.PROJECT_ID||"default_project").replace(/[^a-zA-Z0-9-_]/g,"_"),f=`${d}/${m.remoteWorkspacesDir}/${p}`;r.message(`Preparing stable workspace: ${f}...`),dn(`${c} "mkdir -p ${f}"`,{stdio:"inherit"}),r.message("Transferring source code...");let g=`/tmp/${m.nameLower}-source-${t}.zip`;dn(`${u} ${g} ${a}:${f}/source.zip`,{stdio:"inherit"});let y=e.iosApiKeyPath?`${f}/api_key.p8`:"",E="";e.iosApiKeyPath&&(r.message("Uploading App Store Connect API key..."),dn(`${u} ${e.iosApiKeyPath} ${a}:${y}`),e.iosApiKeyId&&e.iosApiKeyIssuer&&(E=`-authenticationKeyID ${e.iosApiKeyId} -authenticationKeyIssuerID ${e.iosApiKeyIssuer} -authenticationKeyPath ${y}`));let _={};if(i)try{let h=await T.post(`/builds/${i}/${t}/build-urls`,{platform:"ios"});h.data.status==="success"&&(_=h.data.urls)}catch(h){Ct.warn(lt.yellow(`Could not fetch build URLs: ${h.message}`))}let b="";if(_.credentials&&_.credentials.length>0)for(let h of _.credentials)h.type==="p12"?b+=`curl -sf -o "$CERT_DIR/${h.name}" "${h.downloadUrl}" || true
1312
+ `;var jo=e=>e.replace(/\\/g,"\\\\").replace(/"/g,'\\"').replace(/\$/g,"\\$").replace(/`/g,"\\`"),Ho=async(e,t,n={},i)=>{let r=Vc(),o=gt(e.framework);e.sshHost||(e.sshHost="localhost",Bt.message(ht.yellow("No SSH host provided, defaulting to localhost."))),r.start(`Connecting to remote Mac at ${ht.cyan(e.sshHost)}...`);let s=e.sshUser||process.env.USER||"ubuntu",l=e.sshKey,a=`${s}@${e.sshHost}`,d=`ssh ${l?`-i ${l}`:""} -o StrictHostKeyChecking=no ${a}`,u=`scp ${l?`-i ${l}`:""} -o StrictHostKeyChecking=no`;try{let c=s==="ubuntu"?"/home/ubuntu":`/Users/${s}`,p=(n.PROJECT_ID||"default_project").replace(/[^a-zA-Z0-9-_]/g,"_"),f=`${c}/${m.remoteWorkspacesDir}/${p}`;r.message(`Preparing stable workspace: ${f}...`),bn(`${d} "mkdir -p ${f}"`,{stdio:"inherit"}),r.message("Transferring source code...");let g=`/tmp/${m.nameLower}-source-${t}.zip`;bn(`${u} ${g} ${a}:${f}/source.zip`,{stdio:"inherit"});let y=e.iosApiKeyPath?`${f}/api_key.p8`:"",E="";e.iosApiKeyPath&&(r.message("Uploading App Store Connect API key..."),bn(`${u} ${e.iosApiKeyPath} ${a}:${y}`),e.iosApiKeyId&&e.iosApiKeyIssuer&&(E=`-authenticationKeyID ${e.iosApiKeyId} -authenticationKeyIssuerID ${e.iosApiKeyIssuer} -authenticationKeyPath ${y}`));let _={};if(i)try{let h=await N.post(`/builds/${i}/${t}/build-urls`,{platform:"ios"});h.data.status==="success"&&(_=h.data.urls)}catch(h){Bt.warn(ht.yellow(`Could not fetch build URLs: ${h.message}`))}let b="";if(_.credentials&&_.credentials.length>0)for(let h of _.credentials)h.type==="p12"?b+=`curl -sf -o "$CERT_DIR/${h.name}" "${h.downloadUrl}" || true
1313
1313
  `:h.type==="mobileprovision"&&(b+=`curl -sf -o "$PROV_TEMP/${h.name}" "${h.downloadUrl}" || true
1314
1314
  `);r.message("Generating macOS build script...");let x=process.env.CODEARTIFACT_AUTH_TOKEN?`export CODEARTIFACT_AUTH_TOKEN="${process.env.CODEARTIFACT_AUTH_TOKEN}"
1315
1315
  `:"";if(n)for(let[h,M]of Object.entries(n)){let U=M.replace(/"/g,'\\"').replace(/\$/g,"\\$").replace(/`/g,"\\`");x+=`export ${h}="${U}"
1316
- `}let I=e.buildProfile||"production",F=Ot(n,I,e),X=Kt(F);Ct.info(lt.dim(`iOS remote build config: simulator=${String(!!e.simulator)}, configuration=${e.iosConfiguration||"Release"}, scheme=${e.iosScheme||"auto"}`));let D=[x,_.logUpload?`export PRESIGNED_LOG_UPLOAD="${_.logUpload}"`:"",_.doneMarker?`export PRESIGNED_DONE_MARKER="${_.doneMarker}"`:"",_.cacheDerivedDataDownload?`export PRESIGNED_CACHE_DD_DOWNLOAD="${_.cacheDerivedDataDownload}"`:"",_.cacheDerivedDataUpload?`export PRESIGNED_CACHE_DD_UPLOAD="${_.cacheDerivedDataUpload}"`:"",_.cacheNodeModulesDownload?`export PRESIGNED_CACHE_NODE_DOWNLOAD="${_.cacheNodeModulesDownload}"`:"",_.cacheNodeModulesUpload?`export PRESIGNED_CACHE_NODE_UPLOAD="${_.cacheNodeModulesUpload}"`:"",_.cachePodsDownload?`export PRESIGNED_CACHE_PODS_DOWNLOAD="${_.cachePodsDownload}"`:"",_.cachePodsUpload?`export PRESIGNED_CACHE_PODS_UPLOAD="${_.cachePodsUpload}"`:"",_.artifactIpaUpload?`export PRESIGNED_ARTIFACT_IPA_UPLOAD="${_.artifactIpaUpload}"`:"",_.artifactAppZipUpload?`export PRESIGNED_ARTIFACT_APP_ZIP_UPLOAD="${_.artifactAppZipUpload}"`:"",`export BUILD_ID="${t}"`,`export MACH_BUILD_PROFILE="${vo(I)}"`,`export MACH_APP_NAME="${vo(F.MACH_APP_NAME)}"`,`export MACH_ENV_FINGERPRINT="${X}"`,o.remoteEnvSetupScript().trim(),`export ${m.envPrefix}PROJECT_ID="${p}"`,n.MATCH_ENCRYPTION_PASSPHRASE?`export MATCH_PASSWORD="${n.MATCH_ENCRYPTION_PASSPHRASE}"`:"",n.APPLE_TEAM_ID?`export FASTLANE_TEAM_ID="${n.APPLE_TEAM_ID}"`:"",`export MATCH_KEYCHAIN_NAME="${m.credentialsKeychain}"`,`export MATCH_KEYCHAIN_PASSWORD="${m.keychainPassword}"`].filter(Boolean).join(`
1316
+ `}let I=e.buildProfile||"production",F=Ft(n,I,e),X=Zt(F);Bt.info(ht.dim(`iOS remote build config: simulator=${String(!!e.simulator)}, configuration=${e.iosConfiguration||"Release"}, scheme=${e.iosScheme||"auto"}`));let P=[x,_.logUpload?`export PRESIGNED_LOG_UPLOAD="${_.logUpload}"`:"",_.doneMarker?`export PRESIGNED_DONE_MARKER="${_.doneMarker}"`:"",_.cacheDerivedDataDownload?`export PRESIGNED_CACHE_DD_DOWNLOAD="${_.cacheDerivedDataDownload}"`:"",_.cacheDerivedDataUpload?`export PRESIGNED_CACHE_DD_UPLOAD="${_.cacheDerivedDataUpload}"`:"",_.cacheNodeModulesDownload?`export PRESIGNED_CACHE_NODE_DOWNLOAD="${_.cacheNodeModulesDownload}"`:"",_.cacheNodeModulesUpload?`export PRESIGNED_CACHE_NODE_UPLOAD="${_.cacheNodeModulesUpload}"`:"",_.cachePodsDownload?`export PRESIGNED_CACHE_PODS_DOWNLOAD="${_.cachePodsDownload}"`:"",_.cachePodsUpload?`export PRESIGNED_CACHE_PODS_UPLOAD="${_.cachePodsUpload}"`:"",_.artifactIpaUpload?`export PRESIGNED_ARTIFACT_IPA_UPLOAD="${_.artifactIpaUpload}"`:"",_.artifactAppZipUpload?`export PRESIGNED_ARTIFACT_APP_ZIP_UPLOAD="${_.artifactAppZipUpload}"`:"",`export BUILD_ID="${t}"`,`export MACH_BUILD_PROFILE="${jo(I)}"`,`export MACH_APP_NAME="${jo(F.MACH_APP_NAME)}"`,`export MACH_ENV_FINGERPRINT="${X}"`,o.remoteEnvSetupScript().trim(),`export ${m.envPrefix}PROJECT_ID="${p}"`,n.MATCH_ENCRYPTION_PASSPHRASE?`export MATCH_PASSWORD="${n.MATCH_ENCRYPTION_PASSPHRASE}"`:"",n.APPLE_TEAM_ID?`export FASTLANE_TEAM_ID="${n.APPLE_TEAM_ID}"`:"",`export MATCH_KEYCHAIN_NAME="${m.credentialsKeychain}"`,`export MATCH_KEYCHAIN_PASSWORD="${m.keychainPassword}"`].filter(Boolean).join(`
1317
1317
  `),w=e.nodeVersion?[`echo "[NODE] Switching to Node ${e.nodeVersion}..."`,'export NVM_DIR="$HOME/.nvm"','[ -s "$NVM_DIR/nvm.sh" ] && . "$NVM_DIR/nvm.sh" --no-use',`nvm install ${e.nodeVersion} 2>/dev/null || true`,`nvm use ${e.nodeVersion} --silent`,`export PATH="$NVM_DIR/versions/node/$(nvm version ${e.nodeVersion})/bin:$PATH"`,'echo "[NODE] Now using: $(node -v) at $(which node)"'].join(`
1318
- `):"",N=$o,$={"{{REMOTE_DIR}}":f,"{{ENV_VARS}}":D,"{{CREDENTIAL_DOWNLOADS}}":b,"{{IOS_SCHEME}}":e.iosScheme||"","{{IOS_CONFIG}}":e.iosConfiguration||"Release","{{TEAM_ID}}":e.iosTeamId||"","{{AUTH_PARAMS}}":E,"{{IS_SIMULATOR}}":e.simulator?"true":"false","{{BUILD_ID}}":t,"{{EXPORT_METHOD}}":e.iosExportMethod||"ad-hoc","{{NODE_VERSION_SETUP}}":w,"{{FRAMEWORK_PREBUILD}}":o.iosRemotePrebuildScript().trim()};Object.entries($).forEach(([h,M])=>{N=N.split(h).join(M)});let O=`/tmp/${m.nameLower}-mac-build-${t}.sh`;if(Ad.writeFileSync(O,N),dn(`${u} ${O} ${a}:${f}/build.sh`),r.stop("Remote script uploaded."),Ct.info(lt.cyan("Executing remote build. This might take a while...")),dn(`${c} "bash ${f}/build.sh"`,{stdio:"inherit"}),r.stop("Remote build finished!"),i){r.start("Fetching artifact links...");try{let M=(await T.get(`/builds/${i}/${t}/artifacts`)).data.artifacts||[],U=e.simulator===!0;if(M.length===0&&!U)throw r.stop("Build Failed!"),new Error("Build completed but no artifacts were generated. Check build logs for errors.");if(r.stop("Build Successful!"),M.length>0){Ct.success("Build Artifacts Ready:");for(let H of M)console.log(`
1319
- ${lt.yellow(H.name)}:
1320
- ${lt.cyan(H.downloadUrl)}`);console.log(`
1321
- ${lt.dim("Note: Links are valid for 7 days.")}`)}else U&&Ct.warn("Simulator build completed. No artifacts uploaded.")}catch(h){r.stop("Could not fetch artifacts"),Ct.warn(lt.yellow(`Artifact listing failed: ${h.message}`))}}}catch(d){throw r.stop("iOS Build Failed"),d}};import Ed from"crypto";import ze from"axios";import Do from"fs";var it=6e4,Id=12e4,Bi=4,dt=e=>encodeURIComponent(e),wd=e=>new Promise(t=>setTimeout(t,e));async function We(e,t){let n;for(let i=1;i<=Bi;i++)try{return await t()}catch(r){if(n=r,i>=Bi||!_d(r))throw r;let o=Number(r.response?.headers?.["retry-after"]),s=Number.isFinite(o)&&o>0?o*1e3:Math.min(2e3*i*i,15e3);console.log(`[Google Play] ${e} failed (attempt ${i}/${Bi}); retrying in ${Math.round(s/1e3)}s...`),await wd(s)}throw n}function _d(e){let t=e.response?.status;return t?t===408||t===409||t===425||t===429||t>=500:!0}async function Po(e,t){let n;try{let i=await Mn(t),r=dt(e);if(n=(await We("create edit",()=>ze.post(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${r}/edits`,{},{headers:{Authorization:`Bearer ${i}`,Connection:"close"},timeout:it}))).data.id,!n)throw new Error("Google Play edit insert succeeded but did not return an edit id.");let s=dt(n),l=0,c=(await We("list tracks",()=>ze.get(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${r}/edits/${s}/tracks`,{headers:{Authorization:`Bearer ${i}`,Connection:"close"},timeout:it}))).data.tracks||[];for(let u of c)if(u.releases){for(let d of u.releases)if(d.versionCodes)for(let p of d.versionCodes){let f=parseInt(p,10);f>l&&(l=f)}}try{let d=(await We("list bundles",()=>ze.get(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${r}/edits/${s}/bundles`,{headers:{Authorization:`Bearer ${i}`,Connection:"close"},timeout:it}))).data.bundles||[];for(let p of d)p.versionCode&&p.versionCode>l&&(l=p.versionCode)}catch{}try{let d=(await We("list APKs",()=>ze.get(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${r}/edits/${s}/apks`,{headers:{Authorization:`Bearer ${i}`,Connection:"close"},timeout:it}))).data.apks||[];for(let p of d)p.versionCode&&p.versionCode>l&&(l=p.versionCode)}catch{}return l}catch(i){let r=i.response?.data?.error?.message||i.message;throw new Error(`Google Play API Error: ${r}`)}finally{if(n)try{let i=await Mn(t);await We("delete edit",()=>ze.delete(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${dt(e)}/edits/${dt(n)}`,{headers:{Authorization:`Bearer ${i}`,Connection:"close"},timeout:it}))}catch{}}}async function Oo(e){let{packageName:t,serviceAccount:n,aabPath:i,track:r,releaseStatus:o,userFraction:s,changesNotSentForReview:l}=e,a;try{let u={Authorization:`Bearer ${await Mn(n)}`,Connection:"close"},d=dt(t);if(a=(await We("create edit",()=>ze.post(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${d}/edits`,{},{headers:u,timeout:it}))).data.id,!a)throw new Error("Google Play edit insert succeeded but did not return an edit id.");let f=dt(a),g=Do.statSync(i),y=await We("upload AAB",()=>ze.post(`https://androidpublisher.googleapis.com/upload/androidpublisher/v3/applications/${d}/edits/${f}/bundles`,Do.createReadStream(i),{headers:{...u,"Content-Type":"application/octet-stream","Content-Length":g.size},maxBodyLength:1/0,maxContentLength:1/0,params:{uploadType:"media"},timeout:Id})),E=Number(y.data.versionCode);if(!E)throw new Error("Google Play upload succeeded but did not return a versionCode.");let _={versionCodes:[String(E)],status:o};return(o==="inProgress"||o==="halted")&&typeof s=="number"&&(_.userFraction=s),await We("update track",()=>ze.put(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${d}/edits/${f}/tracks/${dt(r)}`,{releases:[_]},{headers:u,timeout:it})),await We("commit edit",()=>ze.post(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${d}/edits/${f}:commit`,{},{headers:u,params:l?{changesNotSentForReview:!0}:void 0,timeout:it})),{editId:a,versionCode:E,track:r,releaseStatus:o,userFraction:s}}catch(c){if(a)try{let d=await Mn(n);await We("delete edit",()=>ze.delete(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${dt(t)}/edits/${dt(a)}`,{headers:{Authorization:`Bearer ${d}`,Connection:"close"},timeout:it}))}catch{}let u=c.response?.data?.error?.message||c.message;throw new Error(`Google Play API Error: ${u}`)}}async function Mn(e){let t=Math.floor(Date.now()/1e3),n=t+3600,i={alg:"RS256",typ:"JWT"},r={iss:e.client_email,sub:e.client_email,aud:"https://oauth2.googleapis.com/token",iat:t,exp:n,scope:"https://www.googleapis.com/auth/androidpublisher"},o=Buffer.from(JSON.stringify(i)).toString("base64url"),s=Buffer.from(JSON.stringify(r)).toString("base64url"),l=`${o}.${s}`,a=Ed.createSign("RSA-SHA256");a.update(l);let c=a.sign(e.private_key,"base64url"),u=`${l}.${c}`;return(await We("OAuth token exchange",()=>ze.post("https://oauth2.googleapis.com/token",{grant_type:"urn:ietf:params:oauth:grant-type:jwt-bearer",assertion:u},{headers:{Connection:"close"},timeout:it}))).data.access_token}import $d from"crypto";import Co from"axios";var ji="https://api.appstoreconnect.apple.com/v1",ko=6e4,Hi=4,vd=e=>new Promise(t=>setTimeout(t,e));function Rd(e,t,n){let i=Math.floor(Date.now()/1e3),r=Buffer.from(JSON.stringify({alg:"ES256",kid:e,typ:"JWT"})).toString("base64url"),o=Buffer.from(JSON.stringify({iss:t,iat:i,exp:i+1200,aud:"appstoreconnect-v1"})).toString("base64url"),s=`${r}.${o}`,l=$d.createSign("SHA256");l.update(s);let a=l.sign({key:n,dsaEncoding:"ieee-p1363"}).toString("base64url");return`${s}.${a}`}function Dd(e){let t=e.response?.status;return t?t===408||t===409||t===425||t===429||t>=500:!0}async function No(e,t){let n;for(let i=1;i<=Hi;i++)try{return await t()}catch(r){if(n=r,i>=Hi||!Dd(r))throw r;let o=Number(r.response?.headers?.["retry-after"]),s=Number.isFinite(o)&&o>0?o*1e3:Math.min(2e3*i*i,15e3);console.log(`[App Store Connect] ${e} failed (attempt ${i}/${Hi}); retrying in ${Math.round(s/1e3)}s...`),await vd(s)}throw n}function To(e){return{Authorization:`Bearer ${Rd(e.keyId,e.issuerId,e.privateKey)}`,"Content-Type":"application/json",Connection:"close"}}function Pd(e){let t=e.response?.data?.errors;return Array.isArray(t)&&t.length>0?t.map(n=>n.detail||n.title||n.code).filter(Boolean).join("; "):e.response?.data?.error?.message||e.message||"Unknown App Store Connect error"}function Un(e){let t=String(e||"").trim();if(/^\d+(?:\.\d+){0,2}$/.test(t))return t.split(".").map(n=>Number(n))}function Od(e,t){let n=Un(e),i=Un(t);if(!n&&!i)return 0;if(!n)return-1;if(!i)return 1;let r=Math.max(n.length,i.length);for(let o=0;o<r;o++){let s=n[o]||0,l=i[o]||0;if(s!==l)return s>l?1:-1}return 0}function Cd(e){let t=Un(e);return!t||t.length===0?"1":(t[t.length-1]+=1,t.join("."))}async function kd(e,t,n){if(t)return t;if(!n)throw new Error("Set ios.ascAppId or ios.bundleIdentifier so Mach can find the App Store Connect app.");let r=(await No("lookup app by bundle ID",()=>Co.get(`${ji}/apps`,{headers:To(e),params:{"filter[bundleId]":n,limit:1},timeout:ko}))).data?.data?.[0];if(!r?.id)throw new Error(`No App Store Connect app found for bundle ID ${n}. Set ios.ascAppId in mach.config.json if the app exists.`);return r.id}async function xo(e){let t={keyId:e.keyId,issuerId:e.issuerId,privateKey:e.privateKey};try{let n=await kd(t,e.ascAppId,e.bundleId),i=`${ji}/builds`,r="0",o,s=0;for(;i&&s<10;){s+=1;let l=await No("list builds",()=>Co.get(i,{headers:To(t),params:i===`${ji}/builds`?{"filter[app]":n,"fields[builds]":"version,uploadedDate",sort:"-uploadedDate",limit:200}:void 0,timeout:ko})),a=l.data?.data||[];for(let c of a){let u=String(c.attributes?.version||"").trim();Un(u)&&Od(u,r)>0&&(r=u,o=c.attributes?.uploadedDate)}i=l.data?.links?.next}return{appId:n,latestBuildNumber:r,nextBuildNumber:Cd(r),latestUploadedDate:o}}catch(n){throw new Error(`App Store Connect API Error: ${Pd(n)}`)}}import{spinner as Bn,log as C,isCancel as Hn,confirm as Nd,select as Ki}from"@clack/prompts";import v from"chalk";import S from"fs";import A from"path";import{execFileSync as ct,execSync as ie,spawn as Ho}from"child_process";import $e from"os";import Td from"crypto";var jo=(e,t)=>t.filter(n=>S.existsSync(A.join(e,n))).reduce((n,i)=>n.update(S.readFileSync(A.join(e,i))),Td.createHash("sha256")).digest("hex").slice(0,16),xd=e=>jo(e,["package.json","yarn.lock","package-lock.json","bun.lockb"]),Ld=e=>jo(e,["Podfile","Podfile.lock"]),Md=e=>{let t=A.join(e,"fingerprint.json");try{return JSON.parse(S.readFileSync(t,"utf-8"))}catch{return{}}},Lo=(e,t)=>{S.mkdirSync(e,{recursive:!0}),S.writeFileSync(A.join(e,"fingerprint.json"),JSON.stringify(t,null,2))},Ud=7200*1e3,Fd=(e,t)=>{S.mkdirSync(e,{recursive:!0});let n=A.join(e,"build.lock");if(S.existsSync(n))try{let i=JSON.parse(S.readFileSync(n,"utf-8")),r=Date.now()-(i.timestamp||0);if(r<Ud)throw new Error(`Another build is already running for this project (build ${i.buildId}, started ${Math.round(r/6e4)}m ago). Cancel it from the dashboard first, or wait for it to complete.`)}catch(i){if(i.message.includes("Another build"))throw i}S.writeFileSync(n,JSON.stringify({buildId:t,pid:process.pid,timestamp:Date.now()}))},Bd=(e,t)=>{let n=A.join(e,"build.lock");try{S.existsSync(n)&&JSON.parse(S.readFileSync(n,"utf-8")).buildId===t&&S.unlinkSync(n)}catch{}},Mo=15e5,Uo=(e,t)=>{let n=e+t;return n.length>Mo?n.slice(-Mo):n},Go=e=>e.replace(/\u001b\[[0-9;]*m/g,""),Ko=e=>/\berror:|fatal error:|xcodebuild: error|The following build commands failed|Command PhaseScriptExecution failed|PhaseScriptExecution|Command .* failed|CodeSign|Provisioning profile|No profiles|requires a provisioning profile|Undefined symbols|ld:|clang: error|SwiftCompile|CompileC|node: command not found|env: node|No such file or directory|Permission denied/i.test(e),Hd=e=>{let t=new Set,n=[];e.forEach((r,o)=>{Ko(r)&&n.push(o)});for(let r of n){let o=/PhaseScriptExecution|Command PhaseScriptExecution failed|The following build commands failed/i.test(e[r])?18:8,s=/The following build commands failed/i.test(e[r])?18:10;for(let l=Math.max(0,r-o);l<=Math.min(e.length-1,r+s);l++)t.add(l)}if(t.size===0)return e.slice(-120);let i=Array.from(t).sort((r,o)=>r-o).map(r=>e[r]);return i.length>160?i.slice(-160):i},jd=(e,t,n,i)=>{let r=Go(i).replace(/\r/g,`
1318
+ `):"",T=Bo,$={"{{REMOTE_DIR}}":f,"{{ENV_VARS}}":P,"{{CREDENTIAL_DOWNLOADS}}":b,"{{IOS_SCHEME}}":e.iosScheme||"","{{IOS_CONFIG}}":e.iosConfiguration||"Release","{{TEAM_ID}}":e.iosTeamId||"","{{AUTH_PARAMS}}":E,"{{IS_SIMULATOR}}":e.simulator?"true":"false","{{BUILD_ID}}":t,"{{EXPORT_METHOD}}":e.iosExportMethod||"ad-hoc","{{NODE_VERSION_SETUP}}":w,"{{FRAMEWORK_PREBUILD}}":o.iosRemotePrebuildScript().trim()};Object.entries($).forEach(([h,M])=>{T=T.split(h).join(M)});let O=`/tmp/${m.nameLower}-mac-build-${t}.sh`;if(Kc.writeFileSync(O,T),bn(`${u} ${O} ${a}:${f}/build.sh`),r.stop("Remote script uploaded."),Bt.info(ht.cyan("Executing remote build. This might take a while...")),bn(`${d} "bash ${f}/build.sh"`,{stdio:"inherit"}),r.stop("Remote build finished!"),i){r.start("Fetching artifact links...");try{let M=(await N.get(`/builds/${i}/${t}/artifacts`)).data.artifacts||[],U=e.simulator===!0;if(M.length===0&&!U)throw r.stop("Build Failed!"),new Error("Build completed but no artifacts were generated. Check build logs for errors.");if(r.stop("Build Successful!"),M.length>0){Bt.success("Build Artifacts Ready:");for(let j of M)console.log(`
1319
+ ${ht.yellow(j.name)}:
1320
+ ${ht.cyan(j.downloadUrl)}`);console.log(`
1321
+ ${ht.dim("Note: Links are valid for 7 days.")}`)}else U&&Bt.warn("Simulator build completed. No artifacts uploaded.")}catch(h){r.stop("Could not fetch artifacts"),Bt.warn(ht.yellow(`Artifact listing failed: ${h.message}`))}}}catch(c){throw r.stop("iOS Build Failed"),c}};import zc from"crypto";import Ye from"axios";import Go from"fs";var lt=6e4,Wc=12e4,Zi=4,yt=e=>encodeURIComponent(e),Jc=e=>new Promise(t=>setTimeout(t,e));async function qe(e,t){let n;for(let i=1;i<=Zi;i++)try{return await t()}catch(r){if(n=r,i>=Zi||!Yc(r))throw r;let o=Number(r.response?.headers?.["retry-after"]),s=Number.isFinite(o)&&o>0?o*1e3:Math.min(2e3*i*i,15e3);console.log(`[Google Play] ${e} failed (attempt ${i}/${Zi}); retrying in ${Math.round(s/1e3)}s...`),await Jc(s)}throw n}function Yc(e){let t=e.response?.status;return t?t===408||t===409||t===425||t===429||t>=500:!0}async function Vo(e,t){let n;try{let i=await Yn(t),r=yt(e);if(n=(await qe("create edit",()=>Ye.post(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${r}/edits`,{},{headers:{Authorization:`Bearer ${i}`,Connection:"close"},timeout:lt}))).data.id,!n)throw new Error("Google Play edit insert succeeded but did not return an edit id.");let s=yt(n),l=0,d=(await qe("list tracks",()=>Ye.get(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${r}/edits/${s}/tracks`,{headers:{Authorization:`Bearer ${i}`,Connection:"close"},timeout:lt}))).data.tracks||[];for(let u of d)if(u.releases){for(let c of u.releases)if(c.versionCodes)for(let p of c.versionCodes){let f=parseInt(p,10);f>l&&(l=f)}}try{let c=(await qe("list bundles",()=>Ye.get(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${r}/edits/${s}/bundles`,{headers:{Authorization:`Bearer ${i}`,Connection:"close"},timeout:lt}))).data.bundles||[];for(let p of c)p.versionCode&&p.versionCode>l&&(l=p.versionCode)}catch{}try{let c=(await qe("list APKs",()=>Ye.get(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${r}/edits/${s}/apks`,{headers:{Authorization:`Bearer ${i}`,Connection:"close"},timeout:lt}))).data.apks||[];for(let p of c)p.versionCode&&p.versionCode>l&&(l=p.versionCode)}catch{}return l}catch(i){let r=i.response?.data?.error?.message||i.message;throw new Error(`Google Play API Error: ${r}`)}finally{if(n)try{let i=await Yn(t);await qe("delete edit",()=>Ye.delete(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${yt(e)}/edits/${yt(n)}`,{headers:{Authorization:`Bearer ${i}`,Connection:"close"},timeout:lt}))}catch{}}}async function Ko(e){let{packageName:t,serviceAccount:n,aabPath:i,track:r,releaseStatus:o,userFraction:s,changesNotSentForReview:l}=e,a;try{let u={Authorization:`Bearer ${await Yn(n)}`,Connection:"close"},c=yt(t);if(a=(await qe("create edit",()=>Ye.post(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${c}/edits`,{},{headers:u,timeout:lt}))).data.id,!a)throw new Error("Google Play edit insert succeeded but did not return an edit id.");let f=yt(a),g=Go.statSync(i),y=await qe("upload AAB",()=>Ye.post(`https://androidpublisher.googleapis.com/upload/androidpublisher/v3/applications/${c}/edits/${f}/bundles`,Go.createReadStream(i),{headers:{...u,"Content-Type":"application/octet-stream","Content-Length":g.size},maxBodyLength:1/0,maxContentLength:1/0,params:{uploadType:"media"},timeout:Wc})),E=Number(y.data.versionCode);if(!E)throw new Error("Google Play upload succeeded but did not return a versionCode.");let _={versionCodes:[String(E)],status:o};return(o==="inProgress"||o==="halted")&&typeof s=="number"&&(_.userFraction=s),await qe("update track",()=>Ye.put(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${c}/edits/${f}/tracks/${yt(r)}`,{releases:[_]},{headers:u,timeout:lt})),await qe("commit edit",()=>Ye.post(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${c}/edits/${f}:commit`,{},{headers:u,params:l?{changesNotSentForReview:!0}:void 0,timeout:lt})),{editId:a,versionCode:E,track:r,releaseStatus:o,userFraction:s}}catch(d){if(a)try{let c=await Yn(n);await qe("delete edit",()=>Ye.delete(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${yt(t)}/edits/${yt(a)}`,{headers:{Authorization:`Bearer ${c}`,Connection:"close"},timeout:lt}))}catch{}let u=d.response?.data?.error?.message||d.message;throw new Error(`Google Play API Error: ${u}`)}}async function Yn(e){let t=Math.floor(Date.now()/1e3),n=t+3600,i={alg:"RS256",typ:"JWT"},r={iss:e.client_email,sub:e.client_email,aud:"https://oauth2.googleapis.com/token",iat:t,exp:n,scope:"https://www.googleapis.com/auth/androidpublisher"},o=Buffer.from(JSON.stringify(i)).toString("base64url"),s=Buffer.from(JSON.stringify(r)).toString("base64url"),l=`${o}.${s}`,a=zc.createSign("RSA-SHA256");a.update(l);let d=a.sign(e.private_key,"base64url"),u=`${l}.${d}`;return(await qe("OAuth token exchange",()=>Ye.post("https://oauth2.googleapis.com/token",{grant_type:"urn:ietf:params:oauth:grant-type:jwt-bearer",assertion:u},{headers:{Connection:"close"},timeout:lt}))).data.access_token}import qc from"crypto";import zo from"axios";var er="https://api.appstoreconnect.apple.com/v1",Wo=6e4,Qi=4,Xc=e=>new Promise(t=>setTimeout(t,e));function Zc(e,t,n){let i=Math.floor(Date.now()/1e3),r=Buffer.from(JSON.stringify({alg:"ES256",kid:e,typ:"JWT"})).toString("base64url"),o=Buffer.from(JSON.stringify({iss:t,iat:i,exp:i+1200,aud:"appstoreconnect-v1"})).toString("base64url"),s=`${r}.${o}`,l=qc.createSign("SHA256");l.update(s);let a=l.sign({key:n,dsaEncoding:"ieee-p1363"}).toString("base64url");return`${s}.${a}`}function Qc(e){let t=e.response?.status;return t?t===408||t===409||t===425||t===429||t>=500:!0}async function Jo(e,t){let n;for(let i=1;i<=Qi;i++)try{return await t()}catch(r){if(n=r,i>=Qi||!Qc(r))throw r;let o=Number(r.response?.headers?.["retry-after"]),s=Number.isFinite(o)&&o>0?o*1e3:Math.min(2e3*i*i,15e3);console.log(`[App Store Connect] ${e} failed (attempt ${i}/${Qi}); retrying in ${Math.round(s/1e3)}s...`),await Xc(s)}throw n}function Yo(e){return{Authorization:`Bearer ${Zc(e.keyId,e.issuerId,e.privateKey)}`,"Content-Type":"application/json",Connection:"close"}}function ed(e){let t=e.response?.data?.errors;return Array.isArray(t)&&t.length>0?t.map(n=>n.detail||n.title||n.code).filter(Boolean).join("; "):e.response?.data?.error?.message||e.message||"Unknown App Store Connect error"}function qn(e){let t=String(e||"").trim();if(/^\d+(?:\.\d+){0,2}$/.test(t))return t.split(".").map(n=>Number(n))}function td(e,t){let n=qn(e),i=qn(t);if(!n&&!i)return 0;if(!n)return-1;if(!i)return 1;let r=Math.max(n.length,i.length);for(let o=0;o<r;o++){let s=n[o]||0,l=i[o]||0;if(s!==l)return s>l?1:-1}return 0}function nd(e){let t=qn(e);return!t||t.length===0?"1":(t[t.length-1]+=1,t.join("."))}async function id(e,t,n){if(t)return t;if(!n)throw new Error("Set ios.ascAppId or ios.bundleIdentifier so Mach can find the App Store Connect app.");let r=(await Jo("lookup app by bundle ID",()=>zo.get(`${er}/apps`,{headers:Yo(e),params:{"filter[bundleId]":n,limit:1},timeout:Wo}))).data?.data?.[0];if(!r?.id)throw new Error(`No App Store Connect app found for bundle ID ${n}. Set ios.ascAppId in mach.config.json if the app exists.`);return r.id}async function qo(e){let t={keyId:e.keyId,issuerId:e.issuerId,privateKey:e.privateKey};try{let n=await id(t,e.ascAppId,e.bundleId),i=`${er}/builds`,r="0",o,s=0;for(;i&&s<10;){s+=1;let l=await Jo("list builds",()=>zo.get(i,{headers:Yo(t),params:i===`${er}/builds`?{"filter[app]":n,"fields[builds]":"version,uploadedDate",sort:"-uploadedDate",limit:200}:void 0,timeout:Wo})),a=l.data?.data||[];for(let d of a){let u=String(d.attributes?.version||"").trim();qn(u)&&td(u,r)>0&&(r=u,o=d.attributes?.uploadedDate)}i=l.data?.links?.next}return{appId:n,latestBuildNumber:r,nextBuildNumber:nd(r),latestUploadedDate:o}}catch(n){throw new Error(`App Store Connect API Error: ${ed(n)}`)}}import{spinner as Zn,log as C,isCancel as Qn,confirm as rd,select as nr}from"@clack/prompts";import v from"chalk";import S from"fs";import A from"path";import{execFileSync as St,execSync as ie,spawn as ns}from"child_process";import Re from"os";import od from"crypto";var is=(e,t)=>t.filter(n=>S.existsSync(A.join(e,n))).reduce((n,i)=>n.update(S.readFileSync(A.join(e,i))),od.createHash("sha256")).digest("hex").slice(0,16),sd=e=>is(e,["package.json","yarn.lock","package-lock.json","bun.lockb"]),ad=e=>is(e,["Podfile","Podfile.lock"]),ld=e=>{let t=A.join(e,"fingerprint.json");try{return JSON.parse(S.readFileSync(t,"utf-8"))}catch{return{}}},Xo=(e,t)=>{S.mkdirSync(e,{recursive:!0}),S.writeFileSync(A.join(e,"fingerprint.json"),JSON.stringify(t,null,2))},cd=7200*1e3,dd=(e,t)=>{S.mkdirSync(e,{recursive:!0});let n=A.join(e,"build.lock");if(S.existsSync(n))try{let i=JSON.parse(S.readFileSync(n,"utf-8")),r=Date.now()-(i.timestamp||0);if(r<cd)throw new Error(`Another build is already running for this project (build ${i.buildId}, started ${Math.round(r/6e4)}m ago). Cancel it from the dashboard first, or wait for it to complete.`)}catch(i){if(i.message.includes("Another build"))throw i}S.writeFileSync(n,JSON.stringify({buildId:t,pid:process.pid,timestamp:Date.now()}))},ud=(e,t)=>{let n=A.join(e,"build.lock");try{S.existsSync(n)&&JSON.parse(S.readFileSync(n,"utf-8")).buildId===t&&S.unlinkSync(n)}catch{}},Zo=15e5,Qo=(e,t)=>{let n=e+t;return n.length>Zo?n.slice(-Zo):n},rs=e=>e.replace(/\u001b\[[0-9;]*m/g,""),os=e=>/\berror:|fatal error:|xcodebuild: error|The following build commands failed|Command PhaseScriptExecution failed|PhaseScriptExecution|Command .* failed|CodeSign|Provisioning profile|No profiles|requires a provisioning profile|Undefined symbols|ld:|clang: error|SwiftCompile|CompileC|node: command not found|env: node|No such file or directory|Permission denied/i.test(e),pd=e=>{let t=new Set,n=[];e.forEach((r,o)=>{os(r)&&n.push(o)});for(let r of n){let o=/PhaseScriptExecution|Command PhaseScriptExecution failed|The following build commands failed/i.test(e[r])?18:8,s=/The following build commands failed/i.test(e[r])?18:10;for(let l=Math.max(0,r-o);l<=Math.min(e.length-1,r+s);l++)t.add(l)}if(t.size===0)return e.slice(-120);let i=Array.from(t).sort((r,o)=>r-o).map(r=>e[r]);return i.length>160?i.slice(-160):i},fd=(e,t,n,i)=>{let r=rs(i).replace(/\r/g,`
1322
1322
  `).split(`
1323
- `).map(a=>a.trimEnd()).filter(Boolean),o=r.filter(Ko),s=o.length>0?Hd(r):r.slice(-80),l=o.length>0?"Key failure output":"Last command output";return[`Command failed with code ${n}: ${e} ${t.join(" ")}`,s.length>0?`
1323
+ `).map(a=>a.trimEnd()).filter(Boolean),o=r.filter(os),s=o.length>0?pd(r):r.slice(-80),l=o.length>0?"Key failure output":"Last command output";return[`Command failed with code ${n}: ${e} ${t.join(" ")}`,s.length>0?`
1324
1324
  ${l}:
1325
1325
  ${s.join(`
1326
- `)}`:""].join("")},Gd=e=>e==="xcodebuild"&&process.env.MACH_XCODE_FULL_LOGS!=="1",Kd=e=>{let t=Go(e).trim();return t?/\berror:|fatal error:|xcodebuild: error|The following build commands failed|Command PhaseScriptExecution failed|CodeSign|Provisioning profile|No profiles|requires a provisioning profile|Undefined symbols|ld:|clang: error|SwiftCompile|CompileC|CFBundleVersion|ARCHIVE SUCCEEDED|ARCHIVE FAILED|EXPORT SUCCEEDED|EXPORT FAILED|Exported .* to:|\[IPA VALID\]/i.test(t):!1},Fe=e=>{try{S.existsSync(e)&&S.rmSync(e,{recursive:!0,force:!0})}catch{}},Vd=(e,t)=>{try{if(!S.existsSync(e))return;for(let n of S.readdirSync(e))t(n)&&Fe(A.join(e,n))}catch{}},Gi=e=>{C.info(v.dim("Clearing Metro/Hermes JS transform caches..."));let t=$e.tmpdir();Vd(t,n=>n==="metro-cache"||n.startsWith("metro-")||n.startsWith("haste-map-")||n.startsWith("react-native-packager-cache-")),Fe(A.join(e,".expo")),Fe(A.join(e,"node_modules/.cache/metro")),Fe(A.join($e.homedir(),".cache/metro")),Fe(A.join($e.homedir(),".cache/react-native-packager")),Fe(A.join($e.homedir(),"Library/Caches/metro")),Fe(A.join($e.homedir(),"Library/Caches/react-native-packager"))},zd=e=>/Internal inconsistency error|never received target ended message/i.test(String(e?.message||e)),Wd=e=>{C.warn(v.yellow("Xcode build system hit an internal inconsistency. Clearing simulator build state and retrying once...")),Fe(A.join(e,"Build")),Fe(A.join(e,"Index.noindex")),Fe(A.join(e,"ModuleCache.noindex")),Fe(A.join(e,"SourcePackages"))},Jd=e=>{let t=String(e?.message||e);return/Permission denied/i.test(t)&&/Pods\/.*\.sh/i.test(t)},Vo=e=>{let t=A.join(e,"Pods"),i=[A.join(t,"Target Support Files"),t].filter(l=>S.existsSync(l)),r=new Set,o=0,s=l=>{let a=l;try{a=S.realpathSync(l)}catch{}if(r.has(a))return;r.add(a);let c;try{c=S.readdirSync(l,{withFileTypes:!0})}catch{return}for(let u of c){let d=A.join(l,u.name);if(u.isDirectory()){s(d);continue}if(!(!u.isFile()||!u.name.endsWith(".sh")))try{let p=S.statSync(d),f=p.mode|493;f!==p.mode&&(S.chmodSync(d,f),o+=1)}catch{}}};for(let l of i)s(l);return o>0&&C.info(v.dim(`Repaired executable permissions on ${o} CocoaPods script${o===1?"":"s"}.`)),o},Yd=(e,t,n,i,r)=>{let o=a=>{let c=a.filter(d=>d?.id&&String(d?.platform||"").includes("iOS Simulator")&&!d?.error),u=c.find(d=>/iphone/i.test(d.name||""))||c[0];return u?.id?`id=${u.id}`:void 0},s=a=>{let c=[],u=!1;for(let d of a.split(`
1327
- `)){if(/Ineligible destinations/i.test(d)&&(u=!0),u||!d.includes("platform:iOS Simulator")||d.includes("error:"))continue;let p=d.match(/\bid:([^,}]+)/)?.[1]?.trim(),f=d.match(/\bname:([^,}]+)/)?.[1]?.trim();p&&c.push({id:p,name:f,platform:"iOS Simulator"})}return o(c)},l=[t?"-workspace":"-project",t||n,"-scheme",i,"-configuration",r,"-sdk","iphonesimulator","-showdestinations"];try{let a=ct("xcodebuild",[...l,"-json"],{cwd:e,encoding:"utf-8",stdio:["ignore","pipe","ignore"]}),c=JSON.parse(a),u=Array.isArray(c.destinations)?c.destinations:Array.isArray(c.availableDestinations)?c.availableDestinations:[],d=o(u);if(d)return d}catch{}try{let a=ct("xcodebuild",l,{cwd:e,encoding:"utf-8",stdio:["ignore","pipe","ignore"]});return s(a)}catch{}},ut=(e,t,n=process.cwd(),i={},r,o)=>new Promise((s,l)=>{let a="",c=Gd(e),u=Date.now(),d=["/opt/homebrew/bin","/usr/local/bin","/usr/bin","/bin","/usr/sbin","/sbin",A.join($e.homedir(),".npm-global/bin")],f=[...(process.env.PATH||"").split(":"),...d].filter((b,x,I)=>b&&I.indexOf(b)===x).join(":");process.env[`${m.envPrefix}DEBUG`]&&console.log(v.magenta(`[${m.nameUpper}_DEBUG] Execution PATH: ${f}`));let g={...process.env,...i,PATH:f,LANG:"en_US.UTF-8",LC_ALL:"en_US.UTF-8"};r&&process.env[`${m.envPrefix}DEBUG`]&&(r(v.magenta(`[ENVIRONMENT] node: ${process.execPath}
1326
+ `)}`:""].join("")},md=e=>e==="xcodebuild"&&process.env.MACH_XCODE_FULL_LOGS!=="1",gd=e=>{let t=rs(e).trim();return t?/\berror:|fatal error:|xcodebuild: error|The following build commands failed|Command PhaseScriptExecution failed|CodeSign|Provisioning profile|No profiles|requires a provisioning profile|Undefined symbols|ld:|clang: error|SwiftCompile|CompileC|CFBundleVersion|ARCHIVE SUCCEEDED|ARCHIVE FAILED|EXPORT SUCCEEDED|EXPORT FAILED|Exported .* to:|\[IPA VALID\]/i.test(t):!1},He=e=>{try{S.existsSync(e)&&S.rmSync(e,{recursive:!0,force:!0})}catch{}},hd=(e,t)=>{try{if(!S.existsSync(e))return;for(let n of S.readdirSync(e))t(n)&&He(A.join(e,n))}catch{}},tr=e=>{C.info(v.dim("Clearing Metro/Hermes JS transform caches..."));let t=Re.tmpdir();hd(t,n=>n==="metro-cache"||n.startsWith("metro-")||n.startsWith("haste-map-")||n.startsWith("react-native-packager-cache-")),He(A.join(e,".expo")),He(A.join(e,"node_modules/.cache/metro")),He(A.join(Re.homedir(),".cache/metro")),He(A.join(Re.homedir(),".cache/react-native-packager")),He(A.join(Re.homedir(),"Library/Caches/metro")),He(A.join(Re.homedir(),"Library/Caches/react-native-packager"))},yd=e=>/Internal inconsistency error|never received target ended message/i.test(String(e?.message||e)),Sd=e=>{C.warn(v.yellow("Xcode build system hit an internal inconsistency. Clearing simulator build state and retrying once...")),He(A.join(e,"Build")),He(A.join(e,"Index.noindex")),He(A.join(e,"ModuleCache.noindex")),He(A.join(e,"SourcePackages"))},bd=e=>{let t=String(e?.message||e);return/Permission denied/i.test(t)&&/Pods\/.*\.sh/i.test(t)},ss=e=>{let t=A.join(e,"Pods"),i=[A.join(t,"Target Support Files"),t].filter(l=>S.existsSync(l)),r=new Set,o=0,s=l=>{let a=l;try{a=S.realpathSync(l)}catch{}if(r.has(a))return;r.add(a);let d;try{d=S.readdirSync(l,{withFileTypes:!0})}catch{return}for(let u of d){let c=A.join(l,u.name);if(u.isDirectory()){s(c);continue}if(!(!u.isFile()||!u.name.endsWith(".sh")))try{let p=S.statSync(c),f=p.mode|493;f!==p.mode&&(S.chmodSync(c,f),o+=1)}catch{}}};for(let l of i)s(l);return o>0&&C.info(v.dim(`Repaired executable permissions on ${o} CocoaPods script${o===1?"":"s"}.`)),o},Ad=(e,t,n,i,r)=>{let o=a=>{let d=a.filter(c=>c?.id&&String(c?.platform||"").includes("iOS Simulator")&&!c?.error),u=d.find(c=>/iphone/i.test(c.name||""))||d[0];return u?.id?`id=${u.id}`:void 0},s=a=>{let d=[],u=!1;for(let c of a.split(`
1327
+ `)){if(/Ineligible destinations/i.test(c)&&(u=!0),u||!c.includes("platform:iOS Simulator")||c.includes("error:"))continue;let p=c.match(/\bid:([^,}]+)/)?.[1]?.trim(),f=c.match(/\bname:([^,}]+)/)?.[1]?.trim();p&&d.push({id:p,name:f,platform:"iOS Simulator"})}return o(d)},l=[t?"-workspace":"-project",t||n,"-scheme",i,"-configuration",r,"-sdk","iphonesimulator","-showdestinations"];try{let a=St("xcodebuild",[...l,"-json"],{cwd:e,encoding:"utf-8",stdio:["ignore","pipe","ignore"]}),d=JSON.parse(a),u=Array.isArray(d.destinations)?d.destinations:Array.isArray(d.availableDestinations)?d.availableDestinations:[],c=o(u);if(c)return c}catch{}try{let a=St("xcodebuild",l,{cwd:e,encoding:"utf-8",stdio:["ignore","pipe","ignore"]});return s(a)}catch{}},bt=(e,t,n=process.cwd(),i={},r,o)=>new Promise((s,l)=>{let a="",d=md(e),u=Date.now(),c=["/opt/homebrew/bin","/usr/local/bin","/usr/bin","/bin","/usr/sbin","/sbin",A.join(Re.homedir(),".npm-global/bin")],f=[...(process.env.PATH||"").split(":"),...c].filter((b,x,I)=>b&&I.indexOf(b)===x).join(":");process.env[`${m.envPrefix}DEBUG`]&&console.log(v.magenta(`[${m.nameUpper}_DEBUG] Execution PATH: ${f}`));let g={...process.env,...i,PATH:f,LANG:"en_US.UTF-8",LC_ALL:"en_US.UTF-8"};r&&process.env[`${m.envPrefix}DEBUG`]&&(r(v.magenta(`[ENVIRONMENT] node: ${process.execPath}
1328
1328
  `)),r(v.magenta(`[ENVIRONMENT] PATH: ${f}
1329
1329
  `)),r(v.magenta(`[ENVIRONMENT] command: ${e} ${t.join(" ")}
1330
1330
  `)));let y=e;if(["node","npm","npx","pod"].includes(e)){let b=A.dirname(process.execPath),x=A.join(b,e);S.existsSync(x)&&(y=x,r&&r(v.dim(`[EXEC] Using absolute path: ${y}
1331
- `)))}let E=Ho(y,t,{stdio:"pipe",cwd:n,shell:!0,env:g,detached:process.platform!=="win32"});if(o){if(o.aborted){if(E.pid)try{process.kill(-E.pid,"SIGTERM")}catch{E.kill()}return l(new Error("Command aborted"))}o.addEventListener("abort",()=>{if(E.pid)try{process.kill(-E.pid,"SIGTERM")}catch{E.kill()}l(new Error("Command aborted"))})}let _=(b,x)=>{if(!c){x.write(b);return}let I=b.replace(/\r/g,`
1331
+ `)))}let E=ns(y,t,{stdio:"pipe",cwd:n,shell:!0,env:g,detached:process.platform!=="win32"});if(o){if(o.aborted){if(E.pid)try{process.kill(-E.pid,"SIGTERM")}catch{E.kill()}return l(new Error("Command aborted"))}o.addEventListener("abort",()=>{if(E.pid)try{process.kill(-E.pid,"SIGTERM")}catch{E.kill()}l(new Error("Command aborted"))})}let _=(b,x)=>{if(!d){x.write(b);return}let I=b.replace(/\r/g,`
1332
1332
  `).split(`
1333
- `).filter(Kd);if(I.length>0){x.write(`${I.join(`
1333
+ `).filter(gd);if(I.length>0){x.write(`${I.join(`
1334
1334
  `)}
1335
1335
  `),u=Date.now();return}let F=Date.now();F-u>3e4&&(x.write(`[xcodebuild] still running; detailed output is streamed to Mach logs.
1336
- `),u=F)};E.stdout.on("data",b=>{let x=b.toString();a=Uo(a,x),_(x,process.stdout),r&&r(x)}),E.stderr.on("data",b=>{let x=b.toString();a=Uo(a,x),_(x,process.stderr),r&&r(x)}),E.on("close",b=>{b===0?s(b):l(new Error(jd(e,t,b,a)))}),E.on("error",b=>l(b))}),Fn=async(e,t,n,i,r)=>{try{await ut("xcodebuild",e,t,n,i,r)}catch(o){if(!Jd(o))throw o;C.warn(v.yellow("CocoaPods script permission denied. Repairing Pods script permissions and retrying xcodebuild once...")),Vo(t),await ut("xcodebuild",e,t,n,i,r)}},qd=e=>{let t=Math.floor(e/1e3%60),n=Math.floor(e/(1e3*60)%60),i=Math.floor(e/(1e3*60*60)%24),r=[];return i>0&&r.push(`${i}h`),n>0&&r.push(`${n}m`),(t>0||r.length===0)&&r.push(`${t}s`),r.join(" ")},kt=(e,t)=>{let n=[];try{if(!S.existsSync(e))return n;let i=S.readdirSync(e);for(let r of i){let o=A.join(e,r);try{let s=S.statSync(o);if(t.some(a=>r.endsWith(a))){n.push(A.resolve(o));continue}s.isDirectory()&&(n=n.concat(kt(o,t)))}catch{}}}catch{}return n},Xd=/^\d+(?:\.\d+){0,2}$/,Vi=e=>{let t=String(e||"").trim();return!t||t==="undefined"||t==="null"?null:Xd.test(t)?t:null},zo=(e,t)=>{let n=Vi(e);if(!n)throw new Error(`Invalid iOS CFBundleVersion from ${t}: "${e||""}". Apple requires one to three period-separated integers, for example "42" or "1.2.3". If you see "[Decryption Failed]", fix/remove the broken BUILD_NUMBER secret and rebuild.`);return n},zi=(e,t)=>ct("/usr/libexec/PlistBuddy",["-c",`Print :${t}`,e],{encoding:"utf-8"}).trim(),Vt=(e,t)=>{try{return zi(e,t)}catch{return""}},Fo=e=>String(e||"").replace(/\.app$/i,"").replace(/[^a-z0-9]/gi,"").toLowerCase(),Zd=e=>{try{return S.statSync(e).isDirectory()}catch{return!1}},Qd=(e,t,n)=>{if(!S.existsSync(e))throw new Error(`iOS simulator build output directory was not found: ${e}`);let i=S.readdirSync(e).filter(c=>c.endsWith(".app")).map(c=>A.join(e,c)).filter(Zd);if(i.length===0){let u=kt(e,[".app"]).map(d=>A.relative(e,d)).join(", ");throw new Error(`No top-level iOS simulator .app product was found in ${e}.`+(u?` Nested .app bundles found but ignored: ${u}`:""))}let r=new Set([t,n.iosScheme,n.scheme,n.appName].filter(Boolean).map(c=>Fo(String(c))).filter(Boolean)),o=i.map(c=>{let u=A.join(c,"Info.plist"),d=S.existsSync(u)?Vt(u,"CFBundleName"):"",p=S.existsSync(u)?Vt(u,"CFBundleDisplayName"):"",f=S.existsSync(u)?Vt(u,"CFBundleExecutable"):"",g=S.existsSync(u)?Vt(u,"CFBundleIdentifier"):"",y=f?A.join(c,f):"";return{appPath:c,bundleIdentifier:g,executable:f,isValid:S.existsSync(u)&&!!f&&S.existsSync(y),names:[A.basename(c,".app"),d,p,f].map(Fo).filter(Boolean)}}),s=o.filter(c=>c.isValid);if(s.length===0)throw new Error(`No valid iOS simulator .app product was found in ${e}. Candidates: `+o.map(c=>A.basename(c.appPath)).join(", "));let a=s.find(c=>c.names.some(u=>r.has(u)))||(s.length===1?s[0]:null);if(!a)throw new Error(`Multiple iOS simulator .app products were found in ${e}: `+s.map(c=>{let u=c.bundleIdentifier?` (${c.bundleIdentifier})`:"";return`${A.basename(c.appPath)}${u}`}).join(", ")+`. Set ios.scheme in ${m.configFileName} so ${m.name} can select the app target safely.`);return a.appPath},Bo=e=>{let t=A.join(e,"Info.plist");if(!S.existsSync(t))throw new Error(`Could not validate iOS build number: ${t} not found.`);return zo(zi(t,"CFBundleVersion"),t)},Wo=e=>{let t=A.join(e,"Info.plist");if(!S.existsSync(t))throw new Error(`Could not validate iOS app executable: ${t} not found.`);let n=Vt(t,"CFBundleExecutable");if(!n)throw new Error(`Could not validate iOS app executable: CFBundleExecutable missing in ${t}.`);let i=A.join(e,n);if(!S.existsSync(i))throw new Error(`Could not validate iOS app executable: ${i} not found.`);return i},ec=()=>process.arch==="arm64"?"arm64":"x86_64",Jo=e=>{let t=Wo(e),n="";try{n=ct("lipo",["-info",t],{encoding:"utf-8"}).trim()}catch(r){throw new Error(`Could not inspect iOS simulator executable architecture for ${A.basename(e)}: ${r.message}`)}let i=ec();if(!new RegExp(`\\b${i}\\b`).test(n))throw new Error(`iOS simulator app ${A.basename(e)} cannot be installed on this runner because its executable does not include the required ${i} simulator architecture. lipo output: ${n}. Check the React Native iOS project ARCHS/EXCLUDED_ARCHS settings for iphonesimulator builds.`);return n},tc=e=>{try{return ct("xcrun",["vtool","-show-build",e],{encoding:"utf-8"}).trim()}catch(t){throw new Error(`Could not inspect iOS executable build platform for ${A.basename(e)}: ${t.message}`)}},Yo=e=>{let t=Wo(e),n=tc(t);if(!/\bplatform\s+IOSSIMULATOR\b/i.test(n))throw new Error(`iOS simulator app ${A.basename(e)} was built for the wrong Apple platform. A simulator artifact must contain PLATFORM IOSSIMULATOR, not an iPhone device binary. vtool output: ${n}`);return n},nc=e=>{let n=ct("unzip",["-Z1",e],{encoding:"utf-8"}).split(`
1337
- `).find(r=>/^Payload\/[^/]+\.app\/Info\.plist$/.test(r.trim()));if(!n)throw new Error(`Could not validate iOS build number: ${A.basename(e)} has no Payload/*.app/Info.plist.`);let i=S.mkdtempSync(A.join($e.tmpdir(),`${m.nameLower}-ipa-plist-`));try{let r=A.join(i,"Info.plist"),o=ct("unzip",["-p",e,n.trim()]);return S.writeFileSync(r,o),zo(zi(r,"CFBundleVersion"),`${A.basename(e)}:${n.trim()}`)}finally{S.rmSync(i,{recursive:!0,force:!0})}},ic=e=>`'${e.replace(/'/g,"'\\''")}'`,rc=()=>process.execPath&&S.existsSync(process.execPath)?process.execPath:ct("which",["node"],{encoding:"utf-8"}).trim(),qo=(e,t,n)=>{if(!S.existsSync(e))return;let i=rc();t.NODE_BINARY=i;let r=A.join(e,".xcode.env.local");S.writeFileSync(r,`export NODE_BINARY=${ic(i)}
1336
+ `),u=F)};E.stdout.on("data",b=>{let x=b.toString();a=Qo(a,x),_(x,process.stdout),r&&r(x)}),E.stderr.on("data",b=>{let x=b.toString();a=Qo(a,x),_(x,process.stderr),r&&r(x)}),E.on("close",b=>{b===0?s(b):l(new Error(fd(e,t,b,a)))}),E.on("error",b=>l(b))}),Xn=async(e,t,n,i,r)=>{try{await bt("xcodebuild",e,t,n,i,r)}catch(o){if(!bd(o))throw o;C.warn(v.yellow("CocoaPods script permission denied. Repairing Pods script permissions and retrying xcodebuild once...")),ss(t),await bt("xcodebuild",e,t,n,i,r)}},Ed=e=>{let t=Math.floor(e/1e3%60),n=Math.floor(e/(1e3*60)%60),i=Math.floor(e/(1e3*60*60)%24),r=[];return i>0&&r.push(`${i}h`),n>0&&r.push(`${n}m`),(t>0||r.length===0)&&r.push(`${t}s`),r.join(" ")},jt=(e,t)=>{let n=[];try{if(!S.existsSync(e))return n;let i=S.readdirSync(e);for(let r of i){let o=A.join(e,r);try{let s=S.statSync(o);if(t.some(a=>r.endsWith(a))){n.push(A.resolve(o));continue}s.isDirectory()&&(n=n.concat(jt(o,t)))}catch{}}}catch{}return n},Id=/^\d+(?:\.\d+){0,2}$/,ir=e=>{let t=String(e||"").trim();return!t||t==="undefined"||t==="null"?null:Id.test(t)?t:null},as=(e,t)=>{let n=ir(e);if(!n)throw new Error(`Invalid iOS CFBundleVersion from ${t}: "${e||""}". Apple requires one to three period-separated integers, for example "42" or "1.2.3". If you see "[Decryption Failed]", fix/remove the broken BUILD_NUMBER secret and rebuild.`);return n},rr=(e,t)=>St("/usr/libexec/PlistBuddy",["-c",`Print :${t}`,e],{encoding:"utf-8"}).trim(),Qt=(e,t)=>{try{return rr(e,t)}catch{return""}},es=e=>String(e||"").replace(/\.app$/i,"").replace(/[^a-z0-9]/gi,"").toLowerCase(),wd=e=>{try{return S.statSync(e).isDirectory()}catch{return!1}},_d=(e,t,n)=>{if(!S.existsSync(e))throw new Error(`iOS simulator build output directory was not found: ${e}`);let i=S.readdirSync(e).filter(d=>d.endsWith(".app")).map(d=>A.join(e,d)).filter(wd);if(i.length===0){let u=jt(e,[".app"]).map(c=>A.relative(e,c)).join(", ");throw new Error(`No top-level iOS simulator .app product was found in ${e}.`+(u?` Nested .app bundles found but ignored: ${u}`:""))}let r=new Set([t,n.iosScheme,n.scheme,n.appName].filter(Boolean).map(d=>es(String(d))).filter(Boolean)),o=i.map(d=>{let u=A.join(d,"Info.plist"),c=S.existsSync(u)?Qt(u,"CFBundleName"):"",p=S.existsSync(u)?Qt(u,"CFBundleDisplayName"):"",f=S.existsSync(u)?Qt(u,"CFBundleExecutable"):"",g=S.existsSync(u)?Qt(u,"CFBundleIdentifier"):"",y=f?A.join(d,f):"";return{appPath:d,bundleIdentifier:g,executable:f,isValid:S.existsSync(u)&&!!f&&S.existsSync(y),names:[A.basename(d,".app"),c,p,f].map(es).filter(Boolean)}}),s=o.filter(d=>d.isValid);if(s.length===0)throw new Error(`No valid iOS simulator .app product was found in ${e}. Candidates: `+o.map(d=>A.basename(d.appPath)).join(", "));let a=s.find(d=>d.names.some(u=>r.has(u)))||(s.length===1?s[0]:null);if(!a)throw new Error(`Multiple iOS simulator .app products were found in ${e}: `+s.map(d=>{let u=d.bundleIdentifier?` (${d.bundleIdentifier})`:"";return`${A.basename(d.appPath)}${u}`}).join(", ")+`. Set ios.scheme in ${m.configFileName} so ${m.name} can select the app target safely.`);return a.appPath},ts=e=>{let t=A.join(e,"Info.plist");if(!S.existsSync(t))throw new Error(`Could not validate iOS build number: ${t} not found.`);return as(rr(t,"CFBundleVersion"),t)},ls=e=>{let t=A.join(e,"Info.plist");if(!S.existsSync(t))throw new Error(`Could not validate iOS app executable: ${t} not found.`);let n=Qt(t,"CFBundleExecutable");if(!n)throw new Error(`Could not validate iOS app executable: CFBundleExecutable missing in ${t}.`);let i=A.join(e,n);if(!S.existsSync(i))throw new Error(`Could not validate iOS app executable: ${i} not found.`);return i},$d=()=>process.arch==="arm64"?"arm64":"x86_64",cs=e=>{let t=ls(e),n="";try{n=St("lipo",["-info",t],{encoding:"utf-8"}).trim()}catch(r){throw new Error(`Could not inspect iOS simulator executable architecture for ${A.basename(e)}: ${r.message}`)}let i=$d();if(!new RegExp(`\\b${i}\\b`).test(n))throw new Error(`iOS simulator app ${A.basename(e)} cannot be installed on this runner because its executable does not include the required ${i} simulator architecture. lipo output: ${n}. Check the React Native iOS project ARCHS/EXCLUDED_ARCHS settings for iphonesimulator builds.`);return n},vd=e=>{try{return St("xcrun",["vtool","-show-build",e],{encoding:"utf-8"}).trim()}catch(t){throw new Error(`Could not inspect iOS executable build platform for ${A.basename(e)}: ${t.message}`)}},ds=e=>{let t=ls(e),n=vd(t);if(!/\bplatform\s+IOSSIMULATOR\b/i.test(n))throw new Error(`iOS simulator app ${A.basename(e)} was built for the wrong Apple platform. A simulator artifact must contain PLATFORM IOSSIMULATOR, not an iPhone device binary. vtool output: ${n}`);return n},Rd=e=>{let n=St("unzip",["-Z1",e],{encoding:"utf-8"}).split(`
1337
+ `).find(r=>/^Payload\/[^/]+\.app\/Info\.plist$/.test(r.trim()));if(!n)throw new Error(`Could not validate iOS build number: ${A.basename(e)} has no Payload/*.app/Info.plist.`);let i=S.mkdtempSync(A.join(Re.tmpdir(),`${m.nameLower}-ipa-plist-`));try{let r=A.join(i,"Info.plist"),o=St("unzip",["-p",e,n.trim()]);return S.writeFileSync(r,o),as(rr(r,"CFBundleVersion"),`${A.basename(e)}:${n.trim()}`)}finally{S.rmSync(i,{recursive:!0,force:!0})}},Pd=e=>`'${e.replace(/'/g,"'\\''")}'`,Dd=()=>process.execPath&&S.existsSync(process.execPath)?process.execPath:St("which",["node"],{encoding:"utf-8"}).trim(),us=(e,t,n)=>{if(!S.existsSync(e))return;let i=Dd();t.NODE_BINARY=i;let r=A.join(e,".xcode.env.local");S.writeFileSync(r,`export NODE_BINARY=${Pd(i)}
1338
1338
  `);let o=`[NODE] Xcode NODE_BINARY: ${i}
1339
- `;n&&n(v.dim(o)),C.info(v.dim(o.trim()))},Wi=async(e,t,n={},i,r={})=>{let o=Bn(),s=Date.now(),l=e.platform,a=e.buildProfile||"production",c=at(e.framework),u=()=>Ot(n,a,e),d=async(w,N={})=>{if(i)for(let $=1;$<=3;$++)try{await T.patch(`/builds/${i}/${t}`,{status:w,...N});return}catch(O){let h=O?.response?.data?.message||O?.message||String(O);console.error(`[reportStatus] attempt ${$}/3 failed (status=${w}): ${h}`),$<3&&await new Promise(M=>setTimeout(M,2e3))}},p=new AbortController,{signal:f}=p,g=null;i&&(g=setInterval(async()=>{try{(await T.get(`/builds/${i}/${t}`)).data.status==="cancelled"&&(C.warn(v.yellow(`
1340
- \u{1F6D1} Build cancelled from dashboard. Terminating...`)),p.abort(),g&&clearInterval(g))}catch{}},5e3));let y=A.join(process.cwd(),".mach-cache"),E="setup",_="",b=null,x=async()=>{if(!_||!i)return;let w=_;_="";try{let N=w;Object.values(n).forEach($=>{if($&&$.length>5){let O=$.replace(/[.*+?^${}()|[\]\\]/g,"\\$&");N=N.replace(new RegExp(O,"g"),"[SECRET]")}}),await T.post(`/builds/${i}/${t}/logs`,{log:N,step:E})}catch{}},I=async()=>{b&&(clearTimeout(b),b=null),await x(),Bd(y,t),g&&(clearInterval(g),g=null);try{let w=A.join($e.tmpdir(),`${m.buildPrefix}-${t}.keychain-db`);S.existsSync(w)&&(ie(`security delete-keychain "${w}"`,{stdio:"ignore"}),C.info(v.dim("\u{1F511} Build keychain deleted.")))}catch{}try{let w=A.join($e.homedir(),"Library/MobileDevice/Provisioning Profiles");if(S.existsSync(w)){let N=S.readdirSync(w).filter($=>$.includes(t)||$.startsWith(`${m.nameLower}-temp-${t}`));for(let $ of N)S.unlinkSync(A.join(w,$))}}catch{}},F=async w=>{i&&(_+=w,_.length>=8192?(b&&(clearTimeout(b),b=null),await x()):b||(b=setTimeout(()=>{b=null,x()},2e3)))},X=async w=>{E=w,await F(`[STEP_START:${w}] ${Math.floor(Date.now()/1e3)}
1341
- `)},D=async(w,N,$,O)=>await ut(w,N,$,O,h=>{F(h)},f);C.info(v.blue(`\u{1F680} Starting local build for ${l} (${a})...`));try{Fd(y,t)}catch(w){throw await d("failed",{error:w.message,endTime:Date.now()}),w}if(await d("building"),await X("setup"),l==="ios"&&!e.simulator&&n.MACH_IOS_BUILD_NUMBER_LOCKED==="1"&&n.BUILD_NUMBER)C.info(v.dim(`Auto build number: ${n.BUILD_NUMBER}`)),await F(`[BUILD_NUMBER] ${n.BUILD_NUMBER}
1342
- `);else if(i&&l==="ios"&&!e.simulator)try{let w=parseInt(n.BUILD_NUMBER||"0",10),N=Number.isFinite(w)?w:0,$=await T.post(`/projects/${i}/next-build-number`,{platform:"ios",startFrom:N});if($.data.status==="success"){let O=Vi(String($.data.buildNumber||""));if(!O)throw new Error(`Dashboard returned invalid iOS build number: "${$.data.buildNumber||""}"`);let h=parseInt(O,10),M=N>0&&Number.isFinite(h)&&h<N?String(N):O;M!==O&&(C.warn(v.yellow(`Dashboard build counter returned ${O}; using minimum ${M}.`)),await F(`[BUILD_NUMBER] Dashboard returned ${O}; using minimum ${M}
1339
+ `;n&&n(v.dim(o)),C.info(v.dim(o.trim()))},or=async(e,t,n={},i,r={})=>{let o=Zn(),s=Date.now(),l=e.platform,a=e.buildProfile||"production",d=gt(e.framework),u=()=>Ft(n,a,e),c=async(w,T={})=>{if(i)for(let $=1;$<=3;$++)try{await N.patch(`/builds/${i}/${t}`,{status:w,...T});return}catch(O){let h=O?.response?.data?.message||O?.message||String(O);console.error(`[reportStatus] attempt ${$}/3 failed (status=${w}): ${h}`),$<3&&await new Promise(M=>setTimeout(M,2e3))}},p=new AbortController,{signal:f}=p,g=null;i&&(g=setInterval(async()=>{try{(await N.get(`/builds/${i}/${t}`)).data.status==="cancelled"&&(C.warn(v.yellow(`
1340
+ \u{1F6D1} Build cancelled from dashboard. Terminating...`)),p.abort(),g&&clearInterval(g))}catch{}},5e3));let y=A.join(process.cwd(),".mach-cache"),E="setup",_="",b=null,x=async()=>{if(!_||!i)return;let w=_;_="";try{let T=w;Object.values(n).forEach($=>{if($&&$.length>5){let O=$.replace(/[.*+?^${}()|[\]\\]/g,"\\$&");T=T.replace(new RegExp(O,"g"),"[SECRET]")}}),await N.post(`/builds/${i}/${t}/logs`,{log:T,step:E})}catch{}},I=async()=>{b&&(clearTimeout(b),b=null),await x(),ud(y,t),g&&(clearInterval(g),g=null);try{let w=A.join(Re.tmpdir(),`${m.buildPrefix}-${t}.keychain-db`);S.existsSync(w)&&(ie(`security delete-keychain "${w}"`,{stdio:"ignore"}),C.info(v.dim("\u{1F511} Build keychain deleted.")))}catch{}try{let w=A.join(Re.homedir(),"Library/MobileDevice/Provisioning Profiles");if(S.existsSync(w)){let T=S.readdirSync(w).filter($=>$.includes(t)||$.startsWith(`${m.nameLower}-temp-${t}`));for(let $ of T)S.unlinkSync(A.join(w,$))}}catch{}},F=async w=>{i&&(_+=w,_.length>=8192?(b&&(clearTimeout(b),b=null),await x()):b||(b=setTimeout(()=>{b=null,x()},2e3)))},X=async w=>{E=w,await F(`[STEP_START:${w}] ${Math.floor(Date.now()/1e3)}
1341
+ `)},P=async(w,T,$,O)=>await bt(w,T,$,O,h=>{F(h)},f);C.info(v.blue(`\u{1F680} Starting local build for ${l} (${a})...`));try{dd(y,t)}catch(w){throw await c("failed",{error:w.message,endTime:Date.now()}),w}if(await c("building"),await X("setup"),l==="ios"&&!e.simulator&&n.MACH_IOS_BUILD_NUMBER_LOCKED==="1"&&n.BUILD_NUMBER)C.info(v.dim(`Auto build number: ${n.BUILD_NUMBER}`)),await F(`[BUILD_NUMBER] ${n.BUILD_NUMBER}
1342
+ `);else if(i&&l==="ios"&&!e.simulator)try{let w=parseInt(n.BUILD_NUMBER||"0",10),T=Number.isFinite(w)?w:0,$=await N.post(`/projects/${i}/next-build-number`,{platform:"ios",startFrom:T});if($.data.status==="success"){let O=ir(String($.data.buildNumber||""));if(!O)throw new Error(`Dashboard returned invalid iOS build number: "${$.data.buildNumber||""}"`);let h=parseInt(O,10),M=T>0&&Number.isFinite(h)&&h<T?String(T):O;M!==O&&(C.warn(v.yellow(`Dashboard build counter returned ${O}; using minimum ${M}.`)),await F(`[BUILD_NUMBER] Dashboard returned ${O}; using minimum ${M}
1343
1343
  `)),n.BUILD_NUMBER=M,C.info(v.dim(`Auto build number: ${n.BUILD_NUMBER}`)),await F(`[BUILD_NUMBER] ${n.BUILD_NUMBER}
1344
- `)}}catch(w){C.warn(v.yellow(`Could not fetch auto build number: ${w.message}`))}await X("lock"),c.applyLocalProcessEnv(e);try{await X("clone"),C.info(v.dim("Preparing source...")),await X("read_config");let w=A.join(process.cwd(),m.configFileName);if(S.existsSync(w)){let G=JSON.parse(S.readFileSync(w,"utf-8"))?.build?.[a]||{};await F(`[CONFIG] Profile: ${a}, distribution: ${G.distribution||"not set"}, simulator: ${G.simulator||!1}
1345
- `)}if(await X("read_package"),e.nodeVersion){let z=process.env.NVM_DIR||A.join($e.homedir(),".nvm"),G=A.join(z,"versions","node"),ee;if(S.existsSync(G)){let W=S.readdirSync(G).sort().reverse(),q=e.nodeVersion.startsWith("v")?e.nodeVersion:`v${e.nodeVersion}`,de=W.find(Ae=>Ae===q||Ae.startsWith(q+".")||Ae.startsWith(`v${e.nodeVersion}.`));de&&(ee=A.join(G,de,"bin"))}if(ee&&S.existsSync(ee)){let W=process.env.PATH||"";process.env.PATH=`${ee}:${W}`,await F(`[NODE] Switched to Node ${e.nodeVersion} \u2014 using ${ee}
1346
- `),C.info(v.green(`\u2713 Node switched to ${e.nodeVersion} (${ee})`))}else await F(`[NODE] Warning: Node ${e.nodeVersion} not found in nvm. Run: nvm install ${e.nodeVersion} on the build machine.
1347
- `),C.warn(v.yellow(`Node ${e.nodeVersion} not found in nvm \u2014 using system default`))}await X("deps"),o.start("Checking dependencies...");let N=Md(y),$=xd(process.cwd()),O=S.existsSync("node_modules"),h=S.existsSync("yarn.lock"),M=S.existsSync("bun.lockb");O&&N.node&&N.node!==$&&(o.stop("Dependency fingerprint changed \u2014 clearing node_modules for clean install..."),await F(`[CACHE] package.json/lockfile changed \u2014 wiping node_modules
1348
- `),S.rmSync(A.join(process.cwd(),"node_modules"),{recursive:!0,force:!0}),O=!1);let U="npm",H=["install","--prefer-offline"];h?(U="yarn",H=["install","--prefer-offline"]):M&&(U="bun",H=["install"]),O?o.stop("Cached node_modules found. Syncing dependencies..."):o.stop("No cached dependencies. Running fresh install..."),e.preBuild&&(C.info(v.blue("Running pre-install hook...")),C.info(v.dim(`> ${e.preBuild}`)),await X("prebuild"),await D("bash",[e.preBuild],process.cwd(),u())),C.info(v.dim(`Running ${U} ${H.join(" ")}...`)),await D(U,H,process.cwd(),u()),N.node=$,Lo(y,N);let Z=await c.prepareLocalProject({platform:l,options:e,cacheMeta:N,cacheMetaDir:y,currentBuildEnv:u,reportStep:X,reportLog:F,loggedRun:D,configureXcodeNodeBinary:qo,podsFingerprint:Ld,writeCacheMeta:Lo}),j=Z.bundleId||e.iosBundleIdentifier||"",k=Z.appName||e.name||"",V=[];if(l==="android")await X("build"),V=await oc(e,a,n,z=>F(z),f);else if(l==="ios"){await X("signing"),C.info(v.dim("Preparing credentials..."));let z=r?.distributionType;V=await sc(e,t,a,n,i,G=>F(G),f,z,G=>X(G))}e.postBuild&&(C.info(v.blue("Running post-build hook...")),C.info(v.dim(`> ${e.postBuild}`)),await D(e.postBuild,[],process.cwd(),u()));let ae=qd(Date.now()-s);if(C.success(v.green(`
1349
- \u2713 Local build completed successfully in ${ae}`)),await d("building",{...j&&{bundleId:j},...k&&{appName:k}}),V.length>0&&(C.info(v.cyan(`
1350
- \u{1F4E6} Generated Artifacts:`)),V.forEach(z=>{let G=A.resolve(z);C.info(v.dim(` - ${z}`)),C.info(v.gray(` Path: ${G}`))}),e.interactive)){let z=await Nd({message:"Install on connected device?"});if(!Hn(z)&&z){if(l==="android"){let G=V.find(ee=>ee.endsWith(".apk"))||V[0];await lc(G,ee=>F(ee))}else if(l==="ios"){let G=V.find(W=>W.endsWith(".ipa"))||V.find(W=>W.endsWith(".app"))||V[0],ee=pt("ios");e.simulator?await dc(G,ee||"",W=>F(W)):await cc(G,ee||"",W=>F(W))}}}await X("upload");let pe=[];for(let z of V)try{let G=A.join($e.tmpdir(),`${t}-${A.basename(z)}`);S.copyFileSync(z,G),pe.push(G),C.info(v.dim(` \u{1F4CB} Preserved artifact: ${A.basename(z)}`))}catch{C.warn(v.yellow(` Failed to preserve artifact: ${A.basename(z)}`))}V=pe,C.info(v.dim("\u{1F9F9} Cleaning workspace (preserving dependency cache)..."));try{let z=process.cwd(),G=new Set(["node_modules"]),ee=S.readdirSync(z),W=0;for(let q of ee)if(!G.has(q)){if(q==="ios"){let de=A.join(z,"ios"),Ae=S.readdirSync(de);for(let De of Ae)if(De!=="Pods")try{S.rmSync(A.join(de,De),{recursive:!0,force:!0}),W++}catch{}continue}try{S.rmSync(A.join(z,q),{recursive:!0,force:!0}),W++}catch{}}C.info(v.dim(` Cleaned ${W} items. Cached: node_modules${S.existsSync(A.join(z,"ios","Pods"))?", ios/Pods":""}`)),C.info(v.green("\u{1F512} Security: No source code retained on build server. Only public dependencies cached."))}catch{C.warn(v.yellow("Post-build cleanup encountered errors (non-fatal)."))}try{let G=A.join($e.homedir(),m.workspacesDir),ee=ie(`df -k "${G}" | tail -1 | awk '{print $4}'`,{encoding:"utf8"}).trim(),W=parseInt(ee,10)*1024;if(W<53687091200&&S.existsSync(G)){C.info(v.dim(` \u26A0\uFE0F Low disk space (${(W/1024/1024/1024).toFixed(0)} GB free). Running cache eviction...`));let q=A.basename(process.cwd()),de=S.readdirSync(G).filter(Ae=>Ae!==q).map(Ae=>{let De=A.join(G,Ae);try{let Ft=S.statSync(De);return Ft.isDirectory()?{name:Ae,dir:De,mtime:Ft.mtimeMs}:null}catch{return null}}).filter(Boolean);de.sort((Ae,De)=>Ae.mtime-De.mtime);for(let Ae of de){if(W>=53687091200)break;try{S.rmSync(Ae.dir,{recursive:!0,force:!0}),C.info(v.dim(` \u{1F5D1}\uFE0F Evicted stale workspace: ${Ae.name}`));let De=ie(`df -k "${G}" | tail -1 | awk '{print $4}'`,{encoding:"utf8"}).trim();if(parseInt(De,10)*1024>=53687091200)break}catch{}}}}catch{}return await I(),V}catch(w){throw await I(),w.message==="Command aborted"?(C.warn(v.yellow(`
1351
- \u274C Build aborted.`)),await d("failed",{error:"Aborted by user",endTime:Date.now()}),w):(C.error(v.red(`
1352
- \u2717 Local build failed: ${w.message}`)),await d("failed",{error:w.message,endTime:Date.now()}),w)}},oc=async(e,t,n={},i,r)=>{let o=S.existsSync("android/gradlew")?"android/gradlew":S.existsSync("gradlew")?"./gradlew":null;if(!o)throw new Error("Could not find gradlew. Is this an Android project?");let s=e.developmentClient?"assembleDebug":"assembleRelease";!e.developmentClient&&e.distribution==="store"?s="bundleRelease":!e.developmentClient&&e.distribution==="internal"&&(s="assembleRelease");let l=e.buildCommand||s;C.info(v.blue(`Running Android build: ${l}...`));let a=o.includes("android/")?"android":".",c=(o.includes("android/"),"./gradlew"),u=[l],d=at(e.framework),p={...n,...d.localAndroidEnv(e,t),MACH_APP_NAME:e.appName||e.name||"App"};if(n.ANDROID_VERSION_CODE){let g=A.join(a,"app/build.gradle");if(S.existsSync(g)){let y=n.ANDROID_VERSION_CODE,E=S.readFileSync(g,"utf-8");E=E.replace(/versionCode\s+\d+/,`versionCode ${y}`),S.writeFileSync(g,E),C.info(v.green(`\u2713 Applied Android versionCode ${y}`))}u.push(`-Pandroid.injected.version.code=${n.ANDROID_VERSION_CODE}`)}for(let g of["app/build","build",".cxx"]){let y=A.join(a,g);S.existsSync(y)&&S.rmSync(y,{recursive:!0,force:!0})}Gi(process.cwd()),await ut(c,u,a,p,i,r);let f=A.join(a,"app/build/outputs");return kt(f,[".apk",".aab"])},sc=async(e,t,n,i={},r,o,s,l,a)=>{if(process.platform!=="darwin")throw new Error("iOS builds can only be run on macOS.");let c=A.resolve(process.cwd(),S.existsSync("ios")?"ios":".");Vo(c);let u=S.readdirSync(c),d=u.find(N=>N.endsWith(".xcworkspace")),p=u.find(N=>N.endsWith(".xcodeproj")),f=Ot(i,n,e);qo(c,f,o);let g=Vi(f.BUILD_NUMBER||f.CURRENT_PROJECT_VERSION);if((f.BUILD_NUMBER||f.CURRENT_PROJECT_VERSION)&&!g)throw new Error(`Invalid iOS BUILD_NUMBER/CURRENT_PROJECT_VERSION: "${f.BUILD_NUMBER||f.CURRENT_PROJECT_VERSION}". Apple requires one to three period-separated integers. Fix the Dashboard secret or remove it so Mach can use its auto build number.`);let y=g?[`BUILD_NUMBER=${g}`,`CURRENT_PROJECT_VERSION=${g}`]:[];if(g&&(f.BUILD_NUMBER=g,f.CURRENT_PROJECT_VERSION=g,C.info(v.dim(`Using iOS build number: ${g}`))),!d&&!p)throw new Error("Could not find Xcode workspace or project in ios/ directory.");try{let N=ie("xcode-select -p").toString().trim();C.info(v.dim(`Using Xcode at: ${N}`))}catch{C.warn(v.dim("Could not detect Xcode path."))}C.info(v.blue("Running iOS build via xcodebuild..."));let E=d?d.replace(".xcworkspace",""):p?.replace(".xcodeproj",""),_=e.iosScheme||E||e.scheme,b=e.developmentClient?"Debug":e.iosConfiguration||"Release",x=(r||"default").replace(/[^a-zA-Z0-9-_]/g,"_"),I=A.join($e.homedir(),`Library/Developer/Xcode/DerivedData/${m.nameLower}`,x);S.mkdirSync(I,{recursive:!0});let F=Kt(f),X=A.join(I,".mach-env-hash"),D=A.join(I,"Build"),w=S.existsSync(X)?S.readFileSync(X,"utf-8").trim():"";if(S.existsSync(D)){let N=w&&w!==F?"Build environment changed \u2014 clearing iOS DerivedData build products.":w?"Clearing iOS DerivedData build products to force a fresh JS bundle.":"DerivedData has no environment stamp \u2014 clearing iOS build products.";C.info(v.dim(N)),S.rmSync(D,{recursive:!0,force:!0})}if(S.writeFileSync(X,F),Gi(process.cwd()),e.simulator){let N=Yd(c,d,p,_,b),$=N||"generic/platform=iOS Simulator",O=["-destination",$];C.info(v.dim(N?`Building for simulator (Scheme: ${_}, Config: ${b}, Destination: ${$})...`:`Building for simulator (Scheme: ${_}, Config: ${b}, Destination: ${$})...`));let h=[d?"-workspace":"-project",d||p,"-scheme",_,"-configuration",b,"-sdk","iphonesimulator",...O,"-derivedDataPath",I,...y,"COMPILER_INDEX_STORE_ENABLE=NO","CODE_SIGNING_ALLOWED=NO","CODE_SIGNING_REQUIRED=NO","ONLY_ACTIVE_ARCH=NO","EXCLUDED_ARCHS=","SUPPORTED_PLATFORMS=iphonesimulator"];try{await Fn(h,c,f,o,s)}catch(pe){if(!zd(pe))throw pe;Wd(I),Gi(process.cwd()),await Fn(h,c,f,o,s)}let M=A.join(I,"Build/Products",`${b}-iphonesimulator`),U=Qd(M,_,e),H=A.basename(U,".app"),Z=Vt(A.join(U,"Info.plist"),"CFBundleIdentifier")||"unknown bundle",j=Bo(U),k=Jo(U),V=Yo(U),ae=A.join(M,`${H}_simulator.zip`);return C.info(v.dim(`Selected simulator app: ${A.relative(M,U)} (${Z}, build ${j})`)),C.info(v.dim(`Simulator executable architecture: ${k}`)),C.info(v.dim(`Simulator executable platform: ${V.split(`
1353
- `).find(pe=>/\bplatform\b/i.test(pe))?.trim()||"IOSSIMULATOR"}`)),C.info(v.dim(`Creating simulator artifact: ${ae}...`)),Fe(ae),ct("zip",["-r",ae,A.basename(U)],{cwd:A.dirname(U),stdio:"pipe"}),[ae]}else{C.info(v.dim(`Archiving (Scheme: ${_}, Config: ${b})...`));let N=A.join(c,"build.xcarchive"),$=A.join(c,"export");S.rmSync(N,{recursive:!0,force:!0}),S.rmSync($,{recursive:!0,force:!0});let O=i.IOS_DIST_P12,h=i.IOS_PROVISIONING_PROFILE,M=i.IOS_P12_PASSWORD||"",U=[],H,Z,j={isAppStore:!1,isDevelopment:!1};if(O&&h){C.info(v.blue("\u{1F510} CI/CD Signing: Importing certificates..."));try{let W=`${m.buildPrefix}-${t}.keychain-db`,q=A.join($e.tmpdir(),W),de=m.keychainPassword;ie(`security create-keychain -p "${de}" "${q}" 2>/dev/null || true`),ie(`security set-keychain-settings -t 3600 -l "${q}"`),ie(`security unlock-keychain -p "${de}" "${q}"`);let Ae=A.join($e.tmpdir(),`cert-${t}.p12`),De=Buffer.from(O,"base64");S.writeFileSync(Ae,De),C.info(v.dim(`P12 data size: ${De.length} bytes, first bytes: ${De.slice(0,4).toString("hex")}`)),(De.length<100||De[0]!==48)&&(C.warn(v.yellow("\u26A0\uFE0F P12 data looks corrupted or was not decrypted correctly.")),C.warn(v.yellow(" This usually means MACH_ENCRYPTION_KEY on the Remote API differs from when credentials were uploaded.")));let Ft=[M,"",m.keychainPassword],Qr=!1;for(let Pe of Ft)try{ie(`security import "${Ae}" -k "${q}" -P "${Pe}" -A -T /usr/bin/codesign -T /usr/bin/security`,{stdio:"pipe"}),Qr=!0,C.info(v.dim(`\u2713 P12 imported successfully with password: ${Pe?"[set]":"[empty]"}`));break}catch(Ve){C.info(v.dim(` P12 import attempt with password ${Pe?`"${Pe.substring(0,3)}..."`:"[empty]"} failed: ${Ve.message?.split(`
1354
- `)[0]||"unknown"}`))}if(!Qr)throw new Error("Failed to import P12.");S.unlinkSync(Ae),ie(`security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k "${de}" "${q}"`);let zl=ie("security list-keychains -d user",{encoding:"utf-8"}).split(`
1355
- `).map(Pe=>Pe.trim().replace(/^"|"$/g,"")).filter(Pe=>Pe.length>0),Wl=[q,...zl].map(Pe=>`"${Pe}"`).join(" ");ie(`security list-keychains -d user -s ${Wl}`),ie(`security default-keychain -s "${q}"`);let Ci=A.join($e.homedir(),"Library/MobileDevice/Provisioning Profiles");S.mkdirSync(Ci,{recursive:!0});let eo=Buffer.from(h,"base64"),ki=A.join(Ci,`${m.nameLower}-temp-${t}.mobileprovision`);S.writeFileSync(ki,eo);let Ni=eo.toString("utf-8"),to=/<key>get-task-allow<\/key>\s*<true\/>/.test(Ni);j={isAppStore:!Ni.includes("<key>ProvisionedDevices</key>")&&!to,isDevelopment:to};try{let Ve=ie(`security cms -D -i "${ki}"`,{encoding:"utf-8"}).match(/<key>UUID<\/key>\s*<string>([^<]+)<\/string>/);Z=Ve?Ve[1]:void 0}catch{let Ve=Ni.match(/<key>UUID<\/key>\s*<string>([^<]+)<\/string>/);Z=Ve?Ve[1]:void 0}Z||(C.warn("Could not extract UUID from provisioning profile. Using fallback."),Z=`${m.nameLower}-${t}`);let Ti=A.join(Ci,`${Z}.mobileprovision`);S.existsSync(Ti)&&S.unlinkSync(Ti),S.renameSync(ki,Ti);try{let Pe=ie(`security find-identity -v -p codesigning "${q}"`,{encoding:"utf-8"}),Ve=Array.from(Pe.matchAll(/"((?:Apple|iPhone) (?:Distribution|Developer|Development)[^"]*)"/g),nn=>nn[1]),no=j.isDevelopment?Ve.find(nn=>/\b(Development|Developer)\b/.test(nn)):Ve.find(nn=>/\bDistribution\b/.test(nn)),io=Ve[0];(no||io)&&(H=no||io,C.info(v.blue(`Identity auto-detected from keychain: "${H}"`)))}catch{}H||(H=j.isDevelopment?"Apple Development":"Apple Distribution",C.info(v.blue(`Identity fallback (profile heuristic): "${H}"`))),C.info(v.dim(`Profile type: ${j.isDevelopment?"Development":j.isAppStore?"App Store":"Ad-Hoc"}`)),C.info(v.dim(`Identity Detection: get-task-allow=${j.isDevelopment}, Selected Identity="${H}"`)),U.push("CODE_SIGN_STYLE=Manual"),U.push(`CODE_SIGN_IDENTITY="${H}"`),U.push(`PROVISIONING_PROFILE_SPECIFIER=${Z}`),e.iosTeamId&&U.push(`DEVELOPMENT_TEAM=${e.iosTeamId}`)}catch(W){throw C.error(`Signing setup failed: ${W.message}`),W}}else U.push("-allowProvisioningUpdates"),e.iosTeamId&&U.push(`DEVELOPMENT_TEAM=${e.iosTeamId}`);a&&await a("archive"),C.info(v.blue(`Archive detected Identity: "${H}"`)),C.info(v.blue(`Archive detected UUID: "${Z}"`)),await Fn(["archive",d?"-workspace":"-project",d||p,"-scheme",_,"-configuration",b,"-archivePath",N,"-derivedDataPath",I,...y,...U],c,f,o,s);let k=kt(A.join(N,"Products","Applications"),[".app"]);for(let W of k){let q=Bo(W);C.info(v.dim(`Validated iOS CFBundleVersion ${q} in ${A.basename(W)}`))}let V;Z?(j.isAppStore?V="app-store":j.isDevelopment?V="development":V="ad-hoc",C.info(v.blue(`Export method from profile: "${V}"`))):(V=e.distribution==="store"?"app-store":e.distribution==="internal"?"ad-hoc":"development",C.warn(v.yellow(`No profile UUID detected. Export method from distribution flag: "${V}"`)));let ae=e.iosExportMethod||V,pe=e.iosBundleIdentifier||pt("ios"),z=A.join(c,"ExportOptions.plist"),G=`<?xml version="1.0" encoding="UTF-8"?>
1344
+ `)}}catch(w){C.warn(v.yellow(`Could not fetch auto build number: ${w.message}`))}await X("lock"),d.applyLocalProcessEnv(e);try{await X("clone"),C.info(v.dim("Preparing source...")),await X("read_config");let w=A.join(process.cwd(),m.configFileName);if(S.existsSync(w)){let G=JSON.parse(S.readFileSync(w,"utf-8"))?.build?.[a]||{};await F(`[CONFIG] Profile: ${a}, distribution: ${G.distribution||"not set"}, simulator: ${G.simulator||!1}
1345
+ `)}if(await X("read_package"),e.nodeVersion){let z=process.env.NVM_DIR||A.join(Re.homedir(),".nvm"),G=A.join(z,"versions","node"),te;if(S.existsSync(G)){let W=S.readdirSync(G).sort().reverse(),q=e.nodeVersion.startsWith("v")?e.nodeVersion:`v${e.nodeVersion}`,de=W.find(we=>we===q||we.startsWith(q+".")||we.startsWith(`v${e.nodeVersion}.`));de&&(te=A.join(G,de,"bin"))}if(te&&S.existsSync(te)){let W=process.env.PATH||"";process.env.PATH=`${te}:${W}`,await F(`[NODE] Switched to Node ${e.nodeVersion} \u2014 using ${te}
1346
+ `),C.info(v.green(`\u2713 Node switched to ${e.nodeVersion} (${te})`))}else await F(`[NODE] Warning: Node ${e.nodeVersion} not found in nvm. Run: nvm install ${e.nodeVersion} on the build machine.
1347
+ `),C.warn(v.yellow(`Node ${e.nodeVersion} not found in nvm \u2014 using system default`))}await X("deps"),o.start("Checking dependencies...");let T=ld(y),$=sd(process.cwd()),O=S.existsSync("node_modules"),h=S.existsSync("yarn.lock"),M=S.existsSync("bun.lockb");O&&T.node&&T.node!==$&&(o.stop("Dependency fingerprint changed \u2014 clearing node_modules for clean install..."),await F(`[CACHE] package.json/lockfile changed \u2014 wiping node_modules
1348
+ `),S.rmSync(A.join(process.cwd(),"node_modules"),{recursive:!0,force:!0}),O=!1);let U="npm",j=["install","--prefer-offline"];h?(U="yarn",j=["install","--prefer-offline"]):M&&(U="bun",j=["install"]),O?o.stop("Cached node_modules found. Syncing dependencies..."):o.stop("No cached dependencies. Running fresh install..."),e.preBuild&&(C.info(v.blue("Running pre-install hook...")),C.info(v.dim(`> ${e.preBuild}`)),await X("prebuild"),await P("bash",[e.preBuild],process.cwd(),u())),C.info(v.dim(`Running ${U} ${j.join(" ")}...`)),await P(U,j,process.cwd(),u()),T.node=$,Xo(y,T);let Z=await d.prepareLocalProject({platform:l,options:e,cacheMeta:T,cacheMetaDir:y,currentBuildEnv:u,reportStep:X,reportLog:F,loggedRun:P,configureXcodeNodeBinary:us,podsFingerprint:ad,writeCacheMeta:Xo}),H=Z.bundleId||e.iosBundleIdentifier||"",k=Z.appName||e.name||"",K=[];if(l==="android")await X("build"),K=await Od(e,a,n,z=>F(z),f);else if(l==="ios"){await X("signing"),C.info(v.dim("Preparing credentials..."));let z=r?.distributionType;K=await Cd(e,t,a,n,i,G=>F(G),f,z,G=>X(G))}e.postBuild&&(C.info(v.blue("Running post-build hook...")),C.info(v.dim(`> ${e.postBuild}`)),await P(e.postBuild,[],process.cwd(),u()));let ae=Ed(Date.now()-s);if(C.success(v.green(`
1349
+ \u2713 Local build completed successfully in ${ae}`)),await c("building",{...H&&{bundleId:H},...k&&{appName:k}}),K.length>0&&(C.info(v.cyan(`
1350
+ \u{1F4E6} Generated Artifacts:`)),K.forEach(z=>{let G=A.resolve(z);C.info(v.dim(` - ${z}`)),C.info(v.gray(` Path: ${G}`))}),e.interactive)){let z=await rd({message:"Install on connected device?"});if(!Qn(z)&&z){if(l==="android"){let G=K.find(te=>te.endsWith(".apk"))||K[0];await Td(G,te=>F(te))}else if(l==="ios"){let G=K.find(W=>W.endsWith(".ipa"))||K.find(W=>W.endsWith(".app"))||K[0],te=At("ios");e.simulator?await Nd(G,te||"",W=>F(W)):await xd(G,te||"",W=>F(W))}}}await X("upload");let ge=[];for(let z of K)try{let G=A.join(Re.tmpdir(),`${t}-${A.basename(z)}`);S.copyFileSync(z,G),ge.push(G),C.info(v.dim(` \u{1F4CB} Preserved artifact: ${A.basename(z)}`))}catch{C.warn(v.yellow(` Failed to preserve artifact: ${A.basename(z)}`))}K=ge,C.info(v.dim("\u{1F9F9} Cleaning workspace (preserving dependency cache)..."));try{let z=process.cwd(),G=new Set(["node_modules"]),te=S.readdirSync(z),W=0;for(let q of te)if(!G.has(q)){if(q==="ios"){let de=A.join(z,"ios"),we=S.readdirSync(de);for(let Oe of we)if(Oe!=="Pods")try{S.rmSync(A.join(de,Oe),{recursive:!0,force:!0}),W++}catch{}continue}try{S.rmSync(A.join(z,q),{recursive:!0,force:!0}),W++}catch{}}C.info(v.dim(` Cleaned ${W} items. Cached: node_modules${S.existsSync(A.join(z,"ios","Pods"))?", ios/Pods":""}`)),C.info(v.green("\u{1F512} Security: No source code retained on build server. Only public dependencies cached."))}catch{C.warn(v.yellow("Post-build cleanup encountered errors (non-fatal)."))}try{let G=A.join(Re.homedir(),m.workspacesDir),te=ie(`df -k "${G}" | tail -1 | awk '{print $4}'`,{encoding:"utf8"}).trim(),W=parseInt(te,10)*1024;if(W<53687091200&&S.existsSync(G)){C.info(v.dim(` \u26A0\uFE0F Low disk space (${(W/1024/1024/1024).toFixed(0)} GB free). Running cache eviction...`));let q=A.basename(process.cwd()),de=S.readdirSync(G).filter(we=>we!==q).map(we=>{let Oe=A.join(G,we);try{let Wt=S.statSync(Oe);return Wt.isDirectory()?{name:we,dir:Oe,mtime:Wt.mtimeMs}:null}catch{return null}}).filter(Boolean);de.sort((we,Oe)=>we.mtime-Oe.mtime);for(let we of de){if(W>=53687091200)break;try{S.rmSync(we.dir,{recursive:!0,force:!0}),C.info(v.dim(` \u{1F5D1}\uFE0F Evicted stale workspace: ${we.name}`));let Oe=ie(`df -k "${G}" | tail -1 | awk '{print $4}'`,{encoding:"utf8"}).trim();if(parseInt(Oe,10)*1024>=53687091200)break}catch{}}}}catch{}return await I(),K}catch(w){throw await I(),w.message==="Command aborted"?(C.warn(v.yellow(`
1351
+ \u274C Build aborted.`)),await c("failed",{error:"Aborted by user",endTime:Date.now()}),w):(C.error(v.red(`
1352
+ \u2717 Local build failed: ${w.message}`)),await c("failed",{error:w.message,endTime:Date.now()}),w)}},Od=async(e,t,n={},i,r)=>{let o=S.existsSync("android/gradlew")?"android/gradlew":S.existsSync("gradlew")?"./gradlew":null;if(!o)throw new Error("Could not find gradlew. Is this an Android project?");let s=e.developmentClient?"assembleDebug":"assembleRelease";!e.developmentClient&&e.distribution==="store"?s="bundleRelease":!e.developmentClient&&e.distribution==="internal"&&(s="assembleRelease");let l=e.buildCommand||s;C.info(v.blue(`Running Android build: ${l}...`));let a=o.includes("android/")?"android":".",d=(o.includes("android/"),"./gradlew"),u=[l],c=gt(e.framework),p={...n,...c.localAndroidEnv(e,t),MACH_APP_NAME:e.appName||e.name||"App"};if(n.ANDROID_VERSION_CODE){let g=A.join(a,"app/build.gradle");if(S.existsSync(g)){let y=n.ANDROID_VERSION_CODE,E=S.readFileSync(g,"utf-8");E=E.replace(/versionCode\s+\d+/,`versionCode ${y}`),S.writeFileSync(g,E),C.info(v.green(`\u2713 Applied Android versionCode ${y}`))}u.push(`-Pandroid.injected.version.code=${n.ANDROID_VERSION_CODE}`)}for(let g of["app/build","build",".cxx"]){let y=A.join(a,g);S.existsSync(y)&&S.rmSync(y,{recursive:!0,force:!0})}tr(process.cwd()),await bt(d,u,a,p,i,r);let f=A.join(a,"app/build/outputs");return jt(f,[".apk",".aab"])},Cd=async(e,t,n,i={},r,o,s,l,a)=>{if(process.platform!=="darwin")throw new Error("iOS builds can only be run on macOS.");let d=A.resolve(process.cwd(),S.existsSync("ios")?"ios":".");ss(d);let u=S.readdirSync(d),c=u.find(T=>T.endsWith(".xcworkspace")),p=u.find(T=>T.endsWith(".xcodeproj")),f=Ft(i,n,e);us(d,f,o);let g=ir(f.BUILD_NUMBER||f.CURRENT_PROJECT_VERSION);if((f.BUILD_NUMBER||f.CURRENT_PROJECT_VERSION)&&!g)throw new Error(`Invalid iOS BUILD_NUMBER/CURRENT_PROJECT_VERSION: "${f.BUILD_NUMBER||f.CURRENT_PROJECT_VERSION}". Apple requires one to three period-separated integers. Fix the Dashboard secret or remove it so Mach can use its auto build number.`);let y=g?[`BUILD_NUMBER=${g}`,`CURRENT_PROJECT_VERSION=${g}`]:[];if(g&&(f.BUILD_NUMBER=g,f.CURRENT_PROJECT_VERSION=g,C.info(v.dim(`Using iOS build number: ${g}`))),!c&&!p)throw new Error("Could not find Xcode workspace or project in ios/ directory.");try{let T=ie("xcode-select -p").toString().trim();C.info(v.dim(`Using Xcode at: ${T}`))}catch{C.warn(v.dim("Could not detect Xcode path."))}C.info(v.blue("Running iOS build via xcodebuild..."));let E=c?c.replace(".xcworkspace",""):p?.replace(".xcodeproj",""),_=e.iosScheme||E||e.scheme,b=e.developmentClient?"Debug":e.iosConfiguration||"Release",x=(r||"default").replace(/[^a-zA-Z0-9-_]/g,"_"),I=A.join(Re.homedir(),`Library/Developer/Xcode/DerivedData/${m.nameLower}`,x);S.mkdirSync(I,{recursive:!0});let F=Zt(f),X=A.join(I,".mach-env-hash"),P=A.join(I,"Build"),w=S.existsSync(X)?S.readFileSync(X,"utf-8").trim():"";if(S.existsSync(P)){let T=w&&w!==F?"Build environment changed \u2014 clearing iOS DerivedData build products.":w?"Clearing iOS DerivedData build products to force a fresh JS bundle.":"DerivedData has no environment stamp \u2014 clearing iOS build products.";C.info(v.dim(T)),S.rmSync(P,{recursive:!0,force:!0})}if(S.writeFileSync(X,F),tr(process.cwd()),e.simulator){let T=Ad(d,c,p,_,b),$=T||"generic/platform=iOS Simulator",O=["-destination",$];C.info(v.dim(T?`Building for simulator (Scheme: ${_}, Config: ${b}, Destination: ${$})...`:`Building for simulator (Scheme: ${_}, Config: ${b}, Destination: ${$})...`));let h=[c?"-workspace":"-project",c||p,"-scheme",_,"-configuration",b,"-sdk","iphonesimulator",...O,"-derivedDataPath",I,...y,"COMPILER_INDEX_STORE_ENABLE=NO","CODE_SIGNING_ALLOWED=NO","CODE_SIGNING_REQUIRED=NO","ONLY_ACTIVE_ARCH=NO","EXCLUDED_ARCHS=","SUPPORTED_PLATFORMS=iphonesimulator"];try{await Xn(h,d,f,o,s)}catch(ge){if(!yd(ge))throw ge;Sd(I),tr(process.cwd()),await Xn(h,d,f,o,s)}let M=A.join(I,"Build/Products",`${b}-iphonesimulator`),U=_d(M,_,e),j=A.basename(U,".app"),Z=Qt(A.join(U,"Info.plist"),"CFBundleIdentifier")||"unknown bundle",H=ts(U),k=cs(U),K=ds(U),ae=A.join(M,`${j}_simulator.zip`);return C.info(v.dim(`Selected simulator app: ${A.relative(M,U)} (${Z}, build ${H})`)),C.info(v.dim(`Simulator executable architecture: ${k}`)),C.info(v.dim(`Simulator executable platform: ${K.split(`
1353
+ `).find(ge=>/\bplatform\b/i.test(ge))?.trim()||"IOSSIMULATOR"}`)),C.info(v.dim(`Creating simulator artifact: ${ae}...`)),He(ae),St("zip",["-r",ae,A.basename(U)],{cwd:A.dirname(U),stdio:"pipe"}),[ae]}else{C.info(v.dim(`Archiving (Scheme: ${_}, Config: ${b})...`));let T=A.join(d,"build.xcarchive"),$=A.join(d,"export");S.rmSync(T,{recursive:!0,force:!0}),S.rmSync($,{recursive:!0,force:!0});let O=i.IOS_DIST_P12,h=i.IOS_PROVISIONING_PROFILE,M=i.IOS_P12_PASSWORD||"",U=[],j,Z,H={isAppStore:!1,isDevelopment:!1};if(O&&h){C.info(v.blue("\u{1F510} CI/CD Signing: Importing certificates..."));try{let W=`${m.buildPrefix}-${t}.keychain-db`,q=A.join(Re.tmpdir(),W),de=m.keychainPassword;ie(`security create-keychain -p "${de}" "${q}" 2>/dev/null || true`),ie(`security set-keychain-settings -t 3600 -l "${q}"`),ie(`security unlock-keychain -p "${de}" "${q}"`);let we=A.join(Re.tmpdir(),`cert-${t}.p12`),Oe=Buffer.from(O,"base64");S.writeFileSync(we,Oe),C.info(v.dim(`P12 data size: ${Oe.length} bytes, first bytes: ${Oe.slice(0,4).toString("hex")}`)),(Oe.length<100||Oe[0]!==48)&&(C.warn(v.yellow("\u26A0\uFE0F P12 data looks corrupted or was not decrypted correctly.")),C.warn(v.yellow(" This usually means MACH_ENCRYPTION_KEY on the Remote API differs from when credentials were uploaded.")));let Wt=[M,"",m.keychainPassword],ho=!1;for(let Ce of Wt)try{ie(`security import "${we}" -k "${q}" -P "${Ce}" -A -T /usr/bin/codesign -T /usr/bin/security`,{stdio:"pipe"}),ho=!0,C.info(v.dim(`\u2713 P12 imported successfully with password: ${Ce?"[set]":"[empty]"}`));break}catch(Je){C.info(v.dim(` P12 import attempt with password ${Ce?`"${Ce.substring(0,3)}..."`:"[empty]"} failed: ${Je.message?.split(`
1354
+ `)[0]||"unknown"}`))}if(!ho)throw new Error("Failed to import P12.");S.unlinkSync(we),ie(`security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k "${de}" "${q}"`);let yc=ie("security list-keychains -d user",{encoding:"utf-8"}).split(`
1355
+ `).map(Ce=>Ce.trim().replace(/^"|"$/g,"")).filter(Ce=>Ce.length>0),Sc=[q,...yc].map(Ce=>`"${Ce}"`).join(" ");ie(`security list-keychains -d user -s ${Sc}`),ie(`security default-keychain -s "${q}"`);let Gi=A.join(Re.homedir(),"Library/MobileDevice/Provisioning Profiles");S.mkdirSync(Gi,{recursive:!0});let yo=Buffer.from(h,"base64"),Vi=A.join(Gi,`${m.nameLower}-temp-${t}.mobileprovision`);S.writeFileSync(Vi,yo);let Ki=yo.toString("utf-8"),So=/<key>get-task-allow<\/key>\s*<true\/>/.test(Ki);H={isAppStore:!Ki.includes("<key>ProvisionedDevices</key>")&&!So,isDevelopment:So};try{let Je=ie(`security cms -D -i "${Vi}"`,{encoding:"utf-8"}).match(/<key>UUID<\/key>\s*<string>([^<]+)<\/string>/);Z=Je?Je[1]:void 0}catch{let Je=Ki.match(/<key>UUID<\/key>\s*<string>([^<]+)<\/string>/);Z=Je?Je[1]:void 0}Z||(C.warn("Could not extract UUID from provisioning profile. Using fallback."),Z=`${m.nameLower}-${t}`);let zi=A.join(Gi,`${Z}.mobileprovision`);S.existsSync(zi)&&S.unlinkSync(zi),S.renameSync(Vi,zi);try{let Ce=ie(`security find-identity -v -p codesigning "${q}"`,{encoding:"utf-8"}),Je=Array.from(Ce.matchAll(/"((?:Apple|iPhone) (?:Distribution|Developer|Development)[^"]*)"/g),mn=>mn[1]),bo=H.isDevelopment?Je.find(mn=>/\b(Development|Developer)\b/.test(mn)):Je.find(mn=>/\bDistribution\b/.test(mn)),Ao=Je[0];(bo||Ao)&&(j=bo||Ao,C.info(v.blue(`Identity auto-detected from keychain: "${j}"`)))}catch{}j||(j=H.isDevelopment?"Apple Development":"Apple Distribution",C.info(v.blue(`Identity fallback (profile heuristic): "${j}"`))),C.info(v.dim(`Profile type: ${H.isDevelopment?"Development":H.isAppStore?"App Store":"Ad-Hoc"}`)),C.info(v.dim(`Identity Detection: get-task-allow=${H.isDevelopment}, Selected Identity="${j}"`)),U.push("CODE_SIGN_STYLE=Manual"),U.push(`CODE_SIGN_IDENTITY="${j}"`),U.push(`PROVISIONING_PROFILE_SPECIFIER=${Z}`),e.iosTeamId&&U.push(`DEVELOPMENT_TEAM=${e.iosTeamId}`)}catch(W){throw C.error(`Signing setup failed: ${W.message}`),W}}else U.push("-allowProvisioningUpdates"),e.iosTeamId&&U.push(`DEVELOPMENT_TEAM=${e.iosTeamId}`);a&&await a("archive"),C.info(v.blue(`Archive detected Identity: "${j}"`)),C.info(v.blue(`Archive detected UUID: "${Z}"`)),await Xn(["archive",c?"-workspace":"-project",c||p,"-scheme",_,"-configuration",b,"-archivePath",T,"-derivedDataPath",I,...y,...U],d,f,o,s);let k=jt(A.join(T,"Products","Applications"),[".app"]);for(let W of k){let q=ts(W);C.info(v.dim(`Validated iOS CFBundleVersion ${q} in ${A.basename(W)}`))}let K;Z?(H.isAppStore?K="app-store":H.isDevelopment?K="development":K="ad-hoc",C.info(v.blue(`Export method from profile: "${K}"`))):(K=e.distribution==="store"?"app-store":e.distribution==="internal"?"ad-hoc":"development",C.warn(v.yellow(`No profile UUID detected. Export method from distribution flag: "${K}"`)));let ae=e.iosExportMethod||K,ge=e.iosBundleIdentifier||At("ios"),z=A.join(d,"ExportOptions.plist"),G=`<?xml version="1.0" encoding="UTF-8"?>
1356
1356
  <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
1357
1357
  <plist version="1.0">
1358
1358
  <dict>
@@ -1365,71 +1365,71 @@ ${s.join(`
1365
1365
  <key>thinning</key>
1366
1366
  <string>&lt;none&gt;</string>
1367
1367
  ${e.iosTeamId?`<key>teamID</key><string>${e.iosTeamId}</string>`:""}
1368
- ${pe&&Z?`
1368
+ ${ge&&Z?`
1369
1369
  <key>provisioningProfiles</key>
1370
1370
  <dict>
1371
- <key>${pe}</key>
1371
+ <key>${ge}</key>
1372
1372
  <string>${Z}</string>
1373
1373
  </dict>`:""}
1374
1374
  </dict>
1375
1375
  </plist>`;if(S.writeFileSync(z,G),process.env[`${m.envPrefix}DEBUG`]&&C.info(v.magenta(`[${m.nameUpper}_DEBUG] ExportOptions.plist:
1376
- ${G}`)),a&&await a("export"),C.info(v.blue(`Exporting with Bundle ID: "${pe}"`)),C.info(v.blue(`Exporting with Method: "${ae}"`)),o){o(v.magenta(`
1376
+ ${G}`)),a&&await a("export"),C.info(v.blue(`Exporting with Bundle ID: "${ge}"`)),C.info(v.blue(`Exporting with Method: "${ae}"`)),o){o(v.magenta(`
1377
1377
  [DIAGNOSTIC] Checking available signing identities...
1378
1378
  `));try{let W=ie("security find-identity -v -p codesigning",{encoding:"utf-8"});o(v.magenta(`${W}
1379
1379
  `))}catch(W){o(v.red(`[DIAGNOSTIC] Failed to list identities: ${W.message}
1380
- `))}}await Fn(["-exportArchive","-archivePath",N,"-exportPath",$,"-exportOptionsPlist",z],c,f,o,s),a&&await a("validate");let ee=kt($,[".ipa"]);for(let W of ee)try{ie(`unzip -t "${W}"`,{stdio:"pipe"});let q=nc(W);o&&o(`[IPA VALID] ${A.basename(W)} \u2014 archive integrity OK
1380
+ `))}}await Xn(["-exportArchive","-archivePath",T,"-exportPath",$,"-exportOptionsPlist",z],d,f,o,s),a&&await a("validate");let te=jt($,[".ipa"]);for(let W of te)try{ie(`unzip -t "${W}"`,{stdio:"pipe"});let q=Rd(W);o&&o(`[IPA VALID] ${A.basename(W)} \u2014 archive integrity OK
1381
1381
  `),o&&o(`[IPA VALID] CFBundleVersion ${q}
1382
1382
  `)}catch(q){let de=`IPA validation failed for ${A.basename(W)}: ${q.message||"archive may be corrupt"}`;throw o&&o(`[IPA CORRUPT] ${de}
1383
- `),new Error(de)}return ee}},pt=e=>{try{let t=A.join(process.cwd(),m.configFileName);if(S.existsSync(t)){let n=JSON.parse(S.readFileSync(t,"utf-8"));if(e==="android"&&n.android?.package)return n.android.package;if(e==="ios"&&n.ios?.bundleIdentifier)return n.ios.bundleIdentifier}if(e==="android"){let n=["android/app/build.gradle","app/build.gradle","build.gradle"];for(let i of n)if(S.existsSync(i)){let o=S.readFileSync(i,"utf-8").match(/applicationId\s+['"]([^'"]+)['"]/);if(o)return o[1]}}else{let n=A.resolve(process.cwd(),S.existsSync("ios")?"ios":"."),i=kt(n,["Info.plist"]).filter(s=>!s.includes("/Pods/")&&!s.includes("/build/")&&!s.includes("/DerivedData/"));i.sort((s,l)=>l.split("/").length-s.split("/").length);for(let s of i){let a=S.readFileSync(s,"utf-8").match(/<key>CFBundleIdentifier<\/key>\s*<string>([^<]+)<\/string>/);if(a&&!a[1].includes("$"))return a[1]}let r=kt(n,[".xcodeproj"]);if(r.length>0){let s=A.join(r[0],"project.pbxproj");if(S.existsSync(s)){let a=S.readFileSync(s,"utf-8").match(/PRODUCT_BUNDLE_IDENTIFIER\s*=\s*"?([^";\s]+)"?;/);if(a)return a[1]}}let o=["app.json","app.config.json","app.config.js","app.config.ts"];for(let s of o)if(S.existsSync(s)){let a=S.readFileSync(s,"utf-8").match(/"bundleIdentifier":\s*"([^"]+)"/);if(a)return a[1]}}}catch{return null}return null},ac=()=>{try{return ie("emulator -version",{stdio:"ignore"}),"emulator"}catch{let t=$e.homedir(),n=[A.join(t,"Library/Android/sdk/emulator/emulator"),A.join(t,"Android/Sdk/emulator/emulator"),"/usr/local/lib/android/sdk/emulator/emulator"];for(let i of n)if(S.existsSync(i))return i}return"emulator"},lc=async(e,t)=>{let n=Bn();try{if(ie("adb devices").toString().split(`
1384
- `).slice(1).map(s=>s.trim()).filter(s=>s.length>0&&!s.startsWith("*")).map(s=>s.split(" ")[0]).length===0){C.warn(v.yellow("No Android devices or emulators found."));let s=ac(),l=[];try{l=ie(`${s} -list-avds`).toString().split(`
1385
- `).filter(a=>a.trim().length>0)}catch{}if(l.length>0){let a=await Ki({message:"Select an emulator to launch:",options:l.map(d=>({value:d,label:d}))});if(Hn(a))return;n.start(`Launching emulator ${a}...`),Ho(s,["-avd",a],{detached:!0,stdio:"ignore"}).unref();let c=0,u=!1;for(;c<60;){try{if(ie("adb shell getprop sys.boot_completed",{stdio:"pipe"}).toString().trim()==="1"){u=!0;break}}catch{}await new Promise(d=>setTimeout(d,2e3)),c++}if(!u)throw n.stop("Emulator launch timed out."),new Error("Emulator launch timed out. Please try launching it manually.");n.stop("Emulator launched.")}else throw new Error("No devices found and no emulators available to launch. (Make sure Android SDK is installed)")}n.start("Installing APK on device..."),await ut("adb",["install","-r",e],process.cwd(),{},t),n.stop("Installation complete.");let o=pt("android");if(o){C.info(v.blue(`\u{1F680} Launching ${o}...`));try{ie(`adb shell dumpsys package ${o}`).toString().split(`
1386
- `).find(a=>a.includes("android.intent.action.MAIN")&&a.includes("android.intent.category.LAUNCHER"))?ie(`adb shell monkey -p ${o} -c android.intent.category.LAUNCHER 1`,{stdio:"ignore"}):ie(`adb shell monkey -p ${o} -c android.intent.category.LAUNCHER 1`,{stdio:"ignore"})}catch{C.warn("Could not auto-launch app. You may need to open it manually.")}}}catch(i){n.stop("Installation failed."),C.error(v.red(`Failed to install APK: ${i.message}`))}},dc=async(e,t,n)=>{let i=Bn();try{if(!ie("xcrun simctl list devices booted").toString().includes("(Booted)")){C.warn(v.yellow("No iOS Simulator is currently booted."));let o=ie("xcrun simctl list devices --json").toString(),s=JSON.parse(o).devices,l=[];Object.keys(s).forEach(d=>{s[d].forEach(p=>{p.isAvailable&&l.push({...p,runtime:d})})});let a=await Ki({message:"Select a simulator to launch:",options:l.map(d=>({value:d.udid,label:`${d.name} (${d.runtime.split(".").pop()})`}))});if(Hn(a))return;i.start(`Booting ${a}...`),ie(`xcrun simctl boot ${a}`),ie(`open -a Simulator --args -CurrentDeviceUDID ${a}`);let c=0,u=!1;for(;c<30;){try{if(ie("xcrun simctl list devices booted").toString().includes(a)){u=!0;break}}catch{}await new Promise(d=>setTimeout(d,2e3)),c++}if(!u)throw i.stop("Simulator boot timed out."),new Error("Simulator boot timed out.");i.stop("Simulator booted.")}i.start("Installing on iOS Simulator..."),Jo(e),Yo(e),await ut("xcrun",["simctl","install","booted",e],process.cwd(),{},n),i.stop("Installation complete."),C.info(v.blue(`\u{1F680} Launching ${t}...`)),await ut("xcrun",["simctl","launch","booted",t],process.cwd(),{},n)}catch(r){i.stop("Installation failed."),C.error(v.red(`Failed to install on Simulator: ${r.message}`))}},cc=async(e,t,n)=>{let i=Bn();i.start("Scanning for connected iOS devices...");try{let r=ie("xcrun devicectl list devices --json-output -").toString(),s=(JSON.parse(r).result?.devices||[]).filter(a=>a.connectionProperties?.transportType==="wired"||a.connectionProperties?.transportType==="localNetwork");if(s.length===0)throw i.stop("No connected iOS devices found."),new Error("Please connect your iPhone via USB or ensure it is on the same Wi-Fi for wireless debugging.");let l=s[0].identifier;if(s.length>1){i.stop();let a=await Ki({message:"Select a device to install on:",options:s.map(c=>({value:c.identifier,label:`${c.deviceProperties?.name||c.name||c.model?.name} (${c.model?.name||"iPhone"}) - ${c.identifier}`}))});if(Hn(a))return;l=a,i.start(`Installing on ${l}...`)}else i.message(`Installing on ${s[0].model.name}...`);await ut("xcrun",["devicectl","device","install","app","--device",l,e],process.cwd(),{},n),i.stop("Installation complete."),C.info(v.blue(`\u{1F680} Launching ${t}...`)),await ut("xcrun",["devicectl","device","launch","app","--device",l,t],process.cwd(),{},n)}catch(r){i.stop("Installation failed."),C.error(v.red(`Failed to install on device: ${r.message}`)),C.info(v.dim('Make sure your device is unlocked and "Developer Mode" is enabled in Settings -> Privacy & Security.'))}};import L from"fs";import Wt from"os";import Y from"path";import{spawn as rs,spawnSync as Je}from"child_process";import{randomUUID as uc}from"crypto";import{pipeline as pc}from"stream/promises";import{isCancel as Xi,log as B,select as os,spinner as un,text as fc}from"@clack/prompts";import cn from"axios";import K from"chalk";import jn from"adm-zip";async function ss(e){if(e.localRunner){let n=await Sc(e);process.exitCode=n?n.exitCode:1;return}if(e.local){let n=await bc(e);n&&(process.exitCode=n.exitCode);return}let t=await tr(e);if(t&&(B.success(K.green(`Maestro run ${t.status||"queued"}: ${t.testRunId}`)),t.launchDeferredReason&&B.warn(K.yellow(t.launchDeferredReason)),t.dashboardUrl&&B.info(K.dim("View test run: ")+K.white.underline(t.dashboardUrl)),e.wait)){let n=await Ac(e,t);n&&(process.exitCode=n.status==="passed"?0:1)}}var mc=new Set(["passed","failed","cancelled","interrupted"]),Xo=Number(process.env.MACH_FLOW_UPLOAD_MAX_ATTEMPTS||4),gc=Number(process.env.MACH_FLOW_UPLOAD_TIMEOUT_MS||12e4),as=process.env.MACH_MAESTRO_FAST_FAIL_RETRY==="1";function er(e){let t=Array.isArray(e)?e:e?[e]:[];return[...new Set(t.flatMap(n=>String(n||"").split(",")).map(n=>n.trim()).filter(Boolean))]}function hc(e){let t=er(e);if(t.length===0)return;let n={};for(let i of t){let r=process.env[i];r!==void 0&&(n[i]=r)}return Object.keys(n).length>0?n:void 0}function yc(e){let t={};for(let[i,r]of Object.entries(process.env))i.startsWith("MAESTRO_TEST_")&&r!==void 0&&(t[i]=r);let n=er(e);for(let i of n){let r=process.env[i];r!==void 0&&(t[i]=r)}return t}async function Sc(e){let t=e.projectId,n=e.testRunId,i=e.runnerToken||process.env.MACH_RUNNER_TOKEN||process.env.MACH_TOKEN,r=(process.env.MACH_API_URL||Bt).replace(/\/$/,""),o=L.mkdtempSync(Y.join(Wt.tmpdir(),"mach-maestro-runner-")),s=Y.join(o,"mach-maestro-output"),l=Y.join(o,"runner.log");if(L.mkdirSync(s,{recursive:!0}),!t||!n||!i)return B.error(K.red("--local-runner requires --project-id, --test-run-id, and a runner token.")),{status:"failed",exitCode:1,attempts:0,flows:".maestro",platform:e.platform};let a=null,c=null,u=null,d=f=>{L.appendFileSync(l,`${f}${f.endsWith(`
1383
+ `),new Error(de)}return te}},At=e=>{try{let t=A.join(process.cwd(),m.configFileName);if(S.existsSync(t)){let n=JSON.parse(S.readFileSync(t,"utf-8"));if(e==="android"&&n.android?.package)return n.android.package;if(e==="ios"&&n.ios?.bundleIdentifier)return n.ios.bundleIdentifier}if(e==="android"){let n=["android/app/build.gradle","app/build.gradle","build.gradle"];for(let i of n)if(S.existsSync(i)){let o=S.readFileSync(i,"utf-8").match(/applicationId\s+['"]([^'"]+)['"]/);if(o)return o[1]}}else{let n=A.resolve(process.cwd(),S.existsSync("ios")?"ios":"."),i=jt(n,["Info.plist"]).filter(s=>!s.includes("/Pods/")&&!s.includes("/build/")&&!s.includes("/DerivedData/"));i.sort((s,l)=>l.split("/").length-s.split("/").length);for(let s of i){let a=S.readFileSync(s,"utf-8").match(/<key>CFBundleIdentifier<\/key>\s*<string>([^<]+)<\/string>/);if(a&&!a[1].includes("$"))return a[1]}let r=jt(n,[".xcodeproj"]);if(r.length>0){let s=A.join(r[0],"project.pbxproj");if(S.existsSync(s)){let a=S.readFileSync(s,"utf-8").match(/PRODUCT_BUNDLE_IDENTIFIER\s*=\s*"?([^";\s]+)"?;/);if(a)return a[1]}}let o=["app.json","app.config.json","app.config.js","app.config.ts"];for(let s of o)if(S.existsSync(s)){let a=S.readFileSync(s,"utf-8").match(/"bundleIdentifier":\s*"([^"]+)"/);if(a)return a[1]}}}catch{return null}return null},kd=()=>{try{return ie("emulator -version",{stdio:"ignore"}),"emulator"}catch{let t=Re.homedir(),n=[A.join(t,"Library/Android/sdk/emulator/emulator"),A.join(t,"Android/Sdk/emulator/emulator"),"/usr/local/lib/android/sdk/emulator/emulator"];for(let i of n)if(S.existsSync(i))return i}return"emulator"},Td=async(e,t)=>{let n=Zn();try{if(ie("adb devices").toString().split(`
1384
+ `).slice(1).map(s=>s.trim()).filter(s=>s.length>0&&!s.startsWith("*")).map(s=>s.split(" ")[0]).length===0){C.warn(v.yellow("No Android devices or emulators found."));let s=kd(),l=[];try{l=ie(`${s} -list-avds`).toString().split(`
1385
+ `).filter(a=>a.trim().length>0)}catch{}if(l.length>0){let a=await nr({message:"Select an emulator to launch:",options:l.map(c=>({value:c,label:c}))});if(Qn(a))return;n.start(`Launching emulator ${a}...`),ns(s,["-avd",a],{detached:!0,stdio:"ignore"}).unref();let d=0,u=!1;for(;d<60;){try{if(ie("adb shell getprop sys.boot_completed",{stdio:"pipe"}).toString().trim()==="1"){u=!0;break}}catch{}await new Promise(c=>setTimeout(c,2e3)),d++}if(!u)throw n.stop("Emulator launch timed out."),new Error("Emulator launch timed out. Please try launching it manually.");n.stop("Emulator launched.")}else throw new Error("No devices found and no emulators available to launch. (Make sure Android SDK is installed)")}n.start("Installing APK on device..."),await bt("adb",["install","-r",e],process.cwd(),{},t),n.stop("Installation complete.");let o=At("android");if(o){C.info(v.blue(`\u{1F680} Launching ${o}...`));try{ie(`adb shell dumpsys package ${o}`).toString().split(`
1386
+ `).find(a=>a.includes("android.intent.action.MAIN")&&a.includes("android.intent.category.LAUNCHER"))?ie(`adb shell monkey -p ${o} -c android.intent.category.LAUNCHER 1`,{stdio:"ignore"}):ie(`adb shell monkey -p ${o} -c android.intent.category.LAUNCHER 1`,{stdio:"ignore"})}catch{C.warn("Could not auto-launch app. You may need to open it manually.")}}}catch(i){n.stop("Installation failed."),C.error(v.red(`Failed to install APK: ${i.message}`))}},Nd=async(e,t,n)=>{let i=Zn();try{if(!ie("xcrun simctl list devices booted").toString().includes("(Booted)")){C.warn(v.yellow("No iOS Simulator is currently booted."));let o=ie("xcrun simctl list devices --json").toString(),s=JSON.parse(o).devices,l=[];Object.keys(s).forEach(c=>{s[c].forEach(p=>{p.isAvailable&&l.push({...p,runtime:c})})});let a=await nr({message:"Select a simulator to launch:",options:l.map(c=>({value:c.udid,label:`${c.name} (${c.runtime.split(".").pop()})`}))});if(Qn(a))return;i.start(`Booting ${a}...`),ie(`xcrun simctl boot ${a}`),ie(`open -a Simulator --args -CurrentDeviceUDID ${a}`);let d=0,u=!1;for(;d<30;){try{if(ie("xcrun simctl list devices booted").toString().includes(a)){u=!0;break}}catch{}await new Promise(c=>setTimeout(c,2e3)),d++}if(!u)throw i.stop("Simulator boot timed out."),new Error("Simulator boot timed out.");i.stop("Simulator booted.")}i.start("Installing on iOS Simulator..."),cs(e),ds(e),await bt("xcrun",["simctl","install","booted",e],process.cwd(),{},n),i.stop("Installation complete."),C.info(v.blue(`\u{1F680} Launching ${t}...`)),await bt("xcrun",["simctl","launch","booted",t],process.cwd(),{},n)}catch(r){i.stop("Installation failed."),C.error(v.red(`Failed to install on Simulator: ${r.message}`))}},xd=async(e,t,n)=>{let i=Zn();i.start("Scanning for connected iOS devices...");try{let r=ie("xcrun devicectl list devices --json-output -").toString(),s=(JSON.parse(r).result?.devices||[]).filter(a=>a.connectionProperties?.transportType==="wired"||a.connectionProperties?.transportType==="localNetwork");if(s.length===0)throw i.stop("No connected iOS devices found."),new Error("Please connect your iPhone via USB or ensure it is on the same Wi-Fi for wireless debugging.");let l=s[0].identifier;if(s.length>1){i.stop();let a=await nr({message:"Select a device to install on:",options:s.map(d=>({value:d.identifier,label:`${d.deviceProperties?.name||d.name||d.model?.name} (${d.model?.name||"iPhone"}) - ${d.identifier}`}))});if(Qn(a))return;l=a,i.start(`Installing on ${l}...`)}else i.message(`Installing on ${s[0].model.name}...`);await bt("xcrun",["devicectl","device","install","app","--device",l,e],process.cwd(),{},n),i.stop("Installation complete."),C.info(v.blue(`\u{1F680} Launching ${t}...`)),await bt("xcrun",["devicectl","device","launch","app","--device",l,t],process.cwd(),{},n)}catch(r){i.stop("Installation failed."),C.error(v.red(`Failed to install on device: ${r.message}`)),C.info(v.dim('Make sure your device is unlocked and "Developer Mode" is enabled in Settings -> Privacy & Security.'))}};import L from"fs";import tn from"os";import Y from"path";import{spawn as bs,spawnSync as Xe}from"child_process";import{randomUUID as Ld}from"crypto";import{pipeline as Md}from"stream/promises";import{isCancel as cr,log as B,select as As,spinner as En,text as Ud}from"@clack/prompts";import An from"axios";import V from"chalk";import ei from"adm-zip";async function Es(e){if(e.localRunner){let n=await Gd(e);process.exitCode=n?n.exitCode:1;return}if(e.local){let n=await Vd(e);n&&(process.exitCode=n.exitCode);return}let t=await fr(e);if(t&&(B.success(V.green(`Maestro run ${t.status||"queued"}: ${t.testRunId}`)),t.launchDeferredReason&&B.warn(V.yellow(t.launchDeferredReason)),t.dashboardUrl&&B.info(V.dim("View test run: ")+V.white.underline(t.dashboardUrl)),e.wait)){let n=await Kd(e,t);n&&(process.exitCode=n.status==="passed"?0:1)}}var Fd=new Set(["passed","failed","cancelled","interrupted"]),ps=Number(process.env.MACH_FLOW_UPLOAD_MAX_ATTEMPTS||4),Bd=Number(process.env.MACH_FLOW_UPLOAD_TIMEOUT_MS||12e4),Is=process.env.MACH_MAESTRO_FAST_FAIL_RETRY==="1";function pr(e){let t=Array.isArray(e)?e:e?[e]:[];return[...new Set(t.flatMap(n=>String(n||"").split(",")).map(n=>n.trim()).filter(Boolean))]}function jd(e){let t=pr(e);if(t.length===0)return;let n={};for(let i of t){let r=process.env[i];r!==void 0&&(n[i]=r)}return Object.keys(n).length>0?n:void 0}function Hd(e){let t={};for(let[i,r]of Object.entries(process.env))i.startsWith("MAESTRO_TEST_")&&r!==void 0&&(t[i]=r);let n=pr(e);for(let i of n){let r=process.env[i];r!==void 0&&(t[i]=r)}return t}async function Gd(e){let t=e.projectId,n=e.testRunId,i=e.runnerToken||process.env.MACH_RUNNER_TOKEN||process.env.MACH_TOKEN,r=(process.env.MACH_API_URL||ft).replace(/\/$/,""),o=L.mkdtempSync(Y.join(tn.tmpdir(),"mach-maestro-runner-")),s=Y.join(o,"mach-maestro-output"),l=Y.join(o,"runner.log");if(L.mkdirSync(s,{recursive:!0}),!t||!n||!i)return B.error(V.red("--local-runner requires --project-id, --test-run-id, and a runner token.")),{status:"failed",exitCode:1,attempts:0,flows:".maestro",platform:e.platform};let a=null,d=null,u=null,c=f=>{L.appendFileSync(l,`${f}${f.endsWith(`
1387
1387
  `)?"":`
1388
- `}`)},p=async(f,g)=>{try{await cn.post(`${r}/internal/tests/${encodeURIComponent(n)}/runner`,{projectId:t,runnerToken:i,status:f,error:g,logPreview:Dc(l),junitUrl:a?.urls?.junitDownloadUrl,logsUrl:a?.urls?.logsDownloadUrl,artifactsUrl:a?.urls?.artifactsDownloadUrl})}catch(y){d(`[WARN] Could not post runner update: ${y.message||y}`)}};try{d(`Mach Maestro local runner starting for ${n}`);let f=await cn.post(`${r}/internal/tests/${encodeURIComponent(n)}/runner-payload`,{projectId:t,runnerToken:i});if(f.data?.status!=="success"||!f.data?.payload)throw new Error(f.data?.message||"Runner payload was not returned.");a=f.data.payload;let g=Object.keys(a.env||{});d(`Using Maestro env vars: ${g.length>0?g.join(", "):"none"}`);let y={...process.env,...a.env||{}},E=Pc(a.env);E.length>0&&d(`Passing Maestro env vars to test command: ${g.sort().join(", ")}`),await p("running");let _=a.platform==="android"?"app.apk":"app.zip",b=Y.join(o,_),x=Y.join(o,"source.zip"),I=Y.join(o,"source");L.mkdirSync(I,{recursive:!0}),d("Downloading app artifact..."),await Zi(a.artifactUrl,b),d(`Downloaded app artifact: ${_} (${Qo(L.statSync(b).size)})`),d("Downloading Maestro source..."),await Zi(a.urls.sourceUrl,x),d(`Downloaded Maestro source: source.zip (${Qo(L.statSync(x).size)})`),new jn(x).extractAllTo(I,!0);let F=Oc(I,a.flowPath||".maestro");if(!L.existsSync(F))throw new Error(`Maestro flow path not found: ${a.flowPath||".maestro"}`);if(d(`Resolved Maestro flow path: ${Y.relative(I,F)||"."}`),a.platform==="ios"){await Lc(a.device||"iphone_15",l);let O=Mc(b,o),h=fs(O,l);d(`Resolved iOS app bundle: ${O}`),d(`Resolved iOS bundle id: ${h||"unknown"}`),Fc(O,l),Qi("xcrun",["simctl","install","booted",O],l),h&&(u={platform:a.platform,appId:h}),h&&ft("xcrun",["simctl","get_app_container","booted",h,"app"],l),Ji(s,l,"ios-before-maestro.png"),a.record&&(c=Uc(s,l))}else{let O=jc(b,l),h=Hc(a.device,l),M=h?["-s",h]:[];d(`Resolved Android application id: ${O||"unknown"}`),Qi("adb",[...M,"install","-r",b],l),O&&(u={platform:a.platform,appId:O,deviceId:h||void 0})}let D=Math.max(0,Math.min(10,Number(a.retries??1)))+1,w=Y.join(s,"report.xml"),N=Tc(l);if(!N)throw new Error("Maestro CLI not found on this runner. Install Maestro or set MAESTRO_BIN to the full maestro path.");let $=1;for(let O=1;O<=D;O+=1){d(`Running Maestro attempt ${O}/${D}...`);let h=["test","--platform",a.platform,...E,F,"--format","junit","--output",w,"--test-output-dir",s];if(as&&O<D?$=(await ps(N,h,{logPath:l,env:y,fastFailOnFlowFailure:!0})).exitCode:$=ft(N,h,l,void 0,y),$===0)break}return a.platform==="ios"&&Ji(s,l,"ios-after-maestro.png"),await es(c,l),c=null,await is(a.urls,o,s,l),$===0?(await p("passed"),B.success(K.green(`Managed Maestro run passed: ${n}`)),{status:"passed",exitCode:0,attempts:D,flows:a.flowPath,platform:a.platform}):(await p("failed",`Maestro exited with code ${$}`),B.error(K.red(`Managed Maestro run failed with exit code ${$}`)),{status:"failed",exitCode:$,attempts:D,flows:a.flowPath,platform:a.platform})}catch(f){let g=f.message||String(f);return d(`MACH_MAESTRO_RUN_FAILED: ${g}`),a?.platform==="ios"&&Ji(s,l,"ios-after-failure.png"),await es(c,l),a?.urls&&await is(a.urls,o,s,l),await p("failed",g),B.error(K.red(`Managed Maestro runner failed: ${g}`)),{status:"failed",exitCode:1,attempts:0,flows:a?.flowPath||".maestro",platform:a?.platform||e.platform}}finally{Bc(u,l)}}async function bc(e){let t=e.maestroFlows||".maestro",n=ds(e.maestroRetries);if(n===null)return null;let i=Y.resolve(t);if(!L.existsSync(i))return B.error(K.red(`Maestro flows not found: ${t}`)),{status:"failed",exitCode:1,attempts:0,flows:t,platform:e.platform};let r=await $c(e);if(r?.url){if(!await Rc(r))return{status:"failed",exitCode:1,attempts:0,flows:t,platform:r.platform||e.platform}}else if(e.buildId||e.buildUrl||e.artifactUrl||e.latest)return{status:"failed",exitCode:1,attempts:0,flows:t,platform:e.platform};e.maestroRecord&&B.warn(K.yellow("--maestro-record is managed-runner only and is ignored in --local mode."));let o=r?.platform||e.platform,s=["test"];o&&s.push("--platform",o),e.maestroDevice&&s.push("--device",String(e.maestroDevice));let l=yc(e.maestroEnv),a=Object.keys(l);if(a.length>0){B.info(K.dim(`Passing Maestro env vars to local run: ${a.join(", ")}`));for(let[f,g]of Object.entries(l))s.push("-e",`${f}=${g}`)}s.push(t);let c=n+1,u=1;for(let f=1;f<=c;f+=1){if(B.info(K.dim(`Running local Maestro attempt ${f}/${c}...`)),as&&f<c){let g=await ps("maestro",s,{cwd:process.cwd(),env:process.env,echoOutput:!0,fastFailOnFlowFailure:!0});if(g.error){let y=g.error.message||"Failed to run Maestro";B.error(K.red(`Local Maestro failed to start: ${y}`)),B.info(K.dim("Install Maestro locally, then retry: https://maestro.mobile.dev/getting-started/installing-maestro")),u=1;break}u=g.exitCode}else{let g=Je("maestro",s,{cwd:process.cwd(),stdio:"inherit",env:process.env});if(g.error){let y=g.error.message||"Failed to run Maestro";B.error(K.red(`Local Maestro failed to start: ${y}`)),B.info(K.dim("Install Maestro locally, then retry: https://maestro.mobile.dev/getting-started/installing-maestro")),u=1;break}u=typeof g.status=="number"?g.status:1}if(u===0)break}let d=u===0?"passed":"failed",p={status:d,exitCode:u,attempts:c,flows:t,platform:o};return Yc(e,p),d==="passed"?B.success(K.green("Local Maestro run passed")):B.error(K.red(`Local Maestro run failed with exit code ${u}`)),p}async function tr(e){let t=_e(`./${m.configFileName}`),n=e.projectId||t?.projectId,i=String(e.profile||e.buildProfile||"production").toLowerCase();if(!n)return B.error(`No projectId found. Run \`${m.nameLower} link\` first or pass an internal project id.`),null;let r=e.platform;if(!r&&e.latest){let d=await os({message:"Select platform for the latest build:",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"}]});if(Xi(d))return null;r=d}let o=await _c(e);if(!o)return null;if(o.kind==="latest"&&!r)return B.error("Pass --platform when using --latest."),null;if(o.kind==="artifact-url"&&!r)return B.error("Pass --platform when using --artifact-url."),null;let s=ds(e.maestroRetries);if(s===null)return null;let l=er(e.maestroEnv),a=hc(e.maestroEnv);!e.quiet&&l.length>0&&B.info(K.dim(`Forwarding Maestro env vars by name: ${l.join(", ")}`));let c=await Ec(e,n);if(c===null)return null;let u=un();e.quiet||u.start("Queuing Maestro run...");try{let d=await T.post("/tests/maestro",{projectId:n,platform:r,profile:i,latest:o.kind==="latest",buildId:o.kind==="build-id"?o.value:e.buildId,buildUrl:o.kind==="build-url"?o.value:e.buildUrl,artifactUrl:o.kind==="artifact-url"?o.value:e.artifactUrl,flowSourceKey:c,flows:e.maestroFlows||".maestro",device:e.maestroDevice||(r==="ios"?"iphone_15":"pixel_6"),retries:s,record:!!e.maestroRecord,...l.length>0?{envNames:l}:{},...a?{env:a}:{}});if(d.data.status!=="success")throw new Error(d.data.message||"Failed to queue Maestro run");let p=d.data.testRun,f={testRunId:p.testRunId,status:p.status,projectId:n,buildId:p.buildId,platform:p.platform,dashboardUrl:p.dashboardUrl||`${nt}/tests/${p.testRunId}`,launchDeferredReason:p.launchDeferredReason};return gs(e,f),e.quiet||u.stop("Maestro run queued"),f}catch(d){e.quiet||u.stop("Could not queue Maestro run");let p=d.response?.data?.message||d.message||"Unknown error";return B.error(K.red(`Maestro queue failed: ${p}`)),null}}async function Ac(e,t){let n=Zo(e.waitTimeout,60,"--wait-timeout"),i=Zo(e.waitInterval,15,"--wait-interval");if(n===null||i===null)return null;let r=n*60*1e3,o=Math.max(5,i)*1e3,s=Date.now(),l=t.status||"queued";for(B.info(K.dim(`Waiting for Maestro run ${t.testRunId} to finish...`));Date.now()-s<=r;){let a=await wc(t.projectId,t.testRunId);if(!a)return null;if(a.status&&a.status!==l&&(l=a.status,B.info(K.dim(`Maestro status: ${l}`))),mc.has(String(a.status)))return gs(e,a),a.status==="passed"?B.success(K.green(`Maestro run passed: ${a.testRunId}`)):(B.error(K.red(`Maestro run ${a.status}: ${a.testRunId}`)),a.error&&B.error(K.red(String(a.error)))),a;await nr(o)}return B.error(K.red(`Timed out waiting for Maestro run ${t.testRunId} after ${n} minute(s).`)),{...t,status:"timeout"}}async function Ec(e,t){if(e.maestroUseBuildSource)return;let n=e.maestroFlows||".maestro",i=Y.resolve(n);if(!L.existsSync(i))return e.maestroFlows?(B.error(K.red(`Maestro flows not found: ${n}`)),null):void 0;let r=Y.relative(process.cwd(),i);if(!r||r.startsWith("..")||Y.isAbsolute(r))return B.error(K.red("Managed Maestro flow uploads must be inside the current project directory.")),null;let o=un();e.quiet||o.start(`Uploading Maestro flows from ${r}...`);try{let s=await T.post("/tests/maestro/source-upload-url",{projectId:t,uploadId:uc()});if(s.data.status!=="success"||!s.data.uploadUrl||!s.data.key)throw new Error(s.data.message||"Failed to get Maestro flow upload URL");let l=new jn;if(L.statSync(i).isDirectory())l.addLocalFolder(i,r);else{let u=Y.dirname(r);l.addLocalFile(i,u==="."?void 0:u,Y.basename(r))}let c=l.toBuffer();return await Ic(s.data.uploadUrl,c,"application/zip","Maestro flow upload",u=>{e.quiet||o.message(u)}),e.quiet||o.stop("Maestro flows uploaded"),s.data.key}catch(s){e.quiet||o.stop("Could not upload Maestro flows");let l=s.response?.data?.message||s.message||"Unknown error";return B.error(K.red(`Maestro flow upload failed: ${l}`)),null}}function ls(e){let t=e.response?.status,n=e.code||"",i=e.message||"";return t&&![408,409,425,429].includes(t)&&t<500?!1:/ECONNRESET|ETIMEDOUT|EAI_AGAIN|ENOTFOUND|ECONNABORTED|socket hang up|network|timeout/i.test(`${n} ${i}`)||!t}async function Ic(e,t,n,i,r){let o;for(let s=1;s<=Xo;s+=1)try{await cn.put(e,t,{headers:{"Content-Type":n},maxBodyLength:1/0,maxContentLength:1/0,timeout:gc});return}catch(l){if(o=l,!ls(l)||s>=Xo)break;let a=Math.min(2e4,2e3*s),c=l.code||l.response?.status||l.message||"network error";r?.(`${i} attempt ${s} failed (${c}), retrying...`),await nr(a)}throw o}async function wc(e,t){try{let n=await T.get(`/tests/${encodeURIComponent(t)}`,{params:{projectId:e}});if(n.data.status!=="success")throw new Error(n.data.message||"Failed to fetch Maestro run");let i=n.data.testRun;return{testRunId:i.testRunId,status:i.status,projectId:e,buildId:i.buildId,platform:i.platform,dashboardUrl:i.dashboardUrl||`${nt}/tests/${i.testRunId}`,launchDeferredReason:i.launchDeferredReason,...i.error?{error:i.error}:{}}}catch(n){let i=n.response?.data?.message||n.message||"Unknown error";return B.error(K.red(`Could not fetch Maestro run status: ${i}`)),null}}async function _c(e){if(e.buildId)return{kind:"build-id",value:e.buildId};if(e.buildUrl)return{kind:"build-url",value:e.buildUrl};if(e.artifactUrl)return{kind:"artifact-url",value:e.artifactUrl};if(e.latest)return{kind:"latest"};let t=await os({message:"Select app artifact source for Maestro:",options:[{value:"latest",label:"Latest successful build"},{value:"build-id",label:"Build ID"},{value:"build-url",label:`${m.name} build URL`},{value:"artifact-url",label:"Direct artifact URL"}]});if(Xi(t))return null;if(t==="latest")return{kind:"latest"};let n=await fc({message:t==="build-id"?"Enter build ID:":t==="build-url"?`Enter ${m.name} build URL:`:"Enter artifact URL:",validate:i=>{let r=String(i||"").trim();if(!r)return"Value is required";if((t==="build-url"||t==="artifact-url")&&!r.startsWith("http"))return"Must be a URL"}});return Xi(n)?null:{kind:t,value:String(n).trim()}}function Zo(e,t,n){if(e==null||e==="")return t;let i=Number(e);return!Number.isFinite(i)||i<=0?(B.error(`${n} must be a positive number.`),null):i}function nr(e){return new Promise(t=>setTimeout(t,e))}function ds(e){if(e==null||e==="")return 1;let t=Number(e);return!Number.isInteger(t)||t<0||t>10?(B.error("--maestro-retries must be an integer between 0 and 10."),null):t}async function $c(e){if(e.artifactUrl)return{url:e.artifactUrl,platform:e.platform||rr(e.artifactUrl),name:ms(e.artifactUrl)};let t=e.buildId||Jc(e.buildUrl);return t?cs(t,e.platform):e.latest?vc(e):null}async function cs(e,t){let n=un();n.start(`Resolving build ${e}...`);try{let i=await T.get(`/public/builds/${encodeURIComponent(e)}`);if(i.data.status!=="success")throw new Error(i.data.message||"Build lookup failed");let r=t||i.data.build?.platform,o=Wc(i.data.artifacts||[],r);if(!o?.downloadUrl)throw new Error("No installable APK or simulator app artifact found for this build.");return n.stop("Build artifact resolved"),{url:o.downloadUrl,platform:r||rr(o.name||o.downloadUrl),name:o.name}}catch(i){n.stop("Could not resolve build artifact");let r=i.response?.data?.message||i.message||"Unknown error";return B.error(K.red(`Local Maestro artifact lookup failed: ${r}`)),null}}async function vc(e){let t=_e(`./${m.configFileName}`),n=e.projectId||t?.projectId,i=String(e.profile||e.buildProfile||"production").toLowerCase();if(!n)return B.error(`No projectId found. Run \`${m.nameLower} link\` first or pass --build-id/--artifact-url.`),null;if(!e.platform)return B.error("Pass --platform when using --latest with --local."),null;let r=un();r.start("Resolving latest build...");try{let o=await T.get(`/builds/${n}`,{params:{limit:100}}),l=(Array.isArray(o.data.builds)?o.data.builds:[]).find(a=>a.status==="success"&&a.platform===e.platform&&String(a.buildProfile||a.buildType||"production").toLowerCase()===i);if(!l?.buildId)throw new Error(`No successful ${e.platform} build found for profile ${i}.`);return r.stop(`Latest build resolved: ${l.buildId}`),cs(l.buildId,e.platform)}catch(o){r.stop("Could not resolve latest build");let s=o.response?.data?.message||o.message||"Unknown error";return B.error(K.red(`Latest build lookup failed: ${s}`)),null}}async function Rc(e){let t=e.platform||rr(e.url);if(!t)return B.error(K.red("Could not infer platform for local install. Pass --platform android or --platform ios.")),!1;let n=L.mkdtempSync(Y.join(Wt.tmpdir(),"mach-maestro-")),i=e.name||ms(e.url)||(t==="android"?"app.apk":"app.zip"),r=Y.join(n,i),o=un();o.start(`Downloading ${i}...`);try{await Zi(e.url,r),o.stop("Artifact downloaded")}catch(s){return o.stop("Artifact download failed"),B.error(K.red(s.message||"Failed to download artifact")),!1}return t==="android"?Vc(r):zc(r,n)}async function Zi(e,t){let n=await cn.get(e,{responseType:"stream"});await pc(n.data,L.createWriteStream(t))}function Dc(e,t=12e3){try{return L.readFileSync(e,"utf-8").slice(-t)}catch{return""}}function Qo(e){if(!Number.isFinite(e)||e<0)return"unknown size";if(e<1024)return`${e} B`;let t=["KB","MB","GB"],n=e/1024,i=t[0];for(let r=1;n>=1024&&r<t.length;r+=1)n/=1024,i=t[r];return`${n.toFixed(n>=10?1:2)} ${i}`}function Pc(e){return Object.entries(e||{}).filter(([t,n])=>!!t&&n!==void 0).sort(([t],[n])=>t.localeCompare(n)).flatMap(([t,n])=>["-e",`${t}=${n}`])}function Oc(e,t){let n=Y.resolve(e,t||".maestro"),i=Y.relative(e,n);if(i.startsWith("..")||Y.isAbsolute(i))throw new Error("Maestro flow path must stay inside the build source.");return n}function us(e,t){let n=[e];for(let i=0;i<t.length;i+=1){let r=t[i],o=t[i-1];(o==="-e"||o==="--env")&&/^[A-Za-z_][A-Za-z0-9_]*=/.test(r)?n.push(`${r.slice(0,r.indexOf("="))}=<redacted>`):n.push(r)}return n.join(" ")}function Cc(e){return/\[Failed\]\s+/.test(e)}function kc(e){if(!e.killed){try{e.kill("SIGTERM")}catch{}setTimeout(()=>{try{e.kill("SIGKILL")}catch{}},5e3).unref()}}function ps(e,t,n={}){let{cwd:i,env:r=process.env,logPath:o,echoOutput:s=!1,fastFailOnFlowFailure:l=!1}=n;return o&&L.appendFileSync(o,`
1389
- $ ${us(e,t)}
1390
- `),new Promise(a=>{let c=!1,u=!1,d="",p=y=>{u||(u=!0,a(y))},f=rs(e,t,{cwd:i,env:r,stdio:["ignore","pipe","pipe"]}),g=y=>{d+=y;let E=d.split(/\r?\n/);d=E.pop()||"";for(let _ of E)if(l&&Cc(_)&&!c){c=!0;let b="Mach fast-fail: detected failed Maestro flow; stopping this attempt early to retry...";o&&L.appendFileSync(o,`
1388
+ `}`)},p=async(f,g)=>{try{await An.post(`${r}/internal/tests/${encodeURIComponent(n)}/runner`,{projectId:t,runnerToken:i,status:f,error:g,logPreview:Qd(l),junitUrl:a?.urls?.junitDownloadUrl,logsUrl:a?.urls?.logsDownloadUrl,artifactsUrl:a?.urls?.artifactsDownloadUrl})}catch(y){c(`[WARN] Could not post runner update: ${y.message||y}`)}};try{c(`Mach Maestro local runner starting for ${n}`);let f=await An.post(`${r}/internal/tests/${encodeURIComponent(n)}/runner-payload`,{projectId:t,runnerToken:i});if(f.data?.status!=="success"||!f.data?.payload)throw new Error(f.data?.message||"Runner payload was not returned.");a=f.data.payload;let g=Object.keys(a.env||{});c(`Using Maestro env vars: ${g.length>0?g.join(", "):"none"}`);let y={...process.env,...a.env||{}},E=eu(a.env);E.length>0&&c(`Passing Maestro env vars to test command: ${g.sort().join(", ")}`),await p("running");let _=a.platform==="android"?"app.apk":"app.zip",b=Y.join(o,_),x=Y.join(o,"source.zip"),I=Y.join(o,"source");L.mkdirSync(I,{recursive:!0}),c("Downloading app artifact..."),await dr(a.artifactUrl,b),c(`Downloaded app artifact: ${_} (${ms(L.statSync(b).size)})`),c("Downloading Maestro source..."),await dr(a.urls.sourceUrl,x),c(`Downloaded Maestro source: source.zip (${ms(L.statSync(x).size)})`),new ei(x).extractAllTo(I,!0);let F=tu(I,a.flowPath||".maestro");if(!L.existsSync(F))throw new Error(`Maestro flow path not found: ${a.flowPath||".maestro"}`);if(c(`Resolved Maestro flow path: ${Y.relative(I,F)||"."}`),a.platform==="ios"){await au(a.device||"iphone_15",l);let O=lu(b,o),h=Ps(O,l);c(`Resolved iOS app bundle: ${O}`),c(`Resolved iOS bundle id: ${h||"unknown"}`),du(O,l),ur("xcrun",["simctl","install","booted",O],l),h&&(u={platform:a.platform,appId:h}),h&&Et("xcrun",["simctl","get_app_container","booted",h,"app"],l),sr(s,l,"ios-before-maestro.png"),a.record&&(d=cu(s,l))}else{let O=fu(b,l),h=pu(a.device,l),M=h?["-s",h]:[];c(`Resolved Android application id: ${O||"unknown"}`),ur("adb",[...M,"install","-r",b],l),O&&(u={platform:a.platform,appId:O,deviceId:h||void 0})}let P=Math.max(0,Math.min(10,Number(a.retries??1)))+1,w=Y.join(s,"report.xml"),T=ou(l);if(!T)throw new Error("Maestro CLI not found on this runner. Install Maestro or set MAESTRO_BIN to the full maestro path.");let $=1;for(let O=1;O<=P;O+=1){c(`Running Maestro attempt ${O}/${P}...`);let h=["test","--platform",a.platform,...E,F,"--format","junit","--output",w,"--test-output-dir",s];if(Is&&O<P?$=(await Rs(T,h,{logPath:l,env:y,fastFailOnFlowFailure:!0})).exitCode:$=Et(T,h,l,void 0,y),$===0)break}return a.platform==="ios"&&sr(s,l,"ios-after-maestro.png"),await gs(d,l),d=null,await Ss(a.urls,o,s,l),$===0?(await p("passed"),B.success(V.green(`Managed Maestro run passed: ${n}`)),{status:"passed",exitCode:0,attempts:P,flows:a.flowPath,platform:a.platform}):(await p("failed",`Maestro exited with code ${$}`),B.error(V.red(`Managed Maestro run failed with exit code ${$}`)),{status:"failed",exitCode:$,attempts:P,flows:a.flowPath,platform:a.platform})}catch(f){let g=f.message||String(f);return c(`MACH_MAESTRO_RUN_FAILED: ${g}`),a?.platform==="ios"&&sr(s,l,"ios-after-failure.png"),await gs(d,l),a?.urls&&await Ss(a.urls,o,s,l),await p("failed",g),B.error(V.red(`Managed Maestro runner failed: ${g}`)),{status:"failed",exitCode:1,attempts:0,flows:a?.flowPath||".maestro",platform:a?.platform||e.platform}}finally{uu(u,l)}}async function Vd(e){let t=e.maestroFlows||".maestro",n=_s(e.maestroRetries);if(n===null)return null;let i=Y.resolve(t);if(!L.existsSync(i))return B.error(V.red(`Maestro flows not found: ${t}`)),{status:"failed",exitCode:1,attempts:0,flows:t,platform:e.platform};let r=await qd(e);if(r?.url){if(!await Zd(r))return{status:"failed",exitCode:1,attempts:0,flows:t,platform:r.platform||e.platform}}else if(e.buildId||e.buildUrl||e.artifactUrl||e.latest)return{status:"failed",exitCode:1,attempts:0,flows:t,platform:e.platform};e.maestroRecord&&B.warn(V.yellow("--maestro-record is managed-runner only and is ignored in --local mode."));let o=r?.platform||e.platform,s=["test"];o&&s.push("--platform",o),e.maestroDevice&&s.push("--device",String(e.maestroDevice));let l=Hd(e.maestroEnv),a=Object.keys(l);if(a.length>0){B.info(V.dim(`Passing Maestro env vars to local run: ${a.join(", ")}`));for(let[f,g]of Object.entries(l))s.push("-e",`${f}=${g}`)}s.push(t);let d=n+1,u=1;for(let f=1;f<=d;f+=1){if(B.info(V.dim(`Running local Maestro attempt ${f}/${d}...`)),Is&&f<d){let g=await Rs("maestro",s,{cwd:process.cwd(),env:process.env,echoOutput:!0,fastFailOnFlowFailure:!0});if(g.error){let y=g.error.message||"Failed to run Maestro";B.error(V.red(`Local Maestro failed to start: ${y}`)),B.info(V.dim("Install Maestro locally, then retry: https://maestro.mobile.dev/getting-started/installing-maestro")),u=1;break}u=g.exitCode}else{let g=Xe("maestro",s,{cwd:process.cwd(),stdio:"inherit",env:process.env});if(g.error){let y=g.error.message||"Failed to run Maestro";B.error(V.red(`Local Maestro failed to start: ${y}`)),B.info(V.dim("Install Maestro locally, then retry: https://maestro.mobile.dev/getting-started/installing-maestro")),u=1;break}u=typeof g.status=="number"?g.status:1}if(u===0)break}let c=u===0?"passed":"failed",p={status:c,exitCode:u,attempts:d,flows:t,platform:o};return Au(e,p),c==="passed"?B.success(V.green("Local Maestro run passed")):B.error(V.red(`Local Maestro run failed with exit code ${u}`)),p}async function fr(e){let t=ve(`./${m.configFileName}`),n=e.projectId||t?.projectId,i=String(e.profile||e.buildProfile||"production").toLowerCase();if(!n)return B.error(`No projectId found. Run \`${m.nameLower} link\` first or pass an internal project id.`),null;let r=e.platform;if(!r&&e.latest){let c=await As({message:"Select platform for the latest build:",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"}]});if(cr(c))return null;r=c}let o=await Yd(e);if(!o)return null;if(o.kind==="latest"&&!r)return B.error("Pass --platform when using --latest."),null;if(o.kind==="artifact-url"&&!r)return B.error("Pass --platform when using --artifact-url."),null;let s=_s(e.maestroRetries);if(s===null)return null;let l=pr(e.maestroEnv),a=jd(e.maestroEnv);!e.quiet&&l.length>0&&B.info(V.dim(`Forwarding Maestro env vars by name: ${l.join(", ")}`));let d=await zd(e,n);if(d===null)return null;let u=En();e.quiet||u.start("Queuing Maestro run...");try{let c=await N.post("/tests/maestro",{projectId:n,platform:r,profile:i,latest:o.kind==="latest",buildId:o.kind==="build-id"?o.value:e.buildId,buildUrl:o.kind==="build-url"?o.value:e.buildUrl,artifactUrl:o.kind==="artifact-url"?o.value:e.artifactUrl,flowSourceKey:d,flows:e.maestroFlows||".maestro",device:e.maestroDevice||(r==="ios"?"iphone_15":"pixel_6"),retries:s,record:!!e.maestroRecord,...l.length>0?{envNames:l}:{},...a?{env:a}:{}});if(c.data.status!=="success")throw new Error(c.data.message||"Failed to queue Maestro run");let p=c.data.testRun,f={testRunId:p.testRunId,status:p.status,projectId:n,buildId:p.buildId,platform:p.platform,dashboardUrl:p.dashboardUrl||`${st}/tests/${p.testRunId}`,launchDeferredReason:p.launchDeferredReason};return Os(e,f),e.quiet||u.stop("Maestro run queued"),f}catch(c){e.quiet||u.stop("Could not queue Maestro run");let p=c.response?.data?.message||c.message||"Unknown error";return B.error(V.red(`Maestro queue failed: ${p}`)),null}}async function Kd(e,t){let n=fs(e.waitTimeout,60,"--wait-timeout"),i=fs(e.waitInterval,15,"--wait-interval");if(n===null||i===null)return null;let r=n*60*1e3,o=Math.max(5,i)*1e3,s=Date.now(),l=t.status||"queued";for(B.info(V.dim(`Waiting for Maestro run ${t.testRunId} to finish...`));Date.now()-s<=r;){let a=await Jd(t.projectId,t.testRunId);if(!a)return null;if(a.status&&a.status!==l&&(l=a.status,B.info(V.dim(`Maestro status: ${l}`))),Fd.has(String(a.status)))return Os(e,a),a.status==="passed"?B.success(V.green(`Maestro run passed: ${a.testRunId}`)):(B.error(V.red(`Maestro run ${a.status}: ${a.testRunId}`)),a.error&&B.error(V.red(String(a.error)))),a;await mr(o)}return B.error(V.red(`Timed out waiting for Maestro run ${t.testRunId} after ${n} minute(s).`)),{...t,status:"timeout"}}async function zd(e,t){if(e.maestroUseBuildSource)return;let n=e.maestroFlows||".maestro",i=Y.resolve(n);if(!L.existsSync(i))return e.maestroFlows?(B.error(V.red(`Maestro flows not found: ${n}`)),null):void 0;let r=Y.relative(process.cwd(),i);if(!r||r.startsWith("..")||Y.isAbsolute(r))return B.error(V.red("Managed Maestro flow uploads must be inside the current project directory.")),null;let o=En();e.quiet||o.start(`Uploading Maestro flows from ${r}...`);try{let s=await N.post("/tests/maestro/source-upload-url",{projectId:t,uploadId:Ld()});if(s.data.status!=="success"||!s.data.uploadUrl||!s.data.key)throw new Error(s.data.message||"Failed to get Maestro flow upload URL");let l=new ei;if(L.statSync(i).isDirectory())l.addLocalFolder(i,r);else{let u=Y.dirname(r);l.addLocalFile(i,u==="."?void 0:u,Y.basename(r))}let d=l.toBuffer();return await Wd(s.data.uploadUrl,d,"application/zip","Maestro flow upload",u=>{e.quiet||o.message(u)}),e.quiet||o.stop("Maestro flows uploaded"),s.data.key}catch(s){e.quiet||o.stop("Could not upload Maestro flows");let l=s.response?.data?.message||s.message||"Unknown error";return B.error(V.red(`Maestro flow upload failed: ${l}`)),null}}function ws(e){let t=e.response?.status,n=e.code||"",i=e.message||"";return t&&![408,409,425,429].includes(t)&&t<500?!1:/ECONNRESET|ETIMEDOUT|EAI_AGAIN|ENOTFOUND|ECONNABORTED|socket hang up|network|timeout/i.test(`${n} ${i}`)||!t}async function Wd(e,t,n,i,r){let o;for(let s=1;s<=ps;s+=1)try{await An.put(e,t,{headers:{"Content-Type":n},maxBodyLength:1/0,maxContentLength:1/0,timeout:Bd});return}catch(l){if(o=l,!ws(l)||s>=ps)break;let a=Math.min(2e4,2e3*s),d=l.code||l.response?.status||l.message||"network error";r?.(`${i} attempt ${s} failed (${d}), retrying...`),await mr(a)}throw o}async function Jd(e,t){try{let n=await N.get(`/tests/${encodeURIComponent(t)}`,{params:{projectId:e}});if(n.data.status!=="success")throw new Error(n.data.message||"Failed to fetch Maestro run");let i=n.data.testRun;return{testRunId:i.testRunId,status:i.status,projectId:e,buildId:i.buildId,platform:i.platform,dashboardUrl:i.dashboardUrl||`${st}/tests/${i.testRunId}`,launchDeferredReason:i.launchDeferredReason,...i.error?{error:i.error}:{}}}catch(n){let i=n.response?.data?.message||n.message||"Unknown error";return B.error(V.red(`Could not fetch Maestro run status: ${i}`)),null}}async function Yd(e){if(e.buildId)return{kind:"build-id",value:e.buildId};if(e.buildUrl)return{kind:"build-url",value:e.buildUrl};if(e.artifactUrl)return{kind:"artifact-url",value:e.artifactUrl};if(e.latest)return{kind:"latest"};let t=await As({message:"Select app artifact source for Maestro:",options:[{value:"latest",label:"Latest successful build"},{value:"build-id",label:"Build ID"},{value:"build-url",label:`${m.name} build URL`},{value:"artifact-url",label:"Direct artifact URL"}]});if(cr(t))return null;if(t==="latest")return{kind:"latest"};let n=await Ud({message:t==="build-id"?"Enter build ID:":t==="build-url"?`Enter ${m.name} build URL:`:"Enter artifact URL:",validate:i=>{let r=String(i||"").trim();if(!r)return"Value is required";if((t==="build-url"||t==="artifact-url")&&!r.startsWith("http"))return"Must be a URL"}});return cr(n)?null:{kind:t,value:String(n).trim()}}function fs(e,t,n){if(e==null||e==="")return t;let i=Number(e);return!Number.isFinite(i)||i<=0?(B.error(`${n} must be a positive number.`),null):i}function mr(e){return new Promise(t=>setTimeout(t,e))}function _s(e){if(e==null||e==="")return 1;let t=Number(e);return!Number.isInteger(t)||t<0||t>10?(B.error("--maestro-retries must be an integer between 0 and 10."),null):t}async function qd(e){if(e.artifactUrl)return{url:e.artifactUrl,platform:e.platform||hr(e.artifactUrl),name:Ds(e.artifactUrl)};let t=e.buildId||bu(e.buildUrl);return t?$s(t,e.platform):e.latest?Xd(e):null}async function $s(e,t){let n=En();n.start(`Resolving build ${e}...`);try{let i=await N.get(`/public/builds/${encodeURIComponent(e)}`);if(i.data.status!=="success")throw new Error(i.data.message||"Build lookup failed");let r=t||i.data.build?.platform,o=Su(i.data.artifacts||[],r);if(!o?.downloadUrl)throw new Error("No installable APK or simulator app artifact found for this build.");return n.stop("Build artifact resolved"),{url:o.downloadUrl,platform:r||hr(o.name||o.downloadUrl),name:o.name}}catch(i){n.stop("Could not resolve build artifact");let r=i.response?.data?.message||i.message||"Unknown error";return B.error(V.red(`Local Maestro artifact lookup failed: ${r}`)),null}}async function Xd(e){let t=ve(`./${m.configFileName}`),n=e.projectId||t?.projectId,i=String(e.profile||e.buildProfile||"production").toLowerCase();if(!n)return B.error(`No projectId found. Run \`${m.nameLower} link\` first or pass --build-id/--artifact-url.`),null;if(!e.platform)return B.error("Pass --platform when using --latest with --local."),null;let r=En();r.start("Resolving latest build...");try{let o=await N.get(`/builds/${n}`,{params:{limit:100}}),l=(Array.isArray(o.data.builds)?o.data.builds:[]).find(a=>a.status==="success"&&a.platform===e.platform&&String(a.buildProfile||a.buildType||"production").toLowerCase()===i);if(!l?.buildId)throw new Error(`No successful ${e.platform} build found for profile ${i}.`);return r.stop(`Latest build resolved: ${l.buildId}`),$s(l.buildId,e.platform)}catch(o){r.stop("Could not resolve latest build");let s=o.response?.data?.message||o.message||"Unknown error";return B.error(V.red(`Latest build lookup failed: ${s}`)),null}}async function Zd(e){let t=e.platform||hr(e.url);if(!t)return B.error(V.red("Could not infer platform for local install. Pass --platform android or --platform ios.")),!1;let n=L.mkdtempSync(Y.join(tn.tmpdir(),"mach-maestro-")),i=e.name||Ds(e.url)||(t==="android"?"app.apk":"app.zip"),r=Y.join(n,i),o=En();o.start(`Downloading ${i}...`);try{await dr(e.url,r),o.stop("Artifact downloaded")}catch(s){return o.stop("Artifact download failed"),B.error(V.red(s.message||"Failed to download artifact")),!1}return t==="android"?hu(r):yu(r,n)}async function dr(e,t){let n=await An.get(e,{responseType:"stream"});await Md(n.data,L.createWriteStream(t))}function Qd(e,t=12e3){try{return L.readFileSync(e,"utf-8").slice(-t)}catch{return""}}function ms(e){if(!Number.isFinite(e)||e<0)return"unknown size";if(e<1024)return`${e} B`;let t=["KB","MB","GB"],n=e/1024,i=t[0];for(let r=1;n>=1024&&r<t.length;r+=1)n/=1024,i=t[r];return`${n.toFixed(n>=10?1:2)} ${i}`}function eu(e){return Object.entries(e||{}).filter(([t,n])=>!!t&&n!==void 0).sort(([t],[n])=>t.localeCompare(n)).flatMap(([t,n])=>["-e",`${t}=${n}`])}function tu(e,t){let n=Y.resolve(e,t||".maestro"),i=Y.relative(e,n);if(i.startsWith("..")||Y.isAbsolute(i))throw new Error("Maestro flow path must stay inside the build source.");return n}function vs(e,t){let n=[e];for(let i=0;i<t.length;i+=1){let r=t[i],o=t[i-1];(o==="-e"||o==="--env")&&/^[A-Za-z_][A-Za-z0-9_]*=/.test(r)?n.push(`${r.slice(0,r.indexOf("="))}=<redacted>`):n.push(r)}return n.join(" ")}function nu(e){return/\[Failed\]\s+/.test(e)}function iu(e){if(!e.killed){try{e.kill("SIGTERM")}catch{}setTimeout(()=>{try{e.kill("SIGKILL")}catch{}},5e3).unref()}}function Rs(e,t,n={}){let{cwd:i,env:r=process.env,logPath:o,echoOutput:s=!1,fastFailOnFlowFailure:l=!1}=n;return o&&L.appendFileSync(o,`
1389
+ $ ${vs(e,t)}
1390
+ `),new Promise(a=>{let d=!1,u=!1,c="",p=y=>{u||(u=!0,a(y))},f=bs(e,t,{cwd:i,env:r,stdio:["ignore","pipe","pipe"]}),g=y=>{c+=y;let E=c.split(/\r?\n/);c=E.pop()||"";for(let _ of E)if(l&&nu(_)&&!d){d=!0;let b="Mach fast-fail: detected failed Maestro flow; stopping this attempt early to retry...";o&&L.appendFileSync(o,`
1391
1391
  ${b}
1392
1392
  `),s&&process.stderr.write(`${b}
1393
- `),kc(f)}};f.stdout?.on("data",y=>{let E=y.toString();o&&L.appendFileSync(o,E),s&&process.stdout.write(E),g(E)}),f.stderr?.on("data",y=>{let E=y.toString();o&&L.appendFileSync(o,E),s&&process.stderr.write(E),g(E)}),f.on("error",y=>{o&&L.appendFileSync(o,`${y.message}
1394
- `),p({exitCode:1,fastFailed:c,error:y})}),f.on("close",(y,E)=>{c&&o&&L.appendFileSync(o,`Maestro attempt stopped after first failed flow${E?` (${E})`:""}.
1395
- `),p({exitCode:typeof y=="number"?y:1,fastFailed:c})})})}function ft(e,t,n,i,r=process.env){L.appendFileSync(n,`
1396
- $ ${us(e,t)}
1397
- `);let o=Je(e,t,{cwd:i,encoding:"utf-8",env:r});return o.stdout&&L.appendFileSync(n,o.stdout),o.stderr&&L.appendFileSync(n,o.stderr),o.error?(L.appendFileSync(n,`${o.error.message}
1398
- `),1):typeof o.status=="number"?o.status:1}function Qi(e,t,n,i){let r=ft(e,t,n,i);if(r!==0)throw new Error(`${e} ${t.join(" ")} failed with exit code ${r}`)}function Nc(e){try{return L.accessSync(e,L.constants.X_OK),!0}catch{return!1}}function Tc(e){let t=[process.env.MAESTRO_BIN,Y.join(Wt.homedir(),".maestro","bin","maestro"),"/opt/homebrew/bin/maestro","/usr/local/bin/maestro"].filter(Boolean),n=Je("/usr/bin/env",["which","maestro"],{encoding:"utf-8",env:process.env}),i=n.status===0?String(n.stdout||"").split(`
1399
- `)[0]?.trim():"";i&&t.unshift(i);for(let r of t)if(r&&Nc(r))return e&&L.appendFileSync(e,`Using Maestro CLI at ${r}
1393
+ `),iu(f)}};f.stdout?.on("data",y=>{let E=y.toString();o&&L.appendFileSync(o,E),s&&process.stdout.write(E),g(E)}),f.stderr?.on("data",y=>{let E=y.toString();o&&L.appendFileSync(o,E),s&&process.stderr.write(E),g(E)}),f.on("error",y=>{o&&L.appendFileSync(o,`${y.message}
1394
+ `),p({exitCode:1,fastFailed:d,error:y})}),f.on("close",(y,E)=>{d&&o&&L.appendFileSync(o,`Maestro attempt stopped after first failed flow${E?` (${E})`:""}.
1395
+ `),p({exitCode:typeof y=="number"?y:1,fastFailed:d})})})}function Et(e,t,n,i,r=process.env){L.appendFileSync(n,`
1396
+ $ ${vs(e,t)}
1397
+ `);let o=Xe(e,t,{cwd:i,encoding:"utf-8",env:r});return o.stdout&&L.appendFileSync(n,o.stdout),o.stderr&&L.appendFileSync(n,o.stderr),o.error?(L.appendFileSync(n,`${o.error.message}
1398
+ `),1):typeof o.status=="number"?o.status:1}function ur(e,t,n,i){let r=Et(e,t,n,i);if(r!==0)throw new Error(`${e} ${t.join(" ")} failed with exit code ${r}`)}function ru(e){try{return L.accessSync(e,L.constants.X_OK),!0}catch{return!1}}function ou(e){let t=[process.env.MAESTRO_BIN,Y.join(tn.homedir(),".maestro","bin","maestro"),"/opt/homebrew/bin/maestro","/usr/local/bin/maestro"].filter(Boolean),n=Xe("/usr/bin/env",["which","maestro"],{encoding:"utf-8",env:process.env}),i=n.status===0?String(n.stdout||"").split(`
1399
+ `)[0]?.trim():"";i&&t.unshift(i);for(let r of t)if(r&&ru(r))return e&&L.appendFileSync(e,`Using Maestro CLI at ${r}
1400
1400
  `),r;return e&&L.appendFileSync(e,`Maestro CLI not found. Checked: ${t.join(", ")}
1401
- `),null}function xc(e){let t=String(e||"").trim();return t?t.replace(/_/g," ").replace(/\bios\b/gi,"").replace(/\biphone\b/i,"iPhone").replace(/\s+/g," ").trim():"iPhone 15"}async function Lc(e,t){if((Je("xcrun",["simctl","list","devices","booted"],{encoding:"utf-8"}).stdout||"").includes("(Booted)")){L.appendFileSync(t,`Using already booted iOS Simulator.
1402
- `);return}let i=xc(e),r=Je("xcrun",["simctl","list","devices","--json"],{encoding:"utf-8"});if(r.status!==0||!r.stdout)throw new Error("Could not list iOS simulators.");let o=JSON.parse(r.stdout),s=Object.values(o.devices||{}).flatMap(c=>Array.isArray(c)?c:[]).filter(c=>c?.isAvailable),l=s.find(c=>c.name===i)||s.find(c=>String(c.name||"").toLowerCase().includes(i.toLowerCase()))||s.find(c=>String(c.name||"").startsWith("iPhone"));if(!l?.udid)throw new Error(`No available iOS Simulator found for ${i}.`);L.appendFileSync(t,`Booting iOS Simulator ${l.name} (${l.udid})...
1403
- `),ft("xcrun",["simctl","boot",l.udid],t)!==0&&L.appendFileSync(t,`simctl boot returned non-zero; continuing to bootstatus in case it was already booting.
1404
- `),Qi("xcrun",["simctl","bootstatus",l.udid,"-b"],t)}function Mc(e,t){if(e.endsWith(".ipa"))throw new Error("iOS Maestro runs need a simulator .app.zip artifact, not an App Store .ipa.");if(e.endsWith(".zip")){let n=Y.join(t,"ios-app");L.mkdirSync(n,{recursive:!0}),new jn(e).extractAllTo(n,!0);let i=ir(n);if(!i)throw new Error("Could not find a .app bundle inside the iOS artifact zip.");return i}if(e.endsWith(".app"))return e;throw new Error("iOS Maestro runs need a .app bundle or .app.zip artifact.")}function fs(e,t){let n=Y.join(e,"Info.plist");if(!L.existsSync(n))return L.appendFileSync(t,`Could not find Info.plist in ${e}; skipping uninstall.
1405
- `),null;let i=Je("/usr/bin/plutil",["-extract","CFBundleIdentifier","raw","-o","-",n],{encoding:"utf-8",env:process.env}),r=String(i.stdout||"").trim();return i.status!==0||!r?(L.appendFileSync(t,`Could not read CFBundleIdentifier from Info.plist; skipping uninstall.
1406
- `),null):r}function Ji(e,t,n){let i=Y.join(e,n);ft("xcrun",["simctl","io","booted","screenshot",i],t)!==0&&L.appendFileSync(t,`[WARN] Could not capture iOS simulator screenshot: ${n}
1407
- `)}function Uc(e,t){let n=Y.join(e,"ios-simulator-recording.mp4");L.appendFileSync(t,`Starting iOS simulator recording: ${n}
1408
- `);let i=rs("xcrun",["simctl","io","booted","recordVideo",n],{stdio:["ignore","pipe","pipe"],env:process.env});return i.stdout?.on("data",r=>{L.appendFileSync(t,r)}),i.stderr?.on("data",r=>{L.appendFileSync(t,r)}),i.on("error",r=>{L.appendFileSync(t,`[WARN] Could not start iOS simulator recording: ${r.message}
1409
- `)}),i}async function es(e,t){e&&await new Promise(n=>{let i=!1,r=()=>{i||(i=!0,n())};e.once("exit",r),e.once("close",r),e.killed||(L.appendFileSync(t,`Stopping iOS simulator recording...
1401
+ `),null}function su(e){let t=String(e||"").trim();return t?t.replace(/_/g," ").replace(/\bios\b/gi,"").replace(/\biphone\b/i,"iPhone").replace(/\s+/g," ").trim():"iPhone 15"}async function au(e,t){if((Xe("xcrun",["simctl","list","devices","booted"],{encoding:"utf-8"}).stdout||"").includes("(Booted)")){L.appendFileSync(t,`Using already booted iOS Simulator.
1402
+ `);return}let i=su(e),r=Xe("xcrun",["simctl","list","devices","--json"],{encoding:"utf-8"});if(r.status!==0||!r.stdout)throw new Error("Could not list iOS simulators.");let o=JSON.parse(r.stdout),s=Object.values(o.devices||{}).flatMap(d=>Array.isArray(d)?d:[]).filter(d=>d?.isAvailable),l=s.find(d=>d.name===i)||s.find(d=>String(d.name||"").toLowerCase().includes(i.toLowerCase()))||s.find(d=>String(d.name||"").startsWith("iPhone"));if(!l?.udid)throw new Error(`No available iOS Simulator found for ${i}.`);L.appendFileSync(t,`Booting iOS Simulator ${l.name} (${l.udid})...
1403
+ `),Et("xcrun",["simctl","boot",l.udid],t)!==0&&L.appendFileSync(t,`simctl boot returned non-zero; continuing to bootstatus in case it was already booting.
1404
+ `),ur("xcrun",["simctl","bootstatus",l.udid,"-b"],t)}function lu(e,t){if(e.endsWith(".ipa"))throw new Error("iOS Maestro runs need a simulator .app.zip artifact, not an App Store .ipa.");if(e.endsWith(".zip")){let n=Y.join(t,"ios-app");L.mkdirSync(n,{recursive:!0}),new ei(e).extractAllTo(n,!0);let i=gr(n);if(!i)throw new Error("Could not find a .app bundle inside the iOS artifact zip.");return i}if(e.endsWith(".app"))return e;throw new Error("iOS Maestro runs need a .app bundle or .app.zip artifact.")}function Ps(e,t){let n=Y.join(e,"Info.plist");if(!L.existsSync(n))return L.appendFileSync(t,`Could not find Info.plist in ${e}; skipping uninstall.
1405
+ `),null;let i=Xe("/usr/bin/plutil",["-extract","CFBundleIdentifier","raw","-o","-",n],{encoding:"utf-8",env:process.env}),r=String(i.stdout||"").trim();return i.status!==0||!r?(L.appendFileSync(t,`Could not read CFBundleIdentifier from Info.plist; skipping uninstall.
1406
+ `),null):r}function sr(e,t,n){let i=Y.join(e,n);Et("xcrun",["simctl","io","booted","screenshot",i],t)!==0&&L.appendFileSync(t,`[WARN] Could not capture iOS simulator screenshot: ${n}
1407
+ `)}function cu(e,t){let n=Y.join(e,"ios-simulator-recording.mp4");L.appendFileSync(t,`Starting iOS simulator recording: ${n}
1408
+ `);let i=bs("xcrun",["simctl","io","booted","recordVideo",n],{stdio:["ignore","pipe","pipe"],env:process.env});return i.stdout?.on("data",r=>{L.appendFileSync(t,r)}),i.stderr?.on("data",r=>{L.appendFileSync(t,r)}),i.on("error",r=>{L.appendFileSync(t,`[WARN] Could not start iOS simulator recording: ${r.message}
1409
+ `)}),i}async function gs(e,t){e&&await new Promise(n=>{let i=!1,r=()=>{i||(i=!0,n())};e.once("exit",r),e.once("close",r),e.killed||(L.appendFileSync(t,`Stopping iOS simulator recording...
1410
1410
  `),e.kill("SIGINT")),setTimeout(()=>{!i&&!e.killed&&(L.appendFileSync(t,`[WARN] iOS simulator recording did not stop after SIGINT; sending SIGKILL.
1411
- `),e.kill("SIGKILL")),r()},5e3).unref?.()})}function Fc(e,t){let n=fs(e,t);if(!n)return;L.appendFileSync(t,`Uninstalling existing iOS app data for ${n} if present...
1412
- `),ft("xcrun",["simctl","uninstall","booted",n],t)!==0&&L.appendFileSync(t,`No existing app install removed for ${n}; continuing.
1413
- `)}function Bc(e,t){if(!e?.appId)return;if(L.appendFileSync(t,`Cleaning up installed app after Maestro run...
1414
- `),e.platform==="ios"){let r=ft("xcrun",["simctl","uninstall","booted",e.appId],t);r===0?L.appendFileSync(t,`Uninstalled iOS app ${e.appId} after Maestro run.
1411
+ `),e.kill("SIGKILL")),r()},5e3).unref?.()})}function du(e,t){let n=Ps(e,t);if(!n)return;L.appendFileSync(t,`Uninstalling existing iOS app data for ${n} if present...
1412
+ `),Et("xcrun",["simctl","uninstall","booted",n],t)!==0&&L.appendFileSync(t,`No existing app install removed for ${n}; continuing.
1413
+ `)}function uu(e,t){if(!e?.appId)return;if(L.appendFileSync(t,`Cleaning up installed app after Maestro run...
1414
+ `),e.platform==="ios"){let r=Et("xcrun",["simctl","uninstall","booted",e.appId],t);r===0?L.appendFileSync(t,`Uninstalled iOS app ${e.appId} after Maestro run.
1415
1415
  `):L.appendFileSync(t,`Warning: failed to uninstall iOS app ${e.appId} after Maestro run: xcrun simctl uninstall exited with code ${r}
1416
- `);return}let n=e.deviceId?["-s",e.deviceId]:[],i=ft("adb",[...n,"uninstall",e.appId],t);i===0?L.appendFileSync(t,`Uninstalled Android app ${e.appId} after Maestro run.
1416
+ `);return}let n=e.deviceId?["-s",e.deviceId]:[],i=Et("adb",[...n,"uninstall",e.appId],t);i===0?L.appendFileSync(t,`Uninstalled Android app ${e.appId} after Maestro run.
1417
1417
  `):L.appendFileSync(t,`Warning: failed to uninstall Android app ${e.appId} after Maestro run: adb uninstall exited with code ${i}
1418
- `)}function Hc(e,t){let n=Je("adb",["devices"],{encoding:"utf-8",env:process.env});if(n.status!==0||n.error)return L.appendFileSync(t,`[WARN] Could not list Android devices before install; using adb default target.
1418
+ `)}function pu(e,t){let n=Xe("adb",["devices"],{encoding:"utf-8",env:process.env});if(n.status!==0||n.error)return L.appendFileSync(t,`[WARN] Could not list Android devices before install; using adb default target.
1419
1419
  `),null;let i=String(n.stdout||"").split(`
1420
1420
  `).map(r=>r.trim().split(/\s+/)).filter(r=>r.length>=2&&r[1]==="device").map(r=>r[0]).filter(Boolean);return e&&i.includes(e)?(L.appendFileSync(t,`Using Android device ${e} for install and cleanup.
1421
1421
  `),e):i.length===1?(L.appendFileSync(t,`Using Android device ${i[0]} for install and cleanup.
1422
1422
  `),i[0]):(i.length>1&&L.appendFileSync(t,`[WARN] Multiple Android devices are connected; using adb default target for install and cleanup.
1423
- `),null)}function jc(e,t){let i=(Yi("aapt",["dump","badging",e])||Yi("aapt2",["dump","badging",e]))?.match(/package:\s+name='([^']+)'/);if(i?.[1])return i[1];let o=Yi("apkanalyzer",["manifest","application-id",e])?.split(/\s+/).find(Boolean);return o||(L.appendFileSync(t,`[WARN] Could not determine Android application id from APK; post-run uninstall will be skipped.
1424
- `),null)}function Yi(e,t){for(let n of Gc(e)){let i=Je(n,t,{encoding:"utf-8",env:process.env,maxBuffer:10485760});if(i.status===0&&i.stdout)return String(i.stdout).trim()}return null}function Gc(e){let t=process.platform==="win32"&&!e.endsWith(".exe")?`${e}.exe`:e,n=[];if(e==="aapt"||e==="aapt2")for(let r of ts()){let o=Y.join(r,"build-tools");for(let s of ns(o))n.push(Y.join(o,s,t))}if(e==="apkanalyzer")for(let r of ts()){n.push(Y.join(r,"cmdline-tools","latest","bin",t));let o=Y.join(r,"cmdline-tools");for(let s of ns(o))n.push(Y.join(o,s,"bin",t));n.push(Y.join(r,"tools","bin",t))}let i=Kc(e);return i&&n.unshift(i),n.push(t),[...new Set(n)]}function ts(){let e=[process.env.ANDROID_HOME,process.env.ANDROID_SDK_ROOT];return process.platform==="darwin"?e.push(Y.join(Wt.homedir(),"Library","Android","sdk")):process.platform==="linux"&&e.push(Y.join(Wt.homedir(),"Android","Sdk"),Y.join(Wt.homedir(),"Android","sdk"),"/opt/android-sdk","/usr/lib/android-sdk"),[...new Set(e.filter(t=>!!t))]}function ns(e){try{return L.readdirSync(e,{withFileTypes:!0}).filter(t=>t.isDirectory()).map(t=>t.name).sort((t,n)=>n.localeCompare(t,void 0,{numeric:!0}))}catch{return[]}}function Kc(e){let t=process.platform==="win32"?"where":"/usr/bin/env",n=process.platform==="win32"?[e]:["which",e],i=Je(t,n,{encoding:"utf-8",env:process.env});return i.status!==0||!i.stdout?null:String(i.stdout).split(`
1425
- `)[0]?.trim()||null}async function qi(e,t,n){if(!L.existsSync(e))return;let i=L.readFileSync(e),r;for(let o=1;o<=3;o+=1)try{await cn.put(t,i,{headers:{"Content-Type":n,"Content-Length":String(i.length)},maxBodyLength:1/0,maxContentLength:1/0,timeout:12e4});return}catch(s){if(r=s,!ls(s)||o>=3)break;await nr(2e3*o)}throw r}async function is(e,t,n,i){let r=Y.join(n,"report.xml"),o=Y.join(t,"artifacts.tar.gz");try{await qi(r,e.junitUploadUrl,"application/xml")}catch(s){L.appendFileSync(i,`[WARN] Failed to upload JUnit report: ${s.message||s}
1426
- `)}try{await qi(i,e.logUploadUrl,"text/plain")}catch(s){L.appendFileSync(i,`[WARN] Failed to upload runner log: ${s.message||s}
1427
- `)}try{ft("tar",["-czf",o,"-C",t,Y.basename(n)],i),await qi(o,e.artifactsUploadUrl,"application/gzip")}catch(s){L.appendFileSync(i,`[WARN] Failed to upload Maestro artifacts: ${s.message||s}
1428
- `)}}function Vc(e){if(!e.endsWith(".apk"))return B.error(K.red("Local Android Maestro runs need an APK artifact.")),!1;B.info(K.dim("Installing APK on local Android device/emulator..."));let t=Je("adb",["install","-r",e],{stdio:"inherit",env:process.env});return t.error?(B.error(K.red(`adb failed to start: ${t.error.message}`)),!1):t.status!==0?(B.error(K.red(`adb install failed with exit code ${t.status??1}`)),!1):!0}function zc(e,t){if(e.endsWith(".ipa"))return B.error(K.red("Local iOS Maestro runs need an iOS Simulator .app.zip artifact, not an App Store .ipa.")),!1;let n=e;if(e.endsWith(".zip")){let r=Y.join(t,"ios-app");L.mkdirSync(r,{recursive:!0}),new jn(e).extractAllTo(r,!0);let o=ir(r);if(!o)return B.error(K.red("Could not find a .app bundle inside the downloaded zip.")),!1;n=o}if(!n.endsWith(".app"))return B.error(K.red("Local iOS Maestro runs need an iOS Simulator .app bundle or .app.zip artifact.")),!1;B.info(K.dim("Installing app on booted iOS Simulator..."));let i=Je("xcrun",["simctl","install","booted",n],{stdio:"inherit",env:process.env});return i.error?(B.error(K.red(`xcrun failed to start: ${i.error.message}`)),!1):i.status!==0?(B.error(K.red(`iOS Simulator install failed with exit code ${i.status??1}`)),!1):!0}function ir(e){let t=L.readdirSync(e,{withFileTypes:!0});for(let n of t){let i=Y.join(e,n.name);if(n.isDirectory()&&n.name.endsWith(".app"))return i;if(n.isDirectory()){let r=ir(i);if(r)return r}}return null}function Wc(e,t){let n=String(t||"").toLowerCase();return n==="android"?e.find(i=>zt(i,".apk")):n==="ios"?e.find(i=>zt(i,".app.zip"))||e.find(i=>zt(i,".zip")):e.find(i=>zt(i,".apk"))||e.find(i=>zt(i,".app.zip"))||e.find(i=>zt(i,".zip"))}function zt(e,t){return String(e?.name||e?.downloadUrl||e?.url||"").toLowerCase().endsWith(t)}function rr(e){let t=String(e||"").toLowerCase();if(t.includes(".apk"))return"android";if(t.includes(".app.zip")||t.endsWith(".app")||t.includes(".ipa"))return"ios"}function ms(e){if(e)try{return Y.basename(new URL(e).pathname)||void 0}catch{return Y.basename(e)||void 0}}function Jc(e){return e?e.match(/[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/i)?.[0]:void 0}function gs(e,t){if(!e.jsonOutput)return;let n=Y.resolve(e.jsonOutput),i={...t,updatedAt:new Date().toISOString()};try{let r=Y.dirname(n);r&&r!=="."&&L.mkdirSync(r,{recursive:!0}),L.writeFileSync(n,JSON.stringify(i,null,2))}catch(r){B.warn(K.yellow(`Could not write Maestro metadata JSON: ${r.message}`))}}function Yc(e,t){if(!e.jsonOutput)return;let n=Y.resolve(e.jsonOutput),i={mode:"local",...t,updatedAt:new Date().toISOString()};try{let r=Y.dirname(n);r&&r!=="."&&L.mkdirSync(r,{recursive:!0}),L.writeFileSync(n,JSON.stringify(i,null,2))}catch(r){B.warn(K.yellow(`Could not write Maestro metadata JSON: ${r.message}`))}}import{spinner as bt,text as pn,select as dr,isCancel as yt,cancel as cr,log as Is}from"@clack/prompts";import re from"chalk";import se from"fs";import ve from"path";import{spawn as qc,spawnSync as Nt}from"child_process";import ws from"axios";import xt from"os";import fr from"crypto";var Xc=5e3,Zc=12,_s=100,or=24,hs=8e3,Qc={completed:"completed",draft:"draft",halted:"halted",inprogress:"inProgress","in-progress":"inProgress"},eu=e=>e?.type==="google_service_account",Kn=e=>e?.bundleId||e?.packageName||e?.meta?.packageName||e?.meta?.bundleId,$s=e=>e.submitArgs||process.argv.slice(3).join(" ");async function Vn(e){let t=bt(),n=Ce(),i=tu(e);if(!i){process.exitCode=1;return}let r=e.projectId||i.projectId,o=e.profile||e.buildProfile||"production";if(!r){ce(`${m.configFileName} is missing projectId. Pass --project-id in runner mode.`),process.exitCode=1;return}i.projectId=r,ge(re.dim(`Submit for project: ${i.name||r} | Profile: ${o}`));let s=e.platform;if(!s){let h=await dr({message:"Select platform to submit:",options:[{value:"ios",label:"iOS (App Store Connect / TestFlight)"},{value:"android",label:"Android (Google Play Console)"}]});if(yt(h)){cr("Operation cancelled");return}s=h}if(s=String(s).toLowerCase(),s!=="ios"&&s!=="android"){ce(`Platform ${s} is not supported. Use 'ios' or 'android'.`),process.exitCode=1;return}let l=s==="ios"&&!e.local&&e.sshHost?yu(i,o,e):null;if(s==="ios"&&!e.local&&!l){await nu(i,o,e);return}let a=e.submitId,c=!!(e.local&&a),u=a||null,d=async(h,M={})=>{u&&await su(r,u,{status:h,...M})},p=s==="android"?e.packageName||e.androidPackage||mu(i,o):void 0,f=s==="ios"?e.bundleId||e.iosBundleIdentifier||hu(i,o):void 0,g,y,E,_=!1;try{s==="android"&&(g=e.track||i.submit?.[o]?.android?.track||i.submit?.production?.android?.track||"internal",y=Su(i,o,e.releaseStatus),E=Au(i,o,e.rollout),_=Eu(i,o,e.changesNotSentForReview),Iu(y,E))}catch(h){ce(h.message),process.exitCode=1;return}if(s==="android"&&!c&&(u=await iu(i,r,s,o,e,{packageName:p,track:g,releaseStatus:y,rollout:E,changesNotSentForReview:_}),!u)){ce("Could not create submission tracking record. Submission was not started."),process.exitCode=1;return}await d("running",{platform:s,profile:o,packageName:p,track:g,releaseStatus:y,rollout:E,startTime:Date.now(),...c?lu():{}});let b=null,x=null;try{x=await wu(r,s,e,n?.token),b=x?.filePath||null}catch(h){await d("failed",{error:`Failed to resolve submission artifact: ${h.message}`,endTime:Date.now()}),ce(`Failed to resolve submission artifact: ${h.message}`),process.exitCode=1;return}if(!b){let h=$u(s,e);await d("failed",{error:h,endTime:Date.now()}),ce(h),process.exitCode=1;return}await d("running",{buildId:x?.buildId,artifactName:x?.artifactName,artifactSource:x?.source}),ge(`Using artifact: ${re.green(ve.basename(b))} `),t.start("Fetching submission credentials from Dashboard...");let I;try{let M=(await T.get(`/credentials/${r}`)).data.credentials||[];if(s==="android"&&!p){t.stop("Package name missing"),ce("Could not resolve Android package name. Set android.package in mach.config.json/app.json."),await d("failed",{error:"Could not resolve Android package name.",endTime:Date.now()}),process.exitCode=1;return}let U=M.filter(eu),H=s==="ios"?M.filter(Z=>Z.type==="asc_api_key"):gu(U,p);if(H.length===0){if(t.stop("Credentials missing"),ce(s==="android"?`No Google Play service credential found for package ${p}.`:`No Service Credentials found for ${s}.`),s==="android"){let Z=U.map(Kn).filter(Boolean).join(", ");Z&&ge(`Found Google Play service credential(s) for: ${Z}`),ge(`Use '${m.nameLower} credentials:service --platform android --package-name ${p}' or upload it under that package in the Dashboard.`)}else ge(`Use '${m.nameLower} credentials:service --platform ${s}' or use the Dashboard to upload them.`);await d("failed",{error:`No submission credentials found for ${s}.`,endTime:Date.now()}),process.exitCode=1;return}if(I=cu(H,e.credentialId),!I&&s==="ios"&&f&&(I=uu(H,f)),I||H.length===1)I=I||H[0],t.stop(`Using: ${I.name}`),s==="android"&&Kn(I)==="*"&&ge(re.yellow(`Using legacy wildcard Google Play credential for ${p}. Upload a package-scoped credential when possible.`));else{if(t.stop("Multiple credentials found"),pu()){let j=H.map(k=>`${k.name||"credential"} (${k.credentialId||k.id||"no-id"})`).join(", ");ce(`Multiple ${s==="ios"?"App Store Connect":"Google Play"} credentials found. Use --credential-id in CI. Available: ${j}`),await d("failed",{error:"Multiple submission credentials found; --credential-id is required in CI.",endTime:Date.now()}),process.exitCode=1;return}let Z=await dr({message:`Choose a ${s==="ios"?"App Store Connect":"Google Play"} credential:`,options:H.map(j=>({value:j.credentialId,label:j.name,hint:`${j.keyId?`ID: ${j.keyId}`:""} ${j.issuerId?`(Issuer: ${j.issuerId.substring(0,8)}...)`:""}`}))});if(yt(Z)){cr("Submission cancelled"),await d("failed",{error:"Submission cancelled while selecting credential.",endTime:Date.now()}),process.exitCode=1;return}I=H.find(j=>j.credentialId===Z),ge(`Using selected: ${re.green(I.name)}`)}}catch(h){t.stop("Failed to fetch credentials"),ce(`API Error: ${h.message} `),await d("failed",{error:`Failed to fetch credentials: ${h.message}`,endTime:Date.now()}),process.exitCode=1;return}let F=se.mkdtempSync(ve.join(xt.tmpdir(),`${m.nameLower}-submit-`)),X=I.keyId||I.meta?.keyId,D=I.issuerId||I.meta?.issuerId,w=I.type==="asc_api_key"?`AuthKey_${X}.p8`:"service-account.json",N=ve.join(F,w);t.start("Downloading secure key...");try{let h=await T.get(`/credentials/${I.credentialId}/download`,{params:{projectId:r,format:"raw"}});if(h.data.status!=="success"||!h.data.downloadUrl)throw new Error("Failed to get secure download URL");let M=await ws.get(h.data.downloadUrl,{responseType:"arraybuffer"});se.writeFileSync(N,Buffer.from(M.data)),t.stop("Key downloaded to secure temp storage")}catch(h){t.stop("Download failed"),ce(`Failed to download key: ${h.message}`);try{se.rmSync(F,{recursive:!0,force:!0})}catch{}await d("failed",{error:`Failed to download credential key: ${h.message}`,endTime:Date.now()}),process.exitCode=1;return}ge(re.blue(`Initiating ${s==="ios"?"TestFlight":"Google Play"} submission...`));let $=!1,O;try{if(s==="ios"){if(!X){let M=await pn({message:"Enter App Store Connect Key ID (e.g. 2X948D...):",validate:U=>U.length>0?void 0:"Key ID is required"});if(yt(M)){await d("failed",{error:"Submission cancelled while entering ASC Key ID.",endTime:Date.now()}),process.exitCode=1;return}X=M}if(!D||D==="undefined"){let M=await pn({message:"Enter App Store Connect Issuer ID (Found on ASC Keys page):",validate:U=>U.length>0?void 0:"Issuer ID is required"});if(yt(M)){await d("failed",{error:"Submission cancelled while entering ASC Issuer ID.",endTime:Date.now()}),process.exitCode=1;return}D=M}ge(`Using ASC Key ID: ${X}`),ge(`Using ASC Issuer ID: ${D}`);let h=l?await Ru(b,N,D,X,f,l):await vu(b,N,D,X,f);pr(`${s==="ios"?"App Store":"Google Play"} submission successful!`),$=!0}else O=await ku(b,N,g||"internal",p,y||"completed",E,_,o),pr("Google Play submission successful!"),$=!0}catch(h){ce(`Submission failed: ${h.message}`),await d("failed",{error:h.message,endTime:Date.now()}),St(e,{status:"failed",projectId:r,submitId:u,platform:s,profile:o,buildId:x?.buildId||e.buildId,artifactName:x?.artifactName,error:h.message,dashboardUrl:u?Tt(u,r):void 0}),process.exitCode=1}finally{$&&(await d("success",{endTime:Date.now(),versionCode:O?.versionCode,track:g,releaseStatus:y}),St(e,{status:"success",projectId:r,submitId:u,platform:s,profile:o,buildId:x?.buildId||e.buildId,artifactName:x?.artifactName,versionCode:O?.versionCode,track:g,releaseStatus:y,dashboardUrl:u?Tt(u,r):void 0})),Wu(F),b&&b.includes(`${m.nameLower}-artifact-`)}}function tu(e){let t=`./${m.configFileName}`;if(se.existsSync(t))try{return JSON.parse(se.readFileSync(t,"utf-8"))}catch(n){return ce(`Failed to read ${m.configFileName}: ${n.message}`),null}return e.projectId?{projectId:e.projectId}:(ce(`No ${m.configFileName} found. Run \`${m.nameLower} init\` or \`${m.nameLower} link\` first.`),null)}async function nu(e,t,n){let i=n.projectId||e.projectId;if(!i){ce(`${m.configFileName} is missing projectId.`),process.exitCode=1;return}let r=n.submitId||fr.randomUUID(),o=!!n.latest||!n.buildId,s=ru({...n,latest:o,profile:t,projectId:i,submitId:r}),l={projectId:i,submitId:r,platform:"ios",profile:t,latest:o,buildId:n.buildId,credentialId:n.credentialId,status:"pending",source:"cli",submitArgs:$s(n),runnerArgs:s,runnerCommand:[m.nameLower,"submit",...s].map(fu).join(" "),appName:e.name,startTime:Date.now()},a=bt();a.start("Queuing iOS submit on macOS runner...");try{let c=await T.post("/submissions",l),u=c.data?.submission||c.data?.submit||{},d=c.data?.dashboardUrl||Tt(r,i);a.stop("iOS submit queued"),ge(`Submission ID: ${re.cyan(r)}`),ge(`Dashboard: ${re.blue.underline(d)}`),St(n,{status:"pending",projectId:i,submitId:r,platform:"ios",profile:t,latest:o,buildId:n.buildId,dashboardUrl:d}),await ou(i,r,n)}catch(c){a.stop("Could not queue iOS submit"),ce(du(c)),process.exitCode=1}}async function iu(e,t,n,i,r,o={}){let s=r.submitId||fr.randomUUID(),l=!!r.latest||!r.buildId,a={projectId:t,submitId:s,platform:n,profile:i,latest:l,buildId:r.buildId,credentialId:r.credentialId,status:"running",source:"cli-direct",submitArgs:$s(r),appName:e.name,startTime:Date.now(),...o};try{let c=await T.post("/submissions",a),u=c.data?.submission||c.data?.submit||{},d=c.data?.dashboardUrl||u.dashboardUrl||Tt(s,t);return ge(`Submission ID: ${re.cyan(s)}`),ge(`Dashboard: ${re.blue.underline(d)}`),St(r,{status:"running",projectId:t,submitId:s,platform:n,profile:i,latest:l,buildId:r.buildId,dashboardUrl:d}),s}catch(c){let u=c.response?.data?.message||c.response?.data?.error||c.message;return ge(re.yellow(`Could not create submission tracking record: ${u}`)),null}}function ru(e){let t=["--local","--submit-id",e.submitId,"--project-id",e.projectId,"--platform","ios","--profile",e.profile||"production"];return e.buildId?t.push("--build-id",e.buildId):t.push("--latest"),e.credentialId&&t.push("--credential-id",e.credentialId),e.bundleId&&t.push("--bundle-id",e.bundleId),e.packageName&&t.push("--package-name",e.packageName),e.quiet&&t.push("--quiet"),e.jsonOutput&&t.push("--json-output",e.jsonOutput),t.filter(n=>n!=null&&n!=="")}async function ou(e,t,n){let i=bt(),r=0,o=0;for(n.quiet||i.start("Waiting for iOS submit runner...");;)try{let s=await T.get(`/submissions/${e}/${t}`),l=s.data?.submission||s.data?.submit||s.data,a=String(l?.status||"pending").toLowerCase();r=0;let c=Array.isArray(l?.logs)?l.logs:[];for(let u=o;u<c.length;u++){let d=c[u];d&&console.log(re.dim(String(d)))}if(o=c.length,["success","completed","succeeded"].includes(a)){n.quiet||i.stop("iOS submit completed"),pr("App Store submission successful!"),St(n,{status:"success",projectId:e,submitId:t,platform:"ios",profile:l?.profile||n.profile||"production",buildId:l?.buildId||n.buildId,artifactName:l?.artifactName,dashboardUrl:l?.dashboardUrl||Tt(t,e)});return}if(["failed","error","cancelled","canceled"].includes(a)){n.quiet||i.stop("iOS submit failed");let u=l?.error||l?.message||"Unknown iOS submit failure.";ce(u),St(n,{status:"failed",projectId:e,submitId:t,platform:"ios",profile:l?.profile||n.profile||"production",buildId:l?.buildId||n.buildId,artifactName:l?.artifactName,error:u,dashboardUrl:l?.dashboardUrl||Tt(t,e)}),process.exitCode=1;return}n.quiet||i.message(`iOS submit ${a}...`),await ur(Xc)}catch(s){if(r++,r>=Zc){n.quiet||i.stop("Lost connection to iOS submit status"),ce(`Could not fetch iOS submit status after ${r} attempts: ${s.message}`),process.exitCode=1;return}await ur(Math.min(2e3*r,15e3))}}async function su(e,t,n){let i;for(let r=1;r<=3;r++)try{await T.patch(`/submissions/${e}/${t}`,n);return}catch(o){if(i=o,r>=3||!au(o))break;await ur(1e3*r)}Is.warn(re.dim(`Could not report submission status: ${i?.message||i}`))}function au(e){let t=e.response?.status;return!t||t===408||t===409||t===425||t===429||t>=500}function lu(){let e={gitlabJobId:process.env.CI_JOB_ID,gitlabJobUrl:process.env.CI_JOB_URL,gitlabPipelineId:process.env.CI_PIPELINE_ID,gitlabProjectId:process.env.CI_PROJECT_ID,gitlabProjectPath:process.env.CI_PROJECT_PATH};return Object.fromEntries(Object.entries(e).filter(([,t])=>!!t))}function du(e){let t=e.response?.status,n=e.response?.data?.message||e.response?.data?.error;return t===404||t===405?["Managed iOS submit is not enabled on this Mach API yet.","Deploy the API/dashboard submission orchestration endpoint, then retry the same command.","Expected API: POST /submissions and GET/PATCH /submissions/:projectId/:submitId."].join(`
1429
- `):n||e.message||String(e)}function Tt(e,t){if(!e)return nt;let n=t?`?projectId=${encodeURIComponent(t)}`:"";return`${nt}/submissions/${e}${n}`}function St(e,t){if(!e.jsonOutput)return;let n=ve.resolve(e.jsonOutput),i={...t,url:t.url||t.dashboardUrl||Tt(t.submitId,t.projectId),updatedAt:new Date().toISOString()};try{let r=ve.dirname(n);r&&r!=="."&&se.mkdirSync(r,{recursive:!0}),se.writeFileSync(n,JSON.stringify(i,null,2))}catch(r){Is.warn(re.yellow(`Could not write submission metadata JSON: ${r.message}`))}}function cu(e,t){return t&&e.find(n=>n.credentialId===t||n.id===t||n.keyId===t||n.meta?.keyId===t)||null}function uu(e,t){let n=e.filter(i=>[i.bundleId,i.bundleIdentifier,i.appIdentifier,i.meta?.bundleId,i.meta?.bundleIdentifier,i.meta?.appIdentifier].filter(Boolean).map(String).includes(t));return n.length===1?n[0]:null}function pu(){return process.env.CI==="true"||process.env.CI==="1"||!process.stdin.isTTY}function ur(e){return new Promise(t=>setTimeout(t,e))}function fu(e){return/^[a-zA-Z0-9_./:=@-]+$/.test(e)?e:`'${e.replace(/'/g,"'\\''")}'`}function mu(e,t){if(e.submit?.[t]?.android?.package)return e.submit[t].android.package;let n=lo(e,t);if(n)return n;let i=ve.join(process.cwd(),"app.json");if(se.existsSync(i))try{return JSON.parse(se.readFileSync(i,"utf-8")).expo?.android?.package}catch{}let r=ve.join(process.cwd(),"app.config.json");if(se.existsSync(r))try{let o=JSON.parse(se.readFileSync(r,"utf-8"));return o.expo?.android?.package||o.android?.package}catch{}}function gu(e,t){let n=e.filter(o=>Kn(o)===t);if(n.length>0)return n;let i=e.filter(o=>{let s=Kn(o);return!s||s==="*"});return e.length>0&&e.length===i.length?i:[]}function hu(e,t){return e.submit?.[t]?.ios?.bundleIdentifier?e.submit[t].ios.bundleIdentifier:e.submit?.[t]?.ios?.bundleId?e.submit[t].ios.bundleId:co(e,t)}function yu(e,t,n){let i=e.submit?.[t]?.ios||{},r=e.submit?.production?.ios||{},o=n.sshHost||i.sshHost||r.sshHost||process.env.MACH_IOS_SUBMIT_SSH_HOST;return o?{sshHost:o,sshUser:n.sshUser||i.sshUser||r.sshUser||process.env.MACH_IOS_SUBMIT_SSH_USER||process.env.USER||"ubuntu",sshKey:n.sshKey||i.sshKey||r.sshKey||process.env.MACH_IOS_SUBMIT_SSH_KEY}:null}function Su(e,t,n){let i=n||e.submit?.[t]?.android?.releaseStatus||e.submit?.production?.android?.releaseStatus||"completed";return bu(i)}function bu(e){let t=Qc[String(e).trim().toLowerCase()];if(!t)throw new Error(`Invalid Android release status "${e}". Use completed, draft, halted, or inProgress.`);return t}function Au(e,t,n){let i=n??e.submit?.[t]?.android?.rollout??e.submit?.[t]?.android?.userFraction??e.submit?.[t]?.android?.rolloutFraction??e.submit?.production?.android?.rollout??e.submit?.production?.android?.userFraction??e.submit?.production?.android?.rolloutFraction;if(i==null||i==="")return;let r=Number(i);if(!Number.isFinite(r)||r<=0||r>=1)throw new Error(`Invalid Android rollout fraction "${i}". Use a number greater than 0 and less than 1, for example 0.1.`);return r}function Eu(e,t,n){let i=n??e.submit?.[t]?.android?.changesNotSentForReview??e.submit?.[t]?.android?.changes_not_sent_for_review??e.submit?.production?.android?.changesNotSentForReview??e.submit?.production?.android?.changes_not_sent_for_review??!1;return i===!0||i==="true"||i==="1"}function Iu(e,t){if(e==="inProgress"&&t===void 0)throw new Error("Google Play staged rollout requires --rollout <fraction> when --release-status inProgress is used.");if(e!=="inProgress"&&e!=="halted"&&t!==void 0)throw new Error("Android rollout fraction can only be used with --release-status inProgress or halted.")}async function wu(e,t,n,i){let r=n.buildId?"id":n.latest?"latest":null;if(!r){let s=await dr({message:"Select artifact source:",options:[{value:"latest",label:`Latest Production Build (${m.name})`},{value:"id",label:`Input Build ID (${m.name})`},{value:"url",label:"Remote URL"},{value:"local",label:"Local File Path"}]});if(yt(s))return cr("Operation cancelled"),null;r=s}if(r==="local"){let s=await pn({message:"Enter path to artifact (.ipa/.aab):",validate:l=>{if(!se.existsSync(l))return"File not found";if(t==="ios"&&!l.endsWith(".ipa"))return"Must be an .ipa file";if(t==="android"&&!l.endsWith(".aab"))return"Must be an .aab file"}});return yt(s)?null:{filePath:s,source:"local"}}let o=bt();if(r==="latest"){let s=n.profile||n.buildProfile;o.start(`Fetching latest${s?` ${s}`:""} build...`);try{let l=await T.get(`/builds/${e}`,{params:{limit:50}});if(l.data.status!=="success")throw new Error(l.data.message);let a=l.data.builds||[],c=s?.toLowerCase(),u=I=>I.platform?.toLowerCase()===t.toLowerCase()&&I.status?.toLowerCase()==="success",d=I=>c?[I.buildProfile,I.profile,I.profileName,I.buildType].filter(Boolean).some(F=>String(F).toLowerCase()===c):!0,p=a.filter(I=>u(I)&&d(I)),f=p.find(I=>I.buildType?.toLowerCase()==="store"||I.distribution?.toLowerCase()==="store")||p[0],g=a.some(I=>I.platform?.toLowerCase()===t.toLowerCase()&&I.status?.toLowerCase()==="success");if(!f)return o.stop("No suitable build found"),ce(s&&g?`No successful ${t} builds found for profile "${s}".`:"No successful builds found for this platform."),null;o.stop(`Found build: ${f.buildId}`);let y=f.artifacts||[];if(y.length===0||y.every(I=>!(I.url||I.downloadUrl)))try{let I=await T.get(`/builds/${e}/${f.buildId}/artifacts`);I.data.status==="success"&&I.data.artifacts?.length>0?(y=I.data.artifacts.map(F=>({...F,url:F.url||F.downloadUrl})),console.log(re.cyan(` [RECOVERY] Fetched ${y.length} artifact(s) with download URLs.`))):console.log(re.yellow(" [RECOVERY] /artifacts endpoint returned 0 artifacts."))}catch(I){console.log(re.red(` [RECOVERY] /artifacts fetch failed: ${I.message}`))}let _=t==="ios",b=y.find(I=>{let F=(I.type||"").toLowerCase(),X=(I.name||"").toLowerCase();if(console.log(re.dim(` - Checking: ${I.name} (Type: ${I.type}, HasLink: ${!!(I.url||I.downloadUrl)})`)),F)return F===(_?"ipa":"aab");let D=_?".ipa":".aab",w=(I.url||I.downloadUrl||"").toLowerCase();return X.endsWith(D)||w.includes(D)});if(!b||!(b.url||b.downloadUrl))return ce("Build found but artifact URL is missing."),null;let x=b.url||b.downloadUrl;return{filePath:await sr(x,_?"ios":"android"),buildId:f.buildId,artifactName:b.name,source:"latest"}}catch(l){return o.stop("Fetch failed"),ce(`API Error: ${l.message}`),null}}if(r==="id"){let s=n.buildId||await pn({message:"Enter Build ID:",validate:a=>a.length<5?"Invalid ID":void 0});if(yt(s))return null;let l=String(s);o.start("Fetching build...");try{let a=null;try{let f=await T.get(`/builds/${e}/${l}`);f.data.status==="success"&&(a=f.data.build)}catch(f){f.response?.status!==404&&console.log(re.dim(` [RECOVERY] Project build lookup skipped: ${f.message}`))}if(!a){let f=await T.get(`/build/${l}`);if(f.data.status!=="success")throw new Error(f.data.message);a=f.data.build}if(!a)throw new Error(`Build ${l} was not found.`);let c=t==="ios",u=Gn(a.artifacts);_u(u)||(u=await Ss(e,l,u));let d=ys(u,t);if(d||(u=await Ss(e,l,u),d=ys(u,t)),!d)throw new Error(`No ${c?".ipa":".aab"} artifact found for build ${l}. The build exists, but its artifact list does not contain a downloadable submission artifact.`);let p=d.url||d.downloadUrl;if(!p)throw new Error(`Artifact ${d.name||"(unnamed)"} for build ${l} has no download URL. Retry after the build artifact upload is visible in the Installation Hub.`);return o.stop(`Found build: ${a.buildId||l}`),{filePath:await sr(p,c?"ios":"android"),buildId:a.buildId||l,artifactName:d.name,source:"id"}}catch(a){throw o.stop("Fetch failed"),a}}if(r==="url"){let s=await pn({message:"Enter Artifact URL:",validate:l=>l.startsWith("http")?void 0:"Must be a valid URL"});return yt(s)?null:{filePath:await sr(s,t),source:"url"}}return null}function Gn(e){return(e||[]).map(t=>({...t,url:t.url||t.downloadUrl}))}function _u(e){return e.some(t=>!!(t.url||t.downloadUrl))}function ys(e,t){let n=t==="ios",i=n?"ipa":"aab",r=n?".ipa":".aab";return e.find(o=>{let s=String(o.type||"").toLowerCase(),l=String(o.name||"").toLowerCase(),a=String(o.url||o.downloadUrl||"").toLowerCase();return s?s===i:l.endsWith(r)||a.includes(r)})||null}function $u(e,t){let n=e==="ios"?".ipa":".aab";if(t.buildId)return`No downloadable ${n} artifact found for build ${t.buildId}. Check that the build finished artifact upload before submitting.`;if(t.latest){let i=t.profile||t.buildProfile;return`No latest successful ${e}${i?` ${i}`:""} build has a downloadable ${n} artifact.`}return`No downloadable ${n} artifact was selected for submission.`}async function Ss(e,t,n){try{let i=await T.get(`/builds/${e}/${t}/artifacts`);if(i.data.status==="success"&&i.data.artifacts?.length>0){let r=Gn(i.data.artifacts);return console.log(re.cyan(` [RECOVERY] Fetched ${r.length} artifact(s) with download URLs.`)),r}}catch(i){console.log(re.dim(` [RECOVERY] Project artifact lookup skipped: ${i.message}`))}try{let i=await T.get(`/public/builds/${t}`);if(i.data.status==="success"&&i.data.artifacts?.length>0){let r=Gn(i.data.artifacts);return console.log(re.cyan(` [RECOVERY] Fetched ${r.length} public artifact(s) with download URLs.`)),r}}catch(i){console.log(re.dim(` [RECOVERY] Public artifact lookup skipped: ${i.message}`))}return Gn(n)}async function sr(e,t,n=3){let i=bt();i.start("Downloading artifact...");let r=se.mkdtempSync(ve.join(xt.tmpdir(),`${m.nameLower}-artifact-`)),o=`app.${t==="ios"?"ipa":"aab"}`,s=ve.join(r,o);for(let l=1;l<=n;l++)try{l>1&&(i.message(`Downloading artifact (Retry ${l}/${n})...`),await new Promise(u=>setTimeout(u,2e3*l)));let a=se.createWriteStream(s),c=await ws({url:e,method:"GET",responseType:"stream",timeout:6e4});return await new Promise((u,d)=>{c.data.pipe(a);let p=!1;c.data.on("error",f=>{p||(p=!0,a.close(),d(f))}),a.on("finish",()=>{p||u()}),a.on("error",f=>{p||(p=!0,d(f))})}),i.stop("Download complete"),s}catch(a){if(l===n)throw i.stop("Download failed"),a}throw new Error("Download failed after retries")}async function vu(e,t,n,i,r){let o=bt();if(r&&ge(`Bundle ID: ${re.green(r)}`),!n||!i)throw ce(`Missing credentials: issuerId=${n}, keyId=${i}. Check your Dashboard.`),new Error("Missing ASC API Key Metadata (IssuerID or KeyID)");let s=vs(t,n,i),l=Tu();return o.start("Uploading to TestFlight (pilot)..."),new Promise((a,c)=>{let u=Lu(),d=qc(l.command,["pilot","upload","--ipa",e,"--api_key_path",s,"--skip_submission","true","--skip_waiting_for_build_processing","true"],{stdio:["ignore","pipe","pipe"],env:l.env});d.stdout?.on("data",p=>u.append(p,process.stdout)),d.stderr?.on("data",p=>u.append(p,process.stderr)),d.on("close",p=>{if(u.flush(),p!==0){o.stop("Pilot failed");try{se.unlinkSync(s)}catch{}c(Mu(p,u.lines()))}else{o.stop("IPA uploaded to TestFlight");try{se.unlinkSync(s)}catch{}a({})}}),d.on("error",p=>{u.flush();try{se.unlinkSync(s)}catch{}o.stop("Pilot execution error");let f=Vu(p);f.logs=u.lines(),c(f)})})}async function Ru(e,t,n,i,r,o){let s=bt();if(r&&ge(`Bundle ID: ${re.green(r)}`),!n||!i)throw ce(`Missing credentials: issuerId=${n}, keyId=${i}. Check your Dashboard.`),new Error("Missing ASC API Key Metadata (IssuerID or KeyID)");let l=vs(t,n,i),a=`${o.sshUser}@${o.sshHost}`,c=Du(o),u=Pu(o),d="",p="";try{if(s.start(`Preparing remote iOS submit runner (${a})...`),d=Ou("ssh",[...c,"mktemp -d /tmp/mach-submit.XXXXXX"]).trim(),!d)throw new Error("Remote runner did not return a temp directory.");s.stop(`Remote runner ready: ${a}`),s.start("Uploading IPA and App Store Connect key to remote runner..."),ar("scp",[...u,e,`${a}:${d}/app.ipa`],"IPA upload to remote runner"),ar("scp",[...u,l,`${a}:${d}/api_key.json`],"ASC key upload to remote runner"),p=ve.join(xt.tmpdir(),`${m.nameLower}-ios-submit-${Date.now()}.sh`),se.writeFileSync(p,Cu(d)),ar("scp",[...u,p,`${a}:${d}/submit.sh`],"submit script upload to remote runner"),s.stop("Remote submit inputs uploaded"),s.start("Uploading to TestFlight on remote runner...");let f=`chmod +x ${fn(`${d}/submit.sh`)} && bash ${fn(`${d}/submit.sh`)}`,g=Nt("ssh",[...c,f],{stdio:"inherit"});if(g.error)throw mr("ssh",g.error);if(g.status!==0)throw new Error(`Remote iOS submit failed with exit code ${g.status}.`);return s.stop("IPA uploaded to TestFlight"),{apiKeyJsonPath:null}}catch(f){throw s.stop("Remote iOS submit failed"),f}finally{try{se.unlinkSync(l)}catch{}if(p)try{se.unlinkSync(p)}catch{}if(d)try{Nt("ssh",[...c,`rm -rf ${fn(d)}`],{stdio:"ignore"})}catch{}}}function vs(e,t,n){let i=se.readFileSync(e,"utf8"),r;try{r=fr.createPrivateKey(i).export({type:"pkcs8",format:"pem"})}catch{ge("Key normalization failed, falling back to manual re-wrapping..."),r=`-----BEGIN PRIVATE KEY-----
1423
+ `),null)}function fu(e,t){let i=(ar("aapt",["dump","badging",e])||ar("aapt2",["dump","badging",e]))?.match(/package:\s+name='([^']+)'/);if(i?.[1])return i[1];let o=ar("apkanalyzer",["manifest","application-id",e])?.split(/\s+/).find(Boolean);return o||(L.appendFileSync(t,`[WARN] Could not determine Android application id from APK; post-run uninstall will be skipped.
1424
+ `),null)}function ar(e,t){for(let n of mu(e)){let i=Xe(n,t,{encoding:"utf-8",env:process.env,maxBuffer:10485760});if(i.status===0&&i.stdout)return String(i.stdout).trim()}return null}function mu(e){let t=process.platform==="win32"&&!e.endsWith(".exe")?`${e}.exe`:e,n=[];if(e==="aapt"||e==="aapt2")for(let r of hs()){let o=Y.join(r,"build-tools");for(let s of ys(o))n.push(Y.join(o,s,t))}if(e==="apkanalyzer")for(let r of hs()){n.push(Y.join(r,"cmdline-tools","latest","bin",t));let o=Y.join(r,"cmdline-tools");for(let s of ys(o))n.push(Y.join(o,s,"bin",t));n.push(Y.join(r,"tools","bin",t))}let i=gu(e);return i&&n.unshift(i),n.push(t),[...new Set(n)]}function hs(){let e=[process.env.ANDROID_HOME,process.env.ANDROID_SDK_ROOT];return process.platform==="darwin"?e.push(Y.join(tn.homedir(),"Library","Android","sdk")):process.platform==="linux"&&e.push(Y.join(tn.homedir(),"Android","Sdk"),Y.join(tn.homedir(),"Android","sdk"),"/opt/android-sdk","/usr/lib/android-sdk"),[...new Set(e.filter(t=>!!t))]}function ys(e){try{return L.readdirSync(e,{withFileTypes:!0}).filter(t=>t.isDirectory()).map(t=>t.name).sort((t,n)=>n.localeCompare(t,void 0,{numeric:!0}))}catch{return[]}}function gu(e){let t=process.platform==="win32"?"where":"/usr/bin/env",n=process.platform==="win32"?[e]:["which",e],i=Xe(t,n,{encoding:"utf-8",env:process.env});return i.status!==0||!i.stdout?null:String(i.stdout).split(`
1425
+ `)[0]?.trim()||null}async function lr(e,t,n){if(!L.existsSync(e))return;let i=L.readFileSync(e),r;for(let o=1;o<=3;o+=1)try{await An.put(t,i,{headers:{"Content-Type":n,"Content-Length":String(i.length)},maxBodyLength:1/0,maxContentLength:1/0,timeout:12e4});return}catch(s){if(r=s,!ws(s)||o>=3)break;await mr(2e3*o)}throw r}async function Ss(e,t,n,i){let r=Y.join(n,"report.xml"),o=Y.join(t,"artifacts.tar.gz");try{await lr(r,e.junitUploadUrl,"application/xml")}catch(s){L.appendFileSync(i,`[WARN] Failed to upload JUnit report: ${s.message||s}
1426
+ `)}try{await lr(i,e.logUploadUrl,"text/plain")}catch(s){L.appendFileSync(i,`[WARN] Failed to upload runner log: ${s.message||s}
1427
+ `)}try{Et("tar",["-czf",o,"-C",t,Y.basename(n)],i),await lr(o,e.artifactsUploadUrl,"application/gzip")}catch(s){L.appendFileSync(i,`[WARN] Failed to upload Maestro artifacts: ${s.message||s}
1428
+ `)}}function hu(e){if(!e.endsWith(".apk"))return B.error(V.red("Local Android Maestro runs need an APK artifact.")),!1;B.info(V.dim("Installing APK on local Android device/emulator..."));let t=Xe("adb",["install","-r",e],{stdio:"inherit",env:process.env});return t.error?(B.error(V.red(`adb failed to start: ${t.error.message}`)),!1):t.status!==0?(B.error(V.red(`adb install failed with exit code ${t.status??1}`)),!1):!0}function yu(e,t){if(e.endsWith(".ipa"))return B.error(V.red("Local iOS Maestro runs need an iOS Simulator .app.zip artifact, not an App Store .ipa.")),!1;let n=e;if(e.endsWith(".zip")){let r=Y.join(t,"ios-app");L.mkdirSync(r,{recursive:!0}),new ei(e).extractAllTo(r,!0);let o=gr(r);if(!o)return B.error(V.red("Could not find a .app bundle inside the downloaded zip.")),!1;n=o}if(!n.endsWith(".app"))return B.error(V.red("Local iOS Maestro runs need an iOS Simulator .app bundle or .app.zip artifact.")),!1;B.info(V.dim("Installing app on booted iOS Simulator..."));let i=Xe("xcrun",["simctl","install","booted",n],{stdio:"inherit",env:process.env});return i.error?(B.error(V.red(`xcrun failed to start: ${i.error.message}`)),!1):i.status!==0?(B.error(V.red(`iOS Simulator install failed with exit code ${i.status??1}`)),!1):!0}function gr(e){let t=L.readdirSync(e,{withFileTypes:!0});for(let n of t){let i=Y.join(e,n.name);if(n.isDirectory()&&n.name.endsWith(".app"))return i;if(n.isDirectory()){let r=gr(i);if(r)return r}}return null}function Su(e,t){let n=String(t||"").toLowerCase();return n==="android"?e.find(i=>en(i,".apk")):n==="ios"?e.find(i=>en(i,".app.zip"))||e.find(i=>en(i,".zip")):e.find(i=>en(i,".apk"))||e.find(i=>en(i,".app.zip"))||e.find(i=>en(i,".zip"))}function en(e,t){return String(e?.name||e?.downloadUrl||e?.url||"").toLowerCase().endsWith(t)}function hr(e){let t=String(e||"").toLowerCase();if(t.includes(".apk"))return"android";if(t.includes(".app.zip")||t.endsWith(".app")||t.includes(".ipa"))return"ios"}function Ds(e){if(e)try{return Y.basename(new URL(e).pathname)||void 0}catch{return Y.basename(e)||void 0}}function bu(e){return e?e.match(/[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/i)?.[0]:void 0}function Os(e,t){if(!e.jsonOutput)return;let n=Y.resolve(e.jsonOutput),i={...t,updatedAt:new Date().toISOString()};try{let r=Y.dirname(n);r&&r!=="."&&L.mkdirSync(r,{recursive:!0}),L.writeFileSync(n,JSON.stringify(i,null,2))}catch(r){B.warn(V.yellow(`Could not write Maestro metadata JSON: ${r.message}`))}}function Au(e,t){if(!e.jsonOutput)return;let n=Y.resolve(e.jsonOutput),i={mode:"local",...t,updatedAt:new Date().toISOString()};try{let r=Y.dirname(n);r&&r!=="."&&L.mkdirSync(r,{recursive:!0}),L.writeFileSync(n,JSON.stringify(i,null,2))}catch(r){B.warn(V.yellow(`Could not write Maestro metadata JSON: ${r.message}`))}}import{spinner as Rt,text as In,select as Er,isCancel as $t,cancel as Ir,log as Ms}from"@clack/prompts";import re from"chalk";import se from"fs";import Pe from"path";import{spawn as Eu,spawnSync as Ht}from"child_process";import Us from"axios";import Vt from"os";import $r from"crypto";var Iu=5e3,wu=12,Fs=100,yr=24,Cs=8e3,_u={completed:"completed",draft:"draft",halted:"halted",inprogress:"inProgress","in-progress":"inProgress"},$u=e=>e?.type==="google_service_account",ni=e=>e?.bundleId||e?.packageName||e?.meta?.packageName||e?.meta?.bundleId,Bs=e=>e.submitArgs||process.argv.slice(3).join(" ");async function ii(e){let t=Rt(),n=Ne(),i=vu(e);if(!i){process.exitCode=1;return}let r=e.projectId||i.projectId,o=e.profile||e.buildProfile||"production";if(!r){pe(`${m.configFileName} is missing projectId. Pass --project-id in runner mode.`),process.exitCode=1;return}i.projectId=r,be(re.dim(`Submit for project: ${i.name||r} | Profile: ${o}`));let s=e.platform;if(!s){let h=await Er({message:"Select platform to submit:",options:[{value:"ios",label:"iOS (App Store Connect / TestFlight)"},{value:"android",label:"Android (Google Play Console)"}]});if($t(h)){Ir("Operation cancelled");return}s=h}if(s=String(s).toLowerCase(),s!=="ios"&&s!=="android"){pe(`Platform ${s} is not supported. Use 'ios' or 'android'.`),process.exitCode=1;return}let l=s==="ios"&&!e.local&&e.sshHost?Hu(i,o,e):null;if(s==="ios"&&!e.local&&!l){await Ru(i,o,e);return}let a=e.submitId,d=!!(e.local&&a),u=a||null,c=async(h,M={})=>{u&&await Cu(r,u,{status:h,...M})},p=s==="android"?e.packageName||e.androidPackage||Fu(i,o):void 0,f=s==="ios"?e.bundleId||e.iosBundleIdentifier||ju(i,o):void 0,g,y,E,_=!1;try{s==="android"&&(g=e.track||i.submit?.[o]?.android?.track||i.submit?.production?.android?.track||"internal",y=Gu(i,o,e.releaseStatus),E=Ku(i,o,e.rollout),_=zu(i,o,e.changesNotSentForReview),Wu(y,E))}catch(h){pe(h.message),process.exitCode=1;return}if(s==="android"&&!d&&(u=await Pu(i,r,s,o,e,{packageName:p,track:g,releaseStatus:y,rollout:E,changesNotSentForReview:_}),!u)){pe("Could not create submission tracking record. Submission was not started."),process.exitCode=1;return}await c("running",{platform:s,profile:o,packageName:p,track:g,releaseStatus:y,rollout:E,startTime:Date.now(),...d?Tu():{}});let b=null,x=null;try{x=await Ju(r,s,e,n?.token),b=x?.filePath||null}catch(h){await c("failed",{error:`Failed to resolve submission artifact: ${h.message}`,endTime:Date.now()}),pe(`Failed to resolve submission artifact: ${h.message}`),process.exitCode=1;return}if(!b){let h=qu(s,e);await c("failed",{error:h,endTime:Date.now()}),pe(h),process.exitCode=1;return}await c("running",{buildId:x?.buildId,artifactName:x?.artifactName,artifactSource:x?.source}),be(`Using artifact: ${re.green(Pe.basename(b))} `),t.start("Fetching submission credentials from Dashboard...");let I;try{let M=(await N.get(`/credentials/${r}`)).data.credentials||[];if(s==="android"&&!p){t.stop("Package name missing"),pe("Could not resolve Android package name. Set android.package in mach.config.json/app.json."),await c("failed",{error:"Could not resolve Android package name.",endTime:Date.now()}),process.exitCode=1;return}let U=M.filter($u),j=s==="ios"?M.filter(Z=>Z.type==="asc_api_key"):Bu(U,p);if(j.length===0){if(t.stop("Credentials missing"),pe(s==="android"?`No Google Play service credential found for package ${p}.`:`No Service Credentials found for ${s}.`),s==="android"){let Z=U.map(ni).filter(Boolean).join(", ");Z&&be(`Found Google Play service credential(s) for: ${Z}`),be(`Use '${m.nameLower} credentials:service --platform android --package-name ${p}' or upload it under that package in the Dashboard.`)}else be(`Use '${m.nameLower} credentials:service --platform ${s}' or use the Dashboard to upload them.`);await c("failed",{error:`No submission credentials found for ${s}.`,endTime:Date.now()}),process.exitCode=1;return}if(I=xu(j,e.credentialId),!I&&s==="ios"&&f&&(I=Lu(j,f)),I||j.length===1)I=I||j[0],t.stop(`Using: ${I.name}`),s==="android"&&ni(I)==="*"&&be(re.yellow(`Using legacy wildcard Google Play credential for ${p}. Upload a package-scoped credential when possible.`));else{if(t.stop("Multiple credentials found"),Mu()){let H=j.map(k=>`${k.name||"credential"} (${k.credentialId||k.id||"no-id"})`).join(", ");pe(`Multiple ${s==="ios"?"App Store Connect":"Google Play"} credentials found. Use --credential-id in CI. Available: ${H}`),await c("failed",{error:"Multiple submission credentials found; --credential-id is required in CI.",endTime:Date.now()}),process.exitCode=1;return}let Z=await Er({message:`Choose a ${s==="ios"?"App Store Connect":"Google Play"} credential:`,options:j.map(H=>({value:H.credentialId,label:H.name,hint:`${H.keyId?`ID: ${H.keyId}`:""} ${H.issuerId?`(Issuer: ${H.issuerId.substring(0,8)}...)`:""}`}))});if($t(Z)){Ir("Submission cancelled"),await c("failed",{error:"Submission cancelled while selecting credential.",endTime:Date.now()}),process.exitCode=1;return}I=j.find(H=>H.credentialId===Z),be(`Using selected: ${re.green(I.name)}`)}}catch(h){t.stop("Failed to fetch credentials"),pe(`API Error: ${h.message} `),await c("failed",{error:`Failed to fetch credentials: ${h.message}`,endTime:Date.now()}),process.exitCode=1;return}let F=se.mkdtempSync(Pe.join(Vt.tmpdir(),`${m.nameLower}-submit-`)),X=I.keyId||I.meta?.keyId,P=I.issuerId||I.meta?.issuerId,w=I.type==="asc_api_key"?`AuthKey_${X}.p8`:"service-account.json",T=Pe.join(F,w);t.start("Downloading secure key...");try{let h=await N.get(`/credentials/${I.credentialId}/download`,{params:{projectId:r,format:"raw"}});if(h.data.status!=="success"||!h.data.downloadUrl)throw new Error("Failed to get secure download URL");let M=await Us.get(h.data.downloadUrl,{responseType:"arraybuffer"});se.writeFileSync(T,Buffer.from(M.data)),t.stop("Key downloaded to secure temp storage")}catch(h){t.stop("Download failed"),pe(`Failed to download key: ${h.message}`);try{se.rmSync(F,{recursive:!0,force:!0})}catch{}await c("failed",{error:`Failed to download credential key: ${h.message}`,endTime:Date.now()}),process.exitCode=1;return}be(re.blue(`Initiating ${s==="ios"?"TestFlight":"Google Play"} submission...`));let $=!1,O;try{if(s==="ios"){if(!X){let M=await In({message:"Enter App Store Connect Key ID (e.g. 2X948D...):",validate:U=>U.length>0?void 0:"Key ID is required"});if($t(M)){await c("failed",{error:"Submission cancelled while entering ASC Key ID.",endTime:Date.now()}),process.exitCode=1;return}X=M}if(!P||P==="undefined"){let M=await In({message:"Enter App Store Connect Issuer ID (Found on ASC Keys page):",validate:U=>U.length>0?void 0:"Issuer ID is required"});if($t(M)){await c("failed",{error:"Submission cancelled while entering ASC Issuer ID.",endTime:Date.now()}),process.exitCode=1;return}P=M}be(`Using ASC Key ID: ${X}`),be(`Using ASC Issuer ID: ${P}`);let h=l?await Zu(b,T,P,X,f,l):await Xu(b,T,P,X,f);_r(`${s==="ios"?"App Store":"Google Play"} submission successful!`),$=!0}else O=await ip(b,T,g||"internal",p,y||"completed",E,_,o),_r("Google Play submission successful!"),$=!0}catch(h){pe(`Submission failed: ${h.message}`),await c("failed",{error:h.message,endTime:Date.now()}),vt(e,{status:"failed",projectId:r,submitId:u,platform:s,profile:o,buildId:x?.buildId||e.buildId,artifactName:x?.artifactName,error:h.message,dashboardUrl:u?Gt(u,r):void 0}),process.exitCode=1}finally{$&&(await c("success",{endTime:Date.now(),versionCode:O?.versionCode,track:g,releaseStatus:y}),vt(e,{status:"success",projectId:r,submitId:u,platform:s,profile:o,buildId:x?.buildId||e.buildId,artifactName:x?.artifactName,versionCode:O?.versionCode,track:g,releaseStatus:y,dashboardUrl:u?Gt(u,r):void 0})),Sp(F),b&&b.includes(`${m.nameLower}-artifact-`)}}function vu(e){let t=`./${m.configFileName}`;if(se.existsSync(t))try{return JSON.parse(se.readFileSync(t,"utf-8"))}catch(n){return pe(`Failed to read ${m.configFileName}: ${n.message}`),null}return e.projectId?{projectId:e.projectId}:(pe(`No ${m.configFileName} found. Run \`${m.nameLower} init\` or \`${m.nameLower} link\` first.`),null)}async function Ru(e,t,n){let i=n.projectId||e.projectId;if(!i){pe(`${m.configFileName} is missing projectId.`),process.exitCode=1;return}let r=n.submitId||$r.randomUUID(),o=!!n.latest||!n.buildId,s=Du({...n,latest:o,profile:t,projectId:i,submitId:r}),l={projectId:i,submitId:r,platform:"ios",profile:t,latest:o,buildId:n.buildId,credentialId:n.credentialId,status:"pending",source:"cli",submitArgs:Bs(n),runnerArgs:s,runnerCommand:[m.nameLower,"submit",...s].map(Uu).join(" "),appName:e.name,startTime:Date.now()},a=Rt();a.start("Queuing iOS submit on macOS runner...");try{let d=await N.post("/submissions",l),u=d.data?.submission||d.data?.submit||{},c=d.data?.dashboardUrl||Gt(r,i);a.stop("iOS submit queued"),be(`Submission ID: ${re.cyan(r)}`),be(`Dashboard: ${re.blue.underline(c)}`),vt(n,{status:"pending",projectId:i,submitId:r,platform:"ios",profile:t,latest:o,buildId:n.buildId,dashboardUrl:c}),await Ou(i,r,n)}catch(d){a.stop("Could not queue iOS submit"),pe(Nu(d)),process.exitCode=1}}async function Pu(e,t,n,i,r,o={}){let s=r.submitId||$r.randomUUID(),l=!!r.latest||!r.buildId,a={projectId:t,submitId:s,platform:n,profile:i,latest:l,buildId:r.buildId,credentialId:r.credentialId,status:"running",source:"cli-direct",submitArgs:Bs(r),appName:e.name,startTime:Date.now(),...o};try{let d=await N.post("/submissions",a),u=d.data?.submission||d.data?.submit||{},c=d.data?.dashboardUrl||u.dashboardUrl||Gt(s,t);return be(`Submission ID: ${re.cyan(s)}`),be(`Dashboard: ${re.blue.underline(c)}`),vt(r,{status:"running",projectId:t,submitId:s,platform:n,profile:i,latest:l,buildId:r.buildId,dashboardUrl:c}),s}catch(d){let u=d.response?.data?.message||d.response?.data?.error||d.message;return be(re.yellow(`Could not create submission tracking record: ${u}`)),null}}function Du(e){let t=["--local","--submit-id",e.submitId,"--project-id",e.projectId,"--platform","ios","--profile",e.profile||"production"];return e.buildId?t.push("--build-id",e.buildId):t.push("--latest"),e.credentialId&&t.push("--credential-id",e.credentialId),e.bundleId&&t.push("--bundle-id",e.bundleId),e.packageName&&t.push("--package-name",e.packageName),e.quiet&&t.push("--quiet"),e.jsonOutput&&t.push("--json-output",e.jsonOutput),t.filter(n=>n!=null&&n!=="")}async function Ou(e,t,n){let i=Rt(),r=0,o=0;for(n.quiet||i.start("Waiting for iOS submit runner...");;)try{let s=await N.get(`/submissions/${e}/${t}`),l=s.data?.submission||s.data?.submit||s.data,a=String(l?.status||"pending").toLowerCase();r=0;let d=Array.isArray(l?.logs)?l.logs:[];for(let u=o;u<d.length;u++){let c=d[u];c&&console.log(re.dim(String(c)))}if(o=d.length,["success","completed","succeeded"].includes(a)){n.quiet||i.stop("iOS submit completed"),_r("App Store submission successful!"),vt(n,{status:"success",projectId:e,submitId:t,platform:"ios",profile:l?.profile||n.profile||"production",buildId:l?.buildId||n.buildId,artifactName:l?.artifactName,dashboardUrl:l?.dashboardUrl||Gt(t,e)});return}if(["failed","error","cancelled","canceled"].includes(a)){n.quiet||i.stop("iOS submit failed");let u=l?.error||l?.message||"Unknown iOS submit failure.";pe(u),vt(n,{status:"failed",projectId:e,submitId:t,platform:"ios",profile:l?.profile||n.profile||"production",buildId:l?.buildId||n.buildId,artifactName:l?.artifactName,error:u,dashboardUrl:l?.dashboardUrl||Gt(t,e)}),process.exitCode=1;return}n.quiet||i.message(`iOS submit ${a}...`),await wr(Iu)}catch(s){if(r++,r>=wu){n.quiet||i.stop("Lost connection to iOS submit status"),pe(`Could not fetch iOS submit status after ${r} attempts: ${s.message}`),process.exitCode=1;return}await wr(Math.min(2e3*r,15e3))}}async function Cu(e,t,n){let i;for(let r=1;r<=3;r++)try{await N.patch(`/submissions/${e}/${t}`,n);return}catch(o){if(i=o,r>=3||!ku(o))break;await wr(1e3*r)}Ms.warn(re.dim(`Could not report submission status: ${i?.message||i}`))}function ku(e){let t=e.response?.status;return!t||t===408||t===409||t===425||t===429||t>=500}function Tu(){let e={gitlabJobId:process.env.CI_JOB_ID,gitlabJobUrl:process.env.CI_JOB_URL,gitlabPipelineId:process.env.CI_PIPELINE_ID,gitlabProjectId:process.env.CI_PROJECT_ID,gitlabProjectPath:process.env.CI_PROJECT_PATH};return Object.fromEntries(Object.entries(e).filter(([,t])=>!!t))}function Nu(e){let t=e.response?.status,n=e.response?.data?.message||e.response?.data?.error;return t===404||t===405?["Managed iOS submit is not enabled on this Mach API yet.","Deploy the API/dashboard submission orchestration endpoint, then retry the same command.","Expected API: POST /submissions and GET/PATCH /submissions/:projectId/:submitId."].join(`
1429
+ `):n||e.message||String(e)}function Gt(e,t){if(!e)return st;let n=t?`?projectId=${encodeURIComponent(t)}`:"";return`${st}/submissions/${e}${n}`}function vt(e,t){if(!e.jsonOutput)return;let n=Pe.resolve(e.jsonOutput),i={...t,url:t.url||t.dashboardUrl||Gt(t.submitId,t.projectId),updatedAt:new Date().toISOString()};try{let r=Pe.dirname(n);r&&r!=="."&&se.mkdirSync(r,{recursive:!0}),se.writeFileSync(n,JSON.stringify(i,null,2))}catch(r){Ms.warn(re.yellow(`Could not write submission metadata JSON: ${r.message}`))}}function xu(e,t){return t&&e.find(n=>n.credentialId===t||n.id===t||n.keyId===t||n.meta?.keyId===t)||null}function Lu(e,t){let n=e.filter(i=>[i.bundleId,i.bundleIdentifier,i.appIdentifier,i.meta?.bundleId,i.meta?.bundleIdentifier,i.meta?.appIdentifier].filter(Boolean).map(String).includes(t));return n.length===1?n[0]:null}function Mu(){return process.env.CI==="true"||process.env.CI==="1"||!process.stdin.isTTY}function wr(e){return new Promise(t=>setTimeout(t,e))}function Uu(e){return/^[a-zA-Z0-9_./:=@-]+$/.test(e)?e:`'${e.replace(/'/g,"'\\''")}'`}function Fu(e,t){if(e.submit?.[t]?.android?.package)return e.submit[t].android.package;let n=_o(e,t);if(n)return n;let i=Pe.join(process.cwd(),"app.json");if(se.existsSync(i))try{return JSON.parse(se.readFileSync(i,"utf-8")).expo?.android?.package}catch{}let r=Pe.join(process.cwd(),"app.config.json");if(se.existsSync(r))try{let o=JSON.parse(se.readFileSync(r,"utf-8"));return o.expo?.android?.package||o.android?.package}catch{}}function Bu(e,t){let n=e.filter(o=>ni(o)===t);if(n.length>0)return n;let i=e.filter(o=>{let s=ni(o);return!s||s==="*"});return e.length>0&&e.length===i.length?i:[]}function ju(e,t){return e.submit?.[t]?.ios?.bundleIdentifier?e.submit[t].ios.bundleIdentifier:e.submit?.[t]?.ios?.bundleId?e.submit[t].ios.bundleId:$o(e,t)}function Hu(e,t,n){let i=e.submit?.[t]?.ios||{},r=e.submit?.production?.ios||{},o=n.sshHost||i.sshHost||r.sshHost||process.env.MACH_IOS_SUBMIT_SSH_HOST;return o?{sshHost:o,sshUser:n.sshUser||i.sshUser||r.sshUser||process.env.MACH_IOS_SUBMIT_SSH_USER||process.env.USER||"ubuntu",sshKey:n.sshKey||i.sshKey||r.sshKey||process.env.MACH_IOS_SUBMIT_SSH_KEY}:null}function Gu(e,t,n){let i=n||e.submit?.[t]?.android?.releaseStatus||e.submit?.production?.android?.releaseStatus||"completed";return Vu(i)}function Vu(e){let t=_u[String(e).trim().toLowerCase()];if(!t)throw new Error(`Invalid Android release status "${e}". Use completed, draft, halted, or inProgress.`);return t}function Ku(e,t,n){let i=n??e.submit?.[t]?.android?.rollout??e.submit?.[t]?.android?.userFraction??e.submit?.[t]?.android?.rolloutFraction??e.submit?.production?.android?.rollout??e.submit?.production?.android?.userFraction??e.submit?.production?.android?.rolloutFraction;if(i==null||i==="")return;let r=Number(i);if(!Number.isFinite(r)||r<=0||r>=1)throw new Error(`Invalid Android rollout fraction "${i}". Use a number greater than 0 and less than 1, for example 0.1.`);return r}function zu(e,t,n){let i=n??e.submit?.[t]?.android?.changesNotSentForReview??e.submit?.[t]?.android?.changes_not_sent_for_review??e.submit?.production?.android?.changesNotSentForReview??e.submit?.production?.android?.changes_not_sent_for_review??!1;return i===!0||i==="true"||i==="1"}function Wu(e,t){if(e==="inProgress"&&t===void 0)throw new Error("Google Play staged rollout requires --rollout <fraction> when --release-status inProgress is used.");if(e!=="inProgress"&&e!=="halted"&&t!==void 0)throw new Error("Android rollout fraction can only be used with --release-status inProgress or halted.")}async function Ju(e,t,n,i){let r=n.buildId?"id":n.latest?"latest":null;if(!r){let s=await Er({message:"Select artifact source:",options:[{value:"latest",label:`Latest Production Build (${m.name})`},{value:"id",label:`Input Build ID (${m.name})`},{value:"url",label:"Remote URL"},{value:"local",label:"Local File Path"}]});if($t(s))return Ir("Operation cancelled"),null;r=s}if(r==="local"){let s=await In({message:"Enter path to artifact (.ipa/.aab):",validate:l=>{if(!se.existsSync(l))return"File not found";if(t==="ios"&&!l.endsWith(".ipa"))return"Must be an .ipa file";if(t==="android"&&!l.endsWith(".aab"))return"Must be an .aab file"}});return $t(s)?null:{filePath:s,source:"local"}}let o=Rt();if(r==="latest"){let s=n.profile||n.buildProfile;o.start(`Fetching latest${s?` ${s}`:""} build...`);try{let l=await N.get(`/builds/${e}`,{params:{limit:50}});if(l.data.status!=="success")throw new Error(l.data.message);let a=l.data.builds||[],d=s?.toLowerCase(),u=I=>I.platform?.toLowerCase()===t.toLowerCase()&&I.status?.toLowerCase()==="success",c=I=>d?[I.buildProfile,I.profile,I.profileName,I.buildType].filter(Boolean).some(F=>String(F).toLowerCase()===d):!0,p=a.filter(I=>u(I)&&c(I)),f=p.find(I=>I.buildType?.toLowerCase()==="store"||I.distribution?.toLowerCase()==="store")||p[0],g=a.some(I=>I.platform?.toLowerCase()===t.toLowerCase()&&I.status?.toLowerCase()==="success");if(!f)return o.stop("No suitable build found"),pe(s&&g?`No successful ${t} builds found for profile "${s}".`:"No successful builds found for this platform."),null;o.stop(`Found build: ${f.buildId}`);let y=f.artifacts||[];if(y.length===0||y.every(I=>!(I.url||I.downloadUrl)))try{let I=await N.get(`/builds/${e}/${f.buildId}/artifacts`);I.data.status==="success"&&I.data.artifacts?.length>0?(y=I.data.artifacts.map(F=>({...F,url:F.url||F.downloadUrl})),console.log(re.cyan(` [RECOVERY] Fetched ${y.length} artifact(s) with download URLs.`))):console.log(re.yellow(" [RECOVERY] /artifacts endpoint returned 0 artifacts."))}catch(I){console.log(re.red(` [RECOVERY] /artifacts fetch failed: ${I.message}`))}let _=t==="ios",b=y.find(I=>{let F=(I.type||"").toLowerCase(),X=(I.name||"").toLowerCase();if(console.log(re.dim(` - Checking: ${I.name} (Type: ${I.type}, HasLink: ${!!(I.url||I.downloadUrl)})`)),F)return F===(_?"ipa":"aab");let P=_?".ipa":".aab",w=(I.url||I.downloadUrl||"").toLowerCase();return X.endsWith(P)||w.includes(P)});if(!b||!(b.url||b.downloadUrl))return pe("Build found but artifact URL is missing."),null;let x=b.url||b.downloadUrl;return{filePath:await Sr(x,_?"ios":"android"),buildId:f.buildId,artifactName:b.name,source:"latest"}}catch(l){return o.stop("Fetch failed"),pe(`API Error: ${l.message}`),null}}if(r==="id"){let s=n.buildId||await In({message:"Enter Build ID:",validate:a=>a.length<5?"Invalid ID":void 0});if($t(s))return null;let l=String(s);o.start("Fetching build...");try{let a=null;try{let f=await N.get(`/builds/${e}/${l}`);f.data.status==="success"&&(a=f.data.build)}catch(f){f.response?.status!==404&&console.log(re.dim(` [RECOVERY] Project build lookup skipped: ${f.message}`))}if(!a){let f=await N.get(`/build/${l}`);if(f.data.status!=="success")throw new Error(f.data.message);a=f.data.build}if(!a)throw new Error(`Build ${l} was not found.`);let d=t==="ios",u=ti(a.artifacts);Yu(u)||(u=await Ts(e,l,u));let c=ks(u,t);if(c||(u=await Ts(e,l,u),c=ks(u,t)),!c)throw new Error(`No ${d?".ipa":".aab"} artifact found for build ${l}. The build exists, but its artifact list does not contain a downloadable submission artifact.`);let p=c.url||c.downloadUrl;if(!p)throw new Error(`Artifact ${c.name||"(unnamed)"} for build ${l} has no download URL. Retry after the build artifact upload is visible in the Installation Hub.`);return o.stop(`Found build: ${a.buildId||l}`),{filePath:await Sr(p,d?"ios":"android"),buildId:a.buildId||l,artifactName:c.name,source:"id"}}catch(a){throw o.stop("Fetch failed"),a}}if(r==="url"){let s=await In({message:"Enter Artifact URL:",validate:l=>l.startsWith("http")?void 0:"Must be a valid URL"});return $t(s)?null:{filePath:await Sr(s,t),source:"url"}}return null}function ti(e){return(e||[]).map(t=>({...t,url:t.url||t.downloadUrl}))}function Yu(e){return e.some(t=>!!(t.url||t.downloadUrl))}function ks(e,t){let n=t==="ios",i=n?"ipa":"aab",r=n?".ipa":".aab";return e.find(o=>{let s=String(o.type||"").toLowerCase(),l=String(o.name||"").toLowerCase(),a=String(o.url||o.downloadUrl||"").toLowerCase();return s?s===i:l.endsWith(r)||a.includes(r)})||null}function qu(e,t){let n=e==="ios"?".ipa":".aab";if(t.buildId)return`No downloadable ${n} artifact found for build ${t.buildId}. Check that the build finished artifact upload before submitting.`;if(t.latest){let i=t.profile||t.buildProfile;return`No latest successful ${e}${i?` ${i}`:""} build has a downloadable ${n} artifact.`}return`No downloadable ${n} artifact was selected for submission.`}async function Ts(e,t,n){try{let i=await N.get(`/builds/${e}/${t}/artifacts`);if(i.data.status==="success"&&i.data.artifacts?.length>0){let r=ti(i.data.artifacts);return console.log(re.cyan(` [RECOVERY] Fetched ${r.length} artifact(s) with download URLs.`)),r}}catch(i){console.log(re.dim(` [RECOVERY] Project artifact lookup skipped: ${i.message}`))}try{let i=await N.get(`/public/builds/${t}`);if(i.data.status==="success"&&i.data.artifacts?.length>0){let r=ti(i.data.artifacts);return console.log(re.cyan(` [RECOVERY] Fetched ${r.length} public artifact(s) with download URLs.`)),r}}catch(i){console.log(re.dim(` [RECOVERY] Public artifact lookup skipped: ${i.message}`))}return ti(n)}async function Sr(e,t,n=3){let i=Rt();i.start("Downloading artifact...");let r=se.mkdtempSync(Pe.join(Vt.tmpdir(),`${m.nameLower}-artifact-`)),o=`app.${t==="ios"?"ipa":"aab"}`,s=Pe.join(r,o);for(let l=1;l<=n;l++)try{l>1&&(i.message(`Downloading artifact (Retry ${l}/${n})...`),await new Promise(u=>setTimeout(u,2e3*l)));let a=se.createWriteStream(s),d=await Us({url:e,method:"GET",responseType:"stream",timeout:6e4});return await new Promise((u,c)=>{d.data.pipe(a);let p=!1;d.data.on("error",f=>{p||(p=!0,a.close(),c(f))}),a.on("finish",()=>{p||u()}),a.on("error",f=>{p||(p=!0,c(f))})}),i.stop("Download complete"),s}catch(a){if(l===n)throw i.stop("Download failed"),a}throw new Error("Download failed after retries")}async function Xu(e,t,n,i,r){let o=Rt();if(r&&be(`Bundle ID: ${re.green(r)}`),!n||!i)throw pe(`Missing credentials: issuerId=${n}, keyId=${i}. Check your Dashboard.`),new Error("Missing ASC API Key Metadata (IssuerID or KeyID)");let s=js(t,n,i),l=op();return o.start("Uploading to TestFlight (pilot)..."),new Promise((a,d)=>{let u=ap(),c=Eu(l.command,["pilot","upload","--ipa",e,"--api_key_path",s,"--skip_submission","true","--skip_waiting_for_build_processing","true"],{stdio:["ignore","pipe","pipe"],env:l.env});c.stdout?.on("data",p=>u.append(p,process.stdout)),c.stderr?.on("data",p=>u.append(p,process.stderr)),c.on("close",p=>{if(u.flush(),p!==0){o.stop("Pilot failed");try{se.unlinkSync(s)}catch{}d(lp(p,u.lines()))}else{o.stop("IPA uploaded to TestFlight");try{se.unlinkSync(s)}catch{}a({})}}),c.on("error",p=>{u.flush();try{se.unlinkSync(s)}catch{}o.stop("Pilot execution error");let f=hp(p);f.logs=u.lines(),d(f)})})}async function Zu(e,t,n,i,r,o){let s=Rt();if(r&&be(`Bundle ID: ${re.green(r)}`),!n||!i)throw pe(`Missing credentials: issuerId=${n}, keyId=${i}. Check your Dashboard.`),new Error("Missing ASC API Key Metadata (IssuerID or KeyID)");let l=js(t,n,i),a=`${o.sshUser}@${o.sshHost}`,d=Qu(o),u=ep(o),c="",p="";try{if(s.start(`Preparing remote iOS submit runner (${a})...`),c=tp("ssh",[...d,"mktemp -d /tmp/mach-submit.XXXXXX"]).trim(),!c)throw new Error("Remote runner did not return a temp directory.");s.stop(`Remote runner ready: ${a}`),s.start("Uploading IPA and App Store Connect key to remote runner..."),br("scp",[...u,e,`${a}:${c}/app.ipa`],"IPA upload to remote runner"),br("scp",[...u,l,`${a}:${c}/api_key.json`],"ASC key upload to remote runner"),p=Pe.join(Vt.tmpdir(),`${m.nameLower}-ios-submit-${Date.now()}.sh`),se.writeFileSync(p,np(c)),br("scp",[...u,p,`${a}:${c}/submit.sh`],"submit script upload to remote runner"),s.stop("Remote submit inputs uploaded"),s.start("Uploading to TestFlight on remote runner...");let f=`chmod +x ${wn(`${c}/submit.sh`)} && bash ${wn(`${c}/submit.sh`)}`,g=Ht("ssh",[...d,f],{stdio:"inherit"});if(g.error)throw vr("ssh",g.error);if(g.status!==0)throw new Error(`Remote iOS submit failed with exit code ${g.status}.`);return s.stop("IPA uploaded to TestFlight"),{apiKeyJsonPath:null}}catch(f){throw s.stop("Remote iOS submit failed"),f}finally{try{se.unlinkSync(l)}catch{}if(p)try{se.unlinkSync(p)}catch{}if(c)try{Ht("ssh",[...d,`rm -rf ${wn(c)}`],{stdio:"ignore"})}catch{}}}function js(e,t,n){let i=se.readFileSync(e,"utf8"),r;try{r=$r.createPrivateKey(i).export({type:"pkcs8",format:"pem"})}catch{be("Key normalization failed, falling back to manual re-wrapping..."),r=`-----BEGIN PRIVATE KEY-----
1430
1430
  ${(i.replace(/-----BEGIN[^-]*-----/g,"").replace(/-----END[^-]*-----/g,"").replace(/\s+/g,"").match(/.{1,64}/g)||[]).join(`
1431
1431
  `)}
1432
- -----END PRIVATE KEY-----`}let o=ve.join(xt.tmpdir(),`api_key_${n}_${Date.now()}.json`),s={key_id:n,issuer_id:t,key:r,in_house:!1};return se.writeFileSync(o,JSON.stringify(s,null,2)),o}function Du(e){let t=["-o","StrictHostKeyChecking=no","-o","ServerAliveInterval=30"];return e.sshKey&&t.push("-i",e.sshKey),t.push(`${e.sshUser}@${e.sshHost}`),t}function Pu(e){let t=["-o","StrictHostKeyChecking=no","-o","ServerAliveInterval=30"];return e.sshKey&&t.push("-i",e.sshKey),t}function Ou(e,t){let n=Nt(e,t,{encoding:"utf-8",stdio:["ignore","pipe","inherit"]});if(n.error)throw mr(e,n.error);if(n.status!==0)throw new Error(`${e} failed with exit code ${n.status}.`);return n.stdout||""}function ar(e,t,n){let i=Nt(e,t,{stdio:"inherit"});if(i.error)throw mr(e,i.error);if(i.status!==0)throw new Error(`${n} failed with exit code ${i.status}.`)}function mr(e,t){return t?.code==="ENOENT"?new Error(`${e} was not found on this machine. Install OpenSSH client tools or run iOS submit directly on the macOS runner.`):t}function fn(e){return`'${e.replace(/'/g,"'\\''")}'`}function Cu(e){let t=fn(`${e}/app.ipa`),n=fn(`${e}/api_key.json`);return`#!/bin/bash
1432
+ -----END PRIVATE KEY-----`}let o=Pe.join(Vt.tmpdir(),`api_key_${n}_${Date.now()}.json`),s={key_id:n,issuer_id:t,key:r,in_house:!1};return se.writeFileSync(o,JSON.stringify(s,null,2)),o}function Qu(e){let t=["-o","StrictHostKeyChecking=no","-o","ServerAliveInterval=30"];return e.sshKey&&t.push("-i",e.sshKey),t.push(`${e.sshUser}@${e.sshHost}`),t}function ep(e){let t=["-o","StrictHostKeyChecking=no","-o","ServerAliveInterval=30"];return e.sshKey&&t.push("-i",e.sshKey),t}function tp(e,t){let n=Ht(e,t,{encoding:"utf-8",stdio:["ignore","pipe","inherit"]});if(n.error)throw vr(e,n.error);if(n.status!==0)throw new Error(`${e} failed with exit code ${n.status}.`);return n.stdout||""}function br(e,t,n){let i=Ht(e,t,{stdio:"inherit"});if(i.error)throw vr(e,i.error);if(i.status!==0)throw new Error(`${n} failed with exit code ${i.status}.`)}function vr(e,t){return t?.code==="ENOENT"?new Error(`${e} was not found on this machine. Install OpenSSH client tools or run iOS submit directly on the macOS runner.`):t}function wn(e){return`'${e.replace(/'/g,"'\\''")}'`}function np(e){let t=wn(`${e}/app.ipa`),n=wn(`${e}/api_key.json`);return`#!/bin/bash
1433
1433
  set -euo pipefail
1434
1434
 
1435
1435
  export PATH="/opt/homebrew/bin:/usr/local/bin:/usr/bin:/bin:/usr/sbin:/sbin:$HOME/.local/share/fastlane/3.4.0/bin:$PATH"
@@ -1457,39 +1457,39 @@ fastlane pilot upload \\
1457
1457
  --api_key_path ${n} \\
1458
1458
  --skip_submission true \\
1459
1459
  --skip_waiting_for_build_processing true
1460
- `}async function ku(e,t,n="internal",i,r="completed",o,s=!1,l="production"){let a=bt();if(!i||i==="*")throw new Error("Android package name is required for Google Play submission.");let c=o!==void 0?` (${o} rollout)`:"";a.start(`Uploading to Google Play ${n} track with ${r} release status${c}...`);try{let u=JSON.parse(se.readFileSync(t,"utf-8"));Nu(u);let d=await Oo({packageName:i,serviceAccount:u,aabPath:e,track:n,releaseStatus:r,userFraction:o,changesNotSentForReview:s});return a.stop(`AAB uploaded to ${n} track (versionCode ${d.versionCode})`),d}catch(u){throw a.stop("Google Play upload failed"),new Error(zu(u,n,i,l))}}function Nu(e){if(!e?.client_email||!e?.private_key)throw new Error("Invalid Google service account JSON: missing client_email or private_key.")}function lr(){let e=process.env.HOME||xt.homedir(),t=process.env.FASTLANE_GEM_HOME||ve.join(e,".local/share/fastlane/3.4.0"),n=[process.env.FASTLANE_BIN_DIR,"/usr/local/opt/ruby/bin","/opt/homebrew/opt/ruby/bin","/usr/local/bin","/opt/homebrew/bin","/usr/local/Cellar/fastlane/2.227.0/libexec/bin",ve.join(t,"bin"),process.env.PATH].filter(Boolean).join(":");return{...process.env,PATH:n,GEM_HOME:t,GEM_PATH:[t,"/usr/local/Cellar/fastlane/2.227.0/libexec",process.env.GEM_PATH].filter(Boolean).join(":"),FASTLANE_INSTALLED_VIA_HOMEBREW:"true",FASTLANE_SKIP_UPDATE_CHECK:"1",FASTLANE_HIDE_CHANGELOG:"1",LANG:process.env.LANG||"en_US.UTF-8",LC_ALL:process.env.LC_ALL||"en_US.UTF-8",CI:process.env.CI||"1"}}function Tu(){let e=lr(),t=bs(e);if(t)return t;if(process.env.MACH_SKIP_FASTLANE_INSTALL!=="1"){xu(e);let n=bs(lr());if(n)return n}return{command:"fastlane",env:lr()}}function bs(e){let t=process.env.HOME||xt.homedir(),n=[process.env.FASTLANE_BINARY,"/usr/local/bin/fastlane","/opt/homebrew/bin/fastlane","/usr/local/Cellar/fastlane/2.227.0/libexec/bin/fastlane",ve.join(process.env.FASTLANE_GEM_HOME||ve.join(t,".local/share/fastlane/3.4.0"),"bin/fastlane"),"fastlane"].filter(Boolean);for(let i of n){if(i.includes("/")&&!se.existsSync(i))continue;if(!Nt(i,["--version"],{env:e,stdio:"ignore"}).error)return{command:i,env:e}}return null}function xu(e){let t=Nt("gem",["--version"],{env:e,stdio:"ignore"});if(t.error||t.status!==0)return;let n=process.env.HOME||xt.homedir(),i=process.env.FASTLANE_GEM_HOME||ve.join(n,".local/share/fastlane/3.4.0"),r=ve.join(i,"bin");se.mkdirSync(r,{recursive:!0}),ge(re.dim("fastlane not found. Installing fastlane into the local Mach runner cache..."));let o=Nt("gem",["install","fastlane","-NV","--install-dir",i,"--bindir",r],{env:{...e,GEM_HOME:i,GEM_PATH:[i,e.GEM_PATH].filter(Boolean).join(":")},stdio:"inherit"});(o.error||o.status!==0)&&ge(re.yellow("Automatic fastlane install failed; Mach will try PATH resolution once more."))}function Lu(e=_s){let t=[],n="",i=r=>{let o=Ds(r);if(o)for(t.push(o);t.length>e;)t.shift()};return{append(r,o){let s=Buffer.isBuffer(r)?r.toString("utf8"):String(r);o.write(s),n+=s;let l=n.split(/\r?\n/);n=l.pop()||"";for(let a of l)i(a)},flush(){n.trim()&&i(n),n=""},lines(){return t.slice()}}}function Mu(e,t){let n=new Error(Uu(e,t));return n.logs=Rs(t),n.exitCode=e,n}function Uu(e,t){let n=`fastlane pilot failed with exit code ${e??"unknown"}.`,i=Fu(t);return i.length===0?n:`${n}
1460
+ `}async function ip(e,t,n="internal",i,r="completed",o,s=!1,l="production"){let a=Rt();if(!i||i==="*")throw new Error("Android package name is required for Google Play submission.");let d=o!==void 0?` (${o} rollout)`:"";a.start(`Uploading to Google Play ${n} track with ${r} release status${d}...`);try{let u=JSON.parse(se.readFileSync(t,"utf-8"));rp(u);let c=await Ko({packageName:i,serviceAccount:u,aabPath:e,track:n,releaseStatus:r,userFraction:o,changesNotSentForReview:s});return a.stop(`AAB uploaded to ${n} track (versionCode ${c.versionCode})`),c}catch(u){throw a.stop("Google Play upload failed"),new Error(yp(u,n,i,l))}}function rp(e){if(!e?.client_email||!e?.private_key)throw new Error("Invalid Google service account JSON: missing client_email or private_key.")}function Ar(){let e=process.env.HOME||Vt.homedir(),t=process.env.FASTLANE_GEM_HOME||Pe.join(e,".local/share/fastlane/3.4.0"),n=[process.env.FASTLANE_BIN_DIR,"/usr/local/opt/ruby/bin","/opt/homebrew/opt/ruby/bin","/usr/local/bin","/opt/homebrew/bin","/usr/local/Cellar/fastlane/2.227.0/libexec/bin",Pe.join(t,"bin"),process.env.PATH].filter(Boolean).join(":");return{...process.env,PATH:n,GEM_HOME:t,GEM_PATH:[t,"/usr/local/Cellar/fastlane/2.227.0/libexec",process.env.GEM_PATH].filter(Boolean).join(":"),FASTLANE_INSTALLED_VIA_HOMEBREW:"true",FASTLANE_SKIP_UPDATE_CHECK:"1",FASTLANE_HIDE_CHANGELOG:"1",LANG:process.env.LANG||"en_US.UTF-8",LC_ALL:process.env.LC_ALL||"en_US.UTF-8",CI:process.env.CI||"1"}}function op(){let e=Ar(),t=Ns(e);if(t)return t;if(process.env.MACH_SKIP_FASTLANE_INSTALL!=="1"){sp(e);let n=Ns(Ar());if(n)return n}return{command:"fastlane",env:Ar()}}function Ns(e){let t=process.env.HOME||Vt.homedir(),n=[process.env.FASTLANE_BINARY,"/usr/local/bin/fastlane","/opt/homebrew/bin/fastlane","/usr/local/Cellar/fastlane/2.227.0/libexec/bin/fastlane",Pe.join(process.env.FASTLANE_GEM_HOME||Pe.join(t,".local/share/fastlane/3.4.0"),"bin/fastlane"),"fastlane"].filter(Boolean);for(let i of n){if(i.includes("/")&&!se.existsSync(i))continue;if(!Ht(i,["--version"],{env:e,stdio:"ignore"}).error)return{command:i,env:e}}return null}function sp(e){let t=Ht("gem",["--version"],{env:e,stdio:"ignore"});if(t.error||t.status!==0)return;let n=process.env.HOME||Vt.homedir(),i=process.env.FASTLANE_GEM_HOME||Pe.join(n,".local/share/fastlane/3.4.0"),r=Pe.join(i,"bin");se.mkdirSync(r,{recursive:!0}),be(re.dim("fastlane not found. Installing fastlane into the local Mach runner cache..."));let o=Ht("gem",["install","fastlane","-NV","--install-dir",i,"--bindir",r],{env:{...e,GEM_HOME:i,GEM_PATH:[i,e.GEM_PATH].filter(Boolean).join(":")},stdio:"inherit"});(o.error||o.status!==0)&&be(re.yellow("Automatic fastlane install failed; Mach will try PATH resolution once more."))}function ap(e=Fs){let t=[],n="",i=r=>{let o=Gs(r);if(o)for(t.push(o);t.length>e;)t.shift()};return{append(r,o){let s=Buffer.isBuffer(r)?r.toString("utf8"):String(r);o.write(s),n+=s;let l=n.split(/\r?\n/);n=l.pop()||"";for(let a of l)i(a)},flush(){n.trim()&&i(n),n=""},lines(){return t.slice()}}}function lp(e,t){let n=new Error(cp(e,t));return n.logs=Hs(t),n.exitCode=e,n}function cp(e,t){let n=`fastlane pilot failed with exit code ${e??"unknown"}.`,i=dp(t);return i.length===0?n:`${n}
1461
1461
 
1462
1462
  Fastlane output:
1463
1463
  ${i.join(`
1464
- `)}`}function Fu(e){let t=Rs(e);if(t.length===0)return[];let n=As(t.filter(Hu)),i=Bu(t);if(i)return[i,...Es(n,or-1,hs)];let r=n.length>0?n:t.slice(-or);return Es(As(r),or,hs)}function Bu(e){let t=e.join(`
1465
- `),n=t.match(/CFBundleShortVersionString\s*\[([^\]]+)\]/i)?.[1]||t.match(/train version ['"]([^'"]+)['"]/i)?.[1];if(/Invalid Pre-Release Train/i.test(t)||/CFBundleShortVersionString[\s\S]*must contain a higher version/i.test(t))return[`App Store Connect rejected CFBundleShortVersionString${n?` ${n}`:""}: this App Store version train is closed or not higher than the approved version.`,'ios.buildNumber="auto" only changes CFBundleVersion; bump the marketing version (Expo app.json "expo.version" / iOS MARKETING_VERSION), rebuild, then submit the new build.'].join(" ");if(!/bundle version must be higher than the previously uploaded version/i.test(t))return null;let i=t.match(/previous(?:ly)?BundleVersion\s*:\s*([0-9.]+)/i)?.[1]||t.match(/previously uploaded version:\s*[‘'"]?([0-9.]+)/i)?.[1];return`App Store Connect rejected CFBundleVersion: the bundle version must be higher than the previously uploaded version.${i?` Previous uploaded build: ${i}.`:""}`}function Hu(e){return/\[!\]|ERROR ITMS-\d+|ITMS-\d+|ENTITY_ERROR|previousBundleVersion|CFBundleVersion|Application Loader Error Output|Transporter Error|Transporter transfer failed|Asset validation failed|Validation failed|Error Domain=|The request could not be completed|No suitable application records|Could not|authentication|unauthori[sz]ed|invalid|failed|exception/i.test(e)}function As(e){let t=new Set,n=[];for(let i of e){let r=i.trim();!r||t.has(r)||(t.add(r),n.push(i))}return n}function Es(e,t,n){let i=[],r=0;for(let o=e.length-1;o>=0&&i.length<t;o--){let s=e[o],l=r+s.length+1;if(l>n&&i.length>0)break;i.unshift(s.length>n?`${s.slice(0,n-18)}... [truncated]`:s),r=l}return i}function Rs(e){if(!Array.isArray(e))return[];let t=[];for(let n of e){let i=String(n).split(/\r?\n/);for(let r of i){let o=Ds(r);o&&t.push(o)}}return t.slice(-_s)}function Ds(e){return Gu(ju(e).trimEnd()).trim()}function ju(e){return e.replace(/[\u001b\u009b][[\]()#;?]*(?:(?:(?:[a-zA-Z\d]*(?:;[a-zA-Z\d]*)*)?\u0007)|(?:(?:\d{1,4}(?:;\d{0,4})*)?[\dA-PR-TZcf-nq-uy=><~]))/g,"")}function Gu(e){let t=e.replace(/-----BEGIN [^-]+-----[\s\S]*?-----END [^-]+-----/g,"[REDACTED_PRIVATE_KEY]").replace(/(authorization:\s*bearer\s+)[A-Za-z0-9._-]+/ig,"$1[REDACTED]").replace(/((?:password|token|secret|private[_-]?key)\s*[:=]\s*)("[^"]+"|'[^']+'|[^\s,]+)/ig,"$1[REDACTED]");for(let[n,i]of Object.entries(process.env))!i||i.length<8||/(TOKEN|SECRET|PASSWORD|PASS|PRIVATE|CREDENTIAL)/i.test(n)&&(t=t.replace(new RegExp(Ku(i),"g"),"[REDACTED]"));return t}function Ku(e){return e.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}function Vu(e){return e?.code!=="ENOENT"?e:new Error(["fastlane was not found on PATH.","Mach submit uses Fastlane for iOS TestFlight/App Store uploads.","Run iOS submit on a macOS runner with Fastlane, or expose it via FASTLANE_BINARY / FASTLANE_BIN_DIR.","Example: gem install fastlane -NV"].join(`
1466
- `))}function zu(e,t,n,i="production"){let r=e?.message||String(e);if(/changesNotSentForReview/i.test(r))return["Google Play rejected the commit because this change may need explicit review handling.",`Package: ${n||"unknown"} | Track: ${t}`,`Retry with: ${m.nameLower} submit --latest --platform android --profile ${i} --track ${t} --changes-not-sent-for-review`,"Then send the change for review from Google Play Console if required."].join(`
1464
+ `)}`}function dp(e){let t=Hs(e);if(t.length===0)return[];let n=xs(t.filter(pp)),i=up(t);if(i)return[i,...Ls(n,yr-1,Cs)];let r=n.length>0?n:t.slice(-yr);return Ls(xs(r),yr,Cs)}function up(e){let t=e.join(`
1465
+ `),n=t.match(/CFBundleShortVersionString\s*\[([^\]]+)\]/i)?.[1]||t.match(/train version ['"]([^'"]+)['"]/i)?.[1];if(/Invalid Pre-Release Train/i.test(t)||/CFBundleShortVersionString[\s\S]*must contain a higher version/i.test(t))return[`App Store Connect rejected CFBundleShortVersionString${n?` ${n}`:""}: this App Store version train is closed or not higher than the approved version.`,'ios.buildNumber="auto" only changes CFBundleVersion; bump the marketing version (Expo app.json "expo.version" / iOS MARKETING_VERSION), rebuild, then submit the new build.'].join(" ");if(!/bundle version must be higher than the previously uploaded version/i.test(t))return null;let i=t.match(/previous(?:ly)?BundleVersion\s*:\s*([0-9.]+)/i)?.[1]||t.match(/previously uploaded version:\s*[‘'"]?([0-9.]+)/i)?.[1];return`App Store Connect rejected CFBundleVersion: the bundle version must be higher than the previously uploaded version.${i?` Previous uploaded build: ${i}.`:""}`}function pp(e){return/\[!\]|ERROR ITMS-\d+|ITMS-\d+|ENTITY_ERROR|previousBundleVersion|CFBundleVersion|Application Loader Error Output|Transporter Error|Transporter transfer failed|Asset validation failed|Validation failed|Error Domain=|The request could not be completed|No suitable application records|Could not|authentication|unauthori[sz]ed|invalid|failed|exception/i.test(e)}function xs(e){let t=new Set,n=[];for(let i of e){let r=i.trim();!r||t.has(r)||(t.add(r),n.push(i))}return n}function Ls(e,t,n){let i=[],r=0;for(let o=e.length-1;o>=0&&i.length<t;o--){let s=e[o],l=r+s.length+1;if(l>n&&i.length>0)break;i.unshift(s.length>n?`${s.slice(0,n-18)}... [truncated]`:s),r=l}return i}function Hs(e){if(!Array.isArray(e))return[];let t=[];for(let n of e){let i=String(n).split(/\r?\n/);for(let r of i){let o=Gs(r);o&&t.push(o)}}return t.slice(-Fs)}function Gs(e){return mp(fp(e).trimEnd()).trim()}function fp(e){return e.replace(/[\u001b\u009b][[\]()#;?]*(?:(?:(?:[a-zA-Z\d]*(?:;[a-zA-Z\d]*)*)?\u0007)|(?:(?:\d{1,4}(?:;\d{0,4})*)?[\dA-PR-TZcf-nq-uy=><~]))/g,"")}function mp(e){let t=e.replace(/-----BEGIN [^-]+-----[\s\S]*?-----END [^-]+-----/g,"[REDACTED_PRIVATE_KEY]").replace(/(authorization:\s*bearer\s+)[A-Za-z0-9._-]+/ig,"$1[REDACTED]").replace(/((?:password|token|secret|private[_-]?key)\s*[:=]\s*)("[^"]+"|'[^']+'|[^\s,]+)/ig,"$1[REDACTED]");for(let[n,i]of Object.entries(process.env))!i||i.length<8||/(TOKEN|SECRET|PASSWORD|PASS|PRIVATE|CREDENTIAL)/i.test(n)&&(t=t.replace(new RegExp(gp(i),"g"),"[REDACTED]"));return t}function gp(e){return e.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}function hp(e){return e?.code!=="ENOENT"?e:new Error(["fastlane was not found on PATH.","Mach submit uses Fastlane for iOS TestFlight/App Store uploads.","Run iOS submit on a macOS runner with Fastlane, or expose it via FASTLANE_BINARY / FASTLANE_BIN_DIR.","Example: gem install fastlane -NV"].join(`
1466
+ `))}function yp(e,t,n,i="production"){let r=e?.message||String(e);if(/changesNotSentForReview/i.test(r))return["Google Play rejected the commit because this change may need explicit review handling.",`Package: ${n||"unknown"} | Track: ${t}`,`Retry with: ${m.nameLower} submit --latest --platform android --profile ${i} --track ${t} --changes-not-sent-for-review`,"Then send the change for review from Google Play Console if required."].join(`
1467
1467
  `);if(/caller does not have permission|permission denied|insufficient permissions|not authorized/i.test(r))return["Google Play rejected the service account permissions.",`Package: ${n||"unknown"} | Track: ${t}`,"Grant this service account access to the app in Play Console with release permissions, then retry."].join(`
1468
1468
  `);if(/package.*not found|application.*not found|no application was found/i.test(r))return["Google Play could not find this package for the selected service account.",`Package: ${n||"unknown"} | Track: ${t}`,"Check android.package / submit.<profile>.android.package and make sure the app exists in this Play Console account."].join(`
1469
1469
  `);if(/only releases with status draft|draft app/i.test(r))return["Google Play requires a draft release for this app state.",`Package: ${n||"unknown"} | Track: ${t}`,`Retry with: ${m.nameLower} submit --latest --platform android --profile ${i} --track ${t} --release-status draft`].join(`
1470
1470
  `);if(r.includes("does not allow any existing users to upgrade"))return["Google Play rejected this release because the uploaded AAB is not an upgrade for existing users.",`Package: ${n||"unknown"} | Track: ${t}`,"Build a new Android artifact with a higher versionCode, then submit that build.",`Recommended: ${m.nameLower} build --platform android --profile ${i} --auto-version`,`Then: ${m.nameLower} submit --latest --platform android --profile ${i} --track ${t}`].join(`
1471
1471
  `);if(/version code \d+ has already been used/i.test(r))return[r.match(/version code \d+ has already been used[^\n]*/i)?.[0]||"Version code has already been used.",`Package: ${n||"unknown"} | Track: ${t}`,"Build a new Android artifact with a higher versionCode, then submit that build.",`Recommended: ${m.nameLower} build --platform android --profile ${i} --auto-version`].join(`
1472
- `);let o=r.match(/Google Api Error:[^\n]+/)||r.match(/Google Play API Error:[^\n]+/);return o?o[0]:r||"Google Play submission failed"}function Wu(e){try{se.existsSync(e)&&se.rmSync(e,{recursive:!0,force:!0})}catch{}}function ce(e){console.log(re.red(`\u274C ${e}`))}function ge(e){console.log(re.gray(`\u2022 ${e}`))}function pr(e){console.log(re.green(`\u2713 ${e}`))}var gr=8,qu=6,Ts=Number(process.env.MACH_ARTIFACT_UPLOAD_MAX_ATTEMPTS||2),hr=Number(process.env.MACH_ARTIFACT_UPLOAD_TIMEOUT_MS||12e4),yr="ap-south-1",Xu=`${m.envPrefix}S3_DEBUG`,Zu=()=>["1","true","yes","on"].includes(String(process.env[Xu]||"").trim().toLowerCase()),Ar=(e,t)=>{if(Zu()&&t)try{let n=new URL(t);R.info(P.dim(`[S3_DEBUG] ${e} host=${n.hostname} expectedRegion=${yr}`)),n.hostname.includes(yr)||R.warn(P.yellow(`[S3_DEBUG] ${e} host ${n.hostname} does not include ${yr}`))}catch(n){R.warn(P.yellow(`[S3_DEBUG] Could not parse ${e} presigned URL host: ${n.message}`))}},xs=new Set([".git",".gradle",".idea",".mach-cache",".expo",".turbo",".yarn/cache","build","builds","coverage","dist","node_modules",`${m.nameLower}_cli`,`.${m.nameLower}_cli`]),Qu=new Set(["android/.gradle","android/.cxx","android/app/.cxx","android/app/build","android/build","ios/Pods","ios/build","ios/DerivedData"]),ep=[{value:"production",label:"production",hint:"Store / release build"},{value:"staging",label:"staging",hint:"Internal testing build"},{value:"development",label:"development",hint:"Development build"}],Js=e=>new Promise(t=>setTimeout(t,e)),Ys=e=>e.split(he.sep).filter(Boolean).join("/"),tp=(e,t)=>{let n=Ys(e),i=n.split("/")[0];return n?!!(xs.has(n)||xs.has(i)||Qu.has(n)||t==="ios"&&i==="android"||t==="android"&&i==="ios"):!1},np=(e,t,n)=>{let i=0,r=new Set,o=(s,l)=>{let a=Ys(l);if(tp(a,n)){r.add(a.split("/")[0]||a);return}let c=ue.lstatSync(s);if(!c.isSymbolicLink()){if(c.isDirectory()){for(let u of ue.readdirSync(s))o(he.join(s,u),he.join(l,u));return}if(c.isFile()){let u=he.dirname(a);e.addLocalFile(s,u==="."?void 0:u,he.basename(a)),i++}}};for(let s of ue.readdirSync(t))o(he.join(t,s),s);return{files:i,skipped:Array.from(r).sort()}},ip=e=>!e.yes&&!e.failOnly&&!e.buildId&&process.stdin.isTTY&&process.stdout.isTTY,rp=e=>{if(!e||typeof e!="object")return;let t=[e.distribution?`distribution: ${e.distribution}`:void 0,e.environment?`env: ${e.environment}`:void 0,e.developmentClient?"development client":void 0,e.simulator?"simulator":void 0].filter(Boolean);return t.length>0?t.join(", "):void 0},op=()=>{let e=_e(`./${m.configFileName}`),t=e?.build&&typeof e.build=="object"?e.build:{},n=Object.keys(t);return n.length===0?ep:n.map(i=>({value:i,label:i,hint:rp(t[i])}))},sp=async e=>{let t=ip(e);if(!e.platform&&t){let n=await Ps({message:"Select platform",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"}]});Yn(n)&&(Cs("Build cancelled."),process.exit(0)),e.platform=n}if(!e.buildProfile&&t){let n=op(),i=await Ps({message:"Select build profile",options:n,initialValue:n.find(r=>r.value==="production")?.value||n[0]?.value});Yn(i)&&(Cs("Build cancelled."),process.exit(0)),e.buildProfile=i}e.buildProfile||(e.buildProfile="production")},Ls=e=>{if(e===!0||e===!1)return e;if(e===1||e==="1")return!0;if(e===0||e==="0")return!1;if(typeof e!="string")return;let t=e.trim().toLowerCase();if(["true","yes","on"].includes(t))return!0;if(["false","no","off"].includes(t))return!1},qs=(e,t)=>{if(e)for(let n of t){let i=n.replace(/[.*+?^${}()|[\]\\]/g,"\\$&"),r=e.match(new RegExp(`(?:^|\\s)${i}(?:=|\\s+)([^\\s]+)`));if(r?.[1])return r[1].replace(/^["']|["']$/g,"")}},ap=(e,t)=>!!e&&t.some(n=>new RegExp(`(?:^|\\s)${n.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}(?:\\s|$)`).test(e)),lp=e=>{let n=qs(e,["--platform"])||e?.split(/\s+/).find(i=>i==="ios"||i==="android");return n==="ios"||n==="android"?n:void 0},dp=async e=>{if(!(!e.projectId||!e.buildId))try{let t=await T.get(`/builds/${e.projectId}/${e.buildId}`),n=t.data?.build||t.data;if(!n||typeof n!="object")return;let i=typeof n.buildArgs=="string"?n.buildArgs:void 0;if(!e.platform){let r=n.platform||lp(i);(r==="ios"||r==="android")&&(e.platform=r)}if(e.buildProfile||(e.buildProfile=n.buildProfile||n.profile||n.profileName||qs(i,["--profile","--build-profile","-p"])),e.simulator===void 0){let r=Ls(n.simulator??n.isSimulator);r!==void 0?e.simulator=r:ap(i,["--simulator"])&&(e.simulator=!0)}if(e.developmentClient===void 0){let r=Ls(n.developmentClient??n.devClient);r!==void 0&&(e.developmentClient=r)}}catch(t){R.warn(P.yellow(`Could not load saved build options for runner: ${t.message}`))}},cp=e=>{if(!Number.isFinite(e)||e<=0)return"0 B";let t=["B","KB","MB","GB"],n=Math.min(Math.floor(Math.log(e)/Math.log(1024)),t.length-1);return`${(e/Math.pow(1024,n)).toFixed(n===0?0:1)} ${t[n]}`},up=e=>{let t=e.response?.status,n=e.code||"",i=e.message||"";return t?t===408||t===409||t===425||t===429||t>=500||/ECONNRESET|ETIMEDOUT|EAI_AGAIN|ENOTFOUND|ECONNABORTED|socket hang up|network|timeout/i.test(`${n} ${i}`):!0},zn=async(e,t,n=qu)=>{let i;for(let r=1;r<=n;r++)try{return await t()}catch(o){if(i=o,!up(o)||r>=n)break;let s=Math.min(6e4,2e3*Math.pow(2,r-1)),l=o.response?.status||o.code||o.message||"network error";R.warn(P.yellow(`${e} failed transiently (${l}). Retrying in ${Math.round(s/1e3)}s... (${r}/${n})`)),await Js(s)}throw i},pp=async(e,t,n)=>{let i=he.basename(e),r=ue.statSync(e).size,o=Math.round(hr/1e3);Ar(`ARTIFACT_UPLOAD ${i}`,t);try{await zn(`Upload artifact ${i}`,async()=>{let s=new AbortController,l=ue.createReadStream(e),a=setTimeout(()=>{l.destroy(new Error(`Artifact upload timed out after ${o}s`)),s.abort()},hr);try{await Jn.put(t,l,{headers:{"Content-Type":n,"Content-Length":r,Connection:"close"},maxBodyLength:1/0,maxContentLength:1/0,timeout:hr,timeoutErrorMessage:`Artifact upload timed out after ${o}s`,signal:s.signal})}finally{clearTimeout(a)}},Ts)}catch(s){throw new Error(`${i} (${cp(r)}) failed after ${Ts} upload attempt(s): ${s.message||s}`)}return r},fp=e=>{let t=e.response?.status;return t?t===408||t===429||t>=500:!0},mn=e=>e.credentialId||e.id,mp=async(e,t)=>{let n=mn(e);if(!n)return e.downloadUrl;let i=await T.get(`/credentials/${n}/download`,{params:{projectId:t,format:"raw"}});return i.data?.status==="success"&&i.data?.downloadUrl?i.data.downloadUrl:e.downloadUrl},Xs=async(e,t)=>{let n=e.downloadUrl;for(let i=1;i<=gr;i++)try{if((!n||i>1)&&(n=await mp(e,t)),!n)throw new Error(`Credential ${e.name||mn(e)||"unknown"} has no download URL.`);let r=await Jn.get(n,{responseType:"arraybuffer",timeout:6e4,maxContentLength:1/0,maxBodyLength:1/0,headers:{Connection:"close"}});return Buffer.from(r.data).toString("base64")}catch(r){if(i>=gr||!fp(r))throw r;let o=Math.min(1500*i*i,15e3);R.warn(P.dim(` - Temporary network error downloading ${e.name}. Retrying... (${i}/${gr})`)),await Js(o)}throw new Error(`Failed to download credential ${e.name||mn(e)||"unknown"}.`)},Ms=async(e,t)=>{let n=await Xs(e,t);return Buffer.from(n,"base64").toString("utf8")},gp=(e,t)=>{try{return JSON.parse(e)}catch{throw new Error(`${t} is not valid JSON.`)}},hp=e=>/ECONNRESET|ETIMEDOUT|EAI_AGAIN|ENOTFOUND|ECONNABORTED|socket hang up|network|timeout/i.test(e),yp=(e,t)=>t?.ios?.buildNumber??t?.iosBuildNumber??e?.ios?.buildNumber??e?.expo?.ios?.buildNumber,Sp=(e,t,n)=>t?.ios?.ascAppId??t?.ascAppId??e?.ios?.ascAppId??e?.submit?.[n]?.ios?.ascAppId??e?.submit?.production?.ios?.ascAppId,Us=e=>e.bundleId||e.bundleIdentifier||e.meta?.bundleId||e.meta?.bundleIdentifier,Fs=(e,t)=>{let n=e.filter(i=>i.type==="asc_api_key");if(n.length!==0){if(t){let i=n.find(o=>Us(o)===t);if(i)return i;let r=n.find(o=>Us(o)==="*");if(r)return r}return n[0]}},bp=e=>typeof e=="string"&&e.trim().toLowerCase()==="auto",Zs=(e,t,n=[])=>{if(!ue.existsSync(e))return n;let i;try{i=ue.readdirSync(e,{withFileTypes:!0})}catch{return n}for(let r of i){if(r.name==="Pods"||r.name==="build"||r.name==="DerivedData")continue;let o=he.join(e,r.name);r.isDirectory()?Zs(o,t,n):r.name===t&&n.push(o)}return n},Ap=(e,t,n)=>{let i=`${n} ${t.environment||""}`.toLowerCase(),r=e.toLowerCase(),o=0;return(i.includes("development")||i.includes("dev"))&&/(^|[.-])dev(elopment)?($|[.-])/.test(r)&&(o+=20),(i.includes("staging")||i.includes("stage"))&&/(^|[.-])stag(e|ing)?($|[.-])/.test(r)&&(o+=20),(i.includes("production")||i.includes("prod"))&&(/(^|[.-])(dev|development|stag|stage|staging)($|[.-])/.test(r)||(o+=20)),o},Ep=(e,t)=>{let n=he.resolve(process.cwd(),ue.existsSync("ios")?"ios":"."),i=Zs(n,"project.pbxproj"),r=[];for(let o of i)try{let l=ue.readFileSync(o,"utf8").matchAll(/PRODUCT_BUNDLE_IDENTIFIER\s*=\s*"?([^";\s]+)"?;/g);for(let a of l){let c=a[1]?.trim();c&&!c.includes("$")&&!c.startsWith("com.apple.")&&!r.includes(c)&&r.push(c)}}catch{}if(r.length!==0)return r.length===1?r[0]:r.map(o=>({bundleId:o,score:Ap(o,e,t)})).sort((o,s)=>s.score-o.score)[0]?.bundleId},Wn=e=>String(e||"").trim().toLowerCase().replace(/_/g,"-"),qn=(e,t)=>{let n=Wn(e);return t==="ios"&&(n==="internal"||n==="ad-hoc")?"adhoc":t==="android"&&["internal","adhoc","ad-hoc","development","dev","staging","stage"].includes(n)?"internal":n},Bs=(e,t,n)=>{let i=qn(e.distributionType||e.meta?.distributionType,n);return i?i===qn(t,n):!0},Hs=(e,t,n)=>{let i=qn(e.distributionType||e.meta?.distributionType,n),r=qn(t,n);return i?i===r?3:n==="android"&&r!=="store"&&i!=="store"?2:0:1},Ip=e=>{let t=e.toLowerCase();return t==="development"||t==="dev"||t.startsWith("development-")||t.startsWith("dev-")||t.endsWith("-development")||t.endsWith("-dev")},wp=e=>{let t=e.toLowerCase();return t.includes("staging")||t.includes("stage")||t.includes("preview")||t.includes("adhoc")||t.includes("ad-hoc")},_p=(e,t)=>{let n=Wn(e.distribution),i=Wn(e.iosExportMethod),r=Wn(e.environment);return e.platform!=="ios"?n==="store"?"store":"internal":e.developmentClient||e.simulator?"development":i==="app-store"||n==="store"?"store":i==="development"||n==="development"?"development":i==="ad-hoc"||i==="adhoc"||n==="ad-hoc"||n==="adhoc"||n==="internal"?"adhoc":r==="production"||r==="store"?"store":r==="development"||r==="dev"?"development":r==="staging"||r==="stage"||r==="preview"?"adhoc":t.toLowerCase()==="production"||t.toLowerCase().includes("store")?"store":Ip(t)?"development":(wp(t),"adhoc")},Qs=e=>e.bundleId||e.bundleIdentifier||e.packageName||e.meta?.bundleId||e.meta?.bundleIdentifier||e.meta?.packageName,js=(e,t)=>{if(!t)return!0;let n=Qs(e);return!n||n==="*"||n===t},Gs=(e,t)=>{let n=Qs(e);return!t||!n?0:n===t?2:n==="*"?1:-1},ea=e=>{try{let t=Buffer.from(e,"base64").toString("utf8"),n=t.match(/<key>application-identifier<\/key>\s*<string>([^<]+)<\/string>/)?.[1]?.trim();if(!n)return;let i=t.match(/<key>TeamIdentifier<\/key>\s*<array>\s*<string>([^<]+)<\/string>/)?.[1]?.trim();if(i&&n.startsWith(`${i}.`))return n.slice(i.length+1);let r=n.indexOf(".");return r>=0?n.slice(r+1):n}catch{return}},$p=(e,t)=>{if(e===t||e==="*")return!0;if(e.endsWith(".*")){let n=e.slice(0,-2);return t.startsWith(`${n}.`)}return!1},vp=(e,t)=>{if(!t)return!0;let n=ea(e);if(n)return $p(n,t);try{return Buffer.from(e,"base64").toString("latin1").includes(t)}catch{return!0}},Xn=async e=>{if(e.failOnly){(!e.projectId||!e.buildId)&&(R.error(P.red("--project-id and --build-id are required with --fail-only.")),process.exit(1));let l=e.error||"Build runner failed before it could report a final status.";try{await T.patch(`/builds/${e.projectId}/${e.buildId}`,{status:"failed",error:l,endTime:Date.now()}),R.info(P.yellow(`Marked build ${e.buildId} as failed.`));return}catch(a){R.error(P.red(`Could not mark build failed: ${a.message}`)),process.exit(1)}}await dp(e),await sp(e),e.platform!=="android"&&e.platform!=="ios"&&(R.error(`Platform ${e.platform} is not supported. Use 'android' or 'ios'.`),process.exit(1)),e.autoSubmit&&e.platform==="ios"&&e.simulator&&(R.error(P.red("--auto-submit cannot be used with --simulator because simulator builds are not App Store artifacts.")),process.exit(1)),e.autoSubmit&&e.dryRun&&R.warn(P.yellow("--auto-submit is ignored during --dry-run."));let t=br(),n=e.buildId||Ju(),i=e.projectId,r=Date.now(),o=!!i,s=async l=>{if(i)try{await T.patch(`/builds/${i}/${n}`,{status:"failed",error:l,endTime:Date.now()})}catch{}};if(e.local&&e.buildId){e.quiet||t.start(`Preparing isolated workspace for build: ${e.buildId}`);try{let l=await T.get(`/builds/${i}/${e.buildId}/source-url`);if(l.data.status!=="success")throw new Error("Failed to get source download URL from API");Ar("SOURCE_DOWNLOAD",l.data.downloadUrl);let a=await Jn.get(l.data.downloadUrl,{responseType:"stream"}),c=(i||e.projectId||"default").replace(/[^a-zA-Z0-9-_]/g,"_"),u=he.join(Yu.homedir(),m.workspacesDir,c);ue.mkdirSync(u,{recursive:!0});let d=new Set(["node_modules",`.${m.nameLower}-cache-meta`]),p=new Set(["Pods"]);if(ue.existsSync(u)){let _=ue.readdirSync(u);for(let b of _){if(d.has(b))continue;if(b==="ios"){let I=he.join(u,"ios");try{let F=ue.readdirSync(I);for(let X of F)if(!p.has(X))try{ue.rmSync(he.join(I,X),{recursive:!0,force:!0})}catch{}}catch{}continue}let x=he.join(u,b);try{ue.rmSync(x,{recursive:!0,force:!0})}catch{}}}let f=he.join(u,"source.zip"),g=a.data,y=ue.createWriteStream(f);await new Promise((_,b)=>{g.pipe(y),g.on("error",x=>b(x)),y.on("finish",()=>_())}),new Ns(f).extractAllTo(u,!0);try{ue.unlinkSync(f)}catch{}process.chdir(u),R.info(P.green(`\u2713 Persistent workspace ready: ${u}`)),R.info(P.dim(` \u{1F4E6} Cached dirs preserved: node_modules=${ue.existsSync(he.join(u,"node_modules"))?"\u2705":"\u274C"}, Pods=${ue.existsSync(he.join(u,"ios","Pods"))?"\u2705":"\u274C"}`)),t.stop()}catch(l){t.stop(`Failed to prepare isolated workspace: ${l.message}`),i&&await s(`Setup Error: ${l.message}`),process.exit(1)}}try{let l=e.repo;if(!l)try{l=ks("git config --get remote.origin.url").toString().trim()}catch{R.warn("Could not detect git repository URL.")}!l&&e.dryRun,l||(l="https://github.com/placeholder/repo.git"),R.info(`Build ID: ${P.cyan(n)}`);let a={},c={},u=null,d=_e(`./${m.configFileName}`);if(d||(R.error(P.red(`${m.configFileName} not found. Run \`${m.nameLower} init\` or \`${m.nameLower} link\` first.`)),process.exit(1)),d){u=d;let D=ao(d);e.framework=D,i=d.projectId;let w=e.buildProfile||"production",N=ke(d,w);!N&&e.buildProfile&&(R.error(`Build profile '${w}' not found in ${m.configFileName}`),process.exit(1));let $=N||{};process.env.MACH_DEBUG&&R.info(P.dim(`Framework: ${D} | Build profile: ${w} | Platform: ${e.platform} | Distribution: ${$.distribution||"store"} | Environment: ${$.environment||w}`)),$.env&&(c=$.env,R.info(P.blue(`Use Build Profile: ${w}`)));let O=e.platform,h=$[O]||{},M=["developmentClient","simulator","distribution","buildCommand","apk","iosScheme","preBuild","postBuild","scheme","environment","androidPackage","iosBundleIdentifier","name","iosDeploymentTarget","iosApiKeyId","iosApiKeyIssuer","iosApiKeyPath","iosTeamId","iosConfiguration","iosExportMethod","branch","repo","instanceType","ami","bucket","region","nodeVersion"];e.name=d.name,e.appName=d.name,e.androidPackage=d.android?.package,e.iosBundleIdentifier=d.ios?.bundleIdentifier,e.iosScheme=d.ios?.iosScheme,!e.nodeVersion&&d.nodeVersion&&(e.nodeVersion=d.nodeVersion);let U=j=>j==="androidPackage"?h.androidPackage??h.package??$.androidPackage??$.android?.package:j==="iosBundleIdentifier"?h.iosBundleIdentifier??h.bundleIdentifier??$.iosBundleIdentifier??$.ios?.bundleIdentifier:h[j]!==void 0?h[j]:$[j];for(let j of M){let k=U(j),V=j==="androidPackage"||j==="iosBundleIdentifier";k!==void 0&&(e[j]===void 0||V)&&(e[j]=k)}if(e.platform==="ios"&&!(h.iosBundleIdentifier??h.bundleIdentifier??$.iosBundleIdentifier??$.ios?.bundleIdentifier)){let k=Ep(e,w);k&&k!==e.iosBundleIdentifier&&(R.warn(P.yellow(`Detected native iOS bundle identifier ${k}; using it for credential lookup. Set build.${w}.ios.bundleIdentifier to make this explicit.`)),e.iosBundleIdentifier=k)}e.branch=e.branch||"main",e.iosConfiguration=e.iosConfiguration||(e.developmentClient?"Debug":"Release"),e.sshUser=e.sshUser||process.env.USER||"ubuntu",e.simulator===void 0&&(e.simulator=!1),e.local===void 0&&(e.local=!1),e.verbose===void 0&&(e.verbose=!1),R.info(P.dim(`Resolved build config: framework=${D}, profile=${w}, platform=${e.platform}, simulator=${e.platform==="ios"?String(!!e.simulator):"n/a"}, developmentClient=${String(!!e.developmentClient)}, distribution=${e.distribution||$.distribution||"store"}, iosConfiguration=${e.platform==="ios"?e.iosConfiguration||"Release":"n/a"}`));let H=j=>{if(!j)return j;if(j.startsWith("scripts.")){let k=j.split(".")[1],V=d.scripts?.[k];if(V)return V;R.warn(`Script reference not found: ${j}`)}return j};e.buildCommand=H(e.buildCommand),e.preBuild=H(e.preBuild),e.postBuild=H(e.postBuild),!e.scheme&&d.scheme&&(e.scheme=d.scheme);let Z={...jt(d,m.envPrefix),...jt($,`${m.envPrefix}PROFILE_`)};a={...a,...c,...Z},process.env.IOS_P12_PASSWORD&&!a.IOS_P12_PASSWORD&&(a.IOS_P12_PASSWORD=process.env.IOS_P12_PASSWORD),process.env.MATCH_PASSWORD&&!a.MATCH_PASSWORD&&(a.MATCH_PASSWORD=process.env.MATCH_PASSWORD),e.platform==="ios"&&(!e.iosTeamId&&$.ios?.appleTeamId&&(e.iosTeamId=$.ios.appleTeamId),!e.iosTeamId&&d.submit?.[w]?.ios?.appleTeamId&&(e.iosTeamId=d.submit[w].ios.appleTeamId),!e.iosTeamId&&d.submit?.production?.ios?.appleTeamId&&(R.warn(P.yellow(`Check: Using 'production' Team ID for '${w}' build.`)),e.iosTeamId=d.submit.production.ios.appleTeamId),e.iosTeamId?R.info(P.magenta(`\u2713 Injected iOS Team ID from config: ${e.iosTeamId}`)):e.simulator||R.warn(P.yellow("\u26A0\uFE0F No iOS Team ID found. Device or archive signing may fail unless managed iOS credentials provide the team automatically.")))}let p="unknown";try{p=ks("git rev-parse --abbrev-ref HEAD").toString().trim()}catch{R.warn("Failed to detect git branch.")}let f="1.0.0";try{ue.existsSync("./package.json")&&(f=JSON.parse(ue.readFileSync("./package.json","utf-8")).version||"1.0.0")}catch{}let g=e.buildProfile||"production",y="Internal";e.developmentClient?y="DevelopmentClient":g.toLowerCase().includes("store")||g.toLowerCase()==="production"?y="Store":g.toLowerCase().includes("preview")||g.toLowerCase().includes("staging")?y="Staging":(g.toLowerCase().includes("development")||g.toLowerCase().includes("dev"))&&(y="Development");let E=e.platform==="ios"?"iOS":"Android",_=e.platform==="ios"&&e.simulator?" (Simulator)":"",b=`${E}${_} v${f} (${y})`;if(Zn(e,{status:"created",projectId:i,buildId:n,platform:e.platform,profile:g,branch:p,version:f,buildType:y,developmentClient:!!e.developmentClient,summary:b}),i){try{let D=e.buildProfile||"production",w=e.environment||D;R.info(P.blue(`Fetching managed secrets for profile: ${D} (environment: ${w})...`));let $=(await T.get(`/projects/${i}/secrets/export?env=${w}`)).data;$.status==="success"&&$.secrets&&(a={...a,...$.secrets},Object.keys($.secrets).length>0&&R.info(P.magenta(`\u2713 Injected ${Object.keys($.secrets).length} secrets from Dashboard.`)))}catch(D){R.warn(`Failed to load managed secrets from Dashboard: ${D.message}`)}if(e.platform==="ios"&&e.simulator)R.info(P.dim("Skipping managed iOS signing credentials for simulator build."));else try{R.info(P.blue("Fetching managed credentials..."));let D=_p(e,g),w=e.platform==="ios"?e.iosBundleIdentifier:e.androidPackage,N=e.platform==="ios"?"bundle":"package";R.info(P.dim(` Credential target: ${N} ${w||"not set"} (${D})`));let $=await T.get("/credentials/resolve",{params:{projectId:i,platform:e.platform,bundleId:w,distributionType:D,teamId:e.platform==="ios"?e.iosTeamId:void 0}});if($.data.status==="success"&&$.data.credentials){let O=$.data.credentials;R.info(P.magenta(`\u2713 Found ${O.length} relevant credentials.`));let h=O.filter(k=>e.platform==="ios"&&k.type==="ios_profile"?Bs(k,D,e.platform)?js(k,w):!1:e.platform==="android"&&k.type==="android_keystore"?js(k,w):!!Bs(k,D,e.platform)).sort((k,V)=>{let ae=Gs(V,w)*10+Hs(V,D,e.platform)-(Gs(k,w)*10+Hs(k,D,e.platform));return ae!==0?ae:(V.createdAt||0)-(k.createdAt||0)});R.info(P.dim(` Filtered to ${h.length} credentials for distributionType: ${D}`));let M=!1,U=!1,H=!1,Z=[];for(let k of h)if(!(k.type==="ios_cert"&&M||k.type==="ios_profile"&&U||k.type==="android_keystore"&&H)&&["ios_cert","ios_profile","android_keystore"].includes(k.type)&&(k.downloadUrl||mn(k)))try{let ae=await Xs(k,i);if(k.type==="ios_cert"&&!M)a.IOS_DIST_P12=ae,k.password?(a.IOS_P12_PASSWORD=k.password,R.info(P.dim(` - Injected ${k.name} as IOS_DIST_P12 with password from credential record`))):R.info(P.dim(` - Injected ${k.name} as IOS_DIST_P12`)),M=!0;else if(k.type==="ios_profile"&&!U){if(!vp(ae,w)){let pe=ea(ae)||"unknown";throw new Error(`Provisioning profile ${k.name||mn(k)||"unknown"} is for a different bundle ID. Expected ${w}, found ${pe}. Upload a ${D} profile for ${w}.`)}a.IOS_PROVISIONING_PROFILE=ae,R.info(P.dim(` - Injected ${k.name} as IOS_PROVISIONING_PROFILE`)),U=!0}else if(k.type==="android_keystore"&&!H){a.ANDROID_KEYSTORE_BASE64=ae;let pe=k.keystorePassword||k.password,z=k.keyPassword||k.keystorePassword||k.password,G=k.alias||k.meta?.alias;if(pe)a.ANDROID_STORE_PASSWORD=pe,R.info(P.dim(" - Injected keystore password from credential record"));else{let q=["ANDROID_STORE_PASSWORD",...[D==="store"?"PRODUCTION":D==="internal"||D==="adhoc"?"STAGING":"DEVELOPMENT",D.toUpperCase(),"PRODUCTION","STORE","INTERNAL","STAGING","RELEASE","DEBUG"].map(de=>`KEYSTORE_PASSWORD_${de}`),"KEYSTORE_PASSWORD"].find(de=>!!a[de]);q&&a[q]&&(a.ANDROID_STORE_PASSWORD=a[q])}if(z?(a.ANDROID_KEY_PASSWORD=z,R.info(P.dim(" - Injected key password from credential record"))):a.ANDROID_KEY_PASSWORD=a.ANDROID_STORE_PASSWORD||"",G)a.ANDROID_KEY_ALIAS=G;else{let ee=["ANDROID_KEY_ALIAS","KEYSTORE_ALIAS"].find(W=>!!a[W]);ee&&(a.ANDROID_KEY_ALIAS=a[ee])}R.info(P.dim(` - Injected ${k.name} as ANDROID_KEYSTORE_BASE64`)),H=!0}}catch(ae){Z.push(`${k.name||k.type}: ${ae.message}`)}let j=e.platform==="ios"?e.simulator||M&&U:H||!h.some(k=>k.type==="android_keystore");if(Z.length>0&&!j)throw new Error(`Credential setup failed:
1472
+ `);let o=r.match(/Google Api Error:[^\n]+/)||r.match(/Google Play API Error:[^\n]+/);return o?o[0]:r||"Google Play submission failed"}function Sp(e){try{se.existsSync(e)&&se.rmSync(e,{recursive:!0,force:!0})}catch{}}function pe(e){console.log(re.red(`\u274C ${e}`))}function be(e){console.log(re.gray(`\u2022 ${e}`))}function _r(e){console.log(re.green(`\u2713 ${e}`))}var Rr=8,Ep=6,Ys=Number(process.env.MACH_ARTIFACT_UPLOAD_MAX_ATTEMPTS||2),Pr=Number(process.env.MACH_ARTIFACT_UPLOAD_TIMEOUT_MS||12e4),Dr="ap-south-1",Ip=`${m.envPrefix}S3_DEBUG`,wp=()=>["1","true","yes","on"].includes(String(process.env[Ip]||"").trim().toLowerCase()),kr=(e,t)=>{if(wp()&&t)try{let n=new URL(t);R.info(D.dim(`[S3_DEBUG] ${e} host=${n.hostname} expectedRegion=${Dr}`)),n.hostname.includes(Dr)||R.warn(D.yellow(`[S3_DEBUG] ${e} host ${n.hostname} does not include ${Dr}`))}catch(n){R.warn(D.yellow(`[S3_DEBUG] Could not parse ${e} presigned URL host: ${n.message}`))}},qs=new Set([".git",".gradle",".idea",".mach-cache",".expo",".turbo",".yarn/cache","build","builds","coverage","dist","node_modules",`${m.nameLower}_cli`,`.${m.nameLower}_cli`]),_p=new Set(["android/.gradle","android/.cxx","android/app/.cxx","android/app/build","android/build","ios/Pods","ios/build","ios/DerivedData"]),$p=[{value:"production",label:"production",hint:"Store / release build"},{value:"staging",label:"staging",hint:"Internal testing build"},{value:"development",label:"development",hint:"Development build"}],ca=e=>new Promise(t=>setTimeout(t,e)),da=e=>e.split(Ae.sep).filter(Boolean).join("/"),vp=(e,t)=>{let n=da(e),i=n.split("/")[0];return n?!!(qs.has(n)||qs.has(i)||_p.has(n)||t==="ios"&&i==="android"||t==="android"&&i==="ios"):!1},Rp=(e,t,n)=>{let i=0,r=new Set,o=(s,l)=>{let a=da(l);if(vp(a,n)){r.add(a.split("/")[0]||a);return}let d=fe.lstatSync(s);if(!d.isSymbolicLink()){if(d.isDirectory()){for(let u of fe.readdirSync(s))o(Ae.join(s,u),Ae.join(l,u));return}if(d.isFile()){let u=Ae.dirname(a);e.addLocalFile(s,u==="."?void 0:u,Ae.basename(a)),i++}}};for(let s of fe.readdirSync(t))o(Ae.join(t,s),s);return{files:i,skipped:Array.from(r).sort()}},Pp=e=>!e.yes&&!e.failOnly&&!e.buildId&&process.stdin.isTTY&&process.stdout.isTTY,Dp=e=>{if(!e||typeof e!="object")return;let t=[e.distribution?`distribution: ${e.distribution}`:void 0,e.environment?`env: ${e.environment}`:void 0,e.developmentClient?"development client":void 0,e.simulator?"simulator":void 0].filter(Boolean);return t.length>0?t.join(", "):void 0},Op=()=>{let e=ve(`./${m.configFileName}`),t=e?.build&&typeof e.build=="object"?e.build:{},n=Object.keys(t);return n.length===0?$p:n.map(i=>({value:i,label:i,hint:Dp(t[i])}))},Cp=async e=>{let t=Pp(e);if(!e.platform&&t){let n=await Vs({message:"Select platform",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"}]});ai(n)&&(zs("Build cancelled."),process.exit(0)),e.platform=n}if(!e.buildProfile&&t){let n=Op(),i=await Vs({message:"Select build profile",options:n,initialValue:n.find(r=>r.value==="production")?.value||n[0]?.value});ai(i)&&(zs("Build cancelled."),process.exit(0)),e.buildProfile=i}e.buildProfile||(e.buildProfile="production")},Xs=e=>{if(e===!0||e===!1)return e;if(e===1||e==="1")return!0;if(e===0||e==="0")return!1;if(typeof e!="string")return;let t=e.trim().toLowerCase();if(["true","yes","on"].includes(t))return!0;if(["false","no","off"].includes(t))return!1},ua=(e,t)=>{if(e)for(let n of t){let i=n.replace(/[.*+?^${}()|[\]\\]/g,"\\$&"),r=e.match(new RegExp(`(?:^|\\s)${i}(?:=|\\s+)([^\\s]+)`));if(r?.[1])return r[1].replace(/^["']|["']$/g,"")}},kp=(e,t)=>!!e&&t.some(n=>new RegExp(`(?:^|\\s)${n.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}(?:\\s|$)`).test(e)),Tp=e=>{let n=ua(e,["--platform"])||e?.split(/\s+/).find(i=>i==="ios"||i==="android");return n==="ios"||n==="android"?n:void 0},Np=async e=>{if(!(!e.projectId||!e.buildId))try{let t=await N.get(`/builds/${e.projectId}/${e.buildId}`),n=t.data?.build||t.data;if(!n||typeof n!="object")return;let i=typeof n.buildArgs=="string"?n.buildArgs:void 0;if(!e.platform){let r=n.platform||Tp(i);(r==="ios"||r==="android")&&(e.platform=r)}if(e.buildProfile||(e.buildProfile=n.buildProfile||n.profile||n.profileName||ua(i,["--profile","--build-profile","-p"])),e.simulator===void 0){let r=Xs(n.simulator??n.isSimulator);r!==void 0?e.simulator=r:kp(i,["--simulator"])&&(e.simulator=!0)}if(e.developmentClient===void 0){let r=Xs(n.developmentClient??n.devClient);r!==void 0&&(e.developmentClient=r)}}catch(t){R.warn(D.yellow(`Could not load saved build options for runner: ${t.message}`))}},xp=e=>{if(!Number.isFinite(e)||e<=0)return"0 B";let t=["B","KB","MB","GB"],n=Math.min(Math.floor(Math.log(e)/Math.log(1024)),t.length-1);return`${(e/Math.pow(1024,n)).toFixed(n===0?0:1)} ${t[n]}`},Lp=e=>{let t=e.response?.status,n=e.code||"",i=e.message||"";return t?t===408||t===409||t===425||t===429||t>=500||/ECONNRESET|ETIMEDOUT|EAI_AGAIN|ENOTFOUND|ECONNABORTED|socket hang up|network|timeout/i.test(`${n} ${i}`):!0},ri=async(e,t,n=Ep)=>{let i;for(let r=1;r<=n;r++)try{return await t()}catch(o){if(i=o,!Lp(o)||r>=n)break;let s=Math.min(6e4,2e3*Math.pow(2,r-1)),l=o.response?.status||o.code||o.message||"network error";R.warn(D.yellow(`${e} failed transiently (${l}). Retrying in ${Math.round(s/1e3)}s... (${r}/${n})`)),await ca(s)}throw i},Mp=async(e,t,n)=>{let i=Ae.basename(e),r=fe.statSync(e).size,o=Math.round(Pr/1e3);kr(`ARTIFACT_UPLOAD ${i}`,t);try{await ri(`Upload artifact ${i}`,async()=>{let s=new AbortController,l=fe.createReadStream(e),a=setTimeout(()=>{l.destroy(new Error(`Artifact upload timed out after ${o}s`)),s.abort()},Pr);try{await si.put(t,l,{headers:{"Content-Type":n,"Content-Length":r,Connection:"close"},maxBodyLength:1/0,maxContentLength:1/0,timeout:Pr,timeoutErrorMessage:`Artifact upload timed out after ${o}s`,signal:s.signal})}finally{clearTimeout(a)}},Ys)}catch(s){throw new Error(`${i} (${xp(r)}) failed after ${Ys} upload attempt(s): ${s.message||s}`)}return r},Up=e=>{let t=e.response?.status;return t?t===408||t===429||t>=500:!0},_n=e=>e.credentialId||e.id,Fp=async(e,t)=>{let n=_n(e);if(!n)return e.downloadUrl;let i=await N.get(`/credentials/${n}/download`,{params:{projectId:t,format:"raw"}});return i.data?.status==="success"&&i.data?.downloadUrl?i.data.downloadUrl:e.downloadUrl},pa=async(e,t)=>{let n=e.downloadUrl;for(let i=1;i<=Rr;i++)try{if((!n||i>1)&&(n=await Fp(e,t)),!n)throw new Error(`Credential ${e.name||_n(e)||"unknown"} has no download URL.`);let r=await si.get(n,{responseType:"arraybuffer",timeout:6e4,maxContentLength:1/0,maxBodyLength:1/0,headers:{Connection:"close"}});return Buffer.from(r.data).toString("base64")}catch(r){if(i>=Rr||!Up(r))throw r;let o=Math.min(1500*i*i,15e3);R.warn(D.dim(` - Temporary network error downloading ${e.name}. Retrying... (${i}/${Rr})`)),await ca(o)}throw new Error(`Failed to download credential ${e.name||_n(e)||"unknown"}.`)},Zs=async(e,t)=>{let n=await pa(e,t);return Buffer.from(n,"base64").toString("utf8")},Bp=(e,t)=>{try{return JSON.parse(e)}catch{throw new Error(`${t} is not valid JSON.`)}},jp=e=>/ECONNRESET|ETIMEDOUT|EAI_AGAIN|ENOTFOUND|ECONNABORTED|socket hang up|network|timeout/i.test(e),Hp=(e,t)=>t?.ios?.buildNumber??t?.iosBuildNumber??e?.ios?.buildNumber??e?.expo?.ios?.buildNumber,Gp=(e,t,n)=>t?.ios?.ascAppId??t?.ascAppId??e?.ios?.ascAppId??e?.submit?.[n]?.ios?.ascAppId??e?.submit?.production?.ios?.ascAppId,Qs=e=>e.bundleId||e.bundleIdentifier||e.meta?.bundleId||e.meta?.bundleIdentifier,ea=(e,t)=>{let n=e.filter(i=>i.type==="asc_api_key");if(n.length!==0){if(t){let i=n.find(o=>Qs(o)===t);if(i)return i;let r=n.find(o=>Qs(o)==="*");if(r)return r}return n[0]}},Vp=e=>typeof e=="string"&&e.trim().toLowerCase()==="auto",fa=(e,t,n=[])=>{if(!fe.existsSync(e))return n;let i;try{i=fe.readdirSync(e,{withFileTypes:!0})}catch{return n}for(let r of i){if(r.name==="Pods"||r.name==="build"||r.name==="DerivedData")continue;let o=Ae.join(e,r.name);r.isDirectory()?fa(o,t,n):r.name===t&&n.push(o)}return n},Kp=(e,t,n)=>{let i=`${n} ${t.environment||""}`.toLowerCase(),r=e.toLowerCase(),o=0;return(i.includes("development")||i.includes("dev"))&&/(^|[.-])dev(elopment)?($|[.-])/.test(r)&&(o+=20),(i.includes("staging")||i.includes("stage"))&&/(^|[.-])stag(e|ing)?($|[.-])/.test(r)&&(o+=20),(i.includes("production")||i.includes("prod"))&&(/(^|[.-])(dev|development|stag|stage|staging)($|[.-])/.test(r)||(o+=20)),o},zp=(e,t)=>{let n=Ae.resolve(process.cwd(),fe.existsSync("ios")?"ios":"."),i=fa(n,"project.pbxproj"),r=[];for(let o of i)try{let l=fe.readFileSync(o,"utf8").matchAll(/PRODUCT_BUNDLE_IDENTIFIER\s*=\s*"?([^";\s]+)"?;/g);for(let a of l){let d=a[1]?.trim();d&&!d.includes("$")&&!d.startsWith("com.apple.")&&!r.includes(d)&&r.push(d)}}catch{}if(r.length!==0)return r.length===1?r[0]:r.map(o=>({bundleId:o,score:Kp(o,e,t)})).sort((o,s)=>s.score-o.score)[0]?.bundleId},oi=e=>String(e||"").trim().toLowerCase().replace(/_/g,"-"),li=(e,t)=>{let n=oi(e);return t==="ios"&&(n==="internal"||n==="ad-hoc")?"adhoc":t==="android"&&["internal","adhoc","ad-hoc","development","dev","staging","stage"].includes(n)?"internal":n},ta=(e,t,n)=>{let i=li(e.distributionType||e.meta?.distributionType,n);return i?i===li(t,n):!0},na=(e,t,n)=>{let i=li(e.distributionType||e.meta?.distributionType,n),r=li(t,n);return i?i===r?3:n==="android"&&r!=="store"&&i!=="store"?2:0:1},Wp=e=>{let t=e.toLowerCase();return t==="development"||t==="dev"||t.startsWith("development-")||t.startsWith("dev-")||t.endsWith("-development")||t.endsWith("-dev")},Jp=e=>{let t=e.toLowerCase();return t.includes("staging")||t.includes("stage")||t.includes("preview")||t.includes("adhoc")||t.includes("ad-hoc")},Yp=(e,t)=>{let n=oi(e.distribution),i=oi(e.iosExportMethod),r=oi(e.environment);return e.platform!=="ios"?n==="store"?"store":"internal":e.developmentClient||e.simulator?"development":i==="app-store"||n==="store"?"store":i==="development"||n==="development"?"development":i==="ad-hoc"||i==="adhoc"||n==="ad-hoc"||n==="adhoc"||n==="internal"?"adhoc":r==="production"||r==="store"?"store":r==="development"||r==="dev"?"development":r==="staging"||r==="stage"||r==="preview"?"adhoc":t.toLowerCase()==="production"||t.toLowerCase().includes("store")?"store":Wp(t)?"development":(Jp(t),"adhoc")},ma=e=>e.bundleId||e.bundleIdentifier||e.packageName||e.meta?.bundleId||e.meta?.bundleIdentifier||e.meta?.packageName,ia=(e,t)=>{if(!t)return!0;let n=ma(e);return!n||n==="*"||n===t},ra=(e,t)=>{let n=ma(e);return!t||!n?0:n===t?2:n==="*"?1:-1},ga=e=>{try{let t=Buffer.from(e,"base64").toString("utf8"),n=t.match(/<key>application-identifier<\/key>\s*<string>([^<]+)<\/string>/)?.[1]?.trim();if(!n)return;let i=t.match(/<key>TeamIdentifier<\/key>\s*<array>\s*<string>([^<]+)<\/string>/)?.[1]?.trim();if(i&&n.startsWith(`${i}.`))return n.slice(i.length+1);let r=n.indexOf(".");return r>=0?n.slice(r+1):n}catch{return}},qp=(e,t)=>{if(e===t||e==="*")return!0;if(e.endsWith(".*")){let n=e.slice(0,-2);return t.startsWith(`${n}.`)}return!1},Xp=(e,t)=>{if(!t)return!0;let n=ga(e);if(n)return qp(n,t);try{return Buffer.from(e,"base64").toString("latin1").includes(t)}catch{return!0}},ci=async e=>{if(e.failOnly){(!e.projectId||!e.buildId)&&(R.error(D.red("--project-id and --build-id are required with --fail-only.")),process.exit(1));let l=e.error||"Build runner failed before it could report a final status.";try{await N.patch(`/builds/${e.projectId}/${e.buildId}`,{status:"failed",error:l,endTime:Date.now()}),R.info(D.yellow(`Marked build ${e.buildId} as failed.`));return}catch(a){R.error(D.red(`Could not mark build failed: ${a.message}`)),process.exit(1)}}await Np(e),await Cp(e),e.platform!=="android"&&e.platform!=="ios"&&(R.error(`Platform ${e.platform} is not supported. Use 'android' or 'ios'.`),process.exit(1)),e.autoSubmit&&e.platform==="ios"&&e.simulator&&(R.error(D.red("--auto-submit cannot be used with --simulator because simulator builds are not App Store artifacts.")),process.exit(1)),e.autoSubmit&&e.dryRun&&R.warn(D.yellow("--auto-submit is ignored during --dry-run."));let t=Cr(),n=e.buildId||bp(),i=e.projectId,r=Date.now(),o=!!i,s=async l=>{if(i)try{await N.patch(`/builds/${i}/${n}`,{status:"failed",error:l,endTime:Date.now()})}catch{}};if(e.local&&e.buildId){e.quiet||t.start(`Preparing isolated workspace for build: ${e.buildId}`);try{let l=await N.get(`/builds/${i}/${e.buildId}/source-url`);if(l.data.status!=="success")throw new Error("Failed to get source download URL from API");kr("SOURCE_DOWNLOAD",l.data.downloadUrl);let a=await si.get(l.data.downloadUrl,{responseType:"stream"}),d=(i||e.projectId||"default").replace(/[^a-zA-Z0-9-_]/g,"_"),u=Ae.join(Ap.homedir(),m.workspacesDir,d);fe.mkdirSync(u,{recursive:!0});let c=new Set(["node_modules",`.${m.nameLower}-cache-meta`]),p=new Set(["Pods"]);if(fe.existsSync(u)){let _=fe.readdirSync(u);for(let b of _){if(c.has(b))continue;if(b==="ios"){let I=Ae.join(u,"ios");try{let F=fe.readdirSync(I);for(let X of F)if(!p.has(X))try{fe.rmSync(Ae.join(I,X),{recursive:!0,force:!0})}catch{}}catch{}continue}let x=Ae.join(u,b);try{fe.rmSync(x,{recursive:!0,force:!0})}catch{}}}let f=Ae.join(u,"source.zip"),g=a.data,y=fe.createWriteStream(f);await new Promise((_,b)=>{g.pipe(y),g.on("error",x=>b(x)),y.on("finish",()=>_())}),new Js(f).extractAllTo(u,!0);try{fe.unlinkSync(f)}catch{}process.chdir(u),R.info(D.green(`\u2713 Persistent workspace ready: ${u}`)),R.info(D.dim(` \u{1F4E6} Cached dirs preserved: node_modules=${fe.existsSync(Ae.join(u,"node_modules"))?"\u2705":"\u274C"}, Pods=${fe.existsSync(Ae.join(u,"ios","Pods"))?"\u2705":"\u274C"}`)),t.stop()}catch(l){t.stop(`Failed to prepare isolated workspace: ${l.message}`),i&&await s(`Setup Error: ${l.message}`),process.exit(1)}}try{let l=e.repo;if(!l)try{l=Ws("git config --get remote.origin.url").toString().trim()}catch{R.warn("Could not detect git repository URL.")}!l&&e.dryRun,l||(l="https://github.com/placeholder/repo.git"),R.info(`Build ID: ${D.cyan(n)}`);let a={},d={},u=null,c=ve(`./${m.configFileName}`);if(c||(R.error(D.red(`${m.configFileName} not found. Run \`${m.nameLower} init\` or \`${m.nameLower} link\` first.`)),process.exit(1)),c){u=c;let P=wo(c);e.framework=P,i=c.projectId;let w=e.buildProfile||"production",T=xe(c,w);!T&&e.buildProfile&&(R.error(`Build profile '${w}' not found in ${m.configFileName}`),process.exit(1));let $=T||{};process.env.MACH_DEBUG&&R.info(D.dim(`Framework: ${P} | Build profile: ${w} | Platform: ${e.platform} | Distribution: ${$.distribution||"store"} | Environment: ${$.environment||w}`)),$.env&&(d=$.env,R.info(D.blue(`Use Build Profile: ${w}`)));let O=e.platform,h=$[O]||{},M=["developmentClient","simulator","distribution","buildCommand","apk","iosScheme","preBuild","postBuild","scheme","environment","androidPackage","iosBundleIdentifier","name","iosDeploymentTarget","iosApiKeyId","iosApiKeyIssuer","iosApiKeyPath","iosTeamId","iosConfiguration","iosExportMethod","branch","repo","instanceType","ami","bucket","region","nodeVersion"];e.name=c.name,e.appName=c.name,e.androidPackage=c.android?.package,e.iosBundleIdentifier=c.ios?.bundleIdentifier,e.iosScheme=c.ios?.iosScheme,!e.nodeVersion&&c.nodeVersion&&(e.nodeVersion=c.nodeVersion);let U=H=>H==="androidPackage"?h.androidPackage??h.package??$.androidPackage??$.android?.package:H==="iosBundleIdentifier"?h.iosBundleIdentifier??h.bundleIdentifier??$.iosBundleIdentifier??$.ios?.bundleIdentifier:h[H]!==void 0?h[H]:$[H];for(let H of M){let k=U(H),K=H==="androidPackage"||H==="iosBundleIdentifier";k!==void 0&&(e[H]===void 0||K)&&(e[H]=k)}if(e.platform==="ios"&&!(h.iosBundleIdentifier??h.bundleIdentifier??$.iosBundleIdentifier??$.ios?.bundleIdentifier)){let k=zp(e,w);k&&k!==e.iosBundleIdentifier&&(R.warn(D.yellow(`Detected native iOS bundle identifier ${k}; using it for credential lookup. Set build.${w}.ios.bundleIdentifier to make this explicit.`)),e.iosBundleIdentifier=k)}e.branch=e.branch||"main",e.iosConfiguration=e.iosConfiguration||(e.developmentClient?"Debug":"Release"),e.sshUser=e.sshUser||process.env.USER||"ubuntu",e.simulator===void 0&&(e.simulator=!1),e.local===void 0&&(e.local=!1),e.verbose===void 0&&(e.verbose=!1),R.info(D.dim(`Resolved build config: framework=${P}, profile=${w}, platform=${e.platform}, simulator=${e.platform==="ios"?String(!!e.simulator):"n/a"}, developmentClient=${String(!!e.developmentClient)}, distribution=${e.distribution||$.distribution||"store"}, iosConfiguration=${e.platform==="ios"?e.iosConfiguration||"Release":"n/a"}`));let j=H=>{if(!H)return H;if(H.startsWith("scripts.")){let k=H.split(".")[1],K=c.scripts?.[k];if(K)return K;R.warn(`Script reference not found: ${H}`)}return H};e.buildCommand=j(e.buildCommand),e.preBuild=j(e.preBuild),e.postBuild=j(e.postBuild),!e.scheme&&c.scheme&&(e.scheme=c.scheme);let Z={...qt(c,m.envPrefix),...qt($,`${m.envPrefix}PROFILE_`)};a={...a,...d,...Z},process.env.IOS_P12_PASSWORD&&!a.IOS_P12_PASSWORD&&(a.IOS_P12_PASSWORD=process.env.IOS_P12_PASSWORD),process.env.MATCH_PASSWORD&&!a.MATCH_PASSWORD&&(a.MATCH_PASSWORD=process.env.MATCH_PASSWORD),e.platform==="ios"&&(!e.iosTeamId&&$.ios?.appleTeamId&&(e.iosTeamId=$.ios.appleTeamId),!e.iosTeamId&&c.submit?.[w]?.ios?.appleTeamId&&(e.iosTeamId=c.submit[w].ios.appleTeamId),!e.iosTeamId&&c.submit?.production?.ios?.appleTeamId&&(R.warn(D.yellow(`Check: Using 'production' Team ID for '${w}' build.`)),e.iosTeamId=c.submit.production.ios.appleTeamId),e.iosTeamId?R.info(D.magenta(`\u2713 Injected iOS Team ID from config: ${e.iosTeamId}`)):e.simulator||R.warn(D.yellow("\u26A0\uFE0F No iOS Team ID found. Device or archive signing may fail unless managed iOS credentials provide the team automatically.")))}let p="unknown";try{p=Ws("git rev-parse --abbrev-ref HEAD").toString().trim()}catch{R.warn("Failed to detect git branch.")}let f="1.0.0";try{fe.existsSync("./package.json")&&(f=JSON.parse(fe.readFileSync("./package.json","utf-8")).version||"1.0.0")}catch{}let g=e.buildProfile||"production",y="Internal";e.developmentClient?y="DevelopmentClient":g.toLowerCase().includes("store")||g.toLowerCase()==="production"?y="Store":g.toLowerCase().includes("preview")||g.toLowerCase().includes("staging")?y="Staging":(g.toLowerCase().includes("development")||g.toLowerCase().includes("dev"))&&(y="Development");let E=e.platform==="ios"?"iOS":"Android",_=e.platform==="ios"&&e.simulator?" (Simulator)":"",b=`${E}${_} v${f} (${y})`;if(di(e,{status:"created",projectId:i,buildId:n,platform:e.platform,profile:g,branch:p,version:f,buildType:y,developmentClient:!!e.developmentClient,summary:b}),i){try{let P=e.buildProfile||"production",w=e.environment||P;R.info(D.blue(`Fetching managed secrets for profile: ${P} (environment: ${w})...`));let $=(await N.get(`/projects/${i}/secrets/export?env=${w}`)).data;$.status==="success"&&$.secrets&&(a={...a,...$.secrets},Object.keys($.secrets).length>0&&R.info(D.magenta(`\u2713 Injected ${Object.keys($.secrets).length} secrets from Dashboard.`)))}catch(P){R.warn(`Failed to load managed secrets from Dashboard: ${P.message}`)}if(e.platform==="ios"&&e.simulator)R.info(D.dim("Skipping managed iOS signing credentials for simulator build."));else try{R.info(D.blue("Fetching managed credentials..."));let P=Yp(e,g),w=e.platform==="ios"?e.iosBundleIdentifier:e.androidPackage,T=e.platform==="ios"?"bundle":"package";R.info(D.dim(` Credential target: ${T} ${w||"not set"} (${P})`));let $=await N.get("/credentials/resolve",{params:{projectId:i,platform:e.platform,bundleId:w,distributionType:P,teamId:e.platform==="ios"?e.iosTeamId:void 0}});if($.data.status==="success"&&$.data.credentials){let O=$.data.credentials;R.info(D.magenta(`\u2713 Found ${O.length} relevant credentials.`));let h=O.filter(k=>e.platform==="ios"&&k.type==="ios_profile"?ta(k,P,e.platform)?ia(k,w):!1:e.platform==="android"&&k.type==="android_keystore"?ia(k,w):!!ta(k,P,e.platform)).sort((k,K)=>{let ae=ra(K,w)*10+na(K,P,e.platform)-(ra(k,w)*10+na(k,P,e.platform));return ae!==0?ae:(K.createdAt||0)-(k.createdAt||0)});R.info(D.dim(` Filtered to ${h.length} credentials for distributionType: ${P}`));let M=!1,U=!1,j=!1,Z=[];for(let k of h)if(!(k.type==="ios_cert"&&M||k.type==="ios_profile"&&U||k.type==="android_keystore"&&j)&&["ios_cert","ios_profile","android_keystore"].includes(k.type)&&(k.downloadUrl||_n(k)))try{let ae=await pa(k,i);if(k.type==="ios_cert"&&!M)a.IOS_DIST_P12=ae,k.password?(a.IOS_P12_PASSWORD=k.password,R.info(D.dim(` - Injected ${k.name} as IOS_DIST_P12 with password from credential record`))):R.info(D.dim(` - Injected ${k.name} as IOS_DIST_P12`)),M=!0;else if(k.type==="ios_profile"&&!U){if(!Xp(ae,w)){let ge=ga(ae)||"unknown";throw new Error(`Provisioning profile ${k.name||_n(k)||"unknown"} is for a different bundle ID. Expected ${w}, found ${ge}. Upload a ${P} profile for ${w}.`)}a.IOS_PROVISIONING_PROFILE=ae,R.info(D.dim(` - Injected ${k.name} as IOS_PROVISIONING_PROFILE`)),U=!0}else if(k.type==="android_keystore"&&!j){a.ANDROID_KEYSTORE_BASE64=ae;let ge=k.keystorePassword||k.password,z=k.keyPassword||k.keystorePassword||k.password,G=k.alias||k.meta?.alias;if(ge)a.ANDROID_STORE_PASSWORD=ge,R.info(D.dim(" - Injected keystore password from credential record"));else{let q=["ANDROID_STORE_PASSWORD",...[P==="store"?"PRODUCTION":P==="internal"||P==="adhoc"?"STAGING":"DEVELOPMENT",P.toUpperCase(),"PRODUCTION","STORE","INTERNAL","STAGING","RELEASE","DEBUG"].map(de=>`KEYSTORE_PASSWORD_${de}`),"KEYSTORE_PASSWORD"].find(de=>!!a[de]);q&&a[q]&&(a.ANDROID_STORE_PASSWORD=a[q])}if(z?(a.ANDROID_KEY_PASSWORD=z,R.info(D.dim(" - Injected key password from credential record"))):a.ANDROID_KEY_PASSWORD=a.ANDROID_STORE_PASSWORD||"",G)a.ANDROID_KEY_ALIAS=G;else{let te=["ANDROID_KEY_ALIAS","KEYSTORE_ALIAS"].find(W=>!!a[W]);te&&(a.ANDROID_KEY_ALIAS=a[te])}R.info(D.dim(` - Injected ${k.name} as ANDROID_KEYSTORE_BASE64`)),j=!0}}catch(ae){Z.push(`${k.name||k.type}: ${ae.message}`)}let H=e.platform==="ios"?e.simulator||M&&U:j||!h.some(k=>k.type==="android_keystore");if(Z.length>0&&!H)throw new Error(`Credential setup failed:
1473
1473
  ${Z.map(k=>`- ${k}`).join(`
1474
- `)}`);Z.length>0&&R.warn(P.dim(` Skipped ${Z.length} stale or unusable credential(s).`))}if(e.platform==="ios"&&!e.simulator){let O=e.buildProfile||"production",h=ke(d,O)||{},M=yp(d,h),U=bp(M),H=e.distribution!==void 0?e.distribution==="store":y==="Store",Z=M===void 0&&H,j=e.autoVersion||U&&H||Z,k=e.autoVersion||U&&H;if(U&&!H&&R.info(P.dim(` Skipping App Store Connect buildNumber lookup for ${e.distribution||"non-store"} build. Pass --auto-version to force it.`)),j){let V=e.iosBundleIdentifier||d.ios?.bundleIdentifier||d.expo?.ios?.bundleIdentifier,ae=Sp(d,h,O),pe=$.data.credentials||[],z=Fs(pe,V);if(!z&&(k||Z)){let G=await T.get(`/credentials/${i}`);z=Fs(G.data.credentials||[],V)}if(z){t.start("Resolving latest iOS buildNumber from App Store Connect...");try{let G=z.keyId||z.meta?.keyId,ee=z.issuerId||z.meta?.issuerId;if(!G||!ee)throw new Error("App Store Connect credential is missing keyId or issuerId.");let W=await Ms(z,i),q=await xo({keyId:G,issuerId:ee,privateKey:W,ascAppId:ae,bundleId:V}),de=/^\d+$/.test(q.latestBuildNumber);de?(a.BUILD_NUMBER=q.nextBuildNumber,delete a.MACH_IOS_BUILD_NUMBER_LOCKED):(a.BUILD_NUMBER=q.nextBuildNumber,a.CURRENT_PROJECT_VERSION=q.nextBuildNumber,a.MACH_IOS_BUILD_NUMBER_LOCKED="1"),t.stop(de?`\u2713 Latest iOS buildNumber on App Store Connect: ${P.green(q.latestBuildNumber)} (Mach will assign >= ${q.nextBuildNumber})`:`\u2713 Resolved iOS buildNumber: ${P.green(q.nextBuildNumber)} (Latest on App Store Connect: ${q.latestBuildNumber})`)}catch(G){t.stop("iOS buildNumber lookup failed");let ee=G.response?.data?.error?.message||G.message;if(k)throw new Error(`Auto-versioning failed: ${ee}. Fix App Store Connect API key permissions or remove ios.buildNumber="auto".`);R.warn(P.yellow(`Could not check App Store Connect buildNumber: ${ee}. Falling back to Mach counter.`))}}else if(k)throw new Error(`Auto-versioning failed: App Store Connect API key not found. Upload it with '${m.nameLower} credentials:service --platform ios'.`)}}if(e.platform==="android"){let O=e.buildProfile||"production",h=ke(d,O)||{},H=((h.android||{}).versionCode??h.androidVersionCode??d.android?.versionCode??d.expo?.android?.versionCode)==="auto",Z=e.distribution!==void 0?e.distribution==="store":y==="Store",j=e.autoVersion||H&&Z;if(H&&!j&&R.info(P.dim(` Skipping Google Play versionCode lookup for ${e.distribution||"non-store"} build. Pass --auto-version to force it.`)),j){t.start("Resolving latest versionCode from Google Play...");try{let k=e.androidPackage||d.android?.package||d.expo?.android?.package||d.name,V=($.data.credentials||[]).find(ee=>ee.type==="google_service_account"&&(!ee.bundleId||ee.bundleId===k));if(!V){let W=((await T.get(`/credentials/${i}`)).data.credentials||[]).filter(q=>q.type==="google_service_account");if(V=W.find(q=>q.type==="google_service_account"&&q.bundleId===k),!V&&W.length>0){let q=W.map(de=>de.bundleId).filter(Boolean).join(", ");throw new Error(`Google Service Account not found for package ${k}. Found service credential(s) for: ${q}.`)}}if(!V)throw new Error(`Google Service Account not found for package ${k}. Upload it under this package in Dashboard or run '${m.nameLower} credentials:service --platform android --package-name ${k}'.`);let ae=await Ms(V,i),pe=gp(ae,"Google Play service account");if(!pe.client_email||!pe.private_key)throw new Error("Google Play service account JSON is missing client_email or private_key.");let z=await Po(k,pe);if(z==null)throw new Error("Could not retrieve any version information from Google Play.");let G=z+1;a.ANDROID_VERSION_CODE=G.toString(),t.stop(`\u2713 Resolved versionCode: ${P.green(G)} (Latest on Play Store: ${z})`)}catch(k){t.stop("Version resolution failed");let V=k.response?.data?.error?.message||k.message,ae=hp(V)?"This looks like a temporary network error while contacting Mach or Google Play. Retry the command, or build and submit as separate steps if it continues.":'Fix Google Play service account permissions or remove android.versionCode="auto".';throw new Error(`Auto-versioning failed: ${V}. ${ae}`)}}}if(e.platform==="ios"&&!e.simulator){let O=!!a.IOS_DIST_P12,h=!!a.IOS_PROVISIONING_PROFILE;if(!O||!h){let M=[...O?[]:["Distribution Certificate"],...h?[]:["Provisioning Profile"]].join(" and ");if(e.local&&e.buildId)throw new Error(`Missing iOS credentials: ${M}. Expected ${D} credentials for ${w||"the selected bundle ID"}. Run \`${m.nameLower} credentials --platform ios --profile ${g}\` and select ${w||"the correct bundle ID"}.`);R.error(P.red(`Missing iOS credentials: ${M}`)),e.quiet&&process.exit(1);let U=e.yes||await Os({message:"Would you like to generate these credentials now?",initialValue:!0});if(U&&!Yn(U))return await on({platform:"ios",profile:g}),e.quiet||R.info(P.green("\u2713 Credentials setup complete! Restarting build phase...")),Xn(e);e.quiet||R.info(P.yellow(`Run \`${m.nameLower} credentials\` to set up signing credentials manually.`)),process.exit(1)}}if(e.platform==="android"&&!e.developmentClient&&(e.distribution==="internal"||e.distribution==="store")&&!(!!a.ANDROID_KEYSTORE_BASE64||!!a.ANDROID_KEYSTORE)){R.error(P.red("Missing Android credentials: Signing Keystore")),e.quiet&&process.exit(1);let h=e.yes||await Os({message:"Would you like to automatically create and upload an Android Keystore for this profile now?",initialValue:!0});if(h&&!Yn(h))return await on({platform:"android",profile:g}),e.quiet||R.info(P.green("\u2713 Android Keystore setup complete! Restarting build phase...")),Xn(e);e.quiet||R.info(P.yellow(`Run \`${m.nameLower} credentials --platform android\` to set up a signing keystore manually.`)),process.exit(1)}}catch(D){(String(D.message||"").startsWith("Credential download failed")||String(D.message||"").startsWith("Credential setup failed")||String(D.message||"").startsWith("Missing iOS credentials")||String(D.message||"").startsWith("Auto-versioning failed"))&&(R.error(P.red(D.message)),process.exit(1)),e.platform==="ios"&&e.local&&e.buildId&&(R.error(P.red(`Failed to resolve iOS credentials: ${D.message}`)),process.exit(1)),R.warn(`Failed to resolve credentials: ${D.message}`)}}let x=!!(e.local&&e.buildId),I=!!(e.local||e.sshHost),F=!I&&!x;if(x){R.info(P.magenta("\u{1F3D7}\uFE0F Runner Mode: Executing isolated build task..."));let D=await Wi({...e,interactive:!1},n,a,i,{branch:p,version:f,summary:b,buildType:y});await X(D),process.exit(0)}async function X(D){let w=async N=>{if(i)try{await zn("Report failed build status",()=>T.patch(`/builds/${i}/${n}`,{status:"failed",error:N,endTime:Date.now()}),3)}catch($){R.warn(P.yellow(`Could not report failed build status: ${$.message}`))}};if(i&&D.length>0){let N=br(),$=[];e.quiet||N.start("Uploading artifacts to Dashboard...");try{for(let O of D){let h=he.basename(O),M=ue.statSync(O).size,U=he.extname(h).toLowerCase(),H="application/octet-stream",Z=await zn(`Create artifact upload URL for ${h}`,()=>T.post(`/builds/${i}/${n}/artifact-upload-url`,{fileName:h,fileType:H}));if(Z.data.status!=="success")throw new Error(`Failed to get upload URL for ${h}`);await pp(O,Z.data.uploadUrl,H),$.push({name:h,url:Z.data.downloadUrl,size:M,type:U.substring(1)})}e.quiet||N.stop("Artifacts uploaded.")}catch(O){e.quiet||N.stop("Failed to upload artifacts.");let h=`Artifact upload failed: ${O.message}`;throw R.error(P.red(h)),await w(h),new Error(h)}if(i&&$.length>0)try{R.info(P.cyan(`
1475
- \u{1F517} Download Links:`));for(let O of $)R.info(P.dim(` - ${O.name}: `)+P.blue.underline(O.url));await zn("Finalize build in dashboard",()=>T.patch(`/builds/${i}/${n}`,{status:"success",artifacts:$,endTime:Date.now()})),Zn(e,{status:"success",projectId:i,buildId:n,platform:e.platform,profile:g,branch:p,version:f,buildType:y,developmentClient:!!e.developmentClient,summary:b,artifacts:$}),R.success(P.green(`
1476
- \u2713 Build completed and reported to dashboard.`)),e.maestro&&!x&&await Ks(i,n,e,g),e.autoSubmit&&!x&&await Sr(i,n,e,g)}catch(O){let h=`Build artifact uploaded but dashboard finalization failed: ${O.message}`;throw R.error(P.red(`
1477
- ${h}`)),await w(h),new Error(h)}}else if(i){let N="Build completed but produced no uploadable artifacts.";throw R.error(P.red(N)),await w(N),new Error(N)}}if(I){if(R.info(P.cyan(`\u{1F680} Direct Build Mode: Executing on ${e.sshHost||"local"}...`)),i&&!o){let D=process.argv.slice(3).join(" ");await T.post("/builds",{projectId:i,buildId:n,platform:e.platform,status:"building",branch:p,version:f,summary:b,startTime:r,buildType:y,buildProfile:g,buildArgs:D,framework:e.framework,simulator:!!e.simulator,developmentClient:!!e.developmentClient,...Vs(e,n,g,u)}),zs(e)}if(e.sshHost&&e.platform==="ios")await Ro(e,n,a,i),e.autoSubmit&&await Sr(i,n,e,g);else{let D=await Wi({...e,interactive:!!e.local},n,a,i,{branch:p,version:f,summary:b,buildType:y});await X(D)}return}if(F&&(R.info(P.blue("\u{1F6F0}\uFE0F Cloud Initiator Mode: Preparing orchestration...")),!e.dryRun)){e.quiet||t.start("Zipping and uploading local source...");let D=await T.post("/builds/source-upload-url",{projectId:i,buildId:n});if(D.data.status!=="success")throw t.stop("Failed to get upload URL."),new Error("Failed to get source upload URL from API");Ar("SOURCE_UPLOAD",D.data.uploadUrl);let w=new Ns,N=np(w,process.cwd(),e.platform),$=w.toBuffer();if(!e.quiet){let h=N.skipped.length>0?` Skipped: ${N.skipped.join(", ")}.`:"";t.message(`Prepared source (${N.files} files).${h}`)}e.quiet||t.message(`Uploading source (${($.length/1024/1024).toFixed(1)} MB)...`);let O=!1;for(let h=1;h<=3;h++)try{await Jn.put(D.data.uploadUrl,$,{headers:{"Content-Type":"application/zip"},maxBodyLength:1/0,maxContentLength:1/0,timeout:12e4}),O=!0;break}catch(M){if(h<3)t.message(`Upload attempt ${h} failed (${M.code||M.message}), retrying...`),await new Promise(U=>setTimeout(U,2e3*h));else throw M}if(e.quiet||t.stop("Source uploaded"),i){let h=process.argv.slice(3).join(" ");await T.post("/builds",{projectId:i,buildId:n,platform:e.platform,status:"pending",branch:p,version:f,summary:b,startTime:r,buildType:y,buildProfile:g,buildArgs:h,framework:e.framework,simulator:!!e.simulator,developmentClient:!!e.developmentClient,...Vs(e,n,g,u)}),R.info(P.green("\u2713 Cloud build registered.")),zs(e)}e.platform==="android"&&await _o(e,n,a,i,e.preBuild),e.quiet||R.info(P.cyan("\u{1F4E1} Connecting to build stream...")),await Pp(i,n,e),e.maestro&&await Ks(i,n,e,g),e.autoSubmit&&await Sr(i,n,e,g);return}}catch(l){let a=l.message||"Build failed";l.response?.data?.message?a=l.response.data.message:l.message.includes("status code 402")?a="Insufficient wallet balance. Please add credits in the Dashboard.":l.message.includes("status code 403")&&(a="Monthly build quota exceeded. Upgrade your plan in the Dashboard."),i&&await s(a),R.error(P.red(`\u2717 Build failed: ${a}`)),process.exit(1)}};async function Ks(e,t,n,i){R.info(P.cyan(`
1478
- \u{1F3BC} Queuing managed Maestro test...`)),await tr({projectId:e,buildId:t,platform:n.platform,profile:i,maestroFlows:n.maestroFlows,maestroDevice:n.maestroDevice,maestroRetries:n.maestroRetries,maestroRecord:n.maestroRecord,maestroUseBuildSource:n.maestroUseBuildSource,maestroEnv:n.maestroEnv,quiet:n.quiet})}async function Sr(e,t,n,i){if(!e){R.error(P.red("Auto-submit requires a linked Mach project. Run `mach link` or pass --project-id.")),process.exitCode=1;return}R.info(P.cyan(`
1479
- Auto-submit: submitting the successful build...`));try{let r=await Rp(e,t);if(r?.autoSubmit){let o=r.submissionId?`${nt}/submissions/${r.submissionId}?projectId=${encodeURIComponent(e)}`:void 0,s=String(r.status||"").toLowerCase(),l=String(r.autoSubmitStatus||"").toLowerCase(),a=r.submissionId||["success","completed","succeeded"].includes(s)||["starting","submitted","failed","skipped"].includes(l);if(r.submissionId?(R.info(P.green(`Auto-submit is already queued by Mach backend: ${r.submissionId}`)),R.info(P.dim(`Dashboard: ${o}`))):r.autoSubmitStatus==="failed"?R.warn(P.yellow(`Backend auto-submit failed: ${r.autoSubmitError||"Unknown error"}`)):a&&R.info(P.green("Auto-submit is registered with Mach backend; skipping local duplicate submit.")),a){St(n,{status:r.autoSubmitStatus||"pending",projectId:e,submitId:r.submissionId,platform:n.platform,profile:i,buildId:t,dashboardUrl:o});return}}await Vn({platform:n.platform,profile:i,buildProfile:i,buildId:t,projectId:e,yes:n.yes,quiet:n.quiet,track:n.submitTrack,releaseStatus:n.submitReleaseStatus,rollout:n.submitRollout,changesNotSentForReview:n.submitChangesNotSentForReview,credentialId:n.submitCredentialId,packageName:n.androidPackage,jsonOutput:n.submitJsonOutput,submitArgs:ta(n,t,i)})}catch(r){R.error(P.red(`Auto-submit failed: ${r.message||r}`)),process.exitCode=1}}function ta(e,t,n){let i=["--platform",e.platform,"--profile",n,"--build-id",t];return e.submitTrack&&i.push("--track",String(e.submitTrack)),e.submitReleaseStatus&&i.push("--release-status",String(e.submitReleaseStatus)),e.submitRollout!==void 0&&i.push("--rollout",String(e.submitRollout)),e.submitChangesNotSentForReview&&i.push("--changes-not-sent-for-review"),e.submitCredentialId&&i.push("--credential-id",e.submitCredentialId),e.platform==="android"&&e.androidPackage&&i.push("--package-name",e.androidPackage),e.platform==="ios"&&e.iosBundleIdentifier&&i.push("--bundle-id",e.iosBundleIdentifier),e.submitJsonOutput&&i.push("--json-output",e.submitJsonOutput),i.join(" ")}async function Rp(e,t){try{let i=(await T.get(`/builds/${e}/${t}`)).data?.build;if(i?.autoSubmit)return i}catch(n){R.warn(P.dim(`Could not check backend auto-submit status: ${n.message}`))}return null}function na(e){for(let t of Object.keys(e))e[t]===void 0&&delete e[t];return e}function Dp(e,t,n){let i=n?.submit?.[t]?.android||{},r=n?.submit?.production?.android||{},o=e.submitTrack||i.track||r.track,s=e.submitReleaseStatus||i.releaseStatus||r.releaseStatus,l=e.submitRollout??i.rollout??i.userFraction??i.rolloutFraction??r.rollout??r.userFraction??r.rolloutFraction,a=e.submitChangesNotSentForReview??i.changesNotSentForReview??i.changes_not_sent_for_review??r.changesNotSentForReview??r.changes_not_sent_for_review;return na({track:o,releaseStatus:s,rollout:l,changesNotSentForReview:a===void 0?!1:a===!0||a==="true"||a==="1"})}function Vs(e,t,n,i){if(!e.autoSubmit||e.dryRun)return{};let r=e.platform==="android"?Dp(e,n,i):{};return{autoSubmit:!0,autoSubmitStatus:"pending",autoSubmitOptions:na({platform:e.platform,profile:n,buildId:t,latest:!1,...r,credentialId:e.submitCredentialId,packageName:e.platform==="android"?e.androidPackage:void 0,bundleId:e.platform==="ios"?e.iosBundleIdentifier:void 0,submitArgs:ta(e,t,n)})}}function zs(e){!e.autoSubmit||e.dryRun||e.quiet||(R.info(P.green("\u2713 Auto-submit has been registered with the build.")),R.info(P.dim(" You can close this terminal; submission will start after build success.")))}function Ws(e){return`${nt}/build/${e}`}function Zn(e,t){if(!e.jsonOutput)return;let n=he.resolve(e.jsonOutput),i={...t,url:t.url||Ws(t.buildId),dashboardUrl:t.dashboardUrl||Ws(t.buildId),updatedAt:new Date().toISOString()};try{let r=he.dirname(n);r&&r!=="."&&ue.mkdirSync(r,{recursive:!0}),ue.writeFileSync(n,JSON.stringify(i,null,2))}catch(r){R.warn(P.yellow(`Could not write build metadata JSON: ${r.message}`))}}async function Pp(e,t,n){let i=br(),r="pending",o=0,s=0;for(n.quiet||i.start("Connecting to build stream...");;){try{let a=(await T.get(`/builds/${e}/${t}`)).data.build;if(a){if(r=a.status,r==="building")n.quiet||i.message("Build in progress...");else if(r==="failed")n.quiet||i.stop("Build failed."),Zn(n,{status:"failed",projectId:e,buildId:t,platform:n.platform,profile:a.buildProfile,buildType:a.buildType,developmentClient:!!a.developmentClient,version:a.version,summary:a.summary,error:a.error||"Unknown error",artifacts:a.artifacts||[]}),R.error(P.red(`
1480
- \u2717 Build failed: ${a.error||"Unknown error"}`)),process.exit(1);else if(r==="completed"||r==="success"){n.quiet||i.stop("Build successful!"),Zn(n,{status:r,projectId:e,buildId:t,platform:n.platform,profile:a.buildProfile,buildType:a.buildType,developmentClient:!!a.developmentClient,version:a.version,summary:a.summary,artifacts:a.artifacts||[]}),R.success(P.green(`
1481
- \u2713 Build completed successfully!`));try{n.quiet||(R.info(P.magenta(`
1482
- \u{1F4F1} Installation Hub:`)),R.info(P.dim(" - View & Install Build: ")+P.white.underline(`${nt}/build/${t}`)))}catch{}return}else if(r!=="pending"){n.quiet||i.stop(`Build status: ${r}`);return}}try{let u=(await T.get(`/builds/${e}/${t}/logs`)).data;if(u&&typeof u=="string"&&!n.quiet){let d=u.split(`
1483
- `);if(d.length>o){for(let p=o;p<d.length;p++)d[p].trim()&&console.log(P.dim(` ${d[p]}`));o=d.length}}}catch{}s=0}catch{s++,s>10&&(i.stop("Connection lost."),R.error(P.red(`
1484
- \u2717 Lost connection to Dashboard API.`)),process.exit(1))}await new Promise(l=>setTimeout(l,3e3))}}import*as ri from"http";import*as da from"net";import{execFile as Op,execFileSync as It,execSync as ti,spawn as ia}from"child_process";import fe from"chalk";import{log as te}from"@clack/prompts";import Cp from"axios";import le from"fs";import Ye from"os";import Q from"path";var mt=7070,hn=`http://127.0.0.1:${mt}`,Yt="com.radhya.mach.agent",Jt="Mach Agent",qt=`${Yt}.service`,kp=5e3,Np=3e3,Qn=null,ei=null,qe=()=>Q.join(Ye.homedir(),m.configDir),ca=()=>Q.join(Ye.homedir(),"Library","LaunchAgents"),ni=()=>Q.join(ca(),`${Yt}.plist`),ua=()=>Q.join(Ye.homedir(),".config","systemd","user"),Ir=()=>Q.join(ua(),qt),wr=()=>Q.join(qe(),"agent.cmd");function _r(){return`gui/${process.getuid?.()||Number(ti("id -u").toString().trim())}`}function pa(e){return e.replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;").replace(/"/g,"&quot;").replace(/'/g,"&apos;")}function gn(e){return`<string>${pa(e)}</string>`}function $r(){let e=process.argv[1]?le.realpathSync(process.argv[1]):"";if(!e||!le.existsSync(e))throw new Error("Could not resolve the current Mach CLI entrypoint.");return[process.execPath,e,"agent","run"]}function vr(){let e=fa(),t=process.platform==="win32"?[process.env.SystemRoot?Q.join(process.env.SystemRoot,"System32"):void 0,process.env.SystemRoot]:["/opt/homebrew/bin","/usr/local/bin","/usr/bin","/bin","/usr/sbin","/sbin"],n={HOME:Ye.homedir(),PATH:[process.env.PATH,...e.flatMap(i=>[Q.join(i,"platform-tools"),Q.join(i,"emulator"),Q.join(i,"cmdline-tools","latest","bin"),Q.join(i,"tools","bin")]),...t].filter(Boolean).join(Q.delimiter)};for(let i of["ANDROID_HOME","ANDROID_SDK_ROOT","JAVA_HOME","SHELL"])process.env[i]&&(n[i]=process.env[i]);return n}function fa(){let e=[process.env.ANDROID_HOME,process.env.ANDROID_SDK_ROOT];if(process.platform==="darwin")e.push(Q.join(Ye.homedir(),"Library","Android","sdk"));else if(process.platform==="linux")e.push(Q.join(Ye.homedir(),"Android","Sdk"),Q.join(Ye.homedir(),"Android","sdk"),"/opt/android-sdk","/usr/lib/android-sdk");else if(process.platform==="win32"){let t=process.env.LOCALAPPDATA,n=process.env.USERPROFILE||Ye.homedir();e.push(t?Q.join(t,"Android","Sdk"):void 0,Q.join(n,"AppData","Local","Android","Sdk"))}return Array.from(new Set(e.filter(t=>!!t)))}function Tp(e){return process.platform==="win32"&&!e.toLowerCase().endsWith(".exe")?`${e}.exe`:e}function ma(e,t){let n=Tp(e);for(let i of fa()){let r=Q.join(i,t,n);if(le.existsSync(r))return r}return n}function ga(){return ma("adb","platform-tools")}function ha(){return ma("emulator","emulator")}function Er(e){return`"${e.replace(/\\/g,"\\\\").replace(/"/g,'\\"').replace(/%/g,"%%")}"`}function xp(){if(process.platform!=="linux")throw new Error("Linux service install requires Linux.");le.mkdirSync(qe(),{recursive:!0}),le.mkdirSync(ua(),{recursive:!0});let e=$r(),t=vr(),n=Object.entries(t).map(([r,o])=>`Environment=${Er(`${r}=${o}`)}`).join(`
1474
+ `)}`);Z.length>0&&R.warn(D.dim(` Skipped ${Z.length} stale or unusable credential(s).`))}if(e.platform==="ios"&&!e.simulator){let O=e.buildProfile||"production",h=xe(c,O)||{},M=Hp(c,h),U=Vp(M),j=e.distribution!==void 0?e.distribution==="store":y==="Store",Z=M===void 0&&j,H=e.autoVersion||U&&j||Z,k=e.autoVersion||U&&j;if(U&&!j&&R.info(D.dim(` Skipping App Store Connect buildNumber lookup for ${e.distribution||"non-store"} build. Pass --auto-version to force it.`)),H){let K=e.iosBundleIdentifier||c.ios?.bundleIdentifier||c.expo?.ios?.bundleIdentifier,ae=Gp(c,h,O),ge=$.data.credentials||[],z=ea(ge,K);if(!z&&(k||Z)){let G=await N.get(`/credentials/${i}`);z=ea(G.data.credentials||[],K)}if(z){t.start("Resolving latest iOS buildNumber from App Store Connect...");try{let G=z.keyId||z.meta?.keyId,te=z.issuerId||z.meta?.issuerId;if(!G||!te)throw new Error("App Store Connect credential is missing keyId or issuerId.");let W=await Zs(z,i),q=await qo({keyId:G,issuerId:te,privateKey:W,ascAppId:ae,bundleId:K}),de=/^\d+$/.test(q.latestBuildNumber);de?(a.BUILD_NUMBER=q.nextBuildNumber,delete a.MACH_IOS_BUILD_NUMBER_LOCKED):(a.BUILD_NUMBER=q.nextBuildNumber,a.CURRENT_PROJECT_VERSION=q.nextBuildNumber,a.MACH_IOS_BUILD_NUMBER_LOCKED="1"),t.stop(de?`\u2713 Latest iOS buildNumber on App Store Connect: ${D.green(q.latestBuildNumber)} (Mach will assign >= ${q.nextBuildNumber})`:`\u2713 Resolved iOS buildNumber: ${D.green(q.nextBuildNumber)} (Latest on App Store Connect: ${q.latestBuildNumber})`)}catch(G){t.stop("iOS buildNumber lookup failed");let te=G.response?.data?.error?.message||G.message;if(k)throw new Error(`Auto-versioning failed: ${te}. Fix App Store Connect API key permissions or remove ios.buildNumber="auto".`);R.warn(D.yellow(`Could not check App Store Connect buildNumber: ${te}. Falling back to Mach counter.`))}}else if(k)throw new Error(`Auto-versioning failed: App Store Connect API key not found. Upload it with '${m.nameLower} credentials:service --platform ios'.`)}}if(e.platform==="android"){let O=e.buildProfile||"production",h=xe(c,O)||{},j=((h.android||{}).versionCode??h.androidVersionCode??c.android?.versionCode??c.expo?.android?.versionCode)==="auto",Z=e.distribution!==void 0?e.distribution==="store":y==="Store",H=e.autoVersion||j&&Z;if(j&&!H&&R.info(D.dim(` Skipping Google Play versionCode lookup for ${e.distribution||"non-store"} build. Pass --auto-version to force it.`)),H){t.start("Resolving latest versionCode from Google Play...");try{let k=e.androidPackage||c.android?.package||c.expo?.android?.package||c.name,K=($.data.credentials||[]).find(te=>te.type==="google_service_account"&&(!te.bundleId||te.bundleId===k));if(!K){let W=((await N.get(`/credentials/${i}`)).data.credentials||[]).filter(q=>q.type==="google_service_account");if(K=W.find(q=>q.type==="google_service_account"&&q.bundleId===k),!K&&W.length>0){let q=W.map(de=>de.bundleId).filter(Boolean).join(", ");throw new Error(`Google Service Account not found for package ${k}. Found service credential(s) for: ${q}.`)}}if(!K)throw new Error(`Google Service Account not found for package ${k}. Upload it under this package in Dashboard or run '${m.nameLower} credentials:service --platform android --package-name ${k}'.`);let ae=await Zs(K,i),ge=Bp(ae,"Google Play service account");if(!ge.client_email||!ge.private_key)throw new Error("Google Play service account JSON is missing client_email or private_key.");let z=await Vo(k,ge);if(z==null)throw new Error("Could not retrieve any version information from Google Play.");let G=z+1;a.ANDROID_VERSION_CODE=G.toString(),t.stop(`\u2713 Resolved versionCode: ${D.green(G)} (Latest on Play Store: ${z})`)}catch(k){t.stop("Version resolution failed");let K=k.response?.data?.error?.message||k.message,ae=jp(K)?"This looks like a temporary network error while contacting Mach or Google Play. Retry the command, or build and submit as separate steps if it continues.":'Fix Google Play service account permissions or remove android.versionCode="auto".';throw new Error(`Auto-versioning failed: ${K}. ${ae}`)}}}if(e.platform==="ios"&&!e.simulator){let O=!!a.IOS_DIST_P12,h=!!a.IOS_PROVISIONING_PROFILE;if(!O||!h){let M=[...O?[]:["Distribution Certificate"],...h?[]:["Provisioning Profile"]].join(" and ");if(e.local&&e.buildId)throw new Error(`Missing iOS credentials: ${M}. Expected ${P} credentials for ${w||"the selected bundle ID"}. Run \`${m.nameLower} credentials --platform ios --profile ${g}\` and select ${w||"the correct bundle ID"}.`);R.error(D.red(`Missing iOS credentials: ${M}`)),e.quiet&&process.exit(1);let U=e.yes||await Ks({message:"Would you like to generate these credentials now?",initialValue:!0});if(U&&!ai(U))return await gn({platform:"ios",profile:g}),e.quiet||R.info(D.green("\u2713 Credentials setup complete! Restarting build phase...")),ci(e);e.quiet||R.info(D.yellow(`Run \`${m.nameLower} credentials\` to set up signing credentials manually.`)),process.exit(1)}}if(e.platform==="android"&&!e.developmentClient&&(e.distribution==="internal"||e.distribution==="store")&&!(!!a.ANDROID_KEYSTORE_BASE64||!!a.ANDROID_KEYSTORE)){R.error(D.red("Missing Android credentials: Signing Keystore")),e.quiet&&process.exit(1);let h=e.yes||await Ks({message:"Would you like to automatically create and upload an Android Keystore for this profile now?",initialValue:!0});if(h&&!ai(h))return await gn({platform:"android",profile:g}),e.quiet||R.info(D.green("\u2713 Android Keystore setup complete! Restarting build phase...")),ci(e);e.quiet||R.info(D.yellow(`Run \`${m.nameLower} credentials --platform android\` to set up a signing keystore manually.`)),process.exit(1)}}catch(P){(String(P.message||"").startsWith("Credential download failed")||String(P.message||"").startsWith("Credential setup failed")||String(P.message||"").startsWith("Missing iOS credentials")||String(P.message||"").startsWith("Auto-versioning failed"))&&(R.error(D.red(P.message)),process.exit(1)),e.platform==="ios"&&e.local&&e.buildId&&(R.error(D.red(`Failed to resolve iOS credentials: ${P.message}`)),process.exit(1)),R.warn(`Failed to resolve credentials: ${P.message}`)}}let x=!!(e.local&&e.buildId),I=!!(e.local||e.sshHost),F=!I&&!x;if(x){R.info(D.magenta("\u{1F3D7}\uFE0F Runner Mode: Executing isolated build task..."));let P=await or({...e,interactive:!1},n,a,i,{branch:p,version:f,summary:b,buildType:y});await X(P),process.exit(0)}async function X(P){let w=async T=>{if(i)try{await ri("Report failed build status",()=>N.patch(`/builds/${i}/${n}`,{status:"failed",error:T,endTime:Date.now()}),3)}catch($){R.warn(D.yellow(`Could not report failed build status: ${$.message}`))}};if(i&&P.length>0){let T=Cr(),$=[];e.quiet||T.start("Uploading artifacts to Dashboard...");try{for(let O of P){let h=Ae.basename(O),M=fe.statSync(O).size,U=Ae.extname(h).toLowerCase(),j="application/octet-stream",Z=await ri(`Create artifact upload URL for ${h}`,()=>N.post(`/builds/${i}/${n}/artifact-upload-url`,{fileName:h,fileType:j}));if(Z.data.status!=="success")throw new Error(`Failed to get upload URL for ${h}`);await Mp(O,Z.data.uploadUrl,j),$.push({name:h,url:Z.data.downloadUrl,size:M,type:U.substring(1)})}e.quiet||T.stop("Artifacts uploaded.")}catch(O){e.quiet||T.stop("Failed to upload artifacts.");let h=`Artifact upload failed: ${O.message}`;throw R.error(D.red(h)),await w(h),new Error(h)}if(i&&$.length>0)try{R.info(D.cyan(`
1475
+ \u{1F517} Download Links:`));for(let O of $)R.info(D.dim(` - ${O.name}: `)+D.blue.underline(O.url));await ri("Finalize build in dashboard",()=>N.patch(`/builds/${i}/${n}`,{status:"success",artifacts:$,endTime:Date.now()})),di(e,{status:"success",projectId:i,buildId:n,platform:e.platform,profile:g,branch:p,version:f,buildType:y,developmentClient:!!e.developmentClient,summary:b,artifacts:$}),R.success(D.green(`
1476
+ \u2713 Build completed and reported to dashboard.`)),e.maestro&&!x&&await oa(i,n,e,g),e.autoSubmit&&!x&&await Or(i,n,e,g)}catch(O){let h=`Build artifact uploaded but dashboard finalization failed: ${O.message}`;throw R.error(D.red(`
1477
+ ${h}`)),await w(h),new Error(h)}}else if(i){let T="Build completed but produced no uploadable artifacts.";throw R.error(D.red(T)),await w(T),new Error(T)}}if(I){if(R.info(D.cyan(`\u{1F680} Direct Build Mode: Executing on ${e.sshHost||"local"}...`)),i&&!o){let P=process.argv.slice(3).join(" ");await N.post("/builds",{projectId:i,buildId:n,platform:e.platform,status:"building",branch:p,version:f,summary:b,startTime:r,buildType:y,buildProfile:g,buildArgs:P,framework:e.framework,simulator:!!e.simulator,developmentClient:!!e.developmentClient,...sa(e,n,g,u)}),aa(e)}if(e.sshHost&&e.platform==="ios")await Ho(e,n,a,i),e.autoSubmit&&await Or(i,n,e,g);else{let P=await or({...e,interactive:!!e.local},n,a,i,{branch:p,version:f,summary:b,buildType:y});await X(P)}return}if(F&&(R.info(D.blue("\u{1F6F0}\uFE0F Cloud Initiator Mode: Preparing orchestration...")),!e.dryRun)){e.quiet||t.start("Zipping and uploading local source...");let P=await N.post("/builds/source-upload-url",{projectId:i,buildId:n});if(P.data.status!=="success")throw t.stop("Failed to get upload URL."),new Error("Failed to get source upload URL from API");kr("SOURCE_UPLOAD",P.data.uploadUrl);let w=new Js,T=Rp(w,process.cwd(),e.platform),$=w.toBuffer();if(!e.quiet){let h=T.skipped.length>0?` Skipped: ${T.skipped.join(", ")}.`:"";t.message(`Prepared source (${T.files} files).${h}`)}e.quiet||t.message(`Uploading source (${($.length/1024/1024).toFixed(1)} MB)...`);let O=!1;for(let h=1;h<=3;h++)try{await si.put(P.data.uploadUrl,$,{headers:{"Content-Type":"application/zip"},maxBodyLength:1/0,maxContentLength:1/0,timeout:12e4}),O=!0;break}catch(M){if(h<3)t.message(`Upload attempt ${h} failed (${M.code||M.message}), retrying...`),await new Promise(U=>setTimeout(U,2e3*h));else throw M}if(e.quiet||t.stop("Source uploaded"),i){let h=process.argv.slice(3).join(" ");await N.post("/builds",{projectId:i,buildId:n,platform:e.platform,status:"pending",branch:p,version:f,summary:b,startTime:r,buildType:y,buildProfile:g,buildArgs:h,framework:e.framework,simulator:!!e.simulator,developmentClient:!!e.developmentClient,...sa(e,n,g,u)}),R.info(D.green("\u2713 Cloud build registered.")),aa(e)}e.platform==="android"&&await Fo(e,n,a,i,e.preBuild),e.quiet||R.info(D.cyan("\u{1F4E1} Connecting to build stream...")),await ef(i,n,e),e.maestro&&await oa(i,n,e,g),e.autoSubmit&&await Or(i,n,e,g);return}}catch(l){let a=l.message||"Build failed";l.response?.data?.message?a=l.response.data.message:l.message.includes("status code 402")?a="Insufficient wallet balance. Please add credits in the Dashboard.":l.message.includes("status code 403")&&(a="Monthly build quota exceeded. Upgrade your plan in the Dashboard."),i&&await s(a),R.error(D.red(`\u2717 Build failed: ${a}`)),process.exit(1)}};async function oa(e,t,n,i){R.info(D.cyan(`
1478
+ \u{1F3BC} Queuing managed Maestro test...`)),await fr({projectId:e,buildId:t,platform:n.platform,profile:i,maestroFlows:n.maestroFlows,maestroDevice:n.maestroDevice,maestroRetries:n.maestroRetries,maestroRecord:n.maestroRecord,maestroUseBuildSource:n.maestroUseBuildSource,maestroEnv:n.maestroEnv,quiet:n.quiet})}async function Or(e,t,n,i){if(!e){R.error(D.red("Auto-submit requires a linked Mach project. Run `mach link` or pass --project-id.")),process.exitCode=1;return}R.info(D.cyan(`
1479
+ Auto-submit: submitting the successful build...`));try{let r=await Zp(e,t);if(r?.autoSubmit){let o=r.submissionId?`${st}/submissions/${r.submissionId}?projectId=${encodeURIComponent(e)}`:void 0,s=String(r.status||"").toLowerCase(),l=String(r.autoSubmitStatus||"").toLowerCase(),a=r.submissionId||["success","completed","succeeded"].includes(s)||["starting","submitted","failed","skipped"].includes(l);if(r.submissionId?(R.info(D.green(`Auto-submit is already queued by Mach backend: ${r.submissionId}`)),R.info(D.dim(`Dashboard: ${o}`))):r.autoSubmitStatus==="failed"?R.warn(D.yellow(`Backend auto-submit failed: ${r.autoSubmitError||"Unknown error"}`)):a&&R.info(D.green("Auto-submit is registered with Mach backend; skipping local duplicate submit.")),a){vt(n,{status:r.autoSubmitStatus||"pending",projectId:e,submitId:r.submissionId,platform:n.platform,profile:i,buildId:t,dashboardUrl:o});return}}await ii({platform:n.platform,profile:i,buildProfile:i,buildId:t,projectId:e,yes:n.yes,quiet:n.quiet,track:n.submitTrack,releaseStatus:n.submitReleaseStatus,rollout:n.submitRollout,changesNotSentForReview:n.submitChangesNotSentForReview,credentialId:n.submitCredentialId,packageName:n.androidPackage,jsonOutput:n.submitJsonOutput,submitArgs:ha(n,t,i)})}catch(r){R.error(D.red(`Auto-submit failed: ${r.message||r}`)),process.exitCode=1}}function ha(e,t,n){let i=["--platform",e.platform,"--profile",n,"--build-id",t];return e.submitTrack&&i.push("--track",String(e.submitTrack)),e.submitReleaseStatus&&i.push("--release-status",String(e.submitReleaseStatus)),e.submitRollout!==void 0&&i.push("--rollout",String(e.submitRollout)),e.submitChangesNotSentForReview&&i.push("--changes-not-sent-for-review"),e.submitCredentialId&&i.push("--credential-id",e.submitCredentialId),e.platform==="android"&&e.androidPackage&&i.push("--package-name",e.androidPackage),e.platform==="ios"&&e.iosBundleIdentifier&&i.push("--bundle-id",e.iosBundleIdentifier),e.submitJsonOutput&&i.push("--json-output",e.submitJsonOutput),i.join(" ")}async function Zp(e,t){try{let i=(await N.get(`/builds/${e}/${t}`)).data?.build;if(i?.autoSubmit)return i}catch(n){R.warn(D.dim(`Could not check backend auto-submit status: ${n.message}`))}return null}function ya(e){for(let t of Object.keys(e))e[t]===void 0&&delete e[t];return e}function Qp(e,t,n){let i=n?.submit?.[t]?.android||{},r=n?.submit?.production?.android||{},o=e.submitTrack||i.track||r.track,s=e.submitReleaseStatus||i.releaseStatus||r.releaseStatus,l=e.submitRollout??i.rollout??i.userFraction??i.rolloutFraction??r.rollout??r.userFraction??r.rolloutFraction,a=e.submitChangesNotSentForReview??i.changesNotSentForReview??i.changes_not_sent_for_review??r.changesNotSentForReview??r.changes_not_sent_for_review;return ya({track:o,releaseStatus:s,rollout:l,changesNotSentForReview:a===void 0?!1:a===!0||a==="true"||a==="1"})}function sa(e,t,n,i){if(!e.autoSubmit||e.dryRun)return{};let r=e.platform==="android"?Qp(e,n,i):{};return{autoSubmit:!0,autoSubmitStatus:"pending",autoSubmitOptions:ya({platform:e.platform,profile:n,buildId:t,latest:!1,...r,credentialId:e.submitCredentialId,packageName:e.platform==="android"?e.androidPackage:void 0,bundleId:e.platform==="ios"?e.iosBundleIdentifier:void 0,submitArgs:ha(e,t,n)})}}function aa(e){!e.autoSubmit||e.dryRun||e.quiet||(R.info(D.green("\u2713 Auto-submit has been registered with the build.")),R.info(D.dim(" You can close this terminal; submission will start after build success.")))}function la(e){return`${st}/build/${e}`}function di(e,t){if(!e.jsonOutput)return;let n=Ae.resolve(e.jsonOutput),i={...t,url:t.url||la(t.buildId),dashboardUrl:t.dashboardUrl||la(t.buildId),updatedAt:new Date().toISOString()};try{let r=Ae.dirname(n);r&&r!=="."&&fe.mkdirSync(r,{recursive:!0}),fe.writeFileSync(n,JSON.stringify(i,null,2))}catch(r){R.warn(D.yellow(`Could not write build metadata JSON: ${r.message}`))}}async function ef(e,t,n){let i=Cr(),r="pending",o=0,s=0;for(n.quiet||i.start("Connecting to build stream...");;){try{let a=(await N.get(`/builds/${e}/${t}`)).data.build;if(a){if(r=a.status,r==="building")n.quiet||i.message("Build in progress...");else if(r==="failed")n.quiet||i.stop("Build failed."),di(n,{status:"failed",projectId:e,buildId:t,platform:n.platform,profile:a.buildProfile,buildType:a.buildType,developmentClient:!!a.developmentClient,version:a.version,summary:a.summary,error:a.error||"Unknown error",artifacts:a.artifacts||[]}),R.error(D.red(`
1480
+ \u2717 Build failed: ${a.error||"Unknown error"}`)),process.exit(1);else if(r==="completed"||r==="success"){n.quiet||i.stop("Build successful!"),di(n,{status:r,projectId:e,buildId:t,platform:n.platform,profile:a.buildProfile,buildType:a.buildType,developmentClient:!!a.developmentClient,version:a.version,summary:a.summary,artifacts:a.artifacts||[]}),R.success(D.green(`
1481
+ \u2713 Build completed successfully!`));try{n.quiet||(R.info(D.magenta(`
1482
+ \u{1F4F1} Installation Hub:`)),R.info(D.dim(" - View & Install Build: ")+D.white.underline(`${st}/build/${t}`)))}catch{}return}else if(r!=="pending"){n.quiet||i.stop(`Build status: ${r}`);return}}try{let u=(await N.get(`/builds/${e}/${t}/logs`)).data;if(u&&typeof u=="string"&&!n.quiet){let c=u.split(`
1483
+ `);if(c.length>o){for(let p=o;p<c.length;p++)c[p].trim()&&console.log(D.dim(` ${c[p]}`));o=c.length}}}catch{}s=0}catch{s++,s>10&&(i.stop("Connection lost."),R.error(D.red(`
1484
+ \u2717 Lost connection to Dashboard API.`)),process.exit(1))}await new Promise(l=>setTimeout(l,3e3))}}import*as hi from"http";import*as _a from"net";import{execFile as tf,execFileSync as Ot,execSync as fi,spawn as Sa}from"child_process";import he from"chalk";import{log as ne}from"@clack/prompts";import nf from"axios";import le from"fs";import Ze from"os";import ee from"path";var It=7070,vn=`http://127.0.0.1:${It}`,rn="com.radhya.mach.agent",nn="Mach Agent",on=`${rn}.service`,rf=5e3,of=3e3,ui=null,pi=null,Qe=()=>ee.join(Ze.homedir(),m.configDir),$a=()=>ee.join(Ze.homedir(),"Library","LaunchAgents"),mi=()=>ee.join($a(),`${rn}.plist`),va=()=>ee.join(Ze.homedir(),".config","systemd","user"),Nr=()=>ee.join(va(),on),xr=()=>ee.join(Qe(),"agent.cmd");function Lr(){return`gui/${process.getuid?.()||Number(fi("id -u").toString().trim())}`}function Ra(e){return e.replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;").replace(/"/g,"&quot;").replace(/'/g,"&apos;")}function $n(e){return`<string>${Ra(e)}</string>`}function Mr(){let e=process.argv[1]?le.realpathSync(process.argv[1]):"";if(!e||!le.existsSync(e))throw new Error("Could not resolve the current Mach CLI entrypoint.");return[process.execPath,e,"agent","run"]}function Ur(){let e=Pa(),t=process.platform==="win32"?[process.env.SystemRoot?ee.join(process.env.SystemRoot,"System32"):void 0,process.env.SystemRoot]:["/opt/homebrew/bin","/usr/local/bin","/usr/bin","/bin","/usr/sbin","/sbin"],n={HOME:Ze.homedir(),PATH:[process.env.PATH,...e.flatMap(i=>[ee.join(i,"platform-tools"),ee.join(i,"emulator"),ee.join(i,"cmdline-tools","latest","bin"),ee.join(i,"tools","bin")]),...t].filter(Boolean).join(ee.delimiter)};for(let i of["ANDROID_HOME","ANDROID_SDK_ROOT","JAVA_HOME","SHELL"])process.env[i]&&(n[i]=process.env[i]);return n}function Pa(){let e=[process.env.ANDROID_HOME,process.env.ANDROID_SDK_ROOT];if(process.platform==="darwin")e.push(ee.join(Ze.homedir(),"Library","Android","sdk"));else if(process.platform==="linux")e.push(ee.join(Ze.homedir(),"Android","Sdk"),ee.join(Ze.homedir(),"Android","sdk"),"/opt/android-sdk","/usr/lib/android-sdk");else if(process.platform==="win32"){let t=process.env.LOCALAPPDATA,n=process.env.USERPROFILE||Ze.homedir();e.push(t?ee.join(t,"Android","Sdk"):void 0,ee.join(n,"AppData","Local","Android","Sdk"))}return Array.from(new Set(e.filter(t=>!!t)))}function sf(e){return process.platform==="win32"&&!e.toLowerCase().endsWith(".exe")?`${e}.exe`:e}function Da(e,t){let n=sf(e);for(let i of Pa()){let r=ee.join(i,t,n);if(le.existsSync(r))return r}return n}function Oa(){return Da("adb","platform-tools")}function Ca(){return Da("emulator","emulator")}function Tr(e){return`"${e.replace(/\\/g,"\\\\").replace(/"/g,'\\"').replace(/%/g,"%%")}"`}function af(){if(process.platform!=="linux")throw new Error("Linux service install requires Linux.");le.mkdirSync(Qe(),{recursive:!0}),le.mkdirSync(va(),{recursive:!0});let e=Mr(),t=Ur(),n=Object.entries(t).map(([r,o])=>`Environment=${Tr(`${r}=${o}`)}`).join(`
1485
1485
  `),i=`[Unit]
1486
1486
  Description=Mach local device agent
1487
1487
  After=default.target
1488
1488
 
1489
1489
  [Service]
1490
1490
  Type=simple
1491
- ExecStart=${e.map(Er).join(" ")}
1492
- WorkingDirectory=${Er(Ye.homedir())}
1491
+ ExecStart=${e.map(Tr).join(" ")}
1492
+ WorkingDirectory=${Tr(Ze.homedir())}
1493
1493
  ${n}
1494
1494
  Restart=on-failure
1495
1495
  RestartSec=5
@@ -1498,20 +1498,20 @@ StandardError=append:%h/${m.configDir}/agent.error.log
1498
1498
 
1499
1499
  [Install]
1500
1500
  WantedBy=default.target
1501
- `;return le.writeFileSync(Ir(),i),Ir()}function Et(e,t={}){try{return It("systemctl",["--user",...e],{stdio:t.ignoreError?"ignore":"pipe"}),!0}catch(n){if(t.ignoreError)return!1;throw n}}function Lp(){if(process.platform!=="win32")throw new Error("Windows agent script requires Windows.");le.mkdirSync(qe(),{recursive:!0});let e=vr(),[t,n,...i]=$r(),r=Q.join(qe(),"agent.log"),o=Q.join(qe(),"agent.error.log"),s=Object.entries(e).map(([c,u])=>`set "${c}=${u}"`).join(`\r
1502
- `),l=i.map(c=>`"${c.replace(/"/g,'\\"')}"`).join(" "),a=`@echo off\r
1501
+ `;return le.writeFileSync(Nr(),i),Nr()}function Dt(e,t={}){try{return Ot("systemctl",["--user",...e],{stdio:t.ignoreError?"ignore":"pipe"}),!0}catch(n){if(t.ignoreError)return!1;throw n}}function lf(){if(process.platform!=="win32")throw new Error("Windows agent script requires Windows.");le.mkdirSync(Qe(),{recursive:!0});let e=Ur(),[t,n,...i]=Mr(),r=ee.join(Qe(),"agent.log"),o=ee.join(Qe(),"agent.error.log"),s=Object.entries(e).map(([d,u])=>`set "${d}=${u}"`).join(`\r
1502
+ `),l=i.map(d=>`"${d.replace(/"/g,'\\"')}"`).join(" "),a=`@echo off\r
1503
1503
  ${s}\r
1504
- cd /d "${Ye.homedir()}"\r
1504
+ cd /d "${Ze.homedir()}"\r
1505
1505
  "${t}" "${n}" ${l} >> "${r}" 2>> "${o}"\r
1506
- `;return le.writeFileSync(wr(),a),wr()}function yn(e,t={}){try{return It("schtasks.exe",e,{stdio:t.ignoreError?"ignore":"pipe"}),!0}catch(n){if(t.ignoreError)return!1;throw n}}function Mp(){if(process.platform!=="darwin")throw new Error("Background agent install currently supports macOS only.");le.mkdirSync(qe(),{recursive:!0}),le.mkdirSync(ca(),{recursive:!0});let e=$r(),t=vr(),n=Q.join(qe(),"agent.log"),i=Q.join(qe(),"agent.error.log"),r=Object.entries(t).map(([l,a])=>` <key>${pa(l)}</key>
1507
- ${gn(a)}`).join(`
1508
- `),o=e.map(l=>` ${gn(l)}`).join(`
1506
+ `;return le.writeFileSync(xr(),a),xr()}function Rn(e,t={}){try{return Ot("schtasks.exe",e,{stdio:t.ignoreError?"ignore":"pipe"}),!0}catch(n){if(t.ignoreError)return!1;throw n}}function cf(){if(process.platform!=="darwin")throw new Error("Background agent install currently supports macOS only.");le.mkdirSync(Qe(),{recursive:!0}),le.mkdirSync($a(),{recursive:!0});let e=Mr(),t=Ur(),n=ee.join(Qe(),"agent.log"),i=ee.join(Qe(),"agent.error.log"),r=Object.entries(t).map(([l,a])=>` <key>${Ra(l)}</key>
1507
+ ${$n(a)}`).join(`
1508
+ `),o=e.map(l=>` ${$n(l)}`).join(`
1509
1509
  `),s=`<?xml version="1.0" encoding="UTF-8"?>
1510
1510
  <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
1511
1511
  <plist version="1.0">
1512
1512
  <dict>
1513
1513
  <key>Label</key>
1514
- ${gn(Yt)}
1514
+ ${$n(rn)}
1515
1515
  <key>ProgramArguments</key>
1516
1516
  <array>
1517
1517
  ${o}
@@ -1523,20 +1523,26 @@ ${r}
1523
1523
  <key>RunAtLoad</key>
1524
1524
  <true/>
1525
1525
  <key>StandardOutPath</key>
1526
- ${gn(n)}
1526
+ ${$n(n)}
1527
1527
  <key>StandardErrorPath</key>
1528
- ${gn(i)}
1528
+ ${$n(i)}
1529
1529
  </dict>
1530
1530
  </plist>
1531
- `;return le.writeFileSync(ni(),s),ni()}function At(e,t={}){try{return It("launchctl",e,{stdio:t.ignoreError?"ignore":"pipe"}),!0}catch(n){if(t.ignoreError)return!1;throw n}}function Up(e){return new Promise(t=>setTimeout(t,e))}function ii(e,t,n=kp){return new Promise((i,r)=>{Op(e,t,{timeout:n,maxBuffer:10*1024*1024,windowsHide:!0},(o,s,l)=>{if(o){let a=l?.toString().trim();r(new Error(a||o.message));return}i(s?.toString()||"")})})}async function ya(){if(typeof fetch=="function"){let e=new AbortController,t=setTimeout(()=>e.abort(),3e3);try{return(await fetch(`${hn}/health`,{signal:e.signal})).ok}catch{return!1}finally{clearTimeout(t)}}return new Promise(e=>{let t=!1,n=r=>{t||(t=!0,e(r))},i=ri.get(`${hn}/health`,r=>{r.resume(),n(r.statusCode===200)});i.setTimeout(3e3,()=>{i.destroy(),n(!1)}),i.on("error",()=>n(!1))})}async function Fp(e=8e3){let t=Date.now()+e;for(;Date.now()<t;){if(await ya())return!0;await Up(250)}return!1}async function Sa(){return new Promise(e=>{let t=!1,n=da.createConnection({host:"127.0.0.1",port:mt}),i=r=>{t||(t=!0,n.destroy(),e(r))};n.setTimeout(1e3),n.once("connect",()=>i(!0)),n.once("timeout",()=>i(!1)),n.once("error",()=>i(!1))})}async function Rr(){if(await Fp()){te.success(fe.green("Mach agent installed and started."));return}if(await Sa()){te.warn(`Mach agent service is installed, but port ${mt} is held by a process that is not answering /health.`),te.info(fe.dim(`Run \`${m.nameLower} agent stop\`, close any foreground \`${m.nameLower} agent\` terminal, then run \`${m.nameLower} agent install\` again.`));return}te.warn(`Mach agent service is installed, but it did not start listening on ${hn}.`)}async function Bp(){let e=Mp(),t=_r();At(["bootout",t,e],{ignoreError:!0}),At(["bootstrap",t,e],{ignoreError:!0})||At(["load","-w",e]),At(["enable",`${t}/${Yt}`],{ignoreError:!0}),At(["kickstart","-k",`${t}/${Yt}`],{ignoreError:!0}),await Rr(),te.info(fe.dim(`It will start automatically when you log in. Plist: ${e}`)),te.info(fe.dim(`Logs: ${Q.join(qe(),"agent.log")}`))}async function ba(){let e=ni(),t=_r();At(["bootout",t,e],{ignoreError:!0})||At(["unload","-w",e],{ignoreError:!0})?te.success(fe.green("Mach agent service stopped.")):te.warn("Mach agent service was not loaded.")}async function Hp(){await ba();let e=ni();le.existsSync(e)&&le.unlinkSync(e),te.success(fe.green("Mach agent service uninstalled."))}async function jp(){let e=xp();Et(["daemon-reload"]),Et(["enable","--now",qt]),await Rr(),te.info(fe.dim(`It will start automatically when you log in. Service: ${e}`)),te.info(fe.dim(`Logs: ${Q.join(qe(),"agent.log")}`))}async function Gp(){Et(["stop",qt],{ignoreError:!0})?te.success(fe.green("Mach agent service stopped.")):te.warn("Mach agent service was not running.")}async function Kp(){Et(["disable","--now",qt],{ignoreError:!0}),Et(["daemon-reload"],{ignoreError:!0});let e=Ir();le.existsSync(e)&&le.unlinkSync(e),Et(["daemon-reload"],{ignoreError:!0}),te.success(fe.green("Mach agent service uninstalled."))}async function Vp(){let e=Lp();yn(["/Create","/TN",Jt,"/SC","ONLOGON","/TR",`"${e}"`,"/RL","LIMITED","/F"]),yn(["/Run","/TN",Jt],{ignoreError:!0}),await Rr(),te.info(fe.dim(`It will start automatically when you log in. Task: ${Jt}`)),te.info(fe.dim(`Logs: ${Q.join(qe(),"agent.log")}`))}async function Aa(){yn(["/End","/TN",Jt],{ignoreError:!0})?te.success(fe.green("Mach agent task stopped.")):te.warn("Mach agent task was not running.")}async function zp(){await Aa(),yn(["/Delete","/TN",Jt,"/F"],{ignoreError:!0});let e=wr();le.existsSync(e)&&le.unlinkSync(e),te.success(fe.green("Mach agent task uninstalled."))}async function ra(){if(process.platform==="darwin")return Bp();if(process.platform==="linux")return jp();if(process.platform==="win32")return Vp();throw new Error(`Background agent install is not supported on ${process.platform}.`)}async function oa(){if(process.platform==="darwin")return ba();if(process.platform==="linux")return Gp();if(process.platform==="win32")return Aa();te.warn(`Background agent service control is not supported on ${process.platform}.`)}async function Wp(){if(process.platform==="darwin")return Hp();if(process.platform==="linux")return Kp();if(process.platform==="win32")return zp();te.warn(`Background agent uninstall is not supported on ${process.platform}.`)}async function Jp(){let e=await ya(),t=e?!0:await Sa();if(e?te.success(fe.green(`Mach agent is online at ${hn}`)):t?te.warn(`Mach agent port is open, but /health did not respond. Run \`${m.nameLower} agent restart\` if the dashboard still shows offline.`):te.warn(`Mach agent is not responding at ${hn}`),process.platform==="darwin"){let n=At(["print",`${_r()}/${Yt}`],{ignoreError:!0});te.info(fe.dim(`Login service: ${n?"installed/loaded":"not loaded"}`))}else if(process.platform==="linux"){let n=Et(["is-enabled",qt],{ignoreError:!0}),i=Et(["is-active",qt],{ignoreError:!0});te.info(fe.dim(`Login service: ${n?"enabled":"not enabled"} / ${i?"active":"inactive"}`))}else if(process.platform==="win32"){let n=yn(["/Query","/TN",Jt],{ignoreError:!0});te.info(fe.dim(`Login task: ${n?"installed":"not installed"}`))}}async function Yp(){let e=[];try{(await ii(ga(),["devices","-l"])).split(`
1532
- `).forEach(n=>{if(n.includes("List of devices")||!n.trim())return;let i=n.split(/\s+/);if(i.length<2||i[1]!=="device")return;let r=i[0],o=n.match(/model:([^\s]+)/);e.push({id:r,platform:"android",type:r.startsWith("emulator-")?"emulator":"physical",name:o?o[1].replace(/_/g," "):r,status:"online",details:n.trim()})})}catch{}try{let n=(await ii(ha(),["-list-avds"])).split(`
1533
- `).filter(r=>!!r.trim()),i=e.some(r=>r.platform==="android"&&r.id.startsWith("emulator-"));n.forEach(r=>{i||e.push({id:r,platform:"android",type:"emulator",name:r.replace(/_/g," "),status:"offline",details:`Android Virtual Device: ${r}`})})}catch{}return e}async function Ea(){if(process.platform!=="darwin")return[];try{let e=await ii("/usr/bin/xcrun",["simctl","list","devices","--json"]),t=JSON.parse(e),n=[];return Object.entries(t.devices||{}).forEach(([i,r])=>{r.forEach(o=>{o.isAvailable&&n.push({id:o.udid,platform:"ios",type:"simulator",name:o.name,status:o.state?.toLowerCase()==="booted"?"online":"offline",runtime:i,details:`${o.name} (${i})`})})}),n}catch{return[]}}async function qp(){if(process.platform!=="darwin")return[];try{let e=await ii("/usr/bin/xcrun",["devicectl","list","devices","--json-output","-"]);return(JSON.parse(e).result?.devices||[]).filter(n=>{let i=n.connectionProperties?.transportType;return i==="wired"||i==="localNetwork"}).map(n=>{let i=n.connectionProperties?.transportType,r=n.deviceProperties?.name||"iPhone";return{id:n.identifier,platform:"ios",type:"physical",name:r,status:"online",details:`${r} (${n.model?.name||n.hardwareModel||""}) - ${i}`}})}catch{return[]}}async function Xp(e){let t=await Ea(),n=t.find(r=>r.id===e);if(n)return n;let i=t.filter(r=>r.status==="online");return i.length===1?i[0]:null}async function Zp(){let[e,t,n]=await Promise.all([Yp(),Ea(),qp()]);return[...e,...t,...n]}async function Qp(){let e=Date.now();return Qn&&e-Qn.updatedAt<Np?Qn.targets:(ei||(ei=Zp().then(t=>(Qn={targets:t,updatedAt:Date.now()},t)).finally(()=>{ei=null})),ei)}async function sa(e){let t=[];for await(let n of e)t.push(Buffer.isBuffer(n)?n:Buffer.from(n));return t.length===0?{}:JSON.parse(Buffer.concat(t).toString("utf-8"))}async function ef(e,t){let n=await Cp({method:"GET",url:e,responseType:"stream",timeout:12e4}),i=le.createWriteStream(t);n.data.pipe(i),await new Promise((r,o)=>{i.on("finish",r),i.on("error",o)})}function aa(e,t){let n=e?.stderr?.toString?.().trim();if(n)return n;let i=e?.stdout?.toString?.().trim();return i||e?.message||t}function tf(e,t){return It("/usr/libexec/PlistBuddy",["-c",`Print :${t}`,e],{encoding:"utf-8"}).trim()}function nf(e){let t=Q.join(e,"Info.plist");if(!le.existsSync(t))throw new Error(`Could not validate iOS app executable: ${t} not found.`);let n=tf(t,"CFBundleExecutable"),i=Q.join(e,n);if(!le.existsSync(i))throw new Error(`Could not validate iOS app executable: ${i} not found.`);return i}function rf(){return process.arch==="arm64"?"arm64":"x86_64"}function of(e){return le.existsSync(e)?le.readdirSync(e).map(t=>Q.join(e,t)).filter(t=>t.endsWith(".app")&&le.statSync(t).isDirectory()):[]}function la(e,t){let n=of(e);if(n.length===1)return n[0];if(n.length>1)throw new Error(`Multiple .app bundles found in ${t}: ${n.map(i=>Q.basename(i)).join(", ")}. Mach cannot safely choose which app to install.`);return""}function sf(e){let t=nf(e),n=rf(),i="",r="";try{i=It("lipo",["-info",t],{encoding:"utf-8"}).trim()}catch(o){throw new Error(`Could not inspect iOS simulator app architecture for ${Q.basename(e)}: ${o.message}`)}if(!new RegExp(`\\b${n}\\b`).test(i))throw new Error(`This iOS simulator artifact cannot be installed because ${Q.basename(e)} does not include the ${n} simulator architecture. lipo output: ${i}. Rebuild the app with the latest Mach CLI and make sure the profile is a simulator build.`);try{r=It("/usr/bin/xcrun",["vtool","-show-build",t],{encoding:"utf-8"}).trim()}catch(o){throw new Error(`Could not inspect iOS simulator app platform for ${Q.basename(e)}: ${o.message}`)}if(!/\bplatform\s+IOSSIMULATOR\b/i.test(r))throw new Error(`This iOS simulator artifact cannot be installed because ${Q.basename(e)} was built for the wrong Apple platform. A simulator artifact must contain platform IOSSIMULATOR. vtool output: ${r}. Rebuild the app with the latest Mach CLI.`)}async function af(e,t,n){let i=n||(t.toLowerCase().includes(".apk")?"android":"ios"),r=t.toLowerCase().includes(".ipa"),o=le.mkdtempSync(Q.join(Ye.tmpdir(),`${mt}-install-`)),s=Q.join(o,i==="android"?"install.apk":r?"install.ipa":"install.zip");try{if(await ef(t,s),i==="android"){It(ga(),["-s",e,"install","-r",s],{stdio:"pipe"});return}if(process.platform!=="darwin")throw new Error("iOS local install requires macOS.");ti(`unzip -o ${JSON.stringify(s)} -d ${JSON.stringify(o)}`,{stdio:"pipe"});let l=Q.join(o,"Payload"),a=le.existsSync(l),c=r||a,u="";if(c?u=la(l,"Payload"):u=la(o,"the simulator artifact"),!u)throw new Error(`No .app bundle found inside the ${r?"IPA":"archive"}.`);let d=c?null:await Xp(e);if(d){try{sf(u),It("/usr/bin/xcrun",["simctl","install",d.id,u],{stdio:"pipe"})}catch(p){throw new Error(aa(p,"iOS Simulator install failed."))}return}if(!c)throw new Error("Selected iOS Simulator was not found. Refresh Install Hub devices or boot one simulator and try again.");try{ti(`/usr/bin/xcrun devicectl device install app --device ${JSON.stringify(e)} ${JSON.stringify(u)}`,{stdio:"pipe"})}catch(p){throw new Error(aa(p,"iOS device install failed."))}}finally{le.rmSync(o,{recursive:!0,force:!0})}}function lf(e,t){if(!e)throw new Error("Device id is required.");if(t==="ios"){if(process.platform!=="darwin")throw new Error("iOS Simulator launch requires macOS.");return ti(`/usr/bin/xcrun simctl boot ${JSON.stringify(e)}`,{stdio:"pipe"}),ia("open",["-a","Simulator"],{detached:!0,stdio:"ignore"}).unref(),"Simulator booting..."}if(t==="android")return ia(ha(),["-avd",e],{detached:!0,stdio:"ignore",windowsHide:!0}).unref(),"Emulator booting in background...";throw new Error("Invalid platform.")}async function df(){process.platform!=="darwin"&&te.warn("Running on non-macOS \u2014 iOS discovery unavailable, Android only.");let e=ri.createServer((i,r)=>{if(r.setHeader("Access-Control-Allow-Origin","*"),r.setHeader("Access-Control-Allow-Methods","GET, POST, OPTIONS"),r.setHeader("Access-Control-Allow-Headers","Content-Type, Authorization"),i.method==="OPTIONS"){r.writeHead(204),r.end();return}let o=new URL(i.url||"/",`http://localhost:${mt}`);if(i.method==="GET"&&o.pathname==="/local/devices"){Qp().then(s=>{r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",targets:s}))}).catch(s=>{r.writeHead(500,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:s.message}))});return}if(i.method==="GET"&&o.pathname==="/health"){r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",service:"mach-agent",port:mt,platform:process.platform}));return}if(i.method==="POST"&&o.pathname==="/install-local"){t(i,r);return}if(i.method==="POST"&&o.pathname==="/local/boot"){n(i,r);return}r.writeHead(404),r.end()}),t=async(i,r)=>{try{let{deviceId:o,artifactUrl:s,platform:l}=await sa(i);if(!o||!s){r.writeHead(400,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:"deviceId and artifactUrl are required"}));return}await af(o,s,l),r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",message:`Installed on ${o}`}))}catch(o){r.writeHead(500,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:o.message||"Local install failed"}))}},n=async(i,r)=>{try{let{id:o,platform:s}=await sa(i),l=lf(o,s);r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",message:l}))}catch(o){r.writeHead(500,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:o.message||"Local device launch failed"}))}};e.listen(mt,"127.0.0.1",()=>{te.success(fe.green(`Local device agent running on http://localhost:${mt}`)),te.info(fe.dim("Keep this running while using the Install Hub on the dashboard.")),te.info(fe.dim("Press Ctrl+C to stop."))}),e.on("error",i=>{i.code==="EADDRINUSE"?te.error(`Port ${mt} is already in use \u2014 agent may already be running.`):te.error(`Agent error: ${i.message}`),process.exit(1)}),await new Promise(()=>{})}async function Ia(e="start"){let t=String(e||"start").toLowerCase();if(t==="start"||t==="run"){await df();return}if(t==="install"){await ra();return}if(t==="status"){await Jp();return}if(t==="stop"){await oa();return}if(t==="uninstall"){await Wp();return}if(t==="restart"){await oa(),await ra();return}te.error(`Unknown agent action: ${e}`),te.info(fe.dim(`Use: ${m.nameLower} agent start | install | status | restart | stop | uninstall`)),process.exit(1)}import{createRequire as pg}from"module";import{text as uf,password as pf,spinner as ff,isCancel as $a}from"@clack/prompts";import Cr from"chalk";import Sn from"fs";import wa from"path";import cf from"os";var Dr=wa.join(cf.homedir(),m.configDir),Pr=wa.join(Dr,"config.json");function Or(){if(!Sn.existsSync(Pr))return{};try{return JSON.parse(Sn.readFileSync(Pr,"utf-8"))}catch{return{}}}function _a(e){Sn.existsSync(Dr)||Sn.mkdirSync(Dr,{recursive:!0});let n={...Or(),...e};Sn.writeFileSync(Pr,JSON.stringify(n,null,2))}async function va(){let e=Or(),t=await uf({message:"Enter your email:",placeholder:"user@example.com",initialValue:e.lastLoginEmail,validate(r){if(r.length===0)return"Email is required!"}});if($a(t))return;let n=await pf({message:"Enter your password:",validate(r){if(r.length===0)return"Password is required!"}});if($a(n))return;let i=ff();i.start("Authenticating...");try{let o=await(await fetch(`${Bt}/login`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({username:t,password:n})})).json();o.status==="success"&&o.user.token?(ro({id:o.user.id,email:t,token:o.user.token,refreshToken:o.user.refreshToken}),_a({lastLoginEmail:t}),i.stop(Cr.green("Login successful!"))):i.stop(Cr.red("Login failed: "+(o.message||"Unknown error")))}catch(r){i.stop(Cr.red("Network error: "+r.message))}}import{log as oi,outro as mf}from"@clack/prompts";import bn from"chalk";async function Ra(){let e=oo(),t=`${m.envPrefix}TOKEN`;e?oi.success(bn.green(`Logged out. Removed saved credentials from ~/${m.configDir}/credentials.json.`)):oi.warn(bn.yellow(`No saved ${m.name} credentials found.`)),process.env[t]&&(oi.warn(bn.yellow(`${t} is still set in this shell. Commands will continue to authenticate with that token until you unset it.`)),oi.info(bn.dim(`Run: unset ${t}`))),mf(bn.blue("---"))}import{outro as gf,select as hf,spinner as yf,isCancel as Sf}from"@clack/prompts";import si from"chalk";import kr from"fs";import bf from"path";var Da=e=>e==="1234567890"||e==="ABC123DEFG"||e==="XXXXXXXXXX"?"":typeof e=="string"?e:"",Af=()=>process.versions.node.split(".")[0]||"24";async function Pa(){if(!Ce()){console.log(si.red(`You are not logged in. Run \`${m.nameLower} login\` first.`));return}let t=yf();t.start("Fetching projects...");try{let{data:n}=await T.get("/projects");if(t.stop("Projects loaded."),n.status!=="success"||!n.projects||n.projects.length===0){console.log(si.yellow(`No projects found. Run \`${m.nameLower} init\` to create one.`));return}let i=n.projects.map(g=>({value:g.projectId,label:`${g.name} (${g.slug})`})),r=await hf({message:"Select a project to link:",options:i});if(Sf(r))return;let o=bf.join(process.cwd(),m.configFileName),s={};if(kr.existsSync(o))try{s=JSON.parse(kr.readFileSync(o,"utf-8"))}catch{}let l=n.projects.find(g=>g.projectId===r),a=s.android?.package||pt("android"),c=s.ios?.bundleIdentifier||pt("ios"),u=s.android||{},d=s.submit?.production?.android||{},p=s.submit?.production?.ios||{},f={projectId:r,framework:rn(s.framework)||Ht,name:l?.name,slug:l?.slug,nodeVersion:s.nodeVersion||Af(),scheme:l?.slug?.toLowerCase()||"app",android:{...u,package:a||"",versionCode:u.versionCode||"auto"},ios:{bundleIdentifier:c||"",buildNumber:s.ios?.buildNumber||"auto"},build:{development:{environment:"development",distribution:"development"},staging:{environment:"staging",distribution:"internal"},production:{environment:"production",distribution:"store"}},submit:{production:{android:{...d,track:d.track||"internal",releaseStatus:d.releaseStatus||"completed"},ios:{ascAppId:Da(p.ascAppId),appleTeamId:Da(p.appleTeamId)}}}};kr.writeFileSync(o,JSON.stringify(f,null,2)),gf(si.green(`Linked to project ${f.name} (${f.slug})`))}catch(n){t.stop(si.red("Error fetching projects: "+n.message))}}import{outro as Ef,text as ai,select as If,spinner as wf,isCancel as An}from"@clack/prompts";import En from"chalk";import _f from"fs";import $f from"path";import{randomUUID as vf}from"crypto";var Rf=()=>process.versions.node.split(".")[0]||"24";async function Oa(){if(!Ce()){console.log(En.red(`You are not logged in. Run \`${m.nameLower} login\` first.`));return}let t=await ai({message:"Project Name:",placeholder:"My Awesome App",validate(l){if(l.length===0)return"Name is required!"}});if(An(t))return;let n=await ai({message:"Project Slug (URL friendly):",placeholder:"my-awesome-app",validate(l){if(l.length===0)return"Slug is required!";if(!/^[a-z0-9-]+$/.test(l))return"Slug must be lowercase alphanumeric with dashes."}});if(An(n))return;let i=await If({message:"Platform:",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"},{value:"web",label:"Web"},{value:"all",label:"All Platforms"}]});if(An(i))return;let r="";if(i==="android"||i==="all"){let l=pt("android");if(r=await ai({message:"Android Package Name:",initialValue:l||"",placeholder:"com.example.app",validate(a){if(a.length===0)return"Package name is required for Android!"}}),An(r))return}let o="";if(i==="ios"||i==="all"){let l=pt("ios");if(o=await ai({message:"iOS Bundle Identifier:",initialValue:l||"",placeholder:"com.example.app",validate(a){if(a.length===0)return"Bundle ID is required for iOS!"}}),An(o))return}let s=wf();s.start("Creating project...");try{let l=vf(),c={projectId:l,name:t,slug:n,storageType:"managed",platforms:i==="all"?["android","ios","web"]:[i]},{data:u}=await T.post("/projects",c);if(u.status==="success"){s.stop(En.green("Project created successfully!"));let d=$f.join(process.cwd(),m.configFileName);_f.writeFileSync(d,JSON.stringify({projectId:l,framework:Ht,name:t,slug:n,nodeVersion:Rf(),...r?{android:{package:r,versionCode:"auto"}}:{},...o?{ios:{bundleIdentifier:o,buildNumber:"auto"}}:{},build:{development:{environment:"development",distribution:"development"},staging:{environment:"staging",distribution:"internal"},production:{environment:"production",distribution:"store"}},submit:{production:{android:{track:"internal",releaseStatus:"completed"},ios:{ascAppId:"",appleTeamId:""}}}},null,2)),Ef(En.green(`Initialized project ${t} and linked locally!`))}else s.stop(En.red("creation failed: "+u.message))}catch(l){s.stop(En.red("Network error: "+l.message))}}import{spinner as Nr,log as Oe}from"@clack/prompts";import In from"chalk";import li from"fs";import Ca from"path";function Tr(e,t,n,i){let r=e?.response?.status,o=e?.response?.data?.message||e?.response?.data?.error,s=i?` ${i}`:"";return r===401?`Not logged in or token expired while trying to ${n}${s}. Run \`${m.nameLower} login\` and try again.`:r===403?[`Permission denied while trying to ${n}${s}.`,o?`API says: ${o}.`:void 0,`Current Mach account/token does not have access to project ${t}.`,`Run \`${m.nameLower} login\` with the correct account, or ask a project owner to grant access.`].filter(Boolean).join(" "):r===404?[`Project or environment endpoint was not found while trying to ${n}${s}.`,`Project ID: ${t}.`,o?`API says: ${o}.`:void 0].filter(Boolean).join(" "):r?`Failed to ${n}${s}: ${o||`API returned HTTP ${r}`}`:`Network error while trying to ${n}${s}: ${e?.message||"Unknown error"}`}function Df(e){let t=String(e??"");return t===""?'""':/^[A-Za-z0-9_./:@%+-]+$/.test(t)?t:JSON.stringify(t)}function Pf(e,t){return`${[`# Generated by ${m.nameLower} env pull --environment ${t}`,"# Do not commit this file.","",...Object.keys(e).sort((i,r)=>i.localeCompare(r)).map(i=>`${i}=${Df(e[i])}`)].join(`
1531
+ `;return le.writeFileSync(mi(),s),mi()}function Pt(e,t={}){try{return Ot("launchctl",e,{stdio:t.ignoreError?"ignore":"pipe"}),!0}catch(n){if(t.ignoreError)return!1;throw n}}function df(e){return new Promise(t=>setTimeout(t,e))}function gi(e,t,n=rf){return new Promise((i,r)=>{tf(e,t,{timeout:n,maxBuffer:10*1024*1024,windowsHide:!0},(o,s,l)=>{if(o){let a=l?.toString().trim();r(new Error(a||o.message));return}i(s?.toString()||"")})})}async function ka(){if(typeof fetch=="function"){let e=new AbortController,t=setTimeout(()=>e.abort(),3e3);try{return(await fetch(`${vn}/health`,{signal:e.signal})).ok}catch{return!1}finally{clearTimeout(t)}}return new Promise(e=>{let t=!1,n=r=>{t||(t=!0,e(r))},i=hi.get(`${vn}/health`,r=>{r.resume(),n(r.statusCode===200)});i.setTimeout(3e3,()=>{i.destroy(),n(!1)}),i.on("error",()=>n(!1))})}async function uf(e=8e3){let t=Date.now()+e;for(;Date.now()<t;){if(await ka())return!0;await df(250)}return!1}async function Ta(){return new Promise(e=>{let t=!1,n=_a.createConnection({host:"127.0.0.1",port:It}),i=r=>{t||(t=!0,n.destroy(),e(r))};n.setTimeout(1e3),n.once("connect",()=>i(!0)),n.once("timeout",()=>i(!1)),n.once("error",()=>i(!1))})}async function Fr(){if(await uf()){ne.success(he.green("Mach agent installed and started."));return}if(await Ta()){ne.warn(`Mach agent service is installed, but port ${It} is held by a process that is not answering /health.`),ne.info(he.dim(`Run \`${m.nameLower} agent stop\`, close any foreground \`${m.nameLower} agent\` terminal, then run \`${m.nameLower} agent install\` again.`));return}ne.warn(`Mach agent service is installed, but it did not start listening on ${vn}.`)}async function pf(){let e=cf(),t=Lr();Pt(["bootout",t,e],{ignoreError:!0}),Pt(["bootstrap",t,e],{ignoreError:!0})||Pt(["load","-w",e]),Pt(["enable",`${t}/${rn}`],{ignoreError:!0}),Pt(["kickstart","-k",`${t}/${rn}`],{ignoreError:!0}),await Fr(),ne.info(he.dim(`It will start automatically when you log in. Plist: ${e}`)),ne.info(he.dim(`Logs: ${ee.join(Qe(),"agent.log")}`))}async function Na(){let e=mi(),t=Lr();Pt(["bootout",t,e],{ignoreError:!0})||Pt(["unload","-w",e],{ignoreError:!0})?ne.success(he.green("Mach agent service stopped.")):ne.warn("Mach agent service was not loaded.")}async function ff(){await Na();let e=mi();le.existsSync(e)&&le.unlinkSync(e),ne.success(he.green("Mach agent service uninstalled."))}async function mf(){let e=af();Dt(["daemon-reload"]),Dt(["enable","--now",on]),await Fr(),ne.info(he.dim(`It will start automatically when you log in. Service: ${e}`)),ne.info(he.dim(`Logs: ${ee.join(Qe(),"agent.log")}`))}async function gf(){Dt(["stop",on],{ignoreError:!0})?ne.success(he.green("Mach agent service stopped.")):ne.warn("Mach agent service was not running.")}async function hf(){Dt(["disable","--now",on],{ignoreError:!0}),Dt(["daemon-reload"],{ignoreError:!0});let e=Nr();le.existsSync(e)&&le.unlinkSync(e),Dt(["daemon-reload"],{ignoreError:!0}),ne.success(he.green("Mach agent service uninstalled."))}async function yf(){let e=lf();Rn(["/Create","/TN",nn,"/SC","ONLOGON","/TR",`"${e}"`,"/RL","LIMITED","/F"]),Rn(["/Run","/TN",nn],{ignoreError:!0}),await Fr(),ne.info(he.dim(`It will start automatically when you log in. Task: ${nn}`)),ne.info(he.dim(`Logs: ${ee.join(Qe(),"agent.log")}`))}async function xa(){Rn(["/End","/TN",nn],{ignoreError:!0})?ne.success(he.green("Mach agent task stopped.")):ne.warn("Mach agent task was not running.")}async function Sf(){await xa(),Rn(["/Delete","/TN",nn,"/F"],{ignoreError:!0});let e=xr();le.existsSync(e)&&le.unlinkSync(e),ne.success(he.green("Mach agent task uninstalled."))}async function ba(){if(process.platform==="darwin")return pf();if(process.platform==="linux")return mf();if(process.platform==="win32")return yf();throw new Error(`Background agent install is not supported on ${process.platform}.`)}async function Aa(){if(process.platform==="darwin")return Na();if(process.platform==="linux")return gf();if(process.platform==="win32")return xa();ne.warn(`Background agent service control is not supported on ${process.platform}.`)}async function bf(){if(process.platform==="darwin")return ff();if(process.platform==="linux")return hf();if(process.platform==="win32")return Sf();ne.warn(`Background agent uninstall is not supported on ${process.platform}.`)}async function Af(){let e=await ka(),t=e?!0:await Ta();if(e?ne.success(he.green(`Mach agent is online at ${vn}`)):t?ne.warn(`Mach agent port is open, but /health did not respond. Run \`${m.nameLower} agent restart\` if the dashboard still shows offline.`):ne.warn(`Mach agent is not responding at ${vn}`),process.platform==="darwin"){let n=Pt(["print",`${Lr()}/${rn}`],{ignoreError:!0});ne.info(he.dim(`Login service: ${n?"installed/loaded":"not loaded"}`))}else if(process.platform==="linux"){let n=Dt(["is-enabled",on],{ignoreError:!0}),i=Dt(["is-active",on],{ignoreError:!0});ne.info(he.dim(`Login service: ${n?"enabled":"not enabled"} / ${i?"active":"inactive"}`))}else if(process.platform==="win32"){let n=Rn(["/Query","/TN",nn],{ignoreError:!0});ne.info(he.dim(`Login task: ${n?"installed":"not installed"}`))}}async function Ef(){let e=[];try{(await gi(Oa(),["devices","-l"])).split(`
1532
+ `).forEach(n=>{if(n.includes("List of devices")||!n.trim())return;let i=n.split(/\s+/);if(i.length<2||i[1]!=="device")return;let r=i[0],o=n.match(/model:([^\s]+)/);e.push({id:r,platform:"android",type:r.startsWith("emulator-")?"emulator":"physical",name:o?o[1].replace(/_/g," "):r,status:"online",details:n.trim()})})}catch{}try{let n=(await gi(Ca(),["-list-avds"])).split(`
1533
+ `).filter(r=>!!r.trim()),i=e.some(r=>r.platform==="android"&&r.id.startsWith("emulator-"));n.forEach(r=>{i||e.push({id:r,platform:"android",type:"emulator",name:r.replace(/_/g," "),status:"offline",details:`Android Virtual Device: ${r}`})})}catch{}return e}async function La(){if(process.platform!=="darwin")return[];try{let e=await gi("/usr/bin/xcrun",["simctl","list","devices","--json"]),t=JSON.parse(e),n=[];return Object.entries(t.devices||{}).forEach(([i,r])=>{r.forEach(o=>{o.isAvailable&&n.push({id:o.udid,platform:"ios",type:"simulator",name:o.name,status:o.state?.toLowerCase()==="booted"?"online":"offline",runtime:i,details:`${o.name} (${i})`})})}),n}catch{return[]}}async function If(){if(process.platform!=="darwin")return[];try{let e=await gi("/usr/bin/xcrun",["devicectl","list","devices","--json-output","-"]);return(JSON.parse(e).result?.devices||[]).filter(n=>{let i=n.connectionProperties?.transportType;return i==="wired"||i==="localNetwork"}).map(n=>{let i=n.connectionProperties?.transportType,r=n.deviceProperties?.name||"iPhone";return{id:n.identifier,platform:"ios",type:"physical",name:r,status:"online",details:`${r} (${n.model?.name||n.hardwareModel||""}) - ${i}`}})}catch{return[]}}async function wf(e){let t=await La(),n=t.find(r=>r.id===e);if(n)return n;let i=t.filter(r=>r.status==="online");return i.length===1?i[0]:null}async function _f(){let[e,t,n]=await Promise.all([Ef(),La(),If()]);return[...e,...t,...n]}async function $f(){let e=Date.now();return ui&&e-ui.updatedAt<of?ui.targets:(pi||(pi=_f().then(t=>(ui={targets:t,updatedAt:Date.now()},t)).finally(()=>{pi=null})),pi)}async function Ea(e){let t=[];for await(let n of e)t.push(Buffer.isBuffer(n)?n:Buffer.from(n));return t.length===0?{}:JSON.parse(Buffer.concat(t).toString("utf-8"))}async function vf(e,t){let n=await nf({method:"GET",url:e,responseType:"stream",timeout:12e4}),i=le.createWriteStream(t);n.data.pipe(i),await new Promise((r,o)=>{i.on("finish",r),i.on("error",o)})}function Ia(e,t){let n=e?.stderr?.toString?.().trim();if(n)return n;let i=e?.stdout?.toString?.().trim();return i||e?.message||t}function Rf(e,t){return Ot("/usr/libexec/PlistBuddy",["-c",`Print :${t}`,e],{encoding:"utf-8"}).trim()}function Pf(e){let t=ee.join(e,"Info.plist");if(!le.existsSync(t))throw new Error(`Could not validate iOS app executable: ${t} not found.`);let n=Rf(t,"CFBundleExecutable"),i=ee.join(e,n);if(!le.existsSync(i))throw new Error(`Could not validate iOS app executable: ${i} not found.`);return i}function Df(){return process.arch==="arm64"?"arm64":"x86_64"}function Of(e){return le.existsSync(e)?le.readdirSync(e).map(t=>ee.join(e,t)).filter(t=>t.endsWith(".app")&&le.statSync(t).isDirectory()):[]}function wa(e,t){let n=Of(e);if(n.length===1)return n[0];if(n.length>1)throw new Error(`Multiple .app bundles found in ${t}: ${n.map(i=>ee.basename(i)).join(", ")}. Mach cannot safely choose which app to install.`);return""}function Cf(e){let t=Pf(e),n=Df(),i="",r="";try{i=Ot("lipo",["-info",t],{encoding:"utf-8"}).trim()}catch(o){throw new Error(`Could not inspect iOS simulator app architecture for ${ee.basename(e)}: ${o.message}`)}if(!new RegExp(`\\b${n}\\b`).test(i))throw new Error(`This iOS simulator artifact cannot be installed because ${ee.basename(e)} does not include the ${n} simulator architecture. lipo output: ${i}. Rebuild the app with the latest Mach CLI and make sure the profile is a simulator build.`);try{r=Ot("/usr/bin/xcrun",["vtool","-show-build",t],{encoding:"utf-8"}).trim()}catch(o){throw new Error(`Could not inspect iOS simulator app platform for ${ee.basename(e)}: ${o.message}`)}if(!/\bplatform\s+IOSSIMULATOR\b/i.test(r))throw new Error(`This iOS simulator artifact cannot be installed because ${ee.basename(e)} was built for the wrong Apple platform. A simulator artifact must contain platform IOSSIMULATOR. vtool output: ${r}. Rebuild the app with the latest Mach CLI.`)}async function kf(e,t,n){let i=n||(t.toLowerCase().includes(".apk")?"android":"ios"),r=t.toLowerCase().includes(".ipa"),o=le.mkdtempSync(ee.join(Ze.tmpdir(),`${It}-install-`)),s=ee.join(o,i==="android"?"install.apk":r?"install.ipa":"install.zip");try{if(await vf(t,s),i==="android"){Ot(Oa(),["-s",e,"install","-r",s],{stdio:"pipe"});return}if(process.platform!=="darwin")throw new Error("iOS local install requires macOS.");fi(`unzip -o ${JSON.stringify(s)} -d ${JSON.stringify(o)}`,{stdio:"pipe"});let l=ee.join(o,"Payload"),a=le.existsSync(l),d=r||a,u="";if(d?u=wa(l,"Payload"):u=wa(o,"the simulator artifact"),!u)throw new Error(`No .app bundle found inside the ${r?"IPA":"archive"}.`);let c=d?null:await wf(e);if(c){try{Cf(u),Ot("/usr/bin/xcrun",["simctl","install",c.id,u],{stdio:"pipe"})}catch(p){throw new Error(Ia(p,"iOS Simulator install failed."))}return}if(!d)throw new Error("Selected iOS Simulator was not found. Refresh Install Hub devices or boot one simulator and try again.");try{fi(`/usr/bin/xcrun devicectl device install app --device ${JSON.stringify(e)} ${JSON.stringify(u)}`,{stdio:"pipe"})}catch(p){throw new Error(Ia(p,"iOS device install failed."))}}finally{le.rmSync(o,{recursive:!0,force:!0})}}function Tf(e,t){if(!e)throw new Error("Device id is required.");if(t==="ios"){if(process.platform!=="darwin")throw new Error("iOS Simulator launch requires macOS.");return fi(`/usr/bin/xcrun simctl boot ${JSON.stringify(e)}`,{stdio:"pipe"}),Sa("open",["-a","Simulator"],{detached:!0,stdio:"ignore"}).unref(),"Simulator booting..."}if(t==="android")return Sa(Ca(),["-avd",e],{detached:!0,stdio:"ignore",windowsHide:!0}).unref(),"Emulator booting in background...";throw new Error("Invalid platform.")}async function Nf(){process.platform!=="darwin"&&ne.warn("Running on non-macOS \u2014 iOS discovery unavailable, Android only.");let e=hi.createServer((i,r)=>{if(r.setHeader("Access-Control-Allow-Origin","*"),r.setHeader("Access-Control-Allow-Methods","GET, POST, OPTIONS"),r.setHeader("Access-Control-Allow-Headers","Content-Type, Authorization"),i.method==="OPTIONS"){r.writeHead(204),r.end();return}let o=new URL(i.url||"/",`http://localhost:${It}`);if(i.method==="GET"&&o.pathname==="/local/devices"){$f().then(s=>{r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",targets:s}))}).catch(s=>{r.writeHead(500,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:s.message}))});return}if(i.method==="GET"&&o.pathname==="/health"){r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",service:"mach-agent",port:It,platform:process.platform}));return}if(i.method==="POST"&&o.pathname==="/install-local"){t(i,r);return}if(i.method==="POST"&&o.pathname==="/local/boot"){n(i,r);return}r.writeHead(404),r.end()}),t=async(i,r)=>{try{let{deviceId:o,artifactUrl:s,platform:l}=await Ea(i);if(!o||!s){r.writeHead(400,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:"deviceId and artifactUrl are required"}));return}await kf(o,s,l),r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",message:`Installed on ${o}`}))}catch(o){r.writeHead(500,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:o.message||"Local install failed"}))}},n=async(i,r)=>{try{let{id:o,platform:s}=await Ea(i),l=Tf(o,s);r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",message:l}))}catch(o){r.writeHead(500,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:o.message||"Local device launch failed"}))}};e.listen(It,"127.0.0.1",()=>{ne.success(he.green(`Local device agent running on http://localhost:${It}`)),ne.info(he.dim("Keep this running while using the Install Hub on the dashboard.")),ne.info(he.dim("Press Ctrl+C to stop."))}),e.on("error",i=>{i.code==="EADDRINUSE"?ne.error(`Port ${It} is already in use \u2014 agent may already be running.`):ne.error(`Agent error: ${i.message}`),process.exit(1)}),await new Promise(()=>{})}async function Ma(e="start"){let t=String(e||"start").toLowerCase();if(t==="start"||t==="run"){await Nf();return}if(t==="install"){await ba();return}if(t==="status"){await Af();return}if(t==="stop"){await Aa();return}if(t==="uninstall"){await bf();return}if(t==="restart"){await Aa(),await ba();return}ne.error(`Unknown agent action: ${e}`),ne.info(he.dim(`Use: ${m.nameLower} agent start | install | status | restart | stop | uninstall`)),process.exit(1)}import{createRequire as nh}from"module";import{text as Lf,password as Mf,spinner as Uf,isCancel as Ba}from"@clack/prompts";import Gr from"chalk";import Pn from"fs";import Ua from"path";import xf from"os";var Br=Ua.join(xf.homedir(),m.configDir),jr=Ua.join(Br,"config.json");function Hr(){if(!Pn.existsSync(jr))return{};try{return JSON.parse(Pn.readFileSync(jr,"utf-8"))}catch{return{}}}function Fa(e){Pn.existsSync(Br)||Pn.mkdirSync(Br,{recursive:!0});let n={...Hr(),...e};Pn.writeFileSync(jr,JSON.stringify(n,null,2))}async function ja(){let e=Hr(),t=await Lf({message:"Enter your email:",placeholder:"user@example.com",initialValue:e.lastLoginEmail,validate(r){if(r.length===0)return"Email is required!"}});if(Ba(t))return;let n=await Mf({message:"Enter your password:",validate(r){if(r.length===0)return"Password is required!"}});if(Ba(n))return;let i=Uf();i.start("Authenticating...");try{let o=await(await fetch(`${ft}/login`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({username:t,password:n})})).json();o.status==="success"&&o.user.token?(Eo({id:o.user.id,email:t,token:o.user.token,refreshToken:o.user.refreshToken}),Fa({lastLoginEmail:t}),i.stop(Gr.green("Login successful!"))):i.stop(Gr.red("Login failed: "+(o.message||"Unknown error")))}catch(r){i.stop(Gr.red("Network error: "+r.message))}}import{log as yi,outro as Ff}from"@clack/prompts";import Dn from"chalk";async function Ha(){let e=Io(),t=`${m.envPrefix}TOKEN`;e?yi.success(Dn.green(`Logged out. Removed saved credentials from ~/${m.configDir}/credentials.json.`)):yi.warn(Dn.yellow(`No saved ${m.name} credentials found.`)),process.env[t]&&(yi.warn(Dn.yellow(`${t} is still set in this shell. Commands will continue to authenticate with that token until you unset it.`)),yi.info(Dn.dim(`Run: unset ${t}`))),Ff(Dn.blue("---"))}import{outro as Bf,select as jf,spinner as Hf,isCancel as Gf}from"@clack/prompts";import Si from"chalk";import Vr from"fs";import Vf from"path";var Ga=e=>e==="1234567890"||e==="ABC123DEFG"||e==="XXXXXXXXXX"?"":typeof e=="string"?e:"",Kf=()=>process.versions.node.split(".")[0]||"24";async function Va(){if(!Ne()){console.log(Si.red(`You are not logged in. Run \`${m.nameLower} login\` first.`));return}let t=Hf();t.start("Fetching projects...");try{let{data:n}=await N.get("/projects");if(t.stop("Projects loaded."),n.status!=="success"||!n.projects||n.projects.length===0){console.log(Si.yellow(`No projects found. Run \`${m.nameLower} init\` to create one.`));return}let i=n.projects.map(g=>({value:g.projectId,label:`${g.name} (${g.slug})`})),r=await jf({message:"Select a project to link:",options:i});if(Gf(r))return;let o=Vf.join(process.cwd(),m.configFileName),s={};if(Vr.existsSync(o))try{s=JSON.parse(Vr.readFileSync(o,"utf-8"))}catch{}let l=n.projects.find(g=>g.projectId===r),a=s.android?.package||At("android"),d=s.ios?.bundleIdentifier||At("ios"),u=s.android||{},c=s.submit?.production?.android||{},p=s.submit?.production?.ios||{},f={projectId:r,framework:at(s.framework)||Yt,name:l?.name,slug:l?.slug,nodeVersion:s.nodeVersion||Kf(),scheme:l?.slug?.toLowerCase()||"app",android:{...u,package:a||"",versionCode:u.versionCode||"auto"},ios:{bundleIdentifier:d||"",buildNumber:s.ios?.buildNumber||"auto"},build:{development:{environment:"development",distribution:"development"},staging:{environment:"staging",distribution:"internal"},production:{environment:"production",distribution:"store"}},submit:{production:{android:{...c,track:c.track||"internal",releaseStatus:c.releaseStatus||"completed"},ios:{ascAppId:Ga(p.ascAppId),appleTeamId:Ga(p.appleTeamId)}}}};Vr.writeFileSync(o,JSON.stringify(f,null,2)),Bf(Si.green(`Linked to project ${f.name} (${f.slug})`))}catch(n){t.stop(Si.red("Error fetching projects: "+n.message))}}import{outro as zf,text as bi,select as Wf,spinner as Jf,isCancel as On}from"@clack/prompts";import Cn from"chalk";import Yf from"fs";import qf from"path";import{randomUUID as Xf}from"crypto";var Zf=()=>process.versions.node.split(".")[0]||"24";async function Ka(){if(!Ne()){console.log(Cn.red(`You are not logged in. Run \`${m.nameLower} login\` first.`));return}let t=await bi({message:"Project Name:",placeholder:"My Awesome App",validate(l){if(l.length===0)return"Name is required!"}});if(On(t))return;let n=await bi({message:"Project Slug (URL friendly):",placeholder:"my-awesome-app",validate(l){if(l.length===0)return"Slug is required!";if(!/^[a-z0-9-]+$/.test(l))return"Slug must be lowercase alphanumeric with dashes."}});if(On(n))return;let i=await Wf({message:"Platform:",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"},{value:"web",label:"Web"},{value:"all",label:"All Platforms"}]});if(On(i))return;let r="";if(i==="android"||i==="all"){let l=At("android");if(r=await bi({message:"Android Package Name:",initialValue:l||"",placeholder:"com.example.app",validate(a){if(a.length===0)return"Package name is required for Android!"}}),On(r))return}let o="";if(i==="ios"||i==="all"){let l=At("ios");if(o=await bi({message:"iOS Bundle Identifier:",initialValue:l||"",placeholder:"com.example.app",validate(a){if(a.length===0)return"Bundle ID is required for iOS!"}}),On(o))return}let s=Jf();s.start("Creating project...");try{let l=Xf(),d={projectId:l,name:t,slug:n,storageType:"managed",platforms:i==="all"?["android","ios","web"]:[i]},{data:u}=await N.post("/projects",d);if(u.status==="success"){s.stop(Cn.green("Project created successfully!"));let c=qf.join(process.cwd(),m.configFileName);Yf.writeFileSync(c,JSON.stringify({projectId:l,framework:Yt,name:t,slug:n,nodeVersion:Zf(),...r?{android:{package:r,versionCode:"auto"}}:{},...o?{ios:{bundleIdentifier:o,buildNumber:"auto"}}:{},build:{development:{environment:"development",distribution:"development"},staging:{environment:"staging",distribution:"internal"},production:{environment:"production",distribution:"store"}},submit:{production:{android:{track:"internal",releaseStatus:"completed"},ios:{ascAppId:"",appleTeamId:""}}}},null,2)),zf(Cn.green(`Initialized project ${t} and linked locally!`))}else s.stop(Cn.red("creation failed: "+u.message))}catch(l){s.stop(Cn.red("Network error: "+l.message))}}import{spinner as Kr,log as Te}from"@clack/prompts";import kn from"chalk";import Ai from"fs";import za from"path";function zr(e,t,n,i){let r=e?.response?.status,o=e?.response?.data?.message||e?.response?.data?.error,s=i?` ${i}`:"";return r===401?`Not logged in or token expired while trying to ${n}${s}. Run \`${m.nameLower} login\` and try again.`:r===403?[`Permission denied while trying to ${n}${s}.`,o?`API says: ${o}.`:void 0,`Current Mach account/token does not have access to project ${t}.`,`Run \`${m.nameLower} login\` with the correct account, or ask a project owner to grant access.`].filter(Boolean).join(" "):r===404?[`Project or environment endpoint was not found while trying to ${n}${s}.`,`Project ID: ${t}.`,o?`API says: ${o}.`:void 0].filter(Boolean).join(" "):r?`Failed to ${n}${s}: ${o||`API returned HTTP ${r}`}`:`Network error while trying to ${n}${s}: ${e?.message||"Unknown error"}`}function Qf(e){let t=String(e??"");return t===""?'""':/^[A-Za-z0-9_./:@%+-]+$/.test(t)?t:JSON.stringify(t)}function em(e,t){return`${[`# Generated by ${m.nameLower} env pull --environment ${t}`,"# Do not commit this file.","",...Object.keys(e).sort((i,r)=>i.localeCompare(r)).map(i=>`${i}=${Qf(e[i])}`)].join(`
1534
1534
  `)}
1535
- `}async function ka(e,t,n={}){let i=Ce();if(!i){Oe.error(`You are not logged in. Run \`${m.nameLower} login\` first.`);return}let r=Ca.join(process.cwd(),m.configFileName);if(!li.existsSync(r)){Oe.error(`No ${m.configFileName} found. Run \`${m.nameLower} init\` or \`${m.nameLower} link\` first.`);return}let o;try{o=JSON.parse(li.readFileSync(r,"utf-8"))}catch{Oe.error(`Failed to parse ${m.configFileName}`);return}let{projectId:s}=o;if(!s){Oe.error(`${m.configFileName} is missing projectId.`);return}e==="set"?await Of(s,t,i):e==="list"?await Cf(s,i):e==="pull"||e==="download"||e==="export"?await kf(s,n):Oe.error(`Unknown env action: ${e}. Use 'set', 'list', or 'pull'.`)}async function Of(e,t,n){if(t.length===0){Oe.error(`Usage: ${m.nameLower} env set KEY=VALUE [KEY2=VALUE2 ...]`);return}let i=Nr();i.start("Setting environment variables...");let r=0,o=0;for(let s of t){let[l,...a]=s.split("="),c=a.join("=");if(!l||c===void 0){Oe.warn(`Invalid format for argument: ${s}. Expected KEY=VALUE.`),o++;continue}try{let u={key:l.trim(),value:c,type:"env",environment:"global",visibility:"secret"},{data:d}=await T.post(`/projects/${e}/secrets`,u);d.status==="success"?r++:(Oe.error(`Failed to set ${l}: ${d.message}`),o++)}catch(u){Oe.error(Tr(u,e,"set",l)),o++}}i.stop(`Set ${r} variable(s). ${o>0?`${o} failed.`:""}`)}async function Cf(e,t){let n=Nr();n.start("Fetching environment variables...");try{let{data:i}=await T.get(`/projects/${e}/secrets`);if(i.status==="success"){n.stop("Fetched variables.");let r=i.secrets||[];r.length===0?Oe.info("No environment variables found for this project."):(Oe.info(In.bold("Environment Variables (Global & Scoped):")),r.forEach(o=>{let s=o.visibility==="plain"?o.value:"********";console.log(` ${In.cyan(o.key)} = ${s} ${In.gray(`[${o.environment}]`)}`)}))}else n.stop(In.red(`Failed to fetch variables: ${i.message}`))}catch(i){n.stop("Failed to fetch variables."),Oe.error(Tr(i,e,"list"))}}async function kf(e,t){let n=(t.environment||"development").trim(),i=t.out||".env.local",r=Ca.resolve(process.cwd(),i);if(li.existsSync(r)&&!t.overwrite){Oe.error(`${i} already exists. Re-run with \`--overwrite\` to replace it.`);return}let o=Nr();o.start(`Downloading ${n} environment variables...`);try{let{data:s}=await T.get(`/projects/${e}/secrets/export?env=${encodeURIComponent(n)}`);if(s.status!=="success"){o.stop(In.red(`Failed to download variables: ${s.message||"Unknown API error"}`));return}let l=s.secrets||{},a=Pf(l,n);li.writeFileSync(r,a,{encoding:"utf-8",mode:384}),o.stop(`Wrote ${Object.keys(l).length} variable(s) to ${i}.`)}catch(s){o.stop("Failed to download variables."),Oe.error(Tr(s,e,"pull"))}}import{spinner as Nf,log as Lt,outro as Tf}from"@clack/prompts";import xr from"chalk";import Na from"fs";import xf from"path";import{execSync as Lf}from"child_process";import Mf from"adm-zip";import Uf from"axios";import{randomUUID as Ff}from"crypto";async function Ta(e){Lt.info(xr.magenta("\u{1F680} Starting Over-The-Air (OTA) Update via Mach..."));let t=_e();(!t||!t.projectId)&&(Lt.error(`No ${m.configFileName} found or missing projectId. Run \`mach link\` first.`),process.exit(1));let n=t.projectId,i=e.branch||"production",r="1.0.0";try{r=JSON.parse(Na.readFileSync("./package.json","utf-8")).version||"1.0.0"}catch{Lt.warn("Could not read package.json version. Defaulting to 1.0.0")}let o=Nf();o.start(`Compiling JavaScript bundles for OTA (Channel: ${i}, Runtime: ${r})...`);try{Lf("npx expo export --platform all",{stdio:"ignore"})}catch(c){o.stop("Compilation failed."),Lt.error(`Failed to export JS bundles using Expo: ${c.message}`),process.exit(1)}o.message("Zipping artifact payload...");let s=xf.join(process.cwd(),"dist");Na.existsSync(s)||(o.stop("Missing dist folder."),Lt.error("The `dist` directory was not created. Export failed."),process.exit(1));let l=new Mf;l.addLocalFolder(s,"dist");let a=l.toBuffer();o.message("Uploading payload to Mach Cloud...");try{let c=Ff(),u=await T.post("/builds/source-upload-url",{projectId:n,buildId:c});if(u.data.status!=="success")throw new Error("Could not secure upload bucket URL");let{uploadUrl:d,key:p}=u.data;await Uf.put(d,a,{headers:{"Content-Type":"application/zip"},maxBodyLength:1/0,maxContentLength:1/0}),o.message(`Promoting Update to ${i}...`),await T.post("/updates/publish",{projectId:n,channelName:i,runtimeVersion:r,platform:"android",updateId:`${c}-android`,manifestKey:p}),await T.post("/updates/publish",{projectId:n,channelName:i,runtimeVersion:r,platform:"ios",updateId:`${c}-ios`,manifestKey:p}),o.stop("Update Live!"),Tf(xr.green(`\u2713 OTA Update natively shipped to the '${i}' channel.`)),Lt.info(xr.dim(`Any app running runtime '${r}' will download this bundle smoothly.`))}catch(c){o.stop("Update failed during Cloud Sync."),Lt.error(`Upload error: ${c.message}`),process.exit(1)}}import{intro as Bf,outro as xa,log as Xt}from"@clack/prompts";import rt from"chalk";async function La(){Bf(rt.blue(`${m.name} CLI - User Profile`));let e=Ce();if(!e){Xt.warn(rt.yellow("You are not logged in.")),Xt.info(`Run \`${m.nameLower} login\` to authenticate.`),xa();return}Xt.info(`${rt.bold("Logged in as:")} ${rt.green(e.email)}`);try{await T.get("/projects");let n=Ce().token.split(".");if(n.length===3){let i=JSON.parse(Buffer.from(n[1],"base64").toString());if(i.exp){let r=new Date(i.exp*1e3),o=new Date,s=r.getTime()-o.getTime();if(s>0){let l=Math.round(s/6e4),a=(l/60).toFixed(1);Xt.info(`${rt.bold("Token status:")} Valid (Expires in ~${a}h / ${l}m)`)}else Xt.warn(`${rt.bold("Token status:")} ${rt.red("Expired")} (Auto-refresh failed)`)}}}catch{Xt.warn(`${rt.bold("Token status:")} ${rt.red("Unreachable")} (Session might be truly expired)${Bt}`)}xa(rt.blue("---"))}import{spawn as Gf}from"child_process";import{log as wt}from"@clack/prompts";import Be from"chalk";import Kf from"fs";import Hf from"net";async function jf(e){return new Promise(t=>{let n=Hf.createServer();n.once("error",i=>{i.code==="EADDRINUSE"?t(!0):t(!1)}),n.once("listening",()=>{n.close(),t(!1)}),n.listen(e,"0.0.0.0")})}async function Ma(e,t=20){let n=e;for(;n<e+t;){if(!await jf(n))return n;n++}throw new Error(`Could not find an available port after ${t} attempts starting from ${e}.`)}var Ua=async e=>{wt.info(Be.blue(`Starting ${m.name} Dev Orchestrator...`));let t=_e(),n=e.buildProfile||"development",i=t?ke(t,n):null,r={...process.env};if(t?.projectId)try{wt.info(Be.dim(`Fetching managed secrets for profile: ${n}...`));let d=await T.get(`/projects/${t.projectId}/secrets/export?env=${n}`);d.data?.status==="success"&&d.data.secrets&&(Object.assign(r,d.data.secrets),wt.info(Be.magenta(`\u2713 Injected secrets from ${m.name} Dashboard.`)))}catch{wt.warn("Could not fetch managed secrets. Running with local env only.")}t&&Object.assign(r,jt(t,m.envPrefix)),i&&(Object.assign(r,jt(i,`${m.envPrefix}PROFILE_`)),i.env&&Object.assign(r,i.env));let o=!1;try{let d=JSON.parse(Kf.readFileSync("package.json","utf-8"));o=!!(d.dependencies?.expo||d.devDependencies?.expo)}catch{wt.warn("Could not parse package.json. Defaulting to Bare React Native mode.")}let s=Number(e.port||i?.port||8081),l=await Ma(s);l!==s&&wt.info(Be.yellow(`Port ${s} is busy. ${m.name} is using ${l} instead.`));let a=process.platform==="win32"?"npx.cmd":"npx",c=[];if(o?(c=["expo","start","--port",String(l)],e.clear&&c.push("--clear"),e.tunnel&&c.push("--tunnel"),e.lan&&c.push("--lan"),e.localhost&&c.push("--localhost"),e.ios&&c.push("--ios"),e.android&&c.push("--android"),e.web&&c.push("--web")):(c=["react-native","start","--port",String(l)],e.clear&&c.push("--clear")),o){let d=[`${Be.cyan("i")} open iOS simulator`,`${Be.cyan("a")} open Android emulator/device`,`${Be.cyan("w")} open web`,`${Be.cyan("r")} reload app`];wt.info([Be.bold("Launch controls"),...d.map(p=>` ${p}`),"",Be.dim("Direct launch: mach start --ios | --android | --web"),Be.dim(`Metro URL: http://localhost:${l}`)].join(`
1536
- `))}else wt.info(Be.dim(`Metro URL: http://localhost:${l}`));let u=Gf(a,c,{stdio:"inherit",env:r});return new Promise((d,p)=>{u.on("exit",f=>{f===0?d():p(new Error(`Dev server exited with code ${f}`))}),u.on("error",f=>{p(f)})})};import{log as Le}from"@clack/prompts";import Xe from"chalk";var Fa=async e=>{let t=_e();t||(Le.error(Xe.red(`No ${m.configFileName} found in the current directory.`)),process.exit(1));let n=e.profile||"development",i=ke(t,n);if(e.json){console.log(JSON.stringify({project:t,resolved:i},null,2));return}Le.info(Xe.bgBlue.white(` Resolved ${m.name} Config [${n}] `)),Le.info(Xe.dim("----------------------------------------")),Le.info(`${Xe.blue("Project ID:")} ${t.projectId}`),Le.info(`${Xe.blue("Name:")} ${t.name}`),Le.info(`${Xe.blue("Scheme:")} ${t.scheme}`),i?(Le.info(Xe.dim(`
1537
- Profile Settings:`)),Le.info(`${Xe.cyan("Distribution:")} ${i.distribution||"none"}`),Le.info(`${Xe.cyan("Development Client:")} ${i.developmentClient||"false"}`),i.env&&Object.keys(i.env).length>0&&(Le.info(Xe.dim(`
1538
- Environment Variables:`)),Object.entries(i.env).forEach(([r,o])=>{Le.info(` ${r}=${o}`)}))):Le.warn(`Profile '${n}' not found.`),Le.info(Xe.dim("----------------------------------------"))};import{cancel as um,confirm as il,isCancel as vn,log as Si,note as pm,outro as bi,select as fm,text as rl}from"@clack/prompts";import Qe from"chalk";import mm from"fs";import tl from"path";import Mt from"fs";import Zt from"path";var Qt="./plugins/withMachDeepLinks",Lr="mach.deep-links.json",Ha=["/*"],Mr=e=>{if(typeof e!="string")return;let t=e.trim();return t.length>0?t:void 0},ci=e=>{let t=new Set,n=[];for(let i of e){let r=Mr(i);!r||t.has(r)||(t.add(r),n.push(r))}return n},Ze=(...e)=>{for(let t of e){let n=Mr(t);if(n)return n}},Ba=(e,t)=>e.length!==t.length?!1:e.every((n,i)=>n===t[i]);function ja(e){if(typeof e!="string")return;let t=e.trim().toLowerCase();if(t==="ios"||t==="android"||t==="all")return t}function wn(e){let t=e.includes("://")?e:`https://${e}`,n=new URL(t),i=n.pathname==="/"?"":n.pathname.replace(/\/+$/,"");return`${n.protocol}//${n.host}${i}`}function di(e){return new URL(wn(e)).hostname}function ui(e){return e.trim().toLowerCase().replace(/[^a-z0-9+.-]/g,"-").replace(/^-+|-+$/g,"")||"app"}function Ga(e=process.cwd()){let t=Zt.join(e,"package.json"),n=["app.json","app.config.json","app.config.js","app.config.ts"].some(r=>Mt.existsSync(Zt.join(e,r))),i=!1;if(Mt.existsSync(t))try{let r=JSON.parse(Mt.readFileSync(t,"utf-8"));i=!!(r.dependencies?.expo||r.devDependencies?.expo)}catch{i=!1}return n&&i?"expo":Mt.existsSync(Zt.join(e,"ios"))||Mt.existsSync(Zt.join(e,"android"))?"react-native":Ht}function Ka(e,t,n){if(t)return t;let i=!!(e.ios?.bundleIdentifier||n?.ios?.bundleIdentifier||e.deepLinks?.ios?.bundleIdentifier),r=!!(e.android?.package||n?.android?.package||n?.android?.applicationId||e.deepLinks?.android?.package);return i&&!r?"ios":r&&!i?"android":"all"}function pi(e=process.cwd(),t){let n=t?.deepLinks?.web?.outputDir;return n||(Mt.existsSync(Zt.join(e,"public"))?"public":"deep-links")}function Va(e,t){let n=e.deepLinks,i=wn(t.baseUrl||n?.baseUrl||(t.domain?`https://${t.domain}`:"")),r=Mr(t.domain)||(t.baseUrl?di(i):n?.domain)||di(i),o=t.profile||n?.profile||"production",s=ke(e,o)||{},l=s.ios||{},a=s.android||{},c=e.submit?.[o]?.ios||{},u=e.submit?.[o]?.android||{},d=ui(t.scheme||n?.scheme||l.scheme||e.scheme||e.slug||e.name||"app"),p=Rt(e,o),f=ci([...t.androidFingerprint||[],...n?.android?.sha256CertFingerprints||[],...a.sha256CertFingerprints||[],...e.android?.sha256CertFingerprints||[]]);return{baseUrl:i,domain:r,scheme:d,profile:o!=="production"?o:void 0,paths:n?.paths?.length?n.paths:["/*"],ios:{appStoreId:Ze(t.appStoreId,n?.ios?.appStoreId,l.ascAppId,c.ascAppId,e.ios?.ascAppId),appleTeamId:Ze(t.appleTeamId,n?.ios?.appleTeamId,l.appleTeamId,l.developerTeamId,c.appleTeamId,c.developerTeamId,e.ios?.appleTeamId,e.ios?.developerTeamId,p.teamId),bundleIdentifier:Ze(t.iosBundleId,n?.ios?.bundleIdentifier,l.bundleIdentifier,l.bundleId,e.ios?.bundleIdentifier,e.ios?.bundleId,e.expo?.ios?.bundleIdentifier),webCredentials:!!n?.ios?.webCredentials,activityContinuation:!!n?.ios?.activityContinuation},android:{package:Ze(t.androidPackage,n?.android?.package,a.package,a.applicationId,e.android?.package,e.expo?.android?.package,u.packageName,u.package),sha256CertFingerprints:f},web:{smartAppBanner:n?.web?.smartAppBanner??!0,outputDir:t.output||n?.web?.outputDir||pi(process.cwd(),e)}}}function fi(e,t={}){let n=e.deepLinks,i=t.profile||n?.profile||"production",r=t.expoHints||null,o=Ze(n?.baseUrl,r?.domain?`https://${r.domain}`:void 0);if(!o)return null;let s=wn(o),l=ke(e,i)||{},a=l.ios||{},c=l.android||{},u=e.submit?.[i]?.ios||{},d=e.submit?.[i]?.android||{},p=Rt(e,i),f=Ze(n?.domain,r?.domain)||di(s),g=ui(Ze(n?.scheme,a.scheme,e.scheme,r?.scheme,e.slug,e.name,"app")||"app"),y=n?.paths?.length?n.paths:[...Ha];return{baseUrl:s,domain:f,scheme:g,profile:i!=="production"?i:void 0,paths:y,ios:{appStoreId:Ze(n?.ios?.appStoreId,a.ascAppId,u.ascAppId,e.ios?.ascAppId),appleTeamId:Ze(n?.ios?.appleTeamId,a.appleTeamId,a.developerTeamId,u.appleTeamId,u.developerTeamId,e.ios?.appleTeamId,e.ios?.developerTeamId,p.teamId),bundleIdentifier:Ze(n?.ios?.bundleIdentifier,a.bundleIdentifier,a.bundleId,e.ios?.bundleIdentifier,e.ios?.bundleId,e.expo?.ios?.bundleIdentifier,r?.iosBundleIdentifier),webCredentials:!!n?.ios?.webCredentials,activityContinuation:!!n?.ios?.activityContinuation},android:{package:Ze(n?.android?.package,c.package,c.applicationId,e.android?.package,e.expo?.android?.package,d.packageName,d.package,r?.androidPackage),sha256CertFingerprints:ci([...n?.android?.sha256CertFingerprints||[],...c.sha256CertFingerprints||[],...e.android?.sha256CertFingerprints||[]])},web:{smartAppBanner:n?.web?.smartAppBanner??!0,outputDir:n?.web?.outputDir||pi(t.cwd||process.cwd(),e)}}}function mi(e,t,n="production",i=process.cwd()){return t?.domain?fi({...e,deepLinks:{baseUrl:`https://${t.domain}`,domain:t.domain,scheme:t.scheme}},{profile:n,cwd:i,expoHints:t}):null}function Vf(e,t,n=t.profile||"production"){let i=fi({...e,deepLinks:{baseUrl:t.baseUrl}},{profile:n}),r={baseUrl:t.baseUrl};n!=="production"&&(r.profile=n),t.domain&&t.domain!==di(t.baseUrl)&&(r.domain=t.domain),t.scheme&&t.scheme!==i?.scheme&&(r.scheme=t.scheme),t.paths?.length&&!Ba(t.paths,Ha)&&(r.paths=t.paths);let o={};t.ios?.bundleIdentifier&&t.ios.bundleIdentifier!==i?.ios?.bundleIdentifier&&(o.bundleIdentifier=t.ios.bundleIdentifier),t.ios?.appleTeamId&&t.ios.appleTeamId!==i?.ios?.appleTeamId&&(o.appleTeamId=t.ios.appleTeamId),t.ios?.appStoreId&&t.ios.appStoreId!==i?.ios?.appStoreId&&(o.appStoreId=t.ios.appStoreId),t.ios?.webCredentials&&(o.webCredentials=!0),t.ios?.activityContinuation&&(o.activityContinuation=!0),Object.keys(o).length>0&&(r.ios=o);let s={};t.android?.package&&t.android.package!==i?.android?.package&&(s.package=t.android.package);let l=t.android?.sha256CertFingerprints||[],a=i?.android?.sha256CertFingerprints||[];l.length>0&&!Ba(l,a)&&(s.sha256CertFingerprints=l),Object.keys(s).length>0&&(r.android=s);let c={outputDir:t.web?.outputDir||"deep-links"};return t.web?.smartAppBanner===!1&&(c.smartAppBanner=!1),r.web=c,r}function za(e,t,n,i=n.profile||"production"){let r={...e,framework:t,scheme:e.scheme||n.scheme};return{...r,deepLinks:Vf(r,n,i)}}function Wa(e,t=process.cwd()){let n=Zt.join(t,"mach.config.json");return Mt.writeFileSync(n,`${JSON.stringify(e,null,2)}
1539
- `),n}import Ee from"fs";import Re from"path";import{spawnSync as Ja}from"child_process";var _n="@radhya/mach/expo-plugin",zf=`const fs = require('fs')
1535
+ `}async function Wa(e,t,n={}){let i=Ne();if(!i){Te.error(`You are not logged in. Run \`${m.nameLower} login\` first.`);return}let r=za.join(process.cwd(),m.configFileName);if(!Ai.existsSync(r)){Te.error(`No ${m.configFileName} found. Run \`${m.nameLower} init\` or \`${m.nameLower} link\` first.`);return}let o;try{o=JSON.parse(Ai.readFileSync(r,"utf-8"))}catch{Te.error(`Failed to parse ${m.configFileName}`);return}let{projectId:s}=o;if(!s){Te.error(`${m.configFileName} is missing projectId.`);return}e==="set"?await tm(s,t,i):e==="list"?await nm(s,i):e==="pull"||e==="download"||e==="export"?await im(s,n):Te.error(`Unknown env action: ${e}. Use 'set', 'list', or 'pull'.`)}async function tm(e,t,n){if(t.length===0){Te.error(`Usage: ${m.nameLower} env set KEY=VALUE [KEY2=VALUE2 ...]`);return}let i=Kr();i.start("Setting environment variables...");let r=0,o=0;for(let s of t){let[l,...a]=s.split("="),d=a.join("=");if(!l||d===void 0){Te.warn(`Invalid format for argument: ${s}. Expected KEY=VALUE.`),o++;continue}try{let u={key:l.trim(),value:d,type:"env",environment:"global",visibility:"secret"},{data:c}=await N.post(`/projects/${e}/secrets`,u);c.status==="success"?r++:(Te.error(`Failed to set ${l}: ${c.message}`),o++)}catch(u){Te.error(zr(u,e,"set",l)),o++}}i.stop(`Set ${r} variable(s). ${o>0?`${o} failed.`:""}`)}async function nm(e,t){let n=Kr();n.start("Fetching environment variables...");try{let{data:i}=await N.get(`/projects/${e}/secrets`);if(i.status==="success"){n.stop("Fetched variables.");let r=i.secrets||[];r.length===0?Te.info("No environment variables found for this project."):(Te.info(kn.bold("Environment Variables (Global & Scoped):")),r.forEach(o=>{let s=o.visibility==="plain"?o.value:"********";console.log(` ${kn.cyan(o.key)} = ${s} ${kn.gray(`[${o.environment}]`)}`)}))}else n.stop(kn.red(`Failed to fetch variables: ${i.message}`))}catch(i){n.stop("Failed to fetch variables."),Te.error(zr(i,e,"list"))}}async function im(e,t){let n=(t.environment||"development").trim(),i=t.out||".env.local",r=za.resolve(process.cwd(),i);if(Ai.existsSync(r)&&!t.overwrite){Te.error(`${i} already exists. Re-run with \`--overwrite\` to replace it.`);return}let o=Kr();o.start(`Downloading ${n} environment variables...`);try{let{data:s}=await N.get(`/projects/${e}/secrets/export?env=${encodeURIComponent(n)}`);if(s.status!=="success"){o.stop(kn.red(`Failed to download variables: ${s.message||"Unknown API error"}`));return}let l=s.secrets||{},a=em(l,n);Ai.writeFileSync(r,a,{encoding:"utf-8",mode:384}),o.stop(`Wrote ${Object.keys(l).length} variable(s) to ${i}.`)}catch(s){o.stop("Failed to download variables."),Te.error(zr(s,e,"pull"))}}import{log as Pm}from"@clack/prompts";import Dm from"chalk";import{cancel as rm,confirm as om,isCancel as Wr,log as ct,note as sm,outro as sn,select as am,spinner as lm,text as cm}from"@clack/prompts";import et from"chalk";import ue from"fs";import ye from"path";import{spawnSync as Za}from"child_process";import Qa from"crypto";import dm from"axios";var ke=`${m.npmScope}/mach/expo-plugin`,el=()=>process.stdin.isTTY&&process.stdout.isTTY,Jr=()=>{rm("Operation cancelled."),process.exit(0)},Ct=e=>{if(typeof e!="string")return;let t=e.trim();return t.length>0?t:void 0};function Tn(e){if(!ue.existsSync(e))return null;try{return JSON.parse(ue.readFileSync(e,"utf-8"))}catch{return null}}function tl(e,t){ue.writeFileSync(e,`${JSON.stringify(t,null,2)}
1536
+ `)}function Nn(){let e=ve();return e?.projectId||(ct.error(`No ${m.configFileName} found or missing projectId. Run \`${m.nameLower} link\` first.`),process.exit(1)),e}function um(e){tl(ye.join(process.cwd(),m.configFileName),e)}function Yr(e){let t=at(e.framework);if(t)return t;let n=Tn(ye.join(process.cwd(),"package.json"))||{},i={...n.dependencies||{},...n.devDependencies||{}};return i.expo?"expo":(i["react-native"],"react-native")}function qr(e,t){let n=String(e||"").trim().toLowerCase();return n==="expo"||n==="expo-updates"?"expo-updates":n==="react-native"||n==="mach-react-native"||n==="rn"?"mach-react-native":t==="expo"?"expo-updates":"mach-react-native"}function pm(e){let t=String(e||"all").trim().toLowerCase();if(t==="ios")return["ios"];if(t==="android")return["android"];if(t==="all"||t==="both")return["ios","android"];throw new Error("Platform must be ios, android, or all.")}function fm(e){return ue.existsSync(ye.join(e,"pnpm-lock.yaml"))?{command:"pnpm",args:["add","-D",`${m.npmScope}/mach@latest`],label:`pnpm add -D ${m.npmScope}/mach@latest`}:ue.existsSync(ye.join(e,"yarn.lock"))?{command:"yarn",args:["add","-D",`${m.npmScope}/mach@latest`],label:`yarn add -D ${m.npmScope}/mach@latest`}:ue.existsSync(ye.join(e,"bun.lockb"))||ue.existsSync(ye.join(e,"bun.lock"))?{command:"bun",args:["add","-d",`${m.npmScope}/mach@latest`],label:`bun add -d ${m.npmScope}/mach@latest`}:{command:"npm",args:["install","--save-dev",`${m.npmScope}/mach@latest`],label:`npm install --save-dev ${m.npmScope}/mach@latest`}}function Xr(e){let t=Tn(ye.join(e,"package.json"))||{};return!!(t.dependencies?.[`${m.npmScope}/mach`]||t.devDependencies?.[`${m.npmScope}/mach`])}function mm(e){let t=fm(e),n=Za(t.command,t.args,{cwd:e,stdio:"inherit",env:{...process.env}});return n.error?{ok:!1,label:t.label,error:n.error.message}:n.status!==0?{ok:!1,label:t.label,error:`${t.command} exited with code ${n.status}`}:{ok:Xr(e),label:t.label}}function Ja(e){if(typeof e=="string")return e;if(Array.isArray(e)&&typeof e[0]=="string")return e[0]}function gm(e){let t=["app.config.json","app.json"].find(s=>ue.existsSync(ye.join(e,s)));if(!t)return null;let n=ye.join(e,t),i=Tn(n);if(!i)return null;let r=i.expo&&typeof i.expo=="object"?i.expo:i,o=Array.isArray(r.plugins)?r.plugins:[];return o.some(s=>Ja(s)===ke)||(r.plugins=[...o.filter(s=>{let l=Ja(s);return l!=="./plugins/withMachDeepLinks"&&l!=="plugins/withMachDeepLinks"}),ke],tl(n,i)),t}function hm(e){let t=["app.config.ts","app.config.js"].find(f=>ue.existsSync(ye.join(e,f)));if(!t)return"missing";let n=ye.join(e,t),i=ue.readFileSync(n,"utf-8");if(i.includes(ke))return"already";let r=/(['"`])(?:\.\/)?plugins\/withMachDeepLinks\1/g;if(r.test(i))return ue.writeFileSync(n,i.replace(r,(f,g)=>`${g}${ke}${g}`)),"inserted";let o=/(^[ \t]*)plugins\s*:\s*\[([\s\S]*?)\]/m.exec(i);if(!o||o.index===void 0)return"manual";let s=i.includes(`\r
1537
+ `)?`\r
1538
+ `:`
1539
+ `,l=o[1]||"",a=o[2]||"",u=a.match(/\r?\n([ \t]+)\S/)?.[1]||`${l} `,c=a.trim().length===0?`${s}${u}'${ke}',${s}${l}`:a.includes(`
1540
+ `)||a.includes("\r")?`${s}${u}'${ke}',${a}`:`${s}${u}'${ke}',${s}${u}${a.trim()}${s}${l}`,p=`${o[0].slice(0,o[0].indexOf("[")+1)}${c}]`;return ue.writeFileSync(n,`${i.slice(0,o.index)}${p}${i.slice(o.index+o[0].length)}`),"inserted"}async function ym(e,t){let n=[];if(!Xr(e)){let r=!!(t.installPlugin||t.yes);if(!r&&!t.skipInstall&&el()){let o=await om({message:`Install ${m.npmScope}/mach locally so Expo can use ${ke}?`,initialValue:!0});Wr(o)&&Jr(),r=!!o}if(r&&!t.skipInstall){let o=mm(e);o.ok?n.push(`Installed ${m.npmScope}/mach with ${o.label}.`):n.push(`Could not install ${m.npmScope}/mach with ${o.label}: ${o.error||"unknown error"}.`)}else n.push(`Install ${m.npmScope}/mach in this app so Expo can resolve ${ke}.`)}let i=hm(e);if(i==="already"&&n.push(`Expo config already includes ${ke}.`),i==="inserted"&&n.push(`Expo config updated to include ${ke}.`),i==="manual"&&n.push(`Add "${ke}" to the plugins array in app.config.ts/app.config.js.`),i==="missing"){let r=gm(e);r?n.push(`${r} updated to include ${ke}.`):n.push(`Add "${ke}" to your Expo config plugins array.`)}return n}async function Ya(e,t,n,i,r){if(t)return t;if(r||!el()){if(i)throw new Error(`${e.replace(/:$/,"")} is required.`);return}let o=await cm({message:e,placeholder:n,validate(s){if(i&&s.trim().length===0)return"Required."}});return Wr(o)&&Jr(),Ct(o)}function Sm(e,t){let n=Ct(t.runtimeVersion)||Ct(e.ota?.runtimeVersion);if(n)return n;let i=Tn(ye.join(process.cwd(),"package.json"))||{};return Ct(i.version)||"1.0.0"}function bm(e){return Qa.createHash("sha256").update(ue.readFileSync(e)).digest("hex")}function Am(e){let t=ye.extname(e).toLowerCase();return t===".json"?"application/json":t===".js"||t===".bundle"||t===".hbc"?"application/javascript":t===".map"?"application/json":t===".png"?"image/png":t===".jpg"||t===".jpeg"?"image/jpeg":t===".webp"?"image/webp":t===".gif"?"image/gif":t===".svg"?"image/svg+xml":t===".ttf"?"font/ttf":t===".otf"?"font/otf":t===".woff"?"font/woff":t===".woff2"?"font/woff2":"application/octet-stream"}function nl(e){let t=[];if(!ue.existsSync(e))return t;for(let n of ue.readdirSync(e)){let i=ye.join(e,n),r=ue.statSync(i);r.isDirectory()?t.push(...nl(i)):r.isFile()&&t.push(i)}return t}function Em(e,t){let n=e.filter(i=>{let r=i.toLowerCase();return r.endsWith(".map")?!1:r.endsWith(".js")||r.endsWith(".bundle")||r.endsWith(".hbc")});return n.find(i=>i.toLowerCase().includes(t))||n.sort((i,r)=>ue.statSync(r).size-ue.statSync(i).size)[0]}async function qa(e){let t=await N.post("/ota/upload-url",{projectId:e.projectId,updateId:e.updateId,platform:e.platform,fileName:e.fileName,contentType:e.contentType});if(t.data.status!=="success")throw new Error(t.data.message||`Could not create upload URL for ${e.fileName}`);return await dm.put(t.data.uploadUrl,ue.createReadStream(e.filePath),{headers:{"Content-Type":e.contentType},maxBodyLength:1/0,maxContentLength:1/0}),{key:t.data.key,url:t.data.publicUrl,contentType:e.contentType,hash:bm(e.filePath),size:ue.statSync(e.filePath).size}}function il(e,t,n){let i=Za(e,t,{cwd:n,stdio:"inherit",env:{...process.env,CI:process.env.CI||"1",EXPO_NO_TELEMETRY:"1"}});if(i.error)throw new Error(i.error.message);if(i.status!==0)throw new Error(`${e} ${t.join(" ")} exited with code ${i.status}`)}function Im(e,t){il("npx",["expo","export","--platform",e,"--output-dir",t],process.cwd())}function wm(e,t){let n=e==="ios"?"main.jsbundle":"index.android.bundle",r=["index.js","index.ts","index.tsx"].find(s=>ue.existsSync(ye.join(process.cwd(),s)))||"index.js",o=ye.join(t,"assets");ue.mkdirSync(o,{recursive:!0}),il("npx",["react-native","bundle","--platform",e,"--dev","false","--entry-file",r,"--bundle-output",ye.join(t,n),"--assets-dest",o],process.cwd())}async function _m(e){let t=e.config.projectId,n=`ota_${Date.now()}_${e.platform}_${Qa.randomUUID().slice(0,8)}`,i=ye.join(process.cwd(),".mach","ota",n,e.platform);ue.rmSync(i,{recursive:!0,force:!0}),ue.mkdirSync(i,{recursive:!0}),e.engine==="expo-updates"?Im(e.platform,i):wm(e.platform,i);let r=nl(i),o=Em(r,e.platform);if(!o)throw new Error(`Could not find a ${e.platform} JS bundle in ${i}.`);let s=[];for(let f of r){let g=ye.relative(i,f).replace(/\\/g,"/");s.push({filePath:f,relative:g,uploaded:await qa({projectId:t,updateId:n,platform:e.platform,filePath:f,fileName:g,contentType:Am(f)})})}let l=s.find(f=>f.filePath===o),a=s.filter(f=>f.filePath!==o&&!f.relative.endsWith(".map")).map(f=>({key:f.relative,url:f.uploaded.url,contentType:f.uploaded.contentType,hash:f.uploaded.hash,size:f.uploaded.size})),d={id:n,createdAt:new Date().toISOString(),runtimeVersion:e.runtimeVersion,platform:e.platform,launchAsset:{key:ye.basename(l.relative),url:l.uploaded.url,contentType:l.uploaded.contentType,hash:l.uploaded.hash,size:l.uploaded.size},assets:a,metadata:{projectId:t,channel:e.channel,message:e.message||null,engine:e.engine},extra:{mach:{projectId:t,updateId:n,channel:e.channel,platform:e.platform}}},u=ye.join(i,"mach-manifest.json");ue.writeFileSync(u,JSON.stringify(d,null,2));let c=await qa({projectId:t,updateId:n,platform:e.platform,filePath:u,fileName:"manifest.json",contentType:"application/json"}),p=await N.post("/ota/publish",{projectId:t,updateId:n,channelName:e.channel,runtimeVersion:e.runtimeVersion,platform:e.platform,manifestKey:c.key,message:e.message,launchAsset:d.launchAsset,assets:a});if(p.data.status!=="success")throw new Error(p.data.message||`Failed to publish ${e.platform} OTA update.`);return p.data.update}async function $m(e){let t=Nn(),n=at(e.framework)||Yr(t),i=qr(e.engine||t.ota?.engine,n),r=!!e.yes,o=await Ya("OTA channel:",Ct(e.channel||e.branch||t.ota?.channel)||"production","production",!0,r),s=`${ft.replace(/\/$/,"")}/api/ota/${i==="expo-updates"?"expo":"react-native"}/${t.projectId}`,l=await Ya("Mach OTA update URL:",Ct(e.url||t.ota?.url)||s,s,!0,r);t.framework=n,t.ota={...t.ota||{},enabled:!0,engine:i,channel:o,url:l,deploymentUrl:l,statsUrl:`${ft.replace(/\/$/,"")}/api/ota/events`,runtimeVersionPolicy:t.ota?.runtimeVersionPolicy||"appVersion"},delete t.update,um(t);let a=[`${m.configFileName} updated.`];n==="expo"?a.push(...await ym(process.cwd(),e)):a.push("Vanilla React Native native OTA client setup is planned; this command wrote Mach config only for now."),sm(a.map(d=>`- ${d}`).join(`
1541
+ `),"OTA setup"),await rl({...e,action:"verify"})}async function vm(e){Jt();let t=Nn(),n=at(e.framework)||Yr(t),i=qr(e.engine||t.ota?.engine,n),r=Ct(e.channel||e.branch||t.ota?.channel)||"production",o=Sm(t,e),s=pm(e.platform||"all"),l=lm();l.start(`Publishing OTA update (${s.join("+")}, ${r}, runtime ${o})`);try{let a=[];for(let d of s)l.message(`Exporting and uploading ${d} OTA bundle...`),a.push(await _m({config:t,engine:i,platform:d,channel:r,runtimeVersion:o,message:e.message}));if(l.stop("OTA update published."),e.json)ct.info(JSON.stringify({status:"success",updates:a},null,2));else{sn(et.green(`\u2713 OTA update live on "${r}" for runtime ${o}.`));for(let d of a)ct.info(et.dim(`${d.platform}: ${d.updateId}`))}}catch(a){l.stop("OTA publish failed."),ct.error(a.response?.data?.message||a.message),process.exit(1)}}async function rl(e){let t=Nn(),n=at(e.framework)||Yr(t),i=qr(e.engine||t.ota?.engine,n),r=[],o=t.ota;if(r.push(o?.enabled?{level:"pass",message:"mach.config.json has ota.enabled."}:{level:"fail",message:"mach.config.json is missing ota.enabled. Run `mach ota setup`."}),r.push(o?.url?{level:"pass",message:`OTA URL configured: ${o.url}`}:{level:"fail",message:"OTA URL is missing. Run `mach ota setup`."}),r.push(o?.channel?{level:"pass",message:`Default channel: ${o.channel}`}:{level:"warn",message:"No default OTA channel configured; publish will use production."}),r.push(o?.runtimeVersionPolicy||o?.runtimeVersion?{level:"pass",message:"Runtime version policy configured."}:{level:"warn",message:"No runtime version policy configured; package.json version will be used."}),i==="expo-updates"){let l=Tn(ye.join(process.cwd(),"package.json"))||{},a={...l.dependencies||{},...l.devDependencies||{}};r.push(a["expo-updates"]?{level:"pass",message:"expo-updates is installed."}:{level:"warn",message:"Install expo-updates before making native builds that consume Mach OTA."}),r.push(Xr(process.cwd())?{level:"pass",message:`${m.npmScope}/mach is installed locally for the Expo plugin.`}:{level:"warn",message:`${m.npmScope}/mach is not installed locally; Expo may not resolve ${ke}.`})}else r.push({level:"warn",message:"Vanilla React Native OTA native client is not fully automated yet. Publish can upload bundles, but apps need the Mach RN OTA client before consuming them."});for(let l of r){let a=l.level==="pass"?et.green("PASS"):l.level==="warn"?et.yellow("WARN"):et.red("FAIL");ct.info(`${a} ${l.message}`)}let s=r.filter(l=>l.level==="fail").length;s>0&&(sn(et.red(`OTA verification failed with ${s} issue(s).`)),process.exit(1)),sn(et.green("OTA verification passed."))}async function Rm(e){Jt();let t=Nn(),n=await N.get(`/ota/${t.projectId}/updates`),i=n.data.updates||[];if(e.json){ct.info(JSON.stringify(n.data,null,2));return}if(i.length===0){sn("No OTA updates found.");return}for(let r of i){let o=r.stats?.total||{};ct.info(`${et.bold(r.updateId)} ${et.dim(`${r.platform} ${r.channelName} runtime ${r.runtimeVersion}`)} ${r.status||"active"}`),ct.info(et.dim(` downloads ios=${o.iosDownloaded||0} android=${o.androidDownloaded||0} applied ios=${o.iosApplied||0} android=${o.androidApplied||0}`))}sn(`Found ${i.length} OTA update(s).`)}async function Xa(e,t){Jt();let n=Nn(),i=Ct(t.updateId);i||(ct.error(`Missing update id. Use \`${m.nameLower} ota ${e} --update-id <id>\`.`),process.exit(1));let r=await N.post(`/ota/${n.projectId}/updates/${encodeURIComponent(i)}/${e}`);t.json?ct.info(JSON.stringify(r.data,null,2)):sn(et.green(`\u2713 OTA update ${e==="rollback"?"rolled back":"promoted"}: ${i}`))}async function dt(e,t={}){let n=e||t.action||"publish";if(n==="setup")return $m({...t,action:n});if(n==="publish")return vm({...t,action:n});if(n==="verify")return rl({...t,action:n});if(n==="list")return Rm({...t,action:n});if(n==="rollback")return Xa("rollback",{...t,action:n});if(n==="promote")return Xa("promote",{...t,action:n});let i=await am({message:"What do you want to do?",options:[{value:"setup",label:"Setup OTA"},{value:"publish",label:"Publish OTA update"},{value:"verify",label:"Verify OTA setup"},{value:"list",label:"List OTA updates"}]});return Wr(i)&&Jr(),dt(i,t)}async function ol(e){Pm.warn(Dm.yellow("`mach update` is deprecated. Use `mach ota publish` instead.")),await dt("publish",{...e,channel:e.branch})}import{intro as Om,outro as sl,log as an}from"@clack/prompts";import ut from"chalk";async function al(){Om(ut.blue(`${m.name} CLI - User Profile`));let e=Ne();if(!e){an.warn(ut.yellow("You are not logged in.")),an.info(`Run \`${m.nameLower} login\` to authenticate.`),sl();return}an.info(`${ut.bold("Logged in as:")} ${ut.green(e.email)}`);try{await N.get("/projects");let n=Ne().token.split(".");if(n.length===3){let i=JSON.parse(Buffer.from(n[1],"base64").toString());if(i.exp){let r=new Date(i.exp*1e3),o=new Date,s=r.getTime()-o.getTime();if(s>0){let l=Math.round(s/6e4),a=(l/60).toFixed(1);an.info(`${ut.bold("Token status:")} Valid (Expires in ~${a}h / ${l}m)`)}else an.warn(`${ut.bold("Token status:")} ${ut.red("Expired")} (Auto-refresh failed)`)}}}catch{an.warn(`${ut.bold("Token status:")} ${ut.red("Unreachable")} (Session might be truly expired)${ft}`)}sl(ut.blue("---"))}import{spawn as Tm}from"child_process";import{log as kt}from"@clack/prompts";import Ge from"chalk";import Nm from"fs";import Cm from"net";async function km(e){return new Promise(t=>{let n=Cm.createServer();n.once("error",i=>{i.code==="EADDRINUSE"?t(!0):t(!1)}),n.once("listening",()=>{n.close(),t(!1)}),n.listen(e,"0.0.0.0")})}async function ll(e,t=20){let n=e;for(;n<e+t;){if(!await km(n))return n;n++}throw new Error(`Could not find an available port after ${t} attempts starting from ${e}.`)}var cl=async e=>{kt.info(Ge.blue(`Starting ${m.name} Dev Orchestrator...`));let t=ve(),n=e.buildProfile||"development",i=t?xe(t,n):null,r={...process.env};if(t?.projectId)try{kt.info(Ge.dim(`Fetching managed secrets for profile: ${n}...`));let c=await N.get(`/projects/${t.projectId}/secrets/export?env=${n}`);c.data?.status==="success"&&c.data.secrets&&(Object.assign(r,c.data.secrets),kt.info(Ge.magenta(`\u2713 Injected secrets from ${m.name} Dashboard.`)))}catch{kt.warn("Could not fetch managed secrets. Running with local env only.")}t&&Object.assign(r,qt(t,m.envPrefix)),i&&(Object.assign(r,qt(i,`${m.envPrefix}PROFILE_`)),i.env&&Object.assign(r,i.env));let o=!1;try{let c=JSON.parse(Nm.readFileSync("package.json","utf-8"));o=!!(c.dependencies?.expo||c.devDependencies?.expo)}catch{kt.warn("Could not parse package.json. Defaulting to Bare React Native mode.")}let s=Number(e.port||i?.port||8081),l=await ll(s);l!==s&&kt.info(Ge.yellow(`Port ${s} is busy. ${m.name} is using ${l} instead.`));let a=process.platform==="win32"?"npx.cmd":"npx",d=[];if(o?(d=["expo","start","--port",String(l)],e.clear&&d.push("--clear"),e.tunnel&&d.push("--tunnel"),e.lan&&d.push("--lan"),e.localhost&&d.push("--localhost"),e.ios&&d.push("--ios"),e.android&&d.push("--android"),e.web&&d.push("--web")):(d=["react-native","start","--port",String(l)],e.clear&&d.push("--clear")),o){let c=[`${Ge.cyan("i")} open iOS simulator`,`${Ge.cyan("a")} open Android emulator/device`,`${Ge.cyan("w")} open web`,`${Ge.cyan("r")} reload app`];kt.info([Ge.bold("Launch controls"),...c.map(p=>` ${p}`),"",Ge.dim("Direct launch: mach start --ios | --android | --web"),Ge.dim(`Metro URL: http://localhost:${l}`)].join(`
1542
+ `))}else kt.info(Ge.dim(`Metro URL: http://localhost:${l}`));let u=Tm(a,d,{stdio:"inherit",env:r});return new Promise((c,p)=>{u.on("exit",f=>{f===0?c():p(new Error(`Dev server exited with code ${f}`))}),u.on("error",f=>{p(f)})})};import{log as Fe}from"@clack/prompts";import tt from"chalk";var dl=async e=>{let t=ve();t||(Fe.error(tt.red(`No ${m.configFileName} found in the current directory.`)),process.exit(1));let n=e.profile||"development",i=xe(t,n);if(e.json){console.log(JSON.stringify({project:t,resolved:i},null,2));return}Fe.info(tt.bgBlue.white(` Resolved ${m.name} Config [${n}] `)),Fe.info(tt.dim("----------------------------------------")),Fe.info(`${tt.blue("Project ID:")} ${t.projectId}`),Fe.info(`${tt.blue("Name:")} ${t.name}`),Fe.info(`${tt.blue("Scheme:")} ${t.scheme}`),i?(Fe.info(tt.dim(`
1543
+ Profile Settings:`)),Fe.info(`${tt.cyan("Distribution:")} ${i.distribution||"none"}`),Fe.info(`${tt.cyan("Development Client:")} ${i.developmentClient||"false"}`),i.env&&Object.keys(i.env).length>0&&(Fe.info(tt.dim(`
1544
+ Environment Variables:`)),Object.entries(i.env).forEach(([r,o])=>{Fe.info(` ${r}=${o}`)}))):Fe.warn(`Profile '${n}' not found.`),Fe.info(tt.dim("----------------------------------------"))};import{cancel as tg,confirm as Pl,isCancel as Un,log as Oi,note as ng,outro as Ci,select as ig,text as Dl}from"@clack/prompts";import it from"chalk";import rg from"fs";import vl from"path";import Kt from"fs";import ln from"path";var cn="./plugins/withMachDeepLinks",Zr="mach.deep-links.json",pl=["/*"],Qr=e=>{if(typeof e!="string")return;let t=e.trim();return t.length>0?t:void 0},Ii=e=>{let t=new Set,n=[];for(let i of e){let r=Qr(i);!r||t.has(r)||(t.add(r),n.push(r))}return n},nt=(...e)=>{for(let t of e){let n=Qr(t);if(n)return n}},ul=(e,t)=>e.length!==t.length?!1:e.every((n,i)=>n===t[i]);function fl(e){if(typeof e!="string")return;let t=e.trim().toLowerCase();if(t==="ios"||t==="android"||t==="all")return t}function xn(e){let t=e.includes("://")?e:`https://${e}`,n=new URL(t),i=n.pathname==="/"?"":n.pathname.replace(/\/+$/,"");return`${n.protocol}//${n.host}${i}`}function Ei(e){return new URL(xn(e)).hostname}function wi(e){return e.trim().toLowerCase().replace(/[^a-z0-9+.-]/g,"-").replace(/^-+|-+$/g,"")||"app"}function ml(e=process.cwd()){let t=ln.join(e,"package.json"),n=["app.json","app.config.json","app.config.js","app.config.ts"].some(r=>Kt.existsSync(ln.join(e,r))),i=!1;if(Kt.existsSync(t))try{let r=JSON.parse(Kt.readFileSync(t,"utf-8"));i=!!(r.dependencies?.expo||r.devDependencies?.expo)}catch{i=!1}return n&&i?"expo":Kt.existsSync(ln.join(e,"ios"))||Kt.existsSync(ln.join(e,"android"))?"react-native":Yt}function gl(e,t,n){if(t)return t;let i=!!(e.ios?.bundleIdentifier||n?.ios?.bundleIdentifier||e.deepLinks?.ios?.bundleIdentifier),r=!!(e.android?.package||n?.android?.package||n?.android?.applicationId||e.deepLinks?.android?.package);return i&&!r?"ios":r&&!i?"android":"all"}function _i(e=process.cwd(),t){let n=t?.deepLinks?.web?.outputDir;return n||(Kt.existsSync(ln.join(e,"public"))?"public":"deep-links")}function hl(e,t){let n=e.deepLinks,i=xn(t.baseUrl||n?.baseUrl||(t.domain?`https://${t.domain}`:"")),r=Qr(t.domain)||(t.baseUrl?Ei(i):n?.domain)||Ei(i),o=t.profile||n?.profile||"production",s=xe(e,o)||{},l=s.ios||{},a=s.android||{},d=e.submit?.[o]?.ios||{},u=e.submit?.[o]?.android||{},c=wi(t.scheme||n?.scheme||l.scheme||e.scheme||e.slug||e.name||"app"),p=Lt(e,o),f=Ii([...t.androidFingerprint||[],...n?.android?.sha256CertFingerprints||[],...a.sha256CertFingerprints||[],...e.android?.sha256CertFingerprints||[]]);return{baseUrl:i,domain:r,scheme:c,profile:o!=="production"?o:void 0,paths:n?.paths?.length?n.paths:["/*"],ios:{appStoreId:nt(t.appStoreId,n?.ios?.appStoreId,l.ascAppId,d.ascAppId,e.ios?.ascAppId),appleTeamId:nt(t.appleTeamId,n?.ios?.appleTeamId,l.appleTeamId,l.developerTeamId,d.appleTeamId,d.developerTeamId,e.ios?.appleTeamId,e.ios?.developerTeamId,p.teamId),bundleIdentifier:nt(t.iosBundleId,n?.ios?.bundleIdentifier,l.bundleIdentifier,l.bundleId,e.ios?.bundleIdentifier,e.ios?.bundleId,e.expo?.ios?.bundleIdentifier),webCredentials:!!n?.ios?.webCredentials,activityContinuation:!!n?.ios?.activityContinuation},android:{package:nt(t.androidPackage,n?.android?.package,a.package,a.applicationId,e.android?.package,e.expo?.android?.package,u.packageName,u.package),sha256CertFingerprints:f},web:{smartAppBanner:n?.web?.smartAppBanner??!0,outputDir:t.output||n?.web?.outputDir||_i(process.cwd(),e)}}}function $i(e,t={}){let n=e.deepLinks,i=t.profile||n?.profile||"production",r=t.expoHints||null,o=nt(n?.baseUrl,r?.domain?`https://${r.domain}`:void 0);if(!o)return null;let s=xn(o),l=xe(e,i)||{},a=l.ios||{},d=l.android||{},u=e.submit?.[i]?.ios||{},c=e.submit?.[i]?.android||{},p=Lt(e,i),f=nt(n?.domain,r?.domain)||Ei(s),g=wi(nt(n?.scheme,a.scheme,e.scheme,r?.scheme,e.slug,e.name,"app")||"app"),y=n?.paths?.length?n.paths:[...pl];return{baseUrl:s,domain:f,scheme:g,profile:i!=="production"?i:void 0,paths:y,ios:{appStoreId:nt(n?.ios?.appStoreId,a.ascAppId,u.ascAppId,e.ios?.ascAppId),appleTeamId:nt(n?.ios?.appleTeamId,a.appleTeamId,a.developerTeamId,u.appleTeamId,u.developerTeamId,e.ios?.appleTeamId,e.ios?.developerTeamId,p.teamId),bundleIdentifier:nt(n?.ios?.bundleIdentifier,a.bundleIdentifier,a.bundleId,e.ios?.bundleIdentifier,e.ios?.bundleId,e.expo?.ios?.bundleIdentifier,r?.iosBundleIdentifier),webCredentials:!!n?.ios?.webCredentials,activityContinuation:!!n?.ios?.activityContinuation},android:{package:nt(n?.android?.package,d.package,d.applicationId,e.android?.package,e.expo?.android?.package,c.packageName,c.package,r?.androidPackage),sha256CertFingerprints:Ii([...n?.android?.sha256CertFingerprints||[],...d.sha256CertFingerprints||[],...e.android?.sha256CertFingerprints||[]])},web:{smartAppBanner:n?.web?.smartAppBanner??!0,outputDir:n?.web?.outputDir||_i(t.cwd||process.cwd(),e)}}}function vi(e,t,n="production",i=process.cwd()){return t?.domain?$i({...e,deepLinks:{baseUrl:`https://${t.domain}`,domain:t.domain,scheme:t.scheme}},{profile:n,cwd:i,expoHints:t}):null}function xm(e,t,n=t.profile||"production"){let i=$i({...e,deepLinks:{baseUrl:t.baseUrl}},{profile:n}),r={baseUrl:t.baseUrl};n!=="production"&&(r.profile=n),t.domain&&t.domain!==Ei(t.baseUrl)&&(r.domain=t.domain),t.scheme&&t.scheme!==i?.scheme&&(r.scheme=t.scheme),t.paths?.length&&!ul(t.paths,pl)&&(r.paths=t.paths);let o={};t.ios?.bundleIdentifier&&t.ios.bundleIdentifier!==i?.ios?.bundleIdentifier&&(o.bundleIdentifier=t.ios.bundleIdentifier),t.ios?.appleTeamId&&t.ios.appleTeamId!==i?.ios?.appleTeamId&&(o.appleTeamId=t.ios.appleTeamId),t.ios?.appStoreId&&t.ios.appStoreId!==i?.ios?.appStoreId&&(o.appStoreId=t.ios.appStoreId),t.ios?.webCredentials&&(o.webCredentials=!0),t.ios?.activityContinuation&&(o.activityContinuation=!0),Object.keys(o).length>0&&(r.ios=o);let s={};t.android?.package&&t.android.package!==i?.android?.package&&(s.package=t.android.package);let l=t.android?.sha256CertFingerprints||[],a=i?.android?.sha256CertFingerprints||[];l.length>0&&!ul(l,a)&&(s.sha256CertFingerprints=l),Object.keys(s).length>0&&(r.android=s);let d={outputDir:t.web?.outputDir||"deep-links"};return t.web?.smartAppBanner===!1&&(d.smartAppBanner=!1),r.web=d,r}function yl(e,t,n,i=n.profile||"production"){let r={...e,framework:t,scheme:e.scheme||n.scheme};return{...r,deepLinks:xm(r,n,i)}}function Sl(e,t=process.cwd()){let n=ln.join(t,"mach.config.json");return Kt.writeFileSync(n,`${JSON.stringify(e,null,2)}
1545
+ `),n}import _e from"fs";import De from"path";import{spawnSync as bl}from"child_process";var Ln="@radhya/mach/expo-plugin",Lm=`const fs = require('fs')
1540
1546
  const path = require('path')
1541
1547
 
1542
1548
  const unique = values => Array.from(new Set(values.filter(Boolean)))
@@ -1656,24 +1662,24 @@ module.exports = function withMachDeepLinks(config) {
1656
1662
  config.android.intentFilters = intentFilters
1657
1663
  return config
1658
1664
  }
1659
- `,$n=e=>{if(typeof e=="string"){if(e===_n)return _n;if(e===Qt||e===Qt.replace(/^\.\//,""))return Qt}},Fr=e=>Array.isArray(e)?Fr(e[0]):$n(e),Ya=e=>!!Fr(e),Wf=(e,t)=>{let n=$n(t)||t;return Fr(e)===n},Jf=(e,t)=>Array.isArray(e)?[t,...e.slice(1)]:t,Yf=(e,t)=>{let n=Array.isArray(e.plugins)?e.plugins:[];if(n.findIndex(o=>Wf(o,t))>=0)return e.plugins=n,"already";let r=n.findIndex(Ya);return r>=0?(n[r]=Jf(n[r],t),e.plugins=n,"updated"):(n.push(t),e.plugins=n,"inserted")},Ur=/(['"`])((?:\.\/)?plugins\/withMachDeepLinks|@radhya\/mach\/expo-plugin)\1/g;function gi(e){let t=Re.join(e,"package.json");if(!Ee.existsSync(t))return!1;try{let n=JSON.parse(Ee.readFileSync(t,"utf-8"));return!!(n.dependencies?.["@radhya/mach"]||n.devDependencies?.["@radhya/mach"])}catch{return!1}}function qf(e){return Ee.existsSync(Re.join(e,"pnpm-lock.yaml"))?{command:"pnpm",args:["add","-D","@radhya/mach@latest"],label:"pnpm add -D @radhya/mach@latest"}:Ee.existsSync(Re.join(e,"yarn.lock"))?{command:"yarn",args:["add","-D","@radhya/mach@latest"],label:"yarn add -D @radhya/mach@latest"}:Ee.existsSync(Re.join(e,"bun.lockb"))||Ee.existsSync(Re.join(e,"bun.lock"))?{command:"bun",args:["add","-d","@radhya/mach@latest"],label:"bun add -d @radhya/mach@latest"}:{command:"npm",args:["install","--save-dev","@radhya/mach@latest"],label:"npm install --save-dev @radhya/mach@latest"}}function Xf(e){let t=qf(e),n=Ja(t.command,t.args,{cwd:e,stdio:"inherit",env:{...process.env}});return n.error?{ok:!1,label:t.label,error:n.error.message}:n.status!==0?{ok:!1,label:t.label,error:`${t.command} exited with code ${n.status}`}:{ok:gi(e),label:t.label}}function Zf(e,t){let n=Ee.readFileSync(e,"utf-8"),i=Array.from(n.matchAll(Ur));if(i.length>0){let p=$n(t)||t,f=i.some(E=>$n(E[2])===p),g=i.some(E=>$n(E[2])!==p);if(f&&!g)return"already";let y=n.replace(Ur,(E,_)=>`${_}${t}${_}`);return Ee.writeFileSync(e,y),"updated"}let r=/(^[ \t]*)plugins\s*:\s*\[([\s\S]*?)\]/m.exec(n);if(!r||r.index===void 0)return"unsupported";let o=n.includes(`\r
1665
+ `,Mn=e=>{if(typeof e=="string"){if(e===Ln)return Ln;if(e===cn||e===cn.replace(/^\.\//,""))return cn}},to=e=>Array.isArray(e)?to(e[0]):Mn(e),Al=e=>!!to(e),Mm=(e,t)=>{let n=Mn(t)||t;return to(e)===n},Um=(e,t)=>Array.isArray(e)?[t,...e.slice(1)]:t,Fm=(e,t)=>{let n=Array.isArray(e.plugins)?e.plugins:[];if(n.findIndex(o=>Mm(o,t))>=0)return e.plugins=n,"already";let r=n.findIndex(Al);return r>=0?(n[r]=Um(n[r],t),e.plugins=n,"updated"):(n.push(t),e.plugins=n,"inserted")},eo=/(['"`])((?:\.\/)?plugins\/withMachDeepLinks|@radhya\/mach\/expo-plugin)\1/g;function Ri(e){let t=De.join(e,"package.json");if(!_e.existsSync(t))return!1;try{let n=JSON.parse(_e.readFileSync(t,"utf-8"));return!!(n.dependencies?.["@radhya/mach"]||n.devDependencies?.["@radhya/mach"])}catch{return!1}}function Bm(e){return _e.existsSync(De.join(e,"pnpm-lock.yaml"))?{command:"pnpm",args:["add","-D","@radhya/mach@latest"],label:"pnpm add -D @radhya/mach@latest"}:_e.existsSync(De.join(e,"yarn.lock"))?{command:"yarn",args:["add","-D","@radhya/mach@latest"],label:"yarn add -D @radhya/mach@latest"}:_e.existsSync(De.join(e,"bun.lockb"))||_e.existsSync(De.join(e,"bun.lock"))?{command:"bun",args:["add","-d","@radhya/mach@latest"],label:"bun add -d @radhya/mach@latest"}:{command:"npm",args:["install","--save-dev","@radhya/mach@latest"],label:"npm install --save-dev @radhya/mach@latest"}}function jm(e){let t=Bm(e),n=bl(t.command,t.args,{cwd:e,stdio:"inherit",env:{...process.env}});return n.error?{ok:!1,label:t.label,error:n.error.message}:n.status!==0?{ok:!1,label:t.label,error:`${t.command} exited with code ${n.status}`}:{ok:Ri(e),label:t.label}}function Hm(e,t){let n=_e.readFileSync(e,"utf-8"),i=Array.from(n.matchAll(eo));if(i.length>0){let p=Mn(t)||t,f=i.some(E=>Mn(E[2])===p),g=i.some(E=>Mn(E[2])!==p);if(f&&!g)return"already";let y=n.replace(eo,(E,_)=>`${_}${t}${_}`);return _e.writeFileSync(e,y),"updated"}let r=/(^[ \t]*)plugins\s*:\s*\[([\s\S]*?)\]/m.exec(n);if(!r||r.index===void 0)return"unsupported";let o=n.includes(`\r
1660
1666
  `)?`\r
1661
1667
  `:`
1662
- `,s=r[1]||"",l=r[2]||"",c=l.match(/\r?\n([ \t]+)\S/)?.[1]||`${s} `,u=l.trim().length===0?`${o}${c}'${t}',${o}${s}`:l.includes(`
1663
- `)||l.includes("\r")?`${o}${c}'${t}',${l}`:`${o}${c}'${t}',${o}${c}${l.trim()}${o}${s}`,d=`${r[0].slice(0,r[0].indexOf("[")+1)}${u}]`;return Ee.writeFileSync(e,`${n.slice(0,r.index)}${d}${n.slice(r.index+r[0].length)}`),"inserted"}function qa(e,t,n={}){let i=[],r=[],o=[],s=gi(e);if(!s&&n.installPackage){o.push("Installing @radhya/mach locally so Expo can use @radhya/mach/expo-plugin.");let d=Xf(e);d.ok?(s=!0,o.push(`Installed @radhya/mach with ${d.label}.`)):o.push(`Could not install @radhya/mach with ${d.label}: ${d.error||"unknown error"}. Falling back to local plugin.`)}let l=s?_n:Qt;if(s)o.push(`Using packaged Expo plugin ${_n}.`);else{let d=Re.join(e,"plugins/withMachDeepLinks.js");Ee.mkdirSync(Re.dirname(d),{recursive:!0}),Ee.writeFileSync(d,zf),i.push(Re.relative(e,d)),o.push(`Using local Expo plugin fallback ${Qt}. Install @radhya/mach in this app to use ${_n}.`)}let a=["app.config.ts","app.config.js"].find(d=>Ee.existsSync(Re.join(e,d)));if(a){let d=Re.join(e,a),p=Zf(d,l);return p==="inserted"?i.push(a):p==="updated"?(i.push(a),o.push(`${a} updated to use ${l}.`)):p==="already"?o.push(`${a} already includes the Mach Expo plugin.`):o.push(`Add "${l}" to the plugins array in ${a}. Mach could not safely auto-edit this dynamic config.`),{written:i,skipped:r,notes:o}}let c=["app.config.json","app.json"].find(d=>Ee.existsSync(Re.join(e,d)));if(!c)return r.push("Expo config plugin insertion: no app.json or app.config.json found."),{written:i,skipped:r,notes:o};let u=Re.join(e,c);try{let d=JSON.parse(Ee.readFileSync(u,"utf-8")),p=d.expo&&typeof d.expo=="object"?d.expo:d,f=Yf(p,l);Ee.writeFileSync(u,`${JSON.stringify(d,null,2)}
1664
- `),i.push(c),f==="updated"&&o.push(`${c} updated to use ${l}.`)}catch(d){r.push(`Expo config plugin insertion failed: ${d.message}`)}return{written:i,skipped:r,notes:o}}function Xa(e){let t=["app.config.ts","app.config.js"].find(i=>Ee.existsSync(Re.join(e,i)));if(t){let i=Ee.readFileSync(Re.join(e,t),"utf-8");return Ur.test(i)?"manual":"missing"}let n=["app.config.json","app.json"].find(i=>Ee.existsSync(Re.join(e,i)));if(!n)return"missing";try{let i=JSON.parse(Ee.readFileSync(Re.join(e,n),"utf-8")),r=i.expo&&typeof i.expo=="object"?i.expo:i;return Array.isArray(r.plugins)&&r.plugins.some(Ya)?"wired":"missing"}catch{return"missing"}}function Br(e){let t=Ja("npx",["--no-install","expo","config","--type","public","--json"],{cwd:e,encoding:"utf-8",timeout:8e3,env:{...process.env,CI:"1",EXPO_NO_TELEMETRY:"1"}});if(t.error||t.status!==0||!t.stdout)return null;let n=t.stdout.trim(),i=n.indexOf("{");if(i<0)return null;try{return JSON.parse(n.slice(i))}catch{return null}}function Qf(e){if(!e||typeof e!="object")return null;let n=(Array.isArray(e.ios?.associatedDomains)?e.ios.associatedDomains:[]).map(s=>typeof s=="string"?s.match(/^applinks:(.+)$/)?.[1]:void 0).find(Boolean),r=(Array.isArray(e.android?.intentFilters)?e.android.intentFilters:[]).flatMap(s=>Array.isArray(s?.data)?s.data:[]).find(s=>s?.scheme==="https"&&typeof s.host=="string")?.host,o=n||r;return!o&&!e.scheme&&!e.ios?.bundleIdentifier&&!e.android?.package?null:{domain:o,scheme:typeof e.scheme=="string"?e.scheme:void 0,iosBundleIdentifier:typeof e.ios?.bundleIdentifier=="string"?e.ios.bundleIdentifier:void 0,androidPackage:typeof e.android?.package=="string"?e.android.package:void 0}}function hi(e){return Qf(Br(e))}import ot from"fs";import Me from"path";var em=e=>{ot.mkdirSync(Me.dirname(e),{recursive:!0})},Za=(e,t)=>{em(e),ot.writeFileSync(e,`${JSON.stringify(t,null,2)}
1665
- `)};var tm=e=>{let t=e.ios?.appleTeamId,n=e.ios?.bundleIdentifier;return!t||!n?null:`${t}.${n}`};function Hr(e){let t=tm(e);if(!t)return null;let n=e.paths?.length?e.paths:["/*"],i=n.map(s=>s==="/*"?"*":s),r=n.map(s=>({"/":s,comment:s==="/*"?"Matches all URLs":`Matches ${s}`})),o={applinks:{apps:[],details:[{appIDs:[t],components:r,appID:t,paths:i}]}};return e.ios?.webCredentials&&(o.webcredentials={apps:[t]}),e.ios?.activityContinuation&&(o.activitycontinuation={apps:[t]}),o}function nm(e){let t=e.android?.package;return t?[{relation:["delegate_permission/common.handle_all_urls"],target:{namespace:"android_app",package_name:t,sha256_cert_fingerprints:e.android?.sha256CertFingerprints||[]}}]:null}function im(e,t){let n=t.ios?.appStoreId;if(!n||!ot.existsSync(e))return!1;let i=`<meta name="apple-itunes-app" content="app-id=${n}, app-argument=${t.baseUrl}" />`,r=ot.readFileSync(e,"utf-8");if(/name=["']apple-itunes-app["']/i.test(r)){let o=r.replace(/<meta[^>]+name=["']apple-itunes-app["'][^>]*>/i,i);return ot.writeFileSync(e,o),!0}return/<head[^>]*>/i.test(r)?(ot.writeFileSync(e,r.replace(/<head([^>]*)>/i,`<head$1>
1666
- ${i}`)),!0):!1}function Qa(e,t){let n=[],i=[],r=[],o=t.web?.outputDir||"deep-links",s=Me.join(e,o),l=Hr(t);if(l){let d=ci([Me.join(s,".well-known/apple-app-site-association"),Me.join(s,".well-known/apple-app-site-association.json"),Me.join(s,"apple-app-site-association"),Me.join(s,"apple-app-site-association.json")]);for(let p of d)Za(p,l),n.push(Me.relative(e,p))}else i.push("Apple AASA files: missing ios.appleTeamId or ios.bundleIdentifier");let a=nm(t);if(a){let d=Me.join(s,".well-known/assetlinks.json");Za(d,a),n.push(Me.relative(e,d)),t.android?.sha256CertFingerprints?.length||r.push("assetlinks.json was generated without SHA256 fingerprints. Add them before Android App Links can verify.")}else i.push("Android assetlinks.json: missing android.package");let c=Me.join(e,Lr);ot.existsSync(c)&&(ot.unlinkSync(c),r.push(`Removed legacy ${Lr}; mach.config.json is now the source of truth.`));let u=Me.join(s,"index.html");return t.web?.smartAppBanner&&im(u,t)?n.push(Me.relative(e,u)):t.web?.smartAppBanner&&t.ios?.appStoreId?r.push(`Smart App Banner skipped because ${Me.relative(e,u)} was not found.`):t.web?.smartAppBanner&&r.push("Smart App Banner skipped because ios.appStoreId is not configured."),o!=="public"&&r.push(`Host ${o}/.well-known files at https://${t.domain}/.well-known/.`),{written:n,skipped:i,notes:r}}function jr(e){if(!ot.existsSync(e))return null;try{return JSON.parse(ot.readFileSync(e,"utf-8"))}catch{return null}}import _t from"fs";import $t from"path";import{spawnSync as rm}from"child_process";var J=(e,t)=>({level:e,message:t}),el=(e,t)=>$t.join(e,t.web?.outputDir||"deep-links");function om(e,t,n="fail"){let i=[],r=el(e,t),o=$t.join(r,".well-known/apple-app-site-association");if(!Hr(t))return i.push(J("warn","Skipping AASA verification because ios.appleTeamId or ios.bundleIdentifier is missing.")),i;if(!_t.existsSync(o))return i.push(J(n,`${$t.relative(e,o)} is missing.`)),i;_t.statSync(o).size>128*1024?i.push(J("fail","Apple AASA file is larger than 128 KB.")):i.push(J("pass","Apple AASA file is under 128 KB."));let a=jr(o);if(!a)return i.push(J("fail","Apple AASA file is not valid JSON.")),i;let c=`${t.ios?.appleTeamId}.${t.ios?.bundleIdentifier}`,u=a.applinks?.details||[],d=Array.isArray(u)&&u.some(p=>p.appID===c||p.appIDs?.includes(c));return i.push(d?J("pass",`AASA contains ${c}.`):J("fail",`AASA does not contain ${c}.`)),i}function sm(e,t,n="fail"){let i=[],r=el(e,t),o=$t.join(r,".well-known/assetlinks.json");if(!t.android?.package)return i.push(J("warn","Skipping Android Asset Links verification because android.package is missing.")),i;if(!_t.existsSync(o))return i.push(J(n,`${$t.relative(e,o)} is missing.`)),i;let s=jr(o);if(!s||!Array.isArray(s))return i.push(J("fail","assetlinks.json is not a valid JSON array.")),i;let l=s.find(c=>c?.target?.package_name===t.android?.package);i.push(l?J("pass",`assetlinks.json contains ${t.android.package}.`):J("fail",`assetlinks.json does not contain ${t.android.package}.`));let a=l?.target?.sha256_cert_fingerprints;return i.push(Array.isArray(a)&&a.length>0?J("pass","assetlinks.json has at least one SHA256 fingerprint."):J("warn","assetlinks.json has no SHA256 fingerprints.")),i}function am(e,t,n,i){if(t.framework!=="expo")return[];let r=[],o=Br(e),l=(Array.isArray(o?.ios?.associatedDomains)?o.ios.associatedDomains:[]).includes(`applinks:${n.domain}`);r.push(l?J("pass",`Expo iOS config contains applinks:${n.domain}.`):J(i?"warn":"fail",`Expo iOS config does not contain applinks:${n.domain}.`));let c=(Array.isArray(o?.android?.intentFilters)?o.android.intentFilters:[]).flatMap(d=>Array.isArray(d?.data)?d.data:[]).some(d=>d?.scheme==="https"&&d.host===n.domain);if(r.push(c?J("pass",`Expo Android config contains App Link host ${n.domain}.`):J(i?"warn":"fail",`Expo Android config does not contain App Link host ${n.domain}.`)),i)return r.push(J("warn","mach.config.json is missing deepLinks; values were inferred from Expo config. Run `mach deeplink setup` to persist Mach metadata and generate hosted files.")),r;let u=Xa(e);return u==="wired"?r.push(J("pass","Expo deep link plugin is wired into Expo config and derives values from mach.config.json.")):u==="manual"&&l&&c?r.push(J("pass","Expo resolved config contains the deep-link settings from the dynamic config.")):u==="manual"?r.push(J("warn","Expo deep link plugin exists, but dynamic or missing Expo config means manual plugin insertion must be confirmed.")):l&&c?r.push(J("warn","Expo plugin is not wired, but resolved Expo config already contains the deep-link settings.")):r.push(J("fail","Expo deep link plugin is missing or not wired into Expo config.")),r}function lm(e,t,n){if(t.framework!=="react-native")return[];let i=[],r=$t.join(e,"android/app/src/main/AndroidManifest.xml");if(_t.existsSync(r)){let s=_t.readFileSync(r,"utf-8");i.push(s.includes(`android:host="${n.domain}"`)?J("pass","AndroidManifest.xml contains the App Links host."):J("warn","AndroidManifest.xml does not contain the App Links host. Native patching is planned for a later phase."))}let o=$t.join(e,"ios");if(_t.existsSync(o)){let l=_t.readdirSync(o,{recursive:!0}).filter(a=>typeof a=="string"&&a.endsWith(".entitlements")).some(a=>_t.readFileSync($t.join(o,a),"utf-8").includes(`applinks:${n.domain}`));i.push(l?J("pass","iOS entitlements contain the associated domain."):J("warn","iOS entitlements do not contain the associated domain. Native patching is planned for a later phase."))}return i}async function Gr(e,t){let n=[];try{let i=await fetch(e,{redirect:"manual"});if(i.status>=300&&i.status<400&&!t)return n.push(J("fail",`${e} redirects. Apple AASA endpoints must not redirect.`)),n;n.push(i.status===200?J("pass",`${e} returned HTTP 200.`):J("fail",`${e} returned HTTP ${i.status}.`));let r=i.headers.get("content-type")||"";!r.includes("application/json")&&!r.includes("text/json")&&n.push(J("warn",`${e} content-type is "${r||"missing"}"; application/json is recommended.`)),JSON.parse(await i.text()),n.push(J("pass",`${e} contains valid JSON.`))}catch(i){n.push(J("fail",`${e} check failed: ${i.message}`))}return n}async function dm(e){let t=e.domain;return(await Promise.all([Gr(`https://${t}/.well-known/apple-app-site-association`,!1),Gr(`https://${t}/apple-app-site-association`,!1),Gr(`https://${t}/.well-known/assetlinks.json`,!0)])).flat()}function cm(e){let t=e.android?.package;if(!t)return[J("warn","Cannot print Android device verification commands because android.package is missing.")];let i=rm("adb",["version"],{encoding:"utf-8"}).status===0?"Run":"Install Android platform-tools, then run";return[J("info",`${i}: adb shell pm set-app-links --package ${t} 0 all`),J("info",`${i}: adb shell pm verify-app-links --re-verify ${t}`),J("info",`${i}: adb shell pm get-app-links ${t}`)]}async function Kr(e,t,n){let i=n.profile||t.deepLinks?.profile||"production",r=t.framework==="expo"?hi(e):null,o=t.framework==="expo"?mi(t,r,i,e):null,s=!t.deepLinks&&!!o,l=t.deepLinks?fi(t,{profile:i,cwd:e,expoHints:r}):o,a=[];if(!l)return[J("fail","mach.config.json is missing deepLinks and Mach could not infer existing deep-link settings. Run `mach deeplink setup`.")];a.push(l.baseUrl?J("pass","deepLinks.baseUrl is configured."):J("fail","deepLinks.baseUrl is missing.")),a.push(l.domain?J("pass","deepLinks.domain is configured."):J("fail","deepLinks.domain is missing.")),a.push(l.scheme?J("pass","deepLinks.scheme is configured."):J("fail","deepLinks.scheme is missing."));let c=s?"warn":"fail";return a.push(...om(e,l,c)),a.push(...sm(e,l,c)),a.push(...am(e,t,l,s)),a.push(...lm(e,t,l)),n.live&&a.push(...await dm(l)),n.androidDevice&&a.push(...cm(l)),a}var Rn=()=>process.stdin.isTTY&&process.stdout.isTTY,nl=`${m.npmScope}/mach`,Dn=()=>{um("Operation cancelled."),process.exit(0)},Wr=e=>{if(typeof e!="string")return;let t=e.trim();return t.length>0?t:void 0},gt=(...e)=>{for(let t of e){let n=Wr(t);if(n)return n}},Ut=async(e,t,n,i,r)=>{if(t)return t;if(r||!Rn()){if(i)throw new Error(`${e.replace(/:$/,"")} is required. Pass it as an option or run interactively.`);return}let o=await rl({message:e,initialValue:t||"",placeholder:n,validate(s){if(i&&s.trim().length===0)return"Required."}});return vn(o)&&Dn(),Wr(o)};async function gm(e,t,n){let i=rn(e.framework),r=rn(t);if(r)return r;if(i)return i;let o=Ga();if(n||!Rn())return o;let s=await fm({message:`Which framework should ${m.name} configure?`,initialValue:o,options:[{value:"expo",label:"Expo"},{value:"react-native",label:"React Native"},{value:"flutter",label:"Flutter (not supported yet)"}]});return vn(s)&&Dn(),s}var yi=e=>e==="ios"||e==="all",Vr=e=>e==="android"||e==="all";async function hm(e,t,n){if(t!=="expo"||gi(e)||n.installPlugin===!1)return!1;if(n.installPlugin===!0||n.yes)return!0;if(!Rn())return!1;let i=await il({message:`Install ${nl} locally so Expo can use ${nl}/expo-plugin?`,initialValue:!0});return vn(i)&&Dn(),!!i}async function ym(e,t){let n=!!t.yes,i=t.profile||e.deepLinks?.profile||"production",r=ke(e,i)||{},o=r.ios||{},s=r.android||{},l=e.submit?.[i]?.ios||{},a=e.submit?.[i]?.android||{},c=Rt(e,i),u=await gm(e,t.framework,n);if(u==="flutter")throw new Error("Flutter deep-link automation is planned but not supported yet.");let d=Ka(e,ja(t.platform),r),p=e.deepLinks,g=u==="expo"&&(!gt(t.baseUrl,p?.baseUrl,t.domain?`https://${t.domain}`:void 0)||!gt(t.scheme,p?.scheme,o.scheme,e.scheme,e.slug,e.name)||yi(d)&&!gt(t.iosBundleId,p?.ios?.bundleIdentifier,o.bundleIdentifier,o.bundleId,e.ios?.bundleIdentifier)||Vr(d)&&!gt(t.androidPackage,p?.android?.package,s.package,s.applicationId,e.android?.package,a.packageName,a.package))?mi(e,hi(process.cwd()),i,process.cwd()):null,y=t.output||p?.web?.outputDir||pi(process.cwd(),e),E=await Ut("Deep link base URL:",t.baseUrl||p?.baseUrl||(t.domain?`https://${t.domain}`:void 0)||g?.baseUrl,"https://app.example.com",!0,n),_=wn(E),b=t.baseUrl?new URL(_).hostname:void 0,x=await Ut("Associated domain:",t.domain||b||p?.domain||g?.domain||new URL(_).hostname,"app.example.com",!0,n),I=ui(await Ut("URI scheme:",gt(t.scheme,p?.scheme,o.scheme,e.scheme,g?.scheme,e.slug,e.name,"app"),"myapp",!0,n)||"app"),F=yi(d)?await Ut("iOS bundle identifier:",gt(t.iosBundleId,p?.ios?.bundleIdentifier,o.bundleIdentifier,o.bundleId,e.ios?.bundleIdentifier,g?.ios?.bundleIdentifier),"com.example.app",!0,n):p?.ios?.bundleIdentifier||e.ios?.bundleIdentifier,X=yi(d)?await Ut("Apple Team ID:",gt(t.appleTeamId,p?.ios?.appleTeamId,o.appleTeamId,o.developerTeamId,l.appleTeamId,l.developerTeamId,e.ios?.appleTeamId,e.ios?.developerTeamId,c.teamId),"ABCDE12345",!0,n):p?.ios?.appleTeamId||e.ios?.appleTeamId,D=yi(d)?await Ut("App Store ID (optional, for Smart App Banner):",gt(t.appStoreId,p?.ios?.appStoreId,o.ascAppId,l.ascAppId,e.ios?.ascAppId),"1234567890",!1,n):p?.ios?.appStoreId,w=Vr(d)?await Ut("Android package name:",gt(t.androidPackage,p?.android?.package,s.package,s.applicationId,e.android?.package,a.packageName,a.package,g?.android?.package),"com.example.app",!0,n):p?.android?.package||e.android?.package,N=p?.android?.sha256CertFingerprints||[],$=t.androidFingerprint||[],O=e.android?.sha256CertFingerprints||[],h=s.sha256CertFingerprints||[],M=[...$,...N,...h,...O].filter(Boolean);if(Vr(d)&&M.length===0&&!n&&Rn()){let H=await rl({message:"Android SHA256 fingerprint (optional now, required for verified App Links):",placeholder:"AA:BB:CC:..."});vn(H)&&Dn(),Wr(H)&&M.push(H)}let U=Va(e,{...t,baseUrl:_,domain:x,scheme:I,output:y,appleTeamId:X,appStoreId:D,androidFingerprint:M});return U.ios={...U.ios||{},bundleIdentifier:F,appleTeamId:X,appStoreId:D},U.android={...U.android||{},package:w,sha256CertFingerprints:Array.from(new Set(M))},{framework:u,platform:d,deepLinks:U}}var zr=(e,t)=>{t.length!==0&&pm(t.map(n=>`- ${n}`).join(`
1667
- `),e)},ol=e=>e.filter(t=>t.level==="fail").length;function sl(e){for(let t of e){let n=t.level==="pass"?Qe.green("PASS"):t.level==="warn"?Qe.yellow("WARN"):t.level==="info"?Qe.cyan("INFO"):Qe.red("FAIL");Si.info(`${n} ${t.message}`)}}async function al(e){try{let t=process.cwd(),n=tl.join(t,m.configFileName),i=_e()||{};if(!mm.existsSync(n)){let _=e.yes||!Rn()?!0:await il({message:`${m.configFileName} was not found. Create one with deep link settings?`,initialValue:!0});if(vn(_)&&Dn(),!_)return}let{framework:r,deepLinks:o}=await ym(i,e),s=e.profile||i.deepLinks?.profile||"production",l=za(i,r,o,s),a=Wa(l,t),c=Qa(t,o),u=await hm(t,r,e),d=r==="expo"?qa(t,o,{installPackage:u}):{written:[],skipped:[],notes:r==="react-native"?["React Native native patching is planned for a later phase. Hosted files were generated now."]:[]},p=[tl.relative(t,a),...c.written,...d.written],f=[...c.skipped,...d.skipped],g=[...c.notes,...d.notes];zr("Written",p),zr("Skipped",f),zr("Notes",g);let y=await Kr(t,l,{});sl(y);let E=ol(y);if(E>0){bi(Qe.yellow(`Deep link setup finished with ${E} verification issue(s).`));return}bi(Qe.green("Deep link setup complete."))}catch(t){Si.error(Qe.red(t.message||"Deep link setup failed.")),process.exit(1)}}async function ll(e){try{let t=_e();t||(Si.error(Qe.red(`No ${m.configFileName} found in the current directory.`)),process.exit(1));let n=await Kr(process.cwd(),t,e);sl(n);let i=ol(n);i>0&&(bi(Qe.red(`Deep link verification failed with ${i} issue(s).`)),process.exit(1)),bi(Qe.green("Deep link verification passed."))}catch(t){Si.error(Qe.red(t.message||"Deep link verification failed.")),process.exit(1)}}import{log as He,spinner as Cn,text as dl,select as cl,confirm as Sm,isCancel as Pn,cancel as On,outro as kn,note as bm}from"@clack/prompts";import oe from"chalk";import{execSync as Am}from"child_process";async function Em(){try{let e=Am("xcrun devicectl list devices --json-output -",{stdio:["pipe","pipe","pipe"]}).toString();return(JSON.parse(e).result?.devices||[]).filter(i=>i.connectionProperties?.transportType==="wired"||i.connectionProperties?.transportType==="localNetwork").map(i=>({udid:i.identifier,name:i.deviceProperties?.name||"Unknown Device",model:i.hardwareProperties?.marketingName||"iPhone"}))}catch{return[]}}var ul=e=>e?.trim().toUpperCase()||void 0;function pl(e){let t=_e(),n=t?Rt(t):{},i=ul(e.teamId),r=i||n.teamId;return{...n,teamId:r,developerTeamId:i||n.developerTeamId||r}}async function Im(e){let t=e.udid,n=e.name,i=pl(e),r=i.teamId;if(!t){let s=Cn();s.start("Scanning for connected iOS devices...");let l=await Em();if(s.stop(l.length>0?`Found ${l.length} device(s)`:"No devices detected"),l.length===1)t=l[0].udid,n=n||l[0].name,He.info(`Detected: ${oe.bold(n)} (${oe.dim(t.substring(0,12)+"...")})`);else if(l.length>1){let a=await cl({message:"Select a device to register:",options:l.map(u=>({value:u.udid,label:`${u.name} (${u.model})`,hint:u.udid.substring(0,12)+"..."}))});if(Pn(a)){On("Cancelled");return}t=a;let c=l.find(u=>u.udid===t);n=n||c.name}else{He.info(oe.dim("No connected devices found. Enter UDID manually."));let a=await dl({message:"Device UDID:",placeholder:"00008101-XXXXXXXXXXXX",validate(c){if(c.length<10)return"UDID seems too short"}});if(Pn(a)){On("Cancelled");return}t=a}}if(!n){let s=await dl({message:"Device name:",placeholder:"Nitesh's iPhone",validate(l){if(l.length===0)return"Name is required"}});if(Pn(s)){On("Cancelled");return}n=s}let o=Cn();o.start("Registering device...");try{await T.post("/devices",{udid:t,name:n,platform:"ios",addedVia:"cli",teamId:r,teamName:i.teamName,developerTeamId:i.developerTeamId,appStoreConnectTeamId:i.appStoreConnectTeamId,providerId:i.providerId,providerName:i.providerName}),o.stop(oe.green("Device registered!")),He.info(` ${oe.bold("Name:")} ${n}`),He.info(` ${oe.bold("UDID:")} ${oe.dim(t)}`),r&&He.info(` ${oe.bold("Team:")} ${oe.dim(r)}`)}catch(s){o.stop(oe.red("Failed to register device")),He.error(s.response?.data?.message||s.message)}kn(oe.blue("---"))}async function wm(e={}){let t=ul(e.teamId),n=Cn();n.start("Fetching registered devices...");try{let r=(await T.get("/devices",t?{params:{teamId:t}}:void 0)).data.devices||[];if(n.stop(`${r.length} device(s) registered${t?` for team ${t}`:""}`),r.length===0){He.info(oe.dim(`No devices registered yet. Run \`${m.nameLower} device register\` to add one.`)),kn(oe.blue("---"));return}let o=r.map(s=>{let l=new Date(s.createdAt).toLocaleDateString();return` ${oe.bold(s.name.padEnd(24))} ${oe.dim(s.udid.padEnd(28))} ${oe.dim((s.teamId||"-").padEnd(12))} ${oe.cyan((s.addedVia||"-").padEnd(10))} ${oe.dim(l)}`});bm(` ${oe.bold("Name".padEnd(24))} ${"UDID".padEnd(28)} ${"Team".padEnd(12)} ${"Via".padEnd(10)} Date
1668
+ `,s=r[1]||"",l=r[2]||"",d=l.match(/\r?\n([ \t]+)\S/)?.[1]||`${s} `,u=l.trim().length===0?`${o}${d}'${t}',${o}${s}`:l.includes(`
1669
+ `)||l.includes("\r")?`${o}${d}'${t}',${l}`:`${o}${d}'${t}',${o}${d}${l.trim()}${o}${s}`,c=`${r[0].slice(0,r[0].indexOf("[")+1)}${u}]`;return _e.writeFileSync(e,`${n.slice(0,r.index)}${c}${n.slice(r.index+r[0].length)}`),"inserted"}function El(e,t,n={}){let i=[],r=[],o=[],s=Ri(e);if(!s&&n.installPackage){o.push("Installing @radhya/mach locally so Expo can use @radhya/mach/expo-plugin.");let c=jm(e);c.ok?(s=!0,o.push(`Installed @radhya/mach with ${c.label}.`)):o.push(`Could not install @radhya/mach with ${c.label}: ${c.error||"unknown error"}. Falling back to local plugin.`)}let l=s?Ln:cn;if(s)o.push(`Using packaged Expo plugin ${Ln}.`);else{let c=De.join(e,"plugins/withMachDeepLinks.js");_e.mkdirSync(De.dirname(c),{recursive:!0}),_e.writeFileSync(c,Lm),i.push(De.relative(e,c)),o.push(`Using local Expo plugin fallback ${cn}. Install @radhya/mach in this app to use ${Ln}.`)}let a=["app.config.ts","app.config.js"].find(c=>_e.existsSync(De.join(e,c)));if(a){let c=De.join(e,a),p=Hm(c,l);return p==="inserted"?i.push(a):p==="updated"?(i.push(a),o.push(`${a} updated to use ${l}.`)):p==="already"?o.push(`${a} already includes the Mach Expo plugin.`):o.push(`Add "${l}" to the plugins array in ${a}. Mach could not safely auto-edit this dynamic config.`),{written:i,skipped:r,notes:o}}let d=["app.config.json","app.json"].find(c=>_e.existsSync(De.join(e,c)));if(!d)return r.push("Expo config plugin insertion: no app.json or app.config.json found."),{written:i,skipped:r,notes:o};let u=De.join(e,d);try{let c=JSON.parse(_e.readFileSync(u,"utf-8")),p=c.expo&&typeof c.expo=="object"?c.expo:c,f=Fm(p,l);_e.writeFileSync(u,`${JSON.stringify(c,null,2)}
1670
+ `),i.push(d),f==="updated"&&o.push(`${d} updated to use ${l}.`)}catch(c){r.push(`Expo config plugin insertion failed: ${c.message}`)}return{written:i,skipped:r,notes:o}}function Il(e){let t=["app.config.ts","app.config.js"].find(i=>_e.existsSync(De.join(e,i)));if(t){let i=_e.readFileSync(De.join(e,t),"utf-8");return eo.test(i)?"manual":"missing"}let n=["app.config.json","app.json"].find(i=>_e.existsSync(De.join(e,i)));if(!n)return"missing";try{let i=JSON.parse(_e.readFileSync(De.join(e,n),"utf-8")),r=i.expo&&typeof i.expo=="object"?i.expo:i;return Array.isArray(r.plugins)&&r.plugins.some(Al)?"wired":"missing"}catch{return"missing"}}function no(e){let t=bl("npx",["--no-install","expo","config","--type","public","--json"],{cwd:e,encoding:"utf-8",timeout:8e3,env:{...process.env,CI:"1",EXPO_NO_TELEMETRY:"1"}});if(t.error||t.status!==0||!t.stdout)return null;let n=t.stdout.trim(),i=n.indexOf("{");if(i<0)return null;try{return JSON.parse(n.slice(i))}catch{return null}}function Gm(e){if(!e||typeof e!="object")return null;let n=(Array.isArray(e.ios?.associatedDomains)?e.ios.associatedDomains:[]).map(s=>typeof s=="string"?s.match(/^applinks:(.+)$/)?.[1]:void 0).find(Boolean),r=(Array.isArray(e.android?.intentFilters)?e.android.intentFilters:[]).flatMap(s=>Array.isArray(s?.data)?s.data:[]).find(s=>s?.scheme==="https"&&typeof s.host=="string")?.host,o=n||r;return!o&&!e.scheme&&!e.ios?.bundleIdentifier&&!e.android?.package?null:{domain:o,scheme:typeof e.scheme=="string"?e.scheme:void 0,iosBundleIdentifier:typeof e.ios?.bundleIdentifier=="string"?e.ios.bundleIdentifier:void 0,androidPackage:typeof e.android?.package=="string"?e.android.package:void 0}}function Pi(e){return Gm(no(e))}import pt from"fs";import Be from"path";var Vm=e=>{pt.mkdirSync(Be.dirname(e),{recursive:!0})},wl=(e,t)=>{Vm(e),pt.writeFileSync(e,`${JSON.stringify(t,null,2)}
1671
+ `)};var Km=e=>{let t=e.ios?.appleTeamId,n=e.ios?.bundleIdentifier;return!t||!n?null:`${t}.${n}`};function io(e){let t=Km(e);if(!t)return null;let n=e.paths?.length?e.paths:["/*"],i=n.map(s=>s==="/*"?"*":s),r=n.map(s=>({"/":s,comment:s==="/*"?"Matches all URLs":`Matches ${s}`})),o={applinks:{apps:[],details:[{appIDs:[t],components:r,appID:t,paths:i}]}};return e.ios?.webCredentials&&(o.webcredentials={apps:[t]}),e.ios?.activityContinuation&&(o.activitycontinuation={apps:[t]}),o}function zm(e){let t=e.android?.package;return t?[{relation:["delegate_permission/common.handle_all_urls"],target:{namespace:"android_app",package_name:t,sha256_cert_fingerprints:e.android?.sha256CertFingerprints||[]}}]:null}function Wm(e,t){let n=t.ios?.appStoreId;if(!n||!pt.existsSync(e))return!1;let i=`<meta name="apple-itunes-app" content="app-id=${n}, app-argument=${t.baseUrl}" />`,r=pt.readFileSync(e,"utf-8");if(/name=["']apple-itunes-app["']/i.test(r)){let o=r.replace(/<meta[^>]+name=["']apple-itunes-app["'][^>]*>/i,i);return pt.writeFileSync(e,o),!0}return/<head[^>]*>/i.test(r)?(pt.writeFileSync(e,r.replace(/<head([^>]*)>/i,`<head$1>
1672
+ ${i}`)),!0):!1}function _l(e,t){let n=[],i=[],r=[],o=t.web?.outputDir||"deep-links",s=Be.join(e,o),l=io(t);if(l){let c=Ii([Be.join(s,".well-known/apple-app-site-association"),Be.join(s,".well-known/apple-app-site-association.json"),Be.join(s,"apple-app-site-association"),Be.join(s,"apple-app-site-association.json")]);for(let p of c)wl(p,l),n.push(Be.relative(e,p))}else i.push("Apple AASA files: missing ios.appleTeamId or ios.bundleIdentifier");let a=zm(t);if(a){let c=Be.join(s,".well-known/assetlinks.json");wl(c,a),n.push(Be.relative(e,c)),t.android?.sha256CertFingerprints?.length||r.push("assetlinks.json was generated without SHA256 fingerprints. Add them before Android App Links can verify.")}else i.push("Android assetlinks.json: missing android.package");let d=Be.join(e,Zr);pt.existsSync(d)&&(pt.unlinkSync(d),r.push(`Removed legacy ${Zr}; mach.config.json is now the source of truth.`));let u=Be.join(s,"index.html");return t.web?.smartAppBanner&&Wm(u,t)?n.push(Be.relative(e,u)):t.web?.smartAppBanner&&t.ios?.appStoreId?r.push(`Smart App Banner skipped because ${Be.relative(e,u)} was not found.`):t.web?.smartAppBanner&&r.push("Smart App Banner skipped because ios.appStoreId is not configured."),o!=="public"&&r.push(`Host ${o}/.well-known files at https://${t.domain}/.well-known/.`),{written:n,skipped:i,notes:r}}function ro(e){if(!pt.existsSync(e))return null;try{return JSON.parse(pt.readFileSync(e,"utf-8"))}catch{return null}}import Tt from"fs";import Nt from"path";import{spawnSync as Jm}from"child_process";var J=(e,t)=>({level:e,message:t}),$l=(e,t)=>Nt.join(e,t.web?.outputDir||"deep-links");function Ym(e,t,n="fail"){let i=[],r=$l(e,t),o=Nt.join(r,".well-known/apple-app-site-association");if(!io(t))return i.push(J("warn","Skipping AASA verification because ios.appleTeamId or ios.bundleIdentifier is missing.")),i;if(!Tt.existsSync(o))return i.push(J(n,`${Nt.relative(e,o)} is missing.`)),i;Tt.statSync(o).size>128*1024?i.push(J("fail","Apple AASA file is larger than 128 KB.")):i.push(J("pass","Apple AASA file is under 128 KB."));let a=ro(o);if(!a)return i.push(J("fail","Apple AASA file is not valid JSON.")),i;let d=`${t.ios?.appleTeamId}.${t.ios?.bundleIdentifier}`,u=a.applinks?.details||[],c=Array.isArray(u)&&u.some(p=>p.appID===d||p.appIDs?.includes(d));return i.push(c?J("pass",`AASA contains ${d}.`):J("fail",`AASA does not contain ${d}.`)),i}function qm(e,t,n="fail"){let i=[],r=$l(e,t),o=Nt.join(r,".well-known/assetlinks.json");if(!t.android?.package)return i.push(J("warn","Skipping Android Asset Links verification because android.package is missing.")),i;if(!Tt.existsSync(o))return i.push(J(n,`${Nt.relative(e,o)} is missing.`)),i;let s=ro(o);if(!s||!Array.isArray(s))return i.push(J("fail","assetlinks.json is not a valid JSON array.")),i;let l=s.find(d=>d?.target?.package_name===t.android?.package);i.push(l?J("pass",`assetlinks.json contains ${t.android.package}.`):J("fail",`assetlinks.json does not contain ${t.android.package}.`));let a=l?.target?.sha256_cert_fingerprints;return i.push(Array.isArray(a)&&a.length>0?J("pass","assetlinks.json has at least one SHA256 fingerprint."):J("warn","assetlinks.json has no SHA256 fingerprints.")),i}function Xm(e,t,n,i){if(t.framework!=="expo")return[];let r=[],o=no(e),l=(Array.isArray(o?.ios?.associatedDomains)?o.ios.associatedDomains:[]).includes(`applinks:${n.domain}`);r.push(l?J("pass",`Expo iOS config contains applinks:${n.domain}.`):J(i?"warn":"fail",`Expo iOS config does not contain applinks:${n.domain}.`));let d=(Array.isArray(o?.android?.intentFilters)?o.android.intentFilters:[]).flatMap(c=>Array.isArray(c?.data)?c.data:[]).some(c=>c?.scheme==="https"&&c.host===n.domain);if(r.push(d?J("pass",`Expo Android config contains App Link host ${n.domain}.`):J(i?"warn":"fail",`Expo Android config does not contain App Link host ${n.domain}.`)),i)return r.push(J("warn","mach.config.json is missing deepLinks; values were inferred from Expo config. Run `mach deeplink setup` to persist Mach metadata and generate hosted files.")),r;let u=Il(e);return u==="wired"?r.push(J("pass","Expo deep link plugin is wired into Expo config and derives values from mach.config.json.")):u==="manual"&&l&&d?r.push(J("pass","Expo resolved config contains the deep-link settings from the dynamic config.")):u==="manual"?r.push(J("warn","Expo deep link plugin exists, but dynamic or missing Expo config means manual plugin insertion must be confirmed.")):l&&d?r.push(J("warn","Expo plugin is not wired, but resolved Expo config already contains the deep-link settings.")):r.push(J("fail","Expo deep link plugin is missing or not wired into Expo config.")),r}function Zm(e,t,n){if(t.framework!=="react-native")return[];let i=[],r=Nt.join(e,"android/app/src/main/AndroidManifest.xml");if(Tt.existsSync(r)){let s=Tt.readFileSync(r,"utf-8");i.push(s.includes(`android:host="${n.domain}"`)?J("pass","AndroidManifest.xml contains the App Links host."):J("warn","AndroidManifest.xml does not contain the App Links host. Native patching is planned for a later phase."))}let o=Nt.join(e,"ios");if(Tt.existsSync(o)){let l=Tt.readdirSync(o,{recursive:!0}).filter(a=>typeof a=="string"&&a.endsWith(".entitlements")).some(a=>Tt.readFileSync(Nt.join(o,a),"utf-8").includes(`applinks:${n.domain}`));i.push(l?J("pass","iOS entitlements contain the associated domain."):J("warn","iOS entitlements do not contain the associated domain. Native patching is planned for a later phase."))}return i}async function oo(e,t){let n=[];try{let i=await fetch(e,{redirect:"manual"});if(i.status>=300&&i.status<400&&!t)return n.push(J("fail",`${e} redirects. Apple AASA endpoints must not redirect.`)),n;n.push(i.status===200?J("pass",`${e} returned HTTP 200.`):J("fail",`${e} returned HTTP ${i.status}.`));let r=i.headers.get("content-type")||"";!r.includes("application/json")&&!r.includes("text/json")&&n.push(J("warn",`${e} content-type is "${r||"missing"}"; application/json is recommended.`)),JSON.parse(await i.text()),n.push(J("pass",`${e} contains valid JSON.`))}catch(i){n.push(J("fail",`${e} check failed: ${i.message}`))}return n}async function Qm(e){let t=e.domain;return(await Promise.all([oo(`https://${t}/.well-known/apple-app-site-association`,!1),oo(`https://${t}/apple-app-site-association`,!1),oo(`https://${t}/.well-known/assetlinks.json`,!0)])).flat()}function eg(e){let t=e.android?.package;if(!t)return[J("warn","Cannot print Android device verification commands because android.package is missing.")];let i=Jm("adb",["version"],{encoding:"utf-8"}).status===0?"Run":"Install Android platform-tools, then run";return[J("info",`${i}: adb shell pm set-app-links --package ${t} 0 all`),J("info",`${i}: adb shell pm verify-app-links --re-verify ${t}`),J("info",`${i}: adb shell pm get-app-links ${t}`)]}async function so(e,t,n){let i=n.profile||t.deepLinks?.profile||"production",r=t.framework==="expo"?Pi(e):null,o=t.framework==="expo"?vi(t,r,i,e):null,s=!t.deepLinks&&!!o,l=t.deepLinks?$i(t,{profile:i,cwd:e,expoHints:r}):o,a=[];if(!l)return[J("fail","mach.config.json is missing deepLinks and Mach could not infer existing deep-link settings. Run `mach deeplink setup`.")];a.push(l.baseUrl?J("pass","deepLinks.baseUrl is configured."):J("fail","deepLinks.baseUrl is missing.")),a.push(l.domain?J("pass","deepLinks.domain is configured."):J("fail","deepLinks.domain is missing.")),a.push(l.scheme?J("pass","deepLinks.scheme is configured."):J("fail","deepLinks.scheme is missing."));let d=s?"warn":"fail";return a.push(...Ym(e,l,d)),a.push(...qm(e,l,d)),a.push(...Xm(e,t,l,s)),a.push(...Zm(e,t,l)),n.live&&a.push(...await Qm(l)),n.androidDevice&&a.push(...eg(l)),a}var Fn=()=>process.stdin.isTTY&&process.stdout.isTTY,Rl=`${m.npmScope}/mach`,Bn=()=>{tg("Operation cancelled."),process.exit(0)},co=e=>{if(typeof e!="string")return;let t=e.trim();return t.length>0?t:void 0},wt=(...e)=>{for(let t of e){let n=co(t);if(n)return n}},zt=async(e,t,n,i,r)=>{if(t)return t;if(r||!Fn()){if(i)throw new Error(`${e.replace(/:$/,"")} is required. Pass it as an option or run interactively.`);return}let o=await Dl({message:e,initialValue:t||"",placeholder:n,validate(s){if(i&&s.trim().length===0)return"Required."}});return Un(o)&&Bn(),co(o)};async function og(e,t,n){let i=at(e.framework),r=at(t);if(r)return r;if(i)return i;let o=ml();if(n||!Fn())return o;let s=await ig({message:`Which framework should ${m.name} configure?`,initialValue:o,options:[{value:"expo",label:"Expo"},{value:"react-native",label:"React Native"},{value:"flutter",label:"Flutter (not supported yet)"}]});return Un(s)&&Bn(),s}var Di=e=>e==="ios"||e==="all",ao=e=>e==="android"||e==="all";async function sg(e,t,n){if(t!=="expo"||Ri(e)||n.installPlugin===!1)return!1;if(n.installPlugin===!0||n.yes)return!0;if(!Fn())return!1;let i=await Pl({message:`Install ${Rl} locally so Expo can use ${Rl}/expo-plugin?`,initialValue:!0});return Un(i)&&Bn(),!!i}async function ag(e,t){let n=!!t.yes,i=t.profile||e.deepLinks?.profile||"production",r=xe(e,i)||{},o=r.ios||{},s=r.android||{},l=e.submit?.[i]?.ios||{},a=e.submit?.[i]?.android||{},d=Lt(e,i),u=await og(e,t.framework,n);if(u==="flutter")throw new Error("Flutter deep-link automation is planned but not supported yet.");let c=gl(e,fl(t.platform),r),p=e.deepLinks,g=u==="expo"&&(!wt(t.baseUrl,p?.baseUrl,t.domain?`https://${t.domain}`:void 0)||!wt(t.scheme,p?.scheme,o.scheme,e.scheme,e.slug,e.name)||Di(c)&&!wt(t.iosBundleId,p?.ios?.bundleIdentifier,o.bundleIdentifier,o.bundleId,e.ios?.bundleIdentifier)||ao(c)&&!wt(t.androidPackage,p?.android?.package,s.package,s.applicationId,e.android?.package,a.packageName,a.package))?vi(e,Pi(process.cwd()),i,process.cwd()):null,y=t.output||p?.web?.outputDir||_i(process.cwd(),e),E=await zt("Deep link base URL:",t.baseUrl||p?.baseUrl||(t.domain?`https://${t.domain}`:void 0)||g?.baseUrl,"https://app.example.com",!0,n),_=xn(E),b=t.baseUrl?new URL(_).hostname:void 0,x=await zt("Associated domain:",t.domain||b||p?.domain||g?.domain||new URL(_).hostname,"app.example.com",!0,n),I=wi(await zt("URI scheme:",wt(t.scheme,p?.scheme,o.scheme,e.scheme,g?.scheme,e.slug,e.name,"app"),"myapp",!0,n)||"app"),F=Di(c)?await zt("iOS bundle identifier:",wt(t.iosBundleId,p?.ios?.bundleIdentifier,o.bundleIdentifier,o.bundleId,e.ios?.bundleIdentifier,g?.ios?.bundleIdentifier),"com.example.app",!0,n):p?.ios?.bundleIdentifier||e.ios?.bundleIdentifier,X=Di(c)?await zt("Apple Team ID:",wt(t.appleTeamId,p?.ios?.appleTeamId,o.appleTeamId,o.developerTeamId,l.appleTeamId,l.developerTeamId,e.ios?.appleTeamId,e.ios?.developerTeamId,d.teamId),"ABCDE12345",!0,n):p?.ios?.appleTeamId||e.ios?.appleTeamId,P=Di(c)?await zt("App Store ID (optional, for Smart App Banner):",wt(t.appStoreId,p?.ios?.appStoreId,o.ascAppId,l.ascAppId,e.ios?.ascAppId),"1234567890",!1,n):p?.ios?.appStoreId,w=ao(c)?await zt("Android package name:",wt(t.androidPackage,p?.android?.package,s.package,s.applicationId,e.android?.package,a.packageName,a.package,g?.android?.package),"com.example.app",!0,n):p?.android?.package||e.android?.package,T=p?.android?.sha256CertFingerprints||[],$=t.androidFingerprint||[],O=e.android?.sha256CertFingerprints||[],h=s.sha256CertFingerprints||[],M=[...$,...T,...h,...O].filter(Boolean);if(ao(c)&&M.length===0&&!n&&Fn()){let j=await Dl({message:"Android SHA256 fingerprint (optional now, required for verified App Links):",placeholder:"AA:BB:CC:..."});Un(j)&&Bn(),co(j)&&M.push(j)}let U=hl(e,{...t,baseUrl:_,domain:x,scheme:I,output:y,appleTeamId:X,appStoreId:P,androidFingerprint:M});return U.ios={...U.ios||{},bundleIdentifier:F,appleTeamId:X,appStoreId:P},U.android={...U.android||{},package:w,sha256CertFingerprints:Array.from(new Set(M))},{framework:u,platform:c,deepLinks:U}}var lo=(e,t)=>{t.length!==0&&ng(t.map(n=>`- ${n}`).join(`
1673
+ `),e)},Ol=e=>e.filter(t=>t.level==="fail").length;function Cl(e){for(let t of e){let n=t.level==="pass"?it.green("PASS"):t.level==="warn"?it.yellow("WARN"):t.level==="info"?it.cyan("INFO"):it.red("FAIL");Oi.info(`${n} ${t.message}`)}}async function kl(e){try{let t=process.cwd(),n=vl.join(t,m.configFileName),i=ve()||{};if(!rg.existsSync(n)){let _=e.yes||!Fn()?!0:await Pl({message:`${m.configFileName} was not found. Create one with deep link settings?`,initialValue:!0});if(Un(_)&&Bn(),!_)return}let{framework:r,deepLinks:o}=await ag(i,e),s=e.profile||i.deepLinks?.profile||"production",l=yl(i,r,o,s),a=Sl(l,t),d=_l(t,o),u=await sg(t,r,e),c=r==="expo"?El(t,o,{installPackage:u}):{written:[],skipped:[],notes:r==="react-native"?["React Native native patching is planned for a later phase. Hosted files were generated now."]:[]},p=[vl.relative(t,a),...d.written,...c.written],f=[...d.skipped,...c.skipped],g=[...d.notes,...c.notes];lo("Written",p),lo("Skipped",f),lo("Notes",g);let y=await so(t,l,{});Cl(y);let E=Ol(y);if(E>0){Ci(it.yellow(`Deep link setup finished with ${E} verification issue(s).`));return}Ci(it.green("Deep link setup complete."))}catch(t){Oi.error(it.red(t.message||"Deep link setup failed.")),process.exit(1)}}async function Tl(e){try{let t=ve();t||(Oi.error(it.red(`No ${m.configFileName} found in the current directory.`)),process.exit(1));let n=await so(process.cwd(),t,e);Cl(n);let i=Ol(n);i>0&&(Ci(it.red(`Deep link verification failed with ${i} issue(s).`)),process.exit(1)),Ci(it.green("Deep link verification passed."))}catch(t){Oi.error(it.red(t.message||"Deep link verification failed.")),process.exit(1)}}import{log as Ve,spinner as Gn,text as Nl,select as xl,confirm as lg,isCancel as jn,cancel as Hn,outro as Vn,note as cg}from"@clack/prompts";import oe from"chalk";import{execSync as dg}from"child_process";async function ug(){try{let e=dg("xcrun devicectl list devices --json-output -",{stdio:["pipe","pipe","pipe"]}).toString();return(JSON.parse(e).result?.devices||[]).filter(i=>i.connectionProperties?.transportType==="wired"||i.connectionProperties?.transportType==="localNetwork").map(i=>({udid:i.identifier,name:i.deviceProperties?.name||"Unknown Device",model:i.hardwareProperties?.marketingName||"iPhone"}))}catch{return[]}}var Ll=e=>e?.trim().toUpperCase()||void 0;function Ml(e){let t=ve(),n=t?Lt(t):{},i=Ll(e.teamId),r=i||n.teamId;return{...n,teamId:r,developerTeamId:i||n.developerTeamId||r}}async function pg(e){let t=e.udid,n=e.name,i=Ml(e),r=i.teamId;if(!t){let s=Gn();s.start("Scanning for connected iOS devices...");let l=await ug();if(s.stop(l.length>0?`Found ${l.length} device(s)`:"No devices detected"),l.length===1)t=l[0].udid,n=n||l[0].name,Ve.info(`Detected: ${oe.bold(n)} (${oe.dim(t.substring(0,12)+"...")})`);else if(l.length>1){let a=await xl({message:"Select a device to register:",options:l.map(u=>({value:u.udid,label:`${u.name} (${u.model})`,hint:u.udid.substring(0,12)+"..."}))});if(jn(a)){Hn("Cancelled");return}t=a;let d=l.find(u=>u.udid===t);n=n||d.name}else{Ve.info(oe.dim("No connected devices found. Enter UDID manually."));let a=await Nl({message:"Device UDID:",placeholder:"00008101-XXXXXXXXXXXX",validate(d){if(d.length<10)return"UDID seems too short"}});if(jn(a)){Hn("Cancelled");return}t=a}}if(!n){let s=await Nl({message:"Device name:",placeholder:"Nitesh's iPhone",validate(l){if(l.length===0)return"Name is required"}});if(jn(s)){Hn("Cancelled");return}n=s}let o=Gn();o.start("Registering device...");try{await N.post("/devices",{udid:t,name:n,platform:"ios",addedVia:"cli",teamId:r,teamName:i.teamName,developerTeamId:i.developerTeamId,appStoreConnectTeamId:i.appStoreConnectTeamId,providerId:i.providerId,providerName:i.providerName}),o.stop(oe.green("Device registered!")),Ve.info(` ${oe.bold("Name:")} ${n}`),Ve.info(` ${oe.bold("UDID:")} ${oe.dim(t)}`),r&&Ve.info(` ${oe.bold("Team:")} ${oe.dim(r)}`)}catch(s){o.stop(oe.red("Failed to register device")),Ve.error(s.response?.data?.message||s.message)}Vn(oe.blue("---"))}async function fg(e={}){let t=Ll(e.teamId),n=Gn();n.start("Fetching registered devices...");try{let r=(await N.get("/devices",t?{params:{teamId:t}}:void 0)).data.devices||[];if(n.stop(`${r.length} device(s) registered${t?` for team ${t}`:""}`),r.length===0){Ve.info(oe.dim(`No devices registered yet. Run \`${m.nameLower} device register\` to add one.`)),Vn(oe.blue("---"));return}let o=r.map(s=>{let l=new Date(s.createdAt).toLocaleDateString();return` ${oe.bold(s.name.padEnd(24))} ${oe.dim(s.udid.padEnd(28))} ${oe.dim((s.teamId||"-").padEnd(12))} ${oe.cyan((s.addedVia||"-").padEnd(10))} ${oe.dim(l)}`});cg(` ${oe.bold("Name".padEnd(24))} ${"UDID".padEnd(28)} ${"Team".padEnd(12)} ${"Via".padEnd(10)} Date
1668
1674
  `+o.join(`
1669
- `),"Registered Devices")}catch(i){n.stop(oe.red("Failed to fetch devices")),He.error(i.response?.data?.message||i.message)}kn(oe.blue("---"))}async function _m(e){let t=e.udid,n=pl(e).teamId;if(!t){let o=Cn();o.start("Fetching registered devices...");try{let l=(await T.get("/devices",n?{params:{teamId:n}}:void 0)).data.devices||[];if(o.stop(`${l.length} device(s) found`),l.length===0){He.info(oe.dim("No devices to remove.")),kn(oe.blue("---"));return}let a=await cl({message:"Select device to remove:",options:l.map(u=>({value:u.deviceKey||u.udid,label:u.name,hint:`${u.udid.substring(0,12)}...${u.teamId?` \xB7 ${u.teamId}`:""}`}))});if(Pn(a)){On("Cancelled");return}let c=l.find(u=>(u.deviceKey||u.udid)===a);t=c?.udid||a,n=c?.teamId||n}catch(s){o.stop(oe.red("Failed to fetch devices")),He.error(s.response?.data?.message||s.message);return}}let i=await Sm({message:`Remove device ${oe.dim(t.substring(0,12)+"...")}?`});if(Pn(i)||!i){On("Cancelled");return}let r=Cn();r.start("Removing device...");try{await T.delete(`/devices/${encodeURIComponent(t)}`,n?{params:{teamId:n}}:void 0),r.stop(oe.green("Device removed"))}catch(o){r.stop(oe.red("Failed to remove device")),He.error(o.response?.data?.message||o.message)}kn(oe.blue("---"))}async function Ai(e,t){switch(e){case"register":await Im(t);break;case"list":await wm(t);break;case"remove":await _m(t);break;default:He.error(`Unknown action: ${e}`)}}import{log as Ge,spinner as Hl}from"@clack/prompts";import tt from"chalk";import Oi from"path";import xn from"fs";import rg from"os";import og from"axios";var je=(o=>(o.CRITICAL="critical",o.HIGH="high",o.MEDIUM="medium",o.LOW="low",o.INFO="info",o))(je||{}),et=(a=>(a.PERMISSIONS="permissions",a.SECRETS="secrets",a.DEPENDENCIES="dependencies",a.STORAGE="storage",a.NETWORK="network",a.DEBUG="debug",a.MANIFEST="manifest",a.ATS="ats",a))(et||{});import{spinner as Cl,log as Tn}from"@clack/prompts";import Ue from"chalk";import{execSync as Jm}from"child_process";import kl from"fs";import Nl from"path";import vt from"fs";import Nn from"path";import{execSync as $m}from"child_process";var fl={"android.permission.READ_PHONE_STATE":{severity:"high",description:"Can read phone number, IMEI, carrier info"},"android.permission.CALL_PHONE":{severity:"high",description:"Can make calls without user interaction"},"android.permission.SEND_SMS":{severity:"high",description:"Can send SMS without user interaction"},"android.permission.READ_SMS":{severity:"high",description:"Can read user SMS messages"},"android.permission.READ_CONTACTS":{severity:"medium",description:"Can read user contacts"},"android.permission.WRITE_CONTACTS":{severity:"medium",description:"Can modify user contacts"},"android.permission.READ_CALL_LOG":{severity:"high",description:"Can read call history"},"android.permission.CAMERA":{severity:"medium",description:"Camera access"},"android.permission.RECORD_AUDIO":{severity:"medium",description:"Microphone access"},"android.permission.ACCESS_FINE_LOCATION":{severity:"medium",description:"Precise GPS location"},"android.permission.ACCESS_COARSE_LOCATION":{severity:"medium",description:"Approximate location"},"android.permission.ACCESS_BACKGROUND_LOCATION":{severity:"high",description:"Background location tracking"},"android.permission.READ_EXTERNAL_STORAGE":{severity:"medium",description:"Read files on device"},"android.permission.WRITE_EXTERNAL_STORAGE":{severity:"medium",description:"Write files on device"},"android.permission.READ_MEDIA_IMAGES":{severity:"low",description:"Read photos"},"android.permission.READ_MEDIA_VIDEO":{severity:"low",description:"Read videos"},"android.permission.SYSTEM_ALERT_WINDOW":{severity:"high",description:"Draw overlays on other apps"},"android.permission.REQUEST_INSTALL_PACKAGES":{severity:"high",description:"Can install APKs"}},vm={NSCameraUsageDescription:{severity:"medium",description:"Camera access declared"},NSMicrophoneUsageDescription:{severity:"medium",description:"Microphone access declared"},NSLocationWhenInUseUsageDescription:{severity:"medium",description:"Location (in-use) declared"},NSLocationAlwaysUsageDescription:{severity:"high",description:"Background location declared"},NSContactsUsageDescription:{severity:"medium",description:"Contacts access declared"},NSCalendarsUsageDescription:{severity:"low",description:"Calendar access declared"},NSPhotoLibraryUsageDescription:{severity:"low",description:"Photo library access declared"}};function Rm(e){try{let n=$m("npx expo config --type introspect --json 2>/dev/null",{cwd:e,encoding:"utf-8",timeout:3e4});return JSON.parse(n)}catch{}let t=Nn.join(e,"app.json");if(vt.existsSync(t))try{let n=JSON.parse(vt.readFileSync(t,"utf-8"));return n.expo||n}catch{}return null}function Dm(e){let t=[],n=Nn.join(e,"node_modules");if(!vt.existsSync(n))return t;let i=/<uses-permission\s+android:name="([^"]+)"/g;function r(o,s){let l=Nn.join(o,"android","src","main","AndroidManifest.xml");if(!vt.existsSync(l))return;let a=vt.readFileSync(l,"utf-8"),c;for(;(c=i.exec(a))!==null;)t.push({pkg:s,permission:c[1]});i.lastIndex=0}for(let o of vt.readdirSync(n)){if(o.startsWith("."))continue;let s=Nn.join(n,o);if(o.startsWith("@")){if(!vt.statSync(s).isDirectory())continue;for(let l of vt.readdirSync(s))r(Nn.join(s,l),`${o}/${l}`)}else r(s,o)}return t}async function ml(e,t){let n=[],i=1,r=Rm(e),o=r?.android?.permissions||[],s=r?.android?.blockedPermissions||[];for(let c of o){let u=fl[c];u&&n.push({id:`PERM-${String(i++).padStart(3,"0")}`,title:`${c.split(".").pop()} declared`,description:u.description,severity:u.severity,category:"permissions",file:"app.config.ts",recommendation:"Remove from permissions if not needed, or add justification."})}let l=Dm(e);for(let{pkg:c,permission:u}of l){let d=fl[u];d&&(s.includes(u)||o.includes(u)||n.push({id:`PERM-${String(i++).padStart(3,"0")}`,title:`${u.split(".").pop()} injected by ${c}`,description:`${d.description}. Auto-injected via ${c} AndroidManifest.xml`,severity:d.severity,category:"permissions",file:`node_modules/${c}/android/src/main/AndroidManifest.xml`,recommendation:`Add "${u}" to blockedPermissions if not needed.`,autoFixable:!0}))}let a=r?.ios?.infoPlist||{};for(let[c,u]of Object.entries(vm))c in a&&n.push({id:`PERM-${String(i++).padStart(3,"0")}`,title:`iOS: ${c} declared`,description:u.description,severity:u.severity,category:"permissions",file:"app.config.ts",recommendation:`Remove ${c} from infoPlist if the app does not use this capability.`});return{category:"permissions",label:"Permission Audit",findings:n,durationMs:0}}import Jr from"fs";import Ei from"path";var Pm=[{id:"SEC-001",pattern:/(['"`])(?:sk|pk)_(?:live|test)_[a-zA-Z0-9]{20,}\1/g,severity:"critical",label:"Stripe API Key"},{id:"SEC-002",pattern:/(['"`])AIza[0-9A-Za-z\-_]{35}\1/g,severity:"high",label:"Google API Key"},{id:"SEC-003",pattern:/(['"`])AKIA[0-9A-Z]{16}\1/g,severity:"critical",label:"AWS Access Key ID"},{id:"SEC-004",pattern:/-----BEGIN (?:RSA |EC )?PRIVATE KEY-----/g,severity:"critical",label:"Private key in source"},{id:"SEC-005",pattern:/(?:ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9_]{36,}/g,severity:"high",label:"GitHub Token"},{id:"SEC-006",pattern:/xox[bpors]-[a-zA-Z0-9-]{10,}/g,severity:"high",label:"Slack Token"},{id:"SEC-007",pattern:/(?:password|secret|apikey|api_key)\s*[:=]\s*['"`][^'"`\n]{8,}['"`]/gi,severity:"high",label:"Hardcoded credential"}],Om=new Set([".ts",".tsx",".js",".jsx"]),Cm=new Set(["node_modules",".expo",".git","android","ios","dist","build","__tests__","__mocks__"]);function gl(e){let t=[],n=Jr.readdirSync(e,{withFileTypes:!0});for(let i of n){if(Cm.has(i.name))continue;let r=Ei.join(e,i.name);i.isDirectory()?t.push(...gl(r)):Om.has(Ei.extname(i.name))&&t.push(r)}return t}function km(e){let t=e.trim();return t.startsWith("//")||t.startsWith("*")||t.startsWith("/*")}function Nm(e){return/process\.env\./i.test(e)||/import\.meta\.env/i.test(e)}async function hl(e,t){let n=[],i=Ei.join(e,"src"),r=Jr.existsSync(i)?i:e,o=gl(r);for(let s of o){let a=Jr.readFileSync(s,"utf-8").split(`
1670
- `),c=Ei.relative(e,s);for(let u=0;u<a.length;u++){let d=a[u];if(!km(d)&&!Nm(d))for(let{id:p,pattern:f,severity:g,label:y}of Pm)f.lastIndex=0,f.test(d)&&n.push({id:p,title:y,description:`Potential ${y.toLowerCase()} found in source code`,severity:g,category:"secrets",file:c,line:u+1,recommendation:`Move to environment variables or a secrets manager. Use \`${m.nameLower} env set\` for managed secrets.`})}}return{category:"secrets",label:"Secrets Detection",findings:n,durationMs:0}}import{execSync as Tm}from"child_process";var xm={critical:"critical",high:"high",moderate:"medium",low:"low",info:"info"};async function yl(e,t){let n=[],i=1,r;try{r=Tm("npm audit --json 2>/dev/null",{cwd:e,encoding:"utf-8",timeout:6e4})}catch(l){if(r=l.stdout||"",!r)return{category:"dependencies",label:"Dependency CVEs",findings:[],durationMs:0,error:"Failed to run npm audit. Ensure npm is available and dependencies are installed."}}let o;try{o=JSON.parse(r)}catch{return{category:"dependencies",label:"Dependency CVEs",findings:[],durationMs:0,error:"Failed to parse npm audit output."}}let s=o.vulnerabilities||{};for(let[l,a]of Object.entries(s)){let c=xm[a.severity]||"info",u=Array.isArray(a.via)?a.via.map(d=>typeof d=="string"?d:d.title||d.name).join(", "):String(a.via);n.push({id:`DEP-${String(i++).padStart(3,"0")}`,title:`${l} \u2014 ${a.severity}`,description:`Via: ${u}. Range: ${a.range||"unknown"}`,severity:c,category:"dependencies",recommendation:a.fixAvailable?`Run \`npm audit fix\` or update ${l} to a patched version.`:"No fix available yet. Monitor for updates or evaluate alternatives.",autoFixable:!!a.fixAvailable})}return{category:"dependencies",label:"Dependency CVEs",findings:n,durationMs:0}}import Ii from"fs";import wi from"path";var Lm=/(?:token|password|credential|secret|apiKey|api_key|session|auth|jwt|refresh_token|access_token|private_key|pin|otp)/i,Sl=/AsyncStorage\s*\.\s*(?:setItem|mergeItem)\s*\(\s*['"`]([^'"`]+)['"`]/g,Mm=/from\s+['"]@react-native-async-storage\/async-storage['"]|from\s+['"]react-native['"].*AsyncStorage/,Um=new Set([".ts",".tsx",".js",".jsx"]),Fm=new Set(["node_modules",".expo",".git","android","ios","dist","build"]);function bl(e){let t=[];if(!Ii.existsSync(e))return t;let n=Ii.readdirSync(e,{withFileTypes:!0});for(let i of n){if(Fm.has(i.name))continue;let r=wi.join(e,i.name);i.isDirectory()?t.push(...bl(r)):Um.has(wi.extname(i.name))&&t.push(r)}return t}async function Al(e,t){let n=[],i=1,r=wi.join(e,"src"),o=Ii.existsSync(r)?r:e,s=bl(o);for(let l of s){let a=Ii.readFileSync(l,"utf-8");if(!Mm.test(a))continue;let c=a.split(`
1671
- `),u=wi.relative(e,l);for(let d=0;d<c.length;d++){let p=c[d];Sl.lastIndex=0;let f;for(;(f=Sl.exec(p))!==null;){let g=f[1];Lm.test(g)&&n.push({id:`STOR-${String(i++).padStart(3,"0")}`,title:`AsyncStorage used for "${g}"`,description:`Sensitive data key "${g}" stored in AsyncStorage (unencrypted).`,severity:"high",category:"storage",file:u,line:d+1,recommendation:"Use expo-secure-store (SecureStore) for sensitive data instead of AsyncStorage."})}}}return{category:"storage",label:"Insecure Storage",findings:n,durationMs:0}}import _i from"fs";import $i from"path";var El=/['"`](http:\/\/(?!localhost|127\.0\.0\.1|10\.|192\.168\.|0\.0\.0\.0|172\.(?:1[6-9]|2\d|3[01])\.)[^'"`\s]+)['"`]/g,Bm=/\/api\/|\/v[0-9]+\/|\/graphql|\/rest\//i,Hm=new Set([".ts",".tsx",".js",".jsx"]),jm=new Set(["node_modules",".expo",".git","android","ios","dist","build","__tests__","__mocks__"]);function Il(e){let t=[];if(!_i.existsSync(e))return t;let n=_i.readdirSync(e,{withFileTypes:!0});for(let i of n){if(jm.has(i.name))continue;let r=$i.join(e,i.name);i.isDirectory()?t.push(...Il(r)):Hm.has($i.extname(i.name))&&t.push(r)}return t}async function wl(e,t){let n=[],i=1,r=$i.join(e,"src"),o=_i.existsSync(r)?r:e,s=Il(o);for(let l of s){let c=_i.readFileSync(l,"utf-8").split(`
1672
- `),u=$i.relative(e,l);for(let d=0;d<c.length;d++){let p=c[d],f=p.trim();if(f.startsWith("//")||f.startsWith("*"))continue;El.lastIndex=0;let g;for(;(g=El.exec(p))!==null;){let y=g[1],E=Bm.test(y);n.push({id:`NET-${String(i++).padStart(3,"0")}`,title:`Insecure HTTP URL${E?" (API endpoint)":""}`,description:`Plain HTTP URL found: ${y}`,severity:E?"high":"medium",category:"network",file:u,line:d+1,recommendation:"Use HTTPS instead of HTTP for all network requests."})}}}return{category:"network",label:"HTTP URLs",findings:n,durationMs:0}}import vi from"fs";import Ri from"path";var _l=/(?:debug|debugMode|devMode|enableDebug)\s*[:=]\s*true/gi,$l=/console\.(?:log|warn|info|debug)\s*\([^)]*(?:token|password|secret|credential|key|auth)/gi,Gm=new Set([".ts",".tsx",".js",".jsx"]),Km=new Set(["node_modules",".expo",".git","android","ios","dist","build","__tests__","__mocks__"]);function vl(e){let t=[];if(!vi.existsSync(e))return t;let n=vi.readdirSync(e,{withFileTypes:!0});for(let i of n){if(Km.has(i.name))continue;let r=Ri.join(e,i.name);i.isDirectory()?t.push(...vl(r)):Gm.has(Ri.extname(i.name))&&t.push(r)}return t}async function Rl(e,t){let n=[],i=1,r=Ri.join(e,"src"),o=vi.existsSync(r)?r:e,s=vl(o);for(let l of s){let c=vi.readFileSync(l,"utf-8").split(`
1673
- `),u=Ri.relative(e,l);for(let d=0;d<c.length;d++){let p=c[d],f=p.trim();if(!(f.startsWith("//")||f.startsWith("*"))&&(_l.lastIndex=0,_l.test(p)&&n.push({id:`DBG-${String(i++).padStart(3,"0")}`,title:"Hardcoded debug flag",description:"Debug/dev mode enabled in source code",severity:"medium",category:"debug",file:u,line:d+1,recommendation:"Use __DEV__ or environment variables instead of hardcoded debug flags."}),$l.lastIndex=0,$l.test(p))){let g=c.slice(Math.max(0,d-3),d).join(`
1674
- `);/__DEV__/.test(g)||n.push({id:`DBG-${String(i++).padStart(3,"0")}`,title:"Sensitive data in console log",description:"Console log may expose sensitive data (token, password, etc.) in production",severity:"medium",category:"debug",file:u,line:d+1,recommendation:"Wrap in __DEV__ check or remove sensitive data from console output."})}}}return{category:"debug",label:"Debug/Dev Flags",findings:n,durationMs:0}}import Dl from"fs";import Yr from"path";var Vm=new Set(["androidx.work.impl.background.systemjob.SystemJobService","androidx.work.impl.diagnostics.DiagnosticsReceiver","com.google.firebase.iid.FirebaseInstanceIdReceiver","com.google.android.gms.auth.api.signin.RevocationBoundService","androidx.profileinstaller.ProfileInstallReceiver","com.google.firebase.messaging.FirebaseMessagingService","com.google.android.gms.measurement.AppMeasurementService","com.google.android.gms.measurement.AppMeasurementJobService"]);function zm(e){let t=[Yr.join(e,"android","app","src","main","AndroidManifest.xml"),Yr.join(e,"android","AndroidManifest.xml")];for(let n of t)if(Dl.existsSync(n))return n;return null}async function Pl(e,t){let n=[],i=1,r=zm(e);if(!r)return{category:"manifest",label:"Android Manifest",findings:[],durationMs:0,error:"No AndroidManifest.xml found. Run with --prebuild or run `expo prebuild` first."};let o=Dl.readFileSync(r,"utf-8"),s=Yr.relative(e,r),l=/<(activity|service|receiver|provider)\s+([^>]*?)(?:\/>|>)/gs,a;for(;(a=l.exec(o))!==null;){let c=a[1],u=a[2],p=u.match(/android:name="([^"]+)"/)?.[1]||"unknown";if(Vm.has(p))continue;let f=/android:exported="true"/.test(u),g=/android:permission="/.test(u);f&&!g&&n.push({id:`MAN-${String(i++).padStart(3,"0")}`,title:`Exported ${c}: ${p.split(".").pop()}`,description:`${p} is exported=true without android:permission protection`,severity:"medium",category:"manifest",file:s,recommendation:'Set android:exported="false" or add an android:permission attribute.'})}return/android:allowBackup="true"/.test(o)&&n.push({id:`MAN-${String(i++).padStart(3,"0")}`,title:"allowBackup is enabled",description:'android:allowBackup="true" allows data extraction via ADB backup',severity:"medium",category:"manifest",file:s,recommendation:'Set android:allowBackup="false" via expo-build-properties plugin.',autoFixable:!0}),/android:debuggable="true"/.test(o)&&n.push({id:`MAN-${String(i++).padStart(3,"0")}`,title:"App is debuggable",description:'android:debuggable="true" allows attaching a debugger in production',severity:"critical",category:"manifest",file:s,recommendation:"Ensure debuggable is false for production builds. This is usually set automatically for release builds."}),{category:"manifest",label:"Android Manifest",findings:n,durationMs:0}}import Di from"fs";import qr from"path";function Wm(e){let t=qr.join(e,"ios");if(!Di.existsSync(t))return null;let n=Di.readdirSync(t,{withFileTypes:!0});for(let i of n){if(!i.isDirectory()||i.name==="Pods"||i.name.startsWith("."))continue;let r=qr.join(t,i.name,"Info.plist");if(Di.existsSync(r))return r}return null}async function Ol(e,t){let n=[],i=1,r=Wm(e);if(!r)return{category:"ats",label:"iOS ATS Config",findings:[],durationMs:0,error:"No Info.plist found. Run with --prebuild or run `expo prebuild` first."};let o=Di.readFileSync(r,"utf-8"),s=qr.relative(e,r),l=o.match(/<key>NSAppTransportSecurity<\/key>\s*<dict>([\s\S]*?)<\/dict>/);if(l){let a=l[1];/<key>NSAllowsArbitraryLoads<\/key>\s*<true\s*\/>/.test(a)&&n.push({id:`ATS-${String(i++).padStart(3,"0")}`,title:"ATS disabled \u2014 NSAllowsArbitraryLoads",description:"App Transport Security is completely disabled. All HTTP connections are allowed.",severity:"critical",category:"ats",file:s,recommendation:"Remove NSAllowsArbitraryLoads or set to false. Use domain-specific exceptions only if absolutely necessary."});let c=a.match(/<key>NSExceptionDomains<\/key>\s*<dict>([\s\S]*?)<\/dict>/);if(c){let u=c[1].match(/<key>([^<]+)<\/key>/g);if(u)for(let d of u){let p=d.replace(/<\/?key>/g,"");p!=="NSExceptionDomains"&&n.push({id:`ATS-${String(i++).padStart(3,"0")}`,title:`ATS exception: ${p}`,description:`ATS exception configured for ${p}`,severity:"low",category:"ats",file:s,recommendation:`Verify that the ATS exception for ${p} is necessary. Use HTTPS where possible.`})}}}return{category:"ats",label:"iOS ATS Config",findings:n,durationMs:0}}var Ym=[{category:"permissions",label:"Permission Audit",fn:ml,requiresPrebuild:!1},{category:"secrets",label:"Secrets Detection",fn:hl,requiresPrebuild:!1},{category:"dependencies",label:"Dependency CVEs",fn:yl,requiresPrebuild:!1},{category:"storage",label:"Insecure Storage",fn:Al,requiresPrebuild:!1},{category:"network",label:"HTTP URLs",fn:wl,requiresPrebuild:!1},{category:"debug",label:"Debug/Dev Flags",fn:Rl,requiresPrebuild:!1},{category:"manifest",label:"Android Manifest",fn:Pl,requiresPrebuild:!0},{category:"ats",label:"iOS ATS Config",fn:Ol,requiresPrebuild:!0}];async function Tl(e,t){let n=Ym;t.category&&(n=n.filter(s=>s.category===t.category),n.length===0&&(Tn.error(Ue.red(`Unknown category: ${t.category}`)),Tn.info(Ue.dim(`Available: ${Object.values(et).join(", ")}`)),process.exit(1)));let i=n.filter(s=>!s.requiresPrebuild),r=n.filter(s=>s.requiresPrebuild),o=[];for(let s of i){let l=Cl();l.start(Ue.dim(`Running ${s.label}...`));try{let a=Date.now(),c=await s.fn(e,t);c.durationMs=Date.now()-a,o.push(c);let u=c.findings.length;l.stop(u>0?Ue.yellow(`${s.label} \u2014 ${u} finding(s)`):Ue.green(`${s.label} \u2014 clean`))}catch(a){l.stop(Ue.red(`${s.label} \u2014 error`)),o.push({category:s.category,label:s.label,findings:[],durationMs:0,error:a.message})}}if(r.length>0){let s=Nl.join(e,"android"),l=Nl.join(e,"ios"),a=kl.existsSync(s)||kl.existsSync(l);if(!a&&t.prebuild){t.json||Tn.info(Ue.dim(`
1675
- Running expo prebuild for deeper analysis...`));try{Jm("npx expo prebuild --no-install",{cwd:e,stdio:"pipe"})}catch{return Tn.warn(Ue.yellow("Prebuild failed \u2014 skipping manifest/plist checks.")),o}}else if(!a)return t.json||Tn.info(Ue.dim(`
1676
- Skipping manifest/plist checks \u2014 no android/ios dirs. Use --prebuild to generate them.`)),o;for(let c of r){let u=Cl();u.start(Ue.dim(`Running ${c.label}...`));try{let d=Date.now(),p=await c.fn(e,t);p.durationMs=Date.now()-d,o.push(p);let f=p.findings.length;u.stop(f>0?Ue.yellow(`${c.label} \u2014 ${f} finding(s)`):Ue.green(`${c.label} \u2014 clean`))}catch(d){u.stop(Ue.red(`${c.label} \u2014 error`)),o.push({category:c.category,label:c.label,findings:[],durationMs:0,error:d.message})}}}return o}import Ie from"chalk";import{log as ye}from"@clack/prompts";var en={critical:Ie.bgRed.white.bold,high:Ie.red.bold,medium:Ie.yellow.bold,low:Ie.blue,info:Ie.dim},Pi={critical:0,high:1,medium:2,low:3,info:4};function qm(e,t){if(!t)return!0;let n=Pi[t];return n===void 0?!0:Pi[e]<=n}function xl(e,t){let n=0,i={critical:0,high:0,medium:0,low:0,info:0};for(let s of e){let l=s.findings.filter(c=>qm(c.severity,t));if(l.length===0&&!s.error)continue;if(ye.info(""),ye.info(Ie.bold(` ${s.label}`)+Ie.dim(` ${l.length} finding(s)`)),ye.info(Ie.dim(" "+"\u2500".repeat(60))),s.error){ye.error(Ie.red(` Error: ${s.error}`));continue}let a=[...l].sort((c,u)=>Pi[c.severity]-Pi[u.severity]);for(let c of a){let u=en[c.severity](` ${c.severity.toUpperCase()} `);ye.info(` ${u} ${Ie.bold(c.id)} ${c.title}`),ye.info(Ie.dim(` ${c.description}`)),c.file&&ye.info(Ie.dim(` File: ${c.file}${c.line?`:${c.line}`:""}`)),ye.info(Ie.cyan(` Fix: ${c.recommendation}`)),ye.info(""),i[c.severity]++,n++}}ye.info(""),ye.info(Ie.bold(" Summary")),ye.info(Ie.dim(" "+"\u2500".repeat(60))),ye.info(` Total: ${Ie.bold(String(n))} finding(s)`),ye.info(` ${en.critical(` ${i.critical} Critical `)} ${en.high(` ${i.high} High `)} ${en.medium(` ${i.medium} Medium `)} ${en.low(` ${i.low} Low `)} ${en.info(` ${i.info} Info `)}`);let r=i.critical>0,o=i.high>0;r||o?(ye.info(""),ye.error(Ie.red.bold(` FAIL \u2014 ${i.critical} critical, ${i.high} high issue(s) found`))):n>0?(ye.info(""),ye.warn(Ie.yellow(" PASS (with warnings) \u2014 no critical or high issues"))):(ye.info(""),ye.success(Ie.green.bold(" PASS \u2014 no issues found")))}function Ll(e,t){let n=e.flatMap(r=>r.findings),i={};for(let r of Object.values(je))i[r]=n.filter(o=>o.severity===r).length;return{version:"1.0.0",timestamp:new Date().toISOString(),project:t.name||"unknown",projectVersion:t.version||"0.0.0",summary:{total:n.length,...i},passed:i.critical===0&&i.high===0,checks:e.map(r=>({category:r.category,label:r.label,findingCount:r.findings.length,durationMs:r.durationMs,error:r.error||null})),findings:n}}import{log as Se,spinner as Xm}from"@clack/prompts";import me from"chalk";import ht from"fs";import Zm from"os";import tn from"path";import{execSync as Qm}from"child_process";var Ml=16384,eg=1,tg=Buffer.from([127,69,76,70]);async function Ul(e){Se.info(me.bold.underline("16KB Page Alignment Check")),console.log("");let t=tn.resolve(e);if(!ht.existsSync(t))return Se.error(me.red(`APK file not found: ${t}`)),!1;if(!t.endsWith(".apk"))return Se.error(me.red("The provided file is not an APK file.")),!1;let n=Xm();n.start("Extracting and analyzing native libraries...");let i=ht.mkdtempSync(tn.join(Zm.tmpdir(),"mach-16kb-"));try{try{Qm(`unzip -o -q "${t}" "lib/arm64-v8a/*.so" "lib/x86_64/*.so" -d "${i}" 2>/dev/null`,{encoding:"utf-8",maxBuffer:50*1024*1024})}catch{}let r=Fl(tn.join(i,"lib"));if(r.length===0)return n.stop("Analysis complete."),Se.info(me.yellow("No arm64-v8a or x86_64 native libraries found in the APK.")),Se.info(me.dim("16KB alignment check only applies to arm64-v8a and x86_64 architectures.")),!0;let o=[];for(let a of r){let c=tn.relative(i,a),u=ig(c),d=tn.basename(a),p=ng(a);p!==null&&o.push({name:d,filePath:c,arch:u,align:p,compatible:p>=Ml})}if(n.stop("Analysis complete."),o.length===0)return Se.info(me.yellow("No valid ELF shared libraries found.")),!0;let s=o.filter(a=>!a.compatible),l=o.filter(a=>a.compatible);if(Se.info(me.dim(`Checked ${o.length} native librar${o.length===1?"y":"ies"}
1677
- `)),s.length>0){Se.info(me.red.bold(`Incompatible libraries:
1678
- `));for(let a of s)Se.error(me.red(`${me.bold(a.name)} ${me.dim(`(${a.arch})`)}`)),Se.info(me.dim(` PT_LOAD alignment: 2**${Math.log2(a.align)} (${a.align} bytes, needs 2**14 = ${Ml})`))}return l.length>0&&(console.log(""),Se.success(me.green(`${l.length} librar${l.length===1?"y":"ies"} correctly aligned (2**14 or higher).`))),console.log(""),s.length===0?(Se.success(me.green.bold("ELF Verification Successful. APK is 16KB compatible.")),!0):(Se.error(me.red.bold(`Found ${s.length} unaligned lib${s.length===1?"":"s"} (arm64-v8a/x86_64 libs need to be aligned).`)),console.log(""),Se.info(me.yellow("To fix this:")),Se.info(me.dim(" 1. Rebuild with NDK r28+ which defaults to 16KB page alignment")),Se.info(me.dim(" 2. Or set -DANDROID_SUPPORT_FLEXIBLE_PAGE_SIZES=ON in CMake")),Se.info(me.dim(" 3. Update third-party libraries that ship prebuilt .so files")),Se.info(me.dim(" 4. After rebuilding: zipalign -p -f -v 16 input.apk output.apk")),console.log(""),Se.info(me.dim("Reference: https://developer.android.com/guide/practices/page-sizes")),!1)}catch(r){return n.stop("Analysis failed."),Se.error(me.red(`Failed to analyze APK: ${r.message}`)),!1}finally{try{ht.rmSync(i,{recursive:!0,force:!0})}catch{}}}function ng(e){let t=ht.openSync(e,"r");try{let n=Buffer.alloc(64);if(ht.readSync(t,n,0,64,0),!n.subarray(0,4).equals(tg))return null;let i=n[4]===2,r=n[5]===1,o=(p,f)=>r?p.readUInt16LE(f):p.readUInt16BE(f),s=(p,f)=>r?p.readUInt32LE(f):p.readUInt32BE(f),l=(p,f)=>Number(r?p.readBigUInt64LE(f):p.readBigUInt64BE(f)),a,c,u;i?(a=l(n,32),c=o(n,54),u=o(n,56)):(a=s(n,28),c=o(n,42),u=o(n,44));let d=null;for(let p=0;p<u;p++){let f=Buffer.alloc(c);if(ht.readSync(t,f,0,c,a+p*c),s(f,0)!==eg)continue;let y;i?y=l(f,48):y=s(f,28),y>0&&(d===null||y<d)&&(d=y)}return d??0}catch{return null}finally{ht.closeSync(t)}}function Fl(e){let t=[];if(!ht.existsSync(e))return t;let n=ht.readdirSync(e,{withFileTypes:!0});for(let i of n){let r=tn.join(e,i.name);i.isDirectory()?t.push(...Fl(r)):i.name.endsWith(".so")&&t.push(r)}return t}function ig(e){return e.includes("arm64-v8a")?"arm64-v8a":e.includes("x86_64")?"x86_64":"unknown"}var jl=async e=>{if(Ce()||(Ge.error(tt.red(`You are not logged in. Run \`${m.nameLower} login\` first.`)),process.exit(1)),e.apk){await sg(e);return}let n=process.cwd(),i=Oi.join(n,"package.json");xn.existsSync(i)||(Ge.error(tt.red("No package.json found. Run this command from a project root.")),process.exit(1));let r=JSON.parse(xn.readFileSync(i,"utf-8")),o=!!(r.dependencies?.expo||r.devDependencies?.expo);e.json||(Ge.info(tt.dim(`Project: ${r.name||"unknown"} v${r.version||"0.0.0"}`)),Ge.info(tt.dim(`Type: ${o?"Expo":"Bare React Native"}`)),Ge.info(""));let s={json:e.json,fix:e.fix,category:e.category,severity:e.severity,prebuild:e.prebuild},l=await Tl(n,s);e.json?console.log(JSON.stringify(Ll(l,r),null,2)):xl(l,e.severity);let a=l.some(u=>u.findings.some(d=>d.severity==="critical")),c=l.some(u=>u.findings.some(d=>d.severity==="high"));(a||c)&&process.exit(1)},Bl=["16kb"];async function sg(e){let t=e.category?.toLowerCase();t&&!Bl.includes(t)&&(Ge.error(tt.red(`Unknown APK check category: "${t}"`)),Ge.info(tt.dim(`Available APK checks: ${Bl.join(", ")}`)),process.exit(1));let n=await ag(e.apk);n||process.exit(1);let i=!t,r=!1;(i||t==="16kb")&&(await Ul(n)||(r=!0)),r&&process.exit(1)}async function ag(e){if(e.startsWith("build:")){let n=e.slice(6);return await lg(n)}if(e.startsWith("http://")||e.startsWith("https://"))return await Gl(e);let t=Oi.resolve(e);return xn.existsSync(t)?t:(Ge.error(tt.red(`APK file not found: ${t}`)),null)}async function lg(e){let t=Hl();t.start(`Fetching APK from build ${e}...`);try{let n=await T.get(`/build/${e}`);if(n.data.status!=="success")throw new Error(n.data.message);let i=n.data.build;if(!i)throw new Error("Build not found");let r=i.artifacts?.find(o=>o.type?o.type==="apk":o.name?.endsWith(".apk")||o.url?.includes(".apk"));return!r||!r.url?(t.stop("No APK artifact found"),Ge.error(tt.red("This build does not have an APK artifact.")),Ge.info(tt.dim("Make sure the build produced an APK (not just an AAB).")),null):(t.stop(`Found build: ${i.buildId||e}`),await Gl(r.url))}catch(n){return t.stop("Failed to fetch build"),Ge.error(tt.red(n.message)),null}}async function Gl(e){let t=Hl();t.start("Downloading APK...");try{let n=xn.mkdtempSync(Oi.join(rg.tmpdir(),`${m.nameLower}-audit-`)),i=Oi.join(n,"app.apk"),r=await og.get(e,{responseType:"arraybuffer"});xn.writeFileSync(i,r.data);let o=(r.data.length/(1024*1024)).toFixed(1);return t.stop(`Downloaded APK (${o} MB)`),i}catch(n){return t.stop("Download failed"),Ge.error(tt.red(`Failed to download APK: ${n.message}`)),null}}var ug=console.log;console.log=()=>{};cg();console.log=ug;we(be.bgCyan.black(m.cliTag("Production Build Orchestrator")));var fg=pg(import.meta.url),mg=fg("../package.json"),Xr=(e,t=[])=>t.concat(e),ne=new dg;ne.name(m.nameLower).description(`${m.name} CLI: Powerful Cloud Infrastructure Tools`).version(mg.version).option("-y, --yes","Automatically answer yes to all prompts",!1).option("--quiet","Suppress non-essential output",!1);ne.command("agent").description("Manage local device discovery agent for the Install Hub (port 7070)").argument("[action]","start, run, install, status, restart, stop, or uninstall","start").action(async e=>{await Ia(e)});ne.command("host").description("Setup AWS S3 static hosting and CloudFront").action(async()=>{we(be.bgCyan.black(m.cliTag("Hosting"))),await fo()});ne.command("sitemap").description("Generate sitemap.xml from Expo Router app structure").option("-o, --output <path>","Output path for sitemap.xml","./public/sitemap.xml").action(async e=>{we(be.bgCyan.black(m.cliTag("Sitemap Generator"))),await yo(e)});ne.command("build").description("Run a build on a cloud provider (AWS Spot Instances)").argument("[platform]","Target platform (android, ios)").option("--platform <os>","Target platform alias (android, ios) [Optional]").option("--repo <url>","Git Repository URL").option("--branch <name>","Git Branch").option("--ami <id>","AMI ID").option("--bucket <name>","S3 Bucket for artifacts").option("--region <region>","AWS Region").option("--aws-profile <name>","AWS Credentials Profile").option("-p, --build-profile <name>","Build Profile (e.g. production, staging)").option("--profile <name>","Build Profile (alias for --build-profile)").option("--dry-run","Generate User Data script without launching").option("--keep-instance","Do not terminate the instance after build").option("--subnet <id>","VPC Subnet ID to launch the instance in").option("--security-group <id>","VPC Security Group ID to use").option("--ssh-host <host>","Remote host for iOS build (SSH)").option("--ssh-user <user>","SSH username for remote host").option("--ssh-key <path>","Path to private SSH key for remote host").option("--ios-scheme <scheme>","iOS Scheme to build").option("--ios-team-id <id>","Apple Development Team ID").option("--ios-configuration <config>","Xcode configuration (Release/Debug)").option("--ios-export-method <method>","Export method (ad-hoc, app-store, development, enterprise)").option("--ios-api-key-id <id>","App Store Connect API Key ID").option("--ios-api-key-issuer <id>","App Store Connect API Key Issuer ID").option("--ios-api-key-path <path>","Path to App Store Connect API Key (.p8) file").option("--simulator","Build for iOS Simulator (no signing required)").addOption(new Ke("--build-id <id>","Internal build ID").hideHelp()).addOption(new Ke("--project-id <id>","Internal project ID").hideHelp()).addOption(new Ke("--fail-only","Internal: mark an existing build failed").hideHelp()).addOption(new Ke("--error <message>","Internal failure message").hideHelp()).option("--local","Run build on local machine").option("--auto-version","Automatically fetch and increment Android versionCode or iOS buildNumber from the store").option("--auto-submit","Submit this build after it completes successfully").option("--submit-track <track>","Google Play track to use with --auto-submit").option("--submit-release-status <status>","Google Play release status to use with --auto-submit").option("--submit-rollout <fraction>","Google Play staged rollout fraction to use with --auto-submit").option("--submit-changes-not-sent-for-review","Commit Google Play changes without automatically sending them for review when using --auto-submit").option("--submit-credential-id <id>","Service credential ID to use with --auto-submit").option("--submit-json-output <path>","Write auto-submit metadata JSON to a file for CI/CD").option("--verbose","Enable verbose logging").option("--json-output <path>","Write build metadata JSON to a file for CI/CD").option("--maestro","Queue a managed Maestro test run after a successful build").option("--maestro-flows <path>","Maestro flow file or directory (default: .maestro)").option("--maestro-device <device>","Managed Maestro device profile").option("--maestro-retries <n>","Retries for the Maestro run","1").option("--maestro-record","Enable screen recording where supported").option("--maestro-use-build-source","Use Maestro flows from the build source snapshot instead of uploading local flows").option("--maestro-env <name>","Forward an environment variable to the managed Maestro runner; repeat or comma-separate names",Xr,[]).option("-y, --yes","Automatically answer yes to all prompts",!1).option("--quiet","Suppress non-essential output",!1).action(async(e,t)=>{let n=ne.opts();t.yes=t.yes||n.yes,t.quiet=t.quiet||n.quiet,t.platform=e||t.platform,t.buildProfile=t.profile||t.buildProfile,t.quiet||we(be.bgCyan.black(m.cliTag("Cloud Build"))),await Xn(t)});ne.command("maestro").description("Run Maestro tests locally or with the managed Mach runner").option("--platform <os>","Target platform (android/ios)").option("-p, --profile <name>","Build profile to resolve when using --latest","production").option("--latest","Use the latest successful build for the platform/profile").option("--build-id <id>","Use a specific Mach build ID").option("--build-url <url>","Use a Mach build URL").option("--artifact-url <url>","Use a direct APK or iOS simulator app artifact URL").option("--local","Run Maestro on a connected local emulator/device instead of the managed runner").option("--maestro-flows <path>","Maestro flow file or directory (default: .maestro)").option("--maestro-device <device>","Managed Maestro device profile").option("--maestro-retries <n>","Retries for the Maestro run","1").option("--maestro-record","Enable screen recording where supported").option("--maestro-use-build-source","Use Maestro flows from the build source snapshot instead of uploading local flows").option("--maestro-env <name>","Forward an environment variable to the managed Maestro runner; repeat or comma-separate names",Xr,[]).option("--wait","Wait for managed Maestro completion and exit non-zero on failure").option("--wait-timeout <minutes>","Maximum minutes to wait for managed Maestro completion","60").option("--wait-interval <seconds>","Polling interval while waiting for managed Maestro completion","15").option("--json-output <path>","Write test run metadata JSON to a file for CI/CD").addOption(new Ke("--local-runner","Internal: execute a managed Maestro run on this machine").hideHelp()).addOption(new Ke("--test-run-id <id>","Internal test run ID").hideHelp()).addOption(new Ke("--project-id <id>","Internal project ID").hideHelp()).addOption(new Ke("--runner-token <token>","Internal runner token").hideHelp()).action(async e=>{we(be.bgCyan.black(m.cliTag("Maestro Testing"))),await ss(e)});ne.command("update").description("Deploy an Over-The-Air (OTA) update to your live channel").option("--branch <name>","Channel or Branch to deploy to (e.g., production)","production").action(async e=>{we(be.bgCyan.black(m.cliTag("OTA Update"))),await Ta(e)});ne.command("submit").description("Automated Store Submission (App Store / Google Play)").option("--platform <os>","Target platform (ios/android)").option("-p, --profile <name>","Build/submission profile to submit from (e.g. production, preprod)").option("--track <track>","Google Play Track (internal, alpha, beta, production)").option("--release-status <status>","Google Play release status (completed, draft, halted, inProgress)").option("--rollout <fraction>","Google Play staged rollout fraction for inProgress releases (example: 0.1)").option("--changes-not-sent-for-review","Commit Google Play changes without automatically sending them for review").option("--ssh-host <host>","Remote macOS host for iOS submission").option("--ssh-user <user>","SSH username for remote iOS submission").option("--ssh-key <path>","Path to private SSH key for remote iOS submission").option("--credential-id <id>","Service credential ID to use when multiple submission credentials exist").option("--local","Run submission on this machine (internal runner mode for iOS)").addOption(new Ke("--submit-id <id>","Internal submission ID").hideHelp()).addOption(new Ke("--project-id <id>","Internal project ID").hideHelp()).addOption(new Ke("--package-name <name>","Internal Android package name").hideHelp()).addOption(new Ke("--bundle-id <id>","Internal iOS bundle identifier").hideHelp()).option("--json-output <path>","Write submission metadata JSON to a file for CI/CD").option("--latest","Use the latest successful build for submission").option("--build-id <id>","Use a specific build ID for submission").action(async e=>{let t=ne.opts();e.quiet=e.quiet||t.quiet,e.yes=e.yes||t.yes,we(be.bgCyan.black(m.cliTag("Store Submission"))),await Vn(e)});ne.command("login").description(`Login to ${m.name} Dashboard`).action(async()=>{we(be.bgCyan.black(m.cliTag("Login"))),await va()});ne.command("logout").description(`Logout from ${m.name} on this machine`).action(async()=>{we(be.bgCyan.black(m.cliTag("Logout"))),await Ra()});ne.command("link").description(`Link local directory to a ${m.name} Project`).action(async()=>{we(be.bgCyan.black(m.cliTag("Link Project"))),await Pa()});ne.command("me").description("Display currently logged in user details").action(async()=>{await La()});ne.command("init").description(`Create a new ${m.name} Project`).action(async()=>{we(be.bgCyan.black(m.cliTag("Init Project"))),await Oa()});ne.command("env").description("Manage Environment Variables").argument("<action>","Action to perform: set, list, pull, download, or export").argument("[args...]","Key=Value pairs for set action").option("-e, --environment <name>","Environment to pull/download","development").option("-o, --out <file>","Output file for pull/download",".env.local").option("--overwrite","Overwrite output file if it already exists").action(async(e,t,n)=>{we(be.bgCyan.black(m.cliTag("Env Manager"))),await ka(e,t,n)});ne.command("start").description("Start the development server (Metro)").option("-p, --build-profile <name>","Build profile (e.g. development, staging)","development").option("--tunnel","Use ngrok tunnel").option("--lan","Use LAN IP").option("--localhost","Use localhost").option("-c, --clear","Clear Metro cache").option("--port <number>","Port to listen on").option("--ios","Start on iOS").option("--android","Start on Android").option("--web","Start on Web").action(async e=>{we(be.bgCyan.black(m.cliTag("Dev Server"))),await Ua(e)});ne.command("config").description("Show resolved configuration for a profile").option("-p, --profile <name>","Build profile to resolve","development").option("--json","Output as JSON").action(async e=>{await Fa(e)});var Vl=ne.command("deeplink").description("Configure and verify app links, universal links, and URI schemes");Vl.command("setup").description("Generate deep link config, hosted association files, and Expo plugin support").option("--domain <domain>","Associated domain, e.g. app.example.com").option("--base-url <url>","Base URL, e.g. https://app.example.com").option("-p, --profile <name>","Profile used for build/submit overrides").option("--platform <platform>","ios, android, or all").option("--framework <framework>","expo or react-native").option("--scheme <scheme>","URI scheme, e.g. myapp").option("--ios-bundle-id <id>","iOS bundle identifier").option("--android-package <name>","Android package name").option("--apple-team-id <id>","Apple Developer Team ID").option("--app-store-id <id>","App Store app ID for Smart App Banner").option("--android-fingerprint <sha256>","Android SHA256 signing certificate fingerprint; repeatable",Xr,[]).option("--output <dir>","Directory for hosted files, e.g. public or deep-links").option("--install-plugin","Install @radhya/mach locally so Expo can use the packaged config plugin").option("--no-install-plugin","Do not install @radhya/mach for Expo projects; use the local plugin fallback if the package is missing").option("-y, --yes","Automatically answer yes to prompts",!1).action(async e=>{let t=ne.opts();e.yes=e.yes||t.yes,we(be.bgCyan.black(m.cliTag("Deep Links"))),await al(e)});Vl.command("verify").description("Verify local and optionally live deep link configuration").option("-p, --profile <name>","Profile used for build/submit overrides").option("--live","Check hosted files over HTTPS").option("--android-device","Print Android device verification commands").action(async e=>{we(be.bgCyan.black(m.cliTag("Deep Link Verify"))),await ll(e)});ne.command("credentials").description("Unified, interactive credential management (iOS/Android)").option("-p, --profile <name>","Build profile (production, staging, development)").option("--force","Force recreate certificates (nuke existing on Apple Portal)",!1).action(async e=>{let{credentialsMainCommand:t}=await import("./credentials-P3555DXZ.js");await t(e)});ne.command("credentials:setup").description("Automated credential provisioning (iOS/Android) [Legacy]").requiredOption("--platform <os>","Platform: ios or android").option("--profile <name>","Build profile (production, staging, development)").option("--bundle-id <id>","Bundle ID / Package Name (optional, auto-detected)").option("--team-id <id>","Apple Team ID (iOS only)").option("--key-alias <alias>","Android keystore alias (optional, auto-generated)").option("--aws-profile <name>","AWS Credentials Profile (for S3 storage)").option("--force","Force recreate certificates (nuke existing on Apple Portal)",!1).action(async e=>{we(be.bgCyan.black(m.cliTag("Credentials Setup"))),await on(e),Kl(be.green("Done!"))});ne.command("credentials:service").description("Upload Service Credentials (ASC API Key / Google Service JSON) [Legacy]").requiredOption("--platform <os>","Platform: ios or android").option("--file <path>","Path to credential file (.p8 or .json)").option("--issuer-id <id>","ASC API Key Issuer ID (iOS only)").option("--key-id <id>","ASC API Key ID (iOS only)").option("--bundle-id <id>","Bundle identifier / Android package name to attach this service credential to").option("--package-name <name>","Android package name to attach this service credential to").option("-p, --profile <name>","Build profile to resolve package/bundle identifier from config").action(async e=>{we(be.bgCyan.black(m.cliTag("Service Credentials"))),await uo(e),Kl(be.green("Done!"))});var Zr=ne.command("device").description("Manage registered iOS test devices");Zr.command("register").description("Register a connected iOS device or enter UDID manually").option("--udid <udid>","Device UDID (skip auto-detection)").option("--name <name>","Device name").option("--team-id <id>","Apple Developer Team ID for this device").action(async e=>{await Ai("register",e)});Zr.command("list").description("List all registered devices").option("--team-id <id>","Filter by Apple Developer Team ID").action(async e=>{await Ai("list",e)});Zr.command("remove").description("Remove a registered device").option("--udid <udid>","Device UDID to remove").option("--team-id <id>","Apple Developer Team ID for this device").action(async e=>{await Ai("remove",e)});ne.command("audit").description("Run automated security audit on the project or APK").option("--apk <path>","Path to APK file (runs APK diagnostics like 16KB alignment)").option("--json","Output results as JSON (for CI/CD)").option("--fix","Auto-apply fixes where possible").option("--category <name>","Run only a specific check category (e.g. 16kb, permissions, secrets)").option("--severity <level>","Minimum severity to display (critical, high, medium, low, info)").option("--prebuild","Run expo prebuild for deeper manifest/plist analysis").action(async e=>{we(be.bgCyan.black(m.cliTag(e.apk?"APK Audit":"Security Audit"))),await jl(e)});var gg=new Set(["login","logout","agent"]);ne.hook("preAction",(e,t)=>{let n=t.name(),i=t.opts?.()||{};n==="maestro"&&(i.local||i.localRunner)||t.parent?.name()!=="deeplink"&&(gg.has(n)||so())});ne.on("command:*",()=>{console.error(`Invalid command: %s
1679
- See --help for a list of available commands.`,ne.args.join(" ")),process.exit(1)});process.argv.slice(2).length||ne.help();ne.parse(process.argv);
1675
+ `),"Registered Devices")}catch(i){n.stop(oe.red("Failed to fetch devices")),Ve.error(i.response?.data?.message||i.message)}Vn(oe.blue("---"))}async function mg(e){let t=e.udid,n=Ml(e).teamId;if(!t){let o=Gn();o.start("Fetching registered devices...");try{let l=(await N.get("/devices",n?{params:{teamId:n}}:void 0)).data.devices||[];if(o.stop(`${l.length} device(s) found`),l.length===0){Ve.info(oe.dim("No devices to remove.")),Vn(oe.blue("---"));return}let a=await xl({message:"Select device to remove:",options:l.map(u=>({value:u.deviceKey||u.udid,label:u.name,hint:`${u.udid.substring(0,12)}...${u.teamId?` \xB7 ${u.teamId}`:""}`}))});if(jn(a)){Hn("Cancelled");return}let d=l.find(u=>(u.deviceKey||u.udid)===a);t=d?.udid||a,n=d?.teamId||n}catch(s){o.stop(oe.red("Failed to fetch devices")),Ve.error(s.response?.data?.message||s.message);return}}let i=await lg({message:`Remove device ${oe.dim(t.substring(0,12)+"...")}?`});if(jn(i)||!i){Hn("Cancelled");return}let r=Gn();r.start("Removing device...");try{await N.delete(`/devices/${encodeURIComponent(t)}`,n?{params:{teamId:n}}:void 0),r.stop(oe.green("Device removed"))}catch(o){r.stop(oe.red("Failed to remove device")),Ve.error(o.response?.data?.message||o.message)}Vn(oe.blue("---"))}async function ki(e,t){switch(e){case"register":await pg(t);break;case"list":await fg(t);break;case"remove":await mg(t);break;default:Ve.error(`Unknown action: ${e}`)}}import{log as ze,spinner as pc}from"@clack/prompts";import ot from"chalk";import Hi from"path";import Wn from"fs";import Jg from"os";import Yg from"axios";var Ke=(o=>(o.CRITICAL="critical",o.HIGH="high",o.MEDIUM="medium",o.LOW="low",o.INFO="info",o))(Ke||{}),rt=(a=>(a.PERMISSIONS="permissions",a.SECRETS="secrets",a.DEPENDENCIES="dependencies",a.STORAGE="storage",a.NETWORK="network",a.DEBUG="debug",a.MANIFEST="manifest",a.ATS="ats",a))(rt||{});import{spinner as nc,log as zn}from"@clack/prompts";import je from"chalk";import{execSync as Ug}from"child_process";import ic from"fs";import rc from"path";import xt from"fs";import Kn from"path";import{execSync as gg}from"child_process";var Ul={"android.permission.READ_PHONE_STATE":{severity:"high",description:"Can read phone number, IMEI, carrier info"},"android.permission.CALL_PHONE":{severity:"high",description:"Can make calls without user interaction"},"android.permission.SEND_SMS":{severity:"high",description:"Can send SMS without user interaction"},"android.permission.READ_SMS":{severity:"high",description:"Can read user SMS messages"},"android.permission.READ_CONTACTS":{severity:"medium",description:"Can read user contacts"},"android.permission.WRITE_CONTACTS":{severity:"medium",description:"Can modify user contacts"},"android.permission.READ_CALL_LOG":{severity:"high",description:"Can read call history"},"android.permission.CAMERA":{severity:"medium",description:"Camera access"},"android.permission.RECORD_AUDIO":{severity:"medium",description:"Microphone access"},"android.permission.ACCESS_FINE_LOCATION":{severity:"medium",description:"Precise GPS location"},"android.permission.ACCESS_COARSE_LOCATION":{severity:"medium",description:"Approximate location"},"android.permission.ACCESS_BACKGROUND_LOCATION":{severity:"high",description:"Background location tracking"},"android.permission.READ_EXTERNAL_STORAGE":{severity:"medium",description:"Read files on device"},"android.permission.WRITE_EXTERNAL_STORAGE":{severity:"medium",description:"Write files on device"},"android.permission.READ_MEDIA_IMAGES":{severity:"low",description:"Read photos"},"android.permission.READ_MEDIA_VIDEO":{severity:"low",description:"Read videos"},"android.permission.SYSTEM_ALERT_WINDOW":{severity:"high",description:"Draw overlays on other apps"},"android.permission.REQUEST_INSTALL_PACKAGES":{severity:"high",description:"Can install APKs"}},hg={NSCameraUsageDescription:{severity:"medium",description:"Camera access declared"},NSMicrophoneUsageDescription:{severity:"medium",description:"Microphone access declared"},NSLocationWhenInUseUsageDescription:{severity:"medium",description:"Location (in-use) declared"},NSLocationAlwaysUsageDescription:{severity:"high",description:"Background location declared"},NSContactsUsageDescription:{severity:"medium",description:"Contacts access declared"},NSCalendarsUsageDescription:{severity:"low",description:"Calendar access declared"},NSPhotoLibraryUsageDescription:{severity:"low",description:"Photo library access declared"}};function yg(e){try{let n=gg("npx expo config --type introspect --json 2>/dev/null",{cwd:e,encoding:"utf-8",timeout:3e4});return JSON.parse(n)}catch{}let t=Kn.join(e,"app.json");if(xt.existsSync(t))try{let n=JSON.parse(xt.readFileSync(t,"utf-8"));return n.expo||n}catch{}return null}function Sg(e){let t=[],n=Kn.join(e,"node_modules");if(!xt.existsSync(n))return t;let i=/<uses-permission\s+android:name="([^"]+)"/g;function r(o,s){let l=Kn.join(o,"android","src","main","AndroidManifest.xml");if(!xt.existsSync(l))return;let a=xt.readFileSync(l,"utf-8"),d;for(;(d=i.exec(a))!==null;)t.push({pkg:s,permission:d[1]});i.lastIndex=0}for(let o of xt.readdirSync(n)){if(o.startsWith("."))continue;let s=Kn.join(n,o);if(o.startsWith("@")){if(!xt.statSync(s).isDirectory())continue;for(let l of xt.readdirSync(s))r(Kn.join(s,l),`${o}/${l}`)}else r(s,o)}return t}async function Fl(e,t){let n=[],i=1,r=yg(e),o=r?.android?.permissions||[],s=r?.android?.blockedPermissions||[];for(let d of o){let u=Ul[d];u&&n.push({id:`PERM-${String(i++).padStart(3,"0")}`,title:`${d.split(".").pop()} declared`,description:u.description,severity:u.severity,category:"permissions",file:"app.config.ts",recommendation:"Remove from permissions if not needed, or add justification."})}let l=Sg(e);for(let{pkg:d,permission:u}of l){let c=Ul[u];c&&(s.includes(u)||o.includes(u)||n.push({id:`PERM-${String(i++).padStart(3,"0")}`,title:`${u.split(".").pop()} injected by ${d}`,description:`${c.description}. Auto-injected via ${d} AndroidManifest.xml`,severity:c.severity,category:"permissions",file:`node_modules/${d}/android/src/main/AndroidManifest.xml`,recommendation:`Add "${u}" to blockedPermissions if not needed.`,autoFixable:!0}))}let a=r?.ios?.infoPlist||{};for(let[d,u]of Object.entries(hg))d in a&&n.push({id:`PERM-${String(i++).padStart(3,"0")}`,title:`iOS: ${d} declared`,description:u.description,severity:u.severity,category:"permissions",file:"app.config.ts",recommendation:`Remove ${d} from infoPlist if the app does not use this capability.`});return{category:"permissions",label:"Permission Audit",findings:n,durationMs:0}}import uo from"fs";import Ti from"path";var bg=[{id:"SEC-001",pattern:/(['"`])(?:sk|pk)_(?:live|test)_[a-zA-Z0-9]{20,}\1/g,severity:"critical",label:"Stripe API Key"},{id:"SEC-002",pattern:/(['"`])AIza[0-9A-Za-z\-_]{35}\1/g,severity:"high",label:"Google API Key"},{id:"SEC-003",pattern:/(['"`])AKIA[0-9A-Z]{16}\1/g,severity:"critical",label:"AWS Access Key ID"},{id:"SEC-004",pattern:/-----BEGIN (?:RSA |EC )?PRIVATE KEY-----/g,severity:"critical",label:"Private key in source"},{id:"SEC-005",pattern:/(?:ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9_]{36,}/g,severity:"high",label:"GitHub Token"},{id:"SEC-006",pattern:/xox[bpors]-[a-zA-Z0-9-]{10,}/g,severity:"high",label:"Slack Token"},{id:"SEC-007",pattern:/(?:password|secret|apikey|api_key)\s*[:=]\s*['"`][^'"`\n]{8,}['"`]/gi,severity:"high",label:"Hardcoded credential"}],Ag=new Set([".ts",".tsx",".js",".jsx"]),Eg=new Set(["node_modules",".expo",".git","android","ios","dist","build","__tests__","__mocks__"]);function Bl(e){let t=[],n=uo.readdirSync(e,{withFileTypes:!0});for(let i of n){if(Eg.has(i.name))continue;let r=Ti.join(e,i.name);i.isDirectory()?t.push(...Bl(r)):Ag.has(Ti.extname(i.name))&&t.push(r)}return t}function Ig(e){let t=e.trim();return t.startsWith("//")||t.startsWith("*")||t.startsWith("/*")}function wg(e){return/process\.env\./i.test(e)||/import\.meta\.env/i.test(e)}async function jl(e,t){let n=[],i=Ti.join(e,"src"),r=uo.existsSync(i)?i:e,o=Bl(r);for(let s of o){let a=uo.readFileSync(s,"utf-8").split(`
1676
+ `),d=Ti.relative(e,s);for(let u=0;u<a.length;u++){let c=a[u];if(!Ig(c)&&!wg(c))for(let{id:p,pattern:f,severity:g,label:y}of bg)f.lastIndex=0,f.test(c)&&n.push({id:p,title:y,description:`Potential ${y.toLowerCase()} found in source code`,severity:g,category:"secrets",file:d,line:u+1,recommendation:`Move to environment variables or a secrets manager. Use \`${m.nameLower} env set\` for managed secrets.`})}}return{category:"secrets",label:"Secrets Detection",findings:n,durationMs:0}}import{execSync as _g}from"child_process";var $g={critical:"critical",high:"high",moderate:"medium",low:"low",info:"info"};async function Hl(e,t){let n=[],i=1,r;try{r=_g("npm audit --json 2>/dev/null",{cwd:e,encoding:"utf-8",timeout:6e4})}catch(l){if(r=l.stdout||"",!r)return{category:"dependencies",label:"Dependency CVEs",findings:[],durationMs:0,error:"Failed to run npm audit. Ensure npm is available and dependencies are installed."}}let o;try{o=JSON.parse(r)}catch{return{category:"dependencies",label:"Dependency CVEs",findings:[],durationMs:0,error:"Failed to parse npm audit output."}}let s=o.vulnerabilities||{};for(let[l,a]of Object.entries(s)){let d=$g[a.severity]||"info",u=Array.isArray(a.via)?a.via.map(c=>typeof c=="string"?c:c.title||c.name).join(", "):String(a.via);n.push({id:`DEP-${String(i++).padStart(3,"0")}`,title:`${l} \u2014 ${a.severity}`,description:`Via: ${u}. Range: ${a.range||"unknown"}`,severity:d,category:"dependencies",recommendation:a.fixAvailable?`Run \`npm audit fix\` or update ${l} to a patched version.`:"No fix available yet. Monitor for updates or evaluate alternatives.",autoFixable:!!a.fixAvailable})}return{category:"dependencies",label:"Dependency CVEs",findings:n,durationMs:0}}import Ni from"fs";import xi from"path";var vg=/(?:token|password|credential|secret|apiKey|api_key|session|auth|jwt|refresh_token|access_token|private_key|pin|otp)/i,Gl=/AsyncStorage\s*\.\s*(?:setItem|mergeItem)\s*\(\s*['"`]([^'"`]+)['"`]/g,Rg=/from\s+['"]@react-native-async-storage\/async-storage['"]|from\s+['"]react-native['"].*AsyncStorage/,Pg=new Set([".ts",".tsx",".js",".jsx"]),Dg=new Set(["node_modules",".expo",".git","android","ios","dist","build"]);function Vl(e){let t=[];if(!Ni.existsSync(e))return t;let n=Ni.readdirSync(e,{withFileTypes:!0});for(let i of n){if(Dg.has(i.name))continue;let r=xi.join(e,i.name);i.isDirectory()?t.push(...Vl(r)):Pg.has(xi.extname(i.name))&&t.push(r)}return t}async function Kl(e,t){let n=[],i=1,r=xi.join(e,"src"),o=Ni.existsSync(r)?r:e,s=Vl(o);for(let l of s){let a=Ni.readFileSync(l,"utf-8");if(!Rg.test(a))continue;let d=a.split(`
1677
+ `),u=xi.relative(e,l);for(let c=0;c<d.length;c++){let p=d[c];Gl.lastIndex=0;let f;for(;(f=Gl.exec(p))!==null;){let g=f[1];vg.test(g)&&n.push({id:`STOR-${String(i++).padStart(3,"0")}`,title:`AsyncStorage used for "${g}"`,description:`Sensitive data key "${g}" stored in AsyncStorage (unencrypted).`,severity:"high",category:"storage",file:u,line:c+1,recommendation:"Use expo-secure-store (SecureStore) for sensitive data instead of AsyncStorage."})}}}return{category:"storage",label:"Insecure Storage",findings:n,durationMs:0}}import Li from"fs";import Mi from"path";var zl=/['"`](http:\/\/(?!localhost|127\.0\.0\.1|10\.|192\.168\.|0\.0\.0\.0|172\.(?:1[6-9]|2\d|3[01])\.)[^'"`\s]+)['"`]/g,Og=/\/api\/|\/v[0-9]+\/|\/graphql|\/rest\//i,Cg=new Set([".ts",".tsx",".js",".jsx"]),kg=new Set(["node_modules",".expo",".git","android","ios","dist","build","__tests__","__mocks__"]);function Wl(e){let t=[];if(!Li.existsSync(e))return t;let n=Li.readdirSync(e,{withFileTypes:!0});for(let i of n){if(kg.has(i.name))continue;let r=Mi.join(e,i.name);i.isDirectory()?t.push(...Wl(r)):Cg.has(Mi.extname(i.name))&&t.push(r)}return t}async function Jl(e,t){let n=[],i=1,r=Mi.join(e,"src"),o=Li.existsSync(r)?r:e,s=Wl(o);for(let l of s){let d=Li.readFileSync(l,"utf-8").split(`
1678
+ `),u=Mi.relative(e,l);for(let c=0;c<d.length;c++){let p=d[c],f=p.trim();if(f.startsWith("//")||f.startsWith("*"))continue;zl.lastIndex=0;let g;for(;(g=zl.exec(p))!==null;){let y=g[1],E=Og.test(y);n.push({id:`NET-${String(i++).padStart(3,"0")}`,title:`Insecure HTTP URL${E?" (API endpoint)":""}`,description:`Plain HTTP URL found: ${y}`,severity:E?"high":"medium",category:"network",file:u,line:c+1,recommendation:"Use HTTPS instead of HTTP for all network requests."})}}}return{category:"network",label:"HTTP URLs",findings:n,durationMs:0}}import Ui from"fs";import Fi from"path";var Yl=/(?:debug|debugMode|devMode|enableDebug)\s*[:=]\s*true/gi,ql=/console\.(?:log|warn|info|debug)\s*\([^)]*(?:token|password|secret|credential|key|auth)/gi,Tg=new Set([".ts",".tsx",".js",".jsx"]),Ng=new Set(["node_modules",".expo",".git","android","ios","dist","build","__tests__","__mocks__"]);function Xl(e){let t=[];if(!Ui.existsSync(e))return t;let n=Ui.readdirSync(e,{withFileTypes:!0});for(let i of n){if(Ng.has(i.name))continue;let r=Fi.join(e,i.name);i.isDirectory()?t.push(...Xl(r)):Tg.has(Fi.extname(i.name))&&t.push(r)}return t}async function Zl(e,t){let n=[],i=1,r=Fi.join(e,"src"),o=Ui.existsSync(r)?r:e,s=Xl(o);for(let l of s){let d=Ui.readFileSync(l,"utf-8").split(`
1679
+ `),u=Fi.relative(e,l);for(let c=0;c<d.length;c++){let p=d[c],f=p.trim();if(!(f.startsWith("//")||f.startsWith("*"))&&(Yl.lastIndex=0,Yl.test(p)&&n.push({id:`DBG-${String(i++).padStart(3,"0")}`,title:"Hardcoded debug flag",description:"Debug/dev mode enabled in source code",severity:"medium",category:"debug",file:u,line:c+1,recommendation:"Use __DEV__ or environment variables instead of hardcoded debug flags."}),ql.lastIndex=0,ql.test(p))){let g=d.slice(Math.max(0,c-3),c).join(`
1680
+ `);/__DEV__/.test(g)||n.push({id:`DBG-${String(i++).padStart(3,"0")}`,title:"Sensitive data in console log",description:"Console log may expose sensitive data (token, password, etc.) in production",severity:"medium",category:"debug",file:u,line:c+1,recommendation:"Wrap in __DEV__ check or remove sensitive data from console output."})}}}return{category:"debug",label:"Debug/Dev Flags",findings:n,durationMs:0}}import Ql from"fs";import po from"path";var xg=new Set(["androidx.work.impl.background.systemjob.SystemJobService","androidx.work.impl.diagnostics.DiagnosticsReceiver","com.google.firebase.iid.FirebaseInstanceIdReceiver","com.google.android.gms.auth.api.signin.RevocationBoundService","androidx.profileinstaller.ProfileInstallReceiver","com.google.firebase.messaging.FirebaseMessagingService","com.google.android.gms.measurement.AppMeasurementService","com.google.android.gms.measurement.AppMeasurementJobService"]);function Lg(e){let t=[po.join(e,"android","app","src","main","AndroidManifest.xml"),po.join(e,"android","AndroidManifest.xml")];for(let n of t)if(Ql.existsSync(n))return n;return null}async function ec(e,t){let n=[],i=1,r=Lg(e);if(!r)return{category:"manifest",label:"Android Manifest",findings:[],durationMs:0,error:"No AndroidManifest.xml found. Run with --prebuild or run `expo prebuild` first."};let o=Ql.readFileSync(r,"utf-8"),s=po.relative(e,r),l=/<(activity|service|receiver|provider)\s+([^>]*?)(?:\/>|>)/gs,a;for(;(a=l.exec(o))!==null;){let d=a[1],u=a[2],p=u.match(/android:name="([^"]+)"/)?.[1]||"unknown";if(xg.has(p))continue;let f=/android:exported="true"/.test(u),g=/android:permission="/.test(u);f&&!g&&n.push({id:`MAN-${String(i++).padStart(3,"0")}`,title:`Exported ${d}: ${p.split(".").pop()}`,description:`${p} is exported=true without android:permission protection`,severity:"medium",category:"manifest",file:s,recommendation:'Set android:exported="false" or add an android:permission attribute.'})}return/android:allowBackup="true"/.test(o)&&n.push({id:`MAN-${String(i++).padStart(3,"0")}`,title:"allowBackup is enabled",description:'android:allowBackup="true" allows data extraction via ADB backup',severity:"medium",category:"manifest",file:s,recommendation:'Set android:allowBackup="false" via expo-build-properties plugin.',autoFixable:!0}),/android:debuggable="true"/.test(o)&&n.push({id:`MAN-${String(i++).padStart(3,"0")}`,title:"App is debuggable",description:'android:debuggable="true" allows attaching a debugger in production',severity:"critical",category:"manifest",file:s,recommendation:"Ensure debuggable is false for production builds. This is usually set automatically for release builds."}),{category:"manifest",label:"Android Manifest",findings:n,durationMs:0}}import Bi from"fs";import fo from"path";function Mg(e){let t=fo.join(e,"ios");if(!Bi.existsSync(t))return null;let n=Bi.readdirSync(t,{withFileTypes:!0});for(let i of n){if(!i.isDirectory()||i.name==="Pods"||i.name.startsWith("."))continue;let r=fo.join(t,i.name,"Info.plist");if(Bi.existsSync(r))return r}return null}async function tc(e,t){let n=[],i=1,r=Mg(e);if(!r)return{category:"ats",label:"iOS ATS Config",findings:[],durationMs:0,error:"No Info.plist found. Run with --prebuild or run `expo prebuild` first."};let o=Bi.readFileSync(r,"utf-8"),s=fo.relative(e,r),l=o.match(/<key>NSAppTransportSecurity<\/key>\s*<dict>([\s\S]*?)<\/dict>/);if(l){let a=l[1];/<key>NSAllowsArbitraryLoads<\/key>\s*<true\s*\/>/.test(a)&&n.push({id:`ATS-${String(i++).padStart(3,"0")}`,title:"ATS disabled \u2014 NSAllowsArbitraryLoads",description:"App Transport Security is completely disabled. All HTTP connections are allowed.",severity:"critical",category:"ats",file:s,recommendation:"Remove NSAllowsArbitraryLoads or set to false. Use domain-specific exceptions only if absolutely necessary."});let d=a.match(/<key>NSExceptionDomains<\/key>\s*<dict>([\s\S]*?)<\/dict>/);if(d){let u=d[1].match(/<key>([^<]+)<\/key>/g);if(u)for(let c of u){let p=c.replace(/<\/?key>/g,"");p!=="NSExceptionDomains"&&n.push({id:`ATS-${String(i++).padStart(3,"0")}`,title:`ATS exception: ${p}`,description:`ATS exception configured for ${p}`,severity:"low",category:"ats",file:s,recommendation:`Verify that the ATS exception for ${p} is necessary. Use HTTPS where possible.`})}}}return{category:"ats",label:"iOS ATS Config",findings:n,durationMs:0}}var Fg=[{category:"permissions",label:"Permission Audit",fn:Fl,requiresPrebuild:!1},{category:"secrets",label:"Secrets Detection",fn:jl,requiresPrebuild:!1},{category:"dependencies",label:"Dependency CVEs",fn:Hl,requiresPrebuild:!1},{category:"storage",label:"Insecure Storage",fn:Kl,requiresPrebuild:!1},{category:"network",label:"HTTP URLs",fn:Jl,requiresPrebuild:!1},{category:"debug",label:"Debug/Dev Flags",fn:Zl,requiresPrebuild:!1},{category:"manifest",label:"Android Manifest",fn:ec,requiresPrebuild:!0},{category:"ats",label:"iOS ATS Config",fn:tc,requiresPrebuild:!0}];async function oc(e,t){let n=Fg;t.category&&(n=n.filter(s=>s.category===t.category),n.length===0&&(zn.error(je.red(`Unknown category: ${t.category}`)),zn.info(je.dim(`Available: ${Object.values(rt).join(", ")}`)),process.exit(1)));let i=n.filter(s=>!s.requiresPrebuild),r=n.filter(s=>s.requiresPrebuild),o=[];for(let s of i){let l=nc();l.start(je.dim(`Running ${s.label}...`));try{let a=Date.now(),d=await s.fn(e,t);d.durationMs=Date.now()-a,o.push(d);let u=d.findings.length;l.stop(u>0?je.yellow(`${s.label} \u2014 ${u} finding(s)`):je.green(`${s.label} \u2014 clean`))}catch(a){l.stop(je.red(`${s.label} \u2014 error`)),o.push({category:s.category,label:s.label,findings:[],durationMs:0,error:a.message})}}if(r.length>0){let s=rc.join(e,"android"),l=rc.join(e,"ios"),a=ic.existsSync(s)||ic.existsSync(l);if(!a&&t.prebuild){t.json||zn.info(je.dim(`
1681
+ Running expo prebuild for deeper analysis...`));try{Ug("npx expo prebuild --no-install",{cwd:e,stdio:"pipe"})}catch{return zn.warn(je.yellow("Prebuild failed \u2014 skipping manifest/plist checks.")),o}}else if(!a)return t.json||zn.info(je.dim(`
1682
+ Skipping manifest/plist checks \u2014 no android/ios dirs. Use --prebuild to generate them.`)),o;for(let d of r){let u=nc();u.start(je.dim(`Running ${d.label}...`));try{let c=Date.now(),p=await d.fn(e,t);p.durationMs=Date.now()-c,o.push(p);let f=p.findings.length;u.stop(f>0?je.yellow(`${d.label} \u2014 ${f} finding(s)`):je.green(`${d.label} \u2014 clean`))}catch(c){u.stop(je.red(`${d.label} \u2014 error`)),o.push({category:d.category,label:d.label,findings:[],durationMs:0,error:c.message})}}}return o}import $e from"chalk";import{log as Ee}from"@clack/prompts";var dn={critical:$e.bgRed.white.bold,high:$e.red.bold,medium:$e.yellow.bold,low:$e.blue,info:$e.dim},ji={critical:0,high:1,medium:2,low:3,info:4};function Bg(e,t){if(!t)return!0;let n=ji[t];return n===void 0?!0:ji[e]<=n}function sc(e,t){let n=0,i={critical:0,high:0,medium:0,low:0,info:0};for(let s of e){let l=s.findings.filter(d=>Bg(d.severity,t));if(l.length===0&&!s.error)continue;if(Ee.info(""),Ee.info($e.bold(` ${s.label}`)+$e.dim(` ${l.length} finding(s)`)),Ee.info($e.dim(" "+"\u2500".repeat(60))),s.error){Ee.error($e.red(` Error: ${s.error}`));continue}let a=[...l].sort((d,u)=>ji[d.severity]-ji[u.severity]);for(let d of a){let u=dn[d.severity](` ${d.severity.toUpperCase()} `);Ee.info(` ${u} ${$e.bold(d.id)} ${d.title}`),Ee.info($e.dim(` ${d.description}`)),d.file&&Ee.info($e.dim(` File: ${d.file}${d.line?`:${d.line}`:""}`)),Ee.info($e.cyan(` Fix: ${d.recommendation}`)),Ee.info(""),i[d.severity]++,n++}}Ee.info(""),Ee.info($e.bold(" Summary")),Ee.info($e.dim(" "+"\u2500".repeat(60))),Ee.info(` Total: ${$e.bold(String(n))} finding(s)`),Ee.info(` ${dn.critical(` ${i.critical} Critical `)} ${dn.high(` ${i.high} High `)} ${dn.medium(` ${i.medium} Medium `)} ${dn.low(` ${i.low} Low `)} ${dn.info(` ${i.info} Info `)}`);let r=i.critical>0,o=i.high>0;r||o?(Ee.info(""),Ee.error($e.red.bold(` FAIL \u2014 ${i.critical} critical, ${i.high} high issue(s) found`))):n>0?(Ee.info(""),Ee.warn($e.yellow(" PASS (with warnings) \u2014 no critical or high issues"))):(Ee.info(""),Ee.success($e.green.bold(" PASS \u2014 no issues found")))}function ac(e,t){let n=e.flatMap(r=>r.findings),i={};for(let r of Object.values(Ke))i[r]=n.filter(o=>o.severity===r).length;return{version:"1.0.0",timestamp:new Date().toISOString(),project:t.name||"unknown",projectVersion:t.version||"0.0.0",summary:{total:n.length,...i},passed:i.critical===0&&i.high===0,checks:e.map(r=>({category:r.category,label:r.label,findingCount:r.findings.length,durationMs:r.durationMs,error:r.error||null})),findings:n}}import{log as Ie,spinner as jg}from"@clack/prompts";import Se from"chalk";import _t from"fs";import Hg from"os";import un from"path";import{execSync as Gg}from"child_process";var lc=16384,Vg=1,Kg=Buffer.from([127,69,76,70]);async function cc(e){Ie.info(Se.bold.underline("16KB Page Alignment Check")),console.log("");let t=un.resolve(e);if(!_t.existsSync(t))return Ie.error(Se.red(`APK file not found: ${t}`)),!1;if(!t.endsWith(".apk"))return Ie.error(Se.red("The provided file is not an APK file.")),!1;let n=jg();n.start("Extracting and analyzing native libraries...");let i=_t.mkdtempSync(un.join(Hg.tmpdir(),"mach-16kb-"));try{try{Gg(`unzip -o -q "${t}" "lib/arm64-v8a/*.so" "lib/x86_64/*.so" -d "${i}" 2>/dev/null`,{encoding:"utf-8",maxBuffer:50*1024*1024})}catch{}let r=dc(un.join(i,"lib"));if(r.length===0)return n.stop("Analysis complete."),Ie.info(Se.yellow("No arm64-v8a or x86_64 native libraries found in the APK.")),Ie.info(Se.dim("16KB alignment check only applies to arm64-v8a and x86_64 architectures.")),!0;let o=[];for(let a of r){let d=un.relative(i,a),u=Wg(d),c=un.basename(a),p=zg(a);p!==null&&o.push({name:c,filePath:d,arch:u,align:p,compatible:p>=lc})}if(n.stop("Analysis complete."),o.length===0)return Ie.info(Se.yellow("No valid ELF shared libraries found.")),!0;let s=o.filter(a=>!a.compatible),l=o.filter(a=>a.compatible);if(Ie.info(Se.dim(`Checked ${o.length} native librar${o.length===1?"y":"ies"}
1683
+ `)),s.length>0){Ie.info(Se.red.bold(`Incompatible libraries:
1684
+ `));for(let a of s)Ie.error(Se.red(`${Se.bold(a.name)} ${Se.dim(`(${a.arch})`)}`)),Ie.info(Se.dim(` PT_LOAD alignment: 2**${Math.log2(a.align)} (${a.align} bytes, needs 2**14 = ${lc})`))}return l.length>0&&(console.log(""),Ie.success(Se.green(`${l.length} librar${l.length===1?"y":"ies"} correctly aligned (2**14 or higher).`))),console.log(""),s.length===0?(Ie.success(Se.green.bold("ELF Verification Successful. APK is 16KB compatible.")),!0):(Ie.error(Se.red.bold(`Found ${s.length} unaligned lib${s.length===1?"":"s"} (arm64-v8a/x86_64 libs need to be aligned).`)),console.log(""),Ie.info(Se.yellow("To fix this:")),Ie.info(Se.dim(" 1. Rebuild with NDK r28+ which defaults to 16KB page alignment")),Ie.info(Se.dim(" 2. Or set -DANDROID_SUPPORT_FLEXIBLE_PAGE_SIZES=ON in CMake")),Ie.info(Se.dim(" 3. Update third-party libraries that ship prebuilt .so files")),Ie.info(Se.dim(" 4. After rebuilding: zipalign -p -f -v 16 input.apk output.apk")),console.log(""),Ie.info(Se.dim("Reference: https://developer.android.com/guide/practices/page-sizes")),!1)}catch(r){return n.stop("Analysis failed."),Ie.error(Se.red(`Failed to analyze APK: ${r.message}`)),!1}finally{try{_t.rmSync(i,{recursive:!0,force:!0})}catch{}}}function zg(e){let t=_t.openSync(e,"r");try{let n=Buffer.alloc(64);if(_t.readSync(t,n,0,64,0),!n.subarray(0,4).equals(Kg))return null;let i=n[4]===2,r=n[5]===1,o=(p,f)=>r?p.readUInt16LE(f):p.readUInt16BE(f),s=(p,f)=>r?p.readUInt32LE(f):p.readUInt32BE(f),l=(p,f)=>Number(r?p.readBigUInt64LE(f):p.readBigUInt64BE(f)),a,d,u;i?(a=l(n,32),d=o(n,54),u=o(n,56)):(a=s(n,28),d=o(n,42),u=o(n,44));let c=null;for(let p=0;p<u;p++){let f=Buffer.alloc(d);if(_t.readSync(t,f,0,d,a+p*d),s(f,0)!==Vg)continue;let y;i?y=l(f,48):y=s(f,28),y>0&&(c===null||y<c)&&(c=y)}return c??0}catch{return null}finally{_t.closeSync(t)}}function dc(e){let t=[];if(!_t.existsSync(e))return t;let n=_t.readdirSync(e,{withFileTypes:!0});for(let i of n){let r=un.join(e,i.name);i.isDirectory()?t.push(...dc(r)):i.name.endsWith(".so")&&t.push(r)}return t}function Wg(e){return e.includes("arm64-v8a")?"arm64-v8a":e.includes("x86_64")?"x86_64":"unknown"}var fc=async e=>{if(Ne()||(ze.error(ot.red(`You are not logged in. Run \`${m.nameLower} login\` first.`)),process.exit(1)),e.apk){await qg(e);return}let n=process.cwd(),i=Hi.join(n,"package.json");Wn.existsSync(i)||(ze.error(ot.red("No package.json found. Run this command from a project root.")),process.exit(1));let r=JSON.parse(Wn.readFileSync(i,"utf-8")),o=!!(r.dependencies?.expo||r.devDependencies?.expo);e.json||(ze.info(ot.dim(`Project: ${r.name||"unknown"} v${r.version||"0.0.0"}`)),ze.info(ot.dim(`Type: ${o?"Expo":"Bare React Native"}`)),ze.info(""));let s={json:e.json,fix:e.fix,category:e.category,severity:e.severity,prebuild:e.prebuild},l=await oc(n,s);e.json?console.log(JSON.stringify(ac(l,r),null,2)):sc(l,e.severity);let a=l.some(u=>u.findings.some(c=>c.severity==="critical")),d=l.some(u=>u.findings.some(c=>c.severity==="high"));(a||d)&&process.exit(1)},uc=["16kb"];async function qg(e){let t=e.category?.toLowerCase();t&&!uc.includes(t)&&(ze.error(ot.red(`Unknown APK check category: "${t}"`)),ze.info(ot.dim(`Available APK checks: ${uc.join(", ")}`)),process.exit(1));let n=await Xg(e.apk);n||process.exit(1);let i=!t,r=!1;(i||t==="16kb")&&(await cc(n)||(r=!0)),r&&process.exit(1)}async function Xg(e){if(e.startsWith("build:")){let n=e.slice(6);return await Zg(n)}if(e.startsWith("http://")||e.startsWith("https://"))return await mc(e);let t=Hi.resolve(e);return Wn.existsSync(t)?t:(ze.error(ot.red(`APK file not found: ${t}`)),null)}async function Zg(e){let t=pc();t.start(`Fetching APK from build ${e}...`);try{let n=await N.get(`/build/${e}`);if(n.data.status!=="success")throw new Error(n.data.message);let i=n.data.build;if(!i)throw new Error("Build not found");let r=i.artifacts?.find(o=>o.type?o.type==="apk":o.name?.endsWith(".apk")||o.url?.includes(".apk"));return!r||!r.url?(t.stop("No APK artifact found"),ze.error(ot.red("This build does not have an APK artifact.")),ze.info(ot.dim("Make sure the build produced an APK (not just an AAB).")),null):(t.stop(`Found build: ${i.buildId||e}`),await mc(r.url))}catch(n){return t.stop("Failed to fetch build"),ze.error(ot.red(n.message)),null}}async function mc(e){let t=pc();t.start("Downloading APK...");try{let n=Wn.mkdtempSync(Hi.join(Jg.tmpdir(),`${m.nameLower}-audit-`)),i=Hi.join(n,"app.apk"),r=await Yg.get(e,{responseType:"arraybuffer"});Wn.writeFileSync(i,r.data);let o=(r.data.length/(1024*1024)).toFixed(1);return t.stop(`Downloaded APK (${o} MB)`),i}catch(n){return t.stop("Download failed"),ze.error(ot.red(`Failed to download APK: ${n.message}`)),null}}var th=console.log;console.log=()=>{};eh();console.log=th;me(ce.bgCyan.black(m.cliTag("Production Build Orchestrator")));var ih=nh(import.meta.url),rh=ih("../package.json"),mo=(e,t=[])=>t.concat(e),Q=new Qg;Q.name(m.nameLower).description(`${m.name} CLI: Powerful Cloud Infrastructure Tools`).version(rh.version).option("-y, --yes","Automatically answer yes to all prompts",!1).option("--quiet","Suppress non-essential output",!1);Q.command("agent").description("Manage local device discovery agent for the Install Hub (port 7070)").argument("[action]","start, run, install, status, restart, stop, or uninstall","start").action(async e=>{await Ma(e)});Q.command("host").description("Setup AWS S3 static hosting and CloudFront").action(async()=>{me(ce.bgCyan.black(m.cliTag("Hosting"))),await Po()});Q.command("sitemap").description("Generate sitemap.xml from Expo Router app structure").option("-o, --output <path>","Output path for sitemap.xml","./public/sitemap.xml").action(async e=>{me(ce.bgCyan.black(m.cliTag("Sitemap Generator"))),await ko(e)});Q.command("build").description("Run a build on a cloud provider (AWS Spot Instances)").argument("[platform]","Target platform (android, ios)").option("--platform <os>","Target platform alias (android, ios) [Optional]").option("--repo <url>","Git Repository URL").option("--branch <name>","Git Branch").option("--ami <id>","AMI ID").option("--bucket <name>","S3 Bucket for artifacts").option("--region <region>","AWS Region").option("--aws-profile <name>","AWS Credentials Profile").option("-p, --build-profile <name>","Build Profile (e.g. production, staging)").option("--profile <name>","Build Profile (alias for --build-profile)").option("--dry-run","Generate User Data script without launching").option("--keep-instance","Do not terminate the instance after build").option("--subnet <id>","VPC Subnet ID to launch the instance in").option("--security-group <id>","VPC Security Group ID to use").option("--ssh-host <host>","Remote host for iOS build (SSH)").option("--ssh-user <user>","SSH username for remote host").option("--ssh-key <path>","Path to private SSH key for remote host").option("--ios-scheme <scheme>","iOS Scheme to build").option("--ios-team-id <id>","Apple Development Team ID").option("--ios-configuration <config>","Xcode configuration (Release/Debug)").option("--ios-export-method <method>","Export method (ad-hoc, app-store, development, enterprise)").option("--ios-api-key-id <id>","App Store Connect API Key ID").option("--ios-api-key-issuer <id>","App Store Connect API Key Issuer ID").option("--ios-api-key-path <path>","Path to App Store Connect API Key (.p8) file").option("--simulator","Build for iOS Simulator (no signing required)").addOption(new We("--build-id <id>","Internal build ID").hideHelp()).addOption(new We("--project-id <id>","Internal project ID").hideHelp()).addOption(new We("--fail-only","Internal: mark an existing build failed").hideHelp()).addOption(new We("--error <message>","Internal failure message").hideHelp()).option("--local","Run build on local machine").option("--auto-version","Automatically fetch and increment Android versionCode or iOS buildNumber from the store").option("--auto-submit","Submit this build after it completes successfully").option("--submit-track <track>","Google Play track to use with --auto-submit").option("--submit-release-status <status>","Google Play release status to use with --auto-submit").option("--submit-rollout <fraction>","Google Play staged rollout fraction to use with --auto-submit").option("--submit-changes-not-sent-for-review","Commit Google Play changes without automatically sending them for review when using --auto-submit").option("--submit-credential-id <id>","Service credential ID to use with --auto-submit").option("--submit-json-output <path>","Write auto-submit metadata JSON to a file for CI/CD").option("--verbose","Enable verbose logging").option("--json-output <path>","Write build metadata JSON to a file for CI/CD").option("--maestro","Queue a managed Maestro test run after a successful build").option("--maestro-flows <path>","Maestro flow file or directory (default: .maestro)").option("--maestro-device <device>","Managed Maestro device profile").option("--maestro-retries <n>","Retries for the Maestro run","1").option("--maestro-record","Enable screen recording where supported").option("--maestro-use-build-source","Use Maestro flows from the build source snapshot instead of uploading local flows").option("--maestro-env <name>","Forward an environment variable to the managed Maestro runner; repeat or comma-separate names",mo,[]).option("-y, --yes","Automatically answer yes to all prompts",!1).option("--quiet","Suppress non-essential output",!1).action(async(e,t)=>{let n=Q.opts();t.yes=t.yes||n.yes,t.quiet=t.quiet||n.quiet,t.platform=e||t.platform,t.buildProfile=t.profile||t.buildProfile,t.quiet||me(ce.bgCyan.black(m.cliTag("Cloud Build"))),await ci(t)});Q.command("maestro").description("Run Maestro tests locally or with the managed Mach runner").option("--platform <os>","Target platform (android/ios)").option("-p, --profile <name>","Build profile to resolve when using --latest","production").option("--latest","Use the latest successful build for the platform/profile").option("--build-id <id>","Use a specific Mach build ID").option("--build-url <url>","Use a Mach build URL").option("--artifact-url <url>","Use a direct APK or iOS simulator app artifact URL").option("--local","Run Maestro on a connected local emulator/device instead of the managed runner").option("--maestro-flows <path>","Maestro flow file or directory (default: .maestro)").option("--maestro-device <device>","Managed Maestro device profile").option("--maestro-retries <n>","Retries for the Maestro run","1").option("--maestro-record","Enable screen recording where supported").option("--maestro-use-build-source","Use Maestro flows from the build source snapshot instead of uploading local flows").option("--maestro-env <name>","Forward an environment variable to the managed Maestro runner; repeat or comma-separate names",mo,[]).option("--wait","Wait for managed Maestro completion and exit non-zero on failure").option("--wait-timeout <minutes>","Maximum minutes to wait for managed Maestro completion","60").option("--wait-interval <seconds>","Polling interval while waiting for managed Maestro completion","15").option("--json-output <path>","Write test run metadata JSON to a file for CI/CD").addOption(new We("--local-runner","Internal: execute a managed Maestro run on this machine").hideHelp()).addOption(new We("--test-run-id <id>","Internal test run ID").hideHelp()).addOption(new We("--project-id <id>","Internal project ID").hideHelp()).addOption(new We("--runner-token <token>","Internal runner token").hideHelp()).action(async e=>{me(ce.bgCyan.black(m.cliTag("Maestro Testing"))),await Es(e)});var pn=e=>e.option("--platform <os>","Target platform: ios, android, or all","all").option("--channel <name>","OTA channel (for example: production, staging)").option("--branch <name>","Alias for --channel").option("--runtime-version <version>","Runtime version override").option("--message <text>","Release note/message for this OTA update").option("--framework <name>","Framework override: expo or react-native").option("--engine <name>","OTA engine override: expo-updates or mach-react-native").option("--url <url>","Mach OTA update URL override").option("--install-plugin","Install @radhya/mach locally for the Expo config plugin").option("--skip-install","Do not install local Expo plugin dependency").option("--update-id <id>","OTA update id for rollback/promote").option("--json","Print JSON output"),fn=Q.command("ota").description("Setup, publish, verify, and manage Mach OTA updates");pn(fn.command("setup").description("Configure OTA for this project")).action(async e=>{let t=Q.opts();me(ce.bgCyan.black(m.cliTag("OTA Setup"))),await dt("setup",{...e,yes:e.yes||t.yes})});pn(fn.command("publish").description("Publish an OTA update")).action(async e=>{let t=Q.opts();me(ce.bgCyan.black(m.cliTag("OTA Publish"))),await dt("publish",{...e,yes:e.yes||t.yes})});pn(fn.command("verify").description("Verify OTA configuration")).action(async e=>{let t=Q.opts();me(ce.bgCyan.black(m.cliTag("OTA Verify"))),await dt("verify",{...e,yes:e.yes||t.yes})});pn(fn.command("list").description("List OTA updates for the linked project")).action(async e=>{let t=Q.opts();me(ce.bgCyan.black(m.cliTag("OTA Updates"))),await dt("list",{...e,yes:e.yes||t.yes})});pn(fn.command("rollback").description("Roll back an OTA update")).action(async e=>{let t=Q.opts();me(ce.bgCyan.black(m.cliTag("OTA Rollback"))),await dt("rollback",{...e,yes:e.yes||t.yes})});pn(fn.command("promote").description("Promote an OTA update")).action(async e=>{let t=Q.opts();me(ce.bgCyan.black(m.cliTag("OTA Promote"))),await dt("promote",{...e,yes:e.yes||t.yes})});Q.command("update").description("Deprecated alias for `mach ota publish`").option("--branch <name>","Channel or Branch to deploy to (e.g., production)","production").option("--platform <os>","Target platform: ios, android, or all","all").option("--runtime-version <version>","Runtime version override").option("--message <text>","Release note/message for this OTA update").action(async e=>{me(ce.bgCyan.black(m.cliTag("OTA Update"))),await ol(e)});Q.command("submit").description("Automated Store Submission (App Store / Google Play)").option("--platform <os>","Target platform (ios/android)").option("-p, --profile <name>","Build/submission profile to submit from (e.g. production, preprod)").option("--track <track>","Google Play Track (internal, alpha, beta, production)").option("--release-status <status>","Google Play release status (completed, draft, halted, inProgress)").option("--rollout <fraction>","Google Play staged rollout fraction for inProgress releases (example: 0.1)").option("--changes-not-sent-for-review","Commit Google Play changes without automatically sending them for review").option("--ssh-host <host>","Remote macOS host for iOS submission").option("--ssh-user <user>","SSH username for remote iOS submission").option("--ssh-key <path>","Path to private SSH key for remote iOS submission").option("--credential-id <id>","Service credential ID to use when multiple submission credentials exist").option("--local","Run submission on this machine (internal runner mode for iOS)").addOption(new We("--submit-id <id>","Internal submission ID").hideHelp()).addOption(new We("--project-id <id>","Internal project ID").hideHelp()).addOption(new We("--package-name <name>","Internal Android package name").hideHelp()).addOption(new We("--bundle-id <id>","Internal iOS bundle identifier").hideHelp()).option("--json-output <path>","Write submission metadata JSON to a file for CI/CD").option("--latest","Use the latest successful build for submission").option("--build-id <id>","Use a specific build ID for submission").action(async e=>{let t=Q.opts();e.quiet=e.quiet||t.quiet,e.yes=e.yes||t.yes,me(ce.bgCyan.black(m.cliTag("Store Submission"))),await ii(e)});Q.command("login").description(`Login to ${m.name} Dashboard`).action(async()=>{me(ce.bgCyan.black(m.cliTag("Login"))),await ja()});Q.command("logout").description(`Logout from ${m.name} on this machine`).action(async()=>{me(ce.bgCyan.black(m.cliTag("Logout"))),await Ha()});Q.command("link").description(`Link local directory to a ${m.name} Project`).action(async()=>{me(ce.bgCyan.black(m.cliTag("Link Project"))),await Va()});Q.command("me").description("Display currently logged in user details").action(async()=>{await al()});Q.command("init").description(`Create a new ${m.name} Project`).action(async()=>{me(ce.bgCyan.black(m.cliTag("Init Project"))),await Ka()});Q.command("env").description("Manage Environment Variables").argument("<action>","Action to perform: set, list, pull, download, or export").argument("[args...]","Key=Value pairs for set action").option("-e, --environment <name>","Environment to pull/download","development").option("-o, --out <file>","Output file for pull/download",".env.local").option("--overwrite","Overwrite output file if it already exists").action(async(e,t,n)=>{me(ce.bgCyan.black(m.cliTag("Env Manager"))),await Wa(e,t,n)});Q.command("start").description("Start the development server (Metro)").option("-p, --build-profile <name>","Build profile (e.g. development, staging)","development").option("--tunnel","Use ngrok tunnel").option("--lan","Use LAN IP").option("--localhost","Use localhost").option("-c, --clear","Clear Metro cache").option("--port <number>","Port to listen on").option("--ios","Start on iOS").option("--android","Start on Android").option("--web","Start on Web").action(async e=>{me(ce.bgCyan.black(m.cliTag("Dev Server"))),await cl(e)});Q.command("config").description("Show resolved configuration for a profile").option("-p, --profile <name>","Build profile to resolve","development").option("--json","Output as JSON").action(async e=>{await dl(e)});var hc=Q.command("deeplink").description("Configure and verify app links, universal links, and URI schemes");hc.command("setup").description("Generate deep link config, hosted association files, and Expo plugin support").option("--domain <domain>","Associated domain, e.g. app.example.com").option("--base-url <url>","Base URL, e.g. https://app.example.com").option("-p, --profile <name>","Profile used for build/submit overrides").option("--platform <platform>","ios, android, or all").option("--framework <framework>","expo or react-native").option("--scheme <scheme>","URI scheme, e.g. myapp").option("--ios-bundle-id <id>","iOS bundle identifier").option("--android-package <name>","Android package name").option("--apple-team-id <id>","Apple Developer Team ID").option("--app-store-id <id>","App Store app ID for Smart App Banner").option("--android-fingerprint <sha256>","Android SHA256 signing certificate fingerprint; repeatable",mo,[]).option("--output <dir>","Directory for hosted files, e.g. public or deep-links").option("--install-plugin","Install @radhya/mach locally so Expo can use the packaged config plugin").option("--no-install-plugin","Do not install @radhya/mach for Expo projects; use the local plugin fallback if the package is missing").option("-y, --yes","Automatically answer yes to prompts",!1).action(async e=>{let t=Q.opts();e.yes=e.yes||t.yes,me(ce.bgCyan.black(m.cliTag("Deep Links"))),await kl(e)});hc.command("verify").description("Verify local and optionally live deep link configuration").option("-p, --profile <name>","Profile used for build/submit overrides").option("--live","Check hosted files over HTTPS").option("--android-device","Print Android device verification commands").action(async e=>{me(ce.bgCyan.black(m.cliTag("Deep Link Verify"))),await Tl(e)});Q.command("credentials").description("Unified, interactive credential management (iOS/Android)").option("-p, --profile <name>","Build profile (production, staging, development)").option("--force","Force recreate certificates (nuke existing on Apple Portal)",!1).action(async e=>{let{credentialsMainCommand:t}=await import("./credentials-STB7QAPB.js");await t(e)});Q.command("credentials:setup").description("Automated credential provisioning (iOS/Android) [Legacy]").requiredOption("--platform <os>","Platform: ios or android").option("--profile <name>","Build profile (production, staging, development)").option("--bundle-id <id>","Bundle ID / Package Name (optional, auto-detected)").option("--team-id <id>","Apple Team ID (iOS only)").option("--key-alias <alias>","Android keystore alias (optional, auto-generated)").option("--aws-profile <name>","AWS Credentials Profile (for S3 storage)").option("--force","Force recreate certificates (nuke existing on Apple Portal)",!1).action(async e=>{me(ce.bgCyan.black(m.cliTag("Credentials Setup"))),await gn(e),gc(ce.green("Done!"))});Q.command("credentials:service").description("Upload Service Credentials (ASC API Key / Google Service JSON) [Legacy]").requiredOption("--platform <os>","Platform: ios or android").option("--file <path>","Path to credential file (.p8 or .json)").option("--issuer-id <id>","ASC API Key Issuer ID (iOS only)").option("--key-id <id>","ASC API Key ID (iOS only)").option("--bundle-id <id>","Bundle identifier / Android package name to attach this service credential to").option("--package-name <name>","Android package name to attach this service credential to").option("-p, --profile <name>","Build profile to resolve package/bundle identifier from config").action(async e=>{me(ce.bgCyan.black(m.cliTag("Service Credentials"))),await vo(e),gc(ce.green("Done!"))});var go=Q.command("device").description("Manage registered iOS test devices");go.command("register").description("Register a connected iOS device or enter UDID manually").option("--udid <udid>","Device UDID (skip auto-detection)").option("--name <name>","Device name").option("--team-id <id>","Apple Developer Team ID for this device").action(async e=>{await ki("register",e)});go.command("list").description("List all registered devices").option("--team-id <id>","Filter by Apple Developer Team ID").action(async e=>{await ki("list",e)});go.command("remove").description("Remove a registered device").option("--udid <udid>","Device UDID to remove").option("--team-id <id>","Apple Developer Team ID for this device").action(async e=>{await ki("remove",e)});Q.command("audit").description("Run automated security audit on the project or APK").option("--apk <path>","Path to APK file (runs APK diagnostics like 16KB alignment)").option("--json","Output results as JSON (for CI/CD)").option("--fix","Auto-apply fixes where possible").option("--category <name>","Run only a specific check category (e.g. 16kb, permissions, secrets)").option("--severity <level>","Minimum severity to display (critical, high, medium, low, info)").option("--prebuild","Run expo prebuild for deeper manifest/plist analysis").action(async e=>{me(ce.bgCyan.black(m.cliTag(e.apk?"APK Audit":"Security Audit"))),await fc(e)});var oh=new Set(["login","logout","agent"]);Q.hook("preAction",(e,t)=>{let n=t.name(),i=t.opts?.()||{};n==="maestro"&&(i.local||i.localRunner)||t.parent?.name()!=="deeplink"&&(oh.has(n)||Jt())});Q.on("command:*",()=>{console.error(`Invalid command: %s
1685
+ See --help for a list of available commands.`,Q.args.join(" ")),process.exit(1)});process.argv.slice(2).length||Q.help();Q.parse(process.argv);