@radhya/mach 2.1.11 → 2.2.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/dist/index.js CHANGED
@@ -1,12 +1,12 @@
1
1
  #!/usr/bin/env node
2
- import{A as et,B as So,C as Eo,D as Bi,E as Io,F as wo,H as jt,a as ft,b as fo,c as mo,d as Li,e as go,f as ho,g as Cn,h as Tn,i as kn,j as Mi,k as Ui,l as Nn,m as xn,n as yo,o as Fi,p as It,q as wt,r as $e,s as bo,t as mt,u as ce,v as Ie,w as Ln,x as Mn,y as vt,z as Ao}from"./chunk-JDJGWCUD.js";import{a as m,b as uo,c as be,d as po,e as Et,f as Qe,g as He,h as $}from"./chunk-S64YFTRR.js";import{Command as eg,Option as Te}from"commander";import{configDotenv as tg}from"dotenv";import{intro as X,outro as nd}from"@clack/prompts";import J from"chalk";import{text as vo,confirm as ad,spinner as ld,isCancel as ji,cancel as Ht,note as dd,outro as cd}from"@clack/prompts";import Gt from"chalk";async function _o(){try{let e=await vo({message:"Enter Bucket Name:",placeholder:"e.g. my-app-dev",validate(r){if(r.length===0)return"Bucket name is required"}});ji(e)&&(Ht("Operation cancelled."),process.exit(0));let t=await vo({message:"Enter Region:",initialValue:"ap-south-1"});ji(t)&&(Ht("Operation cancelled."),process.exit(0));let n=await ad({message:"Do you want to create a CloudFront Distribution for this bucket?",initialValue:!0});ji(n)&&(Ht("Operation cancelled."),process.exit(0));let i=ld();i.start("Setting up hosting infrastructure...");try{let r=await $.post("/hosting/setup",{bucketName:e,region:t,createCloudFront:n});if(r.data.status!=="success")throw new Error(r.data.message||"Hosting setup failed");i.stop("Hosting setup complete!");let o=r.data,s=`Bucket Name: ${Gt.cyan(o.bucketName)}
2
+ import{A as Mn,B as _t,C as wo,D as Qe,E as $o,F as vo,G as Vi,H as Ro,I as Oo,K as Ht,a as pt,b as Ao,c as yo,d as Ui,e as So,f as bo,g as Cn,h as Tn,i as kn,j as Fi,k as Bi,l as Nn,m as xn,n as Eo,o as Hi,p as ji,q as Io,r as Gi,s as Et,t as It,u as Re,v as _o,w as ft,x as de,y as we,z as Ln}from"./chunk-6OEZPCKM.js";import{a as m,b as go,c as Ae,d as ho,e as bt,f as Ze,g as je,h as v}from"./chunk-S64YFTRR.js";import{Command as lg,Option as Ne}from"commander";import{configDotenv as dg}from"dotenv";import{intro as X,outro as cd}from"@clack/prompts";import q from"chalk";import{text as Po,confirm as gd,spinner as hd,isCancel as zi,cancel as jt,note as Ad,outro as yd}from"@clack/prompts";import Gt from"chalk";async function Do(){try{let e=await Po({message:"Enter Bucket Name:",placeholder:"e.g. my-app-dev",validate(r){if(r.length===0)return"Bucket name is required"}});zi(e)&&(jt("Operation cancelled."),process.exit(0));let t=await Po({message:"Enter Region:",initialValue:"ap-south-1"});zi(t)&&(jt("Operation cancelled."),process.exit(0));let n=await gd({message:"Do you want to create a CloudFront Distribution for this bucket?",initialValue:!0});zi(n)&&(jt("Operation cancelled."),process.exit(0));let i=hd();i.start("Setting up hosting infrastructure...");try{let r=await v.post("/hosting/setup",{bucketName:e,region:t,createCloudFront:n});if(r.data.status!=="success")throw new Error(r.data.message||"Hosting setup failed");i.stop("Hosting setup complete!");let o=r.data,s=`Bucket Name: ${Gt.cyan(o.bucketName)}
3
3
  `;s+=`Region: ${Gt.cyan(o.region)}
4
4
  `,s+=`S3 Website URL: ${Gt.blue(o.s3WebsiteUrl)}`,o.cloudFrontId&&(s+=`
5
5
 
6
6
  CloudFront ID: ${Gt.cyan(o.cloudFrontId)}`,s+=`
7
- CloudFront URL: ${Gt.blue(o.cloudFrontUrl)}`),dd(s,"Setup Complete!"),cd("You are all set!")}catch(r){i.stop("Setup failed"),Ht(`Error: ${r.response?.data?.message||r.message}`)}}catch(e){Ht(`An unexpected error occurred: ${e.message}`)}}import{readdir as ud,writeFile as pd,access as fd,mkdir as md}from"fs/promises";import{join as $o}from"path";import{spinner as gd,text as Ro,isCancel as Oo,cancel as Hi,note as hd,outro as yd}from"@clack/prompts";import bd from"chalk";async function Ad(){let e=["./app","./src/app"];for(let t of e)try{return await fd(t),t}catch{}return null}async function Do(e){try{let n=await Ad()||"./app",i=await Ro({message:"Enter path to your app directory:",placeholder:n,initialValue:n,validate(c){if(c.length===0)return"Path is required"}});Oo(i)&&(Hi("Operation cancelled."),process.exit(0));let r=await Ro({message:"Enter your website base URL:",placeholder:"https://example.com",validate(c){if(c.length===0)return"Base URL is required";if(!c.startsWith("http"))return"URL must start with http:// or https://"}});Oo(r)&&(Hi("Operation cancelled."),process.exit(0));let o=gd();o.start("Scanning app directory for routes...");let s=await Po(i);o.stop(`Found ${s.length} routes`);let a=Sd(s,r),l=e.output||"./public/sitemap.xml";o.start(`Writing sitemap to ${l}...`);let d=l.substring(0,l.lastIndexOf("/"));if(d)try{await md(d,{recursive:!0})}catch{}await pd(l,a,"utf-8"),o.stop("Sitemap generated successfully!"),hd(`Routes included:
7
+ CloudFront URL: ${Gt.blue(o.cloudFrontUrl)}`),Ad(s,"Setup Complete!"),yd("You are all set!")}catch(r){i.stop("Setup failed"),jt(`Error: ${r.response?.data?.message||r.message}`)}}catch(e){jt(`An unexpected error occurred: ${e.message}`)}}import{readdir as Sd,writeFile as bd,access as Ed,mkdir as Id}from"fs/promises";import{join as Co}from"path";import{spinner as _d,text as To,isCancel as ko,cancel as Ki,note as wd,outro as $d}from"@clack/prompts";import vd from"chalk";async function Rd(){let e=["./app","./src/app"];for(let t of e)try{return await Ed(t),t}catch{}return null}async function No(e){try{let n=await Rd()||"./app",i=await To({message:"Enter path to your app directory:",placeholder:n,initialValue:n,validate(c){if(c.length===0)return"Path is required"}});ko(i)&&(Ki("Operation cancelled."),process.exit(0));let r=await To({message:"Enter your website base URL:",placeholder:"https://example.com",validate(c){if(c.length===0)return"Base URL is required";if(!c.startsWith("http"))return"URL must start with http:// or https://"}});ko(r)&&(Ki("Operation cancelled."),process.exit(0));let o=_d();o.start("Scanning app directory for routes...");let s=await xo(i);o.stop(`Found ${s.length} routes`);let a=Od(s,r),l=e.output||"./public/sitemap.xml";o.start(`Writing sitemap to ${l}...`);let d=l.substring(0,l.lastIndexOf("/"));if(d)try{await Id(d,{recursive:!0})}catch{}await bd(l,a,"utf-8"),o.stop("Sitemap generated successfully!"),wd(`Routes included:
8
8
  ${s.map(c=>` \u2022 ${c.path}`).join(`
9
- `)}`,"Sitemap Summary"),yd(`Sitemap saved to ${bd.cyan(l)}`)}catch(t){Hi(`An error occurred: ${t.message}`)}}async function Po(e,t=""){let n=[];try{let i=await ud(e,{withFileTypes:!0});for(let r of i){let o=$o(e,r.name);if(!(r.name.startsWith("_")||r.name.startsWith("."))){if(r.isDirectory()){let s=await Po(o,$o(t,r.name));n.push(...s)}else if(r.isFile()){if(r.name==="index.tsx"||r.name==="index.ts"||r.name==="index.jsx"||r.name==="index.js"){let s=t===""?"/":`/${t}`;n.push({path:s,file:o})}else if(r.name.match(/\.(tsx|ts|jsx|js)$/)&&!r.name.includes("_layout")&&!r.name.includes("+")){let s=r.name.replace(/\.(tsx|ts|jsx|js)$/,""),a=`/${t}/${s}`.replace(/\/+/g,"/");n.push({path:a,file:o})}}}}}catch(i){throw new Error(`Failed to scan directory ${e}: ${i.message}`)}return n}function Sd(e,t){let n=new Date().toISOString().split("T")[0];return`<?xml version="1.0" encoding="UTF-8"?>
9
+ `)}`,"Sitemap Summary"),$d(`Sitemap saved to ${vd.cyan(l)}`)}catch(t){Ki(`An error occurred: ${t.message}`)}}async function xo(e,t=""){let n=[];try{let i=await Sd(e,{withFileTypes:!0});for(let r of i){let o=Co(e,r.name);if(!(r.name.startsWith("_")||r.name.startsWith("."))){if(r.isDirectory()){let s=await xo(o,Co(t,r.name));n.push(...s)}else if(r.isFile()){if(r.name==="index.tsx"||r.name==="index.ts"||r.name==="index.jsx"||r.name==="index.js"){let s=t===""?"/":`/${t}`;n.push({path:s,file:o})}else if(r.name.match(/\.(tsx|ts|jsx|js)$/)&&!r.name.includes("_layout")&&!r.name.includes("+")){let s=r.name.replace(/\.(tsx|ts|jsx|js)$/,""),a=`/${t}/${s}`.replace(/\/+/g,"/");n.push({path:a,file:o})}}}}}catch(i){throw new Error(`Failed to scan directory ${e}: ${i.message}`)}return n}function Od(e,t){let n=new Date().toISOString().split("T")[0];return`<?xml version="1.0" encoding="UTF-8"?>
10
10
  <urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
11
11
  ${e.map(r=>{let o=r.path;return o=o.replace(/\/\([^)]+\)/g,""),o=o.replace(/\/\[.*?\]/g,"/:id"),o=o.replace(/\/+/g,"/"),o===""&&(o="/"),` <url>
12
12
  <loc>${t}${o}</loc>
@@ -15,7 +15,7 @@ ${e.map(r=>{let o=r.path;return o=o.replace(/\/\([^)]+\)/g,""),o=o.replace(/\/\[
15
15
  <priority>0.8</priority>
16
16
  </url>`}).join(`
17
17
  `)}
18
- </urlset>`}import{randomUUID as Su}from"crypto";import ae from"path";import Kn from"axios";import Eu from"os";import{spinner as Ar,select as _s,confirm as $s,isCancel as Wn,cancel as Rs,log as S}from"@clack/prompts";import I from"chalk";import ee from"fs";import{execSync as Os}from"child_process";import Ds from"adm-zip";import{spinner as Ed,log as Un}from"@clack/prompts";import To from"chalk";import ko from"fs";import No from"path";var Co=`#!/bin/bash
18
+ </urlset>`}import{randomUUID as Cu}from"crypto";import be from"path";import Wn from"axios";import Tu from"os";import{spinner as _r,select as xs,confirm as Ls,isCancel as Yn,cancel as Ms,log as b}from"@clack/prompts";import E from"chalk";import ie from"fs";import{execSync as Us}from"child_process";import Fs from"adm-zip";import{spinner as Pd,log as Un}from"@clack/prompts";import Mo from"chalk";import Uo from"fs";import Fo from"path";var Lo=`#!/bin/bash
19
19
  # --- Mach Cloud Build Script (Android) ---
20
20
  # All S3 operations use presigned URLs via curl \u2014 zero AWS credentials on instance.
21
21
  BUILD_ID="{{BUILD_ID}}"
@@ -228,8 +228,27 @@ cd /home/ubuntu/build
228
228
  unzip -q -o /tmp/source.zip
229
229
  rm -f /tmp/source.zip
230
230
 
231
+ export MACH_SOURCE_ROOT="/home/ubuntu/build"
232
+ export MACH_APP_DIRECTORY="\${MACH_APP_DIRECTORY:-.}"
233
+ case "$MACH_APP_DIRECTORY" in
234
+ ""|".") MACH_APP_DIRECTORY="." ;;
235
+ /*|../*|*/../*|*/..) echo "[ERROR] Invalid MACH_APP_DIRECTORY: $MACH_APP_DIRECTORY"; exit 1 ;;
236
+ esac
237
+ if [ "$MACH_APP_DIRECTORY" = "." ]; then
238
+ export MACH_APP_ROOT="$MACH_SOURCE_ROOT"
239
+ else
240
+ export MACH_APP_ROOT="$MACH_SOURCE_ROOT/$MACH_APP_DIRECTORY"
241
+ fi
242
+ if [ ! -d "$MACH_APP_ROOT" ] || [ ! -f "$MACH_APP_ROOT/package.json" ]; then
243
+ echo "[ERROR] appDirectory '$MACH_APP_DIRECTORY' is missing or has no package.json"
244
+ report_status "failed" "Invalid appDirectory: $MACH_APP_DIRECTORY"
245
+ exit 1
246
+ fi
247
+ export PATH="$MACH_APP_ROOT/node_modules/.bin:$MACH_SOURCE_ROOT/node_modules/.bin:$PATH"
248
+ echo "[LAYOUT] sourceRoot=$MACH_SOURCE_ROOT appDirectory=$MACH_APP_DIRECTORY"
249
+
231
250
  SOURCE_HAS_ANDROID_PROJECT=false
232
- if [ -f "/home/ubuntu/build/android/app/build.gradle" ] || [ -f "/home/ubuntu/build/android/app/build.gradle.kts" ]; then
251
+ if [ -f "$MACH_APP_ROOT/android/app/build.gradle" ] || [ -f "$MACH_APP_ROOT/android/app/build.gradle.kts" ]; then
233
252
  SOURCE_HAS_ANDROID_PROJECT=true
234
253
  fi
235
254
 
@@ -249,9 +268,9 @@ fi
249
268
 
250
269
  # Older android/ caches may include Gradle outputs and pre-bundled JS from a
251
270
  # different build profile. Keep the native project, but force fresh outputs.
252
- if [ -d "/home/ubuntu/build/android" ]; then
271
+ if [ -d "$MACH_APP_ROOT/android" ]; then
253
272
  echo "[CACHE] Pruning restored android build outputs..."
254
- find /home/ubuntu/build/android -type d \\( -name build -o -name .cxx \\) -prune -exec rm -rf {} + 2>/dev/null || true
273
+ find "$MACH_APP_ROOT/android" -type d \\( -name build -o -name .cxx \\) -prune -exec rm -rf {} + 2>/dev/null || true
255
274
  fi
256
275
 
257
276
  clear_js_transform_caches() {
@@ -441,6 +460,10 @@ if [ $INSTALL_EXIT_CODE -ne 0 ]; then
441
460
  fi
442
461
  clear_js_transform_caches
443
462
 
463
+ # Native and framework commands run from the configured app while dependency
464
+ # installation remains anchored at the workspace root.
465
+ cd "$MACH_APP_ROOT"
466
+
444
467
  # --- Injected Version Code (Auto-versioning) ---
445
468
  # Apply before Expo prebuild so generated Gradle files receive the new versionCode.
446
469
  if [ ! -z "$ANDROID_VERSION_CODE" ]; then
@@ -615,14 +638,14 @@ if [ $BUILD_EXIT_CODE -eq 0 ]; then
615
638
  # --- Sentry Source Map Upload (runs after Gradle, not via Gradle plugin to avoid hangs) ---
616
639
  if [ ! -z "$SENTRY_AUTH_TOKEN" ] && [ ! -z "$SENTRY_ORG" ] && [ ! -z "$SENTRY_PROJECT" ]; then
617
640
  step_marker sentry
618
- BUNDLE_FILE="$(find /home/ubuntu/build/android/app/build/generated/assets -name 'index.android.bundle' 2>/dev/null | head -n 1)"
619
- SOURCEMAP_FILE="$(find /home/ubuntu/build/android/app/build/generated/sourcemaps -name 'index.android.bundle.map' 2>/dev/null | head -n 1)"
641
+ BUNDLE_FILE="$(find "$MACH_APP_ROOT/android/app/build/generated/assets" -name 'index.android.bundle' 2>/dev/null | head -n 1)"
642
+ SOURCEMAP_FILE="$(find "$MACH_APP_ROOT/android/app/build/generated/sourcemaps" -name 'index.android.bundle.map' 2>/dev/null | head -n 1)"
620
643
 
621
644
  if [ ! -z "$BUNDLE_FILE" ] && [ ! -z "$SOURCEMAP_FILE" ]; then
622
645
  # Derive release name from app.json / package.json
623
- APP_VERSION=$(node -p "try{const a=require('/home/ubuntu/build/app.json');a.expo?.version||a.version||'1.0.0'}catch(e){require('/home/ubuntu/build/package.json').version||'1.0.0'}" 2>/dev/null || echo "1.0.0")
624
- APP_PACKAGE=$(node -p "try{const a=require('/home/ubuntu/build/app.json');a.expo?.android?.package||a.expo?.bundleIdentifier||''}catch(e){''}" 2>/dev/null || echo "")
625
- BUILD_NUMBER=$(node -p "try{const a=require('/home/ubuntu/build/app.json');a.expo?.android?.versionCode||1}catch(e){1}" 2>/dev/null || echo "1")
646
+ APP_VERSION=$(node -p "try{const a=require(process.env.MACH_APP_ROOT + '/app.json');a.expo?.version||a.version||'1.0.0'}catch(e){require(process.env.MACH_APP_ROOT + '/package.json').version||'1.0.0'}" 2>/dev/null || echo "1.0.0")
647
+ APP_PACKAGE=$(node -p "try{const a=require(process.env.MACH_APP_ROOT + '/app.json');a.expo?.android?.package||a.expo?.bundleIdentifier||''}catch(e){''}" 2>/dev/null || echo "")
648
+ BUILD_NUMBER=$(node -p "try{const a=require(process.env.MACH_APP_ROOT + '/app.json');a.expo?.android?.versionCode||1}catch(e){1}" 2>/dev/null || echo "1")
626
649
 
627
650
  if [ ! -z "$APP_PACKAGE" ]; then
628
651
  SENTRY_RELEASE="\${APP_PACKAGE}@\${APP_VERSION}+\${BUILD_NUMBER}"
@@ -682,8 +705,8 @@ fi
682
705
 
683
706
  if [ "$SOURCE_HAS_ANDROID_PROJECT" = "true" ]; then
684
707
  echo "[CACHE] Skipping android/ cache save because source owns the Android project."
685
- elif [ -d "/home/ubuntu/build/android" ] && [ ! -z "$PRESIGNED_CACHE_ANDROID_UPLOAD" ]; then
686
- (find /home/ubuntu/build/android -type d \\( -name build -o -name .cxx \\) -prune -exec rm -rf {} + 2>/dev/null || true; tar $TAR_COMPRESS -cf /tmp/android-cache.tar.gz -C /home/ubuntu/build --exclude='android/.gradle' --exclude='android/**/build' --exclude='android/**/.cxx' android && curl -X PUT -T /tmp/android-cache.tar.gz "$PRESIGNED_CACHE_ANDROID_UPLOAD" --silent && rm -f /tmp/android-cache.tar.gz && echo "android/ cache saved.") &
708
+ elif [ -d "$MACH_APP_ROOT/android" ] && [ ! -z "$PRESIGNED_CACHE_ANDROID_UPLOAD" ]; then
709
+ (find "$MACH_APP_ROOT/android" -type d \\( -name build -o -name .cxx \\) -prune -exec rm -rf {} + 2>/dev/null || true; tar $TAR_COMPRESS -cf /tmp/android-cache.tar.gz -C "$MACH_SOURCE_ROOT" --exclude="$MACH_APP_DIRECTORY/android/.gradle" --exclude="$MACH_APP_DIRECTORY/android/**/build" --exclude="$MACH_APP_DIRECTORY/android/**/.cxx" "$MACH_APP_DIRECTORY/android" && curl -X PUT -T /tmp/android-cache.tar.gz "$PRESIGNED_CACHE_ANDROID_UPLOAD" --silent && rm -f /tmp/android-cache.tar.gz && echo "android/ cache saved.") &
687
710
  cache_pids+=($!)
688
711
  fi
689
712
 
@@ -699,15 +722,16 @@ for pid in "\${cache_pids[@]}"; do wait "$pid" || true; done
699
722
  echo "Build orchestrator finished. Auto-terminating instance in 5 seconds..."
700
723
  sleep 5
701
724
  sudo shutdown -h now
702
- `;var Gi=e=>e.replace(/\\/g,"\\\\").replace(/"/g,'\\"').replace(/\$/g,"\\$").replace(/`/g,"\\`"),Vi=e=>["1","true","yes","on"].includes(String(e||"").trim().toLowerCase()),Id=e=>/(^|[-_])(maestro|e2e|test|emulator)([-_]|$)/i.test(e),wd=(e,t,n)=>{let i=n.MACH_ANDROID_RELEASE_ABIS||n.MACH_ANDROID_ABIS||n.MACH_PROFILE_ANDROID_RELEASE_ABIS||n.MACH_PROFILE_ANDROID_ABIS||n.MACH_PROFILE_ANDROID_ARCHITECTURES||n.MACH_PROFILE_ANDROID_REACT_NATIVE_ARCHITECTURES;return i||(!!e.maestro||Id(t)||Vi(n.MACH_PROFILE_ANDROID_EMULATOR)||Vi(n.MACH_ANDROID_INCLUDE_EMULATOR_ABIS)||Vi(n.MACH_PROFILE_ANDROID_INCLUDE_EMULATOR_ABIS)?"armeabi-v7a,arm64-v8a,x86_64":"armeabi-v7a,arm64-v8a")},xo=async(e,t,n={},i,r)=>{let o=Ed(),s=Cn(e.framework),a=e.buildProfile||"production",l=a==="production",d=e.apk===!0,c=e.developmentClient?"assembleDebug":l?"bundleRelease":"assembleRelease",u=e.buildCommand||(d?"assembleRelease":c),f=e.nodeVersion?[`echo "[NODE] Switching to Node ${e.nodeVersion}..."`,`CURRENT_MAJOR=$(node -e "process.stdout.write(process.version.split('.')[0].replace('v',''))" 2>/dev/null || echo "0")`,`if [ "$CURRENT_MAJOR" != "${e.nodeVersion}" ]; then`,` curl -fsSL https://deb.nodesource.com/setup_${e.nodeVersion}.x | bash - 2>&1`," apt-get install -y nodejs 2>&1",' echo "[NODE] Installed Node $(node -v)"',"else",' echo "[NODE] Already on Node $(node -v) \u2014 no switch needed"',"fi"].join(`
703
- `):"",p;if(r){let w=No.isAbsolute(r)?r:No.resolve(process.cwd(),r);ko.existsSync(w)?(p=ko.readFileSync(w,"utf-8"),Un.info(To.magenta(`\u2713 Loaded preBuild hook: ${r}`))):Un.warn(`preBuild script not found at ${w} \u2014 skipping`)}let g=wd(e,a,n),h={...Tn(n,a,e),MACH_ANDROID_RELEASE_ABIS:g},y=kn(h),b=Co.replace(/\{\{BUILD_ID\}\}/g,t).replace(/\{\{BUILD_COMMAND\}\}/g,u).replace("{{NODE_VERSION_SETUP}}",f).replace("{{ENV_VARS}}",`
704
- export MACH_APP_NAME="${Gi(h.MACH_APP_NAME)}"
705
- export MACH_BUILD_PROFILE="${Gi(a)}"
706
- export MACH_ANDROID_RELEASE_ABIS="${Gi(g)}"
707
- export MACH_ENV_FINGERPRINT="${y}"
725
+ `;var Fn=e=>e.replace(/\\/g,"\\\\").replace(/"/g,'\\"').replace(/\$/g,"\\$").replace(/`/g,"\\`"),Wi=e=>["1","true","yes","on"].includes(String(e||"").trim().toLowerCase()),Dd=e=>/(^|[-_])(maestro|e2e|test|emulator)([-_]|$)/i.test(e),Cd=(e,t,n)=>{let i=n.MACH_ANDROID_RELEASE_ABIS||n.MACH_ANDROID_ABIS||n.MACH_PROFILE_ANDROID_RELEASE_ABIS||n.MACH_PROFILE_ANDROID_ABIS||n.MACH_PROFILE_ANDROID_ARCHITECTURES||n.MACH_PROFILE_ANDROID_REACT_NATIVE_ARCHITECTURES;return i||(!!e.maestro||Dd(t)||Wi(n.MACH_PROFILE_ANDROID_EMULATOR)||Wi(n.MACH_ANDROID_INCLUDE_EMULATOR_ABIS)||Wi(n.MACH_PROFILE_ANDROID_INCLUDE_EMULATOR_ABIS)?"armeabi-v7a,arm64-v8a,x86_64":"armeabi-v7a,arm64-v8a")},Bo=async(e,t,n={},i,r)=>{let o=Pd(),s=Cn(e.framework),a=e.buildProfile||"production",l=a==="production",d=e.apk===!0,c=e.developmentClient?"assembleDebug":l?"bundleRelease":"assembleRelease",u=e.buildCommand||(d?"assembleRelease":c),f=e.nodeVersion?[`echo "[NODE] Switching to Node ${e.nodeVersion}..."`,`CURRENT_MAJOR=$(node -e "process.stdout.write(process.version.split('.')[0].replace('v',''))" 2>/dev/null || echo "0")`,`if [ "$CURRENT_MAJOR" != "${e.nodeVersion}" ]; then`,` curl -fsSL https://deb.nodesource.com/setup_${e.nodeVersion}.x | bash - 2>&1`," apt-get install -y nodejs 2>&1",' echo "[NODE] Installed Node $(node -v)"',"else",' echo "[NODE] Already on Node $(node -v) \u2014 no switch needed"',"fi"].join(`
726
+ `):"",p;if(r){let I=Fo.isAbsolute(r)?r:Fo.resolve(process.cwd(),r);Uo.existsSync(I)?(p=Uo.readFileSync(I,"utf-8"),Un.info(Mo.magenta(`\u2713 Loaded preBuild hook: ${r}`))):Un.warn(`preBuild script not found at ${I} \u2014 skipping`)}let g=Cd(e,a,n),h={...Tn(n,a,e),MACH_ANDROID_RELEASE_ABIS:g},A=kn(h),S=Lo.replace(/\{\{BUILD_ID\}\}/g,t).replace(/\{\{BUILD_COMMAND\}\}/g,u).replace("{{NODE_VERSION_SETUP}}",f).replace("{{ENV_VARS}}",`
727
+ export MACH_APP_NAME="${Fn(h.MACH_APP_NAME)}"
728
+ export MACH_BUILD_PROFILE="${Fn(a)}"
729
+ export MACH_ANDROID_RELEASE_ABIS="${Fn(g)}"
730
+ export MACH_ENV_FINGERPRINT="${A}"
708
731
  ${s.remoteEnvSetupScript().trim()}
709
732
  {{ENV_VARS}}
710
- `).replace("{{FRAMEWORK_ANDROID_VERSION_CODE}}",s.androidRemoteVersionCodeScript().trim()).replace("{{FRAMEWORK_ANDROID_PREBUILD}}",s.androidRemotePrebuildScript().trim()).replace("{{FRAMEWORK_ANDROID_GRADLE_PROPERTIES}}",s.androidRemoteGradlePropertiesScript().trim()).replace("{{FRAMEWORK_ANDROID_RELEASE_GRADLE_PROPERTIES}}",s.androidRemoteReleaseGradlePropertiesScript().trim());if(e.dryRun){Un.info("User Data Script (dry run):"),console.log(b);return}o.start("Requesting cloud build instance...");try{let w=await $.post("/builds/launch-android",{projectId:i,buildId:t,platform:e.platform,buildProfile:e.buildProfile,buildCommand:u,instanceType:e.instanceType,ami:e.ami,keepInstance:e.keepInstance,region:e.region,subnet:e.subnet,securityGroup:e.securityGroup,projectSecrets:n,dryRun:e.dryRun,userDataScript:b,preBuildScriptContent:p});if(w.data.status!=="success")throw new Error(w.data.message||"Failed to launch build instance");let L=w.data.instanceId;return o.stop("Build Started"),Un.success(To.green(`Build initiated on cloud instance (${L}).`)),{instanceId:L}}catch(w){o.stop("Android Build Failed");let L=w.response?.data?.message||w.message;throw new Error(`Failed to launch Android build: ${L}`)}};import{spinner as vd,log as gt}from"@clack/prompts";import We from"chalk";import _d from"fs";import{execSync as Vt}from"child_process";var Lo=`#!/bin/bash
733
+ export MACH_APP_DIRECTORY="${Fn(e.appDirectory||".")}"
734
+ `).replace("{{FRAMEWORK_ANDROID_VERSION_CODE}}",s.androidRemoteVersionCodeScript().trim()).replace("{{FRAMEWORK_ANDROID_PREBUILD}}",s.androidRemotePrebuildScript().trim()).replace("{{FRAMEWORK_ANDROID_GRADLE_PROPERTIES}}",s.androidRemoteGradlePropertiesScript().trim()).replace("{{FRAMEWORK_ANDROID_RELEASE_GRADLE_PROPERTIES}}",s.androidRemoteReleaseGradlePropertiesScript().trim());if(e.dryRun){Un.info("User Data Script (dry run):"),console.log(S);return}o.start("Requesting cloud build instance...");try{let I=await v.post("/builds/launch-android",{projectId:i,buildId:t,platform:e.platform,buildProfile:e.buildProfile,buildCommand:u,instanceType:e.instanceType,ami:e.ami,keepInstance:e.keepInstance,region:e.region,subnet:e.subnet,securityGroup:e.securityGroup,projectSecrets:n,dryRun:e.dryRun,userDataScript:S,preBuildScriptContent:p});if(I.data.status!=="success")throw new Error(I.data.message||"Failed to launch build instance");let L=I.data.instanceId;return o.stop("Build Started"),Un.success(Mo.green(`Build initiated on cloud instance (${L}).`)),{instanceId:L}}catch(I){o.stop("Android Build Failed");let L=I.response?.data?.message||I.message;throw new Error(`Failed to launch Android build: ${L}`)}};import{spinner as Td,log as mt}from"@clack/prompts";import Ke from"chalk";import kd from"fs";import{execSync as Vt}from"child_process";var Ho=`#!/bin/bash
711
735
  # --- Mach Cloud Build Script (iOS) ---
712
736
  # All S3 operations use presigned URLs via curl \u2014 zero AWS credentials on Mac.
713
737
 
@@ -789,6 +813,24 @@ echo "[STEP_START:clone] $(date +%s)"
789
813
  # source.zip is uploaded by scp *before* this script runs
790
814
  unzip -o -q source.zip
791
815
 
816
+ export MACH_SOURCE_ROOT="{{REMOTE_DIR}}"
817
+ export MACH_APP_DIRECTORY="{{APP_DIRECTORY}}"
818
+ case "$MACH_APP_DIRECTORY" in
819
+ ""|".") MACH_APP_DIRECTORY="." ;;
820
+ /*|../*|*/../*|*/..) echo "Error: Invalid MACH_APP_DIRECTORY: $MACH_APP_DIRECTORY"; exit 1 ;;
821
+ esac
822
+ if [ "$MACH_APP_DIRECTORY" = "." ]; then
823
+ export MACH_APP_ROOT="$MACH_SOURCE_ROOT"
824
+ else
825
+ export MACH_APP_ROOT="$MACH_SOURCE_ROOT/$MACH_APP_DIRECTORY"
826
+ fi
827
+ if [ ! -d "$MACH_APP_ROOT" ] || [ ! -f "$MACH_APP_ROOT/package.json" ]; then
828
+ echo "Error: appDirectory '$MACH_APP_DIRECTORY' is missing or has no package.json"
829
+ exit 1
830
+ fi
831
+ export PATH="$MACH_APP_ROOT/node_modules/.bin:$MACH_SOURCE_ROOT/node_modules/.bin:$PATH"
832
+ echo "[LAYOUT] sourceRoot=$MACH_SOURCE_ROOT appDirectory=$MACH_APP_DIRECTORY"
833
+
792
834
  echo "[STEP_START:deps] $(date +%s)"
793
835
 
794
836
  # --- DERIVED DATA SETUP ---
@@ -892,6 +934,10 @@ if [ ! -z "$PRESIGNED_CACHE_NODE_UPLOAD" ]; then
892
934
  rm node_modules.tar.gz
893
935
  fi
894
936
 
937
+ # Native and framework commands run from the configured app while dependency
938
+ # installation remains anchored at the workspace root.
939
+ cd "$MACH_APP_ROOT"
940
+
895
941
  {{FRAMEWORK_PREBUILD}}
896
942
 
897
943
  IOS_BUILD_NUMBER="\${BUILD_NUMBER:-\${CURRENT_PROJECT_VERSION:-}}"
@@ -1468,62 +1514,62 @@ touch done
1468
1514
  if [ ! -z "$PRESIGNED_DONE_MARKER" ]; then
1469
1515
  curl -X PUT -T done "$PRESIGNED_DONE_MARKER" --silent
1470
1516
  fi
1471
- `;var Mo=e=>e.replace(/\\/g,"\\\\").replace(/"/g,'\\"').replace(/\$/g,"\\$").replace(/`/g,"\\`"),Uo=async(e,t,n={},i)=>{let r=vd(),o=Cn(e.framework);e.sshHost||(e.sshHost="localhost",gt.message(We.yellow("No SSH host provided, defaulting to localhost."))),r.start(`Connecting to remote Mac at ${We.cyan(e.sshHost)}...`);let s=e.sshUser||process.env.USER||"ubuntu",a=e.sshKey,l=`${s}@${e.sshHost}`,d=`ssh ${a?`-i ${a}`:""} -o StrictHostKeyChecking=no ${l}`,c=`scp ${a?`-i ${a}`:""} -o StrictHostKeyChecking=no`;try{let u=s==="ubuntu"?"/home/ubuntu":`/Users/${s}`,f=(n.PROJECT_ID||"default_project").replace(/[^a-zA-Z0-9-_]/g,"_"),p=`${u}/${m.remoteWorkspacesDir}/${f}`;r.message(`Preparing stable workspace: ${p}...`),Vt(`${d} "mkdir -p ${p}"`,{stdio:"inherit"}),r.message("Transferring source code...");let g=`/tmp/${m.nameLower}-source-${t}.zip`;Vt(`${c} ${g} ${l}:${p}/source.zip`,{stdio:"inherit"});let h=e.iosApiKeyPath?`${p}/api_key.p8`:"",y="";e.iosApiKeyPath&&(r.message("Uploading App Store Connect API key..."),Vt(`${c} ${e.iosApiKeyPath} ${l}:${h}`),e.iosApiKeyId&&e.iosApiKeyIssuer&&(y=`-authenticationKeyID ${e.iosApiKeyId} -authenticationKeyIssuerID ${e.iosApiKeyIssuer} -authenticationKeyPath ${h}`));let b={};if(i)try{let E=await $.post(`/builds/${i}/${t}/build-urls`,{platform:"ios"});E.data.status==="success"&&(b=E.data.urls)}catch(E){gt.warn(We.yellow(`Could not fetch build URLs: ${E.message}`))}let w="";if(b.credentials&&b.credentials.length>0)for(let E of b.credentials)E.type==="p12"?w+=`curl -sf -o "$CERT_DIR/${E.name}" "${E.downloadUrl}" || true
1472
- `:E.type==="mobileprovision"&&(w+=`curl -sf -o "$PROV_TEMP/${E.name}" "${E.downloadUrl}" || true
1517
+ `;var jo=e=>e.replace(/\\/g,"\\\\").replace(/"/g,'\\"').replace(/\$/g,"\\$").replace(/`/g,"\\`"),Go=async(e,t,n={},i)=>{let r=Td(),o=Cn(e.framework);e.sshHost||(e.sshHost="localhost",mt.message(Ke.yellow("No SSH host provided, defaulting to localhost."))),r.start(`Connecting to remote Mac at ${Ke.cyan(e.sshHost)}...`);let s=e.sshUser||process.env.USER||"ubuntu",a=e.sshKey,l=`${s}@${e.sshHost}`,d=`ssh ${a?`-i ${a}`:""} -o StrictHostKeyChecking=no ${l}`,c=`scp ${a?`-i ${a}`:""} -o StrictHostKeyChecking=no`;try{let u=s==="ubuntu"?"/home/ubuntu":`/Users/${s}`,f=(n.PROJECT_ID||"default_project").replace(/[^a-zA-Z0-9-_]/g,"_"),p=`${u}/${m.remoteWorkspacesDir}/${f}`;r.message(`Preparing stable workspace: ${p}...`),Vt(`${d} "mkdir -p ${p}"`,{stdio:"inherit"}),r.message("Transferring source code...");let g=`/tmp/${m.nameLower}-source-${t}.zip`;Vt(`${c} ${g} ${l}:${p}/source.zip`,{stdio:"inherit"});let h=e.iosApiKeyPath?`${p}/api_key.p8`:"",A="";e.iosApiKeyPath&&(r.message("Uploading App Store Connect API key..."),Vt(`${c} ${e.iosApiKeyPath} ${l}:${h}`),e.iosApiKeyId&&e.iosApiKeyIssuer&&(A=`-authenticationKeyID ${e.iosApiKeyId} -authenticationKeyIssuerID ${e.iosApiKeyIssuer} -authenticationKeyPath ${h}`));let S={};if(i)try{let y=await v.post(`/builds/${i}/${t}/build-urls`,{platform:"ios"});y.data.status==="success"&&(S=y.data.urls)}catch(y){mt.warn(Ke.yellow(`Could not fetch build URLs: ${y.message}`))}let I="";if(S.credentials&&S.credentials.length>0)for(let y of S.credentials)y.type==="p12"?I+=`curl -sf -o "$CERT_DIR/${y.name}" "${y.downloadUrl}" || true
1518
+ `:y.type==="mobileprovision"&&(I+=`curl -sf -o "$PROV_TEMP/${y.name}" "${y.downloadUrl}" || true
1473
1519
  `);r.message("Generating macOS build script...");let L=process.env.CODEARTIFACT_AUTH_TOKEN?`export CODEARTIFACT_AUTH_TOKEN="${process.env.CODEARTIFACT_AUTH_TOKEN}"
1474
- `:"";if(n)for(let[E,A]of Object.entries(n)){let D=A.replace(/"/g,'\\"').replace(/\$/g,"\\$").replace(/`/g,"\\`");L+=`export ${E}="${D}"
1475
- `}let _=e.buildProfile||"production",H=Tn(n,_,e),W=kn(H);gt.info(We.dim(`iOS remote build config: simulator=${String(!!e.simulator)}, configuration=${e.iosConfiguration||"Release"}, scheme=${e.iosScheme||"auto"}`));let Z=[L,b.logUpload?`export PRESIGNED_LOG_UPLOAD="${b.logUpload}"`:"",b.doneMarker?`export PRESIGNED_DONE_MARKER="${b.doneMarker}"`:"",b.cacheDerivedDataDownload?`export PRESIGNED_CACHE_DD_DOWNLOAD="${b.cacheDerivedDataDownload}"`:"",b.cacheDerivedDataUpload?`export PRESIGNED_CACHE_DD_UPLOAD="${b.cacheDerivedDataUpload}"`:"",b.cacheNodeModulesDownload?`export PRESIGNED_CACHE_NODE_DOWNLOAD="${b.cacheNodeModulesDownload}"`:"",b.cacheNodeModulesUpload?`export PRESIGNED_CACHE_NODE_UPLOAD="${b.cacheNodeModulesUpload}"`:"",b.cachePodsDownload?`export PRESIGNED_CACHE_PODS_DOWNLOAD="${b.cachePodsDownload}"`:"",b.cachePodsUpload?`export PRESIGNED_CACHE_PODS_UPLOAD="${b.cachePodsUpload}"`:"",b.artifactIpaUpload?`export PRESIGNED_ARTIFACT_IPA_UPLOAD="${b.artifactIpaUpload}"`:"",b.artifactAppZipUpload?`export PRESIGNED_ARTIFACT_APP_ZIP_UPLOAD="${b.artifactAppZipUpload}"`:"",`export BUILD_ID="${t}"`,`export MACH_BUILD_PROFILE="${Mo(_)}"`,`export MACH_APP_NAME="${Mo(H.MACH_APP_NAME)}"`,`export MACH_ENV_FINGERPRINT="${W}"`,o.remoteEnvSetupScript().trim(),`export ${m.envPrefix}PROJECT_ID="${f}"`,n.MATCH_ENCRYPTION_PASSPHRASE?`export MATCH_PASSWORD="${n.MATCH_ENCRYPTION_PASSPHRASE}"`:"",n.APPLE_TEAM_ID?`export FASTLANE_TEAM_ID="${n.APPLE_TEAM_ID}"`:"",`export MATCH_KEYCHAIN_NAME="${m.credentialsKeychain}"`,`export MATCH_KEYCHAIN_PASSWORD="${m.keychainPassword}"`].filter(Boolean).join(`
1476
- `),Ee=e.nodeVersion?[`echo "[NODE] Switching to Node ${e.nodeVersion}..."`,'export NVM_DIR="$HOME/.nvm"','[ -s "$NVM_DIR/nvm.sh" ] && . "$NVM_DIR/nvm.sh" --no-use',`nvm install ${e.nodeVersion} 2>/dev/null || true`,`nvm use ${e.nodeVersion} --silent`,`export PATH="$NVM_DIR/versions/node/$(nvm version ${e.nodeVersion})/bin:$PATH"`,'echo "[NODE] Now using: $(node -v) at $(which node)"'].join(`
1477
- `):"",oe=Lo,R={"{{REMOTE_DIR}}":p,"{{ENV_VARS}}":Z,"{{CREDENTIAL_DOWNLOADS}}":w,"{{IOS_SCHEME}}":e.iosScheme||"","{{IOS_CONFIG}}":e.iosConfiguration||"Release","{{TEAM_ID}}":e.iosTeamId||"","{{AUTH_PARAMS}}":y,"{{IS_SIMULATOR}}":e.simulator?"true":"false","{{BUILD_ID}}":t,"{{EXPORT_METHOD}}":e.iosExportMethod||"ad-hoc","{{NODE_VERSION_SETUP}}":Ee,"{{FRAMEWORK_PREBUILD}}":o.iosRemotePrebuildScript().trim()};Object.entries(R).forEach(([E,A])=>{oe=oe.split(E).join(A)});let T=`/tmp/${m.nameLower}-mac-build-${t}.sh`;if(_d.writeFileSync(T,oe),Vt(`${c} ${T} ${l}:${p}/build.sh`),r.stop("Remote script uploaded."),gt.info(We.cyan("Executing remote build. This might take a while...")),Vt(`${d} "bash ${p}/build.sh"`,{stdio:"inherit"}),r.stop("Remote build finished!"),i){r.start("Fetching artifact links...");try{let A=(await $.get(`/builds/${i}/${t}/artifacts`)).data.artifacts||[],D=e.simulator===!0;if(A.length===0&&!D)throw r.stop("Build Failed!"),new Error("Build completed but no artifacts were generated. Check build logs for errors.");if(r.stop("Build Successful!"),A.length>0){gt.success("Build Artifacts Ready:");for(let v of A)console.log(`
1478
- ${We.yellow(v.name)}:
1479
- ${We.cyan(v.downloadUrl)}`);console.log(`
1480
- ${We.dim("Note: Links are valid for 7 days.")}`)}else D&&gt.warn("Simulator build completed. No artifacts uploaded.")}catch(E){r.stop("Could not fetch artifacts"),gt.warn(We.yellow(`Artifact listing failed: ${E.message}`))}}}catch(u){throw r.stop("iOS Build Failed"),u}};import zi from"fs";import Bn from"path";import{spawnSync as $d}from"child_process";var he=e=>{if(typeof e!="string")return;let t=e.trim();return t.length>0?t:void 0},Fo=e=>e==null?void 0:he(String(e)),jo=e=>{if(!zi.existsSync(e))return null;try{return JSON.parse(zi.readFileSync(e,"utf-8"))}catch{return null}},Rd=e=>{let t=e.trim();if(!t)return null;try{return JSON.parse(t)}catch{let n=t.indexOf("{"),i=t.lastIndexOf("}");if(n<0||i<=n)return null;try{return JSON.parse(t.slice(n,i+1))}catch{return null}}};function Bo(e=process.cwd()){let t=jo(Bn.join(e,"package.json"))||{};return he(t.version)}function Od(e=process.cwd()){let t=jo(Bn.join(e,"package.json"))||{},n={...t.dependencies||{},...t.devDependencies||{}};if(n.expo)return"expo";if(n["react-native"])return"react-native"}function Ho(e=process.cwd(),t={}){let n=process.platform==="win32"?Bn.join(e,"node_modules",".bin","expo.cmd"):Bn.join(e,"node_modules",".bin","expo"),i=zi.existsSync(n),s=$d(i?n:"npx",i?["config","--type","public","--json"]:["--no-install","expo","config","--type","public","--json"],{cwd:e,encoding:"utf-8",stdio:["ignore","pipe","pipe"],env:{...process.env,EXPO_NO_TELEMETRY:"1",...t}});return s.error||s.status!==0?null:Rd(s.stdout||"")}var Go=e=>{let t=he(e);if(!(!t||t==="manual"))return t},Fn=(e,t,n,i={})=>{let r=he(e);if(r)return r;if(!e||typeof e!="object")return;let o=he(e.policy);if(o==="appVersion")return he(t.version);if(o==="sdkVersion")return he(t.sdkVersion);if(o==="nativeVersion"){let s=he(t.version);if(!s||!n)return;let a=n==="ios"?Fo(i.iosBuildNumber)||Fo(t.ios?.buildNumber):i.androidVersionCode!==void 0?String(i.androidVersionCode).trim():t.android?.versionCode!==void 0?String(t.android.versionCode).trim():void 0;return!a||a.toLowerCase()==="auto"?s:a?`${s}(${a})`:s}};function Dd(e,t,n={},i){let r=t?Fn(e[t]?.runtimeVersion,e,t,n):void 0;if(r)return r;let o=Fn(e.runtimeVersion,e,t,n);return o||(i?Fn({policy:i},e,t,n):void 0)}function Pd(e,t){if(!(!e||typeof e!="object"))return he(t?e[t]?.runtimeVersion:void 0)||he(e.runtimeVersion)}function zt(e,t){let n=Ho(e,{MACH_OTA_RUNTIME_VERSION:t.runtimeVersion,MACH_OTA_CHANNEL:t.channel,MACH_OTA_URL:t.url});return n?{runtimeVersion:Pd(n,t.platform),channel:he(n.updates?.requestHeaders?.["expo-channel-name"]),url:he(n.updates?.url),expoConfig:n}:null}function Cd(e,t,n={}){let i=he(n.runtimeVersion)||he(e.ota?.runtimeVersion);if(i)return i;let r={iosBuildNumber:n.iosBuildNumber,androidVersionCode:n.androidVersionCode},o=Go(e.ota?.runtimeVersionPolicy);if(o){let s=Fn({policy:o},t,n.platform,r);if(s)return s}return Dd(t,n.platform,r)}function Kt(e,t={}){let n=t.cwd||process.cwd(),i=he(t.runtimeVersion)||he(e.ota?.runtimeVersion);if(i)return i;let r=Go(e.ota?.runtimeVersionPolicy),o={iosBuildNumber:t.iosBuildNumber,androidVersionCode:t.androidVersionCode};if((t.framework||e.framework||Od(n))==="expo"){let a=Ho(n),l=a?Cd(e,a,{platform:t.platform,iosBuildNumber:o.iosBuildNumber,androidVersionCode:o.androidVersionCode}):void 0;if(l)return l}return Bo(n)||"1.0.0"}import O from"fs";import $t from"os";import x from"path";import{spawn as Xo,spawnSync as Ge}from"child_process";import{randomUUID as Td}from"crypto";import{pipeline as kd}from"stream/promises";import{isCancel as Ji,log as C,select as Zo,spinner as qt,text as Nd}from"@clack/prompts";import Wt from"axios";import k from"chalk";import jn from"adm-zip";var xd={android:"pixel_6",ios:"iphone_17_pro"};function Yi(e){return xd[e]}async function Qo(e){if(e.localRunner){let n=await Bd(e);process.exitCode=n?n.exitCode:1;return}if(e.local){let n=await jd(e);n&&(process.exitCode=n.exitCode);return}let t=await er(e);if(t&&(C.success(k.green(`Maestro run ${t.status||"queued"}: ${t.testRunId}`)),t.launchDeferredReason&&C.warn(k.yellow(t.launchDeferredReason)),t.dashboardUrl&&C.info(k.dim("View test run: ")+k.white.underline(t.dashboardUrl)),e.wait)){let n=await Hd(e,t);n&&(process.exitCode=n.status==="passed"?0:1)}}var Ld=new Set(["passed","failed","cancelled","interrupted"]),Vo=Number(process.env.MACH_FLOW_UPLOAD_MAX_ATTEMPTS||4),Md=Number(process.env.MACH_FLOW_UPLOAD_TIMEOUT_MS||12e4),es=process.env.MACH_MAESTRO_FAST_FAIL_RETRY==="1";function Qi(e){let t=Array.isArray(e)?e:e?[e]:[];return[...new Set(t.flatMap(n=>String(n||"").split(",")).map(n=>n.trim()).filter(Boolean))]}function Ud(e){let t=Qi(e);if(t.length===0)return;let n={};for(let i of t){let r=process.env[i];r!==void 0&&(n[i]=r)}return Object.keys(n).length>0?n:void 0}function Fd(e){let t={};for(let[i,r]of Object.entries(process.env))i.startsWith("MAESTRO_TEST_")&&r!==void 0&&(t[i]=r);let n=Qi(e);for(let i of n){let r=process.env[i];r!==void 0&&(t[i]=r)}return t}async function Bd(e){let t=e.projectId,n=e.testRunId,i=e.runnerToken||process.env.MACH_RUNNER_TOKEN||process.env.MACH_TOKEN,r=(process.env.MACH_API_URL||Qe).replace(/\/$/,""),o=O.mkdtempSync(x.join($t.tmpdir(),"mach-maestro-runner-")),s=x.join(o,"mach-maestro-output"),a=x.join(o,"runner.log");if(O.mkdirSync(s,{recursive:!0}),!t||!n||!i)return C.error(k.red("--local-runner requires --project-id, --test-run-id, and a runner token.")),{status:"failed",exitCode:1,attempts:0,flows:".maestro",platform:e.platform};let l=null,d=null,c=null,u,f,p=h=>{O.appendFileSync(a,`${h}${h.endsWith(`
1520
+ `:"";if(n)for(let[y,$]of Object.entries(n)){let _=$.replace(/"/g,'\\"').replace(/\$/g,"\\$").replace(/`/g,"\\`");L+=`export ${y}="${_}"
1521
+ `}let w=e.buildProfile||"production",j=Tn(n,w,e),W=kn(j);mt.info(Ke.dim(`iOS remote build config: simulator=${String(!!e.simulator)}, configuration=${e.iosConfiguration||"Release"}, scheme=${e.iosScheme||"auto"}`));let Z=[L,S.logUpload?`export PRESIGNED_LOG_UPLOAD="${S.logUpload}"`:"",S.doneMarker?`export PRESIGNED_DONE_MARKER="${S.doneMarker}"`:"",S.cacheDerivedDataDownload?`export PRESIGNED_CACHE_DD_DOWNLOAD="${S.cacheDerivedDataDownload}"`:"",S.cacheDerivedDataUpload?`export PRESIGNED_CACHE_DD_UPLOAD="${S.cacheDerivedDataUpload}"`:"",S.cacheNodeModulesDownload?`export PRESIGNED_CACHE_NODE_DOWNLOAD="${S.cacheNodeModulesDownload}"`:"",S.cacheNodeModulesUpload?`export PRESIGNED_CACHE_NODE_UPLOAD="${S.cacheNodeModulesUpload}"`:"",S.cachePodsDownload?`export PRESIGNED_CACHE_PODS_DOWNLOAD="${S.cachePodsDownload}"`:"",S.cachePodsUpload?`export PRESIGNED_CACHE_PODS_UPLOAD="${S.cachePodsUpload}"`:"",S.artifactIpaUpload?`export PRESIGNED_ARTIFACT_IPA_UPLOAD="${S.artifactIpaUpload}"`:"",S.artifactAppZipUpload?`export PRESIGNED_ARTIFACT_APP_ZIP_UPLOAD="${S.artifactAppZipUpload}"`:"",`export BUILD_ID="${t}"`,`export MACH_BUILD_PROFILE="${jo(w)}"`,`export MACH_APP_NAME="${jo(j.MACH_APP_NAME)}"`,`export MACH_ENV_FINGERPRINT="${W}"`,o.remoteEnvSetupScript().trim(),`export ${m.envPrefix}PROJECT_ID="${f}"`,n.MATCH_ENCRYPTION_PASSPHRASE?`export MATCH_PASSWORD="${n.MATCH_ENCRYPTION_PASSPHRASE}"`:"",n.APPLE_TEAM_ID?`export FASTLANE_TEAM_ID="${n.APPLE_TEAM_ID}"`:"",`export MATCH_KEYCHAIN_NAME="${m.credentialsKeychain}"`,`export MATCH_KEYCHAIN_PASSWORD="${m.keychainPassword}"`].filter(Boolean).join(`
1522
+ `),_e=e.nodeVersion?[`echo "[NODE] Switching to Node ${e.nodeVersion}..."`,'export NVM_DIR="$HOME/.nvm"','[ -s "$NVM_DIR/nvm.sh" ] && . "$NVM_DIR/nvm.sh" --no-use',`nvm install ${e.nodeVersion} 2>/dev/null || true`,`nvm use ${e.nodeVersion} --silent`,`export PATH="$NVM_DIR/versions/node/$(nvm version ${e.nodeVersion})/bin:$PATH"`,'echo "[NODE] Now using: $(node -v) at $(which node)"'].join(`
1523
+ `):"",re=Ho,O={"{{REMOTE_DIR}}":p,"{{APP_DIRECTORY}}":e.appDirectory||".","{{ENV_VARS}}":Z,"{{CREDENTIAL_DOWNLOADS}}":I,"{{IOS_SCHEME}}":e.iosScheme||"","{{IOS_CONFIG}}":e.iosConfiguration||"Release","{{TEAM_ID}}":e.iosTeamId||"","{{AUTH_PARAMS}}":A,"{{IS_SIMULATOR}}":e.simulator?"true":"false","{{BUILD_ID}}":t,"{{EXPORT_METHOD}}":e.iosExportMethod||"ad-hoc","{{NODE_VERSION_SETUP}}":_e,"{{FRAMEWORK_PREBUILD}}":o.iosRemotePrebuildScript().trim()};Object.entries(O).forEach(([y,$])=>{re=re.split(y).join($)});let x=`/tmp/${m.nameLower}-mac-build-${t}.sh`;if(kd.writeFileSync(x,re),Vt(`${c} ${x} ${l}:${p}/build.sh`),r.stop("Remote script uploaded."),mt.info(Ke.cyan("Executing remote build. This might take a while...")),Vt(`${d} "bash ${p}/build.sh"`,{stdio:"inherit"}),r.stop("Remote build finished!"),i){r.start("Fetching artifact links...");try{let $=(await v.get(`/builds/${i}/${t}/artifacts`)).data.artifacts||[],_=e.simulator===!0;if($.length===0&&!_)throw r.stop("Build Failed!"),new Error("Build completed but no artifacts were generated. Check build logs for errors.");if(r.stop("Build Successful!"),$.length>0){mt.success("Build Artifacts Ready:");for(let R of $)console.log(`
1524
+ ${Ke.yellow(R.name)}:
1525
+ ${Ke.cyan(R.downloadUrl)}`);console.log(`
1526
+ ${Ke.dim("Note: Links are valid for 7 days.")}`)}else _&&mt.warn("Simulator build completed. No artifacts uploaded.")}catch(y){r.stop("Could not fetch artifacts"),mt.warn(Ke.yellow(`Artifact listing failed: ${y.message}`))}}}catch(u){throw r.stop("iOS Build Failed"),u}};import Yi from"fs";import Hn from"path";import{spawnSync as Nd}from"child_process";var me=e=>{if(typeof e!="string")return;let t=e.trim();return t.length>0?t:void 0},Vo=e=>e==null?void 0:me(String(e)),Ko=e=>{if(!Yi.existsSync(e))return null;try{return JSON.parse(Yi.readFileSync(e,"utf-8"))}catch{return null}},xd=e=>{let t=e.trim();if(!t)return null;try{return JSON.parse(t)}catch{let n=t.indexOf("{"),i=t.lastIndexOf("}");if(n<0||i<=n)return null;try{return JSON.parse(t.slice(n,i+1))}catch{return null}}};function zo(e=process.cwd()){let t=Ko(Hn.join(e,"package.json"))||{};return me(t.version)}function Ld(e=process.cwd()){let t=Ko(Hn.join(e,"package.json"))||{},n={...t.dependencies||{},...t.devDependencies||{}};if(n.expo)return"expo";if(n["react-native"])return"react-native"}function Wo(e=process.cwd(),t={}){let n=process.platform==="win32"?Hn.join(e,"node_modules",".bin","expo.cmd"):Hn.join(e,"node_modules",".bin","expo"),i=Yi.existsSync(n),s=Nd(i?n:"npx",i?["config","--type","public","--json"]:["--no-install","expo","config","--type","public","--json"],{cwd:e,encoding:"utf-8",stdio:["ignore","pipe","pipe"],env:{...process.env,EXPO_NO_TELEMETRY:"1",...t}});return s.error||s.status!==0?null:xd(s.stdout||"")}var Yo=e=>{let t=me(e);if(!(!t||t==="manual"))return t},Bn=(e,t,n,i={})=>{let r=me(e);if(r)return r;if(!e||typeof e!="object")return;let o=me(e.policy);if(o==="appVersion")return me(t.version);if(o==="sdkVersion")return me(t.sdkVersion);if(o==="nativeVersion"){let s=me(t.version);if(!s||!n)return;let a=n==="ios"?Vo(i.iosBuildNumber)||Vo(t.ios?.buildNumber):i.androidVersionCode!==void 0?String(i.androidVersionCode).trim():t.android?.versionCode!==void 0?String(t.android.versionCode).trim():void 0;return!a||a.toLowerCase()==="auto"?s:a?`${s}(${a})`:s}};function Md(e,t,n={},i){let r=t?Bn(e[t]?.runtimeVersion,e,t,n):void 0;if(r)return r;let o=Bn(e.runtimeVersion,e,t,n);return o||(i?Bn({policy:i},e,t,n):void 0)}function Ud(e,t){if(!(!e||typeof e!="object"))return me(t?e[t]?.runtimeVersion:void 0)||me(e.runtimeVersion)}function zt(e,t){let n=Wo(e,{MACH_OTA_RUNTIME_VERSION:t.runtimeVersion,MACH_OTA_CHANNEL:t.channel,MACH_OTA_URL:t.url});return n?{runtimeVersion:Ud(n,t.platform),channel:me(n.updates?.requestHeaders?.["expo-channel-name"]),url:me(n.updates?.url),expoConfig:n}:null}function Fd(e,t,n={}){let i=me(n.runtimeVersion)||me(e.ota?.runtimeVersion);if(i)return i;let r={iosBuildNumber:n.iosBuildNumber,androidVersionCode:n.androidVersionCode},o=Yo(e.ota?.runtimeVersionPolicy);if(o){let s=Bn({policy:o},t,n.platform,r);if(s)return s}return Md(t,n.platform,r)}function Kt(e,t={}){let n=t.cwd||process.cwd(),i=me(t.runtimeVersion)||me(e.ota?.runtimeVersion);if(i)return i;let r=Yo(e.ota?.runtimeVersionPolicy),o={iosBuildNumber:t.iosBuildNumber,androidVersionCode:t.androidVersionCode};if((t.framework||e.framework||Ld(n))==="expo"){let a=Wo(n),l=a?Fd(e,a,{platform:t.platform,iosBuildNumber:o.iosBuildNumber,androidVersionCode:o.androidVersionCode}):void 0;if(l)return l}return zo(n)||"1.0.0"}import P from"fs";import $t from"os";import N from"path";import{spawn as ns,spawnSync as Ge}from"child_process";import{randomUUID as Bd}from"crypto";import{pipeline as Hd}from"stream/promises";import{isCancel as Zi,log as C,select as is,spinner as Yt,text as jd}from"@clack/prompts";import Wt from"axios";import T from"chalk";import jn from"adm-zip";var Gd={android:"pixel_6",ios:"iphone_17_pro"};function Qi(e){return Gd[e]}async function rs(e){if(e.localRunner){let n=await Yd(e);process.exitCode=n?n.exitCode:1;return}if(e.local){let n=await qd(e);n&&(process.exitCode=n.exitCode);return}let t=await ir(e);if(t&&(C.success(T.green(`Maestro run ${t.status||"queued"}: ${t.testRunId}`)),t.launchDeferredReason&&C.warn(T.yellow(t.launchDeferredReason)),t.dashboardUrl&&C.info(T.dim("View test run: ")+T.white.underline(t.dashboardUrl)),e.wait)){let n=await Jd(e,t);n&&(process.exitCode=n.status==="passed"?0:1)}}var Vd=new Set(["passed","failed","cancelled","interrupted"]),qo=Number(process.env.MACH_FLOW_UPLOAD_MAX_ATTEMPTS||4),zd=Number(process.env.MACH_FLOW_UPLOAD_TIMEOUT_MS||12e4),os=process.env.MACH_MAESTRO_FAST_FAIL_RETRY==="1";function nr(e){let t=Array.isArray(e)?e:e?[e]:[];return[...new Set(t.flatMap(n=>String(n||"").split(",")).map(n=>n.trim()).filter(Boolean))]}function Kd(e){let t=nr(e);if(t.length===0)return;let n={};for(let i of t){let r=process.env[i];r!==void 0&&(n[i]=r)}return Object.keys(n).length>0?n:void 0}function Wd(e){let t={};for(let[i,r]of Object.entries(process.env))i.startsWith("MAESTRO_TEST_")&&r!==void 0&&(t[i]=r);let n=nr(e);for(let i of n){let r=process.env[i];r!==void 0&&(t[i]=r)}return t}async function Yd(e){let t=e.projectId,n=e.testRunId,i=e.runnerToken||process.env.MACH_RUNNER_TOKEN||process.env.MACH_TOKEN,r=(process.env.MACH_API_URL||Ze).replace(/\/$/,""),o=P.mkdtempSync(N.join($t.tmpdir(),"mach-maestro-runner-")),s=N.join(o,"mach-maestro-output"),a=N.join(o,"runner.log");if(P.mkdirSync(s,{recursive:!0}),!t||!n||!i)return C.error(T.red("--local-runner requires --project-id, --test-run-id, and a runner token.")),{status:"failed",exitCode:1,attempts:0,flows:".maestro",platform:e.platform};let l=null,d=null,c=null,u,f,p=h=>{P.appendFileSync(a,`${h}${h.endsWith(`
1481
1527
  `)?"":`
1482
- `}`)},g=async(h,y)=>{try{await Wt.post(`${r}/internal/tests/${encodeURIComponent(n)}/runner`,{projectId:t,runnerToken:i,status:h,error:y,logPreview:Yd(a),device:f,junitUrl:l?.urls?.junitDownloadUrl,logsUrl:l?.urls?.logsDownloadUrl,artifactsUrl:l?.urls?.artifactsDownloadUrl})}catch(b){p(`[WARN] Could not post runner update: ${b.message||b}`)}};try{p(`Mach Maestro local runner starting for ${n}`);let h=await Wt.post(`${r}/internal/tests/${encodeURIComponent(n)}/runner-payload`,{projectId:t,runnerToken:i});if(h.data?.status!=="success"||!h.data?.payload)throw new Error(h.data?.message||"Runner payload was not returned.");l=h.data.payload;let y=Object.keys(l.env||{});p(`Using Maestro env vars: ${y.length>0?y.join(", "):"none"}`);let b={...process.env,...l.env||{}},w=Xd(l.env);w.length>0&&p(`Passing Maestro env vars to test command: ${y.sort().join(", ")}`),await g("running");let L=l.platform==="android"?"app.apk":"app.zip",_=x.join(o,L),H=x.join(o,"source.zip"),W=x.join(o,"source");O.mkdirSync(W,{recursive:!0}),p("Downloading app artifact..."),await Xi(l.artifactUrl,_),p(`Downloaded app artifact: ${L} (${Ko(O.statSync(_).size)})`),p("Downloading Maestro source..."),await Xi(l.urls.sourceUrl,H),p(`Downloaded Maestro source: source.zip (${Ko(O.statSync(H).size)})`),new jn(H).extractAllTo(W,!0);let Z=Zd(W,l.flowPath||".maestro");if(!O.existsSync(Z))throw new Error(`Maestro flow path not found: ${l.flowPath||".maestro"}`);if(p(`Resolved Maestro flow path: ${x.relative(W,Z)||"."}`),l.platform==="ios"){let A=await rc(l.device||Yi("ios"),a);u=A.udid,f=A.name,await g("running");let D=oc(_,o),v=ss(D,a);p(`Resolved iOS app bundle: ${D}`),p(`Resolved iOS bundle id: ${v||"unknown"}`),ac(D,a,A.udid),Zi("xcrun",["simctl","install",A.udid,D],a),v&&(c={platform:l.platform,appId:v,deviceId:A.udid}),v&&qe("xcrun",["simctl","get_app_container",A.udid,v,"app"],a),Ki(s,a,"ios-before-maestro.png",A.udid),l.record&&(d=sc(s,a,A.udid))}else{let A=cc(_,a),D=dc(l.device,a);u=D||void 0,f=l.device||Yi("android");let v=D?["-s",D]:[];p(`Resolved Android application id: ${A||"unknown"}`),Zi("adb",[...v,"install","-r",_],a),A&&(c={platform:l.platform,appId:A,deviceId:D||void 0})}let oe=Math.max(0,Math.min(10,Number(l.retries??1)))+1,R=x.join(s,"report.xml"),T=nc(a);if(!T)throw new Error("Maestro CLI not found on this runner. Install Maestro or set MAESTRO_BIN to the full maestro path.");let E=1;for(let A=1;A<=oe;A+=1){p(`Running Maestro attempt ${A}/${oe}...`);let D=[...u?["--device",u]:[],"test","--platform",l.platform,...w,Z,"--format","junit","--output",R,"--test-output-dir",s];if(es&&A<oe?E=(await os(T,D,{logPath:a,env:b,fastFailOnFlowFailure:!0})).exitCode:E=qe(T,D,a,void 0,b),E===0)break}return l.platform==="ios"&&Ki(s,a,"ios-after-maestro.png",u),await Wo(d,a),d=null,await Yo(l.urls,o,s,a),E===0?(await g("passed"),C.success(k.green(`Managed Maestro run passed: ${n}`)),{status:"passed",exitCode:0,attempts:oe,flows:l.flowPath,platform:l.platform}):(await g("failed",`Maestro exited with code ${E}`),C.error(k.red(`Managed Maestro run failed with exit code ${E}`)),{status:"failed",exitCode:E,attempts:oe,flows:l.flowPath,platform:l.platform})}catch(h){let y=h.message||String(h);return p(`MACH_MAESTRO_RUN_FAILED: ${y}`),l?.platform==="ios"&&Ki(s,a,"ios-after-failure.png",u),await Wo(d,a),l?.urls&&await Yo(l.urls,o,s,a),await g("failed",y),C.error(k.red(`Managed Maestro runner failed: ${y}`)),{status:"failed",exitCode:1,attempts:0,flows:l?.flowPath||".maestro",platform:l?.platform||e.platform}}finally{lc(c,a)}}async function jd(e){let t=e.maestroFlows||".maestro",n=ns(e.maestroRetries);if(n===null)return null;let i=x.resolve(t);if(!O.existsSync(i))return C.error(k.red(`Maestro flows not found: ${t}`)),{status:"failed",exitCode:1,attempts:0,flows:t,platform:e.platform};let r=await Wd(e);if(r?.url){if(!await Jd(r))return{status:"failed",exitCode:1,attempts:0,flows:t,platform:r.platform||e.platform}}else if(e.buildId||e.buildUrl||e.artifactUrl||e.latest)return{status:"failed",exitCode:1,attempts:0,flows:t,platform:e.platform};e.maestroRecord&&C.warn(k.yellow("--maestro-record is managed-runner only and is ignored in --local mode."));let o=r?.platform||e.platform,s=["test"];o&&s.push("--platform",o),e.maestroDevice&&s.push("--device",String(e.maestroDevice));let a=Fd(e.maestroEnv),l=Object.keys(a);if(l.length>0){C.info(k.dim(`Passing Maestro env vars to local run: ${l.join(", ")}`));for(let[p,g]of Object.entries(a))s.push("-e",`${p}=${g}`)}s.push(t);let d=n+1,c=1;for(let p=1;p<=d;p+=1){if(C.info(k.dim(`Running local Maestro attempt ${p}/${d}...`)),es&&p<d){let g=await os("maestro",s,{cwd:process.cwd(),env:process.env,echoOutput:!0,fastFailOnFlowFailure:!0});if(g.error){let h=g.error.message||"Failed to run Maestro";C.error(k.red(`Local Maestro failed to start: ${h}`)),C.info(k.dim("Install Maestro locally, then retry: https://maestro.mobile.dev/getting-started/installing-maestro")),c=1;break}c=g.exitCode}else{let g=Ge("maestro",s,{cwd:process.cwd(),stdio:"inherit",env:process.env});if(g.error){let h=g.error.message||"Failed to run Maestro";C.error(k.red(`Local Maestro failed to start: ${h}`)),C.info(k.dim("Install Maestro locally, then retry: https://maestro.mobile.dev/getting-started/installing-maestro")),c=1;break}c=typeof g.status=="number"?g.status:1}if(c===0)break}let u=c===0?"passed":"failed",f={status:u,exitCode:c,attempts:d,flows:t,platform:o};return yc(e,f),u==="passed"?C.success(k.green("Local Maestro run passed")):C.error(k.red(`Local Maestro run failed with exit code ${c}`)),f}async function er(e){let t=ce(`./${m.configFileName}`),n=e.projectId||t?.projectId,i=String(e.profile||e.buildProfile||"production").toLowerCase();if(!n)return C.error(`No projectId found. Run \`${m.nameLower} link\` first or pass an internal project id.`),null;let r=e.platform;if(!r&&e.latest){let f=await Zo({message:"Select platform for the latest build:",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"}]});if(Ji(f))return null;r=f}let o=await Kd(e);if(!o)return null;if(o.kind==="latest"&&!r)return C.error("Pass --platform when using --latest."),null;if(o.kind==="artifact-url"&&!r)return C.error("Pass --platform when using --artifact-url."),null;let s=ns(e.maestroRetries);if(s===null)return null;let a=Qi(e.maestroEnv),l=Ud(e.maestroEnv);!e.quiet&&a.length>0&&C.info(k.dim(`Forwarding Maestro env vars by name: ${a.join(", ")}`));let d=await Gd(e,n);if(d===null)return null;let c=qt();e.quiet||c.start("Queuing Maestro run...");let u=e.maestroDevice||(r?Yi(r):void 0);try{let f=await $.post("/tests/maestro",{projectId:n,platform:r,profile:i,latest:o.kind==="latest",buildId:o.kind==="build-id"?o.value:e.buildId,buildUrl:o.kind==="build-url"?o.value:e.buildUrl,artifactUrl:o.kind==="artifact-url"?o.value:e.artifactUrl,flowSourceKey:d,flows:e.maestroFlows||".maestro",...u?{device:u}:{},retries:s,record:!!e.maestroRecord,...a.length>0?{envNames:a}:{},...l?{env:l}:{}});if(f.data.status!=="success")throw new Error(f.data.message||"Failed to queue Maestro run");let p=f.data.testRun,g={testRunId:p.testRunId,status:p.status,projectId:n,buildId:p.buildId,platform:p.platform,dashboardUrl:p.dashboardUrl||`${He}/tests/${p.testRunId}`,launchDeferredReason:p.launchDeferredReason};return ls(e,g),e.quiet||c.stop("Maestro run queued"),g}catch(f){e.quiet||c.stop("Could not queue Maestro run");let p=f.response?.data?.message||f.message||"Unknown error";return C.error(k.red(`Maestro queue failed: ${p}`)),null}}async function Hd(e,t){let n=zo(e.waitTimeout,60,"--wait-timeout"),i=zo(e.waitInterval,15,"--wait-interval");if(n===null||i===null)return null;let r=n*60*1e3,o=Math.max(5,i)*1e3,s=Date.now(),a=t.status||"queued";for(C.info(k.dim(`Waiting for Maestro run ${t.testRunId} to finish...`));Date.now()-s<=r;){let l=await zd(t.projectId,t.testRunId);if(!l)return null;if(l.status&&l.status!==a&&(a=l.status,C.info(k.dim(`Maestro status: ${a}`))),Ld.has(String(l.status)))return ls(e,l),l.status==="passed"?C.success(k.green(`Maestro run passed: ${l.testRunId}`)):(C.error(k.red(`Maestro run ${l.status}: ${l.testRunId}`)),l.error&&C.error(k.red(String(l.error)))),l;await tr(o)}return C.error(k.red(`Timed out waiting for Maestro run ${t.testRunId} after ${n} minute(s).`)),{...t,status:"timeout"}}async function Gd(e,t){if(e.maestroUseBuildSource)return;let n=e.maestroFlows||".maestro",i=x.resolve(n);if(!O.existsSync(i))return e.maestroFlows?(C.error(k.red(`Maestro flows not found: ${n}`)),null):void 0;let r=x.relative(process.cwd(),i);if(!r||r.startsWith("..")||x.isAbsolute(r))return C.error(k.red("Managed Maestro flow uploads must be inside the current project directory.")),null;let o=qt();e.quiet||o.start(`Uploading Maestro flows from ${r}...`);try{let s=await $.post("/tests/maestro/source-upload-url",{projectId:t,uploadId:Td()});if(s.data.status!=="success"||!s.data.uploadUrl||!s.data.key)throw new Error(s.data.message||"Failed to get Maestro flow upload URL");let a=new jn;if(O.statSync(i).isDirectory())a.addLocalFolder(i,r);else{let c=x.dirname(r);a.addLocalFile(i,c==="."?void 0:c,x.basename(r))}let d=a.toBuffer();return await Vd(s.data.uploadUrl,d,"application/zip","Maestro flow upload",c=>{e.quiet||o.message(c)}),e.quiet||o.stop("Maestro flows uploaded"),s.data.key}catch(s){e.quiet||o.stop("Could not upload Maestro flows");let a=s.response?.data?.message||s.message||"Unknown error";return C.error(k.red(`Maestro flow upload failed: ${a}`)),null}}function ts(e){let t=e.response?.status,n=e.code||"",i=e.message||"";return t&&![408,409,425,429].includes(t)&&t<500?!1:/ECONNRESET|ETIMEDOUT|EAI_AGAIN|ENOTFOUND|ECONNABORTED|socket hang up|network|timeout/i.test(`${n} ${i}`)||!t}async function Vd(e,t,n,i,r){let o;for(let s=1;s<=Vo;s+=1)try{await Wt.put(e,t,{headers:{"Content-Type":n},maxBodyLength:1/0,maxContentLength:1/0,timeout:Md});return}catch(a){if(o=a,!ts(a)||s>=Vo)break;let l=Math.min(2e4,2e3*s),d=a.code||a.response?.status||a.message||"network error";r?.(`${i} attempt ${s} failed (${d}), retrying...`),await tr(l)}throw o}async function zd(e,t){try{let n=await $.get(`/tests/${encodeURIComponent(t)}`,{params:{projectId:e}});if(n.data.status!=="success")throw new Error(n.data.message||"Failed to fetch Maestro run");let i=n.data.testRun;return{testRunId:i.testRunId,status:i.status,projectId:e,buildId:i.buildId,platform:i.platform,dashboardUrl:i.dashboardUrl||`${He}/tests/${i.testRunId}`,launchDeferredReason:i.launchDeferredReason,...i.error?{error:i.error}:{}}}catch(n){let i=n.response?.data?.message||n.message||"Unknown error";return C.error(k.red(`Could not fetch Maestro run status: ${i}`)),null}}async function Kd(e){if(e.buildId)return{kind:"build-id",value:e.buildId};if(e.buildUrl)return{kind:"build-url",value:e.buildUrl};if(e.artifactUrl)return{kind:"artifact-url",value:e.artifactUrl};if(e.latest)return{kind:"latest"};let t=await Zo({message:"Select app artifact source for Maestro:",options:[{value:"latest",label:"Latest successful build"},{value:"build-id",label:"Build ID"},{value:"build-url",label:`${m.name} build URL`},{value:"artifact-url",label:"Direct artifact URL"}]});if(Ji(t))return null;if(t==="latest")return{kind:"latest"};let n=await Nd({message:t==="build-id"?"Enter build ID:":t==="build-url"?`Enter ${m.name} build URL:`:"Enter artifact URL:",validate:i=>{let r=String(i||"").trim();if(!r)return"Value is required";if((t==="build-url"||t==="artifact-url")&&!r.startsWith("http"))return"Must be a URL"}});return Ji(n)?null:{kind:t,value:String(n).trim()}}function zo(e,t,n){if(e==null||e==="")return t;let i=Number(e);return!Number.isFinite(i)||i<=0?(C.error(`${n} must be a positive number.`),null):i}function tr(e){return new Promise(t=>setTimeout(t,e))}function ns(e){if(e==null||e==="")return 1;let t=Number(e);return!Number.isInteger(t)||t<0||t>10?(C.error("--maestro-retries must be an integer between 0 and 10."),null):t}async function Wd(e){if(e.artifactUrl)return{url:e.artifactUrl,platform:e.platform||ir(e.artifactUrl),name:as(e.artifactUrl)};let t=e.buildId||hc(e.buildUrl);return t?is(t,e.platform):e.latest?qd(e):null}async function is(e,t){let n=qt();n.start(`Resolving build ${e}...`);try{let i=await $.get(`/public/builds/${encodeURIComponent(e)}`);if(i.data.status!=="success")throw new Error(i.data.message||"Build lookup failed");let r=t||i.data.build?.platform,o=gc(i.data.artifacts||[],r);if(!o?.downloadUrl)throw new Error("No installable APK or simulator app artifact found for this build.");return n.stop("Build artifact resolved"),{url:o.downloadUrl,platform:r||ir(o.name||o.downloadUrl),name:o.name}}catch(i){n.stop("Could not resolve build artifact");let r=i.response?.data?.message||i.message||"Unknown error";return C.error(k.red(`Local Maestro artifact lookup failed: ${r}`)),null}}async function qd(e){let t=ce(`./${m.configFileName}`),n=e.projectId||t?.projectId,i=String(e.profile||e.buildProfile||"production").toLowerCase();if(!n)return C.error(`No projectId found. Run \`${m.nameLower} link\` first or pass --build-id/--artifact-url.`),null;if(!e.platform)return C.error("Pass --platform when using --latest with --local."),null;let r=qt();r.start("Resolving latest build...");try{let o=await $.get(`/builds/${n}`,{params:{limit:100}}),a=(Array.isArray(o.data.builds)?o.data.builds:[]).find(l=>l.status==="success"&&l.platform===e.platform&&String(l.buildProfile||l.buildType||"production").toLowerCase()===i);if(!a?.buildId)throw new Error(`No successful ${e.platform} build found for profile ${i}.`);return r.stop(`Latest build resolved: ${a.buildId}`),is(a.buildId,e.platform)}catch(o){r.stop("Could not resolve latest build");let s=o.response?.data?.message||o.message||"Unknown error";return C.error(k.red(`Latest build lookup failed: ${s}`)),null}}async function Jd(e){let t=e.platform||ir(e.url);if(!t)return C.error(k.red("Could not infer platform for local install. Pass --platform android or --platform ios.")),!1;let n=O.mkdtempSync(x.join($t.tmpdir(),"mach-maestro-")),i=e.name||as(e.url)||(t==="android"?"app.apk":"app.zip"),r=x.join(n,i),o=qt();o.start(`Downloading ${i}...`);try{await Xi(e.url,r),o.stop("Artifact downloaded")}catch(s){return o.stop("Artifact download failed"),C.error(k.red(s.message||"Failed to download artifact")),!1}return t==="android"?fc(r):mc(r,n)}async function Xi(e,t){let n=await Wt.get(e,{responseType:"stream"});await kd(n.data,O.createWriteStream(t))}function Yd(e,t=12e3){try{return O.readFileSync(e,"utf-8").slice(-t)}catch{return""}}function Ko(e){if(!Number.isFinite(e)||e<0)return"unknown size";if(e<1024)return`${e} B`;let t=["KB","MB","GB"],n=e/1024,i=t[0];for(let r=1;n>=1024&&r<t.length;r+=1)n/=1024,i=t[r];return`${n.toFixed(n>=10?1:2)} ${i}`}function Xd(e){return Object.entries(e||{}).filter(([t,n])=>!!t&&n!==void 0).sort(([t],[n])=>t.localeCompare(n)).flatMap(([t,n])=>["-e",`${t}=${n}`])}function Zd(e,t){let n=x.resolve(e,t||".maestro"),i=x.relative(e,n);if(i.startsWith("..")||x.isAbsolute(i))throw new Error("Maestro flow path must stay inside the build source.");return n}function rs(e,t){let n=[e];for(let i=0;i<t.length;i+=1){let r=t[i],o=t[i-1];(o==="-e"||o==="--env")&&/^[A-Za-z_][A-Za-z0-9_]*=/.test(r)?n.push(`${r.slice(0,r.indexOf("="))}=<redacted>`):n.push(r)}return n.join(" ")}function Qd(e){return/\[Failed\]\s+/.test(e)}function ec(e){if(!e.killed){try{e.kill("SIGTERM")}catch{}setTimeout(()=>{try{e.kill("SIGKILL")}catch{}},5e3).unref()}}function os(e,t,n={}){let{cwd:i,env:r=process.env,logPath:o,echoOutput:s=!1,fastFailOnFlowFailure:a=!1}=n;return o&&O.appendFileSync(o,`
1483
- $ ${rs(e,t)}
1484
- `),new Promise(l=>{let d=!1,c=!1,u="",f=h=>{c||(c=!0,l(h))},p=Xo(e,t,{cwd:i,env:r,stdio:["ignore","pipe","pipe"]}),g=h=>{u+=h;let y=u.split(/\r?\n/);u=y.pop()||"";for(let b of y)if(a&&Qd(b)&&!d){d=!0;let w="Mach fast-fail: detected failed Maestro flow; stopping this attempt early to retry...";o&&O.appendFileSync(o,`
1485
- ${w}
1486
- `),s&&process.stderr.write(`${w}
1487
- `),ec(p)}};p.stdout?.on("data",h=>{let y=h.toString();o&&O.appendFileSync(o,y),s&&process.stdout.write(y),g(y)}),p.stderr?.on("data",h=>{let y=h.toString();o&&O.appendFileSync(o,y),s&&process.stderr.write(y),g(y)}),p.on("error",h=>{o&&O.appendFileSync(o,`${h.message}
1488
- `),f({exitCode:1,fastFailed:d,error:h})}),p.on("close",(h,y)=>{d&&o&&O.appendFileSync(o,`Maestro attempt stopped after first failed flow${y?` (${y})`:""}.
1489
- `),f({exitCode:typeof h=="number"?h:1,fastFailed:d})})})}function qe(e,t,n,i,r=process.env){O.appendFileSync(n,`
1490
- $ ${rs(e,t)}
1491
- `);let o=Ge(e,t,{cwd:i,encoding:"utf-8",env:r});return o.stdout&&O.appendFileSync(n,o.stdout),o.stderr&&O.appendFileSync(n,o.stderr),o.error?(O.appendFileSync(n,`${o.error.message}
1492
- `),1):typeof o.status=="number"?o.status:1}function Zi(e,t,n,i){let r=qe(e,t,n,i);if(r!==0)throw new Error(`${e} ${t.join(" ")} failed with exit code ${r}`)}function tc(e){try{return O.accessSync(e,O.constants.X_OK),!0}catch{return!1}}function nc(e){let t=[process.env.MAESTRO_BIN,x.join($t.homedir(),".maestro","bin","maestro"),"/opt/homebrew/bin/maestro","/usr/local/bin/maestro"].filter(Boolean),n=Ge("/usr/bin/env",["which","maestro"],{encoding:"utf-8",env:process.env}),i=n.status===0?String(n.stdout||"").split(`
1493
- `)[0]?.trim():"";i&&t.unshift(i);for(let r of t)if(r&&tc(r))return e&&O.appendFileSync(e,`Using Maestro CLI at ${r}
1494
- `),r;return e&&O.appendFileSync(e,`Maestro CLI not found. Checked: ${t.join(", ")}
1495
- `),null}function ic(e){let t=String(e||"").trim();return t?t.replace(/_/g," ").replace(/\bios\b/gi,"").replace(/\biphone\b/i,"iPhone").replace(/\bpro\b/gi,"Pro").replace(/\bmax\b/gi,"Max").replace(/\s+/g," ").trim():"iPhone 17 Pro"}async function rc(e,t){let n=ic(e),i=Ge("xcrun",["simctl","list","devices","--json"],{encoding:"utf-8"});if(i.status!==0||!i.stdout)throw new Error("Could not list iOS simulators.");let r=JSON.parse(i.stdout),o=Object.values(r.devices||{}).flatMap(l=>Array.isArray(l)?l:[]).filter(l=>l?.isAvailable),s=n.toLowerCase(),a=o.find(l=>l.udid===e)||o.find(l=>l.name===n)||o.find(l=>String(l.name||"").toLowerCase().includes(s));if(!a?.udid)throw new Error(`No available iOS Simulator found for ${n}.`);return a.state==="Booted"?O.appendFileSync(t,`Using already booted iOS Simulator ${a.name} (${a.udid}).
1496
- `):(O.appendFileSync(t,`Booting iOS Simulator ${a.name} (${a.udid})...
1497
- `),qe("xcrun",["simctl","boot",a.udid],t)!==0&&O.appendFileSync(t,`simctl boot returned non-zero; continuing to bootstatus in case it was already booting.
1498
- `),Zi("xcrun",["simctl","bootstatus",a.udid,"-b"],t)),{name:String(a.name||n),udid:a.udid}}function oc(e,t){if(e.endsWith(".ipa"))throw new Error("iOS Maestro runs need a simulator .app.zip artifact, not an App Store .ipa.");if(e.endsWith(".zip")){let n=x.join(t,"ios-app");O.mkdirSync(n,{recursive:!0}),new jn(e).extractAllTo(n,!0);let i=nr(n);if(!i)throw new Error("Could not find a .app bundle inside the iOS artifact zip.");return i}if(e.endsWith(".app"))return e;throw new Error("iOS Maestro runs need a .app bundle or .app.zip artifact.")}function ss(e,t){let n=x.join(e,"Info.plist");if(!O.existsSync(n))return O.appendFileSync(t,`Could not find Info.plist in ${e}; skipping uninstall.
1499
- `),null;let i=Ge("/usr/bin/plutil",["-extract","CFBundleIdentifier","raw","-o","-",n],{encoding:"utf-8",env:process.env}),r=String(i.stdout||"").trim();return i.status!==0||!r?(O.appendFileSync(t,`Could not read CFBundleIdentifier from Info.plist; skipping uninstall.
1500
- `),null):r}function Ki(e,t,n,i){let r=x.join(e,n);qe("xcrun",["simctl","io",i||"booted","screenshot",r],t)!==0&&O.appendFileSync(t,`[WARN] Could not capture iOS simulator screenshot: ${n}
1501
- `)}function sc(e,t,n){let i=x.join(e,"ios-simulator-recording.mp4");O.appendFileSync(t,`Starting iOS simulator recording: ${i}
1502
- `);let r=Xo("xcrun",["simctl","io",n||"booted","recordVideo",i],{stdio:["ignore","pipe","pipe"],env:process.env});return r.stdout?.on("data",o=>{O.appendFileSync(t,o)}),r.stderr?.on("data",o=>{O.appendFileSync(t,o)}),r.on("error",o=>{O.appendFileSync(t,`[WARN] Could not start iOS simulator recording: ${o.message}
1503
- `)}),r}async function Wo(e,t){e&&await new Promise(n=>{let i=!1,r=()=>{i||(i=!0,n())};e.once("exit",r),e.once("close",r),e.killed||(O.appendFileSync(t,`Stopping iOS simulator recording...
1504
- `),e.kill("SIGINT")),setTimeout(()=>{!i&&!e.killed&&(O.appendFileSync(t,`[WARN] iOS simulator recording did not stop after SIGINT; sending SIGKILL.
1505
- `),e.kill("SIGKILL")),r()},5e3).unref?.()})}function ac(e,t,n){let i=ss(e,t);if(!i)return;O.appendFileSync(t,`Uninstalling existing iOS app data for ${i} if present...
1506
- `),qe("xcrun",["simctl","uninstall",n||"booted",i],t)!==0&&O.appendFileSync(t,`No existing app install removed for ${i}; continuing.
1507
- `)}function lc(e,t){if(!e?.appId)return;if(O.appendFileSync(t,`Cleaning up installed app after Maestro run...
1508
- `),e.platform==="ios"){let r=qe("xcrun",["simctl","uninstall",e.deviceId||"booted",e.appId],t);r===0?O.appendFileSync(t,`Uninstalled iOS app ${e.appId} after Maestro run.
1509
- `):O.appendFileSync(t,`Warning: failed to uninstall iOS app ${e.appId} after Maestro run: xcrun simctl uninstall exited with code ${r}
1510
- `);return}let n=e.deviceId?["-s",e.deviceId]:[],i=qe("adb",[...n,"uninstall",e.appId],t);i===0?O.appendFileSync(t,`Uninstalled Android app ${e.appId} after Maestro run.
1511
- `):O.appendFileSync(t,`Warning: failed to uninstall Android app ${e.appId} after Maestro run: adb uninstall exited with code ${i}
1512
- `)}function dc(e,t){let n=Ge("adb",["devices"],{encoding:"utf-8",env:process.env});if(n.status!==0||n.error)return O.appendFileSync(t,`[WARN] Could not list Android devices before install; using adb default target.
1528
+ `}`)},g=async(h,A)=>{try{await Wt.post(`${r}/internal/tests/${encodeURIComponent(n)}/runner`,{projectId:t,runnerToken:i,status:h,error:A,logPreview:rc(a),device:f,junitUrl:l?.urls?.junitDownloadUrl,logsUrl:l?.urls?.logsDownloadUrl,artifactsUrl:l?.urls?.artifactsDownloadUrl})}catch(S){p(`[WARN] Could not post runner update: ${S.message||S}`)}};try{p(`Mach Maestro local runner starting for ${n}`);let h=await Wt.post(`${r}/internal/tests/${encodeURIComponent(n)}/runner-payload`,{projectId:t,runnerToken:i});if(h.data?.status!=="success"||!h.data?.payload)throw new Error(h.data?.message||"Runner payload was not returned.");l=h.data.payload;let A=Object.keys(l.env||{});p(`Using Maestro env vars: ${A.length>0?A.join(", "):"none"}`);let S={...process.env,...l.env||{}},I=oc(l.env);I.length>0&&p(`Passing Maestro env vars to test command: ${A.sort().join(", ")}`),await g("running");let L=l.platform==="android"?"app.apk":"app.zip",w=N.join(o,L),j=N.join(o,"source.zip"),W=N.join(o,"source");P.mkdirSync(W,{recursive:!0}),p("Downloading app artifact..."),await er(l.artifactUrl,w),p(`Downloaded app artifact: ${L} (${Xo(P.statSync(w).size)})`),p("Downloading Maestro source..."),await er(l.urls.sourceUrl,j),p(`Downloaded Maestro source: source.zip (${Xo(P.statSync(j).size)})`),new jn(j).extractAllTo(W,!0);let Z=sc(W,l.flowPath||".maestro");if(!P.existsSync(Z))throw new Error(`Maestro flow path not found: ${l.flowPath||".maestro"}`);if(p(`Resolved Maestro flow path: ${N.relative(W,Z)||"."}`),l.platform==="ios"){let $=await pc(l.device||Qi("ios"),a);u=$.udid,f=$.name,await g("running");let _=fc(w,o),R=us(_,a);p(`Resolved iOS app bundle: ${_}`),p(`Resolved iOS bundle id: ${R||"unknown"}`),gc(_,a,$.udid),tr("xcrun",["simctl","install",$.udid,_],a),R&&(c={platform:l.platform,appId:R,deviceId:$.udid}),R&&We("xcrun",["simctl","get_app_container",$.udid,R,"app"],a),qi(s,a,"ios-before-maestro.png",$.udid),l.record&&(d=mc(s,a,$.udid))}else{let $=yc(w,a),_=Ac(l.device,a);u=_||void 0,f=l.device||Qi("android");let R=_?["-s",_]:[];p(`Resolved Android application id: ${$||"unknown"}`),tr("adb",[...R,"install","-r",w],a),$&&(c={platform:l.platform,appId:$,deviceId:_||void 0})}let re=Math.max(0,Math.min(10,Number(l.retries??1)))+1,O=N.join(s,"report.xml"),x=cc(a);if(!x)throw new Error("Maestro CLI not found on this runner. Install Maestro or set MAESTRO_BIN to the full maestro path.");let y=1;for(let $=1;$<=re;$+=1){p(`Running Maestro attempt ${$}/${re}...`);let _=[...u?["--device",u]:[],"test","--platform",l.platform,...I,Z,"--format","junit","--output",O,"--test-output-dir",s];if(os&&$<re?y=(await cs(x,_,{logPath:a,env:S,fastFailOnFlowFailure:!0})).exitCode:y=We(x,_,a,void 0,S),y===0)break}return l.platform==="ios"&&qi(s,a,"ios-after-maestro.png",u),await Zo(d,a),d=null,await ts(l.urls,o,s,a),y===0?(await g("passed"),C.success(T.green(`Managed Maestro run passed: ${n}`)),{status:"passed",exitCode:0,attempts:re,flows:l.flowPath,platform:l.platform}):(await g("failed",`Maestro exited with code ${y}`),C.error(T.red(`Managed Maestro run failed with exit code ${y}`)),{status:"failed",exitCode:y,attempts:re,flows:l.flowPath,platform:l.platform})}catch(h){let A=h.message||String(h);return p(`MACH_MAESTRO_RUN_FAILED: ${A}`),l?.platform==="ios"&&qi(s,a,"ios-after-failure.png",u),await Zo(d,a),l?.urls&&await ts(l.urls,o,s,a),await g("failed",A),C.error(T.red(`Managed Maestro runner failed: ${A}`)),{status:"failed",exitCode:1,attempts:0,flows:l?.flowPath||".maestro",platform:l?.platform||e.platform}}finally{hc(c,a)}}async function qd(e){let t=e.maestroFlows||".maestro",n=as(e.maestroRetries);if(n===null)return null;let i=N.resolve(t);if(!P.existsSync(i))return C.error(T.red(`Maestro flows not found: ${t}`)),{status:"failed",exitCode:1,attempts:0,flows:t,platform:e.platform};let r=await tc(e);if(r?.url){if(!await ic(r))return{status:"failed",exitCode:1,attempts:0,flows:t,platform:r.platform||e.platform}}else if(e.buildId||e.buildUrl||e.artifactUrl||e.latest)return{status:"failed",exitCode:1,attempts:0,flows:t,platform:e.platform};e.maestroRecord&&C.warn(T.yellow("--maestro-record is managed-runner only and is ignored in --local mode."));let o=r?.platform||e.platform,s=["test"];o&&s.push("--platform",o),e.maestroDevice&&s.push("--device",String(e.maestroDevice));let a=Wd(e.maestroEnv),l=Object.keys(a);if(l.length>0){C.info(T.dim(`Passing Maestro env vars to local run: ${l.join(", ")}`));for(let[p,g]of Object.entries(a))s.push("-e",`${p}=${g}`)}s.push(t);let d=n+1,c=1;for(let p=1;p<=d;p+=1){if(C.info(T.dim(`Running local Maestro attempt ${p}/${d}...`)),os&&p<d){let g=await cs("maestro",s,{cwd:process.cwd(),env:process.env,echoOutput:!0,fastFailOnFlowFailure:!0});if(g.error){let h=g.error.message||"Failed to run Maestro";C.error(T.red(`Local Maestro failed to start: ${h}`)),C.info(T.dim("Install Maestro locally, then retry: https://maestro.mobile.dev/getting-started/installing-maestro")),c=1;break}c=g.exitCode}else{let g=Ge("maestro",s,{cwd:process.cwd(),stdio:"inherit",env:process.env});if(g.error){let h=g.error.message||"Failed to run Maestro";C.error(T.red(`Local Maestro failed to start: ${h}`)),C.info(T.dim("Install Maestro locally, then retry: https://maestro.mobile.dev/getting-started/installing-maestro")),c=1;break}c=typeof g.status=="number"?g.status:1}if(c===0)break}let u=c===0?"passed":"failed",f={status:u,exitCode:c,attempts:d,flows:t,platform:o};return $c(e,f),u==="passed"?C.success(T.green("Local Maestro run passed")):C.error(T.red(`Local Maestro run failed with exit code ${c}`)),f}async function ir(e){let t=de(`./${m.configFileName}`),n=e.projectId||t?.projectId,i=String(e.profile||e.buildProfile||"production").toLowerCase();if(!n)return C.error(`No projectId found. Run \`${m.nameLower} link\` first or pass an internal project id.`),null;let r=e.platform;if(!r&&e.latest){let f=await is({message:"Select platform for the latest build:",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"}]});if(Zi(f))return null;r=f}let o=await ec(e);if(!o)return null;if(o.kind==="latest"&&!r)return C.error("Pass --platform when using --latest."),null;if(o.kind==="artifact-url"&&!r)return C.error("Pass --platform when using --artifact-url."),null;let s=as(e.maestroRetries);if(s===null)return null;let a=nr(e.maestroEnv),l=Kd(e.maestroEnv);!e.quiet&&a.length>0&&C.info(T.dim(`Forwarding Maestro env vars by name: ${a.join(", ")}`));let d=await Xd(e,n);if(d===null)return null;let c=Yt();e.quiet||c.start("Queuing Maestro run...");let u=e.maestroDevice||(r?Qi(r):void 0);try{let f=await v.post("/tests/maestro",{projectId:n,platform:r,profile:i,latest:o.kind==="latest",buildId:o.kind==="build-id"?o.value:e.buildId,buildUrl:o.kind==="build-url"?o.value:e.buildUrl,artifactUrl:o.kind==="artifact-url"?o.value:e.artifactUrl,flowSourceKey:d,flows:e.maestroFlows||".maestro",...u?{device:u}:{},retries:s,record:!!e.maestroRecord,...a.length>0?{envNames:a}:{},...l?{env:l}:{}});if(f.data.status!=="success")throw new Error(f.data.message||"Failed to queue Maestro run");let p=f.data.testRun,g={testRunId:p.testRunId,status:p.status,projectId:n,buildId:p.buildId,platform:p.platform,dashboardUrl:p.dashboardUrl||`${je}/tests/${p.testRunId}`,launchDeferredReason:p.launchDeferredReason};return fs(e,g),e.quiet||c.stop("Maestro run queued"),g}catch(f){e.quiet||c.stop("Could not queue Maestro run");let p=f.response?.data?.message||f.message||"Unknown error";return C.error(T.red(`Maestro queue failed: ${p}`)),null}}async function Jd(e,t){let n=Jo(e.waitTimeout,60,"--wait-timeout"),i=Jo(e.waitInterval,15,"--wait-interval");if(n===null||i===null)return null;let r=n*60*1e3,o=Math.max(5,i)*1e3,s=Date.now(),a=t.status||"queued";for(C.info(T.dim(`Waiting for Maestro run ${t.testRunId} to finish...`));Date.now()-s<=r;){let l=await Qd(t.projectId,t.testRunId);if(!l)return null;if(l.status&&l.status!==a&&(a=l.status,C.info(T.dim(`Maestro status: ${a}`))),Vd.has(String(l.status)))return fs(e,l),l.status==="passed"?C.success(T.green(`Maestro run passed: ${l.testRunId}`)):(C.error(T.red(`Maestro run ${l.status}: ${l.testRunId}`)),l.error&&C.error(T.red(String(l.error)))),l;await rr(o)}return C.error(T.red(`Timed out waiting for Maestro run ${t.testRunId} after ${n} minute(s).`)),{...t,status:"timeout"}}async function Xd(e,t){if(e.maestroUseBuildSource)return;let n=e.maestroFlows||".maestro",i=N.resolve(n);if(!P.existsSync(i))return e.maestroFlows?(C.error(T.red(`Maestro flows not found: ${n}`)),null):void 0;let r=N.relative(process.cwd(),i);if(!r||r.startsWith("..")||N.isAbsolute(r))return C.error(T.red("Managed Maestro flow uploads must be inside the current project directory.")),null;let o=Yt();e.quiet||o.start(`Uploading Maestro flows from ${r}...`);try{let s=await v.post("/tests/maestro/source-upload-url",{projectId:t,uploadId:Bd()});if(s.data.status!=="success"||!s.data.uploadUrl||!s.data.key)throw new Error(s.data.message||"Failed to get Maestro flow upload URL");let a=new jn;if(P.statSync(i).isDirectory())a.addLocalFolder(i,r);else{let c=N.dirname(r);a.addLocalFile(i,c==="."?void 0:c,N.basename(r))}let d=a.toBuffer();return await Zd(s.data.uploadUrl,d,"application/zip","Maestro flow upload",c=>{e.quiet||o.message(c)}),e.quiet||o.stop("Maestro flows uploaded"),s.data.key}catch(s){e.quiet||o.stop("Could not upload Maestro flows");let a=s.response?.data?.message||s.message||"Unknown error";return C.error(T.red(`Maestro flow upload failed: ${a}`)),null}}function ss(e){let t=e.response?.status,n=e.code||"",i=e.message||"";return t&&![408,409,425,429].includes(t)&&t<500?!1:/ECONNRESET|ETIMEDOUT|EAI_AGAIN|ENOTFOUND|ECONNABORTED|socket hang up|network|timeout/i.test(`${n} ${i}`)||!t}async function Zd(e,t,n,i,r){let o;for(let s=1;s<=qo;s+=1)try{await Wt.put(e,t,{headers:{"Content-Type":n},maxBodyLength:1/0,maxContentLength:1/0,timeout:zd});return}catch(a){if(o=a,!ss(a)||s>=qo)break;let l=Math.min(2e4,2e3*s),d=a.code||a.response?.status||a.message||"network error";r?.(`${i} attempt ${s} failed (${d}), retrying...`),await rr(l)}throw o}async function Qd(e,t){try{let n=await v.get(`/tests/${encodeURIComponent(t)}`,{params:{projectId:e}});if(n.data.status!=="success")throw new Error(n.data.message||"Failed to fetch Maestro run");let i=n.data.testRun;return{testRunId:i.testRunId,status:i.status,projectId:e,buildId:i.buildId,platform:i.platform,dashboardUrl:i.dashboardUrl||`${je}/tests/${i.testRunId}`,launchDeferredReason:i.launchDeferredReason,...i.error?{error:i.error}:{}}}catch(n){let i=n.response?.data?.message||n.message||"Unknown error";return C.error(T.red(`Could not fetch Maestro run status: ${i}`)),null}}async function ec(e){if(e.buildId)return{kind:"build-id",value:e.buildId};if(e.buildUrl)return{kind:"build-url",value:e.buildUrl};if(e.artifactUrl)return{kind:"artifact-url",value:e.artifactUrl};if(e.latest)return{kind:"latest"};let t=await is({message:"Select app artifact source for Maestro:",options:[{value:"latest",label:"Latest successful build"},{value:"build-id",label:"Build ID"},{value:"build-url",label:`${m.name} build URL`},{value:"artifact-url",label:"Direct artifact URL"}]});if(Zi(t))return null;if(t==="latest")return{kind:"latest"};let n=await jd({message:t==="build-id"?"Enter build ID:":t==="build-url"?`Enter ${m.name} build URL:`:"Enter artifact URL:",validate:i=>{let r=String(i||"").trim();if(!r)return"Value is required";if((t==="build-url"||t==="artifact-url")&&!r.startsWith("http"))return"Must be a URL"}});return Zi(n)?null:{kind:t,value:String(n).trim()}}function Jo(e,t,n){if(e==null||e==="")return t;let i=Number(e);return!Number.isFinite(i)||i<=0?(C.error(`${n} must be a positive number.`),null):i}function rr(e){return new Promise(t=>setTimeout(t,e))}function as(e){if(e==null||e==="")return 1;let t=Number(e);return!Number.isInteger(t)||t<0||t>10?(C.error("--maestro-retries must be an integer between 0 and 10."),null):t}async function tc(e){if(e.artifactUrl)return{url:e.artifactUrl,platform:e.platform||sr(e.artifactUrl),name:ps(e.artifactUrl)};let t=e.buildId||wc(e.buildUrl);return t?ls(t,e.platform):e.latest?nc(e):null}async function ls(e,t){let n=Yt();n.start(`Resolving build ${e}...`);try{let i=await v.get(`/public/builds/${encodeURIComponent(e)}`);if(i.data.status!=="success")throw new Error(i.data.message||"Build lookup failed");let r=t||i.data.build?.platform,o=_c(i.data.artifacts||[],r);if(!o?.downloadUrl)throw new Error("No installable APK or simulator app artifact found for this build.");return n.stop("Build artifact resolved"),{url:o.downloadUrl,platform:r||sr(o.name||o.downloadUrl),name:o.name}}catch(i){n.stop("Could not resolve build artifact");let r=i.response?.data?.message||i.message||"Unknown error";return C.error(T.red(`Local Maestro artifact lookup failed: ${r}`)),null}}async function nc(e){let t=de(`./${m.configFileName}`),n=e.projectId||t?.projectId,i=String(e.profile||e.buildProfile||"production").toLowerCase();if(!n)return C.error(`No projectId found. Run \`${m.nameLower} link\` first or pass --build-id/--artifact-url.`),null;if(!e.platform)return C.error("Pass --platform when using --latest with --local."),null;let r=Yt();r.start("Resolving latest build...");try{let o=await v.get(`/builds/${n}`,{params:{limit:100}}),a=(Array.isArray(o.data.builds)?o.data.builds:[]).find(l=>l.status==="success"&&l.platform===e.platform&&String(l.buildProfile||l.buildType||"production").toLowerCase()===i);if(!a?.buildId)throw new Error(`No successful ${e.platform} build found for profile ${i}.`);return r.stop(`Latest build resolved: ${a.buildId}`),ls(a.buildId,e.platform)}catch(o){r.stop("Could not resolve latest build");let s=o.response?.data?.message||o.message||"Unknown error";return C.error(T.red(`Latest build lookup failed: ${s}`)),null}}async function ic(e){let t=e.platform||sr(e.url);if(!t)return C.error(T.red("Could not infer platform for local install. Pass --platform android or --platform ios.")),!1;let n=P.mkdtempSync(N.join($t.tmpdir(),"mach-maestro-")),i=e.name||ps(e.url)||(t==="android"?"app.apk":"app.zip"),r=N.join(n,i),o=Yt();o.start(`Downloading ${i}...`);try{await er(e.url,r),o.stop("Artifact downloaded")}catch(s){return o.stop("Artifact download failed"),C.error(T.red(s.message||"Failed to download artifact")),!1}return t==="android"?Ec(r):Ic(r,n)}async function er(e,t){let n=await Wt.get(e,{responseType:"stream"});await Hd(n.data,P.createWriteStream(t))}function rc(e,t=12e3){try{return P.readFileSync(e,"utf-8").slice(-t)}catch{return""}}function Xo(e){if(!Number.isFinite(e)||e<0)return"unknown size";if(e<1024)return`${e} B`;let t=["KB","MB","GB"],n=e/1024,i=t[0];for(let r=1;n>=1024&&r<t.length;r+=1)n/=1024,i=t[r];return`${n.toFixed(n>=10?1:2)} ${i}`}function oc(e){return Object.entries(e||{}).filter(([t,n])=>!!t&&n!==void 0).sort(([t],[n])=>t.localeCompare(n)).flatMap(([t,n])=>["-e",`${t}=${n}`])}function sc(e,t){let n=N.resolve(e,t||".maestro"),i=N.relative(e,n);if(i.startsWith("..")||N.isAbsolute(i))throw new Error("Maestro flow path must stay inside the build source.");return n}function ds(e,t){let n=[e];for(let i=0;i<t.length;i+=1){let r=t[i],o=t[i-1];(o==="-e"||o==="--env")&&/^[A-Za-z_][A-Za-z0-9_]*=/.test(r)?n.push(`${r.slice(0,r.indexOf("="))}=<redacted>`):n.push(r)}return n.join(" ")}function ac(e){return/\[Failed\]\s+/.test(e)}function lc(e){if(!e.killed){try{e.kill("SIGTERM")}catch{}setTimeout(()=>{try{e.kill("SIGKILL")}catch{}},5e3).unref()}}function cs(e,t,n={}){let{cwd:i,env:r=process.env,logPath:o,echoOutput:s=!1,fastFailOnFlowFailure:a=!1}=n;return o&&P.appendFileSync(o,`
1529
+ $ ${ds(e,t)}
1530
+ `),new Promise(l=>{let d=!1,c=!1,u="",f=h=>{c||(c=!0,l(h))},p=ns(e,t,{cwd:i,env:r,stdio:["ignore","pipe","pipe"]}),g=h=>{u+=h;let A=u.split(/\r?\n/);u=A.pop()||"";for(let S of A)if(a&&ac(S)&&!d){d=!0;let I="Mach fast-fail: detected failed Maestro flow; stopping this attempt early to retry...";o&&P.appendFileSync(o,`
1531
+ ${I}
1532
+ `),s&&process.stderr.write(`${I}
1533
+ `),lc(p)}};p.stdout?.on("data",h=>{let A=h.toString();o&&P.appendFileSync(o,A),s&&process.stdout.write(A),g(A)}),p.stderr?.on("data",h=>{let A=h.toString();o&&P.appendFileSync(o,A),s&&process.stderr.write(A),g(A)}),p.on("error",h=>{o&&P.appendFileSync(o,`${h.message}
1534
+ `),f({exitCode:1,fastFailed:d,error:h})}),p.on("close",(h,A)=>{d&&o&&P.appendFileSync(o,`Maestro attempt stopped after first failed flow${A?` (${A})`:""}.
1535
+ `),f({exitCode:typeof h=="number"?h:1,fastFailed:d})})})}function We(e,t,n,i,r=process.env){P.appendFileSync(n,`
1536
+ $ ${ds(e,t)}
1537
+ `);let o=Ge(e,t,{cwd:i,encoding:"utf-8",env:r});return o.stdout&&P.appendFileSync(n,o.stdout),o.stderr&&P.appendFileSync(n,o.stderr),o.error?(P.appendFileSync(n,`${o.error.message}
1538
+ `),1):typeof o.status=="number"?o.status:1}function tr(e,t,n,i){let r=We(e,t,n,i);if(r!==0)throw new Error(`${e} ${t.join(" ")} failed with exit code ${r}`)}function dc(e){try{return P.accessSync(e,P.constants.X_OK),!0}catch{return!1}}function cc(e){let t=[process.env.MAESTRO_BIN,N.join($t.homedir(),".maestro","bin","maestro"),"/opt/homebrew/bin/maestro","/usr/local/bin/maestro"].filter(Boolean),n=Ge("/usr/bin/env",["which","maestro"],{encoding:"utf-8",env:process.env}),i=n.status===0?String(n.stdout||"").split(`
1539
+ `)[0]?.trim():"";i&&t.unshift(i);for(let r of t)if(r&&dc(r))return e&&P.appendFileSync(e,`Using Maestro CLI at ${r}
1540
+ `),r;return e&&P.appendFileSync(e,`Maestro CLI not found. Checked: ${t.join(", ")}
1541
+ `),null}function uc(e){let t=String(e||"").trim();return t?t.replace(/_/g," ").replace(/\bios\b/gi,"").replace(/\biphone\b/i,"iPhone").replace(/\bpro\b/gi,"Pro").replace(/\bmax\b/gi,"Max").replace(/\s+/g," ").trim():"iPhone 17 Pro"}async function pc(e,t){let n=uc(e),i=Ge("xcrun",["simctl","list","devices","--json"],{encoding:"utf-8"});if(i.status!==0||!i.stdout)throw new Error("Could not list iOS simulators.");let r=JSON.parse(i.stdout),o=Object.values(r.devices||{}).flatMap(l=>Array.isArray(l)?l:[]).filter(l=>l?.isAvailable),s=n.toLowerCase(),a=o.find(l=>l.udid===e)||o.find(l=>l.name===n)||o.find(l=>String(l.name||"").toLowerCase().includes(s));if(!a?.udid)throw new Error(`No available iOS Simulator found for ${n}.`);return a.state==="Booted"?P.appendFileSync(t,`Using already booted iOS Simulator ${a.name} (${a.udid}).
1542
+ `):(P.appendFileSync(t,`Booting iOS Simulator ${a.name} (${a.udid})...
1543
+ `),We("xcrun",["simctl","boot",a.udid],t)!==0&&P.appendFileSync(t,`simctl boot returned non-zero; continuing to bootstatus in case it was already booting.
1544
+ `),tr("xcrun",["simctl","bootstatus",a.udid,"-b"],t)),{name:String(a.name||n),udid:a.udid}}function fc(e,t){if(e.endsWith(".ipa"))throw new Error("iOS Maestro runs need a simulator .app.zip artifact, not an App Store .ipa.");if(e.endsWith(".zip")){let n=N.join(t,"ios-app");P.mkdirSync(n,{recursive:!0}),new jn(e).extractAllTo(n,!0);let i=or(n);if(!i)throw new Error("Could not find a .app bundle inside the iOS artifact zip.");return i}if(e.endsWith(".app"))return e;throw new Error("iOS Maestro runs need a .app bundle or .app.zip artifact.")}function us(e,t){let n=N.join(e,"Info.plist");if(!P.existsSync(n))return P.appendFileSync(t,`Could not find Info.plist in ${e}; skipping uninstall.
1545
+ `),null;let i=Ge("/usr/bin/plutil",["-extract","CFBundleIdentifier","raw","-o","-",n],{encoding:"utf-8",env:process.env}),r=String(i.stdout||"").trim();return i.status!==0||!r?(P.appendFileSync(t,`Could not read CFBundleIdentifier from Info.plist; skipping uninstall.
1546
+ `),null):r}function qi(e,t,n,i){let r=N.join(e,n);We("xcrun",["simctl","io",i||"booted","screenshot",r],t)!==0&&P.appendFileSync(t,`[WARN] Could not capture iOS simulator screenshot: ${n}
1547
+ `)}function mc(e,t,n){let i=N.join(e,"ios-simulator-recording.mp4");P.appendFileSync(t,`Starting iOS simulator recording: ${i}
1548
+ `);let r=ns("xcrun",["simctl","io",n||"booted","recordVideo",i],{stdio:["ignore","pipe","pipe"],env:process.env});return r.stdout?.on("data",o=>{P.appendFileSync(t,o)}),r.stderr?.on("data",o=>{P.appendFileSync(t,o)}),r.on("error",o=>{P.appendFileSync(t,`[WARN] Could not start iOS simulator recording: ${o.message}
1549
+ `)}),r}async function Zo(e,t){e&&await new Promise(n=>{let i=!1,r=()=>{i||(i=!0,n())};e.once("exit",r),e.once("close",r),e.killed||(P.appendFileSync(t,`Stopping iOS simulator recording...
1550
+ `),e.kill("SIGINT")),setTimeout(()=>{!i&&!e.killed&&(P.appendFileSync(t,`[WARN] iOS simulator recording did not stop after SIGINT; sending SIGKILL.
1551
+ `),e.kill("SIGKILL")),r()},5e3).unref?.()})}function gc(e,t,n){let i=us(e,t);if(!i)return;P.appendFileSync(t,`Uninstalling existing iOS app data for ${i} if present...
1552
+ `),We("xcrun",["simctl","uninstall",n||"booted",i],t)!==0&&P.appendFileSync(t,`No existing app install removed for ${i}; continuing.
1553
+ `)}function hc(e,t){if(!e?.appId)return;if(P.appendFileSync(t,`Cleaning up installed app after Maestro run...
1554
+ `),e.platform==="ios"){let r=We("xcrun",["simctl","uninstall",e.deviceId||"booted",e.appId],t);r===0?P.appendFileSync(t,`Uninstalled iOS app ${e.appId} after Maestro run.
1555
+ `):P.appendFileSync(t,`Warning: failed to uninstall iOS app ${e.appId} after Maestro run: xcrun simctl uninstall exited with code ${r}
1556
+ `);return}let n=e.deviceId?["-s",e.deviceId]:[],i=We("adb",[...n,"uninstall",e.appId],t);i===0?P.appendFileSync(t,`Uninstalled Android app ${e.appId} after Maestro run.
1557
+ `):P.appendFileSync(t,`Warning: failed to uninstall Android app ${e.appId} after Maestro run: adb uninstall exited with code ${i}
1558
+ `)}function Ac(e,t){let n=Ge("adb",["devices"],{encoding:"utf-8",env:process.env});if(n.status!==0||n.error)return P.appendFileSync(t,`[WARN] Could not list Android devices before install; using adb default target.
1513
1559
  `),null;let i=String(n.stdout||"").split(`
1514
- `).map(r=>r.trim().split(/\s+/)).filter(r=>r.length>=2&&r[1]==="device").map(r=>r[0]).filter(Boolean);return e&&i.includes(e)?(O.appendFileSync(t,`Using Android device ${e} for install and cleanup.
1515
- `),e):i.length===1?(O.appendFileSync(t,`Using Android device ${i[0]} for install and cleanup.
1516
- `),i[0]):(i.length>1&&O.appendFileSync(t,`[WARN] Multiple Android devices are connected; using adb default target for install and cleanup.
1517
- `),null)}function cc(e,t){let i=(Wi("aapt",["dump","badging",e])||Wi("aapt2",["dump","badging",e]))?.match(/package:\s+name='([^']+)'/);if(i?.[1])return i[1];let o=Wi("apkanalyzer",["manifest","application-id",e])?.split(/\s+/).find(Boolean);return o||(O.appendFileSync(t,`[WARN] Could not determine Android application id from APK; post-run uninstall will be skipped.
1518
- `),null)}function Wi(e,t){for(let n of uc(e)){let i=Ge(n,t,{encoding:"utf-8",env:process.env,maxBuffer:10485760});if(i.status===0&&i.stdout)return String(i.stdout).trim()}return null}function uc(e){let t=process.platform==="win32"&&!e.endsWith(".exe")?`${e}.exe`:e,n=[];if(e==="aapt"||e==="aapt2")for(let r of qo()){let o=x.join(r,"build-tools");for(let s of Jo(o))n.push(x.join(o,s,t))}if(e==="apkanalyzer")for(let r of qo()){n.push(x.join(r,"cmdline-tools","latest","bin",t));let o=x.join(r,"cmdline-tools");for(let s of Jo(o))n.push(x.join(o,s,"bin",t));n.push(x.join(r,"tools","bin",t))}let i=pc(e);return i&&n.unshift(i),n.push(t),[...new Set(n)]}function qo(){let e=[process.env.ANDROID_HOME,process.env.ANDROID_SDK_ROOT];return process.platform==="darwin"?e.push(x.join($t.homedir(),"Library","Android","sdk")):process.platform==="linux"&&e.push(x.join($t.homedir(),"Android","Sdk"),x.join($t.homedir(),"Android","sdk"),"/opt/android-sdk","/usr/lib/android-sdk"),[...new Set(e.filter(t=>!!t))]}function Jo(e){try{return O.readdirSync(e,{withFileTypes:!0}).filter(t=>t.isDirectory()).map(t=>t.name).sort((t,n)=>n.localeCompare(t,void 0,{numeric:!0}))}catch{return[]}}function pc(e){let t=process.platform==="win32"?"where":"/usr/bin/env",n=process.platform==="win32"?[e]:["which",e],i=Ge(t,n,{encoding:"utf-8",env:process.env});return i.status!==0||!i.stdout?null:String(i.stdout).split(`
1519
- `)[0]?.trim()||null}async function qi(e,t,n){if(!O.existsSync(e))return;let i=O.readFileSync(e),r;for(let o=1;o<=3;o+=1)try{await Wt.put(t,i,{headers:{"Content-Type":n,"Content-Length":String(i.length)},maxBodyLength:1/0,maxContentLength:1/0,timeout:12e4});return}catch(s){if(r=s,!ts(s)||o>=3)break;await tr(2e3*o)}throw r}async function Yo(e,t,n,i){let r=x.join(n,"report.xml"),o=x.join(t,"artifacts.tar.gz");try{await qi(r,e.junitUploadUrl,"application/xml")}catch(s){O.appendFileSync(i,`[WARN] Failed to upload JUnit report: ${s.message||s}
1520
- `)}try{await qi(i,e.logUploadUrl,"text/plain")}catch(s){O.appendFileSync(i,`[WARN] Failed to upload runner log: ${s.message||s}
1521
- `)}try{qe("tar",["-czf",o,"-C",t,x.basename(n)],i),await qi(o,e.artifactsUploadUrl,"application/gzip")}catch(s){O.appendFileSync(i,`[WARN] Failed to upload Maestro artifacts: ${s.message||s}
1522
- `)}}function fc(e){if(!e.endsWith(".apk"))return C.error(k.red("Local Android Maestro runs need an APK artifact.")),!1;C.info(k.dim("Installing APK on local Android device/emulator..."));let t=Ge("adb",["install","-r",e],{stdio:"inherit",env:process.env});return t.error?(C.error(k.red(`adb failed to start: ${t.error.message}`)),!1):t.status!==0?(C.error(k.red(`adb install failed with exit code ${t.status??1}`)),!1):!0}function mc(e,t){if(e.endsWith(".ipa"))return C.error(k.red("Local iOS Maestro runs need an iOS Simulator .app.zip artifact, not an App Store .ipa.")),!1;let n=e;if(e.endsWith(".zip")){let r=x.join(t,"ios-app");O.mkdirSync(r,{recursive:!0}),new jn(e).extractAllTo(r,!0);let o=nr(r);if(!o)return C.error(k.red("Could not find a .app bundle inside the downloaded zip.")),!1;n=o}if(!n.endsWith(".app"))return C.error(k.red("Local iOS Maestro runs need an iOS Simulator .app bundle or .app.zip artifact.")),!1;C.info(k.dim("Installing app on booted iOS Simulator..."));let i=Ge("xcrun",["simctl","install","booted",n],{stdio:"inherit",env:process.env});return i.error?(C.error(k.red(`xcrun failed to start: ${i.error.message}`)),!1):i.status!==0?(C.error(k.red(`iOS Simulator install failed with exit code ${i.status??1}`)),!1):!0}function nr(e){let t=O.readdirSync(e,{withFileTypes:!0});for(let n of t){let i=x.join(e,n.name);if(n.isDirectory()&&n.name.endsWith(".app"))return i;if(n.isDirectory()){let r=nr(i);if(r)return r}}return null}function gc(e,t){let n=String(t||"").toLowerCase();return n==="android"?e.find(i=>_t(i,".apk")):n==="ios"?e.find(i=>_t(i,".app.zip"))||e.find(i=>_t(i,".zip")):e.find(i=>_t(i,".apk"))||e.find(i=>_t(i,".app.zip"))||e.find(i=>_t(i,".zip"))}function _t(e,t){return String(e?.name||e?.downloadUrl||e?.url||"").toLowerCase().endsWith(t)}function ir(e){let t=String(e||"").toLowerCase();if(t.includes(".apk"))return"android";if(t.includes(".app.zip")||t.endsWith(".app")||t.includes(".ipa"))return"ios"}function as(e){if(e)try{return x.basename(new URL(e).pathname)||void 0}catch{return x.basename(e)||void 0}}function hc(e){return e?e.match(/[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/i)?.[0]:void 0}function ls(e,t){if(!e.jsonOutput)return;let n=x.resolve(e.jsonOutput),i={...t,updatedAt:new Date().toISOString()};try{let r=x.dirname(n);r&&r!=="."&&O.mkdirSync(r,{recursive:!0}),O.writeFileSync(n,JSON.stringify(i,null,2))}catch(r){C.warn(k.yellow(`Could not write Maestro metadata JSON: ${r.message}`))}}function yc(e,t){if(!e.jsonOutput)return;let n=x.resolve(e.jsonOutput),i={mode:"local",...t,updatedAt:new Date().toISOString()};try{let r=x.dirname(n);r&&r!=="."&&O.mkdirSync(r,{recursive:!0}),O.writeFileSync(n,JSON.stringify(i,null,2))}catch(r){C.warn(k.yellow(`Could not write Maestro metadata JSON: ${r.message}`))}}import{spinner as it,text as Xt,select as dr,isCancel as tt,cancel as cr,log as bs}from"@clack/prompts";import V from"chalk";import q from"fs";import ge from"path";import{spawn as Ic,spawnSync as ht}from"child_process";import As from"axios";import bt from"os";import fr from"crypto";import bc from"crypto";import Rt from"axios";import ds from"fs";var Yt=6e4,Ac=12e4,rr=4,Jt=e=>encodeURIComponent(e),Sc=e=>new Promise(t=>setTimeout(t,e));async function Ot(e,t){let n;for(let i=1;i<=rr;i++)try{return await t()}catch(r){if(n=r,i>=rr||!Ec(r))throw r;let o=Number(r.response?.headers?.["retry-after"]),s=Number.isFinite(o)&&o>0?o*1e3:Math.min(2e3*i*i,15e3);console.log(`[Google Play] ${e} failed (attempt ${i}/${rr}); retrying in ${Math.round(s/1e3)}s...`),await Sc(s)}throw n}function Ec(e){let t=e.response?.status;return t?t===408||t===409||t===425||t===429||t>=500:!0}async function us(e){let{packageName:t,serviceAccount:n,aabPath:i,track:r,releaseStatus:o,userFraction:s,changesNotSentForReview:a}=e,l;try{let c={Authorization:`Bearer ${await cs(n)}`,Connection:"close"},u=Jt(t);if(l=(await Ot("create edit",()=>Rt.post(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${u}/edits`,{},{headers:c,timeout:Yt}))).data.id,!l)throw new Error("Google Play edit insert succeeded but did not return an edit id.");let p=Jt(l),g=ds.statSync(i),h=await Ot("upload AAB",()=>Rt.post(`https://androidpublisher.googleapis.com/upload/androidpublisher/v3/applications/${u}/edits/${p}/bundles`,ds.createReadStream(i),{headers:{...c,"Content-Type":"application/octet-stream","Content-Length":g.size},maxBodyLength:1/0,maxContentLength:1/0,params:{uploadType:"media"},timeout:Ac})),y=Number(h.data.versionCode);if(!y)throw new Error("Google Play upload succeeded but did not return a versionCode.");let b={versionCodes:[String(y)],status:o};return(o==="inProgress"||o==="halted")&&typeof s=="number"&&(b.userFraction=s),await Ot("update track",()=>Rt.put(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${u}/edits/${p}/tracks/${Jt(r)}`,{releases:[b]},{headers:c,timeout:Yt})),await Ot("commit edit",()=>Rt.post(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${u}/edits/${p}:commit`,{},{headers:c,params:a?{changesNotSentForReview:!0}:void 0,timeout:Yt})),{editId:l,versionCode:y,track:r,releaseStatus:o,userFraction:s}}catch(d){if(l)try{let u=await cs(n);await Ot("delete edit",()=>Rt.delete(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${Jt(t)}/edits/${Jt(l)}`,{headers:{Authorization:`Bearer ${u}`,Connection:"close"},timeout:Yt}))}catch{}let c=d.response?.data?.error?.message||d.message;throw new Error(`Google Play API Error: ${c}`)}}async function cs(e){let t=Math.floor(Date.now()/1e3),n=t+3600,i={alg:"RS256",typ:"JWT"},r={iss:e.client_email,sub:e.client_email,aud:"https://oauth2.googleapis.com/token",iat:t,exp:n,scope:"https://www.googleapis.com/auth/androidpublisher"},o=Buffer.from(JSON.stringify(i)).toString("base64url"),s=Buffer.from(JSON.stringify(r)).toString("base64url"),a=`${o}.${s}`,l=bc.createSign("RSA-SHA256");l.update(a);let d=l.sign(e.private_key,"base64url"),c=`${a}.${d}`;return(await Ot("OAuth token exchange",()=>Rt.post("https://oauth2.googleapis.com/token",{grant_type:"urn:ietf:params:oauth:grant-type:jwt-bearer",assertion:c},{headers:{Connection:"close"},timeout:Yt}))).data.access_token}var wc=5e3,vc=12,Ss=100,or=24,ps=8e3,_c={completed:"completed",draft:"draft",halted:"halted",inprogress:"inProgress","in-progress":"inProgress"},$c=e=>e?.type==="google_service_account",Gn=e=>e?.bundleId||e?.packageName||e?.meta?.packageName||e?.meta?.bundleId,Es=e=>e.submitArgs||process.argv.slice(3).join(" ");async function Vn(e){let t=it(),n=be(),i=Rc(e);if(!i){process.exitCode=1;return}let r=e.projectId||i.projectId,o=e.profile||e.buildProfile||"production";if(!r){Q(`${m.configFileName} is missing projectId. Pass --project-id in runner mode.`),process.exitCode=1;return}i.projectId=r,se(V.dim(`Submit for project: ${i.name||r} | Profile: ${o}`));let s=e.platform;if(!s){let E=await dr({message:"Select platform to submit:",options:[{value:"ios",label:"iOS (App Store Connect / TestFlight)"},{value:"android",label:"Android (Google Play Console)"}]});if(tt(E)){cr("Operation cancelled");return}s=E}if(s=String(s).toLowerCase(),s!=="ios"&&s!=="android"){Q(`Platform ${s} is not supported. Use 'ios' or 'android'.`),process.exitCode=1;return}let a=s==="ios"&&!e.local&&e.sshHost?Gc(i,o,e):null;if(s==="ios"&&!e.local&&!a){await Oc(i,o,e);return}let l=e.submitId,d=!!(e.local&&l),c=l||null,u=async(E,A={})=>{c&&await Tc(r,c,{status:E,...A})},f=s==="android"?e.packageName||e.androidPackage||Bc(i,o):void 0,p=s==="ios"?e.bundleId||e.iosBundleIdentifier||Hc(i,o):void 0,g,h,y,b=!1;try{s==="android"&&(g=e.track||i.submit?.[o]?.android?.track||i.submit?.production?.android?.track||"internal",h=Vc(i,o,e.releaseStatus),y=Kc(i,o,e.rollout),b=Wc(i,o,e.changesNotSentForReview),qc(h,y))}catch(E){Q(E.message),process.exitCode=1;return}if(s==="android"&&!d&&(c=await Dc(i,r,s,o,e,{packageName:f,track:g,releaseStatus:h,rollout:y,changesNotSentForReview:b}),!c)){Q("Could not create submission tracking record. Submission was not started."),process.exitCode=1;return}await u("running",{platform:s,profile:o,packageName:f,track:g,releaseStatus:h,rollout:y,startTime:Date.now(),...d?Nc():{}});let w=null,L=null;try{L=await Jc(r,s,e,n?.token),w=L?.filePath||null}catch(E){await u("failed",{error:`Failed to resolve submission artifact: ${E.message}`,endTime:Date.now()}),Q(`Failed to resolve submission artifact: ${E.message}`),process.exitCode=1;return}if(!w){let E=Xc(s,e);await u("failed",{error:E,endTime:Date.now()}),Q(E),process.exitCode=1;return}await u("running",{buildId:L?.buildId,artifactName:L?.artifactName,artifactSource:L?.source}),se(`Using artifact: ${V.green(ge.basename(w))} `),t.start("Fetching submission credentials from Dashboard...");let _;try{let A=(await $.get(`/credentials/${r}`)).data.credentials||[];if(s==="android"&&!f){t.stop("Package name missing"),Q("Could not resolve Android package name. Set android.package in mach.config.json/app.json."),await u("failed",{error:"Could not resolve Android package name.",endTime:Date.now()}),process.exitCode=1;return}let D=A.filter($c),v=s==="ios"?A.filter(G=>G.type==="asc_api_key"):jc(D,f);if(v.length===0){if(t.stop("Credentials missing"),Q(s==="android"?`No Google Play service credential found for package ${f}.`:`No Service Credentials found for ${s}.`),s==="android"){let G=D.map(Gn).filter(Boolean).join(", ");G&&se(`Found Google Play service credential(s) for: ${G}`),se(`Use '${m.nameLower} credentials:service --platform android --package-name ${f}' or upload it under that package in the Dashboard.`)}else se(`Use '${m.nameLower} credentials:service --platform ${s}' or use the Dashboard to upload them.`);await u("failed",{error:`No submission credentials found for ${s}.`,endTime:Date.now()}),process.exitCode=1;return}if(_=Lc(v,e.credentialId),!_&&s==="ios"&&p&&(_=Mc(v,p)),_||v.length===1)_=_||v[0],t.stop(`Using: ${_.name}`),s==="android"&&Gn(_)==="*"&&se(V.yellow(`Using legacy wildcard Google Play credential for ${f}. Upload a package-scoped credential when possible.`));else{if(t.stop("Multiple credentials found"),Uc()){let U=v.map(B=>`${B.name||"credential"} (${B.credentialId||B.id||"no-id"})`).join(", ");Q(`Multiple ${s==="ios"?"App Store Connect":"Google Play"} credentials found. Use --credential-id in CI. Available: ${U}`),await u("failed",{error:"Multiple submission credentials found; --credential-id is required in CI.",endTime:Date.now()}),process.exitCode=1;return}let G=await dr({message:`Choose a ${s==="ios"?"App Store Connect":"Google Play"} credential:`,options:v.map(U=>({value:U.credentialId,label:U.name,hint:`${U.keyId?`ID: ${U.keyId}`:""} ${U.issuerId?`(Issuer: ${U.issuerId.substring(0,8)}...)`:""}`}))});if(tt(G)){cr("Submission cancelled"),await u("failed",{error:"Submission cancelled while selecting credential.",endTime:Date.now()}),process.exitCode=1;return}_=v.find(U=>U.credentialId===G),se(`Using selected: ${V.green(_.name)}`)}}catch(E){t.stop("Failed to fetch credentials"),Q(`API Error: ${E.message} `),await u("failed",{error:`Failed to fetch credentials: ${E.message}`,endTime:Date.now()}),process.exitCode=1;return}let H=q.mkdtempSync(ge.join(bt.tmpdir(),`${m.nameLower}-submit-`)),W=_.keyId||_.meta?.keyId,Z=_.issuerId||_.meta?.issuerId,Ee=_.type==="asc_api_key"?`AuthKey_${W}.p8`:"service-account.json",oe=ge.join(H,Ee);t.start("Downloading secure key...");try{let E=await $.get(`/credentials/${_.credentialId}/download`,{params:{projectId:r,format:"raw"}});if(E.data.status!=="success"||!E.data.downloadUrl)throw new Error("Failed to get secure download URL");let A=await As.get(E.data.downloadUrl,{responseType:"arraybuffer"});q.writeFileSync(oe,Buffer.from(A.data)),t.stop("Key downloaded to secure temp storage")}catch(E){t.stop("Download failed"),Q(`Failed to download key: ${E.message}`);try{q.rmSync(H,{recursive:!0,force:!0})}catch{}await u("failed",{error:`Failed to download credential key: ${E.message}`,endTime:Date.now()}),process.exitCode=1;return}se(V.blue(`Initiating ${s==="ios"?"TestFlight":"Google Play"} submission...`));let R=!1,T;try{if(s==="ios"){if(!W){let A=await Xt({message:"Enter App Store Connect Key ID (e.g. 2X948D...):",validate:D=>D.length>0?void 0:"Key ID is required"});if(tt(A)){await u("failed",{error:"Submission cancelled while entering ASC Key ID.",endTime:Date.now()}),process.exitCode=1;return}W=A}if(!Z||Z==="undefined"){let A=await Xt({message:"Enter App Store Connect Issuer ID (Found on ASC Keys page):",validate:D=>D.length>0?void 0:"Issuer ID is required"});if(tt(A)){await u("failed",{error:"Submission cancelled while entering ASC Issuer ID.",endTime:Date.now()}),process.exitCode=1;return}Z=A}se(`Using ASC Key ID: ${W}`),se(`Using ASC Issuer ID: ${Z}`);let E=a?await Qc(w,oe,Z,W,p,a):await Zc(w,oe,Z,W,p);pr(`${s==="ios"?"App Store":"Google Play"} submission successful!`),R=!0}else T=await ru(w,oe,g||"internal",f,h||"completed",y,b,o),pr("Google Play submission successful!"),R=!0}catch(E){Q(`Submission failed: ${E.message}`),await u("failed",{error:E.message,endTime:Date.now()}),nt(e,{status:"failed",projectId:r,submitId:c,platform:s,profile:o,buildId:L?.buildId||e.buildId,artifactName:L?.artifactName,error:E.message,dashboardUrl:c?yt(c,r):void 0}),process.exitCode=1}finally{R&&(await u("success",{endTime:Date.now(),versionCode:T?.versionCode,track:g,releaseStatus:h}),nt(e,{status:"success",projectId:r,submitId:c,platform:s,profile:o,buildId:L?.buildId||e.buildId,artifactName:L?.artifactName,versionCode:T?.versionCode,track:g,releaseStatus:h,dashboardUrl:c?yt(c,r):void 0})),Au(H),w&&w.includes(`${m.nameLower}-artifact-`)}}function Rc(e){let t=`./${m.configFileName}`;if(q.existsSync(t))try{return JSON.parse(q.readFileSync(t,"utf-8"))}catch(n){return Q(`Failed to read ${m.configFileName}: ${n.message}`),null}return e.projectId?{projectId:e.projectId}:(Q(`No ${m.configFileName} found. Run \`${m.nameLower} init\` or \`${m.nameLower} link\` first.`),null)}async function Oc(e,t,n){let i=n.projectId||e.projectId;if(!i){Q(`${m.configFileName} is missing projectId.`),process.exitCode=1;return}let r=n.submitId||fr.randomUUID(),o=!!n.latest||!n.buildId,s=Pc({...n,latest:o,profile:t,projectId:i,submitId:r}),a={projectId:i,submitId:r,platform:"ios",profile:t,latest:o,buildId:n.buildId,credentialId:n.credentialId,status:"pending",source:"cli",submitArgs:Es(n),runnerArgs:s,runnerCommand:[m.nameLower,"submit",...s].map(Fc).join(" "),appName:e.name,startTime:Date.now()},l=it();l.start("Queuing iOS submit on macOS runner...");try{let d=await $.post("/submissions",a),c=d.data?.submission||d.data?.submit||{},u=d.data?.dashboardUrl||yt(r,i);l.stop("iOS submit queued"),se(`Submission ID: ${V.cyan(r)}`),se(`Dashboard: ${V.blue.underline(u)}`),nt(n,{status:"pending",projectId:i,submitId:r,platform:"ios",profile:t,latest:o,buildId:n.buildId,dashboardUrl:u}),await Cc(i,r,n)}catch(d){l.stop("Could not queue iOS submit"),Q(xc(d)),process.exitCode=1}}async function Dc(e,t,n,i,r,o={}){let s=r.submitId||fr.randomUUID(),a=!!r.latest||!r.buildId,l={projectId:t,submitId:s,platform:n,profile:i,latest:a,buildId:r.buildId,credentialId:r.credentialId,status:"running",source:"cli-direct",submitArgs:Es(r),appName:e.name,startTime:Date.now(),...o};try{let d=await $.post("/submissions",l),c=d.data?.submission||d.data?.submit||{},u=d.data?.dashboardUrl||c.dashboardUrl||yt(s,t);return se(`Submission ID: ${V.cyan(s)}`),se(`Dashboard: ${V.blue.underline(u)}`),nt(r,{status:"running",projectId:t,submitId:s,platform:n,profile:i,latest:a,buildId:r.buildId,dashboardUrl:u}),s}catch(d){let c=d.response?.data?.message||d.response?.data?.error||d.message;return se(V.yellow(`Could not create submission tracking record: ${c}`)),null}}function Pc(e){let t=["--local","--submit-id",e.submitId,"--project-id",e.projectId,"--platform","ios","--profile",e.profile||"production"];return e.buildId?t.push("--build-id",e.buildId):t.push("--latest"),e.credentialId&&t.push("--credential-id",e.credentialId),e.bundleId&&t.push("--bundle-id",e.bundleId),e.packageName&&t.push("--package-name",e.packageName),e.quiet&&t.push("--quiet"),e.jsonOutput&&t.push("--json-output",e.jsonOutput),t.filter(n=>n!=null&&n!=="")}async function Cc(e,t,n){let i=it(),r=0,o=0;for(n.quiet||i.start("Waiting for iOS submit runner...");;)try{let s=await $.get(`/submissions/${e}/${t}`),a=s.data?.submission||s.data?.submit||s.data,l=String(a?.status||"pending").toLowerCase();r=0;let d=Array.isArray(a?.logs)?a.logs:[];for(let c=o;c<d.length;c++){let u=d[c];u&&console.log(V.dim(String(u)))}if(o=d.length,["success","completed","succeeded"].includes(l)){n.quiet||i.stop("iOS submit completed"),pr("App Store submission successful!"),nt(n,{status:"success",projectId:e,submitId:t,platform:"ios",profile:a?.profile||n.profile||"production",buildId:a?.buildId||n.buildId,artifactName:a?.artifactName,dashboardUrl:a?.dashboardUrl||yt(t,e)});return}if(["failed","error","cancelled","canceled"].includes(l)){n.quiet||i.stop("iOS submit failed");let c=a?.error||a?.message||"Unknown iOS submit failure.";Q(c),nt(n,{status:"failed",projectId:e,submitId:t,platform:"ios",profile:a?.profile||n.profile||"production",buildId:a?.buildId||n.buildId,artifactName:a?.artifactName,error:c,dashboardUrl:a?.dashboardUrl||yt(t,e)}),process.exitCode=1;return}n.quiet||i.message(`iOS submit ${l}...`),await ur(wc)}catch(s){if(r++,r>=vc){n.quiet||i.stop("Lost connection to iOS submit status"),Q(`Could not fetch iOS submit status after ${r} attempts: ${s.message}`),process.exitCode=1;return}await ur(Math.min(2e3*r,15e3))}}async function Tc(e,t,n){let i;for(let r=1;r<=3;r++)try{await $.patch(`/submissions/${e}/${t}`,n);return}catch(o){if(i=o,r>=3||!kc(o))break;await ur(1e3*r)}bs.warn(V.dim(`Could not report submission status: ${i?.message||i}`))}function kc(e){let t=e.response?.status;return!t||t===408||t===409||t===425||t===429||t>=500}function Nc(){let e={gitlabJobId:process.env.CI_JOB_ID,gitlabJobUrl:process.env.CI_JOB_URL,gitlabPipelineId:process.env.CI_PIPELINE_ID,gitlabProjectId:process.env.CI_PROJECT_ID,gitlabProjectPath:process.env.CI_PROJECT_PATH};return Object.fromEntries(Object.entries(e).filter(([,t])=>!!t))}function xc(e){let t=e.response?.status,n=e.response?.data?.message||e.response?.data?.error;return t===404||t===405?["Managed iOS submit is not enabled on this Mach API yet.","Deploy the API/dashboard submission orchestration endpoint, then retry the same command.","Expected API: POST /submissions and GET/PATCH /submissions/:projectId/:submitId."].join(`
1523
- `):n||e.message||String(e)}function yt(e,t){if(!e)return He;let n=t?`?projectId=${encodeURIComponent(t)}`:"";return`${He}/submissions/${e}${n}`}function nt(e,t){if(!e.jsonOutput)return;let n=ge.resolve(e.jsonOutput),i={...t,url:t.url||t.dashboardUrl||yt(t.submitId,t.projectId),updatedAt:new Date().toISOString()};try{let r=ge.dirname(n);r&&r!=="."&&q.mkdirSync(r,{recursive:!0}),q.writeFileSync(n,JSON.stringify(i,null,2))}catch(r){bs.warn(V.yellow(`Could not write submission metadata JSON: ${r.message}`))}}function Lc(e,t){return t&&e.find(n=>n.credentialId===t||n.id===t||n.keyId===t||n.meta?.keyId===t)||null}function Mc(e,t){let n=e.filter(i=>[i.bundleId,i.bundleIdentifier,i.appIdentifier,i.meta?.bundleId,i.meta?.bundleIdentifier,i.meta?.appIdentifier].filter(Boolean).map(String).includes(t));return n.length===1?n[0]:null}function Uc(){return process.env.CI==="true"||process.env.CI==="1"||!process.stdin.isTTY}function ur(e){return new Promise(t=>setTimeout(t,e))}function Fc(e){return/^[a-zA-Z0-9_./:=@-]+$/.test(e)?e:`'${e.replace(/'/g,"'\\''")}'`}function Bc(e,t){if(e.submit?.[t]?.android?.package)return e.submit[t].android.package;let n=Ln(e,t);if(n)return n;let i=ge.join(process.cwd(),"app.json");if(q.existsSync(i))try{return JSON.parse(q.readFileSync(i,"utf-8")).expo?.android?.package}catch{}let r=ge.join(process.cwd(),"app.config.json");if(q.existsSync(r))try{let o=JSON.parse(q.readFileSync(r,"utf-8"));return o.expo?.android?.package||o.android?.package}catch{}}function jc(e,t){let n=e.filter(o=>Gn(o)===t);if(n.length>0)return n;let i=e.filter(o=>{let s=Gn(o);return!s||s==="*"});return e.length>0&&e.length===i.length?i:[]}function Hc(e,t){return e.submit?.[t]?.ios?.bundleIdentifier?e.submit[t].ios.bundleIdentifier:e.submit?.[t]?.ios?.bundleId?e.submit[t].ios.bundleId:Mn(e,t)}function Gc(e,t,n){let i=e.submit?.[t]?.ios||{},r=e.submit?.production?.ios||{},o=n.sshHost||i.sshHost||r.sshHost||process.env.MACH_IOS_SUBMIT_SSH_HOST;return o?{sshHost:o,sshUser:n.sshUser||i.sshUser||r.sshUser||process.env.MACH_IOS_SUBMIT_SSH_USER||process.env.USER||"ubuntu",sshKey:n.sshKey||i.sshKey||r.sshKey||process.env.MACH_IOS_SUBMIT_SSH_KEY}:null}function Vc(e,t,n){let i=n||e.submit?.[t]?.android?.releaseStatus||e.submit?.production?.android?.releaseStatus||"completed";return zc(i)}function zc(e){let t=_c[String(e).trim().toLowerCase()];if(!t)throw new Error(`Invalid Android release status "${e}". Use completed, draft, halted, or inProgress.`);return t}function Kc(e,t,n){let i=n??e.submit?.[t]?.android?.rollout??e.submit?.[t]?.android?.userFraction??e.submit?.[t]?.android?.rolloutFraction??e.submit?.production?.android?.rollout??e.submit?.production?.android?.userFraction??e.submit?.production?.android?.rolloutFraction;if(i==null||i==="")return;let r=Number(i);if(!Number.isFinite(r)||r<=0||r>=1)throw new Error(`Invalid Android rollout fraction "${i}". Use a number greater than 0 and less than 1, for example 0.1.`);return r}function Wc(e,t,n){let i=n??e.submit?.[t]?.android?.changesNotSentForReview??e.submit?.[t]?.android?.changes_not_sent_for_review??e.submit?.production?.android?.changesNotSentForReview??e.submit?.production?.android?.changes_not_sent_for_review??!1;return i===!0||i==="true"||i==="1"}function qc(e,t){if(e==="inProgress"&&t===void 0)throw new Error("Google Play staged rollout requires --rollout <fraction> when --release-status inProgress is used.");if(e!=="inProgress"&&e!=="halted"&&t!==void 0)throw new Error("Android rollout fraction can only be used with --release-status inProgress or halted.")}async function Jc(e,t,n,i){let r=n.buildId?"id":n.latest?"latest":null;if(!r){let s=await dr({message:"Select artifact source:",options:[{value:"latest",label:`Latest Production Build (${m.name})`},{value:"id",label:`Input Build ID (${m.name})`},{value:"url",label:"Remote URL"},{value:"local",label:"Local File Path"}]});if(tt(s))return cr("Operation cancelled"),null;r=s}if(r==="local"){let s=await Xt({message:"Enter path to artifact (.ipa/.aab):",validate:a=>{if(!q.existsSync(a))return"File not found";if(t==="ios"&&!a.endsWith(".ipa"))return"Must be an .ipa file";if(t==="android"&&!a.endsWith(".aab"))return"Must be an .aab file"}});return tt(s)?null:{filePath:s,source:"local"}}let o=it();if(r==="latest"){let s=n.profile||n.buildProfile;o.start(`Fetching latest${s?` ${s}`:""} build...`);try{let a=await $.get(`/builds/${e}`,{params:{limit:50}});if(a.data.status!=="success")throw new Error(a.data.message);let l=a.data.builds||[],d=s?.toLowerCase(),c=_=>_.platform?.toLowerCase()===t.toLowerCase()&&_.status?.toLowerCase()==="success",u=_=>d?[_.buildProfile,_.profile,_.profileName,_.buildType].filter(Boolean).some(H=>String(H).toLowerCase()===d):!0,f=l.filter(_=>c(_)&&u(_)),p=f.find(_=>_.buildType?.toLowerCase()==="store"||_.distribution?.toLowerCase()==="store")||f[0],g=l.some(_=>_.platform?.toLowerCase()===t.toLowerCase()&&_.status?.toLowerCase()==="success");if(!p)return o.stop("No suitable build found"),Q(s&&g?`No successful ${t} builds found for profile "${s}".`:"No successful builds found for this platform."),null;o.stop(`Found build: ${p.buildId}`);let h=p.artifacts||[];if(h.length===0||h.every(_=>!(_.url||_.downloadUrl)))try{let _=await $.get(`/builds/${e}/${p.buildId}/artifacts`);_.data.status==="success"&&_.data.artifacts?.length>0?(h=_.data.artifacts.map(H=>({...H,url:H.url||H.downloadUrl})),console.log(V.cyan(` [RECOVERY] Fetched ${h.length} artifact(s) with download URLs.`))):console.log(V.yellow(" [RECOVERY] /artifacts endpoint returned 0 artifacts."))}catch(_){console.log(V.red(` [RECOVERY] /artifacts fetch failed: ${_.message}`))}let b=t==="ios",w=h.find(_=>{let H=(_.type||"").toLowerCase(),W=(_.name||"").toLowerCase();if(console.log(V.dim(` - Checking: ${_.name} (Type: ${_.type}, HasLink: ${!!(_.url||_.downloadUrl)})`)),H)return H===(b?"ipa":"aab");let Z=b?".ipa":".aab",Ee=(_.url||_.downloadUrl||"").toLowerCase();return W.endsWith(Z)||Ee.includes(Z)});if(!w||!(w.url||w.downloadUrl))return Q("Build found but artifact URL is missing."),null;let L=w.url||w.downloadUrl;return{filePath:await sr(L,b?"ios":"android"),buildId:p.buildId,artifactName:w.name,source:"latest"}}catch(a){return o.stop("Fetch failed"),Q(`API Error: ${a.message}`),null}}if(r==="id"){let s=n.buildId||await Xt({message:"Enter Build ID:",validate:l=>l.length<5?"Invalid ID":void 0});if(tt(s))return null;let a=String(s);o.start("Fetching build...");try{let l=null;try{let p=await $.get(`/builds/${e}/${a}`);p.data.status==="success"&&(l=p.data.build)}catch(p){p.response?.status!==404&&console.log(V.dim(` [RECOVERY] Project build lookup skipped: ${p.message}`))}if(!l){let p=await $.get(`/build/${a}`);if(p.data.status!=="success")throw new Error(p.data.message);l=p.data.build}if(!l)throw new Error(`Build ${a} was not found.`);let d=t==="ios",c=Hn(l.artifacts);Yc(c)||(c=await ms(e,a,c));let u=fs(c,t);if(u||(c=await ms(e,a,c),u=fs(c,t)),!u)throw new Error(`No ${d?".ipa":".aab"} artifact found for build ${a}. The build exists, but its artifact list does not contain a downloadable submission artifact.`);let f=u.url||u.downloadUrl;if(!f)throw new Error(`Artifact ${u.name||"(unnamed)"} for build ${a} has no download URL. Retry after the build artifact upload is visible in the Installation Hub.`);return o.stop(`Found build: ${l.buildId||a}`),{filePath:await sr(f,d?"ios":"android"),buildId:l.buildId||a,artifactName:u.name,source:"id"}}catch(l){throw o.stop("Fetch failed"),l}}if(r==="url"){let s=await Xt({message:"Enter Artifact URL:",validate:a=>a.startsWith("http")?void 0:"Must be a valid URL"});return tt(s)?null:{filePath:await sr(s,t),source:"url"}}return null}function Hn(e){return(e||[]).map(t=>({...t,url:t.url||t.downloadUrl}))}function Yc(e){return e.some(t=>!!(t.url||t.downloadUrl))}function fs(e,t){let n=t==="ios",i=n?"ipa":"aab",r=n?".ipa":".aab";return e.find(o=>{let s=String(o.type||"").toLowerCase(),a=String(o.name||"").toLowerCase(),l=String(o.url||o.downloadUrl||"").toLowerCase();return s?s===i:a.endsWith(r)||l.includes(r)})||null}function Xc(e,t){let n=e==="ios"?".ipa":".aab";if(t.buildId)return`No downloadable ${n} artifact found for build ${t.buildId}. Check that the build finished artifact upload before submitting.`;if(t.latest){let i=t.profile||t.buildProfile;return`No latest successful ${e}${i?` ${i}`:""} build has a downloadable ${n} artifact.`}return`No downloadable ${n} artifact was selected for submission.`}async function ms(e,t,n){try{let i=await $.get(`/builds/${e}/${t}/artifacts`);if(i.data.status==="success"&&i.data.artifacts?.length>0){let r=Hn(i.data.artifacts);return console.log(V.cyan(` [RECOVERY] Fetched ${r.length} artifact(s) with download URLs.`)),r}}catch(i){console.log(V.dim(` [RECOVERY] Project artifact lookup skipped: ${i.message}`))}try{let i=await $.get(`/public/builds/${t}`);if(i.data.status==="success"&&i.data.artifacts?.length>0){let r=Hn(i.data.artifacts);return console.log(V.cyan(` [RECOVERY] Fetched ${r.length} public artifact(s) with download URLs.`)),r}}catch(i){console.log(V.dim(` [RECOVERY] Public artifact lookup skipped: ${i.message}`))}return Hn(n)}async function sr(e,t,n=3){let i=it();i.start("Downloading artifact...");let r=q.mkdtempSync(ge.join(bt.tmpdir(),`${m.nameLower}-artifact-`)),o=`app.${t==="ios"?"ipa":"aab"}`,s=ge.join(r,o);for(let a=1;a<=n;a++)try{a>1&&(i.message(`Downloading artifact (Retry ${a}/${n})...`),await new Promise(c=>setTimeout(c,2e3*a)));let l=q.createWriteStream(s),d=await As({url:e,method:"GET",responseType:"stream",timeout:6e4});return await new Promise((c,u)=>{d.data.pipe(l);let f=!1;d.data.on("error",p=>{f||(f=!0,l.close(),u(p))}),l.on("finish",()=>{f||c()}),l.on("error",p=>{f||(f=!0,u(p))})}),i.stop("Download complete"),s}catch(l){if(a===n)throw i.stop("Download failed"),l}throw new Error("Download failed after retries")}async function Zc(e,t,n,i,r){let o=it();if(r&&se(`Bundle ID: ${V.green(r)}`),!n||!i)throw Q(`Missing credentials: issuerId=${n}, keyId=${i}. Check your Dashboard.`),new Error("Missing ASC API Key Metadata (IssuerID or KeyID)");let s=Is(t,n,i),a=su();return o.start("Uploading to TestFlight (pilot)..."),new Promise((l,d)=>{let c=lu(),u=Ic(a.command,["pilot","upload","--ipa",e,"--api_key_path",s,"--skip_submission","true","--skip_waiting_for_build_processing","true"],{stdio:["ignore","pipe","pipe"],env:a.env});u.stdout?.on("data",f=>c.append(f,process.stdout)),u.stderr?.on("data",f=>c.append(f,process.stderr)),u.on("close",f=>{if(c.flush(),f!==0){o.stop("Pilot failed");try{q.unlinkSync(s)}catch{}d(du(f,c.lines()))}else{o.stop("IPA uploaded to TestFlight");try{q.unlinkSync(s)}catch{}l({})}}),u.on("error",f=>{c.flush();try{q.unlinkSync(s)}catch{}o.stop("Pilot execution error");let p=yu(f);p.logs=c.lines(),d(p)})})}async function Qc(e,t,n,i,r,o){let s=it();if(r&&se(`Bundle ID: ${V.green(r)}`),!n||!i)throw Q(`Missing credentials: issuerId=${n}, keyId=${i}. Check your Dashboard.`),new Error("Missing ASC API Key Metadata (IssuerID or KeyID)");let a=Is(t,n,i),l=`${o.sshUser}@${o.sshHost}`,d=eu(o),c=tu(o),u="",f="";try{if(s.start(`Preparing remote iOS submit runner (${l})...`),u=nu("ssh",[...d,"mktemp -d /tmp/mach-submit.XXXXXX"]).trim(),!u)throw new Error("Remote runner did not return a temp directory.");s.stop(`Remote runner ready: ${l}`),s.start("Uploading IPA and App Store Connect key to remote runner..."),ar("scp",[...c,e,`${l}:${u}/app.ipa`],"IPA upload to remote runner"),ar("scp",[...c,a,`${l}:${u}/api_key.json`],"ASC key upload to remote runner"),f=ge.join(bt.tmpdir(),`${m.nameLower}-ios-submit-${Date.now()}.sh`),q.writeFileSync(f,iu(u)),ar("scp",[...c,f,`${l}:${u}/submit.sh`],"submit script upload to remote runner"),s.stop("Remote submit inputs uploaded"),s.start("Uploading to TestFlight on remote runner...");let p=`chmod +x ${Zt(`${u}/submit.sh`)} && bash ${Zt(`${u}/submit.sh`)}`,g=ht("ssh",[...d,p],{stdio:"inherit"});if(g.error)throw mr("ssh",g.error);if(g.status!==0)throw new Error(`Remote iOS submit failed with exit code ${g.status}.`);return s.stop("IPA uploaded to TestFlight"),{apiKeyJsonPath:null}}catch(p){throw s.stop("Remote iOS submit failed"),p}finally{try{q.unlinkSync(a)}catch{}if(f)try{q.unlinkSync(f)}catch{}if(u)try{ht("ssh",[...d,`rm -rf ${Zt(u)}`],{stdio:"ignore"})}catch{}}}function Is(e,t,n){let i=q.readFileSync(e,"utf8"),r;try{r=fr.createPrivateKey(i).export({type:"pkcs8",format:"pem"})}catch{se("Key normalization failed, falling back to manual re-wrapping..."),r=`-----BEGIN PRIVATE KEY-----
1560
+ `).map(r=>r.trim().split(/\s+/)).filter(r=>r.length>=2&&r[1]==="device").map(r=>r[0]).filter(Boolean);return e&&i.includes(e)?(P.appendFileSync(t,`Using Android device ${e} for install and cleanup.
1561
+ `),e):i.length===1?(P.appendFileSync(t,`Using Android device ${i[0]} for install and cleanup.
1562
+ `),i[0]):(i.length>1&&P.appendFileSync(t,`[WARN] Multiple Android devices are connected; using adb default target for install and cleanup.
1563
+ `),null)}function yc(e,t){let i=(Ji("aapt",["dump","badging",e])||Ji("aapt2",["dump","badging",e]))?.match(/package:\s+name='([^']+)'/);if(i?.[1])return i[1];let o=Ji("apkanalyzer",["manifest","application-id",e])?.split(/\s+/).find(Boolean);return o||(P.appendFileSync(t,`[WARN] Could not determine Android application id from APK; post-run uninstall will be skipped.
1564
+ `),null)}function Ji(e,t){for(let n of Sc(e)){let i=Ge(n,t,{encoding:"utf-8",env:process.env,maxBuffer:10485760});if(i.status===0&&i.stdout)return String(i.stdout).trim()}return null}function Sc(e){let t=process.platform==="win32"&&!e.endsWith(".exe")?`${e}.exe`:e,n=[];if(e==="aapt"||e==="aapt2")for(let r of Qo()){let o=N.join(r,"build-tools");for(let s of es(o))n.push(N.join(o,s,t))}if(e==="apkanalyzer")for(let r of Qo()){n.push(N.join(r,"cmdline-tools","latest","bin",t));let o=N.join(r,"cmdline-tools");for(let s of es(o))n.push(N.join(o,s,"bin",t));n.push(N.join(r,"tools","bin",t))}let i=bc(e);return i&&n.unshift(i),n.push(t),[...new Set(n)]}function Qo(){let e=[process.env.ANDROID_HOME,process.env.ANDROID_SDK_ROOT];return process.platform==="darwin"?e.push(N.join($t.homedir(),"Library","Android","sdk")):process.platform==="linux"&&e.push(N.join($t.homedir(),"Android","Sdk"),N.join($t.homedir(),"Android","sdk"),"/opt/android-sdk","/usr/lib/android-sdk"),[...new Set(e.filter(t=>!!t))]}function es(e){try{return P.readdirSync(e,{withFileTypes:!0}).filter(t=>t.isDirectory()).map(t=>t.name).sort((t,n)=>n.localeCompare(t,void 0,{numeric:!0}))}catch{return[]}}function bc(e){let t=process.platform==="win32"?"where":"/usr/bin/env",n=process.platform==="win32"?[e]:["which",e],i=Ge(t,n,{encoding:"utf-8",env:process.env});return i.status!==0||!i.stdout?null:String(i.stdout).split(`
1565
+ `)[0]?.trim()||null}async function Xi(e,t,n){if(!P.existsSync(e))return;let i=P.readFileSync(e),r;for(let o=1;o<=3;o+=1)try{await Wt.put(t,i,{headers:{"Content-Type":n,"Content-Length":String(i.length)},maxBodyLength:1/0,maxContentLength:1/0,timeout:12e4});return}catch(s){if(r=s,!ss(s)||o>=3)break;await rr(2e3*o)}throw r}async function ts(e,t,n,i){let r=N.join(n,"report.xml"),o=N.join(t,"artifacts.tar.gz");try{await Xi(r,e.junitUploadUrl,"application/xml")}catch(s){P.appendFileSync(i,`[WARN] Failed to upload JUnit report: ${s.message||s}
1566
+ `)}try{await Xi(i,e.logUploadUrl,"text/plain")}catch(s){P.appendFileSync(i,`[WARN] Failed to upload runner log: ${s.message||s}
1567
+ `)}try{We("tar",["-czf",o,"-C",t,N.basename(n)],i),await Xi(o,e.artifactsUploadUrl,"application/gzip")}catch(s){P.appendFileSync(i,`[WARN] Failed to upload Maestro artifacts: ${s.message||s}
1568
+ `)}}function Ec(e){if(!e.endsWith(".apk"))return C.error(T.red("Local Android Maestro runs need an APK artifact.")),!1;C.info(T.dim("Installing APK on local Android device/emulator..."));let t=Ge("adb",["install","-r",e],{stdio:"inherit",env:process.env});return t.error?(C.error(T.red(`adb failed to start: ${t.error.message}`)),!1):t.status!==0?(C.error(T.red(`adb install failed with exit code ${t.status??1}`)),!1):!0}function Ic(e,t){if(e.endsWith(".ipa"))return C.error(T.red("Local iOS Maestro runs need an iOS Simulator .app.zip artifact, not an App Store .ipa.")),!1;let n=e;if(e.endsWith(".zip")){let r=N.join(t,"ios-app");P.mkdirSync(r,{recursive:!0}),new jn(e).extractAllTo(r,!0);let o=or(r);if(!o)return C.error(T.red("Could not find a .app bundle inside the downloaded zip.")),!1;n=o}if(!n.endsWith(".app"))return C.error(T.red("Local iOS Maestro runs need an iOS Simulator .app bundle or .app.zip artifact.")),!1;C.info(T.dim("Installing app on booted iOS Simulator..."));let i=Ge("xcrun",["simctl","install","booted",n],{stdio:"inherit",env:process.env});return i.error?(C.error(T.red(`xcrun failed to start: ${i.error.message}`)),!1):i.status!==0?(C.error(T.red(`iOS Simulator install failed with exit code ${i.status??1}`)),!1):!0}function or(e){let t=P.readdirSync(e,{withFileTypes:!0});for(let n of t){let i=N.join(e,n.name);if(n.isDirectory()&&n.name.endsWith(".app"))return i;if(n.isDirectory()){let r=or(i);if(r)return r}}return null}function _c(e,t){let n=String(t||"").toLowerCase();return n==="android"?e.find(i=>wt(i,".apk")):n==="ios"?e.find(i=>wt(i,".app.zip"))||e.find(i=>wt(i,".zip")):e.find(i=>wt(i,".apk"))||e.find(i=>wt(i,".app.zip"))||e.find(i=>wt(i,".zip"))}function wt(e,t){return String(e?.name||e?.downloadUrl||e?.url||"").toLowerCase().endsWith(t)}function sr(e){let t=String(e||"").toLowerCase();if(t.includes(".apk"))return"android";if(t.includes(".app.zip")||t.endsWith(".app")||t.includes(".ipa"))return"ios"}function ps(e){if(e)try{return N.basename(new URL(e).pathname)||void 0}catch{return N.basename(e)||void 0}}function wc(e){return e?e.match(/[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/i)?.[0]:void 0}function fs(e,t){if(!e.jsonOutput)return;let n=N.resolve(e.jsonOutput),i={...t,updatedAt:new Date().toISOString()};try{let r=N.dirname(n);r&&r!=="."&&P.mkdirSync(r,{recursive:!0}),P.writeFileSync(n,JSON.stringify(i,null,2))}catch(r){C.warn(T.yellow(`Could not write Maestro metadata JSON: ${r.message}`))}}function $c(e,t){if(!e.jsonOutput)return;let n=N.resolve(e.jsonOutput),i={mode:"local",...t,updatedAt:new Date().toISOString()};try{let r=N.dirname(n);r&&r!=="."&&P.mkdirSync(r,{recursive:!0}),P.writeFileSync(n,JSON.stringify(i,null,2))}catch(r){C.warn(T.yellow(`Could not write Maestro metadata JSON: ${r.message}`))}}import{spinner as nt,text as Xt,select as pr,isCancel as et,cancel as fr,log as _s}from"@clack/prompts";import V from"chalk";import Y from"fs";import fe from"path";import{spawn as Dc,spawnSync as gt}from"child_process";import ws from"axios";import At from"os";import hr from"crypto";import vc from"crypto";import vt from"axios";import ms from"fs";var Jt=6e4,Rc=12e4,ar=4,qt=e=>encodeURIComponent(e),Oc=e=>new Promise(t=>setTimeout(t,e));async function Rt(e,t){let n;for(let i=1;i<=ar;i++)try{return await t()}catch(r){if(n=r,i>=ar||!Pc(r))throw r;let o=Number(r.response?.headers?.["retry-after"]),s=Number.isFinite(o)&&o>0?o*1e3:Math.min(2e3*i*i,15e3);console.log(`[Google Play] ${e} failed (attempt ${i}/${ar}); retrying in ${Math.round(s/1e3)}s...`),await Oc(s)}throw n}function Pc(e){let t=e.response?.status;return t?t===408||t===409||t===425||t===429||t>=500:!0}async function hs(e){let{packageName:t,serviceAccount:n,aabPath:i,track:r,releaseStatus:o,userFraction:s,changesNotSentForReview:a}=e,l;try{let c={Authorization:`Bearer ${await gs(n)}`,Connection:"close"},u=qt(t);if(l=(await Rt("create edit",()=>vt.post(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${u}/edits`,{},{headers:c,timeout:Jt}))).data.id,!l)throw new Error("Google Play edit insert succeeded but did not return an edit id.");let p=qt(l),g=ms.statSync(i),h=await Rt("upload AAB",()=>vt.post(`https://androidpublisher.googleapis.com/upload/androidpublisher/v3/applications/${u}/edits/${p}/bundles`,ms.createReadStream(i),{headers:{...c,"Content-Type":"application/octet-stream","Content-Length":g.size},maxBodyLength:1/0,maxContentLength:1/0,params:{uploadType:"media"},timeout:Rc})),A=Number(h.data.versionCode);if(!A)throw new Error("Google Play upload succeeded but did not return a versionCode.");let S={versionCodes:[String(A)],status:o};return(o==="inProgress"||o==="halted")&&typeof s=="number"&&(S.userFraction=s),await Rt("update track",()=>vt.put(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${u}/edits/${p}/tracks/${qt(r)}`,{releases:[S]},{headers:c,timeout:Jt})),await Rt("commit edit",()=>vt.post(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${u}/edits/${p}:commit`,{},{headers:c,params:a?{changesNotSentForReview:!0}:void 0,timeout:Jt})),{editId:l,versionCode:A,track:r,releaseStatus:o,userFraction:s}}catch(d){if(l)try{let u=await gs(n);await Rt("delete edit",()=>vt.delete(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${qt(t)}/edits/${qt(l)}`,{headers:{Authorization:`Bearer ${u}`,Connection:"close"},timeout:Jt}))}catch{}let c=d.response?.data?.error?.message||d.message;throw new Error(`Google Play API Error: ${c}`)}}async function gs(e){let t=Math.floor(Date.now()/1e3),n=t+3600,i={alg:"RS256",typ:"JWT"},r={iss:e.client_email,sub:e.client_email,aud:"https://oauth2.googleapis.com/token",iat:t,exp:n,scope:"https://www.googleapis.com/auth/androidpublisher"},o=Buffer.from(JSON.stringify(i)).toString("base64url"),s=Buffer.from(JSON.stringify(r)).toString("base64url"),a=`${o}.${s}`,l=vc.createSign("RSA-SHA256");l.update(a);let d=l.sign(e.private_key,"base64url"),c=`${a}.${d}`;return(await Rt("OAuth token exchange",()=>vt.post("https://oauth2.googleapis.com/token",{grant_type:"urn:ietf:params:oauth:grant-type:jwt-bearer",assertion:c},{headers:{Connection:"close"},timeout:Jt}))).data.access_token}var Cc=5e3,Tc=12,$s=100,lr=24,As=8e3,kc={completed:"completed",draft:"draft",halted:"halted",inprogress:"inProgress","in-progress":"inProgress"},Nc=e=>e?.type==="google_service_account",Vn=e=>e?.bundleId||e?.packageName||e?.meta?.packageName||e?.meta?.bundleId,vs=e=>e.submitArgs||process.argv.slice(3).join(" ");async function zn(e){let t=nt(),n=Ae(),i=xc(e);if(!i){process.exitCode=1;return}let r=e.projectId||i.projectId,o=e.profile||e.buildProfile||"production";if(!r){Q(`${m.configFileName} is missing projectId. Pass --project-id in runner mode.`),process.exitCode=1;return}i.projectId=r,oe(V.dim(`Submit for project: ${i.name||r} | Profile: ${o}`));let s=e.platform;if(!s){let y=await pr({message:"Select platform to submit:",options:[{value:"ios",label:"iOS (App Store Connect / TestFlight)"},{value:"android",label:"Android (Google Play Console)"}]});if(et(y)){fr("Operation cancelled");return}s=y}if(s=String(s).toLowerCase(),s!=="ios"&&s!=="android"){Q(`Platform ${s} is not supported. Use 'ios' or 'android'.`),process.exitCode=1;return}let a=s==="ios"&&!e.local&&e.sshHost?Xc(i,o,e):null;if(s==="ios"&&!e.local&&!a){await Lc(i,o,e);return}let l=e.submitId,d=!!(e.local&&l),c=l||null,u=async(y,$={})=>{c&&await Bc(r,c,{status:y,...$})},f=s==="android"?e.packageName||e.androidPackage||Yc(i,o):void 0,p=s==="ios"?e.bundleId||e.iosBundleIdentifier||Jc(i,o):void 0,g,h,A,S=!1;try{s==="android"&&(g=e.track||i.submit?.[o]?.android?.track||i.submit?.production?.android?.track||"internal",h=Zc(i,o,e.releaseStatus),A=eu(i,o,e.rollout),S=tu(i,o,e.changesNotSentForReview),nu(h,A))}catch(y){Q(y.message),process.exitCode=1;return}if(s==="android"&&!d&&(c=await Mc(i,r,s,o,e,{packageName:f,track:g,releaseStatus:h,rollout:A,changesNotSentForReview:S}),!c)){Q("Could not create submission tracking record. Submission was not started."),process.exitCode=1;return}await u("running",{platform:s,profile:o,packageName:f,track:g,releaseStatus:h,rollout:A,startTime:Date.now(),...d?jc():{}});let I=null,L=null;try{L=await iu(r,s,e,n?.token),I=L?.filePath||null}catch(y){await u("failed",{error:`Failed to resolve submission artifact: ${y.message}`,endTime:Date.now()}),Q(`Failed to resolve submission artifact: ${y.message}`),process.exitCode=1;return}if(!I){let y=ou(s,e);await u("failed",{error:y,endTime:Date.now()}),Q(y),process.exitCode=1;return}await u("running",{buildId:L?.buildId,artifactName:L?.artifactName,artifactSource:L?.source}),oe(`Using artifact: ${V.green(fe.basename(I))} `),t.start("Fetching submission credentials from Dashboard...");let w;try{let $=(await v.get(`/credentials/${r}`)).data.credentials||[];if(s==="android"&&!f){t.stop("Package name missing"),Q("Could not resolve Android package name. Set android.package in mach.config.json/app.json."),await u("failed",{error:"Could not resolve Android package name.",endTime:Date.now()}),process.exitCode=1;return}let _=$.filter(Nc),R=s==="ios"?$.filter(U=>U.type==="asc_api_key"):qc(_,f);if(R.length===0){if(t.stop("Credentials missing"),Q(s==="android"?`No Google Play service credential found for package ${f}.`:`No Service Credentials found for ${s}.`),s==="android"){let U=_.map(Vn).filter(Boolean).join(", ");U&&oe(`Found Google Play service credential(s) for: ${U}`),oe(`Use '${m.nameLower} credentials:service --platform android --package-name ${f}' or upload it under that package in the Dashboard.`)}else oe(`Use '${m.nameLower} credentials:service --platform ${s}' or use the Dashboard to upload them.`);await u("failed",{error:`No submission credentials found for ${s}.`,endTime:Date.now()}),process.exitCode=1;return}if(w=Vc(R,e.credentialId),!w&&s==="ios"&&p&&(w=zc(R,p)),w||R.length===1)w=w||R[0],t.stop(`Using: ${w.name}`),s==="android"&&Vn(w)==="*"&&oe(V.yellow(`Using legacy wildcard Google Play credential for ${f}. Upload a package-scoped credential when possible.`));else{if(t.stop("Multiple credentials found"),Kc()){let F=R.map(G=>`${G.name||"credential"} (${G.credentialId||G.id||"no-id"})`).join(", ");Q(`Multiple ${s==="ios"?"App Store Connect":"Google Play"} credentials found. Use --credential-id in CI. Available: ${F}`),await u("failed",{error:"Multiple submission credentials found; --credential-id is required in CI.",endTime:Date.now()}),process.exitCode=1;return}let U=await pr({message:`Choose a ${s==="ios"?"App Store Connect":"Google Play"} credential:`,options:R.map(F=>({value:F.credentialId,label:F.name,hint:`${F.keyId?`ID: ${F.keyId}`:""} ${F.issuerId?`(Issuer: ${F.issuerId.substring(0,8)}...)`:""}`}))});if(et(U)){fr("Submission cancelled"),await u("failed",{error:"Submission cancelled while selecting credential.",endTime:Date.now()}),process.exitCode=1;return}w=R.find(F=>F.credentialId===U),oe(`Using selected: ${V.green(w.name)}`)}}catch(y){t.stop("Failed to fetch credentials"),Q(`API Error: ${y.message} `),await u("failed",{error:`Failed to fetch credentials: ${y.message}`,endTime:Date.now()}),process.exitCode=1;return}let j=Y.mkdtempSync(fe.join(At.tmpdir(),`${m.nameLower}-submit-`)),W=w.keyId||w.meta?.keyId,Z=w.issuerId||w.meta?.issuerId,_e=w.type==="asc_api_key"?`AuthKey_${W}.p8`:"service-account.json",re=fe.join(j,_e);t.start("Downloading secure key...");try{let y=await v.get(`/credentials/${w.credentialId}/download`,{params:{projectId:r,format:"raw"}});if(y.data.status!=="success"||!y.data.downloadUrl)throw new Error("Failed to get secure download URL");let $=await ws.get(y.data.downloadUrl,{responseType:"arraybuffer"});Y.writeFileSync(re,Buffer.from($.data)),t.stop("Key downloaded to secure temp storage")}catch(y){t.stop("Download failed"),Q(`Failed to download key: ${y.message}`);try{Y.rmSync(j,{recursive:!0,force:!0})}catch{}await u("failed",{error:`Failed to download credential key: ${y.message}`,endTime:Date.now()}),process.exitCode=1;return}oe(V.blue(`Initiating ${s==="ios"?"TestFlight":"Google Play"} submission...`));let O=!1,x;try{if(s==="ios"){if(!W){let $=await Xt({message:"Enter App Store Connect Key ID (e.g. 2X948D...):",validate:_=>_.length>0?void 0:"Key ID is required"});if(et($)){await u("failed",{error:"Submission cancelled while entering ASC Key ID.",endTime:Date.now()}),process.exitCode=1;return}W=$}if(!Z||Z==="undefined"){let $=await Xt({message:"Enter App Store Connect Issuer ID (Found on ASC Keys page):",validate:_=>_.length>0?void 0:"Issuer ID is required"});if(et($)){await u("failed",{error:"Submission cancelled while entering ASC Issuer ID.",endTime:Date.now()}),process.exitCode=1;return}Z=$}oe(`Using ASC Key ID: ${W}`),oe(`Using ASC Issuer ID: ${Z}`);let y=a?await au(I,re,Z,W,p,a):await su(I,re,Z,W,p);gr(`${s==="ios"?"App Store":"Google Play"} submission successful!`),O=!0}else x=await pu(I,re,g||"internal",f,h||"completed",A,S,o),gr("Google Play submission successful!"),O=!0}catch(y){Q(`Submission failed: ${y.message}`),await u("failed",{error:y.message,endTime:Date.now()}),tt(e,{status:"failed",projectId:r,submitId:c,platform:s,profile:o,buildId:L?.buildId||e.buildId,artifactName:L?.artifactName,error:y.message,dashboardUrl:c?ht(c,r):void 0}),process.exitCode=1}finally{O&&(await u("success",{endTime:Date.now(),versionCode:x?.versionCode,track:g,releaseStatus:h}),tt(e,{status:"success",projectId:r,submitId:c,platform:s,profile:o,buildId:L?.buildId||e.buildId,artifactName:L?.artifactName,versionCode:x?.versionCode,track:g,releaseStatus:h,dashboardUrl:c?ht(c,r):void 0})),Ru(j),I&&I.includes(`${m.nameLower}-artifact-`)}}function xc(e){let t=`./${m.configFileName}`;if(Y.existsSync(t))try{return JSON.parse(Y.readFileSync(t,"utf-8"))}catch(n){return Q(`Failed to read ${m.configFileName}: ${n.message}`),null}return e.projectId?{projectId:e.projectId}:(Q(`No ${m.configFileName} found. Run \`${m.nameLower} init\` or \`${m.nameLower} link\` first.`),null)}async function Lc(e,t,n){let i=n.projectId||e.projectId;if(!i){Q(`${m.configFileName} is missing projectId.`),process.exitCode=1;return}let r=n.submitId||hr.randomUUID(),o=!!n.latest||!n.buildId,s=Uc({...n,latest:o,profile:t,projectId:i,submitId:r}),a={projectId:i,submitId:r,platform:"ios",profile:t,latest:o,buildId:n.buildId,credentialId:n.credentialId,status:"pending",source:"cli",submitArgs:vs(n),runnerArgs:s,runnerCommand:[m.nameLower,"submit",...s].map(Wc).join(" "),appName:e.name,startTime:Date.now()},l=nt();l.start("Queuing iOS submit on macOS runner...");try{let d=await v.post("/submissions",a),c=d.data?.submission||d.data?.submit||{},u=d.data?.dashboardUrl||ht(r,i);l.stop("iOS submit queued"),oe(`Submission ID: ${V.cyan(r)}`),oe(`Dashboard: ${V.blue.underline(u)}`),tt(n,{status:"pending",projectId:i,submitId:r,platform:"ios",profile:t,latest:o,buildId:n.buildId,dashboardUrl:u}),await Fc(i,r,n)}catch(d){l.stop("Could not queue iOS submit"),Q(Gc(d)),process.exitCode=1}}async function Mc(e,t,n,i,r,o={}){let s=r.submitId||hr.randomUUID(),a=!!r.latest||!r.buildId,l={projectId:t,submitId:s,platform:n,profile:i,latest:a,buildId:r.buildId,credentialId:r.credentialId,status:"running",source:"cli-direct",submitArgs:vs(r),appName:e.name,startTime:Date.now(),...o};try{let d=await v.post("/submissions",l),c=d.data?.submission||d.data?.submit||{},u=d.data?.dashboardUrl||c.dashboardUrl||ht(s,t);return oe(`Submission ID: ${V.cyan(s)}`),oe(`Dashboard: ${V.blue.underline(u)}`),tt(r,{status:"running",projectId:t,submitId:s,platform:n,profile:i,latest:a,buildId:r.buildId,dashboardUrl:u}),s}catch(d){let c=d.response?.data?.message||d.response?.data?.error||d.message;return oe(V.yellow(`Could not create submission tracking record: ${c}`)),null}}function Uc(e){let t=["--local","--submit-id",e.submitId,"--project-id",e.projectId,"--platform","ios","--profile",e.profile||"production"];return e.buildId?t.push("--build-id",e.buildId):t.push("--latest"),e.credentialId&&t.push("--credential-id",e.credentialId),e.bundleId&&t.push("--bundle-id",e.bundleId),e.packageName&&t.push("--package-name",e.packageName),e.quiet&&t.push("--quiet"),e.jsonOutput&&t.push("--json-output",e.jsonOutput),t.filter(n=>n!=null&&n!=="")}async function Fc(e,t,n){let i=nt(),r=0,o=0;for(n.quiet||i.start("Waiting for iOS submit runner...");;)try{let s=await v.get(`/submissions/${e}/${t}`),a=s.data?.submission||s.data?.submit||s.data,l=String(a?.status||"pending").toLowerCase();r=0;let d=Array.isArray(a?.logs)?a.logs:[];for(let c=o;c<d.length;c++){let u=d[c];u&&console.log(V.dim(String(u)))}if(o=d.length,["success","completed","succeeded"].includes(l)){n.quiet||i.stop("iOS submit completed"),gr("App Store submission successful!"),tt(n,{status:"success",projectId:e,submitId:t,platform:"ios",profile:a?.profile||n.profile||"production",buildId:a?.buildId||n.buildId,artifactName:a?.artifactName,dashboardUrl:a?.dashboardUrl||ht(t,e)});return}if(["failed","error","cancelled","canceled"].includes(l)){n.quiet||i.stop("iOS submit failed");let c=a?.error||a?.message||"Unknown iOS submit failure.";Q(c),tt(n,{status:"failed",projectId:e,submitId:t,platform:"ios",profile:a?.profile||n.profile||"production",buildId:a?.buildId||n.buildId,artifactName:a?.artifactName,error:c,dashboardUrl:a?.dashboardUrl||ht(t,e)}),process.exitCode=1;return}n.quiet||i.message(`iOS submit ${l}...`),await mr(Cc)}catch(s){if(r++,r>=Tc){n.quiet||i.stop("Lost connection to iOS submit status"),Q(`Could not fetch iOS submit status after ${r} attempts: ${s.message}`),process.exitCode=1;return}await mr(Math.min(2e3*r,15e3))}}async function Bc(e,t,n){let i;for(let r=1;r<=3;r++)try{await v.patch(`/submissions/${e}/${t}`,n);return}catch(o){if(i=o,r>=3||!Hc(o))break;await mr(1e3*r)}_s.warn(V.dim(`Could not report submission status: ${i?.message||i}`))}function Hc(e){let t=e.response?.status;return!t||t===408||t===409||t===425||t===429||t>=500}function jc(){let e={gitlabJobId:process.env.CI_JOB_ID,gitlabJobUrl:process.env.CI_JOB_URL,gitlabPipelineId:process.env.CI_PIPELINE_ID,gitlabProjectId:process.env.CI_PROJECT_ID,gitlabProjectPath:process.env.CI_PROJECT_PATH};return Object.fromEntries(Object.entries(e).filter(([,t])=>!!t))}function Gc(e){let t=e.response?.status,n=e.response?.data?.message||e.response?.data?.error;return t===404||t===405?["Managed iOS submit is not enabled on this Mach API yet.","Deploy the API/dashboard submission orchestration endpoint, then retry the same command.","Expected API: POST /submissions and GET/PATCH /submissions/:projectId/:submitId."].join(`
1569
+ `):n||e.message||String(e)}function ht(e,t){if(!e)return je;let n=t?`?projectId=${encodeURIComponent(t)}`:"";return`${je}/submissions/${e}${n}`}function tt(e,t){if(!e.jsonOutput)return;let n=fe.resolve(e.jsonOutput),i={...t,url:t.url||t.dashboardUrl||ht(t.submitId,t.projectId),updatedAt:new Date().toISOString()};try{let r=fe.dirname(n);r&&r!=="."&&Y.mkdirSync(r,{recursive:!0}),Y.writeFileSync(n,JSON.stringify(i,null,2))}catch(r){_s.warn(V.yellow(`Could not write submission metadata JSON: ${r.message}`))}}function Vc(e,t){return t&&e.find(n=>n.credentialId===t||n.id===t||n.keyId===t||n.meta?.keyId===t)||null}function zc(e,t){let n=e.filter(i=>[i.bundleId,i.bundleIdentifier,i.appIdentifier,i.meta?.bundleId,i.meta?.bundleIdentifier,i.meta?.appIdentifier].filter(Boolean).map(String).includes(t));return n.length===1?n[0]:null}function Kc(){return process.env.CI==="true"||process.env.CI==="1"||!process.stdin.isTTY}function mr(e){return new Promise(t=>setTimeout(t,e))}function Wc(e){return/^[a-zA-Z0-9_./:=@-]+$/.test(e)?e:`'${e.replace(/'/g,"'\\''")}'`}function Yc(e,t){if(e.submit?.[t]?.android?.package)return e.submit[t].android.package;let n=Ln(e,t);if(n)return n;let i=fe.join(process.cwd(),"app.json");if(Y.existsSync(i))try{return JSON.parse(Y.readFileSync(i,"utf-8")).expo?.android?.package}catch{}let r=fe.join(process.cwd(),"app.config.json");if(Y.existsSync(r))try{let o=JSON.parse(Y.readFileSync(r,"utf-8"));return o.expo?.android?.package||o.android?.package}catch{}}function qc(e,t){let n=e.filter(o=>Vn(o)===t);if(n.length>0)return n;let i=e.filter(o=>{let s=Vn(o);return!s||s==="*"});return e.length>0&&e.length===i.length?i:[]}function Jc(e,t){return e.submit?.[t]?.ios?.bundleIdentifier?e.submit[t].ios.bundleIdentifier:e.submit?.[t]?.ios?.bundleId?e.submit[t].ios.bundleId:Mn(e,t)}function Xc(e,t,n){let i=e.submit?.[t]?.ios||{},r=e.submit?.production?.ios||{},o=n.sshHost||i.sshHost||r.sshHost||process.env.MACH_IOS_SUBMIT_SSH_HOST;return o?{sshHost:o,sshUser:n.sshUser||i.sshUser||r.sshUser||process.env.MACH_IOS_SUBMIT_SSH_USER||process.env.USER||"ubuntu",sshKey:n.sshKey||i.sshKey||r.sshKey||process.env.MACH_IOS_SUBMIT_SSH_KEY}:null}function Zc(e,t,n){let i=n||e.submit?.[t]?.android?.releaseStatus||e.submit?.production?.android?.releaseStatus||"completed";return Qc(i)}function Qc(e){let t=kc[String(e).trim().toLowerCase()];if(!t)throw new Error(`Invalid Android release status "${e}". Use completed, draft, halted, or inProgress.`);return t}function eu(e,t,n){let i=n??e.submit?.[t]?.android?.rollout??e.submit?.[t]?.android?.userFraction??e.submit?.[t]?.android?.rolloutFraction??e.submit?.production?.android?.rollout??e.submit?.production?.android?.userFraction??e.submit?.production?.android?.rolloutFraction;if(i==null||i==="")return;let r=Number(i);if(!Number.isFinite(r)||r<=0||r>=1)throw new Error(`Invalid Android rollout fraction "${i}". Use a number greater than 0 and less than 1, for example 0.1.`);return r}function tu(e,t,n){let i=n??e.submit?.[t]?.android?.changesNotSentForReview??e.submit?.[t]?.android?.changes_not_sent_for_review??e.submit?.production?.android?.changesNotSentForReview??e.submit?.production?.android?.changes_not_sent_for_review??!1;return i===!0||i==="true"||i==="1"}function nu(e,t){if(e==="inProgress"&&t===void 0)throw new Error("Google Play staged rollout requires --rollout <fraction> when --release-status inProgress is used.");if(e!=="inProgress"&&e!=="halted"&&t!==void 0)throw new Error("Android rollout fraction can only be used with --release-status inProgress or halted.")}async function iu(e,t,n,i){let r=n.buildId?"id":n.latest?"latest":null;if(!r){let s=await pr({message:"Select artifact source:",options:[{value:"latest",label:`Latest Production Build (${m.name})`},{value:"id",label:`Input Build ID (${m.name})`},{value:"url",label:"Remote URL"},{value:"local",label:"Local File Path"}]});if(et(s))return fr("Operation cancelled"),null;r=s}if(r==="local"){let s=await Xt({message:"Enter path to artifact (.ipa/.aab):",validate:a=>{if(!Y.existsSync(a))return"File not found";if(t==="ios"&&!a.endsWith(".ipa"))return"Must be an .ipa file";if(t==="android"&&!a.endsWith(".aab"))return"Must be an .aab file"}});return et(s)?null:{filePath:s,source:"local"}}let o=nt();if(r==="latest"){let s=n.profile||n.buildProfile;o.start(`Fetching latest${s?` ${s}`:""} build...`);try{let a=await v.get(`/builds/${e}`,{params:{limit:50}});if(a.data.status!=="success")throw new Error(a.data.message);let l=a.data.builds||[],d=s?.toLowerCase(),c=w=>w.platform?.toLowerCase()===t.toLowerCase()&&w.status?.toLowerCase()==="success",u=w=>d?[w.buildProfile,w.profile,w.profileName,w.buildType].filter(Boolean).some(j=>String(j).toLowerCase()===d):!0,f=l.filter(w=>c(w)&&u(w)),p=f.find(w=>w.buildType?.toLowerCase()==="store"||w.distribution?.toLowerCase()==="store")||f[0],g=l.some(w=>w.platform?.toLowerCase()===t.toLowerCase()&&w.status?.toLowerCase()==="success");if(!p)return o.stop("No suitable build found"),Q(s&&g?`No successful ${t} builds found for profile "${s}".`:"No successful builds found for this platform."),null;o.stop(`Found build: ${p.buildId}`);let h=p.artifacts||[];if(h.length===0||h.every(w=>!(w.url||w.downloadUrl)))try{let w=await v.get(`/builds/${e}/${p.buildId}/artifacts`);w.data.status==="success"&&w.data.artifacts?.length>0?(h=w.data.artifacts.map(j=>({...j,url:j.url||j.downloadUrl})),console.log(V.cyan(` [RECOVERY] Fetched ${h.length} artifact(s) with download URLs.`))):console.log(V.yellow(" [RECOVERY] /artifacts endpoint returned 0 artifacts."))}catch(w){console.log(V.red(` [RECOVERY] /artifacts fetch failed: ${w.message}`))}let S=t==="ios",I=h.find(w=>{let j=(w.type||"").toLowerCase(),W=(w.name||"").toLowerCase();if(console.log(V.dim(` - Checking: ${w.name} (Type: ${w.type}, HasLink: ${!!(w.url||w.downloadUrl)})`)),j)return j===(S?"ipa":"aab");let Z=S?".ipa":".aab",_e=(w.url||w.downloadUrl||"").toLowerCase();return W.endsWith(Z)||_e.includes(Z)});if(!I||!(I.url||I.downloadUrl))return Q("Build found but artifact URL is missing."),null;let L=I.url||I.downloadUrl;return{filePath:await dr(L,S?"ios":"android"),buildId:p.buildId,artifactName:I.name,source:"latest"}}catch(a){return o.stop("Fetch failed"),Q(`API Error: ${a.message}`),null}}if(r==="id"){let s=n.buildId||await Xt({message:"Enter Build ID:",validate:l=>l.length<5?"Invalid ID":void 0});if(et(s))return null;let a=String(s);o.start("Fetching build...");try{let l=null;try{let p=await v.get(`/builds/${e}/${a}`);p.data.status==="success"&&(l=p.data.build)}catch(p){p.response?.status!==404&&console.log(V.dim(` [RECOVERY] Project build lookup skipped: ${p.message}`))}if(!l){let p=await v.get(`/build/${a}`);if(p.data.status!=="success")throw new Error(p.data.message);l=p.data.build}if(!l)throw new Error(`Build ${a} was not found.`);let d=t==="ios",c=Gn(l.artifacts);ru(c)||(c=await Ss(e,a,c));let u=ys(c,t);if(u||(c=await Ss(e,a,c),u=ys(c,t)),!u)throw new Error(`No ${d?".ipa":".aab"} artifact found for build ${a}. The build exists, but its artifact list does not contain a downloadable submission artifact.`);let f=u.url||u.downloadUrl;if(!f)throw new Error(`Artifact ${u.name||"(unnamed)"} for build ${a} has no download URL. Retry after the build artifact upload is visible in the Installation Hub.`);return o.stop(`Found build: ${l.buildId||a}`),{filePath:await dr(f,d?"ios":"android"),buildId:l.buildId||a,artifactName:u.name,source:"id"}}catch(l){throw o.stop("Fetch failed"),l}}if(r==="url"){let s=await Xt({message:"Enter Artifact URL:",validate:a=>a.startsWith("http")?void 0:"Must be a valid URL"});return et(s)?null:{filePath:await dr(s,t),source:"url"}}return null}function Gn(e){return(e||[]).map(t=>({...t,url:t.url||t.downloadUrl}))}function ru(e){return e.some(t=>!!(t.url||t.downloadUrl))}function ys(e,t){let n=t==="ios",i=n?"ipa":"aab",r=n?".ipa":".aab";return e.find(o=>{let s=String(o.type||"").toLowerCase(),a=String(o.name||"").toLowerCase(),l=String(o.url||o.downloadUrl||"").toLowerCase();return s?s===i:a.endsWith(r)||l.includes(r)})||null}function ou(e,t){let n=e==="ios"?".ipa":".aab";if(t.buildId)return`No downloadable ${n} artifact found for build ${t.buildId}. Check that the build finished artifact upload before submitting.`;if(t.latest){let i=t.profile||t.buildProfile;return`No latest successful ${e}${i?` ${i}`:""} build has a downloadable ${n} artifact.`}return`No downloadable ${n} artifact was selected for submission.`}async function Ss(e,t,n){try{let i=await v.get(`/builds/${e}/${t}/artifacts`);if(i.data.status==="success"&&i.data.artifacts?.length>0){let r=Gn(i.data.artifacts);return console.log(V.cyan(` [RECOVERY] Fetched ${r.length} artifact(s) with download URLs.`)),r}}catch(i){console.log(V.dim(` [RECOVERY] Project artifact lookup skipped: ${i.message}`))}try{let i=await v.get(`/public/builds/${t}`);if(i.data.status==="success"&&i.data.artifacts?.length>0){let r=Gn(i.data.artifacts);return console.log(V.cyan(` [RECOVERY] Fetched ${r.length} public artifact(s) with download URLs.`)),r}}catch(i){console.log(V.dim(` [RECOVERY] Public artifact lookup skipped: ${i.message}`))}return Gn(n)}async function dr(e,t,n=3){let i=nt();i.start("Downloading artifact...");let r=Y.mkdtempSync(fe.join(At.tmpdir(),`${m.nameLower}-artifact-`)),o=`app.${t==="ios"?"ipa":"aab"}`,s=fe.join(r,o);for(let a=1;a<=n;a++)try{a>1&&(i.message(`Downloading artifact (Retry ${a}/${n})...`),await new Promise(c=>setTimeout(c,2e3*a)));let l=Y.createWriteStream(s),d=await ws({url:e,method:"GET",responseType:"stream",timeout:6e4});return await new Promise((c,u)=>{d.data.pipe(l);let f=!1;d.data.on("error",p=>{f||(f=!0,l.close(),u(p))}),l.on("finish",()=>{f||c()}),l.on("error",p=>{f||(f=!0,u(p))})}),i.stop("Download complete"),s}catch(l){if(a===n)throw i.stop("Download failed"),l}throw new Error("Download failed after retries")}async function su(e,t,n,i,r){let o=nt();if(r&&oe(`Bundle ID: ${V.green(r)}`),!n||!i)throw Q(`Missing credentials: issuerId=${n}, keyId=${i}. Check your Dashboard.`),new Error("Missing ASC API Key Metadata (IssuerID or KeyID)");let s=Rs(t,n,i),a=mu();return o.start("Uploading to TestFlight (pilot)..."),new Promise((l,d)=>{let c=hu(),u=Dc(a.command,["pilot","upload","--ipa",e,"--api_key_path",s,"--skip_submission","true","--skip_waiting_for_build_processing","true"],{stdio:["ignore","pipe","pipe"],env:a.env});u.stdout?.on("data",f=>c.append(f,process.stdout)),u.stderr?.on("data",f=>c.append(f,process.stderr)),u.on("close",f=>{if(c.flush(),f!==0){o.stop("Pilot failed");try{Y.unlinkSync(s)}catch{}d(Au(f,c.lines()))}else{o.stop("IPA uploaded to TestFlight");try{Y.unlinkSync(s)}catch{}l({})}}),u.on("error",f=>{c.flush();try{Y.unlinkSync(s)}catch{}o.stop("Pilot execution error");let p=$u(f);p.logs=c.lines(),d(p)})})}async function au(e,t,n,i,r,o){let s=nt();if(r&&oe(`Bundle ID: ${V.green(r)}`),!n||!i)throw Q(`Missing credentials: issuerId=${n}, keyId=${i}. Check your Dashboard.`),new Error("Missing ASC API Key Metadata (IssuerID or KeyID)");let a=Rs(t,n,i),l=`${o.sshUser}@${o.sshHost}`,d=lu(o),c=du(o),u="",f="";try{if(s.start(`Preparing remote iOS submit runner (${l})...`),u=cu("ssh",[...d,"mktemp -d /tmp/mach-submit.XXXXXX"]).trim(),!u)throw new Error("Remote runner did not return a temp directory.");s.stop(`Remote runner ready: ${l}`),s.start("Uploading IPA and App Store Connect key to remote runner..."),cr("scp",[...c,e,`${l}:${u}/app.ipa`],"IPA upload to remote runner"),cr("scp",[...c,a,`${l}:${u}/api_key.json`],"ASC key upload to remote runner"),f=fe.join(At.tmpdir(),`${m.nameLower}-ios-submit-${Date.now()}.sh`),Y.writeFileSync(f,uu(u)),cr("scp",[...c,f,`${l}:${u}/submit.sh`],"submit script upload to remote runner"),s.stop("Remote submit inputs uploaded"),s.start("Uploading to TestFlight on remote runner...");let p=`chmod +x ${Zt(`${u}/submit.sh`)} && bash ${Zt(`${u}/submit.sh`)}`,g=gt("ssh",[...d,p],{stdio:"inherit"});if(g.error)throw Ar("ssh",g.error);if(g.status!==0)throw new Error(`Remote iOS submit failed with exit code ${g.status}.`);return s.stop("IPA uploaded to TestFlight"),{apiKeyJsonPath:null}}catch(p){throw s.stop("Remote iOS submit failed"),p}finally{try{Y.unlinkSync(a)}catch{}if(f)try{Y.unlinkSync(f)}catch{}if(u)try{gt("ssh",[...d,`rm -rf ${Zt(u)}`],{stdio:"ignore"})}catch{}}}function Rs(e,t,n){let i=Y.readFileSync(e,"utf8"),r;try{r=hr.createPrivateKey(i).export({type:"pkcs8",format:"pem"})}catch{oe("Key normalization failed, falling back to manual re-wrapping..."),r=`-----BEGIN PRIVATE KEY-----
1524
1570
  ${(i.replace(/-----BEGIN[^-]*-----/g,"").replace(/-----END[^-]*-----/g,"").replace(/\s+/g,"").match(/.{1,64}/g)||[]).join(`
1525
1571
  `)}
1526
- -----END PRIVATE KEY-----`}let o=ge.join(bt.tmpdir(),`api_key_${n}_${Date.now()}.json`),s={key_id:n,issuer_id:t,key:r,in_house:!1};return q.writeFileSync(o,JSON.stringify(s,null,2)),o}function eu(e){let t=["-o","StrictHostKeyChecking=no","-o","ServerAliveInterval=30"];return e.sshKey&&t.push("-i",e.sshKey),t.push(`${e.sshUser}@${e.sshHost}`),t}function tu(e){let t=["-o","StrictHostKeyChecking=no","-o","ServerAliveInterval=30"];return e.sshKey&&t.push("-i",e.sshKey),t}function nu(e,t){let n=ht(e,t,{encoding:"utf-8",stdio:["ignore","pipe","inherit"]});if(n.error)throw mr(e,n.error);if(n.status!==0)throw new Error(`${e} failed with exit code ${n.status}.`);return n.stdout||""}function ar(e,t,n){let i=ht(e,t,{stdio:"inherit"});if(i.error)throw mr(e,i.error);if(i.status!==0)throw new Error(`${n} failed with exit code ${i.status}.`)}function mr(e,t){return t?.code==="ENOENT"?new Error(`${e} was not found on this machine. Install OpenSSH client tools or run iOS submit directly on the macOS runner.`):t}function Zt(e){return`'${e.replace(/'/g,"'\\''")}'`}function iu(e){let t=Zt(`${e}/app.ipa`),n=Zt(`${e}/api_key.json`);return`#!/bin/bash
1572
+ -----END PRIVATE KEY-----`}let o=fe.join(At.tmpdir(),`api_key_${n}_${Date.now()}.json`),s={key_id:n,issuer_id:t,key:r,in_house:!1};return Y.writeFileSync(o,JSON.stringify(s,null,2)),o}function lu(e){let t=["-o","StrictHostKeyChecking=no","-o","ServerAliveInterval=30"];return e.sshKey&&t.push("-i",e.sshKey),t.push(`${e.sshUser}@${e.sshHost}`),t}function du(e){let t=["-o","StrictHostKeyChecking=no","-o","ServerAliveInterval=30"];return e.sshKey&&t.push("-i",e.sshKey),t}function cu(e,t){let n=gt(e,t,{encoding:"utf-8",stdio:["ignore","pipe","inherit"]});if(n.error)throw Ar(e,n.error);if(n.status!==0)throw new Error(`${e} failed with exit code ${n.status}.`);return n.stdout||""}function cr(e,t,n){let i=gt(e,t,{stdio:"inherit"});if(i.error)throw Ar(e,i.error);if(i.status!==0)throw new Error(`${n} failed with exit code ${i.status}.`)}function Ar(e,t){return t?.code==="ENOENT"?new Error(`${e} was not found on this machine. Install OpenSSH client tools or run iOS submit directly on the macOS runner.`):t}function Zt(e){return`'${e.replace(/'/g,"'\\''")}'`}function uu(e){let t=Zt(`${e}/app.ipa`),n=Zt(`${e}/api_key.json`);return`#!/bin/bash
1527
1573
  set -euo pipefail
1528
1574
 
1529
1575
  export PATH="/opt/homebrew/bin:/usr/local/bin:/usr/bin:/bin:/usr/sbin:/sbin:$HOME/.local/share/fastlane/3.4.0/bin:$PATH"
@@ -1551,40 +1597,40 @@ fastlane pilot upload \\
1551
1597
  --api_key_path ${n} \\
1552
1598
  --skip_submission true \\
1553
1599
  --skip_waiting_for_build_processing true
1554
- `}async function ru(e,t,n="internal",i,r="completed",o,s=!1,a="production"){let l=it();if(!i||i==="*")throw new Error("Android package name is required for Google Play submission.");let d=o!==void 0?` (${o} rollout)`:"";l.start(`Uploading to Google Play ${n} track with ${r} release status${d}...`);try{let c=JSON.parse(q.readFileSync(t,"utf-8"));ou(c);let u=await us({packageName:i,serviceAccount:c,aabPath:e,track:n,releaseStatus:r,userFraction:o,changesNotSentForReview:s});return l.stop(`AAB uploaded to ${n} track (versionCode ${u.versionCode})`),u}catch(c){throw l.stop("Google Play upload failed"),new Error(bu(c,n,i,a))}}function ou(e){if(!e?.client_email||!e?.private_key)throw new Error("Invalid Google service account JSON: missing client_email or private_key.")}function lr(){let e=process.env.HOME||bt.homedir(),t=process.env.FASTLANE_GEM_HOME||ge.join(e,".local/share/fastlane/3.4.0"),n=[process.env.FASTLANE_BIN_DIR,"/usr/local/opt/ruby/bin","/opt/homebrew/opt/ruby/bin","/usr/local/bin","/opt/homebrew/bin","/usr/local/Cellar/fastlane/2.227.0/libexec/bin",ge.join(t,"bin"),process.env.PATH].filter(Boolean).join(":");return{...process.env,PATH:n,GEM_HOME:t,GEM_PATH:[t,"/usr/local/Cellar/fastlane/2.227.0/libexec",process.env.GEM_PATH].filter(Boolean).join(":"),FASTLANE_INSTALLED_VIA_HOMEBREW:"true",FASTLANE_SKIP_UPDATE_CHECK:"1",FASTLANE_HIDE_CHANGELOG:"1",LANG:process.env.LANG||"en_US.UTF-8",LC_ALL:process.env.LC_ALL||"en_US.UTF-8",CI:process.env.CI||"1"}}function su(){let e=lr(),t=gs(e);if(t)return t;if(process.env.MACH_SKIP_FASTLANE_INSTALL!=="1"){au(e);let n=gs(lr());if(n)return n}return{command:"fastlane",env:lr()}}function gs(e){let t=process.env.HOME||bt.homedir(),n=[process.env.FASTLANE_BINARY,"/usr/local/bin/fastlane","/opt/homebrew/bin/fastlane","/usr/local/Cellar/fastlane/2.227.0/libexec/bin/fastlane",ge.join(process.env.FASTLANE_GEM_HOME||ge.join(t,".local/share/fastlane/3.4.0"),"bin/fastlane"),"fastlane"].filter(Boolean);for(let i of n){if(i.includes("/")&&!q.existsSync(i))continue;if(!ht(i,["--version"],{env:e,stdio:"ignore"}).error)return{command:i,env:e}}return null}function au(e){let t=ht("gem",["--version"],{env:e,stdio:"ignore"});if(t.error||t.status!==0)return;let n=process.env.HOME||bt.homedir(),i=process.env.FASTLANE_GEM_HOME||ge.join(n,".local/share/fastlane/3.4.0"),r=ge.join(i,"bin");q.mkdirSync(r,{recursive:!0}),se(V.dim("fastlane not found. Installing fastlane into the local Mach runner cache..."));let o=ht("gem",["install","fastlane","-NV","--install-dir",i,"--bindir",r],{env:{...e,GEM_HOME:i,GEM_PATH:[i,e.GEM_PATH].filter(Boolean).join(":")},stdio:"inherit"});(o.error||o.status!==0)&&se(V.yellow("Automatic fastlane install failed; Mach will try PATH resolution once more."))}function lu(e=Ss){let t=[],n="",i=r=>{let o=vs(r);if(o)for(t.push(o);t.length>e;)t.shift()};return{append(r,o){let s=Buffer.isBuffer(r)?r.toString("utf8"):String(r);o.write(s),n+=s;let a=n.split(/\r?\n/);n=a.pop()||"";for(let l of a)i(l)},flush(){n.trim()&&i(n),n=""},lines(){return t.slice()}}}function du(e,t){let n=new Error(cu(e,t));return n.logs=ws(t),n.exitCode=e,n}function cu(e,t){let n=`fastlane pilot failed with exit code ${e??"unknown"}.`,i=uu(t);return i.length===0?n:`${n}
1600
+ `}async function pu(e,t,n="internal",i,r="completed",o,s=!1,a="production"){let l=nt();if(!i||i==="*")throw new Error("Android package name is required for Google Play submission.");let d=o!==void 0?` (${o} rollout)`:"";l.start(`Uploading to Google Play ${n} track with ${r} release status${d}...`);try{let c=JSON.parse(Y.readFileSync(t,"utf-8"));fu(c);let u=await hs({packageName:i,serviceAccount:c,aabPath:e,track:n,releaseStatus:r,userFraction:o,changesNotSentForReview:s});return l.stop(`AAB uploaded to ${n} track (versionCode ${u.versionCode})`),u}catch(c){throw l.stop("Google Play upload failed"),new Error(vu(c,n,i,a))}}function fu(e){if(!e?.client_email||!e?.private_key)throw new Error("Invalid Google service account JSON: missing client_email or private_key.")}function ur(){let e=process.env.HOME||At.homedir(),t=process.env.FASTLANE_GEM_HOME||fe.join(e,".local/share/fastlane/3.4.0"),n=[process.env.FASTLANE_BIN_DIR,"/usr/local/opt/ruby/bin","/opt/homebrew/opt/ruby/bin","/usr/local/bin","/opt/homebrew/bin","/usr/local/Cellar/fastlane/2.227.0/libexec/bin",fe.join(t,"bin"),process.env.PATH].filter(Boolean).join(":");return{...process.env,PATH:n,GEM_HOME:t,GEM_PATH:[t,"/usr/local/Cellar/fastlane/2.227.0/libexec",process.env.GEM_PATH].filter(Boolean).join(":"),FASTLANE_INSTALLED_VIA_HOMEBREW:"true",FASTLANE_SKIP_UPDATE_CHECK:"1",FASTLANE_HIDE_CHANGELOG:"1",LANG:process.env.LANG||"en_US.UTF-8",LC_ALL:process.env.LC_ALL||"en_US.UTF-8",CI:process.env.CI||"1"}}function mu(){let e=ur(),t=bs(e);if(t)return t;if(process.env.MACH_SKIP_FASTLANE_INSTALL!=="1"){gu(e);let n=bs(ur());if(n)return n}return{command:"fastlane",env:ur()}}function bs(e){let t=process.env.HOME||At.homedir(),n=[process.env.FASTLANE_BINARY,"/usr/local/bin/fastlane","/opt/homebrew/bin/fastlane","/usr/local/Cellar/fastlane/2.227.0/libexec/bin/fastlane",fe.join(process.env.FASTLANE_GEM_HOME||fe.join(t,".local/share/fastlane/3.4.0"),"bin/fastlane"),"fastlane"].filter(Boolean);for(let i of n){if(i.includes("/")&&!Y.existsSync(i))continue;if(!gt(i,["--version"],{env:e,stdio:"ignore"}).error)return{command:i,env:e}}return null}function gu(e){let t=gt("gem",["--version"],{env:e,stdio:"ignore"});if(t.error||t.status!==0)return;let n=process.env.HOME||At.homedir(),i=process.env.FASTLANE_GEM_HOME||fe.join(n,".local/share/fastlane/3.4.0"),r=fe.join(i,"bin");Y.mkdirSync(r,{recursive:!0}),oe(V.dim("fastlane not found. Installing fastlane into the local Mach runner cache..."));let o=gt("gem",["install","fastlane","-NV","--install-dir",i,"--bindir",r],{env:{...e,GEM_HOME:i,GEM_PATH:[i,e.GEM_PATH].filter(Boolean).join(":")},stdio:"inherit"});(o.error||o.status!==0)&&oe(V.yellow("Automatic fastlane install failed; Mach will try PATH resolution once more."))}function hu(e=$s){let t=[],n="",i=r=>{let o=Ps(r);if(o)for(t.push(o);t.length>e;)t.shift()};return{append(r,o){let s=Buffer.isBuffer(r)?r.toString("utf8"):String(r);o.write(s),n+=s;let a=n.split(/\r?\n/);n=a.pop()||"";for(let l of a)i(l)},flush(){n.trim()&&i(n),n=""},lines(){return t.slice()}}}function Au(e,t){let n=new Error(yu(e,t));return n.logs=Os(t),n.exitCode=e,n}function yu(e,t){let n=`fastlane pilot failed with exit code ${e??"unknown"}.`,i=Su(t);return i.length===0?n:`${n}
1555
1601
 
1556
1602
  Fastlane output:
1557
1603
  ${i.join(`
1558
- `)}`}function uu(e){let t=ws(e);if(t.length===0)return[];let n=hs(t.filter(fu)),i=pu(t);if(i)return[i,...ys(n,or-1,ps)];let r=n.length>0?n:t.slice(-or);return ys(hs(r),or,ps)}function pu(e){let t=e.join(`
1559
- `),n=t.match(/CFBundleShortVersionString\s*\[([^\]]+)\]/i)?.[1]||t.match(/train version ['"]([^'"]+)['"]/i)?.[1];if(/Invalid Pre-Release Train/i.test(t)||/CFBundleShortVersionString[\s\S]*must contain a higher version/i.test(t))return[`App Store Connect rejected CFBundleShortVersionString${n?` ${n}`:""}: this App Store version train is closed or not higher than the approved version.`,'ios.buildNumber="auto" only changes CFBundleVersion; bump the marketing version (Expo app.json "expo.version" / iOS MARKETING_VERSION), rebuild, then submit the new build.'].join(" ");if(!/bundle version must be higher than the previously uploaded version/i.test(t))return null;let i=t.match(/previous(?:ly)?BundleVersion\s*:\s*([0-9.]+)/i)?.[1]||t.match(/previously uploaded version:\s*[‘'"]?([0-9.]+)/i)?.[1];return`App Store Connect rejected CFBundleVersion: the bundle version must be higher than the previously uploaded version.${i?` Previous uploaded build: ${i}.`:""}`}function fu(e){return/\[!\]|ERROR ITMS-\d+|ITMS-\d+|ENTITY_ERROR|previousBundleVersion|CFBundleVersion|Application Loader Error Output|Transporter Error|Transporter transfer failed|Asset validation failed|Validation failed|Error Domain=|The request could not be completed|No suitable application records|Could not|authentication|unauthori[sz]ed|invalid|failed|exception/i.test(e)}function hs(e){let t=new Set,n=[];for(let i of e){let r=i.trim();!r||t.has(r)||(t.add(r),n.push(i))}return n}function ys(e,t,n){let i=[],r=0;for(let o=e.length-1;o>=0&&i.length<t;o--){let s=e[o],a=r+s.length+1;if(a>n&&i.length>0)break;i.unshift(s.length>n?`${s.slice(0,n-18)}... [truncated]`:s),r=a}return i}function ws(e){if(!Array.isArray(e))return[];let t=[];for(let n of e){let i=String(n).split(/\r?\n/);for(let r of i){let o=vs(r);o&&t.push(o)}}return t.slice(-Ss)}function vs(e){return gu(mu(e).trimEnd()).trim()}function mu(e){return e.replace(/[\u001b\u009b][[\]()#;?]*(?:(?:(?:[a-zA-Z\d]*(?:;[a-zA-Z\d]*)*)?\u0007)|(?:(?:\d{1,4}(?:;\d{0,4})*)?[\dA-PR-TZcf-nq-uy=><~]))/g,"")}function gu(e){let t=e.replace(/-----BEGIN [^-]+-----[\s\S]*?-----END [^-]+-----/g,"[REDACTED_PRIVATE_KEY]").replace(/(authorization:\s*bearer\s+)[A-Za-z0-9._-]+/ig,"$1[REDACTED]").replace(/((?:password|token|secret|private[_-]?key)\s*[:=]\s*)("[^"]+"|'[^']+'|[^\s,]+)/ig,"$1[REDACTED]");for(let[n,i]of Object.entries(process.env))!i||i.length<8||/(TOKEN|SECRET|PASSWORD|PASS|PRIVATE|CREDENTIAL)/i.test(n)&&(t=t.replace(new RegExp(hu(i),"g"),"[REDACTED]"));return t}function hu(e){return e.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}function yu(e){return e?.code!=="ENOENT"?e:new Error(["fastlane was not found on PATH.","Mach submit uses Fastlane for iOS TestFlight/App Store uploads.","Run iOS submit on a macOS runner with Fastlane, or expose it via FASTLANE_BINARY / FASTLANE_BIN_DIR.","Example: gem install fastlane -NV"].join(`
1560
- `))}function bu(e,t,n,i="production"){let r=e?.message||String(e);if(/changesNotSentForReview/i.test(r))return["Google Play rejected the commit because this change may need explicit review handling.",`Package: ${n||"unknown"} | Track: ${t}`,`Retry with: ${m.nameLower} submit --latest --platform android --profile ${i} --track ${t} --changes-not-sent-for-review`,"Then send the change for review from Google Play Console if required."].join(`
1604
+ `)}`}function Su(e){let t=Os(e);if(t.length===0)return[];let n=Es(t.filter(Eu)),i=bu(t);if(i)return[i,...Is(n,lr-1,As)];let r=n.length>0?n:t.slice(-lr);return Is(Es(r),lr,As)}function bu(e){let t=e.join(`
1605
+ `),n=t.match(/CFBundleShortVersionString\s*\[([^\]]+)\]/i)?.[1]||t.match(/train version ['"]([^'"]+)['"]/i)?.[1];if(/Invalid Pre-Release Train/i.test(t)||/CFBundleShortVersionString[\s\S]*must contain a higher version/i.test(t))return[`App Store Connect rejected CFBundleShortVersionString${n?` ${n}`:""}: this App Store version train is closed or not higher than the approved version.`,'ios.buildNumber="auto" only changes CFBundleVersion; bump the marketing version (Expo app.json "expo.version" / iOS MARKETING_VERSION), rebuild, then submit the new build.'].join(" ");if(!/bundle version must be higher than the previously uploaded version/i.test(t))return null;let i=t.match(/previous(?:ly)?BundleVersion\s*:\s*([0-9.]+)/i)?.[1]||t.match(/previously uploaded version:\s*[‘'"]?([0-9.]+)/i)?.[1];return`App Store Connect rejected CFBundleVersion: the bundle version must be higher than the previously uploaded version.${i?` Previous uploaded build: ${i}.`:""}`}function Eu(e){return/\[!\]|ERROR ITMS-\d+|ITMS-\d+|ENTITY_ERROR|previousBundleVersion|CFBundleVersion|Application Loader Error Output|Transporter Error|Transporter transfer failed|Asset validation failed|Validation failed|Error Domain=|The request could not be completed|No suitable application records|Could not|authentication|unauthori[sz]ed|invalid|failed|exception/i.test(e)}function Es(e){let t=new Set,n=[];for(let i of e){let r=i.trim();!r||t.has(r)||(t.add(r),n.push(i))}return n}function Is(e,t,n){let i=[],r=0;for(let o=e.length-1;o>=0&&i.length<t;o--){let s=e[o],a=r+s.length+1;if(a>n&&i.length>0)break;i.unshift(s.length>n?`${s.slice(0,n-18)}... [truncated]`:s),r=a}return i}function Os(e){if(!Array.isArray(e))return[];let t=[];for(let n of e){let i=String(n).split(/\r?\n/);for(let r of i){let o=Ps(r);o&&t.push(o)}}return t.slice(-$s)}function Ps(e){return _u(Iu(e).trimEnd()).trim()}function Iu(e){return e.replace(/[\u001b\u009b][[\]()#;?]*(?:(?:(?:[a-zA-Z\d]*(?:;[a-zA-Z\d]*)*)?\u0007)|(?:(?:\d{1,4}(?:;\d{0,4})*)?[\dA-PR-TZcf-nq-uy=><~]))/g,"")}function _u(e){let t=e.replace(/-----BEGIN [^-]+-----[\s\S]*?-----END [^-]+-----/g,"[REDACTED_PRIVATE_KEY]").replace(/(authorization:\s*bearer\s+)[A-Za-z0-9._-]+/ig,"$1[REDACTED]").replace(/((?:password|token|secret|private[_-]?key)\s*[:=]\s*)("[^"]+"|'[^']+'|[^\s,]+)/ig,"$1[REDACTED]");for(let[n,i]of Object.entries(process.env))!i||i.length<8||/(TOKEN|SECRET|PASSWORD|PASS|PRIVATE|CREDENTIAL)/i.test(n)&&(t=t.replace(new RegExp(wu(i),"g"),"[REDACTED]"));return t}function wu(e){return e.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}function $u(e){return e?.code!=="ENOENT"?e:new Error(["fastlane was not found on PATH.","Mach submit uses Fastlane for iOS TestFlight/App Store uploads.","Run iOS submit on a macOS runner with Fastlane, or expose it via FASTLANE_BINARY / FASTLANE_BIN_DIR.","Example: gem install fastlane -NV"].join(`
1606
+ `))}function vu(e,t,n,i="production"){let r=e?.message||String(e);if(/changesNotSentForReview/i.test(r))return["Google Play rejected the commit because this change may need explicit review handling.",`Package: ${n||"unknown"} | Track: ${t}`,`Retry with: ${m.nameLower} submit --latest --platform android --profile ${i} --track ${t} --changes-not-sent-for-review`,"Then send the change for review from Google Play Console if required."].join(`
1561
1607
  `);if(/caller does not have permission|permission denied|insufficient permissions|not authorized/i.test(r))return["Google Play rejected the service account permissions.",`Package: ${n||"unknown"} | Track: ${t}`,"Grant this service account access to the app in Play Console with release permissions, then retry."].join(`
1562
1608
  `);if(/package.*not found|application.*not found|no application was found/i.test(r))return["Google Play could not find this package for the selected service account.",`Package: ${n||"unknown"} | Track: ${t}`,"Check android.package / submit.<profile>.android.package and make sure the app exists in this Play Console account."].join(`
1563
1609
  `);if(/only releases with status draft|draft app/i.test(r))return["Google Play requires a draft release for this app state.",`Package: ${n||"unknown"} | Track: ${t}`,`Retry with: ${m.nameLower} submit --latest --platform android --profile ${i} --track ${t} --release-status draft`].join(`
1564
1610
  `);if(r.includes("does not allow any existing users to upgrade"))return["Google Play rejected this release because the uploaded AAB is not an upgrade for existing users.",`Package: ${n||"unknown"} | Track: ${t}`,"Build a new Android artifact with a higher versionCode, then submit that build.",`Recommended: ${m.nameLower} build --platform android --profile ${i} --auto-version`,`Then: ${m.nameLower} submit --latest --platform android --profile ${i} --track ${t}`].join(`
1565
1611
  `);if(/version code \d+ has already been used/i.test(r))return[r.match(/version code \d+ has already been used[^\n]*/i)?.[0]||"Version code has already been used.",`Package: ${n||"unknown"} | Track: ${t}`,"Build a new Android artifact with a higher versionCode, then submit that build.",`Recommended: ${m.nameLower} build --platform android --profile ${i} --auto-version`].join(`
1566
- `);let o=r.match(/Google Api Error:[^\n]+/)||r.match(/Google Play API Error:[^\n]+/);return o?o[0]:r||"Google Play submission failed"}function Au(e){try{q.existsSync(e)&&q.rmSync(e,{recursive:!0,force:!0})}catch{}}function Q(e){console.log(V.red(`\u274C ${e}`))}function se(e){console.log(V.gray(`\u2022 ${e}`))}function pr(e){console.log(V.green(`\u2713 ${e}`))}var gr=8,Iu=6,Ps=Number(process.env.MACH_ARTIFACT_UPLOAD_MAX_ATTEMPTS||2),hr=Number(process.env.MACH_ARTIFACT_UPLOAD_TIMEOUT_MS||12e4),yr="ap-south-1",wu=`${m.envPrefix}S3_DEBUG`,vu=()=>["1","true","yes","on"].includes(String(process.env[wu]||"").trim().toLowerCase()),Sr=(e,t)=>{if(vu()&&t)try{let n=new URL(t);S.info(I.dim(`[S3_DEBUG] ${e} host=${n.hostname} expectedRegion=${yr}`)),n.hostname.includes(yr)||S.warn(I.yellow(`[S3_DEBUG] ${e} host ${n.hostname} does not include ${yr}`))}catch(n){S.warn(I.yellow(`[S3_DEBUG] Could not parse ${e} presigned URL host: ${n.message}`))}},Cs=new Set([".git",".gradle",".idea",".mach-cache",".expo",".turbo",".yarn/cache","build","builds","coverage","dist","node_modules",`${m.nameLower}_cli`,`.${m.nameLower}_cli`]),_u=new Set(["android/.gradle","android/.cxx","android/app/.cxx","android/app/build","android/build","ios/Pods","ios/build","ios/DerivedData"]),$u=[{value:"production",label:"production",hint:"Store / release build"},{value:"staging",label:"staging",hint:"Internal testing build"},{value:"development",label:"development",hint:"Development build"}],Gs=e=>new Promise(t=>setTimeout(t,e)),Vs=e=>e.split(ae.sep).filter(Boolean).join("/"),Ru=(e,t)=>{let n=Vs(e),i=n.split("/")[0];return n?!!(Cs.has(n)||Cs.has(i)||_u.has(n)||t==="ios"&&i==="android"||t==="android"&&i==="ios"):!1},Ou=(e,t,n)=>{let i=0,r=new Set,o=(s,a)=>{let l=Vs(a);if(Ru(l,n)){r.add(l.split("/")[0]||l);return}let d=ee.lstatSync(s);if(!d.isSymbolicLink()){if(d.isDirectory()){for(let c of ee.readdirSync(s))o(ae.join(s,c),ae.join(a,c));return}if(d.isFile()){let c=ae.dirname(l);e.addLocalFile(s,c==="."?void 0:c,ae.basename(l)),i++}}};for(let s of ee.readdirSync(t))o(ae.join(t,s),s);return{files:i,skipped:Array.from(r).sort()}},Du=e=>!e.yes&&!e.failOnly&&!e.buildId&&process.stdin.isTTY&&process.stdout.isTTY,Pu=e=>{if(!e||typeof e!="object")return;let t=[e.distribution?`distribution: ${e.distribution}`:void 0,e.environment?`env: ${e.environment}`:void 0,e.developmentClient?"development client":void 0,e.simulator?"simulator":void 0].filter(Boolean);return t.length>0?t.join(", "):void 0},Cu=()=>{let e=ce(`./${m.configFileName}`),t=e?.build&&typeof e.build=="object"?e.build:{},n=Object.keys(t);return n.length===0?$u:n.map(i=>({value:i,label:i,hint:Pu(t[i])}))},Tu=async e=>{let t=Du(e);if(!e.platform&&t){let n=await _s({message:"Select platform",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"}]});Wn(n)&&(Rs("Build cancelled."),process.exit(0)),e.platform=n}if(!e.buildProfile&&t){let n=Cu(),i=await _s({message:"Select build profile",options:n,initialValue:n.find(r=>r.value==="production")?.value||n[0]?.value});Wn(i)&&(Rs("Build cancelled."),process.exit(0)),e.buildProfile=i}e.buildProfile||(e.buildProfile="production")},Ts=e=>{if(e===!0||e===!1)return e;if(e===1||e==="1")return!0;if(e===0||e==="0")return!1;if(typeof e!="string")return;let t=e.trim().toLowerCase();if(["true","yes","on"].includes(t))return!0;if(["false","no","off"].includes(t))return!1},zs=(e,t)=>{if(e)for(let n of t){let i=n.replace(/[.*+?^${}()|[\]\\]/g,"\\$&"),r=e.match(new RegExp(`(?:^|\\s)${i}(?:=|\\s+)([^\\s]+)`));if(r?.[1])return r[1].replace(/^["']|["']$/g,"")}},ku=(e,t)=>!!e&&t.some(n=>new RegExp(`(?:^|\\s)${n.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}(?:\\s|$)`).test(e)),Nu=e=>{let n=zs(e,["--platform"])||e?.split(/\s+/).find(i=>i==="ios"||i==="android");return n==="ios"||n==="android"?n:void 0},xu=async e=>{if(!e.projectId||!e.buildId)return;let t=!!e.local;try{let n=await $.get(`/builds/${e.projectId}/${e.buildId}`),i=n.data?.build||n.data;if(!i||typeof i!="object"){if(t)throw new Error("MACH API returned an empty build record.");return}let r=typeof i.buildArgs=="string"?i.buildArgs:void 0;if(yo(e,i),!e.platform){let o=i.platform||Nu(r);(o==="ios"||o==="android")&&(e.platform=o)}if(e.buildProfile||(e.buildProfile=i.buildProfile||i.profile||i.profileName||zs(r,["--profile","--build-profile","-p"])),e.simulator===void 0){let o=Ts(i.simulator??i.isSimulator);o!==void 0?e.simulator=o:ku(r,["--simulator"])&&(e.simulator=!0)}if(e.developmentClient===void 0){let o=Ts(i.developmentClient??i.devClient);o!==void 0&&(e.developmentClient=o)}}catch(n){if(t){let i=n.response?.data?.message||n.message||"unknown error";throw new Error(`Could not load the canonical MACH build record for runner ${e.buildId}: ${i}. The runner stopped to avoid allocating or packaging a different native version.`)}S.warn(I.yellow(`Could not load saved build options for runner: ${n.message}`))}},Lu=e=>{if(!Number.isFinite(e)||e<=0)return"0 B";let t=["B","KB","MB","GB"],n=Math.min(Math.floor(Math.log(e)/Math.log(1024)),t.length-1);return`${(e/Math.pow(1024,n)).toFixed(n===0?0:1)} ${t[n]}`},Mu=e=>{let t=e.response?.status,n=e.code||"",i=e.message||"";return t?t===408||t===409||t===425||t===429||t>=500||/ECONNRESET|ETIMEDOUT|EAI_AGAIN|ENOTFOUND|ECONNABORTED|socket hang up|network|timeout/i.test(`${n} ${i}`):!0},en=async(e,t,n=Iu)=>{let i;for(let r=1;r<=n;r++)try{return await t()}catch(o){if(i=o,!Mu(o)||r>=n)break;let s=Math.min(6e4,2e3*Math.pow(2,r-1)),a=o.response?.status||o.code||o.message||"network error";S.warn(I.yellow(`${e} failed transiently (${a}). Retrying in ${Math.round(s/1e3)}s... (${r}/${n})`)),await Gs(s)}throw i},Uu=async(e,t,n)=>{let i=ae.basename(e),r=ee.statSync(e).size,o=Math.round(hr/1e3);Sr(`ARTIFACT_UPLOAD ${i}`,t);try{await en(`Upload artifact ${i}`,async()=>{let s=new AbortController,a=ee.createReadStream(e),l=setTimeout(()=>{a.destroy(new Error(`Artifact upload timed out after ${o}s`)),s.abort()},hr);try{await Kn.put(t,a,{headers:{"Content-Type":n,"Content-Length":r,Connection:"close"},maxBodyLength:1/0,maxContentLength:1/0,timeout:hr,timeoutErrorMessage:`Artifact upload timed out after ${o}s`,signal:s.signal})}finally{clearTimeout(l)}},Ps)}catch(s){throw new Error(`${i} (${Lu(r)}) failed after ${Ps} upload attempt(s): ${s.message||s}`)}return r},Fu=e=>{let t=e.response?.status;return t?t===408||t===429||t>=500:!0},nn=e=>e.credentialId||e.id,Bu=async(e,t)=>{let n=nn(e);if(!n)return e.downloadUrl;let i=await $.get(`/credentials/${n}/download`,{params:{projectId:t,format:"raw"}});return i.data?.status==="success"&&i.data?.downloadUrl?i.data.downloadUrl:e.downloadUrl},ju=async(e,t)=>{let n=e.downloadUrl;for(let i=1;i<=gr;i++)try{if((!n||i>1)&&(n=await Bu(e,t)),!n)throw new Error(`Credential ${e.name||nn(e)||"unknown"} has no download URL.`);let r=await Kn.get(n,{responseType:"arraybuffer",timeout:6e4,maxContentLength:1/0,maxBodyLength:1/0,headers:{Connection:"close"}});return Buffer.from(r.data).toString("base64")}catch(r){if(i>=gr||!Fu(r))throw r;let o=Math.min(1500*i*i,15e3);S.warn(I.dim(` - Temporary network error downloading ${e.name}. Retrying... (${i}/${gr})`)),await Gs(o)}throw new Error(`Failed to download credential ${e.name||nn(e)||"unknown"}.`)},Hu=(e,t)=>t?.ios?.buildNumber??t?.iosBuildNumber??e?.ios?.buildNumber??e?.expo?.ios?.buildNumber,Gu=(e,t)=>t?.android?.versionCode??t?.androidVersionCode??e?.android?.versionCode??e?.expo?.android?.versionCode,ks=(e,t,n,i)=>e==="ios"?t.iosBundleIdentifier||n?.ios?.bundleIdentifier||n?.expo?.ios?.bundleIdentifier||i:t.androidPackage||n?.android?.package||n?.expo?.android?.package||n?.name||i,Ns=async(e,t,n)=>{let i=await $.post(`/projects/${e}/next-build-number`,{platform:t,scope:n});if(i.data.status!=="success"||!i.data.buildNumber)throw new Error(i.data.message||"Dashboard did not return a build number.");return String(i.data.buildNumber)},Qt=e=>{let t={};return e.platform==="ios"&&e.resolvedBuildNumber&&(t.buildNumber=e.resolvedBuildNumber),e.platform==="android"&&e.resolvedVersionCode&&(t.versionCode=e.resolvedVersionCode),t},Ks=(e,t,n=[])=>{if(!ee.existsSync(e))return n;let i;try{i=ee.readdirSync(e,{withFileTypes:!0})}catch{return n}for(let r of i){if(r.name==="Pods"||r.name==="build"||r.name==="DerivedData")continue;let o=ae.join(e,r.name);r.isDirectory()?Ks(o,t,n):r.name===t&&n.push(o)}return n},Vu=(e,t,n)=>{let i=`${n} ${t.environment||""}`.toLowerCase(),r=e.toLowerCase(),o=0;return(i.includes("development")||i.includes("dev"))&&/(^|[.-])dev(elopment)?($|[.-])/.test(r)&&(o+=20),(i.includes("staging")||i.includes("stage"))&&/(^|[.-])stag(e|ing)?($|[.-])/.test(r)&&(o+=20),(i.includes("production")||i.includes("prod"))&&(/(^|[.-])(dev|development|stag|stage|staging)($|[.-])/.test(r)||(o+=20)),o},zu=(e,t)=>{let n=ae.resolve(process.cwd(),ee.existsSync("ios")?"ios":"."),i=Ks(n,"project.pbxproj"),r=[];for(let o of i)try{let a=ee.readFileSync(o,"utf8").matchAll(/PRODUCT_BUNDLE_IDENTIFIER\s*=\s*"?([^";\s]+)"?;/g);for(let l of a){let d=l[1]?.trim();d&&!d.includes("$")&&!d.startsWith("com.apple.")&&!r.includes(d)&&r.push(d)}}catch{}if(r.length!==0)return r.length===1?r[0]:r.map(o=>({bundleId:o,score:Vu(o,e,t)})).sort((o,s)=>s.score-o.score)[0]?.bundleId},zn=e=>String(e||"").trim().toLowerCase().replace(/_/g,"-"),qn=(e,t)=>{let n=zn(e);return t==="ios"&&(n==="internal"||n==="ad-hoc")?"adhoc":t==="android"&&["internal","adhoc","ad-hoc","development","dev","staging","stage"].includes(n)?"internal":n},xs=(e,t,n)=>{let i=qn(e.distributionType||e.meta?.distributionType,n);return i?i===qn(t,n):!0},Ls=(e,t,n)=>{let i=qn(e.distributionType||e.meta?.distributionType,n),r=qn(t,n);return i?i===r?3:n==="android"&&r!=="store"&&i!=="store"?2:0:1},Ku=e=>{let t=e.toLowerCase();return t==="development"||t==="dev"||t.startsWith("development-")||t.startsWith("dev-")||t.endsWith("-development")||t.endsWith("-dev")},Wu=e=>{let t=e.toLowerCase();return t.includes("staging")||t.includes("stage")||t.includes("preview")||t.includes("adhoc")||t.includes("ad-hoc")},qu=(e,t)=>{let n=zn(e.distribution),i=zn(e.iosExportMethod),r=zn(e.environment);return e.platform!=="ios"?n==="store"?"store":"internal":e.developmentClient||e.simulator?"development":i==="app-store"||n==="store"?"store":i==="development"||n==="development"?"development":i==="ad-hoc"||i==="adhoc"||n==="ad-hoc"||n==="adhoc"||n==="internal"?"adhoc":r==="production"||r==="store"?"store":r==="development"||r==="dev"?"development":r==="staging"||r==="stage"||r==="preview"?"adhoc":t.toLowerCase()==="production"||t.toLowerCase().includes("store")?"store":Ku(t)?"development":(Wu(t),"adhoc")},Ws=e=>e.bundleId||e.bundleIdentifier||e.packageName||e.meta?.bundleId||e.meta?.bundleIdentifier||e.meta?.packageName,Ms=(e,t)=>{if(!t)return!0;let n=Ws(e);return!n||n==="*"||n===t},Us=(e,t)=>{let n=Ws(e);return!t||!n?0:n===t?2:n==="*"?1:-1},qs=e=>{try{let t=Buffer.from(e,"base64").toString("utf8"),n=t.match(/<key>application-identifier<\/key>\s*<string>([^<]+)<\/string>/)?.[1]?.trim();if(!n)return;let i=t.match(/<key>TeamIdentifier<\/key>\s*<array>\s*<string>([^<]+)<\/string>/)?.[1]?.trim();if(i&&n.startsWith(`${i}.`))return n.slice(i.length+1);let r=n.indexOf(".");return r>=0?n.slice(r+1):n}catch{return}},Ju=(e,t)=>{if(e===t||e==="*")return!0;if(e.endsWith(".*")){let n=e.slice(0,-2);return t.startsWith(`${n}.`)}return!1},Yu=(e,t)=>{if(!t)return!0;let n=qs(e);if(n)return Ju(n,t);try{return Buffer.from(e,"base64").toString("latin1").includes(t)}catch{return!0}},Jn=async e=>{if(e.failOnly){(!e.projectId||!e.buildId)&&(S.error(I.red("--project-id and --build-id are required with --fail-only.")),process.exit(1));let d=e.error||"Build runner failed before it could report a final status.";try{await $.patch(`/builds/${e.projectId}/${e.buildId}`,{status:"failed",error:d,endTime:Date.now()}),S.info(I.yellow(`Marked build ${e.buildId} as failed.`));return}catch(c){S.error(I.red(`Could not mark build failed: ${c.message}`)),process.exit(1)}}await xu(e),await Tu(e),e.platform!=="android"&&e.platform!=="ios"&&(S.error(`Platform ${e.platform} is not supported. Use 'android' or 'ios'.`),process.exit(1)),e.autoSubmit&&e.platform==="ios"&&e.simulator&&(S.error(I.red("--auto-submit cannot be used with --simulator because simulator builds are not App Store artifacts.")),process.exit(1)),e.autoSubmit&&e.dryRun&&S.warn(I.yellow("--auto-submit is ignored during --dry-run."));let t=Ar(),n=e.buildId||Su(),i=e.projectId,r=Date.now(),o=!!i,s=!0,a=async d=>{if(i)try{await $.patch(`/builds/${i}/${n}`,{status:"failed",error:d,endTime:Date.now()})}catch{}};if(e.local&&e.buildId&&i&&await en("Mark isolated runner as building",()=>$.patch(`/builds/${i}/${n}`,{status:"building",runnerStartedAt:Date.now()})),e.local&&e.buildId){e.quiet||t.start(`Preparing isolated workspace for build: ${e.buildId}`);try{let d=await $.get(`/builds/${i}/${e.buildId}/source-url`);if(d.data.status!=="success")throw new Error("Failed to get source download URL from API");Sr("SOURCE_DOWNLOAD",d.data.downloadUrl);let c=await Kn.get(d.data.downloadUrl,{responseType:"stream"}),u=(i||e.projectId||"default").replace(/[^a-zA-Z0-9-_]/g,"_"),f=ae.join(Eu.homedir(),m.workspacesDir,u);ee.mkdirSync(f,{recursive:!0});let p=new Set(["node_modules",`.${m.nameLower}-cache-meta`]),g=new Set(["Pods"]);if(ee.existsSync(f)){let L=ee.readdirSync(f);for(let _ of L){if(p.has(_))continue;if(_==="ios"){let W=ae.join(f,"ios");try{let Z=ee.readdirSync(W);for(let Ee of Z)if(!g.has(Ee))try{ee.rmSync(ae.join(W,Ee),{recursive:!0,force:!0})}catch{}}catch{}continue}let H=ae.join(f,_);try{ee.rmSync(H,{recursive:!0,force:!0})}catch{}}}let h=ae.join(f,"source.zip"),y=c.data,b=ee.createWriteStream(h);await new Promise((L,_)=>{y.pipe(b),y.on("error",H=>_(H)),b.on("finish",()=>L())}),new Ds(h).extractAllTo(f,!0);try{ee.unlinkSync(h)}catch{}process.chdir(f),S.info(I.green(`\u2713 Persistent workspace ready: ${f}`)),S.info(I.dim(` \u{1F4E6} Cached dirs preserved: node_modules=${ee.existsSync(ae.join(f,"node_modules"))?"\u2705":"\u274C"}, Pods=${ee.existsSync(ae.join(f,"ios","Pods"))?"\u2705":"\u274C"}`)),t.stop()}catch(d){t.stop(`Failed to prepare isolated workspace: ${d.message}`),i&&await a(`Setup Error: ${d.message}`),process.exit(1)}}try{let d=e.repo;if(!d)try{d=Os("git config --get remote.origin.url").toString().trim()}catch{S.warn("Could not detect git repository URL.")}!d&&e.dryRun,d||(d="https://github.com/placeholder/repo.git"),S.info(`Build ID: ${I.cyan(n)}`);let c={},u={},f=null,p=ce(`./${m.configFileName}`);if(p||(S.error(I.red(`${m.configFileName} not found. Run \`${m.nameLower} init\` or \`${m.nameLower} link\` first.`)),process.exit(1)),p){f=p;let R=bo(p);e.framework=R,i=p.projectId;let T=e.buildProfile||"production",E=Ie(p,T);!E&&e.buildProfile&&(S.error(`Build profile '${T}' not found in ${m.configFileName}`),process.exit(1));let A=E||{};process.env.MACH_DEBUG&&S.info(I.dim(`Framework: ${R} | Build profile: ${T} | Platform: ${e.platform} | Distribution: ${A.distribution||"store"} | Environment: ${A.environment||T}`)),A.env&&(u=A.env,S.info(I.blue(`Use Build Profile: ${T}`)));let D=e.platform,v=A[D]||{},G=["developmentClient","simulator","distribution","buildCommand","apk","iosScheme","preBuild","postBuild","scheme","environment","androidPackage","iosBundleIdentifier","name","iosDeploymentTarget","iosApiKeyId","iosApiKeyIssuer","iosApiKeyPath","iosTeamId","iosConfiguration","iosExportMethod","branch","repo","instanceType","ami","bucket","region","nodeVersion"];e.name=p.name,e.appName=p.name,e.androidPackage=p.android?.package,e.iosBundleIdentifier=p.ios?.bundleIdentifier,e.iosScheme=p.ios?.iosScheme,!e.nodeVersion&&p.nodeVersion&&(e.nodeVersion=p.nodeVersion);let U=re=>re==="androidPackage"?v.androidPackage??v.package??A.androidPackage??A.android?.package:re==="iosBundleIdentifier"?v.iosBundleIdentifier??v.bundleIdentifier??A.iosBundleIdentifier??A.ios?.bundleIdentifier:v[re]!==void 0?v[re]:A[re];for(let re of G){let P=U(re),Ke=re==="androidPackage"||re==="iosBundleIdentifier";P!==void 0&&(e[re]===void 0||Ke)&&(e[re]=P)}if(e.platform==="ios"&&!(v.iosBundleIdentifier??v.bundleIdentifier??A.iosBundleIdentifier??A.ios?.bundleIdentifier)){let P=zu(e,T);P&&P!==e.iosBundleIdentifier&&(S.warn(I.yellow(`Detected native iOS bundle identifier ${P}; using it for credential lookup. Set build.${T}.ios.bundleIdentifier to make this explicit.`)),e.iosBundleIdentifier=P)}e.branch=e.branch||"main",e.iosConfiguration=e.iosConfiguration||(e.developmentClient?"Debug":"Release"),e.sshUser=e.sshUser||process.env.USER||"ubuntu",e.simulator===void 0&&(e.simulator=!1),e.local===void 0&&(e.local=!1),e.verbose===void 0&&(e.verbose=!1),S.info(I.dim(`Resolved build config: framework=${R}, profile=${T}, platform=${e.platform}, simulator=${e.platform==="ios"?String(!!e.simulator):"n/a"}, developmentClient=${String(!!e.developmentClient)}, distribution=${e.distribution||A.distribution||"store"}, iosConfiguration=${e.platform==="ios"?e.iosConfiguration||"Release":"n/a"}`));let B=re=>{if(!re)return re;if(re.startsWith("scripts.")){let P=re.split(".")[1],Ke=p.scripts?.[P];if(Ke)return Ke;S.warn(`Script reference not found: ${re}`)}return re};e.buildCommand=B(e.buildCommand),e.preBuild=B(e.preBuild),e.postBuild=B(e.postBuild),!e.scheme&&p.scheme&&(e.scheme=p.scheme);let me={...vt(p,m.envPrefix),...vt(A,`${m.envPrefix}PROFILE_`)};c={...c,...u,...me},process.env.IOS_P12_PASSWORD&&!c.IOS_P12_PASSWORD&&(c.IOS_P12_PASSWORD=process.env.IOS_P12_PASSWORD),process.env.MATCH_PASSWORD&&!c.MATCH_PASSWORD&&(c.MATCH_PASSWORD=process.env.MATCH_PASSWORD),e.platform==="ios"&&(!e.iosTeamId&&A.ios?.appleTeamId&&(e.iosTeamId=A.ios.appleTeamId),!e.iosTeamId&&p.submit?.[T]?.ios?.appleTeamId&&(e.iosTeamId=p.submit[T].ios.appleTeamId),!e.iosTeamId&&p.submit?.production?.ios?.appleTeamId&&(S.warn(I.yellow(`Check: Using 'production' Team ID for '${T}' build.`)),e.iosTeamId=p.submit.production.ios.appleTeamId),e.iosTeamId?S.info(I.magenta(`\u2713 Injected iOS Team ID from config: ${e.iosTeamId}`)):e.simulator||S.warn(I.yellow("\u26A0\uFE0F No iOS Team ID found. Device or archive signing may fail unless managed iOS credentials provide the team automatically.")))}let g="unknown";try{g=Os("git rev-parse --abbrev-ref HEAD").toString().trim()}catch{S.warn("Failed to detect git branch.")}let h="1.0.0";try{ee.existsSync("./package.json")&&(h=JSON.parse(ee.readFileSync("./package.json","utf-8")).version||"1.0.0")}catch{}let y=e.buildProfile||"production",b=Kt(p,{framework:e.framework,platform:e.platform}),w="Internal";e.developmentClient?w="DevelopmentClient":y.toLowerCase().includes("store")||y.toLowerCase()==="production"?w="Store":y.toLowerCase().includes("preview")||y.toLowerCase().includes("staging")?w="Staging":(y.toLowerCase().includes("development")||y.toLowerCase().includes("dev"))&&(w="Development");let L=e.platform==="ios"?"iOS":"Android",_=e.platform==="ios"&&e.simulator?" (Simulator)":"",H=`${L}${_} v${h} (${w})`;if(tn(e,{status:"created",projectId:i,buildId:n,platform:e.platform,profile:y,branch:g,version:h,runtimeVersion:b,...Qt(e),buildType:w,developmentClient:!!e.developmentClient,summary:H}),i){try{let R=e.buildProfile||"production",T=e.environment||R;S.info(I.blue(`Fetching managed secrets for profile: ${R} (environment: ${T})...`));let A=(await $.get(`/projects/${i}/secrets/export?env=${T}`)).data;A.status==="success"&&A.secrets&&(c={...c,...A.secrets},Object.keys(A.secrets).length>0&&S.info(I.magenta(`\u2713 Injected ${Object.keys(A.secrets).length} secrets from Dashboard.`)))}catch(R){S.warn(`Failed to load managed secrets from Dashboard: ${R.message}`)}if(e.platform==="ios"){let R=e.buildProfile||"production",T=Ie(p,R)||{},E=Hu(p,T),A=Mi(E),D=e.distribution!==void 0?e.distribution==="store":w==="Store",v=E===void 0&&D,G=e.autoVersion||A||v,U=Ui(e.resolvedBuildNumber,E,G,!e.simulator);if(U.kind==="persisted"){let B=Nn(e,c,U.value,"saved MACH build record");S.info(I.green(`\u2713 Reusing assigned iOS buildNumber ${B}`))}else if(U.kind==="explicit"){let B=Nn(e,c,U.value,`${m.configFileName} (${R})`);S.info(I.green(`\u2713 Using configured iOS buildNumber ${B}`))}else if(U.kind==="auto"){t.start("Assigning iOS buildNumber from Mach counter...");try{let B=ks("ios",e,p,R),me=await Ns(i,"ios",B);Nn(e,c,me,"MACH version counter"),t.stop(`\u2713 Assigned iOS buildNumber ${I.green(me)} (${B})`)}catch(B){throw t.stop("iOS buildNumber assignment failed"),new Error(`Auto-versioning failed: ${B.response?.data?.message||B.message}`)}}}if(e.platform==="android"){let R=e.buildProfile||"production",T=Ie(p,R)||{},E=Gu(p,T),A=Mi(E),D=e.distribution!==void 0?e.distribution==="store":w==="Store",v=E===void 0&&D,G=e.autoVersion||A||v,U=Ui(e.resolvedVersionCode,E,G);if(U.kind==="persisted"){let B=xn(e,c,U.value,"saved MACH build record");S.info(I.green(`\u2713 Reusing assigned Android versionCode ${B}`))}else if(U.kind==="explicit"){let B=xn(e,c,U.value,`${m.configFileName} (${R})`);S.info(I.green(`\u2713 Using configured Android versionCode ${B}`))}else if(U.kind==="auto"){t.start("Assigning Android versionCode from Mach counter...");try{let B=ks("android",e,p,R),me=await Ns(i,"android",B);xn(e,c,me,"MACH version counter"),t.stop(`\u2713 Assigned Android versionCode ${I.green(me)} (${B})`)}catch(B){throw t.stop("Android versionCode assignment failed"),new Error(`Auto-versioning failed: ${B.response?.data?.message||B.message}`)}}}if(e.platform==="ios"&&e.simulator)S.info(I.dim("Skipping managed iOS signing credentials for simulator build."));else try{S.info(I.blue("Fetching managed credentials..."));let R=qu(e,y),T=e.platform==="ios"?e.iosBundleIdentifier:e.androidPackage,E=e.platform==="ios"?"bundle":"package";S.info(I.dim(` Credential target: ${E} ${T||"not set"} (${R})`));let A=await $.get("/credentials/resolve",{params:{projectId:i,platform:e.platform,bundleId:T,distributionType:R,teamId:e.platform==="ios"?e.iosTeamId:void 0}});if(A.data.status==="success"&&A.data.credentials){let D=A.data.credentials;S.info(I.magenta(`\u2713 Found ${D.length} relevant credentials.`));let v=D.filter(P=>e.platform==="ios"&&P.type==="ios_profile"?xs(P,R,e.platform)?Ms(P,T):!1:e.platform==="android"&&P.type==="android_keystore"?Ms(P,T):!!xs(P,R,e.platform)).sort((P,Ke)=>{let je=Us(Ke,T)*10+Ls(Ke,R,e.platform)-(Us(P,T)*10+Ls(P,R,e.platform));return je!==0?je:(Ke.createdAt||0)-(P.createdAt||0)});S.info(I.dim(` Filtered to ${v.length} credentials for distributionType: ${R}`));let G=!1,U=!1,B=!1,me=[];for(let P of v)if(!(P.type==="ios_cert"&&G||P.type==="ios_profile"&&U||P.type==="android_keystore"&&B)&&["ios_cert","ios_profile","android_keystore"].includes(P.type)&&(P.downloadUrl||nn(P)))try{let je=await ju(P,i);if(P.type==="ios_cert"&&!G)c.IOS_DIST_P12=je,P.password?(c.IOS_P12_PASSWORD=P.password,S.info(I.dim(` - Injected ${P.name} as IOS_DIST_P12 with password from credential record`))):S.info(I.dim(` - Injected ${P.name} as IOS_DIST_P12`)),G=!0;else if(P.type==="ios_profile"&&!U){if(!Yu(je,T)){let Pn=qs(je)||"unknown";throw new Error(`Provisioning profile ${P.name||nn(P)||"unknown"} is for a different bundle ID. Expected ${T}, found ${Pn}. Upload a ${R} profile for ${T}.`)}c.IOS_PROVISIONING_PROFILE=je,S.info(I.dim(` - Injected ${P.name} as IOS_PROVISIONING_PROFILE`)),U=!0}else if(P.type==="android_keystore"&&!B){c.ANDROID_KEYSTORE_BASE64=je;let Pn=P.keystorePassword||P.password,ao=P.keyPassword||P.keystorePassword||P.password,lo=P.alias||P.meta?.alias;if(Pn)c.ANDROID_STORE_PASSWORD=Pn,S.info(I.dim(" - Injected keystore password from credential record"));else{let Ni=["ANDROID_STORE_PASSWORD",...[R==="store"?"PRODUCTION":R==="internal"||R==="adhoc"?"STAGING":"DEVELOPMENT",R.toUpperCase(),"PRODUCTION","STORE","INTERNAL","STAGING","RELEASE","DEBUG"].map(xi=>`KEYSTORE_PASSWORD_${xi}`),"KEYSTORE_PASSWORD"].find(xi=>!!c[xi]);Ni&&c[Ni]&&(c.ANDROID_STORE_PASSWORD=c[Ni])}if(ao?(c.ANDROID_KEY_PASSWORD=ao,S.info(I.dim(" - Injected key password from credential record"))):c.ANDROID_KEY_PASSWORD=c.ANDROID_STORE_PASSWORD||"",lo)c.ANDROID_KEY_ALIAS=lo;else{let ki=["ANDROID_KEY_ALIAS","KEYSTORE_ALIAS"].find(co=>!!c[co]);ki&&(c.ANDROID_KEY_ALIAS=c[ki])}S.info(I.dim(` - Injected ${P.name} as ANDROID_KEYSTORE_BASE64`)),B=!0}}catch(je){me.push(`${P.name||P.type}: ${je.message}`)}let re=e.platform==="ios"?e.simulator||G&&U:B||!v.some(P=>P.type==="android_keystore");if(me.length>0&&!re)throw new Error(`Credential setup failed:
1567
- ${me.map(P=>`- ${P}`).join(`
1568
- `)}`);me.length>0&&S.warn(I.dim(` Skipped ${me.length} stale or unusable credential(s).`))}if(b=Kt(p,{framework:e.framework,platform:e.platform,iosBuildNumber:e.resolvedBuildNumber||c.BUILD_NUMBER,androidVersionCode:e.resolvedVersionCode||c.ANDROID_VERSION_CODE}),p.ota?.enabled){if(p.ota.engine==="mach-react-native")throw new Error("This project still uses the unfinished mach-react-native OTA engine. Run `mach ota setup` to migrate to expo-updates before building.");if(!p.ota.url)throw new Error("OTA is enabled but ota.url is missing. Run `mach ota setup` before building.");let D=p.ota.channel||"production";if(e.framework==="expo"){let v=zt(process.cwd(),{platform:e.platform,runtimeVersion:b,channel:D,url:p.ota.url}),G=[v?.runtimeVersion!==b?`runtime ${v?.runtimeVersion||"missing"} (expected ${b})`:void 0,v?.channel!==D?`channel ${v?.channel||"missing"} (expected ${D})`:void 0,v?.url!==p.ota.url?`URL ${v?.url||"missing"} (expected ${p.ota.url})`:void 0].filter(Boolean);if(G.length>0)throw new Error(`Expo OTA configuration mismatch: ${G.join("; ")}. Run \`${m.nameLower} ota setup\` to update the local Expo plugin before building.`)}c.MACH_OTA_RUNTIME_VERSION=b,c.MACH_OTA_CHANNEL=D,c.MACH_OTA_URL=p.ota.url}if(e.platform==="ios"&&!e.simulator){let D=!!c.IOS_DIST_P12,v=!!c.IOS_PROVISIONING_PROFILE;if(!D||!v){let G=[...D?[]:["Distribution Certificate"],...v?[]:["Provisioning Profile"]].join(" and ");if(e.local&&e.buildId)throw new Error(`Missing iOS credentials: ${G}. Expected ${R} credentials for ${T||"the selected bundle ID"}. Run \`${m.nameLower} credentials --platform ios --profile ${y}\` and select ${T||"the correct bundle ID"}.`);S.error(I.red(`Missing iOS credentials: ${G}`)),e.quiet&&process.exit(1);let U=e.yes||await $s({message:"Would you like to generate these credentials now?",initialValue:!0});if(U&&!Wn(U))return await jt({platform:"ios",profile:y}),e.quiet||S.info(I.green("\u2713 Credentials setup complete! Restarting build phase...")),Jn(e);e.quiet||S.info(I.yellow(`Run \`${m.nameLower} credentials\` to set up signing credentials manually.`)),process.exit(1)}}if(e.platform==="android"&&!e.developmentClient&&(e.distribution==="internal"||e.distribution==="store")&&!(!!c.ANDROID_KEYSTORE_BASE64||!!c.ANDROID_KEYSTORE)){S.error(I.red("Missing Android credentials: Signing Keystore")),e.quiet&&process.exit(1);let v=e.yes||await $s({message:"Would you like to automatically create and upload an Android Keystore for this profile now?",initialValue:!0});if(v&&!Wn(v))return await jt({platform:"android",profile:y}),e.quiet||S.info(I.green("\u2713 Android Keystore setup complete! Restarting build phase...")),Jn(e);e.quiet||S.info(I.yellow(`Run \`${m.nameLower} credentials --platform android\` to set up a signing keystore manually.`)),process.exit(1)}}catch(R){(String(R.message||"").startsWith("Credential download failed")||String(R.message||"").startsWith("Credential setup failed")||String(R.message||"").startsWith("Missing iOS credentials")||String(R.message||"").startsWith("Auto-versioning failed"))&&(S.error(I.red(R.message)),process.exit(1)),e.platform==="ios"&&e.local&&e.buildId&&(S.error(I.red(`Failed to resolve iOS credentials: ${R.message}`)),process.exit(1)),S.warn(`Failed to resolve credentials: ${R.message}`)}}let W=!!(e.local&&e.buildId),Z=!!(e.local||e.sshHost),Ee=!Z&&!W;if(W){S.info(I.magenta("\u{1F3D7}\uFE0F Runner Mode: Executing isolated build task..."));let R=await Fi({...e,interactive:!1},n,c,i,{branch:g,version:h,runtimeVersion:b,summary:H,buildType:w});await oe(R),s=!1,process.exit(0)}async function oe(R){let T=async E=>{if(i)try{await en("Report failed build status",()=>$.patch(`/builds/${i}/${n}`,{status:"failed",error:E,endTime:Date.now()}),3)}catch(A){S.warn(I.yellow(`Could not report failed build status: ${A.message}`))}};if(i&&R.length>0){let E=Ar(),A=[];e.quiet||E.start("Uploading artifacts to Dashboard...");try{for(let D of R){let v=ae.basename(D),G=ee.statSync(D).size,U=ae.extname(v).toLowerCase(),B="application/octet-stream",me=await en(`Create artifact upload URL for ${v}`,()=>$.post(`/builds/${i}/${n}/artifact-upload-url`,{fileName:v,fileType:B}));if(me.data.status!=="success")throw new Error(`Failed to get upload URL for ${v}`);await Uu(D,me.data.uploadUrl,B),A.push({name:v,url:me.data.downloadUrl,size:G,type:U.substring(1)})}e.quiet||E.stop("Artifacts uploaded.")}catch(D){e.quiet||E.stop("Failed to upload artifacts.");let v=`Artifact upload failed: ${D.message}`;throw S.error(I.red(v)),await T(v),new Error(v)}if(i&&A.length>0)try{S.info(I.cyan(`
1569
- \u{1F517} Download Links:`));for(let D of A)S.info(I.dim(` - ${D.name}: `)+I.blue.underline(D.url));await en("Finalize build in dashboard",()=>$.patch(`/builds/${i}/${n}`,{status:"success",artifacts:A,endTime:Date.now(),runtimeVersion:b,...Qt(e)})),tn(e,{status:"success",projectId:i,buildId:n,platform:e.platform,profile:y,branch:g,version:h,runtimeVersion:b,...Qt(e),buildType:w,developmentClient:!!e.developmentClient,summary:H,artifacts:A}),S.success(I.green(`
1570
- \u2713 Build completed and reported to dashboard.`)),e.maestro&&!W&&await Fs(i,n,e,y),e.autoSubmit&&!W&&await br(i,n,e,y)}catch(D){let v=`Build artifact uploaded but dashboard finalization failed: ${D.message}`;throw S.error(I.red(`
1571
- ${v}`)),await T(v),new Error(v)}}else if(i){let E="Build completed but produced no uploadable artifacts.";throw S.error(I.red(E)),await T(E),new Error(E)}}if(Z){if(S.info(I.cyan(`\u{1F680} Direct Build Mode: Executing on ${e.sshHost||"local"}...`)),i&&!o){let R=process.argv.slice(3).join(" ");await $.post("/builds",{projectId:i,buildId:n,platform:e.platform,status:"building",branch:g,version:h,runtimeVersion:b,...Qt(e),summary:H,startTime:r,buildType:w,buildProfile:y,buildArgs:R,framework:e.framework,simulator:!!e.simulator,developmentClient:!!e.developmentClient,...Bs(e,n,y,f)}),js(e)}if(e.sshHost&&e.platform==="ios")await Uo(e,n,c,i),s=!1,e.autoSubmit&&await br(i,n,e,y);else{let R=await Fi({...e,interactive:!!e.local},n,c,i,{branch:g,version:h,runtimeVersion:b,summary:H,buildType:w});await oe(R),s=!1}return}if(Ee&&(S.info(I.blue("\u{1F6F0}\uFE0F Cloud Initiator Mode: Preparing orchestration...")),!e.dryRun)){e.quiet||t.start("Zipping and uploading local source...");let R=await $.post("/builds/source-upload-url",{projectId:i,buildId:n});if(R.data.status!=="success")throw t.stop("Failed to get upload URL."),new Error("Failed to get source upload URL from API");Sr("SOURCE_UPLOAD",R.data.uploadUrl);let T=new Ds,E=Ou(T,process.cwd(),e.platform),A=T.toBuffer();if(!e.quiet){let v=E.skipped.length>0?` Skipped: ${E.skipped.join(", ")}.`:"";t.message(`Prepared source (${E.files} files).${v}`)}e.quiet||t.message(`Uploading source (${(A.length/1024/1024).toFixed(1)} MB)...`);let D=!1;for(let v=1;v<=3;v++)try{await Kn.put(R.data.uploadUrl,A,{headers:{"Content-Type":"application/zip"},maxBodyLength:1/0,maxContentLength:1/0,timeout:12e4}),D=!0;break}catch(G){if(v<3)t.message(`Upload attempt ${v} failed (${G.code||G.message}), retrying...`),await new Promise(U=>setTimeout(U,2e3*v));else throw G}if(e.quiet||t.stop("Source uploaded"),i){let v=process.argv.slice(3).join(" ");s=e.platform==="android",await $.post("/builds",{projectId:i,buildId:n,platform:e.platform,status:"pending",branch:g,version:h,runtimeVersion:b,...Qt(e),summary:H,startTime:r,buildType:w,buildProfile:y,buildArgs:v,framework:e.framework,simulator:!!e.simulator,developmentClient:!!e.developmentClient,...Bs(e,n,y,f)}),s=e.platform==="android",S.info(I.green("\u2713 Cloud build registered.")),js(e)}e.platform==="android"&&(await xo(e,n,c,i,e.preBuild),s=!1),e.quiet||S.info(I.cyan("\u{1F4E1} Connecting to build stream...")),await Qu(i,n,e),e.maestro&&await Fs(i,n,e,y),e.autoSubmit&&await br(i,n,e,y);return}}catch(d){let c=d.message||"Build failed";d.response?.data?.message?c=d.response.data.message:d.message.includes("status code 402")?c="Insufficient wallet balance. Please add credits in the Dashboard.":d.message.includes("status code 403")&&(c="Monthly build quota exceeded. Upgrade your plan in the Dashboard."),i&&s&&await a(c),S.error(I.red(`\u2717 Build failed: ${c}`)),process.exit(1)}};async function Fs(e,t,n,i){S.info(I.cyan(`
1572
- \u{1F3BC} Queuing managed Maestro test...`)),await er({projectId:e,buildId:t,platform:n.platform,profile:i,maestroFlows:n.maestroFlows,maestroDevice:n.maestroDevice,maestroRetries:n.maestroRetries,maestroRecord:n.maestroRecord,maestroUseBuildSource:n.maestroUseBuildSource,maestroEnv:n.maestroEnv,quiet:n.quiet})}async function br(e,t,n,i){if(!e){S.error(I.red("Auto-submit requires a linked Mach project. Run `mach link` or pass --project-id.")),process.exitCode=1;return}S.info(I.cyan(`
1573
- Auto-submit: submitting the successful build...`));try{let r=await Xu(e,t);if(r?.autoSubmit){let o=r.submissionId?`${He}/submissions/${r.submissionId}?projectId=${encodeURIComponent(e)}`:void 0,s=String(r.status||"").toLowerCase(),a=String(r.autoSubmitStatus||"").toLowerCase(),l=r.submissionId||["success","completed","succeeded"].includes(s)||["starting","submitted","failed","skipped"].includes(a);if(r.submissionId?(S.info(I.green(`Auto-submit is already queued by Mach backend: ${r.submissionId}`)),S.info(I.dim(`Dashboard: ${o}`))):r.autoSubmitStatus==="failed"?S.warn(I.yellow(`Backend auto-submit failed: ${r.autoSubmitError||"Unknown error"}`)):l&&S.info(I.green("Auto-submit is registered with Mach backend; skipping local duplicate submit.")),l){nt(n,{status:r.autoSubmitStatus||"pending",projectId:e,submitId:r.submissionId,platform:n.platform,profile:i,buildId:t,dashboardUrl:o});return}}await Vn({platform:n.platform,profile:i,buildProfile:i,buildId:t,projectId:e,yes:n.yes,quiet:n.quiet,track:n.submitTrack,releaseStatus:n.submitReleaseStatus,rollout:n.submitRollout,changesNotSentForReview:n.submitChangesNotSentForReview,credentialId:n.submitCredentialId,packageName:n.androidPackage,jsonOutput:n.submitJsonOutput,submitArgs:Js(n,t,i)})}catch(r){S.error(I.red(`Auto-submit failed: ${r.message||r}`)),process.exitCode=1}}function Js(e,t,n){let i=["--platform",e.platform,"--profile",n,"--build-id",t];return e.submitTrack&&i.push("--track",String(e.submitTrack)),e.submitReleaseStatus&&i.push("--release-status",String(e.submitReleaseStatus)),e.submitRollout!==void 0&&i.push("--rollout",String(e.submitRollout)),e.submitChangesNotSentForReview&&i.push("--changes-not-sent-for-review"),e.submitCredentialId&&i.push("--credential-id",e.submitCredentialId),e.platform==="android"&&e.androidPackage&&i.push("--package-name",e.androidPackage),e.platform==="ios"&&e.iosBundleIdentifier&&i.push("--bundle-id",e.iosBundleIdentifier),e.submitJsonOutput&&i.push("--json-output",e.submitJsonOutput),i.join(" ")}async function Xu(e,t){try{let i=(await $.get(`/builds/${e}/${t}`)).data?.build;if(i?.autoSubmit)return i}catch(n){S.warn(I.dim(`Could not check backend auto-submit status: ${n.message}`))}return null}function Ys(e){for(let t of Object.keys(e))e[t]===void 0&&delete e[t];return e}function Zu(e,t,n){let i=n?.submit?.[t]?.android||{},r=n?.submit?.production?.android||{},o=e.submitTrack||i.track||r.track,s=e.submitReleaseStatus||i.releaseStatus||r.releaseStatus,a=e.submitRollout??i.rollout??i.userFraction??i.rolloutFraction??r.rollout??r.userFraction??r.rolloutFraction,l=e.submitChangesNotSentForReview??i.changesNotSentForReview??i.changes_not_sent_for_review??r.changesNotSentForReview??r.changes_not_sent_for_review;return Ys({track:o,releaseStatus:s,rollout:a,changesNotSentForReview:l===void 0?!1:l===!0||l==="true"||l==="1"})}function Bs(e,t,n,i){if(!e.autoSubmit||e.dryRun)return{};let r=e.platform==="android"?Zu(e,n,i):{};return{autoSubmit:!0,autoSubmitStatus:"pending",autoSubmitOptions:Ys({platform:e.platform,profile:n,buildId:t,latest:!1,...r,credentialId:e.submitCredentialId,packageName:e.platform==="android"?e.androidPackage:void 0,bundleId:e.platform==="ios"?e.iosBundleIdentifier:void 0,submitArgs:Js(e,t,n)})}}function js(e){!e.autoSubmit||e.dryRun||e.quiet||(S.info(I.green("\u2713 Auto-submit has been registered with the build.")),S.info(I.dim(" You can close this terminal; submission will start after build success.")))}function Hs(e){return`${He}/build/${e}`}function tn(e,t){if(!e.jsonOutput)return;let n=ae.resolve(e.jsonOutput),i={...t,url:t.url||Hs(t.buildId),dashboardUrl:t.dashboardUrl||Hs(t.buildId),updatedAt:new Date().toISOString()};try{let r=ae.dirname(n);r&&r!=="."&&ee.mkdirSync(r,{recursive:!0}),ee.writeFileSync(n,JSON.stringify(i,null,2))}catch(r){S.warn(I.yellow(`Could not write build metadata JSON: ${r.message}`))}}async function Qu(e,t,n){let r=Ar(),o="pending",s=0,a=0;for(n.quiet||r.start("Connecting to build stream...");;){try{let d=(await $.get(`/builds/${e}/${t}`)).data.build;if(d){o=d.status;let c=String(d.pipelineLaunchState||"").toLowerCase(),u=Number(d.pipelineLaunchClaimedAt),f=Number(d.pipelineLaunchDispatchStartedAt),p=c==="claimed"&&Number.isFinite(u)&&u>0&&Date.now()-u>=3e5,g=c==="dispatching"&&Number.isFinite(f)&&f>0&&Date.now()-f>=3e5;if(["","created","pending","queued"].includes(String(o||"").toLowerCase())&&(c==="retryable_failed"||c==="ambiguous"||p||g)){let y=g||c==="ambiguous"?"ambiguous":"retryable_failed",b=d.pipelineLaunchError||(y==="ambiguous"?"The iOS runner launch outcome is unknown. MACH blocked automatic relaunch to avoid a duplicate pipeline.":p?"The iOS runner was never dispatched before its launch lease expired. Retry this build.":"The iOS runner could not be launched. Retry this build.");n.quiet||r.stop("Build runner launch failed."),tn(n,{status:"failed",projectId:e,buildId:t,platform:n.platform,profile:d.buildProfile,buildType:d.buildType,developmentClient:!!d.developmentClient,version:d.version,runtimeVersion:d.runtimeVersion,buildNumber:d.buildNumber,versionCode:d.versionCode,summary:d.summary,pipelineLaunchState:y,error:b,artifacts:d.artifacts||[]}),S.error(I.red(`
1574
- \u2717 Build runner launch failed: ${b}`)),process.exit(1)}if(o==="building")n.quiet||r.message("Build in progress...");else if(o==="failed"||o==="error"||o==="cancelled"||o==="canceled"){let y=o==="cancelled"||o==="canceled";n.quiet||r.stop(y?"Build cancelled.":"Build failed.");let b=d.error||(y?"Build was cancelled.":"Unknown error");tn(n,{status:o,projectId:e,buildId:t,platform:n.platform,profile:d.buildProfile,buildType:d.buildType,developmentClient:!!d.developmentClient,version:d.version,runtimeVersion:d.runtimeVersion,buildNumber:d.buildNumber,versionCode:d.versionCode,summary:d.summary,error:b,artifacts:d.artifacts||[]}),S.error(I.red(`
1575
- \u2717 ${y?"Build cancelled":"Build failed"}: ${b}`)),process.exit(1)}else if(o==="completed"||o==="success"){n.quiet||r.stop("Build successful!"),tn(n,{status:o,projectId:e,buildId:t,platform:n.platform,profile:d.buildProfile,buildType:d.buildType,developmentClient:!!d.developmentClient,version:d.version,runtimeVersion:d.runtimeVersion,buildNumber:d.buildNumber,versionCode:d.versionCode,summary:d.summary,artifacts:d.artifacts||[]}),S.success(I.green(`
1576
- \u2713 Build completed successfully!`));try{n.quiet||(S.info(I.magenta(`
1577
- \u{1F4F1} Installation Hub:`)),S.info(I.dim(" - View & Install Build: ")+I.white.underline(`${He}/build/${t}`)))}catch{}return}else if(o!=="pending"){n.quiet||r.stop(`Build status: ${o}`);return}}try{let u=(await $.get(`/builds/${e}/${t}/logs`)).data;if(u&&typeof u=="string"&&!n.quiet){let f=u.split(`
1578
- `);if(f.length>s){for(let p=s;p<f.length;p++)f[p].trim()&&console.log(I.dim(` ${f[p]}`));s=f.length}}}catch{}a=0}catch{a++,a>10&&(r.stop("Connection lost."),S.error(I.red(`
1579
- \u2717 Lost connection to Dashboard API.`)),process.exit(1))}await new Promise(l=>setTimeout(l,3e3))}}import*as ti from"http";import*as ia from"net";import{execFile as ep,execFileSync as st,execSync as Zn,spawn as Xs}from"child_process";import ne from"chalk";import{log as j}from"@clack/prompts";import tp from"axios";import Y from"fs";import ke from"os";import F from"path";var Je=7070,on=`http://127.0.0.1:${Je}`,Pt="com.radhya.mach.agent",Dt="Mach Agent",Ct=`${Pt}.service`,np=5e3,ip=3e3,Yn=null,Xn=null,Ne=()=>F.join(ke.homedir(),m.configDir),ra=()=>F.join(ke.homedir(),"Library","LaunchAgents"),Qn=()=>F.join(ra(),`${Pt}.plist`),oa=()=>F.join(ke.homedir(),".config","systemd","user"),Ir=()=>F.join(oa(),Ct),wr=()=>F.join(Ne(),"agent.cmd");function vr(){return`gui/${process.getuid?.()||Number(Zn("id -u").toString().trim())}`}function sa(e){return e.replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;").replace(/"/g,"&quot;").replace(/'/g,"&apos;")}function rn(e){return`<string>${sa(e)}</string>`}function _r(){let e=process.argv[1]?Y.realpathSync(process.argv[1]):"";if(!e||!Y.existsSync(e))throw new Error("Could not resolve the current Mach CLI entrypoint.");return[process.execPath,e,"agent","run"]}function $r(){let e=aa(),t=process.platform==="win32"?[process.env.SystemRoot?F.join(process.env.SystemRoot,"System32"):void 0,process.env.SystemRoot]:["/opt/homebrew/bin","/usr/local/bin","/usr/bin","/bin","/usr/sbin","/sbin"],n={HOME:ke.homedir(),PATH:[process.env.PATH,...e.flatMap(i=>[F.join(i,"platform-tools"),F.join(i,"emulator"),F.join(i,"cmdline-tools","latest","bin"),F.join(i,"tools","bin")]),...t].filter(Boolean).join(F.delimiter)};for(let i of["ANDROID_HOME","ANDROID_SDK_ROOT","JAVA_HOME","SHELL"])process.env[i]&&(n[i]=process.env[i]);return n}function aa(){let e=[process.env.ANDROID_HOME,process.env.ANDROID_SDK_ROOT];if(process.platform==="darwin")e.push(F.join(ke.homedir(),"Library","Android","sdk"));else if(process.platform==="linux")e.push(F.join(ke.homedir(),"Android","Sdk"),F.join(ke.homedir(),"Android","sdk"),"/opt/android-sdk","/usr/lib/android-sdk");else if(process.platform==="win32"){let t=process.env.LOCALAPPDATA,n=process.env.USERPROFILE||ke.homedir();e.push(t?F.join(t,"Android","Sdk"):void 0,F.join(n,"AppData","Local","Android","Sdk"))}return Array.from(new Set(e.filter(t=>!!t)))}function rp(e){return process.platform==="win32"&&!e.toLowerCase().endsWith(".exe")?`${e}.exe`:e}function la(e,t){let n=rp(e);for(let i of aa()){let r=F.join(i,t,n);if(Y.existsSync(r))return r}return n}function da(){return la("adb","platform-tools")}function ca(){return la("emulator","emulator")}function Er(e){return`"${e.replace(/\\/g,"\\\\").replace(/"/g,'\\"').replace(/%/g,"%%")}"`}function op(){if(process.platform!=="linux")throw new Error("Linux service install requires Linux.");Y.mkdirSync(Ne(),{recursive:!0}),Y.mkdirSync(oa(),{recursive:!0});let e=_r(),t=$r(),n=Object.entries(t).map(([r,o])=>`Environment=${Er(`${r}=${o}`)}`).join(`
1612
+ `);let o=r.match(/Google Api Error:[^\n]+/)||r.match(/Google Play API Error:[^\n]+/);return o?o[0]:r||"Google Play submission failed"}function Ru(e){try{Y.existsSync(e)&&Y.rmSync(e,{recursive:!0,force:!0})}catch{}}function Q(e){console.log(V.red(`\u274C ${e}`))}function oe(e){console.log(V.gray(`\u2022 ${e}`))}function gr(e){console.log(V.green(`\u2713 ${e}`))}import yr from"fs";import Ot from"path";var Ou=new Set([".gradle",".idea",".mach-cache",".expo",".turbo","build","builds","coverage","dist",".mach_cli","mach_cli"]),Ds=new Set([".git",".gradle",".cxx",".expo","DerivedData","node_modules","Pods"]),Cs=e=>e.split(Ot.sep).filter(Boolean).join("/"),Ts=(e,t)=>e===t||e.startsWith(`${t}/`),ks=(e,t)=>e==="."?t:`${e}/${t}`,Pu=(e,t,n)=>{let i=ks(t,n==="ios"?"android":"ios");if(Ts(e,i))return i;let r=e.split("/"),o=r.find(s=>Ds.has(s));return o||(r[0]===".yarn"&&r[1]==="cache"?".yarn/cache":r[0]||e)},Du=(e,t,n=".")=>{let i=Cs(e);if(!i)return!1;let r=Hi(n),o=i.split("/"),s=o[0];if(o.some(d=>Ds.has(d))||s===".yarn"&&o[1]==="cache"||Ou.has(s))return!0;let a=ks(r,t==="ios"?"android":"ios");if(Ts(i,a))return!0;let l=o.findIndex(d=>d==="android"||d==="ios");return!!(l>=0&&o.slice(l+1).includes("build"))},Ns=(e,t,n,i=".")=>{let r=0,o=new Set,s=Hi(i),a=(l,d)=>{let c=Cs(d);if(Du(c,n,s)){o.add(Pu(c,s,n));return}let u=yr.lstatSync(l);if(!u.isSymbolicLink()){if(u.isDirectory()){for(let f of yr.readdirSync(l))a(Ot.join(l,f),Ot.join(d,f));return}if(u.isFile()){let f=Ot.dirname(c);e.addLocalFile(l,f==="."?void 0:f,Ot.basename(c)),r+=1}}};for(let l of yr.readdirSync(t))a(Ot.join(t,l),l);return{files:r,skipped:Array.from(o).sort()}};var Sr=8,ku=6,Bs=Number(process.env.MACH_ARTIFACT_UPLOAD_MAX_ATTEMPTS||2),br=Number(process.env.MACH_ARTIFACT_UPLOAD_TIMEOUT_MS||12e4),Er="ap-south-1",Nu=`${m.envPrefix}S3_DEBUG`,xu=()=>["1","true","yes","on"].includes(String(process.env[Nu]||"").trim().toLowerCase()),wr=(e,t)=>{if(xu()&&t)try{let n=new URL(t);b.info(E.dim(`[S3_DEBUG] ${e} host=${n.hostname} expectedRegion=${Er}`)),n.hostname.includes(Er)||b.warn(E.yellow(`[S3_DEBUG] ${e} host ${n.hostname} does not include ${Er}`))}catch(n){b.warn(E.yellow(`[S3_DEBUG] Could not parse ${e} presigned URL host: ${n.message}`))}},Lu=[{value:"production",label:"production",hint:"Store / release build"},{value:"staging",label:"staging",hint:"Internal testing build"},{value:"development",label:"development",hint:"Development build"}],Zs=e=>new Promise(t=>setTimeout(t,e)),Mu=e=>!e.yes&&!e.failOnly&&!e.buildId&&process.stdin.isTTY&&process.stdout.isTTY,Uu=e=>{if(!e||typeof e!="object")return;let t=[e.distribution?`distribution: ${e.distribution}`:void 0,e.environment?`env: ${e.environment}`:void 0,e.developmentClient?"development client":void 0,e.simulator?"simulator":void 0].filter(Boolean);return t.length>0?t.join(", "):void 0},Fu=()=>{let e=de(`./${m.configFileName}`),t=e?.build&&typeof e.build=="object"?e.build:{},n=Object.keys(t);return n.length===0?Lu:n.map(i=>({value:i,label:i,hint:Uu(t[i])}))},Bu=async e=>{let t=Mu(e);if(!e.platform&&t){let n=await xs({message:"Select platform",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"}]});Yn(n)&&(Ms("Build cancelled."),process.exit(0)),e.platform=n}if(!e.buildProfile&&t){let n=Fu(),i=await xs({message:"Select build profile",options:n,initialValue:n.find(r=>r.value==="production")?.value||n[0]?.value});Yn(i)&&(Ms("Build cancelled."),process.exit(0)),e.buildProfile=i}e.buildProfile||(e.buildProfile="production")},Hs=e=>{if(e===!0||e===!1)return e;if(e===1||e==="1")return!0;if(e===0||e==="0")return!1;if(typeof e!="string")return;let t=e.trim().toLowerCase();if(["true","yes","on"].includes(t))return!0;if(["false","no","off"].includes(t))return!1},Qs=(e,t)=>{if(e)for(let n of t){let i=n.replace(/[.*+?^${}()|[\]\\]/g,"\\$&"),r=e.match(new RegExp(`(?:^|\\s)${i}(?:=|\\s+)([^\\s]+)`));if(r?.[1])return r[1].replace(/^["']|["']$/g,"")}},Hu=(e,t)=>!!e&&t.some(n=>new RegExp(`(?:^|\\s)${n.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}(?:\\s|$)`).test(e)),ju=e=>{let n=Qs(e,["--platform"])||e?.split(/\s+/).find(i=>i==="ios"||i==="android");return n==="ios"||n==="android"?n:void 0},Gu=async e=>{if(!e.projectId||!e.buildId)return;let t=!!e.local;try{let n=await v.get(`/builds/${e.projectId}/${e.buildId}`),i=n.data?.build||n.data;if(!i||typeof i!="object"){if(t)throw new Error("MACH API returned an empty build record.");return}let r=typeof i.buildArgs=="string"?i.buildArgs:void 0;if(Eo(e,i),!e.platform){let o=i.platform||ju(r);(o==="ios"||o==="android")&&(e.platform=o)}if(e.buildProfile||(e.buildProfile=i.buildProfile||i.profile||i.profileName||Qs(r,["--profile","--build-profile","-p"])),e.simulator===void 0){let o=Hs(i.simulator??i.isSimulator);o!==void 0?e.simulator=o:Hu(r,["--simulator"])&&(e.simulator=!0)}if(e.developmentClient===void 0){let o=Hs(i.developmentClient??i.devClient);o!==void 0&&(e.developmentClient=o)}}catch(n){if(t){let i=n.response?.data?.message||n.message||"unknown error";throw new Error(`Could not load the canonical MACH build record for runner ${e.buildId}: ${i}. The runner stopped to avoid allocating or packaging a different native version.`)}b.warn(E.yellow(`Could not load saved build options for runner: ${n.message}`))}},Vu=e=>{if(!Number.isFinite(e)||e<=0)return"0 B";let t=["B","KB","MB","GB"],n=Math.min(Math.floor(Math.log(e)/Math.log(1024)),t.length-1);return`${(e/Math.pow(1024,n)).toFixed(n===0?0:1)} ${t[n]}`},zu=e=>{let t=e.response?.status,n=e.code||"",i=e.message||"";return t?t===408||t===409||t===425||t===429||t>=500||/ECONNRESET|ETIMEDOUT|EAI_AGAIN|ENOTFOUND|ECONNABORTED|socket hang up|network|timeout/i.test(`${n} ${i}`):!0},en=async(e,t,n=ku)=>{let i;for(let r=1;r<=n;r++)try{return await t()}catch(o){if(i=o,!zu(o)||r>=n)break;let s=Math.min(6e4,2e3*Math.pow(2,r-1)),a=o.response?.status||o.code||o.message||"network error";b.warn(E.yellow(`${e} failed transiently (${a}). Retrying in ${Math.round(s/1e3)}s... (${r}/${n})`)),await Zs(s)}throw i},Ku=async(e,t,n)=>{let i=be.basename(e),r=ie.statSync(e).size,o=Math.round(br/1e3);wr(`ARTIFACT_UPLOAD ${i}`,t);try{await en(`Upload artifact ${i}`,async()=>{let s=new AbortController,a=ie.createReadStream(e),l=setTimeout(()=>{a.destroy(new Error(`Artifact upload timed out after ${o}s`)),s.abort()},br);try{await Wn.put(t,a,{headers:{"Content-Type":n,"Content-Length":r,Connection:"close"},maxBodyLength:1/0,maxContentLength:1/0,timeout:br,timeoutErrorMessage:`Artifact upload timed out after ${o}s`,signal:s.signal})}finally{clearTimeout(l)}},Bs)}catch(s){throw new Error(`${i} (${Vu(r)}) failed after ${Bs} upload attempt(s): ${s.message||s}`)}return r},Wu=e=>{let t=e.response?.status;return t?t===408||t===429||t>=500:!0},nn=e=>e.credentialId||e.id,Yu=async(e,t)=>{let n=nn(e);if(!n)return e.downloadUrl;let i=await v.get(`/credentials/${n}/download`,{params:{projectId:t,format:"raw"}});return i.data?.status==="success"&&i.data?.downloadUrl?i.data.downloadUrl:e.downloadUrl},qu=async(e,t)=>{let n=e.downloadUrl;for(let i=1;i<=Sr;i++)try{if((!n||i>1)&&(n=await Yu(e,t)),!n)throw new Error(`Credential ${e.name||nn(e)||"unknown"} has no download URL.`);let r=await Wn.get(n,{responseType:"arraybuffer",timeout:6e4,maxContentLength:1/0,maxBodyLength:1/0,headers:{Connection:"close"}});return Buffer.from(r.data).toString("base64")}catch(r){if(i>=Sr||!Wu(r))throw r;let o=Math.min(1500*i*i,15e3);b.warn(E.dim(` - Temporary network error downloading ${e.name}. Retrying... (${i}/${Sr})`)),await Zs(o)}throw new Error(`Failed to download credential ${e.name||nn(e)||"unknown"}.`)},Ju=(e,t)=>t?.ios?.buildNumber??t?.iosBuildNumber??e?.ios?.buildNumber??e?.expo?.ios?.buildNumber,Xu=(e,t)=>t?.android?.versionCode??t?.androidVersionCode??e?.android?.versionCode??e?.expo?.android?.versionCode,js=(e,t,n,i)=>e==="ios"?t.iosBundleIdentifier||n?.ios?.bundleIdentifier||n?.expo?.ios?.bundleIdentifier||i:t.androidPackage||n?.android?.package||n?.expo?.android?.package||n?.name||i,Gs=async(e,t,n)=>{let i=await v.post(`/projects/${e}/next-build-number`,{platform:t,scope:n});if(i.data.status!=="success"||!i.data.buildNumber)throw new Error(i.data.message||"Dashboard did not return a build number.");return String(i.data.buildNumber)},Qt=e=>{let t={};return e.platform==="ios"&&e.resolvedBuildNumber&&(t.buildNumber=e.resolvedBuildNumber),e.platform==="android"&&e.resolvedVersionCode&&(t.versionCode=e.resolvedVersionCode),t},ea=(e,t,n=[])=>{if(!ie.existsSync(e))return n;let i;try{i=ie.readdirSync(e,{withFileTypes:!0})}catch{return n}for(let r of i){if(r.name==="Pods"||r.name==="build"||r.name==="DerivedData")continue;let o=be.join(e,r.name);r.isDirectory()?ea(o,t,n):r.name===t&&n.push(o)}return n},Zu=(e,t,n)=>{let i=`${n} ${t.environment||""}`.toLowerCase(),r=e.toLowerCase(),o=0;return(i.includes("development")||i.includes("dev"))&&/(^|[.-])dev(elopment)?($|[.-])/.test(r)&&(o+=20),(i.includes("staging")||i.includes("stage"))&&/(^|[.-])stag(e|ing)?($|[.-])/.test(r)&&(o+=20),(i.includes("production")||i.includes("prod"))&&(/(^|[.-])(dev|development|stag|stage|staging)($|[.-])/.test(r)||(o+=20)),o},Qu=(e,t)=>{let n=ji(process.cwd(),e.appDirectory),i=be.join(n.appRoot,"ios"),r=ie.existsSync(i)?i:n.appRoot,o=ea(r,"project.pbxproj"),s=[];for(let a of o)try{let d=ie.readFileSync(a,"utf8").matchAll(/PRODUCT_BUNDLE_IDENTIFIER\s*=\s*"?([^";\s]+)"?;/g);for(let c of d){let u=c[1]?.trim();u&&!u.includes("$")&&!u.startsWith("com.apple.")&&!s.includes(u)&&s.push(u)}}catch{}if(s.length!==0)return s.length===1?s[0]:s.map(a=>({bundleId:a,score:Zu(a,e,t)})).sort((a,l)=>l.score-a.score)[0]?.bundleId},Kn=e=>String(e||"").trim().toLowerCase().replace(/_/g,"-"),qn=(e,t)=>{let n=Kn(e);return t==="ios"&&(n==="internal"||n==="ad-hoc")?"adhoc":t==="android"&&["internal","adhoc","ad-hoc","development","dev","staging","stage"].includes(n)?"internal":n},Vs=(e,t,n)=>{let i=qn(e.distributionType||e.meta?.distributionType,n);return i?i===qn(t,n):!0},zs=(e,t,n)=>{let i=qn(e.distributionType||e.meta?.distributionType,n),r=qn(t,n);return i?i===r?3:n==="android"&&r!=="store"&&i!=="store"?2:0:1},ep=e=>{let t=e.toLowerCase();return t==="development"||t==="dev"||t.startsWith("development-")||t.startsWith("dev-")||t.endsWith("-development")||t.endsWith("-dev")},tp=e=>{let t=e.toLowerCase();return t.includes("staging")||t.includes("stage")||t.includes("preview")||t.includes("adhoc")||t.includes("ad-hoc")},np=(e,t)=>{let n=Kn(e.distribution),i=Kn(e.iosExportMethod),r=Kn(e.environment);return e.platform!=="ios"?n==="store"?"store":"internal":e.developmentClient||e.simulator?"development":i==="app-store"||n==="store"?"store":i==="development"||n==="development"?"development":i==="ad-hoc"||i==="adhoc"||n==="ad-hoc"||n==="adhoc"||n==="internal"?"adhoc":r==="production"||r==="store"?"store":r==="development"||r==="dev"?"development":r==="staging"||r==="stage"||r==="preview"?"adhoc":t.toLowerCase()==="production"||t.toLowerCase().includes("store")?"store":ep(t)?"development":(tp(t),"adhoc")},ta=e=>e.bundleId||e.bundleIdentifier||e.packageName||e.meta?.bundleId||e.meta?.bundleIdentifier||e.meta?.packageName,Ks=(e,t)=>{if(!t)return!0;let n=ta(e);return!n||n==="*"||n===t},Ws=(e,t)=>{let n=ta(e);return!t||!n?0:n===t?2:n==="*"?1:-1},na=e=>{try{let t=Buffer.from(e,"base64").toString("utf8"),n=t.match(/<key>application-identifier<\/key>\s*<string>([^<]+)<\/string>/)?.[1]?.trim();if(!n)return;let i=t.match(/<key>TeamIdentifier<\/key>\s*<array>\s*<string>([^<]+)<\/string>/)?.[1]?.trim();if(i&&n.startsWith(`${i}.`))return n.slice(i.length+1);let r=n.indexOf(".");return r>=0?n.slice(r+1):n}catch{return}},ip=(e,t)=>{if(e===t||e==="*")return!0;if(e.endsWith(".*")){let n=e.slice(0,-2);return t.startsWith(`${n}.`)}return!1},rp=(e,t)=>{if(!t)return!0;let n=na(e);if(n)return ip(n,t);try{return Buffer.from(e,"base64").toString("latin1").includes(t)}catch{return!0}},Jn=async e=>{if(e.failOnly){(!e.projectId||!e.buildId)&&(b.error(E.red("--project-id and --build-id are required with --fail-only.")),process.exit(1));let d=e.error||"Build runner failed before it could report a final status.";try{await v.patch(`/builds/${e.projectId}/${e.buildId}`,{status:"failed",error:d,endTime:Date.now()}),b.info(E.yellow(`Marked build ${e.buildId} as failed.`));return}catch(c){b.error(E.red(`Could not mark build failed: ${c.message}`)),process.exit(1)}}await Gu(e),await Bu(e),e.platform!=="android"&&e.platform!=="ios"&&(b.error(`Platform ${e.platform} is not supported. Use 'android' or 'ios'.`),process.exit(1)),e.autoSubmit&&e.platform==="ios"&&e.simulator&&(b.error(E.red("--auto-submit cannot be used with --simulator because simulator builds are not App Store artifacts.")),process.exit(1)),e.autoSubmit&&e.dryRun&&b.warn(E.yellow("--auto-submit is ignored during --dry-run."));let t=_r(),n=e.buildId||Cu(),i=e.projectId,r=Date.now(),o=!!i,s=!0,a=async d=>{if(i)try{await v.patch(`/builds/${i}/${n}`,{status:"failed",error:d,endTime:Date.now()})}catch{}};if(e.local&&e.buildId&&i&&await en("Mark isolated runner as building",()=>v.patch(`/builds/${i}/${n}`,{status:"building",runnerStartedAt:Date.now()})),e.local&&e.buildId){e.quiet||t.start(`Preparing isolated workspace for build: ${e.buildId}`);try{let d=await v.get(`/builds/${i}/${e.buildId}/source-url`);if(d.data.status!=="success")throw new Error("Failed to get source download URL from API");wr("SOURCE_DOWNLOAD",d.data.downloadUrl);let c=await Wn.get(d.data.downloadUrl,{responseType:"stream"}),u=(i||e.projectId||"default").replace(/[^a-zA-Z0-9-_]/g,"_"),f=be.join(Tu.homedir(),m.workspacesDir,u);ie.mkdirSync(f,{recursive:!0});let p=new Set(["node_modules",`.${m.nameLower}-cache-meta`]),g=new Set(["Pods"]);if(ie.existsSync(f)){let L=ie.readdirSync(f);for(let w of L){if(p.has(w))continue;if(w==="ios"){let W=be.join(f,"ios");try{let Z=ie.readdirSync(W);for(let _e of Z)if(!g.has(_e))try{ie.rmSync(be.join(W,_e),{recursive:!0,force:!0})}catch{}}catch{}continue}let j=be.join(f,w);try{ie.rmSync(j,{recursive:!0,force:!0})}catch{}}}let h=be.join(f,"source.zip"),A=c.data,S=ie.createWriteStream(h);await new Promise((L,w)=>{A.pipe(S),A.on("error",j=>w(j)),S.on("finish",()=>L())}),new Fs(h).extractAllTo(f,!0);try{ie.unlinkSync(h)}catch{}process.chdir(f),b.info(E.green(`\u2713 Persistent workspace ready: ${f}`)),b.info(E.dim(` \u{1F4E6} Cached dirs preserved: node_modules=${ie.existsSync(be.join(f,"node_modules"))?"\u2705":"\u274C"}, Pods=${ie.existsSync(be.join(f,"ios","Pods"))?"\u2705":"\u274C"}`)),t.stop()}catch(d){t.stop(`Failed to prepare isolated workspace: ${d.message}`),i&&await a(`Setup Error: ${d.message}`),process.exit(1)}}try{let d=e.repo;if(!d)try{d=Us("git config --get remote.origin.url").toString().trim()}catch{b.warn("Could not detect git repository URL.")}!d&&e.dryRun,d||(d="https://github.com/placeholder/repo.git"),b.info(`Build ID: ${E.cyan(n)}`);let c={},u={},f=null,p=de(`./${m.configFileName}`);if(p||(b.error(E.red(`${m.configFileName} not found. Run \`${m.nameLower} init\` or \`${m.nameLower} link\` first.`)),process.exit(1)),p){f=p;let O=_o(p);e.framework=O,i=p.projectId;let x=ji(process.cwd(),p.appDirectory,{requireAppDirectory:!0});e.appDirectory=x.appDirectory,Io(x,O,e.platform);let y=e.buildProfile||"production",$=we(p,y);!$&&e.buildProfile&&(b.error(`Build profile '${y}' not found in ${m.configFileName}`),process.exit(1));let _=$||{};process.env.MACH_DEBUG&&b.info(E.dim(`Framework: ${O} | Build profile: ${y} | Platform: ${e.platform} | Distribution: ${_.distribution||"store"} | Environment: ${_.environment||y}`)),_.env&&(u=_.env,b.info(E.blue(`Use Build Profile: ${y}`)));let R=e.platform,U=_[R]||{},F=["developmentClient","simulator","distribution","buildCommand","apk","iosScheme","preBuild","postBuild","scheme","environment","androidPackage","iosBundleIdentifier","name","iosDeploymentTarget","iosApiKeyId","iosApiKeyIssuer","iosApiKeyPath","iosTeamId","iosConfiguration","iosExportMethod","branch","repo","instanceType","ami","bucket","region","nodeVersion"];e.name=p.name,e.appName=p.name,e.androidPackage=p.android?.package,e.iosBundleIdentifier=p.ios?.bundleIdentifier,e.iosScheme=p.ios?.iosScheme,!e.nodeVersion&&p.nodeVersion&&(e.nodeVersion=p.nodeVersion);let G=D=>D==="androidPackage"?U.androidPackage??U.package??_.androidPackage??_.android?.package:D==="iosBundleIdentifier"?U.iosBundleIdentifier??U.bundleIdentifier??_.iosBundleIdentifier??_.ios?.bundleIdentifier:U[D]!==void 0?U[D]:_[D];for(let D of F){let Se=G(D),he=D==="androidPackage"||D==="iosBundleIdentifier";Se!==void 0&&(e[D]===void 0||he)&&(e[D]=Se)}if(e.platform==="ios"&&!(U.iosBundleIdentifier??U.bundleIdentifier??_.iosBundleIdentifier??_.ios?.bundleIdentifier)){let Se=Qu(e,y);Se&&Se!==e.iosBundleIdentifier&&(b.warn(E.yellow(`Detected native iOS bundle identifier ${Se}; using it for credential lookup. Set build.${y}.ios.bundleIdentifier to make this explicit.`)),e.iosBundleIdentifier=Se)}e.branch=e.branch||"main",e.iosConfiguration=e.iosConfiguration||(e.developmentClient?"Debug":"Release"),e.sshUser=e.sshUser||process.env.USER||"ubuntu",e.simulator===void 0&&(e.simulator=!1),e.local===void 0&&(e.local=!1),e.verbose===void 0&&(e.verbose=!1),b.info(E.dim(`Resolved build config: framework=${O}, appDirectory=${e.appDirectory}, profile=${y}, platform=${e.platform}, simulator=${e.platform==="ios"?String(!!e.simulator):"n/a"}, developmentClient=${String(!!e.developmentClient)}, distribution=${e.distribution||_.distribution||"store"}, iosConfiguration=${e.platform==="ios"?e.iosConfiguration||"Release":"n/a"}`));let le=D=>{if(!D)return D;if(D.startsWith("scripts.")){let Se=D.split(".")[1],he=p.scripts?.[Se];if(he)return he;b.warn(`Script reference not found: ${D}`)}return D};e.buildCommand=le(e.buildCommand),e.preBuild=le(e.preBuild),e.postBuild=le(e.postBuild),!e.scheme&&p.scheme&&(e.scheme=p.scheme);let Ni={..._t(p,m.envPrefix),..._t(_,`${m.envPrefix}PROFILE_`)};c={...c,...u,...Ni},process.env.IOS_P12_PASSWORD&&!c.IOS_P12_PASSWORD&&(c.IOS_P12_PASSWORD=process.env.IOS_P12_PASSWORD),process.env.MATCH_PASSWORD&&!c.MATCH_PASSWORD&&(c.MATCH_PASSWORD=process.env.MATCH_PASSWORD),e.platform==="ios"&&(!e.iosTeamId&&_.ios?.appleTeamId&&(e.iosTeamId=_.ios.appleTeamId),!e.iosTeamId&&p.submit?.[y]?.ios?.appleTeamId&&(e.iosTeamId=p.submit[y].ios.appleTeamId),!e.iosTeamId&&p.submit?.production?.ios?.appleTeamId&&(b.warn(E.yellow(`Check: Using 'production' Team ID for '${y}' build.`)),e.iosTeamId=p.submit.production.ios.appleTeamId),e.iosTeamId?b.info(E.magenta(`\u2713 Injected iOS Team ID from config: ${e.iosTeamId}`)):e.simulator||b.warn(E.yellow("\u26A0\uFE0F No iOS Team ID found. Device or archive signing may fail unless managed iOS credentials provide the team automatically.")))}let g="unknown";try{g=Us("git rev-parse --abbrev-ref HEAD").toString().trim()}catch{b.warn("Failed to detect git branch.")}let h="1.0.0";try{ie.existsSync("./package.json")&&(h=JSON.parse(ie.readFileSync("./package.json","utf-8")).version||"1.0.0")}catch{}let A=e.buildProfile||"production",S=Kt(p,{framework:e.framework,platform:e.platform}),I="Internal";e.developmentClient?I="DevelopmentClient":A.toLowerCase().includes("store")||A.toLowerCase()==="production"?I="Store":A.toLowerCase().includes("preview")||A.toLowerCase().includes("staging")?I="Staging":(A.toLowerCase().includes("development")||A.toLowerCase().includes("dev"))&&(I="Development");let L=e.platform==="ios"?"iOS":"Android",w=e.platform==="ios"&&e.simulator?" (Simulator)":"",j=`${L}${w} v${h} (${I})`;if(tn(e,{status:"created",projectId:i,buildId:n,platform:e.platform,profile:A,branch:g,version:h,runtimeVersion:S,...Qt(e),buildType:I,developmentClient:!!e.developmentClient,summary:j}),i){try{let O=e.buildProfile||"production",x=e.environment||O;b.info(E.blue(`Fetching managed secrets for profile: ${O} (environment: ${x})...`));let $=(await v.get(`/projects/${i}/secrets/export?env=${x}`)).data;$.status==="success"&&$.secrets&&(c={...c,...$.secrets},Object.keys($.secrets).length>0&&b.info(E.magenta(`\u2713 Injected ${Object.keys($.secrets).length} secrets from Dashboard.`)))}catch(O){b.warn(`Failed to load managed secrets from Dashboard: ${O.message}`)}if(e.platform==="ios"){let O=e.buildProfile||"production",x=we(p,O)||{},y=Ju(p,x),$=Fi(y),_=e.distribution!==void 0?e.distribution==="store":I==="Store",R=y===void 0&&_,U=e.autoVersion||$||R,F=Bi(e.resolvedBuildNumber,y,U,!e.simulator);if(F.kind==="persisted"){let G=Nn(e,c,F.value,"saved MACH build record");b.info(E.green(`\u2713 Reusing assigned iOS buildNumber ${G}`))}else if(F.kind==="explicit"){let G=Nn(e,c,F.value,`${m.configFileName} (${O})`);b.info(E.green(`\u2713 Using configured iOS buildNumber ${G}`))}else if(F.kind==="auto"){t.start("Assigning iOS buildNumber from Mach counter...");try{let G=js("ios",e,p,O),le=await Gs(i,"ios",G);Nn(e,c,le,"MACH version counter"),t.stop(`\u2713 Assigned iOS buildNumber ${E.green(le)} (${G})`)}catch(G){throw t.stop("iOS buildNumber assignment failed"),new Error(`Auto-versioning failed: ${G.response?.data?.message||G.message}`)}}}if(e.platform==="android"){let O=e.buildProfile||"production",x=we(p,O)||{},y=Xu(p,x),$=Fi(y),_=e.distribution!==void 0?e.distribution==="store":I==="Store",R=y===void 0&&_,U=e.autoVersion||$||R,F=Bi(e.resolvedVersionCode,y,U);if(F.kind==="persisted"){let G=xn(e,c,F.value,"saved MACH build record");b.info(E.green(`\u2713 Reusing assigned Android versionCode ${G}`))}else if(F.kind==="explicit"){let G=xn(e,c,F.value,`${m.configFileName} (${O})`);b.info(E.green(`\u2713 Using configured Android versionCode ${G}`))}else if(F.kind==="auto"){t.start("Assigning Android versionCode from Mach counter...");try{let G=js("android",e,p,O),le=await Gs(i,"android",G);xn(e,c,le,"MACH version counter"),t.stop(`\u2713 Assigned Android versionCode ${E.green(le)} (${G})`)}catch(G){throw t.stop("Android versionCode assignment failed"),new Error(`Auto-versioning failed: ${G.response?.data?.message||G.message}`)}}}if(e.platform==="ios"&&e.simulator)b.info(E.dim("Skipping managed iOS signing credentials for simulator build."));else try{b.info(E.blue("Fetching managed credentials..."));let O=np(e,A),x=e.platform==="ios"?e.iosBundleIdentifier:e.androidPackage,y=e.platform==="ios"?"bundle":"package";b.info(E.dim(` Credential target: ${y} ${x||"not set"} (${O})`));let $=await v.get("/credentials/resolve",{params:{projectId:i,platform:e.platform,bundleId:x,distributionType:O,teamId:e.platform==="ios"?e.iosTeamId:void 0}});if($.data.status==="success"&&$.data.credentials){let _=$.data.credentials;b.info(E.magenta(`\u2713 Found ${_.length} relevant credentials.`));let R=_.filter(D=>e.platform==="ios"&&D.type==="ios_profile"?Vs(D,O,e.platform)?Ks(D,x):!1:e.platform==="android"&&D.type==="android_keystore"?Ks(D,x):!!Vs(D,O,e.platform)).sort((D,Se)=>{let he=Ws(Se,x)*10+zs(Se,O,e.platform)-(Ws(D,x)*10+zs(D,O,e.platform));return he!==0?he:(Se.createdAt||0)-(D.createdAt||0)});b.info(E.dim(` Filtered to ${R.length} credentials for distributionType: ${O}`));let U=!1,F=!1,G=!1,le=[];for(let D of R)if(!(D.type==="ios_cert"&&U||D.type==="ios_profile"&&F||D.type==="android_keystore"&&G)&&["ios_cert","ios_profile","android_keystore"].includes(D.type)&&(D.downloadUrl||nn(D)))try{let he=await qu(D,i);if(D.type==="ios_cert"&&!U)c.IOS_DIST_P12=he,D.password?(c.IOS_P12_PASSWORD=D.password,b.info(E.dim(` - Injected ${D.name} as IOS_DIST_P12 with password from credential record`))):b.info(E.dim(` - Injected ${D.name} as IOS_DIST_P12`)),U=!0;else if(D.type==="ios_profile"&&!F){if(!rp(he,x)){let Dn=na(he)||"unknown";throw new Error(`Provisioning profile ${D.name||nn(D)||"unknown"} is for a different bundle ID. Expected ${x}, found ${Dn}. Upload a ${O} profile for ${x}.`)}c.IOS_PROVISIONING_PROFILE=he,b.info(E.dim(` - Injected ${D.name} as IOS_PROVISIONING_PROFILE`)),F=!0}else if(D.type==="android_keystore"&&!G){c.ANDROID_KEYSTORE_BASE64=he;let Dn=D.keystorePassword||D.password,po=D.keyPassword||D.keystorePassword||D.password,fo=D.alias||D.meta?.alias;if(Dn)c.ANDROID_STORE_PASSWORD=Dn,b.info(E.dim(" - Injected keystore password from credential record"));else{let Li=["ANDROID_STORE_PASSWORD",...[O==="store"?"PRODUCTION":O==="internal"||O==="adhoc"?"STAGING":"DEVELOPMENT",O.toUpperCase(),"PRODUCTION","STORE","INTERNAL","STAGING","RELEASE","DEBUG"].map(Mi=>`KEYSTORE_PASSWORD_${Mi}`),"KEYSTORE_PASSWORD"].find(Mi=>!!c[Mi]);Li&&c[Li]&&(c.ANDROID_STORE_PASSWORD=c[Li])}if(po?(c.ANDROID_KEY_PASSWORD=po,b.info(E.dim(" - Injected key password from credential record"))):c.ANDROID_KEY_PASSWORD=c.ANDROID_STORE_PASSWORD||"",fo)c.ANDROID_KEY_ALIAS=fo;else{let xi=["ANDROID_KEY_ALIAS","KEYSTORE_ALIAS"].find(mo=>!!c[mo]);xi&&(c.ANDROID_KEY_ALIAS=c[xi])}b.info(E.dim(` - Injected ${D.name} as ANDROID_KEYSTORE_BASE64`)),G=!0}}catch(he){le.push(`${D.name||D.type}: ${he.message}`)}let Ni=e.platform==="ios"?e.simulator||U&&F:G||!R.some(D=>D.type==="android_keystore");if(le.length>0&&!Ni)throw new Error(`Credential setup failed:
1613
+ ${le.map(D=>`- ${D}`).join(`
1614
+ `)}`);le.length>0&&b.warn(E.dim(` Skipped ${le.length} stale or unusable credential(s).`))}if(S=Kt(p,{framework:e.framework,platform:e.platform,iosBuildNumber:e.resolvedBuildNumber||c.BUILD_NUMBER,androidVersionCode:e.resolvedVersionCode||c.ANDROID_VERSION_CODE}),p.ota?.enabled){if(p.ota.engine==="mach-react-native")throw new Error("This project still uses the unfinished mach-react-native OTA engine. Run `mach ota setup` to migrate to expo-updates before building.");if(!p.ota.url)throw new Error("OTA is enabled but ota.url is missing. Run `mach ota setup` before building.");let _=p.ota.channel||"production";if(e.framework==="expo"){let R=zt(process.cwd(),{platform:e.platform,runtimeVersion:S,channel:_,url:p.ota.url}),U=[R?.runtimeVersion!==S?`runtime ${R?.runtimeVersion||"missing"} (expected ${S})`:void 0,R?.channel!==_?`channel ${R?.channel||"missing"} (expected ${_})`:void 0,R?.url!==p.ota.url?`URL ${R?.url||"missing"} (expected ${p.ota.url})`:void 0].filter(Boolean);if(U.length>0)throw new Error(`Expo OTA configuration mismatch: ${U.join("; ")}. Run \`${m.nameLower} ota setup\` to update the local Expo plugin before building.`)}c.MACH_OTA_RUNTIME_VERSION=S,c.MACH_OTA_CHANNEL=_,c.MACH_OTA_URL=p.ota.url}if(e.platform==="ios"&&!e.simulator){let _=!!c.IOS_DIST_P12,R=!!c.IOS_PROVISIONING_PROFILE;if(!_||!R){let U=[..._?[]:["Distribution Certificate"],...R?[]:["Provisioning Profile"]].join(" and ");if(e.local&&e.buildId)throw new Error(`Missing iOS credentials: ${U}. Expected ${O} credentials for ${x||"the selected bundle ID"}. Run \`${m.nameLower} credentials --platform ios --profile ${A}\` and select ${x||"the correct bundle ID"}.`);b.error(E.red(`Missing iOS credentials: ${U}`)),e.quiet&&process.exit(1);let F=e.yes||await Ls({message:"Would you like to generate these credentials now?",initialValue:!0});if(F&&!Yn(F))return await Ht({platform:"ios",profile:A}),e.quiet||b.info(E.green("\u2713 Credentials setup complete! Restarting build phase...")),Jn(e);e.quiet||b.info(E.yellow(`Run \`${m.nameLower} credentials\` to set up signing credentials manually.`)),process.exit(1)}}if(e.platform==="android"&&!e.developmentClient&&(e.distribution==="internal"||e.distribution==="store")&&!(!!c.ANDROID_KEYSTORE_BASE64||!!c.ANDROID_KEYSTORE)){b.error(E.red("Missing Android credentials: Signing Keystore")),e.quiet&&process.exit(1);let R=e.yes||await Ls({message:"Would you like to automatically create and upload an Android Keystore for this profile now?",initialValue:!0});if(R&&!Yn(R))return await Ht({platform:"android",profile:A}),e.quiet||b.info(E.green("\u2713 Android Keystore setup complete! Restarting build phase...")),Jn(e);e.quiet||b.info(E.yellow(`Run \`${m.nameLower} credentials --platform android\` to set up a signing keystore manually.`)),process.exit(1)}}catch(O){(String(O.message||"").startsWith("Credential download failed")||String(O.message||"").startsWith("Credential setup failed")||String(O.message||"").startsWith("Missing iOS credentials")||String(O.message||"").startsWith("Auto-versioning failed"))&&(b.error(E.red(O.message)),process.exit(1)),e.platform==="ios"&&e.local&&e.buildId&&(b.error(E.red(`Failed to resolve iOS credentials: ${O.message}`)),process.exit(1)),b.warn(`Failed to resolve credentials: ${O.message}`)}}let W=!!(e.local&&e.buildId),Z=!!(e.local||e.sshHost),_e=!Z&&!W;if(W){b.info(E.magenta("\u{1F3D7}\uFE0F Runner Mode: Executing isolated build task..."));let O=await Gi({...e,interactive:!1},n,c,i,{branch:g,version:h,runtimeVersion:S,summary:j,buildType:I});await re(O),s=!1,process.exit(0)}async function re(O){let x=async y=>{if(i)try{await en("Report failed build status",()=>v.patch(`/builds/${i}/${n}`,{status:"failed",error:y,endTime:Date.now()}),3)}catch($){b.warn(E.yellow(`Could not report failed build status: ${$.message}`))}};if(i&&O.length>0){let y=_r(),$=[];e.quiet||y.start("Uploading artifacts to Dashboard...");try{for(let _ of O){let R=be.basename(_),U=ie.statSync(_).size,F=be.extname(R).toLowerCase(),G="application/octet-stream",le=await en(`Create artifact upload URL for ${R}`,()=>v.post(`/builds/${i}/${n}/artifact-upload-url`,{fileName:R,fileType:G}));if(le.data.status!=="success")throw new Error(`Failed to get upload URL for ${R}`);await Ku(_,le.data.uploadUrl,G),$.push({name:R,url:le.data.downloadUrl,size:U,type:F.substring(1)})}e.quiet||y.stop("Artifacts uploaded.")}catch(_){e.quiet||y.stop("Failed to upload artifacts.");let R=`Artifact upload failed: ${_.message}`;throw b.error(E.red(R)),await x(R),new Error(R)}if(i&&$.length>0)try{b.info(E.cyan(`
1615
+ \u{1F517} Download Links:`));for(let _ of $)b.info(E.dim(` - ${_.name}: `)+E.blue.underline(_.url));await en("Finalize build in dashboard",()=>v.patch(`/builds/${i}/${n}`,{status:"success",artifacts:$,endTime:Date.now(),runtimeVersion:S,...Qt(e)})),tn(e,{status:"success",projectId:i,buildId:n,platform:e.platform,profile:A,branch:g,version:h,runtimeVersion:S,...Qt(e),buildType:I,developmentClient:!!e.developmentClient,summary:j,artifacts:$}),b.success(E.green(`
1616
+ \u2713 Build completed and reported to dashboard.`)),e.maestro&&!W&&await Ys(i,n,e,A),e.autoSubmit&&!W&&await Ir(i,n,e,A)}catch(_){let R=`Build artifact uploaded but dashboard finalization failed: ${_.message}`;throw b.error(E.red(`
1617
+ ${R}`)),await x(R),new Error(R)}}else if(i){let y="Build completed but produced no uploadable artifacts.";throw b.error(E.red(y)),await x(y),new Error(y)}}if(Z){if(b.info(E.cyan(`\u{1F680} Direct Build Mode: Executing on ${e.sshHost||"local"}...`)),i&&!o){let O=process.argv.slice(3).join(" ");await v.post("/builds",{projectId:i,buildId:n,platform:e.platform,status:"building",branch:g,version:h,runtimeVersion:S,...Qt(e),summary:j,startTime:r,buildType:I,buildProfile:A,buildArgs:O,framework:e.framework,appDirectory:e.appDirectory,simulator:!!e.simulator,developmentClient:!!e.developmentClient,...qs(e,n,A,f)}),Js(e)}if(e.sshHost&&e.platform==="ios")await Go(e,n,c,i),s=!1,e.autoSubmit&&await Ir(i,n,e,A);else{let O=await Gi({...e,interactive:!!e.local},n,c,i,{branch:g,version:h,runtimeVersion:S,summary:j,buildType:I});await re(O),s=!1}return}if(_e&&(b.info(E.blue("\u{1F6F0}\uFE0F Cloud Initiator Mode: Preparing orchestration...")),!e.dryRun)){e.quiet||t.start("Zipping and uploading local source...");let O=await v.post("/builds/source-upload-url",{projectId:i,buildId:n});if(O.data.status!=="success")throw t.stop("Failed to get upload URL."),new Error("Failed to get source upload URL from API");wr("SOURCE_UPLOAD",O.data.uploadUrl);let x=new Fs,y=Ns(x,process.cwd(),e.platform,e.appDirectory),$=x.toBuffer();if(!e.quiet){let R=y.skipped.length>0?` Skipped: ${y.skipped.join(", ")}.`:"";t.message(`Prepared source (${y.files} files).${R}`)}e.quiet||t.message(`Uploading source (${($.length/1024/1024).toFixed(1)} MB)...`);let _=!1;for(let R=1;R<=3;R++)try{await Wn.put(O.data.uploadUrl,$,{headers:{"Content-Type":"application/zip"},maxBodyLength:1/0,maxContentLength:1/0,timeout:12e4}),_=!0;break}catch(U){if(R<3)t.message(`Upload attempt ${R} failed (${U.code||U.message}), retrying...`),await new Promise(F=>setTimeout(F,2e3*R));else throw U}if(e.quiet||t.stop("Source uploaded"),i){let R=process.argv.slice(3).join(" ");s=e.platform==="android",await v.post("/builds",{projectId:i,buildId:n,platform:e.platform,status:"pending",branch:g,version:h,runtimeVersion:S,...Qt(e),summary:j,startTime:r,buildType:I,buildProfile:A,buildArgs:R,framework:e.framework,appDirectory:e.appDirectory,simulator:!!e.simulator,developmentClient:!!e.developmentClient,...qs(e,n,A,f)}),s=e.platform==="android",b.info(E.green("\u2713 Cloud build registered.")),Js(e)}e.platform==="android"&&(await Bo(e,n,c,i,e.preBuild),s=!1),e.quiet||b.info(E.cyan("\u{1F4E1} Connecting to build stream...")),await ap(i,n,e),e.maestro&&await Ys(i,n,e,A),e.autoSubmit&&await Ir(i,n,e,A);return}}catch(d){let c=d.message||"Build failed";d.response?.data?.message?c=d.response.data.message:d.message.includes("status code 402")?c="Insufficient wallet balance. Please add credits in the Dashboard.":d.message.includes("status code 403")&&(c="Monthly build quota exceeded. Upgrade your plan in the Dashboard."),i&&s&&await a(c),b.error(E.red(`\u2717 Build failed: ${c}`)),process.exit(1)}};async function Ys(e,t,n,i){b.info(E.cyan(`
1618
+ \u{1F3BC} Queuing managed Maestro test...`)),await ir({projectId:e,buildId:t,platform:n.platform,profile:i,maestroFlows:n.maestroFlows,maestroDevice:n.maestroDevice,maestroRetries:n.maestroRetries,maestroRecord:n.maestroRecord,maestroUseBuildSource:n.maestroUseBuildSource,maestroEnv:n.maestroEnv,quiet:n.quiet})}async function Ir(e,t,n,i){if(!e){b.error(E.red("Auto-submit requires a linked Mach project. Run `mach link` or pass --project-id.")),process.exitCode=1;return}b.info(E.cyan(`
1619
+ Auto-submit: submitting the successful build...`));try{let r=await op(e,t);if(r?.autoSubmit){let o=r.submissionId?`${je}/submissions/${r.submissionId}?projectId=${encodeURIComponent(e)}`:void 0,s=String(r.status||"").toLowerCase(),a=String(r.autoSubmitStatus||"").toLowerCase(),l=r.submissionId||["success","completed","succeeded"].includes(s)||["starting","submitted","failed","skipped"].includes(a);if(r.submissionId?(b.info(E.green(`Auto-submit is already queued by Mach backend: ${r.submissionId}`)),b.info(E.dim(`Dashboard: ${o}`))):r.autoSubmitStatus==="failed"?b.warn(E.yellow(`Backend auto-submit failed: ${r.autoSubmitError||"Unknown error"}`)):l&&b.info(E.green("Auto-submit is registered with Mach backend; skipping local duplicate submit.")),l){tt(n,{status:r.autoSubmitStatus||"pending",projectId:e,submitId:r.submissionId,platform:n.platform,profile:i,buildId:t,dashboardUrl:o});return}}await zn({platform:n.platform,profile:i,buildProfile:i,buildId:t,projectId:e,yes:n.yes,quiet:n.quiet,track:n.submitTrack,releaseStatus:n.submitReleaseStatus,rollout:n.submitRollout,changesNotSentForReview:n.submitChangesNotSentForReview,credentialId:n.submitCredentialId,packageName:n.androidPackage,jsonOutput:n.submitJsonOutput,submitArgs:ia(n,t,i)})}catch(r){b.error(E.red(`Auto-submit failed: ${r.message||r}`)),process.exitCode=1}}function ia(e,t,n){let i=["--platform",e.platform,"--profile",n,"--build-id",t];return e.submitTrack&&i.push("--track",String(e.submitTrack)),e.submitReleaseStatus&&i.push("--release-status",String(e.submitReleaseStatus)),e.submitRollout!==void 0&&i.push("--rollout",String(e.submitRollout)),e.submitChangesNotSentForReview&&i.push("--changes-not-sent-for-review"),e.submitCredentialId&&i.push("--credential-id",e.submitCredentialId),e.platform==="android"&&e.androidPackage&&i.push("--package-name",e.androidPackage),e.platform==="ios"&&e.iosBundleIdentifier&&i.push("--bundle-id",e.iosBundleIdentifier),e.submitJsonOutput&&i.push("--json-output",e.submitJsonOutput),i.join(" ")}async function op(e,t){try{let i=(await v.get(`/builds/${e}/${t}`)).data?.build;if(i?.autoSubmit)return i}catch(n){b.warn(E.dim(`Could not check backend auto-submit status: ${n.message}`))}return null}function ra(e){for(let t of Object.keys(e))e[t]===void 0&&delete e[t];return e}function sp(e,t,n){let i=n?.submit?.[t]?.android||{},r=n?.submit?.production?.android||{},o=e.submitTrack||i.track||r.track,s=e.submitReleaseStatus||i.releaseStatus||r.releaseStatus,a=e.submitRollout??i.rollout??i.userFraction??i.rolloutFraction??r.rollout??r.userFraction??r.rolloutFraction,l=e.submitChangesNotSentForReview??i.changesNotSentForReview??i.changes_not_sent_for_review??r.changesNotSentForReview??r.changes_not_sent_for_review;return ra({track:o,releaseStatus:s,rollout:a,changesNotSentForReview:l===void 0?!1:l===!0||l==="true"||l==="1"})}function qs(e,t,n,i){if(!e.autoSubmit||e.dryRun)return{};let r=e.platform==="android"?sp(e,n,i):{};return{autoSubmit:!0,autoSubmitStatus:"pending",autoSubmitOptions:ra({platform:e.platform,profile:n,buildId:t,latest:!1,...r,credentialId:e.submitCredentialId,packageName:e.platform==="android"?e.androidPackage:void 0,bundleId:e.platform==="ios"?e.iosBundleIdentifier:void 0,submitArgs:ia(e,t,n)})}}function Js(e){!e.autoSubmit||e.dryRun||e.quiet||(b.info(E.green("\u2713 Auto-submit has been registered with the build.")),b.info(E.dim(" You can close this terminal; submission will start after build success.")))}function Xs(e){return`${je}/build/${e}`}function tn(e,t){if(!e.jsonOutput)return;let n=be.resolve(e.jsonOutput),i={...t,url:t.url||Xs(t.buildId),dashboardUrl:t.dashboardUrl||Xs(t.buildId),updatedAt:new Date().toISOString()};try{let r=be.dirname(n);r&&r!=="."&&ie.mkdirSync(r,{recursive:!0}),ie.writeFileSync(n,JSON.stringify(i,null,2))}catch(r){b.warn(E.yellow(`Could not write build metadata JSON: ${r.message}`))}}async function ap(e,t,n){let r=_r(),o="pending",s=0,a=0;for(n.quiet||r.start("Connecting to build stream...");;){try{let d=(await v.get(`/builds/${e}/${t}`)).data.build;if(d){o=d.status;let c=String(d.pipelineLaunchState||"").toLowerCase(),u=Number(d.pipelineLaunchClaimedAt),f=Number(d.pipelineLaunchDispatchStartedAt),p=c==="claimed"&&Number.isFinite(u)&&u>0&&Date.now()-u>=3e5,g=c==="dispatching"&&Number.isFinite(f)&&f>0&&Date.now()-f>=3e5;if(["","created","pending","queued"].includes(String(o||"").toLowerCase())&&(c==="retryable_failed"||c==="ambiguous"||p||g)){let A=g||c==="ambiguous"?"ambiguous":"retryable_failed",S=d.pipelineLaunchError||(A==="ambiguous"?"The iOS runner launch outcome is unknown. MACH blocked automatic relaunch to avoid a duplicate pipeline.":p?"The iOS runner was never dispatched before its launch lease expired. Retry this build.":"The iOS runner could not be launched. Retry this build.");n.quiet||r.stop("Build runner launch failed."),tn(n,{status:"failed",projectId:e,buildId:t,platform:n.platform,profile:d.buildProfile,buildType:d.buildType,developmentClient:!!d.developmentClient,version:d.version,runtimeVersion:d.runtimeVersion,buildNumber:d.buildNumber,versionCode:d.versionCode,summary:d.summary,pipelineLaunchState:A,error:S,artifacts:d.artifacts||[]}),b.error(E.red(`
1620
+ \u2717 Build runner launch failed: ${S}`)),process.exit(1)}if(o==="building")n.quiet||r.message("Build in progress...");else if(o==="failed"||o==="error"||o==="cancelled"||o==="canceled"){let A=o==="cancelled"||o==="canceled";n.quiet||r.stop(A?"Build cancelled.":"Build failed.");let S=d.error||(A?"Build was cancelled.":"Unknown error");tn(n,{status:o,projectId:e,buildId:t,platform:n.platform,profile:d.buildProfile,buildType:d.buildType,developmentClient:!!d.developmentClient,version:d.version,runtimeVersion:d.runtimeVersion,buildNumber:d.buildNumber,versionCode:d.versionCode,summary:d.summary,error:S,artifacts:d.artifacts||[]}),b.error(E.red(`
1621
+ \u2717 ${A?"Build cancelled":"Build failed"}: ${S}`)),process.exit(1)}else if(o==="completed"||o==="success"){n.quiet||r.stop("Build successful!"),tn(n,{status:o,projectId:e,buildId:t,platform:n.platform,profile:d.buildProfile,buildType:d.buildType,developmentClient:!!d.developmentClient,version:d.version,runtimeVersion:d.runtimeVersion,buildNumber:d.buildNumber,versionCode:d.versionCode,summary:d.summary,artifacts:d.artifacts||[]}),b.success(E.green(`
1622
+ \u2713 Build completed successfully!`));try{n.quiet||(b.info(E.magenta(`
1623
+ \u{1F4F1} Installation Hub:`)),b.info(E.dim(" - View & Install Build: ")+E.white.underline(`${je}/build/${t}`)))}catch{}return}else if(o!=="pending"){n.quiet||r.stop(`Build status: ${o}`);return}}try{let u=(await v.get(`/builds/${e}/${t}/logs`)).data;if(u&&typeof u=="string"&&!n.quiet){let f=u.split(`
1624
+ `);if(f.length>s){for(let p=s;p<f.length;p++)f[p].trim()&&console.log(E.dim(` ${f[p]}`));s=f.length}}}catch{}a=0}catch{a++,a>10&&(r.stop("Connection lost."),b.error(E.red(`
1625
+ \u2717 Lost connection to Dashboard API.`)),process.exit(1))}await new Promise(l=>setTimeout(l,3e3))}}import*as ni from"http";import*as ua from"net";import{execFile as lp,execFileSync as ot,execSync as Qn,spawn as oa}from"child_process";import te from"chalk";import{log as H}from"@clack/prompts";import dp from"axios";import J from"fs";import xe from"os";import B from"path";var Ye=7070,on=`http://127.0.0.1:${Ye}`,Dt="com.radhya.mach.agent",Pt="Mach Agent",Ct=`${Dt}.service`,cp=5e3,up=3e3,Xn=null,Zn=null,Le=()=>B.join(xe.homedir(),m.configDir),pa=()=>B.join(xe.homedir(),"Library","LaunchAgents"),ei=()=>B.join(pa(),`${Dt}.plist`),fa=()=>B.join(xe.homedir(),".config","systemd","user"),vr=()=>B.join(fa(),Ct),Rr=()=>B.join(Le(),"agent.cmd");function Or(){return`gui/${process.getuid?.()||Number(Qn("id -u").toString().trim())}`}function ma(e){return e.replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;").replace(/"/g,"&quot;").replace(/'/g,"&apos;")}function rn(e){return`<string>${ma(e)}</string>`}function Pr(){let e=process.argv[1]?J.realpathSync(process.argv[1]):"";if(!e||!J.existsSync(e))throw new Error("Could not resolve the current Mach CLI entrypoint.");return[process.execPath,e,"agent","run"]}function Dr(){let e=ga(),t=process.platform==="win32"?[process.env.SystemRoot?B.join(process.env.SystemRoot,"System32"):void 0,process.env.SystemRoot]:["/opt/homebrew/bin","/usr/local/bin","/usr/bin","/bin","/usr/sbin","/sbin"],n={HOME:xe.homedir(),PATH:[process.env.PATH,...e.flatMap(i=>[B.join(i,"platform-tools"),B.join(i,"emulator"),B.join(i,"cmdline-tools","latest","bin"),B.join(i,"tools","bin")]),...t].filter(Boolean).join(B.delimiter)};for(let i of["ANDROID_HOME","ANDROID_SDK_ROOT","JAVA_HOME","SHELL"])process.env[i]&&(n[i]=process.env[i]);return n}function ga(){let e=[process.env.ANDROID_HOME,process.env.ANDROID_SDK_ROOT];if(process.platform==="darwin")e.push(B.join(xe.homedir(),"Library","Android","sdk"));else if(process.platform==="linux")e.push(B.join(xe.homedir(),"Android","Sdk"),B.join(xe.homedir(),"Android","sdk"),"/opt/android-sdk","/usr/lib/android-sdk");else if(process.platform==="win32"){let t=process.env.LOCALAPPDATA,n=process.env.USERPROFILE||xe.homedir();e.push(t?B.join(t,"Android","Sdk"):void 0,B.join(n,"AppData","Local","Android","Sdk"))}return Array.from(new Set(e.filter(t=>!!t)))}function pp(e){return process.platform==="win32"&&!e.toLowerCase().endsWith(".exe")?`${e}.exe`:e}function ha(e,t){let n=pp(e);for(let i of ga()){let r=B.join(i,t,n);if(J.existsSync(r))return r}return n}function Aa(){return ha("adb","platform-tools")}function ya(){return ha("emulator","emulator")}function $r(e){return`"${e.replace(/\\/g,"\\\\").replace(/"/g,'\\"').replace(/%/g,"%%")}"`}function fp(){if(process.platform!=="linux")throw new Error("Linux service install requires Linux.");J.mkdirSync(Le(),{recursive:!0}),J.mkdirSync(fa(),{recursive:!0});let e=Pr(),t=Dr(),n=Object.entries(t).map(([r,o])=>`Environment=${$r(`${r}=${o}`)}`).join(`
1580
1626
  `),i=`[Unit]
1581
1627
  Description=Mach local device agent
1582
1628
  After=default.target
1583
1629
 
1584
1630
  [Service]
1585
1631
  Type=simple
1586
- ExecStart=${e.map(Er).join(" ")}
1587
- WorkingDirectory=${Er(ke.homedir())}
1632
+ ExecStart=${e.map($r).join(" ")}
1633
+ WorkingDirectory=${$r(xe.homedir())}
1588
1634
  ${n}
1589
1635
  Restart=on-failure
1590
1636
  RestartSec=5
@@ -1593,12 +1639,12 @@ StandardError=append:%h/${m.configDir}/agent.error.log
1593
1639
 
1594
1640
  [Install]
1595
1641
  WantedBy=default.target
1596
- `;return Y.writeFileSync(Ir(),i),Ir()}function ot(e,t={}){try{return st("systemctl",["--user",...e],{stdio:t.ignoreError?"ignore":"pipe"}),!0}catch(n){if(t.ignoreError)return!1;throw n}}function sp(){if(process.platform!=="win32")throw new Error("Windows agent script requires Windows.");Y.mkdirSync(Ne(),{recursive:!0});let e=$r(),[t,n,...i]=_r(),r=F.join(Ne(),"agent.log"),o=F.join(Ne(),"agent.error.log"),s=Object.entries(e).map(([d,c])=>`set "${d}=${c}"`).join(`\r
1642
+ `;return J.writeFileSync(vr(),i),vr()}function rt(e,t={}){try{return ot("systemctl",["--user",...e],{stdio:t.ignoreError?"ignore":"pipe"}),!0}catch(n){if(t.ignoreError)return!1;throw n}}function mp(){if(process.platform!=="win32")throw new Error("Windows agent script requires Windows.");J.mkdirSync(Le(),{recursive:!0});let e=Dr(),[t,n,...i]=Pr(),r=B.join(Le(),"agent.log"),o=B.join(Le(),"agent.error.log"),s=Object.entries(e).map(([d,c])=>`set "${d}=${c}"`).join(`\r
1597
1643
  `),a=i.map(d=>`"${d.replace(/"/g,'\\"')}"`).join(" "),l=`@echo off\r
1598
1644
  ${s}\r
1599
- cd /d "${ke.homedir()}"\r
1645
+ cd /d "${xe.homedir()}"\r
1600
1646
  "${t}" "${n}" ${a} >> "${r}" 2>> "${o}"\r
1601
- `;return Y.writeFileSync(wr(),l),wr()}function sn(e,t={}){try{return st("schtasks.exe",e,{stdio:t.ignoreError?"ignore":"pipe"}),!0}catch(n){if(t.ignoreError)return!1;throw n}}function ap(){if(process.platform!=="darwin")throw new Error("Background agent install currently supports macOS only.");Y.mkdirSync(Ne(),{recursive:!0}),Y.mkdirSync(ra(),{recursive:!0});let e=_r(),t=$r(),n=F.join(Ne(),"agent.log"),i=F.join(Ne(),"agent.error.log"),r=Object.entries(t).map(([a,l])=>` <key>${sa(a)}</key>
1647
+ `;return J.writeFileSync(Rr(),l),Rr()}function sn(e,t={}){try{return ot("schtasks.exe",e,{stdio:t.ignoreError?"ignore":"pipe"}),!0}catch(n){if(t.ignoreError)return!1;throw n}}function gp(){if(process.platform!=="darwin")throw new Error("Background agent install currently supports macOS only.");J.mkdirSync(Le(),{recursive:!0}),J.mkdirSync(pa(),{recursive:!0});let e=Pr(),t=Dr(),n=B.join(Le(),"agent.log"),i=B.join(Le(),"agent.error.log"),r=Object.entries(t).map(([a,l])=>` <key>${ma(a)}</key>
1602
1648
  ${rn(l)}`).join(`
1603
1649
  `),o=e.map(a=>` ${rn(a)}`).join(`
1604
1650
  `),s=`<?xml version="1.0" encoding="UTF-8"?>
@@ -1606,7 +1652,7 @@ cd /d "${ke.homedir()}"\r
1606
1652
  <plist version="1.0">
1607
1653
  <dict>
1608
1654
  <key>Label</key>
1609
- ${rn(Pt)}
1655
+ ${rn(Dt)}
1610
1656
  <key>ProgramArguments</key>
1611
1657
  <array>
1612
1658
  ${o}
@@ -1623,21 +1669,21 @@ ${r}
1623
1669
  ${rn(i)}
1624
1670
  </dict>
1625
1671
  </plist>
1626
- `;return Y.writeFileSync(Qn(),s),Qn()}function rt(e,t={}){try{return st("launchctl",e,{stdio:t.ignoreError?"ignore":"pipe"}),!0}catch(n){if(t.ignoreError)return!1;throw n}}function lp(e){return new Promise(t=>setTimeout(t,e))}function ei(e,t,n=np){return new Promise((i,r)=>{ep(e,t,{timeout:n,maxBuffer:10*1024*1024,windowsHide:!0},(o,s,a)=>{if(o){let l=a?.toString().trim();r(new Error(l||o.message));return}i(s?.toString()||"")})})}async function ua(){if(typeof fetch=="function"){let e=new AbortController,t=setTimeout(()=>e.abort(),3e3);try{return(await fetch(`${on}/health`,{signal:e.signal})).ok}catch{return!1}finally{clearTimeout(t)}}return new Promise(e=>{let t=!1,n=r=>{t||(t=!0,e(r))},i=ti.get(`${on}/health`,r=>{r.resume(),n(r.statusCode===200)});i.setTimeout(3e3,()=>{i.destroy(),n(!1)}),i.on("error",()=>n(!1))})}async function dp(e=8e3){let t=Date.now()+e;for(;Date.now()<t;){if(await ua())return!0;await lp(250)}return!1}async function pa(){return new Promise(e=>{let t=!1,n=ia.createConnection({host:"127.0.0.1",port:Je}),i=r=>{t||(t=!0,n.destroy(),e(r))};n.setTimeout(1e3),n.once("connect",()=>i(!0)),n.once("timeout",()=>i(!1)),n.once("error",()=>i(!1))})}async function Rr(){if(await dp()){j.success(ne.green("Mach agent installed and started."));return}if(await pa()){j.warn(`Mach agent service is installed, but port ${Je} is held by a process that is not answering /health.`),j.info(ne.dim(`Run \`${m.nameLower} agent stop\`, close any foreground \`${m.nameLower} agent\` terminal, then run \`${m.nameLower} agent install\` again.`));return}j.warn(`Mach agent service is installed, but it did not start listening on ${on}.`)}async function cp(){let e=ap(),t=vr();rt(["bootout",t,e],{ignoreError:!0}),rt(["bootstrap",t,e],{ignoreError:!0})||rt(["load","-w",e]),rt(["enable",`${t}/${Pt}`],{ignoreError:!0}),rt(["kickstart","-k",`${t}/${Pt}`],{ignoreError:!0}),await Rr(),j.info(ne.dim(`It will start automatically when you log in. Plist: ${e}`)),j.info(ne.dim(`Logs: ${F.join(Ne(),"agent.log")}`))}async function fa(){let e=Qn(),t=vr();rt(["bootout",t,e],{ignoreError:!0})||rt(["unload","-w",e],{ignoreError:!0})?j.success(ne.green("Mach agent service stopped.")):j.warn("Mach agent service was not loaded.")}async function up(){await fa();let e=Qn();Y.existsSync(e)&&Y.unlinkSync(e),j.success(ne.green("Mach agent service uninstalled."))}async function pp(){let e=op();ot(["daemon-reload"]),ot(["enable","--now",Ct]),await Rr(),j.info(ne.dim(`It will start automatically when you log in. Service: ${e}`)),j.info(ne.dim(`Logs: ${F.join(Ne(),"agent.log")}`))}async function fp(){ot(["stop",Ct],{ignoreError:!0})?j.success(ne.green("Mach agent service stopped.")):j.warn("Mach agent service was not running.")}async function mp(){ot(["disable","--now",Ct],{ignoreError:!0}),ot(["daemon-reload"],{ignoreError:!0});let e=Ir();Y.existsSync(e)&&Y.unlinkSync(e),ot(["daemon-reload"],{ignoreError:!0}),j.success(ne.green("Mach agent service uninstalled."))}async function gp(){let e=sp();sn(["/Create","/TN",Dt,"/SC","ONLOGON","/TR",`"${e}"`,"/RL","LIMITED","/F"]),sn(["/Run","/TN",Dt],{ignoreError:!0}),await Rr(),j.info(ne.dim(`It will start automatically when you log in. Task: ${Dt}`)),j.info(ne.dim(`Logs: ${F.join(Ne(),"agent.log")}`))}async function ma(){sn(["/End","/TN",Dt],{ignoreError:!0})?j.success(ne.green("Mach agent task stopped.")):j.warn("Mach agent task was not running.")}async function hp(){await ma(),sn(["/Delete","/TN",Dt,"/F"],{ignoreError:!0});let e=wr();Y.existsSync(e)&&Y.unlinkSync(e),j.success(ne.green("Mach agent task uninstalled."))}async function Zs(){if(process.platform==="darwin")return cp();if(process.platform==="linux")return pp();if(process.platform==="win32")return gp();throw new Error(`Background agent install is not supported on ${process.platform}.`)}async function Qs(){if(process.platform==="darwin")return fa();if(process.platform==="linux")return fp();if(process.platform==="win32")return ma();j.warn(`Background agent service control is not supported on ${process.platform}.`)}async function yp(){if(process.platform==="darwin")return up();if(process.platform==="linux")return mp();if(process.platform==="win32")return hp();j.warn(`Background agent uninstall is not supported on ${process.platform}.`)}async function bp(){let e=await ua(),t=e?!0:await pa();if(e?j.success(ne.green(`Mach agent is online at ${on}`)):t?j.warn(`Mach agent port is open, but /health did not respond. Run \`${m.nameLower} agent restart\` if the dashboard still shows offline.`):j.warn(`Mach agent is not responding at ${on}`),process.platform==="darwin"){let n=rt(["print",`${vr()}/${Pt}`],{ignoreError:!0});j.info(ne.dim(`Login service: ${n?"installed/loaded":"not loaded"}`))}else if(process.platform==="linux"){let n=ot(["is-enabled",Ct],{ignoreError:!0}),i=ot(["is-active",Ct],{ignoreError:!0});j.info(ne.dim(`Login service: ${n?"enabled":"not enabled"} / ${i?"active":"inactive"}`))}else if(process.platform==="win32"){let n=sn(["/Query","/TN",Dt],{ignoreError:!0});j.info(ne.dim(`Login task: ${n?"installed":"not installed"}`))}}async function Ap(){let e=[];try{(await ei(da(),["devices","-l"])).split(`
1627
- `).forEach(n=>{if(n.includes("List of devices")||!n.trim())return;let i=n.split(/\s+/);if(i.length<2||i[1]!=="device")return;let r=i[0],o=n.match(/model:([^\s]+)/);e.push({id:r,platform:"android",type:r.startsWith("emulator-")?"emulator":"physical",name:o?o[1].replace(/_/g," "):r,status:"online",details:n.trim()})})}catch{}try{let n=(await ei(ca(),["-list-avds"])).split(`
1628
- `).filter(r=>!!r.trim()),i=e.some(r=>r.platform==="android"&&r.id.startsWith("emulator-"));n.forEach(r=>{i||e.push({id:r,platform:"android",type:"emulator",name:r.replace(/_/g," "),status:"offline",details:`Android Virtual Device: ${r}`})})}catch{}return e}async function ga(){if(process.platform!=="darwin")return[];try{let e=await ei("/usr/bin/xcrun",["simctl","list","devices","--json"]),t=JSON.parse(e),n=[];return Object.entries(t.devices||{}).forEach(([i,r])=>{r.forEach(o=>{o.isAvailable&&n.push({id:o.udid,platform:"ios",type:"simulator",name:o.name,status:o.state?.toLowerCase()==="booted"?"online":"offline",runtime:i,details:`${o.name} (${i})`})})}),n}catch{return[]}}async function Sp(){if(process.platform!=="darwin")return[];try{let e=await ei("/usr/bin/xcrun",["devicectl","list","devices","--json-output","-"]);return(JSON.parse(e).result?.devices||[]).filter(n=>{let i=n.connectionProperties?.transportType;return i==="wired"||i==="localNetwork"}).map(n=>{let i=n.connectionProperties?.transportType,r=n.deviceProperties?.name||"iPhone";return{id:n.identifier,platform:"ios",type:"physical",name:r,status:"online",details:`${r} (${n.model?.name||n.hardwareModel||""}) - ${i}`}})}catch{return[]}}async function Ep(e){let t=await ga(),n=t.find(r=>r.id===e);if(n)return n;let i=t.filter(r=>r.status==="online");return i.length===1?i[0]:null}async function Ip(){let[e,t,n]=await Promise.all([Ap(),ga(),Sp()]);return[...e,...t,...n]}async function wp(){let e=Date.now();return Yn&&e-Yn.updatedAt<ip?Yn.targets:(Xn||(Xn=Ip().then(t=>(Yn={targets:t,updatedAt:Date.now()},t)).finally(()=>{Xn=null})),Xn)}async function ea(e){let t=[];for await(let n of e)t.push(Buffer.isBuffer(n)?n:Buffer.from(n));return t.length===0?{}:JSON.parse(Buffer.concat(t).toString("utf-8"))}async function vp(e,t){let n=await tp({method:"GET",url:e,responseType:"stream",timeout:12e4}),i=Y.createWriteStream(t);n.data.pipe(i),await new Promise((r,o)=>{i.on("finish",r),i.on("error",o)})}function ta(e,t){let n=e?.stderr?.toString?.().trim();if(n)return n;let i=e?.stdout?.toString?.().trim();return i||e?.message||t}function _p(e,t){return st("/usr/libexec/PlistBuddy",["-c",`Print :${t}`,e],{encoding:"utf-8"}).trim()}function $p(e){let t=F.join(e,"Info.plist");if(!Y.existsSync(t))throw new Error(`Could not validate iOS app executable: ${t} not found.`);let n=_p(t,"CFBundleExecutable"),i=F.join(e,n);if(!Y.existsSync(i))throw new Error(`Could not validate iOS app executable: ${i} not found.`);return i}function Rp(){return process.arch==="arm64"?"arm64":"x86_64"}function Op(e){return Y.existsSync(e)?Y.readdirSync(e).map(t=>F.join(e,t)).filter(t=>t.endsWith(".app")&&Y.statSync(t).isDirectory()):[]}function na(e,t){let n=Op(e);if(n.length===1)return n[0];if(n.length>1)throw new Error(`Multiple .app bundles found in ${t}: ${n.map(i=>F.basename(i)).join(", ")}. Mach cannot safely choose which app to install.`);return""}function Dp(e){let t=$p(e),n=Rp(),i="",r="";try{i=st("lipo",["-info",t],{encoding:"utf-8"}).trim()}catch(o){throw new Error(`Could not inspect iOS simulator app architecture for ${F.basename(e)}: ${o.message}`)}if(!new RegExp(`\\b${n}\\b`).test(i))throw new Error(`This iOS simulator artifact cannot be installed because ${F.basename(e)} does not include the ${n} simulator architecture. lipo output: ${i}. Rebuild the app with the latest Mach CLI and make sure the profile is a simulator build.`);try{r=st("/usr/bin/xcrun",["vtool","-show-build",t],{encoding:"utf-8"}).trim()}catch(o){throw new Error(`Could not inspect iOS simulator app platform for ${F.basename(e)}: ${o.message}`)}if(!/\bplatform\s+IOSSIMULATOR\b/i.test(r))throw new Error(`This iOS simulator artifact cannot be installed because ${F.basename(e)} was built for the wrong Apple platform. A simulator artifact must contain platform IOSSIMULATOR. vtool output: ${r}. Rebuild the app with the latest Mach CLI.`)}async function Pp(e,t,n){let i=n||(t.toLowerCase().includes(".apk")?"android":"ios"),r=t.toLowerCase().includes(".ipa"),o=Y.mkdtempSync(F.join(ke.tmpdir(),`${Je}-install-`)),s=F.join(o,i==="android"?"install.apk":r?"install.ipa":"install.zip");try{if(await vp(t,s),i==="android"){st(da(),["-s",e,"install","-r",s],{stdio:"pipe"});return}if(process.platform!=="darwin")throw new Error("iOS local install requires macOS.");Zn(`unzip -o ${JSON.stringify(s)} -d ${JSON.stringify(o)}`,{stdio:"pipe"});let a=F.join(o,"Payload"),l=Y.existsSync(a),d=r||l,c="";if(d?c=na(a,"Payload"):c=na(o,"the simulator artifact"),!c)throw new Error(`No .app bundle found inside the ${r?"IPA":"archive"}.`);let u=d?null:await Ep(e);if(u){try{Dp(c),st("/usr/bin/xcrun",["simctl","install",u.id,c],{stdio:"pipe"})}catch(f){throw new Error(ta(f,"iOS Simulator install failed."))}return}if(!d)throw new Error("Selected iOS Simulator was not found. Refresh Install Hub devices or boot one simulator and try again.");try{Zn(`/usr/bin/xcrun devicectl device install app --device ${JSON.stringify(e)} ${JSON.stringify(c)}`,{stdio:"pipe"})}catch(f){throw new Error(ta(f,"iOS device install failed."))}}finally{Y.rmSync(o,{recursive:!0,force:!0})}}function Cp(e,t){if(!e)throw new Error("Device id is required.");if(t==="ios"){if(process.platform!=="darwin")throw new Error("iOS Simulator launch requires macOS.");return Zn(`/usr/bin/xcrun simctl boot ${JSON.stringify(e)}`,{stdio:"pipe"}),Xs("open",["-a","Simulator"],{detached:!0,stdio:"ignore"}).unref(),"Simulator booting..."}if(t==="android")return Xs(ca(),["-avd",e],{detached:!0,stdio:"ignore",windowsHide:!0}).unref(),"Emulator booting in background...";throw new Error("Invalid platform.")}async function Tp(){process.platform!=="darwin"&&j.warn("Running on non-macOS \u2014 iOS discovery unavailable, Android only.");let e=ti.createServer((i,r)=>{if(r.setHeader("Access-Control-Allow-Origin","*"),r.setHeader("Access-Control-Allow-Methods","GET, POST, OPTIONS"),r.setHeader("Access-Control-Allow-Headers","Content-Type, Authorization"),i.method==="OPTIONS"){r.writeHead(204),r.end();return}let o=new URL(i.url||"/",`http://localhost:${Je}`);if(i.method==="GET"&&o.pathname==="/local/devices"){wp().then(s=>{r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",targets:s}))}).catch(s=>{r.writeHead(500,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:s.message}))});return}if(i.method==="GET"&&o.pathname==="/health"){r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",service:"mach-agent",port:Je,platform:process.platform}));return}if(i.method==="POST"&&o.pathname==="/install-local"){t(i,r);return}if(i.method==="POST"&&o.pathname==="/local/boot"){n(i,r);return}r.writeHead(404),r.end()}),t=async(i,r)=>{try{let{deviceId:o,artifactUrl:s,platform:a}=await ea(i);if(!o||!s){r.writeHead(400,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:"deviceId and artifactUrl are required"}));return}await Pp(o,s,a),r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",message:`Installed on ${o}`}))}catch(o){r.writeHead(500,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:o.message||"Local install failed"}))}},n=async(i,r)=>{try{let{id:o,platform:s}=await ea(i),a=Cp(o,s);r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",message:a}))}catch(o){r.writeHead(500,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:o.message||"Local device launch failed"}))}};e.listen(Je,"127.0.0.1",()=>{j.success(ne.green(`Local device agent running on http://localhost:${Je}`)),j.info(ne.dim("Keep this running while using the Install Hub on the dashboard.")),j.info(ne.dim("Press Ctrl+C to stop."))}),e.on("error",i=>{i.code==="EADDRINUSE"?j.error(`Port ${Je} is already in use \u2014 agent may already be running.`):j.error(`Agent error: ${i.message}`),process.exit(1)}),await new Promise(()=>{})}async function ha(e="start"){let t=String(e||"start").toLowerCase();if(t==="start"||t==="run"){await Tp();return}if(t==="install"){await Zs();return}if(t==="status"){await bp();return}if(t==="stop"){await Qs();return}if(t==="uninstall"){await yp();return}if(t==="restart"){await Qs(),await Zs();return}j.error(`Unknown agent action: ${e}`),j.info(ne.dim(`Use: ${m.nameLower} agent start | install | status | restart | stop | uninstall`)),process.exit(1)}import{text as Np,password as xp,spinner as Lp,isCancel as Aa}from"@clack/prompts";import Cr from"chalk";import an from"fs";import ya from"path";import kp from"os";var Or=ya.join(kp.homedir(),m.configDir),Dr=ya.join(Or,"config.json");function Pr(){if(!an.existsSync(Dr))return{};try{return JSON.parse(an.readFileSync(Dr,"utf-8"))}catch{return{}}}function ba(e){an.existsSync(Or)||an.mkdirSync(Or,{recursive:!0});let n={...Pr(),...e};an.writeFileSync(Dr,JSON.stringify(n,null,2))}async function Sa(){let e=Pr(),t=await Np({message:"Enter your email:",placeholder:"user@example.com",initialValue:e.lastLoginEmail,validate(r){if(r.length===0)return"Email is required!"}});if(Aa(t))return;let n=await xp({message:"Enter your password:",validate(r){if(r.length===0)return"Password is required!"}});if(Aa(n))return;let i=Lp();i.start("Authenticating...");try{let o=await(await fetch(`${Qe}/login`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({username:t,password:n})})).json();o.status==="success"&&o.user.token?(uo({id:o.user.id,email:t,token:o.user.token,refreshToken:o.user.refreshToken}),ba({lastLoginEmail:t}),i.stop(Cr.green("Login successful!"))):i.stop(Cr.red("Login failed: "+(o.message||"Unknown error")))}catch(r){i.stop(Cr.red("Network error: "+r.message))}}import{log as ni,outro as Mp}from"@clack/prompts";import ln from"chalk";async function Ea(){let e=po(),t=`${m.envPrefix}TOKEN`;e?ni.success(ln.green(`Logged out. Removed saved credentials from ~/${m.configDir}/credentials.json.`)):ni.warn(ln.yellow(`No saved ${m.name} credentials found.`)),process.env[t]&&(ni.warn(ln.yellow(`${t} is still set in this shell. Commands will continue to authenticate with that token until you unset it.`)),ni.info(ln.dim(`Run: unset ${t}`))),Mp(ln.blue("---"))}import{outro as Up,select as Fp,spinner as Bp,isCancel as jp}from"@clack/prompts";import ii from"chalk";import Tr from"fs";import Hp from"path";var Ia=e=>e==="1234567890"||e==="ABC123DEFG"||e==="XXXXXXXXXX"?"":typeof e=="string"?e:"",Gp=()=>process.versions.node.split(".")[0]||"24";async function wa(){if(!be()){console.log(ii.red(`You are not logged in. Run \`${m.nameLower} login\` first.`));return}let t=Bp();t.start("Fetching projects...");try{let{data:n}=await $.get("/projects");if(t.stop("Projects loaded."),n.status!=="success"||!n.projects||n.projects.length===0){console.log(ii.yellow(`No projects found. Run \`${m.nameLower} init\` to create one.`));return}let i=n.projects.map(g=>({value:g.projectId,label:`${g.name} (${g.slug})`})),r=await Fp({message:"Select a project to link:",options:i});if(jp(r))return;let o=Hp.join(process.cwd(),m.configFileName),s={};if(Tr.existsSync(o))try{s=JSON.parse(Tr.readFileSync(o,"utf-8"))}catch{}let a=n.projects.find(g=>g.projectId===r),l=s.android?.package||It("android"),d=s.ios?.bundleIdentifier||It("ios"),c=s.android||{},u=s.submit?.production?.android||{},f=s.submit?.production?.ios||{},p={projectId:r,framework:$e(s.framework)||wt,name:a?.name,slug:a?.slug,nodeVersion:s.nodeVersion||Gp(),scheme:a?.slug?.toLowerCase()||"app",android:{...c,package:l||"",versionCode:c.versionCode||"auto"},ios:{bundleIdentifier:d||"",buildNumber:s.ios?.buildNumber||"auto"},build:{development:{environment:"development",distribution:"development"},staging:{environment:"staging",distribution:"internal"},production:{environment:"production",distribution:"store"}},submit:{production:{android:{...u,track:u.track||"internal",releaseStatus:u.releaseStatus||"completed"},ios:{ascAppId:Ia(f.ascAppId),appleTeamId:Ia(f.appleTeamId)}}}};Tr.writeFileSync(o,JSON.stringify(p,null,2)),Up(ii.green(`Linked to project ${p.name} (${p.slug})`))}catch(n){t.stop(ii.red("Error fetching projects: "+n.message))}}import{outro as Vp,text as ri,select as zp,spinner as Kp,isCancel as dn}from"@clack/prompts";import cn from"chalk";import Wp from"fs";import qp from"path";import{randomUUID as Jp}from"crypto";var Yp=()=>process.versions.node.split(".")[0]||"24";async function va(){if(!be()){console.log(cn.red(`You are not logged in. Run \`${m.nameLower} login\` first.`));return}let t=await ri({message:"Project Name:",placeholder:"My Awesome App",validate(a){if(a.length===0)return"Name is required!"}});if(dn(t))return;let n=await ri({message:"Project Slug (URL friendly):",placeholder:"my-awesome-app",validate(a){if(a.length===0)return"Slug is required!";if(!/^[a-z0-9-]+$/.test(a))return"Slug must be lowercase alphanumeric with dashes."}});if(dn(n))return;let i=await zp({message:"Platform:",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"},{value:"web",label:"Web"},{value:"all",label:"All Platforms"}]});if(dn(i))return;let r="";if(i==="android"||i==="all"){let a=It("android");if(r=await ri({message:"Android Package Name:",initialValue:a||"",placeholder:"com.example.app",validate(l){if(l.length===0)return"Package name is required for Android!"}}),dn(r))return}let o="";if(i==="ios"||i==="all"){let a=It("ios");if(o=await ri({message:"iOS Bundle Identifier:",initialValue:a||"",placeholder:"com.example.app",validate(l){if(l.length===0)return"Bundle ID is required for iOS!"}}),dn(o))return}let s=Kp();s.start("Creating project...");try{let a=Jp(),d={projectId:a,name:t,slug:n,storageType:"managed",platforms:i==="all"?["android","ios","web"]:[i]},{data:c}=await $.post("/projects",d);if(c.status==="success"){s.stop(cn.green("Project created successfully!"));let u=qp.join(process.cwd(),m.configFileName);Wp.writeFileSync(u,JSON.stringify({projectId:a,framework:wt,name:t,slug:n,nodeVersion:Yp(),...r?{android:{package:r,versionCode:"auto"}}:{},...o?{ios:{bundleIdentifier:o,buildNumber:"auto"}}:{},build:{development:{environment:"development",distribution:"development"},staging:{environment:"staging",distribution:"internal"},production:{environment:"production",distribution:"store"}},submit:{production:{android:{track:"internal",releaseStatus:"completed"},ios:{ascAppId:"",appleTeamId:""}}}},null,2)),Vp(cn.green(`Initialized project ${t} and linked locally!`))}else s.stop(cn.red("creation failed: "+c.message))}catch(a){s.stop(cn.red("Network error: "+a.message))}}import{spinner as kr,log as Se}from"@clack/prompts";import un from"chalk";import oi from"fs";import _a from"path";function Nr(e,t,n,i){let r=e?.response?.status,o=e?.response?.data?.message||e?.response?.data?.error,s=i?` ${i}`:"";return r===401?`Not logged in or token expired while trying to ${n}${s}. Run \`${m.nameLower} login\` and try again.`:r===403?[`Permission denied while trying to ${n}${s}.`,o?`API says: ${o}.`:void 0,`Current Mach account/token does not have access to project ${t}.`,`Run \`${m.nameLower} login\` with the correct account, or ask a project owner to grant access.`].filter(Boolean).join(" "):r===404?[`Project or environment endpoint was not found while trying to ${n}${s}.`,`Project ID: ${t}.`,o?`API says: ${o}.`:void 0].filter(Boolean).join(" "):r?`Failed to ${n}${s}: ${o||`API returned HTTP ${r}`}`:`Network error while trying to ${n}${s}: ${e?.message||"Unknown error"}`}function Xp(e){let t=String(e??"");return t===""?'""':/^[A-Za-z0-9_./:@%+-]+$/.test(t)?t:JSON.stringify(t)}function Zp(e,t){return`${[`# Generated by ${m.nameLower} env pull --environment ${t}`,"# Do not commit this file.","",...Object.keys(e).sort((i,r)=>i.localeCompare(r)).map(i=>`${i}=${Xp(e[i])}`)].join(`
1672
+ `;return J.writeFileSync(ei(),s),ei()}function it(e,t={}){try{return ot("launchctl",e,{stdio:t.ignoreError?"ignore":"pipe"}),!0}catch(n){if(t.ignoreError)return!1;throw n}}function hp(e){return new Promise(t=>setTimeout(t,e))}function ti(e,t,n=cp){return new Promise((i,r)=>{lp(e,t,{timeout:n,maxBuffer:10*1024*1024,windowsHide:!0},(o,s,a)=>{if(o){let l=a?.toString().trim();r(new Error(l||o.message));return}i(s?.toString()||"")})})}async function Sa(){if(typeof fetch=="function"){let e=new AbortController,t=setTimeout(()=>e.abort(),3e3);try{return(await fetch(`${on}/health`,{signal:e.signal})).ok}catch{return!1}finally{clearTimeout(t)}}return new Promise(e=>{let t=!1,n=r=>{t||(t=!0,e(r))},i=ni.get(`${on}/health`,r=>{r.resume(),n(r.statusCode===200)});i.setTimeout(3e3,()=>{i.destroy(),n(!1)}),i.on("error",()=>n(!1))})}async function Ap(e=8e3){let t=Date.now()+e;for(;Date.now()<t;){if(await Sa())return!0;await hp(250)}return!1}async function ba(){return new Promise(e=>{let t=!1,n=ua.createConnection({host:"127.0.0.1",port:Ye}),i=r=>{t||(t=!0,n.destroy(),e(r))};n.setTimeout(1e3),n.once("connect",()=>i(!0)),n.once("timeout",()=>i(!1)),n.once("error",()=>i(!1))})}async function Cr(){if(await Ap()){H.success(te.green("Mach agent installed and started."));return}if(await ba()){H.warn(`Mach agent service is installed, but port ${Ye} is held by a process that is not answering /health.`),H.info(te.dim(`Run \`${m.nameLower} agent stop\`, close any foreground \`${m.nameLower} agent\` terminal, then run \`${m.nameLower} agent install\` again.`));return}H.warn(`Mach agent service is installed, but it did not start listening on ${on}.`)}async function yp(){let e=gp(),t=Or();it(["bootout",t,e],{ignoreError:!0}),it(["bootstrap",t,e],{ignoreError:!0})||it(["load","-w",e]),it(["enable",`${t}/${Dt}`],{ignoreError:!0}),it(["kickstart","-k",`${t}/${Dt}`],{ignoreError:!0}),await Cr(),H.info(te.dim(`It will start automatically when you log in. Plist: ${e}`)),H.info(te.dim(`Logs: ${B.join(Le(),"agent.log")}`))}async function Ea(){let e=ei(),t=Or();it(["bootout",t,e],{ignoreError:!0})||it(["unload","-w",e],{ignoreError:!0})?H.success(te.green("Mach agent service stopped.")):H.warn("Mach agent service was not loaded.")}async function Sp(){await Ea();let e=ei();J.existsSync(e)&&J.unlinkSync(e),H.success(te.green("Mach agent service uninstalled."))}async function bp(){let e=fp();rt(["daemon-reload"]),rt(["enable","--now",Ct]),await Cr(),H.info(te.dim(`It will start automatically when you log in. Service: ${e}`)),H.info(te.dim(`Logs: ${B.join(Le(),"agent.log")}`))}async function Ep(){rt(["stop",Ct],{ignoreError:!0})?H.success(te.green("Mach agent service stopped.")):H.warn("Mach agent service was not running.")}async function Ip(){rt(["disable","--now",Ct],{ignoreError:!0}),rt(["daemon-reload"],{ignoreError:!0});let e=vr();J.existsSync(e)&&J.unlinkSync(e),rt(["daemon-reload"],{ignoreError:!0}),H.success(te.green("Mach agent service uninstalled."))}async function _p(){let e=mp();sn(["/Create","/TN",Pt,"/SC","ONLOGON","/TR",`"${e}"`,"/RL","LIMITED","/F"]),sn(["/Run","/TN",Pt],{ignoreError:!0}),await Cr(),H.info(te.dim(`It will start automatically when you log in. Task: ${Pt}`)),H.info(te.dim(`Logs: ${B.join(Le(),"agent.log")}`))}async function Ia(){sn(["/End","/TN",Pt],{ignoreError:!0})?H.success(te.green("Mach agent task stopped.")):H.warn("Mach agent task was not running.")}async function wp(){await Ia(),sn(["/Delete","/TN",Pt,"/F"],{ignoreError:!0});let e=Rr();J.existsSync(e)&&J.unlinkSync(e),H.success(te.green("Mach agent task uninstalled."))}async function sa(){if(process.platform==="darwin")return yp();if(process.platform==="linux")return bp();if(process.platform==="win32")return _p();throw new Error(`Background agent install is not supported on ${process.platform}.`)}async function aa(){if(process.platform==="darwin")return Ea();if(process.platform==="linux")return Ep();if(process.platform==="win32")return Ia();H.warn(`Background agent service control is not supported on ${process.platform}.`)}async function $p(){if(process.platform==="darwin")return Sp();if(process.platform==="linux")return Ip();if(process.platform==="win32")return wp();H.warn(`Background agent uninstall is not supported on ${process.platform}.`)}async function vp(){let e=await Sa(),t=e?!0:await ba();if(e?H.success(te.green(`Mach agent is online at ${on}`)):t?H.warn(`Mach agent port is open, but /health did not respond. Run \`${m.nameLower} agent restart\` if the dashboard still shows offline.`):H.warn(`Mach agent is not responding at ${on}`),process.platform==="darwin"){let n=it(["print",`${Or()}/${Dt}`],{ignoreError:!0});H.info(te.dim(`Login service: ${n?"installed/loaded":"not loaded"}`))}else if(process.platform==="linux"){let n=rt(["is-enabled",Ct],{ignoreError:!0}),i=rt(["is-active",Ct],{ignoreError:!0});H.info(te.dim(`Login service: ${n?"enabled":"not enabled"} / ${i?"active":"inactive"}`))}else if(process.platform==="win32"){let n=sn(["/Query","/TN",Pt],{ignoreError:!0});H.info(te.dim(`Login task: ${n?"installed":"not installed"}`))}}async function Rp(){let e=[];try{(await ti(Aa(),["devices","-l"])).split(`
1673
+ `).forEach(n=>{if(n.includes("List of devices")||!n.trim())return;let i=n.split(/\s+/);if(i.length<2||i[1]!=="device")return;let r=i[0],o=n.match(/model:([^\s]+)/);e.push({id:r,platform:"android",type:r.startsWith("emulator-")?"emulator":"physical",name:o?o[1].replace(/_/g," "):r,status:"online",details:n.trim()})})}catch{}try{let n=(await ti(ya(),["-list-avds"])).split(`
1674
+ `).filter(r=>!!r.trim()),i=e.some(r=>r.platform==="android"&&r.id.startsWith("emulator-"));n.forEach(r=>{i||e.push({id:r,platform:"android",type:"emulator",name:r.replace(/_/g," "),status:"offline",details:`Android Virtual Device: ${r}`})})}catch{}return e}async function _a(){if(process.platform!=="darwin")return[];try{let e=await ti("/usr/bin/xcrun",["simctl","list","devices","--json"]),t=JSON.parse(e),n=[];return Object.entries(t.devices||{}).forEach(([i,r])=>{r.forEach(o=>{o.isAvailable&&n.push({id:o.udid,platform:"ios",type:"simulator",name:o.name,status:o.state?.toLowerCase()==="booted"?"online":"offline",runtime:i,details:`${o.name} (${i})`})})}),n}catch{return[]}}async function Op(){if(process.platform!=="darwin")return[];try{let e=await ti("/usr/bin/xcrun",["devicectl","list","devices","--json-output","-"]);return(JSON.parse(e).result?.devices||[]).filter(n=>{let i=n.connectionProperties?.transportType;return i==="wired"||i==="localNetwork"}).map(n=>{let i=n.connectionProperties?.transportType,r=n.deviceProperties?.name||"iPhone";return{id:n.identifier,platform:"ios",type:"physical",name:r,status:"online",details:`${r} (${n.model?.name||n.hardwareModel||""}) - ${i}`}})}catch{return[]}}async function Pp(e){let t=await _a(),n=t.find(r=>r.id===e);if(n)return n;let i=t.filter(r=>r.status==="online");return i.length===1?i[0]:null}async function Dp(){let[e,t,n]=await Promise.all([Rp(),_a(),Op()]);return[...e,...t,...n]}async function Cp(){let e=Date.now();return Xn&&e-Xn.updatedAt<up?Xn.targets:(Zn||(Zn=Dp().then(t=>(Xn={targets:t,updatedAt:Date.now()},t)).finally(()=>{Zn=null})),Zn)}async function la(e){let t=[];for await(let n of e)t.push(Buffer.isBuffer(n)?n:Buffer.from(n));return t.length===0?{}:JSON.parse(Buffer.concat(t).toString("utf-8"))}async function Tp(e,t){let n=await dp({method:"GET",url:e,responseType:"stream",timeout:12e4}),i=J.createWriteStream(t);n.data.pipe(i),await new Promise((r,o)=>{i.on("finish",r),i.on("error",o)})}function da(e,t){let n=e?.stderr?.toString?.().trim();if(n)return n;let i=e?.stdout?.toString?.().trim();return i||e?.message||t}function kp(e,t){return ot("/usr/libexec/PlistBuddy",["-c",`Print :${t}`,e],{encoding:"utf-8"}).trim()}function Np(e){let t=B.join(e,"Info.plist");if(!J.existsSync(t))throw new Error(`Could not validate iOS app executable: ${t} not found.`);let n=kp(t,"CFBundleExecutable"),i=B.join(e,n);if(!J.existsSync(i))throw new Error(`Could not validate iOS app executable: ${i} not found.`);return i}function xp(){return process.arch==="arm64"?"arm64":"x86_64"}function Lp(e){return J.existsSync(e)?J.readdirSync(e).map(t=>B.join(e,t)).filter(t=>t.endsWith(".app")&&J.statSync(t).isDirectory()):[]}function ca(e,t){let n=Lp(e);if(n.length===1)return n[0];if(n.length>1)throw new Error(`Multiple .app bundles found in ${t}: ${n.map(i=>B.basename(i)).join(", ")}. Mach cannot safely choose which app to install.`);return""}function Mp(e){let t=Np(e),n=xp(),i="",r="";try{i=ot("lipo",["-info",t],{encoding:"utf-8"}).trim()}catch(o){throw new Error(`Could not inspect iOS simulator app architecture for ${B.basename(e)}: ${o.message}`)}if(!new RegExp(`\\b${n}\\b`).test(i))throw new Error(`This iOS simulator artifact cannot be installed because ${B.basename(e)} does not include the ${n} simulator architecture. lipo output: ${i}. Rebuild the app with the latest Mach CLI and make sure the profile is a simulator build.`);try{r=ot("/usr/bin/xcrun",["vtool","-show-build",t],{encoding:"utf-8"}).trim()}catch(o){throw new Error(`Could not inspect iOS simulator app platform for ${B.basename(e)}: ${o.message}`)}if(!/\bplatform\s+IOSSIMULATOR\b/i.test(r))throw new Error(`This iOS simulator artifact cannot be installed because ${B.basename(e)} was built for the wrong Apple platform. A simulator artifact must contain platform IOSSIMULATOR. vtool output: ${r}. Rebuild the app with the latest Mach CLI.`)}async function Up(e,t,n){let i=n||(t.toLowerCase().includes(".apk")?"android":"ios"),r=t.toLowerCase().includes(".ipa"),o=J.mkdtempSync(B.join(xe.tmpdir(),`${Ye}-install-`)),s=B.join(o,i==="android"?"install.apk":r?"install.ipa":"install.zip");try{if(await Tp(t,s),i==="android"){ot(Aa(),["-s",e,"install","-r",s],{stdio:"pipe"});return}if(process.platform!=="darwin")throw new Error("iOS local install requires macOS.");Qn(`unzip -o ${JSON.stringify(s)} -d ${JSON.stringify(o)}`,{stdio:"pipe"});let a=B.join(o,"Payload"),l=J.existsSync(a),d=r||l,c="";if(d?c=ca(a,"Payload"):c=ca(o,"the simulator artifact"),!c)throw new Error(`No .app bundle found inside the ${r?"IPA":"archive"}.`);let u=d?null:await Pp(e);if(u){try{Mp(c),ot("/usr/bin/xcrun",["simctl","install",u.id,c],{stdio:"pipe"})}catch(f){throw new Error(da(f,"iOS Simulator install failed."))}return}if(!d)throw new Error("Selected iOS Simulator was not found. Refresh Install Hub devices or boot one simulator and try again.");try{Qn(`/usr/bin/xcrun devicectl device install app --device ${JSON.stringify(e)} ${JSON.stringify(c)}`,{stdio:"pipe"})}catch(f){throw new Error(da(f,"iOS device install failed."))}}finally{J.rmSync(o,{recursive:!0,force:!0})}}function Fp(e,t){if(!e)throw new Error("Device id is required.");if(t==="ios"){if(process.platform!=="darwin")throw new Error("iOS Simulator launch requires macOS.");return Qn(`/usr/bin/xcrun simctl boot ${JSON.stringify(e)}`,{stdio:"pipe"}),oa("open",["-a","Simulator"],{detached:!0,stdio:"ignore"}).unref(),"Simulator booting..."}if(t==="android")return oa(ya(),["-avd",e],{detached:!0,stdio:"ignore",windowsHide:!0}).unref(),"Emulator booting in background...";throw new Error("Invalid platform.")}async function Bp(){process.platform!=="darwin"&&H.warn("Running on non-macOS \u2014 iOS discovery unavailable, Android only.");let e=ni.createServer((i,r)=>{if(r.setHeader("Access-Control-Allow-Origin","*"),r.setHeader("Access-Control-Allow-Methods","GET, POST, OPTIONS"),r.setHeader("Access-Control-Allow-Headers","Content-Type, Authorization"),i.method==="OPTIONS"){r.writeHead(204),r.end();return}let o=new URL(i.url||"/",`http://localhost:${Ye}`);if(i.method==="GET"&&o.pathname==="/local/devices"){Cp().then(s=>{r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",targets:s}))}).catch(s=>{r.writeHead(500,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:s.message}))});return}if(i.method==="GET"&&o.pathname==="/health"){r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",service:"mach-agent",port:Ye,platform:process.platform}));return}if(i.method==="POST"&&o.pathname==="/install-local"){t(i,r);return}if(i.method==="POST"&&o.pathname==="/local/boot"){n(i,r);return}r.writeHead(404),r.end()}),t=async(i,r)=>{try{let{deviceId:o,artifactUrl:s,platform:a}=await la(i);if(!o||!s){r.writeHead(400,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:"deviceId and artifactUrl are required"}));return}await Up(o,s,a),r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",message:`Installed on ${o}`}))}catch(o){r.writeHead(500,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:o.message||"Local install failed"}))}},n=async(i,r)=>{try{let{id:o,platform:s}=await la(i),a=Fp(o,s);r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",message:a}))}catch(o){r.writeHead(500,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:o.message||"Local device launch failed"}))}};e.listen(Ye,"127.0.0.1",()=>{H.success(te.green(`Local device agent running on http://localhost:${Ye}`)),H.info(te.dim("Keep this running while using the Install Hub on the dashboard.")),H.info(te.dim("Press Ctrl+C to stop."))}),e.on("error",i=>{i.code==="EADDRINUSE"?H.error(`Port ${Ye} is already in use \u2014 agent may already be running.`):H.error(`Agent error: ${i.message}`),process.exit(1)}),await new Promise(()=>{})}async function wa(e="start"){let t=String(e||"start").toLowerCase();if(t==="start"||t==="run"){await Bp();return}if(t==="install"){await sa();return}if(t==="status"){await vp();return}if(t==="stop"){await aa();return}if(t==="uninstall"){await $p();return}if(t==="restart"){await aa(),await sa();return}H.error(`Unknown agent action: ${e}`),H.info(te.dim(`Use: ${m.nameLower} agent start | install | status | restart | stop | uninstall`)),process.exit(1)}import{text as jp,password as Gp,spinner as Vp,isCancel as Ra}from"@clack/prompts";import xr from"chalk";import an from"fs";import $a from"path";import Hp from"os";var Tr=$a.join(Hp.homedir(),m.configDir),kr=$a.join(Tr,"config.json");function Nr(){if(!an.existsSync(kr))return{};try{return JSON.parse(an.readFileSync(kr,"utf-8"))}catch{return{}}}function va(e){an.existsSync(Tr)||an.mkdirSync(Tr,{recursive:!0});let n={...Nr(),...e};an.writeFileSync(kr,JSON.stringify(n,null,2))}async function Oa(){let e=Nr(),t=await jp({message:"Enter your email:",placeholder:"user@example.com",initialValue:e.lastLoginEmail,validate(r){if(r.length===0)return"Email is required!"}});if(Ra(t))return;let n=await Gp({message:"Enter your password:",validate(r){if(r.length===0)return"Password is required!"}});if(Ra(n))return;let i=Vp();i.start("Authenticating...");try{let o=await(await fetch(`${Ze}/login`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({username:t,password:n})})).json();o.status==="success"&&o.user.token?(go({id:o.user.id,email:t,token:o.user.token,refreshToken:o.user.refreshToken}),va({lastLoginEmail:t}),i.stop(xr.green("Login successful!"))):i.stop(xr.red("Login failed: "+(o.message||"Unknown error")))}catch(r){i.stop(xr.red("Network error: "+r.message))}}import{log as ii,outro as zp}from"@clack/prompts";import ln from"chalk";async function Pa(){let e=ho(),t=`${m.envPrefix}TOKEN`;e?ii.success(ln.green(`Logged out. Removed saved credentials from ~/${m.configDir}/credentials.json.`)):ii.warn(ln.yellow(`No saved ${m.name} credentials found.`)),process.env[t]&&(ii.warn(ln.yellow(`${t} is still set in this shell. Commands will continue to authenticate with that token until you unset it.`)),ii.info(ln.dim(`Run: unset ${t}`))),zp(ln.blue("---"))}import{outro as Kp,select as Wp,spinner as Yp,isCancel as qp}from"@clack/prompts";import ri from"chalk";import Lr from"fs";import Jp from"path";var Da=e=>e==="1234567890"||e==="ABC123DEFG"||e==="XXXXXXXXXX"?"":typeof e=="string"?e:"",Xp=()=>process.versions.node.split(".")[0]||"24";async function Ca(){if(!Ae()){console.log(ri.red(`You are not logged in. Run \`${m.nameLower} login\` first.`));return}let t=Yp();t.start("Fetching projects...");try{let{data:n}=await v.get("/projects");if(t.stop("Projects loaded."),n.status!=="success"||!n.projects||n.projects.length===0){console.log(ri.yellow(`No projects found. Run \`${m.nameLower} init\` to create one.`));return}let i=n.projects.map(g=>({value:g.projectId,label:`${g.name} (${g.slug})`})),r=await Wp({message:"Select a project to link:",options:i});if(qp(r))return;let o=Jp.join(process.cwd(),m.configFileName),s={};if(Lr.existsSync(o))try{s=JSON.parse(Lr.readFileSync(o,"utf-8"))}catch{}let a=n.projects.find(g=>g.projectId===r),l=s.android?.package||Et("android"),d=s.ios?.bundleIdentifier||Et("ios"),c=s.android||{},u=s.submit?.production?.android||{},f=s.submit?.production?.ios||{},p={projectId:r,framework:Re(s.framework)||It,...s.appDirectory?{appDirectory:s.appDirectory}:{},name:a?.name,slug:a?.slug,nodeVersion:s.nodeVersion||Xp(),scheme:a?.slug?.toLowerCase()||"app",android:{...c,package:l||"",versionCode:c.versionCode||"auto"},ios:{bundleIdentifier:d||"",buildNumber:s.ios?.buildNumber||"auto"},build:{development:{environment:"development",distribution:"development"},staging:{environment:"staging",distribution:"internal"},production:{environment:"production",distribution:"store"}},submit:{production:{android:{...u,track:u.track||"internal",releaseStatus:u.releaseStatus||"completed"},ios:{ascAppId:Da(f.ascAppId),appleTeamId:Da(f.appleTeamId)}}}};Lr.writeFileSync(o,JSON.stringify(p,null,2)),Kp(ri.green(`Linked to project ${p.name} (${p.slug})`))}catch(n){t.stop(ri.red("Error fetching projects: "+n.message))}}import{outro as Zp,text as oi,select as Qp,spinner as ef,isCancel as dn}from"@clack/prompts";import cn from"chalk";import tf from"fs";import nf from"path";import{randomUUID as rf}from"crypto";var of=()=>process.versions.node.split(".")[0]||"24";async function Ta(){if(!Ae()){console.log(cn.red(`You are not logged in. Run \`${m.nameLower} login\` first.`));return}let t=await oi({message:"Project Name:",placeholder:"My Awesome App",validate(a){if(a.length===0)return"Name is required!"}});if(dn(t))return;let n=await oi({message:"Project Slug (URL friendly):",placeholder:"my-awesome-app",validate(a){if(a.length===0)return"Slug is required!";if(!/^[a-z0-9-]+$/.test(a))return"Slug must be lowercase alphanumeric with dashes."}});if(dn(n))return;let i=await Qp({message:"Platform:",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"},{value:"web",label:"Web"},{value:"all",label:"All Platforms"}]});if(dn(i))return;let r="";if(i==="android"||i==="all"){let a=Et("android");if(r=await oi({message:"Android Package Name:",initialValue:a||"",placeholder:"com.example.app",validate(l){if(l.length===0)return"Package name is required for Android!"}}),dn(r))return}let o="";if(i==="ios"||i==="all"){let a=Et("ios");if(o=await oi({message:"iOS Bundle Identifier:",initialValue:a||"",placeholder:"com.example.app",validate(l){if(l.length===0)return"Bundle ID is required for iOS!"}}),dn(o))return}let s=ef();s.start("Creating project...");try{let a=rf(),d={projectId:a,name:t,slug:n,storageType:"managed",platforms:i==="all"?["android","ios","web"]:[i]},{data:c}=await v.post("/projects",d);if(c.status==="success"){s.stop(cn.green("Project created successfully!"));let u=nf.join(process.cwd(),m.configFileName);tf.writeFileSync(u,JSON.stringify({projectId:a,framework:It,name:t,slug:n,nodeVersion:of(),...r?{android:{package:r,versionCode:"auto"}}:{},...o?{ios:{bundleIdentifier:o,buildNumber:"auto"}}:{},build:{development:{environment:"development",distribution:"development"},staging:{environment:"staging",distribution:"internal"},production:{environment:"production",distribution:"store"}},submit:{production:{android:{track:"internal",releaseStatus:"completed"},ios:{ascAppId:"",appleTeamId:""}}}},null,2)),Zp(cn.green(`Initialized project ${t} and linked locally!`))}else s.stop(cn.red("creation failed: "+c.message))}catch(a){s.stop(cn.red("Network error: "+a.message))}}import{spinner as Mr,log as Ee}from"@clack/prompts";import un from"chalk";import si from"fs";import ka from"path";function Ur(e,t,n,i){let r=e?.response?.status,o=e?.response?.data?.message||e?.response?.data?.error,s=i?` ${i}`:"";return r===401?`Not logged in or token expired while trying to ${n}${s}. Run \`${m.nameLower} login\` and try again.`:r===403?[`Permission denied while trying to ${n}${s}.`,o?`API says: ${o}.`:void 0,`Current Mach account/token does not have access to project ${t}.`,`Run \`${m.nameLower} login\` with the correct account, or ask a project owner to grant access.`].filter(Boolean).join(" "):r===404?[`Project or environment endpoint was not found while trying to ${n}${s}.`,`Project ID: ${t}.`,o?`API says: ${o}.`:void 0].filter(Boolean).join(" "):r?`Failed to ${n}${s}: ${o||`API returned HTTP ${r}`}`:`Network error while trying to ${n}${s}: ${e?.message||"Unknown error"}`}function sf(e){let t=String(e??"");return t===""?'""':/^[A-Za-z0-9_./:@%+-]+$/.test(t)?t:JSON.stringify(t)}function af(e,t){return`${[`# Generated by ${m.nameLower} env pull --environment ${t}`,"# Do not commit this file.","",...Object.keys(e).sort((i,r)=>i.localeCompare(r)).map(i=>`${i}=${sf(e[i])}`)].join(`
1629
1675
  `)}
1630
- `}async function $a(e,t,n={}){let i=be();if(!i){Se.error(`You are not logged in. Run \`${m.nameLower} login\` first.`);return}let r=_a.join(process.cwd(),m.configFileName);if(!oi.existsSync(r)){Se.error(`No ${m.configFileName} found. Run \`${m.nameLower} init\` or \`${m.nameLower} link\` first.`);return}let o;try{o=JSON.parse(oi.readFileSync(r,"utf-8"))}catch{Se.error(`Failed to parse ${m.configFileName}`);return}let{projectId:s}=o;if(!s){Se.error(`${m.configFileName} is missing projectId.`);return}e==="set"?await Qp(s,t,i):e==="list"?await ef(s,i):e==="pull"||e==="download"||e==="export"?await tf(s,n):Se.error(`Unknown env action: ${e}. Use 'set', 'list', or 'pull'.`)}async function Qp(e,t,n){if(t.length===0){Se.error(`Usage: ${m.nameLower} env set KEY=VALUE [KEY2=VALUE2 ...]`);return}let i=kr();i.start("Setting environment variables...");let r=0,o=0;for(let s of t){let[a,...l]=s.split("="),d=l.join("=");if(!a||d===void 0){Se.warn(`Invalid format for argument: ${s}. Expected KEY=VALUE.`),o++;continue}try{let c={key:a.trim(),value:d,type:"env",environment:"global",visibility:"secret"},{data:u}=await $.post(`/projects/${e}/secrets`,c);u.status==="success"?r++:(Se.error(`Failed to set ${a}: ${u.message}`),o++)}catch(c){Se.error(Nr(c,e,"set",a)),o++}}i.stop(`Set ${r} variable(s). ${o>0?`${o} failed.`:""}`)}async function ef(e,t){let n=kr();n.start("Fetching environment variables...");try{let{data:i}=await $.get(`/projects/${e}/secrets`);if(i.status==="success"){n.stop("Fetched variables.");let r=i.secrets||[];r.length===0?Se.info("No environment variables found for this project."):(Se.info(un.bold("Environment Variables (Global & Scoped):")),r.forEach(o=>{let s=o.visibility==="plain"?o.value:"********";console.log(` ${un.cyan(o.key)} = ${s} ${un.gray(`[${o.environment}]`)}`)}))}else n.stop(un.red(`Failed to fetch variables: ${i.message}`))}catch(i){n.stop("Failed to fetch variables."),Se.error(Nr(i,e,"list"))}}async function tf(e,t){let n=(t.environment||"development").trim(),i=t.out||".env.local",r=_a.resolve(process.cwd(),i);if(oi.existsSync(r)&&!t.overwrite){Se.error(`${i} already exists. Re-run with \`--overwrite\` to replace it.`);return}let o=kr();o.start(`Downloading ${n} environment variables...`);try{let{data:s}=await $.get(`/projects/${e}/secrets/export?env=${encodeURIComponent(n)}`);if(s.status!=="success"){o.stop(un.red(`Failed to download variables: ${s.message||"Unknown API error"}`));return}let a=s.secrets||{},l=Zp(a,n);oi.writeFileSync(r,l,{encoding:"utf-8",mode:384}),o.stop(`Wrote ${Object.keys(a).length} variable(s) to ${i}.`)}catch(s){o.stop("Failed to download variables."),Se.error(Nr(s,e,"pull"))}}import{cancel as nf,confirm as Ua,isCancel as li,log as Re,note as rf,outro as Tt,select as of,spinner as sf,text as af}from"@clack/prompts";import xe from"chalk";import z from"fs";import te from"path";import{spawnSync as Fa}from"child_process";import Mr from"crypto";import lf from"axios";import Oa from"crypto";import pn from"fs";import fn from"path";var Ra=e=>String(e||"").replace(/\\/g,"/").replace(/^\/+/,"");function Da(e,t){let n=fn.join(e,"metadata.json");if(!pn.existsSync(n))throw new Error(`Expo export did not create ${n}.`);let r=JSON.parse(pn.readFileSync(n,"utf-8"))?.fileMetadata?.[t],o=Ra(r?.bundle);if(!o)throw new Error(`Expo export metadata is missing the ${t} launch bundle.`);let s=new Set,a=(Array.isArray(r?.assets)?r.assets:[]).flatMap(l=>{let d=Ra(l?.path);return!d||s.has(d)?[]:(s.add(d),[{path:d,ext:String(l?.ext||"").replace(/^\./,"")||void 0}])});for(let l of[o,...a.map(d=>d.path)])if(!pn.existsSync(fn.join(e,l)))throw new Error(`Expo export metadata references a missing file: ${l}`);return{bundle:o,assets:a}}function Pa(e,t){return[fn.join(e,t.bundle),...t.assets.map(n=>fn.join(e,n.path)),fn.join(e,"metadata.json")]}function xr(e){return Oa.createHash("md5").update(pn.readFileSync(e)).digest("hex")}function Lr(e){return Oa.createHash("sha256").update(pn.readFileSync(e)).digest("base64url")}function Ca(e){let t=String(e||"").replace(/^\./,"").trim().toLowerCase();return t?`.${t}`:void 0}function si(e,t=!1){if(t)return"application/javascript";switch(String(e||"").replace(/^\./,"").trim().toLowerCase()){case"js":case"bundle":case"hbc":return"application/javascript";case"json":return"application/json";case"png":return"image/png";case"jpg":case"jpeg":return"image/jpeg";case"gif":return"image/gif";case"webp":return"image/webp";case"svg":return"image/svg+xml";case"ttf":return"font/ttf";case"otf":return"font/otf";case"woff":return"font/woff";case"woff2":return"font/woff2";case"mp3":return"audio/mpeg";case"m4a":return"audio/mp4";case"aac":return"audio/aac";case"wav":return"audio/wav";case"mp4":return"video/mp4";case"mov":return"video/quicktime";case"pdf":return"application/pdf";default:return"application/octet-stream"}}function Ta(e){if(!e||typeof e!="object"||Array.isArray(e))return;let{_internal:t,hooks:n,mods:i,...r}=e;return r}var ue=`${m.npmScope}/mach/expo-plugin`,Ur=()=>process.stdin.isTTY&&process.stdout.isTTY,di=()=>{nf("Operation cancelled."),process.exit(0)},Ae=e=>{if(typeof e!="string")return;let t=e.trim();return t.length>0?t:void 0};function kt(e){if(!z.existsSync(e))return null;try{return JSON.parse(z.readFileSync(e,"utf-8"))}catch{return null}}function Ba(e,t){z.writeFileSync(e,`${JSON.stringify(t,null,2)}
1631
- `)}function mn(){let e=ce();return e?.projectId||(Re.error(`No ${m.configFileName} found or missing projectId. Run \`${m.nameLower} link\` first.`),process.exit(1)),e}function df(e){Ba(te.join(process.cwd(),m.configFileName),e)}function Fr(e){let t=$e(e.framework);if(t)return t;let n=kt(te.join(process.cwd(),"package.json"))||{},i={...n.dependencies||{},...n.devDependencies||{}};return i.expo?"expo":(i["react-native"],"react-native")}function Br(e,t){let n=String(e||"").trim().toLowerCase();return n==="expo"||n==="expo-updates"?"expo-updates":n==="react-native"||n==="mach-react-native"||n==="rn"?"mach-react-native":"expo-updates"}function ja(e){if(e==="mach-react-native")throw new Error("mach-react-native is reserved for a future Mach-native OTA client. Use expo-updates for Expo and bare React Native projects.");return e}function jr(e){let t=String(e||"all").trim().toLowerCase();if(t==="ios")return["ios"];if(t==="android")return["android"];if(t==="all"||t==="both")return["ios","android"];throw new Error("Platform must be ios, android, or all.")}function cf(e){return z.existsSync(te.join(e,"pnpm-lock.yaml"))?{command:"pnpm",args:["add","-D",`${m.npmScope}/mach@latest`],label:`pnpm add -D ${m.npmScope}/mach@latest`}:z.existsSync(te.join(e,"yarn.lock"))?{command:"yarn",args:["add","-D",`${m.npmScope}/mach@latest`],label:`yarn add -D ${m.npmScope}/mach@latest`}:z.existsSync(te.join(e,"bun.lockb"))||z.existsSync(te.join(e,"bun.lock"))?{command:"bun",args:["add","-d",`${m.npmScope}/mach@latest`],label:`bun add -d ${m.npmScope}/mach@latest`}:{command:"npm",args:["install","--save-dev",`${m.npmScope}/mach@latest`],label:`npm install --save-dev ${m.npmScope}/mach@latest`}}function ci(e){let t=kt(te.join(e,"package.json"))||{};return!!(t.dependencies?.[`${m.npmScope}/mach`]||t.devDependencies?.[`${m.npmScope}/mach`])}function ai(e){let t=kt(te.join(e,"node_modules",m.npmScope,"mach","package.json"));return Ae(t?.version)}function Ha(e,t){let n=o=>o.replace(/^v/,"").split(/[.-]/).slice(0,3).map(s=>Number.parseInt(s,10)||0),i=n(e),r=n(t);for(let o=0;o<3;o+=1)if(i[o]!==r[o])return i[o]>r[o]?1:-1;return 0}function uf(e){let t=ai(e);return!ci(e)||!t||Ha(t,et)<0}function pf(e){let t=cf(e),n=Fa(t.command,t.args,{cwd:e,stdio:"inherit",env:{...process.env}});if(n.error)return{ok:!1,label:t.label,error:n.error.message};if(n.status!==0)return{ok:!1,label:t.label,error:`${t.command} exited with code ${n.status}`};let i=ai(e),r=!!i&&Ha(i,et)>=0;return{ok:ci(e)&&r,label:t.label,error:r?void 0:`installed ${i||"unknown"}, requires ${et} or newer`}}function ka(e){if(typeof e=="string")return e;if(Array.isArray(e)&&typeof e[0]=="string")return e[0]}function ff(e,t){let n=["app.config.json","app.json"].find(a=>z.existsSync(te.join(e,a)));if(!n)return null;let i=te.join(e,n),r=kt(i);if(!r)return null;let o=r.expo&&typeof r.expo=="object"?r.expo:r;if(t==="react-native"&&n==="app.json"&&(!r.expo||typeof r.expo!="object")){let a=kt(te.join(e,"package.json"))||{},l=Ae(r.displayName)||Ae(r.name)||Ae(a.name)||"App",d=(Ae(a.name)||l).toLowerCase().replace(/[^a-z0-9-]+/g,"-").replace(/^-+|-+$/g,"")||"app";r.expo={name:l,slug:d,version:Ae(a.version)||"1.0.0"},o=r.expo}let s=Array.isArray(o.plugins)?o.plugins:[];return s.some(a=>ka(a)===ue)||(o.plugins=[...s.filter(a=>{let l=ka(a);return l!=="./plugins/withMachDeepLinks"&&l!=="plugins/withMachDeepLinks"}),ue],Ba(i,r)),n}function mf(e){let t=["app.config.ts","app.config.js"].find(p=>z.existsSync(te.join(e,p)));if(!t)return"missing";let n=te.join(e,t),i=z.readFileSync(n,"utf-8");if(i.includes(ue))return"already";let r=/(['"`])(?:\.\/)?plugins\/withMachDeepLinks\1/g;if(r.test(i))return z.writeFileSync(n,i.replace(r,(p,g)=>`${g}${ue}${g}`)),"inserted";let o=/(^[ \t]*)plugins\s*:\s*\[([\s\S]*?)\]/m.exec(i);if(!o||o.index===void 0)return"manual";let s=i.includes(`\r
1676
+ `}async function Na(e,t,n={}){let i=Ae();if(!i){Ee.error(`You are not logged in. Run \`${m.nameLower} login\` first.`);return}let r=ka.join(process.cwd(),m.configFileName);if(!si.existsSync(r)){Ee.error(`No ${m.configFileName} found. Run \`${m.nameLower} init\` or \`${m.nameLower} link\` first.`);return}let o;try{o=JSON.parse(si.readFileSync(r,"utf-8"))}catch{Ee.error(`Failed to parse ${m.configFileName}`);return}let{projectId:s}=o;if(!s){Ee.error(`${m.configFileName} is missing projectId.`);return}e==="set"?await lf(s,t,i):e==="list"?await df(s,i):e==="pull"||e==="download"||e==="export"?await cf(s,n):Ee.error(`Unknown env action: ${e}. Use 'set', 'list', or 'pull'.`)}async function lf(e,t,n){if(t.length===0){Ee.error(`Usage: ${m.nameLower} env set KEY=VALUE [KEY2=VALUE2 ...]`);return}let i=Mr();i.start("Setting environment variables...");let r=0,o=0;for(let s of t){let[a,...l]=s.split("="),d=l.join("=");if(!a||d===void 0){Ee.warn(`Invalid format for argument: ${s}. Expected KEY=VALUE.`),o++;continue}try{let c={key:a.trim(),value:d,type:"env",environment:"global",visibility:"secret"},{data:u}=await v.post(`/projects/${e}/secrets`,c);u.status==="success"?r++:(Ee.error(`Failed to set ${a}: ${u.message}`),o++)}catch(c){Ee.error(Ur(c,e,"set",a)),o++}}i.stop(`Set ${r} variable(s). ${o>0?`${o} failed.`:""}`)}async function df(e,t){let n=Mr();n.start("Fetching environment variables...");try{let{data:i}=await v.get(`/projects/${e}/secrets`);if(i.status==="success"){n.stop("Fetched variables.");let r=i.secrets||[];r.length===0?Ee.info("No environment variables found for this project."):(Ee.info(un.bold("Environment Variables (Global & Scoped):")),r.forEach(o=>{let s=o.visibility==="plain"?o.value:"********";console.log(` ${un.cyan(o.key)} = ${s} ${un.gray(`[${o.environment}]`)}`)}))}else n.stop(un.red(`Failed to fetch variables: ${i.message}`))}catch(i){n.stop("Failed to fetch variables."),Ee.error(Ur(i,e,"list"))}}async function cf(e,t){let n=(t.environment||"development").trim(),i=t.out||".env.local",r=ka.resolve(process.cwd(),i);if(si.existsSync(r)&&!t.overwrite){Ee.error(`${i} already exists. Re-run with \`--overwrite\` to replace it.`);return}let o=Mr();o.start(`Downloading ${n} environment variables...`);try{let{data:s}=await v.get(`/projects/${e}/secrets/export?env=${encodeURIComponent(n)}`);if(s.status!=="success"){o.stop(un.red(`Failed to download variables: ${s.message||"Unknown API error"}`));return}let a=s.secrets||{},l=af(a,n);si.writeFileSync(r,l,{encoding:"utf-8",mode:384}),o.stop(`Wrote ${Object.keys(a).length} variable(s) to ${i}.`)}catch(s){o.stop("Failed to download variables."),Ee.error(Ur(s,e,"pull"))}}import{cancel as uf,confirm as Ka,isCancel as di,log as Oe,note as pf,outro as Tt,select as ff,spinner as mf,text as gf}from"@clack/prompts";import Me from"chalk";import z from"fs";import ee from"path";import{spawnSync as Wa}from"child_process";import Hr from"crypto";import hf from"axios";import La from"crypto";import pn from"fs";import fn from"path";var xa=e=>String(e||"").replace(/\\/g,"/").replace(/^\/+/,"");function Ma(e,t){let n=fn.join(e,"metadata.json");if(!pn.existsSync(n))throw new Error(`Expo export did not create ${n}.`);let r=JSON.parse(pn.readFileSync(n,"utf-8"))?.fileMetadata?.[t],o=xa(r?.bundle);if(!o)throw new Error(`Expo export metadata is missing the ${t} launch bundle.`);let s=new Set,a=(Array.isArray(r?.assets)?r.assets:[]).flatMap(l=>{let d=xa(l?.path);return!d||s.has(d)?[]:(s.add(d),[{path:d,ext:String(l?.ext||"").replace(/^\./,"")||void 0}])});for(let l of[o,...a.map(d=>d.path)])if(!pn.existsSync(fn.join(e,l)))throw new Error(`Expo export metadata references a missing file: ${l}`);return{bundle:o,assets:a}}function Ua(e,t){return[fn.join(e,t.bundle),...t.assets.map(n=>fn.join(e,n.path)),fn.join(e,"metadata.json")]}function Fr(e){return La.createHash("md5").update(pn.readFileSync(e)).digest("hex")}function Br(e){return La.createHash("sha256").update(pn.readFileSync(e)).digest("base64url")}function Fa(e){let t=String(e||"").replace(/^\./,"").trim().toLowerCase();return t?`.${t}`:void 0}function ai(e,t=!1){if(t)return"application/javascript";switch(String(e||"").replace(/^\./,"").trim().toLowerCase()){case"js":case"bundle":case"hbc":return"application/javascript";case"json":return"application/json";case"png":return"image/png";case"jpg":case"jpeg":return"image/jpeg";case"gif":return"image/gif";case"webp":return"image/webp";case"svg":return"image/svg+xml";case"ttf":return"font/ttf";case"otf":return"font/otf";case"woff":return"font/woff";case"woff2":return"font/woff2";case"mp3":return"audio/mpeg";case"m4a":return"audio/mp4";case"aac":return"audio/aac";case"wav":return"audio/wav";case"mp4":return"video/mp4";case"mov":return"video/quicktime";case"pdf":return"application/pdf";default:return"application/octet-stream"}}function Ba(e){if(!e||typeof e!="object"||Array.isArray(e))return;let{_internal:t,hooks:n,mods:i,...r}=e;return r}var ce=`${m.npmScope}/mach/expo-plugin`,jr=()=>process.stdin.isTTY&&process.stdout.isTTY,ci=()=>{uf("Operation cancelled."),process.exit(0)},ye=e=>{if(typeof e!="string")return;let t=e.trim();return t.length>0?t:void 0};function kt(e){if(!z.existsSync(e))return null;try{return JSON.parse(z.readFileSync(e,"utf-8"))}catch{return null}}function Ya(e,t){z.writeFileSync(e,`${JSON.stringify(t,null,2)}
1677
+ `)}function mn(){let e=de();return e?.projectId||(Oe.error(`No ${m.configFileName} found or missing projectId. Run \`${m.nameLower} link\` first.`),process.exit(1)),e}function Af(e){Ya(ee.join(process.cwd(),m.configFileName),e)}function Gr(e){let t=Re(e.framework);if(t)return t;let n=kt(ee.join(process.cwd(),"package.json"))||{},i={...n.dependencies||{},...n.devDependencies||{}};return i.expo?"expo":(i["react-native"],"react-native")}function Vr(e,t){let n=String(e||"").trim().toLowerCase();return n==="expo"||n==="expo-updates"?"expo-updates":n==="react-native"||n==="mach-react-native"||n==="rn"?"mach-react-native":"expo-updates"}function qa(e){if(e==="mach-react-native")throw new Error("mach-react-native is reserved for a future Mach-native OTA client. Use expo-updates for Expo and bare React Native projects.");return e}function zr(e){let t=String(e||"all").trim().toLowerCase();if(t==="ios")return["ios"];if(t==="android")return["android"];if(t==="all"||t==="both")return["ios","android"];throw new Error("Platform must be ios, android, or all.")}function yf(e){return z.existsSync(ee.join(e,"pnpm-lock.yaml"))?{command:"pnpm",args:["add","-D",`${m.npmScope}/mach@latest`],label:`pnpm add -D ${m.npmScope}/mach@latest`}:z.existsSync(ee.join(e,"yarn.lock"))?{command:"yarn",args:["add","-D",`${m.npmScope}/mach@latest`],label:`yarn add -D ${m.npmScope}/mach@latest`}:z.existsSync(ee.join(e,"bun.lockb"))||z.existsSync(ee.join(e,"bun.lock"))?{command:"bun",args:["add","-d",`${m.npmScope}/mach@latest`],label:`bun add -d ${m.npmScope}/mach@latest`}:{command:"npm",args:["install","--save-dev",`${m.npmScope}/mach@latest`],label:`npm install --save-dev ${m.npmScope}/mach@latest`}}function ui(e){let t=kt(ee.join(e,"package.json"))||{};return!!(t.dependencies?.[`${m.npmScope}/mach`]||t.devDependencies?.[`${m.npmScope}/mach`])}function li(e){let t=kt(ee.join(e,"node_modules",m.npmScope,"mach","package.json"));return ye(t?.version)}function Ja(e,t){let n=o=>o.replace(/^v/,"").split(/[.-]/).slice(0,3).map(s=>Number.parseInt(s,10)||0),i=n(e),r=n(t);for(let o=0;o<3;o+=1)if(i[o]!==r[o])return i[o]>r[o]?1:-1;return 0}function Sf(e){let t=li(e);return!ui(e)||!t||Ja(t,Qe)<0}function bf(e){let t=yf(e),n=Wa(t.command,t.args,{cwd:e,stdio:"inherit",env:{...process.env}});if(n.error)return{ok:!1,label:t.label,error:n.error.message};if(n.status!==0)return{ok:!1,label:t.label,error:`${t.command} exited with code ${n.status}`};let i=li(e),r=!!i&&Ja(i,Qe)>=0;return{ok:ui(e)&&r,label:t.label,error:r?void 0:`installed ${i||"unknown"}, requires ${Qe} or newer`}}function Ha(e){if(typeof e=="string")return e;if(Array.isArray(e)&&typeof e[0]=="string")return e[0]}function Ef(e,t){let n=["app.config.json","app.json"].find(a=>z.existsSync(ee.join(e,a)));if(!n)return null;let i=ee.join(e,n),r=kt(i);if(!r)return null;let o=r.expo&&typeof r.expo=="object"?r.expo:r;if(t==="react-native"&&n==="app.json"&&(!r.expo||typeof r.expo!="object")){let a=kt(ee.join(e,"package.json"))||{},l=ye(r.displayName)||ye(r.name)||ye(a.name)||"App",d=(ye(a.name)||l).toLowerCase().replace(/[^a-z0-9-]+/g,"-").replace(/^-+|-+$/g,"")||"app";r.expo={name:l,slug:d,version:ye(a.version)||"1.0.0"},o=r.expo}let s=Array.isArray(o.plugins)?o.plugins:[];return s.some(a=>Ha(a)===ce)||(o.plugins=[...s.filter(a=>{let l=Ha(a);return l!=="./plugins/withMachDeepLinks"&&l!=="plugins/withMachDeepLinks"}),ce],Ya(i,r)),n}function If(e){let t=["app.config.ts","app.config.js"].find(p=>z.existsSync(ee.join(e,p)));if(!t)return"missing";let n=ee.join(e,t),i=z.readFileSync(n,"utf-8");if(i.includes(ce))return"already";let r=/(['"`])(?:\.\/)?plugins\/withMachDeepLinks\1/g;if(r.test(i))return z.writeFileSync(n,i.replace(r,(p,g)=>`${g}${ce}${g}`)),"inserted";let o=/(^[ \t]*)plugins\s*:\s*\[([\s\S]*?)\]/m.exec(i);if(!o||o.index===void 0)return"manual";let s=i.includes(`\r
1632
1678
  `)?`\r
1633
1679
  `:`
1634
- `,a=o[1]||"",l=o[2]||"",c=l.match(/\r?\n([ \t]+)\S/)?.[1]||`${a} `,u=l.trim().length===0?`${s}${c}'${ue}',${s}${a}`:l.includes(`
1635
- `)||l.includes("\r")?`${s}${c}'${ue}',${l}`:`${s}${c}'${ue}',${s}${c}${l.trim()}${s}${a}`,f=`${o[0].slice(0,o[0].indexOf("[")+1)}${u}]`;return z.writeFileSync(n,`${i.slice(0,o.index)}${f}${i.slice(o.index+o[0].length)}`),"inserted"}async function gf(e,t,n){let i=[];if(uf(e)){let o=ai(e),s=!!(n.installPlugin||n.yes);if(!s&&!n.skipInstall&&Ur()){let a=await Ua({message:o?`Update the local ${m.npmScope}/mach Expo plugin (${o} \u2192 ${et})?`:`Install ${m.npmScope}/mach locally so Expo can use ${ue}?`,initialValue:!0});li(a)&&di(),s=!!a}if(s&&!n.skipInstall){let a=pf(e);a.ok?i.push(`Installed a compatible ${ue} with ${a.label}.`):i.push(`Could not install ${m.npmScope}/mach with ${a.label}: ${a.error||"unknown error"}.`)}else i.push(`Install ${m.npmScope}/mach@${et} or newer in this app so Expo can resolve ${ue}.`)}else i.push(`Local ${ue} is compatible (${ai(e)}).`);let r=mf(e);if(r==="already"&&i.push(`Expo config already includes ${ue}.`),r==="inserted"&&i.push(`Expo config updated to include ${ue}.`),r==="manual"&&i.push(`Add "${ue}" to the plugins array in app.config.ts/app.config.js.`),r==="missing"){let o=ff(e,t);o?i.push(`${o} updated to include ${ue}.`):i.push(`Add "${ue}" to your Expo config plugins array.`)}return i}async function Na(e,t){if(t.skipInstall)return!1;if(t.yes)return!0;if(!Ur())return!1;let n=await Ua({message:e,initialValue:!0});return li(n)&&di(),!!n}async function hf(e,t,n){let i=[];if(t==="react-native"&&!ft(e,"expo"))if(await Na("Install Expo Modules required by the Mach OTA runtime? This updates package and native project files.",n)){let o=fo(e);if(!o.ok||!ft(e,"expo"))throw new Error(`Expo Modules installation failed: ${o.error||o.command}`);i.push("Installed and configured Expo Modules for the existing React Native project.")}else i.push("Expo Modules are required. Run `npx install-expo-modules@latest`, then run `mach ota setup` again.");if(!ft(e,"expo-updates"))if(await Na("Install the expo-updates runtime?",n)){let o=mo(e);if(!o.ok||!ft(e,"expo-updates"))throw new Error(`expo-updates installation failed: ${o.error||o.command}`);i.push("Installed the Expo-compatible expo-updates version.")}else i.push("Install expo-updates with `npx expo install expo-updates`, then run `mach ota setup` again.");return i}async function xa(e,t,n,i,r){if(t)return t;if(r||!Ur()){if(i)throw new Error(`${e.replace(/:$/,"")} is required.`);return}let o=await af({message:e,placeholder:n,validate(s){if(i&&s.trim().length===0)return"Required."}});return li(o)&&di(),Ae(o)}function Hr(e,t,n){return Kt(e,{runtimeVersion:t.runtimeVersion,framework:$e(t.framework)||$e(e.framework),platform:n})}function yf(e){let t=zt(process.cwd(),e);if(!t)throw new Error(`Resolved Expo OTA configuration does not match this publish: Expo config could not be resolved. Run \`mach ota setup\` to update ${ue}, then create a new native build if its embedded runtime changes.`);let n=[];if(t.runtimeVersion!==e.runtimeVersion&&n.push(`runtime is ${t.runtimeVersion||"missing"} (expected ${e.runtimeVersion})`),t.channel!==e.channel&&n.push(`channel is ${t.channel||"missing"} (expected ${e.channel})`),t.url!==e.url&&n.push(`URL is ${t.url||"missing"} (expected ${e.url})`),n.length>0)throw new Error(`Resolved Expo OTA configuration does not match this publish: ${n.join("; ")}. Run \`mach ota setup\` to update ${ue}, then create a new native build if its embedded runtime changes.`);return t}function bf(e){return Mr.createHash("sha256").update(z.readFileSync(e)).digest("hex")}function Af(e){let t=te.extname(e).toLowerCase();return t===".json"?"application/json":t===".js"||t===".bundle"||t===".hbc"?"application/javascript":t===".map"?"application/json":t===".png"?"image/png":t===".jpg"||t===".jpeg"?"image/jpeg":t===".webp"?"image/webp":t===".gif"?"image/gif":t===".svg"?"image/svg+xml":t===".ttf"?"font/ttf":t===".otf"?"font/otf":t===".woff"?"font/woff":t===".woff2"?"font/woff2":"application/octet-stream"}function Ga(e){let t=[];if(!z.existsSync(e))return t;for(let n of z.readdirSync(e)){let i=te.join(e,n),r=z.statSync(i);r.isDirectory()?t.push(...Ga(i)):r.isFile()&&t.push(i)}return t}function Sf(e,t){let n=e.filter(i=>{let r=i.toLowerCase();return r.endsWith(".map")?!1:r.endsWith(".js")||r.endsWith(".bundle")||r.endsWith(".hbc")});return n.find(i=>i.toLowerCase().includes(t))||n.sort((i,r)=>z.statSync(r).size-z.statSync(i).size)[0]}async function La(e){let t=await $.post("/ota/upload-url",{projectId:e.projectId,updateId:e.updateId,platform:e.platform,fileName:e.fileName,contentType:e.contentType});if(t.data.status!=="success")throw new Error(t.data.message||`Could not create upload URL for ${e.fileName}`);let n=z.statSync(e.filePath).size;return await lf.put(t.data.uploadUrl,z.createReadStream(e.filePath),{headers:{"Content-Type":e.contentType,"Content-Length":n},maxBodyLength:1/0,maxContentLength:1/0}),{key:t.data.key,url:t.data.publicUrl,contentType:e.contentType,hash:bf(e.filePath),size:n}}function Va(e,t,n,i={}){let r=Fa(e,t,{cwd:n,stdio:"inherit",env:{...process.env,CI:process.env.CI||"1",EXPO_NO_TELEMETRY:"1",...i}});if(r.error)throw new Error(r.error.message);if(r.status!==0)throw new Error(`${e} ${t.join(" ")} exited with code ${r.status}`)}function Ef(e,t,n,i,r){Va("npx",["expo","export","--platform",e,"--output-dir",t],process.cwd(),{MACH_OTA_RUNTIME_VERSION:n,MACH_OTA_CHANNEL:i,MACH_OTA_URL:r})}function If(e,t){let n=e==="ios"?"main.jsbundle":"index.android.bundle",r=["index.js","index.ts","index.tsx"].find(s=>z.existsSync(te.join(process.cwd(),s)))||"index.js",o=te.join(t,"assets");z.mkdirSync(o,{recursive:!0}),Va("npx",["react-native","bundle","--platform",e,"--dev","false","--entry-file",r,"--bundle-output",te.join(t,n),"--assets-dest",o],process.cwd())}async function wf(e){let t=e.config.projectId,n=`ota_${Date.now()}_${e.platform}_${Mr.randomUUID().slice(0,8)}`,i=te.join(process.cwd(),".mach","ota",n,e.platform);z.rmSync(i,{recursive:!0,force:!0}),z.mkdirSync(i,{recursive:!0}),e.engine==="expo-updates"?Ef(e.platform,i,e.runtimeVersion,e.channel,e.config.ota?.url||""):If(e.platform,i);let r=e.engine==="expo-updates"?Da(i,e.platform):void 0,o=r?Pa(i,r):Ga(i),s=r?te.join(i,r.bundle):Sf(o,e.platform);if(!s)throw new Error(`Could not find a ${e.platform} JS bundle in ${i}.`);let a=new Map((r?.assets||[]).map(w=>[w.path,w])),l=[];for(let w of o){let L=te.relative(i,w).replace(/\\/g,"/"),_=a.get(L),H=w===s?"application/javascript":_?si(_.ext):Af(w);l.push({filePath:w,relative:L,uploaded:await La({projectId:t,updateId:n,platform:e.platform,filePath:w,fileName:L,contentType:H})})}let d=l.find(w=>w.filePath===s),c=e.engine==="expo-updates"?Mr.randomUUID():void 0,u=e.engine==="expo-updates"?Ta(e.expoConfig):void 0;if(e.engine==="expo-updates"&&(!u||Object.keys(u).length===0))throw new Error("Could not resolve the public Expo config required by the OTA manifest. Run `mach ota verify` and try again.");let f=r?r.assets.map(w=>{let L=l.find(_=>_.relative===w.path);if(!L)throw new Error(`Could not find uploaded Expo asset ${w.path}.`);return{key:xr(L.filePath),url:L.uploaded.url,contentType:si(w.ext),fileExtension:Ca(w.ext),hash:Lr(L.filePath),size:L.uploaded.size}}):l.filter(w=>w.filePath!==s&&!w.relative.endsWith(".map")).map(w=>({key:w.relative,url:w.uploaded.url,contentType:w.uploaded.contentType,hash:w.uploaded.hash,size:w.uploaded.size})),p=r?{key:xr(d.filePath),url:d.uploaded.url,contentType:si(void 0,!0),hash:Lr(d.filePath),size:d.uploaded.size}:{key:te.basename(d.relative),url:d.uploaded.url,contentType:d.uploaded.contentType,hash:d.uploaded.hash,size:d.uploaded.size},g={id:c||n,createdAt:new Date().toISOString(),runtimeVersion:e.runtimeVersion,launchAsset:p,assets:f,metadata:{projectId:t,channel:e.channel,...e.message?{message:e.message}:{},engine:e.engine},extra:{...u?{expoClient:u}:{},mach:{projectId:t,updateId:n,...c?{expoUpdateId:c}:{},channel:e.channel,platform:e.platform}}},h=te.join(i,"mach-manifest.json");z.writeFileSync(h,JSON.stringify(g,null,2));let y=await La({projectId:t,updateId:n,platform:e.platform,filePath:h,fileName:"manifest.json",contentType:"application/json"}),b=await $.post("/ota/publish",{projectId:t,updateId:n,expoUpdateId:c,channelName:e.channel,runtimeVersion:e.runtimeVersion,platform:e.platform,manifestKey:y.key,message:e.message,launchAsset:p,assets:f});if(b.data.status!=="success")throw new Error(b.data.message||`Failed to publish ${e.platform} OTA update.`);return b.data.update}async function vf(e){let t=mn(),n=$e(e.framework)||Fr(t),i;try{i=ja(Br(e.engine,n))}catch(f){Re.error(f.message),process.exit(1)}let r=!!e.yes,o=await xa("OTA channel:",Ae(e.channel||e.branch||t.ota?.channel)||"production","production",!0,r),s=`${Qe.replace(/\/$/,"")}/api/ota/expo/${t.projectId}`,a=Ae(e.url||t.ota?.url),l=a?.includes("/api/ota/react-native/")?void 0:a,d=await xa("Mach OTA update URL:",l||s,s,!0,r);t.framework=n;let c={...t.ota||{},enabled:!0,engine:i,channel:o,url:d,deploymentUrl:d,runtimeVersionPolicy:t.ota?.runtimeVersionPolicy||"appVersion"};delete c.statsUrl,t.ota=c,delete t.update,df(t);let u=[`${m.configFileName} updated.`];if(u.push(...await hf(process.cwd(),n,e)),u.push(...await gf(process.cwd(),n,e)),n==="react-native"&&ft(process.cwd(),"expo")&&ft(process.cwd(),"expo-updates")&&ci(process.cwd())){let f=jr(e.platform||"all"),p=Li(process.cwd()).filter(g=>f.includes(g));p.length===0&&u.push("No matching committed ios/android project was found for native configuration sync.");for(let g of p){let h=Hr(t,e,g),b=go({cwd:process.cwd(),platforms:[g],runtimeVersion:h,channel:o,url:d}).find(w=>!w.ok);if(b)throw new Error(`Could not synchronize ${g} Expo Updates configuration: ${b.error||b.command}`);u.push(`Synchronized ${g} native Expo Updates configuration for runtime ${h}.`)}}u.push("Create and install one new native build after initial OTA setup. Existing app binaries keep their embedded update URL."),rf(u.map(f=>`- ${f}`).join(`
1636
- `),"OTA setup"),await za({...e,action:"verify"})}async function _f(e){Et();let t=mn(),n=$e(e.framework)||Fr(t),i;try{i=ja(Br(e.engine||t.ota?.engine,n))}catch(a){Re.error(`${a.message} Run \`mach ota setup\` to migrate this project.`),process.exit(1)}let r=Ae(e.channel||e.branch||t.ota?.channel)||"production",o=jr(e.platform||"all"),s=sf();s.start(`Publishing OTA update (${o.join("+")}, ${r})`);try{let a=[];for(let l of o){let d=Hr(t,e,l),c=yf({platform:l,runtimeVersion:d,channel:r,url:Ae(t.ota?.url)||""});s.message(`Exporting and uploading ${l} OTA bundle for runtime ${d}...`),a.push(await wf({config:t,engine:i,platform:l,channel:r,runtimeVersion:d,message:e.message,expoConfig:c.expoConfig}))}if(s.stop("OTA update published."),e.json)Re.info(JSON.stringify({status:"success",updates:a},null,2));else{let l=Array.from(new Set(a.map(d=>d.runtimeVersion).filter(Boolean)));Tt(xe.green(`\u2713 OTA update live on "${r}" for runtime ${l.join(", ")||"unknown"}.`));for(let d of a)Re.info(xe.dim(`${d.platform}: ${d.updateId}`))}}catch(a){s.stop("OTA publish failed."),Re.error(a.response?.data?.message||a.message),process.exit(1)}}async function za(e){let t=mn(),n=$e(e.framework)||Fr(t),i=Br(e.engine||t.ota?.engine,n),r=[],o=t.ota;if(r.push(o?.enabled?{level:"pass",message:"mach.config.json has ota.enabled."}:{level:"fail",message:"mach.config.json is missing ota.enabled. Run `mach ota setup`."}),r.push(o?.url?{level:"pass",message:`OTA URL configured: ${o.url}`}:{level:"fail",message:"OTA URL is missing. Run `mach ota setup`."}),r.push(o?.channel?{level:"pass",message:`Default channel: ${o.channel}`}:{level:"warn",message:"No default OTA channel configured; publish will use production."}),r.push(o?.runtimeVersionPolicy||o?.runtimeVersion?{level:"pass",message:"Runtime version policy configured."}:{level:"warn",message:"No explicit runtime policy configured; Mach will use Expo runtimeVersion or package.json version."}),i==="expo-updates"){let a=kt(te.join(process.cwd(),"package.json"))||{},l={...a.dependencies||{},...a.devDependencies||{}};n==="react-native"&&r.push(l.expo?{level:"pass",message:"Expo Modules are installed for the bare React Native project."}:{level:"fail",message:"Expo Modules are missing. Run `mach ota setup` to install the bare React Native OTA runtime."}),r.push(l["expo-updates"]?{level:"pass",message:"expo-updates is installed."}:{level:"fail",message:"expo-updates is missing. Run `mach ota setup`."}),r.push(ci(process.cwd())?{level:"pass",message:`${m.npmScope}/mach is installed locally for the Expo plugin.`}:{level:"fail",message:`${m.npmScope}/mach is not installed locally; run \`mach ota setup\`.`});let d=jr(e.platform||"all"),c=Ae(e.channel||e.branch||o?.channel)||"production",u=Ae(o?.url)||"",f=d.map(g=>{let h=Hr(t,e,g);return{platform:g,runtimeVersion:h,delivery:zt(process.cwd(),{platform:g,runtimeVersion:h,channel:c,url:u})}}),p=f[0]?.delivery;if(p){let g=p.expoConfig.updates?.enabled!==!1,h=Ae(p.expoConfig.updates?.checkAutomatically)?.toUpperCase()||"ON_LOAD";r.push(p.url===o?.url?{level:"pass",message:"Expo Updates URL resolves to Mach."}:{level:"warn",message:`Expo Updates URL resolves to ${p.url||"none"} instead of ${o?.url||"the Mach OTA URL"}.`}),r.push(p.channel===c?{level:"pass",message:`Expo update channel header resolves to ${c}.`}:{level:"warn",message:`Expo update channel header is ${p.channel||"not set"}; install the latest ${m.npmScope}/mach package and rebuild.`}),r.push(g?{level:"pass",message:"Expo Updates is enabled."}:{level:"fail",message:"Expo config has updates.enabled=false, so this app cannot receive OTA updates."}),r.push(h!=="NEVER"&&h!=="ON_ERROR_RECOVERY"?{level:"pass",message:`Expo checks for updates automatically (${h}).`}:{level:"fail",message:`Expo checkAutomatically is ${h}; use ON_LOAD to receive Mach updates when the app starts.`})}else r.push({level:"fail",message:`Could not resolve Expo config. Confirm ${ue} is present and run \`mach ota setup\` again.`});for(let{platform:g,runtimeVersion:h,delivery:y}of f)r.push(y?.runtimeVersion===h?{level:"pass",message:`${g} Expo runtime resolves to ${h}.`}:{level:"fail",message:`${g} Expo runtime resolves to ${y?.runtimeVersion||"none"} instead of ${h}. Run \`mach ota setup\`, then rebuild the app.`});if(n==="react-native"){let g=d,h=Li(process.cwd()).filter(b=>g.includes(b)),y=ho(process.cwd());if(h.includes("android")){let b=!!(y.androidManifest&&y.androidStrings)&&z.readFileSync(y.androidManifest,"utf-8").includes("expo.modules.updates.EXPO_UPDATE_URL")&&z.readFileSync(y.androidStrings,"utf-8").includes("expo_runtime_version");r.push(b?{level:"pass",message:"Android native Expo Updates configuration is synchronized."}:{level:"fail",message:"Android native Expo Updates configuration is missing. Run `mach ota setup --platform android`."})}if(h.includes("ios")){let b=!!y.iosExpoPlist&&z.readFileSync(y.iosExpoPlist,"utf-8").includes("EXUpdatesURL")&&z.readFileSync(y.iosExpoPlist,"utf-8").includes("EXUpdatesRuntimeVersion");r.push(b?{level:"pass",message:"iOS native Expo Updates configuration is synchronized."}:{level:"fail",message:"iOS native Expo Updates configuration is missing. Run `mach ota setup --platform ios`."})}}}else r.push({level:"fail",message:"mach-react-native is not available yet. Run `mach ota setup` to migrate this project to expo-updates."});for(let a of r){let l=a.level==="pass"?xe.green("PASS"):a.level==="warn"?xe.yellow("WARN"):xe.red("FAIL");Re.info(`${l} ${a.message}`)}let s=r.filter(a=>a.level==="fail").length;s>0&&(Tt(xe.red(`OTA verification failed with ${s} issue(s).`)),process.exit(1)),Tt(xe.green("OTA verification passed."))}async function $f(e){Et();let t=mn(),n=await $.get(`/ota/${t.projectId}/updates`),i=n.data.updates||[];if(e.json){Re.info(JSON.stringify(n.data,null,2));return}if(i.length===0){Tt("No OTA updates found.");return}for(let r of i){let o=r.stats?.total||{};Re.info(`${xe.bold(r.updateId)} ${xe.dim(`${r.platform} ${r.channelName} runtime ${r.runtimeVersion}`)} ${r.status||"active"}`),Re.info(xe.dim(` downloads ios=${o.iosDownloaded||0} android=${o.androidDownloaded||0} applied ios=${o.iosApplied||0} android=${o.androidApplied||0}`))}Tt(`Found ${i.length} OTA update(s).`)}async function Ma(e,t){Et();let n=mn(),i=Ae(t.updateId);i||(Re.error(`Missing update id. Use \`${m.nameLower} ota ${e} --update-id <id>\`.`),process.exit(1));let r=await $.post(`/ota/${n.projectId}/updates/${encodeURIComponent(i)}/${e}`);t.json?Re.info(JSON.stringify(r.data,null,2)):Tt(xe.green(`\u2713 OTA update ${e==="rollback"?"rolled back":"promoted"}: ${i}`))}async function at(e,t={}){let n=e||t.action||"publish";if(n==="setup")return vf({...t,action:n});if(n==="publish")return _f({...t,action:n});if(n==="verify")return za({...t,action:n});if(n==="list")return $f({...t,action:n});if(n==="rollback")return Ma("rollback",{...t,action:n});if(n==="promote")return Ma("promote",{...t,action:n});let i=await of({message:"What do you want to do?",options:[{value:"setup",label:"Setup OTA"},{value:"publish",label:"Publish OTA update"},{value:"verify",label:"Verify OTA setup"},{value:"list",label:"List OTA updates"}]});return li(i)&&di(),at(i,t)}import{intro as Rf,outro as Ka,log as Nt}from"@clack/prompts";import Ve from"chalk";async function Wa(){Rf(Ve.blue(`${m.name} CLI - User Profile`));let e=be();if(!e){Nt.warn(Ve.yellow("You are not logged in.")),Nt.info(`Run \`${m.nameLower} login\` to authenticate.`),Ka();return}Nt.info(`${Ve.bold("Logged in as:")} ${Ve.green(e.email)}`);try{await $.get("/projects");let n=be().token.split(".");if(n.length===3){let i=JSON.parse(Buffer.from(n[1],"base64").toString());if(i.exp){let r=new Date(i.exp*1e3),o=new Date,s=r.getTime()-o.getTime();if(s>0){let a=Math.round(s/6e4),l=(a/60).toFixed(1);Nt.info(`${Ve.bold("Token status:")} Valid (Expires in ~${l}h / ${a}m)`)}else Nt.warn(`${Ve.bold("Token status:")} ${Ve.red("Expired")} (Auto-refresh failed)`)}}}catch{Nt.warn(`${Ve.bold("Token status:")} ${Ve.red("Unreachable")} (Session might be truly expired)${Qe}`)}Ka(Ve.blue("---"))}import{spawn as Pf}from"child_process";import{log as lt}from"@clack/prompts";import Oe from"chalk";import Cf from"fs";import Of from"net";async function Df(e){return new Promise(t=>{let n=Of.createServer();n.once("error",i=>{i.code==="EADDRINUSE"?t(!0):t(!1)}),n.once("listening",()=>{n.close(),t(!1)}),n.listen(e,"0.0.0.0")})}async function qa(e,t=20){let n=e;for(;n<e+t;){if(!await Df(n))return n;n++}throw new Error(`Could not find an available port after ${t} attempts starting from ${e}.`)}var Ja=async e=>{lt.info(Oe.blue(`Starting ${m.name} Dev Orchestrator...`));let t=ce(),n=e.buildProfile||"development",i=t?Ie(t,n):null,r={...process.env};if(t?.projectId)try{lt.info(Oe.dim(`Fetching managed secrets for profile: ${n}...`));let u=await $.get(`/projects/${t.projectId}/secrets/export?env=${n}`);u.data?.status==="success"&&u.data.secrets&&(Object.assign(r,u.data.secrets),lt.info(Oe.magenta(`\u2713 Injected secrets from ${m.name} Dashboard.`)))}catch{lt.warn("Could not fetch managed secrets. Running with local env only.")}t&&Object.assign(r,vt(t,m.envPrefix)),i&&(Object.assign(r,vt(i,`${m.envPrefix}PROFILE_`)),i.env&&Object.assign(r,i.env));let o=!1;try{let u=JSON.parse(Cf.readFileSync("package.json","utf-8"));o=!!(u.dependencies?.expo||u.devDependencies?.expo)}catch{lt.warn("Could not parse package.json. Defaulting to Bare React Native mode.")}let s=Number(e.port||i?.port||8081),a=await qa(s);a!==s&&lt.info(Oe.yellow(`Port ${s} is busy. ${m.name} is using ${a} instead.`));let l=process.platform==="win32"?"npx.cmd":"npx",d=[];if(o?(d=["expo","start","--port",String(a)],e.clear&&d.push("--clear"),e.tunnel&&d.push("--tunnel"),e.lan&&d.push("--lan"),e.localhost&&d.push("--localhost"),e.ios&&d.push("--ios"),e.android&&d.push("--android"),e.web&&d.push("--web")):(d=["react-native","start","--port",String(a)],e.clear&&d.push("--clear")),o){let u=[`${Oe.cyan("i")} open iOS simulator`,`${Oe.cyan("a")} open Android emulator/device`,`${Oe.cyan("w")} open web`,`${Oe.cyan("r")} reload app`];lt.info([Oe.bold("Launch controls"),...u.map(f=>` ${f}`),"",Oe.dim("Direct launch: mach start --ios | --android | --web"),Oe.dim(`Metro URL: http://localhost:${a}`)].join(`
1637
- `))}else lt.info(Oe.dim(`Metro URL: http://localhost:${a}`));let c=Pf(l,d,{stdio:"inherit",env:r});return new Promise((u,f)=>{c.on("exit",p=>{p===0?u():f(new Error(`Dev server exited with code ${p}`))}),c.on("error",p=>{f(p)})})};import{log as we}from"@clack/prompts";import Le from"chalk";var Ya=async e=>{let t=ce();t||(we.error(Le.red(`No ${m.configFileName} found in the current directory.`)),process.exit(1));let n=e.profile||"development",i=Ie(t,n);if(e.json){console.log(JSON.stringify({project:t,resolved:i},null,2));return}we.info(Le.bgBlue.white(` Resolved ${m.name} Config [${n}] `)),we.info(Le.dim("----------------------------------------")),we.info(`${Le.blue("Project ID:")} ${t.projectId}`),we.info(`${Le.blue("Name:")} ${t.name}`),we.info(`${Le.blue("Scheme:")} ${t.scheme}`),i?(we.info(Le.dim(`
1638
- Profile Settings:`)),we.info(`${Le.cyan("Distribution:")} ${i.distribution||"none"}`),we.info(`${Le.cyan("Development Client:")} ${i.developmentClient||"false"}`),i.env&&Object.keys(i.env).length>0&&(we.info(Le.dim(`
1639
- Environment Variables:`)),Object.entries(i.env).forEach(([r,o])=>{we.info(` ${r}=${o}`)}))):we.warn(`Profile '${n}' not found.`),we.info(Le.dim("----------------------------------------"))};import{cancel as Zf,confirm as ml,isCancel as bn,log as Si,note as Qf,outro as Ei,select as em,text as gl}from"@clack/prompts";import Ue from"chalk";import tm from"fs";import pl from"path";import At from"fs";import xt from"path";var Lt="./plugins/withMachDeepLinks",Gr="mach.deep-links.json",Za=["/*"],Vr=e=>{if(typeof e!="string")return;let t=e.trim();return t.length>0?t:void 0},pi=e=>{let t=new Set,n=[];for(let i of e){let r=Vr(i);!r||t.has(r)||(t.add(r),n.push(r))}return n},Me=(...e)=>{for(let t of e){let n=Vr(t);if(n)return n}},Xa=(e,t)=>e.length!==t.length?!1:e.every((n,i)=>n===t[i]);function Qa(e){if(typeof e!="string")return;let t=e.trim().toLowerCase();if(t==="ios"||t==="android"||t==="all")return t}function gn(e){let t=e.includes("://")?e:`https://${e}`,n=new URL(t),i=n.pathname==="/"?"":n.pathname.replace(/\/+$/,"");return`${n.protocol}//${n.host}${i}`}function ui(e){return new URL(gn(e)).hostname}function fi(e){return e.trim().toLowerCase().replace(/[^a-z0-9+.-]/g,"-").replace(/^-+|-+$/g,"")||"app"}function el(e=process.cwd()){let t=xt.join(e,"package.json"),n=["app.json","app.config.json","app.config.js","app.config.ts"].some(r=>At.existsSync(xt.join(e,r))),i=!1;if(At.existsSync(t))try{let r=JSON.parse(At.readFileSync(t,"utf-8"));i=!!(r.dependencies?.expo||r.devDependencies?.expo)}catch{i=!1}return n&&i?"expo":At.existsSync(xt.join(e,"ios"))||At.existsSync(xt.join(e,"android"))?"react-native":wt}function tl(e,t,n){if(t)return t;let i=!!(e.ios?.bundleIdentifier||n?.ios?.bundleIdentifier||e.deepLinks?.ios?.bundleIdentifier),r=!!(e.android?.package||n?.android?.package||n?.android?.applicationId||e.deepLinks?.android?.package);return i&&!r?"ios":r&&!i?"android":"all"}function mi(e=process.cwd(),t){let n=t?.deepLinks?.web?.outputDir;return n||(At.existsSync(xt.join(e,"public"))?"public":"deep-links")}function nl(e,t){let n=e.deepLinks,i=gn(t.baseUrl||n?.baseUrl||(t.domain?`https://${t.domain}`:"")),r=Vr(t.domain)||(t.baseUrl?ui(i):n?.domain)||ui(i),o=t.profile||n?.profile||"production",s=Ie(e,o)||{},a=s.ios||{},l=s.android||{},d=e.submit?.[o]?.ios||{},c=e.submit?.[o]?.android||{},u=fi(t.scheme||n?.scheme||a.scheme||e.scheme||e.slug||e.name||"app"),f=mt(e,o),p=pi([...t.androidFingerprint||[],...n?.android?.sha256CertFingerprints||[],...l.sha256CertFingerprints||[],...e.android?.sha256CertFingerprints||[]]);return{baseUrl:i,domain:r,scheme:u,profile:o!=="production"?o:void 0,paths:n?.paths?.length?n.paths:["/*"],ios:{appStoreId:Me(t.appStoreId,n?.ios?.appStoreId,a.ascAppId,d.ascAppId,e.ios?.ascAppId),appleTeamId:Me(t.appleTeamId,n?.ios?.appleTeamId,a.appleTeamId,a.developerTeamId,d.appleTeamId,d.developerTeamId,e.ios?.appleTeamId,e.ios?.developerTeamId,f.teamId),bundleIdentifier:Me(t.iosBundleId,n?.ios?.bundleIdentifier,a.bundleIdentifier,a.bundleId,e.ios?.bundleIdentifier,e.ios?.bundleId,e.expo?.ios?.bundleIdentifier),webCredentials:!!n?.ios?.webCredentials,activityContinuation:!!n?.ios?.activityContinuation},android:{package:Me(t.androidPackage,n?.android?.package,l.package,l.applicationId,e.android?.package,e.expo?.android?.package,c.packageName,c.package),sha256CertFingerprints:p},web:{smartAppBanner:n?.web?.smartAppBanner??!0,outputDir:t.output||n?.web?.outputDir||mi(process.cwd(),e)}}}function gi(e,t={}){let n=e.deepLinks,i=t.profile||n?.profile||"production",r=t.expoHints||null,o=Me(n?.baseUrl,r?.domain?`https://${r.domain}`:void 0);if(!o)return null;let s=gn(o),a=Ie(e,i)||{},l=a.ios||{},d=a.android||{},c=e.submit?.[i]?.ios||{},u=e.submit?.[i]?.android||{},f=mt(e,i),p=Me(n?.domain,r?.domain)||ui(s),g=fi(Me(n?.scheme,l.scheme,e.scheme,r?.scheme,e.slug,e.name,"app")||"app"),h=n?.paths?.length?n.paths:[...Za];return{baseUrl:s,domain:p,scheme:g,profile:i!=="production"?i:void 0,paths:h,ios:{appStoreId:Me(n?.ios?.appStoreId,l.ascAppId,c.ascAppId,e.ios?.ascAppId),appleTeamId:Me(n?.ios?.appleTeamId,l.appleTeamId,l.developerTeamId,c.appleTeamId,c.developerTeamId,e.ios?.appleTeamId,e.ios?.developerTeamId,f.teamId),bundleIdentifier:Me(n?.ios?.bundleIdentifier,l.bundleIdentifier,l.bundleId,e.ios?.bundleIdentifier,e.ios?.bundleId,e.expo?.ios?.bundleIdentifier,r?.iosBundleIdentifier),webCredentials:!!n?.ios?.webCredentials,activityContinuation:!!n?.ios?.activityContinuation},android:{package:Me(n?.android?.package,d.package,d.applicationId,e.android?.package,e.expo?.android?.package,u.packageName,u.package,r?.androidPackage),sha256CertFingerprints:pi([...n?.android?.sha256CertFingerprints||[],...d.sha256CertFingerprints||[],...e.android?.sha256CertFingerprints||[]])},web:{smartAppBanner:n?.web?.smartAppBanner??!0,outputDir:n?.web?.outputDir||mi(t.cwd||process.cwd(),e)}}}function hi(e,t,n="production",i=process.cwd()){return t?.domain?gi({...e,deepLinks:{baseUrl:`https://${t.domain}`,domain:t.domain,scheme:t.scheme}},{profile:n,cwd:i,expoHints:t}):null}function Tf(e,t,n=t.profile||"production"){let i=gi({...e,deepLinks:{baseUrl:t.baseUrl}},{profile:n}),r={baseUrl:t.baseUrl};n!=="production"&&(r.profile=n),t.domain&&t.domain!==ui(t.baseUrl)&&(r.domain=t.domain),t.scheme&&t.scheme!==i?.scheme&&(r.scheme=t.scheme),t.paths?.length&&!Xa(t.paths,Za)&&(r.paths=t.paths);let o={};t.ios?.bundleIdentifier&&t.ios.bundleIdentifier!==i?.ios?.bundleIdentifier&&(o.bundleIdentifier=t.ios.bundleIdentifier),t.ios?.appleTeamId&&t.ios.appleTeamId!==i?.ios?.appleTeamId&&(o.appleTeamId=t.ios.appleTeamId),t.ios?.appStoreId&&t.ios.appStoreId!==i?.ios?.appStoreId&&(o.appStoreId=t.ios.appStoreId),t.ios?.webCredentials&&(o.webCredentials=!0),t.ios?.activityContinuation&&(o.activityContinuation=!0),Object.keys(o).length>0&&(r.ios=o);let s={};t.android?.package&&t.android.package!==i?.android?.package&&(s.package=t.android.package);let a=t.android?.sha256CertFingerprints||[],l=i?.android?.sha256CertFingerprints||[];a.length>0&&!Xa(a,l)&&(s.sha256CertFingerprints=a),Object.keys(s).length>0&&(r.android=s);let d={outputDir:t.web?.outputDir||"deep-links"};return t.web?.smartAppBanner===!1&&(d.smartAppBanner=!1),r.web=d,r}function il(e,t,n,i=n.profile||"production"){let r={...e,framework:t,scheme:e.scheme||n.scheme};return{...r,deepLinks:Tf(r,n,i)}}function rl(e,t=process.cwd()){let n=xt.join(t,"mach.config.json");return At.writeFileSync(n,`${JSON.stringify(e,null,2)}
1640
- `),n}import pe from"fs";import ye from"path";import{spawnSync as ol}from"child_process";var hn="@radhya/mach/expo-plugin",kf=`const fs = require('fs')
1680
+ `,a=o[1]||"",l=o[2]||"",c=l.match(/\r?\n([ \t]+)\S/)?.[1]||`${a} `,u=l.trim().length===0?`${s}${c}'${ce}',${s}${a}`:l.includes(`
1681
+ `)||l.includes("\r")?`${s}${c}'${ce}',${l}`:`${s}${c}'${ce}',${s}${c}${l.trim()}${s}${a}`,f=`${o[0].slice(0,o[0].indexOf("[")+1)}${u}]`;return z.writeFileSync(n,`${i.slice(0,o.index)}${f}${i.slice(o.index+o[0].length)}`),"inserted"}async function _f(e,t,n){let i=[];if(Sf(e)){let o=li(e),s=!!(n.installPlugin||n.yes);if(!s&&!n.skipInstall&&jr()){let a=await Ka({message:o?`Update the local ${m.npmScope}/mach Expo plugin (${o} \u2192 ${Qe})?`:`Install ${m.npmScope}/mach locally so Expo can use ${ce}?`,initialValue:!0});di(a)&&ci(),s=!!a}if(s&&!n.skipInstall){let a=bf(e);a.ok?i.push(`Installed a compatible ${ce} with ${a.label}.`):i.push(`Could not install ${m.npmScope}/mach with ${a.label}: ${a.error||"unknown error"}.`)}else i.push(`Install ${m.npmScope}/mach@${Qe} or newer in this app so Expo can resolve ${ce}.`)}else i.push(`Local ${ce} is compatible (${li(e)}).`);let r=If(e);if(r==="already"&&i.push(`Expo config already includes ${ce}.`),r==="inserted"&&i.push(`Expo config updated to include ${ce}.`),r==="manual"&&i.push(`Add "${ce}" to the plugins array in app.config.ts/app.config.js.`),r==="missing"){let o=Ef(e,t);o?i.push(`${o} updated to include ${ce}.`):i.push(`Add "${ce}" to your Expo config plugins array.`)}return i}async function ja(e,t){if(t.skipInstall)return!1;if(t.yes)return!0;if(!jr())return!1;let n=await Ka({message:e,initialValue:!0});return di(n)&&ci(),!!n}async function wf(e,t,n){let i=[];if(t==="react-native"&&!pt(e,"expo"))if(await ja("Install Expo Modules required by the Mach OTA runtime? This updates package and native project files.",n)){let o=Ao(e);if(!o.ok||!pt(e,"expo"))throw new Error(`Expo Modules installation failed: ${o.error||o.command}`);i.push("Installed and configured Expo Modules for the existing React Native project.")}else i.push("Expo Modules are required. Run `npx install-expo-modules@latest`, then run `mach ota setup` again.");if(!pt(e,"expo-updates"))if(await ja("Install the expo-updates runtime?",n)){let o=yo(e);if(!o.ok||!pt(e,"expo-updates"))throw new Error(`expo-updates installation failed: ${o.error||o.command}`);i.push("Installed the Expo-compatible expo-updates version.")}else i.push("Install expo-updates with `npx expo install expo-updates`, then run `mach ota setup` again.");return i}async function Ga(e,t,n,i,r){if(t)return t;if(r||!jr()){if(i)throw new Error(`${e.replace(/:$/,"")} is required.`);return}let o=await gf({message:e,placeholder:n,validate(s){if(i&&s.trim().length===0)return"Required."}});return di(o)&&ci(),ye(o)}function Kr(e,t,n){return Kt(e,{runtimeVersion:t.runtimeVersion,framework:Re(t.framework)||Re(e.framework),platform:n})}function $f(e){let t=zt(process.cwd(),e);if(!t)throw new Error(`Resolved Expo OTA configuration does not match this publish: Expo config could not be resolved. Run \`mach ota setup\` to update ${ce}, then create a new native build if its embedded runtime changes.`);let n=[];if(t.runtimeVersion!==e.runtimeVersion&&n.push(`runtime is ${t.runtimeVersion||"missing"} (expected ${e.runtimeVersion})`),t.channel!==e.channel&&n.push(`channel is ${t.channel||"missing"} (expected ${e.channel})`),t.url!==e.url&&n.push(`URL is ${t.url||"missing"} (expected ${e.url})`),n.length>0)throw new Error(`Resolved Expo OTA configuration does not match this publish: ${n.join("; ")}. Run \`mach ota setup\` to update ${ce}, then create a new native build if its embedded runtime changes.`);return t}function vf(e){return Hr.createHash("sha256").update(z.readFileSync(e)).digest("hex")}function Rf(e){let t=ee.extname(e).toLowerCase();return t===".json"?"application/json":t===".js"||t===".bundle"||t===".hbc"?"application/javascript":t===".map"?"application/json":t===".png"?"image/png":t===".jpg"||t===".jpeg"?"image/jpeg":t===".webp"?"image/webp":t===".gif"?"image/gif":t===".svg"?"image/svg+xml":t===".ttf"?"font/ttf":t===".otf"?"font/otf":t===".woff"?"font/woff":t===".woff2"?"font/woff2":"application/octet-stream"}function Xa(e){let t=[];if(!z.existsSync(e))return t;for(let n of z.readdirSync(e)){let i=ee.join(e,n),r=z.statSync(i);r.isDirectory()?t.push(...Xa(i)):r.isFile()&&t.push(i)}return t}function Of(e,t){let n=e.filter(i=>{let r=i.toLowerCase();return r.endsWith(".map")?!1:r.endsWith(".js")||r.endsWith(".bundle")||r.endsWith(".hbc")});return n.find(i=>i.toLowerCase().includes(t))||n.sort((i,r)=>z.statSync(r).size-z.statSync(i).size)[0]}async function Va(e){let t=await v.post("/ota/upload-url",{projectId:e.projectId,updateId:e.updateId,platform:e.platform,fileName:e.fileName,contentType:e.contentType});if(t.data.status!=="success")throw new Error(t.data.message||`Could not create upload URL for ${e.fileName}`);let n=z.statSync(e.filePath).size;return await hf.put(t.data.uploadUrl,z.createReadStream(e.filePath),{headers:{"Content-Type":e.contentType,"Content-Length":n},maxBodyLength:1/0,maxContentLength:1/0}),{key:t.data.key,url:t.data.publicUrl,contentType:e.contentType,hash:vf(e.filePath),size:n}}function Za(e,t,n,i={}){let r=Wa(e,t,{cwd:n,stdio:"inherit",env:{...process.env,CI:process.env.CI||"1",EXPO_NO_TELEMETRY:"1",...i}});if(r.error)throw new Error(r.error.message);if(r.status!==0)throw new Error(`${e} ${t.join(" ")} exited with code ${r.status}`)}function Pf(e,t,n,i,r){Za("npx",["expo","export","--platform",e,"--output-dir",t],process.cwd(),{MACH_OTA_RUNTIME_VERSION:n,MACH_OTA_CHANNEL:i,MACH_OTA_URL:r})}function Df(e,t){let n=e==="ios"?"main.jsbundle":"index.android.bundle",r=["index.js","index.ts","index.tsx"].find(s=>z.existsSync(ee.join(process.cwd(),s)))||"index.js",o=ee.join(t,"assets");z.mkdirSync(o,{recursive:!0}),Za("npx",["react-native","bundle","--platform",e,"--dev","false","--entry-file",r,"--bundle-output",ee.join(t,n),"--assets-dest",o],process.cwd())}async function Cf(e){let t=e.config.projectId,n=`ota_${Date.now()}_${e.platform}_${Hr.randomUUID().slice(0,8)}`,i=ee.join(process.cwd(),".mach","ota",n,e.platform);z.rmSync(i,{recursive:!0,force:!0}),z.mkdirSync(i,{recursive:!0}),e.engine==="expo-updates"?Pf(e.platform,i,e.runtimeVersion,e.channel,e.config.ota?.url||""):Df(e.platform,i);let r=e.engine==="expo-updates"?Ma(i,e.platform):void 0,o=r?Ua(i,r):Xa(i),s=r?ee.join(i,r.bundle):Of(o,e.platform);if(!s)throw new Error(`Could not find a ${e.platform} JS bundle in ${i}.`);let a=new Map((r?.assets||[]).map(I=>[I.path,I])),l=[];for(let I of o){let L=ee.relative(i,I).replace(/\\/g,"/"),w=a.get(L),j=I===s?"application/javascript":w?ai(w.ext):Rf(I);l.push({filePath:I,relative:L,uploaded:await Va({projectId:t,updateId:n,platform:e.platform,filePath:I,fileName:L,contentType:j})})}let d=l.find(I=>I.filePath===s),c=e.engine==="expo-updates"?Hr.randomUUID():void 0,u=e.engine==="expo-updates"?Ba(e.expoConfig):void 0;if(e.engine==="expo-updates"&&(!u||Object.keys(u).length===0))throw new Error("Could not resolve the public Expo config required by the OTA manifest. Run `mach ota verify` and try again.");let f=r?r.assets.map(I=>{let L=l.find(w=>w.relative===I.path);if(!L)throw new Error(`Could not find uploaded Expo asset ${I.path}.`);return{key:Fr(L.filePath),url:L.uploaded.url,contentType:ai(I.ext),fileExtension:Fa(I.ext),hash:Br(L.filePath),size:L.uploaded.size}}):l.filter(I=>I.filePath!==s&&!I.relative.endsWith(".map")).map(I=>({key:I.relative,url:I.uploaded.url,contentType:I.uploaded.contentType,hash:I.uploaded.hash,size:I.uploaded.size})),p=r?{key:Fr(d.filePath),url:d.uploaded.url,contentType:ai(void 0,!0),hash:Br(d.filePath),size:d.uploaded.size}:{key:ee.basename(d.relative),url:d.uploaded.url,contentType:d.uploaded.contentType,hash:d.uploaded.hash,size:d.uploaded.size},g={id:c||n,createdAt:new Date().toISOString(),runtimeVersion:e.runtimeVersion,launchAsset:p,assets:f,metadata:{projectId:t,channel:e.channel,...e.message?{message:e.message}:{},engine:e.engine},extra:{...u?{expoClient:u}:{},mach:{projectId:t,updateId:n,...c?{expoUpdateId:c}:{},channel:e.channel,platform:e.platform}}},h=ee.join(i,"mach-manifest.json");z.writeFileSync(h,JSON.stringify(g,null,2));let A=await Va({projectId:t,updateId:n,platform:e.platform,filePath:h,fileName:"manifest.json",contentType:"application/json"}),S=await v.post("/ota/publish",{projectId:t,updateId:n,expoUpdateId:c,channelName:e.channel,runtimeVersion:e.runtimeVersion,platform:e.platform,manifestKey:A.key,message:e.message,launchAsset:p,assets:f});if(S.data.status!=="success")throw new Error(S.data.message||`Failed to publish ${e.platform} OTA update.`);return S.data.update}async function Tf(e){let t=mn(),n=Re(e.framework)||Gr(t),i;try{i=qa(Vr(e.engine,n))}catch(f){Oe.error(f.message),process.exit(1)}let r=!!e.yes,o=await Ga("OTA channel:",ye(e.channel||e.branch||t.ota?.channel)||"production","production",!0,r),s=`${Ze.replace(/\/$/,"")}/api/ota/expo/${t.projectId}`,a=ye(e.url||t.ota?.url),l=a?.includes("/api/ota/react-native/")?void 0:a,d=await Ga("Mach OTA update URL:",l||s,s,!0,r);t.framework=n;let c={...t.ota||{},enabled:!0,engine:i,channel:o,url:d,deploymentUrl:d,runtimeVersionPolicy:t.ota?.runtimeVersionPolicy||"appVersion"};delete c.statsUrl,t.ota=c,delete t.update,Af(t);let u=[`${m.configFileName} updated.`];if(u.push(...await wf(process.cwd(),n,e)),u.push(...await _f(process.cwd(),n,e)),n==="react-native"&&pt(process.cwd(),"expo")&&pt(process.cwd(),"expo-updates")&&ui(process.cwd())){let f=zr(e.platform||"all"),p=Ui(process.cwd()).filter(g=>f.includes(g));p.length===0&&u.push("No matching committed ios/android project was found for native configuration sync.");for(let g of p){let h=Kr(t,e,g),S=So({cwd:process.cwd(),platforms:[g],runtimeVersion:h,channel:o,url:d}).find(I=>!I.ok);if(S)throw new Error(`Could not synchronize ${g} Expo Updates configuration: ${S.error||S.command}`);u.push(`Synchronized ${g} native Expo Updates configuration for runtime ${h}.`)}}u.push("Create and install one new native build after initial OTA setup. Existing app binaries keep their embedded update URL."),pf(u.map(f=>`- ${f}`).join(`
1682
+ `),"OTA setup"),await Qa({...e,action:"verify"})}async function kf(e){bt();let t=mn(),n=Re(e.framework)||Gr(t),i;try{i=qa(Vr(e.engine||t.ota?.engine,n))}catch(a){Oe.error(`${a.message} Run \`mach ota setup\` to migrate this project.`),process.exit(1)}let r=ye(e.channel||e.branch||t.ota?.channel)||"production",o=zr(e.platform||"all"),s=mf();s.start(`Publishing OTA update (${o.join("+")}, ${r})`);try{let a=[];for(let l of o){let d=Kr(t,e,l),c=$f({platform:l,runtimeVersion:d,channel:r,url:ye(t.ota?.url)||""});s.message(`Exporting and uploading ${l} OTA bundle for runtime ${d}...`),a.push(await Cf({config:t,engine:i,platform:l,channel:r,runtimeVersion:d,message:e.message,expoConfig:c.expoConfig}))}if(s.stop("OTA update published."),e.json)Oe.info(JSON.stringify({status:"success",updates:a},null,2));else{let l=Array.from(new Set(a.map(d=>d.runtimeVersion).filter(Boolean)));Tt(Me.green(`\u2713 OTA update live on "${r}" for runtime ${l.join(", ")||"unknown"}.`));for(let d of a)Oe.info(Me.dim(`${d.platform}: ${d.updateId}`))}}catch(a){s.stop("OTA publish failed."),Oe.error(a.response?.data?.message||a.message),process.exit(1)}}async function Qa(e){let t=mn(),n=Re(e.framework)||Gr(t),i=Vr(e.engine||t.ota?.engine,n),r=[],o=t.ota;if(r.push(o?.enabled?{level:"pass",message:"mach.config.json has ota.enabled."}:{level:"fail",message:"mach.config.json is missing ota.enabled. Run `mach ota setup`."}),r.push(o?.url?{level:"pass",message:`OTA URL configured: ${o.url}`}:{level:"fail",message:"OTA URL is missing. Run `mach ota setup`."}),r.push(o?.channel?{level:"pass",message:`Default channel: ${o.channel}`}:{level:"warn",message:"No default OTA channel configured; publish will use production."}),r.push(o?.runtimeVersionPolicy||o?.runtimeVersion?{level:"pass",message:"Runtime version policy configured."}:{level:"warn",message:"No explicit runtime policy configured; Mach will use Expo runtimeVersion or package.json version."}),i==="expo-updates"){let a=kt(ee.join(process.cwd(),"package.json"))||{},l={...a.dependencies||{},...a.devDependencies||{}};n==="react-native"&&r.push(l.expo?{level:"pass",message:"Expo Modules are installed for the bare React Native project."}:{level:"fail",message:"Expo Modules are missing. Run `mach ota setup` to install the bare React Native OTA runtime."}),r.push(l["expo-updates"]?{level:"pass",message:"expo-updates is installed."}:{level:"fail",message:"expo-updates is missing. Run `mach ota setup`."}),r.push(ui(process.cwd())?{level:"pass",message:`${m.npmScope}/mach is installed locally for the Expo plugin.`}:{level:"fail",message:`${m.npmScope}/mach is not installed locally; run \`mach ota setup\`.`});let d=zr(e.platform||"all"),c=ye(e.channel||e.branch||o?.channel)||"production",u=ye(o?.url)||"",f=d.map(g=>{let h=Kr(t,e,g);return{platform:g,runtimeVersion:h,delivery:zt(process.cwd(),{platform:g,runtimeVersion:h,channel:c,url:u})}}),p=f[0]?.delivery;if(p){let g=p.expoConfig.updates?.enabled!==!1,h=ye(p.expoConfig.updates?.checkAutomatically)?.toUpperCase()||"ON_LOAD";r.push(p.url===o?.url?{level:"pass",message:"Expo Updates URL resolves to Mach."}:{level:"warn",message:`Expo Updates URL resolves to ${p.url||"none"} instead of ${o?.url||"the Mach OTA URL"}.`}),r.push(p.channel===c?{level:"pass",message:`Expo update channel header resolves to ${c}.`}:{level:"warn",message:`Expo update channel header is ${p.channel||"not set"}; install the latest ${m.npmScope}/mach package and rebuild.`}),r.push(g?{level:"pass",message:"Expo Updates is enabled."}:{level:"fail",message:"Expo config has updates.enabled=false, so this app cannot receive OTA updates."}),r.push(h!=="NEVER"&&h!=="ON_ERROR_RECOVERY"?{level:"pass",message:`Expo checks for updates automatically (${h}).`}:{level:"fail",message:`Expo checkAutomatically is ${h}; use ON_LOAD to receive Mach updates when the app starts.`})}else r.push({level:"fail",message:`Could not resolve Expo config. Confirm ${ce} is present and run \`mach ota setup\` again.`});for(let{platform:g,runtimeVersion:h,delivery:A}of f)r.push(A?.runtimeVersion===h?{level:"pass",message:`${g} Expo runtime resolves to ${h}.`}:{level:"fail",message:`${g} Expo runtime resolves to ${A?.runtimeVersion||"none"} instead of ${h}. Run \`mach ota setup\`, then rebuild the app.`});if(n==="react-native"){let g=d,h=Ui(process.cwd()).filter(S=>g.includes(S)),A=bo(process.cwd());if(h.includes("android")){let S=!!(A.androidManifest&&A.androidStrings)&&z.readFileSync(A.androidManifest,"utf-8").includes("expo.modules.updates.EXPO_UPDATE_URL")&&z.readFileSync(A.androidStrings,"utf-8").includes("expo_runtime_version");r.push(S?{level:"pass",message:"Android native Expo Updates configuration is synchronized."}:{level:"fail",message:"Android native Expo Updates configuration is missing. Run `mach ota setup --platform android`."})}if(h.includes("ios")){let S=!!A.iosExpoPlist&&z.readFileSync(A.iosExpoPlist,"utf-8").includes("EXUpdatesURL")&&z.readFileSync(A.iosExpoPlist,"utf-8").includes("EXUpdatesRuntimeVersion");r.push(S?{level:"pass",message:"iOS native Expo Updates configuration is synchronized."}:{level:"fail",message:"iOS native Expo Updates configuration is missing. Run `mach ota setup --platform ios`."})}}}else r.push({level:"fail",message:"mach-react-native is not available yet. Run `mach ota setup` to migrate this project to expo-updates."});for(let a of r){let l=a.level==="pass"?Me.green("PASS"):a.level==="warn"?Me.yellow("WARN"):Me.red("FAIL");Oe.info(`${l} ${a.message}`)}let s=r.filter(a=>a.level==="fail").length;s>0&&(Tt(Me.red(`OTA verification failed with ${s} issue(s).`)),process.exit(1)),Tt(Me.green("OTA verification passed."))}async function Nf(e){bt();let t=mn(),n=await v.get(`/ota/${t.projectId}/updates`),i=n.data.updates||[];if(e.json){Oe.info(JSON.stringify(n.data,null,2));return}if(i.length===0){Tt("No OTA updates found.");return}for(let r of i){let o=r.stats?.total||{};Oe.info(`${Me.bold(r.updateId)} ${Me.dim(`${r.platform} ${r.channelName} runtime ${r.runtimeVersion}`)} ${r.status||"active"}`),Oe.info(Me.dim(` downloads ios=${o.iosDownloaded||0} android=${o.androidDownloaded||0} applied ios=${o.iosApplied||0} android=${o.androidApplied||0}`))}Tt(`Found ${i.length} OTA update(s).`)}async function za(e,t){bt();let n=mn(),i=ye(t.updateId);i||(Oe.error(`Missing update id. Use \`${m.nameLower} ota ${e} --update-id <id>\`.`),process.exit(1));let r=await v.post(`/ota/${n.projectId}/updates/${encodeURIComponent(i)}/${e}`);t.json?Oe.info(JSON.stringify(r.data,null,2)):Tt(Me.green(`\u2713 OTA update ${e==="rollback"?"rolled back":"promoted"}: ${i}`))}async function st(e,t={}){let n=e||t.action||"publish";if(n==="setup")return Tf({...t,action:n});if(n==="publish")return kf({...t,action:n});if(n==="verify")return Qa({...t,action:n});if(n==="list")return Nf({...t,action:n});if(n==="rollback")return za("rollback",{...t,action:n});if(n==="promote")return za("promote",{...t,action:n});let i=await ff({message:"What do you want to do?",options:[{value:"setup",label:"Setup OTA"},{value:"publish",label:"Publish OTA update"},{value:"verify",label:"Verify OTA setup"},{value:"list",label:"List OTA updates"}]});return di(i)&&ci(),st(i,t)}import{intro as xf,outro as el,log as Nt}from"@clack/prompts";import Ve from"chalk";async function tl(){xf(Ve.blue(`${m.name} CLI - User Profile`));let e=Ae();if(!e){Nt.warn(Ve.yellow("You are not logged in.")),Nt.info(`Run \`${m.nameLower} login\` to authenticate.`),el();return}Nt.info(`${Ve.bold("Logged in as:")} ${Ve.green(e.email)}`);try{await v.get("/projects");let n=Ae().token.split(".");if(n.length===3){let i=JSON.parse(Buffer.from(n[1],"base64").toString());if(i.exp){let r=new Date(i.exp*1e3),o=new Date,s=r.getTime()-o.getTime();if(s>0){let a=Math.round(s/6e4),l=(a/60).toFixed(1);Nt.info(`${Ve.bold("Token status:")} Valid (Expires in ~${l}h / ${a}m)`)}else Nt.warn(`${Ve.bold("Token status:")} ${Ve.red("Expired")} (Auto-refresh failed)`)}}}catch{Nt.warn(`${Ve.bold("Token status:")} ${Ve.red("Unreachable")} (Session might be truly expired)${Ze}`)}el(Ve.blue("---"))}import{spawn as Uf}from"child_process";import{log as at}from"@clack/prompts";import Pe from"chalk";import Ff from"fs";import Lf from"net";async function Mf(e){return new Promise(t=>{let n=Lf.createServer();n.once("error",i=>{i.code==="EADDRINUSE"?t(!0):t(!1)}),n.once("listening",()=>{n.close(),t(!1)}),n.listen(e,"0.0.0.0")})}async function nl(e,t=20){let n=e;for(;n<e+t;){if(!await Mf(n))return n;n++}throw new Error(`Could not find an available port after ${t} attempts starting from ${e}.`)}var il=async e=>{at.info(Pe.blue(`Starting ${m.name} Dev Orchestrator...`));let t=de(),n=e.buildProfile||"development",i=t?we(t,n):null,r={...process.env};if(t?.projectId)try{at.info(Pe.dim(`Fetching managed secrets for profile: ${n}...`));let u=await v.get(`/projects/${t.projectId}/secrets/export?env=${n}`);u.data?.status==="success"&&u.data.secrets&&(Object.assign(r,u.data.secrets),at.info(Pe.magenta(`\u2713 Injected secrets from ${m.name} Dashboard.`)))}catch{at.warn("Could not fetch managed secrets. Running with local env only.")}t&&Object.assign(r,_t(t,m.envPrefix)),i&&(Object.assign(r,_t(i,`${m.envPrefix}PROFILE_`)),i.env&&Object.assign(r,i.env));let o=!1;try{let u=JSON.parse(Ff.readFileSync("package.json","utf-8"));o=!!(u.dependencies?.expo||u.devDependencies?.expo)}catch{at.warn("Could not parse package.json. Defaulting to Bare React Native mode.")}let s=Number(e.port||i?.port||8081),a=await nl(s);a!==s&&at.info(Pe.yellow(`Port ${s} is busy. ${m.name} is using ${a} instead.`));let l=process.platform==="win32"?"npx.cmd":"npx",d=[];if(o?(d=["expo","start","--port",String(a)],e.clear&&d.push("--clear"),e.tunnel&&d.push("--tunnel"),e.lan&&d.push("--lan"),e.localhost&&d.push("--localhost"),e.ios&&d.push("--ios"),e.android&&d.push("--android"),e.web&&d.push("--web")):(d=["react-native","start","--port",String(a)],e.clear&&d.push("--clear")),o){let u=[`${Pe.cyan("i")} open iOS simulator`,`${Pe.cyan("a")} open Android emulator/device`,`${Pe.cyan("w")} open web`,`${Pe.cyan("r")} reload app`];at.info([Pe.bold("Launch controls"),...u.map(f=>` ${f}`),"",Pe.dim("Direct launch: mach start --ios | --android | --web"),Pe.dim(`Metro URL: http://localhost:${a}`)].join(`
1683
+ `))}else at.info(Pe.dim(`Metro URL: http://localhost:${a}`));let c=Uf(l,d,{stdio:"inherit",env:r});return new Promise((u,f)=>{c.on("exit",p=>{p===0?u():f(new Error(`Dev server exited with code ${p}`))}),c.on("error",p=>{f(p)})})};import{log as Ie}from"@clack/prompts";import De from"chalk";var rl=async e=>{let t=de();t||(Ie.error(De.red(`No ${m.configFileName} found in the current directory.`)),process.exit(1));let n=e.profile||"development",i=we(t,n);if(e.json){console.log(JSON.stringify({project:t,resolved:i},null,2));return}Ie.info(De.bgBlue.white(` Resolved ${m.name} Config [${n}] `)),Ie.info(De.dim("----------------------------------------")),Ie.info(`${De.blue("Project ID:")} ${t.projectId}`),Ie.info(`${De.blue("Name:")} ${t.name}`),Ie.info(`${De.blue("Scheme:")} ${t.scheme}`),Ie.info(`${De.blue("App directory:")} ${t.appDirectory||"."}`),i?(Ie.info(De.dim(`
1684
+ Profile Settings:`)),Ie.info(`${De.cyan("Distribution:")} ${i.distribution||"none"}`),Ie.info(`${De.cyan("Development Client:")} ${i.developmentClient||"false"}`),i.env&&Object.keys(i.env).length>0&&(Ie.info(De.dim(`
1685
+ Environment Variables:`)),Object.entries(i.env).forEach(([r,o])=>{Ie.info(` ${r}=${o}`)}))):Ie.warn(`Profile '${n}' not found.`),Ie.info(De.dim("----------------------------------------"))};import{cancel as sm,confirm as Il,isCancel as yn,log as Ei,note as am,outro as Ii,select as lm,text as _l}from"@clack/prompts";import Fe from"chalk";import dm from"fs";import bl from"path";import yt from"fs";import xt from"path";var Lt="./plugins/withMachDeepLinks",Wr="mach.deep-links.json",sl=["/*"],Yr=e=>{if(typeof e!="string")return;let t=e.trim();return t.length>0?t:void 0},fi=e=>{let t=new Set,n=[];for(let i of e){let r=Yr(i);!r||t.has(r)||(t.add(r),n.push(r))}return n},Ue=(...e)=>{for(let t of e){let n=Yr(t);if(n)return n}},ol=(e,t)=>e.length!==t.length?!1:e.every((n,i)=>n===t[i]);function al(e){if(typeof e!="string")return;let t=e.trim().toLowerCase();if(t==="ios"||t==="android"||t==="all")return t}function gn(e){let t=e.includes("://")?e:`https://${e}`,n=new URL(t),i=n.pathname==="/"?"":n.pathname.replace(/\/+$/,"");return`${n.protocol}//${n.host}${i}`}function pi(e){return new URL(gn(e)).hostname}function mi(e){return e.trim().toLowerCase().replace(/[^a-z0-9+.-]/g,"-").replace(/^-+|-+$/g,"")||"app"}function ll(e=process.cwd()){let t=xt.join(e,"package.json"),n=["app.json","app.config.json","app.config.js","app.config.ts"].some(r=>yt.existsSync(xt.join(e,r))),i=!1;if(yt.existsSync(t))try{let r=JSON.parse(yt.readFileSync(t,"utf-8"));i=!!(r.dependencies?.expo||r.devDependencies?.expo)}catch{i=!1}return n&&i?"expo":yt.existsSync(xt.join(e,"ios"))||yt.existsSync(xt.join(e,"android"))?"react-native":It}function dl(e,t,n){if(t)return t;let i=!!(e.ios?.bundleIdentifier||n?.ios?.bundleIdentifier||e.deepLinks?.ios?.bundleIdentifier),r=!!(e.android?.package||n?.android?.package||n?.android?.applicationId||e.deepLinks?.android?.package);return i&&!r?"ios":r&&!i?"android":"all"}function gi(e=process.cwd(),t){let n=t?.deepLinks?.web?.outputDir;return n||(yt.existsSync(xt.join(e,"public"))?"public":"deep-links")}function cl(e,t){let n=e.deepLinks,i=gn(t.baseUrl||n?.baseUrl||(t.domain?`https://${t.domain}`:"")),r=Yr(t.domain)||(t.baseUrl?pi(i):n?.domain)||pi(i),o=t.profile||n?.profile||"production",s=we(e,o)||{},a=s.ios||{},l=s.android||{},d=e.submit?.[o]?.ios||{},c=e.submit?.[o]?.android||{},u=mi(t.scheme||n?.scheme||a.scheme||e.scheme||e.slug||e.name||"app"),f=ft(e,o),p=fi([...t.androidFingerprint||[],...n?.android?.sha256CertFingerprints||[],...l.sha256CertFingerprints||[],...e.android?.sha256CertFingerprints||[]]);return{baseUrl:i,domain:r,scheme:u,profile:o!=="production"?o:void 0,paths:n?.paths?.length?n.paths:["/*"],ios:{appStoreId:Ue(t.appStoreId,n?.ios?.appStoreId,a.ascAppId,d.ascAppId,e.ios?.ascAppId),appleTeamId:Ue(t.appleTeamId,n?.ios?.appleTeamId,a.appleTeamId,a.developerTeamId,d.appleTeamId,d.developerTeamId,e.ios?.appleTeamId,e.ios?.developerTeamId,f.teamId),bundleIdentifier:Ue(t.iosBundleId,n?.ios?.bundleIdentifier,a.bundleIdentifier,a.bundleId,e.ios?.bundleIdentifier,e.ios?.bundleId,e.expo?.ios?.bundleIdentifier),webCredentials:!!n?.ios?.webCredentials,activityContinuation:!!n?.ios?.activityContinuation},android:{package:Ue(t.androidPackage,n?.android?.package,l.package,l.applicationId,e.android?.package,e.expo?.android?.package,c.packageName,c.package),sha256CertFingerprints:p},web:{smartAppBanner:n?.web?.smartAppBanner??!0,outputDir:t.output||n?.web?.outputDir||gi(process.cwd(),e)}}}function hi(e,t={}){let n=e.deepLinks,i=t.profile||n?.profile||"production",r=t.expoHints||null,o=Ue(n?.baseUrl,r?.domain?`https://${r.domain}`:void 0);if(!o)return null;let s=gn(o),a=we(e,i)||{},l=a.ios||{},d=a.android||{},c=e.submit?.[i]?.ios||{},u=e.submit?.[i]?.android||{},f=ft(e,i),p=Ue(n?.domain,r?.domain)||pi(s),g=mi(Ue(n?.scheme,l.scheme,e.scheme,r?.scheme,e.slug,e.name,"app")||"app"),h=n?.paths?.length?n.paths:[...sl];return{baseUrl:s,domain:p,scheme:g,profile:i!=="production"?i:void 0,paths:h,ios:{appStoreId:Ue(n?.ios?.appStoreId,l.ascAppId,c.ascAppId,e.ios?.ascAppId),appleTeamId:Ue(n?.ios?.appleTeamId,l.appleTeamId,l.developerTeamId,c.appleTeamId,c.developerTeamId,e.ios?.appleTeamId,e.ios?.developerTeamId,f.teamId),bundleIdentifier:Ue(n?.ios?.bundleIdentifier,l.bundleIdentifier,l.bundleId,e.ios?.bundleIdentifier,e.ios?.bundleId,e.expo?.ios?.bundleIdentifier,r?.iosBundleIdentifier),webCredentials:!!n?.ios?.webCredentials,activityContinuation:!!n?.ios?.activityContinuation},android:{package:Ue(n?.android?.package,d.package,d.applicationId,e.android?.package,e.expo?.android?.package,u.packageName,u.package,r?.androidPackage),sha256CertFingerprints:fi([...n?.android?.sha256CertFingerprints||[],...d.sha256CertFingerprints||[],...e.android?.sha256CertFingerprints||[]])},web:{smartAppBanner:n?.web?.smartAppBanner??!0,outputDir:n?.web?.outputDir||gi(t.cwd||process.cwd(),e)}}}function Ai(e,t,n="production",i=process.cwd()){return t?.domain?hi({...e,deepLinks:{baseUrl:`https://${t.domain}`,domain:t.domain,scheme:t.scheme}},{profile:n,cwd:i,expoHints:t}):null}function Bf(e,t,n=t.profile||"production"){let i=hi({...e,deepLinks:{baseUrl:t.baseUrl}},{profile:n}),r={baseUrl:t.baseUrl};n!=="production"&&(r.profile=n),t.domain&&t.domain!==pi(t.baseUrl)&&(r.domain=t.domain),t.scheme&&t.scheme!==i?.scheme&&(r.scheme=t.scheme),t.paths?.length&&!ol(t.paths,sl)&&(r.paths=t.paths);let o={};t.ios?.bundleIdentifier&&t.ios.bundleIdentifier!==i?.ios?.bundleIdentifier&&(o.bundleIdentifier=t.ios.bundleIdentifier),t.ios?.appleTeamId&&t.ios.appleTeamId!==i?.ios?.appleTeamId&&(o.appleTeamId=t.ios.appleTeamId),t.ios?.appStoreId&&t.ios.appStoreId!==i?.ios?.appStoreId&&(o.appStoreId=t.ios.appStoreId),t.ios?.webCredentials&&(o.webCredentials=!0),t.ios?.activityContinuation&&(o.activityContinuation=!0),Object.keys(o).length>0&&(r.ios=o);let s={};t.android?.package&&t.android.package!==i?.android?.package&&(s.package=t.android.package);let a=t.android?.sha256CertFingerprints||[],l=i?.android?.sha256CertFingerprints||[];a.length>0&&!ol(a,l)&&(s.sha256CertFingerprints=a),Object.keys(s).length>0&&(r.android=s);let d={outputDir:t.web?.outputDir||"deep-links"};return t.web?.smartAppBanner===!1&&(d.smartAppBanner=!1),r.web=d,r}function ul(e,t,n,i=n.profile||"production"){let r={...e,framework:t,scheme:e.scheme||n.scheme};return{...r,deepLinks:Bf(r,n,i)}}function pl(e,t=process.cwd()){let n=xt.join(t,"mach.config.json");return yt.writeFileSync(n,`${JSON.stringify(e,null,2)}
1686
+ `),n}import ue from"fs";import ge from"path";import{spawnSync as fl}from"child_process";var hn="@radhya/mach/expo-plugin",Hf=`const fs = require('fs')
1641
1687
  const path = require('path')
1642
1688
 
1643
1689
  const unique = values => Array.from(new Set(values.filter(Boolean)))
@@ -1757,24 +1803,24 @@ module.exports = function withMachDeepLinks(config) {
1757
1803
  config.android.intentFilters = intentFilters
1758
1804
  return config
1759
1805
  }
1760
- `,yn=e=>{if(typeof e=="string"){if(e===hn)return hn;if(e===Lt||e===Lt.replace(/^\.\//,""))return Lt}},Kr=e=>Array.isArray(e)?Kr(e[0]):yn(e),sl=e=>!!Kr(e),Nf=(e,t)=>{let n=yn(t)||t;return Kr(e)===n},xf=(e,t)=>Array.isArray(e)?[t,...e.slice(1)]:t,Lf=(e,t)=>{let n=Array.isArray(e.plugins)?e.plugins:[];if(n.findIndex(o=>Nf(o,t))>=0)return e.plugins=n,"already";let r=n.findIndex(sl);return r>=0?(n[r]=xf(n[r],t),e.plugins=n,"updated"):(n.push(t),e.plugins=n,"inserted")},zr=/(['"`])((?:\.\/)?plugins\/withMachDeepLinks|@radhya\/mach\/expo-plugin)\1/g;function yi(e){let t=ye.join(e,"package.json");if(!pe.existsSync(t))return!1;try{let n=JSON.parse(pe.readFileSync(t,"utf-8"));return!!(n.dependencies?.["@radhya/mach"]||n.devDependencies?.["@radhya/mach"])}catch{return!1}}function Mf(e){return pe.existsSync(ye.join(e,"pnpm-lock.yaml"))?{command:"pnpm",args:["add","-D","@radhya/mach@latest"],label:"pnpm add -D @radhya/mach@latest"}:pe.existsSync(ye.join(e,"yarn.lock"))?{command:"yarn",args:["add","-D","@radhya/mach@latest"],label:"yarn add -D @radhya/mach@latest"}:pe.existsSync(ye.join(e,"bun.lockb"))||pe.existsSync(ye.join(e,"bun.lock"))?{command:"bun",args:["add","-d","@radhya/mach@latest"],label:"bun add -d @radhya/mach@latest"}:{command:"npm",args:["install","--save-dev","@radhya/mach@latest"],label:"npm install --save-dev @radhya/mach@latest"}}function Uf(e){let t=Mf(e),n=ol(t.command,t.args,{cwd:e,stdio:"inherit",env:{...process.env}});return n.error?{ok:!1,label:t.label,error:n.error.message}:n.status!==0?{ok:!1,label:t.label,error:`${t.command} exited with code ${n.status}`}:{ok:yi(e),label:t.label}}function Ff(e,t){let n=pe.readFileSync(e,"utf-8"),i=Array.from(n.matchAll(zr));if(i.length>0){let f=yn(t)||t,p=i.some(y=>yn(y[2])===f),g=i.some(y=>yn(y[2])!==f);if(p&&!g)return"already";let h=n.replace(zr,(y,b)=>`${b}${t}${b}`);return pe.writeFileSync(e,h),"updated"}let r=/(^[ \t]*)plugins\s*:\s*\[([\s\S]*?)\]/m.exec(n);if(!r||r.index===void 0)return"unsupported";let o=n.includes(`\r
1806
+ `,An=e=>{if(typeof e=="string"){if(e===hn)return hn;if(e===Lt||e===Lt.replace(/^\.\//,""))return Lt}},Jr=e=>Array.isArray(e)?Jr(e[0]):An(e),ml=e=>!!Jr(e),jf=(e,t)=>{let n=An(t)||t;return Jr(e)===n},Gf=(e,t)=>Array.isArray(e)?[t,...e.slice(1)]:t,Vf=(e,t)=>{let n=Array.isArray(e.plugins)?e.plugins:[];if(n.findIndex(o=>jf(o,t))>=0)return e.plugins=n,"already";let r=n.findIndex(ml);return r>=0?(n[r]=Gf(n[r],t),e.plugins=n,"updated"):(n.push(t),e.plugins=n,"inserted")},qr=/(['"`])((?:\.\/)?plugins\/withMachDeepLinks|@radhya\/mach\/expo-plugin)\1/g;function yi(e){let t=ge.join(e,"package.json");if(!ue.existsSync(t))return!1;try{let n=JSON.parse(ue.readFileSync(t,"utf-8"));return!!(n.dependencies?.["@radhya/mach"]||n.devDependencies?.["@radhya/mach"])}catch{return!1}}function zf(e){return ue.existsSync(ge.join(e,"pnpm-lock.yaml"))?{command:"pnpm",args:["add","-D","@radhya/mach@latest"],label:"pnpm add -D @radhya/mach@latest"}:ue.existsSync(ge.join(e,"yarn.lock"))?{command:"yarn",args:["add","-D","@radhya/mach@latest"],label:"yarn add -D @radhya/mach@latest"}:ue.existsSync(ge.join(e,"bun.lockb"))||ue.existsSync(ge.join(e,"bun.lock"))?{command:"bun",args:["add","-d","@radhya/mach@latest"],label:"bun add -d @radhya/mach@latest"}:{command:"npm",args:["install","--save-dev","@radhya/mach@latest"],label:"npm install --save-dev @radhya/mach@latest"}}function Kf(e){let t=zf(e),n=fl(t.command,t.args,{cwd:e,stdio:"inherit",env:{...process.env}});return n.error?{ok:!1,label:t.label,error:n.error.message}:n.status!==0?{ok:!1,label:t.label,error:`${t.command} exited with code ${n.status}`}:{ok:yi(e),label:t.label}}function Wf(e,t){let n=ue.readFileSync(e,"utf-8"),i=Array.from(n.matchAll(qr));if(i.length>0){let f=An(t)||t,p=i.some(A=>An(A[2])===f),g=i.some(A=>An(A[2])!==f);if(p&&!g)return"already";let h=n.replace(qr,(A,S)=>`${S}${t}${S}`);return ue.writeFileSync(e,h),"updated"}let r=/(^[ \t]*)plugins\s*:\s*\[([\s\S]*?)\]/m.exec(n);if(!r||r.index===void 0)return"unsupported";let o=n.includes(`\r
1761
1807
  `)?`\r
1762
1808
  `:`
1763
1809
  `,s=r[1]||"",a=r[2]||"",d=a.match(/\r?\n([ \t]+)\S/)?.[1]||`${s} `,c=a.trim().length===0?`${o}${d}'${t}',${o}${s}`:a.includes(`
1764
- `)||a.includes("\r")?`${o}${d}'${t}',${a}`:`${o}${d}'${t}',${o}${d}${a.trim()}${o}${s}`,u=`${r[0].slice(0,r[0].indexOf("[")+1)}${c}]`;return pe.writeFileSync(e,`${n.slice(0,r.index)}${u}${n.slice(r.index+r[0].length)}`),"inserted"}function al(e,t,n={}){let i=[],r=[],o=[],s=yi(e);if(!s&&n.installPackage){o.push("Installing @radhya/mach locally so Expo can use @radhya/mach/expo-plugin.");let u=Uf(e);u.ok?(s=!0,o.push(`Installed @radhya/mach with ${u.label}.`)):o.push(`Could not install @radhya/mach with ${u.label}: ${u.error||"unknown error"}. Falling back to local plugin.`)}let a=s?hn:Lt;if(s)o.push(`Using packaged Expo plugin ${hn}.`);else{let u=ye.join(e,"plugins/withMachDeepLinks.js");pe.mkdirSync(ye.dirname(u),{recursive:!0}),pe.writeFileSync(u,kf),i.push(ye.relative(e,u)),o.push(`Using local Expo plugin fallback ${Lt}. Install @radhya/mach in this app to use ${hn}.`)}let l=["app.config.ts","app.config.js"].find(u=>pe.existsSync(ye.join(e,u)));if(l){let u=ye.join(e,l),f=Ff(u,a);return f==="inserted"?i.push(l):f==="updated"?(i.push(l),o.push(`${l} updated to use ${a}.`)):f==="already"?o.push(`${l} already includes the Mach Expo plugin.`):o.push(`Add "${a}" to the plugins array in ${l}. Mach could not safely auto-edit this dynamic config.`),{written:i,skipped:r,notes:o}}let d=["app.config.json","app.json"].find(u=>pe.existsSync(ye.join(e,u)));if(!d)return r.push("Expo config plugin insertion: no app.json or app.config.json found."),{written:i,skipped:r,notes:o};let c=ye.join(e,d);try{let u=JSON.parse(pe.readFileSync(c,"utf-8")),f=u.expo&&typeof u.expo=="object"?u.expo:u,p=Lf(f,a);pe.writeFileSync(c,`${JSON.stringify(u,null,2)}
1765
- `),i.push(d),p==="updated"&&o.push(`${d} updated to use ${a}.`)}catch(u){r.push(`Expo config plugin insertion failed: ${u.message}`)}return{written:i,skipped:r,notes:o}}function ll(e){let t=["app.config.ts","app.config.js"].find(i=>pe.existsSync(ye.join(e,i)));if(t){let i=pe.readFileSync(ye.join(e,t),"utf-8");return zr.test(i)?"manual":"missing"}let n=["app.config.json","app.json"].find(i=>pe.existsSync(ye.join(e,i)));if(!n)return"missing";try{let i=JSON.parse(pe.readFileSync(ye.join(e,n),"utf-8")),r=i.expo&&typeof i.expo=="object"?i.expo:i;return Array.isArray(r.plugins)&&r.plugins.some(sl)?"wired":"missing"}catch{return"missing"}}function Wr(e){let t=ol("npx",["--no-install","expo","config","--type","public","--json"],{cwd:e,encoding:"utf-8",timeout:8e3,env:{...process.env,CI:"1",EXPO_NO_TELEMETRY:"1"}});if(t.error||t.status!==0||!t.stdout)return null;let n=t.stdout.trim(),i=n.indexOf("{");if(i<0)return null;try{return JSON.parse(n.slice(i))}catch{return null}}function Bf(e){if(!e||typeof e!="object")return null;let n=(Array.isArray(e.ios?.associatedDomains)?e.ios.associatedDomains:[]).map(s=>typeof s=="string"?s.match(/^applinks:(.+)$/)?.[1]:void 0).find(Boolean),r=(Array.isArray(e.android?.intentFilters)?e.android.intentFilters:[]).flatMap(s=>Array.isArray(s?.data)?s.data:[]).find(s=>s?.scheme==="https"&&typeof s.host=="string")?.host,o=n||r;return!o&&!e.scheme&&!e.ios?.bundleIdentifier&&!e.android?.package?null:{domain:o,scheme:typeof e.scheme=="string"?e.scheme:void 0,iosBundleIdentifier:typeof e.ios?.bundleIdentifier=="string"?e.ios.bundleIdentifier:void 0,androidPackage:typeof e.android?.package=="string"?e.android.package:void 0}}function bi(e){return Bf(Wr(e))}import ze from"fs";import ve from"path";var jf=e=>{ze.mkdirSync(ve.dirname(e),{recursive:!0})},dl=(e,t)=>{jf(e),ze.writeFileSync(e,`${JSON.stringify(t,null,2)}
1766
- `)};var Hf=e=>{let t=e.ios?.appleTeamId,n=e.ios?.bundleIdentifier;return!t||!n?null:`${t}.${n}`};function qr(e){let t=Hf(e);if(!t)return null;let n=e.paths?.length?e.paths:["/*"],i=n.map(s=>s==="/*"?"*":s),r=n.map(s=>({"/":s,comment:s==="/*"?"Matches all URLs":`Matches ${s}`})),o={applinks:{apps:[],details:[{appIDs:[t],components:r,appID:t,paths:i}]}};return e.ios?.webCredentials&&(o.webcredentials={apps:[t]}),e.ios?.activityContinuation&&(o.activitycontinuation={apps:[t]}),o}function Gf(e){let t=e.android?.package;return t?[{relation:["delegate_permission/common.handle_all_urls"],target:{namespace:"android_app",package_name:t,sha256_cert_fingerprints:e.android?.sha256CertFingerprints||[]}}]:null}function Vf(e,t){let n=t.ios?.appStoreId;if(!n||!ze.existsSync(e))return!1;let i=`<meta name="apple-itunes-app" content="app-id=${n}, app-argument=${t.baseUrl}" />`,r=ze.readFileSync(e,"utf-8");if(/name=["']apple-itunes-app["']/i.test(r)){let o=r.replace(/<meta[^>]+name=["']apple-itunes-app["'][^>]*>/i,i);return ze.writeFileSync(e,o),!0}return/<head[^>]*>/i.test(r)?(ze.writeFileSync(e,r.replace(/<head([^>]*)>/i,`<head$1>
1767
- ${i}`)),!0):!1}function cl(e,t){let n=[],i=[],r=[],o=t.web?.outputDir||"deep-links",s=ve.join(e,o),a=qr(t);if(a){let u=pi([ve.join(s,".well-known/apple-app-site-association"),ve.join(s,".well-known/apple-app-site-association.json"),ve.join(s,"apple-app-site-association"),ve.join(s,"apple-app-site-association.json")]);for(let f of u)dl(f,a),n.push(ve.relative(e,f))}else i.push("Apple AASA files: missing ios.appleTeamId or ios.bundleIdentifier");let l=Gf(t);if(l){let u=ve.join(s,".well-known/assetlinks.json");dl(u,l),n.push(ve.relative(e,u)),t.android?.sha256CertFingerprints?.length||r.push("assetlinks.json was generated without SHA256 fingerprints. Add them before Android App Links can verify.")}else i.push("Android assetlinks.json: missing android.package");let d=ve.join(e,Gr);ze.existsSync(d)&&(ze.unlinkSync(d),r.push(`Removed legacy ${Gr}; mach.config.json is now the source of truth.`));let c=ve.join(s,"index.html");return t.web?.smartAppBanner&&Vf(c,t)?n.push(ve.relative(e,c)):t.web?.smartAppBanner&&t.ios?.appStoreId?r.push(`Smart App Banner skipped because ${ve.relative(e,c)} was not found.`):t.web?.smartAppBanner&&r.push("Smart App Banner skipped because ios.appStoreId is not configured."),o!=="public"&&r.push(`Host ${o}/.well-known files at https://${t.domain}/.well-known/.`),{written:n,skipped:i,notes:r}}function Jr(e){if(!ze.existsSync(e))return null;try{return JSON.parse(ze.readFileSync(e,"utf-8"))}catch{return null}}import dt from"fs";import ct from"path";import{spawnSync as zf}from"child_process";var N=(e,t)=>({level:e,message:t}),ul=(e,t)=>ct.join(e,t.web?.outputDir||"deep-links");function Kf(e,t,n="fail"){let i=[],r=ul(e,t),o=ct.join(r,".well-known/apple-app-site-association");if(!qr(t))return i.push(N("warn","Skipping AASA verification because ios.appleTeamId or ios.bundleIdentifier is missing.")),i;if(!dt.existsSync(o))return i.push(N(n,`${ct.relative(e,o)} is missing.`)),i;dt.statSync(o).size>128*1024?i.push(N("fail","Apple AASA file is larger than 128 KB.")):i.push(N("pass","Apple AASA file is under 128 KB."));let l=Jr(o);if(!l)return i.push(N("fail","Apple AASA file is not valid JSON.")),i;let d=`${t.ios?.appleTeamId}.${t.ios?.bundleIdentifier}`,c=l.applinks?.details||[],u=Array.isArray(c)&&c.some(f=>f.appID===d||f.appIDs?.includes(d));return i.push(u?N("pass",`AASA contains ${d}.`):N("fail",`AASA does not contain ${d}.`)),i}function Wf(e,t,n="fail"){let i=[],r=ul(e,t),o=ct.join(r,".well-known/assetlinks.json");if(!t.android?.package)return i.push(N("warn","Skipping Android Asset Links verification because android.package is missing.")),i;if(!dt.existsSync(o))return i.push(N(n,`${ct.relative(e,o)} is missing.`)),i;let s=Jr(o);if(!s||!Array.isArray(s))return i.push(N("fail","assetlinks.json is not a valid JSON array.")),i;let a=s.find(d=>d?.target?.package_name===t.android?.package);i.push(a?N("pass",`assetlinks.json contains ${t.android.package}.`):N("fail",`assetlinks.json does not contain ${t.android.package}.`));let l=a?.target?.sha256_cert_fingerprints;return i.push(Array.isArray(l)&&l.length>0?N("pass","assetlinks.json has at least one SHA256 fingerprint."):N("warn","assetlinks.json has no SHA256 fingerprints.")),i}function qf(e,t,n,i){if(t.framework!=="expo")return[];let r=[],o=Wr(e),a=(Array.isArray(o?.ios?.associatedDomains)?o.ios.associatedDomains:[]).includes(`applinks:${n.domain}`);r.push(a?N("pass",`Expo iOS config contains applinks:${n.domain}.`):N(i?"warn":"fail",`Expo iOS config does not contain applinks:${n.domain}.`));let d=(Array.isArray(o?.android?.intentFilters)?o.android.intentFilters:[]).flatMap(u=>Array.isArray(u?.data)?u.data:[]).some(u=>u?.scheme==="https"&&u.host===n.domain);if(r.push(d?N("pass",`Expo Android config contains App Link host ${n.domain}.`):N(i?"warn":"fail",`Expo Android config does not contain App Link host ${n.domain}.`)),i)return r.push(N("warn","mach.config.json is missing deepLinks; values were inferred from Expo config. Run `mach deeplink setup` to persist Mach metadata and generate hosted files.")),r;let c=ll(e);return c==="wired"?r.push(N("pass","Expo deep link plugin is wired into Expo config and derives values from mach.config.json.")):c==="manual"&&a&&d?r.push(N("pass","Expo resolved config contains the deep-link settings from the dynamic config.")):c==="manual"?r.push(N("warn","Expo deep link plugin exists, but dynamic or missing Expo config means manual plugin insertion must be confirmed.")):a&&d?r.push(N("warn","Expo plugin is not wired, but resolved Expo config already contains the deep-link settings.")):r.push(N("fail","Expo deep link plugin is missing or not wired into Expo config.")),r}function Jf(e,t,n){if(t.framework!=="react-native")return[];let i=[],r=ct.join(e,"android/app/src/main/AndroidManifest.xml");if(dt.existsSync(r)){let s=dt.readFileSync(r,"utf-8");i.push(s.includes(`android:host="${n.domain}"`)?N("pass","AndroidManifest.xml contains the App Links host."):N("warn","AndroidManifest.xml does not contain the App Links host. Native patching is planned for a later phase."))}let o=ct.join(e,"ios");if(dt.existsSync(o)){let a=dt.readdirSync(o,{recursive:!0}).filter(l=>typeof l=="string"&&l.endsWith(".entitlements")).some(l=>dt.readFileSync(ct.join(o,l),"utf-8").includes(`applinks:${n.domain}`));i.push(a?N("pass","iOS entitlements contain the associated domain."):N("warn","iOS entitlements do not contain the associated domain. Native patching is planned for a later phase."))}return i}async function Yr(e,t){let n=[];try{let i=await fetch(e,{redirect:"manual"});if(i.status>=300&&i.status<400&&!t)return n.push(N("fail",`${e} redirects. Apple AASA endpoints must not redirect.`)),n;n.push(i.status===200?N("pass",`${e} returned HTTP 200.`):N("fail",`${e} returned HTTP ${i.status}.`));let r=i.headers.get("content-type")||"";!r.includes("application/json")&&!r.includes("text/json")&&n.push(N("warn",`${e} content-type is "${r||"missing"}"; application/json is recommended.`)),JSON.parse(await i.text()),n.push(N("pass",`${e} contains valid JSON.`))}catch(i){n.push(N("fail",`${e} check failed: ${i.message}`))}return n}async function Yf(e){let t=e.domain;return(await Promise.all([Yr(`https://${t}/.well-known/apple-app-site-association`,!1),Yr(`https://${t}/apple-app-site-association`,!1),Yr(`https://${t}/.well-known/assetlinks.json`,!0)])).flat()}function Xf(e){let t=e.android?.package;if(!t)return[N("warn","Cannot print Android device verification commands because android.package is missing.")];let i=zf("adb",["version"],{encoding:"utf-8"}).status===0?"Run":"Install Android platform-tools, then run";return[N("info",`${i}: adb shell pm set-app-links --package ${t} 0 all`),N("info",`${i}: adb shell pm verify-app-links --re-verify ${t}`),N("info",`${i}: adb shell pm get-app-links ${t}`)]}async function Xr(e,t,n){let i=n.profile||t.deepLinks?.profile||"production",r=t.framework==="expo"?bi(e):null,o=t.framework==="expo"?hi(t,r,i,e):null,s=!t.deepLinks&&!!o,a=t.deepLinks?gi(t,{profile:i,cwd:e,expoHints:r}):o,l=[];if(!a)return[N("fail","mach.config.json is missing deepLinks and Mach could not infer existing deep-link settings. Run `mach deeplink setup`.")];l.push(a.baseUrl?N("pass","deepLinks.baseUrl is configured."):N("fail","deepLinks.baseUrl is missing.")),l.push(a.domain?N("pass","deepLinks.domain is configured."):N("fail","deepLinks.domain is missing.")),l.push(a.scheme?N("pass","deepLinks.scheme is configured."):N("fail","deepLinks.scheme is missing."));let d=s?"warn":"fail";return l.push(...Kf(e,a,d)),l.push(...Wf(e,a,d)),l.push(...qf(e,t,a,s)),l.push(...Jf(e,t,a)),n.live&&l.push(...await Yf(a)),n.androidDevice&&l.push(...Xf(a)),l}var An=()=>process.stdin.isTTY&&process.stdout.isTTY,fl=`${m.npmScope}/mach`,Sn=()=>{Zf("Operation cancelled."),process.exit(0)},eo=e=>{if(typeof e!="string")return;let t=e.trim();return t.length>0?t:void 0},Ye=(...e)=>{for(let t of e){let n=eo(t);if(n)return n}},St=async(e,t,n,i,r)=>{if(t)return t;if(r||!An()){if(i)throw new Error(`${e.replace(/:$/,"")} is required. Pass it as an option or run interactively.`);return}let o=await gl({message:e,initialValue:t||"",placeholder:n,validate(s){if(i&&s.trim().length===0)return"Required."}});return bn(o)&&Sn(),eo(o)};async function nm(e,t,n){let i=$e(e.framework),r=$e(t);if(r)return r;if(i)return i;let o=el();if(n||!An())return o;let s=await em({message:`Which framework should ${m.name} configure?`,initialValue:o,options:[{value:"expo",label:"Expo"},{value:"react-native",label:"React Native"},{value:"flutter",label:"Flutter (not supported yet)"}]});return bn(s)&&Sn(),s}var Ai=e=>e==="ios"||e==="all",Zr=e=>e==="android"||e==="all";async function im(e,t,n){if(t!=="expo"||yi(e)||n.installPlugin===!1)return!1;if(n.installPlugin===!0||n.yes)return!0;if(!An())return!1;let i=await ml({message:`Install ${fl} locally so Expo can use ${fl}/expo-plugin?`,initialValue:!0});return bn(i)&&Sn(),!!i}async function rm(e,t){let n=!!t.yes,i=t.profile||e.deepLinks?.profile||"production",r=Ie(e,i)||{},o=r.ios||{},s=r.android||{},a=e.submit?.[i]?.ios||{},l=e.submit?.[i]?.android||{},d=mt(e,i),c=await nm(e,t.framework,n);if(c==="flutter")throw new Error("Flutter deep-link automation is planned but not supported yet.");let u=tl(e,Qa(t.platform),r),f=e.deepLinks,g=c==="expo"&&(!Ye(t.baseUrl,f?.baseUrl,t.domain?`https://${t.domain}`:void 0)||!Ye(t.scheme,f?.scheme,o.scheme,e.scheme,e.slug,e.name)||Ai(u)&&!Ye(t.iosBundleId,f?.ios?.bundleIdentifier,o.bundleIdentifier,o.bundleId,e.ios?.bundleIdentifier)||Zr(u)&&!Ye(t.androidPackage,f?.android?.package,s.package,s.applicationId,e.android?.package,l.packageName,l.package))?hi(e,bi(process.cwd()),i,process.cwd()):null,h=t.output||f?.web?.outputDir||mi(process.cwd(),e),y=await St("Deep link base URL:",t.baseUrl||f?.baseUrl||(t.domain?`https://${t.domain}`:void 0)||g?.baseUrl,"https://app.example.com",!0,n),b=gn(y),w=t.baseUrl?new URL(b).hostname:void 0,L=await St("Associated domain:",t.domain||w||f?.domain||g?.domain||new URL(b).hostname,"app.example.com",!0,n),_=fi(await St("URI scheme:",Ye(t.scheme,f?.scheme,o.scheme,e.scheme,g?.scheme,e.slug,e.name,"app"),"myapp",!0,n)||"app"),H=Ai(u)?await St("iOS bundle identifier:",Ye(t.iosBundleId,f?.ios?.bundleIdentifier,o.bundleIdentifier,o.bundleId,e.ios?.bundleIdentifier,g?.ios?.bundleIdentifier),"com.example.app",!0,n):f?.ios?.bundleIdentifier||e.ios?.bundleIdentifier,W=Ai(u)?await St("Apple Team ID:",Ye(t.appleTeamId,f?.ios?.appleTeamId,o.appleTeamId,o.developerTeamId,a.appleTeamId,a.developerTeamId,e.ios?.appleTeamId,e.ios?.developerTeamId,d.teamId),"ABCDE12345",!0,n):f?.ios?.appleTeamId||e.ios?.appleTeamId,Z=Ai(u)?await St("App Store ID (optional, for Smart App Banner):",Ye(t.appStoreId,f?.ios?.appStoreId,o.ascAppId,a.ascAppId,e.ios?.ascAppId),"1234567890",!1,n):f?.ios?.appStoreId,Ee=Zr(u)?await St("Android package name:",Ye(t.androidPackage,f?.android?.package,s.package,s.applicationId,e.android?.package,l.packageName,l.package,g?.android?.package),"com.example.app",!0,n):f?.android?.package||e.android?.package,oe=f?.android?.sha256CertFingerprints||[],R=t.androidFingerprint||[],T=e.android?.sha256CertFingerprints||[],E=s.sha256CertFingerprints||[],A=[...R,...oe,...E,...T].filter(Boolean);if(Zr(u)&&A.length===0&&!n&&An()){let v=await gl({message:"Android SHA256 fingerprint (optional now, required for verified App Links):",placeholder:"AA:BB:CC:..."});bn(v)&&Sn(),eo(v)&&A.push(v)}let D=nl(e,{...t,baseUrl:b,domain:L,scheme:_,output:h,appleTeamId:W,appStoreId:Z,androidFingerprint:A});return D.ios={...D.ios||{},bundleIdentifier:H,appleTeamId:W,appStoreId:Z},D.android={...D.android||{},package:Ee,sha256CertFingerprints:Array.from(new Set(A))},{framework:c,platform:u,deepLinks:D}}var Qr=(e,t)=>{t.length!==0&&Qf(t.map(n=>`- ${n}`).join(`
1768
- `),e)},hl=e=>e.filter(t=>t.level==="fail").length;function yl(e){for(let t of e){let n=t.level==="pass"?Ue.green("PASS"):t.level==="warn"?Ue.yellow("WARN"):t.level==="info"?Ue.cyan("INFO"):Ue.red("FAIL");Si.info(`${n} ${t.message}`)}}async function bl(e){try{let t=process.cwd(),n=pl.join(t,m.configFileName),i=ce()||{};if(!tm.existsSync(n)){let b=e.yes||!An()?!0:await ml({message:`${m.configFileName} was not found. Create one with deep link settings?`,initialValue:!0});if(bn(b)&&Sn(),!b)return}let{framework:r,deepLinks:o}=await rm(i,e),s=e.profile||i.deepLinks?.profile||"production",a=il(i,r,o,s),l=rl(a,t),d=cl(t,o),c=await im(t,r,e),u=r==="expo"?al(t,o,{installPackage:c}):{written:[],skipped:[],notes:r==="react-native"?["React Native native patching is planned for a later phase. Hosted files were generated now."]:[]},f=[pl.relative(t,l),...d.written,...u.written],p=[...d.skipped,...u.skipped],g=[...d.notes,...u.notes];Qr("Written",f),Qr("Skipped",p),Qr("Notes",g);let h=await Xr(t,a,{});yl(h);let y=hl(h);if(y>0){Ei(Ue.yellow(`Deep link setup finished with ${y} verification issue(s).`));return}Ei(Ue.green("Deep link setup complete."))}catch(t){Si.error(Ue.red(t.message||"Deep link setup failed.")),process.exit(1)}}async function Al(e){try{let t=ce();t||(Si.error(Ue.red(`No ${m.configFileName} found in the current directory.`)),process.exit(1));let n=await Xr(process.cwd(),t,e);yl(n);let i=hl(n);i>0&&(Ei(Ue.red(`Deep link verification failed with ${i} issue(s).`)),process.exit(1)),Ei(Ue.green("Deep link verification passed."))}catch(t){Si.error(Ue.red(t.message||"Deep link verification failed.")),process.exit(1)}}import{log as Xe,spinner as Sl}from"@clack/prompts";import ut from"chalk";var om=e=>{let t=String(e||"").trim().toLowerCase();if(t==="ios"||t==="android")return t;throw new Error("Pass --platform ios or --platform android.")},sm=e=>{let t=Number(e);if(!Number.isFinite(t))throw new Error("Counter value must be a non-negative integer.");let n=Math.floor(t);if(n<0)throw new Error("Counter value must be a non-negative integer.");return n},am=(e,t,n)=>{let i=String(n.scope||"").trim();if(i)return i;let r=n.profile||"production",o=e==="android"?n.package||n.androidPackage:n.bundleId||n.iosBundleIdentifier;if(o)return String(o).trim();let s=e==="android"?Ln(t,r):Mn(t,r);if(s)return s;throw new Error(e==="android"?`Could not resolve Android package. Set android.package in ${m.configFileName}, or pass --package/--scope.`:`Could not resolve iOS bundle identifier. Set ios.bundleIdentifier in ${m.configFileName}, or pass --bundle-id/--scope.`)},lm=()=>{let e=ce();if(!e)throw new Error(`No ${m.configFileName} found in the current directory. Run \`${m.nameLower} init\` or \`${m.nameLower} link\` first.`);if(!e.projectId)throw new Error(`${m.configFileName} is missing projectId.`);return e},to=e=>{Xe.info(ut.bgBlue.white(" Native Version Counter ")),Xe.info(`${ut.blue("Platform:")} ${e.platform}`),Xe.info(`${ut.blue("Scope:")} ${e.scope}`),Xe.info(`${ut.blue("Current DB value:")} ${e.current}`),Xe.info(`${ut.blue("Next build will use:")} ${e.next}`),e.seeded||Xe.warn(ut.yellow("This counter has not been seeded yet. Existing store apps should run `mach version seed` once before auto-version builds."))};async function no(e,t={}){if(!be()){Xe.error(`You are not logged in. Run \`${m.nameLower} login\` first.`);return}try{let i=lm(),r=om(t.platform),o=am(r,i,t),s=String(i.projectId);if(e==="show"){let c=Sl();t.json||c.start("Fetching native version counter...");let{data:u}=await $.get(`/projects/${s}/version-counters`,{params:{platform:r,scope:o}});if(u.status!=="success")throw new Error(u.message||"Failed to fetch version counter.");t.json?console.log(JSON.stringify(u.counter,null,2)):(c.stop("Fetched native version counter."),to(u.counter));return}let a=sm(t.value),l=Sl();t.json||l.start("Seeding native version counter...");let{data:d}=await $.post(`/projects/${s}/version-counters/seed`,{platform:r,scope:o,value:a,force:!!t.force});if(d.status!=="success")throw new Error(d.message||"Failed to seed version counter.");t.json?console.log(JSON.stringify(d.counter,null,2)):(l.stop(`Seeded ${r} counter for ${o}.`),to(d.counter))}catch(i){let r=i?.response?.data?.message||i?.message||"Version command failed.";if(i?.response?.data?.counter&&!t.json){Xe.error(ut.red(r)),to(i.response.data.counter);return}t.json?console.log(JSON.stringify({status:"error",message:r},null,2)):Xe.error(ut.red(r))}}import{log as De,spinner as wn,text as El,select as Il,confirm as dm,isCancel as En,cancel as In,outro as vn,note as cm}from"@clack/prompts";import K from"chalk";import{execSync as um}from"child_process";async function pm(){try{let e=um("xcrun devicectl list devices --json-output -",{stdio:["pipe","pipe","pipe"]}).toString();return(JSON.parse(e).result?.devices||[]).filter(i=>i.connectionProperties?.transportType==="wired"||i.connectionProperties?.transportType==="localNetwork").map(i=>({udid:i.identifier,name:i.deviceProperties?.name||"Unknown Device",model:i.hardwareProperties?.marketingName||"iPhone"}))}catch{return[]}}var wl=e=>e?.trim().toUpperCase()||void 0;function vl(e){let t=ce(),n=t?mt(t):{},i=wl(e.teamId),r=i||n.teamId;return{...n,teamId:r,developerTeamId:i||n.developerTeamId||r}}async function fm(e){let t=e.udid,n=e.name,i=vl(e),r=i.teamId;if(!t){let s=wn();s.start("Scanning for connected iOS devices...");let a=await pm();if(s.stop(a.length>0?`Found ${a.length} device(s)`:"No devices detected"),a.length===1)t=a[0].udid,n=n||a[0].name,De.info(`Detected: ${K.bold(n)} (${K.dim(t.substring(0,12)+"...")})`);else if(a.length>1){let l=await Il({message:"Select a device to register:",options:a.map(c=>({value:c.udid,label:`${c.name} (${c.model})`,hint:c.udid.substring(0,12)+"..."}))});if(En(l)){In("Cancelled");return}t=l;let d=a.find(c=>c.udid===t);n=n||d.name}else{De.info(K.dim("No connected devices found. Enter UDID manually."));let l=await El({message:"Device UDID:",placeholder:"00008101-XXXXXXXXXXXX",validate(d){if(d.length<10)return"UDID seems too short"}});if(En(l)){In("Cancelled");return}t=l}}if(!n){let s=await El({message:"Device name:",placeholder:"Nitesh's iPhone",validate(a){if(a.length===0)return"Name is required"}});if(En(s)){In("Cancelled");return}n=s}let o=wn();o.start("Registering device...");try{await $.post("/devices",{udid:t,name:n,platform:"ios",addedVia:"cli",teamId:r,teamName:i.teamName,developerTeamId:i.developerTeamId,appStoreConnectTeamId:i.appStoreConnectTeamId,providerId:i.providerId,providerName:i.providerName}),o.stop(K.green("Device registered!")),De.info(` ${K.bold("Name:")} ${n}`),De.info(` ${K.bold("UDID:")} ${K.dim(t)}`),r&&De.info(` ${K.bold("Team:")} ${K.dim(r)}`)}catch(s){o.stop(K.red("Failed to register device")),De.error(s.response?.data?.message||s.message)}vn(K.blue("---"))}async function mm(e={}){let t=wl(e.teamId),n=wn();n.start("Fetching registered devices...");try{let r=(await $.get("/devices",t?{params:{teamId:t}}:void 0)).data.devices||[];if(n.stop(`${r.length} device(s) registered${t?` for team ${t}`:""}`),r.length===0){De.info(K.dim(`No devices registered yet. Run \`${m.nameLower} device register\` to add one.`)),vn(K.blue("---"));return}let o=r.map(s=>{let a=new Date(s.createdAt).toLocaleDateString();return` ${K.bold(s.name.padEnd(24))} ${K.dim(s.udid.padEnd(28))} ${K.dim((s.teamId||"-").padEnd(12))} ${K.cyan((s.addedVia||"-").padEnd(10))} ${K.dim(a)}`});cm(` ${K.bold("Name".padEnd(24))} ${"UDID".padEnd(28)} ${"Team".padEnd(12)} ${"Via".padEnd(10)} Date
1810
+ `)||a.includes("\r")?`${o}${d}'${t}',${a}`:`${o}${d}'${t}',${o}${d}${a.trim()}${o}${s}`,u=`${r[0].slice(0,r[0].indexOf("[")+1)}${c}]`;return ue.writeFileSync(e,`${n.slice(0,r.index)}${u}${n.slice(r.index+r[0].length)}`),"inserted"}function gl(e,t,n={}){let i=[],r=[],o=[],s=yi(e);if(!s&&n.installPackage){o.push("Installing @radhya/mach locally so Expo can use @radhya/mach/expo-plugin.");let u=Kf(e);u.ok?(s=!0,o.push(`Installed @radhya/mach with ${u.label}.`)):o.push(`Could not install @radhya/mach with ${u.label}: ${u.error||"unknown error"}. Falling back to local plugin.`)}let a=s?hn:Lt;if(s)o.push(`Using packaged Expo plugin ${hn}.`);else{let u=ge.join(e,"plugins/withMachDeepLinks.js");ue.mkdirSync(ge.dirname(u),{recursive:!0}),ue.writeFileSync(u,Hf),i.push(ge.relative(e,u)),o.push(`Using local Expo plugin fallback ${Lt}. Install @radhya/mach in this app to use ${hn}.`)}let l=["app.config.ts","app.config.js"].find(u=>ue.existsSync(ge.join(e,u)));if(l){let u=ge.join(e,l),f=Wf(u,a);return f==="inserted"?i.push(l):f==="updated"?(i.push(l),o.push(`${l} updated to use ${a}.`)):f==="already"?o.push(`${l} already includes the Mach Expo plugin.`):o.push(`Add "${a}" to the plugins array in ${l}. Mach could not safely auto-edit this dynamic config.`),{written:i,skipped:r,notes:o}}let d=["app.config.json","app.json"].find(u=>ue.existsSync(ge.join(e,u)));if(!d)return r.push("Expo config plugin insertion: no app.json or app.config.json found."),{written:i,skipped:r,notes:o};let c=ge.join(e,d);try{let u=JSON.parse(ue.readFileSync(c,"utf-8")),f=u.expo&&typeof u.expo=="object"?u.expo:u,p=Vf(f,a);ue.writeFileSync(c,`${JSON.stringify(u,null,2)}
1811
+ `),i.push(d),p==="updated"&&o.push(`${d} updated to use ${a}.`)}catch(u){r.push(`Expo config plugin insertion failed: ${u.message}`)}return{written:i,skipped:r,notes:o}}function hl(e){let t=["app.config.ts","app.config.js"].find(i=>ue.existsSync(ge.join(e,i)));if(t){let i=ue.readFileSync(ge.join(e,t),"utf-8");return qr.test(i)?"manual":"missing"}let n=["app.config.json","app.json"].find(i=>ue.existsSync(ge.join(e,i)));if(!n)return"missing";try{let i=JSON.parse(ue.readFileSync(ge.join(e,n),"utf-8")),r=i.expo&&typeof i.expo=="object"?i.expo:i;return Array.isArray(r.plugins)&&r.plugins.some(ml)?"wired":"missing"}catch{return"missing"}}function Xr(e){let t=fl("npx",["--no-install","expo","config","--type","public","--json"],{cwd:e,encoding:"utf-8",timeout:8e3,env:{...process.env,CI:"1",EXPO_NO_TELEMETRY:"1"}});if(t.error||t.status!==0||!t.stdout)return null;let n=t.stdout.trim(),i=n.indexOf("{");if(i<0)return null;try{return JSON.parse(n.slice(i))}catch{return null}}function Yf(e){if(!e||typeof e!="object")return null;let n=(Array.isArray(e.ios?.associatedDomains)?e.ios.associatedDomains:[]).map(s=>typeof s=="string"?s.match(/^applinks:(.+)$/)?.[1]:void 0).find(Boolean),r=(Array.isArray(e.android?.intentFilters)?e.android.intentFilters:[]).flatMap(s=>Array.isArray(s?.data)?s.data:[]).find(s=>s?.scheme==="https"&&typeof s.host=="string")?.host,o=n||r;return!o&&!e.scheme&&!e.ios?.bundleIdentifier&&!e.android?.package?null:{domain:o,scheme:typeof e.scheme=="string"?e.scheme:void 0,iosBundleIdentifier:typeof e.ios?.bundleIdentifier=="string"?e.ios.bundleIdentifier:void 0,androidPackage:typeof e.android?.package=="string"?e.android.package:void 0}}function Si(e){return Yf(Xr(e))}import ze from"fs";import $e from"path";var qf=e=>{ze.mkdirSync($e.dirname(e),{recursive:!0})},Al=(e,t)=>{qf(e),ze.writeFileSync(e,`${JSON.stringify(t,null,2)}
1812
+ `)};var Jf=e=>{let t=e.ios?.appleTeamId,n=e.ios?.bundleIdentifier;return!t||!n?null:`${t}.${n}`};function Zr(e){let t=Jf(e);if(!t)return null;let n=e.paths?.length?e.paths:["/*"],i=n.map(s=>s==="/*"?"*":s),r=n.map(s=>({"/":s,comment:s==="/*"?"Matches all URLs":`Matches ${s}`})),o={applinks:{apps:[],details:[{appIDs:[t],components:r,appID:t,paths:i}]}};return e.ios?.webCredentials&&(o.webcredentials={apps:[t]}),e.ios?.activityContinuation&&(o.activitycontinuation={apps:[t]}),o}function Xf(e){let t=e.android?.package;return t?[{relation:["delegate_permission/common.handle_all_urls"],target:{namespace:"android_app",package_name:t,sha256_cert_fingerprints:e.android?.sha256CertFingerprints||[]}}]:null}function Zf(e,t){let n=t.ios?.appStoreId;if(!n||!ze.existsSync(e))return!1;let i=`<meta name="apple-itunes-app" content="app-id=${n}, app-argument=${t.baseUrl}" />`,r=ze.readFileSync(e,"utf-8");if(/name=["']apple-itunes-app["']/i.test(r)){let o=r.replace(/<meta[^>]+name=["']apple-itunes-app["'][^>]*>/i,i);return ze.writeFileSync(e,o),!0}return/<head[^>]*>/i.test(r)?(ze.writeFileSync(e,r.replace(/<head([^>]*)>/i,`<head$1>
1813
+ ${i}`)),!0):!1}function yl(e,t){let n=[],i=[],r=[],o=t.web?.outputDir||"deep-links",s=$e.join(e,o),a=Zr(t);if(a){let u=fi([$e.join(s,".well-known/apple-app-site-association"),$e.join(s,".well-known/apple-app-site-association.json"),$e.join(s,"apple-app-site-association"),$e.join(s,"apple-app-site-association.json")]);for(let f of u)Al(f,a),n.push($e.relative(e,f))}else i.push("Apple AASA files: missing ios.appleTeamId or ios.bundleIdentifier");let l=Xf(t);if(l){let u=$e.join(s,".well-known/assetlinks.json");Al(u,l),n.push($e.relative(e,u)),t.android?.sha256CertFingerprints?.length||r.push("assetlinks.json was generated without SHA256 fingerprints. Add them before Android App Links can verify.")}else i.push("Android assetlinks.json: missing android.package");let d=$e.join(e,Wr);ze.existsSync(d)&&(ze.unlinkSync(d),r.push(`Removed legacy ${Wr}; mach.config.json is now the source of truth.`));let c=$e.join(s,"index.html");return t.web?.smartAppBanner&&Zf(c,t)?n.push($e.relative(e,c)):t.web?.smartAppBanner&&t.ios?.appStoreId?r.push(`Smart App Banner skipped because ${$e.relative(e,c)} was not found.`):t.web?.smartAppBanner&&r.push("Smart App Banner skipped because ios.appStoreId is not configured."),o!=="public"&&r.push(`Host ${o}/.well-known files at https://${t.domain}/.well-known/.`),{written:n,skipped:i,notes:r}}function Qr(e){if(!ze.existsSync(e))return null;try{return JSON.parse(ze.readFileSync(e,"utf-8"))}catch{return null}}import lt from"fs";import dt from"path";import{spawnSync as Qf}from"child_process";var k=(e,t)=>({level:e,message:t}),Sl=(e,t)=>dt.join(e,t.web?.outputDir||"deep-links");function em(e,t,n="fail"){let i=[],r=Sl(e,t),o=dt.join(r,".well-known/apple-app-site-association");if(!Zr(t))return i.push(k("warn","Skipping AASA verification because ios.appleTeamId or ios.bundleIdentifier is missing.")),i;if(!lt.existsSync(o))return i.push(k(n,`${dt.relative(e,o)} is missing.`)),i;lt.statSync(o).size>128*1024?i.push(k("fail","Apple AASA file is larger than 128 KB.")):i.push(k("pass","Apple AASA file is under 128 KB."));let l=Qr(o);if(!l)return i.push(k("fail","Apple AASA file is not valid JSON.")),i;let d=`${t.ios?.appleTeamId}.${t.ios?.bundleIdentifier}`,c=l.applinks?.details||[],u=Array.isArray(c)&&c.some(f=>f.appID===d||f.appIDs?.includes(d));return i.push(u?k("pass",`AASA contains ${d}.`):k("fail",`AASA does not contain ${d}.`)),i}function tm(e,t,n="fail"){let i=[],r=Sl(e,t),o=dt.join(r,".well-known/assetlinks.json");if(!t.android?.package)return i.push(k("warn","Skipping Android Asset Links verification because android.package is missing.")),i;if(!lt.existsSync(o))return i.push(k(n,`${dt.relative(e,o)} is missing.`)),i;let s=Qr(o);if(!s||!Array.isArray(s))return i.push(k("fail","assetlinks.json is not a valid JSON array.")),i;let a=s.find(d=>d?.target?.package_name===t.android?.package);i.push(a?k("pass",`assetlinks.json contains ${t.android.package}.`):k("fail",`assetlinks.json does not contain ${t.android.package}.`));let l=a?.target?.sha256_cert_fingerprints;return i.push(Array.isArray(l)&&l.length>0?k("pass","assetlinks.json has at least one SHA256 fingerprint."):k("warn","assetlinks.json has no SHA256 fingerprints.")),i}function nm(e,t,n,i){if(t.framework!=="expo")return[];let r=[],o=Xr(e),a=(Array.isArray(o?.ios?.associatedDomains)?o.ios.associatedDomains:[]).includes(`applinks:${n.domain}`);r.push(a?k("pass",`Expo iOS config contains applinks:${n.domain}.`):k(i?"warn":"fail",`Expo iOS config does not contain applinks:${n.domain}.`));let d=(Array.isArray(o?.android?.intentFilters)?o.android.intentFilters:[]).flatMap(u=>Array.isArray(u?.data)?u.data:[]).some(u=>u?.scheme==="https"&&u.host===n.domain);if(r.push(d?k("pass",`Expo Android config contains App Link host ${n.domain}.`):k(i?"warn":"fail",`Expo Android config does not contain App Link host ${n.domain}.`)),i)return r.push(k("warn","mach.config.json is missing deepLinks; values were inferred from Expo config. Run `mach deeplink setup` to persist Mach metadata and generate hosted files.")),r;let c=hl(e);return c==="wired"?r.push(k("pass","Expo deep link plugin is wired into Expo config and derives values from mach.config.json.")):c==="manual"&&a&&d?r.push(k("pass","Expo resolved config contains the deep-link settings from the dynamic config.")):c==="manual"?r.push(k("warn","Expo deep link plugin exists, but dynamic or missing Expo config means manual plugin insertion must be confirmed.")):a&&d?r.push(k("warn","Expo plugin is not wired, but resolved Expo config already contains the deep-link settings.")):r.push(k("fail","Expo deep link plugin is missing or not wired into Expo config.")),r}function im(e,t,n){if(t.framework!=="react-native")return[];let i=[],r=dt.join(e,"android/app/src/main/AndroidManifest.xml");if(lt.existsSync(r)){let s=lt.readFileSync(r,"utf-8");i.push(s.includes(`android:host="${n.domain}"`)?k("pass","AndroidManifest.xml contains the App Links host."):k("warn","AndroidManifest.xml does not contain the App Links host. Native patching is planned for a later phase."))}let o=dt.join(e,"ios");if(lt.existsSync(o)){let a=lt.readdirSync(o,{recursive:!0}).filter(l=>typeof l=="string"&&l.endsWith(".entitlements")).some(l=>lt.readFileSync(dt.join(o,l),"utf-8").includes(`applinks:${n.domain}`));i.push(a?k("pass","iOS entitlements contain the associated domain."):k("warn","iOS entitlements do not contain the associated domain. Native patching is planned for a later phase."))}return i}async function eo(e,t){let n=[];try{let i=await fetch(e,{redirect:"manual"});if(i.status>=300&&i.status<400&&!t)return n.push(k("fail",`${e} redirects. Apple AASA endpoints must not redirect.`)),n;n.push(i.status===200?k("pass",`${e} returned HTTP 200.`):k("fail",`${e} returned HTTP ${i.status}.`));let r=i.headers.get("content-type")||"";!r.includes("application/json")&&!r.includes("text/json")&&n.push(k("warn",`${e} content-type is "${r||"missing"}"; application/json is recommended.`)),JSON.parse(await i.text()),n.push(k("pass",`${e} contains valid JSON.`))}catch(i){n.push(k("fail",`${e} check failed: ${i.message}`))}return n}async function rm(e){let t=e.domain;return(await Promise.all([eo(`https://${t}/.well-known/apple-app-site-association`,!1),eo(`https://${t}/apple-app-site-association`,!1),eo(`https://${t}/.well-known/assetlinks.json`,!0)])).flat()}function om(e){let t=e.android?.package;if(!t)return[k("warn","Cannot print Android device verification commands because android.package is missing.")];let i=Qf("adb",["version"],{encoding:"utf-8"}).status===0?"Run":"Install Android platform-tools, then run";return[k("info",`${i}: adb shell pm set-app-links --package ${t} 0 all`),k("info",`${i}: adb shell pm verify-app-links --re-verify ${t}`),k("info",`${i}: adb shell pm get-app-links ${t}`)]}async function to(e,t,n){let i=n.profile||t.deepLinks?.profile||"production",r=t.framework==="expo"?Si(e):null,o=t.framework==="expo"?Ai(t,r,i,e):null,s=!t.deepLinks&&!!o,a=t.deepLinks?hi(t,{profile:i,cwd:e,expoHints:r}):o,l=[];if(!a)return[k("fail","mach.config.json is missing deepLinks and Mach could not infer existing deep-link settings. Run `mach deeplink setup`.")];l.push(a.baseUrl?k("pass","deepLinks.baseUrl is configured."):k("fail","deepLinks.baseUrl is missing.")),l.push(a.domain?k("pass","deepLinks.domain is configured."):k("fail","deepLinks.domain is missing.")),l.push(a.scheme?k("pass","deepLinks.scheme is configured."):k("fail","deepLinks.scheme is missing."));let d=s?"warn":"fail";return l.push(...em(e,a,d)),l.push(...tm(e,a,d)),l.push(...nm(e,t,a,s)),l.push(...im(e,t,a)),n.live&&l.push(...await rm(a)),n.androidDevice&&l.push(...om(a)),l}var Sn=()=>process.stdin.isTTY&&process.stdout.isTTY,El=`${m.npmScope}/mach`,bn=()=>{sm("Operation cancelled."),process.exit(0)},ro=e=>{if(typeof e!="string")return;let t=e.trim();return t.length>0?t:void 0},qe=(...e)=>{for(let t of e){let n=ro(t);if(n)return n}},St=async(e,t,n,i,r)=>{if(t)return t;if(r||!Sn()){if(i)throw new Error(`${e.replace(/:$/,"")} is required. Pass it as an option or run interactively.`);return}let o=await _l({message:e,initialValue:t||"",placeholder:n,validate(s){if(i&&s.trim().length===0)return"Required."}});return yn(o)&&bn(),ro(o)};async function cm(e,t,n){let i=Re(e.framework),r=Re(t);if(r)return r;if(i)return i;let o=ll();if(n||!Sn())return o;let s=await lm({message:`Which framework should ${m.name} configure?`,initialValue:o,options:[{value:"expo",label:"Expo"},{value:"react-native",label:"React Native"},{value:"flutter",label:"Flutter (not supported yet)"}]});return yn(s)&&bn(),s}var bi=e=>e==="ios"||e==="all",no=e=>e==="android"||e==="all";async function um(e,t,n){if(t!=="expo"||yi(e)||n.installPlugin===!1)return!1;if(n.installPlugin===!0||n.yes)return!0;if(!Sn())return!1;let i=await Il({message:`Install ${El} locally so Expo can use ${El}/expo-plugin?`,initialValue:!0});return yn(i)&&bn(),!!i}async function pm(e,t){let n=!!t.yes,i=t.profile||e.deepLinks?.profile||"production",r=we(e,i)||{},o=r.ios||{},s=r.android||{},a=e.submit?.[i]?.ios||{},l=e.submit?.[i]?.android||{},d=ft(e,i),c=await cm(e,t.framework,n);if(c==="flutter")throw new Error("Flutter deep-link automation is planned but not supported yet.");let u=dl(e,al(t.platform),r),f=e.deepLinks,g=c==="expo"&&(!qe(t.baseUrl,f?.baseUrl,t.domain?`https://${t.domain}`:void 0)||!qe(t.scheme,f?.scheme,o.scheme,e.scheme,e.slug,e.name)||bi(u)&&!qe(t.iosBundleId,f?.ios?.bundleIdentifier,o.bundleIdentifier,o.bundleId,e.ios?.bundleIdentifier)||no(u)&&!qe(t.androidPackage,f?.android?.package,s.package,s.applicationId,e.android?.package,l.packageName,l.package))?Ai(e,Si(process.cwd()),i,process.cwd()):null,h=t.output||f?.web?.outputDir||gi(process.cwd(),e),A=await St("Deep link base URL:",t.baseUrl||f?.baseUrl||(t.domain?`https://${t.domain}`:void 0)||g?.baseUrl,"https://app.example.com",!0,n),S=gn(A),I=t.baseUrl?new URL(S).hostname:void 0,L=await St("Associated domain:",t.domain||I||f?.domain||g?.domain||new URL(S).hostname,"app.example.com",!0,n),w=mi(await St("URI scheme:",qe(t.scheme,f?.scheme,o.scheme,e.scheme,g?.scheme,e.slug,e.name,"app"),"myapp",!0,n)||"app"),j=bi(u)?await St("iOS bundle identifier:",qe(t.iosBundleId,f?.ios?.bundleIdentifier,o.bundleIdentifier,o.bundleId,e.ios?.bundleIdentifier,g?.ios?.bundleIdentifier),"com.example.app",!0,n):f?.ios?.bundleIdentifier||e.ios?.bundleIdentifier,W=bi(u)?await St("Apple Team ID:",qe(t.appleTeamId,f?.ios?.appleTeamId,o.appleTeamId,o.developerTeamId,a.appleTeamId,a.developerTeamId,e.ios?.appleTeamId,e.ios?.developerTeamId,d.teamId),"ABCDE12345",!0,n):f?.ios?.appleTeamId||e.ios?.appleTeamId,Z=bi(u)?await St("App Store ID (optional, for Smart App Banner):",qe(t.appStoreId,f?.ios?.appStoreId,o.ascAppId,a.ascAppId,e.ios?.ascAppId),"1234567890",!1,n):f?.ios?.appStoreId,_e=no(u)?await St("Android package name:",qe(t.androidPackage,f?.android?.package,s.package,s.applicationId,e.android?.package,l.packageName,l.package,g?.android?.package),"com.example.app",!0,n):f?.android?.package||e.android?.package,re=f?.android?.sha256CertFingerprints||[],O=t.androidFingerprint||[],x=e.android?.sha256CertFingerprints||[],y=s.sha256CertFingerprints||[],$=[...O,...re,...y,...x].filter(Boolean);if(no(u)&&$.length===0&&!n&&Sn()){let R=await _l({message:"Android SHA256 fingerprint (optional now, required for verified App Links):",placeholder:"AA:BB:CC:..."});yn(R)&&bn(),ro(R)&&$.push(R)}let _=cl(e,{...t,baseUrl:S,domain:L,scheme:w,output:h,appleTeamId:W,appStoreId:Z,androidFingerprint:$});return _.ios={..._.ios||{},bundleIdentifier:j,appleTeamId:W,appStoreId:Z},_.android={..._.android||{},package:_e,sha256CertFingerprints:Array.from(new Set($))},{framework:c,platform:u,deepLinks:_}}var io=(e,t)=>{t.length!==0&&am(t.map(n=>`- ${n}`).join(`
1814
+ `),e)},wl=e=>e.filter(t=>t.level==="fail").length;function $l(e){for(let t of e){let n=t.level==="pass"?Fe.green("PASS"):t.level==="warn"?Fe.yellow("WARN"):t.level==="info"?Fe.cyan("INFO"):Fe.red("FAIL");Ei.info(`${n} ${t.message}`)}}async function vl(e){try{let t=process.cwd(),n=bl.join(t,m.configFileName),i=de()||{};if(!dm.existsSync(n)){let S=e.yes||!Sn()?!0:await Il({message:`${m.configFileName} was not found. Create one with deep link settings?`,initialValue:!0});if(yn(S)&&bn(),!S)return}let{framework:r,deepLinks:o}=await pm(i,e),s=e.profile||i.deepLinks?.profile||"production",a=ul(i,r,o,s),l=pl(a,t),d=yl(t,o),c=await um(t,r,e),u=r==="expo"?gl(t,o,{installPackage:c}):{written:[],skipped:[],notes:r==="react-native"?["React Native native patching is planned for a later phase. Hosted files were generated now."]:[]},f=[bl.relative(t,l),...d.written,...u.written],p=[...d.skipped,...u.skipped],g=[...d.notes,...u.notes];io("Written",f),io("Skipped",p),io("Notes",g);let h=await to(t,a,{});$l(h);let A=wl(h);if(A>0){Ii(Fe.yellow(`Deep link setup finished with ${A} verification issue(s).`));return}Ii(Fe.green("Deep link setup complete."))}catch(t){Ei.error(Fe.red(t.message||"Deep link setup failed.")),process.exit(1)}}async function Rl(e){try{let t=de();t||(Ei.error(Fe.red(`No ${m.configFileName} found in the current directory.`)),process.exit(1));let n=await to(process.cwd(),t,e);$l(n);let i=wl(n);i>0&&(Ii(Fe.red(`Deep link verification failed with ${i} issue(s).`)),process.exit(1)),Ii(Fe.green("Deep link verification passed."))}catch(t){Ei.error(Fe.red(t.message||"Deep link verification failed.")),process.exit(1)}}import{log as Je,spinner as Ol}from"@clack/prompts";import ct from"chalk";var fm=e=>{let t=String(e||"").trim().toLowerCase();if(t==="ios"||t==="android")return t;throw new Error("Pass --platform ios or --platform android.")},mm=e=>{let t=Number(e);if(!Number.isFinite(t))throw new Error("Counter value must be a non-negative integer.");let n=Math.floor(t);if(n<0)throw new Error("Counter value must be a non-negative integer.");return n},gm=(e,t,n)=>{let i=String(n.scope||"").trim();if(i)return i;let r=n.profile||"production",o=e==="android"?n.package||n.androidPackage:n.bundleId||n.iosBundleIdentifier;if(o)return String(o).trim();let s=e==="android"?Ln(t,r):Mn(t,r);if(s)return s;throw new Error(e==="android"?`Could not resolve Android package. Set android.package in ${m.configFileName}, or pass --package/--scope.`:`Could not resolve iOS bundle identifier. Set ios.bundleIdentifier in ${m.configFileName}, or pass --bundle-id/--scope.`)},hm=()=>{let e=de();if(!e)throw new Error(`No ${m.configFileName} found in the current directory. Run \`${m.nameLower} init\` or \`${m.nameLower} link\` first.`);if(!e.projectId)throw new Error(`${m.configFileName} is missing projectId.`);return e},oo=e=>{Je.info(ct.bgBlue.white(" Native Version Counter ")),Je.info(`${ct.blue("Platform:")} ${e.platform}`),Je.info(`${ct.blue("Scope:")} ${e.scope}`),Je.info(`${ct.blue("Current DB value:")} ${e.current}`),Je.info(`${ct.blue("Next build will use:")} ${e.next}`),e.seeded||Je.warn(ct.yellow("This counter has not been seeded yet. Existing store apps should run `mach version seed` once before auto-version builds."))};async function so(e,t={}){if(!Ae()){Je.error(`You are not logged in. Run \`${m.nameLower} login\` first.`);return}try{let i=hm(),r=fm(t.platform),o=gm(r,i,t),s=String(i.projectId);if(e==="show"){let c=Ol();t.json||c.start("Fetching native version counter...");let{data:u}=await v.get(`/projects/${s}/version-counters`,{params:{platform:r,scope:o}});if(u.status!=="success")throw new Error(u.message||"Failed to fetch version counter.");t.json?console.log(JSON.stringify(u.counter,null,2)):(c.stop("Fetched native version counter."),oo(u.counter));return}let a=mm(t.value),l=Ol();t.json||l.start("Seeding native version counter...");let{data:d}=await v.post(`/projects/${s}/version-counters/seed`,{platform:r,scope:o,value:a,force:!!t.force});if(d.status!=="success")throw new Error(d.message||"Failed to seed version counter.");t.json?console.log(JSON.stringify(d.counter,null,2)):(l.stop(`Seeded ${r} counter for ${o}.`),oo(d.counter))}catch(i){let r=i?.response?.data?.message||i?.message||"Version command failed.";if(i?.response?.data?.counter&&!t.json){Je.error(ct.red(r)),oo(i.response.data.counter);return}t.json?console.log(JSON.stringify({status:"error",message:r},null,2)):Je.error(ct.red(r))}}import{log as Ce,spinner as _n,text as Pl,select as Dl,confirm as Am,isCancel as En,cancel as In,outro as wn,note as ym}from"@clack/prompts";import K from"chalk";import{execSync as Sm}from"child_process";async function bm(){try{let e=Sm("xcrun devicectl list devices --json-output -",{stdio:["pipe","pipe","pipe"]}).toString();return(JSON.parse(e).result?.devices||[]).filter(i=>i.connectionProperties?.transportType==="wired"||i.connectionProperties?.transportType==="localNetwork").map(i=>({udid:i.identifier,name:i.deviceProperties?.name||"Unknown Device",model:i.hardwareProperties?.marketingName||"iPhone"}))}catch{return[]}}var Cl=e=>e?.trim().toUpperCase()||void 0;function Tl(e){let t=de(),n=t?ft(t):{},i=Cl(e.teamId),r=i||n.teamId;return{...n,teamId:r,developerTeamId:i||n.developerTeamId||r}}async function Em(e){let t=e.udid,n=e.name,i=Tl(e),r=i.teamId;if(!t){let s=_n();s.start("Scanning for connected iOS devices...");let a=await bm();if(s.stop(a.length>0?`Found ${a.length} device(s)`:"No devices detected"),a.length===1)t=a[0].udid,n=n||a[0].name,Ce.info(`Detected: ${K.bold(n)} (${K.dim(t.substring(0,12)+"...")})`);else if(a.length>1){let l=await Dl({message:"Select a device to register:",options:a.map(c=>({value:c.udid,label:`${c.name} (${c.model})`,hint:c.udid.substring(0,12)+"..."}))});if(En(l)){In("Cancelled");return}t=l;let d=a.find(c=>c.udid===t);n=n||d.name}else{Ce.info(K.dim("No connected devices found. Enter UDID manually."));let l=await Pl({message:"Device UDID:",placeholder:"00008101-XXXXXXXXXXXX",validate(d){if(d.length<10)return"UDID seems too short"}});if(En(l)){In("Cancelled");return}t=l}}if(!n){let s=await Pl({message:"Device name:",placeholder:"Nitesh's iPhone",validate(a){if(a.length===0)return"Name is required"}});if(En(s)){In("Cancelled");return}n=s}let o=_n();o.start("Registering device...");try{await v.post("/devices",{udid:t,name:n,platform:"ios",addedVia:"cli",teamId:r,teamName:i.teamName,developerTeamId:i.developerTeamId,appStoreConnectTeamId:i.appStoreConnectTeamId,providerId:i.providerId,providerName:i.providerName}),o.stop(K.green("Device registered!")),Ce.info(` ${K.bold("Name:")} ${n}`),Ce.info(` ${K.bold("UDID:")} ${K.dim(t)}`),r&&Ce.info(` ${K.bold("Team:")} ${K.dim(r)}`)}catch(s){o.stop(K.red("Failed to register device")),Ce.error(s.response?.data?.message||s.message)}wn(K.blue("---"))}async function Im(e={}){let t=Cl(e.teamId),n=_n();n.start("Fetching registered devices...");try{let r=(await v.get("/devices",t?{params:{teamId:t}}:void 0)).data.devices||[];if(n.stop(`${r.length} device(s) registered${t?` for team ${t}`:""}`),r.length===0){Ce.info(K.dim(`No devices registered yet. Run \`${m.nameLower} device register\` to add one.`)),wn(K.blue("---"));return}let o=r.map(s=>{let a=new Date(s.createdAt).toLocaleDateString();return` ${K.bold(s.name.padEnd(24))} ${K.dim(s.udid.padEnd(28))} ${K.dim((s.teamId||"-").padEnd(12))} ${K.cyan((s.addedVia||"-").padEnd(10))} ${K.dim(a)}`});ym(` ${K.bold("Name".padEnd(24))} ${"UDID".padEnd(28)} ${"Team".padEnd(12)} ${"Via".padEnd(10)} Date
1769
1815
  `+o.join(`
1770
- `),"Registered Devices")}catch(i){n.stop(K.red("Failed to fetch devices")),De.error(i.response?.data?.message||i.message)}vn(K.blue("---"))}async function gm(e){let t=e.udid,n=vl(e).teamId;if(!t){let o=wn();o.start("Fetching registered devices...");try{let a=(await $.get("/devices",n?{params:{teamId:n}}:void 0)).data.devices||[];if(o.stop(`${a.length} device(s) found`),a.length===0){De.info(K.dim("No devices to remove.")),vn(K.blue("---"));return}let l=await Il({message:"Select device to remove:",options:a.map(c=>({value:c.deviceKey||c.udid,label:c.name,hint:`${c.udid.substring(0,12)}...${c.teamId?` \xB7 ${c.teamId}`:""}`}))});if(En(l)){In("Cancelled");return}let d=a.find(c=>(c.deviceKey||c.udid)===l);t=d?.udid||l,n=d?.teamId||n}catch(s){o.stop(K.red("Failed to fetch devices")),De.error(s.response?.data?.message||s.message);return}}let i=await dm({message:`Remove device ${K.dim(t.substring(0,12)+"...")}?`});if(En(i)||!i){In("Cancelled");return}let r=wn();r.start("Removing device...");try{await $.delete(`/devices/${encodeURIComponent(t)}`,n?{params:{teamId:n}}:void 0),r.stop(K.green("Device removed"))}catch(o){r.stop(K.red("Failed to remove device")),De.error(o.response?.data?.message||o.message)}vn(K.blue("---"))}async function Ii(e,t){switch(e){case"register":await fm(t);break;case"list":await mm(t);break;case"remove":await gm(t);break;default:De.error(`Unknown action: ${e}`)}}import{log as Ce,spinner as Ql}from"@clack/prompts";import Be from"chalk";import Ti from"path";import Rn from"fs";import Jm from"os";import Ym from"axios";var Pe=(o=>(o.CRITICAL="critical",o.HIGH="high",o.MEDIUM="medium",o.LOW="low",o.INFO="info",o))(Pe||{}),Fe=(l=>(l.PERMISSIONS="permissions",l.SECRETS="secrets",l.DEPENDENCIES="dependencies",l.STORAGE="storage",l.NETWORK="network",l.DEBUG="debug",l.MANIFEST="manifest",l.ATS="ats",l))(Fe||{});import{spinner as Gl,log as $n}from"@clack/prompts";import _e from"chalk";import{execSync as Fm}from"child_process";import Vl from"fs";import zl from"path";import pt from"fs";import _n from"path";import{execSync as hm}from"child_process";var _l={"android.permission.READ_PHONE_STATE":{severity:"high",description:"Can read phone number, IMEI, carrier info"},"android.permission.CALL_PHONE":{severity:"high",description:"Can make calls without user interaction"},"android.permission.SEND_SMS":{severity:"high",description:"Can send SMS without user interaction"},"android.permission.READ_SMS":{severity:"high",description:"Can read user SMS messages"},"android.permission.READ_CONTACTS":{severity:"medium",description:"Can read user contacts"},"android.permission.WRITE_CONTACTS":{severity:"medium",description:"Can modify user contacts"},"android.permission.READ_CALL_LOG":{severity:"high",description:"Can read call history"},"android.permission.CAMERA":{severity:"medium",description:"Camera access"},"android.permission.RECORD_AUDIO":{severity:"medium",description:"Microphone access"},"android.permission.ACCESS_FINE_LOCATION":{severity:"medium",description:"Precise GPS location"},"android.permission.ACCESS_COARSE_LOCATION":{severity:"medium",description:"Approximate location"},"android.permission.ACCESS_BACKGROUND_LOCATION":{severity:"high",description:"Background location tracking"},"android.permission.READ_EXTERNAL_STORAGE":{severity:"medium",description:"Read files on device"},"android.permission.WRITE_EXTERNAL_STORAGE":{severity:"medium",description:"Write files on device"},"android.permission.READ_MEDIA_IMAGES":{severity:"low",description:"Read photos"},"android.permission.READ_MEDIA_VIDEO":{severity:"low",description:"Read videos"},"android.permission.SYSTEM_ALERT_WINDOW":{severity:"high",description:"Draw overlays on other apps"},"android.permission.REQUEST_INSTALL_PACKAGES":{severity:"high",description:"Can install APKs"}},ym={NSCameraUsageDescription:{severity:"medium",description:"Camera access declared"},NSMicrophoneUsageDescription:{severity:"medium",description:"Microphone access declared"},NSLocationWhenInUseUsageDescription:{severity:"medium",description:"Location (in-use) declared"},NSLocationAlwaysUsageDescription:{severity:"high",description:"Background location declared"},NSContactsUsageDescription:{severity:"medium",description:"Contacts access declared"},NSCalendarsUsageDescription:{severity:"low",description:"Calendar access declared"},NSPhotoLibraryUsageDescription:{severity:"low",description:"Photo library access declared"}};function bm(e){try{let n=hm("npx expo config --type introspect --json 2>/dev/null",{cwd:e,encoding:"utf-8",timeout:3e4});return JSON.parse(n)}catch{}let t=_n.join(e,"app.json");if(pt.existsSync(t))try{let n=JSON.parse(pt.readFileSync(t,"utf-8"));return n.expo||n}catch{}return null}function Am(e){let t=[],n=_n.join(e,"node_modules");if(!pt.existsSync(n))return t;let i=/<uses-permission\s+android:name="([^"]+)"/g;function r(o,s){let a=_n.join(o,"android","src","main","AndroidManifest.xml");if(!pt.existsSync(a))return;let l=pt.readFileSync(a,"utf-8"),d;for(;(d=i.exec(l))!==null;)t.push({pkg:s,permission:d[1]});i.lastIndex=0}for(let o of pt.readdirSync(n)){if(o.startsWith("."))continue;let s=_n.join(n,o);if(o.startsWith("@")){if(!pt.statSync(s).isDirectory())continue;for(let a of pt.readdirSync(s))r(_n.join(s,a),`${o}/${a}`)}else r(s,o)}return t}async function $l(e,t){let n=[],i=1,r=bm(e),o=r?.android?.permissions||[],s=r?.android?.blockedPermissions||[];for(let d of o){let c=_l[d];c&&n.push({id:`PERM-${String(i++).padStart(3,"0")}`,title:`${d.split(".").pop()} declared`,description:c.description,severity:c.severity,category:"permissions",file:"app.config.ts",recommendation:"Remove from permissions if not needed, or add justification."})}let a=Am(e);for(let{pkg:d,permission:c}of a){let u=_l[c];u&&(s.includes(c)||o.includes(c)||n.push({id:`PERM-${String(i++).padStart(3,"0")}`,title:`${c.split(".").pop()} injected by ${d}`,description:`${u.description}. Auto-injected via ${d} AndroidManifest.xml`,severity:u.severity,category:"permissions",file:`node_modules/${d}/android/src/main/AndroidManifest.xml`,recommendation:`Add "${c}" to blockedPermissions if not needed.`,autoFixable:!0}))}let l=r?.ios?.infoPlist||{};for(let[d,c]of Object.entries(ym))d in l&&n.push({id:`PERM-${String(i++).padStart(3,"0")}`,title:`iOS: ${d} declared`,description:c.description,severity:c.severity,category:"permissions",file:"app.config.ts",recommendation:`Remove ${d} from infoPlist if the app does not use this capability.`});return{category:"permissions",label:"Permission Audit",findings:n,durationMs:0}}import io from"fs";import wi from"path";var Sm=[{id:"SEC-001",pattern:/(['"`])(?:sk|pk)_(?:live|test)_[a-zA-Z0-9]{20,}\1/g,severity:"critical",label:"Stripe API Key"},{id:"SEC-002",pattern:/(['"`])AIza[0-9A-Za-z\-_]{35}\1/g,severity:"high",label:"Google API Key"},{id:"SEC-003",pattern:/(['"`])AKIA[0-9A-Z]{16}\1/g,severity:"critical",label:"AWS Access Key ID"},{id:"SEC-004",pattern:/-----BEGIN (?:RSA |EC )?PRIVATE KEY-----/g,severity:"critical",label:"Private key in source"},{id:"SEC-005",pattern:/(?:ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9_]{36,}/g,severity:"high",label:"GitHub Token"},{id:"SEC-006",pattern:/xox[bpors]-[a-zA-Z0-9-]{10,}/g,severity:"high",label:"Slack Token"},{id:"SEC-007",pattern:/(?:password|secret|apikey|api_key)\s*[:=]\s*['"`][^'"`\n]{8,}['"`]/gi,severity:"high",label:"Hardcoded credential"}],Em=new Set([".ts",".tsx",".js",".jsx"]),Im=new Set(["node_modules",".expo",".git","android","ios","dist","build","__tests__","__mocks__"]);function Rl(e){let t=[],n=io.readdirSync(e,{withFileTypes:!0});for(let i of n){if(Im.has(i.name))continue;let r=wi.join(e,i.name);i.isDirectory()?t.push(...Rl(r)):Em.has(wi.extname(i.name))&&t.push(r)}return t}function wm(e){let t=e.trim();return t.startsWith("//")||t.startsWith("*")||t.startsWith("/*")}function vm(e){return/process\.env\./i.test(e)||/import\.meta\.env/i.test(e)}async function Ol(e,t){let n=[],i=wi.join(e,"src"),r=io.existsSync(i)?i:e,o=Rl(r);for(let s of o){let l=io.readFileSync(s,"utf-8").split(`
1771
- `),d=wi.relative(e,s);for(let c=0;c<l.length;c++){let u=l[c];if(!wm(u)&&!vm(u))for(let{id:f,pattern:p,severity:g,label:h}of Sm)p.lastIndex=0,p.test(u)&&n.push({id:f,title:h,description:`Potential ${h.toLowerCase()} found in source code`,severity:g,category:"secrets",file:d,line:c+1,recommendation:`Move to environment variables or a secrets manager. Use \`${m.nameLower} env set\` for managed secrets.`})}}return{category:"secrets",label:"Secrets Detection",findings:n,durationMs:0}}import{execSync as _m}from"child_process";var $m={critical:"critical",high:"high",moderate:"medium",low:"low",info:"info"};async function Dl(e,t){let n=[],i=1,r;try{r=_m("npm audit --json 2>/dev/null",{cwd:e,encoding:"utf-8",timeout:6e4})}catch(a){if(r=a.stdout||"",!r)return{category:"dependencies",label:"Dependency CVEs",findings:[],durationMs:0,error:"Failed to run npm audit. Ensure npm is available and dependencies are installed."}}let o;try{o=JSON.parse(r)}catch{return{category:"dependencies",label:"Dependency CVEs",findings:[],durationMs:0,error:"Failed to parse npm audit output."}}let s=o.vulnerabilities||{};for(let[a,l]of Object.entries(s)){let d=$m[l.severity]||"info",c=Array.isArray(l.via)?l.via.map(u=>typeof u=="string"?u:u.title||u.name).join(", "):String(l.via);n.push({id:`DEP-${String(i++).padStart(3,"0")}`,title:`${a} \u2014 ${l.severity}`,description:`Via: ${c}. Range: ${l.range||"unknown"}`,severity:d,category:"dependencies",recommendation:l.fixAvailable?`Run \`npm audit fix\` or update ${a} to a patched version.`:"No fix available yet. Monitor for updates or evaluate alternatives.",autoFixable:!!l.fixAvailable})}return{category:"dependencies",label:"Dependency CVEs",findings:n,durationMs:0}}import vi from"fs";import _i from"path";var Rm=/(?:token|password|credential|secret|apiKey|api_key|session|auth|jwt|refresh_token|access_token|private_key|pin|otp)/i,Pl=/AsyncStorage\s*\.\s*(?:setItem|mergeItem)\s*\(\s*['"`]([^'"`]+)['"`]/g,Om=/from\s+['"]@react-native-async-storage\/async-storage['"]|from\s+['"]react-native['"].*AsyncStorage/,Dm=new Set([".ts",".tsx",".js",".jsx"]),Pm=new Set(["node_modules",".expo",".git","android","ios","dist","build"]);function Cl(e){let t=[];if(!vi.existsSync(e))return t;let n=vi.readdirSync(e,{withFileTypes:!0});for(let i of n){if(Pm.has(i.name))continue;let r=_i.join(e,i.name);i.isDirectory()?t.push(...Cl(r)):Dm.has(_i.extname(i.name))&&t.push(r)}return t}async function Tl(e,t){let n=[],i=1,r=_i.join(e,"src"),o=vi.existsSync(r)?r:e,s=Cl(o);for(let a of s){let l=vi.readFileSync(a,"utf-8");if(!Om.test(l))continue;let d=l.split(`
1772
- `),c=_i.relative(e,a);for(let u=0;u<d.length;u++){let f=d[u];Pl.lastIndex=0;let p;for(;(p=Pl.exec(f))!==null;){let g=p[1];Rm.test(g)&&n.push({id:`STOR-${String(i++).padStart(3,"0")}`,title:`AsyncStorage used for "${g}"`,description:`Sensitive data key "${g}" stored in AsyncStorage (unencrypted).`,severity:"high",category:"storage",file:c,line:u+1,recommendation:"Use expo-secure-store (SecureStore) for sensitive data instead of AsyncStorage."})}}}return{category:"storage",label:"Insecure Storage",findings:n,durationMs:0}}import $i from"fs";import Ri from"path";var kl=/['"`](http:\/\/(?!localhost|127\.0\.0\.1|10\.|192\.168\.|0\.0\.0\.0|172\.(?:1[6-9]|2\d|3[01])\.)[^'"`\s]+)['"`]/g,Cm=/\/api\/|\/v[0-9]+\/|\/graphql|\/rest\//i,Tm=new Set([".ts",".tsx",".js",".jsx"]),km=new Set(["node_modules",".expo",".git","android","ios","dist","build","__tests__","__mocks__"]);function Nl(e){let t=[];if(!$i.existsSync(e))return t;let n=$i.readdirSync(e,{withFileTypes:!0});for(let i of n){if(km.has(i.name))continue;let r=Ri.join(e,i.name);i.isDirectory()?t.push(...Nl(r)):Tm.has(Ri.extname(i.name))&&t.push(r)}return t}async function xl(e,t){let n=[],i=1,r=Ri.join(e,"src"),o=$i.existsSync(r)?r:e,s=Nl(o);for(let a of s){let d=$i.readFileSync(a,"utf-8").split(`
1773
- `),c=Ri.relative(e,a);for(let u=0;u<d.length;u++){let f=d[u],p=f.trim();if(p.startsWith("//")||p.startsWith("*"))continue;kl.lastIndex=0;let g;for(;(g=kl.exec(f))!==null;){let h=g[1],y=Cm.test(h);n.push({id:`NET-${String(i++).padStart(3,"0")}`,title:`Insecure HTTP URL${y?" (API endpoint)":""}`,description:`Plain HTTP URL found: ${h}`,severity:y?"high":"medium",category:"network",file:c,line:u+1,recommendation:"Use HTTPS instead of HTTP for all network requests."})}}}return{category:"network",label:"HTTP URLs",findings:n,durationMs:0}}import Oi from"fs";import Di from"path";var Ll=/(?:debug|debugMode|devMode|enableDebug)\s*[:=]\s*true/gi,Ml=/console\.(?:log|warn|info|debug)\s*\([^)]*(?:token|password|secret|credential|key|auth)/gi,Nm=new Set([".ts",".tsx",".js",".jsx"]),xm=new Set(["node_modules",".expo",".git","android","ios","dist","build","__tests__","__mocks__"]);function Ul(e){let t=[];if(!Oi.existsSync(e))return t;let n=Oi.readdirSync(e,{withFileTypes:!0});for(let i of n){if(xm.has(i.name))continue;let r=Di.join(e,i.name);i.isDirectory()?t.push(...Ul(r)):Nm.has(Di.extname(i.name))&&t.push(r)}return t}async function Fl(e,t){let n=[],i=1,r=Di.join(e,"src"),o=Oi.existsSync(r)?r:e,s=Ul(o);for(let a of s){let d=Oi.readFileSync(a,"utf-8").split(`
1774
- `),c=Di.relative(e,a);for(let u=0;u<d.length;u++){let f=d[u],p=f.trim();if(!(p.startsWith("//")||p.startsWith("*"))&&(Ll.lastIndex=0,Ll.test(f)&&n.push({id:`DBG-${String(i++).padStart(3,"0")}`,title:"Hardcoded debug flag",description:"Debug/dev mode enabled in source code",severity:"medium",category:"debug",file:c,line:u+1,recommendation:"Use __DEV__ or environment variables instead of hardcoded debug flags."}),Ml.lastIndex=0,Ml.test(f))){let g=d.slice(Math.max(0,u-3),u).join(`
1775
- `);/__DEV__/.test(g)||n.push({id:`DBG-${String(i++).padStart(3,"0")}`,title:"Sensitive data in console log",description:"Console log may expose sensitive data (token, password, etc.) in production",severity:"medium",category:"debug",file:c,line:u+1,recommendation:"Wrap in __DEV__ check or remove sensitive data from console output."})}}}return{category:"debug",label:"Debug/Dev Flags",findings:n,durationMs:0}}import Bl from"fs";import ro from"path";var Lm=new Set(["androidx.work.impl.background.systemjob.SystemJobService","androidx.work.impl.diagnostics.DiagnosticsReceiver","com.google.firebase.iid.FirebaseInstanceIdReceiver","com.google.android.gms.auth.api.signin.RevocationBoundService","androidx.profileinstaller.ProfileInstallReceiver","com.google.firebase.messaging.FirebaseMessagingService","com.google.android.gms.measurement.AppMeasurementService","com.google.android.gms.measurement.AppMeasurementJobService"]);function Mm(e){let t=[ro.join(e,"android","app","src","main","AndroidManifest.xml"),ro.join(e,"android","AndroidManifest.xml")];for(let n of t)if(Bl.existsSync(n))return n;return null}async function jl(e,t){let n=[],i=1,r=Mm(e);if(!r)return{category:"manifest",label:"Android Manifest",findings:[],durationMs:0,error:"No AndroidManifest.xml found. Run with --prebuild or run `expo prebuild` first."};let o=Bl.readFileSync(r,"utf-8"),s=ro.relative(e,r),a=/<(activity|service|receiver|provider)\s+([^>]*?)(?:\/>|>)/gs,l;for(;(l=a.exec(o))!==null;){let d=l[1],c=l[2],f=c.match(/android:name="([^"]+)"/)?.[1]||"unknown";if(Lm.has(f))continue;let p=/android:exported="true"/.test(c),g=/android:permission="/.test(c);p&&!g&&n.push({id:`MAN-${String(i++).padStart(3,"0")}`,title:`Exported ${d}: ${f.split(".").pop()}`,description:`${f} is exported=true without android:permission protection`,severity:"medium",category:"manifest",file:s,recommendation:'Set android:exported="false" or add an android:permission attribute.'})}return/android:allowBackup="true"/.test(o)&&n.push({id:`MAN-${String(i++).padStart(3,"0")}`,title:"allowBackup is enabled",description:'android:allowBackup="true" allows data extraction via ADB backup',severity:"medium",category:"manifest",file:s,recommendation:'Set android:allowBackup="false" via expo-build-properties plugin.',autoFixable:!0}),/android:debuggable="true"/.test(o)&&n.push({id:`MAN-${String(i++).padStart(3,"0")}`,title:"App is debuggable",description:'android:debuggable="true" allows attaching a debugger in production',severity:"critical",category:"manifest",file:s,recommendation:"Ensure debuggable is false for production builds. This is usually set automatically for release builds."}),{category:"manifest",label:"Android Manifest",findings:n,durationMs:0}}import Pi from"fs";import oo from"path";function Um(e){let t=oo.join(e,"ios");if(!Pi.existsSync(t))return null;let n=Pi.readdirSync(t,{withFileTypes:!0});for(let i of n){if(!i.isDirectory()||i.name==="Pods"||i.name.startsWith("."))continue;let r=oo.join(t,i.name,"Info.plist");if(Pi.existsSync(r))return r}return null}async function Hl(e,t){let n=[],i=1,r=Um(e);if(!r)return{category:"ats",label:"iOS ATS Config",findings:[],durationMs:0,error:"No Info.plist found. Run with --prebuild or run `expo prebuild` first."};let o=Pi.readFileSync(r,"utf-8"),s=oo.relative(e,r),a=o.match(/<key>NSAppTransportSecurity<\/key>\s*<dict>([\s\S]*?)<\/dict>/);if(a){let l=a[1];/<key>NSAllowsArbitraryLoads<\/key>\s*<true\s*\/>/.test(l)&&n.push({id:`ATS-${String(i++).padStart(3,"0")}`,title:"ATS disabled \u2014 NSAllowsArbitraryLoads",description:"App Transport Security is completely disabled. All HTTP connections are allowed.",severity:"critical",category:"ats",file:s,recommendation:"Remove NSAllowsArbitraryLoads or set to false. Use domain-specific exceptions only if absolutely necessary."});let d=l.match(/<key>NSExceptionDomains<\/key>\s*<dict>([\s\S]*?)<\/dict>/);if(d){let c=d[1].match(/<key>([^<]+)<\/key>/g);if(c)for(let u of c){let f=u.replace(/<\/?key>/g,"");f!=="NSExceptionDomains"&&n.push({id:`ATS-${String(i++).padStart(3,"0")}`,title:`ATS exception: ${f}`,description:`ATS exception configured for ${f}`,severity:"low",category:"ats",file:s,recommendation:`Verify that the ATS exception for ${f} is necessary. Use HTTPS where possible.`})}}}return{category:"ats",label:"iOS ATS Config",findings:n,durationMs:0}}var Bm=[{category:"permissions",label:"Permission Audit",fn:$l,requiresPrebuild:!1},{category:"secrets",label:"Secrets Detection",fn:Ol,requiresPrebuild:!1},{category:"dependencies",label:"Dependency CVEs",fn:Dl,requiresPrebuild:!1},{category:"storage",label:"Insecure Storage",fn:Tl,requiresPrebuild:!1},{category:"network",label:"HTTP URLs",fn:xl,requiresPrebuild:!1},{category:"debug",label:"Debug/Dev Flags",fn:Fl,requiresPrebuild:!1},{category:"manifest",label:"Android Manifest",fn:jl,requiresPrebuild:!0},{category:"ats",label:"iOS ATS Config",fn:Hl,requiresPrebuild:!0}];async function Kl(e,t){let n=Bm;t.category&&(n=n.filter(s=>s.category===t.category),n.length===0&&($n.error(_e.red(`Unknown category: ${t.category}`)),$n.info(_e.dim(`Available: ${Object.values(Fe).join(", ")}`)),process.exit(1)));let i=n.filter(s=>!s.requiresPrebuild),r=n.filter(s=>s.requiresPrebuild),o=[];for(let s of i){let a=Gl();a.start(_e.dim(`Running ${s.label}...`));try{let l=Date.now(),d=await s.fn(e,t);d.durationMs=Date.now()-l,o.push(d);let c=d.findings.length;a.stop(c>0?_e.yellow(`${s.label} \u2014 ${c} finding(s)`):_e.green(`${s.label} \u2014 clean`))}catch(l){a.stop(_e.red(`${s.label} \u2014 error`)),o.push({category:s.category,label:s.label,findings:[],durationMs:0,error:l.message})}}if(r.length>0){let s=zl.join(e,"android"),a=zl.join(e,"ios"),l=Vl.existsSync(s)||Vl.existsSync(a);if(!l&&t.prebuild){t.json||$n.info(_e.dim(`
1776
- Running expo prebuild for deeper analysis...`));try{Fm("npx expo prebuild --no-install",{cwd:e,stdio:"pipe"})}catch{return $n.warn(_e.yellow("Prebuild failed \u2014 skipping manifest/plist checks.")),o}}else if(!l)return t.json||$n.info(_e.dim(`
1777
- Skipping manifest/plist checks \u2014 no android/ios dirs. Use --prebuild to generate them.`)),o;for(let d of r){let c=Gl();c.start(_e.dim(`Running ${d.label}...`));try{let u=Date.now(),f=await d.fn(e,t);f.durationMs=Date.now()-u,o.push(f);let p=f.findings.length;c.stop(p>0?_e.yellow(`${d.label} \u2014 ${p} finding(s)`):_e.green(`${d.label} \u2014 clean`))}catch(u){c.stop(_e.red(`${d.label} \u2014 error`)),o.push({category:d.category,label:d.label,findings:[],durationMs:0,error:u.message})}}}return o}import fe from"chalk";import{log as le}from"@clack/prompts";var Mt={critical:fe.bgRed.white.bold,high:fe.red.bold,medium:fe.yellow.bold,low:fe.blue,info:fe.dim},Ci={critical:0,high:1,medium:2,low:3,info:4};function jm(e,t){if(!t)return!0;let n=Ci[t];return n===void 0?!0:Ci[e]<=n}function Wl(e,t){let n=0,i={critical:0,high:0,medium:0,low:0,info:0};for(let s of e){let a=s.findings.filter(d=>jm(d.severity,t));if(a.length===0&&!s.error)continue;if(le.info(""),le.info(fe.bold(` ${s.label}`)+fe.dim(` ${a.length} finding(s)`)),le.info(fe.dim(" "+"\u2500".repeat(60))),s.error){le.error(fe.red(` Error: ${s.error}`));continue}let l=[...a].sort((d,c)=>Ci[d.severity]-Ci[c.severity]);for(let d of l){let c=Mt[d.severity](` ${d.severity.toUpperCase()} `);le.info(` ${c} ${fe.bold(d.id)} ${d.title}`),le.info(fe.dim(` ${d.description}`)),d.file&&le.info(fe.dim(` File: ${d.file}${d.line?`:${d.line}`:""}`)),le.info(fe.cyan(` Fix: ${d.recommendation}`)),le.info(""),i[d.severity]++,n++}}le.info(""),le.info(fe.bold(" Summary")),le.info(fe.dim(" "+"\u2500".repeat(60))),le.info(` Total: ${fe.bold(String(n))} finding(s)`),le.info(` ${Mt.critical(` ${i.critical} Critical `)} ${Mt.high(` ${i.high} High `)} ${Mt.medium(` ${i.medium} Medium `)} ${Mt.low(` ${i.low} Low `)} ${Mt.info(` ${i.info} Info `)}`);let r=i.critical>0,o=i.high>0;r||o?(le.info(""),le.error(fe.red.bold(` FAIL \u2014 ${i.critical} critical, ${i.high} high issue(s) found`))):n>0?(le.info(""),le.warn(fe.yellow(" PASS (with warnings) \u2014 no critical or high issues"))):(le.info(""),le.success(fe.green.bold(" PASS \u2014 no issues found")))}function ql(e,t){let n=e.flatMap(r=>r.findings),i={};for(let r of Object.values(Pe))i[r]=n.filter(o=>o.severity===r).length;return{version:"1.0.0",timestamp:new Date().toISOString(),project:t.name||"unknown",projectVersion:t.version||"0.0.0",summary:{total:n.length,...i},passed:i.critical===0&&i.high===0,checks:e.map(r=>({category:r.category,label:r.label,findingCount:r.findings.length,durationMs:r.durationMs,error:r.error||null})),findings:n}}import{log as de,spinner as Hm}from"@clack/prompts";import ie from"chalk";import Ze from"fs";import Gm from"os";import Ut from"path";import{execSync as Vm}from"child_process";var Jl=16384,zm=1,Km=Buffer.from([127,69,76,70]);async function Yl(e){de.info(ie.bold.underline("16KB Page Alignment Check")),console.log("");let t=Ut.resolve(e);if(!Ze.existsSync(t))return de.error(ie.red(`APK file not found: ${t}`)),!1;if(!t.endsWith(".apk"))return de.error(ie.red("The provided file is not an APK file.")),!1;let n=Hm();n.start("Extracting and analyzing native libraries...");let i=Ze.mkdtempSync(Ut.join(Gm.tmpdir(),"mach-16kb-"));try{try{Vm(`unzip -o -q "${t}" "lib/arm64-v8a/*.so" "lib/x86_64/*.so" -d "${i}" 2>/dev/null`,{encoding:"utf-8",maxBuffer:50*1024*1024})}catch{}let r=Xl(Ut.join(i,"lib"));if(r.length===0)return n.stop("Analysis complete."),de.info(ie.yellow("No arm64-v8a or x86_64 native libraries found in the APK.")),de.info(ie.dim("16KB alignment check only applies to arm64-v8a and x86_64 architectures.")),!0;let o=[];for(let l of r){let d=Ut.relative(i,l),c=qm(d),u=Ut.basename(l),f=Wm(l);f!==null&&o.push({name:u,filePath:d,arch:c,align:f,compatible:f>=Jl})}if(n.stop("Analysis complete."),o.length===0)return de.info(ie.yellow("No valid ELF shared libraries found.")),!0;let s=o.filter(l=>!l.compatible),a=o.filter(l=>l.compatible);if(de.info(ie.dim(`Checked ${o.length} native librar${o.length===1?"y":"ies"}
1778
- `)),s.length>0){de.info(ie.red.bold(`Incompatible libraries:
1779
- `));for(let l of s)de.error(ie.red(`${ie.bold(l.name)} ${ie.dim(`(${l.arch})`)}`)),de.info(ie.dim(` PT_LOAD alignment: 2**${Math.log2(l.align)} (${l.align} bytes, needs 2**14 = ${Jl})`))}return a.length>0&&(console.log(""),de.success(ie.green(`${a.length} librar${a.length===1?"y":"ies"} correctly aligned (2**14 or higher).`))),console.log(""),s.length===0?(de.success(ie.green.bold("ELF Verification Successful. APK is 16KB compatible.")),!0):(de.error(ie.red.bold(`Found ${s.length} unaligned lib${s.length===1?"":"s"} (arm64-v8a/x86_64 libs need to be aligned).`)),console.log(""),de.info(ie.yellow("To fix this:")),de.info(ie.dim(" 1. Rebuild with NDK r28+ which defaults to 16KB page alignment")),de.info(ie.dim(" 2. Or set -DANDROID_SUPPORT_FLEXIBLE_PAGE_SIZES=ON in CMake")),de.info(ie.dim(" 3. Update third-party libraries that ship prebuilt .so files")),de.info(ie.dim(" 4. After rebuilding: zipalign -p -f -v 16 input.apk output.apk")),console.log(""),de.info(ie.dim("Reference: https://developer.android.com/guide/practices/page-sizes")),!1)}catch(r){return n.stop("Analysis failed."),de.error(ie.red(`Failed to analyze APK: ${r.message}`)),!1}finally{try{Ze.rmSync(i,{recursive:!0,force:!0})}catch{}}}function Wm(e){let t=Ze.openSync(e,"r");try{let n=Buffer.alloc(64);if(Ze.readSync(t,n,0,64,0),!n.subarray(0,4).equals(Km))return null;let i=n[4]===2,r=n[5]===1,o=(f,p)=>r?f.readUInt16LE(p):f.readUInt16BE(p),s=(f,p)=>r?f.readUInt32LE(p):f.readUInt32BE(p),a=(f,p)=>Number(r?f.readBigUInt64LE(p):f.readBigUInt64BE(p)),l,d,c;i?(l=a(n,32),d=o(n,54),c=o(n,56)):(l=s(n,28),d=o(n,42),c=o(n,44));let u=null;for(let f=0;f<c;f++){let p=Buffer.alloc(d);if(Ze.readSync(t,p,0,d,l+f*d),s(p,0)!==zm)continue;let h;i?h=a(p,48):h=s(p,28),h>0&&(u===null||h<u)&&(u=h)}return u??0}catch{return null}finally{Ze.closeSync(t)}}function Xl(e){let t=[];if(!Ze.existsSync(e))return t;let n=Ze.readdirSync(e,{withFileTypes:!0});for(let i of n){let r=Ut.join(e,i.name);i.isDirectory()?t.push(...Xl(r)):i.name.endsWith(".so")&&t.push(r)}return t}function qm(e){return e.includes("arm64-v8a")?"arm64-v8a":e.includes("x86_64")?"x86_64":"unknown"}var ed=async e=>{if(be()||(Ce.error(Be.red(`You are not logged in. Run \`${m.nameLower} login\` first.`)),process.exit(1)),e.apk){await Xm(e);return}let n=process.cwd(),i=Ti.join(n,"package.json");Rn.existsSync(i)||(Ce.error(Be.red("No package.json found. Run this command from a project root.")),process.exit(1));let r=JSON.parse(Rn.readFileSync(i,"utf-8")),o=!!(r.dependencies?.expo||r.devDependencies?.expo);e.json||(Ce.info(Be.dim(`Project: ${r.name||"unknown"} v${r.version||"0.0.0"}`)),Ce.info(Be.dim(`Type: ${o?"Expo":"Bare React Native"}`)),Ce.info(""));let s={json:e.json,fix:e.fix,category:e.category,severity:e.severity,prebuild:e.prebuild},a=await Kl(n,s);e.json?console.log(JSON.stringify(ql(a,r),null,2)):Wl(a,e.severity);let l=a.some(c=>c.findings.some(u=>u.severity==="critical")),d=a.some(c=>c.findings.some(u=>u.severity==="high"));(l||d)&&process.exit(1)},Zl=["16kb"];async function Xm(e){let t=e.category?.toLowerCase();t&&!Zl.includes(t)&&(Ce.error(Be.red(`Unknown APK check category: "${t}"`)),Ce.info(Be.dim(`Available APK checks: ${Zl.join(", ")}`)),process.exit(1));let n=await Zm(e.apk);n||process.exit(1);let i=!t,r=!1;(i||t==="16kb")&&(await Yl(n)||(r=!0)),r&&process.exit(1)}async function Zm(e){if(e.startsWith("build:")){let n=e.slice(6);return await Qm(n)}if(e.startsWith("http://")||e.startsWith("https://"))return await td(e);let t=Ti.resolve(e);return Rn.existsSync(t)?t:(Ce.error(Be.red(`APK file not found: ${t}`)),null)}async function Qm(e){let t=Ql();t.start(`Fetching APK from build ${e}...`);try{let n=await $.get(`/build/${e}`);if(n.data.status!=="success")throw new Error(n.data.message);let i=n.data.build;if(!i)throw new Error("Build not found");let r=i.artifacts?.find(o=>o.type?o.type==="apk":o.name?.endsWith(".apk")||o.url?.includes(".apk"));return!r||!r.url?(t.stop("No APK artifact found"),Ce.error(Be.red("This build does not have an APK artifact.")),Ce.info(Be.dim("Make sure the build produced an APK (not just an AAB).")),null):(t.stop(`Found build: ${i.buildId||e}`),await td(r.url))}catch(n){return t.stop("Failed to fetch build"),Ce.error(Be.red(n.message)),null}}async function td(e){let t=Ql();t.start("Downloading APK...");try{let n=Rn.mkdtempSync(Ti.join(Jm.tmpdir(),`${m.nameLower}-audit-`)),i=Ti.join(n,"app.apk"),r=await Ym.get(e,{responseType:"arraybuffer"});Rn.writeFileSync(i,r.data);let o=(r.data.length/(1024*1024)).toFixed(1);return t.stop(`Downloaded APK (${o} MB)`),i}catch(n){return t.stop("Download failed"),Ce.error(Be.red(`Failed to download APK: ${n.message}`)),null}}var ng=console.log;console.log=()=>{};tg();console.log=ng;X(J.bgCyan.black(m.cliTag("Production Build Orchestrator")));var On=(e,t=[])=>t.concat(e),M=new eg;M.name(m.nameLower).description(`${m.name} CLI: Powerful Cloud Infrastructure Tools`).version(et).option("-y, --yes","Automatically answer yes to all prompts",!1).option("--quiet","Suppress non-essential output",!1);M.command("agent").description("Manage local device discovery agent for the Install Hub (port 7070)").argument("[action]","start, run, install, status, restart, stop, or uninstall","start").action(async e=>{await ha(e)});M.command("host").description("Setup AWS S3 static hosting and CloudFront").action(async()=>{X(J.bgCyan.black(m.cliTag("Hosting"))),await _o()});M.command("sitemap").description("Generate sitemap.xml from Expo Router app structure").option("-o, --output <path>","Output path for sitemap.xml","./public/sitemap.xml").action(async e=>{X(J.bgCyan.black(m.cliTag("Sitemap Generator"))),await Do(e)});M.command("build").description("Run a build on a cloud provider (AWS Spot Instances)").argument("[platform]","Target platform (android, ios)").option("--platform <os>","Target platform alias (android, ios) [Optional]").option("--repo <url>","Git Repository URL").option("--branch <name>","Git Branch").option("--ami <id>","AMI ID").option("--bucket <name>","S3 Bucket for artifacts").option("--region <region>","AWS Region").option("--aws-profile <name>","AWS Credentials Profile").option("-p, --build-profile <name>","Build Profile (e.g. production, staging)").option("--profile <name>","Build Profile (alias for --build-profile)").option("--dry-run","Generate User Data script without launching").option("--keep-instance","Do not terminate the instance after build").option("--subnet <id>","VPC Subnet ID to launch the instance in").option("--security-group <id>","VPC Security Group ID to use").option("--ssh-host <host>","Remote host for iOS build (SSH)").option("--ssh-user <user>","SSH username for remote host").option("--ssh-key <path>","Path to private SSH key for remote host").option("--ios-scheme <scheme>","iOS Scheme to build").option("--ios-team-id <id>","Apple Development Team ID").option("--ios-configuration <config>","Xcode configuration (Release/Debug)").option("--ios-export-method <method>","Export method (ad-hoc, app-store, development, enterprise)").option("--ios-api-key-id <id>","App Store Connect API Key ID").option("--ios-api-key-issuer <id>","App Store Connect API Key Issuer ID").option("--ios-api-key-path <path>","Path to App Store Connect API Key (.p8) file").option("--simulator","Build for iOS Simulator (no signing required)").addOption(new Te("--build-id <id>","Internal build ID").hideHelp()).addOption(new Te("--project-id <id>","Internal project ID").hideHelp()).addOption(new Te("--fail-only","Internal: mark an existing build failed").hideHelp()).addOption(new Te("--error <message>","Internal failure message").hideHelp()).option("--local","Run build on local machine").option("--auto-version","Assign the next Android versionCode or iOS buildNumber from Mach").option("--auto-submit","Submit this build after it completes successfully").option("--submit-track <track>","Google Play track to use with --auto-submit").option("--submit-release-status <status>","Google Play release status to use with --auto-submit").option("--submit-rollout <fraction>","Google Play staged rollout fraction to use with --auto-submit").option("--submit-changes-not-sent-for-review","Commit Google Play changes without automatically sending them for review when using --auto-submit").option("--submit-credential-id <id>","Service credential ID to use with --auto-submit").option("--submit-json-output <path>","Write auto-submit metadata JSON to a file for CI/CD").option("--verbose","Enable verbose logging").option("--json-output <path>","Write build metadata JSON to a file for CI/CD").option("--maestro","Queue a managed Maestro test run after a successful build").option("--maestro-flows <path>","Maestro flow file or directory (default: .maestro)").option("--maestro-device <device>","iOS simulator model or identifier (default: iPhone 17 Pro; managed Android uses Pixel 6)").option("--maestro-retries <n>","Retries for the Maestro run","1").option("--maestro-record","Enable screen recording where supported").option("--maestro-use-build-source","Use Maestro flows from the build source snapshot instead of uploading local flows").option("--maestro-env <name>","Forward an environment variable to the managed Maestro runner; repeat or comma-separate names",On,[]).option("-y, --yes","Automatically answer yes to all prompts",!1).option("--quiet","Suppress non-essential output",!1).action(async(e,t)=>{let n=M.opts();t.yes=t.yes||n.yes,t.quiet=t.quiet||n.quiet,t.platform=e||t.platform,t.buildProfile=t.profile||t.buildProfile,t.quiet||X(J.bgCyan.black(m.cliTag("Cloud Build"))),await Jn(t)});M.command("maestro").description("Run Maestro tests locally or with the managed Mach runner").option("--platform <os>","Target platform (android/ios)").option("-p, --profile <name>","Build profile to resolve when using --latest","production").option("--latest","Use the latest successful build for the platform/profile").option("--build-id <id>","Use a specific Mach build ID").option("--build-url <url>","Use a Mach build URL").option("--artifact-url <url>","Use a direct APK or iOS simulator app artifact URL").option("--local","Run Maestro on a connected local emulator/device instead of the managed runner").option("--maestro-flows <path>","Maestro flow file or directory (default: .maestro)").option("--maestro-device <device>","iOS simulator model or identifier (default: iPhone 17 Pro; managed Android uses Pixel 6)").option("--maestro-retries <n>","Retries for the Maestro run","1").option("--maestro-record","Enable screen recording where supported").option("--maestro-use-build-source","Use Maestro flows from the build source snapshot instead of uploading local flows").option("--maestro-env <name>","Forward an environment variable to the managed Maestro runner; repeat or comma-separate names",On,[]).option("--wait","Wait for managed Maestro completion and exit non-zero on failure").option("--wait-timeout <minutes>","Maximum minutes to wait for managed Maestro completion","60").option("--wait-interval <seconds>","Polling interval while waiting for managed Maestro completion","15").option("--json-output <path>","Write test run metadata JSON to a file for CI/CD").addOption(new Te("--local-runner","Internal: execute a managed Maestro run on this machine").hideHelp()).addOption(new Te("--test-run-id <id>","Internal test run ID").hideHelp()).addOption(new Te("--project-id <id>","Internal project ID").hideHelp()).addOption(new Te("--runner-token <token>","Internal runner token").hideHelp()).action(async e=>{X(J.bgCyan.black(m.cliTag("Maestro Testing"))),await Qo(e)});var Ft=e=>e.option("--platform <os>","Target platform: ios, android, or all","all").option("--channel <name>","OTA channel (for example: production, staging)").option("--branch <name>","Alias for --channel").option("--runtime-version <version>","Runtime version override").option("--message <text>","Release note/message for this OTA update").option("--framework <name>","Framework override: expo or react-native").option("--engine <name>","OTA engine override (currently expo-updates)").option("--url <url>","Mach OTA update URL override").option("--install-plugin","Install @radhya/mach locally for the Expo config plugin").option("--skip-install","Do not install local Expo plugin dependency").option("--update-id <id>","OTA update id for rollback/promote").option("--json","Print JSON output"),Bt=M.command("ota").description("Setup, publish, verify, and manage Mach OTA updates");Ft(Bt.command("setup").description("Configure OTA for this project")).action(async e=>{let t=M.opts();X(J.bgCyan.black(m.cliTag("OTA Setup"))),await at("setup",{...e,yes:e.yes||t.yes})});Ft(Bt.command("publish").description("Publish an OTA update")).action(async e=>{let t=M.opts();X(J.bgCyan.black(m.cliTag("OTA Publish"))),await at("publish",{...e,yes:e.yes||t.yes})});Ft(Bt.command("verify").description("Verify OTA configuration")).action(async e=>{let t=M.opts();X(J.bgCyan.black(m.cliTag("OTA Verify"))),await at("verify",{...e,yes:e.yes||t.yes})});Ft(Bt.command("list").description("List OTA updates for the linked project")).action(async e=>{let t=M.opts();X(J.bgCyan.black(m.cliTag("OTA Updates"))),await at("list",{...e,yes:e.yes||t.yes})});Ft(Bt.command("rollback").description("Roll back an OTA update")).action(async e=>{let t=M.opts();X(J.bgCyan.black(m.cliTag("OTA Rollback"))),await at("rollback",{...e,yes:e.yes||t.yes})});Ft(Bt.command("promote").description("Promote an OTA update")).action(async e=>{let t=M.opts();X(J.bgCyan.black(m.cliTag("OTA Promote"))),await at("promote",{...e,yes:e.yes||t.yes})});M.command("submit").description("Automated Store Submission (App Store / Google Play)").option("--platform <os>","Target platform (ios/android)").option("-p, --profile <name>","Build/submission profile to submit from (e.g. production, preprod)").option("--track <track>","Google Play Track (internal, alpha, beta, production)").option("--release-status <status>","Google Play release status (completed, draft, halted, inProgress)").option("--rollout <fraction>","Google Play staged rollout fraction for inProgress releases (example: 0.1)").option("--changes-not-sent-for-review","Commit Google Play changes without automatically sending them for review").option("--ssh-host <host>","Remote macOS host for iOS submission").option("--ssh-user <user>","SSH username for remote iOS submission").option("--ssh-key <path>","Path to private SSH key for remote iOS submission").option("--credential-id <id>","Service credential ID to use when multiple submission credentials exist").option("--local","Run submission on this machine (internal runner mode for iOS)").addOption(new Te("--submit-id <id>","Internal submission ID").hideHelp()).addOption(new Te("--project-id <id>","Internal project ID").hideHelp()).addOption(new Te("--package-name <name>","Internal Android package name").hideHelp()).addOption(new Te("--bundle-id <id>","Internal iOS bundle identifier").hideHelp()).option("--json-output <path>","Write submission metadata JSON to a file for CI/CD").option("--latest","Use the latest successful build for submission").option("--build-id <id>","Use a specific build ID for submission").action(async e=>{let t=M.opts();e.quiet=e.quiet||t.quiet,e.yes=e.yes||t.yes,X(J.bgCyan.black(m.cliTag("Store Submission"))),await Vn(e)});M.command("login").description(`Login to ${m.name} Dashboard`).action(async()=>{X(J.bgCyan.black(m.cliTag("Login"))),await Sa()});M.command("logout").description(`Logout from ${m.name} on this machine`).action(async()=>{X(J.bgCyan.black(m.cliTag("Logout"))),await Ea()});M.command("link").description(`Link local directory to a ${m.name} Project`).action(async()=>{X(J.bgCyan.black(m.cliTag("Link Project"))),await wa()});M.command("me").description("Display currently logged in user details").action(async()=>{await Wa()});M.command("init").description(`Create a new ${m.name} Project`).action(async()=>{X(J.bgCyan.black(m.cliTag("Init Project"))),await va()});M.command("env").description("Manage Environment Variables").argument("<action>","Action to perform: set, list, pull, download, or export").argument("[args...]","Key=Value pairs for set action").option("-e, --environment <name>","Environment to pull/download","development").option("-o, --out <file>","Output file for pull/download",".env.local").option("--overwrite","Overwrite output file if it already exists").action(async(e,t,n)=>{X(J.bgCyan.black(m.cliTag("Env Manager"))),await $a(e,t,n)});M.command("start").description("Start the development server (Metro)").option("-p, --build-profile <name>","Build profile (e.g. development, staging)","development").option("--tunnel","Use ngrok tunnel").option("--lan","Use LAN IP").option("--localhost","Use localhost").option("-c, --clear","Clear Metro cache").option("--port <number>","Port to listen on").option("--ios","Start on iOS").option("--android","Start on Android").option("--web","Start on Web").action(async e=>{X(J.bgCyan.black(m.cliTag("Dev Server"))),await Ja(e)});var Dn=M.command("push").description("Configure and send provider-direct APNs/FCM notifications");Dn.command("setup").description("Install and wire a working default push experience").option("--name <name>","Push app display name").option("--ios-bundle <id>","iOS bundle identifier").option("--android-package <name>","Android package name").option("-e, --environment <name>","development, preview, or production").option("--google-services-file <path>","Android google-services.json path").option("--skip-install","Generate setup without installing SDK dependencies").action(Eo);Dn.command("init").description("Create only the server-side push app (advanced)").option("--name <name>","Push app display name").option("--ios-bundle <id>","iOS bundle identifier").option("--android-package <name>","Android package name").option("-e, --environment <name>","development, preview, or production","production").option("--google-services-file <path>","Expo Android google-services.json path").action(So);var id=Dn.command("credentials").description("Configure provider credentials");id.command("apns").description("Configure an Apple APNs .p8 authentication key").requiredOption("--file <path>","APNs .p8 file").requiredOption("--team-id <id>","Apple Developer team ID").requiredOption("--key-id <id>","APNs key ID").option("--bundle-id <id>","iOS bundle identifier").option("--app <id>","MACH Push app ID").option("-e, --environment <name>","development, preview, or production").action(e=>Bi("apns",e));id.command("fcm").description("Configure a Firebase service-account JSON file").requiredOption("--file <path>","Firebase service-account JSON").option("--app <id>","MACH Push app ID").option("-e, --environment <name>","Deprecated; accepted for compatibility because FCM credentials are package-wide").action(e=>Bi("fcm",e));Dn.command("send").description("Queue one transient push notification").requiredOption("--title <text>","Notification title").requiredOption("--body <text>","Notification body").option("--app <id>","MACH Push app ID").option("-e, --environment <name>","development, preview, or production").option("--token <token>","MACH push token; repeatable",On,[]).option("--user <id>","Application user ID; repeatable",On,[]).option("--all","Send to all active devices").option("--platform <platform>","Limit --all to ios or android").option("--data <json>","String-to-string custom data JSON").option("--sound <name>","Provider sound name").option("--badge <number>","iOS badge count").option("--ttl <seconds>","Provider time-to-live").option("--collapse-key <key>","Provider collapse key").option("--android-channel-id <id>","Android notification channel").action(Io);Dn.command("status").description("Show aggregate push delivery counters").option("--days <number>","Statistics range, 1-90","30").action(wo);M.command("config").description("Show resolved configuration for a profile").option("-p, --profile <name>","Build profile to resolve","development").option("--json","Output as JSON").action(async e=>{await Ya(e)});var rd=M.command("version").description("Show or seed DB-owned native version counters"),od=e=>e.requiredOption("--platform <os>","Target platform: ios or android").option("-p, --profile <name>","Build profile used to resolve package/bundle scope","production").option("--scope <value>","Counter scope override, usually package name or bundle identifier").option("--package <name>","Android package override").option("--bundle-id <id>","iOS bundle identifier override").option("--json","Print JSON output");od(rd.command("show").description("Show the current native version counter")).action(async e=>{X(J.bgCyan.black(m.cliTag("Version Counter"))),await no("show",e)});od(rd.command("seed").description("Seed the native version counter for an existing app").argument("[value]","Latest already-used value; the next build uses value + 1").option("--value <number>","Latest already-used value; the next build uses value + 1").option("--force","Allow lowering an existing counter")).action(async(e,t)=>{X(J.bgCyan.black(m.cliTag("Version Counter"))),await no("seed",{...t,value:t.value??e})});var sd=M.command("deeplink").description("Configure and verify app links, universal links, and URI schemes");sd.command("setup").description("Generate deep link config, hosted association files, and Expo plugin support").option("--domain <domain>","Associated domain, e.g. app.example.com").option("--base-url <url>","Base URL, e.g. https://app.example.com").option("-p, --profile <name>","Profile used for build/submit overrides").option("--platform <platform>","ios, android, or all").option("--framework <framework>","expo or react-native").option("--scheme <scheme>","URI scheme, e.g. myapp").option("--ios-bundle-id <id>","iOS bundle identifier").option("--android-package <name>","Android package name").option("--apple-team-id <id>","Apple Developer Team ID").option("--app-store-id <id>","App Store app ID for Smart App Banner").option("--android-fingerprint <sha256>","Android SHA256 signing certificate fingerprint; repeatable",On,[]).option("--output <dir>","Directory for hosted files, e.g. public or deep-links").option("--install-plugin","Install @radhya/mach locally so Expo can use the packaged config plugin").option("--no-install-plugin","Do not install @radhya/mach for Expo projects; use the local plugin fallback if the package is missing").option("-y, --yes","Automatically answer yes to prompts",!1).action(async e=>{let t=M.opts();e.yes=e.yes||t.yes,X(J.bgCyan.black(m.cliTag("Deep Links"))),await bl(e)});sd.command("verify").description("Verify local and optionally live deep link configuration").option("-p, --profile <name>","Profile used for build/submit overrides").option("--live","Check hosted files over HTTPS").option("--android-device","Print Android device verification commands").action(async e=>{X(J.bgCyan.black(m.cliTag("Deep Link Verify"))),await Al(e)});M.command("credentials").description("Unified, interactive credential management (iOS/Android)").option("-p, --profile <name>","Build profile (production, staging, development)").option("--force","Force recreate certificates (nuke existing on Apple Portal)",!1).action(async e=>{let{credentialsMainCommand:t}=await import("./credentials-U4XFHGRS.js");await t(e)});M.command("credentials:setup").description("Automated credential provisioning (iOS/Android) [Legacy]").requiredOption("--platform <os>","Platform: ios or android").option("--profile <name>","Build profile (production, staging, development)").option("--bundle-id <id>","Bundle ID / Package Name (optional, auto-detected)").option("--team-id <id>","Apple Team ID (iOS only)").option("--key-alias <alias>","Android keystore alias (optional, auto-generated)").option("--aws-profile <name>","AWS Credentials Profile (for S3 storage)").option("--force","Force recreate certificates (nuke existing on Apple Portal)",!1).action(async e=>{X(J.bgCyan.black(m.cliTag("Credentials Setup"))),await jt(e),nd(J.green("Done!"))});M.command("credentials:service").description("Upload Service Credentials (ASC API Key / Google Service JSON) [Legacy]").requiredOption("--platform <os>","Platform: ios or android").option("--file <path>","Path to credential file (.p8 or .json)").option("--issuer-id <id>","ASC API Key Issuer ID (iOS only)").option("--key-id <id>","ASC API Key ID (iOS only)").option("--bundle-id <id>","Bundle identifier / Android package name to attach this service credential to").option("--package-name <name>","Android package name to attach this service credential to").option("-p, --profile <name>","Build profile to resolve package/bundle identifier from config").action(async e=>{X(J.bgCyan.black(m.cliTag("Service Credentials"))),await Ao(e),nd(J.green("Done!"))});var so=M.command("device").description("Manage registered iOS test devices");so.command("register").description("Register a connected iOS device or enter UDID manually").option("--udid <udid>","Device UDID (skip auto-detection)").option("--name <name>","Device name").option("--team-id <id>","Apple Developer Team ID for this device").action(async e=>{await Ii("register",e)});so.command("list").description("List all registered devices").option("--team-id <id>","Filter by Apple Developer Team ID").action(async e=>{await Ii("list",e)});so.command("remove").description("Remove a registered device").option("--udid <udid>","Device UDID to remove").option("--team-id <id>","Apple Developer Team ID for this device").action(async e=>{await Ii("remove",e)});M.command("audit").description("Run automated security audit on the project or APK").option("--apk <path>","Path to APK file (runs APK diagnostics like 16KB alignment)").option("--json","Output results as JSON (for CI/CD)").option("--fix","Auto-apply fixes where possible").option("--category <name>","Run only a specific check category (e.g. 16kb, permissions, secrets)").option("--severity <level>","Minimum severity to display (critical, high, medium, low, info)").option("--prebuild","Run expo prebuild for deeper manifest/plist analysis").action(async e=>{X(J.bgCyan.black(m.cliTag(e.apk?"APK Audit":"Security Audit"))),await ed(e)});var ig=new Set(["login","logout","agent"]);M.hook("preAction",(e,t)=>{let n=t.name(),i=t.opts?.()||{};n==="maestro"&&(i.local||i.localRunner)||t.parent?.name()!=="deeplink"&&(ig.has(n)||Et())});M.on("command:*",()=>{console.error(`Invalid command: %s
1816
+ `),"Registered Devices")}catch(i){n.stop(K.red("Failed to fetch devices")),Ce.error(i.response?.data?.message||i.message)}wn(K.blue("---"))}async function _m(e){let t=e.udid,n=Tl(e).teamId;if(!t){let o=_n();o.start("Fetching registered devices...");try{let a=(await v.get("/devices",n?{params:{teamId:n}}:void 0)).data.devices||[];if(o.stop(`${a.length} device(s) found`),a.length===0){Ce.info(K.dim("No devices to remove.")),wn(K.blue("---"));return}let l=await Dl({message:"Select device to remove:",options:a.map(c=>({value:c.deviceKey||c.udid,label:c.name,hint:`${c.udid.substring(0,12)}...${c.teamId?` \xB7 ${c.teamId}`:""}`}))});if(En(l)){In("Cancelled");return}let d=a.find(c=>(c.deviceKey||c.udid)===l);t=d?.udid||l,n=d?.teamId||n}catch(s){o.stop(K.red("Failed to fetch devices")),Ce.error(s.response?.data?.message||s.message);return}}let i=await Am({message:`Remove device ${K.dim(t.substring(0,12)+"...")}?`});if(En(i)||!i){In("Cancelled");return}let r=_n();r.start("Removing device...");try{await v.delete(`/devices/${encodeURIComponent(t)}`,n?{params:{teamId:n}}:void 0),r.stop(K.green("Device removed"))}catch(o){r.stop(K.red("Failed to remove device")),Ce.error(o.response?.data?.message||o.message)}wn(K.blue("---"))}async function _i(e,t){switch(e){case"register":await Em(t);break;case"list":await Im(t);break;case"remove":await _m(t);break;default:Ce.error(`Unknown action: ${e}`)}}import{log as ke,spinner as ad}from"@clack/prompts";import He from"chalk";import ki from"path";import Rn from"fs";import ig from"os";import rg from"axios";var Te=(o=>(o.CRITICAL="critical",o.HIGH="high",o.MEDIUM="medium",o.LOW="low",o.INFO="info",o))(Te||{}),Be=(l=>(l.PERMISSIONS="permissions",l.SECRETS="secrets",l.DEPENDENCIES="dependencies",l.STORAGE="storage",l.NETWORK="network",l.DEBUG="debug",l.MANIFEST="manifest",l.ATS="ats",l))(Be||{});import{spinner as Xl,log as vn}from"@clack/prompts";import ve from"chalk";import{execSync as Wm}from"child_process";import Zl from"fs";import Ql from"path";import ut from"fs";import $n from"path";import{execSync as wm}from"child_process";var kl={"android.permission.READ_PHONE_STATE":{severity:"high",description:"Can read phone number, IMEI, carrier info"},"android.permission.CALL_PHONE":{severity:"high",description:"Can make calls without user interaction"},"android.permission.SEND_SMS":{severity:"high",description:"Can send SMS without user interaction"},"android.permission.READ_SMS":{severity:"high",description:"Can read user SMS messages"},"android.permission.READ_CONTACTS":{severity:"medium",description:"Can read user contacts"},"android.permission.WRITE_CONTACTS":{severity:"medium",description:"Can modify user contacts"},"android.permission.READ_CALL_LOG":{severity:"high",description:"Can read call history"},"android.permission.CAMERA":{severity:"medium",description:"Camera access"},"android.permission.RECORD_AUDIO":{severity:"medium",description:"Microphone access"},"android.permission.ACCESS_FINE_LOCATION":{severity:"medium",description:"Precise GPS location"},"android.permission.ACCESS_COARSE_LOCATION":{severity:"medium",description:"Approximate location"},"android.permission.ACCESS_BACKGROUND_LOCATION":{severity:"high",description:"Background location tracking"},"android.permission.READ_EXTERNAL_STORAGE":{severity:"medium",description:"Read files on device"},"android.permission.WRITE_EXTERNAL_STORAGE":{severity:"medium",description:"Write files on device"},"android.permission.READ_MEDIA_IMAGES":{severity:"low",description:"Read photos"},"android.permission.READ_MEDIA_VIDEO":{severity:"low",description:"Read videos"},"android.permission.SYSTEM_ALERT_WINDOW":{severity:"high",description:"Draw overlays on other apps"},"android.permission.REQUEST_INSTALL_PACKAGES":{severity:"high",description:"Can install APKs"}},$m={NSCameraUsageDescription:{severity:"medium",description:"Camera access declared"},NSMicrophoneUsageDescription:{severity:"medium",description:"Microphone access declared"},NSLocationWhenInUseUsageDescription:{severity:"medium",description:"Location (in-use) declared"},NSLocationAlwaysUsageDescription:{severity:"high",description:"Background location declared"},NSContactsUsageDescription:{severity:"medium",description:"Contacts access declared"},NSCalendarsUsageDescription:{severity:"low",description:"Calendar access declared"},NSPhotoLibraryUsageDescription:{severity:"low",description:"Photo library access declared"}};function vm(e){try{let n=wm("npx expo config --type introspect --json 2>/dev/null",{cwd:e,encoding:"utf-8",timeout:3e4});return JSON.parse(n)}catch{}let t=$n.join(e,"app.json");if(ut.existsSync(t))try{let n=JSON.parse(ut.readFileSync(t,"utf-8"));return n.expo||n}catch{}return null}function Rm(e){let t=[],n=$n.join(e,"node_modules");if(!ut.existsSync(n))return t;let i=/<uses-permission\s+android:name="([^"]+)"/g;function r(o,s){let a=$n.join(o,"android","src","main","AndroidManifest.xml");if(!ut.existsSync(a))return;let l=ut.readFileSync(a,"utf-8"),d;for(;(d=i.exec(l))!==null;)t.push({pkg:s,permission:d[1]});i.lastIndex=0}for(let o of ut.readdirSync(n)){if(o.startsWith("."))continue;let s=$n.join(n,o);if(o.startsWith("@")){if(!ut.statSync(s).isDirectory())continue;for(let a of ut.readdirSync(s))r($n.join(s,a),`${o}/${a}`)}else r(s,o)}return t}async function Nl(e,t){let n=[],i=1,r=vm(e),o=r?.android?.permissions||[],s=r?.android?.blockedPermissions||[];for(let d of o){let c=kl[d];c&&n.push({id:`PERM-${String(i++).padStart(3,"0")}`,title:`${d.split(".").pop()} declared`,description:c.description,severity:c.severity,category:"permissions",file:"app.config.ts",recommendation:"Remove from permissions if not needed, or add justification."})}let a=Rm(e);for(let{pkg:d,permission:c}of a){let u=kl[c];u&&(s.includes(c)||o.includes(c)||n.push({id:`PERM-${String(i++).padStart(3,"0")}`,title:`${c.split(".").pop()} injected by ${d}`,description:`${u.description}. Auto-injected via ${d} AndroidManifest.xml`,severity:u.severity,category:"permissions",file:`node_modules/${d}/android/src/main/AndroidManifest.xml`,recommendation:`Add "${c}" to blockedPermissions if not needed.`,autoFixable:!0}))}let l=r?.ios?.infoPlist||{};for(let[d,c]of Object.entries($m))d in l&&n.push({id:`PERM-${String(i++).padStart(3,"0")}`,title:`iOS: ${d} declared`,description:c.description,severity:c.severity,category:"permissions",file:"app.config.ts",recommendation:`Remove ${d} from infoPlist if the app does not use this capability.`});return{category:"permissions",label:"Permission Audit",findings:n,durationMs:0}}import ao from"fs";import wi from"path";var Om=[{id:"SEC-001",pattern:/(['"`])(?:sk|pk)_(?:live|test)_[a-zA-Z0-9]{20,}\1/g,severity:"critical",label:"Stripe API Key"},{id:"SEC-002",pattern:/(['"`])AIza[0-9A-Za-z\-_]{35}\1/g,severity:"high",label:"Google API Key"},{id:"SEC-003",pattern:/(['"`])AKIA[0-9A-Z]{16}\1/g,severity:"critical",label:"AWS Access Key ID"},{id:"SEC-004",pattern:/-----BEGIN (?:RSA |EC )?PRIVATE KEY-----/g,severity:"critical",label:"Private key in source"},{id:"SEC-005",pattern:/(?:ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9_]{36,}/g,severity:"high",label:"GitHub Token"},{id:"SEC-006",pattern:/xox[bpors]-[a-zA-Z0-9-]{10,}/g,severity:"high",label:"Slack Token"},{id:"SEC-007",pattern:/(?:password|secret|apikey|api_key)\s*[:=]\s*['"`][^'"`\n]{8,}['"`]/gi,severity:"high",label:"Hardcoded credential"}],Pm=new Set([".ts",".tsx",".js",".jsx"]),Dm=new Set(["node_modules",".expo",".git","android","ios","dist","build","__tests__","__mocks__"]);function xl(e){let t=[],n=ao.readdirSync(e,{withFileTypes:!0});for(let i of n){if(Dm.has(i.name))continue;let r=wi.join(e,i.name);i.isDirectory()?t.push(...xl(r)):Pm.has(wi.extname(i.name))&&t.push(r)}return t}function Cm(e){let t=e.trim();return t.startsWith("//")||t.startsWith("*")||t.startsWith("/*")}function Tm(e){return/process\.env\./i.test(e)||/import\.meta\.env/i.test(e)}async function Ll(e,t){let n=[],i=wi.join(e,"src"),r=ao.existsSync(i)?i:e,o=xl(r);for(let s of o){let l=ao.readFileSync(s,"utf-8").split(`
1817
+ `),d=wi.relative(e,s);for(let c=0;c<l.length;c++){let u=l[c];if(!Cm(u)&&!Tm(u))for(let{id:f,pattern:p,severity:g,label:h}of Om)p.lastIndex=0,p.test(u)&&n.push({id:f,title:h,description:`Potential ${h.toLowerCase()} found in source code`,severity:g,category:"secrets",file:d,line:c+1,recommendation:`Move to environment variables or a secrets manager. Use \`${m.nameLower} env set\` for managed secrets.`})}}return{category:"secrets",label:"Secrets Detection",findings:n,durationMs:0}}import{execSync as km}from"child_process";var Nm={critical:"critical",high:"high",moderate:"medium",low:"low",info:"info"};async function Ml(e,t){let n=[],i=1,r;try{r=km("npm audit --json 2>/dev/null",{cwd:e,encoding:"utf-8",timeout:6e4})}catch(a){if(r=a.stdout||"",!r)return{category:"dependencies",label:"Dependency CVEs",findings:[],durationMs:0,error:"Failed to run npm audit. Ensure npm is available and dependencies are installed."}}let o;try{o=JSON.parse(r)}catch{return{category:"dependencies",label:"Dependency CVEs",findings:[],durationMs:0,error:"Failed to parse npm audit output."}}let s=o.vulnerabilities||{};for(let[a,l]of Object.entries(s)){let d=Nm[l.severity]||"info",c=Array.isArray(l.via)?l.via.map(u=>typeof u=="string"?u:u.title||u.name).join(", "):String(l.via);n.push({id:`DEP-${String(i++).padStart(3,"0")}`,title:`${a} \u2014 ${l.severity}`,description:`Via: ${c}. Range: ${l.range||"unknown"}`,severity:d,category:"dependencies",recommendation:l.fixAvailable?`Run \`npm audit fix\` or update ${a} to a patched version.`:"No fix available yet. Monitor for updates or evaluate alternatives.",autoFixable:!!l.fixAvailable})}return{category:"dependencies",label:"Dependency CVEs",findings:n,durationMs:0}}import $i from"fs";import vi from"path";var xm=/(?:token|password|credential|secret|apiKey|api_key|session|auth|jwt|refresh_token|access_token|private_key|pin|otp)/i,Ul=/AsyncStorage\s*\.\s*(?:setItem|mergeItem)\s*\(\s*['"`]([^'"`]+)['"`]/g,Lm=/from\s+['"]@react-native-async-storage\/async-storage['"]|from\s+['"]react-native['"].*AsyncStorage/,Mm=new Set([".ts",".tsx",".js",".jsx"]),Um=new Set(["node_modules",".expo",".git","android","ios","dist","build"]);function Fl(e){let t=[];if(!$i.existsSync(e))return t;let n=$i.readdirSync(e,{withFileTypes:!0});for(let i of n){if(Um.has(i.name))continue;let r=vi.join(e,i.name);i.isDirectory()?t.push(...Fl(r)):Mm.has(vi.extname(i.name))&&t.push(r)}return t}async function Bl(e,t){let n=[],i=1,r=vi.join(e,"src"),o=$i.existsSync(r)?r:e,s=Fl(o);for(let a of s){let l=$i.readFileSync(a,"utf-8");if(!Lm.test(l))continue;let d=l.split(`
1818
+ `),c=vi.relative(e,a);for(let u=0;u<d.length;u++){let f=d[u];Ul.lastIndex=0;let p;for(;(p=Ul.exec(f))!==null;){let g=p[1];xm.test(g)&&n.push({id:`STOR-${String(i++).padStart(3,"0")}`,title:`AsyncStorage used for "${g}"`,description:`Sensitive data key "${g}" stored in AsyncStorage (unencrypted).`,severity:"high",category:"storage",file:c,line:u+1,recommendation:"Use expo-secure-store (SecureStore) for sensitive data instead of AsyncStorage."})}}}return{category:"storage",label:"Insecure Storage",findings:n,durationMs:0}}import Ri from"fs";import Oi from"path";var Hl=/['"`](http:\/\/(?!localhost|127\.0\.0\.1|10\.|192\.168\.|0\.0\.0\.0|172\.(?:1[6-9]|2\d|3[01])\.)[^'"`\s]+)['"`]/g,Fm=/\/api\/|\/v[0-9]+\/|\/graphql|\/rest\//i,Bm=new Set([".ts",".tsx",".js",".jsx"]),Hm=new Set(["node_modules",".expo",".git","android","ios","dist","build","__tests__","__mocks__"]);function jl(e){let t=[];if(!Ri.existsSync(e))return t;let n=Ri.readdirSync(e,{withFileTypes:!0});for(let i of n){if(Hm.has(i.name))continue;let r=Oi.join(e,i.name);i.isDirectory()?t.push(...jl(r)):Bm.has(Oi.extname(i.name))&&t.push(r)}return t}async function Gl(e,t){let n=[],i=1,r=Oi.join(e,"src"),o=Ri.existsSync(r)?r:e,s=jl(o);for(let a of s){let d=Ri.readFileSync(a,"utf-8").split(`
1819
+ `),c=Oi.relative(e,a);for(let u=0;u<d.length;u++){let f=d[u],p=f.trim();if(p.startsWith("//")||p.startsWith("*"))continue;Hl.lastIndex=0;let g;for(;(g=Hl.exec(f))!==null;){let h=g[1],A=Fm.test(h);n.push({id:`NET-${String(i++).padStart(3,"0")}`,title:`Insecure HTTP URL${A?" (API endpoint)":""}`,description:`Plain HTTP URL found: ${h}`,severity:A?"high":"medium",category:"network",file:c,line:u+1,recommendation:"Use HTTPS instead of HTTP for all network requests."})}}}return{category:"network",label:"HTTP URLs",findings:n,durationMs:0}}import Pi from"fs";import Di from"path";var Vl=/(?:debug|debugMode|devMode|enableDebug)\s*[:=]\s*true/gi,zl=/console\.(?:log|warn|info|debug)\s*\([^)]*(?:token|password|secret|credential|key|auth)/gi,jm=new Set([".ts",".tsx",".js",".jsx"]),Gm=new Set(["node_modules",".expo",".git","android","ios","dist","build","__tests__","__mocks__"]);function Kl(e){let t=[];if(!Pi.existsSync(e))return t;let n=Pi.readdirSync(e,{withFileTypes:!0});for(let i of n){if(Gm.has(i.name))continue;let r=Di.join(e,i.name);i.isDirectory()?t.push(...Kl(r)):jm.has(Di.extname(i.name))&&t.push(r)}return t}async function Wl(e,t){let n=[],i=1,r=Di.join(e,"src"),o=Pi.existsSync(r)?r:e,s=Kl(o);for(let a of s){let d=Pi.readFileSync(a,"utf-8").split(`
1820
+ `),c=Di.relative(e,a);for(let u=0;u<d.length;u++){let f=d[u],p=f.trim();if(!(p.startsWith("//")||p.startsWith("*"))&&(Vl.lastIndex=0,Vl.test(f)&&n.push({id:`DBG-${String(i++).padStart(3,"0")}`,title:"Hardcoded debug flag",description:"Debug/dev mode enabled in source code",severity:"medium",category:"debug",file:c,line:u+1,recommendation:"Use __DEV__ or environment variables instead of hardcoded debug flags."}),zl.lastIndex=0,zl.test(f))){let g=d.slice(Math.max(0,u-3),u).join(`
1821
+ `);/__DEV__/.test(g)||n.push({id:`DBG-${String(i++).padStart(3,"0")}`,title:"Sensitive data in console log",description:"Console log may expose sensitive data (token, password, etc.) in production",severity:"medium",category:"debug",file:c,line:u+1,recommendation:"Wrap in __DEV__ check or remove sensitive data from console output."})}}}return{category:"debug",label:"Debug/Dev Flags",findings:n,durationMs:0}}import Yl from"fs";import lo from"path";var Vm=new Set(["androidx.work.impl.background.systemjob.SystemJobService","androidx.work.impl.diagnostics.DiagnosticsReceiver","com.google.firebase.iid.FirebaseInstanceIdReceiver","com.google.android.gms.auth.api.signin.RevocationBoundService","androidx.profileinstaller.ProfileInstallReceiver","com.google.firebase.messaging.FirebaseMessagingService","com.google.android.gms.measurement.AppMeasurementService","com.google.android.gms.measurement.AppMeasurementJobService"]);function zm(e){let t=[lo.join(e,"android","app","src","main","AndroidManifest.xml"),lo.join(e,"android","AndroidManifest.xml")];for(let n of t)if(Yl.existsSync(n))return n;return null}async function ql(e,t){let n=[],i=1,r=zm(e);if(!r)return{category:"manifest",label:"Android Manifest",findings:[],durationMs:0,error:"No AndroidManifest.xml found. Run with --prebuild or run `expo prebuild` first."};let o=Yl.readFileSync(r,"utf-8"),s=lo.relative(e,r),a=/<(activity|service|receiver|provider)\s+([^>]*?)(?:\/>|>)/gs,l;for(;(l=a.exec(o))!==null;){let d=l[1],c=l[2],f=c.match(/android:name="([^"]+)"/)?.[1]||"unknown";if(Vm.has(f))continue;let p=/android:exported="true"/.test(c),g=/android:permission="/.test(c);p&&!g&&n.push({id:`MAN-${String(i++).padStart(3,"0")}`,title:`Exported ${d}: ${f.split(".").pop()}`,description:`${f} is exported=true without android:permission protection`,severity:"medium",category:"manifest",file:s,recommendation:'Set android:exported="false" or add an android:permission attribute.'})}return/android:allowBackup="true"/.test(o)&&n.push({id:`MAN-${String(i++).padStart(3,"0")}`,title:"allowBackup is enabled",description:'android:allowBackup="true" allows data extraction via ADB backup',severity:"medium",category:"manifest",file:s,recommendation:'Set android:allowBackup="false" via expo-build-properties plugin.',autoFixable:!0}),/android:debuggable="true"/.test(o)&&n.push({id:`MAN-${String(i++).padStart(3,"0")}`,title:"App is debuggable",description:'android:debuggable="true" allows attaching a debugger in production',severity:"critical",category:"manifest",file:s,recommendation:"Ensure debuggable is false for production builds. This is usually set automatically for release builds."}),{category:"manifest",label:"Android Manifest",findings:n,durationMs:0}}import Ci from"fs";import co from"path";function Km(e){let t=co.join(e,"ios");if(!Ci.existsSync(t))return null;let n=Ci.readdirSync(t,{withFileTypes:!0});for(let i of n){if(!i.isDirectory()||i.name==="Pods"||i.name.startsWith("."))continue;let r=co.join(t,i.name,"Info.plist");if(Ci.existsSync(r))return r}return null}async function Jl(e,t){let n=[],i=1,r=Km(e);if(!r)return{category:"ats",label:"iOS ATS Config",findings:[],durationMs:0,error:"No Info.plist found. Run with --prebuild or run `expo prebuild` first."};let o=Ci.readFileSync(r,"utf-8"),s=co.relative(e,r),a=o.match(/<key>NSAppTransportSecurity<\/key>\s*<dict>([\s\S]*?)<\/dict>/);if(a){let l=a[1];/<key>NSAllowsArbitraryLoads<\/key>\s*<true\s*\/>/.test(l)&&n.push({id:`ATS-${String(i++).padStart(3,"0")}`,title:"ATS disabled \u2014 NSAllowsArbitraryLoads",description:"App Transport Security is completely disabled. All HTTP connections are allowed.",severity:"critical",category:"ats",file:s,recommendation:"Remove NSAllowsArbitraryLoads or set to false. Use domain-specific exceptions only if absolutely necessary."});let d=l.match(/<key>NSExceptionDomains<\/key>\s*<dict>([\s\S]*?)<\/dict>/);if(d){let c=d[1].match(/<key>([^<]+)<\/key>/g);if(c)for(let u of c){let f=u.replace(/<\/?key>/g,"");f!=="NSExceptionDomains"&&n.push({id:`ATS-${String(i++).padStart(3,"0")}`,title:`ATS exception: ${f}`,description:`ATS exception configured for ${f}`,severity:"low",category:"ats",file:s,recommendation:`Verify that the ATS exception for ${f} is necessary. Use HTTPS where possible.`})}}}return{category:"ats",label:"iOS ATS Config",findings:n,durationMs:0}}var Ym=[{category:"permissions",label:"Permission Audit",fn:Nl,requiresPrebuild:!1},{category:"secrets",label:"Secrets Detection",fn:Ll,requiresPrebuild:!1},{category:"dependencies",label:"Dependency CVEs",fn:Ml,requiresPrebuild:!1},{category:"storage",label:"Insecure Storage",fn:Bl,requiresPrebuild:!1},{category:"network",label:"HTTP URLs",fn:Gl,requiresPrebuild:!1},{category:"debug",label:"Debug/Dev Flags",fn:Wl,requiresPrebuild:!1},{category:"manifest",label:"Android Manifest",fn:ql,requiresPrebuild:!0},{category:"ats",label:"iOS ATS Config",fn:Jl,requiresPrebuild:!0}];async function ed(e,t){let n=Ym;t.category&&(n=n.filter(s=>s.category===t.category),n.length===0&&(vn.error(ve.red(`Unknown category: ${t.category}`)),vn.info(ve.dim(`Available: ${Object.values(Be).join(", ")}`)),process.exit(1)));let i=n.filter(s=>!s.requiresPrebuild),r=n.filter(s=>s.requiresPrebuild),o=[];for(let s of i){let a=Xl();a.start(ve.dim(`Running ${s.label}...`));try{let l=Date.now(),d=await s.fn(e,t);d.durationMs=Date.now()-l,o.push(d);let c=d.findings.length;a.stop(c>0?ve.yellow(`${s.label} \u2014 ${c} finding(s)`):ve.green(`${s.label} \u2014 clean`))}catch(l){a.stop(ve.red(`${s.label} \u2014 error`)),o.push({category:s.category,label:s.label,findings:[],durationMs:0,error:l.message})}}if(r.length>0){let s=Ql.join(e,"android"),a=Ql.join(e,"ios"),l=Zl.existsSync(s)||Zl.existsSync(a);if(!l&&t.prebuild){t.json||vn.info(ve.dim(`
1822
+ Running expo prebuild for deeper analysis...`));try{Wm("npx expo prebuild --no-install",{cwd:e,stdio:"pipe"})}catch{return vn.warn(ve.yellow("Prebuild failed \u2014 skipping manifest/plist checks.")),o}}else if(!l)return t.json||vn.info(ve.dim(`
1823
+ Skipping manifest/plist checks \u2014 no android/ios dirs. Use --prebuild to generate them.`)),o;for(let d of r){let c=Xl();c.start(ve.dim(`Running ${d.label}...`));try{let u=Date.now(),f=await d.fn(e,t);f.durationMs=Date.now()-u,o.push(f);let p=f.findings.length;c.stop(p>0?ve.yellow(`${d.label} \u2014 ${p} finding(s)`):ve.green(`${d.label} \u2014 clean`))}catch(u){c.stop(ve.red(`${d.label} \u2014 error`)),o.push({category:d.category,label:d.label,findings:[],durationMs:0,error:u.message})}}}return o}import pe from"chalk";import{log as se}from"@clack/prompts";var Mt={critical:pe.bgRed.white.bold,high:pe.red.bold,medium:pe.yellow.bold,low:pe.blue,info:pe.dim},Ti={critical:0,high:1,medium:2,low:3,info:4};function qm(e,t){if(!t)return!0;let n=Ti[t];return n===void 0?!0:Ti[e]<=n}function td(e,t){let n=0,i={critical:0,high:0,medium:0,low:0,info:0};for(let s of e){let a=s.findings.filter(d=>qm(d.severity,t));if(a.length===0&&!s.error)continue;if(se.info(""),se.info(pe.bold(` ${s.label}`)+pe.dim(` ${a.length} finding(s)`)),se.info(pe.dim(" "+"\u2500".repeat(60))),s.error){se.error(pe.red(` Error: ${s.error}`));continue}let l=[...a].sort((d,c)=>Ti[d.severity]-Ti[c.severity]);for(let d of l){let c=Mt[d.severity](` ${d.severity.toUpperCase()} `);se.info(` ${c} ${pe.bold(d.id)} ${d.title}`),se.info(pe.dim(` ${d.description}`)),d.file&&se.info(pe.dim(` File: ${d.file}${d.line?`:${d.line}`:""}`)),se.info(pe.cyan(` Fix: ${d.recommendation}`)),se.info(""),i[d.severity]++,n++}}se.info(""),se.info(pe.bold(" Summary")),se.info(pe.dim(" "+"\u2500".repeat(60))),se.info(` Total: ${pe.bold(String(n))} finding(s)`),se.info(` ${Mt.critical(` ${i.critical} Critical `)} ${Mt.high(` ${i.high} High `)} ${Mt.medium(` ${i.medium} Medium `)} ${Mt.low(` ${i.low} Low `)} ${Mt.info(` ${i.info} Info `)}`);let r=i.critical>0,o=i.high>0;r||o?(se.info(""),se.error(pe.red.bold(` FAIL \u2014 ${i.critical} critical, ${i.high} high issue(s) found`))):n>0?(se.info(""),se.warn(pe.yellow(" PASS (with warnings) \u2014 no critical or high issues"))):(se.info(""),se.success(pe.green.bold(" PASS \u2014 no issues found")))}function nd(e,t){let n=e.flatMap(r=>r.findings),i={};for(let r of Object.values(Te))i[r]=n.filter(o=>o.severity===r).length;return{version:"1.0.0",timestamp:new Date().toISOString(),project:t.name||"unknown",projectVersion:t.version||"0.0.0",summary:{total:n.length,...i},passed:i.critical===0&&i.high===0,checks:e.map(r=>({category:r.category,label:r.label,findingCount:r.findings.length,durationMs:r.durationMs,error:r.error||null})),findings:n}}import{log as ae,spinner as Jm}from"@clack/prompts";import ne from"chalk";import Xe from"fs";import Xm from"os";import Ut from"path";import{execSync as Zm}from"child_process";var id=16384,Qm=1,eg=Buffer.from([127,69,76,70]);async function rd(e){ae.info(ne.bold.underline("16KB Page Alignment Check")),console.log("");let t=Ut.resolve(e);if(!Xe.existsSync(t))return ae.error(ne.red(`APK file not found: ${t}`)),!1;if(!t.endsWith(".apk"))return ae.error(ne.red("The provided file is not an APK file.")),!1;let n=Jm();n.start("Extracting and analyzing native libraries...");let i=Xe.mkdtempSync(Ut.join(Xm.tmpdir(),"mach-16kb-"));try{try{Zm(`unzip -o -q "${t}" "lib/arm64-v8a/*.so" "lib/x86_64/*.so" -d "${i}" 2>/dev/null`,{encoding:"utf-8",maxBuffer:50*1024*1024})}catch{}let r=od(Ut.join(i,"lib"));if(r.length===0)return n.stop("Analysis complete."),ae.info(ne.yellow("No arm64-v8a or x86_64 native libraries found in the APK.")),ae.info(ne.dim("16KB alignment check only applies to arm64-v8a and x86_64 architectures.")),!0;let o=[];for(let l of r){let d=Ut.relative(i,l),c=ng(d),u=Ut.basename(l),f=tg(l);f!==null&&o.push({name:u,filePath:d,arch:c,align:f,compatible:f>=id})}if(n.stop("Analysis complete."),o.length===0)return ae.info(ne.yellow("No valid ELF shared libraries found.")),!0;let s=o.filter(l=>!l.compatible),a=o.filter(l=>l.compatible);if(ae.info(ne.dim(`Checked ${o.length} native librar${o.length===1?"y":"ies"}
1824
+ `)),s.length>0){ae.info(ne.red.bold(`Incompatible libraries:
1825
+ `));for(let l of s)ae.error(ne.red(`${ne.bold(l.name)} ${ne.dim(`(${l.arch})`)}`)),ae.info(ne.dim(` PT_LOAD alignment: 2**${Math.log2(l.align)} (${l.align} bytes, needs 2**14 = ${id})`))}return a.length>0&&(console.log(""),ae.success(ne.green(`${a.length} librar${a.length===1?"y":"ies"} correctly aligned (2**14 or higher).`))),console.log(""),s.length===0?(ae.success(ne.green.bold("ELF Verification Successful. APK is 16KB compatible.")),!0):(ae.error(ne.red.bold(`Found ${s.length} unaligned lib${s.length===1?"":"s"} (arm64-v8a/x86_64 libs need to be aligned).`)),console.log(""),ae.info(ne.yellow("To fix this:")),ae.info(ne.dim(" 1. Rebuild with NDK r28+ which defaults to 16KB page alignment")),ae.info(ne.dim(" 2. Or set -DANDROID_SUPPORT_FLEXIBLE_PAGE_SIZES=ON in CMake")),ae.info(ne.dim(" 3. Update third-party libraries that ship prebuilt .so files")),ae.info(ne.dim(" 4. After rebuilding: zipalign -p -f -v 16 input.apk output.apk")),console.log(""),ae.info(ne.dim("Reference: https://developer.android.com/guide/practices/page-sizes")),!1)}catch(r){return n.stop("Analysis failed."),ae.error(ne.red(`Failed to analyze APK: ${r.message}`)),!1}finally{try{Xe.rmSync(i,{recursive:!0,force:!0})}catch{}}}function tg(e){let t=Xe.openSync(e,"r");try{let n=Buffer.alloc(64);if(Xe.readSync(t,n,0,64,0),!n.subarray(0,4).equals(eg))return null;let i=n[4]===2,r=n[5]===1,o=(f,p)=>r?f.readUInt16LE(p):f.readUInt16BE(p),s=(f,p)=>r?f.readUInt32LE(p):f.readUInt32BE(p),a=(f,p)=>Number(r?f.readBigUInt64LE(p):f.readBigUInt64BE(p)),l,d,c;i?(l=a(n,32),d=o(n,54),c=o(n,56)):(l=s(n,28),d=o(n,42),c=o(n,44));let u=null;for(let f=0;f<c;f++){let p=Buffer.alloc(d);if(Xe.readSync(t,p,0,d,l+f*d),s(p,0)!==Qm)continue;let h;i?h=a(p,48):h=s(p,28),h>0&&(u===null||h<u)&&(u=h)}return u??0}catch{return null}finally{Xe.closeSync(t)}}function od(e){let t=[];if(!Xe.existsSync(e))return t;let n=Xe.readdirSync(e,{withFileTypes:!0});for(let i of n){let r=Ut.join(e,i.name);i.isDirectory()?t.push(...od(r)):i.name.endsWith(".so")&&t.push(r)}return t}function ng(e){return e.includes("arm64-v8a")?"arm64-v8a":e.includes("x86_64")?"x86_64":"unknown"}var ld=async e=>{if(Ae()||(ke.error(He.red(`You are not logged in. Run \`${m.nameLower} login\` first.`)),process.exit(1)),e.apk){await og(e);return}let n=process.cwd(),i=ki.join(n,"package.json");Rn.existsSync(i)||(ke.error(He.red("No package.json found. Run this command from a project root.")),process.exit(1));let r=JSON.parse(Rn.readFileSync(i,"utf-8")),o=!!(r.dependencies?.expo||r.devDependencies?.expo);e.json||(ke.info(He.dim(`Project: ${r.name||"unknown"} v${r.version||"0.0.0"}`)),ke.info(He.dim(`Type: ${o?"Expo":"Bare React Native"}`)),ke.info(""));let s={json:e.json,fix:e.fix,category:e.category,severity:e.severity,prebuild:e.prebuild},a=await ed(n,s);e.json?console.log(JSON.stringify(nd(a,r),null,2)):td(a,e.severity);let l=a.some(c=>c.findings.some(u=>u.severity==="critical")),d=a.some(c=>c.findings.some(u=>u.severity==="high"));(l||d)&&process.exit(1)},sd=["16kb"];async function og(e){let t=e.category?.toLowerCase();t&&!sd.includes(t)&&(ke.error(He.red(`Unknown APK check category: "${t}"`)),ke.info(He.dim(`Available APK checks: ${sd.join(", ")}`)),process.exit(1));let n=await sg(e.apk);n||process.exit(1);let i=!t,r=!1;(i||t==="16kb")&&(await rd(n)||(r=!0)),r&&process.exit(1)}async function sg(e){if(e.startsWith("build:")){let n=e.slice(6);return await ag(n)}if(e.startsWith("http://")||e.startsWith("https://"))return await dd(e);let t=ki.resolve(e);return Rn.existsSync(t)?t:(ke.error(He.red(`APK file not found: ${t}`)),null)}async function ag(e){let t=ad();t.start(`Fetching APK from build ${e}...`);try{let n=await v.get(`/build/${e}`);if(n.data.status!=="success")throw new Error(n.data.message);let i=n.data.build;if(!i)throw new Error("Build not found");let r=i.artifacts?.find(o=>o.type?o.type==="apk":o.name?.endsWith(".apk")||o.url?.includes(".apk"));return!r||!r.url?(t.stop("No APK artifact found"),ke.error(He.red("This build does not have an APK artifact.")),ke.info(He.dim("Make sure the build produced an APK (not just an AAB).")),null):(t.stop(`Found build: ${i.buildId||e}`),await dd(r.url))}catch(n){return t.stop("Failed to fetch build"),ke.error(He.red(n.message)),null}}async function dd(e){let t=ad();t.start("Downloading APK...");try{let n=Rn.mkdtempSync(ki.join(ig.tmpdir(),`${m.nameLower}-audit-`)),i=ki.join(n,"app.apk"),r=await rg.get(e,{responseType:"arraybuffer"});Rn.writeFileSync(i,r.data);let o=(r.data.length/(1024*1024)).toFixed(1);return t.stop(`Downloaded APK (${o} MB)`),i}catch(n){return t.stop("Download failed"),ke.error(He.red(`Failed to download APK: ${n.message}`)),null}}var cg=console.log;console.log=()=>{};dg();console.log=cg;X(q.bgCyan.black(m.cliTag("Production Build Orchestrator")));var On=(e,t=[])=>t.concat(e),M=new lg;M.name(m.nameLower).description(`${m.name} CLI: Powerful Cloud Infrastructure Tools`).version(Qe).option("-y, --yes","Automatically answer yes to all prompts",!1).option("--quiet","Suppress non-essential output",!1);M.command("agent").description("Manage local device discovery agent for the Install Hub (port 7070)").argument("[action]","start, run, install, status, restart, stop, or uninstall","start").action(async e=>{await wa(e)});M.command("host").description("Setup AWS S3 static hosting and CloudFront").action(async()=>{X(q.bgCyan.black(m.cliTag("Hosting"))),await Do()});M.command("sitemap").description("Generate sitemap.xml from Expo Router app structure").option("-o, --output <path>","Output path for sitemap.xml","./public/sitemap.xml").action(async e=>{X(q.bgCyan.black(m.cliTag("Sitemap Generator"))),await No(e)});M.command("build").description("Run a build on a cloud provider (AWS Spot Instances)").argument("[platform]","Target platform (android, ios)").option("--platform <os>","Target platform alias (android, ios) [Optional]").option("--repo <url>","Git Repository URL").option("--branch <name>","Git Branch").option("--ami <id>","AMI ID").option("--bucket <name>","S3 Bucket for artifacts").option("--region <region>","AWS Region").option("--aws-profile <name>","AWS Credentials Profile").option("-p, --build-profile <name>","Build Profile (e.g. production, staging)").option("--profile <name>","Build Profile (alias for --build-profile)").option("--dry-run","Generate User Data script without launching").option("--keep-instance","Do not terminate the instance after build").option("--subnet <id>","VPC Subnet ID to launch the instance in").option("--security-group <id>","VPC Security Group ID to use").option("--ssh-host <host>","Remote host for iOS build (SSH)").option("--ssh-user <user>","SSH username for remote host").option("--ssh-key <path>","Path to private SSH key for remote host").option("--ios-scheme <scheme>","iOS Scheme to build").option("--ios-team-id <id>","Apple Development Team ID").option("--ios-configuration <config>","Xcode configuration (Release/Debug)").option("--ios-export-method <method>","Export method (ad-hoc, app-store, development, enterprise)").option("--ios-api-key-id <id>","App Store Connect API Key ID").option("--ios-api-key-issuer <id>","App Store Connect API Key Issuer ID").option("--ios-api-key-path <path>","Path to App Store Connect API Key (.p8) file").option("--simulator","Build for iOS Simulator (no signing required)").addOption(new Ne("--build-id <id>","Internal build ID").hideHelp()).addOption(new Ne("--project-id <id>","Internal project ID").hideHelp()).addOption(new Ne("--fail-only","Internal: mark an existing build failed").hideHelp()).addOption(new Ne("--error <message>","Internal failure message").hideHelp()).option("--local","Run build on local machine").option("--auto-version","Assign the next Android versionCode or iOS buildNumber from Mach").option("--auto-submit","Submit this build after it completes successfully").option("--submit-track <track>","Google Play track to use with --auto-submit").option("--submit-release-status <status>","Google Play release status to use with --auto-submit").option("--submit-rollout <fraction>","Google Play staged rollout fraction to use with --auto-submit").option("--submit-changes-not-sent-for-review","Commit Google Play changes without automatically sending them for review when using --auto-submit").option("--submit-credential-id <id>","Service credential ID to use with --auto-submit").option("--submit-json-output <path>","Write auto-submit metadata JSON to a file for CI/CD").option("--verbose","Enable verbose logging").option("--json-output <path>","Write build metadata JSON to a file for CI/CD").option("--maestro","Queue a managed Maestro test run after a successful build").option("--maestro-flows <path>","Maestro flow file or directory (default: .maestro)").option("--maestro-device <device>","iOS simulator model or identifier (default: iPhone 17 Pro; managed Android uses Pixel 6)").option("--maestro-retries <n>","Retries for the Maestro run","1").option("--maestro-record","Enable screen recording where supported").option("--maestro-use-build-source","Use Maestro flows from the build source snapshot instead of uploading local flows").option("--maestro-env <name>","Forward an environment variable to the managed Maestro runner; repeat or comma-separate names",On,[]).option("-y, --yes","Automatically answer yes to all prompts",!1).option("--quiet","Suppress non-essential output",!1).action(async(e,t)=>{let n=M.opts();t.yes=t.yes||n.yes,t.quiet=t.quiet||n.quiet,t.platform=e||t.platform,t.buildProfile=t.profile||t.buildProfile,t.quiet||X(q.bgCyan.black(m.cliTag("Cloud Build"))),await Jn(t)});M.command("maestro").description("Run Maestro tests locally or with the managed Mach runner").option("--platform <os>","Target platform (android/ios)").option("-p, --profile <name>","Build profile to resolve when using --latest","production").option("--latest","Use the latest successful build for the platform/profile").option("--build-id <id>","Use a specific Mach build ID").option("--build-url <url>","Use a Mach build URL").option("--artifact-url <url>","Use a direct APK or iOS simulator app artifact URL").option("--local","Run Maestro on a connected local emulator/device instead of the managed runner").option("--maestro-flows <path>","Maestro flow file or directory (default: .maestro)").option("--maestro-device <device>","iOS simulator model or identifier (default: iPhone 17 Pro; managed Android uses Pixel 6)").option("--maestro-retries <n>","Retries for the Maestro run","1").option("--maestro-record","Enable screen recording where supported").option("--maestro-use-build-source","Use Maestro flows from the build source snapshot instead of uploading local flows").option("--maestro-env <name>","Forward an environment variable to the managed Maestro runner; repeat or comma-separate names",On,[]).option("--wait","Wait for managed Maestro completion and exit non-zero on failure").option("--wait-timeout <minutes>","Maximum minutes to wait for managed Maestro completion","60").option("--wait-interval <seconds>","Polling interval while waiting for managed Maestro completion","15").option("--json-output <path>","Write test run metadata JSON to a file for CI/CD").addOption(new Ne("--local-runner","Internal: execute a managed Maestro run on this machine").hideHelp()).addOption(new Ne("--test-run-id <id>","Internal test run ID").hideHelp()).addOption(new Ne("--project-id <id>","Internal project ID").hideHelp()).addOption(new Ne("--runner-token <token>","Internal runner token").hideHelp()).action(async e=>{X(q.bgCyan.black(m.cliTag("Maestro Testing"))),await rs(e)});var Ft=e=>e.option("--platform <os>","Target platform: ios, android, or all","all").option("--channel <name>","OTA channel (for example: production, staging)").option("--branch <name>","Alias for --channel").option("--runtime-version <version>","Runtime version override").option("--message <text>","Release note/message for this OTA update").option("--framework <name>","Framework override: expo or react-native").option("--engine <name>","OTA engine override (currently expo-updates)").option("--url <url>","Mach OTA update URL override").option("--install-plugin","Install @radhya/mach locally for the Expo config plugin").option("--skip-install","Do not install local Expo plugin dependency").option("--update-id <id>","OTA update id for rollback/promote").option("--json","Print JSON output"),Bt=M.command("ota").description("Setup, publish, verify, and manage Mach OTA updates");Ft(Bt.command("setup").description("Configure OTA for this project")).action(async e=>{let t=M.opts();X(q.bgCyan.black(m.cliTag("OTA Setup"))),await st("setup",{...e,yes:e.yes||t.yes})});Ft(Bt.command("publish").description("Publish an OTA update")).action(async e=>{let t=M.opts();X(q.bgCyan.black(m.cliTag("OTA Publish"))),await st("publish",{...e,yes:e.yes||t.yes})});Ft(Bt.command("verify").description("Verify OTA configuration")).action(async e=>{let t=M.opts();X(q.bgCyan.black(m.cliTag("OTA Verify"))),await st("verify",{...e,yes:e.yes||t.yes})});Ft(Bt.command("list").description("List OTA updates for the linked project")).action(async e=>{let t=M.opts();X(q.bgCyan.black(m.cliTag("OTA Updates"))),await st("list",{...e,yes:e.yes||t.yes})});Ft(Bt.command("rollback").description("Roll back an OTA update")).action(async e=>{let t=M.opts();X(q.bgCyan.black(m.cliTag("OTA Rollback"))),await st("rollback",{...e,yes:e.yes||t.yes})});Ft(Bt.command("promote").description("Promote an OTA update")).action(async e=>{let t=M.opts();X(q.bgCyan.black(m.cliTag("OTA Promote"))),await st("promote",{...e,yes:e.yes||t.yes})});M.command("submit").description("Automated Store Submission (App Store / Google Play)").option("--platform <os>","Target platform (ios/android)").option("-p, --profile <name>","Build/submission profile to submit from (e.g. production, preprod)").option("--track <track>","Google Play Track (internal, alpha, beta, production)").option("--release-status <status>","Google Play release status (completed, draft, halted, inProgress)").option("--rollout <fraction>","Google Play staged rollout fraction for inProgress releases (example: 0.1)").option("--changes-not-sent-for-review","Commit Google Play changes without automatically sending them for review").option("--ssh-host <host>","Remote macOS host for iOS submission").option("--ssh-user <user>","SSH username for remote iOS submission").option("--ssh-key <path>","Path to private SSH key for remote iOS submission").option("--credential-id <id>","Service credential ID to use when multiple submission credentials exist").option("--local","Run submission on this machine (internal runner mode for iOS)").addOption(new Ne("--submit-id <id>","Internal submission ID").hideHelp()).addOption(new Ne("--project-id <id>","Internal project ID").hideHelp()).addOption(new Ne("--package-name <name>","Internal Android package name").hideHelp()).addOption(new Ne("--bundle-id <id>","Internal iOS bundle identifier").hideHelp()).option("--json-output <path>","Write submission metadata JSON to a file for CI/CD").option("--latest","Use the latest successful build for submission").option("--build-id <id>","Use a specific build ID for submission").action(async e=>{let t=M.opts();e.quiet=e.quiet||t.quiet,e.yes=e.yes||t.yes,X(q.bgCyan.black(m.cliTag("Store Submission"))),await zn(e)});M.command("login").description(`Login to ${m.name} Dashboard`).action(async()=>{X(q.bgCyan.black(m.cliTag("Login"))),await Oa()});M.command("logout").description(`Logout from ${m.name} on this machine`).action(async()=>{X(q.bgCyan.black(m.cliTag("Logout"))),await Pa()});M.command("link").description(`Link local directory to a ${m.name} Project`).action(async()=>{X(q.bgCyan.black(m.cliTag("Link Project"))),await Ca()});M.command("me").description("Display currently logged in user details").action(async()=>{await tl()});M.command("init").description(`Create a new ${m.name} Project`).action(async()=>{X(q.bgCyan.black(m.cliTag("Init Project"))),await Ta()});M.command("env").description("Manage Environment Variables").argument("<action>","Action to perform: set, list, pull, download, or export").argument("[args...]","Key=Value pairs for set action").option("-e, --environment <name>","Environment to pull/download","development").option("-o, --out <file>","Output file for pull/download",".env.local").option("--overwrite","Overwrite output file if it already exists").action(async(e,t,n)=>{X(q.bgCyan.black(m.cliTag("Env Manager"))),await Na(e,t,n)});M.command("start").description("Start the development server (Metro)").option("-p, --build-profile <name>","Build profile (e.g. development, staging)","development").option("--tunnel","Use ngrok tunnel").option("--lan","Use LAN IP").option("--localhost","Use localhost").option("-c, --clear","Clear Metro cache").option("--port <number>","Port to listen on").option("--ios","Start on iOS").option("--android","Start on Android").option("--web","Start on Web").action(async e=>{X(q.bgCyan.black(m.cliTag("Dev Server"))),await il(e)});var Pn=M.command("push").description("Configure and send provider-direct APNs/FCM notifications");Pn.command("setup").description("Install and wire a working default push experience").option("--name <name>","Push app display name").option("--ios-bundle <id>","iOS bundle identifier").option("--android-package <name>","Android package name").option("-e, --environment <name>","development, preview, or production").option("--google-services-file <path>","Android google-services.json path").option("--skip-install","Generate setup without installing SDK dependencies").action(vo);Pn.command("init").description("Create only the server-side push app (advanced)").option("--name <name>","Push app display name").option("--ios-bundle <id>","iOS bundle identifier").option("--android-package <name>","Android package name").option("-e, --environment <name>","development, preview, or production","production").option("--google-services-file <path>","Expo Android google-services.json path").action($o);var ud=Pn.command("credentials").description("Configure provider credentials");ud.command("apns").description("Configure an Apple APNs .p8 authentication key").requiredOption("--file <path>","APNs .p8 file").requiredOption("--team-id <id>","Apple Developer team ID").requiredOption("--key-id <id>","APNs key ID").option("--bundle-id <id>","iOS bundle identifier").option("--app <id>","MACH Push app ID").option("-e, --environment <name>","development, preview, or production").action(e=>Vi("apns",e));ud.command("fcm").description("Configure a Firebase service-account JSON file").requiredOption("--file <path>","Firebase service-account JSON").option("--app <id>","MACH Push app ID").option("-e, --environment <name>","Deprecated; accepted for compatibility because FCM credentials are package-wide").action(e=>Vi("fcm",e));Pn.command("send").description("Queue one transient push notification").requiredOption("--title <text>","Notification title").requiredOption("--body <text>","Notification body").option("--app <id>","MACH Push app ID").option("-e, --environment <name>","development, preview, or production").option("--token <token>","MACH push token; repeatable",On,[]).option("--user <id>","Application user ID; repeatable",On,[]).option("--all","Send to all active devices").option("--platform <platform>","Limit --all to ios or android").option("--data <json>","String-to-string custom data JSON").option("--sound <name>","Provider sound name").option("--badge <number>","iOS badge count").option("--ttl <seconds>","Provider time-to-live").option("--collapse-key <key>","Provider collapse key").option("--android-channel-id <id>","Android notification channel").action(Ro);Pn.command("status").description("Show aggregate push delivery counters").option("--days <number>","Statistics range, 1-90","30").action(Oo);M.command("config").description("Show resolved configuration for a profile").option("-p, --profile <name>","Build profile to resolve","development").option("--json","Output as JSON").action(async e=>{await rl(e)});var pd=M.command("version").description("Show or seed DB-owned native version counters"),fd=e=>e.requiredOption("--platform <os>","Target platform: ios or android").option("-p, --profile <name>","Build profile used to resolve package/bundle scope","production").option("--scope <value>","Counter scope override, usually package name or bundle identifier").option("--package <name>","Android package override").option("--bundle-id <id>","iOS bundle identifier override").option("--json","Print JSON output");fd(pd.command("show").description("Show the current native version counter")).action(async e=>{X(q.bgCyan.black(m.cliTag("Version Counter"))),await so("show",e)});fd(pd.command("seed").description("Seed the native version counter for an existing app").argument("[value]","Latest already-used value; the next build uses value + 1").option("--value <number>","Latest already-used value; the next build uses value + 1").option("--force","Allow lowering an existing counter")).action(async(e,t)=>{X(q.bgCyan.black(m.cliTag("Version Counter"))),await so("seed",{...t,value:t.value??e})});var md=M.command("deeplink").description("Configure and verify app links, universal links, and URI schemes");md.command("setup").description("Generate deep link config, hosted association files, and Expo plugin support").option("--domain <domain>","Associated domain, e.g. app.example.com").option("--base-url <url>","Base URL, e.g. https://app.example.com").option("-p, --profile <name>","Profile used for build/submit overrides").option("--platform <platform>","ios, android, or all").option("--framework <framework>","expo or react-native").option("--scheme <scheme>","URI scheme, e.g. myapp").option("--ios-bundle-id <id>","iOS bundle identifier").option("--android-package <name>","Android package name").option("--apple-team-id <id>","Apple Developer Team ID").option("--app-store-id <id>","App Store app ID for Smart App Banner").option("--android-fingerprint <sha256>","Android SHA256 signing certificate fingerprint; repeatable",On,[]).option("--output <dir>","Directory for hosted files, e.g. public or deep-links").option("--install-plugin","Install @radhya/mach locally so Expo can use the packaged config plugin").option("--no-install-plugin","Do not install @radhya/mach for Expo projects; use the local plugin fallback if the package is missing").option("-y, --yes","Automatically answer yes to prompts",!1).action(async e=>{let t=M.opts();e.yes=e.yes||t.yes,X(q.bgCyan.black(m.cliTag("Deep Links"))),await vl(e)});md.command("verify").description("Verify local and optionally live deep link configuration").option("-p, --profile <name>","Profile used for build/submit overrides").option("--live","Check hosted files over HTTPS").option("--android-device","Print Android device verification commands").action(async e=>{X(q.bgCyan.black(m.cliTag("Deep Link Verify"))),await Rl(e)});M.command("credentials").description("Unified, interactive credential management (iOS/Android)").option("-p, --profile <name>","Build profile (production, staging, development)").option("--force","Force recreate certificates (nuke existing on Apple Portal)",!1).action(async e=>{let{credentialsMainCommand:t}=await import("./credentials-BMX37TIA.js");await t(e)});M.command("credentials:setup").description("Automated credential provisioning (iOS/Android) [Legacy]").requiredOption("--platform <os>","Platform: ios or android").option("--profile <name>","Build profile (production, staging, development)").option("--bundle-id <id>","Bundle ID / Package Name (optional, auto-detected)").option("--team-id <id>","Apple Team ID (iOS only)").option("--key-alias <alias>","Android keystore alias (optional, auto-generated)").option("--aws-profile <name>","AWS Credentials Profile (for S3 storage)").option("--force","Force recreate certificates (nuke existing on Apple Portal)",!1).action(async e=>{X(q.bgCyan.black(m.cliTag("Credentials Setup"))),await Ht(e),cd(q.green("Done!"))});M.command("credentials:service").description("Upload Service Credentials (ASC API Key / Google Service JSON) [Legacy]").requiredOption("--platform <os>","Platform: ios or android").option("--file <path>","Path to credential file (.p8 or .json)").option("--issuer-id <id>","ASC API Key Issuer ID (iOS only)").option("--key-id <id>","ASC API Key ID (iOS only)").option("--bundle-id <id>","Bundle identifier / Android package name to attach this service credential to").option("--package-name <name>","Android package name to attach this service credential to").option("-p, --profile <name>","Build profile to resolve package/bundle identifier from config").action(async e=>{X(q.bgCyan.black(m.cliTag("Service Credentials"))),await wo(e),cd(q.green("Done!"))});var uo=M.command("device").description("Manage registered iOS test devices");uo.command("register").description("Register a connected iOS device or enter UDID manually").option("--udid <udid>","Device UDID (skip auto-detection)").option("--name <name>","Device name").option("--team-id <id>","Apple Developer Team ID for this device").action(async e=>{await _i("register",e)});uo.command("list").description("List all registered devices").option("--team-id <id>","Filter by Apple Developer Team ID").action(async e=>{await _i("list",e)});uo.command("remove").description("Remove a registered device").option("--udid <udid>","Device UDID to remove").option("--team-id <id>","Apple Developer Team ID for this device").action(async e=>{await _i("remove",e)});M.command("audit").description("Run automated security audit on the project or APK").option("--apk <path>","Path to APK file (runs APK diagnostics like 16KB alignment)").option("--json","Output results as JSON (for CI/CD)").option("--fix","Auto-apply fixes where possible").option("--category <name>","Run only a specific check category (e.g. 16kb, permissions, secrets)").option("--severity <level>","Minimum severity to display (critical, high, medium, low, info)").option("--prebuild","Run expo prebuild for deeper manifest/plist analysis").action(async e=>{X(q.bgCyan.black(m.cliTag(e.apk?"APK Audit":"Security Audit"))),await ld(e)});var ug=new Set(["login","logout","agent"]);M.hook("preAction",(e,t)=>{let n=t.name(),i=t.opts?.()||{};n==="maestro"&&(i.local||i.localRunner)||t.parent?.name()!=="deeplink"&&(ug.has(n)||bt())});M.on("command:*",()=>{console.error(`Invalid command: %s
1780
1826
  See --help for a list of available commands.`,M.args.join(" ")),process.exit(1)});process.argv.slice(2).length||M.help();M.parse(process.argv);