@radhya/mach 2.0.44 → 2.1.0

package/docs/push.md

@@ -0,0 +1,76 @@
+# MACH Push
+
+MACH Push sends directly through APNs and FCM from MACH's SQS-triggered
+delivery Lambda. Notification content is transient; MACH stores encrypted
+device/provider credentials and daily aggregate counters, not message history.
+
+## Setup
+
+Link the mobile project, then run the complete setup:
+
+```bash
+mach link
+mach push setup
+```
+
+`push setup` detects Expo, bare React Native, or Flutter; reads the native app
+identifiers; creates or reuses the matching MACH Push app; installs the mobile
+SDK; and starts permission, registration, and notification listeners from the
+application entry point.
+
+The command writes public SDK values to a generated file. It creates a separate
+application-owned callback file for foreground notifications, notification
+taps, registration, permission changes, and errors. Running setup again
+refreshes generated configuration but never overwrites those callbacks.
+
+Expo setup also installs and wires `@radhya/mach/expo-plugin`. The plugin adds
+the APNs entitlement, Android notification permission, Firebase config path,
+and public MACH Push configuration during prebuild. Expo Go cannot load custom
+native modules, so create a new development or production build after setup.
+
+Use `mach push init` only when you intentionally want to create the server-side
+push app without installing or wiring a mobile SDK.
+
+## Provider credentials
+
+```bash
+mach push credentials apns \
+  --file AuthKey_ABC123DEFG.p8 \
+  --team-id ABC123DEFG \
+  --key-id ABC123DEFG \
+  --environment development
+
+mach push credentials fcm \
+  --file firebase-service-account.json \
+  --environment production
+```
+
+Provider credentials are encrypted and never returned by the API.
+
+## Send
+
+```bash
+mach push send \
+  --user user_123 \
+  --title "Invoice paid" \
+  --body "Invoice INV-1042 was paid."
+
+mach push send \
+  --all \
+  --platform android \
+  --title "New release" \
+  --body "Version 4.2 is ready." \
+  --collapse-key release
+```
+
+Choose exactly one target kind: repeatable `--token`, repeatable `--user`, or
+`--all`.
+
+## Aggregate status
+
+```bash
+mach push status --days 30
+```
+
+`Provider accepted` means APNs/FCM accepted the request; it is not an open or
+device-display receipt.

package/expo-plugin/index.js

@@ -112,9 +112,24 @@ const resolveOta = config => {
   return { ...ota, enabled: Boolean(url), projectId, engine, url, runtimeVersion, runtimeVersionPolicy, channel }
 }
 
+const resolvePush = config => {
+  const machConfig = readMachConfig(config)
+  const push = machConfig.push || {}
+  return {
+    ...push,
+    enabled: push.enabled !== false && Boolean(push.appId && push.publishableKey),
+    projectId: machConfig.projectId,
+    apiUrl: first(process.env.MACH_PUSH_API_URL, push.apiUrl) || 'https://mach-api.securejs.in',
+    environment: nonEmpty(push.environment) || 'production',
+    iosEnvironment: nonEmpty(push.iosEnvironment) ||
+      (push.environment === 'development' ? 'development' : 'production'),
+  }
+}
+
 module.exports = function withMachDeepLinks(config) {
   const deepLinks = resolveDeepLinks(config)
   const ota = resolveOta(config)
+  const push = resolvePush(config)
 
   config.extra = { ...(config.extra || {}) }
 
@@ -148,6 +163,32 @@ module.exports = function withMachDeepLinks(config) {
     }
   }
 
+  if (push.enabled) {
+    config.extra.mach = {
+      ...(config.extra.mach || {}),
+      push: {
+        projectId: push.projectId,
+        appId: push.appId,
+        publishableKey: push.publishableKey,
+        apiUrl: push.apiUrl,
+        environment: push.environment,
+      },
+    }
+    config.ios = config.ios || {}
+    config.ios.entitlements = {
+      ...(config.ios.entitlements || {}),
+      'aps-environment': push.iosEnvironment,
+    }
+    config.android = config.android || {}
+    config.android.permissions = unique([
+      ...(config.android.permissions || []),
+      'android.permission.POST_NOTIFICATIONS',
+    ])
+    if (push.googleServicesFile) {
+      config.android.googleServicesFile = push.googleServicesFile
+    }
+  }
+
   if (!deepLinks.baseUrl || !deepLinks.domain) return config
 
   config.scheme = deepLinks.scheme

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@radhya/mach",
-  "version": "2.0.44",
+  "version": "2.1.0",
   "description": "Mach CLI: Cloud Build Orchestrator for React Native & Expo",
   "main": "dist/index.js",
   "type": "module",
@@ -12,11 +12,13 @@
     "expo-plugin/",
     "docs/frameworks/",
     "docs/deep-links.md",
-    "docs/ota.md"
+    "docs/ota.md",
+    "docs/push.md"
   ],
   "scripts": {
     "build": "tsup src/index.ts src/commands/isolated-upload.ts --format esm --clean --minify --dts",
-    "test": "tsx --test src/**/*.test.ts && node --test tests/*.test.cjs",
+    "test": "npm run typecheck:ota && tsx --test src/**/*.test.ts && node --test tests/*.test.cjs",
+    "typecheck:ota": "tsc --noEmit --skipLibCheck --moduleResolution Bundler --module ESNext --target ES2022 --esModuleInterop --noImplicitAny false src/commands/ota.ts",
     "start": "node dist/index.js",
     "dev": "tsx src/index.ts",
     "release": "semantic-release"