@radhya/mach 2.1.2 → 2.1.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +4 -2
- package/dist/index.js +457 -212
- package/docs/frameworks/expo.md +4 -0
- package/docs/frameworks/react-native.md +4 -0
- package/package.json +1 -1
package/dist/index.js
CHANGED
|
@@ -1,12 +1,12 @@
|
|
|
1
1
|
#!/usr/bin/env node
|
|
2
|
-
import{a as
|
|
3
|
-
`;s+=`Region: ${
|
|
4
|
-
`,s+=`S3 Website URL: ${
|
|
5
|
-
|
|
6
|
-
CloudFront ID: ${
|
|
7
|
-
CloudFront URL: ${
|
|
8
|
-
${s.map(
|
|
9
|
-
`)}`,"Sitemap Summary"),
|
|
2
|
+
import{a as cn,b as Ze,c as Tn,d as Yt,e as Ie,f as Ve,g as un,h as Xt,i as pn,j as $s,l as Ln}from"./chunk-DX4FCPCX.js";import{a as m,b as ws,c as Ue,d as vs,e as dn,f as xt,g as yt,h as D}from"./chunk-S64YFTRR.js";import{Command as $b,Option as st}from"commander";import{configDotenv as _b}from"dotenv";import{intro as he,outro as qc}from"@clack/prompts";import fe from"chalk";import{text as _s,confirm as iu,spinner as ru,isCancel as Mr,cancel as Mn,note as ou,outro as su}from"@clack/prompts";import Un from"chalk";async function Ps(){try{let e=await _s({message:"Enter Bucket Name:",placeholder:"e.g. my-app-dev",validate(r){if(r.length===0)return"Bucket name is required"}});Mr(e)&&(Mn("Operation cancelled."),process.exit(0));let t=await _s({message:"Enter Region:",initialValue:"ap-south-1"});Mr(t)&&(Mn("Operation cancelled."),process.exit(0));let n=await iu({message:"Do you want to create a CloudFront Distribution for this bucket?",initialValue:!0});Mr(n)&&(Mn("Operation cancelled."),process.exit(0));let i=ru();i.start("Setting up hosting infrastructure...");try{let r=await D.post("/hosting/setup",{bucketName:e,region:t,createCloudFront:n});if(r.data.status!=="success")throw new Error(r.data.message||"Hosting setup failed");i.stop("Hosting setup complete!");let o=r.data,s=`Bucket Name: ${Un.cyan(o.bucketName)}
|
|
3
|
+
`;s+=`Region: ${Un.cyan(o.region)}
|
|
4
|
+
`,s+=`S3 Website URL: ${Un.blue(o.s3WebsiteUrl)}`,o.cloudFrontId&&(s+=`
|
|
5
|
+
|
|
6
|
+
CloudFront ID: ${Un.cyan(o.cloudFrontId)}`,s+=`
|
|
7
|
+
CloudFront URL: ${Un.blue(o.cloudFrontUrl)}`),ou(s,"Setup Complete!"),su("You are all set!")}catch(r){i.stop("Setup failed"),Mn(`Error: ${r.response?.data?.message||r.message}`)}}catch(e){Mn(`An unexpected error occurred: ${e.message}`)}}import{readdir as au,writeFile as lu,access as du,mkdir as cu}from"fs/promises";import{join as Rs}from"path";import{spinner as uu,text as Cs,isCancel as Os,cancel as Ur,note as pu,outro as fu}from"@clack/prompts";import mu from"chalk";async function gu(){let e=["./app","./src/app"];for(let t of e)try{return await du(t),t}catch{}return null}async function Ds(e){try{let n=await gu()||"./app",i=await Cs({message:"Enter path to your app directory:",placeholder:n,initialValue:n,validate(c){if(c.length===0)return"Path is required"}});Os(i)&&(Ur("Operation cancelled."),process.exit(0));let r=await Cs({message:"Enter your website base URL:",placeholder:"https://example.com",validate(c){if(c.length===0)return"Base URL is required";if(!c.startsWith("http"))return"URL must start with http:// or https://"}});Os(r)&&(Ur("Operation cancelled."),process.exit(0));let o=uu();o.start("Scanning app directory for routes...");let s=await ks(i);o.stop(`Found ${s.length} routes`);let a=hu(s,r),l=e.output||"./public/sitemap.xml";o.start(`Writing sitemap to ${l}...`);let d=l.substring(0,l.lastIndexOf("/"));if(d)try{await cu(d,{recursive:!0})}catch{}await lu(l,a,"utf-8"),o.stop("Sitemap generated successfully!"),pu(`Routes included:
|
|
8
|
+
${s.map(c=>` \u2022 ${c.path}`).join(`
|
|
9
|
+
`)}`,"Sitemap Summary"),fu(`Sitemap saved to ${mu.cyan(l)}`)}catch(t){Ur(`An error occurred: ${t.message}`)}}async function ks(e,t=""){let n=[];try{let i=await au(e,{withFileTypes:!0});for(let r of i){let o=Rs(e,r.name);if(!(r.name.startsWith("_")||r.name.startsWith("."))){if(r.isDirectory()){let s=await ks(o,Rs(t,r.name));n.push(...s)}else if(r.isFile()){if(r.name==="index.tsx"||r.name==="index.ts"||r.name==="index.jsx"||r.name==="index.js"){let s=t===""?"/":`/${t}`;n.push({path:s,file:o})}else if(r.name.match(/\.(tsx|ts|jsx|js)$/)&&!r.name.includes("_layout")&&!r.name.includes("+")){let s=r.name.replace(/\.(tsx|ts|jsx|js)$/,""),a=`/${t}/${s}`.replace(/\/+/g,"/");n.push({path:a,file:o})}}}}}catch(i){throw new Error(`Failed to scan directory ${e}: ${i.message}`)}return n}function hu(e,t){let n=new Date().toISOString().split("T")[0];return`<?xml version="1.0" encoding="UTF-8"?>
|
|
10
10
|
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
|
|
11
11
|
${e.map(r=>{let o=r.path;return o=o.replace(/\/\([^)]+\)/g,""),o=o.replace(/\/\[.*?\]/g,"/:id"),o=o.replace(/\/+/g,"/"),o===""&&(o="/"),` <url>
|
|
12
12
|
<loc>${t}${o}</loc>
|
|
@@ -15,7 +15,7 @@ ${e.map(r=>{let o=r.path;return o=o.replace(/\/\([^)]+\)/g,""),o=o.replace(/\/\[
|
|
|
15
15
|
<priority>0.8</priority>
|
|
16
16
|
</url>`}).join(`
|
|
17
17
|
`)}
|
|
18
|
-
</urlset>`}import{randomUUID as
|
|
18
|
+
</urlset>`}import{randomUUID as Im}from"crypto";import _e from"path";import Gi from"axios";import wm from"os";import{spinner as Co,select as il,confirm as rl,isCancel as zi,cancel as ol,log as C}from"@clack/prompts";import O from"chalk";import be from"fs";import{execSync as sl}from"child_process";import al from"adm-zip";import{spinner as Pu,log as Di}from"@clack/prompts";import Fs from"chalk";import Bs from"fs";import js from"path";var Ns=`#!/bin/bash
|
|
19
19
|
# --- Mach Cloud Build Script (Android) ---
|
|
20
20
|
# All S3 operations use presigned URLs via curl \u2014 zero AWS credentials on instance.
|
|
21
21
|
BUILD_ID="{{BUILD_ID}}"
|
|
@@ -229,7 +229,7 @@ unzip -q -o /tmp/source.zip
|
|
|
229
229
|
rm -f /tmp/source.zip
|
|
230
230
|
|
|
231
231
|
SOURCE_HAS_ANDROID_PROJECT=false
|
|
232
|
-
if [ -f "/home/ubuntu/build/android/app/build.gradle" ]; then
|
|
232
|
+
if [ -f "/home/ubuntu/build/android/app/build.gradle" ] || [ -f "/home/ubuntu/build/android/app/build.gradle.kts" ]; then
|
|
233
233
|
SOURCE_HAS_ANDROID_PROJECT=true
|
|
234
234
|
fi
|
|
235
235
|
|
|
@@ -262,6 +262,133 @@ clear_js_transform_caches() {
|
|
|
262
262
|
rm -rf /root/.cache/metro /root/.cache/react-native-packager /home/ubuntu/.cache/metro .expo node_modules/.cache/metro 2>/dev/null || true
|
|
263
263
|
}
|
|
264
264
|
|
|
265
|
+
read_aab_version_code() {
|
|
266
|
+
python3 - "$1" <<'PY'
|
|
267
|
+
import sys
|
|
268
|
+
import zipfile
|
|
269
|
+
|
|
270
|
+
def read_varint(data, offset):
|
|
271
|
+
value = 0
|
|
272
|
+
shift = 0
|
|
273
|
+
while offset < len(data) and shift <= 63:
|
|
274
|
+
byte = data[offset]
|
|
275
|
+
offset += 1
|
|
276
|
+
value |= (byte & 0x7f) << shift
|
|
277
|
+
if byte & 0x80 == 0:
|
|
278
|
+
return value, offset
|
|
279
|
+
shift += 7
|
|
280
|
+
raise ValueError("malformed protobuf varint")
|
|
281
|
+
|
|
282
|
+
def fields(data):
|
|
283
|
+
result = []
|
|
284
|
+
offset = 0
|
|
285
|
+
while offset < len(data):
|
|
286
|
+
key, offset = read_varint(data, offset)
|
|
287
|
+
number = key >> 3
|
|
288
|
+
wire = key & 7
|
|
289
|
+
if number < 1:
|
|
290
|
+
raise ValueError("malformed protobuf field")
|
|
291
|
+
if wire == 0:
|
|
292
|
+
value, offset = read_varint(data, offset)
|
|
293
|
+
elif wire == 1:
|
|
294
|
+
value = data[offset:offset + 8]
|
|
295
|
+
offset += 8
|
|
296
|
+
elif wire == 2:
|
|
297
|
+
length, offset = read_varint(data, offset)
|
|
298
|
+
value = data[offset:offset + length]
|
|
299
|
+
if len(value) != length:
|
|
300
|
+
raise ValueError("truncated protobuf field")
|
|
301
|
+
offset += length
|
|
302
|
+
elif wire == 5:
|
|
303
|
+
value = data[offset:offset + 4]
|
|
304
|
+
offset += 4
|
|
305
|
+
else:
|
|
306
|
+
raise ValueError("unsupported protobuf wire type")
|
|
307
|
+
result.append((number, wire, value))
|
|
308
|
+
return result
|
|
309
|
+
|
|
310
|
+
def first(items, number, wire):
|
|
311
|
+
return next((value for field, kind, value in items if field == number and kind == wire), None)
|
|
312
|
+
|
|
313
|
+
with zipfile.ZipFile(sys.argv[1]) as bundle:
|
|
314
|
+
manifest = bundle.read("base/manifest/AndroidManifest.xml")
|
|
315
|
+
|
|
316
|
+
root = first(fields(manifest), 1, 2)
|
|
317
|
+
if root is None:
|
|
318
|
+
raise ValueError("AAB base manifest has no root XML element")
|
|
319
|
+
|
|
320
|
+
attribute = None
|
|
321
|
+
for number, wire, value in fields(root):
|
|
322
|
+
if number != 4 or wire != 2:
|
|
323
|
+
continue
|
|
324
|
+
candidate = fields(value)
|
|
325
|
+
name = first(candidate, 2, 2)
|
|
326
|
+
if name == b"versionCode":
|
|
327
|
+
attribute = candidate
|
|
328
|
+
break
|
|
329
|
+
if attribute is None:
|
|
330
|
+
raise ValueError("AAB base manifest has no android:versionCode")
|
|
331
|
+
|
|
332
|
+
raw = first(attribute, 3, 2)
|
|
333
|
+
if raw is not None:
|
|
334
|
+
text = raw.decode("utf-8").strip()
|
|
335
|
+
if text.isdigit():
|
|
336
|
+
print(text)
|
|
337
|
+
sys.exit(0)
|
|
338
|
+
|
|
339
|
+
# aapt2 Resources.proto: XmlAttribute.compiled_item = 6,
|
|
340
|
+
# Item.prim = 7, Primitive.int_decimal_value/int_hexadecimal_value = 6/7.
|
|
341
|
+
item = first(attribute, 6, 2)
|
|
342
|
+
primitive = first(fields(item), 7, 2) if item is not None else None
|
|
343
|
+
compiled = None
|
|
344
|
+
if primitive is not None:
|
|
345
|
+
for number, wire, value in fields(primitive):
|
|
346
|
+
if number in (6, 7) and wire == 0:
|
|
347
|
+
compiled = value
|
|
348
|
+
break
|
|
349
|
+
if compiled is None:
|
|
350
|
+
raise ValueError("AAB versionCode is not an integer")
|
|
351
|
+
print(compiled)
|
|
352
|
+
PY
|
|
353
|
+
}
|
|
354
|
+
|
|
355
|
+
validate_android_artifact_version() {
|
|
356
|
+
local ARTIFACT="$1"
|
|
357
|
+
local EXPECTED="$2"
|
|
358
|
+
local ACTUAL=""
|
|
359
|
+
case "$ARTIFACT" in
|
|
360
|
+
*.apk)
|
|
361
|
+
if command -v apkanalyzer >/dev/null 2>&1; then
|
|
362
|
+
ACTUAL=$(apkanalyzer manifest version-code "$ARTIFACT" 2>/dev/null | tr -d '[:space:]')
|
|
363
|
+
fi
|
|
364
|
+
if ! printf '%s' "$ACTUAL" | grep -Eq '^[0-9]+$'; then
|
|
365
|
+
local AAPT_TOOL=""
|
|
366
|
+
AAPT_TOOL=$(command -v aapt2 2>/dev/null || command -v aapt 2>/dev/null || true)
|
|
367
|
+
if [ -n "$AAPT_TOOL" ]; then
|
|
368
|
+
ACTUAL=$("$AAPT_TOOL" dump badging "$ARTIFACT" 2>/dev/null | sed -n "s/^package:.*versionCode='\\([0-9][0-9]*\\)'.*/\\1/p" | head -n 1)
|
|
369
|
+
fi
|
|
370
|
+
fi
|
|
371
|
+
;;
|
|
372
|
+
*.aab)
|
|
373
|
+
ACTUAL=$(read_aab_version_code "$ARTIFACT" 2>/dev/null || true)
|
|
374
|
+
;;
|
|
375
|
+
*)
|
|
376
|
+
echo "[VERSIONING] Unsupported Android artifact: $ARTIFACT"
|
|
377
|
+
return 1
|
|
378
|
+
;;
|
|
379
|
+
esac
|
|
380
|
+
|
|
381
|
+
if ! printf '%s' "$ACTUAL" | grep -Eq '^[0-9]+$'; then
|
|
382
|
+
echo "[VERSIONING] Could not inspect packaged versionCode in $ARTIFACT"
|
|
383
|
+
return 1
|
|
384
|
+
fi
|
|
385
|
+
if [ "$ACTUAL" != "$EXPECTED" ]; then
|
|
386
|
+
echo "[VERSIONING] Android versionCode mismatch in $ARTIFACT: expected $EXPECTED, packaged $ACTUAL"
|
|
387
|
+
return 1
|
|
388
|
+
fi
|
|
389
|
+
echo "[ANDROID VALID] $(basename "$ARTIFACT") versionCode $ACTUAL matches MACH assignment"
|
|
390
|
+
}
|
|
391
|
+
|
|
265
392
|
echo "Cache restore complete."
|
|
266
393
|
|
|
267
394
|
# CodeArtifact Logic \u2014 use env var if already set (pass as project secret)
|
|
@@ -307,6 +434,11 @@ clear_js_transform_caches
|
|
|
307
434
|
# --- Injected Version Code (Auto-versioning) ---
|
|
308
435
|
# Apply before Expo prebuild so generated Gradle files receive the new versionCode.
|
|
309
436
|
if [ ! -z "$ANDROID_VERSION_CODE" ]; then
|
|
437
|
+
if ! printf '%s' "$ANDROID_VERSION_CODE" | grep -Eq '^[0-9]+$' || [ "$ANDROID_VERSION_CODE" -lt 1 ] || [ "$ANDROID_VERSION_CODE" -gt 2100000000 ]; then
|
|
438
|
+
echo "[VERSIONING] Invalid ANDROID_VERSION_CODE: $ANDROID_VERSION_CODE"
|
|
439
|
+
report_status "failed" "Invalid Android versionCode assignment"
|
|
440
|
+
exit 1
|
|
441
|
+
fi
|
|
310
442
|
echo "[VERSIONING] Applying injected versionCode: $ANDROID_VERSION_CODE"
|
|
311
443
|
{{FRAMEWORK_ANDROID_VERSION_CODE}}
|
|
312
444
|
fi
|
|
@@ -327,14 +459,6 @@ fi
|
|
|
327
459
|
|
|
328
460
|
chmod +x $GRADLEW
|
|
329
461
|
|
|
330
|
-
if [ ! -z "$ANDROID_VERSION_CODE" ]; then
|
|
331
|
-
if [ -f "app/build.gradle" ]; then
|
|
332
|
-
node -e "const fs=require('fs');const p='app/build.gradle';let s=fs.readFileSync(p,'utf8');s=s.replace(/versionCode\\s+\\d+/,'versionCode '+process.env.ANDROID_VERSION_CODE);fs.writeFileSync(p,s);console.log('[VERSIONING] app/build.gradle versionCode updated');"
|
|
333
|
-
elif [ -f "android/app/build.gradle" ]; then
|
|
334
|
-
node -e "const fs=require('fs');const p='android/app/build.gradle';let s=fs.readFileSync(p,'utf8');s=s.replace(/versionCode\\s+\\d+/,'versionCode '+process.env.ANDROID_VERSION_CODE);fs.writeFileSync(p,s);console.log('[VERSIONING] android/app/build.gradle versionCode updated');"
|
|
335
|
-
fi
|
|
336
|
-
fi
|
|
337
|
-
|
|
338
462
|
# Optimization
|
|
339
463
|
if [ -f "gradle.properties" ]; then
|
|
340
464
|
sed -i '/^org.gradle.jvmargs/d' gradle.properties
|
|
@@ -410,6 +534,38 @@ if [ $BUILD_EXIT_CODE -eq 0 ]; then
|
|
|
410
534
|
APK_FILE=$(find . -name "*.apk" | head -n 1)
|
|
411
535
|
AAB_FILE=$(find . -name "*.aab" | head -n 1)
|
|
412
536
|
|
|
537
|
+
# Validate the values inside the final packaged manifests. The injected
|
|
538
|
+
# Gradle property supports Groovy, Kotlin DSL and custom version expressions;
|
|
539
|
+
# this exact check prevents a custom variant/plugin from silently overriding it.
|
|
540
|
+
if [ ! -z "$ANDROID_VERSION_CODE" ]; then
|
|
541
|
+
ARTIFACT_COUNT=0
|
|
542
|
+
if [ ! -z "$APK_FILE" ]; then
|
|
543
|
+
ARTIFACT_COUNT=$((ARTIFACT_COUNT + 1))
|
|
544
|
+
if ! validate_android_artifact_version "$APK_FILE" "$ANDROID_VERSION_CODE"; then
|
|
545
|
+
upload_logs
|
|
546
|
+
report_status "failed" "Packaged APK versionCode did not match MACH assignment"
|
|
547
|
+
mark_done
|
|
548
|
+
exit 1
|
|
549
|
+
fi
|
|
550
|
+
fi
|
|
551
|
+
if [ ! -z "$AAB_FILE" ]; then
|
|
552
|
+
ARTIFACT_COUNT=$((ARTIFACT_COUNT + 1))
|
|
553
|
+
if ! validate_android_artifact_version "$AAB_FILE" "$ANDROID_VERSION_CODE"; then
|
|
554
|
+
upload_logs
|
|
555
|
+
report_status "failed" "Packaged AAB versionCode did not match MACH assignment"
|
|
556
|
+
mark_done
|
|
557
|
+
exit 1
|
|
558
|
+
fi
|
|
559
|
+
fi
|
|
560
|
+
if [ "$ARTIFACT_COUNT" -eq 0 ]; then
|
|
561
|
+
echo "[VERSIONING] Gradle produced no APK or AAB to validate."
|
|
562
|
+
upload_logs
|
|
563
|
+
report_status "failed" "No Android artifact available for versionCode validation"
|
|
564
|
+
mark_done
|
|
565
|
+
exit 1
|
|
566
|
+
fi
|
|
567
|
+
fi
|
|
568
|
+
|
|
413
569
|
# Renaming logic for clarity
|
|
414
570
|
CLEAN_NAME=$(echo "\${MACH_APP_NAME}-\${MACH_BUILD_PROFILE}" | sed 's/[^a-zA-Z0-9-]/_/g')
|
|
415
571
|
BUILD_ID_SHORT=$(echo "\${BUILD_ID}" | cut -c1-8)
|
|
@@ -533,7 +689,7 @@ for pid in "\${cache_pids[@]}"; do wait "$pid" || true; done
|
|
|
533
689
|
echo "Build orchestrator finished. Auto-terminating instance in 5 seconds..."
|
|
534
690
|
sleep 5
|
|
535
691
|
sudo shutdown -h now
|
|
536
|
-
`;import
|
|
692
|
+
`;import Iu from"crypto";import{log as Ge}from"@clack/prompts";import ze from"chalk";import{execSync as yu}from"child_process";import Ke from"fs";import fn from"path";var xs={id:"expo",displayName:"Expo",applyLocalProcessEnv:e=>{e.developmentClient?(Ge.info(ze.blue("\u2139\uFE0F Configuring Expo build to INCLUDE expo-dev-client (Development Client mode)...")),delete process.env.EXPO_NO_DEV_CLIENT,delete process.env.EXPO_AUTOLINKING_EXCLUDE):(Ge.info(ze.blue("\u2139\uFE0F Configuring Expo build to EXCLUDE expo-dev-client (Production/Staging mode)...")),process.env.EXPO_NO_DEV_CLIENT="1",process.env.EXPO_AUTOLINKING_EXCLUDE="expo-dev-client")},localAndroidEnv:(e,t)=>({EXPO_NO_DOTENV:"1",MACH_FRAMEWORK:"expo",MACH_BUILD_PROFILE:t}),remoteEnvSetupScript:()=>`
|
|
537
693
|
export MACH_FRAMEWORK="expo"
|
|
538
694
|
echo "[ENV] MACH_FRAMEWORK=$MACH_FRAMEWORK"
|
|
539
695
|
export EXPO_NO_DOTENV="\${EXPO_NO_DOTENV:-1}"
|
|
@@ -585,26 +741,26 @@ fi
|
|
|
585
741
|
echo "expo.enableHermes=true" >> gradle.properties
|
|
586
742
|
`,androidRemoteReleaseGradlePropertiesScript:()=>`
|
|
587
743
|
echo "expo.enableProguardInReleaseBuilds=true" >> gradle.properties
|
|
588
|
-
`,prepareLocalProject:async e=>{let{platform:t,options:n,cacheMeta:i,cacheMetaDir:r,currentBuildEnv:o,reportStep:s,loggedRun:
|
|
744
|
+
`,prepareLocalProject:async e=>{let{platform:t,options:n,cacheMeta:i,cacheMetaDir:r,currentBuildEnv:o,reportStep:s,loggedRun:a,configureXcodeNodeBinary:l,podsFingerprint:d,writeCacheMeta:c}=e,u=n.iosBundleIdentifier||"",f=n.name||"",p=fn.join(process.cwd(),"app.json"),y=null;Ge.info(ze.blue(`Running Expo prebuild for ${t}...`));try{if(Ke.existsSync(p)){y=Ke.readFileSync(p,"utf-8");let h=JSON.parse(y);h.expo=h.expo||{},f||(f=h.expo.name||""),t==="ios"&&!u&&(u=h.expo?.ios?.bundleIdentifier||""),n.name&&(h.expo.name=n.name),n.scheme&&(h.expo.scheme=n.scheme),t==="ios"&&n.iosBundleIdentifier?(h.expo.ios=h.expo.ios||{},h.expo.ios.bundleIdentifier=n.iosBundleIdentifier):t==="android"&&n.androidPackage&&(h.expo.android=h.expo.android||{},h.expo.android.package=n.androidPackage),Ke.writeFileSync(p,JSON.stringify(h,null,2))}let g=["exec","--","expo","prebuild","--platform",t,"--no-install"];if(await s("prebuild"),await a("npm",g,process.cwd(),o()),t!=="ios"||!Ke.existsSync("ios"))return{appName:f,bundleId:u};await s("pods"),Ge.info(ze.blue("Running pod install..."));try{let h=fn.resolve("ios"),S=fn.join(h,"Podfile");if(!Ke.existsSync(S))throw new Error("ios/Podfile not found. Skipping pod install.");let b=o();l(h,b);let _=Ke.readFileSync(S,"utf-8"),w=n.iosDeploymentTarget||"13.4";if(!n.developmentClient&&(Ge.info(ze.blue("\u2139\uFE0F Patching Podfile to EXCLUDE expo-dev-client...")),_.includes("use_expo_modules!")&&!_.includes("exclude:"))){let R=/use_expo_modules!(\s*)$/m;R.test(_)?_=_.replace(R,'use_expo_modules!(exclude: ["expo-dev-client"])$1'):_=_.replace("use_expo_modules!",'use_expo_modules!(exclude: ["expo-dev-client"])')}let T=`
|
|
589
745
|
installer.generated_projects.each do |project|
|
|
590
746
|
project.targets.each do |target|
|
|
591
747
|
target.build_configurations.each do |config|
|
|
592
|
-
config.build_settings['IPHONEOS_DEPLOYMENT_TARGET'] = '${
|
|
748
|
+
config.build_settings['IPHONEOS_DEPLOYMENT_TARGET'] = '${w}'
|
|
593
749
|
end
|
|
594
750
|
end
|
|
595
751
|
end
|
|
596
752
|
installer.pods_project.targets.each do |target|
|
|
597
753
|
target.build_configurations.each do |config|
|
|
598
|
-
config.build_settings['IPHONEOS_DEPLOYMENT_TARGET'] = '${
|
|
754
|
+
config.build_settings['IPHONEOS_DEPLOYMENT_TARGET'] = '${w}'
|
|
599
755
|
end
|
|
600
756
|
end
|
|
601
|
-
`,
|
|
602
|
-
${
|
|
757
|
+
`,B=/post_install\s+do\s+\|installer\|/;if(B.test(_))Ge.info(ze.dim(`Injecting deployment target (${w}) into existing post_install hook...`)),_=_.replace(B,`post_install do |installer|
|
|
758
|
+
${T}`),Ke.writeFileSync(S,_);else{Ge.info(ze.dim(`Appending new post_install hook for deployment target (${w})...`));let R=`
|
|
603
759
|
post_install do |installer|
|
|
604
|
-
${
|
|
760
|
+
${T}
|
|
605
761
|
end
|
|
606
|
-
`;Ke.appendFileSync(
|
|
607
|
-
`),Ge.info(
|
|
762
|
+
`;Ke.appendFileSync(S,R)}let X="/opt/homebrew/bin/pod",U=Ke.existsSync(X)?X:"pod",K=d(h);Ke.existsSync(fn.join(h,"Pods"))&&i.pods&&i.pods!==K&&(await e.reportLog(`[CACHE] Podfile/Podfile.lock changed \u2014 wiping ios/Pods
|
|
763
|
+
`),Ge.info(ze.dim("Podfile fingerprint changed \u2014 clearing Pods for clean install...")),Ke.rmSync(fn.join(h,"Pods"),{recursive:!0,force:!0})),Ge.info(ze.dim(`Using pod command: ${U} in ${h}`)),await a(U,["install"],h,b),i.pods=K,c(r,i)}catch(h){let S=h.message||"Unknown error";Ge.warn(ze.yellow(`Native "pod" command failed: ${S}`)),Ge.info(ze.dim("Falling back to npm exec pod-install..."));let b=o();l(fn.resolve("ios"),b),Ge.info(ze.magenta(`${m.nameUpper}_DEBUG: Executing pod-install override via npx --yes pod-install@latest`)),await a("npx",["--yes","pod-install@latest","ios"],process.cwd(),b)}if(Ke.existsSync("ios/Pods")){Ge.info(ze.dim("Disabling signing for Pod targets to prevent conflicts..."));try{yu(`find ios/Pods -name "project.pbxproj" -exec sed -i '' 's/buildSettings = {/buildSettings = { CODE_SIGNING_ALLOWED = NO; CODE_SIGNING_REQUIRED = NO; PROVISIONING_PROFILE_SPECIFIER = ""; EXPANDED_CODE_SIGN_IDENTITY = "";/g' {} +`,{stdio:"ignore"})}catch{}}return{appName:f,bundleId:u}}finally{y&&Ke.writeFileSync(p,y)}}};import{log as Lt}from"@clack/prompts";import Mt from"chalk";import wt from"fs";import Fn from"path";import{spawnSync as bu}from"child_process";import It from"fs";import Tt from"path";var Ts=(e,t)=>Tt.join(e,"node_modules",".bin",process.platform==="win32"?`${t}.cmd`:t),Su=e=>{try{return JSON.parse(It.readFileSync(Tt.join(e,"package.json"),"utf-8"))}catch{return{}}};function Zt(e,t){let n=Su(e);return!!(n.dependencies?.[t]||n.devDependencies?.[t])}function Fr(e,t,n,i={}){let r=`${t} ${n.join(" ")}`,o=bu(t,n,{cwd:e,stdio:"inherit",env:{...process.env,CI:process.env.CI||"1",EXPO_NO_TELEMETRY:"1",...i}});return o.error?{ok:!1,command:r,error:o.error.message}:o.status!==0?{ok:!1,command:r,error:`${t} exited with code ${o.status}`}:{ok:!0,command:r}}function Ls(e){return Fr(e,"npx",["--yes","install-expo-modules@latest"])}function Ms(e){let t=Ts(e,"expo");return It.existsSync(t)?Fr(e,t,["install","expo-updates"]):{ok:!1,command:"npx expo install expo-updates",error:"Expo Modules are not installed. Install Expo Modules first."}}function Br(e){let t=[];return It.existsSync(Tt.join(e,"ios"))&&t.push("ios"),It.existsSync(Tt.join(e,"android"))&&t.push("android"),t}function Oi(e){let t=Ts(e.cwd,"expo-updates");return It.existsSync(t)?e.platforms.map(n=>Fr(e.cwd,t,["configuration:syncnative","--platform",n,"--workflow","generic"],{MACH_OTA_RUNTIME_VERSION:e.runtimeVersion,MACH_OTA_CHANNEL:e.channel,MACH_OTA_URL:e.url})):[{ok:!1,command:"expo-updates configuration:syncnative",error:"expo-updates is not installed in this project."}]}function Us(e){let t=Tt.join(e,"android","app","src","main","AndroidManifest.xml"),n=Tt.join(e,"android","app","src","main","res","values","strings.xml"),i,r=Tt.join(e,"ios");if(It.existsSync(r)){let o=[r];for(;o.length>0&&!i;){let s=o.shift();for(let a of It.readdirSync(s,{withFileTypes:!0})){if(a.name==="Pods"||a.name==="build")continue;let l=Tt.join(s,a.name);if(a.isDirectory())o.push(l);else if(a.isFile()&&a.name==="Expo.plist"){i=l;break}}}}return{...It.existsSync(t)?{androidManifest:t}:{},...It.existsSync(n)?{androidStrings:n}:{},...i?{iosExpoPlist:i}:{}}}var Au=(e,t)=>!wt.existsSync(e)||!wt.existsSync(t)?!1:wt.readFileSync(e,"utf-8")!==wt.readFileSync(t,"utf-8"),jr={id:"react-native",displayName:"React Native",applyLocalProcessEnv:e=>{delete process.env.EXPO_NO_DEV_CLIENT,delete process.env.EXPO_AUTOLINKING_EXCLUDE,delete process.env.EXPO_NO_DOTENV},localAndroidEnv:(e,t)=>({MACH_FRAMEWORK:"react-native",MACH_BUILD_PROFILE:t}),remoteEnvSetupScript:()=>`
|
|
608
764
|
export MACH_FRAMEWORK="react-native"
|
|
609
765
|
echo "[ENV] MACH_FRAMEWORK=$MACH_FRAMEWORK"
|
|
610
766
|
unset EXPO_NO_DOTENV
|
|
@@ -635,17 +791,17 @@ fi
|
|
|
635
791
|
:
|
|
636
792
|
`,androidRemoteReleaseGradlePropertiesScript:()=>`
|
|
637
793
|
:
|
|
638
|
-
`,prepareLocalProject:async e=>{let{platform:t,cacheMeta:n,cacheMetaDir:i,currentBuildEnv:r,reportStep:o,reportLog:s,loggedRun:
|
|
639
|
-
`),
|
|
640
|
-
`),
|
|
641
|
-
`):"",
|
|
642
|
-
export MACH_APP_NAME="${
|
|
643
|
-
export MACH_BUILD_PROFILE="${
|
|
644
|
-
export MACH_ANDROID_RELEASE_ABIS="${
|
|
645
|
-
export MACH_ENV_FINGERPRINT="${
|
|
794
|
+
`,prepareLocalProject:async e=>{let{platform:t,cacheMeta:n,cacheMetaDir:i,currentBuildEnv:r,reportStep:o,reportLog:s,loggedRun:a,configureXcodeNodeBinary:l,podsFingerprint:d,writeCacheMeta:c}=e,u=r(),f=u.MACH_OTA_RUNTIME_VERSION,p=u.MACH_OTA_CHANNEL,y=u.MACH_OTA_URL;if(f&&p&&y){let v=Oi({cwd:process.cwd(),platforms:[t],runtimeVersion:f,channel:p,url:y}).find(R=>!R.ok);if(v)throw new Error(`Could not synchronize ${t} Expo Updates configuration: ${v.error||v.command}. Run \`mach ota setup --platform ${t}\` and try again.`);Lt.info(Mt.green(`\u2713 OTA runtime ${f} synchronized for ${t}`))}if(t!=="ios")return{};let g=Fn.resolve("ios"),h=Fn.join(g,"Podfile");if(!wt.existsSync(h))throw new Error("React Native iOS build requires ios/Podfile. Commit the ios directory for vanilla React Native projects.");await o("pods"),Lt.info(Mt.blue("Running React Native pod install..."));let S=r();l(g,S);let b=Fn.join(g,"Pods"),_=Fn.join(g,"Podfile.lock"),w=Fn.join(b,"Manifest.lock"),T=wt.existsSync(b),B=d(g);T&&n.reactNativePods&&n.reactNativePods!==B?(await s(`[CACHE] React Native Podfile/Podfile.lock changed - wiping ios/Pods
|
|
795
|
+
`),Lt.info(Mt.dim("React Native Podfile fingerprint changed - clearing Pods for clean install...")),wt.rmSync(b,{recursive:!0,force:!0})):T&&Au(_,w)&&(await s(`[CACHE] React Native Pods Manifest.lock is out of sync - wiping ios/Pods
|
|
796
|
+
`),Lt.info(Mt.dim("React Native Pods manifest is out of sync - clearing Pods for clean install...")),wt.rmSync(b,{recursive:!0,force:!0}));let X="/opt/homebrew/bin/pod",U=wt.existsSync(X)?X:"pod";try{Lt.info(Mt.dim(`Using pod command: ${U} in ${g}`)),await a(U,["install"],g,S)}catch(K){let v=K.message||"Unknown error";Lt.warn(Mt.yellow(`Native "pod" command failed: ${v}`)),Lt.info(Mt.dim("Falling back to npx pod-install..."));let R=r();l(g,R),Lt.info(Mt.magenta(`${m.nameUpper}_DEBUG: Executing pod-install fallback via npx --yes pod-install@latest`)),await a("npx",["--yes","pod-install@latest","ios"],process.cwd(),R)}return n.reactNativePods=d(g),c(i,n),{}}};var Eu={expo:xs,"react-native":jr};function vt(e){if(!e)return jr;if(e!=="flutter")return Eu[e];throw new Error('Flutter builds are not implemented yet. Set framework to "expo" or "react-native" for this build.')}var wu="mach-env-v2-js-bundle-cache",vu=new Set(["BUILD_ID","BUILD_NUMBER","ANDROID_VERSION_CODE","MACH_TOKEN","MACH_DEBUG","MACH_S3_DEBUG","MACH_ENV_FINGERPRINT","CODEARTIFACT_AUTH_TOKEN","EXPO_ZQRN_BB_REPO_TOKEN","SENTRY_AUTH_TOKEN","IOS_DIST_P12","IOS_PROVISIONING_PROFILE","IOS_P12_PASSWORD","MATCH_ENCRYPTION_PASSPHRASE","MATCH_PASSWORD","MATCH_KEYCHAIN_NAME","MATCH_KEYCHAIN_PASSWORD","APPLE_TEAM_ID","FASTLANE_TEAM_ID","ANDROID_KEYSTORE","ANDROID_KEYSTORE_BASE64","ANDROID_STORE_PASSWORD","ANDROID_KEY_PASSWORD","ANDROID_KEY_ALIAS","KEYSTORE_PASSWORD","KEYSTORE_ALIAS","AWS_ACCESS_KEY_ID","AWS_SECRET_ACCESS_KEY","AWS_SESSION_TOKEN","AWS_SECURITY_TOKEN","GITHUB_TOKEN","NPM_TOKEN"]),$u=["PRESIGNED_","KEYSTORE_PASSWORD_"],_u=e=>!e||vu.has(e)?!1:!$u.some(t=>e.startsWith(t)),Qt=(e,t,n)=>{let i=vt(n.framework);return{...e,...i.localAndroidEnv(n,t),MACH_APP_NAME:n.appName||n.name||"App"}},mn=e=>{let t=Object.entries(e).filter(([n])=>_u(n)).sort(([n],[i])=>n.localeCompare(i));return Iu.createHash("sha256").update(JSON.stringify({version:wu,entries:t})).digest("hex")};var Hr=e=>e.replace(/\\/g,"\\\\").replace(/"/g,'\\"').replace(/\$/g,"\\$").replace(/`/g,"\\`"),Vr=e=>["1","true","yes","on"].includes(String(e||"").trim().toLowerCase()),Ru=e=>/(^|[-_])(maestro|e2e|test|emulator)([-_]|$)/i.test(e),Cu=(e,t,n)=>{let i=n.MACH_ANDROID_RELEASE_ABIS||n.MACH_ANDROID_ABIS||n.MACH_PROFILE_ANDROID_RELEASE_ABIS||n.MACH_PROFILE_ANDROID_ABIS||n.MACH_PROFILE_ANDROID_ARCHITECTURES||n.MACH_PROFILE_ANDROID_REACT_NATIVE_ARCHITECTURES;return i||(!!e.maestro||Ru(t)||Vr(n.MACH_PROFILE_ANDROID_EMULATOR)||Vr(n.MACH_ANDROID_INCLUDE_EMULATOR_ABIS)||Vr(n.MACH_PROFILE_ANDROID_INCLUDE_EMULATOR_ABIS)?"armeabi-v7a,arm64-v8a,x86_64":"armeabi-v7a,arm64-v8a")},Hs=async(e,t,n={},i,r)=>{let o=Pu(),s=vt(e.framework),a=e.buildProfile||"production",l=a==="production",d=e.apk===!0,c=e.developmentClient?"assembleDebug":l?"bundleRelease":"assembleRelease",u=e.buildCommand||(d?"assembleRelease":c),f=e.nodeVersion?[`echo "[NODE] Switching to Node ${e.nodeVersion}..."`,`CURRENT_MAJOR=$(node -e "process.stdout.write(process.version.split('.')[0].replace('v',''))" 2>/dev/null || echo "0")`,`if [ "$CURRENT_MAJOR" != "${e.nodeVersion}" ]; then`,` curl -fsSL https://deb.nodesource.com/setup_${e.nodeVersion}.x | bash - 2>&1`," apt-get install -y nodejs 2>&1",' echo "[NODE] Installed Node $(node -v)"',"else",' echo "[NODE] Already on Node $(node -v) \u2014 no switch needed"',"fi"].join(`
|
|
797
|
+
`):"",p;if(r){let b=js.isAbsolute(r)?r:js.resolve(process.cwd(),r);Bs.existsSync(b)?(p=Bs.readFileSync(b,"utf-8"),Di.info(Fs.magenta(`\u2713 Loaded preBuild hook: ${r}`))):Di.warn(`preBuild script not found at ${b} \u2014 skipping`)}let y=Cu(e,a,n),g={...Qt(n,a,e),MACH_ANDROID_RELEASE_ABIS:y},h=mn(g),S=Ns.replace(/\{\{BUILD_ID\}\}/g,t).replace(/\{\{BUILD_COMMAND\}\}/g,u).replace("{{NODE_VERSION_SETUP}}",f).replace("{{ENV_VARS}}",`
|
|
798
|
+
export MACH_APP_NAME="${Hr(g.MACH_APP_NAME)}"
|
|
799
|
+
export MACH_BUILD_PROFILE="${Hr(a)}"
|
|
800
|
+
export MACH_ANDROID_RELEASE_ABIS="${Hr(y)}"
|
|
801
|
+
export MACH_ENV_FINGERPRINT="${h}"
|
|
646
802
|
${s.remoteEnvSetupScript().trim()}
|
|
647
803
|
{{ENV_VARS}}
|
|
648
|
-
`).replace("{{FRAMEWORK_ANDROID_VERSION_CODE}}",s.androidRemoteVersionCodeScript().trim()).replace("{{FRAMEWORK_ANDROID_PREBUILD}}",s.androidRemotePrebuildScript().trim()).replace("{{FRAMEWORK_ANDROID_GRADLE_PROPERTIES}}",s.androidRemoteGradlePropertiesScript().trim()).replace("{{FRAMEWORK_ANDROID_RELEASE_GRADLE_PROPERTIES}}",s.androidRemoteReleaseGradlePropertiesScript().trim());if(e.dryRun){
|
|
804
|
+
`).replace("{{FRAMEWORK_ANDROID_VERSION_CODE}}",s.androidRemoteVersionCodeScript().trim()).replace("{{FRAMEWORK_ANDROID_PREBUILD}}",s.androidRemotePrebuildScript().trim()).replace("{{FRAMEWORK_ANDROID_GRADLE_PROPERTIES}}",s.androidRemoteGradlePropertiesScript().trim()).replace("{{FRAMEWORK_ANDROID_RELEASE_GRADLE_PROPERTIES}}",s.androidRemoteReleaseGradlePropertiesScript().trim());if(e.dryRun){Di.info("User Data Script (dry run):"),console.log(S);return}o.start("Requesting cloud build instance...");try{let b=await D.post("/builds/launch-android",{projectId:i,buildId:t,platform:e.platform,buildProfile:e.buildProfile,buildCommand:u,instanceType:e.instanceType,ami:e.ami,keepInstance:e.keepInstance,region:e.region,subnet:e.subnet,securityGroup:e.securityGroup,projectSecrets:n,dryRun:e.dryRun,userDataScript:S,preBuildScriptContent:p});if(b.data.status!=="success")throw new Error(b.data.message||"Failed to launch build instance");let _=b.data.instanceId;return o.stop("Build Started"),Di.success(Fs.green(`Build initiated on cloud instance (${_}).`)),{instanceId:_}}catch(b){o.stop("Android Build Failed");let _=b.response?.data?.message||b.message;throw new Error(`Failed to launch Android build: ${_}`)}};import{spinner as Ou,log as en}from"@clack/prompts";import $t from"chalk";import Du from"fs";import{execSync as Bn}from"child_process";var Vs=`#!/bin/bash
|
|
649
805
|
# --- Mach Cloud Build Script (iOS) ---
|
|
650
806
|
# All S3 operations use presigned URLs via curl \u2014 zero AWS credentials on Mac.
|
|
651
807
|
|
|
@@ -832,6 +988,68 @@ fi
|
|
|
832
988
|
|
|
833
989
|
{{FRAMEWORK_PREBUILD}}
|
|
834
990
|
|
|
991
|
+
IOS_BUILD_NUMBER="\${BUILD_NUMBER:-\${CURRENT_PROJECT_VERSION:-}}"
|
|
992
|
+
IOS_VERSION_ARGS=()
|
|
993
|
+
if [ -n "$IOS_BUILD_NUMBER" ]; then
|
|
994
|
+
if ! [[ "$IOS_BUILD_NUMBER" =~ ^[0-9]+(\\.[0-9]+){0,2}$ ]]; then
|
|
995
|
+
echo "Error: Invalid iOS build number '$IOS_BUILD_NUMBER'. Expected one to three period-separated integers."
|
|
996
|
+
exit 1
|
|
997
|
+
fi
|
|
998
|
+
|
|
999
|
+
export BUILD_NUMBER="$IOS_BUILD_NUMBER"
|
|
1000
|
+
export CURRENT_PROJECT_VERSION="$IOS_BUILD_NUMBER"
|
|
1001
|
+
IOS_VERSION_ARGS=(
|
|
1002
|
+
"BUILD_NUMBER=$IOS_BUILD_NUMBER"
|
|
1003
|
+
"CURRENT_PROJECT_VERSION=$IOS_BUILD_NUMBER"
|
|
1004
|
+
"INFOPLIST_KEY_CFBundleVersion=$IOS_BUILD_NUMBER"
|
|
1005
|
+
)
|
|
1006
|
+
|
|
1007
|
+
PATCHED_PLISTS=0
|
|
1008
|
+
while IFS= read -r -d '' PLIST_PATH; do
|
|
1009
|
+
case "$PLIST_PATH" in
|
|
1010
|
+
*/Pods/*|*/build/*|*/DerivedData/*|*.framework/*|*.xcframework/*|*.bundle/*) continue ;;
|
|
1011
|
+
esac
|
|
1012
|
+
if /usr/libexec/PlistBuddy -c "Print :CFBundleVersion" "$PLIST_PATH" >/dev/null 2>&1; then
|
|
1013
|
+
/usr/libexec/PlistBuddy -c "Set :CFBundleVersion $IOS_BUILD_NUMBER" "$PLIST_PATH"
|
|
1014
|
+
else
|
|
1015
|
+
/usr/libexec/PlistBuddy -c "Add :CFBundleVersion string $IOS_BUILD_NUMBER" "$PLIST_PATH"
|
|
1016
|
+
fi
|
|
1017
|
+
PATCHED_PLISTS=$((PATCHED_PLISTS + 1))
|
|
1018
|
+
done < <(find ios -type f -name "Info.plist" -print0 2>/dev/null)
|
|
1019
|
+
echo "[VERSIONING] Applied MACH iOS buildNumber $IOS_BUILD_NUMBER to $PATCHED_PLISTS native Info.plist file(s)."
|
|
1020
|
+
fi
|
|
1021
|
+
|
|
1022
|
+
validate_ios_bundle_version() {
|
|
1023
|
+
local BUNDLE_PATH="$1"
|
|
1024
|
+
local PLIST_PATH="$BUNDLE_PATH/Info.plist"
|
|
1025
|
+
if [ ! -f "$PLIST_PATH" ]; then
|
|
1026
|
+
echo "Error: Missing Info.plist in $BUNDLE_PATH"
|
|
1027
|
+
return 1
|
|
1028
|
+
fi
|
|
1029
|
+
|
|
1030
|
+
local ACTUAL_VERSION
|
|
1031
|
+
ACTUAL_VERSION=$(/usr/libexec/PlistBuddy -c "Print :CFBundleVersion" "$PLIST_PATH" 2>/dev/null || true)
|
|
1032
|
+
if ! [[ "$ACTUAL_VERSION" =~ ^[0-9]+(\\.[0-9]+){0,2}$ ]]; then
|
|
1033
|
+
echo "Error: Invalid CFBundleVersion '$ACTUAL_VERSION' in $BUNDLE_PATH"
|
|
1034
|
+
return 1
|
|
1035
|
+
fi
|
|
1036
|
+
if [ -n "$IOS_BUILD_NUMBER" ] && [ "$ACTUAL_VERSION" != "$IOS_BUILD_NUMBER" ]; then
|
|
1037
|
+
echo "Error: iOS build number mismatch in $BUNDLE_PATH. Expected $IOS_BUILD_NUMBER, found $ACTUAL_VERSION."
|
|
1038
|
+
return 1
|
|
1039
|
+
fi
|
|
1040
|
+
echo "[IPA VALID] $(basename "$BUNDLE_PATH") CFBundleVersion $ACTUAL_VERSION"
|
|
1041
|
+
}
|
|
1042
|
+
|
|
1043
|
+
validate_ios_bundle_tree() {
|
|
1044
|
+
local ROOT_APP="$1"
|
|
1045
|
+
while IFS= read -r -d '' BUNDLE_PATH; do
|
|
1046
|
+
case "$BUNDLE_PATH" in
|
|
1047
|
+
*/Frameworks/*) continue ;;
|
|
1048
|
+
esac
|
|
1049
|
+
validate_ios_bundle_version "$BUNDLE_PATH" || return 1
|
|
1050
|
+
done < <(find "$ROOT_APP" -type d \\( -name "*.app" -o -name "*.appex" \\) -print0)
|
|
1051
|
+
}
|
|
1052
|
+
|
|
835
1053
|
configure_xcode_node_binary
|
|
836
1054
|
|
|
837
1055
|
# 5. Apply simulator fix to Podfile dynamically (keeps project source clean)
|
|
@@ -983,7 +1201,9 @@ security unlock-keychain -p "\${TEMP_KEYCHAIN_PASSWORD}" "\${TEMP_KEYCHAIN_PATH}
|
|
|
983
1201
|
echo "[STEP_START:build] $(date +%s)"
|
|
984
1202
|
clear_js_transform_caches
|
|
985
1203
|
configure_xcode_node_binary
|
|
986
|
-
|
|
1204
|
+
# MACH-owned native versions use the canonical Xcode path below so version
|
|
1205
|
+
# injection and signed-artifact verification cannot be bypassed by a custom lane.
|
|
1206
|
+
if { [ -f "Fastfile" ] || [ -d "fastlane" ]; } && [ -z "$IOS_BUILD_NUMBER" ]; then
|
|
987
1207
|
bundle exec fastlane ios build
|
|
988
1208
|
elif [ -d "ios" ]; then
|
|
989
1209
|
cd ios
|
|
@@ -1161,13 +1381,13 @@ NODE
|
|
|
1161
1381
|
echo "Using simulator destination: $SIMULATOR_DESTINATION"
|
|
1162
1382
|
fi
|
|
1163
1383
|
SIMULATOR_DESTINATION_ARGS=(-destination "$SIMULATOR_DESTINATION")
|
|
1164
|
-
run_simulator_xcodebuild xcodebuild build -workspace "$WORKSPACE" -scheme "$SCHEME" -configuration "$USER_CONFIG" -sdk "$SDK" "\${SIMULATOR_DESTINATION_ARGS[@]}" -derivedDataPath "$DERIVED_DATA_PATH" $EXTRA_ARGS || exit 1
|
|
1384
|
+
run_simulator_xcodebuild xcodebuild build -workspace "$WORKSPACE" -scheme "$SCHEME" -configuration "$USER_CONFIG" -sdk "$SDK" "\${SIMULATOR_DESTINATION_ARGS[@]}" -derivedDataPath "$DERIVED_DATA_PATH" "\${IOS_VERSION_ARGS[@]}" $EXTRA_ARGS || exit 1
|
|
1165
1385
|
else
|
|
1166
1386
|
ARCHIVE_SIGN_ARGS=("CODE_SIGN_STYLE=Manual")
|
|
1167
1387
|
[ -n "$TEAM_ID" ] && ARCHIVE_SIGN_ARGS+=("DEVELOPMENT_TEAM=$TEAM_ID")
|
|
1168
1388
|
[ -n "$PROFILE_UUID" ] && ARCHIVE_SIGN_ARGS+=("PROVISIONING_PROFILE=$PROFILE_UUID")
|
|
1169
1389
|
[ -n "$PROFILE_NAME" ] && ARCHIVE_SIGN_ARGS+=("PROVISIONING_PROFILE_SPECIFIER=$PROFILE_NAME")
|
|
1170
|
-
xcodebuild archive -workspace "$WORKSPACE" -scheme "$SCHEME" -archivePath "../build.xcarchive" -configuration "$USER_CONFIG" -sdk "$SDK" -derivedDataPath "$DERIVED_DATA_PATH" \${AUTH_PARAMS:+-allowProvisioningUpdates $AUTH_PARAMS} "\${ARCHIVE_SIGN_ARGS[@]}" -parallelizeTargets -allowConcurrentBuilds || exit 1
|
|
1390
|
+
xcodebuild archive -workspace "$WORKSPACE" -scheme "$SCHEME" -archivePath "../build.xcarchive" -configuration "$USER_CONFIG" -sdk "$SDK" -derivedDataPath "$DERIVED_DATA_PATH" "\${IOS_VERSION_ARGS[@]}" \${AUTH_PARAMS:+-allowProvisioningUpdates $AUTH_PARAMS} "\${ARCHIVE_SIGN_ARGS[@]}" -parallelizeTargets -allowConcurrentBuilds || exit 1
|
|
1171
1391
|
fi
|
|
1172
1392
|
elif [ ! -z "$PROJECT" ]; then
|
|
1173
1393
|
if [ -z "$USER_SCHEME" ]; then
|
|
@@ -1191,13 +1411,13 @@ NODE
|
|
|
1191
1411
|
echo "Using simulator destination: $SIMULATOR_DESTINATION"
|
|
1192
1412
|
fi
|
|
1193
1413
|
SIMULATOR_DESTINATION_ARGS=(-destination "$SIMULATOR_DESTINATION")
|
|
1194
|
-
run_simulator_xcodebuild xcodebuild build -project "$PROJECT" -scheme "$SCHEME" -configuration "$USER_CONFIG" -sdk "$SDK" "\${SIMULATOR_DESTINATION_ARGS[@]}" -derivedDataPath "$DERIVED_DATA_PATH" $EXTRA_ARGS || exit 1
|
|
1414
|
+
run_simulator_xcodebuild xcodebuild build -project "$PROJECT" -scheme "$SCHEME" -configuration "$USER_CONFIG" -sdk "$SDK" "\${SIMULATOR_DESTINATION_ARGS[@]}" -derivedDataPath "$DERIVED_DATA_PATH" "\${IOS_VERSION_ARGS[@]}" $EXTRA_ARGS || exit 1
|
|
1195
1415
|
else
|
|
1196
1416
|
ARCHIVE_SIGN_ARGS=("CODE_SIGN_STYLE=Manual")
|
|
1197
1417
|
[ -n "$TEAM_ID" ] && ARCHIVE_SIGN_ARGS+=("DEVELOPMENT_TEAM=$TEAM_ID")
|
|
1198
1418
|
[ -n "$PROFILE_UUID" ] && ARCHIVE_SIGN_ARGS+=("PROVISIONING_PROFILE=$PROFILE_UUID")
|
|
1199
1419
|
[ -n "$PROFILE_NAME" ] && ARCHIVE_SIGN_ARGS+=("PROVISIONING_PROFILE_SPECIFIER=$PROFILE_NAME")
|
|
1200
|
-
xcodebuild archive -project "$PROJECT" -scheme "$SCHEME" -archivePath "../build.xcarchive" -configuration "$USER_CONFIG" -sdk "$SDK" -derivedDataPath "$DERIVED_DATA_PATH" \${AUTH_PARAMS:+-allowProvisioningUpdates $AUTH_PARAMS} "\${ARCHIVE_SIGN_ARGS[@]}" -parallelizeTargets -allowConcurrentBuilds || exit 1
|
|
1420
|
+
xcodebuild archive -project "$PROJECT" -scheme "$SCHEME" -archivePath "../build.xcarchive" -configuration "$USER_CONFIG" -sdk "$SDK" -derivedDataPath "$DERIVED_DATA_PATH" "\${IOS_VERSION_ARGS[@]}" \${AUTH_PARAMS:+-allowProvisioningUpdates $AUTH_PARAMS} "\${ARCHIVE_SIGN_ARGS[@]}" -parallelizeTargets -allowConcurrentBuilds || exit 1
|
|
1201
1421
|
fi
|
|
1202
1422
|
else
|
|
1203
1423
|
echo "Error: Neither workspace nor project found for building."
|
|
@@ -1241,11 +1461,18 @@ if [ "$IS_SIMULATOR" == "true" ]; then
|
|
|
1241
1461
|
fi
|
|
1242
1462
|
|
|
1243
1463
|
validate_simulator_app "$APP_DIR"
|
|
1464
|
+
validate_ios_bundle_tree "$APP_DIR"
|
|
1244
1465
|
mkdir -p export
|
|
1245
1466
|
cp -R "$APP_DIR" export/
|
|
1246
1467
|
cd export && zip -r ../build.app.zip *.app && cd ..
|
|
1247
1468
|
elif [ -d "build.xcarchive" ]; then
|
|
1248
1469
|
EXPORT_METHOD="{{EXPORT_METHOD}}"
|
|
1470
|
+
ARCHIVED_APP=$(find build.xcarchive/Products/Applications -maxdepth 1 -type d -name "*.app" | head -n 1)
|
|
1471
|
+
if [ -z "$ARCHIVED_APP" ]; then
|
|
1472
|
+
echo "Error: Archive has no top-level application bundle."
|
|
1473
|
+
exit 1
|
|
1474
|
+
fi
|
|
1475
|
+
validate_ios_bundle_tree "$ARCHIVED_APP"
|
|
1249
1476
|
|
|
1250
1477
|
# Build provisioningProfiles dict \u2014 only if we successfully extracted profile info
|
|
1251
1478
|
PROV_PROFILES_XML=""
|
|
@@ -1284,6 +1511,16 @@ EOF
|
|
|
1284
1511
|
|
|
1285
1512
|
IPA_FILE=$(find export -name "*.ipa" | head -n 1)
|
|
1286
1513
|
if [ ! -z "$IPA_FILE" ]; then
|
|
1514
|
+
IPA_VALIDATION_DIR=$(mktemp -d "/tmp/mach-ipa-\${BUILD_ID}-XXXXXX")
|
|
1515
|
+
unzip -q "$IPA_FILE" -d "$IPA_VALIDATION_DIR"
|
|
1516
|
+
IPA_APP=$(find "$IPA_VALIDATION_DIR/Payload" -maxdepth 1 -type d -name "*.app" | head -n 1)
|
|
1517
|
+
if [ -z "$IPA_APP" ]; then
|
|
1518
|
+
echo "Error: Exported IPA has no top-level application bundle."
|
|
1519
|
+
rm -rf "$IPA_VALIDATION_DIR"
|
|
1520
|
+
exit 1
|
|
1521
|
+
fi
|
|
1522
|
+
validate_ios_bundle_tree "$IPA_APP"
|
|
1523
|
+
rm -rf "$IPA_VALIDATION_DIR"
|
|
1287
1524
|
cp "$IPA_FILE" build.ipa
|
|
1288
1525
|
fi
|
|
1289
1526
|
fi
|
|
@@ -1325,125 +1562,132 @@ touch done
|
|
|
1325
1562
|
if [ ! -z "$PRESIGNED_DONE_MARKER" ]; then
|
|
1326
1563
|
curl -X PUT -T done "$PRESIGNED_DONE_MARKER" --silent
|
|
1327
1564
|
fi
|
|
1328
|
-
`;var
|
|
1329
|
-
`:
|
|
1330
|
-
`);r.message("Generating macOS build script...");let
|
|
1331
|
-
`:"";if(n)for(let[
|
|
1332
|
-
`}let
|
|
1333
|
-
`),
|
|
1334
|
-
`):"",
|
|
1335
|
-
${
|
|
1336
|
-
${
|
|
1337
|
-
${
|
|
1565
|
+
`;var Gs=e=>e.replace(/\\/g,"\\\\").replace(/"/g,'\\"').replace(/\$/g,"\\$").replace(/`/g,"\\`"),zs=async(e,t,n={},i)=>{let r=Ou(),o=vt(e.framework);e.sshHost||(e.sshHost="localhost",en.message($t.yellow("No SSH host provided, defaulting to localhost."))),r.start(`Connecting to remote Mac at ${$t.cyan(e.sshHost)}...`);let s=e.sshUser||process.env.USER||"ubuntu",a=e.sshKey,l=`${s}@${e.sshHost}`,d=`ssh ${a?`-i ${a}`:""} -o StrictHostKeyChecking=no ${l}`,c=`scp ${a?`-i ${a}`:""} -o StrictHostKeyChecking=no`;try{let u=s==="ubuntu"?"/home/ubuntu":`/Users/${s}`,f=(n.PROJECT_ID||"default_project").replace(/[^a-zA-Z0-9-_]/g,"_"),p=`${u}/${m.remoteWorkspacesDir}/${f}`;r.message(`Preparing stable workspace: ${p}...`),Bn(`${d} "mkdir -p ${p}"`,{stdio:"inherit"}),r.message("Transferring source code...");let y=`/tmp/${m.nameLower}-source-${t}.zip`;Bn(`${c} ${y} ${l}:${p}/source.zip`,{stdio:"inherit"});let g=e.iosApiKeyPath?`${p}/api_key.p8`:"",h="";e.iosApiKeyPath&&(r.message("Uploading App Store Connect API key..."),Bn(`${c} ${e.iosApiKeyPath} ${l}:${g}`),e.iosApiKeyId&&e.iosApiKeyIssuer&&(h=`-authenticationKeyID ${e.iosApiKeyId} -authenticationKeyIssuerID ${e.iosApiKeyIssuer} -authenticationKeyPath ${g}`));let S={};if(i)try{let I=await D.post(`/builds/${i}/${t}/build-urls`,{platform:"ios"});I.data.status==="success"&&(S=I.data.urls)}catch(I){en.warn($t.yellow(`Could not fetch build URLs: ${I.message}`))}let b="";if(S.credentials&&S.credentials.length>0)for(let I of S.credentials)I.type==="p12"?b+=`curl -sf -o "$CERT_DIR/${I.name}" "${I.downloadUrl}" || true
|
|
1566
|
+
`:I.type==="mobileprovision"&&(b+=`curl -sf -o "$PROV_TEMP/${I.name}" "${I.downloadUrl}" || true
|
|
1567
|
+
`);r.message("Generating macOS build script...");let _=process.env.CODEARTIFACT_AUTH_TOKEN?`export CODEARTIFACT_AUTH_TOKEN="${process.env.CODEARTIFACT_AUTH_TOKEN}"
|
|
1568
|
+
`:"";if(n)for(let[I,$]of Object.entries(n)){let x=$.replace(/"/g,'\\"').replace(/\$/g,"\\$").replace(/`/g,"\\`");_+=`export ${I}="${x}"
|
|
1569
|
+
`}let w=e.buildProfile||"production",T=Qt(n,w,e),B=mn(T);en.info($t.dim(`iOS remote build config: simulator=${String(!!e.simulator)}, configuration=${e.iosConfiguration||"Release"}, scheme=${e.iosScheme||"auto"}`));let X=[_,S.logUpload?`export PRESIGNED_LOG_UPLOAD="${S.logUpload}"`:"",S.doneMarker?`export PRESIGNED_DONE_MARKER="${S.doneMarker}"`:"",S.cacheDerivedDataDownload?`export PRESIGNED_CACHE_DD_DOWNLOAD="${S.cacheDerivedDataDownload}"`:"",S.cacheDerivedDataUpload?`export PRESIGNED_CACHE_DD_UPLOAD="${S.cacheDerivedDataUpload}"`:"",S.cacheNodeModulesDownload?`export PRESIGNED_CACHE_NODE_DOWNLOAD="${S.cacheNodeModulesDownload}"`:"",S.cacheNodeModulesUpload?`export PRESIGNED_CACHE_NODE_UPLOAD="${S.cacheNodeModulesUpload}"`:"",S.cachePodsDownload?`export PRESIGNED_CACHE_PODS_DOWNLOAD="${S.cachePodsDownload}"`:"",S.cachePodsUpload?`export PRESIGNED_CACHE_PODS_UPLOAD="${S.cachePodsUpload}"`:"",S.artifactIpaUpload?`export PRESIGNED_ARTIFACT_IPA_UPLOAD="${S.artifactIpaUpload}"`:"",S.artifactAppZipUpload?`export PRESIGNED_ARTIFACT_APP_ZIP_UPLOAD="${S.artifactAppZipUpload}"`:"",`export BUILD_ID="${t}"`,`export MACH_BUILD_PROFILE="${Gs(w)}"`,`export MACH_APP_NAME="${Gs(T.MACH_APP_NAME)}"`,`export MACH_ENV_FINGERPRINT="${B}"`,o.remoteEnvSetupScript().trim(),`export ${m.envPrefix}PROJECT_ID="${f}"`,n.MATCH_ENCRYPTION_PASSPHRASE?`export MATCH_PASSWORD="${n.MATCH_ENCRYPTION_PASSPHRASE}"`:"",n.APPLE_TEAM_ID?`export FASTLANE_TEAM_ID="${n.APPLE_TEAM_ID}"`:"",`export MATCH_KEYCHAIN_NAME="${m.credentialsKeychain}"`,`export MATCH_KEYCHAIN_PASSWORD="${m.keychainPassword}"`].filter(Boolean).join(`
|
|
1570
|
+
`),U=e.nodeVersion?[`echo "[NODE] Switching to Node ${e.nodeVersion}..."`,'export NVM_DIR="$HOME/.nvm"','[ -s "$NVM_DIR/nvm.sh" ] && . "$NVM_DIR/nvm.sh" --no-use',`nvm install ${e.nodeVersion} 2>/dev/null || true`,`nvm use ${e.nodeVersion} --silent`,`export PATH="$NVM_DIR/versions/node/$(nvm version ${e.nodeVersion})/bin:$PATH"`,'echo "[NODE] Now using: $(node -v) at $(which node)"'].join(`
|
|
1571
|
+
`):"",K=Vs,v={"{{REMOTE_DIR}}":p,"{{ENV_VARS}}":X,"{{CREDENTIAL_DOWNLOADS}}":b,"{{IOS_SCHEME}}":e.iosScheme||"","{{IOS_CONFIG}}":e.iosConfiguration||"Release","{{TEAM_ID}}":e.iosTeamId||"","{{AUTH_PARAMS}}":h,"{{IS_SIMULATOR}}":e.simulator?"true":"false","{{BUILD_ID}}":t,"{{EXPORT_METHOD}}":e.iosExportMethod||"ad-hoc","{{NODE_VERSION_SETUP}}":U,"{{FRAMEWORK_PREBUILD}}":o.iosRemotePrebuildScript().trim()};Object.entries(v).forEach(([I,$])=>{K=K.split(I).join($)});let R=`/tmp/${m.nameLower}-mac-build-${t}.sh`;if(Du.writeFileSync(R,K),Bn(`${c} ${R} ${l}:${p}/build.sh`),r.stop("Remote script uploaded."),en.info($t.cyan("Executing remote build. This might take a while...")),Bn(`${d} "bash ${p}/build.sh"`,{stdio:"inherit"}),r.stop("Remote build finished!"),i){r.start("Fetching artifact links...");try{let $=(await D.get(`/builds/${i}/${t}/artifacts`)).data.artifacts||[],x=e.simulator===!0;if($.length===0&&!x)throw r.stop("Build Failed!"),new Error("Build completed but no artifacts were generated. Check build logs for errors.");if(r.stop("Build Successful!"),$.length>0){en.success("Build Artifacts Ready:");for(let P of $)console.log(`
|
|
1572
|
+
${$t.yellow(P.name)}:
|
|
1573
|
+
${$t.cyan(P.downloadUrl)}`);console.log(`
|
|
1574
|
+
${$t.dim("Note: Links are valid for 7 days.")}`)}else x&&en.warn("Simulator build completed. No artifacts uploaded.")}catch(I){r.stop("Could not fetch artifacts"),en.warn($t.yellow(`Artifact listing failed: ${I.message}`))}}}catch(u){throw r.stop("iOS Build Failed"),u}};import{spinner as Ti,log as N,isCancel as Li,confirm as Yu,select as Xr}from"@clack/prompts";import k from"chalk";import A from"fs";import E from"path";import{execFileSync as Pt,execSync as oe,spawn as oa}from"child_process";import ke from"os";import Xu from"crypto";var ku=/^\d+(?:\.\d+){0,2}$/,Nu="auto";var jn=e=>typeof e=="string"&&e.trim().toLowerCase()===Nu,Gr=(e,t,n,i=!0)=>e!=null&&String(e).trim()!==""?{kind:"persisted",value:e}:t!=null&&!jn(t)?{kind:"explicit",value:t}:i&&(n||jn(t))?{kind:"auto"}:{kind:"none"},Hn=e=>{let t=String(e??"").trim();return!t||t==="undefined"||t==="null"?null:ku.test(t)?t:null},gn=(e,t)=>{let n=Hn(e);if(!n)throw new Error(`Invalid iOS buildNumber from ${t}: "${String(e??"")}". Use one to three period-separated integers, for example "68" or "1.2.3".`);return n},xu=e=>{if(typeof e=="string"&&!/^\d+$/.test(e.trim()))return null;let t=Number(e);return!Number.isSafeInteger(t)||t<1||t>21e8?null:String(t)},lt=(e,t)=>{let n=xu(e);if(!n)throw new Error(`Invalid Android versionCode from ${t}: "${String(e??"")}". Use an integer from 1 to 2100000000.`);return n},ki=(e,t,n,i)=>{let r=gn(n,i);return e.resolvedBuildNumber=r,t.BUILD_NUMBER=r,t.CURRENT_PROJECT_VERSION=r,t.MACH_IOS_BUILD_NUMBER_LOCKED="1",r},Ni=(e,t,n,i)=>{let r=lt(n,i);return e.resolvedVersionCode=r,t.ANDROID_VERSION_CODE=r,t.MACH_ANDROID_VERSION_CODE_LOCKED="1",r},Ks=(e,t)=>{let n=t.buildNumber!==void 0&&t.buildNumber!==null&&String(t.buildNumber).trim()!=="",i=t.versionCode!==void 0&&t.versionCode!==null&&String(t.versionCode).trim()!=="";!e.resolvedBuildNumber&&n&&(e.resolvedBuildNumber=gn(t.buildNumber,"saved MACH build record")),!e.resolvedVersionCode&&i&&(e.resolvedVersionCode=lt(t.versionCode,"saved MACH build record"))};import{execFileSync as zr}from"child_process";import _t from"fs";import tn from"path";var Tu=new Set(["Pods","build","DerivedData",".git"]),Ws=(e,t=[])=>{if(!_t.existsSync(e))return t;for(let n of _t.readdirSync(e,{withFileTypes:!0})){if(n.isSymbolicLink())continue;let i=tn.join(e,n.name);if(n.isDirectory()){if(Tu.has(n.name)||n.name.endsWith(".xcworkspace")||n.name.endsWith(".xcarchive")||n.name.endsWith(".framework")||n.name.endsWith(".xcframework")||n.name.endsWith(".bundle")||n.name.endsWith(".app")||n.name.endsWith(".appex"))continue;Ws(i,t);continue}n.isFile()&&n.name==="Info.plist"&&t.push(i)}return t},Lu=(e,t,n)=>{let i=String(e||"").trim().replace(/^"|"$/g,"");if(!i||(i=i.replace(/\$\(([^)]+)\)|\$\{([^}]+)\}/g,(o,s,a)=>{let d=t[s||a];return d===void 0?"":String(d)}),!i||i.includes("$(")||i.includes("${")))return null;let r=String(t.SRCROOT||t.PROJECT_DIR||n);return tn.resolve(tn.isAbsolute(i)?i:tn.join(r,i))},Mu=e=>{let t=e.indexOf("["),n=e.lastIndexOf("]");if(t<0||n<t)return[];let i=JSON.parse(e.slice(t,n+1));return Array.isArray(i)?i:[]},Uu=(e,t)=>{let n=new Set,i=[];(t.workspace||t.project)&&i.push([...t.workspace?["-workspace",t.workspace]:["-project",t.project],"-scheme",t.scheme]),t.project&&i.push(["-project",t.project,"-alltargets"]);for(let r of i){let o="";try{o=zr("xcodebuild",[...r,"-configuration",t.configuration,"-showBuildSettings","-json"],{cwd:e,encoding:"utf8",maxBuffer:16*1024*1024})}catch{continue}for(let s of Mu(o)){let a=s?.buildSettings;if(!a)continue;let l=String(a.WRAPPER_EXTENSION||"").toLowerCase();if(l!=="app"&&l!=="appex")continue;let d=Lu(String(a.INFOPLIST_FILE||""),a,e);if(!d||!_t.existsSync(d))continue;let c=tn.relative(e,d);c.startsWith("..")||tn.isAbsolute(c)||n.add(d)}}return[...n].sort()},Fu=(e,t)=>{let n=_t.readFileSync(e,"utf8");if(!/<plist(?:\s|>)/.test(n))return!1;let r=/<key>\s*CFBundleVersion\s*<\/key>/.exec(n),o;if(r){let s=r.index+r[0].length,a=n.slice(s),l=/^\s*<(string|integer)>[\s\S]*?<\/\1>/.exec(a);if(!l)throw new Error(`Could not update CFBundleVersion in ${e}: unsupported plist value type.`);o=n.slice(0,s)+`
|
|
1575
|
+
<string>${t}</string>`+a.slice(l[0].length)}else{let s=n.lastIndexOf("</dict>");if(s<0)throw new Error(`Could not update CFBundleVersion in ${e}: root dictionary not found.`);o=n.slice(0,s)+` <key>CFBundleVersion</key>
|
|
1576
|
+
<string>${t}</string>
|
|
1577
|
+
`+n.slice(s)}return _t.writeFileSync(e,o),!0},Bu=(e,t)=>{if(!Fu(e,t)){if(process.platform!=="darwin")throw new Error(`Could not update binary Info.plist outside macOS: ${e}`);try{zr("/usr/bin/plutil",["-replace","CFBundleVersion","-string",t,e])}catch{zr("/usr/bin/plutil",["-insert","CFBundleVersion","-string",t,e])}}},Js=(e,t,n)=>{let i=gn(t,"resolved MACH build"),r=tn.resolve(e),o=new Set;if(n)try{for(let d of Uu(r,n))o.add(d)}catch{}for(let d of Ws(r))o.add(d);let s=[...o].sort(),a=new Map,l=!1;try{for(let d of s)a.set(d,_t.readFileSync(d)),Bu(d,i)}catch(d){for(let[c,u]of a)_t.writeFileSync(c,u);throw d}return{buildNumber:i,plistPaths:s,restore:()=>{if(!l){l=!0;for(let[d,c]of a)_t.existsSync(d)&&_t.writeFileSync(d,c)}}}},Kr=(e,t,n)=>{let i=gn(e,n),r=gn(t,"resolved MACH build");if(i!==r)throw new Error(`iOS build number mismatch in ${n}: expected MACH buildNumber ${r}, but the artifact contains CFBundleVersion ${i}.`);return i};import{execFileSync as qs}from"child_process";import Vn from"fs";import xe from"path";import ju from"adm-zip";var Wr=(e,t)=>{let n=0n,i=0n,r=t;for(;r<e.length&&i<=63n;){let o=e[r++];if(n|=BigInt(o&127)<<i,(o&128)===0)return{value:n,next:r};i+=7n}throw new Error("Malformed protobuf varint")},Gn=e=>{let t=[],n=0;for(;n<e.length;){let i=Wr(e,n);n=i.next;let r=Number(i.value>>3n),o=Number(i.value&7n);if(r<1)throw new Error("Malformed protobuf field number");if(o===0){let s=Wr(e,n);n=s.next,t.push({number:r,wireType:o,varint:s.value});continue}if(o===1){if(n+8>e.length)throw new Error("Truncated protobuf fixed64");t.push({number:r,wireType:o,bytes:e.subarray(n,n+8)}),n+=8;continue}if(o===2){let s=Wr(e,n);n=s.next;let a=Number(s.value);if(!Number.isSafeInteger(a)||n+a>e.length)throw new Error("Truncated protobuf length-delimited field");t.push({number:r,wireType:o,bytes:e.subarray(n,n+a)}),n+=a;continue}if(o===5){if(n+4>e.length)throw new Error("Truncated protobuf fixed32");t.push({number:r,wireType:o,bytes:e.subarray(n,n+4)}),n+=4;continue}throw new Error(`Unsupported protobuf wire type ${o}`)}return t},Ys=(e,t)=>e.find(i=>i.number===t&&i.wireType===2)?.bytes?.toString("utf8"),Hu=e=>{let n=Gn(e).find(o=>o.number===7&&o.wireType===2)?.bytes;if(!n)return null;let r=Gn(n).find(o=>(o.number===6||o.number===7)&&o.wireType===0)?.varint;return r===void 0||r>BigInt(Number.MAX_SAFE_INTEGER)?null:r.toString()},Vu=e=>{let n=Gn(e).find(d=>d.number===1&&d.wireType===2)?.bytes;if(!n)throw new Error("AAB base manifest has no root XML element");let o=Gn(n).filter(d=>d.number===4&&d.wireType===2).map(d=>Gn(d.bytes)).find(d=>Ys(d,2)==="versionCode");if(!o)throw new Error("AAB base manifest has no android:versionCode");let s=Ys(o,3)?.trim();if(s&&/^\d+$/.test(s))return lt(s,"packaged AAB manifest");let a=o.find(d=>d.number===6&&d.wireType===2)?.bytes,l=a?Hu(a):null;return lt(l,"packaged AAB manifest")},Xs=e=>{try{return Vn.accessSync(e,Vn.constants.X_OK),Vn.statSync(e).isFile()}catch{return!1}},Jr=e=>String(process.env.PATH||"").split(xe.delimiter).filter(Boolean).map(t=>xe.join(t,e)),Zs=()=>Array.from(new Set([process.env.ANDROID_HOME,process.env.ANDROID_SDK_ROOT,process.platform==="darwin"?xe.join(process.env.HOME||"","Library/Android/sdk"):xe.join(process.env.HOME||"","Android/Sdk"),"/opt/android-sdk"].filter(e=>!!e))),Qs=e=>{try{return Vn.readdirSync(e).map(t=>xe.join(e,t)).filter(t=>Vn.statSync(t).isDirectory()).sort((t,n)=>n.localeCompare(t,void 0,{numeric:!0}))}catch{return[]}},Gu=()=>{let e=Jr("apkanalyzer");for(let t of Zs()){let n=xe.join(t,"cmdline-tools");e.push(xe.join(n,"latest/bin/apkanalyzer"));for(let i of Qs(n))e.push(xe.join(i,"bin/apkanalyzer"))}return e},zu=()=>{let e=[...Jr("aapt2"),...Jr("aapt")];for(let t of Zs())for(let n of Qs(xe.join(t,"build-tools")))e.push(xe.join(n,"aapt2"),xe.join(n,"aapt"));return e},Ku=e=>{let t=e.trim();return/^\d+$/.test(t)?t:null},Wu=e=>e.match(/^package:.*\bversionCode='(\d+)'/m)?.[1]||null,Ju=(e,t)=>{let n=t.apkanalyzer??Gu();for(let r of n)if(Xs(r))try{let o=qs(r,["manifest","version-code",e],{encoding:"utf8",stdio:["ignore","pipe","pipe"]}),s=Ku(o);if(s)return lt(s,"packaged APK manifest")}catch{}let i=t.aapt??zu();for(let r of i)if(Xs(r))try{let o=qs(r,["dump","badging",e],{encoding:"utf8",stdio:["ignore","pipe","pipe"]}),s=Wu(o);if(s)return lt(s,"packaged APK manifest")}catch{}throw new Error("Could not inspect the packaged APK versionCode. Install Android SDK command-line tools (apkanalyzer or aapt2) and rebuild; MACH will not publish an unverified artifact.")},qu=(e,t={})=>{let n=xe.extname(e).toLowerCase();if(n===".apk")return Ju(e,t);if(n!==".aab")throw new Error(`Unsupported Android artifact for version validation: ${e}`);let i;try{i=new ju(e)}catch(o){throw new Error(`Could not open AAB ${xe.basename(e)}: ${o.message}`)}let r=i.getEntry("base/manifest/AndroidManifest.xml")||i.getEntries().find(o=>o.entryName.replace(/\\/g,"/")==="base/manifest/AndroidManifest.xml");if(!r)throw new Error(`AAB ${xe.basename(e)} has no base module manifest`);try{return Vu(r.getData())}catch(o){throw new Error(`Could not read versionCode from ${xe.basename(e)}: ${o.message}`)}},qr=(e,t,n={})=>{let i=lt(t,"resolved MACH build assignment"),r=qu(e,n);if(r!==i)throw new Error(`Android versionCode mismatch in ${xe.basename(e)}: expected ${i}, packaged ${r}. MACH stopped the build before upload.`);return r};var sa=(e,t)=>t.filter(n=>A.existsSync(E.join(e,n))).reduce((n,i)=>n.update(A.readFileSync(E.join(e,i))),Xu.createHash("sha256")).digest("hex").slice(0,16),Zu=e=>sa(e,["package.json","yarn.lock","package-lock.json","bun.lockb"]),Qu=e=>sa(e,["Podfile","Podfile.lock"]),ep=e=>{let t=E.join(e,"fingerprint.json");try{return JSON.parse(A.readFileSync(t,"utf-8"))}catch{return{}}},ea=(e,t)=>{A.mkdirSync(e,{recursive:!0}),A.writeFileSync(E.join(e,"fingerprint.json"),JSON.stringify(t,null,2))},tp=7200*1e3,np=(e,t)=>{A.mkdirSync(e,{recursive:!0});let n=E.join(e,"build.lock");if(A.existsSync(n))try{let i=JSON.parse(A.readFileSync(n,"utf-8")),r=Date.now()-(i.timestamp||0);if(r<tp)throw new Error(`Another build is already running for this project (build ${i.buildId}, started ${Math.round(r/6e4)}m ago). Cancel it from the dashboard first, or wait for it to complete.`)}catch(i){if(i.message.includes("Another build"))throw i}A.writeFileSync(n,JSON.stringify({buildId:t,pid:process.pid,timestamp:Date.now()}))},ip=(e,t)=>{let n=E.join(e,"build.lock");try{A.existsSync(n)&&JSON.parse(A.readFileSync(n,"utf-8")).buildId===t&&A.unlinkSync(n)}catch{}},ta=15e5,na=(e,t)=>{let n=e+t;return n.length>ta?n.slice(-ta):n},aa=e=>e.replace(/\u001b\[[0-9;]*m/g,""),la=e=>/\berror:|fatal error:|xcodebuild: error|The following build commands failed|Command PhaseScriptExecution failed|PhaseScriptExecution|Command .* failed|CodeSign|Provisioning profile|No profiles|requires a provisioning profile|Undefined symbols|ld:|clang: error|SwiftCompile|CompileC|node: command not found|env: node|No such file or directory|Permission denied/i.test(e),rp=e=>{let t=new Set,n=[];e.forEach((r,o)=>{la(r)&&n.push(o)});for(let r of n){let o=/PhaseScriptExecution|Command PhaseScriptExecution failed|The following build commands failed/i.test(e[r])?18:8,s=/The following build commands failed/i.test(e[r])?18:10;for(let a=Math.max(0,r-o);a<=Math.min(e.length-1,r+s);a++)t.add(a)}if(t.size===0)return e.slice(-120);let i=Array.from(t).sort((r,o)=>r-o).map(r=>e[r]);return i.length>160?i.slice(-160):i},op=(e,t,n,i)=>{let r=aa(i).replace(/\r/g,`
|
|
1338
1578
|
`).split(`
|
|
1339
|
-
`).map(
|
|
1340
|
-
${
|
|
1579
|
+
`).map(l=>l.trimEnd()).filter(Boolean),o=r.filter(la),s=o.length>0?rp(r):r.slice(-80),a=o.length>0?"Key failure output":"Last command output";return[`Command failed with code ${n}: ${e} ${t.join(" ")}`,s.length>0?`
|
|
1580
|
+
${a}:
|
|
1341
1581
|
${s.join(`
|
|
1342
|
-
`)}`:""].join("")},
|
|
1343
|
-
`)){if(/Ineligible destinations/i.test(
|
|
1344
|
-
`)),r(
|
|
1345
|
-
`)),r(
|
|
1346
|
-
`)));let
|
|
1347
|
-
`)))}let
|
|
1582
|
+
`)}`:""].join("")},sp=e=>e==="xcodebuild"&&process.env.MACH_XCODE_FULL_LOGS!=="1",ap=e=>{let t=aa(e).trim();return t?/\berror:|fatal error:|xcodebuild: error|The following build commands failed|Command PhaseScriptExecution failed|CodeSign|Provisioning profile|No profiles|requires a provisioning profile|Undefined symbols|ld:|clang: error|SwiftCompile|CompileC|CFBundleVersion|ARCHIVE SUCCEEDED|ARCHIVE FAILED|EXPORT SUCCEEDED|EXPORT FAILED|Exported .* to:|\[IPA VALID\]/i.test(t):!1},Qe=e=>{try{A.existsSync(e)&&A.rmSync(e,{recursive:!0,force:!0})}catch{}},lp=(e,t)=>{try{if(!A.existsSync(e))return;for(let n of A.readdirSync(e))t(n)&&Qe(E.join(e,n))}catch{}},Yr=e=>{N.info(k.dim("Clearing Metro/Hermes JS transform caches..."));let t=ke.tmpdir();lp(t,n=>n==="metro-cache"||n.startsWith("metro-")||n.startsWith("haste-map-")||n.startsWith("react-native-packager-cache-")),Qe(E.join(e,".expo")),Qe(E.join(e,"node_modules/.cache/metro")),Qe(E.join(ke.homedir(),".cache/metro")),Qe(E.join(ke.homedir(),".cache/react-native-packager")),Qe(E.join(ke.homedir(),"Library/Caches/metro")),Qe(E.join(ke.homedir(),"Library/Caches/react-native-packager"))},dp=e=>/Internal inconsistency error|never received target ended message/i.test(String(e?.message||e)),cp=e=>{N.warn(k.yellow("Xcode build system hit an internal inconsistency. Clearing simulator build state and retrying once...")),Qe(E.join(e,"Build")),Qe(E.join(e,"Index.noindex")),Qe(E.join(e,"ModuleCache.noindex")),Qe(E.join(e,"SourcePackages"))},up=e=>{let t=String(e?.message||e);return/Permission denied/i.test(t)&&/Pods\/.*\.sh/i.test(t)},da=e=>{let t=E.join(e,"Pods"),i=[E.join(t,"Target Support Files"),t].filter(a=>A.existsSync(a)),r=new Set,o=0,s=a=>{let l=a;try{l=A.realpathSync(a)}catch{}if(r.has(l))return;r.add(l);let d;try{d=A.readdirSync(a,{withFileTypes:!0})}catch{return}for(let c of d){let u=E.join(a,c.name);if(c.isDirectory()){s(u);continue}if(!(!c.isFile()||!c.name.endsWith(".sh")))try{let f=A.statSync(u),p=f.mode|493;p!==f.mode&&(A.chmodSync(u,p),o+=1)}catch{}}};for(let a of i)s(a);return o>0&&N.info(k.dim(`Repaired executable permissions on ${o} CocoaPods script${o===1?"":"s"}.`)),o},pp=(e,t,n,i,r)=>{let o=l=>{let d=l.filter(u=>u?.id&&String(u?.platform||"").includes("iOS Simulator")&&!u?.error),c=d.find(u=>/iphone/i.test(u.name||""))||d[0];return c?.id?`id=${c.id}`:void 0},s=l=>{let d=[],c=!1;for(let u of l.split(`
|
|
1583
|
+
`)){if(/Ineligible destinations/i.test(u)&&(c=!0),c||!u.includes("platform:iOS Simulator")||u.includes("error:"))continue;let f=u.match(/\bid:([^,}]+)/)?.[1]?.trim(),p=u.match(/\bname:([^,}]+)/)?.[1]?.trim();f&&d.push({id:f,name:p,platform:"iOS Simulator"})}return o(d)},a=[t?"-workspace":"-project",t||n,"-scheme",i,"-configuration",r,"-sdk","iphonesimulator","-showdestinations"];try{let l=Pt("xcodebuild",[...a,"-json"],{cwd:e,encoding:"utf-8",stdio:["ignore","pipe","ignore"]}),d=JSON.parse(l),c=Array.isArray(d.destinations)?d.destinations:Array.isArray(d.availableDestinations)?d.availableDestinations:[],u=o(c);if(u)return u}catch{}try{let l=Pt("xcodebuild",a,{cwd:e,encoding:"utf-8",stdio:["ignore","pipe","ignore"]});return s(l)}catch{}},Rt=(e,t,n=process.cwd(),i={},r,o)=>new Promise((s,a)=>{let l="",d=sp(e),c=Date.now(),u=["/opt/homebrew/bin","/usr/local/bin","/usr/bin","/bin","/usr/sbin","/sbin",E.join(ke.homedir(),".npm-global/bin")],p=[...(process.env.PATH||"").split(":"),...u].filter((b,_,w)=>b&&w.indexOf(b)===_).join(":");process.env[`${m.envPrefix}DEBUG`]&&console.log(k.magenta(`[${m.nameUpper}_DEBUG] Execution PATH: ${p}`));let y={...process.env,...i,PATH:p,LANG:"en_US.UTF-8",LC_ALL:"en_US.UTF-8"};r&&process.env[`${m.envPrefix}DEBUG`]&&(r(k.magenta(`[ENVIRONMENT] node: ${process.execPath}
|
|
1584
|
+
`)),r(k.magenta(`[ENVIRONMENT] PATH: ${p}
|
|
1585
|
+
`)),r(k.magenta(`[ENVIRONMENT] command: ${e} ${t.join(" ")}
|
|
1586
|
+
`)));let g=e;if(["node","npm","npx","pod"].includes(e)){let b=E.dirname(process.execPath),_=E.join(b,e);A.existsSync(_)&&(g=_,r&&r(k.dim(`[EXEC] Using absolute path: ${g}
|
|
1587
|
+
`)))}let h=oa(g,t,{stdio:"pipe",cwd:n,shell:!0,env:y,detached:process.platform!=="win32"});if(o){if(o.aborted){if(h.pid)try{process.kill(-h.pid,"SIGTERM")}catch{h.kill()}return a(new Error("Command aborted"))}o.addEventListener("abort",()=>{if(h.pid)try{process.kill(-h.pid,"SIGTERM")}catch{h.kill()}a(new Error("Command aborted"))})}let S=(b,_)=>{if(!d){_.write(b);return}let w=b.replace(/\r/g,`
|
|
1348
1588
|
`).split(`
|
|
1349
|
-
`).filter(
|
|
1589
|
+
`).filter(ap);if(w.length>0){_.write(`${w.join(`
|
|
1350
1590
|
`)}
|
|
1351
|
-
`),
|
|
1352
|
-
`),
|
|
1353
|
-
`).
|
|
1591
|
+
`),c=Date.now();return}let T=Date.now();T-c>3e4&&(_.write(`[xcodebuild] still running; detailed output is streamed to Mach logs.
|
|
1592
|
+
`),c=T)};h.stdout.on("data",b=>{let _=b.toString();l=na(l,_),S(_,process.stdout),r&&r(_)}),h.stderr.on("data",b=>{let _=b.toString();l=na(l,_),S(_,process.stderr),r&&r(_)}),h.on("close",b=>{b===0?s(b):a(new Error(op(e,t,b,l)))}),h.on("error",b=>a(b))}),xi=async(e,t,n,i,r)=>{try{await Rt("xcodebuild",e,t,n,i,r)}catch(o){if(!up(o))throw o;N.warn(k.yellow("CocoaPods script permission denied. Repairing Pods script permissions and retrying xcodebuild once...")),da(t),await Rt("xcodebuild",e,t,n,i,r)}},fp=e=>{let t=Math.floor(e/1e3%60),n=Math.floor(e/(1e3*60)%60),i=Math.floor(e/(1e3*60*60)%24),r=[];return i>0&&r.push(`${i}h`),n>0&&r.push(`${n}m`),(t>0||r.length===0)&&r.push(`${t}s`),r.join(" ")},nn=(e,t)=>{let n=[];try{if(!A.existsSync(e))return n;let i=A.readdirSync(e);for(let r of i){let o=E.join(e,r);try{let s=A.statSync(o);if(t.some(l=>r.endsWith(l))){n.push(E.resolve(o));continue}s.isDirectory()&&(n=n.concat(nn(o,t)))}catch{}}}catch{}return n},ca=(e,t)=>{let n=Hn(e);if(!n)throw new Error(`Invalid iOS CFBundleVersion from ${t}: "${e||""}". Apple requires one to three period-separated integers, for example "42" or "1.2.3". If you see "[Decryption Failed]", fix/remove the broken BUILD_NUMBER secret and rebuild.`);return n},Zr=(e,t)=>Pt("/usr/libexec/PlistBuddy",["-c",`Print :${t}`,e],{encoding:"utf-8"}).trim(),hn=(e,t)=>{try{return Zr(e,t)}catch{return""}},ia=e=>String(e||"").replace(/\.app$/i,"").replace(/[^a-z0-9]/gi,"").toLowerCase(),mp=e=>{try{return A.statSync(e).isDirectory()}catch{return!1}},gp=(e,t,n)=>{if(!A.existsSync(e))throw new Error(`iOS simulator build output directory was not found: ${e}`);let i=A.readdirSync(e).filter(d=>d.endsWith(".app")).map(d=>E.join(e,d)).filter(mp);if(i.length===0){let c=nn(e,[".app"]).map(u=>E.relative(e,u)).join(", ");throw new Error(`No top-level iOS simulator .app product was found in ${e}.`+(c?` Nested .app bundles found but ignored: ${c}`:""))}let r=new Set([t,n.iosScheme,n.scheme,n.appName].filter(Boolean).map(d=>ia(String(d))).filter(Boolean)),o=i.map(d=>{let c=E.join(d,"Info.plist"),u=A.existsSync(c)?hn(c,"CFBundleName"):"",f=A.existsSync(c)?hn(c,"CFBundleDisplayName"):"",p=A.existsSync(c)?hn(c,"CFBundleExecutable"):"",y=A.existsSync(c)?hn(c,"CFBundleIdentifier"):"",g=p?E.join(d,p):"";return{appPath:d,bundleIdentifier:y,executable:p,isValid:A.existsSync(c)&&!!p&&A.existsSync(g),names:[E.basename(d,".app"),u,f,p].map(ia).filter(Boolean)}}),s=o.filter(d=>d.isValid);if(s.length===0)throw new Error(`No valid iOS simulator .app product was found in ${e}. Candidates: `+o.map(d=>E.basename(d.appPath)).join(", "));let l=s.find(d=>d.names.some(c=>r.has(c)))||(s.length===1?s[0]:null);if(!l)throw new Error(`Multiple iOS simulator .app products were found in ${e}: `+s.map(d=>{let c=d.bundleIdentifier?` (${d.bundleIdentifier})`:"";return`${E.basename(d.appPath)}${c}`}).join(", ")+`. Set ios.scheme in ${m.configFileName} so ${m.name} can select the app target safely.`);return l.appPath},hp=(e,t)=>{let n=E.join(e,"Info.plist");if(!A.existsSync(n))throw new Error(`Could not validate iOS build number: ${n} not found.`);let i=ca(Zr(n,"CFBundleVersion"),n);return t?Kr(i,t,n):i},ua=(e,t=[])=>{if(!A.existsSync(e))return t;for(let n of A.readdirSync(e,{withFileTypes:!0})){if(!n.isDirectory()||n.isSymbolicLink())continue;let i=E.join(e,n.name);n.name!=="Frameworks"&&((n.name.endsWith(".app")||n.name.endsWith(".appex"))&&t.push(i),ua(i,t))}return t},ra=(e,t)=>[e,...ua(e)].filter((i,r,o)=>o.indexOf(i)===r).map(i=>({bundlePath:i,buildNumber:hp(i,t)})),pa=e=>{let t=E.join(e,"Info.plist");if(!A.existsSync(t))throw new Error(`Could not validate iOS app executable: ${t} not found.`);let n=hn(t,"CFBundleExecutable");if(!n)throw new Error(`Could not validate iOS app executable: CFBundleExecutable missing in ${t}.`);let i=E.join(e,n);if(!A.existsSync(i))throw new Error(`Could not validate iOS app executable: ${i} not found.`);return i},yp=()=>process.arch==="arm64"?"arm64":"x86_64",fa=e=>{let t=pa(e),n="";try{n=Pt("lipo",["-info",t],{encoding:"utf-8"}).trim()}catch(r){throw new Error(`Could not inspect iOS simulator executable architecture for ${E.basename(e)}: ${r.message}`)}let i=yp();if(!new RegExp(`\\b${i}\\b`).test(n))throw new Error(`iOS simulator app ${E.basename(e)} cannot be installed on this runner because its executable does not include the required ${i} simulator architecture. lipo output: ${n}. Check the React Native iOS project ARCHS/EXCLUDED_ARCHS settings for iphonesimulator builds.`);return n},bp=e=>{try{return Pt("xcrun",["vtool","-show-build",e],{encoding:"utf-8"}).trim()}catch(t){throw new Error(`Could not inspect iOS executable build platform for ${E.basename(e)}: ${t.message}`)}},ma=e=>{let t=pa(e),n=bp(t);if(!/\bplatform\s+IOSSIMULATOR\b/i.test(n))throw new Error(`iOS simulator app ${E.basename(e)} was built for the wrong Apple platform. A simulator artifact must contain PLATFORM IOSSIMULATOR, not an iPhone device binary. vtool output: ${n}`);return n},ga=(e,t)=>{let i=Pt("unzip",["-Z1",e],{encoding:"utf-8"}).split(`
|
|
1593
|
+
`).map(o=>o.trim()).filter(o=>/^Payload\/.+\.(?:app|appex)\/Info\.plist$/.test(o)&&!o.includes("/Frameworks/"));if(i.length===0)throw new Error(`Could not validate iOS build number: ${E.basename(e)} has no Payload/*.app/Info.plist.`);let r=A.mkdtempSync(E.join(ke.tmpdir(),`${m.nameLower}-ipa-plist-`));try{let o="";for(let[s,a]of i.entries()){let l=E.join(r,`Info-${s}.plist`),d=Pt("unzip",["-p",e,a]);A.writeFileSync(l,d);let c=`${E.basename(e)}:${a}`,u=ca(Zr(l,"CFBundleVersion"),c);t&&Kr(u,t,c),/^Payload\/[^/]+\.app\/Info\.plist$/.test(a)&&(o=u)}if(!o)throw new Error(`Could not validate iOS build number: ${E.basename(e)} has no main application Info.plist.`);return o}finally{A.rmSync(r,{recursive:!0,force:!0})}},Sp=e=>`'${e.replace(/'/g,"'\\''")}'`,Ap=()=>process.execPath&&A.existsSync(process.execPath)?process.execPath:Pt("which",["node"],{encoding:"utf-8"}).trim(),ha=(e,t,n)=>{if(!A.existsSync(e))return;let i=Ap();t.NODE_BINARY=i;let r=E.join(e,".xcode.env.local");A.writeFileSync(r,`export NODE_BINARY=${Sp(i)}
|
|
1354
1594
|
`);let o=`[NODE] Xcode NODE_BINARY: ${i}
|
|
1355
|
-
`;n&&n(
|
|
1356
|
-
\u{1F6D1} Build cancelled from dashboard. Terminating...`)),
|
|
1357
|
-
`)},
|
|
1358
|
-
`)),await
|
|
1359
|
-
`)}if(await
|
|
1360
|
-
`),
|
|
1361
|
-
`),
|
|
1362
|
-
`),
|
|
1363
|
-
|
|
1364
|
-
|
|
1365
|
-
\
|
|
1366
|
-
\
|
|
1367
|
-
|
|
1368
|
-
`)
|
|
1369
|
-
`)
|
|
1595
|
+
`;n&&n(k.dim(o)),N.info(k.dim(o.trim()))},Qr=async(e,t,n={},i,r={})=>{let o=Ti(),s=Date.now(),a=e.platform,l=e.buildProfile||"production",d=vt(e.framework),c=()=>Qt(n,l,e),u=async(U,K={})=>{if(i)for(let v=1;v<=3;v++)try{await D.patch(`/builds/${i}/${t}`,{status:U,...K});return}catch(R){let I=R?.response?.data?.message||R?.message||String(R);console.error(`[reportStatus] attempt ${v}/3 failed (status=${U}): ${I}`),v<3&&await new Promise($=>setTimeout($,2e3))}},f=new AbortController,{signal:p}=f,y=null;i&&(y=setInterval(async()=>{try{(await D.get(`/builds/${i}/${t}`)).data.status==="cancelled"&&(N.warn(k.yellow(`
|
|
1596
|
+
\u{1F6D1} Build cancelled from dashboard. Terminating...`)),f.abort(),y&&clearInterval(y))}catch{}},5e3));let g=E.join(process.cwd(),".mach-cache"),h="setup",S="",b=null,_=async()=>{if(!S||!i)return;let U=S;S="";try{let K=U;Object.values(n).forEach(v=>{if(v&&v.length>5){let R=v.replace(/[.*+?^${}()|[\]\\]/g,"\\$&");K=K.replace(new RegExp(R,"g"),"[SECRET]")}}),await D.post(`/builds/${i}/${t}/logs`,{log:K,step:h})}catch{}},w=async()=>{b&&(clearTimeout(b),b=null),await _(),ip(g,t),y&&(clearInterval(y),y=null);try{let U=E.join(ke.tmpdir(),`${m.buildPrefix}-${t}.keychain-db`);A.existsSync(U)&&(oe(`security delete-keychain "${U}"`,{stdio:"ignore"}),N.info(k.dim("\u{1F511} Build keychain deleted.")))}catch{}try{let U=E.join(ke.homedir(),"Library/MobileDevice/Provisioning Profiles");if(A.existsSync(U)){let K=A.readdirSync(U).filter(v=>v.includes(t)||v.startsWith(`${m.nameLower}-temp-${t}`));for(let v of K)A.unlinkSync(E.join(U,v))}}catch{}},T=async U=>{i&&(S+=U,S.length>=8192?(b&&(clearTimeout(b),b=null),await _()):b||(b=setTimeout(()=>{b=null,_()},2e3)))},B=async U=>{h=U,await T(`[STEP_START:${U}] ${Math.floor(Date.now()/1e3)}
|
|
1597
|
+
`)},X=async(U,K,v,R)=>await Rt(U,K,v,R,I=>{T(I)},p);N.info(k.blue(`\u{1F680} Starting local build for ${a} (${l})...`));try{np(g,t)}catch(U){throw await u("failed",{error:U.message,endTime:Date.now()}),U}await u("building"),await B("setup"),a==="ios"&&!e.simulator&&n.MACH_IOS_BUILD_NUMBER_LOCKED==="1"&&n.BUILD_NUMBER&&(N.info(k.dim(`Auto build number: ${n.BUILD_NUMBER}`)),await T(`[BUILD_NUMBER] ${n.BUILD_NUMBER}
|
|
1598
|
+
`)),await B("lock"),d.applyLocalProcessEnv(e);try{await B("clone"),N.info(k.dim("Preparing source...")),await B("read_config");let U=E.join(process.cwd(),m.configFileName);if(A.existsSync(U)){let F=JSON.parse(A.readFileSync(U,"utf-8"))?.build?.[l]||{};await T(`[CONFIG] Profile: ${l}, distribution: ${F.distribution||"not set"}, simulator: ${F.simulator||!1}
|
|
1599
|
+
`)}if(await B("read_package"),e.nodeVersion){let z=process.env.NVM_DIR||E.join(ke.homedir(),".nvm"),F=E.join(z,"versions","node"),Q;if(A.existsSync(F)){let ce=A.readdirSync(F).sort().reverse(),Be=e.nodeVersion.startsWith("v")?e.nodeVersion:`v${e.nodeVersion}`,re=ce.find(ne=>ne===Be||ne.startsWith(Be+".")||ne.startsWith(`v${e.nodeVersion}.`));re&&(Q=E.join(F,re,"bin"))}if(Q&&A.existsSync(Q)){let ce=process.env.PATH||"";process.env.PATH=`${Q}:${ce}`,await T(`[NODE] Switched to Node ${e.nodeVersion} \u2014 using ${Q}
|
|
1600
|
+
`),N.info(k.green(`\u2713 Node switched to ${e.nodeVersion} (${Q})`))}else await T(`[NODE] Warning: Node ${e.nodeVersion} not found in nvm. Run: nvm install ${e.nodeVersion} on the build machine.
|
|
1601
|
+
`),N.warn(k.yellow(`Node ${e.nodeVersion} not found in nvm \u2014 using system default`))}await B("deps"),o.start("Checking dependencies...");let K=ep(g),v=Zu(process.cwd()),R=A.existsSync("node_modules"),I=A.existsSync("yarn.lock"),$=A.existsSync("bun.lockb");R&&K.node&&K.node!==v&&(o.stop("Dependency fingerprint changed \u2014 clearing node_modules for clean install..."),await T(`[CACHE] package.json/lockfile changed \u2014 wiping node_modules
|
|
1602
|
+
`),A.rmSync(E.join(process.cwd(),"node_modules"),{recursive:!0,force:!0}),R=!1);let x="npm",P=["install","--prefer-offline"];I?(x="yarn",P=["install","--prefer-offline"]):$&&(x="bun",P=["install"]),R?o.stop("Cached node_modules found. Syncing dependencies..."):o.stop("No cached dependencies. Running fresh install..."),e.preBuild&&(N.info(k.blue("Running pre-install hook...")),N.info(k.dim(`> ${e.preBuild}`)),await B("prebuild"),await X("bash",[e.preBuild],process.cwd(),c())),N.info(k.dim(`Running ${x} ${P.join(" ")}...`)),await X(x,P,process.cwd(),c()),K.node=v,ea(g,K);let V=await d.prepareLocalProject({platform:a,options:e,cacheMeta:K,cacheMetaDir:g,currentBuildEnv:c,reportStep:B,reportLog:T,loggedRun:X,configureXcodeNodeBinary:ha,podsFingerprint:Qu,writeCacheMeta:ea}),G=V.bundleId||e.iosBundleIdentifier||"",j=V.appName||e.name||"",Y=[];if(a==="android")await B("build"),Y=await Ep(e,l,n,z=>T(z),p);else if(a==="ios"){await B("signing"),N.info(k.dim("Preparing credentials..."));let z=r?.distributionType;Y=await Ip(e,t,l,n,i,F=>T(F),p,z,F=>B(F))}if(e.postBuild&&(N.info(k.blue("Running post-build hook...")),N.info(k.dim(`> ${e.postBuild}`)),await X(e.postBuild,[],process.cwd(),c())),a==="ios"){let z=Hn(e.resolvedBuildNumber||n.BUILD_NUMBER);if(z)for(let F of Y.filter(Q=>Q.endsWith(".ipa"))){let Q=ga(F,z);await T(`[IPA FINAL] CFBundleVersion ${Q} matches MACH buildNumber ${z}
|
|
1603
|
+
`)}}if(a==="android"){let z=e.resolvedVersionCode||n.ANDROID_VERSION_CODE;if(z){let F=lt(z,"resolved MACH build assignment");if(Y.length===0)throw new Error(`Android build produced no APK or AAB to verify against MACH versionCode ${F}.`);for(let Q of Y){let ce=qr(Q,F);await T(`[ANDROID FINAL] ${E.basename(Q)} versionCode ${ce} matches MACH assignment
|
|
1604
|
+
`)}}}let de=fp(Date.now()-s);if(N.success(k.green(`
|
|
1605
|
+
\u2713 Local build completed successfully in ${de}`)),await u("building",{...G&&{bundleId:G},...j&&{appName:j}}),Y.length>0&&(N.info(k.cyan(`
|
|
1606
|
+
\u{1F4E6} Generated Artifacts:`)),Y.forEach(z=>{let F=E.resolve(z);N.info(k.dim(` - ${z}`)),N.info(k.gray(` Path: ${F}`))}),e.interactive)){let z=await Yu({message:"Install on connected device?"});if(!Li(z)&&z){if(a==="android"){let F=Y.find(Q=>Q.endsWith(".apk"))||Y[0];await vp(F,Q=>T(Q))}else if(a==="ios"){let F=Y.find(ce=>ce.endsWith(".ipa"))||Y.find(ce=>ce.endsWith(".app"))||Y[0],Q=et("ios");e.simulator?await $p(F,Q||"",ce=>T(ce)):await _p(F,Q||"",ce=>T(ce))}}}await B("upload");let L=[];for(let z of Y)try{let F=E.join(ke.tmpdir(),`${t}-${E.basename(z)}`);A.copyFileSync(z,F),L.push(F),N.info(k.dim(` \u{1F4CB} Preserved artifact: ${E.basename(z)}`))}catch{N.warn(k.yellow(` Failed to preserve artifact: ${E.basename(z)}`))}Y=L,N.info(k.dim("\u{1F9F9} Cleaning workspace (preserving dependency cache)..."));try{let z=process.cwd(),F=new Set(["node_modules"]),Q=A.readdirSync(z),ce=0;for(let Be of Q)if(!F.has(Be)){if(Be==="ios"){let re=E.join(z,"ios"),ne=A.readdirSync(re);for(let ve of ne)if(ve!=="Pods")try{A.rmSync(E.join(re,ve),{recursive:!0,force:!0}),ce++}catch{}continue}try{A.rmSync(E.join(z,Be),{recursive:!0,force:!0}),ce++}catch{}}N.info(k.dim(` Cleaned ${ce} items. Cached: node_modules${A.existsSync(E.join(z,"ios","Pods"))?", ios/Pods":""}`)),N.info(k.green("\u{1F512} Security: No source code retained on build server. Only public dependencies cached."))}catch{N.warn(k.yellow("Post-build cleanup encountered errors (non-fatal)."))}try{let F=E.join(ke.homedir(),m.workspacesDir),Q=oe(`df -k "${F}" | tail -1 | awk '{print $4}'`,{encoding:"utf8"}).trim(),ce=parseInt(Q,10)*1024;if(ce<53687091200&&A.existsSync(F)){N.info(k.dim(` \u26A0\uFE0F Low disk space (${(ce/1024/1024/1024).toFixed(0)} GB free). Running cache eviction...`));let Be=E.basename(process.cwd()),re=A.readdirSync(F).filter(ne=>ne!==Be).map(ne=>{let ve=E.join(F,ne);try{let Xe=A.statSync(ve);return Xe.isDirectory()?{name:ne,dir:ve,mtime:Xe.mtimeMs}:null}catch{return null}}).filter(Boolean);re.sort((ne,ve)=>ne.mtime-ve.mtime);for(let ne of re){if(ce>=53687091200)break;try{A.rmSync(ne.dir,{recursive:!0,force:!0}),N.info(k.dim(` \u{1F5D1}\uFE0F Evicted stale workspace: ${ne.name}`));let ve=oe(`df -k "${F}" | tail -1 | awk '{print $4}'`,{encoding:"utf8"}).trim();if(parseInt(ve,10)*1024>=53687091200)break}catch{}}}}catch{}return await w(),Y}catch(U){throw await w(),U.message==="Command aborted"?(N.warn(k.yellow(`
|
|
1607
|
+
\u274C Build aborted.`)),await u("failed",{error:"Aborted by user",endTime:Date.now()}),U):(N.error(k.red(`
|
|
1608
|
+
\u2717 Local build failed: ${U.message}`)),await u("failed",{error:U.message,endTime:Date.now()}),U)}},Ep=async(e,t,n={},i,r)=>{let o=A.existsSync("android/gradlew")?"android/gradlew":A.existsSync("gradlew")?"./gradlew":null;if(!o)throw new Error("Could not find gradlew. Is this an Android project?");let s=e.developmentClient?"assembleDebug":"assembleRelease";!e.developmentClient&&e.distribution==="store"?s="bundleRelease":!e.developmentClient&&e.distribution==="internal"&&(s="assembleRelease");let a=e.buildCommand||s;N.info(k.blue(`Running Android build: ${a}...`));let l=o.includes("android/")?"android":".",d=(o.includes("android/"),"./gradlew"),c=[a],u=vt(e.framework),f={...n,...u.localAndroidEnv(e,t),MACH_APP_NAME:e.appName||e.name||"App"},p=e.resolvedVersionCode||n.ANDROID_VERSION_CODE,y=p?lt(p,"resolved MACH build assignment"):null;y&&(c.push(`-Pandroid.injected.version.code=${y}`),f.ANDROID_VERSION_CODE=y,N.info(k.green(`\u2713 Applying Android versionCode ${y}`)));for(let S of["app/build","build",".cxx"]){let b=E.join(l,S);A.existsSync(b)&&A.rmSync(b,{recursive:!0,force:!0})}Yr(process.cwd()),await Rt(d,c,l,f,i,r);let g=E.join(l,"app/build/outputs"),h=nn(g,[".apk",".aab"]);if(y&&h.length===0)throw new Error(`Android build produced no APK or AAB to verify against MACH versionCode ${y}.`);if(y)for(let S of h){let b=qr(S,y);N.info(k.dim(`Validated Android versionCode ${b} in ${E.basename(S)}`)),i?.(`[ANDROID VALID] ${E.basename(S)} versionCode ${b} matches MACH assignment
|
|
1609
|
+
`)}return h},Ip=async(e,t,n,i={},r,o,s,a,l)=>{if(process.platform!=="darwin")throw new Error("iOS builds can only be run on macOS.");let d=E.resolve(process.cwd(),A.existsSync("ios")?"ios":".");da(d);let c=A.readdirSync(d),u=c.find(T=>T.endsWith(".xcworkspace")),f=c.find(T=>T.endsWith(".xcodeproj")),p=Qt(i,n,e);ha(d,p,o);let y=e.resolvedBuildNumber||p.BUILD_NUMBER||p.CURRENT_PROJECT_VERSION,g=Hn(y);if(y&&!g)throw new Error(`Invalid iOS build number: "${y}". Apple requires one to three period-separated integers. Fix the Dashboard secret or remove it so Mach can use its auto build number.`);let h=g?[`BUILD_NUMBER=${g}`,`CURRENT_PROJECT_VERSION=${g}`,`INFOPLIST_KEY_CFBundleVersion=${g}`]:[];if(g&&(p.BUILD_NUMBER=g,p.CURRENT_PROJECT_VERSION=g,N.info(k.dim(`Using iOS build number: ${g}`))),!u&&!f)throw new Error("Could not find Xcode workspace or project in ios/ directory.");try{let T=oe("xcode-select -p").toString().trim();N.info(k.dim(`Using Xcode at: ${T}`))}catch{N.warn(k.dim("Could not detect Xcode path."))}N.info(k.blue("Running iOS build via xcodebuild..."));let S=u?u.replace(".xcworkspace",""):f?.replace(".xcodeproj",""),b=e.iosScheme||S||e.scheme,_=e.developmentClient?"Debug":e.iosConfiguration||"Release",w;try{if(g){w=Js(d,g,{workspace:u,project:f,scheme:b,configuration:_});let R=w.plistPaths.length>0?`${w.plistPaths.length} Xcode target Info.plist file(s)`:"generated Info.plist build settings";N.info(k.green(`\u2713 Applied iOS buildNumber ${g} to ${R}`)),o&&o(`[VERSIONING] Applied iOS buildNumber ${g} to ${R}
|
|
1610
|
+
`)}let T=(r||"default").replace(/[^a-zA-Z0-9-_]/g,"_"),B=E.join(ke.homedir(),`Library/Developer/Xcode/DerivedData/${m.nameLower}`,T);A.mkdirSync(B,{recursive:!0});let X=mn(p),U=E.join(B,".mach-env-hash"),K=E.join(B,"Build"),v=A.existsSync(U)?A.readFileSync(U,"utf-8").trim():"";if(A.existsSync(K)){let R=v&&v!==X?"Build environment changed \u2014 clearing iOS DerivedData build products.":v?"Clearing iOS DerivedData build products to force a fresh JS bundle.":"DerivedData has no environment stamp \u2014 clearing iOS build products.";N.info(k.dim(R)),A.rmSync(K,{recursive:!0,force:!0})}if(A.writeFileSync(U,X),Yr(process.cwd()),e.simulator){let R=pp(d,u,f,b,_),I=R||"generic/platform=iOS Simulator",$=["-destination",I];N.info(k.dim(R?`Building for simulator (Scheme: ${b}, Config: ${_}, Destination: ${I})...`:`Building for simulator (Scheme: ${b}, Config: ${_}, Destination: ${I})...`));let x=[u?"-workspace":"-project",u||f,"-scheme",b,"-configuration",_,"-sdk","iphonesimulator",...$,"-derivedDataPath",B,...h,"COMPILER_INDEX_STORE_ENABLE=NO","CODE_SIGNING_ALLOWED=NO","CODE_SIGNING_REQUIRED=NO","ONLY_ACTIVE_ARCH=NO","EXCLUDED_ARCHS=","SUPPORTED_PLATFORMS=iphonesimulator"];try{await xi(x,d,p,o,s)}catch(Q){if(!dp(Q))throw Q;cp(B),Yr(process.cwd()),await xi(x,d,p,o,s)}let P=E.join(B,"Build/Products",`${_}-iphonesimulator`),V=gp(P,b,e),G=E.basename(V,".app"),j=hn(E.join(V,"Info.plist"),"CFBundleIdentifier")||"unknown bundle",de=ra(V,g||void 0)[0].buildNumber,L=fa(V),z=ma(V),F=E.join(P,`${G}_simulator.zip`);return N.info(k.dim(`Selected simulator app: ${E.relative(P,V)} (${j}, build ${de})`)),N.info(k.dim(`Simulator executable architecture: ${L}`)),N.info(k.dim(`Simulator executable platform: ${z.split(`
|
|
1611
|
+
`).find(Q=>/\bplatform\b/i.test(Q))?.trim()||"IOSSIMULATOR"}`)),N.info(k.dim(`Creating simulator artifact: ${F}...`)),Qe(F),Pt("zip",["-r",F,E.basename(V)],{cwd:E.dirname(V),stdio:"pipe"}),[F]}else{N.info(k.dim(`Archiving (Scheme: ${b}, Config: ${_})...`));let R=E.join(d,"build.xcarchive"),I=E.join(d,"export");A.rmSync(R,{recursive:!0,force:!0}),A.rmSync(I,{recursive:!0,force:!0});let $=i.IOS_DIST_P12,x=i.IOS_PROVISIONING_PROFILE,P=i.IOS_P12_PASSWORD||"",V=[],G,j,Y={isAppStore:!1,isDevelopment:!1};if($&&x){N.info(k.blue("\u{1F510} CI/CD Signing: Importing certificates..."));try{let re=`${m.buildPrefix}-${t}.keychain-db`,ne=E.join(ke.tmpdir(),re),ve=m.keychainPassword;oe(`security create-keychain -p "${ve}" "${ne}" 2>/dev/null || true`),oe(`security set-keychain-settings -t 3600 -l "${ne}"`),oe(`security unlock-keychain -p "${ve}" "${ne}"`);let Xe=E.join(ke.tmpdir(),`cert-${t}.p12`),Nn=Buffer.from($,"base64");A.writeFileSync(Xe,Nn),N.info(k.dim(`P12 data size: ${Nn.length} bytes, first bytes: ${Nn.slice(0,4).toString("hex")}`)),(Nn.length<100||Nn[0]!==48)&&(N.warn(k.yellow("\u26A0\uFE0F P12 data looks corrupted or was not decrypted correctly.")),N.warn(k.yellow(" This usually means MACH_ENCRYPTION_KEY on the Remote API differs from when credentials were uploaded.")));let eu=[P,"",m.keychainPassword],bs=!1;for(let Me of eu)try{oe(`security import "${Xe}" -k "${ne}" -P "${Me}" -A -T /usr/bin/codesign -T /usr/bin/security`,{stdio:"pipe"}),bs=!0,N.info(k.dim(`\u2713 P12 imported successfully with password: ${Me?"[set]":"[empty]"}`));break}catch(at){N.info(k.dim(` P12 import attempt with password ${Me?`"${Me.substring(0,3)}..."`:"[empty]"} failed: ${at.message?.split(`
|
|
1612
|
+
`)[0]||"unknown"}`))}if(!bs)throw new Error("Failed to import P12.");A.unlinkSync(Xe),oe(`security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k "${ve}" "${ne}"`);let tu=oe("security list-keychains -d user",{encoding:"utf-8"}).split(`
|
|
1613
|
+
`).map(Me=>Me.trim().replace(/^"|"$/g,"")).filter(Me=>Me.length>0),nu=[ne,...tu].map(Me=>`"${Me}"`).join(" ");oe(`security list-keychains -d user -s ${nu}`),oe(`security default-keychain -s "${ne}"`);let Nr=E.join(ke.homedir(),"Library/MobileDevice/Provisioning Profiles");A.mkdirSync(Nr,{recursive:!0});let Ss=Buffer.from(x,"base64"),xr=E.join(Nr,`${m.nameLower}-temp-${t}.mobileprovision`);A.writeFileSync(xr,Ss);let Tr=Ss.toString("utf-8"),As=/<key>get-task-allow<\/key>\s*<true\/>/.test(Tr);Y={isAppStore:!Tr.includes("<key>ProvisionedDevices</key>")&&!As,isDevelopment:As};try{let at=oe(`security cms -D -i "${xr}"`,{encoding:"utf-8"}).match(/<key>UUID<\/key>\s*<string>([^<]+)<\/string>/);j=at?at[1]:void 0}catch{let at=Tr.match(/<key>UUID<\/key>\s*<string>([^<]+)<\/string>/);j=at?at[1]:void 0}j||(N.warn("Could not extract UUID from provisioning profile. Using fallback."),j=`${m.nameLower}-${t}`);let Lr=E.join(Nr,`${j}.mobileprovision`);A.existsSync(Lr)&&A.unlinkSync(Lr),A.renameSync(xr,Lr);try{let Me=oe(`security find-identity -v -p codesigning "${ne}"`,{encoding:"utf-8"}),at=Array.from(Me.matchAll(/"((?:Apple|iPhone) (?:Distribution|Developer|Development)[^"]*)"/g),xn=>xn[1]),Es=Y.isDevelopment?at.find(xn=>/\b(Development|Developer)\b/.test(xn)):at.find(xn=>/\bDistribution\b/.test(xn)),Is=at[0];(Es||Is)&&(G=Es||Is,N.info(k.blue(`Identity auto-detected from keychain: "${G}"`)))}catch{}G||(G=Y.isDevelopment?"Apple Development":"Apple Distribution",N.info(k.blue(`Identity fallback (profile heuristic): "${G}"`))),N.info(k.dim(`Profile type: ${Y.isDevelopment?"Development":Y.isAppStore?"App Store":"Ad-Hoc"}`)),N.info(k.dim(`Identity Detection: get-task-allow=${Y.isDevelopment}, Selected Identity="${G}"`)),V.push("CODE_SIGN_STYLE=Manual"),V.push(`CODE_SIGN_IDENTITY="${G}"`),V.push(`PROVISIONING_PROFILE_SPECIFIER=${j}`),e.iosTeamId&&V.push(`DEVELOPMENT_TEAM=${e.iosTeamId}`)}catch(re){throw N.error(`Signing setup failed: ${re.message}`),re}}else V.push("-allowProvisioningUpdates"),e.iosTeamId&&V.push(`DEVELOPMENT_TEAM=${e.iosTeamId}`);l&&await l("archive"),N.info(k.blue(`Archive detected Identity: "${G}"`)),N.info(k.blue(`Archive detected UUID: "${j}"`)),await xi(["archive",u?"-workspace":"-project",u||f,"-scheme",b,"-configuration",_,"-archivePath",R,"-derivedDataPath",B,...h,...V],d,p,o,s);let de=nn(E.join(R,"Products","Applications"),[".app"]);for(let re of de)for(let ne of ra(re,g||void 0))N.info(k.dim(`Validated iOS CFBundleVersion ${ne.buildNumber} in ${E.basename(ne.bundlePath)}`));let L;j?(Y.isAppStore?L="app-store":Y.isDevelopment?L="development":L="ad-hoc",N.info(k.blue(`Export method from profile: "${L}"`))):(L=e.distribution==="store"?"app-store":e.distribution==="internal"?"ad-hoc":"development",N.warn(k.yellow(`No profile UUID detected. Export method from distribution flag: "${L}"`)));let z=e.iosExportMethod||L,F=e.iosBundleIdentifier||et("ios"),Q=E.join(d,"ExportOptions.plist"),ce=`<?xml version="1.0" encoding="UTF-8"?>
|
|
1370
1614
|
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
|
|
1371
1615
|
<plist version="1.0">
|
|
1372
1616
|
<dict>
|
|
1373
1617
|
<key>method</key>
|
|
1374
|
-
<string>${
|
|
1618
|
+
<string>${z}</string>
|
|
1375
1619
|
<key>destination</key>
|
|
1376
1620
|
<string>export</string>
|
|
1377
1621
|
<key>signingStyle</key>
|
|
1378
|
-
<string>${
|
|
1622
|
+
<string>${j?"manual":"automatic"}</string>
|
|
1379
1623
|
<key>thinning</key>
|
|
1380
1624
|
<string><none></string>
|
|
1381
1625
|
${e.iosTeamId?`<key>teamID</key><string>${e.iosTeamId}</string>`:""}
|
|
1382
|
-
${
|
|
1626
|
+
${F&&j?`
|
|
1383
1627
|
<key>provisioningProfiles</key>
|
|
1384
1628
|
<dict>
|
|
1385
|
-
<key>${
|
|
1386
|
-
<string>${
|
|
1629
|
+
<key>${F}</key>
|
|
1630
|
+
<string>${j}</string>
|
|
1387
1631
|
</dict>`:""}
|
|
1388
1632
|
</dict>
|
|
1389
|
-
</plist>`;if(
|
|
1390
|
-
${
|
|
1633
|
+
</plist>`;if(A.writeFileSync(Q,ce),process.env[`${m.envPrefix}DEBUG`]&&N.info(k.magenta(`[${m.nameUpper}_DEBUG] ExportOptions.plist:
|
|
1634
|
+
${ce}`)),l&&await l("export"),N.info(k.blue(`Exporting with Bundle ID: "${F}"`)),N.info(k.blue(`Exporting with Method: "${z}"`)),o){o(k.magenta(`
|
|
1391
1635
|
[DIAGNOSTIC] Checking available signing identities...
|
|
1392
|
-
`));try{let
|
|
1393
|
-
`))}catch(
|
|
1394
|
-
`))}}await
|
|
1395
|
-
`),o&&o(`[IPA VALID] CFBundleVersion ${
|
|
1396
|
-
`)}catch(
|
|
1397
|
-
`),new Error(ve)}return
|
|
1398
|
-
`).slice(1).map(s=>s.trim()).filter(s=>s.length>0&&!s.startsWith("*")).map(s=>s.split(" ")[0]).length===0){
|
|
1399
|
-
`).filter(
|
|
1400
|
-
`).find(
|
|
1636
|
+
`));try{let re=oe("security find-identity -v -p codesigning",{encoding:"utf-8"});o(k.magenta(`${re}
|
|
1637
|
+
`))}catch(re){o(k.red(`[DIAGNOSTIC] Failed to list identities: ${re.message}
|
|
1638
|
+
`))}}await xi(["-exportArchive","-archivePath",R,"-exportPath",I,"-exportOptionsPlist",Q],d,p,o,s),l&&await l("validate");let Be=nn(I,[".ipa"]);for(let re of Be)try{oe(`unzip -t "${re}"`,{stdio:"pipe"});let ne=ga(re,g||void 0);o&&o(`[IPA VALID] ${E.basename(re)} \u2014 archive integrity OK
|
|
1639
|
+
`),o&&o(`[IPA VALID] CFBundleVersion ${ne}
|
|
1640
|
+
`)}catch(ne){let ve=`IPA validation failed for ${E.basename(re)}: ${ne.message||"archive may be corrupt"}`;throw o&&o(`[IPA CORRUPT] ${ve}
|
|
1641
|
+
`),new Error(ve)}return Be}}finally{w?.restore()}},et=e=>{try{let t=E.join(process.cwd(),m.configFileName);if(A.existsSync(t)){let n=JSON.parse(A.readFileSync(t,"utf-8"));if(e==="android"&&n.android?.package)return n.android.package;if(e==="ios"&&n.ios?.bundleIdentifier)return n.ios.bundleIdentifier}if(e==="android"){let n=["android/app/build.gradle","app/build.gradle","build.gradle"];for(let i of n)if(A.existsSync(i)){let o=A.readFileSync(i,"utf-8").match(/applicationId\s+['"]([^'"]+)['"]/);if(o)return o[1]}}else{let n=E.resolve(process.cwd(),A.existsSync("ios")?"ios":"."),i=nn(n,["Info.plist"]).filter(s=>!s.includes("/Pods/")&&!s.includes("/build/")&&!s.includes("/DerivedData/"));i.sort((s,a)=>a.split("/").length-s.split("/").length);for(let s of i){let l=A.readFileSync(s,"utf-8").match(/<key>CFBundleIdentifier<\/key>\s*<string>([^<]+)<\/string>/);if(l&&!l[1].includes("$"))return l[1]}let r=nn(n,[".xcodeproj"]);if(r.length>0){let s=E.join(r[0],"project.pbxproj");if(A.existsSync(s)){let l=A.readFileSync(s,"utf-8").match(/PRODUCT_BUNDLE_IDENTIFIER\s*=\s*"?([^";\s]+)"?;/);if(l)return l[1]}}let o=["app.json","app.config.json","app.config.js","app.config.ts"];for(let s of o)if(A.existsSync(s)){let l=A.readFileSync(s,"utf-8").match(/"bundleIdentifier":\s*"([^"]+)"/);if(l)return l[1]}}}catch{return null}return null},wp=()=>{try{return oe("emulator -version",{stdio:"ignore"}),"emulator"}catch{let t=ke.homedir(),n=[E.join(t,"Library/Android/sdk/emulator/emulator"),E.join(t,"Android/Sdk/emulator/emulator"),"/usr/local/lib/android/sdk/emulator/emulator"];for(let i of n)if(A.existsSync(i))return i}return"emulator"},vp=async(e,t)=>{let n=Ti();try{if(oe("adb devices").toString().split(`
|
|
1642
|
+
`).slice(1).map(s=>s.trim()).filter(s=>s.length>0&&!s.startsWith("*")).map(s=>s.split(" ")[0]).length===0){N.warn(k.yellow("No Android devices or emulators found."));let s=wp(),a=[];try{a=oe(`${s} -list-avds`).toString().split(`
|
|
1643
|
+
`).filter(l=>l.trim().length>0)}catch{}if(a.length>0){let l=await Xr({message:"Select an emulator to launch:",options:a.map(u=>({value:u,label:u}))});if(Li(l))return;n.start(`Launching emulator ${l}...`),oa(s,["-avd",l],{detached:!0,stdio:"ignore"}).unref();let d=0,c=!1;for(;d<60;){try{if(oe("adb shell getprop sys.boot_completed",{stdio:"pipe"}).toString().trim()==="1"){c=!0;break}}catch{}await new Promise(u=>setTimeout(u,2e3)),d++}if(!c)throw n.stop("Emulator launch timed out."),new Error("Emulator launch timed out. Please try launching it manually.");n.stop("Emulator launched.")}else throw new Error("No devices found and no emulators available to launch. (Make sure Android SDK is installed)")}n.start("Installing APK on device..."),await Rt("adb",["install","-r",e],process.cwd(),{},t),n.stop("Installation complete.");let o=et("android");if(o){N.info(k.blue(`\u{1F680} Launching ${o}...`));try{oe(`adb shell dumpsys package ${o}`).toString().split(`
|
|
1644
|
+
`).find(l=>l.includes("android.intent.action.MAIN")&&l.includes("android.intent.category.LAUNCHER"))?oe(`adb shell monkey -p ${o} -c android.intent.category.LAUNCHER 1`,{stdio:"ignore"}):oe(`adb shell monkey -p ${o} -c android.intent.category.LAUNCHER 1`,{stdio:"ignore"})}catch{N.warn("Could not auto-launch app. You may need to open it manually.")}}}catch(i){n.stop("Installation failed."),N.error(k.red(`Failed to install APK: ${i.message}`))}},$p=async(e,t,n)=>{let i=Ti();try{if(!oe("xcrun simctl list devices booted").toString().includes("(Booted)")){N.warn(k.yellow("No iOS Simulator is currently booted."));let o=oe("xcrun simctl list devices --json").toString(),s=JSON.parse(o).devices,a=[];Object.keys(s).forEach(u=>{s[u].forEach(f=>{f.isAvailable&&a.push({...f,runtime:u})})});let l=await Xr({message:"Select a simulator to launch:",options:a.map(u=>({value:u.udid,label:`${u.name} (${u.runtime.split(".").pop()})`}))});if(Li(l))return;i.start(`Booting ${l}...`),oe(`xcrun simctl boot ${l}`),oe(`open -a Simulator --args -CurrentDeviceUDID ${l}`);let d=0,c=!1;for(;d<30;){try{if(oe("xcrun simctl list devices booted").toString().includes(l)){c=!0;break}}catch{}await new Promise(u=>setTimeout(u,2e3)),d++}if(!c)throw i.stop("Simulator boot timed out."),new Error("Simulator boot timed out.");i.stop("Simulator booted.")}i.start("Installing on iOS Simulator..."),fa(e),ma(e),await Rt("xcrun",["simctl","install","booted",e],process.cwd(),{},n),i.stop("Installation complete."),N.info(k.blue(`\u{1F680} Launching ${t}...`)),await Rt("xcrun",["simctl","launch","booted",t],process.cwd(),{},n)}catch(r){i.stop("Installation failed."),N.error(k.red(`Failed to install on Simulator: ${r.message}`))}},_p=async(e,t,n)=>{let i=Ti();i.start("Scanning for connected iOS devices...");try{let r=oe("xcrun devicectl list devices --json-output -").toString(),s=(JSON.parse(r).result?.devices||[]).filter(l=>l.connectionProperties?.transportType==="wired"||l.connectionProperties?.transportType==="localNetwork");if(s.length===0)throw i.stop("No connected iOS devices found."),new Error("Please connect your iPhone via USB or ensure it is on the same Wi-Fi for wireless debugging.");let a=s[0].identifier;if(s.length>1){i.stop();let l=await Xr({message:"Select a device to install on:",options:s.map(d=>({value:d.identifier,label:`${d.deviceProperties?.name||d.name||d.model?.name} (${d.model?.name||"iPhone"}) - ${d.identifier}`}))});if(Li(l))return;a=l,i.start(`Installing on ${a}...`)}else i.message(`Installing on ${s[0].model.name}...`);await Rt("xcrun",["devicectl","device","install","app","--device",a,e],process.cwd(),{},n),i.stop("Installation complete."),N.info(k.blue(`\u{1F680} Launching ${t}...`)),await Rt("xcrun",["devicectl","device","launch","app","--device",a,t],process.cwd(),{},n)}catch(r){i.stop("Installation failed."),N.error(k.red(`Failed to install on device: ${r.message}`)),N.info(k.dim('Make sure your device is unlocked and "Developer Mode" is enabled in Settings -> Privacy & Security.'))}};import eo from"fs";import Ui from"path";import{spawnSync as Pp}from"child_process";var Te=e=>{if(typeof e!="string")return;let t=e.trim();return t.length>0?t:void 0},ya=e=>e==null?void 0:Te(String(e)),Sa=e=>{if(!eo.existsSync(e))return null;try{return JSON.parse(eo.readFileSync(e,"utf-8"))}catch{return null}},Rp=e=>{let t=e.trim();if(!t)return null;try{return JSON.parse(t)}catch{let n=t.indexOf("{"),i=t.lastIndexOf("}");if(n<0||i<=n)return null;try{return JSON.parse(t.slice(n,i+1))}catch{return null}}};function ba(e=process.cwd()){let t=Sa(Ui.join(e,"package.json"))||{};return Te(t.version)}function Cp(e=process.cwd()){let t=Sa(Ui.join(e,"package.json"))||{},n={...t.dependencies||{},...t.devDependencies||{}};if(n.expo)return"expo";if(n["react-native"])return"react-native"}function Aa(e=process.cwd(),t={}){let n=process.platform==="win32"?Ui.join(e,"node_modules",".bin","expo.cmd"):Ui.join(e,"node_modules",".bin","expo"),i=eo.existsSync(n),s=Pp(i?n:"npx",i?["config","--type","public","--json"]:["--no-install","expo","config","--type","public","--json"],{cwd:e,encoding:"utf-8",stdio:["ignore","pipe","pipe"],env:{...process.env,EXPO_NO_TELEMETRY:"1",...t}});return s.error||s.status!==0?null:Rp(s.stdout||"")}var Ea=e=>{let t=Te(e);if(!(!t||t==="manual"))return t},Mi=(e,t,n,i={})=>{let r=Te(e);if(r)return r;if(!e||typeof e!="object")return;let o=Te(e.policy);if(o==="appVersion")return Te(t.version);if(o==="sdkVersion")return Te(t.sdkVersion);if(o==="nativeVersion"){let s=Te(t.version);if(!s||!n)return;let a=n==="ios"?ya(i.iosBuildNumber)||ya(t.ios?.buildNumber):i.androidVersionCode!==void 0?String(i.androidVersionCode).trim():t.android?.versionCode!==void 0?String(t.android.versionCode).trim():void 0;return!a||a.toLowerCase()==="auto"?s:a?`${s}(${a})`:s}};function Op(e,t,n={},i){let r=t?Mi(e[t]?.runtimeVersion,e,t,n):void 0;if(r)return r;let o=Mi(e.runtimeVersion,e,t,n);return o||(i?Mi({policy:i},e,t,n):void 0)}function Dp(e,t){if(!(!e||typeof e!="object"))return Te(t?e[t]?.runtimeVersion:void 0)||Te(e.runtimeVersion)}function zn(e,t){let n=Aa(e,{MACH_OTA_RUNTIME_VERSION:t.runtimeVersion,MACH_OTA_CHANNEL:t.channel,MACH_OTA_URL:t.url});return n?{runtimeVersion:Dp(n,t.platform),channel:Te(n.updates?.requestHeaders?.["expo-channel-name"]),url:Te(n.updates?.url),expoConfig:n}:null}function kp(e,t,n={}){let i=Te(n.runtimeVersion)||Te(e.ota?.runtimeVersion);if(i)return i;let r={iosBuildNumber:n.iosBuildNumber,androidVersionCode:n.androidVersionCode},o=Ea(e.ota?.runtimeVersionPolicy);if(o){let s=Mi({policy:o},t,n.platform,r);if(s)return s}return Op(t,n.platform,r)}function Kn(e,t={}){let n=t.cwd||process.cwd(),i=Te(t.runtimeVersion)||Te(e.ota?.runtimeVersion);if(i)return i;let r=Ea(e.ota?.runtimeVersionPolicy),o={iosBuildNumber:t.iosBuildNumber,androidVersionCode:t.androidVersionCode};if((t.framework||e.framework||Cp(n))==="expo"){let a=Aa(n),l=a?kp(e,a,{platform:t.platform,iosBuildNumber:o.iosBuildNumber,androidVersionCode:o.androidVersionCode}):void 0;if(l)return l}return ba(n)||"1.0.0"}import M from"fs";import bn from"os";import q from"path";import{spawn as Ca,spawnSync as bt}from"child_process";import{randomUUID as Np}from"crypto";import{pipeline as xp}from"stream/promises";import{isCancel as ro,log as H,select as Oa,spinner as Jn,text as Tp}from"@clack/prompts";import Wn from"axios";import W from"chalk";import Fi from"adm-zip";var Lp={android:"pixel_6",ios:"iphone_17_pro"};function oo(e){return Lp[e]}async function Da(e){if(e.localRunner){let n=await jp(e);process.exitCode=n?n.exitCode:1;return}if(e.local){let n=await Hp(e);n&&(process.exitCode=n.exitCode);return}let t=await co(e);if(t&&(H.success(W.green(`Maestro run ${t.status||"queued"}: ${t.testRunId}`)),t.launchDeferredReason&&H.warn(W.yellow(t.launchDeferredReason)),t.dashboardUrl&&H.info(W.dim("View test run: ")+W.white.underline(t.dashboardUrl)),e.wait)){let n=await Vp(e,t);n&&(process.exitCode=n.status==="passed"?0:1)}}var Mp=new Set(["passed","failed","cancelled","interrupted"]),Ia=Number(process.env.MACH_FLOW_UPLOAD_MAX_ATTEMPTS||4),Up=Number(process.env.MACH_FLOW_UPLOAD_TIMEOUT_MS||12e4),ka=process.env.MACH_MAESTRO_FAST_FAIL_RETRY==="1";function lo(e){let t=Array.isArray(e)?e:e?[e]:[];return[...new Set(t.flatMap(n=>String(n||"").split(",")).map(n=>n.trim()).filter(Boolean))]}function Fp(e){let t=lo(e);if(t.length===0)return;let n={};for(let i of t){let r=process.env[i];r!==void 0&&(n[i]=r)}return Object.keys(n).length>0?n:void 0}function Bp(e){let t={};for(let[i,r]of Object.entries(process.env))i.startsWith("MAESTRO_TEST_")&&r!==void 0&&(t[i]=r);let n=lo(e);for(let i of n){let r=process.env[i];r!==void 0&&(t[i]=r)}return t}async function jp(e){let t=e.projectId,n=e.testRunId,i=e.runnerToken||process.env.MACH_RUNNER_TOKEN||process.env.MACH_TOKEN,r=(process.env.MACH_API_URL||xt).replace(/\/$/,""),o=M.mkdtempSync(q.join(bn.tmpdir(),"mach-maestro-runner-")),s=q.join(o,"mach-maestro-output"),a=q.join(o,"runner.log");if(M.mkdirSync(s,{recursive:!0}),!t||!n||!i)return H.error(W.red("--local-runner requires --project-id, --test-run-id, and a runner token.")),{status:"failed",exitCode:1,attempts:0,flows:".maestro",platform:e.platform};let l=null,d=null,c=null,u,f,p=g=>{M.appendFileSync(a,`${g}${g.endsWith(`
|
|
1401
1645
|
`)?"":`
|
|
1402
|
-
`}`)},g=async(h,S)=>{try{await Mn.post(`${r}/internal/tests/${encodeURIComponent(n)}/runner`,{projectId:t,runnerToken:i,status:h,error:S,logPreview:sp(l),device:p,junitUrl:a?.urls?.junitDownloadUrl,logsUrl:a?.urls?.logsDownloadUrl,artifactsUrl:a?.urls?.artifactsDownloadUrl})}catch(b){f(`[WARN] Could not post runner update: ${b.message||b}`)}};try{f(`Mach Maestro local runner starting for ${n}`);let h=await Mn.post(`${r}/internal/tests/${encodeURIComponent(n)}/runner-payload`,{projectId:t,runnerToken:i});if(h.data?.status!=="success"||!h.data?.payload)throw new Error(h.data?.message||"Runner payload was not returned.");a=h.data.payload;let S=Object.keys(a.env||{});f(`Using Maestro env vars: ${S.length>0?S.join(", "):"none"}`);let b={...process.env,...a.env||{}},y=ap(a.env);y.length>0&&f(`Passing Maestro env vars to test command: ${S.sort().join(", ")}`),await g("running");let P=a.platform==="android"?"app.apk":"app.zip",v=V.join(o,P),F=V.join(o,"source.zip"),H=V.join(o,"source");L.mkdirSync(H,{recursive:!0}),f("Downloading app artifact..."),await Hr(a.artifactUrl,v),f(`Downloaded app artifact: ${P} (${Xs(L.statSync(v).size)})`),f("Downloading Maestro source..."),await Hr(a.urls.sourceUrl,F),f(`Downloaded Maestro source: source.zip (${Xs(L.statSync(F).size)})`),new $i(F).extractAllTo(H,!0);let q=lp(H,a.flowPath||".maestro");if(!L.existsSync(q))throw new Error(`Maestro flow path not found: ${a.flowPath||".maestro"}`);if(f(`Resolved Maestro flow path: ${V.relative(H,q)||"."}`),a.platform==="ios"){let A=await mp(a.device||Br("ios"),l);d=A.udid,p=A.name,await g("running");let N=gp(v,o),U=ua(N,l);f(`Resolved iOS app bundle: ${N}`),f(`Resolved iOS bundle id: ${U||"unknown"}`),yp(N,l,A.udid),Gr("xcrun",["simctl","install",A.udid,N],l),U&&(u={platform:a.platform,appId:U,deviceId:A.udid}),U&&$t("xcrun",["simctl","get_app_container",A.udid,U,"app"],l),Mr(s,l,"ios-before-maestro.png",A.udid),a.record&&(c=hp(s,l,A.udid))}else{let A=Ap(v,l),N=bp(a.device,l);d=N||void 0,p=a.device||Br("android");let U=N?["-s",N]:[];f(`Resolved Android application id: ${A||"unknown"}`),Gr("adb",[...U,"install","-r",v],l),A&&(u={platform:a.platform,appId:A,deviceId:N||void 0})}let _=Math.max(0,Math.min(10,Number(a.retries??1)))+1,M=V.join(s,"report.xml"),x=pp(l);if(!x)throw new Error("Maestro CLI not found on this runner. Install Maestro or set MAESTRO_BIN to the full maestro path.");let E=1;for(let A=1;A<=_;A+=1){f(`Running Maestro attempt ${A}/${_}...`);let N=[...d?["--device",d]:[],"test","--platform",a.platform,...y,q,"--format","junit","--output",M,"--test-output-dir",s];if(oa&&A<_?E=(await da(x,N,{logPath:l,env:b,fastFailOnFlowFailure:!0})).exitCode:E=$t(x,N,l,void 0,b),E===0)break}return a.platform==="ios"&&Mr(s,l,"ios-after-maestro.png",d),await Zs(c,l),c=null,await ta(a.urls,o,s,l),E===0?(await g("passed"),j.success(B.green(`Managed Maestro run passed: ${n}`)),{status:"passed",exitCode:0,attempts:_,flows:a.flowPath,platform:a.platform}):(await g("failed",`Maestro exited with code ${E}`),j.error(B.red(`Managed Maestro run failed with exit code ${E}`)),{status:"failed",exitCode:E,attempts:_,flows:a.flowPath,platform:a.platform})}catch(h){let S=h.message||String(h);return f(`MACH_MAESTRO_RUN_FAILED: ${S}`),a?.platform==="ios"&&Mr(s,l,"ios-after-failure.png",d),await Zs(c,l),a?.urls&&await ta(a.urls,o,s,l),await g("failed",S),j.error(B.red(`Managed Maestro runner failed: ${S}`)),{status:"failed",exitCode:1,attempts:0,flows:a?.flowPath||".maestro",platform:a?.platform||e.platform}}finally{Sp(u,l)}}async function Xu(e){let t=e.maestroFlows||".maestro",n=aa(e.maestroRetries);if(n===null)return null;let i=V.resolve(t);if(!L.existsSync(i))return j.error(B.red(`Maestro flows not found: ${t}`)),{status:"failed",exitCode:1,attempts:0,flows:t,platform:e.platform};let r=await ip(e);if(r?.url){if(!await op(r))return{status:"failed",exitCode:1,attempts:0,flows:t,platform:r.platform||e.platform}}else if(e.buildId||e.buildUrl||e.artifactUrl||e.latest)return{status:"failed",exitCode:1,attempts:0,flows:t,platform:e.platform};e.maestroRecord&&j.warn(B.yellow("--maestro-record is managed-runner only and is ignored in --local mode."));let o=r?.platform||e.platform,s=["test"];o&&s.push("--platform",o),e.maestroDevice&&s.push("--device",String(e.maestroDevice));let l=qu(e.maestroEnv),a=Object.keys(l);if(a.length>0){j.info(B.dim(`Passing Maestro env vars to local run: ${a.join(", ")}`));for(let[f,g]of Object.entries(l))s.push("-e",`${f}=${g}`)}s.push(t);let c=n+1,u=1;for(let f=1;f<=c;f+=1){if(j.info(B.dim(`Running local Maestro attempt ${f}/${c}...`)),oa&&f<c){let g=await da("maestro",s,{cwd:process.cwd(),env:process.env,echoOutput:!0,fastFailOnFlowFailure:!0});if(g.error){let h=g.error.message||"Failed to run Maestro";j.error(B.red(`Local Maestro failed to start: ${h}`)),j.info(B.dim("Install Maestro locally, then retry: https://maestro.mobile.dev/getting-started/installing-maestro")),u=1;break}u=g.exitCode}else{let g=gt("maestro",s,{cwd:process.cwd(),stdio:"inherit",env:process.env});if(g.error){let h=g.error.message||"Failed to run Maestro";j.error(B.red(`Local Maestro failed to start: ${h}`)),j.info(B.dim("Install Maestro locally, then retry: https://maestro.mobile.dev/getting-started/installing-maestro")),u=1;break}u=typeof g.status=="number"?g.status:1}if(u===0)break}let d=u===0?"passed":"failed",p={status:d,exitCode:u,attempts:c,flows:t,platform:o};return Pp(e,p),d==="passed"?j.success(B.green("Local Maestro run passed")):j.error(B.red(`Local Maestro run failed with exit code ${u}`)),p}async function Kr(e){let t=we(`./${m.configFileName}`),n=e.projectId||t?.projectId,i=String(e.profile||e.buildProfile||"production").toLowerCase();if(!n)return j.error(`No projectId found. Run \`${m.nameLower} link\` first or pass an internal project id.`),null;let r=e.platform;if(!r&&e.latest){let p=await ia({message:"Select platform for the latest build:",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"}]});if(jr(p))return null;r=p}let o=await np(e);if(!o)return null;if(o.kind==="latest"&&!r)return j.error("Pass --platform when using --latest."),null;if(o.kind==="artifact-url"&&!r)return j.error("Pass --platform when using --artifact-url."),null;let s=aa(e.maestroRetries);if(s===null)return null;let l=Vr(e.maestroEnv),a=Ju(e.maestroEnv);!e.quiet&&l.length>0&&j.info(B.dim(`Forwarding Maestro env vars by name: ${l.join(", ")}`));let c=await Qu(e,n);if(c===null)return null;let u=Un();e.quiet||u.start("Queuing Maestro run...");let d=e.maestroDevice||(r?Br(r):void 0);try{let p=await O.post("/tests/maestro",{projectId:n,platform:r,profile:i,latest:o.kind==="latest",buildId:o.kind==="build-id"?o.value:e.buildId,buildUrl:o.kind==="build-url"?o.value:e.buildUrl,artifactUrl:o.kind==="artifact-url"?o.value:e.artifactUrl,flowSourceKey:c,flows:e.maestroFlows||".maestro",...d?{device:d}:{},retries:s,record:!!e.maestroRecord,...l.length>0?{envNames:l}:{},...a?{env:a}:{}});if(p.data.status!=="success")throw new Error(p.data.message||"Failed to queue Maestro run");let f=p.data.testRun,g={testRunId:f.testRunId,status:f.status,projectId:n,buildId:f.buildId,platform:f.platform,dashboardUrl:f.dashboardUrl||`${mt}/tests/${f.testRunId}`,launchDeferredReason:f.launchDeferredReason};return fa(e,g),e.quiet||u.stop("Maestro run queued"),g}catch(p){e.quiet||u.stop("Could not queue Maestro run");let f=p.response?.data?.message||p.message||"Unknown error";return j.error(B.red(`Maestro queue failed: ${f}`)),null}}async function Zu(e,t){let n=Ys(e.waitTimeout,60,"--wait-timeout"),i=Ys(e.waitInterval,15,"--wait-interval");if(n===null||i===null)return null;let r=n*60*1e3,o=Math.max(5,i)*1e3,s=Date.now(),l=t.status||"queued";for(j.info(B.dim(`Waiting for Maestro run ${t.testRunId} to finish...`));Date.now()-s<=r;){let a=await tp(t.projectId,t.testRunId);if(!a)return null;if(a.status&&a.status!==l&&(l=a.status,j.info(B.dim(`Maestro status: ${l}`))),zu.has(String(a.status)))return fa(e,a),a.status==="passed"?j.success(B.green(`Maestro run passed: ${a.testRunId}`)):(j.error(B.red(`Maestro run ${a.status}: ${a.testRunId}`)),a.error&&j.error(B.red(String(a.error)))),a;await zr(o)}return j.error(B.red(`Timed out waiting for Maestro run ${t.testRunId} after ${n} minute(s).`)),{...t,status:"timeout"}}async function Qu(e,t){if(e.maestroUseBuildSource)return;let n=e.maestroFlows||".maestro",i=V.resolve(n);if(!L.existsSync(i))return e.maestroFlows?(j.error(B.red(`Maestro flows not found: ${n}`)),null):void 0;let r=V.relative(process.cwd(),i);if(!r||r.startsWith("..")||V.isAbsolute(r))return j.error(B.red("Managed Maestro flow uploads must be inside the current project directory.")),null;let o=Un();e.quiet||o.start(`Uploading Maestro flows from ${r}...`);try{let s=await O.post("/tests/maestro/source-upload-url",{projectId:t,uploadId:Hu()});if(s.data.status!=="success"||!s.data.uploadUrl||!s.data.key)throw new Error(s.data.message||"Failed to get Maestro flow upload URL");let l=new $i;if(L.statSync(i).isDirectory())l.addLocalFolder(i,r);else{let u=V.dirname(r);l.addLocalFile(i,u==="."?void 0:u,V.basename(r))}let c=l.toBuffer();return await ep(s.data.uploadUrl,c,"application/zip","Maestro flow upload",u=>{e.quiet||o.message(u)}),e.quiet||o.stop("Maestro flows uploaded"),s.data.key}catch(s){e.quiet||o.stop("Could not upload Maestro flows");let l=s.response?.data?.message||s.message||"Unknown error";return j.error(B.red(`Maestro flow upload failed: ${l}`)),null}}function sa(e){let t=e.response?.status,n=e.code||"",i=e.message||"";return t&&![408,409,425,429].includes(t)&&t<500?!1:/ECONNRESET|ETIMEDOUT|EAI_AGAIN|ENOTFOUND|ECONNABORTED|socket hang up|network|timeout/i.test(`${n} ${i}`)||!t}async function ep(e,t,n,i,r){let o;for(let s=1;s<=qs;s+=1)try{await Mn.put(e,t,{headers:{"Content-Type":n},maxBodyLength:1/0,maxContentLength:1/0,timeout:Wu});return}catch(l){if(o=l,!sa(l)||s>=qs)break;let a=Math.min(2e4,2e3*s),c=l.code||l.response?.status||l.message||"network error";r?.(`${i} attempt ${s} failed (${c}), retrying...`),await zr(a)}throw o}async function tp(e,t){try{let n=await O.get(`/tests/${encodeURIComponent(t)}`,{params:{projectId:e}});if(n.data.status!=="success")throw new Error(n.data.message||"Failed to fetch Maestro run");let i=n.data.testRun;return{testRunId:i.testRunId,status:i.status,projectId:e,buildId:i.buildId,platform:i.platform,dashboardUrl:i.dashboardUrl||`${mt}/tests/${i.testRunId}`,launchDeferredReason:i.launchDeferredReason,...i.error?{error:i.error}:{}}}catch(n){let i=n.response?.data?.message||n.message||"Unknown error";return j.error(B.red(`Could not fetch Maestro run status: ${i}`)),null}}async function np(e){if(e.buildId)return{kind:"build-id",value:e.buildId};if(e.buildUrl)return{kind:"build-url",value:e.buildUrl};if(e.artifactUrl)return{kind:"artifact-url",value:e.artifactUrl};if(e.latest)return{kind:"latest"};let t=await ia({message:"Select app artifact source for Maestro:",options:[{value:"latest",label:"Latest successful build"},{value:"build-id",label:"Build ID"},{value:"build-url",label:`${m.name} build URL`},{value:"artifact-url",label:"Direct artifact URL"}]});if(jr(t))return null;if(t==="latest")return{kind:"latest"};let n=await Vu({message:t==="build-id"?"Enter build ID:":t==="build-url"?`Enter ${m.name} build URL:`:"Enter artifact URL:",validate:i=>{let r=String(i||"").trim();if(!r)return"Value is required";if((t==="build-url"||t==="artifact-url")&&!r.startsWith("http"))return"Must be a URL"}});return jr(n)?null:{kind:t,value:String(n).trim()}}function Ys(e,t,n){if(e==null||e==="")return t;let i=Number(e);return!Number.isFinite(i)||i<=0?(j.error(`${n} must be a positive number.`),null):i}function zr(e){return new Promise(t=>setTimeout(t,e))}function aa(e){if(e==null||e==="")return 1;let t=Number(e);return!Number.isInteger(t)||t<0||t>10?(j.error("--maestro-retries must be an integer between 0 and 10."),null):t}async function ip(e){if(e.artifactUrl)return{url:e.artifactUrl,platform:e.platform||Jr(e.artifactUrl),name:pa(e.artifactUrl)};let t=e.buildId||_p(e.buildUrl);return t?la(t,e.platform):e.latest?rp(e):null}async function la(e,t){let n=Un();n.start(`Resolving build ${e}...`);try{let i=await O.get(`/public/builds/${encodeURIComponent(e)}`);if(i.data.status!=="success")throw new Error(i.data.message||"Build lookup failed");let r=t||i.data.build?.platform,o=$p(i.data.artifacts||[],r);if(!o?.downloadUrl)throw new Error("No installable APK or simulator app artifact found for this build.");return n.stop("Build artifact resolved"),{url:o.downloadUrl,platform:r||Jr(o.name||o.downloadUrl),name:o.name}}catch(i){n.stop("Could not resolve build artifact");let r=i.response?.data?.message||i.message||"Unknown error";return j.error(B.red(`Local Maestro artifact lookup failed: ${r}`)),null}}async function rp(e){let t=we(`./${m.configFileName}`),n=e.projectId||t?.projectId,i=String(e.profile||e.buildProfile||"production").toLowerCase();if(!n)return j.error(`No projectId found. Run \`${m.nameLower} link\` first or pass --build-id/--artifact-url.`),null;if(!e.platform)return j.error("Pass --platform when using --latest with --local."),null;let r=Un();r.start("Resolving latest build...");try{let o=await O.get(`/builds/${n}`,{params:{limit:100}}),l=(Array.isArray(o.data.builds)?o.data.builds:[]).find(a=>a.status==="success"&&a.platform===e.platform&&String(a.buildProfile||a.buildType||"production").toLowerCase()===i);if(!l?.buildId)throw new Error(`No successful ${e.platform} build found for profile ${i}.`);return r.stop(`Latest build resolved: ${l.buildId}`),la(l.buildId,e.platform)}catch(o){r.stop("Could not resolve latest build");let s=o.response?.data?.message||o.message||"Unknown error";return j.error(B.red(`Latest build lookup failed: ${s}`)),null}}async function op(e){let t=e.platform||Jr(e.url);if(!t)return j.error(B.red("Could not infer platform for local install. Pass --platform android or --platform ios.")),!1;let n=L.mkdtempSync(V.join(fn.tmpdir(),"mach-maestro-")),i=e.name||pa(e.url)||(t==="android"?"app.apk":"app.zip"),r=V.join(n,i),o=Un();o.start(`Downloading ${i}...`);try{await Hr(e.url,r),o.stop("Artifact downloaded")}catch(s){return o.stop("Artifact download failed"),j.error(B.red(s.message||"Failed to download artifact")),!1}return t==="android"?Ip(r):vp(r,n)}async function Hr(e,t){let n=await Mn.get(e,{responseType:"stream"});await Gu(n.data,L.createWriteStream(t))}function sp(e,t=12e3){try{return L.readFileSync(e,"utf-8").slice(-t)}catch{return""}}function Xs(e){if(!Number.isFinite(e)||e<0)return"unknown size";if(e<1024)return`${e} B`;let t=["KB","MB","GB"],n=e/1024,i=t[0];for(let r=1;n>=1024&&r<t.length;r+=1)n/=1024,i=t[r];return`${n.toFixed(n>=10?1:2)} ${i}`}function ap(e){return Object.entries(e||{}).filter(([t,n])=>!!t&&n!==void 0).sort(([t],[n])=>t.localeCompare(n)).flatMap(([t,n])=>["-e",`${t}=${n}`])}function lp(e,t){let n=V.resolve(e,t||".maestro"),i=V.relative(e,n);if(i.startsWith("..")||V.isAbsolute(i))throw new Error("Maestro flow path must stay inside the build source.");return n}function ca(e,t){let n=[e];for(let i=0;i<t.length;i+=1){let r=t[i],o=t[i-1];(o==="-e"||o==="--env")&&/^[A-Za-z_][A-Za-z0-9_]*=/.test(r)?n.push(`${r.slice(0,r.indexOf("="))}=<redacted>`):n.push(r)}return n.join(" ")}function cp(e){return/\[Failed\]\s+/.test(e)}function dp(e){if(!e.killed){try{e.kill("SIGTERM")}catch{}setTimeout(()=>{try{e.kill("SIGKILL")}catch{}},5e3).unref()}}function da(e,t,n={}){let{cwd:i,env:r=process.env,logPath:o,echoOutput:s=!1,fastFailOnFlowFailure:l=!1}=n;return o&&L.appendFileSync(o,`
|
|
1403
|
-
$ ${
|
|
1404
|
-
`),new Promise(
|
|
1405
|
-
${
|
|
1406
|
-
`),s&&process.stderr.write(`${
|
|
1407
|
-
`),
|
|
1408
|
-
`),
|
|
1409
|
-
`),
|
|
1410
|
-
$ ${
|
|
1411
|
-
`);let o=
|
|
1412
|
-
`),1):typeof o.status=="number"?o.status:1}function
|
|
1413
|
-
`)[0]?.trim():"";i&&t.unshift(i);for(let r of t)if(r&&
|
|
1414
|
-
`),r;return e&&
|
|
1415
|
-
`),null}function
|
|
1416
|
-
`):(
|
|
1417
|
-
`)
|
|
1418
|
-
`),
|
|
1419
|
-
`),null;let i=
|
|
1420
|
-
`),null):r}function
|
|
1421
|
-
`)}function
|
|
1422
|
-
`);let r=
|
|
1423
|
-
`)}),r}async function
|
|
1424
|
-
`),e.kill("SIGINT")),setTimeout(()=>{!i&&!e.killed&&(
|
|
1425
|
-
`),e.kill("SIGKILL")),r()},5e3).unref?.()})}function
|
|
1426
|
-
`)
|
|
1427
|
-
`)}function
|
|
1428
|
-
`),e.platform==="ios"){let r
|
|
1429
|
-
`):
|
|
1430
|
-
`);return}let n=e.deviceId?["-s",e.deviceId]:[],i
|
|
1431
|
-
`):
|
|
1432
|
-
`)}function
|
|
1646
|
+
`}`)},y=async(g,h)=>{try{await Wn.post(`${r}/internal/tests/${encodeURIComponent(n)}/runner`,{projectId:t,runnerToken:i,status:g,error:h,logPreview:Xp(a),device:f,junitUrl:l?.urls?.junitDownloadUrl,logsUrl:l?.urls?.logsDownloadUrl,artifactsUrl:l?.urls?.artifactsDownloadUrl})}catch(S){p(`[WARN] Could not post runner update: ${S.message||S}`)}};try{p(`Mach Maestro local runner starting for ${n}`);let g=await Wn.post(`${r}/internal/tests/${encodeURIComponent(n)}/runner-payload`,{projectId:t,runnerToken:i});if(g.data?.status!=="success"||!g.data?.payload)throw new Error(g.data?.message||"Runner payload was not returned.");l=g.data.payload;let h=Object.keys(l.env||{});p(`Using Maestro env vars: ${h.length>0?h.join(", "):"none"}`);let S={...process.env,...l.env||{}},b=Zp(l.env);b.length>0&&p(`Passing Maestro env vars to test command: ${h.sort().join(", ")}`),await y("running");let _=l.platform==="android"?"app.apk":"app.zip",w=q.join(o,_),T=q.join(o,"source.zip"),B=q.join(o,"source");M.mkdirSync(B,{recursive:!0}),p("Downloading app artifact..."),await so(l.artifactUrl,w),p(`Downloaded app artifact: ${_} (${va(M.statSync(w).size)})`),p("Downloading Maestro source..."),await so(l.urls.sourceUrl,T),p(`Downloaded Maestro source: source.zip (${va(M.statSync(T).size)})`),new Fi(T).extractAllTo(B,!0);let X=Qp(B,l.flowPath||".maestro");if(!M.existsSync(X))throw new Error(`Maestro flow path not found: ${l.flowPath||".maestro"}`);if(p(`Resolved Maestro flow path: ${q.relative(B,X)||"."}`),l.platform==="ios"){let $=await sf(l.device||oo("ios"),a);u=$.udid,f=$.name,await y("running");let x=af(w,o),P=Ua(x,a);p(`Resolved iOS app bundle: ${x}`),p(`Resolved iOS bundle id: ${P||"unknown"}`),df(x,a,$.udid),ao("xcrun",["simctl","install",$.udid,x],a),P&&(c={platform:l.platform,appId:P,deviceId:$.udid}),P&&Ct("xcrun",["simctl","get_app_container",$.udid,P,"app"],a),to(s,a,"ios-before-maestro.png",$.udid),l.record&&(d=lf(s,a,$.udid))}else{let $=pf(w,a),x=uf(l.device,a);u=x||void 0,f=l.device||oo("android");let P=x?["-s",x]:[];p(`Resolved Android application id: ${$||"unknown"}`),ao("adb",[...P,"install","-r",w],a),$&&(c={platform:l.platform,appId:$,deviceId:x||void 0})}let K=Math.max(0,Math.min(10,Number(l.retries??1)))+1,v=q.join(s,"report.xml"),R=rf(a);if(!R)throw new Error("Maestro CLI not found on this runner. Install Maestro or set MAESTRO_BIN to the full maestro path.");let I=1;for(let $=1;$<=K;$+=1){p(`Running Maestro attempt ${$}/${K}...`);let x=[...u?["--device",u]:[],"test","--platform",l.platform,...b,X,"--format","junit","--output",v,"--test-output-dir",s];if(ka&&$<K?I=(await Ma(R,x,{logPath:a,env:S,fastFailOnFlowFailure:!0})).exitCode:I=Ct(R,x,a,void 0,S),I===0)break}return l.platform==="ios"&&to(s,a,"ios-after-maestro.png",u),await $a(d,a),d=null,await Ra(l.urls,o,s,a),I===0?(await y("passed"),H.success(W.green(`Managed Maestro run passed: ${n}`)),{status:"passed",exitCode:0,attempts:K,flows:l.flowPath,platform:l.platform}):(await y("failed",`Maestro exited with code ${I}`),H.error(W.red(`Managed Maestro run failed with exit code ${I}`)),{status:"failed",exitCode:I,attempts:K,flows:l.flowPath,platform:l.platform})}catch(g){let h=g.message||String(g);return p(`MACH_MAESTRO_RUN_FAILED: ${h}`),l?.platform==="ios"&&to(s,a,"ios-after-failure.png",u),await $a(d,a),l?.urls&&await Ra(l.urls,o,s,a),await y("failed",h),H.error(W.red(`Managed Maestro runner failed: ${h}`)),{status:"failed",exitCode:1,attempts:0,flows:l?.flowPath||".maestro",platform:l?.platform||e.platform}}finally{cf(c,a)}}async function Hp(e){let t=e.maestroFlows||".maestro",n=xa(e.maestroRetries);if(n===null)return null;let i=q.resolve(t);if(!M.existsSync(i))return H.error(W.red(`Maestro flows not found: ${t}`)),{status:"failed",exitCode:1,attempts:0,flows:t,platform:e.platform};let r=await Jp(e);if(r?.url){if(!await Yp(r))return{status:"failed",exitCode:1,attempts:0,flows:t,platform:r.platform||e.platform}}else if(e.buildId||e.buildUrl||e.artifactUrl||e.latest)return{status:"failed",exitCode:1,attempts:0,flows:t,platform:e.platform};e.maestroRecord&&H.warn(W.yellow("--maestro-record is managed-runner only and is ignored in --local mode."));let o=r?.platform||e.platform,s=["test"];o&&s.push("--platform",o),e.maestroDevice&&s.push("--device",String(e.maestroDevice));let a=Bp(e.maestroEnv),l=Object.keys(a);if(l.length>0){H.info(W.dim(`Passing Maestro env vars to local run: ${l.join(", ")}`));for(let[p,y]of Object.entries(a))s.push("-e",`${p}=${y}`)}s.push(t);let d=n+1,c=1;for(let p=1;p<=d;p+=1){if(H.info(W.dim(`Running local Maestro attempt ${p}/${d}...`)),ka&&p<d){let y=await Ma("maestro",s,{cwd:process.cwd(),env:process.env,echoOutput:!0,fastFailOnFlowFailure:!0});if(y.error){let g=y.error.message||"Failed to run Maestro";H.error(W.red(`Local Maestro failed to start: ${g}`)),H.info(W.dim("Install Maestro locally, then retry: https://maestro.mobile.dev/getting-started/installing-maestro")),c=1;break}c=y.exitCode}else{let y=bt("maestro",s,{cwd:process.cwd(),stdio:"inherit",env:process.env});if(y.error){let g=y.error.message||"Failed to run Maestro";H.error(W.red(`Local Maestro failed to start: ${g}`)),H.info(W.dim("Install Maestro locally, then retry: https://maestro.mobile.dev/getting-started/installing-maestro")),c=1;break}c=typeof y.status=="number"?y.status:1}if(c===0)break}let u=c===0?"passed":"failed",f={status:u,exitCode:c,attempts:d,flows:t,platform:o};return Sf(e,f),u==="passed"?H.success(W.green("Local Maestro run passed")):H.error(W.red(`Local Maestro run failed with exit code ${c}`)),f}async function co(e){let t=Ie(`./${m.configFileName}`),n=e.projectId||t?.projectId,i=String(e.profile||e.buildProfile||"production").toLowerCase();if(!n)return H.error(`No projectId found. Run \`${m.nameLower} link\` first or pass an internal project id.`),null;let r=e.platform;if(!r&&e.latest){let f=await Oa({message:"Select platform for the latest build:",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"}]});if(ro(f))return null;r=f}let o=await Wp(e);if(!o)return null;if(o.kind==="latest"&&!r)return H.error("Pass --platform when using --latest."),null;if(o.kind==="artifact-url"&&!r)return H.error("Pass --platform when using --artifact-url."),null;let s=xa(e.maestroRetries);if(s===null)return null;let a=lo(e.maestroEnv),l=Fp(e.maestroEnv);!e.quiet&&a.length>0&&H.info(W.dim(`Forwarding Maestro env vars by name: ${a.join(", ")}`));let d=await Gp(e,n);if(d===null)return null;let c=Jn();e.quiet||c.start("Queuing Maestro run...");let u=e.maestroDevice||(r?oo(r):void 0);try{let f=await D.post("/tests/maestro",{projectId:n,platform:r,profile:i,latest:o.kind==="latest",buildId:o.kind==="build-id"?o.value:e.buildId,buildUrl:o.kind==="build-url"?o.value:e.buildUrl,artifactUrl:o.kind==="artifact-url"?o.value:e.artifactUrl,flowSourceKey:d,flows:e.maestroFlows||".maestro",...u?{device:u}:{},retries:s,record:!!e.maestroRecord,...a.length>0?{envNames:a}:{},...l?{env:l}:{}});if(f.data.status!=="success")throw new Error(f.data.message||"Failed to queue Maestro run");let p=f.data.testRun,y={testRunId:p.testRunId,status:p.status,projectId:n,buildId:p.buildId,platform:p.platform,dashboardUrl:p.dashboardUrl||`${yt}/tests/${p.testRunId}`,launchDeferredReason:p.launchDeferredReason};return Ba(e,y),e.quiet||c.stop("Maestro run queued"),y}catch(f){e.quiet||c.stop("Could not queue Maestro run");let p=f.response?.data?.message||f.message||"Unknown error";return H.error(W.red(`Maestro queue failed: ${p}`)),null}}async function Vp(e,t){let n=wa(e.waitTimeout,60,"--wait-timeout"),i=wa(e.waitInterval,15,"--wait-interval");if(n===null||i===null)return null;let r=n*60*1e3,o=Math.max(5,i)*1e3,s=Date.now(),a=t.status||"queued";for(H.info(W.dim(`Waiting for Maestro run ${t.testRunId} to finish...`));Date.now()-s<=r;){let l=await Kp(t.projectId,t.testRunId);if(!l)return null;if(l.status&&l.status!==a&&(a=l.status,H.info(W.dim(`Maestro status: ${a}`))),Mp.has(String(l.status)))return Ba(e,l),l.status==="passed"?H.success(W.green(`Maestro run passed: ${l.testRunId}`)):(H.error(W.red(`Maestro run ${l.status}: ${l.testRunId}`)),l.error&&H.error(W.red(String(l.error)))),l;await uo(o)}return H.error(W.red(`Timed out waiting for Maestro run ${t.testRunId} after ${n} minute(s).`)),{...t,status:"timeout"}}async function Gp(e,t){if(e.maestroUseBuildSource)return;let n=e.maestroFlows||".maestro",i=q.resolve(n);if(!M.existsSync(i))return e.maestroFlows?(H.error(W.red(`Maestro flows not found: ${n}`)),null):void 0;let r=q.relative(process.cwd(),i);if(!r||r.startsWith("..")||q.isAbsolute(r))return H.error(W.red("Managed Maestro flow uploads must be inside the current project directory.")),null;let o=Jn();e.quiet||o.start(`Uploading Maestro flows from ${r}...`);try{let s=await D.post("/tests/maestro/source-upload-url",{projectId:t,uploadId:Np()});if(s.data.status!=="success"||!s.data.uploadUrl||!s.data.key)throw new Error(s.data.message||"Failed to get Maestro flow upload URL");let a=new Fi;if(M.statSync(i).isDirectory())a.addLocalFolder(i,r);else{let c=q.dirname(r);a.addLocalFile(i,c==="."?void 0:c,q.basename(r))}let d=a.toBuffer();return await zp(s.data.uploadUrl,d,"application/zip","Maestro flow upload",c=>{e.quiet||o.message(c)}),e.quiet||o.stop("Maestro flows uploaded"),s.data.key}catch(s){e.quiet||o.stop("Could not upload Maestro flows");let a=s.response?.data?.message||s.message||"Unknown error";return H.error(W.red(`Maestro flow upload failed: ${a}`)),null}}function Na(e){let t=e.response?.status,n=e.code||"",i=e.message||"";return t&&![408,409,425,429].includes(t)&&t<500?!1:/ECONNRESET|ETIMEDOUT|EAI_AGAIN|ENOTFOUND|ECONNABORTED|socket hang up|network|timeout/i.test(`${n} ${i}`)||!t}async function zp(e,t,n,i,r){let o;for(let s=1;s<=Ia;s+=1)try{await Wn.put(e,t,{headers:{"Content-Type":n},maxBodyLength:1/0,maxContentLength:1/0,timeout:Up});return}catch(a){if(o=a,!Na(a)||s>=Ia)break;let l=Math.min(2e4,2e3*s),d=a.code||a.response?.status||a.message||"network error";r?.(`${i} attempt ${s} failed (${d}), retrying...`),await uo(l)}throw o}async function Kp(e,t){try{let n=await D.get(`/tests/${encodeURIComponent(t)}`,{params:{projectId:e}});if(n.data.status!=="success")throw new Error(n.data.message||"Failed to fetch Maestro run");let i=n.data.testRun;return{testRunId:i.testRunId,status:i.status,projectId:e,buildId:i.buildId,platform:i.platform,dashboardUrl:i.dashboardUrl||`${yt}/tests/${i.testRunId}`,launchDeferredReason:i.launchDeferredReason,...i.error?{error:i.error}:{}}}catch(n){let i=n.response?.data?.message||n.message||"Unknown error";return H.error(W.red(`Could not fetch Maestro run status: ${i}`)),null}}async function Wp(e){if(e.buildId)return{kind:"build-id",value:e.buildId};if(e.buildUrl)return{kind:"build-url",value:e.buildUrl};if(e.artifactUrl)return{kind:"artifact-url",value:e.artifactUrl};if(e.latest)return{kind:"latest"};let t=await Oa({message:"Select app artifact source for Maestro:",options:[{value:"latest",label:"Latest successful build"},{value:"build-id",label:"Build ID"},{value:"build-url",label:`${m.name} build URL`},{value:"artifact-url",label:"Direct artifact URL"}]});if(ro(t))return null;if(t==="latest")return{kind:"latest"};let n=await Tp({message:t==="build-id"?"Enter build ID:":t==="build-url"?`Enter ${m.name} build URL:`:"Enter artifact URL:",validate:i=>{let r=String(i||"").trim();if(!r)return"Value is required";if((t==="build-url"||t==="artifact-url")&&!r.startsWith("http"))return"Must be a URL"}});return ro(n)?null:{kind:t,value:String(n).trim()}}function wa(e,t,n){if(e==null||e==="")return t;let i=Number(e);return!Number.isFinite(i)||i<=0?(H.error(`${n} must be a positive number.`),null):i}function uo(e){return new Promise(t=>setTimeout(t,e))}function xa(e){if(e==null||e==="")return 1;let t=Number(e);return!Number.isInteger(t)||t<0||t>10?(H.error("--maestro-retries must be an integer between 0 and 10."),null):t}async function Jp(e){if(e.artifactUrl)return{url:e.artifactUrl,platform:e.platform||fo(e.artifactUrl),name:Fa(e.artifactUrl)};let t=e.buildId||bf(e.buildUrl);return t?Ta(t,e.platform):e.latest?qp(e):null}async function Ta(e,t){let n=Jn();n.start(`Resolving build ${e}...`);try{let i=await D.get(`/public/builds/${encodeURIComponent(e)}`);if(i.data.status!=="success")throw new Error(i.data.message||"Build lookup failed");let r=t||i.data.build?.platform,o=yf(i.data.artifacts||[],r);if(!o?.downloadUrl)throw new Error("No installable APK or simulator app artifact found for this build.");return n.stop("Build artifact resolved"),{url:o.downloadUrl,platform:r||fo(o.name||o.downloadUrl),name:o.name}}catch(i){n.stop("Could not resolve build artifact");let r=i.response?.data?.message||i.message||"Unknown error";return H.error(W.red(`Local Maestro artifact lookup failed: ${r}`)),null}}async function qp(e){let t=Ie(`./${m.configFileName}`),n=e.projectId||t?.projectId,i=String(e.profile||e.buildProfile||"production").toLowerCase();if(!n)return H.error(`No projectId found. Run \`${m.nameLower} link\` first or pass --build-id/--artifact-url.`),null;if(!e.platform)return H.error("Pass --platform when using --latest with --local."),null;let r=Jn();r.start("Resolving latest build...");try{let o=await D.get(`/builds/${n}`,{params:{limit:100}}),a=(Array.isArray(o.data.builds)?o.data.builds:[]).find(l=>l.status==="success"&&l.platform===e.platform&&String(l.buildProfile||l.buildType||"production").toLowerCase()===i);if(!a?.buildId)throw new Error(`No successful ${e.platform} build found for profile ${i}.`);return r.stop(`Latest build resolved: ${a.buildId}`),Ta(a.buildId,e.platform)}catch(o){r.stop("Could not resolve latest build");let s=o.response?.data?.message||o.message||"Unknown error";return H.error(W.red(`Latest build lookup failed: ${s}`)),null}}async function Yp(e){let t=e.platform||fo(e.url);if(!t)return H.error(W.red("Could not infer platform for local install. Pass --platform android or --platform ios.")),!1;let n=M.mkdtempSync(q.join(bn.tmpdir(),"mach-maestro-")),i=e.name||Fa(e.url)||(t==="android"?"app.apk":"app.zip"),r=q.join(n,i),o=Jn();o.start(`Downloading ${i}...`);try{await so(e.url,r),o.stop("Artifact downloaded")}catch(s){return o.stop("Artifact download failed"),H.error(W.red(s.message||"Failed to download artifact")),!1}return t==="android"?gf(r):hf(r,n)}async function so(e,t){let n=await Wn.get(e,{responseType:"stream"});await xp(n.data,M.createWriteStream(t))}function Xp(e,t=12e3){try{return M.readFileSync(e,"utf-8").slice(-t)}catch{return""}}function va(e){if(!Number.isFinite(e)||e<0)return"unknown size";if(e<1024)return`${e} B`;let t=["KB","MB","GB"],n=e/1024,i=t[0];for(let r=1;n>=1024&&r<t.length;r+=1)n/=1024,i=t[r];return`${n.toFixed(n>=10?1:2)} ${i}`}function Zp(e){return Object.entries(e||{}).filter(([t,n])=>!!t&&n!==void 0).sort(([t],[n])=>t.localeCompare(n)).flatMap(([t,n])=>["-e",`${t}=${n}`])}function Qp(e,t){let n=q.resolve(e,t||".maestro"),i=q.relative(e,n);if(i.startsWith("..")||q.isAbsolute(i))throw new Error("Maestro flow path must stay inside the build source.");return n}function La(e,t){let n=[e];for(let i=0;i<t.length;i+=1){let r=t[i],o=t[i-1];(o==="-e"||o==="--env")&&/^[A-Za-z_][A-Za-z0-9_]*=/.test(r)?n.push(`${r.slice(0,r.indexOf("="))}=<redacted>`):n.push(r)}return n.join(" ")}function ef(e){return/\[Failed\]\s+/.test(e)}function tf(e){if(!e.killed){try{e.kill("SIGTERM")}catch{}setTimeout(()=>{try{e.kill("SIGKILL")}catch{}},5e3).unref()}}function Ma(e,t,n={}){let{cwd:i,env:r=process.env,logPath:o,echoOutput:s=!1,fastFailOnFlowFailure:a=!1}=n;return o&&M.appendFileSync(o,`
|
|
1647
|
+
$ ${La(e,t)}
|
|
1648
|
+
`),new Promise(l=>{let d=!1,c=!1,u="",f=g=>{c||(c=!0,l(g))},p=Ca(e,t,{cwd:i,env:r,stdio:["ignore","pipe","pipe"]}),y=g=>{u+=g;let h=u.split(/\r?\n/);u=h.pop()||"";for(let S of h)if(a&&ef(S)&&!d){d=!0;let b="Mach fast-fail: detected failed Maestro flow; stopping this attempt early to retry...";o&&M.appendFileSync(o,`
|
|
1649
|
+
${b}
|
|
1650
|
+
`),s&&process.stderr.write(`${b}
|
|
1651
|
+
`),tf(p)}};p.stdout?.on("data",g=>{let h=g.toString();o&&M.appendFileSync(o,h),s&&process.stdout.write(h),y(h)}),p.stderr?.on("data",g=>{let h=g.toString();o&&M.appendFileSync(o,h),s&&process.stderr.write(h),y(h)}),p.on("error",g=>{o&&M.appendFileSync(o,`${g.message}
|
|
1652
|
+
`),f({exitCode:1,fastFailed:d,error:g})}),p.on("close",(g,h)=>{d&&o&&M.appendFileSync(o,`Maestro attempt stopped after first failed flow${h?` (${h})`:""}.
|
|
1653
|
+
`),f({exitCode:typeof g=="number"?g:1,fastFailed:d})})})}function Ct(e,t,n,i,r=process.env){M.appendFileSync(n,`
|
|
1654
|
+
$ ${La(e,t)}
|
|
1655
|
+
`);let o=bt(e,t,{cwd:i,encoding:"utf-8",env:r});return o.stdout&&M.appendFileSync(n,o.stdout),o.stderr&&M.appendFileSync(n,o.stderr),o.error?(M.appendFileSync(n,`${o.error.message}
|
|
1656
|
+
`),1):typeof o.status=="number"?o.status:1}function ao(e,t,n,i){let r=Ct(e,t,n,i);if(r!==0)throw new Error(`${e} ${t.join(" ")} failed with exit code ${r}`)}function nf(e){try{return M.accessSync(e,M.constants.X_OK),!0}catch{return!1}}function rf(e){let t=[process.env.MAESTRO_BIN,q.join(bn.homedir(),".maestro","bin","maestro"),"/opt/homebrew/bin/maestro","/usr/local/bin/maestro"].filter(Boolean),n=bt("/usr/bin/env",["which","maestro"],{encoding:"utf-8",env:process.env}),i=n.status===0?String(n.stdout||"").split(`
|
|
1657
|
+
`)[0]?.trim():"";i&&t.unshift(i);for(let r of t)if(r&&nf(r))return e&&M.appendFileSync(e,`Using Maestro CLI at ${r}
|
|
1658
|
+
`),r;return e&&M.appendFileSync(e,`Maestro CLI not found. Checked: ${t.join(", ")}
|
|
1659
|
+
`),null}function of(e){let t=String(e||"").trim();return t?t.replace(/_/g," ").replace(/\bios\b/gi,"").replace(/\biphone\b/i,"iPhone").replace(/\bpro\b/gi,"Pro").replace(/\bmax\b/gi,"Max").replace(/\s+/g," ").trim():"iPhone 17 Pro"}async function sf(e,t){let n=of(e),i=bt("xcrun",["simctl","list","devices","--json"],{encoding:"utf-8"});if(i.status!==0||!i.stdout)throw new Error("Could not list iOS simulators.");let r=JSON.parse(i.stdout),o=Object.values(r.devices||{}).flatMap(l=>Array.isArray(l)?l:[]).filter(l=>l?.isAvailable),s=n.toLowerCase(),a=o.find(l=>l.udid===e)||o.find(l=>l.name===n)||o.find(l=>String(l.name||"").toLowerCase().includes(s));if(!a?.udid)throw new Error(`No available iOS Simulator found for ${n}.`);return a.state==="Booted"?M.appendFileSync(t,`Using already booted iOS Simulator ${a.name} (${a.udid}).
|
|
1660
|
+
`):(M.appendFileSync(t,`Booting iOS Simulator ${a.name} (${a.udid})...
|
|
1661
|
+
`),Ct("xcrun",["simctl","boot",a.udid],t)!==0&&M.appendFileSync(t,`simctl boot returned non-zero; continuing to bootstatus in case it was already booting.
|
|
1662
|
+
`),ao("xcrun",["simctl","bootstatus",a.udid,"-b"],t)),{name:String(a.name||n),udid:a.udid}}function af(e,t){if(e.endsWith(".ipa"))throw new Error("iOS Maestro runs need a simulator .app.zip artifact, not an App Store .ipa.");if(e.endsWith(".zip")){let n=q.join(t,"ios-app");M.mkdirSync(n,{recursive:!0}),new Fi(e).extractAllTo(n,!0);let i=po(n);if(!i)throw new Error("Could not find a .app bundle inside the iOS artifact zip.");return i}if(e.endsWith(".app"))return e;throw new Error("iOS Maestro runs need a .app bundle or .app.zip artifact.")}function Ua(e,t){let n=q.join(e,"Info.plist");if(!M.existsSync(n))return M.appendFileSync(t,`Could not find Info.plist in ${e}; skipping uninstall.
|
|
1663
|
+
`),null;let i=bt("/usr/bin/plutil",["-extract","CFBundleIdentifier","raw","-o","-",n],{encoding:"utf-8",env:process.env}),r=String(i.stdout||"").trim();return i.status!==0||!r?(M.appendFileSync(t,`Could not read CFBundleIdentifier from Info.plist; skipping uninstall.
|
|
1664
|
+
`),null):r}function to(e,t,n,i){let r=q.join(e,n);Ct("xcrun",["simctl","io",i||"booted","screenshot",r],t)!==0&&M.appendFileSync(t,`[WARN] Could not capture iOS simulator screenshot: ${n}
|
|
1665
|
+
`)}function lf(e,t,n){let i=q.join(e,"ios-simulator-recording.mp4");M.appendFileSync(t,`Starting iOS simulator recording: ${i}
|
|
1666
|
+
`);let r=Ca("xcrun",["simctl","io",n||"booted","recordVideo",i],{stdio:["ignore","pipe","pipe"],env:process.env});return r.stdout?.on("data",o=>{M.appendFileSync(t,o)}),r.stderr?.on("data",o=>{M.appendFileSync(t,o)}),r.on("error",o=>{M.appendFileSync(t,`[WARN] Could not start iOS simulator recording: ${o.message}
|
|
1667
|
+
`)}),r}async function $a(e,t){e&&await new Promise(n=>{let i=!1,r=()=>{i||(i=!0,n())};e.once("exit",r),e.once("close",r),e.killed||(M.appendFileSync(t,`Stopping iOS simulator recording...
|
|
1668
|
+
`),e.kill("SIGINT")),setTimeout(()=>{!i&&!e.killed&&(M.appendFileSync(t,`[WARN] iOS simulator recording did not stop after SIGINT; sending SIGKILL.
|
|
1669
|
+
`),e.kill("SIGKILL")),r()},5e3).unref?.()})}function df(e,t,n){let i=Ua(e,t);if(!i)return;M.appendFileSync(t,`Uninstalling existing iOS app data for ${i} if present...
|
|
1670
|
+
`),Ct("xcrun",["simctl","uninstall",n||"booted",i],t)!==0&&M.appendFileSync(t,`No existing app install removed for ${i}; continuing.
|
|
1671
|
+
`)}function cf(e,t){if(!e?.appId)return;if(M.appendFileSync(t,`Cleaning up installed app after Maestro run...
|
|
1672
|
+
`),e.platform==="ios"){let r=Ct("xcrun",["simctl","uninstall",e.deviceId||"booted",e.appId],t);r===0?M.appendFileSync(t,`Uninstalled iOS app ${e.appId} after Maestro run.
|
|
1673
|
+
`):M.appendFileSync(t,`Warning: failed to uninstall iOS app ${e.appId} after Maestro run: xcrun simctl uninstall exited with code ${r}
|
|
1674
|
+
`);return}let n=e.deviceId?["-s",e.deviceId]:[],i=Ct("adb",[...n,"uninstall",e.appId],t);i===0?M.appendFileSync(t,`Uninstalled Android app ${e.appId} after Maestro run.
|
|
1675
|
+
`):M.appendFileSync(t,`Warning: failed to uninstall Android app ${e.appId} after Maestro run: adb uninstall exited with code ${i}
|
|
1676
|
+
`)}function uf(e,t){let n=bt("adb",["devices"],{encoding:"utf-8",env:process.env});if(n.status!==0||n.error)return M.appendFileSync(t,`[WARN] Could not list Android devices before install; using adb default target.
|
|
1433
1677
|
`),null;let i=String(n.stdout||"").split(`
|
|
1434
|
-
`).map(r=>r.trim().split(/\s+/)).filter(r=>r.length>=2&&r[1]==="device").map(r=>r[0]).filter(Boolean);return e&&i.includes(e)?(
|
|
1435
|
-
`),e):i.length===1?(
|
|
1436
|
-
`),i[0]):(i.length>1&&
|
|
1437
|
-
`),null)}function
|
|
1438
|
-
`),null)}function
|
|
1439
|
-
`)[0]?.trim()||null}async function
|
|
1440
|
-
`)}try{await
|
|
1441
|
-
`)}try{
|
|
1442
|
-
`)}}function Ip(e){if(!e.endsWith(".apk"))return j.error(B.red("Local Android Maestro runs need an APK artifact.")),!1;j.info(B.dim("Installing APK on local Android device/emulator..."));let t=gt("adb",["install","-r",e],{stdio:"inherit",env:process.env});return t.error?(j.error(B.red(`adb failed to start: ${t.error.message}`)),!1):t.status!==0?(j.error(B.red(`adb install failed with exit code ${t.status??1}`)),!1):!0}function vp(e,t){if(e.endsWith(".ipa"))return j.error(B.red("Local iOS Maestro runs need an iOS Simulator .app.zip artifact, not an App Store .ipa.")),!1;let n=e;if(e.endsWith(".zip")){let r=V.join(t,"ios-app");L.mkdirSync(r,{recursive:!0}),new $i(e).extractAllTo(r,!0);let o=Wr(r);if(!o)return j.error(B.red("Could not find a .app bundle inside the downloaded zip.")),!1;n=o}if(!n.endsWith(".app"))return j.error(B.red("Local iOS Maestro runs need an iOS Simulator .app bundle or .app.zip artifact.")),!1;j.info(B.dim("Installing app on booted iOS Simulator..."));let i=gt("xcrun",["simctl","install","booted",n],{stdio:"inherit",env:process.env});return i.error?(j.error(B.red(`xcrun failed to start: ${i.error.message}`)),!1):i.status!==0?(j.error(B.red(`iOS Simulator install failed with exit code ${i.status??1}`)),!1):!0}function Wr(e){let t=L.readdirSync(e,{withFileTypes:!0});for(let n of t){let i=V.join(e,n.name);if(n.isDirectory()&&n.name.endsWith(".app"))return i;if(n.isDirectory()){let r=Wr(i);if(r)return r}}return null}function $p(e,t){let n=String(t||"").toLowerCase();return n==="android"?e.find(i=>pn(i,".apk")):n==="ios"?e.find(i=>pn(i,".app.zip"))||e.find(i=>pn(i,".zip")):e.find(i=>pn(i,".apk"))||e.find(i=>pn(i,".app.zip"))||e.find(i=>pn(i,".zip"))}function pn(e,t){return String(e?.name||e?.downloadUrl||e?.url||"").toLowerCase().endsWith(t)}function Jr(e){let t=String(e||"").toLowerCase();if(t.includes(".apk"))return"android";if(t.includes(".app.zip")||t.endsWith(".app")||t.includes(".ipa"))return"ios"}function pa(e){if(e)try{return V.basename(new URL(e).pathname)||void 0}catch{return V.basename(e)||void 0}}function _p(e){return e?e.match(/[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/i)?.[0]:void 0}function fa(e,t){if(!e.jsonOutput)return;let n=V.resolve(e.jsonOutput),i={...t,updatedAt:new Date().toISOString()};try{let r=V.dirname(n);r&&r!=="."&&L.mkdirSync(r,{recursive:!0}),L.writeFileSync(n,JSON.stringify(i,null,2))}catch(r){j.warn(B.yellow(`Could not write Maestro metadata JSON: ${r.message}`))}}function Pp(e,t){if(!e.jsonOutput)return;let n=V.resolve(e.jsonOutput),i={mode:"local",...t,updatedAt:new Date().toISOString()};try{let r=V.dirname(n);r&&r!=="."&&L.mkdirSync(r,{recursive:!0}),L.writeFileSync(n,JSON.stringify(i,null,2))}catch(r){j.warn(B.yellow(`Could not write Maestro metadata JSON: ${r.message}`))}}import{spinner as Lt,text as Bn,select as eo,isCancel as Nt,cancel as to,log as Ia}from"@clack/prompts";import ie from"chalk";import ae from"fs";import xe from"path";import{spawn as kp,spawnSync as Zt}from"child_process";import va from"axios";import en from"os";import ro from"crypto";import Rp from"crypto";import mn from"axios";import ma from"fs";var jn=6e4,Op=12e4,qr=4,Fn=e=>encodeURIComponent(e),Cp=e=>new Promise(t=>setTimeout(t,e));async function gn(e,t){let n;for(let i=1;i<=qr;i++)try{return await t()}catch(r){if(n=r,i>=qr||!Dp(r))throw r;let o=Number(r.response?.headers?.["retry-after"]),s=Number.isFinite(o)&&o>0?o*1e3:Math.min(2e3*i*i,15e3);console.log(`[Google Play] ${e} failed (attempt ${i}/${qr}); retrying in ${Math.round(s/1e3)}s...`),await Cp(s)}throw n}function Dp(e){let t=e.response?.status;return t?t===408||t===409||t===425||t===429||t>=500:!0}async function ha(e){let{packageName:t,serviceAccount:n,aabPath:i,track:r,releaseStatus:o,userFraction:s,changesNotSentForReview:l}=e,a;try{let u={Authorization:`Bearer ${await ga(n)}`,Connection:"close"},d=Fn(t);if(a=(await gn("create edit",()=>mn.post(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${d}/edits`,{},{headers:u,timeout:jn}))).data.id,!a)throw new Error("Google Play edit insert succeeded but did not return an edit id.");let f=Fn(a),g=ma.statSync(i),h=await gn("upload AAB",()=>mn.post(`https://androidpublisher.googleapis.com/upload/androidpublisher/v3/applications/${d}/edits/${f}/bundles`,ma.createReadStream(i),{headers:{...u,"Content-Type":"application/octet-stream","Content-Length":g.size},maxBodyLength:1/0,maxContentLength:1/0,params:{uploadType:"media"},timeout:Op})),S=Number(h.data.versionCode);if(!S)throw new Error("Google Play upload succeeded but did not return a versionCode.");let b={versionCodes:[String(S)],status:o};return(o==="inProgress"||o==="halted")&&typeof s=="number"&&(b.userFraction=s),await gn("update track",()=>mn.put(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${d}/edits/${f}/tracks/${Fn(r)}`,{releases:[b]},{headers:u,timeout:jn})),await gn("commit edit",()=>mn.post(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${d}/edits/${f}:commit`,{},{headers:u,params:l?{changesNotSentForReview:!0}:void 0,timeout:jn})),{editId:a,versionCode:S,track:r,releaseStatus:o,userFraction:s}}catch(c){if(a)try{let d=await ga(n);await gn("delete edit",()=>mn.delete(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${Fn(t)}/edits/${Fn(a)}`,{headers:{Authorization:`Bearer ${d}`,Connection:"close"},timeout:jn}))}catch{}let u=c.response?.data?.error?.message||c.message;throw new Error(`Google Play API Error: ${u}`)}}async function ga(e){let t=Math.floor(Date.now()/1e3),n=t+3600,i={alg:"RS256",typ:"JWT"},r={iss:e.client_email,sub:e.client_email,aud:"https://oauth2.googleapis.com/token",iat:t,exp:n,scope:"https://www.googleapis.com/auth/androidpublisher"},o=Buffer.from(JSON.stringify(i)).toString("base64url"),s=Buffer.from(JSON.stringify(r)).toString("base64url"),l=`${o}.${s}`,a=Rp.createSign("RSA-SHA256");a.update(l);let c=a.sign(e.private_key,"base64url"),u=`${l}.${c}`;return(await gn("OAuth token exchange",()=>mn.post("https://oauth2.googleapis.com/token",{grant_type:"urn:ietf:params:oauth:grant-type:jwt-bearer",assertion:u},{headers:{Connection:"close"},timeout:jn}))).data.access_token}var xp=5e3,Np=12,$a=100,Yr=24,ya=8e3,Tp={completed:"completed",draft:"draft",halted:"halted",inprogress:"inProgress","in-progress":"inProgress"},Lp=e=>e?.type==="google_service_account",Pi=e=>e?.bundleId||e?.packageName||e?.meta?.packageName||e?.meta?.bundleId,_a=e=>e.submitArgs||process.argv.slice(3).join(" ");async function Ri(e){let t=Lt(),n=Ue(),i=Mp(e);if(!i){process.exitCode=1;return}let r=e.projectId||i.projectId,o=e.profile||e.buildProfile||"production";if(!r){me(`${m.configFileName} is missing projectId. Pass --project-id in runner mode.`),process.exitCode=1;return}i.projectId=r,$e(ie.dim(`Submit for project: ${i.name||r} | Profile: ${o}`));let s=e.platform;if(!s){let E=await eo({message:"Select platform to submit:",options:[{value:"ios",label:"iOS (App Store Connect / TestFlight)"},{value:"android",label:"Android (Google Play Console)"}]});if(Nt(E)){to("Operation cancelled");return}s=E}if(s=String(s).toLowerCase(),s!=="ios"&&s!=="android"){me(`Platform ${s} is not supported. Use 'ios' or 'android'.`),process.exitCode=1;return}let l=s==="ios"&&!e.local&&e.sshHost?Qp(i,o,e):null;if(s==="ios"&&!e.local&&!l){await Up(i,o,e);return}let a=e.submitId,c=!!(e.local&&a),u=a||null,d=async(E,A={})=>{u&&await Hp(r,u,{status:E,...A})},p=s==="android"?e.packageName||e.androidPackage||Yp(i,o):void 0,f=s==="ios"?e.bundleId||e.iosBundleIdentifier||Zp(i,o):void 0,g,h,S,b=!1;try{s==="android"&&(g=e.track||i.submit?.[o]?.android?.track||i.submit?.production?.android?.track||"internal",h=ef(i,o,e.releaseStatus),S=nf(i,o,e.rollout),b=rf(i,o,e.changesNotSentForReview),of(h,S))}catch(E){me(E.message),process.exitCode=1;return}if(s==="android"&&!c&&(u=await Fp(i,r,s,o,e,{packageName:p,track:g,releaseStatus:h,rollout:S,changesNotSentForReview:b}),!u)){me("Could not create submission tracking record. Submission was not started."),process.exitCode=1;return}await d("running",{platform:s,profile:o,packageName:p,track:g,releaseStatus:h,rollout:S,startTime:Date.now(),...c?Vp():{}});let y=null,P=null;try{P=await sf(r,s,e,n?.token),y=P?.filePath||null}catch(E){await d("failed",{error:`Failed to resolve submission artifact: ${E.message}`,endTime:Date.now()}),me(`Failed to resolve submission artifact: ${E.message}`),process.exitCode=1;return}if(!y){let E=lf(s,e);await d("failed",{error:E,endTime:Date.now()}),me(E),process.exitCode=1;return}await d("running",{buildId:P?.buildId,artifactName:P?.artifactName,artifactSource:P?.source}),$e(`Using artifact: ${ie.green(xe.basename(y))} `),t.start("Fetching submission credentials from Dashboard...");let v;try{let A=(await O.get(`/credentials/${r}`)).data.credentials||[];if(s==="android"&&!p){t.stop("Package name missing"),me("Could not resolve Android package name. Set android.package in mach.config.json/app.json."),await d("failed",{error:"Could not resolve Android package name.",endTime:Date.now()}),process.exitCode=1;return}let N=A.filter(Lp),U=s==="ios"?A.filter(K=>K.type==="asc_api_key"):Xp(N,p);if(U.length===0){if(t.stop("Credentials missing"),me(s==="android"?`No Google Play service credential found for package ${p}.`:`No Service Credentials found for ${s}.`),s==="android"){let K=N.map(Pi).filter(Boolean).join(", ");K&&$e(`Found Google Play service credential(s) for: ${K}`),$e(`Use '${m.nameLower} credentials:service --platform android --package-name ${p}' or upload it under that package in the Dashboard.`)}else $e(`Use '${m.nameLower} credentials:service --platform ${s}' or use the Dashboard to upload them.`);await d("failed",{error:`No submission credentials found for ${s}.`,endTime:Date.now()}),process.exitCode=1;return}if(v=zp(U,e.credentialId),!v&&s==="ios"&&f&&(v=Wp(U,f)),v||U.length===1)v=v||U[0],t.stop(`Using: ${v.name}`),s==="android"&&Pi(v)==="*"&&$e(ie.yellow(`Using legacy wildcard Google Play credential for ${p}. Upload a package-scoped credential when possible.`));else{if(t.stop("Multiple credentials found"),Jp()){let z=U.map(Q=>`${Q.name||"credential"} (${Q.credentialId||Q.id||"no-id"})`).join(", ");me(`Multiple ${s==="ios"?"App Store Connect":"Google Play"} credentials found. Use --credential-id in CI. Available: ${z}`),await d("failed",{error:"Multiple submission credentials found; --credential-id is required in CI.",endTime:Date.now()}),process.exitCode=1;return}let K=await eo({message:`Choose a ${s==="ios"?"App Store Connect":"Google Play"} credential:`,options:U.map(z=>({value:z.credentialId,label:z.name,hint:`${z.keyId?`ID: ${z.keyId}`:""} ${z.issuerId?`(Issuer: ${z.issuerId.substring(0,8)}...)`:""}`}))});if(Nt(K)){to("Submission cancelled"),await d("failed",{error:"Submission cancelled while selecting credential.",endTime:Date.now()}),process.exitCode=1;return}v=U.find(z=>z.credentialId===K),$e(`Using selected: ${ie.green(v.name)}`)}}catch(E){t.stop("Failed to fetch credentials"),me(`API Error: ${E.message} `),await d("failed",{error:`Failed to fetch credentials: ${E.message}`,endTime:Date.now()}),process.exitCode=1;return}let F=ae.mkdtempSync(xe.join(en.tmpdir(),`${m.nameLower}-submit-`)),H=v.keyId||v.meta?.keyId,q=v.issuerId||v.meta?.issuerId,I=v.type==="asc_api_key"?`AuthKey_${H}.p8`:"service-account.json",_=xe.join(F,I);t.start("Downloading secure key...");try{let E=await O.get(`/credentials/${v.credentialId}/download`,{params:{projectId:r,format:"raw"}});if(E.data.status!=="success"||!E.data.downloadUrl)throw new Error("Failed to get secure download URL");let A=await va.get(E.data.downloadUrl,{responseType:"arraybuffer"});ae.writeFileSync(_,Buffer.from(A.data)),t.stop("Key downloaded to secure temp storage")}catch(E){t.stop("Download failed"),me(`Failed to download key: ${E.message}`);try{ae.rmSync(F,{recursive:!0,force:!0})}catch{}await d("failed",{error:`Failed to download credential key: ${E.message}`,endTime:Date.now()}),process.exitCode=1;return}$e(ie.blue(`Initiating ${s==="ios"?"TestFlight":"Google Play"} submission...`));let M=!1,x;try{if(s==="ios"){if(!H){let A=await Bn({message:"Enter App Store Connect Key ID (e.g. 2X948D...):",validate:N=>N.length>0?void 0:"Key ID is required"});if(Nt(A)){await d("failed",{error:"Submission cancelled while entering ASC Key ID.",endTime:Date.now()}),process.exitCode=1;return}H=A}if(!q||q==="undefined"){let A=await Bn({message:"Enter App Store Connect Issuer ID (Found on ASC Keys page):",validate:N=>N.length>0?void 0:"Issuer ID is required"});if(Nt(A)){await d("failed",{error:"Submission cancelled while entering ASC Issuer ID.",endTime:Date.now()}),process.exitCode=1;return}q=A}$e(`Using ASC Key ID: ${H}`),$e(`Using ASC Issuer ID: ${q}`);let E=l?await df(y,_,q,H,f,l):await cf(y,_,q,H,f);io(`${s==="ios"?"App Store":"Google Play"} submission successful!`),M=!0}else x=await gf(y,_,g||"internal",p,h||"completed",S,b,o),io("Google Play submission successful!"),M=!0}catch(E){me(`Submission failed: ${E.message}`),await d("failed",{error:E.message,endTime:Date.now()}),Tt(e,{status:"failed",projectId:r,submitId:u,platform:s,profile:o,buildId:P?.buildId||e.buildId,artifactName:P?.artifactName,error:E.message,dashboardUrl:u?Qt(u,r):void 0}),process.exitCode=1}finally{M&&(await d("success",{endTime:Date.now(),versionCode:x?.versionCode,track:g,releaseStatus:h}),Tt(e,{status:"success",projectId:r,submitId:u,platform:s,profile:o,buildId:P?.buildId||e.buildId,artifactName:P?.artifactName,versionCode:x?.versionCode,track:g,releaseStatus:h,dashboardUrl:u?Qt(u,r):void 0})),Cf(F),y&&y.includes(`${m.nameLower}-artifact-`)}}function Mp(e){let t=`./${m.configFileName}`;if(ae.existsSync(t))try{return JSON.parse(ae.readFileSync(t,"utf-8"))}catch(n){return me(`Failed to read ${m.configFileName}: ${n.message}`),null}return e.projectId?{projectId:e.projectId}:(me(`No ${m.configFileName} found. Run \`${m.nameLower} init\` or \`${m.nameLower} link\` first.`),null)}async function Up(e,t,n){let i=n.projectId||e.projectId;if(!i){me(`${m.configFileName} is missing projectId.`),process.exitCode=1;return}let r=n.submitId||ro.randomUUID(),o=!!n.latest||!n.buildId,s=jp({...n,latest:o,profile:t,projectId:i,submitId:r}),l={projectId:i,submitId:r,platform:"ios",profile:t,latest:o,buildId:n.buildId,credentialId:n.credentialId,status:"pending",source:"cli",submitArgs:_a(n),runnerArgs:s,runnerCommand:[m.nameLower,"submit",...s].map(qp).join(" "),appName:e.name,startTime:Date.now()},a=Lt();a.start("Queuing iOS submit on macOS runner...");try{let c=await O.post("/submissions",l),u=c.data?.submission||c.data?.submit||{},d=c.data?.dashboardUrl||Qt(r,i);a.stop("iOS submit queued"),$e(`Submission ID: ${ie.cyan(r)}`),$e(`Dashboard: ${ie.blue.underline(d)}`),Tt(n,{status:"pending",projectId:i,submitId:r,platform:"ios",profile:t,latest:o,buildId:n.buildId,dashboardUrl:d}),await Bp(i,r,n)}catch(c){a.stop("Could not queue iOS submit"),me(Kp(c)),process.exitCode=1}}async function Fp(e,t,n,i,r,o={}){let s=r.submitId||ro.randomUUID(),l=!!r.latest||!r.buildId,a={projectId:t,submitId:s,platform:n,profile:i,latest:l,buildId:r.buildId,credentialId:r.credentialId,status:"running",source:"cli-direct",submitArgs:_a(r),appName:e.name,startTime:Date.now(),...o};try{let c=await O.post("/submissions",a),u=c.data?.submission||c.data?.submit||{},d=c.data?.dashboardUrl||u.dashboardUrl||Qt(s,t);return $e(`Submission ID: ${ie.cyan(s)}`),$e(`Dashboard: ${ie.blue.underline(d)}`),Tt(r,{status:"running",projectId:t,submitId:s,platform:n,profile:i,latest:l,buildId:r.buildId,dashboardUrl:d}),s}catch(c){let u=c.response?.data?.message||c.response?.data?.error||c.message;return $e(ie.yellow(`Could not create submission tracking record: ${u}`)),null}}function jp(e){let t=["--local","--submit-id",e.submitId,"--project-id",e.projectId,"--platform","ios","--profile",e.profile||"production"];return e.buildId?t.push("--build-id",e.buildId):t.push("--latest"),e.credentialId&&t.push("--credential-id",e.credentialId),e.bundleId&&t.push("--bundle-id",e.bundleId),e.packageName&&t.push("--package-name",e.packageName),e.quiet&&t.push("--quiet"),e.jsonOutput&&t.push("--json-output",e.jsonOutput),t.filter(n=>n!=null&&n!=="")}async function Bp(e,t,n){let i=Lt(),r=0,o=0;for(n.quiet||i.start("Waiting for iOS submit runner...");;)try{let s=await O.get(`/submissions/${e}/${t}`),l=s.data?.submission||s.data?.submit||s.data,a=String(l?.status||"pending").toLowerCase();r=0;let c=Array.isArray(l?.logs)?l.logs:[];for(let u=o;u<c.length;u++){let d=c[u];d&&console.log(ie.dim(String(d)))}if(o=c.length,["success","completed","succeeded"].includes(a)){n.quiet||i.stop("iOS submit completed"),io("App Store submission successful!"),Tt(n,{status:"success",projectId:e,submitId:t,platform:"ios",profile:l?.profile||n.profile||"production",buildId:l?.buildId||n.buildId,artifactName:l?.artifactName,dashboardUrl:l?.dashboardUrl||Qt(t,e)});return}if(["failed","error","cancelled","canceled"].includes(a)){n.quiet||i.stop("iOS submit failed");let u=l?.error||l?.message||"Unknown iOS submit failure.";me(u),Tt(n,{status:"failed",projectId:e,submitId:t,platform:"ios",profile:l?.profile||n.profile||"production",buildId:l?.buildId||n.buildId,artifactName:l?.artifactName,error:u,dashboardUrl:l?.dashboardUrl||Qt(t,e)}),process.exitCode=1;return}n.quiet||i.message(`iOS submit ${a}...`),await no(xp)}catch(s){if(r++,r>=Np){n.quiet||i.stop("Lost connection to iOS submit status"),me(`Could not fetch iOS submit status after ${r} attempts: ${s.message}`),process.exitCode=1;return}await no(Math.min(2e3*r,15e3))}}async function Hp(e,t,n){let i;for(let r=1;r<=3;r++)try{await O.patch(`/submissions/${e}/${t}`,n);return}catch(o){if(i=o,r>=3||!Gp(o))break;await no(1e3*r)}Ia.warn(ie.dim(`Could not report submission status: ${i?.message||i}`))}function Gp(e){let t=e.response?.status;return!t||t===408||t===409||t===425||t===429||t>=500}function Vp(){let e={gitlabJobId:process.env.CI_JOB_ID,gitlabJobUrl:process.env.CI_JOB_URL,gitlabPipelineId:process.env.CI_PIPELINE_ID,gitlabProjectId:process.env.CI_PROJECT_ID,gitlabProjectPath:process.env.CI_PROJECT_PATH};return Object.fromEntries(Object.entries(e).filter(([,t])=>!!t))}function Kp(e){let t=e.response?.status,n=e.response?.data?.message||e.response?.data?.error;return t===404||t===405?["Managed iOS submit is not enabled on this Mach API yet.","Deploy the API/dashboard submission orchestration endpoint, then retry the same command.","Expected API: POST /submissions and GET/PATCH /submissions/:projectId/:submitId."].join(`
|
|
1443
|
-
`):n||e.message||String(e)}function Qt(e,t){if(!e)return mt;let n=t?`?projectId=${encodeURIComponent(t)}`:"";return`${mt}/submissions/${e}${n}`}function Tt(e,t){if(!e.jsonOutput)return;let n=xe.resolve(e.jsonOutput),i={...t,url:t.url||t.dashboardUrl||Qt(t.submitId,t.projectId),updatedAt:new Date().toISOString()};try{let r=xe.dirname(n);r&&r!=="."&&ae.mkdirSync(r,{recursive:!0}),ae.writeFileSync(n,JSON.stringify(i,null,2))}catch(r){Ia.warn(ie.yellow(`Could not write submission metadata JSON: ${r.message}`))}}function zp(e,t){return t&&e.find(n=>n.credentialId===t||n.id===t||n.keyId===t||n.meta?.keyId===t)||null}function Wp(e,t){let n=e.filter(i=>[i.bundleId,i.bundleIdentifier,i.appIdentifier,i.meta?.bundleId,i.meta?.bundleIdentifier,i.meta?.appIdentifier].filter(Boolean).map(String).includes(t));return n.length===1?n[0]:null}function Jp(){return process.env.CI==="true"||process.env.CI==="1"||!process.stdin.isTTY}function no(e){return new Promise(t=>setTimeout(t,e))}function qp(e){return/^[a-zA-Z0-9_./:=@-]+$/.test(e)?e:`'${e.replace(/'/g,"'\\''")}'`}function Yp(e,t){if(e.submit?.[t]?.android?.package)return e.submit[t].android.package;let n=an(e,t);if(n)return n;let i=xe.join(process.cwd(),"app.json");if(ae.existsSync(i))try{return JSON.parse(ae.readFileSync(i,"utf-8")).expo?.android?.package}catch{}let r=xe.join(process.cwd(),"app.config.json");if(ae.existsSync(r))try{let o=JSON.parse(ae.readFileSync(r,"utf-8"));return o.expo?.android?.package||o.android?.package}catch{}}function Xp(e,t){let n=e.filter(o=>Pi(o)===t);if(n.length>0)return n;let i=e.filter(o=>{let s=Pi(o);return!s||s==="*"});return e.length>0&&e.length===i.length?i:[]}function Zp(e,t){return e.submit?.[t]?.ios?.bundleIdentifier?e.submit[t].ios.bundleIdentifier:e.submit?.[t]?.ios?.bundleId?e.submit[t].ios.bundleId:Wt(e,t)}function Qp(e,t,n){let i=e.submit?.[t]?.ios||{},r=e.submit?.production?.ios||{},o=n.sshHost||i.sshHost||r.sshHost||process.env.MACH_IOS_SUBMIT_SSH_HOST;return o?{sshHost:o,sshUser:n.sshUser||i.sshUser||r.sshUser||process.env.MACH_IOS_SUBMIT_SSH_USER||process.env.USER||"ubuntu",sshKey:n.sshKey||i.sshKey||r.sshKey||process.env.MACH_IOS_SUBMIT_SSH_KEY}:null}function ef(e,t,n){let i=n||e.submit?.[t]?.android?.releaseStatus||e.submit?.production?.android?.releaseStatus||"completed";return tf(i)}function tf(e){let t=Tp[String(e).trim().toLowerCase()];if(!t)throw new Error(`Invalid Android release status "${e}". Use completed, draft, halted, or inProgress.`);return t}function nf(e,t,n){let i=n??e.submit?.[t]?.android?.rollout??e.submit?.[t]?.android?.userFraction??e.submit?.[t]?.android?.rolloutFraction??e.submit?.production?.android?.rollout??e.submit?.production?.android?.userFraction??e.submit?.production?.android?.rolloutFraction;if(i==null||i==="")return;let r=Number(i);if(!Number.isFinite(r)||r<=0||r>=1)throw new Error(`Invalid Android rollout fraction "${i}". Use a number greater than 0 and less than 1, for example 0.1.`);return r}function rf(e,t,n){let i=n??e.submit?.[t]?.android?.changesNotSentForReview??e.submit?.[t]?.android?.changes_not_sent_for_review??e.submit?.production?.android?.changesNotSentForReview??e.submit?.production?.android?.changes_not_sent_for_review??!1;return i===!0||i==="true"||i==="1"}function of(e,t){if(e==="inProgress"&&t===void 0)throw new Error("Google Play staged rollout requires --rollout <fraction> when --release-status inProgress is used.");if(e!=="inProgress"&&e!=="halted"&&t!==void 0)throw new Error("Android rollout fraction can only be used with --release-status inProgress or halted.")}async function sf(e,t,n,i){let r=n.buildId?"id":n.latest?"latest":null;if(!r){let s=await eo({message:"Select artifact source:",options:[{value:"latest",label:`Latest Production Build (${m.name})`},{value:"id",label:`Input Build ID (${m.name})`},{value:"url",label:"Remote URL"},{value:"local",label:"Local File Path"}]});if(Nt(s))return to("Operation cancelled"),null;r=s}if(r==="local"){let s=await Bn({message:"Enter path to artifact (.ipa/.aab):",validate:l=>{if(!ae.existsSync(l))return"File not found";if(t==="ios"&&!l.endsWith(".ipa"))return"Must be an .ipa file";if(t==="android"&&!l.endsWith(".aab"))return"Must be an .aab file"}});return Nt(s)?null:{filePath:s,source:"local"}}let o=Lt();if(r==="latest"){let s=n.profile||n.buildProfile;o.start(`Fetching latest${s?` ${s}`:""} build...`);try{let l=await O.get(`/builds/${e}`,{params:{limit:50}});if(l.data.status!=="success")throw new Error(l.data.message);let a=l.data.builds||[],c=s?.toLowerCase(),u=v=>v.platform?.toLowerCase()===t.toLowerCase()&&v.status?.toLowerCase()==="success",d=v=>c?[v.buildProfile,v.profile,v.profileName,v.buildType].filter(Boolean).some(F=>String(F).toLowerCase()===c):!0,p=a.filter(v=>u(v)&&d(v)),f=p.find(v=>v.buildType?.toLowerCase()==="store"||v.distribution?.toLowerCase()==="store")||p[0],g=a.some(v=>v.platform?.toLowerCase()===t.toLowerCase()&&v.status?.toLowerCase()==="success");if(!f)return o.stop("No suitable build found"),me(s&&g?`No successful ${t} builds found for profile "${s}".`:"No successful builds found for this platform."),null;o.stop(`Found build: ${f.buildId}`);let h=f.artifacts||[];if(h.length===0||h.every(v=>!(v.url||v.downloadUrl)))try{let v=await O.get(`/builds/${e}/${f.buildId}/artifacts`);v.data.status==="success"&&v.data.artifacts?.length>0?(h=v.data.artifacts.map(F=>({...F,url:F.url||F.downloadUrl})),console.log(ie.cyan(` [RECOVERY] Fetched ${h.length} artifact(s) with download URLs.`))):console.log(ie.yellow(" [RECOVERY] /artifacts endpoint returned 0 artifacts."))}catch(v){console.log(ie.red(` [RECOVERY] /artifacts fetch failed: ${v.message}`))}let b=t==="ios",y=h.find(v=>{let F=(v.type||"").toLowerCase(),H=(v.name||"").toLowerCase();if(console.log(ie.dim(` - Checking: ${v.name} (Type: ${v.type}, HasLink: ${!!(v.url||v.downloadUrl)})`)),F)return F===(b?"ipa":"aab");let q=b?".ipa":".aab",I=(v.url||v.downloadUrl||"").toLowerCase();return H.endsWith(q)||I.includes(q)});if(!y||!(y.url||y.downloadUrl))return me("Build found but artifact URL is missing."),null;let P=y.url||y.downloadUrl;return{filePath:await Xr(P,b?"ios":"android"),buildId:f.buildId,artifactName:y.name,source:"latest"}}catch(l){return o.stop("Fetch failed"),me(`API Error: ${l.message}`),null}}if(r==="id"){let s=n.buildId||await Bn({message:"Enter Build ID:",validate:a=>a.length<5?"Invalid ID":void 0});if(Nt(s))return null;let l=String(s);o.start("Fetching build...");try{let a=null;try{let f=await O.get(`/builds/${e}/${l}`);f.data.status==="success"&&(a=f.data.build)}catch(f){f.response?.status!==404&&console.log(ie.dim(` [RECOVERY] Project build lookup skipped: ${f.message}`))}if(!a){let f=await O.get(`/build/${l}`);if(f.data.status!=="success")throw new Error(f.data.message);a=f.data.build}if(!a)throw new Error(`Build ${l} was not found.`);let c=t==="ios",u=_i(a.artifacts);af(u)||(u=await ba(e,l,u));let d=Sa(u,t);if(d||(u=await ba(e,l,u),d=Sa(u,t)),!d)throw new Error(`No ${c?".ipa":".aab"} artifact found for build ${l}. The build exists, but its artifact list does not contain a downloadable submission artifact.`);let p=d.url||d.downloadUrl;if(!p)throw new Error(`Artifact ${d.name||"(unnamed)"} for build ${l} has no download URL. Retry after the build artifact upload is visible in the Installation Hub.`);return o.stop(`Found build: ${a.buildId||l}`),{filePath:await Xr(p,c?"ios":"android"),buildId:a.buildId||l,artifactName:d.name,source:"id"}}catch(a){throw o.stop("Fetch failed"),a}}if(r==="url"){let s=await Bn({message:"Enter Artifact URL:",validate:l=>l.startsWith("http")?void 0:"Must be a valid URL"});return Nt(s)?null:{filePath:await Xr(s,t),source:"url"}}return null}function _i(e){return(e||[]).map(t=>({...t,url:t.url||t.downloadUrl}))}function af(e){return e.some(t=>!!(t.url||t.downloadUrl))}function Sa(e,t){let n=t==="ios",i=n?"ipa":"aab",r=n?".ipa":".aab";return e.find(o=>{let s=String(o.type||"").toLowerCase(),l=String(o.name||"").toLowerCase(),a=String(o.url||o.downloadUrl||"").toLowerCase();return s?s===i:l.endsWith(r)||a.includes(r)})||null}function lf(e,t){let n=e==="ios"?".ipa":".aab";if(t.buildId)return`No downloadable ${n} artifact found for build ${t.buildId}. Check that the build finished artifact upload before submitting.`;if(t.latest){let i=t.profile||t.buildProfile;return`No latest successful ${e}${i?` ${i}`:""} build has a downloadable ${n} artifact.`}return`No downloadable ${n} artifact was selected for submission.`}async function ba(e,t,n){try{let i=await O.get(`/builds/${e}/${t}/artifacts`);if(i.data.status==="success"&&i.data.artifacts?.length>0){let r=_i(i.data.artifacts);return console.log(ie.cyan(` [RECOVERY] Fetched ${r.length} artifact(s) with download URLs.`)),r}}catch(i){console.log(ie.dim(` [RECOVERY] Project artifact lookup skipped: ${i.message}`))}try{let i=await O.get(`/public/builds/${t}`);if(i.data.status==="success"&&i.data.artifacts?.length>0){let r=_i(i.data.artifacts);return console.log(ie.cyan(` [RECOVERY] Fetched ${r.length} public artifact(s) with download URLs.`)),r}}catch(i){console.log(ie.dim(` [RECOVERY] Public artifact lookup skipped: ${i.message}`))}return _i(n)}async function Xr(e,t,n=3){let i=Lt();i.start("Downloading artifact...");let r=ae.mkdtempSync(xe.join(en.tmpdir(),`${m.nameLower}-artifact-`)),o=`app.${t==="ios"?"ipa":"aab"}`,s=xe.join(r,o);for(let l=1;l<=n;l++)try{l>1&&(i.message(`Downloading artifact (Retry ${l}/${n})...`),await new Promise(u=>setTimeout(u,2e3*l)));let a=ae.createWriteStream(s),c=await va({url:e,method:"GET",responseType:"stream",timeout:6e4});return await new Promise((u,d)=>{c.data.pipe(a);let p=!1;c.data.on("error",f=>{p||(p=!0,a.close(),d(f))}),a.on("finish",()=>{p||u()}),a.on("error",f=>{p||(p=!0,d(f))})}),i.stop("Download complete"),s}catch(a){if(l===n)throw i.stop("Download failed"),a}throw new Error("Download failed after retries")}async function cf(e,t,n,i,r){let o=Lt();if(r&&$e(`Bundle ID: ${ie.green(r)}`),!n||!i)throw me(`Missing credentials: issuerId=${n}, keyId=${i}. Check your Dashboard.`),new Error("Missing ASC API Key Metadata (IssuerID or KeyID)");let s=Pa(t,n,i),l=yf();return o.start("Uploading to TestFlight (pilot)..."),new Promise((a,c)=>{let u=bf(),d=kp(l.command,["pilot","upload","--ipa",e,"--api_key_path",s,"--skip_submission","true","--skip_waiting_for_build_processing","true"],{stdio:["ignore","pipe","pipe"],env:l.env});d.stdout?.on("data",p=>u.append(p,process.stdout)),d.stderr?.on("data",p=>u.append(p,process.stderr)),d.on("close",p=>{if(u.flush(),p!==0){o.stop("Pilot failed");try{ae.unlinkSync(s)}catch{}c(Af(p,u.lines()))}else{o.stop("IPA uploaded to TestFlight");try{ae.unlinkSync(s)}catch{}a({})}}),d.on("error",p=>{u.flush();try{ae.unlinkSync(s)}catch{}o.stop("Pilot execution error");let f=Rf(p);f.logs=u.lines(),c(f)})})}async function df(e,t,n,i,r,o){let s=Lt();if(r&&$e(`Bundle ID: ${ie.green(r)}`),!n||!i)throw me(`Missing credentials: issuerId=${n}, keyId=${i}. Check your Dashboard.`),new Error("Missing ASC API Key Metadata (IssuerID or KeyID)");let l=Pa(t,n,i),a=`${o.sshUser}@${o.sshHost}`,c=uf(o),u=pf(o),d="",p="";try{if(s.start(`Preparing remote iOS submit runner (${a})...`),d=ff("ssh",[...c,"mktemp -d /tmp/mach-submit.XXXXXX"]).trim(),!d)throw new Error("Remote runner did not return a temp directory.");s.stop(`Remote runner ready: ${a}`),s.start("Uploading IPA and App Store Connect key to remote runner..."),Zr("scp",[...u,e,`${a}:${d}/app.ipa`],"IPA upload to remote runner"),Zr("scp",[...u,l,`${a}:${d}/api_key.json`],"ASC key upload to remote runner"),p=xe.join(en.tmpdir(),`${m.nameLower}-ios-submit-${Date.now()}.sh`),ae.writeFileSync(p,mf(d)),Zr("scp",[...u,p,`${a}:${d}/submit.sh`],"submit script upload to remote runner"),s.stop("Remote submit inputs uploaded"),s.start("Uploading to TestFlight on remote runner...");let f=`chmod +x ${Hn(`${d}/submit.sh`)} && bash ${Hn(`${d}/submit.sh`)}`,g=Zt("ssh",[...c,f],{stdio:"inherit"});if(g.error)throw oo("ssh",g.error);if(g.status!==0)throw new Error(`Remote iOS submit failed with exit code ${g.status}.`);return s.stop("IPA uploaded to TestFlight"),{apiKeyJsonPath:null}}catch(f){throw s.stop("Remote iOS submit failed"),f}finally{try{ae.unlinkSync(l)}catch{}if(p)try{ae.unlinkSync(p)}catch{}if(d)try{Zt("ssh",[...c,`rm -rf ${Hn(d)}`],{stdio:"ignore"})}catch{}}}function Pa(e,t,n){let i=ae.readFileSync(e,"utf8"),r;try{r=ro.createPrivateKey(i).export({type:"pkcs8",format:"pem"})}catch{$e("Key normalization failed, falling back to manual re-wrapping..."),r=`-----BEGIN PRIVATE KEY-----
|
|
1678
|
+
`).map(r=>r.trim().split(/\s+/)).filter(r=>r.length>=2&&r[1]==="device").map(r=>r[0]).filter(Boolean);return e&&i.includes(e)?(M.appendFileSync(t,`Using Android device ${e} for install and cleanup.
|
|
1679
|
+
`),e):i.length===1?(M.appendFileSync(t,`Using Android device ${i[0]} for install and cleanup.
|
|
1680
|
+
`),i[0]):(i.length>1&&M.appendFileSync(t,`[WARN] Multiple Android devices are connected; using adb default target for install and cleanup.
|
|
1681
|
+
`),null)}function pf(e,t){let i=(no("aapt",["dump","badging",e])||no("aapt2",["dump","badging",e]))?.match(/package:\s+name='([^']+)'/);if(i?.[1])return i[1];let o=no("apkanalyzer",["manifest","application-id",e])?.split(/\s+/).find(Boolean);return o||(M.appendFileSync(t,`[WARN] Could not determine Android application id from APK; post-run uninstall will be skipped.
|
|
1682
|
+
`),null)}function no(e,t){for(let n of ff(e)){let i=bt(n,t,{encoding:"utf-8",env:process.env,maxBuffer:10485760});if(i.status===0&&i.stdout)return String(i.stdout).trim()}return null}function ff(e){let t=process.platform==="win32"&&!e.endsWith(".exe")?`${e}.exe`:e,n=[];if(e==="aapt"||e==="aapt2")for(let r of _a()){let o=q.join(r,"build-tools");for(let s of Pa(o))n.push(q.join(o,s,t))}if(e==="apkanalyzer")for(let r of _a()){n.push(q.join(r,"cmdline-tools","latest","bin",t));let o=q.join(r,"cmdline-tools");for(let s of Pa(o))n.push(q.join(o,s,"bin",t));n.push(q.join(r,"tools","bin",t))}let i=mf(e);return i&&n.unshift(i),n.push(t),[...new Set(n)]}function _a(){let e=[process.env.ANDROID_HOME,process.env.ANDROID_SDK_ROOT];return process.platform==="darwin"?e.push(q.join(bn.homedir(),"Library","Android","sdk")):process.platform==="linux"&&e.push(q.join(bn.homedir(),"Android","Sdk"),q.join(bn.homedir(),"Android","sdk"),"/opt/android-sdk","/usr/lib/android-sdk"),[...new Set(e.filter(t=>!!t))]}function Pa(e){try{return M.readdirSync(e,{withFileTypes:!0}).filter(t=>t.isDirectory()).map(t=>t.name).sort((t,n)=>n.localeCompare(t,void 0,{numeric:!0}))}catch{return[]}}function mf(e){let t=process.platform==="win32"?"where":"/usr/bin/env",n=process.platform==="win32"?[e]:["which",e],i=bt(t,n,{encoding:"utf-8",env:process.env});return i.status!==0||!i.stdout?null:String(i.stdout).split(`
|
|
1683
|
+
`)[0]?.trim()||null}async function io(e,t,n){if(!M.existsSync(e))return;let i=M.readFileSync(e),r;for(let o=1;o<=3;o+=1)try{await Wn.put(t,i,{headers:{"Content-Type":n,"Content-Length":String(i.length)},maxBodyLength:1/0,maxContentLength:1/0,timeout:12e4});return}catch(s){if(r=s,!Na(s)||o>=3)break;await uo(2e3*o)}throw r}async function Ra(e,t,n,i){let r=q.join(n,"report.xml"),o=q.join(t,"artifacts.tar.gz");try{await io(r,e.junitUploadUrl,"application/xml")}catch(s){M.appendFileSync(i,`[WARN] Failed to upload JUnit report: ${s.message||s}
|
|
1684
|
+
`)}try{await io(i,e.logUploadUrl,"text/plain")}catch(s){M.appendFileSync(i,`[WARN] Failed to upload runner log: ${s.message||s}
|
|
1685
|
+
`)}try{Ct("tar",["-czf",o,"-C",t,q.basename(n)],i),await io(o,e.artifactsUploadUrl,"application/gzip")}catch(s){M.appendFileSync(i,`[WARN] Failed to upload Maestro artifacts: ${s.message||s}
|
|
1686
|
+
`)}}function gf(e){if(!e.endsWith(".apk"))return H.error(W.red("Local Android Maestro runs need an APK artifact.")),!1;H.info(W.dim("Installing APK on local Android device/emulator..."));let t=bt("adb",["install","-r",e],{stdio:"inherit",env:process.env});return t.error?(H.error(W.red(`adb failed to start: ${t.error.message}`)),!1):t.status!==0?(H.error(W.red(`adb install failed with exit code ${t.status??1}`)),!1):!0}function hf(e,t){if(e.endsWith(".ipa"))return H.error(W.red("Local iOS Maestro runs need an iOS Simulator .app.zip artifact, not an App Store .ipa.")),!1;let n=e;if(e.endsWith(".zip")){let r=q.join(t,"ios-app");M.mkdirSync(r,{recursive:!0}),new Fi(e).extractAllTo(r,!0);let o=po(r);if(!o)return H.error(W.red("Could not find a .app bundle inside the downloaded zip.")),!1;n=o}if(!n.endsWith(".app"))return H.error(W.red("Local iOS Maestro runs need an iOS Simulator .app bundle or .app.zip artifact.")),!1;H.info(W.dim("Installing app on booted iOS Simulator..."));let i=bt("xcrun",["simctl","install","booted",n],{stdio:"inherit",env:process.env});return i.error?(H.error(W.red(`xcrun failed to start: ${i.error.message}`)),!1):i.status!==0?(H.error(W.red(`iOS Simulator install failed with exit code ${i.status??1}`)),!1):!0}function po(e){let t=M.readdirSync(e,{withFileTypes:!0});for(let n of t){let i=q.join(e,n.name);if(n.isDirectory()&&n.name.endsWith(".app"))return i;if(n.isDirectory()){let r=po(i);if(r)return r}}return null}function yf(e,t){let n=String(t||"").toLowerCase();return n==="android"?e.find(i=>yn(i,".apk")):n==="ios"?e.find(i=>yn(i,".app.zip"))||e.find(i=>yn(i,".zip")):e.find(i=>yn(i,".apk"))||e.find(i=>yn(i,".app.zip"))||e.find(i=>yn(i,".zip"))}function yn(e,t){return String(e?.name||e?.downloadUrl||e?.url||"").toLowerCase().endsWith(t)}function fo(e){let t=String(e||"").toLowerCase();if(t.includes(".apk"))return"android";if(t.includes(".app.zip")||t.endsWith(".app")||t.includes(".ipa"))return"ios"}function Fa(e){if(e)try{return q.basename(new URL(e).pathname)||void 0}catch{return q.basename(e)||void 0}}function bf(e){return e?e.match(/[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/i)?.[0]:void 0}function Ba(e,t){if(!e.jsonOutput)return;let n=q.resolve(e.jsonOutput),i={...t,updatedAt:new Date().toISOString()};try{let r=q.dirname(n);r&&r!=="."&&M.mkdirSync(r,{recursive:!0}),M.writeFileSync(n,JSON.stringify(i,null,2))}catch(r){H.warn(W.yellow(`Could not write Maestro metadata JSON: ${r.message}`))}}function Sf(e,t){if(!e.jsonOutput)return;let n=q.resolve(e.jsonOutput),i={mode:"local",...t,updatedAt:new Date().toISOString()};try{let r=q.dirname(n);r&&r!=="."&&M.mkdirSync(r,{recursive:!0}),M.writeFileSync(n,JSON.stringify(i,null,2))}catch(r){H.warn(W.yellow(`Could not write Maestro metadata JSON: ${r.message}`))}}import{spinner as Bt,text as Xn,select as So,isCancel as Ut,cancel as Ao,log as Ya}from"@clack/prompts";import se from"chalk";import ue from"fs";import Ne from"path";import{spawn as vf,spawnSync as rn}from"child_process";import Xa from"axios";import sn from"os";import wo from"crypto";import Af from"crypto";import Sn from"axios";import ja from"fs";var Yn=6e4,Ef=12e4,mo=4,qn=e=>encodeURIComponent(e),If=e=>new Promise(t=>setTimeout(t,e));async function An(e,t){let n;for(let i=1;i<=mo;i++)try{return await t()}catch(r){if(n=r,i>=mo||!wf(r))throw r;let o=Number(r.response?.headers?.["retry-after"]),s=Number.isFinite(o)&&o>0?o*1e3:Math.min(2e3*i*i,15e3);console.log(`[Google Play] ${e} failed (attempt ${i}/${mo}); retrying in ${Math.round(s/1e3)}s...`),await If(s)}throw n}function wf(e){let t=e.response?.status;return t?t===408||t===409||t===425||t===429||t>=500:!0}async function Va(e){let{packageName:t,serviceAccount:n,aabPath:i,track:r,releaseStatus:o,userFraction:s,changesNotSentForReview:a}=e,l;try{let c={Authorization:`Bearer ${await Ha(n)}`,Connection:"close"},u=qn(t);if(l=(await An("create edit",()=>Sn.post(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${u}/edits`,{},{headers:c,timeout:Yn}))).data.id,!l)throw new Error("Google Play edit insert succeeded but did not return an edit id.");let p=qn(l),y=ja.statSync(i),g=await An("upload AAB",()=>Sn.post(`https://androidpublisher.googleapis.com/upload/androidpublisher/v3/applications/${u}/edits/${p}/bundles`,ja.createReadStream(i),{headers:{...c,"Content-Type":"application/octet-stream","Content-Length":y.size},maxBodyLength:1/0,maxContentLength:1/0,params:{uploadType:"media"},timeout:Ef})),h=Number(g.data.versionCode);if(!h)throw new Error("Google Play upload succeeded but did not return a versionCode.");let S={versionCodes:[String(h)],status:o};return(o==="inProgress"||o==="halted")&&typeof s=="number"&&(S.userFraction=s),await An("update track",()=>Sn.put(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${u}/edits/${p}/tracks/${qn(r)}`,{releases:[S]},{headers:c,timeout:Yn})),await An("commit edit",()=>Sn.post(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${u}/edits/${p}:commit`,{},{headers:c,params:a?{changesNotSentForReview:!0}:void 0,timeout:Yn})),{editId:l,versionCode:h,track:r,releaseStatus:o,userFraction:s}}catch(d){if(l)try{let u=await Ha(n);await An("delete edit",()=>Sn.delete(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${qn(t)}/edits/${qn(l)}`,{headers:{Authorization:`Bearer ${u}`,Connection:"close"},timeout:Yn}))}catch{}let c=d.response?.data?.error?.message||d.message;throw new Error(`Google Play API Error: ${c}`)}}async function Ha(e){let t=Math.floor(Date.now()/1e3),n=t+3600,i={alg:"RS256",typ:"JWT"},r={iss:e.client_email,sub:e.client_email,aud:"https://oauth2.googleapis.com/token",iat:t,exp:n,scope:"https://www.googleapis.com/auth/androidpublisher"},o=Buffer.from(JSON.stringify(i)).toString("base64url"),s=Buffer.from(JSON.stringify(r)).toString("base64url"),a=`${o}.${s}`,l=Af.createSign("RSA-SHA256");l.update(a);let d=l.sign(e.private_key,"base64url"),c=`${a}.${d}`;return(await An("OAuth token exchange",()=>Sn.post("https://oauth2.googleapis.com/token",{grant_type:"urn:ietf:params:oauth:grant-type:jwt-bearer",assertion:c},{headers:{Connection:"close"},timeout:Yn}))).data.access_token}var $f=5e3,_f=12,Za=100,go=24,Ga=8e3,Pf={completed:"completed",draft:"draft",halted:"halted",inprogress:"inProgress","in-progress":"inProgress"},Rf=e=>e?.type==="google_service_account",ji=e=>e?.bundleId||e?.packageName||e?.meta?.packageName||e?.meta?.bundleId,Qa=e=>e.submitArgs||process.argv.slice(3).join(" ");async function Hi(e){let t=Bt(),n=Ue(),i=Cf(e);if(!i){process.exitCode=1;return}let r=e.projectId||i.projectId,o=e.profile||e.buildProfile||"production";if(!r){ye(`${m.configFileName} is missing projectId. Pass --project-id in runner mode.`),process.exitCode=1;return}i.projectId=r,$e(se.dim(`Submit for project: ${i.name||r} | Profile: ${o}`));let s=e.platform;if(!s){let I=await So({message:"Select platform to submit:",options:[{value:"ios",label:"iOS (App Store Connect / TestFlight)"},{value:"android",label:"Android (Google Play Console)"}]});if(Ut(I)){Ao("Operation cancelled");return}s=I}if(s=String(s).toLowerCase(),s!=="ios"&&s!=="android"){ye(`Platform ${s} is not supported. Use 'ios' or 'android'.`),process.exitCode=1;return}let a=s==="ios"&&!e.local&&e.sshHost?zf(i,o,e):null;if(s==="ios"&&!e.local&&!a){await Of(i,o,e);return}let l=e.submitId,d=!!(e.local&&l),c=l||null,u=async(I,$={})=>{c&&await xf(r,c,{status:I,...$})},f=s==="android"?e.packageName||e.androidPackage||Hf(i,o):void 0,p=s==="ios"?e.bundleId||e.iosBundleIdentifier||Gf(i,o):void 0,y,g,h,S=!1;try{s==="android"&&(y=e.track||i.submit?.[o]?.android?.track||i.submit?.production?.android?.track||"internal",g=Kf(i,o,e.releaseStatus),h=Jf(i,o,e.rollout),S=qf(i,o,e.changesNotSentForReview),Yf(g,h))}catch(I){ye(I.message),process.exitCode=1;return}if(s==="android"&&!d&&(c=await Df(i,r,s,o,e,{packageName:f,track:y,releaseStatus:g,rollout:h,changesNotSentForReview:S}),!c)){ye("Could not create submission tracking record. Submission was not started."),process.exitCode=1;return}await u("running",{platform:s,profile:o,packageName:f,track:y,releaseStatus:g,rollout:h,startTime:Date.now(),...d?Lf():{}});let b=null,_=null;try{_=await Xf(r,s,e,n?.token),b=_?.filePath||null}catch(I){await u("failed",{error:`Failed to resolve submission artifact: ${I.message}`,endTime:Date.now()}),ye(`Failed to resolve submission artifact: ${I.message}`),process.exitCode=1;return}if(!b){let I=Qf(s,e);await u("failed",{error:I,endTime:Date.now()}),ye(I),process.exitCode=1;return}await u("running",{buildId:_?.buildId,artifactName:_?.artifactName,artifactSource:_?.source}),$e(`Using artifact: ${se.green(Ne.basename(b))} `),t.start("Fetching submission credentials from Dashboard...");let w;try{let $=(await D.get(`/credentials/${r}`)).data.credentials||[];if(s==="android"&&!f){t.stop("Package name missing"),ye("Could not resolve Android package name. Set android.package in mach.config.json/app.json."),await u("failed",{error:"Could not resolve Android package name.",endTime:Date.now()}),process.exitCode=1;return}let x=$.filter(Rf),P=s==="ios"?$.filter(V=>V.type==="asc_api_key"):Vf(x,f);if(P.length===0){if(t.stop("Credentials missing"),ye(s==="android"?`No Google Play service credential found for package ${f}.`:`No Service Credentials found for ${s}.`),s==="android"){let V=x.map(ji).filter(Boolean).join(", ");V&&$e(`Found Google Play service credential(s) for: ${V}`),$e(`Use '${m.nameLower} credentials:service --platform android --package-name ${f}' or upload it under that package in the Dashboard.`)}else $e(`Use '${m.nameLower} credentials:service --platform ${s}' or use the Dashboard to upload them.`);await u("failed",{error:`No submission credentials found for ${s}.`,endTime:Date.now()}),process.exitCode=1;return}if(w=Uf(P,e.credentialId),!w&&s==="ios"&&p&&(w=Ff(P,p)),w||P.length===1)w=w||P[0],t.stop(`Using: ${w.name}`),s==="android"&&ji(w)==="*"&&$e(se.yellow(`Using legacy wildcard Google Play credential for ${f}. Upload a package-scoped credential when possible.`));else{if(t.stop("Multiple credentials found"),Bf()){let G=P.map(j=>`${j.name||"credential"} (${j.credentialId||j.id||"no-id"})`).join(", ");ye(`Multiple ${s==="ios"?"App Store Connect":"Google Play"} credentials found. Use --credential-id in CI. Available: ${G}`),await u("failed",{error:"Multiple submission credentials found; --credential-id is required in CI.",endTime:Date.now()}),process.exitCode=1;return}let V=await So({message:`Choose a ${s==="ios"?"App Store Connect":"Google Play"} credential:`,options:P.map(G=>({value:G.credentialId,label:G.name,hint:`${G.keyId?`ID: ${G.keyId}`:""} ${G.issuerId?`(Issuer: ${G.issuerId.substring(0,8)}...)`:""}`}))});if(Ut(V)){Ao("Submission cancelled"),await u("failed",{error:"Submission cancelled while selecting credential.",endTime:Date.now()}),process.exitCode=1;return}w=P.find(G=>G.credentialId===V),$e(`Using selected: ${se.green(w.name)}`)}}catch(I){t.stop("Failed to fetch credentials"),ye(`API Error: ${I.message} `),await u("failed",{error:`Failed to fetch credentials: ${I.message}`,endTime:Date.now()}),process.exitCode=1;return}let T=ue.mkdtempSync(Ne.join(sn.tmpdir(),`${m.nameLower}-submit-`)),B=w.keyId||w.meta?.keyId,X=w.issuerId||w.meta?.issuerId,U=w.type==="asc_api_key"?`AuthKey_${B}.p8`:"service-account.json",K=Ne.join(T,U);t.start("Downloading secure key...");try{let I=await D.get(`/credentials/${w.credentialId}/download`,{params:{projectId:r,format:"raw"}});if(I.data.status!=="success"||!I.data.downloadUrl)throw new Error("Failed to get secure download URL");let $=await Xa.get(I.data.downloadUrl,{responseType:"arraybuffer"});ue.writeFileSync(K,Buffer.from($.data)),t.stop("Key downloaded to secure temp storage")}catch(I){t.stop("Download failed"),ye(`Failed to download key: ${I.message}`);try{ue.rmSync(T,{recursive:!0,force:!0})}catch{}await u("failed",{error:`Failed to download credential key: ${I.message}`,endTime:Date.now()}),process.exitCode=1;return}$e(se.blue(`Initiating ${s==="ios"?"TestFlight":"Google Play"} submission...`));let v=!1,R;try{if(s==="ios"){if(!B){let $=await Xn({message:"Enter App Store Connect Key ID (e.g. 2X948D...):",validate:x=>x.length>0?void 0:"Key ID is required"});if(Ut($)){await u("failed",{error:"Submission cancelled while entering ASC Key ID.",endTime:Date.now()}),process.exitCode=1;return}B=$}if(!X||X==="undefined"){let $=await Xn({message:"Enter App Store Connect Issuer ID (Found on ASC Keys page):",validate:x=>x.length>0?void 0:"Issuer ID is required"});if(Ut($)){await u("failed",{error:"Submission cancelled while entering ASC Issuer ID.",endTime:Date.now()}),process.exitCode=1;return}X=$}$e(`Using ASC Key ID: ${B}`),$e(`Using ASC Issuer ID: ${X}`);let I=a?await tm(b,K,X,B,p,a):await em(b,K,X,B,p);Io(`${s==="ios"?"App Store":"Google Play"} submission successful!`),v=!0}else R=await sm(b,K,y||"internal",f,g||"completed",h,S,o),Io("Google Play submission successful!"),v=!0}catch(I){ye(`Submission failed: ${I.message}`),await u("failed",{error:I.message,endTime:Date.now()}),Ft(e,{status:"failed",projectId:r,submitId:c,platform:s,profile:o,buildId:_?.buildId||e.buildId,artifactName:_?.artifactName,error:I.message,dashboardUrl:c?on(c,r):void 0}),process.exitCode=1}finally{v&&(await u("success",{endTime:Date.now(),versionCode:R?.versionCode,track:y,releaseStatus:g}),Ft(e,{status:"success",projectId:r,submitId:c,platform:s,profile:o,buildId:_?.buildId||e.buildId,artifactName:_?.artifactName,versionCode:R?.versionCode,track:y,releaseStatus:g,dashboardUrl:c?on(c,r):void 0})),Em(T),b&&b.includes(`${m.nameLower}-artifact-`)}}function Cf(e){let t=`./${m.configFileName}`;if(ue.existsSync(t))try{return JSON.parse(ue.readFileSync(t,"utf-8"))}catch(n){return ye(`Failed to read ${m.configFileName}: ${n.message}`),null}return e.projectId?{projectId:e.projectId}:(ye(`No ${m.configFileName} found. Run \`${m.nameLower} init\` or \`${m.nameLower} link\` first.`),null)}async function Of(e,t,n){let i=n.projectId||e.projectId;if(!i){ye(`${m.configFileName} is missing projectId.`),process.exitCode=1;return}let r=n.submitId||wo.randomUUID(),o=!!n.latest||!n.buildId,s=kf({...n,latest:o,profile:t,projectId:i,submitId:r}),a={projectId:i,submitId:r,platform:"ios",profile:t,latest:o,buildId:n.buildId,credentialId:n.credentialId,status:"pending",source:"cli",submitArgs:Qa(n),runnerArgs:s,runnerCommand:[m.nameLower,"submit",...s].map(jf).join(" "),appName:e.name,startTime:Date.now()},l=Bt();l.start("Queuing iOS submit on macOS runner...");try{let d=await D.post("/submissions",a),c=d.data?.submission||d.data?.submit||{},u=d.data?.dashboardUrl||on(r,i);l.stop("iOS submit queued"),$e(`Submission ID: ${se.cyan(r)}`),$e(`Dashboard: ${se.blue.underline(u)}`),Ft(n,{status:"pending",projectId:i,submitId:r,platform:"ios",profile:t,latest:o,buildId:n.buildId,dashboardUrl:u}),await Nf(i,r,n)}catch(d){l.stop("Could not queue iOS submit"),ye(Mf(d)),process.exitCode=1}}async function Df(e,t,n,i,r,o={}){let s=r.submitId||wo.randomUUID(),a=!!r.latest||!r.buildId,l={projectId:t,submitId:s,platform:n,profile:i,latest:a,buildId:r.buildId,credentialId:r.credentialId,status:"running",source:"cli-direct",submitArgs:Qa(r),appName:e.name,startTime:Date.now(),...o};try{let d=await D.post("/submissions",l),c=d.data?.submission||d.data?.submit||{},u=d.data?.dashboardUrl||c.dashboardUrl||on(s,t);return $e(`Submission ID: ${se.cyan(s)}`),$e(`Dashboard: ${se.blue.underline(u)}`),Ft(r,{status:"running",projectId:t,submitId:s,platform:n,profile:i,latest:a,buildId:r.buildId,dashboardUrl:u}),s}catch(d){let c=d.response?.data?.message||d.response?.data?.error||d.message;return $e(se.yellow(`Could not create submission tracking record: ${c}`)),null}}function kf(e){let t=["--local","--submit-id",e.submitId,"--project-id",e.projectId,"--platform","ios","--profile",e.profile||"production"];return e.buildId?t.push("--build-id",e.buildId):t.push("--latest"),e.credentialId&&t.push("--credential-id",e.credentialId),e.bundleId&&t.push("--bundle-id",e.bundleId),e.packageName&&t.push("--package-name",e.packageName),e.quiet&&t.push("--quiet"),e.jsonOutput&&t.push("--json-output",e.jsonOutput),t.filter(n=>n!=null&&n!=="")}async function Nf(e,t,n){let i=Bt(),r=0,o=0;for(n.quiet||i.start("Waiting for iOS submit runner...");;)try{let s=await D.get(`/submissions/${e}/${t}`),a=s.data?.submission||s.data?.submit||s.data,l=String(a?.status||"pending").toLowerCase();r=0;let d=Array.isArray(a?.logs)?a.logs:[];for(let c=o;c<d.length;c++){let u=d[c];u&&console.log(se.dim(String(u)))}if(o=d.length,["success","completed","succeeded"].includes(l)){n.quiet||i.stop("iOS submit completed"),Io("App Store submission successful!"),Ft(n,{status:"success",projectId:e,submitId:t,platform:"ios",profile:a?.profile||n.profile||"production",buildId:a?.buildId||n.buildId,artifactName:a?.artifactName,dashboardUrl:a?.dashboardUrl||on(t,e)});return}if(["failed","error","cancelled","canceled"].includes(l)){n.quiet||i.stop("iOS submit failed");let c=a?.error||a?.message||"Unknown iOS submit failure.";ye(c),Ft(n,{status:"failed",projectId:e,submitId:t,platform:"ios",profile:a?.profile||n.profile||"production",buildId:a?.buildId||n.buildId,artifactName:a?.artifactName,error:c,dashboardUrl:a?.dashboardUrl||on(t,e)}),process.exitCode=1;return}n.quiet||i.message(`iOS submit ${l}...`),await Eo($f)}catch(s){if(r++,r>=_f){n.quiet||i.stop("Lost connection to iOS submit status"),ye(`Could not fetch iOS submit status after ${r} attempts: ${s.message}`),process.exitCode=1;return}await Eo(Math.min(2e3*r,15e3))}}async function xf(e,t,n){let i;for(let r=1;r<=3;r++)try{await D.patch(`/submissions/${e}/${t}`,n);return}catch(o){if(i=o,r>=3||!Tf(o))break;await Eo(1e3*r)}Ya.warn(se.dim(`Could not report submission status: ${i?.message||i}`))}function Tf(e){let t=e.response?.status;return!t||t===408||t===409||t===425||t===429||t>=500}function Lf(){let e={gitlabJobId:process.env.CI_JOB_ID,gitlabJobUrl:process.env.CI_JOB_URL,gitlabPipelineId:process.env.CI_PIPELINE_ID,gitlabProjectId:process.env.CI_PROJECT_ID,gitlabProjectPath:process.env.CI_PROJECT_PATH};return Object.fromEntries(Object.entries(e).filter(([,t])=>!!t))}function Mf(e){let t=e.response?.status,n=e.response?.data?.message||e.response?.data?.error;return t===404||t===405?["Managed iOS submit is not enabled on this Mach API yet.","Deploy the API/dashboard submission orchestration endpoint, then retry the same command.","Expected API: POST /submissions and GET/PATCH /submissions/:projectId/:submitId."].join(`
|
|
1687
|
+
`):n||e.message||String(e)}function on(e,t){if(!e)return yt;let n=t?`?projectId=${encodeURIComponent(t)}`:"";return`${yt}/submissions/${e}${n}`}function Ft(e,t){if(!e.jsonOutput)return;let n=Ne.resolve(e.jsonOutput),i={...t,url:t.url||t.dashboardUrl||on(t.submitId,t.projectId),updatedAt:new Date().toISOString()};try{let r=Ne.dirname(n);r&&r!=="."&&ue.mkdirSync(r,{recursive:!0}),ue.writeFileSync(n,JSON.stringify(i,null,2))}catch(r){Ya.warn(se.yellow(`Could not write submission metadata JSON: ${r.message}`))}}function Uf(e,t){return t&&e.find(n=>n.credentialId===t||n.id===t||n.keyId===t||n.meta?.keyId===t)||null}function Ff(e,t){let n=e.filter(i=>[i.bundleId,i.bundleIdentifier,i.appIdentifier,i.meta?.bundleId,i.meta?.bundleIdentifier,i.meta?.appIdentifier].filter(Boolean).map(String).includes(t));return n.length===1?n[0]:null}function Bf(){return process.env.CI==="true"||process.env.CI==="1"||!process.stdin.isTTY}function Eo(e){return new Promise(t=>setTimeout(t,e))}function jf(e){return/^[a-zA-Z0-9_./:=@-]+$/.test(e)?e:`'${e.replace(/'/g,"'\\''")}'`}function Hf(e,t){if(e.submit?.[t]?.android?.package)return e.submit[t].android.package;let n=un(e,t);if(n)return n;let i=Ne.join(process.cwd(),"app.json");if(ue.existsSync(i))try{return JSON.parse(ue.readFileSync(i,"utf-8")).expo?.android?.package}catch{}let r=Ne.join(process.cwd(),"app.config.json");if(ue.existsSync(r))try{let o=JSON.parse(ue.readFileSync(r,"utf-8"));return o.expo?.android?.package||o.android?.package}catch{}}function Vf(e,t){let n=e.filter(o=>ji(o)===t);if(n.length>0)return n;let i=e.filter(o=>{let s=ji(o);return!s||s==="*"});return e.length>0&&e.length===i.length?i:[]}function Gf(e,t){return e.submit?.[t]?.ios?.bundleIdentifier?e.submit[t].ios.bundleIdentifier:e.submit?.[t]?.ios?.bundleId?e.submit[t].ios.bundleId:Xt(e,t)}function zf(e,t,n){let i=e.submit?.[t]?.ios||{},r=e.submit?.production?.ios||{},o=n.sshHost||i.sshHost||r.sshHost||process.env.MACH_IOS_SUBMIT_SSH_HOST;return o?{sshHost:o,sshUser:n.sshUser||i.sshUser||r.sshUser||process.env.MACH_IOS_SUBMIT_SSH_USER||process.env.USER||"ubuntu",sshKey:n.sshKey||i.sshKey||r.sshKey||process.env.MACH_IOS_SUBMIT_SSH_KEY}:null}function Kf(e,t,n){let i=n||e.submit?.[t]?.android?.releaseStatus||e.submit?.production?.android?.releaseStatus||"completed";return Wf(i)}function Wf(e){let t=Pf[String(e).trim().toLowerCase()];if(!t)throw new Error(`Invalid Android release status "${e}". Use completed, draft, halted, or inProgress.`);return t}function Jf(e,t,n){let i=n??e.submit?.[t]?.android?.rollout??e.submit?.[t]?.android?.userFraction??e.submit?.[t]?.android?.rolloutFraction??e.submit?.production?.android?.rollout??e.submit?.production?.android?.userFraction??e.submit?.production?.android?.rolloutFraction;if(i==null||i==="")return;let r=Number(i);if(!Number.isFinite(r)||r<=0||r>=1)throw new Error(`Invalid Android rollout fraction "${i}". Use a number greater than 0 and less than 1, for example 0.1.`);return r}function qf(e,t,n){let i=n??e.submit?.[t]?.android?.changesNotSentForReview??e.submit?.[t]?.android?.changes_not_sent_for_review??e.submit?.production?.android?.changesNotSentForReview??e.submit?.production?.android?.changes_not_sent_for_review??!1;return i===!0||i==="true"||i==="1"}function Yf(e,t){if(e==="inProgress"&&t===void 0)throw new Error("Google Play staged rollout requires --rollout <fraction> when --release-status inProgress is used.");if(e!=="inProgress"&&e!=="halted"&&t!==void 0)throw new Error("Android rollout fraction can only be used with --release-status inProgress or halted.")}async function Xf(e,t,n,i){let r=n.buildId?"id":n.latest?"latest":null;if(!r){let s=await So({message:"Select artifact source:",options:[{value:"latest",label:`Latest Production Build (${m.name})`},{value:"id",label:`Input Build ID (${m.name})`},{value:"url",label:"Remote URL"},{value:"local",label:"Local File Path"}]});if(Ut(s))return Ao("Operation cancelled"),null;r=s}if(r==="local"){let s=await Xn({message:"Enter path to artifact (.ipa/.aab):",validate:a=>{if(!ue.existsSync(a))return"File not found";if(t==="ios"&&!a.endsWith(".ipa"))return"Must be an .ipa file";if(t==="android"&&!a.endsWith(".aab"))return"Must be an .aab file"}});return Ut(s)?null:{filePath:s,source:"local"}}let o=Bt();if(r==="latest"){let s=n.profile||n.buildProfile;o.start(`Fetching latest${s?` ${s}`:""} build...`);try{let a=await D.get(`/builds/${e}`,{params:{limit:50}});if(a.data.status!=="success")throw new Error(a.data.message);let l=a.data.builds||[],d=s?.toLowerCase(),c=w=>w.platform?.toLowerCase()===t.toLowerCase()&&w.status?.toLowerCase()==="success",u=w=>d?[w.buildProfile,w.profile,w.profileName,w.buildType].filter(Boolean).some(T=>String(T).toLowerCase()===d):!0,f=l.filter(w=>c(w)&&u(w)),p=f.find(w=>w.buildType?.toLowerCase()==="store"||w.distribution?.toLowerCase()==="store")||f[0],y=l.some(w=>w.platform?.toLowerCase()===t.toLowerCase()&&w.status?.toLowerCase()==="success");if(!p)return o.stop("No suitable build found"),ye(s&&y?`No successful ${t} builds found for profile "${s}".`:"No successful builds found for this platform."),null;o.stop(`Found build: ${p.buildId}`);let g=p.artifacts||[];if(g.length===0||g.every(w=>!(w.url||w.downloadUrl)))try{let w=await D.get(`/builds/${e}/${p.buildId}/artifacts`);w.data.status==="success"&&w.data.artifacts?.length>0?(g=w.data.artifacts.map(T=>({...T,url:T.url||T.downloadUrl})),console.log(se.cyan(` [RECOVERY] Fetched ${g.length} artifact(s) with download URLs.`))):console.log(se.yellow(" [RECOVERY] /artifacts endpoint returned 0 artifacts."))}catch(w){console.log(se.red(` [RECOVERY] /artifacts fetch failed: ${w.message}`))}let S=t==="ios",b=g.find(w=>{let T=(w.type||"").toLowerCase(),B=(w.name||"").toLowerCase();if(console.log(se.dim(` - Checking: ${w.name} (Type: ${w.type}, HasLink: ${!!(w.url||w.downloadUrl)})`)),T)return T===(S?"ipa":"aab");let X=S?".ipa":".aab",U=(w.url||w.downloadUrl||"").toLowerCase();return B.endsWith(X)||U.includes(X)});if(!b||!(b.url||b.downloadUrl))return ye("Build found but artifact URL is missing."),null;let _=b.url||b.downloadUrl;return{filePath:await ho(_,S?"ios":"android"),buildId:p.buildId,artifactName:b.name,source:"latest"}}catch(a){return o.stop("Fetch failed"),ye(`API Error: ${a.message}`),null}}if(r==="id"){let s=n.buildId||await Xn({message:"Enter Build ID:",validate:l=>l.length<5?"Invalid ID":void 0});if(Ut(s))return null;let a=String(s);o.start("Fetching build...");try{let l=null;try{let p=await D.get(`/builds/${e}/${a}`);p.data.status==="success"&&(l=p.data.build)}catch(p){p.response?.status!==404&&console.log(se.dim(` [RECOVERY] Project build lookup skipped: ${p.message}`))}if(!l){let p=await D.get(`/build/${a}`);if(p.data.status!=="success")throw new Error(p.data.message);l=p.data.build}if(!l)throw new Error(`Build ${a} was not found.`);let d=t==="ios",c=Bi(l.artifacts);Zf(c)||(c=await Ka(e,a,c));let u=za(c,t);if(u||(c=await Ka(e,a,c),u=za(c,t)),!u)throw new Error(`No ${d?".ipa":".aab"} artifact found for build ${a}. The build exists, but its artifact list does not contain a downloadable submission artifact.`);let f=u.url||u.downloadUrl;if(!f)throw new Error(`Artifact ${u.name||"(unnamed)"} for build ${a} has no download URL. Retry after the build artifact upload is visible in the Installation Hub.`);return o.stop(`Found build: ${l.buildId||a}`),{filePath:await ho(f,d?"ios":"android"),buildId:l.buildId||a,artifactName:u.name,source:"id"}}catch(l){throw o.stop("Fetch failed"),l}}if(r==="url"){let s=await Xn({message:"Enter Artifact URL:",validate:a=>a.startsWith("http")?void 0:"Must be a valid URL"});return Ut(s)?null:{filePath:await ho(s,t),source:"url"}}return null}function Bi(e){return(e||[]).map(t=>({...t,url:t.url||t.downloadUrl}))}function Zf(e){return e.some(t=>!!(t.url||t.downloadUrl))}function za(e,t){let n=t==="ios",i=n?"ipa":"aab",r=n?".ipa":".aab";return e.find(o=>{let s=String(o.type||"").toLowerCase(),a=String(o.name||"").toLowerCase(),l=String(o.url||o.downloadUrl||"").toLowerCase();return s?s===i:a.endsWith(r)||l.includes(r)})||null}function Qf(e,t){let n=e==="ios"?".ipa":".aab";if(t.buildId)return`No downloadable ${n} artifact found for build ${t.buildId}. Check that the build finished artifact upload before submitting.`;if(t.latest){let i=t.profile||t.buildProfile;return`No latest successful ${e}${i?` ${i}`:""} build has a downloadable ${n} artifact.`}return`No downloadable ${n} artifact was selected for submission.`}async function Ka(e,t,n){try{let i=await D.get(`/builds/${e}/${t}/artifacts`);if(i.data.status==="success"&&i.data.artifacts?.length>0){let r=Bi(i.data.artifacts);return console.log(se.cyan(` [RECOVERY] Fetched ${r.length} artifact(s) with download URLs.`)),r}}catch(i){console.log(se.dim(` [RECOVERY] Project artifact lookup skipped: ${i.message}`))}try{let i=await D.get(`/public/builds/${t}`);if(i.data.status==="success"&&i.data.artifacts?.length>0){let r=Bi(i.data.artifacts);return console.log(se.cyan(` [RECOVERY] Fetched ${r.length} public artifact(s) with download URLs.`)),r}}catch(i){console.log(se.dim(` [RECOVERY] Public artifact lookup skipped: ${i.message}`))}return Bi(n)}async function ho(e,t,n=3){let i=Bt();i.start("Downloading artifact...");let r=ue.mkdtempSync(Ne.join(sn.tmpdir(),`${m.nameLower}-artifact-`)),o=`app.${t==="ios"?"ipa":"aab"}`,s=Ne.join(r,o);for(let a=1;a<=n;a++)try{a>1&&(i.message(`Downloading artifact (Retry ${a}/${n})...`),await new Promise(c=>setTimeout(c,2e3*a)));let l=ue.createWriteStream(s),d=await Xa({url:e,method:"GET",responseType:"stream",timeout:6e4});return await new Promise((c,u)=>{d.data.pipe(l);let f=!1;d.data.on("error",p=>{f||(f=!0,l.close(),u(p))}),l.on("finish",()=>{f||c()}),l.on("error",p=>{f||(f=!0,u(p))})}),i.stop("Download complete"),s}catch(l){if(a===n)throw i.stop("Download failed"),l}throw new Error("Download failed after retries")}async function em(e,t,n,i,r){let o=Bt();if(r&&$e(`Bundle ID: ${se.green(r)}`),!n||!i)throw ye(`Missing credentials: issuerId=${n}, keyId=${i}. Check your Dashboard.`),new Error("Missing ASC API Key Metadata (IssuerID or KeyID)");let s=el(t,n,i),a=lm();return o.start("Uploading to TestFlight (pilot)..."),new Promise((l,d)=>{let c=cm(),u=vf(a.command,["pilot","upload","--ipa",e,"--api_key_path",s,"--skip_submission","true","--skip_waiting_for_build_processing","true"],{stdio:["ignore","pipe","pipe"],env:a.env});u.stdout?.on("data",f=>c.append(f,process.stdout)),u.stderr?.on("data",f=>c.append(f,process.stderr)),u.on("close",f=>{if(c.flush(),f!==0){o.stop("Pilot failed");try{ue.unlinkSync(s)}catch{}d(um(f,c.lines()))}else{o.stop("IPA uploaded to TestFlight");try{ue.unlinkSync(s)}catch{}l({})}}),u.on("error",f=>{c.flush();try{ue.unlinkSync(s)}catch{}o.stop("Pilot execution error");let p=Sm(f);p.logs=c.lines(),d(p)})})}async function tm(e,t,n,i,r,o){let s=Bt();if(r&&$e(`Bundle ID: ${se.green(r)}`),!n||!i)throw ye(`Missing credentials: issuerId=${n}, keyId=${i}. Check your Dashboard.`),new Error("Missing ASC API Key Metadata (IssuerID or KeyID)");let a=el(t,n,i),l=`${o.sshUser}@${o.sshHost}`,d=nm(o),c=im(o),u="",f="";try{if(s.start(`Preparing remote iOS submit runner (${l})...`),u=rm("ssh",[...d,"mktemp -d /tmp/mach-submit.XXXXXX"]).trim(),!u)throw new Error("Remote runner did not return a temp directory.");s.stop(`Remote runner ready: ${l}`),s.start("Uploading IPA and App Store Connect key to remote runner..."),yo("scp",[...c,e,`${l}:${u}/app.ipa`],"IPA upload to remote runner"),yo("scp",[...c,a,`${l}:${u}/api_key.json`],"ASC key upload to remote runner"),f=Ne.join(sn.tmpdir(),`${m.nameLower}-ios-submit-${Date.now()}.sh`),ue.writeFileSync(f,om(u)),yo("scp",[...c,f,`${l}:${u}/submit.sh`],"submit script upload to remote runner"),s.stop("Remote submit inputs uploaded"),s.start("Uploading to TestFlight on remote runner...");let p=`chmod +x ${Zn(`${u}/submit.sh`)} && bash ${Zn(`${u}/submit.sh`)}`,y=rn("ssh",[...d,p],{stdio:"inherit"});if(y.error)throw vo("ssh",y.error);if(y.status!==0)throw new Error(`Remote iOS submit failed with exit code ${y.status}.`);return s.stop("IPA uploaded to TestFlight"),{apiKeyJsonPath:null}}catch(p){throw s.stop("Remote iOS submit failed"),p}finally{try{ue.unlinkSync(a)}catch{}if(f)try{ue.unlinkSync(f)}catch{}if(u)try{rn("ssh",[...d,`rm -rf ${Zn(u)}`],{stdio:"ignore"})}catch{}}}function el(e,t,n){let i=ue.readFileSync(e,"utf8"),r;try{r=wo.createPrivateKey(i).export({type:"pkcs8",format:"pem"})}catch{$e("Key normalization failed, falling back to manual re-wrapping..."),r=`-----BEGIN PRIVATE KEY-----
|
|
1444
1688
|
${(i.replace(/-----BEGIN[^-]*-----/g,"").replace(/-----END[^-]*-----/g,"").replace(/\s+/g,"").match(/.{1,64}/g)||[]).join(`
|
|
1445
1689
|
`)}
|
|
1446
|
-
-----END PRIVATE KEY-----`}let o=
|
|
1690
|
+
-----END PRIVATE KEY-----`}let o=Ne.join(sn.tmpdir(),`api_key_${n}_${Date.now()}.json`),s={key_id:n,issuer_id:t,key:r,in_house:!1};return ue.writeFileSync(o,JSON.stringify(s,null,2)),o}function nm(e){let t=["-o","StrictHostKeyChecking=no","-o","ServerAliveInterval=30"];return e.sshKey&&t.push("-i",e.sshKey),t.push(`${e.sshUser}@${e.sshHost}`),t}function im(e){let t=["-o","StrictHostKeyChecking=no","-o","ServerAliveInterval=30"];return e.sshKey&&t.push("-i",e.sshKey),t}function rm(e,t){let n=rn(e,t,{encoding:"utf-8",stdio:["ignore","pipe","inherit"]});if(n.error)throw vo(e,n.error);if(n.status!==0)throw new Error(`${e} failed with exit code ${n.status}.`);return n.stdout||""}function yo(e,t,n){let i=rn(e,t,{stdio:"inherit"});if(i.error)throw vo(e,i.error);if(i.status!==0)throw new Error(`${n} failed with exit code ${i.status}.`)}function vo(e,t){return t?.code==="ENOENT"?new Error(`${e} was not found on this machine. Install OpenSSH client tools or run iOS submit directly on the macOS runner.`):t}function Zn(e){return`'${e.replace(/'/g,"'\\''")}'`}function om(e){let t=Zn(`${e}/app.ipa`),n=Zn(`${e}/api_key.json`);return`#!/bin/bash
|
|
1447
1691
|
set -euo pipefail
|
|
1448
1692
|
|
|
1449
1693
|
export PATH="/opt/homebrew/bin:/usr/local/bin:/usr/bin:/bin:/usr/sbin:/sbin:$HOME/.local/share/fastlane/3.4.0/bin:$PATH"
|
|
@@ -1471,39 +1715,40 @@ fastlane pilot upload \\
|
|
|
1471
1715
|
--api_key_path ${n} \\
|
|
1472
1716
|
--skip_submission true \\
|
|
1473
1717
|
--skip_waiting_for_build_processing true
|
|
1474
|
-
`}async function
|
|
1718
|
+
`}async function sm(e,t,n="internal",i,r="completed",o,s=!1,a="production"){let l=Bt();if(!i||i==="*")throw new Error("Android package name is required for Google Play submission.");let d=o!==void 0?` (${o} rollout)`:"";l.start(`Uploading to Google Play ${n} track with ${r} release status${d}...`);try{let c=JSON.parse(ue.readFileSync(t,"utf-8"));am(c);let u=await Va({packageName:i,serviceAccount:c,aabPath:e,track:n,releaseStatus:r,userFraction:o,changesNotSentForReview:s});return l.stop(`AAB uploaded to ${n} track (versionCode ${u.versionCode})`),u}catch(c){throw l.stop("Google Play upload failed"),new Error(Am(c,n,i,a))}}function am(e){if(!e?.client_email||!e?.private_key)throw new Error("Invalid Google service account JSON: missing client_email or private_key.")}function bo(){let e=process.env.HOME||sn.homedir(),t=process.env.FASTLANE_GEM_HOME||Ne.join(e,".local/share/fastlane/3.4.0"),n=[process.env.FASTLANE_BIN_DIR,"/usr/local/opt/ruby/bin","/opt/homebrew/opt/ruby/bin","/usr/local/bin","/opt/homebrew/bin","/usr/local/Cellar/fastlane/2.227.0/libexec/bin",Ne.join(t,"bin"),process.env.PATH].filter(Boolean).join(":");return{...process.env,PATH:n,GEM_HOME:t,GEM_PATH:[t,"/usr/local/Cellar/fastlane/2.227.0/libexec",process.env.GEM_PATH].filter(Boolean).join(":"),FASTLANE_INSTALLED_VIA_HOMEBREW:"true",FASTLANE_SKIP_UPDATE_CHECK:"1",FASTLANE_HIDE_CHANGELOG:"1",LANG:process.env.LANG||"en_US.UTF-8",LC_ALL:process.env.LC_ALL||"en_US.UTF-8",CI:process.env.CI||"1"}}function lm(){let e=bo(),t=Wa(e);if(t)return t;if(process.env.MACH_SKIP_FASTLANE_INSTALL!=="1"){dm(e);let n=Wa(bo());if(n)return n}return{command:"fastlane",env:bo()}}function Wa(e){let t=process.env.HOME||sn.homedir(),n=[process.env.FASTLANE_BINARY,"/usr/local/bin/fastlane","/opt/homebrew/bin/fastlane","/usr/local/Cellar/fastlane/2.227.0/libexec/bin/fastlane",Ne.join(process.env.FASTLANE_GEM_HOME||Ne.join(t,".local/share/fastlane/3.4.0"),"bin/fastlane"),"fastlane"].filter(Boolean);for(let i of n){if(i.includes("/")&&!ue.existsSync(i))continue;if(!rn(i,["--version"],{env:e,stdio:"ignore"}).error)return{command:i,env:e}}return null}function dm(e){let t=rn("gem",["--version"],{env:e,stdio:"ignore"});if(t.error||t.status!==0)return;let n=process.env.HOME||sn.homedir(),i=process.env.FASTLANE_GEM_HOME||Ne.join(n,".local/share/fastlane/3.4.0"),r=Ne.join(i,"bin");ue.mkdirSync(r,{recursive:!0}),$e(se.dim("fastlane not found. Installing fastlane into the local Mach runner cache..."));let o=rn("gem",["install","fastlane","-NV","--install-dir",i,"--bindir",r],{env:{...e,GEM_HOME:i,GEM_PATH:[i,e.GEM_PATH].filter(Boolean).join(":")},stdio:"inherit"});(o.error||o.status!==0)&&$e(se.yellow("Automatic fastlane install failed; Mach will try PATH resolution once more."))}function cm(e=Za){let t=[],n="",i=r=>{let o=nl(r);if(o)for(t.push(o);t.length>e;)t.shift()};return{append(r,o){let s=Buffer.isBuffer(r)?r.toString("utf8"):String(r);o.write(s),n+=s;let a=n.split(/\r?\n/);n=a.pop()||"";for(let l of a)i(l)},flush(){n.trim()&&i(n),n=""},lines(){return t.slice()}}}function um(e,t){let n=new Error(pm(e,t));return n.logs=tl(t),n.exitCode=e,n}function pm(e,t){let n=`fastlane pilot failed with exit code ${e??"unknown"}.`,i=fm(t);return i.length===0?n:`${n}
|
|
1475
1719
|
|
|
1476
1720
|
Fastlane output:
|
|
1477
1721
|
${i.join(`
|
|
1478
|
-
`)}`}function
|
|
1479
|
-
`),n=t.match(/CFBundleShortVersionString\s*\[([^\]]+)\]/i)?.[1]||t.match(/train version ['"]([^'"]+)['"]/i)?.[1];if(/Invalid Pre-Release Train/i.test(t)||/CFBundleShortVersionString[\s\S]*must contain a higher version/i.test(t))return[`App Store Connect rejected CFBundleShortVersionString${n?` ${n}`:""}: this App Store version train is closed or not higher than the approved version.`,'ios.buildNumber="auto" only changes CFBundleVersion; bump the marketing version (Expo app.json "expo.version" / iOS MARKETING_VERSION), rebuild, then submit the new build.'].join(" ");if(!/bundle version must be higher than the previously uploaded version/i.test(t))return null;let i=t.match(/previous(?:ly)?BundleVersion\s*:\s*([0-9.]+)/i)?.[1]||t.match(/previously uploaded version:\s*[‘'"]?([0-9.]+)/i)?.[1];return`App Store Connect rejected CFBundleVersion: the bundle version must be higher than the previously uploaded version.${i?` Previous uploaded build: ${i}.`:""}`}function
|
|
1480
|
-
`))}function
|
|
1722
|
+
`)}`}function fm(e){let t=tl(e);if(t.length===0)return[];let n=Ja(t.filter(gm)),i=mm(t);if(i)return[i,...qa(n,go-1,Ga)];let r=n.length>0?n:t.slice(-go);return qa(Ja(r),go,Ga)}function mm(e){let t=e.join(`
|
|
1723
|
+
`),n=t.match(/CFBundleShortVersionString\s*\[([^\]]+)\]/i)?.[1]||t.match(/train version ['"]([^'"]+)['"]/i)?.[1];if(/Invalid Pre-Release Train/i.test(t)||/CFBundleShortVersionString[\s\S]*must contain a higher version/i.test(t))return[`App Store Connect rejected CFBundleShortVersionString${n?` ${n}`:""}: this App Store version train is closed or not higher than the approved version.`,'ios.buildNumber="auto" only changes CFBundleVersion; bump the marketing version (Expo app.json "expo.version" / iOS MARKETING_VERSION), rebuild, then submit the new build.'].join(" ");if(!/bundle version must be higher than the previously uploaded version/i.test(t))return null;let i=t.match(/previous(?:ly)?BundleVersion\s*:\s*([0-9.]+)/i)?.[1]||t.match(/previously uploaded version:\s*[‘'"]?([0-9.]+)/i)?.[1];return`App Store Connect rejected CFBundleVersion: the bundle version must be higher than the previously uploaded version.${i?` Previous uploaded build: ${i}.`:""}`}function gm(e){return/\[!\]|ERROR ITMS-\d+|ITMS-\d+|ENTITY_ERROR|previousBundleVersion|CFBundleVersion|Application Loader Error Output|Transporter Error|Transporter transfer failed|Asset validation failed|Validation failed|Error Domain=|The request could not be completed|No suitable application records|Could not|authentication|unauthori[sz]ed|invalid|failed|exception/i.test(e)}function Ja(e){let t=new Set,n=[];for(let i of e){let r=i.trim();!r||t.has(r)||(t.add(r),n.push(i))}return n}function qa(e,t,n){let i=[],r=0;for(let o=e.length-1;o>=0&&i.length<t;o--){let s=e[o],a=r+s.length+1;if(a>n&&i.length>0)break;i.unshift(s.length>n?`${s.slice(0,n-18)}... [truncated]`:s),r=a}return i}function tl(e){if(!Array.isArray(e))return[];let t=[];for(let n of e){let i=String(n).split(/\r?\n/);for(let r of i){let o=nl(r);o&&t.push(o)}}return t.slice(-Za)}function nl(e){return ym(hm(e).trimEnd()).trim()}function hm(e){return e.replace(/[\u001b\u009b][[\]()#;?]*(?:(?:(?:[a-zA-Z\d]*(?:;[a-zA-Z\d]*)*)?\u0007)|(?:(?:\d{1,4}(?:;\d{0,4})*)?[\dA-PR-TZcf-nq-uy=><~]))/g,"")}function ym(e){let t=e.replace(/-----BEGIN [^-]+-----[\s\S]*?-----END [^-]+-----/g,"[REDACTED_PRIVATE_KEY]").replace(/(authorization:\s*bearer\s+)[A-Za-z0-9._-]+/ig,"$1[REDACTED]").replace(/((?:password|token|secret|private[_-]?key)\s*[:=]\s*)("[^"]+"|'[^']+'|[^\s,]+)/ig,"$1[REDACTED]");for(let[n,i]of Object.entries(process.env))!i||i.length<8||/(TOKEN|SECRET|PASSWORD|PASS|PRIVATE|CREDENTIAL)/i.test(n)&&(t=t.replace(new RegExp(bm(i),"g"),"[REDACTED]"));return t}function bm(e){return e.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}function Sm(e){return e?.code!=="ENOENT"?e:new Error(["fastlane was not found on PATH.","Mach submit uses Fastlane for iOS TestFlight/App Store uploads.","Run iOS submit on a macOS runner with Fastlane, or expose it via FASTLANE_BINARY / FASTLANE_BIN_DIR.","Example: gem install fastlane -NV"].join(`
|
|
1724
|
+
`))}function Am(e,t,n,i="production"){let r=e?.message||String(e);if(/changesNotSentForReview/i.test(r))return["Google Play rejected the commit because this change may need explicit review handling.",`Package: ${n||"unknown"} | Track: ${t}`,`Retry with: ${m.nameLower} submit --latest --platform android --profile ${i} --track ${t} --changes-not-sent-for-review`,"Then send the change for review from Google Play Console if required."].join(`
|
|
1481
1725
|
`);if(/caller does not have permission|permission denied|insufficient permissions|not authorized/i.test(r))return["Google Play rejected the service account permissions.",`Package: ${n||"unknown"} | Track: ${t}`,"Grant this service account access to the app in Play Console with release permissions, then retry."].join(`
|
|
1482
1726
|
`);if(/package.*not found|application.*not found|no application was found/i.test(r))return["Google Play could not find this package for the selected service account.",`Package: ${n||"unknown"} | Track: ${t}`,"Check android.package / submit.<profile>.android.package and make sure the app exists in this Play Console account."].join(`
|
|
1483
1727
|
`);if(/only releases with status draft|draft app/i.test(r))return["Google Play requires a draft release for this app state.",`Package: ${n||"unknown"} | Track: ${t}`,`Retry with: ${m.nameLower} submit --latest --platform android --profile ${i} --track ${t} --release-status draft`].join(`
|
|
1484
1728
|
`);if(r.includes("does not allow any existing users to upgrade"))return["Google Play rejected this release because the uploaded AAB is not an upgrade for existing users.",`Package: ${n||"unknown"} | Track: ${t}`,"Build a new Android artifact with a higher versionCode, then submit that build.",`Recommended: ${m.nameLower} build --platform android --profile ${i} --auto-version`,`Then: ${m.nameLower} submit --latest --platform android --profile ${i} --track ${t}`].join(`
|
|
1485
1729
|
`);if(/version code \d+ has already been used/i.test(r))return[r.match(/version code \d+ has already been used[^\n]*/i)?.[0]||"Version code has already been used.",`Package: ${n||"unknown"} | Track: ${t}`,"Build a new Android artifact with a higher versionCode, then submit that build.",`Recommended: ${m.nameLower} build --platform android --profile ${i} --auto-version`].join(`
|
|
1486
|
-
`);let o=r.match(/Google Api Error:[^\n]+/)||r.match(/Google Play API Error:[^\n]+/);return o?o[0]:r||"Google Play submission failed"}function Cf(e){try{ae.existsSync(e)&&ae.rmSync(e,{recursive:!0,force:!0})}catch{}}function me(e){console.log(ie.red(`\u274C ${e}`))}function $e(e){console.log(ie.gray(`\u2022 ${e}`))}function io(e){console.log(ie.green(`\u2713 ${e}`))}var so=8,xf=6,Ta=Number(process.env.MACH_ARTIFACT_UPLOAD_MAX_ATTEMPTS||2),ao=Number(process.env.MACH_ARTIFACT_UPLOAD_TIMEOUT_MS||12e4),lo="ap-south-1",Nf=`${m.envPrefix}S3_DEBUG`,Tf=()=>["1","true","yes","on"].includes(String(process.env[Nf]||"").trim().toLowerCase()),po=(e,t)=>{if(Tf()&&t)try{let n=new URL(t);D.info(k.dim(`[S3_DEBUG] ${e} host=${n.hostname} expectedRegion=${lo}`)),n.hostname.includes(lo)||D.warn(k.yellow(`[S3_DEBUG] ${e} host ${n.hostname} does not include ${lo}`))}catch(n){D.warn(k.yellow(`[S3_DEBUG] Could not parse ${e} presigned URL host: ${n.message}`))}},La=new Set([".git",".gradle",".idea",".mach-cache",".expo",".turbo",".yarn/cache","build","builds","coverage","dist","node_modules",`${m.nameLower}_cli`,`.${m.nameLower}_cli`]),Lf=new Set(["android/.gradle","android/.cxx","android/app/.cxx","android/app/build","android/build","ios/Pods","ios/build","ios/DerivedData"]),Mf=[{value:"production",label:"production",hint:"Store / release build"},{value:"staging",label:"staging",hint:"Internal testing build"},{value:"development",label:"development",hint:"Development build"}],Ja=e=>new Promise(t=>setTimeout(t,e)),qa=e=>e.split(_e.sep).filter(Boolean).join("/"),Uf=(e,t)=>{let n=qa(e),i=n.split("/")[0];return n?!!(La.has(n)||La.has(i)||Lf.has(n)||t==="ios"&&i==="android"||t==="android"&&i==="ios"):!1},Ff=(e,t,n)=>{let i=0,r=new Set,o=(s,l)=>{let a=qa(l);if(Uf(a,n)){r.add(a.split("/")[0]||a);return}let c=ge.lstatSync(s);if(!c.isSymbolicLink()){if(c.isDirectory()){for(let u of ge.readdirSync(s))o(_e.join(s,u),_e.join(l,u));return}if(c.isFile()){let u=_e.dirname(a);e.addLocalFile(s,u==="."?void 0:u,_e.basename(a)),i++}}};for(let s of ge.readdirSync(t))o(_e.join(t,s),s);return{files:i,skipped:Array.from(r).sort()}},jf=e=>!e.yes&&!e.failOnly&&!e.buildId&&process.stdin.isTTY&&process.stdout.isTTY,Bf=e=>{if(!e||typeof e!="object")return;let t=[e.distribution?`distribution: ${e.distribution}`:void 0,e.environment?`env: ${e.environment}`:void 0,e.developmentClient?"development client":void 0,e.simulator?"simulator":void 0].filter(Boolean);return t.length>0?t.join(", "):void 0},Hf=()=>{let e=we(`./${m.configFileName}`),t=e?.build&&typeof e.build=="object"?e.build:{},n=Object.keys(t);return n.length===0?Mf:n.map(i=>({value:i,label:i,hint:Bf(t[i])}))},Gf=async e=>{let t=jf(e);if(!e.platform&&t){let n=await Ca({message:"Select platform",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"}]});ki(n)&&(ka("Build cancelled."),process.exit(0)),e.platform=n}if(!e.buildProfile&&t){let n=Hf(),i=await Ca({message:"Select build profile",options:n,initialValue:n.find(r=>r.value==="production")?.value||n[0]?.value});ki(i)&&(ka("Build cancelled."),process.exit(0)),e.buildProfile=i}e.buildProfile||(e.buildProfile="production")},Ma=e=>{if(e===!0||e===!1)return e;if(e===1||e==="1")return!0;if(e===0||e==="0")return!1;if(typeof e!="string")return;let t=e.trim().toLowerCase();if(["true","yes","on"].includes(t))return!0;if(["false","no","off"].includes(t))return!1},Ya=(e,t)=>{if(e)for(let n of t){let i=n.replace(/[.*+?^${}()|[\]\\]/g,"\\$&"),r=e.match(new RegExp(`(?:^|\\s)${i}(?:=|\\s+)([^\\s]+)`));if(r?.[1])return r[1].replace(/^["']|["']$/g,"")}},Vf=(e,t)=>!!e&&t.some(n=>new RegExp(`(?:^|\\s)${n.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}(?:\\s|$)`).test(e)),Kf=e=>{let n=Ya(e,["--platform"])||e?.split(/\s+/).find(i=>i==="ios"||i==="android");return n==="ios"||n==="android"?n:void 0},zf=async e=>{if(!(!e.projectId||!e.buildId))try{let t=await O.get(`/builds/${e.projectId}/${e.buildId}`),n=t.data?.build||t.data;if(!n||typeof n!="object")return;let i=typeof n.buildArgs=="string"?n.buildArgs:void 0;if(!e.platform){let r=n.platform||Kf(i);(r==="ios"||r==="android")&&(e.platform=r)}if(e.buildProfile||(e.buildProfile=n.buildProfile||n.profile||n.profileName||Ya(i,["--profile","--build-profile","-p"])),e.simulator===void 0){let r=Ma(n.simulator??n.isSimulator);r!==void 0?e.simulator=r:Vf(i,["--simulator"])&&(e.simulator=!0)}if(e.developmentClient===void 0){let r=Ma(n.developmentClient??n.devClient);r!==void 0&&(e.developmentClient=r)}}catch(t){D.warn(k.yellow(`Could not load saved build options for runner: ${t.message}`))}},Wf=e=>{if(!Number.isFinite(e)||e<=0)return"0 B";let t=["B","KB","MB","GB"],n=Math.min(Math.floor(Math.log(e)/Math.log(1024)),t.length-1);return`${(e/Math.pow(1024,n)).toFixed(n===0?0:1)} ${t[n]}`},Jf=e=>{let t=e.response?.status,n=e.code||"",i=e.message||"";return t?t===408||t===409||t===425||t===429||t>=500||/ECONNRESET|ETIMEDOUT|EAI_AGAIN|ENOTFOUND|ECONNABORTED|socket hang up|network|timeout/i.test(`${n} ${i}`):!0},Oi=async(e,t,n=xf)=>{let i;for(let r=1;r<=n;r++)try{return await t()}catch(o){if(i=o,!Jf(o)||r>=n)break;let s=Math.min(6e4,2e3*Math.pow(2,r-1)),l=o.response?.status||o.code||o.message||"network error";D.warn(k.yellow(`${e} failed transiently (${l}). Retrying in ${Math.round(s/1e3)}s... (${r}/${n})`)),await Ja(s)}throw i},qf=async(e,t,n)=>{let i=_e.basename(e),r=ge.statSync(e).size,o=Math.round(ao/1e3);po(`ARTIFACT_UPLOAD ${i}`,t);try{await Oi(`Upload artifact ${i}`,async()=>{let s=new AbortController,l=ge.createReadStream(e),a=setTimeout(()=>{l.destroy(new Error(`Artifact upload timed out after ${o}s`)),s.abort()},ao);try{await Di.put(t,l,{headers:{"Content-Type":n,"Content-Length":r,Connection:"close"},maxBodyLength:1/0,maxContentLength:1/0,timeout:ao,timeoutErrorMessage:`Artifact upload timed out after ${o}s`,signal:s.signal})}finally{clearTimeout(a)}},Ta)}catch(s){throw new Error(`${i} (${Wf(r)}) failed after ${Ta} upload attempt(s): ${s.message||s}`)}return r},Yf=e=>{let t=e.response?.status;return t?t===408||t===429||t>=500:!0},Vn=e=>e.credentialId||e.id,Xf=async(e,t)=>{let n=Vn(e);if(!n)return e.downloadUrl;let i=await O.get(`/credentials/${n}/download`,{params:{projectId:t,format:"raw"}});return i.data?.status==="success"&&i.data?.downloadUrl?i.data.downloadUrl:e.downloadUrl},Zf=async(e,t)=>{let n=e.downloadUrl;for(let i=1;i<=so;i++)try{if((!n||i>1)&&(n=await Xf(e,t)),!n)throw new Error(`Credential ${e.name||Vn(e)||"unknown"} has no download URL.`);let r=await Di.get(n,{responseType:"arraybuffer",timeout:6e4,maxContentLength:1/0,maxBodyLength:1/0,headers:{Connection:"close"}});return Buffer.from(r.data).toString("base64")}catch(r){if(i>=so||!Yf(r))throw r;let o=Math.min(1500*i*i,15e3);D.warn(k.dim(` - Temporary network error downloading ${e.name}. Retrying... (${i}/${so})`)),await Ja(o)}throw new Error(`Failed to download credential ${e.name||Vn(e)||"unknown"}.`)},Qf=(e,t)=>t?.ios?.buildNumber??t?.iosBuildNumber??e?.ios?.buildNumber??e?.expo?.ios?.buildNumber,em=(e,t)=>t?.android?.versionCode??t?.androidVersionCode??e?.android?.versionCode??e?.expo?.android?.versionCode,Ua=(e,t,n,i)=>e==="ios"?t.iosBundleIdentifier||n?.ios?.bundleIdentifier||n?.expo?.ios?.bundleIdentifier||i:t.androidPackage||n?.android?.package||n?.expo?.android?.package||n?.name||i,Fa=async(e,t,n)=>{let i=await O.post(`/projects/${e}/next-build-number`,{platform:t,scope:n});if(i.data.status!=="success"||!i.data.buildNumber)throw new Error(i.data.message||"Dashboard did not return a build number.");return String(i.data.buildNumber)},Gn=e=>{let t={};return e.platform==="ios"&&e.resolvedBuildNumber&&(t.buildNumber=e.resolvedBuildNumber),e.platform==="android"&&e.resolvedVersionCode&&(t.versionCode=e.resolvedVersionCode),t},tm=e=>typeof e=="string"&&e.trim().toLowerCase()==="auto",Xa=(e,t,n=[])=>{if(!ge.existsSync(e))return n;let i;try{i=ge.readdirSync(e,{withFileTypes:!0})}catch{return n}for(let r of i){if(r.name==="Pods"||r.name==="build"||r.name==="DerivedData")continue;let o=_e.join(e,r.name);r.isDirectory()?Xa(o,t,n):r.name===t&&n.push(o)}return n},nm=(e,t,n)=>{let i=`${n} ${t.environment||""}`.toLowerCase(),r=e.toLowerCase(),o=0;return(i.includes("development")||i.includes("dev"))&&/(^|[.-])dev(elopment)?($|[.-])/.test(r)&&(o+=20),(i.includes("staging")||i.includes("stage"))&&/(^|[.-])stag(e|ing)?($|[.-])/.test(r)&&(o+=20),(i.includes("production")||i.includes("prod"))&&(/(^|[.-])(dev|development|stag|stage|staging)($|[.-])/.test(r)||(o+=20)),o},im=(e,t)=>{let n=_e.resolve(process.cwd(),ge.existsSync("ios")?"ios":"."),i=Xa(n,"project.pbxproj"),r=[];for(let o of i)try{let l=ge.readFileSync(o,"utf8").matchAll(/PRODUCT_BUNDLE_IDENTIFIER\s*=\s*"?([^";\s]+)"?;/g);for(let a of l){let c=a[1]?.trim();c&&!c.includes("$")&&!c.startsWith("com.apple.")&&!r.includes(c)&&r.push(c)}}catch{}if(r.length!==0)return r.length===1?r[0]:r.map(o=>({bundleId:o,score:nm(o,e,t)})).sort((o,s)=>s.score-o.score)[0]?.bundleId},Ci=e=>String(e||"").trim().toLowerCase().replace(/_/g,"-"),xi=(e,t)=>{let n=Ci(e);return t==="ios"&&(n==="internal"||n==="ad-hoc")?"adhoc":t==="android"&&["internal","adhoc","ad-hoc","development","dev","staging","stage"].includes(n)?"internal":n},ja=(e,t,n)=>{let i=xi(e.distributionType||e.meta?.distributionType,n);return i?i===xi(t,n):!0},Ba=(e,t,n)=>{let i=xi(e.distributionType||e.meta?.distributionType,n),r=xi(t,n);return i?i===r?3:n==="android"&&r!=="store"&&i!=="store"?2:0:1},rm=e=>{let t=e.toLowerCase();return t==="development"||t==="dev"||t.startsWith("development-")||t.startsWith("dev-")||t.endsWith("-development")||t.endsWith("-dev")},om=e=>{let t=e.toLowerCase();return t.includes("staging")||t.includes("stage")||t.includes("preview")||t.includes("adhoc")||t.includes("ad-hoc")},sm=(e,t)=>{let n=Ci(e.distribution),i=Ci(e.iosExportMethod),r=Ci(e.environment);return e.platform!=="ios"?n==="store"?"store":"internal":e.developmentClient||e.simulator?"development":i==="app-store"||n==="store"?"store":i==="development"||n==="development"?"development":i==="ad-hoc"||i==="adhoc"||n==="ad-hoc"||n==="adhoc"||n==="internal"?"adhoc":r==="production"||r==="store"?"store":r==="development"||r==="dev"?"development":r==="staging"||r==="stage"||r==="preview"?"adhoc":t.toLowerCase()==="production"||t.toLowerCase().includes("store")?"store":rm(t)?"development":(om(t),"adhoc")},Za=e=>e.bundleId||e.bundleIdentifier||e.packageName||e.meta?.bundleId||e.meta?.bundleIdentifier||e.meta?.packageName,Ha=(e,t)=>{if(!t)return!0;let n=Za(e);return!n||n==="*"||n===t},Ga=(e,t)=>{let n=Za(e);return!t||!n?0:n===t?2:n==="*"?1:-1},Qa=e=>{try{let t=Buffer.from(e,"base64").toString("utf8"),n=t.match(/<key>application-identifier<\/key>\s*<string>([^<]+)<\/string>/)?.[1]?.trim();if(!n)return;let i=t.match(/<key>TeamIdentifier<\/key>\s*<array>\s*<string>([^<]+)<\/string>/)?.[1]?.trim();if(i&&n.startsWith(`${i}.`))return n.slice(i.length+1);let r=n.indexOf(".");return r>=0?n.slice(r+1):n}catch{return}},am=(e,t)=>{if(e===t||e==="*")return!0;if(e.endsWith(".*")){let n=e.slice(0,-2);return t.startsWith(`${n}.`)}return!1},lm=(e,t)=>{if(!t)return!0;let n=Qa(e);if(n)return am(n,t);try{return Buffer.from(e,"base64").toString("latin1").includes(t)}catch{return!0}},Ni=async e=>{if(e.failOnly){(!e.projectId||!e.buildId)&&(D.error(k.red("--project-id and --build-id are required with --fail-only.")),process.exit(1));let l=e.error||"Build runner failed before it could report a final status.";try{await O.patch(`/builds/${e.projectId}/${e.buildId}`,{status:"failed",error:l,endTime:Date.now()}),D.info(k.yellow(`Marked build ${e.buildId} as failed.`));return}catch(a){D.error(k.red(`Could not mark build failed: ${a.message}`)),process.exit(1)}}await zf(e),await Gf(e),e.platform!=="android"&&e.platform!=="ios"&&(D.error(`Platform ${e.platform} is not supported. Use 'android' or 'ios'.`),process.exit(1)),e.autoSubmit&&e.platform==="ios"&&e.simulator&&(D.error(k.red("--auto-submit cannot be used with --simulator because simulator builds are not App Store artifacts.")),process.exit(1)),e.autoSubmit&&e.dryRun&&D.warn(k.yellow("--auto-submit is ignored during --dry-run."));let t=uo(),n=e.buildId||Df(),i=e.projectId,r=Date.now(),o=!!i,s=async l=>{if(i)try{await O.patch(`/builds/${i}/${n}`,{status:"failed",error:l,endTime:Date.now()})}catch{}};if(e.local&&e.buildId){e.quiet||t.start(`Preparing isolated workspace for build: ${e.buildId}`);try{let l=await O.get(`/builds/${i}/${e.buildId}/source-url`);if(l.data.status!=="success")throw new Error("Failed to get source download URL from API");po("SOURCE_DOWNLOAD",l.data.downloadUrl);let a=await Di.get(l.data.downloadUrl,{responseType:"stream"}),c=(i||e.projectId||"default").replace(/[^a-zA-Z0-9-_]/g,"_"),u=_e.join(kf.homedir(),m.workspacesDir,c);ge.mkdirSync(u,{recursive:!0});let d=new Set(["node_modules",`.${m.nameLower}-cache-meta`]),p=new Set(["Pods"]);if(ge.existsSync(u)){let b=ge.readdirSync(u);for(let y of b){if(d.has(y))continue;if(y==="ios"){let v=_e.join(u,"ios");try{let F=ge.readdirSync(v);for(let H of F)if(!p.has(H))try{ge.rmSync(_e.join(v,H),{recursive:!0,force:!0})}catch{}}catch{}continue}let P=_e.join(u,y);try{ge.rmSync(P,{recursive:!0,force:!0})}catch{}}}let f=_e.join(u,"source.zip"),g=a.data,h=ge.createWriteStream(f);await new Promise((b,y)=>{g.pipe(h),g.on("error",P=>y(P)),h.on("finish",()=>b())}),new Na(f).extractAllTo(u,!0);try{ge.unlinkSync(f)}catch{}process.chdir(u),D.info(k.green(`\u2713 Persistent workspace ready: ${u}`)),D.info(k.dim(` \u{1F4E6} Cached dirs preserved: node_modules=${ge.existsSync(_e.join(u,"node_modules"))?"\u2705":"\u274C"}, Pods=${ge.existsSync(_e.join(u,"ios","Pods"))?"\u2705":"\u274C"}`)),t.stop()}catch(l){t.stop(`Failed to prepare isolated workspace: ${l.message}`),i&&await s(`Setup Error: ${l.message}`),process.exit(1)}}try{let l=e.repo;if(!l)try{l=xa("git config --get remote.origin.url").toString().trim()}catch{D.warn("Could not detect git repository URL.")}!l&&e.dryRun,l||(l="https://github.com/placeholder/repo.git"),D.info(`Build ID: ${k.cyan(n)}`);let a={},c={},u=null,d=we(`./${m.configFileName}`);if(d||(D.error(k.red(`${m.configFileName} not found. Run \`${m.nameLower} init\` or \`${m.nameLower} link\` first.`)),process.exit(1)),d){u=d;let I=On(d);e.framework=I,i=d.projectId;let _=e.buildProfile||"production",M=He(d,_);!M&&e.buildProfile&&(D.error(`Build profile '${_}' not found in ${m.configFileName}`),process.exit(1));let x=M||{};process.env.MACH_DEBUG&&D.info(k.dim(`Framework: ${I} | Build profile: ${_} | Platform: ${e.platform} | Distribution: ${x.distribution||"store"} | Environment: ${x.environment||_}`)),x.env&&(c=x.env,D.info(k.blue(`Use Build Profile: ${_}`)));let E=e.platform,A=x[E]||{},N=["developmentClient","simulator","distribution","buildCommand","apk","iosScheme","preBuild","postBuild","scheme","environment","androidPackage","iosBundleIdentifier","name","iosDeploymentTarget","iosApiKeyId","iosApiKeyIssuer","iosApiKeyPath","iosTeamId","iosConfiguration","iosExportMethod","branch","repo","instanceType","ami","bucket","region","nodeVersion"];e.name=d.name,e.appName=d.name,e.androidPackage=d.android?.package,e.iosBundleIdentifier=d.ios?.bundleIdentifier,e.iosScheme=d.ios?.iosScheme,!e.nodeVersion&&d.nodeVersion&&(e.nodeVersion=d.nodeVersion);let U=Q=>Q==="androidPackage"?A.androidPackage??A.package??x.androidPackage??x.android?.package:Q==="iosBundleIdentifier"?A.iosBundleIdentifier??A.bundleIdentifier??x.iosBundleIdentifier??x.ios?.bundleIdentifier:A[Q]!==void 0?A[Q]:x[Q];for(let Q of N){let R=U(Q),oe=Q==="androidPackage"||Q==="iosBundleIdentifier";R!==void 0&&(e[Q]===void 0||oe)&&(e[Q]=R)}if(e.platform==="ios"&&!(A.iosBundleIdentifier??A.bundleIdentifier??x.iosBundleIdentifier??x.ios?.bundleIdentifier)){let R=im(e,_);R&&R!==e.iosBundleIdentifier&&(D.warn(k.yellow(`Detected native iOS bundle identifier ${R}; using it for credential lookup. Set build.${_}.ios.bundleIdentifier to make this explicit.`)),e.iosBundleIdentifier=R)}e.branch=e.branch||"main",e.iosConfiguration=e.iosConfiguration||(e.developmentClient?"Debug":"Release"),e.sshUser=e.sshUser||process.env.USER||"ubuntu",e.simulator===void 0&&(e.simulator=!1),e.local===void 0&&(e.local=!1),e.verbose===void 0&&(e.verbose=!1),D.info(k.dim(`Resolved build config: framework=${I}, profile=${_}, platform=${e.platform}, simulator=${e.platform==="ios"?String(!!e.simulator):"n/a"}, developmentClient=${String(!!e.developmentClient)}, distribution=${e.distribution||x.distribution||"store"}, iosConfiguration=${e.platform==="ios"?e.iosConfiguration||"Release":"n/a"}`));let K=Q=>{if(!Q)return Q;if(Q.startsWith("scripts.")){let R=Q.split(".")[1],oe=d.scripts?.[R];if(oe)return oe;D.warn(`Script reference not found: ${Q}`)}return Q};e.buildCommand=K(e.buildCommand),e.preBuild=K(e.preBuild),e.postBuild=K(e.postBuild),!e.scheme&&d.scheme&&(e.scheme=d.scheme);let z={...ln(d,m.envPrefix),...ln(x,`${m.envPrefix}PROFILE_`)};a={...a,...c,...z},process.env.IOS_P12_PASSWORD&&!a.IOS_P12_PASSWORD&&(a.IOS_P12_PASSWORD=process.env.IOS_P12_PASSWORD),process.env.MATCH_PASSWORD&&!a.MATCH_PASSWORD&&(a.MATCH_PASSWORD=process.env.MATCH_PASSWORD),e.platform==="ios"&&(!e.iosTeamId&&x.ios?.appleTeamId&&(e.iosTeamId=x.ios.appleTeamId),!e.iosTeamId&&d.submit?.[_]?.ios?.appleTeamId&&(e.iosTeamId=d.submit[_].ios.appleTeamId),!e.iosTeamId&&d.submit?.production?.ios?.appleTeamId&&(D.warn(k.yellow(`Check: Using 'production' Team ID for '${_}' build.`)),e.iosTeamId=d.submit.production.ios.appleTeamId),e.iosTeamId?D.info(k.magenta(`\u2713 Injected iOS Team ID from config: ${e.iosTeamId}`)):e.simulator||D.warn(k.yellow("\u26A0\uFE0F No iOS Team ID found. Device or archive signing may fail unless managed iOS credentials provide the team automatically.")))}let p="unknown";try{p=xa("git rev-parse --abbrev-ref HEAD").toString().trim()}catch{D.warn("Failed to detect git branch.")}let f="1.0.0";try{ge.existsSync("./package.json")&&(f=JSON.parse(ge.readFileSync("./package.json","utf-8")).version||"1.0.0")}catch{}let g=e.buildProfile||"production",h=Ln(d,{framework:e.framework,platform:e.platform}),S="Internal";e.developmentClient?S="DevelopmentClient":g.toLowerCase().includes("store")||g.toLowerCase()==="production"?S="Store":g.toLowerCase().includes("preview")||g.toLowerCase().includes("staging")?S="Staging":(g.toLowerCase().includes("development")||g.toLowerCase().includes("dev"))&&(S="Development");let b=e.platform==="ios"?"iOS":"Android",y=e.platform==="ios"&&e.simulator?" (Simulator)":"",P=`${b}${y} v${f} (${S})`;if(Ti(e,{status:"created",projectId:i,buildId:n,platform:e.platform,profile:g,branch:p,version:f,runtimeVersion:h,...Gn(e),buildType:S,developmentClient:!!e.developmentClient,summary:P}),i){try{let I=e.buildProfile||"production",_=e.environment||I;D.info(k.blue(`Fetching managed secrets for profile: ${I} (environment: ${_})...`));let x=(await O.get(`/projects/${i}/secrets/export?env=${_}`)).data;x.status==="success"&&x.secrets&&(a={...a,...x.secrets},Object.keys(x.secrets).length>0&&D.info(k.magenta(`\u2713 Injected ${Object.keys(x.secrets).length} secrets from Dashboard.`)))}catch(I){D.warn(`Failed to load managed secrets from Dashboard: ${I.message}`)}if(e.platform==="ios"&&e.simulator)D.info(k.dim("Skipping managed iOS signing credentials for simulator build."));else try{D.info(k.blue("Fetching managed credentials..."));let I=sm(e,g),_=e.platform==="ios"?e.iosBundleIdentifier:e.androidPackage,M=e.platform==="ios"?"bundle":"package";D.info(k.dim(` Credential target: ${M} ${_||"not set"} (${I})`));let x=await O.get("/credentials/resolve",{params:{projectId:i,platform:e.platform,bundleId:_,distributionType:I,teamId:e.platform==="ios"?e.iosTeamId:void 0}});if(x.data.status==="success"&&x.data.credentials){let E=x.data.credentials;D.info(k.magenta(`\u2713 Found ${E.length} relevant credentials.`));let A=E.filter(R=>e.platform==="ios"&&R.type==="ios_profile"?ja(R,I,e.platform)?Ha(R,_):!1:e.platform==="android"&&R.type==="android_keystore"?Ha(R,_):!!ja(R,I,e.platform)).sort((R,oe)=>{let be=Ga(oe,_)*10+Ba(oe,I,e.platform)-(Ga(R,_)*10+Ba(R,I,e.platform));return be!==0?be:(oe.createdAt||0)-(R.createdAt||0)});D.info(k.dim(` Filtered to ${A.length} credentials for distributionType: ${I}`));let N=!1,U=!1,K=!1,z=[];for(let R of A)if(!(R.type==="ios_cert"&&N||R.type==="ios_profile"&&U||R.type==="android_keystore"&&K)&&["ios_cert","ios_profile","android_keystore"].includes(R.type)&&(R.downloadUrl||Vn(R)))try{let be=await Zf(R,i);if(R.type==="ios_cert"&&!N)a.IOS_DIST_P12=be,R.password?(a.IOS_P12_PASSWORD=R.password,D.info(k.dim(` - Injected ${R.name} as IOS_DIST_P12 with password from credential record`))):D.info(k.dim(` - Injected ${R.name} as IOS_DIST_P12`)),N=!0;else if(R.type==="ios_profile"&&!U){if(!lm(be,_)){let ee=Qa(be)||"unknown";throw new Error(`Provisioning profile ${R.name||Vn(R)||"unknown"} is for a different bundle ID. Expected ${_}, found ${ee}. Upload a ${I} profile for ${_}.`)}a.IOS_PROVISIONING_PROFILE=be,D.info(k.dim(` - Injected ${R.name} as IOS_PROVISIONING_PROFILE`)),U=!0}else if(R.type==="android_keystore"&&!K){a.ANDROID_KEYSTORE_BASE64=be;let ee=R.keystorePassword||R.password,X=R.keyPassword||R.keystorePassword||R.password,ye=R.alias||R.meta?.alias;if(ee)a.ANDROID_STORE_PASSWORD=ee,D.info(k.dim(" - Injected keystore password from credential record"));else{let ve=["ANDROID_STORE_PASSWORD",...[I==="store"?"PRODUCTION":I==="internal"||I==="adhoc"?"STAGING":"DEVELOPMENT",I.toUpperCase(),"PRODUCTION","STORE","INTERNAL","STAGING","RELEASE","DEBUG"].map(Se=>`KEYSTORE_PASSWORD_${Se}`),"KEYSTORE_PASSWORD"].find(Se=>!!a[Se]);ve&&a[ve]&&(a.ANDROID_STORE_PASSWORD=a[ve])}if(X?(a.ANDROID_KEY_PASSWORD=X,D.info(k.dim(" - Injected key password from credential record"))):a.ANDROID_KEY_PASSWORD=a.ANDROID_STORE_PASSWORD||"",ye)a.ANDROID_KEY_ALIAS=ye;else{let W=["ANDROID_KEY_ALIAS","KEYSTORE_ALIAS"].find(de=>!!a[de]);W&&(a.ANDROID_KEY_ALIAS=a[W])}D.info(k.dim(` - Injected ${R.name} as ANDROID_KEYSTORE_BASE64`)),K=!0}}catch(be){z.push(`${R.name||R.type}: ${be.message}`)}let Q=e.platform==="ios"?e.simulator||N&&U:K||!A.some(R=>R.type==="android_keystore");if(z.length>0&&!Q)throw new Error(`Credential setup failed:
|
|
1487
|
-
${
|
|
1488
|
-
`)}`);
|
|
1489
|
-
\u{1F517} Download Links:`));for(let
|
|
1490
|
-
\u2713 Build completed and reported to dashboard.`)),e.maestro&&!
|
|
1491
|
-
${
|
|
1492
|
-
\u{1F3BC} Queuing managed Maestro test...`)),await
|
|
1493
|
-
Auto-submit: submitting the successful build...`));try{let r=await
|
|
1494
|
-
\u2717 Build failed: ${
|
|
1495
|
-
\
|
|
1496
|
-
\
|
|
1497
|
-
|
|
1498
|
-
|
|
1730
|
+
`);let o=r.match(/Google Api Error:[^\n]+/)||r.match(/Google Play API Error:[^\n]+/);return o?o[0]:r||"Google Play submission failed"}function Em(e){try{ue.existsSync(e)&&ue.rmSync(e,{recursive:!0,force:!0})}catch{}}function ye(e){console.log(se.red(`\u274C ${e}`))}function $e(e){console.log(se.gray(`\u2022 ${e}`))}function Io(e){console.log(se.green(`\u2713 ${e}`))}var $o=8,vm=6,ll=Number(process.env.MACH_ARTIFACT_UPLOAD_MAX_ATTEMPTS||2),_o=Number(process.env.MACH_ARTIFACT_UPLOAD_TIMEOUT_MS||12e4),Po="ap-south-1",$m=`${m.envPrefix}S3_DEBUG`,_m=()=>["1","true","yes","on"].includes(String(process.env[$m]||"").trim().toLowerCase()),Oo=(e,t)=>{if(_m()&&t)try{let n=new URL(t);C.info(O.dim(`[S3_DEBUG] ${e} host=${n.hostname} expectedRegion=${Po}`)),n.hostname.includes(Po)||C.warn(O.yellow(`[S3_DEBUG] ${e} host ${n.hostname} does not include ${Po}`))}catch(n){C.warn(O.yellow(`[S3_DEBUG] Could not parse ${e} presigned URL host: ${n.message}`))}},dl=new Set([".git",".gradle",".idea",".mach-cache",".expo",".turbo",".yarn/cache","build","builds","coverage","dist","node_modules",`${m.nameLower}_cli`,`.${m.nameLower}_cli`]),Pm=new Set(["android/.gradle","android/.cxx","android/app/.cxx","android/app/build","android/build","ios/Pods","ios/build","ios/DerivedData"]),Rm=[{value:"production",label:"production",hint:"Store / release build"},{value:"staging",label:"staging",hint:"Internal testing build"},{value:"development",label:"development",hint:"Development build"}],El=e=>new Promise(t=>setTimeout(t,e)),Il=e=>e.split(_e.sep).filter(Boolean).join("/"),Cm=(e,t)=>{let n=Il(e),i=n.split("/")[0];return n?!!(dl.has(n)||dl.has(i)||Pm.has(n)||t==="ios"&&i==="android"||t==="android"&&i==="ios"):!1},Om=(e,t,n)=>{let i=0,r=new Set,o=(s,a)=>{let l=Il(a);if(Cm(l,n)){r.add(l.split("/")[0]||l);return}let d=be.lstatSync(s);if(!d.isSymbolicLink()){if(d.isDirectory()){for(let c of be.readdirSync(s))o(_e.join(s,c),_e.join(a,c));return}if(d.isFile()){let c=_e.dirname(l);e.addLocalFile(s,c==="."?void 0:c,_e.basename(l)),i++}}};for(let s of be.readdirSync(t))o(_e.join(t,s),s);return{files:i,skipped:Array.from(r).sort()}},Dm=e=>!e.yes&&!e.failOnly&&!e.buildId&&process.stdin.isTTY&&process.stdout.isTTY,km=e=>{if(!e||typeof e!="object")return;let t=[e.distribution?`distribution: ${e.distribution}`:void 0,e.environment?`env: ${e.environment}`:void 0,e.developmentClient?"development client":void 0,e.simulator?"simulator":void 0].filter(Boolean);return t.length>0?t.join(", "):void 0},Nm=()=>{let e=Ie(`./${m.configFileName}`),t=e?.build&&typeof e.build=="object"?e.build:{},n=Object.keys(t);return n.length===0?Rm:n.map(i=>({value:i,label:i,hint:km(t[i])}))},xm=async e=>{let t=Dm(e);if(!e.platform&&t){let n=await il({message:"Select platform",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"}]});zi(n)&&(ol("Build cancelled."),process.exit(0)),e.platform=n}if(!e.buildProfile&&t){let n=Nm(),i=await il({message:"Select build profile",options:n,initialValue:n.find(r=>r.value==="production")?.value||n[0]?.value});zi(i)&&(ol("Build cancelled."),process.exit(0)),e.buildProfile=i}e.buildProfile||(e.buildProfile="production")},cl=e=>{if(e===!0||e===!1)return e;if(e===1||e==="1")return!0;if(e===0||e==="0")return!1;if(typeof e!="string")return;let t=e.trim().toLowerCase();if(["true","yes","on"].includes(t))return!0;if(["false","no","off"].includes(t))return!1},wl=(e,t)=>{if(e)for(let n of t){let i=n.replace(/[.*+?^${}()|[\]\\]/g,"\\$&"),r=e.match(new RegExp(`(?:^|\\s)${i}(?:=|\\s+)([^\\s]+)`));if(r?.[1])return r[1].replace(/^["']|["']$/g,"")}},Tm=(e,t)=>!!e&&t.some(n=>new RegExp(`(?:^|\\s)${n.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}(?:\\s|$)`).test(e)),Lm=e=>{let n=wl(e,["--platform"])||e?.split(/\s+/).find(i=>i==="ios"||i==="android");return n==="ios"||n==="android"?n:void 0},Mm=async e=>{if(!e.projectId||!e.buildId)return;let t=!!e.local;try{let n=await D.get(`/builds/${e.projectId}/${e.buildId}`),i=n.data?.build||n.data;if(!i||typeof i!="object"){if(t)throw new Error("MACH API returned an empty build record.");return}let r=typeof i.buildArgs=="string"?i.buildArgs:void 0;if(Ks(e,i),!e.platform){let o=i.platform||Lm(r);(o==="ios"||o==="android")&&(e.platform=o)}if(e.buildProfile||(e.buildProfile=i.buildProfile||i.profile||i.profileName||wl(r,["--profile","--build-profile","-p"])),e.simulator===void 0){let o=cl(i.simulator??i.isSimulator);o!==void 0?e.simulator=o:Tm(r,["--simulator"])&&(e.simulator=!0)}if(e.developmentClient===void 0){let o=cl(i.developmentClient??i.devClient);o!==void 0&&(e.developmentClient=o)}}catch(n){if(t){let i=n.response?.data?.message||n.message||"unknown error";throw new Error(`Could not load the canonical MACH build record for runner ${e.buildId}: ${i}. The runner stopped to avoid allocating or packaging a different native version.`)}C.warn(O.yellow(`Could not load saved build options for runner: ${n.message}`))}},Um=e=>{if(!Number.isFinite(e)||e<=0)return"0 B";let t=["B","KB","MB","GB"],n=Math.min(Math.floor(Math.log(e)/Math.log(1024)),t.length-1);return`${(e/Math.pow(1024,n)).toFixed(n===0?0:1)} ${t[n]}`},Fm=e=>{let t=e.response?.status,n=e.code||"",i=e.message||"";return t?t===408||t===409||t===425||t===429||t>=500||/ECONNRESET|ETIMEDOUT|EAI_AGAIN|ENOTFOUND|ECONNABORTED|socket hang up|network|timeout/i.test(`${n} ${i}`):!0},ei=async(e,t,n=vm)=>{let i;for(let r=1;r<=n;r++)try{return await t()}catch(o){if(i=o,!Fm(o)||r>=n)break;let s=Math.min(6e4,2e3*Math.pow(2,r-1)),a=o.response?.status||o.code||o.message||"network error";C.warn(O.yellow(`${e} failed transiently (${a}). Retrying in ${Math.round(s/1e3)}s... (${r}/${n})`)),await El(s)}throw i},Bm=async(e,t,n)=>{let i=_e.basename(e),r=be.statSync(e).size,o=Math.round(_o/1e3);Oo(`ARTIFACT_UPLOAD ${i}`,t);try{await ei(`Upload artifact ${i}`,async()=>{let s=new AbortController,a=be.createReadStream(e),l=setTimeout(()=>{a.destroy(new Error(`Artifact upload timed out after ${o}s`)),s.abort()},_o);try{await Gi.put(t,a,{headers:{"Content-Type":n,"Content-Length":r,Connection:"close"},maxBodyLength:1/0,maxContentLength:1/0,timeout:_o,timeoutErrorMessage:`Artifact upload timed out after ${o}s`,signal:s.signal})}finally{clearTimeout(l)}},ll)}catch(s){throw new Error(`${i} (${Um(r)}) failed after ${ll} upload attempt(s): ${s.message||s}`)}return r},jm=e=>{let t=e.response?.status;return t?t===408||t===429||t>=500:!0},ni=e=>e.credentialId||e.id,Hm=async(e,t)=>{let n=ni(e);if(!n)return e.downloadUrl;let i=await D.get(`/credentials/${n}/download`,{params:{projectId:t,format:"raw"}});return i.data?.status==="success"&&i.data?.downloadUrl?i.data.downloadUrl:e.downloadUrl},Vm=async(e,t)=>{let n=e.downloadUrl;for(let i=1;i<=$o;i++)try{if((!n||i>1)&&(n=await Hm(e,t)),!n)throw new Error(`Credential ${e.name||ni(e)||"unknown"} has no download URL.`);let r=await Gi.get(n,{responseType:"arraybuffer",timeout:6e4,maxContentLength:1/0,maxBodyLength:1/0,headers:{Connection:"close"}});return Buffer.from(r.data).toString("base64")}catch(r){if(i>=$o||!jm(r))throw r;let o=Math.min(1500*i*i,15e3);C.warn(O.dim(` - Temporary network error downloading ${e.name}. Retrying... (${i}/${$o})`)),await El(o)}throw new Error(`Failed to download credential ${e.name||ni(e)||"unknown"}.`)},Gm=(e,t)=>t?.ios?.buildNumber??t?.iosBuildNumber??e?.ios?.buildNumber??e?.expo?.ios?.buildNumber,zm=(e,t)=>t?.android?.versionCode??t?.androidVersionCode??e?.android?.versionCode??e?.expo?.android?.versionCode,ul=(e,t,n,i)=>e==="ios"?t.iosBundleIdentifier||n?.ios?.bundleIdentifier||n?.expo?.ios?.bundleIdentifier||i:t.androidPackage||n?.android?.package||n?.expo?.android?.package||n?.name||i,pl=async(e,t,n)=>{let i=await D.post(`/projects/${e}/next-build-number`,{platform:t,scope:n});if(i.data.status!=="success"||!i.data.buildNumber)throw new Error(i.data.message||"Dashboard did not return a build number.");return String(i.data.buildNumber)},Qn=e=>{let t={};return e.platform==="ios"&&e.resolvedBuildNumber&&(t.buildNumber=e.resolvedBuildNumber),e.platform==="android"&&e.resolvedVersionCode&&(t.versionCode=e.resolvedVersionCode),t},vl=(e,t,n=[])=>{if(!be.existsSync(e))return n;let i;try{i=be.readdirSync(e,{withFileTypes:!0})}catch{return n}for(let r of i){if(r.name==="Pods"||r.name==="build"||r.name==="DerivedData")continue;let o=_e.join(e,r.name);r.isDirectory()?vl(o,t,n):r.name===t&&n.push(o)}return n},Km=(e,t,n)=>{let i=`${n} ${t.environment||""}`.toLowerCase(),r=e.toLowerCase(),o=0;return(i.includes("development")||i.includes("dev"))&&/(^|[.-])dev(elopment)?($|[.-])/.test(r)&&(o+=20),(i.includes("staging")||i.includes("stage"))&&/(^|[.-])stag(e|ing)?($|[.-])/.test(r)&&(o+=20),(i.includes("production")||i.includes("prod"))&&(/(^|[.-])(dev|development|stag|stage|staging)($|[.-])/.test(r)||(o+=20)),o},Wm=(e,t)=>{let n=_e.resolve(process.cwd(),be.existsSync("ios")?"ios":"."),i=vl(n,"project.pbxproj"),r=[];for(let o of i)try{let a=be.readFileSync(o,"utf8").matchAll(/PRODUCT_BUNDLE_IDENTIFIER\s*=\s*"?([^";\s]+)"?;/g);for(let l of a){let d=l[1]?.trim();d&&!d.includes("$")&&!d.startsWith("com.apple.")&&!r.includes(d)&&r.push(d)}}catch{}if(r.length!==0)return r.length===1?r[0]:r.map(o=>({bundleId:o,score:Km(o,e,t)})).sort((o,s)=>s.score-o.score)[0]?.bundleId},Vi=e=>String(e||"").trim().toLowerCase().replace(/_/g,"-"),Ki=(e,t)=>{let n=Vi(e);return t==="ios"&&(n==="internal"||n==="ad-hoc")?"adhoc":t==="android"&&["internal","adhoc","ad-hoc","development","dev","staging","stage"].includes(n)?"internal":n},fl=(e,t,n)=>{let i=Ki(e.distributionType||e.meta?.distributionType,n);return i?i===Ki(t,n):!0},ml=(e,t,n)=>{let i=Ki(e.distributionType||e.meta?.distributionType,n),r=Ki(t,n);return i?i===r?3:n==="android"&&r!=="store"&&i!=="store"?2:0:1},Jm=e=>{let t=e.toLowerCase();return t==="development"||t==="dev"||t.startsWith("development-")||t.startsWith("dev-")||t.endsWith("-development")||t.endsWith("-dev")},qm=e=>{let t=e.toLowerCase();return t.includes("staging")||t.includes("stage")||t.includes("preview")||t.includes("adhoc")||t.includes("ad-hoc")},Ym=(e,t)=>{let n=Vi(e.distribution),i=Vi(e.iosExportMethod),r=Vi(e.environment);return e.platform!=="ios"?n==="store"?"store":"internal":e.developmentClient||e.simulator?"development":i==="app-store"||n==="store"?"store":i==="development"||n==="development"?"development":i==="ad-hoc"||i==="adhoc"||n==="ad-hoc"||n==="adhoc"||n==="internal"?"adhoc":r==="production"||r==="store"?"store":r==="development"||r==="dev"?"development":r==="staging"||r==="stage"||r==="preview"?"adhoc":t.toLowerCase()==="production"||t.toLowerCase().includes("store")?"store":Jm(t)?"development":(qm(t),"adhoc")},$l=e=>e.bundleId||e.bundleIdentifier||e.packageName||e.meta?.bundleId||e.meta?.bundleIdentifier||e.meta?.packageName,gl=(e,t)=>{if(!t)return!0;let n=$l(e);return!n||n==="*"||n===t},hl=(e,t)=>{let n=$l(e);return!t||!n?0:n===t?2:n==="*"?1:-1},_l=e=>{try{let t=Buffer.from(e,"base64").toString("utf8"),n=t.match(/<key>application-identifier<\/key>\s*<string>([^<]+)<\/string>/)?.[1]?.trim();if(!n)return;let i=t.match(/<key>TeamIdentifier<\/key>\s*<array>\s*<string>([^<]+)<\/string>/)?.[1]?.trim();if(i&&n.startsWith(`${i}.`))return n.slice(i.length+1);let r=n.indexOf(".");return r>=0?n.slice(r+1):n}catch{return}},Xm=(e,t)=>{if(e===t||e==="*")return!0;if(e.endsWith(".*")){let n=e.slice(0,-2);return t.startsWith(`${n}.`)}return!1},Zm=(e,t)=>{if(!t)return!0;let n=_l(e);if(n)return Xm(n,t);try{return Buffer.from(e,"base64").toString("latin1").includes(t)}catch{return!0}},Wi=async e=>{if(e.failOnly){(!e.projectId||!e.buildId)&&(C.error(O.red("--project-id and --build-id are required with --fail-only.")),process.exit(1));let d=e.error||"Build runner failed before it could report a final status.";try{await D.patch(`/builds/${e.projectId}/${e.buildId}`,{status:"failed",error:d,endTime:Date.now()}),C.info(O.yellow(`Marked build ${e.buildId} as failed.`));return}catch(c){C.error(O.red(`Could not mark build failed: ${c.message}`)),process.exit(1)}}await Mm(e),await xm(e),e.platform!=="android"&&e.platform!=="ios"&&(C.error(`Platform ${e.platform} is not supported. Use 'android' or 'ios'.`),process.exit(1)),e.autoSubmit&&e.platform==="ios"&&e.simulator&&(C.error(O.red("--auto-submit cannot be used with --simulator because simulator builds are not App Store artifacts.")),process.exit(1)),e.autoSubmit&&e.dryRun&&C.warn(O.yellow("--auto-submit is ignored during --dry-run."));let t=Co(),n=e.buildId||Im(),i=e.projectId,r=Date.now(),o=!!i,s=!0,a=async d=>{if(i)try{await D.patch(`/builds/${i}/${n}`,{status:"failed",error:d,endTime:Date.now()})}catch{}};if(e.local&&e.buildId&&i&&await ei("Mark isolated runner as building",()=>D.patch(`/builds/${i}/${n}`,{status:"building",runnerStartedAt:Date.now()})),e.local&&e.buildId){e.quiet||t.start(`Preparing isolated workspace for build: ${e.buildId}`);try{let d=await D.get(`/builds/${i}/${e.buildId}/source-url`);if(d.data.status!=="success")throw new Error("Failed to get source download URL from API");Oo("SOURCE_DOWNLOAD",d.data.downloadUrl);let c=await Gi.get(d.data.downloadUrl,{responseType:"stream"}),u=(i||e.projectId||"default").replace(/[^a-zA-Z0-9-_]/g,"_"),f=_e.join(wm.homedir(),m.workspacesDir,u);be.mkdirSync(f,{recursive:!0});let p=new Set(["node_modules",`.${m.nameLower}-cache-meta`]),y=new Set(["Pods"]);if(be.existsSync(f)){let _=be.readdirSync(f);for(let w of _){if(p.has(w))continue;if(w==="ios"){let B=_e.join(f,"ios");try{let X=be.readdirSync(B);for(let U of X)if(!y.has(U))try{be.rmSync(_e.join(B,U),{recursive:!0,force:!0})}catch{}}catch{}continue}let T=_e.join(f,w);try{be.rmSync(T,{recursive:!0,force:!0})}catch{}}}let g=_e.join(f,"source.zip"),h=c.data,S=be.createWriteStream(g);await new Promise((_,w)=>{h.pipe(S),h.on("error",T=>w(T)),S.on("finish",()=>_())}),new al(g).extractAllTo(f,!0);try{be.unlinkSync(g)}catch{}process.chdir(f),C.info(O.green(`\u2713 Persistent workspace ready: ${f}`)),C.info(O.dim(` \u{1F4E6} Cached dirs preserved: node_modules=${be.existsSync(_e.join(f,"node_modules"))?"\u2705":"\u274C"}, Pods=${be.existsSync(_e.join(f,"ios","Pods"))?"\u2705":"\u274C"}`)),t.stop()}catch(d){t.stop(`Failed to prepare isolated workspace: ${d.message}`),i&&await a(`Setup Error: ${d.message}`),process.exit(1)}}try{let d=e.repo;if(!d)try{d=sl("git config --get remote.origin.url").toString().trim()}catch{C.warn("Could not detect git repository URL.")}!d&&e.dryRun,d||(d="https://github.com/placeholder/repo.git"),C.info(`Build ID: ${O.cyan(n)}`);let c={},u={},f=null,p=Ie(`./${m.configFileName}`);if(p||(C.error(O.red(`${m.configFileName} not found. Run \`${m.nameLower} init\` or \`${m.nameLower} link\` first.`)),process.exit(1)),p){f=p;let v=Tn(p);e.framework=v,i=p.projectId;let R=e.buildProfile||"production",I=Ve(p,R);!I&&e.buildProfile&&(C.error(`Build profile '${R}' not found in ${m.configFileName}`),process.exit(1));let $=I||{};process.env.MACH_DEBUG&&C.info(O.dim(`Framework: ${v} | Build profile: ${R} | Platform: ${e.platform} | Distribution: ${$.distribution||"store"} | Environment: ${$.environment||R}`)),$.env&&(u=$.env,C.info(O.blue(`Use Build Profile: ${R}`)));let x=e.platform,P=$[x]||{},V=["developmentClient","simulator","distribution","buildCommand","apk","iosScheme","preBuild","postBuild","scheme","environment","androidPackage","iosBundleIdentifier","name","iosDeploymentTarget","iosApiKeyId","iosApiKeyIssuer","iosApiKeyPath","iosTeamId","iosConfiguration","iosExportMethod","branch","repo","instanceType","ami","bucket","region","nodeVersion"];e.name=p.name,e.appName=p.name,e.androidPackage=p.android?.package,e.iosBundleIdentifier=p.ios?.bundleIdentifier,e.iosScheme=p.ios?.iosScheme,!e.nodeVersion&&p.nodeVersion&&(e.nodeVersion=p.nodeVersion);let G=de=>de==="androidPackage"?P.androidPackage??P.package??$.androidPackage??$.android?.package:de==="iosBundleIdentifier"?P.iosBundleIdentifier??P.bundleIdentifier??$.iosBundleIdentifier??$.ios?.bundleIdentifier:P[de]!==void 0?P[de]:$[de];for(let de of V){let L=G(de),z=de==="androidPackage"||de==="iosBundleIdentifier";L!==void 0&&(e[de]===void 0||z)&&(e[de]=L)}if(e.platform==="ios"&&!(P.iosBundleIdentifier??P.bundleIdentifier??$.iosBundleIdentifier??$.ios?.bundleIdentifier)){let L=Wm(e,R);L&&L!==e.iosBundleIdentifier&&(C.warn(O.yellow(`Detected native iOS bundle identifier ${L}; using it for credential lookup. Set build.${R}.ios.bundleIdentifier to make this explicit.`)),e.iosBundleIdentifier=L)}e.branch=e.branch||"main",e.iosConfiguration=e.iosConfiguration||(e.developmentClient?"Debug":"Release"),e.sshUser=e.sshUser||process.env.USER||"ubuntu",e.simulator===void 0&&(e.simulator=!1),e.local===void 0&&(e.local=!1),e.verbose===void 0&&(e.verbose=!1),C.info(O.dim(`Resolved build config: framework=${v}, profile=${R}, platform=${e.platform}, simulator=${e.platform==="ios"?String(!!e.simulator):"n/a"}, developmentClient=${String(!!e.developmentClient)}, distribution=${e.distribution||$.distribution||"store"}, iosConfiguration=${e.platform==="ios"?e.iosConfiguration||"Release":"n/a"}`));let j=de=>{if(!de)return de;if(de.startsWith("scripts.")){let L=de.split(".")[1],z=p.scripts?.[L];if(z)return z;C.warn(`Script reference not found: ${de}`)}return de};e.buildCommand=j(e.buildCommand),e.preBuild=j(e.preBuild),e.postBuild=j(e.postBuild),!e.scheme&&p.scheme&&(e.scheme=p.scheme);let Y={...pn(p,m.envPrefix),...pn($,`${m.envPrefix}PROFILE_`)};c={...c,...u,...Y},process.env.IOS_P12_PASSWORD&&!c.IOS_P12_PASSWORD&&(c.IOS_P12_PASSWORD=process.env.IOS_P12_PASSWORD),process.env.MATCH_PASSWORD&&!c.MATCH_PASSWORD&&(c.MATCH_PASSWORD=process.env.MATCH_PASSWORD),e.platform==="ios"&&(!e.iosTeamId&&$.ios?.appleTeamId&&(e.iosTeamId=$.ios.appleTeamId),!e.iosTeamId&&p.submit?.[R]?.ios?.appleTeamId&&(e.iosTeamId=p.submit[R].ios.appleTeamId),!e.iosTeamId&&p.submit?.production?.ios?.appleTeamId&&(C.warn(O.yellow(`Check: Using 'production' Team ID for '${R}' build.`)),e.iosTeamId=p.submit.production.ios.appleTeamId),e.iosTeamId?C.info(O.magenta(`\u2713 Injected iOS Team ID from config: ${e.iosTeamId}`)):e.simulator||C.warn(O.yellow("\u26A0\uFE0F No iOS Team ID found. Device or archive signing may fail unless managed iOS credentials provide the team automatically.")))}let y="unknown";try{y=sl("git rev-parse --abbrev-ref HEAD").toString().trim()}catch{C.warn("Failed to detect git branch.")}let g="1.0.0";try{be.existsSync("./package.json")&&(g=JSON.parse(be.readFileSync("./package.json","utf-8")).version||"1.0.0")}catch{}let h=e.buildProfile||"production",S=Kn(p,{framework:e.framework,platform:e.platform}),b="Internal";e.developmentClient?b="DevelopmentClient":h.toLowerCase().includes("store")||h.toLowerCase()==="production"?b="Store":h.toLowerCase().includes("preview")||h.toLowerCase().includes("staging")?b="Staging":(h.toLowerCase().includes("development")||h.toLowerCase().includes("dev"))&&(b="Development");let _=e.platform==="ios"?"iOS":"Android",w=e.platform==="ios"&&e.simulator?" (Simulator)":"",T=`${_}${w} v${g} (${b})`;if(ti(e,{status:"created",projectId:i,buildId:n,platform:e.platform,profile:h,branch:y,version:g,runtimeVersion:S,...Qn(e),buildType:b,developmentClient:!!e.developmentClient,summary:T}),i){try{let v=e.buildProfile||"production",R=e.environment||v;C.info(O.blue(`Fetching managed secrets for profile: ${v} (environment: ${R})...`));let $=(await D.get(`/projects/${i}/secrets/export?env=${R}`)).data;$.status==="success"&&$.secrets&&(c={...c,...$.secrets},Object.keys($.secrets).length>0&&C.info(O.magenta(`\u2713 Injected ${Object.keys($.secrets).length} secrets from Dashboard.`)))}catch(v){C.warn(`Failed to load managed secrets from Dashboard: ${v.message}`)}if(e.platform==="ios"){let v=e.buildProfile||"production",R=Ve(p,v)||{},I=Gm(p,R),$=jn(I),x=e.distribution!==void 0?e.distribution==="store":b==="Store",P=I===void 0&&x,V=e.autoVersion||$||P,G=Gr(e.resolvedBuildNumber,I,V,!e.simulator);if(G.kind==="persisted"){let j=ki(e,c,G.value,"saved MACH build record");C.info(O.green(`\u2713 Reusing assigned iOS buildNumber ${j}`))}else if(G.kind==="explicit"){let j=ki(e,c,G.value,`${m.configFileName} (${v})`);C.info(O.green(`\u2713 Using configured iOS buildNumber ${j}`))}else if(G.kind==="auto"){t.start("Assigning iOS buildNumber from Mach counter...");try{let j=ul("ios",e,p,v),Y=await pl(i,"ios",j);ki(e,c,Y,"MACH version counter"),t.stop(`\u2713 Assigned iOS buildNumber ${O.green(Y)} (${j})`)}catch(j){throw t.stop("iOS buildNumber assignment failed"),new Error(`Auto-versioning failed: ${j.response?.data?.message||j.message}`)}}}if(e.platform==="android"){let v=e.buildProfile||"production",R=Ve(p,v)||{},I=zm(p,R),$=jn(I),x=e.distribution!==void 0?e.distribution==="store":b==="Store",P=I===void 0&&x,V=e.autoVersion||$||P,G=Gr(e.resolvedVersionCode,I,V);if(G.kind==="persisted"){let j=Ni(e,c,G.value,"saved MACH build record");C.info(O.green(`\u2713 Reusing assigned Android versionCode ${j}`))}else if(G.kind==="explicit"){let j=Ni(e,c,G.value,`${m.configFileName} (${v})`);C.info(O.green(`\u2713 Using configured Android versionCode ${j}`))}else if(G.kind==="auto"){t.start("Assigning Android versionCode from Mach counter...");try{let j=ul("android",e,p,v),Y=await pl(i,"android",j);Ni(e,c,Y,"MACH version counter"),t.stop(`\u2713 Assigned Android versionCode ${O.green(Y)} (${j})`)}catch(j){throw t.stop("Android versionCode assignment failed"),new Error(`Auto-versioning failed: ${j.response?.data?.message||j.message}`)}}}if(e.platform==="ios"&&e.simulator)C.info(O.dim("Skipping managed iOS signing credentials for simulator build."));else try{C.info(O.blue("Fetching managed credentials..."));let v=Ym(e,h),R=e.platform==="ios"?e.iosBundleIdentifier:e.androidPackage,I=e.platform==="ios"?"bundle":"package";C.info(O.dim(` Credential target: ${I} ${R||"not set"} (${v})`));let $=await D.get("/credentials/resolve",{params:{projectId:i,platform:e.platform,bundleId:R,distributionType:v,teamId:e.platform==="ios"?e.iosTeamId:void 0}});if($.data.status==="success"&&$.data.credentials){let x=$.data.credentials;C.info(O.magenta(`\u2713 Found ${x.length} relevant credentials.`));let P=x.filter(L=>e.platform==="ios"&&L.type==="ios_profile"?fl(L,v,e.platform)?gl(L,R):!1:e.platform==="android"&&L.type==="android_keystore"?gl(L,R):!!fl(L,v,e.platform)).sort((L,z)=>{let F=hl(z,R)*10+ml(z,v,e.platform)-(hl(L,R)*10+ml(L,v,e.platform));return F!==0?F:(z.createdAt||0)-(L.createdAt||0)});C.info(O.dim(` Filtered to ${P.length} credentials for distributionType: ${v}`));let V=!1,G=!1,j=!1,Y=[];for(let L of P)if(!(L.type==="ios_cert"&&V||L.type==="ios_profile"&&G||L.type==="android_keystore"&&j)&&["ios_cert","ios_profile","android_keystore"].includes(L.type)&&(L.downloadUrl||ni(L)))try{let F=await Vm(L,i);if(L.type==="ios_cert"&&!V)c.IOS_DIST_P12=F,L.password?(c.IOS_P12_PASSWORD=L.password,C.info(O.dim(` - Injected ${L.name} as IOS_DIST_P12 with password from credential record`))):C.info(O.dim(` - Injected ${L.name} as IOS_DIST_P12`)),V=!0;else if(L.type==="ios_profile"&&!G){if(!Zm(F,R)){let Q=_l(F)||"unknown";throw new Error(`Provisioning profile ${L.name||ni(L)||"unknown"} is for a different bundle ID. Expected ${R}, found ${Q}. Upload a ${v} profile for ${R}.`)}c.IOS_PROVISIONING_PROFILE=F,C.info(O.dim(` - Injected ${L.name} as IOS_PROVISIONING_PROFILE`)),G=!0}else if(L.type==="android_keystore"&&!j){c.ANDROID_KEYSTORE_BASE64=F;let Q=L.keystorePassword||L.password,ce=L.keyPassword||L.keystorePassword||L.password,Be=L.alias||L.meta?.alias;if(Q)c.ANDROID_STORE_PASSWORD=Q,C.info(O.dim(" - Injected keystore password from credential record"));else{let ve=["ANDROID_STORE_PASSWORD",...[v==="store"?"PRODUCTION":v==="internal"||v==="adhoc"?"STAGING":"DEVELOPMENT",v.toUpperCase(),"PRODUCTION","STORE","INTERNAL","STAGING","RELEASE","DEBUG"].map(Xe=>`KEYSTORE_PASSWORD_${Xe}`),"KEYSTORE_PASSWORD"].find(Xe=>!!c[Xe]);ve&&c[ve]&&(c.ANDROID_STORE_PASSWORD=c[ve])}if(ce?(c.ANDROID_KEY_PASSWORD=ce,C.info(O.dim(" - Injected key password from credential record"))):c.ANDROID_KEY_PASSWORD=c.ANDROID_STORE_PASSWORD||"",Be)c.ANDROID_KEY_ALIAS=Be;else{let re=["ANDROID_KEY_ALIAS","KEYSTORE_ALIAS"].find(ne=>!!c[ne]);re&&(c.ANDROID_KEY_ALIAS=c[re])}C.info(O.dim(` - Injected ${L.name} as ANDROID_KEYSTORE_BASE64`)),j=!0}}catch(F){Y.push(`${L.name||L.type}: ${F.message}`)}let de=e.platform==="ios"?e.simulator||V&&G:j||!P.some(L=>L.type==="android_keystore");if(Y.length>0&&!de)throw new Error(`Credential setup failed:
|
|
1731
|
+
${Y.map(L=>`- ${L}`).join(`
|
|
1732
|
+
`)}`);Y.length>0&&C.warn(O.dim(` Skipped ${Y.length} stale or unusable credential(s).`))}if(S=Kn(p,{framework:e.framework,platform:e.platform,iosBuildNumber:e.resolvedBuildNumber||c.BUILD_NUMBER,androidVersionCode:e.resolvedVersionCode||c.ANDROID_VERSION_CODE}),p.ota?.enabled){if(p.ota.engine==="mach-react-native")throw new Error("This project still uses the unfinished mach-react-native OTA engine. Run `mach ota setup` to migrate to expo-updates before building.");if(!p.ota.url)throw new Error("OTA is enabled but ota.url is missing. Run `mach ota setup` before building.");let x=p.ota.channel||"production";if(e.framework==="expo"){let P=zn(process.cwd(),{platform:e.platform,runtimeVersion:S,channel:x,url:p.ota.url}),V=[P?.runtimeVersion!==S?`runtime ${P?.runtimeVersion||"missing"} (expected ${S})`:void 0,P?.channel!==x?`channel ${P?.channel||"missing"} (expected ${x})`:void 0,P?.url!==p.ota.url?`URL ${P?.url||"missing"} (expected ${p.ota.url})`:void 0].filter(Boolean);if(V.length>0)throw new Error(`Expo OTA configuration mismatch: ${V.join("; ")}. Run \`${m.nameLower} ota setup\` to update the local Expo plugin before building.`)}c.MACH_OTA_RUNTIME_VERSION=S,c.MACH_OTA_CHANNEL=x,c.MACH_OTA_URL=p.ota.url}if(e.platform==="ios"&&!e.simulator){let x=!!c.IOS_DIST_P12,P=!!c.IOS_PROVISIONING_PROFILE;if(!x||!P){let V=[...x?[]:["Distribution Certificate"],...P?[]:["Provisioning Profile"]].join(" and ");if(e.local&&e.buildId)throw new Error(`Missing iOS credentials: ${V}. Expected ${v} credentials for ${R||"the selected bundle ID"}. Run \`${m.nameLower} credentials --platform ios --profile ${h}\` and select ${R||"the correct bundle ID"}.`);C.error(O.red(`Missing iOS credentials: ${V}`)),e.quiet&&process.exit(1);let G=e.yes||await rl({message:"Would you like to generate these credentials now?",initialValue:!0});if(G&&!zi(G))return await Ln({platform:"ios",profile:h}),e.quiet||C.info(O.green("\u2713 Credentials setup complete! Restarting build phase...")),Wi(e);e.quiet||C.info(O.yellow(`Run \`${m.nameLower} credentials\` to set up signing credentials manually.`)),process.exit(1)}}if(e.platform==="android"&&!e.developmentClient&&(e.distribution==="internal"||e.distribution==="store")&&!(!!c.ANDROID_KEYSTORE_BASE64||!!c.ANDROID_KEYSTORE)){C.error(O.red("Missing Android credentials: Signing Keystore")),e.quiet&&process.exit(1);let P=e.yes||await rl({message:"Would you like to automatically create and upload an Android Keystore for this profile now?",initialValue:!0});if(P&&!zi(P))return await Ln({platform:"android",profile:h}),e.quiet||C.info(O.green("\u2713 Android Keystore setup complete! Restarting build phase...")),Wi(e);e.quiet||C.info(O.yellow(`Run \`${m.nameLower} credentials --platform android\` to set up a signing keystore manually.`)),process.exit(1)}}catch(v){(String(v.message||"").startsWith("Credential download failed")||String(v.message||"").startsWith("Credential setup failed")||String(v.message||"").startsWith("Missing iOS credentials")||String(v.message||"").startsWith("Auto-versioning failed"))&&(C.error(O.red(v.message)),process.exit(1)),e.platform==="ios"&&e.local&&e.buildId&&(C.error(O.red(`Failed to resolve iOS credentials: ${v.message}`)),process.exit(1)),C.warn(`Failed to resolve credentials: ${v.message}`)}}let B=!!(e.local&&e.buildId),X=!!(e.local||e.sshHost),U=!X&&!B;if(B){C.info(O.magenta("\u{1F3D7}\uFE0F Runner Mode: Executing isolated build task..."));let v=await Qr({...e,interactive:!1},n,c,i,{branch:y,version:g,runtimeVersion:S,summary:T,buildType:b});await K(v),s=!1,process.exit(0)}async function K(v){let R=async I=>{if(i)try{await ei("Report failed build status",()=>D.patch(`/builds/${i}/${n}`,{status:"failed",error:I,endTime:Date.now()}),3)}catch($){C.warn(O.yellow(`Could not report failed build status: ${$.message}`))}};if(i&&v.length>0){let I=Co(),$=[];e.quiet||I.start("Uploading artifacts to Dashboard...");try{for(let x of v){let P=_e.basename(x),V=be.statSync(x).size,G=_e.extname(P).toLowerCase(),j="application/octet-stream",Y=await ei(`Create artifact upload URL for ${P}`,()=>D.post(`/builds/${i}/${n}/artifact-upload-url`,{fileName:P,fileType:j}));if(Y.data.status!=="success")throw new Error(`Failed to get upload URL for ${P}`);await Bm(x,Y.data.uploadUrl,j),$.push({name:P,url:Y.data.downloadUrl,size:V,type:G.substring(1)})}e.quiet||I.stop("Artifacts uploaded.")}catch(x){e.quiet||I.stop("Failed to upload artifacts.");let P=`Artifact upload failed: ${x.message}`;throw C.error(O.red(P)),await R(P),new Error(P)}if(i&&$.length>0)try{C.info(O.cyan(`
|
|
1733
|
+
\u{1F517} Download Links:`));for(let x of $)C.info(O.dim(` - ${x.name}: `)+O.blue.underline(x.url));await ei("Finalize build in dashboard",()=>D.patch(`/builds/${i}/${n}`,{status:"success",artifacts:$,endTime:Date.now(),runtimeVersion:S,...Qn(e)})),ti(e,{status:"success",projectId:i,buildId:n,platform:e.platform,profile:h,branch:y,version:g,runtimeVersion:S,...Qn(e),buildType:b,developmentClient:!!e.developmentClient,summary:T,artifacts:$}),C.success(O.green(`
|
|
1734
|
+
\u2713 Build completed and reported to dashboard.`)),e.maestro&&!B&&await yl(i,n,e,h),e.autoSubmit&&!B&&await Ro(i,n,e,h)}catch(x){let P=`Build artifact uploaded but dashboard finalization failed: ${x.message}`;throw C.error(O.red(`
|
|
1735
|
+
${P}`)),await R(P),new Error(P)}}else if(i){let I="Build completed but produced no uploadable artifacts.";throw C.error(O.red(I)),await R(I),new Error(I)}}if(X){if(C.info(O.cyan(`\u{1F680} Direct Build Mode: Executing on ${e.sshHost||"local"}...`)),i&&!o){let v=process.argv.slice(3).join(" ");await D.post("/builds",{projectId:i,buildId:n,platform:e.platform,status:"building",branch:y,version:g,runtimeVersion:S,...Qn(e),summary:T,startTime:r,buildType:b,buildProfile:h,buildArgs:v,framework:e.framework,simulator:!!e.simulator,developmentClient:!!e.developmentClient,...bl(e,n,h,f)}),Sl(e)}if(e.sshHost&&e.platform==="ios")await zs(e,n,c,i),s=!1,e.autoSubmit&&await Ro(i,n,e,h);else{let v=await Qr({...e,interactive:!!e.local},n,c,i,{branch:y,version:g,runtimeVersion:S,summary:T,buildType:b});await K(v),s=!1}return}if(U&&(C.info(O.blue("\u{1F6F0}\uFE0F Cloud Initiator Mode: Preparing orchestration...")),!e.dryRun)){e.quiet||t.start("Zipping and uploading local source...");let v=await D.post("/builds/source-upload-url",{projectId:i,buildId:n});if(v.data.status!=="success")throw t.stop("Failed to get upload URL."),new Error("Failed to get source upload URL from API");Oo("SOURCE_UPLOAD",v.data.uploadUrl);let R=new al,I=Om(R,process.cwd(),e.platform),$=R.toBuffer();if(!e.quiet){let P=I.skipped.length>0?` Skipped: ${I.skipped.join(", ")}.`:"";t.message(`Prepared source (${I.files} files).${P}`)}e.quiet||t.message(`Uploading source (${($.length/1024/1024).toFixed(1)} MB)...`);let x=!1;for(let P=1;P<=3;P++)try{await Gi.put(v.data.uploadUrl,$,{headers:{"Content-Type":"application/zip"},maxBodyLength:1/0,maxContentLength:1/0,timeout:12e4}),x=!0;break}catch(V){if(P<3)t.message(`Upload attempt ${P} failed (${V.code||V.message}), retrying...`),await new Promise(G=>setTimeout(G,2e3*P));else throw V}if(e.quiet||t.stop("Source uploaded"),i){let P=process.argv.slice(3).join(" ");s=e.platform==="android",await D.post("/builds",{projectId:i,buildId:n,platform:e.platform,status:"pending",branch:y,version:g,runtimeVersion:S,...Qn(e),summary:T,startTime:r,buildType:b,buildProfile:h,buildArgs:P,framework:e.framework,simulator:!!e.simulator,developmentClient:!!e.developmentClient,...bl(e,n,h,f)}),s=e.platform==="android",C.info(O.green("\u2713 Cloud build registered.")),Sl(e)}e.platform==="android"&&(await Hs(e,n,c,i,e.preBuild),s=!1),e.quiet||C.info(O.cyan("\u{1F4E1} Connecting to build stream...")),await tg(i,n,e),e.maestro&&await yl(i,n,e,h),e.autoSubmit&&await Ro(i,n,e,h);return}}catch(d){let c=d.message||"Build failed";d.response?.data?.message?c=d.response.data.message:d.message.includes("status code 402")?c="Insufficient wallet balance. Please add credits in the Dashboard.":d.message.includes("status code 403")&&(c="Monthly build quota exceeded. Upgrade your plan in the Dashboard."),i&&s&&await a(c),C.error(O.red(`\u2717 Build failed: ${c}`)),process.exit(1)}};async function yl(e,t,n,i){C.info(O.cyan(`
|
|
1736
|
+
\u{1F3BC} Queuing managed Maestro test...`)),await co({projectId:e,buildId:t,platform:n.platform,profile:i,maestroFlows:n.maestroFlows,maestroDevice:n.maestroDevice,maestroRetries:n.maestroRetries,maestroRecord:n.maestroRecord,maestroUseBuildSource:n.maestroUseBuildSource,maestroEnv:n.maestroEnv,quiet:n.quiet})}async function Ro(e,t,n,i){if(!e){C.error(O.red("Auto-submit requires a linked Mach project. Run `mach link` or pass --project-id.")),process.exitCode=1;return}C.info(O.cyan(`
|
|
1737
|
+
Auto-submit: submitting the successful build...`));try{let r=await Qm(e,t);if(r?.autoSubmit){let o=r.submissionId?`${yt}/submissions/${r.submissionId}?projectId=${encodeURIComponent(e)}`:void 0,s=String(r.status||"").toLowerCase(),a=String(r.autoSubmitStatus||"").toLowerCase(),l=r.submissionId||["success","completed","succeeded"].includes(s)||["starting","submitted","failed","skipped"].includes(a);if(r.submissionId?(C.info(O.green(`Auto-submit is already queued by Mach backend: ${r.submissionId}`)),C.info(O.dim(`Dashboard: ${o}`))):r.autoSubmitStatus==="failed"?C.warn(O.yellow(`Backend auto-submit failed: ${r.autoSubmitError||"Unknown error"}`)):l&&C.info(O.green("Auto-submit is registered with Mach backend; skipping local duplicate submit.")),l){Ft(n,{status:r.autoSubmitStatus||"pending",projectId:e,submitId:r.submissionId,platform:n.platform,profile:i,buildId:t,dashboardUrl:o});return}}await Hi({platform:n.platform,profile:i,buildProfile:i,buildId:t,projectId:e,yes:n.yes,quiet:n.quiet,track:n.submitTrack,releaseStatus:n.submitReleaseStatus,rollout:n.submitRollout,changesNotSentForReview:n.submitChangesNotSentForReview,credentialId:n.submitCredentialId,packageName:n.androidPackage,jsonOutput:n.submitJsonOutput,submitArgs:Pl(n,t,i)})}catch(r){C.error(O.red(`Auto-submit failed: ${r.message||r}`)),process.exitCode=1}}function Pl(e,t,n){let i=["--platform",e.platform,"--profile",n,"--build-id",t];return e.submitTrack&&i.push("--track",String(e.submitTrack)),e.submitReleaseStatus&&i.push("--release-status",String(e.submitReleaseStatus)),e.submitRollout!==void 0&&i.push("--rollout",String(e.submitRollout)),e.submitChangesNotSentForReview&&i.push("--changes-not-sent-for-review"),e.submitCredentialId&&i.push("--credential-id",e.submitCredentialId),e.platform==="android"&&e.androidPackage&&i.push("--package-name",e.androidPackage),e.platform==="ios"&&e.iosBundleIdentifier&&i.push("--bundle-id",e.iosBundleIdentifier),e.submitJsonOutput&&i.push("--json-output",e.submitJsonOutput),i.join(" ")}async function Qm(e,t){try{let i=(await D.get(`/builds/${e}/${t}`)).data?.build;if(i?.autoSubmit)return i}catch(n){C.warn(O.dim(`Could not check backend auto-submit status: ${n.message}`))}return null}function Rl(e){for(let t of Object.keys(e))e[t]===void 0&&delete e[t];return e}function eg(e,t,n){let i=n?.submit?.[t]?.android||{},r=n?.submit?.production?.android||{},o=e.submitTrack||i.track||r.track,s=e.submitReleaseStatus||i.releaseStatus||r.releaseStatus,a=e.submitRollout??i.rollout??i.userFraction??i.rolloutFraction??r.rollout??r.userFraction??r.rolloutFraction,l=e.submitChangesNotSentForReview??i.changesNotSentForReview??i.changes_not_sent_for_review??r.changesNotSentForReview??r.changes_not_sent_for_review;return Rl({track:o,releaseStatus:s,rollout:a,changesNotSentForReview:l===void 0?!1:l===!0||l==="true"||l==="1"})}function bl(e,t,n,i){if(!e.autoSubmit||e.dryRun)return{};let r=e.platform==="android"?eg(e,n,i):{};return{autoSubmit:!0,autoSubmitStatus:"pending",autoSubmitOptions:Rl({platform:e.platform,profile:n,buildId:t,latest:!1,...r,credentialId:e.submitCredentialId,packageName:e.platform==="android"?e.androidPackage:void 0,bundleId:e.platform==="ios"?e.iosBundleIdentifier:void 0,submitArgs:Pl(e,t,n)})}}function Sl(e){!e.autoSubmit||e.dryRun||e.quiet||(C.info(O.green("\u2713 Auto-submit has been registered with the build.")),C.info(O.dim(" You can close this terminal; submission will start after build success.")))}function Al(e){return`${yt}/build/${e}`}function ti(e,t){if(!e.jsonOutput)return;let n=_e.resolve(e.jsonOutput),i={...t,url:t.url||Al(t.buildId),dashboardUrl:t.dashboardUrl||Al(t.buildId),updatedAt:new Date().toISOString()};try{let r=_e.dirname(n);r&&r!=="."&&be.mkdirSync(r,{recursive:!0}),be.writeFileSync(n,JSON.stringify(i,null,2))}catch(r){C.warn(O.yellow(`Could not write build metadata JSON: ${r.message}`))}}async function tg(e,t,n){let r=Co(),o="pending",s=0,a=0;for(n.quiet||r.start("Connecting to build stream...");;){try{let d=(await D.get(`/builds/${e}/${t}`)).data.build;if(d){o=d.status;let c=String(d.pipelineLaunchState||"").toLowerCase(),u=Number(d.pipelineLaunchClaimedAt),f=Number(d.pipelineLaunchDispatchStartedAt),p=c==="claimed"&&Number.isFinite(u)&&u>0&&Date.now()-u>=3e5,y=c==="dispatching"&&Number.isFinite(f)&&f>0&&Date.now()-f>=3e5;if(["","created","pending","queued"].includes(String(o||"").toLowerCase())&&(c==="retryable_failed"||c==="ambiguous"||p||y)){let h=y||c==="ambiguous"?"ambiguous":"retryable_failed",S=d.pipelineLaunchError||(h==="ambiguous"?"The iOS runner launch outcome is unknown. MACH blocked automatic relaunch to avoid a duplicate pipeline.":p?"The iOS runner was never dispatched before its launch lease expired. Retry this build.":"The iOS runner could not be launched. Retry this build.");n.quiet||r.stop("Build runner launch failed."),ti(n,{status:"failed",projectId:e,buildId:t,platform:n.platform,profile:d.buildProfile,buildType:d.buildType,developmentClient:!!d.developmentClient,version:d.version,runtimeVersion:d.runtimeVersion,buildNumber:d.buildNumber,versionCode:d.versionCode,summary:d.summary,pipelineLaunchState:h,error:S,artifacts:d.artifacts||[]}),C.error(O.red(`
|
|
1738
|
+
\u2717 Build runner launch failed: ${S}`)),process.exit(1)}if(o==="building")n.quiet||r.message("Build in progress...");else if(o==="failed"||o==="error"||o==="cancelled"||o==="canceled"){let h=o==="cancelled"||o==="canceled";n.quiet||r.stop(h?"Build cancelled.":"Build failed.");let S=d.error||(h?"Build was cancelled.":"Unknown error");ti(n,{status:o,projectId:e,buildId:t,platform:n.platform,profile:d.buildProfile,buildType:d.buildType,developmentClient:!!d.developmentClient,version:d.version,runtimeVersion:d.runtimeVersion,buildNumber:d.buildNumber,versionCode:d.versionCode,summary:d.summary,error:S,artifacts:d.artifacts||[]}),C.error(O.red(`
|
|
1739
|
+
\u2717 ${h?"Build cancelled":"Build failed"}: ${S}`)),process.exit(1)}else if(o==="completed"||o==="success"){n.quiet||r.stop("Build successful!"),ti(n,{status:o,projectId:e,buildId:t,platform:n.platform,profile:d.buildProfile,buildType:d.buildType,developmentClient:!!d.developmentClient,version:d.version,runtimeVersion:d.runtimeVersion,buildNumber:d.buildNumber,versionCode:d.versionCode,summary:d.summary,artifacts:d.artifacts||[]}),C.success(O.green(`
|
|
1740
|
+
\u2713 Build completed successfully!`));try{n.quiet||(C.info(O.magenta(`
|
|
1741
|
+
\u{1F4F1} Installation Hub:`)),C.info(O.dim(" - View & Install Build: ")+O.white.underline(`${yt}/build/${t}`)))}catch{}return}else if(o!=="pending"){n.quiet||r.stop(`Build status: ${o}`);return}}try{let u=(await D.get(`/builds/${e}/${t}/logs`)).data;if(u&&typeof u=="string"&&!n.quiet){let f=u.split(`
|
|
1742
|
+
`);if(f.length>s){for(let p=s;p<f.length;p++)f[p].trim()&&console.log(O.dim(` ${f[p]}`));s=f.length}}}catch{}a=0}catch{a++,a>10&&(r.stop("Connection lost."),C.error(O.red(`
|
|
1743
|
+
\u2717 Lost connection to Dashboard API.`)),process.exit(1))}await new Promise(l=>setTimeout(l,3e3))}}import*as Qi from"http";import*as Tl from"net";import{execFile as ng,execFileSync as Vt,execSync as Yi,spawn as Cl}from"child_process";import Ae from"chalk";import{log as te}from"@clack/prompts";import ig from"axios";import me from"fs";import dt from"os";import ee from"path";var Ot=7070,ri=`http://127.0.0.1:${Ot}`,In="com.radhya.mach.agent",En="Mach Agent",wn=`${In}.service`,rg=5e3,og=3e3,Ji=null,qi=null,ct=()=>ee.join(dt.homedir(),m.configDir),Ll=()=>ee.join(dt.homedir(),"Library","LaunchAgents"),Xi=()=>ee.join(Ll(),`${In}.plist`),Ml=()=>ee.join(dt.homedir(),".config","systemd","user"),ko=()=>ee.join(Ml(),wn),No=()=>ee.join(ct(),"agent.cmd");function xo(){return`gui/${process.getuid?.()||Number(Yi("id -u").toString().trim())}`}function Ul(e){return e.replace(/&/g,"&").replace(/</g,"<").replace(/>/g,">").replace(/"/g,""").replace(/'/g,"'")}function ii(e){return`<string>${Ul(e)}</string>`}function To(){let e=process.argv[1]?me.realpathSync(process.argv[1]):"";if(!e||!me.existsSync(e))throw new Error("Could not resolve the current Mach CLI entrypoint.");return[process.execPath,e,"agent","run"]}function Lo(){let e=Fl(),t=process.platform==="win32"?[process.env.SystemRoot?ee.join(process.env.SystemRoot,"System32"):void 0,process.env.SystemRoot]:["/opt/homebrew/bin","/usr/local/bin","/usr/bin","/bin","/usr/sbin","/sbin"],n={HOME:dt.homedir(),PATH:[process.env.PATH,...e.flatMap(i=>[ee.join(i,"platform-tools"),ee.join(i,"emulator"),ee.join(i,"cmdline-tools","latest","bin"),ee.join(i,"tools","bin")]),...t].filter(Boolean).join(ee.delimiter)};for(let i of["ANDROID_HOME","ANDROID_SDK_ROOT","JAVA_HOME","SHELL"])process.env[i]&&(n[i]=process.env[i]);return n}function Fl(){let e=[process.env.ANDROID_HOME,process.env.ANDROID_SDK_ROOT];if(process.platform==="darwin")e.push(ee.join(dt.homedir(),"Library","Android","sdk"));else if(process.platform==="linux")e.push(ee.join(dt.homedir(),"Android","Sdk"),ee.join(dt.homedir(),"Android","sdk"),"/opt/android-sdk","/usr/lib/android-sdk");else if(process.platform==="win32"){let t=process.env.LOCALAPPDATA,n=process.env.USERPROFILE||dt.homedir();e.push(t?ee.join(t,"Android","Sdk"):void 0,ee.join(n,"AppData","Local","Android","Sdk"))}return Array.from(new Set(e.filter(t=>!!t)))}function sg(e){return process.platform==="win32"&&!e.toLowerCase().endsWith(".exe")?`${e}.exe`:e}function Bl(e,t){let n=sg(e);for(let i of Fl()){let r=ee.join(i,t,n);if(me.existsSync(r))return r}return n}function jl(){return Bl("adb","platform-tools")}function Hl(){return Bl("emulator","emulator")}function Do(e){return`"${e.replace(/\\/g,"\\\\").replace(/"/g,'\\"').replace(/%/g,"%%")}"`}function ag(){if(process.platform!=="linux")throw new Error("Linux service install requires Linux.");me.mkdirSync(ct(),{recursive:!0}),me.mkdirSync(Ml(),{recursive:!0});let e=To(),t=Lo(),n=Object.entries(t).map(([r,o])=>`Environment=${Do(`${r}=${o}`)}`).join(`
|
|
1499
1744
|
`),i=`[Unit]
|
|
1500
1745
|
Description=Mach local device agent
|
|
1501
1746
|
After=default.target
|
|
1502
1747
|
|
|
1503
1748
|
[Service]
|
|
1504
1749
|
Type=simple
|
|
1505
|
-
ExecStart=${e.map(
|
|
1506
|
-
WorkingDirectory=${
|
|
1750
|
+
ExecStart=${e.map(Do).join(" ")}
|
|
1751
|
+
WorkingDirectory=${Do(dt.homedir())}
|
|
1507
1752
|
${n}
|
|
1508
1753
|
Restart=on-failure
|
|
1509
1754
|
RestartSec=5
|
|
@@ -1512,20 +1757,20 @@ StandardError=append:%h/${m.configDir}/agent.error.log
|
|
|
1512
1757
|
|
|
1513
1758
|
[Install]
|
|
1514
1759
|
WantedBy=default.target
|
|
1515
|
-
`;return
|
|
1516
|
-
`),
|
|
1760
|
+
`;return me.writeFileSync(ko(),i),ko()}function Ht(e,t={}){try{return Vt("systemctl",["--user",...e],{stdio:t.ignoreError?"ignore":"pipe"}),!0}catch(n){if(t.ignoreError)return!1;throw n}}function lg(){if(process.platform!=="win32")throw new Error("Windows agent script requires Windows.");me.mkdirSync(ct(),{recursive:!0});let e=Lo(),[t,n,...i]=To(),r=ee.join(ct(),"agent.log"),o=ee.join(ct(),"agent.error.log"),s=Object.entries(e).map(([d,c])=>`set "${d}=${c}"`).join(`\r
|
|
1761
|
+
`),a=i.map(d=>`"${d.replace(/"/g,'\\"')}"`).join(" "),l=`@echo off\r
|
|
1517
1762
|
${s}\r
|
|
1518
|
-
cd /d "${
|
|
1519
|
-
"${t}" "${n}" ${
|
|
1520
|
-
`;return
|
|
1521
|
-
${
|
|
1522
|
-
`),o=e.map(
|
|
1763
|
+
cd /d "${dt.homedir()}"\r
|
|
1764
|
+
"${t}" "${n}" ${a} >> "${r}" 2>> "${o}"\r
|
|
1765
|
+
`;return me.writeFileSync(No(),l),No()}function oi(e,t={}){try{return Vt("schtasks.exe",e,{stdio:t.ignoreError?"ignore":"pipe"}),!0}catch(n){if(t.ignoreError)return!1;throw n}}function dg(){if(process.platform!=="darwin")throw new Error("Background agent install currently supports macOS only.");me.mkdirSync(ct(),{recursive:!0}),me.mkdirSync(Ll(),{recursive:!0});let e=To(),t=Lo(),n=ee.join(ct(),"agent.log"),i=ee.join(ct(),"agent.error.log"),r=Object.entries(t).map(([a,l])=>` <key>${Ul(a)}</key>
|
|
1766
|
+
${ii(l)}`).join(`
|
|
1767
|
+
`),o=e.map(a=>` ${ii(a)}`).join(`
|
|
1523
1768
|
`),s=`<?xml version="1.0" encoding="UTF-8"?>
|
|
1524
1769
|
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
|
|
1525
1770
|
<plist version="1.0">
|
|
1526
1771
|
<dict>
|
|
1527
1772
|
<key>Label</key>
|
|
1528
|
-
${
|
|
1773
|
+
${ii(In)}
|
|
1529
1774
|
<key>ProgramArguments</key>
|
|
1530
1775
|
<array>
|
|
1531
1776
|
${o}
|
|
@@ -1537,21 +1782,21 @@ ${r}
|
|
|
1537
1782
|
<key>RunAtLoad</key>
|
|
1538
1783
|
<true/>
|
|
1539
1784
|
<key>StandardOutPath</key>
|
|
1540
|
-
${
|
|
1785
|
+
${ii(n)}
|
|
1541
1786
|
<key>StandardErrorPath</key>
|
|
1542
|
-
${
|
|
1787
|
+
${ii(i)}
|
|
1543
1788
|
</dict>
|
|
1544
1789
|
</plist>
|
|
1545
|
-
`;return
|
|
1546
|
-
`).forEach(n=>{if(n.includes("List of devices")||!n.trim())return;let i=n.split(/\s+/);if(i.length<2||i[1]!=="device")return;let r=i[0],o=n.match(/model:([^\s]+)/);e.push({id:r,platform:"android",type:r.startsWith("emulator-")?"emulator":"physical",name:o?o[1].replace(/_/g," "):r,status:"online",details:n.trim()})})}catch{}try{let n=(await
|
|
1547
|
-
`).filter(r=>!!r.trim()),i=e.some(r=>r.platform==="android"&&r.id.startsWith("emulator-"));n.forEach(r=>{i||e.push({id:r,platform:"android",type:"emulator",name:r.replace(/_/g," "),status:"offline",details:`Android Virtual Device: ${r}`})})}catch{}return e}async function
|
|
1548
|
-
${n}`),!0}function
|
|
1790
|
+
`;return me.writeFileSync(Xi(),s),Xi()}function jt(e,t={}){try{return Vt("launchctl",e,{stdio:t.ignoreError?"ignore":"pipe"}),!0}catch(n){if(t.ignoreError)return!1;throw n}}function cg(e){return new Promise(t=>setTimeout(t,e))}function Zi(e,t,n=rg){return new Promise((i,r)=>{ng(e,t,{timeout:n,maxBuffer:10*1024*1024,windowsHide:!0},(o,s,a)=>{if(o){let l=a?.toString().trim();r(new Error(l||o.message));return}i(s?.toString()||"")})})}async function Vl(){if(typeof fetch=="function"){let e=new AbortController,t=setTimeout(()=>e.abort(),3e3);try{return(await fetch(`${ri}/health`,{signal:e.signal})).ok}catch{return!1}finally{clearTimeout(t)}}return new Promise(e=>{let t=!1,n=r=>{t||(t=!0,e(r))},i=Qi.get(`${ri}/health`,r=>{r.resume(),n(r.statusCode===200)});i.setTimeout(3e3,()=>{i.destroy(),n(!1)}),i.on("error",()=>n(!1))})}async function ug(e=8e3){let t=Date.now()+e;for(;Date.now()<t;){if(await Vl())return!0;await cg(250)}return!1}async function Gl(){return new Promise(e=>{let t=!1,n=Tl.createConnection({host:"127.0.0.1",port:Ot}),i=r=>{t||(t=!0,n.destroy(),e(r))};n.setTimeout(1e3),n.once("connect",()=>i(!0)),n.once("timeout",()=>i(!1)),n.once("error",()=>i(!1))})}async function Mo(){if(await ug()){te.success(Ae.green("Mach agent installed and started."));return}if(await Gl()){te.warn(`Mach agent service is installed, but port ${Ot} is held by a process that is not answering /health.`),te.info(Ae.dim(`Run \`${m.nameLower} agent stop\`, close any foreground \`${m.nameLower} agent\` terminal, then run \`${m.nameLower} agent install\` again.`));return}te.warn(`Mach agent service is installed, but it did not start listening on ${ri}.`)}async function pg(){let e=dg(),t=xo();jt(["bootout",t,e],{ignoreError:!0}),jt(["bootstrap",t,e],{ignoreError:!0})||jt(["load","-w",e]),jt(["enable",`${t}/${In}`],{ignoreError:!0}),jt(["kickstart","-k",`${t}/${In}`],{ignoreError:!0}),await Mo(),te.info(Ae.dim(`It will start automatically when you log in. Plist: ${e}`)),te.info(Ae.dim(`Logs: ${ee.join(ct(),"agent.log")}`))}async function zl(){let e=Xi(),t=xo();jt(["bootout",t,e],{ignoreError:!0})||jt(["unload","-w",e],{ignoreError:!0})?te.success(Ae.green("Mach agent service stopped.")):te.warn("Mach agent service was not loaded.")}async function fg(){await zl();let e=Xi();me.existsSync(e)&&me.unlinkSync(e),te.success(Ae.green("Mach agent service uninstalled."))}async function mg(){let e=ag();Ht(["daemon-reload"]),Ht(["enable","--now",wn]),await Mo(),te.info(Ae.dim(`It will start automatically when you log in. Service: ${e}`)),te.info(Ae.dim(`Logs: ${ee.join(ct(),"agent.log")}`))}async function gg(){Ht(["stop",wn],{ignoreError:!0})?te.success(Ae.green("Mach agent service stopped.")):te.warn("Mach agent service was not running.")}async function hg(){Ht(["disable","--now",wn],{ignoreError:!0}),Ht(["daemon-reload"],{ignoreError:!0});let e=ko();me.existsSync(e)&&me.unlinkSync(e),Ht(["daemon-reload"],{ignoreError:!0}),te.success(Ae.green("Mach agent service uninstalled."))}async function yg(){let e=lg();oi(["/Create","/TN",En,"/SC","ONLOGON","/TR",`"${e}"`,"/RL","LIMITED","/F"]),oi(["/Run","/TN",En],{ignoreError:!0}),await Mo(),te.info(Ae.dim(`It will start automatically when you log in. Task: ${En}`)),te.info(Ae.dim(`Logs: ${ee.join(ct(),"agent.log")}`))}async function Kl(){oi(["/End","/TN",En],{ignoreError:!0})?te.success(Ae.green("Mach agent task stopped.")):te.warn("Mach agent task was not running.")}async function bg(){await Kl(),oi(["/Delete","/TN",En,"/F"],{ignoreError:!0});let e=No();me.existsSync(e)&&me.unlinkSync(e),te.success(Ae.green("Mach agent task uninstalled."))}async function Ol(){if(process.platform==="darwin")return pg();if(process.platform==="linux")return mg();if(process.platform==="win32")return yg();throw new Error(`Background agent install is not supported on ${process.platform}.`)}async function Dl(){if(process.platform==="darwin")return zl();if(process.platform==="linux")return gg();if(process.platform==="win32")return Kl();te.warn(`Background agent service control is not supported on ${process.platform}.`)}async function Sg(){if(process.platform==="darwin")return fg();if(process.platform==="linux")return hg();if(process.platform==="win32")return bg();te.warn(`Background agent uninstall is not supported on ${process.platform}.`)}async function Ag(){let e=await Vl(),t=e?!0:await Gl();if(e?te.success(Ae.green(`Mach agent is online at ${ri}`)):t?te.warn(`Mach agent port is open, but /health did not respond. Run \`${m.nameLower} agent restart\` if the dashboard still shows offline.`):te.warn(`Mach agent is not responding at ${ri}`),process.platform==="darwin"){let n=jt(["print",`${xo()}/${In}`],{ignoreError:!0});te.info(Ae.dim(`Login service: ${n?"installed/loaded":"not loaded"}`))}else if(process.platform==="linux"){let n=Ht(["is-enabled",wn],{ignoreError:!0}),i=Ht(["is-active",wn],{ignoreError:!0});te.info(Ae.dim(`Login service: ${n?"enabled":"not enabled"} / ${i?"active":"inactive"}`))}else if(process.platform==="win32"){let n=oi(["/Query","/TN",En],{ignoreError:!0});te.info(Ae.dim(`Login task: ${n?"installed":"not installed"}`))}}async function Eg(){let e=[];try{(await Zi(jl(),["devices","-l"])).split(`
|
|
1791
|
+
`).forEach(n=>{if(n.includes("List of devices")||!n.trim())return;let i=n.split(/\s+/);if(i.length<2||i[1]!=="device")return;let r=i[0],o=n.match(/model:([^\s]+)/);e.push({id:r,platform:"android",type:r.startsWith("emulator-")?"emulator":"physical",name:o?o[1].replace(/_/g," "):r,status:"online",details:n.trim()})})}catch{}try{let n=(await Zi(Hl(),["-list-avds"])).split(`
|
|
1792
|
+
`).filter(r=>!!r.trim()),i=e.some(r=>r.platform==="android"&&r.id.startsWith("emulator-"));n.forEach(r=>{i||e.push({id:r,platform:"android",type:"emulator",name:r.replace(/_/g," "),status:"offline",details:`Android Virtual Device: ${r}`})})}catch{}return e}async function Wl(){if(process.platform!=="darwin")return[];try{let e=await Zi("/usr/bin/xcrun",["simctl","list","devices","--json"]),t=JSON.parse(e),n=[];return Object.entries(t.devices||{}).forEach(([i,r])=>{r.forEach(o=>{o.isAvailable&&n.push({id:o.udid,platform:"ios",type:"simulator",name:o.name,status:o.state?.toLowerCase()==="booted"?"online":"offline",runtime:i,details:`${o.name} (${i})`})})}),n}catch{return[]}}async function Ig(){if(process.platform!=="darwin")return[];try{let e=await Zi("/usr/bin/xcrun",["devicectl","list","devices","--json-output","-"]);return(JSON.parse(e).result?.devices||[]).filter(n=>{let i=n.connectionProperties?.transportType;return i==="wired"||i==="localNetwork"}).map(n=>{let i=n.connectionProperties?.transportType,r=n.deviceProperties?.name||"iPhone";return{id:n.identifier,platform:"ios",type:"physical",name:r,status:"online",details:`${r} (${n.model?.name||n.hardwareModel||""}) - ${i}`}})}catch{return[]}}async function wg(e){let t=await Wl(),n=t.find(r=>r.id===e);if(n)return n;let i=t.filter(r=>r.status==="online");return i.length===1?i[0]:null}async function vg(){let[e,t,n]=await Promise.all([Eg(),Wl(),Ig()]);return[...e,...t,...n]}async function $g(){let e=Date.now();return Ji&&e-Ji.updatedAt<og?Ji.targets:(qi||(qi=vg().then(t=>(Ji={targets:t,updatedAt:Date.now()},t)).finally(()=>{qi=null})),qi)}async function kl(e){let t=[];for await(let n of e)t.push(Buffer.isBuffer(n)?n:Buffer.from(n));return t.length===0?{}:JSON.parse(Buffer.concat(t).toString("utf-8"))}async function _g(e,t){let n=await ig({method:"GET",url:e,responseType:"stream",timeout:12e4}),i=me.createWriteStream(t);n.data.pipe(i),await new Promise((r,o)=>{i.on("finish",r),i.on("error",o)})}function Nl(e,t){let n=e?.stderr?.toString?.().trim();if(n)return n;let i=e?.stdout?.toString?.().trim();return i||e?.message||t}function Pg(e,t){return Vt("/usr/libexec/PlistBuddy",["-c",`Print :${t}`,e],{encoding:"utf-8"}).trim()}function Rg(e){let t=ee.join(e,"Info.plist");if(!me.existsSync(t))throw new Error(`Could not validate iOS app executable: ${t} not found.`);let n=Pg(t,"CFBundleExecutable"),i=ee.join(e,n);if(!me.existsSync(i))throw new Error(`Could not validate iOS app executable: ${i} not found.`);return i}function Cg(){return process.arch==="arm64"?"arm64":"x86_64"}function Og(e){return me.existsSync(e)?me.readdirSync(e).map(t=>ee.join(e,t)).filter(t=>t.endsWith(".app")&&me.statSync(t).isDirectory()):[]}function xl(e,t){let n=Og(e);if(n.length===1)return n[0];if(n.length>1)throw new Error(`Multiple .app bundles found in ${t}: ${n.map(i=>ee.basename(i)).join(", ")}. Mach cannot safely choose which app to install.`);return""}function Dg(e){let t=Rg(e),n=Cg(),i="",r="";try{i=Vt("lipo",["-info",t],{encoding:"utf-8"}).trim()}catch(o){throw new Error(`Could not inspect iOS simulator app architecture for ${ee.basename(e)}: ${o.message}`)}if(!new RegExp(`\\b${n}\\b`).test(i))throw new Error(`This iOS simulator artifact cannot be installed because ${ee.basename(e)} does not include the ${n} simulator architecture. lipo output: ${i}. Rebuild the app with the latest Mach CLI and make sure the profile is a simulator build.`);try{r=Vt("/usr/bin/xcrun",["vtool","-show-build",t],{encoding:"utf-8"}).trim()}catch(o){throw new Error(`Could not inspect iOS simulator app platform for ${ee.basename(e)}: ${o.message}`)}if(!/\bplatform\s+IOSSIMULATOR\b/i.test(r))throw new Error(`This iOS simulator artifact cannot be installed because ${ee.basename(e)} was built for the wrong Apple platform. A simulator artifact must contain platform IOSSIMULATOR. vtool output: ${r}. Rebuild the app with the latest Mach CLI.`)}async function kg(e,t,n){let i=n||(t.toLowerCase().includes(".apk")?"android":"ios"),r=t.toLowerCase().includes(".ipa"),o=me.mkdtempSync(ee.join(dt.tmpdir(),`${Ot}-install-`)),s=ee.join(o,i==="android"?"install.apk":r?"install.ipa":"install.zip");try{if(await _g(t,s),i==="android"){Vt(jl(),["-s",e,"install","-r",s],{stdio:"pipe"});return}if(process.platform!=="darwin")throw new Error("iOS local install requires macOS.");Yi(`unzip -o ${JSON.stringify(s)} -d ${JSON.stringify(o)}`,{stdio:"pipe"});let a=ee.join(o,"Payload"),l=me.existsSync(a),d=r||l,c="";if(d?c=xl(a,"Payload"):c=xl(o,"the simulator artifact"),!c)throw new Error(`No .app bundle found inside the ${r?"IPA":"archive"}.`);let u=d?null:await wg(e);if(u){try{Dg(c),Vt("/usr/bin/xcrun",["simctl","install",u.id,c],{stdio:"pipe"})}catch(f){throw new Error(Nl(f,"iOS Simulator install failed."))}return}if(!d)throw new Error("Selected iOS Simulator was not found. Refresh Install Hub devices or boot one simulator and try again.");try{Yi(`/usr/bin/xcrun devicectl device install app --device ${JSON.stringify(e)} ${JSON.stringify(c)}`,{stdio:"pipe"})}catch(f){throw new Error(Nl(f,"iOS device install failed."))}}finally{me.rmSync(o,{recursive:!0,force:!0})}}function Ng(e,t){if(!e)throw new Error("Device id is required.");if(t==="ios"){if(process.platform!=="darwin")throw new Error("iOS Simulator launch requires macOS.");return Yi(`/usr/bin/xcrun simctl boot ${JSON.stringify(e)}`,{stdio:"pipe"}),Cl("open",["-a","Simulator"],{detached:!0,stdio:"ignore"}).unref(),"Simulator booting..."}if(t==="android")return Cl(Hl(),["-avd",e],{detached:!0,stdio:"ignore",windowsHide:!0}).unref(),"Emulator booting in background...";throw new Error("Invalid platform.")}async function xg(){process.platform!=="darwin"&&te.warn("Running on non-macOS \u2014 iOS discovery unavailable, Android only.");let e=Qi.createServer((i,r)=>{if(r.setHeader("Access-Control-Allow-Origin","*"),r.setHeader("Access-Control-Allow-Methods","GET, POST, OPTIONS"),r.setHeader("Access-Control-Allow-Headers","Content-Type, Authorization"),i.method==="OPTIONS"){r.writeHead(204),r.end();return}let o=new URL(i.url||"/",`http://localhost:${Ot}`);if(i.method==="GET"&&o.pathname==="/local/devices"){$g().then(s=>{r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",targets:s}))}).catch(s=>{r.writeHead(500,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:s.message}))});return}if(i.method==="GET"&&o.pathname==="/health"){r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",service:"mach-agent",port:Ot,platform:process.platform}));return}if(i.method==="POST"&&o.pathname==="/install-local"){t(i,r);return}if(i.method==="POST"&&o.pathname==="/local/boot"){n(i,r);return}r.writeHead(404),r.end()}),t=async(i,r)=>{try{let{deviceId:o,artifactUrl:s,platform:a}=await kl(i);if(!o||!s){r.writeHead(400,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:"deviceId and artifactUrl are required"}));return}await kg(o,s,a),r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",message:`Installed on ${o}`}))}catch(o){r.writeHead(500,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:o.message||"Local install failed"}))}},n=async(i,r)=>{try{let{id:o,platform:s}=await kl(i),a=Ng(o,s);r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",message:a}))}catch(o){r.writeHead(500,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:o.message||"Local device launch failed"}))}};e.listen(Ot,"127.0.0.1",()=>{te.success(Ae.green(`Local device agent running on http://localhost:${Ot}`)),te.info(Ae.dim("Keep this running while using the Install Hub on the dashboard.")),te.info(Ae.dim("Press Ctrl+C to stop."))}),e.on("error",i=>{i.code==="EADDRINUSE"?te.error(`Port ${Ot} is already in use \u2014 agent may already be running.`):te.error(`Agent error: ${i.message}`),process.exit(1)}),await new Promise(()=>{})}async function Jl(e="start"){let t=String(e||"start").toLowerCase();if(t==="start"||t==="run"){await xg();return}if(t==="install"){await Ol();return}if(t==="status"){await Ag();return}if(t==="stop"){await Dl();return}if(t==="uninstall"){await Sg();return}if(t==="restart"){await Dl(),await Ol();return}te.error(`Unknown agent action: ${e}`),te.info(Ae.dim(`Use: ${m.nameLower} agent start | install | status | restart | stop | uninstall`)),process.exit(1)}import{createRequire as Tg}from"module";var Lg=Tg(import.meta.url),Mg=Lg("../package.json"),St=String(Mg.version||"0.0.0");import{spinner as er}from"@clack/prompts";import pe from"chalk";import{spawnSync as Xg}from"child_process";import we from"fs";import je from"path";import ie from"fs";import ge from"path";var Ug={expo:["src/app/_layout.tsx","src/app/_layout.ts","src/app/_layout.jsx","src/app/_layout.js","app/_layout.tsx","app/_layout.ts","app/_layout.jsx","app/_layout.js","src/App.tsx","src/App.ts","src/App.jsx","src/App.js","App.tsx","App.ts","App.jsx","App.js"],"react-native":["index.ts","index.tsx","index.js","index.jsx","src/index.ts","src/index.tsx","src/index.js","src/index.jsx","App.tsx","App.ts","App.jsx","App.js","src/App.tsx","src/App.ts","src/App.jsx","src/App.js"]};function We(e,t){return ge.relative(e,t).split(ge.sep).join("/")}function Fg(e,t){return t.find(n=>ie.existsSync(ge.join(e,n)))}function Bg(e,t){return t.split(ge.sep).join("/").startsWith("src/")?ge.join(e,"src"):e}function jg(e){return e.endsWith(".ts")||e.endsWith(".tsx")}function Hg(e,t){let n=t.replace(/\.(?:tsx?|jsx?)$/,""),i=ge.relative(ge.dirname(e),n).split(ge.sep).join("/");return i.startsWith(".")||(i=`./${i}`),i}function Vg(e,t){let n=ie.readFileSync(e,"utf8");if(n.includes("MACH Push setup")||/(?:from\s+)?['"][^'"]*mach-push['"]/.test(n))return!1;let i=Hg(e,t);return ie.writeFileSync(e,`import '${i}'; // MACH Push setup
|
|
1793
|
+
${n}`),!0}function Gg(e,t){return`// Generated by \`mach push setup\`. Re-run the command to refresh.
|
|
1549
1794
|
// Public client configuration only. Provider credentials are never written here.
|
|
1550
1795
|
${t?`import type { MachPushConfig } from '@radhya/mach-push-react-native';
|
|
1551
1796
|
`:""}
|
|
1552
1797
|
|
|
1553
1798
|
export const machPushConfig${t?": MachPushConfig":""} = ${JSON.stringify(e,null,2)};
|
|
1554
|
-
`}function
|
|
1799
|
+
`}function zg(e,t){return t?`/**
|
|
1555
1800
|
* MACH Push application hooks.
|
|
1556
1801
|
*
|
|
1557
1802
|
* This file belongs to your app and is never overwritten by
|
|
@@ -1668,7 +1913,7 @@ export function startMachPush() {
|
|
|
1668
1913
|
// The basic experience works immediately. Remove this line if your product
|
|
1669
1914
|
// asks for notification permission at a later, contextual moment.
|
|
1670
1915
|
void startMachPush()?.catch(() => undefined);
|
|
1671
|
-
`}function
|
|
1916
|
+
`}function ql(e,t,n){let i=[],r=[],o=Fg(e,Ug[t]);if(!o)return{written:i,notes:["Could not locate the application entry point. Import the generated mach-push file once from your root App or layout."]};let s=ge.join(e,o),a=Bg(e,o),l=jg(o)?"ts":"js",d=l==="ts",c=ge.join(a,`mach-push.generated.${l}`),u=ge.join(a,`mach-push.${l}`);return ie.mkdirSync(a,{recursive:!0}),ie.writeFileSync(c,Gg(n,d)),i.push(We(e,c)),ie.existsSync(u)?r.push(`${We(e,u)} already exists; developer callbacks were preserved.`):(ie.writeFileSync(u,zg("./mach-push.generated",d)),i.push(We(e,u))),Vg(s,u)?i.push(We(e,s)):r.push(`${We(e,s)} already starts MACH Push.`),{written:i,notes:r,editableFile:We(e,u),generatedFile:We(e,c),entryFile:We(e,s)}}function Yl(e,t){if(!ie.existsSync(e))return[];let n=[];for(let i of ie.readdirSync(e,{withFileTypes:!0})){if(i.name==="Pods"||i.name==="build")continue;let r=ge.join(e,i.name);i.isDirectory()?n.push(...Yl(r,t)):t(r)&&n.push(r)}return n}function Kg(e,t){if(ie.mkdirSync(ge.dirname(e),{recursive:!0}),!ie.existsSync(e)){ie.writeFileSync(e,`<?xml version="1.0" encoding="UTF-8"?>
|
|
1672
1917
|
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
|
|
1673
1918
|
<plist version="1.0">
|
|
1674
1919
|
<dict>
|
|
@@ -1676,42 +1921,42 @@ void startMachPush()?.catch(() => undefined);
|
|
|
1676
1921
|
<string>${t}</string>
|
|
1677
1922
|
</dict>
|
|
1678
1923
|
</plist>
|
|
1679
|
-
`);return}let n=
|
|
1924
|
+
`);return}let n=ie.readFileSync(e,"utf8"),i=/(<key>aps-environment<\/key>\s*<string>)([^<]*)(<\/string>)/;if(i.test(n)){ie.writeFileSync(e,n.replace(i,`$1${t}$3`));return}n.includes("</dict>")&&ie.writeFileSync(e,n.replace("</dict>",` <key>aps-environment</key>
|
|
1680
1925
|
<string>${t}</string>
|
|
1681
|
-
</dict>`))}function
|
|
1682
|
-
${
|
|
1926
|
+
</dict>`))}function Wg(e,t,n){let i=[],r=[],o=ge.join(e,"ios");if(!ie.existsSync(o))return r.push("iOS native project is not present; no APNs entitlement was changed."),{written:i,notes:r};let a=Yl(o,c=>c.endsWith(".xcodeproj/project.pbxproj"))[0];if(!a)return r.push("Could not locate an iOS Xcode project for the APNs entitlement."),{written:i,notes:r};let l=ie.readFileSync(a,"utf8"),d=Array.from(l.matchAll(/CODE_SIGN_ENTITLEMENTS\s*=\s*"?([^";$]+\.entitlements)"?;/g),c=>c[1].trim());if(d.length===0&&t){let c=ge.basename(ge.dirname(a),".xcodeproj"),f=[ie.existsSync(ge.join(o,c))?c:"",`${c}.entitlements`].filter(Boolean).join("/"),p=!1;l=l.replace(/buildSettings = \{([\s\S]*?)\n(\s*)\};/g,(y,g,h)=>!new RegExp(`PRODUCT_BUNDLE_IDENTIFIER\\s*=\\s*"?${t.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}"?;`).test(g)||g.includes("CODE_SIGN_ENTITLEMENTS")?y:(p=!0,y.replace(/(\n\s*PRODUCT_BUNDLE_IDENTIFIER\s*=)/,`
|
|
1927
|
+
${h} CODE_SIGN_ENTITLEMENTS = ${f};$1`))),p&&(ie.writeFileSync(a,l),i.push(We(e,a)),d.push(f))}if(d.length===0)return r.push("Could not safely identify the iOS app target. Enable the Push Notifications capability in Xcode."),{written:i,notes:r};for(let c of new Set(d)){let u=ge.join(o,c);Kg(u,n),i.push(We(e,u))}return r.push(`iOS APNs entitlement is configured for ${n}.`),{written:[...new Set(i)],notes:r}}function Jg(e,t){let n=ie.readFileSync(e,"utf8");if(n.includes("com.google.gms.google-services"))return!1;let i=/plugins\s*\{/.exec(n);if(i?.index!==void 0){let r=t?` id("com.google.gms.google-services")
|
|
1683
1928
|
`:` id 'com.google.gms.google-services'
|
|
1684
|
-
`,o=i.index+i[0].length;
|
|
1929
|
+
`,o=i.index+i[0].length;ie.writeFileSync(e,`${n.slice(0,o)}
|
|
1685
1930
|
${r}${n.slice(o)}`)}else{let r=t?`
|
|
1686
1931
|
apply(plugin = "com.google.gms.google-services")
|
|
1687
1932
|
`:`
|
|
1688
1933
|
apply plugin: "com.google.gms.google-services"
|
|
1689
|
-
`;
|
|
1934
|
+
`;ie.writeFileSync(e,`${n.trimEnd()}${r}`)}return!0}function qg(e){let t=["settings.gradle.kts","settings.gradle"].map(a=>ge.join(e,a)).find(a=>ie.existsSync(a));if(t){let a=ie.readFileSync(t,"utf8");if(a.includes("com.google.gms.google-services"))return;let l=/plugins\s*\{/.exec(a);if(l?.index!==void 0){let c=t.endsWith(".kts")?` id("com.google.gms.google-services") version "4.4.4" apply false
|
|
1690
1935
|
`:` id "com.google.gms.google-services" version "4.4.4" apply false
|
|
1691
|
-
`,
|
|
1692
|
-
${
|
|
1693
|
-
`,s=r.index+r[0].length;return
|
|
1694
|
-
${o}${i.slice(s)}`),n}function
|
|
1695
|
-
`)}function
|
|
1936
|
+
`,u=l.index+l[0].length;return ie.writeFileSync(t,`${a.slice(0,u)}
|
|
1937
|
+
${c}${a.slice(u)}`),t}}let n=["build.gradle.kts","build.gradle"].map(a=>ge.join(e,a)).find(a=>ie.existsSync(a));if(!n)return;let i=ie.readFileSync(n,"utf8");if(i.includes("com.google.gms:google-services"))return;let r=/dependencies\s*\{/.exec(i);if(r?.index===void 0)return;let o=` classpath("com.google.gms:google-services:4.4.4")
|
|
1938
|
+
`,s=r.index+r[0].length;return ie.writeFileSync(n,`${i.slice(0,s)}
|
|
1939
|
+
${o}${i.slice(s)}`),n}function Yg(e,t){let n=[],i=[],r=ge.join(e,"android");if(!ie.existsSync(r))return i.push("Android native project is not present; no Firebase configuration was changed."),{written:n,notes:i};if(!t)return i.push("Android needs google-services.json. Add it at the project root and re-run mach push setup."),{written:n,notes:i};let o=ge.resolve(e,t);if(!ie.existsSync(o))return i.push(`Android Firebase file was not found at ${t}; re-run setup with --google-services-file.`),{written:n,notes:i};let s=ge.join(r,"app/google-services.json");ie.mkdirSync(ge.dirname(s),{recursive:!0}),o!==s&&(ie.copyFileSync(o,s),n.push(We(e,s)));let a=["build.gradle.kts","build.gradle"].map(d=>ge.join(r,"app",d)).find(d=>ie.existsSync(d));if(!a)return i.push("Could not locate android/app/build.gradle to enable Firebase."),{written:n,notes:i};Jg(a,a.endsWith(".kts"))&&n.push(We(e,a));let l=qg(r);return l&&n.push(We(e,l)),i.push("Android Firebase configuration and notification permission are wired."),{written:[...new Set(n)],notes:i}}function Xl(e,t){let n=Wg(e,t.iosBundleId,t.iosEnvironment),i=Yg(e,t.googleServicesFile);return{written:[...new Set([...n.written,...i.written])],notes:[...n.notes,...i.notes]}}function Zg(){return je.join(process.cwd(),m.configFileName)}function tr(){let e=Ie();if(!e?.projectId)throw new Error(`No linked MACH project. Run \`${m.nameLower} link\` first.`);return e}function ed(e){we.writeFileSync(Zg(),`${JSON.stringify(e,null,2)}
|
|
1940
|
+
`)}function Qg(){let e=je.join(process.cwd(),"package.json");if(!we.existsSync(e))return null;try{return JSON.parse(we.readFileSync(e,"utf8"))}catch{return null}}function Zl(e){let t=Qg();return!!(t?.dependencies?.[e]||t?.devDependencies?.[e])}function eh(e,t=!1){let n=process.cwd();return we.existsSync(je.join(n,"pnpm-lock.yaml"))?{command:"pnpm",args:["add",...t?["-D"]:[],e],label:`pnpm add ${t?"-D ":""}${e}`}:we.existsSync(je.join(n,"yarn.lock"))?{command:"yarn",args:["add",...t?["-D"]:[],e],label:`yarn add ${t?"-D ":""}${e}`}:we.existsSync(je.join(n,"bun.lock"))||we.existsSync(je.join(n,"bun.lockb"))?{command:"bun",args:["add",...t?["-d"]:[],e],label:`bun add ${t?"-d ":""}${e}`}:{command:"npm",args:["install",...t?["--save-dev"]:["--save"],e],label:`npm install ${t?"--save-dev ":""}${e}`}}function Ql(e,t=!1){let n=eh(e,t),i=Xg(n.command,n.args,{cwd:process.cwd(),stdio:"inherit",env:{...process.env}});return i.error||i.status!==0?{ok:!1,note:`${n.label} failed${i.error?`: ${i.error.message}`:` with code ${i.status}`}.`}:{ok:!0,note:`Installed with ${n.label}.`}}function th(e,t){let n=[];if(t)return n.push("Dependency installation skipped."),n;if(Zl("@radhya/mach-push-react-native"))n.push("@radhya/mach-push-react-native is already installed.");else{let i=Ql("@radhya/mach-push-react-native");if(!i.ok)throw new Error(`${i.note} No application files were wired.`);n.push(i.note)}if(e==="expo")if(Zl("@radhya/mach"))n.push("@radhya/mach is already available to the Expo config.");else{let i=Ql(`@radhya/mach@${St}`,!0);if(!i.ok)throw new Error(`${i.note} No Expo configuration was changed.`);n.push(i.note)}return n}function nh(e,t){return e||t||["google-services.json","android/app/google-services.json"].find(n=>we.existsSync(je.join(process.cwd(),n)))}function td(e){let t=process.cwd(),n=e==="ios"?"bundleIdentifier":"package";for(let i of["app.json","app.config.json"]){let r=je.join(t,i);if(we.existsSync(r))try{let o=JSON.parse(we.readFileSync(r,"utf8")),a=(o.expo&&typeof o.expo=="object"?o.expo:o)?.[e]?.[n];if(typeof a=="string"&&a.trim())return a.trim()}catch{}}for(let i of["app.config.ts","app.config.js"]){let r=je.join(t,i);if(!we.existsSync(r))continue;let s=we.readFileSync(r,"utf8").match(new RegExp(`${n}\\s*:\\s*['"]([^'"]+)['"]`));if(s?.[1])return s[1]}}function nd(e,t){return t||Xt(e)||td("ios")||et("ios")||void 0}function id(e,t){return t||un(e)||td("android")||et("android")||void 0}function ih(e,t){let n=we.readFileSync(e,"utf8");if(n.includes(t))return"already";let i=/(^[ \t]*)plugins\s*:\s*\[([\s\S]*?)\]/m.exec(n);if(!i||i.index===void 0)return"manual";let r=n.includes(`\r
|
|
1696
1941
|
`)?`\r
|
|
1697
1942
|
`:`
|
|
1698
|
-
`,o=i[1]||"",s=i[2]||"",
|
|
1699
|
-
`),`${n} now includes ${e}.`)}function
|
|
1700
|
-
`))}catch(n){t.stop(
|
|
1701
|
-
`))}catch(n){t.stop(
|
|
1702
|
-
`))}catch(t){
|
|
1943
|
+
`,o=i[1]||"",s=i[2]||"",a=s.match(/\r?\n([ \t]+)\S/)?.[1]||`${o} `,l=s.trim().length===0?`${r}${a}'${t}',${r}${o}`:`${r}${a}'${t}',${s}`,d=i[0].indexOf("["),c=`${i[0].slice(0,d+1)}${l}]`;return we.writeFileSync(e,`${n.slice(0,i.index)}${c}${n.slice(i.index+i[0].length)}`),"inserted"}function rd(){let e="@radhya/mach/expo-plugin",t=["app.config.ts","app.config.js"].find(l=>we.existsSync(je.join(process.cwd(),l)));if(t){let l=ih(je.join(process.cwd(),t),e);return l==="inserted"?`${t} now includes ${e}.`:l==="already"?`${t} already includes ${e}.`:`Add "${e}" to the plugins array in ${t}; MACH could not safely edit its computed configuration.`}let n=["app.config.json","app.json"].find(l=>we.existsSync(je.join(process.cwd(),l)));if(!n)return`Add "${e}" to the Expo plugins array.`;let i=je.join(process.cwd(),n),r=JSON.parse(we.readFileSync(i,"utf8")),o=r.expo&&typeof r.expo=="object"?r.expo:r,s=Array.isArray(o.plugins)?o.plugins:[];return s.some(l=>(Array.isArray(l)?l[0]:l)===e)?`${n} already includes ${e}.`:(o.plugins=[...s,e],we.writeFileSync(i,`${JSON.stringify(r,null,2)}
|
|
1944
|
+
`),`${n} now includes ${e}.`)}function od(e){let t=tr(),n=e.app||t.push?.appId;if(!n)throw new Error(`Push is not configured. Run \`${m.nameLower} push setup\` or pass --app.`);return{config:t,appId:n,environment:e.environment||t.push?.environment||"production"}}function rh(e){let t=je.resolve(e);if(!we.existsSync(t))throw new Error(`File not found: ${t}`);return t}function si(e){let t=e?.response?.data?.message||e?.message||"Unknown error";console.error(pe.red(t)),process.exitCode=1}async function sd(e){let t=er();try{let n=tr();if(Tn(n)==="flutter")throw new Error("MACH Push currently supports Expo and bare React Native. Flutter push support is planned for a later release.");let r=nd(n,e.iosBundle),o=id(n,e.androidPackage);if(!r&&!o)throw new Error(`Add ios.bundleIdentifier or android.package to ${m.configFileName}, or pass --ios-bundle/--android-package.`);t.start("Creating MACH Push app...");let{data:s}=await D.post(`/projects/${n.projectId}/push/apps`,{name:e.name||n.name||"Mobile app",iosBundleId:r,androidPackageName:o}),a=e.environment||"production";n.push={enabled:!0,appId:s.app.appId,publishableKey:s.app.publishableKey,apiUrl:"https://mach-api.securejs.in",environment:a,iosEnvironment:a==="development"?"development":"production",...e.googleServicesFile?{googleServicesFile:e.googleServicesFile}:{}},ed(n);let l=n.framework==="expo"?rd():void 0;t.stop(pe.green("MACH Push app created.")),console.log(["",`${pe.bold("App ID:")} ${s.app.appId}`,`${pe.bold("Publishable key:")} ${s.app.publishableKey}`,`${pe.bold("Config:")} ${m.configFileName} \u2192 push`,"","Install the mobile SDK:"," npm install @radhya/mach-push-react-native",...n.framework==="expo"?[" npm install --save-dev @radhya/mach",` ${l}`," Run npx expo prebuild."]:[],"","Next, configure APNs and/or FCM credentials."].join(`
|
|
1945
|
+
`))}catch(n){t.stop(pe.red("MACH Push setup failed.")),si(n)}}async function ad(e){let t=er();try{let n=tr(),i=Tn(n);if(i==="flutter")throw new Error("MACH Push currently supports Expo and bare React Native. Flutter push support is planned for a later release.");let r=nd(n,e.iosBundle),o=id(n,e.androidPackage);if(!r&&!o)throw new Error(`Add ios.bundleIdentifier or android.package to ${m.configFileName}, or pass --ios-bundle/--android-package.`);let s=n.push?.appId,a=n.push?.publishableKey;t.start("Checking the MACH Push app...");let d=(await D.get(`/projects/${n.projectId}/push/overview?days=1`)).data?.apps||[];if(d.find(b=>b.appId===s&&!!a&&b.publishableKey===a))t.stop(pe.green("MACH Push app verified."));else{let b=d.find(_=>!!_.publishableKey&&(!r||_.iosBundleId===r)&&(!o||_.androidPackageName===o));if(b)s=b.appId,a=b.publishableKey,t.stop(pe.green("Existing MACH Push app linked."));else{let{data:_}=await D.post(`/projects/${n.projectId}/push/apps`,{name:e.name||n.name||"Mobile app",iosBundleId:r,androidPackageName:o});s=_.app.appId,a=_.app.publishableKey,t.stop(pe.green("MACH Push app created."))}}if(!s||!a)throw new Error("MACH Push did not return a usable application key.");let u=e.environment||n.push?.environment||"production",f=nh(e.googleServicesFile,n.push?.googleServicesFile);n.push={enabled:!0,appId:s,publishableKey:a,apiUrl:n.push?.apiUrl||"https://mach-api.securejs.in",environment:u,iosEnvironment:u==="development"?"development":"production",...f?{googleServicesFile:f}:{}},ed(n);let p=th(i,!!e.skipInstall),y=i==="expo"?rd():void 0;if(y?.startsWith('Add "'))throw new Error(y);let g={projectId:n.projectId,appId:s,publishableKey:a,apiUrl:n.push.apiUrl,environment:u},h=ql(process.cwd(),i,g);if(!h.entryFile)throw new Error(h.notes[0]||"MACH could not locate the application entry point.");let S=i==="expo"?{written:[],notes:[]}:Xl(process.cwd(),{iosBundleId:r,iosEnvironment:n.push.iosEnvironment,googleServicesFile:f});console.log(["",pe.green.bold("MACH Push basic setup is ready."),`${pe.bold("Framework:")} ${i}`,`${pe.bold("App ID:")} ${s}`,`${pe.bold("Automatic startup:")} ${h.entryFile||"manual entry import required"}`,`${pe.bold("Customize callbacks:")} ${h.editableFile||"see the setup notes below"}`,"",...p.map(b=>`\u2022 ${b}`),...y?[`\u2022 ${y}`]:[],...h.notes.map(b=>`\u2022 ${b}`),...S.notes.map(b=>`\u2022 ${b}`),...[...h.written,...S.written].map(b=>`\u2022 Updated ${b}.`),"","Next: add APNs and/or FCM provider credentials, then create one new native build.","Dashboard: https://getmach.dev/push"].join(`
|
|
1946
|
+
`))}catch(n){t.stop(pe.red("MACH Push setup failed.")),si(n)}}async function Uo(e,t){let n=er();try{let{config:i,appId:r,environment:o}=od(t),s=rh(t.file),a;if(e==="apns"){if(!t.teamId||!t.keyId)throw new Error("APNs requires --team-id and --key-id.");let l=t.bundleId||Xt(i);if(!l)throw new Error("APNs requires --bundle-id.");a={environment:o,teamId:t.teamId,keyId:t.keyId,bundleId:l,privateKey:we.readFileSync(s,"utf8")}}else a={environment:o,serviceAccount:JSON.parse(we.readFileSync(s,"utf8"))};n.start(`Configuring ${e.toUpperCase()}...`),await D.put(`/projects/${i.projectId}/push/apps/${r}/credentials/${e}`,a),n.stop(pe.green(`${e.toUpperCase()} is ready.`))}catch(i){n.stop(pe.red(`${e.toUpperCase()} setup failed.`)),si(i)}}async function ld(e){let t=er();try{let{config:n,appId:i,environment:r}=od(e),o=e.all?{all:!0,platform:e.platform}:e.token?.length?{machPushTokens:e.token}:e.user?.length?{externalUserIds:e.user}:null;if(!o)throw new Error("Choose --token, --user, or --all.");let s;if(e.data){let c=JSON.parse(e.data);if(!c||typeof c!="object"||Array.isArray(c))throw new Error("--data must be a JSON object.");s=Object.fromEntries(Object.entries(c).map(([u,f])=>[u,String(f)]))}let a=e.badge===void 0?void 0:Number(e.badge),l=e.ttl===void 0?void 0:Number(e.ttl);t.start("Queueing notification...");let{data:d}=await D.post(`/projects/${n.projectId}/push/send`,{appId:i,environment:r,target:o,notification:{title:e.title,body:e.body,data:s},options:{sound:e.sound,badge:a,ttlSeconds:l,collapseKey:e.collapseKey,androidChannelId:e.androidChannelId}});t.stop(pe.green(`Notification queued: ${d.requestId}`))}catch(n){t.stop(pe.red("Notification was not queued.")),si(n)}}async function dd(e){try{let t=tr(),n=Math.min(Math.max(Number(e.days||30),1),90),{data:i}=await D.get(`/projects/${t.projectId}/push/overview?days=${n}`),r=i.totals,o=r.requested>0?`${(r.accepted/r.requested*100).toFixed(1)}%`:"\u2014";console.log([`${pe.bold("Active devices:")} ${i.activeDevices}`,`${pe.bold("Queued requests:")} ${r.queuedRequests}`,`${pe.bold("Requested:")} ${r.requested}`,`${pe.bold("Provider accepted:")} ${r.accepted}`,`${pe.bold("Failed:")} ${r.failed}`,`${pe.bold("Retried:")} ${r.retried}`,`${pe.bold("Invalid devices:")} ${r.invalidDevices}`,`${pe.bold("Acceptance:")} ${o}`].join(`
|
|
1947
|
+
`))}catch(t){si(t)}}import{text as sh,password as ah,spinner as lh,isCancel as pd}from"@clack/prompts";import Ho from"chalk";import ai from"fs";import cd from"path";import oh from"os";var Fo=cd.join(oh.homedir(),m.configDir),Bo=cd.join(Fo,"config.json");function jo(){if(!ai.existsSync(Bo))return{};try{return JSON.parse(ai.readFileSync(Bo,"utf-8"))}catch{return{}}}function ud(e){ai.existsSync(Fo)||ai.mkdirSync(Fo,{recursive:!0});let n={...jo(),...e};ai.writeFileSync(Bo,JSON.stringify(n,null,2))}async function fd(){let e=jo(),t=await sh({message:"Enter your email:",placeholder:"user@example.com",initialValue:e.lastLoginEmail,validate(r){if(r.length===0)return"Email is required!"}});if(pd(t))return;let n=await ah({message:"Enter your password:",validate(r){if(r.length===0)return"Password is required!"}});if(pd(n))return;let i=lh();i.start("Authenticating...");try{let o=await(await fetch(`${xt}/login`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({username:t,password:n})})).json();o.status==="success"&&o.user.token?(ws({id:o.user.id,email:t,token:o.user.token,refreshToken:o.user.refreshToken}),ud({lastLoginEmail:t}),i.stop(Ho.green("Login successful!"))):i.stop(Ho.red("Login failed: "+(o.message||"Unknown error")))}catch(r){i.stop(Ho.red("Network error: "+r.message))}}import{log as nr,outro as dh}from"@clack/prompts";import li from"chalk";async function md(){let e=vs(),t=`${m.envPrefix}TOKEN`;e?nr.success(li.green(`Logged out. Removed saved credentials from ~/${m.configDir}/credentials.json.`)):nr.warn(li.yellow(`No saved ${m.name} credentials found.`)),process.env[t]&&(nr.warn(li.yellow(`${t} is still set in this shell. Commands will continue to authenticate with that token until you unset it.`)),nr.info(li.dim(`Run: unset ${t}`))),dh(li.blue("---"))}import{outro as ch,select as uh,spinner as ph,isCancel as fh}from"@clack/prompts";import ir from"chalk";import Vo from"fs";import mh from"path";var gd=e=>e==="1234567890"||e==="ABC123DEFG"||e==="XXXXXXXXXX"?"":typeof e=="string"?e:"",gh=()=>process.versions.node.split(".")[0]||"24";async function hd(){if(!Ue()){console.log(ir.red(`You are not logged in. Run \`${m.nameLower} login\` first.`));return}let t=ph();t.start("Fetching projects...");try{let{data:n}=await D.get("/projects");if(t.stop("Projects loaded."),n.status!=="success"||!n.projects||n.projects.length===0){console.log(ir.yellow(`No projects found. Run \`${m.nameLower} init\` to create one.`));return}let i=n.projects.map(y=>({value:y.projectId,label:`${y.name} (${y.slug})`})),r=await uh({message:"Select a project to link:",options:i});if(fh(r))return;let o=mh.join(process.cwd(),m.configFileName),s={};if(Vo.existsSync(o))try{s=JSON.parse(Vo.readFileSync(o,"utf-8"))}catch{}let a=n.projects.find(y=>y.projectId===r),l=s.android?.package||et("android"),d=s.ios?.bundleIdentifier||et("ios"),c=s.android||{},u=s.submit?.production?.android||{},f=s.submit?.production?.ios||{},p={projectId:r,framework:Ze(s.framework)||cn,name:a?.name,slug:a?.slug,nodeVersion:s.nodeVersion||gh(),scheme:a?.slug?.toLowerCase()||"app",android:{...c,package:l||"",versionCode:c.versionCode||"auto"},ios:{bundleIdentifier:d||"",buildNumber:s.ios?.buildNumber||"auto"},build:{development:{environment:"development",distribution:"development"},staging:{environment:"staging",distribution:"internal"},production:{environment:"production",distribution:"store"}},submit:{production:{android:{...u,track:u.track||"internal",releaseStatus:u.releaseStatus||"completed"},ios:{ascAppId:gd(f.ascAppId),appleTeamId:gd(f.appleTeamId)}}}};Vo.writeFileSync(o,JSON.stringify(p,null,2)),ch(ir.green(`Linked to project ${p.name} (${p.slug})`))}catch(n){t.stop(ir.red("Error fetching projects: "+n.message))}}import{outro as hh,text as rr,select as yh,spinner as bh,isCancel as di}from"@clack/prompts";import ci from"chalk";import Sh from"fs";import Ah from"path";import{randomUUID as Eh}from"crypto";var Ih=()=>process.versions.node.split(".")[0]||"24";async function yd(){if(!Ue()){console.log(ci.red(`You are not logged in. Run \`${m.nameLower} login\` first.`));return}let t=await rr({message:"Project Name:",placeholder:"My Awesome App",validate(a){if(a.length===0)return"Name is required!"}});if(di(t))return;let n=await rr({message:"Project Slug (URL friendly):",placeholder:"my-awesome-app",validate(a){if(a.length===0)return"Slug is required!";if(!/^[a-z0-9-]+$/.test(a))return"Slug must be lowercase alphanumeric with dashes."}});if(di(n))return;let i=await yh({message:"Platform:",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"},{value:"web",label:"Web"},{value:"all",label:"All Platforms"}]});if(di(i))return;let r="";if(i==="android"||i==="all"){let a=et("android");if(r=await rr({message:"Android Package Name:",initialValue:a||"",placeholder:"com.example.app",validate(l){if(l.length===0)return"Package name is required for Android!"}}),di(r))return}let o="";if(i==="ios"||i==="all"){let a=et("ios");if(o=await rr({message:"iOS Bundle Identifier:",initialValue:a||"",placeholder:"com.example.app",validate(l){if(l.length===0)return"Bundle ID is required for iOS!"}}),di(o))return}let s=bh();s.start("Creating project...");try{let a=Eh(),d={projectId:a,name:t,slug:n,storageType:"managed",platforms:i==="all"?["android","ios","web"]:[i]},{data:c}=await D.post("/projects",d);if(c.status==="success"){s.stop(ci.green("Project created successfully!"));let u=Ah.join(process.cwd(),m.configFileName);Sh.writeFileSync(u,JSON.stringify({projectId:a,framework:cn,name:t,slug:n,nodeVersion:Ih(),...r?{android:{package:r,versionCode:"auto"}}:{},...o?{ios:{bundleIdentifier:o,buildNumber:"auto"}}:{},build:{development:{environment:"development",distribution:"development"},staging:{environment:"staging",distribution:"internal"},production:{environment:"production",distribution:"store"}},submit:{production:{android:{track:"internal",releaseStatus:"completed"},ios:{ascAppId:"",appleTeamId:""}}}},null,2)),hh(ci.green(`Initialized project ${t} and linked locally!`))}else s.stop(ci.red("creation failed: "+c.message))}catch(a){s.stop(ci.red("Network error: "+a.message))}}import{spinner as Go,log as He}from"@clack/prompts";import ui from"chalk";import or from"fs";import bd from"path";function zo(e,t,n,i){let r=e?.response?.status,o=e?.response?.data?.message||e?.response?.data?.error,s=i?` ${i}`:"";return r===401?`Not logged in or token expired while trying to ${n}${s}. Run \`${m.nameLower} login\` and try again.`:r===403?[`Permission denied while trying to ${n}${s}.`,o?`API says: ${o}.`:void 0,`Current Mach account/token does not have access to project ${t}.`,`Run \`${m.nameLower} login\` with the correct account, or ask a project owner to grant access.`].filter(Boolean).join(" "):r===404?[`Project or environment endpoint was not found while trying to ${n}${s}.`,`Project ID: ${t}.`,o?`API says: ${o}.`:void 0].filter(Boolean).join(" "):r?`Failed to ${n}${s}: ${o||`API returned HTTP ${r}`}`:`Network error while trying to ${n}${s}: ${e?.message||"Unknown error"}`}function wh(e){let t=String(e??"");return t===""?'""':/^[A-Za-z0-9_./:@%+-]+$/.test(t)?t:JSON.stringify(t)}function vh(e,t){return`${[`# Generated by ${m.nameLower} env pull --environment ${t}`,"# Do not commit this file.","",...Object.keys(e).sort((i,r)=>i.localeCompare(r)).map(i=>`${i}=${wh(e[i])}`)].join(`
|
|
1703
1948
|
`)}
|
|
1704
|
-
`}async function
|
|
1705
|
-
`)}function
|
|
1949
|
+
`}async function Sd(e,t,n={}){let i=Ue();if(!i){He.error(`You are not logged in. Run \`${m.nameLower} login\` first.`);return}let r=bd.join(process.cwd(),m.configFileName);if(!or.existsSync(r)){He.error(`No ${m.configFileName} found. Run \`${m.nameLower} init\` or \`${m.nameLower} link\` first.`);return}let o;try{o=JSON.parse(or.readFileSync(r,"utf-8"))}catch{He.error(`Failed to parse ${m.configFileName}`);return}let{projectId:s}=o;if(!s){He.error(`${m.configFileName} is missing projectId.`);return}e==="set"?await $h(s,t,i):e==="list"?await _h(s,i):e==="pull"||e==="download"||e==="export"?await Ph(s,n):He.error(`Unknown env action: ${e}. Use 'set', 'list', or 'pull'.`)}async function $h(e,t,n){if(t.length===0){He.error(`Usage: ${m.nameLower} env set KEY=VALUE [KEY2=VALUE2 ...]`);return}let i=Go();i.start("Setting environment variables...");let r=0,o=0;for(let s of t){let[a,...l]=s.split("="),d=l.join("=");if(!a||d===void 0){He.warn(`Invalid format for argument: ${s}. Expected KEY=VALUE.`),o++;continue}try{let c={key:a.trim(),value:d,type:"env",environment:"global",visibility:"secret"},{data:u}=await D.post(`/projects/${e}/secrets`,c);u.status==="success"?r++:(He.error(`Failed to set ${a}: ${u.message}`),o++)}catch(c){He.error(zo(c,e,"set",a)),o++}}i.stop(`Set ${r} variable(s). ${o>0?`${o} failed.`:""}`)}async function _h(e,t){let n=Go();n.start("Fetching environment variables...");try{let{data:i}=await D.get(`/projects/${e}/secrets`);if(i.status==="success"){n.stop("Fetched variables.");let r=i.secrets||[];r.length===0?He.info("No environment variables found for this project."):(He.info(ui.bold("Environment Variables (Global & Scoped):")),r.forEach(o=>{let s=o.visibility==="plain"?o.value:"********";console.log(` ${ui.cyan(o.key)} = ${s} ${ui.gray(`[${o.environment}]`)}`)}))}else n.stop(ui.red(`Failed to fetch variables: ${i.message}`))}catch(i){n.stop("Failed to fetch variables."),He.error(zo(i,e,"list"))}}async function Ph(e,t){let n=(t.environment||"development").trim(),i=t.out||".env.local",r=bd.resolve(process.cwd(),i);if(or.existsSync(r)&&!t.overwrite){He.error(`${i} already exists. Re-run with \`--overwrite\` to replace it.`);return}let o=Go();o.start(`Downloading ${n} environment variables...`);try{let{data:s}=await D.get(`/projects/${e}/secrets/export?env=${encodeURIComponent(n)}`);if(s.status!=="success"){o.stop(ui.red(`Failed to download variables: ${s.message||"Unknown API error"}`));return}let a=s.secrets||{},l=vh(a,n);or.writeFileSync(r,l,{encoding:"utf-8",mode:384}),o.stop(`Wrote ${Object.keys(a).length} variable(s) to ${i}.`)}catch(s){o.stop("Failed to download variables."),He.error(zo(s,e,"pull"))}}import{cancel as Rh,confirm as Dd,isCancel as lr,log as tt,note as Ch,outro as vn,select as Oh,spinner as Dh,text as kh}from"@clack/prompts";import ut from"chalk";import ae from"fs";import Se from"path";import{spawnSync as kd}from"child_process";import Jo from"crypto";import Nh from"axios";import Ed from"crypto";import pi from"fs";import fi from"path";var Ad=e=>String(e||"").replace(/\\/g,"/").replace(/^\/+/,"");function Id(e,t){let n=fi.join(e,"metadata.json");if(!pi.existsSync(n))throw new Error(`Expo export did not create ${n}.`);let r=JSON.parse(pi.readFileSync(n,"utf-8"))?.fileMetadata?.[t],o=Ad(r?.bundle);if(!o)throw new Error(`Expo export metadata is missing the ${t} launch bundle.`);let s=new Set,a=(Array.isArray(r?.assets)?r.assets:[]).flatMap(l=>{let d=Ad(l?.path);return!d||s.has(d)?[]:(s.add(d),[{path:d,ext:String(l?.ext||"").replace(/^\./,"")||void 0}])});for(let l of[o,...a.map(d=>d.path)])if(!pi.existsSync(fi.join(e,l)))throw new Error(`Expo export metadata references a missing file: ${l}`);return{bundle:o,assets:a}}function wd(e,t){return[fi.join(e,t.bundle),...t.assets.map(n=>fi.join(e,n.path)),fi.join(e,"metadata.json")]}function Ko(e){return Ed.createHash("md5").update(pi.readFileSync(e)).digest("hex")}function Wo(e){return Ed.createHash("sha256").update(pi.readFileSync(e)).digest("base64url")}function vd(e){let t=String(e||"").replace(/^\./,"").trim().toLowerCase();return t?`.${t}`:void 0}function sr(e,t=!1){if(t)return"application/javascript";switch(String(e||"").replace(/^\./,"").trim().toLowerCase()){case"js":case"bundle":case"hbc":return"application/javascript";case"json":return"application/json";case"png":return"image/png";case"jpg":case"jpeg":return"image/jpeg";case"gif":return"image/gif";case"webp":return"image/webp";case"svg":return"image/svg+xml";case"ttf":return"font/ttf";case"otf":return"font/otf";case"woff":return"font/woff";case"woff2":return"font/woff2";case"mp3":return"audio/mpeg";case"m4a":return"audio/mp4";case"aac":return"audio/aac";case"wav":return"audio/wav";case"mp4":return"video/mp4";case"mov":return"video/quicktime";case"pdf":return"application/pdf";default:return"application/octet-stream"}}function $d(e){if(!e||typeof e!="object"||Array.isArray(e))return;let{_internal:t,hooks:n,mods:i,...r}=e;return r}var Ce=`${m.npmScope}/mach/expo-plugin`,qo=()=>process.stdin.isTTY&&process.stdout.isTTY,dr=()=>{Rh("Operation cancelled."),process.exit(0)},Fe=e=>{if(typeof e!="string")return;let t=e.trim();return t.length>0?t:void 0};function $n(e){if(!ae.existsSync(e))return null;try{return JSON.parse(ae.readFileSync(e,"utf-8"))}catch{return null}}function Nd(e,t){ae.writeFileSync(e,`${JSON.stringify(t,null,2)}
|
|
1950
|
+
`)}function mi(){let e=Ie();return e?.projectId||(tt.error(`No ${m.configFileName} found or missing projectId. Run \`${m.nameLower} link\` first.`),process.exit(1)),e}function xh(e){Nd(Se.join(process.cwd(),m.configFileName),e)}function Yo(e){let t=Ze(e.framework);if(t)return t;let n=$n(Se.join(process.cwd(),"package.json"))||{},i={...n.dependencies||{},...n.devDependencies||{}};return i.expo?"expo":(i["react-native"],"react-native")}function Xo(e,t){let n=String(e||"").trim().toLowerCase();return n==="expo"||n==="expo-updates"?"expo-updates":n==="react-native"||n==="mach-react-native"||n==="rn"?"mach-react-native":"expo-updates"}function xd(e){if(e==="mach-react-native")throw new Error("mach-react-native is reserved for a future Mach-native OTA client. Use expo-updates for Expo and bare React Native projects.");return e}function Zo(e){let t=String(e||"all").trim().toLowerCase();if(t==="ios")return["ios"];if(t==="android")return["android"];if(t==="all"||t==="both")return["ios","android"];throw new Error("Platform must be ios, android, or all.")}function Th(e){return ae.existsSync(Se.join(e,"pnpm-lock.yaml"))?{command:"pnpm",args:["add","-D",`${m.npmScope}/mach@latest`],label:`pnpm add -D ${m.npmScope}/mach@latest`}:ae.existsSync(Se.join(e,"yarn.lock"))?{command:"yarn",args:["add","-D",`${m.npmScope}/mach@latest`],label:`yarn add -D ${m.npmScope}/mach@latest`}:ae.existsSync(Se.join(e,"bun.lockb"))||ae.existsSync(Se.join(e,"bun.lock"))?{command:"bun",args:["add","-d",`${m.npmScope}/mach@latest`],label:`bun add -d ${m.npmScope}/mach@latest`}:{command:"npm",args:["install","--save-dev",`${m.npmScope}/mach@latest`],label:`npm install --save-dev ${m.npmScope}/mach@latest`}}function cr(e){let t=$n(Se.join(e,"package.json"))||{};return!!(t.dependencies?.[`${m.npmScope}/mach`]||t.devDependencies?.[`${m.npmScope}/mach`])}function ar(e){let t=$n(Se.join(e,"node_modules",m.npmScope,"mach","package.json"));return Fe(t?.version)}function Td(e,t){let n=o=>o.replace(/^v/,"").split(/[.-]/).slice(0,3).map(s=>Number.parseInt(s,10)||0),i=n(e),r=n(t);for(let o=0;o<3;o+=1)if(i[o]!==r[o])return i[o]>r[o]?1:-1;return 0}function Lh(e){let t=ar(e);return!cr(e)||!t||Td(t,St)<0}function Mh(e){let t=Th(e),n=kd(t.command,t.args,{cwd:e,stdio:"inherit",env:{...process.env}});if(n.error)return{ok:!1,label:t.label,error:n.error.message};if(n.status!==0)return{ok:!1,label:t.label,error:`${t.command} exited with code ${n.status}`};let i=ar(e),r=!!i&&Td(i,St)>=0;return{ok:cr(e)&&r,label:t.label,error:r?void 0:`installed ${i||"unknown"}, requires ${St} or newer`}}function _d(e){if(typeof e=="string")return e;if(Array.isArray(e)&&typeof e[0]=="string")return e[0]}function Uh(e,t){let n=["app.config.json","app.json"].find(a=>ae.existsSync(Se.join(e,a)));if(!n)return null;let i=Se.join(e,n),r=$n(i);if(!r)return null;let o=r.expo&&typeof r.expo=="object"?r.expo:r;if(t==="react-native"&&n==="app.json"&&(!r.expo||typeof r.expo!="object")){let a=$n(Se.join(e,"package.json"))||{},l=Fe(r.displayName)||Fe(r.name)||Fe(a.name)||"App",d=(Fe(a.name)||l).toLowerCase().replace(/[^a-z0-9-]+/g,"-").replace(/^-+|-+$/g,"")||"app";r.expo={name:l,slug:d,version:Fe(a.version)||"1.0.0"},o=r.expo}let s=Array.isArray(o.plugins)?o.plugins:[];return s.some(a=>_d(a)===Ce)||(o.plugins=[...s.filter(a=>{let l=_d(a);return l!=="./plugins/withMachDeepLinks"&&l!=="plugins/withMachDeepLinks"}),Ce],Nd(i,r)),n}function Fh(e){let t=["app.config.ts","app.config.js"].find(p=>ae.existsSync(Se.join(e,p)));if(!t)return"missing";let n=Se.join(e,t),i=ae.readFileSync(n,"utf-8");if(i.includes(Ce))return"already";let r=/(['"`])(?:\.\/)?plugins\/withMachDeepLinks\1/g;if(r.test(i))return ae.writeFileSync(n,i.replace(r,(p,y)=>`${y}${Ce}${y}`)),"inserted";let o=/(^[ \t]*)plugins\s*:\s*\[([\s\S]*?)\]/m.exec(i);if(!o||o.index===void 0)return"manual";let s=i.includes(`\r
|
|
1706
1951
|
`)?`\r
|
|
1707
1952
|
`:`
|
|
1708
|
-
`,
|
|
1709
|
-
`)||
|
|
1710
|
-
`),"OTA setup"),await uc({...e,action:"verify"})}async function sh(e){on();let t=ni(),n=Ye(e.framework)||ko(t),i;try{i=ac(xo(e.engine||t.ota?.engine,n))}catch(l){Qe.error(`${l.message} Run \`mach ota setup\` to migrate this project.`),process.exit(1)}let r=Fe(e.channel||e.branch||t.ota?.channel)||"production",o=No(e.platform||"all"),s=Bg();s.start(`Publishing OTA update (${o.join("+")}, ${r})`);try{let l=[];for(let a of o){let c=To(t,e,a),u=Zg({platform:a,runtimeVersion:c,channel:r,url:Fe(t.ota?.url)||""});s.message(`Exporting and uploading ${a} OTA bundle for runtime ${c}...`),l.push(await rh({config:t,engine:i,platform:a,channel:r,runtimeVersion:c,message:e.message,expoConfig:u.expoConfig}))}if(s.stop("OTA update published."),e.json)Qe.info(JSON.stringify({status:"success",updates:l},null,2));else{let a=Array.from(new Set(l.map(c=>c.runtimeVersion).filter(Boolean)));bn(lt.green(`\u2713 OTA update live on "${r}" for runtime ${a.join(", ")||"unknown"}.`));for(let c of l)Qe.info(lt.dim(`${c.platform}: ${c.updateId}`))}}catch(l){s.stop("OTA publish failed."),Qe.error(l.response?.data?.message||l.message),process.exit(1)}}async function uc(e){let t=ni(),n=Ye(e.framework)||ko(t),i=xo(e.engine||t.ota?.engine,n),r=[],o=t.ota;if(r.push(o?.enabled?{level:"pass",message:"mach.config.json has ota.enabled."}:{level:"fail",message:"mach.config.json is missing ota.enabled. Run `mach ota setup`."}),r.push(o?.url?{level:"pass",message:`OTA URL configured: ${o.url}`}:{level:"fail",message:"OTA URL is missing. Run `mach ota setup`."}),r.push(o?.channel?{level:"pass",message:`Default channel: ${o.channel}`}:{level:"warn",message:"No default OTA channel configured; publish will use production."}),r.push(o?.runtimeVersionPolicy||o?.runtimeVersion?{level:"pass",message:"Runtime version policy configured."}:{level:"warn",message:"No explicit runtime policy configured; Mach will use Expo runtimeVersion or package.json version."}),i==="expo-updates"){let l=An(he.join(process.cwd(),"package.json"))||{},a={...l.dependencies||{},...l.devDependencies||{}};n==="react-native"&&r.push(a.expo?{level:"pass",message:"Expo Modules are installed for the bare React Native project."}:{level:"fail",message:"Expo Modules are missing. Run `mach ota setup` to install the bare React Native OTA runtime."}),r.push(a["expo-updates"]?{level:"pass",message:"expo-updates is installed."}:{level:"fail",message:"expo-updates is missing. Run `mach ota setup`."}),r.push(Zi(process.cwd())?{level:"pass",message:`${m.npmScope}/mach is installed locally for the Expo plugin.`}:{level:"fail",message:`${m.npmScope}/mach is not installed locally; run \`mach ota setup\`.`});let c=No(e.platform||"all"),u=Fe(e.channel||e.branch||o?.channel)||"production",d=Fe(o?.url)||"",p=c.map(g=>{let h=To(t,e,g);return{platform:g,runtimeVersion:h,delivery:Tn(process.cwd(),{platform:g,runtimeVersion:h,channel:u,url:d})}}),f=p[0]?.delivery;if(f){let g=f.expoConfig.updates?.enabled!==!1,h=Fe(f.expoConfig.updates?.checkAutomatically)?.toUpperCase()||"ON_LOAD";r.push(f.url===o?.url?{level:"pass",message:"Expo Updates URL resolves to Mach."}:{level:"warn",message:`Expo Updates URL resolves to ${f.url||"none"} instead of ${o?.url||"the Mach OTA URL"}.`}),r.push(f.channel===u?{level:"pass",message:`Expo update channel header resolves to ${u}.`}:{level:"warn",message:`Expo update channel header is ${f.channel||"not set"}; install the latest ${m.npmScope}/mach package and rebuild.`}),r.push(g?{level:"pass",message:"Expo Updates is enabled."}:{level:"fail",message:"Expo config has updates.enabled=false, so this app cannot receive OTA updates."}),r.push(h!=="NEVER"&&h!=="ON_ERROR_RECOVERY"?{level:"pass",message:`Expo checks for updates automatically (${h}).`}:{level:"fail",message:`Expo checkAutomatically is ${h}; use ON_LOAD to receive Mach updates when the app starts.`})}else r.push({level:"fail",message:`Could not resolve Expo config. Confirm ${Oe} is present and run \`mach ota setup\` again.`});for(let{platform:g,runtimeVersion:h,delivery:S}of p)r.push(S?.runtimeVersion===h?{level:"pass",message:`${g} Expo runtime resolves to ${h}.`}:{level:"fail",message:`${g} Expo runtime resolves to ${S?.runtimeVersion||"none"} instead of ${h}. Run \`mach ota setup\`, then rebuild the app.`});if(n==="react-native"){let g=c,h=Rr(process.cwd()).filter(b=>g.includes(b)),S=As(process.cwd());if(h.includes("android")){let b=!!(S.androidManifest&&S.androidStrings)&&re.readFileSync(S.androidManifest,"utf-8").includes("expo.modules.updates.EXPO_UPDATE_URL")&&re.readFileSync(S.androidStrings,"utf-8").includes("expo_runtime_version");r.push(b?{level:"pass",message:"Android native Expo Updates configuration is synchronized."}:{level:"fail",message:"Android native Expo Updates configuration is missing. Run `mach ota setup --platform android`."})}if(h.includes("ios")){let b=!!S.iosExpoPlist&&re.readFileSync(S.iosExpoPlist,"utf-8").includes("EXUpdatesURL")&&re.readFileSync(S.iosExpoPlist,"utf-8").includes("EXUpdatesRuntimeVersion");r.push(b?{level:"pass",message:"iOS native Expo Updates configuration is synchronized."}:{level:"fail",message:"iOS native Expo Updates configuration is missing. Run `mach ota setup --platform ios`."})}}}else r.push({level:"fail",message:"mach-react-native is not available yet. Run `mach ota setup` to migrate this project to expo-updates."});for(let l of r){let a=l.level==="pass"?lt.green("PASS"):l.level==="warn"?lt.yellow("WARN"):lt.red("FAIL");Qe.info(`${a} ${l.message}`)}let s=r.filter(l=>l.level==="fail").length;s>0&&(bn(lt.red(`OTA verification failed with ${s} issue(s).`)),process.exit(1)),bn(lt.green("OTA verification passed."))}async function ah(e){on();let t=ni(),n=await O.get(`/ota/${t.projectId}/updates`),i=n.data.updates||[];if(e.json){Qe.info(JSON.stringify(n.data,null,2));return}if(i.length===0){bn("No OTA updates found.");return}for(let r of i){let o=r.stats?.total||{};Qe.info(`${lt.bold(r.updateId)} ${lt.dim(`${r.platform} ${r.channelName} runtime ${r.runtimeVersion}`)} ${r.status||"active"}`),Qe.info(lt.dim(` downloads ios=${o.iosDownloaded||0} android=${o.androidDownloaded||0} applied ios=${o.iosApplied||0} android=${o.androidApplied||0}`))}bn(`Found ${i.length} OTA update(s).`)}async function ic(e,t){on();let n=ni(),i=Fe(t.updateId);i||(Qe.error(`Missing update id. Use \`${m.nameLower} ota ${e} --update-id <id>\`.`),process.exit(1));let r=await O.post(`/ota/${n.projectId}/updates/${encodeURIComponent(i)}/${e}`);t.json?Qe.info(JSON.stringify(r.data,null,2)):bn(lt.green(`\u2713 OTA update ${e==="rollback"?"rolled back":"promoted"}: ${i}`))}async function jt(e,t={}){let n=e||t.action||"publish";if(n==="setup")return oh({...t,action:n});if(n==="publish")return sh({...t,action:n});if(n==="verify")return uc({...t,action:n});if(n==="list")return ah({...t,action:n});if(n==="rollback")return ic("rollback",{...t,action:n});if(n==="promote")return ic("promote",{...t,action:n});let i=await jg({message:"What do you want to do?",options:[{value:"setup",label:"Setup OTA"},{value:"publish",label:"Publish OTA update"},{value:"verify",label:"Verify OTA setup"},{value:"list",label:"List OTA updates"}]});return Yi(i)&&Xi(),jt(i,t)}import{intro as lh,outro as pc,log as En}from"@clack/prompts";import yt from"chalk";async function fc(){lh(yt.blue(`${m.name} CLI - User Profile`));let e=Ue();if(!e){En.warn(yt.yellow("You are not logged in.")),En.info(`Run \`${m.nameLower} login\` to authenticate.`),pc();return}En.info(`${yt.bold("Logged in as:")} ${yt.green(e.email)}`);try{await O.get("/projects");let n=Ue().token.split(".");if(n.length===3){let i=JSON.parse(Buffer.from(n[1],"base64").toString());if(i.exp){let r=new Date(i.exp*1e3),o=new Date,s=r.getTime()-o.getTime();if(s>0){let l=Math.round(s/6e4),a=(l/60).toFixed(1);En.info(`${yt.bold("Token status:")} Valid (Expires in ~${a}h / ${l}m)`)}else En.warn(`${yt.bold("Token status:")} ${yt.red("Expired")} (Auto-refresh failed)`)}}}catch{En.warn(`${yt.bold("Token status:")} ${yt.red("Unreachable")} (Session might be truly expired)${Ct}`)}pc(yt.blue("---"))}import{spawn as uh}from"child_process";import{log as Bt}from"@clack/prompts";import et from"chalk";import ph from"fs";import ch from"net";async function dh(e){return new Promise(t=>{let n=ch.createServer();n.once("error",i=>{i.code==="EADDRINUSE"?t(!0):t(!1)}),n.once("listening",()=>{n.close(),t(!1)}),n.listen(e,"0.0.0.0")})}async function mc(e,t=20){let n=e;for(;n<e+t;){if(!await dh(n))return n;n++}throw new Error(`Could not find an available port after ${t} attempts starting from ${e}.`)}var gc=async e=>{Bt.info(et.blue(`Starting ${m.name} Dev Orchestrator...`));let t=we(),n=e.buildProfile||"development",i=t?He(t,n):null,r={...process.env};if(t?.projectId)try{Bt.info(et.dim(`Fetching managed secrets for profile: ${n}...`));let d=await O.get(`/projects/${t.projectId}/secrets/export?env=${n}`);d.data?.status==="success"&&d.data.secrets&&(Object.assign(r,d.data.secrets),Bt.info(et.magenta(`\u2713 Injected secrets from ${m.name} Dashboard.`)))}catch{Bt.warn("Could not fetch managed secrets. Running with local env only.")}t&&Object.assign(r,ln(t,m.envPrefix)),i&&(Object.assign(r,ln(i,`${m.envPrefix}PROFILE_`)),i.env&&Object.assign(r,i.env));let o=!1;try{let d=JSON.parse(ph.readFileSync("package.json","utf-8"));o=!!(d.dependencies?.expo||d.devDependencies?.expo)}catch{Bt.warn("Could not parse package.json. Defaulting to Bare React Native mode.")}let s=Number(e.port||i?.port||8081),l=await mc(s);l!==s&&Bt.info(et.yellow(`Port ${s} is busy. ${m.name} is using ${l} instead.`));let a=process.platform==="win32"?"npx.cmd":"npx",c=[];if(o?(c=["expo","start","--port",String(l)],e.clear&&c.push("--clear"),e.tunnel&&c.push("--tunnel"),e.lan&&c.push("--lan"),e.localhost&&c.push("--localhost"),e.ios&&c.push("--ios"),e.android&&c.push("--android"),e.web&&c.push("--web")):(c=["react-native","start","--port",String(l)],e.clear&&c.push("--clear")),o){let d=[`${et.cyan("i")} open iOS simulator`,`${et.cyan("a")} open Android emulator/device`,`${et.cyan("w")} open web`,`${et.cyan("r")} reload app`];Bt.info([et.bold("Launch controls"),...d.map(p=>` ${p}`),"",et.dim("Direct launch: mach start --ios | --android | --web"),et.dim(`Metro URL: http://localhost:${l}`)].join(`
|
|
1711
|
-
`))}else
|
|
1712
|
-
Profile Settings:`)),
|
|
1713
|
-
Environment Variables:`)),Object.entries(i.env).forEach(([r,o])=>{
|
|
1714
|
-
`),n}import
|
|
1953
|
+
`,a=o[1]||"",l=o[2]||"",c=l.match(/\r?\n([ \t]+)\S/)?.[1]||`${a} `,u=l.trim().length===0?`${s}${c}'${Ce}',${s}${a}`:l.includes(`
|
|
1954
|
+
`)||l.includes("\r")?`${s}${c}'${Ce}',${l}`:`${s}${c}'${Ce}',${s}${c}${l.trim()}${s}${a}`,f=`${o[0].slice(0,o[0].indexOf("[")+1)}${u}]`;return ae.writeFileSync(n,`${i.slice(0,o.index)}${f}${i.slice(o.index+o[0].length)}`),"inserted"}async function Bh(e,t,n){let i=[];if(Lh(e)){let o=ar(e),s=!!(n.installPlugin||n.yes);if(!s&&!n.skipInstall&&qo()){let a=await Dd({message:o?`Update the local ${m.npmScope}/mach Expo plugin (${o} \u2192 ${St})?`:`Install ${m.npmScope}/mach locally so Expo can use ${Ce}?`,initialValue:!0});lr(a)&&dr(),s=!!a}if(s&&!n.skipInstall){let a=Mh(e);a.ok?i.push(`Installed a compatible ${Ce} with ${a.label}.`):i.push(`Could not install ${m.npmScope}/mach with ${a.label}: ${a.error||"unknown error"}.`)}else i.push(`Install ${m.npmScope}/mach@${St} or newer in this app so Expo can resolve ${Ce}.`)}else i.push(`Local ${Ce} is compatible (${ar(e)}).`);let r=Fh(e);if(r==="already"&&i.push(`Expo config already includes ${Ce}.`),r==="inserted"&&i.push(`Expo config updated to include ${Ce}.`),r==="manual"&&i.push(`Add "${Ce}" to the plugins array in app.config.ts/app.config.js.`),r==="missing"){let o=Uh(e,t);o?i.push(`${o} updated to include ${Ce}.`):i.push(`Add "${Ce}" to your Expo config plugins array.`)}return i}async function Pd(e,t){if(t.skipInstall)return!1;if(t.yes)return!0;if(!qo())return!1;let n=await Dd({message:e,initialValue:!0});return lr(n)&&dr(),!!n}async function jh(e,t,n){let i=[];if(t==="react-native"&&!Zt(e,"expo"))if(await Pd("Install Expo Modules required by the Mach OTA runtime? This updates package and native project files.",n)){let o=Ls(e);if(!o.ok||!Zt(e,"expo"))throw new Error(`Expo Modules installation failed: ${o.error||o.command}`);i.push("Installed and configured Expo Modules for the existing React Native project.")}else i.push("Expo Modules are required. Run `npx install-expo-modules@latest`, then run `mach ota setup` again.");if(!Zt(e,"expo-updates"))if(await Pd("Install the expo-updates runtime?",n)){let o=Ms(e);if(!o.ok||!Zt(e,"expo-updates"))throw new Error(`expo-updates installation failed: ${o.error||o.command}`);i.push("Installed the Expo-compatible expo-updates version.")}else i.push("Install expo-updates with `npx expo install expo-updates`, then run `mach ota setup` again.");return i}async function Rd(e,t,n,i,r){if(t)return t;if(r||!qo()){if(i)throw new Error(`${e.replace(/:$/,"")} is required.`);return}let o=await kh({message:e,placeholder:n,validate(s){if(i&&s.trim().length===0)return"Required."}});return lr(o)&&dr(),Fe(o)}function Qo(e,t,n){return Kn(e,{runtimeVersion:t.runtimeVersion,framework:Ze(t.framework)||Ze(e.framework),platform:n})}function Hh(e){let t=zn(process.cwd(),e);if(!t)throw new Error(`Resolved Expo OTA configuration does not match this publish: Expo config could not be resolved. Run \`mach ota setup\` to update ${Ce}, then create a new native build if its embedded runtime changes.`);let n=[];if(t.runtimeVersion!==e.runtimeVersion&&n.push(`runtime is ${t.runtimeVersion||"missing"} (expected ${e.runtimeVersion})`),t.channel!==e.channel&&n.push(`channel is ${t.channel||"missing"} (expected ${e.channel})`),t.url!==e.url&&n.push(`URL is ${t.url||"missing"} (expected ${e.url})`),n.length>0)throw new Error(`Resolved Expo OTA configuration does not match this publish: ${n.join("; ")}. Run \`mach ota setup\` to update ${Ce}, then create a new native build if its embedded runtime changes.`);return t}function Vh(e){return Jo.createHash("sha256").update(ae.readFileSync(e)).digest("hex")}function Gh(e){let t=Se.extname(e).toLowerCase();return t===".json"?"application/json":t===".js"||t===".bundle"||t===".hbc"?"application/javascript":t===".map"?"application/json":t===".png"?"image/png":t===".jpg"||t===".jpeg"?"image/jpeg":t===".webp"?"image/webp":t===".gif"?"image/gif":t===".svg"?"image/svg+xml":t===".ttf"?"font/ttf":t===".otf"?"font/otf":t===".woff"?"font/woff":t===".woff2"?"font/woff2":"application/octet-stream"}function Ld(e){let t=[];if(!ae.existsSync(e))return t;for(let n of ae.readdirSync(e)){let i=Se.join(e,n),r=ae.statSync(i);r.isDirectory()?t.push(...Ld(i)):r.isFile()&&t.push(i)}return t}function zh(e,t){let n=e.filter(i=>{let r=i.toLowerCase();return r.endsWith(".map")?!1:r.endsWith(".js")||r.endsWith(".bundle")||r.endsWith(".hbc")});return n.find(i=>i.toLowerCase().includes(t))||n.sort((i,r)=>ae.statSync(r).size-ae.statSync(i).size)[0]}async function Cd(e){let t=await D.post("/ota/upload-url",{projectId:e.projectId,updateId:e.updateId,platform:e.platform,fileName:e.fileName,contentType:e.contentType});if(t.data.status!=="success")throw new Error(t.data.message||`Could not create upload URL for ${e.fileName}`);let n=ae.statSync(e.filePath).size;return await Nh.put(t.data.uploadUrl,ae.createReadStream(e.filePath),{headers:{"Content-Type":e.contentType,"Content-Length":n},maxBodyLength:1/0,maxContentLength:1/0}),{key:t.data.key,url:t.data.publicUrl,contentType:e.contentType,hash:Vh(e.filePath),size:n}}function Md(e,t,n,i={}){let r=kd(e,t,{cwd:n,stdio:"inherit",env:{...process.env,CI:process.env.CI||"1",EXPO_NO_TELEMETRY:"1",...i}});if(r.error)throw new Error(r.error.message);if(r.status!==0)throw new Error(`${e} ${t.join(" ")} exited with code ${r.status}`)}function Kh(e,t,n,i,r){Md("npx",["expo","export","--platform",e,"--output-dir",t],process.cwd(),{MACH_OTA_RUNTIME_VERSION:n,MACH_OTA_CHANNEL:i,MACH_OTA_URL:r})}function Wh(e,t){let n=e==="ios"?"main.jsbundle":"index.android.bundle",r=["index.js","index.ts","index.tsx"].find(s=>ae.existsSync(Se.join(process.cwd(),s)))||"index.js",o=Se.join(t,"assets");ae.mkdirSync(o,{recursive:!0}),Md("npx",["react-native","bundle","--platform",e,"--dev","false","--entry-file",r,"--bundle-output",Se.join(t,n),"--assets-dest",o],process.cwd())}async function Jh(e){let t=e.config.projectId,n=`ota_${Date.now()}_${e.platform}_${Jo.randomUUID().slice(0,8)}`,i=Se.join(process.cwd(),".mach","ota",n,e.platform);ae.rmSync(i,{recursive:!0,force:!0}),ae.mkdirSync(i,{recursive:!0}),e.engine==="expo-updates"?Kh(e.platform,i,e.runtimeVersion,e.channel,e.config.ota?.url||""):Wh(e.platform,i);let r=e.engine==="expo-updates"?Id(i,e.platform):void 0,o=r?wd(i,r):Ld(i),s=r?Se.join(i,r.bundle):zh(o,e.platform);if(!s)throw new Error(`Could not find a ${e.platform} JS bundle in ${i}.`);let a=new Map((r?.assets||[]).map(b=>[b.path,b])),l=[];for(let b of o){let _=Se.relative(i,b).replace(/\\/g,"/"),w=a.get(_),T=b===s?"application/javascript":w?sr(w.ext):Gh(b);l.push({filePath:b,relative:_,uploaded:await Cd({projectId:t,updateId:n,platform:e.platform,filePath:b,fileName:_,contentType:T})})}let d=l.find(b=>b.filePath===s),c=e.engine==="expo-updates"?Jo.randomUUID():void 0,u=e.engine==="expo-updates"?$d(e.expoConfig):void 0;if(e.engine==="expo-updates"&&(!u||Object.keys(u).length===0))throw new Error("Could not resolve the public Expo config required by the OTA manifest. Run `mach ota verify` and try again.");let f=r?r.assets.map(b=>{let _=l.find(w=>w.relative===b.path);if(!_)throw new Error(`Could not find uploaded Expo asset ${b.path}.`);return{key:Ko(_.filePath),url:_.uploaded.url,contentType:sr(b.ext),fileExtension:vd(b.ext),hash:Wo(_.filePath),size:_.uploaded.size}}):l.filter(b=>b.filePath!==s&&!b.relative.endsWith(".map")).map(b=>({key:b.relative,url:b.uploaded.url,contentType:b.uploaded.contentType,hash:b.uploaded.hash,size:b.uploaded.size})),p=r?{key:Ko(d.filePath),url:d.uploaded.url,contentType:sr(void 0,!0),hash:Wo(d.filePath),size:d.uploaded.size}:{key:Se.basename(d.relative),url:d.uploaded.url,contentType:d.uploaded.contentType,hash:d.uploaded.hash,size:d.uploaded.size},y={id:c||n,createdAt:new Date().toISOString(),runtimeVersion:e.runtimeVersion,launchAsset:p,assets:f,metadata:{projectId:t,channel:e.channel,...e.message?{message:e.message}:{},engine:e.engine},extra:{...u?{expoClient:u}:{},mach:{projectId:t,updateId:n,...c?{expoUpdateId:c}:{},channel:e.channel,platform:e.platform}}},g=Se.join(i,"mach-manifest.json");ae.writeFileSync(g,JSON.stringify(y,null,2));let h=await Cd({projectId:t,updateId:n,platform:e.platform,filePath:g,fileName:"manifest.json",contentType:"application/json"}),S=await D.post("/ota/publish",{projectId:t,updateId:n,expoUpdateId:c,channelName:e.channel,runtimeVersion:e.runtimeVersion,platform:e.platform,manifestKey:h.key,message:e.message,launchAsset:p,assets:f});if(S.data.status!=="success")throw new Error(S.data.message||`Failed to publish ${e.platform} OTA update.`);return S.data.update}async function qh(e){let t=mi(),n=Ze(e.framework)||Yo(t),i;try{i=xd(Xo(e.engine,n))}catch(f){tt.error(f.message),process.exit(1)}let r=!!e.yes,o=await Rd("OTA channel:",Fe(e.channel||e.branch||t.ota?.channel)||"production","production",!0,r),s=`${xt.replace(/\/$/,"")}/api/ota/expo/${t.projectId}`,a=Fe(e.url||t.ota?.url),l=a?.includes("/api/ota/react-native/")?void 0:a,d=await Rd("Mach OTA update URL:",l||s,s,!0,r);t.framework=n;let c={...t.ota||{},enabled:!0,engine:i,channel:o,url:d,deploymentUrl:d,runtimeVersionPolicy:t.ota?.runtimeVersionPolicy||"appVersion"};delete c.statsUrl,t.ota=c,delete t.update,xh(t);let u=[`${m.configFileName} updated.`];if(u.push(...await jh(process.cwd(),n,e)),u.push(...await Bh(process.cwd(),n,e)),n==="react-native"&&Zt(process.cwd(),"expo")&&Zt(process.cwd(),"expo-updates")&&cr(process.cwd())){let f=Zo(e.platform||"all"),p=Br(process.cwd()).filter(y=>f.includes(y));p.length===0&&u.push("No matching committed ios/android project was found for native configuration sync.");for(let y of p){let g=Qo(t,e,y),S=Oi({cwd:process.cwd(),platforms:[y],runtimeVersion:g,channel:o,url:d}).find(b=>!b.ok);if(S)throw new Error(`Could not synchronize ${y} Expo Updates configuration: ${S.error||S.command}`);u.push(`Synchronized ${y} native Expo Updates configuration for runtime ${g}.`)}}u.push("Create and install one new native build after initial OTA setup. Existing app binaries keep their embedded update URL."),Ch(u.map(f=>`- ${f}`).join(`
|
|
1955
|
+
`),"OTA setup"),await Ud({...e,action:"verify"})}async function Yh(e){dn();let t=mi(),n=Ze(e.framework)||Yo(t),i;try{i=xd(Xo(e.engine||t.ota?.engine,n))}catch(a){tt.error(`${a.message} Run \`mach ota setup\` to migrate this project.`),process.exit(1)}let r=Fe(e.channel||e.branch||t.ota?.channel)||"production",o=Zo(e.platform||"all"),s=Dh();s.start(`Publishing OTA update (${o.join("+")}, ${r})`);try{let a=[];for(let l of o){let d=Qo(t,e,l),c=Hh({platform:l,runtimeVersion:d,channel:r,url:Fe(t.ota?.url)||""});s.message(`Exporting and uploading ${l} OTA bundle for runtime ${d}...`),a.push(await Jh({config:t,engine:i,platform:l,channel:r,runtimeVersion:d,message:e.message,expoConfig:c.expoConfig}))}if(s.stop("OTA update published."),e.json)tt.info(JSON.stringify({status:"success",updates:a},null,2));else{let l=Array.from(new Set(a.map(d=>d.runtimeVersion).filter(Boolean)));vn(ut.green(`\u2713 OTA update live on "${r}" for runtime ${l.join(", ")||"unknown"}.`));for(let d of a)tt.info(ut.dim(`${d.platform}: ${d.updateId}`))}}catch(a){s.stop("OTA publish failed."),tt.error(a.response?.data?.message||a.message),process.exit(1)}}async function Ud(e){let t=mi(),n=Ze(e.framework)||Yo(t),i=Xo(e.engine||t.ota?.engine,n),r=[],o=t.ota;if(r.push(o?.enabled?{level:"pass",message:"mach.config.json has ota.enabled."}:{level:"fail",message:"mach.config.json is missing ota.enabled. Run `mach ota setup`."}),r.push(o?.url?{level:"pass",message:`OTA URL configured: ${o.url}`}:{level:"fail",message:"OTA URL is missing. Run `mach ota setup`."}),r.push(o?.channel?{level:"pass",message:`Default channel: ${o.channel}`}:{level:"warn",message:"No default OTA channel configured; publish will use production."}),r.push(o?.runtimeVersionPolicy||o?.runtimeVersion?{level:"pass",message:"Runtime version policy configured."}:{level:"warn",message:"No explicit runtime policy configured; Mach will use Expo runtimeVersion or package.json version."}),i==="expo-updates"){let a=$n(Se.join(process.cwd(),"package.json"))||{},l={...a.dependencies||{},...a.devDependencies||{}};n==="react-native"&&r.push(l.expo?{level:"pass",message:"Expo Modules are installed for the bare React Native project."}:{level:"fail",message:"Expo Modules are missing. Run `mach ota setup` to install the bare React Native OTA runtime."}),r.push(l["expo-updates"]?{level:"pass",message:"expo-updates is installed."}:{level:"fail",message:"expo-updates is missing. Run `mach ota setup`."}),r.push(cr(process.cwd())?{level:"pass",message:`${m.npmScope}/mach is installed locally for the Expo plugin.`}:{level:"fail",message:`${m.npmScope}/mach is not installed locally; run \`mach ota setup\`.`});let d=Zo(e.platform||"all"),c=Fe(e.channel||e.branch||o?.channel)||"production",u=Fe(o?.url)||"",f=d.map(y=>{let g=Qo(t,e,y);return{platform:y,runtimeVersion:g,delivery:zn(process.cwd(),{platform:y,runtimeVersion:g,channel:c,url:u})}}),p=f[0]?.delivery;if(p){let y=p.expoConfig.updates?.enabled!==!1,g=Fe(p.expoConfig.updates?.checkAutomatically)?.toUpperCase()||"ON_LOAD";r.push(p.url===o?.url?{level:"pass",message:"Expo Updates URL resolves to Mach."}:{level:"warn",message:`Expo Updates URL resolves to ${p.url||"none"} instead of ${o?.url||"the Mach OTA URL"}.`}),r.push(p.channel===c?{level:"pass",message:`Expo update channel header resolves to ${c}.`}:{level:"warn",message:`Expo update channel header is ${p.channel||"not set"}; install the latest ${m.npmScope}/mach package and rebuild.`}),r.push(y?{level:"pass",message:"Expo Updates is enabled."}:{level:"fail",message:"Expo config has updates.enabled=false, so this app cannot receive OTA updates."}),r.push(g!=="NEVER"&&g!=="ON_ERROR_RECOVERY"?{level:"pass",message:`Expo checks for updates automatically (${g}).`}:{level:"fail",message:`Expo checkAutomatically is ${g}; use ON_LOAD to receive Mach updates when the app starts.`})}else r.push({level:"fail",message:`Could not resolve Expo config. Confirm ${Ce} is present and run \`mach ota setup\` again.`});for(let{platform:y,runtimeVersion:g,delivery:h}of f)r.push(h?.runtimeVersion===g?{level:"pass",message:`${y} Expo runtime resolves to ${g}.`}:{level:"fail",message:`${y} Expo runtime resolves to ${h?.runtimeVersion||"none"} instead of ${g}. Run \`mach ota setup\`, then rebuild the app.`});if(n==="react-native"){let y=d,g=Br(process.cwd()).filter(S=>y.includes(S)),h=Us(process.cwd());if(g.includes("android")){let S=!!(h.androidManifest&&h.androidStrings)&&ae.readFileSync(h.androidManifest,"utf-8").includes("expo.modules.updates.EXPO_UPDATE_URL")&&ae.readFileSync(h.androidStrings,"utf-8").includes("expo_runtime_version");r.push(S?{level:"pass",message:"Android native Expo Updates configuration is synchronized."}:{level:"fail",message:"Android native Expo Updates configuration is missing. Run `mach ota setup --platform android`."})}if(g.includes("ios")){let S=!!h.iosExpoPlist&&ae.readFileSync(h.iosExpoPlist,"utf-8").includes("EXUpdatesURL")&&ae.readFileSync(h.iosExpoPlist,"utf-8").includes("EXUpdatesRuntimeVersion");r.push(S?{level:"pass",message:"iOS native Expo Updates configuration is synchronized."}:{level:"fail",message:"iOS native Expo Updates configuration is missing. Run `mach ota setup --platform ios`."})}}}else r.push({level:"fail",message:"mach-react-native is not available yet. Run `mach ota setup` to migrate this project to expo-updates."});for(let a of r){let l=a.level==="pass"?ut.green("PASS"):a.level==="warn"?ut.yellow("WARN"):ut.red("FAIL");tt.info(`${l} ${a.message}`)}let s=r.filter(a=>a.level==="fail").length;s>0&&(vn(ut.red(`OTA verification failed with ${s} issue(s).`)),process.exit(1)),vn(ut.green("OTA verification passed."))}async function Xh(e){dn();let t=mi(),n=await D.get(`/ota/${t.projectId}/updates`),i=n.data.updates||[];if(e.json){tt.info(JSON.stringify(n.data,null,2));return}if(i.length===0){vn("No OTA updates found.");return}for(let r of i){let o=r.stats?.total||{};tt.info(`${ut.bold(r.updateId)} ${ut.dim(`${r.platform} ${r.channelName} runtime ${r.runtimeVersion}`)} ${r.status||"active"}`),tt.info(ut.dim(` downloads ios=${o.iosDownloaded||0} android=${o.androidDownloaded||0} applied ios=${o.iosApplied||0} android=${o.androidApplied||0}`))}vn(`Found ${i.length} OTA update(s).`)}async function Od(e,t){dn();let n=mi(),i=Fe(t.updateId);i||(tt.error(`Missing update id. Use \`${m.nameLower} ota ${e} --update-id <id>\`.`),process.exit(1));let r=await D.post(`/ota/${n.projectId}/updates/${encodeURIComponent(i)}/${e}`);t.json?tt.info(JSON.stringify(r.data,null,2)):vn(ut.green(`\u2713 OTA update ${e==="rollback"?"rolled back":"promoted"}: ${i}`))}async function Gt(e,t={}){let n=e||t.action||"publish";if(n==="setup")return qh({...t,action:n});if(n==="publish")return Yh({...t,action:n});if(n==="verify")return Ud({...t,action:n});if(n==="list")return Xh({...t,action:n});if(n==="rollback")return Od("rollback",{...t,action:n});if(n==="promote")return Od("promote",{...t,action:n});let i=await Oh({message:"What do you want to do?",options:[{value:"setup",label:"Setup OTA"},{value:"publish",label:"Publish OTA update"},{value:"verify",label:"Verify OTA setup"},{value:"list",label:"List OTA updates"}]});return lr(i)&&dr(),Gt(i,t)}import{intro as Zh,outro as Fd,log as _n}from"@clack/prompts";import At from"chalk";async function Bd(){Zh(At.blue(`${m.name} CLI - User Profile`));let e=Ue();if(!e){_n.warn(At.yellow("You are not logged in.")),_n.info(`Run \`${m.nameLower} login\` to authenticate.`),Fd();return}_n.info(`${At.bold("Logged in as:")} ${At.green(e.email)}`);try{await D.get("/projects");let n=Ue().token.split(".");if(n.length===3){let i=JSON.parse(Buffer.from(n[1],"base64").toString());if(i.exp){let r=new Date(i.exp*1e3),o=new Date,s=r.getTime()-o.getTime();if(s>0){let a=Math.round(s/6e4),l=(a/60).toFixed(1);_n.info(`${At.bold("Token status:")} Valid (Expires in ~${l}h / ${a}m)`)}else _n.warn(`${At.bold("Token status:")} ${At.red("Expired")} (Auto-refresh failed)`)}}}catch{_n.warn(`${At.bold("Token status:")} ${At.red("Unreachable")} (Session might be truly expired)${xt}`)}Fd(At.blue("---"))}import{spawn as ty}from"child_process";import{log as zt}from"@clack/prompts";import nt from"chalk";import ny from"fs";import Qh from"net";async function ey(e){return new Promise(t=>{let n=Qh.createServer();n.once("error",i=>{i.code==="EADDRINUSE"?t(!0):t(!1)}),n.once("listening",()=>{n.close(),t(!1)}),n.listen(e,"0.0.0.0")})}async function jd(e,t=20){let n=e;for(;n<e+t;){if(!await ey(n))return n;n++}throw new Error(`Could not find an available port after ${t} attempts starting from ${e}.`)}var Hd=async e=>{zt.info(nt.blue(`Starting ${m.name} Dev Orchestrator...`));let t=Ie(),n=e.buildProfile||"development",i=t?Ve(t,n):null,r={...process.env};if(t?.projectId)try{zt.info(nt.dim(`Fetching managed secrets for profile: ${n}...`));let u=await D.get(`/projects/${t.projectId}/secrets/export?env=${n}`);u.data?.status==="success"&&u.data.secrets&&(Object.assign(r,u.data.secrets),zt.info(nt.magenta(`\u2713 Injected secrets from ${m.name} Dashboard.`)))}catch{zt.warn("Could not fetch managed secrets. Running with local env only.")}t&&Object.assign(r,pn(t,m.envPrefix)),i&&(Object.assign(r,pn(i,`${m.envPrefix}PROFILE_`)),i.env&&Object.assign(r,i.env));let o=!1;try{let u=JSON.parse(ny.readFileSync("package.json","utf-8"));o=!!(u.dependencies?.expo||u.devDependencies?.expo)}catch{zt.warn("Could not parse package.json. Defaulting to Bare React Native mode.")}let s=Number(e.port||i?.port||8081),a=await jd(s);a!==s&&zt.info(nt.yellow(`Port ${s} is busy. ${m.name} is using ${a} instead.`));let l=process.platform==="win32"?"npx.cmd":"npx",d=[];if(o?(d=["expo","start","--port",String(a)],e.clear&&d.push("--clear"),e.tunnel&&d.push("--tunnel"),e.lan&&d.push("--lan"),e.localhost&&d.push("--localhost"),e.ios&&d.push("--ios"),e.android&&d.push("--android"),e.web&&d.push("--web")):(d=["react-native","start","--port",String(a)],e.clear&&d.push("--clear")),o){let u=[`${nt.cyan("i")} open iOS simulator`,`${nt.cyan("a")} open Android emulator/device`,`${nt.cyan("w")} open web`,`${nt.cyan("r")} reload app`];zt.info([nt.bold("Launch controls"),...u.map(f=>` ${f}`),"",nt.dim("Direct launch: mach start --ios | --android | --web"),nt.dim(`Metro URL: http://localhost:${a}`)].join(`
|
|
1956
|
+
`))}else zt.info(nt.dim(`Metro URL: http://localhost:${a}`));let c=ty(l,d,{stdio:"inherit",env:r});return new Promise((u,f)=>{c.on("exit",p=>{p===0?u():f(new Error(`Dev server exited with code ${p}`))}),c.on("error",p=>{f(p)})})};import{log as Je}from"@clack/prompts";import pt from"chalk";var Vd=async e=>{let t=Ie();t||(Je.error(pt.red(`No ${m.configFileName} found in the current directory.`)),process.exit(1));let n=e.profile||"development",i=Ve(t,n);if(e.json){console.log(JSON.stringify({project:t,resolved:i},null,2));return}Je.info(pt.bgBlue.white(` Resolved ${m.name} Config [${n}] `)),Je.info(pt.dim("----------------------------------------")),Je.info(`${pt.blue("Project ID:")} ${t.projectId}`),Je.info(`${pt.blue("Name:")} ${t.name}`),Je.info(`${pt.blue("Scheme:")} ${t.scheme}`),i?(Je.info(pt.dim(`
|
|
1957
|
+
Profile Settings:`)),Je.info(`${pt.cyan("Distribution:")} ${i.distribution||"none"}`),Je.info(`${pt.cyan("Development Client:")} ${i.developmentClient||"false"}`),i.env&&Object.keys(i.env).length>0&&(Je.info(pt.dim(`
|
|
1958
|
+
Environment Variables:`)),Object.entries(i.env).forEach(([r,o])=>{Je.info(` ${r}=${o}`)}))):Je.warn(`Profile '${n}' not found.`),Je.info(pt.dim("----------------------------------------"))};import{cancel as wy,confirm as ac,isCancel as bi,log as Ar,note as vy,outro as Er,select as $y,text as lc}from"@clack/prompts";import mt from"chalk";import _y from"fs";import oc from"path";import an from"fs";import Pn from"path";var Rn="./plugins/withMachDeepLinks",es="mach.deep-links.json",zd=["/*"],ts=e=>{if(typeof e!="string")return;let t=e.trim();return t.length>0?t:void 0},pr=e=>{let t=new Set,n=[];for(let i of e){let r=ts(i);!r||t.has(r)||(t.add(r),n.push(r))}return n},ft=(...e)=>{for(let t of e){let n=ts(t);if(n)return n}},Gd=(e,t)=>e.length!==t.length?!1:e.every((n,i)=>n===t[i]);function Kd(e){if(typeof e!="string")return;let t=e.trim().toLowerCase();if(t==="ios"||t==="android"||t==="all")return t}function gi(e){let t=e.includes("://")?e:`https://${e}`,n=new URL(t),i=n.pathname==="/"?"":n.pathname.replace(/\/+$/,"");return`${n.protocol}//${n.host}${i}`}function ur(e){return new URL(gi(e)).hostname}function fr(e){return e.trim().toLowerCase().replace(/[^a-z0-9+.-]/g,"-").replace(/^-+|-+$/g,"")||"app"}function Wd(e=process.cwd()){let t=Pn.join(e,"package.json"),n=["app.json","app.config.json","app.config.js","app.config.ts"].some(r=>an.existsSync(Pn.join(e,r))),i=!1;if(an.existsSync(t))try{let r=JSON.parse(an.readFileSync(t,"utf-8"));i=!!(r.dependencies?.expo||r.devDependencies?.expo)}catch{i=!1}return n&&i?"expo":an.existsSync(Pn.join(e,"ios"))||an.existsSync(Pn.join(e,"android"))?"react-native":cn}function Jd(e,t,n){if(t)return t;let i=!!(e.ios?.bundleIdentifier||n?.ios?.bundleIdentifier||e.deepLinks?.ios?.bundleIdentifier),r=!!(e.android?.package||n?.android?.package||n?.android?.applicationId||e.deepLinks?.android?.package);return i&&!r?"ios":r&&!i?"android":"all"}function mr(e=process.cwd(),t){let n=t?.deepLinks?.web?.outputDir;return n||(an.existsSync(Pn.join(e,"public"))?"public":"deep-links")}function qd(e,t){let n=e.deepLinks,i=gi(t.baseUrl||n?.baseUrl||(t.domain?`https://${t.domain}`:"")),r=ts(t.domain)||(t.baseUrl?ur(i):n?.domain)||ur(i),o=t.profile||n?.profile||"production",s=Ve(e,o)||{},a=s.ios||{},l=s.android||{},d=e.submit?.[o]?.ios||{},c=e.submit?.[o]?.android||{},u=fr(t.scheme||n?.scheme||a.scheme||e.scheme||e.slug||e.name||"app"),f=Yt(e,o),p=pr([...t.androidFingerprint||[],...n?.android?.sha256CertFingerprints||[],...l.sha256CertFingerprints||[],...e.android?.sha256CertFingerprints||[]]);return{baseUrl:i,domain:r,scheme:u,profile:o!=="production"?o:void 0,paths:n?.paths?.length?n.paths:["/*"],ios:{appStoreId:ft(t.appStoreId,n?.ios?.appStoreId,a.ascAppId,d.ascAppId,e.ios?.ascAppId),appleTeamId:ft(t.appleTeamId,n?.ios?.appleTeamId,a.appleTeamId,a.developerTeamId,d.appleTeamId,d.developerTeamId,e.ios?.appleTeamId,e.ios?.developerTeamId,f.teamId),bundleIdentifier:ft(t.iosBundleId,n?.ios?.bundleIdentifier,a.bundleIdentifier,a.bundleId,e.ios?.bundleIdentifier,e.ios?.bundleId,e.expo?.ios?.bundleIdentifier),webCredentials:!!n?.ios?.webCredentials,activityContinuation:!!n?.ios?.activityContinuation},android:{package:ft(t.androidPackage,n?.android?.package,l.package,l.applicationId,e.android?.package,e.expo?.android?.package,c.packageName,c.package),sha256CertFingerprints:p},web:{smartAppBanner:n?.web?.smartAppBanner??!0,outputDir:t.output||n?.web?.outputDir||mr(process.cwd(),e)}}}function gr(e,t={}){let n=e.deepLinks,i=t.profile||n?.profile||"production",r=t.expoHints||null,o=ft(n?.baseUrl,r?.domain?`https://${r.domain}`:void 0);if(!o)return null;let s=gi(o),a=Ve(e,i)||{},l=a.ios||{},d=a.android||{},c=e.submit?.[i]?.ios||{},u=e.submit?.[i]?.android||{},f=Yt(e,i),p=ft(n?.domain,r?.domain)||ur(s),y=fr(ft(n?.scheme,l.scheme,e.scheme,r?.scheme,e.slug,e.name,"app")||"app"),g=n?.paths?.length?n.paths:[...zd];return{baseUrl:s,domain:p,scheme:y,profile:i!=="production"?i:void 0,paths:g,ios:{appStoreId:ft(n?.ios?.appStoreId,l.ascAppId,c.ascAppId,e.ios?.ascAppId),appleTeamId:ft(n?.ios?.appleTeamId,l.appleTeamId,l.developerTeamId,c.appleTeamId,c.developerTeamId,e.ios?.appleTeamId,e.ios?.developerTeamId,f.teamId),bundleIdentifier:ft(n?.ios?.bundleIdentifier,l.bundleIdentifier,l.bundleId,e.ios?.bundleIdentifier,e.ios?.bundleId,e.expo?.ios?.bundleIdentifier,r?.iosBundleIdentifier),webCredentials:!!n?.ios?.webCredentials,activityContinuation:!!n?.ios?.activityContinuation},android:{package:ft(n?.android?.package,d.package,d.applicationId,e.android?.package,e.expo?.android?.package,u.packageName,u.package,r?.androidPackage),sha256CertFingerprints:pr([...n?.android?.sha256CertFingerprints||[],...d.sha256CertFingerprints||[],...e.android?.sha256CertFingerprints||[]])},web:{smartAppBanner:n?.web?.smartAppBanner??!0,outputDir:n?.web?.outputDir||mr(t.cwd||process.cwd(),e)}}}function hr(e,t,n="production",i=process.cwd()){return t?.domain?gr({...e,deepLinks:{baseUrl:`https://${t.domain}`,domain:t.domain,scheme:t.scheme}},{profile:n,cwd:i,expoHints:t}):null}function iy(e,t,n=t.profile||"production"){let i=gr({...e,deepLinks:{baseUrl:t.baseUrl}},{profile:n}),r={baseUrl:t.baseUrl};n!=="production"&&(r.profile=n),t.domain&&t.domain!==ur(t.baseUrl)&&(r.domain=t.domain),t.scheme&&t.scheme!==i?.scheme&&(r.scheme=t.scheme),t.paths?.length&&!Gd(t.paths,zd)&&(r.paths=t.paths);let o={};t.ios?.bundleIdentifier&&t.ios.bundleIdentifier!==i?.ios?.bundleIdentifier&&(o.bundleIdentifier=t.ios.bundleIdentifier),t.ios?.appleTeamId&&t.ios.appleTeamId!==i?.ios?.appleTeamId&&(o.appleTeamId=t.ios.appleTeamId),t.ios?.appStoreId&&t.ios.appStoreId!==i?.ios?.appStoreId&&(o.appStoreId=t.ios.appStoreId),t.ios?.webCredentials&&(o.webCredentials=!0),t.ios?.activityContinuation&&(o.activityContinuation=!0),Object.keys(o).length>0&&(r.ios=o);let s={};t.android?.package&&t.android.package!==i?.android?.package&&(s.package=t.android.package);let a=t.android?.sha256CertFingerprints||[],l=i?.android?.sha256CertFingerprints||[];a.length>0&&!Gd(a,l)&&(s.sha256CertFingerprints=a),Object.keys(s).length>0&&(r.android=s);let d={outputDir:t.web?.outputDir||"deep-links"};return t.web?.smartAppBanner===!1&&(d.smartAppBanner=!1),r.web=d,r}function Yd(e,t,n,i=n.profile||"production"){let r={...e,framework:t,scheme:e.scheme||n.scheme};return{...r,deepLinks:iy(r,n,i)}}function Xd(e,t=process.cwd()){let n=Pn.join(t,"mach.config.json");return an.writeFileSync(n,`${JSON.stringify(e,null,2)}
|
|
1959
|
+
`),n}import Oe from"fs";import Le from"path";import{spawnSync as Zd}from"child_process";var hi="@radhya/mach/expo-plugin",ry=`const fs = require('fs')
|
|
1715
1960
|
const path = require('path')
|
|
1716
1961
|
|
|
1717
1962
|
const unique = values => Array.from(new Set(values.filter(Boolean)))
|
|
@@ -1831,24 +2076,24 @@ module.exports = function withMachDeepLinks(config) {
|
|
|
1831
2076
|
config.android.intentFilters = intentFilters
|
|
1832
2077
|
return config
|
|
1833
2078
|
}
|
|
1834
|
-
`,
|
|
2079
|
+
`,yi=e=>{if(typeof e=="string"){if(e===hi)return hi;if(e===Rn||e===Rn.replace(/^\.\//,""))return Rn}},is=e=>Array.isArray(e)?is(e[0]):yi(e),Qd=e=>!!is(e),oy=(e,t)=>{let n=yi(t)||t;return is(e)===n},sy=(e,t)=>Array.isArray(e)?[t,...e.slice(1)]:t,ay=(e,t)=>{let n=Array.isArray(e.plugins)?e.plugins:[];if(n.findIndex(o=>oy(o,t))>=0)return e.plugins=n,"already";let r=n.findIndex(Qd);return r>=0?(n[r]=sy(n[r],t),e.plugins=n,"updated"):(n.push(t),e.plugins=n,"inserted")},ns=/(['"`])((?:\.\/)?plugins\/withMachDeepLinks|@radhya\/mach\/expo-plugin)\1/g;function yr(e){let t=Le.join(e,"package.json");if(!Oe.existsSync(t))return!1;try{let n=JSON.parse(Oe.readFileSync(t,"utf-8"));return!!(n.dependencies?.["@radhya/mach"]||n.devDependencies?.["@radhya/mach"])}catch{return!1}}function ly(e){return Oe.existsSync(Le.join(e,"pnpm-lock.yaml"))?{command:"pnpm",args:["add","-D","@radhya/mach@latest"],label:"pnpm add -D @radhya/mach@latest"}:Oe.existsSync(Le.join(e,"yarn.lock"))?{command:"yarn",args:["add","-D","@radhya/mach@latest"],label:"yarn add -D @radhya/mach@latest"}:Oe.existsSync(Le.join(e,"bun.lockb"))||Oe.existsSync(Le.join(e,"bun.lock"))?{command:"bun",args:["add","-d","@radhya/mach@latest"],label:"bun add -d @radhya/mach@latest"}:{command:"npm",args:["install","--save-dev","@radhya/mach@latest"],label:"npm install --save-dev @radhya/mach@latest"}}function dy(e){let t=ly(e),n=Zd(t.command,t.args,{cwd:e,stdio:"inherit",env:{...process.env}});return n.error?{ok:!1,label:t.label,error:n.error.message}:n.status!==0?{ok:!1,label:t.label,error:`${t.command} exited with code ${n.status}`}:{ok:yr(e),label:t.label}}function cy(e,t){let n=Oe.readFileSync(e,"utf-8"),i=Array.from(n.matchAll(ns));if(i.length>0){let f=yi(t)||t,p=i.some(h=>yi(h[2])===f),y=i.some(h=>yi(h[2])!==f);if(p&&!y)return"already";let g=n.replace(ns,(h,S)=>`${S}${t}${S}`);return Oe.writeFileSync(e,g),"updated"}let r=/(^[ \t]*)plugins\s*:\s*\[([\s\S]*?)\]/m.exec(n);if(!r||r.index===void 0)return"unsupported";let o=n.includes(`\r
|
|
1835
2080
|
`)?`\r
|
|
1836
2081
|
`:`
|
|
1837
|
-
`,s=r[1]||"",
|
|
1838
|
-
`)||
|
|
1839
|
-
`),i.push(
|
|
1840
|
-
`)};var
|
|
1841
|
-
${i}`)),!0):!1}function Cc(e,t){let n=[],i=[],r=[],o=t.web?.outputDir||"deep-links",s=Je.join(e,o),l=Bo(t);if(l){let d=er([Je.join(s,".well-known/apple-app-site-association"),Je.join(s,".well-known/apple-app-site-association.json"),Je.join(s,"apple-app-site-association"),Je.join(s,"apple-app-site-association.json")]);for(let p of d)Oc(p,l),n.push(Je.relative(e,p))}else i.push("Apple AASA files: missing ios.appleTeamId or ios.bundleIdentifier");let a=vh(t);if(a){let d=Je.join(s,".well-known/assetlinks.json");Oc(d,a),n.push(Je.relative(e,d)),t.android?.sha256CertFingerprints?.length||r.push("assetlinks.json was generated without SHA256 fingerprints. Add them before Android App Links can verify.")}else i.push("Android assetlinks.json: missing android.package");let c=Je.join(e,Lo);St.existsSync(c)&&(St.unlinkSync(c),r.push(`Removed legacy ${Lo}; mach.config.json is now the source of truth.`));let u=Je.join(s,"index.html");return t.web?.smartAppBanner&&$h(u,t)?n.push(Je.relative(e,u)):t.web?.smartAppBanner&&t.ios?.appStoreId?r.push(`Smart App Banner skipped because ${Je.relative(e,u)} was not found.`):t.web?.smartAppBanner&&r.push("Smart App Banner skipped because ios.appStoreId is not configured."),o!=="public"&&r.push(`Host ${o}/.well-known files at https://${t.domain}/.well-known/.`),{written:n,skipped:i,notes:r}}function Ho(e){if(!St.existsSync(e))return null;try{return JSON.parse(St.readFileSync(e,"utf-8"))}catch{return null}}import Ht from"fs";import Gt from"path";import{spawnSync as _h}from"child_process";var G=(e,t)=>({level:e,message:t}),Dc=(e,t)=>Gt.join(e,t.web?.outputDir||"deep-links");function Ph(e,t,n="fail"){let i=[],r=Dc(e,t),o=Gt.join(r,".well-known/apple-app-site-association");if(!Bo(t))return i.push(G("warn","Skipping AASA verification because ios.appleTeamId or ios.bundleIdentifier is missing.")),i;if(!Ht.existsSync(o))return i.push(G(n,`${Gt.relative(e,o)} is missing.`)),i;Ht.statSync(o).size>128*1024?i.push(G("fail","Apple AASA file is larger than 128 KB.")):i.push(G("pass","Apple AASA file is under 128 KB."));let a=Ho(o);if(!a)return i.push(G("fail","Apple AASA file is not valid JSON.")),i;let c=`${t.ios?.appleTeamId}.${t.ios?.bundleIdentifier}`,u=a.applinks?.details||[],d=Array.isArray(u)&&u.some(p=>p.appID===c||p.appIDs?.includes(c));return i.push(d?G("pass",`AASA contains ${c}.`):G("fail",`AASA does not contain ${c}.`)),i}function Rh(e,t,n="fail"){let i=[],r=Dc(e,t),o=Gt.join(r,".well-known/assetlinks.json");if(!t.android?.package)return i.push(G("warn","Skipping Android Asset Links verification because android.package is missing.")),i;if(!Ht.existsSync(o))return i.push(G(n,`${Gt.relative(e,o)} is missing.`)),i;let s=Ho(o);if(!s||!Array.isArray(s))return i.push(G("fail","assetlinks.json is not a valid JSON array.")),i;let l=s.find(c=>c?.target?.package_name===t.android?.package);i.push(l?G("pass",`assetlinks.json contains ${t.android.package}.`):G("fail",`assetlinks.json does not contain ${t.android.package}.`));let a=l?.target?.sha256_cert_fingerprints;return i.push(Array.isArray(a)&&a.length>0?G("pass","assetlinks.json has at least one SHA256 fingerprint."):G("warn","assetlinks.json has no SHA256 fingerprints.")),i}function Oh(e,t,n,i){if(t.framework!=="expo")return[];let r=[],o=jo(e),l=(Array.isArray(o?.ios?.associatedDomains)?o.ios.associatedDomains:[]).includes(`applinks:${n.domain}`);r.push(l?G("pass",`Expo iOS config contains applinks:${n.domain}.`):G(i?"warn":"fail",`Expo iOS config does not contain applinks:${n.domain}.`));let c=(Array.isArray(o?.android?.intentFilters)?o.android.intentFilters:[]).flatMap(d=>Array.isArray(d?.data)?d.data:[]).some(d=>d?.scheme==="https"&&d.host===n.domain);if(r.push(c?G("pass",`Expo Android config contains App Link host ${n.domain}.`):G(i?"warn":"fail",`Expo Android config does not contain App Link host ${n.domain}.`)),i)return r.push(G("warn","mach.config.json is missing deepLinks; values were inferred from Expo config. Run `mach deeplink setup` to persist Mach metadata and generate hosted files.")),r;let u=Rc(e);return u==="wired"?r.push(G("pass","Expo deep link plugin is wired into Expo config and derives values from mach.config.json.")):u==="manual"&&l&&c?r.push(G("pass","Expo resolved config contains the deep-link settings from the dynamic config.")):u==="manual"?r.push(G("warn","Expo deep link plugin exists, but dynamic or missing Expo config means manual plugin insertion must be confirmed.")):l&&c?r.push(G("warn","Expo plugin is not wired, but resolved Expo config already contains the deep-link settings.")):r.push(G("fail","Expo deep link plugin is missing or not wired into Expo config.")),r}function Ch(e,t,n){if(t.framework!=="react-native")return[];let i=[],r=Gt.join(e,"android/app/src/main/AndroidManifest.xml");if(Ht.existsSync(r)){let s=Ht.readFileSync(r,"utf-8");i.push(s.includes(`android:host="${n.domain}"`)?G("pass","AndroidManifest.xml contains the App Links host."):G("warn","AndroidManifest.xml does not contain the App Links host. Native patching is planned for a later phase."))}let o=Gt.join(e,"ios");if(Ht.existsSync(o)){let l=Ht.readdirSync(o,{recursive:!0}).filter(a=>typeof a=="string"&&a.endsWith(".entitlements")).some(a=>Ht.readFileSync(Gt.join(o,a),"utf-8").includes(`applinks:${n.domain}`));i.push(l?G("pass","iOS entitlements contain the associated domain."):G("warn","iOS entitlements do not contain the associated domain. Native patching is planned for a later phase."))}return i}async function Go(e,t){let n=[];try{let i=await fetch(e,{redirect:"manual"});if(i.status>=300&&i.status<400&&!t)return n.push(G("fail",`${e} redirects. Apple AASA endpoints must not redirect.`)),n;n.push(i.status===200?G("pass",`${e} returned HTTP 200.`):G("fail",`${e} returned HTTP ${i.status}.`));let r=i.headers.get("content-type")||"";!r.includes("application/json")&&!r.includes("text/json")&&n.push(G("warn",`${e} content-type is "${r||"missing"}"; application/json is recommended.`)),JSON.parse(await i.text()),n.push(G("pass",`${e} contains valid JSON.`))}catch(i){n.push(G("fail",`${e} check failed: ${i.message}`))}return n}async function Dh(e){let t=e.domain;return(await Promise.all([Go(`https://${t}/.well-known/apple-app-site-association`,!1),Go(`https://${t}/apple-app-site-association`,!1),Go(`https://${t}/.well-known/assetlinks.json`,!0)])).flat()}function kh(e){let t=e.android?.package;if(!t)return[G("warn","Cannot print Android device verification commands because android.package is missing.")];let i=_h("adb",["version"],{encoding:"utf-8"}).status===0?"Run":"Install Android platform-tools, then run";return[G("info",`${i}: adb shell pm set-app-links --package ${t} 0 all`),G("info",`${i}: adb shell pm verify-app-links --re-verify ${t}`),G("info",`${i}: adb shell pm get-app-links ${t}`)]}async function Vo(e,t,n){let i=n.profile||t.deepLinks?.profile||"production",r=t.framework==="expo"?sr(e):null,o=t.framework==="expo"?rr(t,r,i,e):null,s=!t.deepLinks&&!!o,l=t.deepLinks?ir(t,{profile:i,cwd:e,expoHints:r}):o,a=[];if(!l)return[G("fail","mach.config.json is missing deepLinks and Mach could not infer existing deep-link settings. Run `mach deeplink setup`.")];a.push(l.baseUrl?G("pass","deepLinks.baseUrl is configured."):G("fail","deepLinks.baseUrl is missing.")),a.push(l.domain?G("pass","deepLinks.domain is configured."):G("fail","deepLinks.domain is missing.")),a.push(l.scheme?G("pass","deepLinks.scheme is configured."):G("fail","deepLinks.scheme is missing."));let c=s?"warn":"fail";return a.push(...Ph(e,l,c)),a.push(...Rh(e,l,c)),a.push(...Oh(e,t,l,s)),a.push(...Ch(e,t,l)),n.live&&a.push(...await Dh(l)),n.androidDevice&&a.push(...kh(l)),a}var ai=()=>process.stdin.isTTY&&process.stdout.isTTY,xc=`${m.npmScope}/mach`,li=()=>{xh("Operation cancelled."),process.exit(0)},Wo=e=>{if(typeof e!="string")return;let t=e.trim();return t.length>0?t:void 0},Pt=(...e)=>{for(let t of e){let n=Wo(t);if(n)return n}},nn=async(e,t,n,i,r)=>{if(t)return t;if(r||!ai()){if(i)throw new Error(`${e.replace(/:$/,"")} is required. Pass it as an option or run interactively.`);return}let o=await Tc({message:e,initialValue:t||"",placeholder:n,validate(s){if(i&&s.trim().length===0)return"Required."}});return si(o)&&li(),Wo(o)};async function Mh(e,t,n){let i=Ye(e.framework),r=Ye(t);if(r)return r;if(i)return i;let o=Ac();if(n||!ai())return o;let s=await Th({message:`Which framework should ${m.name} configure?`,initialValue:o,options:[{value:"expo",label:"Expo"},{value:"react-native",label:"React Native"},{value:"flutter",label:"Flutter (not supported yet)"}]});return si(s)&&li(),s}var ar=e=>e==="ios"||e==="all",Ko=e=>e==="android"||e==="all";async function Uh(e,t,n){if(t!=="expo"||or(e)||n.installPlugin===!1)return!1;if(n.installPlugin===!0||n.yes)return!0;if(!ai())return!1;let i=await Nc({message:`Install ${xc} locally so Expo can use ${xc}/expo-plugin?`,initialValue:!0});return si(i)&&li(),!!i}async function Fh(e,t){let n=!!t.yes,i=t.profile||e.deepLinks?.profile||"production",r=He(e,i)||{},o=r.ios||{},s=r.android||{},l=e.submit?.[i]?.ios||{},a=e.submit?.[i]?.android||{},c=zt(e,i),u=await Mh(e,t.framework,n);if(u==="flutter")throw new Error("Flutter deep-link automation is planned but not supported yet.");let d=Ec(e,bc(t.platform),r),p=e.deepLinks,g=u==="expo"&&(!Pt(t.baseUrl,p?.baseUrl,t.domain?`https://${t.domain}`:void 0)||!Pt(t.scheme,p?.scheme,o.scheme,e.scheme,e.slug,e.name)||ar(d)&&!Pt(t.iosBundleId,p?.ios?.bundleIdentifier,o.bundleIdentifier,o.bundleId,e.ios?.bundleIdentifier)||Ko(d)&&!Pt(t.androidPackage,p?.android?.package,s.package,s.applicationId,e.android?.package,a.packageName,a.package))?rr(e,sr(process.cwd()),i,process.cwd()):null,h=t.output||p?.web?.outputDir||nr(process.cwd(),e),S=await nn("Deep link base URL:",t.baseUrl||p?.baseUrl||(t.domain?`https://${t.domain}`:void 0)||g?.baseUrl,"https://app.example.com",!0,n),b=ii(S),y=t.baseUrl?new URL(b).hostname:void 0,P=await nn("Associated domain:",t.domain||y||p?.domain||g?.domain||new URL(b).hostname,"app.example.com",!0,n),v=tr(await nn("URI scheme:",Pt(t.scheme,p?.scheme,o.scheme,e.scheme,g?.scheme,e.slug,e.name,"app"),"myapp",!0,n)||"app"),F=ar(d)?await nn("iOS bundle identifier:",Pt(t.iosBundleId,p?.ios?.bundleIdentifier,o.bundleIdentifier,o.bundleId,e.ios?.bundleIdentifier,g?.ios?.bundleIdentifier),"com.example.app",!0,n):p?.ios?.bundleIdentifier||e.ios?.bundleIdentifier,H=ar(d)?await nn("Apple Team ID:",Pt(t.appleTeamId,p?.ios?.appleTeamId,o.appleTeamId,o.developerTeamId,l.appleTeamId,l.developerTeamId,e.ios?.appleTeamId,e.ios?.developerTeamId,c.teamId),"ABCDE12345",!0,n):p?.ios?.appleTeamId||e.ios?.appleTeamId,q=ar(d)?await nn("App Store ID (optional, for Smart App Banner):",Pt(t.appStoreId,p?.ios?.appStoreId,o.ascAppId,l.ascAppId,e.ios?.ascAppId),"1234567890",!1,n):p?.ios?.appStoreId,I=Ko(d)?await nn("Android package name:",Pt(t.androidPackage,p?.android?.package,s.package,s.applicationId,e.android?.package,a.packageName,a.package,g?.android?.package),"com.example.app",!0,n):p?.android?.package||e.android?.package,_=p?.android?.sha256CertFingerprints||[],M=t.androidFingerprint||[],x=e.android?.sha256CertFingerprints||[],E=s.sha256CertFingerprints||[],A=[...M,..._,...E,...x].filter(Boolean);if(Ko(d)&&A.length===0&&!n&&ai()){let U=await Tc({message:"Android SHA256 fingerprint (optional now, required for verified App Links):",placeholder:"AA:BB:CC:..."});si(U)&&li(),Wo(U)&&A.push(U)}let N=wc(e,{...t,baseUrl:b,domain:P,scheme:v,output:h,appleTeamId:H,appStoreId:q,androidFingerprint:A});return N.ios={...N.ios||{},bundleIdentifier:F,appleTeamId:H,appStoreId:q},N.android={...N.android||{},package:I,sha256CertFingerprints:Array.from(new Set(A))},{framework:u,platform:d,deepLinks:N}}var zo=(e,t)=>{t.length!==0&&Nh(t.map(n=>`- ${n}`).join(`
|
|
1842
|
-
`),e)},
|
|
2082
|
+
`,s=r[1]||"",a=r[2]||"",d=a.match(/\r?\n([ \t]+)\S/)?.[1]||`${s} `,c=a.trim().length===0?`${o}${d}'${t}',${o}${s}`:a.includes(`
|
|
2083
|
+
`)||a.includes("\r")?`${o}${d}'${t}',${a}`:`${o}${d}'${t}',${o}${d}${a.trim()}${o}${s}`,u=`${r[0].slice(0,r[0].indexOf("[")+1)}${c}]`;return Oe.writeFileSync(e,`${n.slice(0,r.index)}${u}${n.slice(r.index+r[0].length)}`),"inserted"}function ec(e,t,n={}){let i=[],r=[],o=[],s=yr(e);if(!s&&n.installPackage){o.push("Installing @radhya/mach locally so Expo can use @radhya/mach/expo-plugin.");let u=dy(e);u.ok?(s=!0,o.push(`Installed @radhya/mach with ${u.label}.`)):o.push(`Could not install @radhya/mach with ${u.label}: ${u.error||"unknown error"}. Falling back to local plugin.`)}let a=s?hi:Rn;if(s)o.push(`Using packaged Expo plugin ${hi}.`);else{let u=Le.join(e,"plugins/withMachDeepLinks.js");Oe.mkdirSync(Le.dirname(u),{recursive:!0}),Oe.writeFileSync(u,ry),i.push(Le.relative(e,u)),o.push(`Using local Expo plugin fallback ${Rn}. Install @radhya/mach in this app to use ${hi}.`)}let l=["app.config.ts","app.config.js"].find(u=>Oe.existsSync(Le.join(e,u)));if(l){let u=Le.join(e,l),f=cy(u,a);return f==="inserted"?i.push(l):f==="updated"?(i.push(l),o.push(`${l} updated to use ${a}.`)):f==="already"?o.push(`${l} already includes the Mach Expo plugin.`):o.push(`Add "${a}" to the plugins array in ${l}. Mach could not safely auto-edit this dynamic config.`),{written:i,skipped:r,notes:o}}let d=["app.config.json","app.json"].find(u=>Oe.existsSync(Le.join(e,u)));if(!d)return r.push("Expo config plugin insertion: no app.json or app.config.json found."),{written:i,skipped:r,notes:o};let c=Le.join(e,d);try{let u=JSON.parse(Oe.readFileSync(c,"utf-8")),f=u.expo&&typeof u.expo=="object"?u.expo:u,p=ay(f,a);Oe.writeFileSync(c,`${JSON.stringify(u,null,2)}
|
|
2084
|
+
`),i.push(d),p==="updated"&&o.push(`${d} updated to use ${a}.`)}catch(u){r.push(`Expo config plugin insertion failed: ${u.message}`)}return{written:i,skipped:r,notes:o}}function tc(e){let t=["app.config.ts","app.config.js"].find(i=>Oe.existsSync(Le.join(e,i)));if(t){let i=Oe.readFileSync(Le.join(e,t),"utf-8");return ns.test(i)?"manual":"missing"}let n=["app.config.json","app.json"].find(i=>Oe.existsSync(Le.join(e,i)));if(!n)return"missing";try{let i=JSON.parse(Oe.readFileSync(Le.join(e,n),"utf-8")),r=i.expo&&typeof i.expo=="object"?i.expo:i;return Array.isArray(r.plugins)&&r.plugins.some(Qd)?"wired":"missing"}catch{return"missing"}}function rs(e){let t=Zd("npx",["--no-install","expo","config","--type","public","--json"],{cwd:e,encoding:"utf-8",timeout:8e3,env:{...process.env,CI:"1",EXPO_NO_TELEMETRY:"1"}});if(t.error||t.status!==0||!t.stdout)return null;let n=t.stdout.trim(),i=n.indexOf("{");if(i<0)return null;try{return JSON.parse(n.slice(i))}catch{return null}}function uy(e){if(!e||typeof e!="object")return null;let n=(Array.isArray(e.ios?.associatedDomains)?e.ios.associatedDomains:[]).map(s=>typeof s=="string"?s.match(/^applinks:(.+)$/)?.[1]:void 0).find(Boolean),r=(Array.isArray(e.android?.intentFilters)?e.android.intentFilters:[]).flatMap(s=>Array.isArray(s?.data)?s.data:[]).find(s=>s?.scheme==="https"&&typeof s.host=="string")?.host,o=n||r;return!o&&!e.scheme&&!e.ios?.bundleIdentifier&&!e.android?.package?null:{domain:o,scheme:typeof e.scheme=="string"?e.scheme:void 0,iosBundleIdentifier:typeof e.ios?.bundleIdentifier=="string"?e.ios.bundleIdentifier:void 0,androidPackage:typeof e.android?.package=="string"?e.android.package:void 0}}function br(e){return uy(rs(e))}import Et from"fs";import qe from"path";var py=e=>{Et.mkdirSync(qe.dirname(e),{recursive:!0})},nc=(e,t)=>{py(e),Et.writeFileSync(e,`${JSON.stringify(t,null,2)}
|
|
2085
|
+
`)};var fy=e=>{let t=e.ios?.appleTeamId,n=e.ios?.bundleIdentifier;return!t||!n?null:`${t}.${n}`};function os(e){let t=fy(e);if(!t)return null;let n=e.paths?.length?e.paths:["/*"],i=n.map(s=>s==="/*"?"*":s),r=n.map(s=>({"/":s,comment:s==="/*"?"Matches all URLs":`Matches ${s}`})),o={applinks:{apps:[],details:[{appIDs:[t],components:r,appID:t,paths:i}]}};return e.ios?.webCredentials&&(o.webcredentials={apps:[t]}),e.ios?.activityContinuation&&(o.activitycontinuation={apps:[t]}),o}function my(e){let t=e.android?.package;return t?[{relation:["delegate_permission/common.handle_all_urls"],target:{namespace:"android_app",package_name:t,sha256_cert_fingerprints:e.android?.sha256CertFingerprints||[]}}]:null}function gy(e,t){let n=t.ios?.appStoreId;if(!n||!Et.existsSync(e))return!1;let i=`<meta name="apple-itunes-app" content="app-id=${n}, app-argument=${t.baseUrl}" />`,r=Et.readFileSync(e,"utf-8");if(/name=["']apple-itunes-app["']/i.test(r)){let o=r.replace(/<meta[^>]+name=["']apple-itunes-app["'][^>]*>/i,i);return Et.writeFileSync(e,o),!0}return/<head[^>]*>/i.test(r)?(Et.writeFileSync(e,r.replace(/<head([^>]*)>/i,`<head$1>
|
|
2086
|
+
${i}`)),!0):!1}function ic(e,t){let n=[],i=[],r=[],o=t.web?.outputDir||"deep-links",s=qe.join(e,o),a=os(t);if(a){let u=pr([qe.join(s,".well-known/apple-app-site-association"),qe.join(s,".well-known/apple-app-site-association.json"),qe.join(s,"apple-app-site-association"),qe.join(s,"apple-app-site-association.json")]);for(let f of u)nc(f,a),n.push(qe.relative(e,f))}else i.push("Apple AASA files: missing ios.appleTeamId or ios.bundleIdentifier");let l=my(t);if(l){let u=qe.join(s,".well-known/assetlinks.json");nc(u,l),n.push(qe.relative(e,u)),t.android?.sha256CertFingerprints?.length||r.push("assetlinks.json was generated without SHA256 fingerprints. Add them before Android App Links can verify.")}else i.push("Android assetlinks.json: missing android.package");let d=qe.join(e,es);Et.existsSync(d)&&(Et.unlinkSync(d),r.push(`Removed legacy ${es}; mach.config.json is now the source of truth.`));let c=qe.join(s,"index.html");return t.web?.smartAppBanner&&gy(c,t)?n.push(qe.relative(e,c)):t.web?.smartAppBanner&&t.ios?.appStoreId?r.push(`Smart App Banner skipped because ${qe.relative(e,c)} was not found.`):t.web?.smartAppBanner&&r.push("Smart App Banner skipped because ios.appStoreId is not configured."),o!=="public"&&r.push(`Host ${o}/.well-known files at https://${t.domain}/.well-known/.`),{written:n,skipped:i,notes:r}}function ss(e){if(!Et.existsSync(e))return null;try{return JSON.parse(Et.readFileSync(e,"utf-8"))}catch{return null}}import Kt from"fs";import Wt from"path";import{spawnSync as hy}from"child_process";var J=(e,t)=>({level:e,message:t}),rc=(e,t)=>Wt.join(e,t.web?.outputDir||"deep-links");function yy(e,t,n="fail"){let i=[],r=rc(e,t),o=Wt.join(r,".well-known/apple-app-site-association");if(!os(t))return i.push(J("warn","Skipping AASA verification because ios.appleTeamId or ios.bundleIdentifier is missing.")),i;if(!Kt.existsSync(o))return i.push(J(n,`${Wt.relative(e,o)} is missing.`)),i;Kt.statSync(o).size>128*1024?i.push(J("fail","Apple AASA file is larger than 128 KB.")):i.push(J("pass","Apple AASA file is under 128 KB."));let l=ss(o);if(!l)return i.push(J("fail","Apple AASA file is not valid JSON.")),i;let d=`${t.ios?.appleTeamId}.${t.ios?.bundleIdentifier}`,c=l.applinks?.details||[],u=Array.isArray(c)&&c.some(f=>f.appID===d||f.appIDs?.includes(d));return i.push(u?J("pass",`AASA contains ${d}.`):J("fail",`AASA does not contain ${d}.`)),i}function by(e,t,n="fail"){let i=[],r=rc(e,t),o=Wt.join(r,".well-known/assetlinks.json");if(!t.android?.package)return i.push(J("warn","Skipping Android Asset Links verification because android.package is missing.")),i;if(!Kt.existsSync(o))return i.push(J(n,`${Wt.relative(e,o)} is missing.`)),i;let s=ss(o);if(!s||!Array.isArray(s))return i.push(J("fail","assetlinks.json is not a valid JSON array.")),i;let a=s.find(d=>d?.target?.package_name===t.android?.package);i.push(a?J("pass",`assetlinks.json contains ${t.android.package}.`):J("fail",`assetlinks.json does not contain ${t.android.package}.`));let l=a?.target?.sha256_cert_fingerprints;return i.push(Array.isArray(l)&&l.length>0?J("pass","assetlinks.json has at least one SHA256 fingerprint."):J("warn","assetlinks.json has no SHA256 fingerprints.")),i}function Sy(e,t,n,i){if(t.framework!=="expo")return[];let r=[],o=rs(e),a=(Array.isArray(o?.ios?.associatedDomains)?o.ios.associatedDomains:[]).includes(`applinks:${n.domain}`);r.push(a?J("pass",`Expo iOS config contains applinks:${n.domain}.`):J(i?"warn":"fail",`Expo iOS config does not contain applinks:${n.domain}.`));let d=(Array.isArray(o?.android?.intentFilters)?o.android.intentFilters:[]).flatMap(u=>Array.isArray(u?.data)?u.data:[]).some(u=>u?.scheme==="https"&&u.host===n.domain);if(r.push(d?J("pass",`Expo Android config contains App Link host ${n.domain}.`):J(i?"warn":"fail",`Expo Android config does not contain App Link host ${n.domain}.`)),i)return r.push(J("warn","mach.config.json is missing deepLinks; values were inferred from Expo config. Run `mach deeplink setup` to persist Mach metadata and generate hosted files.")),r;let c=tc(e);return c==="wired"?r.push(J("pass","Expo deep link plugin is wired into Expo config and derives values from mach.config.json.")):c==="manual"&&a&&d?r.push(J("pass","Expo resolved config contains the deep-link settings from the dynamic config.")):c==="manual"?r.push(J("warn","Expo deep link plugin exists, but dynamic or missing Expo config means manual plugin insertion must be confirmed.")):a&&d?r.push(J("warn","Expo plugin is not wired, but resolved Expo config already contains the deep-link settings.")):r.push(J("fail","Expo deep link plugin is missing or not wired into Expo config.")),r}function Ay(e,t,n){if(t.framework!=="react-native")return[];let i=[],r=Wt.join(e,"android/app/src/main/AndroidManifest.xml");if(Kt.existsSync(r)){let s=Kt.readFileSync(r,"utf-8");i.push(s.includes(`android:host="${n.domain}"`)?J("pass","AndroidManifest.xml contains the App Links host."):J("warn","AndroidManifest.xml does not contain the App Links host. Native patching is planned for a later phase."))}let o=Wt.join(e,"ios");if(Kt.existsSync(o)){let a=Kt.readdirSync(o,{recursive:!0}).filter(l=>typeof l=="string"&&l.endsWith(".entitlements")).some(l=>Kt.readFileSync(Wt.join(o,l),"utf-8").includes(`applinks:${n.domain}`));i.push(a?J("pass","iOS entitlements contain the associated domain."):J("warn","iOS entitlements do not contain the associated domain. Native patching is planned for a later phase."))}return i}async function as(e,t){let n=[];try{let i=await fetch(e,{redirect:"manual"});if(i.status>=300&&i.status<400&&!t)return n.push(J("fail",`${e} redirects. Apple AASA endpoints must not redirect.`)),n;n.push(i.status===200?J("pass",`${e} returned HTTP 200.`):J("fail",`${e} returned HTTP ${i.status}.`));let r=i.headers.get("content-type")||"";!r.includes("application/json")&&!r.includes("text/json")&&n.push(J("warn",`${e} content-type is "${r||"missing"}"; application/json is recommended.`)),JSON.parse(await i.text()),n.push(J("pass",`${e} contains valid JSON.`))}catch(i){n.push(J("fail",`${e} check failed: ${i.message}`))}return n}async function Ey(e){let t=e.domain;return(await Promise.all([as(`https://${t}/.well-known/apple-app-site-association`,!1),as(`https://${t}/apple-app-site-association`,!1),as(`https://${t}/.well-known/assetlinks.json`,!0)])).flat()}function Iy(e){let t=e.android?.package;if(!t)return[J("warn","Cannot print Android device verification commands because android.package is missing.")];let i=hy("adb",["version"],{encoding:"utf-8"}).status===0?"Run":"Install Android platform-tools, then run";return[J("info",`${i}: adb shell pm set-app-links --package ${t} 0 all`),J("info",`${i}: adb shell pm verify-app-links --re-verify ${t}`),J("info",`${i}: adb shell pm get-app-links ${t}`)]}async function ls(e,t,n){let i=n.profile||t.deepLinks?.profile||"production",r=t.framework==="expo"?br(e):null,o=t.framework==="expo"?hr(t,r,i,e):null,s=!t.deepLinks&&!!o,a=t.deepLinks?gr(t,{profile:i,cwd:e,expoHints:r}):o,l=[];if(!a)return[J("fail","mach.config.json is missing deepLinks and Mach could not infer existing deep-link settings. Run `mach deeplink setup`.")];l.push(a.baseUrl?J("pass","deepLinks.baseUrl is configured."):J("fail","deepLinks.baseUrl is missing.")),l.push(a.domain?J("pass","deepLinks.domain is configured."):J("fail","deepLinks.domain is missing.")),l.push(a.scheme?J("pass","deepLinks.scheme is configured."):J("fail","deepLinks.scheme is missing."));let d=s?"warn":"fail";return l.push(...yy(e,a,d)),l.push(...by(e,a,d)),l.push(...Sy(e,t,a,s)),l.push(...Ay(e,t,a)),n.live&&l.push(...await Ey(a)),n.androidDevice&&l.push(...Iy(a)),l}var Si=()=>process.stdin.isTTY&&process.stdout.isTTY,sc=`${m.npmScope}/mach`,Ai=()=>{wy("Operation cancelled."),process.exit(0)},us=e=>{if(typeof e!="string")return;let t=e.trim();return t.length>0?t:void 0},Dt=(...e)=>{for(let t of e){let n=us(t);if(n)return n}},ln=async(e,t,n,i,r)=>{if(t)return t;if(r||!Si()){if(i)throw new Error(`${e.replace(/:$/,"")} is required. Pass it as an option or run interactively.`);return}let o=await lc({message:e,initialValue:t||"",placeholder:n,validate(s){if(i&&s.trim().length===0)return"Required."}});return bi(o)&&Ai(),us(o)};async function Py(e,t,n){let i=Ze(e.framework),r=Ze(t);if(r)return r;if(i)return i;let o=Wd();if(n||!Si())return o;let s=await $y({message:`Which framework should ${m.name} configure?`,initialValue:o,options:[{value:"expo",label:"Expo"},{value:"react-native",label:"React Native"},{value:"flutter",label:"Flutter (not supported yet)"}]});return bi(s)&&Ai(),s}var Sr=e=>e==="ios"||e==="all",ds=e=>e==="android"||e==="all";async function Ry(e,t,n){if(t!=="expo"||yr(e)||n.installPlugin===!1)return!1;if(n.installPlugin===!0||n.yes)return!0;if(!Si())return!1;let i=await ac({message:`Install ${sc} locally so Expo can use ${sc}/expo-plugin?`,initialValue:!0});return bi(i)&&Ai(),!!i}async function Cy(e,t){let n=!!t.yes,i=t.profile||e.deepLinks?.profile||"production",r=Ve(e,i)||{},o=r.ios||{},s=r.android||{},a=e.submit?.[i]?.ios||{},l=e.submit?.[i]?.android||{},d=Yt(e,i),c=await Py(e,t.framework,n);if(c==="flutter")throw new Error("Flutter deep-link automation is planned but not supported yet.");let u=Jd(e,Kd(t.platform),r),f=e.deepLinks,y=c==="expo"&&(!Dt(t.baseUrl,f?.baseUrl,t.domain?`https://${t.domain}`:void 0)||!Dt(t.scheme,f?.scheme,o.scheme,e.scheme,e.slug,e.name)||Sr(u)&&!Dt(t.iosBundleId,f?.ios?.bundleIdentifier,o.bundleIdentifier,o.bundleId,e.ios?.bundleIdentifier)||ds(u)&&!Dt(t.androidPackage,f?.android?.package,s.package,s.applicationId,e.android?.package,l.packageName,l.package))?hr(e,br(process.cwd()),i,process.cwd()):null,g=t.output||f?.web?.outputDir||mr(process.cwd(),e),h=await ln("Deep link base URL:",t.baseUrl||f?.baseUrl||(t.domain?`https://${t.domain}`:void 0)||y?.baseUrl,"https://app.example.com",!0,n),S=gi(h),b=t.baseUrl?new URL(S).hostname:void 0,_=await ln("Associated domain:",t.domain||b||f?.domain||y?.domain||new URL(S).hostname,"app.example.com",!0,n),w=fr(await ln("URI scheme:",Dt(t.scheme,f?.scheme,o.scheme,e.scheme,y?.scheme,e.slug,e.name,"app"),"myapp",!0,n)||"app"),T=Sr(u)?await ln("iOS bundle identifier:",Dt(t.iosBundleId,f?.ios?.bundleIdentifier,o.bundleIdentifier,o.bundleId,e.ios?.bundleIdentifier,y?.ios?.bundleIdentifier),"com.example.app",!0,n):f?.ios?.bundleIdentifier||e.ios?.bundleIdentifier,B=Sr(u)?await ln("Apple Team ID:",Dt(t.appleTeamId,f?.ios?.appleTeamId,o.appleTeamId,o.developerTeamId,a.appleTeamId,a.developerTeamId,e.ios?.appleTeamId,e.ios?.developerTeamId,d.teamId),"ABCDE12345",!0,n):f?.ios?.appleTeamId||e.ios?.appleTeamId,X=Sr(u)?await ln("App Store ID (optional, for Smart App Banner):",Dt(t.appStoreId,f?.ios?.appStoreId,o.ascAppId,a.ascAppId,e.ios?.ascAppId),"1234567890",!1,n):f?.ios?.appStoreId,U=ds(u)?await ln("Android package name:",Dt(t.androidPackage,f?.android?.package,s.package,s.applicationId,e.android?.package,l.packageName,l.package,y?.android?.package),"com.example.app",!0,n):f?.android?.package||e.android?.package,K=f?.android?.sha256CertFingerprints||[],v=t.androidFingerprint||[],R=e.android?.sha256CertFingerprints||[],I=s.sha256CertFingerprints||[],$=[...v,...K,...I,...R].filter(Boolean);if(ds(u)&&$.length===0&&!n&&Si()){let P=await lc({message:"Android SHA256 fingerprint (optional now, required for verified App Links):",placeholder:"AA:BB:CC:..."});bi(P)&&Ai(),us(P)&&$.push(P)}let x=qd(e,{...t,baseUrl:S,domain:_,scheme:w,output:g,appleTeamId:B,appStoreId:X,androidFingerprint:$});return x.ios={...x.ios||{},bundleIdentifier:T,appleTeamId:B,appStoreId:X},x.android={...x.android||{},package:U,sha256CertFingerprints:Array.from(new Set($))},{framework:c,platform:u,deepLinks:x}}var cs=(e,t)=>{t.length!==0&&vy(t.map(n=>`- ${n}`).join(`
|
|
2087
|
+
`),e)},dc=e=>e.filter(t=>t.level==="fail").length;function cc(e){for(let t of e){let n=t.level==="pass"?mt.green("PASS"):t.level==="warn"?mt.yellow("WARN"):t.level==="info"?mt.cyan("INFO"):mt.red("FAIL");Ar.info(`${n} ${t.message}`)}}async function uc(e){try{let t=process.cwd(),n=oc.join(t,m.configFileName),i=Ie()||{};if(!_y.existsSync(n)){let S=e.yes||!Si()?!0:await ac({message:`${m.configFileName} was not found. Create one with deep link settings?`,initialValue:!0});if(bi(S)&&Ai(),!S)return}let{framework:r,deepLinks:o}=await Cy(i,e),s=e.profile||i.deepLinks?.profile||"production",a=Yd(i,r,o,s),l=Xd(a,t),d=ic(t,o),c=await Ry(t,r,e),u=r==="expo"?ec(t,o,{installPackage:c}):{written:[],skipped:[],notes:r==="react-native"?["React Native native patching is planned for a later phase. Hosted files were generated now."]:[]},f=[oc.relative(t,l),...d.written,...u.written],p=[...d.skipped,...u.skipped],y=[...d.notes,...u.notes];cs("Written",f),cs("Skipped",p),cs("Notes",y);let g=await ls(t,a,{});cc(g);let h=dc(g);if(h>0){Er(mt.yellow(`Deep link setup finished with ${h} verification issue(s).`));return}Er(mt.green("Deep link setup complete."))}catch(t){Ar.error(mt.red(t.message||"Deep link setup failed.")),process.exit(1)}}async function pc(e){try{let t=Ie();t||(Ar.error(mt.red(`No ${m.configFileName} found in the current directory.`)),process.exit(1));let n=await ls(process.cwd(),t,e);cc(n);let i=dc(n);i>0&&(Er(mt.red(`Deep link verification failed with ${i} issue(s).`)),process.exit(1)),Er(mt.green("Deep link verification passed."))}catch(t){Ar.error(mt.red(t.message||"Deep link verification failed.")),process.exit(1)}}import{log as kt,spinner as fc}from"@clack/prompts";import Jt from"chalk";var Oy=e=>{let t=String(e||"").trim().toLowerCase();if(t==="ios"||t==="android")return t;throw new Error("Pass --platform ios or --platform android.")},Dy=e=>{let t=Number(e);if(!Number.isFinite(t))throw new Error("Counter value must be a non-negative integer.");let n=Math.floor(t);if(n<0)throw new Error("Counter value must be a non-negative integer.");return n},ky=(e,t,n)=>{let i=String(n.scope||"").trim();if(i)return i;let r=n.profile||"production",o=e==="android"?n.package||n.androidPackage:n.bundleId||n.iosBundleIdentifier;if(o)return String(o).trim();let s=e==="android"?un(t,r):Xt(t,r);if(s)return s;throw new Error(e==="android"?`Could not resolve Android package. Set android.package in ${m.configFileName}, or pass --package/--scope.`:`Could not resolve iOS bundle identifier. Set ios.bundleIdentifier in ${m.configFileName}, or pass --bundle-id/--scope.`)},Ny=()=>{let e=Ie();if(!e)throw new Error(`No ${m.configFileName} found in the current directory. Run \`${m.nameLower} init\` or \`${m.nameLower} link\` first.`);if(!e.projectId)throw new Error(`${m.configFileName} is missing projectId.`);return e},ps=e=>{kt.info(Jt.bgBlue.white(" Native Version Counter ")),kt.info(`${Jt.blue("Platform:")} ${e.platform}`),kt.info(`${Jt.blue("Scope:")} ${e.scope}`),kt.info(`${Jt.blue("Current DB value:")} ${e.current}`),kt.info(`${Jt.blue("Next build will use:")} ${e.next}`),e.seeded||kt.warn(Jt.yellow("This counter has not been seeded yet. Existing store apps should run `mach version seed` once before auto-version builds."))};async function fs(e,t={}){if(!Ue()){kt.error(`You are not logged in. Run \`${m.nameLower} login\` first.`);return}try{let i=Ny(),r=Oy(t.platform),o=ky(r,i,t),s=String(i.projectId);if(e==="show"){let c=fc();t.json||c.start("Fetching native version counter...");let{data:u}=await D.get(`/projects/${s}/version-counters`,{params:{platform:r,scope:o}});if(u.status!=="success")throw new Error(u.message||"Failed to fetch version counter.");t.json?console.log(JSON.stringify(u.counter,null,2)):(c.stop("Fetched native version counter."),ps(u.counter));return}let a=Dy(t.value),l=fc();t.json||l.start("Seeding native version counter...");let{data:d}=await D.post(`/projects/${s}/version-counters/seed`,{platform:r,scope:o,value:a,force:!!t.force});if(d.status!=="success")throw new Error(d.message||"Failed to seed version counter.");t.json?console.log(JSON.stringify(d.counter,null,2)):(l.stop(`Seeded ${r} counter for ${o}.`),ps(d.counter))}catch(i){let r=i?.response?.data?.message||i?.message||"Version command failed.";if(i?.response?.data?.counter&&!t.json){kt.error(Jt.red(r)),ps(i.response.data.counter);return}t.json?console.log(JSON.stringify({status:"error",message:r},null,2)):kt.error(Jt.red(r))}}import{log as it,spinner as wi,text as mc,select as gc,confirm as xy,isCancel as Ei,cancel as Ii,outro as vi,note as Ty}from"@clack/prompts";import le from"chalk";import{execSync as Ly}from"child_process";async function My(){try{let e=Ly("xcrun devicectl list devices --json-output -",{stdio:["pipe","pipe","pipe"]}).toString();return(JSON.parse(e).result?.devices||[]).filter(i=>i.connectionProperties?.transportType==="wired"||i.connectionProperties?.transportType==="localNetwork").map(i=>({udid:i.identifier,name:i.deviceProperties?.name||"Unknown Device",model:i.hardwareProperties?.marketingName||"iPhone"}))}catch{return[]}}var hc=e=>e?.trim().toUpperCase()||void 0;function yc(e){let t=Ie(),n=t?Yt(t):{},i=hc(e.teamId),r=i||n.teamId;return{...n,teamId:r,developerTeamId:i||n.developerTeamId||r}}async function Uy(e){let t=e.udid,n=e.name,i=yc(e),r=i.teamId;if(!t){let s=wi();s.start("Scanning for connected iOS devices...");let a=await My();if(s.stop(a.length>0?`Found ${a.length} device(s)`:"No devices detected"),a.length===1)t=a[0].udid,n=n||a[0].name,it.info(`Detected: ${le.bold(n)} (${le.dim(t.substring(0,12)+"...")})`);else if(a.length>1){let l=await gc({message:"Select a device to register:",options:a.map(c=>({value:c.udid,label:`${c.name} (${c.model})`,hint:c.udid.substring(0,12)+"..."}))});if(Ei(l)){Ii("Cancelled");return}t=l;let d=a.find(c=>c.udid===t);n=n||d.name}else{it.info(le.dim("No connected devices found. Enter UDID manually."));let l=await mc({message:"Device UDID:",placeholder:"00008101-XXXXXXXXXXXX",validate(d){if(d.length<10)return"UDID seems too short"}});if(Ei(l)){Ii("Cancelled");return}t=l}}if(!n){let s=await mc({message:"Device name:",placeholder:"Nitesh's iPhone",validate(a){if(a.length===0)return"Name is required"}});if(Ei(s)){Ii("Cancelled");return}n=s}let o=wi();o.start("Registering device...");try{await D.post("/devices",{udid:t,name:n,platform:"ios",addedVia:"cli",teamId:r,teamName:i.teamName,developerTeamId:i.developerTeamId,appStoreConnectTeamId:i.appStoreConnectTeamId,providerId:i.providerId,providerName:i.providerName}),o.stop(le.green("Device registered!")),it.info(` ${le.bold("Name:")} ${n}`),it.info(` ${le.bold("UDID:")} ${le.dim(t)}`),r&&it.info(` ${le.bold("Team:")} ${le.dim(r)}`)}catch(s){o.stop(le.red("Failed to register device")),it.error(s.response?.data?.message||s.message)}vi(le.blue("---"))}async function Fy(e={}){let t=hc(e.teamId),n=wi();n.start("Fetching registered devices...");try{let r=(await D.get("/devices",t?{params:{teamId:t}}:void 0)).data.devices||[];if(n.stop(`${r.length} device(s) registered${t?` for team ${t}`:""}`),r.length===0){it.info(le.dim(`No devices registered yet. Run \`${m.nameLower} device register\` to add one.`)),vi(le.blue("---"));return}let o=r.map(s=>{let a=new Date(s.createdAt).toLocaleDateString();return` ${le.bold(s.name.padEnd(24))} ${le.dim(s.udid.padEnd(28))} ${le.dim((s.teamId||"-").padEnd(12))} ${le.cyan((s.addedVia||"-").padEnd(10))} ${le.dim(a)}`});Ty(` ${le.bold("Name".padEnd(24))} ${"UDID".padEnd(28)} ${"Team".padEnd(12)} ${"Via".padEnd(10)} Date
|
|
1843
2088
|
`+o.join(`
|
|
1844
|
-
`),"Registered Devices")}catch(i){n.stop(
|
|
1845
|
-
`),
|
|
1846
|
-
`),
|
|
1847
|
-
`),
|
|
1848
|
-
`),
|
|
1849
|
-
`);/__DEV__/.test(
|
|
1850
|
-
Running expo prebuild for deeper analysis...`));try{
|
|
1851
|
-
Skipping manifest/plist checks \u2014 no android/ios dirs. Use --prebuild to generate them.`)),o;for(let
|
|
2089
|
+
`),"Registered Devices")}catch(i){n.stop(le.red("Failed to fetch devices")),it.error(i.response?.data?.message||i.message)}vi(le.blue("---"))}async function By(e){let t=e.udid,n=yc(e).teamId;if(!t){let o=wi();o.start("Fetching registered devices...");try{let a=(await D.get("/devices",n?{params:{teamId:n}}:void 0)).data.devices||[];if(o.stop(`${a.length} device(s) found`),a.length===0){it.info(le.dim("No devices to remove.")),vi(le.blue("---"));return}let l=await gc({message:"Select device to remove:",options:a.map(c=>({value:c.deviceKey||c.udid,label:c.name,hint:`${c.udid.substring(0,12)}...${c.teamId?` \xB7 ${c.teamId}`:""}`}))});if(Ei(l)){Ii("Cancelled");return}let d=a.find(c=>(c.deviceKey||c.udid)===l);t=d?.udid||l,n=d?.teamId||n}catch(s){o.stop(le.red("Failed to fetch devices")),it.error(s.response?.data?.message||s.message);return}}let i=await xy({message:`Remove device ${le.dim(t.substring(0,12)+"...")}?`});if(Ei(i)||!i){Ii("Cancelled");return}let r=wi();r.start("Removing device...");try{await D.delete(`/devices/${encodeURIComponent(t)}`,n?{params:{teamId:n}}:void 0),r.stop(le.green("Device removed"))}catch(o){r.stop(le.red("Failed to remove device")),it.error(o.response?.data?.message||o.message)}vi(le.blue("---"))}async function Ir(e,t){switch(e){case"register":await Uy(t);break;case"list":await Fy(t);break;case"remove":await By(t);break;default:it.error(`Unknown action: ${e}`)}}import{log as ot,spinner as Kc}from"@clack/prompts";import ht from"chalk";import kr from"path";import Pi from"fs";import Ab from"os";import Eb from"axios";var rt=(o=>(o.CRITICAL="critical",o.HIGH="high",o.MEDIUM="medium",o.LOW="low",o.INFO="info",o))(rt||{}),gt=(l=>(l.PERMISSIONS="permissions",l.SECRETS="secrets",l.DEPENDENCIES="dependencies",l.STORAGE="storage",l.NETWORK="network",l.DEBUG="debug",l.MANIFEST="manifest",l.ATS="ats",l))(gt||{});import{spinner as Lc,log as _i}from"@clack/prompts";import Ye from"chalk";import{execSync as cb}from"child_process";import Mc from"fs";import Uc from"path";import qt from"fs";import $i from"path";import{execSync as jy}from"child_process";var bc={"android.permission.READ_PHONE_STATE":{severity:"high",description:"Can read phone number, IMEI, carrier info"},"android.permission.CALL_PHONE":{severity:"high",description:"Can make calls without user interaction"},"android.permission.SEND_SMS":{severity:"high",description:"Can send SMS without user interaction"},"android.permission.READ_SMS":{severity:"high",description:"Can read user SMS messages"},"android.permission.READ_CONTACTS":{severity:"medium",description:"Can read user contacts"},"android.permission.WRITE_CONTACTS":{severity:"medium",description:"Can modify user contacts"},"android.permission.READ_CALL_LOG":{severity:"high",description:"Can read call history"},"android.permission.CAMERA":{severity:"medium",description:"Camera access"},"android.permission.RECORD_AUDIO":{severity:"medium",description:"Microphone access"},"android.permission.ACCESS_FINE_LOCATION":{severity:"medium",description:"Precise GPS location"},"android.permission.ACCESS_COARSE_LOCATION":{severity:"medium",description:"Approximate location"},"android.permission.ACCESS_BACKGROUND_LOCATION":{severity:"high",description:"Background location tracking"},"android.permission.READ_EXTERNAL_STORAGE":{severity:"medium",description:"Read files on device"},"android.permission.WRITE_EXTERNAL_STORAGE":{severity:"medium",description:"Write files on device"},"android.permission.READ_MEDIA_IMAGES":{severity:"low",description:"Read photos"},"android.permission.READ_MEDIA_VIDEO":{severity:"low",description:"Read videos"},"android.permission.SYSTEM_ALERT_WINDOW":{severity:"high",description:"Draw overlays on other apps"},"android.permission.REQUEST_INSTALL_PACKAGES":{severity:"high",description:"Can install APKs"}},Hy={NSCameraUsageDescription:{severity:"medium",description:"Camera access declared"},NSMicrophoneUsageDescription:{severity:"medium",description:"Microphone access declared"},NSLocationWhenInUseUsageDescription:{severity:"medium",description:"Location (in-use) declared"},NSLocationAlwaysUsageDescription:{severity:"high",description:"Background location declared"},NSContactsUsageDescription:{severity:"medium",description:"Contacts access declared"},NSCalendarsUsageDescription:{severity:"low",description:"Calendar access declared"},NSPhotoLibraryUsageDescription:{severity:"low",description:"Photo library access declared"}};function Vy(e){try{let n=jy("npx expo config --type introspect --json 2>/dev/null",{cwd:e,encoding:"utf-8",timeout:3e4});return JSON.parse(n)}catch{}let t=$i.join(e,"app.json");if(qt.existsSync(t))try{let n=JSON.parse(qt.readFileSync(t,"utf-8"));return n.expo||n}catch{}return null}function Gy(e){let t=[],n=$i.join(e,"node_modules");if(!qt.existsSync(n))return t;let i=/<uses-permission\s+android:name="([^"]+)"/g;function r(o,s){let a=$i.join(o,"android","src","main","AndroidManifest.xml");if(!qt.existsSync(a))return;let l=qt.readFileSync(a,"utf-8"),d;for(;(d=i.exec(l))!==null;)t.push({pkg:s,permission:d[1]});i.lastIndex=0}for(let o of qt.readdirSync(n)){if(o.startsWith("."))continue;let s=$i.join(n,o);if(o.startsWith("@")){if(!qt.statSync(s).isDirectory())continue;for(let a of qt.readdirSync(s))r($i.join(s,a),`${o}/${a}`)}else r(s,o)}return t}async function Sc(e,t){let n=[],i=1,r=Vy(e),o=r?.android?.permissions||[],s=r?.android?.blockedPermissions||[];for(let d of o){let c=bc[d];c&&n.push({id:`PERM-${String(i++).padStart(3,"0")}`,title:`${d.split(".").pop()} declared`,description:c.description,severity:c.severity,category:"permissions",file:"app.config.ts",recommendation:"Remove from permissions if not needed, or add justification."})}let a=Gy(e);for(let{pkg:d,permission:c}of a){let u=bc[c];u&&(s.includes(c)||o.includes(c)||n.push({id:`PERM-${String(i++).padStart(3,"0")}`,title:`${c.split(".").pop()} injected by ${d}`,description:`${u.description}. Auto-injected via ${d} AndroidManifest.xml`,severity:u.severity,category:"permissions",file:`node_modules/${d}/android/src/main/AndroidManifest.xml`,recommendation:`Add "${c}" to blockedPermissions if not needed.`,autoFixable:!0}))}let l=r?.ios?.infoPlist||{};for(let[d,c]of Object.entries(Hy))d in l&&n.push({id:`PERM-${String(i++).padStart(3,"0")}`,title:`iOS: ${d} declared`,description:c.description,severity:c.severity,category:"permissions",file:"app.config.ts",recommendation:`Remove ${d} from infoPlist if the app does not use this capability.`});return{category:"permissions",label:"Permission Audit",findings:n,durationMs:0}}import ms from"fs";import wr from"path";var zy=[{id:"SEC-001",pattern:/(['"`])(?:sk|pk)_(?:live|test)_[a-zA-Z0-9]{20,}\1/g,severity:"critical",label:"Stripe API Key"},{id:"SEC-002",pattern:/(['"`])AIza[0-9A-Za-z\-_]{35}\1/g,severity:"high",label:"Google API Key"},{id:"SEC-003",pattern:/(['"`])AKIA[0-9A-Z]{16}\1/g,severity:"critical",label:"AWS Access Key ID"},{id:"SEC-004",pattern:/-----BEGIN (?:RSA |EC )?PRIVATE KEY-----/g,severity:"critical",label:"Private key in source"},{id:"SEC-005",pattern:/(?:ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9_]{36,}/g,severity:"high",label:"GitHub Token"},{id:"SEC-006",pattern:/xox[bpors]-[a-zA-Z0-9-]{10,}/g,severity:"high",label:"Slack Token"},{id:"SEC-007",pattern:/(?:password|secret|apikey|api_key)\s*[:=]\s*['"`][^'"`\n]{8,}['"`]/gi,severity:"high",label:"Hardcoded credential"}],Ky=new Set([".ts",".tsx",".js",".jsx"]),Wy=new Set(["node_modules",".expo",".git","android","ios","dist","build","__tests__","__mocks__"]);function Ac(e){let t=[],n=ms.readdirSync(e,{withFileTypes:!0});for(let i of n){if(Wy.has(i.name))continue;let r=wr.join(e,i.name);i.isDirectory()?t.push(...Ac(r)):Ky.has(wr.extname(i.name))&&t.push(r)}return t}function Jy(e){let t=e.trim();return t.startsWith("//")||t.startsWith("*")||t.startsWith("/*")}function qy(e){return/process\.env\./i.test(e)||/import\.meta\.env/i.test(e)}async function Ec(e,t){let n=[],i=wr.join(e,"src"),r=ms.existsSync(i)?i:e,o=Ac(r);for(let s of o){let l=ms.readFileSync(s,"utf-8").split(`
|
|
2090
|
+
`),d=wr.relative(e,s);for(let c=0;c<l.length;c++){let u=l[c];if(!Jy(u)&&!qy(u))for(let{id:f,pattern:p,severity:y,label:g}of zy)p.lastIndex=0,p.test(u)&&n.push({id:f,title:g,description:`Potential ${g.toLowerCase()} found in source code`,severity:y,category:"secrets",file:d,line:c+1,recommendation:`Move to environment variables or a secrets manager. Use \`${m.nameLower} env set\` for managed secrets.`})}}return{category:"secrets",label:"Secrets Detection",findings:n,durationMs:0}}import{execSync as Yy}from"child_process";var Xy={critical:"critical",high:"high",moderate:"medium",low:"low",info:"info"};async function Ic(e,t){let n=[],i=1,r;try{r=Yy("npm audit --json 2>/dev/null",{cwd:e,encoding:"utf-8",timeout:6e4})}catch(a){if(r=a.stdout||"",!r)return{category:"dependencies",label:"Dependency CVEs",findings:[],durationMs:0,error:"Failed to run npm audit. Ensure npm is available and dependencies are installed."}}let o;try{o=JSON.parse(r)}catch{return{category:"dependencies",label:"Dependency CVEs",findings:[],durationMs:0,error:"Failed to parse npm audit output."}}let s=o.vulnerabilities||{};for(let[a,l]of Object.entries(s)){let d=Xy[l.severity]||"info",c=Array.isArray(l.via)?l.via.map(u=>typeof u=="string"?u:u.title||u.name).join(", "):String(l.via);n.push({id:`DEP-${String(i++).padStart(3,"0")}`,title:`${a} \u2014 ${l.severity}`,description:`Via: ${c}. Range: ${l.range||"unknown"}`,severity:d,category:"dependencies",recommendation:l.fixAvailable?`Run \`npm audit fix\` or update ${a} to a patched version.`:"No fix available yet. Monitor for updates or evaluate alternatives.",autoFixable:!!l.fixAvailable})}return{category:"dependencies",label:"Dependency CVEs",findings:n,durationMs:0}}import vr from"fs";import $r from"path";var Zy=/(?:token|password|credential|secret|apiKey|api_key|session|auth|jwt|refresh_token|access_token|private_key|pin|otp)/i,wc=/AsyncStorage\s*\.\s*(?:setItem|mergeItem)\s*\(\s*['"`]([^'"`]+)['"`]/g,Qy=/from\s+['"]@react-native-async-storage\/async-storage['"]|from\s+['"]react-native['"].*AsyncStorage/,eb=new Set([".ts",".tsx",".js",".jsx"]),tb=new Set(["node_modules",".expo",".git","android","ios","dist","build"]);function vc(e){let t=[];if(!vr.existsSync(e))return t;let n=vr.readdirSync(e,{withFileTypes:!0});for(let i of n){if(tb.has(i.name))continue;let r=$r.join(e,i.name);i.isDirectory()?t.push(...vc(r)):eb.has($r.extname(i.name))&&t.push(r)}return t}async function $c(e,t){let n=[],i=1,r=$r.join(e,"src"),o=vr.existsSync(r)?r:e,s=vc(o);for(let a of s){let l=vr.readFileSync(a,"utf-8");if(!Qy.test(l))continue;let d=l.split(`
|
|
2091
|
+
`),c=$r.relative(e,a);for(let u=0;u<d.length;u++){let f=d[u];wc.lastIndex=0;let p;for(;(p=wc.exec(f))!==null;){let y=p[1];Zy.test(y)&&n.push({id:`STOR-${String(i++).padStart(3,"0")}`,title:`AsyncStorage used for "${y}"`,description:`Sensitive data key "${y}" stored in AsyncStorage (unencrypted).`,severity:"high",category:"storage",file:c,line:u+1,recommendation:"Use expo-secure-store (SecureStore) for sensitive data instead of AsyncStorage."})}}}return{category:"storage",label:"Insecure Storage",findings:n,durationMs:0}}import _r from"fs";import Pr from"path";var _c=/['"`](http:\/\/(?!localhost|127\.0\.0\.1|10\.|192\.168\.|0\.0\.0\.0|172\.(?:1[6-9]|2\d|3[01])\.)[^'"`\s]+)['"`]/g,nb=/\/api\/|\/v[0-9]+\/|\/graphql|\/rest\//i,ib=new Set([".ts",".tsx",".js",".jsx"]),rb=new Set(["node_modules",".expo",".git","android","ios","dist","build","__tests__","__mocks__"]);function Pc(e){let t=[];if(!_r.existsSync(e))return t;let n=_r.readdirSync(e,{withFileTypes:!0});for(let i of n){if(rb.has(i.name))continue;let r=Pr.join(e,i.name);i.isDirectory()?t.push(...Pc(r)):ib.has(Pr.extname(i.name))&&t.push(r)}return t}async function Rc(e,t){let n=[],i=1,r=Pr.join(e,"src"),o=_r.existsSync(r)?r:e,s=Pc(o);for(let a of s){let d=_r.readFileSync(a,"utf-8").split(`
|
|
2092
|
+
`),c=Pr.relative(e,a);for(let u=0;u<d.length;u++){let f=d[u],p=f.trim();if(p.startsWith("//")||p.startsWith("*"))continue;_c.lastIndex=0;let y;for(;(y=_c.exec(f))!==null;){let g=y[1],h=nb.test(g);n.push({id:`NET-${String(i++).padStart(3,"0")}`,title:`Insecure HTTP URL${h?" (API endpoint)":""}`,description:`Plain HTTP URL found: ${g}`,severity:h?"high":"medium",category:"network",file:c,line:u+1,recommendation:"Use HTTPS instead of HTTP for all network requests."})}}}return{category:"network",label:"HTTP URLs",findings:n,durationMs:0}}import Rr from"fs";import Cr from"path";var Cc=/(?:debug|debugMode|devMode|enableDebug)\s*[:=]\s*true/gi,Oc=/console\.(?:log|warn|info|debug)\s*\([^)]*(?:token|password|secret|credential|key|auth)/gi,ob=new Set([".ts",".tsx",".js",".jsx"]),sb=new Set(["node_modules",".expo",".git","android","ios","dist","build","__tests__","__mocks__"]);function Dc(e){let t=[];if(!Rr.existsSync(e))return t;let n=Rr.readdirSync(e,{withFileTypes:!0});for(let i of n){if(sb.has(i.name))continue;let r=Cr.join(e,i.name);i.isDirectory()?t.push(...Dc(r)):ob.has(Cr.extname(i.name))&&t.push(r)}return t}async function kc(e,t){let n=[],i=1,r=Cr.join(e,"src"),o=Rr.existsSync(r)?r:e,s=Dc(o);for(let a of s){let d=Rr.readFileSync(a,"utf-8").split(`
|
|
2093
|
+
`),c=Cr.relative(e,a);for(let u=0;u<d.length;u++){let f=d[u],p=f.trim();if(!(p.startsWith("//")||p.startsWith("*"))&&(Cc.lastIndex=0,Cc.test(f)&&n.push({id:`DBG-${String(i++).padStart(3,"0")}`,title:"Hardcoded debug flag",description:"Debug/dev mode enabled in source code",severity:"medium",category:"debug",file:c,line:u+1,recommendation:"Use __DEV__ or environment variables instead of hardcoded debug flags."}),Oc.lastIndex=0,Oc.test(f))){let y=d.slice(Math.max(0,u-3),u).join(`
|
|
2094
|
+
`);/__DEV__/.test(y)||n.push({id:`DBG-${String(i++).padStart(3,"0")}`,title:"Sensitive data in console log",description:"Console log may expose sensitive data (token, password, etc.) in production",severity:"medium",category:"debug",file:c,line:u+1,recommendation:"Wrap in __DEV__ check or remove sensitive data from console output."})}}}return{category:"debug",label:"Debug/Dev Flags",findings:n,durationMs:0}}import Nc from"fs";import gs from"path";var ab=new Set(["androidx.work.impl.background.systemjob.SystemJobService","androidx.work.impl.diagnostics.DiagnosticsReceiver","com.google.firebase.iid.FirebaseInstanceIdReceiver","com.google.android.gms.auth.api.signin.RevocationBoundService","androidx.profileinstaller.ProfileInstallReceiver","com.google.firebase.messaging.FirebaseMessagingService","com.google.android.gms.measurement.AppMeasurementService","com.google.android.gms.measurement.AppMeasurementJobService"]);function lb(e){let t=[gs.join(e,"android","app","src","main","AndroidManifest.xml"),gs.join(e,"android","AndroidManifest.xml")];for(let n of t)if(Nc.existsSync(n))return n;return null}async function xc(e,t){let n=[],i=1,r=lb(e);if(!r)return{category:"manifest",label:"Android Manifest",findings:[],durationMs:0,error:"No AndroidManifest.xml found. Run with --prebuild or run `expo prebuild` first."};let o=Nc.readFileSync(r,"utf-8"),s=gs.relative(e,r),a=/<(activity|service|receiver|provider)\s+([^>]*?)(?:\/>|>)/gs,l;for(;(l=a.exec(o))!==null;){let d=l[1],c=l[2],f=c.match(/android:name="([^"]+)"/)?.[1]||"unknown";if(ab.has(f))continue;let p=/android:exported="true"/.test(c),y=/android:permission="/.test(c);p&&!y&&n.push({id:`MAN-${String(i++).padStart(3,"0")}`,title:`Exported ${d}: ${f.split(".").pop()}`,description:`${f} is exported=true without android:permission protection`,severity:"medium",category:"manifest",file:s,recommendation:'Set android:exported="false" or add an android:permission attribute.'})}return/android:allowBackup="true"/.test(o)&&n.push({id:`MAN-${String(i++).padStart(3,"0")}`,title:"allowBackup is enabled",description:'android:allowBackup="true" allows data extraction via ADB backup',severity:"medium",category:"manifest",file:s,recommendation:'Set android:allowBackup="false" via expo-build-properties plugin.',autoFixable:!0}),/android:debuggable="true"/.test(o)&&n.push({id:`MAN-${String(i++).padStart(3,"0")}`,title:"App is debuggable",description:'android:debuggable="true" allows attaching a debugger in production',severity:"critical",category:"manifest",file:s,recommendation:"Ensure debuggable is false for production builds. This is usually set automatically for release builds."}),{category:"manifest",label:"Android Manifest",findings:n,durationMs:0}}import Or from"fs";import hs from"path";function db(e){let t=hs.join(e,"ios");if(!Or.existsSync(t))return null;let n=Or.readdirSync(t,{withFileTypes:!0});for(let i of n){if(!i.isDirectory()||i.name==="Pods"||i.name.startsWith("."))continue;let r=hs.join(t,i.name,"Info.plist");if(Or.existsSync(r))return r}return null}async function Tc(e,t){let n=[],i=1,r=db(e);if(!r)return{category:"ats",label:"iOS ATS Config",findings:[],durationMs:0,error:"No Info.plist found. Run with --prebuild or run `expo prebuild` first."};let o=Or.readFileSync(r,"utf-8"),s=hs.relative(e,r),a=o.match(/<key>NSAppTransportSecurity<\/key>\s*<dict>([\s\S]*?)<\/dict>/);if(a){let l=a[1];/<key>NSAllowsArbitraryLoads<\/key>\s*<true\s*\/>/.test(l)&&n.push({id:`ATS-${String(i++).padStart(3,"0")}`,title:"ATS disabled \u2014 NSAllowsArbitraryLoads",description:"App Transport Security is completely disabled. All HTTP connections are allowed.",severity:"critical",category:"ats",file:s,recommendation:"Remove NSAllowsArbitraryLoads or set to false. Use domain-specific exceptions only if absolutely necessary."});let d=l.match(/<key>NSExceptionDomains<\/key>\s*<dict>([\s\S]*?)<\/dict>/);if(d){let c=d[1].match(/<key>([^<]+)<\/key>/g);if(c)for(let u of c){let f=u.replace(/<\/?key>/g,"");f!=="NSExceptionDomains"&&n.push({id:`ATS-${String(i++).padStart(3,"0")}`,title:`ATS exception: ${f}`,description:`ATS exception configured for ${f}`,severity:"low",category:"ats",file:s,recommendation:`Verify that the ATS exception for ${f} is necessary. Use HTTPS where possible.`})}}}return{category:"ats",label:"iOS ATS Config",findings:n,durationMs:0}}var ub=[{category:"permissions",label:"Permission Audit",fn:Sc,requiresPrebuild:!1},{category:"secrets",label:"Secrets Detection",fn:Ec,requiresPrebuild:!1},{category:"dependencies",label:"Dependency CVEs",fn:Ic,requiresPrebuild:!1},{category:"storage",label:"Insecure Storage",fn:$c,requiresPrebuild:!1},{category:"network",label:"HTTP URLs",fn:Rc,requiresPrebuild:!1},{category:"debug",label:"Debug/Dev Flags",fn:kc,requiresPrebuild:!1},{category:"manifest",label:"Android Manifest",fn:xc,requiresPrebuild:!0},{category:"ats",label:"iOS ATS Config",fn:Tc,requiresPrebuild:!0}];async function Fc(e,t){let n=ub;t.category&&(n=n.filter(s=>s.category===t.category),n.length===0&&(_i.error(Ye.red(`Unknown category: ${t.category}`)),_i.info(Ye.dim(`Available: ${Object.values(gt).join(", ")}`)),process.exit(1)));let i=n.filter(s=>!s.requiresPrebuild),r=n.filter(s=>s.requiresPrebuild),o=[];for(let s of i){let a=Lc();a.start(Ye.dim(`Running ${s.label}...`));try{let l=Date.now(),d=await s.fn(e,t);d.durationMs=Date.now()-l,o.push(d);let c=d.findings.length;a.stop(c>0?Ye.yellow(`${s.label} \u2014 ${c} finding(s)`):Ye.green(`${s.label} \u2014 clean`))}catch(l){a.stop(Ye.red(`${s.label} \u2014 error`)),o.push({category:s.category,label:s.label,findings:[],durationMs:0,error:l.message})}}if(r.length>0){let s=Uc.join(e,"android"),a=Uc.join(e,"ios"),l=Mc.existsSync(s)||Mc.existsSync(a);if(!l&&t.prebuild){t.json||_i.info(Ye.dim(`
|
|
2095
|
+
Running expo prebuild for deeper analysis...`));try{cb("npx expo prebuild --no-install",{cwd:e,stdio:"pipe"})}catch{return _i.warn(Ye.yellow("Prebuild failed \u2014 skipping manifest/plist checks.")),o}}else if(!l)return t.json||_i.info(Ye.dim(`
|
|
2096
|
+
Skipping manifest/plist checks \u2014 no android/ios dirs. Use --prebuild to generate them.`)),o;for(let d of r){let c=Lc();c.start(Ye.dim(`Running ${d.label}...`));try{let u=Date.now(),f=await d.fn(e,t);f.durationMs=Date.now()-u,o.push(f);let p=f.findings.length;c.stop(p>0?Ye.yellow(`${d.label} \u2014 ${p} finding(s)`):Ye.green(`${d.label} \u2014 clean`))}catch(u){c.stop(Ye.red(`${d.label} \u2014 error`)),o.push({category:d.category,label:d.label,findings:[],durationMs:0,error:u.message})}}}return o}import De from"chalk";import{log as Pe}from"@clack/prompts";var Cn={critical:De.bgRed.white.bold,high:De.red.bold,medium:De.yellow.bold,low:De.blue,info:De.dim},Dr={critical:0,high:1,medium:2,low:3,info:4};function pb(e,t){if(!t)return!0;let n=Dr[t];return n===void 0?!0:Dr[e]<=n}function Bc(e,t){let n=0,i={critical:0,high:0,medium:0,low:0,info:0};for(let s of e){let a=s.findings.filter(d=>pb(d.severity,t));if(a.length===0&&!s.error)continue;if(Pe.info(""),Pe.info(De.bold(` ${s.label}`)+De.dim(` ${a.length} finding(s)`)),Pe.info(De.dim(" "+"\u2500".repeat(60))),s.error){Pe.error(De.red(` Error: ${s.error}`));continue}let l=[...a].sort((d,c)=>Dr[d.severity]-Dr[c.severity]);for(let d of l){let c=Cn[d.severity](` ${d.severity.toUpperCase()} `);Pe.info(` ${c} ${De.bold(d.id)} ${d.title}`),Pe.info(De.dim(` ${d.description}`)),d.file&&Pe.info(De.dim(` File: ${d.file}${d.line?`:${d.line}`:""}`)),Pe.info(De.cyan(` Fix: ${d.recommendation}`)),Pe.info(""),i[d.severity]++,n++}}Pe.info(""),Pe.info(De.bold(" Summary")),Pe.info(De.dim(" "+"\u2500".repeat(60))),Pe.info(` Total: ${De.bold(String(n))} finding(s)`),Pe.info(` ${Cn.critical(` ${i.critical} Critical `)} ${Cn.high(` ${i.high} High `)} ${Cn.medium(` ${i.medium} Medium `)} ${Cn.low(` ${i.low} Low `)} ${Cn.info(` ${i.info} Info `)}`);let r=i.critical>0,o=i.high>0;r||o?(Pe.info(""),Pe.error(De.red.bold(` FAIL \u2014 ${i.critical} critical, ${i.high} high issue(s) found`))):n>0?(Pe.info(""),Pe.warn(De.yellow(" PASS (with warnings) \u2014 no critical or high issues"))):(Pe.info(""),Pe.success(De.green.bold(" PASS \u2014 no issues found")))}function jc(e,t){let n=e.flatMap(r=>r.findings),i={};for(let r of Object.values(rt))i[r]=n.filter(o=>o.severity===r).length;return{version:"1.0.0",timestamp:new Date().toISOString(),project:t.name||"unknown",projectVersion:t.version||"0.0.0",summary:{total:n.length,...i},passed:i.critical===0&&i.high===0,checks:e.map(r=>({category:r.category,label:r.label,findingCount:r.findings.length,durationMs:r.durationMs,error:r.error||null})),findings:n}}import{log as Re,spinner as fb}from"@clack/prompts";import Ee from"chalk";import Nt from"fs";import mb from"os";import On from"path";import{execSync as gb}from"child_process";var Hc=16384,hb=1,yb=Buffer.from([127,69,76,70]);async function Vc(e){Re.info(Ee.bold.underline("16KB Page Alignment Check")),console.log("");let t=On.resolve(e);if(!Nt.existsSync(t))return Re.error(Ee.red(`APK file not found: ${t}`)),!1;if(!t.endsWith(".apk"))return Re.error(Ee.red("The provided file is not an APK file.")),!1;let n=fb();n.start("Extracting and analyzing native libraries...");let i=Nt.mkdtempSync(On.join(mb.tmpdir(),"mach-16kb-"));try{try{gb(`unzip -o -q "${t}" "lib/arm64-v8a/*.so" "lib/x86_64/*.so" -d "${i}" 2>/dev/null`,{encoding:"utf-8",maxBuffer:50*1024*1024})}catch{}let r=Gc(On.join(i,"lib"));if(r.length===0)return n.stop("Analysis complete."),Re.info(Ee.yellow("No arm64-v8a or x86_64 native libraries found in the APK.")),Re.info(Ee.dim("16KB alignment check only applies to arm64-v8a and x86_64 architectures.")),!0;let o=[];for(let l of r){let d=On.relative(i,l),c=Sb(d),u=On.basename(l),f=bb(l);f!==null&&o.push({name:u,filePath:d,arch:c,align:f,compatible:f>=Hc})}if(n.stop("Analysis complete."),o.length===0)return Re.info(Ee.yellow("No valid ELF shared libraries found.")),!0;let s=o.filter(l=>!l.compatible),a=o.filter(l=>l.compatible);if(Re.info(Ee.dim(`Checked ${o.length} native librar${o.length===1?"y":"ies"}
|
|
1852
2097
|
`)),s.length>0){Re.info(Ee.red.bold(`Incompatible libraries:
|
|
1853
|
-
`));for(let a of s)Re.error(Ee.red(`${Ee.bold(a.name)} ${Ee.dim(`(${a.arch})`)}`)),Re.info(Ee.dim(` PT_LOAD alignment: 2**${Math.log2(a.align)} (${a.align} bytes, needs 2**14 = ${gd})`))}return l.length>0&&(console.log(""),Re.success(Ee.green(`${l.length} librar${l.length===1?"y":"ies"} correctly aligned (2**14 or higher).`))),console.log(""),s.length===0?(Re.success(Ee.green.bold("ELF Verification Successful. APK is 16KB compatible.")),!0):(Re.error(Ee.red.bold(`Found ${s.length} unaligned lib${s.length===1?"":"s"} (arm64-v8a/x86_64 libs need to be aligned).`)),console.log(""),Re.info(Ee.yellow("To fix this:")),Re.info(Ee.dim(" 1. Rebuild with NDK r28+ which defaults to 16KB page alignment")),Re.info(Ee.dim(" 2. Or set -DANDROID_SUPPORT_FLEXIBLE_PAGE_SIZES=ON in CMake")),Re.info(Ee.dim(" 3. Update third-party libraries that ship prebuilt .so files")),Re.info(Ee.dim(" 4. After rebuilding: zipalign -p -f -v 16 input.apk output.apk")),console.log(""),Re.info(Ee.dim("Reference: https://developer.android.com/guide/practices/page-sizes")),!1)}catch(r){return n.stop("Analysis failed."),Re.error(Ee.red(`Failed to analyze APK: ${r.message}`)),!1}finally{try{Ot.rmSync(i,{recursive:!0,force:!0})}catch{}}}function Ry(e){let t=Ot.openSync(e,"r");try{let n=Buffer.alloc(64);if(Ot.readSync(t,n,0,64,0),!n.subarray(0,4).equals(Py))return null;let i=n[4]===2,r=n[5]===1,o=(p,f)=>r?p.readUInt16LE(f):p.readUInt16BE(f),s=(p,f)=>r?p.readUInt32LE(f):p.readUInt32BE(f),l=(p,f)=>Number(r?p.readBigUInt64LE(f):p.readBigUInt64BE(f)),a,c,u;i?(a=l(n,32),c=o(n,54),u=o(n,56)):(a=s(n,28),c=o(n,42),u=o(n,44));let d=null;for(let p=0;p<u;p++){let f=Buffer.alloc(c);if(Ot.readSync(t,f,0,c,a+p*c),s(f,0)!==_y)continue;let h;i?h=l(f,48):h=s(f,28),h>0&&(d===null||h<d)&&(d=h)}return d??0}catch{return null}finally{Ot.closeSync(t)}}function yd(e){let t=[];if(!Ot.existsSync(e))return t;let n=Ot.readdirSync(e,{withFileTypes:!0});for(let i of n){let r=$n.join(e,i.name);i.isDirectory()?t.push(...yd(r)):i.name.endsWith(".so")&&t.push(r)}return t}function Oy(e){return e.includes("arm64-v8a")?"arm64-v8a":e.includes("x86_64")?"x86_64":"unknown"}var Ad=async e=>{if(Ue()||(it.error(ft.red(`You are not logged in. Run \`${m.nameLower} login\` first.`)),process.exit(1)),e.apk){await ky(e);return}let n=process.cwd(),i=Ar.join(n,"package.json");gi.existsSync(i)||(it.error(ft.red("No package.json found. Run this command from a project root.")),process.exit(1));let r=JSON.parse(gi.readFileSync(i,"utf-8")),o=!!(r.dependencies?.expo||r.devDependencies?.expo);e.json||(it.info(ft.dim(`Project: ${r.name||"unknown"} v${r.version||"0.0.0"}`)),it.info(ft.dim(`Type: ${o?"Expo":"Bare React Native"}`)),it.info(""));let s={json:e.json,fix:e.fix,category:e.category,severity:e.severity,prebuild:e.prebuild},l=await pd(n,s);e.json?console.log(JSON.stringify(md(l,r),null,2)):fd(l,e.severity);let a=l.some(u=>u.findings.some(d=>d.severity==="critical")),c=l.some(u=>u.findings.some(d=>d.severity==="high"));(a||c)&&process.exit(1)},Sd=["16kb"];async function ky(e){let t=e.category?.toLowerCase();t&&!Sd.includes(t)&&(it.error(ft.red(`Unknown APK check category: "${t}"`)),it.info(ft.dim(`Available APK checks: ${Sd.join(", ")}`)),process.exit(1));let n=await xy(e.apk);n||process.exit(1);let i=!t,r=!1;(i||t==="16kb")&&(await hd(n)||(r=!0)),r&&process.exit(1)}async function xy(e){if(e.startsWith("build:")){let n=e.slice(6);return await Ny(n)}if(e.startsWith("http://")||e.startsWith("https://"))return await Ed(e);let t=Ar.resolve(e);return gi.existsSync(t)?t:(it.error(ft.red(`APK file not found: ${t}`)),null)}async function Ny(e){let t=bd();t.start(`Fetching APK from build ${e}...`);try{let n=await O.get(`/build/${e}`);if(n.data.status!=="success")throw new Error(n.data.message);let i=n.data.build;if(!i)throw new Error("Build not found");let r=i.artifacts?.find(o=>o.type?o.type==="apk":o.name?.endsWith(".apk")||o.url?.includes(".apk"));return!r||!r.url?(t.stop("No APK artifact found"),it.error(ft.red("This build does not have an APK artifact.")),it.info(ft.dim("Make sure the build produced an APK (not just an AAB).")),null):(t.stop(`Found build: ${i.buildId||e}`),await Ed(r.url))}catch(n){return t.stop("Failed to fetch build"),it.error(ft.red(n.message)),null}}async function Ed(e){let t=bd();t.start("Downloading APK...");try{let n=gi.mkdtempSync(Ar.join(Cy.tmpdir(),`${m.nameLower}-audit-`)),i=Ar.join(n,"app.apk"),r=await Dy.get(e,{responseType:"arraybuffer"});gi.writeFileSync(i,r.data);let o=(r.data.length/(1024*1024)).toFixed(1);return t.stop(`Downloaded APK (${o} MB)`),i}catch(n){return t.stop("Download failed"),it.error(ft.red(`Failed to download APK: ${n.message}`)),null}}var My=console.log;console.log=()=>{};Ly();console.log=My;fe(ce.bgCyan.black(m.cliTag("Production Build Orchestrator")));var hi=(e,t=[])=>t.concat(e),J=new Ty;J.name(m.nameLower).description(`${m.name} CLI: Powerful Cloud Infrastructure Tools`).version(ht).option("-y, --yes","Automatically answer yes to all prompts",!1).option("--quiet","Suppress non-essential output",!1);J.command("agent").description("Manage local device discovery agent for the Install Hub (port 7070)").argument("[action]","start, run, install, status, restart, stop, or uninstall","start").action(async e=>{await El(e)});J.command("host").description("Setup AWS S3 static hosting and CloudFront").action(async()=>{fe(ce.bgCyan.black(m.cliTag("Hosting"))),await cs()});J.command("sitemap").description("Generate sitemap.xml from Expo Router app structure").option("-o, --output <path>","Output path for sitemap.xml","./public/sitemap.xml").action(async e=>{fe(ce.bgCyan.black(m.cliTag("Sitemap Generator"))),await fs(e)});J.command("build").description("Run a build on a cloud provider (AWS Spot Instances)").argument("[platform]","Target platform (android, ios)").option("--platform <os>","Target platform alias (android, ios) [Optional]").option("--repo <url>","Git Repository URL").option("--branch <name>","Git Branch").option("--ami <id>","AMI ID").option("--bucket <name>","S3 Bucket for artifacts").option("--region <region>","AWS Region").option("--aws-profile <name>","AWS Credentials Profile").option("-p, --build-profile <name>","Build Profile (e.g. production, staging)").option("--profile <name>","Build Profile (alias for --build-profile)").option("--dry-run","Generate User Data script without launching").option("--keep-instance","Do not terminate the instance after build").option("--subnet <id>","VPC Subnet ID to launch the instance in").option("--security-group <id>","VPC Security Group ID to use").option("--ssh-host <host>","Remote host for iOS build (SSH)").option("--ssh-user <user>","SSH username for remote host").option("--ssh-key <path>","Path to private SSH key for remote host").option("--ios-scheme <scheme>","iOS Scheme to build").option("--ios-team-id <id>","Apple Development Team ID").option("--ios-configuration <config>","Xcode configuration (Release/Debug)").option("--ios-export-method <method>","Export method (ad-hoc, app-store, development, enterprise)").option("--ios-api-key-id <id>","App Store Connect API Key ID").option("--ios-api-key-issuer <id>","App Store Connect API Key Issuer ID").option("--ios-api-key-path <path>","Path to App Store Connect API Key (.p8) file").option("--simulator","Build for iOS Simulator (no signing required)").addOption(new rt("--build-id <id>","Internal build ID").hideHelp()).addOption(new rt("--project-id <id>","Internal project ID").hideHelp()).addOption(new rt("--fail-only","Internal: mark an existing build failed").hideHelp()).addOption(new rt("--error <message>","Internal failure message").hideHelp()).option("--local","Run build on local machine").option("--auto-version","Assign the next Android versionCode or iOS buildNumber from Mach").option("--auto-submit","Submit this build after it completes successfully").option("--submit-track <track>","Google Play track to use with --auto-submit").option("--submit-release-status <status>","Google Play release status to use with --auto-submit").option("--submit-rollout <fraction>","Google Play staged rollout fraction to use with --auto-submit").option("--submit-changes-not-sent-for-review","Commit Google Play changes without automatically sending them for review when using --auto-submit").option("--submit-credential-id <id>","Service credential ID to use with --auto-submit").option("--submit-json-output <path>","Write auto-submit metadata JSON to a file for CI/CD").option("--verbose","Enable verbose logging").option("--json-output <path>","Write build metadata JSON to a file for CI/CD").option("--maestro","Queue a managed Maestro test run after a successful build").option("--maestro-flows <path>","Maestro flow file or directory (default: .maestro)").option("--maestro-device <device>","iOS simulator model or identifier (default: iPhone 17 Pro; managed Android uses Pixel 6)").option("--maestro-retries <n>","Retries for the Maestro run","1").option("--maestro-record","Enable screen recording where supported").option("--maestro-use-build-source","Use Maestro flows from the build source snapshot instead of uploading local flows").option("--maestro-env <name>","Forward an environment variable to the managed Maestro runner; repeat or comma-separate names",hi,[]).option("-y, --yes","Automatically answer yes to all prompts",!1).option("--quiet","Suppress non-essential output",!1).action(async(e,t)=>{let n=J.opts();t.yes=t.yes||n.yes,t.quiet=t.quiet||n.quiet,t.platform=e||t.platform,t.buildProfile=t.profile||t.buildProfile,t.quiet||fe(ce.bgCyan.black(m.cliTag("Cloud Build"))),await Ni(t)});J.command("maestro").description("Run Maestro tests locally or with the managed Mach runner").option("--platform <os>","Target platform (android/ios)").option("-p, --profile <name>","Build profile to resolve when using --latest","production").option("--latest","Use the latest successful build for the platform/profile").option("--build-id <id>","Use a specific Mach build ID").option("--build-url <url>","Use a Mach build URL").option("--artifact-url <url>","Use a direct APK or iOS simulator app artifact URL").option("--local","Run Maestro on a connected local emulator/device instead of the managed runner").option("--maestro-flows <path>","Maestro flow file or directory (default: .maestro)").option("--maestro-device <device>","iOS simulator model or identifier (default: iPhone 17 Pro; managed Android uses Pixel 6)").option("--maestro-retries <n>","Retries for the Maestro run","1").option("--maestro-record","Enable screen recording where supported").option("--maestro-use-build-source","Use Maestro flows from the build source snapshot instead of uploading local flows").option("--maestro-env <name>","Forward an environment variable to the managed Maestro runner; repeat or comma-separate names",hi,[]).option("--wait","Wait for managed Maestro completion and exit non-zero on failure").option("--wait-timeout <minutes>","Maximum minutes to wait for managed Maestro completion","60").option("--wait-interval <seconds>","Polling interval while waiting for managed Maestro completion","15").option("--json-output <path>","Write test run metadata JSON to a file for CI/CD").addOption(new rt("--local-runner","Internal: execute a managed Maestro run on this machine").hideHelp()).addOption(new rt("--test-run-id <id>","Internal test run ID").hideHelp()).addOption(new rt("--project-id <id>","Internal project ID").hideHelp()).addOption(new rt("--runner-token <token>","Internal runner token").hideHelp()).action(async e=>{fe(ce.bgCyan.black(m.cliTag("Maestro Testing"))),await ra(e)});var _n=e=>e.option("--platform <os>","Target platform: ios, android, or all","all").option("--channel <name>","OTA channel (for example: production, staging)").option("--branch <name>","Alias for --channel").option("--runtime-version <version>","Runtime version override").option("--message <text>","Release note/message for this OTA update").option("--framework <name>","Framework override: expo or react-native").option("--engine <name>","OTA engine override (currently expo-updates)").option("--url <url>","Mach OTA update URL override").option("--install-plugin","Install @radhya/mach locally for the Expo config plugin").option("--skip-install","Do not install local Expo plugin dependency").option("--update-id <id>","OTA update id for rollback/promote").option("--json","Print JSON output"),Pn=J.command("ota").description("Setup, publish, verify, and manage Mach OTA updates");_n(Pn.command("setup").description("Configure OTA for this project")).action(async e=>{let t=J.opts();fe(ce.bgCyan.black(m.cliTag("OTA Setup"))),await jt("setup",{...e,yes:e.yes||t.yes})});_n(Pn.command("publish").description("Publish an OTA update")).action(async e=>{let t=J.opts();fe(ce.bgCyan.black(m.cliTag("OTA Publish"))),await jt("publish",{...e,yes:e.yes||t.yes})});_n(Pn.command("verify").description("Verify OTA configuration")).action(async e=>{let t=J.opts();fe(ce.bgCyan.black(m.cliTag("OTA Verify"))),await jt("verify",{...e,yes:e.yes||t.yes})});_n(Pn.command("list").description("List OTA updates for the linked project")).action(async e=>{let t=J.opts();fe(ce.bgCyan.black(m.cliTag("OTA Updates"))),await jt("list",{...e,yes:e.yes||t.yes})});_n(Pn.command("rollback").description("Roll back an OTA update")).action(async e=>{let t=J.opts();fe(ce.bgCyan.black(m.cliTag("OTA Rollback"))),await jt("rollback",{...e,yes:e.yes||t.yes})});_n(Pn.command("promote").description("Promote an OTA update")).action(async e=>{let t=J.opts();fe(ce.bgCyan.black(m.cliTag("OTA Promote"))),await jt("promote",{...e,yes:e.yes||t.yes})});J.command("submit").description("Automated Store Submission (App Store / Google Play)").option("--platform <os>","Target platform (ios/android)").option("-p, --profile <name>","Build/submission profile to submit from (e.g. production, preprod)").option("--track <track>","Google Play Track (internal, alpha, beta, production)").option("--release-status <status>","Google Play release status (completed, draft, halted, inProgress)").option("--rollout <fraction>","Google Play staged rollout fraction for inProgress releases (example: 0.1)").option("--changes-not-sent-for-review","Commit Google Play changes without automatically sending them for review").option("--ssh-host <host>","Remote macOS host for iOS submission").option("--ssh-user <user>","SSH username for remote iOS submission").option("--ssh-key <path>","Path to private SSH key for remote iOS submission").option("--credential-id <id>","Service credential ID to use when multiple submission credentials exist").option("--local","Run submission on this machine (internal runner mode for iOS)").addOption(new rt("--submit-id <id>","Internal submission ID").hideHelp()).addOption(new rt("--project-id <id>","Internal project ID").hideHelp()).addOption(new rt("--package-name <name>","Internal Android package name").hideHelp()).addOption(new rt("--bundle-id <id>","Internal iOS bundle identifier").hideHelp()).option("--json-output <path>","Write submission metadata JSON to a file for CI/CD").option("--latest","Use the latest successful build for submission").option("--build-id <id>","Use a specific build ID for submission").action(async e=>{let t=J.opts();e.quiet=e.quiet||t.quiet,e.yes=e.yes||t.yes,fe(ce.bgCyan.black(m.cliTag("Store Submission"))),await Ri(e)});J.command("login").description(`Login to ${m.name} Dashboard`).action(async()=>{fe(ce.bgCyan.black(m.cliTag("Login"))),await jl()});J.command("logout").description(`Logout from ${m.name} on this machine`).action(async()=>{fe(ce.bgCyan.black(m.cliTag("Logout"))),await Bl()});J.command("link").description(`Link local directory to a ${m.name} Project`).action(async()=>{fe(ce.bgCyan.black(m.cliTag("Link Project"))),await Gl()});J.command("me").description("Display currently logged in user details").action(async()=>{await fc()});J.command("init").description(`Create a new ${m.name} Project`).action(async()=>{fe(ce.bgCyan.black(m.cliTag("Init Project"))),await Vl()});J.command("env").description("Manage Environment Variables").argument("<action>","Action to perform: set, list, pull, download, or export").argument("[args...]","Key=Value pairs for set action").option("-e, --environment <name>","Environment to pull/download","development").option("-o, --out <file>","Output file for pull/download",".env.local").option("--overwrite","Overwrite output file if it already exists").action(async(e,t,n)=>{fe(ce.bgCyan.black(m.cliTag("Env Manager"))),await zl(e,t,n)});J.command("start").description("Start the development server (Metro)").option("-p, --build-profile <name>","Build profile (e.g. development, staging)","development").option("--tunnel","Use ngrok tunnel").option("--lan","Use LAN IP").option("--localhost","Use localhost").option("-c, --clear","Clear Metro cache").option("--port <number>","Port to listen on").option("--ios","Start on iOS").option("--android","Start on Android").option("--web","Start on Web").action(async e=>{fe(ce.bgCyan.black(m.cliTag("Dev Server"))),await gc(e)});var yi=J.command("push").description("Configure and send provider-direct APNs/FCM notifications");yi.command("setup").description("Install and wire a working default push experience").option("--name <name>","Push app display name").option("--ios-bundle <id>","iOS bundle identifier").option("--android-package <name>","Android package name").option("-e, --environment <name>","development, preview, or production").option("--google-services-file <path>","Android google-services.json path").option("--skip-install","Generate setup without installing SDK dependencies").action(Nl);yi.command("init").description("Create only the server-side push app (advanced)").option("--name <name>","Push app display name").option("--ios-bundle <id>","iOS bundle identifier").option("--android-package <name>","Android package name").option("-e, --environment <name>","development, preview, or production","production").option("--google-services-file <path>","Expo Android google-services.json path").action(xl);var Id=yi.command("credentials").description("Configure provider credentials");Id.command("apns").description("Configure an Apple APNs .p8 authentication key").requiredOption("--file <path>","APNs .p8 file").requiredOption("--team-id <id>","Apple Developer team ID").requiredOption("--key-id <id>","APNs key ID").option("--bundle-id <id>","iOS bundle identifier").option("--app <id>","MACH Push app ID").option("-e, --environment <name>","development, preview, or production").action(e=>Ao("apns",e));Id.command("fcm").description("Configure a Firebase service-account JSON file").requiredOption("--file <path>","Firebase service-account JSON").option("--app <id>","MACH Push app ID").option("-e, --environment <name>","development, preview, or production").action(e=>Ao("fcm",e));yi.command("send").description("Queue one transient push notification").requiredOption("--title <text>","Notification title").requiredOption("--body <text>","Notification body").option("--app <id>","MACH Push app ID").option("-e, --environment <name>","development, preview, or production").option("--token <token>","MACH push token; repeatable",hi,[]).option("--user <id>","Application user ID; repeatable",hi,[]).option("--all","Send to all active devices").option("--platform <platform>","Limit --all to ios or android").option("--data <json>","String-to-string custom data JSON").option("--sound <name>","Provider sound name").option("--badge <number>","iOS badge count").option("--ttl <seconds>","Provider time-to-live").option("--collapse-key <key>","Provider collapse key").option("--android-channel-id <id>","Android notification channel").action(Tl);yi.command("status").description("Show aggregate push delivery counters").option("--days <number>","Statistics range, 1-90","30").action(Ll);J.command("config").description("Show resolved configuration for a profile").option("-p, --profile <name>","Build profile to resolve","development").option("--json","Output as JSON").action(async e=>{await hc(e)});var vd=J.command("version").description("Show or seed DB-owned native version counters"),$d=e=>e.requiredOption("--platform <os>","Target platform: ios or android").option("-p, --profile <name>","Build profile used to resolve package/bundle scope","production").option("--scope <value>","Counter scope override, usually package name or bundle identifier").option("--package <name>","Android package override").option("--bundle-id <id>","iOS bundle identifier override").option("--json","Print JSON output");$d(vd.command("show").description("Show the current native version counter")).action(async e=>{fe(ce.bgCyan.black(m.cliTag("Version Counter"))),await qo("show",e)});$d(vd.command("seed").description("Seed the native version counter for an existing app").argument("[value]","Latest already-used value; the next build uses value + 1").option("--value <number>","Latest already-used value; the next build uses value + 1").option("--force","Allow lowering an existing counter")).action(async(e,t)=>{fe(ce.bgCyan.black(m.cliTag("Version Counter"))),await qo("seed",{...t,value:t.value??e})});var _d=J.command("deeplink").description("Configure and verify app links, universal links, and URI schemes");_d.command("setup").description("Generate deep link config, hosted association files, and Expo plugin support").option("--domain <domain>","Associated domain, e.g. app.example.com").option("--base-url <url>","Base URL, e.g. https://app.example.com").option("-p, --profile <name>","Profile used for build/submit overrides").option("--platform <platform>","ios, android, or all").option("--framework <framework>","expo or react-native").option("--scheme <scheme>","URI scheme, e.g. myapp").option("--ios-bundle-id <id>","iOS bundle identifier").option("--android-package <name>","Android package name").option("--apple-team-id <id>","Apple Developer Team ID").option("--app-store-id <id>","App Store app ID for Smart App Banner").option("--android-fingerprint <sha256>","Android SHA256 signing certificate fingerprint; repeatable",hi,[]).option("--output <dir>","Directory for hosted files, e.g. public or deep-links").option("--install-plugin","Install @radhya/mach locally so Expo can use the packaged config plugin").option("--no-install-plugin","Do not install @radhya/mach for Expo projects; use the local plugin fallback if the package is missing").option("-y, --yes","Automatically answer yes to prompts",!1).action(async e=>{let t=J.opts();e.yes=e.yes||t.yes,fe(ce.bgCyan.black(m.cliTag("Deep Links"))),await Uc(e)});_d.command("verify").description("Verify local and optionally live deep link configuration").option("-p, --profile <name>","Profile used for build/submit overrides").option("--live","Check hosted files over HTTPS").option("--android-device","Print Android device verification commands").action(async e=>{fe(ce.bgCyan.black(m.cliTag("Deep Link Verify"))),await Fc(e)});J.command("credentials").description("Unified, interactive credential management (iOS/Android)").option("-p, --profile <name>","Build profile (production, staging, development)").option("--force","Force recreate certificates (nuke existing on Apple Portal)",!1).action(async e=>{let{credentialsMainCommand:t}=await import("./credentials-SOUQOL2C.js");await t(e)});J.command("credentials:setup").description("Automated credential provisioning (iOS/Android) [Legacy]").requiredOption("--platform <os>","Platform: ios or android").option("--profile <name>","Build profile (production, staging, development)").option("--bundle-id <id>","Bundle ID / Package Name (optional, auto-detected)").option("--team-id <id>","Apple Team ID (iOS only)").option("--key-alias <alias>","Android keystore alias (optional, auto-generated)").option("--aws-profile <name>","AWS Credentials Profile (for S3 storage)").option("--force","Force recreate certificates (nuke existing on Apple Portal)",!1).action(async e=>{fe(ce.bgCyan.black(m.cliTag("Credentials Setup"))),await Cn(e),wd(ce.green("Done!"))});J.command("credentials:service").description("Upload Service Credentials (ASC API Key / Google Service JSON) [Legacy]").requiredOption("--platform <os>","Platform: ios or android").option("--file <path>","Path to credential file (.p8 or .json)").option("--issuer-id <id>","ASC API Key Issuer ID (iOS only)").option("--key-id <id>","ASC API Key ID (iOS only)").option("--bundle-id <id>","Bundle identifier / Android package name to attach this service credential to").option("--package-name <name>","Android package name to attach this service credential to").option("-p, --profile <name>","Build profile to resolve package/bundle identifier from config").action(async e=>{fe(ce.bgCyan.black(m.cliTag("Service Credentials"))),await as(e),wd(ce.green("Done!"))});var Qo=J.command("device").description("Manage registered iOS test devices");Qo.command("register").description("Register a connected iOS device or enter UDID manually").option("--udid <udid>","Device UDID (skip auto-detection)").option("--name <name>","Device name").option("--team-id <id>","Apple Developer Team ID for this device").action(async e=>{await dr("register",e)});Qo.command("list").description("List all registered devices").option("--team-id <id>","Filter by Apple Developer Team ID").action(async e=>{await dr("list",e)});Qo.command("remove").description("Remove a registered device").option("--udid <udid>","Device UDID to remove").option("--team-id <id>","Apple Developer Team ID for this device").action(async e=>{await dr("remove",e)});J.command("audit").description("Run automated security audit on the project or APK").option("--apk <path>","Path to APK file (runs APK diagnostics like 16KB alignment)").option("--json","Output results as JSON (for CI/CD)").option("--fix","Auto-apply fixes where possible").option("--category <name>","Run only a specific check category (e.g. 16kb, permissions, secrets)").option("--severity <level>","Minimum severity to display (critical, high, medium, low, info)").option("--prebuild","Run expo prebuild for deeper manifest/plist analysis").action(async e=>{fe(ce.bgCyan.black(m.cliTag(e.apk?"APK Audit":"Security Audit"))),await Ad(e)});var Uy=new Set(["login","logout","agent"]);J.hook("preAction",(e,t)=>{let n=t.name(),i=t.opts?.()||{};n==="maestro"&&(i.local||i.localRunner)||t.parent?.name()!=="deeplink"&&(Uy.has(n)||on())});J.on("command:*",()=>{console.error(`Invalid command: %s
|
|
1854
|
-
See --help for a list of available commands.`,
|
|
2098
|
+
`));for(let l of s)Re.error(Ee.red(`${Ee.bold(l.name)} ${Ee.dim(`(${l.arch})`)}`)),Re.info(Ee.dim(` PT_LOAD alignment: 2**${Math.log2(l.align)} (${l.align} bytes, needs 2**14 = ${Hc})`))}return a.length>0&&(console.log(""),Re.success(Ee.green(`${a.length} librar${a.length===1?"y":"ies"} correctly aligned (2**14 or higher).`))),console.log(""),s.length===0?(Re.success(Ee.green.bold("ELF Verification Successful. APK is 16KB compatible.")),!0):(Re.error(Ee.red.bold(`Found ${s.length} unaligned lib${s.length===1?"":"s"} (arm64-v8a/x86_64 libs need to be aligned).`)),console.log(""),Re.info(Ee.yellow("To fix this:")),Re.info(Ee.dim(" 1. Rebuild with NDK r28+ which defaults to 16KB page alignment")),Re.info(Ee.dim(" 2. Or set -DANDROID_SUPPORT_FLEXIBLE_PAGE_SIZES=ON in CMake")),Re.info(Ee.dim(" 3. Update third-party libraries that ship prebuilt .so files")),Re.info(Ee.dim(" 4. After rebuilding: zipalign -p -f -v 16 input.apk output.apk")),console.log(""),Re.info(Ee.dim("Reference: https://developer.android.com/guide/practices/page-sizes")),!1)}catch(r){return n.stop("Analysis failed."),Re.error(Ee.red(`Failed to analyze APK: ${r.message}`)),!1}finally{try{Nt.rmSync(i,{recursive:!0,force:!0})}catch{}}}function bb(e){let t=Nt.openSync(e,"r");try{let n=Buffer.alloc(64);if(Nt.readSync(t,n,0,64,0),!n.subarray(0,4).equals(yb))return null;let i=n[4]===2,r=n[5]===1,o=(f,p)=>r?f.readUInt16LE(p):f.readUInt16BE(p),s=(f,p)=>r?f.readUInt32LE(p):f.readUInt32BE(p),a=(f,p)=>Number(r?f.readBigUInt64LE(p):f.readBigUInt64BE(p)),l,d,c;i?(l=a(n,32),d=o(n,54),c=o(n,56)):(l=s(n,28),d=o(n,42),c=o(n,44));let u=null;for(let f=0;f<c;f++){let p=Buffer.alloc(d);if(Nt.readSync(t,p,0,d,l+f*d),s(p,0)!==hb)continue;let g;i?g=a(p,48):g=s(p,28),g>0&&(u===null||g<u)&&(u=g)}return u??0}catch{return null}finally{Nt.closeSync(t)}}function Gc(e){let t=[];if(!Nt.existsSync(e))return t;let n=Nt.readdirSync(e,{withFileTypes:!0});for(let i of n){let r=On.join(e,i.name);i.isDirectory()?t.push(...Gc(r)):i.name.endsWith(".so")&&t.push(r)}return t}function Sb(e){return e.includes("arm64-v8a")?"arm64-v8a":e.includes("x86_64")?"x86_64":"unknown"}var Wc=async e=>{if(Ue()||(ot.error(ht.red(`You are not logged in. Run \`${m.nameLower} login\` first.`)),process.exit(1)),e.apk){await Ib(e);return}let n=process.cwd(),i=kr.join(n,"package.json");Pi.existsSync(i)||(ot.error(ht.red("No package.json found. Run this command from a project root.")),process.exit(1));let r=JSON.parse(Pi.readFileSync(i,"utf-8")),o=!!(r.dependencies?.expo||r.devDependencies?.expo);e.json||(ot.info(ht.dim(`Project: ${r.name||"unknown"} v${r.version||"0.0.0"}`)),ot.info(ht.dim(`Type: ${o?"Expo":"Bare React Native"}`)),ot.info(""));let s={json:e.json,fix:e.fix,category:e.category,severity:e.severity,prebuild:e.prebuild},a=await Fc(n,s);e.json?console.log(JSON.stringify(jc(a,r),null,2)):Bc(a,e.severity);let l=a.some(c=>c.findings.some(u=>u.severity==="critical")),d=a.some(c=>c.findings.some(u=>u.severity==="high"));(l||d)&&process.exit(1)},zc=["16kb"];async function Ib(e){let t=e.category?.toLowerCase();t&&!zc.includes(t)&&(ot.error(ht.red(`Unknown APK check category: "${t}"`)),ot.info(ht.dim(`Available APK checks: ${zc.join(", ")}`)),process.exit(1));let n=await wb(e.apk);n||process.exit(1);let i=!t,r=!1;(i||t==="16kb")&&(await Vc(n)||(r=!0)),r&&process.exit(1)}async function wb(e){if(e.startsWith("build:")){let n=e.slice(6);return await vb(n)}if(e.startsWith("http://")||e.startsWith("https://"))return await Jc(e);let t=kr.resolve(e);return Pi.existsSync(t)?t:(ot.error(ht.red(`APK file not found: ${t}`)),null)}async function vb(e){let t=Kc();t.start(`Fetching APK from build ${e}...`);try{let n=await D.get(`/build/${e}`);if(n.data.status!=="success")throw new Error(n.data.message);let i=n.data.build;if(!i)throw new Error("Build not found");let r=i.artifacts?.find(o=>o.type?o.type==="apk":o.name?.endsWith(".apk")||o.url?.includes(".apk"));return!r||!r.url?(t.stop("No APK artifact found"),ot.error(ht.red("This build does not have an APK artifact.")),ot.info(ht.dim("Make sure the build produced an APK (not just an AAB).")),null):(t.stop(`Found build: ${i.buildId||e}`),await Jc(r.url))}catch(n){return t.stop("Failed to fetch build"),ot.error(ht.red(n.message)),null}}async function Jc(e){let t=Kc();t.start("Downloading APK...");try{let n=Pi.mkdtempSync(kr.join(Ab.tmpdir(),`${m.nameLower}-audit-`)),i=kr.join(n,"app.apk"),r=await Eb.get(e,{responseType:"arraybuffer"});Pi.writeFileSync(i,r.data);let o=(r.data.length/(1024*1024)).toFixed(1);return t.stop(`Downloaded APK (${o} MB)`),i}catch(n){return t.stop("Download failed"),ot.error(ht.red(`Failed to download APK: ${n.message}`)),null}}var Pb=console.log;console.log=()=>{};_b();console.log=Pb;he(fe.bgCyan.black(m.cliTag("Production Build Orchestrator")));var Ri=(e,t=[])=>t.concat(e),Z=new $b;Z.name(m.nameLower).description(`${m.name} CLI: Powerful Cloud Infrastructure Tools`).version(St).option("-y, --yes","Automatically answer yes to all prompts",!1).option("--quiet","Suppress non-essential output",!1);Z.command("agent").description("Manage local device discovery agent for the Install Hub (port 7070)").argument("[action]","start, run, install, status, restart, stop, or uninstall","start").action(async e=>{await Jl(e)});Z.command("host").description("Setup AWS S3 static hosting and CloudFront").action(async()=>{he(fe.bgCyan.black(m.cliTag("Hosting"))),await Ps()});Z.command("sitemap").description("Generate sitemap.xml from Expo Router app structure").option("-o, --output <path>","Output path for sitemap.xml","./public/sitemap.xml").action(async e=>{he(fe.bgCyan.black(m.cliTag("Sitemap Generator"))),await Ds(e)});Z.command("build").description("Run a build on a cloud provider (AWS Spot Instances)").argument("[platform]","Target platform (android, ios)").option("--platform <os>","Target platform alias (android, ios) [Optional]").option("--repo <url>","Git Repository URL").option("--branch <name>","Git Branch").option("--ami <id>","AMI ID").option("--bucket <name>","S3 Bucket for artifacts").option("--region <region>","AWS Region").option("--aws-profile <name>","AWS Credentials Profile").option("-p, --build-profile <name>","Build Profile (e.g. production, staging)").option("--profile <name>","Build Profile (alias for --build-profile)").option("--dry-run","Generate User Data script without launching").option("--keep-instance","Do not terminate the instance after build").option("--subnet <id>","VPC Subnet ID to launch the instance in").option("--security-group <id>","VPC Security Group ID to use").option("--ssh-host <host>","Remote host for iOS build (SSH)").option("--ssh-user <user>","SSH username for remote host").option("--ssh-key <path>","Path to private SSH key for remote host").option("--ios-scheme <scheme>","iOS Scheme to build").option("--ios-team-id <id>","Apple Development Team ID").option("--ios-configuration <config>","Xcode configuration (Release/Debug)").option("--ios-export-method <method>","Export method (ad-hoc, app-store, development, enterprise)").option("--ios-api-key-id <id>","App Store Connect API Key ID").option("--ios-api-key-issuer <id>","App Store Connect API Key Issuer ID").option("--ios-api-key-path <path>","Path to App Store Connect API Key (.p8) file").option("--simulator","Build for iOS Simulator (no signing required)").addOption(new st("--build-id <id>","Internal build ID").hideHelp()).addOption(new st("--project-id <id>","Internal project ID").hideHelp()).addOption(new st("--fail-only","Internal: mark an existing build failed").hideHelp()).addOption(new st("--error <message>","Internal failure message").hideHelp()).option("--local","Run build on local machine").option("--auto-version","Assign the next Android versionCode or iOS buildNumber from Mach").option("--auto-submit","Submit this build after it completes successfully").option("--submit-track <track>","Google Play track to use with --auto-submit").option("--submit-release-status <status>","Google Play release status to use with --auto-submit").option("--submit-rollout <fraction>","Google Play staged rollout fraction to use with --auto-submit").option("--submit-changes-not-sent-for-review","Commit Google Play changes without automatically sending them for review when using --auto-submit").option("--submit-credential-id <id>","Service credential ID to use with --auto-submit").option("--submit-json-output <path>","Write auto-submit metadata JSON to a file for CI/CD").option("--verbose","Enable verbose logging").option("--json-output <path>","Write build metadata JSON to a file for CI/CD").option("--maestro","Queue a managed Maestro test run after a successful build").option("--maestro-flows <path>","Maestro flow file or directory (default: .maestro)").option("--maestro-device <device>","iOS simulator model or identifier (default: iPhone 17 Pro; managed Android uses Pixel 6)").option("--maestro-retries <n>","Retries for the Maestro run","1").option("--maestro-record","Enable screen recording where supported").option("--maestro-use-build-source","Use Maestro flows from the build source snapshot instead of uploading local flows").option("--maestro-env <name>","Forward an environment variable to the managed Maestro runner; repeat or comma-separate names",Ri,[]).option("-y, --yes","Automatically answer yes to all prompts",!1).option("--quiet","Suppress non-essential output",!1).action(async(e,t)=>{let n=Z.opts();t.yes=t.yes||n.yes,t.quiet=t.quiet||n.quiet,t.platform=e||t.platform,t.buildProfile=t.profile||t.buildProfile,t.quiet||he(fe.bgCyan.black(m.cliTag("Cloud Build"))),await Wi(t)});Z.command("maestro").description("Run Maestro tests locally or with the managed Mach runner").option("--platform <os>","Target platform (android/ios)").option("-p, --profile <name>","Build profile to resolve when using --latest","production").option("--latest","Use the latest successful build for the platform/profile").option("--build-id <id>","Use a specific Mach build ID").option("--build-url <url>","Use a Mach build URL").option("--artifact-url <url>","Use a direct APK or iOS simulator app artifact URL").option("--local","Run Maestro on a connected local emulator/device instead of the managed runner").option("--maestro-flows <path>","Maestro flow file or directory (default: .maestro)").option("--maestro-device <device>","iOS simulator model or identifier (default: iPhone 17 Pro; managed Android uses Pixel 6)").option("--maestro-retries <n>","Retries for the Maestro run","1").option("--maestro-record","Enable screen recording where supported").option("--maestro-use-build-source","Use Maestro flows from the build source snapshot instead of uploading local flows").option("--maestro-env <name>","Forward an environment variable to the managed Maestro runner; repeat or comma-separate names",Ri,[]).option("--wait","Wait for managed Maestro completion and exit non-zero on failure").option("--wait-timeout <minutes>","Maximum minutes to wait for managed Maestro completion","60").option("--wait-interval <seconds>","Polling interval while waiting for managed Maestro completion","15").option("--json-output <path>","Write test run metadata JSON to a file for CI/CD").addOption(new st("--local-runner","Internal: execute a managed Maestro run on this machine").hideHelp()).addOption(new st("--test-run-id <id>","Internal test run ID").hideHelp()).addOption(new st("--project-id <id>","Internal project ID").hideHelp()).addOption(new st("--runner-token <token>","Internal runner token").hideHelp()).action(async e=>{he(fe.bgCyan.black(m.cliTag("Maestro Testing"))),await Da(e)});var Dn=e=>e.option("--platform <os>","Target platform: ios, android, or all","all").option("--channel <name>","OTA channel (for example: production, staging)").option("--branch <name>","Alias for --channel").option("--runtime-version <version>","Runtime version override").option("--message <text>","Release note/message for this OTA update").option("--framework <name>","Framework override: expo or react-native").option("--engine <name>","OTA engine override (currently expo-updates)").option("--url <url>","Mach OTA update URL override").option("--install-plugin","Install @radhya/mach locally for the Expo config plugin").option("--skip-install","Do not install local Expo plugin dependency").option("--update-id <id>","OTA update id for rollback/promote").option("--json","Print JSON output"),kn=Z.command("ota").description("Setup, publish, verify, and manage Mach OTA updates");Dn(kn.command("setup").description("Configure OTA for this project")).action(async e=>{let t=Z.opts();he(fe.bgCyan.black(m.cliTag("OTA Setup"))),await Gt("setup",{...e,yes:e.yes||t.yes})});Dn(kn.command("publish").description("Publish an OTA update")).action(async e=>{let t=Z.opts();he(fe.bgCyan.black(m.cliTag("OTA Publish"))),await Gt("publish",{...e,yes:e.yes||t.yes})});Dn(kn.command("verify").description("Verify OTA configuration")).action(async e=>{let t=Z.opts();he(fe.bgCyan.black(m.cliTag("OTA Verify"))),await Gt("verify",{...e,yes:e.yes||t.yes})});Dn(kn.command("list").description("List OTA updates for the linked project")).action(async e=>{let t=Z.opts();he(fe.bgCyan.black(m.cliTag("OTA Updates"))),await Gt("list",{...e,yes:e.yes||t.yes})});Dn(kn.command("rollback").description("Roll back an OTA update")).action(async e=>{let t=Z.opts();he(fe.bgCyan.black(m.cliTag("OTA Rollback"))),await Gt("rollback",{...e,yes:e.yes||t.yes})});Dn(kn.command("promote").description("Promote an OTA update")).action(async e=>{let t=Z.opts();he(fe.bgCyan.black(m.cliTag("OTA Promote"))),await Gt("promote",{...e,yes:e.yes||t.yes})});Z.command("submit").description("Automated Store Submission (App Store / Google Play)").option("--platform <os>","Target platform (ios/android)").option("-p, --profile <name>","Build/submission profile to submit from (e.g. production, preprod)").option("--track <track>","Google Play Track (internal, alpha, beta, production)").option("--release-status <status>","Google Play release status (completed, draft, halted, inProgress)").option("--rollout <fraction>","Google Play staged rollout fraction for inProgress releases (example: 0.1)").option("--changes-not-sent-for-review","Commit Google Play changes without automatically sending them for review").option("--ssh-host <host>","Remote macOS host for iOS submission").option("--ssh-user <user>","SSH username for remote iOS submission").option("--ssh-key <path>","Path to private SSH key for remote iOS submission").option("--credential-id <id>","Service credential ID to use when multiple submission credentials exist").option("--local","Run submission on this machine (internal runner mode for iOS)").addOption(new st("--submit-id <id>","Internal submission ID").hideHelp()).addOption(new st("--project-id <id>","Internal project ID").hideHelp()).addOption(new st("--package-name <name>","Internal Android package name").hideHelp()).addOption(new st("--bundle-id <id>","Internal iOS bundle identifier").hideHelp()).option("--json-output <path>","Write submission metadata JSON to a file for CI/CD").option("--latest","Use the latest successful build for submission").option("--build-id <id>","Use a specific build ID for submission").action(async e=>{let t=Z.opts();e.quiet=e.quiet||t.quiet,e.yes=e.yes||t.yes,he(fe.bgCyan.black(m.cliTag("Store Submission"))),await Hi(e)});Z.command("login").description(`Login to ${m.name} Dashboard`).action(async()=>{he(fe.bgCyan.black(m.cliTag("Login"))),await fd()});Z.command("logout").description(`Logout from ${m.name} on this machine`).action(async()=>{he(fe.bgCyan.black(m.cliTag("Logout"))),await md()});Z.command("link").description(`Link local directory to a ${m.name} Project`).action(async()=>{he(fe.bgCyan.black(m.cliTag("Link Project"))),await hd()});Z.command("me").description("Display currently logged in user details").action(async()=>{await Bd()});Z.command("init").description(`Create a new ${m.name} Project`).action(async()=>{he(fe.bgCyan.black(m.cliTag("Init Project"))),await yd()});Z.command("env").description("Manage Environment Variables").argument("<action>","Action to perform: set, list, pull, download, or export").argument("[args...]","Key=Value pairs for set action").option("-e, --environment <name>","Environment to pull/download","development").option("-o, --out <file>","Output file for pull/download",".env.local").option("--overwrite","Overwrite output file if it already exists").action(async(e,t,n)=>{he(fe.bgCyan.black(m.cliTag("Env Manager"))),await Sd(e,t,n)});Z.command("start").description("Start the development server (Metro)").option("-p, --build-profile <name>","Build profile (e.g. development, staging)","development").option("--tunnel","Use ngrok tunnel").option("--lan","Use LAN IP").option("--localhost","Use localhost").option("-c, --clear","Clear Metro cache").option("--port <number>","Port to listen on").option("--ios","Start on iOS").option("--android","Start on Android").option("--web","Start on Web").action(async e=>{he(fe.bgCyan.black(m.cliTag("Dev Server"))),await Hd(e)});var Ci=Z.command("push").description("Configure and send provider-direct APNs/FCM notifications");Ci.command("setup").description("Install and wire a working default push experience").option("--name <name>","Push app display name").option("--ios-bundle <id>","iOS bundle identifier").option("--android-package <name>","Android package name").option("-e, --environment <name>","development, preview, or production").option("--google-services-file <path>","Android google-services.json path").option("--skip-install","Generate setup without installing SDK dependencies").action(ad);Ci.command("init").description("Create only the server-side push app (advanced)").option("--name <name>","Push app display name").option("--ios-bundle <id>","iOS bundle identifier").option("--android-package <name>","Android package name").option("-e, --environment <name>","development, preview, or production","production").option("--google-services-file <path>","Expo Android google-services.json path").action(sd);var Yc=Ci.command("credentials").description("Configure provider credentials");Yc.command("apns").description("Configure an Apple APNs .p8 authentication key").requiredOption("--file <path>","APNs .p8 file").requiredOption("--team-id <id>","Apple Developer team ID").requiredOption("--key-id <id>","APNs key ID").option("--bundle-id <id>","iOS bundle identifier").option("--app <id>","MACH Push app ID").option("-e, --environment <name>","development, preview, or production").action(e=>Uo("apns",e));Yc.command("fcm").description("Configure a Firebase service-account JSON file").requiredOption("--file <path>","Firebase service-account JSON").option("--app <id>","MACH Push app ID").option("-e, --environment <name>","development, preview, or production").action(e=>Uo("fcm",e));Ci.command("send").description("Queue one transient push notification").requiredOption("--title <text>","Notification title").requiredOption("--body <text>","Notification body").option("--app <id>","MACH Push app ID").option("-e, --environment <name>","development, preview, or production").option("--token <token>","MACH push token; repeatable",Ri,[]).option("--user <id>","Application user ID; repeatable",Ri,[]).option("--all","Send to all active devices").option("--platform <platform>","Limit --all to ios or android").option("--data <json>","String-to-string custom data JSON").option("--sound <name>","Provider sound name").option("--badge <number>","iOS badge count").option("--ttl <seconds>","Provider time-to-live").option("--collapse-key <key>","Provider collapse key").option("--android-channel-id <id>","Android notification channel").action(ld);Ci.command("status").description("Show aggregate push delivery counters").option("--days <number>","Statistics range, 1-90","30").action(dd);Z.command("config").description("Show resolved configuration for a profile").option("-p, --profile <name>","Build profile to resolve","development").option("--json","Output as JSON").action(async e=>{await Vd(e)});var Xc=Z.command("version").description("Show or seed DB-owned native version counters"),Zc=e=>e.requiredOption("--platform <os>","Target platform: ios or android").option("-p, --profile <name>","Build profile used to resolve package/bundle scope","production").option("--scope <value>","Counter scope override, usually package name or bundle identifier").option("--package <name>","Android package override").option("--bundle-id <id>","iOS bundle identifier override").option("--json","Print JSON output");Zc(Xc.command("show").description("Show the current native version counter")).action(async e=>{he(fe.bgCyan.black(m.cliTag("Version Counter"))),await fs("show",e)});Zc(Xc.command("seed").description("Seed the native version counter for an existing app").argument("[value]","Latest already-used value; the next build uses value + 1").option("--value <number>","Latest already-used value; the next build uses value + 1").option("--force","Allow lowering an existing counter")).action(async(e,t)=>{he(fe.bgCyan.black(m.cliTag("Version Counter"))),await fs("seed",{...t,value:t.value??e})});var Qc=Z.command("deeplink").description("Configure and verify app links, universal links, and URI schemes");Qc.command("setup").description("Generate deep link config, hosted association files, and Expo plugin support").option("--domain <domain>","Associated domain, e.g. app.example.com").option("--base-url <url>","Base URL, e.g. https://app.example.com").option("-p, --profile <name>","Profile used for build/submit overrides").option("--platform <platform>","ios, android, or all").option("--framework <framework>","expo or react-native").option("--scheme <scheme>","URI scheme, e.g. myapp").option("--ios-bundle-id <id>","iOS bundle identifier").option("--android-package <name>","Android package name").option("--apple-team-id <id>","Apple Developer Team ID").option("--app-store-id <id>","App Store app ID for Smart App Banner").option("--android-fingerprint <sha256>","Android SHA256 signing certificate fingerprint; repeatable",Ri,[]).option("--output <dir>","Directory for hosted files, e.g. public or deep-links").option("--install-plugin","Install @radhya/mach locally so Expo can use the packaged config plugin").option("--no-install-plugin","Do not install @radhya/mach for Expo projects; use the local plugin fallback if the package is missing").option("-y, --yes","Automatically answer yes to prompts",!1).action(async e=>{let t=Z.opts();e.yes=e.yes||t.yes,he(fe.bgCyan.black(m.cliTag("Deep Links"))),await uc(e)});Qc.command("verify").description("Verify local and optionally live deep link configuration").option("-p, --profile <name>","Profile used for build/submit overrides").option("--live","Check hosted files over HTTPS").option("--android-device","Print Android device verification commands").action(async e=>{he(fe.bgCyan.black(m.cliTag("Deep Link Verify"))),await pc(e)});Z.command("credentials").description("Unified, interactive credential management (iOS/Android)").option("-p, --profile <name>","Build profile (production, staging, development)").option("--force","Force recreate certificates (nuke existing on Apple Portal)",!1).action(async e=>{let{credentialsMainCommand:t}=await import("./credentials-SOUQOL2C.js");await t(e)});Z.command("credentials:setup").description("Automated credential provisioning (iOS/Android) [Legacy]").requiredOption("--platform <os>","Platform: ios or android").option("--profile <name>","Build profile (production, staging, development)").option("--bundle-id <id>","Bundle ID / Package Name (optional, auto-detected)").option("--team-id <id>","Apple Team ID (iOS only)").option("--key-alias <alias>","Android keystore alias (optional, auto-generated)").option("--aws-profile <name>","AWS Credentials Profile (for S3 storage)").option("--force","Force recreate certificates (nuke existing on Apple Portal)",!1).action(async e=>{he(fe.bgCyan.black(m.cliTag("Credentials Setup"))),await Ln(e),qc(fe.green("Done!"))});Z.command("credentials:service").description("Upload Service Credentials (ASC API Key / Google Service JSON) [Legacy]").requiredOption("--platform <os>","Platform: ios or android").option("--file <path>","Path to credential file (.p8 or .json)").option("--issuer-id <id>","ASC API Key Issuer ID (iOS only)").option("--key-id <id>","ASC API Key ID (iOS only)").option("--bundle-id <id>","Bundle identifier / Android package name to attach this service credential to").option("--package-name <name>","Android package name to attach this service credential to").option("-p, --profile <name>","Build profile to resolve package/bundle identifier from config").action(async e=>{he(fe.bgCyan.black(m.cliTag("Service Credentials"))),await $s(e),qc(fe.green("Done!"))});var ys=Z.command("device").description("Manage registered iOS test devices");ys.command("register").description("Register a connected iOS device or enter UDID manually").option("--udid <udid>","Device UDID (skip auto-detection)").option("--name <name>","Device name").option("--team-id <id>","Apple Developer Team ID for this device").action(async e=>{await Ir("register",e)});ys.command("list").description("List all registered devices").option("--team-id <id>","Filter by Apple Developer Team ID").action(async e=>{await Ir("list",e)});ys.command("remove").description("Remove a registered device").option("--udid <udid>","Device UDID to remove").option("--team-id <id>","Apple Developer Team ID for this device").action(async e=>{await Ir("remove",e)});Z.command("audit").description("Run automated security audit on the project or APK").option("--apk <path>","Path to APK file (runs APK diagnostics like 16KB alignment)").option("--json","Output results as JSON (for CI/CD)").option("--fix","Auto-apply fixes where possible").option("--category <name>","Run only a specific check category (e.g. 16kb, permissions, secrets)").option("--severity <level>","Minimum severity to display (critical, high, medium, low, info)").option("--prebuild","Run expo prebuild for deeper manifest/plist analysis").action(async e=>{he(fe.bgCyan.black(m.cliTag(e.apk?"APK Audit":"Security Audit"))),await Wc(e)});var Rb=new Set(["login","logout","agent"]);Z.hook("preAction",(e,t)=>{let n=t.name(),i=t.opts?.()||{};n==="maestro"&&(i.local||i.localRunner)||t.parent?.name()!=="deeplink"&&(Rb.has(n)||dn())});Z.on("command:*",()=>{console.error(`Invalid command: %s
|
|
2099
|
+
See --help for a list of available commands.`,Z.args.join(" ")),process.exit(1)});process.argv.slice(2).length||Z.help();Z.parse(process.argv);
|