@radhya/mach 2.1.2 → 2.1.4

package/dist/index.js

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
-import{a as sn,b as Ye,c as On,d as zt,e as we,f as He,g as an,h as Wt,i as ln,j as as,l as Cn}from"./chunk-DX4FCPCX.js";import{a as m,b as os,c as Ue,d as ss,e as on,f as Ct,g as mt,h as O}from"./chunk-S64YFTRR.js";import{Command as Ty,Option as rt}from"commander";import{configDotenv as Ly}from"dotenv";import{intro as fe,outro as wd}from"@clack/prompts";import ce from"chalk";import{text as ls,confirm as Od,spinner as Cd,isCancel as $r,cancel as Dn,note as Dd,outro as kd}from"@clack/prompts";import kn from"chalk";async function cs(){try{let e=await ls({message:"Enter Bucket Name:",placeholder:"e.g. my-app-dev",validate(r){if(r.length===0)return"Bucket name is required"}});$r(e)&&(Dn("Operation cancelled."),process.exit(0));let t=await ls({message:"Enter Region:",initialValue:"ap-south-1"});$r(t)&&(Dn("Operation cancelled."),process.exit(0));let n=await Od({message:"Do you want to create a CloudFront Distribution for this bucket?",initialValue:!0});$r(n)&&(Dn("Operation cancelled."),process.exit(0));let i=Cd();i.start("Setting up hosting infrastructure...");try{let r=await O.post("/hosting/setup",{bucketName:e,region:t,createCloudFront:n});if(r.data.status!=="success")throw new Error(r.data.message||"Hosting setup failed");i.stop("Hosting setup complete!");let o=r.data,s=`Bucket Name:      ${kn.cyan(o.bucketName)}
-`;s+=`Region:           ${kn.cyan(o.region)}
-`,s+=`S3 Website URL:   ${kn.blue(o.s3WebsiteUrl)}`,o.cloudFrontId&&(s+=`
-
-CloudFront ID:    ${kn.cyan(o.cloudFrontId)}`,s+=`
-CloudFront URL:   ${kn.blue(o.cloudFrontUrl)}`),Dd(s,"Setup Complete!"),kd("You are all set!")}catch(r){i.stop("Setup failed"),Dn(`Error: ${r.response?.data?.message||r.message}`)}}catch(e){Dn(`An unexpected error occurred: ${e.message}`)}}import{readdir as xd,writeFile as Nd,access as Td,mkdir as Ld}from"fs/promises";import{join as ds}from"path";import{spinner as Md,text as us,isCancel as ps,cancel as _r,note as Ud,outro as Fd}from"@clack/prompts";import jd from"chalk";async function Bd(){let e=["./app","./src/app"];for(let t of e)try{return await Td(t),t}catch{}return null}async function fs(e){try{let n=await Bd()||"./app",i=await us({message:"Enter path to your app directory:",placeholder:n,initialValue:n,validate(u){if(u.length===0)return"Path is required"}});ps(i)&&(_r("Operation cancelled."),process.exit(0));let r=await us({message:"Enter your website base URL:",placeholder:"https://example.com",validate(u){if(u.length===0)return"Base URL is required";if(!u.startsWith("http"))return"URL must start with http:// or https://"}});ps(r)&&(_r("Operation cancelled."),process.exit(0));let o=Md();o.start("Scanning app directory for routes...");let s=await ms(i);o.stop(`Found ${s.length} routes`);let l=Hd(s,r),a=e.output||"./public/sitemap.xml";o.start(`Writing sitemap to ${a}...`);let c=a.substring(0,a.lastIndexOf("/"));if(c)try{await Ld(c,{recursive:!0})}catch{}await Nd(a,l,"utf-8"),o.stop("Sitemap generated successfully!"),Ud(`Routes included:
-${s.map(u=>`  \u2022 ${u.path}`).join(`
-`)}`,"Sitemap Summary"),Fd(`Sitemap saved to ${jd.cyan(a)}`)}catch(t){_r(`An error occurred: ${t.message}`)}}async function ms(e,t=""){let n=[];try{let i=await xd(e,{withFileTypes:!0});for(let r of i){let o=ds(e,r.name);if(!(r.name.startsWith("_")||r.name.startsWith("."))){if(r.isDirectory()){let s=await ms(o,ds(t,r.name));n.push(...s)}else if(r.isFile()){if(r.name==="index.tsx"||r.name==="index.ts"||r.name==="index.jsx"||r.name==="index.js"){let s=t===""?"/":`/${t}`;n.push({path:s,file:o})}else if(r.name.match(/\.(tsx|ts|jsx|js)$/)&&!r.name.includes("_layout")&&!r.name.includes("+")){let s=r.name.replace(/\.(tsx|ts|jsx|js)$/,""),l=`/${t}/${s}`.replace(/\/+/g,"/");n.push({path:l,file:o})}}}}}catch(i){throw new Error(`Failed to scan directory ${e}: ${i.message}`)}return n}function Hd(e,t){let n=new Date().toISOString().split("T")[0];return`<?xml version="1.0" encoding="UTF-8"?>
+import{A as et,B as So,C as Eo,D as Bi,E as Io,F as wo,H as jt,a as ft,b as fo,c as mo,d as Li,e as go,f as ho,g as Cn,h as Tn,i as kn,j as Mi,k as Ui,l as Nn,m as xn,n as yo,o as Fi,p as It,q as wt,r as $e,s as bo,t as mt,u as ce,v as Ie,w as Ln,x as Mn,y as vt,z as Ao}from"./chunk-LLUM6GHI.js";import{a as m,b as uo,c as be,d as po,e as Et,f as Qe,g as He,h as $}from"./chunk-S64YFTRR.js";import{Command as eg,Option as Te}from"commander";import{configDotenv as tg}from"dotenv";import{intro as X,outro as nd}from"@clack/prompts";import J from"chalk";import{text as vo,confirm as ad,spinner as ld,isCancel as ji,cancel as Ht,note as dd,outro as cd}from"@clack/prompts";import Gt from"chalk";async function _o(){try{let e=await vo({message:"Enter Bucket Name:",placeholder:"e.g. my-app-dev",validate(r){if(r.length===0)return"Bucket name is required"}});ji(e)&&(Ht("Operation cancelled."),process.exit(0));let t=await vo({message:"Enter Region:",initialValue:"ap-south-1"});ji(t)&&(Ht("Operation cancelled."),process.exit(0));let n=await ad({message:"Do you want to create a CloudFront Distribution for this bucket?",initialValue:!0});ji(n)&&(Ht("Operation cancelled."),process.exit(0));let i=ld();i.start("Setting up hosting infrastructure...");try{let r=await $.post("/hosting/setup",{bucketName:e,region:t,createCloudFront:n});if(r.data.status!=="success")throw new Error(r.data.message||"Hosting setup failed");i.stop("Hosting setup complete!");let o=r.data,s=`Bucket Name:      ${Gt.cyan(o.bucketName)}
+`;s+=`Region:           ${Gt.cyan(o.region)}
+`,s+=`S3 Website URL:   ${Gt.blue(o.s3WebsiteUrl)}`,o.cloudFrontId&&(s+=`
+
+CloudFront ID:    ${Gt.cyan(o.cloudFrontId)}`,s+=`
+CloudFront URL:   ${Gt.blue(o.cloudFrontUrl)}`),dd(s,"Setup Complete!"),cd("You are all set!")}catch(r){i.stop("Setup failed"),Ht(`Error: ${r.response?.data?.message||r.message}`)}}catch(e){Ht(`An unexpected error occurred: ${e.message}`)}}import{readdir as ud,writeFile as pd,access as fd,mkdir as md}from"fs/promises";import{join as $o}from"path";import{spinner as gd,text as Ro,isCancel as Oo,cancel as Hi,note as hd,outro as yd}from"@clack/prompts";import bd from"chalk";async function Ad(){let e=["./app","./src/app"];for(let t of e)try{return await fd(t),t}catch{}return null}async function Do(e){try{let n=await Ad()||"./app",i=await Ro({message:"Enter path to your app directory:",placeholder:n,initialValue:n,validate(c){if(c.length===0)return"Path is required"}});Oo(i)&&(Hi("Operation cancelled."),process.exit(0));let r=await Ro({message:"Enter your website base URL:",placeholder:"https://example.com",validate(c){if(c.length===0)return"Base URL is required";if(!c.startsWith("http"))return"URL must start with http:// or https://"}});Oo(r)&&(Hi("Operation cancelled."),process.exit(0));let o=gd();o.start("Scanning app directory for routes...");let s=await Po(i);o.stop(`Found ${s.length} routes`);let a=Sd(s,r),l=e.output||"./public/sitemap.xml";o.start(`Writing sitemap to ${l}...`);let d=l.substring(0,l.lastIndexOf("/"));if(d)try{await md(d,{recursive:!0})}catch{}await pd(l,a,"utf-8"),o.stop("Sitemap generated successfully!"),hd(`Routes included:
+${s.map(c=>`  \u2022 ${c.path}`).join(`
+`)}`,"Sitemap Summary"),yd(`Sitemap saved to ${bd.cyan(l)}`)}catch(t){Hi(`An error occurred: ${t.message}`)}}async function Po(e,t=""){let n=[];try{let i=await ud(e,{withFileTypes:!0});for(let r of i){let o=$o(e,r.name);if(!(r.name.startsWith("_")||r.name.startsWith("."))){if(r.isDirectory()){let s=await Po(o,$o(t,r.name));n.push(...s)}else if(r.isFile()){if(r.name==="index.tsx"||r.name==="index.ts"||r.name==="index.jsx"||r.name==="index.js"){let s=t===""?"/":`/${t}`;n.push({path:s,file:o})}else if(r.name.match(/\.(tsx|ts|jsx|js)$/)&&!r.name.includes("_layout")&&!r.name.includes("+")){let s=r.name.replace(/\.(tsx|ts|jsx|js)$/,""),a=`/${t}/${s}`.replace(/\/+/g,"/");n.push({path:a,file:o})}}}}}catch(i){throw new Error(`Failed to scan directory ${e}: ${i.message}`)}return n}function Sd(e,t){let n=new Date().toISOString().split("T")[0];return`<?xml version="1.0" encoding="UTF-8"?>
 <urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
 ${e.map(r=>{let o=r.path;return o=o.replace(/\/\([^)]+\)/g,""),o=o.replace(/\/\[.*?\]/g,"/:id"),o=o.replace(/\/+/g,"/"),o===""&&(o="/"),`  <url>
     <loc>${t}${o}</loc>
@@ -15,7 +15,7 @@ ${e.map(r=>{let o=r.path;return o=o.replace(/\/\([^)]+\)/g,""),o=o.replace(/\/\[
     <priority>0.8</priority>
   </url>`}).join(`
 `)}
-</urlset>`}import{randomUUID as Df}from"crypto";import _e from"path";import Di from"axios";import kf from"os";import{spinner as uo,select as Ca,confirm as Da,isCancel as ki,cancel as ka,log as D}from"@clack/prompts";import k from"chalk";import ge from"fs";import{execSync as xa}from"child_process";import Na from"adm-zip";import{spinner as Qd,log as bi}from"@clack/prompts";import Es from"chalk";import ws from"fs";import Is from"path";var gs=`#!/bin/bash
+</urlset>`}import{randomUUID as Su}from"crypto";import ae from"path";import Kn from"axios";import Eu from"os";import{spinner as Ar,select as _s,confirm as $s,isCancel as Wn,cancel as Rs,log as S}from"@clack/prompts";import I from"chalk";import ee from"fs";import{execSync as Os}from"child_process";import Ds from"adm-zip";import{spinner as Ed,log as Un}from"@clack/prompts";import To from"chalk";import ko from"fs";import No from"path";var Co=`#!/bin/bash
 # --- Mach Cloud Build Script (Android) ---
 # All S3 operations use presigned URLs via curl \u2014 zero AWS credentials on instance.
 BUILD_ID="{{BUILD_ID}}"
@@ -229,7 +229,7 @@ unzip -q -o /tmp/source.zip
 rm -f /tmp/source.zip
 
 SOURCE_HAS_ANDROID_PROJECT=false
-if [ -f "/home/ubuntu/build/android/app/build.gradle" ]; then
+if [ -f "/home/ubuntu/build/android/app/build.gradle" ] || [ -f "/home/ubuntu/build/android/app/build.gradle.kts" ]; then
   SOURCE_HAS_ANDROID_PROJECT=true
 fi
 
@@ -262,6 +262,133 @@ clear_js_transform_caches() {
   rm -rf /root/.cache/metro /root/.cache/react-native-packager /home/ubuntu/.cache/metro .expo node_modules/.cache/metro 2>/dev/null || true
 }
 
+read_aab_version_code() {
+  python3 - "$1" <<'PY'
+import sys
+import zipfile
+
+def read_varint(data, offset):
+    value = 0
+    shift = 0
+    while offset < len(data) and shift <= 63:
+        byte = data[offset]
+        offset += 1
+        value |= (byte & 0x7f) << shift
+        if byte & 0x80 == 0:
+            return value, offset
+        shift += 7
+    raise ValueError("malformed protobuf varint")
+
+def fields(data):
+    result = []
+    offset = 0
+    while offset < len(data):
+        key, offset = read_varint(data, offset)
+        number = key >> 3
+        wire = key & 7
+        if number < 1:
+            raise ValueError("malformed protobuf field")
+        if wire == 0:
+            value, offset = read_varint(data, offset)
+        elif wire == 1:
+            value = data[offset:offset + 8]
+            offset += 8
+        elif wire == 2:
+            length, offset = read_varint(data, offset)
+            value = data[offset:offset + length]
+            if len(value) != length:
+                raise ValueError("truncated protobuf field")
+            offset += length
+        elif wire == 5:
+            value = data[offset:offset + 4]
+            offset += 4
+        else:
+            raise ValueError("unsupported protobuf wire type")
+        result.append((number, wire, value))
+    return result
+
+def first(items, number, wire):
+    return next((value for field, kind, value in items if field == number and kind == wire), None)
+
+with zipfile.ZipFile(sys.argv[1]) as bundle:
+    manifest = bundle.read("base/manifest/AndroidManifest.xml")
+
+root = first(fields(manifest), 1, 2)
+if root is None:
+    raise ValueError("AAB base manifest has no root XML element")
+
+attribute = None
+for number, wire, value in fields(root):
+    if number != 4 or wire != 2:
+        continue
+    candidate = fields(value)
+    name = first(candidate, 2, 2)
+    if name == b"versionCode":
+        attribute = candidate
+        break
+if attribute is None:
+    raise ValueError("AAB base manifest has no android:versionCode")
+
+raw = first(attribute, 3, 2)
+if raw is not None:
+    text = raw.decode("utf-8").strip()
+    if text.isdigit():
+        print(text)
+        sys.exit(0)
+
+# aapt2 Resources.proto: XmlAttribute.compiled_item = 6,
+# Item.prim = 7, Primitive.int_decimal_value/int_hexadecimal_value = 6/7.
+item = first(attribute, 6, 2)
+primitive = first(fields(item), 7, 2) if item is not None else None
+compiled = None
+if primitive is not None:
+    for number, wire, value in fields(primitive):
+        if number in (6, 7) and wire == 0:
+            compiled = value
+            break
+if compiled is None:
+    raise ValueError("AAB versionCode is not an integer")
+print(compiled)
+PY
+}
+
+validate_android_artifact_version() {
+  local ARTIFACT="$1"
+  local EXPECTED="$2"
+  local ACTUAL=""
+  case "$ARTIFACT" in
+    *.apk)
+      if command -v apkanalyzer >/dev/null 2>&1; then
+        ACTUAL=$(apkanalyzer manifest version-code "$ARTIFACT" 2>/dev/null | tr -d '[:space:]')
+      fi
+      if ! printf '%s' "$ACTUAL" | grep -Eq '^[0-9]+$'; then
+        local AAPT_TOOL=""
+        AAPT_TOOL=$(command -v aapt2 2>/dev/null || command -v aapt 2>/dev/null || true)
+        if [ -n "$AAPT_TOOL" ]; then
+          ACTUAL=$("$AAPT_TOOL" dump badging "$ARTIFACT" 2>/dev/null | sed -n "s/^package:.*versionCode='\\([0-9][0-9]*\\)'.*/\\1/p" | head -n 1)
+        fi
+      fi
+      ;;
+    *.aab)
+      ACTUAL=$(read_aab_version_code "$ARTIFACT" 2>/dev/null || true)
+      ;;
+    *)
+      echo "[VERSIONING] Unsupported Android artifact: $ARTIFACT"
+      return 1
+      ;;
+  esac
+
+  if ! printf '%s' "$ACTUAL" | grep -Eq '^[0-9]+$'; then
+    echo "[VERSIONING] Could not inspect packaged versionCode in $ARTIFACT"
+    return 1
+  fi
+  if [ "$ACTUAL" != "$EXPECTED" ]; then
+    echo "[VERSIONING] Android versionCode mismatch in $ARTIFACT: expected $EXPECTED, packaged $ACTUAL"
+    return 1
+  fi
+  echo "[ANDROID VALID] $(basename "$ARTIFACT") versionCode $ACTUAL matches MACH assignment"
+}
+
 echo "Cache restore complete."
 
 # CodeArtifact Logic \u2014 use env var if already set (pass as project secret)
@@ -307,6 +434,11 @@ clear_js_transform_caches
 # --- Injected Version Code (Auto-versioning) ---
 # Apply before Expo prebuild so generated Gradle files receive the new versionCode.
 if [ ! -z "$ANDROID_VERSION_CODE" ]; then
+  if ! printf '%s' "$ANDROID_VERSION_CODE" | grep -Eq '^[0-9]+$' ||      [ "$ANDROID_VERSION_CODE" -lt 1 ] || [ "$ANDROID_VERSION_CODE" -gt 2100000000 ]; then
+    echo "[VERSIONING] Invalid ANDROID_VERSION_CODE: $ANDROID_VERSION_CODE"
+    report_status "failed" "Invalid Android versionCode assignment"
+    exit 1
+  fi
   echo "[VERSIONING] Applying injected versionCode: $ANDROID_VERSION_CODE"
   {{FRAMEWORK_ANDROID_VERSION_CODE}}
 fi
@@ -327,14 +459,6 @@ fi
 
 chmod +x $GRADLEW
 
-if [ ! -z "$ANDROID_VERSION_CODE" ]; then
-  if [ -f "app/build.gradle" ]; then
-    node -e "const fs=require('fs');const p='app/build.gradle';let s=fs.readFileSync(p,'utf8');s=s.replace(/versionCode\\s+\\d+/,'versionCode '+process.env.ANDROID_VERSION_CODE);fs.writeFileSync(p,s);console.log('[VERSIONING] app/build.gradle versionCode updated');"
-  elif [ -f "android/app/build.gradle" ]; then
-    node -e "const fs=require('fs');const p='android/app/build.gradle';let s=fs.readFileSync(p,'utf8');s=s.replace(/versionCode\\s+\\d+/,'versionCode '+process.env.ANDROID_VERSION_CODE);fs.writeFileSync(p,s);console.log('[VERSIONING] android/app/build.gradle versionCode updated');"
-  fi
-fi
-
 # Optimization
 if [ -f "gradle.properties" ]; then
     sed -i '/^org.gradle.jvmargs/d' gradle.properties
@@ -410,6 +534,38 @@ if [ $BUILD_EXIT_CODE -eq 0 ]; then
   APK_FILE=$(find . -name "*.apk" | head -n 1)
   AAB_FILE=$(find . -name "*.aab" | head -n 1)
 
+  # Validate the values inside the final packaged manifests. The injected
+  # Gradle property supports Groovy, Kotlin DSL and custom version expressions;
+  # this exact check prevents a custom variant/plugin from silently overriding it.
+  if [ ! -z "$ANDROID_VERSION_CODE" ]; then
+    ARTIFACT_COUNT=0
+    if [ ! -z "$APK_FILE" ]; then
+      ARTIFACT_COUNT=$((ARTIFACT_COUNT + 1))
+      if ! validate_android_artifact_version "$APK_FILE" "$ANDROID_VERSION_CODE"; then
+        upload_logs
+        report_status "failed" "Packaged APK versionCode did not match MACH assignment"
+        mark_done
+        exit 1
+      fi
+    fi
+    if [ ! -z "$AAB_FILE" ]; then
+      ARTIFACT_COUNT=$((ARTIFACT_COUNT + 1))
+      if ! validate_android_artifact_version "$AAB_FILE" "$ANDROID_VERSION_CODE"; then
+        upload_logs
+        report_status "failed" "Packaged AAB versionCode did not match MACH assignment"
+        mark_done
+        exit 1
+      fi
+    fi
+    if [ "$ARTIFACT_COUNT" -eq 0 ]; then
+      echo "[VERSIONING] Gradle produced no APK or AAB to validate."
+      upload_logs
+      report_status "failed" "No Android artifact available for versionCode validation"
+      mark_done
+      exit 1
+    fi
+  fi
+
   # Renaming logic for clarity
   CLEAN_NAME=$(echo "\${MACH_APP_NAME}-\${MACH_BUILD_PROFILE}" | sed 's/[^a-zA-Z0-9-]/_/g')
   BUILD_ID_SHORT=$(echo "\${BUILD_ID}" | cut -c1-8)
@@ -533,119 +689,15 @@ for pid in "\${cache_pids[@]}"; do wait "$pid" || true; done
 echo "Build orchestrator finished. Auto-terminating instance in 5 seconds..."
 sleep 5
 sudo shutdown -h now
-`;import Jd from"crypto";import{log as Ge}from"@clack/prompts";import Ve from"chalk";import{execSync as Gd}from"child_process";import Ke from"fs";import cn from"path";var hs={id:"expo",displayName:"Expo",applyLocalProcessEnv:e=>{e.developmentClient?(Ge.info(Ve.blue("\u2139\uFE0F  Configuring Expo build to INCLUDE expo-dev-client (Development Client mode)...")),delete process.env.EXPO_NO_DEV_CLIENT,delete process.env.EXPO_AUTOLINKING_EXCLUDE):(Ge.info(Ve.blue("\u2139\uFE0F  Configuring Expo build to EXCLUDE expo-dev-client (Production/Staging mode)...")),process.env.EXPO_NO_DEV_CLIENT="1",process.env.EXPO_AUTOLINKING_EXCLUDE="expo-dev-client")},localAndroidEnv:(e,t)=>({EXPO_NO_DOTENV:"1",MACH_FRAMEWORK:"expo",MACH_BUILD_PROFILE:t}),remoteEnvSetupScript:()=>`
-export MACH_FRAMEWORK="expo"
-echo "[ENV] MACH_FRAMEWORK=$MACH_FRAMEWORK"
-export EXPO_NO_DOTENV="\${EXPO_NO_DOTENV:-1}"
-echo "[ENV] EXPO_NO_DOTENV=$EXPO_NO_DOTENV"
-`,iosRemotePrebuildScript:()=>`
-echo "[STEP_START:prebuild] $(date +%s)"
-echo "Expo framework configured. Running prebuild..."
-# Use --no-install so we can patch the Podfile before pod install.
-CI=1 npx expo prebuild --platform ios --clean --no-install
-`,androidRemoteVersionCodeScript:()=>`
-if [ ! -z "$ANDROID_VERSION_CODE" ]; then
-  node -e "const fs=require('fs');const p='app.json';if(fs.existsSync(p)){const j=JSON.parse(fs.readFileSync(p,'utf8'));j.expo=j.expo||{};j.expo.android=j.expo.android||{};j.expo.android.versionCode=Number(process.env.ANDROID_VERSION_CODE);fs.writeFileSync(p,JSON.stringify(j,null,2));console.log('[VERSIONING] app.json expo.android.versionCode updated');}"
-fi
-`,androidRemotePrebuildScript:()=>`
-# Compute a hash of native-affecting files and the Mach-injected app env to
-# decide if android/ cache is still valid. Env names are project-defined, so the
-# CLI precomputes MACH_ENV_FINGERPRINT from all relevant managed values.
-if [ -f "app.json" ] || [ -f "app.config.ts" ] || [ -f "app.config.js" ]; then
-  PREBUILD_HASH_FILE="/home/ubuntu/build/.mach-prebuild-hash"
-  PREBUILD_ENV_HASH="\${MACH_ENV_FINGERPRINT:-missing-env-fingerprint}"
-  PREBUILD_CURRENT_HASH=$(
-    {
-      cat app.json app.config.ts app.config.js 2>/dev/null
-      node -e "try{const p=require('./package.json');const keys=Object.keys({...p.dependencies,...p.devDependencies}).filter(k=>k.startsWith('expo-')||k.startsWith('@expo/')||k.startsWith('@react-native'));console.log(keys.join(','))}catch(e){}" 2>/dev/null
-      printf '%s\\n' "$PREBUILD_ENV_HASH"
-    } | md5sum | cut -d' ' -f1
-  )
-
-  ANDROID_CACHE_VALID=false
-  if [ -f "$PREBUILD_HASH_FILE" ] && [ -d "android" ] && [ -f "android/gradlew" ]; then
-    STORED_HASH=$(cat "$PREBUILD_HASH_FILE" 2>/dev/null)
-    if [ "$PREBUILD_CURRENT_HASH" = "$STORED_HASH" ]; then
-      ANDROID_CACHE_VALID=true
-      echo "[PREBUILD] android/ cache is valid (hash match) \u2014 skipping expo prebuild."
-    fi
-  fi
-
-  if [ "$ANDROID_CACHE_VALID" = "false" ]; then
-    echo "[PREBUILD] Running expo prebuild..."
-    if [ -f "node_modules/.bin/expo" ]; then
-      node_modules/.bin/expo prebuild --platform android --no-install
-    else
-      npx expo prebuild --platform android --no-install
-    fi
-    echo "$PREBUILD_CURRENT_HASH" > "$PREBUILD_HASH_FILE"
-  fi
-fi
-`,androidRemoteGradlePropertiesScript:()=>`
-echo "expo.enableHermes=true" >> gradle.properties
-`,androidRemoteReleaseGradlePropertiesScript:()=>`
-echo "expo.enableProguardInReleaseBuilds=true" >> gradle.properties
-`,prepareLocalProject:async e=>{let{platform:t,options:n,cacheMeta:i,cacheMetaDir:r,currentBuildEnv:o,reportStep:s,loggedRun:l,configureXcodeNodeBinary:a,podsFingerprint:c,writeCacheMeta:u}=e,d=n.iosBundleIdentifier||"",p=n.name||"",f=cn.join(process.cwd(),"app.json"),g=null;Ge.info(Ve.blue(`Running Expo prebuild for ${t}...`));try{if(Ke.existsSync(f)){g=Ke.readFileSync(f,"utf-8");let S=JSON.parse(g);S.expo=S.expo||{},p||(p=S.expo.name||""),t==="ios"&&!d&&(d=S.expo?.ios?.bundleIdentifier||""),n.name&&(S.expo.name=n.name),n.scheme&&(S.expo.scheme=n.scheme),t==="ios"&&n.iosBundleIdentifier?(S.expo.ios=S.expo.ios||{},S.expo.ios.bundleIdentifier=n.iosBundleIdentifier):t==="android"&&n.androidPackage&&(S.expo.android=S.expo.android||{},S.expo.android.package=n.androidPackage),Ke.writeFileSync(f,JSON.stringify(S,null,2))}let h=["exec","--","expo","prebuild","--platform",t,"--no-install"];if(await s("prebuild"),await l("npm",h,process.cwd(),o()),t!=="ios"||!Ke.existsSync("ios"))return{appName:p,bundleId:d};await s("pods"),Ge.info(Ve.blue("Running pod install..."));try{let S=cn.resolve("ios"),b=cn.join(S,"Podfile");if(!Ke.existsSync(b))throw new Error("ios/Podfile not found. Skipping pod install.");let y=o();a(S,y);let P=Ke.readFileSync(b,"utf-8"),v=n.iosDeploymentTarget||"13.4";if(!n.developmentClient&&(Ge.info(Ve.blue("\u2139\uFE0F  Patching Podfile to EXCLUDE expo-dev-client...")),P.includes("use_expo_modules!")&&!P.includes("exclude:"))){let x=/use_expo_modules!(\s*)$/m;x.test(P)?P=P.replace(x,'use_expo_modules!(exclude: ["expo-dev-client"])$1'):P=P.replace("use_expo_modules!",'use_expo_modules!(exclude: ["expo-dev-client"])')}let F=`
-      installer.generated_projects.each do |project|
-        project.targets.each do |target|
-          target.build_configurations.each do |config|
-            config.build_settings['IPHONEOS_DEPLOYMENT_TARGET'] = '${v}'
-          end
-        end
-      end
-      installer.pods_project.targets.each do |target|
-        target.build_configurations.each do |config|
-          config.build_settings['IPHONEOS_DEPLOYMENT_TARGET'] = '${v}'
-        end
-      end
-`,H=/post_install\s+do\s+\|installer\|/;if(H.test(P))Ge.info(Ve.dim(`Injecting deployment target (${v}) into existing post_install hook...`)),P=P.replace(H,`post_install do |installer|
-${F}`),Ke.writeFileSync(b,P);else{Ge.info(Ve.dim(`Appending new post_install hook for deployment target (${v})...`));let x=`
-post_install do |installer|
-${F}
-end
-`;Ke.appendFileSync(b,x)}let q="/opt/homebrew/bin/pod",I=Ke.existsSync(q)?q:"pod",_=c(S);Ke.existsSync(cn.join(S,"Pods"))&&i.pods&&i.pods!==_&&(await e.reportLog(`[CACHE] Podfile/Podfile.lock changed \u2014 wiping ios/Pods
-`),Ge.info(Ve.dim("Podfile fingerprint changed \u2014 clearing Pods for clean install...")),Ke.rmSync(cn.join(S,"Pods"),{recursive:!0,force:!0})),Ge.info(Ve.dim(`Using pod command: ${I} in ${S}`)),await l(I,["install"],S,y),i.pods=_,u(r,i)}catch(S){let b=S.message||"Unknown error";Ge.warn(Ve.yellow(`Native "pod" command failed: ${b}`)),Ge.info(Ve.dim("Falling back to npm exec pod-install..."));let y=o();a(cn.resolve("ios"),y),Ge.info(Ve.magenta(`${m.nameUpper}_DEBUG: Executing pod-install override via npx --yes pod-install@latest`)),await l("npx",["--yes","pod-install@latest","ios"],process.cwd(),y)}if(Ke.existsSync("ios/Pods")){Ge.info(Ve.dim("Disabling signing for Pod targets to prevent conflicts..."));try{Gd(`find ios/Pods -name "project.pbxproj" -exec sed -i '' 's/buildSettings = {/buildSettings = { CODE_SIGNING_ALLOWED = NO; CODE_SIGNING_REQUIRED = NO; PROVISIONING_PROFILE_SPECIFIER = ""; EXPANDED_CODE_SIGN_IDENTITY = "";/g' {} +`,{stdio:"ignore"})}catch{}}return{appName:p,bundleId:d}}finally{g&&Ke.writeFileSync(f,g)}}};import{log as kt}from"@clack/prompts";import xt from"chalk";import At from"fs";import xn from"path";import{spawnSync as Vd}from"child_process";import bt from"fs";import Dt from"path";var ys=(e,t)=>Dt.join(e,"node_modules",".bin",process.platform==="win32"?`${t}.cmd`:t),Kd=e=>{try{return JSON.parse(bt.readFileSync(Dt.join(e,"package.json"),"utf-8"))}catch{return{}}};function Jt(e,t){let n=Kd(e);return!!(n.dependencies?.[t]||n.devDependencies?.[t])}function Pr(e,t,n,i={}){let r=`${t} ${n.join(" ")}`,o=Vd(t,n,{cwd:e,stdio:"inherit",env:{...process.env,CI:process.env.CI||"1",EXPO_NO_TELEMETRY:"1",...i}});return o.error?{ok:!1,command:r,error:o.error.message}:o.status!==0?{ok:!1,command:r,error:`${t} exited with code ${o.status}`}:{ok:!0,command:r}}function Ss(e){return Pr(e,"npx",["--yes","install-expo-modules@latest"])}function bs(e){let t=ys(e,"expo");return bt.existsSync(t)?Pr(e,t,["install","expo-updates"]):{ok:!1,command:"npx expo install expo-updates",error:"Expo Modules are not installed. Install Expo Modules first."}}function Rr(e){let t=[];return bt.existsSync(Dt.join(e,"ios"))&&t.push("ios"),bt.existsSync(Dt.join(e,"android"))&&t.push("android"),t}function Si(e){let t=ys(e.cwd,"expo-updates");return bt.existsSync(t)?e.platforms.map(n=>Pr(e.cwd,t,["configuration:syncnative","--platform",n,"--workflow","generic"],{MACH_OTA_RUNTIME_VERSION:e.runtimeVersion,MACH_OTA_CHANNEL:e.channel,MACH_OTA_URL:e.url})):[{ok:!1,command:"expo-updates configuration:syncnative",error:"expo-updates is not installed in this project."}]}function As(e){let t=Dt.join(e,"android","app","src","main","AndroidManifest.xml"),n=Dt.join(e,"android","app","src","main","res","values","strings.xml"),i,r=Dt.join(e,"ios");if(bt.existsSync(r)){let o=[r];for(;o.length>0&&!i;){let s=o.shift();for(let l of bt.readdirSync(s,{withFileTypes:!0})){if(l.name==="Pods"||l.name==="build")continue;let a=Dt.join(s,l.name);if(l.isDirectory())o.push(a);else if(l.isFile()&&l.name==="Expo.plist"){i=a;break}}}}return{...bt.existsSync(t)?{androidManifest:t}:{},...bt.existsSync(n)?{androidStrings:n}:{},...i?{iosExpoPlist:i}:{}}}var zd=(e,t)=>!At.existsSync(e)||!At.existsSync(t)?!1:At.readFileSync(e,"utf-8")!==At.readFileSync(t,"utf-8"),Or={id:"react-native",displayName:"React Native",applyLocalProcessEnv:e=>{delete process.env.EXPO_NO_DEV_CLIENT,delete process.env.EXPO_AUTOLINKING_EXCLUDE,delete process.env.EXPO_NO_DOTENV},localAndroidEnv:(e,t)=>({MACH_FRAMEWORK:"react-native",MACH_BUILD_PROFILE:t}),remoteEnvSetupScript:()=>`
-export MACH_FRAMEWORK="react-native"
-echo "[ENV] MACH_FRAMEWORK=$MACH_FRAMEWORK"
-unset EXPO_NO_DOTENV
-`,iosRemotePrebuildScript:()=>`
-echo "[STEP_START:prebuild] $(date +%s)"
-echo "[PREBUILD] React Native framework configured. Skipping Expo prebuild."
-if [ -n "\${MACH_OTA_RUNTIME_VERSION:-}" ]; then
-  if [ ! -x node_modules/.bin/expo-updates ]; then
-    echo "[OTA] expo-updates is missing. Run mach ota setup and commit the dependency changes."
-    exit 1
-  fi
-  echo "[OTA] Synchronizing iOS Expo Updates runtime $MACH_OTA_RUNTIME_VERSION"
-  node_modules/.bin/expo-updates configuration:syncnative --platform ios --workflow generic
-fi
-`,androidRemoteVersionCodeScript:()=>`
-echo "[VERSIONING] React Native framework configured. Version code will be injected through Gradle."
-`,androidRemotePrebuildScript:()=>`
-echo "[PREBUILD] React Native framework configured. Skipping Expo prebuild."
-if [ -n "\${MACH_OTA_RUNTIME_VERSION:-}" ]; then
-  if [ ! -x node_modules/.bin/expo-updates ]; then
-    echo "[OTA] expo-updates is missing. Run mach ota setup and commit the dependency changes."
-    exit 1
-  fi
-  echo "[OTA] Synchronizing Android Expo Updates runtime $MACH_OTA_RUNTIME_VERSION"
-  node_modules/.bin/expo-updates configuration:syncnative --platform android --workflow generic
-fi
-`,androidRemoteGradlePropertiesScript:()=>`
-:
-`,androidRemoteReleaseGradlePropertiesScript:()=>`
-:
-`,prepareLocalProject:async e=>{let{platform:t,cacheMeta:n,cacheMetaDir:i,currentBuildEnv:r,reportStep:o,reportLog:s,loggedRun:l,configureXcodeNodeBinary:a,podsFingerprint:c,writeCacheMeta:u}=e,d=r(),p=d.MACH_OTA_RUNTIME_VERSION,f=d.MACH_OTA_CHANNEL,g=d.MACH_OTA_URL;if(p&&f&&g){let M=Si({cwd:process.cwd(),platforms:[t],runtimeVersion:p,channel:f,url:g}).find(x=>!x.ok);if(M)throw new Error(`Could not synchronize ${t} Expo Updates configuration: ${M.error||M.command}. Run \`mach ota setup --platform ${t}\` and try again.`);kt.info(xt.green(`\u2713 OTA runtime ${p} synchronized for ${t}`))}if(t!=="ios")return{};let h=xn.resolve("ios"),S=xn.join(h,"Podfile");if(!At.existsSync(S))throw new Error("React Native iOS build requires ios/Podfile. Commit the ios directory for vanilla React Native projects.");await o("pods"),kt.info(xt.blue("Running React Native pod install..."));let b=r();a(h,b);let y=xn.join(h,"Pods"),P=xn.join(h,"Podfile.lock"),v=xn.join(y,"Manifest.lock"),F=At.existsSync(y),H=c(h);F&&n.reactNativePods&&n.reactNativePods!==H?(await s(`[CACHE] React Native Podfile/Podfile.lock changed - wiping ios/Pods
-`),kt.info(xt.dim("React Native Podfile fingerprint changed - clearing Pods for clean install...")),At.rmSync(y,{recursive:!0,force:!0})):F&&zd(P,v)&&(await s(`[CACHE] React Native Pods Manifest.lock is out of sync - wiping ios/Pods
-`),kt.info(xt.dim("React Native Pods manifest is out of sync - clearing Pods for clean install...")),At.rmSync(y,{recursive:!0,force:!0}));let q="/opt/homebrew/bin/pod",I=At.existsSync(q)?q:"pod";try{kt.info(xt.dim(`Using pod command: ${I} in ${h}`)),await l(I,["install"],h,b)}catch(_){let M=_.message||"Unknown error";kt.warn(xt.yellow(`Native "pod" command failed: ${M}`)),kt.info(xt.dim("Falling back to npx pod-install..."));let x=r();a(h,x),kt.info(xt.magenta(`${m.nameUpper}_DEBUG: Executing pod-install fallback via npx --yes pod-install@latest`)),await l("npx",["--yes","pod-install@latest","ios"],process.cwd(),x)}return n.reactNativePods=c(h),u(i,n),{}}};var Wd={expo:hs,"react-native":Or};function Et(e){if(!e)return Or;if(e!=="flutter")return Wd[e];throw new Error('Flutter builds are not implemented yet. Set framework to "expo" or "react-native" for this build.')}var qd="mach-env-v2-js-bundle-cache",Yd=new Set(["BUILD_ID","BUILD_NUMBER","ANDROID_VERSION_CODE","MACH_TOKEN","MACH_DEBUG","MACH_S3_DEBUG","MACH_ENV_FINGERPRINT","CODEARTIFACT_AUTH_TOKEN","EXPO_ZQRN_BB_REPO_TOKEN","SENTRY_AUTH_TOKEN","IOS_DIST_P12","IOS_PROVISIONING_PROFILE","IOS_P12_PASSWORD","MATCH_ENCRYPTION_PASSPHRASE","MATCH_PASSWORD","MATCH_KEYCHAIN_NAME","MATCH_KEYCHAIN_PASSWORD","APPLE_TEAM_ID","FASTLANE_TEAM_ID","ANDROID_KEYSTORE","ANDROID_KEYSTORE_BASE64","ANDROID_STORE_PASSWORD","ANDROID_KEY_PASSWORD","ANDROID_KEY_ALIAS","KEYSTORE_PASSWORD","KEYSTORE_ALIAS","AWS_ACCESS_KEY_ID","AWS_SECRET_ACCESS_KEY","AWS_SESSION_TOKEN","AWS_SECURITY_TOKEN","GITHUB_TOKEN","NPM_TOKEN"]),Xd=["PRESIGNED_","KEYSTORE_PASSWORD_"],Zd=e=>!e||Yd.has(e)?!1:!Xd.some(t=>e.startsWith(t)),qt=(e,t,n)=>{let i=Et(n.framework);return{...e,...i.localAndroidEnv(n,t),MACH_APP_NAME:n.appName||n.name||"App"}},dn=e=>{let t=Object.entries(e).filter(([n])=>Zd(n)).sort(([n],[i])=>n.localeCompare(i));return Jd.createHash("sha256").update(JSON.stringify({version:qd,entries:t})).digest("hex")};var Cr=e=>e.replace(/\\/g,"\\\\").replace(/"/g,'\\"').replace(/\$/g,"\\$").replace(/`/g,"\\`"),Dr=e=>["1","true","yes","on"].includes(String(e||"").trim().toLowerCase()),eu=e=>/(^|[-_])(maestro|e2e|test|emulator)([-_]|$)/i.test(e),tu=(e,t,n)=>{let i=n.MACH_ANDROID_RELEASE_ABIS||n.MACH_ANDROID_ABIS||n.MACH_PROFILE_ANDROID_RELEASE_ABIS||n.MACH_PROFILE_ANDROID_ABIS||n.MACH_PROFILE_ANDROID_ARCHITECTURES||n.MACH_PROFILE_ANDROID_REACT_NATIVE_ARCHITECTURES;return i||(!!e.maestro||eu(t)||Dr(n.MACH_PROFILE_ANDROID_EMULATOR)||Dr(n.MACH_ANDROID_INCLUDE_EMULATOR_ABIS)||Dr(n.MACH_PROFILE_ANDROID_INCLUDE_EMULATOR_ABIS)?"armeabi-v7a,arm64-v8a,x86_64":"armeabi-v7a,arm64-v8a")},vs=async(e,t,n={},i,r)=>{let o=Qd(),s=Et(e.framework),l=e.buildProfile||"production",a=l==="production",c=e.apk===!0,u=e.developmentClient?"assembleDebug":a?"bundleRelease":"assembleRelease",d=e.buildCommand||(c?"assembleRelease":u),p=e.nodeVersion?[`echo "[NODE] Switching to Node ${e.nodeVersion}..."`,`CURRENT_MAJOR=$(node -e "process.stdout.write(process.version.split('.')[0].replace('v',''))" 2>/dev/null || echo "0")`,`if [ "$CURRENT_MAJOR" != "${e.nodeVersion}" ]; then`,`  curl -fsSL https://deb.nodesource.com/setup_${e.nodeVersion}.x | bash - 2>&1`,"  apt-get install -y nodejs 2>&1",'  echo "[NODE] Installed Node $(node -v)"',"else",'  echo "[NODE] Already on Node $(node -v) \u2014 no switch needed"',"fi"].join(`
-`):"",f;if(r){let y=Is.isAbsolute(r)?r:Is.resolve(process.cwd(),r);ws.existsSync(y)?(f=ws.readFileSync(y,"utf-8"),bi.info(Es.magenta(`\u2713 Loaded preBuild hook: ${r}`))):bi.warn(`preBuild script not found at ${y} \u2014 skipping`)}let g=tu(e,l,n),h={...qt(n,l,e),MACH_ANDROID_RELEASE_ABIS:g},S=dn(h),b=gs.replace(/\{\{BUILD_ID\}\}/g,t).replace(/\{\{BUILD_COMMAND\}\}/g,d).replace("{{NODE_VERSION_SETUP}}",p).replace("{{ENV_VARS}}",`
-export MACH_APP_NAME="${Cr(h.MACH_APP_NAME)}"
-export MACH_BUILD_PROFILE="${Cr(l)}"
-export MACH_ANDROID_RELEASE_ABIS="${Cr(g)}"
-export MACH_ENV_FINGERPRINT="${S}"
+`;var Gi=e=>e.replace(/\\/g,"\\\\").replace(/"/g,'\\"').replace(/\$/g,"\\$").replace(/`/g,"\\`"),Vi=e=>["1","true","yes","on"].includes(String(e||"").trim().toLowerCase()),Id=e=>/(^|[-_])(maestro|e2e|test|emulator)([-_]|$)/i.test(e),wd=(e,t,n)=>{let i=n.MACH_ANDROID_RELEASE_ABIS||n.MACH_ANDROID_ABIS||n.MACH_PROFILE_ANDROID_RELEASE_ABIS||n.MACH_PROFILE_ANDROID_ABIS||n.MACH_PROFILE_ANDROID_ARCHITECTURES||n.MACH_PROFILE_ANDROID_REACT_NATIVE_ARCHITECTURES;return i||(!!e.maestro||Id(t)||Vi(n.MACH_PROFILE_ANDROID_EMULATOR)||Vi(n.MACH_ANDROID_INCLUDE_EMULATOR_ABIS)||Vi(n.MACH_PROFILE_ANDROID_INCLUDE_EMULATOR_ABIS)?"armeabi-v7a,arm64-v8a,x86_64":"armeabi-v7a,arm64-v8a")},xo=async(e,t,n={},i,r)=>{let o=Ed(),s=Cn(e.framework),a=e.buildProfile||"production",l=a==="production",d=e.apk===!0,c=e.developmentClient?"assembleDebug":l?"bundleRelease":"assembleRelease",u=e.buildCommand||(d?"assembleRelease":c),f=e.nodeVersion?[`echo "[NODE] Switching to Node ${e.nodeVersion}..."`,`CURRENT_MAJOR=$(node -e "process.stdout.write(process.version.split('.')[0].replace('v',''))" 2>/dev/null || echo "0")`,`if [ "$CURRENT_MAJOR" != "${e.nodeVersion}" ]; then`,`  curl -fsSL https://deb.nodesource.com/setup_${e.nodeVersion}.x | bash - 2>&1`,"  apt-get install -y nodejs 2>&1",'  echo "[NODE] Installed Node $(node -v)"',"else",'  echo "[NODE] Already on Node $(node -v) \u2014 no switch needed"',"fi"].join(`
+`):"",p;if(r){let w=No.isAbsolute(r)?r:No.resolve(process.cwd(),r);ko.existsSync(w)?(p=ko.readFileSync(w,"utf-8"),Un.info(To.magenta(`\u2713 Loaded preBuild hook: ${r}`))):Un.warn(`preBuild script not found at ${w} \u2014 skipping`)}let g=wd(e,a,n),h={...Tn(n,a,e),MACH_ANDROID_RELEASE_ABIS:g},y=kn(h),b=Co.replace(/\{\{BUILD_ID\}\}/g,t).replace(/\{\{BUILD_COMMAND\}\}/g,u).replace("{{NODE_VERSION_SETUP}}",f).replace("{{ENV_VARS}}",`
+export MACH_APP_NAME="${Gi(h.MACH_APP_NAME)}"
+export MACH_BUILD_PROFILE="${Gi(a)}"
+export MACH_ANDROID_RELEASE_ABIS="${Gi(g)}"
+export MACH_ENV_FINGERPRINT="${y}"
 ${s.remoteEnvSetupScript().trim()}
 {{ENV_VARS}}
-    `).replace("{{FRAMEWORK_ANDROID_VERSION_CODE}}",s.androidRemoteVersionCodeScript().trim()).replace("{{FRAMEWORK_ANDROID_PREBUILD}}",s.androidRemotePrebuildScript().trim()).replace("{{FRAMEWORK_ANDROID_GRADLE_PROPERTIES}}",s.androidRemoteGradlePropertiesScript().trim()).replace("{{FRAMEWORK_ANDROID_RELEASE_GRADLE_PROPERTIES}}",s.androidRemoteReleaseGradlePropertiesScript().trim());if(e.dryRun){bi.info("User Data Script (dry run):"),console.log(b);return}o.start("Requesting cloud build instance...");try{let y=await O.post("/builds/launch-android",{projectId:i,buildId:t,platform:e.platform,buildProfile:e.buildProfile,buildCommand:d,instanceType:e.instanceType,ami:e.ami,keepInstance:e.keepInstance,region:e.region,subnet:e.subnet,securityGroup:e.securityGroup,projectSecrets:n,dryRun:e.dryRun,userDataScript:b,preBuildScriptContent:f});if(y.data.status!=="success")throw new Error(y.data.message||"Failed to launch build instance");let P=y.data.instanceId;return o.stop("Build Started"),bi.success(Es.green(`Build initiated on cloud instance (${P}).`)),{instanceId:P}}catch(y){o.stop("Android Build Failed");let P=y.response?.data?.message||y.message;throw new Error(`Failed to launch Android build: ${P}`)}};import{spinner as nu,log as Yt}from"@clack/prompts";import wt from"chalk";import iu from"fs";import{execSync as Nn}from"child_process";var $s=`#!/bin/bash
+    `).replace("{{FRAMEWORK_ANDROID_VERSION_CODE}}",s.androidRemoteVersionCodeScript().trim()).replace("{{FRAMEWORK_ANDROID_PREBUILD}}",s.androidRemotePrebuildScript().trim()).replace("{{FRAMEWORK_ANDROID_GRADLE_PROPERTIES}}",s.androidRemoteGradlePropertiesScript().trim()).replace("{{FRAMEWORK_ANDROID_RELEASE_GRADLE_PROPERTIES}}",s.androidRemoteReleaseGradlePropertiesScript().trim());if(e.dryRun){Un.info("User Data Script (dry run):"),console.log(b);return}o.start("Requesting cloud build instance...");try{let w=await $.post("/builds/launch-android",{projectId:i,buildId:t,platform:e.platform,buildProfile:e.buildProfile,buildCommand:u,instanceType:e.instanceType,ami:e.ami,keepInstance:e.keepInstance,region:e.region,subnet:e.subnet,securityGroup:e.securityGroup,projectSecrets:n,dryRun:e.dryRun,userDataScript:b,preBuildScriptContent:p});if(w.data.status!=="success")throw new Error(w.data.message||"Failed to launch build instance");let L=w.data.instanceId;return o.stop("Build Started"),Un.success(To.green(`Build initiated on cloud instance (${L}).`)),{instanceId:L}}catch(w){o.stop("Android Build Failed");let L=w.response?.data?.message||w.message;throw new Error(`Failed to launch Android build: ${L}`)}};import{spinner as vd,log as gt}from"@clack/prompts";import We from"chalk";import _d from"fs";import{execSync as Vt}from"child_process";var Lo=`#!/bin/bash
 # --- Mach Cloud Build Script (iOS) ---
 # All S3 operations use presigned URLs via curl \u2014 zero AWS credentials on Mac.
 
@@ -832,6 +884,68 @@ fi
 
 {{FRAMEWORK_PREBUILD}}
 
+IOS_BUILD_NUMBER="\${BUILD_NUMBER:-\${CURRENT_PROJECT_VERSION:-}}"
+IOS_VERSION_ARGS=()
+if [ -n "$IOS_BUILD_NUMBER" ]; then
+  if ! [[ "$IOS_BUILD_NUMBER" =~ ^[0-9]+(\\.[0-9]+){0,2}$ ]]; then
+    echo "Error: Invalid iOS build number '$IOS_BUILD_NUMBER'. Expected one to three period-separated integers."
+    exit 1
+  fi
+
+  export BUILD_NUMBER="$IOS_BUILD_NUMBER"
+  export CURRENT_PROJECT_VERSION="$IOS_BUILD_NUMBER"
+  IOS_VERSION_ARGS=(
+    "BUILD_NUMBER=$IOS_BUILD_NUMBER"
+    "CURRENT_PROJECT_VERSION=$IOS_BUILD_NUMBER"
+    "INFOPLIST_KEY_CFBundleVersion=$IOS_BUILD_NUMBER"
+  )
+
+  PATCHED_PLISTS=0
+  while IFS= read -r -d '' PLIST_PATH; do
+    case "$PLIST_PATH" in
+      */Pods/*|*/build/*|*/DerivedData/*|*.framework/*|*.xcframework/*|*.bundle/*) continue ;;
+    esac
+    if /usr/libexec/PlistBuddy -c "Print :CFBundleVersion" "$PLIST_PATH" >/dev/null 2>&1; then
+      /usr/libexec/PlistBuddy -c "Set :CFBundleVersion $IOS_BUILD_NUMBER" "$PLIST_PATH"
+    else
+      /usr/libexec/PlistBuddy -c "Add :CFBundleVersion string $IOS_BUILD_NUMBER" "$PLIST_PATH"
+    fi
+    PATCHED_PLISTS=$((PATCHED_PLISTS + 1))
+  done < <(find ios -type f -name "Info.plist" -print0 2>/dev/null)
+  echo "[VERSIONING] Applied MACH iOS buildNumber $IOS_BUILD_NUMBER to $PATCHED_PLISTS native Info.plist file(s)."
+fi
+
+validate_ios_bundle_version() {
+  local BUNDLE_PATH="$1"
+  local PLIST_PATH="$BUNDLE_PATH/Info.plist"
+  if [ ! -f "$PLIST_PATH" ]; then
+    echo "Error: Missing Info.plist in $BUNDLE_PATH"
+    return 1
+  fi
+
+  local ACTUAL_VERSION
+  ACTUAL_VERSION=$(/usr/libexec/PlistBuddy -c "Print :CFBundleVersion" "$PLIST_PATH" 2>/dev/null || true)
+  if ! [[ "$ACTUAL_VERSION" =~ ^[0-9]+(\\.[0-9]+){0,2}$ ]]; then
+    echo "Error: Invalid CFBundleVersion '$ACTUAL_VERSION' in $BUNDLE_PATH"
+    return 1
+  fi
+  if [ -n "$IOS_BUILD_NUMBER" ] && [ "$ACTUAL_VERSION" != "$IOS_BUILD_NUMBER" ]; then
+    echo "Error: iOS build number mismatch in $BUNDLE_PATH. Expected $IOS_BUILD_NUMBER, found $ACTUAL_VERSION."
+    return 1
+  fi
+  echo "[IPA VALID] $(basename "$BUNDLE_PATH") CFBundleVersion $ACTUAL_VERSION"
+}
+
+validate_ios_bundle_tree() {
+  local ROOT_APP="$1"
+  while IFS= read -r -d '' BUNDLE_PATH; do
+    case "$BUNDLE_PATH" in
+      */Frameworks/*) continue ;;
+    esac
+    validate_ios_bundle_version "$BUNDLE_PATH" || return 1
+  done < <(find "$ROOT_APP" -type d \\( -name "*.app" -o -name "*.appex" \\) -print0)
+}
+
 configure_xcode_node_binary
 
 # 5. Apply simulator fix to Podfile dynamically (keeps project source clean)
@@ -983,7 +1097,9 @@ security unlock-keychain -p "\${TEMP_KEYCHAIN_PASSWORD}" "\${TEMP_KEYCHAIN_PATH}
 echo "[STEP_START:build] $(date +%s)"
 clear_js_transform_caches
 configure_xcode_node_binary
-if [ -f "Fastfile" ] || [ -d "fastlane" ]; then
+# MACH-owned native versions use the canonical Xcode path below so version
+# injection and signed-artifact verification cannot be bypassed by a custom lane.
+if { [ -f "Fastfile" ] || [ -d "fastlane" ]; } && [ -z "$IOS_BUILD_NUMBER" ]; then
   bundle exec fastlane ios build
 elif [ -d "ios" ]; then
   cd ios
@@ -1161,13 +1277,13 @@ NODE
         echo "Using simulator destination: $SIMULATOR_DESTINATION"
       fi
       SIMULATOR_DESTINATION_ARGS=(-destination "$SIMULATOR_DESTINATION")
-      run_simulator_xcodebuild xcodebuild build -workspace "$WORKSPACE" -scheme "$SCHEME" -configuration "$USER_CONFIG" -sdk "$SDK" "\${SIMULATOR_DESTINATION_ARGS[@]}" -derivedDataPath "$DERIVED_DATA_PATH" $EXTRA_ARGS || exit 1
+      run_simulator_xcodebuild xcodebuild build -workspace "$WORKSPACE" -scheme "$SCHEME" -configuration "$USER_CONFIG" -sdk "$SDK" "\${SIMULATOR_DESTINATION_ARGS[@]}" -derivedDataPath "$DERIVED_DATA_PATH" "\${IOS_VERSION_ARGS[@]}" $EXTRA_ARGS || exit 1
     else
       ARCHIVE_SIGN_ARGS=("CODE_SIGN_STYLE=Manual")
       [ -n "$TEAM_ID" ] && ARCHIVE_SIGN_ARGS+=("DEVELOPMENT_TEAM=$TEAM_ID")
       [ -n "$PROFILE_UUID" ] && ARCHIVE_SIGN_ARGS+=("PROVISIONING_PROFILE=$PROFILE_UUID")
       [ -n "$PROFILE_NAME" ] && ARCHIVE_SIGN_ARGS+=("PROVISIONING_PROFILE_SPECIFIER=$PROFILE_NAME")
-      xcodebuild archive -workspace "$WORKSPACE" -scheme "$SCHEME" -archivePath "../build.xcarchive" -configuration "$USER_CONFIG" -sdk "$SDK" -derivedDataPath "$DERIVED_DATA_PATH" \${AUTH_PARAMS:+-allowProvisioningUpdates $AUTH_PARAMS} "\${ARCHIVE_SIGN_ARGS[@]}" -parallelizeTargets -allowConcurrentBuilds || exit 1
+      xcodebuild archive -workspace "$WORKSPACE" -scheme "$SCHEME" -archivePath "../build.xcarchive" -configuration "$USER_CONFIG" -sdk "$SDK" -derivedDataPath "$DERIVED_DATA_PATH" "\${IOS_VERSION_ARGS[@]}" \${AUTH_PARAMS:+-allowProvisioningUpdates $AUTH_PARAMS} "\${ARCHIVE_SIGN_ARGS[@]}" -parallelizeTargets -allowConcurrentBuilds || exit 1
     fi
   elif [ ! -z "$PROJECT" ]; then
     if [ -z "$USER_SCHEME" ]; then
@@ -1191,13 +1307,13 @@ NODE
         echo "Using simulator destination: $SIMULATOR_DESTINATION"
       fi
       SIMULATOR_DESTINATION_ARGS=(-destination "$SIMULATOR_DESTINATION")
-      run_simulator_xcodebuild xcodebuild build -project "$PROJECT" -scheme "$SCHEME" -configuration "$USER_CONFIG" -sdk "$SDK" "\${SIMULATOR_DESTINATION_ARGS[@]}" -derivedDataPath "$DERIVED_DATA_PATH" $EXTRA_ARGS || exit 1
+      run_simulator_xcodebuild xcodebuild build -project "$PROJECT" -scheme "$SCHEME" -configuration "$USER_CONFIG" -sdk "$SDK" "\${SIMULATOR_DESTINATION_ARGS[@]}" -derivedDataPath "$DERIVED_DATA_PATH" "\${IOS_VERSION_ARGS[@]}" $EXTRA_ARGS || exit 1
     else
       ARCHIVE_SIGN_ARGS=("CODE_SIGN_STYLE=Manual")
       [ -n "$TEAM_ID" ] && ARCHIVE_SIGN_ARGS+=("DEVELOPMENT_TEAM=$TEAM_ID")
       [ -n "$PROFILE_UUID" ] && ARCHIVE_SIGN_ARGS+=("PROVISIONING_PROFILE=$PROFILE_UUID")
       [ -n "$PROFILE_NAME" ] && ARCHIVE_SIGN_ARGS+=("PROVISIONING_PROFILE_SPECIFIER=$PROFILE_NAME")
-      xcodebuild archive -project "$PROJECT" -scheme "$SCHEME" -archivePath "../build.xcarchive" -configuration "$USER_CONFIG" -sdk "$SDK" -derivedDataPath "$DERIVED_DATA_PATH" \${AUTH_PARAMS:+-allowProvisioningUpdates $AUTH_PARAMS} "\${ARCHIVE_SIGN_ARGS[@]}" -parallelizeTargets -allowConcurrentBuilds || exit 1
+      xcodebuild archive -project "$PROJECT" -scheme "$SCHEME" -archivePath "../build.xcarchive" -configuration "$USER_CONFIG" -sdk "$SDK" -derivedDataPath "$DERIVED_DATA_PATH" "\${IOS_VERSION_ARGS[@]}" \${AUTH_PARAMS:+-allowProvisioningUpdates $AUTH_PARAMS} "\${ARCHIVE_SIGN_ARGS[@]}" -parallelizeTargets -allowConcurrentBuilds || exit 1
     fi
   else
     echo "Error: Neither workspace nor project found for building."
@@ -1241,11 +1357,18 @@ if [ "$IS_SIMULATOR" == "true" ]; then
     fi
 
     validate_simulator_app "$APP_DIR"
+    validate_ios_bundle_tree "$APP_DIR"
     mkdir -p export
     cp -R "$APP_DIR" export/
     cd export && zip -r ../build.app.zip *.app && cd ..
   elif [ -d "build.xcarchive" ]; then
     EXPORT_METHOD="{{EXPORT_METHOD}}"
+    ARCHIVED_APP=$(find build.xcarchive/Products/Applications -maxdepth 1 -type d -name "*.app" | head -n 1)
+    if [ -z "$ARCHIVED_APP" ]; then
+      echo "Error: Archive has no top-level application bundle."
+      exit 1
+    fi
+    validate_ios_bundle_tree "$ARCHIVED_APP"
 
     # Build provisioningProfiles dict \u2014 only if we successfully extracted profile info
     PROV_PROFILES_XML=""
@@ -1284,6 +1407,16 @@ EOF
 
     IPA_FILE=$(find export -name "*.ipa" | head -n 1)
     if [ ! -z "$IPA_FILE" ]; then
+      IPA_VALIDATION_DIR=$(mktemp -d "/tmp/mach-ipa-\${BUILD_ID}-XXXXXX")
+      unzip -q "$IPA_FILE" -d "$IPA_VALIDATION_DIR"
+      IPA_APP=$(find "$IPA_VALIDATION_DIR/Payload" -maxdepth 1 -type d -name "*.app" | head -n 1)
+      if [ -z "$IPA_APP" ]; then
+        echo "Error: Exported IPA has no top-level application bundle."
+        rm -rf "$IPA_VALIDATION_DIR"
+        exit 1
+      fi
+      validate_ios_bundle_tree "$IPA_APP"
+      rm -rf "$IPA_VALIDATION_DIR"
       cp "$IPA_FILE" build.ipa
     fi
   fi
@@ -1325,125 +1458,62 @@ touch done
 if [ ! -z "$PRESIGNED_DONE_MARKER" ]; then
   curl -X PUT -T done "$PRESIGNED_DONE_MARKER" --silent
 fi
-`;var _s=e=>e.replace(/\\/g,"\\\\").replace(/"/g,'\\"').replace(/\$/g,"\\$").replace(/`/g,"\\`"),Ps=async(e,t,n={},i)=>{let r=nu(),o=Et(e.framework);e.sshHost||(e.sshHost="localhost",Yt.message(wt.yellow("No SSH host provided, defaulting to localhost."))),r.start(`Connecting to remote Mac at ${wt.cyan(e.sshHost)}...`);let s=e.sshUser||process.env.USER||"ubuntu",l=e.sshKey,a=`${s}@${e.sshHost}`,c=`ssh ${l?`-i ${l}`:""} -o StrictHostKeyChecking=no ${a}`,u=`scp ${l?`-i ${l}`:""} -o StrictHostKeyChecking=no`;try{let d=s==="ubuntu"?"/home/ubuntu":`/Users/${s}`,p=(n.PROJECT_ID||"default_project").replace(/[^a-zA-Z0-9-_]/g,"_"),f=`${d}/${m.remoteWorkspacesDir}/${p}`;r.message(`Preparing stable workspace: ${f}...`),Nn(`${c} "mkdir -p ${f}"`,{stdio:"inherit"}),r.message("Transferring source code...");let g=`/tmp/${m.nameLower}-source-${t}.zip`;Nn(`${u} ${g} ${a}:${f}/source.zip`,{stdio:"inherit"});let h=e.iosApiKeyPath?`${f}/api_key.p8`:"",S="";e.iosApiKeyPath&&(r.message("Uploading App Store Connect API key..."),Nn(`${u} ${e.iosApiKeyPath} ${a}:${h}`),e.iosApiKeyId&&e.iosApiKeyIssuer&&(S=`-authenticationKeyID ${e.iosApiKeyId} -authenticationKeyIssuerID ${e.iosApiKeyIssuer} -authenticationKeyPath ${h}`));let b={};if(i)try{let E=await O.post(`/builds/${i}/${t}/build-urls`,{platform:"ios"});E.data.status==="success"&&(b=E.data.urls)}catch(E){Yt.warn(wt.yellow(`Could not fetch build URLs: ${E.message}`))}let y="";if(b.credentials&&b.credentials.length>0)for(let E of b.credentials)E.type==="p12"?y+=`curl -sf -o "$CERT_DIR/${E.name}" "${E.downloadUrl}" || true
-`:E.type==="mobileprovision"&&(y+=`curl -sf -o "$PROV_TEMP/${E.name}" "${E.downloadUrl}" || true
-`);r.message("Generating macOS build script...");let P=process.env.CODEARTIFACT_AUTH_TOKEN?`export CODEARTIFACT_AUTH_TOKEN="${process.env.CODEARTIFACT_AUTH_TOKEN}"
-`:"";if(n)for(let[E,A]of Object.entries(n)){let N=A.replace(/"/g,'\\"').replace(/\$/g,"\\$").replace(/`/g,"\\`");P+=`export ${E}="${N}"
-`}let v=e.buildProfile||"production",F=qt(n,v,e),H=dn(F);Yt.info(wt.dim(`iOS remote build config: simulator=${String(!!e.simulator)}, configuration=${e.iosConfiguration||"Release"}, scheme=${e.iosScheme||"auto"}`));let q=[P,b.logUpload?`export PRESIGNED_LOG_UPLOAD="${b.logUpload}"`:"",b.doneMarker?`export PRESIGNED_DONE_MARKER="${b.doneMarker}"`:"",b.cacheDerivedDataDownload?`export PRESIGNED_CACHE_DD_DOWNLOAD="${b.cacheDerivedDataDownload}"`:"",b.cacheDerivedDataUpload?`export PRESIGNED_CACHE_DD_UPLOAD="${b.cacheDerivedDataUpload}"`:"",b.cacheNodeModulesDownload?`export PRESIGNED_CACHE_NODE_DOWNLOAD="${b.cacheNodeModulesDownload}"`:"",b.cacheNodeModulesUpload?`export PRESIGNED_CACHE_NODE_UPLOAD="${b.cacheNodeModulesUpload}"`:"",b.cachePodsDownload?`export PRESIGNED_CACHE_PODS_DOWNLOAD="${b.cachePodsDownload}"`:"",b.cachePodsUpload?`export PRESIGNED_CACHE_PODS_UPLOAD="${b.cachePodsUpload}"`:"",b.artifactIpaUpload?`export PRESIGNED_ARTIFACT_IPA_UPLOAD="${b.artifactIpaUpload}"`:"",b.artifactAppZipUpload?`export PRESIGNED_ARTIFACT_APP_ZIP_UPLOAD="${b.artifactAppZipUpload}"`:"",`export BUILD_ID="${t}"`,`export MACH_BUILD_PROFILE="${_s(v)}"`,`export MACH_APP_NAME="${_s(F.MACH_APP_NAME)}"`,`export MACH_ENV_FINGERPRINT="${H}"`,o.remoteEnvSetupScript().trim(),`export ${m.envPrefix}PROJECT_ID="${p}"`,n.MATCH_ENCRYPTION_PASSPHRASE?`export MATCH_PASSWORD="${n.MATCH_ENCRYPTION_PASSPHRASE}"`:"",n.APPLE_TEAM_ID?`export FASTLANE_TEAM_ID="${n.APPLE_TEAM_ID}"`:"",`export MATCH_KEYCHAIN_NAME="${m.credentialsKeychain}"`,`export MATCH_KEYCHAIN_PASSWORD="${m.keychainPassword}"`].filter(Boolean).join(`
-`),I=e.nodeVersion?[`echo "[NODE] Switching to Node ${e.nodeVersion}..."`,'export NVM_DIR="$HOME/.nvm"','[ -s "$NVM_DIR/nvm.sh" ] && . "$NVM_DIR/nvm.sh" --no-use',`nvm install ${e.nodeVersion} 2>/dev/null || true`,`nvm use ${e.nodeVersion} --silent`,`export PATH="$NVM_DIR/versions/node/$(nvm version ${e.nodeVersion})/bin:$PATH"`,'echo "[NODE] Now using: $(node -v) at $(which node)"'].join(`
-`):"",_=$s,M={"{{REMOTE_DIR}}":f,"{{ENV_VARS}}":q,"{{CREDENTIAL_DOWNLOADS}}":y,"{{IOS_SCHEME}}":e.iosScheme||"","{{IOS_CONFIG}}":e.iosConfiguration||"Release","{{TEAM_ID}}":e.iosTeamId||"","{{AUTH_PARAMS}}":S,"{{IS_SIMULATOR}}":e.simulator?"true":"false","{{BUILD_ID}}":t,"{{EXPORT_METHOD}}":e.iosExportMethod||"ad-hoc","{{NODE_VERSION_SETUP}}":I,"{{FRAMEWORK_PREBUILD}}":o.iosRemotePrebuildScript().trim()};Object.entries(M).forEach(([E,A])=>{_=_.split(E).join(A)});let x=`/tmp/${m.nameLower}-mac-build-${t}.sh`;if(iu.writeFileSync(x,_),Nn(`${u} ${x} ${a}:${f}/build.sh`),r.stop("Remote script uploaded."),Yt.info(wt.cyan("Executing remote build. This might take a while...")),Nn(`${c} "bash ${f}/build.sh"`,{stdio:"inherit"}),r.stop("Remote build finished!"),i){r.start("Fetching artifact links...");try{let A=(await O.get(`/builds/${i}/${t}/artifacts`)).data.artifacts||[],N=e.simulator===!0;if(A.length===0&&!N)throw r.stop("Build Failed!"),new Error("Build completed but no artifacts were generated. Check build logs for errors.");if(r.stop("Build Successful!"),A.length>0){Yt.success("Build Artifacts Ready:");for(let U of A)console.log(`
-${wt.yellow(U.name)}:
-${wt.cyan(U.downloadUrl)}`);console.log(`
-${wt.dim("Note: Links are valid for 7 days.")}`)}else N&&Yt.warn("Simulator build completed. No artifacts uploaded.")}catch(E){r.stop("Could not fetch artifacts"),Yt.warn(wt.yellow(`Artifact listing failed: ${E.message}`))}}}catch(d){throw r.stop("iOS Build Failed"),d}};import{spinner as Ei,log as T,isCancel as wi,confirm as ru,select as xr}from"@clack/prompts";import C from"chalk";import w from"fs";import $ from"path";import{execFileSync as It,execSync as ne,spawn as xs}from"child_process";import ke from"os";import ou from"crypto";var Ns=(e,t)=>t.filter(n=>w.existsSync($.join(e,n))).reduce((n,i)=>n.update(w.readFileSync($.join(e,i))),ou.createHash("sha256")).digest("hex").slice(0,16),su=e=>Ns(e,["package.json","yarn.lock","package-lock.json","bun.lockb"]),au=e=>Ns(e,["Podfile","Podfile.lock"]),lu=e=>{let t=$.join(e,"fingerprint.json");try{return JSON.parse(w.readFileSync(t,"utf-8"))}catch{return{}}},Rs=(e,t)=>{w.mkdirSync(e,{recursive:!0}),w.writeFileSync($.join(e,"fingerprint.json"),JSON.stringify(t,null,2))},cu=7200*1e3,du=(e,t)=>{w.mkdirSync(e,{recursive:!0});let n=$.join(e,"build.lock");if(w.existsSync(n))try{let i=JSON.parse(w.readFileSync(n,"utf-8")),r=Date.now()-(i.timestamp||0);if(r<cu)throw new Error(`Another build is already running for this project (build ${i.buildId}, started ${Math.round(r/6e4)}m ago). Cancel it from the dashboard first, or wait for it to complete.`)}catch(i){if(i.message.includes("Another build"))throw i}w.writeFileSync(n,JSON.stringify({buildId:t,pid:process.pid,timestamp:Date.now()}))},uu=(e,t)=>{let n=$.join(e,"build.lock");try{w.existsSync(n)&&JSON.parse(w.readFileSync(n,"utf-8")).buildId===t&&w.unlinkSync(n)}catch{}},Os=15e5,Cs=(e,t)=>{let n=e+t;return n.length>Os?n.slice(-Os):n},Ts=e=>e.replace(/\u001b\[[0-9;]*m/g,""),Ls=e=>/\berror:|fatal error:|xcodebuild: error|The following build commands failed|Command PhaseScriptExecution failed|PhaseScriptExecution|Command .* failed|CodeSign|Provisioning profile|No profiles|requires a provisioning profile|Undefined symbols|ld:|clang: error|SwiftCompile|CompileC|node: command not found|env: node|No such file or directory|Permission denied/i.test(e),pu=e=>{let t=new Set,n=[];e.forEach((r,o)=>{Ls(r)&&n.push(o)});for(let r of n){let o=/PhaseScriptExecution|Command PhaseScriptExecution failed|The following build commands failed/i.test(e[r])?18:8,s=/The following build commands failed/i.test(e[r])?18:10;for(let l=Math.max(0,r-o);l<=Math.min(e.length-1,r+s);l++)t.add(l)}if(t.size===0)return e.slice(-120);let i=Array.from(t).sort((r,o)=>r-o).map(r=>e[r]);return i.length>160?i.slice(-160):i},fu=(e,t,n,i)=>{let r=Ts(i).replace(/\r/g,`
-`).split(`
-`).map(a=>a.trimEnd()).filter(Boolean),o=r.filter(Ls),s=o.length>0?pu(r):r.slice(-80),l=o.length>0?"Key failure output":"Last command output";return[`Command failed with code ${n}: ${e} ${t.join(" ")}`,s.length>0?`
-${l}:
-${s.join(`
-`)}`:""].join("")},mu=e=>e==="xcodebuild"&&process.env.MACH_XCODE_FULL_LOGS!=="1",gu=e=>{let t=Ts(e).trim();return t?/\berror:|fatal error:|xcodebuild: error|The following build commands failed|Command PhaseScriptExecution failed|CodeSign|Provisioning profile|No profiles|requires a provisioning profile|Undefined symbols|ld:|clang: error|SwiftCompile|CompileC|CFBundleVersion|ARCHIVE SUCCEEDED|ARCHIVE FAILED|EXPORT SUCCEEDED|EXPORT FAILED|Exported .* to:|\[IPA VALID\]/i.test(t):!1},Xe=e=>{try{w.existsSync(e)&&w.rmSync(e,{recursive:!0,force:!0})}catch{}},hu=(e,t)=>{try{if(!w.existsSync(e))return;for(let n of w.readdirSync(e))t(n)&&Xe($.join(e,n))}catch{}},kr=e=>{T.info(C.dim("Clearing Metro/Hermes JS transform caches..."));let t=ke.tmpdir();hu(t,n=>n==="metro-cache"||n.startsWith("metro-")||n.startsWith("haste-map-")||n.startsWith("react-native-packager-cache-")),Xe($.join(e,".expo")),Xe($.join(e,"node_modules/.cache/metro")),Xe($.join(ke.homedir(),".cache/metro")),Xe($.join(ke.homedir(),".cache/react-native-packager")),Xe($.join(ke.homedir(),"Library/Caches/metro")),Xe($.join(ke.homedir(),"Library/Caches/react-native-packager"))},yu=e=>/Internal inconsistency error|never received target ended message/i.test(String(e?.message||e)),Su=e=>{T.warn(C.yellow("Xcode build system hit an internal inconsistency. Clearing simulator build state and retrying once...")),Xe($.join(e,"Build")),Xe($.join(e,"Index.noindex")),Xe($.join(e,"ModuleCache.noindex")),Xe($.join(e,"SourcePackages"))},bu=e=>{let t=String(e?.message||e);return/Permission denied/i.test(t)&&/Pods\/.*\.sh/i.test(t)},Ms=e=>{let t=$.join(e,"Pods"),i=[$.join(t,"Target Support Files"),t].filter(l=>w.existsSync(l)),r=new Set,o=0,s=l=>{let a=l;try{a=w.realpathSync(l)}catch{}if(r.has(a))return;r.add(a);let c;try{c=w.readdirSync(l,{withFileTypes:!0})}catch{return}for(let u of c){let d=$.join(l,u.name);if(u.isDirectory()){s(d);continue}if(!(!u.isFile()||!u.name.endsWith(".sh")))try{let p=w.statSync(d),f=p.mode|493;f!==p.mode&&(w.chmodSync(d,f),o+=1)}catch{}}};for(let l of i)s(l);return o>0&&T.info(C.dim(`Repaired executable permissions on ${o} CocoaPods script${o===1?"":"s"}.`)),o},Au=(e,t,n,i,r)=>{let o=a=>{let c=a.filter(d=>d?.id&&String(d?.platform||"").includes("iOS Simulator")&&!d?.error),u=c.find(d=>/iphone/i.test(d.name||""))||c[0];return u?.id?`id=${u.id}`:void 0},s=a=>{let c=[],u=!1;for(let d of a.split(`
-`)){if(/Ineligible destinations/i.test(d)&&(u=!0),u||!d.includes("platform:iOS Simulator")||d.includes("error:"))continue;let p=d.match(/\bid:([^,}]+)/)?.[1]?.trim(),f=d.match(/\bname:([^,}]+)/)?.[1]?.trim();p&&c.push({id:p,name:f,platform:"iOS Simulator"})}return o(c)},l=[t?"-workspace":"-project",t||n,"-scheme",i,"-configuration",r,"-sdk","iphonesimulator","-showdestinations"];try{let a=It("xcodebuild",[...l,"-json"],{cwd:e,encoding:"utf-8",stdio:["ignore","pipe","ignore"]}),c=JSON.parse(a),u=Array.isArray(c.destinations)?c.destinations:Array.isArray(c.availableDestinations)?c.availableDestinations:[],d=o(u);if(d)return d}catch{}try{let a=It("xcodebuild",l,{cwd:e,encoding:"utf-8",stdio:["ignore","pipe","ignore"]});return s(a)}catch{}},vt=(e,t,n=process.cwd(),i={},r,o)=>new Promise((s,l)=>{let a="",c=mu(e),u=Date.now(),d=["/opt/homebrew/bin","/usr/local/bin","/usr/bin","/bin","/usr/sbin","/sbin",$.join(ke.homedir(),".npm-global/bin")],f=[...(process.env.PATH||"").split(":"),...d].filter((y,P,v)=>y&&v.indexOf(y)===P).join(":");process.env[`${m.envPrefix}DEBUG`]&&console.log(C.magenta(`[${m.nameUpper}_DEBUG] Execution PATH: ${f}`));let g={...process.env,...i,PATH:f,LANG:"en_US.UTF-8",LC_ALL:"en_US.UTF-8"};r&&process.env[`${m.envPrefix}DEBUG`]&&(r(C.magenta(`[ENVIRONMENT] node: ${process.execPath}
-`)),r(C.magenta(`[ENVIRONMENT] PATH: ${f}
-`)),r(C.magenta(`[ENVIRONMENT] command: ${e} ${t.join(" ")}
-`)));let h=e;if(["node","npm","npx","pod"].includes(e)){let y=$.dirname(process.execPath),P=$.join(y,e);w.existsSync(P)&&(h=P,r&&r(C.dim(`[EXEC] Using absolute path: ${h}
-`)))}let S=xs(h,t,{stdio:"pipe",cwd:n,shell:!0,env:g,detached:process.platform!=="win32"});if(o){if(o.aborted){if(S.pid)try{process.kill(-S.pid,"SIGTERM")}catch{S.kill()}return l(new Error("Command aborted"))}o.addEventListener("abort",()=>{if(S.pid)try{process.kill(-S.pid,"SIGTERM")}catch{S.kill()}l(new Error("Command aborted"))})}let b=(y,P)=>{if(!c){P.write(y);return}let v=y.replace(/\r/g,`
-`).split(`
-`).filter(gu);if(v.length>0){P.write(`${v.join(`
-`)}
-`),u=Date.now();return}let F=Date.now();F-u>3e4&&(P.write(`[xcodebuild] still running; detailed output is streamed to Mach logs.
-`),u=F)};S.stdout.on("data",y=>{let P=y.toString();a=Cs(a,P),b(P,process.stdout),r&&r(P)}),S.stderr.on("data",y=>{let P=y.toString();a=Cs(a,P),b(P,process.stderr),r&&r(P)}),S.on("close",y=>{y===0?s(y):l(new Error(fu(e,t,y,a)))}),S.on("error",y=>l(y))}),Ai=async(e,t,n,i,r)=>{try{await vt("xcodebuild",e,t,n,i,r)}catch(o){if(!bu(o))throw o;T.warn(C.yellow("CocoaPods script permission denied. Repairing Pods script permissions and retrying xcodebuild once...")),Ms(t),await vt("xcodebuild",e,t,n,i,r)}},Eu=e=>{let t=Math.floor(e/1e3%60),n=Math.floor(e/(1e3*60)%60),i=Math.floor(e/(1e3*60*60)%24),r=[];return i>0&&r.push(`${i}h`),n>0&&r.push(`${n}m`),(t>0||r.length===0)&&r.push(`${t}s`),r.join(" ")},Xt=(e,t)=>{let n=[];try{if(!w.existsSync(e))return n;let i=w.readdirSync(e);for(let r of i){let o=$.join(e,r);try{let s=w.statSync(o);if(t.some(a=>r.endsWith(a))){n.push($.resolve(o));continue}s.isDirectory()&&(n=n.concat(Xt(o,t)))}catch{}}}catch{}return n},wu=/^\d+(?:\.\d+){0,2}$/,Us=e=>{let t=String(e||"").trim();return!t||t==="undefined"||t==="null"?null:wu.test(t)?t:null},Fs=(e,t)=>{let n=Us(e);if(!n)throw new Error(`Invalid iOS CFBundleVersion from ${t}: "${e||""}". Apple requires one to three period-separated integers, for example "42" or "1.2.3". If you see "[Decryption Failed]", fix/remove the broken BUILD_NUMBER secret and rebuild.`);return n},Nr=(e,t)=>It("/usr/libexec/PlistBuddy",["-c",`Print :${t}`,e],{encoding:"utf-8"}).trim(),un=(e,t)=>{try{return Nr(e,t)}catch{return""}},Ds=e=>String(e||"").replace(/\.app$/i,"").replace(/[^a-z0-9]/gi,"").toLowerCase(),Iu=e=>{try{return w.statSync(e).isDirectory()}catch{return!1}},vu=(e,t,n)=>{if(!w.existsSync(e))throw new Error(`iOS simulator build output directory was not found: ${e}`);let i=w.readdirSync(e).filter(c=>c.endsWith(".app")).map(c=>$.join(e,c)).filter(Iu);if(i.length===0){let u=Xt(e,[".app"]).map(d=>$.relative(e,d)).join(", ");throw new Error(`No top-level iOS simulator .app product was found in ${e}.`+(u?` Nested .app bundles found but ignored: ${u}`:""))}let r=new Set([t,n.iosScheme,n.scheme,n.appName].filter(Boolean).map(c=>Ds(String(c))).filter(Boolean)),o=i.map(c=>{let u=$.join(c,"Info.plist"),d=w.existsSync(u)?un(u,"CFBundleName"):"",p=w.existsSync(u)?un(u,"CFBundleDisplayName"):"",f=w.existsSync(u)?un(u,"CFBundleExecutable"):"",g=w.existsSync(u)?un(u,"CFBundleIdentifier"):"",h=f?$.join(c,f):"";return{appPath:c,bundleIdentifier:g,executable:f,isValid:w.existsSync(u)&&!!f&&w.existsSync(h),names:[$.basename(c,".app"),d,p,f].map(Ds).filter(Boolean)}}),s=o.filter(c=>c.isValid);if(s.length===0)throw new Error(`No valid iOS simulator .app product was found in ${e}. Candidates: `+o.map(c=>$.basename(c.appPath)).join(", "));let a=s.find(c=>c.names.some(u=>r.has(u)))||(s.length===1?s[0]:null);if(!a)throw new Error(`Multiple iOS simulator .app products were found in ${e}: `+s.map(c=>{let u=c.bundleIdentifier?` (${c.bundleIdentifier})`:"";return`${$.basename(c.appPath)}${u}`}).join(", ")+`. Set ios.scheme in ${m.configFileName} so ${m.name} can select the app target safely.`);return a.appPath},ks=e=>{let t=$.join(e,"Info.plist");if(!w.existsSync(t))throw new Error(`Could not validate iOS build number: ${t} not found.`);return Fs(Nr(t,"CFBundleVersion"),t)},js=e=>{let t=$.join(e,"Info.plist");if(!w.existsSync(t))throw new Error(`Could not validate iOS app executable: ${t} not found.`);let n=un(t,"CFBundleExecutable");if(!n)throw new Error(`Could not validate iOS app executable: CFBundleExecutable missing in ${t}.`);let i=$.join(e,n);if(!w.existsSync(i))throw new Error(`Could not validate iOS app executable: ${i} not found.`);return i},$u=()=>process.arch==="arm64"?"arm64":"x86_64",Bs=e=>{let t=js(e),n="";try{n=It("lipo",["-info",t],{encoding:"utf-8"}).trim()}catch(r){throw new Error(`Could not inspect iOS simulator executable architecture for ${$.basename(e)}: ${r.message}`)}let i=$u();if(!new RegExp(`\\b${i}\\b`).test(n))throw new Error(`iOS simulator app ${$.basename(e)} cannot be installed on this runner because its executable does not include the required ${i} simulator architecture. lipo output: ${n}. Check the React Native iOS project ARCHS/EXCLUDED_ARCHS settings for iphonesimulator builds.`);return n},_u=e=>{try{return It("xcrun",["vtool","-show-build",e],{encoding:"utf-8"}).trim()}catch(t){throw new Error(`Could not inspect iOS executable build platform for ${$.basename(e)}: ${t.message}`)}},Hs=e=>{let t=js(e),n=_u(t);if(!/\bplatform\s+IOSSIMULATOR\b/i.test(n))throw new Error(`iOS simulator app ${$.basename(e)} was built for the wrong Apple platform. A simulator artifact must contain PLATFORM IOSSIMULATOR, not an iPhone device binary. vtool output: ${n}`);return n},Pu=e=>{let n=It("unzip",["-Z1",e],{encoding:"utf-8"}).split(`
-`).find(r=>/^Payload\/[^/]+\.app\/Info\.plist$/.test(r.trim()));if(!n)throw new Error(`Could not validate iOS build number: ${$.basename(e)} has no Payload/*.app/Info.plist.`);let i=w.mkdtempSync($.join(ke.tmpdir(),`${m.nameLower}-ipa-plist-`));try{let r=$.join(i,"Info.plist"),o=It("unzip",["-p",e,n.trim()]);return w.writeFileSync(r,o),Fs(Nr(r,"CFBundleVersion"),`${$.basename(e)}:${n.trim()}`)}finally{w.rmSync(i,{recursive:!0,force:!0})}},Ru=e=>`'${e.replace(/'/g,"'\\''")}'`,Ou=()=>process.execPath&&w.existsSync(process.execPath)?process.execPath:It("which",["node"],{encoding:"utf-8"}).trim(),Gs=(e,t,n)=>{if(!w.existsSync(e))return;let i=Ou();t.NODE_BINARY=i;let r=$.join(e,".xcode.env.local");w.writeFileSync(r,`export NODE_BINARY=${Ru(i)}
-`);let o=`[NODE] Xcode NODE_BINARY: ${i}
-`;n&&n(C.dim(o)),T.info(C.dim(o.trim()))},Tr=async(e,t,n={},i,r={})=>{let o=Ei(),s=Date.now(),l=e.platform,a=e.buildProfile||"production",c=Et(e.framework),u=()=>qt(n,a,e),d=async(I,_={})=>{if(i)for(let M=1;M<=3;M++)try{await O.patch(`/builds/${i}/${t}`,{status:I,..._});return}catch(x){let E=x?.response?.data?.message||x?.message||String(x);console.error(`[reportStatus] attempt ${M}/3 failed (status=${I}): ${E}`),M<3&&await new Promise(A=>setTimeout(A,2e3))}},p=new AbortController,{signal:f}=p,g=null;i&&(g=setInterval(async()=>{try{(await O.get(`/builds/${i}/${t}`)).data.status==="cancelled"&&(T.warn(C.yellow(`
-\u{1F6D1} Build cancelled from dashboard. Terminating...`)),p.abort(),g&&clearInterval(g))}catch{}},5e3));let h=$.join(process.cwd(),".mach-cache"),S="setup",b="",y=null,P=async()=>{if(!b||!i)return;let I=b;b="";try{let _=I;Object.values(n).forEach(M=>{if(M&&M.length>5){let x=M.replace(/[.*+?^${}()|[\]\\]/g,"\\$&");_=_.replace(new RegExp(x,"g"),"[SECRET]")}}),await O.post(`/builds/${i}/${t}/logs`,{log:_,step:S})}catch{}},v=async()=>{y&&(clearTimeout(y),y=null),await P(),uu(h,t),g&&(clearInterval(g),g=null);try{let I=$.join(ke.tmpdir(),`${m.buildPrefix}-${t}.keychain-db`);w.existsSync(I)&&(ne(`security delete-keychain "${I}"`,{stdio:"ignore"}),T.info(C.dim("\u{1F511} Build keychain deleted.")))}catch{}try{let I=$.join(ke.homedir(),"Library/MobileDevice/Provisioning Profiles");if(w.existsSync(I)){let _=w.readdirSync(I).filter(M=>M.includes(t)||M.startsWith(`${m.nameLower}-temp-${t}`));for(let M of _)w.unlinkSync($.join(I,M))}}catch{}},F=async I=>{i&&(b+=I,b.length>=8192?(y&&(clearTimeout(y),y=null),await P()):y||(y=setTimeout(()=>{y=null,P()},2e3)))},H=async I=>{S=I,await F(`[STEP_START:${I}] ${Math.floor(Date.now()/1e3)}
-`)},q=async(I,_,M,x)=>await vt(I,_,M,x,E=>{F(E)},f);T.info(C.blue(`\u{1F680} Starting local build for ${l} (${a})...`));try{du(h,t)}catch(I){throw await d("failed",{error:I.message,endTime:Date.now()}),I}await d("building"),await H("setup"),l==="ios"&&!e.simulator&&n.MACH_IOS_BUILD_NUMBER_LOCKED==="1"&&n.BUILD_NUMBER&&(T.info(C.dim(`Auto build number: ${n.BUILD_NUMBER}`)),await F(`[BUILD_NUMBER] ${n.BUILD_NUMBER}
-`)),await H("lock"),c.applyLocalProcessEnv(e);try{await H("clone"),T.info(C.dim("Preparing source...")),await H("read_config");let I=$.join(process.cwd(),m.configFileName);if(w.existsSync(I)){let X=JSON.parse(w.readFileSync(I,"utf-8"))?.build?.[a]||{};await F(`[CONFIG] Profile: ${a}, distribution: ${X.distribution||"not set"}, simulator: ${X.simulator||!1}
-`)}if(await H("read_package"),e.nodeVersion){let ee=process.env.NVM_DIR||$.join(ke.homedir(),".nvm"),X=$.join(ee,"versions","node"),ye;if(w.existsSync(X)){let W=w.readdirSync(X).sort().reverse(),de=e.nodeVersion.startsWith("v")?e.nodeVersion:`v${e.nodeVersion}`,ve=W.find(Se=>Se===de||Se.startsWith(de+".")||Se.startsWith(`v${e.nodeVersion}.`));ve&&(ye=$.join(X,ve,"bin"))}if(ye&&w.existsSync(ye)){let W=process.env.PATH||"";process.env.PATH=`${ye}:${W}`,await F(`[NODE] Switched to Node ${e.nodeVersion} \u2014 using ${ye}
-`),T.info(C.green(`\u2713 Node switched to ${e.nodeVersion} (${ye})`))}else await F(`[NODE] Warning: Node ${e.nodeVersion} not found in nvm. Run: nvm install ${e.nodeVersion} on the build machine.
-`),T.warn(C.yellow(`Node ${e.nodeVersion} not found in nvm \u2014 using system default`))}await H("deps"),o.start("Checking dependencies...");let _=lu(h),M=su(process.cwd()),x=w.existsSync("node_modules"),E=w.existsSync("yarn.lock"),A=w.existsSync("bun.lockb");x&&_.node&&_.node!==M&&(o.stop("Dependency fingerprint changed \u2014 clearing node_modules for clean install..."),await F(`[CACHE] package.json/lockfile changed \u2014 wiping node_modules
-`),w.rmSync($.join(process.cwd(),"node_modules"),{recursive:!0,force:!0}),x=!1);let N="npm",U=["install","--prefer-offline"];E?(N="yarn",U=["install","--prefer-offline"]):A&&(N="bun",U=["install"]),x?o.stop("Cached node_modules found. Syncing dependencies..."):o.stop("No cached dependencies. Running fresh install..."),e.preBuild&&(T.info(C.blue("Running pre-install hook...")),T.info(C.dim(`> ${e.preBuild}`)),await H("prebuild"),await q("bash",[e.preBuild],process.cwd(),u())),T.info(C.dim(`Running ${N} ${U.join(" ")}...`)),await q(N,U,process.cwd(),u()),_.node=M,Rs(h,_);let K=await c.prepareLocalProject({platform:l,options:e,cacheMeta:_,cacheMetaDir:h,currentBuildEnv:u,reportStep:H,reportLog:F,loggedRun:q,configureXcodeNodeBinary:Gs,podsFingerprint:au,writeCacheMeta:Rs}),z=K.bundleId||e.iosBundleIdentifier||"",Q=K.appName||e.name||"",R=[];if(l==="android")await H("build"),R=await Cu(e,a,n,ee=>F(ee),f);else if(l==="ios"){await H("signing"),T.info(C.dim("Preparing credentials..."));let ee=r?.distributionType;R=await Du(e,t,a,n,i,X=>F(X),f,ee,X=>H(X))}e.postBuild&&(T.info(C.blue("Running post-build hook...")),T.info(C.dim(`> ${e.postBuild}`)),await q(e.postBuild,[],process.cwd(),u()));let oe=Eu(Date.now()-s);if(T.success(C.green(`
-\u2713 Local build completed successfully in ${oe}`)),await d("building",{...z&&{bundleId:z},...Q&&{appName:Q}}),R.length>0&&(T.info(C.cyan(`
-\u{1F4E6} Generated Artifacts:`)),R.forEach(ee=>{let X=$.resolve(ee);T.info(C.dim(`  - ${ee}`)),T.info(C.gray(`    Path: ${X}`))}),e.interactive)){let ee=await ru({message:"Install on connected device?"});if(!wi(ee)&&ee){if(l==="android"){let X=R.find(ye=>ye.endsWith(".apk"))||R[0];await xu(X,ye=>F(ye))}else if(l==="ios"){let X=R.find(W=>W.endsWith(".ipa"))||R.find(W=>W.endsWith(".app"))||R[0],ye=Ze("ios");e.simulator?await Nu(X,ye||"",W=>F(W)):await Tu(X,ye||"",W=>F(W))}}}await H("upload");let be=[];for(let ee of R)try{let X=$.join(ke.tmpdir(),`${t}-${$.basename(ee)}`);w.copyFileSync(ee,X),be.push(X),T.info(C.dim(`  \u{1F4CB} Preserved artifact: ${$.basename(ee)}`))}catch{T.warn(C.yellow(`  Failed to preserve artifact: ${$.basename(ee)}`))}R=be,T.info(C.dim("\u{1F9F9} Cleaning workspace (preserving dependency cache)..."));try{let ee=process.cwd(),X=new Set(["node_modules"]),ye=w.readdirSync(ee),W=0;for(let de of ye)if(!X.has(de)){if(de==="ios"){let ve=$.join(ee,"ios"),Se=w.readdirSync(ve);for(let Le of Se)if(Le!=="Pods")try{w.rmSync($.join(ve,Le),{recursive:!0,force:!0}),W++}catch{}continue}try{w.rmSync($.join(ee,de),{recursive:!0,force:!0}),W++}catch{}}T.info(C.dim(`  Cleaned ${W} items. Cached: node_modules${w.existsSync($.join(ee,"ios","Pods"))?", ios/Pods":""}`)),T.info(C.green("\u{1F512} Security: No source code retained on build server. Only public dependencies cached."))}catch{T.warn(C.yellow("Post-build cleanup encountered errors (non-fatal)."))}try{let X=$.join(ke.homedir(),m.workspacesDir),ye=ne(`df -k "${X}" | tail -1 | awk '{print $4}'`,{encoding:"utf8"}).trim(),W=parseInt(ye,10)*1024;if(W<53687091200&&w.existsSync(X)){T.info(C.dim(`  \u26A0\uFE0F Low disk space (${(W/1024/1024/1024).toFixed(0)} GB free). Running cache eviction...`));let de=$.basename(process.cwd()),ve=w.readdirSync(X).filter(Se=>Se!==de).map(Se=>{let Le=$.join(X,Se);try{let rn=w.statSync(Le);return rn.isDirectory()?{name:Se,dir:Le,mtime:rn.mtimeMs}:null}catch{return null}}).filter(Boolean);ve.sort((Se,Le)=>Se.mtime-Le.mtime);for(let Se of ve){if(W>=53687091200)break;try{w.rmSync(Se.dir,{recursive:!0,force:!0}),T.info(C.dim(`  \u{1F5D1}\uFE0F Evicted stale workspace: ${Se.name}`));let Le=ne(`df -k "${X}" | tail -1 | awk '{print $4}'`,{encoding:"utf8"}).trim();if(parseInt(Le,10)*1024>=53687091200)break}catch{}}}}catch{}return await v(),R}catch(I){throw await v(),I.message==="Command aborted"?(T.warn(C.yellow(`
-\u274C Build aborted.`)),await d("failed",{error:"Aborted by user",endTime:Date.now()}),I):(T.error(C.red(`
-\u2717 Local build failed: ${I.message}`)),await d("failed",{error:I.message,endTime:Date.now()}),I)}},Cu=async(e,t,n={},i,r)=>{let o=w.existsSync("android/gradlew")?"android/gradlew":w.existsSync("gradlew")?"./gradlew":null;if(!o)throw new Error("Could not find gradlew. Is this an Android project?");let s=e.developmentClient?"assembleDebug":"assembleRelease";!e.developmentClient&&e.distribution==="store"?s="bundleRelease":!e.developmentClient&&e.distribution==="internal"&&(s="assembleRelease");let l=e.buildCommand||s;T.info(C.blue(`Running Android build: ${l}...`));let a=o.includes("android/")?"android":".",c=(o.includes("android/"),"./gradlew"),u=[l],d=Et(e.framework),p={...n,...d.localAndroidEnv(e,t),MACH_APP_NAME:e.appName||e.name||"App"};if(n.ANDROID_VERSION_CODE){let g=$.join(a,"app/build.gradle");if(w.existsSync(g)){let h=n.ANDROID_VERSION_CODE,S=w.readFileSync(g,"utf-8");S=S.replace(/versionCode\s+\d+/,`versionCode ${h}`),w.writeFileSync(g,S),T.info(C.green(`\u2713 Applied Android versionCode ${h}`))}u.push(`-Pandroid.injected.version.code=${n.ANDROID_VERSION_CODE}`)}for(let g of["app/build","build",".cxx"]){let h=$.join(a,g);w.existsSync(h)&&w.rmSync(h,{recursive:!0,force:!0})}kr(process.cwd()),await vt(c,u,a,p,i,r);let f=$.join(a,"app/build/outputs");return Xt(f,[".apk",".aab"])},Du=async(e,t,n,i={},r,o,s,l,a)=>{if(process.platform!=="darwin")throw new Error("iOS builds can only be run on macOS.");let c=$.resolve(process.cwd(),w.existsSync("ios")?"ios":".");Ms(c);let u=w.readdirSync(c),d=u.find(_=>_.endsWith(".xcworkspace")),p=u.find(_=>_.endsWith(".xcodeproj")),f=qt(i,n,e);Gs(c,f,o);let g=Us(f.BUILD_NUMBER||f.CURRENT_PROJECT_VERSION);if((f.BUILD_NUMBER||f.CURRENT_PROJECT_VERSION)&&!g)throw new Error(`Invalid iOS BUILD_NUMBER/CURRENT_PROJECT_VERSION: "${f.BUILD_NUMBER||f.CURRENT_PROJECT_VERSION}". Apple requires one to three period-separated integers. Fix the Dashboard secret or remove it so Mach can use its auto build number.`);let h=g?[`BUILD_NUMBER=${g}`,`CURRENT_PROJECT_VERSION=${g}`]:[];if(g&&(f.BUILD_NUMBER=g,f.CURRENT_PROJECT_VERSION=g,T.info(C.dim(`Using iOS build number: ${g}`))),!d&&!p)throw new Error("Could not find Xcode workspace or project in ios/ directory.");try{let _=ne("xcode-select -p").toString().trim();T.info(C.dim(`Using Xcode at: ${_}`))}catch{T.warn(C.dim("Could not detect Xcode path."))}T.info(C.blue("Running iOS build via xcodebuild..."));let S=d?d.replace(".xcworkspace",""):p?.replace(".xcodeproj",""),b=e.iosScheme||S||e.scheme,y=e.developmentClient?"Debug":e.iosConfiguration||"Release",P=(r||"default").replace(/[^a-zA-Z0-9-_]/g,"_"),v=$.join(ke.homedir(),`Library/Developer/Xcode/DerivedData/${m.nameLower}`,P);w.mkdirSync(v,{recursive:!0});let F=dn(f),H=$.join(v,".mach-env-hash"),q=$.join(v,"Build"),I=w.existsSync(H)?w.readFileSync(H,"utf-8").trim():"";if(w.existsSync(q)){let _=I&&I!==F?"Build environment changed \u2014 clearing iOS DerivedData build products.":I?"Clearing iOS DerivedData build products to force a fresh JS bundle.":"DerivedData has no environment stamp \u2014 clearing iOS build products.";T.info(C.dim(_)),w.rmSync(q,{recursive:!0,force:!0})}if(w.writeFileSync(H,F),kr(process.cwd()),e.simulator){let _=Au(c,d,p,b,y),M=_||"generic/platform=iOS Simulator",x=["-destination",M];T.info(C.dim(_?`Building for simulator (Scheme: ${b}, Config: ${y}, Destination: ${M})...`:`Building for simulator (Scheme: ${b}, Config: ${y}, Destination: ${M})...`));let E=[d?"-workspace":"-project",d||p,"-scheme",b,"-configuration",y,"-sdk","iphonesimulator",...x,"-derivedDataPath",v,...h,"COMPILER_INDEX_STORE_ENABLE=NO","CODE_SIGNING_ALLOWED=NO","CODE_SIGNING_REQUIRED=NO","ONLY_ACTIVE_ARCH=NO","EXCLUDED_ARCHS=","SUPPORTED_PLATFORMS=iphonesimulator"];try{await Ai(E,c,f,o,s)}catch(be){if(!yu(be))throw be;Su(v),kr(process.cwd()),await Ai(E,c,f,o,s)}let A=$.join(v,"Build/Products",`${y}-iphonesimulator`),N=vu(A,b,e),U=$.basename(N,".app"),K=un($.join(N,"Info.plist"),"CFBundleIdentifier")||"unknown bundle",z=ks(N),Q=Bs(N),R=Hs(N),oe=$.join(A,`${U}_simulator.zip`);return T.info(C.dim(`Selected simulator app: ${$.relative(A,N)} (${K}, build ${z})`)),T.info(C.dim(`Simulator executable architecture: ${Q}`)),T.info(C.dim(`Simulator executable platform: ${R.split(`
-`).find(be=>/\bplatform\b/i.test(be))?.trim()||"IOSSIMULATOR"}`)),T.info(C.dim(`Creating simulator artifact: ${oe}...`)),Xe(oe),It("zip",["-r",oe,$.basename(N)],{cwd:$.dirname(N),stdio:"pipe"}),[oe]}else{T.info(C.dim(`Archiving (Scheme: ${b}, Config: ${y})...`));let _=$.join(c,"build.xcarchive"),M=$.join(c,"export");w.rmSync(_,{recursive:!0,force:!0}),w.rmSync(M,{recursive:!0,force:!0});let x=i.IOS_DIST_P12,E=i.IOS_PROVISIONING_PROFILE,A=i.IOS_P12_PASSWORD||"",N=[],U,K,z={isAppStore:!1,isDevelopment:!1};if(x&&E){T.info(C.blue("\u{1F510} CI/CD Signing: Importing certificates..."));try{let W=`${m.buildPrefix}-${t}.keychain-db`,de=$.join(ke.tmpdir(),W),ve=m.keychainPassword;ne(`security create-keychain -p "${ve}" "${de}" 2>/dev/null || true`),ne(`security set-keychain-settings -t 3600 -l "${de}"`),ne(`security unlock-keychain -p "${ve}" "${de}"`);let Se=$.join(ke.tmpdir(),`cert-${t}.p12`),Le=Buffer.from(x,"base64");w.writeFileSync(Se,Le),T.info(C.dim(`P12 data size: ${Le.length} bytes, first bytes: ${Le.slice(0,4).toString("hex")}`)),(Le.length<100||Le[0]!==48)&&(T.warn(C.yellow("\u26A0\uFE0F  P12 data looks corrupted or was not decrypted correctly.")),T.warn(C.yellow("    This usually means MACH_ENCRYPTION_KEY on the Remote API differs from when credentials were uploaded.")));let rn=[A,"",m.keychainPassword],es=!1;for(let Me of rn)try{ne(`security import "${Se}" -k "${de}" -P "${Me}" -A -T /usr/bin/codesign -T /usr/bin/security`,{stdio:"pipe"}),es=!0,T.info(C.dim(`\u2713 P12 imported successfully with password: ${Me?"[set]":"[empty]"}`));break}catch(ot){T.info(C.dim(`  P12 import attempt with password ${Me?`"${Me.substring(0,3)}..."`:"[empty]"} failed: ${ot.message?.split(`
-`)[0]||"unknown"}`))}if(!es)throw new Error("Failed to import P12.");w.unlinkSync(Se),ne(`security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k "${ve}" "${de}"`);let Pd=ne("security list-keychains -d user",{encoding:"utf-8"}).split(`
-`).map(Me=>Me.trim().replace(/^"|"$/g,"")).filter(Me=>Me.length>0),Rd=[de,...Pd].map(Me=>`"${Me}"`).join(" ");ne(`security list-keychains -d user -s ${Rd}`),ne(`security default-keychain -s "${de}"`);let Er=$.join(ke.homedir(),"Library/MobileDevice/Provisioning Profiles");w.mkdirSync(Er,{recursive:!0});let ts=Buffer.from(E,"base64"),wr=$.join(Er,`${m.nameLower}-temp-${t}.mobileprovision`);w.writeFileSync(wr,ts);let Ir=ts.toString("utf-8"),ns=/<key>get-task-allow<\/key>\s*<true\/>/.test(Ir);z={isAppStore:!Ir.includes("<key>ProvisionedDevices</key>")&&!ns,isDevelopment:ns};try{let ot=ne(`security cms -D -i "${wr}"`,{encoding:"utf-8"}).match(/<key>UUID<\/key>\s*<string>([^<]+)<\/string>/);K=ot?ot[1]:void 0}catch{let ot=Ir.match(/<key>UUID<\/key>\s*<string>([^<]+)<\/string>/);K=ot?ot[1]:void 0}K||(T.warn("Could not extract UUID from provisioning profile. Using fallback."),K=`${m.nameLower}-${t}`);let vr=$.join(Er,`${K}.mobileprovision`);w.existsSync(vr)&&w.unlinkSync(vr),w.renameSync(wr,vr);try{let Me=ne(`security find-identity -v -p codesigning "${de}"`,{encoding:"utf-8"}),ot=Array.from(Me.matchAll(/"((?:Apple|iPhone) (?:Distribution|Developer|Development)[^"]*)"/g),Rn=>Rn[1]),is=z.isDevelopment?ot.find(Rn=>/\b(Development|Developer)\b/.test(Rn)):ot.find(Rn=>/\bDistribution\b/.test(Rn)),rs=ot[0];(is||rs)&&(U=is||rs,T.info(C.blue(`Identity auto-detected from keychain: "${U}"`)))}catch{}U||(U=z.isDevelopment?"Apple Development":"Apple Distribution",T.info(C.blue(`Identity fallback (profile heuristic): "${U}"`))),T.info(C.dim(`Profile type: ${z.isDevelopment?"Development":z.isAppStore?"App Store":"Ad-Hoc"}`)),T.info(C.dim(`Identity Detection: get-task-allow=${z.isDevelopment}, Selected Identity="${U}"`)),N.push("CODE_SIGN_STYLE=Manual"),N.push(`CODE_SIGN_IDENTITY="${U}"`),N.push(`PROVISIONING_PROFILE_SPECIFIER=${K}`),e.iosTeamId&&N.push(`DEVELOPMENT_TEAM=${e.iosTeamId}`)}catch(W){throw T.error(`Signing setup failed: ${W.message}`),W}}else N.push("-allowProvisioningUpdates"),e.iosTeamId&&N.push(`DEVELOPMENT_TEAM=${e.iosTeamId}`);a&&await a("archive"),T.info(C.blue(`Archive detected Identity: "${U}"`)),T.info(C.blue(`Archive detected UUID: "${K}"`)),await Ai(["archive",d?"-workspace":"-project",d||p,"-scheme",b,"-configuration",y,"-archivePath",_,"-derivedDataPath",v,...h,...N],c,f,o,s);let Q=Xt($.join(_,"Products","Applications"),[".app"]);for(let W of Q){let de=ks(W);T.info(C.dim(`Validated iOS CFBundleVersion ${de} in ${$.basename(W)}`))}let R;K?(z.isAppStore?R="app-store":z.isDevelopment?R="development":R="ad-hoc",T.info(C.blue(`Export method from profile: "${R}"`))):(R=e.distribution==="store"?"app-store":e.distribution==="internal"?"ad-hoc":"development",T.warn(C.yellow(`No profile UUID detected. Export method from distribution flag: "${R}"`)));let oe=e.iosExportMethod||R,be=e.iosBundleIdentifier||Ze("ios"),ee=$.join(c,"ExportOptions.plist"),X=`<?xml version="1.0" encoding="UTF-8"?>
-<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
-<plist version="1.0">
-<dict>
-    <key>method</key>
-    <string>${oe}</string>
-    <key>destination</key>
-    <string>export</string>
-    <key>signingStyle</key>
-    <string>${K?"manual":"automatic"}</string>
-    <key>thinning</key>
-    <string>&lt;none&gt;</string>
-    ${e.iosTeamId?`<key>teamID</key><string>${e.iosTeamId}</string>`:""}
-    ${be&&K?`
-    <key>provisioningProfiles</key>
-    <dict>
-        <key>${be}</key>
-        <string>${K}</string>
-    </dict>`:""}
-</dict>
-</plist>`;if(w.writeFileSync(ee,X),process.env[`${m.envPrefix}DEBUG`]&&T.info(C.magenta(`[${m.nameUpper}_DEBUG] ExportOptions.plist:
-${X}`)),a&&await a("export"),T.info(C.blue(`Exporting with Bundle ID: "${be}"`)),T.info(C.blue(`Exporting with Method: "${oe}"`)),o){o(C.magenta(`
-[DIAGNOSTIC] Checking available signing identities...
-`));try{let W=ne("security find-identity -v -p codesigning",{encoding:"utf-8"});o(C.magenta(`${W}
-`))}catch(W){o(C.red(`[DIAGNOSTIC] Failed to list identities: ${W.message}
-`))}}await Ai(["-exportArchive","-archivePath",_,"-exportPath",M,"-exportOptionsPlist",ee],c,f,o,s),a&&await a("validate");let ye=Xt(M,[".ipa"]);for(let W of ye)try{ne(`unzip -t "${W}"`,{stdio:"pipe"});let de=Pu(W);o&&o(`[IPA VALID] ${$.basename(W)} \u2014 archive integrity OK
-`),o&&o(`[IPA VALID] CFBundleVersion ${de}
-`)}catch(de){let ve=`IPA validation failed for ${$.basename(W)}: ${de.message||"archive may be corrupt"}`;throw o&&o(`[IPA CORRUPT] ${ve}
-`),new Error(ve)}return ye}},Ze=e=>{try{let t=$.join(process.cwd(),m.configFileName);if(w.existsSync(t)){let n=JSON.parse(w.readFileSync(t,"utf-8"));if(e==="android"&&n.android?.package)return n.android.package;if(e==="ios"&&n.ios?.bundleIdentifier)return n.ios.bundleIdentifier}if(e==="android"){let n=["android/app/build.gradle","app/build.gradle","build.gradle"];for(let i of n)if(w.existsSync(i)){let o=w.readFileSync(i,"utf-8").match(/applicationId\s+['"]([^'"]+)['"]/);if(o)return o[1]}}else{let n=$.resolve(process.cwd(),w.existsSync("ios")?"ios":"."),i=Xt(n,["Info.plist"]).filter(s=>!s.includes("/Pods/")&&!s.includes("/build/")&&!s.includes("/DerivedData/"));i.sort((s,l)=>l.split("/").length-s.split("/").length);for(let s of i){let a=w.readFileSync(s,"utf-8").match(/<key>CFBundleIdentifier<\/key>\s*<string>([^<]+)<\/string>/);if(a&&!a[1].includes("$"))return a[1]}let r=Xt(n,[".xcodeproj"]);if(r.length>0){let s=$.join(r[0],"project.pbxproj");if(w.existsSync(s)){let a=w.readFileSync(s,"utf-8").match(/PRODUCT_BUNDLE_IDENTIFIER\s*=\s*"?([^";\s]+)"?;/);if(a)return a[1]}}let o=["app.json","app.config.json","app.config.js","app.config.ts"];for(let s of o)if(w.existsSync(s)){let a=w.readFileSync(s,"utf-8").match(/"bundleIdentifier":\s*"([^"]+)"/);if(a)return a[1]}}}catch{return null}return null},ku=()=>{try{return ne("emulator -version",{stdio:"ignore"}),"emulator"}catch{let t=ke.homedir(),n=[$.join(t,"Library/Android/sdk/emulator/emulator"),$.join(t,"Android/Sdk/emulator/emulator"),"/usr/local/lib/android/sdk/emulator/emulator"];for(let i of n)if(w.existsSync(i))return i}return"emulator"},xu=async(e,t)=>{let n=Ei();try{if(ne("adb devices").toString().split(`
-`).slice(1).map(s=>s.trim()).filter(s=>s.length>0&&!s.startsWith("*")).map(s=>s.split("	")[0]).length===0){T.warn(C.yellow("No Android devices or emulators found."));let s=ku(),l=[];try{l=ne(`${s} -list-avds`).toString().split(`
-`).filter(a=>a.trim().length>0)}catch{}if(l.length>0){let a=await xr({message:"Select an emulator to launch:",options:l.map(d=>({value:d,label:d}))});if(wi(a))return;n.start(`Launching emulator ${a}...`),xs(s,["-avd",a],{detached:!0,stdio:"ignore"}).unref();let c=0,u=!1;for(;c<60;){try{if(ne("adb shell getprop sys.boot_completed",{stdio:"pipe"}).toString().trim()==="1"){u=!0;break}}catch{}await new Promise(d=>setTimeout(d,2e3)),c++}if(!u)throw n.stop("Emulator launch timed out."),new Error("Emulator launch timed out. Please try launching it manually.");n.stop("Emulator launched.")}else throw new Error("No devices found and no emulators available to launch. (Make sure Android SDK is installed)")}n.start("Installing APK on device..."),await vt("adb",["install","-r",e],process.cwd(),{},t),n.stop("Installation complete.");let o=Ze("android");if(o){T.info(C.blue(`\u{1F680} Launching ${o}...`));try{ne(`adb shell dumpsys package ${o}`).toString().split(`
-`).find(a=>a.includes("android.intent.action.MAIN")&&a.includes("android.intent.category.LAUNCHER"))?ne(`adb shell monkey -p ${o} -c android.intent.category.LAUNCHER 1`,{stdio:"ignore"}):ne(`adb shell monkey -p ${o} -c android.intent.category.LAUNCHER 1`,{stdio:"ignore"})}catch{T.warn("Could not auto-launch app. You may need to open it manually.")}}}catch(i){n.stop("Installation failed."),T.error(C.red(`Failed to install APK: ${i.message}`))}},Nu=async(e,t,n)=>{let i=Ei();try{if(!ne("xcrun simctl list devices booted").toString().includes("(Booted)")){T.warn(C.yellow("No iOS Simulator is currently booted."));let o=ne("xcrun simctl list devices --json").toString(),s=JSON.parse(o).devices,l=[];Object.keys(s).forEach(d=>{s[d].forEach(p=>{p.isAvailable&&l.push({...p,runtime:d})})});let a=await xr({message:"Select a simulator to launch:",options:l.map(d=>({value:d.udid,label:`${d.name} (${d.runtime.split(".").pop()})`}))});if(wi(a))return;i.start(`Booting ${a}...`),ne(`xcrun simctl boot ${a}`),ne(`open -a Simulator --args -CurrentDeviceUDID ${a}`);let c=0,u=!1;for(;c<30;){try{if(ne("xcrun simctl list devices booted").toString().includes(a)){u=!0;break}}catch{}await new Promise(d=>setTimeout(d,2e3)),c++}if(!u)throw i.stop("Simulator boot timed out."),new Error("Simulator boot timed out.");i.stop("Simulator booted.")}i.start("Installing on iOS Simulator..."),Bs(e),Hs(e),await vt("xcrun",["simctl","install","booted",e],process.cwd(),{},n),i.stop("Installation complete."),T.info(C.blue(`\u{1F680} Launching ${t}...`)),await vt("xcrun",["simctl","launch","booted",t],process.cwd(),{},n)}catch(r){i.stop("Installation failed."),T.error(C.red(`Failed to install on Simulator: ${r.message}`))}},Tu=async(e,t,n)=>{let i=Ei();i.start("Scanning for connected iOS devices...");try{let r=ne("xcrun devicectl list devices --json-output -").toString(),s=(JSON.parse(r).result?.devices||[]).filter(a=>a.connectionProperties?.transportType==="wired"||a.connectionProperties?.transportType==="localNetwork");if(s.length===0)throw i.stop("No connected iOS devices found."),new Error("Please connect your iPhone via USB or ensure it is on the same Wi-Fi for wireless debugging.");let l=s[0].identifier;if(s.length>1){i.stop();let a=await xr({message:"Select a device to install on:",options:s.map(c=>({value:c.identifier,label:`${c.deviceProperties?.name||c.name||c.model?.name} (${c.model?.name||"iPhone"}) - ${c.identifier}`}))});if(wi(a))return;l=a,i.start(`Installing on ${l}...`)}else i.message(`Installing on ${s[0].model.name}...`);await vt("xcrun",["devicectl","device","install","app","--device",l,e],process.cwd(),{},n),i.stop("Installation complete."),T.info(C.blue(`\u{1F680} Launching ${t}...`)),await vt("xcrun",["devicectl","device","launch","app","--device",l,t],process.cwd(),{},n)}catch(r){i.stop("Installation failed."),T.error(C.red(`Failed to install on device: ${r.message}`)),T.info(C.dim('Make sure your device is unlocked and "Developer Mode" is enabled in Settings -> Privacy & Security.'))}};import Lr from"fs";import vi from"path";import{spawnSync as Lu}from"child_process";var Ne=e=>{if(typeof e!="string")return;let t=e.trim();return t.length>0?t:void 0},Vs=e=>e==null?void 0:Ne(String(e)),zs=e=>{if(!Lr.existsSync(e))return null;try{return JSON.parse(Lr.readFileSync(e,"utf-8"))}catch{return null}},Mu=e=>{let t=e.trim();if(!t)return null;try{return JSON.parse(t)}catch{let n=t.indexOf("{"),i=t.lastIndexOf("}");if(n<0||i<=n)return null;try{return JSON.parse(t.slice(n,i+1))}catch{return null}}};function Ks(e=process.cwd()){let t=zs(vi.join(e,"package.json"))||{};return Ne(t.version)}function Uu(e=process.cwd()){let t=zs(vi.join(e,"package.json"))||{},n={...t.dependencies||{},...t.devDependencies||{}};if(n.expo)return"expo";if(n["react-native"])return"react-native"}function Ws(e=process.cwd(),t={}){let n=process.platform==="win32"?vi.join(e,"node_modules",".bin","expo.cmd"):vi.join(e,"node_modules",".bin","expo"),i=Lr.existsSync(n),s=Lu(i?n:"npx",i?["config","--type","public","--json"]:["--no-install","expo","config","--type","public","--json"],{cwd:e,encoding:"utf-8",stdio:["ignore","pipe","pipe"],env:{...process.env,EXPO_NO_TELEMETRY:"1",...t}});return s.error||s.status!==0?null:Mu(s.stdout||"")}var Js=e=>{let t=Ne(e);if(!(!t||t==="manual"))return t},Ii=(e,t,n,i={})=>{let r=Ne(e);if(r)return r;if(!e||typeof e!="object")return;let o=Ne(e.policy);if(o==="appVersion")return Ne(t.version);if(o==="sdkVersion")return Ne(t.sdkVersion);if(o==="nativeVersion"){let s=Ne(t.version);if(!s||!n)return;let l=n==="ios"?Vs(i.iosBuildNumber)||Vs(t.ios?.buildNumber):i.androidVersionCode!==void 0?String(i.androidVersionCode).trim():t.android?.versionCode!==void 0?String(t.android.versionCode).trim():void 0;return!l||l.toLowerCase()==="auto"?s:l?`${s}(${l})`:s}};function Fu(e,t,n={},i){let r=t?Ii(e[t]?.runtimeVersion,e,t,n):void 0;if(r)return r;let o=Ii(e.runtimeVersion,e,t,n);return o||(i?Ii({policy:i},e,t,n):void 0)}function ju(e,t){if(!(!e||typeof e!="object"))return Ne(t?e[t]?.runtimeVersion:void 0)||Ne(e.runtimeVersion)}function Tn(e,t){let n=Ws(e,{MACH_OTA_RUNTIME_VERSION:t.runtimeVersion,MACH_OTA_CHANNEL:t.channel,MACH_OTA_URL:t.url});return n?{runtimeVersion:ju(n,t.platform),channel:Ne(n.updates?.requestHeaders?.["expo-channel-name"]),url:Ne(n.updates?.url),expoConfig:n}:null}function Bu(e,t,n={}){let i=Ne(n.runtimeVersion)||Ne(e.ota?.runtimeVersion);if(i)return i;let r={iosBuildNumber:n.iosBuildNumber,androidVersionCode:n.androidVersionCode},o=Js(e.ota?.runtimeVersionPolicy);if(o){let s=Ii({policy:o},t,n.platform,r);if(s)return s}return Fu(t,n.platform,r)}function Ln(e,t={}){let n=t.cwd||process.cwd(),i=Ne(t.runtimeVersion)||Ne(e.ota?.runtimeVersion);if(i)return i;let r=Js(e.ota?.runtimeVersionPolicy),o={iosBuildNumber:t.iosBuildNumber,androidVersionCode:t.androidVersionCode};if((t.framework||e.framework||Uu(n))==="expo"){let l=Ws(n),a=l?Bu(e,l,{platform:t.platform,iosBuildNumber:o.iosBuildNumber,androidVersionCode:o.androidVersionCode}):void 0;if(a)return a}return Ks(n)||"1.0.0"}import L from"fs";import fn from"os";import V from"path";import{spawn as na,spawnSync as gt}from"child_process";import{randomUUID as Hu}from"crypto";import{pipeline as Gu}from"stream/promises";import{isCancel as jr,log as j,select as ia,spinner as Un,text as Vu}from"@clack/prompts";import Mn from"axios";import B from"chalk";import $i from"adm-zip";var Ku={android:"pixel_6",ios:"iphone_17_pro"};function Br(e){return Ku[e]}async function ra(e){if(e.localRunner){let n=await Yu(e);process.exitCode=n?n.exitCode:1;return}if(e.local){let n=await Xu(e);n&&(process.exitCode=n.exitCode);return}let t=await Kr(e);if(t&&(j.success(B.green(`Maestro run ${t.status||"queued"}: ${t.testRunId}`)),t.launchDeferredReason&&j.warn(B.yellow(t.launchDeferredReason)),t.dashboardUrl&&j.info(B.dim("View test run: ")+B.white.underline(t.dashboardUrl)),e.wait)){let n=await Zu(e,t);n&&(process.exitCode=n.status==="passed"?0:1)}}var zu=new Set(["passed","failed","cancelled","interrupted"]),qs=Number(process.env.MACH_FLOW_UPLOAD_MAX_ATTEMPTS||4),Wu=Number(process.env.MACH_FLOW_UPLOAD_TIMEOUT_MS||12e4),oa=process.env.MACH_MAESTRO_FAST_FAIL_RETRY==="1";function Vr(e){let t=Array.isArray(e)?e:e?[e]:[];return[...new Set(t.flatMap(n=>String(n||"").split(",")).map(n=>n.trim()).filter(Boolean))]}function Ju(e){let t=Vr(e);if(t.length===0)return;let n={};for(let i of t){let r=process.env[i];r!==void 0&&(n[i]=r)}return Object.keys(n).length>0?n:void 0}function qu(e){let t={};for(let[i,r]of Object.entries(process.env))i.startsWith("MAESTRO_TEST_")&&r!==void 0&&(t[i]=r);let n=Vr(e);for(let i of n){let r=process.env[i];r!==void 0&&(t[i]=r)}return t}async function Yu(e){let t=e.projectId,n=e.testRunId,i=e.runnerToken||process.env.MACH_RUNNER_TOKEN||process.env.MACH_TOKEN,r=(process.env.MACH_API_URL||Ct).replace(/\/$/,""),o=L.mkdtempSync(V.join(fn.tmpdir(),"mach-maestro-runner-")),s=V.join(o,"mach-maestro-output"),l=V.join(o,"runner.log");if(L.mkdirSync(s,{recursive:!0}),!t||!n||!i)return j.error(B.red("--local-runner requires --project-id, --test-run-id, and a runner token.")),{status:"failed",exitCode:1,attempts:0,flows:".maestro",platform:e.platform};let a=null,c=null,u=null,d,p,f=h=>{L.appendFileSync(l,`${h}${h.endsWith(`
+`;var Mo=e=>e.replace(/\\/g,"\\\\").replace(/"/g,'\\"').replace(/\$/g,"\\$").replace(/`/g,"\\`"),Uo=async(e,t,n={},i)=>{let r=vd(),o=Cn(e.framework);e.sshHost||(e.sshHost="localhost",gt.message(We.yellow("No SSH host provided, defaulting to localhost."))),r.start(`Connecting to remote Mac at ${We.cyan(e.sshHost)}...`);let s=e.sshUser||process.env.USER||"ubuntu",a=e.sshKey,l=`${s}@${e.sshHost}`,d=`ssh ${a?`-i ${a}`:""} -o StrictHostKeyChecking=no ${l}`,c=`scp ${a?`-i ${a}`:""} -o StrictHostKeyChecking=no`;try{let u=s==="ubuntu"?"/home/ubuntu":`/Users/${s}`,f=(n.PROJECT_ID||"default_project").replace(/[^a-zA-Z0-9-_]/g,"_"),p=`${u}/${m.remoteWorkspacesDir}/${f}`;r.message(`Preparing stable workspace: ${p}...`),Vt(`${d} "mkdir -p ${p}"`,{stdio:"inherit"}),r.message("Transferring source code...");let g=`/tmp/${m.nameLower}-source-${t}.zip`;Vt(`${c} ${g} ${l}:${p}/source.zip`,{stdio:"inherit"});let h=e.iosApiKeyPath?`${p}/api_key.p8`:"",y="";e.iosApiKeyPath&&(r.message("Uploading App Store Connect API key..."),Vt(`${c} ${e.iosApiKeyPath} ${l}:${h}`),e.iosApiKeyId&&e.iosApiKeyIssuer&&(y=`-authenticationKeyID ${e.iosApiKeyId} -authenticationKeyIssuerID ${e.iosApiKeyIssuer} -authenticationKeyPath ${h}`));let b={};if(i)try{let E=await $.post(`/builds/${i}/${t}/build-urls`,{platform:"ios"});E.data.status==="success"&&(b=E.data.urls)}catch(E){gt.warn(We.yellow(`Could not fetch build URLs: ${E.message}`))}let w="";if(b.credentials&&b.credentials.length>0)for(let E of b.credentials)E.type==="p12"?w+=`curl -sf -o "$CERT_DIR/${E.name}" "${E.downloadUrl}" || true
+`:E.type==="mobileprovision"&&(w+=`curl -sf -o "$PROV_TEMP/${E.name}" "${E.downloadUrl}" || true
+`);r.message("Generating macOS build script...");let L=process.env.CODEARTIFACT_AUTH_TOKEN?`export CODEARTIFACT_AUTH_TOKEN="${process.env.CODEARTIFACT_AUTH_TOKEN}"
+`:"";if(n)for(let[E,A]of Object.entries(n)){let D=A.replace(/"/g,'\\"').replace(/\$/g,"\\$").replace(/`/g,"\\`");L+=`export ${E}="${D}"
+`}let _=e.buildProfile||"production",H=Tn(n,_,e),W=kn(H);gt.info(We.dim(`iOS remote build config: simulator=${String(!!e.simulator)}, configuration=${e.iosConfiguration||"Release"}, scheme=${e.iosScheme||"auto"}`));let Z=[L,b.logUpload?`export PRESIGNED_LOG_UPLOAD="${b.logUpload}"`:"",b.doneMarker?`export PRESIGNED_DONE_MARKER="${b.doneMarker}"`:"",b.cacheDerivedDataDownload?`export PRESIGNED_CACHE_DD_DOWNLOAD="${b.cacheDerivedDataDownload}"`:"",b.cacheDerivedDataUpload?`export PRESIGNED_CACHE_DD_UPLOAD="${b.cacheDerivedDataUpload}"`:"",b.cacheNodeModulesDownload?`export PRESIGNED_CACHE_NODE_DOWNLOAD="${b.cacheNodeModulesDownload}"`:"",b.cacheNodeModulesUpload?`export PRESIGNED_CACHE_NODE_UPLOAD="${b.cacheNodeModulesUpload}"`:"",b.cachePodsDownload?`export PRESIGNED_CACHE_PODS_DOWNLOAD="${b.cachePodsDownload}"`:"",b.cachePodsUpload?`export PRESIGNED_CACHE_PODS_UPLOAD="${b.cachePodsUpload}"`:"",b.artifactIpaUpload?`export PRESIGNED_ARTIFACT_IPA_UPLOAD="${b.artifactIpaUpload}"`:"",b.artifactAppZipUpload?`export PRESIGNED_ARTIFACT_APP_ZIP_UPLOAD="${b.artifactAppZipUpload}"`:"",`export BUILD_ID="${t}"`,`export MACH_BUILD_PROFILE="${Mo(_)}"`,`export MACH_APP_NAME="${Mo(H.MACH_APP_NAME)}"`,`export MACH_ENV_FINGERPRINT="${W}"`,o.remoteEnvSetupScript().trim(),`export ${m.envPrefix}PROJECT_ID="${f}"`,n.MATCH_ENCRYPTION_PASSPHRASE?`export MATCH_PASSWORD="${n.MATCH_ENCRYPTION_PASSPHRASE}"`:"",n.APPLE_TEAM_ID?`export FASTLANE_TEAM_ID="${n.APPLE_TEAM_ID}"`:"",`export MATCH_KEYCHAIN_NAME="${m.credentialsKeychain}"`,`export MATCH_KEYCHAIN_PASSWORD="${m.keychainPassword}"`].filter(Boolean).join(`
+`),Ee=e.nodeVersion?[`echo "[NODE] Switching to Node ${e.nodeVersion}..."`,'export NVM_DIR="$HOME/.nvm"','[ -s "$NVM_DIR/nvm.sh" ] && . "$NVM_DIR/nvm.sh" --no-use',`nvm install ${e.nodeVersion} 2>/dev/null || true`,`nvm use ${e.nodeVersion} --silent`,`export PATH="$NVM_DIR/versions/node/$(nvm version ${e.nodeVersion})/bin:$PATH"`,'echo "[NODE] Now using: $(node -v) at $(which node)"'].join(`
+`):"",oe=Lo,R={"{{REMOTE_DIR}}":p,"{{ENV_VARS}}":Z,"{{CREDENTIAL_DOWNLOADS}}":w,"{{IOS_SCHEME}}":e.iosScheme||"","{{IOS_CONFIG}}":e.iosConfiguration||"Release","{{TEAM_ID}}":e.iosTeamId||"","{{AUTH_PARAMS}}":y,"{{IS_SIMULATOR}}":e.simulator?"true":"false","{{BUILD_ID}}":t,"{{EXPORT_METHOD}}":e.iosExportMethod||"ad-hoc","{{NODE_VERSION_SETUP}}":Ee,"{{FRAMEWORK_PREBUILD}}":o.iosRemotePrebuildScript().trim()};Object.entries(R).forEach(([E,A])=>{oe=oe.split(E).join(A)});let T=`/tmp/${m.nameLower}-mac-build-${t}.sh`;if(_d.writeFileSync(T,oe),Vt(`${c} ${T} ${l}:${p}/build.sh`),r.stop("Remote script uploaded."),gt.info(We.cyan("Executing remote build. This might take a while...")),Vt(`${d} "bash ${p}/build.sh"`,{stdio:"inherit"}),r.stop("Remote build finished!"),i){r.start("Fetching artifact links...");try{let A=(await $.get(`/builds/${i}/${t}/artifacts`)).data.artifacts||[],D=e.simulator===!0;if(A.length===0&&!D)throw r.stop("Build Failed!"),new Error("Build completed but no artifacts were generated. Check build logs for errors.");if(r.stop("Build Successful!"),A.length>0){gt.success("Build Artifacts Ready:");for(let v of A)console.log(`
+${We.yellow(v.name)}:
+${We.cyan(v.downloadUrl)}`);console.log(`
+${We.dim("Note: Links are valid for 7 days.")}`)}else D&&gt.warn("Simulator build completed. No artifacts uploaded.")}catch(E){r.stop("Could not fetch artifacts"),gt.warn(We.yellow(`Artifact listing failed: ${E.message}`))}}}catch(u){throw r.stop("iOS Build Failed"),u}};import zi from"fs";import Bn from"path";import{spawnSync as $d}from"child_process";var he=e=>{if(typeof e!="string")return;let t=e.trim();return t.length>0?t:void 0},Fo=e=>e==null?void 0:he(String(e)),jo=e=>{if(!zi.existsSync(e))return null;try{return JSON.parse(zi.readFileSync(e,"utf-8"))}catch{return null}},Rd=e=>{let t=e.trim();if(!t)return null;try{return JSON.parse(t)}catch{let n=t.indexOf("{"),i=t.lastIndexOf("}");if(n<0||i<=n)return null;try{return JSON.parse(t.slice(n,i+1))}catch{return null}}};function Bo(e=process.cwd()){let t=jo(Bn.join(e,"package.json"))||{};return he(t.version)}function Od(e=process.cwd()){let t=jo(Bn.join(e,"package.json"))||{},n={...t.dependencies||{},...t.devDependencies||{}};if(n.expo)return"expo";if(n["react-native"])return"react-native"}function Ho(e=process.cwd(),t={}){let n=process.platform==="win32"?Bn.join(e,"node_modules",".bin","expo.cmd"):Bn.join(e,"node_modules",".bin","expo"),i=zi.existsSync(n),s=$d(i?n:"npx",i?["config","--type","public","--json"]:["--no-install","expo","config","--type","public","--json"],{cwd:e,encoding:"utf-8",stdio:["ignore","pipe","pipe"],env:{...process.env,EXPO_NO_TELEMETRY:"1",...t}});return s.error||s.status!==0?null:Rd(s.stdout||"")}var Go=e=>{let t=he(e);if(!(!t||t==="manual"))return t},Fn=(e,t,n,i={})=>{let r=he(e);if(r)return r;if(!e||typeof e!="object")return;let o=he(e.policy);if(o==="appVersion")return he(t.version);if(o==="sdkVersion")return he(t.sdkVersion);if(o==="nativeVersion"){let s=he(t.version);if(!s||!n)return;let a=n==="ios"?Fo(i.iosBuildNumber)||Fo(t.ios?.buildNumber):i.androidVersionCode!==void 0?String(i.androidVersionCode).trim():t.android?.versionCode!==void 0?String(t.android.versionCode).trim():void 0;return!a||a.toLowerCase()==="auto"?s:a?`${s}(${a})`:s}};function Dd(e,t,n={},i){let r=t?Fn(e[t]?.runtimeVersion,e,t,n):void 0;if(r)return r;let o=Fn(e.runtimeVersion,e,t,n);return o||(i?Fn({policy:i},e,t,n):void 0)}function Pd(e,t){if(!(!e||typeof e!="object"))return he(t?e[t]?.runtimeVersion:void 0)||he(e.runtimeVersion)}function zt(e,t){let n=Ho(e,{MACH_OTA_RUNTIME_VERSION:t.runtimeVersion,MACH_OTA_CHANNEL:t.channel,MACH_OTA_URL:t.url});return n?{runtimeVersion:Pd(n,t.platform),channel:he(n.updates?.requestHeaders?.["expo-channel-name"]),url:he(n.updates?.url),expoConfig:n}:null}function Cd(e,t,n={}){let i=he(n.runtimeVersion)||he(e.ota?.runtimeVersion);if(i)return i;let r={iosBuildNumber:n.iosBuildNumber,androidVersionCode:n.androidVersionCode},o=Go(e.ota?.runtimeVersionPolicy);if(o){let s=Fn({policy:o},t,n.platform,r);if(s)return s}return Dd(t,n.platform,r)}function Kt(e,t={}){let n=t.cwd||process.cwd(),i=he(t.runtimeVersion)||he(e.ota?.runtimeVersion);if(i)return i;let r=Go(e.ota?.runtimeVersionPolicy),o={iosBuildNumber:t.iosBuildNumber,androidVersionCode:t.androidVersionCode};if((t.framework||e.framework||Od(n))==="expo"){let a=Ho(n),l=a?Cd(e,a,{platform:t.platform,iosBuildNumber:o.iosBuildNumber,androidVersionCode:o.androidVersionCode}):void 0;if(l)return l}return Bo(n)||"1.0.0"}import O from"fs";import $t from"os";import x from"path";import{spawn as Xo,spawnSync as Ge}from"child_process";import{randomUUID as Td}from"crypto";import{pipeline as kd}from"stream/promises";import{isCancel as Ji,log as C,select as Zo,spinner as qt,text as Nd}from"@clack/prompts";import Wt from"axios";import k from"chalk";import jn from"adm-zip";var xd={android:"pixel_6",ios:"iphone_17_pro"};function Yi(e){return xd[e]}async function Qo(e){if(e.localRunner){let n=await Bd(e);process.exitCode=n?n.exitCode:1;return}if(e.local){let n=await jd(e);n&&(process.exitCode=n.exitCode);return}let t=await er(e);if(t&&(C.success(k.green(`Maestro run ${t.status||"queued"}: ${t.testRunId}`)),t.launchDeferredReason&&C.warn(k.yellow(t.launchDeferredReason)),t.dashboardUrl&&C.info(k.dim("View test run: ")+k.white.underline(t.dashboardUrl)),e.wait)){let n=await Hd(e,t);n&&(process.exitCode=n.status==="passed"?0:1)}}var Ld=new Set(["passed","failed","cancelled","interrupted"]),Vo=Number(process.env.MACH_FLOW_UPLOAD_MAX_ATTEMPTS||4),Md=Number(process.env.MACH_FLOW_UPLOAD_TIMEOUT_MS||12e4),es=process.env.MACH_MAESTRO_FAST_FAIL_RETRY==="1";function Qi(e){let t=Array.isArray(e)?e:e?[e]:[];return[...new Set(t.flatMap(n=>String(n||"").split(",")).map(n=>n.trim()).filter(Boolean))]}function Ud(e){let t=Qi(e);if(t.length===0)return;let n={};for(let i of t){let r=process.env[i];r!==void 0&&(n[i]=r)}return Object.keys(n).length>0?n:void 0}function Fd(e){let t={};for(let[i,r]of Object.entries(process.env))i.startsWith("MAESTRO_TEST_")&&r!==void 0&&(t[i]=r);let n=Qi(e);for(let i of n){let r=process.env[i];r!==void 0&&(t[i]=r)}return t}async function Bd(e){let t=e.projectId,n=e.testRunId,i=e.runnerToken||process.env.MACH_RUNNER_TOKEN||process.env.MACH_TOKEN,r=(process.env.MACH_API_URL||Qe).replace(/\/$/,""),o=O.mkdtempSync(x.join($t.tmpdir(),"mach-maestro-runner-")),s=x.join(o,"mach-maestro-output"),a=x.join(o,"runner.log");if(O.mkdirSync(s,{recursive:!0}),!t||!n||!i)return C.error(k.red("--local-runner requires --project-id, --test-run-id, and a runner token.")),{status:"failed",exitCode:1,attempts:0,flows:".maestro",platform:e.platform};let l=null,d=null,c=null,u,f,p=h=>{O.appendFileSync(a,`${h}${h.endsWith(`
 `)?"":`
-`}`)},g=async(h,S)=>{try{await Mn.post(`${r}/internal/tests/${encodeURIComponent(n)}/runner`,{projectId:t,runnerToken:i,status:h,error:S,logPreview:sp(l),device:p,junitUrl:a?.urls?.junitDownloadUrl,logsUrl:a?.urls?.logsDownloadUrl,artifactsUrl:a?.urls?.artifactsDownloadUrl})}catch(b){f(`[WARN] Could not post runner update: ${b.message||b}`)}};try{f(`Mach Maestro local runner starting for ${n}`);let h=await Mn.post(`${r}/internal/tests/${encodeURIComponent(n)}/runner-payload`,{projectId:t,runnerToken:i});if(h.data?.status!=="success"||!h.data?.payload)throw new Error(h.data?.message||"Runner payload was not returned.");a=h.data.payload;let S=Object.keys(a.env||{});f(`Using Maestro env vars: ${S.length>0?S.join(", "):"none"}`);let b={...process.env,...a.env||{}},y=ap(a.env);y.length>0&&f(`Passing Maestro env vars to test command: ${S.sort().join(", ")}`),await g("running");let P=a.platform==="android"?"app.apk":"app.zip",v=V.join(o,P),F=V.join(o,"source.zip"),H=V.join(o,"source");L.mkdirSync(H,{recursive:!0}),f("Downloading app artifact..."),await Hr(a.artifactUrl,v),f(`Downloaded app artifact: ${P} (${Xs(L.statSync(v).size)})`),f("Downloading Maestro source..."),await Hr(a.urls.sourceUrl,F),f(`Downloaded Maestro source: source.zip (${Xs(L.statSync(F).size)})`),new $i(F).extractAllTo(H,!0);let q=lp(H,a.flowPath||".maestro");if(!L.existsSync(q))throw new Error(`Maestro flow path not found: ${a.flowPath||".maestro"}`);if(f(`Resolved Maestro flow path: ${V.relative(H,q)||"."}`),a.platform==="ios"){let A=await mp(a.device||Br("ios"),l);d=A.udid,p=A.name,await g("running");let N=gp(v,o),U=ua(N,l);f(`Resolved iOS app bundle: ${N}`),f(`Resolved iOS bundle id: ${U||"unknown"}`),yp(N,l,A.udid),Gr("xcrun",["simctl","install",A.udid,N],l),U&&(u={platform:a.platform,appId:U,deviceId:A.udid}),U&&$t("xcrun",["simctl","get_app_container",A.udid,U,"app"],l),Mr(s,l,"ios-before-maestro.png",A.udid),a.record&&(c=hp(s,l,A.udid))}else{let A=Ap(v,l),N=bp(a.device,l);d=N||void 0,p=a.device||Br("android");let U=N?["-s",N]:[];f(`Resolved Android application id: ${A||"unknown"}`),Gr("adb",[...U,"install","-r",v],l),A&&(u={platform:a.platform,appId:A,deviceId:N||void 0})}let _=Math.max(0,Math.min(10,Number(a.retries??1)))+1,M=V.join(s,"report.xml"),x=pp(l);if(!x)throw new Error("Maestro CLI not found on this runner. Install Maestro or set MAESTRO_BIN to the full maestro path.");let E=1;for(let A=1;A<=_;A+=1){f(`Running Maestro attempt ${A}/${_}...`);let N=[...d?["--device",d]:[],"test","--platform",a.platform,...y,q,"--format","junit","--output",M,"--test-output-dir",s];if(oa&&A<_?E=(await da(x,N,{logPath:l,env:b,fastFailOnFlowFailure:!0})).exitCode:E=$t(x,N,l,void 0,b),E===0)break}return a.platform==="ios"&&Mr(s,l,"ios-after-maestro.png",d),await Zs(c,l),c=null,await ta(a.urls,o,s,l),E===0?(await g("passed"),j.success(B.green(`Managed Maestro run passed: ${n}`)),{status:"passed",exitCode:0,attempts:_,flows:a.flowPath,platform:a.platform}):(await g("failed",`Maestro exited with code ${E}`),j.error(B.red(`Managed Maestro run failed with exit code ${E}`)),{status:"failed",exitCode:E,attempts:_,flows:a.flowPath,platform:a.platform})}catch(h){let S=h.message||String(h);return f(`MACH_MAESTRO_RUN_FAILED: ${S}`),a?.platform==="ios"&&Mr(s,l,"ios-after-failure.png",d),await Zs(c,l),a?.urls&&await ta(a.urls,o,s,l),await g("failed",S),j.error(B.red(`Managed Maestro runner failed: ${S}`)),{status:"failed",exitCode:1,attempts:0,flows:a?.flowPath||".maestro",platform:a?.platform||e.platform}}finally{Sp(u,l)}}async function Xu(e){let t=e.maestroFlows||".maestro",n=aa(e.maestroRetries);if(n===null)return null;let i=V.resolve(t);if(!L.existsSync(i))return j.error(B.red(`Maestro flows not found: ${t}`)),{status:"failed",exitCode:1,attempts:0,flows:t,platform:e.platform};let r=await ip(e);if(r?.url){if(!await op(r))return{status:"failed",exitCode:1,attempts:0,flows:t,platform:r.platform||e.platform}}else if(e.buildId||e.buildUrl||e.artifactUrl||e.latest)return{status:"failed",exitCode:1,attempts:0,flows:t,platform:e.platform};e.maestroRecord&&j.warn(B.yellow("--maestro-record is managed-runner only and is ignored in --local mode."));let o=r?.platform||e.platform,s=["test"];o&&s.push("--platform",o),e.maestroDevice&&s.push("--device",String(e.maestroDevice));let l=qu(e.maestroEnv),a=Object.keys(l);if(a.length>0){j.info(B.dim(`Passing Maestro env vars to local run: ${a.join(", ")}`));for(let[f,g]of Object.entries(l))s.push("-e",`${f}=${g}`)}s.push(t);let c=n+1,u=1;for(let f=1;f<=c;f+=1){if(j.info(B.dim(`Running local Maestro attempt ${f}/${c}...`)),oa&&f<c){let g=await da("maestro",s,{cwd:process.cwd(),env:process.env,echoOutput:!0,fastFailOnFlowFailure:!0});if(g.error){let h=g.error.message||"Failed to run Maestro";j.error(B.red(`Local Maestro failed to start: ${h}`)),j.info(B.dim("Install Maestro locally, then retry: https://maestro.mobile.dev/getting-started/installing-maestro")),u=1;break}u=g.exitCode}else{let g=gt("maestro",s,{cwd:process.cwd(),stdio:"inherit",env:process.env});if(g.error){let h=g.error.message||"Failed to run Maestro";j.error(B.red(`Local Maestro failed to start: ${h}`)),j.info(B.dim("Install Maestro locally, then retry: https://maestro.mobile.dev/getting-started/installing-maestro")),u=1;break}u=typeof g.status=="number"?g.status:1}if(u===0)break}let d=u===0?"passed":"failed",p={status:d,exitCode:u,attempts:c,flows:t,platform:o};return Pp(e,p),d==="passed"?j.success(B.green("Local Maestro run passed")):j.error(B.red(`Local Maestro run failed with exit code ${u}`)),p}async function Kr(e){let t=we(`./${m.configFileName}`),n=e.projectId||t?.projectId,i=String(e.profile||e.buildProfile||"production").toLowerCase();if(!n)return j.error(`No projectId found. Run \`${m.nameLower} link\` first or pass an internal project id.`),null;let r=e.platform;if(!r&&e.latest){let p=await ia({message:"Select platform for the latest build:",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"}]});if(jr(p))return null;r=p}let o=await np(e);if(!o)return null;if(o.kind==="latest"&&!r)return j.error("Pass --platform when using --latest."),null;if(o.kind==="artifact-url"&&!r)return j.error("Pass --platform when using --artifact-url."),null;let s=aa(e.maestroRetries);if(s===null)return null;let l=Vr(e.maestroEnv),a=Ju(e.maestroEnv);!e.quiet&&l.length>0&&j.info(B.dim(`Forwarding Maestro env vars by name: ${l.join(", ")}`));let c=await Qu(e,n);if(c===null)return null;let u=Un();e.quiet||u.start("Queuing Maestro run...");let d=e.maestroDevice||(r?Br(r):void 0);try{let p=await O.post("/tests/maestro",{projectId:n,platform:r,profile:i,latest:o.kind==="latest",buildId:o.kind==="build-id"?o.value:e.buildId,buildUrl:o.kind==="build-url"?o.value:e.buildUrl,artifactUrl:o.kind==="artifact-url"?o.value:e.artifactUrl,flowSourceKey:c,flows:e.maestroFlows||".maestro",...d?{device:d}:{},retries:s,record:!!e.maestroRecord,...l.length>0?{envNames:l}:{},...a?{env:a}:{}});if(p.data.status!=="success")throw new Error(p.data.message||"Failed to queue Maestro run");let f=p.data.testRun,g={testRunId:f.testRunId,status:f.status,projectId:n,buildId:f.buildId,platform:f.platform,dashboardUrl:f.dashboardUrl||`${mt}/tests/${f.testRunId}`,launchDeferredReason:f.launchDeferredReason};return fa(e,g),e.quiet||u.stop("Maestro run queued"),g}catch(p){e.quiet||u.stop("Could not queue Maestro run");let f=p.response?.data?.message||p.message||"Unknown error";return j.error(B.red(`Maestro queue failed: ${f}`)),null}}async function Zu(e,t){let n=Ys(e.waitTimeout,60,"--wait-timeout"),i=Ys(e.waitInterval,15,"--wait-interval");if(n===null||i===null)return null;let r=n*60*1e3,o=Math.max(5,i)*1e3,s=Date.now(),l=t.status||"queued";for(j.info(B.dim(`Waiting for Maestro run ${t.testRunId} to finish...`));Date.now()-s<=r;){let a=await tp(t.projectId,t.testRunId);if(!a)return null;if(a.status&&a.status!==l&&(l=a.status,j.info(B.dim(`Maestro status: ${l}`))),zu.has(String(a.status)))return fa(e,a),a.status==="passed"?j.success(B.green(`Maestro run passed: ${a.testRunId}`)):(j.error(B.red(`Maestro run ${a.status}: ${a.testRunId}`)),a.error&&j.error(B.red(String(a.error)))),a;await zr(o)}return j.error(B.red(`Timed out waiting for Maestro run ${t.testRunId} after ${n} minute(s).`)),{...t,status:"timeout"}}async function Qu(e,t){if(e.maestroUseBuildSource)return;let n=e.maestroFlows||".maestro",i=V.resolve(n);if(!L.existsSync(i))return e.maestroFlows?(j.error(B.red(`Maestro flows not found: ${n}`)),null):void 0;let r=V.relative(process.cwd(),i);if(!r||r.startsWith("..")||V.isAbsolute(r))return j.error(B.red("Managed Maestro flow uploads must be inside the current project directory.")),null;let o=Un();e.quiet||o.start(`Uploading Maestro flows from ${r}...`);try{let s=await O.post("/tests/maestro/source-upload-url",{projectId:t,uploadId:Hu()});if(s.data.status!=="success"||!s.data.uploadUrl||!s.data.key)throw new Error(s.data.message||"Failed to get Maestro flow upload URL");let l=new $i;if(L.statSync(i).isDirectory())l.addLocalFolder(i,r);else{let u=V.dirname(r);l.addLocalFile(i,u==="."?void 0:u,V.basename(r))}let c=l.toBuffer();return await ep(s.data.uploadUrl,c,"application/zip","Maestro flow upload",u=>{e.quiet||o.message(u)}),e.quiet||o.stop("Maestro flows uploaded"),s.data.key}catch(s){e.quiet||o.stop("Could not upload Maestro flows");let l=s.response?.data?.message||s.message||"Unknown error";return j.error(B.red(`Maestro flow upload failed: ${l}`)),null}}function sa(e){let t=e.response?.status,n=e.code||"",i=e.message||"";return t&&![408,409,425,429].includes(t)&&t<500?!1:/ECONNRESET|ETIMEDOUT|EAI_AGAIN|ENOTFOUND|ECONNABORTED|socket hang up|network|timeout/i.test(`${n} ${i}`)||!t}async function ep(e,t,n,i,r){let o;for(let s=1;s<=qs;s+=1)try{await Mn.put(e,t,{headers:{"Content-Type":n},maxBodyLength:1/0,maxContentLength:1/0,timeout:Wu});return}catch(l){if(o=l,!sa(l)||s>=qs)break;let a=Math.min(2e4,2e3*s),c=l.code||l.response?.status||l.message||"network error";r?.(`${i} attempt ${s} failed (${c}), retrying...`),await zr(a)}throw o}async function tp(e,t){try{let n=await O.get(`/tests/${encodeURIComponent(t)}`,{params:{projectId:e}});if(n.data.status!=="success")throw new Error(n.data.message||"Failed to fetch Maestro run");let i=n.data.testRun;return{testRunId:i.testRunId,status:i.status,projectId:e,buildId:i.buildId,platform:i.platform,dashboardUrl:i.dashboardUrl||`${mt}/tests/${i.testRunId}`,launchDeferredReason:i.launchDeferredReason,...i.error?{error:i.error}:{}}}catch(n){let i=n.response?.data?.message||n.message||"Unknown error";return j.error(B.red(`Could not fetch Maestro run status: ${i}`)),null}}async function np(e){if(e.buildId)return{kind:"build-id",value:e.buildId};if(e.buildUrl)return{kind:"build-url",value:e.buildUrl};if(e.artifactUrl)return{kind:"artifact-url",value:e.artifactUrl};if(e.latest)return{kind:"latest"};let t=await ia({message:"Select app artifact source for Maestro:",options:[{value:"latest",label:"Latest successful build"},{value:"build-id",label:"Build ID"},{value:"build-url",label:`${m.name} build URL`},{value:"artifact-url",label:"Direct artifact URL"}]});if(jr(t))return null;if(t==="latest")return{kind:"latest"};let n=await Vu({message:t==="build-id"?"Enter build ID:":t==="build-url"?`Enter ${m.name} build URL:`:"Enter artifact URL:",validate:i=>{let r=String(i||"").trim();if(!r)return"Value is required";if((t==="build-url"||t==="artifact-url")&&!r.startsWith("http"))return"Must be a URL"}});return jr(n)?null:{kind:t,value:String(n).trim()}}function Ys(e,t,n){if(e==null||e==="")return t;let i=Number(e);return!Number.isFinite(i)||i<=0?(j.error(`${n} must be a positive number.`),null):i}function zr(e){return new Promise(t=>setTimeout(t,e))}function aa(e){if(e==null||e==="")return 1;let t=Number(e);return!Number.isInteger(t)||t<0||t>10?(j.error("--maestro-retries must be an integer between 0 and 10."),null):t}async function ip(e){if(e.artifactUrl)return{url:e.artifactUrl,platform:e.platform||Jr(e.artifactUrl),name:pa(e.artifactUrl)};let t=e.buildId||_p(e.buildUrl);return t?la(t,e.platform):e.latest?rp(e):null}async function la(e,t){let n=Un();n.start(`Resolving build ${e}...`);try{let i=await O.get(`/public/builds/${encodeURIComponent(e)}`);if(i.data.status!=="success")throw new Error(i.data.message||"Build lookup failed");let r=t||i.data.build?.platform,o=$p(i.data.artifacts||[],r);if(!o?.downloadUrl)throw new Error("No installable APK or simulator app artifact found for this build.");return n.stop("Build artifact resolved"),{url:o.downloadUrl,platform:r||Jr(o.name||o.downloadUrl),name:o.name}}catch(i){n.stop("Could not resolve build artifact");let r=i.response?.data?.message||i.message||"Unknown error";return j.error(B.red(`Local Maestro artifact lookup failed: ${r}`)),null}}async function rp(e){let t=we(`./${m.configFileName}`),n=e.projectId||t?.projectId,i=String(e.profile||e.buildProfile||"production").toLowerCase();if(!n)return j.error(`No projectId found. Run \`${m.nameLower} link\` first or pass --build-id/--artifact-url.`),null;if(!e.platform)return j.error("Pass --platform when using --latest with --local."),null;let r=Un();r.start("Resolving latest build...");try{let o=await O.get(`/builds/${n}`,{params:{limit:100}}),l=(Array.isArray(o.data.builds)?o.data.builds:[]).find(a=>a.status==="success"&&a.platform===e.platform&&String(a.buildProfile||a.buildType||"production").toLowerCase()===i);if(!l?.buildId)throw new Error(`No successful ${e.platform} build found for profile ${i}.`);return r.stop(`Latest build resolved: ${l.buildId}`),la(l.buildId,e.platform)}catch(o){r.stop("Could not resolve latest build");let s=o.response?.data?.message||o.message||"Unknown error";return j.error(B.red(`Latest build lookup failed: ${s}`)),null}}async function op(e){let t=e.platform||Jr(e.url);if(!t)return j.error(B.red("Could not infer platform for local install. Pass --platform android or --platform ios.")),!1;let n=L.mkdtempSync(V.join(fn.tmpdir(),"mach-maestro-")),i=e.name||pa(e.url)||(t==="android"?"app.apk":"app.zip"),r=V.join(n,i),o=Un();o.start(`Downloading ${i}...`);try{await Hr(e.url,r),o.stop("Artifact downloaded")}catch(s){return o.stop("Artifact download failed"),j.error(B.red(s.message||"Failed to download artifact")),!1}return t==="android"?Ip(r):vp(r,n)}async function Hr(e,t){let n=await Mn.get(e,{responseType:"stream"});await Gu(n.data,L.createWriteStream(t))}function sp(e,t=12e3){try{return L.readFileSync(e,"utf-8").slice(-t)}catch{return""}}function Xs(e){if(!Number.isFinite(e)||e<0)return"unknown size";if(e<1024)return`${e} B`;let t=["KB","MB","GB"],n=e/1024,i=t[0];for(let r=1;n>=1024&&r<t.length;r+=1)n/=1024,i=t[r];return`${n.toFixed(n>=10?1:2)} ${i}`}function ap(e){return Object.entries(e||{}).filter(([t,n])=>!!t&&n!==void 0).sort(([t],[n])=>t.localeCompare(n)).flatMap(([t,n])=>["-e",`${t}=${n}`])}function lp(e,t){let n=V.resolve(e,t||".maestro"),i=V.relative(e,n);if(i.startsWith("..")||V.isAbsolute(i))throw new Error("Maestro flow path must stay inside the build source.");return n}function ca(e,t){let n=[e];for(let i=0;i<t.length;i+=1){let r=t[i],o=t[i-1];(o==="-e"||o==="--env")&&/^[A-Za-z_][A-Za-z0-9_]*=/.test(r)?n.push(`${r.slice(0,r.indexOf("="))}=<redacted>`):n.push(r)}return n.join(" ")}function cp(e){return/\[Failed\]\s+/.test(e)}function dp(e){if(!e.killed){try{e.kill("SIGTERM")}catch{}setTimeout(()=>{try{e.kill("SIGKILL")}catch{}},5e3).unref()}}function da(e,t,n={}){let{cwd:i,env:r=process.env,logPath:o,echoOutput:s=!1,fastFailOnFlowFailure:l=!1}=n;return o&&L.appendFileSync(o,`
-$ ${ca(e,t)}
-`),new Promise(a=>{let c=!1,u=!1,d="",p=h=>{u||(u=!0,a(h))},f=na(e,t,{cwd:i,env:r,stdio:["ignore","pipe","pipe"]}),g=h=>{d+=h;let S=d.split(/\r?\n/);d=S.pop()||"";for(let b of S)if(l&&cp(b)&&!c){c=!0;let y="Mach fast-fail: detected failed Maestro flow; stopping this attempt early to retry...";o&&L.appendFileSync(o,`
-${y}
-`),s&&process.stderr.write(`${y}
-`),dp(f)}};f.stdout?.on("data",h=>{let S=h.toString();o&&L.appendFileSync(o,S),s&&process.stdout.write(S),g(S)}),f.stderr?.on("data",h=>{let S=h.toString();o&&L.appendFileSync(o,S),s&&process.stderr.write(S),g(S)}),f.on("error",h=>{o&&L.appendFileSync(o,`${h.message}
-`),p({exitCode:1,fastFailed:c,error:h})}),f.on("close",(h,S)=>{c&&o&&L.appendFileSync(o,`Maestro attempt stopped after first failed flow${S?` (${S})`:""}.
-`),p({exitCode:typeof h=="number"?h:1,fastFailed:c})})})}function $t(e,t,n,i,r=process.env){L.appendFileSync(n,`
-$ ${ca(e,t)}
-`);let o=gt(e,t,{cwd:i,encoding:"utf-8",env:r});return o.stdout&&L.appendFileSync(n,o.stdout),o.stderr&&L.appendFileSync(n,o.stderr),o.error?(L.appendFileSync(n,`${o.error.message}
-`),1):typeof o.status=="number"?o.status:1}function Gr(e,t,n,i){let r=$t(e,t,n,i);if(r!==0)throw new Error(`${e} ${t.join(" ")} failed with exit code ${r}`)}function up(e){try{return L.accessSync(e,L.constants.X_OK),!0}catch{return!1}}function pp(e){let t=[process.env.MAESTRO_BIN,V.join(fn.homedir(),".maestro","bin","maestro"),"/opt/homebrew/bin/maestro","/usr/local/bin/maestro"].filter(Boolean),n=gt("/usr/bin/env",["which","maestro"],{encoding:"utf-8",env:process.env}),i=n.status===0?String(n.stdout||"").split(`
-`)[0]?.trim():"";i&&t.unshift(i);for(let r of t)if(r&&up(r))return e&&L.appendFileSync(e,`Using Maestro CLI at ${r}
-`),r;return e&&L.appendFileSync(e,`Maestro CLI not found. Checked: ${t.join(", ")}
-`),null}function fp(e){let t=String(e||"").trim();return t?t.replace(/_/g," ").replace(/\bios\b/gi,"").replace(/\biphone\b/i,"iPhone").replace(/\bpro\b/gi,"Pro").replace(/\bmax\b/gi,"Max").replace(/\s+/g," ").trim():"iPhone 17 Pro"}async function mp(e,t){let n=fp(e),i=gt("xcrun",["simctl","list","devices","--json"],{encoding:"utf-8"});if(i.status!==0||!i.stdout)throw new Error("Could not list iOS simulators.");let r=JSON.parse(i.stdout),o=Object.values(r.devices||{}).flatMap(a=>Array.isArray(a)?a:[]).filter(a=>a?.isAvailable),s=n.toLowerCase(),l=o.find(a=>a.udid===e)||o.find(a=>a.name===n)||o.find(a=>String(a.name||"").toLowerCase().includes(s));if(!l?.udid)throw new Error(`No available iOS Simulator found for ${n}.`);return l.state==="Booted"?L.appendFileSync(t,`Using already booted iOS Simulator ${l.name} (${l.udid}).
-`):(L.appendFileSync(t,`Booting iOS Simulator ${l.name} (${l.udid})...
-`),$t("xcrun",["simctl","boot",l.udid],t)!==0&&L.appendFileSync(t,`simctl boot returned non-zero; continuing to bootstatus in case it was already booting.
-`),Gr("xcrun",["simctl","bootstatus",l.udid,"-b"],t)),{name:String(l.name||n),udid:l.udid}}function gp(e,t){if(e.endsWith(".ipa"))throw new Error("iOS Maestro runs need a simulator .app.zip artifact, not an App Store .ipa.");if(e.endsWith(".zip")){let n=V.join(t,"ios-app");L.mkdirSync(n,{recursive:!0}),new $i(e).extractAllTo(n,!0);let i=Wr(n);if(!i)throw new Error("Could not find a .app bundle inside the iOS artifact zip.");return i}if(e.endsWith(".app"))return e;throw new Error("iOS Maestro runs need a .app bundle or .app.zip artifact.")}function ua(e,t){let n=V.join(e,"Info.plist");if(!L.existsSync(n))return L.appendFileSync(t,`Could not find Info.plist in ${e}; skipping uninstall.
-`),null;let i=gt("/usr/bin/plutil",["-extract","CFBundleIdentifier","raw","-o","-",n],{encoding:"utf-8",env:process.env}),r=String(i.stdout||"").trim();return i.status!==0||!r?(L.appendFileSync(t,`Could not read CFBundleIdentifier from Info.plist; skipping uninstall.
-`),null):r}function Mr(e,t,n,i){let r=V.join(e,n);$t("xcrun",["simctl","io",i||"booted","screenshot",r],t)!==0&&L.appendFileSync(t,`[WARN] Could not capture iOS simulator screenshot: ${n}
-`)}function hp(e,t,n){let i=V.join(e,"ios-simulator-recording.mp4");L.appendFileSync(t,`Starting iOS simulator recording: ${i}
-`);let r=na("xcrun",["simctl","io",n||"booted","recordVideo",i],{stdio:["ignore","pipe","pipe"],env:process.env});return r.stdout?.on("data",o=>{L.appendFileSync(t,o)}),r.stderr?.on("data",o=>{L.appendFileSync(t,o)}),r.on("error",o=>{L.appendFileSync(t,`[WARN] Could not start iOS simulator recording: ${o.message}
-`)}),r}async function Zs(e,t){e&&await new Promise(n=>{let i=!1,r=()=>{i||(i=!0,n())};e.once("exit",r),e.once("close",r),e.killed||(L.appendFileSync(t,`Stopping iOS simulator recording...
-`),e.kill("SIGINT")),setTimeout(()=>{!i&&!e.killed&&(L.appendFileSync(t,`[WARN] iOS simulator recording did not stop after SIGINT; sending SIGKILL.
-`),e.kill("SIGKILL")),r()},5e3).unref?.()})}function yp(e,t,n){let i=ua(e,t);if(!i)return;L.appendFileSync(t,`Uninstalling existing iOS app data for ${i} if present...
-`),$t("xcrun",["simctl","uninstall",n||"booted",i],t)!==0&&L.appendFileSync(t,`No existing app install removed for ${i}; continuing.
-`)}function Sp(e,t){if(!e?.appId)return;if(L.appendFileSync(t,`Cleaning up installed app after Maestro run...
-`),e.platform==="ios"){let r=$t("xcrun",["simctl","uninstall",e.deviceId||"booted",e.appId],t);r===0?L.appendFileSync(t,`Uninstalled iOS app ${e.appId} after Maestro run.
-`):L.appendFileSync(t,`Warning: failed to uninstall iOS app ${e.appId} after Maestro run: xcrun simctl uninstall exited with code ${r}
-`);return}let n=e.deviceId?["-s",e.deviceId]:[],i=$t("adb",[...n,"uninstall",e.appId],t);i===0?L.appendFileSync(t,`Uninstalled Android app ${e.appId} after Maestro run.
-`):L.appendFileSync(t,`Warning: failed to uninstall Android app ${e.appId} after Maestro run: adb uninstall exited with code ${i}
-`)}function bp(e,t){let n=gt("adb",["devices"],{encoding:"utf-8",env:process.env});if(n.status!==0||n.error)return L.appendFileSync(t,`[WARN] Could not list Android devices before install; using adb default target.
+`}`)},g=async(h,y)=>{try{await Wt.post(`${r}/internal/tests/${encodeURIComponent(n)}/runner`,{projectId:t,runnerToken:i,status:h,error:y,logPreview:Yd(a),device:f,junitUrl:l?.urls?.junitDownloadUrl,logsUrl:l?.urls?.logsDownloadUrl,artifactsUrl:l?.urls?.artifactsDownloadUrl})}catch(b){p(`[WARN] Could not post runner update: ${b.message||b}`)}};try{p(`Mach Maestro local runner starting for ${n}`);let h=await Wt.post(`${r}/internal/tests/${encodeURIComponent(n)}/runner-payload`,{projectId:t,runnerToken:i});if(h.data?.status!=="success"||!h.data?.payload)throw new Error(h.data?.message||"Runner payload was not returned.");l=h.data.payload;let y=Object.keys(l.env||{});p(`Using Maestro env vars: ${y.length>0?y.join(", "):"none"}`);let b={...process.env,...l.env||{}},w=Xd(l.env);w.length>0&&p(`Passing Maestro env vars to test command: ${y.sort().join(", ")}`),await g("running");let L=l.platform==="android"?"app.apk":"app.zip",_=x.join(o,L),H=x.join(o,"source.zip"),W=x.join(o,"source");O.mkdirSync(W,{recursive:!0}),p("Downloading app artifact..."),await Xi(l.artifactUrl,_),p(`Downloaded app artifact: ${L} (${Ko(O.statSync(_).size)})`),p("Downloading Maestro source..."),await Xi(l.urls.sourceUrl,H),p(`Downloaded Maestro source: source.zip (${Ko(O.statSync(H).size)})`),new jn(H).extractAllTo(W,!0);let Z=Zd(W,l.flowPath||".maestro");if(!O.existsSync(Z))throw new Error(`Maestro flow path not found: ${l.flowPath||".maestro"}`);if(p(`Resolved Maestro flow path: ${x.relative(W,Z)||"."}`),l.platform==="ios"){let A=await rc(l.device||Yi("ios"),a);u=A.udid,f=A.name,await g("running");let D=oc(_,o),v=ss(D,a);p(`Resolved iOS app bundle: ${D}`),p(`Resolved iOS bundle id: ${v||"unknown"}`),ac(D,a,A.udid),Zi("xcrun",["simctl","install",A.udid,D],a),v&&(c={platform:l.platform,appId:v,deviceId:A.udid}),v&&qe("xcrun",["simctl","get_app_container",A.udid,v,"app"],a),Ki(s,a,"ios-before-maestro.png",A.udid),l.record&&(d=sc(s,a,A.udid))}else{let A=cc(_,a),D=dc(l.device,a);u=D||void 0,f=l.device||Yi("android");let v=D?["-s",D]:[];p(`Resolved Android application id: ${A||"unknown"}`),Zi("adb",[...v,"install","-r",_],a),A&&(c={platform:l.platform,appId:A,deviceId:D||void 0})}let oe=Math.max(0,Math.min(10,Number(l.retries??1)))+1,R=x.join(s,"report.xml"),T=nc(a);if(!T)throw new Error("Maestro CLI not found on this runner. Install Maestro or set MAESTRO_BIN to the full maestro path.");let E=1;for(let A=1;A<=oe;A+=1){p(`Running Maestro attempt ${A}/${oe}...`);let D=[...u?["--device",u]:[],"test","--platform",l.platform,...w,Z,"--format","junit","--output",R,"--test-output-dir",s];if(es&&A<oe?E=(await os(T,D,{logPath:a,env:b,fastFailOnFlowFailure:!0})).exitCode:E=qe(T,D,a,void 0,b),E===0)break}return l.platform==="ios"&&Ki(s,a,"ios-after-maestro.png",u),await Wo(d,a),d=null,await Yo(l.urls,o,s,a),E===0?(await g("passed"),C.success(k.green(`Managed Maestro run passed: ${n}`)),{status:"passed",exitCode:0,attempts:oe,flows:l.flowPath,platform:l.platform}):(await g("failed",`Maestro exited with code ${E}`),C.error(k.red(`Managed Maestro run failed with exit code ${E}`)),{status:"failed",exitCode:E,attempts:oe,flows:l.flowPath,platform:l.platform})}catch(h){let y=h.message||String(h);return p(`MACH_MAESTRO_RUN_FAILED: ${y}`),l?.platform==="ios"&&Ki(s,a,"ios-after-failure.png",u),await Wo(d,a),l?.urls&&await Yo(l.urls,o,s,a),await g("failed",y),C.error(k.red(`Managed Maestro runner failed: ${y}`)),{status:"failed",exitCode:1,attempts:0,flows:l?.flowPath||".maestro",platform:l?.platform||e.platform}}finally{lc(c,a)}}async function jd(e){let t=e.maestroFlows||".maestro",n=ns(e.maestroRetries);if(n===null)return null;let i=x.resolve(t);if(!O.existsSync(i))return C.error(k.red(`Maestro flows not found: ${t}`)),{status:"failed",exitCode:1,attempts:0,flows:t,platform:e.platform};let r=await Wd(e);if(r?.url){if(!await Jd(r))return{status:"failed",exitCode:1,attempts:0,flows:t,platform:r.platform||e.platform}}else if(e.buildId||e.buildUrl||e.artifactUrl||e.latest)return{status:"failed",exitCode:1,attempts:0,flows:t,platform:e.platform};e.maestroRecord&&C.warn(k.yellow("--maestro-record is managed-runner only and is ignored in --local mode."));let o=r?.platform||e.platform,s=["test"];o&&s.push("--platform",o),e.maestroDevice&&s.push("--device",String(e.maestroDevice));let a=Fd(e.maestroEnv),l=Object.keys(a);if(l.length>0){C.info(k.dim(`Passing Maestro env vars to local run: ${l.join(", ")}`));for(let[p,g]of Object.entries(a))s.push("-e",`${p}=${g}`)}s.push(t);let d=n+1,c=1;for(let p=1;p<=d;p+=1){if(C.info(k.dim(`Running local Maestro attempt ${p}/${d}...`)),es&&p<d){let g=await os("maestro",s,{cwd:process.cwd(),env:process.env,echoOutput:!0,fastFailOnFlowFailure:!0});if(g.error){let h=g.error.message||"Failed to run Maestro";C.error(k.red(`Local Maestro failed to start: ${h}`)),C.info(k.dim("Install Maestro locally, then retry: https://maestro.mobile.dev/getting-started/installing-maestro")),c=1;break}c=g.exitCode}else{let g=Ge("maestro",s,{cwd:process.cwd(),stdio:"inherit",env:process.env});if(g.error){let h=g.error.message||"Failed to run Maestro";C.error(k.red(`Local Maestro failed to start: ${h}`)),C.info(k.dim("Install Maestro locally, then retry: https://maestro.mobile.dev/getting-started/installing-maestro")),c=1;break}c=typeof g.status=="number"?g.status:1}if(c===0)break}let u=c===0?"passed":"failed",f={status:u,exitCode:c,attempts:d,flows:t,platform:o};return yc(e,f),u==="passed"?C.success(k.green("Local Maestro run passed")):C.error(k.red(`Local Maestro run failed with exit code ${c}`)),f}async function er(e){let t=ce(`./${m.configFileName}`),n=e.projectId||t?.projectId,i=String(e.profile||e.buildProfile||"production").toLowerCase();if(!n)return C.error(`No projectId found. Run \`${m.nameLower} link\` first or pass an internal project id.`),null;let r=e.platform;if(!r&&e.latest){let f=await Zo({message:"Select platform for the latest build:",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"}]});if(Ji(f))return null;r=f}let o=await Kd(e);if(!o)return null;if(o.kind==="latest"&&!r)return C.error("Pass --platform when using --latest."),null;if(o.kind==="artifact-url"&&!r)return C.error("Pass --platform when using --artifact-url."),null;let s=ns(e.maestroRetries);if(s===null)return null;let a=Qi(e.maestroEnv),l=Ud(e.maestroEnv);!e.quiet&&a.length>0&&C.info(k.dim(`Forwarding Maestro env vars by name: ${a.join(", ")}`));let d=await Gd(e,n);if(d===null)return null;let c=qt();e.quiet||c.start("Queuing Maestro run...");let u=e.maestroDevice||(r?Yi(r):void 0);try{let f=await $.post("/tests/maestro",{projectId:n,platform:r,profile:i,latest:o.kind==="latest",buildId:o.kind==="build-id"?o.value:e.buildId,buildUrl:o.kind==="build-url"?o.value:e.buildUrl,artifactUrl:o.kind==="artifact-url"?o.value:e.artifactUrl,flowSourceKey:d,flows:e.maestroFlows||".maestro",...u?{device:u}:{},retries:s,record:!!e.maestroRecord,...a.length>0?{envNames:a}:{},...l?{env:l}:{}});if(f.data.status!=="success")throw new Error(f.data.message||"Failed to queue Maestro run");let p=f.data.testRun,g={testRunId:p.testRunId,status:p.status,projectId:n,buildId:p.buildId,platform:p.platform,dashboardUrl:p.dashboardUrl||`${He}/tests/${p.testRunId}`,launchDeferredReason:p.launchDeferredReason};return ls(e,g),e.quiet||c.stop("Maestro run queued"),g}catch(f){e.quiet||c.stop("Could not queue Maestro run");let p=f.response?.data?.message||f.message||"Unknown error";return C.error(k.red(`Maestro queue failed: ${p}`)),null}}async function Hd(e,t){let n=zo(e.waitTimeout,60,"--wait-timeout"),i=zo(e.waitInterval,15,"--wait-interval");if(n===null||i===null)return null;let r=n*60*1e3,o=Math.max(5,i)*1e3,s=Date.now(),a=t.status||"queued";for(C.info(k.dim(`Waiting for Maestro run ${t.testRunId} to finish...`));Date.now()-s<=r;){let l=await zd(t.projectId,t.testRunId);if(!l)return null;if(l.status&&l.status!==a&&(a=l.status,C.info(k.dim(`Maestro status: ${a}`))),Ld.has(String(l.status)))return ls(e,l),l.status==="passed"?C.success(k.green(`Maestro run passed: ${l.testRunId}`)):(C.error(k.red(`Maestro run ${l.status}: ${l.testRunId}`)),l.error&&C.error(k.red(String(l.error)))),l;await tr(o)}return C.error(k.red(`Timed out waiting for Maestro run ${t.testRunId} after ${n} minute(s).`)),{...t,status:"timeout"}}async function Gd(e,t){if(e.maestroUseBuildSource)return;let n=e.maestroFlows||".maestro",i=x.resolve(n);if(!O.existsSync(i))return e.maestroFlows?(C.error(k.red(`Maestro flows not found: ${n}`)),null):void 0;let r=x.relative(process.cwd(),i);if(!r||r.startsWith("..")||x.isAbsolute(r))return C.error(k.red("Managed Maestro flow uploads must be inside the current project directory.")),null;let o=qt();e.quiet||o.start(`Uploading Maestro flows from ${r}...`);try{let s=await $.post("/tests/maestro/source-upload-url",{projectId:t,uploadId:Td()});if(s.data.status!=="success"||!s.data.uploadUrl||!s.data.key)throw new Error(s.data.message||"Failed to get Maestro flow upload URL");let a=new jn;if(O.statSync(i).isDirectory())a.addLocalFolder(i,r);else{let c=x.dirname(r);a.addLocalFile(i,c==="."?void 0:c,x.basename(r))}let d=a.toBuffer();return await Vd(s.data.uploadUrl,d,"application/zip","Maestro flow upload",c=>{e.quiet||o.message(c)}),e.quiet||o.stop("Maestro flows uploaded"),s.data.key}catch(s){e.quiet||o.stop("Could not upload Maestro flows");let a=s.response?.data?.message||s.message||"Unknown error";return C.error(k.red(`Maestro flow upload failed: ${a}`)),null}}function ts(e){let t=e.response?.status,n=e.code||"",i=e.message||"";return t&&![408,409,425,429].includes(t)&&t<500?!1:/ECONNRESET|ETIMEDOUT|EAI_AGAIN|ENOTFOUND|ECONNABORTED|socket hang up|network|timeout/i.test(`${n} ${i}`)||!t}async function Vd(e,t,n,i,r){let o;for(let s=1;s<=Vo;s+=1)try{await Wt.put(e,t,{headers:{"Content-Type":n},maxBodyLength:1/0,maxContentLength:1/0,timeout:Md});return}catch(a){if(o=a,!ts(a)||s>=Vo)break;let l=Math.min(2e4,2e3*s),d=a.code||a.response?.status||a.message||"network error";r?.(`${i} attempt ${s} failed (${d}), retrying...`),await tr(l)}throw o}async function zd(e,t){try{let n=await $.get(`/tests/${encodeURIComponent(t)}`,{params:{projectId:e}});if(n.data.status!=="success")throw new Error(n.data.message||"Failed to fetch Maestro run");let i=n.data.testRun;return{testRunId:i.testRunId,status:i.status,projectId:e,buildId:i.buildId,platform:i.platform,dashboardUrl:i.dashboardUrl||`${He}/tests/${i.testRunId}`,launchDeferredReason:i.launchDeferredReason,...i.error?{error:i.error}:{}}}catch(n){let i=n.response?.data?.message||n.message||"Unknown error";return C.error(k.red(`Could not fetch Maestro run status: ${i}`)),null}}async function Kd(e){if(e.buildId)return{kind:"build-id",value:e.buildId};if(e.buildUrl)return{kind:"build-url",value:e.buildUrl};if(e.artifactUrl)return{kind:"artifact-url",value:e.artifactUrl};if(e.latest)return{kind:"latest"};let t=await Zo({message:"Select app artifact source for Maestro:",options:[{value:"latest",label:"Latest successful build"},{value:"build-id",label:"Build ID"},{value:"build-url",label:`${m.name} build URL`},{value:"artifact-url",label:"Direct artifact URL"}]});if(Ji(t))return null;if(t==="latest")return{kind:"latest"};let n=await Nd({message:t==="build-id"?"Enter build ID:":t==="build-url"?`Enter ${m.name} build URL:`:"Enter artifact URL:",validate:i=>{let r=String(i||"").trim();if(!r)return"Value is required";if((t==="build-url"||t==="artifact-url")&&!r.startsWith("http"))return"Must be a URL"}});return Ji(n)?null:{kind:t,value:String(n).trim()}}function zo(e,t,n){if(e==null||e==="")return t;let i=Number(e);return!Number.isFinite(i)||i<=0?(C.error(`${n} must be a positive number.`),null):i}function tr(e){return new Promise(t=>setTimeout(t,e))}function ns(e){if(e==null||e==="")return 1;let t=Number(e);return!Number.isInteger(t)||t<0||t>10?(C.error("--maestro-retries must be an integer between 0 and 10."),null):t}async function Wd(e){if(e.artifactUrl)return{url:e.artifactUrl,platform:e.platform||ir(e.artifactUrl),name:as(e.artifactUrl)};let t=e.buildId||hc(e.buildUrl);return t?is(t,e.platform):e.latest?qd(e):null}async function is(e,t){let n=qt();n.start(`Resolving build ${e}...`);try{let i=await $.get(`/public/builds/${encodeURIComponent(e)}`);if(i.data.status!=="success")throw new Error(i.data.message||"Build lookup failed");let r=t||i.data.build?.platform,o=gc(i.data.artifacts||[],r);if(!o?.downloadUrl)throw new Error("No installable APK or simulator app artifact found for this build.");return n.stop("Build artifact resolved"),{url:o.downloadUrl,platform:r||ir(o.name||o.downloadUrl),name:o.name}}catch(i){n.stop("Could not resolve build artifact");let r=i.response?.data?.message||i.message||"Unknown error";return C.error(k.red(`Local Maestro artifact lookup failed: ${r}`)),null}}async function qd(e){let t=ce(`./${m.configFileName}`),n=e.projectId||t?.projectId,i=String(e.profile||e.buildProfile||"production").toLowerCase();if(!n)return C.error(`No projectId found. Run \`${m.nameLower} link\` first or pass --build-id/--artifact-url.`),null;if(!e.platform)return C.error("Pass --platform when using --latest with --local."),null;let r=qt();r.start("Resolving latest build...");try{let o=await $.get(`/builds/${n}`,{params:{limit:100}}),a=(Array.isArray(o.data.builds)?o.data.builds:[]).find(l=>l.status==="success"&&l.platform===e.platform&&String(l.buildProfile||l.buildType||"production").toLowerCase()===i);if(!a?.buildId)throw new Error(`No successful ${e.platform} build found for profile ${i}.`);return r.stop(`Latest build resolved: ${a.buildId}`),is(a.buildId,e.platform)}catch(o){r.stop("Could not resolve latest build");let s=o.response?.data?.message||o.message||"Unknown error";return C.error(k.red(`Latest build lookup failed: ${s}`)),null}}async function Jd(e){let t=e.platform||ir(e.url);if(!t)return C.error(k.red("Could not infer platform for local install. Pass --platform android or --platform ios.")),!1;let n=O.mkdtempSync(x.join($t.tmpdir(),"mach-maestro-")),i=e.name||as(e.url)||(t==="android"?"app.apk":"app.zip"),r=x.join(n,i),o=qt();o.start(`Downloading ${i}...`);try{await Xi(e.url,r),o.stop("Artifact downloaded")}catch(s){return o.stop("Artifact download failed"),C.error(k.red(s.message||"Failed to download artifact")),!1}return t==="android"?fc(r):mc(r,n)}async function Xi(e,t){let n=await Wt.get(e,{responseType:"stream"});await kd(n.data,O.createWriteStream(t))}function Yd(e,t=12e3){try{return O.readFileSync(e,"utf-8").slice(-t)}catch{return""}}function Ko(e){if(!Number.isFinite(e)||e<0)return"unknown size";if(e<1024)return`${e} B`;let t=["KB","MB","GB"],n=e/1024,i=t[0];for(let r=1;n>=1024&&r<t.length;r+=1)n/=1024,i=t[r];return`${n.toFixed(n>=10?1:2)} ${i}`}function Xd(e){return Object.entries(e||{}).filter(([t,n])=>!!t&&n!==void 0).sort(([t],[n])=>t.localeCompare(n)).flatMap(([t,n])=>["-e",`${t}=${n}`])}function Zd(e,t){let n=x.resolve(e,t||".maestro"),i=x.relative(e,n);if(i.startsWith("..")||x.isAbsolute(i))throw new Error("Maestro flow path must stay inside the build source.");return n}function rs(e,t){let n=[e];for(let i=0;i<t.length;i+=1){let r=t[i],o=t[i-1];(o==="-e"||o==="--env")&&/^[A-Za-z_][A-Za-z0-9_]*=/.test(r)?n.push(`${r.slice(0,r.indexOf("="))}=<redacted>`):n.push(r)}return n.join(" ")}function Qd(e){return/\[Failed\]\s+/.test(e)}function ec(e){if(!e.killed){try{e.kill("SIGTERM")}catch{}setTimeout(()=>{try{e.kill("SIGKILL")}catch{}},5e3).unref()}}function os(e,t,n={}){let{cwd:i,env:r=process.env,logPath:o,echoOutput:s=!1,fastFailOnFlowFailure:a=!1}=n;return o&&O.appendFileSync(o,`
+$ ${rs(e,t)}
+`),new Promise(l=>{let d=!1,c=!1,u="",f=h=>{c||(c=!0,l(h))},p=Xo(e,t,{cwd:i,env:r,stdio:["ignore","pipe","pipe"]}),g=h=>{u+=h;let y=u.split(/\r?\n/);u=y.pop()||"";for(let b of y)if(a&&Qd(b)&&!d){d=!0;let w="Mach fast-fail: detected failed Maestro flow; stopping this attempt early to retry...";o&&O.appendFileSync(o,`
+${w}
+`),s&&process.stderr.write(`${w}
+`),ec(p)}};p.stdout?.on("data",h=>{let y=h.toString();o&&O.appendFileSync(o,y),s&&process.stdout.write(y),g(y)}),p.stderr?.on("data",h=>{let y=h.toString();o&&O.appendFileSync(o,y),s&&process.stderr.write(y),g(y)}),p.on("error",h=>{o&&O.appendFileSync(o,`${h.message}
+`),f({exitCode:1,fastFailed:d,error:h})}),p.on("close",(h,y)=>{d&&o&&O.appendFileSync(o,`Maestro attempt stopped after first failed flow${y?` (${y})`:""}.
+`),f({exitCode:typeof h=="number"?h:1,fastFailed:d})})})}function qe(e,t,n,i,r=process.env){O.appendFileSync(n,`
+$ ${rs(e,t)}
+`);let o=Ge(e,t,{cwd:i,encoding:"utf-8",env:r});return o.stdout&&O.appendFileSync(n,o.stdout),o.stderr&&O.appendFileSync(n,o.stderr),o.error?(O.appendFileSync(n,`${o.error.message}
+`),1):typeof o.status=="number"?o.status:1}function Zi(e,t,n,i){let r=qe(e,t,n,i);if(r!==0)throw new Error(`${e} ${t.join(" ")} failed with exit code ${r}`)}function tc(e){try{return O.accessSync(e,O.constants.X_OK),!0}catch{return!1}}function nc(e){let t=[process.env.MAESTRO_BIN,x.join($t.homedir(),".maestro","bin","maestro"),"/opt/homebrew/bin/maestro","/usr/local/bin/maestro"].filter(Boolean),n=Ge("/usr/bin/env",["which","maestro"],{encoding:"utf-8",env:process.env}),i=n.status===0?String(n.stdout||"").split(`
+`)[0]?.trim():"";i&&t.unshift(i);for(let r of t)if(r&&tc(r))return e&&O.appendFileSync(e,`Using Maestro CLI at ${r}
+`),r;return e&&O.appendFileSync(e,`Maestro CLI not found. Checked: ${t.join(", ")}
+`),null}function ic(e){let t=String(e||"").trim();return t?t.replace(/_/g," ").replace(/\bios\b/gi,"").replace(/\biphone\b/i,"iPhone").replace(/\bpro\b/gi,"Pro").replace(/\bmax\b/gi,"Max").replace(/\s+/g," ").trim():"iPhone 17 Pro"}async function rc(e,t){let n=ic(e),i=Ge("xcrun",["simctl","list","devices","--json"],{encoding:"utf-8"});if(i.status!==0||!i.stdout)throw new Error("Could not list iOS simulators.");let r=JSON.parse(i.stdout),o=Object.values(r.devices||{}).flatMap(l=>Array.isArray(l)?l:[]).filter(l=>l?.isAvailable),s=n.toLowerCase(),a=o.find(l=>l.udid===e)||o.find(l=>l.name===n)||o.find(l=>String(l.name||"").toLowerCase().includes(s));if(!a?.udid)throw new Error(`No available iOS Simulator found for ${n}.`);return a.state==="Booted"?O.appendFileSync(t,`Using already booted iOS Simulator ${a.name} (${a.udid}).
+`):(O.appendFileSync(t,`Booting iOS Simulator ${a.name} (${a.udid})...
+`),qe("xcrun",["simctl","boot",a.udid],t)!==0&&O.appendFileSync(t,`simctl boot returned non-zero; continuing to bootstatus in case it was already booting.
+`),Zi("xcrun",["simctl","bootstatus",a.udid,"-b"],t)),{name:String(a.name||n),udid:a.udid}}function oc(e,t){if(e.endsWith(".ipa"))throw new Error("iOS Maestro runs need a simulator .app.zip artifact, not an App Store .ipa.");if(e.endsWith(".zip")){let n=x.join(t,"ios-app");O.mkdirSync(n,{recursive:!0}),new jn(e).extractAllTo(n,!0);let i=nr(n);if(!i)throw new Error("Could not find a .app bundle inside the iOS artifact zip.");return i}if(e.endsWith(".app"))return e;throw new Error("iOS Maestro runs need a .app bundle or .app.zip artifact.")}function ss(e,t){let n=x.join(e,"Info.plist");if(!O.existsSync(n))return O.appendFileSync(t,`Could not find Info.plist in ${e}; skipping uninstall.
+`),null;let i=Ge("/usr/bin/plutil",["-extract","CFBundleIdentifier","raw","-o","-",n],{encoding:"utf-8",env:process.env}),r=String(i.stdout||"").trim();return i.status!==0||!r?(O.appendFileSync(t,`Could not read CFBundleIdentifier from Info.plist; skipping uninstall.
+`),null):r}function Ki(e,t,n,i){let r=x.join(e,n);qe("xcrun",["simctl","io",i||"booted","screenshot",r],t)!==0&&O.appendFileSync(t,`[WARN] Could not capture iOS simulator screenshot: ${n}
+`)}function sc(e,t,n){let i=x.join(e,"ios-simulator-recording.mp4");O.appendFileSync(t,`Starting iOS simulator recording: ${i}
+`);let r=Xo("xcrun",["simctl","io",n||"booted","recordVideo",i],{stdio:["ignore","pipe","pipe"],env:process.env});return r.stdout?.on("data",o=>{O.appendFileSync(t,o)}),r.stderr?.on("data",o=>{O.appendFileSync(t,o)}),r.on("error",o=>{O.appendFileSync(t,`[WARN] Could not start iOS simulator recording: ${o.message}
+`)}),r}async function Wo(e,t){e&&await new Promise(n=>{let i=!1,r=()=>{i||(i=!0,n())};e.once("exit",r),e.once("close",r),e.killed||(O.appendFileSync(t,`Stopping iOS simulator recording...
+`),e.kill("SIGINT")),setTimeout(()=>{!i&&!e.killed&&(O.appendFileSync(t,`[WARN] iOS simulator recording did not stop after SIGINT; sending SIGKILL.
+`),e.kill("SIGKILL")),r()},5e3).unref?.()})}function ac(e,t,n){let i=ss(e,t);if(!i)return;O.appendFileSync(t,`Uninstalling existing iOS app data for ${i} if present...
+`),qe("xcrun",["simctl","uninstall",n||"booted",i],t)!==0&&O.appendFileSync(t,`No existing app install removed for ${i}; continuing.
+`)}function lc(e,t){if(!e?.appId)return;if(O.appendFileSync(t,`Cleaning up installed app after Maestro run...
+`),e.platform==="ios"){let r=qe("xcrun",["simctl","uninstall",e.deviceId||"booted",e.appId],t);r===0?O.appendFileSync(t,`Uninstalled iOS app ${e.appId} after Maestro run.
+`):O.appendFileSync(t,`Warning: failed to uninstall iOS app ${e.appId} after Maestro run: xcrun simctl uninstall exited with code ${r}
+`);return}let n=e.deviceId?["-s",e.deviceId]:[],i=qe("adb",[...n,"uninstall",e.appId],t);i===0?O.appendFileSync(t,`Uninstalled Android app ${e.appId} after Maestro run.
+`):O.appendFileSync(t,`Warning: failed to uninstall Android app ${e.appId} after Maestro run: adb uninstall exited with code ${i}
+`)}function dc(e,t){let n=Ge("adb",["devices"],{encoding:"utf-8",env:process.env});if(n.status!==0||n.error)return O.appendFileSync(t,`[WARN] Could not list Android devices before install; using adb default target.
 `),null;let i=String(n.stdout||"").split(`
-`).map(r=>r.trim().split(/\s+/)).filter(r=>r.length>=2&&r[1]==="device").map(r=>r[0]).filter(Boolean);return e&&i.includes(e)?(L.appendFileSync(t,`Using Android device ${e} for install and cleanup.
-`),e):i.length===1?(L.appendFileSync(t,`Using Android device ${i[0]} for install and cleanup.
-`),i[0]):(i.length>1&&L.appendFileSync(t,`[WARN] Multiple Android devices are connected; using adb default target for install and cleanup.
-`),null)}function Ap(e,t){let i=(Ur("aapt",["dump","badging",e])||Ur("aapt2",["dump","badging",e]))?.match(/package:\s+name='([^']+)'/);if(i?.[1])return i[1];let o=Ur("apkanalyzer",["manifest","application-id",e])?.split(/\s+/).find(Boolean);return o||(L.appendFileSync(t,`[WARN] Could not determine Android application id from APK; post-run uninstall will be skipped.
-`),null)}function Ur(e,t){for(let n of Ep(e)){let i=gt(n,t,{encoding:"utf-8",env:process.env,maxBuffer:10485760});if(i.status===0&&i.stdout)return String(i.stdout).trim()}return null}function Ep(e){let t=process.platform==="win32"&&!e.endsWith(".exe")?`${e}.exe`:e,n=[];if(e==="aapt"||e==="aapt2")for(let r of Qs()){let o=V.join(r,"build-tools");for(let s of ea(o))n.push(V.join(o,s,t))}if(e==="apkanalyzer")for(let r of Qs()){n.push(V.join(r,"cmdline-tools","latest","bin",t));let o=V.join(r,"cmdline-tools");for(let s of ea(o))n.push(V.join(o,s,"bin",t));n.push(V.join(r,"tools","bin",t))}let i=wp(e);return i&&n.unshift(i),n.push(t),[...new Set(n)]}function Qs(){let e=[process.env.ANDROID_HOME,process.env.ANDROID_SDK_ROOT];return process.platform==="darwin"?e.push(V.join(fn.homedir(),"Library","Android","sdk")):process.platform==="linux"&&e.push(V.join(fn.homedir(),"Android","Sdk"),V.join(fn.homedir(),"Android","sdk"),"/opt/android-sdk","/usr/lib/android-sdk"),[...new Set(e.filter(t=>!!t))]}function ea(e){try{return L.readdirSync(e,{withFileTypes:!0}).filter(t=>t.isDirectory()).map(t=>t.name).sort((t,n)=>n.localeCompare(t,void 0,{numeric:!0}))}catch{return[]}}function wp(e){let t=process.platform==="win32"?"where":"/usr/bin/env",n=process.platform==="win32"?[e]:["which",e],i=gt(t,n,{encoding:"utf-8",env:process.env});return i.status!==0||!i.stdout?null:String(i.stdout).split(`
-`)[0]?.trim()||null}async function Fr(e,t,n){if(!L.existsSync(e))return;let i=L.readFileSync(e),r;for(let o=1;o<=3;o+=1)try{await Mn.put(t,i,{headers:{"Content-Type":n,"Content-Length":String(i.length)},maxBodyLength:1/0,maxContentLength:1/0,timeout:12e4});return}catch(s){if(r=s,!sa(s)||o>=3)break;await zr(2e3*o)}throw r}async function ta(e,t,n,i){let r=V.join(n,"report.xml"),o=V.join(t,"artifacts.tar.gz");try{await Fr(r,e.junitUploadUrl,"application/xml")}catch(s){L.appendFileSync(i,`[WARN] Failed to upload JUnit report: ${s.message||s}
-`)}try{await Fr(i,e.logUploadUrl,"text/plain")}catch(s){L.appendFileSync(i,`[WARN] Failed to upload runner log: ${s.message||s}
-`)}try{$t("tar",["-czf",o,"-C",t,V.basename(n)],i),await Fr(o,e.artifactsUploadUrl,"application/gzip")}catch(s){L.appendFileSync(i,`[WARN] Failed to upload Maestro artifacts: ${s.message||s}
-`)}}function Ip(e){if(!e.endsWith(".apk"))return j.error(B.red("Local Android Maestro runs need an APK artifact.")),!1;j.info(B.dim("Installing APK on local Android device/emulator..."));let t=gt("adb",["install","-r",e],{stdio:"inherit",env:process.env});return t.error?(j.error(B.red(`adb failed to start: ${t.error.message}`)),!1):t.status!==0?(j.error(B.red(`adb install failed with exit code ${t.status??1}`)),!1):!0}function vp(e,t){if(e.endsWith(".ipa"))return j.error(B.red("Local iOS Maestro runs need an iOS Simulator .app.zip artifact, not an App Store .ipa.")),!1;let n=e;if(e.endsWith(".zip")){let r=V.join(t,"ios-app");L.mkdirSync(r,{recursive:!0}),new $i(e).extractAllTo(r,!0);let o=Wr(r);if(!o)return j.error(B.red("Could not find a .app bundle inside the downloaded zip.")),!1;n=o}if(!n.endsWith(".app"))return j.error(B.red("Local iOS Maestro runs need an iOS Simulator .app bundle or .app.zip artifact.")),!1;j.info(B.dim("Installing app on booted iOS Simulator..."));let i=gt("xcrun",["simctl","install","booted",n],{stdio:"inherit",env:process.env});return i.error?(j.error(B.red(`xcrun failed to start: ${i.error.message}`)),!1):i.status!==0?(j.error(B.red(`iOS Simulator install failed with exit code ${i.status??1}`)),!1):!0}function Wr(e){let t=L.readdirSync(e,{withFileTypes:!0});for(let n of t){let i=V.join(e,n.name);if(n.isDirectory()&&n.name.endsWith(".app"))return i;if(n.isDirectory()){let r=Wr(i);if(r)return r}}return null}function $p(e,t){let n=String(t||"").toLowerCase();return n==="android"?e.find(i=>pn(i,".apk")):n==="ios"?e.find(i=>pn(i,".app.zip"))||e.find(i=>pn(i,".zip")):e.find(i=>pn(i,".apk"))||e.find(i=>pn(i,".app.zip"))||e.find(i=>pn(i,".zip"))}function pn(e,t){return String(e?.name||e?.downloadUrl||e?.url||"").toLowerCase().endsWith(t)}function Jr(e){let t=String(e||"").toLowerCase();if(t.includes(".apk"))return"android";if(t.includes(".app.zip")||t.endsWith(".app")||t.includes(".ipa"))return"ios"}function pa(e){if(e)try{return V.basename(new URL(e).pathname)||void 0}catch{return V.basename(e)||void 0}}function _p(e){return e?e.match(/[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/i)?.[0]:void 0}function fa(e,t){if(!e.jsonOutput)return;let n=V.resolve(e.jsonOutput),i={...t,updatedAt:new Date().toISOString()};try{let r=V.dirname(n);r&&r!=="."&&L.mkdirSync(r,{recursive:!0}),L.writeFileSync(n,JSON.stringify(i,null,2))}catch(r){j.warn(B.yellow(`Could not write Maestro metadata JSON: ${r.message}`))}}function Pp(e,t){if(!e.jsonOutput)return;let n=V.resolve(e.jsonOutput),i={mode:"local",...t,updatedAt:new Date().toISOString()};try{let r=V.dirname(n);r&&r!=="."&&L.mkdirSync(r,{recursive:!0}),L.writeFileSync(n,JSON.stringify(i,null,2))}catch(r){j.warn(B.yellow(`Could not write Maestro metadata JSON: ${r.message}`))}}import{spinner as Lt,text as Bn,select as eo,isCancel as Nt,cancel as to,log as Ia}from"@clack/prompts";import ie from"chalk";import ae from"fs";import xe from"path";import{spawn as kp,spawnSync as Zt}from"child_process";import va from"axios";import en from"os";import ro from"crypto";import Rp from"crypto";import mn from"axios";import ma from"fs";var jn=6e4,Op=12e4,qr=4,Fn=e=>encodeURIComponent(e),Cp=e=>new Promise(t=>setTimeout(t,e));async function gn(e,t){let n;for(let i=1;i<=qr;i++)try{return await t()}catch(r){if(n=r,i>=qr||!Dp(r))throw r;let o=Number(r.response?.headers?.["retry-after"]),s=Number.isFinite(o)&&o>0?o*1e3:Math.min(2e3*i*i,15e3);console.log(`[Google Play] ${e} failed (attempt ${i}/${qr}); retrying in ${Math.round(s/1e3)}s...`),await Cp(s)}throw n}function Dp(e){let t=e.response?.status;return t?t===408||t===409||t===425||t===429||t>=500:!0}async function ha(e){let{packageName:t,serviceAccount:n,aabPath:i,track:r,releaseStatus:o,userFraction:s,changesNotSentForReview:l}=e,a;try{let u={Authorization:`Bearer ${await ga(n)}`,Connection:"close"},d=Fn(t);if(a=(await gn("create edit",()=>mn.post(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${d}/edits`,{},{headers:u,timeout:jn}))).data.id,!a)throw new Error("Google Play edit insert succeeded but did not return an edit id.");let f=Fn(a),g=ma.statSync(i),h=await gn("upload AAB",()=>mn.post(`https://androidpublisher.googleapis.com/upload/androidpublisher/v3/applications/${d}/edits/${f}/bundles`,ma.createReadStream(i),{headers:{...u,"Content-Type":"application/octet-stream","Content-Length":g.size},maxBodyLength:1/0,maxContentLength:1/0,params:{uploadType:"media"},timeout:Op})),S=Number(h.data.versionCode);if(!S)throw new Error("Google Play upload succeeded but did not return a versionCode.");let b={versionCodes:[String(S)],status:o};return(o==="inProgress"||o==="halted")&&typeof s=="number"&&(b.userFraction=s),await gn("update track",()=>mn.put(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${d}/edits/${f}/tracks/${Fn(r)}`,{releases:[b]},{headers:u,timeout:jn})),await gn("commit edit",()=>mn.post(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${d}/edits/${f}:commit`,{},{headers:u,params:l?{changesNotSentForReview:!0}:void 0,timeout:jn})),{editId:a,versionCode:S,track:r,releaseStatus:o,userFraction:s}}catch(c){if(a)try{let d=await ga(n);await gn("delete edit",()=>mn.delete(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${Fn(t)}/edits/${Fn(a)}`,{headers:{Authorization:`Bearer ${d}`,Connection:"close"},timeout:jn}))}catch{}let u=c.response?.data?.error?.message||c.message;throw new Error(`Google Play API Error: ${u}`)}}async function ga(e){let t=Math.floor(Date.now()/1e3),n=t+3600,i={alg:"RS256",typ:"JWT"},r={iss:e.client_email,sub:e.client_email,aud:"https://oauth2.googleapis.com/token",iat:t,exp:n,scope:"https://www.googleapis.com/auth/androidpublisher"},o=Buffer.from(JSON.stringify(i)).toString("base64url"),s=Buffer.from(JSON.stringify(r)).toString("base64url"),l=`${o}.${s}`,a=Rp.createSign("RSA-SHA256");a.update(l);let c=a.sign(e.private_key,"base64url"),u=`${l}.${c}`;return(await gn("OAuth token exchange",()=>mn.post("https://oauth2.googleapis.com/token",{grant_type:"urn:ietf:params:oauth:grant-type:jwt-bearer",assertion:u},{headers:{Connection:"close"},timeout:jn}))).data.access_token}var xp=5e3,Np=12,$a=100,Yr=24,ya=8e3,Tp={completed:"completed",draft:"draft",halted:"halted",inprogress:"inProgress","in-progress":"inProgress"},Lp=e=>e?.type==="google_service_account",Pi=e=>e?.bundleId||e?.packageName||e?.meta?.packageName||e?.meta?.bundleId,_a=e=>e.submitArgs||process.argv.slice(3).join(" ");async function Ri(e){let t=Lt(),n=Ue(),i=Mp(e);if(!i){process.exitCode=1;return}let r=e.projectId||i.projectId,o=e.profile||e.buildProfile||"production";if(!r){me(`${m.configFileName} is missing projectId. Pass --project-id in runner mode.`),process.exitCode=1;return}i.projectId=r,$e(ie.dim(`Submit for project: ${i.name||r} | Profile: ${o}`));let s=e.platform;if(!s){let E=await eo({message:"Select platform to submit:",options:[{value:"ios",label:"iOS (App Store Connect / TestFlight)"},{value:"android",label:"Android (Google Play Console)"}]});if(Nt(E)){to("Operation cancelled");return}s=E}if(s=String(s).toLowerCase(),s!=="ios"&&s!=="android"){me(`Platform ${s} is not supported. Use 'ios' or 'android'.`),process.exitCode=1;return}let l=s==="ios"&&!e.local&&e.sshHost?Qp(i,o,e):null;if(s==="ios"&&!e.local&&!l){await Up(i,o,e);return}let a=e.submitId,c=!!(e.local&&a),u=a||null,d=async(E,A={})=>{u&&await Hp(r,u,{status:E,...A})},p=s==="android"?e.packageName||e.androidPackage||Yp(i,o):void 0,f=s==="ios"?e.bundleId||e.iosBundleIdentifier||Zp(i,o):void 0,g,h,S,b=!1;try{s==="android"&&(g=e.track||i.submit?.[o]?.android?.track||i.submit?.production?.android?.track||"internal",h=ef(i,o,e.releaseStatus),S=nf(i,o,e.rollout),b=rf(i,o,e.changesNotSentForReview),of(h,S))}catch(E){me(E.message),process.exitCode=1;return}if(s==="android"&&!c&&(u=await Fp(i,r,s,o,e,{packageName:p,track:g,releaseStatus:h,rollout:S,changesNotSentForReview:b}),!u)){me("Could not create submission tracking record. Submission was not started."),process.exitCode=1;return}await d("running",{platform:s,profile:o,packageName:p,track:g,releaseStatus:h,rollout:S,startTime:Date.now(),...c?Vp():{}});let y=null,P=null;try{P=await sf(r,s,e,n?.token),y=P?.filePath||null}catch(E){await d("failed",{error:`Failed to resolve submission artifact: ${E.message}`,endTime:Date.now()}),me(`Failed to resolve submission artifact: ${E.message}`),process.exitCode=1;return}if(!y){let E=lf(s,e);await d("failed",{error:E,endTime:Date.now()}),me(E),process.exitCode=1;return}await d("running",{buildId:P?.buildId,artifactName:P?.artifactName,artifactSource:P?.source}),$e(`Using artifact: ${ie.green(xe.basename(y))} `),t.start("Fetching submission credentials from Dashboard...");let v;try{let A=(await O.get(`/credentials/${r}`)).data.credentials||[];if(s==="android"&&!p){t.stop("Package name missing"),me("Could not resolve Android package name. Set android.package in mach.config.json/app.json."),await d("failed",{error:"Could not resolve Android package name.",endTime:Date.now()}),process.exitCode=1;return}let N=A.filter(Lp),U=s==="ios"?A.filter(K=>K.type==="asc_api_key"):Xp(N,p);if(U.length===0){if(t.stop("Credentials missing"),me(s==="android"?`No Google Play service credential found for package ${p}.`:`No Service Credentials found for ${s}.`),s==="android"){let K=N.map(Pi).filter(Boolean).join(", ");K&&$e(`Found Google Play service credential(s) for: ${K}`),$e(`Use '${m.nameLower} credentials:service --platform android --package-name ${p}' or upload it under that package in the Dashboard.`)}else $e(`Use '${m.nameLower} credentials:service --platform ${s}' or use the Dashboard to upload them.`);await d("failed",{error:`No submission credentials found for ${s}.`,endTime:Date.now()}),process.exitCode=1;return}if(v=zp(U,e.credentialId),!v&&s==="ios"&&f&&(v=Wp(U,f)),v||U.length===1)v=v||U[0],t.stop(`Using: ${v.name}`),s==="android"&&Pi(v)==="*"&&$e(ie.yellow(`Using legacy wildcard Google Play credential for ${p}. Upload a package-scoped credential when possible.`));else{if(t.stop("Multiple credentials found"),Jp()){let z=U.map(Q=>`${Q.name||"credential"} (${Q.credentialId||Q.id||"no-id"})`).join(", ");me(`Multiple ${s==="ios"?"App Store Connect":"Google Play"} credentials found. Use --credential-id in CI. Available: ${z}`),await d("failed",{error:"Multiple submission credentials found; --credential-id is required in CI.",endTime:Date.now()}),process.exitCode=1;return}let K=await eo({message:`Choose a ${s==="ios"?"App Store Connect":"Google Play"} credential:`,options:U.map(z=>({value:z.credentialId,label:z.name,hint:`${z.keyId?`ID: ${z.keyId}`:""} ${z.issuerId?`(Issuer: ${z.issuerId.substring(0,8)}...)`:""}`}))});if(Nt(K)){to("Submission cancelled"),await d("failed",{error:"Submission cancelled while selecting credential.",endTime:Date.now()}),process.exitCode=1;return}v=U.find(z=>z.credentialId===K),$e(`Using selected: ${ie.green(v.name)}`)}}catch(E){t.stop("Failed to fetch credentials"),me(`API Error: ${E.message} `),await d("failed",{error:`Failed to fetch credentials: ${E.message}`,endTime:Date.now()}),process.exitCode=1;return}let F=ae.mkdtempSync(xe.join(en.tmpdir(),`${m.nameLower}-submit-`)),H=v.keyId||v.meta?.keyId,q=v.issuerId||v.meta?.issuerId,I=v.type==="asc_api_key"?`AuthKey_${H}.p8`:"service-account.json",_=xe.join(F,I);t.start("Downloading secure key...");try{let E=await O.get(`/credentials/${v.credentialId}/download`,{params:{projectId:r,format:"raw"}});if(E.data.status!=="success"||!E.data.downloadUrl)throw new Error("Failed to get secure download URL");let A=await va.get(E.data.downloadUrl,{responseType:"arraybuffer"});ae.writeFileSync(_,Buffer.from(A.data)),t.stop("Key downloaded to secure temp storage")}catch(E){t.stop("Download failed"),me(`Failed to download key: ${E.message}`);try{ae.rmSync(F,{recursive:!0,force:!0})}catch{}await d("failed",{error:`Failed to download credential key: ${E.message}`,endTime:Date.now()}),process.exitCode=1;return}$e(ie.blue(`Initiating ${s==="ios"?"TestFlight":"Google Play"} submission...`));let M=!1,x;try{if(s==="ios"){if(!H){let A=await Bn({message:"Enter App Store Connect Key ID (e.g. 2X948D...):",validate:N=>N.length>0?void 0:"Key ID is required"});if(Nt(A)){await d("failed",{error:"Submission cancelled while entering ASC Key ID.",endTime:Date.now()}),process.exitCode=1;return}H=A}if(!q||q==="undefined"){let A=await Bn({message:"Enter App Store Connect Issuer ID (Found on ASC Keys page):",validate:N=>N.length>0?void 0:"Issuer ID is required"});if(Nt(A)){await d("failed",{error:"Submission cancelled while entering ASC Issuer ID.",endTime:Date.now()}),process.exitCode=1;return}q=A}$e(`Using ASC Key ID: ${H}`),$e(`Using ASC Issuer ID: ${q}`);let E=l?await df(y,_,q,H,f,l):await cf(y,_,q,H,f);io(`${s==="ios"?"App Store":"Google Play"} submission successful!`),M=!0}else x=await gf(y,_,g||"internal",p,h||"completed",S,b,o),io("Google Play submission successful!"),M=!0}catch(E){me(`Submission failed: ${E.message}`),await d("failed",{error:E.message,endTime:Date.now()}),Tt(e,{status:"failed",projectId:r,submitId:u,platform:s,profile:o,buildId:P?.buildId||e.buildId,artifactName:P?.artifactName,error:E.message,dashboardUrl:u?Qt(u,r):void 0}),process.exitCode=1}finally{M&&(await d("success",{endTime:Date.now(),versionCode:x?.versionCode,track:g,releaseStatus:h}),Tt(e,{status:"success",projectId:r,submitId:u,platform:s,profile:o,buildId:P?.buildId||e.buildId,artifactName:P?.artifactName,versionCode:x?.versionCode,track:g,releaseStatus:h,dashboardUrl:u?Qt(u,r):void 0})),Cf(F),y&&y.includes(`${m.nameLower}-artifact-`)}}function Mp(e){let t=`./${m.configFileName}`;if(ae.existsSync(t))try{return JSON.parse(ae.readFileSync(t,"utf-8"))}catch(n){return me(`Failed to read ${m.configFileName}: ${n.message}`),null}return e.projectId?{projectId:e.projectId}:(me(`No ${m.configFileName} found. Run \`${m.nameLower} init\` or \`${m.nameLower} link\` first.`),null)}async function Up(e,t,n){let i=n.projectId||e.projectId;if(!i){me(`${m.configFileName} is missing projectId.`),process.exitCode=1;return}let r=n.submitId||ro.randomUUID(),o=!!n.latest||!n.buildId,s=jp({...n,latest:o,profile:t,projectId:i,submitId:r}),l={projectId:i,submitId:r,platform:"ios",profile:t,latest:o,buildId:n.buildId,credentialId:n.credentialId,status:"pending",source:"cli",submitArgs:_a(n),runnerArgs:s,runnerCommand:[m.nameLower,"submit",...s].map(qp).join(" "),appName:e.name,startTime:Date.now()},a=Lt();a.start("Queuing iOS submit on macOS runner...");try{let c=await O.post("/submissions",l),u=c.data?.submission||c.data?.submit||{},d=c.data?.dashboardUrl||Qt(r,i);a.stop("iOS submit queued"),$e(`Submission ID: ${ie.cyan(r)}`),$e(`Dashboard: ${ie.blue.underline(d)}`),Tt(n,{status:"pending",projectId:i,submitId:r,platform:"ios",profile:t,latest:o,buildId:n.buildId,dashboardUrl:d}),await Bp(i,r,n)}catch(c){a.stop("Could not queue iOS submit"),me(Kp(c)),process.exitCode=1}}async function Fp(e,t,n,i,r,o={}){let s=r.submitId||ro.randomUUID(),l=!!r.latest||!r.buildId,a={projectId:t,submitId:s,platform:n,profile:i,latest:l,buildId:r.buildId,credentialId:r.credentialId,status:"running",source:"cli-direct",submitArgs:_a(r),appName:e.name,startTime:Date.now(),...o};try{let c=await O.post("/submissions",a),u=c.data?.submission||c.data?.submit||{},d=c.data?.dashboardUrl||u.dashboardUrl||Qt(s,t);return $e(`Submission ID: ${ie.cyan(s)}`),$e(`Dashboard: ${ie.blue.underline(d)}`),Tt(r,{status:"running",projectId:t,submitId:s,platform:n,profile:i,latest:l,buildId:r.buildId,dashboardUrl:d}),s}catch(c){let u=c.response?.data?.message||c.response?.data?.error||c.message;return $e(ie.yellow(`Could not create submission tracking record: ${u}`)),null}}function jp(e){let t=["--local","--submit-id",e.submitId,"--project-id",e.projectId,"--platform","ios","--profile",e.profile||"production"];return e.buildId?t.push("--build-id",e.buildId):t.push("--latest"),e.credentialId&&t.push("--credential-id",e.credentialId),e.bundleId&&t.push("--bundle-id",e.bundleId),e.packageName&&t.push("--package-name",e.packageName),e.quiet&&t.push("--quiet"),e.jsonOutput&&t.push("--json-output",e.jsonOutput),t.filter(n=>n!=null&&n!=="")}async function Bp(e,t,n){let i=Lt(),r=0,o=0;for(n.quiet||i.start("Waiting for iOS submit runner...");;)try{let s=await O.get(`/submissions/${e}/${t}`),l=s.data?.submission||s.data?.submit||s.data,a=String(l?.status||"pending").toLowerCase();r=0;let c=Array.isArray(l?.logs)?l.logs:[];for(let u=o;u<c.length;u++){let d=c[u];d&&console.log(ie.dim(String(d)))}if(o=c.length,["success","completed","succeeded"].includes(a)){n.quiet||i.stop("iOS submit completed"),io("App Store submission successful!"),Tt(n,{status:"success",projectId:e,submitId:t,platform:"ios",profile:l?.profile||n.profile||"production",buildId:l?.buildId||n.buildId,artifactName:l?.artifactName,dashboardUrl:l?.dashboardUrl||Qt(t,e)});return}if(["failed","error","cancelled","canceled"].includes(a)){n.quiet||i.stop("iOS submit failed");let u=l?.error||l?.message||"Unknown iOS submit failure.";me(u),Tt(n,{status:"failed",projectId:e,submitId:t,platform:"ios",profile:l?.profile||n.profile||"production",buildId:l?.buildId||n.buildId,artifactName:l?.artifactName,error:u,dashboardUrl:l?.dashboardUrl||Qt(t,e)}),process.exitCode=1;return}n.quiet||i.message(`iOS submit ${a}...`),await no(xp)}catch(s){if(r++,r>=Np){n.quiet||i.stop("Lost connection to iOS submit status"),me(`Could not fetch iOS submit status after ${r} attempts: ${s.message}`),process.exitCode=1;return}await no(Math.min(2e3*r,15e3))}}async function Hp(e,t,n){let i;for(let r=1;r<=3;r++)try{await O.patch(`/submissions/${e}/${t}`,n);return}catch(o){if(i=o,r>=3||!Gp(o))break;await no(1e3*r)}Ia.warn(ie.dim(`Could not report submission status: ${i?.message||i}`))}function Gp(e){let t=e.response?.status;return!t||t===408||t===409||t===425||t===429||t>=500}function Vp(){let e={gitlabJobId:process.env.CI_JOB_ID,gitlabJobUrl:process.env.CI_JOB_URL,gitlabPipelineId:process.env.CI_PIPELINE_ID,gitlabProjectId:process.env.CI_PROJECT_ID,gitlabProjectPath:process.env.CI_PROJECT_PATH};return Object.fromEntries(Object.entries(e).filter(([,t])=>!!t))}function Kp(e){let t=e.response?.status,n=e.response?.data?.message||e.response?.data?.error;return t===404||t===405?["Managed iOS submit is not enabled on this Mach API yet.","Deploy the API/dashboard submission orchestration endpoint, then retry the same command.","Expected API: POST /submissions and GET/PATCH /submissions/:projectId/:submitId."].join(`
-`):n||e.message||String(e)}function Qt(e,t){if(!e)return mt;let n=t?`?projectId=${encodeURIComponent(t)}`:"";return`${mt}/submissions/${e}${n}`}function Tt(e,t){if(!e.jsonOutput)return;let n=xe.resolve(e.jsonOutput),i={...t,url:t.url||t.dashboardUrl||Qt(t.submitId,t.projectId),updatedAt:new Date().toISOString()};try{let r=xe.dirname(n);r&&r!=="."&&ae.mkdirSync(r,{recursive:!0}),ae.writeFileSync(n,JSON.stringify(i,null,2))}catch(r){Ia.warn(ie.yellow(`Could not write submission metadata JSON: ${r.message}`))}}function zp(e,t){return t&&e.find(n=>n.credentialId===t||n.id===t||n.keyId===t||n.meta?.keyId===t)||null}function Wp(e,t){let n=e.filter(i=>[i.bundleId,i.bundleIdentifier,i.appIdentifier,i.meta?.bundleId,i.meta?.bundleIdentifier,i.meta?.appIdentifier].filter(Boolean).map(String).includes(t));return n.length===1?n[0]:null}function Jp(){return process.env.CI==="true"||process.env.CI==="1"||!process.stdin.isTTY}function no(e){return new Promise(t=>setTimeout(t,e))}function qp(e){return/^[a-zA-Z0-9_./:=@-]+$/.test(e)?e:`'${e.replace(/'/g,"'\\''")}'`}function Yp(e,t){if(e.submit?.[t]?.android?.package)return e.submit[t].android.package;let n=an(e,t);if(n)return n;let i=xe.join(process.cwd(),"app.json");if(ae.existsSync(i))try{return JSON.parse(ae.readFileSync(i,"utf-8")).expo?.android?.package}catch{}let r=xe.join(process.cwd(),"app.config.json");if(ae.existsSync(r))try{let o=JSON.parse(ae.readFileSync(r,"utf-8"));return o.expo?.android?.package||o.android?.package}catch{}}function Xp(e,t){let n=e.filter(o=>Pi(o)===t);if(n.length>0)return n;let i=e.filter(o=>{let s=Pi(o);return!s||s==="*"});return e.length>0&&e.length===i.length?i:[]}function Zp(e,t){return e.submit?.[t]?.ios?.bundleIdentifier?e.submit[t].ios.bundleIdentifier:e.submit?.[t]?.ios?.bundleId?e.submit[t].ios.bundleId:Wt(e,t)}function Qp(e,t,n){let i=e.submit?.[t]?.ios||{},r=e.submit?.production?.ios||{},o=n.sshHost||i.sshHost||r.sshHost||process.env.MACH_IOS_SUBMIT_SSH_HOST;return o?{sshHost:o,sshUser:n.sshUser||i.sshUser||r.sshUser||process.env.MACH_IOS_SUBMIT_SSH_USER||process.env.USER||"ubuntu",sshKey:n.sshKey||i.sshKey||r.sshKey||process.env.MACH_IOS_SUBMIT_SSH_KEY}:null}function ef(e,t,n){let i=n||e.submit?.[t]?.android?.releaseStatus||e.submit?.production?.android?.releaseStatus||"completed";return tf(i)}function tf(e){let t=Tp[String(e).trim().toLowerCase()];if(!t)throw new Error(`Invalid Android release status "${e}". Use completed, draft, halted, or inProgress.`);return t}function nf(e,t,n){let i=n??e.submit?.[t]?.android?.rollout??e.submit?.[t]?.android?.userFraction??e.submit?.[t]?.android?.rolloutFraction??e.submit?.production?.android?.rollout??e.submit?.production?.android?.userFraction??e.submit?.production?.android?.rolloutFraction;if(i==null||i==="")return;let r=Number(i);if(!Number.isFinite(r)||r<=0||r>=1)throw new Error(`Invalid Android rollout fraction "${i}". Use a number greater than 0 and less than 1, for example 0.1.`);return r}function rf(e,t,n){let i=n??e.submit?.[t]?.android?.changesNotSentForReview??e.submit?.[t]?.android?.changes_not_sent_for_review??e.submit?.production?.android?.changesNotSentForReview??e.submit?.production?.android?.changes_not_sent_for_review??!1;return i===!0||i==="true"||i==="1"}function of(e,t){if(e==="inProgress"&&t===void 0)throw new Error("Google Play staged rollout requires --rollout <fraction> when --release-status inProgress is used.");if(e!=="inProgress"&&e!=="halted"&&t!==void 0)throw new Error("Android rollout fraction can only be used with --release-status inProgress or halted.")}async function sf(e,t,n,i){let r=n.buildId?"id":n.latest?"latest":null;if(!r){let s=await eo({message:"Select artifact source:",options:[{value:"latest",label:`Latest Production Build (${m.name})`},{value:"id",label:`Input Build ID (${m.name})`},{value:"url",label:"Remote URL"},{value:"local",label:"Local File Path"}]});if(Nt(s))return to("Operation cancelled"),null;r=s}if(r==="local"){let s=await Bn({message:"Enter path to artifact (.ipa/.aab):",validate:l=>{if(!ae.existsSync(l))return"File not found";if(t==="ios"&&!l.endsWith(".ipa"))return"Must be an .ipa file";if(t==="android"&&!l.endsWith(".aab"))return"Must be an .aab file"}});return Nt(s)?null:{filePath:s,source:"local"}}let o=Lt();if(r==="latest"){let s=n.profile||n.buildProfile;o.start(`Fetching latest${s?` ${s}`:""} build...`);try{let l=await O.get(`/builds/${e}`,{params:{limit:50}});if(l.data.status!=="success")throw new Error(l.data.message);let a=l.data.builds||[],c=s?.toLowerCase(),u=v=>v.platform?.toLowerCase()===t.toLowerCase()&&v.status?.toLowerCase()==="success",d=v=>c?[v.buildProfile,v.profile,v.profileName,v.buildType].filter(Boolean).some(F=>String(F).toLowerCase()===c):!0,p=a.filter(v=>u(v)&&d(v)),f=p.find(v=>v.buildType?.toLowerCase()==="store"||v.distribution?.toLowerCase()==="store")||p[0],g=a.some(v=>v.platform?.toLowerCase()===t.toLowerCase()&&v.status?.toLowerCase()==="success");if(!f)return o.stop("No suitable build found"),me(s&&g?`No successful ${t} builds found for profile "${s}".`:"No successful builds found for this platform."),null;o.stop(`Found build: ${f.buildId}`);let h=f.artifacts||[];if(h.length===0||h.every(v=>!(v.url||v.downloadUrl)))try{let v=await O.get(`/builds/${e}/${f.buildId}/artifacts`);v.data.status==="success"&&v.data.artifacts?.length>0?(h=v.data.artifacts.map(F=>({...F,url:F.url||F.downloadUrl})),console.log(ie.cyan(`  [RECOVERY] Fetched ${h.length} artifact(s) with download URLs.`))):console.log(ie.yellow("  [RECOVERY] /artifacts endpoint returned 0 artifacts."))}catch(v){console.log(ie.red(`  [RECOVERY] /artifacts fetch failed: ${v.message}`))}let b=t==="ios",y=h.find(v=>{let F=(v.type||"").toLowerCase(),H=(v.name||"").toLowerCase();if(console.log(ie.dim(`    - Checking: ${v.name} (Type: ${v.type}, HasLink: ${!!(v.url||v.downloadUrl)})`)),F)return F===(b?"ipa":"aab");let q=b?".ipa":".aab",I=(v.url||v.downloadUrl||"").toLowerCase();return H.endsWith(q)||I.includes(q)});if(!y||!(y.url||y.downloadUrl))return me("Build found but artifact URL is missing."),null;let P=y.url||y.downloadUrl;return{filePath:await Xr(P,b?"ios":"android"),buildId:f.buildId,artifactName:y.name,source:"latest"}}catch(l){return o.stop("Fetch failed"),me(`API Error: ${l.message}`),null}}if(r==="id"){let s=n.buildId||await Bn({message:"Enter Build ID:",validate:a=>a.length<5?"Invalid ID":void 0});if(Nt(s))return null;let l=String(s);o.start("Fetching build...");try{let a=null;try{let f=await O.get(`/builds/${e}/${l}`);f.data.status==="success"&&(a=f.data.build)}catch(f){f.response?.status!==404&&console.log(ie.dim(`  [RECOVERY] Project build lookup skipped: ${f.message}`))}if(!a){let f=await O.get(`/build/${l}`);if(f.data.status!=="success")throw new Error(f.data.message);a=f.data.build}if(!a)throw new Error(`Build ${l} was not found.`);let c=t==="ios",u=_i(a.artifacts);af(u)||(u=await ba(e,l,u));let d=Sa(u,t);if(d||(u=await ba(e,l,u),d=Sa(u,t)),!d)throw new Error(`No ${c?".ipa":".aab"} artifact found for build ${l}. The build exists, but its artifact list does not contain a downloadable submission artifact.`);let p=d.url||d.downloadUrl;if(!p)throw new Error(`Artifact ${d.name||"(unnamed)"} for build ${l} has no download URL. Retry after the build artifact upload is visible in the Installation Hub.`);return o.stop(`Found build: ${a.buildId||l}`),{filePath:await Xr(p,c?"ios":"android"),buildId:a.buildId||l,artifactName:d.name,source:"id"}}catch(a){throw o.stop("Fetch failed"),a}}if(r==="url"){let s=await Bn({message:"Enter Artifact URL:",validate:l=>l.startsWith("http")?void 0:"Must be a valid URL"});return Nt(s)?null:{filePath:await Xr(s,t),source:"url"}}return null}function _i(e){return(e||[]).map(t=>({...t,url:t.url||t.downloadUrl}))}function af(e){return e.some(t=>!!(t.url||t.downloadUrl))}function Sa(e,t){let n=t==="ios",i=n?"ipa":"aab",r=n?".ipa":".aab";return e.find(o=>{let s=String(o.type||"").toLowerCase(),l=String(o.name||"").toLowerCase(),a=String(o.url||o.downloadUrl||"").toLowerCase();return s?s===i:l.endsWith(r)||a.includes(r)})||null}function lf(e,t){let n=e==="ios"?".ipa":".aab";if(t.buildId)return`No downloadable ${n} artifact found for build ${t.buildId}. Check that the build finished artifact upload before submitting.`;if(t.latest){let i=t.profile||t.buildProfile;return`No latest successful ${e}${i?` ${i}`:""} build has a downloadable ${n} artifact.`}return`No downloadable ${n} artifact was selected for submission.`}async function ba(e,t,n){try{let i=await O.get(`/builds/${e}/${t}/artifacts`);if(i.data.status==="success"&&i.data.artifacts?.length>0){let r=_i(i.data.artifacts);return console.log(ie.cyan(`  [RECOVERY] Fetched ${r.length} artifact(s) with download URLs.`)),r}}catch(i){console.log(ie.dim(`  [RECOVERY] Project artifact lookup skipped: ${i.message}`))}try{let i=await O.get(`/public/builds/${t}`);if(i.data.status==="success"&&i.data.artifacts?.length>0){let r=_i(i.data.artifacts);return console.log(ie.cyan(`  [RECOVERY] Fetched ${r.length} public artifact(s) with download URLs.`)),r}}catch(i){console.log(ie.dim(`  [RECOVERY] Public artifact lookup skipped: ${i.message}`))}return _i(n)}async function Xr(e,t,n=3){let i=Lt();i.start("Downloading artifact...");let r=ae.mkdtempSync(xe.join(en.tmpdir(),`${m.nameLower}-artifact-`)),o=`app.${t==="ios"?"ipa":"aab"}`,s=xe.join(r,o);for(let l=1;l<=n;l++)try{l>1&&(i.message(`Downloading artifact (Retry ${l}/${n})...`),await new Promise(u=>setTimeout(u,2e3*l)));let a=ae.createWriteStream(s),c=await va({url:e,method:"GET",responseType:"stream",timeout:6e4});return await new Promise((u,d)=>{c.data.pipe(a);let p=!1;c.data.on("error",f=>{p||(p=!0,a.close(),d(f))}),a.on("finish",()=>{p||u()}),a.on("error",f=>{p||(p=!0,d(f))})}),i.stop("Download complete"),s}catch(a){if(l===n)throw i.stop("Download failed"),a}throw new Error("Download failed after retries")}async function cf(e,t,n,i,r){let o=Lt();if(r&&$e(`Bundle ID: ${ie.green(r)}`),!n||!i)throw me(`Missing credentials: issuerId=${n}, keyId=${i}. Check your Dashboard.`),new Error("Missing ASC API Key Metadata (IssuerID or KeyID)");let s=Pa(t,n,i),l=yf();return o.start("Uploading to TestFlight (pilot)..."),new Promise((a,c)=>{let u=bf(),d=kp(l.command,["pilot","upload","--ipa",e,"--api_key_path",s,"--skip_submission","true","--skip_waiting_for_build_processing","true"],{stdio:["ignore","pipe","pipe"],env:l.env});d.stdout?.on("data",p=>u.append(p,process.stdout)),d.stderr?.on("data",p=>u.append(p,process.stderr)),d.on("close",p=>{if(u.flush(),p!==0){o.stop("Pilot failed");try{ae.unlinkSync(s)}catch{}c(Af(p,u.lines()))}else{o.stop("IPA uploaded to TestFlight");try{ae.unlinkSync(s)}catch{}a({})}}),d.on("error",p=>{u.flush();try{ae.unlinkSync(s)}catch{}o.stop("Pilot execution error");let f=Rf(p);f.logs=u.lines(),c(f)})})}async function df(e,t,n,i,r,o){let s=Lt();if(r&&$e(`Bundle ID: ${ie.green(r)}`),!n||!i)throw me(`Missing credentials: issuerId=${n}, keyId=${i}. Check your Dashboard.`),new Error("Missing ASC API Key Metadata (IssuerID or KeyID)");let l=Pa(t,n,i),a=`${o.sshUser}@${o.sshHost}`,c=uf(o),u=pf(o),d="",p="";try{if(s.start(`Preparing remote iOS submit runner (${a})...`),d=ff("ssh",[...c,"mktemp -d /tmp/mach-submit.XXXXXX"]).trim(),!d)throw new Error("Remote runner did not return a temp directory.");s.stop(`Remote runner ready: ${a}`),s.start("Uploading IPA and App Store Connect key to remote runner..."),Zr("scp",[...u,e,`${a}:${d}/app.ipa`],"IPA upload to remote runner"),Zr("scp",[...u,l,`${a}:${d}/api_key.json`],"ASC key upload to remote runner"),p=xe.join(en.tmpdir(),`${m.nameLower}-ios-submit-${Date.now()}.sh`),ae.writeFileSync(p,mf(d)),Zr("scp",[...u,p,`${a}:${d}/submit.sh`],"submit script upload to remote runner"),s.stop("Remote submit inputs uploaded"),s.start("Uploading to TestFlight on remote runner...");let f=`chmod +x ${Hn(`${d}/submit.sh`)} && bash ${Hn(`${d}/submit.sh`)}`,g=Zt("ssh",[...c,f],{stdio:"inherit"});if(g.error)throw oo("ssh",g.error);if(g.status!==0)throw new Error(`Remote iOS submit failed with exit code ${g.status}.`);return s.stop("IPA uploaded to TestFlight"),{apiKeyJsonPath:null}}catch(f){throw s.stop("Remote iOS submit failed"),f}finally{try{ae.unlinkSync(l)}catch{}if(p)try{ae.unlinkSync(p)}catch{}if(d)try{Zt("ssh",[...c,`rm -rf ${Hn(d)}`],{stdio:"ignore"})}catch{}}}function Pa(e,t,n){let i=ae.readFileSync(e,"utf8"),r;try{r=ro.createPrivateKey(i).export({type:"pkcs8",format:"pem"})}catch{$e("Key normalization failed, falling back to manual re-wrapping..."),r=`-----BEGIN PRIVATE KEY-----
+`).map(r=>r.trim().split(/\s+/)).filter(r=>r.length>=2&&r[1]==="device").map(r=>r[0]).filter(Boolean);return e&&i.includes(e)?(O.appendFileSync(t,`Using Android device ${e} for install and cleanup.
+`),e):i.length===1?(O.appendFileSync(t,`Using Android device ${i[0]} for install and cleanup.
+`),i[0]):(i.length>1&&O.appendFileSync(t,`[WARN] Multiple Android devices are connected; using adb default target for install and cleanup.
+`),null)}function cc(e,t){let i=(Wi("aapt",["dump","badging",e])||Wi("aapt2",["dump","badging",e]))?.match(/package:\s+name='([^']+)'/);if(i?.[1])return i[1];let o=Wi("apkanalyzer",["manifest","application-id",e])?.split(/\s+/).find(Boolean);return o||(O.appendFileSync(t,`[WARN] Could not determine Android application id from APK; post-run uninstall will be skipped.
+`),null)}function Wi(e,t){for(let n of uc(e)){let i=Ge(n,t,{encoding:"utf-8",env:process.env,maxBuffer:10485760});if(i.status===0&&i.stdout)return String(i.stdout).trim()}return null}function uc(e){let t=process.platform==="win32"&&!e.endsWith(".exe")?`${e}.exe`:e,n=[];if(e==="aapt"||e==="aapt2")for(let r of qo()){let o=x.join(r,"build-tools");for(let s of Jo(o))n.push(x.join(o,s,t))}if(e==="apkanalyzer")for(let r of qo()){n.push(x.join(r,"cmdline-tools","latest","bin",t));let o=x.join(r,"cmdline-tools");for(let s of Jo(o))n.push(x.join(o,s,"bin",t));n.push(x.join(r,"tools","bin",t))}let i=pc(e);return i&&n.unshift(i),n.push(t),[...new Set(n)]}function qo(){let e=[process.env.ANDROID_HOME,process.env.ANDROID_SDK_ROOT];return process.platform==="darwin"?e.push(x.join($t.homedir(),"Library","Android","sdk")):process.platform==="linux"&&e.push(x.join($t.homedir(),"Android","Sdk"),x.join($t.homedir(),"Android","sdk"),"/opt/android-sdk","/usr/lib/android-sdk"),[...new Set(e.filter(t=>!!t))]}function Jo(e){try{return O.readdirSync(e,{withFileTypes:!0}).filter(t=>t.isDirectory()).map(t=>t.name).sort((t,n)=>n.localeCompare(t,void 0,{numeric:!0}))}catch{return[]}}function pc(e){let t=process.platform==="win32"?"where":"/usr/bin/env",n=process.platform==="win32"?[e]:["which",e],i=Ge(t,n,{encoding:"utf-8",env:process.env});return i.status!==0||!i.stdout?null:String(i.stdout).split(`
+`)[0]?.trim()||null}async function qi(e,t,n){if(!O.existsSync(e))return;let i=O.readFileSync(e),r;for(let o=1;o<=3;o+=1)try{await Wt.put(t,i,{headers:{"Content-Type":n,"Content-Length":String(i.length)},maxBodyLength:1/0,maxContentLength:1/0,timeout:12e4});return}catch(s){if(r=s,!ts(s)||o>=3)break;await tr(2e3*o)}throw r}async function Yo(e,t,n,i){let r=x.join(n,"report.xml"),o=x.join(t,"artifacts.tar.gz");try{await qi(r,e.junitUploadUrl,"application/xml")}catch(s){O.appendFileSync(i,`[WARN] Failed to upload JUnit report: ${s.message||s}
+`)}try{await qi(i,e.logUploadUrl,"text/plain")}catch(s){O.appendFileSync(i,`[WARN] Failed to upload runner log: ${s.message||s}
+`)}try{qe("tar",["-czf",o,"-C",t,x.basename(n)],i),await qi(o,e.artifactsUploadUrl,"application/gzip")}catch(s){O.appendFileSync(i,`[WARN] Failed to upload Maestro artifacts: ${s.message||s}
+`)}}function fc(e){if(!e.endsWith(".apk"))return C.error(k.red("Local Android Maestro runs need an APK artifact.")),!1;C.info(k.dim("Installing APK on local Android device/emulator..."));let t=Ge("adb",["install","-r",e],{stdio:"inherit",env:process.env});return t.error?(C.error(k.red(`adb failed to start: ${t.error.message}`)),!1):t.status!==0?(C.error(k.red(`adb install failed with exit code ${t.status??1}`)),!1):!0}function mc(e,t){if(e.endsWith(".ipa"))return C.error(k.red("Local iOS Maestro runs need an iOS Simulator .app.zip artifact, not an App Store .ipa.")),!1;let n=e;if(e.endsWith(".zip")){let r=x.join(t,"ios-app");O.mkdirSync(r,{recursive:!0}),new jn(e).extractAllTo(r,!0);let o=nr(r);if(!o)return C.error(k.red("Could not find a .app bundle inside the downloaded zip.")),!1;n=o}if(!n.endsWith(".app"))return C.error(k.red("Local iOS Maestro runs need an iOS Simulator .app bundle or .app.zip artifact.")),!1;C.info(k.dim("Installing app on booted iOS Simulator..."));let i=Ge("xcrun",["simctl","install","booted",n],{stdio:"inherit",env:process.env});return i.error?(C.error(k.red(`xcrun failed to start: ${i.error.message}`)),!1):i.status!==0?(C.error(k.red(`iOS Simulator install failed with exit code ${i.status??1}`)),!1):!0}function nr(e){let t=O.readdirSync(e,{withFileTypes:!0});for(let n of t){let i=x.join(e,n.name);if(n.isDirectory()&&n.name.endsWith(".app"))return i;if(n.isDirectory()){let r=nr(i);if(r)return r}}return null}function gc(e,t){let n=String(t||"").toLowerCase();return n==="android"?e.find(i=>_t(i,".apk")):n==="ios"?e.find(i=>_t(i,".app.zip"))||e.find(i=>_t(i,".zip")):e.find(i=>_t(i,".apk"))||e.find(i=>_t(i,".app.zip"))||e.find(i=>_t(i,".zip"))}function _t(e,t){return String(e?.name||e?.downloadUrl||e?.url||"").toLowerCase().endsWith(t)}function ir(e){let t=String(e||"").toLowerCase();if(t.includes(".apk"))return"android";if(t.includes(".app.zip")||t.endsWith(".app")||t.includes(".ipa"))return"ios"}function as(e){if(e)try{return x.basename(new URL(e).pathname)||void 0}catch{return x.basename(e)||void 0}}function hc(e){return e?e.match(/[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/i)?.[0]:void 0}function ls(e,t){if(!e.jsonOutput)return;let n=x.resolve(e.jsonOutput),i={...t,updatedAt:new Date().toISOString()};try{let r=x.dirname(n);r&&r!=="."&&O.mkdirSync(r,{recursive:!0}),O.writeFileSync(n,JSON.stringify(i,null,2))}catch(r){C.warn(k.yellow(`Could not write Maestro metadata JSON: ${r.message}`))}}function yc(e,t){if(!e.jsonOutput)return;let n=x.resolve(e.jsonOutput),i={mode:"local",...t,updatedAt:new Date().toISOString()};try{let r=x.dirname(n);r&&r!=="."&&O.mkdirSync(r,{recursive:!0}),O.writeFileSync(n,JSON.stringify(i,null,2))}catch(r){C.warn(k.yellow(`Could not write Maestro metadata JSON: ${r.message}`))}}import{spinner as it,text as Xt,select as dr,isCancel as tt,cancel as cr,log as bs}from"@clack/prompts";import V from"chalk";import q from"fs";import ge from"path";import{spawn as Ic,spawnSync as ht}from"child_process";import As from"axios";import bt from"os";import fr from"crypto";import bc from"crypto";import Rt from"axios";import ds from"fs";var Yt=6e4,Ac=12e4,rr=4,Jt=e=>encodeURIComponent(e),Sc=e=>new Promise(t=>setTimeout(t,e));async function Ot(e,t){let n;for(let i=1;i<=rr;i++)try{return await t()}catch(r){if(n=r,i>=rr||!Ec(r))throw r;let o=Number(r.response?.headers?.["retry-after"]),s=Number.isFinite(o)&&o>0?o*1e3:Math.min(2e3*i*i,15e3);console.log(`[Google Play] ${e} failed (attempt ${i}/${rr}); retrying in ${Math.round(s/1e3)}s...`),await Sc(s)}throw n}function Ec(e){let t=e.response?.status;return t?t===408||t===409||t===425||t===429||t>=500:!0}async function us(e){let{packageName:t,serviceAccount:n,aabPath:i,track:r,releaseStatus:o,userFraction:s,changesNotSentForReview:a}=e,l;try{let c={Authorization:`Bearer ${await cs(n)}`,Connection:"close"},u=Jt(t);if(l=(await Ot("create edit",()=>Rt.post(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${u}/edits`,{},{headers:c,timeout:Yt}))).data.id,!l)throw new Error("Google Play edit insert succeeded but did not return an edit id.");let p=Jt(l),g=ds.statSync(i),h=await Ot("upload AAB",()=>Rt.post(`https://androidpublisher.googleapis.com/upload/androidpublisher/v3/applications/${u}/edits/${p}/bundles`,ds.createReadStream(i),{headers:{...c,"Content-Type":"application/octet-stream","Content-Length":g.size},maxBodyLength:1/0,maxContentLength:1/0,params:{uploadType:"media"},timeout:Ac})),y=Number(h.data.versionCode);if(!y)throw new Error("Google Play upload succeeded but did not return a versionCode.");let b={versionCodes:[String(y)],status:o};return(o==="inProgress"||o==="halted")&&typeof s=="number"&&(b.userFraction=s),await Ot("update track",()=>Rt.put(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${u}/edits/${p}/tracks/${Jt(r)}`,{releases:[b]},{headers:c,timeout:Yt})),await Ot("commit edit",()=>Rt.post(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${u}/edits/${p}:commit`,{},{headers:c,params:a?{changesNotSentForReview:!0}:void 0,timeout:Yt})),{editId:l,versionCode:y,track:r,releaseStatus:o,userFraction:s}}catch(d){if(l)try{let u=await cs(n);await Ot("delete edit",()=>Rt.delete(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${Jt(t)}/edits/${Jt(l)}`,{headers:{Authorization:`Bearer ${u}`,Connection:"close"},timeout:Yt}))}catch{}let c=d.response?.data?.error?.message||d.message;throw new Error(`Google Play API Error: ${c}`)}}async function cs(e){let t=Math.floor(Date.now()/1e3),n=t+3600,i={alg:"RS256",typ:"JWT"},r={iss:e.client_email,sub:e.client_email,aud:"https://oauth2.googleapis.com/token",iat:t,exp:n,scope:"https://www.googleapis.com/auth/androidpublisher"},o=Buffer.from(JSON.stringify(i)).toString("base64url"),s=Buffer.from(JSON.stringify(r)).toString("base64url"),a=`${o}.${s}`,l=bc.createSign("RSA-SHA256");l.update(a);let d=l.sign(e.private_key,"base64url"),c=`${a}.${d}`;return(await Ot("OAuth token exchange",()=>Rt.post("https://oauth2.googleapis.com/token",{grant_type:"urn:ietf:params:oauth:grant-type:jwt-bearer",assertion:c},{headers:{Connection:"close"},timeout:Yt}))).data.access_token}var wc=5e3,vc=12,Ss=100,or=24,ps=8e3,_c={completed:"completed",draft:"draft",halted:"halted",inprogress:"inProgress","in-progress":"inProgress"},$c=e=>e?.type==="google_service_account",Gn=e=>e?.bundleId||e?.packageName||e?.meta?.packageName||e?.meta?.bundleId,Es=e=>e.submitArgs||process.argv.slice(3).join(" ");async function Vn(e){let t=it(),n=be(),i=Rc(e);if(!i){process.exitCode=1;return}let r=e.projectId||i.projectId,o=e.profile||e.buildProfile||"production";if(!r){Q(`${m.configFileName} is missing projectId. Pass --project-id in runner mode.`),process.exitCode=1;return}i.projectId=r,se(V.dim(`Submit for project: ${i.name||r} | Profile: ${o}`));let s=e.platform;if(!s){let E=await dr({message:"Select platform to submit:",options:[{value:"ios",label:"iOS (App Store Connect / TestFlight)"},{value:"android",label:"Android (Google Play Console)"}]});if(tt(E)){cr("Operation cancelled");return}s=E}if(s=String(s).toLowerCase(),s!=="ios"&&s!=="android"){Q(`Platform ${s} is not supported. Use 'ios' or 'android'.`),process.exitCode=1;return}let a=s==="ios"&&!e.local&&e.sshHost?Gc(i,o,e):null;if(s==="ios"&&!e.local&&!a){await Oc(i,o,e);return}let l=e.submitId,d=!!(e.local&&l),c=l||null,u=async(E,A={})=>{c&&await Tc(r,c,{status:E,...A})},f=s==="android"?e.packageName||e.androidPackage||Bc(i,o):void 0,p=s==="ios"?e.bundleId||e.iosBundleIdentifier||Hc(i,o):void 0,g,h,y,b=!1;try{s==="android"&&(g=e.track||i.submit?.[o]?.android?.track||i.submit?.production?.android?.track||"internal",h=Vc(i,o,e.releaseStatus),y=Kc(i,o,e.rollout),b=Wc(i,o,e.changesNotSentForReview),qc(h,y))}catch(E){Q(E.message),process.exitCode=1;return}if(s==="android"&&!d&&(c=await Dc(i,r,s,o,e,{packageName:f,track:g,releaseStatus:h,rollout:y,changesNotSentForReview:b}),!c)){Q("Could not create submission tracking record. Submission was not started."),process.exitCode=1;return}await u("running",{platform:s,profile:o,packageName:f,track:g,releaseStatus:h,rollout:y,startTime:Date.now(),...d?Nc():{}});let w=null,L=null;try{L=await Jc(r,s,e,n?.token),w=L?.filePath||null}catch(E){await u("failed",{error:`Failed to resolve submission artifact: ${E.message}`,endTime:Date.now()}),Q(`Failed to resolve submission artifact: ${E.message}`),process.exitCode=1;return}if(!w){let E=Xc(s,e);await u("failed",{error:E,endTime:Date.now()}),Q(E),process.exitCode=1;return}await u("running",{buildId:L?.buildId,artifactName:L?.artifactName,artifactSource:L?.source}),se(`Using artifact: ${V.green(ge.basename(w))} `),t.start("Fetching submission credentials from Dashboard...");let _;try{let A=(await $.get(`/credentials/${r}`)).data.credentials||[];if(s==="android"&&!f){t.stop("Package name missing"),Q("Could not resolve Android package name. Set android.package in mach.config.json/app.json."),await u("failed",{error:"Could not resolve Android package name.",endTime:Date.now()}),process.exitCode=1;return}let D=A.filter($c),v=s==="ios"?A.filter(G=>G.type==="asc_api_key"):jc(D,f);if(v.length===0){if(t.stop("Credentials missing"),Q(s==="android"?`No Google Play service credential found for package ${f}.`:`No Service Credentials found for ${s}.`),s==="android"){let G=D.map(Gn).filter(Boolean).join(", ");G&&se(`Found Google Play service credential(s) for: ${G}`),se(`Use '${m.nameLower} credentials:service --platform android --package-name ${f}' or upload it under that package in the Dashboard.`)}else se(`Use '${m.nameLower} credentials:service --platform ${s}' or use the Dashboard to upload them.`);await u("failed",{error:`No submission credentials found for ${s}.`,endTime:Date.now()}),process.exitCode=1;return}if(_=Lc(v,e.credentialId),!_&&s==="ios"&&p&&(_=Mc(v,p)),_||v.length===1)_=_||v[0],t.stop(`Using: ${_.name}`),s==="android"&&Gn(_)==="*"&&se(V.yellow(`Using legacy wildcard Google Play credential for ${f}. Upload a package-scoped credential when possible.`));else{if(t.stop("Multiple credentials found"),Uc()){let U=v.map(B=>`${B.name||"credential"} (${B.credentialId||B.id||"no-id"})`).join(", ");Q(`Multiple ${s==="ios"?"App Store Connect":"Google Play"} credentials found. Use --credential-id in CI. Available: ${U}`),await u("failed",{error:"Multiple submission credentials found; --credential-id is required in CI.",endTime:Date.now()}),process.exitCode=1;return}let G=await dr({message:`Choose a ${s==="ios"?"App Store Connect":"Google Play"} credential:`,options:v.map(U=>({value:U.credentialId,label:U.name,hint:`${U.keyId?`ID: ${U.keyId}`:""} ${U.issuerId?`(Issuer: ${U.issuerId.substring(0,8)}...)`:""}`}))});if(tt(G)){cr("Submission cancelled"),await u("failed",{error:"Submission cancelled while selecting credential.",endTime:Date.now()}),process.exitCode=1;return}_=v.find(U=>U.credentialId===G),se(`Using selected: ${V.green(_.name)}`)}}catch(E){t.stop("Failed to fetch credentials"),Q(`API Error: ${E.message} `),await u("failed",{error:`Failed to fetch credentials: ${E.message}`,endTime:Date.now()}),process.exitCode=1;return}let H=q.mkdtempSync(ge.join(bt.tmpdir(),`${m.nameLower}-submit-`)),W=_.keyId||_.meta?.keyId,Z=_.issuerId||_.meta?.issuerId,Ee=_.type==="asc_api_key"?`AuthKey_${W}.p8`:"service-account.json",oe=ge.join(H,Ee);t.start("Downloading secure key...");try{let E=await $.get(`/credentials/${_.credentialId}/download`,{params:{projectId:r,format:"raw"}});if(E.data.status!=="success"||!E.data.downloadUrl)throw new Error("Failed to get secure download URL");let A=await As.get(E.data.downloadUrl,{responseType:"arraybuffer"});q.writeFileSync(oe,Buffer.from(A.data)),t.stop("Key downloaded to secure temp storage")}catch(E){t.stop("Download failed"),Q(`Failed to download key: ${E.message}`);try{q.rmSync(H,{recursive:!0,force:!0})}catch{}await u("failed",{error:`Failed to download credential key: ${E.message}`,endTime:Date.now()}),process.exitCode=1;return}se(V.blue(`Initiating ${s==="ios"?"TestFlight":"Google Play"} submission...`));let R=!1,T;try{if(s==="ios"){if(!W){let A=await Xt({message:"Enter App Store Connect Key ID (e.g. 2X948D...):",validate:D=>D.length>0?void 0:"Key ID is required"});if(tt(A)){await u("failed",{error:"Submission cancelled while entering ASC Key ID.",endTime:Date.now()}),process.exitCode=1;return}W=A}if(!Z||Z==="undefined"){let A=await Xt({message:"Enter App Store Connect Issuer ID (Found on ASC Keys page):",validate:D=>D.length>0?void 0:"Issuer ID is required"});if(tt(A)){await u("failed",{error:"Submission cancelled while entering ASC Issuer ID.",endTime:Date.now()}),process.exitCode=1;return}Z=A}se(`Using ASC Key ID: ${W}`),se(`Using ASC Issuer ID: ${Z}`);let E=a?await Qc(w,oe,Z,W,p,a):await Zc(w,oe,Z,W,p);pr(`${s==="ios"?"App Store":"Google Play"} submission successful!`),R=!0}else T=await ru(w,oe,g||"internal",f,h||"completed",y,b,o),pr("Google Play submission successful!"),R=!0}catch(E){Q(`Submission failed: ${E.message}`),await u("failed",{error:E.message,endTime:Date.now()}),nt(e,{status:"failed",projectId:r,submitId:c,platform:s,profile:o,buildId:L?.buildId||e.buildId,artifactName:L?.artifactName,error:E.message,dashboardUrl:c?yt(c,r):void 0}),process.exitCode=1}finally{R&&(await u("success",{endTime:Date.now(),versionCode:T?.versionCode,track:g,releaseStatus:h}),nt(e,{status:"success",projectId:r,submitId:c,platform:s,profile:o,buildId:L?.buildId||e.buildId,artifactName:L?.artifactName,versionCode:T?.versionCode,track:g,releaseStatus:h,dashboardUrl:c?yt(c,r):void 0})),Au(H),w&&w.includes(`${m.nameLower}-artifact-`)}}function Rc(e){let t=`./${m.configFileName}`;if(q.existsSync(t))try{return JSON.parse(q.readFileSync(t,"utf-8"))}catch(n){return Q(`Failed to read ${m.configFileName}: ${n.message}`),null}return e.projectId?{projectId:e.projectId}:(Q(`No ${m.configFileName} found. Run \`${m.nameLower} init\` or \`${m.nameLower} link\` first.`),null)}async function Oc(e,t,n){let i=n.projectId||e.projectId;if(!i){Q(`${m.configFileName} is missing projectId.`),process.exitCode=1;return}let r=n.submitId||fr.randomUUID(),o=!!n.latest||!n.buildId,s=Pc({...n,latest:o,profile:t,projectId:i,submitId:r}),a={projectId:i,submitId:r,platform:"ios",profile:t,latest:o,buildId:n.buildId,credentialId:n.credentialId,status:"pending",source:"cli",submitArgs:Es(n),runnerArgs:s,runnerCommand:[m.nameLower,"submit",...s].map(Fc).join(" "),appName:e.name,startTime:Date.now()},l=it();l.start("Queuing iOS submit on macOS runner...");try{let d=await $.post("/submissions",a),c=d.data?.submission||d.data?.submit||{},u=d.data?.dashboardUrl||yt(r,i);l.stop("iOS submit queued"),se(`Submission ID: ${V.cyan(r)}`),se(`Dashboard: ${V.blue.underline(u)}`),nt(n,{status:"pending",projectId:i,submitId:r,platform:"ios",profile:t,latest:o,buildId:n.buildId,dashboardUrl:u}),await Cc(i,r,n)}catch(d){l.stop("Could not queue iOS submit"),Q(xc(d)),process.exitCode=1}}async function Dc(e,t,n,i,r,o={}){let s=r.submitId||fr.randomUUID(),a=!!r.latest||!r.buildId,l={projectId:t,submitId:s,platform:n,profile:i,latest:a,buildId:r.buildId,credentialId:r.credentialId,status:"running",source:"cli-direct",submitArgs:Es(r),appName:e.name,startTime:Date.now(),...o};try{let d=await $.post("/submissions",l),c=d.data?.submission||d.data?.submit||{},u=d.data?.dashboardUrl||c.dashboardUrl||yt(s,t);return se(`Submission ID: ${V.cyan(s)}`),se(`Dashboard: ${V.blue.underline(u)}`),nt(r,{status:"running",projectId:t,submitId:s,platform:n,profile:i,latest:a,buildId:r.buildId,dashboardUrl:u}),s}catch(d){let c=d.response?.data?.message||d.response?.data?.error||d.message;return se(V.yellow(`Could not create submission tracking record: ${c}`)),null}}function Pc(e){let t=["--local","--submit-id",e.submitId,"--project-id",e.projectId,"--platform","ios","--profile",e.profile||"production"];return e.buildId?t.push("--build-id",e.buildId):t.push("--latest"),e.credentialId&&t.push("--credential-id",e.credentialId),e.bundleId&&t.push("--bundle-id",e.bundleId),e.packageName&&t.push("--package-name",e.packageName),e.quiet&&t.push("--quiet"),e.jsonOutput&&t.push("--json-output",e.jsonOutput),t.filter(n=>n!=null&&n!=="")}async function Cc(e,t,n){let i=it(),r=0,o=0;for(n.quiet||i.start("Waiting for iOS submit runner...");;)try{let s=await $.get(`/submissions/${e}/${t}`),a=s.data?.submission||s.data?.submit||s.data,l=String(a?.status||"pending").toLowerCase();r=0;let d=Array.isArray(a?.logs)?a.logs:[];for(let c=o;c<d.length;c++){let u=d[c];u&&console.log(V.dim(String(u)))}if(o=d.length,["success","completed","succeeded"].includes(l)){n.quiet||i.stop("iOS submit completed"),pr("App Store submission successful!"),nt(n,{status:"success",projectId:e,submitId:t,platform:"ios",profile:a?.profile||n.profile||"production",buildId:a?.buildId||n.buildId,artifactName:a?.artifactName,dashboardUrl:a?.dashboardUrl||yt(t,e)});return}if(["failed","error","cancelled","canceled"].includes(l)){n.quiet||i.stop("iOS submit failed");let c=a?.error||a?.message||"Unknown iOS submit failure.";Q(c),nt(n,{status:"failed",projectId:e,submitId:t,platform:"ios",profile:a?.profile||n.profile||"production",buildId:a?.buildId||n.buildId,artifactName:a?.artifactName,error:c,dashboardUrl:a?.dashboardUrl||yt(t,e)}),process.exitCode=1;return}n.quiet||i.message(`iOS submit ${l}...`),await ur(wc)}catch(s){if(r++,r>=vc){n.quiet||i.stop("Lost connection to iOS submit status"),Q(`Could not fetch iOS submit status after ${r} attempts: ${s.message}`),process.exitCode=1;return}await ur(Math.min(2e3*r,15e3))}}async function Tc(e,t,n){let i;for(let r=1;r<=3;r++)try{await $.patch(`/submissions/${e}/${t}`,n);return}catch(o){if(i=o,r>=3||!kc(o))break;await ur(1e3*r)}bs.warn(V.dim(`Could not report submission status: ${i?.message||i}`))}function kc(e){let t=e.response?.status;return!t||t===408||t===409||t===425||t===429||t>=500}function Nc(){let e={gitlabJobId:process.env.CI_JOB_ID,gitlabJobUrl:process.env.CI_JOB_URL,gitlabPipelineId:process.env.CI_PIPELINE_ID,gitlabProjectId:process.env.CI_PROJECT_ID,gitlabProjectPath:process.env.CI_PROJECT_PATH};return Object.fromEntries(Object.entries(e).filter(([,t])=>!!t))}function xc(e){let t=e.response?.status,n=e.response?.data?.message||e.response?.data?.error;return t===404||t===405?["Managed iOS submit is not enabled on this Mach API yet.","Deploy the API/dashboard submission orchestration endpoint, then retry the same command.","Expected API: POST /submissions and GET/PATCH /submissions/:projectId/:submitId."].join(`
+`):n||e.message||String(e)}function yt(e,t){if(!e)return He;let n=t?`?projectId=${encodeURIComponent(t)}`:"";return`${He}/submissions/${e}${n}`}function nt(e,t){if(!e.jsonOutput)return;let n=ge.resolve(e.jsonOutput),i={...t,url:t.url||t.dashboardUrl||yt(t.submitId,t.projectId),updatedAt:new Date().toISOString()};try{let r=ge.dirname(n);r&&r!=="."&&q.mkdirSync(r,{recursive:!0}),q.writeFileSync(n,JSON.stringify(i,null,2))}catch(r){bs.warn(V.yellow(`Could not write submission metadata JSON: ${r.message}`))}}function Lc(e,t){return t&&e.find(n=>n.credentialId===t||n.id===t||n.keyId===t||n.meta?.keyId===t)||null}function Mc(e,t){let n=e.filter(i=>[i.bundleId,i.bundleIdentifier,i.appIdentifier,i.meta?.bundleId,i.meta?.bundleIdentifier,i.meta?.appIdentifier].filter(Boolean).map(String).includes(t));return n.length===1?n[0]:null}function Uc(){return process.env.CI==="true"||process.env.CI==="1"||!process.stdin.isTTY}function ur(e){return new Promise(t=>setTimeout(t,e))}function Fc(e){return/^[a-zA-Z0-9_./:=@-]+$/.test(e)?e:`'${e.replace(/'/g,"'\\''")}'`}function Bc(e,t){if(e.submit?.[t]?.android?.package)return e.submit[t].android.package;let n=Ln(e,t);if(n)return n;let i=ge.join(process.cwd(),"app.json");if(q.existsSync(i))try{return JSON.parse(q.readFileSync(i,"utf-8")).expo?.android?.package}catch{}let r=ge.join(process.cwd(),"app.config.json");if(q.existsSync(r))try{let o=JSON.parse(q.readFileSync(r,"utf-8"));return o.expo?.android?.package||o.android?.package}catch{}}function jc(e,t){let n=e.filter(o=>Gn(o)===t);if(n.length>0)return n;let i=e.filter(o=>{let s=Gn(o);return!s||s==="*"});return e.length>0&&e.length===i.length?i:[]}function Hc(e,t){return e.submit?.[t]?.ios?.bundleIdentifier?e.submit[t].ios.bundleIdentifier:e.submit?.[t]?.ios?.bundleId?e.submit[t].ios.bundleId:Mn(e,t)}function Gc(e,t,n){let i=e.submit?.[t]?.ios||{},r=e.submit?.production?.ios||{},o=n.sshHost||i.sshHost||r.sshHost||process.env.MACH_IOS_SUBMIT_SSH_HOST;return o?{sshHost:o,sshUser:n.sshUser||i.sshUser||r.sshUser||process.env.MACH_IOS_SUBMIT_SSH_USER||process.env.USER||"ubuntu",sshKey:n.sshKey||i.sshKey||r.sshKey||process.env.MACH_IOS_SUBMIT_SSH_KEY}:null}function Vc(e,t,n){let i=n||e.submit?.[t]?.android?.releaseStatus||e.submit?.production?.android?.releaseStatus||"completed";return zc(i)}function zc(e){let t=_c[String(e).trim().toLowerCase()];if(!t)throw new Error(`Invalid Android release status "${e}". Use completed, draft, halted, or inProgress.`);return t}function Kc(e,t,n){let i=n??e.submit?.[t]?.android?.rollout??e.submit?.[t]?.android?.userFraction??e.submit?.[t]?.android?.rolloutFraction??e.submit?.production?.android?.rollout??e.submit?.production?.android?.userFraction??e.submit?.production?.android?.rolloutFraction;if(i==null||i==="")return;let r=Number(i);if(!Number.isFinite(r)||r<=0||r>=1)throw new Error(`Invalid Android rollout fraction "${i}". Use a number greater than 0 and less than 1, for example 0.1.`);return r}function Wc(e,t,n){let i=n??e.submit?.[t]?.android?.changesNotSentForReview??e.submit?.[t]?.android?.changes_not_sent_for_review??e.submit?.production?.android?.changesNotSentForReview??e.submit?.production?.android?.changes_not_sent_for_review??!1;return i===!0||i==="true"||i==="1"}function qc(e,t){if(e==="inProgress"&&t===void 0)throw new Error("Google Play staged rollout requires --rollout <fraction> when --release-status inProgress is used.");if(e!=="inProgress"&&e!=="halted"&&t!==void 0)throw new Error("Android rollout fraction can only be used with --release-status inProgress or halted.")}async function Jc(e,t,n,i){let r=n.buildId?"id":n.latest?"latest":null;if(!r){let s=await dr({message:"Select artifact source:",options:[{value:"latest",label:`Latest Production Build (${m.name})`},{value:"id",label:`Input Build ID (${m.name})`},{value:"url",label:"Remote URL"},{value:"local",label:"Local File Path"}]});if(tt(s))return cr("Operation cancelled"),null;r=s}if(r==="local"){let s=await Xt({message:"Enter path to artifact (.ipa/.aab):",validate:a=>{if(!q.existsSync(a))return"File not found";if(t==="ios"&&!a.endsWith(".ipa"))return"Must be an .ipa file";if(t==="android"&&!a.endsWith(".aab"))return"Must be an .aab file"}});return tt(s)?null:{filePath:s,source:"local"}}let o=it();if(r==="latest"){let s=n.profile||n.buildProfile;o.start(`Fetching latest${s?` ${s}`:""} build...`);try{let a=await $.get(`/builds/${e}`,{params:{limit:50}});if(a.data.status!=="success")throw new Error(a.data.message);let l=a.data.builds||[],d=s?.toLowerCase(),c=_=>_.platform?.toLowerCase()===t.toLowerCase()&&_.status?.toLowerCase()==="success",u=_=>d?[_.buildProfile,_.profile,_.profileName,_.buildType].filter(Boolean).some(H=>String(H).toLowerCase()===d):!0,f=l.filter(_=>c(_)&&u(_)),p=f.find(_=>_.buildType?.toLowerCase()==="store"||_.distribution?.toLowerCase()==="store")||f[0],g=l.some(_=>_.platform?.toLowerCase()===t.toLowerCase()&&_.status?.toLowerCase()==="success");if(!p)return o.stop("No suitable build found"),Q(s&&g?`No successful ${t} builds found for profile "${s}".`:"No successful builds found for this platform."),null;o.stop(`Found build: ${p.buildId}`);let h=p.artifacts||[];if(h.length===0||h.every(_=>!(_.url||_.downloadUrl)))try{let _=await $.get(`/builds/${e}/${p.buildId}/artifacts`);_.data.status==="success"&&_.data.artifacts?.length>0?(h=_.data.artifacts.map(H=>({...H,url:H.url||H.downloadUrl})),console.log(V.cyan(`  [RECOVERY] Fetched ${h.length} artifact(s) with download URLs.`))):console.log(V.yellow("  [RECOVERY] /artifacts endpoint returned 0 artifacts."))}catch(_){console.log(V.red(`  [RECOVERY] /artifacts fetch failed: ${_.message}`))}let b=t==="ios",w=h.find(_=>{let H=(_.type||"").toLowerCase(),W=(_.name||"").toLowerCase();if(console.log(V.dim(`    - Checking: ${_.name} (Type: ${_.type}, HasLink: ${!!(_.url||_.downloadUrl)})`)),H)return H===(b?"ipa":"aab");let Z=b?".ipa":".aab",Ee=(_.url||_.downloadUrl||"").toLowerCase();return W.endsWith(Z)||Ee.includes(Z)});if(!w||!(w.url||w.downloadUrl))return Q("Build found but artifact URL is missing."),null;let L=w.url||w.downloadUrl;return{filePath:await sr(L,b?"ios":"android"),buildId:p.buildId,artifactName:w.name,source:"latest"}}catch(a){return o.stop("Fetch failed"),Q(`API Error: ${a.message}`),null}}if(r==="id"){let s=n.buildId||await Xt({message:"Enter Build ID:",validate:l=>l.length<5?"Invalid ID":void 0});if(tt(s))return null;let a=String(s);o.start("Fetching build...");try{let l=null;try{let p=await $.get(`/builds/${e}/${a}`);p.data.status==="success"&&(l=p.data.build)}catch(p){p.response?.status!==404&&console.log(V.dim(`  [RECOVERY] Project build lookup skipped: ${p.message}`))}if(!l){let p=await $.get(`/build/${a}`);if(p.data.status!=="success")throw new Error(p.data.message);l=p.data.build}if(!l)throw new Error(`Build ${a} was not found.`);let d=t==="ios",c=Hn(l.artifacts);Yc(c)||(c=await ms(e,a,c));let u=fs(c,t);if(u||(c=await ms(e,a,c),u=fs(c,t)),!u)throw new Error(`No ${d?".ipa":".aab"} artifact found for build ${a}. The build exists, but its artifact list does not contain a downloadable submission artifact.`);let f=u.url||u.downloadUrl;if(!f)throw new Error(`Artifact ${u.name||"(unnamed)"} for build ${a} has no download URL. Retry after the build artifact upload is visible in the Installation Hub.`);return o.stop(`Found build: ${l.buildId||a}`),{filePath:await sr(f,d?"ios":"android"),buildId:l.buildId||a,artifactName:u.name,source:"id"}}catch(l){throw o.stop("Fetch failed"),l}}if(r==="url"){let s=await Xt({message:"Enter Artifact URL:",validate:a=>a.startsWith("http")?void 0:"Must be a valid URL"});return tt(s)?null:{filePath:await sr(s,t),source:"url"}}return null}function Hn(e){return(e||[]).map(t=>({...t,url:t.url||t.downloadUrl}))}function Yc(e){return e.some(t=>!!(t.url||t.downloadUrl))}function fs(e,t){let n=t==="ios",i=n?"ipa":"aab",r=n?".ipa":".aab";return e.find(o=>{let s=String(o.type||"").toLowerCase(),a=String(o.name||"").toLowerCase(),l=String(o.url||o.downloadUrl||"").toLowerCase();return s?s===i:a.endsWith(r)||l.includes(r)})||null}function Xc(e,t){let n=e==="ios"?".ipa":".aab";if(t.buildId)return`No downloadable ${n} artifact found for build ${t.buildId}. Check that the build finished artifact upload before submitting.`;if(t.latest){let i=t.profile||t.buildProfile;return`No latest successful ${e}${i?` ${i}`:""} build has a downloadable ${n} artifact.`}return`No downloadable ${n} artifact was selected for submission.`}async function ms(e,t,n){try{let i=await $.get(`/builds/${e}/${t}/artifacts`);if(i.data.status==="success"&&i.data.artifacts?.length>0){let r=Hn(i.data.artifacts);return console.log(V.cyan(`  [RECOVERY] Fetched ${r.length} artifact(s) with download URLs.`)),r}}catch(i){console.log(V.dim(`  [RECOVERY] Project artifact lookup skipped: ${i.message}`))}try{let i=await $.get(`/public/builds/${t}`);if(i.data.status==="success"&&i.data.artifacts?.length>0){let r=Hn(i.data.artifacts);return console.log(V.cyan(`  [RECOVERY] Fetched ${r.length} public artifact(s) with download URLs.`)),r}}catch(i){console.log(V.dim(`  [RECOVERY] Public artifact lookup skipped: ${i.message}`))}return Hn(n)}async function sr(e,t,n=3){let i=it();i.start("Downloading artifact...");let r=q.mkdtempSync(ge.join(bt.tmpdir(),`${m.nameLower}-artifact-`)),o=`app.${t==="ios"?"ipa":"aab"}`,s=ge.join(r,o);for(let a=1;a<=n;a++)try{a>1&&(i.message(`Downloading artifact (Retry ${a}/${n})...`),await new Promise(c=>setTimeout(c,2e3*a)));let l=q.createWriteStream(s),d=await As({url:e,method:"GET",responseType:"stream",timeout:6e4});return await new Promise((c,u)=>{d.data.pipe(l);let f=!1;d.data.on("error",p=>{f||(f=!0,l.close(),u(p))}),l.on("finish",()=>{f||c()}),l.on("error",p=>{f||(f=!0,u(p))})}),i.stop("Download complete"),s}catch(l){if(a===n)throw i.stop("Download failed"),l}throw new Error("Download failed after retries")}async function Zc(e,t,n,i,r){let o=it();if(r&&se(`Bundle ID: ${V.green(r)}`),!n||!i)throw Q(`Missing credentials: issuerId=${n}, keyId=${i}. Check your Dashboard.`),new Error("Missing ASC API Key Metadata (IssuerID or KeyID)");let s=Is(t,n,i),a=su();return o.start("Uploading to TestFlight (pilot)..."),new Promise((l,d)=>{let c=lu(),u=Ic(a.command,["pilot","upload","--ipa",e,"--api_key_path",s,"--skip_submission","true","--skip_waiting_for_build_processing","true"],{stdio:["ignore","pipe","pipe"],env:a.env});u.stdout?.on("data",f=>c.append(f,process.stdout)),u.stderr?.on("data",f=>c.append(f,process.stderr)),u.on("close",f=>{if(c.flush(),f!==0){o.stop("Pilot failed");try{q.unlinkSync(s)}catch{}d(du(f,c.lines()))}else{o.stop("IPA uploaded to TestFlight");try{q.unlinkSync(s)}catch{}l({})}}),u.on("error",f=>{c.flush();try{q.unlinkSync(s)}catch{}o.stop("Pilot execution error");let p=yu(f);p.logs=c.lines(),d(p)})})}async function Qc(e,t,n,i,r,o){let s=it();if(r&&se(`Bundle ID: ${V.green(r)}`),!n||!i)throw Q(`Missing credentials: issuerId=${n}, keyId=${i}. Check your Dashboard.`),new Error("Missing ASC API Key Metadata (IssuerID or KeyID)");let a=Is(t,n,i),l=`${o.sshUser}@${o.sshHost}`,d=eu(o),c=tu(o),u="",f="";try{if(s.start(`Preparing remote iOS submit runner (${l})...`),u=nu("ssh",[...d,"mktemp -d /tmp/mach-submit.XXXXXX"]).trim(),!u)throw new Error("Remote runner did not return a temp directory.");s.stop(`Remote runner ready: ${l}`),s.start("Uploading IPA and App Store Connect key to remote runner..."),ar("scp",[...c,e,`${l}:${u}/app.ipa`],"IPA upload to remote runner"),ar("scp",[...c,a,`${l}:${u}/api_key.json`],"ASC key upload to remote runner"),f=ge.join(bt.tmpdir(),`${m.nameLower}-ios-submit-${Date.now()}.sh`),q.writeFileSync(f,iu(u)),ar("scp",[...c,f,`${l}:${u}/submit.sh`],"submit script upload to remote runner"),s.stop("Remote submit inputs uploaded"),s.start("Uploading to TestFlight on remote runner...");let p=`chmod +x ${Zt(`${u}/submit.sh`)} && bash ${Zt(`${u}/submit.sh`)}`,g=ht("ssh",[...d,p],{stdio:"inherit"});if(g.error)throw mr("ssh",g.error);if(g.status!==0)throw new Error(`Remote iOS submit failed with exit code ${g.status}.`);return s.stop("IPA uploaded to TestFlight"),{apiKeyJsonPath:null}}catch(p){throw s.stop("Remote iOS submit failed"),p}finally{try{q.unlinkSync(a)}catch{}if(f)try{q.unlinkSync(f)}catch{}if(u)try{ht("ssh",[...d,`rm -rf ${Zt(u)}`],{stdio:"ignore"})}catch{}}}function Is(e,t,n){let i=q.readFileSync(e,"utf8"),r;try{r=fr.createPrivateKey(i).export({type:"pkcs8",format:"pem"})}catch{se("Key normalization failed, falling back to manual re-wrapping..."),r=`-----BEGIN PRIVATE KEY-----
 ${(i.replace(/-----BEGIN[^-]*-----/g,"").replace(/-----END[^-]*-----/g,"").replace(/\s+/g,"").match(/.{1,64}/g)||[]).join(`
 `)}
------END PRIVATE KEY-----`}let o=xe.join(en.tmpdir(),`api_key_${n}_${Date.now()}.json`),s={key_id:n,issuer_id:t,key:r,in_house:!1};return ae.writeFileSync(o,JSON.stringify(s,null,2)),o}function uf(e){let t=["-o","StrictHostKeyChecking=no","-o","ServerAliveInterval=30"];return e.sshKey&&t.push("-i",e.sshKey),t.push(`${e.sshUser}@${e.sshHost}`),t}function pf(e){let t=["-o","StrictHostKeyChecking=no","-o","ServerAliveInterval=30"];return e.sshKey&&t.push("-i",e.sshKey),t}function ff(e,t){let n=Zt(e,t,{encoding:"utf-8",stdio:["ignore","pipe","inherit"]});if(n.error)throw oo(e,n.error);if(n.status!==0)throw new Error(`${e} failed with exit code ${n.status}.`);return n.stdout||""}function Zr(e,t,n){let i=Zt(e,t,{stdio:"inherit"});if(i.error)throw oo(e,i.error);if(i.status!==0)throw new Error(`${n} failed with exit code ${i.status}.`)}function oo(e,t){return t?.code==="ENOENT"?new Error(`${e} was not found on this machine. Install OpenSSH client tools or run iOS submit directly on the macOS runner.`):t}function Hn(e){return`'${e.replace(/'/g,"'\\''")}'`}function mf(e){let t=Hn(`${e}/app.ipa`),n=Hn(`${e}/api_key.json`);return`#!/bin/bash
+-----END PRIVATE KEY-----`}let o=ge.join(bt.tmpdir(),`api_key_${n}_${Date.now()}.json`),s={key_id:n,issuer_id:t,key:r,in_house:!1};return q.writeFileSync(o,JSON.stringify(s,null,2)),o}function eu(e){let t=["-o","StrictHostKeyChecking=no","-o","ServerAliveInterval=30"];return e.sshKey&&t.push("-i",e.sshKey),t.push(`${e.sshUser}@${e.sshHost}`),t}function tu(e){let t=["-o","StrictHostKeyChecking=no","-o","ServerAliveInterval=30"];return e.sshKey&&t.push("-i",e.sshKey),t}function nu(e,t){let n=ht(e,t,{encoding:"utf-8",stdio:["ignore","pipe","inherit"]});if(n.error)throw mr(e,n.error);if(n.status!==0)throw new Error(`${e} failed with exit code ${n.status}.`);return n.stdout||""}function ar(e,t,n){let i=ht(e,t,{stdio:"inherit"});if(i.error)throw mr(e,i.error);if(i.status!==0)throw new Error(`${n} failed with exit code ${i.status}.`)}function mr(e,t){return t?.code==="ENOENT"?new Error(`${e} was not found on this machine. Install OpenSSH client tools or run iOS submit directly on the macOS runner.`):t}function Zt(e){return`'${e.replace(/'/g,"'\\''")}'`}function iu(e){let t=Zt(`${e}/app.ipa`),n=Zt(`${e}/api_key.json`);return`#!/bin/bash
 set -euo pipefail
 
 export PATH="/opt/homebrew/bin:/usr/local/bin:/usr/bin:/bin:/usr/sbin:/sbin:$HOME/.local/share/fastlane/3.4.0/bin:$PATH"
@@ -1471,39 +1541,40 @@ fastlane pilot upload \\
   --api_key_path ${n} \\
   --skip_submission true \\
   --skip_waiting_for_build_processing true
-`}async function gf(e,t,n="internal",i,r="completed",o,s=!1,l="production"){let a=Lt();if(!i||i==="*")throw new Error("Android package name is required for Google Play submission.");let c=o!==void 0?` (${o} rollout)`:"";a.start(`Uploading to Google Play ${n} track with ${r} release status${c}...`);try{let u=JSON.parse(ae.readFileSync(t,"utf-8"));hf(u);let d=await ha({packageName:i,serviceAccount:u,aabPath:e,track:n,releaseStatus:r,userFraction:o,changesNotSentForReview:s});return a.stop(`AAB uploaded to ${n} track (versionCode ${d.versionCode})`),d}catch(u){throw a.stop("Google Play upload failed"),new Error(Of(u,n,i,l))}}function hf(e){if(!e?.client_email||!e?.private_key)throw new Error("Invalid Google service account JSON: missing client_email or private_key.")}function Qr(){let e=process.env.HOME||en.homedir(),t=process.env.FASTLANE_GEM_HOME||xe.join(e,".local/share/fastlane/3.4.0"),n=[process.env.FASTLANE_BIN_DIR,"/usr/local/opt/ruby/bin","/opt/homebrew/opt/ruby/bin","/usr/local/bin","/opt/homebrew/bin","/usr/local/Cellar/fastlane/2.227.0/libexec/bin",xe.join(t,"bin"),process.env.PATH].filter(Boolean).join(":");return{...process.env,PATH:n,GEM_HOME:t,GEM_PATH:[t,"/usr/local/Cellar/fastlane/2.227.0/libexec",process.env.GEM_PATH].filter(Boolean).join(":"),FASTLANE_INSTALLED_VIA_HOMEBREW:"true",FASTLANE_SKIP_UPDATE_CHECK:"1",FASTLANE_HIDE_CHANGELOG:"1",LANG:process.env.LANG||"en_US.UTF-8",LC_ALL:process.env.LC_ALL||"en_US.UTF-8",CI:process.env.CI||"1"}}function yf(){let e=Qr(),t=Aa(e);if(t)return t;if(process.env.MACH_SKIP_FASTLANE_INSTALL!=="1"){Sf(e);let n=Aa(Qr());if(n)return n}return{command:"fastlane",env:Qr()}}function Aa(e){let t=process.env.HOME||en.homedir(),n=[process.env.FASTLANE_BINARY,"/usr/local/bin/fastlane","/opt/homebrew/bin/fastlane","/usr/local/Cellar/fastlane/2.227.0/libexec/bin/fastlane",xe.join(process.env.FASTLANE_GEM_HOME||xe.join(t,".local/share/fastlane/3.4.0"),"bin/fastlane"),"fastlane"].filter(Boolean);for(let i of n){if(i.includes("/")&&!ae.existsSync(i))continue;if(!Zt(i,["--version"],{env:e,stdio:"ignore"}).error)return{command:i,env:e}}return null}function Sf(e){let t=Zt("gem",["--version"],{env:e,stdio:"ignore"});if(t.error||t.status!==0)return;let n=process.env.HOME||en.homedir(),i=process.env.FASTLANE_GEM_HOME||xe.join(n,".local/share/fastlane/3.4.0"),r=xe.join(i,"bin");ae.mkdirSync(r,{recursive:!0}),$e(ie.dim("fastlane not found. Installing fastlane into the local Mach runner cache..."));let o=Zt("gem",["install","fastlane","-NV","--install-dir",i,"--bindir",r],{env:{...e,GEM_HOME:i,GEM_PATH:[i,e.GEM_PATH].filter(Boolean).join(":")},stdio:"inherit"});(o.error||o.status!==0)&&$e(ie.yellow("Automatic fastlane install failed; Mach will try PATH resolution once more."))}function bf(e=$a){let t=[],n="",i=r=>{let o=Oa(r);if(o)for(t.push(o);t.length>e;)t.shift()};return{append(r,o){let s=Buffer.isBuffer(r)?r.toString("utf8"):String(r);o.write(s),n+=s;let l=n.split(/\r?\n/);n=l.pop()||"";for(let a of l)i(a)},flush(){n.trim()&&i(n),n=""},lines(){return t.slice()}}}function Af(e,t){let n=new Error(Ef(e,t));return n.logs=Ra(t),n.exitCode=e,n}function Ef(e,t){let n=`fastlane pilot failed with exit code ${e??"unknown"}.`,i=wf(t);return i.length===0?n:`${n}
+`}async function ru(e,t,n="internal",i,r="completed",o,s=!1,a="production"){let l=it();if(!i||i==="*")throw new Error("Android package name is required for Google Play submission.");let d=o!==void 0?` (${o} rollout)`:"";l.start(`Uploading to Google Play ${n} track with ${r} release status${d}...`);try{let c=JSON.parse(q.readFileSync(t,"utf-8"));ou(c);let u=await us({packageName:i,serviceAccount:c,aabPath:e,track:n,releaseStatus:r,userFraction:o,changesNotSentForReview:s});return l.stop(`AAB uploaded to ${n} track (versionCode ${u.versionCode})`),u}catch(c){throw l.stop("Google Play upload failed"),new Error(bu(c,n,i,a))}}function ou(e){if(!e?.client_email||!e?.private_key)throw new Error("Invalid Google service account JSON: missing client_email or private_key.")}function lr(){let e=process.env.HOME||bt.homedir(),t=process.env.FASTLANE_GEM_HOME||ge.join(e,".local/share/fastlane/3.4.0"),n=[process.env.FASTLANE_BIN_DIR,"/usr/local/opt/ruby/bin","/opt/homebrew/opt/ruby/bin","/usr/local/bin","/opt/homebrew/bin","/usr/local/Cellar/fastlane/2.227.0/libexec/bin",ge.join(t,"bin"),process.env.PATH].filter(Boolean).join(":");return{...process.env,PATH:n,GEM_HOME:t,GEM_PATH:[t,"/usr/local/Cellar/fastlane/2.227.0/libexec",process.env.GEM_PATH].filter(Boolean).join(":"),FASTLANE_INSTALLED_VIA_HOMEBREW:"true",FASTLANE_SKIP_UPDATE_CHECK:"1",FASTLANE_HIDE_CHANGELOG:"1",LANG:process.env.LANG||"en_US.UTF-8",LC_ALL:process.env.LC_ALL||"en_US.UTF-8",CI:process.env.CI||"1"}}function su(){let e=lr(),t=gs(e);if(t)return t;if(process.env.MACH_SKIP_FASTLANE_INSTALL!=="1"){au(e);let n=gs(lr());if(n)return n}return{command:"fastlane",env:lr()}}function gs(e){let t=process.env.HOME||bt.homedir(),n=[process.env.FASTLANE_BINARY,"/usr/local/bin/fastlane","/opt/homebrew/bin/fastlane","/usr/local/Cellar/fastlane/2.227.0/libexec/bin/fastlane",ge.join(process.env.FASTLANE_GEM_HOME||ge.join(t,".local/share/fastlane/3.4.0"),"bin/fastlane"),"fastlane"].filter(Boolean);for(let i of n){if(i.includes("/")&&!q.existsSync(i))continue;if(!ht(i,["--version"],{env:e,stdio:"ignore"}).error)return{command:i,env:e}}return null}function au(e){let t=ht("gem",["--version"],{env:e,stdio:"ignore"});if(t.error||t.status!==0)return;let n=process.env.HOME||bt.homedir(),i=process.env.FASTLANE_GEM_HOME||ge.join(n,".local/share/fastlane/3.4.0"),r=ge.join(i,"bin");q.mkdirSync(r,{recursive:!0}),se(V.dim("fastlane not found. Installing fastlane into the local Mach runner cache..."));let o=ht("gem",["install","fastlane","-NV","--install-dir",i,"--bindir",r],{env:{...e,GEM_HOME:i,GEM_PATH:[i,e.GEM_PATH].filter(Boolean).join(":")},stdio:"inherit"});(o.error||o.status!==0)&&se(V.yellow("Automatic fastlane install failed; Mach will try PATH resolution once more."))}function lu(e=Ss){let t=[],n="",i=r=>{let o=vs(r);if(o)for(t.push(o);t.length>e;)t.shift()};return{append(r,o){let s=Buffer.isBuffer(r)?r.toString("utf8"):String(r);o.write(s),n+=s;let a=n.split(/\r?\n/);n=a.pop()||"";for(let l of a)i(l)},flush(){n.trim()&&i(n),n=""},lines(){return t.slice()}}}function du(e,t){let n=new Error(cu(e,t));return n.logs=ws(t),n.exitCode=e,n}function cu(e,t){let n=`fastlane pilot failed with exit code ${e??"unknown"}.`,i=uu(t);return i.length===0?n:`${n}
 
 Fastlane output:
 ${i.join(`
-`)}`}function wf(e){let t=Ra(e);if(t.length===0)return[];let n=Ea(t.filter(vf)),i=If(t);if(i)return[i,...wa(n,Yr-1,ya)];let r=n.length>0?n:t.slice(-Yr);return wa(Ea(r),Yr,ya)}function If(e){let t=e.join(`
-`),n=t.match(/CFBundleShortVersionString\s*\[([^\]]+)\]/i)?.[1]||t.match(/train version ['"]([^'"]+)['"]/i)?.[1];if(/Invalid Pre-Release Train/i.test(t)||/CFBundleShortVersionString[\s\S]*must contain a higher version/i.test(t))return[`App Store Connect rejected CFBundleShortVersionString${n?` ${n}`:""}: this App Store version train is closed or not higher than the approved version.`,'ios.buildNumber="auto" only changes CFBundleVersion; bump the marketing version (Expo app.json "expo.version" / iOS MARKETING_VERSION), rebuild, then submit the new build.'].join(" ");if(!/bundle version must be higher than the previously uploaded version/i.test(t))return null;let i=t.match(/previous(?:ly)?BundleVersion\s*:\s*([0-9.]+)/i)?.[1]||t.match(/previously uploaded version:\s*[‘'"]?([0-9.]+)/i)?.[1];return`App Store Connect rejected CFBundleVersion: the bundle version must be higher than the previously uploaded version.${i?` Previous uploaded build: ${i}.`:""}`}function vf(e){return/\[!\]|ERROR ITMS-\d+|ITMS-\d+|ENTITY_ERROR|previousBundleVersion|CFBundleVersion|Application Loader Error Output|Transporter Error|Transporter transfer failed|Asset validation failed|Validation failed|Error Domain=|The request could not be completed|No suitable application records|Could not|authentication|unauthori[sz]ed|invalid|failed|exception/i.test(e)}function Ea(e){let t=new Set,n=[];for(let i of e){let r=i.trim();!r||t.has(r)||(t.add(r),n.push(i))}return n}function wa(e,t,n){let i=[],r=0;for(let o=e.length-1;o>=0&&i.length<t;o--){let s=e[o],l=r+s.length+1;if(l>n&&i.length>0)break;i.unshift(s.length>n?`${s.slice(0,n-18)}... [truncated]`:s),r=l}return i}function Ra(e){if(!Array.isArray(e))return[];let t=[];for(let n of e){let i=String(n).split(/\r?\n/);for(let r of i){let o=Oa(r);o&&t.push(o)}}return t.slice(-$a)}function Oa(e){return _f($f(e).trimEnd()).trim()}function $f(e){return e.replace(/[\u001b\u009b][[\]()#;?]*(?:(?:(?:[a-zA-Z\d]*(?:;[a-zA-Z\d]*)*)?\u0007)|(?:(?:\d{1,4}(?:;\d{0,4})*)?[\dA-PR-TZcf-nq-uy=><~]))/g,"")}function _f(e){let t=e.replace(/-----BEGIN [^-]+-----[\s\S]*?-----END [^-]+-----/g,"[REDACTED_PRIVATE_KEY]").replace(/(authorization:\s*bearer\s+)[A-Za-z0-9._-]+/ig,"$1[REDACTED]").replace(/((?:password|token|secret|private[_-]?key)\s*[:=]\s*)("[^"]+"|'[^']+'|[^\s,]+)/ig,"$1[REDACTED]");for(let[n,i]of Object.entries(process.env))!i||i.length<8||/(TOKEN|SECRET|PASSWORD|PASS|PRIVATE|CREDENTIAL)/i.test(n)&&(t=t.replace(new RegExp(Pf(i),"g"),"[REDACTED]"));return t}function Pf(e){return e.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}function Rf(e){return e?.code!=="ENOENT"?e:new Error(["fastlane was not found on PATH.","Mach submit uses Fastlane for iOS TestFlight/App Store uploads.","Run iOS submit on a macOS runner with Fastlane, or expose it via FASTLANE_BINARY / FASTLANE_BIN_DIR.","Example: gem install fastlane -NV"].join(`
-`))}function Of(e,t,n,i="production"){let r=e?.message||String(e);if(/changesNotSentForReview/i.test(r))return["Google Play rejected the commit because this change may need explicit review handling.",`Package: ${n||"unknown"} | Track: ${t}`,`Retry with: ${m.nameLower} submit --latest --platform android --profile ${i} --track ${t} --changes-not-sent-for-review`,"Then send the change for review from Google Play Console if required."].join(`
+`)}`}function uu(e){let t=ws(e);if(t.length===0)return[];let n=hs(t.filter(fu)),i=pu(t);if(i)return[i,...ys(n,or-1,ps)];let r=n.length>0?n:t.slice(-or);return ys(hs(r),or,ps)}function pu(e){let t=e.join(`
+`),n=t.match(/CFBundleShortVersionString\s*\[([^\]]+)\]/i)?.[1]||t.match(/train version ['"]([^'"]+)['"]/i)?.[1];if(/Invalid Pre-Release Train/i.test(t)||/CFBundleShortVersionString[\s\S]*must contain a higher version/i.test(t))return[`App Store Connect rejected CFBundleShortVersionString${n?` ${n}`:""}: this App Store version train is closed or not higher than the approved version.`,'ios.buildNumber="auto" only changes CFBundleVersion; bump the marketing version (Expo app.json "expo.version" / iOS MARKETING_VERSION), rebuild, then submit the new build.'].join(" ");if(!/bundle version must be higher than the previously uploaded version/i.test(t))return null;let i=t.match(/previous(?:ly)?BundleVersion\s*:\s*([0-9.]+)/i)?.[1]||t.match(/previously uploaded version:\s*[‘'"]?([0-9.]+)/i)?.[1];return`App Store Connect rejected CFBundleVersion: the bundle version must be higher than the previously uploaded version.${i?` Previous uploaded build: ${i}.`:""}`}function fu(e){return/\[!\]|ERROR ITMS-\d+|ITMS-\d+|ENTITY_ERROR|previousBundleVersion|CFBundleVersion|Application Loader Error Output|Transporter Error|Transporter transfer failed|Asset validation failed|Validation failed|Error Domain=|The request could not be completed|No suitable application records|Could not|authentication|unauthori[sz]ed|invalid|failed|exception/i.test(e)}function hs(e){let t=new Set,n=[];for(let i of e){let r=i.trim();!r||t.has(r)||(t.add(r),n.push(i))}return n}function ys(e,t,n){let i=[],r=0;for(let o=e.length-1;o>=0&&i.length<t;o--){let s=e[o],a=r+s.length+1;if(a>n&&i.length>0)break;i.unshift(s.length>n?`${s.slice(0,n-18)}... [truncated]`:s),r=a}return i}function ws(e){if(!Array.isArray(e))return[];let t=[];for(let n of e){let i=String(n).split(/\r?\n/);for(let r of i){let o=vs(r);o&&t.push(o)}}return t.slice(-Ss)}function vs(e){return gu(mu(e).trimEnd()).trim()}function mu(e){return e.replace(/[\u001b\u009b][[\]()#;?]*(?:(?:(?:[a-zA-Z\d]*(?:;[a-zA-Z\d]*)*)?\u0007)|(?:(?:\d{1,4}(?:;\d{0,4})*)?[\dA-PR-TZcf-nq-uy=><~]))/g,"")}function gu(e){let t=e.replace(/-----BEGIN [^-]+-----[\s\S]*?-----END [^-]+-----/g,"[REDACTED_PRIVATE_KEY]").replace(/(authorization:\s*bearer\s+)[A-Za-z0-9._-]+/ig,"$1[REDACTED]").replace(/((?:password|token|secret|private[_-]?key)\s*[:=]\s*)("[^"]+"|'[^']+'|[^\s,]+)/ig,"$1[REDACTED]");for(let[n,i]of Object.entries(process.env))!i||i.length<8||/(TOKEN|SECRET|PASSWORD|PASS|PRIVATE|CREDENTIAL)/i.test(n)&&(t=t.replace(new RegExp(hu(i),"g"),"[REDACTED]"));return t}function hu(e){return e.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}function yu(e){return e?.code!=="ENOENT"?e:new Error(["fastlane was not found on PATH.","Mach submit uses Fastlane for iOS TestFlight/App Store uploads.","Run iOS submit on a macOS runner with Fastlane, or expose it via FASTLANE_BINARY / FASTLANE_BIN_DIR.","Example: gem install fastlane -NV"].join(`
+`))}function bu(e,t,n,i="production"){let r=e?.message||String(e);if(/changesNotSentForReview/i.test(r))return["Google Play rejected the commit because this change may need explicit review handling.",`Package: ${n||"unknown"} | Track: ${t}`,`Retry with: ${m.nameLower} submit --latest --platform android --profile ${i} --track ${t} --changes-not-sent-for-review`,"Then send the change for review from Google Play Console if required."].join(`
 `);if(/caller does not have permission|permission denied|insufficient permissions|not authorized/i.test(r))return["Google Play rejected the service account permissions.",`Package: ${n||"unknown"} | Track: ${t}`,"Grant this service account access to the app in Play Console with release permissions, then retry."].join(`
 `);if(/package.*not found|application.*not found|no application was found/i.test(r))return["Google Play could not find this package for the selected service account.",`Package: ${n||"unknown"} | Track: ${t}`,"Check android.package / submit.<profile>.android.package and make sure the app exists in this Play Console account."].join(`
 `);if(/only releases with status draft|draft app/i.test(r))return["Google Play requires a draft release for this app state.",`Package: ${n||"unknown"} | Track: ${t}`,`Retry with: ${m.nameLower} submit --latest --platform android --profile ${i} --track ${t} --release-status draft`].join(`
 `);if(r.includes("does not allow any existing users to upgrade"))return["Google Play rejected this release because the uploaded AAB is not an upgrade for existing users.",`Package: ${n||"unknown"} | Track: ${t}`,"Build a new Android artifact with a higher versionCode, then submit that build.",`Recommended: ${m.nameLower} build --platform android --profile ${i} --auto-version`,`Then: ${m.nameLower} submit --latest --platform android --profile ${i} --track ${t}`].join(`
 `);if(/version code \d+ has already been used/i.test(r))return[r.match(/version code \d+ has already been used[^\n]*/i)?.[0]||"Version code has already been used.",`Package: ${n||"unknown"} | Track: ${t}`,"Build a new Android artifact with a higher versionCode, then submit that build.",`Recommended: ${m.nameLower} build --platform android --profile ${i} --auto-version`].join(`
-`);let o=r.match(/Google Api Error:[^\n]+/)||r.match(/Google Play API Error:[^\n]+/);return o?o[0]:r||"Google Play submission failed"}function Cf(e){try{ae.existsSync(e)&&ae.rmSync(e,{recursive:!0,force:!0})}catch{}}function me(e){console.log(ie.red(`\u274C ${e}`))}function $e(e){console.log(ie.gray(`\u2022 ${e}`))}function io(e){console.log(ie.green(`\u2713 ${e}`))}var so=8,xf=6,Ta=Number(process.env.MACH_ARTIFACT_UPLOAD_MAX_ATTEMPTS||2),ao=Number(process.env.MACH_ARTIFACT_UPLOAD_TIMEOUT_MS||12e4),lo="ap-south-1",Nf=`${m.envPrefix}S3_DEBUG`,Tf=()=>["1","true","yes","on"].includes(String(process.env[Nf]||"").trim().toLowerCase()),po=(e,t)=>{if(Tf()&&t)try{let n=new URL(t);D.info(k.dim(`[S3_DEBUG] ${e} host=${n.hostname} expectedRegion=${lo}`)),n.hostname.includes(lo)||D.warn(k.yellow(`[S3_DEBUG] ${e} host ${n.hostname} does not include ${lo}`))}catch(n){D.warn(k.yellow(`[S3_DEBUG] Could not parse ${e} presigned URL host: ${n.message}`))}},La=new Set([".git",".gradle",".idea",".mach-cache",".expo",".turbo",".yarn/cache","build","builds","coverage","dist","node_modules",`${m.nameLower}_cli`,`.${m.nameLower}_cli`]),Lf=new Set(["android/.gradle","android/.cxx","android/app/.cxx","android/app/build","android/build","ios/Pods","ios/build","ios/DerivedData"]),Mf=[{value:"production",label:"production",hint:"Store / release build"},{value:"staging",label:"staging",hint:"Internal testing build"},{value:"development",label:"development",hint:"Development build"}],Ja=e=>new Promise(t=>setTimeout(t,e)),qa=e=>e.split(_e.sep).filter(Boolean).join("/"),Uf=(e,t)=>{let n=qa(e),i=n.split("/")[0];return n?!!(La.has(n)||La.has(i)||Lf.has(n)||t==="ios"&&i==="android"||t==="android"&&i==="ios"):!1},Ff=(e,t,n)=>{let i=0,r=new Set,o=(s,l)=>{let a=qa(l);if(Uf(a,n)){r.add(a.split("/")[0]||a);return}let c=ge.lstatSync(s);if(!c.isSymbolicLink()){if(c.isDirectory()){for(let u of ge.readdirSync(s))o(_e.join(s,u),_e.join(l,u));return}if(c.isFile()){let u=_e.dirname(a);e.addLocalFile(s,u==="."?void 0:u,_e.basename(a)),i++}}};for(let s of ge.readdirSync(t))o(_e.join(t,s),s);return{files:i,skipped:Array.from(r).sort()}},jf=e=>!e.yes&&!e.failOnly&&!e.buildId&&process.stdin.isTTY&&process.stdout.isTTY,Bf=e=>{if(!e||typeof e!="object")return;let t=[e.distribution?`distribution: ${e.distribution}`:void 0,e.environment?`env: ${e.environment}`:void 0,e.developmentClient?"development client":void 0,e.simulator?"simulator":void 0].filter(Boolean);return t.length>0?t.join(", "):void 0},Hf=()=>{let e=we(`./${m.configFileName}`),t=e?.build&&typeof e.build=="object"?e.build:{},n=Object.keys(t);return n.length===0?Mf:n.map(i=>({value:i,label:i,hint:Bf(t[i])}))},Gf=async e=>{let t=jf(e);if(!e.platform&&t){let n=await Ca({message:"Select platform",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"}]});ki(n)&&(ka("Build cancelled."),process.exit(0)),e.platform=n}if(!e.buildProfile&&t){let n=Hf(),i=await Ca({message:"Select build profile",options:n,initialValue:n.find(r=>r.value==="production")?.value||n[0]?.value});ki(i)&&(ka("Build cancelled."),process.exit(0)),e.buildProfile=i}e.buildProfile||(e.buildProfile="production")},Ma=e=>{if(e===!0||e===!1)return e;if(e===1||e==="1")return!0;if(e===0||e==="0")return!1;if(typeof e!="string")return;let t=e.trim().toLowerCase();if(["true","yes","on"].includes(t))return!0;if(["false","no","off"].includes(t))return!1},Ya=(e,t)=>{if(e)for(let n of t){let i=n.replace(/[.*+?^${}()|[\]\\]/g,"\\$&"),r=e.match(new RegExp(`(?:^|\\s)${i}(?:=|\\s+)([^\\s]+)`));if(r?.[1])return r[1].replace(/^["']|["']$/g,"")}},Vf=(e,t)=>!!e&&t.some(n=>new RegExp(`(?:^|\\s)${n.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}(?:\\s|$)`).test(e)),Kf=e=>{let n=Ya(e,["--platform"])||e?.split(/\s+/).find(i=>i==="ios"||i==="android");return n==="ios"||n==="android"?n:void 0},zf=async e=>{if(!(!e.projectId||!e.buildId))try{let t=await O.get(`/builds/${e.projectId}/${e.buildId}`),n=t.data?.build||t.data;if(!n||typeof n!="object")return;let i=typeof n.buildArgs=="string"?n.buildArgs:void 0;if(!e.platform){let r=n.platform||Kf(i);(r==="ios"||r==="android")&&(e.platform=r)}if(e.buildProfile||(e.buildProfile=n.buildProfile||n.profile||n.profileName||Ya(i,["--profile","--build-profile","-p"])),e.simulator===void 0){let r=Ma(n.simulator??n.isSimulator);r!==void 0?e.simulator=r:Vf(i,["--simulator"])&&(e.simulator=!0)}if(e.developmentClient===void 0){let r=Ma(n.developmentClient??n.devClient);r!==void 0&&(e.developmentClient=r)}}catch(t){D.warn(k.yellow(`Could not load saved build options for runner: ${t.message}`))}},Wf=e=>{if(!Number.isFinite(e)||e<=0)return"0 B";let t=["B","KB","MB","GB"],n=Math.min(Math.floor(Math.log(e)/Math.log(1024)),t.length-1);return`${(e/Math.pow(1024,n)).toFixed(n===0?0:1)} ${t[n]}`},Jf=e=>{let t=e.response?.status,n=e.code||"",i=e.message||"";return t?t===408||t===409||t===425||t===429||t>=500||/ECONNRESET|ETIMEDOUT|EAI_AGAIN|ENOTFOUND|ECONNABORTED|socket hang up|network|timeout/i.test(`${n} ${i}`):!0},Oi=async(e,t,n=xf)=>{let i;for(let r=1;r<=n;r++)try{return await t()}catch(o){if(i=o,!Jf(o)||r>=n)break;let s=Math.min(6e4,2e3*Math.pow(2,r-1)),l=o.response?.status||o.code||o.message||"network error";D.warn(k.yellow(`${e} failed transiently (${l}). Retrying in ${Math.round(s/1e3)}s... (${r}/${n})`)),await Ja(s)}throw i},qf=async(e,t,n)=>{let i=_e.basename(e),r=ge.statSync(e).size,o=Math.round(ao/1e3);po(`ARTIFACT_UPLOAD ${i}`,t);try{await Oi(`Upload artifact ${i}`,async()=>{let s=new AbortController,l=ge.createReadStream(e),a=setTimeout(()=>{l.destroy(new Error(`Artifact upload timed out after ${o}s`)),s.abort()},ao);try{await Di.put(t,l,{headers:{"Content-Type":n,"Content-Length":r,Connection:"close"},maxBodyLength:1/0,maxContentLength:1/0,timeout:ao,timeoutErrorMessage:`Artifact upload timed out after ${o}s`,signal:s.signal})}finally{clearTimeout(a)}},Ta)}catch(s){throw new Error(`${i} (${Wf(r)}) failed after ${Ta} upload attempt(s): ${s.message||s}`)}return r},Yf=e=>{let t=e.response?.status;return t?t===408||t===429||t>=500:!0},Vn=e=>e.credentialId||e.id,Xf=async(e,t)=>{let n=Vn(e);if(!n)return e.downloadUrl;let i=await O.get(`/credentials/${n}/download`,{params:{projectId:t,format:"raw"}});return i.data?.status==="success"&&i.data?.downloadUrl?i.data.downloadUrl:e.downloadUrl},Zf=async(e,t)=>{let n=e.downloadUrl;for(let i=1;i<=so;i++)try{if((!n||i>1)&&(n=await Xf(e,t)),!n)throw new Error(`Credential ${e.name||Vn(e)||"unknown"} has no download URL.`);let r=await Di.get(n,{responseType:"arraybuffer",timeout:6e4,maxContentLength:1/0,maxBodyLength:1/0,headers:{Connection:"close"}});return Buffer.from(r.data).toString("base64")}catch(r){if(i>=so||!Yf(r))throw r;let o=Math.min(1500*i*i,15e3);D.warn(k.dim(`  - Temporary network error downloading ${e.name}. Retrying... (${i}/${so})`)),await Ja(o)}throw new Error(`Failed to download credential ${e.name||Vn(e)||"unknown"}.`)},Qf=(e,t)=>t?.ios?.buildNumber??t?.iosBuildNumber??e?.ios?.buildNumber??e?.expo?.ios?.buildNumber,em=(e,t)=>t?.android?.versionCode??t?.androidVersionCode??e?.android?.versionCode??e?.expo?.android?.versionCode,Ua=(e,t,n,i)=>e==="ios"?t.iosBundleIdentifier||n?.ios?.bundleIdentifier||n?.expo?.ios?.bundleIdentifier||i:t.androidPackage||n?.android?.package||n?.expo?.android?.package||n?.name||i,Fa=async(e,t,n)=>{let i=await O.post(`/projects/${e}/next-build-number`,{platform:t,scope:n});if(i.data.status!=="success"||!i.data.buildNumber)throw new Error(i.data.message||"Dashboard did not return a build number.");return String(i.data.buildNumber)},Gn=e=>{let t={};return e.platform==="ios"&&e.resolvedBuildNumber&&(t.buildNumber=e.resolvedBuildNumber),e.platform==="android"&&e.resolvedVersionCode&&(t.versionCode=e.resolvedVersionCode),t},tm=e=>typeof e=="string"&&e.trim().toLowerCase()==="auto",Xa=(e,t,n=[])=>{if(!ge.existsSync(e))return n;let i;try{i=ge.readdirSync(e,{withFileTypes:!0})}catch{return n}for(let r of i){if(r.name==="Pods"||r.name==="build"||r.name==="DerivedData")continue;let o=_e.join(e,r.name);r.isDirectory()?Xa(o,t,n):r.name===t&&n.push(o)}return n},nm=(e,t,n)=>{let i=`${n} ${t.environment||""}`.toLowerCase(),r=e.toLowerCase(),o=0;return(i.includes("development")||i.includes("dev"))&&/(^|[.-])dev(elopment)?($|[.-])/.test(r)&&(o+=20),(i.includes("staging")||i.includes("stage"))&&/(^|[.-])stag(e|ing)?($|[.-])/.test(r)&&(o+=20),(i.includes("production")||i.includes("prod"))&&(/(^|[.-])(dev|development|stag|stage|staging)($|[.-])/.test(r)||(o+=20)),o},im=(e,t)=>{let n=_e.resolve(process.cwd(),ge.existsSync("ios")?"ios":"."),i=Xa(n,"project.pbxproj"),r=[];for(let o of i)try{let l=ge.readFileSync(o,"utf8").matchAll(/PRODUCT_BUNDLE_IDENTIFIER\s*=\s*"?([^";\s]+)"?;/g);for(let a of l){let c=a[1]?.trim();c&&!c.includes("$")&&!c.startsWith("com.apple.")&&!r.includes(c)&&r.push(c)}}catch{}if(r.length!==0)return r.length===1?r[0]:r.map(o=>({bundleId:o,score:nm(o,e,t)})).sort((o,s)=>s.score-o.score)[0]?.bundleId},Ci=e=>String(e||"").trim().toLowerCase().replace(/_/g,"-"),xi=(e,t)=>{let n=Ci(e);return t==="ios"&&(n==="internal"||n==="ad-hoc")?"adhoc":t==="android"&&["internal","adhoc","ad-hoc","development","dev","staging","stage"].includes(n)?"internal":n},ja=(e,t,n)=>{let i=xi(e.distributionType||e.meta?.distributionType,n);return i?i===xi(t,n):!0},Ba=(e,t,n)=>{let i=xi(e.distributionType||e.meta?.distributionType,n),r=xi(t,n);return i?i===r?3:n==="android"&&r!=="store"&&i!=="store"?2:0:1},rm=e=>{let t=e.toLowerCase();return t==="development"||t==="dev"||t.startsWith("development-")||t.startsWith("dev-")||t.endsWith("-development")||t.endsWith("-dev")},om=e=>{let t=e.toLowerCase();return t.includes("staging")||t.includes("stage")||t.includes("preview")||t.includes("adhoc")||t.includes("ad-hoc")},sm=(e,t)=>{let n=Ci(e.distribution),i=Ci(e.iosExportMethod),r=Ci(e.environment);return e.platform!=="ios"?n==="store"?"store":"internal":e.developmentClient||e.simulator?"development":i==="app-store"||n==="store"?"store":i==="development"||n==="development"?"development":i==="ad-hoc"||i==="adhoc"||n==="ad-hoc"||n==="adhoc"||n==="internal"?"adhoc":r==="production"||r==="store"?"store":r==="development"||r==="dev"?"development":r==="staging"||r==="stage"||r==="preview"?"adhoc":t.toLowerCase()==="production"||t.toLowerCase().includes("store")?"store":rm(t)?"development":(om(t),"adhoc")},Za=e=>e.bundleId||e.bundleIdentifier||e.packageName||e.meta?.bundleId||e.meta?.bundleIdentifier||e.meta?.packageName,Ha=(e,t)=>{if(!t)return!0;let n=Za(e);return!n||n==="*"||n===t},Ga=(e,t)=>{let n=Za(e);return!t||!n?0:n===t?2:n==="*"?1:-1},Qa=e=>{try{let t=Buffer.from(e,"base64").toString("utf8"),n=t.match(/<key>application-identifier<\/key>\s*<string>([^<]+)<\/string>/)?.[1]?.trim();if(!n)return;let i=t.match(/<key>TeamIdentifier<\/key>\s*<array>\s*<string>([^<]+)<\/string>/)?.[1]?.trim();if(i&&n.startsWith(`${i}.`))return n.slice(i.length+1);let r=n.indexOf(".");return r>=0?n.slice(r+1):n}catch{return}},am=(e,t)=>{if(e===t||e==="*")return!0;if(e.endsWith(".*")){let n=e.slice(0,-2);return t.startsWith(`${n}.`)}return!1},lm=(e,t)=>{if(!t)return!0;let n=Qa(e);if(n)return am(n,t);try{return Buffer.from(e,"base64").toString("latin1").includes(t)}catch{return!0}},Ni=async e=>{if(e.failOnly){(!e.projectId||!e.buildId)&&(D.error(k.red("--project-id and --build-id are required with --fail-only.")),process.exit(1));let l=e.error||"Build runner failed before it could report a final status.";try{await O.patch(`/builds/${e.projectId}/${e.buildId}`,{status:"failed",error:l,endTime:Date.now()}),D.info(k.yellow(`Marked build ${e.buildId} as failed.`));return}catch(a){D.error(k.red(`Could not mark build failed: ${a.message}`)),process.exit(1)}}await zf(e),await Gf(e),e.platform!=="android"&&e.platform!=="ios"&&(D.error(`Platform ${e.platform} is not supported. Use 'android' or 'ios'.`),process.exit(1)),e.autoSubmit&&e.platform==="ios"&&e.simulator&&(D.error(k.red("--auto-submit cannot be used with --simulator because simulator builds are not App Store artifacts.")),process.exit(1)),e.autoSubmit&&e.dryRun&&D.warn(k.yellow("--auto-submit is ignored during --dry-run."));let t=uo(),n=e.buildId||Df(),i=e.projectId,r=Date.now(),o=!!i,s=async l=>{if(i)try{await O.patch(`/builds/${i}/${n}`,{status:"failed",error:l,endTime:Date.now()})}catch{}};if(e.local&&e.buildId){e.quiet||t.start(`Preparing isolated workspace for build: ${e.buildId}`);try{let l=await O.get(`/builds/${i}/${e.buildId}/source-url`);if(l.data.status!=="success")throw new Error("Failed to get source download URL from API");po("SOURCE_DOWNLOAD",l.data.downloadUrl);let a=await Di.get(l.data.downloadUrl,{responseType:"stream"}),c=(i||e.projectId||"default").replace(/[^a-zA-Z0-9-_]/g,"_"),u=_e.join(kf.homedir(),m.workspacesDir,c);ge.mkdirSync(u,{recursive:!0});let d=new Set(["node_modules",`.${m.nameLower}-cache-meta`]),p=new Set(["Pods"]);if(ge.existsSync(u)){let b=ge.readdirSync(u);for(let y of b){if(d.has(y))continue;if(y==="ios"){let v=_e.join(u,"ios");try{let F=ge.readdirSync(v);for(let H of F)if(!p.has(H))try{ge.rmSync(_e.join(v,H),{recursive:!0,force:!0})}catch{}}catch{}continue}let P=_e.join(u,y);try{ge.rmSync(P,{recursive:!0,force:!0})}catch{}}}let f=_e.join(u,"source.zip"),g=a.data,h=ge.createWriteStream(f);await new Promise((b,y)=>{g.pipe(h),g.on("error",P=>y(P)),h.on("finish",()=>b())}),new Na(f).extractAllTo(u,!0);try{ge.unlinkSync(f)}catch{}process.chdir(u),D.info(k.green(`\u2713 Persistent workspace ready: ${u}`)),D.info(k.dim(`  \u{1F4E6} Cached dirs preserved: node_modules=${ge.existsSync(_e.join(u,"node_modules"))?"\u2705":"\u274C"}, Pods=${ge.existsSync(_e.join(u,"ios","Pods"))?"\u2705":"\u274C"}`)),t.stop()}catch(l){t.stop(`Failed to prepare isolated workspace: ${l.message}`),i&&await s(`Setup Error: ${l.message}`),process.exit(1)}}try{let l=e.repo;if(!l)try{l=xa("git config --get remote.origin.url").toString().trim()}catch{D.warn("Could not detect git repository URL.")}!l&&e.dryRun,l||(l="https://github.com/placeholder/repo.git"),D.info(`Build ID: ${k.cyan(n)}`);let a={},c={},u=null,d=we(`./${m.configFileName}`);if(d||(D.error(k.red(`${m.configFileName} not found. Run \`${m.nameLower} init\` or \`${m.nameLower} link\` first.`)),process.exit(1)),d){u=d;let I=On(d);e.framework=I,i=d.projectId;let _=e.buildProfile||"production",M=He(d,_);!M&&e.buildProfile&&(D.error(`Build profile '${_}' not found in ${m.configFileName}`),process.exit(1));let x=M||{};process.env.MACH_DEBUG&&D.info(k.dim(`Framework: ${I} | Build profile: ${_} | Platform: ${e.platform} | Distribution: ${x.distribution||"store"} | Environment: ${x.environment||_}`)),x.env&&(c=x.env,D.info(k.blue(`Use Build Profile: ${_}`)));let E=e.platform,A=x[E]||{},N=["developmentClient","simulator","distribution","buildCommand","apk","iosScheme","preBuild","postBuild","scheme","environment","androidPackage","iosBundleIdentifier","name","iosDeploymentTarget","iosApiKeyId","iosApiKeyIssuer","iosApiKeyPath","iosTeamId","iosConfiguration","iosExportMethod","branch","repo","instanceType","ami","bucket","region","nodeVersion"];e.name=d.name,e.appName=d.name,e.androidPackage=d.android?.package,e.iosBundleIdentifier=d.ios?.bundleIdentifier,e.iosScheme=d.ios?.iosScheme,!e.nodeVersion&&d.nodeVersion&&(e.nodeVersion=d.nodeVersion);let U=Q=>Q==="androidPackage"?A.androidPackage??A.package??x.androidPackage??x.android?.package:Q==="iosBundleIdentifier"?A.iosBundleIdentifier??A.bundleIdentifier??x.iosBundleIdentifier??x.ios?.bundleIdentifier:A[Q]!==void 0?A[Q]:x[Q];for(let Q of N){let R=U(Q),oe=Q==="androidPackage"||Q==="iosBundleIdentifier";R!==void 0&&(e[Q]===void 0||oe)&&(e[Q]=R)}if(e.platform==="ios"&&!(A.iosBundleIdentifier??A.bundleIdentifier??x.iosBundleIdentifier??x.ios?.bundleIdentifier)){let R=im(e,_);R&&R!==e.iosBundleIdentifier&&(D.warn(k.yellow(`Detected native iOS bundle identifier ${R}; using it for credential lookup. Set build.${_}.ios.bundleIdentifier to make this explicit.`)),e.iosBundleIdentifier=R)}e.branch=e.branch||"main",e.iosConfiguration=e.iosConfiguration||(e.developmentClient?"Debug":"Release"),e.sshUser=e.sshUser||process.env.USER||"ubuntu",e.simulator===void 0&&(e.simulator=!1),e.local===void 0&&(e.local=!1),e.verbose===void 0&&(e.verbose=!1),D.info(k.dim(`Resolved build config: framework=${I}, profile=${_}, platform=${e.platform}, simulator=${e.platform==="ios"?String(!!e.simulator):"n/a"}, developmentClient=${String(!!e.developmentClient)}, distribution=${e.distribution||x.distribution||"store"}, iosConfiguration=${e.platform==="ios"?e.iosConfiguration||"Release":"n/a"}`));let K=Q=>{if(!Q)return Q;if(Q.startsWith("scripts.")){let R=Q.split(".")[1],oe=d.scripts?.[R];if(oe)return oe;D.warn(`Script reference not found: ${Q}`)}return Q};e.buildCommand=K(e.buildCommand),e.preBuild=K(e.preBuild),e.postBuild=K(e.postBuild),!e.scheme&&d.scheme&&(e.scheme=d.scheme);let z={...ln(d,m.envPrefix),...ln(x,`${m.envPrefix}PROFILE_`)};a={...a,...c,...z},process.env.IOS_P12_PASSWORD&&!a.IOS_P12_PASSWORD&&(a.IOS_P12_PASSWORD=process.env.IOS_P12_PASSWORD),process.env.MATCH_PASSWORD&&!a.MATCH_PASSWORD&&(a.MATCH_PASSWORD=process.env.MATCH_PASSWORD),e.platform==="ios"&&(!e.iosTeamId&&x.ios?.appleTeamId&&(e.iosTeamId=x.ios.appleTeamId),!e.iosTeamId&&d.submit?.[_]?.ios?.appleTeamId&&(e.iosTeamId=d.submit[_].ios.appleTeamId),!e.iosTeamId&&d.submit?.production?.ios?.appleTeamId&&(D.warn(k.yellow(`Check: Using 'production' Team ID for '${_}' build.`)),e.iosTeamId=d.submit.production.ios.appleTeamId),e.iosTeamId?D.info(k.magenta(`\u2713 Injected iOS Team ID from config: ${e.iosTeamId}`)):e.simulator||D.warn(k.yellow("\u26A0\uFE0F No iOS Team ID found. Device or archive signing may fail unless managed iOS credentials provide the team automatically.")))}let p="unknown";try{p=xa("git rev-parse --abbrev-ref HEAD").toString().trim()}catch{D.warn("Failed to detect git branch.")}let f="1.0.0";try{ge.existsSync("./package.json")&&(f=JSON.parse(ge.readFileSync("./package.json","utf-8")).version||"1.0.0")}catch{}let g=e.buildProfile||"production",h=Ln(d,{framework:e.framework,platform:e.platform}),S="Internal";e.developmentClient?S="DevelopmentClient":g.toLowerCase().includes("store")||g.toLowerCase()==="production"?S="Store":g.toLowerCase().includes("preview")||g.toLowerCase().includes("staging")?S="Staging":(g.toLowerCase().includes("development")||g.toLowerCase().includes("dev"))&&(S="Development");let b=e.platform==="ios"?"iOS":"Android",y=e.platform==="ios"&&e.simulator?" (Simulator)":"",P=`${b}${y} v${f} (${S})`;if(Ti(e,{status:"created",projectId:i,buildId:n,platform:e.platform,profile:g,branch:p,version:f,runtimeVersion:h,...Gn(e),buildType:S,developmentClient:!!e.developmentClient,summary:P}),i){try{let I=e.buildProfile||"production",_=e.environment||I;D.info(k.blue(`Fetching managed secrets for profile: ${I} (environment: ${_})...`));let x=(await O.get(`/projects/${i}/secrets/export?env=${_}`)).data;x.status==="success"&&x.secrets&&(a={...a,...x.secrets},Object.keys(x.secrets).length>0&&D.info(k.magenta(`\u2713 Injected ${Object.keys(x.secrets).length} secrets from Dashboard.`)))}catch(I){D.warn(`Failed to load managed secrets from Dashboard: ${I.message}`)}if(e.platform==="ios"&&e.simulator)D.info(k.dim("Skipping managed iOS signing credentials for simulator build."));else try{D.info(k.blue("Fetching managed credentials..."));let I=sm(e,g),_=e.platform==="ios"?e.iosBundleIdentifier:e.androidPackage,M=e.platform==="ios"?"bundle":"package";D.info(k.dim(`  Credential target: ${M} ${_||"not set"} (${I})`));let x=await O.get("/credentials/resolve",{params:{projectId:i,platform:e.platform,bundleId:_,distributionType:I,teamId:e.platform==="ios"?e.iosTeamId:void 0}});if(x.data.status==="success"&&x.data.credentials){let E=x.data.credentials;D.info(k.magenta(`\u2713 Found ${E.length} relevant credentials.`));let A=E.filter(R=>e.platform==="ios"&&R.type==="ios_profile"?ja(R,I,e.platform)?Ha(R,_):!1:e.platform==="android"&&R.type==="android_keystore"?Ha(R,_):!!ja(R,I,e.platform)).sort((R,oe)=>{let be=Ga(oe,_)*10+Ba(oe,I,e.platform)-(Ga(R,_)*10+Ba(R,I,e.platform));return be!==0?be:(oe.createdAt||0)-(R.createdAt||0)});D.info(k.dim(`  Filtered to ${A.length} credentials for distributionType: ${I}`));let N=!1,U=!1,K=!1,z=[];for(let R of A)if(!(R.type==="ios_cert"&&N||R.type==="ios_profile"&&U||R.type==="android_keystore"&&K)&&["ios_cert","ios_profile","android_keystore"].includes(R.type)&&(R.downloadUrl||Vn(R)))try{let be=await Zf(R,i);if(R.type==="ios_cert"&&!N)a.IOS_DIST_P12=be,R.password?(a.IOS_P12_PASSWORD=R.password,D.info(k.dim(`  - Injected ${R.name} as IOS_DIST_P12 with password from credential record`))):D.info(k.dim(`  - Injected ${R.name} as IOS_DIST_P12`)),N=!0;else if(R.type==="ios_profile"&&!U){if(!lm(be,_)){let ee=Qa(be)||"unknown";throw new Error(`Provisioning profile ${R.name||Vn(R)||"unknown"} is for a different bundle ID. Expected ${_}, found ${ee}. Upload a ${I} profile for ${_}.`)}a.IOS_PROVISIONING_PROFILE=be,D.info(k.dim(`  - Injected ${R.name} as IOS_PROVISIONING_PROFILE`)),U=!0}else if(R.type==="android_keystore"&&!K){a.ANDROID_KEYSTORE_BASE64=be;let ee=R.keystorePassword||R.password,X=R.keyPassword||R.keystorePassword||R.password,ye=R.alias||R.meta?.alias;if(ee)a.ANDROID_STORE_PASSWORD=ee,D.info(k.dim("  - Injected keystore password from credential record"));else{let ve=["ANDROID_STORE_PASSWORD",...[I==="store"?"PRODUCTION":I==="internal"||I==="adhoc"?"STAGING":"DEVELOPMENT",I.toUpperCase(),"PRODUCTION","STORE","INTERNAL","STAGING","RELEASE","DEBUG"].map(Se=>`KEYSTORE_PASSWORD_${Se}`),"KEYSTORE_PASSWORD"].find(Se=>!!a[Se]);ve&&a[ve]&&(a.ANDROID_STORE_PASSWORD=a[ve])}if(X?(a.ANDROID_KEY_PASSWORD=X,D.info(k.dim("  - Injected key password from credential record"))):a.ANDROID_KEY_PASSWORD=a.ANDROID_STORE_PASSWORD||"",ye)a.ANDROID_KEY_ALIAS=ye;else{let W=["ANDROID_KEY_ALIAS","KEYSTORE_ALIAS"].find(de=>!!a[de]);W&&(a.ANDROID_KEY_ALIAS=a[W])}D.info(k.dim(`  - Injected ${R.name} as ANDROID_KEYSTORE_BASE64`)),K=!0}}catch(be){z.push(`${R.name||R.type}: ${be.message}`)}let Q=e.platform==="ios"?e.simulator||N&&U:K||!A.some(R=>R.type==="android_keystore");if(z.length>0&&!Q)throw new Error(`Credential setup failed:
-${z.map(R=>`- ${R}`).join(`
-`)}`);z.length>0&&D.warn(k.dim(`  Skipped ${z.length} stale or unusable credential(s).`))}if(e.platform==="ios"&&!e.simulator){let E=e.buildProfile||"production",A=He(d,E)||{},N=Qf(d,A),U=tm(N),K=e.distribution!==void 0?e.distribution==="store":S==="Store",z=N===void 0&&K;if(e.autoVersion||U||z){t.start("Assigning iOS buildNumber from Mach counter...");try{let R=Ua("ios",e,d,E),oe=await Fa(i,"ios",R);a.BUILD_NUMBER=oe,a.CURRENT_PROJECT_VERSION=oe,a.MACH_IOS_BUILD_NUMBER_LOCKED="1",e.resolvedBuildNumber=oe,t.stop(`\u2713 Assigned iOS buildNumber ${k.green(oe)} (${R})`)}catch(R){throw t.stop("iOS buildNumber assignment failed"),new Error(`Auto-versioning failed: ${R.response?.data?.message||R.message}`)}}}if(e.platform==="android"){let E=e.buildProfile||"production",A=He(d,E)||{},N=em(d,A),U=N==="auto",K=e.distribution!==void 0?e.distribution==="store":S==="Store",z=N===void 0&&K;if(e.autoVersion||U||z){t.start("Assigning Android versionCode from Mach counter...");try{let R=Ua("android",e,d,E),oe=await Fa(i,"android",R);a.ANDROID_VERSION_CODE=oe,e.resolvedVersionCode=oe,t.stop(`\u2713 Assigned Android versionCode ${k.green(oe)} (${R})`)}catch(R){throw t.stop("Android versionCode assignment failed"),new Error(`Auto-versioning failed: ${R.response?.data?.message||R.message}`)}}}if(h=Ln(d,{framework:e.framework,platform:e.platform,iosBuildNumber:e.resolvedBuildNumber||a.BUILD_NUMBER,androidVersionCode:e.resolvedVersionCode||a.ANDROID_VERSION_CODE}),d.ota?.enabled){if(d.ota.engine==="mach-react-native")throw new Error("This project still uses the unfinished mach-react-native OTA engine. Run `mach ota setup` to migrate to expo-updates before building.");if(!d.ota.url)throw new Error("OTA is enabled but ota.url is missing. Run `mach ota setup` before building.");let E=d.ota.channel||"production";if(e.framework==="expo"){let A=Tn(process.cwd(),{platform:e.platform,runtimeVersion:h,channel:E,url:d.ota.url}),N=[A?.runtimeVersion!==h?`runtime ${A?.runtimeVersion||"missing"} (expected ${h})`:void 0,A?.channel!==E?`channel ${A?.channel||"missing"} (expected ${E})`:void 0,A?.url!==d.ota.url?`URL ${A?.url||"missing"} (expected ${d.ota.url})`:void 0].filter(Boolean);if(N.length>0)throw new Error(`Expo OTA configuration mismatch: ${N.join("; ")}. Run \`${m.nameLower} ota setup\` to update the local Expo plugin before building.`)}a.MACH_OTA_RUNTIME_VERSION=h,a.MACH_OTA_CHANNEL=E,a.MACH_OTA_URL=d.ota.url}if(e.platform==="ios"&&!e.simulator){let E=!!a.IOS_DIST_P12,A=!!a.IOS_PROVISIONING_PROFILE;if(!E||!A){let N=[...E?[]:["Distribution Certificate"],...A?[]:["Provisioning Profile"]].join(" and ");if(e.local&&e.buildId)throw new Error(`Missing iOS credentials: ${N}. Expected ${I} credentials for ${_||"the selected bundle ID"}. Run \`${m.nameLower} credentials --platform ios --profile ${g}\` and select ${_||"the correct bundle ID"}.`);D.error(k.red(`Missing iOS credentials: ${N}`)),e.quiet&&process.exit(1);let U=e.yes||await Da({message:"Would you like to generate these credentials now?",initialValue:!0});if(U&&!ki(U))return await Cn({platform:"ios",profile:g}),e.quiet||D.info(k.green("\u2713 Credentials setup complete! Restarting build phase...")),Ni(e);e.quiet||D.info(k.yellow(`Run \`${m.nameLower} credentials\` to set up signing credentials manually.`)),process.exit(1)}}if(e.platform==="android"&&!e.developmentClient&&(e.distribution==="internal"||e.distribution==="store")&&!(!!a.ANDROID_KEYSTORE_BASE64||!!a.ANDROID_KEYSTORE)){D.error(k.red("Missing Android credentials: Signing Keystore")),e.quiet&&process.exit(1);let A=e.yes||await Da({message:"Would you like to automatically create and upload an Android Keystore for this profile now?",initialValue:!0});if(A&&!ki(A))return await Cn({platform:"android",profile:g}),e.quiet||D.info(k.green("\u2713 Android Keystore setup complete! Restarting build phase...")),Ni(e);e.quiet||D.info(k.yellow(`Run \`${m.nameLower} credentials --platform android\` to set up a signing keystore manually.`)),process.exit(1)}}catch(I){(String(I.message||"").startsWith("Credential download failed")||String(I.message||"").startsWith("Credential setup failed")||String(I.message||"").startsWith("Missing iOS credentials")||String(I.message||"").startsWith("Auto-versioning failed"))&&(D.error(k.red(I.message)),process.exit(1)),e.platform==="ios"&&e.local&&e.buildId&&(D.error(k.red(`Failed to resolve iOS credentials: ${I.message}`)),process.exit(1)),D.warn(`Failed to resolve credentials: ${I.message}`)}}let v=!!(e.local&&e.buildId),F=!!(e.local||e.sshHost),H=!F&&!v;if(v){D.info(k.magenta("\u{1F3D7}\uFE0F Runner Mode: Executing isolated build task..."));let I=await Tr({...e,interactive:!1},n,a,i,{branch:p,version:f,runtimeVersion:h,summary:P,buildType:S});await q(I),process.exit(0)}async function q(I){let _=async M=>{if(i)try{await Oi("Report failed build status",()=>O.patch(`/builds/${i}/${n}`,{status:"failed",error:M,endTime:Date.now()}),3)}catch(x){D.warn(k.yellow(`Could not report failed build status: ${x.message}`))}};if(i&&I.length>0){let M=uo(),x=[];e.quiet||M.start("Uploading artifacts to Dashboard...");try{for(let E of I){let A=_e.basename(E),N=ge.statSync(E).size,U=_e.extname(A).toLowerCase(),K="application/octet-stream",z=await Oi(`Create artifact upload URL for ${A}`,()=>O.post(`/builds/${i}/${n}/artifact-upload-url`,{fileName:A,fileType:K}));if(z.data.status!=="success")throw new Error(`Failed to get upload URL for ${A}`);await qf(E,z.data.uploadUrl,K),x.push({name:A,url:z.data.downloadUrl,size:N,type:U.substring(1)})}e.quiet||M.stop("Artifacts uploaded.")}catch(E){e.quiet||M.stop("Failed to upload artifacts.");let A=`Artifact upload failed: ${E.message}`;throw D.error(k.red(A)),await _(A),new Error(A)}if(i&&x.length>0)try{D.info(k.cyan(`
-\u{1F517} Download Links:`));for(let E of x)D.info(k.dim(`  - ${E.name}: `)+k.blue.underline(E.url));await Oi("Finalize build in dashboard",()=>O.patch(`/builds/${i}/${n}`,{status:"success",artifacts:x,endTime:Date.now(),runtimeVersion:h,...Gn(e)})),Ti(e,{status:"success",projectId:i,buildId:n,platform:e.platform,profile:g,branch:p,version:f,runtimeVersion:h,...Gn(e),buildType:S,developmentClient:!!e.developmentClient,summary:P,artifacts:x}),D.success(k.green(`
-\u2713 Build completed and reported to dashboard.`)),e.maestro&&!v&&await Va(i,n,e,g),e.autoSubmit&&!v&&await co(i,n,e,g)}catch(E){let A=`Build artifact uploaded but dashboard finalization failed: ${E.message}`;throw D.error(k.red(`
-${A}`)),await _(A),new Error(A)}}else if(i){let M="Build completed but produced no uploadable artifacts.";throw D.error(k.red(M)),await _(M),new Error(M)}}if(F){if(D.info(k.cyan(`\u{1F680} Direct Build Mode: Executing on ${e.sshHost||"local"}...`)),i&&!o){let I=process.argv.slice(3).join(" ");await O.post("/builds",{projectId:i,buildId:n,platform:e.platform,status:"building",branch:p,version:f,runtimeVersion:h,...Gn(e),summary:P,startTime:r,buildType:S,buildProfile:g,buildArgs:I,framework:e.framework,simulator:!!e.simulator,developmentClient:!!e.developmentClient,...Ka(e,n,g,u)}),za(e)}if(e.sshHost&&e.platform==="ios")await Ps(e,n,a,i),e.autoSubmit&&await co(i,n,e,g);else{let I=await Tr({...e,interactive:!!e.local},n,a,i,{branch:p,version:f,runtimeVersion:h,summary:P,buildType:S});await q(I)}return}if(H&&(D.info(k.blue("\u{1F6F0}\uFE0F Cloud Initiator Mode: Preparing orchestration...")),!e.dryRun)){e.quiet||t.start("Zipping and uploading local source...");let I=await O.post("/builds/source-upload-url",{projectId:i,buildId:n});if(I.data.status!=="success")throw t.stop("Failed to get upload URL."),new Error("Failed to get source upload URL from API");po("SOURCE_UPLOAD",I.data.uploadUrl);let _=new Na,M=Ff(_,process.cwd(),e.platform),x=_.toBuffer();if(!e.quiet){let A=M.skipped.length>0?` Skipped: ${M.skipped.join(", ")}.`:"";t.message(`Prepared source (${M.files} files).${A}`)}e.quiet||t.message(`Uploading source (${(x.length/1024/1024).toFixed(1)} MB)...`);let E=!1;for(let A=1;A<=3;A++)try{await Di.put(I.data.uploadUrl,x,{headers:{"Content-Type":"application/zip"},maxBodyLength:1/0,maxContentLength:1/0,timeout:12e4}),E=!0;break}catch(N){if(A<3)t.message(`Upload attempt ${A} failed (${N.code||N.message}), retrying...`),await new Promise(U=>setTimeout(U,2e3*A));else throw N}if(e.quiet||t.stop("Source uploaded"),i){let A=process.argv.slice(3).join(" ");await O.post("/builds",{projectId:i,buildId:n,platform:e.platform,status:"pending",branch:p,version:f,runtimeVersion:h,...Gn(e),summary:P,startTime:r,buildType:S,buildProfile:g,buildArgs:A,framework:e.framework,simulator:!!e.simulator,developmentClient:!!e.developmentClient,...Ka(e,n,g,u)}),D.info(k.green("\u2713 Cloud build registered.")),za(e)}e.platform==="android"&&await vs(e,n,a,i,e.preBuild),e.quiet||D.info(k.cyan("\u{1F4E1} Connecting to build stream...")),await um(i,n,e),e.maestro&&await Va(i,n,e,g),e.autoSubmit&&await co(i,n,e,g);return}}catch(l){let a=l.message||"Build failed";l.response?.data?.message?a=l.response.data.message:l.message.includes("status code 402")?a="Insufficient wallet balance. Please add credits in the Dashboard.":l.message.includes("status code 403")&&(a="Monthly build quota exceeded. Upgrade your plan in the Dashboard."),i&&await s(a),D.error(k.red(`\u2717 Build failed: ${a}`)),process.exit(1)}};async function Va(e,t,n,i){D.info(k.cyan(`
-\u{1F3BC} Queuing managed Maestro test...`)),await Kr({projectId:e,buildId:t,platform:n.platform,profile:i,maestroFlows:n.maestroFlows,maestroDevice:n.maestroDevice,maestroRetries:n.maestroRetries,maestroRecord:n.maestroRecord,maestroUseBuildSource:n.maestroUseBuildSource,maestroEnv:n.maestroEnv,quiet:n.quiet})}async function co(e,t,n,i){if(!e){D.error(k.red("Auto-submit requires a linked Mach project. Run `mach link` or pass --project-id.")),process.exitCode=1;return}D.info(k.cyan(`
-Auto-submit: submitting the successful build...`));try{let r=await cm(e,t);if(r?.autoSubmit){let o=r.submissionId?`${mt}/submissions/${r.submissionId}?projectId=${encodeURIComponent(e)}`:void 0,s=String(r.status||"").toLowerCase(),l=String(r.autoSubmitStatus||"").toLowerCase(),a=r.submissionId||["success","completed","succeeded"].includes(s)||["starting","submitted","failed","skipped"].includes(l);if(r.submissionId?(D.info(k.green(`Auto-submit is already queued by Mach backend: ${r.submissionId}`)),D.info(k.dim(`Dashboard: ${o}`))):r.autoSubmitStatus==="failed"?D.warn(k.yellow(`Backend auto-submit failed: ${r.autoSubmitError||"Unknown error"}`)):a&&D.info(k.green("Auto-submit is registered with Mach backend; skipping local duplicate submit.")),a){Tt(n,{status:r.autoSubmitStatus||"pending",projectId:e,submitId:r.submissionId,platform:n.platform,profile:i,buildId:t,dashboardUrl:o});return}}await Ri({platform:n.platform,profile:i,buildProfile:i,buildId:t,projectId:e,yes:n.yes,quiet:n.quiet,track:n.submitTrack,releaseStatus:n.submitReleaseStatus,rollout:n.submitRollout,changesNotSentForReview:n.submitChangesNotSentForReview,credentialId:n.submitCredentialId,packageName:n.androidPackage,jsonOutput:n.submitJsonOutput,submitArgs:el(n,t,i)})}catch(r){D.error(k.red(`Auto-submit failed: ${r.message||r}`)),process.exitCode=1}}function el(e,t,n){let i=["--platform",e.platform,"--profile",n,"--build-id",t];return e.submitTrack&&i.push("--track",String(e.submitTrack)),e.submitReleaseStatus&&i.push("--release-status",String(e.submitReleaseStatus)),e.submitRollout!==void 0&&i.push("--rollout",String(e.submitRollout)),e.submitChangesNotSentForReview&&i.push("--changes-not-sent-for-review"),e.submitCredentialId&&i.push("--credential-id",e.submitCredentialId),e.platform==="android"&&e.androidPackage&&i.push("--package-name",e.androidPackage),e.platform==="ios"&&e.iosBundleIdentifier&&i.push("--bundle-id",e.iosBundleIdentifier),e.submitJsonOutput&&i.push("--json-output",e.submitJsonOutput),i.join(" ")}async function cm(e,t){try{let i=(await O.get(`/builds/${e}/${t}`)).data?.build;if(i?.autoSubmit)return i}catch(n){D.warn(k.dim(`Could not check backend auto-submit status: ${n.message}`))}return null}function tl(e){for(let t of Object.keys(e))e[t]===void 0&&delete e[t];return e}function dm(e,t,n){let i=n?.submit?.[t]?.android||{},r=n?.submit?.production?.android||{},o=e.submitTrack||i.track||r.track,s=e.submitReleaseStatus||i.releaseStatus||r.releaseStatus,l=e.submitRollout??i.rollout??i.userFraction??i.rolloutFraction??r.rollout??r.userFraction??r.rolloutFraction,a=e.submitChangesNotSentForReview??i.changesNotSentForReview??i.changes_not_sent_for_review??r.changesNotSentForReview??r.changes_not_sent_for_review;return tl({track:o,releaseStatus:s,rollout:l,changesNotSentForReview:a===void 0?!1:a===!0||a==="true"||a==="1"})}function Ka(e,t,n,i){if(!e.autoSubmit||e.dryRun)return{};let r=e.platform==="android"?dm(e,n,i):{};return{autoSubmit:!0,autoSubmitStatus:"pending",autoSubmitOptions:tl({platform:e.platform,profile:n,buildId:t,latest:!1,...r,credentialId:e.submitCredentialId,packageName:e.platform==="android"?e.androidPackage:void 0,bundleId:e.platform==="ios"?e.iosBundleIdentifier:void 0,submitArgs:el(e,t,n)})}}function za(e){!e.autoSubmit||e.dryRun||e.quiet||(D.info(k.green("\u2713 Auto-submit has been registered with the build.")),D.info(k.dim("  You can close this terminal; submission will start after build success.")))}function Wa(e){return`${mt}/build/${e}`}function Ti(e,t){if(!e.jsonOutput)return;let n=_e.resolve(e.jsonOutput),i={...t,url:t.url||Wa(t.buildId),dashboardUrl:t.dashboardUrl||Wa(t.buildId),updatedAt:new Date().toISOString()};try{let r=_e.dirname(n);r&&r!=="."&&ge.mkdirSync(r,{recursive:!0}),ge.writeFileSync(n,JSON.stringify(i,null,2))}catch(r){D.warn(k.yellow(`Could not write build metadata JSON: ${r.message}`))}}async function um(e,t,n){let i=uo(),r="pending",o=0,s=0;for(n.quiet||i.start("Connecting to build stream...");;){try{let a=(await O.get(`/builds/${e}/${t}`)).data.build;if(a){if(r=a.status,r==="building")n.quiet||i.message("Build in progress...");else if(r==="failed")n.quiet||i.stop("Build failed."),Ti(n,{status:"failed",projectId:e,buildId:t,platform:n.platform,profile:a.buildProfile,buildType:a.buildType,developmentClient:!!a.developmentClient,version:a.version,runtimeVersion:a.runtimeVersion,buildNumber:a.buildNumber,versionCode:a.versionCode,summary:a.summary,error:a.error||"Unknown error",artifacts:a.artifacts||[]}),D.error(k.red(`
-\u2717 Build failed: ${a.error||"Unknown error"}`)),process.exit(1);else if(r==="completed"||r==="success"){n.quiet||i.stop("Build successful!"),Ti(n,{status:r,projectId:e,buildId:t,platform:n.platform,profile:a.buildProfile,buildType:a.buildType,developmentClient:!!a.developmentClient,version:a.version,runtimeVersion:a.runtimeVersion,buildNumber:a.buildNumber,versionCode:a.versionCode,summary:a.summary,artifacts:a.artifacts||[]}),D.success(k.green(`
-\u2713 Build completed successfully!`));try{n.quiet||(D.info(k.magenta(`
-\u{1F4F1} Installation Hub:`)),D.info(k.dim("  - View & Install Build: ")+k.white.underline(`${mt}/build/${t}`)))}catch{}return}else if(r!=="pending"){n.quiet||i.stop(`Build status: ${r}`);return}}try{let u=(await O.get(`/builds/${e}/${t}/logs`)).data;if(u&&typeof u=="string"&&!n.quiet){let d=u.split(`
-`);if(d.length>o){for(let p=o;p<d.length;p++)d[p].trim()&&console.log(k.dim(`  ${d[p]}`));o=d.length}}}catch{}s=0}catch{s++,s>10&&(i.stop("Connection lost."),D.error(k.red(`
-\u2717 Lost connection to Dashboard API.`)),process.exit(1))}await new Promise(l=>setTimeout(l,3e3))}}import*as Bi from"http";import*as ll from"net";import{execFile as pm,execFileSync as Ft,execSync as Ui,spawn as nl}from"child_process";import Ae from"chalk";import{log as Z}from"@clack/prompts";import fm from"axios";import ue from"fs";import st from"os";import Y from"path";var _t=7070,zn=`http://127.0.0.1:${_t}`,yn="com.radhya.mach.agent",hn="Mach Agent",Sn=`${yn}.service`,mm=5e3,gm=3e3,Li=null,Mi=null,at=()=>Y.join(st.homedir(),m.configDir),cl=()=>Y.join(st.homedir(),"Library","LaunchAgents"),Fi=()=>Y.join(cl(),`${yn}.plist`),dl=()=>Y.join(st.homedir(),".config","systemd","user"),mo=()=>Y.join(dl(),Sn),go=()=>Y.join(at(),"agent.cmd");function ho(){return`gui/${process.getuid?.()||Number(Ui("id -u").toString().trim())}`}function ul(e){return e.replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;").replace(/"/g,"&quot;").replace(/'/g,"&apos;")}function Kn(e){return`<string>${ul(e)}</string>`}function yo(){let e=process.argv[1]?ue.realpathSync(process.argv[1]):"";if(!e||!ue.existsSync(e))throw new Error("Could not resolve the current Mach CLI entrypoint.");return[process.execPath,e,"agent","run"]}function So(){let e=pl(),t=process.platform==="win32"?[process.env.SystemRoot?Y.join(process.env.SystemRoot,"System32"):void 0,process.env.SystemRoot]:["/opt/homebrew/bin","/usr/local/bin","/usr/bin","/bin","/usr/sbin","/sbin"],n={HOME:st.homedir(),PATH:[process.env.PATH,...e.flatMap(i=>[Y.join(i,"platform-tools"),Y.join(i,"emulator"),Y.join(i,"cmdline-tools","latest","bin"),Y.join(i,"tools","bin")]),...t].filter(Boolean).join(Y.delimiter)};for(let i of["ANDROID_HOME","ANDROID_SDK_ROOT","JAVA_HOME","SHELL"])process.env[i]&&(n[i]=process.env[i]);return n}function pl(){let e=[process.env.ANDROID_HOME,process.env.ANDROID_SDK_ROOT];if(process.platform==="darwin")e.push(Y.join(st.homedir(),"Library","Android","sdk"));else if(process.platform==="linux")e.push(Y.join(st.homedir(),"Android","Sdk"),Y.join(st.homedir(),"Android","sdk"),"/opt/android-sdk","/usr/lib/android-sdk");else if(process.platform==="win32"){let t=process.env.LOCALAPPDATA,n=process.env.USERPROFILE||st.homedir();e.push(t?Y.join(t,"Android","Sdk"):void 0,Y.join(n,"AppData","Local","Android","Sdk"))}return Array.from(new Set(e.filter(t=>!!t)))}function hm(e){return process.platform==="win32"&&!e.toLowerCase().endsWith(".exe")?`${e}.exe`:e}function fl(e,t){let n=hm(e);for(let i of pl()){let r=Y.join(i,t,n);if(ue.existsSync(r))return r}return n}function ml(){return fl("adb","platform-tools")}function gl(){return fl("emulator","emulator")}function fo(e){return`"${e.replace(/\\/g,"\\\\").replace(/"/g,'\\"').replace(/%/g,"%%")}"`}function ym(){if(process.platform!=="linux")throw new Error("Linux service install requires Linux.");ue.mkdirSync(at(),{recursive:!0}),ue.mkdirSync(dl(),{recursive:!0});let e=yo(),t=So(),n=Object.entries(t).map(([r,o])=>`Environment=${fo(`${r}=${o}`)}`).join(`
+`);let o=r.match(/Google Api Error:[^\n]+/)||r.match(/Google Play API Error:[^\n]+/);return o?o[0]:r||"Google Play submission failed"}function Au(e){try{q.existsSync(e)&&q.rmSync(e,{recursive:!0,force:!0})}catch{}}function Q(e){console.log(V.red(`\u274C ${e}`))}function se(e){console.log(V.gray(`\u2022 ${e}`))}function pr(e){console.log(V.green(`\u2713 ${e}`))}var gr=8,Iu=6,Ps=Number(process.env.MACH_ARTIFACT_UPLOAD_MAX_ATTEMPTS||2),hr=Number(process.env.MACH_ARTIFACT_UPLOAD_TIMEOUT_MS||12e4),yr="ap-south-1",wu=`${m.envPrefix}S3_DEBUG`,vu=()=>["1","true","yes","on"].includes(String(process.env[wu]||"").trim().toLowerCase()),Sr=(e,t)=>{if(vu()&&t)try{let n=new URL(t);S.info(I.dim(`[S3_DEBUG] ${e} host=${n.hostname} expectedRegion=${yr}`)),n.hostname.includes(yr)||S.warn(I.yellow(`[S3_DEBUG] ${e} host ${n.hostname} does not include ${yr}`))}catch(n){S.warn(I.yellow(`[S3_DEBUG] Could not parse ${e} presigned URL host: ${n.message}`))}},Cs=new Set([".git",".gradle",".idea",".mach-cache",".expo",".turbo",".yarn/cache","build","builds","coverage","dist","node_modules",`${m.nameLower}_cli`,`.${m.nameLower}_cli`]),_u=new Set(["android/.gradle","android/.cxx","android/app/.cxx","android/app/build","android/build","ios/Pods","ios/build","ios/DerivedData"]),$u=[{value:"production",label:"production",hint:"Store / release build"},{value:"staging",label:"staging",hint:"Internal testing build"},{value:"development",label:"development",hint:"Development build"}],Gs=e=>new Promise(t=>setTimeout(t,e)),Vs=e=>e.split(ae.sep).filter(Boolean).join("/"),Ru=(e,t)=>{let n=Vs(e),i=n.split("/")[0];return n?!!(Cs.has(n)||Cs.has(i)||_u.has(n)||t==="ios"&&i==="android"||t==="android"&&i==="ios"):!1},Ou=(e,t,n)=>{let i=0,r=new Set,o=(s,a)=>{let l=Vs(a);if(Ru(l,n)){r.add(l.split("/")[0]||l);return}let d=ee.lstatSync(s);if(!d.isSymbolicLink()){if(d.isDirectory()){for(let c of ee.readdirSync(s))o(ae.join(s,c),ae.join(a,c));return}if(d.isFile()){let c=ae.dirname(l);e.addLocalFile(s,c==="."?void 0:c,ae.basename(l)),i++}}};for(let s of ee.readdirSync(t))o(ae.join(t,s),s);return{files:i,skipped:Array.from(r).sort()}},Du=e=>!e.yes&&!e.failOnly&&!e.buildId&&process.stdin.isTTY&&process.stdout.isTTY,Pu=e=>{if(!e||typeof e!="object")return;let t=[e.distribution?`distribution: ${e.distribution}`:void 0,e.environment?`env: ${e.environment}`:void 0,e.developmentClient?"development client":void 0,e.simulator?"simulator":void 0].filter(Boolean);return t.length>0?t.join(", "):void 0},Cu=()=>{let e=ce(`./${m.configFileName}`),t=e?.build&&typeof e.build=="object"?e.build:{},n=Object.keys(t);return n.length===0?$u:n.map(i=>({value:i,label:i,hint:Pu(t[i])}))},Tu=async e=>{let t=Du(e);if(!e.platform&&t){let n=await _s({message:"Select platform",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"}]});Wn(n)&&(Rs("Build cancelled."),process.exit(0)),e.platform=n}if(!e.buildProfile&&t){let n=Cu(),i=await _s({message:"Select build profile",options:n,initialValue:n.find(r=>r.value==="production")?.value||n[0]?.value});Wn(i)&&(Rs("Build cancelled."),process.exit(0)),e.buildProfile=i}e.buildProfile||(e.buildProfile="production")},Ts=e=>{if(e===!0||e===!1)return e;if(e===1||e==="1")return!0;if(e===0||e==="0")return!1;if(typeof e!="string")return;let t=e.trim().toLowerCase();if(["true","yes","on"].includes(t))return!0;if(["false","no","off"].includes(t))return!1},zs=(e,t)=>{if(e)for(let n of t){let i=n.replace(/[.*+?^${}()|[\]\\]/g,"\\$&"),r=e.match(new RegExp(`(?:^|\\s)${i}(?:=|\\s+)([^\\s]+)`));if(r?.[1])return r[1].replace(/^["']|["']$/g,"")}},ku=(e,t)=>!!e&&t.some(n=>new RegExp(`(?:^|\\s)${n.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}(?:\\s|$)`).test(e)),Nu=e=>{let n=zs(e,["--platform"])||e?.split(/\s+/).find(i=>i==="ios"||i==="android");return n==="ios"||n==="android"?n:void 0},xu=async e=>{if(!e.projectId||!e.buildId)return;let t=!!e.local;try{let n=await $.get(`/builds/${e.projectId}/${e.buildId}`),i=n.data?.build||n.data;if(!i||typeof i!="object"){if(t)throw new Error("MACH API returned an empty build record.");return}let r=typeof i.buildArgs=="string"?i.buildArgs:void 0;if(yo(e,i),!e.platform){let o=i.platform||Nu(r);(o==="ios"||o==="android")&&(e.platform=o)}if(e.buildProfile||(e.buildProfile=i.buildProfile||i.profile||i.profileName||zs(r,["--profile","--build-profile","-p"])),e.simulator===void 0){let o=Ts(i.simulator??i.isSimulator);o!==void 0?e.simulator=o:ku(r,["--simulator"])&&(e.simulator=!0)}if(e.developmentClient===void 0){let o=Ts(i.developmentClient??i.devClient);o!==void 0&&(e.developmentClient=o)}}catch(n){if(t){let i=n.response?.data?.message||n.message||"unknown error";throw new Error(`Could not load the canonical MACH build record for runner ${e.buildId}: ${i}. The runner stopped to avoid allocating or packaging a different native version.`)}S.warn(I.yellow(`Could not load saved build options for runner: ${n.message}`))}},Lu=e=>{if(!Number.isFinite(e)||e<=0)return"0 B";let t=["B","KB","MB","GB"],n=Math.min(Math.floor(Math.log(e)/Math.log(1024)),t.length-1);return`${(e/Math.pow(1024,n)).toFixed(n===0?0:1)} ${t[n]}`},Mu=e=>{let t=e.response?.status,n=e.code||"",i=e.message||"";return t?t===408||t===409||t===425||t===429||t>=500||/ECONNRESET|ETIMEDOUT|EAI_AGAIN|ENOTFOUND|ECONNABORTED|socket hang up|network|timeout/i.test(`${n} ${i}`):!0},en=async(e,t,n=Iu)=>{let i;for(let r=1;r<=n;r++)try{return await t()}catch(o){if(i=o,!Mu(o)||r>=n)break;let s=Math.min(6e4,2e3*Math.pow(2,r-1)),a=o.response?.status||o.code||o.message||"network error";S.warn(I.yellow(`${e} failed transiently (${a}). Retrying in ${Math.round(s/1e3)}s... (${r}/${n})`)),await Gs(s)}throw i},Uu=async(e,t,n)=>{let i=ae.basename(e),r=ee.statSync(e).size,o=Math.round(hr/1e3);Sr(`ARTIFACT_UPLOAD ${i}`,t);try{await en(`Upload artifact ${i}`,async()=>{let s=new AbortController,a=ee.createReadStream(e),l=setTimeout(()=>{a.destroy(new Error(`Artifact upload timed out after ${o}s`)),s.abort()},hr);try{await Kn.put(t,a,{headers:{"Content-Type":n,"Content-Length":r,Connection:"close"},maxBodyLength:1/0,maxContentLength:1/0,timeout:hr,timeoutErrorMessage:`Artifact upload timed out after ${o}s`,signal:s.signal})}finally{clearTimeout(l)}},Ps)}catch(s){throw new Error(`${i} (${Lu(r)}) failed after ${Ps} upload attempt(s): ${s.message||s}`)}return r},Fu=e=>{let t=e.response?.status;return t?t===408||t===429||t>=500:!0},nn=e=>e.credentialId||e.id,Bu=async(e,t)=>{let n=nn(e);if(!n)return e.downloadUrl;let i=await $.get(`/credentials/${n}/download`,{params:{projectId:t,format:"raw"}});return i.data?.status==="success"&&i.data?.downloadUrl?i.data.downloadUrl:e.downloadUrl},ju=async(e,t)=>{let n=e.downloadUrl;for(let i=1;i<=gr;i++)try{if((!n||i>1)&&(n=await Bu(e,t)),!n)throw new Error(`Credential ${e.name||nn(e)||"unknown"} has no download URL.`);let r=await Kn.get(n,{responseType:"arraybuffer",timeout:6e4,maxContentLength:1/0,maxBodyLength:1/0,headers:{Connection:"close"}});return Buffer.from(r.data).toString("base64")}catch(r){if(i>=gr||!Fu(r))throw r;let o=Math.min(1500*i*i,15e3);S.warn(I.dim(`  - Temporary network error downloading ${e.name}. Retrying... (${i}/${gr})`)),await Gs(o)}throw new Error(`Failed to download credential ${e.name||nn(e)||"unknown"}.`)},Hu=(e,t)=>t?.ios?.buildNumber??t?.iosBuildNumber??e?.ios?.buildNumber??e?.expo?.ios?.buildNumber,Gu=(e,t)=>t?.android?.versionCode??t?.androidVersionCode??e?.android?.versionCode??e?.expo?.android?.versionCode,ks=(e,t,n,i)=>e==="ios"?t.iosBundleIdentifier||n?.ios?.bundleIdentifier||n?.expo?.ios?.bundleIdentifier||i:t.androidPackage||n?.android?.package||n?.expo?.android?.package||n?.name||i,Ns=async(e,t,n)=>{let i=await $.post(`/projects/${e}/next-build-number`,{platform:t,scope:n});if(i.data.status!=="success"||!i.data.buildNumber)throw new Error(i.data.message||"Dashboard did not return a build number.");return String(i.data.buildNumber)},Qt=e=>{let t={};return e.platform==="ios"&&e.resolvedBuildNumber&&(t.buildNumber=e.resolvedBuildNumber),e.platform==="android"&&e.resolvedVersionCode&&(t.versionCode=e.resolvedVersionCode),t},Ks=(e,t,n=[])=>{if(!ee.existsSync(e))return n;let i;try{i=ee.readdirSync(e,{withFileTypes:!0})}catch{return n}for(let r of i){if(r.name==="Pods"||r.name==="build"||r.name==="DerivedData")continue;let o=ae.join(e,r.name);r.isDirectory()?Ks(o,t,n):r.name===t&&n.push(o)}return n},Vu=(e,t,n)=>{let i=`${n} ${t.environment||""}`.toLowerCase(),r=e.toLowerCase(),o=0;return(i.includes("development")||i.includes("dev"))&&/(^|[.-])dev(elopment)?($|[.-])/.test(r)&&(o+=20),(i.includes("staging")||i.includes("stage"))&&/(^|[.-])stag(e|ing)?($|[.-])/.test(r)&&(o+=20),(i.includes("production")||i.includes("prod"))&&(/(^|[.-])(dev|development|stag|stage|staging)($|[.-])/.test(r)||(o+=20)),o},zu=(e,t)=>{let n=ae.resolve(process.cwd(),ee.existsSync("ios")?"ios":"."),i=Ks(n,"project.pbxproj"),r=[];for(let o of i)try{let a=ee.readFileSync(o,"utf8").matchAll(/PRODUCT_BUNDLE_IDENTIFIER\s*=\s*"?([^";\s]+)"?;/g);for(let l of a){let d=l[1]?.trim();d&&!d.includes("$")&&!d.startsWith("com.apple.")&&!r.includes(d)&&r.push(d)}}catch{}if(r.length!==0)return r.length===1?r[0]:r.map(o=>({bundleId:o,score:Vu(o,e,t)})).sort((o,s)=>s.score-o.score)[0]?.bundleId},zn=e=>String(e||"").trim().toLowerCase().replace(/_/g,"-"),qn=(e,t)=>{let n=zn(e);return t==="ios"&&(n==="internal"||n==="ad-hoc")?"adhoc":t==="android"&&["internal","adhoc","ad-hoc","development","dev","staging","stage"].includes(n)?"internal":n},xs=(e,t,n)=>{let i=qn(e.distributionType||e.meta?.distributionType,n);return i?i===qn(t,n):!0},Ls=(e,t,n)=>{let i=qn(e.distributionType||e.meta?.distributionType,n),r=qn(t,n);return i?i===r?3:n==="android"&&r!=="store"&&i!=="store"?2:0:1},Ku=e=>{let t=e.toLowerCase();return t==="development"||t==="dev"||t.startsWith("development-")||t.startsWith("dev-")||t.endsWith("-development")||t.endsWith("-dev")},Wu=e=>{let t=e.toLowerCase();return t.includes("staging")||t.includes("stage")||t.includes("preview")||t.includes("adhoc")||t.includes("ad-hoc")},qu=(e,t)=>{let n=zn(e.distribution),i=zn(e.iosExportMethod),r=zn(e.environment);return e.platform!=="ios"?n==="store"?"store":"internal":e.developmentClient||e.simulator?"development":i==="app-store"||n==="store"?"store":i==="development"||n==="development"?"development":i==="ad-hoc"||i==="adhoc"||n==="ad-hoc"||n==="adhoc"||n==="internal"?"adhoc":r==="production"||r==="store"?"store":r==="development"||r==="dev"?"development":r==="staging"||r==="stage"||r==="preview"?"adhoc":t.toLowerCase()==="production"||t.toLowerCase().includes("store")?"store":Ku(t)?"development":(Wu(t),"adhoc")},Ws=e=>e.bundleId||e.bundleIdentifier||e.packageName||e.meta?.bundleId||e.meta?.bundleIdentifier||e.meta?.packageName,Ms=(e,t)=>{if(!t)return!0;let n=Ws(e);return!n||n==="*"||n===t},Us=(e,t)=>{let n=Ws(e);return!t||!n?0:n===t?2:n==="*"?1:-1},qs=e=>{try{let t=Buffer.from(e,"base64").toString("utf8"),n=t.match(/<key>application-identifier<\/key>\s*<string>([^<]+)<\/string>/)?.[1]?.trim();if(!n)return;let i=t.match(/<key>TeamIdentifier<\/key>\s*<array>\s*<string>([^<]+)<\/string>/)?.[1]?.trim();if(i&&n.startsWith(`${i}.`))return n.slice(i.length+1);let r=n.indexOf(".");return r>=0?n.slice(r+1):n}catch{return}},Ju=(e,t)=>{if(e===t||e==="*")return!0;if(e.endsWith(".*")){let n=e.slice(0,-2);return t.startsWith(`${n}.`)}return!1},Yu=(e,t)=>{if(!t)return!0;let n=qs(e);if(n)return Ju(n,t);try{return Buffer.from(e,"base64").toString("latin1").includes(t)}catch{return!0}},Jn=async e=>{if(e.failOnly){(!e.projectId||!e.buildId)&&(S.error(I.red("--project-id and --build-id are required with --fail-only.")),process.exit(1));let d=e.error||"Build runner failed before it could report a final status.";try{await $.patch(`/builds/${e.projectId}/${e.buildId}`,{status:"failed",error:d,endTime:Date.now()}),S.info(I.yellow(`Marked build ${e.buildId} as failed.`));return}catch(c){S.error(I.red(`Could not mark build failed: ${c.message}`)),process.exit(1)}}await xu(e),await Tu(e),e.platform!=="android"&&e.platform!=="ios"&&(S.error(`Platform ${e.platform} is not supported. Use 'android' or 'ios'.`),process.exit(1)),e.autoSubmit&&e.platform==="ios"&&e.simulator&&(S.error(I.red("--auto-submit cannot be used with --simulator because simulator builds are not App Store artifacts.")),process.exit(1)),e.autoSubmit&&e.dryRun&&S.warn(I.yellow("--auto-submit is ignored during --dry-run."));let t=Ar(),n=e.buildId||Su(),i=e.projectId,r=Date.now(),o=!!i,s=!0,a=async d=>{if(i)try{await $.patch(`/builds/${i}/${n}`,{status:"failed",error:d,endTime:Date.now()})}catch{}};if(e.local&&e.buildId&&i&&await en("Mark isolated runner as building",()=>$.patch(`/builds/${i}/${n}`,{status:"building",runnerStartedAt:Date.now()})),e.local&&e.buildId){e.quiet||t.start(`Preparing isolated workspace for build: ${e.buildId}`);try{let d=await $.get(`/builds/${i}/${e.buildId}/source-url`);if(d.data.status!=="success")throw new Error("Failed to get source download URL from API");Sr("SOURCE_DOWNLOAD",d.data.downloadUrl);let c=await Kn.get(d.data.downloadUrl,{responseType:"stream"}),u=(i||e.projectId||"default").replace(/[^a-zA-Z0-9-_]/g,"_"),f=ae.join(Eu.homedir(),m.workspacesDir,u);ee.mkdirSync(f,{recursive:!0});let p=new Set(["node_modules",`.${m.nameLower}-cache-meta`]),g=new Set(["Pods"]);if(ee.existsSync(f)){let L=ee.readdirSync(f);for(let _ of L){if(p.has(_))continue;if(_==="ios"){let W=ae.join(f,"ios");try{let Z=ee.readdirSync(W);for(let Ee of Z)if(!g.has(Ee))try{ee.rmSync(ae.join(W,Ee),{recursive:!0,force:!0})}catch{}}catch{}continue}let H=ae.join(f,_);try{ee.rmSync(H,{recursive:!0,force:!0})}catch{}}}let h=ae.join(f,"source.zip"),y=c.data,b=ee.createWriteStream(h);await new Promise((L,_)=>{y.pipe(b),y.on("error",H=>_(H)),b.on("finish",()=>L())}),new Ds(h).extractAllTo(f,!0);try{ee.unlinkSync(h)}catch{}process.chdir(f),S.info(I.green(`\u2713 Persistent workspace ready: ${f}`)),S.info(I.dim(`  \u{1F4E6} Cached dirs preserved: node_modules=${ee.existsSync(ae.join(f,"node_modules"))?"\u2705":"\u274C"}, Pods=${ee.existsSync(ae.join(f,"ios","Pods"))?"\u2705":"\u274C"}`)),t.stop()}catch(d){t.stop(`Failed to prepare isolated workspace: ${d.message}`),i&&await a(`Setup Error: ${d.message}`),process.exit(1)}}try{let d=e.repo;if(!d)try{d=Os("git config --get remote.origin.url").toString().trim()}catch{S.warn("Could not detect git repository URL.")}!d&&e.dryRun,d||(d="https://github.com/placeholder/repo.git"),S.info(`Build ID: ${I.cyan(n)}`);let c={},u={},f=null,p=ce(`./${m.configFileName}`);if(p||(S.error(I.red(`${m.configFileName} not found. Run \`${m.nameLower} init\` or \`${m.nameLower} link\` first.`)),process.exit(1)),p){f=p;let R=bo(p);e.framework=R,i=p.projectId;let T=e.buildProfile||"production",E=Ie(p,T);!E&&e.buildProfile&&(S.error(`Build profile '${T}' not found in ${m.configFileName}`),process.exit(1));let A=E||{};process.env.MACH_DEBUG&&S.info(I.dim(`Framework: ${R} | Build profile: ${T} | Platform: ${e.platform} | Distribution: ${A.distribution||"store"} | Environment: ${A.environment||T}`)),A.env&&(u=A.env,S.info(I.blue(`Use Build Profile: ${T}`)));let D=e.platform,v=A[D]||{},G=["developmentClient","simulator","distribution","buildCommand","apk","iosScheme","preBuild","postBuild","scheme","environment","androidPackage","iosBundleIdentifier","name","iosDeploymentTarget","iosApiKeyId","iosApiKeyIssuer","iosApiKeyPath","iosTeamId","iosConfiguration","iosExportMethod","branch","repo","instanceType","ami","bucket","region","nodeVersion"];e.name=p.name,e.appName=p.name,e.androidPackage=p.android?.package,e.iosBundleIdentifier=p.ios?.bundleIdentifier,e.iosScheme=p.ios?.iosScheme,!e.nodeVersion&&p.nodeVersion&&(e.nodeVersion=p.nodeVersion);let U=re=>re==="androidPackage"?v.androidPackage??v.package??A.androidPackage??A.android?.package:re==="iosBundleIdentifier"?v.iosBundleIdentifier??v.bundleIdentifier??A.iosBundleIdentifier??A.ios?.bundleIdentifier:v[re]!==void 0?v[re]:A[re];for(let re of G){let P=U(re),Ke=re==="androidPackage"||re==="iosBundleIdentifier";P!==void 0&&(e[re]===void 0||Ke)&&(e[re]=P)}if(e.platform==="ios"&&!(v.iosBundleIdentifier??v.bundleIdentifier??A.iosBundleIdentifier??A.ios?.bundleIdentifier)){let P=zu(e,T);P&&P!==e.iosBundleIdentifier&&(S.warn(I.yellow(`Detected native iOS bundle identifier ${P}; using it for credential lookup. Set build.${T}.ios.bundleIdentifier to make this explicit.`)),e.iosBundleIdentifier=P)}e.branch=e.branch||"main",e.iosConfiguration=e.iosConfiguration||(e.developmentClient?"Debug":"Release"),e.sshUser=e.sshUser||process.env.USER||"ubuntu",e.simulator===void 0&&(e.simulator=!1),e.local===void 0&&(e.local=!1),e.verbose===void 0&&(e.verbose=!1),S.info(I.dim(`Resolved build config: framework=${R}, profile=${T}, platform=${e.platform}, simulator=${e.platform==="ios"?String(!!e.simulator):"n/a"}, developmentClient=${String(!!e.developmentClient)}, distribution=${e.distribution||A.distribution||"store"}, iosConfiguration=${e.platform==="ios"?e.iosConfiguration||"Release":"n/a"}`));let B=re=>{if(!re)return re;if(re.startsWith("scripts.")){let P=re.split(".")[1],Ke=p.scripts?.[P];if(Ke)return Ke;S.warn(`Script reference not found: ${re}`)}return re};e.buildCommand=B(e.buildCommand),e.preBuild=B(e.preBuild),e.postBuild=B(e.postBuild),!e.scheme&&p.scheme&&(e.scheme=p.scheme);let me={...vt(p,m.envPrefix),...vt(A,`${m.envPrefix}PROFILE_`)};c={...c,...u,...me},process.env.IOS_P12_PASSWORD&&!c.IOS_P12_PASSWORD&&(c.IOS_P12_PASSWORD=process.env.IOS_P12_PASSWORD),process.env.MATCH_PASSWORD&&!c.MATCH_PASSWORD&&(c.MATCH_PASSWORD=process.env.MATCH_PASSWORD),e.platform==="ios"&&(!e.iosTeamId&&A.ios?.appleTeamId&&(e.iosTeamId=A.ios.appleTeamId),!e.iosTeamId&&p.submit?.[T]?.ios?.appleTeamId&&(e.iosTeamId=p.submit[T].ios.appleTeamId),!e.iosTeamId&&p.submit?.production?.ios?.appleTeamId&&(S.warn(I.yellow(`Check: Using 'production' Team ID for '${T}' build.`)),e.iosTeamId=p.submit.production.ios.appleTeamId),e.iosTeamId?S.info(I.magenta(`\u2713 Injected iOS Team ID from config: ${e.iosTeamId}`)):e.simulator||S.warn(I.yellow("\u26A0\uFE0F No iOS Team ID found. Device or archive signing may fail unless managed iOS credentials provide the team automatically.")))}let g="unknown";try{g=Os("git rev-parse --abbrev-ref HEAD").toString().trim()}catch{S.warn("Failed to detect git branch.")}let h="1.0.0";try{ee.existsSync("./package.json")&&(h=JSON.parse(ee.readFileSync("./package.json","utf-8")).version||"1.0.0")}catch{}let y=e.buildProfile||"production",b=Kt(p,{framework:e.framework,platform:e.platform}),w="Internal";e.developmentClient?w="DevelopmentClient":y.toLowerCase().includes("store")||y.toLowerCase()==="production"?w="Store":y.toLowerCase().includes("preview")||y.toLowerCase().includes("staging")?w="Staging":(y.toLowerCase().includes("development")||y.toLowerCase().includes("dev"))&&(w="Development");let L=e.platform==="ios"?"iOS":"Android",_=e.platform==="ios"&&e.simulator?" (Simulator)":"",H=`${L}${_} v${h} (${w})`;if(tn(e,{status:"created",projectId:i,buildId:n,platform:e.platform,profile:y,branch:g,version:h,runtimeVersion:b,...Qt(e),buildType:w,developmentClient:!!e.developmentClient,summary:H}),i){try{let R=e.buildProfile||"production",T=e.environment||R;S.info(I.blue(`Fetching managed secrets for profile: ${R} (environment: ${T})...`));let A=(await $.get(`/projects/${i}/secrets/export?env=${T}`)).data;A.status==="success"&&A.secrets&&(c={...c,...A.secrets},Object.keys(A.secrets).length>0&&S.info(I.magenta(`\u2713 Injected ${Object.keys(A.secrets).length} secrets from Dashboard.`)))}catch(R){S.warn(`Failed to load managed secrets from Dashboard: ${R.message}`)}if(e.platform==="ios"){let R=e.buildProfile||"production",T=Ie(p,R)||{},E=Hu(p,T),A=Mi(E),D=e.distribution!==void 0?e.distribution==="store":w==="Store",v=E===void 0&&D,G=e.autoVersion||A||v,U=Ui(e.resolvedBuildNumber,E,G,!e.simulator);if(U.kind==="persisted"){let B=Nn(e,c,U.value,"saved MACH build record");S.info(I.green(`\u2713 Reusing assigned iOS buildNumber ${B}`))}else if(U.kind==="explicit"){let B=Nn(e,c,U.value,`${m.configFileName} (${R})`);S.info(I.green(`\u2713 Using configured iOS buildNumber ${B}`))}else if(U.kind==="auto"){t.start("Assigning iOS buildNumber from Mach counter...");try{let B=ks("ios",e,p,R),me=await Ns(i,"ios",B);Nn(e,c,me,"MACH version counter"),t.stop(`\u2713 Assigned iOS buildNumber ${I.green(me)} (${B})`)}catch(B){throw t.stop("iOS buildNumber assignment failed"),new Error(`Auto-versioning failed: ${B.response?.data?.message||B.message}`)}}}if(e.platform==="android"){let R=e.buildProfile||"production",T=Ie(p,R)||{},E=Gu(p,T),A=Mi(E),D=e.distribution!==void 0?e.distribution==="store":w==="Store",v=E===void 0&&D,G=e.autoVersion||A||v,U=Ui(e.resolvedVersionCode,E,G);if(U.kind==="persisted"){let B=xn(e,c,U.value,"saved MACH build record");S.info(I.green(`\u2713 Reusing assigned Android versionCode ${B}`))}else if(U.kind==="explicit"){let B=xn(e,c,U.value,`${m.configFileName} (${R})`);S.info(I.green(`\u2713 Using configured Android versionCode ${B}`))}else if(U.kind==="auto"){t.start("Assigning Android versionCode from Mach counter...");try{let B=ks("android",e,p,R),me=await Ns(i,"android",B);xn(e,c,me,"MACH version counter"),t.stop(`\u2713 Assigned Android versionCode ${I.green(me)} (${B})`)}catch(B){throw t.stop("Android versionCode assignment failed"),new Error(`Auto-versioning failed: ${B.response?.data?.message||B.message}`)}}}if(e.platform==="ios"&&e.simulator)S.info(I.dim("Skipping managed iOS signing credentials for simulator build."));else try{S.info(I.blue("Fetching managed credentials..."));let R=qu(e,y),T=e.platform==="ios"?e.iosBundleIdentifier:e.androidPackage,E=e.platform==="ios"?"bundle":"package";S.info(I.dim(`  Credential target: ${E} ${T||"not set"} (${R})`));let A=await $.get("/credentials/resolve",{params:{projectId:i,platform:e.platform,bundleId:T,distributionType:R,teamId:e.platform==="ios"?e.iosTeamId:void 0}});if(A.data.status==="success"&&A.data.credentials){let D=A.data.credentials;S.info(I.magenta(`\u2713 Found ${D.length} relevant credentials.`));let v=D.filter(P=>e.platform==="ios"&&P.type==="ios_profile"?xs(P,R,e.platform)?Ms(P,T):!1:e.platform==="android"&&P.type==="android_keystore"?Ms(P,T):!!xs(P,R,e.platform)).sort((P,Ke)=>{let je=Us(Ke,T)*10+Ls(Ke,R,e.platform)-(Us(P,T)*10+Ls(P,R,e.platform));return je!==0?je:(Ke.createdAt||0)-(P.createdAt||0)});S.info(I.dim(`  Filtered to ${v.length} credentials for distributionType: ${R}`));let G=!1,U=!1,B=!1,me=[];for(let P of v)if(!(P.type==="ios_cert"&&G||P.type==="ios_profile"&&U||P.type==="android_keystore"&&B)&&["ios_cert","ios_profile","android_keystore"].includes(P.type)&&(P.downloadUrl||nn(P)))try{let je=await ju(P,i);if(P.type==="ios_cert"&&!G)c.IOS_DIST_P12=je,P.password?(c.IOS_P12_PASSWORD=P.password,S.info(I.dim(`  - Injected ${P.name} as IOS_DIST_P12 with password from credential record`))):S.info(I.dim(`  - Injected ${P.name} as IOS_DIST_P12`)),G=!0;else if(P.type==="ios_profile"&&!U){if(!Yu(je,T)){let Pn=qs(je)||"unknown";throw new Error(`Provisioning profile ${P.name||nn(P)||"unknown"} is for a different bundle ID. Expected ${T}, found ${Pn}. Upload a ${R} profile for ${T}.`)}c.IOS_PROVISIONING_PROFILE=je,S.info(I.dim(`  - Injected ${P.name} as IOS_PROVISIONING_PROFILE`)),U=!0}else if(P.type==="android_keystore"&&!B){c.ANDROID_KEYSTORE_BASE64=je;let Pn=P.keystorePassword||P.password,ao=P.keyPassword||P.keystorePassword||P.password,lo=P.alias||P.meta?.alias;if(Pn)c.ANDROID_STORE_PASSWORD=Pn,S.info(I.dim("  - Injected keystore password from credential record"));else{let Ni=["ANDROID_STORE_PASSWORD",...[R==="store"?"PRODUCTION":R==="internal"||R==="adhoc"?"STAGING":"DEVELOPMENT",R.toUpperCase(),"PRODUCTION","STORE","INTERNAL","STAGING","RELEASE","DEBUG"].map(xi=>`KEYSTORE_PASSWORD_${xi}`),"KEYSTORE_PASSWORD"].find(xi=>!!c[xi]);Ni&&c[Ni]&&(c.ANDROID_STORE_PASSWORD=c[Ni])}if(ao?(c.ANDROID_KEY_PASSWORD=ao,S.info(I.dim("  - Injected key password from credential record"))):c.ANDROID_KEY_PASSWORD=c.ANDROID_STORE_PASSWORD||"",lo)c.ANDROID_KEY_ALIAS=lo;else{let ki=["ANDROID_KEY_ALIAS","KEYSTORE_ALIAS"].find(co=>!!c[co]);ki&&(c.ANDROID_KEY_ALIAS=c[ki])}S.info(I.dim(`  - Injected ${P.name} as ANDROID_KEYSTORE_BASE64`)),B=!0}}catch(je){me.push(`${P.name||P.type}: ${je.message}`)}let re=e.platform==="ios"?e.simulator||G&&U:B||!v.some(P=>P.type==="android_keystore");if(me.length>0&&!re)throw new Error(`Credential setup failed:
+${me.map(P=>`- ${P}`).join(`
+`)}`);me.length>0&&S.warn(I.dim(`  Skipped ${me.length} stale or unusable credential(s).`))}if(b=Kt(p,{framework:e.framework,platform:e.platform,iosBuildNumber:e.resolvedBuildNumber||c.BUILD_NUMBER,androidVersionCode:e.resolvedVersionCode||c.ANDROID_VERSION_CODE}),p.ota?.enabled){if(p.ota.engine==="mach-react-native")throw new Error("This project still uses the unfinished mach-react-native OTA engine. Run `mach ota setup` to migrate to expo-updates before building.");if(!p.ota.url)throw new Error("OTA is enabled but ota.url is missing. Run `mach ota setup` before building.");let D=p.ota.channel||"production";if(e.framework==="expo"){let v=zt(process.cwd(),{platform:e.platform,runtimeVersion:b,channel:D,url:p.ota.url}),G=[v?.runtimeVersion!==b?`runtime ${v?.runtimeVersion||"missing"} (expected ${b})`:void 0,v?.channel!==D?`channel ${v?.channel||"missing"} (expected ${D})`:void 0,v?.url!==p.ota.url?`URL ${v?.url||"missing"} (expected ${p.ota.url})`:void 0].filter(Boolean);if(G.length>0)throw new Error(`Expo OTA configuration mismatch: ${G.join("; ")}. Run \`${m.nameLower} ota setup\` to update the local Expo plugin before building.`)}c.MACH_OTA_RUNTIME_VERSION=b,c.MACH_OTA_CHANNEL=D,c.MACH_OTA_URL=p.ota.url}if(e.platform==="ios"&&!e.simulator){let D=!!c.IOS_DIST_P12,v=!!c.IOS_PROVISIONING_PROFILE;if(!D||!v){let G=[...D?[]:["Distribution Certificate"],...v?[]:["Provisioning Profile"]].join(" and ");if(e.local&&e.buildId)throw new Error(`Missing iOS credentials: ${G}. Expected ${R} credentials for ${T||"the selected bundle ID"}. Run \`${m.nameLower} credentials --platform ios --profile ${y}\` and select ${T||"the correct bundle ID"}.`);S.error(I.red(`Missing iOS credentials: ${G}`)),e.quiet&&process.exit(1);let U=e.yes||await $s({message:"Would you like to generate these credentials now?",initialValue:!0});if(U&&!Wn(U))return await jt({platform:"ios",profile:y}),e.quiet||S.info(I.green("\u2713 Credentials setup complete! Restarting build phase...")),Jn(e);e.quiet||S.info(I.yellow(`Run \`${m.nameLower} credentials\` to set up signing credentials manually.`)),process.exit(1)}}if(e.platform==="android"&&!e.developmentClient&&(e.distribution==="internal"||e.distribution==="store")&&!(!!c.ANDROID_KEYSTORE_BASE64||!!c.ANDROID_KEYSTORE)){S.error(I.red("Missing Android credentials: Signing Keystore")),e.quiet&&process.exit(1);let v=e.yes||await $s({message:"Would you like to automatically create and upload an Android Keystore for this profile now?",initialValue:!0});if(v&&!Wn(v))return await jt({platform:"android",profile:y}),e.quiet||S.info(I.green("\u2713 Android Keystore setup complete! Restarting build phase...")),Jn(e);e.quiet||S.info(I.yellow(`Run \`${m.nameLower} credentials --platform android\` to set up a signing keystore manually.`)),process.exit(1)}}catch(R){(String(R.message||"").startsWith("Credential download failed")||String(R.message||"").startsWith("Credential setup failed")||String(R.message||"").startsWith("Missing iOS credentials")||String(R.message||"").startsWith("Auto-versioning failed"))&&(S.error(I.red(R.message)),process.exit(1)),e.platform==="ios"&&e.local&&e.buildId&&(S.error(I.red(`Failed to resolve iOS credentials: ${R.message}`)),process.exit(1)),S.warn(`Failed to resolve credentials: ${R.message}`)}}let W=!!(e.local&&e.buildId),Z=!!(e.local||e.sshHost),Ee=!Z&&!W;if(W){S.info(I.magenta("\u{1F3D7}\uFE0F Runner Mode: Executing isolated build task..."));let R=await Fi({...e,interactive:!1},n,c,i,{branch:g,version:h,runtimeVersion:b,summary:H,buildType:w});await oe(R),s=!1,process.exit(0)}async function oe(R){let T=async E=>{if(i)try{await en("Report failed build status",()=>$.patch(`/builds/${i}/${n}`,{status:"failed",error:E,endTime:Date.now()}),3)}catch(A){S.warn(I.yellow(`Could not report failed build status: ${A.message}`))}};if(i&&R.length>0){let E=Ar(),A=[];e.quiet||E.start("Uploading artifacts to Dashboard...");try{for(let D of R){let v=ae.basename(D),G=ee.statSync(D).size,U=ae.extname(v).toLowerCase(),B="application/octet-stream",me=await en(`Create artifact upload URL for ${v}`,()=>$.post(`/builds/${i}/${n}/artifact-upload-url`,{fileName:v,fileType:B}));if(me.data.status!=="success")throw new Error(`Failed to get upload URL for ${v}`);await Uu(D,me.data.uploadUrl,B),A.push({name:v,url:me.data.downloadUrl,size:G,type:U.substring(1)})}e.quiet||E.stop("Artifacts uploaded.")}catch(D){e.quiet||E.stop("Failed to upload artifacts.");let v=`Artifact upload failed: ${D.message}`;throw S.error(I.red(v)),await T(v),new Error(v)}if(i&&A.length>0)try{S.info(I.cyan(`
+\u{1F517} Download Links:`));for(let D of A)S.info(I.dim(`  - ${D.name}: `)+I.blue.underline(D.url));await en("Finalize build in dashboard",()=>$.patch(`/builds/${i}/${n}`,{status:"success",artifacts:A,endTime:Date.now(),runtimeVersion:b,...Qt(e)})),tn(e,{status:"success",projectId:i,buildId:n,platform:e.platform,profile:y,branch:g,version:h,runtimeVersion:b,...Qt(e),buildType:w,developmentClient:!!e.developmentClient,summary:H,artifacts:A}),S.success(I.green(`
+\u2713 Build completed and reported to dashboard.`)),e.maestro&&!W&&await Fs(i,n,e,y),e.autoSubmit&&!W&&await br(i,n,e,y)}catch(D){let v=`Build artifact uploaded but dashboard finalization failed: ${D.message}`;throw S.error(I.red(`
+${v}`)),await T(v),new Error(v)}}else if(i){let E="Build completed but produced no uploadable artifacts.";throw S.error(I.red(E)),await T(E),new Error(E)}}if(Z){if(S.info(I.cyan(`\u{1F680} Direct Build Mode: Executing on ${e.sshHost||"local"}...`)),i&&!o){let R=process.argv.slice(3).join(" ");await $.post("/builds",{projectId:i,buildId:n,platform:e.platform,status:"building",branch:g,version:h,runtimeVersion:b,...Qt(e),summary:H,startTime:r,buildType:w,buildProfile:y,buildArgs:R,framework:e.framework,simulator:!!e.simulator,developmentClient:!!e.developmentClient,...Bs(e,n,y,f)}),js(e)}if(e.sshHost&&e.platform==="ios")await Uo(e,n,c,i),s=!1,e.autoSubmit&&await br(i,n,e,y);else{let R=await Fi({...e,interactive:!!e.local},n,c,i,{branch:g,version:h,runtimeVersion:b,summary:H,buildType:w});await oe(R),s=!1}return}if(Ee&&(S.info(I.blue("\u{1F6F0}\uFE0F Cloud Initiator Mode: Preparing orchestration...")),!e.dryRun)){e.quiet||t.start("Zipping and uploading local source...");let R=await $.post("/builds/source-upload-url",{projectId:i,buildId:n});if(R.data.status!=="success")throw t.stop("Failed to get upload URL."),new Error("Failed to get source upload URL from API");Sr("SOURCE_UPLOAD",R.data.uploadUrl);let T=new Ds,E=Ou(T,process.cwd(),e.platform),A=T.toBuffer();if(!e.quiet){let v=E.skipped.length>0?` Skipped: ${E.skipped.join(", ")}.`:"";t.message(`Prepared source (${E.files} files).${v}`)}e.quiet||t.message(`Uploading source (${(A.length/1024/1024).toFixed(1)} MB)...`);let D=!1;for(let v=1;v<=3;v++)try{await Kn.put(R.data.uploadUrl,A,{headers:{"Content-Type":"application/zip"},maxBodyLength:1/0,maxContentLength:1/0,timeout:12e4}),D=!0;break}catch(G){if(v<3)t.message(`Upload attempt ${v} failed (${G.code||G.message}), retrying...`),await new Promise(U=>setTimeout(U,2e3*v));else throw G}if(e.quiet||t.stop("Source uploaded"),i){let v=process.argv.slice(3).join(" ");s=e.platform==="android",await $.post("/builds",{projectId:i,buildId:n,platform:e.platform,status:"pending",branch:g,version:h,runtimeVersion:b,...Qt(e),summary:H,startTime:r,buildType:w,buildProfile:y,buildArgs:v,framework:e.framework,simulator:!!e.simulator,developmentClient:!!e.developmentClient,...Bs(e,n,y,f)}),s=e.platform==="android",S.info(I.green("\u2713 Cloud build registered.")),js(e)}e.platform==="android"&&(await xo(e,n,c,i,e.preBuild),s=!1),e.quiet||S.info(I.cyan("\u{1F4E1} Connecting to build stream...")),await Qu(i,n,e),e.maestro&&await Fs(i,n,e,y),e.autoSubmit&&await br(i,n,e,y);return}}catch(d){let c=d.message||"Build failed";d.response?.data?.message?c=d.response.data.message:d.message.includes("status code 402")?c="Insufficient wallet balance. Please add credits in the Dashboard.":d.message.includes("status code 403")&&(c="Monthly build quota exceeded. Upgrade your plan in the Dashboard."),i&&s&&await a(c),S.error(I.red(`\u2717 Build failed: ${c}`)),process.exit(1)}};async function Fs(e,t,n,i){S.info(I.cyan(`
+\u{1F3BC} Queuing managed Maestro test...`)),await er({projectId:e,buildId:t,platform:n.platform,profile:i,maestroFlows:n.maestroFlows,maestroDevice:n.maestroDevice,maestroRetries:n.maestroRetries,maestroRecord:n.maestroRecord,maestroUseBuildSource:n.maestroUseBuildSource,maestroEnv:n.maestroEnv,quiet:n.quiet})}async function br(e,t,n,i){if(!e){S.error(I.red("Auto-submit requires a linked Mach project. Run `mach link` or pass --project-id.")),process.exitCode=1;return}S.info(I.cyan(`
+Auto-submit: submitting the successful build...`));try{let r=await Xu(e,t);if(r?.autoSubmit){let o=r.submissionId?`${He}/submissions/${r.submissionId}?projectId=${encodeURIComponent(e)}`:void 0,s=String(r.status||"").toLowerCase(),a=String(r.autoSubmitStatus||"").toLowerCase(),l=r.submissionId||["success","completed","succeeded"].includes(s)||["starting","submitted","failed","skipped"].includes(a);if(r.submissionId?(S.info(I.green(`Auto-submit is already queued by Mach backend: ${r.submissionId}`)),S.info(I.dim(`Dashboard: ${o}`))):r.autoSubmitStatus==="failed"?S.warn(I.yellow(`Backend auto-submit failed: ${r.autoSubmitError||"Unknown error"}`)):l&&S.info(I.green("Auto-submit is registered with Mach backend; skipping local duplicate submit.")),l){nt(n,{status:r.autoSubmitStatus||"pending",projectId:e,submitId:r.submissionId,platform:n.platform,profile:i,buildId:t,dashboardUrl:o});return}}await Vn({platform:n.platform,profile:i,buildProfile:i,buildId:t,projectId:e,yes:n.yes,quiet:n.quiet,track:n.submitTrack,releaseStatus:n.submitReleaseStatus,rollout:n.submitRollout,changesNotSentForReview:n.submitChangesNotSentForReview,credentialId:n.submitCredentialId,packageName:n.androidPackage,jsonOutput:n.submitJsonOutput,submitArgs:Js(n,t,i)})}catch(r){S.error(I.red(`Auto-submit failed: ${r.message||r}`)),process.exitCode=1}}function Js(e,t,n){let i=["--platform",e.platform,"--profile",n,"--build-id",t];return e.submitTrack&&i.push("--track",String(e.submitTrack)),e.submitReleaseStatus&&i.push("--release-status",String(e.submitReleaseStatus)),e.submitRollout!==void 0&&i.push("--rollout",String(e.submitRollout)),e.submitChangesNotSentForReview&&i.push("--changes-not-sent-for-review"),e.submitCredentialId&&i.push("--credential-id",e.submitCredentialId),e.platform==="android"&&e.androidPackage&&i.push("--package-name",e.androidPackage),e.platform==="ios"&&e.iosBundleIdentifier&&i.push("--bundle-id",e.iosBundleIdentifier),e.submitJsonOutput&&i.push("--json-output",e.submitJsonOutput),i.join(" ")}async function Xu(e,t){try{let i=(await $.get(`/builds/${e}/${t}`)).data?.build;if(i?.autoSubmit)return i}catch(n){S.warn(I.dim(`Could not check backend auto-submit status: ${n.message}`))}return null}function Ys(e){for(let t of Object.keys(e))e[t]===void 0&&delete e[t];return e}function Zu(e,t,n){let i=n?.submit?.[t]?.android||{},r=n?.submit?.production?.android||{},o=e.submitTrack||i.track||r.track,s=e.submitReleaseStatus||i.releaseStatus||r.releaseStatus,a=e.submitRollout??i.rollout??i.userFraction??i.rolloutFraction??r.rollout??r.userFraction??r.rolloutFraction,l=e.submitChangesNotSentForReview??i.changesNotSentForReview??i.changes_not_sent_for_review??r.changesNotSentForReview??r.changes_not_sent_for_review;return Ys({track:o,releaseStatus:s,rollout:a,changesNotSentForReview:l===void 0?!1:l===!0||l==="true"||l==="1"})}function Bs(e,t,n,i){if(!e.autoSubmit||e.dryRun)return{};let r=e.platform==="android"?Zu(e,n,i):{};return{autoSubmit:!0,autoSubmitStatus:"pending",autoSubmitOptions:Ys({platform:e.platform,profile:n,buildId:t,latest:!1,...r,credentialId:e.submitCredentialId,packageName:e.platform==="android"?e.androidPackage:void 0,bundleId:e.platform==="ios"?e.iosBundleIdentifier:void 0,submitArgs:Js(e,t,n)})}}function js(e){!e.autoSubmit||e.dryRun||e.quiet||(S.info(I.green("\u2713 Auto-submit has been registered with the build.")),S.info(I.dim("  You can close this terminal; submission will start after build success.")))}function Hs(e){return`${He}/build/${e}`}function tn(e,t){if(!e.jsonOutput)return;let n=ae.resolve(e.jsonOutput),i={...t,url:t.url||Hs(t.buildId),dashboardUrl:t.dashboardUrl||Hs(t.buildId),updatedAt:new Date().toISOString()};try{let r=ae.dirname(n);r&&r!=="."&&ee.mkdirSync(r,{recursive:!0}),ee.writeFileSync(n,JSON.stringify(i,null,2))}catch(r){S.warn(I.yellow(`Could not write build metadata JSON: ${r.message}`))}}async function Qu(e,t,n){let r=Ar(),o="pending",s=0,a=0;for(n.quiet||r.start("Connecting to build stream...");;){try{let d=(await $.get(`/builds/${e}/${t}`)).data.build;if(d){o=d.status;let c=String(d.pipelineLaunchState||"").toLowerCase(),u=Number(d.pipelineLaunchClaimedAt),f=Number(d.pipelineLaunchDispatchStartedAt),p=c==="claimed"&&Number.isFinite(u)&&u>0&&Date.now()-u>=3e5,g=c==="dispatching"&&Number.isFinite(f)&&f>0&&Date.now()-f>=3e5;if(["","created","pending","queued"].includes(String(o||"").toLowerCase())&&(c==="retryable_failed"||c==="ambiguous"||p||g)){let y=g||c==="ambiguous"?"ambiguous":"retryable_failed",b=d.pipelineLaunchError||(y==="ambiguous"?"The iOS runner launch outcome is unknown. MACH blocked automatic relaunch to avoid a duplicate pipeline.":p?"The iOS runner was never dispatched before its launch lease expired. Retry this build.":"The iOS runner could not be launched. Retry this build.");n.quiet||r.stop("Build runner launch failed."),tn(n,{status:"failed",projectId:e,buildId:t,platform:n.platform,profile:d.buildProfile,buildType:d.buildType,developmentClient:!!d.developmentClient,version:d.version,runtimeVersion:d.runtimeVersion,buildNumber:d.buildNumber,versionCode:d.versionCode,summary:d.summary,pipelineLaunchState:y,error:b,artifacts:d.artifacts||[]}),S.error(I.red(`
+\u2717 Build runner launch failed: ${b}`)),process.exit(1)}if(o==="building")n.quiet||r.message("Build in progress...");else if(o==="failed"||o==="error"||o==="cancelled"||o==="canceled"){let y=o==="cancelled"||o==="canceled";n.quiet||r.stop(y?"Build cancelled.":"Build failed.");let b=d.error||(y?"Build was cancelled.":"Unknown error");tn(n,{status:o,projectId:e,buildId:t,platform:n.platform,profile:d.buildProfile,buildType:d.buildType,developmentClient:!!d.developmentClient,version:d.version,runtimeVersion:d.runtimeVersion,buildNumber:d.buildNumber,versionCode:d.versionCode,summary:d.summary,error:b,artifacts:d.artifacts||[]}),S.error(I.red(`
+\u2717 ${y?"Build cancelled":"Build failed"}: ${b}`)),process.exit(1)}else if(o==="completed"||o==="success"){n.quiet||r.stop("Build successful!"),tn(n,{status:o,projectId:e,buildId:t,platform:n.platform,profile:d.buildProfile,buildType:d.buildType,developmentClient:!!d.developmentClient,version:d.version,runtimeVersion:d.runtimeVersion,buildNumber:d.buildNumber,versionCode:d.versionCode,summary:d.summary,artifacts:d.artifacts||[]}),S.success(I.green(`
+\u2713 Build completed successfully!`));try{n.quiet||(S.info(I.magenta(`
+\u{1F4F1} Installation Hub:`)),S.info(I.dim("  - View & Install Build: ")+I.white.underline(`${He}/build/${t}`)))}catch{}return}else if(o!=="pending"){n.quiet||r.stop(`Build status: ${o}`);return}}try{let u=(await $.get(`/builds/${e}/${t}/logs`)).data;if(u&&typeof u=="string"&&!n.quiet){let f=u.split(`
+`);if(f.length>s){for(let p=s;p<f.length;p++)f[p].trim()&&console.log(I.dim(`  ${f[p]}`));s=f.length}}}catch{}a=0}catch{a++,a>10&&(r.stop("Connection lost."),S.error(I.red(`
+\u2717 Lost connection to Dashboard API.`)),process.exit(1))}await new Promise(l=>setTimeout(l,3e3))}}import*as ti from"http";import*as ia from"net";import{execFile as ep,execFileSync as st,execSync as Zn,spawn as Xs}from"child_process";import ne from"chalk";import{log as j}from"@clack/prompts";import tp from"axios";import Y from"fs";import ke from"os";import F from"path";var Je=7070,on=`http://127.0.0.1:${Je}`,Pt="com.radhya.mach.agent",Dt="Mach Agent",Ct=`${Pt}.service`,np=5e3,ip=3e3,Yn=null,Xn=null,Ne=()=>F.join(ke.homedir(),m.configDir),ra=()=>F.join(ke.homedir(),"Library","LaunchAgents"),Qn=()=>F.join(ra(),`${Pt}.plist`),oa=()=>F.join(ke.homedir(),".config","systemd","user"),Ir=()=>F.join(oa(),Ct),wr=()=>F.join(Ne(),"agent.cmd");function vr(){return`gui/${process.getuid?.()||Number(Zn("id -u").toString().trim())}`}function sa(e){return e.replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;").replace(/"/g,"&quot;").replace(/'/g,"&apos;")}function rn(e){return`<string>${sa(e)}</string>`}function _r(){let e=process.argv[1]?Y.realpathSync(process.argv[1]):"";if(!e||!Y.existsSync(e))throw new Error("Could not resolve the current Mach CLI entrypoint.");return[process.execPath,e,"agent","run"]}function $r(){let e=aa(),t=process.platform==="win32"?[process.env.SystemRoot?F.join(process.env.SystemRoot,"System32"):void 0,process.env.SystemRoot]:["/opt/homebrew/bin","/usr/local/bin","/usr/bin","/bin","/usr/sbin","/sbin"],n={HOME:ke.homedir(),PATH:[process.env.PATH,...e.flatMap(i=>[F.join(i,"platform-tools"),F.join(i,"emulator"),F.join(i,"cmdline-tools","latest","bin"),F.join(i,"tools","bin")]),...t].filter(Boolean).join(F.delimiter)};for(let i of["ANDROID_HOME","ANDROID_SDK_ROOT","JAVA_HOME","SHELL"])process.env[i]&&(n[i]=process.env[i]);return n}function aa(){let e=[process.env.ANDROID_HOME,process.env.ANDROID_SDK_ROOT];if(process.platform==="darwin")e.push(F.join(ke.homedir(),"Library","Android","sdk"));else if(process.platform==="linux")e.push(F.join(ke.homedir(),"Android","Sdk"),F.join(ke.homedir(),"Android","sdk"),"/opt/android-sdk","/usr/lib/android-sdk");else if(process.platform==="win32"){let t=process.env.LOCALAPPDATA,n=process.env.USERPROFILE||ke.homedir();e.push(t?F.join(t,"Android","Sdk"):void 0,F.join(n,"AppData","Local","Android","Sdk"))}return Array.from(new Set(e.filter(t=>!!t)))}function rp(e){return process.platform==="win32"&&!e.toLowerCase().endsWith(".exe")?`${e}.exe`:e}function la(e,t){let n=rp(e);for(let i of aa()){let r=F.join(i,t,n);if(Y.existsSync(r))return r}return n}function da(){return la("adb","platform-tools")}function ca(){return la("emulator","emulator")}function Er(e){return`"${e.replace(/\\/g,"\\\\").replace(/"/g,'\\"').replace(/%/g,"%%")}"`}function op(){if(process.platform!=="linux")throw new Error("Linux service install requires Linux.");Y.mkdirSync(Ne(),{recursive:!0}),Y.mkdirSync(oa(),{recursive:!0});let e=_r(),t=$r(),n=Object.entries(t).map(([r,o])=>`Environment=${Er(`${r}=${o}`)}`).join(`
 `),i=`[Unit]
 Description=Mach local device agent
 After=default.target
 
 [Service]
 Type=simple
-ExecStart=${e.map(fo).join(" ")}
-WorkingDirectory=${fo(st.homedir())}
+ExecStart=${e.map(Er).join(" ")}
+WorkingDirectory=${Er(ke.homedir())}
 ${n}
 Restart=on-failure
 RestartSec=5
@@ -1512,20 +1583,20 @@ StandardError=append:%h/${m.configDir}/agent.error.log
 
 [Install]
 WantedBy=default.target
-`;return ue.writeFileSync(mo(),i),mo()}function Ut(e,t={}){try{return Ft("systemctl",["--user",...e],{stdio:t.ignoreError?"ignore":"pipe"}),!0}catch(n){if(t.ignoreError)return!1;throw n}}function Sm(){if(process.platform!=="win32")throw new Error("Windows agent script requires Windows.");ue.mkdirSync(at(),{recursive:!0});let e=So(),[t,n,...i]=yo(),r=Y.join(at(),"agent.log"),o=Y.join(at(),"agent.error.log"),s=Object.entries(e).map(([c,u])=>`set "${c}=${u}"`).join(`\r
-`),l=i.map(c=>`"${c.replace(/"/g,'\\"')}"`).join(" "),a=`@echo off\r
+`;return Y.writeFileSync(Ir(),i),Ir()}function ot(e,t={}){try{return st("systemctl",["--user",...e],{stdio:t.ignoreError?"ignore":"pipe"}),!0}catch(n){if(t.ignoreError)return!1;throw n}}function sp(){if(process.platform!=="win32")throw new Error("Windows agent script requires Windows.");Y.mkdirSync(Ne(),{recursive:!0});let e=$r(),[t,n,...i]=_r(),r=F.join(Ne(),"agent.log"),o=F.join(Ne(),"agent.error.log"),s=Object.entries(e).map(([d,c])=>`set "${d}=${c}"`).join(`\r
+`),a=i.map(d=>`"${d.replace(/"/g,'\\"')}"`).join(" "),l=`@echo off\r
 ${s}\r
-cd /d "${st.homedir()}"\r
-"${t}" "${n}" ${l} >> "${r}" 2>> "${o}"\r
-`;return ue.writeFileSync(go(),a),go()}function Wn(e,t={}){try{return Ft("schtasks.exe",e,{stdio:t.ignoreError?"ignore":"pipe"}),!0}catch(n){if(t.ignoreError)return!1;throw n}}function bm(){if(process.platform!=="darwin")throw new Error("Background agent install currently supports macOS only.");ue.mkdirSync(at(),{recursive:!0}),ue.mkdirSync(cl(),{recursive:!0});let e=yo(),t=So(),n=Y.join(at(),"agent.log"),i=Y.join(at(),"agent.error.log"),r=Object.entries(t).map(([l,a])=>`      <key>${ul(l)}</key>
-      ${Kn(a)}`).join(`
-`),o=e.map(l=>`      ${Kn(l)}`).join(`
+cd /d "${ke.homedir()}"\r
+"${t}" "${n}" ${a} >> "${r}" 2>> "${o}"\r
+`;return Y.writeFileSync(wr(),l),wr()}function sn(e,t={}){try{return st("schtasks.exe",e,{stdio:t.ignoreError?"ignore":"pipe"}),!0}catch(n){if(t.ignoreError)return!1;throw n}}function ap(){if(process.platform!=="darwin")throw new Error("Background agent install currently supports macOS only.");Y.mkdirSync(Ne(),{recursive:!0}),Y.mkdirSync(ra(),{recursive:!0});let e=_r(),t=$r(),n=F.join(Ne(),"agent.log"),i=F.join(Ne(),"agent.error.log"),r=Object.entries(t).map(([a,l])=>`      <key>${sa(a)}</key>
+      ${rn(l)}`).join(`
+`),o=e.map(a=>`      ${rn(a)}`).join(`
 `),s=`<?xml version="1.0" encoding="UTF-8"?>
 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
 <plist version="1.0">
 <dict>
   <key>Label</key>
-  ${Kn(yn)}
+  ${rn(Pt)}
   <key>ProgramArguments</key>
   <array>
 ${o}
@@ -1537,181 +1608,26 @@ ${r}
   <key>RunAtLoad</key>
   <true/>
   <key>StandardOutPath</key>
-  ${Kn(n)}
+  ${rn(n)}
   <key>StandardErrorPath</key>
-  ${Kn(i)}
-</dict>
-</plist>
-`;return ue.writeFileSync(Fi(),s),Fi()}function Mt(e,t={}){try{return Ft("launchctl",e,{stdio:t.ignoreError?"ignore":"pipe"}),!0}catch(n){if(t.ignoreError)return!1;throw n}}function Am(e){return new Promise(t=>setTimeout(t,e))}function ji(e,t,n=mm){return new Promise((i,r)=>{pm(e,t,{timeout:n,maxBuffer:10*1024*1024,windowsHide:!0},(o,s,l)=>{if(o){let a=l?.toString().trim();r(new Error(a||o.message));return}i(s?.toString()||"")})})}async function hl(){if(typeof fetch=="function"){let e=new AbortController,t=setTimeout(()=>e.abort(),3e3);try{return(await fetch(`${zn}/health`,{signal:e.signal})).ok}catch{return!1}finally{clearTimeout(t)}}return new Promise(e=>{let t=!1,n=r=>{t||(t=!0,e(r))},i=Bi.get(`${zn}/health`,r=>{r.resume(),n(r.statusCode===200)});i.setTimeout(3e3,()=>{i.destroy(),n(!1)}),i.on("error",()=>n(!1))})}async function Em(e=8e3){let t=Date.now()+e;for(;Date.now()<t;){if(await hl())return!0;await Am(250)}return!1}async function yl(){return new Promise(e=>{let t=!1,n=ll.createConnection({host:"127.0.0.1",port:_t}),i=r=>{t||(t=!0,n.destroy(),e(r))};n.setTimeout(1e3),n.once("connect",()=>i(!0)),n.once("timeout",()=>i(!1)),n.once("error",()=>i(!1))})}async function bo(){if(await Em()){Z.success(Ae.green("Mach agent installed and started."));return}if(await yl()){Z.warn(`Mach agent service is installed, but port ${_t} is held by a process that is not answering /health.`),Z.info(Ae.dim(`Run \`${m.nameLower} agent stop\`, close any foreground \`${m.nameLower} agent\` terminal, then run \`${m.nameLower} agent install\` again.`));return}Z.warn(`Mach agent service is installed, but it did not start listening on ${zn}.`)}async function wm(){let e=bm(),t=ho();Mt(["bootout",t,e],{ignoreError:!0}),Mt(["bootstrap",t,e],{ignoreError:!0})||Mt(["load","-w",e]),Mt(["enable",`${t}/${yn}`],{ignoreError:!0}),Mt(["kickstart","-k",`${t}/${yn}`],{ignoreError:!0}),await bo(),Z.info(Ae.dim(`It will start automatically when you log in. Plist: ${e}`)),Z.info(Ae.dim(`Logs: ${Y.join(at(),"agent.log")}`))}async function Sl(){let e=Fi(),t=ho();Mt(["bootout",t,e],{ignoreError:!0})||Mt(["unload","-w",e],{ignoreError:!0})?Z.success(Ae.green("Mach agent service stopped.")):Z.warn("Mach agent service was not loaded.")}async function Im(){await Sl();let e=Fi();ue.existsSync(e)&&ue.unlinkSync(e),Z.success(Ae.green("Mach agent service uninstalled."))}async function vm(){let e=ym();Ut(["daemon-reload"]),Ut(["enable","--now",Sn]),await bo(),Z.info(Ae.dim(`It will start automatically when you log in. Service: ${e}`)),Z.info(Ae.dim(`Logs: ${Y.join(at(),"agent.log")}`))}async function $m(){Ut(["stop",Sn],{ignoreError:!0})?Z.success(Ae.green("Mach agent service stopped.")):Z.warn("Mach agent service was not running.")}async function _m(){Ut(["disable","--now",Sn],{ignoreError:!0}),Ut(["daemon-reload"],{ignoreError:!0});let e=mo();ue.existsSync(e)&&ue.unlinkSync(e),Ut(["daemon-reload"],{ignoreError:!0}),Z.success(Ae.green("Mach agent service uninstalled."))}async function Pm(){let e=Sm();Wn(["/Create","/TN",hn,"/SC","ONLOGON","/TR",`"${e}"`,"/RL","LIMITED","/F"]),Wn(["/Run","/TN",hn],{ignoreError:!0}),await bo(),Z.info(Ae.dim(`It will start automatically when you log in. Task: ${hn}`)),Z.info(Ae.dim(`Logs: ${Y.join(at(),"agent.log")}`))}async function bl(){Wn(["/End","/TN",hn],{ignoreError:!0})?Z.success(Ae.green("Mach agent task stopped.")):Z.warn("Mach agent task was not running.")}async function Rm(){await bl(),Wn(["/Delete","/TN",hn,"/F"],{ignoreError:!0});let e=go();ue.existsSync(e)&&ue.unlinkSync(e),Z.success(Ae.green("Mach agent task uninstalled."))}async function il(){if(process.platform==="darwin")return wm();if(process.platform==="linux")return vm();if(process.platform==="win32")return Pm();throw new Error(`Background agent install is not supported on ${process.platform}.`)}async function rl(){if(process.platform==="darwin")return Sl();if(process.platform==="linux")return $m();if(process.platform==="win32")return bl();Z.warn(`Background agent service control is not supported on ${process.platform}.`)}async function Om(){if(process.platform==="darwin")return Im();if(process.platform==="linux")return _m();if(process.platform==="win32")return Rm();Z.warn(`Background agent uninstall is not supported on ${process.platform}.`)}async function Cm(){let e=await hl(),t=e?!0:await yl();if(e?Z.success(Ae.green(`Mach agent is online at ${zn}`)):t?Z.warn(`Mach agent port is open, but /health did not respond. Run \`${m.nameLower} agent restart\` if the dashboard still shows offline.`):Z.warn(`Mach agent is not responding at ${zn}`),process.platform==="darwin"){let n=Mt(["print",`${ho()}/${yn}`],{ignoreError:!0});Z.info(Ae.dim(`Login service: ${n?"installed/loaded":"not loaded"}`))}else if(process.platform==="linux"){let n=Ut(["is-enabled",Sn],{ignoreError:!0}),i=Ut(["is-active",Sn],{ignoreError:!0});Z.info(Ae.dim(`Login service: ${n?"enabled":"not enabled"} / ${i?"active":"inactive"}`))}else if(process.platform==="win32"){let n=Wn(["/Query","/TN",hn],{ignoreError:!0});Z.info(Ae.dim(`Login task: ${n?"installed":"not installed"}`))}}async function Dm(){let e=[];try{(await ji(ml(),["devices","-l"])).split(`
-`).forEach(n=>{if(n.includes("List of devices")||!n.trim())return;let i=n.split(/\s+/);if(i.length<2||i[1]!=="device")return;let r=i[0],o=n.match(/model:([^\s]+)/);e.push({id:r,platform:"android",type:r.startsWith("emulator-")?"emulator":"physical",name:o?o[1].replace(/_/g," "):r,status:"online",details:n.trim()})})}catch{}try{let n=(await ji(gl(),["-list-avds"])).split(`
-`).filter(r=>!!r.trim()),i=e.some(r=>r.platform==="android"&&r.id.startsWith("emulator-"));n.forEach(r=>{i||e.push({id:r,platform:"android",type:"emulator",name:r.replace(/_/g," "),status:"offline",details:`Android Virtual Device: ${r}`})})}catch{}return e}async function Al(){if(process.platform!=="darwin")return[];try{let e=await ji("/usr/bin/xcrun",["simctl","list","devices","--json"]),t=JSON.parse(e),n=[];return Object.entries(t.devices||{}).forEach(([i,r])=>{r.forEach(o=>{o.isAvailable&&n.push({id:o.udid,platform:"ios",type:"simulator",name:o.name,status:o.state?.toLowerCase()==="booted"?"online":"offline",runtime:i,details:`${o.name} (${i})`})})}),n}catch{return[]}}async function km(){if(process.platform!=="darwin")return[];try{let e=await ji("/usr/bin/xcrun",["devicectl","list","devices","--json-output","-"]);return(JSON.parse(e).result?.devices||[]).filter(n=>{let i=n.connectionProperties?.transportType;return i==="wired"||i==="localNetwork"}).map(n=>{let i=n.connectionProperties?.transportType,r=n.deviceProperties?.name||"iPhone";return{id:n.identifier,platform:"ios",type:"physical",name:r,status:"online",details:`${r} (${n.model?.name||n.hardwareModel||""}) - ${i}`}})}catch{return[]}}async function xm(e){let t=await Al(),n=t.find(r=>r.id===e);if(n)return n;let i=t.filter(r=>r.status==="online");return i.length===1?i[0]:null}async function Nm(){let[e,t,n]=await Promise.all([Dm(),Al(),km()]);return[...e,...t,...n]}async function Tm(){let e=Date.now();return Li&&e-Li.updatedAt<gm?Li.targets:(Mi||(Mi=Nm().then(t=>(Li={targets:t,updatedAt:Date.now()},t)).finally(()=>{Mi=null})),Mi)}async function ol(e){let t=[];for await(let n of e)t.push(Buffer.isBuffer(n)?n:Buffer.from(n));return t.length===0?{}:JSON.parse(Buffer.concat(t).toString("utf-8"))}async function Lm(e,t){let n=await fm({method:"GET",url:e,responseType:"stream",timeout:12e4}),i=ue.createWriteStream(t);n.data.pipe(i),await new Promise((r,o)=>{i.on("finish",r),i.on("error",o)})}function sl(e,t){let n=e?.stderr?.toString?.().trim();if(n)return n;let i=e?.stdout?.toString?.().trim();return i||e?.message||t}function Mm(e,t){return Ft("/usr/libexec/PlistBuddy",["-c",`Print :${t}`,e],{encoding:"utf-8"}).trim()}function Um(e){let t=Y.join(e,"Info.plist");if(!ue.existsSync(t))throw new Error(`Could not validate iOS app executable: ${t} not found.`);let n=Mm(t,"CFBundleExecutable"),i=Y.join(e,n);if(!ue.existsSync(i))throw new Error(`Could not validate iOS app executable: ${i} not found.`);return i}function Fm(){return process.arch==="arm64"?"arm64":"x86_64"}function jm(e){return ue.existsSync(e)?ue.readdirSync(e).map(t=>Y.join(e,t)).filter(t=>t.endsWith(".app")&&ue.statSync(t).isDirectory()):[]}function al(e,t){let n=jm(e);if(n.length===1)return n[0];if(n.length>1)throw new Error(`Multiple .app bundles found in ${t}: ${n.map(i=>Y.basename(i)).join(", ")}. Mach cannot safely choose which app to install.`);return""}function Bm(e){let t=Um(e),n=Fm(),i="",r="";try{i=Ft("lipo",["-info",t],{encoding:"utf-8"}).trim()}catch(o){throw new Error(`Could not inspect iOS simulator app architecture for ${Y.basename(e)}: ${o.message}`)}if(!new RegExp(`\\b${n}\\b`).test(i))throw new Error(`This iOS simulator artifact cannot be installed because ${Y.basename(e)} does not include the ${n} simulator architecture. lipo output: ${i}. Rebuild the app with the latest Mach CLI and make sure the profile is a simulator build.`);try{r=Ft("/usr/bin/xcrun",["vtool","-show-build",t],{encoding:"utf-8"}).trim()}catch(o){throw new Error(`Could not inspect iOS simulator app platform for ${Y.basename(e)}: ${o.message}`)}if(!/\bplatform\s+IOSSIMULATOR\b/i.test(r))throw new Error(`This iOS simulator artifact cannot be installed because ${Y.basename(e)} was built for the wrong Apple platform. A simulator artifact must contain platform IOSSIMULATOR. vtool output: ${r}. Rebuild the app with the latest Mach CLI.`)}async function Hm(e,t,n){let i=n||(t.toLowerCase().includes(".apk")?"android":"ios"),r=t.toLowerCase().includes(".ipa"),o=ue.mkdtempSync(Y.join(st.tmpdir(),`${_t}-install-`)),s=Y.join(o,i==="android"?"install.apk":r?"install.ipa":"install.zip");try{if(await Lm(t,s),i==="android"){Ft(ml(),["-s",e,"install","-r",s],{stdio:"pipe"});return}if(process.platform!=="darwin")throw new Error("iOS local install requires macOS.");Ui(`unzip -o ${JSON.stringify(s)} -d ${JSON.stringify(o)}`,{stdio:"pipe"});let l=Y.join(o,"Payload"),a=ue.existsSync(l),c=r||a,u="";if(c?u=al(l,"Payload"):u=al(o,"the simulator artifact"),!u)throw new Error(`No .app bundle found inside the ${r?"IPA":"archive"}.`);let d=c?null:await xm(e);if(d){try{Bm(u),Ft("/usr/bin/xcrun",["simctl","install",d.id,u],{stdio:"pipe"})}catch(p){throw new Error(sl(p,"iOS Simulator install failed."))}return}if(!c)throw new Error("Selected iOS Simulator was not found. Refresh Install Hub devices or boot one simulator and try again.");try{Ui(`/usr/bin/xcrun devicectl device install app --device ${JSON.stringify(e)} ${JSON.stringify(u)}`,{stdio:"pipe"})}catch(p){throw new Error(sl(p,"iOS device install failed."))}}finally{ue.rmSync(o,{recursive:!0,force:!0})}}function Gm(e,t){if(!e)throw new Error("Device id is required.");if(t==="ios"){if(process.platform!=="darwin")throw new Error("iOS Simulator launch requires macOS.");return Ui(`/usr/bin/xcrun simctl boot ${JSON.stringify(e)}`,{stdio:"pipe"}),nl("open",["-a","Simulator"],{detached:!0,stdio:"ignore"}).unref(),"Simulator booting..."}if(t==="android")return nl(gl(),["-avd",e],{detached:!0,stdio:"ignore",windowsHide:!0}).unref(),"Emulator booting in background...";throw new Error("Invalid platform.")}async function Vm(){process.platform!=="darwin"&&Z.warn("Running on non-macOS \u2014 iOS discovery unavailable, Android only.");let e=Bi.createServer((i,r)=>{if(r.setHeader("Access-Control-Allow-Origin","*"),r.setHeader("Access-Control-Allow-Methods","GET, POST, OPTIONS"),r.setHeader("Access-Control-Allow-Headers","Content-Type, Authorization"),i.method==="OPTIONS"){r.writeHead(204),r.end();return}let o=new URL(i.url||"/",`http://localhost:${_t}`);if(i.method==="GET"&&o.pathname==="/local/devices"){Tm().then(s=>{r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",targets:s}))}).catch(s=>{r.writeHead(500,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:s.message}))});return}if(i.method==="GET"&&o.pathname==="/health"){r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",service:"mach-agent",port:_t,platform:process.platform}));return}if(i.method==="POST"&&o.pathname==="/install-local"){t(i,r);return}if(i.method==="POST"&&o.pathname==="/local/boot"){n(i,r);return}r.writeHead(404),r.end()}),t=async(i,r)=>{try{let{deviceId:o,artifactUrl:s,platform:l}=await ol(i);if(!o||!s){r.writeHead(400,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:"deviceId and artifactUrl are required"}));return}await Hm(o,s,l),r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",message:`Installed on ${o}`}))}catch(o){r.writeHead(500,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:o.message||"Local install failed"}))}},n=async(i,r)=>{try{let{id:o,platform:s}=await ol(i),l=Gm(o,s);r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",message:l}))}catch(o){r.writeHead(500,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:o.message||"Local device launch failed"}))}};e.listen(_t,"127.0.0.1",()=>{Z.success(Ae.green(`Local device agent running on http://localhost:${_t}`)),Z.info(Ae.dim("Keep this running while using the Install Hub on the dashboard.")),Z.info(Ae.dim("Press Ctrl+C to stop."))}),e.on("error",i=>{i.code==="EADDRINUSE"?Z.error(`Port ${_t} is already in use \u2014 agent may already be running.`):Z.error(`Agent error: ${i.message}`),process.exit(1)}),await new Promise(()=>{})}async function El(e="start"){let t=String(e||"start").toLowerCase();if(t==="start"||t==="run"){await Vm();return}if(t==="install"){await il();return}if(t==="status"){await Cm();return}if(t==="stop"){await rl();return}if(t==="uninstall"){await Om();return}if(t==="restart"){await rl(),await il();return}Z.error(`Unknown agent action: ${e}`),Z.info(Ae.dim(`Use: ${m.nameLower} agent start | install | status | restart | stop | uninstall`)),process.exit(1)}import{createRequire as Km}from"module";var zm=Km(import.meta.url),Wm=zm("../package.json"),ht=String(Wm.version||"0.0.0");import{spinner as Hi}from"@clack/prompts";import le from"chalk";import{spawnSync as ag}from"child_process";import Ie from"fs";import je from"path";import te from"fs";import pe from"path";var Jm={expo:["src/app/_layout.tsx","src/app/_layout.ts","src/app/_layout.jsx","src/app/_layout.js","app/_layout.tsx","app/_layout.ts","app/_layout.jsx","app/_layout.js","src/App.tsx","src/App.ts","src/App.jsx","src/App.js","App.tsx","App.ts","App.jsx","App.js"],"react-native":["index.ts","index.tsx","index.js","index.jsx","src/index.ts","src/index.tsx","src/index.js","src/index.jsx","App.tsx","App.ts","App.jsx","App.js","src/App.tsx","src/App.ts","src/App.jsx","src/App.js"]};function ze(e,t){return pe.relative(e,t).split(pe.sep).join("/")}function qm(e,t){return t.find(n=>te.existsSync(pe.join(e,n)))}function Ym(e,t){return t.split(pe.sep).join("/").startsWith("src/")?pe.join(e,"src"):e}function Xm(e){return e.endsWith(".ts")||e.endsWith(".tsx")}function Zm(e,t){let n=t.replace(/\.(?:tsx?|jsx?)$/,""),i=pe.relative(pe.dirname(e),n).split(pe.sep).join("/");return i.startsWith(".")||(i=`./${i}`),i}function Qm(e,t){let n=te.readFileSync(e,"utf8");if(n.includes("MACH Push setup")||/(?:from\s+)?['"][^'"]*mach-push['"]/.test(n))return!1;let i=Zm(e,t);return te.writeFileSync(e,`import '${i}'; // MACH Push setup
-${n}`),!0}function eg(e,t){return`// Generated by \`mach push setup\`. Re-run the command to refresh.
-// Public client configuration only. Provider credentials are never written here.
-${t?`import type { MachPushConfig } from '@radhya/mach-push-react-native';
-`:""}
-
-export const machPushConfig${t?": MachPushConfig":""} = ${JSON.stringify(e,null,2)};
-`}function tg(e,t){return t?`/**
- * MACH Push application hooks.
- *
- * This file belongs to your app and is never overwritten by
- * \`mach push setup\`. Customize these callbacks whenever you need to route
- * notification taps, update application state, or associate a user.
- */
-import { Platform } from 'react-native';
-import {
-  setupMachPush,
-  type MachPushNotification,
-  type MachPushPermissionStatus,
-  type MachPushRegistration,
-} from '@radhya/mach-push-react-native';
-import { machPushConfig } from '${e}';
-
-export function onMachPushNotificationReceived(
-  _notification: MachPushNotification,
-) {
-  // Notifications are displayed automatically. Add foreground behavior here.
-}
-
-export function onMachPushNotificationOpened(
-  _notification: MachPushNotification,
-) {
-  // Read _notification.data and navigate to the appropriate screen here.
-}
-
-export function onMachPushRegistered(
-  _registration: MachPushRegistration,
-) {
-  // The installation is now ready to receive MACH notifications.
-}
-
-export function onMachPushPermissionChanged(
-  _status: MachPushPermissionStatus,
-) {
-  // Optionally reflect notification permission in application settings.
-}
-
-export function onMachPushError(error: Error) {
-  if (__DEV__) {
-    console.warn('[MACH Push]', error.message);
-  }
-}
-
-let startPromise: ReturnType<typeof setupMachPush> | undefined;
-
-export function startMachPush() {
-  if (Platform.OS !== 'ios' && Platform.OS !== 'android') return undefined;
-  if (!startPromise) {
-    startPromise = setupMachPush(machPushConfig, {
-      onNotificationReceived: onMachPushNotificationReceived,
-      onNotificationOpened: onMachPushNotificationOpened,
-      onRegistered: onMachPushRegistered,
-      onPermissionChanged: onMachPushPermissionChanged,
-      onError: onMachPushError,
-    });
-  }
-  return startPromise;
-}
-
-// The basic experience works immediately. Remove this line if your product
-// asks for notification permission at a later, contextual moment.
-void startMachPush()?.catch(() => undefined);
-`:`/**
- * MACH Push application hooks.
- *
- * This file belongs to your app and is never overwritten by
- * \`mach push setup\`. Customize these callbacks whenever you need to route
- * notification taps, update application state, or associate a user.
- */
-import { Platform } from 'react-native';
-import { setupMachPush } from '@radhya/mach-push-react-native';
-import { machPushConfig } from '${e}';
-
-export function onMachPushNotificationReceived(_notification) {
-  // Notifications are displayed automatically. Add foreground behavior here.
-}
-
-export function onMachPushNotificationOpened(_notification) {
-  // Read _notification.data and navigate to the appropriate screen here.
-}
-
-export function onMachPushRegistered(_registration) {
-  // The installation is now ready to receive MACH notifications.
-}
-
-export function onMachPushPermissionChanged(_status) {
-  // Optionally reflect notification permission in application settings.
-}
-
-export function onMachPushError(error) {
-  if (__DEV__) {
-    console.warn('[MACH Push]', error.message);
-  }
-}
-
-let startPromise;
-
-export function startMachPush() {
-  if (Platform.OS !== 'ios' && Platform.OS !== 'android') return undefined;
-  if (!startPromise) {
-    startPromise = setupMachPush(machPushConfig, {
-      onNotificationReceived: onMachPushNotificationReceived,
-      onNotificationOpened: onMachPushNotificationOpened,
-      onRegistered: onMachPushRegistered,
-      onPermissionChanged: onMachPushPermissionChanged,
-      onError: onMachPushError,
-    });
-  }
-  return startPromise;
-}
-
-// The basic experience works immediately. Remove this line if your product
-// asks for notification permission at a later, contextual moment.
-void startMachPush()?.catch(() => undefined);
-`}function wl(e,t,n){let i=[],r=[],o=qm(e,Jm[t]);if(!o)return{written:i,notes:["Could not locate the application entry point. Import the generated mach-push file once from your root App or layout."]};let s=pe.join(e,o),l=Ym(e,o),a=Xm(o)?"ts":"js",c=a==="ts",u=pe.join(l,`mach-push.generated.${a}`),d=pe.join(l,`mach-push.${a}`);return te.mkdirSync(l,{recursive:!0}),te.writeFileSync(u,eg(n,c)),i.push(ze(e,u)),te.existsSync(d)?r.push(`${ze(e,d)} already exists; developer callbacks were preserved.`):(te.writeFileSync(d,tg("./mach-push.generated",c)),i.push(ze(e,d))),Qm(s,d)?i.push(ze(e,s)):r.push(`${ze(e,s)} already starts MACH Push.`),{written:i,notes:r,editableFile:ze(e,d),generatedFile:ze(e,u),entryFile:ze(e,s)}}function Il(e,t){if(!te.existsSync(e))return[];let n=[];for(let i of te.readdirSync(e,{withFileTypes:!0})){if(i.name==="Pods"||i.name==="build")continue;let r=pe.join(e,i.name);i.isDirectory()?n.push(...Il(r,t)):t(r)&&n.push(r)}return n}function ng(e,t){if(te.mkdirSync(pe.dirname(e),{recursive:!0}),!te.existsSync(e)){te.writeFileSync(e,`<?xml version="1.0" encoding="UTF-8"?>
-<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
-<plist version="1.0">
-<dict>
-  <key>aps-environment</key>
-  <string>${t}</string>
+  ${rn(i)}
 </dict>
 </plist>
-`);return}let n=te.readFileSync(e,"utf8"),i=/(<key>aps-environment<\/key>\s*<string>)([^<]*)(<\/string>)/;if(i.test(n)){te.writeFileSync(e,n.replace(i,`$1${t}$3`));return}n.includes("</dict>")&&te.writeFileSync(e,n.replace("</dict>",`  <key>aps-environment</key>
-  <string>${t}</string>
-</dict>`))}function ig(e,t,n){let i=[],r=[],o=pe.join(e,"ios");if(!te.existsSync(o))return r.push("iOS native project is not present; no APNs entitlement was changed."),{written:i,notes:r};let l=Il(o,u=>u.endsWith(".xcodeproj/project.pbxproj"))[0];if(!l)return r.push("Could not locate an iOS Xcode project for the APNs entitlement."),{written:i,notes:r};let a=te.readFileSync(l,"utf8"),c=Array.from(a.matchAll(/CODE_SIGN_ENTITLEMENTS\s*=\s*"?([^";$]+\.entitlements)"?;/g),u=>u[1].trim());if(c.length===0&&t){let u=pe.basename(pe.dirname(l),".xcodeproj"),p=[te.existsSync(pe.join(o,u))?u:"",`${u}.entitlements`].filter(Boolean).join("/"),f=!1;a=a.replace(/buildSettings = \{([\s\S]*?)\n(\s*)\};/g,(g,h,S)=>!new RegExp(`PRODUCT_BUNDLE_IDENTIFIER\\s*=\\s*"?${t.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}"?;`).test(h)||h.includes("CODE_SIGN_ENTITLEMENTS")?g:(f=!0,g.replace(/(\n\s*PRODUCT_BUNDLE_IDENTIFIER\s*=)/,`
-${S}	CODE_SIGN_ENTITLEMENTS = ${p};$1`))),f&&(te.writeFileSync(l,a),i.push(ze(e,l)),c.push(p))}if(c.length===0)return r.push("Could not safely identify the iOS app target. Enable the Push Notifications capability in Xcode."),{written:i,notes:r};for(let u of new Set(c)){let d=pe.join(o,u);ng(d,n),i.push(ze(e,d))}return r.push(`iOS APNs entitlement is configured for ${n}.`),{written:[...new Set(i)],notes:r}}function rg(e,t){let n=te.readFileSync(e,"utf8");if(n.includes("com.google.gms.google-services"))return!1;let i=/plugins\s*\{/.exec(n);if(i?.index!==void 0){let r=t?`    id("com.google.gms.google-services")
-`:`    id 'com.google.gms.google-services'
-`,o=i.index+i[0].length;te.writeFileSync(e,`${n.slice(0,o)}
-${r}${n.slice(o)}`)}else{let r=t?`
-apply(plugin = "com.google.gms.google-services")
-`:`
-apply plugin: "com.google.gms.google-services"
-`;te.writeFileSync(e,`${n.trimEnd()}${r}`)}return!0}function og(e){let t=["settings.gradle.kts","settings.gradle"].map(l=>pe.join(e,l)).find(l=>te.existsSync(l));if(t){let l=te.readFileSync(t,"utf8");if(l.includes("com.google.gms.google-services"))return;let a=/plugins\s*\{/.exec(l);if(a?.index!==void 0){let u=t.endsWith(".kts")?`    id("com.google.gms.google-services") version "4.4.4" apply false
-`:`    id "com.google.gms.google-services" version "4.4.4" apply false
-`,d=a.index+a[0].length;return te.writeFileSync(t,`${l.slice(0,d)}
-${u}${l.slice(d)}`),t}}let n=["build.gradle.kts","build.gradle"].map(l=>pe.join(e,l)).find(l=>te.existsSync(l));if(!n)return;let i=te.readFileSync(n,"utf8");if(i.includes("com.google.gms:google-services"))return;let r=/dependencies\s*\{/.exec(i);if(r?.index===void 0)return;let o=`        classpath("com.google.gms:google-services:4.4.4")
-`,s=r.index+r[0].length;return te.writeFileSync(n,`${i.slice(0,s)}
-${o}${i.slice(s)}`),n}function sg(e,t){let n=[],i=[],r=pe.join(e,"android");if(!te.existsSync(r))return i.push("Android native project is not present; no Firebase configuration was changed."),{written:n,notes:i};if(!t)return i.push("Android needs google-services.json. Add it at the project root and re-run mach push setup."),{written:n,notes:i};let o=pe.resolve(e,t);if(!te.existsSync(o))return i.push(`Android Firebase file was not found at ${t}; re-run setup with --google-services-file.`),{written:n,notes:i};let s=pe.join(r,"app/google-services.json");te.mkdirSync(pe.dirname(s),{recursive:!0}),o!==s&&(te.copyFileSync(o,s),n.push(ze(e,s)));let l=["build.gradle.kts","build.gradle"].map(c=>pe.join(r,"app",c)).find(c=>te.existsSync(c));if(!l)return i.push("Could not locate android/app/build.gradle to enable Firebase."),{written:n,notes:i};rg(l,l.endsWith(".kts"))&&n.push(ze(e,l));let a=og(r);return a&&n.push(ze(e,a)),i.push("Android Firebase configuration and notification permission are wired."),{written:[...new Set(n)],notes:i}}function vl(e,t){let n=ig(e,t.iosBundleId,t.iosEnvironment),i=sg(e,t.googleServicesFile);return{written:[...new Set([...n.written,...i.written])],notes:[...n.notes,...i.notes]}}function lg(){return je.join(process.cwd(),m.configFileName)}function Gi(){let e=we();if(!e?.projectId)throw new Error(`No linked MACH project. Run \`${m.nameLower} link\` first.`);return e}function Pl(e){Ie.writeFileSync(lg(),`${JSON.stringify(e,null,2)}
-`)}function cg(){let e=je.join(process.cwd(),"package.json");if(!Ie.existsSync(e))return null;try{return JSON.parse(Ie.readFileSync(e,"utf8"))}catch{return null}}function $l(e){let t=cg();return!!(t?.dependencies?.[e]||t?.devDependencies?.[e])}function dg(e,t=!1){let n=process.cwd();return Ie.existsSync(je.join(n,"pnpm-lock.yaml"))?{command:"pnpm",args:["add",...t?["-D"]:[],e],label:`pnpm add ${t?"-D ":""}${e}`}:Ie.existsSync(je.join(n,"yarn.lock"))?{command:"yarn",args:["add",...t?["-D"]:[],e],label:`yarn add ${t?"-D ":""}${e}`}:Ie.existsSync(je.join(n,"bun.lock"))||Ie.existsSync(je.join(n,"bun.lockb"))?{command:"bun",args:["add",...t?["-d"]:[],e],label:`bun add ${t?"-d ":""}${e}`}:{command:"npm",args:["install",...t?["--save-dev"]:["--save"],e],label:`npm install ${t?"--save-dev ":""}${e}`}}function _l(e,t=!1){let n=dg(e,t),i=ag(n.command,n.args,{cwd:process.cwd(),stdio:"inherit",env:{...process.env}});return i.error||i.status!==0?{ok:!1,note:`${n.label} failed${i.error?`: ${i.error.message}`:` with code ${i.status}`}.`}:{ok:!0,note:`Installed with ${n.label}.`}}function ug(e,t){let n=[];if(t)return n.push("Dependency installation skipped."),n;if($l("@radhya/mach-push-react-native"))n.push("@radhya/mach-push-react-native is already installed.");else{let i=_l("@radhya/mach-push-react-native");if(!i.ok)throw new Error(`${i.note} No application files were wired.`);n.push(i.note)}if(e==="expo")if($l("@radhya/mach"))n.push("@radhya/mach is already available to the Expo config.");else{let i=_l(`@radhya/mach@${ht}`,!0);if(!i.ok)throw new Error(`${i.note} No Expo configuration was changed.`);n.push(i.note)}return n}function pg(e,t){return e||t||["google-services.json","android/app/google-services.json"].find(n=>Ie.existsSync(je.join(process.cwd(),n)))}function Rl(e){let t=process.cwd(),n=e==="ios"?"bundleIdentifier":"package";for(let i of["app.json","app.config.json"]){let r=je.join(t,i);if(Ie.existsSync(r))try{let o=JSON.parse(Ie.readFileSync(r,"utf8")),l=(o.expo&&typeof o.expo=="object"?o.expo:o)?.[e]?.[n];if(typeof l=="string"&&l.trim())return l.trim()}catch{}}for(let i of["app.config.ts","app.config.js"]){let r=je.join(t,i);if(!Ie.existsSync(r))continue;let s=Ie.readFileSync(r,"utf8").match(new RegExp(`${n}\\s*:\\s*['"]([^'"]+)['"]`));if(s?.[1])return s[1]}}function Ol(e,t){return t||Wt(e)||Rl("ios")||Ze("ios")||void 0}function Cl(e,t){return t||an(e)||Rl("android")||Ze("android")||void 0}function fg(e,t){let n=Ie.readFileSync(e,"utf8");if(n.includes(t))return"already";let i=/(^[ \t]*)plugins\s*:\s*\[([\s\S]*?)\]/m.exec(n);if(!i||i.index===void 0)return"manual";let r=n.includes(`\r
-`)?`\r
-`:`
-`,o=i[1]||"",s=i[2]||"",l=s.match(/\r?\n([ \t]+)\S/)?.[1]||`${o}  `,a=s.trim().length===0?`${r}${l}'${t}',${r}${o}`:`${r}${l}'${t}',${s}`,c=i[0].indexOf("["),u=`${i[0].slice(0,c+1)}${a}]`;return Ie.writeFileSync(e,`${n.slice(0,i.index)}${u}${n.slice(i.index+i[0].length)}`),"inserted"}function Dl(){let e="@radhya/mach/expo-plugin",t=["app.config.ts","app.config.js"].find(a=>Ie.existsSync(je.join(process.cwd(),a)));if(t){let a=fg(je.join(process.cwd(),t),e);return a==="inserted"?`${t} now includes ${e}.`:a==="already"?`${t} already includes ${e}.`:`Add "${e}" to the plugins array in ${t}; MACH could not safely edit its computed configuration.`}let n=["app.config.json","app.json"].find(a=>Ie.existsSync(je.join(process.cwd(),a)));if(!n)return`Add "${e}" to the Expo plugins array.`;let i=je.join(process.cwd(),n),r=JSON.parse(Ie.readFileSync(i,"utf8")),o=r.expo&&typeof r.expo=="object"?r.expo:r,s=Array.isArray(o.plugins)?o.plugins:[];return s.some(a=>(Array.isArray(a)?a[0]:a)===e)?`${n} already includes ${e}.`:(o.plugins=[...s,e],Ie.writeFileSync(i,`${JSON.stringify(r,null,2)}
-`),`${n} now includes ${e}.`)}function kl(e){let t=Gi(),n=e.app||t.push?.appId;if(!n)throw new Error(`Push is not configured. Run \`${m.nameLower} push setup\` or pass --app.`);return{config:t,appId:n,environment:e.environment||t.push?.environment||"production"}}function mg(e){let t=je.resolve(e);if(!Ie.existsSync(t))throw new Error(`File not found: ${t}`);return t}function Jn(e){let t=e?.response?.data?.message||e?.message||"Unknown error";console.error(le.red(t)),process.exitCode=1}async function xl(e){let t=Hi();try{let n=Gi();if(On(n)==="flutter")throw new Error("MACH Push currently supports Expo and bare React Native. Flutter push support is planned for a later release.");let r=Ol(n,e.iosBundle),o=Cl(n,e.androidPackage);if(!r&&!o)throw new Error(`Add ios.bundleIdentifier or android.package to ${m.configFileName}, or pass --ios-bundle/--android-package.`);t.start("Creating MACH Push app...");let{data:s}=await O.post(`/projects/${n.projectId}/push/apps`,{name:e.name||n.name||"Mobile app",iosBundleId:r,androidPackageName:o}),l=e.environment||"production";n.push={enabled:!0,appId:s.app.appId,publishableKey:s.app.publishableKey,apiUrl:"https://mach-api.securejs.in",environment:l,iosEnvironment:l==="development"?"development":"production",...e.googleServicesFile?{googleServicesFile:e.googleServicesFile}:{}},Pl(n);let a=n.framework==="expo"?Dl():void 0;t.stop(le.green("MACH Push app created.")),console.log(["",`${le.bold("App ID:")} ${s.app.appId}`,`${le.bold("Publishable key:")} ${s.app.publishableKey}`,`${le.bold("Config:")} ${m.configFileName} \u2192 push`,"","Install the mobile SDK:","  npm install @radhya/mach-push-react-native",...n.framework==="expo"?["  npm install --save-dev @radhya/mach",`  ${a}`,"  Run npx expo prebuild."]:[],"","Next, configure APNs and/or FCM credentials."].join(`
-`))}catch(n){t.stop(le.red("MACH Push setup failed.")),Jn(n)}}async function Nl(e){let t=Hi();try{let n=Gi(),i=On(n);if(i==="flutter")throw new Error("MACH Push currently supports Expo and bare React Native. Flutter push support is planned for a later release.");let r=Ol(n,e.iosBundle),o=Cl(n,e.androidPackage);if(!r&&!o)throw new Error(`Add ios.bundleIdentifier or android.package to ${m.configFileName}, or pass --ios-bundle/--android-package.`);let s=n.push?.appId,l=n.push?.publishableKey;t.start("Checking the MACH Push app...");let c=(await O.get(`/projects/${n.projectId}/push/overview?days=1`)).data?.apps||[];if(c.find(y=>y.appId===s&&!!l&&y.publishableKey===l))t.stop(le.green("MACH Push app verified."));else{let y=c.find(P=>!!P.publishableKey&&(!r||P.iosBundleId===r)&&(!o||P.androidPackageName===o));if(y)s=y.appId,l=y.publishableKey,t.stop(le.green("Existing MACH Push app linked."));else{let{data:P}=await O.post(`/projects/${n.projectId}/push/apps`,{name:e.name||n.name||"Mobile app",iosBundleId:r,androidPackageName:o});s=P.app.appId,l=P.app.publishableKey,t.stop(le.green("MACH Push app created."))}}if(!s||!l)throw new Error("MACH Push did not return a usable application key.");let d=e.environment||n.push?.environment||"production",p=pg(e.googleServicesFile,n.push?.googleServicesFile);n.push={enabled:!0,appId:s,publishableKey:l,apiUrl:n.push?.apiUrl||"https://mach-api.securejs.in",environment:d,iosEnvironment:d==="development"?"development":"production",...p?{googleServicesFile:p}:{}},Pl(n);let f=ug(i,!!e.skipInstall),g=i==="expo"?Dl():void 0;if(g?.startsWith('Add "'))throw new Error(g);let h={projectId:n.projectId,appId:s,publishableKey:l,apiUrl:n.push.apiUrl,environment:d},S=wl(process.cwd(),i,h);if(!S.entryFile)throw new Error(S.notes[0]||"MACH could not locate the application entry point.");let b=i==="expo"?{written:[],notes:[]}:vl(process.cwd(),{iosBundleId:r,iosEnvironment:n.push.iosEnvironment,googleServicesFile:p});console.log(["",le.green.bold("MACH Push basic setup is ready."),`${le.bold("Framework:")} ${i}`,`${le.bold("App ID:")} ${s}`,`${le.bold("Automatic startup:")} ${S.entryFile||"manual entry import required"}`,`${le.bold("Customize callbacks:")} ${S.editableFile||"see the setup notes below"}`,"",...f.map(y=>`\u2022 ${y}`),...g?[`\u2022 ${g}`]:[],...S.notes.map(y=>`\u2022 ${y}`),...b.notes.map(y=>`\u2022 ${y}`),...[...S.written,...b.written].map(y=>`\u2022 Updated ${y}.`),"","Next: add APNs and/or FCM provider credentials, then create one new native build.","Dashboard: https://getmach.dev/push"].join(`
-`))}catch(n){t.stop(le.red("MACH Push setup failed.")),Jn(n)}}async function Ao(e,t){let n=Hi();try{let{config:i,appId:r,environment:o}=kl(t),s=mg(t.file),l;if(e==="apns"){if(!t.teamId||!t.keyId)throw new Error("APNs requires --team-id and --key-id.");let a=t.bundleId||Wt(i);if(!a)throw new Error("APNs requires --bundle-id.");l={environment:o,teamId:t.teamId,keyId:t.keyId,bundleId:a,privateKey:Ie.readFileSync(s,"utf8")}}else l={environment:o,serviceAccount:JSON.parse(Ie.readFileSync(s,"utf8"))};n.start(`Configuring ${e.toUpperCase()}...`),await O.put(`/projects/${i.projectId}/push/apps/${r}/credentials/${e}`,l),n.stop(le.green(`${e.toUpperCase()} is ready.`))}catch(i){n.stop(le.red(`${e.toUpperCase()} setup failed.`)),Jn(i)}}async function Tl(e){let t=Hi();try{let{config:n,appId:i,environment:r}=kl(e),o=e.all?{all:!0,platform:e.platform}:e.token?.length?{machPushTokens:e.token}:e.user?.length?{externalUserIds:e.user}:null;if(!o)throw new Error("Choose --token, --user, or --all.");let s;if(e.data){let u=JSON.parse(e.data);if(!u||typeof u!="object"||Array.isArray(u))throw new Error("--data must be a JSON object.");s=Object.fromEntries(Object.entries(u).map(([d,p])=>[d,String(p)]))}let l=e.badge===void 0?void 0:Number(e.badge),a=e.ttl===void 0?void 0:Number(e.ttl);t.start("Queueing notification...");let{data:c}=await O.post(`/projects/${n.projectId}/push/send`,{appId:i,environment:r,target:o,notification:{title:e.title,body:e.body,data:s},options:{sound:e.sound,badge:l,ttlSeconds:a,collapseKey:e.collapseKey,androidChannelId:e.androidChannelId}});t.stop(le.green(`Notification queued: ${c.requestId}`))}catch(n){t.stop(le.red("Notification was not queued.")),Jn(n)}}async function Ll(e){try{let t=Gi(),n=Math.min(Math.max(Number(e.days||30),1),90),{data:i}=await O.get(`/projects/${t.projectId}/push/overview?days=${n}`),r=i.totals,o=r.requested>0?`${(r.accepted/r.requested*100).toFixed(1)}%`:"\u2014";console.log([`${le.bold("Active devices:")} ${i.activeDevices}`,`${le.bold("Queued requests:")} ${r.queuedRequests}`,`${le.bold("Requested:")} ${r.requested}`,`${le.bold("Provider accepted:")} ${r.accepted}`,`${le.bold("Failed:")} ${r.failed}`,`${le.bold("Retried:")} ${r.retried}`,`${le.bold("Invalid devices:")} ${r.invalidDevices}`,`${le.bold("Acceptance:")} ${o}`].join(`
-`))}catch(t){Jn(t)}}import{text as hg,password as yg,spinner as Sg,isCancel as Fl}from"@clack/prompts";import vo from"chalk";import qn from"fs";import Ml from"path";import gg from"os";var Eo=Ml.join(gg.homedir(),m.configDir),wo=Ml.join(Eo,"config.json");function Io(){if(!qn.existsSync(wo))return{};try{return JSON.parse(qn.readFileSync(wo,"utf-8"))}catch{return{}}}function Ul(e){qn.existsSync(Eo)||qn.mkdirSync(Eo,{recursive:!0});let n={...Io(),...e};qn.writeFileSync(wo,JSON.stringify(n,null,2))}async function jl(){let e=Io(),t=await hg({message:"Enter your email:",placeholder:"user@example.com",initialValue:e.lastLoginEmail,validate(r){if(r.length===0)return"Email is required!"}});if(Fl(t))return;let n=await yg({message:"Enter your password:",validate(r){if(r.length===0)return"Password is required!"}});if(Fl(n))return;let i=Sg();i.start("Authenticating...");try{let o=await(await fetch(`${Ct}/login`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({username:t,password:n})})).json();o.status==="success"&&o.user.token?(os({id:o.user.id,email:t,token:o.user.token,refreshToken:o.user.refreshToken}),Ul({lastLoginEmail:t}),i.stop(vo.green("Login successful!"))):i.stop(vo.red("Login failed: "+(o.message||"Unknown error")))}catch(r){i.stop(vo.red("Network error: "+r.message))}}import{log as Vi,outro as bg}from"@clack/prompts";import Yn from"chalk";async function Bl(){let e=ss(),t=`${m.envPrefix}TOKEN`;e?Vi.success(Yn.green(`Logged out. Removed saved credentials from ~/${m.configDir}/credentials.json.`)):Vi.warn(Yn.yellow(`No saved ${m.name} credentials found.`)),process.env[t]&&(Vi.warn(Yn.yellow(`${t} is still set in this shell. Commands will continue to authenticate with that token until you unset it.`)),Vi.info(Yn.dim(`Run: unset ${t}`))),bg(Yn.blue("---"))}import{outro as Ag,select as Eg,spinner as wg,isCancel as Ig}from"@clack/prompts";import Ki from"chalk";import $o from"fs";import vg from"path";var Hl=e=>e==="1234567890"||e==="ABC123DEFG"||e==="XXXXXXXXXX"?"":typeof e=="string"?e:"",$g=()=>process.versions.node.split(".")[0]||"24";async function Gl(){if(!Ue()){console.log(Ki.red(`You are not logged in. Run \`${m.nameLower} login\` first.`));return}let t=wg();t.start("Fetching projects...");try{let{data:n}=await O.get("/projects");if(t.stop("Projects loaded."),n.status!=="success"||!n.projects||n.projects.length===0){console.log(Ki.yellow(`No projects found. Run \`${m.nameLower} init\` to create one.`));return}let i=n.projects.map(g=>({value:g.projectId,label:`${g.name} (${g.slug})`})),r=await Eg({message:"Select a project to link:",options:i});if(Ig(r))return;let o=vg.join(process.cwd(),m.configFileName),s={};if($o.existsSync(o))try{s=JSON.parse($o.readFileSync(o,"utf-8"))}catch{}let l=n.projects.find(g=>g.projectId===r),a=s.android?.package||Ze("android"),c=s.ios?.bundleIdentifier||Ze("ios"),u=s.android||{},d=s.submit?.production?.android||{},p=s.submit?.production?.ios||{},f={projectId:r,framework:Ye(s.framework)||sn,name:l?.name,slug:l?.slug,nodeVersion:s.nodeVersion||$g(),scheme:l?.slug?.toLowerCase()||"app",android:{...u,package:a||"",versionCode:u.versionCode||"auto"},ios:{bundleIdentifier:c||"",buildNumber:s.ios?.buildNumber||"auto"},build:{development:{environment:"development",distribution:"development"},staging:{environment:"staging",distribution:"internal"},production:{environment:"production",distribution:"store"}},submit:{production:{android:{...d,track:d.track||"internal",releaseStatus:d.releaseStatus||"completed"},ios:{ascAppId:Hl(p.ascAppId),appleTeamId:Hl(p.appleTeamId)}}}};$o.writeFileSync(o,JSON.stringify(f,null,2)),Ag(Ki.green(`Linked to project ${f.name} (${f.slug})`))}catch(n){t.stop(Ki.red("Error fetching projects: "+n.message))}}import{outro as _g,text as zi,select as Pg,spinner as Rg,isCancel as Xn}from"@clack/prompts";import Zn from"chalk";import Og from"fs";import Cg from"path";import{randomUUID as Dg}from"crypto";var kg=()=>process.versions.node.split(".")[0]||"24";async function Vl(){if(!Ue()){console.log(Zn.red(`You are not logged in. Run \`${m.nameLower} login\` first.`));return}let t=await zi({message:"Project Name:",placeholder:"My Awesome App",validate(l){if(l.length===0)return"Name is required!"}});if(Xn(t))return;let n=await zi({message:"Project Slug (URL friendly):",placeholder:"my-awesome-app",validate(l){if(l.length===0)return"Slug is required!";if(!/^[a-z0-9-]+$/.test(l))return"Slug must be lowercase alphanumeric with dashes."}});if(Xn(n))return;let i=await Pg({message:"Platform:",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"},{value:"web",label:"Web"},{value:"all",label:"All Platforms"}]});if(Xn(i))return;let r="";if(i==="android"||i==="all"){let l=Ze("android");if(r=await zi({message:"Android Package Name:",initialValue:l||"",placeholder:"com.example.app",validate(a){if(a.length===0)return"Package name is required for Android!"}}),Xn(r))return}let o="";if(i==="ios"||i==="all"){let l=Ze("ios");if(o=await zi({message:"iOS Bundle Identifier:",initialValue:l||"",placeholder:"com.example.app",validate(a){if(a.length===0)return"Bundle ID is required for iOS!"}}),Xn(o))return}let s=Rg();s.start("Creating project...");try{let l=Dg(),c={projectId:l,name:t,slug:n,storageType:"managed",platforms:i==="all"?["android","ios","web"]:[i]},{data:u}=await O.post("/projects",c);if(u.status==="success"){s.stop(Zn.green("Project created successfully!"));let d=Cg.join(process.cwd(),m.configFileName);Og.writeFileSync(d,JSON.stringify({projectId:l,framework:sn,name:t,slug:n,nodeVersion:kg(),...r?{android:{package:r,versionCode:"auto"}}:{},...o?{ios:{bundleIdentifier:o,buildNumber:"auto"}}:{},build:{development:{environment:"development",distribution:"development"},staging:{environment:"staging",distribution:"internal"},production:{environment:"production",distribution:"store"}},submit:{production:{android:{track:"internal",releaseStatus:"completed"},ios:{ascAppId:"",appleTeamId:""}}}},null,2)),_g(Zn.green(`Initialized project ${t} and linked locally!`))}else s.stop(Zn.red("creation failed: "+u.message))}catch(l){s.stop(Zn.red("Network error: "+l.message))}}import{spinner as _o,log as Be}from"@clack/prompts";import Qn from"chalk";import Wi from"fs";import Kl from"path";function Po(e,t,n,i){let r=e?.response?.status,o=e?.response?.data?.message||e?.response?.data?.error,s=i?` ${i}`:"";return r===401?`Not logged in or token expired while trying to ${n}${s}. Run \`${m.nameLower} login\` and try again.`:r===403?[`Permission denied while trying to ${n}${s}.`,o?`API says: ${o}.`:void 0,`Current Mach account/token does not have access to project ${t}.`,`Run \`${m.nameLower} login\` with the correct account, or ask a project owner to grant access.`].filter(Boolean).join(" "):r===404?[`Project or environment endpoint was not found while trying to ${n}${s}.`,`Project ID: ${t}.`,o?`API says: ${o}.`:void 0].filter(Boolean).join(" "):r?`Failed to ${n}${s}: ${o||`API returned HTTP ${r}`}`:`Network error while trying to ${n}${s}: ${e?.message||"Unknown error"}`}function xg(e){let t=String(e??"");return t===""?'""':/^[A-Za-z0-9_./:@%+-]+$/.test(t)?t:JSON.stringify(t)}function Ng(e,t){return`${[`# Generated by ${m.nameLower} env pull --environment ${t}`,"# Do not commit this file.","",...Object.keys(e).sort((i,r)=>i.localeCompare(r)).map(i=>`${i}=${xg(e[i])}`)].join(`
+`;return Y.writeFileSync(Qn(),s),Qn()}function rt(e,t={}){try{return st("launchctl",e,{stdio:t.ignoreError?"ignore":"pipe"}),!0}catch(n){if(t.ignoreError)return!1;throw n}}function lp(e){return new Promise(t=>setTimeout(t,e))}function ei(e,t,n=np){return new Promise((i,r)=>{ep(e,t,{timeout:n,maxBuffer:10*1024*1024,windowsHide:!0},(o,s,a)=>{if(o){let l=a?.toString().trim();r(new Error(l||o.message));return}i(s?.toString()||"")})})}async function ua(){if(typeof fetch=="function"){let e=new AbortController,t=setTimeout(()=>e.abort(),3e3);try{return(await fetch(`${on}/health`,{signal:e.signal})).ok}catch{return!1}finally{clearTimeout(t)}}return new Promise(e=>{let t=!1,n=r=>{t||(t=!0,e(r))},i=ti.get(`${on}/health`,r=>{r.resume(),n(r.statusCode===200)});i.setTimeout(3e3,()=>{i.destroy(),n(!1)}),i.on("error",()=>n(!1))})}async function dp(e=8e3){let t=Date.now()+e;for(;Date.now()<t;){if(await ua())return!0;await lp(250)}return!1}async function pa(){return new Promise(e=>{let t=!1,n=ia.createConnection({host:"127.0.0.1",port:Je}),i=r=>{t||(t=!0,n.destroy(),e(r))};n.setTimeout(1e3),n.once("connect",()=>i(!0)),n.once("timeout",()=>i(!1)),n.once("error",()=>i(!1))})}async function Rr(){if(await dp()){j.success(ne.green("Mach agent installed and started."));return}if(await pa()){j.warn(`Mach agent service is installed, but port ${Je} is held by a process that is not answering /health.`),j.info(ne.dim(`Run \`${m.nameLower} agent stop\`, close any foreground \`${m.nameLower} agent\` terminal, then run \`${m.nameLower} agent install\` again.`));return}j.warn(`Mach agent service is installed, but it did not start listening on ${on}.`)}async function cp(){let e=ap(),t=vr();rt(["bootout",t,e],{ignoreError:!0}),rt(["bootstrap",t,e],{ignoreError:!0})||rt(["load","-w",e]),rt(["enable",`${t}/${Pt}`],{ignoreError:!0}),rt(["kickstart","-k",`${t}/${Pt}`],{ignoreError:!0}),await Rr(),j.info(ne.dim(`It will start automatically when you log in. Plist: ${e}`)),j.info(ne.dim(`Logs: ${F.join(Ne(),"agent.log")}`))}async function fa(){let e=Qn(),t=vr();rt(["bootout",t,e],{ignoreError:!0})||rt(["unload","-w",e],{ignoreError:!0})?j.success(ne.green("Mach agent service stopped.")):j.warn("Mach agent service was not loaded.")}async function up(){await fa();let e=Qn();Y.existsSync(e)&&Y.unlinkSync(e),j.success(ne.green("Mach agent service uninstalled."))}async function pp(){let e=op();ot(["daemon-reload"]),ot(["enable","--now",Ct]),await Rr(),j.info(ne.dim(`It will start automatically when you log in. Service: ${e}`)),j.info(ne.dim(`Logs: ${F.join(Ne(),"agent.log")}`))}async function fp(){ot(["stop",Ct],{ignoreError:!0})?j.success(ne.green("Mach agent service stopped.")):j.warn("Mach agent service was not running.")}async function mp(){ot(["disable","--now",Ct],{ignoreError:!0}),ot(["daemon-reload"],{ignoreError:!0});let e=Ir();Y.existsSync(e)&&Y.unlinkSync(e),ot(["daemon-reload"],{ignoreError:!0}),j.success(ne.green("Mach agent service uninstalled."))}async function gp(){let e=sp();sn(["/Create","/TN",Dt,"/SC","ONLOGON","/TR",`"${e}"`,"/RL","LIMITED","/F"]),sn(["/Run","/TN",Dt],{ignoreError:!0}),await Rr(),j.info(ne.dim(`It will start automatically when you log in. Task: ${Dt}`)),j.info(ne.dim(`Logs: ${F.join(Ne(),"agent.log")}`))}async function ma(){sn(["/End","/TN",Dt],{ignoreError:!0})?j.success(ne.green("Mach agent task stopped.")):j.warn("Mach agent task was not running.")}async function hp(){await ma(),sn(["/Delete","/TN",Dt,"/F"],{ignoreError:!0});let e=wr();Y.existsSync(e)&&Y.unlinkSync(e),j.success(ne.green("Mach agent task uninstalled."))}async function Zs(){if(process.platform==="darwin")return cp();if(process.platform==="linux")return pp();if(process.platform==="win32")return gp();throw new Error(`Background agent install is not supported on ${process.platform}.`)}async function Qs(){if(process.platform==="darwin")return fa();if(process.platform==="linux")return fp();if(process.platform==="win32")return ma();j.warn(`Background agent service control is not supported on ${process.platform}.`)}async function yp(){if(process.platform==="darwin")return up();if(process.platform==="linux")return mp();if(process.platform==="win32")return hp();j.warn(`Background agent uninstall is not supported on ${process.platform}.`)}async function bp(){let e=await ua(),t=e?!0:await pa();if(e?j.success(ne.green(`Mach agent is online at ${on}`)):t?j.warn(`Mach agent port is open, but /health did not respond. Run \`${m.nameLower} agent restart\` if the dashboard still shows offline.`):j.warn(`Mach agent is not responding at ${on}`),process.platform==="darwin"){let n=rt(["print",`${vr()}/${Pt}`],{ignoreError:!0});j.info(ne.dim(`Login service: ${n?"installed/loaded":"not loaded"}`))}else if(process.platform==="linux"){let n=ot(["is-enabled",Ct],{ignoreError:!0}),i=ot(["is-active",Ct],{ignoreError:!0});j.info(ne.dim(`Login service: ${n?"enabled":"not enabled"} / ${i?"active":"inactive"}`))}else if(process.platform==="win32"){let n=sn(["/Query","/TN",Dt],{ignoreError:!0});j.info(ne.dim(`Login task: ${n?"installed":"not installed"}`))}}async function Ap(){let e=[];try{(await ei(da(),["devices","-l"])).split(`
+`).forEach(n=>{if(n.includes("List of devices")||!n.trim())return;let i=n.split(/\s+/);if(i.length<2||i[1]!=="device")return;let r=i[0],o=n.match(/model:([^\s]+)/);e.push({id:r,platform:"android",type:r.startsWith("emulator-")?"emulator":"physical",name:o?o[1].replace(/_/g," "):r,status:"online",details:n.trim()})})}catch{}try{let n=(await ei(ca(),["-list-avds"])).split(`
+`).filter(r=>!!r.trim()),i=e.some(r=>r.platform==="android"&&r.id.startsWith("emulator-"));n.forEach(r=>{i||e.push({id:r,platform:"android",type:"emulator",name:r.replace(/_/g," "),status:"offline",details:`Android Virtual Device: ${r}`})})}catch{}return e}async function ga(){if(process.platform!=="darwin")return[];try{let e=await ei("/usr/bin/xcrun",["simctl","list","devices","--json"]),t=JSON.parse(e),n=[];return Object.entries(t.devices||{}).forEach(([i,r])=>{r.forEach(o=>{o.isAvailable&&n.push({id:o.udid,platform:"ios",type:"simulator",name:o.name,status:o.state?.toLowerCase()==="booted"?"online":"offline",runtime:i,details:`${o.name} (${i})`})})}),n}catch{return[]}}async function Sp(){if(process.platform!=="darwin")return[];try{let e=await ei("/usr/bin/xcrun",["devicectl","list","devices","--json-output","-"]);return(JSON.parse(e).result?.devices||[]).filter(n=>{let i=n.connectionProperties?.transportType;return i==="wired"||i==="localNetwork"}).map(n=>{let i=n.connectionProperties?.transportType,r=n.deviceProperties?.name||"iPhone";return{id:n.identifier,platform:"ios",type:"physical",name:r,status:"online",details:`${r} (${n.model?.name||n.hardwareModel||""}) - ${i}`}})}catch{return[]}}async function Ep(e){let t=await ga(),n=t.find(r=>r.id===e);if(n)return n;let i=t.filter(r=>r.status==="online");return i.length===1?i[0]:null}async function Ip(){let[e,t,n]=await Promise.all([Ap(),ga(),Sp()]);return[...e,...t,...n]}async function wp(){let e=Date.now();return Yn&&e-Yn.updatedAt<ip?Yn.targets:(Xn||(Xn=Ip().then(t=>(Yn={targets:t,updatedAt:Date.now()},t)).finally(()=>{Xn=null})),Xn)}async function ea(e){let t=[];for await(let n of e)t.push(Buffer.isBuffer(n)?n:Buffer.from(n));return t.length===0?{}:JSON.parse(Buffer.concat(t).toString("utf-8"))}async function vp(e,t){let n=await tp({method:"GET",url:e,responseType:"stream",timeout:12e4}),i=Y.createWriteStream(t);n.data.pipe(i),await new Promise((r,o)=>{i.on("finish",r),i.on("error",o)})}function ta(e,t){let n=e?.stderr?.toString?.().trim();if(n)return n;let i=e?.stdout?.toString?.().trim();return i||e?.message||t}function _p(e,t){return st("/usr/libexec/PlistBuddy",["-c",`Print :${t}`,e],{encoding:"utf-8"}).trim()}function $p(e){let t=F.join(e,"Info.plist");if(!Y.existsSync(t))throw new Error(`Could not validate iOS app executable: ${t} not found.`);let n=_p(t,"CFBundleExecutable"),i=F.join(e,n);if(!Y.existsSync(i))throw new Error(`Could not validate iOS app executable: ${i} not found.`);return i}function Rp(){return process.arch==="arm64"?"arm64":"x86_64"}function Op(e){return Y.existsSync(e)?Y.readdirSync(e).map(t=>F.join(e,t)).filter(t=>t.endsWith(".app")&&Y.statSync(t).isDirectory()):[]}function na(e,t){let n=Op(e);if(n.length===1)return n[0];if(n.length>1)throw new Error(`Multiple .app bundles found in ${t}: ${n.map(i=>F.basename(i)).join(", ")}. Mach cannot safely choose which app to install.`);return""}function Dp(e){let t=$p(e),n=Rp(),i="",r="";try{i=st("lipo",["-info",t],{encoding:"utf-8"}).trim()}catch(o){throw new Error(`Could not inspect iOS simulator app architecture for ${F.basename(e)}: ${o.message}`)}if(!new RegExp(`\\b${n}\\b`).test(i))throw new Error(`This iOS simulator artifact cannot be installed because ${F.basename(e)} does not include the ${n} simulator architecture. lipo output: ${i}. Rebuild the app with the latest Mach CLI and make sure the profile is a simulator build.`);try{r=st("/usr/bin/xcrun",["vtool","-show-build",t],{encoding:"utf-8"}).trim()}catch(o){throw new Error(`Could not inspect iOS simulator app platform for ${F.basename(e)}: ${o.message}`)}if(!/\bplatform\s+IOSSIMULATOR\b/i.test(r))throw new Error(`This iOS simulator artifact cannot be installed because ${F.basename(e)} was built for the wrong Apple platform. A simulator artifact must contain platform IOSSIMULATOR. vtool output: ${r}. Rebuild the app with the latest Mach CLI.`)}async function Pp(e,t,n){let i=n||(t.toLowerCase().includes(".apk")?"android":"ios"),r=t.toLowerCase().includes(".ipa"),o=Y.mkdtempSync(F.join(ke.tmpdir(),`${Je}-install-`)),s=F.join(o,i==="android"?"install.apk":r?"install.ipa":"install.zip");try{if(await vp(t,s),i==="android"){st(da(),["-s",e,"install","-r",s],{stdio:"pipe"});return}if(process.platform!=="darwin")throw new Error("iOS local install requires macOS.");Zn(`unzip -o ${JSON.stringify(s)} -d ${JSON.stringify(o)}`,{stdio:"pipe"});let a=F.join(o,"Payload"),l=Y.existsSync(a),d=r||l,c="";if(d?c=na(a,"Payload"):c=na(o,"the simulator artifact"),!c)throw new Error(`No .app bundle found inside the ${r?"IPA":"archive"}.`);let u=d?null:await Ep(e);if(u){try{Dp(c),st("/usr/bin/xcrun",["simctl","install",u.id,c],{stdio:"pipe"})}catch(f){throw new Error(ta(f,"iOS Simulator install failed."))}return}if(!d)throw new Error("Selected iOS Simulator was not found. Refresh Install Hub devices or boot one simulator and try again.");try{Zn(`/usr/bin/xcrun devicectl device install app --device ${JSON.stringify(e)} ${JSON.stringify(c)}`,{stdio:"pipe"})}catch(f){throw new Error(ta(f,"iOS device install failed."))}}finally{Y.rmSync(o,{recursive:!0,force:!0})}}function Cp(e,t){if(!e)throw new Error("Device id is required.");if(t==="ios"){if(process.platform!=="darwin")throw new Error("iOS Simulator launch requires macOS.");return Zn(`/usr/bin/xcrun simctl boot ${JSON.stringify(e)}`,{stdio:"pipe"}),Xs("open",["-a","Simulator"],{detached:!0,stdio:"ignore"}).unref(),"Simulator booting..."}if(t==="android")return Xs(ca(),["-avd",e],{detached:!0,stdio:"ignore",windowsHide:!0}).unref(),"Emulator booting in background...";throw new Error("Invalid platform.")}async function Tp(){process.platform!=="darwin"&&j.warn("Running on non-macOS \u2014 iOS discovery unavailable, Android only.");let e=ti.createServer((i,r)=>{if(r.setHeader("Access-Control-Allow-Origin","*"),r.setHeader("Access-Control-Allow-Methods","GET, POST, OPTIONS"),r.setHeader("Access-Control-Allow-Headers","Content-Type, Authorization"),i.method==="OPTIONS"){r.writeHead(204),r.end();return}let o=new URL(i.url||"/",`http://localhost:${Je}`);if(i.method==="GET"&&o.pathname==="/local/devices"){wp().then(s=>{r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",targets:s}))}).catch(s=>{r.writeHead(500,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:s.message}))});return}if(i.method==="GET"&&o.pathname==="/health"){r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",service:"mach-agent",port:Je,platform:process.platform}));return}if(i.method==="POST"&&o.pathname==="/install-local"){t(i,r);return}if(i.method==="POST"&&o.pathname==="/local/boot"){n(i,r);return}r.writeHead(404),r.end()}),t=async(i,r)=>{try{let{deviceId:o,artifactUrl:s,platform:a}=await ea(i);if(!o||!s){r.writeHead(400,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:"deviceId and artifactUrl are required"}));return}await Pp(o,s,a),r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",message:`Installed on ${o}`}))}catch(o){r.writeHead(500,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:o.message||"Local install failed"}))}},n=async(i,r)=>{try{let{id:o,platform:s}=await ea(i),a=Cp(o,s);r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",message:a}))}catch(o){r.writeHead(500,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:o.message||"Local device launch failed"}))}};e.listen(Je,"127.0.0.1",()=>{j.success(ne.green(`Local device agent running on http://localhost:${Je}`)),j.info(ne.dim("Keep this running while using the Install Hub on the dashboard.")),j.info(ne.dim("Press Ctrl+C to stop."))}),e.on("error",i=>{i.code==="EADDRINUSE"?j.error(`Port ${Je} is already in use \u2014 agent may already be running.`):j.error(`Agent error: ${i.message}`),process.exit(1)}),await new Promise(()=>{})}async function ha(e="start"){let t=String(e||"start").toLowerCase();if(t==="start"||t==="run"){await Tp();return}if(t==="install"){await Zs();return}if(t==="status"){await bp();return}if(t==="stop"){await Qs();return}if(t==="uninstall"){await yp();return}if(t==="restart"){await Qs(),await Zs();return}j.error(`Unknown agent action: ${e}`),j.info(ne.dim(`Use: ${m.nameLower} agent start | install | status | restart | stop | uninstall`)),process.exit(1)}import{text as Np,password as xp,spinner as Lp,isCancel as Aa}from"@clack/prompts";import Cr from"chalk";import an from"fs";import ya from"path";import kp from"os";var Or=ya.join(kp.homedir(),m.configDir),Dr=ya.join(Or,"config.json");function Pr(){if(!an.existsSync(Dr))return{};try{return JSON.parse(an.readFileSync(Dr,"utf-8"))}catch{return{}}}function ba(e){an.existsSync(Or)||an.mkdirSync(Or,{recursive:!0});let n={...Pr(),...e};an.writeFileSync(Dr,JSON.stringify(n,null,2))}async function Sa(){let e=Pr(),t=await Np({message:"Enter your email:",placeholder:"user@example.com",initialValue:e.lastLoginEmail,validate(r){if(r.length===0)return"Email is required!"}});if(Aa(t))return;let n=await xp({message:"Enter your password:",validate(r){if(r.length===0)return"Password is required!"}});if(Aa(n))return;let i=Lp();i.start("Authenticating...");try{let o=await(await fetch(`${Qe}/login`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({username:t,password:n})})).json();o.status==="success"&&o.user.token?(uo({id:o.user.id,email:t,token:o.user.token,refreshToken:o.user.refreshToken}),ba({lastLoginEmail:t}),i.stop(Cr.green("Login successful!"))):i.stop(Cr.red("Login failed: "+(o.message||"Unknown error")))}catch(r){i.stop(Cr.red("Network error: "+r.message))}}import{log as ni,outro as Mp}from"@clack/prompts";import ln from"chalk";async function Ea(){let e=po(),t=`${m.envPrefix}TOKEN`;e?ni.success(ln.green(`Logged out. Removed saved credentials from ~/${m.configDir}/credentials.json.`)):ni.warn(ln.yellow(`No saved ${m.name} credentials found.`)),process.env[t]&&(ni.warn(ln.yellow(`${t} is still set in this shell. Commands will continue to authenticate with that token until you unset it.`)),ni.info(ln.dim(`Run: unset ${t}`))),Mp(ln.blue("---"))}import{outro as Up,select as Fp,spinner as Bp,isCancel as jp}from"@clack/prompts";import ii from"chalk";import Tr from"fs";import Hp from"path";var Ia=e=>e==="1234567890"||e==="ABC123DEFG"||e==="XXXXXXXXXX"?"":typeof e=="string"?e:"",Gp=()=>process.versions.node.split(".")[0]||"24";async function wa(){if(!be()){console.log(ii.red(`You are not logged in. Run \`${m.nameLower} login\` first.`));return}let t=Bp();t.start("Fetching projects...");try{let{data:n}=await $.get("/projects");if(t.stop("Projects loaded."),n.status!=="success"||!n.projects||n.projects.length===0){console.log(ii.yellow(`No projects found. Run \`${m.nameLower} init\` to create one.`));return}let i=n.projects.map(g=>({value:g.projectId,label:`${g.name} (${g.slug})`})),r=await Fp({message:"Select a project to link:",options:i});if(jp(r))return;let o=Hp.join(process.cwd(),m.configFileName),s={};if(Tr.existsSync(o))try{s=JSON.parse(Tr.readFileSync(o,"utf-8"))}catch{}let a=n.projects.find(g=>g.projectId===r),l=s.android?.package||It("android"),d=s.ios?.bundleIdentifier||It("ios"),c=s.android||{},u=s.submit?.production?.android||{},f=s.submit?.production?.ios||{},p={projectId:r,framework:$e(s.framework)||wt,name:a?.name,slug:a?.slug,nodeVersion:s.nodeVersion||Gp(),scheme:a?.slug?.toLowerCase()||"app",android:{...c,package:l||"",versionCode:c.versionCode||"auto"},ios:{bundleIdentifier:d||"",buildNumber:s.ios?.buildNumber||"auto"},build:{development:{environment:"development",distribution:"development"},staging:{environment:"staging",distribution:"internal"},production:{environment:"production",distribution:"store"}},submit:{production:{android:{...u,track:u.track||"internal",releaseStatus:u.releaseStatus||"completed"},ios:{ascAppId:Ia(f.ascAppId),appleTeamId:Ia(f.appleTeamId)}}}};Tr.writeFileSync(o,JSON.stringify(p,null,2)),Up(ii.green(`Linked to project ${p.name} (${p.slug})`))}catch(n){t.stop(ii.red("Error fetching projects: "+n.message))}}import{outro as Vp,text as ri,select as zp,spinner as Kp,isCancel as dn}from"@clack/prompts";import cn from"chalk";import Wp from"fs";import qp from"path";import{randomUUID as Jp}from"crypto";var Yp=()=>process.versions.node.split(".")[0]||"24";async function va(){if(!be()){console.log(cn.red(`You are not logged in. Run \`${m.nameLower} login\` first.`));return}let t=await ri({message:"Project Name:",placeholder:"My Awesome App",validate(a){if(a.length===0)return"Name is required!"}});if(dn(t))return;let n=await ri({message:"Project Slug (URL friendly):",placeholder:"my-awesome-app",validate(a){if(a.length===0)return"Slug is required!";if(!/^[a-z0-9-]+$/.test(a))return"Slug must be lowercase alphanumeric with dashes."}});if(dn(n))return;let i=await zp({message:"Platform:",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"},{value:"web",label:"Web"},{value:"all",label:"All Platforms"}]});if(dn(i))return;let r="";if(i==="android"||i==="all"){let a=It("android");if(r=await ri({message:"Android Package Name:",initialValue:a||"",placeholder:"com.example.app",validate(l){if(l.length===0)return"Package name is required for Android!"}}),dn(r))return}let o="";if(i==="ios"||i==="all"){let a=It("ios");if(o=await ri({message:"iOS Bundle Identifier:",initialValue:a||"",placeholder:"com.example.app",validate(l){if(l.length===0)return"Bundle ID is required for iOS!"}}),dn(o))return}let s=Kp();s.start("Creating project...");try{let a=Jp(),d={projectId:a,name:t,slug:n,storageType:"managed",platforms:i==="all"?["android","ios","web"]:[i]},{data:c}=await $.post("/projects",d);if(c.status==="success"){s.stop(cn.green("Project created successfully!"));let u=qp.join(process.cwd(),m.configFileName);Wp.writeFileSync(u,JSON.stringify({projectId:a,framework:wt,name:t,slug:n,nodeVersion:Yp(),...r?{android:{package:r,versionCode:"auto"}}:{},...o?{ios:{bundleIdentifier:o,buildNumber:"auto"}}:{},build:{development:{environment:"development",distribution:"development"},staging:{environment:"staging",distribution:"internal"},production:{environment:"production",distribution:"store"}},submit:{production:{android:{track:"internal",releaseStatus:"completed"},ios:{ascAppId:"",appleTeamId:""}}}},null,2)),Vp(cn.green(`Initialized project ${t} and linked locally!`))}else s.stop(cn.red("creation failed: "+c.message))}catch(a){s.stop(cn.red("Network error: "+a.message))}}import{spinner as kr,log as Se}from"@clack/prompts";import un from"chalk";import oi from"fs";import _a from"path";function Nr(e,t,n,i){let r=e?.response?.status,o=e?.response?.data?.message||e?.response?.data?.error,s=i?` ${i}`:"";return r===401?`Not logged in or token expired while trying to ${n}${s}. Run \`${m.nameLower} login\` and try again.`:r===403?[`Permission denied while trying to ${n}${s}.`,o?`API says: ${o}.`:void 0,`Current Mach account/token does not have access to project ${t}.`,`Run \`${m.nameLower} login\` with the correct account, or ask a project owner to grant access.`].filter(Boolean).join(" "):r===404?[`Project or environment endpoint was not found while trying to ${n}${s}.`,`Project ID: ${t}.`,o?`API says: ${o}.`:void 0].filter(Boolean).join(" "):r?`Failed to ${n}${s}: ${o||`API returned HTTP ${r}`}`:`Network error while trying to ${n}${s}: ${e?.message||"Unknown error"}`}function Xp(e){let t=String(e??"");return t===""?'""':/^[A-Za-z0-9_./:@%+-]+$/.test(t)?t:JSON.stringify(t)}function Zp(e,t){return`${[`# Generated by ${m.nameLower} env pull --environment ${t}`,"# Do not commit this file.","",...Object.keys(e).sort((i,r)=>i.localeCompare(r)).map(i=>`${i}=${Xp(e[i])}`)].join(`
 `)}
-`}async function zl(e,t,n={}){let i=Ue();if(!i){Be.error(`You are not logged in. Run \`${m.nameLower} login\` first.`);return}let r=Kl.join(process.cwd(),m.configFileName);if(!Wi.existsSync(r)){Be.error(`No ${m.configFileName} found. Run \`${m.nameLower} init\` or \`${m.nameLower} link\` first.`);return}let o;try{o=JSON.parse(Wi.readFileSync(r,"utf-8"))}catch{Be.error(`Failed to parse ${m.configFileName}`);return}let{projectId:s}=o;if(!s){Be.error(`${m.configFileName} is missing projectId.`);return}e==="set"?await Tg(s,t,i):e==="list"?await Lg(s,i):e==="pull"||e==="download"||e==="export"?await Mg(s,n):Be.error(`Unknown env action: ${e}. Use 'set', 'list', or 'pull'.`)}async function Tg(e,t,n){if(t.length===0){Be.error(`Usage: ${m.nameLower} env set KEY=VALUE [KEY2=VALUE2 ...]`);return}let i=_o();i.start("Setting environment variables...");let r=0,o=0;for(let s of t){let[l,...a]=s.split("="),c=a.join("=");if(!l||c===void 0){Be.warn(`Invalid format for argument: ${s}. Expected KEY=VALUE.`),o++;continue}try{let u={key:l.trim(),value:c,type:"env",environment:"global",visibility:"secret"},{data:d}=await O.post(`/projects/${e}/secrets`,u);d.status==="success"?r++:(Be.error(`Failed to set ${l}: ${d.message}`),o++)}catch(u){Be.error(Po(u,e,"set",l)),o++}}i.stop(`Set ${r} variable(s). ${o>0?`${o} failed.`:""}`)}async function Lg(e,t){let n=_o();n.start("Fetching environment variables...");try{let{data:i}=await O.get(`/projects/${e}/secrets`);if(i.status==="success"){n.stop("Fetched variables.");let r=i.secrets||[];r.length===0?Be.info("No environment variables found for this project."):(Be.info(Qn.bold("Environment Variables (Global & Scoped):")),r.forEach(o=>{let s=o.visibility==="plain"?o.value:"********";console.log(`  ${Qn.cyan(o.key)} = ${s}  ${Qn.gray(`[${o.environment}]`)}`)}))}else n.stop(Qn.red(`Failed to fetch variables: ${i.message}`))}catch(i){n.stop("Failed to fetch variables."),Be.error(Po(i,e,"list"))}}async function Mg(e,t){let n=(t.environment||"development").trim(),i=t.out||".env.local",r=Kl.resolve(process.cwd(),i);if(Wi.existsSync(r)&&!t.overwrite){Be.error(`${i} already exists. Re-run with \`--overwrite\` to replace it.`);return}let o=_o();o.start(`Downloading ${n} environment variables...`);try{let{data:s}=await O.get(`/projects/${e}/secrets/export?env=${encodeURIComponent(n)}`);if(s.status!=="success"){o.stop(Qn.red(`Failed to download variables: ${s.message||"Unknown API error"}`));return}let l=s.secrets||{},a=Ng(l,n);Wi.writeFileSync(r,a,{encoding:"utf-8",mode:384}),o.stop(`Wrote ${Object.keys(l).length} variable(s) to ${i}.`)}catch(s){o.stop("Failed to download variables."),Be.error(Po(s,e,"pull"))}}import{cancel as Ug,confirm as rc,isCancel as Yi,log as Qe,note as Fg,outro as bn,select as jg,spinner as Bg,text as Hg}from"@clack/prompts";import lt from"chalk";import re from"fs";import he from"path";import{spawnSync as oc}from"child_process";import Co from"crypto";import Gg from"axios";import Jl from"crypto";import ei from"fs";import ti from"path";var Wl=e=>String(e||"").replace(/\\/g,"/").replace(/^\/+/,"");function ql(e,t){let n=ti.join(e,"metadata.json");if(!ei.existsSync(n))throw new Error(`Expo export did not create ${n}.`);let r=JSON.parse(ei.readFileSync(n,"utf-8"))?.fileMetadata?.[t],o=Wl(r?.bundle);if(!o)throw new Error(`Expo export metadata is missing the ${t} launch bundle.`);let s=new Set,l=(Array.isArray(r?.assets)?r.assets:[]).flatMap(a=>{let c=Wl(a?.path);return!c||s.has(c)?[]:(s.add(c),[{path:c,ext:String(a?.ext||"").replace(/^\./,"")||void 0}])});for(let a of[o,...l.map(c=>c.path)])if(!ei.existsSync(ti.join(e,a)))throw new Error(`Expo export metadata references a missing file: ${a}`);return{bundle:o,assets:l}}function Yl(e,t){return[ti.join(e,t.bundle),...t.assets.map(n=>ti.join(e,n.path)),ti.join(e,"metadata.json")]}function Ro(e){return Jl.createHash("md5").update(ei.readFileSync(e)).digest("hex")}function Oo(e){return Jl.createHash("sha256").update(ei.readFileSync(e)).digest("base64url")}function Xl(e){let t=String(e||"").replace(/^\./,"").trim().toLowerCase();return t?`.${t}`:void 0}function Ji(e,t=!1){if(t)return"application/javascript";switch(String(e||"").replace(/^\./,"").trim().toLowerCase()){case"js":case"bundle":case"hbc":return"application/javascript";case"json":return"application/json";case"png":return"image/png";case"jpg":case"jpeg":return"image/jpeg";case"gif":return"image/gif";case"webp":return"image/webp";case"svg":return"image/svg+xml";case"ttf":return"font/ttf";case"otf":return"font/otf";case"woff":return"font/woff";case"woff2":return"font/woff2";case"mp3":return"audio/mpeg";case"m4a":return"audio/mp4";case"aac":return"audio/aac";case"wav":return"audio/wav";case"mp4":return"video/mp4";case"mov":return"video/quicktime";case"pdf":return"application/pdf";default:return"application/octet-stream"}}function Zl(e){if(!e||typeof e!="object"||Array.isArray(e))return;let{_internal:t,hooks:n,mods:i,...r}=e;return r}var Oe=`${m.npmScope}/mach/expo-plugin`,Do=()=>process.stdin.isTTY&&process.stdout.isTTY,Xi=()=>{Ug("Operation cancelled."),process.exit(0)},Fe=e=>{if(typeof e!="string")return;let t=e.trim();return t.length>0?t:void 0};function An(e){if(!re.existsSync(e))return null;try{return JSON.parse(re.readFileSync(e,"utf-8"))}catch{return null}}function sc(e,t){re.writeFileSync(e,`${JSON.stringify(t,null,2)}
-`)}function ni(){let e=we();return e?.projectId||(Qe.error(`No ${m.configFileName} found or missing projectId. Run \`${m.nameLower} link\` first.`),process.exit(1)),e}function Vg(e){sc(he.join(process.cwd(),m.configFileName),e)}function ko(e){let t=Ye(e.framework);if(t)return t;let n=An(he.join(process.cwd(),"package.json"))||{},i={...n.dependencies||{},...n.devDependencies||{}};return i.expo?"expo":(i["react-native"],"react-native")}function xo(e,t){let n=String(e||"").trim().toLowerCase();return n==="expo"||n==="expo-updates"?"expo-updates":n==="react-native"||n==="mach-react-native"||n==="rn"?"mach-react-native":"expo-updates"}function ac(e){if(e==="mach-react-native")throw new Error("mach-react-native is reserved for a future Mach-native OTA client. Use expo-updates for Expo and bare React Native projects.");return e}function No(e){let t=String(e||"all").trim().toLowerCase();if(t==="ios")return["ios"];if(t==="android")return["android"];if(t==="all"||t==="both")return["ios","android"];throw new Error("Platform must be ios, android, or all.")}function Kg(e){return re.existsSync(he.join(e,"pnpm-lock.yaml"))?{command:"pnpm",args:["add","-D",`${m.npmScope}/mach@latest`],label:`pnpm add -D ${m.npmScope}/mach@latest`}:re.existsSync(he.join(e,"yarn.lock"))?{command:"yarn",args:["add","-D",`${m.npmScope}/mach@latest`],label:`yarn add -D ${m.npmScope}/mach@latest`}:re.existsSync(he.join(e,"bun.lockb"))||re.existsSync(he.join(e,"bun.lock"))?{command:"bun",args:["add","-d",`${m.npmScope}/mach@latest`],label:`bun add -d ${m.npmScope}/mach@latest`}:{command:"npm",args:["install","--save-dev",`${m.npmScope}/mach@latest`],label:`npm install --save-dev ${m.npmScope}/mach@latest`}}function Zi(e){let t=An(he.join(e,"package.json"))||{};return!!(t.dependencies?.[`${m.npmScope}/mach`]||t.devDependencies?.[`${m.npmScope}/mach`])}function qi(e){let t=An(he.join(e,"node_modules",m.npmScope,"mach","package.json"));return Fe(t?.version)}function lc(e,t){let n=o=>o.replace(/^v/,"").split(/[.-]/).slice(0,3).map(s=>Number.parseInt(s,10)||0),i=n(e),r=n(t);for(let o=0;o<3;o+=1)if(i[o]!==r[o])return i[o]>r[o]?1:-1;return 0}function zg(e){let t=qi(e);return!Zi(e)||!t||lc(t,ht)<0}function Wg(e){let t=Kg(e),n=oc(t.command,t.args,{cwd:e,stdio:"inherit",env:{...process.env}});if(n.error)return{ok:!1,label:t.label,error:n.error.message};if(n.status!==0)return{ok:!1,label:t.label,error:`${t.command} exited with code ${n.status}`};let i=qi(e),r=!!i&&lc(i,ht)>=0;return{ok:Zi(e)&&r,label:t.label,error:r?void 0:`installed ${i||"unknown"}, requires ${ht} or newer`}}function Ql(e){if(typeof e=="string")return e;if(Array.isArray(e)&&typeof e[0]=="string")return e[0]}function Jg(e,t){let n=["app.config.json","app.json"].find(l=>re.existsSync(he.join(e,l)));if(!n)return null;let i=he.join(e,n),r=An(i);if(!r)return null;let o=r.expo&&typeof r.expo=="object"?r.expo:r;if(t==="react-native"&&n==="app.json"&&(!r.expo||typeof r.expo!="object")){let l=An(he.join(e,"package.json"))||{},a=Fe(r.displayName)||Fe(r.name)||Fe(l.name)||"App",c=(Fe(l.name)||a).toLowerCase().replace(/[^a-z0-9-]+/g,"-").replace(/^-+|-+$/g,"")||"app";r.expo={name:a,slug:c,version:Fe(l.version)||"1.0.0"},o=r.expo}let s=Array.isArray(o.plugins)?o.plugins:[];return s.some(l=>Ql(l)===Oe)||(o.plugins=[...s.filter(l=>{let a=Ql(l);return a!=="./plugins/withMachDeepLinks"&&a!=="plugins/withMachDeepLinks"}),Oe],sc(i,r)),n}function qg(e){let t=["app.config.ts","app.config.js"].find(f=>re.existsSync(he.join(e,f)));if(!t)return"missing";let n=he.join(e,t),i=re.readFileSync(n,"utf-8");if(i.includes(Oe))return"already";let r=/(['"`])(?:\.\/)?plugins\/withMachDeepLinks\1/g;if(r.test(i))return re.writeFileSync(n,i.replace(r,(f,g)=>`${g}${Oe}${g}`)),"inserted";let o=/(^[ \t]*)plugins\s*:\s*\[([\s\S]*?)\]/m.exec(i);if(!o||o.index===void 0)return"manual";let s=i.includes(`\r
+`}async function $a(e,t,n={}){let i=be();if(!i){Se.error(`You are not logged in. Run \`${m.nameLower} login\` first.`);return}let r=_a.join(process.cwd(),m.configFileName);if(!oi.existsSync(r)){Se.error(`No ${m.configFileName} found. Run \`${m.nameLower} init\` or \`${m.nameLower} link\` first.`);return}let o;try{o=JSON.parse(oi.readFileSync(r,"utf-8"))}catch{Se.error(`Failed to parse ${m.configFileName}`);return}let{projectId:s}=o;if(!s){Se.error(`${m.configFileName} is missing projectId.`);return}e==="set"?await Qp(s,t,i):e==="list"?await ef(s,i):e==="pull"||e==="download"||e==="export"?await tf(s,n):Se.error(`Unknown env action: ${e}. Use 'set', 'list', or 'pull'.`)}async function Qp(e,t,n){if(t.length===0){Se.error(`Usage: ${m.nameLower} env set KEY=VALUE [KEY2=VALUE2 ...]`);return}let i=kr();i.start("Setting environment variables...");let r=0,o=0;for(let s of t){let[a,...l]=s.split("="),d=l.join("=");if(!a||d===void 0){Se.warn(`Invalid format for argument: ${s}. Expected KEY=VALUE.`),o++;continue}try{let c={key:a.trim(),value:d,type:"env",environment:"global",visibility:"secret"},{data:u}=await $.post(`/projects/${e}/secrets`,c);u.status==="success"?r++:(Se.error(`Failed to set ${a}: ${u.message}`),o++)}catch(c){Se.error(Nr(c,e,"set",a)),o++}}i.stop(`Set ${r} variable(s). ${o>0?`${o} failed.`:""}`)}async function ef(e,t){let n=kr();n.start("Fetching environment variables...");try{let{data:i}=await $.get(`/projects/${e}/secrets`);if(i.status==="success"){n.stop("Fetched variables.");let r=i.secrets||[];r.length===0?Se.info("No environment variables found for this project."):(Se.info(un.bold("Environment Variables (Global & Scoped):")),r.forEach(o=>{let s=o.visibility==="plain"?o.value:"********";console.log(`  ${un.cyan(o.key)} = ${s}  ${un.gray(`[${o.environment}]`)}`)}))}else n.stop(un.red(`Failed to fetch variables: ${i.message}`))}catch(i){n.stop("Failed to fetch variables."),Se.error(Nr(i,e,"list"))}}async function tf(e,t){let n=(t.environment||"development").trim(),i=t.out||".env.local",r=_a.resolve(process.cwd(),i);if(oi.existsSync(r)&&!t.overwrite){Se.error(`${i} already exists. Re-run with \`--overwrite\` to replace it.`);return}let o=kr();o.start(`Downloading ${n} environment variables...`);try{let{data:s}=await $.get(`/projects/${e}/secrets/export?env=${encodeURIComponent(n)}`);if(s.status!=="success"){o.stop(un.red(`Failed to download variables: ${s.message||"Unknown API error"}`));return}let a=s.secrets||{},l=Zp(a,n);oi.writeFileSync(r,l,{encoding:"utf-8",mode:384}),o.stop(`Wrote ${Object.keys(a).length} variable(s) to ${i}.`)}catch(s){o.stop("Failed to download variables."),Se.error(Nr(s,e,"pull"))}}import{cancel as nf,confirm as Ua,isCancel as li,log as Re,note as rf,outro as Tt,select as of,spinner as sf,text as af}from"@clack/prompts";import xe from"chalk";import z from"fs";import te from"path";import{spawnSync as Fa}from"child_process";import Mr from"crypto";import lf from"axios";import Oa from"crypto";import pn from"fs";import fn from"path";var Ra=e=>String(e||"").replace(/\\/g,"/").replace(/^\/+/,"");function Da(e,t){let n=fn.join(e,"metadata.json");if(!pn.existsSync(n))throw new Error(`Expo export did not create ${n}.`);let r=JSON.parse(pn.readFileSync(n,"utf-8"))?.fileMetadata?.[t],o=Ra(r?.bundle);if(!o)throw new Error(`Expo export metadata is missing the ${t} launch bundle.`);let s=new Set,a=(Array.isArray(r?.assets)?r.assets:[]).flatMap(l=>{let d=Ra(l?.path);return!d||s.has(d)?[]:(s.add(d),[{path:d,ext:String(l?.ext||"").replace(/^\./,"")||void 0}])});for(let l of[o,...a.map(d=>d.path)])if(!pn.existsSync(fn.join(e,l)))throw new Error(`Expo export metadata references a missing file: ${l}`);return{bundle:o,assets:a}}function Pa(e,t){return[fn.join(e,t.bundle),...t.assets.map(n=>fn.join(e,n.path)),fn.join(e,"metadata.json")]}function xr(e){return Oa.createHash("md5").update(pn.readFileSync(e)).digest("hex")}function Lr(e){return Oa.createHash("sha256").update(pn.readFileSync(e)).digest("base64url")}function Ca(e){let t=String(e||"").replace(/^\./,"").trim().toLowerCase();return t?`.${t}`:void 0}function si(e,t=!1){if(t)return"application/javascript";switch(String(e||"").replace(/^\./,"").trim().toLowerCase()){case"js":case"bundle":case"hbc":return"application/javascript";case"json":return"application/json";case"png":return"image/png";case"jpg":case"jpeg":return"image/jpeg";case"gif":return"image/gif";case"webp":return"image/webp";case"svg":return"image/svg+xml";case"ttf":return"font/ttf";case"otf":return"font/otf";case"woff":return"font/woff";case"woff2":return"font/woff2";case"mp3":return"audio/mpeg";case"m4a":return"audio/mp4";case"aac":return"audio/aac";case"wav":return"audio/wav";case"mp4":return"video/mp4";case"mov":return"video/quicktime";case"pdf":return"application/pdf";default:return"application/octet-stream"}}function Ta(e){if(!e||typeof e!="object"||Array.isArray(e))return;let{_internal:t,hooks:n,mods:i,...r}=e;return r}var ue=`${m.npmScope}/mach/expo-plugin`,Ur=()=>process.stdin.isTTY&&process.stdout.isTTY,di=()=>{nf("Operation cancelled."),process.exit(0)},Ae=e=>{if(typeof e!="string")return;let t=e.trim();return t.length>0?t:void 0};function kt(e){if(!z.existsSync(e))return null;try{return JSON.parse(z.readFileSync(e,"utf-8"))}catch{return null}}function Ba(e,t){z.writeFileSync(e,`${JSON.stringify(t,null,2)}
+`)}function mn(){let e=ce();return e?.projectId||(Re.error(`No ${m.configFileName} found or missing projectId. Run \`${m.nameLower} link\` first.`),process.exit(1)),e}function df(e){Ba(te.join(process.cwd(),m.configFileName),e)}function Fr(e){let t=$e(e.framework);if(t)return t;let n=kt(te.join(process.cwd(),"package.json"))||{},i={...n.dependencies||{},...n.devDependencies||{}};return i.expo?"expo":(i["react-native"],"react-native")}function Br(e,t){let n=String(e||"").trim().toLowerCase();return n==="expo"||n==="expo-updates"?"expo-updates":n==="react-native"||n==="mach-react-native"||n==="rn"?"mach-react-native":"expo-updates"}function ja(e){if(e==="mach-react-native")throw new Error("mach-react-native is reserved for a future Mach-native OTA client. Use expo-updates for Expo and bare React Native projects.");return e}function jr(e){let t=String(e||"all").trim().toLowerCase();if(t==="ios")return["ios"];if(t==="android")return["android"];if(t==="all"||t==="both")return["ios","android"];throw new Error("Platform must be ios, android, or all.")}function cf(e){return z.existsSync(te.join(e,"pnpm-lock.yaml"))?{command:"pnpm",args:["add","-D",`${m.npmScope}/mach@latest`],label:`pnpm add -D ${m.npmScope}/mach@latest`}:z.existsSync(te.join(e,"yarn.lock"))?{command:"yarn",args:["add","-D",`${m.npmScope}/mach@latest`],label:`yarn add -D ${m.npmScope}/mach@latest`}:z.existsSync(te.join(e,"bun.lockb"))||z.existsSync(te.join(e,"bun.lock"))?{command:"bun",args:["add","-d",`${m.npmScope}/mach@latest`],label:`bun add -d ${m.npmScope}/mach@latest`}:{command:"npm",args:["install","--save-dev",`${m.npmScope}/mach@latest`],label:`npm install --save-dev ${m.npmScope}/mach@latest`}}function ci(e){let t=kt(te.join(e,"package.json"))||{};return!!(t.dependencies?.[`${m.npmScope}/mach`]||t.devDependencies?.[`${m.npmScope}/mach`])}function ai(e){let t=kt(te.join(e,"node_modules",m.npmScope,"mach","package.json"));return Ae(t?.version)}function Ha(e,t){let n=o=>o.replace(/^v/,"").split(/[.-]/).slice(0,3).map(s=>Number.parseInt(s,10)||0),i=n(e),r=n(t);for(let o=0;o<3;o+=1)if(i[o]!==r[o])return i[o]>r[o]?1:-1;return 0}function uf(e){let t=ai(e);return!ci(e)||!t||Ha(t,et)<0}function pf(e){let t=cf(e),n=Fa(t.command,t.args,{cwd:e,stdio:"inherit",env:{...process.env}});if(n.error)return{ok:!1,label:t.label,error:n.error.message};if(n.status!==0)return{ok:!1,label:t.label,error:`${t.command} exited with code ${n.status}`};let i=ai(e),r=!!i&&Ha(i,et)>=0;return{ok:ci(e)&&r,label:t.label,error:r?void 0:`installed ${i||"unknown"}, requires ${et} or newer`}}function ka(e){if(typeof e=="string")return e;if(Array.isArray(e)&&typeof e[0]=="string")return e[0]}function ff(e,t){let n=["app.config.json","app.json"].find(a=>z.existsSync(te.join(e,a)));if(!n)return null;let i=te.join(e,n),r=kt(i);if(!r)return null;let o=r.expo&&typeof r.expo=="object"?r.expo:r;if(t==="react-native"&&n==="app.json"&&(!r.expo||typeof r.expo!="object")){let a=kt(te.join(e,"package.json"))||{},l=Ae(r.displayName)||Ae(r.name)||Ae(a.name)||"App",d=(Ae(a.name)||l).toLowerCase().replace(/[^a-z0-9-]+/g,"-").replace(/^-+|-+$/g,"")||"app";r.expo={name:l,slug:d,version:Ae(a.version)||"1.0.0"},o=r.expo}let s=Array.isArray(o.plugins)?o.plugins:[];return s.some(a=>ka(a)===ue)||(o.plugins=[...s.filter(a=>{let l=ka(a);return l!=="./plugins/withMachDeepLinks"&&l!=="plugins/withMachDeepLinks"}),ue],Ba(i,r)),n}function mf(e){let t=["app.config.ts","app.config.js"].find(p=>z.existsSync(te.join(e,p)));if(!t)return"missing";let n=te.join(e,t),i=z.readFileSync(n,"utf-8");if(i.includes(ue))return"already";let r=/(['"`])(?:\.\/)?plugins\/withMachDeepLinks\1/g;if(r.test(i))return z.writeFileSync(n,i.replace(r,(p,g)=>`${g}${ue}${g}`)),"inserted";let o=/(^[ \t]*)plugins\s*:\s*\[([\s\S]*?)\]/m.exec(i);if(!o||o.index===void 0)return"manual";let s=i.includes(`\r
 `)?`\r
 `:`
-`,l=o[1]||"",a=o[2]||"",u=a.match(/\r?\n([ \t]+)\S/)?.[1]||`${l}    `,d=a.trim().length===0?`${s}${u}'${Oe}',${s}${l}`:a.includes(`
-`)||a.includes("\r")?`${s}${u}'${Oe}',${a}`:`${s}${u}'${Oe}',${s}${u}${a.trim()}${s}${l}`,p=`${o[0].slice(0,o[0].indexOf("[")+1)}${d}]`;return re.writeFileSync(n,`${i.slice(0,o.index)}${p}${i.slice(o.index+o[0].length)}`),"inserted"}async function Yg(e,t,n){let i=[];if(zg(e)){let o=qi(e),s=!!(n.installPlugin||n.yes);if(!s&&!n.skipInstall&&Do()){let l=await rc({message:o?`Update the local ${m.npmScope}/mach Expo plugin (${o} \u2192 ${ht})?`:`Install ${m.npmScope}/mach locally so Expo can use ${Oe}?`,initialValue:!0});Yi(l)&&Xi(),s=!!l}if(s&&!n.skipInstall){let l=Wg(e);l.ok?i.push(`Installed a compatible ${Oe} with ${l.label}.`):i.push(`Could not install ${m.npmScope}/mach with ${l.label}: ${l.error||"unknown error"}.`)}else i.push(`Install ${m.npmScope}/mach@${ht} or newer in this app so Expo can resolve ${Oe}.`)}else i.push(`Local ${Oe} is compatible (${qi(e)}).`);let r=qg(e);if(r==="already"&&i.push(`Expo config already includes ${Oe}.`),r==="inserted"&&i.push(`Expo config updated to include ${Oe}.`),r==="manual"&&i.push(`Add "${Oe}" to the plugins array in app.config.ts/app.config.js.`),r==="missing"){let o=Jg(e,t);o?i.push(`${o} updated to include ${Oe}.`):i.push(`Add "${Oe}" to your Expo config plugins array.`)}return i}async function ec(e,t){if(t.skipInstall)return!1;if(t.yes)return!0;if(!Do())return!1;let n=await rc({message:e,initialValue:!0});return Yi(n)&&Xi(),!!n}async function Xg(e,t,n){let i=[];if(t==="react-native"&&!Jt(e,"expo"))if(await ec("Install Expo Modules required by the Mach OTA runtime? This updates package and native project files.",n)){let o=Ss(e);if(!o.ok||!Jt(e,"expo"))throw new Error(`Expo Modules installation failed: ${o.error||o.command}`);i.push("Installed and configured Expo Modules for the existing React Native project.")}else i.push("Expo Modules are required. Run `npx install-expo-modules@latest`, then run `mach ota setup` again.");if(!Jt(e,"expo-updates"))if(await ec("Install the expo-updates runtime?",n)){let o=bs(e);if(!o.ok||!Jt(e,"expo-updates"))throw new Error(`expo-updates installation failed: ${o.error||o.command}`);i.push("Installed the Expo-compatible expo-updates version.")}else i.push("Install expo-updates with `npx expo install expo-updates`, then run `mach ota setup` again.");return i}async function tc(e,t,n,i,r){if(t)return t;if(r||!Do()){if(i)throw new Error(`${e.replace(/:$/,"")} is required.`);return}let o=await Hg({message:e,placeholder:n,validate(s){if(i&&s.trim().length===0)return"Required."}});return Yi(o)&&Xi(),Fe(o)}function To(e,t,n){return Ln(e,{runtimeVersion:t.runtimeVersion,framework:Ye(t.framework)||Ye(e.framework),platform:n})}function Zg(e){let t=Tn(process.cwd(),e);if(!t)throw new Error(`Resolved Expo OTA configuration does not match this publish: Expo config could not be resolved. Run \`mach ota setup\` to update ${Oe}, then create a new native build if its embedded runtime changes.`);let n=[];if(t.runtimeVersion!==e.runtimeVersion&&n.push(`runtime is ${t.runtimeVersion||"missing"} (expected ${e.runtimeVersion})`),t.channel!==e.channel&&n.push(`channel is ${t.channel||"missing"} (expected ${e.channel})`),t.url!==e.url&&n.push(`URL is ${t.url||"missing"} (expected ${e.url})`),n.length>0)throw new Error(`Resolved Expo OTA configuration does not match this publish: ${n.join("; ")}. Run \`mach ota setup\` to update ${Oe}, then create a new native build if its embedded runtime changes.`);return t}function Qg(e){return Co.createHash("sha256").update(re.readFileSync(e)).digest("hex")}function eh(e){let t=he.extname(e).toLowerCase();return t===".json"?"application/json":t===".js"||t===".bundle"||t===".hbc"?"application/javascript":t===".map"?"application/json":t===".png"?"image/png":t===".jpg"||t===".jpeg"?"image/jpeg":t===".webp"?"image/webp":t===".gif"?"image/gif":t===".svg"?"image/svg+xml":t===".ttf"?"font/ttf":t===".otf"?"font/otf":t===".woff"?"font/woff":t===".woff2"?"font/woff2":"application/octet-stream"}function cc(e){let t=[];if(!re.existsSync(e))return t;for(let n of re.readdirSync(e)){let i=he.join(e,n),r=re.statSync(i);r.isDirectory()?t.push(...cc(i)):r.isFile()&&t.push(i)}return t}function th(e,t){let n=e.filter(i=>{let r=i.toLowerCase();return r.endsWith(".map")?!1:r.endsWith(".js")||r.endsWith(".bundle")||r.endsWith(".hbc")});return n.find(i=>i.toLowerCase().includes(t))||n.sort((i,r)=>re.statSync(r).size-re.statSync(i).size)[0]}async function nc(e){let t=await O.post("/ota/upload-url",{projectId:e.projectId,updateId:e.updateId,platform:e.platform,fileName:e.fileName,contentType:e.contentType});if(t.data.status!=="success")throw new Error(t.data.message||`Could not create upload URL for ${e.fileName}`);let n=re.statSync(e.filePath).size;return await Gg.put(t.data.uploadUrl,re.createReadStream(e.filePath),{headers:{"Content-Type":e.contentType,"Content-Length":n},maxBodyLength:1/0,maxContentLength:1/0}),{key:t.data.key,url:t.data.publicUrl,contentType:e.contentType,hash:Qg(e.filePath),size:n}}function dc(e,t,n,i={}){let r=oc(e,t,{cwd:n,stdio:"inherit",env:{...process.env,CI:process.env.CI||"1",EXPO_NO_TELEMETRY:"1",...i}});if(r.error)throw new Error(r.error.message);if(r.status!==0)throw new Error(`${e} ${t.join(" ")} exited with code ${r.status}`)}function nh(e,t,n,i,r){dc("npx",["expo","export","--platform",e,"--output-dir",t],process.cwd(),{MACH_OTA_RUNTIME_VERSION:n,MACH_OTA_CHANNEL:i,MACH_OTA_URL:r})}function ih(e,t){let n=e==="ios"?"main.jsbundle":"index.android.bundle",r=["index.js","index.ts","index.tsx"].find(s=>re.existsSync(he.join(process.cwd(),s)))||"index.js",o=he.join(t,"assets");re.mkdirSync(o,{recursive:!0}),dc("npx",["react-native","bundle","--platform",e,"--dev","false","--entry-file",r,"--bundle-output",he.join(t,n),"--assets-dest",o],process.cwd())}async function rh(e){let t=e.config.projectId,n=`ota_${Date.now()}_${e.platform}_${Co.randomUUID().slice(0,8)}`,i=he.join(process.cwd(),".mach","ota",n,e.platform);re.rmSync(i,{recursive:!0,force:!0}),re.mkdirSync(i,{recursive:!0}),e.engine==="expo-updates"?nh(e.platform,i,e.runtimeVersion,e.channel,e.config.ota?.url||""):ih(e.platform,i);let r=e.engine==="expo-updates"?ql(i,e.platform):void 0,o=r?Yl(i,r):cc(i),s=r?he.join(i,r.bundle):th(o,e.platform);if(!s)throw new Error(`Could not find a ${e.platform} JS bundle in ${i}.`);let l=new Map((r?.assets||[]).map(y=>[y.path,y])),a=[];for(let y of o){let P=he.relative(i,y).replace(/\\/g,"/"),v=l.get(P),F=y===s?"application/javascript":v?Ji(v.ext):eh(y);a.push({filePath:y,relative:P,uploaded:await nc({projectId:t,updateId:n,platform:e.platform,filePath:y,fileName:P,contentType:F})})}let c=a.find(y=>y.filePath===s),u=e.engine==="expo-updates"?Co.randomUUID():void 0,d=e.engine==="expo-updates"?Zl(e.expoConfig):void 0;if(e.engine==="expo-updates"&&(!d||Object.keys(d).length===0))throw new Error("Could not resolve the public Expo config required by the OTA manifest. Run `mach ota verify` and try again.");let p=r?r.assets.map(y=>{let P=a.find(v=>v.relative===y.path);if(!P)throw new Error(`Could not find uploaded Expo asset ${y.path}.`);return{key:Ro(P.filePath),url:P.uploaded.url,contentType:Ji(y.ext),fileExtension:Xl(y.ext),hash:Oo(P.filePath),size:P.uploaded.size}}):a.filter(y=>y.filePath!==s&&!y.relative.endsWith(".map")).map(y=>({key:y.relative,url:y.uploaded.url,contentType:y.uploaded.contentType,hash:y.uploaded.hash,size:y.uploaded.size})),f=r?{key:Ro(c.filePath),url:c.uploaded.url,contentType:Ji(void 0,!0),hash:Oo(c.filePath),size:c.uploaded.size}:{key:he.basename(c.relative),url:c.uploaded.url,contentType:c.uploaded.contentType,hash:c.uploaded.hash,size:c.uploaded.size},g={id:u||n,createdAt:new Date().toISOString(),runtimeVersion:e.runtimeVersion,launchAsset:f,assets:p,metadata:{projectId:t,channel:e.channel,...e.message?{message:e.message}:{},engine:e.engine},extra:{...d?{expoClient:d}:{},mach:{projectId:t,updateId:n,...u?{expoUpdateId:u}:{},channel:e.channel,platform:e.platform}}},h=he.join(i,"mach-manifest.json");re.writeFileSync(h,JSON.stringify(g,null,2));let S=await nc({projectId:t,updateId:n,platform:e.platform,filePath:h,fileName:"manifest.json",contentType:"application/json"}),b=await O.post("/ota/publish",{projectId:t,updateId:n,expoUpdateId:u,channelName:e.channel,runtimeVersion:e.runtimeVersion,platform:e.platform,manifestKey:S.key,message:e.message,launchAsset:f,assets:p});if(b.data.status!=="success")throw new Error(b.data.message||`Failed to publish ${e.platform} OTA update.`);return b.data.update}async function oh(e){let t=ni(),n=Ye(e.framework)||ko(t),i;try{i=ac(xo(e.engine,n))}catch(p){Qe.error(p.message),process.exit(1)}let r=!!e.yes,o=await tc("OTA channel:",Fe(e.channel||e.branch||t.ota?.channel)||"production","production",!0,r),s=`${Ct.replace(/\/$/,"")}/api/ota/expo/${t.projectId}`,l=Fe(e.url||t.ota?.url),a=l?.includes("/api/ota/react-native/")?void 0:l,c=await tc("Mach OTA update URL:",a||s,s,!0,r);t.framework=n;let u={...t.ota||{},enabled:!0,engine:i,channel:o,url:c,deploymentUrl:c,runtimeVersionPolicy:t.ota?.runtimeVersionPolicy||"appVersion"};delete u.statsUrl,t.ota=u,delete t.update,Vg(t);let d=[`${m.configFileName} updated.`];if(d.push(...await Xg(process.cwd(),n,e)),d.push(...await Yg(process.cwd(),n,e)),n==="react-native"&&Jt(process.cwd(),"expo")&&Jt(process.cwd(),"expo-updates")&&Zi(process.cwd())){let p=No(e.platform||"all"),f=Rr(process.cwd()).filter(g=>p.includes(g));f.length===0&&d.push("No matching committed ios/android project was found for native configuration sync.");for(let g of f){let h=To(t,e,g),b=Si({cwd:process.cwd(),platforms:[g],runtimeVersion:h,channel:o,url:c}).find(y=>!y.ok);if(b)throw new Error(`Could not synchronize ${g} Expo Updates configuration: ${b.error||b.command}`);d.push(`Synchronized ${g} native Expo Updates configuration for runtime ${h}.`)}}d.push("Create and install one new native build after initial OTA setup. Existing app binaries keep their embedded update URL."),Fg(d.map(p=>`- ${p}`).join(`
-`),"OTA setup"),await uc({...e,action:"verify"})}async function sh(e){on();let t=ni(),n=Ye(e.framework)||ko(t),i;try{i=ac(xo(e.engine||t.ota?.engine,n))}catch(l){Qe.error(`${l.message} Run \`mach ota setup\` to migrate this project.`),process.exit(1)}let r=Fe(e.channel||e.branch||t.ota?.channel)||"production",o=No(e.platform||"all"),s=Bg();s.start(`Publishing OTA update (${o.join("+")}, ${r})`);try{let l=[];for(let a of o){let c=To(t,e,a),u=Zg({platform:a,runtimeVersion:c,channel:r,url:Fe(t.ota?.url)||""});s.message(`Exporting and uploading ${a} OTA bundle for runtime ${c}...`),l.push(await rh({config:t,engine:i,platform:a,channel:r,runtimeVersion:c,message:e.message,expoConfig:u.expoConfig}))}if(s.stop("OTA update published."),e.json)Qe.info(JSON.stringify({status:"success",updates:l},null,2));else{let a=Array.from(new Set(l.map(c=>c.runtimeVersion).filter(Boolean)));bn(lt.green(`\u2713 OTA update live on "${r}" for runtime ${a.join(", ")||"unknown"}.`));for(let c of l)Qe.info(lt.dim(`${c.platform}: ${c.updateId}`))}}catch(l){s.stop("OTA publish failed."),Qe.error(l.response?.data?.message||l.message),process.exit(1)}}async function uc(e){let t=ni(),n=Ye(e.framework)||ko(t),i=xo(e.engine||t.ota?.engine,n),r=[],o=t.ota;if(r.push(o?.enabled?{level:"pass",message:"mach.config.json has ota.enabled."}:{level:"fail",message:"mach.config.json is missing ota.enabled. Run `mach ota setup`."}),r.push(o?.url?{level:"pass",message:`OTA URL configured: ${o.url}`}:{level:"fail",message:"OTA URL is missing. Run `mach ota setup`."}),r.push(o?.channel?{level:"pass",message:`Default channel: ${o.channel}`}:{level:"warn",message:"No default OTA channel configured; publish will use production."}),r.push(o?.runtimeVersionPolicy||o?.runtimeVersion?{level:"pass",message:"Runtime version policy configured."}:{level:"warn",message:"No explicit runtime policy configured; Mach will use Expo runtimeVersion or package.json version."}),i==="expo-updates"){let l=An(he.join(process.cwd(),"package.json"))||{},a={...l.dependencies||{},...l.devDependencies||{}};n==="react-native"&&r.push(a.expo?{level:"pass",message:"Expo Modules are installed for the bare React Native project."}:{level:"fail",message:"Expo Modules are missing. Run `mach ota setup` to install the bare React Native OTA runtime."}),r.push(a["expo-updates"]?{level:"pass",message:"expo-updates is installed."}:{level:"fail",message:"expo-updates is missing. Run `mach ota setup`."}),r.push(Zi(process.cwd())?{level:"pass",message:`${m.npmScope}/mach is installed locally for the Expo plugin.`}:{level:"fail",message:`${m.npmScope}/mach is not installed locally; run \`mach ota setup\`.`});let c=No(e.platform||"all"),u=Fe(e.channel||e.branch||o?.channel)||"production",d=Fe(o?.url)||"",p=c.map(g=>{let h=To(t,e,g);return{platform:g,runtimeVersion:h,delivery:Tn(process.cwd(),{platform:g,runtimeVersion:h,channel:u,url:d})}}),f=p[0]?.delivery;if(f){let g=f.expoConfig.updates?.enabled!==!1,h=Fe(f.expoConfig.updates?.checkAutomatically)?.toUpperCase()||"ON_LOAD";r.push(f.url===o?.url?{level:"pass",message:"Expo Updates URL resolves to Mach."}:{level:"warn",message:`Expo Updates URL resolves to ${f.url||"none"} instead of ${o?.url||"the Mach OTA URL"}.`}),r.push(f.channel===u?{level:"pass",message:`Expo update channel header resolves to ${u}.`}:{level:"warn",message:`Expo update channel header is ${f.channel||"not set"}; install the latest ${m.npmScope}/mach package and rebuild.`}),r.push(g?{level:"pass",message:"Expo Updates is enabled."}:{level:"fail",message:"Expo config has updates.enabled=false, so this app cannot receive OTA updates."}),r.push(h!=="NEVER"&&h!=="ON_ERROR_RECOVERY"?{level:"pass",message:`Expo checks for updates automatically (${h}).`}:{level:"fail",message:`Expo checkAutomatically is ${h}; use ON_LOAD to receive Mach updates when the app starts.`})}else r.push({level:"fail",message:`Could not resolve Expo config. Confirm ${Oe} is present and run \`mach ota setup\` again.`});for(let{platform:g,runtimeVersion:h,delivery:S}of p)r.push(S?.runtimeVersion===h?{level:"pass",message:`${g} Expo runtime resolves to ${h}.`}:{level:"fail",message:`${g} Expo runtime resolves to ${S?.runtimeVersion||"none"} instead of ${h}. Run \`mach ota setup\`, then rebuild the app.`});if(n==="react-native"){let g=c,h=Rr(process.cwd()).filter(b=>g.includes(b)),S=As(process.cwd());if(h.includes("android")){let b=!!(S.androidManifest&&S.androidStrings)&&re.readFileSync(S.androidManifest,"utf-8").includes("expo.modules.updates.EXPO_UPDATE_URL")&&re.readFileSync(S.androidStrings,"utf-8").includes("expo_runtime_version");r.push(b?{level:"pass",message:"Android native Expo Updates configuration is synchronized."}:{level:"fail",message:"Android native Expo Updates configuration is missing. Run `mach ota setup --platform android`."})}if(h.includes("ios")){let b=!!S.iosExpoPlist&&re.readFileSync(S.iosExpoPlist,"utf-8").includes("EXUpdatesURL")&&re.readFileSync(S.iosExpoPlist,"utf-8").includes("EXUpdatesRuntimeVersion");r.push(b?{level:"pass",message:"iOS native Expo Updates configuration is synchronized."}:{level:"fail",message:"iOS native Expo Updates configuration is missing. Run `mach ota setup --platform ios`."})}}}else r.push({level:"fail",message:"mach-react-native is not available yet. Run `mach ota setup` to migrate this project to expo-updates."});for(let l of r){let a=l.level==="pass"?lt.green("PASS"):l.level==="warn"?lt.yellow("WARN"):lt.red("FAIL");Qe.info(`${a} ${l.message}`)}let s=r.filter(l=>l.level==="fail").length;s>0&&(bn(lt.red(`OTA verification failed with ${s} issue(s).`)),process.exit(1)),bn(lt.green("OTA verification passed."))}async function ah(e){on();let t=ni(),n=await O.get(`/ota/${t.projectId}/updates`),i=n.data.updates||[];if(e.json){Qe.info(JSON.stringify(n.data,null,2));return}if(i.length===0){bn("No OTA updates found.");return}for(let r of i){let o=r.stats?.total||{};Qe.info(`${lt.bold(r.updateId)} ${lt.dim(`${r.platform} ${r.channelName} runtime ${r.runtimeVersion}`)} ${r.status||"active"}`),Qe.info(lt.dim(`  downloads ios=${o.iosDownloaded||0} android=${o.androidDownloaded||0} applied ios=${o.iosApplied||0} android=${o.androidApplied||0}`))}bn(`Found ${i.length} OTA update(s).`)}async function ic(e,t){on();let n=ni(),i=Fe(t.updateId);i||(Qe.error(`Missing update id. Use \`${m.nameLower} ota ${e} --update-id <id>\`.`),process.exit(1));let r=await O.post(`/ota/${n.projectId}/updates/${encodeURIComponent(i)}/${e}`);t.json?Qe.info(JSON.stringify(r.data,null,2)):bn(lt.green(`\u2713 OTA update ${e==="rollback"?"rolled back":"promoted"}: ${i}`))}async function jt(e,t={}){let n=e||t.action||"publish";if(n==="setup")return oh({...t,action:n});if(n==="publish")return sh({...t,action:n});if(n==="verify")return uc({...t,action:n});if(n==="list")return ah({...t,action:n});if(n==="rollback")return ic("rollback",{...t,action:n});if(n==="promote")return ic("promote",{...t,action:n});let i=await jg({message:"What do you want to do?",options:[{value:"setup",label:"Setup OTA"},{value:"publish",label:"Publish OTA update"},{value:"verify",label:"Verify OTA setup"},{value:"list",label:"List OTA updates"}]});return Yi(i)&&Xi(),jt(i,t)}import{intro as lh,outro as pc,log as En}from"@clack/prompts";import yt from"chalk";async function fc(){lh(yt.blue(`${m.name} CLI - User Profile`));let e=Ue();if(!e){En.warn(yt.yellow("You are not logged in.")),En.info(`Run \`${m.nameLower} login\` to authenticate.`),pc();return}En.info(`${yt.bold("Logged in as:")} ${yt.green(e.email)}`);try{await O.get("/projects");let n=Ue().token.split(".");if(n.length===3){let i=JSON.parse(Buffer.from(n[1],"base64").toString());if(i.exp){let r=new Date(i.exp*1e3),o=new Date,s=r.getTime()-o.getTime();if(s>0){let l=Math.round(s/6e4),a=(l/60).toFixed(1);En.info(`${yt.bold("Token status:")} Valid (Expires in ~${a}h / ${l}m)`)}else En.warn(`${yt.bold("Token status:")} ${yt.red("Expired")} (Auto-refresh failed)`)}}}catch{En.warn(`${yt.bold("Token status:")} ${yt.red("Unreachable")} (Session might be truly expired)${Ct}`)}pc(yt.blue("---"))}import{spawn as uh}from"child_process";import{log as Bt}from"@clack/prompts";import et from"chalk";import ph from"fs";import ch from"net";async function dh(e){return new Promise(t=>{let n=ch.createServer();n.once("error",i=>{i.code==="EADDRINUSE"?t(!0):t(!1)}),n.once("listening",()=>{n.close(),t(!1)}),n.listen(e,"0.0.0.0")})}async function mc(e,t=20){let n=e;for(;n<e+t;){if(!await dh(n))return n;n++}throw new Error(`Could not find an available port after ${t} attempts starting from ${e}.`)}var gc=async e=>{Bt.info(et.blue(`Starting ${m.name} Dev Orchestrator...`));let t=we(),n=e.buildProfile||"development",i=t?He(t,n):null,r={...process.env};if(t?.projectId)try{Bt.info(et.dim(`Fetching managed secrets for profile: ${n}...`));let d=await O.get(`/projects/${t.projectId}/secrets/export?env=${n}`);d.data?.status==="success"&&d.data.secrets&&(Object.assign(r,d.data.secrets),Bt.info(et.magenta(`\u2713 Injected secrets from ${m.name} Dashboard.`)))}catch{Bt.warn("Could not fetch managed secrets. Running with local env only.")}t&&Object.assign(r,ln(t,m.envPrefix)),i&&(Object.assign(r,ln(i,`${m.envPrefix}PROFILE_`)),i.env&&Object.assign(r,i.env));let o=!1;try{let d=JSON.parse(ph.readFileSync("package.json","utf-8"));o=!!(d.dependencies?.expo||d.devDependencies?.expo)}catch{Bt.warn("Could not parse package.json. Defaulting to Bare React Native mode.")}let s=Number(e.port||i?.port||8081),l=await mc(s);l!==s&&Bt.info(et.yellow(`Port ${s} is busy. ${m.name} is using ${l} instead.`));let a=process.platform==="win32"?"npx.cmd":"npx",c=[];if(o?(c=["expo","start","--port",String(l)],e.clear&&c.push("--clear"),e.tunnel&&c.push("--tunnel"),e.lan&&c.push("--lan"),e.localhost&&c.push("--localhost"),e.ios&&c.push("--ios"),e.android&&c.push("--android"),e.web&&c.push("--web")):(c=["react-native","start","--port",String(l)],e.clear&&c.push("--clear")),o){let d=[`${et.cyan("i")}  open iOS simulator`,`${et.cyan("a")}  open Android emulator/device`,`${et.cyan("w")}  open web`,`${et.cyan("r")}  reload app`];Bt.info([et.bold("Launch controls"),...d.map(p=>`  ${p}`),"",et.dim("Direct launch: mach start --ios | --android | --web"),et.dim(`Metro URL: http://localhost:${l}`)].join(`
-`))}else Bt.info(et.dim(`Metro URL: http://localhost:${l}`));let u=uh(a,c,{stdio:"inherit",env:r});return new Promise((d,p)=>{u.on("exit",f=>{f===0?d():p(new Error(`Dev server exited with code ${f}`))}),u.on("error",f=>{p(f)})})};import{log as We}from"@clack/prompts";import ct from"chalk";var hc=async e=>{let t=we();t||(We.error(ct.red(`No ${m.configFileName} found in the current directory.`)),process.exit(1));let n=e.profile||"development",i=He(t,n);if(e.json){console.log(JSON.stringify({project:t,resolved:i},null,2));return}We.info(ct.bgBlue.white(` Resolved ${m.name} Config [${n}] `)),We.info(ct.dim("----------------------------------------")),We.info(`${ct.blue("Project ID:")} ${t.projectId}`),We.info(`${ct.blue("Name:")} ${t.name}`),We.info(`${ct.blue("Scheme:")} ${t.scheme}`),i?(We.info(ct.dim(`
-Profile Settings:`)),We.info(`${ct.cyan("Distribution:")} ${i.distribution||"none"}`),We.info(`${ct.cyan("Development Client:")} ${i.developmentClient||"false"}`),i.env&&Object.keys(i.env).length>0&&(We.info(ct.dim(`
-Environment Variables:`)),Object.entries(i.env).forEach(([r,o])=>{We.info(`  ${r}=${o}`)}))):We.warn(`Profile '${n}' not found.`),We.info(ct.dim("----------------------------------------"))};import{cancel as xh,confirm as Nc,isCancel as si,log as lr,note as Nh,outro as cr,select as Th,text as Tc}from"@clack/prompts";import ut from"chalk";import Lh from"fs";import kc from"path";import tn from"fs";import wn from"path";var In="./plugins/withMachDeepLinks",Lo="mach.deep-links.json",Sc=["/*"],Mo=e=>{if(typeof e!="string")return;let t=e.trim();return t.length>0?t:void 0},er=e=>{let t=new Set,n=[];for(let i of e){let r=Mo(i);!r||t.has(r)||(t.add(r),n.push(r))}return n},dt=(...e)=>{for(let t of e){let n=Mo(t);if(n)return n}},yc=(e,t)=>e.length!==t.length?!1:e.every((n,i)=>n===t[i]);function bc(e){if(typeof e!="string")return;let t=e.trim().toLowerCase();if(t==="ios"||t==="android"||t==="all")return t}function ii(e){let t=e.includes("://")?e:`https://${e}`,n=new URL(t),i=n.pathname==="/"?"":n.pathname.replace(/\/+$/,"");return`${n.protocol}//${n.host}${i}`}function Qi(e){return new URL(ii(e)).hostname}function tr(e){return e.trim().toLowerCase().replace(/[^a-z0-9+.-]/g,"-").replace(/^-+|-+$/g,"")||"app"}function Ac(e=process.cwd()){let t=wn.join(e,"package.json"),n=["app.json","app.config.json","app.config.js","app.config.ts"].some(r=>tn.existsSync(wn.join(e,r))),i=!1;if(tn.existsSync(t))try{let r=JSON.parse(tn.readFileSync(t,"utf-8"));i=!!(r.dependencies?.expo||r.devDependencies?.expo)}catch{i=!1}return n&&i?"expo":tn.existsSync(wn.join(e,"ios"))||tn.existsSync(wn.join(e,"android"))?"react-native":sn}function Ec(e,t,n){if(t)return t;let i=!!(e.ios?.bundleIdentifier||n?.ios?.bundleIdentifier||e.deepLinks?.ios?.bundleIdentifier),r=!!(e.android?.package||n?.android?.package||n?.android?.applicationId||e.deepLinks?.android?.package);return i&&!r?"ios":r&&!i?"android":"all"}function nr(e=process.cwd(),t){let n=t?.deepLinks?.web?.outputDir;return n||(tn.existsSync(wn.join(e,"public"))?"public":"deep-links")}function wc(e,t){let n=e.deepLinks,i=ii(t.baseUrl||n?.baseUrl||(t.domain?`https://${t.domain}`:"")),r=Mo(t.domain)||(t.baseUrl?Qi(i):n?.domain)||Qi(i),o=t.profile||n?.profile||"production",s=He(e,o)||{},l=s.ios||{},a=s.android||{},c=e.submit?.[o]?.ios||{},u=e.submit?.[o]?.android||{},d=tr(t.scheme||n?.scheme||l.scheme||e.scheme||e.slug||e.name||"app"),p=zt(e,o),f=er([...t.androidFingerprint||[],...n?.android?.sha256CertFingerprints||[],...a.sha256CertFingerprints||[],...e.android?.sha256CertFingerprints||[]]);return{baseUrl:i,domain:r,scheme:d,profile:o!=="production"?o:void 0,paths:n?.paths?.length?n.paths:["/*"],ios:{appStoreId:dt(t.appStoreId,n?.ios?.appStoreId,l.ascAppId,c.ascAppId,e.ios?.ascAppId),appleTeamId:dt(t.appleTeamId,n?.ios?.appleTeamId,l.appleTeamId,l.developerTeamId,c.appleTeamId,c.developerTeamId,e.ios?.appleTeamId,e.ios?.developerTeamId,p.teamId),bundleIdentifier:dt(t.iosBundleId,n?.ios?.bundleIdentifier,l.bundleIdentifier,l.bundleId,e.ios?.bundleIdentifier,e.ios?.bundleId,e.expo?.ios?.bundleIdentifier),webCredentials:!!n?.ios?.webCredentials,activityContinuation:!!n?.ios?.activityContinuation},android:{package:dt(t.androidPackage,n?.android?.package,a.package,a.applicationId,e.android?.package,e.expo?.android?.package,u.packageName,u.package),sha256CertFingerprints:f},web:{smartAppBanner:n?.web?.smartAppBanner??!0,outputDir:t.output||n?.web?.outputDir||nr(process.cwd(),e)}}}function ir(e,t={}){let n=e.deepLinks,i=t.profile||n?.profile||"production",r=t.expoHints||null,o=dt(n?.baseUrl,r?.domain?`https://${r.domain}`:void 0);if(!o)return null;let s=ii(o),l=He(e,i)||{},a=l.ios||{},c=l.android||{},u=e.submit?.[i]?.ios||{},d=e.submit?.[i]?.android||{},p=zt(e,i),f=dt(n?.domain,r?.domain)||Qi(s),g=tr(dt(n?.scheme,a.scheme,e.scheme,r?.scheme,e.slug,e.name,"app")||"app"),h=n?.paths?.length?n.paths:[...Sc];return{baseUrl:s,domain:f,scheme:g,profile:i!=="production"?i:void 0,paths:h,ios:{appStoreId:dt(n?.ios?.appStoreId,a.ascAppId,u.ascAppId,e.ios?.ascAppId),appleTeamId:dt(n?.ios?.appleTeamId,a.appleTeamId,a.developerTeamId,u.appleTeamId,u.developerTeamId,e.ios?.appleTeamId,e.ios?.developerTeamId,p.teamId),bundleIdentifier:dt(n?.ios?.bundleIdentifier,a.bundleIdentifier,a.bundleId,e.ios?.bundleIdentifier,e.ios?.bundleId,e.expo?.ios?.bundleIdentifier,r?.iosBundleIdentifier),webCredentials:!!n?.ios?.webCredentials,activityContinuation:!!n?.ios?.activityContinuation},android:{package:dt(n?.android?.package,c.package,c.applicationId,e.android?.package,e.expo?.android?.package,d.packageName,d.package,r?.androidPackage),sha256CertFingerprints:er([...n?.android?.sha256CertFingerprints||[],...c.sha256CertFingerprints||[],...e.android?.sha256CertFingerprints||[]])},web:{smartAppBanner:n?.web?.smartAppBanner??!0,outputDir:n?.web?.outputDir||nr(t.cwd||process.cwd(),e)}}}function rr(e,t,n="production",i=process.cwd()){return t?.domain?ir({...e,deepLinks:{baseUrl:`https://${t.domain}`,domain:t.domain,scheme:t.scheme}},{profile:n,cwd:i,expoHints:t}):null}function fh(e,t,n=t.profile||"production"){let i=ir({...e,deepLinks:{baseUrl:t.baseUrl}},{profile:n}),r={baseUrl:t.baseUrl};n!=="production"&&(r.profile=n),t.domain&&t.domain!==Qi(t.baseUrl)&&(r.domain=t.domain),t.scheme&&t.scheme!==i?.scheme&&(r.scheme=t.scheme),t.paths?.length&&!yc(t.paths,Sc)&&(r.paths=t.paths);let o={};t.ios?.bundleIdentifier&&t.ios.bundleIdentifier!==i?.ios?.bundleIdentifier&&(o.bundleIdentifier=t.ios.bundleIdentifier),t.ios?.appleTeamId&&t.ios.appleTeamId!==i?.ios?.appleTeamId&&(o.appleTeamId=t.ios.appleTeamId),t.ios?.appStoreId&&t.ios.appStoreId!==i?.ios?.appStoreId&&(o.appStoreId=t.ios.appStoreId),t.ios?.webCredentials&&(o.webCredentials=!0),t.ios?.activityContinuation&&(o.activityContinuation=!0),Object.keys(o).length>0&&(r.ios=o);let s={};t.android?.package&&t.android.package!==i?.android?.package&&(s.package=t.android.package);let l=t.android?.sha256CertFingerprints||[],a=i?.android?.sha256CertFingerprints||[];l.length>0&&!yc(l,a)&&(s.sha256CertFingerprints=l),Object.keys(s).length>0&&(r.android=s);let c={outputDir:t.web?.outputDir||"deep-links"};return t.web?.smartAppBanner===!1&&(c.smartAppBanner=!1),r.web=c,r}function Ic(e,t,n,i=n.profile||"production"){let r={...e,framework:t,scheme:e.scheme||n.scheme};return{...r,deepLinks:fh(r,n,i)}}function vc(e,t=process.cwd()){let n=wn.join(t,"mach.config.json");return tn.writeFileSync(n,`${JSON.stringify(e,null,2)}
-`),n}import Ce from"fs";import Te from"path";import{spawnSync as $c}from"child_process";var ri="@radhya/mach/expo-plugin",mh=`const fs = require('fs')
+`,a=o[1]||"",l=o[2]||"",c=l.match(/\r?\n([ \t]+)\S/)?.[1]||`${a}    `,u=l.trim().length===0?`${s}${c}'${ue}',${s}${a}`:l.includes(`
+`)||l.includes("\r")?`${s}${c}'${ue}',${l}`:`${s}${c}'${ue}',${s}${c}${l.trim()}${s}${a}`,f=`${o[0].slice(0,o[0].indexOf("[")+1)}${u}]`;return z.writeFileSync(n,`${i.slice(0,o.index)}${f}${i.slice(o.index+o[0].length)}`),"inserted"}async function gf(e,t,n){let i=[];if(uf(e)){let o=ai(e),s=!!(n.installPlugin||n.yes);if(!s&&!n.skipInstall&&Ur()){let a=await Ua({message:o?`Update the local ${m.npmScope}/mach Expo plugin (${o} \u2192 ${et})?`:`Install ${m.npmScope}/mach locally so Expo can use ${ue}?`,initialValue:!0});li(a)&&di(),s=!!a}if(s&&!n.skipInstall){let a=pf(e);a.ok?i.push(`Installed a compatible ${ue} with ${a.label}.`):i.push(`Could not install ${m.npmScope}/mach with ${a.label}: ${a.error||"unknown error"}.`)}else i.push(`Install ${m.npmScope}/mach@${et} or newer in this app so Expo can resolve ${ue}.`)}else i.push(`Local ${ue} is compatible (${ai(e)}).`);let r=mf(e);if(r==="already"&&i.push(`Expo config already includes ${ue}.`),r==="inserted"&&i.push(`Expo config updated to include ${ue}.`),r==="manual"&&i.push(`Add "${ue}" to the plugins array in app.config.ts/app.config.js.`),r==="missing"){let o=ff(e,t);o?i.push(`${o} updated to include ${ue}.`):i.push(`Add "${ue}" to your Expo config plugins array.`)}return i}async function Na(e,t){if(t.skipInstall)return!1;if(t.yes)return!0;if(!Ur())return!1;let n=await Ua({message:e,initialValue:!0});return li(n)&&di(),!!n}async function hf(e,t,n){let i=[];if(t==="react-native"&&!ft(e,"expo"))if(await Na("Install Expo Modules required by the Mach OTA runtime? This updates package and native project files.",n)){let o=fo(e);if(!o.ok||!ft(e,"expo"))throw new Error(`Expo Modules installation failed: ${o.error||o.command}`);i.push("Installed and configured Expo Modules for the existing React Native project.")}else i.push("Expo Modules are required. Run `npx install-expo-modules@latest`, then run `mach ota setup` again.");if(!ft(e,"expo-updates"))if(await Na("Install the expo-updates runtime?",n)){let o=mo(e);if(!o.ok||!ft(e,"expo-updates"))throw new Error(`expo-updates installation failed: ${o.error||o.command}`);i.push("Installed the Expo-compatible expo-updates version.")}else i.push("Install expo-updates with `npx expo install expo-updates`, then run `mach ota setup` again.");return i}async function xa(e,t,n,i,r){if(t)return t;if(r||!Ur()){if(i)throw new Error(`${e.replace(/:$/,"")} is required.`);return}let o=await af({message:e,placeholder:n,validate(s){if(i&&s.trim().length===0)return"Required."}});return li(o)&&di(),Ae(o)}function Hr(e,t,n){return Kt(e,{runtimeVersion:t.runtimeVersion,framework:$e(t.framework)||$e(e.framework),platform:n})}function yf(e){let t=zt(process.cwd(),e);if(!t)throw new Error(`Resolved Expo OTA configuration does not match this publish: Expo config could not be resolved. Run \`mach ota setup\` to update ${ue}, then create a new native build if its embedded runtime changes.`);let n=[];if(t.runtimeVersion!==e.runtimeVersion&&n.push(`runtime is ${t.runtimeVersion||"missing"} (expected ${e.runtimeVersion})`),t.channel!==e.channel&&n.push(`channel is ${t.channel||"missing"} (expected ${e.channel})`),t.url!==e.url&&n.push(`URL is ${t.url||"missing"} (expected ${e.url})`),n.length>0)throw new Error(`Resolved Expo OTA configuration does not match this publish: ${n.join("; ")}. Run \`mach ota setup\` to update ${ue}, then create a new native build if its embedded runtime changes.`);return t}function bf(e){return Mr.createHash("sha256").update(z.readFileSync(e)).digest("hex")}function Af(e){let t=te.extname(e).toLowerCase();return t===".json"?"application/json":t===".js"||t===".bundle"||t===".hbc"?"application/javascript":t===".map"?"application/json":t===".png"?"image/png":t===".jpg"||t===".jpeg"?"image/jpeg":t===".webp"?"image/webp":t===".gif"?"image/gif":t===".svg"?"image/svg+xml":t===".ttf"?"font/ttf":t===".otf"?"font/otf":t===".woff"?"font/woff":t===".woff2"?"font/woff2":"application/octet-stream"}function Ga(e){let t=[];if(!z.existsSync(e))return t;for(let n of z.readdirSync(e)){let i=te.join(e,n),r=z.statSync(i);r.isDirectory()?t.push(...Ga(i)):r.isFile()&&t.push(i)}return t}function Sf(e,t){let n=e.filter(i=>{let r=i.toLowerCase();return r.endsWith(".map")?!1:r.endsWith(".js")||r.endsWith(".bundle")||r.endsWith(".hbc")});return n.find(i=>i.toLowerCase().includes(t))||n.sort((i,r)=>z.statSync(r).size-z.statSync(i).size)[0]}async function La(e){let t=await $.post("/ota/upload-url",{projectId:e.projectId,updateId:e.updateId,platform:e.platform,fileName:e.fileName,contentType:e.contentType});if(t.data.status!=="success")throw new Error(t.data.message||`Could not create upload URL for ${e.fileName}`);let n=z.statSync(e.filePath).size;return await lf.put(t.data.uploadUrl,z.createReadStream(e.filePath),{headers:{"Content-Type":e.contentType,"Content-Length":n},maxBodyLength:1/0,maxContentLength:1/0}),{key:t.data.key,url:t.data.publicUrl,contentType:e.contentType,hash:bf(e.filePath),size:n}}function Va(e,t,n,i={}){let r=Fa(e,t,{cwd:n,stdio:"inherit",env:{...process.env,CI:process.env.CI||"1",EXPO_NO_TELEMETRY:"1",...i}});if(r.error)throw new Error(r.error.message);if(r.status!==0)throw new Error(`${e} ${t.join(" ")} exited with code ${r.status}`)}function Ef(e,t,n,i,r){Va("npx",["expo","export","--platform",e,"--output-dir",t],process.cwd(),{MACH_OTA_RUNTIME_VERSION:n,MACH_OTA_CHANNEL:i,MACH_OTA_URL:r})}function If(e,t){let n=e==="ios"?"main.jsbundle":"index.android.bundle",r=["index.js","index.ts","index.tsx"].find(s=>z.existsSync(te.join(process.cwd(),s)))||"index.js",o=te.join(t,"assets");z.mkdirSync(o,{recursive:!0}),Va("npx",["react-native","bundle","--platform",e,"--dev","false","--entry-file",r,"--bundle-output",te.join(t,n),"--assets-dest",o],process.cwd())}async function wf(e){let t=e.config.projectId,n=`ota_${Date.now()}_${e.platform}_${Mr.randomUUID().slice(0,8)}`,i=te.join(process.cwd(),".mach","ota",n,e.platform);z.rmSync(i,{recursive:!0,force:!0}),z.mkdirSync(i,{recursive:!0}),e.engine==="expo-updates"?Ef(e.platform,i,e.runtimeVersion,e.channel,e.config.ota?.url||""):If(e.platform,i);let r=e.engine==="expo-updates"?Da(i,e.platform):void 0,o=r?Pa(i,r):Ga(i),s=r?te.join(i,r.bundle):Sf(o,e.platform);if(!s)throw new Error(`Could not find a ${e.platform} JS bundle in ${i}.`);let a=new Map((r?.assets||[]).map(w=>[w.path,w])),l=[];for(let w of o){let L=te.relative(i,w).replace(/\\/g,"/"),_=a.get(L),H=w===s?"application/javascript":_?si(_.ext):Af(w);l.push({filePath:w,relative:L,uploaded:await La({projectId:t,updateId:n,platform:e.platform,filePath:w,fileName:L,contentType:H})})}let d=l.find(w=>w.filePath===s),c=e.engine==="expo-updates"?Mr.randomUUID():void 0,u=e.engine==="expo-updates"?Ta(e.expoConfig):void 0;if(e.engine==="expo-updates"&&(!u||Object.keys(u).length===0))throw new Error("Could not resolve the public Expo config required by the OTA manifest. Run `mach ota verify` and try again.");let f=r?r.assets.map(w=>{let L=l.find(_=>_.relative===w.path);if(!L)throw new Error(`Could not find uploaded Expo asset ${w.path}.`);return{key:xr(L.filePath),url:L.uploaded.url,contentType:si(w.ext),fileExtension:Ca(w.ext),hash:Lr(L.filePath),size:L.uploaded.size}}):l.filter(w=>w.filePath!==s&&!w.relative.endsWith(".map")).map(w=>({key:w.relative,url:w.uploaded.url,contentType:w.uploaded.contentType,hash:w.uploaded.hash,size:w.uploaded.size})),p=r?{key:xr(d.filePath),url:d.uploaded.url,contentType:si(void 0,!0),hash:Lr(d.filePath),size:d.uploaded.size}:{key:te.basename(d.relative),url:d.uploaded.url,contentType:d.uploaded.contentType,hash:d.uploaded.hash,size:d.uploaded.size},g={id:c||n,createdAt:new Date().toISOString(),runtimeVersion:e.runtimeVersion,launchAsset:p,assets:f,metadata:{projectId:t,channel:e.channel,...e.message?{message:e.message}:{},engine:e.engine},extra:{...u?{expoClient:u}:{},mach:{projectId:t,updateId:n,...c?{expoUpdateId:c}:{},channel:e.channel,platform:e.platform}}},h=te.join(i,"mach-manifest.json");z.writeFileSync(h,JSON.stringify(g,null,2));let y=await La({projectId:t,updateId:n,platform:e.platform,filePath:h,fileName:"manifest.json",contentType:"application/json"}),b=await $.post("/ota/publish",{projectId:t,updateId:n,expoUpdateId:c,channelName:e.channel,runtimeVersion:e.runtimeVersion,platform:e.platform,manifestKey:y.key,message:e.message,launchAsset:p,assets:f});if(b.data.status!=="success")throw new Error(b.data.message||`Failed to publish ${e.platform} OTA update.`);return b.data.update}async function vf(e){let t=mn(),n=$e(e.framework)||Fr(t),i;try{i=ja(Br(e.engine,n))}catch(f){Re.error(f.message),process.exit(1)}let r=!!e.yes,o=await xa("OTA channel:",Ae(e.channel||e.branch||t.ota?.channel)||"production","production",!0,r),s=`${Qe.replace(/\/$/,"")}/api/ota/expo/${t.projectId}`,a=Ae(e.url||t.ota?.url),l=a?.includes("/api/ota/react-native/")?void 0:a,d=await xa("Mach OTA update URL:",l||s,s,!0,r);t.framework=n;let c={...t.ota||{},enabled:!0,engine:i,channel:o,url:d,deploymentUrl:d,runtimeVersionPolicy:t.ota?.runtimeVersionPolicy||"appVersion"};delete c.statsUrl,t.ota=c,delete t.update,df(t);let u=[`${m.configFileName} updated.`];if(u.push(...await hf(process.cwd(),n,e)),u.push(...await gf(process.cwd(),n,e)),n==="react-native"&&ft(process.cwd(),"expo")&&ft(process.cwd(),"expo-updates")&&ci(process.cwd())){let f=jr(e.platform||"all"),p=Li(process.cwd()).filter(g=>f.includes(g));p.length===0&&u.push("No matching committed ios/android project was found for native configuration sync.");for(let g of p){let h=Hr(t,e,g),b=go({cwd:process.cwd(),platforms:[g],runtimeVersion:h,channel:o,url:d}).find(w=>!w.ok);if(b)throw new Error(`Could not synchronize ${g} Expo Updates configuration: ${b.error||b.command}`);u.push(`Synchronized ${g} native Expo Updates configuration for runtime ${h}.`)}}u.push("Create and install one new native build after initial OTA setup. Existing app binaries keep their embedded update URL."),rf(u.map(f=>`- ${f}`).join(`
+`),"OTA setup"),await za({...e,action:"verify"})}async function _f(e){Et();let t=mn(),n=$e(e.framework)||Fr(t),i;try{i=ja(Br(e.engine||t.ota?.engine,n))}catch(a){Re.error(`${a.message} Run \`mach ota setup\` to migrate this project.`),process.exit(1)}let r=Ae(e.channel||e.branch||t.ota?.channel)||"production",o=jr(e.platform||"all"),s=sf();s.start(`Publishing OTA update (${o.join("+")}, ${r})`);try{let a=[];for(let l of o){let d=Hr(t,e,l),c=yf({platform:l,runtimeVersion:d,channel:r,url:Ae(t.ota?.url)||""});s.message(`Exporting and uploading ${l} OTA bundle for runtime ${d}...`),a.push(await wf({config:t,engine:i,platform:l,channel:r,runtimeVersion:d,message:e.message,expoConfig:c.expoConfig}))}if(s.stop("OTA update published."),e.json)Re.info(JSON.stringify({status:"success",updates:a},null,2));else{let l=Array.from(new Set(a.map(d=>d.runtimeVersion).filter(Boolean)));Tt(xe.green(`\u2713 OTA update live on "${r}" for runtime ${l.join(", ")||"unknown"}.`));for(let d of a)Re.info(xe.dim(`${d.platform}: ${d.updateId}`))}}catch(a){s.stop("OTA publish failed."),Re.error(a.response?.data?.message||a.message),process.exit(1)}}async function za(e){let t=mn(),n=$e(e.framework)||Fr(t),i=Br(e.engine||t.ota?.engine,n),r=[],o=t.ota;if(r.push(o?.enabled?{level:"pass",message:"mach.config.json has ota.enabled."}:{level:"fail",message:"mach.config.json is missing ota.enabled. Run `mach ota setup`."}),r.push(o?.url?{level:"pass",message:`OTA URL configured: ${o.url}`}:{level:"fail",message:"OTA URL is missing. Run `mach ota setup`."}),r.push(o?.channel?{level:"pass",message:`Default channel: ${o.channel}`}:{level:"warn",message:"No default OTA channel configured; publish will use production."}),r.push(o?.runtimeVersionPolicy||o?.runtimeVersion?{level:"pass",message:"Runtime version policy configured."}:{level:"warn",message:"No explicit runtime policy configured; Mach will use Expo runtimeVersion or package.json version."}),i==="expo-updates"){let a=kt(te.join(process.cwd(),"package.json"))||{},l={...a.dependencies||{},...a.devDependencies||{}};n==="react-native"&&r.push(l.expo?{level:"pass",message:"Expo Modules are installed for the bare React Native project."}:{level:"fail",message:"Expo Modules are missing. Run `mach ota setup` to install the bare React Native OTA runtime."}),r.push(l["expo-updates"]?{level:"pass",message:"expo-updates is installed."}:{level:"fail",message:"expo-updates is missing. Run `mach ota setup`."}),r.push(ci(process.cwd())?{level:"pass",message:`${m.npmScope}/mach is installed locally for the Expo plugin.`}:{level:"fail",message:`${m.npmScope}/mach is not installed locally; run \`mach ota setup\`.`});let d=jr(e.platform||"all"),c=Ae(e.channel||e.branch||o?.channel)||"production",u=Ae(o?.url)||"",f=d.map(g=>{let h=Hr(t,e,g);return{platform:g,runtimeVersion:h,delivery:zt(process.cwd(),{platform:g,runtimeVersion:h,channel:c,url:u})}}),p=f[0]?.delivery;if(p){let g=p.expoConfig.updates?.enabled!==!1,h=Ae(p.expoConfig.updates?.checkAutomatically)?.toUpperCase()||"ON_LOAD";r.push(p.url===o?.url?{level:"pass",message:"Expo Updates URL resolves to Mach."}:{level:"warn",message:`Expo Updates URL resolves to ${p.url||"none"} instead of ${o?.url||"the Mach OTA URL"}.`}),r.push(p.channel===c?{level:"pass",message:`Expo update channel header resolves to ${c}.`}:{level:"warn",message:`Expo update channel header is ${p.channel||"not set"}; install the latest ${m.npmScope}/mach package and rebuild.`}),r.push(g?{level:"pass",message:"Expo Updates is enabled."}:{level:"fail",message:"Expo config has updates.enabled=false, so this app cannot receive OTA updates."}),r.push(h!=="NEVER"&&h!=="ON_ERROR_RECOVERY"?{level:"pass",message:`Expo checks for updates automatically (${h}).`}:{level:"fail",message:`Expo checkAutomatically is ${h}; use ON_LOAD to receive Mach updates when the app starts.`})}else r.push({level:"fail",message:`Could not resolve Expo config. Confirm ${ue} is present and run \`mach ota setup\` again.`});for(let{platform:g,runtimeVersion:h,delivery:y}of f)r.push(y?.runtimeVersion===h?{level:"pass",message:`${g} Expo runtime resolves to ${h}.`}:{level:"fail",message:`${g} Expo runtime resolves to ${y?.runtimeVersion||"none"} instead of ${h}. Run \`mach ota setup\`, then rebuild the app.`});if(n==="react-native"){let g=d,h=Li(process.cwd()).filter(b=>g.includes(b)),y=ho(process.cwd());if(h.includes("android")){let b=!!(y.androidManifest&&y.androidStrings)&&z.readFileSync(y.androidManifest,"utf-8").includes("expo.modules.updates.EXPO_UPDATE_URL")&&z.readFileSync(y.androidStrings,"utf-8").includes("expo_runtime_version");r.push(b?{level:"pass",message:"Android native Expo Updates configuration is synchronized."}:{level:"fail",message:"Android native Expo Updates configuration is missing. Run `mach ota setup --platform android`."})}if(h.includes("ios")){let b=!!y.iosExpoPlist&&z.readFileSync(y.iosExpoPlist,"utf-8").includes("EXUpdatesURL")&&z.readFileSync(y.iosExpoPlist,"utf-8").includes("EXUpdatesRuntimeVersion");r.push(b?{level:"pass",message:"iOS native Expo Updates configuration is synchronized."}:{level:"fail",message:"iOS native Expo Updates configuration is missing. Run `mach ota setup --platform ios`."})}}}else r.push({level:"fail",message:"mach-react-native is not available yet. Run `mach ota setup` to migrate this project to expo-updates."});for(let a of r){let l=a.level==="pass"?xe.green("PASS"):a.level==="warn"?xe.yellow("WARN"):xe.red("FAIL");Re.info(`${l} ${a.message}`)}let s=r.filter(a=>a.level==="fail").length;s>0&&(Tt(xe.red(`OTA verification failed with ${s} issue(s).`)),process.exit(1)),Tt(xe.green("OTA verification passed."))}async function $f(e){Et();let t=mn(),n=await $.get(`/ota/${t.projectId}/updates`),i=n.data.updates||[];if(e.json){Re.info(JSON.stringify(n.data,null,2));return}if(i.length===0){Tt("No OTA updates found.");return}for(let r of i){let o=r.stats?.total||{};Re.info(`${xe.bold(r.updateId)} ${xe.dim(`${r.platform} ${r.channelName} runtime ${r.runtimeVersion}`)} ${r.status||"active"}`),Re.info(xe.dim(`  downloads ios=${o.iosDownloaded||0} android=${o.androidDownloaded||0} applied ios=${o.iosApplied||0} android=${o.androidApplied||0}`))}Tt(`Found ${i.length} OTA update(s).`)}async function Ma(e,t){Et();let n=mn(),i=Ae(t.updateId);i||(Re.error(`Missing update id. Use \`${m.nameLower} ota ${e} --update-id <id>\`.`),process.exit(1));let r=await $.post(`/ota/${n.projectId}/updates/${encodeURIComponent(i)}/${e}`);t.json?Re.info(JSON.stringify(r.data,null,2)):Tt(xe.green(`\u2713 OTA update ${e==="rollback"?"rolled back":"promoted"}: ${i}`))}async function at(e,t={}){let n=e||t.action||"publish";if(n==="setup")return vf({...t,action:n});if(n==="publish")return _f({...t,action:n});if(n==="verify")return za({...t,action:n});if(n==="list")return $f({...t,action:n});if(n==="rollback")return Ma("rollback",{...t,action:n});if(n==="promote")return Ma("promote",{...t,action:n});let i=await of({message:"What do you want to do?",options:[{value:"setup",label:"Setup OTA"},{value:"publish",label:"Publish OTA update"},{value:"verify",label:"Verify OTA setup"},{value:"list",label:"List OTA updates"}]});return li(i)&&di(),at(i,t)}import{intro as Rf,outro as Ka,log as Nt}from"@clack/prompts";import Ve from"chalk";async function Wa(){Rf(Ve.blue(`${m.name} CLI - User Profile`));let e=be();if(!e){Nt.warn(Ve.yellow("You are not logged in.")),Nt.info(`Run \`${m.nameLower} login\` to authenticate.`),Ka();return}Nt.info(`${Ve.bold("Logged in as:")} ${Ve.green(e.email)}`);try{await $.get("/projects");let n=be().token.split(".");if(n.length===3){let i=JSON.parse(Buffer.from(n[1],"base64").toString());if(i.exp){let r=new Date(i.exp*1e3),o=new Date,s=r.getTime()-o.getTime();if(s>0){let a=Math.round(s/6e4),l=(a/60).toFixed(1);Nt.info(`${Ve.bold("Token status:")} Valid (Expires in ~${l}h / ${a}m)`)}else Nt.warn(`${Ve.bold("Token status:")} ${Ve.red("Expired")} (Auto-refresh failed)`)}}}catch{Nt.warn(`${Ve.bold("Token status:")} ${Ve.red("Unreachable")} (Session might be truly expired)${Qe}`)}Ka(Ve.blue("---"))}import{spawn as Pf}from"child_process";import{log as lt}from"@clack/prompts";import Oe from"chalk";import Cf from"fs";import Of from"net";async function Df(e){return new Promise(t=>{let n=Of.createServer();n.once("error",i=>{i.code==="EADDRINUSE"?t(!0):t(!1)}),n.once("listening",()=>{n.close(),t(!1)}),n.listen(e,"0.0.0.0")})}async function qa(e,t=20){let n=e;for(;n<e+t;){if(!await Df(n))return n;n++}throw new Error(`Could not find an available port after ${t} attempts starting from ${e}.`)}var Ja=async e=>{lt.info(Oe.blue(`Starting ${m.name} Dev Orchestrator...`));let t=ce(),n=e.buildProfile||"development",i=t?Ie(t,n):null,r={...process.env};if(t?.projectId)try{lt.info(Oe.dim(`Fetching managed secrets for profile: ${n}...`));let u=await $.get(`/projects/${t.projectId}/secrets/export?env=${n}`);u.data?.status==="success"&&u.data.secrets&&(Object.assign(r,u.data.secrets),lt.info(Oe.magenta(`\u2713 Injected secrets from ${m.name} Dashboard.`)))}catch{lt.warn("Could not fetch managed secrets. Running with local env only.")}t&&Object.assign(r,vt(t,m.envPrefix)),i&&(Object.assign(r,vt(i,`${m.envPrefix}PROFILE_`)),i.env&&Object.assign(r,i.env));let o=!1;try{let u=JSON.parse(Cf.readFileSync("package.json","utf-8"));o=!!(u.dependencies?.expo||u.devDependencies?.expo)}catch{lt.warn("Could not parse package.json. Defaulting to Bare React Native mode.")}let s=Number(e.port||i?.port||8081),a=await qa(s);a!==s&&lt.info(Oe.yellow(`Port ${s} is busy. ${m.name} is using ${a} instead.`));let l=process.platform==="win32"?"npx.cmd":"npx",d=[];if(o?(d=["expo","start","--port",String(a)],e.clear&&d.push("--clear"),e.tunnel&&d.push("--tunnel"),e.lan&&d.push("--lan"),e.localhost&&d.push("--localhost"),e.ios&&d.push("--ios"),e.android&&d.push("--android"),e.web&&d.push("--web")):(d=["react-native","start","--port",String(a)],e.clear&&d.push("--clear")),o){let u=[`${Oe.cyan("i")}  open iOS simulator`,`${Oe.cyan("a")}  open Android emulator/device`,`${Oe.cyan("w")}  open web`,`${Oe.cyan("r")}  reload app`];lt.info([Oe.bold("Launch controls"),...u.map(f=>`  ${f}`),"",Oe.dim("Direct launch: mach start --ios | --android | --web"),Oe.dim(`Metro URL: http://localhost:${a}`)].join(`
+`))}else lt.info(Oe.dim(`Metro URL: http://localhost:${a}`));let c=Pf(l,d,{stdio:"inherit",env:r});return new Promise((u,f)=>{c.on("exit",p=>{p===0?u():f(new Error(`Dev server exited with code ${p}`))}),c.on("error",p=>{f(p)})})};import{log as we}from"@clack/prompts";import Le from"chalk";var Ya=async e=>{let t=ce();t||(we.error(Le.red(`No ${m.configFileName} found in the current directory.`)),process.exit(1));let n=e.profile||"development",i=Ie(t,n);if(e.json){console.log(JSON.stringify({project:t,resolved:i},null,2));return}we.info(Le.bgBlue.white(` Resolved ${m.name} Config [${n}] `)),we.info(Le.dim("----------------------------------------")),we.info(`${Le.blue("Project ID:")} ${t.projectId}`),we.info(`${Le.blue("Name:")} ${t.name}`),we.info(`${Le.blue("Scheme:")} ${t.scheme}`),i?(we.info(Le.dim(`
+Profile Settings:`)),we.info(`${Le.cyan("Distribution:")} ${i.distribution||"none"}`),we.info(`${Le.cyan("Development Client:")} ${i.developmentClient||"false"}`),i.env&&Object.keys(i.env).length>0&&(we.info(Le.dim(`
+Environment Variables:`)),Object.entries(i.env).forEach(([r,o])=>{we.info(`  ${r}=${o}`)}))):we.warn(`Profile '${n}' not found.`),we.info(Le.dim("----------------------------------------"))};import{cancel as Zf,confirm as ml,isCancel as bn,log as Si,note as Qf,outro as Ei,select as em,text as gl}from"@clack/prompts";import Ue from"chalk";import tm from"fs";import pl from"path";import At from"fs";import xt from"path";var Lt="./plugins/withMachDeepLinks",Gr="mach.deep-links.json",Za=["/*"],Vr=e=>{if(typeof e!="string")return;let t=e.trim();return t.length>0?t:void 0},pi=e=>{let t=new Set,n=[];for(let i of e){let r=Vr(i);!r||t.has(r)||(t.add(r),n.push(r))}return n},Me=(...e)=>{for(let t of e){let n=Vr(t);if(n)return n}},Xa=(e,t)=>e.length!==t.length?!1:e.every((n,i)=>n===t[i]);function Qa(e){if(typeof e!="string")return;let t=e.trim().toLowerCase();if(t==="ios"||t==="android"||t==="all")return t}function gn(e){let t=e.includes("://")?e:`https://${e}`,n=new URL(t),i=n.pathname==="/"?"":n.pathname.replace(/\/+$/,"");return`${n.protocol}//${n.host}${i}`}function ui(e){return new URL(gn(e)).hostname}function fi(e){return e.trim().toLowerCase().replace(/[^a-z0-9+.-]/g,"-").replace(/^-+|-+$/g,"")||"app"}function el(e=process.cwd()){let t=xt.join(e,"package.json"),n=["app.json","app.config.json","app.config.js","app.config.ts"].some(r=>At.existsSync(xt.join(e,r))),i=!1;if(At.existsSync(t))try{let r=JSON.parse(At.readFileSync(t,"utf-8"));i=!!(r.dependencies?.expo||r.devDependencies?.expo)}catch{i=!1}return n&&i?"expo":At.existsSync(xt.join(e,"ios"))||At.existsSync(xt.join(e,"android"))?"react-native":wt}function tl(e,t,n){if(t)return t;let i=!!(e.ios?.bundleIdentifier||n?.ios?.bundleIdentifier||e.deepLinks?.ios?.bundleIdentifier),r=!!(e.android?.package||n?.android?.package||n?.android?.applicationId||e.deepLinks?.android?.package);return i&&!r?"ios":r&&!i?"android":"all"}function mi(e=process.cwd(),t){let n=t?.deepLinks?.web?.outputDir;return n||(At.existsSync(xt.join(e,"public"))?"public":"deep-links")}function nl(e,t){let n=e.deepLinks,i=gn(t.baseUrl||n?.baseUrl||(t.domain?`https://${t.domain}`:"")),r=Vr(t.domain)||(t.baseUrl?ui(i):n?.domain)||ui(i),o=t.profile||n?.profile||"production",s=Ie(e,o)||{},a=s.ios||{},l=s.android||{},d=e.submit?.[o]?.ios||{},c=e.submit?.[o]?.android||{},u=fi(t.scheme||n?.scheme||a.scheme||e.scheme||e.slug||e.name||"app"),f=mt(e,o),p=pi([...t.androidFingerprint||[],...n?.android?.sha256CertFingerprints||[],...l.sha256CertFingerprints||[],...e.android?.sha256CertFingerprints||[]]);return{baseUrl:i,domain:r,scheme:u,profile:o!=="production"?o:void 0,paths:n?.paths?.length?n.paths:["/*"],ios:{appStoreId:Me(t.appStoreId,n?.ios?.appStoreId,a.ascAppId,d.ascAppId,e.ios?.ascAppId),appleTeamId:Me(t.appleTeamId,n?.ios?.appleTeamId,a.appleTeamId,a.developerTeamId,d.appleTeamId,d.developerTeamId,e.ios?.appleTeamId,e.ios?.developerTeamId,f.teamId),bundleIdentifier:Me(t.iosBundleId,n?.ios?.bundleIdentifier,a.bundleIdentifier,a.bundleId,e.ios?.bundleIdentifier,e.ios?.bundleId,e.expo?.ios?.bundleIdentifier),webCredentials:!!n?.ios?.webCredentials,activityContinuation:!!n?.ios?.activityContinuation},android:{package:Me(t.androidPackage,n?.android?.package,l.package,l.applicationId,e.android?.package,e.expo?.android?.package,c.packageName,c.package),sha256CertFingerprints:p},web:{smartAppBanner:n?.web?.smartAppBanner??!0,outputDir:t.output||n?.web?.outputDir||mi(process.cwd(),e)}}}function gi(e,t={}){let n=e.deepLinks,i=t.profile||n?.profile||"production",r=t.expoHints||null,o=Me(n?.baseUrl,r?.domain?`https://${r.domain}`:void 0);if(!o)return null;let s=gn(o),a=Ie(e,i)||{},l=a.ios||{},d=a.android||{},c=e.submit?.[i]?.ios||{},u=e.submit?.[i]?.android||{},f=mt(e,i),p=Me(n?.domain,r?.domain)||ui(s),g=fi(Me(n?.scheme,l.scheme,e.scheme,r?.scheme,e.slug,e.name,"app")||"app"),h=n?.paths?.length?n.paths:[...Za];return{baseUrl:s,domain:p,scheme:g,profile:i!=="production"?i:void 0,paths:h,ios:{appStoreId:Me(n?.ios?.appStoreId,l.ascAppId,c.ascAppId,e.ios?.ascAppId),appleTeamId:Me(n?.ios?.appleTeamId,l.appleTeamId,l.developerTeamId,c.appleTeamId,c.developerTeamId,e.ios?.appleTeamId,e.ios?.developerTeamId,f.teamId),bundleIdentifier:Me(n?.ios?.bundleIdentifier,l.bundleIdentifier,l.bundleId,e.ios?.bundleIdentifier,e.ios?.bundleId,e.expo?.ios?.bundleIdentifier,r?.iosBundleIdentifier),webCredentials:!!n?.ios?.webCredentials,activityContinuation:!!n?.ios?.activityContinuation},android:{package:Me(n?.android?.package,d.package,d.applicationId,e.android?.package,e.expo?.android?.package,u.packageName,u.package,r?.androidPackage),sha256CertFingerprints:pi([...n?.android?.sha256CertFingerprints||[],...d.sha256CertFingerprints||[],...e.android?.sha256CertFingerprints||[]])},web:{smartAppBanner:n?.web?.smartAppBanner??!0,outputDir:n?.web?.outputDir||mi(t.cwd||process.cwd(),e)}}}function hi(e,t,n="production",i=process.cwd()){return t?.domain?gi({...e,deepLinks:{baseUrl:`https://${t.domain}`,domain:t.domain,scheme:t.scheme}},{profile:n,cwd:i,expoHints:t}):null}function Tf(e,t,n=t.profile||"production"){let i=gi({...e,deepLinks:{baseUrl:t.baseUrl}},{profile:n}),r={baseUrl:t.baseUrl};n!=="production"&&(r.profile=n),t.domain&&t.domain!==ui(t.baseUrl)&&(r.domain=t.domain),t.scheme&&t.scheme!==i?.scheme&&(r.scheme=t.scheme),t.paths?.length&&!Xa(t.paths,Za)&&(r.paths=t.paths);let o={};t.ios?.bundleIdentifier&&t.ios.bundleIdentifier!==i?.ios?.bundleIdentifier&&(o.bundleIdentifier=t.ios.bundleIdentifier),t.ios?.appleTeamId&&t.ios.appleTeamId!==i?.ios?.appleTeamId&&(o.appleTeamId=t.ios.appleTeamId),t.ios?.appStoreId&&t.ios.appStoreId!==i?.ios?.appStoreId&&(o.appStoreId=t.ios.appStoreId),t.ios?.webCredentials&&(o.webCredentials=!0),t.ios?.activityContinuation&&(o.activityContinuation=!0),Object.keys(o).length>0&&(r.ios=o);let s={};t.android?.package&&t.android.package!==i?.android?.package&&(s.package=t.android.package);let a=t.android?.sha256CertFingerprints||[],l=i?.android?.sha256CertFingerprints||[];a.length>0&&!Xa(a,l)&&(s.sha256CertFingerprints=a),Object.keys(s).length>0&&(r.android=s);let d={outputDir:t.web?.outputDir||"deep-links"};return t.web?.smartAppBanner===!1&&(d.smartAppBanner=!1),r.web=d,r}function il(e,t,n,i=n.profile||"production"){let r={...e,framework:t,scheme:e.scheme||n.scheme};return{...r,deepLinks:Tf(r,n,i)}}function rl(e,t=process.cwd()){let n=xt.join(t,"mach.config.json");return At.writeFileSync(n,`${JSON.stringify(e,null,2)}
+`),n}import pe from"fs";import ye from"path";import{spawnSync as ol}from"child_process";var hn="@radhya/mach/expo-plugin",kf=`const fs = require('fs')
 const path = require('path')
 
 const unique = values => Array.from(new Set(values.filter(Boolean)))
@@ -1831,24 +1747,24 @@ module.exports = function withMachDeepLinks(config) {
   config.android.intentFilters = intentFilters
   return config
 }
-`,oi=e=>{if(typeof e=="string"){if(e===ri)return ri;if(e===In||e===In.replace(/^\.\//,""))return In}},Fo=e=>Array.isArray(e)?Fo(e[0]):oi(e),_c=e=>!!Fo(e),gh=(e,t)=>{let n=oi(t)||t;return Fo(e)===n},hh=(e,t)=>Array.isArray(e)?[t,...e.slice(1)]:t,yh=(e,t)=>{let n=Array.isArray(e.plugins)?e.plugins:[];if(n.findIndex(o=>gh(o,t))>=0)return e.plugins=n,"already";let r=n.findIndex(_c);return r>=0?(n[r]=hh(n[r],t),e.plugins=n,"updated"):(n.push(t),e.plugins=n,"inserted")},Uo=/(['"`])((?:\.\/)?plugins\/withMachDeepLinks|@radhya\/mach\/expo-plugin)\1/g;function or(e){let t=Te.join(e,"package.json");if(!Ce.existsSync(t))return!1;try{let n=JSON.parse(Ce.readFileSync(t,"utf-8"));return!!(n.dependencies?.["@radhya/mach"]||n.devDependencies?.["@radhya/mach"])}catch{return!1}}function Sh(e){return Ce.existsSync(Te.join(e,"pnpm-lock.yaml"))?{command:"pnpm",args:["add","-D","@radhya/mach@latest"],label:"pnpm add -D @radhya/mach@latest"}:Ce.existsSync(Te.join(e,"yarn.lock"))?{command:"yarn",args:["add","-D","@radhya/mach@latest"],label:"yarn add -D @radhya/mach@latest"}:Ce.existsSync(Te.join(e,"bun.lockb"))||Ce.existsSync(Te.join(e,"bun.lock"))?{command:"bun",args:["add","-d","@radhya/mach@latest"],label:"bun add -d @radhya/mach@latest"}:{command:"npm",args:["install","--save-dev","@radhya/mach@latest"],label:"npm install --save-dev @radhya/mach@latest"}}function bh(e){let t=Sh(e),n=$c(t.command,t.args,{cwd:e,stdio:"inherit",env:{...process.env}});return n.error?{ok:!1,label:t.label,error:n.error.message}:n.status!==0?{ok:!1,label:t.label,error:`${t.command} exited with code ${n.status}`}:{ok:or(e),label:t.label}}function Ah(e,t){let n=Ce.readFileSync(e,"utf-8"),i=Array.from(n.matchAll(Uo));if(i.length>0){let p=oi(t)||t,f=i.some(S=>oi(S[2])===p),g=i.some(S=>oi(S[2])!==p);if(f&&!g)return"already";let h=n.replace(Uo,(S,b)=>`${b}${t}${b}`);return Ce.writeFileSync(e,h),"updated"}let r=/(^[ \t]*)plugins\s*:\s*\[([\s\S]*?)\]/m.exec(n);if(!r||r.index===void 0)return"unsupported";let o=n.includes(`\r
+`,yn=e=>{if(typeof e=="string"){if(e===hn)return hn;if(e===Lt||e===Lt.replace(/^\.\//,""))return Lt}},Kr=e=>Array.isArray(e)?Kr(e[0]):yn(e),sl=e=>!!Kr(e),Nf=(e,t)=>{let n=yn(t)||t;return Kr(e)===n},xf=(e,t)=>Array.isArray(e)?[t,...e.slice(1)]:t,Lf=(e,t)=>{let n=Array.isArray(e.plugins)?e.plugins:[];if(n.findIndex(o=>Nf(o,t))>=0)return e.plugins=n,"already";let r=n.findIndex(sl);return r>=0?(n[r]=xf(n[r],t),e.plugins=n,"updated"):(n.push(t),e.plugins=n,"inserted")},zr=/(['"`])((?:\.\/)?plugins\/withMachDeepLinks|@radhya\/mach\/expo-plugin)\1/g;function yi(e){let t=ye.join(e,"package.json");if(!pe.existsSync(t))return!1;try{let n=JSON.parse(pe.readFileSync(t,"utf-8"));return!!(n.dependencies?.["@radhya/mach"]||n.devDependencies?.["@radhya/mach"])}catch{return!1}}function Mf(e){return pe.existsSync(ye.join(e,"pnpm-lock.yaml"))?{command:"pnpm",args:["add","-D","@radhya/mach@latest"],label:"pnpm add -D @radhya/mach@latest"}:pe.existsSync(ye.join(e,"yarn.lock"))?{command:"yarn",args:["add","-D","@radhya/mach@latest"],label:"yarn add -D @radhya/mach@latest"}:pe.existsSync(ye.join(e,"bun.lockb"))||pe.existsSync(ye.join(e,"bun.lock"))?{command:"bun",args:["add","-d","@radhya/mach@latest"],label:"bun add -d @radhya/mach@latest"}:{command:"npm",args:["install","--save-dev","@radhya/mach@latest"],label:"npm install --save-dev @radhya/mach@latest"}}function Uf(e){let t=Mf(e),n=ol(t.command,t.args,{cwd:e,stdio:"inherit",env:{...process.env}});return n.error?{ok:!1,label:t.label,error:n.error.message}:n.status!==0?{ok:!1,label:t.label,error:`${t.command} exited with code ${n.status}`}:{ok:yi(e),label:t.label}}function Ff(e,t){let n=pe.readFileSync(e,"utf-8"),i=Array.from(n.matchAll(zr));if(i.length>0){let f=yn(t)||t,p=i.some(y=>yn(y[2])===f),g=i.some(y=>yn(y[2])!==f);if(p&&!g)return"already";let h=n.replace(zr,(y,b)=>`${b}${t}${b}`);return pe.writeFileSync(e,h),"updated"}let r=/(^[ \t]*)plugins\s*:\s*\[([\s\S]*?)\]/m.exec(n);if(!r||r.index===void 0)return"unsupported";let o=n.includes(`\r
 `)?`\r
 `:`
-`,s=r[1]||"",l=r[2]||"",c=l.match(/\r?\n([ \t]+)\S/)?.[1]||`${s}    `,u=l.trim().length===0?`${o}${c}'${t}',${o}${s}`:l.includes(`
-`)||l.includes("\r")?`${o}${c}'${t}',${l}`:`${o}${c}'${t}',${o}${c}${l.trim()}${o}${s}`,d=`${r[0].slice(0,r[0].indexOf("[")+1)}${u}]`;return Ce.writeFileSync(e,`${n.slice(0,r.index)}${d}${n.slice(r.index+r[0].length)}`),"inserted"}function Pc(e,t,n={}){let i=[],r=[],o=[],s=or(e);if(!s&&n.installPackage){o.push("Installing @radhya/mach locally so Expo can use @radhya/mach/expo-plugin.");let d=bh(e);d.ok?(s=!0,o.push(`Installed @radhya/mach with ${d.label}.`)):o.push(`Could not install @radhya/mach with ${d.label}: ${d.error||"unknown error"}. Falling back to local plugin.`)}let l=s?ri:In;if(s)o.push(`Using packaged Expo plugin ${ri}.`);else{let d=Te.join(e,"plugins/withMachDeepLinks.js");Ce.mkdirSync(Te.dirname(d),{recursive:!0}),Ce.writeFileSync(d,mh),i.push(Te.relative(e,d)),o.push(`Using local Expo plugin fallback ${In}. Install @radhya/mach in this app to use ${ri}.`)}let a=["app.config.ts","app.config.js"].find(d=>Ce.existsSync(Te.join(e,d)));if(a){let d=Te.join(e,a),p=Ah(d,l);return p==="inserted"?i.push(a):p==="updated"?(i.push(a),o.push(`${a} updated to use ${l}.`)):p==="already"?o.push(`${a} already includes the Mach Expo plugin.`):o.push(`Add "${l}" to the plugins array in ${a}. Mach could not safely auto-edit this dynamic config.`),{written:i,skipped:r,notes:o}}let c=["app.config.json","app.json"].find(d=>Ce.existsSync(Te.join(e,d)));if(!c)return r.push("Expo config plugin insertion: no app.json or app.config.json found."),{written:i,skipped:r,notes:o};let u=Te.join(e,c);try{let d=JSON.parse(Ce.readFileSync(u,"utf-8")),p=d.expo&&typeof d.expo=="object"?d.expo:d,f=yh(p,l);Ce.writeFileSync(u,`${JSON.stringify(d,null,2)}
-`),i.push(c),f==="updated"&&o.push(`${c} updated to use ${l}.`)}catch(d){r.push(`Expo config plugin insertion failed: ${d.message}`)}return{written:i,skipped:r,notes:o}}function Rc(e){let t=["app.config.ts","app.config.js"].find(i=>Ce.existsSync(Te.join(e,i)));if(t){let i=Ce.readFileSync(Te.join(e,t),"utf-8");return Uo.test(i)?"manual":"missing"}let n=["app.config.json","app.json"].find(i=>Ce.existsSync(Te.join(e,i)));if(!n)return"missing";try{let i=JSON.parse(Ce.readFileSync(Te.join(e,n),"utf-8")),r=i.expo&&typeof i.expo=="object"?i.expo:i;return Array.isArray(r.plugins)&&r.plugins.some(_c)?"wired":"missing"}catch{return"missing"}}function jo(e){let t=$c("npx",["--no-install","expo","config","--type","public","--json"],{cwd:e,encoding:"utf-8",timeout:8e3,env:{...process.env,CI:"1",EXPO_NO_TELEMETRY:"1"}});if(t.error||t.status!==0||!t.stdout)return null;let n=t.stdout.trim(),i=n.indexOf("{");if(i<0)return null;try{return JSON.parse(n.slice(i))}catch{return null}}function Eh(e){if(!e||typeof e!="object")return null;let n=(Array.isArray(e.ios?.associatedDomains)?e.ios.associatedDomains:[]).map(s=>typeof s=="string"?s.match(/^applinks:(.+)$/)?.[1]:void 0).find(Boolean),r=(Array.isArray(e.android?.intentFilters)?e.android.intentFilters:[]).flatMap(s=>Array.isArray(s?.data)?s.data:[]).find(s=>s?.scheme==="https"&&typeof s.host=="string")?.host,o=n||r;return!o&&!e.scheme&&!e.ios?.bundleIdentifier&&!e.android?.package?null:{domain:o,scheme:typeof e.scheme=="string"?e.scheme:void 0,iosBundleIdentifier:typeof e.ios?.bundleIdentifier=="string"?e.ios.bundleIdentifier:void 0,androidPackage:typeof e.android?.package=="string"?e.android.package:void 0}}function sr(e){return Eh(jo(e))}import St from"fs";import Je from"path";var wh=e=>{St.mkdirSync(Je.dirname(e),{recursive:!0})},Oc=(e,t)=>{wh(e),St.writeFileSync(e,`${JSON.stringify(t,null,2)}
-`)};var Ih=e=>{let t=e.ios?.appleTeamId,n=e.ios?.bundleIdentifier;return!t||!n?null:`${t}.${n}`};function Bo(e){let t=Ih(e);if(!t)return null;let n=e.paths?.length?e.paths:["/*"],i=n.map(s=>s==="/*"?"*":s),r=n.map(s=>({"/":s,comment:s==="/*"?"Matches all URLs":`Matches ${s}`})),o={applinks:{apps:[],details:[{appIDs:[t],components:r,appID:t,paths:i}]}};return e.ios?.webCredentials&&(o.webcredentials={apps:[t]}),e.ios?.activityContinuation&&(o.activitycontinuation={apps:[t]}),o}function vh(e){let t=e.android?.package;return t?[{relation:["delegate_permission/common.handle_all_urls"],target:{namespace:"android_app",package_name:t,sha256_cert_fingerprints:e.android?.sha256CertFingerprints||[]}}]:null}function $h(e,t){let n=t.ios?.appStoreId;if(!n||!St.existsSync(e))return!1;let i=`<meta name="apple-itunes-app" content="app-id=${n}, app-argument=${t.baseUrl}" />`,r=St.readFileSync(e,"utf-8");if(/name=["']apple-itunes-app["']/i.test(r)){let o=r.replace(/<meta[^>]+name=["']apple-itunes-app["'][^>]*>/i,i);return St.writeFileSync(e,o),!0}return/<head[^>]*>/i.test(r)?(St.writeFileSync(e,r.replace(/<head([^>]*)>/i,`<head$1>
-    ${i}`)),!0):!1}function Cc(e,t){let n=[],i=[],r=[],o=t.web?.outputDir||"deep-links",s=Je.join(e,o),l=Bo(t);if(l){let d=er([Je.join(s,".well-known/apple-app-site-association"),Je.join(s,".well-known/apple-app-site-association.json"),Je.join(s,"apple-app-site-association"),Je.join(s,"apple-app-site-association.json")]);for(let p of d)Oc(p,l),n.push(Je.relative(e,p))}else i.push("Apple AASA files: missing ios.appleTeamId or ios.bundleIdentifier");let a=vh(t);if(a){let d=Je.join(s,".well-known/assetlinks.json");Oc(d,a),n.push(Je.relative(e,d)),t.android?.sha256CertFingerprints?.length||r.push("assetlinks.json was generated without SHA256 fingerprints. Add them before Android App Links can verify.")}else i.push("Android assetlinks.json: missing android.package");let c=Je.join(e,Lo);St.existsSync(c)&&(St.unlinkSync(c),r.push(`Removed legacy ${Lo}; mach.config.json is now the source of truth.`));let u=Je.join(s,"index.html");return t.web?.smartAppBanner&&$h(u,t)?n.push(Je.relative(e,u)):t.web?.smartAppBanner&&t.ios?.appStoreId?r.push(`Smart App Banner skipped because ${Je.relative(e,u)} was not found.`):t.web?.smartAppBanner&&r.push("Smart App Banner skipped because ios.appStoreId is not configured."),o!=="public"&&r.push(`Host ${o}/.well-known files at https://${t.domain}/.well-known/.`),{written:n,skipped:i,notes:r}}function Ho(e){if(!St.existsSync(e))return null;try{return JSON.parse(St.readFileSync(e,"utf-8"))}catch{return null}}import Ht from"fs";import Gt from"path";import{spawnSync as _h}from"child_process";var G=(e,t)=>({level:e,message:t}),Dc=(e,t)=>Gt.join(e,t.web?.outputDir||"deep-links");function Ph(e,t,n="fail"){let i=[],r=Dc(e,t),o=Gt.join(r,".well-known/apple-app-site-association");if(!Bo(t))return i.push(G("warn","Skipping AASA verification because ios.appleTeamId or ios.bundleIdentifier is missing.")),i;if(!Ht.existsSync(o))return i.push(G(n,`${Gt.relative(e,o)} is missing.`)),i;Ht.statSync(o).size>128*1024?i.push(G("fail","Apple AASA file is larger than 128 KB.")):i.push(G("pass","Apple AASA file is under 128 KB."));let a=Ho(o);if(!a)return i.push(G("fail","Apple AASA file is not valid JSON.")),i;let c=`${t.ios?.appleTeamId}.${t.ios?.bundleIdentifier}`,u=a.applinks?.details||[],d=Array.isArray(u)&&u.some(p=>p.appID===c||p.appIDs?.includes(c));return i.push(d?G("pass",`AASA contains ${c}.`):G("fail",`AASA does not contain ${c}.`)),i}function Rh(e,t,n="fail"){let i=[],r=Dc(e,t),o=Gt.join(r,".well-known/assetlinks.json");if(!t.android?.package)return i.push(G("warn","Skipping Android Asset Links verification because android.package is missing.")),i;if(!Ht.existsSync(o))return i.push(G(n,`${Gt.relative(e,o)} is missing.`)),i;let s=Ho(o);if(!s||!Array.isArray(s))return i.push(G("fail","assetlinks.json is not a valid JSON array.")),i;let l=s.find(c=>c?.target?.package_name===t.android?.package);i.push(l?G("pass",`assetlinks.json contains ${t.android.package}.`):G("fail",`assetlinks.json does not contain ${t.android.package}.`));let a=l?.target?.sha256_cert_fingerprints;return i.push(Array.isArray(a)&&a.length>0?G("pass","assetlinks.json has at least one SHA256 fingerprint."):G("warn","assetlinks.json has no SHA256 fingerprints.")),i}function Oh(e,t,n,i){if(t.framework!=="expo")return[];let r=[],o=jo(e),l=(Array.isArray(o?.ios?.associatedDomains)?o.ios.associatedDomains:[]).includes(`applinks:${n.domain}`);r.push(l?G("pass",`Expo iOS config contains applinks:${n.domain}.`):G(i?"warn":"fail",`Expo iOS config does not contain applinks:${n.domain}.`));let c=(Array.isArray(o?.android?.intentFilters)?o.android.intentFilters:[]).flatMap(d=>Array.isArray(d?.data)?d.data:[]).some(d=>d?.scheme==="https"&&d.host===n.domain);if(r.push(c?G("pass",`Expo Android config contains App Link host ${n.domain}.`):G(i?"warn":"fail",`Expo Android config does not contain App Link host ${n.domain}.`)),i)return r.push(G("warn","mach.config.json is missing deepLinks; values were inferred from Expo config. Run `mach deeplink setup` to persist Mach metadata and generate hosted files.")),r;let u=Rc(e);return u==="wired"?r.push(G("pass","Expo deep link plugin is wired into Expo config and derives values from mach.config.json.")):u==="manual"&&l&&c?r.push(G("pass","Expo resolved config contains the deep-link settings from the dynamic config.")):u==="manual"?r.push(G("warn","Expo deep link plugin exists, but dynamic or missing Expo config means manual plugin insertion must be confirmed.")):l&&c?r.push(G("warn","Expo plugin is not wired, but resolved Expo config already contains the deep-link settings.")):r.push(G("fail","Expo deep link plugin is missing or not wired into Expo config.")),r}function Ch(e,t,n){if(t.framework!=="react-native")return[];let i=[],r=Gt.join(e,"android/app/src/main/AndroidManifest.xml");if(Ht.existsSync(r)){let s=Ht.readFileSync(r,"utf-8");i.push(s.includes(`android:host="${n.domain}"`)?G("pass","AndroidManifest.xml contains the App Links host."):G("warn","AndroidManifest.xml does not contain the App Links host. Native patching is planned for a later phase."))}let o=Gt.join(e,"ios");if(Ht.existsSync(o)){let l=Ht.readdirSync(o,{recursive:!0}).filter(a=>typeof a=="string"&&a.endsWith(".entitlements")).some(a=>Ht.readFileSync(Gt.join(o,a),"utf-8").includes(`applinks:${n.domain}`));i.push(l?G("pass","iOS entitlements contain the associated domain."):G("warn","iOS entitlements do not contain the associated domain. Native patching is planned for a later phase."))}return i}async function Go(e,t){let n=[];try{let i=await fetch(e,{redirect:"manual"});if(i.status>=300&&i.status<400&&!t)return n.push(G("fail",`${e} redirects. Apple AASA endpoints must not redirect.`)),n;n.push(i.status===200?G("pass",`${e} returned HTTP 200.`):G("fail",`${e} returned HTTP ${i.status}.`));let r=i.headers.get("content-type")||"";!r.includes("application/json")&&!r.includes("text/json")&&n.push(G("warn",`${e} content-type is "${r||"missing"}"; application/json is recommended.`)),JSON.parse(await i.text()),n.push(G("pass",`${e} contains valid JSON.`))}catch(i){n.push(G("fail",`${e} check failed: ${i.message}`))}return n}async function Dh(e){let t=e.domain;return(await Promise.all([Go(`https://${t}/.well-known/apple-app-site-association`,!1),Go(`https://${t}/apple-app-site-association`,!1),Go(`https://${t}/.well-known/assetlinks.json`,!0)])).flat()}function kh(e){let t=e.android?.package;if(!t)return[G("warn","Cannot print Android device verification commands because android.package is missing.")];let i=_h("adb",["version"],{encoding:"utf-8"}).status===0?"Run":"Install Android platform-tools, then run";return[G("info",`${i}: adb shell pm set-app-links --package ${t} 0 all`),G("info",`${i}: adb shell pm verify-app-links --re-verify ${t}`),G("info",`${i}: adb shell pm get-app-links ${t}`)]}async function Vo(e,t,n){let i=n.profile||t.deepLinks?.profile||"production",r=t.framework==="expo"?sr(e):null,o=t.framework==="expo"?rr(t,r,i,e):null,s=!t.deepLinks&&!!o,l=t.deepLinks?ir(t,{profile:i,cwd:e,expoHints:r}):o,a=[];if(!l)return[G("fail","mach.config.json is missing deepLinks and Mach could not infer existing deep-link settings. Run `mach deeplink setup`.")];a.push(l.baseUrl?G("pass","deepLinks.baseUrl is configured."):G("fail","deepLinks.baseUrl is missing.")),a.push(l.domain?G("pass","deepLinks.domain is configured."):G("fail","deepLinks.domain is missing.")),a.push(l.scheme?G("pass","deepLinks.scheme is configured."):G("fail","deepLinks.scheme is missing."));let c=s?"warn":"fail";return a.push(...Ph(e,l,c)),a.push(...Rh(e,l,c)),a.push(...Oh(e,t,l,s)),a.push(...Ch(e,t,l)),n.live&&a.push(...await Dh(l)),n.androidDevice&&a.push(...kh(l)),a}var ai=()=>process.stdin.isTTY&&process.stdout.isTTY,xc=`${m.npmScope}/mach`,li=()=>{xh("Operation cancelled."),process.exit(0)},Wo=e=>{if(typeof e!="string")return;let t=e.trim();return t.length>0?t:void 0},Pt=(...e)=>{for(let t of e){let n=Wo(t);if(n)return n}},nn=async(e,t,n,i,r)=>{if(t)return t;if(r||!ai()){if(i)throw new Error(`${e.replace(/:$/,"")} is required. Pass it as an option or run interactively.`);return}let o=await Tc({message:e,initialValue:t||"",placeholder:n,validate(s){if(i&&s.trim().length===0)return"Required."}});return si(o)&&li(),Wo(o)};async function Mh(e,t,n){let i=Ye(e.framework),r=Ye(t);if(r)return r;if(i)return i;let o=Ac();if(n||!ai())return o;let s=await Th({message:`Which framework should ${m.name} configure?`,initialValue:o,options:[{value:"expo",label:"Expo"},{value:"react-native",label:"React Native"},{value:"flutter",label:"Flutter (not supported yet)"}]});return si(s)&&li(),s}var ar=e=>e==="ios"||e==="all",Ko=e=>e==="android"||e==="all";async function Uh(e,t,n){if(t!=="expo"||or(e)||n.installPlugin===!1)return!1;if(n.installPlugin===!0||n.yes)return!0;if(!ai())return!1;let i=await Nc({message:`Install ${xc} locally so Expo can use ${xc}/expo-plugin?`,initialValue:!0});return si(i)&&li(),!!i}async function Fh(e,t){let n=!!t.yes,i=t.profile||e.deepLinks?.profile||"production",r=He(e,i)||{},o=r.ios||{},s=r.android||{},l=e.submit?.[i]?.ios||{},a=e.submit?.[i]?.android||{},c=zt(e,i),u=await Mh(e,t.framework,n);if(u==="flutter")throw new Error("Flutter deep-link automation is planned but not supported yet.");let d=Ec(e,bc(t.platform),r),p=e.deepLinks,g=u==="expo"&&(!Pt(t.baseUrl,p?.baseUrl,t.domain?`https://${t.domain}`:void 0)||!Pt(t.scheme,p?.scheme,o.scheme,e.scheme,e.slug,e.name)||ar(d)&&!Pt(t.iosBundleId,p?.ios?.bundleIdentifier,o.bundleIdentifier,o.bundleId,e.ios?.bundleIdentifier)||Ko(d)&&!Pt(t.androidPackage,p?.android?.package,s.package,s.applicationId,e.android?.package,a.packageName,a.package))?rr(e,sr(process.cwd()),i,process.cwd()):null,h=t.output||p?.web?.outputDir||nr(process.cwd(),e),S=await nn("Deep link base URL:",t.baseUrl||p?.baseUrl||(t.domain?`https://${t.domain}`:void 0)||g?.baseUrl,"https://app.example.com",!0,n),b=ii(S),y=t.baseUrl?new URL(b).hostname:void 0,P=await nn("Associated domain:",t.domain||y||p?.domain||g?.domain||new URL(b).hostname,"app.example.com",!0,n),v=tr(await nn("URI scheme:",Pt(t.scheme,p?.scheme,o.scheme,e.scheme,g?.scheme,e.slug,e.name,"app"),"myapp",!0,n)||"app"),F=ar(d)?await nn("iOS bundle identifier:",Pt(t.iosBundleId,p?.ios?.bundleIdentifier,o.bundleIdentifier,o.bundleId,e.ios?.bundleIdentifier,g?.ios?.bundleIdentifier),"com.example.app",!0,n):p?.ios?.bundleIdentifier||e.ios?.bundleIdentifier,H=ar(d)?await nn("Apple Team ID:",Pt(t.appleTeamId,p?.ios?.appleTeamId,o.appleTeamId,o.developerTeamId,l.appleTeamId,l.developerTeamId,e.ios?.appleTeamId,e.ios?.developerTeamId,c.teamId),"ABCDE12345",!0,n):p?.ios?.appleTeamId||e.ios?.appleTeamId,q=ar(d)?await nn("App Store ID (optional, for Smart App Banner):",Pt(t.appStoreId,p?.ios?.appStoreId,o.ascAppId,l.ascAppId,e.ios?.ascAppId),"1234567890",!1,n):p?.ios?.appStoreId,I=Ko(d)?await nn("Android package name:",Pt(t.androidPackage,p?.android?.package,s.package,s.applicationId,e.android?.package,a.packageName,a.package,g?.android?.package),"com.example.app",!0,n):p?.android?.package||e.android?.package,_=p?.android?.sha256CertFingerprints||[],M=t.androidFingerprint||[],x=e.android?.sha256CertFingerprints||[],E=s.sha256CertFingerprints||[],A=[...M,..._,...E,...x].filter(Boolean);if(Ko(d)&&A.length===0&&!n&&ai()){let U=await Tc({message:"Android SHA256 fingerprint (optional now, required for verified App Links):",placeholder:"AA:BB:CC:..."});si(U)&&li(),Wo(U)&&A.push(U)}let N=wc(e,{...t,baseUrl:b,domain:P,scheme:v,output:h,appleTeamId:H,appStoreId:q,androidFingerprint:A});return N.ios={...N.ios||{},bundleIdentifier:F,appleTeamId:H,appStoreId:q},N.android={...N.android||{},package:I,sha256CertFingerprints:Array.from(new Set(A))},{framework:u,platform:d,deepLinks:N}}var zo=(e,t)=>{t.length!==0&&Nh(t.map(n=>`- ${n}`).join(`
-`),e)},Lc=e=>e.filter(t=>t.level==="fail").length;function Mc(e){for(let t of e){let n=t.level==="pass"?ut.green("PASS"):t.level==="warn"?ut.yellow("WARN"):t.level==="info"?ut.cyan("INFO"):ut.red("FAIL");lr.info(`${n} ${t.message}`)}}async function Uc(e){try{let t=process.cwd(),n=kc.join(t,m.configFileName),i=we()||{};if(!Lh.existsSync(n)){let b=e.yes||!ai()?!0:await Nc({message:`${m.configFileName} was not found. Create one with deep link settings?`,initialValue:!0});if(si(b)&&li(),!b)return}let{framework:r,deepLinks:o}=await Fh(i,e),s=e.profile||i.deepLinks?.profile||"production",l=Ic(i,r,o,s),a=vc(l,t),c=Cc(t,o),u=await Uh(t,r,e),d=r==="expo"?Pc(t,o,{installPackage:u}):{written:[],skipped:[],notes:r==="react-native"?["React Native native patching is planned for a later phase. Hosted files were generated now."]:[]},p=[kc.relative(t,a),...c.written,...d.written],f=[...c.skipped,...d.skipped],g=[...c.notes,...d.notes];zo("Written",p),zo("Skipped",f),zo("Notes",g);let h=await Vo(t,l,{});Mc(h);let S=Lc(h);if(S>0){cr(ut.yellow(`Deep link setup finished with ${S} verification issue(s).`));return}cr(ut.green("Deep link setup complete."))}catch(t){lr.error(ut.red(t.message||"Deep link setup failed.")),process.exit(1)}}async function Fc(e){try{let t=we();t||(lr.error(ut.red(`No ${m.configFileName} found in the current directory.`)),process.exit(1));let n=await Vo(process.cwd(),t,e);Mc(n);let i=Lc(n);i>0&&(cr(ut.red(`Deep link verification failed with ${i} issue(s).`)),process.exit(1)),cr(ut.green("Deep link verification passed."))}catch(t){lr.error(ut.red(t.message||"Deep link verification failed.")),process.exit(1)}}import{log as Rt,spinner as jc}from"@clack/prompts";import Vt from"chalk";var jh=e=>{let t=String(e||"").trim().toLowerCase();if(t==="ios"||t==="android")return t;throw new Error("Pass --platform ios or --platform android.")},Bh=e=>{let t=Number(e);if(!Number.isFinite(t))throw new Error("Counter value must be a non-negative integer.");let n=Math.floor(t);if(n<0)throw new Error("Counter value must be a non-negative integer.");return n},Hh=(e,t,n)=>{let i=String(n.scope||"").trim();if(i)return i;let r=n.profile||"production",o=e==="android"?n.package||n.androidPackage:n.bundleId||n.iosBundleIdentifier;if(o)return String(o).trim();let s=e==="android"?an(t,r):Wt(t,r);if(s)return s;throw new Error(e==="android"?`Could not resolve Android package. Set android.package in ${m.configFileName}, or pass --package/--scope.`:`Could not resolve iOS bundle identifier. Set ios.bundleIdentifier in ${m.configFileName}, or pass --bundle-id/--scope.`)},Gh=()=>{let e=we();if(!e)throw new Error(`No ${m.configFileName} found in the current directory. Run \`${m.nameLower} init\` or \`${m.nameLower} link\` first.`);if(!e.projectId)throw new Error(`${m.configFileName} is missing projectId.`);return e},Jo=e=>{Rt.info(Vt.bgBlue.white(" Native Version Counter ")),Rt.info(`${Vt.blue("Platform:")} ${e.platform}`),Rt.info(`${Vt.blue("Scope:")} ${e.scope}`),Rt.info(`${Vt.blue("Current DB value:")} ${e.current}`),Rt.info(`${Vt.blue("Next build will use:")} ${e.next}`),e.seeded||Rt.warn(Vt.yellow("This counter has not been seeded yet. Existing store apps should run `mach version seed` once before auto-version builds."))};async function qo(e,t={}){if(!Ue()){Rt.error(`You are not logged in. Run \`${m.nameLower} login\` first.`);return}try{let i=Gh(),r=jh(t.platform),o=Hh(r,i,t),s=String(i.projectId);if(e==="show"){let u=jc();t.json||u.start("Fetching native version counter...");let{data:d}=await O.get(`/projects/${s}/version-counters`,{params:{platform:r,scope:o}});if(d.status!=="success")throw new Error(d.message||"Failed to fetch version counter.");t.json?console.log(JSON.stringify(d.counter,null,2)):(u.stop("Fetched native version counter."),Jo(d.counter));return}let l=Bh(t.value),a=jc();t.json||a.start("Seeding native version counter...");let{data:c}=await O.post(`/projects/${s}/version-counters/seed`,{platform:r,scope:o,value:l,force:!!t.force});if(c.status!=="success")throw new Error(c.message||"Failed to seed version counter.");t.json?console.log(JSON.stringify(c.counter,null,2)):(a.stop(`Seeded ${r} counter for ${o}.`),Jo(c.counter))}catch(i){let r=i?.response?.data?.message||i?.message||"Version command failed.";if(i?.response?.data?.counter&&!t.json){Rt.error(Vt.red(r)),Jo(i.response.data.counter);return}t.json?console.log(JSON.stringify({status:"error",message:r},null,2)):Rt.error(Vt.red(r))}}import{log as tt,spinner as ui,text as Bc,select as Hc,confirm as Vh,isCancel as ci,cancel as di,outro as pi,note as Kh}from"@clack/prompts";import se from"chalk";import{execSync as zh}from"child_process";async function Wh(){try{let e=zh("xcrun devicectl list devices --json-output -",{stdio:["pipe","pipe","pipe"]}).toString();return(JSON.parse(e).result?.devices||[]).filter(i=>i.connectionProperties?.transportType==="wired"||i.connectionProperties?.transportType==="localNetwork").map(i=>({udid:i.identifier,name:i.deviceProperties?.name||"Unknown Device",model:i.hardwareProperties?.marketingName||"iPhone"}))}catch{return[]}}var Gc=e=>e?.trim().toUpperCase()||void 0;function Vc(e){let t=we(),n=t?zt(t):{},i=Gc(e.teamId),r=i||n.teamId;return{...n,teamId:r,developerTeamId:i||n.developerTeamId||r}}async function Jh(e){let t=e.udid,n=e.name,i=Vc(e),r=i.teamId;if(!t){let s=ui();s.start("Scanning for connected iOS devices...");let l=await Wh();if(s.stop(l.length>0?`Found ${l.length} device(s)`:"No devices detected"),l.length===1)t=l[0].udid,n=n||l[0].name,tt.info(`Detected: ${se.bold(n)} (${se.dim(t.substring(0,12)+"...")})`);else if(l.length>1){let a=await Hc({message:"Select a device to register:",options:l.map(u=>({value:u.udid,label:`${u.name} (${u.model})`,hint:u.udid.substring(0,12)+"..."}))});if(ci(a)){di("Cancelled");return}t=a;let c=l.find(u=>u.udid===t);n=n||c.name}else{tt.info(se.dim("No connected devices found. Enter UDID manually."));let a=await Bc({message:"Device UDID:",placeholder:"00008101-XXXXXXXXXXXX",validate(c){if(c.length<10)return"UDID seems too short"}});if(ci(a)){di("Cancelled");return}t=a}}if(!n){let s=await Bc({message:"Device name:",placeholder:"Nitesh's iPhone",validate(l){if(l.length===0)return"Name is required"}});if(ci(s)){di("Cancelled");return}n=s}let o=ui();o.start("Registering device...");try{await O.post("/devices",{udid:t,name:n,platform:"ios",addedVia:"cli",teamId:r,teamName:i.teamName,developerTeamId:i.developerTeamId,appStoreConnectTeamId:i.appStoreConnectTeamId,providerId:i.providerId,providerName:i.providerName}),o.stop(se.green("Device registered!")),tt.info(`  ${se.bold("Name:")} ${n}`),tt.info(`  ${se.bold("UDID:")} ${se.dim(t)}`),r&&tt.info(`  ${se.bold("Team:")} ${se.dim(r)}`)}catch(s){o.stop(se.red("Failed to register device")),tt.error(s.response?.data?.message||s.message)}pi(se.blue("---"))}async function qh(e={}){let t=Gc(e.teamId),n=ui();n.start("Fetching registered devices...");try{let r=(await O.get("/devices",t?{params:{teamId:t}}:void 0)).data.devices||[];if(n.stop(`${r.length} device(s) registered${t?` for team ${t}`:""}`),r.length===0){tt.info(se.dim(`No devices registered yet. Run \`${m.nameLower} device register\` to add one.`)),pi(se.blue("---"));return}let o=r.map(s=>{let l=new Date(s.createdAt).toLocaleDateString();return`  ${se.bold(s.name.padEnd(24))} ${se.dim(s.udid.padEnd(28))} ${se.dim((s.teamId||"-").padEnd(12))} ${se.cyan((s.addedVia||"-").padEnd(10))} ${se.dim(l)}`});Kh(`  ${se.bold("Name".padEnd(24))} ${"UDID".padEnd(28)} ${"Team".padEnd(12)} ${"Via".padEnd(10)} Date
+`,s=r[1]||"",a=r[2]||"",d=a.match(/\r?\n([ \t]+)\S/)?.[1]||`${s}    `,c=a.trim().length===0?`${o}${d}'${t}',${o}${s}`:a.includes(`
+`)||a.includes("\r")?`${o}${d}'${t}',${a}`:`${o}${d}'${t}',${o}${d}${a.trim()}${o}${s}`,u=`${r[0].slice(0,r[0].indexOf("[")+1)}${c}]`;return pe.writeFileSync(e,`${n.slice(0,r.index)}${u}${n.slice(r.index+r[0].length)}`),"inserted"}function al(e,t,n={}){let i=[],r=[],o=[],s=yi(e);if(!s&&n.installPackage){o.push("Installing @radhya/mach locally so Expo can use @radhya/mach/expo-plugin.");let u=Uf(e);u.ok?(s=!0,o.push(`Installed @radhya/mach with ${u.label}.`)):o.push(`Could not install @radhya/mach with ${u.label}: ${u.error||"unknown error"}. Falling back to local plugin.`)}let a=s?hn:Lt;if(s)o.push(`Using packaged Expo plugin ${hn}.`);else{let u=ye.join(e,"plugins/withMachDeepLinks.js");pe.mkdirSync(ye.dirname(u),{recursive:!0}),pe.writeFileSync(u,kf),i.push(ye.relative(e,u)),o.push(`Using local Expo plugin fallback ${Lt}. Install @radhya/mach in this app to use ${hn}.`)}let l=["app.config.ts","app.config.js"].find(u=>pe.existsSync(ye.join(e,u)));if(l){let u=ye.join(e,l),f=Ff(u,a);return f==="inserted"?i.push(l):f==="updated"?(i.push(l),o.push(`${l} updated to use ${a}.`)):f==="already"?o.push(`${l} already includes the Mach Expo plugin.`):o.push(`Add "${a}" to the plugins array in ${l}. Mach could not safely auto-edit this dynamic config.`),{written:i,skipped:r,notes:o}}let d=["app.config.json","app.json"].find(u=>pe.existsSync(ye.join(e,u)));if(!d)return r.push("Expo config plugin insertion: no app.json or app.config.json found."),{written:i,skipped:r,notes:o};let c=ye.join(e,d);try{let u=JSON.parse(pe.readFileSync(c,"utf-8")),f=u.expo&&typeof u.expo=="object"?u.expo:u,p=Lf(f,a);pe.writeFileSync(c,`${JSON.stringify(u,null,2)}
+`),i.push(d),p==="updated"&&o.push(`${d} updated to use ${a}.`)}catch(u){r.push(`Expo config plugin insertion failed: ${u.message}`)}return{written:i,skipped:r,notes:o}}function ll(e){let t=["app.config.ts","app.config.js"].find(i=>pe.existsSync(ye.join(e,i)));if(t){let i=pe.readFileSync(ye.join(e,t),"utf-8");return zr.test(i)?"manual":"missing"}let n=["app.config.json","app.json"].find(i=>pe.existsSync(ye.join(e,i)));if(!n)return"missing";try{let i=JSON.parse(pe.readFileSync(ye.join(e,n),"utf-8")),r=i.expo&&typeof i.expo=="object"?i.expo:i;return Array.isArray(r.plugins)&&r.plugins.some(sl)?"wired":"missing"}catch{return"missing"}}function Wr(e){let t=ol("npx",["--no-install","expo","config","--type","public","--json"],{cwd:e,encoding:"utf-8",timeout:8e3,env:{...process.env,CI:"1",EXPO_NO_TELEMETRY:"1"}});if(t.error||t.status!==0||!t.stdout)return null;let n=t.stdout.trim(),i=n.indexOf("{");if(i<0)return null;try{return JSON.parse(n.slice(i))}catch{return null}}function Bf(e){if(!e||typeof e!="object")return null;let n=(Array.isArray(e.ios?.associatedDomains)?e.ios.associatedDomains:[]).map(s=>typeof s=="string"?s.match(/^applinks:(.+)$/)?.[1]:void 0).find(Boolean),r=(Array.isArray(e.android?.intentFilters)?e.android.intentFilters:[]).flatMap(s=>Array.isArray(s?.data)?s.data:[]).find(s=>s?.scheme==="https"&&typeof s.host=="string")?.host,o=n||r;return!o&&!e.scheme&&!e.ios?.bundleIdentifier&&!e.android?.package?null:{domain:o,scheme:typeof e.scheme=="string"?e.scheme:void 0,iosBundleIdentifier:typeof e.ios?.bundleIdentifier=="string"?e.ios.bundleIdentifier:void 0,androidPackage:typeof e.android?.package=="string"?e.android.package:void 0}}function bi(e){return Bf(Wr(e))}import ze from"fs";import ve from"path";var jf=e=>{ze.mkdirSync(ve.dirname(e),{recursive:!0})},dl=(e,t)=>{jf(e),ze.writeFileSync(e,`${JSON.stringify(t,null,2)}
+`)};var Hf=e=>{let t=e.ios?.appleTeamId,n=e.ios?.bundleIdentifier;return!t||!n?null:`${t}.${n}`};function qr(e){let t=Hf(e);if(!t)return null;let n=e.paths?.length?e.paths:["/*"],i=n.map(s=>s==="/*"?"*":s),r=n.map(s=>({"/":s,comment:s==="/*"?"Matches all URLs":`Matches ${s}`})),o={applinks:{apps:[],details:[{appIDs:[t],components:r,appID:t,paths:i}]}};return e.ios?.webCredentials&&(o.webcredentials={apps:[t]}),e.ios?.activityContinuation&&(o.activitycontinuation={apps:[t]}),o}function Gf(e){let t=e.android?.package;return t?[{relation:["delegate_permission/common.handle_all_urls"],target:{namespace:"android_app",package_name:t,sha256_cert_fingerprints:e.android?.sha256CertFingerprints||[]}}]:null}function Vf(e,t){let n=t.ios?.appStoreId;if(!n||!ze.existsSync(e))return!1;let i=`<meta name="apple-itunes-app" content="app-id=${n}, app-argument=${t.baseUrl}" />`,r=ze.readFileSync(e,"utf-8");if(/name=["']apple-itunes-app["']/i.test(r)){let o=r.replace(/<meta[^>]+name=["']apple-itunes-app["'][^>]*>/i,i);return ze.writeFileSync(e,o),!0}return/<head[^>]*>/i.test(r)?(ze.writeFileSync(e,r.replace(/<head([^>]*)>/i,`<head$1>
+    ${i}`)),!0):!1}function cl(e,t){let n=[],i=[],r=[],o=t.web?.outputDir||"deep-links",s=ve.join(e,o),a=qr(t);if(a){let u=pi([ve.join(s,".well-known/apple-app-site-association"),ve.join(s,".well-known/apple-app-site-association.json"),ve.join(s,"apple-app-site-association"),ve.join(s,"apple-app-site-association.json")]);for(let f of u)dl(f,a),n.push(ve.relative(e,f))}else i.push("Apple AASA files: missing ios.appleTeamId or ios.bundleIdentifier");let l=Gf(t);if(l){let u=ve.join(s,".well-known/assetlinks.json");dl(u,l),n.push(ve.relative(e,u)),t.android?.sha256CertFingerprints?.length||r.push("assetlinks.json was generated without SHA256 fingerprints. Add them before Android App Links can verify.")}else i.push("Android assetlinks.json: missing android.package");let d=ve.join(e,Gr);ze.existsSync(d)&&(ze.unlinkSync(d),r.push(`Removed legacy ${Gr}; mach.config.json is now the source of truth.`));let c=ve.join(s,"index.html");return t.web?.smartAppBanner&&Vf(c,t)?n.push(ve.relative(e,c)):t.web?.smartAppBanner&&t.ios?.appStoreId?r.push(`Smart App Banner skipped because ${ve.relative(e,c)} was not found.`):t.web?.smartAppBanner&&r.push("Smart App Banner skipped because ios.appStoreId is not configured."),o!=="public"&&r.push(`Host ${o}/.well-known files at https://${t.domain}/.well-known/.`),{written:n,skipped:i,notes:r}}function Jr(e){if(!ze.existsSync(e))return null;try{return JSON.parse(ze.readFileSync(e,"utf-8"))}catch{return null}}import dt from"fs";import ct from"path";import{spawnSync as zf}from"child_process";var N=(e,t)=>({level:e,message:t}),ul=(e,t)=>ct.join(e,t.web?.outputDir||"deep-links");function Kf(e,t,n="fail"){let i=[],r=ul(e,t),o=ct.join(r,".well-known/apple-app-site-association");if(!qr(t))return i.push(N("warn","Skipping AASA verification because ios.appleTeamId or ios.bundleIdentifier is missing.")),i;if(!dt.existsSync(o))return i.push(N(n,`${ct.relative(e,o)} is missing.`)),i;dt.statSync(o).size>128*1024?i.push(N("fail","Apple AASA file is larger than 128 KB.")):i.push(N("pass","Apple AASA file is under 128 KB."));let l=Jr(o);if(!l)return i.push(N("fail","Apple AASA file is not valid JSON.")),i;let d=`${t.ios?.appleTeamId}.${t.ios?.bundleIdentifier}`,c=l.applinks?.details||[],u=Array.isArray(c)&&c.some(f=>f.appID===d||f.appIDs?.includes(d));return i.push(u?N("pass",`AASA contains ${d}.`):N("fail",`AASA does not contain ${d}.`)),i}function Wf(e,t,n="fail"){let i=[],r=ul(e,t),o=ct.join(r,".well-known/assetlinks.json");if(!t.android?.package)return i.push(N("warn","Skipping Android Asset Links verification because android.package is missing.")),i;if(!dt.existsSync(o))return i.push(N(n,`${ct.relative(e,o)} is missing.`)),i;let s=Jr(o);if(!s||!Array.isArray(s))return i.push(N("fail","assetlinks.json is not a valid JSON array.")),i;let a=s.find(d=>d?.target?.package_name===t.android?.package);i.push(a?N("pass",`assetlinks.json contains ${t.android.package}.`):N("fail",`assetlinks.json does not contain ${t.android.package}.`));let l=a?.target?.sha256_cert_fingerprints;return i.push(Array.isArray(l)&&l.length>0?N("pass","assetlinks.json has at least one SHA256 fingerprint."):N("warn","assetlinks.json has no SHA256 fingerprints.")),i}function qf(e,t,n,i){if(t.framework!=="expo")return[];let r=[],o=Wr(e),a=(Array.isArray(o?.ios?.associatedDomains)?o.ios.associatedDomains:[]).includes(`applinks:${n.domain}`);r.push(a?N("pass",`Expo iOS config contains applinks:${n.domain}.`):N(i?"warn":"fail",`Expo iOS config does not contain applinks:${n.domain}.`));let d=(Array.isArray(o?.android?.intentFilters)?o.android.intentFilters:[]).flatMap(u=>Array.isArray(u?.data)?u.data:[]).some(u=>u?.scheme==="https"&&u.host===n.domain);if(r.push(d?N("pass",`Expo Android config contains App Link host ${n.domain}.`):N(i?"warn":"fail",`Expo Android config does not contain App Link host ${n.domain}.`)),i)return r.push(N("warn","mach.config.json is missing deepLinks; values were inferred from Expo config. Run `mach deeplink setup` to persist Mach metadata and generate hosted files.")),r;let c=ll(e);return c==="wired"?r.push(N("pass","Expo deep link plugin is wired into Expo config and derives values from mach.config.json.")):c==="manual"&&a&&d?r.push(N("pass","Expo resolved config contains the deep-link settings from the dynamic config.")):c==="manual"?r.push(N("warn","Expo deep link plugin exists, but dynamic or missing Expo config means manual plugin insertion must be confirmed.")):a&&d?r.push(N("warn","Expo plugin is not wired, but resolved Expo config already contains the deep-link settings.")):r.push(N("fail","Expo deep link plugin is missing or not wired into Expo config.")),r}function Jf(e,t,n){if(t.framework!=="react-native")return[];let i=[],r=ct.join(e,"android/app/src/main/AndroidManifest.xml");if(dt.existsSync(r)){let s=dt.readFileSync(r,"utf-8");i.push(s.includes(`android:host="${n.domain}"`)?N("pass","AndroidManifest.xml contains the App Links host."):N("warn","AndroidManifest.xml does not contain the App Links host. Native patching is planned for a later phase."))}let o=ct.join(e,"ios");if(dt.existsSync(o)){let a=dt.readdirSync(o,{recursive:!0}).filter(l=>typeof l=="string"&&l.endsWith(".entitlements")).some(l=>dt.readFileSync(ct.join(o,l),"utf-8").includes(`applinks:${n.domain}`));i.push(a?N("pass","iOS entitlements contain the associated domain."):N("warn","iOS entitlements do not contain the associated domain. Native patching is planned for a later phase."))}return i}async function Yr(e,t){let n=[];try{let i=await fetch(e,{redirect:"manual"});if(i.status>=300&&i.status<400&&!t)return n.push(N("fail",`${e} redirects. Apple AASA endpoints must not redirect.`)),n;n.push(i.status===200?N("pass",`${e} returned HTTP 200.`):N("fail",`${e} returned HTTP ${i.status}.`));let r=i.headers.get("content-type")||"";!r.includes("application/json")&&!r.includes("text/json")&&n.push(N("warn",`${e} content-type is "${r||"missing"}"; application/json is recommended.`)),JSON.parse(await i.text()),n.push(N("pass",`${e} contains valid JSON.`))}catch(i){n.push(N("fail",`${e} check failed: ${i.message}`))}return n}async function Yf(e){let t=e.domain;return(await Promise.all([Yr(`https://${t}/.well-known/apple-app-site-association`,!1),Yr(`https://${t}/apple-app-site-association`,!1),Yr(`https://${t}/.well-known/assetlinks.json`,!0)])).flat()}function Xf(e){let t=e.android?.package;if(!t)return[N("warn","Cannot print Android device verification commands because android.package is missing.")];let i=zf("adb",["version"],{encoding:"utf-8"}).status===0?"Run":"Install Android platform-tools, then run";return[N("info",`${i}: adb shell pm set-app-links --package ${t} 0 all`),N("info",`${i}: adb shell pm verify-app-links --re-verify ${t}`),N("info",`${i}: adb shell pm get-app-links ${t}`)]}async function Xr(e,t,n){let i=n.profile||t.deepLinks?.profile||"production",r=t.framework==="expo"?bi(e):null,o=t.framework==="expo"?hi(t,r,i,e):null,s=!t.deepLinks&&!!o,a=t.deepLinks?gi(t,{profile:i,cwd:e,expoHints:r}):o,l=[];if(!a)return[N("fail","mach.config.json is missing deepLinks and Mach could not infer existing deep-link settings. Run `mach deeplink setup`.")];l.push(a.baseUrl?N("pass","deepLinks.baseUrl is configured."):N("fail","deepLinks.baseUrl is missing.")),l.push(a.domain?N("pass","deepLinks.domain is configured."):N("fail","deepLinks.domain is missing.")),l.push(a.scheme?N("pass","deepLinks.scheme is configured."):N("fail","deepLinks.scheme is missing."));let d=s?"warn":"fail";return l.push(...Kf(e,a,d)),l.push(...Wf(e,a,d)),l.push(...qf(e,t,a,s)),l.push(...Jf(e,t,a)),n.live&&l.push(...await Yf(a)),n.androidDevice&&l.push(...Xf(a)),l}var An=()=>process.stdin.isTTY&&process.stdout.isTTY,fl=`${m.npmScope}/mach`,Sn=()=>{Zf("Operation cancelled."),process.exit(0)},eo=e=>{if(typeof e!="string")return;let t=e.trim();return t.length>0?t:void 0},Ye=(...e)=>{for(let t of e){let n=eo(t);if(n)return n}},St=async(e,t,n,i,r)=>{if(t)return t;if(r||!An()){if(i)throw new Error(`${e.replace(/:$/,"")} is required. Pass it as an option or run interactively.`);return}let o=await gl({message:e,initialValue:t||"",placeholder:n,validate(s){if(i&&s.trim().length===0)return"Required."}});return bn(o)&&Sn(),eo(o)};async function nm(e,t,n){let i=$e(e.framework),r=$e(t);if(r)return r;if(i)return i;let o=el();if(n||!An())return o;let s=await em({message:`Which framework should ${m.name} configure?`,initialValue:o,options:[{value:"expo",label:"Expo"},{value:"react-native",label:"React Native"},{value:"flutter",label:"Flutter (not supported yet)"}]});return bn(s)&&Sn(),s}var Ai=e=>e==="ios"||e==="all",Zr=e=>e==="android"||e==="all";async function im(e,t,n){if(t!=="expo"||yi(e)||n.installPlugin===!1)return!1;if(n.installPlugin===!0||n.yes)return!0;if(!An())return!1;let i=await ml({message:`Install ${fl} locally so Expo can use ${fl}/expo-plugin?`,initialValue:!0});return bn(i)&&Sn(),!!i}async function rm(e,t){let n=!!t.yes,i=t.profile||e.deepLinks?.profile||"production",r=Ie(e,i)||{},o=r.ios||{},s=r.android||{},a=e.submit?.[i]?.ios||{},l=e.submit?.[i]?.android||{},d=mt(e,i),c=await nm(e,t.framework,n);if(c==="flutter")throw new Error("Flutter deep-link automation is planned but not supported yet.");let u=tl(e,Qa(t.platform),r),f=e.deepLinks,g=c==="expo"&&(!Ye(t.baseUrl,f?.baseUrl,t.domain?`https://${t.domain}`:void 0)||!Ye(t.scheme,f?.scheme,o.scheme,e.scheme,e.slug,e.name)||Ai(u)&&!Ye(t.iosBundleId,f?.ios?.bundleIdentifier,o.bundleIdentifier,o.bundleId,e.ios?.bundleIdentifier)||Zr(u)&&!Ye(t.androidPackage,f?.android?.package,s.package,s.applicationId,e.android?.package,l.packageName,l.package))?hi(e,bi(process.cwd()),i,process.cwd()):null,h=t.output||f?.web?.outputDir||mi(process.cwd(),e),y=await St("Deep link base URL:",t.baseUrl||f?.baseUrl||(t.domain?`https://${t.domain}`:void 0)||g?.baseUrl,"https://app.example.com",!0,n),b=gn(y),w=t.baseUrl?new URL(b).hostname:void 0,L=await St("Associated domain:",t.domain||w||f?.domain||g?.domain||new URL(b).hostname,"app.example.com",!0,n),_=fi(await St("URI scheme:",Ye(t.scheme,f?.scheme,o.scheme,e.scheme,g?.scheme,e.slug,e.name,"app"),"myapp",!0,n)||"app"),H=Ai(u)?await St("iOS bundle identifier:",Ye(t.iosBundleId,f?.ios?.bundleIdentifier,o.bundleIdentifier,o.bundleId,e.ios?.bundleIdentifier,g?.ios?.bundleIdentifier),"com.example.app",!0,n):f?.ios?.bundleIdentifier||e.ios?.bundleIdentifier,W=Ai(u)?await St("Apple Team ID:",Ye(t.appleTeamId,f?.ios?.appleTeamId,o.appleTeamId,o.developerTeamId,a.appleTeamId,a.developerTeamId,e.ios?.appleTeamId,e.ios?.developerTeamId,d.teamId),"ABCDE12345",!0,n):f?.ios?.appleTeamId||e.ios?.appleTeamId,Z=Ai(u)?await St("App Store ID (optional, for Smart App Banner):",Ye(t.appStoreId,f?.ios?.appStoreId,o.ascAppId,a.ascAppId,e.ios?.ascAppId),"1234567890",!1,n):f?.ios?.appStoreId,Ee=Zr(u)?await St("Android package name:",Ye(t.androidPackage,f?.android?.package,s.package,s.applicationId,e.android?.package,l.packageName,l.package,g?.android?.package),"com.example.app",!0,n):f?.android?.package||e.android?.package,oe=f?.android?.sha256CertFingerprints||[],R=t.androidFingerprint||[],T=e.android?.sha256CertFingerprints||[],E=s.sha256CertFingerprints||[],A=[...R,...oe,...E,...T].filter(Boolean);if(Zr(u)&&A.length===0&&!n&&An()){let v=await gl({message:"Android SHA256 fingerprint (optional now, required for verified App Links):",placeholder:"AA:BB:CC:..."});bn(v)&&Sn(),eo(v)&&A.push(v)}let D=nl(e,{...t,baseUrl:b,domain:L,scheme:_,output:h,appleTeamId:W,appStoreId:Z,androidFingerprint:A});return D.ios={...D.ios||{},bundleIdentifier:H,appleTeamId:W,appStoreId:Z},D.android={...D.android||{},package:Ee,sha256CertFingerprints:Array.from(new Set(A))},{framework:c,platform:u,deepLinks:D}}var Qr=(e,t)=>{t.length!==0&&Qf(t.map(n=>`- ${n}`).join(`
+`),e)},hl=e=>e.filter(t=>t.level==="fail").length;function yl(e){for(let t of e){let n=t.level==="pass"?Ue.green("PASS"):t.level==="warn"?Ue.yellow("WARN"):t.level==="info"?Ue.cyan("INFO"):Ue.red("FAIL");Si.info(`${n} ${t.message}`)}}async function bl(e){try{let t=process.cwd(),n=pl.join(t,m.configFileName),i=ce()||{};if(!tm.existsSync(n)){let b=e.yes||!An()?!0:await ml({message:`${m.configFileName} was not found. Create one with deep link settings?`,initialValue:!0});if(bn(b)&&Sn(),!b)return}let{framework:r,deepLinks:o}=await rm(i,e),s=e.profile||i.deepLinks?.profile||"production",a=il(i,r,o,s),l=rl(a,t),d=cl(t,o),c=await im(t,r,e),u=r==="expo"?al(t,o,{installPackage:c}):{written:[],skipped:[],notes:r==="react-native"?["React Native native patching is planned for a later phase. Hosted files were generated now."]:[]},f=[pl.relative(t,l),...d.written,...u.written],p=[...d.skipped,...u.skipped],g=[...d.notes,...u.notes];Qr("Written",f),Qr("Skipped",p),Qr("Notes",g);let h=await Xr(t,a,{});yl(h);let y=hl(h);if(y>0){Ei(Ue.yellow(`Deep link setup finished with ${y} verification issue(s).`));return}Ei(Ue.green("Deep link setup complete."))}catch(t){Si.error(Ue.red(t.message||"Deep link setup failed.")),process.exit(1)}}async function Al(e){try{let t=ce();t||(Si.error(Ue.red(`No ${m.configFileName} found in the current directory.`)),process.exit(1));let n=await Xr(process.cwd(),t,e);yl(n);let i=hl(n);i>0&&(Ei(Ue.red(`Deep link verification failed with ${i} issue(s).`)),process.exit(1)),Ei(Ue.green("Deep link verification passed."))}catch(t){Si.error(Ue.red(t.message||"Deep link verification failed.")),process.exit(1)}}import{log as Xe,spinner as Sl}from"@clack/prompts";import ut from"chalk";var om=e=>{let t=String(e||"").trim().toLowerCase();if(t==="ios"||t==="android")return t;throw new Error("Pass --platform ios or --platform android.")},sm=e=>{let t=Number(e);if(!Number.isFinite(t))throw new Error("Counter value must be a non-negative integer.");let n=Math.floor(t);if(n<0)throw new Error("Counter value must be a non-negative integer.");return n},am=(e,t,n)=>{let i=String(n.scope||"").trim();if(i)return i;let r=n.profile||"production",o=e==="android"?n.package||n.androidPackage:n.bundleId||n.iosBundleIdentifier;if(o)return String(o).trim();let s=e==="android"?Ln(t,r):Mn(t,r);if(s)return s;throw new Error(e==="android"?`Could not resolve Android package. Set android.package in ${m.configFileName}, or pass --package/--scope.`:`Could not resolve iOS bundle identifier. Set ios.bundleIdentifier in ${m.configFileName}, or pass --bundle-id/--scope.`)},lm=()=>{let e=ce();if(!e)throw new Error(`No ${m.configFileName} found in the current directory. Run \`${m.nameLower} init\` or \`${m.nameLower} link\` first.`);if(!e.projectId)throw new Error(`${m.configFileName} is missing projectId.`);return e},to=e=>{Xe.info(ut.bgBlue.white(" Native Version Counter ")),Xe.info(`${ut.blue("Platform:")} ${e.platform}`),Xe.info(`${ut.blue("Scope:")} ${e.scope}`),Xe.info(`${ut.blue("Current DB value:")} ${e.current}`),Xe.info(`${ut.blue("Next build will use:")} ${e.next}`),e.seeded||Xe.warn(ut.yellow("This counter has not been seeded yet. Existing store apps should run `mach version seed` once before auto-version builds."))};async function no(e,t={}){if(!be()){Xe.error(`You are not logged in. Run \`${m.nameLower} login\` first.`);return}try{let i=lm(),r=om(t.platform),o=am(r,i,t),s=String(i.projectId);if(e==="show"){let c=Sl();t.json||c.start("Fetching native version counter...");let{data:u}=await $.get(`/projects/${s}/version-counters`,{params:{platform:r,scope:o}});if(u.status!=="success")throw new Error(u.message||"Failed to fetch version counter.");t.json?console.log(JSON.stringify(u.counter,null,2)):(c.stop("Fetched native version counter."),to(u.counter));return}let a=sm(t.value),l=Sl();t.json||l.start("Seeding native version counter...");let{data:d}=await $.post(`/projects/${s}/version-counters/seed`,{platform:r,scope:o,value:a,force:!!t.force});if(d.status!=="success")throw new Error(d.message||"Failed to seed version counter.");t.json?console.log(JSON.stringify(d.counter,null,2)):(l.stop(`Seeded ${r} counter for ${o}.`),to(d.counter))}catch(i){let r=i?.response?.data?.message||i?.message||"Version command failed.";if(i?.response?.data?.counter&&!t.json){Xe.error(ut.red(r)),to(i.response.data.counter);return}t.json?console.log(JSON.stringify({status:"error",message:r},null,2)):Xe.error(ut.red(r))}}import{log as De,spinner as wn,text as El,select as Il,confirm as dm,isCancel as En,cancel as In,outro as vn,note as cm}from"@clack/prompts";import K from"chalk";import{execSync as um}from"child_process";async function pm(){try{let e=um("xcrun devicectl list devices --json-output -",{stdio:["pipe","pipe","pipe"]}).toString();return(JSON.parse(e).result?.devices||[]).filter(i=>i.connectionProperties?.transportType==="wired"||i.connectionProperties?.transportType==="localNetwork").map(i=>({udid:i.identifier,name:i.deviceProperties?.name||"Unknown Device",model:i.hardwareProperties?.marketingName||"iPhone"}))}catch{return[]}}var wl=e=>e?.trim().toUpperCase()||void 0;function vl(e){let t=ce(),n=t?mt(t):{},i=wl(e.teamId),r=i||n.teamId;return{...n,teamId:r,developerTeamId:i||n.developerTeamId||r}}async function fm(e){let t=e.udid,n=e.name,i=vl(e),r=i.teamId;if(!t){let s=wn();s.start("Scanning for connected iOS devices...");let a=await pm();if(s.stop(a.length>0?`Found ${a.length} device(s)`:"No devices detected"),a.length===1)t=a[0].udid,n=n||a[0].name,De.info(`Detected: ${K.bold(n)} (${K.dim(t.substring(0,12)+"...")})`);else if(a.length>1){let l=await Il({message:"Select a device to register:",options:a.map(c=>({value:c.udid,label:`${c.name} (${c.model})`,hint:c.udid.substring(0,12)+"..."}))});if(En(l)){In("Cancelled");return}t=l;let d=a.find(c=>c.udid===t);n=n||d.name}else{De.info(K.dim("No connected devices found. Enter UDID manually."));let l=await El({message:"Device UDID:",placeholder:"00008101-XXXXXXXXXXXX",validate(d){if(d.length<10)return"UDID seems too short"}});if(En(l)){In("Cancelled");return}t=l}}if(!n){let s=await El({message:"Device name:",placeholder:"Nitesh's iPhone",validate(a){if(a.length===0)return"Name is required"}});if(En(s)){In("Cancelled");return}n=s}let o=wn();o.start("Registering device...");try{await $.post("/devices",{udid:t,name:n,platform:"ios",addedVia:"cli",teamId:r,teamName:i.teamName,developerTeamId:i.developerTeamId,appStoreConnectTeamId:i.appStoreConnectTeamId,providerId:i.providerId,providerName:i.providerName}),o.stop(K.green("Device registered!")),De.info(`  ${K.bold("Name:")} ${n}`),De.info(`  ${K.bold("UDID:")} ${K.dim(t)}`),r&&De.info(`  ${K.bold("Team:")} ${K.dim(r)}`)}catch(s){o.stop(K.red("Failed to register device")),De.error(s.response?.data?.message||s.message)}vn(K.blue("---"))}async function mm(e={}){let t=wl(e.teamId),n=wn();n.start("Fetching registered devices...");try{let r=(await $.get("/devices",t?{params:{teamId:t}}:void 0)).data.devices||[];if(n.stop(`${r.length} device(s) registered${t?` for team ${t}`:""}`),r.length===0){De.info(K.dim(`No devices registered yet. Run \`${m.nameLower} device register\` to add one.`)),vn(K.blue("---"));return}let o=r.map(s=>{let a=new Date(s.createdAt).toLocaleDateString();return`  ${K.bold(s.name.padEnd(24))} ${K.dim(s.udid.padEnd(28))} ${K.dim((s.teamId||"-").padEnd(12))} ${K.cyan((s.addedVia||"-").padEnd(10))} ${K.dim(a)}`});cm(`  ${K.bold("Name".padEnd(24))} ${"UDID".padEnd(28)} ${"Team".padEnd(12)} ${"Via".padEnd(10)} Date
 `+o.join(`
-`),"Registered Devices")}catch(i){n.stop(se.red("Failed to fetch devices")),tt.error(i.response?.data?.message||i.message)}pi(se.blue("---"))}async function Yh(e){let t=e.udid,n=Vc(e).teamId;if(!t){let o=ui();o.start("Fetching registered devices...");try{let l=(await O.get("/devices",n?{params:{teamId:n}}:void 0)).data.devices||[];if(o.stop(`${l.length} device(s) found`),l.length===0){tt.info(se.dim("No devices to remove.")),pi(se.blue("---"));return}let a=await Hc({message:"Select device to remove:",options:l.map(u=>({value:u.deviceKey||u.udid,label:u.name,hint:`${u.udid.substring(0,12)}...${u.teamId?` \xB7 ${u.teamId}`:""}`}))});if(ci(a)){di("Cancelled");return}let c=l.find(u=>(u.deviceKey||u.udid)===a);t=c?.udid||a,n=c?.teamId||n}catch(s){o.stop(se.red("Failed to fetch devices")),tt.error(s.response?.data?.message||s.message);return}}let i=await Vh({message:`Remove device ${se.dim(t.substring(0,12)+"...")}?`});if(ci(i)||!i){di("Cancelled");return}let r=ui();r.start("Removing device...");try{await O.delete(`/devices/${encodeURIComponent(t)}`,n?{params:{teamId:n}}:void 0),r.stop(se.green("Device removed"))}catch(o){r.stop(se.red("Failed to remove device")),tt.error(o.response?.data?.message||o.message)}pi(se.blue("---"))}async function dr(e,t){switch(e){case"register":await Jh(t);break;case"list":await qh(t);break;case"remove":await Yh(t);break;default:tt.error(`Unknown action: ${e}`)}}import{log as it,spinner as bd}from"@clack/prompts";import ft from"chalk";import Ar from"path";import gi from"fs";import Cy from"os";import Dy from"axios";var nt=(o=>(o.CRITICAL="critical",o.HIGH="high",o.MEDIUM="medium",o.LOW="low",o.INFO="info",o))(nt||{}),pt=(a=>(a.PERMISSIONS="permissions",a.SECRETS="secrets",a.DEPENDENCIES="dependencies",a.STORAGE="storage",a.NETWORK="network",a.DEBUG="debug",a.MANIFEST="manifest",a.ATS="ats",a))(pt||{});import{spinner as cd,log as mi}from"@clack/prompts";import qe from"chalk";import{execSync as Ay}from"child_process";import dd from"fs";import ud from"path";import Kt from"fs";import fi from"path";import{execSync as Xh}from"child_process";var Kc={"android.permission.READ_PHONE_STATE":{severity:"high",description:"Can read phone number, IMEI, carrier info"},"android.permission.CALL_PHONE":{severity:"high",description:"Can make calls without user interaction"},"android.permission.SEND_SMS":{severity:"high",description:"Can send SMS without user interaction"},"android.permission.READ_SMS":{severity:"high",description:"Can read user SMS messages"},"android.permission.READ_CONTACTS":{severity:"medium",description:"Can read user contacts"},"android.permission.WRITE_CONTACTS":{severity:"medium",description:"Can modify user contacts"},"android.permission.READ_CALL_LOG":{severity:"high",description:"Can read call history"},"android.permission.CAMERA":{severity:"medium",description:"Camera access"},"android.permission.RECORD_AUDIO":{severity:"medium",description:"Microphone access"},"android.permission.ACCESS_FINE_LOCATION":{severity:"medium",description:"Precise GPS location"},"android.permission.ACCESS_COARSE_LOCATION":{severity:"medium",description:"Approximate location"},"android.permission.ACCESS_BACKGROUND_LOCATION":{severity:"high",description:"Background location tracking"},"android.permission.READ_EXTERNAL_STORAGE":{severity:"medium",description:"Read files on device"},"android.permission.WRITE_EXTERNAL_STORAGE":{severity:"medium",description:"Write files on device"},"android.permission.READ_MEDIA_IMAGES":{severity:"low",description:"Read photos"},"android.permission.READ_MEDIA_VIDEO":{severity:"low",description:"Read videos"},"android.permission.SYSTEM_ALERT_WINDOW":{severity:"high",description:"Draw overlays on other apps"},"android.permission.REQUEST_INSTALL_PACKAGES":{severity:"high",description:"Can install APKs"}},Zh={NSCameraUsageDescription:{severity:"medium",description:"Camera access declared"},NSMicrophoneUsageDescription:{severity:"medium",description:"Microphone access declared"},NSLocationWhenInUseUsageDescription:{severity:"medium",description:"Location (in-use) declared"},NSLocationAlwaysUsageDescription:{severity:"high",description:"Background location declared"},NSContactsUsageDescription:{severity:"medium",description:"Contacts access declared"},NSCalendarsUsageDescription:{severity:"low",description:"Calendar access declared"},NSPhotoLibraryUsageDescription:{severity:"low",description:"Photo library access declared"}};function Qh(e){try{let n=Xh("npx expo config --type introspect --json 2>/dev/null",{cwd:e,encoding:"utf-8",timeout:3e4});return JSON.parse(n)}catch{}let t=fi.join(e,"app.json");if(Kt.existsSync(t))try{let n=JSON.parse(Kt.readFileSync(t,"utf-8"));return n.expo||n}catch{}return null}function ey(e){let t=[],n=fi.join(e,"node_modules");if(!Kt.existsSync(n))return t;let i=/<uses-permission\s+android:name="([^"]+)"/g;function r(o,s){let l=fi.join(o,"android","src","main","AndroidManifest.xml");if(!Kt.existsSync(l))return;let a=Kt.readFileSync(l,"utf-8"),c;for(;(c=i.exec(a))!==null;)t.push({pkg:s,permission:c[1]});i.lastIndex=0}for(let o of Kt.readdirSync(n)){if(o.startsWith("."))continue;let s=fi.join(n,o);if(o.startsWith("@")){if(!Kt.statSync(s).isDirectory())continue;for(let l of Kt.readdirSync(s))r(fi.join(s,l),`${o}/${l}`)}else r(s,o)}return t}async function zc(e,t){let n=[],i=1,r=Qh(e),o=r?.android?.permissions||[],s=r?.android?.blockedPermissions||[];for(let c of o){let u=Kc[c];u&&n.push({id:`PERM-${String(i++).padStart(3,"0")}`,title:`${c.split(".").pop()} declared`,description:u.description,severity:u.severity,category:"permissions",file:"app.config.ts",recommendation:"Remove from permissions if not needed, or add justification."})}let l=ey(e);for(let{pkg:c,permission:u}of l){let d=Kc[u];d&&(s.includes(u)||o.includes(u)||n.push({id:`PERM-${String(i++).padStart(3,"0")}`,title:`${u.split(".").pop()} injected by ${c}`,description:`${d.description}. Auto-injected via ${c} AndroidManifest.xml`,severity:d.severity,category:"permissions",file:`node_modules/${c}/android/src/main/AndroidManifest.xml`,recommendation:`Add "${u}" to blockedPermissions if not needed.`,autoFixable:!0}))}let a=r?.ios?.infoPlist||{};for(let[c,u]of Object.entries(Zh))c in a&&n.push({id:`PERM-${String(i++).padStart(3,"0")}`,title:`iOS: ${c} declared`,description:u.description,severity:u.severity,category:"permissions",file:"app.config.ts",recommendation:`Remove ${c} from infoPlist if the app does not use this capability.`});return{category:"permissions",label:"Permission Audit",findings:n,durationMs:0}}import Yo from"fs";import ur from"path";var ty=[{id:"SEC-001",pattern:/(['"`])(?:sk|pk)_(?:live|test)_[a-zA-Z0-9]{20,}\1/g,severity:"critical",label:"Stripe API Key"},{id:"SEC-002",pattern:/(['"`])AIza[0-9A-Za-z\-_]{35}\1/g,severity:"high",label:"Google API Key"},{id:"SEC-003",pattern:/(['"`])AKIA[0-9A-Z]{16}\1/g,severity:"critical",label:"AWS Access Key ID"},{id:"SEC-004",pattern:/-----BEGIN (?:RSA |EC )?PRIVATE KEY-----/g,severity:"critical",label:"Private key in source"},{id:"SEC-005",pattern:/(?:ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9_]{36,}/g,severity:"high",label:"GitHub Token"},{id:"SEC-006",pattern:/xox[bpors]-[a-zA-Z0-9-]{10,}/g,severity:"high",label:"Slack Token"},{id:"SEC-007",pattern:/(?:password|secret|apikey|api_key)\s*[:=]\s*['"`][^'"`\n]{8,}['"`]/gi,severity:"high",label:"Hardcoded credential"}],ny=new Set([".ts",".tsx",".js",".jsx"]),iy=new Set(["node_modules",".expo",".git","android","ios","dist","build","__tests__","__mocks__"]);function Wc(e){let t=[],n=Yo.readdirSync(e,{withFileTypes:!0});for(let i of n){if(iy.has(i.name))continue;let r=ur.join(e,i.name);i.isDirectory()?t.push(...Wc(r)):ny.has(ur.extname(i.name))&&t.push(r)}return t}function ry(e){let t=e.trim();return t.startsWith("//")||t.startsWith("*")||t.startsWith("/*")}function oy(e){return/process\.env\./i.test(e)||/import\.meta\.env/i.test(e)}async function Jc(e,t){let n=[],i=ur.join(e,"src"),r=Yo.existsSync(i)?i:e,o=Wc(r);for(let s of o){let a=Yo.readFileSync(s,"utf-8").split(`
-`),c=ur.relative(e,s);for(let u=0;u<a.length;u++){let d=a[u];if(!ry(d)&&!oy(d))for(let{id:p,pattern:f,severity:g,label:h}of ty)f.lastIndex=0,f.test(d)&&n.push({id:p,title:h,description:`Potential ${h.toLowerCase()} found in source code`,severity:g,category:"secrets",file:c,line:u+1,recommendation:`Move to environment variables or a secrets manager. Use \`${m.nameLower} env set\` for managed secrets.`})}}return{category:"secrets",label:"Secrets Detection",findings:n,durationMs:0}}import{execSync as sy}from"child_process";var ay={critical:"critical",high:"high",moderate:"medium",low:"low",info:"info"};async function qc(e,t){let n=[],i=1,r;try{r=sy("npm audit --json 2>/dev/null",{cwd:e,encoding:"utf-8",timeout:6e4})}catch(l){if(r=l.stdout||"",!r)return{category:"dependencies",label:"Dependency CVEs",findings:[],durationMs:0,error:"Failed to run npm audit. Ensure npm is available and dependencies are installed."}}let o;try{o=JSON.parse(r)}catch{return{category:"dependencies",label:"Dependency CVEs",findings:[],durationMs:0,error:"Failed to parse npm audit output."}}let s=o.vulnerabilities||{};for(let[l,a]of Object.entries(s)){let c=ay[a.severity]||"info",u=Array.isArray(a.via)?a.via.map(d=>typeof d=="string"?d:d.title||d.name).join(", "):String(a.via);n.push({id:`DEP-${String(i++).padStart(3,"0")}`,title:`${l} \u2014 ${a.severity}`,description:`Via: ${u}. Range: ${a.range||"unknown"}`,severity:c,category:"dependencies",recommendation:a.fixAvailable?`Run \`npm audit fix\` or update ${l} to a patched version.`:"No fix available yet. Monitor for updates or evaluate alternatives.",autoFixable:!!a.fixAvailable})}return{category:"dependencies",label:"Dependency CVEs",findings:n,durationMs:0}}import pr from"fs";import fr from"path";var ly=/(?:token|password|credential|secret|apiKey|api_key|session|auth|jwt|refresh_token|access_token|private_key|pin|otp)/i,Yc=/AsyncStorage\s*\.\s*(?:setItem|mergeItem)\s*\(\s*['"`]([^'"`]+)['"`]/g,cy=/from\s+['"]@react-native-async-storage\/async-storage['"]|from\s+['"]react-native['"].*AsyncStorage/,dy=new Set([".ts",".tsx",".js",".jsx"]),uy=new Set(["node_modules",".expo",".git","android","ios","dist","build"]);function Xc(e){let t=[];if(!pr.existsSync(e))return t;let n=pr.readdirSync(e,{withFileTypes:!0});for(let i of n){if(uy.has(i.name))continue;let r=fr.join(e,i.name);i.isDirectory()?t.push(...Xc(r)):dy.has(fr.extname(i.name))&&t.push(r)}return t}async function Zc(e,t){let n=[],i=1,r=fr.join(e,"src"),o=pr.existsSync(r)?r:e,s=Xc(o);for(let l of s){let a=pr.readFileSync(l,"utf-8");if(!cy.test(a))continue;let c=a.split(`
-`),u=fr.relative(e,l);for(let d=0;d<c.length;d++){let p=c[d];Yc.lastIndex=0;let f;for(;(f=Yc.exec(p))!==null;){let g=f[1];ly.test(g)&&n.push({id:`STOR-${String(i++).padStart(3,"0")}`,title:`AsyncStorage used for "${g}"`,description:`Sensitive data key "${g}" stored in AsyncStorage (unencrypted).`,severity:"high",category:"storage",file:u,line:d+1,recommendation:"Use expo-secure-store (SecureStore) for sensitive data instead of AsyncStorage."})}}}return{category:"storage",label:"Insecure Storage",findings:n,durationMs:0}}import mr from"fs";import gr from"path";var Qc=/['"`](http:\/\/(?!localhost|127\.0\.0\.1|10\.|192\.168\.|0\.0\.0\.0|172\.(?:1[6-9]|2\d|3[01])\.)[^'"`\s]+)['"`]/g,py=/\/api\/|\/v[0-9]+\/|\/graphql|\/rest\//i,fy=new Set([".ts",".tsx",".js",".jsx"]),my=new Set(["node_modules",".expo",".git","android","ios","dist","build","__tests__","__mocks__"]);function ed(e){let t=[];if(!mr.existsSync(e))return t;let n=mr.readdirSync(e,{withFileTypes:!0});for(let i of n){if(my.has(i.name))continue;let r=gr.join(e,i.name);i.isDirectory()?t.push(...ed(r)):fy.has(gr.extname(i.name))&&t.push(r)}return t}async function td(e,t){let n=[],i=1,r=gr.join(e,"src"),o=mr.existsSync(r)?r:e,s=ed(o);for(let l of s){let c=mr.readFileSync(l,"utf-8").split(`
-`),u=gr.relative(e,l);for(let d=0;d<c.length;d++){let p=c[d],f=p.trim();if(f.startsWith("//")||f.startsWith("*"))continue;Qc.lastIndex=0;let g;for(;(g=Qc.exec(p))!==null;){let h=g[1],S=py.test(h);n.push({id:`NET-${String(i++).padStart(3,"0")}`,title:`Insecure HTTP URL${S?" (API endpoint)":""}`,description:`Plain HTTP URL found: ${h}`,severity:S?"high":"medium",category:"network",file:u,line:d+1,recommendation:"Use HTTPS instead of HTTP for all network requests."})}}}return{category:"network",label:"HTTP URLs",findings:n,durationMs:0}}import hr from"fs";import yr from"path";var nd=/(?:debug|debugMode|devMode|enableDebug)\s*[:=]\s*true/gi,id=/console\.(?:log|warn|info|debug)\s*\([^)]*(?:token|password|secret|credential|key|auth)/gi,gy=new Set([".ts",".tsx",".js",".jsx"]),hy=new Set(["node_modules",".expo",".git","android","ios","dist","build","__tests__","__mocks__"]);function rd(e){let t=[];if(!hr.existsSync(e))return t;let n=hr.readdirSync(e,{withFileTypes:!0});for(let i of n){if(hy.has(i.name))continue;let r=yr.join(e,i.name);i.isDirectory()?t.push(...rd(r)):gy.has(yr.extname(i.name))&&t.push(r)}return t}async function od(e,t){let n=[],i=1,r=yr.join(e,"src"),o=hr.existsSync(r)?r:e,s=rd(o);for(let l of s){let c=hr.readFileSync(l,"utf-8").split(`
-`),u=yr.relative(e,l);for(let d=0;d<c.length;d++){let p=c[d],f=p.trim();if(!(f.startsWith("//")||f.startsWith("*"))&&(nd.lastIndex=0,nd.test(p)&&n.push({id:`DBG-${String(i++).padStart(3,"0")}`,title:"Hardcoded debug flag",description:"Debug/dev mode enabled in source code",severity:"medium",category:"debug",file:u,line:d+1,recommendation:"Use __DEV__ or environment variables instead of hardcoded debug flags."}),id.lastIndex=0,id.test(p))){let g=c.slice(Math.max(0,d-3),d).join(`
-`);/__DEV__/.test(g)||n.push({id:`DBG-${String(i++).padStart(3,"0")}`,title:"Sensitive data in console log",description:"Console log may expose sensitive data (token, password, etc.) in production",severity:"medium",category:"debug",file:u,line:d+1,recommendation:"Wrap in __DEV__ check or remove sensitive data from console output."})}}}return{category:"debug",label:"Debug/Dev Flags",findings:n,durationMs:0}}import sd from"fs";import Xo from"path";var yy=new Set(["androidx.work.impl.background.systemjob.SystemJobService","androidx.work.impl.diagnostics.DiagnosticsReceiver","com.google.firebase.iid.FirebaseInstanceIdReceiver","com.google.android.gms.auth.api.signin.RevocationBoundService","androidx.profileinstaller.ProfileInstallReceiver","com.google.firebase.messaging.FirebaseMessagingService","com.google.android.gms.measurement.AppMeasurementService","com.google.android.gms.measurement.AppMeasurementJobService"]);function Sy(e){let t=[Xo.join(e,"android","app","src","main","AndroidManifest.xml"),Xo.join(e,"android","AndroidManifest.xml")];for(let n of t)if(sd.existsSync(n))return n;return null}async function ad(e,t){let n=[],i=1,r=Sy(e);if(!r)return{category:"manifest",label:"Android Manifest",findings:[],durationMs:0,error:"No AndroidManifest.xml found. Run with --prebuild or run `expo prebuild` first."};let o=sd.readFileSync(r,"utf-8"),s=Xo.relative(e,r),l=/<(activity|service|receiver|provider)\s+([^>]*?)(?:\/>|>)/gs,a;for(;(a=l.exec(o))!==null;){let c=a[1],u=a[2],p=u.match(/android:name="([^"]+)"/)?.[1]||"unknown";if(yy.has(p))continue;let f=/android:exported="true"/.test(u),g=/android:permission="/.test(u);f&&!g&&n.push({id:`MAN-${String(i++).padStart(3,"0")}`,title:`Exported ${c}: ${p.split(".").pop()}`,description:`${p} is exported=true without android:permission protection`,severity:"medium",category:"manifest",file:s,recommendation:'Set android:exported="false" or add an android:permission attribute.'})}return/android:allowBackup="true"/.test(o)&&n.push({id:`MAN-${String(i++).padStart(3,"0")}`,title:"allowBackup is enabled",description:'android:allowBackup="true" allows data extraction via ADB backup',severity:"medium",category:"manifest",file:s,recommendation:'Set android:allowBackup="false" via expo-build-properties plugin.',autoFixable:!0}),/android:debuggable="true"/.test(o)&&n.push({id:`MAN-${String(i++).padStart(3,"0")}`,title:"App is debuggable",description:'android:debuggable="true" allows attaching a debugger in production',severity:"critical",category:"manifest",file:s,recommendation:"Ensure debuggable is false for production builds. This is usually set automatically for release builds."}),{category:"manifest",label:"Android Manifest",findings:n,durationMs:0}}import Sr from"fs";import Zo from"path";function by(e){let t=Zo.join(e,"ios");if(!Sr.existsSync(t))return null;let n=Sr.readdirSync(t,{withFileTypes:!0});for(let i of n){if(!i.isDirectory()||i.name==="Pods"||i.name.startsWith("."))continue;let r=Zo.join(t,i.name,"Info.plist");if(Sr.existsSync(r))return r}return null}async function ld(e,t){let n=[],i=1,r=by(e);if(!r)return{category:"ats",label:"iOS ATS Config",findings:[],durationMs:0,error:"No Info.plist found. Run with --prebuild or run `expo prebuild` first."};let o=Sr.readFileSync(r,"utf-8"),s=Zo.relative(e,r),l=o.match(/<key>NSAppTransportSecurity<\/key>\s*<dict>([\s\S]*?)<\/dict>/);if(l){let a=l[1];/<key>NSAllowsArbitraryLoads<\/key>\s*<true\s*\/>/.test(a)&&n.push({id:`ATS-${String(i++).padStart(3,"0")}`,title:"ATS disabled \u2014 NSAllowsArbitraryLoads",description:"App Transport Security is completely disabled. All HTTP connections are allowed.",severity:"critical",category:"ats",file:s,recommendation:"Remove NSAllowsArbitraryLoads or set to false. Use domain-specific exceptions only if absolutely necessary."});let c=a.match(/<key>NSExceptionDomains<\/key>\s*<dict>([\s\S]*?)<\/dict>/);if(c){let u=c[1].match(/<key>([^<]+)<\/key>/g);if(u)for(let d of u){let p=d.replace(/<\/?key>/g,"");p!=="NSExceptionDomains"&&n.push({id:`ATS-${String(i++).padStart(3,"0")}`,title:`ATS exception: ${p}`,description:`ATS exception configured for ${p}`,severity:"low",category:"ats",file:s,recommendation:`Verify that the ATS exception for ${p} is necessary. Use HTTPS where possible.`})}}}return{category:"ats",label:"iOS ATS Config",findings:n,durationMs:0}}var Ey=[{category:"permissions",label:"Permission Audit",fn:zc,requiresPrebuild:!1},{category:"secrets",label:"Secrets Detection",fn:Jc,requiresPrebuild:!1},{category:"dependencies",label:"Dependency CVEs",fn:qc,requiresPrebuild:!1},{category:"storage",label:"Insecure Storage",fn:Zc,requiresPrebuild:!1},{category:"network",label:"HTTP URLs",fn:td,requiresPrebuild:!1},{category:"debug",label:"Debug/Dev Flags",fn:od,requiresPrebuild:!1},{category:"manifest",label:"Android Manifest",fn:ad,requiresPrebuild:!0},{category:"ats",label:"iOS ATS Config",fn:ld,requiresPrebuild:!0}];async function pd(e,t){let n=Ey;t.category&&(n=n.filter(s=>s.category===t.category),n.length===0&&(mi.error(qe.red(`Unknown category: ${t.category}`)),mi.info(qe.dim(`Available: ${Object.values(pt).join(", ")}`)),process.exit(1)));let i=n.filter(s=>!s.requiresPrebuild),r=n.filter(s=>s.requiresPrebuild),o=[];for(let s of i){let l=cd();l.start(qe.dim(`Running ${s.label}...`));try{let a=Date.now(),c=await s.fn(e,t);c.durationMs=Date.now()-a,o.push(c);let u=c.findings.length;l.stop(u>0?qe.yellow(`${s.label} \u2014 ${u} finding(s)`):qe.green(`${s.label} \u2014 clean`))}catch(a){l.stop(qe.red(`${s.label} \u2014 error`)),o.push({category:s.category,label:s.label,findings:[],durationMs:0,error:a.message})}}if(r.length>0){let s=ud.join(e,"android"),l=ud.join(e,"ios"),a=dd.existsSync(s)||dd.existsSync(l);if(!a&&t.prebuild){t.json||mi.info(qe.dim(`
-Running expo prebuild for deeper analysis...`));try{Ay("npx expo prebuild --no-install",{cwd:e,stdio:"pipe"})}catch{return mi.warn(qe.yellow("Prebuild failed \u2014 skipping manifest/plist checks.")),o}}else if(!a)return t.json||mi.info(qe.dim(`
-Skipping manifest/plist checks \u2014 no android/ios dirs. Use --prebuild to generate them.`)),o;for(let c of r){let u=cd();u.start(qe.dim(`Running ${c.label}...`));try{let d=Date.now(),p=await c.fn(e,t);p.durationMs=Date.now()-d,o.push(p);let f=p.findings.length;u.stop(f>0?qe.yellow(`${c.label} \u2014 ${f} finding(s)`):qe.green(`${c.label} \u2014 clean`))}catch(d){u.stop(qe.red(`${c.label} \u2014 error`)),o.push({category:c.category,label:c.label,findings:[],durationMs:0,error:d.message})}}}return o}import De from"chalk";import{log as Pe}from"@clack/prompts";var vn={critical:De.bgRed.white.bold,high:De.red.bold,medium:De.yellow.bold,low:De.blue,info:De.dim},br={critical:0,high:1,medium:2,low:3,info:4};function wy(e,t){if(!t)return!0;let n=br[t];return n===void 0?!0:br[e]<=n}function fd(e,t){let n=0,i={critical:0,high:0,medium:0,low:0,info:0};for(let s of e){let l=s.findings.filter(c=>wy(c.severity,t));if(l.length===0&&!s.error)continue;if(Pe.info(""),Pe.info(De.bold(`  ${s.label}`)+De.dim(`  ${l.length} finding(s)`)),Pe.info(De.dim("  "+"\u2500".repeat(60))),s.error){Pe.error(De.red(`  Error: ${s.error}`));continue}let a=[...l].sort((c,u)=>br[c.severity]-br[u.severity]);for(let c of a){let u=vn[c.severity](` ${c.severity.toUpperCase()} `);Pe.info(`  ${u}  ${De.bold(c.id)}  ${c.title}`),Pe.info(De.dim(`          ${c.description}`)),c.file&&Pe.info(De.dim(`          File: ${c.file}${c.line?`:${c.line}`:""}`)),Pe.info(De.cyan(`          Fix: ${c.recommendation}`)),Pe.info(""),i[c.severity]++,n++}}Pe.info(""),Pe.info(De.bold("  Summary")),Pe.info(De.dim("  "+"\u2500".repeat(60))),Pe.info(`  Total: ${De.bold(String(n))} finding(s)`),Pe.info(`  ${vn.critical(` ${i.critical} Critical `)}  ${vn.high(` ${i.high} High `)}  ${vn.medium(` ${i.medium} Medium `)}  ${vn.low(` ${i.low} Low `)}  ${vn.info(` ${i.info} Info `)}`);let r=i.critical>0,o=i.high>0;r||o?(Pe.info(""),Pe.error(De.red.bold(`  FAIL \u2014 ${i.critical} critical, ${i.high} high issue(s) found`))):n>0?(Pe.info(""),Pe.warn(De.yellow("  PASS (with warnings) \u2014 no critical or high issues"))):(Pe.info(""),Pe.success(De.green.bold("  PASS \u2014 no issues found")))}function md(e,t){let n=e.flatMap(r=>r.findings),i={};for(let r of Object.values(nt))i[r]=n.filter(o=>o.severity===r).length;return{version:"1.0.0",timestamp:new Date().toISOString(),project:t.name||"unknown",projectVersion:t.version||"0.0.0",summary:{total:n.length,...i},passed:i.critical===0&&i.high===0,checks:e.map(r=>({category:r.category,label:r.label,findingCount:r.findings.length,durationMs:r.durationMs,error:r.error||null})),findings:n}}import{log as Re,spinner as Iy}from"@clack/prompts";import Ee from"chalk";import Ot from"fs";import vy from"os";import $n from"path";import{execSync as $y}from"child_process";var gd=16384,_y=1,Py=Buffer.from([127,69,76,70]);async function hd(e){Re.info(Ee.bold.underline("16KB Page Alignment Check")),console.log("");let t=$n.resolve(e);if(!Ot.existsSync(t))return Re.error(Ee.red(`APK file not found: ${t}`)),!1;if(!t.endsWith(".apk"))return Re.error(Ee.red("The provided file is not an APK file.")),!1;let n=Iy();n.start("Extracting and analyzing native libraries...");let i=Ot.mkdtempSync($n.join(vy.tmpdir(),"mach-16kb-"));try{try{$y(`unzip -o -q "${t}" "lib/arm64-v8a/*.so" "lib/x86_64/*.so" -d "${i}" 2>/dev/null`,{encoding:"utf-8",maxBuffer:50*1024*1024})}catch{}let r=yd($n.join(i,"lib"));if(r.length===0)return n.stop("Analysis complete."),Re.info(Ee.yellow("No arm64-v8a or x86_64 native libraries found in the APK.")),Re.info(Ee.dim("16KB alignment check only applies to arm64-v8a and x86_64 architectures.")),!0;let o=[];for(let a of r){let c=$n.relative(i,a),u=Oy(c),d=$n.basename(a),p=Ry(a);p!==null&&o.push({name:d,filePath:c,arch:u,align:p,compatible:p>=gd})}if(n.stop("Analysis complete."),o.length===0)return Re.info(Ee.yellow("No valid ELF shared libraries found.")),!0;let s=o.filter(a=>!a.compatible),l=o.filter(a=>a.compatible);if(Re.info(Ee.dim(`Checked ${o.length} native librar${o.length===1?"y":"ies"}
-`)),s.length>0){Re.info(Ee.red.bold(`Incompatible libraries:
-`));for(let a of s)Re.error(Ee.red(`${Ee.bold(a.name)} ${Ee.dim(`(${a.arch})`)}`)),Re.info(Ee.dim(`  PT_LOAD alignment: 2**${Math.log2(a.align)} (${a.align} bytes, needs 2**14 = ${gd})`))}return l.length>0&&(console.log(""),Re.success(Ee.green(`${l.length} librar${l.length===1?"y":"ies"} correctly aligned (2**14 or higher).`))),console.log(""),s.length===0?(Re.success(Ee.green.bold("ELF Verification Successful. APK is 16KB compatible.")),!0):(Re.error(Ee.red.bold(`Found ${s.length} unaligned lib${s.length===1?"":"s"} (arm64-v8a/x86_64 libs need to be aligned).`)),console.log(""),Re.info(Ee.yellow("To fix this:")),Re.info(Ee.dim("  1. Rebuild with NDK r28+ which defaults to 16KB page alignment")),Re.info(Ee.dim("  2. Or set -DANDROID_SUPPORT_FLEXIBLE_PAGE_SIZES=ON in CMake")),Re.info(Ee.dim("  3. Update third-party libraries that ship prebuilt .so files")),Re.info(Ee.dim("  4. After rebuilding: zipalign -p -f -v 16 input.apk output.apk")),console.log(""),Re.info(Ee.dim("Reference: https://developer.android.com/guide/practices/page-sizes")),!1)}catch(r){return n.stop("Analysis failed."),Re.error(Ee.red(`Failed to analyze APK: ${r.message}`)),!1}finally{try{Ot.rmSync(i,{recursive:!0,force:!0})}catch{}}}function Ry(e){let t=Ot.openSync(e,"r");try{let n=Buffer.alloc(64);if(Ot.readSync(t,n,0,64,0),!n.subarray(0,4).equals(Py))return null;let i=n[4]===2,r=n[5]===1,o=(p,f)=>r?p.readUInt16LE(f):p.readUInt16BE(f),s=(p,f)=>r?p.readUInt32LE(f):p.readUInt32BE(f),l=(p,f)=>Number(r?p.readBigUInt64LE(f):p.readBigUInt64BE(f)),a,c,u;i?(a=l(n,32),c=o(n,54),u=o(n,56)):(a=s(n,28),c=o(n,42),u=o(n,44));let d=null;for(let p=0;p<u;p++){let f=Buffer.alloc(c);if(Ot.readSync(t,f,0,c,a+p*c),s(f,0)!==_y)continue;let h;i?h=l(f,48):h=s(f,28),h>0&&(d===null||h<d)&&(d=h)}return d??0}catch{return null}finally{Ot.closeSync(t)}}function yd(e){let t=[];if(!Ot.existsSync(e))return t;let n=Ot.readdirSync(e,{withFileTypes:!0});for(let i of n){let r=$n.join(e,i.name);i.isDirectory()?t.push(...yd(r)):i.name.endsWith(".so")&&t.push(r)}return t}function Oy(e){return e.includes("arm64-v8a")?"arm64-v8a":e.includes("x86_64")?"x86_64":"unknown"}var Ad=async e=>{if(Ue()||(it.error(ft.red(`You are not logged in. Run \`${m.nameLower} login\` first.`)),process.exit(1)),e.apk){await ky(e);return}let n=process.cwd(),i=Ar.join(n,"package.json");gi.existsSync(i)||(it.error(ft.red("No package.json found. Run this command from a project root.")),process.exit(1));let r=JSON.parse(gi.readFileSync(i,"utf-8")),o=!!(r.dependencies?.expo||r.devDependencies?.expo);e.json||(it.info(ft.dim(`Project: ${r.name||"unknown"} v${r.version||"0.0.0"}`)),it.info(ft.dim(`Type: ${o?"Expo":"Bare React Native"}`)),it.info(""));let s={json:e.json,fix:e.fix,category:e.category,severity:e.severity,prebuild:e.prebuild},l=await pd(n,s);e.json?console.log(JSON.stringify(md(l,r),null,2)):fd(l,e.severity);let a=l.some(u=>u.findings.some(d=>d.severity==="critical")),c=l.some(u=>u.findings.some(d=>d.severity==="high"));(a||c)&&process.exit(1)},Sd=["16kb"];async function ky(e){let t=e.category?.toLowerCase();t&&!Sd.includes(t)&&(it.error(ft.red(`Unknown APK check category: "${t}"`)),it.info(ft.dim(`Available APK checks: ${Sd.join(", ")}`)),process.exit(1));let n=await xy(e.apk);n||process.exit(1);let i=!t,r=!1;(i||t==="16kb")&&(await hd(n)||(r=!0)),r&&process.exit(1)}async function xy(e){if(e.startsWith("build:")){let n=e.slice(6);return await Ny(n)}if(e.startsWith("http://")||e.startsWith("https://"))return await Ed(e);let t=Ar.resolve(e);return gi.existsSync(t)?t:(it.error(ft.red(`APK file not found: ${t}`)),null)}async function Ny(e){let t=bd();t.start(`Fetching APK from build ${e}...`);try{let n=await O.get(`/build/${e}`);if(n.data.status!=="success")throw new Error(n.data.message);let i=n.data.build;if(!i)throw new Error("Build not found");let r=i.artifacts?.find(o=>o.type?o.type==="apk":o.name?.endsWith(".apk")||o.url?.includes(".apk"));return!r||!r.url?(t.stop("No APK artifact found"),it.error(ft.red("This build does not have an APK artifact.")),it.info(ft.dim("Make sure the build produced an APK (not just an AAB).")),null):(t.stop(`Found build: ${i.buildId||e}`),await Ed(r.url))}catch(n){return t.stop("Failed to fetch build"),it.error(ft.red(n.message)),null}}async function Ed(e){let t=bd();t.start("Downloading APK...");try{let n=gi.mkdtempSync(Ar.join(Cy.tmpdir(),`${m.nameLower}-audit-`)),i=Ar.join(n,"app.apk"),r=await Dy.get(e,{responseType:"arraybuffer"});gi.writeFileSync(i,r.data);let o=(r.data.length/(1024*1024)).toFixed(1);return t.stop(`Downloaded APK (${o} MB)`),i}catch(n){return t.stop("Download failed"),it.error(ft.red(`Failed to download APK: ${n.message}`)),null}}var My=console.log;console.log=()=>{};Ly();console.log=My;fe(ce.bgCyan.black(m.cliTag("Production Build Orchestrator")));var hi=(e,t=[])=>t.concat(e),J=new Ty;J.name(m.nameLower).description(`${m.name} CLI: Powerful Cloud Infrastructure Tools`).version(ht).option("-y, --yes","Automatically answer yes to all prompts",!1).option("--quiet","Suppress non-essential output",!1);J.command("agent").description("Manage local device discovery agent for the Install Hub (port 7070)").argument("[action]","start, run, install, status, restart, stop, or uninstall","start").action(async e=>{await El(e)});J.command("host").description("Setup AWS S3 static hosting and CloudFront").action(async()=>{fe(ce.bgCyan.black(m.cliTag("Hosting"))),await cs()});J.command("sitemap").description("Generate sitemap.xml from Expo Router app structure").option("-o, --output <path>","Output path for sitemap.xml","./public/sitemap.xml").action(async e=>{fe(ce.bgCyan.black(m.cliTag("Sitemap Generator"))),await fs(e)});J.command("build").description("Run a build on a cloud provider (AWS Spot Instances)").argument("[platform]","Target platform (android, ios)").option("--platform <os>","Target platform alias (android, ios) [Optional]").option("--repo <url>","Git Repository URL").option("--branch <name>","Git Branch").option("--ami <id>","AMI ID").option("--bucket <name>","S3 Bucket for artifacts").option("--region <region>","AWS Region").option("--aws-profile <name>","AWS Credentials Profile").option("-p, --build-profile <name>","Build Profile (e.g. production, staging)").option("--profile <name>","Build Profile (alias for --build-profile)").option("--dry-run","Generate User Data script without launching").option("--keep-instance","Do not terminate the instance after build").option("--subnet <id>","VPC Subnet ID to launch the instance in").option("--security-group <id>","VPC Security Group ID to use").option("--ssh-host <host>","Remote host for iOS build (SSH)").option("--ssh-user <user>","SSH username for remote host").option("--ssh-key <path>","Path to private SSH key for remote host").option("--ios-scheme <scheme>","iOS Scheme to build").option("--ios-team-id <id>","Apple Development Team ID").option("--ios-configuration <config>","Xcode configuration (Release/Debug)").option("--ios-export-method <method>","Export method (ad-hoc, app-store, development, enterprise)").option("--ios-api-key-id <id>","App Store Connect API Key ID").option("--ios-api-key-issuer <id>","App Store Connect API Key Issuer ID").option("--ios-api-key-path <path>","Path to App Store Connect API Key (.p8) file").option("--simulator","Build for iOS Simulator (no signing required)").addOption(new rt("--build-id <id>","Internal build ID").hideHelp()).addOption(new rt("--project-id <id>","Internal project ID").hideHelp()).addOption(new rt("--fail-only","Internal: mark an existing build failed").hideHelp()).addOption(new rt("--error <message>","Internal failure message").hideHelp()).option("--local","Run build on local machine").option("--auto-version","Assign the next Android versionCode or iOS buildNumber from Mach").option("--auto-submit","Submit this build after it completes successfully").option("--submit-track <track>","Google Play track to use with --auto-submit").option("--submit-release-status <status>","Google Play release status to use with --auto-submit").option("--submit-rollout <fraction>","Google Play staged rollout fraction to use with --auto-submit").option("--submit-changes-not-sent-for-review","Commit Google Play changes without automatically sending them for review when using --auto-submit").option("--submit-credential-id <id>","Service credential ID to use with --auto-submit").option("--submit-json-output <path>","Write auto-submit metadata JSON to a file for CI/CD").option("--verbose","Enable verbose logging").option("--json-output <path>","Write build metadata JSON to a file for CI/CD").option("--maestro","Queue a managed Maestro test run after a successful build").option("--maestro-flows <path>","Maestro flow file or directory (default: .maestro)").option("--maestro-device <device>","iOS simulator model or identifier (default: iPhone 17 Pro; managed Android uses Pixel 6)").option("--maestro-retries <n>","Retries for the Maestro run","1").option("--maestro-record","Enable screen recording where supported").option("--maestro-use-build-source","Use Maestro flows from the build source snapshot instead of uploading local flows").option("--maestro-env <name>","Forward an environment variable to the managed Maestro runner; repeat or comma-separate names",hi,[]).option("-y, --yes","Automatically answer yes to all prompts",!1).option("--quiet","Suppress non-essential output",!1).action(async(e,t)=>{let n=J.opts();t.yes=t.yes||n.yes,t.quiet=t.quiet||n.quiet,t.platform=e||t.platform,t.buildProfile=t.profile||t.buildProfile,t.quiet||fe(ce.bgCyan.black(m.cliTag("Cloud Build"))),await Ni(t)});J.command("maestro").description("Run Maestro tests locally or with the managed Mach runner").option("--platform <os>","Target platform (android/ios)").option("-p, --profile <name>","Build profile to resolve when using --latest","production").option("--latest","Use the latest successful build for the platform/profile").option("--build-id <id>","Use a specific Mach build ID").option("--build-url <url>","Use a Mach build URL").option("--artifact-url <url>","Use a direct APK or iOS simulator app artifact URL").option("--local","Run Maestro on a connected local emulator/device instead of the managed runner").option("--maestro-flows <path>","Maestro flow file or directory (default: .maestro)").option("--maestro-device <device>","iOS simulator model or identifier (default: iPhone 17 Pro; managed Android uses Pixel 6)").option("--maestro-retries <n>","Retries for the Maestro run","1").option("--maestro-record","Enable screen recording where supported").option("--maestro-use-build-source","Use Maestro flows from the build source snapshot instead of uploading local flows").option("--maestro-env <name>","Forward an environment variable to the managed Maestro runner; repeat or comma-separate names",hi,[]).option("--wait","Wait for managed Maestro completion and exit non-zero on failure").option("--wait-timeout <minutes>","Maximum minutes to wait for managed Maestro completion","60").option("--wait-interval <seconds>","Polling interval while waiting for managed Maestro completion","15").option("--json-output <path>","Write test run metadata JSON to a file for CI/CD").addOption(new rt("--local-runner","Internal: execute a managed Maestro run on this machine").hideHelp()).addOption(new rt("--test-run-id <id>","Internal test run ID").hideHelp()).addOption(new rt("--project-id <id>","Internal project ID").hideHelp()).addOption(new rt("--runner-token <token>","Internal runner token").hideHelp()).action(async e=>{fe(ce.bgCyan.black(m.cliTag("Maestro Testing"))),await ra(e)});var _n=e=>e.option("--platform <os>","Target platform: ios, android, or all","all").option("--channel <name>","OTA channel (for example: production, staging)").option("--branch <name>","Alias for --channel").option("--runtime-version <version>","Runtime version override").option("--message <text>","Release note/message for this OTA update").option("--framework <name>","Framework override: expo or react-native").option("--engine <name>","OTA engine override (currently expo-updates)").option("--url <url>","Mach OTA update URL override").option("--install-plugin","Install @radhya/mach locally for the Expo config plugin").option("--skip-install","Do not install local Expo plugin dependency").option("--update-id <id>","OTA update id for rollback/promote").option("--json","Print JSON output"),Pn=J.command("ota").description("Setup, publish, verify, and manage Mach OTA updates");_n(Pn.command("setup").description("Configure OTA for this project")).action(async e=>{let t=J.opts();fe(ce.bgCyan.black(m.cliTag("OTA Setup"))),await jt("setup",{...e,yes:e.yes||t.yes})});_n(Pn.command("publish").description("Publish an OTA update")).action(async e=>{let t=J.opts();fe(ce.bgCyan.black(m.cliTag("OTA Publish"))),await jt("publish",{...e,yes:e.yes||t.yes})});_n(Pn.command("verify").description("Verify OTA configuration")).action(async e=>{let t=J.opts();fe(ce.bgCyan.black(m.cliTag("OTA Verify"))),await jt("verify",{...e,yes:e.yes||t.yes})});_n(Pn.command("list").description("List OTA updates for the linked project")).action(async e=>{let t=J.opts();fe(ce.bgCyan.black(m.cliTag("OTA Updates"))),await jt("list",{...e,yes:e.yes||t.yes})});_n(Pn.command("rollback").description("Roll back an OTA update")).action(async e=>{let t=J.opts();fe(ce.bgCyan.black(m.cliTag("OTA Rollback"))),await jt("rollback",{...e,yes:e.yes||t.yes})});_n(Pn.command("promote").description("Promote an OTA update")).action(async e=>{let t=J.opts();fe(ce.bgCyan.black(m.cliTag("OTA Promote"))),await jt("promote",{...e,yes:e.yes||t.yes})});J.command("submit").description("Automated Store Submission (App Store / Google Play)").option("--platform <os>","Target platform (ios/android)").option("-p, --profile <name>","Build/submission profile to submit from (e.g. production, preprod)").option("--track <track>","Google Play Track (internal, alpha, beta, production)").option("--release-status <status>","Google Play release status (completed, draft, halted, inProgress)").option("--rollout <fraction>","Google Play staged rollout fraction for inProgress releases (example: 0.1)").option("--changes-not-sent-for-review","Commit Google Play changes without automatically sending them for review").option("--ssh-host <host>","Remote macOS host for iOS submission").option("--ssh-user <user>","SSH username for remote iOS submission").option("--ssh-key <path>","Path to private SSH key for remote iOS submission").option("--credential-id <id>","Service credential ID to use when multiple submission credentials exist").option("--local","Run submission on this machine (internal runner mode for iOS)").addOption(new rt("--submit-id <id>","Internal submission ID").hideHelp()).addOption(new rt("--project-id <id>","Internal project ID").hideHelp()).addOption(new rt("--package-name <name>","Internal Android package name").hideHelp()).addOption(new rt("--bundle-id <id>","Internal iOS bundle identifier").hideHelp()).option("--json-output <path>","Write submission metadata JSON to a file for CI/CD").option("--latest","Use the latest successful build for submission").option("--build-id <id>","Use a specific build ID for submission").action(async e=>{let t=J.opts();e.quiet=e.quiet||t.quiet,e.yes=e.yes||t.yes,fe(ce.bgCyan.black(m.cliTag("Store Submission"))),await Ri(e)});J.command("login").description(`Login to ${m.name} Dashboard`).action(async()=>{fe(ce.bgCyan.black(m.cliTag("Login"))),await jl()});J.command("logout").description(`Logout from ${m.name} on this machine`).action(async()=>{fe(ce.bgCyan.black(m.cliTag("Logout"))),await Bl()});J.command("link").description(`Link local directory to a ${m.name} Project`).action(async()=>{fe(ce.bgCyan.black(m.cliTag("Link Project"))),await Gl()});J.command("me").description("Display currently logged in user details").action(async()=>{await fc()});J.command("init").description(`Create a new ${m.name} Project`).action(async()=>{fe(ce.bgCyan.black(m.cliTag("Init Project"))),await Vl()});J.command("env").description("Manage Environment Variables").argument("<action>","Action to perform: set, list, pull, download, or export").argument("[args...]","Key=Value pairs for set action").option("-e, --environment <name>","Environment to pull/download","development").option("-o, --out <file>","Output file for pull/download",".env.local").option("--overwrite","Overwrite output file if it already exists").action(async(e,t,n)=>{fe(ce.bgCyan.black(m.cliTag("Env Manager"))),await zl(e,t,n)});J.command("start").description("Start the development server (Metro)").option("-p, --build-profile <name>","Build profile (e.g. development, staging)","development").option("--tunnel","Use ngrok tunnel").option("--lan","Use LAN IP").option("--localhost","Use localhost").option("-c, --clear","Clear Metro cache").option("--port <number>","Port to listen on").option("--ios","Start on iOS").option("--android","Start on Android").option("--web","Start on Web").action(async e=>{fe(ce.bgCyan.black(m.cliTag("Dev Server"))),await gc(e)});var yi=J.command("push").description("Configure and send provider-direct APNs/FCM notifications");yi.command("setup").description("Install and wire a working default push experience").option("--name <name>","Push app display name").option("--ios-bundle <id>","iOS bundle identifier").option("--android-package <name>","Android package name").option("-e, --environment <name>","development, preview, or production").option("--google-services-file <path>","Android google-services.json path").option("--skip-install","Generate setup without installing SDK dependencies").action(Nl);yi.command("init").description("Create only the server-side push app (advanced)").option("--name <name>","Push app display name").option("--ios-bundle <id>","iOS bundle identifier").option("--android-package <name>","Android package name").option("-e, --environment <name>","development, preview, or production","production").option("--google-services-file <path>","Expo Android google-services.json path").action(xl);var Id=yi.command("credentials").description("Configure provider credentials");Id.command("apns").description("Configure an Apple APNs .p8 authentication key").requiredOption("--file <path>","APNs .p8 file").requiredOption("--team-id <id>","Apple Developer team ID").requiredOption("--key-id <id>","APNs key ID").option("--bundle-id <id>","iOS bundle identifier").option("--app <id>","MACH Push app ID").option("-e, --environment <name>","development, preview, or production").action(e=>Ao("apns",e));Id.command("fcm").description("Configure a Firebase service-account JSON file").requiredOption("--file <path>","Firebase service-account JSON").option("--app <id>","MACH Push app ID").option("-e, --environment <name>","development, preview, or production").action(e=>Ao("fcm",e));yi.command("send").description("Queue one transient push notification").requiredOption("--title <text>","Notification title").requiredOption("--body <text>","Notification body").option("--app <id>","MACH Push app ID").option("-e, --environment <name>","development, preview, or production").option("--token <token>","MACH push token; repeatable",hi,[]).option("--user <id>","Application user ID; repeatable",hi,[]).option("--all","Send to all active devices").option("--platform <platform>","Limit --all to ios or android").option("--data <json>","String-to-string custom data JSON").option("--sound <name>","Provider sound name").option("--badge <number>","iOS badge count").option("--ttl <seconds>","Provider time-to-live").option("--collapse-key <key>","Provider collapse key").option("--android-channel-id <id>","Android notification channel").action(Tl);yi.command("status").description("Show aggregate push delivery counters").option("--days <number>","Statistics range, 1-90","30").action(Ll);J.command("config").description("Show resolved configuration for a profile").option("-p, --profile <name>","Build profile to resolve","development").option("--json","Output as JSON").action(async e=>{await hc(e)});var vd=J.command("version").description("Show or seed DB-owned native version counters"),$d=e=>e.requiredOption("--platform <os>","Target platform: ios or android").option("-p, --profile <name>","Build profile used to resolve package/bundle scope","production").option("--scope <value>","Counter scope override, usually package name or bundle identifier").option("--package <name>","Android package override").option("--bundle-id <id>","iOS bundle identifier override").option("--json","Print JSON output");$d(vd.command("show").description("Show the current native version counter")).action(async e=>{fe(ce.bgCyan.black(m.cliTag("Version Counter"))),await qo("show",e)});$d(vd.command("seed").description("Seed the native version counter for an existing app").argument("[value]","Latest already-used value; the next build uses value + 1").option("--value <number>","Latest already-used value; the next build uses value + 1").option("--force","Allow lowering an existing counter")).action(async(e,t)=>{fe(ce.bgCyan.black(m.cliTag("Version Counter"))),await qo("seed",{...t,value:t.value??e})});var _d=J.command("deeplink").description("Configure and verify app links, universal links, and URI schemes");_d.command("setup").description("Generate deep link config, hosted association files, and Expo plugin support").option("--domain <domain>","Associated domain, e.g. app.example.com").option("--base-url <url>","Base URL, e.g. https://app.example.com").option("-p, --profile <name>","Profile used for build/submit overrides").option("--platform <platform>","ios, android, or all").option("--framework <framework>","expo or react-native").option("--scheme <scheme>","URI scheme, e.g. myapp").option("--ios-bundle-id <id>","iOS bundle identifier").option("--android-package <name>","Android package name").option("--apple-team-id <id>","Apple Developer Team ID").option("--app-store-id <id>","App Store app ID for Smart App Banner").option("--android-fingerprint <sha256>","Android SHA256 signing certificate fingerprint; repeatable",hi,[]).option("--output <dir>","Directory for hosted files, e.g. public or deep-links").option("--install-plugin","Install @radhya/mach locally so Expo can use the packaged config plugin").option("--no-install-plugin","Do not install @radhya/mach for Expo projects; use the local plugin fallback if the package is missing").option("-y, --yes","Automatically answer yes to prompts",!1).action(async e=>{let t=J.opts();e.yes=e.yes||t.yes,fe(ce.bgCyan.black(m.cliTag("Deep Links"))),await Uc(e)});_d.command("verify").description("Verify local and optionally live deep link configuration").option("-p, --profile <name>","Profile used for build/submit overrides").option("--live","Check hosted files over HTTPS").option("--android-device","Print Android device verification commands").action(async e=>{fe(ce.bgCyan.black(m.cliTag("Deep Link Verify"))),await Fc(e)});J.command("credentials").description("Unified, interactive credential management (iOS/Android)").option("-p, --profile <name>","Build profile (production, staging, development)").option("--force","Force recreate certificates (nuke existing on Apple Portal)",!1).action(async e=>{let{credentialsMainCommand:t}=await import("./credentials-SOUQOL2C.js");await t(e)});J.command("credentials:setup").description("Automated credential provisioning (iOS/Android) [Legacy]").requiredOption("--platform <os>","Platform: ios or android").option("--profile <name>","Build profile (production, staging, development)").option("--bundle-id <id>","Bundle ID / Package Name (optional, auto-detected)").option("--team-id <id>","Apple Team ID (iOS only)").option("--key-alias <alias>","Android keystore alias (optional, auto-generated)").option("--aws-profile <name>","AWS Credentials Profile (for S3 storage)").option("--force","Force recreate certificates (nuke existing on Apple Portal)",!1).action(async e=>{fe(ce.bgCyan.black(m.cliTag("Credentials Setup"))),await Cn(e),wd(ce.green("Done!"))});J.command("credentials:service").description("Upload Service Credentials (ASC API Key / Google Service JSON) [Legacy]").requiredOption("--platform <os>","Platform: ios or android").option("--file <path>","Path to credential file (.p8 or .json)").option("--issuer-id <id>","ASC API Key Issuer ID (iOS only)").option("--key-id <id>","ASC API Key ID (iOS only)").option("--bundle-id <id>","Bundle identifier / Android package name to attach this service credential to").option("--package-name <name>","Android package name to attach this service credential to").option("-p, --profile <name>","Build profile to resolve package/bundle identifier from config").action(async e=>{fe(ce.bgCyan.black(m.cliTag("Service Credentials"))),await as(e),wd(ce.green("Done!"))});var Qo=J.command("device").description("Manage registered iOS test devices");Qo.command("register").description("Register a connected iOS device or enter UDID manually").option("--udid <udid>","Device UDID (skip auto-detection)").option("--name <name>","Device name").option("--team-id <id>","Apple Developer Team ID for this device").action(async e=>{await dr("register",e)});Qo.command("list").description("List all registered devices").option("--team-id <id>","Filter by Apple Developer Team ID").action(async e=>{await dr("list",e)});Qo.command("remove").description("Remove a registered device").option("--udid <udid>","Device UDID to remove").option("--team-id <id>","Apple Developer Team ID for this device").action(async e=>{await dr("remove",e)});J.command("audit").description("Run automated security audit on the project or APK").option("--apk <path>","Path to APK file (runs APK diagnostics like 16KB alignment)").option("--json","Output results as JSON (for CI/CD)").option("--fix","Auto-apply fixes where possible").option("--category <name>","Run only a specific check category (e.g. 16kb, permissions, secrets)").option("--severity <level>","Minimum severity to display (critical, high, medium, low, info)").option("--prebuild","Run expo prebuild for deeper manifest/plist analysis").action(async e=>{fe(ce.bgCyan.black(m.cliTag(e.apk?"APK Audit":"Security Audit"))),await Ad(e)});var Uy=new Set(["login","logout","agent"]);J.hook("preAction",(e,t)=>{let n=t.name(),i=t.opts?.()||{};n==="maestro"&&(i.local||i.localRunner)||t.parent?.name()!=="deeplink"&&(Uy.has(n)||on())});J.on("command:*",()=>{console.error(`Invalid command: %s
-See --help for a list of available commands.`,J.args.join(" ")),process.exit(1)});process.argv.slice(2).length||J.help();J.parse(process.argv);
+`),"Registered Devices")}catch(i){n.stop(K.red("Failed to fetch devices")),De.error(i.response?.data?.message||i.message)}vn(K.blue("---"))}async function gm(e){let t=e.udid,n=vl(e).teamId;if(!t){let o=wn();o.start("Fetching registered devices...");try{let a=(await $.get("/devices",n?{params:{teamId:n}}:void 0)).data.devices||[];if(o.stop(`${a.length} device(s) found`),a.length===0){De.info(K.dim("No devices to remove.")),vn(K.blue("---"));return}let l=await Il({message:"Select device to remove:",options:a.map(c=>({value:c.deviceKey||c.udid,label:c.name,hint:`${c.udid.substring(0,12)}...${c.teamId?` \xB7 ${c.teamId}`:""}`}))});if(En(l)){In("Cancelled");return}let d=a.find(c=>(c.deviceKey||c.udid)===l);t=d?.udid||l,n=d?.teamId||n}catch(s){o.stop(K.red("Failed to fetch devices")),De.error(s.response?.data?.message||s.message);return}}let i=await dm({message:`Remove device ${K.dim(t.substring(0,12)+"...")}?`});if(En(i)||!i){In("Cancelled");return}let r=wn();r.start("Removing device...");try{await $.delete(`/devices/${encodeURIComponent(t)}`,n?{params:{teamId:n}}:void 0),r.stop(K.green("Device removed"))}catch(o){r.stop(K.red("Failed to remove device")),De.error(o.response?.data?.message||o.message)}vn(K.blue("---"))}async function Ii(e,t){switch(e){case"register":await fm(t);break;case"list":await mm(t);break;case"remove":await gm(t);break;default:De.error(`Unknown action: ${e}`)}}import{log as Ce,spinner as Ql}from"@clack/prompts";import Be from"chalk";import Ti from"path";import Rn from"fs";import Jm from"os";import Ym from"axios";var Pe=(o=>(o.CRITICAL="critical",o.HIGH="high",o.MEDIUM="medium",o.LOW="low",o.INFO="info",o))(Pe||{}),Fe=(l=>(l.PERMISSIONS="permissions",l.SECRETS="secrets",l.DEPENDENCIES="dependencies",l.STORAGE="storage",l.NETWORK="network",l.DEBUG="debug",l.MANIFEST="manifest",l.ATS="ats",l))(Fe||{});import{spinner as Gl,log as $n}from"@clack/prompts";import _e from"chalk";import{execSync as Fm}from"child_process";import Vl from"fs";import zl from"path";import pt from"fs";import _n from"path";import{execSync as hm}from"child_process";var _l={"android.permission.READ_PHONE_STATE":{severity:"high",description:"Can read phone number, IMEI, carrier info"},"android.permission.CALL_PHONE":{severity:"high",description:"Can make calls without user interaction"},"android.permission.SEND_SMS":{severity:"high",description:"Can send SMS without user interaction"},"android.permission.READ_SMS":{severity:"high",description:"Can read user SMS messages"},"android.permission.READ_CONTACTS":{severity:"medium",description:"Can read user contacts"},"android.permission.WRITE_CONTACTS":{severity:"medium",description:"Can modify user contacts"},"android.permission.READ_CALL_LOG":{severity:"high",description:"Can read call history"},"android.permission.CAMERA":{severity:"medium",description:"Camera access"},"android.permission.RECORD_AUDIO":{severity:"medium",description:"Microphone access"},"android.permission.ACCESS_FINE_LOCATION":{severity:"medium",description:"Precise GPS location"},"android.permission.ACCESS_COARSE_LOCATION":{severity:"medium",description:"Approximate location"},"android.permission.ACCESS_BACKGROUND_LOCATION":{severity:"high",description:"Background location tracking"},"android.permission.READ_EXTERNAL_STORAGE":{severity:"medium",description:"Read files on device"},"android.permission.WRITE_EXTERNAL_STORAGE":{severity:"medium",description:"Write files on device"},"android.permission.READ_MEDIA_IMAGES":{severity:"low",description:"Read photos"},"android.permission.READ_MEDIA_VIDEO":{severity:"low",description:"Read videos"},"android.permission.SYSTEM_ALERT_WINDOW":{severity:"high",description:"Draw overlays on other apps"},"android.permission.REQUEST_INSTALL_PACKAGES":{severity:"high",description:"Can install APKs"}},ym={NSCameraUsageDescription:{severity:"medium",description:"Camera access declared"},NSMicrophoneUsageDescription:{severity:"medium",description:"Microphone access declared"},NSLocationWhenInUseUsageDescription:{severity:"medium",description:"Location (in-use) declared"},NSLocationAlwaysUsageDescription:{severity:"high",description:"Background location declared"},NSContactsUsageDescription:{severity:"medium",description:"Contacts access declared"},NSCalendarsUsageDescription:{severity:"low",description:"Calendar access declared"},NSPhotoLibraryUsageDescription:{severity:"low",description:"Photo library access declared"}};function bm(e){try{let n=hm("npx expo config --type introspect --json 2>/dev/null",{cwd:e,encoding:"utf-8",timeout:3e4});return JSON.parse(n)}catch{}let t=_n.join(e,"app.json");if(pt.existsSync(t))try{let n=JSON.parse(pt.readFileSync(t,"utf-8"));return n.expo||n}catch{}return null}function Am(e){let t=[],n=_n.join(e,"node_modules");if(!pt.existsSync(n))return t;let i=/<uses-permission\s+android:name="([^"]+)"/g;function r(o,s){let a=_n.join(o,"android","src","main","AndroidManifest.xml");if(!pt.existsSync(a))return;let l=pt.readFileSync(a,"utf-8"),d;for(;(d=i.exec(l))!==null;)t.push({pkg:s,permission:d[1]});i.lastIndex=0}for(let o of pt.readdirSync(n)){if(o.startsWith("."))continue;let s=_n.join(n,o);if(o.startsWith("@")){if(!pt.statSync(s).isDirectory())continue;for(let a of pt.readdirSync(s))r(_n.join(s,a),`${o}/${a}`)}else r(s,o)}return t}async function $l(e,t){let n=[],i=1,r=bm(e),o=r?.android?.permissions||[],s=r?.android?.blockedPermissions||[];for(let d of o){let c=_l[d];c&&n.push({id:`PERM-${String(i++).padStart(3,"0")}`,title:`${d.split(".").pop()} declared`,description:c.description,severity:c.severity,category:"permissions",file:"app.config.ts",recommendation:"Remove from permissions if not needed, or add justification."})}let a=Am(e);for(let{pkg:d,permission:c}of a){let u=_l[c];u&&(s.includes(c)||o.includes(c)||n.push({id:`PERM-${String(i++).padStart(3,"0")}`,title:`${c.split(".").pop()} injected by ${d}`,description:`${u.description}. Auto-injected via ${d} AndroidManifest.xml`,severity:u.severity,category:"permissions",file:`node_modules/${d}/android/src/main/AndroidManifest.xml`,recommendation:`Add "${c}" to blockedPermissions if not needed.`,autoFixable:!0}))}let l=r?.ios?.infoPlist||{};for(let[d,c]of Object.entries(ym))d in l&&n.push({id:`PERM-${String(i++).padStart(3,"0")}`,title:`iOS: ${d} declared`,description:c.description,severity:c.severity,category:"permissions",file:"app.config.ts",recommendation:`Remove ${d} from infoPlist if the app does not use this capability.`});return{category:"permissions",label:"Permission Audit",findings:n,durationMs:0}}import io from"fs";import wi from"path";var Sm=[{id:"SEC-001",pattern:/(['"`])(?:sk|pk)_(?:live|test)_[a-zA-Z0-9]{20,}\1/g,severity:"critical",label:"Stripe API Key"},{id:"SEC-002",pattern:/(['"`])AIza[0-9A-Za-z\-_]{35}\1/g,severity:"high",label:"Google API Key"},{id:"SEC-003",pattern:/(['"`])AKIA[0-9A-Z]{16}\1/g,severity:"critical",label:"AWS Access Key ID"},{id:"SEC-004",pattern:/-----BEGIN (?:RSA |EC )?PRIVATE KEY-----/g,severity:"critical",label:"Private key in source"},{id:"SEC-005",pattern:/(?:ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9_]{36,}/g,severity:"high",label:"GitHub Token"},{id:"SEC-006",pattern:/xox[bpors]-[a-zA-Z0-9-]{10,}/g,severity:"high",label:"Slack Token"},{id:"SEC-007",pattern:/(?:password|secret|apikey|api_key)\s*[:=]\s*['"`][^'"`\n]{8,}['"`]/gi,severity:"high",label:"Hardcoded credential"}],Em=new Set([".ts",".tsx",".js",".jsx"]),Im=new Set(["node_modules",".expo",".git","android","ios","dist","build","__tests__","__mocks__"]);function Rl(e){let t=[],n=io.readdirSync(e,{withFileTypes:!0});for(let i of n){if(Im.has(i.name))continue;let r=wi.join(e,i.name);i.isDirectory()?t.push(...Rl(r)):Em.has(wi.extname(i.name))&&t.push(r)}return t}function wm(e){let t=e.trim();return t.startsWith("//")||t.startsWith("*")||t.startsWith("/*")}function vm(e){return/process\.env\./i.test(e)||/import\.meta\.env/i.test(e)}async function Ol(e,t){let n=[],i=wi.join(e,"src"),r=io.existsSync(i)?i:e,o=Rl(r);for(let s of o){let l=io.readFileSync(s,"utf-8").split(`
+`),d=wi.relative(e,s);for(let c=0;c<l.length;c++){let u=l[c];if(!wm(u)&&!vm(u))for(let{id:f,pattern:p,severity:g,label:h}of Sm)p.lastIndex=0,p.test(u)&&n.push({id:f,title:h,description:`Potential ${h.toLowerCase()} found in source code`,severity:g,category:"secrets",file:d,line:c+1,recommendation:`Move to environment variables or a secrets manager. Use \`${m.nameLower} env set\` for managed secrets.`})}}return{category:"secrets",label:"Secrets Detection",findings:n,durationMs:0}}import{execSync as _m}from"child_process";var $m={critical:"critical",high:"high",moderate:"medium",low:"low",info:"info"};async function Dl(e,t){let n=[],i=1,r;try{r=_m("npm audit --json 2>/dev/null",{cwd:e,encoding:"utf-8",timeout:6e4})}catch(a){if(r=a.stdout||"",!r)return{category:"dependencies",label:"Dependency CVEs",findings:[],durationMs:0,error:"Failed to run npm audit. Ensure npm is available and dependencies are installed."}}let o;try{o=JSON.parse(r)}catch{return{category:"dependencies",label:"Dependency CVEs",findings:[],durationMs:0,error:"Failed to parse npm audit output."}}let s=o.vulnerabilities||{};for(let[a,l]of Object.entries(s)){let d=$m[l.severity]||"info",c=Array.isArray(l.via)?l.via.map(u=>typeof u=="string"?u:u.title||u.name).join(", "):String(l.via);n.push({id:`DEP-${String(i++).padStart(3,"0")}`,title:`${a} \u2014 ${l.severity}`,description:`Via: ${c}. Range: ${l.range||"unknown"}`,severity:d,category:"dependencies",recommendation:l.fixAvailable?`Run \`npm audit fix\` or update ${a} to a patched version.`:"No fix available yet. Monitor for updates or evaluate alternatives.",autoFixable:!!l.fixAvailable})}return{category:"dependencies",label:"Dependency CVEs",findings:n,durationMs:0}}import vi from"fs";import _i from"path";var Rm=/(?:token|password|credential|secret|apiKey|api_key|session|auth|jwt|refresh_token|access_token|private_key|pin|otp)/i,Pl=/AsyncStorage\s*\.\s*(?:setItem|mergeItem)\s*\(\s*['"`]([^'"`]+)['"`]/g,Om=/from\s+['"]@react-native-async-storage\/async-storage['"]|from\s+['"]react-native['"].*AsyncStorage/,Dm=new Set([".ts",".tsx",".js",".jsx"]),Pm=new Set(["node_modules",".expo",".git","android","ios","dist","build"]);function Cl(e){let t=[];if(!vi.existsSync(e))return t;let n=vi.readdirSync(e,{withFileTypes:!0});for(let i of n){if(Pm.has(i.name))continue;let r=_i.join(e,i.name);i.isDirectory()?t.push(...Cl(r)):Dm.has(_i.extname(i.name))&&t.push(r)}return t}async function Tl(e,t){let n=[],i=1,r=_i.join(e,"src"),o=vi.existsSync(r)?r:e,s=Cl(o);for(let a of s){let l=vi.readFileSync(a,"utf-8");if(!Om.test(l))continue;let d=l.split(`
+`),c=_i.relative(e,a);for(let u=0;u<d.length;u++){let f=d[u];Pl.lastIndex=0;let p;for(;(p=Pl.exec(f))!==null;){let g=p[1];Rm.test(g)&&n.push({id:`STOR-${String(i++).padStart(3,"0")}`,title:`AsyncStorage used for "${g}"`,description:`Sensitive data key "${g}" stored in AsyncStorage (unencrypted).`,severity:"high",category:"storage",file:c,line:u+1,recommendation:"Use expo-secure-store (SecureStore) for sensitive data instead of AsyncStorage."})}}}return{category:"storage",label:"Insecure Storage",findings:n,durationMs:0}}import $i from"fs";import Ri from"path";var kl=/['"`](http:\/\/(?!localhost|127\.0\.0\.1|10\.|192\.168\.|0\.0\.0\.0|172\.(?:1[6-9]|2\d|3[01])\.)[^'"`\s]+)['"`]/g,Cm=/\/api\/|\/v[0-9]+\/|\/graphql|\/rest\//i,Tm=new Set([".ts",".tsx",".js",".jsx"]),km=new Set(["node_modules",".expo",".git","android","ios","dist","build","__tests__","__mocks__"]);function Nl(e){let t=[];if(!$i.existsSync(e))return t;let n=$i.readdirSync(e,{withFileTypes:!0});for(let i of n){if(km.has(i.name))continue;let r=Ri.join(e,i.name);i.isDirectory()?t.push(...Nl(r)):Tm.has(Ri.extname(i.name))&&t.push(r)}return t}async function xl(e,t){let n=[],i=1,r=Ri.join(e,"src"),o=$i.existsSync(r)?r:e,s=Nl(o);for(let a of s){let d=$i.readFileSync(a,"utf-8").split(`
+`),c=Ri.relative(e,a);for(let u=0;u<d.length;u++){let f=d[u],p=f.trim();if(p.startsWith("//")||p.startsWith("*"))continue;kl.lastIndex=0;let g;for(;(g=kl.exec(f))!==null;){let h=g[1],y=Cm.test(h);n.push({id:`NET-${String(i++).padStart(3,"0")}`,title:`Insecure HTTP URL${y?" (API endpoint)":""}`,description:`Plain HTTP URL found: ${h}`,severity:y?"high":"medium",category:"network",file:c,line:u+1,recommendation:"Use HTTPS instead of HTTP for all network requests."})}}}return{category:"network",label:"HTTP URLs",findings:n,durationMs:0}}import Oi from"fs";import Di from"path";var Ll=/(?:debug|debugMode|devMode|enableDebug)\s*[:=]\s*true/gi,Ml=/console\.(?:log|warn|info|debug)\s*\([^)]*(?:token|password|secret|credential|key|auth)/gi,Nm=new Set([".ts",".tsx",".js",".jsx"]),xm=new Set(["node_modules",".expo",".git","android","ios","dist","build","__tests__","__mocks__"]);function Ul(e){let t=[];if(!Oi.existsSync(e))return t;let n=Oi.readdirSync(e,{withFileTypes:!0});for(let i of n){if(xm.has(i.name))continue;let r=Di.join(e,i.name);i.isDirectory()?t.push(...Ul(r)):Nm.has(Di.extname(i.name))&&t.push(r)}return t}async function Fl(e,t){let n=[],i=1,r=Di.join(e,"src"),o=Oi.existsSync(r)?r:e,s=Ul(o);for(let a of s){let d=Oi.readFileSync(a,"utf-8").split(`
+`),c=Di.relative(e,a);for(let u=0;u<d.length;u++){let f=d[u],p=f.trim();if(!(p.startsWith("//")||p.startsWith("*"))&&(Ll.lastIndex=0,Ll.test(f)&&n.push({id:`DBG-${String(i++).padStart(3,"0")}`,title:"Hardcoded debug flag",description:"Debug/dev mode enabled in source code",severity:"medium",category:"debug",file:c,line:u+1,recommendation:"Use __DEV__ or environment variables instead of hardcoded debug flags."}),Ml.lastIndex=0,Ml.test(f))){let g=d.slice(Math.max(0,u-3),u).join(`
+`);/__DEV__/.test(g)||n.push({id:`DBG-${String(i++).padStart(3,"0")}`,title:"Sensitive data in console log",description:"Console log may expose sensitive data (token, password, etc.) in production",severity:"medium",category:"debug",file:c,line:u+1,recommendation:"Wrap in __DEV__ check or remove sensitive data from console output."})}}}return{category:"debug",label:"Debug/Dev Flags",findings:n,durationMs:0}}import Bl from"fs";import ro from"path";var Lm=new Set(["androidx.work.impl.background.systemjob.SystemJobService","androidx.work.impl.diagnostics.DiagnosticsReceiver","com.google.firebase.iid.FirebaseInstanceIdReceiver","com.google.android.gms.auth.api.signin.RevocationBoundService","androidx.profileinstaller.ProfileInstallReceiver","com.google.firebase.messaging.FirebaseMessagingService","com.google.android.gms.measurement.AppMeasurementService","com.google.android.gms.measurement.AppMeasurementJobService"]);function Mm(e){let t=[ro.join(e,"android","app","src","main","AndroidManifest.xml"),ro.join(e,"android","AndroidManifest.xml")];for(let n of t)if(Bl.existsSync(n))return n;return null}async function jl(e,t){let n=[],i=1,r=Mm(e);if(!r)return{category:"manifest",label:"Android Manifest",findings:[],durationMs:0,error:"No AndroidManifest.xml found. Run with --prebuild or run `expo prebuild` first."};let o=Bl.readFileSync(r,"utf-8"),s=ro.relative(e,r),a=/<(activity|service|receiver|provider)\s+([^>]*?)(?:\/>|>)/gs,l;for(;(l=a.exec(o))!==null;){let d=l[1],c=l[2],f=c.match(/android:name="([^"]+)"/)?.[1]||"unknown";if(Lm.has(f))continue;let p=/android:exported="true"/.test(c),g=/android:permission="/.test(c);p&&!g&&n.push({id:`MAN-${String(i++).padStart(3,"0")}`,title:`Exported ${d}: ${f.split(".").pop()}`,description:`${f} is exported=true without android:permission protection`,severity:"medium",category:"manifest",file:s,recommendation:'Set android:exported="false" or add an android:permission attribute.'})}return/android:allowBackup="true"/.test(o)&&n.push({id:`MAN-${String(i++).padStart(3,"0")}`,title:"allowBackup is enabled",description:'android:allowBackup="true" allows data extraction via ADB backup',severity:"medium",category:"manifest",file:s,recommendation:'Set android:allowBackup="false" via expo-build-properties plugin.',autoFixable:!0}),/android:debuggable="true"/.test(o)&&n.push({id:`MAN-${String(i++).padStart(3,"0")}`,title:"App is debuggable",description:'android:debuggable="true" allows attaching a debugger in production',severity:"critical",category:"manifest",file:s,recommendation:"Ensure debuggable is false for production builds. This is usually set automatically for release builds."}),{category:"manifest",label:"Android Manifest",findings:n,durationMs:0}}import Pi from"fs";import oo from"path";function Um(e){let t=oo.join(e,"ios");if(!Pi.existsSync(t))return null;let n=Pi.readdirSync(t,{withFileTypes:!0});for(let i of n){if(!i.isDirectory()||i.name==="Pods"||i.name.startsWith("."))continue;let r=oo.join(t,i.name,"Info.plist");if(Pi.existsSync(r))return r}return null}async function Hl(e,t){let n=[],i=1,r=Um(e);if(!r)return{category:"ats",label:"iOS ATS Config",findings:[],durationMs:0,error:"No Info.plist found. Run with --prebuild or run `expo prebuild` first."};let o=Pi.readFileSync(r,"utf-8"),s=oo.relative(e,r),a=o.match(/<key>NSAppTransportSecurity<\/key>\s*<dict>([\s\S]*?)<\/dict>/);if(a){let l=a[1];/<key>NSAllowsArbitraryLoads<\/key>\s*<true\s*\/>/.test(l)&&n.push({id:`ATS-${String(i++).padStart(3,"0")}`,title:"ATS disabled \u2014 NSAllowsArbitraryLoads",description:"App Transport Security is completely disabled. All HTTP connections are allowed.",severity:"critical",category:"ats",file:s,recommendation:"Remove NSAllowsArbitraryLoads or set to false. Use domain-specific exceptions only if absolutely necessary."});let d=l.match(/<key>NSExceptionDomains<\/key>\s*<dict>([\s\S]*?)<\/dict>/);if(d){let c=d[1].match(/<key>([^<]+)<\/key>/g);if(c)for(let u of c){let f=u.replace(/<\/?key>/g,"");f!=="NSExceptionDomains"&&n.push({id:`ATS-${String(i++).padStart(3,"0")}`,title:`ATS exception: ${f}`,description:`ATS exception configured for ${f}`,severity:"low",category:"ats",file:s,recommendation:`Verify that the ATS exception for ${f} is necessary. Use HTTPS where possible.`})}}}return{category:"ats",label:"iOS ATS Config",findings:n,durationMs:0}}var Bm=[{category:"permissions",label:"Permission Audit",fn:$l,requiresPrebuild:!1},{category:"secrets",label:"Secrets Detection",fn:Ol,requiresPrebuild:!1},{category:"dependencies",label:"Dependency CVEs",fn:Dl,requiresPrebuild:!1},{category:"storage",label:"Insecure Storage",fn:Tl,requiresPrebuild:!1},{category:"network",label:"HTTP URLs",fn:xl,requiresPrebuild:!1},{category:"debug",label:"Debug/Dev Flags",fn:Fl,requiresPrebuild:!1},{category:"manifest",label:"Android Manifest",fn:jl,requiresPrebuild:!0},{category:"ats",label:"iOS ATS Config",fn:Hl,requiresPrebuild:!0}];async function Kl(e,t){let n=Bm;t.category&&(n=n.filter(s=>s.category===t.category),n.length===0&&($n.error(_e.red(`Unknown category: ${t.category}`)),$n.info(_e.dim(`Available: ${Object.values(Fe).join(", ")}`)),process.exit(1)));let i=n.filter(s=>!s.requiresPrebuild),r=n.filter(s=>s.requiresPrebuild),o=[];for(let s of i){let a=Gl();a.start(_e.dim(`Running ${s.label}...`));try{let l=Date.now(),d=await s.fn(e,t);d.durationMs=Date.now()-l,o.push(d);let c=d.findings.length;a.stop(c>0?_e.yellow(`${s.label} \u2014 ${c} finding(s)`):_e.green(`${s.label} \u2014 clean`))}catch(l){a.stop(_e.red(`${s.label} \u2014 error`)),o.push({category:s.category,label:s.label,findings:[],durationMs:0,error:l.message})}}if(r.length>0){let s=zl.join(e,"android"),a=zl.join(e,"ios"),l=Vl.existsSync(s)||Vl.existsSync(a);if(!l&&t.prebuild){t.json||$n.info(_e.dim(`
+Running expo prebuild for deeper analysis...`));try{Fm("npx expo prebuild --no-install",{cwd:e,stdio:"pipe"})}catch{return $n.warn(_e.yellow("Prebuild failed \u2014 skipping manifest/plist checks.")),o}}else if(!l)return t.json||$n.info(_e.dim(`
+Skipping manifest/plist checks \u2014 no android/ios dirs. Use --prebuild to generate them.`)),o;for(let d of r){let c=Gl();c.start(_e.dim(`Running ${d.label}...`));try{let u=Date.now(),f=await d.fn(e,t);f.durationMs=Date.now()-u,o.push(f);let p=f.findings.length;c.stop(p>0?_e.yellow(`${d.label} \u2014 ${p} finding(s)`):_e.green(`${d.label} \u2014 clean`))}catch(u){c.stop(_e.red(`${d.label} \u2014 error`)),o.push({category:d.category,label:d.label,findings:[],durationMs:0,error:u.message})}}}return o}import fe from"chalk";import{log as le}from"@clack/prompts";var Mt={critical:fe.bgRed.white.bold,high:fe.red.bold,medium:fe.yellow.bold,low:fe.blue,info:fe.dim},Ci={critical:0,high:1,medium:2,low:3,info:4};function jm(e,t){if(!t)return!0;let n=Ci[t];return n===void 0?!0:Ci[e]<=n}function Wl(e,t){let n=0,i={critical:0,high:0,medium:0,low:0,info:0};for(let s of e){let a=s.findings.filter(d=>jm(d.severity,t));if(a.length===0&&!s.error)continue;if(le.info(""),le.info(fe.bold(`  ${s.label}`)+fe.dim(`  ${a.length} finding(s)`)),le.info(fe.dim("  "+"\u2500".repeat(60))),s.error){le.error(fe.red(`  Error: ${s.error}`));continue}let l=[...a].sort((d,c)=>Ci[d.severity]-Ci[c.severity]);for(let d of l){let c=Mt[d.severity](` ${d.severity.toUpperCase()} `);le.info(`  ${c}  ${fe.bold(d.id)}  ${d.title}`),le.info(fe.dim(`          ${d.description}`)),d.file&&le.info(fe.dim(`          File: ${d.file}${d.line?`:${d.line}`:""}`)),le.info(fe.cyan(`          Fix: ${d.recommendation}`)),le.info(""),i[d.severity]++,n++}}le.info(""),le.info(fe.bold("  Summary")),le.info(fe.dim("  "+"\u2500".repeat(60))),le.info(`  Total: ${fe.bold(String(n))} finding(s)`),le.info(`  ${Mt.critical(` ${i.critical} Critical `)}  ${Mt.high(` ${i.high} High `)}  ${Mt.medium(` ${i.medium} Medium `)}  ${Mt.low(` ${i.low} Low `)}  ${Mt.info(` ${i.info} Info `)}`);let r=i.critical>0,o=i.high>0;r||o?(le.info(""),le.error(fe.red.bold(`  FAIL \u2014 ${i.critical} critical, ${i.high} high issue(s) found`))):n>0?(le.info(""),le.warn(fe.yellow("  PASS (with warnings) \u2014 no critical or high issues"))):(le.info(""),le.success(fe.green.bold("  PASS \u2014 no issues found")))}function ql(e,t){let n=e.flatMap(r=>r.findings),i={};for(let r of Object.values(Pe))i[r]=n.filter(o=>o.severity===r).length;return{version:"1.0.0",timestamp:new Date().toISOString(),project:t.name||"unknown",projectVersion:t.version||"0.0.0",summary:{total:n.length,...i},passed:i.critical===0&&i.high===0,checks:e.map(r=>({category:r.category,label:r.label,findingCount:r.findings.length,durationMs:r.durationMs,error:r.error||null})),findings:n}}import{log as de,spinner as Hm}from"@clack/prompts";import ie from"chalk";import Ze from"fs";import Gm from"os";import Ut from"path";import{execSync as Vm}from"child_process";var Jl=16384,zm=1,Km=Buffer.from([127,69,76,70]);async function Yl(e){de.info(ie.bold.underline("16KB Page Alignment Check")),console.log("");let t=Ut.resolve(e);if(!Ze.existsSync(t))return de.error(ie.red(`APK file not found: ${t}`)),!1;if(!t.endsWith(".apk"))return de.error(ie.red("The provided file is not an APK file.")),!1;let n=Hm();n.start("Extracting and analyzing native libraries...");let i=Ze.mkdtempSync(Ut.join(Gm.tmpdir(),"mach-16kb-"));try{try{Vm(`unzip -o -q "${t}" "lib/arm64-v8a/*.so" "lib/x86_64/*.so" -d "${i}" 2>/dev/null`,{encoding:"utf-8",maxBuffer:50*1024*1024})}catch{}let r=Xl(Ut.join(i,"lib"));if(r.length===0)return n.stop("Analysis complete."),de.info(ie.yellow("No arm64-v8a or x86_64 native libraries found in the APK.")),de.info(ie.dim("16KB alignment check only applies to arm64-v8a and x86_64 architectures.")),!0;let o=[];for(let l of r){let d=Ut.relative(i,l),c=qm(d),u=Ut.basename(l),f=Wm(l);f!==null&&o.push({name:u,filePath:d,arch:c,align:f,compatible:f>=Jl})}if(n.stop("Analysis complete."),o.length===0)return de.info(ie.yellow("No valid ELF shared libraries found.")),!0;let s=o.filter(l=>!l.compatible),a=o.filter(l=>l.compatible);if(de.info(ie.dim(`Checked ${o.length} native librar${o.length===1?"y":"ies"}
+`)),s.length>0){de.info(ie.red.bold(`Incompatible libraries:
+`));for(let l of s)de.error(ie.red(`${ie.bold(l.name)} ${ie.dim(`(${l.arch})`)}`)),de.info(ie.dim(`  PT_LOAD alignment: 2**${Math.log2(l.align)} (${l.align} bytes, needs 2**14 = ${Jl})`))}return a.length>0&&(console.log(""),de.success(ie.green(`${a.length} librar${a.length===1?"y":"ies"} correctly aligned (2**14 or higher).`))),console.log(""),s.length===0?(de.success(ie.green.bold("ELF Verification Successful. APK is 16KB compatible.")),!0):(de.error(ie.red.bold(`Found ${s.length} unaligned lib${s.length===1?"":"s"} (arm64-v8a/x86_64 libs need to be aligned).`)),console.log(""),de.info(ie.yellow("To fix this:")),de.info(ie.dim("  1. Rebuild with NDK r28+ which defaults to 16KB page alignment")),de.info(ie.dim("  2. Or set -DANDROID_SUPPORT_FLEXIBLE_PAGE_SIZES=ON in CMake")),de.info(ie.dim("  3. Update third-party libraries that ship prebuilt .so files")),de.info(ie.dim("  4. After rebuilding: zipalign -p -f -v 16 input.apk output.apk")),console.log(""),de.info(ie.dim("Reference: https://developer.android.com/guide/practices/page-sizes")),!1)}catch(r){return n.stop("Analysis failed."),de.error(ie.red(`Failed to analyze APK: ${r.message}`)),!1}finally{try{Ze.rmSync(i,{recursive:!0,force:!0})}catch{}}}function Wm(e){let t=Ze.openSync(e,"r");try{let n=Buffer.alloc(64);if(Ze.readSync(t,n,0,64,0),!n.subarray(0,4).equals(Km))return null;let i=n[4]===2,r=n[5]===1,o=(f,p)=>r?f.readUInt16LE(p):f.readUInt16BE(p),s=(f,p)=>r?f.readUInt32LE(p):f.readUInt32BE(p),a=(f,p)=>Number(r?f.readBigUInt64LE(p):f.readBigUInt64BE(p)),l,d,c;i?(l=a(n,32),d=o(n,54),c=o(n,56)):(l=s(n,28),d=o(n,42),c=o(n,44));let u=null;for(let f=0;f<c;f++){let p=Buffer.alloc(d);if(Ze.readSync(t,p,0,d,l+f*d),s(p,0)!==zm)continue;let h;i?h=a(p,48):h=s(p,28),h>0&&(u===null||h<u)&&(u=h)}return u??0}catch{return null}finally{Ze.closeSync(t)}}function Xl(e){let t=[];if(!Ze.existsSync(e))return t;let n=Ze.readdirSync(e,{withFileTypes:!0});for(let i of n){let r=Ut.join(e,i.name);i.isDirectory()?t.push(...Xl(r)):i.name.endsWith(".so")&&t.push(r)}return t}function qm(e){return e.includes("arm64-v8a")?"arm64-v8a":e.includes("x86_64")?"x86_64":"unknown"}var ed=async e=>{if(be()||(Ce.error(Be.red(`You are not logged in. Run \`${m.nameLower} login\` first.`)),process.exit(1)),e.apk){await Xm(e);return}let n=process.cwd(),i=Ti.join(n,"package.json");Rn.existsSync(i)||(Ce.error(Be.red("No package.json found. Run this command from a project root.")),process.exit(1));let r=JSON.parse(Rn.readFileSync(i,"utf-8")),o=!!(r.dependencies?.expo||r.devDependencies?.expo);e.json||(Ce.info(Be.dim(`Project: ${r.name||"unknown"} v${r.version||"0.0.0"}`)),Ce.info(Be.dim(`Type: ${o?"Expo":"Bare React Native"}`)),Ce.info(""));let s={json:e.json,fix:e.fix,category:e.category,severity:e.severity,prebuild:e.prebuild},a=await Kl(n,s);e.json?console.log(JSON.stringify(ql(a,r),null,2)):Wl(a,e.severity);let l=a.some(c=>c.findings.some(u=>u.severity==="critical")),d=a.some(c=>c.findings.some(u=>u.severity==="high"));(l||d)&&process.exit(1)},Zl=["16kb"];async function Xm(e){let t=e.category?.toLowerCase();t&&!Zl.includes(t)&&(Ce.error(Be.red(`Unknown APK check category: "${t}"`)),Ce.info(Be.dim(`Available APK checks: ${Zl.join(", ")}`)),process.exit(1));let n=await Zm(e.apk);n||process.exit(1);let i=!t,r=!1;(i||t==="16kb")&&(await Yl(n)||(r=!0)),r&&process.exit(1)}async function Zm(e){if(e.startsWith("build:")){let n=e.slice(6);return await Qm(n)}if(e.startsWith("http://")||e.startsWith("https://"))return await td(e);let t=Ti.resolve(e);return Rn.existsSync(t)?t:(Ce.error(Be.red(`APK file not found: ${t}`)),null)}async function Qm(e){let t=Ql();t.start(`Fetching APK from build ${e}...`);try{let n=await $.get(`/build/${e}`);if(n.data.status!=="success")throw new Error(n.data.message);let i=n.data.build;if(!i)throw new Error("Build not found");let r=i.artifacts?.find(o=>o.type?o.type==="apk":o.name?.endsWith(".apk")||o.url?.includes(".apk"));return!r||!r.url?(t.stop("No APK artifact found"),Ce.error(Be.red("This build does not have an APK artifact.")),Ce.info(Be.dim("Make sure the build produced an APK (not just an AAB).")),null):(t.stop(`Found build: ${i.buildId||e}`),await td(r.url))}catch(n){return t.stop("Failed to fetch build"),Ce.error(Be.red(n.message)),null}}async function td(e){let t=Ql();t.start("Downloading APK...");try{let n=Rn.mkdtempSync(Ti.join(Jm.tmpdir(),`${m.nameLower}-audit-`)),i=Ti.join(n,"app.apk"),r=await Ym.get(e,{responseType:"arraybuffer"});Rn.writeFileSync(i,r.data);let o=(r.data.length/(1024*1024)).toFixed(1);return t.stop(`Downloaded APK (${o} MB)`),i}catch(n){return t.stop("Download failed"),Ce.error(Be.red(`Failed to download APK: ${n.message}`)),null}}var ng=console.log;console.log=()=>{};tg();console.log=ng;X(J.bgCyan.black(m.cliTag("Production Build Orchestrator")));var On=(e,t=[])=>t.concat(e),M=new eg;M.name(m.nameLower).description(`${m.name} CLI: Powerful Cloud Infrastructure Tools`).version(et).option("-y, --yes","Automatically answer yes to all prompts",!1).option("--quiet","Suppress non-essential output",!1);M.command("agent").description("Manage local device discovery agent for the Install Hub (port 7070)").argument("[action]","start, run, install, status, restart, stop, or uninstall","start").action(async e=>{await ha(e)});M.command("host").description("Setup AWS S3 static hosting and CloudFront").action(async()=>{X(J.bgCyan.black(m.cliTag("Hosting"))),await _o()});M.command("sitemap").description("Generate sitemap.xml from Expo Router app structure").option("-o, --output <path>","Output path for sitemap.xml","./public/sitemap.xml").action(async e=>{X(J.bgCyan.black(m.cliTag("Sitemap Generator"))),await Do(e)});M.command("build").description("Run a build on a cloud provider (AWS Spot Instances)").argument("[platform]","Target platform (android, ios)").option("--platform <os>","Target platform alias (android, ios) [Optional]").option("--repo <url>","Git Repository URL").option("--branch <name>","Git Branch").option("--ami <id>","AMI ID").option("--bucket <name>","S3 Bucket for artifacts").option("--region <region>","AWS Region").option("--aws-profile <name>","AWS Credentials Profile").option("-p, --build-profile <name>","Build Profile (e.g. production, staging)").option("--profile <name>","Build Profile (alias for --build-profile)").option("--dry-run","Generate User Data script without launching").option("--keep-instance","Do not terminate the instance after build").option("--subnet <id>","VPC Subnet ID to launch the instance in").option("--security-group <id>","VPC Security Group ID to use").option("--ssh-host <host>","Remote host for iOS build (SSH)").option("--ssh-user <user>","SSH username for remote host").option("--ssh-key <path>","Path to private SSH key for remote host").option("--ios-scheme <scheme>","iOS Scheme to build").option("--ios-team-id <id>","Apple Development Team ID").option("--ios-configuration <config>","Xcode configuration (Release/Debug)").option("--ios-export-method <method>","Export method (ad-hoc, app-store, development, enterprise)").option("--ios-api-key-id <id>","App Store Connect API Key ID").option("--ios-api-key-issuer <id>","App Store Connect API Key Issuer ID").option("--ios-api-key-path <path>","Path to App Store Connect API Key (.p8) file").option("--simulator","Build for iOS Simulator (no signing required)").addOption(new Te("--build-id <id>","Internal build ID").hideHelp()).addOption(new Te("--project-id <id>","Internal project ID").hideHelp()).addOption(new Te("--fail-only","Internal: mark an existing build failed").hideHelp()).addOption(new Te("--error <message>","Internal failure message").hideHelp()).option("--local","Run build on local machine").option("--auto-version","Assign the next Android versionCode or iOS buildNumber from Mach").option("--auto-submit","Submit this build after it completes successfully").option("--submit-track <track>","Google Play track to use with --auto-submit").option("--submit-release-status <status>","Google Play release status to use with --auto-submit").option("--submit-rollout <fraction>","Google Play staged rollout fraction to use with --auto-submit").option("--submit-changes-not-sent-for-review","Commit Google Play changes without automatically sending them for review when using --auto-submit").option("--submit-credential-id <id>","Service credential ID to use with --auto-submit").option("--submit-json-output <path>","Write auto-submit metadata JSON to a file for CI/CD").option("--verbose","Enable verbose logging").option("--json-output <path>","Write build metadata JSON to a file for CI/CD").option("--maestro","Queue a managed Maestro test run after a successful build").option("--maestro-flows <path>","Maestro flow file or directory (default: .maestro)").option("--maestro-device <device>","iOS simulator model or identifier (default: iPhone 17 Pro; managed Android uses Pixel 6)").option("--maestro-retries <n>","Retries for the Maestro run","1").option("--maestro-record","Enable screen recording where supported").option("--maestro-use-build-source","Use Maestro flows from the build source snapshot instead of uploading local flows").option("--maestro-env <name>","Forward an environment variable to the managed Maestro runner; repeat or comma-separate names",On,[]).option("-y, --yes","Automatically answer yes to all prompts",!1).option("--quiet","Suppress non-essential output",!1).action(async(e,t)=>{let n=M.opts();t.yes=t.yes||n.yes,t.quiet=t.quiet||n.quiet,t.platform=e||t.platform,t.buildProfile=t.profile||t.buildProfile,t.quiet||X(J.bgCyan.black(m.cliTag("Cloud Build"))),await Jn(t)});M.command("maestro").description("Run Maestro tests locally or with the managed Mach runner").option("--platform <os>","Target platform (android/ios)").option("-p, --profile <name>","Build profile to resolve when using --latest","production").option("--latest","Use the latest successful build for the platform/profile").option("--build-id <id>","Use a specific Mach build ID").option("--build-url <url>","Use a Mach build URL").option("--artifact-url <url>","Use a direct APK or iOS simulator app artifact URL").option("--local","Run Maestro on a connected local emulator/device instead of the managed runner").option("--maestro-flows <path>","Maestro flow file or directory (default: .maestro)").option("--maestro-device <device>","iOS simulator model or identifier (default: iPhone 17 Pro; managed Android uses Pixel 6)").option("--maestro-retries <n>","Retries for the Maestro run","1").option("--maestro-record","Enable screen recording where supported").option("--maestro-use-build-source","Use Maestro flows from the build source snapshot instead of uploading local flows").option("--maestro-env <name>","Forward an environment variable to the managed Maestro runner; repeat or comma-separate names",On,[]).option("--wait","Wait for managed Maestro completion and exit non-zero on failure").option("--wait-timeout <minutes>","Maximum minutes to wait for managed Maestro completion","60").option("--wait-interval <seconds>","Polling interval while waiting for managed Maestro completion","15").option("--json-output <path>","Write test run metadata JSON to a file for CI/CD").addOption(new Te("--local-runner","Internal: execute a managed Maestro run on this machine").hideHelp()).addOption(new Te("--test-run-id <id>","Internal test run ID").hideHelp()).addOption(new Te("--project-id <id>","Internal project ID").hideHelp()).addOption(new Te("--runner-token <token>","Internal runner token").hideHelp()).action(async e=>{X(J.bgCyan.black(m.cliTag("Maestro Testing"))),await Qo(e)});var Ft=e=>e.option("--platform <os>","Target platform: ios, android, or all","all").option("--channel <name>","OTA channel (for example: production, staging)").option("--branch <name>","Alias for --channel").option("--runtime-version <version>","Runtime version override").option("--message <text>","Release note/message for this OTA update").option("--framework <name>","Framework override: expo or react-native").option("--engine <name>","OTA engine override (currently expo-updates)").option("--url <url>","Mach OTA update URL override").option("--install-plugin","Install @radhya/mach locally for the Expo config plugin").option("--skip-install","Do not install local Expo plugin dependency").option("--update-id <id>","OTA update id for rollback/promote").option("--json","Print JSON output"),Bt=M.command("ota").description("Setup, publish, verify, and manage Mach OTA updates");Ft(Bt.command("setup").description("Configure OTA for this project")).action(async e=>{let t=M.opts();X(J.bgCyan.black(m.cliTag("OTA Setup"))),await at("setup",{...e,yes:e.yes||t.yes})});Ft(Bt.command("publish").description("Publish an OTA update")).action(async e=>{let t=M.opts();X(J.bgCyan.black(m.cliTag("OTA Publish"))),await at("publish",{...e,yes:e.yes||t.yes})});Ft(Bt.command("verify").description("Verify OTA configuration")).action(async e=>{let t=M.opts();X(J.bgCyan.black(m.cliTag("OTA Verify"))),await at("verify",{...e,yes:e.yes||t.yes})});Ft(Bt.command("list").description("List OTA updates for the linked project")).action(async e=>{let t=M.opts();X(J.bgCyan.black(m.cliTag("OTA Updates"))),await at("list",{...e,yes:e.yes||t.yes})});Ft(Bt.command("rollback").description("Roll back an OTA update")).action(async e=>{let t=M.opts();X(J.bgCyan.black(m.cliTag("OTA Rollback"))),await at("rollback",{...e,yes:e.yes||t.yes})});Ft(Bt.command("promote").description("Promote an OTA update")).action(async e=>{let t=M.opts();X(J.bgCyan.black(m.cliTag("OTA Promote"))),await at("promote",{...e,yes:e.yes||t.yes})});M.command("submit").description("Automated Store Submission (App Store / Google Play)").option("--platform <os>","Target platform (ios/android)").option("-p, --profile <name>","Build/submission profile to submit from (e.g. production, preprod)").option("--track <track>","Google Play Track (internal, alpha, beta, production)").option("--release-status <status>","Google Play release status (completed, draft, halted, inProgress)").option("--rollout <fraction>","Google Play staged rollout fraction for inProgress releases (example: 0.1)").option("--changes-not-sent-for-review","Commit Google Play changes without automatically sending them for review").option("--ssh-host <host>","Remote macOS host for iOS submission").option("--ssh-user <user>","SSH username for remote iOS submission").option("--ssh-key <path>","Path to private SSH key for remote iOS submission").option("--credential-id <id>","Service credential ID to use when multiple submission credentials exist").option("--local","Run submission on this machine (internal runner mode for iOS)").addOption(new Te("--submit-id <id>","Internal submission ID").hideHelp()).addOption(new Te("--project-id <id>","Internal project ID").hideHelp()).addOption(new Te("--package-name <name>","Internal Android package name").hideHelp()).addOption(new Te("--bundle-id <id>","Internal iOS bundle identifier").hideHelp()).option("--json-output <path>","Write submission metadata JSON to a file for CI/CD").option("--latest","Use the latest successful build for submission").option("--build-id <id>","Use a specific build ID for submission").action(async e=>{let t=M.opts();e.quiet=e.quiet||t.quiet,e.yes=e.yes||t.yes,X(J.bgCyan.black(m.cliTag("Store Submission"))),await Vn(e)});M.command("login").description(`Login to ${m.name} Dashboard`).action(async()=>{X(J.bgCyan.black(m.cliTag("Login"))),await Sa()});M.command("logout").description(`Logout from ${m.name} on this machine`).action(async()=>{X(J.bgCyan.black(m.cliTag("Logout"))),await Ea()});M.command("link").description(`Link local directory to a ${m.name} Project`).action(async()=>{X(J.bgCyan.black(m.cliTag("Link Project"))),await wa()});M.command("me").description("Display currently logged in user details").action(async()=>{await Wa()});M.command("init").description(`Create a new ${m.name} Project`).action(async()=>{X(J.bgCyan.black(m.cliTag("Init Project"))),await va()});M.command("env").description("Manage Environment Variables").argument("<action>","Action to perform: set, list, pull, download, or export").argument("[args...]","Key=Value pairs for set action").option("-e, --environment <name>","Environment to pull/download","development").option("-o, --out <file>","Output file for pull/download",".env.local").option("--overwrite","Overwrite output file if it already exists").action(async(e,t,n)=>{X(J.bgCyan.black(m.cliTag("Env Manager"))),await $a(e,t,n)});M.command("start").description("Start the development server (Metro)").option("-p, --build-profile <name>","Build profile (e.g. development, staging)","development").option("--tunnel","Use ngrok tunnel").option("--lan","Use LAN IP").option("--localhost","Use localhost").option("-c, --clear","Clear Metro cache").option("--port <number>","Port to listen on").option("--ios","Start on iOS").option("--android","Start on Android").option("--web","Start on Web").action(async e=>{X(J.bgCyan.black(m.cliTag("Dev Server"))),await Ja(e)});var Dn=M.command("push").description("Configure and send provider-direct APNs/FCM notifications");Dn.command("setup").description("Install and wire a working default push experience").option("--name <name>","Push app display name").option("--ios-bundle <id>","iOS bundle identifier").option("--android-package <name>","Android package name").option("-e, --environment <name>","development, preview, or production").option("--google-services-file <path>","Android google-services.json path").option("--skip-install","Generate setup without installing SDK dependencies").action(Eo);Dn.command("init").description("Create only the server-side push app (advanced)").option("--name <name>","Push app display name").option("--ios-bundle <id>","iOS bundle identifier").option("--android-package <name>","Android package name").option("-e, --environment <name>","development, preview, or production","production").option("--google-services-file <path>","Expo Android google-services.json path").action(So);var id=Dn.command("credentials").description("Configure provider credentials");id.command("apns").description("Configure an Apple APNs .p8 authentication key").requiredOption("--file <path>","APNs .p8 file").requiredOption("--team-id <id>","Apple Developer team ID").requiredOption("--key-id <id>","APNs key ID").option("--bundle-id <id>","iOS bundle identifier").option("--app <id>","MACH Push app ID").option("-e, --environment <name>","development, preview, or production").action(e=>Bi("apns",e));id.command("fcm").description("Configure a Firebase service-account JSON file").requiredOption("--file <path>","Firebase service-account JSON").option("--app <id>","MACH Push app ID").option("-e, --environment <name>","Deprecated; accepted for compatibility because FCM credentials are package-wide").action(e=>Bi("fcm",e));Dn.command("send").description("Queue one transient push notification").requiredOption("--title <text>","Notification title").requiredOption("--body <text>","Notification body").option("--app <id>","MACH Push app ID").option("-e, --environment <name>","development, preview, or production").option("--token <token>","MACH push token; repeatable",On,[]).option("--user <id>","Application user ID; repeatable",On,[]).option("--all","Send to all active devices").option("--platform <platform>","Limit --all to ios or android").option("--data <json>","String-to-string custom data JSON").option("--sound <name>","Provider sound name").option("--badge <number>","iOS badge count").option("--ttl <seconds>","Provider time-to-live").option("--collapse-key <key>","Provider collapse key").option("--android-channel-id <id>","Android notification channel").action(Io);Dn.command("status").description("Show aggregate push delivery counters").option("--days <number>","Statistics range, 1-90","30").action(wo);M.command("config").description("Show resolved configuration for a profile").option("-p, --profile <name>","Build profile to resolve","development").option("--json","Output as JSON").action(async e=>{await Ya(e)});var rd=M.command("version").description("Show or seed DB-owned native version counters"),od=e=>e.requiredOption("--platform <os>","Target platform: ios or android").option("-p, --profile <name>","Build profile used to resolve package/bundle scope","production").option("--scope <value>","Counter scope override, usually package name or bundle identifier").option("--package <name>","Android package override").option("--bundle-id <id>","iOS bundle identifier override").option("--json","Print JSON output");od(rd.command("show").description("Show the current native version counter")).action(async e=>{X(J.bgCyan.black(m.cliTag("Version Counter"))),await no("show",e)});od(rd.command("seed").description("Seed the native version counter for an existing app").argument("[value]","Latest already-used value; the next build uses value + 1").option("--value <number>","Latest already-used value; the next build uses value + 1").option("--force","Allow lowering an existing counter")).action(async(e,t)=>{X(J.bgCyan.black(m.cliTag("Version Counter"))),await no("seed",{...t,value:t.value??e})});var sd=M.command("deeplink").description("Configure and verify app links, universal links, and URI schemes");sd.command("setup").description("Generate deep link config, hosted association files, and Expo plugin support").option("--domain <domain>","Associated domain, e.g. app.example.com").option("--base-url <url>","Base URL, e.g. https://app.example.com").option("-p, --profile <name>","Profile used for build/submit overrides").option("--platform <platform>","ios, android, or all").option("--framework <framework>","expo or react-native").option("--scheme <scheme>","URI scheme, e.g. myapp").option("--ios-bundle-id <id>","iOS bundle identifier").option("--android-package <name>","Android package name").option("--apple-team-id <id>","Apple Developer Team ID").option("--app-store-id <id>","App Store app ID for Smart App Banner").option("--android-fingerprint <sha256>","Android SHA256 signing certificate fingerprint; repeatable",On,[]).option("--output <dir>","Directory for hosted files, e.g. public or deep-links").option("--install-plugin","Install @radhya/mach locally so Expo can use the packaged config plugin").option("--no-install-plugin","Do not install @radhya/mach for Expo projects; use the local plugin fallback if the package is missing").option("-y, --yes","Automatically answer yes to prompts",!1).action(async e=>{let t=M.opts();e.yes=e.yes||t.yes,X(J.bgCyan.black(m.cliTag("Deep Links"))),await bl(e)});sd.command("verify").description("Verify local and optionally live deep link configuration").option("-p, --profile <name>","Profile used for build/submit overrides").option("--live","Check hosted files over HTTPS").option("--android-device","Print Android device verification commands").action(async e=>{X(J.bgCyan.black(m.cliTag("Deep Link Verify"))),await Al(e)});M.command("credentials").description("Unified, interactive credential management (iOS/Android)").option("-p, --profile <name>","Build profile (production, staging, development)").option("--force","Force recreate certificates (nuke existing on Apple Portal)",!1).action(async e=>{let{credentialsMainCommand:t}=await import("./credentials-MVI46MHG.js");await t(e)});M.command("credentials:setup").description("Automated credential provisioning (iOS/Android) [Legacy]").requiredOption("--platform <os>","Platform: ios or android").option("--profile <name>","Build profile (production, staging, development)").option("--bundle-id <id>","Bundle ID / Package Name (optional, auto-detected)").option("--team-id <id>","Apple Team ID (iOS only)").option("--key-alias <alias>","Android keystore alias (optional, auto-generated)").option("--aws-profile <name>","AWS Credentials Profile (for S3 storage)").option("--force","Force recreate certificates (nuke existing on Apple Portal)",!1).action(async e=>{X(J.bgCyan.black(m.cliTag("Credentials Setup"))),await jt(e),nd(J.green("Done!"))});M.command("credentials:service").description("Upload Service Credentials (ASC API Key / Google Service JSON) [Legacy]").requiredOption("--platform <os>","Platform: ios or android").option("--file <path>","Path to credential file (.p8 or .json)").option("--issuer-id <id>","ASC API Key Issuer ID (iOS only)").option("--key-id <id>","ASC API Key ID (iOS only)").option("--bundle-id <id>","Bundle identifier / Android package name to attach this service credential to").option("--package-name <name>","Android package name to attach this service credential to").option("-p, --profile <name>","Build profile to resolve package/bundle identifier from config").action(async e=>{X(J.bgCyan.black(m.cliTag("Service Credentials"))),await Ao(e),nd(J.green("Done!"))});var so=M.command("device").description("Manage registered iOS test devices");so.command("register").description("Register a connected iOS device or enter UDID manually").option("--udid <udid>","Device UDID (skip auto-detection)").option("--name <name>","Device name").option("--team-id <id>","Apple Developer Team ID for this device").action(async e=>{await Ii("register",e)});so.command("list").description("List all registered devices").option("--team-id <id>","Filter by Apple Developer Team ID").action(async e=>{await Ii("list",e)});so.command("remove").description("Remove a registered device").option("--udid <udid>","Device UDID to remove").option("--team-id <id>","Apple Developer Team ID for this device").action(async e=>{await Ii("remove",e)});M.command("audit").description("Run automated security audit on the project or APK").option("--apk <path>","Path to APK file (runs APK diagnostics like 16KB alignment)").option("--json","Output results as JSON (for CI/CD)").option("--fix","Auto-apply fixes where possible").option("--category <name>","Run only a specific check category (e.g. 16kb, permissions, secrets)").option("--severity <level>","Minimum severity to display (critical, high, medium, low, info)").option("--prebuild","Run expo prebuild for deeper manifest/plist analysis").action(async e=>{X(J.bgCyan.black(m.cliTag(e.apk?"APK Audit":"Security Audit"))),await ed(e)});var ig=new Set(["login","logout","agent"]);M.hook("preAction",(e,t)=>{let n=t.name(),i=t.opts?.()||{};n==="maestro"&&(i.local||i.localRunner)||t.parent?.name()!=="deeplink"&&(ig.has(n)||Et())});M.on("command:*",()=>{console.error(`Invalid command: %s
+See --help for a list of available commands.`,M.args.join(" ")),process.exit(1)});process.argv.slice(2).length||M.help();M.parse(process.argv);