@radhya/mach 2.1.3 → 2.1.5

package/dist/index.js

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
-import{a as cn,b as Ze,c as Tn,d as Yt,e as Ie,f as Ve,g as un,h as Xt,i as pn,j as $s,l as Ln}from"./chunk-DX4FCPCX.js";import{a as m,b as ws,c as Ue,d as vs,e as dn,f as xt,g as yt,h as D}from"./chunk-S64YFTRR.js";import{Command as $b,Option as st}from"commander";import{configDotenv as _b}from"dotenv";import{intro as he,outro as qc}from"@clack/prompts";import fe from"chalk";import{text as _s,confirm as iu,spinner as ru,isCancel as Mr,cancel as Mn,note as ou,outro as su}from"@clack/prompts";import Un from"chalk";async function Ps(){try{let e=await _s({message:"Enter Bucket Name:",placeholder:"e.g. my-app-dev",validate(r){if(r.length===0)return"Bucket name is required"}});Mr(e)&&(Mn("Operation cancelled."),process.exit(0));let t=await _s({message:"Enter Region:",initialValue:"ap-south-1"});Mr(t)&&(Mn("Operation cancelled."),process.exit(0));let n=await iu({message:"Do you want to create a CloudFront Distribution for this bucket?",initialValue:!0});Mr(n)&&(Mn("Operation cancelled."),process.exit(0));let i=ru();i.start("Setting up hosting infrastructure...");try{let r=await D.post("/hosting/setup",{bucketName:e,region:t,createCloudFront:n});if(r.data.status!=="success")throw new Error(r.data.message||"Hosting setup failed");i.stop("Hosting setup complete!");let o=r.data,s=`Bucket Name:      ${Un.cyan(o.bucketName)}
-`;s+=`Region:           ${Un.cyan(o.region)}
-`,s+=`S3 Website URL:   ${Un.blue(o.s3WebsiteUrl)}`,o.cloudFrontId&&(s+=`
+import{A as et,B as So,C as Eo,D as Bi,E as Io,F as wo,H as jt,a as ft,b as fo,c as mo,d as Li,e as go,f as ho,g as Cn,h as Tn,i as kn,j as Mi,k as Ui,l as Nn,m as xn,n as yo,o as Fi,p as It,q as wt,r as $e,s as bo,t as mt,u as ce,v as Ie,w as Ln,x as Mn,y as vt,z as Ao}from"./chunk-Y4SNUFBV.js";import{a as m,b as uo,c as be,d as po,e as Et,f as Qe,g as He,h as $}from"./chunk-S64YFTRR.js";import{Command as eg,Option as Te}from"commander";import{configDotenv as tg}from"dotenv";import{intro as X,outro as nd}from"@clack/prompts";import J from"chalk";import{text as vo,confirm as ad,spinner as ld,isCancel as ji,cancel as Ht,note as dd,outro as cd}from"@clack/prompts";import Gt from"chalk";async function _o(){try{let e=await vo({message:"Enter Bucket Name:",placeholder:"e.g. my-app-dev",validate(r){if(r.length===0)return"Bucket name is required"}});ji(e)&&(Ht("Operation cancelled."),process.exit(0));let t=await vo({message:"Enter Region:",initialValue:"ap-south-1"});ji(t)&&(Ht("Operation cancelled."),process.exit(0));let n=await ad({message:"Do you want to create a CloudFront Distribution for this bucket?",initialValue:!0});ji(n)&&(Ht("Operation cancelled."),process.exit(0));let i=ld();i.start("Setting up hosting infrastructure...");try{let r=await $.post("/hosting/setup",{bucketName:e,region:t,createCloudFront:n});if(r.data.status!=="success")throw new Error(r.data.message||"Hosting setup failed");i.stop("Hosting setup complete!");let o=r.data,s=`Bucket Name:      ${Gt.cyan(o.bucketName)}
+`;s+=`Region:           ${Gt.cyan(o.region)}
+`,s+=`S3 Website URL:   ${Gt.blue(o.s3WebsiteUrl)}`,o.cloudFrontId&&(s+=`
 
-CloudFront ID:    ${Un.cyan(o.cloudFrontId)}`,s+=`
-CloudFront URL:   ${Un.blue(o.cloudFrontUrl)}`),ou(s,"Setup Complete!"),su("You are all set!")}catch(r){i.stop("Setup failed"),Mn(`Error: ${r.response?.data?.message||r.message}`)}}catch(e){Mn(`An unexpected error occurred: ${e.message}`)}}import{readdir as au,writeFile as lu,access as du,mkdir as cu}from"fs/promises";import{join as Rs}from"path";import{spinner as uu,text as Cs,isCancel as Os,cancel as Ur,note as pu,outro as fu}from"@clack/prompts";import mu from"chalk";async function gu(){let e=["./app","./src/app"];for(let t of e)try{return await du(t),t}catch{}return null}async function Ds(e){try{let n=await gu()||"./app",i=await Cs({message:"Enter path to your app directory:",placeholder:n,initialValue:n,validate(c){if(c.length===0)return"Path is required"}});Os(i)&&(Ur("Operation cancelled."),process.exit(0));let r=await Cs({message:"Enter your website base URL:",placeholder:"https://example.com",validate(c){if(c.length===0)return"Base URL is required";if(!c.startsWith("http"))return"URL must start with http:// or https://"}});Os(r)&&(Ur("Operation cancelled."),process.exit(0));let o=uu();o.start("Scanning app directory for routes...");let s=await ks(i);o.stop(`Found ${s.length} routes`);let a=hu(s,r),l=e.output||"./public/sitemap.xml";o.start(`Writing sitemap to ${l}...`);let d=l.substring(0,l.lastIndexOf("/"));if(d)try{await cu(d,{recursive:!0})}catch{}await lu(l,a,"utf-8"),o.stop("Sitemap generated successfully!"),pu(`Routes included:
+CloudFront ID:    ${Gt.cyan(o.cloudFrontId)}`,s+=`
+CloudFront URL:   ${Gt.blue(o.cloudFrontUrl)}`),dd(s,"Setup Complete!"),cd("You are all set!")}catch(r){i.stop("Setup failed"),Ht(`Error: ${r.response?.data?.message||r.message}`)}}catch(e){Ht(`An unexpected error occurred: ${e.message}`)}}import{readdir as ud,writeFile as pd,access as fd,mkdir as md}from"fs/promises";import{join as $o}from"path";import{spinner as gd,text as Ro,isCancel as Oo,cancel as Hi,note as hd,outro as yd}from"@clack/prompts";import bd from"chalk";async function Ad(){let e=["./app","./src/app"];for(let t of e)try{return await fd(t),t}catch{}return null}async function Do(e){try{let n=await Ad()||"./app",i=await Ro({message:"Enter path to your app directory:",placeholder:n,initialValue:n,validate(c){if(c.length===0)return"Path is required"}});Oo(i)&&(Hi("Operation cancelled."),process.exit(0));let r=await Ro({message:"Enter your website base URL:",placeholder:"https://example.com",validate(c){if(c.length===0)return"Base URL is required";if(!c.startsWith("http"))return"URL must start with http:// or https://"}});Oo(r)&&(Hi("Operation cancelled."),process.exit(0));let o=gd();o.start("Scanning app directory for routes...");let s=await Po(i);o.stop(`Found ${s.length} routes`);let a=Sd(s,r),l=e.output||"./public/sitemap.xml";o.start(`Writing sitemap to ${l}...`);let d=l.substring(0,l.lastIndexOf("/"));if(d)try{await md(d,{recursive:!0})}catch{}await pd(l,a,"utf-8"),o.stop("Sitemap generated successfully!"),hd(`Routes included:
 ${s.map(c=>`  \u2022 ${c.path}`).join(`
-`)}`,"Sitemap Summary"),fu(`Sitemap saved to ${mu.cyan(l)}`)}catch(t){Ur(`An error occurred: ${t.message}`)}}async function ks(e,t=""){let n=[];try{let i=await au(e,{withFileTypes:!0});for(let r of i){let o=Rs(e,r.name);if(!(r.name.startsWith("_")||r.name.startsWith("."))){if(r.isDirectory()){let s=await ks(o,Rs(t,r.name));n.push(...s)}else if(r.isFile()){if(r.name==="index.tsx"||r.name==="index.ts"||r.name==="index.jsx"||r.name==="index.js"){let s=t===""?"/":`/${t}`;n.push({path:s,file:o})}else if(r.name.match(/\.(tsx|ts|jsx|js)$/)&&!r.name.includes("_layout")&&!r.name.includes("+")){let s=r.name.replace(/\.(tsx|ts|jsx|js)$/,""),a=`/${t}/${s}`.replace(/\/+/g,"/");n.push({path:a,file:o})}}}}}catch(i){throw new Error(`Failed to scan directory ${e}: ${i.message}`)}return n}function hu(e,t){let n=new Date().toISOString().split("T")[0];return`<?xml version="1.0" encoding="UTF-8"?>
+`)}`,"Sitemap Summary"),yd(`Sitemap saved to ${bd.cyan(l)}`)}catch(t){Hi(`An error occurred: ${t.message}`)}}async function Po(e,t=""){let n=[];try{let i=await ud(e,{withFileTypes:!0});for(let r of i){let o=$o(e,r.name);if(!(r.name.startsWith("_")||r.name.startsWith("."))){if(r.isDirectory()){let s=await Po(o,$o(t,r.name));n.push(...s)}else if(r.isFile()){if(r.name==="index.tsx"||r.name==="index.ts"||r.name==="index.jsx"||r.name==="index.js"){let s=t===""?"/":`/${t}`;n.push({path:s,file:o})}else if(r.name.match(/\.(tsx|ts|jsx|js)$/)&&!r.name.includes("_layout")&&!r.name.includes("+")){let s=r.name.replace(/\.(tsx|ts|jsx|js)$/,""),a=`/${t}/${s}`.replace(/\/+/g,"/");n.push({path:a,file:o})}}}}}catch(i){throw new Error(`Failed to scan directory ${e}: ${i.message}`)}return n}function Sd(e,t){let n=new Date().toISOString().split("T")[0];return`<?xml version="1.0" encoding="UTF-8"?>
 <urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
 ${e.map(r=>{let o=r.path;return o=o.replace(/\/\([^)]+\)/g,""),o=o.replace(/\/\[.*?\]/g,"/:id"),o=o.replace(/\/+/g,"/"),o===""&&(o="/"),`  <url>
     <loc>${t}${o}</loc>
@@ -15,7 +15,7 @@ ${e.map(r=>{let o=r.path;return o=o.replace(/\/\([^)]+\)/g,""),o=o.replace(/\/\[
     <priority>0.8</priority>
   </url>`}).join(`
 `)}
-</urlset>`}import{randomUUID as Im}from"crypto";import _e from"path";import Gi from"axios";import wm from"os";import{spinner as Co,select as il,confirm as rl,isCancel as zi,cancel as ol,log as C}from"@clack/prompts";import O from"chalk";import be from"fs";import{execSync as sl}from"child_process";import al from"adm-zip";import{spinner as Pu,log as Di}from"@clack/prompts";import Fs from"chalk";import Bs from"fs";import js from"path";var Ns=`#!/bin/bash
+</urlset>`}import{randomUUID as Su}from"crypto";import ae from"path";import Kn from"axios";import Eu from"os";import{spinner as Ar,select as _s,confirm as $s,isCancel as Wn,cancel as Rs,log as S}from"@clack/prompts";import I from"chalk";import ee from"fs";import{execSync as Os}from"child_process";import Ds from"adm-zip";import{spinner as Ed,log as Un}from"@clack/prompts";import To from"chalk";import ko from"fs";import No from"path";var Co=`#!/bin/bash
 # --- Mach Cloud Build Script (Android) ---
 # All S3 operations use presigned URLs via curl \u2014 zero AWS credentials on instance.
 BUILD_ID="{{BUILD_ID}}"
@@ -689,119 +689,15 @@ for pid in "\${cache_pids[@]}"; do wait "$pid" || true; done
 echo "Build orchestrator finished. Auto-terminating instance in 5 seconds..."
 sleep 5
 sudo shutdown -h now
-`;import Iu from"crypto";import{log as Ge}from"@clack/prompts";import ze from"chalk";import{execSync as yu}from"child_process";import Ke from"fs";import fn from"path";var xs={id:"expo",displayName:"Expo",applyLocalProcessEnv:e=>{e.developmentClient?(Ge.info(ze.blue("\u2139\uFE0F  Configuring Expo build to INCLUDE expo-dev-client (Development Client mode)...")),delete process.env.EXPO_NO_DEV_CLIENT,delete process.env.EXPO_AUTOLINKING_EXCLUDE):(Ge.info(ze.blue("\u2139\uFE0F  Configuring Expo build to EXCLUDE expo-dev-client (Production/Staging mode)...")),process.env.EXPO_NO_DEV_CLIENT="1",process.env.EXPO_AUTOLINKING_EXCLUDE="expo-dev-client")},localAndroidEnv:(e,t)=>({EXPO_NO_DOTENV:"1",MACH_FRAMEWORK:"expo",MACH_BUILD_PROFILE:t}),remoteEnvSetupScript:()=>`
-export MACH_FRAMEWORK="expo"
-echo "[ENV] MACH_FRAMEWORK=$MACH_FRAMEWORK"
-export EXPO_NO_DOTENV="\${EXPO_NO_DOTENV:-1}"
-echo "[ENV] EXPO_NO_DOTENV=$EXPO_NO_DOTENV"
-`,iosRemotePrebuildScript:()=>`
-echo "[STEP_START:prebuild] $(date +%s)"
-echo "Expo framework configured. Running prebuild..."
-# Use --no-install so we can patch the Podfile before pod install.
-CI=1 npx expo prebuild --platform ios --clean --no-install
-`,androidRemoteVersionCodeScript:()=>`
-if [ ! -z "$ANDROID_VERSION_CODE" ]; then
-  node -e "const fs=require('fs');const p='app.json';if(fs.existsSync(p)){const j=JSON.parse(fs.readFileSync(p,'utf8'));j.expo=j.expo||{};j.expo.android=j.expo.android||{};j.expo.android.versionCode=Number(process.env.ANDROID_VERSION_CODE);fs.writeFileSync(p,JSON.stringify(j,null,2));console.log('[VERSIONING] app.json expo.android.versionCode updated');}"
-fi
-`,androidRemotePrebuildScript:()=>`
-# Compute a hash of native-affecting files and the Mach-injected app env to
-# decide if android/ cache is still valid. Env names are project-defined, so the
-# CLI precomputes MACH_ENV_FINGERPRINT from all relevant managed values.
-if [ -f "app.json" ] || [ -f "app.config.ts" ] || [ -f "app.config.js" ]; then
-  PREBUILD_HASH_FILE="/home/ubuntu/build/.mach-prebuild-hash"
-  PREBUILD_ENV_HASH="\${MACH_ENV_FINGERPRINT:-missing-env-fingerprint}"
-  PREBUILD_CURRENT_HASH=$(
-    {
-      cat app.json app.config.ts app.config.js 2>/dev/null
-      node -e "try{const p=require('./package.json');const keys=Object.keys({...p.dependencies,...p.devDependencies}).filter(k=>k.startsWith('expo-')||k.startsWith('@expo/')||k.startsWith('@react-native'));console.log(keys.join(','))}catch(e){}" 2>/dev/null
-      printf '%s\\n' "$PREBUILD_ENV_HASH"
-    } | md5sum | cut -d' ' -f1
-  )
-
-  ANDROID_CACHE_VALID=false
-  if [ -f "$PREBUILD_HASH_FILE" ] && [ -d "android" ] && [ -f "android/gradlew" ]; then
-    STORED_HASH=$(cat "$PREBUILD_HASH_FILE" 2>/dev/null)
-    if [ "$PREBUILD_CURRENT_HASH" = "$STORED_HASH" ]; then
-      ANDROID_CACHE_VALID=true
-      echo "[PREBUILD] android/ cache is valid (hash match) \u2014 skipping expo prebuild."
-    fi
-  fi
-
-  if [ "$ANDROID_CACHE_VALID" = "false" ]; then
-    echo "[PREBUILD] Running expo prebuild..."
-    if [ -f "node_modules/.bin/expo" ]; then
-      node_modules/.bin/expo prebuild --platform android --no-install
-    else
-      npx expo prebuild --platform android --no-install
-    fi
-    echo "$PREBUILD_CURRENT_HASH" > "$PREBUILD_HASH_FILE"
-  fi
-fi
-`,androidRemoteGradlePropertiesScript:()=>`
-echo "expo.enableHermes=true" >> gradle.properties
-`,androidRemoteReleaseGradlePropertiesScript:()=>`
-echo "expo.enableProguardInReleaseBuilds=true" >> gradle.properties
-`,prepareLocalProject:async e=>{let{platform:t,options:n,cacheMeta:i,cacheMetaDir:r,currentBuildEnv:o,reportStep:s,loggedRun:a,configureXcodeNodeBinary:l,podsFingerprint:d,writeCacheMeta:c}=e,u=n.iosBundleIdentifier||"",f=n.name||"",p=fn.join(process.cwd(),"app.json"),y=null;Ge.info(ze.blue(`Running Expo prebuild for ${t}...`));try{if(Ke.existsSync(p)){y=Ke.readFileSync(p,"utf-8");let h=JSON.parse(y);h.expo=h.expo||{},f||(f=h.expo.name||""),t==="ios"&&!u&&(u=h.expo?.ios?.bundleIdentifier||""),n.name&&(h.expo.name=n.name),n.scheme&&(h.expo.scheme=n.scheme),t==="ios"&&n.iosBundleIdentifier?(h.expo.ios=h.expo.ios||{},h.expo.ios.bundleIdentifier=n.iosBundleIdentifier):t==="android"&&n.androidPackage&&(h.expo.android=h.expo.android||{},h.expo.android.package=n.androidPackage),Ke.writeFileSync(p,JSON.stringify(h,null,2))}let g=["exec","--","expo","prebuild","--platform",t,"--no-install"];if(await s("prebuild"),await a("npm",g,process.cwd(),o()),t!=="ios"||!Ke.existsSync("ios"))return{appName:f,bundleId:u};await s("pods"),Ge.info(ze.blue("Running pod install..."));try{let h=fn.resolve("ios"),S=fn.join(h,"Podfile");if(!Ke.existsSync(S))throw new Error("ios/Podfile not found. Skipping pod install.");let b=o();l(h,b);let _=Ke.readFileSync(S,"utf-8"),w=n.iosDeploymentTarget||"13.4";if(!n.developmentClient&&(Ge.info(ze.blue("\u2139\uFE0F  Patching Podfile to EXCLUDE expo-dev-client...")),_.includes("use_expo_modules!")&&!_.includes("exclude:"))){let R=/use_expo_modules!(\s*)$/m;R.test(_)?_=_.replace(R,'use_expo_modules!(exclude: ["expo-dev-client"])$1'):_=_.replace("use_expo_modules!",'use_expo_modules!(exclude: ["expo-dev-client"])')}let T=`
-      installer.generated_projects.each do |project|
-        project.targets.each do |target|
-          target.build_configurations.each do |config|
-            config.build_settings['IPHONEOS_DEPLOYMENT_TARGET'] = '${w}'
-          end
-        end
-      end
-      installer.pods_project.targets.each do |target|
-        target.build_configurations.each do |config|
-          config.build_settings['IPHONEOS_DEPLOYMENT_TARGET'] = '${w}'
-        end
-      end
-`,B=/post_install\s+do\s+\|installer\|/;if(B.test(_))Ge.info(ze.dim(`Injecting deployment target (${w}) into existing post_install hook...`)),_=_.replace(B,`post_install do |installer|
-${T}`),Ke.writeFileSync(S,_);else{Ge.info(ze.dim(`Appending new post_install hook for deployment target (${w})...`));let R=`
-post_install do |installer|
-${T}
-end
-`;Ke.appendFileSync(S,R)}let X="/opt/homebrew/bin/pod",U=Ke.existsSync(X)?X:"pod",K=d(h);Ke.existsSync(fn.join(h,"Pods"))&&i.pods&&i.pods!==K&&(await e.reportLog(`[CACHE] Podfile/Podfile.lock changed \u2014 wiping ios/Pods
-`),Ge.info(ze.dim("Podfile fingerprint changed \u2014 clearing Pods for clean install...")),Ke.rmSync(fn.join(h,"Pods"),{recursive:!0,force:!0})),Ge.info(ze.dim(`Using pod command: ${U} in ${h}`)),await a(U,["install"],h,b),i.pods=K,c(r,i)}catch(h){let S=h.message||"Unknown error";Ge.warn(ze.yellow(`Native "pod" command failed: ${S}`)),Ge.info(ze.dim("Falling back to npm exec pod-install..."));let b=o();l(fn.resolve("ios"),b),Ge.info(ze.magenta(`${m.nameUpper}_DEBUG: Executing pod-install override via npx --yes pod-install@latest`)),await a("npx",["--yes","pod-install@latest","ios"],process.cwd(),b)}if(Ke.existsSync("ios/Pods")){Ge.info(ze.dim("Disabling signing for Pod targets to prevent conflicts..."));try{yu(`find ios/Pods -name "project.pbxproj" -exec sed -i '' 's/buildSettings = {/buildSettings = { CODE_SIGNING_ALLOWED = NO; CODE_SIGNING_REQUIRED = NO; PROVISIONING_PROFILE_SPECIFIER = ""; EXPANDED_CODE_SIGN_IDENTITY = "";/g' {} +`,{stdio:"ignore"})}catch{}}return{appName:f,bundleId:u}}finally{y&&Ke.writeFileSync(p,y)}}};import{log as Lt}from"@clack/prompts";import Mt from"chalk";import wt from"fs";import Fn from"path";import{spawnSync as bu}from"child_process";import It from"fs";import Tt from"path";var Ts=(e,t)=>Tt.join(e,"node_modules",".bin",process.platform==="win32"?`${t}.cmd`:t),Su=e=>{try{return JSON.parse(It.readFileSync(Tt.join(e,"package.json"),"utf-8"))}catch{return{}}};function Zt(e,t){let n=Su(e);return!!(n.dependencies?.[t]||n.devDependencies?.[t])}function Fr(e,t,n,i={}){let r=`${t} ${n.join(" ")}`,o=bu(t,n,{cwd:e,stdio:"inherit",env:{...process.env,CI:process.env.CI||"1",EXPO_NO_TELEMETRY:"1",...i}});return o.error?{ok:!1,command:r,error:o.error.message}:o.status!==0?{ok:!1,command:r,error:`${t} exited with code ${o.status}`}:{ok:!0,command:r}}function Ls(e){return Fr(e,"npx",["--yes","install-expo-modules@latest"])}function Ms(e){let t=Ts(e,"expo");return It.existsSync(t)?Fr(e,t,["install","expo-updates"]):{ok:!1,command:"npx expo install expo-updates",error:"Expo Modules are not installed. Install Expo Modules first."}}function Br(e){let t=[];return It.existsSync(Tt.join(e,"ios"))&&t.push("ios"),It.existsSync(Tt.join(e,"android"))&&t.push("android"),t}function Oi(e){let t=Ts(e.cwd,"expo-updates");return It.existsSync(t)?e.platforms.map(n=>Fr(e.cwd,t,["configuration:syncnative","--platform",n,"--workflow","generic"],{MACH_OTA_RUNTIME_VERSION:e.runtimeVersion,MACH_OTA_CHANNEL:e.channel,MACH_OTA_URL:e.url})):[{ok:!1,command:"expo-updates configuration:syncnative",error:"expo-updates is not installed in this project."}]}function Us(e){let t=Tt.join(e,"android","app","src","main","AndroidManifest.xml"),n=Tt.join(e,"android","app","src","main","res","values","strings.xml"),i,r=Tt.join(e,"ios");if(It.existsSync(r)){let o=[r];for(;o.length>0&&!i;){let s=o.shift();for(let a of It.readdirSync(s,{withFileTypes:!0})){if(a.name==="Pods"||a.name==="build")continue;let l=Tt.join(s,a.name);if(a.isDirectory())o.push(l);else if(a.isFile()&&a.name==="Expo.plist"){i=l;break}}}}return{...It.existsSync(t)?{androidManifest:t}:{},...It.existsSync(n)?{androidStrings:n}:{},...i?{iosExpoPlist:i}:{}}}var Au=(e,t)=>!wt.existsSync(e)||!wt.existsSync(t)?!1:wt.readFileSync(e,"utf-8")!==wt.readFileSync(t,"utf-8"),jr={id:"react-native",displayName:"React Native",applyLocalProcessEnv:e=>{delete process.env.EXPO_NO_DEV_CLIENT,delete process.env.EXPO_AUTOLINKING_EXCLUDE,delete process.env.EXPO_NO_DOTENV},localAndroidEnv:(e,t)=>({MACH_FRAMEWORK:"react-native",MACH_BUILD_PROFILE:t}),remoteEnvSetupScript:()=>`
-export MACH_FRAMEWORK="react-native"
-echo "[ENV] MACH_FRAMEWORK=$MACH_FRAMEWORK"
-unset EXPO_NO_DOTENV
-`,iosRemotePrebuildScript:()=>`
-echo "[STEP_START:prebuild] $(date +%s)"
-echo "[PREBUILD] React Native framework configured. Skipping Expo prebuild."
-if [ -n "\${MACH_OTA_RUNTIME_VERSION:-}" ]; then
-  if [ ! -x node_modules/.bin/expo-updates ]; then
-    echo "[OTA] expo-updates is missing. Run mach ota setup and commit the dependency changes."
-    exit 1
-  fi
-  echo "[OTA] Synchronizing iOS Expo Updates runtime $MACH_OTA_RUNTIME_VERSION"
-  node_modules/.bin/expo-updates configuration:syncnative --platform ios --workflow generic
-fi
-`,androidRemoteVersionCodeScript:()=>`
-echo "[VERSIONING] React Native framework configured. Version code will be injected through Gradle."
-`,androidRemotePrebuildScript:()=>`
-echo "[PREBUILD] React Native framework configured. Skipping Expo prebuild."
-if [ -n "\${MACH_OTA_RUNTIME_VERSION:-}" ]; then
-  if [ ! -x node_modules/.bin/expo-updates ]; then
-    echo "[OTA] expo-updates is missing. Run mach ota setup and commit the dependency changes."
-    exit 1
-  fi
-  echo "[OTA] Synchronizing Android Expo Updates runtime $MACH_OTA_RUNTIME_VERSION"
-  node_modules/.bin/expo-updates configuration:syncnative --platform android --workflow generic
-fi
-`,androidRemoteGradlePropertiesScript:()=>`
-:
-`,androidRemoteReleaseGradlePropertiesScript:()=>`
-:
-`,prepareLocalProject:async e=>{let{platform:t,cacheMeta:n,cacheMetaDir:i,currentBuildEnv:r,reportStep:o,reportLog:s,loggedRun:a,configureXcodeNodeBinary:l,podsFingerprint:d,writeCacheMeta:c}=e,u=r(),f=u.MACH_OTA_RUNTIME_VERSION,p=u.MACH_OTA_CHANNEL,y=u.MACH_OTA_URL;if(f&&p&&y){let v=Oi({cwd:process.cwd(),platforms:[t],runtimeVersion:f,channel:p,url:y}).find(R=>!R.ok);if(v)throw new Error(`Could not synchronize ${t} Expo Updates configuration: ${v.error||v.command}. Run \`mach ota setup --platform ${t}\` and try again.`);Lt.info(Mt.green(`\u2713 OTA runtime ${f} synchronized for ${t}`))}if(t!=="ios")return{};let g=Fn.resolve("ios"),h=Fn.join(g,"Podfile");if(!wt.existsSync(h))throw new Error("React Native iOS build requires ios/Podfile. Commit the ios directory for vanilla React Native projects.");await o("pods"),Lt.info(Mt.blue("Running React Native pod install..."));let S=r();l(g,S);let b=Fn.join(g,"Pods"),_=Fn.join(g,"Podfile.lock"),w=Fn.join(b,"Manifest.lock"),T=wt.existsSync(b),B=d(g);T&&n.reactNativePods&&n.reactNativePods!==B?(await s(`[CACHE] React Native Podfile/Podfile.lock changed - wiping ios/Pods
-`),Lt.info(Mt.dim("React Native Podfile fingerprint changed - clearing Pods for clean install...")),wt.rmSync(b,{recursive:!0,force:!0})):T&&Au(_,w)&&(await s(`[CACHE] React Native Pods Manifest.lock is out of sync - wiping ios/Pods
-`),Lt.info(Mt.dim("React Native Pods manifest is out of sync - clearing Pods for clean install...")),wt.rmSync(b,{recursive:!0,force:!0}));let X="/opt/homebrew/bin/pod",U=wt.existsSync(X)?X:"pod";try{Lt.info(Mt.dim(`Using pod command: ${U} in ${g}`)),await a(U,["install"],g,S)}catch(K){let v=K.message||"Unknown error";Lt.warn(Mt.yellow(`Native "pod" command failed: ${v}`)),Lt.info(Mt.dim("Falling back to npx pod-install..."));let R=r();l(g,R),Lt.info(Mt.magenta(`${m.nameUpper}_DEBUG: Executing pod-install fallback via npx --yes pod-install@latest`)),await a("npx",["--yes","pod-install@latest","ios"],process.cwd(),R)}return n.reactNativePods=d(g),c(i,n),{}}};var Eu={expo:xs,"react-native":jr};function vt(e){if(!e)return jr;if(e!=="flutter")return Eu[e];throw new Error('Flutter builds are not implemented yet. Set framework to "expo" or "react-native" for this build.')}var wu="mach-env-v2-js-bundle-cache",vu=new Set(["BUILD_ID","BUILD_NUMBER","ANDROID_VERSION_CODE","MACH_TOKEN","MACH_DEBUG","MACH_S3_DEBUG","MACH_ENV_FINGERPRINT","CODEARTIFACT_AUTH_TOKEN","EXPO_ZQRN_BB_REPO_TOKEN","SENTRY_AUTH_TOKEN","IOS_DIST_P12","IOS_PROVISIONING_PROFILE","IOS_P12_PASSWORD","MATCH_ENCRYPTION_PASSPHRASE","MATCH_PASSWORD","MATCH_KEYCHAIN_NAME","MATCH_KEYCHAIN_PASSWORD","APPLE_TEAM_ID","FASTLANE_TEAM_ID","ANDROID_KEYSTORE","ANDROID_KEYSTORE_BASE64","ANDROID_STORE_PASSWORD","ANDROID_KEY_PASSWORD","ANDROID_KEY_ALIAS","KEYSTORE_PASSWORD","KEYSTORE_ALIAS","AWS_ACCESS_KEY_ID","AWS_SECRET_ACCESS_KEY","AWS_SESSION_TOKEN","AWS_SECURITY_TOKEN","GITHUB_TOKEN","NPM_TOKEN"]),$u=["PRESIGNED_","KEYSTORE_PASSWORD_"],_u=e=>!e||vu.has(e)?!1:!$u.some(t=>e.startsWith(t)),Qt=(e,t,n)=>{let i=vt(n.framework);return{...e,...i.localAndroidEnv(n,t),MACH_APP_NAME:n.appName||n.name||"App"}},mn=e=>{let t=Object.entries(e).filter(([n])=>_u(n)).sort(([n],[i])=>n.localeCompare(i));return Iu.createHash("sha256").update(JSON.stringify({version:wu,entries:t})).digest("hex")};var Hr=e=>e.replace(/\\/g,"\\\\").replace(/"/g,'\\"').replace(/\$/g,"\\$").replace(/`/g,"\\`"),Vr=e=>["1","true","yes","on"].includes(String(e||"").trim().toLowerCase()),Ru=e=>/(^|[-_])(maestro|e2e|test|emulator)([-_]|$)/i.test(e),Cu=(e,t,n)=>{let i=n.MACH_ANDROID_RELEASE_ABIS||n.MACH_ANDROID_ABIS||n.MACH_PROFILE_ANDROID_RELEASE_ABIS||n.MACH_PROFILE_ANDROID_ABIS||n.MACH_PROFILE_ANDROID_ARCHITECTURES||n.MACH_PROFILE_ANDROID_REACT_NATIVE_ARCHITECTURES;return i||(!!e.maestro||Ru(t)||Vr(n.MACH_PROFILE_ANDROID_EMULATOR)||Vr(n.MACH_ANDROID_INCLUDE_EMULATOR_ABIS)||Vr(n.MACH_PROFILE_ANDROID_INCLUDE_EMULATOR_ABIS)?"armeabi-v7a,arm64-v8a,x86_64":"armeabi-v7a,arm64-v8a")},Hs=async(e,t,n={},i,r)=>{let o=Pu(),s=vt(e.framework),a=e.buildProfile||"production",l=a==="production",d=e.apk===!0,c=e.developmentClient?"assembleDebug":l?"bundleRelease":"assembleRelease",u=e.buildCommand||(d?"assembleRelease":c),f=e.nodeVersion?[`echo "[NODE] Switching to Node ${e.nodeVersion}..."`,`CURRENT_MAJOR=$(node -e "process.stdout.write(process.version.split('.')[0].replace('v',''))" 2>/dev/null || echo "0")`,`if [ "$CURRENT_MAJOR" != "${e.nodeVersion}" ]; then`,`  curl -fsSL https://deb.nodesource.com/setup_${e.nodeVersion}.x | bash - 2>&1`,"  apt-get install -y nodejs 2>&1",'  echo "[NODE] Installed Node $(node -v)"',"else",'  echo "[NODE] Already on Node $(node -v) \u2014 no switch needed"',"fi"].join(`
-`):"",p;if(r){let b=js.isAbsolute(r)?r:js.resolve(process.cwd(),r);Bs.existsSync(b)?(p=Bs.readFileSync(b,"utf-8"),Di.info(Fs.magenta(`\u2713 Loaded preBuild hook: ${r}`))):Di.warn(`preBuild script not found at ${b} \u2014 skipping`)}let y=Cu(e,a,n),g={...Qt(n,a,e),MACH_ANDROID_RELEASE_ABIS:y},h=mn(g),S=Ns.replace(/\{\{BUILD_ID\}\}/g,t).replace(/\{\{BUILD_COMMAND\}\}/g,u).replace("{{NODE_VERSION_SETUP}}",f).replace("{{ENV_VARS}}",`
-export MACH_APP_NAME="${Hr(g.MACH_APP_NAME)}"
-export MACH_BUILD_PROFILE="${Hr(a)}"
-export MACH_ANDROID_RELEASE_ABIS="${Hr(y)}"
-export MACH_ENV_FINGERPRINT="${h}"
+`;var Gi=e=>e.replace(/\\/g,"\\\\").replace(/"/g,'\\"').replace(/\$/g,"\\$").replace(/`/g,"\\`"),Vi=e=>["1","true","yes","on"].includes(String(e||"").trim().toLowerCase()),Id=e=>/(^|[-_])(maestro|e2e|test|emulator)([-_]|$)/i.test(e),wd=(e,t,n)=>{let i=n.MACH_ANDROID_RELEASE_ABIS||n.MACH_ANDROID_ABIS||n.MACH_PROFILE_ANDROID_RELEASE_ABIS||n.MACH_PROFILE_ANDROID_ABIS||n.MACH_PROFILE_ANDROID_ARCHITECTURES||n.MACH_PROFILE_ANDROID_REACT_NATIVE_ARCHITECTURES;return i||(!!e.maestro||Id(t)||Vi(n.MACH_PROFILE_ANDROID_EMULATOR)||Vi(n.MACH_ANDROID_INCLUDE_EMULATOR_ABIS)||Vi(n.MACH_PROFILE_ANDROID_INCLUDE_EMULATOR_ABIS)?"armeabi-v7a,arm64-v8a,x86_64":"armeabi-v7a,arm64-v8a")},xo=async(e,t,n={},i,r)=>{let o=Ed(),s=Cn(e.framework),a=e.buildProfile||"production",l=a==="production",d=e.apk===!0,c=e.developmentClient?"assembleDebug":l?"bundleRelease":"assembleRelease",u=e.buildCommand||(d?"assembleRelease":c),f=e.nodeVersion?[`echo "[NODE] Switching to Node ${e.nodeVersion}..."`,`CURRENT_MAJOR=$(node -e "process.stdout.write(process.version.split('.')[0].replace('v',''))" 2>/dev/null || echo "0")`,`if [ "$CURRENT_MAJOR" != "${e.nodeVersion}" ]; then`,`  curl -fsSL https://deb.nodesource.com/setup_${e.nodeVersion}.x | bash - 2>&1`,"  apt-get install -y nodejs 2>&1",'  echo "[NODE] Installed Node $(node -v)"',"else",'  echo "[NODE] Already on Node $(node -v) \u2014 no switch needed"',"fi"].join(`
+`):"",p;if(r){let w=No.isAbsolute(r)?r:No.resolve(process.cwd(),r);ko.existsSync(w)?(p=ko.readFileSync(w,"utf-8"),Un.info(To.magenta(`\u2713 Loaded preBuild hook: ${r}`))):Un.warn(`preBuild script not found at ${w} \u2014 skipping`)}let g=wd(e,a,n),h={...Tn(n,a,e),MACH_ANDROID_RELEASE_ABIS:g},y=kn(h),b=Co.replace(/\{\{BUILD_ID\}\}/g,t).replace(/\{\{BUILD_COMMAND\}\}/g,u).replace("{{NODE_VERSION_SETUP}}",f).replace("{{ENV_VARS}}",`
+export MACH_APP_NAME="${Gi(h.MACH_APP_NAME)}"
+export MACH_BUILD_PROFILE="${Gi(a)}"
+export MACH_ANDROID_RELEASE_ABIS="${Gi(g)}"
+export MACH_ENV_FINGERPRINT="${y}"
 ${s.remoteEnvSetupScript().trim()}
 {{ENV_VARS}}
-    `).replace("{{FRAMEWORK_ANDROID_VERSION_CODE}}",s.androidRemoteVersionCodeScript().trim()).replace("{{FRAMEWORK_ANDROID_PREBUILD}}",s.androidRemotePrebuildScript().trim()).replace("{{FRAMEWORK_ANDROID_GRADLE_PROPERTIES}}",s.androidRemoteGradlePropertiesScript().trim()).replace("{{FRAMEWORK_ANDROID_RELEASE_GRADLE_PROPERTIES}}",s.androidRemoteReleaseGradlePropertiesScript().trim());if(e.dryRun){Di.info("User Data Script (dry run):"),console.log(S);return}o.start("Requesting cloud build instance...");try{let b=await D.post("/builds/launch-android",{projectId:i,buildId:t,platform:e.platform,buildProfile:e.buildProfile,buildCommand:u,instanceType:e.instanceType,ami:e.ami,keepInstance:e.keepInstance,region:e.region,subnet:e.subnet,securityGroup:e.securityGroup,projectSecrets:n,dryRun:e.dryRun,userDataScript:S,preBuildScriptContent:p});if(b.data.status!=="success")throw new Error(b.data.message||"Failed to launch build instance");let _=b.data.instanceId;return o.stop("Build Started"),Di.success(Fs.green(`Build initiated on cloud instance (${_}).`)),{instanceId:_}}catch(b){o.stop("Android Build Failed");let _=b.response?.data?.message||b.message;throw new Error(`Failed to launch Android build: ${_}`)}};import{spinner as Ou,log as en}from"@clack/prompts";import $t from"chalk";import Du from"fs";import{execSync as Bn}from"child_process";var Vs=`#!/bin/bash
+    `).replace("{{FRAMEWORK_ANDROID_VERSION_CODE}}",s.androidRemoteVersionCodeScript().trim()).replace("{{FRAMEWORK_ANDROID_PREBUILD}}",s.androidRemotePrebuildScript().trim()).replace("{{FRAMEWORK_ANDROID_GRADLE_PROPERTIES}}",s.androidRemoteGradlePropertiesScript().trim()).replace("{{FRAMEWORK_ANDROID_RELEASE_GRADLE_PROPERTIES}}",s.androidRemoteReleaseGradlePropertiesScript().trim());if(e.dryRun){Un.info("User Data Script (dry run):"),console.log(b);return}o.start("Requesting cloud build instance...");try{let w=await $.post("/builds/launch-android",{projectId:i,buildId:t,platform:e.platform,buildProfile:e.buildProfile,buildCommand:u,instanceType:e.instanceType,ami:e.ami,keepInstance:e.keepInstance,region:e.region,subnet:e.subnet,securityGroup:e.securityGroup,projectSecrets:n,dryRun:e.dryRun,userDataScript:b,preBuildScriptContent:p});if(w.data.status!=="success")throw new Error(w.data.message||"Failed to launch build instance");let L=w.data.instanceId;return o.stop("Build Started"),Un.success(To.green(`Build initiated on cloud instance (${L}).`)),{instanceId:L}}catch(w){o.stop("Android Build Failed");let L=w.response?.data?.message||w.message;throw new Error(`Failed to launch Android build: ${L}`)}};import{spinner as vd,log as gt}from"@clack/prompts";import We from"chalk";import _d from"fs";import{execSync as Vt}from"child_process";var Lo=`#!/bin/bash
 # --- Mach Cloud Build Script (iOS) ---
 # All S3 operations use presigned URLs via curl \u2014 zero AWS credentials on Mac.
 
@@ -1562,132 +1458,62 @@ touch done
 if [ ! -z "$PRESIGNED_DONE_MARKER" ]; then
   curl -X PUT -T done "$PRESIGNED_DONE_MARKER" --silent
 fi
-`;var Gs=e=>e.replace(/\\/g,"\\\\").replace(/"/g,'\\"').replace(/\$/g,"\\$").replace(/`/g,"\\`"),zs=async(e,t,n={},i)=>{let r=Ou(),o=vt(e.framework);e.sshHost||(e.sshHost="localhost",en.message($t.yellow("No SSH host provided, defaulting to localhost."))),r.start(`Connecting to remote Mac at ${$t.cyan(e.sshHost)}...`);let s=e.sshUser||process.env.USER||"ubuntu",a=e.sshKey,l=`${s}@${e.sshHost}`,d=`ssh ${a?`-i ${a}`:""} -o StrictHostKeyChecking=no ${l}`,c=`scp ${a?`-i ${a}`:""} -o StrictHostKeyChecking=no`;try{let u=s==="ubuntu"?"/home/ubuntu":`/Users/${s}`,f=(n.PROJECT_ID||"default_project").replace(/[^a-zA-Z0-9-_]/g,"_"),p=`${u}/${m.remoteWorkspacesDir}/${f}`;r.message(`Preparing stable workspace: ${p}...`),Bn(`${d} "mkdir -p ${p}"`,{stdio:"inherit"}),r.message("Transferring source code...");let y=`/tmp/${m.nameLower}-source-${t}.zip`;Bn(`${c} ${y} ${l}:${p}/source.zip`,{stdio:"inherit"});let g=e.iosApiKeyPath?`${p}/api_key.p8`:"",h="";e.iosApiKeyPath&&(r.message("Uploading App Store Connect API key..."),Bn(`${c} ${e.iosApiKeyPath} ${l}:${g}`),e.iosApiKeyId&&e.iosApiKeyIssuer&&(h=`-authenticationKeyID ${e.iosApiKeyId} -authenticationKeyIssuerID ${e.iosApiKeyIssuer} -authenticationKeyPath ${g}`));let S={};if(i)try{let I=await D.post(`/builds/${i}/${t}/build-urls`,{platform:"ios"});I.data.status==="success"&&(S=I.data.urls)}catch(I){en.warn($t.yellow(`Could not fetch build URLs: ${I.message}`))}let b="";if(S.credentials&&S.credentials.length>0)for(let I of S.credentials)I.type==="p12"?b+=`curl -sf -o "$CERT_DIR/${I.name}" "${I.downloadUrl}" || true
-`:I.type==="mobileprovision"&&(b+=`curl -sf -o "$PROV_TEMP/${I.name}" "${I.downloadUrl}" || true
-`);r.message("Generating macOS build script...");let _=process.env.CODEARTIFACT_AUTH_TOKEN?`export CODEARTIFACT_AUTH_TOKEN="${process.env.CODEARTIFACT_AUTH_TOKEN}"
-`:"";if(n)for(let[I,$]of Object.entries(n)){let x=$.replace(/"/g,'\\"').replace(/\$/g,"\\$").replace(/`/g,"\\`");_+=`export ${I}="${x}"
-`}let w=e.buildProfile||"production",T=Qt(n,w,e),B=mn(T);en.info($t.dim(`iOS remote build config: simulator=${String(!!e.simulator)}, configuration=${e.iosConfiguration||"Release"}, scheme=${e.iosScheme||"auto"}`));let X=[_,S.logUpload?`export PRESIGNED_LOG_UPLOAD="${S.logUpload}"`:"",S.doneMarker?`export PRESIGNED_DONE_MARKER="${S.doneMarker}"`:"",S.cacheDerivedDataDownload?`export PRESIGNED_CACHE_DD_DOWNLOAD="${S.cacheDerivedDataDownload}"`:"",S.cacheDerivedDataUpload?`export PRESIGNED_CACHE_DD_UPLOAD="${S.cacheDerivedDataUpload}"`:"",S.cacheNodeModulesDownload?`export PRESIGNED_CACHE_NODE_DOWNLOAD="${S.cacheNodeModulesDownload}"`:"",S.cacheNodeModulesUpload?`export PRESIGNED_CACHE_NODE_UPLOAD="${S.cacheNodeModulesUpload}"`:"",S.cachePodsDownload?`export PRESIGNED_CACHE_PODS_DOWNLOAD="${S.cachePodsDownload}"`:"",S.cachePodsUpload?`export PRESIGNED_CACHE_PODS_UPLOAD="${S.cachePodsUpload}"`:"",S.artifactIpaUpload?`export PRESIGNED_ARTIFACT_IPA_UPLOAD="${S.artifactIpaUpload}"`:"",S.artifactAppZipUpload?`export PRESIGNED_ARTIFACT_APP_ZIP_UPLOAD="${S.artifactAppZipUpload}"`:"",`export BUILD_ID="${t}"`,`export MACH_BUILD_PROFILE="${Gs(w)}"`,`export MACH_APP_NAME="${Gs(T.MACH_APP_NAME)}"`,`export MACH_ENV_FINGERPRINT="${B}"`,o.remoteEnvSetupScript().trim(),`export ${m.envPrefix}PROJECT_ID="${f}"`,n.MATCH_ENCRYPTION_PASSPHRASE?`export MATCH_PASSWORD="${n.MATCH_ENCRYPTION_PASSPHRASE}"`:"",n.APPLE_TEAM_ID?`export FASTLANE_TEAM_ID="${n.APPLE_TEAM_ID}"`:"",`export MATCH_KEYCHAIN_NAME="${m.credentialsKeychain}"`,`export MATCH_KEYCHAIN_PASSWORD="${m.keychainPassword}"`].filter(Boolean).join(`
-`),U=e.nodeVersion?[`echo "[NODE] Switching to Node ${e.nodeVersion}..."`,'export NVM_DIR="$HOME/.nvm"','[ -s "$NVM_DIR/nvm.sh" ] && . "$NVM_DIR/nvm.sh" --no-use',`nvm install ${e.nodeVersion} 2>/dev/null || true`,`nvm use ${e.nodeVersion} --silent`,`export PATH="$NVM_DIR/versions/node/$(nvm version ${e.nodeVersion})/bin:$PATH"`,'echo "[NODE] Now using: $(node -v) at $(which node)"'].join(`
-`):"",K=Vs,v={"{{REMOTE_DIR}}":p,"{{ENV_VARS}}":X,"{{CREDENTIAL_DOWNLOADS}}":b,"{{IOS_SCHEME}}":e.iosScheme||"","{{IOS_CONFIG}}":e.iosConfiguration||"Release","{{TEAM_ID}}":e.iosTeamId||"","{{AUTH_PARAMS}}":h,"{{IS_SIMULATOR}}":e.simulator?"true":"false","{{BUILD_ID}}":t,"{{EXPORT_METHOD}}":e.iosExportMethod||"ad-hoc","{{NODE_VERSION_SETUP}}":U,"{{FRAMEWORK_PREBUILD}}":o.iosRemotePrebuildScript().trim()};Object.entries(v).forEach(([I,$])=>{K=K.split(I).join($)});let R=`/tmp/${m.nameLower}-mac-build-${t}.sh`;if(Du.writeFileSync(R,K),Bn(`${c} ${R} ${l}:${p}/build.sh`),r.stop("Remote script uploaded."),en.info($t.cyan("Executing remote build. This might take a while...")),Bn(`${d} "bash ${p}/build.sh"`,{stdio:"inherit"}),r.stop("Remote build finished!"),i){r.start("Fetching artifact links...");try{let $=(await D.get(`/builds/${i}/${t}/artifacts`)).data.artifacts||[],x=e.simulator===!0;if($.length===0&&!x)throw r.stop("Build Failed!"),new Error("Build completed but no artifacts were generated. Check build logs for errors.");if(r.stop("Build Successful!"),$.length>0){en.success("Build Artifacts Ready:");for(let P of $)console.log(`
-${$t.yellow(P.name)}:
-${$t.cyan(P.downloadUrl)}`);console.log(`
-${$t.dim("Note: Links are valid for 7 days.")}`)}else x&&en.warn("Simulator build completed. No artifacts uploaded.")}catch(I){r.stop("Could not fetch artifacts"),en.warn($t.yellow(`Artifact listing failed: ${I.message}`))}}}catch(u){throw r.stop("iOS Build Failed"),u}};import{spinner as Ti,log as N,isCancel as Li,confirm as Yu,select as Xr}from"@clack/prompts";import k from"chalk";import A from"fs";import E from"path";import{execFileSync as Pt,execSync as oe,spawn as oa}from"child_process";import ke from"os";import Xu from"crypto";var ku=/^\d+(?:\.\d+){0,2}$/,Nu="auto";var jn=e=>typeof e=="string"&&e.trim().toLowerCase()===Nu,Gr=(e,t,n,i=!0)=>e!=null&&String(e).trim()!==""?{kind:"persisted",value:e}:t!=null&&!jn(t)?{kind:"explicit",value:t}:i&&(n||jn(t))?{kind:"auto"}:{kind:"none"},Hn=e=>{let t=String(e??"").trim();return!t||t==="undefined"||t==="null"?null:ku.test(t)?t:null},gn=(e,t)=>{let n=Hn(e);if(!n)throw new Error(`Invalid iOS buildNumber from ${t}: "${String(e??"")}". Use one to three period-separated integers, for example "68" or "1.2.3".`);return n},xu=e=>{if(typeof e=="string"&&!/^\d+$/.test(e.trim()))return null;let t=Number(e);return!Number.isSafeInteger(t)||t<1||t>21e8?null:String(t)},lt=(e,t)=>{let n=xu(e);if(!n)throw new Error(`Invalid Android versionCode from ${t}: "${String(e??"")}". Use an integer from 1 to 2100000000.`);return n},ki=(e,t,n,i)=>{let r=gn(n,i);return e.resolvedBuildNumber=r,t.BUILD_NUMBER=r,t.CURRENT_PROJECT_VERSION=r,t.MACH_IOS_BUILD_NUMBER_LOCKED="1",r},Ni=(e,t,n,i)=>{let r=lt(n,i);return e.resolvedVersionCode=r,t.ANDROID_VERSION_CODE=r,t.MACH_ANDROID_VERSION_CODE_LOCKED="1",r},Ks=(e,t)=>{let n=t.buildNumber!==void 0&&t.buildNumber!==null&&String(t.buildNumber).trim()!=="",i=t.versionCode!==void 0&&t.versionCode!==null&&String(t.versionCode).trim()!=="";!e.resolvedBuildNumber&&n&&(e.resolvedBuildNumber=gn(t.buildNumber,"saved MACH build record")),!e.resolvedVersionCode&&i&&(e.resolvedVersionCode=lt(t.versionCode,"saved MACH build record"))};import{execFileSync as zr}from"child_process";import _t from"fs";import tn from"path";var Tu=new Set(["Pods","build","DerivedData",".git"]),Ws=(e,t=[])=>{if(!_t.existsSync(e))return t;for(let n of _t.readdirSync(e,{withFileTypes:!0})){if(n.isSymbolicLink())continue;let i=tn.join(e,n.name);if(n.isDirectory()){if(Tu.has(n.name)||n.name.endsWith(".xcworkspace")||n.name.endsWith(".xcarchive")||n.name.endsWith(".framework")||n.name.endsWith(".xcframework")||n.name.endsWith(".bundle")||n.name.endsWith(".app")||n.name.endsWith(".appex"))continue;Ws(i,t);continue}n.isFile()&&n.name==="Info.plist"&&t.push(i)}return t},Lu=(e,t,n)=>{let i=String(e||"").trim().replace(/^"|"$/g,"");if(!i||(i=i.replace(/\$\(([^)]+)\)|\$\{([^}]+)\}/g,(o,s,a)=>{let d=t[s||a];return d===void 0?"":String(d)}),!i||i.includes("$(")||i.includes("${")))return null;let r=String(t.SRCROOT||t.PROJECT_DIR||n);return tn.resolve(tn.isAbsolute(i)?i:tn.join(r,i))},Mu=e=>{let t=e.indexOf("["),n=e.lastIndexOf("]");if(t<0||n<t)return[];let i=JSON.parse(e.slice(t,n+1));return Array.isArray(i)?i:[]},Uu=(e,t)=>{let n=new Set,i=[];(t.workspace||t.project)&&i.push([...t.workspace?["-workspace",t.workspace]:["-project",t.project],"-scheme",t.scheme]),t.project&&i.push(["-project",t.project,"-alltargets"]);for(let r of i){let o="";try{o=zr("xcodebuild",[...r,"-configuration",t.configuration,"-showBuildSettings","-json"],{cwd:e,encoding:"utf8",maxBuffer:16*1024*1024})}catch{continue}for(let s of Mu(o)){let a=s?.buildSettings;if(!a)continue;let l=String(a.WRAPPER_EXTENSION||"").toLowerCase();if(l!=="app"&&l!=="appex")continue;let d=Lu(String(a.INFOPLIST_FILE||""),a,e);if(!d||!_t.existsSync(d))continue;let c=tn.relative(e,d);c.startsWith("..")||tn.isAbsolute(c)||n.add(d)}}return[...n].sort()},Fu=(e,t)=>{let n=_t.readFileSync(e,"utf8");if(!/<plist(?:\s|>)/.test(n))return!1;let r=/<key>\s*CFBundleVersion\s*<\/key>/.exec(n),o;if(r){let s=r.index+r[0].length,a=n.slice(s),l=/^\s*<(string|integer)>[\s\S]*?<\/\1>/.exec(a);if(!l)throw new Error(`Could not update CFBundleVersion in ${e}: unsupported plist value type.`);o=n.slice(0,s)+`
-	<string>${t}</string>`+a.slice(l[0].length)}else{let s=n.lastIndexOf("</dict>");if(s<0)throw new Error(`Could not update CFBundleVersion in ${e}: root dictionary not found.`);o=n.slice(0,s)+`	<key>CFBundleVersion</key>
-	<string>${t}</string>
-`+n.slice(s)}return _t.writeFileSync(e,o),!0},Bu=(e,t)=>{if(!Fu(e,t)){if(process.platform!=="darwin")throw new Error(`Could not update binary Info.plist outside macOS: ${e}`);try{zr("/usr/bin/plutil",["-replace","CFBundleVersion","-string",t,e])}catch{zr("/usr/bin/plutil",["-insert","CFBundleVersion","-string",t,e])}}},Js=(e,t,n)=>{let i=gn(t,"resolved MACH build"),r=tn.resolve(e),o=new Set;if(n)try{for(let d of Uu(r,n))o.add(d)}catch{}for(let d of Ws(r))o.add(d);let s=[...o].sort(),a=new Map,l=!1;try{for(let d of s)a.set(d,_t.readFileSync(d)),Bu(d,i)}catch(d){for(let[c,u]of a)_t.writeFileSync(c,u);throw d}return{buildNumber:i,plistPaths:s,restore:()=>{if(!l){l=!0;for(let[d,c]of a)_t.existsSync(d)&&_t.writeFileSync(d,c)}}}},Kr=(e,t,n)=>{let i=gn(e,n),r=gn(t,"resolved MACH build");if(i!==r)throw new Error(`iOS build number mismatch in ${n}: expected MACH buildNumber ${r}, but the artifact contains CFBundleVersion ${i}.`);return i};import{execFileSync as qs}from"child_process";import Vn from"fs";import xe from"path";import ju from"adm-zip";var Wr=(e,t)=>{let n=0n,i=0n,r=t;for(;r<e.length&&i<=63n;){let o=e[r++];if(n|=BigInt(o&127)<<i,(o&128)===0)return{value:n,next:r};i+=7n}throw new Error("Malformed protobuf varint")},Gn=e=>{let t=[],n=0;for(;n<e.length;){let i=Wr(e,n);n=i.next;let r=Number(i.value>>3n),o=Number(i.value&7n);if(r<1)throw new Error("Malformed protobuf field number");if(o===0){let s=Wr(e,n);n=s.next,t.push({number:r,wireType:o,varint:s.value});continue}if(o===1){if(n+8>e.length)throw new Error("Truncated protobuf fixed64");t.push({number:r,wireType:o,bytes:e.subarray(n,n+8)}),n+=8;continue}if(o===2){let s=Wr(e,n);n=s.next;let a=Number(s.value);if(!Number.isSafeInteger(a)||n+a>e.length)throw new Error("Truncated protobuf length-delimited field");t.push({number:r,wireType:o,bytes:e.subarray(n,n+a)}),n+=a;continue}if(o===5){if(n+4>e.length)throw new Error("Truncated protobuf fixed32");t.push({number:r,wireType:o,bytes:e.subarray(n,n+4)}),n+=4;continue}throw new Error(`Unsupported protobuf wire type ${o}`)}return t},Ys=(e,t)=>e.find(i=>i.number===t&&i.wireType===2)?.bytes?.toString("utf8"),Hu=e=>{let n=Gn(e).find(o=>o.number===7&&o.wireType===2)?.bytes;if(!n)return null;let r=Gn(n).find(o=>(o.number===6||o.number===7)&&o.wireType===0)?.varint;return r===void 0||r>BigInt(Number.MAX_SAFE_INTEGER)?null:r.toString()},Vu=e=>{let n=Gn(e).find(d=>d.number===1&&d.wireType===2)?.bytes;if(!n)throw new Error("AAB base manifest has no root XML element");let o=Gn(n).filter(d=>d.number===4&&d.wireType===2).map(d=>Gn(d.bytes)).find(d=>Ys(d,2)==="versionCode");if(!o)throw new Error("AAB base manifest has no android:versionCode");let s=Ys(o,3)?.trim();if(s&&/^\d+$/.test(s))return lt(s,"packaged AAB manifest");let a=o.find(d=>d.number===6&&d.wireType===2)?.bytes,l=a?Hu(a):null;return lt(l,"packaged AAB manifest")},Xs=e=>{try{return Vn.accessSync(e,Vn.constants.X_OK),Vn.statSync(e).isFile()}catch{return!1}},Jr=e=>String(process.env.PATH||"").split(xe.delimiter).filter(Boolean).map(t=>xe.join(t,e)),Zs=()=>Array.from(new Set([process.env.ANDROID_HOME,process.env.ANDROID_SDK_ROOT,process.platform==="darwin"?xe.join(process.env.HOME||"","Library/Android/sdk"):xe.join(process.env.HOME||"","Android/Sdk"),"/opt/android-sdk"].filter(e=>!!e))),Qs=e=>{try{return Vn.readdirSync(e).map(t=>xe.join(e,t)).filter(t=>Vn.statSync(t).isDirectory()).sort((t,n)=>n.localeCompare(t,void 0,{numeric:!0}))}catch{return[]}},Gu=()=>{let e=Jr("apkanalyzer");for(let t of Zs()){let n=xe.join(t,"cmdline-tools");e.push(xe.join(n,"latest/bin/apkanalyzer"));for(let i of Qs(n))e.push(xe.join(i,"bin/apkanalyzer"))}return e},zu=()=>{let e=[...Jr("aapt2"),...Jr("aapt")];for(let t of Zs())for(let n of Qs(xe.join(t,"build-tools")))e.push(xe.join(n,"aapt2"),xe.join(n,"aapt"));return e},Ku=e=>{let t=e.trim();return/^\d+$/.test(t)?t:null},Wu=e=>e.match(/^package:.*\bversionCode='(\d+)'/m)?.[1]||null,Ju=(e,t)=>{let n=t.apkanalyzer??Gu();for(let r of n)if(Xs(r))try{let o=qs(r,["manifest","version-code",e],{encoding:"utf8",stdio:["ignore","pipe","pipe"]}),s=Ku(o);if(s)return lt(s,"packaged APK manifest")}catch{}let i=t.aapt??zu();for(let r of i)if(Xs(r))try{let o=qs(r,["dump","badging",e],{encoding:"utf8",stdio:["ignore","pipe","pipe"]}),s=Wu(o);if(s)return lt(s,"packaged APK manifest")}catch{}throw new Error("Could not inspect the packaged APK versionCode. Install Android SDK command-line tools (apkanalyzer or aapt2) and rebuild; MACH will not publish an unverified artifact.")},qu=(e,t={})=>{let n=xe.extname(e).toLowerCase();if(n===".apk")return Ju(e,t);if(n!==".aab")throw new Error(`Unsupported Android artifact for version validation: ${e}`);let i;try{i=new ju(e)}catch(o){throw new Error(`Could not open AAB ${xe.basename(e)}: ${o.message}`)}let r=i.getEntry("base/manifest/AndroidManifest.xml")||i.getEntries().find(o=>o.entryName.replace(/\\/g,"/")==="base/manifest/AndroidManifest.xml");if(!r)throw new Error(`AAB ${xe.basename(e)} has no base module manifest`);try{return Vu(r.getData())}catch(o){throw new Error(`Could not read versionCode from ${xe.basename(e)}: ${o.message}`)}},qr=(e,t,n={})=>{let i=lt(t,"resolved MACH build assignment"),r=qu(e,n);if(r!==i)throw new Error(`Android versionCode mismatch in ${xe.basename(e)}: expected ${i}, packaged ${r}. MACH stopped the build before upload.`);return r};var sa=(e,t)=>t.filter(n=>A.existsSync(E.join(e,n))).reduce((n,i)=>n.update(A.readFileSync(E.join(e,i))),Xu.createHash("sha256")).digest("hex").slice(0,16),Zu=e=>sa(e,["package.json","yarn.lock","package-lock.json","bun.lockb"]),Qu=e=>sa(e,["Podfile","Podfile.lock"]),ep=e=>{let t=E.join(e,"fingerprint.json");try{return JSON.parse(A.readFileSync(t,"utf-8"))}catch{return{}}},ea=(e,t)=>{A.mkdirSync(e,{recursive:!0}),A.writeFileSync(E.join(e,"fingerprint.json"),JSON.stringify(t,null,2))},tp=7200*1e3,np=(e,t)=>{A.mkdirSync(e,{recursive:!0});let n=E.join(e,"build.lock");if(A.existsSync(n))try{let i=JSON.parse(A.readFileSync(n,"utf-8")),r=Date.now()-(i.timestamp||0);if(r<tp)throw new Error(`Another build is already running for this project (build ${i.buildId}, started ${Math.round(r/6e4)}m ago). Cancel it from the dashboard first, or wait for it to complete.`)}catch(i){if(i.message.includes("Another build"))throw i}A.writeFileSync(n,JSON.stringify({buildId:t,pid:process.pid,timestamp:Date.now()}))},ip=(e,t)=>{let n=E.join(e,"build.lock");try{A.existsSync(n)&&JSON.parse(A.readFileSync(n,"utf-8")).buildId===t&&A.unlinkSync(n)}catch{}},ta=15e5,na=(e,t)=>{let n=e+t;return n.length>ta?n.slice(-ta):n},aa=e=>e.replace(/\u001b\[[0-9;]*m/g,""),la=e=>/\berror:|fatal error:|xcodebuild: error|The following build commands failed|Command PhaseScriptExecution failed|PhaseScriptExecution|Command .* failed|CodeSign|Provisioning profile|No profiles|requires a provisioning profile|Undefined symbols|ld:|clang: error|SwiftCompile|CompileC|node: command not found|env: node|No such file or directory|Permission denied/i.test(e),rp=e=>{let t=new Set,n=[];e.forEach((r,o)=>{la(r)&&n.push(o)});for(let r of n){let o=/PhaseScriptExecution|Command PhaseScriptExecution failed|The following build commands failed/i.test(e[r])?18:8,s=/The following build commands failed/i.test(e[r])?18:10;for(let a=Math.max(0,r-o);a<=Math.min(e.length-1,r+s);a++)t.add(a)}if(t.size===0)return e.slice(-120);let i=Array.from(t).sort((r,o)=>r-o).map(r=>e[r]);return i.length>160?i.slice(-160):i},op=(e,t,n,i)=>{let r=aa(i).replace(/\r/g,`
-`).split(`
-`).map(l=>l.trimEnd()).filter(Boolean),o=r.filter(la),s=o.length>0?rp(r):r.slice(-80),a=o.length>0?"Key failure output":"Last command output";return[`Command failed with code ${n}: ${e} ${t.join(" ")}`,s.length>0?`
-${a}:
-${s.join(`
-`)}`:""].join("")},sp=e=>e==="xcodebuild"&&process.env.MACH_XCODE_FULL_LOGS!=="1",ap=e=>{let t=aa(e).trim();return t?/\berror:|fatal error:|xcodebuild: error|The following build commands failed|Command PhaseScriptExecution failed|CodeSign|Provisioning profile|No profiles|requires a provisioning profile|Undefined symbols|ld:|clang: error|SwiftCompile|CompileC|CFBundleVersion|ARCHIVE SUCCEEDED|ARCHIVE FAILED|EXPORT SUCCEEDED|EXPORT FAILED|Exported .* to:|\[IPA VALID\]/i.test(t):!1},Qe=e=>{try{A.existsSync(e)&&A.rmSync(e,{recursive:!0,force:!0})}catch{}},lp=(e,t)=>{try{if(!A.existsSync(e))return;for(let n of A.readdirSync(e))t(n)&&Qe(E.join(e,n))}catch{}},Yr=e=>{N.info(k.dim("Clearing Metro/Hermes JS transform caches..."));let t=ke.tmpdir();lp(t,n=>n==="metro-cache"||n.startsWith("metro-")||n.startsWith("haste-map-")||n.startsWith("react-native-packager-cache-")),Qe(E.join(e,".expo")),Qe(E.join(e,"node_modules/.cache/metro")),Qe(E.join(ke.homedir(),".cache/metro")),Qe(E.join(ke.homedir(),".cache/react-native-packager")),Qe(E.join(ke.homedir(),"Library/Caches/metro")),Qe(E.join(ke.homedir(),"Library/Caches/react-native-packager"))},dp=e=>/Internal inconsistency error|never received target ended message/i.test(String(e?.message||e)),cp=e=>{N.warn(k.yellow("Xcode build system hit an internal inconsistency. Clearing simulator build state and retrying once...")),Qe(E.join(e,"Build")),Qe(E.join(e,"Index.noindex")),Qe(E.join(e,"ModuleCache.noindex")),Qe(E.join(e,"SourcePackages"))},up=e=>{let t=String(e?.message||e);return/Permission denied/i.test(t)&&/Pods\/.*\.sh/i.test(t)},da=e=>{let t=E.join(e,"Pods"),i=[E.join(t,"Target Support Files"),t].filter(a=>A.existsSync(a)),r=new Set,o=0,s=a=>{let l=a;try{l=A.realpathSync(a)}catch{}if(r.has(l))return;r.add(l);let d;try{d=A.readdirSync(a,{withFileTypes:!0})}catch{return}for(let c of d){let u=E.join(a,c.name);if(c.isDirectory()){s(u);continue}if(!(!c.isFile()||!c.name.endsWith(".sh")))try{let f=A.statSync(u),p=f.mode|493;p!==f.mode&&(A.chmodSync(u,p),o+=1)}catch{}}};for(let a of i)s(a);return o>0&&N.info(k.dim(`Repaired executable permissions on ${o} CocoaPods script${o===1?"":"s"}.`)),o},pp=(e,t,n,i,r)=>{let o=l=>{let d=l.filter(u=>u?.id&&String(u?.platform||"").includes("iOS Simulator")&&!u?.error),c=d.find(u=>/iphone/i.test(u.name||""))||d[0];return c?.id?`id=${c.id}`:void 0},s=l=>{let d=[],c=!1;for(let u of l.split(`
-`)){if(/Ineligible destinations/i.test(u)&&(c=!0),c||!u.includes("platform:iOS Simulator")||u.includes("error:"))continue;let f=u.match(/\bid:([^,}]+)/)?.[1]?.trim(),p=u.match(/\bname:([^,}]+)/)?.[1]?.trim();f&&d.push({id:f,name:p,platform:"iOS Simulator"})}return o(d)},a=[t?"-workspace":"-project",t||n,"-scheme",i,"-configuration",r,"-sdk","iphonesimulator","-showdestinations"];try{let l=Pt("xcodebuild",[...a,"-json"],{cwd:e,encoding:"utf-8",stdio:["ignore","pipe","ignore"]}),d=JSON.parse(l),c=Array.isArray(d.destinations)?d.destinations:Array.isArray(d.availableDestinations)?d.availableDestinations:[],u=o(c);if(u)return u}catch{}try{let l=Pt("xcodebuild",a,{cwd:e,encoding:"utf-8",stdio:["ignore","pipe","ignore"]});return s(l)}catch{}},Rt=(e,t,n=process.cwd(),i={},r,o)=>new Promise((s,a)=>{let l="",d=sp(e),c=Date.now(),u=["/opt/homebrew/bin","/usr/local/bin","/usr/bin","/bin","/usr/sbin","/sbin",E.join(ke.homedir(),".npm-global/bin")],p=[...(process.env.PATH||"").split(":"),...u].filter((b,_,w)=>b&&w.indexOf(b)===_).join(":");process.env[`${m.envPrefix}DEBUG`]&&console.log(k.magenta(`[${m.nameUpper}_DEBUG] Execution PATH: ${p}`));let y={...process.env,...i,PATH:p,LANG:"en_US.UTF-8",LC_ALL:"en_US.UTF-8"};r&&process.env[`${m.envPrefix}DEBUG`]&&(r(k.magenta(`[ENVIRONMENT] node: ${process.execPath}
-`)),r(k.magenta(`[ENVIRONMENT] PATH: ${p}
-`)),r(k.magenta(`[ENVIRONMENT] command: ${e} ${t.join(" ")}
-`)));let g=e;if(["node","npm","npx","pod"].includes(e)){let b=E.dirname(process.execPath),_=E.join(b,e);A.existsSync(_)&&(g=_,r&&r(k.dim(`[EXEC] Using absolute path: ${g}
-`)))}let h=oa(g,t,{stdio:"pipe",cwd:n,shell:!0,env:y,detached:process.platform!=="win32"});if(o){if(o.aborted){if(h.pid)try{process.kill(-h.pid,"SIGTERM")}catch{h.kill()}return a(new Error("Command aborted"))}o.addEventListener("abort",()=>{if(h.pid)try{process.kill(-h.pid,"SIGTERM")}catch{h.kill()}a(new Error("Command aborted"))})}let S=(b,_)=>{if(!d){_.write(b);return}let w=b.replace(/\r/g,`
-`).split(`
-`).filter(ap);if(w.length>0){_.write(`${w.join(`
-`)}
-`),c=Date.now();return}let T=Date.now();T-c>3e4&&(_.write(`[xcodebuild] still running; detailed output is streamed to Mach logs.
-`),c=T)};h.stdout.on("data",b=>{let _=b.toString();l=na(l,_),S(_,process.stdout),r&&r(_)}),h.stderr.on("data",b=>{let _=b.toString();l=na(l,_),S(_,process.stderr),r&&r(_)}),h.on("close",b=>{b===0?s(b):a(new Error(op(e,t,b,l)))}),h.on("error",b=>a(b))}),xi=async(e,t,n,i,r)=>{try{await Rt("xcodebuild",e,t,n,i,r)}catch(o){if(!up(o))throw o;N.warn(k.yellow("CocoaPods script permission denied. Repairing Pods script permissions and retrying xcodebuild once...")),da(t),await Rt("xcodebuild",e,t,n,i,r)}},fp=e=>{let t=Math.floor(e/1e3%60),n=Math.floor(e/(1e3*60)%60),i=Math.floor(e/(1e3*60*60)%24),r=[];return i>0&&r.push(`${i}h`),n>0&&r.push(`${n}m`),(t>0||r.length===0)&&r.push(`${t}s`),r.join(" ")},nn=(e,t)=>{let n=[];try{if(!A.existsSync(e))return n;let i=A.readdirSync(e);for(let r of i){let o=E.join(e,r);try{let s=A.statSync(o);if(t.some(l=>r.endsWith(l))){n.push(E.resolve(o));continue}s.isDirectory()&&(n=n.concat(nn(o,t)))}catch{}}}catch{}return n},ca=(e,t)=>{let n=Hn(e);if(!n)throw new Error(`Invalid iOS CFBundleVersion from ${t}: "${e||""}". Apple requires one to three period-separated integers, for example "42" or "1.2.3". If you see "[Decryption Failed]", fix/remove the broken BUILD_NUMBER secret and rebuild.`);return n},Zr=(e,t)=>Pt("/usr/libexec/PlistBuddy",["-c",`Print :${t}`,e],{encoding:"utf-8"}).trim(),hn=(e,t)=>{try{return Zr(e,t)}catch{return""}},ia=e=>String(e||"").replace(/\.app$/i,"").replace(/[^a-z0-9]/gi,"").toLowerCase(),mp=e=>{try{return A.statSync(e).isDirectory()}catch{return!1}},gp=(e,t,n)=>{if(!A.existsSync(e))throw new Error(`iOS simulator build output directory was not found: ${e}`);let i=A.readdirSync(e).filter(d=>d.endsWith(".app")).map(d=>E.join(e,d)).filter(mp);if(i.length===0){let c=nn(e,[".app"]).map(u=>E.relative(e,u)).join(", ");throw new Error(`No top-level iOS simulator .app product was found in ${e}.`+(c?` Nested .app bundles found but ignored: ${c}`:""))}let r=new Set([t,n.iosScheme,n.scheme,n.appName].filter(Boolean).map(d=>ia(String(d))).filter(Boolean)),o=i.map(d=>{let c=E.join(d,"Info.plist"),u=A.existsSync(c)?hn(c,"CFBundleName"):"",f=A.existsSync(c)?hn(c,"CFBundleDisplayName"):"",p=A.existsSync(c)?hn(c,"CFBundleExecutable"):"",y=A.existsSync(c)?hn(c,"CFBundleIdentifier"):"",g=p?E.join(d,p):"";return{appPath:d,bundleIdentifier:y,executable:p,isValid:A.existsSync(c)&&!!p&&A.existsSync(g),names:[E.basename(d,".app"),u,f,p].map(ia).filter(Boolean)}}),s=o.filter(d=>d.isValid);if(s.length===0)throw new Error(`No valid iOS simulator .app product was found in ${e}. Candidates: `+o.map(d=>E.basename(d.appPath)).join(", "));let l=s.find(d=>d.names.some(c=>r.has(c)))||(s.length===1?s[0]:null);if(!l)throw new Error(`Multiple iOS simulator .app products were found in ${e}: `+s.map(d=>{let c=d.bundleIdentifier?` (${d.bundleIdentifier})`:"";return`${E.basename(d.appPath)}${c}`}).join(", ")+`. Set ios.scheme in ${m.configFileName} so ${m.name} can select the app target safely.`);return l.appPath},hp=(e,t)=>{let n=E.join(e,"Info.plist");if(!A.existsSync(n))throw new Error(`Could not validate iOS build number: ${n} not found.`);let i=ca(Zr(n,"CFBundleVersion"),n);return t?Kr(i,t,n):i},ua=(e,t=[])=>{if(!A.existsSync(e))return t;for(let n of A.readdirSync(e,{withFileTypes:!0})){if(!n.isDirectory()||n.isSymbolicLink())continue;let i=E.join(e,n.name);n.name!=="Frameworks"&&((n.name.endsWith(".app")||n.name.endsWith(".appex"))&&t.push(i),ua(i,t))}return t},ra=(e,t)=>[e,...ua(e)].filter((i,r,o)=>o.indexOf(i)===r).map(i=>({bundlePath:i,buildNumber:hp(i,t)})),pa=e=>{let t=E.join(e,"Info.plist");if(!A.existsSync(t))throw new Error(`Could not validate iOS app executable: ${t} not found.`);let n=hn(t,"CFBundleExecutable");if(!n)throw new Error(`Could not validate iOS app executable: CFBundleExecutable missing in ${t}.`);let i=E.join(e,n);if(!A.existsSync(i))throw new Error(`Could not validate iOS app executable: ${i} not found.`);return i},yp=()=>process.arch==="arm64"?"arm64":"x86_64",fa=e=>{let t=pa(e),n="";try{n=Pt("lipo",["-info",t],{encoding:"utf-8"}).trim()}catch(r){throw new Error(`Could not inspect iOS simulator executable architecture for ${E.basename(e)}: ${r.message}`)}let i=yp();if(!new RegExp(`\\b${i}\\b`).test(n))throw new Error(`iOS simulator app ${E.basename(e)} cannot be installed on this runner because its executable does not include the required ${i} simulator architecture. lipo output: ${n}. Check the React Native iOS project ARCHS/EXCLUDED_ARCHS settings for iphonesimulator builds.`);return n},bp=e=>{try{return Pt("xcrun",["vtool","-show-build",e],{encoding:"utf-8"}).trim()}catch(t){throw new Error(`Could not inspect iOS executable build platform for ${E.basename(e)}: ${t.message}`)}},ma=e=>{let t=pa(e),n=bp(t);if(!/\bplatform\s+IOSSIMULATOR\b/i.test(n))throw new Error(`iOS simulator app ${E.basename(e)} was built for the wrong Apple platform. A simulator artifact must contain PLATFORM IOSSIMULATOR, not an iPhone device binary. vtool output: ${n}`);return n},ga=(e,t)=>{let i=Pt("unzip",["-Z1",e],{encoding:"utf-8"}).split(`
-`).map(o=>o.trim()).filter(o=>/^Payload\/.+\.(?:app|appex)\/Info\.plist$/.test(o)&&!o.includes("/Frameworks/"));if(i.length===0)throw new Error(`Could not validate iOS build number: ${E.basename(e)} has no Payload/*.app/Info.plist.`);let r=A.mkdtempSync(E.join(ke.tmpdir(),`${m.nameLower}-ipa-plist-`));try{let o="";for(let[s,a]of i.entries()){let l=E.join(r,`Info-${s}.plist`),d=Pt("unzip",["-p",e,a]);A.writeFileSync(l,d);let c=`${E.basename(e)}:${a}`,u=ca(Zr(l,"CFBundleVersion"),c);t&&Kr(u,t,c),/^Payload\/[^/]+\.app\/Info\.plist$/.test(a)&&(o=u)}if(!o)throw new Error(`Could not validate iOS build number: ${E.basename(e)} has no main application Info.plist.`);return o}finally{A.rmSync(r,{recursive:!0,force:!0})}},Sp=e=>`'${e.replace(/'/g,"'\\''")}'`,Ap=()=>process.execPath&&A.existsSync(process.execPath)?process.execPath:Pt("which",["node"],{encoding:"utf-8"}).trim(),ha=(e,t,n)=>{if(!A.existsSync(e))return;let i=Ap();t.NODE_BINARY=i;let r=E.join(e,".xcode.env.local");A.writeFileSync(r,`export NODE_BINARY=${Sp(i)}
-`);let o=`[NODE] Xcode NODE_BINARY: ${i}
-`;n&&n(k.dim(o)),N.info(k.dim(o.trim()))},Qr=async(e,t,n={},i,r={})=>{let o=Ti(),s=Date.now(),a=e.platform,l=e.buildProfile||"production",d=vt(e.framework),c=()=>Qt(n,l,e),u=async(U,K={})=>{if(i)for(let v=1;v<=3;v++)try{await D.patch(`/builds/${i}/${t}`,{status:U,...K});return}catch(R){let I=R?.response?.data?.message||R?.message||String(R);console.error(`[reportStatus] attempt ${v}/3 failed (status=${U}): ${I}`),v<3&&await new Promise($=>setTimeout($,2e3))}},f=new AbortController,{signal:p}=f,y=null;i&&(y=setInterval(async()=>{try{(await D.get(`/builds/${i}/${t}`)).data.status==="cancelled"&&(N.warn(k.yellow(`
-\u{1F6D1} Build cancelled from dashboard. Terminating...`)),f.abort(),y&&clearInterval(y))}catch{}},5e3));let g=E.join(process.cwd(),".mach-cache"),h="setup",S="",b=null,_=async()=>{if(!S||!i)return;let U=S;S="";try{let K=U;Object.values(n).forEach(v=>{if(v&&v.length>5){let R=v.replace(/[.*+?^${}()|[\]\\]/g,"\\$&");K=K.replace(new RegExp(R,"g"),"[SECRET]")}}),await D.post(`/builds/${i}/${t}/logs`,{log:K,step:h})}catch{}},w=async()=>{b&&(clearTimeout(b),b=null),await _(),ip(g,t),y&&(clearInterval(y),y=null);try{let U=E.join(ke.tmpdir(),`${m.buildPrefix}-${t}.keychain-db`);A.existsSync(U)&&(oe(`security delete-keychain "${U}"`,{stdio:"ignore"}),N.info(k.dim("\u{1F511} Build keychain deleted.")))}catch{}try{let U=E.join(ke.homedir(),"Library/MobileDevice/Provisioning Profiles");if(A.existsSync(U)){let K=A.readdirSync(U).filter(v=>v.includes(t)||v.startsWith(`${m.nameLower}-temp-${t}`));for(let v of K)A.unlinkSync(E.join(U,v))}}catch{}},T=async U=>{i&&(S+=U,S.length>=8192?(b&&(clearTimeout(b),b=null),await _()):b||(b=setTimeout(()=>{b=null,_()},2e3)))},B=async U=>{h=U,await T(`[STEP_START:${U}] ${Math.floor(Date.now()/1e3)}
-`)},X=async(U,K,v,R)=>await Rt(U,K,v,R,I=>{T(I)},p);N.info(k.blue(`\u{1F680} Starting local build for ${a} (${l})...`));try{np(g,t)}catch(U){throw await u("failed",{error:U.message,endTime:Date.now()}),U}await u("building"),await B("setup"),a==="ios"&&!e.simulator&&n.MACH_IOS_BUILD_NUMBER_LOCKED==="1"&&n.BUILD_NUMBER&&(N.info(k.dim(`Auto build number: ${n.BUILD_NUMBER}`)),await T(`[BUILD_NUMBER] ${n.BUILD_NUMBER}
-`)),await B("lock"),d.applyLocalProcessEnv(e);try{await B("clone"),N.info(k.dim("Preparing source...")),await B("read_config");let U=E.join(process.cwd(),m.configFileName);if(A.existsSync(U)){let F=JSON.parse(A.readFileSync(U,"utf-8"))?.build?.[l]||{};await T(`[CONFIG] Profile: ${l}, distribution: ${F.distribution||"not set"}, simulator: ${F.simulator||!1}
-`)}if(await B("read_package"),e.nodeVersion){let z=process.env.NVM_DIR||E.join(ke.homedir(),".nvm"),F=E.join(z,"versions","node"),Q;if(A.existsSync(F)){let ce=A.readdirSync(F).sort().reverse(),Be=e.nodeVersion.startsWith("v")?e.nodeVersion:`v${e.nodeVersion}`,re=ce.find(ne=>ne===Be||ne.startsWith(Be+".")||ne.startsWith(`v${e.nodeVersion}.`));re&&(Q=E.join(F,re,"bin"))}if(Q&&A.existsSync(Q)){let ce=process.env.PATH||"";process.env.PATH=`${Q}:${ce}`,await T(`[NODE] Switched to Node ${e.nodeVersion} \u2014 using ${Q}
-`),N.info(k.green(`\u2713 Node switched to ${e.nodeVersion} (${Q})`))}else await T(`[NODE] Warning: Node ${e.nodeVersion} not found in nvm. Run: nvm install ${e.nodeVersion} on the build machine.
-`),N.warn(k.yellow(`Node ${e.nodeVersion} not found in nvm \u2014 using system default`))}await B("deps"),o.start("Checking dependencies...");let K=ep(g),v=Zu(process.cwd()),R=A.existsSync("node_modules"),I=A.existsSync("yarn.lock"),$=A.existsSync("bun.lockb");R&&K.node&&K.node!==v&&(o.stop("Dependency fingerprint changed \u2014 clearing node_modules for clean install..."),await T(`[CACHE] package.json/lockfile changed \u2014 wiping node_modules
-`),A.rmSync(E.join(process.cwd(),"node_modules"),{recursive:!0,force:!0}),R=!1);let x="npm",P=["install","--prefer-offline"];I?(x="yarn",P=["install","--prefer-offline"]):$&&(x="bun",P=["install"]),R?o.stop("Cached node_modules found. Syncing dependencies..."):o.stop("No cached dependencies. Running fresh install..."),e.preBuild&&(N.info(k.blue("Running pre-install hook...")),N.info(k.dim(`> ${e.preBuild}`)),await B("prebuild"),await X("bash",[e.preBuild],process.cwd(),c())),N.info(k.dim(`Running ${x} ${P.join(" ")}...`)),await X(x,P,process.cwd(),c()),K.node=v,ea(g,K);let V=await d.prepareLocalProject({platform:a,options:e,cacheMeta:K,cacheMetaDir:g,currentBuildEnv:c,reportStep:B,reportLog:T,loggedRun:X,configureXcodeNodeBinary:ha,podsFingerprint:Qu,writeCacheMeta:ea}),G=V.bundleId||e.iosBundleIdentifier||"",j=V.appName||e.name||"",Y=[];if(a==="android")await B("build"),Y=await Ep(e,l,n,z=>T(z),p);else if(a==="ios"){await B("signing"),N.info(k.dim("Preparing credentials..."));let z=r?.distributionType;Y=await Ip(e,t,l,n,i,F=>T(F),p,z,F=>B(F))}if(e.postBuild&&(N.info(k.blue("Running post-build hook...")),N.info(k.dim(`> ${e.postBuild}`)),await X(e.postBuild,[],process.cwd(),c())),a==="ios"){let z=Hn(e.resolvedBuildNumber||n.BUILD_NUMBER);if(z)for(let F of Y.filter(Q=>Q.endsWith(".ipa"))){let Q=ga(F,z);await T(`[IPA FINAL] CFBundleVersion ${Q} matches MACH buildNumber ${z}
-`)}}if(a==="android"){let z=e.resolvedVersionCode||n.ANDROID_VERSION_CODE;if(z){let F=lt(z,"resolved MACH build assignment");if(Y.length===0)throw new Error(`Android build produced no APK or AAB to verify against MACH versionCode ${F}.`);for(let Q of Y){let ce=qr(Q,F);await T(`[ANDROID FINAL] ${E.basename(Q)} versionCode ${ce} matches MACH assignment
-`)}}}let de=fp(Date.now()-s);if(N.success(k.green(`
-\u2713 Local build completed successfully in ${de}`)),await u("building",{...G&&{bundleId:G},...j&&{appName:j}}),Y.length>0&&(N.info(k.cyan(`
-\u{1F4E6} Generated Artifacts:`)),Y.forEach(z=>{let F=E.resolve(z);N.info(k.dim(`  - ${z}`)),N.info(k.gray(`    Path: ${F}`))}),e.interactive)){let z=await Yu({message:"Install on connected device?"});if(!Li(z)&&z){if(a==="android"){let F=Y.find(Q=>Q.endsWith(".apk"))||Y[0];await vp(F,Q=>T(Q))}else if(a==="ios"){let F=Y.find(ce=>ce.endsWith(".ipa"))||Y.find(ce=>ce.endsWith(".app"))||Y[0],Q=et("ios");e.simulator?await $p(F,Q||"",ce=>T(ce)):await _p(F,Q||"",ce=>T(ce))}}}await B("upload");let L=[];for(let z of Y)try{let F=E.join(ke.tmpdir(),`${t}-${E.basename(z)}`);A.copyFileSync(z,F),L.push(F),N.info(k.dim(`  \u{1F4CB} Preserved artifact: ${E.basename(z)}`))}catch{N.warn(k.yellow(`  Failed to preserve artifact: ${E.basename(z)}`))}Y=L,N.info(k.dim("\u{1F9F9} Cleaning workspace (preserving dependency cache)..."));try{let z=process.cwd(),F=new Set(["node_modules"]),Q=A.readdirSync(z),ce=0;for(let Be of Q)if(!F.has(Be)){if(Be==="ios"){let re=E.join(z,"ios"),ne=A.readdirSync(re);for(let ve of ne)if(ve!=="Pods")try{A.rmSync(E.join(re,ve),{recursive:!0,force:!0}),ce++}catch{}continue}try{A.rmSync(E.join(z,Be),{recursive:!0,force:!0}),ce++}catch{}}N.info(k.dim(`  Cleaned ${ce} items. Cached: node_modules${A.existsSync(E.join(z,"ios","Pods"))?", ios/Pods":""}`)),N.info(k.green("\u{1F512} Security: No source code retained on build server. Only public dependencies cached."))}catch{N.warn(k.yellow("Post-build cleanup encountered errors (non-fatal)."))}try{let F=E.join(ke.homedir(),m.workspacesDir),Q=oe(`df -k "${F}" | tail -1 | awk '{print $4}'`,{encoding:"utf8"}).trim(),ce=parseInt(Q,10)*1024;if(ce<53687091200&&A.existsSync(F)){N.info(k.dim(`  \u26A0\uFE0F Low disk space (${(ce/1024/1024/1024).toFixed(0)} GB free). Running cache eviction...`));let Be=E.basename(process.cwd()),re=A.readdirSync(F).filter(ne=>ne!==Be).map(ne=>{let ve=E.join(F,ne);try{let Xe=A.statSync(ve);return Xe.isDirectory()?{name:ne,dir:ve,mtime:Xe.mtimeMs}:null}catch{return null}}).filter(Boolean);re.sort((ne,ve)=>ne.mtime-ve.mtime);for(let ne of re){if(ce>=53687091200)break;try{A.rmSync(ne.dir,{recursive:!0,force:!0}),N.info(k.dim(`  \u{1F5D1}\uFE0F Evicted stale workspace: ${ne.name}`));let ve=oe(`df -k "${F}" | tail -1 | awk '{print $4}'`,{encoding:"utf8"}).trim();if(parseInt(ve,10)*1024>=53687091200)break}catch{}}}}catch{}return await w(),Y}catch(U){throw await w(),U.message==="Command aborted"?(N.warn(k.yellow(`
-\u274C Build aborted.`)),await u("failed",{error:"Aborted by user",endTime:Date.now()}),U):(N.error(k.red(`
-\u2717 Local build failed: ${U.message}`)),await u("failed",{error:U.message,endTime:Date.now()}),U)}},Ep=async(e,t,n={},i,r)=>{let o=A.existsSync("android/gradlew")?"android/gradlew":A.existsSync("gradlew")?"./gradlew":null;if(!o)throw new Error("Could not find gradlew. Is this an Android project?");let s=e.developmentClient?"assembleDebug":"assembleRelease";!e.developmentClient&&e.distribution==="store"?s="bundleRelease":!e.developmentClient&&e.distribution==="internal"&&(s="assembleRelease");let a=e.buildCommand||s;N.info(k.blue(`Running Android build: ${a}...`));let l=o.includes("android/")?"android":".",d=(o.includes("android/"),"./gradlew"),c=[a],u=vt(e.framework),f={...n,...u.localAndroidEnv(e,t),MACH_APP_NAME:e.appName||e.name||"App"},p=e.resolvedVersionCode||n.ANDROID_VERSION_CODE,y=p?lt(p,"resolved MACH build assignment"):null;y&&(c.push(`-Pandroid.injected.version.code=${y}`),f.ANDROID_VERSION_CODE=y,N.info(k.green(`\u2713 Applying Android versionCode ${y}`)));for(let S of["app/build","build",".cxx"]){let b=E.join(l,S);A.existsSync(b)&&A.rmSync(b,{recursive:!0,force:!0})}Yr(process.cwd()),await Rt(d,c,l,f,i,r);let g=E.join(l,"app/build/outputs"),h=nn(g,[".apk",".aab"]);if(y&&h.length===0)throw new Error(`Android build produced no APK or AAB to verify against MACH versionCode ${y}.`);if(y)for(let S of h){let b=qr(S,y);N.info(k.dim(`Validated Android versionCode ${b} in ${E.basename(S)}`)),i?.(`[ANDROID VALID] ${E.basename(S)} versionCode ${b} matches MACH assignment
-`)}return h},Ip=async(e,t,n,i={},r,o,s,a,l)=>{if(process.platform!=="darwin")throw new Error("iOS builds can only be run on macOS.");let d=E.resolve(process.cwd(),A.existsSync("ios")?"ios":".");da(d);let c=A.readdirSync(d),u=c.find(T=>T.endsWith(".xcworkspace")),f=c.find(T=>T.endsWith(".xcodeproj")),p=Qt(i,n,e);ha(d,p,o);let y=e.resolvedBuildNumber||p.BUILD_NUMBER||p.CURRENT_PROJECT_VERSION,g=Hn(y);if(y&&!g)throw new Error(`Invalid iOS build number: "${y}". Apple requires one to three period-separated integers. Fix the Dashboard secret or remove it so Mach can use its auto build number.`);let h=g?[`BUILD_NUMBER=${g}`,`CURRENT_PROJECT_VERSION=${g}`,`INFOPLIST_KEY_CFBundleVersion=${g}`]:[];if(g&&(p.BUILD_NUMBER=g,p.CURRENT_PROJECT_VERSION=g,N.info(k.dim(`Using iOS build number: ${g}`))),!u&&!f)throw new Error("Could not find Xcode workspace or project in ios/ directory.");try{let T=oe("xcode-select -p").toString().trim();N.info(k.dim(`Using Xcode at: ${T}`))}catch{N.warn(k.dim("Could not detect Xcode path."))}N.info(k.blue("Running iOS build via xcodebuild..."));let S=u?u.replace(".xcworkspace",""):f?.replace(".xcodeproj",""),b=e.iosScheme||S||e.scheme,_=e.developmentClient?"Debug":e.iosConfiguration||"Release",w;try{if(g){w=Js(d,g,{workspace:u,project:f,scheme:b,configuration:_});let R=w.plistPaths.length>0?`${w.plistPaths.length} Xcode target Info.plist file(s)`:"generated Info.plist build settings";N.info(k.green(`\u2713 Applied iOS buildNumber ${g} to ${R}`)),o&&o(`[VERSIONING] Applied iOS buildNumber ${g} to ${R}
-`)}let T=(r||"default").replace(/[^a-zA-Z0-9-_]/g,"_"),B=E.join(ke.homedir(),`Library/Developer/Xcode/DerivedData/${m.nameLower}`,T);A.mkdirSync(B,{recursive:!0});let X=mn(p),U=E.join(B,".mach-env-hash"),K=E.join(B,"Build"),v=A.existsSync(U)?A.readFileSync(U,"utf-8").trim():"";if(A.existsSync(K)){let R=v&&v!==X?"Build environment changed \u2014 clearing iOS DerivedData build products.":v?"Clearing iOS DerivedData build products to force a fresh JS bundle.":"DerivedData has no environment stamp \u2014 clearing iOS build products.";N.info(k.dim(R)),A.rmSync(K,{recursive:!0,force:!0})}if(A.writeFileSync(U,X),Yr(process.cwd()),e.simulator){let R=pp(d,u,f,b,_),I=R||"generic/platform=iOS Simulator",$=["-destination",I];N.info(k.dim(R?`Building for simulator (Scheme: ${b}, Config: ${_}, Destination: ${I})...`:`Building for simulator (Scheme: ${b}, Config: ${_}, Destination: ${I})...`));let x=[u?"-workspace":"-project",u||f,"-scheme",b,"-configuration",_,"-sdk","iphonesimulator",...$,"-derivedDataPath",B,...h,"COMPILER_INDEX_STORE_ENABLE=NO","CODE_SIGNING_ALLOWED=NO","CODE_SIGNING_REQUIRED=NO","ONLY_ACTIVE_ARCH=NO","EXCLUDED_ARCHS=","SUPPORTED_PLATFORMS=iphonesimulator"];try{await xi(x,d,p,o,s)}catch(Q){if(!dp(Q))throw Q;cp(B),Yr(process.cwd()),await xi(x,d,p,o,s)}let P=E.join(B,"Build/Products",`${_}-iphonesimulator`),V=gp(P,b,e),G=E.basename(V,".app"),j=hn(E.join(V,"Info.plist"),"CFBundleIdentifier")||"unknown bundle",de=ra(V,g||void 0)[0].buildNumber,L=fa(V),z=ma(V),F=E.join(P,`${G}_simulator.zip`);return N.info(k.dim(`Selected simulator app: ${E.relative(P,V)} (${j}, build ${de})`)),N.info(k.dim(`Simulator executable architecture: ${L}`)),N.info(k.dim(`Simulator executable platform: ${z.split(`
-`).find(Q=>/\bplatform\b/i.test(Q))?.trim()||"IOSSIMULATOR"}`)),N.info(k.dim(`Creating simulator artifact: ${F}...`)),Qe(F),Pt("zip",["-r",F,E.basename(V)],{cwd:E.dirname(V),stdio:"pipe"}),[F]}else{N.info(k.dim(`Archiving (Scheme: ${b}, Config: ${_})...`));let R=E.join(d,"build.xcarchive"),I=E.join(d,"export");A.rmSync(R,{recursive:!0,force:!0}),A.rmSync(I,{recursive:!0,force:!0});let $=i.IOS_DIST_P12,x=i.IOS_PROVISIONING_PROFILE,P=i.IOS_P12_PASSWORD||"",V=[],G,j,Y={isAppStore:!1,isDevelopment:!1};if($&&x){N.info(k.blue("\u{1F510} CI/CD Signing: Importing certificates..."));try{let re=`${m.buildPrefix}-${t}.keychain-db`,ne=E.join(ke.tmpdir(),re),ve=m.keychainPassword;oe(`security create-keychain -p "${ve}" "${ne}" 2>/dev/null || true`),oe(`security set-keychain-settings -t 3600 -l "${ne}"`),oe(`security unlock-keychain -p "${ve}" "${ne}"`);let Xe=E.join(ke.tmpdir(),`cert-${t}.p12`),Nn=Buffer.from($,"base64");A.writeFileSync(Xe,Nn),N.info(k.dim(`P12 data size: ${Nn.length} bytes, first bytes: ${Nn.slice(0,4).toString("hex")}`)),(Nn.length<100||Nn[0]!==48)&&(N.warn(k.yellow("\u26A0\uFE0F  P12 data looks corrupted or was not decrypted correctly.")),N.warn(k.yellow("    This usually means MACH_ENCRYPTION_KEY on the Remote API differs from when credentials were uploaded.")));let eu=[P,"",m.keychainPassword],bs=!1;for(let Me of eu)try{oe(`security import "${Xe}" -k "${ne}" -P "${Me}" -A -T /usr/bin/codesign -T /usr/bin/security`,{stdio:"pipe"}),bs=!0,N.info(k.dim(`\u2713 P12 imported successfully with password: ${Me?"[set]":"[empty]"}`));break}catch(at){N.info(k.dim(`  P12 import attempt with password ${Me?`"${Me.substring(0,3)}..."`:"[empty]"} failed: ${at.message?.split(`
-`)[0]||"unknown"}`))}if(!bs)throw new Error("Failed to import P12.");A.unlinkSync(Xe),oe(`security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k "${ve}" "${ne}"`);let tu=oe("security list-keychains -d user",{encoding:"utf-8"}).split(`
-`).map(Me=>Me.trim().replace(/^"|"$/g,"")).filter(Me=>Me.length>0),nu=[ne,...tu].map(Me=>`"${Me}"`).join(" ");oe(`security list-keychains -d user -s ${nu}`),oe(`security default-keychain -s "${ne}"`);let Nr=E.join(ke.homedir(),"Library/MobileDevice/Provisioning Profiles");A.mkdirSync(Nr,{recursive:!0});let Ss=Buffer.from(x,"base64"),xr=E.join(Nr,`${m.nameLower}-temp-${t}.mobileprovision`);A.writeFileSync(xr,Ss);let Tr=Ss.toString("utf-8"),As=/<key>get-task-allow<\/key>\s*<true\/>/.test(Tr);Y={isAppStore:!Tr.includes("<key>ProvisionedDevices</key>")&&!As,isDevelopment:As};try{let at=oe(`security cms -D -i "${xr}"`,{encoding:"utf-8"}).match(/<key>UUID<\/key>\s*<string>([^<]+)<\/string>/);j=at?at[1]:void 0}catch{let at=Tr.match(/<key>UUID<\/key>\s*<string>([^<]+)<\/string>/);j=at?at[1]:void 0}j||(N.warn("Could not extract UUID from provisioning profile. Using fallback."),j=`${m.nameLower}-${t}`);let Lr=E.join(Nr,`${j}.mobileprovision`);A.existsSync(Lr)&&A.unlinkSync(Lr),A.renameSync(xr,Lr);try{let Me=oe(`security find-identity -v -p codesigning "${ne}"`,{encoding:"utf-8"}),at=Array.from(Me.matchAll(/"((?:Apple|iPhone) (?:Distribution|Developer|Development)[^"]*)"/g),xn=>xn[1]),Es=Y.isDevelopment?at.find(xn=>/\b(Development|Developer)\b/.test(xn)):at.find(xn=>/\bDistribution\b/.test(xn)),Is=at[0];(Es||Is)&&(G=Es||Is,N.info(k.blue(`Identity auto-detected from keychain: "${G}"`)))}catch{}G||(G=Y.isDevelopment?"Apple Development":"Apple Distribution",N.info(k.blue(`Identity fallback (profile heuristic): "${G}"`))),N.info(k.dim(`Profile type: ${Y.isDevelopment?"Development":Y.isAppStore?"App Store":"Ad-Hoc"}`)),N.info(k.dim(`Identity Detection: get-task-allow=${Y.isDevelopment}, Selected Identity="${G}"`)),V.push("CODE_SIGN_STYLE=Manual"),V.push(`CODE_SIGN_IDENTITY="${G}"`),V.push(`PROVISIONING_PROFILE_SPECIFIER=${j}`),e.iosTeamId&&V.push(`DEVELOPMENT_TEAM=${e.iosTeamId}`)}catch(re){throw N.error(`Signing setup failed: ${re.message}`),re}}else V.push("-allowProvisioningUpdates"),e.iosTeamId&&V.push(`DEVELOPMENT_TEAM=${e.iosTeamId}`);l&&await l("archive"),N.info(k.blue(`Archive detected Identity: "${G}"`)),N.info(k.blue(`Archive detected UUID: "${j}"`)),await xi(["archive",u?"-workspace":"-project",u||f,"-scheme",b,"-configuration",_,"-archivePath",R,"-derivedDataPath",B,...h,...V],d,p,o,s);let de=nn(E.join(R,"Products","Applications"),[".app"]);for(let re of de)for(let ne of ra(re,g||void 0))N.info(k.dim(`Validated iOS CFBundleVersion ${ne.buildNumber} in ${E.basename(ne.bundlePath)}`));let L;j?(Y.isAppStore?L="app-store":Y.isDevelopment?L="development":L="ad-hoc",N.info(k.blue(`Export method from profile: "${L}"`))):(L=e.distribution==="store"?"app-store":e.distribution==="internal"?"ad-hoc":"development",N.warn(k.yellow(`No profile UUID detected. Export method from distribution flag: "${L}"`)));let z=e.iosExportMethod||L,F=e.iosBundleIdentifier||et("ios"),Q=E.join(d,"ExportOptions.plist"),ce=`<?xml version="1.0" encoding="UTF-8"?>
-<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
-<plist version="1.0">
-<dict>
-    <key>method</key>
-    <string>${z}</string>
-    <key>destination</key>
-    <string>export</string>
-    <key>signingStyle</key>
-    <string>${j?"manual":"automatic"}</string>
-    <key>thinning</key>
-    <string>&lt;none&gt;</string>
-    ${e.iosTeamId?`<key>teamID</key><string>${e.iosTeamId}</string>`:""}
-    ${F&&j?`
-    <key>provisioningProfiles</key>
-    <dict>
-        <key>${F}</key>
-        <string>${j}</string>
-    </dict>`:""}
-</dict>
-</plist>`;if(A.writeFileSync(Q,ce),process.env[`${m.envPrefix}DEBUG`]&&N.info(k.magenta(`[${m.nameUpper}_DEBUG] ExportOptions.plist:
-${ce}`)),l&&await l("export"),N.info(k.blue(`Exporting with Bundle ID: "${F}"`)),N.info(k.blue(`Exporting with Method: "${z}"`)),o){o(k.magenta(`
-[DIAGNOSTIC] Checking available signing identities...
-`));try{let re=oe("security find-identity -v -p codesigning",{encoding:"utf-8"});o(k.magenta(`${re}
-`))}catch(re){o(k.red(`[DIAGNOSTIC] Failed to list identities: ${re.message}
-`))}}await xi(["-exportArchive","-archivePath",R,"-exportPath",I,"-exportOptionsPlist",Q],d,p,o,s),l&&await l("validate");let Be=nn(I,[".ipa"]);for(let re of Be)try{oe(`unzip -t "${re}"`,{stdio:"pipe"});let ne=ga(re,g||void 0);o&&o(`[IPA VALID] ${E.basename(re)} \u2014 archive integrity OK
-`),o&&o(`[IPA VALID] CFBundleVersion ${ne}
-`)}catch(ne){let ve=`IPA validation failed for ${E.basename(re)}: ${ne.message||"archive may be corrupt"}`;throw o&&o(`[IPA CORRUPT] ${ve}
-`),new Error(ve)}return Be}}finally{w?.restore()}},et=e=>{try{let t=E.join(process.cwd(),m.configFileName);if(A.existsSync(t)){let n=JSON.parse(A.readFileSync(t,"utf-8"));if(e==="android"&&n.android?.package)return n.android.package;if(e==="ios"&&n.ios?.bundleIdentifier)return n.ios.bundleIdentifier}if(e==="android"){let n=["android/app/build.gradle","app/build.gradle","build.gradle"];for(let i of n)if(A.existsSync(i)){let o=A.readFileSync(i,"utf-8").match(/applicationId\s+['"]([^'"]+)['"]/);if(o)return o[1]}}else{let n=E.resolve(process.cwd(),A.existsSync("ios")?"ios":"."),i=nn(n,["Info.plist"]).filter(s=>!s.includes("/Pods/")&&!s.includes("/build/")&&!s.includes("/DerivedData/"));i.sort((s,a)=>a.split("/").length-s.split("/").length);for(let s of i){let l=A.readFileSync(s,"utf-8").match(/<key>CFBundleIdentifier<\/key>\s*<string>([^<]+)<\/string>/);if(l&&!l[1].includes("$"))return l[1]}let r=nn(n,[".xcodeproj"]);if(r.length>0){let s=E.join(r[0],"project.pbxproj");if(A.existsSync(s)){let l=A.readFileSync(s,"utf-8").match(/PRODUCT_BUNDLE_IDENTIFIER\s*=\s*"?([^";\s]+)"?;/);if(l)return l[1]}}let o=["app.json","app.config.json","app.config.js","app.config.ts"];for(let s of o)if(A.existsSync(s)){let l=A.readFileSync(s,"utf-8").match(/"bundleIdentifier":\s*"([^"]+)"/);if(l)return l[1]}}}catch{return null}return null},wp=()=>{try{return oe("emulator -version",{stdio:"ignore"}),"emulator"}catch{let t=ke.homedir(),n=[E.join(t,"Library/Android/sdk/emulator/emulator"),E.join(t,"Android/Sdk/emulator/emulator"),"/usr/local/lib/android/sdk/emulator/emulator"];for(let i of n)if(A.existsSync(i))return i}return"emulator"},vp=async(e,t)=>{let n=Ti();try{if(oe("adb devices").toString().split(`
-`).slice(1).map(s=>s.trim()).filter(s=>s.length>0&&!s.startsWith("*")).map(s=>s.split("	")[0]).length===0){N.warn(k.yellow("No Android devices or emulators found."));let s=wp(),a=[];try{a=oe(`${s} -list-avds`).toString().split(`
-`).filter(l=>l.trim().length>0)}catch{}if(a.length>0){let l=await Xr({message:"Select an emulator to launch:",options:a.map(u=>({value:u,label:u}))});if(Li(l))return;n.start(`Launching emulator ${l}...`),oa(s,["-avd",l],{detached:!0,stdio:"ignore"}).unref();let d=0,c=!1;for(;d<60;){try{if(oe("adb shell getprop sys.boot_completed",{stdio:"pipe"}).toString().trim()==="1"){c=!0;break}}catch{}await new Promise(u=>setTimeout(u,2e3)),d++}if(!c)throw n.stop("Emulator launch timed out."),new Error("Emulator launch timed out. Please try launching it manually.");n.stop("Emulator launched.")}else throw new Error("No devices found and no emulators available to launch. (Make sure Android SDK is installed)")}n.start("Installing APK on device..."),await Rt("adb",["install","-r",e],process.cwd(),{},t),n.stop("Installation complete.");let o=et("android");if(o){N.info(k.blue(`\u{1F680} Launching ${o}...`));try{oe(`adb shell dumpsys package ${o}`).toString().split(`
-`).find(l=>l.includes("android.intent.action.MAIN")&&l.includes("android.intent.category.LAUNCHER"))?oe(`adb shell monkey -p ${o} -c android.intent.category.LAUNCHER 1`,{stdio:"ignore"}):oe(`adb shell monkey -p ${o} -c android.intent.category.LAUNCHER 1`,{stdio:"ignore"})}catch{N.warn("Could not auto-launch app. You may need to open it manually.")}}}catch(i){n.stop("Installation failed."),N.error(k.red(`Failed to install APK: ${i.message}`))}},$p=async(e,t,n)=>{let i=Ti();try{if(!oe("xcrun simctl list devices booted").toString().includes("(Booted)")){N.warn(k.yellow("No iOS Simulator is currently booted."));let o=oe("xcrun simctl list devices --json").toString(),s=JSON.parse(o).devices,a=[];Object.keys(s).forEach(u=>{s[u].forEach(f=>{f.isAvailable&&a.push({...f,runtime:u})})});let l=await Xr({message:"Select a simulator to launch:",options:a.map(u=>({value:u.udid,label:`${u.name} (${u.runtime.split(".").pop()})`}))});if(Li(l))return;i.start(`Booting ${l}...`),oe(`xcrun simctl boot ${l}`),oe(`open -a Simulator --args -CurrentDeviceUDID ${l}`);let d=0,c=!1;for(;d<30;){try{if(oe("xcrun simctl list devices booted").toString().includes(l)){c=!0;break}}catch{}await new Promise(u=>setTimeout(u,2e3)),d++}if(!c)throw i.stop("Simulator boot timed out."),new Error("Simulator boot timed out.");i.stop("Simulator booted.")}i.start("Installing on iOS Simulator..."),fa(e),ma(e),await Rt("xcrun",["simctl","install","booted",e],process.cwd(),{},n),i.stop("Installation complete."),N.info(k.blue(`\u{1F680} Launching ${t}...`)),await Rt("xcrun",["simctl","launch","booted",t],process.cwd(),{},n)}catch(r){i.stop("Installation failed."),N.error(k.red(`Failed to install on Simulator: ${r.message}`))}},_p=async(e,t,n)=>{let i=Ti();i.start("Scanning for connected iOS devices...");try{let r=oe("xcrun devicectl list devices --json-output -").toString(),s=(JSON.parse(r).result?.devices||[]).filter(l=>l.connectionProperties?.transportType==="wired"||l.connectionProperties?.transportType==="localNetwork");if(s.length===0)throw i.stop("No connected iOS devices found."),new Error("Please connect your iPhone via USB or ensure it is on the same Wi-Fi for wireless debugging.");let a=s[0].identifier;if(s.length>1){i.stop();let l=await Xr({message:"Select a device to install on:",options:s.map(d=>({value:d.identifier,label:`${d.deviceProperties?.name||d.name||d.model?.name} (${d.model?.name||"iPhone"}) - ${d.identifier}`}))});if(Li(l))return;a=l,i.start(`Installing on ${a}...`)}else i.message(`Installing on ${s[0].model.name}...`);await Rt("xcrun",["devicectl","device","install","app","--device",a,e],process.cwd(),{},n),i.stop("Installation complete."),N.info(k.blue(`\u{1F680} Launching ${t}...`)),await Rt("xcrun",["devicectl","device","launch","app","--device",a,t],process.cwd(),{},n)}catch(r){i.stop("Installation failed."),N.error(k.red(`Failed to install on device: ${r.message}`)),N.info(k.dim('Make sure your device is unlocked and "Developer Mode" is enabled in Settings -> Privacy & Security.'))}};import eo from"fs";import Ui from"path";import{spawnSync as Pp}from"child_process";var Te=e=>{if(typeof e!="string")return;let t=e.trim();return t.length>0?t:void 0},ya=e=>e==null?void 0:Te(String(e)),Sa=e=>{if(!eo.existsSync(e))return null;try{return JSON.parse(eo.readFileSync(e,"utf-8"))}catch{return null}},Rp=e=>{let t=e.trim();if(!t)return null;try{return JSON.parse(t)}catch{let n=t.indexOf("{"),i=t.lastIndexOf("}");if(n<0||i<=n)return null;try{return JSON.parse(t.slice(n,i+1))}catch{return null}}};function ba(e=process.cwd()){let t=Sa(Ui.join(e,"package.json"))||{};return Te(t.version)}function Cp(e=process.cwd()){let t=Sa(Ui.join(e,"package.json"))||{},n={...t.dependencies||{},...t.devDependencies||{}};if(n.expo)return"expo";if(n["react-native"])return"react-native"}function Aa(e=process.cwd(),t={}){let n=process.platform==="win32"?Ui.join(e,"node_modules",".bin","expo.cmd"):Ui.join(e,"node_modules",".bin","expo"),i=eo.existsSync(n),s=Pp(i?n:"npx",i?["config","--type","public","--json"]:["--no-install","expo","config","--type","public","--json"],{cwd:e,encoding:"utf-8",stdio:["ignore","pipe","pipe"],env:{...process.env,EXPO_NO_TELEMETRY:"1",...t}});return s.error||s.status!==0?null:Rp(s.stdout||"")}var Ea=e=>{let t=Te(e);if(!(!t||t==="manual"))return t},Mi=(e,t,n,i={})=>{let r=Te(e);if(r)return r;if(!e||typeof e!="object")return;let o=Te(e.policy);if(o==="appVersion")return Te(t.version);if(o==="sdkVersion")return Te(t.sdkVersion);if(o==="nativeVersion"){let s=Te(t.version);if(!s||!n)return;let a=n==="ios"?ya(i.iosBuildNumber)||ya(t.ios?.buildNumber):i.androidVersionCode!==void 0?String(i.androidVersionCode).trim():t.android?.versionCode!==void 0?String(t.android.versionCode).trim():void 0;return!a||a.toLowerCase()==="auto"?s:a?`${s}(${a})`:s}};function Op(e,t,n={},i){let r=t?Mi(e[t]?.runtimeVersion,e,t,n):void 0;if(r)return r;let o=Mi(e.runtimeVersion,e,t,n);return o||(i?Mi({policy:i},e,t,n):void 0)}function Dp(e,t){if(!(!e||typeof e!="object"))return Te(t?e[t]?.runtimeVersion:void 0)||Te(e.runtimeVersion)}function zn(e,t){let n=Aa(e,{MACH_OTA_RUNTIME_VERSION:t.runtimeVersion,MACH_OTA_CHANNEL:t.channel,MACH_OTA_URL:t.url});return n?{runtimeVersion:Dp(n,t.platform),channel:Te(n.updates?.requestHeaders?.["expo-channel-name"]),url:Te(n.updates?.url),expoConfig:n}:null}function kp(e,t,n={}){let i=Te(n.runtimeVersion)||Te(e.ota?.runtimeVersion);if(i)return i;let r={iosBuildNumber:n.iosBuildNumber,androidVersionCode:n.androidVersionCode},o=Ea(e.ota?.runtimeVersionPolicy);if(o){let s=Mi({policy:o},t,n.platform,r);if(s)return s}return Op(t,n.platform,r)}function Kn(e,t={}){let n=t.cwd||process.cwd(),i=Te(t.runtimeVersion)||Te(e.ota?.runtimeVersion);if(i)return i;let r=Ea(e.ota?.runtimeVersionPolicy),o={iosBuildNumber:t.iosBuildNumber,androidVersionCode:t.androidVersionCode};if((t.framework||e.framework||Cp(n))==="expo"){let a=Aa(n),l=a?kp(e,a,{platform:t.platform,iosBuildNumber:o.iosBuildNumber,androidVersionCode:o.androidVersionCode}):void 0;if(l)return l}return ba(n)||"1.0.0"}import M from"fs";import bn from"os";import q from"path";import{spawn as Ca,spawnSync as bt}from"child_process";import{randomUUID as Np}from"crypto";import{pipeline as xp}from"stream/promises";import{isCancel as ro,log as H,select as Oa,spinner as Jn,text as Tp}from"@clack/prompts";import Wn from"axios";import W from"chalk";import Fi from"adm-zip";var Lp={android:"pixel_6",ios:"iphone_17_pro"};function oo(e){return Lp[e]}async function Da(e){if(e.localRunner){let n=await jp(e);process.exitCode=n?n.exitCode:1;return}if(e.local){let n=await Hp(e);n&&(process.exitCode=n.exitCode);return}let t=await co(e);if(t&&(H.success(W.green(`Maestro run ${t.status||"queued"}: ${t.testRunId}`)),t.launchDeferredReason&&H.warn(W.yellow(t.launchDeferredReason)),t.dashboardUrl&&H.info(W.dim("View test run: ")+W.white.underline(t.dashboardUrl)),e.wait)){let n=await Vp(e,t);n&&(process.exitCode=n.status==="passed"?0:1)}}var Mp=new Set(["passed","failed","cancelled","interrupted"]),Ia=Number(process.env.MACH_FLOW_UPLOAD_MAX_ATTEMPTS||4),Up=Number(process.env.MACH_FLOW_UPLOAD_TIMEOUT_MS||12e4),ka=process.env.MACH_MAESTRO_FAST_FAIL_RETRY==="1";function lo(e){let t=Array.isArray(e)?e:e?[e]:[];return[...new Set(t.flatMap(n=>String(n||"").split(",")).map(n=>n.trim()).filter(Boolean))]}function Fp(e){let t=lo(e);if(t.length===0)return;let n={};for(let i of t){let r=process.env[i];r!==void 0&&(n[i]=r)}return Object.keys(n).length>0?n:void 0}function Bp(e){let t={};for(let[i,r]of Object.entries(process.env))i.startsWith("MAESTRO_TEST_")&&r!==void 0&&(t[i]=r);let n=lo(e);for(let i of n){let r=process.env[i];r!==void 0&&(t[i]=r)}return t}async function jp(e){let t=e.projectId,n=e.testRunId,i=e.runnerToken||process.env.MACH_RUNNER_TOKEN||process.env.MACH_TOKEN,r=(process.env.MACH_API_URL||xt).replace(/\/$/,""),o=M.mkdtempSync(q.join(bn.tmpdir(),"mach-maestro-runner-")),s=q.join(o,"mach-maestro-output"),a=q.join(o,"runner.log");if(M.mkdirSync(s,{recursive:!0}),!t||!n||!i)return H.error(W.red("--local-runner requires --project-id, --test-run-id, and a runner token.")),{status:"failed",exitCode:1,attempts:0,flows:".maestro",platform:e.platform};let l=null,d=null,c=null,u,f,p=g=>{M.appendFileSync(a,`${g}${g.endsWith(`
+`;var Mo=e=>e.replace(/\\/g,"\\\\").replace(/"/g,'\\"').replace(/\$/g,"\\$").replace(/`/g,"\\`"),Uo=async(e,t,n={},i)=>{let r=vd(),o=Cn(e.framework);e.sshHost||(e.sshHost="localhost",gt.message(We.yellow("No SSH host provided, defaulting to localhost."))),r.start(`Connecting to remote Mac at ${We.cyan(e.sshHost)}...`);let s=e.sshUser||process.env.USER||"ubuntu",a=e.sshKey,l=`${s}@${e.sshHost}`,d=`ssh ${a?`-i ${a}`:""} -o StrictHostKeyChecking=no ${l}`,c=`scp ${a?`-i ${a}`:""} -o StrictHostKeyChecking=no`;try{let u=s==="ubuntu"?"/home/ubuntu":`/Users/${s}`,f=(n.PROJECT_ID||"default_project").replace(/[^a-zA-Z0-9-_]/g,"_"),p=`${u}/${m.remoteWorkspacesDir}/${f}`;r.message(`Preparing stable workspace: ${p}...`),Vt(`${d} "mkdir -p ${p}"`,{stdio:"inherit"}),r.message("Transferring source code...");let g=`/tmp/${m.nameLower}-source-${t}.zip`;Vt(`${c} ${g} ${l}:${p}/source.zip`,{stdio:"inherit"});let h=e.iosApiKeyPath?`${p}/api_key.p8`:"",y="";e.iosApiKeyPath&&(r.message("Uploading App Store Connect API key..."),Vt(`${c} ${e.iosApiKeyPath} ${l}:${h}`),e.iosApiKeyId&&e.iosApiKeyIssuer&&(y=`-authenticationKeyID ${e.iosApiKeyId} -authenticationKeyIssuerID ${e.iosApiKeyIssuer} -authenticationKeyPath ${h}`));let b={};if(i)try{let E=await $.post(`/builds/${i}/${t}/build-urls`,{platform:"ios"});E.data.status==="success"&&(b=E.data.urls)}catch(E){gt.warn(We.yellow(`Could not fetch build URLs: ${E.message}`))}let w="";if(b.credentials&&b.credentials.length>0)for(let E of b.credentials)E.type==="p12"?w+=`curl -sf -o "$CERT_DIR/${E.name}" "${E.downloadUrl}" || true
+`:E.type==="mobileprovision"&&(w+=`curl -sf -o "$PROV_TEMP/${E.name}" "${E.downloadUrl}" || true
+`);r.message("Generating macOS build script...");let L=process.env.CODEARTIFACT_AUTH_TOKEN?`export CODEARTIFACT_AUTH_TOKEN="${process.env.CODEARTIFACT_AUTH_TOKEN}"
+`:"";if(n)for(let[E,A]of Object.entries(n)){let D=A.replace(/"/g,'\\"').replace(/\$/g,"\\$").replace(/`/g,"\\`");L+=`export ${E}="${D}"
+`}let _=e.buildProfile||"production",H=Tn(n,_,e),W=kn(H);gt.info(We.dim(`iOS remote build config: simulator=${String(!!e.simulator)}, configuration=${e.iosConfiguration||"Release"}, scheme=${e.iosScheme||"auto"}`));let Z=[L,b.logUpload?`export PRESIGNED_LOG_UPLOAD="${b.logUpload}"`:"",b.doneMarker?`export PRESIGNED_DONE_MARKER="${b.doneMarker}"`:"",b.cacheDerivedDataDownload?`export PRESIGNED_CACHE_DD_DOWNLOAD="${b.cacheDerivedDataDownload}"`:"",b.cacheDerivedDataUpload?`export PRESIGNED_CACHE_DD_UPLOAD="${b.cacheDerivedDataUpload}"`:"",b.cacheNodeModulesDownload?`export PRESIGNED_CACHE_NODE_DOWNLOAD="${b.cacheNodeModulesDownload}"`:"",b.cacheNodeModulesUpload?`export PRESIGNED_CACHE_NODE_UPLOAD="${b.cacheNodeModulesUpload}"`:"",b.cachePodsDownload?`export PRESIGNED_CACHE_PODS_DOWNLOAD="${b.cachePodsDownload}"`:"",b.cachePodsUpload?`export PRESIGNED_CACHE_PODS_UPLOAD="${b.cachePodsUpload}"`:"",b.artifactIpaUpload?`export PRESIGNED_ARTIFACT_IPA_UPLOAD="${b.artifactIpaUpload}"`:"",b.artifactAppZipUpload?`export PRESIGNED_ARTIFACT_APP_ZIP_UPLOAD="${b.artifactAppZipUpload}"`:"",`export BUILD_ID="${t}"`,`export MACH_BUILD_PROFILE="${Mo(_)}"`,`export MACH_APP_NAME="${Mo(H.MACH_APP_NAME)}"`,`export MACH_ENV_FINGERPRINT="${W}"`,o.remoteEnvSetupScript().trim(),`export ${m.envPrefix}PROJECT_ID="${f}"`,n.MATCH_ENCRYPTION_PASSPHRASE?`export MATCH_PASSWORD="${n.MATCH_ENCRYPTION_PASSPHRASE}"`:"",n.APPLE_TEAM_ID?`export FASTLANE_TEAM_ID="${n.APPLE_TEAM_ID}"`:"",`export MATCH_KEYCHAIN_NAME="${m.credentialsKeychain}"`,`export MATCH_KEYCHAIN_PASSWORD="${m.keychainPassword}"`].filter(Boolean).join(`
+`),Ee=e.nodeVersion?[`echo "[NODE] Switching to Node ${e.nodeVersion}..."`,'export NVM_DIR="$HOME/.nvm"','[ -s "$NVM_DIR/nvm.sh" ] && . "$NVM_DIR/nvm.sh" --no-use',`nvm install ${e.nodeVersion} 2>/dev/null || true`,`nvm use ${e.nodeVersion} --silent`,`export PATH="$NVM_DIR/versions/node/$(nvm version ${e.nodeVersion})/bin:$PATH"`,'echo "[NODE] Now using: $(node -v) at $(which node)"'].join(`
+`):"",oe=Lo,R={"{{REMOTE_DIR}}":p,"{{ENV_VARS}}":Z,"{{CREDENTIAL_DOWNLOADS}}":w,"{{IOS_SCHEME}}":e.iosScheme||"","{{IOS_CONFIG}}":e.iosConfiguration||"Release","{{TEAM_ID}}":e.iosTeamId||"","{{AUTH_PARAMS}}":y,"{{IS_SIMULATOR}}":e.simulator?"true":"false","{{BUILD_ID}}":t,"{{EXPORT_METHOD}}":e.iosExportMethod||"ad-hoc","{{NODE_VERSION_SETUP}}":Ee,"{{FRAMEWORK_PREBUILD}}":o.iosRemotePrebuildScript().trim()};Object.entries(R).forEach(([E,A])=>{oe=oe.split(E).join(A)});let T=`/tmp/${m.nameLower}-mac-build-${t}.sh`;if(_d.writeFileSync(T,oe),Vt(`${c} ${T} ${l}:${p}/build.sh`),r.stop("Remote script uploaded."),gt.info(We.cyan("Executing remote build. This might take a while...")),Vt(`${d} "bash ${p}/build.sh"`,{stdio:"inherit"}),r.stop("Remote build finished!"),i){r.start("Fetching artifact links...");try{let A=(await $.get(`/builds/${i}/${t}/artifacts`)).data.artifacts||[],D=e.simulator===!0;if(A.length===0&&!D)throw r.stop("Build Failed!"),new Error("Build completed but no artifacts were generated. Check build logs for errors.");if(r.stop("Build Successful!"),A.length>0){gt.success("Build Artifacts Ready:");for(let v of A)console.log(`
+${We.yellow(v.name)}:
+${We.cyan(v.downloadUrl)}`);console.log(`
+${We.dim("Note: Links are valid for 7 days.")}`)}else D&&gt.warn("Simulator build completed. No artifacts uploaded.")}catch(E){r.stop("Could not fetch artifacts"),gt.warn(We.yellow(`Artifact listing failed: ${E.message}`))}}}catch(u){throw r.stop("iOS Build Failed"),u}};import zi from"fs";import Bn from"path";import{spawnSync as $d}from"child_process";var he=e=>{if(typeof e!="string")return;let t=e.trim();return t.length>0?t:void 0},Fo=e=>e==null?void 0:he(String(e)),jo=e=>{if(!zi.existsSync(e))return null;try{return JSON.parse(zi.readFileSync(e,"utf-8"))}catch{return null}},Rd=e=>{let t=e.trim();if(!t)return null;try{return JSON.parse(t)}catch{let n=t.indexOf("{"),i=t.lastIndexOf("}");if(n<0||i<=n)return null;try{return JSON.parse(t.slice(n,i+1))}catch{return null}}};function Bo(e=process.cwd()){let t=jo(Bn.join(e,"package.json"))||{};return he(t.version)}function Od(e=process.cwd()){let t=jo(Bn.join(e,"package.json"))||{},n={...t.dependencies||{},...t.devDependencies||{}};if(n.expo)return"expo";if(n["react-native"])return"react-native"}function Ho(e=process.cwd(),t={}){let n=process.platform==="win32"?Bn.join(e,"node_modules",".bin","expo.cmd"):Bn.join(e,"node_modules",".bin","expo"),i=zi.existsSync(n),s=$d(i?n:"npx",i?["config","--type","public","--json"]:["--no-install","expo","config","--type","public","--json"],{cwd:e,encoding:"utf-8",stdio:["ignore","pipe","pipe"],env:{...process.env,EXPO_NO_TELEMETRY:"1",...t}});return s.error||s.status!==0?null:Rd(s.stdout||"")}var Go=e=>{let t=he(e);if(!(!t||t==="manual"))return t},Fn=(e,t,n,i={})=>{let r=he(e);if(r)return r;if(!e||typeof e!="object")return;let o=he(e.policy);if(o==="appVersion")return he(t.version);if(o==="sdkVersion")return he(t.sdkVersion);if(o==="nativeVersion"){let s=he(t.version);if(!s||!n)return;let a=n==="ios"?Fo(i.iosBuildNumber)||Fo(t.ios?.buildNumber):i.androidVersionCode!==void 0?String(i.androidVersionCode).trim():t.android?.versionCode!==void 0?String(t.android.versionCode).trim():void 0;return!a||a.toLowerCase()==="auto"?s:a?`${s}(${a})`:s}};function Dd(e,t,n={},i){let r=t?Fn(e[t]?.runtimeVersion,e,t,n):void 0;if(r)return r;let o=Fn(e.runtimeVersion,e,t,n);return o||(i?Fn({policy:i},e,t,n):void 0)}function Pd(e,t){if(!(!e||typeof e!="object"))return he(t?e[t]?.runtimeVersion:void 0)||he(e.runtimeVersion)}function zt(e,t){let n=Ho(e,{MACH_OTA_RUNTIME_VERSION:t.runtimeVersion,MACH_OTA_CHANNEL:t.channel,MACH_OTA_URL:t.url});return n?{runtimeVersion:Pd(n,t.platform),channel:he(n.updates?.requestHeaders?.["expo-channel-name"]),url:he(n.updates?.url),expoConfig:n}:null}function Cd(e,t,n={}){let i=he(n.runtimeVersion)||he(e.ota?.runtimeVersion);if(i)return i;let r={iosBuildNumber:n.iosBuildNumber,androidVersionCode:n.androidVersionCode},o=Go(e.ota?.runtimeVersionPolicy);if(o){let s=Fn({policy:o},t,n.platform,r);if(s)return s}return Dd(t,n.platform,r)}function Kt(e,t={}){let n=t.cwd||process.cwd(),i=he(t.runtimeVersion)||he(e.ota?.runtimeVersion);if(i)return i;let r=Go(e.ota?.runtimeVersionPolicy),o={iosBuildNumber:t.iosBuildNumber,androidVersionCode:t.androidVersionCode};if((t.framework||e.framework||Od(n))==="expo"){let a=Ho(n),l=a?Cd(e,a,{platform:t.platform,iosBuildNumber:o.iosBuildNumber,androidVersionCode:o.androidVersionCode}):void 0;if(l)return l}return Bo(n)||"1.0.0"}import O from"fs";import $t from"os";import x from"path";import{spawn as Xo,spawnSync as Ge}from"child_process";import{randomUUID as Td}from"crypto";import{pipeline as kd}from"stream/promises";import{isCancel as Ji,log as C,select as Zo,spinner as qt,text as Nd}from"@clack/prompts";import Wt from"axios";import k from"chalk";import jn from"adm-zip";var xd={android:"pixel_6",ios:"iphone_17_pro"};function Yi(e){return xd[e]}async function Qo(e){if(e.localRunner){let n=await Bd(e);process.exitCode=n?n.exitCode:1;return}if(e.local){let n=await jd(e);n&&(process.exitCode=n.exitCode);return}let t=await er(e);if(t&&(C.success(k.green(`Maestro run ${t.status||"queued"}: ${t.testRunId}`)),t.launchDeferredReason&&C.warn(k.yellow(t.launchDeferredReason)),t.dashboardUrl&&C.info(k.dim("View test run: ")+k.white.underline(t.dashboardUrl)),e.wait)){let n=await Hd(e,t);n&&(process.exitCode=n.status==="passed"?0:1)}}var Ld=new Set(["passed","failed","cancelled","interrupted"]),Vo=Number(process.env.MACH_FLOW_UPLOAD_MAX_ATTEMPTS||4),Md=Number(process.env.MACH_FLOW_UPLOAD_TIMEOUT_MS||12e4),es=process.env.MACH_MAESTRO_FAST_FAIL_RETRY==="1";function Qi(e){let t=Array.isArray(e)?e:e?[e]:[];return[...new Set(t.flatMap(n=>String(n||"").split(",")).map(n=>n.trim()).filter(Boolean))]}function Ud(e){let t=Qi(e);if(t.length===0)return;let n={};for(let i of t){let r=process.env[i];r!==void 0&&(n[i]=r)}return Object.keys(n).length>0?n:void 0}function Fd(e){let t={};for(let[i,r]of Object.entries(process.env))i.startsWith("MAESTRO_TEST_")&&r!==void 0&&(t[i]=r);let n=Qi(e);for(let i of n){let r=process.env[i];r!==void 0&&(t[i]=r)}return t}async function Bd(e){let t=e.projectId,n=e.testRunId,i=e.runnerToken||process.env.MACH_RUNNER_TOKEN||process.env.MACH_TOKEN,r=(process.env.MACH_API_URL||Qe).replace(/\/$/,""),o=O.mkdtempSync(x.join($t.tmpdir(),"mach-maestro-runner-")),s=x.join(o,"mach-maestro-output"),a=x.join(o,"runner.log");if(O.mkdirSync(s,{recursive:!0}),!t||!n||!i)return C.error(k.red("--local-runner requires --project-id, --test-run-id, and a runner token.")),{status:"failed",exitCode:1,attempts:0,flows:".maestro",platform:e.platform};let l=null,d=null,c=null,u,f,p=h=>{O.appendFileSync(a,`${h}${h.endsWith(`
 `)?"":`
-`}`)},y=async(g,h)=>{try{await Wn.post(`${r}/internal/tests/${encodeURIComponent(n)}/runner`,{projectId:t,runnerToken:i,status:g,error:h,logPreview:Xp(a),device:f,junitUrl:l?.urls?.junitDownloadUrl,logsUrl:l?.urls?.logsDownloadUrl,artifactsUrl:l?.urls?.artifactsDownloadUrl})}catch(S){p(`[WARN] Could not post runner update: ${S.message||S}`)}};try{p(`Mach Maestro local runner starting for ${n}`);let g=await Wn.post(`${r}/internal/tests/${encodeURIComponent(n)}/runner-payload`,{projectId:t,runnerToken:i});if(g.data?.status!=="success"||!g.data?.payload)throw new Error(g.data?.message||"Runner payload was not returned.");l=g.data.payload;let h=Object.keys(l.env||{});p(`Using Maestro env vars: ${h.length>0?h.join(", "):"none"}`);let S={...process.env,...l.env||{}},b=Zp(l.env);b.length>0&&p(`Passing Maestro env vars to test command: ${h.sort().join(", ")}`),await y("running");let _=l.platform==="android"?"app.apk":"app.zip",w=q.join(o,_),T=q.join(o,"source.zip"),B=q.join(o,"source");M.mkdirSync(B,{recursive:!0}),p("Downloading app artifact..."),await so(l.artifactUrl,w),p(`Downloaded app artifact: ${_} (${va(M.statSync(w).size)})`),p("Downloading Maestro source..."),await so(l.urls.sourceUrl,T),p(`Downloaded Maestro source: source.zip (${va(M.statSync(T).size)})`),new Fi(T).extractAllTo(B,!0);let X=Qp(B,l.flowPath||".maestro");if(!M.existsSync(X))throw new Error(`Maestro flow path not found: ${l.flowPath||".maestro"}`);if(p(`Resolved Maestro flow path: ${q.relative(B,X)||"."}`),l.platform==="ios"){let $=await sf(l.device||oo("ios"),a);u=$.udid,f=$.name,await y("running");let x=af(w,o),P=Ua(x,a);p(`Resolved iOS app bundle: ${x}`),p(`Resolved iOS bundle id: ${P||"unknown"}`),df(x,a,$.udid),ao("xcrun",["simctl","install",$.udid,x],a),P&&(c={platform:l.platform,appId:P,deviceId:$.udid}),P&&Ct("xcrun",["simctl","get_app_container",$.udid,P,"app"],a),to(s,a,"ios-before-maestro.png",$.udid),l.record&&(d=lf(s,a,$.udid))}else{let $=pf(w,a),x=uf(l.device,a);u=x||void 0,f=l.device||oo("android");let P=x?["-s",x]:[];p(`Resolved Android application id: ${$||"unknown"}`),ao("adb",[...P,"install","-r",w],a),$&&(c={platform:l.platform,appId:$,deviceId:x||void 0})}let K=Math.max(0,Math.min(10,Number(l.retries??1)))+1,v=q.join(s,"report.xml"),R=rf(a);if(!R)throw new Error("Maestro CLI not found on this runner. Install Maestro or set MAESTRO_BIN to the full maestro path.");let I=1;for(let $=1;$<=K;$+=1){p(`Running Maestro attempt ${$}/${K}...`);let x=[...u?["--device",u]:[],"test","--platform",l.platform,...b,X,"--format","junit","--output",v,"--test-output-dir",s];if(ka&&$<K?I=(await Ma(R,x,{logPath:a,env:S,fastFailOnFlowFailure:!0})).exitCode:I=Ct(R,x,a,void 0,S),I===0)break}return l.platform==="ios"&&to(s,a,"ios-after-maestro.png",u),await $a(d,a),d=null,await Ra(l.urls,o,s,a),I===0?(await y("passed"),H.success(W.green(`Managed Maestro run passed: ${n}`)),{status:"passed",exitCode:0,attempts:K,flows:l.flowPath,platform:l.platform}):(await y("failed",`Maestro exited with code ${I}`),H.error(W.red(`Managed Maestro run failed with exit code ${I}`)),{status:"failed",exitCode:I,attempts:K,flows:l.flowPath,platform:l.platform})}catch(g){let h=g.message||String(g);return p(`MACH_MAESTRO_RUN_FAILED: ${h}`),l?.platform==="ios"&&to(s,a,"ios-after-failure.png",u),await $a(d,a),l?.urls&&await Ra(l.urls,o,s,a),await y("failed",h),H.error(W.red(`Managed Maestro runner failed: ${h}`)),{status:"failed",exitCode:1,attempts:0,flows:l?.flowPath||".maestro",platform:l?.platform||e.platform}}finally{cf(c,a)}}async function Hp(e){let t=e.maestroFlows||".maestro",n=xa(e.maestroRetries);if(n===null)return null;let i=q.resolve(t);if(!M.existsSync(i))return H.error(W.red(`Maestro flows not found: ${t}`)),{status:"failed",exitCode:1,attempts:0,flows:t,platform:e.platform};let r=await Jp(e);if(r?.url){if(!await Yp(r))return{status:"failed",exitCode:1,attempts:0,flows:t,platform:r.platform||e.platform}}else if(e.buildId||e.buildUrl||e.artifactUrl||e.latest)return{status:"failed",exitCode:1,attempts:0,flows:t,platform:e.platform};e.maestroRecord&&H.warn(W.yellow("--maestro-record is managed-runner only and is ignored in --local mode."));let o=r?.platform||e.platform,s=["test"];o&&s.push("--platform",o),e.maestroDevice&&s.push("--device",String(e.maestroDevice));let a=Bp(e.maestroEnv),l=Object.keys(a);if(l.length>0){H.info(W.dim(`Passing Maestro env vars to local run: ${l.join(", ")}`));for(let[p,y]of Object.entries(a))s.push("-e",`${p}=${y}`)}s.push(t);let d=n+1,c=1;for(let p=1;p<=d;p+=1){if(H.info(W.dim(`Running local Maestro attempt ${p}/${d}...`)),ka&&p<d){let y=await Ma("maestro",s,{cwd:process.cwd(),env:process.env,echoOutput:!0,fastFailOnFlowFailure:!0});if(y.error){let g=y.error.message||"Failed to run Maestro";H.error(W.red(`Local Maestro failed to start: ${g}`)),H.info(W.dim("Install Maestro locally, then retry: https://maestro.mobile.dev/getting-started/installing-maestro")),c=1;break}c=y.exitCode}else{let y=bt("maestro",s,{cwd:process.cwd(),stdio:"inherit",env:process.env});if(y.error){let g=y.error.message||"Failed to run Maestro";H.error(W.red(`Local Maestro failed to start: ${g}`)),H.info(W.dim("Install Maestro locally, then retry: https://maestro.mobile.dev/getting-started/installing-maestro")),c=1;break}c=typeof y.status=="number"?y.status:1}if(c===0)break}let u=c===0?"passed":"failed",f={status:u,exitCode:c,attempts:d,flows:t,platform:o};return Sf(e,f),u==="passed"?H.success(W.green("Local Maestro run passed")):H.error(W.red(`Local Maestro run failed with exit code ${c}`)),f}async function co(e){let t=Ie(`./${m.configFileName}`),n=e.projectId||t?.projectId,i=String(e.profile||e.buildProfile||"production").toLowerCase();if(!n)return H.error(`No projectId found. Run \`${m.nameLower} link\` first or pass an internal project id.`),null;let r=e.platform;if(!r&&e.latest){let f=await Oa({message:"Select platform for the latest build:",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"}]});if(ro(f))return null;r=f}let o=await Wp(e);if(!o)return null;if(o.kind==="latest"&&!r)return H.error("Pass --platform when using --latest."),null;if(o.kind==="artifact-url"&&!r)return H.error("Pass --platform when using --artifact-url."),null;let s=xa(e.maestroRetries);if(s===null)return null;let a=lo(e.maestroEnv),l=Fp(e.maestroEnv);!e.quiet&&a.length>0&&H.info(W.dim(`Forwarding Maestro env vars by name: ${a.join(", ")}`));let d=await Gp(e,n);if(d===null)return null;let c=Jn();e.quiet||c.start("Queuing Maestro run...");let u=e.maestroDevice||(r?oo(r):void 0);try{let f=await D.post("/tests/maestro",{projectId:n,platform:r,profile:i,latest:o.kind==="latest",buildId:o.kind==="build-id"?o.value:e.buildId,buildUrl:o.kind==="build-url"?o.value:e.buildUrl,artifactUrl:o.kind==="artifact-url"?o.value:e.artifactUrl,flowSourceKey:d,flows:e.maestroFlows||".maestro",...u?{device:u}:{},retries:s,record:!!e.maestroRecord,...a.length>0?{envNames:a}:{},...l?{env:l}:{}});if(f.data.status!=="success")throw new Error(f.data.message||"Failed to queue Maestro run");let p=f.data.testRun,y={testRunId:p.testRunId,status:p.status,projectId:n,buildId:p.buildId,platform:p.platform,dashboardUrl:p.dashboardUrl||`${yt}/tests/${p.testRunId}`,launchDeferredReason:p.launchDeferredReason};return Ba(e,y),e.quiet||c.stop("Maestro run queued"),y}catch(f){e.quiet||c.stop("Could not queue Maestro run");let p=f.response?.data?.message||f.message||"Unknown error";return H.error(W.red(`Maestro queue failed: ${p}`)),null}}async function Vp(e,t){let n=wa(e.waitTimeout,60,"--wait-timeout"),i=wa(e.waitInterval,15,"--wait-interval");if(n===null||i===null)return null;let r=n*60*1e3,o=Math.max(5,i)*1e3,s=Date.now(),a=t.status||"queued";for(H.info(W.dim(`Waiting for Maestro run ${t.testRunId} to finish...`));Date.now()-s<=r;){let l=await Kp(t.projectId,t.testRunId);if(!l)return null;if(l.status&&l.status!==a&&(a=l.status,H.info(W.dim(`Maestro status: ${a}`))),Mp.has(String(l.status)))return Ba(e,l),l.status==="passed"?H.success(W.green(`Maestro run passed: ${l.testRunId}`)):(H.error(W.red(`Maestro run ${l.status}: ${l.testRunId}`)),l.error&&H.error(W.red(String(l.error)))),l;await uo(o)}return H.error(W.red(`Timed out waiting for Maestro run ${t.testRunId} after ${n} minute(s).`)),{...t,status:"timeout"}}async function Gp(e,t){if(e.maestroUseBuildSource)return;let n=e.maestroFlows||".maestro",i=q.resolve(n);if(!M.existsSync(i))return e.maestroFlows?(H.error(W.red(`Maestro flows not found: ${n}`)),null):void 0;let r=q.relative(process.cwd(),i);if(!r||r.startsWith("..")||q.isAbsolute(r))return H.error(W.red("Managed Maestro flow uploads must be inside the current project directory.")),null;let o=Jn();e.quiet||o.start(`Uploading Maestro flows from ${r}...`);try{let s=await D.post("/tests/maestro/source-upload-url",{projectId:t,uploadId:Np()});if(s.data.status!=="success"||!s.data.uploadUrl||!s.data.key)throw new Error(s.data.message||"Failed to get Maestro flow upload URL");let a=new Fi;if(M.statSync(i).isDirectory())a.addLocalFolder(i,r);else{let c=q.dirname(r);a.addLocalFile(i,c==="."?void 0:c,q.basename(r))}let d=a.toBuffer();return await zp(s.data.uploadUrl,d,"application/zip","Maestro flow upload",c=>{e.quiet||o.message(c)}),e.quiet||o.stop("Maestro flows uploaded"),s.data.key}catch(s){e.quiet||o.stop("Could not upload Maestro flows");let a=s.response?.data?.message||s.message||"Unknown error";return H.error(W.red(`Maestro flow upload failed: ${a}`)),null}}function Na(e){let t=e.response?.status,n=e.code||"",i=e.message||"";return t&&![408,409,425,429].includes(t)&&t<500?!1:/ECONNRESET|ETIMEDOUT|EAI_AGAIN|ENOTFOUND|ECONNABORTED|socket hang up|network|timeout/i.test(`${n} ${i}`)||!t}async function zp(e,t,n,i,r){let o;for(let s=1;s<=Ia;s+=1)try{await Wn.put(e,t,{headers:{"Content-Type":n},maxBodyLength:1/0,maxContentLength:1/0,timeout:Up});return}catch(a){if(o=a,!Na(a)||s>=Ia)break;let l=Math.min(2e4,2e3*s),d=a.code||a.response?.status||a.message||"network error";r?.(`${i} attempt ${s} failed (${d}), retrying...`),await uo(l)}throw o}async function Kp(e,t){try{let n=await D.get(`/tests/${encodeURIComponent(t)}`,{params:{projectId:e}});if(n.data.status!=="success")throw new Error(n.data.message||"Failed to fetch Maestro run");let i=n.data.testRun;return{testRunId:i.testRunId,status:i.status,projectId:e,buildId:i.buildId,platform:i.platform,dashboardUrl:i.dashboardUrl||`${yt}/tests/${i.testRunId}`,launchDeferredReason:i.launchDeferredReason,...i.error?{error:i.error}:{}}}catch(n){let i=n.response?.data?.message||n.message||"Unknown error";return H.error(W.red(`Could not fetch Maestro run status: ${i}`)),null}}async function Wp(e){if(e.buildId)return{kind:"build-id",value:e.buildId};if(e.buildUrl)return{kind:"build-url",value:e.buildUrl};if(e.artifactUrl)return{kind:"artifact-url",value:e.artifactUrl};if(e.latest)return{kind:"latest"};let t=await Oa({message:"Select app artifact source for Maestro:",options:[{value:"latest",label:"Latest successful build"},{value:"build-id",label:"Build ID"},{value:"build-url",label:`${m.name} build URL`},{value:"artifact-url",label:"Direct artifact URL"}]});if(ro(t))return null;if(t==="latest")return{kind:"latest"};let n=await Tp({message:t==="build-id"?"Enter build ID:":t==="build-url"?`Enter ${m.name} build URL:`:"Enter artifact URL:",validate:i=>{let r=String(i||"").trim();if(!r)return"Value is required";if((t==="build-url"||t==="artifact-url")&&!r.startsWith("http"))return"Must be a URL"}});return ro(n)?null:{kind:t,value:String(n).trim()}}function wa(e,t,n){if(e==null||e==="")return t;let i=Number(e);return!Number.isFinite(i)||i<=0?(H.error(`${n} must be a positive number.`),null):i}function uo(e){return new Promise(t=>setTimeout(t,e))}function xa(e){if(e==null||e==="")return 1;let t=Number(e);return!Number.isInteger(t)||t<0||t>10?(H.error("--maestro-retries must be an integer between 0 and 10."),null):t}async function Jp(e){if(e.artifactUrl)return{url:e.artifactUrl,platform:e.platform||fo(e.artifactUrl),name:Fa(e.artifactUrl)};let t=e.buildId||bf(e.buildUrl);return t?Ta(t,e.platform):e.latest?qp(e):null}async function Ta(e,t){let n=Jn();n.start(`Resolving build ${e}...`);try{let i=await D.get(`/public/builds/${encodeURIComponent(e)}`);if(i.data.status!=="success")throw new Error(i.data.message||"Build lookup failed");let r=t||i.data.build?.platform,o=yf(i.data.artifacts||[],r);if(!o?.downloadUrl)throw new Error("No installable APK or simulator app artifact found for this build.");return n.stop("Build artifact resolved"),{url:o.downloadUrl,platform:r||fo(o.name||o.downloadUrl),name:o.name}}catch(i){n.stop("Could not resolve build artifact");let r=i.response?.data?.message||i.message||"Unknown error";return H.error(W.red(`Local Maestro artifact lookup failed: ${r}`)),null}}async function qp(e){let t=Ie(`./${m.configFileName}`),n=e.projectId||t?.projectId,i=String(e.profile||e.buildProfile||"production").toLowerCase();if(!n)return H.error(`No projectId found. Run \`${m.nameLower} link\` first or pass --build-id/--artifact-url.`),null;if(!e.platform)return H.error("Pass --platform when using --latest with --local."),null;let r=Jn();r.start("Resolving latest build...");try{let o=await D.get(`/builds/${n}`,{params:{limit:100}}),a=(Array.isArray(o.data.builds)?o.data.builds:[]).find(l=>l.status==="success"&&l.platform===e.platform&&String(l.buildProfile||l.buildType||"production").toLowerCase()===i);if(!a?.buildId)throw new Error(`No successful ${e.platform} build found for profile ${i}.`);return r.stop(`Latest build resolved: ${a.buildId}`),Ta(a.buildId,e.platform)}catch(o){r.stop("Could not resolve latest build");let s=o.response?.data?.message||o.message||"Unknown error";return H.error(W.red(`Latest build lookup failed: ${s}`)),null}}async function Yp(e){let t=e.platform||fo(e.url);if(!t)return H.error(W.red("Could not infer platform for local install. Pass --platform android or --platform ios.")),!1;let n=M.mkdtempSync(q.join(bn.tmpdir(),"mach-maestro-")),i=e.name||Fa(e.url)||(t==="android"?"app.apk":"app.zip"),r=q.join(n,i),o=Jn();o.start(`Downloading ${i}...`);try{await so(e.url,r),o.stop("Artifact downloaded")}catch(s){return o.stop("Artifact download failed"),H.error(W.red(s.message||"Failed to download artifact")),!1}return t==="android"?gf(r):hf(r,n)}async function so(e,t){let n=await Wn.get(e,{responseType:"stream"});await xp(n.data,M.createWriteStream(t))}function Xp(e,t=12e3){try{return M.readFileSync(e,"utf-8").slice(-t)}catch{return""}}function va(e){if(!Number.isFinite(e)||e<0)return"unknown size";if(e<1024)return`${e} B`;let t=["KB","MB","GB"],n=e/1024,i=t[0];for(let r=1;n>=1024&&r<t.length;r+=1)n/=1024,i=t[r];return`${n.toFixed(n>=10?1:2)} ${i}`}function Zp(e){return Object.entries(e||{}).filter(([t,n])=>!!t&&n!==void 0).sort(([t],[n])=>t.localeCompare(n)).flatMap(([t,n])=>["-e",`${t}=${n}`])}function Qp(e,t){let n=q.resolve(e,t||".maestro"),i=q.relative(e,n);if(i.startsWith("..")||q.isAbsolute(i))throw new Error("Maestro flow path must stay inside the build source.");return n}function La(e,t){let n=[e];for(let i=0;i<t.length;i+=1){let r=t[i],o=t[i-1];(o==="-e"||o==="--env")&&/^[A-Za-z_][A-Za-z0-9_]*=/.test(r)?n.push(`${r.slice(0,r.indexOf("="))}=<redacted>`):n.push(r)}return n.join(" ")}function ef(e){return/\[Failed\]\s+/.test(e)}function tf(e){if(!e.killed){try{e.kill("SIGTERM")}catch{}setTimeout(()=>{try{e.kill("SIGKILL")}catch{}},5e3).unref()}}function Ma(e,t,n={}){let{cwd:i,env:r=process.env,logPath:o,echoOutput:s=!1,fastFailOnFlowFailure:a=!1}=n;return o&&M.appendFileSync(o,`
-$ ${La(e,t)}
-`),new Promise(l=>{let d=!1,c=!1,u="",f=g=>{c||(c=!0,l(g))},p=Ca(e,t,{cwd:i,env:r,stdio:["ignore","pipe","pipe"]}),y=g=>{u+=g;let h=u.split(/\r?\n/);u=h.pop()||"";for(let S of h)if(a&&ef(S)&&!d){d=!0;let b="Mach fast-fail: detected failed Maestro flow; stopping this attempt early to retry...";o&&M.appendFileSync(o,`
-${b}
-`),s&&process.stderr.write(`${b}
-`),tf(p)}};p.stdout?.on("data",g=>{let h=g.toString();o&&M.appendFileSync(o,h),s&&process.stdout.write(h),y(h)}),p.stderr?.on("data",g=>{let h=g.toString();o&&M.appendFileSync(o,h),s&&process.stderr.write(h),y(h)}),p.on("error",g=>{o&&M.appendFileSync(o,`${g.message}
-`),f({exitCode:1,fastFailed:d,error:g})}),p.on("close",(g,h)=>{d&&o&&M.appendFileSync(o,`Maestro attempt stopped after first failed flow${h?` (${h})`:""}.
-`),f({exitCode:typeof g=="number"?g:1,fastFailed:d})})})}function Ct(e,t,n,i,r=process.env){M.appendFileSync(n,`
-$ ${La(e,t)}
-`);let o=bt(e,t,{cwd:i,encoding:"utf-8",env:r});return o.stdout&&M.appendFileSync(n,o.stdout),o.stderr&&M.appendFileSync(n,o.stderr),o.error?(M.appendFileSync(n,`${o.error.message}
-`),1):typeof o.status=="number"?o.status:1}function ao(e,t,n,i){let r=Ct(e,t,n,i);if(r!==0)throw new Error(`${e} ${t.join(" ")} failed with exit code ${r}`)}function nf(e){try{return M.accessSync(e,M.constants.X_OK),!0}catch{return!1}}function rf(e){let t=[process.env.MAESTRO_BIN,q.join(bn.homedir(),".maestro","bin","maestro"),"/opt/homebrew/bin/maestro","/usr/local/bin/maestro"].filter(Boolean),n=bt("/usr/bin/env",["which","maestro"],{encoding:"utf-8",env:process.env}),i=n.status===0?String(n.stdout||"").split(`
-`)[0]?.trim():"";i&&t.unshift(i);for(let r of t)if(r&&nf(r))return e&&M.appendFileSync(e,`Using Maestro CLI at ${r}
-`),r;return e&&M.appendFileSync(e,`Maestro CLI not found. Checked: ${t.join(", ")}
-`),null}function of(e){let t=String(e||"").trim();return t?t.replace(/_/g," ").replace(/\bios\b/gi,"").replace(/\biphone\b/i,"iPhone").replace(/\bpro\b/gi,"Pro").replace(/\bmax\b/gi,"Max").replace(/\s+/g," ").trim():"iPhone 17 Pro"}async function sf(e,t){let n=of(e),i=bt("xcrun",["simctl","list","devices","--json"],{encoding:"utf-8"});if(i.status!==0||!i.stdout)throw new Error("Could not list iOS simulators.");let r=JSON.parse(i.stdout),o=Object.values(r.devices||{}).flatMap(l=>Array.isArray(l)?l:[]).filter(l=>l?.isAvailable),s=n.toLowerCase(),a=o.find(l=>l.udid===e)||o.find(l=>l.name===n)||o.find(l=>String(l.name||"").toLowerCase().includes(s));if(!a?.udid)throw new Error(`No available iOS Simulator found for ${n}.`);return a.state==="Booted"?M.appendFileSync(t,`Using already booted iOS Simulator ${a.name} (${a.udid}).
-`):(M.appendFileSync(t,`Booting iOS Simulator ${a.name} (${a.udid})...
-`),Ct("xcrun",["simctl","boot",a.udid],t)!==0&&M.appendFileSync(t,`simctl boot returned non-zero; continuing to bootstatus in case it was already booting.
-`),ao("xcrun",["simctl","bootstatus",a.udid,"-b"],t)),{name:String(a.name||n),udid:a.udid}}function af(e,t){if(e.endsWith(".ipa"))throw new Error("iOS Maestro runs need a simulator .app.zip artifact, not an App Store .ipa.");if(e.endsWith(".zip")){let n=q.join(t,"ios-app");M.mkdirSync(n,{recursive:!0}),new Fi(e).extractAllTo(n,!0);let i=po(n);if(!i)throw new Error("Could not find a .app bundle inside the iOS artifact zip.");return i}if(e.endsWith(".app"))return e;throw new Error("iOS Maestro runs need a .app bundle or .app.zip artifact.")}function Ua(e,t){let n=q.join(e,"Info.plist");if(!M.existsSync(n))return M.appendFileSync(t,`Could not find Info.plist in ${e}; skipping uninstall.
-`),null;let i=bt("/usr/bin/plutil",["-extract","CFBundleIdentifier","raw","-o","-",n],{encoding:"utf-8",env:process.env}),r=String(i.stdout||"").trim();return i.status!==0||!r?(M.appendFileSync(t,`Could not read CFBundleIdentifier from Info.plist; skipping uninstall.
-`),null):r}function to(e,t,n,i){let r=q.join(e,n);Ct("xcrun",["simctl","io",i||"booted","screenshot",r],t)!==0&&M.appendFileSync(t,`[WARN] Could not capture iOS simulator screenshot: ${n}
-`)}function lf(e,t,n){let i=q.join(e,"ios-simulator-recording.mp4");M.appendFileSync(t,`Starting iOS simulator recording: ${i}
-`);let r=Ca("xcrun",["simctl","io",n||"booted","recordVideo",i],{stdio:["ignore","pipe","pipe"],env:process.env});return r.stdout?.on("data",o=>{M.appendFileSync(t,o)}),r.stderr?.on("data",o=>{M.appendFileSync(t,o)}),r.on("error",o=>{M.appendFileSync(t,`[WARN] Could not start iOS simulator recording: ${o.message}
-`)}),r}async function $a(e,t){e&&await new Promise(n=>{let i=!1,r=()=>{i||(i=!0,n())};e.once("exit",r),e.once("close",r),e.killed||(M.appendFileSync(t,`Stopping iOS simulator recording...
-`),e.kill("SIGINT")),setTimeout(()=>{!i&&!e.killed&&(M.appendFileSync(t,`[WARN] iOS simulator recording did not stop after SIGINT; sending SIGKILL.
-`),e.kill("SIGKILL")),r()},5e3).unref?.()})}function df(e,t,n){let i=Ua(e,t);if(!i)return;M.appendFileSync(t,`Uninstalling existing iOS app data for ${i} if present...
-`),Ct("xcrun",["simctl","uninstall",n||"booted",i],t)!==0&&M.appendFileSync(t,`No existing app install removed for ${i}; continuing.
-`)}function cf(e,t){if(!e?.appId)return;if(M.appendFileSync(t,`Cleaning up installed app after Maestro run...
-`),e.platform==="ios"){let r=Ct("xcrun",["simctl","uninstall",e.deviceId||"booted",e.appId],t);r===0?M.appendFileSync(t,`Uninstalled iOS app ${e.appId} after Maestro run.
-`):M.appendFileSync(t,`Warning: failed to uninstall iOS app ${e.appId} after Maestro run: xcrun simctl uninstall exited with code ${r}
-`);return}let n=e.deviceId?["-s",e.deviceId]:[],i=Ct("adb",[...n,"uninstall",e.appId],t);i===0?M.appendFileSync(t,`Uninstalled Android app ${e.appId} after Maestro run.
-`):M.appendFileSync(t,`Warning: failed to uninstall Android app ${e.appId} after Maestro run: adb uninstall exited with code ${i}
-`)}function uf(e,t){let n=bt("adb",["devices"],{encoding:"utf-8",env:process.env});if(n.status!==0||n.error)return M.appendFileSync(t,`[WARN] Could not list Android devices before install; using adb default target.
+`}`)},g=async(h,y)=>{try{await Wt.post(`${r}/internal/tests/${encodeURIComponent(n)}/runner`,{projectId:t,runnerToken:i,status:h,error:y,logPreview:Yd(a),device:f,junitUrl:l?.urls?.junitDownloadUrl,logsUrl:l?.urls?.logsDownloadUrl,artifactsUrl:l?.urls?.artifactsDownloadUrl})}catch(b){p(`[WARN] Could not post runner update: ${b.message||b}`)}};try{p(`Mach Maestro local runner starting for ${n}`);let h=await Wt.post(`${r}/internal/tests/${encodeURIComponent(n)}/runner-payload`,{projectId:t,runnerToken:i});if(h.data?.status!=="success"||!h.data?.payload)throw new Error(h.data?.message||"Runner payload was not returned.");l=h.data.payload;let y=Object.keys(l.env||{});p(`Using Maestro env vars: ${y.length>0?y.join(", "):"none"}`);let b={...process.env,...l.env||{}},w=Xd(l.env);w.length>0&&p(`Passing Maestro env vars to test command: ${y.sort().join(", ")}`),await g("running");let L=l.platform==="android"?"app.apk":"app.zip",_=x.join(o,L),H=x.join(o,"source.zip"),W=x.join(o,"source");O.mkdirSync(W,{recursive:!0}),p("Downloading app artifact..."),await Xi(l.artifactUrl,_),p(`Downloaded app artifact: ${L} (${Ko(O.statSync(_).size)})`),p("Downloading Maestro source..."),await Xi(l.urls.sourceUrl,H),p(`Downloaded Maestro source: source.zip (${Ko(O.statSync(H).size)})`),new jn(H).extractAllTo(W,!0);let Z=Zd(W,l.flowPath||".maestro");if(!O.existsSync(Z))throw new Error(`Maestro flow path not found: ${l.flowPath||".maestro"}`);if(p(`Resolved Maestro flow path: ${x.relative(W,Z)||"."}`),l.platform==="ios"){let A=await rc(l.device||Yi("ios"),a);u=A.udid,f=A.name,await g("running");let D=oc(_,o),v=ss(D,a);p(`Resolved iOS app bundle: ${D}`),p(`Resolved iOS bundle id: ${v||"unknown"}`),ac(D,a,A.udid),Zi("xcrun",["simctl","install",A.udid,D],a),v&&(c={platform:l.platform,appId:v,deviceId:A.udid}),v&&qe("xcrun",["simctl","get_app_container",A.udid,v,"app"],a),Ki(s,a,"ios-before-maestro.png",A.udid),l.record&&(d=sc(s,a,A.udid))}else{let A=cc(_,a),D=dc(l.device,a);u=D||void 0,f=l.device||Yi("android");let v=D?["-s",D]:[];p(`Resolved Android application id: ${A||"unknown"}`),Zi("adb",[...v,"install","-r",_],a),A&&(c={platform:l.platform,appId:A,deviceId:D||void 0})}let oe=Math.max(0,Math.min(10,Number(l.retries??1)))+1,R=x.join(s,"report.xml"),T=nc(a);if(!T)throw new Error("Maestro CLI not found on this runner. Install Maestro or set MAESTRO_BIN to the full maestro path.");let E=1;for(let A=1;A<=oe;A+=1){p(`Running Maestro attempt ${A}/${oe}...`);let D=[...u?["--device",u]:[],"test","--platform",l.platform,...w,Z,"--format","junit","--output",R,"--test-output-dir",s];if(es&&A<oe?E=(await os(T,D,{logPath:a,env:b,fastFailOnFlowFailure:!0})).exitCode:E=qe(T,D,a,void 0,b),E===0)break}return l.platform==="ios"&&Ki(s,a,"ios-after-maestro.png",u),await Wo(d,a),d=null,await Yo(l.urls,o,s,a),E===0?(await g("passed"),C.success(k.green(`Managed Maestro run passed: ${n}`)),{status:"passed",exitCode:0,attempts:oe,flows:l.flowPath,platform:l.platform}):(await g("failed",`Maestro exited with code ${E}`),C.error(k.red(`Managed Maestro run failed with exit code ${E}`)),{status:"failed",exitCode:E,attempts:oe,flows:l.flowPath,platform:l.platform})}catch(h){let y=h.message||String(h);return p(`MACH_MAESTRO_RUN_FAILED: ${y}`),l?.platform==="ios"&&Ki(s,a,"ios-after-failure.png",u),await Wo(d,a),l?.urls&&await Yo(l.urls,o,s,a),await g("failed",y),C.error(k.red(`Managed Maestro runner failed: ${y}`)),{status:"failed",exitCode:1,attempts:0,flows:l?.flowPath||".maestro",platform:l?.platform||e.platform}}finally{lc(c,a)}}async function jd(e){let t=e.maestroFlows||".maestro",n=ns(e.maestroRetries);if(n===null)return null;let i=x.resolve(t);if(!O.existsSync(i))return C.error(k.red(`Maestro flows not found: ${t}`)),{status:"failed",exitCode:1,attempts:0,flows:t,platform:e.platform};let r=await Wd(e);if(r?.url){if(!await Jd(r))return{status:"failed",exitCode:1,attempts:0,flows:t,platform:r.platform||e.platform}}else if(e.buildId||e.buildUrl||e.artifactUrl||e.latest)return{status:"failed",exitCode:1,attempts:0,flows:t,platform:e.platform};e.maestroRecord&&C.warn(k.yellow("--maestro-record is managed-runner only and is ignored in --local mode."));let o=r?.platform||e.platform,s=["test"];o&&s.push("--platform",o),e.maestroDevice&&s.push("--device",String(e.maestroDevice));let a=Fd(e.maestroEnv),l=Object.keys(a);if(l.length>0){C.info(k.dim(`Passing Maestro env vars to local run: ${l.join(", ")}`));for(let[p,g]of Object.entries(a))s.push("-e",`${p}=${g}`)}s.push(t);let d=n+1,c=1;for(let p=1;p<=d;p+=1){if(C.info(k.dim(`Running local Maestro attempt ${p}/${d}...`)),es&&p<d){let g=await os("maestro",s,{cwd:process.cwd(),env:process.env,echoOutput:!0,fastFailOnFlowFailure:!0});if(g.error){let h=g.error.message||"Failed to run Maestro";C.error(k.red(`Local Maestro failed to start: ${h}`)),C.info(k.dim("Install Maestro locally, then retry: https://maestro.mobile.dev/getting-started/installing-maestro")),c=1;break}c=g.exitCode}else{let g=Ge("maestro",s,{cwd:process.cwd(),stdio:"inherit",env:process.env});if(g.error){let h=g.error.message||"Failed to run Maestro";C.error(k.red(`Local Maestro failed to start: ${h}`)),C.info(k.dim("Install Maestro locally, then retry: https://maestro.mobile.dev/getting-started/installing-maestro")),c=1;break}c=typeof g.status=="number"?g.status:1}if(c===0)break}let u=c===0?"passed":"failed",f={status:u,exitCode:c,attempts:d,flows:t,platform:o};return yc(e,f),u==="passed"?C.success(k.green("Local Maestro run passed")):C.error(k.red(`Local Maestro run failed with exit code ${c}`)),f}async function er(e){let t=ce(`./${m.configFileName}`),n=e.projectId||t?.projectId,i=String(e.profile||e.buildProfile||"production").toLowerCase();if(!n)return C.error(`No projectId found. Run \`${m.nameLower} link\` first or pass an internal project id.`),null;let r=e.platform;if(!r&&e.latest){let f=await Zo({message:"Select platform for the latest build:",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"}]});if(Ji(f))return null;r=f}let o=await Kd(e);if(!o)return null;if(o.kind==="latest"&&!r)return C.error("Pass --platform when using --latest."),null;if(o.kind==="artifact-url"&&!r)return C.error("Pass --platform when using --artifact-url."),null;let s=ns(e.maestroRetries);if(s===null)return null;let a=Qi(e.maestroEnv),l=Ud(e.maestroEnv);!e.quiet&&a.length>0&&C.info(k.dim(`Forwarding Maestro env vars by name: ${a.join(", ")}`));let d=await Gd(e,n);if(d===null)return null;let c=qt();e.quiet||c.start("Queuing Maestro run...");let u=e.maestroDevice||(r?Yi(r):void 0);try{let f=await $.post("/tests/maestro",{projectId:n,platform:r,profile:i,latest:o.kind==="latest",buildId:o.kind==="build-id"?o.value:e.buildId,buildUrl:o.kind==="build-url"?o.value:e.buildUrl,artifactUrl:o.kind==="artifact-url"?o.value:e.artifactUrl,flowSourceKey:d,flows:e.maestroFlows||".maestro",...u?{device:u}:{},retries:s,record:!!e.maestroRecord,...a.length>0?{envNames:a}:{},...l?{env:l}:{}});if(f.data.status!=="success")throw new Error(f.data.message||"Failed to queue Maestro run");let p=f.data.testRun,g={testRunId:p.testRunId,status:p.status,projectId:n,buildId:p.buildId,platform:p.platform,dashboardUrl:p.dashboardUrl||`${He}/tests/${p.testRunId}`,launchDeferredReason:p.launchDeferredReason};return ls(e,g),e.quiet||c.stop("Maestro run queued"),g}catch(f){e.quiet||c.stop("Could not queue Maestro run");let p=f.response?.data?.message||f.message||"Unknown error";return C.error(k.red(`Maestro queue failed: ${p}`)),null}}async function Hd(e,t){let n=zo(e.waitTimeout,60,"--wait-timeout"),i=zo(e.waitInterval,15,"--wait-interval");if(n===null||i===null)return null;let r=n*60*1e3,o=Math.max(5,i)*1e3,s=Date.now(),a=t.status||"queued";for(C.info(k.dim(`Waiting for Maestro run ${t.testRunId} to finish...`));Date.now()-s<=r;){let l=await zd(t.projectId,t.testRunId);if(!l)return null;if(l.status&&l.status!==a&&(a=l.status,C.info(k.dim(`Maestro status: ${a}`))),Ld.has(String(l.status)))return ls(e,l),l.status==="passed"?C.success(k.green(`Maestro run passed: ${l.testRunId}`)):(C.error(k.red(`Maestro run ${l.status}: ${l.testRunId}`)),l.error&&C.error(k.red(String(l.error)))),l;await tr(o)}return C.error(k.red(`Timed out waiting for Maestro run ${t.testRunId} after ${n} minute(s).`)),{...t,status:"timeout"}}async function Gd(e,t){if(e.maestroUseBuildSource)return;let n=e.maestroFlows||".maestro",i=x.resolve(n);if(!O.existsSync(i))return e.maestroFlows?(C.error(k.red(`Maestro flows not found: ${n}`)),null):void 0;let r=x.relative(process.cwd(),i);if(!r||r.startsWith("..")||x.isAbsolute(r))return C.error(k.red("Managed Maestro flow uploads must be inside the current project directory.")),null;let o=qt();e.quiet||o.start(`Uploading Maestro flows from ${r}...`);try{let s=await $.post("/tests/maestro/source-upload-url",{projectId:t,uploadId:Td()});if(s.data.status!=="success"||!s.data.uploadUrl||!s.data.key)throw new Error(s.data.message||"Failed to get Maestro flow upload URL");let a=new jn;if(O.statSync(i).isDirectory())a.addLocalFolder(i,r);else{let c=x.dirname(r);a.addLocalFile(i,c==="."?void 0:c,x.basename(r))}let d=a.toBuffer();return await Vd(s.data.uploadUrl,d,"application/zip","Maestro flow upload",c=>{e.quiet||o.message(c)}),e.quiet||o.stop("Maestro flows uploaded"),s.data.key}catch(s){e.quiet||o.stop("Could not upload Maestro flows");let a=s.response?.data?.message||s.message||"Unknown error";return C.error(k.red(`Maestro flow upload failed: ${a}`)),null}}function ts(e){let t=e.response?.status,n=e.code||"",i=e.message||"";return t&&![408,409,425,429].includes(t)&&t<500?!1:/ECONNRESET|ETIMEDOUT|EAI_AGAIN|ENOTFOUND|ECONNABORTED|socket hang up|network|timeout/i.test(`${n} ${i}`)||!t}async function Vd(e,t,n,i,r){let o;for(let s=1;s<=Vo;s+=1)try{await Wt.put(e,t,{headers:{"Content-Type":n},maxBodyLength:1/0,maxContentLength:1/0,timeout:Md});return}catch(a){if(o=a,!ts(a)||s>=Vo)break;let l=Math.min(2e4,2e3*s),d=a.code||a.response?.status||a.message||"network error";r?.(`${i} attempt ${s} failed (${d}), retrying...`),await tr(l)}throw o}async function zd(e,t){try{let n=await $.get(`/tests/${encodeURIComponent(t)}`,{params:{projectId:e}});if(n.data.status!=="success")throw new Error(n.data.message||"Failed to fetch Maestro run");let i=n.data.testRun;return{testRunId:i.testRunId,status:i.status,projectId:e,buildId:i.buildId,platform:i.platform,dashboardUrl:i.dashboardUrl||`${He}/tests/${i.testRunId}`,launchDeferredReason:i.launchDeferredReason,...i.error?{error:i.error}:{}}}catch(n){let i=n.response?.data?.message||n.message||"Unknown error";return C.error(k.red(`Could not fetch Maestro run status: ${i}`)),null}}async function Kd(e){if(e.buildId)return{kind:"build-id",value:e.buildId};if(e.buildUrl)return{kind:"build-url",value:e.buildUrl};if(e.artifactUrl)return{kind:"artifact-url",value:e.artifactUrl};if(e.latest)return{kind:"latest"};let t=await Zo({message:"Select app artifact source for Maestro:",options:[{value:"latest",label:"Latest successful build"},{value:"build-id",label:"Build ID"},{value:"build-url",label:`${m.name} build URL`},{value:"artifact-url",label:"Direct artifact URL"}]});if(Ji(t))return null;if(t==="latest")return{kind:"latest"};let n=await Nd({message:t==="build-id"?"Enter build ID:":t==="build-url"?`Enter ${m.name} build URL:`:"Enter artifact URL:",validate:i=>{let r=String(i||"").trim();if(!r)return"Value is required";if((t==="build-url"||t==="artifact-url")&&!r.startsWith("http"))return"Must be a URL"}});return Ji(n)?null:{kind:t,value:String(n).trim()}}function zo(e,t,n){if(e==null||e==="")return t;let i=Number(e);return!Number.isFinite(i)||i<=0?(C.error(`${n} must be a positive number.`),null):i}function tr(e){return new Promise(t=>setTimeout(t,e))}function ns(e){if(e==null||e==="")return 1;let t=Number(e);return!Number.isInteger(t)||t<0||t>10?(C.error("--maestro-retries must be an integer between 0 and 10."),null):t}async function Wd(e){if(e.artifactUrl)return{url:e.artifactUrl,platform:e.platform||ir(e.artifactUrl),name:as(e.artifactUrl)};let t=e.buildId||hc(e.buildUrl);return t?is(t,e.platform):e.latest?qd(e):null}async function is(e,t){let n=qt();n.start(`Resolving build ${e}...`);try{let i=await $.get(`/public/builds/${encodeURIComponent(e)}`);if(i.data.status!=="success")throw new Error(i.data.message||"Build lookup failed");let r=t||i.data.build?.platform,o=gc(i.data.artifacts||[],r);if(!o?.downloadUrl)throw new Error("No installable APK or simulator app artifact found for this build.");return n.stop("Build artifact resolved"),{url:o.downloadUrl,platform:r||ir(o.name||o.downloadUrl),name:o.name}}catch(i){n.stop("Could not resolve build artifact");let r=i.response?.data?.message||i.message||"Unknown error";return C.error(k.red(`Local Maestro artifact lookup failed: ${r}`)),null}}async function qd(e){let t=ce(`./${m.configFileName}`),n=e.projectId||t?.projectId,i=String(e.profile||e.buildProfile||"production").toLowerCase();if(!n)return C.error(`No projectId found. Run \`${m.nameLower} link\` first or pass --build-id/--artifact-url.`),null;if(!e.platform)return C.error("Pass --platform when using --latest with --local."),null;let r=qt();r.start("Resolving latest build...");try{let o=await $.get(`/builds/${n}`,{params:{limit:100}}),a=(Array.isArray(o.data.builds)?o.data.builds:[]).find(l=>l.status==="success"&&l.platform===e.platform&&String(l.buildProfile||l.buildType||"production").toLowerCase()===i);if(!a?.buildId)throw new Error(`No successful ${e.platform} build found for profile ${i}.`);return r.stop(`Latest build resolved: ${a.buildId}`),is(a.buildId,e.platform)}catch(o){r.stop("Could not resolve latest build");let s=o.response?.data?.message||o.message||"Unknown error";return C.error(k.red(`Latest build lookup failed: ${s}`)),null}}async function Jd(e){let t=e.platform||ir(e.url);if(!t)return C.error(k.red("Could not infer platform for local install. Pass --platform android or --platform ios.")),!1;let n=O.mkdtempSync(x.join($t.tmpdir(),"mach-maestro-")),i=e.name||as(e.url)||(t==="android"?"app.apk":"app.zip"),r=x.join(n,i),o=qt();o.start(`Downloading ${i}...`);try{await Xi(e.url,r),o.stop("Artifact downloaded")}catch(s){return o.stop("Artifact download failed"),C.error(k.red(s.message||"Failed to download artifact")),!1}return t==="android"?fc(r):mc(r,n)}async function Xi(e,t){let n=await Wt.get(e,{responseType:"stream"});await kd(n.data,O.createWriteStream(t))}function Yd(e,t=12e3){try{return O.readFileSync(e,"utf-8").slice(-t)}catch{return""}}function Ko(e){if(!Number.isFinite(e)||e<0)return"unknown size";if(e<1024)return`${e} B`;let t=["KB","MB","GB"],n=e/1024,i=t[0];for(let r=1;n>=1024&&r<t.length;r+=1)n/=1024,i=t[r];return`${n.toFixed(n>=10?1:2)} ${i}`}function Xd(e){return Object.entries(e||{}).filter(([t,n])=>!!t&&n!==void 0).sort(([t],[n])=>t.localeCompare(n)).flatMap(([t,n])=>["-e",`${t}=${n}`])}function Zd(e,t){let n=x.resolve(e,t||".maestro"),i=x.relative(e,n);if(i.startsWith("..")||x.isAbsolute(i))throw new Error("Maestro flow path must stay inside the build source.");return n}function rs(e,t){let n=[e];for(let i=0;i<t.length;i+=1){let r=t[i],o=t[i-1];(o==="-e"||o==="--env")&&/^[A-Za-z_][A-Za-z0-9_]*=/.test(r)?n.push(`${r.slice(0,r.indexOf("="))}=<redacted>`):n.push(r)}return n.join(" ")}function Qd(e){return/\[Failed\]\s+/.test(e)}function ec(e){if(!e.killed){try{e.kill("SIGTERM")}catch{}setTimeout(()=>{try{e.kill("SIGKILL")}catch{}},5e3).unref()}}function os(e,t,n={}){let{cwd:i,env:r=process.env,logPath:o,echoOutput:s=!1,fastFailOnFlowFailure:a=!1}=n;return o&&O.appendFileSync(o,`
+$ ${rs(e,t)}
+`),new Promise(l=>{let d=!1,c=!1,u="",f=h=>{c||(c=!0,l(h))},p=Xo(e,t,{cwd:i,env:r,stdio:["ignore","pipe","pipe"]}),g=h=>{u+=h;let y=u.split(/\r?\n/);u=y.pop()||"";for(let b of y)if(a&&Qd(b)&&!d){d=!0;let w="Mach fast-fail: detected failed Maestro flow; stopping this attempt early to retry...";o&&O.appendFileSync(o,`
+${w}
+`),s&&process.stderr.write(`${w}
+`),ec(p)}};p.stdout?.on("data",h=>{let y=h.toString();o&&O.appendFileSync(o,y),s&&process.stdout.write(y),g(y)}),p.stderr?.on("data",h=>{let y=h.toString();o&&O.appendFileSync(o,y),s&&process.stderr.write(y),g(y)}),p.on("error",h=>{o&&O.appendFileSync(o,`${h.message}
+`),f({exitCode:1,fastFailed:d,error:h})}),p.on("close",(h,y)=>{d&&o&&O.appendFileSync(o,`Maestro attempt stopped after first failed flow${y?` (${y})`:""}.
+`),f({exitCode:typeof h=="number"?h:1,fastFailed:d})})})}function qe(e,t,n,i,r=process.env){O.appendFileSync(n,`
+$ ${rs(e,t)}
+`);let o=Ge(e,t,{cwd:i,encoding:"utf-8",env:r});return o.stdout&&O.appendFileSync(n,o.stdout),o.stderr&&O.appendFileSync(n,o.stderr),o.error?(O.appendFileSync(n,`${o.error.message}
+`),1):typeof o.status=="number"?o.status:1}function Zi(e,t,n,i){let r=qe(e,t,n,i);if(r!==0)throw new Error(`${e} ${t.join(" ")} failed with exit code ${r}`)}function tc(e){try{return O.accessSync(e,O.constants.X_OK),!0}catch{return!1}}function nc(e){let t=[process.env.MAESTRO_BIN,x.join($t.homedir(),".maestro","bin","maestro"),"/opt/homebrew/bin/maestro","/usr/local/bin/maestro"].filter(Boolean),n=Ge("/usr/bin/env",["which","maestro"],{encoding:"utf-8",env:process.env}),i=n.status===0?String(n.stdout||"").split(`
+`)[0]?.trim():"";i&&t.unshift(i);for(let r of t)if(r&&tc(r))return e&&O.appendFileSync(e,`Using Maestro CLI at ${r}
+`),r;return e&&O.appendFileSync(e,`Maestro CLI not found. Checked: ${t.join(", ")}
+`),null}function ic(e){let t=String(e||"").trim();return t?t.replace(/_/g," ").replace(/\bios\b/gi,"").replace(/\biphone\b/i,"iPhone").replace(/\bpro\b/gi,"Pro").replace(/\bmax\b/gi,"Max").replace(/\s+/g," ").trim():"iPhone 17 Pro"}async function rc(e,t){let n=ic(e),i=Ge("xcrun",["simctl","list","devices","--json"],{encoding:"utf-8"});if(i.status!==0||!i.stdout)throw new Error("Could not list iOS simulators.");let r=JSON.parse(i.stdout),o=Object.values(r.devices||{}).flatMap(l=>Array.isArray(l)?l:[]).filter(l=>l?.isAvailable),s=n.toLowerCase(),a=o.find(l=>l.udid===e)||o.find(l=>l.name===n)||o.find(l=>String(l.name||"").toLowerCase().includes(s));if(!a?.udid)throw new Error(`No available iOS Simulator found for ${n}.`);return a.state==="Booted"?O.appendFileSync(t,`Using already booted iOS Simulator ${a.name} (${a.udid}).
+`):(O.appendFileSync(t,`Booting iOS Simulator ${a.name} (${a.udid})...
+`),qe("xcrun",["simctl","boot",a.udid],t)!==0&&O.appendFileSync(t,`simctl boot returned non-zero; continuing to bootstatus in case it was already booting.
+`),Zi("xcrun",["simctl","bootstatus",a.udid,"-b"],t)),{name:String(a.name||n),udid:a.udid}}function oc(e,t){if(e.endsWith(".ipa"))throw new Error("iOS Maestro runs need a simulator .app.zip artifact, not an App Store .ipa.");if(e.endsWith(".zip")){let n=x.join(t,"ios-app");O.mkdirSync(n,{recursive:!0}),new jn(e).extractAllTo(n,!0);let i=nr(n);if(!i)throw new Error("Could not find a .app bundle inside the iOS artifact zip.");return i}if(e.endsWith(".app"))return e;throw new Error("iOS Maestro runs need a .app bundle or .app.zip artifact.")}function ss(e,t){let n=x.join(e,"Info.plist");if(!O.existsSync(n))return O.appendFileSync(t,`Could not find Info.plist in ${e}; skipping uninstall.
+`),null;let i=Ge("/usr/bin/plutil",["-extract","CFBundleIdentifier","raw","-o","-",n],{encoding:"utf-8",env:process.env}),r=String(i.stdout||"").trim();return i.status!==0||!r?(O.appendFileSync(t,`Could not read CFBundleIdentifier from Info.plist; skipping uninstall.
+`),null):r}function Ki(e,t,n,i){let r=x.join(e,n);qe("xcrun",["simctl","io",i||"booted","screenshot",r],t)!==0&&O.appendFileSync(t,`[WARN] Could not capture iOS simulator screenshot: ${n}
+`)}function sc(e,t,n){let i=x.join(e,"ios-simulator-recording.mp4");O.appendFileSync(t,`Starting iOS simulator recording: ${i}
+`);let r=Xo("xcrun",["simctl","io",n||"booted","recordVideo",i],{stdio:["ignore","pipe","pipe"],env:process.env});return r.stdout?.on("data",o=>{O.appendFileSync(t,o)}),r.stderr?.on("data",o=>{O.appendFileSync(t,o)}),r.on("error",o=>{O.appendFileSync(t,`[WARN] Could not start iOS simulator recording: ${o.message}
+`)}),r}async function Wo(e,t){e&&await new Promise(n=>{let i=!1,r=()=>{i||(i=!0,n())};e.once("exit",r),e.once("close",r),e.killed||(O.appendFileSync(t,`Stopping iOS simulator recording...
+`),e.kill("SIGINT")),setTimeout(()=>{!i&&!e.killed&&(O.appendFileSync(t,`[WARN] iOS simulator recording did not stop after SIGINT; sending SIGKILL.
+`),e.kill("SIGKILL")),r()},5e3).unref?.()})}function ac(e,t,n){let i=ss(e,t);if(!i)return;O.appendFileSync(t,`Uninstalling existing iOS app data for ${i} if present...
+`),qe("xcrun",["simctl","uninstall",n||"booted",i],t)!==0&&O.appendFileSync(t,`No existing app install removed for ${i}; continuing.
+`)}function lc(e,t){if(!e?.appId)return;if(O.appendFileSync(t,`Cleaning up installed app after Maestro run...
+`),e.platform==="ios"){let r=qe("xcrun",["simctl","uninstall",e.deviceId||"booted",e.appId],t);r===0?O.appendFileSync(t,`Uninstalled iOS app ${e.appId} after Maestro run.
+`):O.appendFileSync(t,`Warning: failed to uninstall iOS app ${e.appId} after Maestro run: xcrun simctl uninstall exited with code ${r}
+`);return}let n=e.deviceId?["-s",e.deviceId]:[],i=qe("adb",[...n,"uninstall",e.appId],t);i===0?O.appendFileSync(t,`Uninstalled Android app ${e.appId} after Maestro run.
+`):O.appendFileSync(t,`Warning: failed to uninstall Android app ${e.appId} after Maestro run: adb uninstall exited with code ${i}
+`)}function dc(e,t){let n=Ge("adb",["devices"],{encoding:"utf-8",env:process.env});if(n.status!==0||n.error)return O.appendFileSync(t,`[WARN] Could not list Android devices before install; using adb default target.
 `),null;let i=String(n.stdout||"").split(`
-`).map(r=>r.trim().split(/\s+/)).filter(r=>r.length>=2&&r[1]==="device").map(r=>r[0]).filter(Boolean);return e&&i.includes(e)?(M.appendFileSync(t,`Using Android device ${e} for install and cleanup.
-`),e):i.length===1?(M.appendFileSync(t,`Using Android device ${i[0]} for install and cleanup.
-`),i[0]):(i.length>1&&M.appendFileSync(t,`[WARN] Multiple Android devices are connected; using adb default target for install and cleanup.
-`),null)}function pf(e,t){let i=(no("aapt",["dump","badging",e])||no("aapt2",["dump","badging",e]))?.match(/package:\s+name='([^']+)'/);if(i?.[1])return i[1];let o=no("apkanalyzer",["manifest","application-id",e])?.split(/\s+/).find(Boolean);return o||(M.appendFileSync(t,`[WARN] Could not determine Android application id from APK; post-run uninstall will be skipped.
-`),null)}function no(e,t){for(let n of ff(e)){let i=bt(n,t,{encoding:"utf-8",env:process.env,maxBuffer:10485760});if(i.status===0&&i.stdout)return String(i.stdout).trim()}return null}function ff(e){let t=process.platform==="win32"&&!e.endsWith(".exe")?`${e}.exe`:e,n=[];if(e==="aapt"||e==="aapt2")for(let r of _a()){let o=q.join(r,"build-tools");for(let s of Pa(o))n.push(q.join(o,s,t))}if(e==="apkanalyzer")for(let r of _a()){n.push(q.join(r,"cmdline-tools","latest","bin",t));let o=q.join(r,"cmdline-tools");for(let s of Pa(o))n.push(q.join(o,s,"bin",t));n.push(q.join(r,"tools","bin",t))}let i=mf(e);return i&&n.unshift(i),n.push(t),[...new Set(n)]}function _a(){let e=[process.env.ANDROID_HOME,process.env.ANDROID_SDK_ROOT];return process.platform==="darwin"?e.push(q.join(bn.homedir(),"Library","Android","sdk")):process.platform==="linux"&&e.push(q.join(bn.homedir(),"Android","Sdk"),q.join(bn.homedir(),"Android","sdk"),"/opt/android-sdk","/usr/lib/android-sdk"),[...new Set(e.filter(t=>!!t))]}function Pa(e){try{return M.readdirSync(e,{withFileTypes:!0}).filter(t=>t.isDirectory()).map(t=>t.name).sort((t,n)=>n.localeCompare(t,void 0,{numeric:!0}))}catch{return[]}}function mf(e){let t=process.platform==="win32"?"where":"/usr/bin/env",n=process.platform==="win32"?[e]:["which",e],i=bt(t,n,{encoding:"utf-8",env:process.env});return i.status!==0||!i.stdout?null:String(i.stdout).split(`
-`)[0]?.trim()||null}async function io(e,t,n){if(!M.existsSync(e))return;let i=M.readFileSync(e),r;for(let o=1;o<=3;o+=1)try{await Wn.put(t,i,{headers:{"Content-Type":n,"Content-Length":String(i.length)},maxBodyLength:1/0,maxContentLength:1/0,timeout:12e4});return}catch(s){if(r=s,!Na(s)||o>=3)break;await uo(2e3*o)}throw r}async function Ra(e,t,n,i){let r=q.join(n,"report.xml"),o=q.join(t,"artifacts.tar.gz");try{await io(r,e.junitUploadUrl,"application/xml")}catch(s){M.appendFileSync(i,`[WARN] Failed to upload JUnit report: ${s.message||s}
-`)}try{await io(i,e.logUploadUrl,"text/plain")}catch(s){M.appendFileSync(i,`[WARN] Failed to upload runner log: ${s.message||s}
-`)}try{Ct("tar",["-czf",o,"-C",t,q.basename(n)],i),await io(o,e.artifactsUploadUrl,"application/gzip")}catch(s){M.appendFileSync(i,`[WARN] Failed to upload Maestro artifacts: ${s.message||s}
-`)}}function gf(e){if(!e.endsWith(".apk"))return H.error(W.red("Local Android Maestro runs need an APK artifact.")),!1;H.info(W.dim("Installing APK on local Android device/emulator..."));let t=bt("adb",["install","-r",e],{stdio:"inherit",env:process.env});return t.error?(H.error(W.red(`adb failed to start: ${t.error.message}`)),!1):t.status!==0?(H.error(W.red(`adb install failed with exit code ${t.status??1}`)),!1):!0}function hf(e,t){if(e.endsWith(".ipa"))return H.error(W.red("Local iOS Maestro runs need an iOS Simulator .app.zip artifact, not an App Store .ipa.")),!1;let n=e;if(e.endsWith(".zip")){let r=q.join(t,"ios-app");M.mkdirSync(r,{recursive:!0}),new Fi(e).extractAllTo(r,!0);let o=po(r);if(!o)return H.error(W.red("Could not find a .app bundle inside the downloaded zip.")),!1;n=o}if(!n.endsWith(".app"))return H.error(W.red("Local iOS Maestro runs need an iOS Simulator .app bundle or .app.zip artifact.")),!1;H.info(W.dim("Installing app on booted iOS Simulator..."));let i=bt("xcrun",["simctl","install","booted",n],{stdio:"inherit",env:process.env});return i.error?(H.error(W.red(`xcrun failed to start: ${i.error.message}`)),!1):i.status!==0?(H.error(W.red(`iOS Simulator install failed with exit code ${i.status??1}`)),!1):!0}function po(e){let t=M.readdirSync(e,{withFileTypes:!0});for(let n of t){let i=q.join(e,n.name);if(n.isDirectory()&&n.name.endsWith(".app"))return i;if(n.isDirectory()){let r=po(i);if(r)return r}}return null}function yf(e,t){let n=String(t||"").toLowerCase();return n==="android"?e.find(i=>yn(i,".apk")):n==="ios"?e.find(i=>yn(i,".app.zip"))||e.find(i=>yn(i,".zip")):e.find(i=>yn(i,".apk"))||e.find(i=>yn(i,".app.zip"))||e.find(i=>yn(i,".zip"))}function yn(e,t){return String(e?.name||e?.downloadUrl||e?.url||"").toLowerCase().endsWith(t)}function fo(e){let t=String(e||"").toLowerCase();if(t.includes(".apk"))return"android";if(t.includes(".app.zip")||t.endsWith(".app")||t.includes(".ipa"))return"ios"}function Fa(e){if(e)try{return q.basename(new URL(e).pathname)||void 0}catch{return q.basename(e)||void 0}}function bf(e){return e?e.match(/[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/i)?.[0]:void 0}function Ba(e,t){if(!e.jsonOutput)return;let n=q.resolve(e.jsonOutput),i={...t,updatedAt:new Date().toISOString()};try{let r=q.dirname(n);r&&r!=="."&&M.mkdirSync(r,{recursive:!0}),M.writeFileSync(n,JSON.stringify(i,null,2))}catch(r){H.warn(W.yellow(`Could not write Maestro metadata JSON: ${r.message}`))}}function Sf(e,t){if(!e.jsonOutput)return;let n=q.resolve(e.jsonOutput),i={mode:"local",...t,updatedAt:new Date().toISOString()};try{let r=q.dirname(n);r&&r!=="."&&M.mkdirSync(r,{recursive:!0}),M.writeFileSync(n,JSON.stringify(i,null,2))}catch(r){H.warn(W.yellow(`Could not write Maestro metadata JSON: ${r.message}`))}}import{spinner as Bt,text as Xn,select as So,isCancel as Ut,cancel as Ao,log as Ya}from"@clack/prompts";import se from"chalk";import ue from"fs";import Ne from"path";import{spawn as vf,spawnSync as rn}from"child_process";import Xa from"axios";import sn from"os";import wo from"crypto";import Af from"crypto";import Sn from"axios";import ja from"fs";var Yn=6e4,Ef=12e4,mo=4,qn=e=>encodeURIComponent(e),If=e=>new Promise(t=>setTimeout(t,e));async function An(e,t){let n;for(let i=1;i<=mo;i++)try{return await t()}catch(r){if(n=r,i>=mo||!wf(r))throw r;let o=Number(r.response?.headers?.["retry-after"]),s=Number.isFinite(o)&&o>0?o*1e3:Math.min(2e3*i*i,15e3);console.log(`[Google Play] ${e} failed (attempt ${i}/${mo}); retrying in ${Math.round(s/1e3)}s...`),await If(s)}throw n}function wf(e){let t=e.response?.status;return t?t===408||t===409||t===425||t===429||t>=500:!0}async function Va(e){let{packageName:t,serviceAccount:n,aabPath:i,track:r,releaseStatus:o,userFraction:s,changesNotSentForReview:a}=e,l;try{let c={Authorization:`Bearer ${await Ha(n)}`,Connection:"close"},u=qn(t);if(l=(await An("create edit",()=>Sn.post(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${u}/edits`,{},{headers:c,timeout:Yn}))).data.id,!l)throw new Error("Google Play edit insert succeeded but did not return an edit id.");let p=qn(l),y=ja.statSync(i),g=await An("upload AAB",()=>Sn.post(`https://androidpublisher.googleapis.com/upload/androidpublisher/v3/applications/${u}/edits/${p}/bundles`,ja.createReadStream(i),{headers:{...c,"Content-Type":"application/octet-stream","Content-Length":y.size},maxBodyLength:1/0,maxContentLength:1/0,params:{uploadType:"media"},timeout:Ef})),h=Number(g.data.versionCode);if(!h)throw new Error("Google Play upload succeeded but did not return a versionCode.");let S={versionCodes:[String(h)],status:o};return(o==="inProgress"||o==="halted")&&typeof s=="number"&&(S.userFraction=s),await An("update track",()=>Sn.put(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${u}/edits/${p}/tracks/${qn(r)}`,{releases:[S]},{headers:c,timeout:Yn})),await An("commit edit",()=>Sn.post(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${u}/edits/${p}:commit`,{},{headers:c,params:a?{changesNotSentForReview:!0}:void 0,timeout:Yn})),{editId:l,versionCode:h,track:r,releaseStatus:o,userFraction:s}}catch(d){if(l)try{let u=await Ha(n);await An("delete edit",()=>Sn.delete(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${qn(t)}/edits/${qn(l)}`,{headers:{Authorization:`Bearer ${u}`,Connection:"close"},timeout:Yn}))}catch{}let c=d.response?.data?.error?.message||d.message;throw new Error(`Google Play API Error: ${c}`)}}async function Ha(e){let t=Math.floor(Date.now()/1e3),n=t+3600,i={alg:"RS256",typ:"JWT"},r={iss:e.client_email,sub:e.client_email,aud:"https://oauth2.googleapis.com/token",iat:t,exp:n,scope:"https://www.googleapis.com/auth/androidpublisher"},o=Buffer.from(JSON.stringify(i)).toString("base64url"),s=Buffer.from(JSON.stringify(r)).toString("base64url"),a=`${o}.${s}`,l=Af.createSign("RSA-SHA256");l.update(a);let d=l.sign(e.private_key,"base64url"),c=`${a}.${d}`;return(await An("OAuth token exchange",()=>Sn.post("https://oauth2.googleapis.com/token",{grant_type:"urn:ietf:params:oauth:grant-type:jwt-bearer",assertion:c},{headers:{Connection:"close"},timeout:Yn}))).data.access_token}var $f=5e3,_f=12,Za=100,go=24,Ga=8e3,Pf={completed:"completed",draft:"draft",halted:"halted",inprogress:"inProgress","in-progress":"inProgress"},Rf=e=>e?.type==="google_service_account",ji=e=>e?.bundleId||e?.packageName||e?.meta?.packageName||e?.meta?.bundleId,Qa=e=>e.submitArgs||process.argv.slice(3).join(" ");async function Hi(e){let t=Bt(),n=Ue(),i=Cf(e);if(!i){process.exitCode=1;return}let r=e.projectId||i.projectId,o=e.profile||e.buildProfile||"production";if(!r){ye(`${m.configFileName} is missing projectId. Pass --project-id in runner mode.`),process.exitCode=1;return}i.projectId=r,$e(se.dim(`Submit for project: ${i.name||r} | Profile: ${o}`));let s=e.platform;if(!s){let I=await So({message:"Select platform to submit:",options:[{value:"ios",label:"iOS (App Store Connect / TestFlight)"},{value:"android",label:"Android (Google Play Console)"}]});if(Ut(I)){Ao("Operation cancelled");return}s=I}if(s=String(s).toLowerCase(),s!=="ios"&&s!=="android"){ye(`Platform ${s} is not supported. Use 'ios' or 'android'.`),process.exitCode=1;return}let a=s==="ios"&&!e.local&&e.sshHost?zf(i,o,e):null;if(s==="ios"&&!e.local&&!a){await Of(i,o,e);return}let l=e.submitId,d=!!(e.local&&l),c=l||null,u=async(I,$={})=>{c&&await xf(r,c,{status:I,...$})},f=s==="android"?e.packageName||e.androidPackage||Hf(i,o):void 0,p=s==="ios"?e.bundleId||e.iosBundleIdentifier||Gf(i,o):void 0,y,g,h,S=!1;try{s==="android"&&(y=e.track||i.submit?.[o]?.android?.track||i.submit?.production?.android?.track||"internal",g=Kf(i,o,e.releaseStatus),h=Jf(i,o,e.rollout),S=qf(i,o,e.changesNotSentForReview),Yf(g,h))}catch(I){ye(I.message),process.exitCode=1;return}if(s==="android"&&!d&&(c=await Df(i,r,s,o,e,{packageName:f,track:y,releaseStatus:g,rollout:h,changesNotSentForReview:S}),!c)){ye("Could not create submission tracking record. Submission was not started."),process.exitCode=1;return}await u("running",{platform:s,profile:o,packageName:f,track:y,releaseStatus:g,rollout:h,startTime:Date.now(),...d?Lf():{}});let b=null,_=null;try{_=await Xf(r,s,e,n?.token),b=_?.filePath||null}catch(I){await u("failed",{error:`Failed to resolve submission artifact: ${I.message}`,endTime:Date.now()}),ye(`Failed to resolve submission artifact: ${I.message}`),process.exitCode=1;return}if(!b){let I=Qf(s,e);await u("failed",{error:I,endTime:Date.now()}),ye(I),process.exitCode=1;return}await u("running",{buildId:_?.buildId,artifactName:_?.artifactName,artifactSource:_?.source}),$e(`Using artifact: ${se.green(Ne.basename(b))} `),t.start("Fetching submission credentials from Dashboard...");let w;try{let $=(await D.get(`/credentials/${r}`)).data.credentials||[];if(s==="android"&&!f){t.stop("Package name missing"),ye("Could not resolve Android package name. Set android.package in mach.config.json/app.json."),await u("failed",{error:"Could not resolve Android package name.",endTime:Date.now()}),process.exitCode=1;return}let x=$.filter(Rf),P=s==="ios"?$.filter(V=>V.type==="asc_api_key"):Vf(x,f);if(P.length===0){if(t.stop("Credentials missing"),ye(s==="android"?`No Google Play service credential found for package ${f}.`:`No Service Credentials found for ${s}.`),s==="android"){let V=x.map(ji).filter(Boolean).join(", ");V&&$e(`Found Google Play service credential(s) for: ${V}`),$e(`Use '${m.nameLower} credentials:service --platform android --package-name ${f}' or upload it under that package in the Dashboard.`)}else $e(`Use '${m.nameLower} credentials:service --platform ${s}' or use the Dashboard to upload them.`);await u("failed",{error:`No submission credentials found for ${s}.`,endTime:Date.now()}),process.exitCode=1;return}if(w=Uf(P,e.credentialId),!w&&s==="ios"&&p&&(w=Ff(P,p)),w||P.length===1)w=w||P[0],t.stop(`Using: ${w.name}`),s==="android"&&ji(w)==="*"&&$e(se.yellow(`Using legacy wildcard Google Play credential for ${f}. Upload a package-scoped credential when possible.`));else{if(t.stop("Multiple credentials found"),Bf()){let G=P.map(j=>`${j.name||"credential"} (${j.credentialId||j.id||"no-id"})`).join(", ");ye(`Multiple ${s==="ios"?"App Store Connect":"Google Play"} credentials found. Use --credential-id in CI. Available: ${G}`),await u("failed",{error:"Multiple submission credentials found; --credential-id is required in CI.",endTime:Date.now()}),process.exitCode=1;return}let V=await So({message:`Choose a ${s==="ios"?"App Store Connect":"Google Play"} credential:`,options:P.map(G=>({value:G.credentialId,label:G.name,hint:`${G.keyId?`ID: ${G.keyId}`:""} ${G.issuerId?`(Issuer: ${G.issuerId.substring(0,8)}...)`:""}`}))});if(Ut(V)){Ao("Submission cancelled"),await u("failed",{error:"Submission cancelled while selecting credential.",endTime:Date.now()}),process.exitCode=1;return}w=P.find(G=>G.credentialId===V),$e(`Using selected: ${se.green(w.name)}`)}}catch(I){t.stop("Failed to fetch credentials"),ye(`API Error: ${I.message} `),await u("failed",{error:`Failed to fetch credentials: ${I.message}`,endTime:Date.now()}),process.exitCode=1;return}let T=ue.mkdtempSync(Ne.join(sn.tmpdir(),`${m.nameLower}-submit-`)),B=w.keyId||w.meta?.keyId,X=w.issuerId||w.meta?.issuerId,U=w.type==="asc_api_key"?`AuthKey_${B}.p8`:"service-account.json",K=Ne.join(T,U);t.start("Downloading secure key...");try{let I=await D.get(`/credentials/${w.credentialId}/download`,{params:{projectId:r,format:"raw"}});if(I.data.status!=="success"||!I.data.downloadUrl)throw new Error("Failed to get secure download URL");let $=await Xa.get(I.data.downloadUrl,{responseType:"arraybuffer"});ue.writeFileSync(K,Buffer.from($.data)),t.stop("Key downloaded to secure temp storage")}catch(I){t.stop("Download failed"),ye(`Failed to download key: ${I.message}`);try{ue.rmSync(T,{recursive:!0,force:!0})}catch{}await u("failed",{error:`Failed to download credential key: ${I.message}`,endTime:Date.now()}),process.exitCode=1;return}$e(se.blue(`Initiating ${s==="ios"?"TestFlight":"Google Play"} submission...`));let v=!1,R;try{if(s==="ios"){if(!B){let $=await Xn({message:"Enter App Store Connect Key ID (e.g. 2X948D...):",validate:x=>x.length>0?void 0:"Key ID is required"});if(Ut($)){await u("failed",{error:"Submission cancelled while entering ASC Key ID.",endTime:Date.now()}),process.exitCode=1;return}B=$}if(!X||X==="undefined"){let $=await Xn({message:"Enter App Store Connect Issuer ID (Found on ASC Keys page):",validate:x=>x.length>0?void 0:"Issuer ID is required"});if(Ut($)){await u("failed",{error:"Submission cancelled while entering ASC Issuer ID.",endTime:Date.now()}),process.exitCode=1;return}X=$}$e(`Using ASC Key ID: ${B}`),$e(`Using ASC Issuer ID: ${X}`);let I=a?await tm(b,K,X,B,p,a):await em(b,K,X,B,p);Io(`${s==="ios"?"App Store":"Google Play"} submission successful!`),v=!0}else R=await sm(b,K,y||"internal",f,g||"completed",h,S,o),Io("Google Play submission successful!"),v=!0}catch(I){ye(`Submission failed: ${I.message}`),await u("failed",{error:I.message,endTime:Date.now()}),Ft(e,{status:"failed",projectId:r,submitId:c,platform:s,profile:o,buildId:_?.buildId||e.buildId,artifactName:_?.artifactName,error:I.message,dashboardUrl:c?on(c,r):void 0}),process.exitCode=1}finally{v&&(await u("success",{endTime:Date.now(),versionCode:R?.versionCode,track:y,releaseStatus:g}),Ft(e,{status:"success",projectId:r,submitId:c,platform:s,profile:o,buildId:_?.buildId||e.buildId,artifactName:_?.artifactName,versionCode:R?.versionCode,track:y,releaseStatus:g,dashboardUrl:c?on(c,r):void 0})),Em(T),b&&b.includes(`${m.nameLower}-artifact-`)}}function Cf(e){let t=`./${m.configFileName}`;if(ue.existsSync(t))try{return JSON.parse(ue.readFileSync(t,"utf-8"))}catch(n){return ye(`Failed to read ${m.configFileName}: ${n.message}`),null}return e.projectId?{projectId:e.projectId}:(ye(`No ${m.configFileName} found. Run \`${m.nameLower} init\` or \`${m.nameLower} link\` first.`),null)}async function Of(e,t,n){let i=n.projectId||e.projectId;if(!i){ye(`${m.configFileName} is missing projectId.`),process.exitCode=1;return}let r=n.submitId||wo.randomUUID(),o=!!n.latest||!n.buildId,s=kf({...n,latest:o,profile:t,projectId:i,submitId:r}),a={projectId:i,submitId:r,platform:"ios",profile:t,latest:o,buildId:n.buildId,credentialId:n.credentialId,status:"pending",source:"cli",submitArgs:Qa(n),runnerArgs:s,runnerCommand:[m.nameLower,"submit",...s].map(jf).join(" "),appName:e.name,startTime:Date.now()},l=Bt();l.start("Queuing iOS submit on macOS runner...");try{let d=await D.post("/submissions",a),c=d.data?.submission||d.data?.submit||{},u=d.data?.dashboardUrl||on(r,i);l.stop("iOS submit queued"),$e(`Submission ID: ${se.cyan(r)}`),$e(`Dashboard: ${se.blue.underline(u)}`),Ft(n,{status:"pending",projectId:i,submitId:r,platform:"ios",profile:t,latest:o,buildId:n.buildId,dashboardUrl:u}),await Nf(i,r,n)}catch(d){l.stop("Could not queue iOS submit"),ye(Mf(d)),process.exitCode=1}}async function Df(e,t,n,i,r,o={}){let s=r.submitId||wo.randomUUID(),a=!!r.latest||!r.buildId,l={projectId:t,submitId:s,platform:n,profile:i,latest:a,buildId:r.buildId,credentialId:r.credentialId,status:"running",source:"cli-direct",submitArgs:Qa(r),appName:e.name,startTime:Date.now(),...o};try{let d=await D.post("/submissions",l),c=d.data?.submission||d.data?.submit||{},u=d.data?.dashboardUrl||c.dashboardUrl||on(s,t);return $e(`Submission ID: ${se.cyan(s)}`),$e(`Dashboard: ${se.blue.underline(u)}`),Ft(r,{status:"running",projectId:t,submitId:s,platform:n,profile:i,latest:a,buildId:r.buildId,dashboardUrl:u}),s}catch(d){let c=d.response?.data?.message||d.response?.data?.error||d.message;return $e(se.yellow(`Could not create submission tracking record: ${c}`)),null}}function kf(e){let t=["--local","--submit-id",e.submitId,"--project-id",e.projectId,"--platform","ios","--profile",e.profile||"production"];return e.buildId?t.push("--build-id",e.buildId):t.push("--latest"),e.credentialId&&t.push("--credential-id",e.credentialId),e.bundleId&&t.push("--bundle-id",e.bundleId),e.packageName&&t.push("--package-name",e.packageName),e.quiet&&t.push("--quiet"),e.jsonOutput&&t.push("--json-output",e.jsonOutput),t.filter(n=>n!=null&&n!=="")}async function Nf(e,t,n){let i=Bt(),r=0,o=0;for(n.quiet||i.start("Waiting for iOS submit runner...");;)try{let s=await D.get(`/submissions/${e}/${t}`),a=s.data?.submission||s.data?.submit||s.data,l=String(a?.status||"pending").toLowerCase();r=0;let d=Array.isArray(a?.logs)?a.logs:[];for(let c=o;c<d.length;c++){let u=d[c];u&&console.log(se.dim(String(u)))}if(o=d.length,["success","completed","succeeded"].includes(l)){n.quiet||i.stop("iOS submit completed"),Io("App Store submission successful!"),Ft(n,{status:"success",projectId:e,submitId:t,platform:"ios",profile:a?.profile||n.profile||"production",buildId:a?.buildId||n.buildId,artifactName:a?.artifactName,dashboardUrl:a?.dashboardUrl||on(t,e)});return}if(["failed","error","cancelled","canceled"].includes(l)){n.quiet||i.stop("iOS submit failed");let c=a?.error||a?.message||"Unknown iOS submit failure.";ye(c),Ft(n,{status:"failed",projectId:e,submitId:t,platform:"ios",profile:a?.profile||n.profile||"production",buildId:a?.buildId||n.buildId,artifactName:a?.artifactName,error:c,dashboardUrl:a?.dashboardUrl||on(t,e)}),process.exitCode=1;return}n.quiet||i.message(`iOS submit ${l}...`),await Eo($f)}catch(s){if(r++,r>=_f){n.quiet||i.stop("Lost connection to iOS submit status"),ye(`Could not fetch iOS submit status after ${r} attempts: ${s.message}`),process.exitCode=1;return}await Eo(Math.min(2e3*r,15e3))}}async function xf(e,t,n){let i;for(let r=1;r<=3;r++)try{await D.patch(`/submissions/${e}/${t}`,n);return}catch(o){if(i=o,r>=3||!Tf(o))break;await Eo(1e3*r)}Ya.warn(se.dim(`Could not report submission status: ${i?.message||i}`))}function Tf(e){let t=e.response?.status;return!t||t===408||t===409||t===425||t===429||t>=500}function Lf(){let e={gitlabJobId:process.env.CI_JOB_ID,gitlabJobUrl:process.env.CI_JOB_URL,gitlabPipelineId:process.env.CI_PIPELINE_ID,gitlabProjectId:process.env.CI_PROJECT_ID,gitlabProjectPath:process.env.CI_PROJECT_PATH};return Object.fromEntries(Object.entries(e).filter(([,t])=>!!t))}function Mf(e){let t=e.response?.status,n=e.response?.data?.message||e.response?.data?.error;return t===404||t===405?["Managed iOS submit is not enabled on this Mach API yet.","Deploy the API/dashboard submission orchestration endpoint, then retry the same command.","Expected API: POST /submissions and GET/PATCH /submissions/:projectId/:submitId."].join(`
-`):n||e.message||String(e)}function on(e,t){if(!e)return yt;let n=t?`?projectId=${encodeURIComponent(t)}`:"";return`${yt}/submissions/${e}${n}`}function Ft(e,t){if(!e.jsonOutput)return;let n=Ne.resolve(e.jsonOutput),i={...t,url:t.url||t.dashboardUrl||on(t.submitId,t.projectId),updatedAt:new Date().toISOString()};try{let r=Ne.dirname(n);r&&r!=="."&&ue.mkdirSync(r,{recursive:!0}),ue.writeFileSync(n,JSON.stringify(i,null,2))}catch(r){Ya.warn(se.yellow(`Could not write submission metadata JSON: ${r.message}`))}}function Uf(e,t){return t&&e.find(n=>n.credentialId===t||n.id===t||n.keyId===t||n.meta?.keyId===t)||null}function Ff(e,t){let n=e.filter(i=>[i.bundleId,i.bundleIdentifier,i.appIdentifier,i.meta?.bundleId,i.meta?.bundleIdentifier,i.meta?.appIdentifier].filter(Boolean).map(String).includes(t));return n.length===1?n[0]:null}function Bf(){return process.env.CI==="true"||process.env.CI==="1"||!process.stdin.isTTY}function Eo(e){return new Promise(t=>setTimeout(t,e))}function jf(e){return/^[a-zA-Z0-9_./:=@-]+$/.test(e)?e:`'${e.replace(/'/g,"'\\''")}'`}function Hf(e,t){if(e.submit?.[t]?.android?.package)return e.submit[t].android.package;let n=un(e,t);if(n)return n;let i=Ne.join(process.cwd(),"app.json");if(ue.existsSync(i))try{return JSON.parse(ue.readFileSync(i,"utf-8")).expo?.android?.package}catch{}let r=Ne.join(process.cwd(),"app.config.json");if(ue.existsSync(r))try{let o=JSON.parse(ue.readFileSync(r,"utf-8"));return o.expo?.android?.package||o.android?.package}catch{}}function Vf(e,t){let n=e.filter(o=>ji(o)===t);if(n.length>0)return n;let i=e.filter(o=>{let s=ji(o);return!s||s==="*"});return e.length>0&&e.length===i.length?i:[]}function Gf(e,t){return e.submit?.[t]?.ios?.bundleIdentifier?e.submit[t].ios.bundleIdentifier:e.submit?.[t]?.ios?.bundleId?e.submit[t].ios.bundleId:Xt(e,t)}function zf(e,t,n){let i=e.submit?.[t]?.ios||{},r=e.submit?.production?.ios||{},o=n.sshHost||i.sshHost||r.sshHost||process.env.MACH_IOS_SUBMIT_SSH_HOST;return o?{sshHost:o,sshUser:n.sshUser||i.sshUser||r.sshUser||process.env.MACH_IOS_SUBMIT_SSH_USER||process.env.USER||"ubuntu",sshKey:n.sshKey||i.sshKey||r.sshKey||process.env.MACH_IOS_SUBMIT_SSH_KEY}:null}function Kf(e,t,n){let i=n||e.submit?.[t]?.android?.releaseStatus||e.submit?.production?.android?.releaseStatus||"completed";return Wf(i)}function Wf(e){let t=Pf[String(e).trim().toLowerCase()];if(!t)throw new Error(`Invalid Android release status "${e}". Use completed, draft, halted, or inProgress.`);return t}function Jf(e,t,n){let i=n??e.submit?.[t]?.android?.rollout??e.submit?.[t]?.android?.userFraction??e.submit?.[t]?.android?.rolloutFraction??e.submit?.production?.android?.rollout??e.submit?.production?.android?.userFraction??e.submit?.production?.android?.rolloutFraction;if(i==null||i==="")return;let r=Number(i);if(!Number.isFinite(r)||r<=0||r>=1)throw new Error(`Invalid Android rollout fraction "${i}". Use a number greater than 0 and less than 1, for example 0.1.`);return r}function qf(e,t,n){let i=n??e.submit?.[t]?.android?.changesNotSentForReview??e.submit?.[t]?.android?.changes_not_sent_for_review??e.submit?.production?.android?.changesNotSentForReview??e.submit?.production?.android?.changes_not_sent_for_review??!1;return i===!0||i==="true"||i==="1"}function Yf(e,t){if(e==="inProgress"&&t===void 0)throw new Error("Google Play staged rollout requires --rollout <fraction> when --release-status inProgress is used.");if(e!=="inProgress"&&e!=="halted"&&t!==void 0)throw new Error("Android rollout fraction can only be used with --release-status inProgress or halted.")}async function Xf(e,t,n,i){let r=n.buildId?"id":n.latest?"latest":null;if(!r){let s=await So({message:"Select artifact source:",options:[{value:"latest",label:`Latest Production Build (${m.name})`},{value:"id",label:`Input Build ID (${m.name})`},{value:"url",label:"Remote URL"},{value:"local",label:"Local File Path"}]});if(Ut(s))return Ao("Operation cancelled"),null;r=s}if(r==="local"){let s=await Xn({message:"Enter path to artifact (.ipa/.aab):",validate:a=>{if(!ue.existsSync(a))return"File not found";if(t==="ios"&&!a.endsWith(".ipa"))return"Must be an .ipa file";if(t==="android"&&!a.endsWith(".aab"))return"Must be an .aab file"}});return Ut(s)?null:{filePath:s,source:"local"}}let o=Bt();if(r==="latest"){let s=n.profile||n.buildProfile;o.start(`Fetching latest${s?` ${s}`:""} build...`);try{let a=await D.get(`/builds/${e}`,{params:{limit:50}});if(a.data.status!=="success")throw new Error(a.data.message);let l=a.data.builds||[],d=s?.toLowerCase(),c=w=>w.platform?.toLowerCase()===t.toLowerCase()&&w.status?.toLowerCase()==="success",u=w=>d?[w.buildProfile,w.profile,w.profileName,w.buildType].filter(Boolean).some(T=>String(T).toLowerCase()===d):!0,f=l.filter(w=>c(w)&&u(w)),p=f.find(w=>w.buildType?.toLowerCase()==="store"||w.distribution?.toLowerCase()==="store")||f[0],y=l.some(w=>w.platform?.toLowerCase()===t.toLowerCase()&&w.status?.toLowerCase()==="success");if(!p)return o.stop("No suitable build found"),ye(s&&y?`No successful ${t} builds found for profile "${s}".`:"No successful builds found for this platform."),null;o.stop(`Found build: ${p.buildId}`);let g=p.artifacts||[];if(g.length===0||g.every(w=>!(w.url||w.downloadUrl)))try{let w=await D.get(`/builds/${e}/${p.buildId}/artifacts`);w.data.status==="success"&&w.data.artifacts?.length>0?(g=w.data.artifacts.map(T=>({...T,url:T.url||T.downloadUrl})),console.log(se.cyan(`  [RECOVERY] Fetched ${g.length} artifact(s) with download URLs.`))):console.log(se.yellow("  [RECOVERY] /artifacts endpoint returned 0 artifacts."))}catch(w){console.log(se.red(`  [RECOVERY] /artifacts fetch failed: ${w.message}`))}let S=t==="ios",b=g.find(w=>{let T=(w.type||"").toLowerCase(),B=(w.name||"").toLowerCase();if(console.log(se.dim(`    - Checking: ${w.name} (Type: ${w.type}, HasLink: ${!!(w.url||w.downloadUrl)})`)),T)return T===(S?"ipa":"aab");let X=S?".ipa":".aab",U=(w.url||w.downloadUrl||"").toLowerCase();return B.endsWith(X)||U.includes(X)});if(!b||!(b.url||b.downloadUrl))return ye("Build found but artifact URL is missing."),null;let _=b.url||b.downloadUrl;return{filePath:await ho(_,S?"ios":"android"),buildId:p.buildId,artifactName:b.name,source:"latest"}}catch(a){return o.stop("Fetch failed"),ye(`API Error: ${a.message}`),null}}if(r==="id"){let s=n.buildId||await Xn({message:"Enter Build ID:",validate:l=>l.length<5?"Invalid ID":void 0});if(Ut(s))return null;let a=String(s);o.start("Fetching build...");try{let l=null;try{let p=await D.get(`/builds/${e}/${a}`);p.data.status==="success"&&(l=p.data.build)}catch(p){p.response?.status!==404&&console.log(se.dim(`  [RECOVERY] Project build lookup skipped: ${p.message}`))}if(!l){let p=await D.get(`/build/${a}`);if(p.data.status!=="success")throw new Error(p.data.message);l=p.data.build}if(!l)throw new Error(`Build ${a} was not found.`);let d=t==="ios",c=Bi(l.artifacts);Zf(c)||(c=await Ka(e,a,c));let u=za(c,t);if(u||(c=await Ka(e,a,c),u=za(c,t)),!u)throw new Error(`No ${d?".ipa":".aab"} artifact found for build ${a}. The build exists, but its artifact list does not contain a downloadable submission artifact.`);let f=u.url||u.downloadUrl;if(!f)throw new Error(`Artifact ${u.name||"(unnamed)"} for build ${a} has no download URL. Retry after the build artifact upload is visible in the Installation Hub.`);return o.stop(`Found build: ${l.buildId||a}`),{filePath:await ho(f,d?"ios":"android"),buildId:l.buildId||a,artifactName:u.name,source:"id"}}catch(l){throw o.stop("Fetch failed"),l}}if(r==="url"){let s=await Xn({message:"Enter Artifact URL:",validate:a=>a.startsWith("http")?void 0:"Must be a valid URL"});return Ut(s)?null:{filePath:await ho(s,t),source:"url"}}return null}function Bi(e){return(e||[]).map(t=>({...t,url:t.url||t.downloadUrl}))}function Zf(e){return e.some(t=>!!(t.url||t.downloadUrl))}function za(e,t){let n=t==="ios",i=n?"ipa":"aab",r=n?".ipa":".aab";return e.find(o=>{let s=String(o.type||"").toLowerCase(),a=String(o.name||"").toLowerCase(),l=String(o.url||o.downloadUrl||"").toLowerCase();return s?s===i:a.endsWith(r)||l.includes(r)})||null}function Qf(e,t){let n=e==="ios"?".ipa":".aab";if(t.buildId)return`No downloadable ${n} artifact found for build ${t.buildId}. Check that the build finished artifact upload before submitting.`;if(t.latest){let i=t.profile||t.buildProfile;return`No latest successful ${e}${i?` ${i}`:""} build has a downloadable ${n} artifact.`}return`No downloadable ${n} artifact was selected for submission.`}async function Ka(e,t,n){try{let i=await D.get(`/builds/${e}/${t}/artifacts`);if(i.data.status==="success"&&i.data.artifacts?.length>0){let r=Bi(i.data.artifacts);return console.log(se.cyan(`  [RECOVERY] Fetched ${r.length} artifact(s) with download URLs.`)),r}}catch(i){console.log(se.dim(`  [RECOVERY] Project artifact lookup skipped: ${i.message}`))}try{let i=await D.get(`/public/builds/${t}`);if(i.data.status==="success"&&i.data.artifacts?.length>0){let r=Bi(i.data.artifacts);return console.log(se.cyan(`  [RECOVERY] Fetched ${r.length} public artifact(s) with download URLs.`)),r}}catch(i){console.log(se.dim(`  [RECOVERY] Public artifact lookup skipped: ${i.message}`))}return Bi(n)}async function ho(e,t,n=3){let i=Bt();i.start("Downloading artifact...");let r=ue.mkdtempSync(Ne.join(sn.tmpdir(),`${m.nameLower}-artifact-`)),o=`app.${t==="ios"?"ipa":"aab"}`,s=Ne.join(r,o);for(let a=1;a<=n;a++)try{a>1&&(i.message(`Downloading artifact (Retry ${a}/${n})...`),await new Promise(c=>setTimeout(c,2e3*a)));let l=ue.createWriteStream(s),d=await Xa({url:e,method:"GET",responseType:"stream",timeout:6e4});return await new Promise((c,u)=>{d.data.pipe(l);let f=!1;d.data.on("error",p=>{f||(f=!0,l.close(),u(p))}),l.on("finish",()=>{f||c()}),l.on("error",p=>{f||(f=!0,u(p))})}),i.stop("Download complete"),s}catch(l){if(a===n)throw i.stop("Download failed"),l}throw new Error("Download failed after retries")}async function em(e,t,n,i,r){let o=Bt();if(r&&$e(`Bundle ID: ${se.green(r)}`),!n||!i)throw ye(`Missing credentials: issuerId=${n}, keyId=${i}. Check your Dashboard.`),new Error("Missing ASC API Key Metadata (IssuerID or KeyID)");let s=el(t,n,i),a=lm();return o.start("Uploading to TestFlight (pilot)..."),new Promise((l,d)=>{let c=cm(),u=vf(a.command,["pilot","upload","--ipa",e,"--api_key_path",s,"--skip_submission","true","--skip_waiting_for_build_processing","true"],{stdio:["ignore","pipe","pipe"],env:a.env});u.stdout?.on("data",f=>c.append(f,process.stdout)),u.stderr?.on("data",f=>c.append(f,process.stderr)),u.on("close",f=>{if(c.flush(),f!==0){o.stop("Pilot failed");try{ue.unlinkSync(s)}catch{}d(um(f,c.lines()))}else{o.stop("IPA uploaded to TestFlight");try{ue.unlinkSync(s)}catch{}l({})}}),u.on("error",f=>{c.flush();try{ue.unlinkSync(s)}catch{}o.stop("Pilot execution error");let p=Sm(f);p.logs=c.lines(),d(p)})})}async function tm(e,t,n,i,r,o){let s=Bt();if(r&&$e(`Bundle ID: ${se.green(r)}`),!n||!i)throw ye(`Missing credentials: issuerId=${n}, keyId=${i}. Check your Dashboard.`),new Error("Missing ASC API Key Metadata (IssuerID or KeyID)");let a=el(t,n,i),l=`${o.sshUser}@${o.sshHost}`,d=nm(o),c=im(o),u="",f="";try{if(s.start(`Preparing remote iOS submit runner (${l})...`),u=rm("ssh",[...d,"mktemp -d /tmp/mach-submit.XXXXXX"]).trim(),!u)throw new Error("Remote runner did not return a temp directory.");s.stop(`Remote runner ready: ${l}`),s.start("Uploading IPA and App Store Connect key to remote runner..."),yo("scp",[...c,e,`${l}:${u}/app.ipa`],"IPA upload to remote runner"),yo("scp",[...c,a,`${l}:${u}/api_key.json`],"ASC key upload to remote runner"),f=Ne.join(sn.tmpdir(),`${m.nameLower}-ios-submit-${Date.now()}.sh`),ue.writeFileSync(f,om(u)),yo("scp",[...c,f,`${l}:${u}/submit.sh`],"submit script upload to remote runner"),s.stop("Remote submit inputs uploaded"),s.start("Uploading to TestFlight on remote runner...");let p=`chmod +x ${Zn(`${u}/submit.sh`)} && bash ${Zn(`${u}/submit.sh`)}`,y=rn("ssh",[...d,p],{stdio:"inherit"});if(y.error)throw vo("ssh",y.error);if(y.status!==0)throw new Error(`Remote iOS submit failed with exit code ${y.status}.`);return s.stop("IPA uploaded to TestFlight"),{apiKeyJsonPath:null}}catch(p){throw s.stop("Remote iOS submit failed"),p}finally{try{ue.unlinkSync(a)}catch{}if(f)try{ue.unlinkSync(f)}catch{}if(u)try{rn("ssh",[...d,`rm -rf ${Zn(u)}`],{stdio:"ignore"})}catch{}}}function el(e,t,n){let i=ue.readFileSync(e,"utf8"),r;try{r=wo.createPrivateKey(i).export({type:"pkcs8",format:"pem"})}catch{$e("Key normalization failed, falling back to manual re-wrapping..."),r=`-----BEGIN PRIVATE KEY-----
+`).map(r=>r.trim().split(/\s+/)).filter(r=>r.length>=2&&r[1]==="device").map(r=>r[0]).filter(Boolean);return e&&i.includes(e)?(O.appendFileSync(t,`Using Android device ${e} for install and cleanup.
+`),e):i.length===1?(O.appendFileSync(t,`Using Android device ${i[0]} for install and cleanup.
+`),i[0]):(i.length>1&&O.appendFileSync(t,`[WARN] Multiple Android devices are connected; using adb default target for install and cleanup.
+`),null)}function cc(e,t){let i=(Wi("aapt",["dump","badging",e])||Wi("aapt2",["dump","badging",e]))?.match(/package:\s+name='([^']+)'/);if(i?.[1])return i[1];let o=Wi("apkanalyzer",["manifest","application-id",e])?.split(/\s+/).find(Boolean);return o||(O.appendFileSync(t,`[WARN] Could not determine Android application id from APK; post-run uninstall will be skipped.
+`),null)}function Wi(e,t){for(let n of uc(e)){let i=Ge(n,t,{encoding:"utf-8",env:process.env,maxBuffer:10485760});if(i.status===0&&i.stdout)return String(i.stdout).trim()}return null}function uc(e){let t=process.platform==="win32"&&!e.endsWith(".exe")?`${e}.exe`:e,n=[];if(e==="aapt"||e==="aapt2")for(let r of qo()){let o=x.join(r,"build-tools");for(let s of Jo(o))n.push(x.join(o,s,t))}if(e==="apkanalyzer")for(let r of qo()){n.push(x.join(r,"cmdline-tools","latest","bin",t));let o=x.join(r,"cmdline-tools");for(let s of Jo(o))n.push(x.join(o,s,"bin",t));n.push(x.join(r,"tools","bin",t))}let i=pc(e);return i&&n.unshift(i),n.push(t),[...new Set(n)]}function qo(){let e=[process.env.ANDROID_HOME,process.env.ANDROID_SDK_ROOT];return process.platform==="darwin"?e.push(x.join($t.homedir(),"Library","Android","sdk")):process.platform==="linux"&&e.push(x.join($t.homedir(),"Android","Sdk"),x.join($t.homedir(),"Android","sdk"),"/opt/android-sdk","/usr/lib/android-sdk"),[...new Set(e.filter(t=>!!t))]}function Jo(e){try{return O.readdirSync(e,{withFileTypes:!0}).filter(t=>t.isDirectory()).map(t=>t.name).sort((t,n)=>n.localeCompare(t,void 0,{numeric:!0}))}catch{return[]}}function pc(e){let t=process.platform==="win32"?"where":"/usr/bin/env",n=process.platform==="win32"?[e]:["which",e],i=Ge(t,n,{encoding:"utf-8",env:process.env});return i.status!==0||!i.stdout?null:String(i.stdout).split(`
+`)[0]?.trim()||null}async function qi(e,t,n){if(!O.existsSync(e))return;let i=O.readFileSync(e),r;for(let o=1;o<=3;o+=1)try{await Wt.put(t,i,{headers:{"Content-Type":n,"Content-Length":String(i.length)},maxBodyLength:1/0,maxContentLength:1/0,timeout:12e4});return}catch(s){if(r=s,!ts(s)||o>=3)break;await tr(2e3*o)}throw r}async function Yo(e,t,n,i){let r=x.join(n,"report.xml"),o=x.join(t,"artifacts.tar.gz");try{await qi(r,e.junitUploadUrl,"application/xml")}catch(s){O.appendFileSync(i,`[WARN] Failed to upload JUnit report: ${s.message||s}
+`)}try{await qi(i,e.logUploadUrl,"text/plain")}catch(s){O.appendFileSync(i,`[WARN] Failed to upload runner log: ${s.message||s}
+`)}try{qe("tar",["-czf",o,"-C",t,x.basename(n)],i),await qi(o,e.artifactsUploadUrl,"application/gzip")}catch(s){O.appendFileSync(i,`[WARN] Failed to upload Maestro artifacts: ${s.message||s}
+`)}}function fc(e){if(!e.endsWith(".apk"))return C.error(k.red("Local Android Maestro runs need an APK artifact.")),!1;C.info(k.dim("Installing APK on local Android device/emulator..."));let t=Ge("adb",["install","-r",e],{stdio:"inherit",env:process.env});return t.error?(C.error(k.red(`adb failed to start: ${t.error.message}`)),!1):t.status!==0?(C.error(k.red(`adb install failed with exit code ${t.status??1}`)),!1):!0}function mc(e,t){if(e.endsWith(".ipa"))return C.error(k.red("Local iOS Maestro runs need an iOS Simulator .app.zip artifact, not an App Store .ipa.")),!1;let n=e;if(e.endsWith(".zip")){let r=x.join(t,"ios-app");O.mkdirSync(r,{recursive:!0}),new jn(e).extractAllTo(r,!0);let o=nr(r);if(!o)return C.error(k.red("Could not find a .app bundle inside the downloaded zip.")),!1;n=o}if(!n.endsWith(".app"))return C.error(k.red("Local iOS Maestro runs need an iOS Simulator .app bundle or .app.zip artifact.")),!1;C.info(k.dim("Installing app on booted iOS Simulator..."));let i=Ge("xcrun",["simctl","install","booted",n],{stdio:"inherit",env:process.env});return i.error?(C.error(k.red(`xcrun failed to start: ${i.error.message}`)),!1):i.status!==0?(C.error(k.red(`iOS Simulator install failed with exit code ${i.status??1}`)),!1):!0}function nr(e){let t=O.readdirSync(e,{withFileTypes:!0});for(let n of t){let i=x.join(e,n.name);if(n.isDirectory()&&n.name.endsWith(".app"))return i;if(n.isDirectory()){let r=nr(i);if(r)return r}}return null}function gc(e,t){let n=String(t||"").toLowerCase();return n==="android"?e.find(i=>_t(i,".apk")):n==="ios"?e.find(i=>_t(i,".app.zip"))||e.find(i=>_t(i,".zip")):e.find(i=>_t(i,".apk"))||e.find(i=>_t(i,".app.zip"))||e.find(i=>_t(i,".zip"))}function _t(e,t){return String(e?.name||e?.downloadUrl||e?.url||"").toLowerCase().endsWith(t)}function ir(e){let t=String(e||"").toLowerCase();if(t.includes(".apk"))return"android";if(t.includes(".app.zip")||t.endsWith(".app")||t.includes(".ipa"))return"ios"}function as(e){if(e)try{return x.basename(new URL(e).pathname)||void 0}catch{return x.basename(e)||void 0}}function hc(e){return e?e.match(/[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/i)?.[0]:void 0}function ls(e,t){if(!e.jsonOutput)return;let n=x.resolve(e.jsonOutput),i={...t,updatedAt:new Date().toISOString()};try{let r=x.dirname(n);r&&r!=="."&&O.mkdirSync(r,{recursive:!0}),O.writeFileSync(n,JSON.stringify(i,null,2))}catch(r){C.warn(k.yellow(`Could not write Maestro metadata JSON: ${r.message}`))}}function yc(e,t){if(!e.jsonOutput)return;let n=x.resolve(e.jsonOutput),i={mode:"local",...t,updatedAt:new Date().toISOString()};try{let r=x.dirname(n);r&&r!=="."&&O.mkdirSync(r,{recursive:!0}),O.writeFileSync(n,JSON.stringify(i,null,2))}catch(r){C.warn(k.yellow(`Could not write Maestro metadata JSON: ${r.message}`))}}import{spinner as it,text as Xt,select as dr,isCancel as tt,cancel as cr,log as bs}from"@clack/prompts";import V from"chalk";import q from"fs";import ge from"path";import{spawn as Ic,spawnSync as ht}from"child_process";import As from"axios";import bt from"os";import fr from"crypto";import bc from"crypto";import Rt from"axios";import ds from"fs";var Yt=6e4,Ac=12e4,rr=4,Jt=e=>encodeURIComponent(e),Sc=e=>new Promise(t=>setTimeout(t,e));async function Ot(e,t){let n;for(let i=1;i<=rr;i++)try{return await t()}catch(r){if(n=r,i>=rr||!Ec(r))throw r;let o=Number(r.response?.headers?.["retry-after"]),s=Number.isFinite(o)&&o>0?o*1e3:Math.min(2e3*i*i,15e3);console.log(`[Google Play] ${e} failed (attempt ${i}/${rr}); retrying in ${Math.round(s/1e3)}s...`),await Sc(s)}throw n}function Ec(e){let t=e.response?.status;return t?t===408||t===409||t===425||t===429||t>=500:!0}async function us(e){let{packageName:t,serviceAccount:n,aabPath:i,track:r,releaseStatus:o,userFraction:s,changesNotSentForReview:a}=e,l;try{let c={Authorization:`Bearer ${await cs(n)}`,Connection:"close"},u=Jt(t);if(l=(await Ot("create edit",()=>Rt.post(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${u}/edits`,{},{headers:c,timeout:Yt}))).data.id,!l)throw new Error("Google Play edit insert succeeded but did not return an edit id.");let p=Jt(l),g=ds.statSync(i),h=await Ot("upload AAB",()=>Rt.post(`https://androidpublisher.googleapis.com/upload/androidpublisher/v3/applications/${u}/edits/${p}/bundles`,ds.createReadStream(i),{headers:{...c,"Content-Type":"application/octet-stream","Content-Length":g.size},maxBodyLength:1/0,maxContentLength:1/0,params:{uploadType:"media"},timeout:Ac})),y=Number(h.data.versionCode);if(!y)throw new Error("Google Play upload succeeded but did not return a versionCode.");let b={versionCodes:[String(y)],status:o};return(o==="inProgress"||o==="halted")&&typeof s=="number"&&(b.userFraction=s),await Ot("update track",()=>Rt.put(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${u}/edits/${p}/tracks/${Jt(r)}`,{releases:[b]},{headers:c,timeout:Yt})),await Ot("commit edit",()=>Rt.post(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${u}/edits/${p}:commit`,{},{headers:c,params:a?{changesNotSentForReview:!0}:void 0,timeout:Yt})),{editId:l,versionCode:y,track:r,releaseStatus:o,userFraction:s}}catch(d){if(l)try{let u=await cs(n);await Ot("delete edit",()=>Rt.delete(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${Jt(t)}/edits/${Jt(l)}`,{headers:{Authorization:`Bearer ${u}`,Connection:"close"},timeout:Yt}))}catch{}let c=d.response?.data?.error?.message||d.message;throw new Error(`Google Play API Error: ${c}`)}}async function cs(e){let t=Math.floor(Date.now()/1e3),n=t+3600,i={alg:"RS256",typ:"JWT"},r={iss:e.client_email,sub:e.client_email,aud:"https://oauth2.googleapis.com/token",iat:t,exp:n,scope:"https://www.googleapis.com/auth/androidpublisher"},o=Buffer.from(JSON.stringify(i)).toString("base64url"),s=Buffer.from(JSON.stringify(r)).toString("base64url"),a=`${o}.${s}`,l=bc.createSign("RSA-SHA256");l.update(a);let d=l.sign(e.private_key,"base64url"),c=`${a}.${d}`;return(await Ot("OAuth token exchange",()=>Rt.post("https://oauth2.googleapis.com/token",{grant_type:"urn:ietf:params:oauth:grant-type:jwt-bearer",assertion:c},{headers:{Connection:"close"},timeout:Yt}))).data.access_token}var wc=5e3,vc=12,Ss=100,or=24,ps=8e3,_c={completed:"completed",draft:"draft",halted:"halted",inprogress:"inProgress","in-progress":"inProgress"},$c=e=>e?.type==="google_service_account",Gn=e=>e?.bundleId||e?.packageName||e?.meta?.packageName||e?.meta?.bundleId,Es=e=>e.submitArgs||process.argv.slice(3).join(" ");async function Vn(e){let t=it(),n=be(),i=Rc(e);if(!i){process.exitCode=1;return}let r=e.projectId||i.projectId,o=e.profile||e.buildProfile||"production";if(!r){Q(`${m.configFileName} is missing projectId. Pass --project-id in runner mode.`),process.exitCode=1;return}i.projectId=r,se(V.dim(`Submit for project: ${i.name||r} | Profile: ${o}`));let s=e.platform;if(!s){let E=await dr({message:"Select platform to submit:",options:[{value:"ios",label:"iOS (App Store Connect / TestFlight)"},{value:"android",label:"Android (Google Play Console)"}]});if(tt(E)){cr("Operation cancelled");return}s=E}if(s=String(s).toLowerCase(),s!=="ios"&&s!=="android"){Q(`Platform ${s} is not supported. Use 'ios' or 'android'.`),process.exitCode=1;return}let a=s==="ios"&&!e.local&&e.sshHost?Gc(i,o,e):null;if(s==="ios"&&!e.local&&!a){await Oc(i,o,e);return}let l=e.submitId,d=!!(e.local&&l),c=l||null,u=async(E,A={})=>{c&&await Tc(r,c,{status:E,...A})},f=s==="android"?e.packageName||e.androidPackage||Bc(i,o):void 0,p=s==="ios"?e.bundleId||e.iosBundleIdentifier||Hc(i,o):void 0,g,h,y,b=!1;try{s==="android"&&(g=e.track||i.submit?.[o]?.android?.track||i.submit?.production?.android?.track||"internal",h=Vc(i,o,e.releaseStatus),y=Kc(i,o,e.rollout),b=Wc(i,o,e.changesNotSentForReview),qc(h,y))}catch(E){Q(E.message),process.exitCode=1;return}if(s==="android"&&!d&&(c=await Dc(i,r,s,o,e,{packageName:f,track:g,releaseStatus:h,rollout:y,changesNotSentForReview:b}),!c)){Q("Could not create submission tracking record. Submission was not started."),process.exitCode=1;return}await u("running",{platform:s,profile:o,packageName:f,track:g,releaseStatus:h,rollout:y,startTime:Date.now(),...d?Nc():{}});let w=null,L=null;try{L=await Jc(r,s,e,n?.token),w=L?.filePath||null}catch(E){await u("failed",{error:`Failed to resolve submission artifact: ${E.message}`,endTime:Date.now()}),Q(`Failed to resolve submission artifact: ${E.message}`),process.exitCode=1;return}if(!w){let E=Xc(s,e);await u("failed",{error:E,endTime:Date.now()}),Q(E),process.exitCode=1;return}await u("running",{buildId:L?.buildId,artifactName:L?.artifactName,artifactSource:L?.source}),se(`Using artifact: ${V.green(ge.basename(w))} `),t.start("Fetching submission credentials from Dashboard...");let _;try{let A=(await $.get(`/credentials/${r}`)).data.credentials||[];if(s==="android"&&!f){t.stop("Package name missing"),Q("Could not resolve Android package name. Set android.package in mach.config.json/app.json."),await u("failed",{error:"Could not resolve Android package name.",endTime:Date.now()}),process.exitCode=1;return}let D=A.filter($c),v=s==="ios"?A.filter(G=>G.type==="asc_api_key"):jc(D,f);if(v.length===0){if(t.stop("Credentials missing"),Q(s==="android"?`No Google Play service credential found for package ${f}.`:`No Service Credentials found for ${s}.`),s==="android"){let G=D.map(Gn).filter(Boolean).join(", ");G&&se(`Found Google Play service credential(s) for: ${G}`),se(`Use '${m.nameLower} credentials:service --platform android --package-name ${f}' or upload it under that package in the Dashboard.`)}else se(`Use '${m.nameLower} credentials:service --platform ${s}' or use the Dashboard to upload them.`);await u("failed",{error:`No submission credentials found for ${s}.`,endTime:Date.now()}),process.exitCode=1;return}if(_=Lc(v,e.credentialId),!_&&s==="ios"&&p&&(_=Mc(v,p)),_||v.length===1)_=_||v[0],t.stop(`Using: ${_.name}`),s==="android"&&Gn(_)==="*"&&se(V.yellow(`Using legacy wildcard Google Play credential for ${f}. Upload a package-scoped credential when possible.`));else{if(t.stop("Multiple credentials found"),Uc()){let U=v.map(B=>`${B.name||"credential"} (${B.credentialId||B.id||"no-id"})`).join(", ");Q(`Multiple ${s==="ios"?"App Store Connect":"Google Play"} credentials found. Use --credential-id in CI. Available: ${U}`),await u("failed",{error:"Multiple submission credentials found; --credential-id is required in CI.",endTime:Date.now()}),process.exitCode=1;return}let G=await dr({message:`Choose a ${s==="ios"?"App Store Connect":"Google Play"} credential:`,options:v.map(U=>({value:U.credentialId,label:U.name,hint:`${U.keyId?`ID: ${U.keyId}`:""} ${U.issuerId?`(Issuer: ${U.issuerId.substring(0,8)}...)`:""}`}))});if(tt(G)){cr("Submission cancelled"),await u("failed",{error:"Submission cancelled while selecting credential.",endTime:Date.now()}),process.exitCode=1;return}_=v.find(U=>U.credentialId===G),se(`Using selected: ${V.green(_.name)}`)}}catch(E){t.stop("Failed to fetch credentials"),Q(`API Error: ${E.message} `),await u("failed",{error:`Failed to fetch credentials: ${E.message}`,endTime:Date.now()}),process.exitCode=1;return}let H=q.mkdtempSync(ge.join(bt.tmpdir(),`${m.nameLower}-submit-`)),W=_.keyId||_.meta?.keyId,Z=_.issuerId||_.meta?.issuerId,Ee=_.type==="asc_api_key"?`AuthKey_${W}.p8`:"service-account.json",oe=ge.join(H,Ee);t.start("Downloading secure key...");try{let E=await $.get(`/credentials/${_.credentialId}/download`,{params:{projectId:r,format:"raw"}});if(E.data.status!=="success"||!E.data.downloadUrl)throw new Error("Failed to get secure download URL");let A=await As.get(E.data.downloadUrl,{responseType:"arraybuffer"});q.writeFileSync(oe,Buffer.from(A.data)),t.stop("Key downloaded to secure temp storage")}catch(E){t.stop("Download failed"),Q(`Failed to download key: ${E.message}`);try{q.rmSync(H,{recursive:!0,force:!0})}catch{}await u("failed",{error:`Failed to download credential key: ${E.message}`,endTime:Date.now()}),process.exitCode=1;return}se(V.blue(`Initiating ${s==="ios"?"TestFlight":"Google Play"} submission...`));let R=!1,T;try{if(s==="ios"){if(!W){let A=await Xt({message:"Enter App Store Connect Key ID (e.g. 2X948D...):",validate:D=>D.length>0?void 0:"Key ID is required"});if(tt(A)){await u("failed",{error:"Submission cancelled while entering ASC Key ID.",endTime:Date.now()}),process.exitCode=1;return}W=A}if(!Z||Z==="undefined"){let A=await Xt({message:"Enter App Store Connect Issuer ID (Found on ASC Keys page):",validate:D=>D.length>0?void 0:"Issuer ID is required"});if(tt(A)){await u("failed",{error:"Submission cancelled while entering ASC Issuer ID.",endTime:Date.now()}),process.exitCode=1;return}Z=A}se(`Using ASC Key ID: ${W}`),se(`Using ASC Issuer ID: ${Z}`);let E=a?await Qc(w,oe,Z,W,p,a):await Zc(w,oe,Z,W,p);pr(`${s==="ios"?"App Store":"Google Play"} submission successful!`),R=!0}else T=await ru(w,oe,g||"internal",f,h||"completed",y,b,o),pr("Google Play submission successful!"),R=!0}catch(E){Q(`Submission failed: ${E.message}`),await u("failed",{error:E.message,endTime:Date.now()}),nt(e,{status:"failed",projectId:r,submitId:c,platform:s,profile:o,buildId:L?.buildId||e.buildId,artifactName:L?.artifactName,error:E.message,dashboardUrl:c?yt(c,r):void 0}),process.exitCode=1}finally{R&&(await u("success",{endTime:Date.now(),versionCode:T?.versionCode,track:g,releaseStatus:h}),nt(e,{status:"success",projectId:r,submitId:c,platform:s,profile:o,buildId:L?.buildId||e.buildId,artifactName:L?.artifactName,versionCode:T?.versionCode,track:g,releaseStatus:h,dashboardUrl:c?yt(c,r):void 0})),Au(H),w&&w.includes(`${m.nameLower}-artifact-`)}}function Rc(e){let t=`./${m.configFileName}`;if(q.existsSync(t))try{return JSON.parse(q.readFileSync(t,"utf-8"))}catch(n){return Q(`Failed to read ${m.configFileName}: ${n.message}`),null}return e.projectId?{projectId:e.projectId}:(Q(`No ${m.configFileName} found. Run \`${m.nameLower} init\` or \`${m.nameLower} link\` first.`),null)}async function Oc(e,t,n){let i=n.projectId||e.projectId;if(!i){Q(`${m.configFileName} is missing projectId.`),process.exitCode=1;return}let r=n.submitId||fr.randomUUID(),o=!!n.latest||!n.buildId,s=Pc({...n,latest:o,profile:t,projectId:i,submitId:r}),a={projectId:i,submitId:r,platform:"ios",profile:t,latest:o,buildId:n.buildId,credentialId:n.credentialId,status:"pending",source:"cli",submitArgs:Es(n),runnerArgs:s,runnerCommand:[m.nameLower,"submit",...s].map(Fc).join(" "),appName:e.name,startTime:Date.now()},l=it();l.start("Queuing iOS submit on macOS runner...");try{let d=await $.post("/submissions",a),c=d.data?.submission||d.data?.submit||{},u=d.data?.dashboardUrl||yt(r,i);l.stop("iOS submit queued"),se(`Submission ID: ${V.cyan(r)}`),se(`Dashboard: ${V.blue.underline(u)}`),nt(n,{status:"pending",projectId:i,submitId:r,platform:"ios",profile:t,latest:o,buildId:n.buildId,dashboardUrl:u}),await Cc(i,r,n)}catch(d){l.stop("Could not queue iOS submit"),Q(xc(d)),process.exitCode=1}}async function Dc(e,t,n,i,r,o={}){let s=r.submitId||fr.randomUUID(),a=!!r.latest||!r.buildId,l={projectId:t,submitId:s,platform:n,profile:i,latest:a,buildId:r.buildId,credentialId:r.credentialId,status:"running",source:"cli-direct",submitArgs:Es(r),appName:e.name,startTime:Date.now(),...o};try{let d=await $.post("/submissions",l),c=d.data?.submission||d.data?.submit||{},u=d.data?.dashboardUrl||c.dashboardUrl||yt(s,t);return se(`Submission ID: ${V.cyan(s)}`),se(`Dashboard: ${V.blue.underline(u)}`),nt(r,{status:"running",projectId:t,submitId:s,platform:n,profile:i,latest:a,buildId:r.buildId,dashboardUrl:u}),s}catch(d){let c=d.response?.data?.message||d.response?.data?.error||d.message;return se(V.yellow(`Could not create submission tracking record: ${c}`)),null}}function Pc(e){let t=["--local","--submit-id",e.submitId,"--project-id",e.projectId,"--platform","ios","--profile",e.profile||"production"];return e.buildId?t.push("--build-id",e.buildId):t.push("--latest"),e.credentialId&&t.push("--credential-id",e.credentialId),e.bundleId&&t.push("--bundle-id",e.bundleId),e.packageName&&t.push("--package-name",e.packageName),e.quiet&&t.push("--quiet"),e.jsonOutput&&t.push("--json-output",e.jsonOutput),t.filter(n=>n!=null&&n!=="")}async function Cc(e,t,n){let i=it(),r=0,o=0;for(n.quiet||i.start("Waiting for iOS submit runner...");;)try{let s=await $.get(`/submissions/${e}/${t}`),a=s.data?.submission||s.data?.submit||s.data,l=String(a?.status||"pending").toLowerCase();r=0;let d=Array.isArray(a?.logs)?a.logs:[];for(let c=o;c<d.length;c++){let u=d[c];u&&console.log(V.dim(String(u)))}if(o=d.length,["success","completed","succeeded"].includes(l)){n.quiet||i.stop("iOS submit completed"),pr("App Store submission successful!"),nt(n,{status:"success",projectId:e,submitId:t,platform:"ios",profile:a?.profile||n.profile||"production",buildId:a?.buildId||n.buildId,artifactName:a?.artifactName,dashboardUrl:a?.dashboardUrl||yt(t,e)});return}if(["failed","error","cancelled","canceled"].includes(l)){n.quiet||i.stop("iOS submit failed");let c=a?.error||a?.message||"Unknown iOS submit failure.";Q(c),nt(n,{status:"failed",projectId:e,submitId:t,platform:"ios",profile:a?.profile||n.profile||"production",buildId:a?.buildId||n.buildId,artifactName:a?.artifactName,error:c,dashboardUrl:a?.dashboardUrl||yt(t,e)}),process.exitCode=1;return}n.quiet||i.message(`iOS submit ${l}...`),await ur(wc)}catch(s){if(r++,r>=vc){n.quiet||i.stop("Lost connection to iOS submit status"),Q(`Could not fetch iOS submit status after ${r} attempts: ${s.message}`),process.exitCode=1;return}await ur(Math.min(2e3*r,15e3))}}async function Tc(e,t,n){let i;for(let r=1;r<=3;r++)try{await $.patch(`/submissions/${e}/${t}`,n);return}catch(o){if(i=o,r>=3||!kc(o))break;await ur(1e3*r)}bs.warn(V.dim(`Could not report submission status: ${i?.message||i}`))}function kc(e){let t=e.response?.status;return!t||t===408||t===409||t===425||t===429||t>=500}function Nc(){let e={gitlabJobId:process.env.CI_JOB_ID,gitlabJobUrl:process.env.CI_JOB_URL,gitlabPipelineId:process.env.CI_PIPELINE_ID,gitlabProjectId:process.env.CI_PROJECT_ID,gitlabProjectPath:process.env.CI_PROJECT_PATH};return Object.fromEntries(Object.entries(e).filter(([,t])=>!!t))}function xc(e){let t=e.response?.status,n=e.response?.data?.message||e.response?.data?.error;return t===404||t===405?["Managed iOS submit is not enabled on this Mach API yet.","Deploy the API/dashboard submission orchestration endpoint, then retry the same command.","Expected API: POST /submissions and GET/PATCH /submissions/:projectId/:submitId."].join(`
+`):n||e.message||String(e)}function yt(e,t){if(!e)return He;let n=t?`?projectId=${encodeURIComponent(t)}`:"";return`${He}/submissions/${e}${n}`}function nt(e,t){if(!e.jsonOutput)return;let n=ge.resolve(e.jsonOutput),i={...t,url:t.url||t.dashboardUrl||yt(t.submitId,t.projectId),updatedAt:new Date().toISOString()};try{let r=ge.dirname(n);r&&r!=="."&&q.mkdirSync(r,{recursive:!0}),q.writeFileSync(n,JSON.stringify(i,null,2))}catch(r){bs.warn(V.yellow(`Could not write submission metadata JSON: ${r.message}`))}}function Lc(e,t){return t&&e.find(n=>n.credentialId===t||n.id===t||n.keyId===t||n.meta?.keyId===t)||null}function Mc(e,t){let n=e.filter(i=>[i.bundleId,i.bundleIdentifier,i.appIdentifier,i.meta?.bundleId,i.meta?.bundleIdentifier,i.meta?.appIdentifier].filter(Boolean).map(String).includes(t));return n.length===1?n[0]:null}function Uc(){return process.env.CI==="true"||process.env.CI==="1"||!process.stdin.isTTY}function ur(e){return new Promise(t=>setTimeout(t,e))}function Fc(e){return/^[a-zA-Z0-9_./:=@-]+$/.test(e)?e:`'${e.replace(/'/g,"'\\''")}'`}function Bc(e,t){if(e.submit?.[t]?.android?.package)return e.submit[t].android.package;let n=Ln(e,t);if(n)return n;let i=ge.join(process.cwd(),"app.json");if(q.existsSync(i))try{return JSON.parse(q.readFileSync(i,"utf-8")).expo?.android?.package}catch{}let r=ge.join(process.cwd(),"app.config.json");if(q.existsSync(r))try{let o=JSON.parse(q.readFileSync(r,"utf-8"));return o.expo?.android?.package||o.android?.package}catch{}}function jc(e,t){let n=e.filter(o=>Gn(o)===t);if(n.length>0)return n;let i=e.filter(o=>{let s=Gn(o);return!s||s==="*"});return e.length>0&&e.length===i.length?i:[]}function Hc(e,t){return e.submit?.[t]?.ios?.bundleIdentifier?e.submit[t].ios.bundleIdentifier:e.submit?.[t]?.ios?.bundleId?e.submit[t].ios.bundleId:Mn(e,t)}function Gc(e,t,n){let i=e.submit?.[t]?.ios||{},r=e.submit?.production?.ios||{},o=n.sshHost||i.sshHost||r.sshHost||process.env.MACH_IOS_SUBMIT_SSH_HOST;return o?{sshHost:o,sshUser:n.sshUser||i.sshUser||r.sshUser||process.env.MACH_IOS_SUBMIT_SSH_USER||process.env.USER||"ubuntu",sshKey:n.sshKey||i.sshKey||r.sshKey||process.env.MACH_IOS_SUBMIT_SSH_KEY}:null}function Vc(e,t,n){let i=n||e.submit?.[t]?.android?.releaseStatus||e.submit?.production?.android?.releaseStatus||"completed";return zc(i)}function zc(e){let t=_c[String(e).trim().toLowerCase()];if(!t)throw new Error(`Invalid Android release status "${e}". Use completed, draft, halted, or inProgress.`);return t}function Kc(e,t,n){let i=n??e.submit?.[t]?.android?.rollout??e.submit?.[t]?.android?.userFraction??e.submit?.[t]?.android?.rolloutFraction??e.submit?.production?.android?.rollout??e.submit?.production?.android?.userFraction??e.submit?.production?.android?.rolloutFraction;if(i==null||i==="")return;let r=Number(i);if(!Number.isFinite(r)||r<=0||r>=1)throw new Error(`Invalid Android rollout fraction "${i}". Use a number greater than 0 and less than 1, for example 0.1.`);return r}function Wc(e,t,n){let i=n??e.submit?.[t]?.android?.changesNotSentForReview??e.submit?.[t]?.android?.changes_not_sent_for_review??e.submit?.production?.android?.changesNotSentForReview??e.submit?.production?.android?.changes_not_sent_for_review??!1;return i===!0||i==="true"||i==="1"}function qc(e,t){if(e==="inProgress"&&t===void 0)throw new Error("Google Play staged rollout requires --rollout <fraction> when --release-status inProgress is used.");if(e!=="inProgress"&&e!=="halted"&&t!==void 0)throw new Error("Android rollout fraction can only be used with --release-status inProgress or halted.")}async function Jc(e,t,n,i){let r=n.buildId?"id":n.latest?"latest":null;if(!r){let s=await dr({message:"Select artifact source:",options:[{value:"latest",label:`Latest Production Build (${m.name})`},{value:"id",label:`Input Build ID (${m.name})`},{value:"url",label:"Remote URL"},{value:"local",label:"Local File Path"}]});if(tt(s))return cr("Operation cancelled"),null;r=s}if(r==="local"){let s=await Xt({message:"Enter path to artifact (.ipa/.aab):",validate:a=>{if(!q.existsSync(a))return"File not found";if(t==="ios"&&!a.endsWith(".ipa"))return"Must be an .ipa file";if(t==="android"&&!a.endsWith(".aab"))return"Must be an .aab file"}});return tt(s)?null:{filePath:s,source:"local"}}let o=it();if(r==="latest"){let s=n.profile||n.buildProfile;o.start(`Fetching latest${s?` ${s}`:""} build...`);try{let a=await $.get(`/builds/${e}`,{params:{limit:50}});if(a.data.status!=="success")throw new Error(a.data.message);let l=a.data.builds||[],d=s?.toLowerCase(),c=_=>_.platform?.toLowerCase()===t.toLowerCase()&&_.status?.toLowerCase()==="success",u=_=>d?[_.buildProfile,_.profile,_.profileName,_.buildType].filter(Boolean).some(H=>String(H).toLowerCase()===d):!0,f=l.filter(_=>c(_)&&u(_)),p=f.find(_=>_.buildType?.toLowerCase()==="store"||_.distribution?.toLowerCase()==="store")||f[0],g=l.some(_=>_.platform?.toLowerCase()===t.toLowerCase()&&_.status?.toLowerCase()==="success");if(!p)return o.stop("No suitable build found"),Q(s&&g?`No successful ${t} builds found for profile "${s}".`:"No successful builds found for this platform."),null;o.stop(`Found build: ${p.buildId}`);let h=p.artifacts||[];if(h.length===0||h.every(_=>!(_.url||_.downloadUrl)))try{let _=await $.get(`/builds/${e}/${p.buildId}/artifacts`);_.data.status==="success"&&_.data.artifacts?.length>0?(h=_.data.artifacts.map(H=>({...H,url:H.url||H.downloadUrl})),console.log(V.cyan(`  [RECOVERY] Fetched ${h.length} artifact(s) with download URLs.`))):console.log(V.yellow("  [RECOVERY] /artifacts endpoint returned 0 artifacts."))}catch(_){console.log(V.red(`  [RECOVERY] /artifacts fetch failed: ${_.message}`))}let b=t==="ios",w=h.find(_=>{let H=(_.type||"").toLowerCase(),W=(_.name||"").toLowerCase();if(console.log(V.dim(`    - Checking: ${_.name} (Type: ${_.type}, HasLink: ${!!(_.url||_.downloadUrl)})`)),H)return H===(b?"ipa":"aab");let Z=b?".ipa":".aab",Ee=(_.url||_.downloadUrl||"").toLowerCase();return W.endsWith(Z)||Ee.includes(Z)});if(!w||!(w.url||w.downloadUrl))return Q("Build found but artifact URL is missing."),null;let L=w.url||w.downloadUrl;return{filePath:await sr(L,b?"ios":"android"),buildId:p.buildId,artifactName:w.name,source:"latest"}}catch(a){return o.stop("Fetch failed"),Q(`API Error: ${a.message}`),null}}if(r==="id"){let s=n.buildId||await Xt({message:"Enter Build ID:",validate:l=>l.length<5?"Invalid ID":void 0});if(tt(s))return null;let a=String(s);o.start("Fetching build...");try{let l=null;try{let p=await $.get(`/builds/${e}/${a}`);p.data.status==="success"&&(l=p.data.build)}catch(p){p.response?.status!==404&&console.log(V.dim(`  [RECOVERY] Project build lookup skipped: ${p.message}`))}if(!l){let p=await $.get(`/build/${a}`);if(p.data.status!=="success")throw new Error(p.data.message);l=p.data.build}if(!l)throw new Error(`Build ${a} was not found.`);let d=t==="ios",c=Hn(l.artifacts);Yc(c)||(c=await ms(e,a,c));let u=fs(c,t);if(u||(c=await ms(e,a,c),u=fs(c,t)),!u)throw new Error(`No ${d?".ipa":".aab"} artifact found for build ${a}. The build exists, but its artifact list does not contain a downloadable submission artifact.`);let f=u.url||u.downloadUrl;if(!f)throw new Error(`Artifact ${u.name||"(unnamed)"} for build ${a} has no download URL. Retry after the build artifact upload is visible in the Installation Hub.`);return o.stop(`Found build: ${l.buildId||a}`),{filePath:await sr(f,d?"ios":"android"),buildId:l.buildId||a,artifactName:u.name,source:"id"}}catch(l){throw o.stop("Fetch failed"),l}}if(r==="url"){let s=await Xt({message:"Enter Artifact URL:",validate:a=>a.startsWith("http")?void 0:"Must be a valid URL"});return tt(s)?null:{filePath:await sr(s,t),source:"url"}}return null}function Hn(e){return(e||[]).map(t=>({...t,url:t.url||t.downloadUrl}))}function Yc(e){return e.some(t=>!!(t.url||t.downloadUrl))}function fs(e,t){let n=t==="ios",i=n?"ipa":"aab",r=n?".ipa":".aab";return e.find(o=>{let s=String(o.type||"").toLowerCase(),a=String(o.name||"").toLowerCase(),l=String(o.url||o.downloadUrl||"").toLowerCase();return s?s===i:a.endsWith(r)||l.includes(r)})||null}function Xc(e,t){let n=e==="ios"?".ipa":".aab";if(t.buildId)return`No downloadable ${n} artifact found for build ${t.buildId}. Check that the build finished artifact upload before submitting.`;if(t.latest){let i=t.profile||t.buildProfile;return`No latest successful ${e}${i?` ${i}`:""} build has a downloadable ${n} artifact.`}return`No downloadable ${n} artifact was selected for submission.`}async function ms(e,t,n){try{let i=await $.get(`/builds/${e}/${t}/artifacts`);if(i.data.status==="success"&&i.data.artifacts?.length>0){let r=Hn(i.data.artifacts);return console.log(V.cyan(`  [RECOVERY] Fetched ${r.length} artifact(s) with download URLs.`)),r}}catch(i){console.log(V.dim(`  [RECOVERY] Project artifact lookup skipped: ${i.message}`))}try{let i=await $.get(`/public/builds/${t}`);if(i.data.status==="success"&&i.data.artifacts?.length>0){let r=Hn(i.data.artifacts);return console.log(V.cyan(`  [RECOVERY] Fetched ${r.length} public artifact(s) with download URLs.`)),r}}catch(i){console.log(V.dim(`  [RECOVERY] Public artifact lookup skipped: ${i.message}`))}return Hn(n)}async function sr(e,t,n=3){let i=it();i.start("Downloading artifact...");let r=q.mkdtempSync(ge.join(bt.tmpdir(),`${m.nameLower}-artifact-`)),o=`app.${t==="ios"?"ipa":"aab"}`,s=ge.join(r,o);for(let a=1;a<=n;a++)try{a>1&&(i.message(`Downloading artifact (Retry ${a}/${n})...`),await new Promise(c=>setTimeout(c,2e3*a)));let l=q.createWriteStream(s),d=await As({url:e,method:"GET",responseType:"stream",timeout:6e4});return await new Promise((c,u)=>{d.data.pipe(l);let f=!1;d.data.on("error",p=>{f||(f=!0,l.close(),u(p))}),l.on("finish",()=>{f||c()}),l.on("error",p=>{f||(f=!0,u(p))})}),i.stop("Download complete"),s}catch(l){if(a===n)throw i.stop("Download failed"),l}throw new Error("Download failed after retries")}async function Zc(e,t,n,i,r){let o=it();if(r&&se(`Bundle ID: ${V.green(r)}`),!n||!i)throw Q(`Missing credentials: issuerId=${n}, keyId=${i}. Check your Dashboard.`),new Error("Missing ASC API Key Metadata (IssuerID or KeyID)");let s=Is(t,n,i),a=su();return o.start("Uploading to TestFlight (pilot)..."),new Promise((l,d)=>{let c=lu(),u=Ic(a.command,["pilot","upload","--ipa",e,"--api_key_path",s,"--skip_submission","true","--skip_waiting_for_build_processing","true"],{stdio:["ignore","pipe","pipe"],env:a.env});u.stdout?.on("data",f=>c.append(f,process.stdout)),u.stderr?.on("data",f=>c.append(f,process.stderr)),u.on("close",f=>{if(c.flush(),f!==0){o.stop("Pilot failed");try{q.unlinkSync(s)}catch{}d(du(f,c.lines()))}else{o.stop("IPA uploaded to TestFlight");try{q.unlinkSync(s)}catch{}l({})}}),u.on("error",f=>{c.flush();try{q.unlinkSync(s)}catch{}o.stop("Pilot execution error");let p=yu(f);p.logs=c.lines(),d(p)})})}async function Qc(e,t,n,i,r,o){let s=it();if(r&&se(`Bundle ID: ${V.green(r)}`),!n||!i)throw Q(`Missing credentials: issuerId=${n}, keyId=${i}. Check your Dashboard.`),new Error("Missing ASC API Key Metadata (IssuerID or KeyID)");let a=Is(t,n,i),l=`${o.sshUser}@${o.sshHost}`,d=eu(o),c=tu(o),u="",f="";try{if(s.start(`Preparing remote iOS submit runner (${l})...`),u=nu("ssh",[...d,"mktemp -d /tmp/mach-submit.XXXXXX"]).trim(),!u)throw new Error("Remote runner did not return a temp directory.");s.stop(`Remote runner ready: ${l}`),s.start("Uploading IPA and App Store Connect key to remote runner..."),ar("scp",[...c,e,`${l}:${u}/app.ipa`],"IPA upload to remote runner"),ar("scp",[...c,a,`${l}:${u}/api_key.json`],"ASC key upload to remote runner"),f=ge.join(bt.tmpdir(),`${m.nameLower}-ios-submit-${Date.now()}.sh`),q.writeFileSync(f,iu(u)),ar("scp",[...c,f,`${l}:${u}/submit.sh`],"submit script upload to remote runner"),s.stop("Remote submit inputs uploaded"),s.start("Uploading to TestFlight on remote runner...");let p=`chmod +x ${Zt(`${u}/submit.sh`)} && bash ${Zt(`${u}/submit.sh`)}`,g=ht("ssh",[...d,p],{stdio:"inherit"});if(g.error)throw mr("ssh",g.error);if(g.status!==0)throw new Error(`Remote iOS submit failed with exit code ${g.status}.`);return s.stop("IPA uploaded to TestFlight"),{apiKeyJsonPath:null}}catch(p){throw s.stop("Remote iOS submit failed"),p}finally{try{q.unlinkSync(a)}catch{}if(f)try{q.unlinkSync(f)}catch{}if(u)try{ht("ssh",[...d,`rm -rf ${Zt(u)}`],{stdio:"ignore"})}catch{}}}function Is(e,t,n){let i=q.readFileSync(e,"utf8"),r;try{r=fr.createPrivateKey(i).export({type:"pkcs8",format:"pem"})}catch{se("Key normalization failed, falling back to manual re-wrapping..."),r=`-----BEGIN PRIVATE KEY-----
 ${(i.replace(/-----BEGIN[^-]*-----/g,"").replace(/-----END[^-]*-----/g,"").replace(/\s+/g,"").match(/.{1,64}/g)||[]).join(`
 `)}
------END PRIVATE KEY-----`}let o=Ne.join(sn.tmpdir(),`api_key_${n}_${Date.now()}.json`),s={key_id:n,issuer_id:t,key:r,in_house:!1};return ue.writeFileSync(o,JSON.stringify(s,null,2)),o}function nm(e){let t=["-o","StrictHostKeyChecking=no","-o","ServerAliveInterval=30"];return e.sshKey&&t.push("-i",e.sshKey),t.push(`${e.sshUser}@${e.sshHost}`),t}function im(e){let t=["-o","StrictHostKeyChecking=no","-o","ServerAliveInterval=30"];return e.sshKey&&t.push("-i",e.sshKey),t}function rm(e,t){let n=rn(e,t,{encoding:"utf-8",stdio:["ignore","pipe","inherit"]});if(n.error)throw vo(e,n.error);if(n.status!==0)throw new Error(`${e} failed with exit code ${n.status}.`);return n.stdout||""}function yo(e,t,n){let i=rn(e,t,{stdio:"inherit"});if(i.error)throw vo(e,i.error);if(i.status!==0)throw new Error(`${n} failed with exit code ${i.status}.`)}function vo(e,t){return t?.code==="ENOENT"?new Error(`${e} was not found on this machine. Install OpenSSH client tools or run iOS submit directly on the macOS runner.`):t}function Zn(e){return`'${e.replace(/'/g,"'\\''")}'`}function om(e){let t=Zn(`${e}/app.ipa`),n=Zn(`${e}/api_key.json`);return`#!/bin/bash
+-----END PRIVATE KEY-----`}let o=ge.join(bt.tmpdir(),`api_key_${n}_${Date.now()}.json`),s={key_id:n,issuer_id:t,key:r,in_house:!1};return q.writeFileSync(o,JSON.stringify(s,null,2)),o}function eu(e){let t=["-o","StrictHostKeyChecking=no","-o","ServerAliveInterval=30"];return e.sshKey&&t.push("-i",e.sshKey),t.push(`${e.sshUser}@${e.sshHost}`),t}function tu(e){let t=["-o","StrictHostKeyChecking=no","-o","ServerAliveInterval=30"];return e.sshKey&&t.push("-i",e.sshKey),t}function nu(e,t){let n=ht(e,t,{encoding:"utf-8",stdio:["ignore","pipe","inherit"]});if(n.error)throw mr(e,n.error);if(n.status!==0)throw new Error(`${e} failed with exit code ${n.status}.`);return n.stdout||""}function ar(e,t,n){let i=ht(e,t,{stdio:"inherit"});if(i.error)throw mr(e,i.error);if(i.status!==0)throw new Error(`${n} failed with exit code ${i.status}.`)}function mr(e,t){return t?.code==="ENOENT"?new Error(`${e} was not found on this machine. Install OpenSSH client tools or run iOS submit directly on the macOS runner.`):t}function Zt(e){return`'${e.replace(/'/g,"'\\''")}'`}function iu(e){let t=Zt(`${e}/app.ipa`),n=Zt(`${e}/api_key.json`);return`#!/bin/bash
 set -euo pipefail
 
 export PATH="/opt/homebrew/bin:/usr/local/bin:/usr/bin:/bin:/usr/sbin:/sbin:$HOME/.local/share/fastlane/3.4.0/bin:$PATH"
@@ -1715,40 +1541,40 @@ fastlane pilot upload \\
   --api_key_path ${n} \\
   --skip_submission true \\
   --skip_waiting_for_build_processing true
-`}async function sm(e,t,n="internal",i,r="completed",o,s=!1,a="production"){let l=Bt();if(!i||i==="*")throw new Error("Android package name is required for Google Play submission.");let d=o!==void 0?` (${o} rollout)`:"";l.start(`Uploading to Google Play ${n} track with ${r} release status${d}...`);try{let c=JSON.parse(ue.readFileSync(t,"utf-8"));am(c);let u=await Va({packageName:i,serviceAccount:c,aabPath:e,track:n,releaseStatus:r,userFraction:o,changesNotSentForReview:s});return l.stop(`AAB uploaded to ${n} track (versionCode ${u.versionCode})`),u}catch(c){throw l.stop("Google Play upload failed"),new Error(Am(c,n,i,a))}}function am(e){if(!e?.client_email||!e?.private_key)throw new Error("Invalid Google service account JSON: missing client_email or private_key.")}function bo(){let e=process.env.HOME||sn.homedir(),t=process.env.FASTLANE_GEM_HOME||Ne.join(e,".local/share/fastlane/3.4.0"),n=[process.env.FASTLANE_BIN_DIR,"/usr/local/opt/ruby/bin","/opt/homebrew/opt/ruby/bin","/usr/local/bin","/opt/homebrew/bin","/usr/local/Cellar/fastlane/2.227.0/libexec/bin",Ne.join(t,"bin"),process.env.PATH].filter(Boolean).join(":");return{...process.env,PATH:n,GEM_HOME:t,GEM_PATH:[t,"/usr/local/Cellar/fastlane/2.227.0/libexec",process.env.GEM_PATH].filter(Boolean).join(":"),FASTLANE_INSTALLED_VIA_HOMEBREW:"true",FASTLANE_SKIP_UPDATE_CHECK:"1",FASTLANE_HIDE_CHANGELOG:"1",LANG:process.env.LANG||"en_US.UTF-8",LC_ALL:process.env.LC_ALL||"en_US.UTF-8",CI:process.env.CI||"1"}}function lm(){let e=bo(),t=Wa(e);if(t)return t;if(process.env.MACH_SKIP_FASTLANE_INSTALL!=="1"){dm(e);let n=Wa(bo());if(n)return n}return{command:"fastlane",env:bo()}}function Wa(e){let t=process.env.HOME||sn.homedir(),n=[process.env.FASTLANE_BINARY,"/usr/local/bin/fastlane","/opt/homebrew/bin/fastlane","/usr/local/Cellar/fastlane/2.227.0/libexec/bin/fastlane",Ne.join(process.env.FASTLANE_GEM_HOME||Ne.join(t,".local/share/fastlane/3.4.0"),"bin/fastlane"),"fastlane"].filter(Boolean);for(let i of n){if(i.includes("/")&&!ue.existsSync(i))continue;if(!rn(i,["--version"],{env:e,stdio:"ignore"}).error)return{command:i,env:e}}return null}function dm(e){let t=rn("gem",["--version"],{env:e,stdio:"ignore"});if(t.error||t.status!==0)return;let n=process.env.HOME||sn.homedir(),i=process.env.FASTLANE_GEM_HOME||Ne.join(n,".local/share/fastlane/3.4.0"),r=Ne.join(i,"bin");ue.mkdirSync(r,{recursive:!0}),$e(se.dim("fastlane not found. Installing fastlane into the local Mach runner cache..."));let o=rn("gem",["install","fastlane","-NV","--install-dir",i,"--bindir",r],{env:{...e,GEM_HOME:i,GEM_PATH:[i,e.GEM_PATH].filter(Boolean).join(":")},stdio:"inherit"});(o.error||o.status!==0)&&$e(se.yellow("Automatic fastlane install failed; Mach will try PATH resolution once more."))}function cm(e=Za){let t=[],n="",i=r=>{let o=nl(r);if(o)for(t.push(o);t.length>e;)t.shift()};return{append(r,o){let s=Buffer.isBuffer(r)?r.toString("utf8"):String(r);o.write(s),n+=s;let a=n.split(/\r?\n/);n=a.pop()||"";for(let l of a)i(l)},flush(){n.trim()&&i(n),n=""},lines(){return t.slice()}}}function um(e,t){let n=new Error(pm(e,t));return n.logs=tl(t),n.exitCode=e,n}function pm(e,t){let n=`fastlane pilot failed with exit code ${e??"unknown"}.`,i=fm(t);return i.length===0?n:`${n}
+`}async function ru(e,t,n="internal",i,r="completed",o,s=!1,a="production"){let l=it();if(!i||i==="*")throw new Error("Android package name is required for Google Play submission.");let d=o!==void 0?` (${o} rollout)`:"";l.start(`Uploading to Google Play ${n} track with ${r} release status${d}...`);try{let c=JSON.parse(q.readFileSync(t,"utf-8"));ou(c);let u=await us({packageName:i,serviceAccount:c,aabPath:e,track:n,releaseStatus:r,userFraction:o,changesNotSentForReview:s});return l.stop(`AAB uploaded to ${n} track (versionCode ${u.versionCode})`),u}catch(c){throw l.stop("Google Play upload failed"),new Error(bu(c,n,i,a))}}function ou(e){if(!e?.client_email||!e?.private_key)throw new Error("Invalid Google service account JSON: missing client_email or private_key.")}function lr(){let e=process.env.HOME||bt.homedir(),t=process.env.FASTLANE_GEM_HOME||ge.join(e,".local/share/fastlane/3.4.0"),n=[process.env.FASTLANE_BIN_DIR,"/usr/local/opt/ruby/bin","/opt/homebrew/opt/ruby/bin","/usr/local/bin","/opt/homebrew/bin","/usr/local/Cellar/fastlane/2.227.0/libexec/bin",ge.join(t,"bin"),process.env.PATH].filter(Boolean).join(":");return{...process.env,PATH:n,GEM_HOME:t,GEM_PATH:[t,"/usr/local/Cellar/fastlane/2.227.0/libexec",process.env.GEM_PATH].filter(Boolean).join(":"),FASTLANE_INSTALLED_VIA_HOMEBREW:"true",FASTLANE_SKIP_UPDATE_CHECK:"1",FASTLANE_HIDE_CHANGELOG:"1",LANG:process.env.LANG||"en_US.UTF-8",LC_ALL:process.env.LC_ALL||"en_US.UTF-8",CI:process.env.CI||"1"}}function su(){let e=lr(),t=gs(e);if(t)return t;if(process.env.MACH_SKIP_FASTLANE_INSTALL!=="1"){au(e);let n=gs(lr());if(n)return n}return{command:"fastlane",env:lr()}}function gs(e){let t=process.env.HOME||bt.homedir(),n=[process.env.FASTLANE_BINARY,"/usr/local/bin/fastlane","/opt/homebrew/bin/fastlane","/usr/local/Cellar/fastlane/2.227.0/libexec/bin/fastlane",ge.join(process.env.FASTLANE_GEM_HOME||ge.join(t,".local/share/fastlane/3.4.0"),"bin/fastlane"),"fastlane"].filter(Boolean);for(let i of n){if(i.includes("/")&&!q.existsSync(i))continue;if(!ht(i,["--version"],{env:e,stdio:"ignore"}).error)return{command:i,env:e}}return null}function au(e){let t=ht("gem",["--version"],{env:e,stdio:"ignore"});if(t.error||t.status!==0)return;let n=process.env.HOME||bt.homedir(),i=process.env.FASTLANE_GEM_HOME||ge.join(n,".local/share/fastlane/3.4.0"),r=ge.join(i,"bin");q.mkdirSync(r,{recursive:!0}),se(V.dim("fastlane not found. Installing fastlane into the local Mach runner cache..."));let o=ht("gem",["install","fastlane","-NV","--install-dir",i,"--bindir",r],{env:{...e,GEM_HOME:i,GEM_PATH:[i,e.GEM_PATH].filter(Boolean).join(":")},stdio:"inherit"});(o.error||o.status!==0)&&se(V.yellow("Automatic fastlane install failed; Mach will try PATH resolution once more."))}function lu(e=Ss){let t=[],n="",i=r=>{let o=vs(r);if(o)for(t.push(o);t.length>e;)t.shift()};return{append(r,o){let s=Buffer.isBuffer(r)?r.toString("utf8"):String(r);o.write(s),n+=s;let a=n.split(/\r?\n/);n=a.pop()||"";for(let l of a)i(l)},flush(){n.trim()&&i(n),n=""},lines(){return t.slice()}}}function du(e,t){let n=new Error(cu(e,t));return n.logs=ws(t),n.exitCode=e,n}function cu(e,t){let n=`fastlane pilot failed with exit code ${e??"unknown"}.`,i=uu(t);return i.length===0?n:`${n}
 
 Fastlane output:
 ${i.join(`
-`)}`}function fm(e){let t=tl(e);if(t.length===0)return[];let n=Ja(t.filter(gm)),i=mm(t);if(i)return[i,...qa(n,go-1,Ga)];let r=n.length>0?n:t.slice(-go);return qa(Ja(r),go,Ga)}function mm(e){let t=e.join(`
-`),n=t.match(/CFBundleShortVersionString\s*\[([^\]]+)\]/i)?.[1]||t.match(/train version ['"]([^'"]+)['"]/i)?.[1];if(/Invalid Pre-Release Train/i.test(t)||/CFBundleShortVersionString[\s\S]*must contain a higher version/i.test(t))return[`App Store Connect rejected CFBundleShortVersionString${n?` ${n}`:""}: this App Store version train is closed or not higher than the approved version.`,'ios.buildNumber="auto" only changes CFBundleVersion; bump the marketing version (Expo app.json "expo.version" / iOS MARKETING_VERSION), rebuild, then submit the new build.'].join(" ");if(!/bundle version must be higher than the previously uploaded version/i.test(t))return null;let i=t.match(/previous(?:ly)?BundleVersion\s*:\s*([0-9.]+)/i)?.[1]||t.match(/previously uploaded version:\s*[‘'"]?([0-9.]+)/i)?.[1];return`App Store Connect rejected CFBundleVersion: the bundle version must be higher than the previously uploaded version.${i?` Previous uploaded build: ${i}.`:""}`}function gm(e){return/\[!\]|ERROR ITMS-\d+|ITMS-\d+|ENTITY_ERROR|previousBundleVersion|CFBundleVersion|Application Loader Error Output|Transporter Error|Transporter transfer failed|Asset validation failed|Validation failed|Error Domain=|The request could not be completed|No suitable application records|Could not|authentication|unauthori[sz]ed|invalid|failed|exception/i.test(e)}function Ja(e){let t=new Set,n=[];for(let i of e){let r=i.trim();!r||t.has(r)||(t.add(r),n.push(i))}return n}function qa(e,t,n){let i=[],r=0;for(let o=e.length-1;o>=0&&i.length<t;o--){let s=e[o],a=r+s.length+1;if(a>n&&i.length>0)break;i.unshift(s.length>n?`${s.slice(0,n-18)}... [truncated]`:s),r=a}return i}function tl(e){if(!Array.isArray(e))return[];let t=[];for(let n of e){let i=String(n).split(/\r?\n/);for(let r of i){let o=nl(r);o&&t.push(o)}}return t.slice(-Za)}function nl(e){return ym(hm(e).trimEnd()).trim()}function hm(e){return e.replace(/[\u001b\u009b][[\]()#;?]*(?:(?:(?:[a-zA-Z\d]*(?:;[a-zA-Z\d]*)*)?\u0007)|(?:(?:\d{1,4}(?:;\d{0,4})*)?[\dA-PR-TZcf-nq-uy=><~]))/g,"")}function ym(e){let t=e.replace(/-----BEGIN [^-]+-----[\s\S]*?-----END [^-]+-----/g,"[REDACTED_PRIVATE_KEY]").replace(/(authorization:\s*bearer\s+)[A-Za-z0-9._-]+/ig,"$1[REDACTED]").replace(/((?:password|token|secret|private[_-]?key)\s*[:=]\s*)("[^"]+"|'[^']+'|[^\s,]+)/ig,"$1[REDACTED]");for(let[n,i]of Object.entries(process.env))!i||i.length<8||/(TOKEN|SECRET|PASSWORD|PASS|PRIVATE|CREDENTIAL)/i.test(n)&&(t=t.replace(new RegExp(bm(i),"g"),"[REDACTED]"));return t}function bm(e){return e.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}function Sm(e){return e?.code!=="ENOENT"?e:new Error(["fastlane was not found on PATH.","Mach submit uses Fastlane for iOS TestFlight/App Store uploads.","Run iOS submit on a macOS runner with Fastlane, or expose it via FASTLANE_BINARY / FASTLANE_BIN_DIR.","Example: gem install fastlane -NV"].join(`
-`))}function Am(e,t,n,i="production"){let r=e?.message||String(e);if(/changesNotSentForReview/i.test(r))return["Google Play rejected the commit because this change may need explicit review handling.",`Package: ${n||"unknown"} | Track: ${t}`,`Retry with: ${m.nameLower} submit --latest --platform android --profile ${i} --track ${t} --changes-not-sent-for-review`,"Then send the change for review from Google Play Console if required."].join(`
+`)}`}function uu(e){let t=ws(e);if(t.length===0)return[];let n=hs(t.filter(fu)),i=pu(t);if(i)return[i,...ys(n,or-1,ps)];let r=n.length>0?n:t.slice(-or);return ys(hs(r),or,ps)}function pu(e){let t=e.join(`
+`),n=t.match(/CFBundleShortVersionString\s*\[([^\]]+)\]/i)?.[1]||t.match(/train version ['"]([^'"]+)['"]/i)?.[1];if(/Invalid Pre-Release Train/i.test(t)||/CFBundleShortVersionString[\s\S]*must contain a higher version/i.test(t))return[`App Store Connect rejected CFBundleShortVersionString${n?` ${n}`:""}: this App Store version train is closed or not higher than the approved version.`,'ios.buildNumber="auto" only changes CFBundleVersion; bump the marketing version (Expo app.json "expo.version" / iOS MARKETING_VERSION), rebuild, then submit the new build.'].join(" ");if(!/bundle version must be higher than the previously uploaded version/i.test(t))return null;let i=t.match(/previous(?:ly)?BundleVersion\s*:\s*([0-9.]+)/i)?.[1]||t.match(/previously uploaded version:\s*[‘'"]?([0-9.]+)/i)?.[1];return`App Store Connect rejected CFBundleVersion: the bundle version must be higher than the previously uploaded version.${i?` Previous uploaded build: ${i}.`:""}`}function fu(e){return/\[!\]|ERROR ITMS-\d+|ITMS-\d+|ENTITY_ERROR|previousBundleVersion|CFBundleVersion|Application Loader Error Output|Transporter Error|Transporter transfer failed|Asset validation failed|Validation failed|Error Domain=|The request could not be completed|No suitable application records|Could not|authentication|unauthori[sz]ed|invalid|failed|exception/i.test(e)}function hs(e){let t=new Set,n=[];for(let i of e){let r=i.trim();!r||t.has(r)||(t.add(r),n.push(i))}return n}function ys(e,t,n){let i=[],r=0;for(let o=e.length-1;o>=0&&i.length<t;o--){let s=e[o],a=r+s.length+1;if(a>n&&i.length>0)break;i.unshift(s.length>n?`${s.slice(0,n-18)}... [truncated]`:s),r=a}return i}function ws(e){if(!Array.isArray(e))return[];let t=[];for(let n of e){let i=String(n).split(/\r?\n/);for(let r of i){let o=vs(r);o&&t.push(o)}}return t.slice(-Ss)}function vs(e){return gu(mu(e).trimEnd()).trim()}function mu(e){return e.replace(/[\u001b\u009b][[\]()#;?]*(?:(?:(?:[a-zA-Z\d]*(?:;[a-zA-Z\d]*)*)?\u0007)|(?:(?:\d{1,4}(?:;\d{0,4})*)?[\dA-PR-TZcf-nq-uy=><~]))/g,"")}function gu(e){let t=e.replace(/-----BEGIN [^-]+-----[\s\S]*?-----END [^-]+-----/g,"[REDACTED_PRIVATE_KEY]").replace(/(authorization:\s*bearer\s+)[A-Za-z0-9._-]+/ig,"$1[REDACTED]").replace(/((?:password|token|secret|private[_-]?key)\s*[:=]\s*)("[^"]+"|'[^']+'|[^\s,]+)/ig,"$1[REDACTED]");for(let[n,i]of Object.entries(process.env))!i||i.length<8||/(TOKEN|SECRET|PASSWORD|PASS|PRIVATE|CREDENTIAL)/i.test(n)&&(t=t.replace(new RegExp(hu(i),"g"),"[REDACTED]"));return t}function hu(e){return e.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}function yu(e){return e?.code!=="ENOENT"?e:new Error(["fastlane was not found on PATH.","Mach submit uses Fastlane for iOS TestFlight/App Store uploads.","Run iOS submit on a macOS runner with Fastlane, or expose it via FASTLANE_BINARY / FASTLANE_BIN_DIR.","Example: gem install fastlane -NV"].join(`
+`))}function bu(e,t,n,i="production"){let r=e?.message||String(e);if(/changesNotSentForReview/i.test(r))return["Google Play rejected the commit because this change may need explicit review handling.",`Package: ${n||"unknown"} | Track: ${t}`,`Retry with: ${m.nameLower} submit --latest --platform android --profile ${i} --track ${t} --changes-not-sent-for-review`,"Then send the change for review from Google Play Console if required."].join(`
 `);if(/caller does not have permission|permission denied|insufficient permissions|not authorized/i.test(r))return["Google Play rejected the service account permissions.",`Package: ${n||"unknown"} | Track: ${t}`,"Grant this service account access to the app in Play Console with release permissions, then retry."].join(`
 `);if(/package.*not found|application.*not found|no application was found/i.test(r))return["Google Play could not find this package for the selected service account.",`Package: ${n||"unknown"} | Track: ${t}`,"Check android.package / submit.<profile>.android.package and make sure the app exists in this Play Console account."].join(`
 `);if(/only releases with status draft|draft app/i.test(r))return["Google Play requires a draft release for this app state.",`Package: ${n||"unknown"} | Track: ${t}`,`Retry with: ${m.nameLower} submit --latest --platform android --profile ${i} --track ${t} --release-status draft`].join(`
 `);if(r.includes("does not allow any existing users to upgrade"))return["Google Play rejected this release because the uploaded AAB is not an upgrade for existing users.",`Package: ${n||"unknown"} | Track: ${t}`,"Build a new Android artifact with a higher versionCode, then submit that build.",`Recommended: ${m.nameLower} build --platform android --profile ${i} --auto-version`,`Then: ${m.nameLower} submit --latest --platform android --profile ${i} --track ${t}`].join(`
 `);if(/version code \d+ has already been used/i.test(r))return[r.match(/version code \d+ has already been used[^\n]*/i)?.[0]||"Version code has already been used.",`Package: ${n||"unknown"} | Track: ${t}`,"Build a new Android artifact with a higher versionCode, then submit that build.",`Recommended: ${m.nameLower} build --platform android --profile ${i} --auto-version`].join(`
-`);let o=r.match(/Google Api Error:[^\n]+/)||r.match(/Google Play API Error:[^\n]+/);return o?o[0]:r||"Google Play submission failed"}function Em(e){try{ue.existsSync(e)&&ue.rmSync(e,{recursive:!0,force:!0})}catch{}}function ye(e){console.log(se.red(`\u274C ${e}`))}function $e(e){console.log(se.gray(`\u2022 ${e}`))}function Io(e){console.log(se.green(`\u2713 ${e}`))}var $o=8,vm=6,ll=Number(process.env.MACH_ARTIFACT_UPLOAD_MAX_ATTEMPTS||2),_o=Number(process.env.MACH_ARTIFACT_UPLOAD_TIMEOUT_MS||12e4),Po="ap-south-1",$m=`${m.envPrefix}S3_DEBUG`,_m=()=>["1","true","yes","on"].includes(String(process.env[$m]||"").trim().toLowerCase()),Oo=(e,t)=>{if(_m()&&t)try{let n=new URL(t);C.info(O.dim(`[S3_DEBUG] ${e} host=${n.hostname} expectedRegion=${Po}`)),n.hostname.includes(Po)||C.warn(O.yellow(`[S3_DEBUG] ${e} host ${n.hostname} does not include ${Po}`))}catch(n){C.warn(O.yellow(`[S3_DEBUG] Could not parse ${e} presigned URL host: ${n.message}`))}},dl=new Set([".git",".gradle",".idea",".mach-cache",".expo",".turbo",".yarn/cache","build","builds","coverage","dist","node_modules",`${m.nameLower}_cli`,`.${m.nameLower}_cli`]),Pm=new Set(["android/.gradle","android/.cxx","android/app/.cxx","android/app/build","android/build","ios/Pods","ios/build","ios/DerivedData"]),Rm=[{value:"production",label:"production",hint:"Store / release build"},{value:"staging",label:"staging",hint:"Internal testing build"},{value:"development",label:"development",hint:"Development build"}],El=e=>new Promise(t=>setTimeout(t,e)),Il=e=>e.split(_e.sep).filter(Boolean).join("/"),Cm=(e,t)=>{let n=Il(e),i=n.split("/")[0];return n?!!(dl.has(n)||dl.has(i)||Pm.has(n)||t==="ios"&&i==="android"||t==="android"&&i==="ios"):!1},Om=(e,t,n)=>{let i=0,r=new Set,o=(s,a)=>{let l=Il(a);if(Cm(l,n)){r.add(l.split("/")[0]||l);return}let d=be.lstatSync(s);if(!d.isSymbolicLink()){if(d.isDirectory()){for(let c of be.readdirSync(s))o(_e.join(s,c),_e.join(a,c));return}if(d.isFile()){let c=_e.dirname(l);e.addLocalFile(s,c==="."?void 0:c,_e.basename(l)),i++}}};for(let s of be.readdirSync(t))o(_e.join(t,s),s);return{files:i,skipped:Array.from(r).sort()}},Dm=e=>!e.yes&&!e.failOnly&&!e.buildId&&process.stdin.isTTY&&process.stdout.isTTY,km=e=>{if(!e||typeof e!="object")return;let t=[e.distribution?`distribution: ${e.distribution}`:void 0,e.environment?`env: ${e.environment}`:void 0,e.developmentClient?"development client":void 0,e.simulator?"simulator":void 0].filter(Boolean);return t.length>0?t.join(", "):void 0},Nm=()=>{let e=Ie(`./${m.configFileName}`),t=e?.build&&typeof e.build=="object"?e.build:{},n=Object.keys(t);return n.length===0?Rm:n.map(i=>({value:i,label:i,hint:km(t[i])}))},xm=async e=>{let t=Dm(e);if(!e.platform&&t){let n=await il({message:"Select platform",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"}]});zi(n)&&(ol("Build cancelled."),process.exit(0)),e.platform=n}if(!e.buildProfile&&t){let n=Nm(),i=await il({message:"Select build profile",options:n,initialValue:n.find(r=>r.value==="production")?.value||n[0]?.value});zi(i)&&(ol("Build cancelled."),process.exit(0)),e.buildProfile=i}e.buildProfile||(e.buildProfile="production")},cl=e=>{if(e===!0||e===!1)return e;if(e===1||e==="1")return!0;if(e===0||e==="0")return!1;if(typeof e!="string")return;let t=e.trim().toLowerCase();if(["true","yes","on"].includes(t))return!0;if(["false","no","off"].includes(t))return!1},wl=(e,t)=>{if(e)for(let n of t){let i=n.replace(/[.*+?^${}()|[\]\\]/g,"\\$&"),r=e.match(new RegExp(`(?:^|\\s)${i}(?:=|\\s+)([^\\s]+)`));if(r?.[1])return r[1].replace(/^["']|["']$/g,"")}},Tm=(e,t)=>!!e&&t.some(n=>new RegExp(`(?:^|\\s)${n.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}(?:\\s|$)`).test(e)),Lm=e=>{let n=wl(e,["--platform"])||e?.split(/\s+/).find(i=>i==="ios"||i==="android");return n==="ios"||n==="android"?n:void 0},Mm=async e=>{if(!e.projectId||!e.buildId)return;let t=!!e.local;try{let n=await D.get(`/builds/${e.projectId}/${e.buildId}`),i=n.data?.build||n.data;if(!i||typeof i!="object"){if(t)throw new Error("MACH API returned an empty build record.");return}let r=typeof i.buildArgs=="string"?i.buildArgs:void 0;if(Ks(e,i),!e.platform){let o=i.platform||Lm(r);(o==="ios"||o==="android")&&(e.platform=o)}if(e.buildProfile||(e.buildProfile=i.buildProfile||i.profile||i.profileName||wl(r,["--profile","--build-profile","-p"])),e.simulator===void 0){let o=cl(i.simulator??i.isSimulator);o!==void 0?e.simulator=o:Tm(r,["--simulator"])&&(e.simulator=!0)}if(e.developmentClient===void 0){let o=cl(i.developmentClient??i.devClient);o!==void 0&&(e.developmentClient=o)}}catch(n){if(t){let i=n.response?.data?.message||n.message||"unknown error";throw new Error(`Could not load the canonical MACH build record for runner ${e.buildId}: ${i}. The runner stopped to avoid allocating or packaging a different native version.`)}C.warn(O.yellow(`Could not load saved build options for runner: ${n.message}`))}},Um=e=>{if(!Number.isFinite(e)||e<=0)return"0 B";let t=["B","KB","MB","GB"],n=Math.min(Math.floor(Math.log(e)/Math.log(1024)),t.length-1);return`${(e/Math.pow(1024,n)).toFixed(n===0?0:1)} ${t[n]}`},Fm=e=>{let t=e.response?.status,n=e.code||"",i=e.message||"";return t?t===408||t===409||t===425||t===429||t>=500||/ECONNRESET|ETIMEDOUT|EAI_AGAIN|ENOTFOUND|ECONNABORTED|socket hang up|network|timeout/i.test(`${n} ${i}`):!0},ei=async(e,t,n=vm)=>{let i;for(let r=1;r<=n;r++)try{return await t()}catch(o){if(i=o,!Fm(o)||r>=n)break;let s=Math.min(6e4,2e3*Math.pow(2,r-1)),a=o.response?.status||o.code||o.message||"network error";C.warn(O.yellow(`${e} failed transiently (${a}). Retrying in ${Math.round(s/1e3)}s... (${r}/${n})`)),await El(s)}throw i},Bm=async(e,t,n)=>{let i=_e.basename(e),r=be.statSync(e).size,o=Math.round(_o/1e3);Oo(`ARTIFACT_UPLOAD ${i}`,t);try{await ei(`Upload artifact ${i}`,async()=>{let s=new AbortController,a=be.createReadStream(e),l=setTimeout(()=>{a.destroy(new Error(`Artifact upload timed out after ${o}s`)),s.abort()},_o);try{await Gi.put(t,a,{headers:{"Content-Type":n,"Content-Length":r,Connection:"close"},maxBodyLength:1/0,maxContentLength:1/0,timeout:_o,timeoutErrorMessage:`Artifact upload timed out after ${o}s`,signal:s.signal})}finally{clearTimeout(l)}},ll)}catch(s){throw new Error(`${i} (${Um(r)}) failed after ${ll} upload attempt(s): ${s.message||s}`)}return r},jm=e=>{let t=e.response?.status;return t?t===408||t===429||t>=500:!0},ni=e=>e.credentialId||e.id,Hm=async(e,t)=>{let n=ni(e);if(!n)return e.downloadUrl;let i=await D.get(`/credentials/${n}/download`,{params:{projectId:t,format:"raw"}});return i.data?.status==="success"&&i.data?.downloadUrl?i.data.downloadUrl:e.downloadUrl},Vm=async(e,t)=>{let n=e.downloadUrl;for(let i=1;i<=$o;i++)try{if((!n||i>1)&&(n=await Hm(e,t)),!n)throw new Error(`Credential ${e.name||ni(e)||"unknown"} has no download URL.`);let r=await Gi.get(n,{responseType:"arraybuffer",timeout:6e4,maxContentLength:1/0,maxBodyLength:1/0,headers:{Connection:"close"}});return Buffer.from(r.data).toString("base64")}catch(r){if(i>=$o||!jm(r))throw r;let o=Math.min(1500*i*i,15e3);C.warn(O.dim(`  - Temporary network error downloading ${e.name}. Retrying... (${i}/${$o})`)),await El(o)}throw new Error(`Failed to download credential ${e.name||ni(e)||"unknown"}.`)},Gm=(e,t)=>t?.ios?.buildNumber??t?.iosBuildNumber??e?.ios?.buildNumber??e?.expo?.ios?.buildNumber,zm=(e,t)=>t?.android?.versionCode??t?.androidVersionCode??e?.android?.versionCode??e?.expo?.android?.versionCode,ul=(e,t,n,i)=>e==="ios"?t.iosBundleIdentifier||n?.ios?.bundleIdentifier||n?.expo?.ios?.bundleIdentifier||i:t.androidPackage||n?.android?.package||n?.expo?.android?.package||n?.name||i,pl=async(e,t,n)=>{let i=await D.post(`/projects/${e}/next-build-number`,{platform:t,scope:n});if(i.data.status!=="success"||!i.data.buildNumber)throw new Error(i.data.message||"Dashboard did not return a build number.");return String(i.data.buildNumber)},Qn=e=>{let t={};return e.platform==="ios"&&e.resolvedBuildNumber&&(t.buildNumber=e.resolvedBuildNumber),e.platform==="android"&&e.resolvedVersionCode&&(t.versionCode=e.resolvedVersionCode),t},vl=(e,t,n=[])=>{if(!be.existsSync(e))return n;let i;try{i=be.readdirSync(e,{withFileTypes:!0})}catch{return n}for(let r of i){if(r.name==="Pods"||r.name==="build"||r.name==="DerivedData")continue;let o=_e.join(e,r.name);r.isDirectory()?vl(o,t,n):r.name===t&&n.push(o)}return n},Km=(e,t,n)=>{let i=`${n} ${t.environment||""}`.toLowerCase(),r=e.toLowerCase(),o=0;return(i.includes("development")||i.includes("dev"))&&/(^|[.-])dev(elopment)?($|[.-])/.test(r)&&(o+=20),(i.includes("staging")||i.includes("stage"))&&/(^|[.-])stag(e|ing)?($|[.-])/.test(r)&&(o+=20),(i.includes("production")||i.includes("prod"))&&(/(^|[.-])(dev|development|stag|stage|staging)($|[.-])/.test(r)||(o+=20)),o},Wm=(e,t)=>{let n=_e.resolve(process.cwd(),be.existsSync("ios")?"ios":"."),i=vl(n,"project.pbxproj"),r=[];for(let o of i)try{let a=be.readFileSync(o,"utf8").matchAll(/PRODUCT_BUNDLE_IDENTIFIER\s*=\s*"?([^";\s]+)"?;/g);for(let l of a){let d=l[1]?.trim();d&&!d.includes("$")&&!d.startsWith("com.apple.")&&!r.includes(d)&&r.push(d)}}catch{}if(r.length!==0)return r.length===1?r[0]:r.map(o=>({bundleId:o,score:Km(o,e,t)})).sort((o,s)=>s.score-o.score)[0]?.bundleId},Vi=e=>String(e||"").trim().toLowerCase().replace(/_/g,"-"),Ki=(e,t)=>{let n=Vi(e);return t==="ios"&&(n==="internal"||n==="ad-hoc")?"adhoc":t==="android"&&["internal","adhoc","ad-hoc","development","dev","staging","stage"].includes(n)?"internal":n},fl=(e,t,n)=>{let i=Ki(e.distributionType||e.meta?.distributionType,n);return i?i===Ki(t,n):!0},ml=(e,t,n)=>{let i=Ki(e.distributionType||e.meta?.distributionType,n),r=Ki(t,n);return i?i===r?3:n==="android"&&r!=="store"&&i!=="store"?2:0:1},Jm=e=>{let t=e.toLowerCase();return t==="development"||t==="dev"||t.startsWith("development-")||t.startsWith("dev-")||t.endsWith("-development")||t.endsWith("-dev")},qm=e=>{let t=e.toLowerCase();return t.includes("staging")||t.includes("stage")||t.includes("preview")||t.includes("adhoc")||t.includes("ad-hoc")},Ym=(e,t)=>{let n=Vi(e.distribution),i=Vi(e.iosExportMethod),r=Vi(e.environment);return e.platform!=="ios"?n==="store"?"store":"internal":e.developmentClient||e.simulator?"development":i==="app-store"||n==="store"?"store":i==="development"||n==="development"?"development":i==="ad-hoc"||i==="adhoc"||n==="ad-hoc"||n==="adhoc"||n==="internal"?"adhoc":r==="production"||r==="store"?"store":r==="development"||r==="dev"?"development":r==="staging"||r==="stage"||r==="preview"?"adhoc":t.toLowerCase()==="production"||t.toLowerCase().includes("store")?"store":Jm(t)?"development":(qm(t),"adhoc")},$l=e=>e.bundleId||e.bundleIdentifier||e.packageName||e.meta?.bundleId||e.meta?.bundleIdentifier||e.meta?.packageName,gl=(e,t)=>{if(!t)return!0;let n=$l(e);return!n||n==="*"||n===t},hl=(e,t)=>{let n=$l(e);return!t||!n?0:n===t?2:n==="*"?1:-1},_l=e=>{try{let t=Buffer.from(e,"base64").toString("utf8"),n=t.match(/<key>application-identifier<\/key>\s*<string>([^<]+)<\/string>/)?.[1]?.trim();if(!n)return;let i=t.match(/<key>TeamIdentifier<\/key>\s*<array>\s*<string>([^<]+)<\/string>/)?.[1]?.trim();if(i&&n.startsWith(`${i}.`))return n.slice(i.length+1);let r=n.indexOf(".");return r>=0?n.slice(r+1):n}catch{return}},Xm=(e,t)=>{if(e===t||e==="*")return!0;if(e.endsWith(".*")){let n=e.slice(0,-2);return t.startsWith(`${n}.`)}return!1},Zm=(e,t)=>{if(!t)return!0;let n=_l(e);if(n)return Xm(n,t);try{return Buffer.from(e,"base64").toString("latin1").includes(t)}catch{return!0}},Wi=async e=>{if(e.failOnly){(!e.projectId||!e.buildId)&&(C.error(O.red("--project-id and --build-id are required with --fail-only.")),process.exit(1));let d=e.error||"Build runner failed before it could report a final status.";try{await D.patch(`/builds/${e.projectId}/${e.buildId}`,{status:"failed",error:d,endTime:Date.now()}),C.info(O.yellow(`Marked build ${e.buildId} as failed.`));return}catch(c){C.error(O.red(`Could not mark build failed: ${c.message}`)),process.exit(1)}}await Mm(e),await xm(e),e.platform!=="android"&&e.platform!=="ios"&&(C.error(`Platform ${e.platform} is not supported. Use 'android' or 'ios'.`),process.exit(1)),e.autoSubmit&&e.platform==="ios"&&e.simulator&&(C.error(O.red("--auto-submit cannot be used with --simulator because simulator builds are not App Store artifacts.")),process.exit(1)),e.autoSubmit&&e.dryRun&&C.warn(O.yellow("--auto-submit is ignored during --dry-run."));let t=Co(),n=e.buildId||Im(),i=e.projectId,r=Date.now(),o=!!i,s=!0,a=async d=>{if(i)try{await D.patch(`/builds/${i}/${n}`,{status:"failed",error:d,endTime:Date.now()})}catch{}};if(e.local&&e.buildId&&i&&await ei("Mark isolated runner as building",()=>D.patch(`/builds/${i}/${n}`,{status:"building",runnerStartedAt:Date.now()})),e.local&&e.buildId){e.quiet||t.start(`Preparing isolated workspace for build: ${e.buildId}`);try{let d=await D.get(`/builds/${i}/${e.buildId}/source-url`);if(d.data.status!=="success")throw new Error("Failed to get source download URL from API");Oo("SOURCE_DOWNLOAD",d.data.downloadUrl);let c=await Gi.get(d.data.downloadUrl,{responseType:"stream"}),u=(i||e.projectId||"default").replace(/[^a-zA-Z0-9-_]/g,"_"),f=_e.join(wm.homedir(),m.workspacesDir,u);be.mkdirSync(f,{recursive:!0});let p=new Set(["node_modules",`.${m.nameLower}-cache-meta`]),y=new Set(["Pods"]);if(be.existsSync(f)){let _=be.readdirSync(f);for(let w of _){if(p.has(w))continue;if(w==="ios"){let B=_e.join(f,"ios");try{let X=be.readdirSync(B);for(let U of X)if(!y.has(U))try{be.rmSync(_e.join(B,U),{recursive:!0,force:!0})}catch{}}catch{}continue}let T=_e.join(f,w);try{be.rmSync(T,{recursive:!0,force:!0})}catch{}}}let g=_e.join(f,"source.zip"),h=c.data,S=be.createWriteStream(g);await new Promise((_,w)=>{h.pipe(S),h.on("error",T=>w(T)),S.on("finish",()=>_())}),new al(g).extractAllTo(f,!0);try{be.unlinkSync(g)}catch{}process.chdir(f),C.info(O.green(`\u2713 Persistent workspace ready: ${f}`)),C.info(O.dim(`  \u{1F4E6} Cached dirs preserved: node_modules=${be.existsSync(_e.join(f,"node_modules"))?"\u2705":"\u274C"}, Pods=${be.existsSync(_e.join(f,"ios","Pods"))?"\u2705":"\u274C"}`)),t.stop()}catch(d){t.stop(`Failed to prepare isolated workspace: ${d.message}`),i&&await a(`Setup Error: ${d.message}`),process.exit(1)}}try{let d=e.repo;if(!d)try{d=sl("git config --get remote.origin.url").toString().trim()}catch{C.warn("Could not detect git repository URL.")}!d&&e.dryRun,d||(d="https://github.com/placeholder/repo.git"),C.info(`Build ID: ${O.cyan(n)}`);let c={},u={},f=null,p=Ie(`./${m.configFileName}`);if(p||(C.error(O.red(`${m.configFileName} not found. Run \`${m.nameLower} init\` or \`${m.nameLower} link\` first.`)),process.exit(1)),p){f=p;let v=Tn(p);e.framework=v,i=p.projectId;let R=e.buildProfile||"production",I=Ve(p,R);!I&&e.buildProfile&&(C.error(`Build profile '${R}' not found in ${m.configFileName}`),process.exit(1));let $=I||{};process.env.MACH_DEBUG&&C.info(O.dim(`Framework: ${v} | Build profile: ${R} | Platform: ${e.platform} | Distribution: ${$.distribution||"store"} | Environment: ${$.environment||R}`)),$.env&&(u=$.env,C.info(O.blue(`Use Build Profile: ${R}`)));let x=e.platform,P=$[x]||{},V=["developmentClient","simulator","distribution","buildCommand","apk","iosScheme","preBuild","postBuild","scheme","environment","androidPackage","iosBundleIdentifier","name","iosDeploymentTarget","iosApiKeyId","iosApiKeyIssuer","iosApiKeyPath","iosTeamId","iosConfiguration","iosExportMethod","branch","repo","instanceType","ami","bucket","region","nodeVersion"];e.name=p.name,e.appName=p.name,e.androidPackage=p.android?.package,e.iosBundleIdentifier=p.ios?.bundleIdentifier,e.iosScheme=p.ios?.iosScheme,!e.nodeVersion&&p.nodeVersion&&(e.nodeVersion=p.nodeVersion);let G=de=>de==="androidPackage"?P.androidPackage??P.package??$.androidPackage??$.android?.package:de==="iosBundleIdentifier"?P.iosBundleIdentifier??P.bundleIdentifier??$.iosBundleIdentifier??$.ios?.bundleIdentifier:P[de]!==void 0?P[de]:$[de];for(let de of V){let L=G(de),z=de==="androidPackage"||de==="iosBundleIdentifier";L!==void 0&&(e[de]===void 0||z)&&(e[de]=L)}if(e.platform==="ios"&&!(P.iosBundleIdentifier??P.bundleIdentifier??$.iosBundleIdentifier??$.ios?.bundleIdentifier)){let L=Wm(e,R);L&&L!==e.iosBundleIdentifier&&(C.warn(O.yellow(`Detected native iOS bundle identifier ${L}; using it for credential lookup. Set build.${R}.ios.bundleIdentifier to make this explicit.`)),e.iosBundleIdentifier=L)}e.branch=e.branch||"main",e.iosConfiguration=e.iosConfiguration||(e.developmentClient?"Debug":"Release"),e.sshUser=e.sshUser||process.env.USER||"ubuntu",e.simulator===void 0&&(e.simulator=!1),e.local===void 0&&(e.local=!1),e.verbose===void 0&&(e.verbose=!1),C.info(O.dim(`Resolved build config: framework=${v}, profile=${R}, platform=${e.platform}, simulator=${e.platform==="ios"?String(!!e.simulator):"n/a"}, developmentClient=${String(!!e.developmentClient)}, distribution=${e.distribution||$.distribution||"store"}, iosConfiguration=${e.platform==="ios"?e.iosConfiguration||"Release":"n/a"}`));let j=de=>{if(!de)return de;if(de.startsWith("scripts.")){let L=de.split(".")[1],z=p.scripts?.[L];if(z)return z;C.warn(`Script reference not found: ${de}`)}return de};e.buildCommand=j(e.buildCommand),e.preBuild=j(e.preBuild),e.postBuild=j(e.postBuild),!e.scheme&&p.scheme&&(e.scheme=p.scheme);let Y={...pn(p,m.envPrefix),...pn($,`${m.envPrefix}PROFILE_`)};c={...c,...u,...Y},process.env.IOS_P12_PASSWORD&&!c.IOS_P12_PASSWORD&&(c.IOS_P12_PASSWORD=process.env.IOS_P12_PASSWORD),process.env.MATCH_PASSWORD&&!c.MATCH_PASSWORD&&(c.MATCH_PASSWORD=process.env.MATCH_PASSWORD),e.platform==="ios"&&(!e.iosTeamId&&$.ios?.appleTeamId&&(e.iosTeamId=$.ios.appleTeamId),!e.iosTeamId&&p.submit?.[R]?.ios?.appleTeamId&&(e.iosTeamId=p.submit[R].ios.appleTeamId),!e.iosTeamId&&p.submit?.production?.ios?.appleTeamId&&(C.warn(O.yellow(`Check: Using 'production' Team ID for '${R}' build.`)),e.iosTeamId=p.submit.production.ios.appleTeamId),e.iosTeamId?C.info(O.magenta(`\u2713 Injected iOS Team ID from config: ${e.iosTeamId}`)):e.simulator||C.warn(O.yellow("\u26A0\uFE0F No iOS Team ID found. Device or archive signing may fail unless managed iOS credentials provide the team automatically.")))}let y="unknown";try{y=sl("git rev-parse --abbrev-ref HEAD").toString().trim()}catch{C.warn("Failed to detect git branch.")}let g="1.0.0";try{be.existsSync("./package.json")&&(g=JSON.parse(be.readFileSync("./package.json","utf-8")).version||"1.0.0")}catch{}let h=e.buildProfile||"production",S=Kn(p,{framework:e.framework,platform:e.platform}),b="Internal";e.developmentClient?b="DevelopmentClient":h.toLowerCase().includes("store")||h.toLowerCase()==="production"?b="Store":h.toLowerCase().includes("preview")||h.toLowerCase().includes("staging")?b="Staging":(h.toLowerCase().includes("development")||h.toLowerCase().includes("dev"))&&(b="Development");let _=e.platform==="ios"?"iOS":"Android",w=e.platform==="ios"&&e.simulator?" (Simulator)":"",T=`${_}${w} v${g} (${b})`;if(ti(e,{status:"created",projectId:i,buildId:n,platform:e.platform,profile:h,branch:y,version:g,runtimeVersion:S,...Qn(e),buildType:b,developmentClient:!!e.developmentClient,summary:T}),i){try{let v=e.buildProfile||"production",R=e.environment||v;C.info(O.blue(`Fetching managed secrets for profile: ${v} (environment: ${R})...`));let $=(await D.get(`/projects/${i}/secrets/export?env=${R}`)).data;$.status==="success"&&$.secrets&&(c={...c,...$.secrets},Object.keys($.secrets).length>0&&C.info(O.magenta(`\u2713 Injected ${Object.keys($.secrets).length} secrets from Dashboard.`)))}catch(v){C.warn(`Failed to load managed secrets from Dashboard: ${v.message}`)}if(e.platform==="ios"){let v=e.buildProfile||"production",R=Ve(p,v)||{},I=Gm(p,R),$=jn(I),x=e.distribution!==void 0?e.distribution==="store":b==="Store",P=I===void 0&&x,V=e.autoVersion||$||P,G=Gr(e.resolvedBuildNumber,I,V,!e.simulator);if(G.kind==="persisted"){let j=ki(e,c,G.value,"saved MACH build record");C.info(O.green(`\u2713 Reusing assigned iOS buildNumber ${j}`))}else if(G.kind==="explicit"){let j=ki(e,c,G.value,`${m.configFileName} (${v})`);C.info(O.green(`\u2713 Using configured iOS buildNumber ${j}`))}else if(G.kind==="auto"){t.start("Assigning iOS buildNumber from Mach counter...");try{let j=ul("ios",e,p,v),Y=await pl(i,"ios",j);ki(e,c,Y,"MACH version counter"),t.stop(`\u2713 Assigned iOS buildNumber ${O.green(Y)} (${j})`)}catch(j){throw t.stop("iOS buildNumber assignment failed"),new Error(`Auto-versioning failed: ${j.response?.data?.message||j.message}`)}}}if(e.platform==="android"){let v=e.buildProfile||"production",R=Ve(p,v)||{},I=zm(p,R),$=jn(I),x=e.distribution!==void 0?e.distribution==="store":b==="Store",P=I===void 0&&x,V=e.autoVersion||$||P,G=Gr(e.resolvedVersionCode,I,V);if(G.kind==="persisted"){let j=Ni(e,c,G.value,"saved MACH build record");C.info(O.green(`\u2713 Reusing assigned Android versionCode ${j}`))}else if(G.kind==="explicit"){let j=Ni(e,c,G.value,`${m.configFileName} (${v})`);C.info(O.green(`\u2713 Using configured Android versionCode ${j}`))}else if(G.kind==="auto"){t.start("Assigning Android versionCode from Mach counter...");try{let j=ul("android",e,p,v),Y=await pl(i,"android",j);Ni(e,c,Y,"MACH version counter"),t.stop(`\u2713 Assigned Android versionCode ${O.green(Y)} (${j})`)}catch(j){throw t.stop("Android versionCode assignment failed"),new Error(`Auto-versioning failed: ${j.response?.data?.message||j.message}`)}}}if(e.platform==="ios"&&e.simulator)C.info(O.dim("Skipping managed iOS signing credentials for simulator build."));else try{C.info(O.blue("Fetching managed credentials..."));let v=Ym(e,h),R=e.platform==="ios"?e.iosBundleIdentifier:e.androidPackage,I=e.platform==="ios"?"bundle":"package";C.info(O.dim(`  Credential target: ${I} ${R||"not set"} (${v})`));let $=await D.get("/credentials/resolve",{params:{projectId:i,platform:e.platform,bundleId:R,distributionType:v,teamId:e.platform==="ios"?e.iosTeamId:void 0}});if($.data.status==="success"&&$.data.credentials){let x=$.data.credentials;C.info(O.magenta(`\u2713 Found ${x.length} relevant credentials.`));let P=x.filter(L=>e.platform==="ios"&&L.type==="ios_profile"?fl(L,v,e.platform)?gl(L,R):!1:e.platform==="android"&&L.type==="android_keystore"?gl(L,R):!!fl(L,v,e.platform)).sort((L,z)=>{let F=hl(z,R)*10+ml(z,v,e.platform)-(hl(L,R)*10+ml(L,v,e.platform));return F!==0?F:(z.createdAt||0)-(L.createdAt||0)});C.info(O.dim(`  Filtered to ${P.length} credentials for distributionType: ${v}`));let V=!1,G=!1,j=!1,Y=[];for(let L of P)if(!(L.type==="ios_cert"&&V||L.type==="ios_profile"&&G||L.type==="android_keystore"&&j)&&["ios_cert","ios_profile","android_keystore"].includes(L.type)&&(L.downloadUrl||ni(L)))try{let F=await Vm(L,i);if(L.type==="ios_cert"&&!V)c.IOS_DIST_P12=F,L.password?(c.IOS_P12_PASSWORD=L.password,C.info(O.dim(`  - Injected ${L.name} as IOS_DIST_P12 with password from credential record`))):C.info(O.dim(`  - Injected ${L.name} as IOS_DIST_P12`)),V=!0;else if(L.type==="ios_profile"&&!G){if(!Zm(F,R)){let Q=_l(F)||"unknown";throw new Error(`Provisioning profile ${L.name||ni(L)||"unknown"} is for a different bundle ID. Expected ${R}, found ${Q}. Upload a ${v} profile for ${R}.`)}c.IOS_PROVISIONING_PROFILE=F,C.info(O.dim(`  - Injected ${L.name} as IOS_PROVISIONING_PROFILE`)),G=!0}else if(L.type==="android_keystore"&&!j){c.ANDROID_KEYSTORE_BASE64=F;let Q=L.keystorePassword||L.password,ce=L.keyPassword||L.keystorePassword||L.password,Be=L.alias||L.meta?.alias;if(Q)c.ANDROID_STORE_PASSWORD=Q,C.info(O.dim("  - Injected keystore password from credential record"));else{let ve=["ANDROID_STORE_PASSWORD",...[v==="store"?"PRODUCTION":v==="internal"||v==="adhoc"?"STAGING":"DEVELOPMENT",v.toUpperCase(),"PRODUCTION","STORE","INTERNAL","STAGING","RELEASE","DEBUG"].map(Xe=>`KEYSTORE_PASSWORD_${Xe}`),"KEYSTORE_PASSWORD"].find(Xe=>!!c[Xe]);ve&&c[ve]&&(c.ANDROID_STORE_PASSWORD=c[ve])}if(ce?(c.ANDROID_KEY_PASSWORD=ce,C.info(O.dim("  - Injected key password from credential record"))):c.ANDROID_KEY_PASSWORD=c.ANDROID_STORE_PASSWORD||"",Be)c.ANDROID_KEY_ALIAS=Be;else{let re=["ANDROID_KEY_ALIAS","KEYSTORE_ALIAS"].find(ne=>!!c[ne]);re&&(c.ANDROID_KEY_ALIAS=c[re])}C.info(O.dim(`  - Injected ${L.name} as ANDROID_KEYSTORE_BASE64`)),j=!0}}catch(F){Y.push(`${L.name||L.type}: ${F.message}`)}let de=e.platform==="ios"?e.simulator||V&&G:j||!P.some(L=>L.type==="android_keystore");if(Y.length>0&&!de)throw new Error(`Credential setup failed:
-${Y.map(L=>`- ${L}`).join(`
-`)}`);Y.length>0&&C.warn(O.dim(`  Skipped ${Y.length} stale or unusable credential(s).`))}if(S=Kn(p,{framework:e.framework,platform:e.platform,iosBuildNumber:e.resolvedBuildNumber||c.BUILD_NUMBER,androidVersionCode:e.resolvedVersionCode||c.ANDROID_VERSION_CODE}),p.ota?.enabled){if(p.ota.engine==="mach-react-native")throw new Error("This project still uses the unfinished mach-react-native OTA engine. Run `mach ota setup` to migrate to expo-updates before building.");if(!p.ota.url)throw new Error("OTA is enabled but ota.url is missing. Run `mach ota setup` before building.");let x=p.ota.channel||"production";if(e.framework==="expo"){let P=zn(process.cwd(),{platform:e.platform,runtimeVersion:S,channel:x,url:p.ota.url}),V=[P?.runtimeVersion!==S?`runtime ${P?.runtimeVersion||"missing"} (expected ${S})`:void 0,P?.channel!==x?`channel ${P?.channel||"missing"} (expected ${x})`:void 0,P?.url!==p.ota.url?`URL ${P?.url||"missing"} (expected ${p.ota.url})`:void 0].filter(Boolean);if(V.length>0)throw new Error(`Expo OTA configuration mismatch: ${V.join("; ")}. Run \`${m.nameLower} ota setup\` to update the local Expo plugin before building.`)}c.MACH_OTA_RUNTIME_VERSION=S,c.MACH_OTA_CHANNEL=x,c.MACH_OTA_URL=p.ota.url}if(e.platform==="ios"&&!e.simulator){let x=!!c.IOS_DIST_P12,P=!!c.IOS_PROVISIONING_PROFILE;if(!x||!P){let V=[...x?[]:["Distribution Certificate"],...P?[]:["Provisioning Profile"]].join(" and ");if(e.local&&e.buildId)throw new Error(`Missing iOS credentials: ${V}. Expected ${v} credentials for ${R||"the selected bundle ID"}. Run \`${m.nameLower} credentials --platform ios --profile ${h}\` and select ${R||"the correct bundle ID"}.`);C.error(O.red(`Missing iOS credentials: ${V}`)),e.quiet&&process.exit(1);let G=e.yes||await rl({message:"Would you like to generate these credentials now?",initialValue:!0});if(G&&!zi(G))return await Ln({platform:"ios",profile:h}),e.quiet||C.info(O.green("\u2713 Credentials setup complete! Restarting build phase...")),Wi(e);e.quiet||C.info(O.yellow(`Run \`${m.nameLower} credentials\` to set up signing credentials manually.`)),process.exit(1)}}if(e.platform==="android"&&!e.developmentClient&&(e.distribution==="internal"||e.distribution==="store")&&!(!!c.ANDROID_KEYSTORE_BASE64||!!c.ANDROID_KEYSTORE)){C.error(O.red("Missing Android credentials: Signing Keystore")),e.quiet&&process.exit(1);let P=e.yes||await rl({message:"Would you like to automatically create and upload an Android Keystore for this profile now?",initialValue:!0});if(P&&!zi(P))return await Ln({platform:"android",profile:h}),e.quiet||C.info(O.green("\u2713 Android Keystore setup complete! Restarting build phase...")),Wi(e);e.quiet||C.info(O.yellow(`Run \`${m.nameLower} credentials --platform android\` to set up a signing keystore manually.`)),process.exit(1)}}catch(v){(String(v.message||"").startsWith("Credential download failed")||String(v.message||"").startsWith("Credential setup failed")||String(v.message||"").startsWith("Missing iOS credentials")||String(v.message||"").startsWith("Auto-versioning failed"))&&(C.error(O.red(v.message)),process.exit(1)),e.platform==="ios"&&e.local&&e.buildId&&(C.error(O.red(`Failed to resolve iOS credentials: ${v.message}`)),process.exit(1)),C.warn(`Failed to resolve credentials: ${v.message}`)}}let B=!!(e.local&&e.buildId),X=!!(e.local||e.sshHost),U=!X&&!B;if(B){C.info(O.magenta("\u{1F3D7}\uFE0F Runner Mode: Executing isolated build task..."));let v=await Qr({...e,interactive:!1},n,c,i,{branch:y,version:g,runtimeVersion:S,summary:T,buildType:b});await K(v),s=!1,process.exit(0)}async function K(v){let R=async I=>{if(i)try{await ei("Report failed build status",()=>D.patch(`/builds/${i}/${n}`,{status:"failed",error:I,endTime:Date.now()}),3)}catch($){C.warn(O.yellow(`Could not report failed build status: ${$.message}`))}};if(i&&v.length>0){let I=Co(),$=[];e.quiet||I.start("Uploading artifacts to Dashboard...");try{for(let x of v){let P=_e.basename(x),V=be.statSync(x).size,G=_e.extname(P).toLowerCase(),j="application/octet-stream",Y=await ei(`Create artifact upload URL for ${P}`,()=>D.post(`/builds/${i}/${n}/artifact-upload-url`,{fileName:P,fileType:j}));if(Y.data.status!=="success")throw new Error(`Failed to get upload URL for ${P}`);await Bm(x,Y.data.uploadUrl,j),$.push({name:P,url:Y.data.downloadUrl,size:V,type:G.substring(1)})}e.quiet||I.stop("Artifacts uploaded.")}catch(x){e.quiet||I.stop("Failed to upload artifacts.");let P=`Artifact upload failed: ${x.message}`;throw C.error(O.red(P)),await R(P),new Error(P)}if(i&&$.length>0)try{C.info(O.cyan(`
-\u{1F517} Download Links:`));for(let x of $)C.info(O.dim(`  - ${x.name}: `)+O.blue.underline(x.url));await ei("Finalize build in dashboard",()=>D.patch(`/builds/${i}/${n}`,{status:"success",artifacts:$,endTime:Date.now(),runtimeVersion:S,...Qn(e)})),ti(e,{status:"success",projectId:i,buildId:n,platform:e.platform,profile:h,branch:y,version:g,runtimeVersion:S,...Qn(e),buildType:b,developmentClient:!!e.developmentClient,summary:T,artifacts:$}),C.success(O.green(`
-\u2713 Build completed and reported to dashboard.`)),e.maestro&&!B&&await yl(i,n,e,h),e.autoSubmit&&!B&&await Ro(i,n,e,h)}catch(x){let P=`Build artifact uploaded but dashboard finalization failed: ${x.message}`;throw C.error(O.red(`
-${P}`)),await R(P),new Error(P)}}else if(i){let I="Build completed but produced no uploadable artifacts.";throw C.error(O.red(I)),await R(I),new Error(I)}}if(X){if(C.info(O.cyan(`\u{1F680} Direct Build Mode: Executing on ${e.sshHost||"local"}...`)),i&&!o){let v=process.argv.slice(3).join(" ");await D.post("/builds",{projectId:i,buildId:n,platform:e.platform,status:"building",branch:y,version:g,runtimeVersion:S,...Qn(e),summary:T,startTime:r,buildType:b,buildProfile:h,buildArgs:v,framework:e.framework,simulator:!!e.simulator,developmentClient:!!e.developmentClient,...bl(e,n,h,f)}),Sl(e)}if(e.sshHost&&e.platform==="ios")await zs(e,n,c,i),s=!1,e.autoSubmit&&await Ro(i,n,e,h);else{let v=await Qr({...e,interactive:!!e.local},n,c,i,{branch:y,version:g,runtimeVersion:S,summary:T,buildType:b});await K(v),s=!1}return}if(U&&(C.info(O.blue("\u{1F6F0}\uFE0F Cloud Initiator Mode: Preparing orchestration...")),!e.dryRun)){e.quiet||t.start("Zipping and uploading local source...");let v=await D.post("/builds/source-upload-url",{projectId:i,buildId:n});if(v.data.status!=="success")throw t.stop("Failed to get upload URL."),new Error("Failed to get source upload URL from API");Oo("SOURCE_UPLOAD",v.data.uploadUrl);let R=new al,I=Om(R,process.cwd(),e.platform),$=R.toBuffer();if(!e.quiet){let P=I.skipped.length>0?` Skipped: ${I.skipped.join(", ")}.`:"";t.message(`Prepared source (${I.files} files).${P}`)}e.quiet||t.message(`Uploading source (${($.length/1024/1024).toFixed(1)} MB)...`);let x=!1;for(let P=1;P<=3;P++)try{await Gi.put(v.data.uploadUrl,$,{headers:{"Content-Type":"application/zip"},maxBodyLength:1/0,maxContentLength:1/0,timeout:12e4}),x=!0;break}catch(V){if(P<3)t.message(`Upload attempt ${P} failed (${V.code||V.message}), retrying...`),await new Promise(G=>setTimeout(G,2e3*P));else throw V}if(e.quiet||t.stop("Source uploaded"),i){let P=process.argv.slice(3).join(" ");s=e.platform==="android",await D.post("/builds",{projectId:i,buildId:n,platform:e.platform,status:"pending",branch:y,version:g,runtimeVersion:S,...Qn(e),summary:T,startTime:r,buildType:b,buildProfile:h,buildArgs:P,framework:e.framework,simulator:!!e.simulator,developmentClient:!!e.developmentClient,...bl(e,n,h,f)}),s=e.platform==="android",C.info(O.green("\u2713 Cloud build registered.")),Sl(e)}e.platform==="android"&&(await Hs(e,n,c,i,e.preBuild),s=!1),e.quiet||C.info(O.cyan("\u{1F4E1} Connecting to build stream...")),await tg(i,n,e),e.maestro&&await yl(i,n,e,h),e.autoSubmit&&await Ro(i,n,e,h);return}}catch(d){let c=d.message||"Build failed";d.response?.data?.message?c=d.response.data.message:d.message.includes("status code 402")?c="Insufficient wallet balance. Please add credits in the Dashboard.":d.message.includes("status code 403")&&(c="Monthly build quota exceeded. Upgrade your plan in the Dashboard."),i&&s&&await a(c),C.error(O.red(`\u2717 Build failed: ${c}`)),process.exit(1)}};async function yl(e,t,n,i){C.info(O.cyan(`
-\u{1F3BC} Queuing managed Maestro test...`)),await co({projectId:e,buildId:t,platform:n.platform,profile:i,maestroFlows:n.maestroFlows,maestroDevice:n.maestroDevice,maestroRetries:n.maestroRetries,maestroRecord:n.maestroRecord,maestroUseBuildSource:n.maestroUseBuildSource,maestroEnv:n.maestroEnv,quiet:n.quiet})}async function Ro(e,t,n,i){if(!e){C.error(O.red("Auto-submit requires a linked Mach project. Run `mach link` or pass --project-id.")),process.exitCode=1;return}C.info(O.cyan(`
-Auto-submit: submitting the successful build...`));try{let r=await Qm(e,t);if(r?.autoSubmit){let o=r.submissionId?`${yt}/submissions/${r.submissionId}?projectId=${encodeURIComponent(e)}`:void 0,s=String(r.status||"").toLowerCase(),a=String(r.autoSubmitStatus||"").toLowerCase(),l=r.submissionId||["success","completed","succeeded"].includes(s)||["starting","submitted","failed","skipped"].includes(a);if(r.submissionId?(C.info(O.green(`Auto-submit is already queued by Mach backend: ${r.submissionId}`)),C.info(O.dim(`Dashboard: ${o}`))):r.autoSubmitStatus==="failed"?C.warn(O.yellow(`Backend auto-submit failed: ${r.autoSubmitError||"Unknown error"}`)):l&&C.info(O.green("Auto-submit is registered with Mach backend; skipping local duplicate submit.")),l){Ft(n,{status:r.autoSubmitStatus||"pending",projectId:e,submitId:r.submissionId,platform:n.platform,profile:i,buildId:t,dashboardUrl:o});return}}await Hi({platform:n.platform,profile:i,buildProfile:i,buildId:t,projectId:e,yes:n.yes,quiet:n.quiet,track:n.submitTrack,releaseStatus:n.submitReleaseStatus,rollout:n.submitRollout,changesNotSentForReview:n.submitChangesNotSentForReview,credentialId:n.submitCredentialId,packageName:n.androidPackage,jsonOutput:n.submitJsonOutput,submitArgs:Pl(n,t,i)})}catch(r){C.error(O.red(`Auto-submit failed: ${r.message||r}`)),process.exitCode=1}}function Pl(e,t,n){let i=["--platform",e.platform,"--profile",n,"--build-id",t];return e.submitTrack&&i.push("--track",String(e.submitTrack)),e.submitReleaseStatus&&i.push("--release-status",String(e.submitReleaseStatus)),e.submitRollout!==void 0&&i.push("--rollout",String(e.submitRollout)),e.submitChangesNotSentForReview&&i.push("--changes-not-sent-for-review"),e.submitCredentialId&&i.push("--credential-id",e.submitCredentialId),e.platform==="android"&&e.androidPackage&&i.push("--package-name",e.androidPackage),e.platform==="ios"&&e.iosBundleIdentifier&&i.push("--bundle-id",e.iosBundleIdentifier),e.submitJsonOutput&&i.push("--json-output",e.submitJsonOutput),i.join(" ")}async function Qm(e,t){try{let i=(await D.get(`/builds/${e}/${t}`)).data?.build;if(i?.autoSubmit)return i}catch(n){C.warn(O.dim(`Could not check backend auto-submit status: ${n.message}`))}return null}function Rl(e){for(let t of Object.keys(e))e[t]===void 0&&delete e[t];return e}function eg(e,t,n){let i=n?.submit?.[t]?.android||{},r=n?.submit?.production?.android||{},o=e.submitTrack||i.track||r.track,s=e.submitReleaseStatus||i.releaseStatus||r.releaseStatus,a=e.submitRollout??i.rollout??i.userFraction??i.rolloutFraction??r.rollout??r.userFraction??r.rolloutFraction,l=e.submitChangesNotSentForReview??i.changesNotSentForReview??i.changes_not_sent_for_review??r.changesNotSentForReview??r.changes_not_sent_for_review;return Rl({track:o,releaseStatus:s,rollout:a,changesNotSentForReview:l===void 0?!1:l===!0||l==="true"||l==="1"})}function bl(e,t,n,i){if(!e.autoSubmit||e.dryRun)return{};let r=e.platform==="android"?eg(e,n,i):{};return{autoSubmit:!0,autoSubmitStatus:"pending",autoSubmitOptions:Rl({platform:e.platform,profile:n,buildId:t,latest:!1,...r,credentialId:e.submitCredentialId,packageName:e.platform==="android"?e.androidPackage:void 0,bundleId:e.platform==="ios"?e.iosBundleIdentifier:void 0,submitArgs:Pl(e,t,n)})}}function Sl(e){!e.autoSubmit||e.dryRun||e.quiet||(C.info(O.green("\u2713 Auto-submit has been registered with the build.")),C.info(O.dim("  You can close this terminal; submission will start after build success.")))}function Al(e){return`${yt}/build/${e}`}function ti(e,t){if(!e.jsonOutput)return;let n=_e.resolve(e.jsonOutput),i={...t,url:t.url||Al(t.buildId),dashboardUrl:t.dashboardUrl||Al(t.buildId),updatedAt:new Date().toISOString()};try{let r=_e.dirname(n);r&&r!=="."&&be.mkdirSync(r,{recursive:!0}),be.writeFileSync(n,JSON.stringify(i,null,2))}catch(r){C.warn(O.yellow(`Could not write build metadata JSON: ${r.message}`))}}async function tg(e,t,n){let r=Co(),o="pending",s=0,a=0;for(n.quiet||r.start("Connecting to build stream...");;){try{let d=(await D.get(`/builds/${e}/${t}`)).data.build;if(d){o=d.status;let c=String(d.pipelineLaunchState||"").toLowerCase(),u=Number(d.pipelineLaunchClaimedAt),f=Number(d.pipelineLaunchDispatchStartedAt),p=c==="claimed"&&Number.isFinite(u)&&u>0&&Date.now()-u>=3e5,y=c==="dispatching"&&Number.isFinite(f)&&f>0&&Date.now()-f>=3e5;if(["","created","pending","queued"].includes(String(o||"").toLowerCase())&&(c==="retryable_failed"||c==="ambiguous"||p||y)){let h=y||c==="ambiguous"?"ambiguous":"retryable_failed",S=d.pipelineLaunchError||(h==="ambiguous"?"The iOS runner launch outcome is unknown. MACH blocked automatic relaunch to avoid a duplicate pipeline.":p?"The iOS runner was never dispatched before its launch lease expired. Retry this build.":"The iOS runner could not be launched. Retry this build.");n.quiet||r.stop("Build runner launch failed."),ti(n,{status:"failed",projectId:e,buildId:t,platform:n.platform,profile:d.buildProfile,buildType:d.buildType,developmentClient:!!d.developmentClient,version:d.version,runtimeVersion:d.runtimeVersion,buildNumber:d.buildNumber,versionCode:d.versionCode,summary:d.summary,pipelineLaunchState:h,error:S,artifacts:d.artifacts||[]}),C.error(O.red(`
-\u2717 Build runner launch failed: ${S}`)),process.exit(1)}if(o==="building")n.quiet||r.message("Build in progress...");else if(o==="failed"||o==="error"||o==="cancelled"||o==="canceled"){let h=o==="cancelled"||o==="canceled";n.quiet||r.stop(h?"Build cancelled.":"Build failed.");let S=d.error||(h?"Build was cancelled.":"Unknown error");ti(n,{status:o,projectId:e,buildId:t,platform:n.platform,profile:d.buildProfile,buildType:d.buildType,developmentClient:!!d.developmentClient,version:d.version,runtimeVersion:d.runtimeVersion,buildNumber:d.buildNumber,versionCode:d.versionCode,summary:d.summary,error:S,artifacts:d.artifacts||[]}),C.error(O.red(`
-\u2717 ${h?"Build cancelled":"Build failed"}: ${S}`)),process.exit(1)}else if(o==="completed"||o==="success"){n.quiet||r.stop("Build successful!"),ti(n,{status:o,projectId:e,buildId:t,platform:n.platform,profile:d.buildProfile,buildType:d.buildType,developmentClient:!!d.developmentClient,version:d.version,runtimeVersion:d.runtimeVersion,buildNumber:d.buildNumber,versionCode:d.versionCode,summary:d.summary,artifacts:d.artifacts||[]}),C.success(O.green(`
-\u2713 Build completed successfully!`));try{n.quiet||(C.info(O.magenta(`
-\u{1F4F1} Installation Hub:`)),C.info(O.dim("  - View & Install Build: ")+O.white.underline(`${yt}/build/${t}`)))}catch{}return}else if(o!=="pending"){n.quiet||r.stop(`Build status: ${o}`);return}}try{let u=(await D.get(`/builds/${e}/${t}/logs`)).data;if(u&&typeof u=="string"&&!n.quiet){let f=u.split(`
-`);if(f.length>s){for(let p=s;p<f.length;p++)f[p].trim()&&console.log(O.dim(`  ${f[p]}`));s=f.length}}}catch{}a=0}catch{a++,a>10&&(r.stop("Connection lost."),C.error(O.red(`
-\u2717 Lost connection to Dashboard API.`)),process.exit(1))}await new Promise(l=>setTimeout(l,3e3))}}import*as Qi from"http";import*as Tl from"net";import{execFile as ng,execFileSync as Vt,execSync as Yi,spawn as Cl}from"child_process";import Ae from"chalk";import{log as te}from"@clack/prompts";import ig from"axios";import me from"fs";import dt from"os";import ee from"path";var Ot=7070,ri=`http://127.0.0.1:${Ot}`,In="com.radhya.mach.agent",En="Mach Agent",wn=`${In}.service`,rg=5e3,og=3e3,Ji=null,qi=null,ct=()=>ee.join(dt.homedir(),m.configDir),Ll=()=>ee.join(dt.homedir(),"Library","LaunchAgents"),Xi=()=>ee.join(Ll(),`${In}.plist`),Ml=()=>ee.join(dt.homedir(),".config","systemd","user"),ko=()=>ee.join(Ml(),wn),No=()=>ee.join(ct(),"agent.cmd");function xo(){return`gui/${process.getuid?.()||Number(Yi("id -u").toString().trim())}`}function Ul(e){return e.replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;").replace(/"/g,"&quot;").replace(/'/g,"&apos;")}function ii(e){return`<string>${Ul(e)}</string>`}function To(){let e=process.argv[1]?me.realpathSync(process.argv[1]):"";if(!e||!me.existsSync(e))throw new Error("Could not resolve the current Mach CLI entrypoint.");return[process.execPath,e,"agent","run"]}function Lo(){let e=Fl(),t=process.platform==="win32"?[process.env.SystemRoot?ee.join(process.env.SystemRoot,"System32"):void 0,process.env.SystemRoot]:["/opt/homebrew/bin","/usr/local/bin","/usr/bin","/bin","/usr/sbin","/sbin"],n={HOME:dt.homedir(),PATH:[process.env.PATH,...e.flatMap(i=>[ee.join(i,"platform-tools"),ee.join(i,"emulator"),ee.join(i,"cmdline-tools","latest","bin"),ee.join(i,"tools","bin")]),...t].filter(Boolean).join(ee.delimiter)};for(let i of["ANDROID_HOME","ANDROID_SDK_ROOT","JAVA_HOME","SHELL"])process.env[i]&&(n[i]=process.env[i]);return n}function Fl(){let e=[process.env.ANDROID_HOME,process.env.ANDROID_SDK_ROOT];if(process.platform==="darwin")e.push(ee.join(dt.homedir(),"Library","Android","sdk"));else if(process.platform==="linux")e.push(ee.join(dt.homedir(),"Android","Sdk"),ee.join(dt.homedir(),"Android","sdk"),"/opt/android-sdk","/usr/lib/android-sdk");else if(process.platform==="win32"){let t=process.env.LOCALAPPDATA,n=process.env.USERPROFILE||dt.homedir();e.push(t?ee.join(t,"Android","Sdk"):void 0,ee.join(n,"AppData","Local","Android","Sdk"))}return Array.from(new Set(e.filter(t=>!!t)))}function sg(e){return process.platform==="win32"&&!e.toLowerCase().endsWith(".exe")?`${e}.exe`:e}function Bl(e,t){let n=sg(e);for(let i of Fl()){let r=ee.join(i,t,n);if(me.existsSync(r))return r}return n}function jl(){return Bl("adb","platform-tools")}function Hl(){return Bl("emulator","emulator")}function Do(e){return`"${e.replace(/\\/g,"\\\\").replace(/"/g,'\\"').replace(/%/g,"%%")}"`}function ag(){if(process.platform!=="linux")throw new Error("Linux service install requires Linux.");me.mkdirSync(ct(),{recursive:!0}),me.mkdirSync(Ml(),{recursive:!0});let e=To(),t=Lo(),n=Object.entries(t).map(([r,o])=>`Environment=${Do(`${r}=${o}`)}`).join(`
+`);let o=r.match(/Google Api Error:[^\n]+/)||r.match(/Google Play API Error:[^\n]+/);return o?o[0]:r||"Google Play submission failed"}function Au(e){try{q.existsSync(e)&&q.rmSync(e,{recursive:!0,force:!0})}catch{}}function Q(e){console.log(V.red(`\u274C ${e}`))}function se(e){console.log(V.gray(`\u2022 ${e}`))}function pr(e){console.log(V.green(`\u2713 ${e}`))}var gr=8,Iu=6,Ps=Number(process.env.MACH_ARTIFACT_UPLOAD_MAX_ATTEMPTS||2),hr=Number(process.env.MACH_ARTIFACT_UPLOAD_TIMEOUT_MS||12e4),yr="ap-south-1",wu=`${m.envPrefix}S3_DEBUG`,vu=()=>["1","true","yes","on"].includes(String(process.env[wu]||"").trim().toLowerCase()),Sr=(e,t)=>{if(vu()&&t)try{let n=new URL(t);S.info(I.dim(`[S3_DEBUG] ${e} host=${n.hostname} expectedRegion=${yr}`)),n.hostname.includes(yr)||S.warn(I.yellow(`[S3_DEBUG] ${e} host ${n.hostname} does not include ${yr}`))}catch(n){S.warn(I.yellow(`[S3_DEBUG] Could not parse ${e} presigned URL host: ${n.message}`))}},Cs=new Set([".git",".gradle",".idea",".mach-cache",".expo",".turbo",".yarn/cache","build","builds","coverage","dist","node_modules",`${m.nameLower}_cli`,`.${m.nameLower}_cli`]),_u=new Set(["android/.gradle","android/.cxx","android/app/.cxx","android/app/build","android/build","ios/Pods","ios/build","ios/DerivedData"]),$u=[{value:"production",label:"production",hint:"Store / release build"},{value:"staging",label:"staging",hint:"Internal testing build"},{value:"development",label:"development",hint:"Development build"}],Gs=e=>new Promise(t=>setTimeout(t,e)),Vs=e=>e.split(ae.sep).filter(Boolean).join("/"),Ru=(e,t)=>{let n=Vs(e),i=n.split("/")[0];return n?!!(Cs.has(n)||Cs.has(i)||_u.has(n)||t==="ios"&&i==="android"||t==="android"&&i==="ios"):!1},Ou=(e,t,n)=>{let i=0,r=new Set,o=(s,a)=>{let l=Vs(a);if(Ru(l,n)){r.add(l.split("/")[0]||l);return}let d=ee.lstatSync(s);if(!d.isSymbolicLink()){if(d.isDirectory()){for(let c of ee.readdirSync(s))o(ae.join(s,c),ae.join(a,c));return}if(d.isFile()){let c=ae.dirname(l);e.addLocalFile(s,c==="."?void 0:c,ae.basename(l)),i++}}};for(let s of ee.readdirSync(t))o(ae.join(t,s),s);return{files:i,skipped:Array.from(r).sort()}},Du=e=>!e.yes&&!e.failOnly&&!e.buildId&&process.stdin.isTTY&&process.stdout.isTTY,Pu=e=>{if(!e||typeof e!="object")return;let t=[e.distribution?`distribution: ${e.distribution}`:void 0,e.environment?`env: ${e.environment}`:void 0,e.developmentClient?"development client":void 0,e.simulator?"simulator":void 0].filter(Boolean);return t.length>0?t.join(", "):void 0},Cu=()=>{let e=ce(`./${m.configFileName}`),t=e?.build&&typeof e.build=="object"?e.build:{},n=Object.keys(t);return n.length===0?$u:n.map(i=>({value:i,label:i,hint:Pu(t[i])}))},Tu=async e=>{let t=Du(e);if(!e.platform&&t){let n=await _s({message:"Select platform",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"}]});Wn(n)&&(Rs("Build cancelled."),process.exit(0)),e.platform=n}if(!e.buildProfile&&t){let n=Cu(),i=await _s({message:"Select build profile",options:n,initialValue:n.find(r=>r.value==="production")?.value||n[0]?.value});Wn(i)&&(Rs("Build cancelled."),process.exit(0)),e.buildProfile=i}e.buildProfile||(e.buildProfile="production")},Ts=e=>{if(e===!0||e===!1)return e;if(e===1||e==="1")return!0;if(e===0||e==="0")return!1;if(typeof e!="string")return;let t=e.trim().toLowerCase();if(["true","yes","on"].includes(t))return!0;if(["false","no","off"].includes(t))return!1},zs=(e,t)=>{if(e)for(let n of t){let i=n.replace(/[.*+?^${}()|[\]\\]/g,"\\$&"),r=e.match(new RegExp(`(?:^|\\s)${i}(?:=|\\s+)([^\\s]+)`));if(r?.[1])return r[1].replace(/^["']|["']$/g,"")}},ku=(e,t)=>!!e&&t.some(n=>new RegExp(`(?:^|\\s)${n.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}(?:\\s|$)`).test(e)),Nu=e=>{let n=zs(e,["--platform"])||e?.split(/\s+/).find(i=>i==="ios"||i==="android");return n==="ios"||n==="android"?n:void 0},xu=async e=>{if(!e.projectId||!e.buildId)return;let t=!!e.local;try{let n=await $.get(`/builds/${e.projectId}/${e.buildId}`),i=n.data?.build||n.data;if(!i||typeof i!="object"){if(t)throw new Error("MACH API returned an empty build record.");return}let r=typeof i.buildArgs=="string"?i.buildArgs:void 0;if(yo(e,i),!e.platform){let o=i.platform||Nu(r);(o==="ios"||o==="android")&&(e.platform=o)}if(e.buildProfile||(e.buildProfile=i.buildProfile||i.profile||i.profileName||zs(r,["--profile","--build-profile","-p"])),e.simulator===void 0){let o=Ts(i.simulator??i.isSimulator);o!==void 0?e.simulator=o:ku(r,["--simulator"])&&(e.simulator=!0)}if(e.developmentClient===void 0){let o=Ts(i.developmentClient??i.devClient);o!==void 0&&(e.developmentClient=o)}}catch(n){if(t){let i=n.response?.data?.message||n.message||"unknown error";throw new Error(`Could not load the canonical MACH build record for runner ${e.buildId}: ${i}. The runner stopped to avoid allocating or packaging a different native version.`)}S.warn(I.yellow(`Could not load saved build options for runner: ${n.message}`))}},Lu=e=>{if(!Number.isFinite(e)||e<=0)return"0 B";let t=["B","KB","MB","GB"],n=Math.min(Math.floor(Math.log(e)/Math.log(1024)),t.length-1);return`${(e/Math.pow(1024,n)).toFixed(n===0?0:1)} ${t[n]}`},Mu=e=>{let t=e.response?.status,n=e.code||"",i=e.message||"";return t?t===408||t===409||t===425||t===429||t>=500||/ECONNRESET|ETIMEDOUT|EAI_AGAIN|ENOTFOUND|ECONNABORTED|socket hang up|network|timeout/i.test(`${n} ${i}`):!0},en=async(e,t,n=Iu)=>{let i;for(let r=1;r<=n;r++)try{return await t()}catch(o){if(i=o,!Mu(o)||r>=n)break;let s=Math.min(6e4,2e3*Math.pow(2,r-1)),a=o.response?.status||o.code||o.message||"network error";S.warn(I.yellow(`${e} failed transiently (${a}). Retrying in ${Math.round(s/1e3)}s... (${r}/${n})`)),await Gs(s)}throw i},Uu=async(e,t,n)=>{let i=ae.basename(e),r=ee.statSync(e).size,o=Math.round(hr/1e3);Sr(`ARTIFACT_UPLOAD ${i}`,t);try{await en(`Upload artifact ${i}`,async()=>{let s=new AbortController,a=ee.createReadStream(e),l=setTimeout(()=>{a.destroy(new Error(`Artifact upload timed out after ${o}s`)),s.abort()},hr);try{await Kn.put(t,a,{headers:{"Content-Type":n,"Content-Length":r,Connection:"close"},maxBodyLength:1/0,maxContentLength:1/0,timeout:hr,timeoutErrorMessage:`Artifact upload timed out after ${o}s`,signal:s.signal})}finally{clearTimeout(l)}},Ps)}catch(s){throw new Error(`${i} (${Lu(r)}) failed after ${Ps} upload attempt(s): ${s.message||s}`)}return r},Fu=e=>{let t=e.response?.status;return t?t===408||t===429||t>=500:!0},nn=e=>e.credentialId||e.id,Bu=async(e,t)=>{let n=nn(e);if(!n)return e.downloadUrl;let i=await $.get(`/credentials/${n}/download`,{params:{projectId:t,format:"raw"}});return i.data?.status==="success"&&i.data?.downloadUrl?i.data.downloadUrl:e.downloadUrl},ju=async(e,t)=>{let n=e.downloadUrl;for(let i=1;i<=gr;i++)try{if((!n||i>1)&&(n=await Bu(e,t)),!n)throw new Error(`Credential ${e.name||nn(e)||"unknown"} has no download URL.`);let r=await Kn.get(n,{responseType:"arraybuffer",timeout:6e4,maxContentLength:1/0,maxBodyLength:1/0,headers:{Connection:"close"}});return Buffer.from(r.data).toString("base64")}catch(r){if(i>=gr||!Fu(r))throw r;let o=Math.min(1500*i*i,15e3);S.warn(I.dim(`  - Temporary network error downloading ${e.name}. Retrying... (${i}/${gr})`)),await Gs(o)}throw new Error(`Failed to download credential ${e.name||nn(e)||"unknown"}.`)},Hu=(e,t)=>t?.ios?.buildNumber??t?.iosBuildNumber??e?.ios?.buildNumber??e?.expo?.ios?.buildNumber,Gu=(e,t)=>t?.android?.versionCode??t?.androidVersionCode??e?.android?.versionCode??e?.expo?.android?.versionCode,ks=(e,t,n,i)=>e==="ios"?t.iosBundleIdentifier||n?.ios?.bundleIdentifier||n?.expo?.ios?.bundleIdentifier||i:t.androidPackage||n?.android?.package||n?.expo?.android?.package||n?.name||i,Ns=async(e,t,n)=>{let i=await $.post(`/projects/${e}/next-build-number`,{platform:t,scope:n});if(i.data.status!=="success"||!i.data.buildNumber)throw new Error(i.data.message||"Dashboard did not return a build number.");return String(i.data.buildNumber)},Qt=e=>{let t={};return e.platform==="ios"&&e.resolvedBuildNumber&&(t.buildNumber=e.resolvedBuildNumber),e.platform==="android"&&e.resolvedVersionCode&&(t.versionCode=e.resolvedVersionCode),t},Ks=(e,t,n=[])=>{if(!ee.existsSync(e))return n;let i;try{i=ee.readdirSync(e,{withFileTypes:!0})}catch{return n}for(let r of i){if(r.name==="Pods"||r.name==="build"||r.name==="DerivedData")continue;let o=ae.join(e,r.name);r.isDirectory()?Ks(o,t,n):r.name===t&&n.push(o)}return n},Vu=(e,t,n)=>{let i=`${n} ${t.environment||""}`.toLowerCase(),r=e.toLowerCase(),o=0;return(i.includes("development")||i.includes("dev"))&&/(^|[.-])dev(elopment)?($|[.-])/.test(r)&&(o+=20),(i.includes("staging")||i.includes("stage"))&&/(^|[.-])stag(e|ing)?($|[.-])/.test(r)&&(o+=20),(i.includes("production")||i.includes("prod"))&&(/(^|[.-])(dev|development|stag|stage|staging)($|[.-])/.test(r)||(o+=20)),o},zu=(e,t)=>{let n=ae.resolve(process.cwd(),ee.existsSync("ios")?"ios":"."),i=Ks(n,"project.pbxproj"),r=[];for(let o of i)try{let a=ee.readFileSync(o,"utf8").matchAll(/PRODUCT_BUNDLE_IDENTIFIER\s*=\s*"?([^";\s]+)"?;/g);for(let l of a){let d=l[1]?.trim();d&&!d.includes("$")&&!d.startsWith("com.apple.")&&!r.includes(d)&&r.push(d)}}catch{}if(r.length!==0)return r.length===1?r[0]:r.map(o=>({bundleId:o,score:Vu(o,e,t)})).sort((o,s)=>s.score-o.score)[0]?.bundleId},zn=e=>String(e||"").trim().toLowerCase().replace(/_/g,"-"),qn=(e,t)=>{let n=zn(e);return t==="ios"&&(n==="internal"||n==="ad-hoc")?"adhoc":t==="android"&&["internal","adhoc","ad-hoc","development","dev","staging","stage"].includes(n)?"internal":n},xs=(e,t,n)=>{let i=qn(e.distributionType||e.meta?.distributionType,n);return i?i===qn(t,n):!0},Ls=(e,t,n)=>{let i=qn(e.distributionType||e.meta?.distributionType,n),r=qn(t,n);return i?i===r?3:n==="android"&&r!=="store"&&i!=="store"?2:0:1},Ku=e=>{let t=e.toLowerCase();return t==="development"||t==="dev"||t.startsWith("development-")||t.startsWith("dev-")||t.endsWith("-development")||t.endsWith("-dev")},Wu=e=>{let t=e.toLowerCase();return t.includes("staging")||t.includes("stage")||t.includes("preview")||t.includes("adhoc")||t.includes("ad-hoc")},qu=(e,t)=>{let n=zn(e.distribution),i=zn(e.iosExportMethod),r=zn(e.environment);return e.platform!=="ios"?n==="store"?"store":"internal":e.developmentClient||e.simulator?"development":i==="app-store"||n==="store"?"store":i==="development"||n==="development"?"development":i==="ad-hoc"||i==="adhoc"||n==="ad-hoc"||n==="adhoc"||n==="internal"?"adhoc":r==="production"||r==="store"?"store":r==="development"||r==="dev"?"development":r==="staging"||r==="stage"||r==="preview"?"adhoc":t.toLowerCase()==="production"||t.toLowerCase().includes("store")?"store":Ku(t)?"development":(Wu(t),"adhoc")},Ws=e=>e.bundleId||e.bundleIdentifier||e.packageName||e.meta?.bundleId||e.meta?.bundleIdentifier||e.meta?.packageName,Ms=(e,t)=>{if(!t)return!0;let n=Ws(e);return!n||n==="*"||n===t},Us=(e,t)=>{let n=Ws(e);return!t||!n?0:n===t?2:n==="*"?1:-1},qs=e=>{try{let t=Buffer.from(e,"base64").toString("utf8"),n=t.match(/<key>application-identifier<\/key>\s*<string>([^<]+)<\/string>/)?.[1]?.trim();if(!n)return;let i=t.match(/<key>TeamIdentifier<\/key>\s*<array>\s*<string>([^<]+)<\/string>/)?.[1]?.trim();if(i&&n.startsWith(`${i}.`))return n.slice(i.length+1);let r=n.indexOf(".");return r>=0?n.slice(r+1):n}catch{return}},Ju=(e,t)=>{if(e===t||e==="*")return!0;if(e.endsWith(".*")){let n=e.slice(0,-2);return t.startsWith(`${n}.`)}return!1},Yu=(e,t)=>{if(!t)return!0;let n=qs(e);if(n)return Ju(n,t);try{return Buffer.from(e,"base64").toString("latin1").includes(t)}catch{return!0}},Jn=async e=>{if(e.failOnly){(!e.projectId||!e.buildId)&&(S.error(I.red("--project-id and --build-id are required with --fail-only.")),process.exit(1));let d=e.error||"Build runner failed before it could report a final status.";try{await $.patch(`/builds/${e.projectId}/${e.buildId}`,{status:"failed",error:d,endTime:Date.now()}),S.info(I.yellow(`Marked build ${e.buildId} as failed.`));return}catch(c){S.error(I.red(`Could not mark build failed: ${c.message}`)),process.exit(1)}}await xu(e),await Tu(e),e.platform!=="android"&&e.platform!=="ios"&&(S.error(`Platform ${e.platform} is not supported. Use 'android' or 'ios'.`),process.exit(1)),e.autoSubmit&&e.platform==="ios"&&e.simulator&&(S.error(I.red("--auto-submit cannot be used with --simulator because simulator builds are not App Store artifacts.")),process.exit(1)),e.autoSubmit&&e.dryRun&&S.warn(I.yellow("--auto-submit is ignored during --dry-run."));let t=Ar(),n=e.buildId||Su(),i=e.projectId,r=Date.now(),o=!!i,s=!0,a=async d=>{if(i)try{await $.patch(`/builds/${i}/${n}`,{status:"failed",error:d,endTime:Date.now()})}catch{}};if(e.local&&e.buildId&&i&&await en("Mark isolated runner as building",()=>$.patch(`/builds/${i}/${n}`,{status:"building",runnerStartedAt:Date.now()})),e.local&&e.buildId){e.quiet||t.start(`Preparing isolated workspace for build: ${e.buildId}`);try{let d=await $.get(`/builds/${i}/${e.buildId}/source-url`);if(d.data.status!=="success")throw new Error("Failed to get source download URL from API");Sr("SOURCE_DOWNLOAD",d.data.downloadUrl);let c=await Kn.get(d.data.downloadUrl,{responseType:"stream"}),u=(i||e.projectId||"default").replace(/[^a-zA-Z0-9-_]/g,"_"),f=ae.join(Eu.homedir(),m.workspacesDir,u);ee.mkdirSync(f,{recursive:!0});let p=new Set(["node_modules",`.${m.nameLower}-cache-meta`]),g=new Set(["Pods"]);if(ee.existsSync(f)){let L=ee.readdirSync(f);for(let _ of L){if(p.has(_))continue;if(_==="ios"){let W=ae.join(f,"ios");try{let Z=ee.readdirSync(W);for(let Ee of Z)if(!g.has(Ee))try{ee.rmSync(ae.join(W,Ee),{recursive:!0,force:!0})}catch{}}catch{}continue}let H=ae.join(f,_);try{ee.rmSync(H,{recursive:!0,force:!0})}catch{}}}let h=ae.join(f,"source.zip"),y=c.data,b=ee.createWriteStream(h);await new Promise((L,_)=>{y.pipe(b),y.on("error",H=>_(H)),b.on("finish",()=>L())}),new Ds(h).extractAllTo(f,!0);try{ee.unlinkSync(h)}catch{}process.chdir(f),S.info(I.green(`\u2713 Persistent workspace ready: ${f}`)),S.info(I.dim(`  \u{1F4E6} Cached dirs preserved: node_modules=${ee.existsSync(ae.join(f,"node_modules"))?"\u2705":"\u274C"}, Pods=${ee.existsSync(ae.join(f,"ios","Pods"))?"\u2705":"\u274C"}`)),t.stop()}catch(d){t.stop(`Failed to prepare isolated workspace: ${d.message}`),i&&await a(`Setup Error: ${d.message}`),process.exit(1)}}try{let d=e.repo;if(!d)try{d=Os("git config --get remote.origin.url").toString().trim()}catch{S.warn("Could not detect git repository URL.")}!d&&e.dryRun,d||(d="https://github.com/placeholder/repo.git"),S.info(`Build ID: ${I.cyan(n)}`);let c={},u={},f=null,p=ce(`./${m.configFileName}`);if(p||(S.error(I.red(`${m.configFileName} not found. Run \`${m.nameLower} init\` or \`${m.nameLower} link\` first.`)),process.exit(1)),p){f=p;let R=bo(p);e.framework=R,i=p.projectId;let T=e.buildProfile||"production",E=Ie(p,T);!E&&e.buildProfile&&(S.error(`Build profile '${T}' not found in ${m.configFileName}`),process.exit(1));let A=E||{};process.env.MACH_DEBUG&&S.info(I.dim(`Framework: ${R} | Build profile: ${T} | Platform: ${e.platform} | Distribution: ${A.distribution||"store"} | Environment: ${A.environment||T}`)),A.env&&(u=A.env,S.info(I.blue(`Use Build Profile: ${T}`)));let D=e.platform,v=A[D]||{},G=["developmentClient","simulator","distribution","buildCommand","apk","iosScheme","preBuild","postBuild","scheme","environment","androidPackage","iosBundleIdentifier","name","iosDeploymentTarget","iosApiKeyId","iosApiKeyIssuer","iosApiKeyPath","iosTeamId","iosConfiguration","iosExportMethod","branch","repo","instanceType","ami","bucket","region","nodeVersion"];e.name=p.name,e.appName=p.name,e.androidPackage=p.android?.package,e.iosBundleIdentifier=p.ios?.bundleIdentifier,e.iosScheme=p.ios?.iosScheme,!e.nodeVersion&&p.nodeVersion&&(e.nodeVersion=p.nodeVersion);let U=re=>re==="androidPackage"?v.androidPackage??v.package??A.androidPackage??A.android?.package:re==="iosBundleIdentifier"?v.iosBundleIdentifier??v.bundleIdentifier??A.iosBundleIdentifier??A.ios?.bundleIdentifier:v[re]!==void 0?v[re]:A[re];for(let re of G){let P=U(re),Ke=re==="androidPackage"||re==="iosBundleIdentifier";P!==void 0&&(e[re]===void 0||Ke)&&(e[re]=P)}if(e.platform==="ios"&&!(v.iosBundleIdentifier??v.bundleIdentifier??A.iosBundleIdentifier??A.ios?.bundleIdentifier)){let P=zu(e,T);P&&P!==e.iosBundleIdentifier&&(S.warn(I.yellow(`Detected native iOS bundle identifier ${P}; using it for credential lookup. Set build.${T}.ios.bundleIdentifier to make this explicit.`)),e.iosBundleIdentifier=P)}e.branch=e.branch||"main",e.iosConfiguration=e.iosConfiguration||(e.developmentClient?"Debug":"Release"),e.sshUser=e.sshUser||process.env.USER||"ubuntu",e.simulator===void 0&&(e.simulator=!1),e.local===void 0&&(e.local=!1),e.verbose===void 0&&(e.verbose=!1),S.info(I.dim(`Resolved build config: framework=${R}, profile=${T}, platform=${e.platform}, simulator=${e.platform==="ios"?String(!!e.simulator):"n/a"}, developmentClient=${String(!!e.developmentClient)}, distribution=${e.distribution||A.distribution||"store"}, iosConfiguration=${e.platform==="ios"?e.iosConfiguration||"Release":"n/a"}`));let B=re=>{if(!re)return re;if(re.startsWith("scripts.")){let P=re.split(".")[1],Ke=p.scripts?.[P];if(Ke)return Ke;S.warn(`Script reference not found: ${re}`)}return re};e.buildCommand=B(e.buildCommand),e.preBuild=B(e.preBuild),e.postBuild=B(e.postBuild),!e.scheme&&p.scheme&&(e.scheme=p.scheme);let me={...vt(p,m.envPrefix),...vt(A,`${m.envPrefix}PROFILE_`)};c={...c,...u,...me},process.env.IOS_P12_PASSWORD&&!c.IOS_P12_PASSWORD&&(c.IOS_P12_PASSWORD=process.env.IOS_P12_PASSWORD),process.env.MATCH_PASSWORD&&!c.MATCH_PASSWORD&&(c.MATCH_PASSWORD=process.env.MATCH_PASSWORD),e.platform==="ios"&&(!e.iosTeamId&&A.ios?.appleTeamId&&(e.iosTeamId=A.ios.appleTeamId),!e.iosTeamId&&p.submit?.[T]?.ios?.appleTeamId&&(e.iosTeamId=p.submit[T].ios.appleTeamId),!e.iosTeamId&&p.submit?.production?.ios?.appleTeamId&&(S.warn(I.yellow(`Check: Using 'production' Team ID for '${T}' build.`)),e.iosTeamId=p.submit.production.ios.appleTeamId),e.iosTeamId?S.info(I.magenta(`\u2713 Injected iOS Team ID from config: ${e.iosTeamId}`)):e.simulator||S.warn(I.yellow("\u26A0\uFE0F No iOS Team ID found. Device or archive signing may fail unless managed iOS credentials provide the team automatically.")))}let g="unknown";try{g=Os("git rev-parse --abbrev-ref HEAD").toString().trim()}catch{S.warn("Failed to detect git branch.")}let h="1.0.0";try{ee.existsSync("./package.json")&&(h=JSON.parse(ee.readFileSync("./package.json","utf-8")).version||"1.0.0")}catch{}let y=e.buildProfile||"production",b=Kt(p,{framework:e.framework,platform:e.platform}),w="Internal";e.developmentClient?w="DevelopmentClient":y.toLowerCase().includes("store")||y.toLowerCase()==="production"?w="Store":y.toLowerCase().includes("preview")||y.toLowerCase().includes("staging")?w="Staging":(y.toLowerCase().includes("development")||y.toLowerCase().includes("dev"))&&(w="Development");let L=e.platform==="ios"?"iOS":"Android",_=e.platform==="ios"&&e.simulator?" (Simulator)":"",H=`${L}${_} v${h} (${w})`;if(tn(e,{status:"created",projectId:i,buildId:n,platform:e.platform,profile:y,branch:g,version:h,runtimeVersion:b,...Qt(e),buildType:w,developmentClient:!!e.developmentClient,summary:H}),i){try{let R=e.buildProfile||"production",T=e.environment||R;S.info(I.blue(`Fetching managed secrets for profile: ${R} (environment: ${T})...`));let A=(await $.get(`/projects/${i}/secrets/export?env=${T}`)).data;A.status==="success"&&A.secrets&&(c={...c,...A.secrets},Object.keys(A.secrets).length>0&&S.info(I.magenta(`\u2713 Injected ${Object.keys(A.secrets).length} secrets from Dashboard.`)))}catch(R){S.warn(`Failed to load managed secrets from Dashboard: ${R.message}`)}if(e.platform==="ios"){let R=e.buildProfile||"production",T=Ie(p,R)||{},E=Hu(p,T),A=Mi(E),D=e.distribution!==void 0?e.distribution==="store":w==="Store",v=E===void 0&&D,G=e.autoVersion||A||v,U=Ui(e.resolvedBuildNumber,E,G,!e.simulator);if(U.kind==="persisted"){let B=Nn(e,c,U.value,"saved MACH build record");S.info(I.green(`\u2713 Reusing assigned iOS buildNumber ${B}`))}else if(U.kind==="explicit"){let B=Nn(e,c,U.value,`${m.configFileName} (${R})`);S.info(I.green(`\u2713 Using configured iOS buildNumber ${B}`))}else if(U.kind==="auto"){t.start("Assigning iOS buildNumber from Mach counter...");try{let B=ks("ios",e,p,R),me=await Ns(i,"ios",B);Nn(e,c,me,"MACH version counter"),t.stop(`\u2713 Assigned iOS buildNumber ${I.green(me)} (${B})`)}catch(B){throw t.stop("iOS buildNumber assignment failed"),new Error(`Auto-versioning failed: ${B.response?.data?.message||B.message}`)}}}if(e.platform==="android"){let R=e.buildProfile||"production",T=Ie(p,R)||{},E=Gu(p,T),A=Mi(E),D=e.distribution!==void 0?e.distribution==="store":w==="Store",v=E===void 0&&D,G=e.autoVersion||A||v,U=Ui(e.resolvedVersionCode,E,G);if(U.kind==="persisted"){let B=xn(e,c,U.value,"saved MACH build record");S.info(I.green(`\u2713 Reusing assigned Android versionCode ${B}`))}else if(U.kind==="explicit"){let B=xn(e,c,U.value,`${m.configFileName} (${R})`);S.info(I.green(`\u2713 Using configured Android versionCode ${B}`))}else if(U.kind==="auto"){t.start("Assigning Android versionCode from Mach counter...");try{let B=ks("android",e,p,R),me=await Ns(i,"android",B);xn(e,c,me,"MACH version counter"),t.stop(`\u2713 Assigned Android versionCode ${I.green(me)} (${B})`)}catch(B){throw t.stop("Android versionCode assignment failed"),new Error(`Auto-versioning failed: ${B.response?.data?.message||B.message}`)}}}if(e.platform==="ios"&&e.simulator)S.info(I.dim("Skipping managed iOS signing credentials for simulator build."));else try{S.info(I.blue("Fetching managed credentials..."));let R=qu(e,y),T=e.platform==="ios"?e.iosBundleIdentifier:e.androidPackage,E=e.platform==="ios"?"bundle":"package";S.info(I.dim(`  Credential target: ${E} ${T||"not set"} (${R})`));let A=await $.get("/credentials/resolve",{params:{projectId:i,platform:e.platform,bundleId:T,distributionType:R,teamId:e.platform==="ios"?e.iosTeamId:void 0}});if(A.data.status==="success"&&A.data.credentials){let D=A.data.credentials;S.info(I.magenta(`\u2713 Found ${D.length} relevant credentials.`));let v=D.filter(P=>e.platform==="ios"&&P.type==="ios_profile"?xs(P,R,e.platform)?Ms(P,T):!1:e.platform==="android"&&P.type==="android_keystore"?Ms(P,T):!!xs(P,R,e.platform)).sort((P,Ke)=>{let je=Us(Ke,T)*10+Ls(Ke,R,e.platform)-(Us(P,T)*10+Ls(P,R,e.platform));return je!==0?je:(Ke.createdAt||0)-(P.createdAt||0)});S.info(I.dim(`  Filtered to ${v.length} credentials for distributionType: ${R}`));let G=!1,U=!1,B=!1,me=[];for(let P of v)if(!(P.type==="ios_cert"&&G||P.type==="ios_profile"&&U||P.type==="android_keystore"&&B)&&["ios_cert","ios_profile","android_keystore"].includes(P.type)&&(P.downloadUrl||nn(P)))try{let je=await ju(P,i);if(P.type==="ios_cert"&&!G)c.IOS_DIST_P12=je,P.password?(c.IOS_P12_PASSWORD=P.password,S.info(I.dim(`  - Injected ${P.name} as IOS_DIST_P12 with password from credential record`))):S.info(I.dim(`  - Injected ${P.name} as IOS_DIST_P12`)),G=!0;else if(P.type==="ios_profile"&&!U){if(!Yu(je,T)){let Pn=qs(je)||"unknown";throw new Error(`Provisioning profile ${P.name||nn(P)||"unknown"} is for a different bundle ID. Expected ${T}, found ${Pn}. Upload a ${R} profile for ${T}.`)}c.IOS_PROVISIONING_PROFILE=je,S.info(I.dim(`  - Injected ${P.name} as IOS_PROVISIONING_PROFILE`)),U=!0}else if(P.type==="android_keystore"&&!B){c.ANDROID_KEYSTORE_BASE64=je;let Pn=P.keystorePassword||P.password,ao=P.keyPassword||P.keystorePassword||P.password,lo=P.alias||P.meta?.alias;if(Pn)c.ANDROID_STORE_PASSWORD=Pn,S.info(I.dim("  - Injected keystore password from credential record"));else{let Ni=["ANDROID_STORE_PASSWORD",...[R==="store"?"PRODUCTION":R==="internal"||R==="adhoc"?"STAGING":"DEVELOPMENT",R.toUpperCase(),"PRODUCTION","STORE","INTERNAL","STAGING","RELEASE","DEBUG"].map(xi=>`KEYSTORE_PASSWORD_${xi}`),"KEYSTORE_PASSWORD"].find(xi=>!!c[xi]);Ni&&c[Ni]&&(c.ANDROID_STORE_PASSWORD=c[Ni])}if(ao?(c.ANDROID_KEY_PASSWORD=ao,S.info(I.dim("  - Injected key password from credential record"))):c.ANDROID_KEY_PASSWORD=c.ANDROID_STORE_PASSWORD||"",lo)c.ANDROID_KEY_ALIAS=lo;else{let ki=["ANDROID_KEY_ALIAS","KEYSTORE_ALIAS"].find(co=>!!c[co]);ki&&(c.ANDROID_KEY_ALIAS=c[ki])}S.info(I.dim(`  - Injected ${P.name} as ANDROID_KEYSTORE_BASE64`)),B=!0}}catch(je){me.push(`${P.name||P.type}: ${je.message}`)}let re=e.platform==="ios"?e.simulator||G&&U:B||!v.some(P=>P.type==="android_keystore");if(me.length>0&&!re)throw new Error(`Credential setup failed:
+${me.map(P=>`- ${P}`).join(`
+`)}`);me.length>0&&S.warn(I.dim(`  Skipped ${me.length} stale or unusable credential(s).`))}if(b=Kt(p,{framework:e.framework,platform:e.platform,iosBuildNumber:e.resolvedBuildNumber||c.BUILD_NUMBER,androidVersionCode:e.resolvedVersionCode||c.ANDROID_VERSION_CODE}),p.ota?.enabled){if(p.ota.engine==="mach-react-native")throw new Error("This project still uses the unfinished mach-react-native OTA engine. Run `mach ota setup` to migrate to expo-updates before building.");if(!p.ota.url)throw new Error("OTA is enabled but ota.url is missing. Run `mach ota setup` before building.");let D=p.ota.channel||"production";if(e.framework==="expo"){let v=zt(process.cwd(),{platform:e.platform,runtimeVersion:b,channel:D,url:p.ota.url}),G=[v?.runtimeVersion!==b?`runtime ${v?.runtimeVersion||"missing"} (expected ${b})`:void 0,v?.channel!==D?`channel ${v?.channel||"missing"} (expected ${D})`:void 0,v?.url!==p.ota.url?`URL ${v?.url||"missing"} (expected ${p.ota.url})`:void 0].filter(Boolean);if(G.length>0)throw new Error(`Expo OTA configuration mismatch: ${G.join("; ")}. Run \`${m.nameLower} ota setup\` to update the local Expo plugin before building.`)}c.MACH_OTA_RUNTIME_VERSION=b,c.MACH_OTA_CHANNEL=D,c.MACH_OTA_URL=p.ota.url}if(e.platform==="ios"&&!e.simulator){let D=!!c.IOS_DIST_P12,v=!!c.IOS_PROVISIONING_PROFILE;if(!D||!v){let G=[...D?[]:["Distribution Certificate"],...v?[]:["Provisioning Profile"]].join(" and ");if(e.local&&e.buildId)throw new Error(`Missing iOS credentials: ${G}. Expected ${R} credentials for ${T||"the selected bundle ID"}. Run \`${m.nameLower} credentials --platform ios --profile ${y}\` and select ${T||"the correct bundle ID"}.`);S.error(I.red(`Missing iOS credentials: ${G}`)),e.quiet&&process.exit(1);let U=e.yes||await $s({message:"Would you like to generate these credentials now?",initialValue:!0});if(U&&!Wn(U))return await jt({platform:"ios",profile:y}),e.quiet||S.info(I.green("\u2713 Credentials setup complete! Restarting build phase...")),Jn(e);e.quiet||S.info(I.yellow(`Run \`${m.nameLower} credentials\` to set up signing credentials manually.`)),process.exit(1)}}if(e.platform==="android"&&!e.developmentClient&&(e.distribution==="internal"||e.distribution==="store")&&!(!!c.ANDROID_KEYSTORE_BASE64||!!c.ANDROID_KEYSTORE)){S.error(I.red("Missing Android credentials: Signing Keystore")),e.quiet&&process.exit(1);let v=e.yes||await $s({message:"Would you like to automatically create and upload an Android Keystore for this profile now?",initialValue:!0});if(v&&!Wn(v))return await jt({platform:"android",profile:y}),e.quiet||S.info(I.green("\u2713 Android Keystore setup complete! Restarting build phase...")),Jn(e);e.quiet||S.info(I.yellow(`Run \`${m.nameLower} credentials --platform android\` to set up a signing keystore manually.`)),process.exit(1)}}catch(R){(String(R.message||"").startsWith("Credential download failed")||String(R.message||"").startsWith("Credential setup failed")||String(R.message||"").startsWith("Missing iOS credentials")||String(R.message||"").startsWith("Auto-versioning failed"))&&(S.error(I.red(R.message)),process.exit(1)),e.platform==="ios"&&e.local&&e.buildId&&(S.error(I.red(`Failed to resolve iOS credentials: ${R.message}`)),process.exit(1)),S.warn(`Failed to resolve credentials: ${R.message}`)}}let W=!!(e.local&&e.buildId),Z=!!(e.local||e.sshHost),Ee=!Z&&!W;if(W){S.info(I.magenta("\u{1F3D7}\uFE0F Runner Mode: Executing isolated build task..."));let R=await Fi({...e,interactive:!1},n,c,i,{branch:g,version:h,runtimeVersion:b,summary:H,buildType:w});await oe(R),s=!1,process.exit(0)}async function oe(R){let T=async E=>{if(i)try{await en("Report failed build status",()=>$.patch(`/builds/${i}/${n}`,{status:"failed",error:E,endTime:Date.now()}),3)}catch(A){S.warn(I.yellow(`Could not report failed build status: ${A.message}`))}};if(i&&R.length>0){let E=Ar(),A=[];e.quiet||E.start("Uploading artifacts to Dashboard...");try{for(let D of R){let v=ae.basename(D),G=ee.statSync(D).size,U=ae.extname(v).toLowerCase(),B="application/octet-stream",me=await en(`Create artifact upload URL for ${v}`,()=>$.post(`/builds/${i}/${n}/artifact-upload-url`,{fileName:v,fileType:B}));if(me.data.status!=="success")throw new Error(`Failed to get upload URL for ${v}`);await Uu(D,me.data.uploadUrl,B),A.push({name:v,url:me.data.downloadUrl,size:G,type:U.substring(1)})}e.quiet||E.stop("Artifacts uploaded.")}catch(D){e.quiet||E.stop("Failed to upload artifacts.");let v=`Artifact upload failed: ${D.message}`;throw S.error(I.red(v)),await T(v),new Error(v)}if(i&&A.length>0)try{S.info(I.cyan(`
+\u{1F517} Download Links:`));for(let D of A)S.info(I.dim(`  - ${D.name}: `)+I.blue.underline(D.url));await en("Finalize build in dashboard",()=>$.patch(`/builds/${i}/${n}`,{status:"success",artifacts:A,endTime:Date.now(),runtimeVersion:b,...Qt(e)})),tn(e,{status:"success",projectId:i,buildId:n,platform:e.platform,profile:y,branch:g,version:h,runtimeVersion:b,...Qt(e),buildType:w,developmentClient:!!e.developmentClient,summary:H,artifacts:A}),S.success(I.green(`
+\u2713 Build completed and reported to dashboard.`)),e.maestro&&!W&&await Fs(i,n,e,y),e.autoSubmit&&!W&&await br(i,n,e,y)}catch(D){let v=`Build artifact uploaded but dashboard finalization failed: ${D.message}`;throw S.error(I.red(`
+${v}`)),await T(v),new Error(v)}}else if(i){let E="Build completed but produced no uploadable artifacts.";throw S.error(I.red(E)),await T(E),new Error(E)}}if(Z){if(S.info(I.cyan(`\u{1F680} Direct Build Mode: Executing on ${e.sshHost||"local"}...`)),i&&!o){let R=process.argv.slice(3).join(" ");await $.post("/builds",{projectId:i,buildId:n,platform:e.platform,status:"building",branch:g,version:h,runtimeVersion:b,...Qt(e),summary:H,startTime:r,buildType:w,buildProfile:y,buildArgs:R,framework:e.framework,simulator:!!e.simulator,developmentClient:!!e.developmentClient,...Bs(e,n,y,f)}),js(e)}if(e.sshHost&&e.platform==="ios")await Uo(e,n,c,i),s=!1,e.autoSubmit&&await br(i,n,e,y);else{let R=await Fi({...e,interactive:!!e.local},n,c,i,{branch:g,version:h,runtimeVersion:b,summary:H,buildType:w});await oe(R),s=!1}return}if(Ee&&(S.info(I.blue("\u{1F6F0}\uFE0F Cloud Initiator Mode: Preparing orchestration...")),!e.dryRun)){e.quiet||t.start("Zipping and uploading local source...");let R=await $.post("/builds/source-upload-url",{projectId:i,buildId:n});if(R.data.status!=="success")throw t.stop("Failed to get upload URL."),new Error("Failed to get source upload URL from API");Sr("SOURCE_UPLOAD",R.data.uploadUrl);let T=new Ds,E=Ou(T,process.cwd(),e.platform),A=T.toBuffer();if(!e.quiet){let v=E.skipped.length>0?` Skipped: ${E.skipped.join(", ")}.`:"";t.message(`Prepared source (${E.files} files).${v}`)}e.quiet||t.message(`Uploading source (${(A.length/1024/1024).toFixed(1)} MB)...`);let D=!1;for(let v=1;v<=3;v++)try{await Kn.put(R.data.uploadUrl,A,{headers:{"Content-Type":"application/zip"},maxBodyLength:1/0,maxContentLength:1/0,timeout:12e4}),D=!0;break}catch(G){if(v<3)t.message(`Upload attempt ${v} failed (${G.code||G.message}), retrying...`),await new Promise(U=>setTimeout(U,2e3*v));else throw G}if(e.quiet||t.stop("Source uploaded"),i){let v=process.argv.slice(3).join(" ");s=e.platform==="android",await $.post("/builds",{projectId:i,buildId:n,platform:e.platform,status:"pending",branch:g,version:h,runtimeVersion:b,...Qt(e),summary:H,startTime:r,buildType:w,buildProfile:y,buildArgs:v,framework:e.framework,simulator:!!e.simulator,developmentClient:!!e.developmentClient,...Bs(e,n,y,f)}),s=e.platform==="android",S.info(I.green("\u2713 Cloud build registered.")),js(e)}e.platform==="android"&&(await xo(e,n,c,i,e.preBuild),s=!1),e.quiet||S.info(I.cyan("\u{1F4E1} Connecting to build stream...")),await Qu(i,n,e),e.maestro&&await Fs(i,n,e,y),e.autoSubmit&&await br(i,n,e,y);return}}catch(d){let c=d.message||"Build failed";d.response?.data?.message?c=d.response.data.message:d.message.includes("status code 402")?c="Insufficient wallet balance. Please add credits in the Dashboard.":d.message.includes("status code 403")&&(c="Monthly build quota exceeded. Upgrade your plan in the Dashboard."),i&&s&&await a(c),S.error(I.red(`\u2717 Build failed: ${c}`)),process.exit(1)}};async function Fs(e,t,n,i){S.info(I.cyan(`
+\u{1F3BC} Queuing managed Maestro test...`)),await er({projectId:e,buildId:t,platform:n.platform,profile:i,maestroFlows:n.maestroFlows,maestroDevice:n.maestroDevice,maestroRetries:n.maestroRetries,maestroRecord:n.maestroRecord,maestroUseBuildSource:n.maestroUseBuildSource,maestroEnv:n.maestroEnv,quiet:n.quiet})}async function br(e,t,n,i){if(!e){S.error(I.red("Auto-submit requires a linked Mach project. Run `mach link` or pass --project-id.")),process.exitCode=1;return}S.info(I.cyan(`
+Auto-submit: submitting the successful build...`));try{let r=await Xu(e,t);if(r?.autoSubmit){let o=r.submissionId?`${He}/submissions/${r.submissionId}?projectId=${encodeURIComponent(e)}`:void 0,s=String(r.status||"").toLowerCase(),a=String(r.autoSubmitStatus||"").toLowerCase(),l=r.submissionId||["success","completed","succeeded"].includes(s)||["starting","submitted","failed","skipped"].includes(a);if(r.submissionId?(S.info(I.green(`Auto-submit is already queued by Mach backend: ${r.submissionId}`)),S.info(I.dim(`Dashboard: ${o}`))):r.autoSubmitStatus==="failed"?S.warn(I.yellow(`Backend auto-submit failed: ${r.autoSubmitError||"Unknown error"}`)):l&&S.info(I.green("Auto-submit is registered with Mach backend; skipping local duplicate submit.")),l){nt(n,{status:r.autoSubmitStatus||"pending",projectId:e,submitId:r.submissionId,platform:n.platform,profile:i,buildId:t,dashboardUrl:o});return}}await Vn({platform:n.platform,profile:i,buildProfile:i,buildId:t,projectId:e,yes:n.yes,quiet:n.quiet,track:n.submitTrack,releaseStatus:n.submitReleaseStatus,rollout:n.submitRollout,changesNotSentForReview:n.submitChangesNotSentForReview,credentialId:n.submitCredentialId,packageName:n.androidPackage,jsonOutput:n.submitJsonOutput,submitArgs:Js(n,t,i)})}catch(r){S.error(I.red(`Auto-submit failed: ${r.message||r}`)),process.exitCode=1}}function Js(e,t,n){let i=["--platform",e.platform,"--profile",n,"--build-id",t];return e.submitTrack&&i.push("--track",String(e.submitTrack)),e.submitReleaseStatus&&i.push("--release-status",String(e.submitReleaseStatus)),e.submitRollout!==void 0&&i.push("--rollout",String(e.submitRollout)),e.submitChangesNotSentForReview&&i.push("--changes-not-sent-for-review"),e.submitCredentialId&&i.push("--credential-id",e.submitCredentialId),e.platform==="android"&&e.androidPackage&&i.push("--package-name",e.androidPackage),e.platform==="ios"&&e.iosBundleIdentifier&&i.push("--bundle-id",e.iosBundleIdentifier),e.submitJsonOutput&&i.push("--json-output",e.submitJsonOutput),i.join(" ")}async function Xu(e,t){try{let i=(await $.get(`/builds/${e}/${t}`)).data?.build;if(i?.autoSubmit)return i}catch(n){S.warn(I.dim(`Could not check backend auto-submit status: ${n.message}`))}return null}function Ys(e){for(let t of Object.keys(e))e[t]===void 0&&delete e[t];return e}function Zu(e,t,n){let i=n?.submit?.[t]?.android||{},r=n?.submit?.production?.android||{},o=e.submitTrack||i.track||r.track,s=e.submitReleaseStatus||i.releaseStatus||r.releaseStatus,a=e.submitRollout??i.rollout??i.userFraction??i.rolloutFraction??r.rollout??r.userFraction??r.rolloutFraction,l=e.submitChangesNotSentForReview??i.changesNotSentForReview??i.changes_not_sent_for_review??r.changesNotSentForReview??r.changes_not_sent_for_review;return Ys({track:o,releaseStatus:s,rollout:a,changesNotSentForReview:l===void 0?!1:l===!0||l==="true"||l==="1"})}function Bs(e,t,n,i){if(!e.autoSubmit||e.dryRun)return{};let r=e.platform==="android"?Zu(e,n,i):{};return{autoSubmit:!0,autoSubmitStatus:"pending",autoSubmitOptions:Ys({platform:e.platform,profile:n,buildId:t,latest:!1,...r,credentialId:e.submitCredentialId,packageName:e.platform==="android"?e.androidPackage:void 0,bundleId:e.platform==="ios"?e.iosBundleIdentifier:void 0,submitArgs:Js(e,t,n)})}}function js(e){!e.autoSubmit||e.dryRun||e.quiet||(S.info(I.green("\u2713 Auto-submit has been registered with the build.")),S.info(I.dim("  You can close this terminal; submission will start after build success.")))}function Hs(e){return`${He}/build/${e}`}function tn(e,t){if(!e.jsonOutput)return;let n=ae.resolve(e.jsonOutput),i={...t,url:t.url||Hs(t.buildId),dashboardUrl:t.dashboardUrl||Hs(t.buildId),updatedAt:new Date().toISOString()};try{let r=ae.dirname(n);r&&r!=="."&&ee.mkdirSync(r,{recursive:!0}),ee.writeFileSync(n,JSON.stringify(i,null,2))}catch(r){S.warn(I.yellow(`Could not write build metadata JSON: ${r.message}`))}}async function Qu(e,t,n){let r=Ar(),o="pending",s=0,a=0;for(n.quiet||r.start("Connecting to build stream...");;){try{let d=(await $.get(`/builds/${e}/${t}`)).data.build;if(d){o=d.status;let c=String(d.pipelineLaunchState||"").toLowerCase(),u=Number(d.pipelineLaunchClaimedAt),f=Number(d.pipelineLaunchDispatchStartedAt),p=c==="claimed"&&Number.isFinite(u)&&u>0&&Date.now()-u>=3e5,g=c==="dispatching"&&Number.isFinite(f)&&f>0&&Date.now()-f>=3e5;if(["","created","pending","queued"].includes(String(o||"").toLowerCase())&&(c==="retryable_failed"||c==="ambiguous"||p||g)){let y=g||c==="ambiguous"?"ambiguous":"retryable_failed",b=d.pipelineLaunchError||(y==="ambiguous"?"The iOS runner launch outcome is unknown. MACH blocked automatic relaunch to avoid a duplicate pipeline.":p?"The iOS runner was never dispatched before its launch lease expired. Retry this build.":"The iOS runner could not be launched. Retry this build.");n.quiet||r.stop("Build runner launch failed."),tn(n,{status:"failed",projectId:e,buildId:t,platform:n.platform,profile:d.buildProfile,buildType:d.buildType,developmentClient:!!d.developmentClient,version:d.version,runtimeVersion:d.runtimeVersion,buildNumber:d.buildNumber,versionCode:d.versionCode,summary:d.summary,pipelineLaunchState:y,error:b,artifacts:d.artifacts||[]}),S.error(I.red(`
+\u2717 Build runner launch failed: ${b}`)),process.exit(1)}if(o==="building")n.quiet||r.message("Build in progress...");else if(o==="failed"||o==="error"||o==="cancelled"||o==="canceled"){let y=o==="cancelled"||o==="canceled";n.quiet||r.stop(y?"Build cancelled.":"Build failed.");let b=d.error||(y?"Build was cancelled.":"Unknown error");tn(n,{status:o,projectId:e,buildId:t,platform:n.platform,profile:d.buildProfile,buildType:d.buildType,developmentClient:!!d.developmentClient,version:d.version,runtimeVersion:d.runtimeVersion,buildNumber:d.buildNumber,versionCode:d.versionCode,summary:d.summary,error:b,artifacts:d.artifacts||[]}),S.error(I.red(`
+\u2717 ${y?"Build cancelled":"Build failed"}: ${b}`)),process.exit(1)}else if(o==="completed"||o==="success"){n.quiet||r.stop("Build successful!"),tn(n,{status:o,projectId:e,buildId:t,platform:n.platform,profile:d.buildProfile,buildType:d.buildType,developmentClient:!!d.developmentClient,version:d.version,runtimeVersion:d.runtimeVersion,buildNumber:d.buildNumber,versionCode:d.versionCode,summary:d.summary,artifacts:d.artifacts||[]}),S.success(I.green(`
+\u2713 Build completed successfully!`));try{n.quiet||(S.info(I.magenta(`
+\u{1F4F1} Installation Hub:`)),S.info(I.dim("  - View & Install Build: ")+I.white.underline(`${He}/build/${t}`)))}catch{}return}else if(o!=="pending"){n.quiet||r.stop(`Build status: ${o}`);return}}try{let u=(await $.get(`/builds/${e}/${t}/logs`)).data;if(u&&typeof u=="string"&&!n.quiet){let f=u.split(`
+`);if(f.length>s){for(let p=s;p<f.length;p++)f[p].trim()&&console.log(I.dim(`  ${f[p]}`));s=f.length}}}catch{}a=0}catch{a++,a>10&&(r.stop("Connection lost."),S.error(I.red(`
+\u2717 Lost connection to Dashboard API.`)),process.exit(1))}await new Promise(l=>setTimeout(l,3e3))}}import*as ti from"http";import*as ia from"net";import{execFile as ep,execFileSync as st,execSync as Zn,spawn as Xs}from"child_process";import ne from"chalk";import{log as j}from"@clack/prompts";import tp from"axios";import Y from"fs";import ke from"os";import F from"path";var Je=7070,on=`http://127.0.0.1:${Je}`,Pt="com.radhya.mach.agent",Dt="Mach Agent",Ct=`${Pt}.service`,np=5e3,ip=3e3,Yn=null,Xn=null,Ne=()=>F.join(ke.homedir(),m.configDir),ra=()=>F.join(ke.homedir(),"Library","LaunchAgents"),Qn=()=>F.join(ra(),`${Pt}.plist`),oa=()=>F.join(ke.homedir(),".config","systemd","user"),Ir=()=>F.join(oa(),Ct),wr=()=>F.join(Ne(),"agent.cmd");function vr(){return`gui/${process.getuid?.()||Number(Zn("id -u").toString().trim())}`}function sa(e){return e.replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;").replace(/"/g,"&quot;").replace(/'/g,"&apos;")}function rn(e){return`<string>${sa(e)}</string>`}function _r(){let e=process.argv[1]?Y.realpathSync(process.argv[1]):"";if(!e||!Y.existsSync(e))throw new Error("Could not resolve the current Mach CLI entrypoint.");return[process.execPath,e,"agent","run"]}function $r(){let e=aa(),t=process.platform==="win32"?[process.env.SystemRoot?F.join(process.env.SystemRoot,"System32"):void 0,process.env.SystemRoot]:["/opt/homebrew/bin","/usr/local/bin","/usr/bin","/bin","/usr/sbin","/sbin"],n={HOME:ke.homedir(),PATH:[process.env.PATH,...e.flatMap(i=>[F.join(i,"platform-tools"),F.join(i,"emulator"),F.join(i,"cmdline-tools","latest","bin"),F.join(i,"tools","bin")]),...t].filter(Boolean).join(F.delimiter)};for(let i of["ANDROID_HOME","ANDROID_SDK_ROOT","JAVA_HOME","SHELL"])process.env[i]&&(n[i]=process.env[i]);return n}function aa(){let e=[process.env.ANDROID_HOME,process.env.ANDROID_SDK_ROOT];if(process.platform==="darwin")e.push(F.join(ke.homedir(),"Library","Android","sdk"));else if(process.platform==="linux")e.push(F.join(ke.homedir(),"Android","Sdk"),F.join(ke.homedir(),"Android","sdk"),"/opt/android-sdk","/usr/lib/android-sdk");else if(process.platform==="win32"){let t=process.env.LOCALAPPDATA,n=process.env.USERPROFILE||ke.homedir();e.push(t?F.join(t,"Android","Sdk"):void 0,F.join(n,"AppData","Local","Android","Sdk"))}return Array.from(new Set(e.filter(t=>!!t)))}function rp(e){return process.platform==="win32"&&!e.toLowerCase().endsWith(".exe")?`${e}.exe`:e}function la(e,t){let n=rp(e);for(let i of aa()){let r=F.join(i,t,n);if(Y.existsSync(r))return r}return n}function da(){return la("adb","platform-tools")}function ca(){return la("emulator","emulator")}function Er(e){return`"${e.replace(/\\/g,"\\\\").replace(/"/g,'\\"').replace(/%/g,"%%")}"`}function op(){if(process.platform!=="linux")throw new Error("Linux service install requires Linux.");Y.mkdirSync(Ne(),{recursive:!0}),Y.mkdirSync(oa(),{recursive:!0});let e=_r(),t=$r(),n=Object.entries(t).map(([r,o])=>`Environment=${Er(`${r}=${o}`)}`).join(`
 `),i=`[Unit]
 Description=Mach local device agent
 After=default.target
 
 [Service]
 Type=simple
-ExecStart=${e.map(Do).join(" ")}
-WorkingDirectory=${Do(dt.homedir())}
+ExecStart=${e.map(Er).join(" ")}
+WorkingDirectory=${Er(ke.homedir())}
 ${n}
 Restart=on-failure
 RestartSec=5
@@ -1757,20 +1583,20 @@ StandardError=append:%h/${m.configDir}/agent.error.log
 
 [Install]
 WantedBy=default.target
-`;return me.writeFileSync(ko(),i),ko()}function Ht(e,t={}){try{return Vt("systemctl",["--user",...e],{stdio:t.ignoreError?"ignore":"pipe"}),!0}catch(n){if(t.ignoreError)return!1;throw n}}function lg(){if(process.platform!=="win32")throw new Error("Windows agent script requires Windows.");me.mkdirSync(ct(),{recursive:!0});let e=Lo(),[t,n,...i]=To(),r=ee.join(ct(),"agent.log"),o=ee.join(ct(),"agent.error.log"),s=Object.entries(e).map(([d,c])=>`set "${d}=${c}"`).join(`\r
+`;return Y.writeFileSync(Ir(),i),Ir()}function ot(e,t={}){try{return st("systemctl",["--user",...e],{stdio:t.ignoreError?"ignore":"pipe"}),!0}catch(n){if(t.ignoreError)return!1;throw n}}function sp(){if(process.platform!=="win32")throw new Error("Windows agent script requires Windows.");Y.mkdirSync(Ne(),{recursive:!0});let e=$r(),[t,n,...i]=_r(),r=F.join(Ne(),"agent.log"),o=F.join(Ne(),"agent.error.log"),s=Object.entries(e).map(([d,c])=>`set "${d}=${c}"`).join(`\r
 `),a=i.map(d=>`"${d.replace(/"/g,'\\"')}"`).join(" "),l=`@echo off\r
 ${s}\r
-cd /d "${dt.homedir()}"\r
+cd /d "${ke.homedir()}"\r
 "${t}" "${n}" ${a} >> "${r}" 2>> "${o}"\r
-`;return me.writeFileSync(No(),l),No()}function oi(e,t={}){try{return Vt("schtasks.exe",e,{stdio:t.ignoreError?"ignore":"pipe"}),!0}catch(n){if(t.ignoreError)return!1;throw n}}function dg(){if(process.platform!=="darwin")throw new Error("Background agent install currently supports macOS only.");me.mkdirSync(ct(),{recursive:!0}),me.mkdirSync(Ll(),{recursive:!0});let e=To(),t=Lo(),n=ee.join(ct(),"agent.log"),i=ee.join(ct(),"agent.error.log"),r=Object.entries(t).map(([a,l])=>`      <key>${Ul(a)}</key>
-      ${ii(l)}`).join(`
-`),o=e.map(a=>`      ${ii(a)}`).join(`
+`;return Y.writeFileSync(wr(),l),wr()}function sn(e,t={}){try{return st("schtasks.exe",e,{stdio:t.ignoreError?"ignore":"pipe"}),!0}catch(n){if(t.ignoreError)return!1;throw n}}function ap(){if(process.platform!=="darwin")throw new Error("Background agent install currently supports macOS only.");Y.mkdirSync(Ne(),{recursive:!0}),Y.mkdirSync(ra(),{recursive:!0});let e=_r(),t=$r(),n=F.join(Ne(),"agent.log"),i=F.join(Ne(),"agent.error.log"),r=Object.entries(t).map(([a,l])=>`      <key>${sa(a)}</key>
+      ${rn(l)}`).join(`
+`),o=e.map(a=>`      ${rn(a)}`).join(`
 `),s=`<?xml version="1.0" encoding="UTF-8"?>
 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
 <plist version="1.0">
 <dict>
   <key>Label</key>
-  ${ii(In)}
+  ${rn(Pt)}
   <key>ProgramArguments</key>
   <array>
 ${o}
@@ -1782,181 +1608,26 @@ ${r}
   <key>RunAtLoad</key>
   <true/>
   <key>StandardOutPath</key>
-  ${ii(n)}
+  ${rn(n)}
   <key>StandardErrorPath</key>
-  ${ii(i)}
-</dict>
-</plist>
-`;return me.writeFileSync(Xi(),s),Xi()}function jt(e,t={}){try{return Vt("launchctl",e,{stdio:t.ignoreError?"ignore":"pipe"}),!0}catch(n){if(t.ignoreError)return!1;throw n}}function cg(e){return new Promise(t=>setTimeout(t,e))}function Zi(e,t,n=rg){return new Promise((i,r)=>{ng(e,t,{timeout:n,maxBuffer:10*1024*1024,windowsHide:!0},(o,s,a)=>{if(o){let l=a?.toString().trim();r(new Error(l||o.message));return}i(s?.toString()||"")})})}async function Vl(){if(typeof fetch=="function"){let e=new AbortController,t=setTimeout(()=>e.abort(),3e3);try{return(await fetch(`${ri}/health`,{signal:e.signal})).ok}catch{return!1}finally{clearTimeout(t)}}return new Promise(e=>{let t=!1,n=r=>{t||(t=!0,e(r))},i=Qi.get(`${ri}/health`,r=>{r.resume(),n(r.statusCode===200)});i.setTimeout(3e3,()=>{i.destroy(),n(!1)}),i.on("error",()=>n(!1))})}async function ug(e=8e3){let t=Date.now()+e;for(;Date.now()<t;){if(await Vl())return!0;await cg(250)}return!1}async function Gl(){return new Promise(e=>{let t=!1,n=Tl.createConnection({host:"127.0.0.1",port:Ot}),i=r=>{t||(t=!0,n.destroy(),e(r))};n.setTimeout(1e3),n.once("connect",()=>i(!0)),n.once("timeout",()=>i(!1)),n.once("error",()=>i(!1))})}async function Mo(){if(await ug()){te.success(Ae.green("Mach agent installed and started."));return}if(await Gl()){te.warn(`Mach agent service is installed, but port ${Ot} is held by a process that is not answering /health.`),te.info(Ae.dim(`Run \`${m.nameLower} agent stop\`, close any foreground \`${m.nameLower} agent\` terminal, then run \`${m.nameLower} agent install\` again.`));return}te.warn(`Mach agent service is installed, but it did not start listening on ${ri}.`)}async function pg(){let e=dg(),t=xo();jt(["bootout",t,e],{ignoreError:!0}),jt(["bootstrap",t,e],{ignoreError:!0})||jt(["load","-w",e]),jt(["enable",`${t}/${In}`],{ignoreError:!0}),jt(["kickstart","-k",`${t}/${In}`],{ignoreError:!0}),await Mo(),te.info(Ae.dim(`It will start automatically when you log in. Plist: ${e}`)),te.info(Ae.dim(`Logs: ${ee.join(ct(),"agent.log")}`))}async function zl(){let e=Xi(),t=xo();jt(["bootout",t,e],{ignoreError:!0})||jt(["unload","-w",e],{ignoreError:!0})?te.success(Ae.green("Mach agent service stopped.")):te.warn("Mach agent service was not loaded.")}async function fg(){await zl();let e=Xi();me.existsSync(e)&&me.unlinkSync(e),te.success(Ae.green("Mach agent service uninstalled."))}async function mg(){let e=ag();Ht(["daemon-reload"]),Ht(["enable","--now",wn]),await Mo(),te.info(Ae.dim(`It will start automatically when you log in. Service: ${e}`)),te.info(Ae.dim(`Logs: ${ee.join(ct(),"agent.log")}`))}async function gg(){Ht(["stop",wn],{ignoreError:!0})?te.success(Ae.green("Mach agent service stopped.")):te.warn("Mach agent service was not running.")}async function hg(){Ht(["disable","--now",wn],{ignoreError:!0}),Ht(["daemon-reload"],{ignoreError:!0});let e=ko();me.existsSync(e)&&me.unlinkSync(e),Ht(["daemon-reload"],{ignoreError:!0}),te.success(Ae.green("Mach agent service uninstalled."))}async function yg(){let e=lg();oi(["/Create","/TN",En,"/SC","ONLOGON","/TR",`"${e}"`,"/RL","LIMITED","/F"]),oi(["/Run","/TN",En],{ignoreError:!0}),await Mo(),te.info(Ae.dim(`It will start automatically when you log in. Task: ${En}`)),te.info(Ae.dim(`Logs: ${ee.join(ct(),"agent.log")}`))}async function Kl(){oi(["/End","/TN",En],{ignoreError:!0})?te.success(Ae.green("Mach agent task stopped.")):te.warn("Mach agent task was not running.")}async function bg(){await Kl(),oi(["/Delete","/TN",En,"/F"],{ignoreError:!0});let e=No();me.existsSync(e)&&me.unlinkSync(e),te.success(Ae.green("Mach agent task uninstalled."))}async function Ol(){if(process.platform==="darwin")return pg();if(process.platform==="linux")return mg();if(process.platform==="win32")return yg();throw new Error(`Background agent install is not supported on ${process.platform}.`)}async function Dl(){if(process.platform==="darwin")return zl();if(process.platform==="linux")return gg();if(process.platform==="win32")return Kl();te.warn(`Background agent service control is not supported on ${process.platform}.`)}async function Sg(){if(process.platform==="darwin")return fg();if(process.platform==="linux")return hg();if(process.platform==="win32")return bg();te.warn(`Background agent uninstall is not supported on ${process.platform}.`)}async function Ag(){let e=await Vl(),t=e?!0:await Gl();if(e?te.success(Ae.green(`Mach agent is online at ${ri}`)):t?te.warn(`Mach agent port is open, but /health did not respond. Run \`${m.nameLower} agent restart\` if the dashboard still shows offline.`):te.warn(`Mach agent is not responding at ${ri}`),process.platform==="darwin"){let n=jt(["print",`${xo()}/${In}`],{ignoreError:!0});te.info(Ae.dim(`Login service: ${n?"installed/loaded":"not loaded"}`))}else if(process.platform==="linux"){let n=Ht(["is-enabled",wn],{ignoreError:!0}),i=Ht(["is-active",wn],{ignoreError:!0});te.info(Ae.dim(`Login service: ${n?"enabled":"not enabled"} / ${i?"active":"inactive"}`))}else if(process.platform==="win32"){let n=oi(["/Query","/TN",En],{ignoreError:!0});te.info(Ae.dim(`Login task: ${n?"installed":"not installed"}`))}}async function Eg(){let e=[];try{(await Zi(jl(),["devices","-l"])).split(`
-`).forEach(n=>{if(n.includes("List of devices")||!n.trim())return;let i=n.split(/\s+/);if(i.length<2||i[1]!=="device")return;let r=i[0],o=n.match(/model:([^\s]+)/);e.push({id:r,platform:"android",type:r.startsWith("emulator-")?"emulator":"physical",name:o?o[1].replace(/_/g," "):r,status:"online",details:n.trim()})})}catch{}try{let n=(await Zi(Hl(),["-list-avds"])).split(`
-`).filter(r=>!!r.trim()),i=e.some(r=>r.platform==="android"&&r.id.startsWith("emulator-"));n.forEach(r=>{i||e.push({id:r,platform:"android",type:"emulator",name:r.replace(/_/g," "),status:"offline",details:`Android Virtual Device: ${r}`})})}catch{}return e}async function Wl(){if(process.platform!=="darwin")return[];try{let e=await Zi("/usr/bin/xcrun",["simctl","list","devices","--json"]),t=JSON.parse(e),n=[];return Object.entries(t.devices||{}).forEach(([i,r])=>{r.forEach(o=>{o.isAvailable&&n.push({id:o.udid,platform:"ios",type:"simulator",name:o.name,status:o.state?.toLowerCase()==="booted"?"online":"offline",runtime:i,details:`${o.name} (${i})`})})}),n}catch{return[]}}async function Ig(){if(process.platform!=="darwin")return[];try{let e=await Zi("/usr/bin/xcrun",["devicectl","list","devices","--json-output","-"]);return(JSON.parse(e).result?.devices||[]).filter(n=>{let i=n.connectionProperties?.transportType;return i==="wired"||i==="localNetwork"}).map(n=>{let i=n.connectionProperties?.transportType,r=n.deviceProperties?.name||"iPhone";return{id:n.identifier,platform:"ios",type:"physical",name:r,status:"online",details:`${r} (${n.model?.name||n.hardwareModel||""}) - ${i}`}})}catch{return[]}}async function wg(e){let t=await Wl(),n=t.find(r=>r.id===e);if(n)return n;let i=t.filter(r=>r.status==="online");return i.length===1?i[0]:null}async function vg(){let[e,t,n]=await Promise.all([Eg(),Wl(),Ig()]);return[...e,...t,...n]}async function $g(){let e=Date.now();return Ji&&e-Ji.updatedAt<og?Ji.targets:(qi||(qi=vg().then(t=>(Ji={targets:t,updatedAt:Date.now()},t)).finally(()=>{qi=null})),qi)}async function kl(e){let t=[];for await(let n of e)t.push(Buffer.isBuffer(n)?n:Buffer.from(n));return t.length===0?{}:JSON.parse(Buffer.concat(t).toString("utf-8"))}async function _g(e,t){let n=await ig({method:"GET",url:e,responseType:"stream",timeout:12e4}),i=me.createWriteStream(t);n.data.pipe(i),await new Promise((r,o)=>{i.on("finish",r),i.on("error",o)})}function Nl(e,t){let n=e?.stderr?.toString?.().trim();if(n)return n;let i=e?.stdout?.toString?.().trim();return i||e?.message||t}function Pg(e,t){return Vt("/usr/libexec/PlistBuddy",["-c",`Print :${t}`,e],{encoding:"utf-8"}).trim()}function Rg(e){let t=ee.join(e,"Info.plist");if(!me.existsSync(t))throw new Error(`Could not validate iOS app executable: ${t} not found.`);let n=Pg(t,"CFBundleExecutable"),i=ee.join(e,n);if(!me.existsSync(i))throw new Error(`Could not validate iOS app executable: ${i} not found.`);return i}function Cg(){return process.arch==="arm64"?"arm64":"x86_64"}function Og(e){return me.existsSync(e)?me.readdirSync(e).map(t=>ee.join(e,t)).filter(t=>t.endsWith(".app")&&me.statSync(t).isDirectory()):[]}function xl(e,t){let n=Og(e);if(n.length===1)return n[0];if(n.length>1)throw new Error(`Multiple .app bundles found in ${t}: ${n.map(i=>ee.basename(i)).join(", ")}. Mach cannot safely choose which app to install.`);return""}function Dg(e){let t=Rg(e),n=Cg(),i="",r="";try{i=Vt("lipo",["-info",t],{encoding:"utf-8"}).trim()}catch(o){throw new Error(`Could not inspect iOS simulator app architecture for ${ee.basename(e)}: ${o.message}`)}if(!new RegExp(`\\b${n}\\b`).test(i))throw new Error(`This iOS simulator artifact cannot be installed because ${ee.basename(e)} does not include the ${n} simulator architecture. lipo output: ${i}. Rebuild the app with the latest Mach CLI and make sure the profile is a simulator build.`);try{r=Vt("/usr/bin/xcrun",["vtool","-show-build",t],{encoding:"utf-8"}).trim()}catch(o){throw new Error(`Could not inspect iOS simulator app platform for ${ee.basename(e)}: ${o.message}`)}if(!/\bplatform\s+IOSSIMULATOR\b/i.test(r))throw new Error(`This iOS simulator artifact cannot be installed because ${ee.basename(e)} was built for the wrong Apple platform. A simulator artifact must contain platform IOSSIMULATOR. vtool output: ${r}. Rebuild the app with the latest Mach CLI.`)}async function kg(e,t,n){let i=n||(t.toLowerCase().includes(".apk")?"android":"ios"),r=t.toLowerCase().includes(".ipa"),o=me.mkdtempSync(ee.join(dt.tmpdir(),`${Ot}-install-`)),s=ee.join(o,i==="android"?"install.apk":r?"install.ipa":"install.zip");try{if(await _g(t,s),i==="android"){Vt(jl(),["-s",e,"install","-r",s],{stdio:"pipe"});return}if(process.platform!=="darwin")throw new Error("iOS local install requires macOS.");Yi(`unzip -o ${JSON.stringify(s)} -d ${JSON.stringify(o)}`,{stdio:"pipe"});let a=ee.join(o,"Payload"),l=me.existsSync(a),d=r||l,c="";if(d?c=xl(a,"Payload"):c=xl(o,"the simulator artifact"),!c)throw new Error(`No .app bundle found inside the ${r?"IPA":"archive"}.`);let u=d?null:await wg(e);if(u){try{Dg(c),Vt("/usr/bin/xcrun",["simctl","install",u.id,c],{stdio:"pipe"})}catch(f){throw new Error(Nl(f,"iOS Simulator install failed."))}return}if(!d)throw new Error("Selected iOS Simulator was not found. Refresh Install Hub devices or boot one simulator and try again.");try{Yi(`/usr/bin/xcrun devicectl device install app --device ${JSON.stringify(e)} ${JSON.stringify(c)}`,{stdio:"pipe"})}catch(f){throw new Error(Nl(f,"iOS device install failed."))}}finally{me.rmSync(o,{recursive:!0,force:!0})}}function Ng(e,t){if(!e)throw new Error("Device id is required.");if(t==="ios"){if(process.platform!=="darwin")throw new Error("iOS Simulator launch requires macOS.");return Yi(`/usr/bin/xcrun simctl boot ${JSON.stringify(e)}`,{stdio:"pipe"}),Cl("open",["-a","Simulator"],{detached:!0,stdio:"ignore"}).unref(),"Simulator booting..."}if(t==="android")return Cl(Hl(),["-avd",e],{detached:!0,stdio:"ignore",windowsHide:!0}).unref(),"Emulator booting in background...";throw new Error("Invalid platform.")}async function xg(){process.platform!=="darwin"&&te.warn("Running on non-macOS \u2014 iOS discovery unavailable, Android only.");let e=Qi.createServer((i,r)=>{if(r.setHeader("Access-Control-Allow-Origin","*"),r.setHeader("Access-Control-Allow-Methods","GET, POST, OPTIONS"),r.setHeader("Access-Control-Allow-Headers","Content-Type, Authorization"),i.method==="OPTIONS"){r.writeHead(204),r.end();return}let o=new URL(i.url||"/",`http://localhost:${Ot}`);if(i.method==="GET"&&o.pathname==="/local/devices"){$g().then(s=>{r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",targets:s}))}).catch(s=>{r.writeHead(500,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:s.message}))});return}if(i.method==="GET"&&o.pathname==="/health"){r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",service:"mach-agent",port:Ot,platform:process.platform}));return}if(i.method==="POST"&&o.pathname==="/install-local"){t(i,r);return}if(i.method==="POST"&&o.pathname==="/local/boot"){n(i,r);return}r.writeHead(404),r.end()}),t=async(i,r)=>{try{let{deviceId:o,artifactUrl:s,platform:a}=await kl(i);if(!o||!s){r.writeHead(400,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:"deviceId and artifactUrl are required"}));return}await kg(o,s,a),r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",message:`Installed on ${o}`}))}catch(o){r.writeHead(500,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:o.message||"Local install failed"}))}},n=async(i,r)=>{try{let{id:o,platform:s}=await kl(i),a=Ng(o,s);r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",message:a}))}catch(o){r.writeHead(500,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:o.message||"Local device launch failed"}))}};e.listen(Ot,"127.0.0.1",()=>{te.success(Ae.green(`Local device agent running on http://localhost:${Ot}`)),te.info(Ae.dim("Keep this running while using the Install Hub on the dashboard.")),te.info(Ae.dim("Press Ctrl+C to stop."))}),e.on("error",i=>{i.code==="EADDRINUSE"?te.error(`Port ${Ot} is already in use \u2014 agent may already be running.`):te.error(`Agent error: ${i.message}`),process.exit(1)}),await new Promise(()=>{})}async function Jl(e="start"){let t=String(e||"start").toLowerCase();if(t==="start"||t==="run"){await xg();return}if(t==="install"){await Ol();return}if(t==="status"){await Ag();return}if(t==="stop"){await Dl();return}if(t==="uninstall"){await Sg();return}if(t==="restart"){await Dl(),await Ol();return}te.error(`Unknown agent action: ${e}`),te.info(Ae.dim(`Use: ${m.nameLower} agent start | install | status | restart | stop | uninstall`)),process.exit(1)}import{createRequire as Tg}from"module";var Lg=Tg(import.meta.url),Mg=Lg("../package.json"),St=String(Mg.version||"0.0.0");import{spinner as er}from"@clack/prompts";import pe from"chalk";import{spawnSync as Xg}from"child_process";import we from"fs";import je from"path";import ie from"fs";import ge from"path";var Ug={expo:["src/app/_layout.tsx","src/app/_layout.ts","src/app/_layout.jsx","src/app/_layout.js","app/_layout.tsx","app/_layout.ts","app/_layout.jsx","app/_layout.js","src/App.tsx","src/App.ts","src/App.jsx","src/App.js","App.tsx","App.ts","App.jsx","App.js"],"react-native":["index.ts","index.tsx","index.js","index.jsx","src/index.ts","src/index.tsx","src/index.js","src/index.jsx","App.tsx","App.ts","App.jsx","App.js","src/App.tsx","src/App.ts","src/App.jsx","src/App.js"]};function We(e,t){return ge.relative(e,t).split(ge.sep).join("/")}function Fg(e,t){return t.find(n=>ie.existsSync(ge.join(e,n)))}function Bg(e,t){return t.split(ge.sep).join("/").startsWith("src/")?ge.join(e,"src"):e}function jg(e){return e.endsWith(".ts")||e.endsWith(".tsx")}function Hg(e,t){let n=t.replace(/\.(?:tsx?|jsx?)$/,""),i=ge.relative(ge.dirname(e),n).split(ge.sep).join("/");return i.startsWith(".")||(i=`./${i}`),i}function Vg(e,t){let n=ie.readFileSync(e,"utf8");if(n.includes("MACH Push setup")||/(?:from\s+)?['"][^'"]*mach-push['"]/.test(n))return!1;let i=Hg(e,t);return ie.writeFileSync(e,`import '${i}'; // MACH Push setup
-${n}`),!0}function Gg(e,t){return`// Generated by \`mach push setup\`. Re-run the command to refresh.
-// Public client configuration only. Provider credentials are never written here.
-${t?`import type { MachPushConfig } from '@radhya/mach-push-react-native';
-`:""}
-
-export const machPushConfig${t?": MachPushConfig":""} = ${JSON.stringify(e,null,2)};
-`}function zg(e,t){return t?`/**
- * MACH Push application hooks.
- *
- * This file belongs to your app and is never overwritten by
- * \`mach push setup\`. Customize these callbacks whenever you need to route
- * notification taps, update application state, or associate a user.
- */
-import { Platform } from 'react-native';
-import {
-  setupMachPush,
-  type MachPushNotification,
-  type MachPushPermissionStatus,
-  type MachPushRegistration,
-} from '@radhya/mach-push-react-native';
-import { machPushConfig } from '${e}';
-
-export function onMachPushNotificationReceived(
-  _notification: MachPushNotification,
-) {
-  // Notifications are displayed automatically. Add foreground behavior here.
-}
-
-export function onMachPushNotificationOpened(
-  _notification: MachPushNotification,
-) {
-  // Read _notification.data and navigate to the appropriate screen here.
-}
-
-export function onMachPushRegistered(
-  _registration: MachPushRegistration,
-) {
-  // The installation is now ready to receive MACH notifications.
-}
-
-export function onMachPushPermissionChanged(
-  _status: MachPushPermissionStatus,
-) {
-  // Optionally reflect notification permission in application settings.
-}
-
-export function onMachPushError(error: Error) {
-  if (__DEV__) {
-    console.warn('[MACH Push]', error.message);
-  }
-}
-
-let startPromise: ReturnType<typeof setupMachPush> | undefined;
-
-export function startMachPush() {
-  if (Platform.OS !== 'ios' && Platform.OS !== 'android') return undefined;
-  if (!startPromise) {
-    startPromise = setupMachPush(machPushConfig, {
-      onNotificationReceived: onMachPushNotificationReceived,
-      onNotificationOpened: onMachPushNotificationOpened,
-      onRegistered: onMachPushRegistered,
-      onPermissionChanged: onMachPushPermissionChanged,
-      onError: onMachPushError,
-    });
-  }
-  return startPromise;
-}
-
-// The basic experience works immediately. Remove this line if your product
-// asks for notification permission at a later, contextual moment.
-void startMachPush()?.catch(() => undefined);
-`:`/**
- * MACH Push application hooks.
- *
- * This file belongs to your app and is never overwritten by
- * \`mach push setup\`. Customize these callbacks whenever you need to route
- * notification taps, update application state, or associate a user.
- */
-import { Platform } from 'react-native';
-import { setupMachPush } from '@radhya/mach-push-react-native';
-import { machPushConfig } from '${e}';
-
-export function onMachPushNotificationReceived(_notification) {
-  // Notifications are displayed automatically. Add foreground behavior here.
-}
-
-export function onMachPushNotificationOpened(_notification) {
-  // Read _notification.data and navigate to the appropriate screen here.
-}
-
-export function onMachPushRegistered(_registration) {
-  // The installation is now ready to receive MACH notifications.
-}
-
-export function onMachPushPermissionChanged(_status) {
-  // Optionally reflect notification permission in application settings.
-}
-
-export function onMachPushError(error) {
-  if (__DEV__) {
-    console.warn('[MACH Push]', error.message);
-  }
-}
-
-let startPromise;
-
-export function startMachPush() {
-  if (Platform.OS !== 'ios' && Platform.OS !== 'android') return undefined;
-  if (!startPromise) {
-    startPromise = setupMachPush(machPushConfig, {
-      onNotificationReceived: onMachPushNotificationReceived,
-      onNotificationOpened: onMachPushNotificationOpened,
-      onRegistered: onMachPushRegistered,
-      onPermissionChanged: onMachPushPermissionChanged,
-      onError: onMachPushError,
-    });
-  }
-  return startPromise;
-}
-
-// The basic experience works immediately. Remove this line if your product
-// asks for notification permission at a later, contextual moment.
-void startMachPush()?.catch(() => undefined);
-`}function ql(e,t,n){let i=[],r=[],o=Fg(e,Ug[t]);if(!o)return{written:i,notes:["Could not locate the application entry point. Import the generated mach-push file once from your root App or layout."]};let s=ge.join(e,o),a=Bg(e,o),l=jg(o)?"ts":"js",d=l==="ts",c=ge.join(a,`mach-push.generated.${l}`),u=ge.join(a,`mach-push.${l}`);return ie.mkdirSync(a,{recursive:!0}),ie.writeFileSync(c,Gg(n,d)),i.push(We(e,c)),ie.existsSync(u)?r.push(`${We(e,u)} already exists; developer callbacks were preserved.`):(ie.writeFileSync(u,zg("./mach-push.generated",d)),i.push(We(e,u))),Vg(s,u)?i.push(We(e,s)):r.push(`${We(e,s)} already starts MACH Push.`),{written:i,notes:r,editableFile:We(e,u),generatedFile:We(e,c),entryFile:We(e,s)}}function Yl(e,t){if(!ie.existsSync(e))return[];let n=[];for(let i of ie.readdirSync(e,{withFileTypes:!0})){if(i.name==="Pods"||i.name==="build")continue;let r=ge.join(e,i.name);i.isDirectory()?n.push(...Yl(r,t)):t(r)&&n.push(r)}return n}function Kg(e,t){if(ie.mkdirSync(ge.dirname(e),{recursive:!0}),!ie.existsSync(e)){ie.writeFileSync(e,`<?xml version="1.0" encoding="UTF-8"?>
-<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
-<plist version="1.0">
-<dict>
-  <key>aps-environment</key>
-  <string>${t}</string>
+  ${rn(i)}
 </dict>
 </plist>
-`);return}let n=ie.readFileSync(e,"utf8"),i=/(<key>aps-environment<\/key>\s*<string>)([^<]*)(<\/string>)/;if(i.test(n)){ie.writeFileSync(e,n.replace(i,`$1${t}$3`));return}n.includes("</dict>")&&ie.writeFileSync(e,n.replace("</dict>",`  <key>aps-environment</key>
-  <string>${t}</string>
-</dict>`))}function Wg(e,t,n){let i=[],r=[],o=ge.join(e,"ios");if(!ie.existsSync(o))return r.push("iOS native project is not present; no APNs entitlement was changed."),{written:i,notes:r};let a=Yl(o,c=>c.endsWith(".xcodeproj/project.pbxproj"))[0];if(!a)return r.push("Could not locate an iOS Xcode project for the APNs entitlement."),{written:i,notes:r};let l=ie.readFileSync(a,"utf8"),d=Array.from(l.matchAll(/CODE_SIGN_ENTITLEMENTS\s*=\s*"?([^";$]+\.entitlements)"?;/g),c=>c[1].trim());if(d.length===0&&t){let c=ge.basename(ge.dirname(a),".xcodeproj"),f=[ie.existsSync(ge.join(o,c))?c:"",`${c}.entitlements`].filter(Boolean).join("/"),p=!1;l=l.replace(/buildSettings = \{([\s\S]*?)\n(\s*)\};/g,(y,g,h)=>!new RegExp(`PRODUCT_BUNDLE_IDENTIFIER\\s*=\\s*"?${t.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}"?;`).test(g)||g.includes("CODE_SIGN_ENTITLEMENTS")?y:(p=!0,y.replace(/(\n\s*PRODUCT_BUNDLE_IDENTIFIER\s*=)/,`
-${h}	CODE_SIGN_ENTITLEMENTS = ${f};$1`))),p&&(ie.writeFileSync(a,l),i.push(We(e,a)),d.push(f))}if(d.length===0)return r.push("Could not safely identify the iOS app target. Enable the Push Notifications capability in Xcode."),{written:i,notes:r};for(let c of new Set(d)){let u=ge.join(o,c);Kg(u,n),i.push(We(e,u))}return r.push(`iOS APNs entitlement is configured for ${n}.`),{written:[...new Set(i)],notes:r}}function Jg(e,t){let n=ie.readFileSync(e,"utf8");if(n.includes("com.google.gms.google-services"))return!1;let i=/plugins\s*\{/.exec(n);if(i?.index!==void 0){let r=t?`    id("com.google.gms.google-services")
-`:`    id 'com.google.gms.google-services'
-`,o=i.index+i[0].length;ie.writeFileSync(e,`${n.slice(0,o)}
-${r}${n.slice(o)}`)}else{let r=t?`
-apply(plugin = "com.google.gms.google-services")
-`:`
-apply plugin: "com.google.gms.google-services"
-`;ie.writeFileSync(e,`${n.trimEnd()}${r}`)}return!0}function qg(e){let t=["settings.gradle.kts","settings.gradle"].map(a=>ge.join(e,a)).find(a=>ie.existsSync(a));if(t){let a=ie.readFileSync(t,"utf8");if(a.includes("com.google.gms.google-services"))return;let l=/plugins\s*\{/.exec(a);if(l?.index!==void 0){let c=t.endsWith(".kts")?`    id("com.google.gms.google-services") version "4.4.4" apply false
-`:`    id "com.google.gms.google-services" version "4.4.4" apply false
-`,u=l.index+l[0].length;return ie.writeFileSync(t,`${a.slice(0,u)}
-${c}${a.slice(u)}`),t}}let n=["build.gradle.kts","build.gradle"].map(a=>ge.join(e,a)).find(a=>ie.existsSync(a));if(!n)return;let i=ie.readFileSync(n,"utf8");if(i.includes("com.google.gms:google-services"))return;let r=/dependencies\s*\{/.exec(i);if(r?.index===void 0)return;let o=`        classpath("com.google.gms:google-services:4.4.4")
-`,s=r.index+r[0].length;return ie.writeFileSync(n,`${i.slice(0,s)}
-${o}${i.slice(s)}`),n}function Yg(e,t){let n=[],i=[],r=ge.join(e,"android");if(!ie.existsSync(r))return i.push("Android native project is not present; no Firebase configuration was changed."),{written:n,notes:i};if(!t)return i.push("Android needs google-services.json. Add it at the project root and re-run mach push setup."),{written:n,notes:i};let o=ge.resolve(e,t);if(!ie.existsSync(o))return i.push(`Android Firebase file was not found at ${t}; re-run setup with --google-services-file.`),{written:n,notes:i};let s=ge.join(r,"app/google-services.json");ie.mkdirSync(ge.dirname(s),{recursive:!0}),o!==s&&(ie.copyFileSync(o,s),n.push(We(e,s)));let a=["build.gradle.kts","build.gradle"].map(d=>ge.join(r,"app",d)).find(d=>ie.existsSync(d));if(!a)return i.push("Could not locate android/app/build.gradle to enable Firebase."),{written:n,notes:i};Jg(a,a.endsWith(".kts"))&&n.push(We(e,a));let l=qg(r);return l&&n.push(We(e,l)),i.push("Android Firebase configuration and notification permission are wired."),{written:[...new Set(n)],notes:i}}function Xl(e,t){let n=Wg(e,t.iosBundleId,t.iosEnvironment),i=Yg(e,t.googleServicesFile);return{written:[...new Set([...n.written,...i.written])],notes:[...n.notes,...i.notes]}}function Zg(){return je.join(process.cwd(),m.configFileName)}function tr(){let e=Ie();if(!e?.projectId)throw new Error(`No linked MACH project. Run \`${m.nameLower} link\` first.`);return e}function ed(e){we.writeFileSync(Zg(),`${JSON.stringify(e,null,2)}
-`)}function Qg(){let e=je.join(process.cwd(),"package.json");if(!we.existsSync(e))return null;try{return JSON.parse(we.readFileSync(e,"utf8"))}catch{return null}}function Zl(e){let t=Qg();return!!(t?.dependencies?.[e]||t?.devDependencies?.[e])}function eh(e,t=!1){let n=process.cwd();return we.existsSync(je.join(n,"pnpm-lock.yaml"))?{command:"pnpm",args:["add",...t?["-D"]:[],e],label:`pnpm add ${t?"-D ":""}${e}`}:we.existsSync(je.join(n,"yarn.lock"))?{command:"yarn",args:["add",...t?["-D"]:[],e],label:`yarn add ${t?"-D ":""}${e}`}:we.existsSync(je.join(n,"bun.lock"))||we.existsSync(je.join(n,"bun.lockb"))?{command:"bun",args:["add",...t?["-d"]:[],e],label:`bun add ${t?"-d ":""}${e}`}:{command:"npm",args:["install",...t?["--save-dev"]:["--save"],e],label:`npm install ${t?"--save-dev ":""}${e}`}}function Ql(e,t=!1){let n=eh(e,t),i=Xg(n.command,n.args,{cwd:process.cwd(),stdio:"inherit",env:{...process.env}});return i.error||i.status!==0?{ok:!1,note:`${n.label} failed${i.error?`: ${i.error.message}`:` with code ${i.status}`}.`}:{ok:!0,note:`Installed with ${n.label}.`}}function th(e,t){let n=[];if(t)return n.push("Dependency installation skipped."),n;if(Zl("@radhya/mach-push-react-native"))n.push("@radhya/mach-push-react-native is already installed.");else{let i=Ql("@radhya/mach-push-react-native");if(!i.ok)throw new Error(`${i.note} No application files were wired.`);n.push(i.note)}if(e==="expo")if(Zl("@radhya/mach"))n.push("@radhya/mach is already available to the Expo config.");else{let i=Ql(`@radhya/mach@${St}`,!0);if(!i.ok)throw new Error(`${i.note} No Expo configuration was changed.`);n.push(i.note)}return n}function nh(e,t){return e||t||["google-services.json","android/app/google-services.json"].find(n=>we.existsSync(je.join(process.cwd(),n)))}function td(e){let t=process.cwd(),n=e==="ios"?"bundleIdentifier":"package";for(let i of["app.json","app.config.json"]){let r=je.join(t,i);if(we.existsSync(r))try{let o=JSON.parse(we.readFileSync(r,"utf8")),a=(o.expo&&typeof o.expo=="object"?o.expo:o)?.[e]?.[n];if(typeof a=="string"&&a.trim())return a.trim()}catch{}}for(let i of["app.config.ts","app.config.js"]){let r=je.join(t,i);if(!we.existsSync(r))continue;let s=we.readFileSync(r,"utf8").match(new RegExp(`${n}\\s*:\\s*['"]([^'"]+)['"]`));if(s?.[1])return s[1]}}function nd(e,t){return t||Xt(e)||td("ios")||et("ios")||void 0}function id(e,t){return t||un(e)||td("android")||et("android")||void 0}function ih(e,t){let n=we.readFileSync(e,"utf8");if(n.includes(t))return"already";let i=/(^[ \t]*)plugins\s*:\s*\[([\s\S]*?)\]/m.exec(n);if(!i||i.index===void 0)return"manual";let r=n.includes(`\r
-`)?`\r
-`:`
-`,o=i[1]||"",s=i[2]||"",a=s.match(/\r?\n([ \t]+)\S/)?.[1]||`${o}  `,l=s.trim().length===0?`${r}${a}'${t}',${r}${o}`:`${r}${a}'${t}',${s}`,d=i[0].indexOf("["),c=`${i[0].slice(0,d+1)}${l}]`;return we.writeFileSync(e,`${n.slice(0,i.index)}${c}${n.slice(i.index+i[0].length)}`),"inserted"}function rd(){let e="@radhya/mach/expo-plugin",t=["app.config.ts","app.config.js"].find(l=>we.existsSync(je.join(process.cwd(),l)));if(t){let l=ih(je.join(process.cwd(),t),e);return l==="inserted"?`${t} now includes ${e}.`:l==="already"?`${t} already includes ${e}.`:`Add "${e}" to the plugins array in ${t}; MACH could not safely edit its computed configuration.`}let n=["app.config.json","app.json"].find(l=>we.existsSync(je.join(process.cwd(),l)));if(!n)return`Add "${e}" to the Expo plugins array.`;let i=je.join(process.cwd(),n),r=JSON.parse(we.readFileSync(i,"utf8")),o=r.expo&&typeof r.expo=="object"?r.expo:r,s=Array.isArray(o.plugins)?o.plugins:[];return s.some(l=>(Array.isArray(l)?l[0]:l)===e)?`${n} already includes ${e}.`:(o.plugins=[...s,e],we.writeFileSync(i,`${JSON.stringify(r,null,2)}
-`),`${n} now includes ${e}.`)}function od(e){let t=tr(),n=e.app||t.push?.appId;if(!n)throw new Error(`Push is not configured. Run \`${m.nameLower} push setup\` or pass --app.`);return{config:t,appId:n,environment:e.environment||t.push?.environment||"production"}}function rh(e){let t=je.resolve(e);if(!we.existsSync(t))throw new Error(`File not found: ${t}`);return t}function si(e){let t=e?.response?.data?.message||e?.message||"Unknown error";console.error(pe.red(t)),process.exitCode=1}async function sd(e){let t=er();try{let n=tr();if(Tn(n)==="flutter")throw new Error("MACH Push currently supports Expo and bare React Native. Flutter push support is planned for a later release.");let r=nd(n,e.iosBundle),o=id(n,e.androidPackage);if(!r&&!o)throw new Error(`Add ios.bundleIdentifier or android.package to ${m.configFileName}, or pass --ios-bundle/--android-package.`);t.start("Creating MACH Push app...");let{data:s}=await D.post(`/projects/${n.projectId}/push/apps`,{name:e.name||n.name||"Mobile app",iosBundleId:r,androidPackageName:o}),a=e.environment||"production";n.push={enabled:!0,appId:s.app.appId,publishableKey:s.app.publishableKey,apiUrl:"https://mach-api.securejs.in",environment:a,iosEnvironment:a==="development"?"development":"production",...e.googleServicesFile?{googleServicesFile:e.googleServicesFile}:{}},ed(n);let l=n.framework==="expo"?rd():void 0;t.stop(pe.green("MACH Push app created.")),console.log(["",`${pe.bold("App ID:")} ${s.app.appId}`,`${pe.bold("Publishable key:")} ${s.app.publishableKey}`,`${pe.bold("Config:")} ${m.configFileName} \u2192 push`,"","Install the mobile SDK:","  npm install @radhya/mach-push-react-native",...n.framework==="expo"?["  npm install --save-dev @radhya/mach",`  ${l}`,"  Run npx expo prebuild."]:[],"","Next, configure APNs and/or FCM credentials."].join(`
-`))}catch(n){t.stop(pe.red("MACH Push setup failed.")),si(n)}}async function ad(e){let t=er();try{let n=tr(),i=Tn(n);if(i==="flutter")throw new Error("MACH Push currently supports Expo and bare React Native. Flutter push support is planned for a later release.");let r=nd(n,e.iosBundle),o=id(n,e.androidPackage);if(!r&&!o)throw new Error(`Add ios.bundleIdentifier or android.package to ${m.configFileName}, or pass --ios-bundle/--android-package.`);let s=n.push?.appId,a=n.push?.publishableKey;t.start("Checking the MACH Push app...");let d=(await D.get(`/projects/${n.projectId}/push/overview?days=1`)).data?.apps||[];if(d.find(b=>b.appId===s&&!!a&&b.publishableKey===a))t.stop(pe.green("MACH Push app verified."));else{let b=d.find(_=>!!_.publishableKey&&(!r||_.iosBundleId===r)&&(!o||_.androidPackageName===o));if(b)s=b.appId,a=b.publishableKey,t.stop(pe.green("Existing MACH Push app linked."));else{let{data:_}=await D.post(`/projects/${n.projectId}/push/apps`,{name:e.name||n.name||"Mobile app",iosBundleId:r,androidPackageName:o});s=_.app.appId,a=_.app.publishableKey,t.stop(pe.green("MACH Push app created."))}}if(!s||!a)throw new Error("MACH Push did not return a usable application key.");let u=e.environment||n.push?.environment||"production",f=nh(e.googleServicesFile,n.push?.googleServicesFile);n.push={enabled:!0,appId:s,publishableKey:a,apiUrl:n.push?.apiUrl||"https://mach-api.securejs.in",environment:u,iosEnvironment:u==="development"?"development":"production",...f?{googleServicesFile:f}:{}},ed(n);let p=th(i,!!e.skipInstall),y=i==="expo"?rd():void 0;if(y?.startsWith('Add "'))throw new Error(y);let g={projectId:n.projectId,appId:s,publishableKey:a,apiUrl:n.push.apiUrl,environment:u},h=ql(process.cwd(),i,g);if(!h.entryFile)throw new Error(h.notes[0]||"MACH could not locate the application entry point.");let S=i==="expo"?{written:[],notes:[]}:Xl(process.cwd(),{iosBundleId:r,iosEnvironment:n.push.iosEnvironment,googleServicesFile:f});console.log(["",pe.green.bold("MACH Push basic setup is ready."),`${pe.bold("Framework:")} ${i}`,`${pe.bold("App ID:")} ${s}`,`${pe.bold("Automatic startup:")} ${h.entryFile||"manual entry import required"}`,`${pe.bold("Customize callbacks:")} ${h.editableFile||"see the setup notes below"}`,"",...p.map(b=>`\u2022 ${b}`),...y?[`\u2022 ${y}`]:[],...h.notes.map(b=>`\u2022 ${b}`),...S.notes.map(b=>`\u2022 ${b}`),...[...h.written,...S.written].map(b=>`\u2022 Updated ${b}.`),"","Next: add APNs and/or FCM provider credentials, then create one new native build.","Dashboard: https://getmach.dev/push"].join(`
-`))}catch(n){t.stop(pe.red("MACH Push setup failed.")),si(n)}}async function Uo(e,t){let n=er();try{let{config:i,appId:r,environment:o}=od(t),s=rh(t.file),a;if(e==="apns"){if(!t.teamId||!t.keyId)throw new Error("APNs requires --team-id and --key-id.");let l=t.bundleId||Xt(i);if(!l)throw new Error("APNs requires --bundle-id.");a={environment:o,teamId:t.teamId,keyId:t.keyId,bundleId:l,privateKey:we.readFileSync(s,"utf8")}}else a={environment:o,serviceAccount:JSON.parse(we.readFileSync(s,"utf8"))};n.start(`Configuring ${e.toUpperCase()}...`),await D.put(`/projects/${i.projectId}/push/apps/${r}/credentials/${e}`,a),n.stop(pe.green(`${e.toUpperCase()} is ready.`))}catch(i){n.stop(pe.red(`${e.toUpperCase()} setup failed.`)),si(i)}}async function ld(e){let t=er();try{let{config:n,appId:i,environment:r}=od(e),o=e.all?{all:!0,platform:e.platform}:e.token?.length?{machPushTokens:e.token}:e.user?.length?{externalUserIds:e.user}:null;if(!o)throw new Error("Choose --token, --user, or --all.");let s;if(e.data){let c=JSON.parse(e.data);if(!c||typeof c!="object"||Array.isArray(c))throw new Error("--data must be a JSON object.");s=Object.fromEntries(Object.entries(c).map(([u,f])=>[u,String(f)]))}let a=e.badge===void 0?void 0:Number(e.badge),l=e.ttl===void 0?void 0:Number(e.ttl);t.start("Queueing notification...");let{data:d}=await D.post(`/projects/${n.projectId}/push/send`,{appId:i,environment:r,target:o,notification:{title:e.title,body:e.body,data:s},options:{sound:e.sound,badge:a,ttlSeconds:l,collapseKey:e.collapseKey,androidChannelId:e.androidChannelId}});t.stop(pe.green(`Notification queued: ${d.requestId}`))}catch(n){t.stop(pe.red("Notification was not queued.")),si(n)}}async function dd(e){try{let t=tr(),n=Math.min(Math.max(Number(e.days||30),1),90),{data:i}=await D.get(`/projects/${t.projectId}/push/overview?days=${n}`),r=i.totals,o=r.requested>0?`${(r.accepted/r.requested*100).toFixed(1)}%`:"\u2014";console.log([`${pe.bold("Active devices:")} ${i.activeDevices}`,`${pe.bold("Queued requests:")} ${r.queuedRequests}`,`${pe.bold("Requested:")} ${r.requested}`,`${pe.bold("Provider accepted:")} ${r.accepted}`,`${pe.bold("Failed:")} ${r.failed}`,`${pe.bold("Retried:")} ${r.retried}`,`${pe.bold("Invalid devices:")} ${r.invalidDevices}`,`${pe.bold("Acceptance:")} ${o}`].join(`
-`))}catch(t){si(t)}}import{text as sh,password as ah,spinner as lh,isCancel as pd}from"@clack/prompts";import Ho from"chalk";import ai from"fs";import cd from"path";import oh from"os";var Fo=cd.join(oh.homedir(),m.configDir),Bo=cd.join(Fo,"config.json");function jo(){if(!ai.existsSync(Bo))return{};try{return JSON.parse(ai.readFileSync(Bo,"utf-8"))}catch{return{}}}function ud(e){ai.existsSync(Fo)||ai.mkdirSync(Fo,{recursive:!0});let n={...jo(),...e};ai.writeFileSync(Bo,JSON.stringify(n,null,2))}async function fd(){let e=jo(),t=await sh({message:"Enter your email:",placeholder:"user@example.com",initialValue:e.lastLoginEmail,validate(r){if(r.length===0)return"Email is required!"}});if(pd(t))return;let n=await ah({message:"Enter your password:",validate(r){if(r.length===0)return"Password is required!"}});if(pd(n))return;let i=lh();i.start("Authenticating...");try{let o=await(await fetch(`${xt}/login`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({username:t,password:n})})).json();o.status==="success"&&o.user.token?(ws({id:o.user.id,email:t,token:o.user.token,refreshToken:o.user.refreshToken}),ud({lastLoginEmail:t}),i.stop(Ho.green("Login successful!"))):i.stop(Ho.red("Login failed: "+(o.message||"Unknown error")))}catch(r){i.stop(Ho.red("Network error: "+r.message))}}import{log as nr,outro as dh}from"@clack/prompts";import li from"chalk";async function md(){let e=vs(),t=`${m.envPrefix}TOKEN`;e?nr.success(li.green(`Logged out. Removed saved credentials from ~/${m.configDir}/credentials.json.`)):nr.warn(li.yellow(`No saved ${m.name} credentials found.`)),process.env[t]&&(nr.warn(li.yellow(`${t} is still set in this shell. Commands will continue to authenticate with that token until you unset it.`)),nr.info(li.dim(`Run: unset ${t}`))),dh(li.blue("---"))}import{outro as ch,select as uh,spinner as ph,isCancel as fh}from"@clack/prompts";import ir from"chalk";import Vo from"fs";import mh from"path";var gd=e=>e==="1234567890"||e==="ABC123DEFG"||e==="XXXXXXXXXX"?"":typeof e=="string"?e:"",gh=()=>process.versions.node.split(".")[0]||"24";async function hd(){if(!Ue()){console.log(ir.red(`You are not logged in. Run \`${m.nameLower} login\` first.`));return}let t=ph();t.start("Fetching projects...");try{let{data:n}=await D.get("/projects");if(t.stop("Projects loaded."),n.status!=="success"||!n.projects||n.projects.length===0){console.log(ir.yellow(`No projects found. Run \`${m.nameLower} init\` to create one.`));return}let i=n.projects.map(y=>({value:y.projectId,label:`${y.name} (${y.slug})`})),r=await uh({message:"Select a project to link:",options:i});if(fh(r))return;let o=mh.join(process.cwd(),m.configFileName),s={};if(Vo.existsSync(o))try{s=JSON.parse(Vo.readFileSync(o,"utf-8"))}catch{}let a=n.projects.find(y=>y.projectId===r),l=s.android?.package||et("android"),d=s.ios?.bundleIdentifier||et("ios"),c=s.android||{},u=s.submit?.production?.android||{},f=s.submit?.production?.ios||{},p={projectId:r,framework:Ze(s.framework)||cn,name:a?.name,slug:a?.slug,nodeVersion:s.nodeVersion||gh(),scheme:a?.slug?.toLowerCase()||"app",android:{...c,package:l||"",versionCode:c.versionCode||"auto"},ios:{bundleIdentifier:d||"",buildNumber:s.ios?.buildNumber||"auto"},build:{development:{environment:"development",distribution:"development"},staging:{environment:"staging",distribution:"internal"},production:{environment:"production",distribution:"store"}},submit:{production:{android:{...u,track:u.track||"internal",releaseStatus:u.releaseStatus||"completed"},ios:{ascAppId:gd(f.ascAppId),appleTeamId:gd(f.appleTeamId)}}}};Vo.writeFileSync(o,JSON.stringify(p,null,2)),ch(ir.green(`Linked to project ${p.name} (${p.slug})`))}catch(n){t.stop(ir.red("Error fetching projects: "+n.message))}}import{outro as hh,text as rr,select as yh,spinner as bh,isCancel as di}from"@clack/prompts";import ci from"chalk";import Sh from"fs";import Ah from"path";import{randomUUID as Eh}from"crypto";var Ih=()=>process.versions.node.split(".")[0]||"24";async function yd(){if(!Ue()){console.log(ci.red(`You are not logged in. Run \`${m.nameLower} login\` first.`));return}let t=await rr({message:"Project Name:",placeholder:"My Awesome App",validate(a){if(a.length===0)return"Name is required!"}});if(di(t))return;let n=await rr({message:"Project Slug (URL friendly):",placeholder:"my-awesome-app",validate(a){if(a.length===0)return"Slug is required!";if(!/^[a-z0-9-]+$/.test(a))return"Slug must be lowercase alphanumeric with dashes."}});if(di(n))return;let i=await yh({message:"Platform:",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"},{value:"web",label:"Web"},{value:"all",label:"All Platforms"}]});if(di(i))return;let r="";if(i==="android"||i==="all"){let a=et("android");if(r=await rr({message:"Android Package Name:",initialValue:a||"",placeholder:"com.example.app",validate(l){if(l.length===0)return"Package name is required for Android!"}}),di(r))return}let o="";if(i==="ios"||i==="all"){let a=et("ios");if(o=await rr({message:"iOS Bundle Identifier:",initialValue:a||"",placeholder:"com.example.app",validate(l){if(l.length===0)return"Bundle ID is required for iOS!"}}),di(o))return}let s=bh();s.start("Creating project...");try{let a=Eh(),d={projectId:a,name:t,slug:n,storageType:"managed",platforms:i==="all"?["android","ios","web"]:[i]},{data:c}=await D.post("/projects",d);if(c.status==="success"){s.stop(ci.green("Project created successfully!"));let u=Ah.join(process.cwd(),m.configFileName);Sh.writeFileSync(u,JSON.stringify({projectId:a,framework:cn,name:t,slug:n,nodeVersion:Ih(),...r?{android:{package:r,versionCode:"auto"}}:{},...o?{ios:{bundleIdentifier:o,buildNumber:"auto"}}:{},build:{development:{environment:"development",distribution:"development"},staging:{environment:"staging",distribution:"internal"},production:{environment:"production",distribution:"store"}},submit:{production:{android:{track:"internal",releaseStatus:"completed"},ios:{ascAppId:"",appleTeamId:""}}}},null,2)),hh(ci.green(`Initialized project ${t} and linked locally!`))}else s.stop(ci.red("creation failed: "+c.message))}catch(a){s.stop(ci.red("Network error: "+a.message))}}import{spinner as Go,log as He}from"@clack/prompts";import ui from"chalk";import or from"fs";import bd from"path";function zo(e,t,n,i){let r=e?.response?.status,o=e?.response?.data?.message||e?.response?.data?.error,s=i?` ${i}`:"";return r===401?`Not logged in or token expired while trying to ${n}${s}. Run \`${m.nameLower} login\` and try again.`:r===403?[`Permission denied while trying to ${n}${s}.`,o?`API says: ${o}.`:void 0,`Current Mach account/token does not have access to project ${t}.`,`Run \`${m.nameLower} login\` with the correct account, or ask a project owner to grant access.`].filter(Boolean).join(" "):r===404?[`Project or environment endpoint was not found while trying to ${n}${s}.`,`Project ID: ${t}.`,o?`API says: ${o}.`:void 0].filter(Boolean).join(" "):r?`Failed to ${n}${s}: ${o||`API returned HTTP ${r}`}`:`Network error while trying to ${n}${s}: ${e?.message||"Unknown error"}`}function wh(e){let t=String(e??"");return t===""?'""':/^[A-Za-z0-9_./:@%+-]+$/.test(t)?t:JSON.stringify(t)}function vh(e,t){return`${[`# Generated by ${m.nameLower} env pull --environment ${t}`,"# Do not commit this file.","",...Object.keys(e).sort((i,r)=>i.localeCompare(r)).map(i=>`${i}=${wh(e[i])}`)].join(`
+`;return Y.writeFileSync(Qn(),s),Qn()}function rt(e,t={}){try{return st("launchctl",e,{stdio:t.ignoreError?"ignore":"pipe"}),!0}catch(n){if(t.ignoreError)return!1;throw n}}function lp(e){return new Promise(t=>setTimeout(t,e))}function ei(e,t,n=np){return new Promise((i,r)=>{ep(e,t,{timeout:n,maxBuffer:10*1024*1024,windowsHide:!0},(o,s,a)=>{if(o){let l=a?.toString().trim();r(new Error(l||o.message));return}i(s?.toString()||"")})})}async function ua(){if(typeof fetch=="function"){let e=new AbortController,t=setTimeout(()=>e.abort(),3e3);try{return(await fetch(`${on}/health`,{signal:e.signal})).ok}catch{return!1}finally{clearTimeout(t)}}return new Promise(e=>{let t=!1,n=r=>{t||(t=!0,e(r))},i=ti.get(`${on}/health`,r=>{r.resume(),n(r.statusCode===200)});i.setTimeout(3e3,()=>{i.destroy(),n(!1)}),i.on("error",()=>n(!1))})}async function dp(e=8e3){let t=Date.now()+e;for(;Date.now()<t;){if(await ua())return!0;await lp(250)}return!1}async function pa(){return new Promise(e=>{let t=!1,n=ia.createConnection({host:"127.0.0.1",port:Je}),i=r=>{t||(t=!0,n.destroy(),e(r))};n.setTimeout(1e3),n.once("connect",()=>i(!0)),n.once("timeout",()=>i(!1)),n.once("error",()=>i(!1))})}async function Rr(){if(await dp()){j.success(ne.green("Mach agent installed and started."));return}if(await pa()){j.warn(`Mach agent service is installed, but port ${Je} is held by a process that is not answering /health.`),j.info(ne.dim(`Run \`${m.nameLower} agent stop\`, close any foreground \`${m.nameLower} agent\` terminal, then run \`${m.nameLower} agent install\` again.`));return}j.warn(`Mach agent service is installed, but it did not start listening on ${on}.`)}async function cp(){let e=ap(),t=vr();rt(["bootout",t,e],{ignoreError:!0}),rt(["bootstrap",t,e],{ignoreError:!0})||rt(["load","-w",e]),rt(["enable",`${t}/${Pt}`],{ignoreError:!0}),rt(["kickstart","-k",`${t}/${Pt}`],{ignoreError:!0}),await Rr(),j.info(ne.dim(`It will start automatically when you log in. Plist: ${e}`)),j.info(ne.dim(`Logs: ${F.join(Ne(),"agent.log")}`))}async function fa(){let e=Qn(),t=vr();rt(["bootout",t,e],{ignoreError:!0})||rt(["unload","-w",e],{ignoreError:!0})?j.success(ne.green("Mach agent service stopped.")):j.warn("Mach agent service was not loaded.")}async function up(){await fa();let e=Qn();Y.existsSync(e)&&Y.unlinkSync(e),j.success(ne.green("Mach agent service uninstalled."))}async function pp(){let e=op();ot(["daemon-reload"]),ot(["enable","--now",Ct]),await Rr(),j.info(ne.dim(`It will start automatically when you log in. Service: ${e}`)),j.info(ne.dim(`Logs: ${F.join(Ne(),"agent.log")}`))}async function fp(){ot(["stop",Ct],{ignoreError:!0})?j.success(ne.green("Mach agent service stopped.")):j.warn("Mach agent service was not running.")}async function mp(){ot(["disable","--now",Ct],{ignoreError:!0}),ot(["daemon-reload"],{ignoreError:!0});let e=Ir();Y.existsSync(e)&&Y.unlinkSync(e),ot(["daemon-reload"],{ignoreError:!0}),j.success(ne.green("Mach agent service uninstalled."))}async function gp(){let e=sp();sn(["/Create","/TN",Dt,"/SC","ONLOGON","/TR",`"${e}"`,"/RL","LIMITED","/F"]),sn(["/Run","/TN",Dt],{ignoreError:!0}),await Rr(),j.info(ne.dim(`It will start automatically when you log in. Task: ${Dt}`)),j.info(ne.dim(`Logs: ${F.join(Ne(),"agent.log")}`))}async function ma(){sn(["/End","/TN",Dt],{ignoreError:!0})?j.success(ne.green("Mach agent task stopped.")):j.warn("Mach agent task was not running.")}async function hp(){await ma(),sn(["/Delete","/TN",Dt,"/F"],{ignoreError:!0});let e=wr();Y.existsSync(e)&&Y.unlinkSync(e),j.success(ne.green("Mach agent task uninstalled."))}async function Zs(){if(process.platform==="darwin")return cp();if(process.platform==="linux")return pp();if(process.platform==="win32")return gp();throw new Error(`Background agent install is not supported on ${process.platform}.`)}async function Qs(){if(process.platform==="darwin")return fa();if(process.platform==="linux")return fp();if(process.platform==="win32")return ma();j.warn(`Background agent service control is not supported on ${process.platform}.`)}async function yp(){if(process.platform==="darwin")return up();if(process.platform==="linux")return mp();if(process.platform==="win32")return hp();j.warn(`Background agent uninstall is not supported on ${process.platform}.`)}async function bp(){let e=await ua(),t=e?!0:await pa();if(e?j.success(ne.green(`Mach agent is online at ${on}`)):t?j.warn(`Mach agent port is open, but /health did not respond. Run \`${m.nameLower} agent restart\` if the dashboard still shows offline.`):j.warn(`Mach agent is not responding at ${on}`),process.platform==="darwin"){let n=rt(["print",`${vr()}/${Pt}`],{ignoreError:!0});j.info(ne.dim(`Login service: ${n?"installed/loaded":"not loaded"}`))}else if(process.platform==="linux"){let n=ot(["is-enabled",Ct],{ignoreError:!0}),i=ot(["is-active",Ct],{ignoreError:!0});j.info(ne.dim(`Login service: ${n?"enabled":"not enabled"} / ${i?"active":"inactive"}`))}else if(process.platform==="win32"){let n=sn(["/Query","/TN",Dt],{ignoreError:!0});j.info(ne.dim(`Login task: ${n?"installed":"not installed"}`))}}async function Ap(){let e=[];try{(await ei(da(),["devices","-l"])).split(`
+`).forEach(n=>{if(n.includes("List of devices")||!n.trim())return;let i=n.split(/\s+/);if(i.length<2||i[1]!=="device")return;let r=i[0],o=n.match(/model:([^\s]+)/);e.push({id:r,platform:"android",type:r.startsWith("emulator-")?"emulator":"physical",name:o?o[1].replace(/_/g," "):r,status:"online",details:n.trim()})})}catch{}try{let n=(await ei(ca(),["-list-avds"])).split(`
+`).filter(r=>!!r.trim()),i=e.some(r=>r.platform==="android"&&r.id.startsWith("emulator-"));n.forEach(r=>{i||e.push({id:r,platform:"android",type:"emulator",name:r.replace(/_/g," "),status:"offline",details:`Android Virtual Device: ${r}`})})}catch{}return e}async function ga(){if(process.platform!=="darwin")return[];try{let e=await ei("/usr/bin/xcrun",["simctl","list","devices","--json"]),t=JSON.parse(e),n=[];return Object.entries(t.devices||{}).forEach(([i,r])=>{r.forEach(o=>{o.isAvailable&&n.push({id:o.udid,platform:"ios",type:"simulator",name:o.name,status:o.state?.toLowerCase()==="booted"?"online":"offline",runtime:i,details:`${o.name} (${i})`})})}),n}catch{return[]}}async function Sp(){if(process.platform!=="darwin")return[];try{let e=await ei("/usr/bin/xcrun",["devicectl","list","devices","--json-output","-"]);return(JSON.parse(e).result?.devices||[]).filter(n=>{let i=n.connectionProperties?.transportType;return i==="wired"||i==="localNetwork"}).map(n=>{let i=n.connectionProperties?.transportType,r=n.deviceProperties?.name||"iPhone";return{id:n.identifier,platform:"ios",type:"physical",name:r,status:"online",details:`${r} (${n.model?.name||n.hardwareModel||""}) - ${i}`}})}catch{return[]}}async function Ep(e){let t=await ga(),n=t.find(r=>r.id===e);if(n)return n;let i=t.filter(r=>r.status==="online");return i.length===1?i[0]:null}async function Ip(){let[e,t,n]=await Promise.all([Ap(),ga(),Sp()]);return[...e,...t,...n]}async function wp(){let e=Date.now();return Yn&&e-Yn.updatedAt<ip?Yn.targets:(Xn||(Xn=Ip().then(t=>(Yn={targets:t,updatedAt:Date.now()},t)).finally(()=>{Xn=null})),Xn)}async function ea(e){let t=[];for await(let n of e)t.push(Buffer.isBuffer(n)?n:Buffer.from(n));return t.length===0?{}:JSON.parse(Buffer.concat(t).toString("utf-8"))}async function vp(e,t){let n=await tp({method:"GET",url:e,responseType:"stream",timeout:12e4}),i=Y.createWriteStream(t);n.data.pipe(i),await new Promise((r,o)=>{i.on("finish",r),i.on("error",o)})}function ta(e,t){let n=e?.stderr?.toString?.().trim();if(n)return n;let i=e?.stdout?.toString?.().trim();return i||e?.message||t}function _p(e,t){return st("/usr/libexec/PlistBuddy",["-c",`Print :${t}`,e],{encoding:"utf-8"}).trim()}function $p(e){let t=F.join(e,"Info.plist");if(!Y.existsSync(t))throw new Error(`Could not validate iOS app executable: ${t} not found.`);let n=_p(t,"CFBundleExecutable"),i=F.join(e,n);if(!Y.existsSync(i))throw new Error(`Could not validate iOS app executable: ${i} not found.`);return i}function Rp(){return process.arch==="arm64"?"arm64":"x86_64"}function Op(e){return Y.existsSync(e)?Y.readdirSync(e).map(t=>F.join(e,t)).filter(t=>t.endsWith(".app")&&Y.statSync(t).isDirectory()):[]}function na(e,t){let n=Op(e);if(n.length===1)return n[0];if(n.length>1)throw new Error(`Multiple .app bundles found in ${t}: ${n.map(i=>F.basename(i)).join(", ")}. Mach cannot safely choose which app to install.`);return""}function Dp(e){let t=$p(e),n=Rp(),i="",r="";try{i=st("lipo",["-info",t],{encoding:"utf-8"}).trim()}catch(o){throw new Error(`Could not inspect iOS simulator app architecture for ${F.basename(e)}: ${o.message}`)}if(!new RegExp(`\\b${n}\\b`).test(i))throw new Error(`This iOS simulator artifact cannot be installed because ${F.basename(e)} does not include the ${n} simulator architecture. lipo output: ${i}. Rebuild the app with the latest Mach CLI and make sure the profile is a simulator build.`);try{r=st("/usr/bin/xcrun",["vtool","-show-build",t],{encoding:"utf-8"}).trim()}catch(o){throw new Error(`Could not inspect iOS simulator app platform for ${F.basename(e)}: ${o.message}`)}if(!/\bplatform\s+IOSSIMULATOR\b/i.test(r))throw new Error(`This iOS simulator artifact cannot be installed because ${F.basename(e)} was built for the wrong Apple platform. A simulator artifact must contain platform IOSSIMULATOR. vtool output: ${r}. Rebuild the app with the latest Mach CLI.`)}async function Pp(e,t,n){let i=n||(t.toLowerCase().includes(".apk")?"android":"ios"),r=t.toLowerCase().includes(".ipa"),o=Y.mkdtempSync(F.join(ke.tmpdir(),`${Je}-install-`)),s=F.join(o,i==="android"?"install.apk":r?"install.ipa":"install.zip");try{if(await vp(t,s),i==="android"){st(da(),["-s",e,"install","-r",s],{stdio:"pipe"});return}if(process.platform!=="darwin")throw new Error("iOS local install requires macOS.");Zn(`unzip -o ${JSON.stringify(s)} -d ${JSON.stringify(o)}`,{stdio:"pipe"});let a=F.join(o,"Payload"),l=Y.existsSync(a),d=r||l,c="";if(d?c=na(a,"Payload"):c=na(o,"the simulator artifact"),!c)throw new Error(`No .app bundle found inside the ${r?"IPA":"archive"}.`);let u=d?null:await Ep(e);if(u){try{Dp(c),st("/usr/bin/xcrun",["simctl","install",u.id,c],{stdio:"pipe"})}catch(f){throw new Error(ta(f,"iOS Simulator install failed."))}return}if(!d)throw new Error("Selected iOS Simulator was not found. Refresh Install Hub devices or boot one simulator and try again.");try{Zn(`/usr/bin/xcrun devicectl device install app --device ${JSON.stringify(e)} ${JSON.stringify(c)}`,{stdio:"pipe"})}catch(f){throw new Error(ta(f,"iOS device install failed."))}}finally{Y.rmSync(o,{recursive:!0,force:!0})}}function Cp(e,t){if(!e)throw new Error("Device id is required.");if(t==="ios"){if(process.platform!=="darwin")throw new Error("iOS Simulator launch requires macOS.");return Zn(`/usr/bin/xcrun simctl boot ${JSON.stringify(e)}`,{stdio:"pipe"}),Xs("open",["-a","Simulator"],{detached:!0,stdio:"ignore"}).unref(),"Simulator booting..."}if(t==="android")return Xs(ca(),["-avd",e],{detached:!0,stdio:"ignore",windowsHide:!0}).unref(),"Emulator booting in background...";throw new Error("Invalid platform.")}async function Tp(){process.platform!=="darwin"&&j.warn("Running on non-macOS \u2014 iOS discovery unavailable, Android only.");let e=ti.createServer((i,r)=>{if(r.setHeader("Access-Control-Allow-Origin","*"),r.setHeader("Access-Control-Allow-Methods","GET, POST, OPTIONS"),r.setHeader("Access-Control-Allow-Headers","Content-Type, Authorization"),i.method==="OPTIONS"){r.writeHead(204),r.end();return}let o=new URL(i.url||"/",`http://localhost:${Je}`);if(i.method==="GET"&&o.pathname==="/local/devices"){wp().then(s=>{r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",targets:s}))}).catch(s=>{r.writeHead(500,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:s.message}))});return}if(i.method==="GET"&&o.pathname==="/health"){r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",service:"mach-agent",port:Je,platform:process.platform}));return}if(i.method==="POST"&&o.pathname==="/install-local"){t(i,r);return}if(i.method==="POST"&&o.pathname==="/local/boot"){n(i,r);return}r.writeHead(404),r.end()}),t=async(i,r)=>{try{let{deviceId:o,artifactUrl:s,platform:a}=await ea(i);if(!o||!s){r.writeHead(400,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:"deviceId and artifactUrl are required"}));return}await Pp(o,s,a),r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",message:`Installed on ${o}`}))}catch(o){r.writeHead(500,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:o.message||"Local install failed"}))}},n=async(i,r)=>{try{let{id:o,platform:s}=await ea(i),a=Cp(o,s);r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",message:a}))}catch(o){r.writeHead(500,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:o.message||"Local device launch failed"}))}};e.listen(Je,"127.0.0.1",()=>{j.success(ne.green(`Local device agent running on http://localhost:${Je}`)),j.info(ne.dim("Keep this running while using the Install Hub on the dashboard.")),j.info(ne.dim("Press Ctrl+C to stop."))}),e.on("error",i=>{i.code==="EADDRINUSE"?j.error(`Port ${Je} is already in use \u2014 agent may already be running.`):j.error(`Agent error: ${i.message}`),process.exit(1)}),await new Promise(()=>{})}async function ha(e="start"){let t=String(e||"start").toLowerCase();if(t==="start"||t==="run"){await Tp();return}if(t==="install"){await Zs();return}if(t==="status"){await bp();return}if(t==="stop"){await Qs();return}if(t==="uninstall"){await yp();return}if(t==="restart"){await Qs(),await Zs();return}j.error(`Unknown agent action: ${e}`),j.info(ne.dim(`Use: ${m.nameLower} agent start | install | status | restart | stop | uninstall`)),process.exit(1)}import{text as Np,password as xp,spinner as Lp,isCancel as Aa}from"@clack/prompts";import Cr from"chalk";import an from"fs";import ya from"path";import kp from"os";var Or=ya.join(kp.homedir(),m.configDir),Dr=ya.join(Or,"config.json");function Pr(){if(!an.existsSync(Dr))return{};try{return JSON.parse(an.readFileSync(Dr,"utf-8"))}catch{return{}}}function ba(e){an.existsSync(Or)||an.mkdirSync(Or,{recursive:!0});let n={...Pr(),...e};an.writeFileSync(Dr,JSON.stringify(n,null,2))}async function Sa(){let e=Pr(),t=await Np({message:"Enter your email:",placeholder:"user@example.com",initialValue:e.lastLoginEmail,validate(r){if(r.length===0)return"Email is required!"}});if(Aa(t))return;let n=await xp({message:"Enter your password:",validate(r){if(r.length===0)return"Password is required!"}});if(Aa(n))return;let i=Lp();i.start("Authenticating...");try{let o=await(await fetch(`${Qe}/login`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({username:t,password:n})})).json();o.status==="success"&&o.user.token?(uo({id:o.user.id,email:t,token:o.user.token,refreshToken:o.user.refreshToken}),ba({lastLoginEmail:t}),i.stop(Cr.green("Login successful!"))):i.stop(Cr.red("Login failed: "+(o.message||"Unknown error")))}catch(r){i.stop(Cr.red("Network error: "+r.message))}}import{log as ni,outro as Mp}from"@clack/prompts";import ln from"chalk";async function Ea(){let e=po(),t=`${m.envPrefix}TOKEN`;e?ni.success(ln.green(`Logged out. Removed saved credentials from ~/${m.configDir}/credentials.json.`)):ni.warn(ln.yellow(`No saved ${m.name} credentials found.`)),process.env[t]&&(ni.warn(ln.yellow(`${t} is still set in this shell. Commands will continue to authenticate with that token until you unset it.`)),ni.info(ln.dim(`Run: unset ${t}`))),Mp(ln.blue("---"))}import{outro as Up,select as Fp,spinner as Bp,isCancel as jp}from"@clack/prompts";import ii from"chalk";import Tr from"fs";import Hp from"path";var Ia=e=>e==="1234567890"||e==="ABC123DEFG"||e==="XXXXXXXXXX"?"":typeof e=="string"?e:"",Gp=()=>process.versions.node.split(".")[0]||"24";async function wa(){if(!be()){console.log(ii.red(`You are not logged in. Run \`${m.nameLower} login\` first.`));return}let t=Bp();t.start("Fetching projects...");try{let{data:n}=await $.get("/projects");if(t.stop("Projects loaded."),n.status!=="success"||!n.projects||n.projects.length===0){console.log(ii.yellow(`No projects found. Run \`${m.nameLower} init\` to create one.`));return}let i=n.projects.map(g=>({value:g.projectId,label:`${g.name} (${g.slug})`})),r=await Fp({message:"Select a project to link:",options:i});if(jp(r))return;let o=Hp.join(process.cwd(),m.configFileName),s={};if(Tr.existsSync(o))try{s=JSON.parse(Tr.readFileSync(o,"utf-8"))}catch{}let a=n.projects.find(g=>g.projectId===r),l=s.android?.package||It("android"),d=s.ios?.bundleIdentifier||It("ios"),c=s.android||{},u=s.submit?.production?.android||{},f=s.submit?.production?.ios||{},p={projectId:r,framework:$e(s.framework)||wt,name:a?.name,slug:a?.slug,nodeVersion:s.nodeVersion||Gp(),scheme:a?.slug?.toLowerCase()||"app",android:{...c,package:l||"",versionCode:c.versionCode||"auto"},ios:{bundleIdentifier:d||"",buildNumber:s.ios?.buildNumber||"auto"},build:{development:{environment:"development",distribution:"development"},staging:{environment:"staging",distribution:"internal"},production:{environment:"production",distribution:"store"}},submit:{production:{android:{...u,track:u.track||"internal",releaseStatus:u.releaseStatus||"completed"},ios:{ascAppId:Ia(f.ascAppId),appleTeamId:Ia(f.appleTeamId)}}}};Tr.writeFileSync(o,JSON.stringify(p,null,2)),Up(ii.green(`Linked to project ${p.name} (${p.slug})`))}catch(n){t.stop(ii.red("Error fetching projects: "+n.message))}}import{outro as Vp,text as ri,select as zp,spinner as Kp,isCancel as dn}from"@clack/prompts";import cn from"chalk";import Wp from"fs";import qp from"path";import{randomUUID as Jp}from"crypto";var Yp=()=>process.versions.node.split(".")[0]||"24";async function va(){if(!be()){console.log(cn.red(`You are not logged in. Run \`${m.nameLower} login\` first.`));return}let t=await ri({message:"Project Name:",placeholder:"My Awesome App",validate(a){if(a.length===0)return"Name is required!"}});if(dn(t))return;let n=await ri({message:"Project Slug (URL friendly):",placeholder:"my-awesome-app",validate(a){if(a.length===0)return"Slug is required!";if(!/^[a-z0-9-]+$/.test(a))return"Slug must be lowercase alphanumeric with dashes."}});if(dn(n))return;let i=await zp({message:"Platform:",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"},{value:"web",label:"Web"},{value:"all",label:"All Platforms"}]});if(dn(i))return;let r="";if(i==="android"||i==="all"){let a=It("android");if(r=await ri({message:"Android Package Name:",initialValue:a||"",placeholder:"com.example.app",validate(l){if(l.length===0)return"Package name is required for Android!"}}),dn(r))return}let o="";if(i==="ios"||i==="all"){let a=It("ios");if(o=await ri({message:"iOS Bundle Identifier:",initialValue:a||"",placeholder:"com.example.app",validate(l){if(l.length===0)return"Bundle ID is required for iOS!"}}),dn(o))return}let s=Kp();s.start("Creating project...");try{let a=Jp(),d={projectId:a,name:t,slug:n,storageType:"managed",platforms:i==="all"?["android","ios","web"]:[i]},{data:c}=await $.post("/projects",d);if(c.status==="success"){s.stop(cn.green("Project created successfully!"));let u=qp.join(process.cwd(),m.configFileName);Wp.writeFileSync(u,JSON.stringify({projectId:a,framework:wt,name:t,slug:n,nodeVersion:Yp(),...r?{android:{package:r,versionCode:"auto"}}:{},...o?{ios:{bundleIdentifier:o,buildNumber:"auto"}}:{},build:{development:{environment:"development",distribution:"development"},staging:{environment:"staging",distribution:"internal"},production:{environment:"production",distribution:"store"}},submit:{production:{android:{track:"internal",releaseStatus:"completed"},ios:{ascAppId:"",appleTeamId:""}}}},null,2)),Vp(cn.green(`Initialized project ${t} and linked locally!`))}else s.stop(cn.red("creation failed: "+c.message))}catch(a){s.stop(cn.red("Network error: "+a.message))}}import{spinner as kr,log as Se}from"@clack/prompts";import un from"chalk";import oi from"fs";import _a from"path";function Nr(e,t,n,i){let r=e?.response?.status,o=e?.response?.data?.message||e?.response?.data?.error,s=i?` ${i}`:"";return r===401?`Not logged in or token expired while trying to ${n}${s}. Run \`${m.nameLower} login\` and try again.`:r===403?[`Permission denied while trying to ${n}${s}.`,o?`API says: ${o}.`:void 0,`Current Mach account/token does not have access to project ${t}.`,`Run \`${m.nameLower} login\` with the correct account, or ask a project owner to grant access.`].filter(Boolean).join(" "):r===404?[`Project or environment endpoint was not found while trying to ${n}${s}.`,`Project ID: ${t}.`,o?`API says: ${o}.`:void 0].filter(Boolean).join(" "):r?`Failed to ${n}${s}: ${o||`API returned HTTP ${r}`}`:`Network error while trying to ${n}${s}: ${e?.message||"Unknown error"}`}function Xp(e){let t=String(e??"");return t===""?'""':/^[A-Za-z0-9_./:@%+-]+$/.test(t)?t:JSON.stringify(t)}function Zp(e,t){return`${[`# Generated by ${m.nameLower} env pull --environment ${t}`,"# Do not commit this file.","",...Object.keys(e).sort((i,r)=>i.localeCompare(r)).map(i=>`${i}=${Xp(e[i])}`)].join(`
 `)}
-`}async function Sd(e,t,n={}){let i=Ue();if(!i){He.error(`You are not logged in. Run \`${m.nameLower} login\` first.`);return}let r=bd.join(process.cwd(),m.configFileName);if(!or.existsSync(r)){He.error(`No ${m.configFileName} found. Run \`${m.nameLower} init\` or \`${m.nameLower} link\` first.`);return}let o;try{o=JSON.parse(or.readFileSync(r,"utf-8"))}catch{He.error(`Failed to parse ${m.configFileName}`);return}let{projectId:s}=o;if(!s){He.error(`${m.configFileName} is missing projectId.`);return}e==="set"?await $h(s,t,i):e==="list"?await _h(s,i):e==="pull"||e==="download"||e==="export"?await Ph(s,n):He.error(`Unknown env action: ${e}. Use 'set', 'list', or 'pull'.`)}async function $h(e,t,n){if(t.length===0){He.error(`Usage: ${m.nameLower} env set KEY=VALUE [KEY2=VALUE2 ...]`);return}let i=Go();i.start("Setting environment variables...");let r=0,o=0;for(let s of t){let[a,...l]=s.split("="),d=l.join("=");if(!a||d===void 0){He.warn(`Invalid format for argument: ${s}. Expected KEY=VALUE.`),o++;continue}try{let c={key:a.trim(),value:d,type:"env",environment:"global",visibility:"secret"},{data:u}=await D.post(`/projects/${e}/secrets`,c);u.status==="success"?r++:(He.error(`Failed to set ${a}: ${u.message}`),o++)}catch(c){He.error(zo(c,e,"set",a)),o++}}i.stop(`Set ${r} variable(s). ${o>0?`${o} failed.`:""}`)}async function _h(e,t){let n=Go();n.start("Fetching environment variables...");try{let{data:i}=await D.get(`/projects/${e}/secrets`);if(i.status==="success"){n.stop("Fetched variables.");let r=i.secrets||[];r.length===0?He.info("No environment variables found for this project."):(He.info(ui.bold("Environment Variables (Global & Scoped):")),r.forEach(o=>{let s=o.visibility==="plain"?o.value:"********";console.log(`  ${ui.cyan(o.key)} = ${s}  ${ui.gray(`[${o.environment}]`)}`)}))}else n.stop(ui.red(`Failed to fetch variables: ${i.message}`))}catch(i){n.stop("Failed to fetch variables."),He.error(zo(i,e,"list"))}}async function Ph(e,t){let n=(t.environment||"development").trim(),i=t.out||".env.local",r=bd.resolve(process.cwd(),i);if(or.existsSync(r)&&!t.overwrite){He.error(`${i} already exists. Re-run with \`--overwrite\` to replace it.`);return}let o=Go();o.start(`Downloading ${n} environment variables...`);try{let{data:s}=await D.get(`/projects/${e}/secrets/export?env=${encodeURIComponent(n)}`);if(s.status!=="success"){o.stop(ui.red(`Failed to download variables: ${s.message||"Unknown API error"}`));return}let a=s.secrets||{},l=vh(a,n);or.writeFileSync(r,l,{encoding:"utf-8",mode:384}),o.stop(`Wrote ${Object.keys(a).length} variable(s) to ${i}.`)}catch(s){o.stop("Failed to download variables."),He.error(zo(s,e,"pull"))}}import{cancel as Rh,confirm as Dd,isCancel as lr,log as tt,note as Ch,outro as vn,select as Oh,spinner as Dh,text as kh}from"@clack/prompts";import ut from"chalk";import ae from"fs";import Se from"path";import{spawnSync as kd}from"child_process";import Jo from"crypto";import Nh from"axios";import Ed from"crypto";import pi from"fs";import fi from"path";var Ad=e=>String(e||"").replace(/\\/g,"/").replace(/^\/+/,"");function Id(e,t){let n=fi.join(e,"metadata.json");if(!pi.existsSync(n))throw new Error(`Expo export did not create ${n}.`);let r=JSON.parse(pi.readFileSync(n,"utf-8"))?.fileMetadata?.[t],o=Ad(r?.bundle);if(!o)throw new Error(`Expo export metadata is missing the ${t} launch bundle.`);let s=new Set,a=(Array.isArray(r?.assets)?r.assets:[]).flatMap(l=>{let d=Ad(l?.path);return!d||s.has(d)?[]:(s.add(d),[{path:d,ext:String(l?.ext||"").replace(/^\./,"")||void 0}])});for(let l of[o,...a.map(d=>d.path)])if(!pi.existsSync(fi.join(e,l)))throw new Error(`Expo export metadata references a missing file: ${l}`);return{bundle:o,assets:a}}function wd(e,t){return[fi.join(e,t.bundle),...t.assets.map(n=>fi.join(e,n.path)),fi.join(e,"metadata.json")]}function Ko(e){return Ed.createHash("md5").update(pi.readFileSync(e)).digest("hex")}function Wo(e){return Ed.createHash("sha256").update(pi.readFileSync(e)).digest("base64url")}function vd(e){let t=String(e||"").replace(/^\./,"").trim().toLowerCase();return t?`.${t}`:void 0}function sr(e,t=!1){if(t)return"application/javascript";switch(String(e||"").replace(/^\./,"").trim().toLowerCase()){case"js":case"bundle":case"hbc":return"application/javascript";case"json":return"application/json";case"png":return"image/png";case"jpg":case"jpeg":return"image/jpeg";case"gif":return"image/gif";case"webp":return"image/webp";case"svg":return"image/svg+xml";case"ttf":return"font/ttf";case"otf":return"font/otf";case"woff":return"font/woff";case"woff2":return"font/woff2";case"mp3":return"audio/mpeg";case"m4a":return"audio/mp4";case"aac":return"audio/aac";case"wav":return"audio/wav";case"mp4":return"video/mp4";case"mov":return"video/quicktime";case"pdf":return"application/pdf";default:return"application/octet-stream"}}function $d(e){if(!e||typeof e!="object"||Array.isArray(e))return;let{_internal:t,hooks:n,mods:i,...r}=e;return r}var Ce=`${m.npmScope}/mach/expo-plugin`,qo=()=>process.stdin.isTTY&&process.stdout.isTTY,dr=()=>{Rh("Operation cancelled."),process.exit(0)},Fe=e=>{if(typeof e!="string")return;let t=e.trim();return t.length>0?t:void 0};function $n(e){if(!ae.existsSync(e))return null;try{return JSON.parse(ae.readFileSync(e,"utf-8"))}catch{return null}}function Nd(e,t){ae.writeFileSync(e,`${JSON.stringify(t,null,2)}
-`)}function mi(){let e=Ie();return e?.projectId||(tt.error(`No ${m.configFileName} found or missing projectId. Run \`${m.nameLower} link\` first.`),process.exit(1)),e}function xh(e){Nd(Se.join(process.cwd(),m.configFileName),e)}function Yo(e){let t=Ze(e.framework);if(t)return t;let n=$n(Se.join(process.cwd(),"package.json"))||{},i={...n.dependencies||{},...n.devDependencies||{}};return i.expo?"expo":(i["react-native"],"react-native")}function Xo(e,t){let n=String(e||"").trim().toLowerCase();return n==="expo"||n==="expo-updates"?"expo-updates":n==="react-native"||n==="mach-react-native"||n==="rn"?"mach-react-native":"expo-updates"}function xd(e){if(e==="mach-react-native")throw new Error("mach-react-native is reserved for a future Mach-native OTA client. Use expo-updates for Expo and bare React Native projects.");return e}function Zo(e){let t=String(e||"all").trim().toLowerCase();if(t==="ios")return["ios"];if(t==="android")return["android"];if(t==="all"||t==="both")return["ios","android"];throw new Error("Platform must be ios, android, or all.")}function Th(e){return ae.existsSync(Se.join(e,"pnpm-lock.yaml"))?{command:"pnpm",args:["add","-D",`${m.npmScope}/mach@latest`],label:`pnpm add -D ${m.npmScope}/mach@latest`}:ae.existsSync(Se.join(e,"yarn.lock"))?{command:"yarn",args:["add","-D",`${m.npmScope}/mach@latest`],label:`yarn add -D ${m.npmScope}/mach@latest`}:ae.existsSync(Se.join(e,"bun.lockb"))||ae.existsSync(Se.join(e,"bun.lock"))?{command:"bun",args:["add","-d",`${m.npmScope}/mach@latest`],label:`bun add -d ${m.npmScope}/mach@latest`}:{command:"npm",args:["install","--save-dev",`${m.npmScope}/mach@latest`],label:`npm install --save-dev ${m.npmScope}/mach@latest`}}function cr(e){let t=$n(Se.join(e,"package.json"))||{};return!!(t.dependencies?.[`${m.npmScope}/mach`]||t.devDependencies?.[`${m.npmScope}/mach`])}function ar(e){let t=$n(Se.join(e,"node_modules",m.npmScope,"mach","package.json"));return Fe(t?.version)}function Td(e,t){let n=o=>o.replace(/^v/,"").split(/[.-]/).slice(0,3).map(s=>Number.parseInt(s,10)||0),i=n(e),r=n(t);for(let o=0;o<3;o+=1)if(i[o]!==r[o])return i[o]>r[o]?1:-1;return 0}function Lh(e){let t=ar(e);return!cr(e)||!t||Td(t,St)<0}function Mh(e){let t=Th(e),n=kd(t.command,t.args,{cwd:e,stdio:"inherit",env:{...process.env}});if(n.error)return{ok:!1,label:t.label,error:n.error.message};if(n.status!==0)return{ok:!1,label:t.label,error:`${t.command} exited with code ${n.status}`};let i=ar(e),r=!!i&&Td(i,St)>=0;return{ok:cr(e)&&r,label:t.label,error:r?void 0:`installed ${i||"unknown"}, requires ${St} or newer`}}function _d(e){if(typeof e=="string")return e;if(Array.isArray(e)&&typeof e[0]=="string")return e[0]}function Uh(e,t){let n=["app.config.json","app.json"].find(a=>ae.existsSync(Se.join(e,a)));if(!n)return null;let i=Se.join(e,n),r=$n(i);if(!r)return null;let o=r.expo&&typeof r.expo=="object"?r.expo:r;if(t==="react-native"&&n==="app.json"&&(!r.expo||typeof r.expo!="object")){let a=$n(Se.join(e,"package.json"))||{},l=Fe(r.displayName)||Fe(r.name)||Fe(a.name)||"App",d=(Fe(a.name)||l).toLowerCase().replace(/[^a-z0-9-]+/g,"-").replace(/^-+|-+$/g,"")||"app";r.expo={name:l,slug:d,version:Fe(a.version)||"1.0.0"},o=r.expo}let s=Array.isArray(o.plugins)?o.plugins:[];return s.some(a=>_d(a)===Ce)||(o.plugins=[...s.filter(a=>{let l=_d(a);return l!=="./plugins/withMachDeepLinks"&&l!=="plugins/withMachDeepLinks"}),Ce],Nd(i,r)),n}function Fh(e){let t=["app.config.ts","app.config.js"].find(p=>ae.existsSync(Se.join(e,p)));if(!t)return"missing";let n=Se.join(e,t),i=ae.readFileSync(n,"utf-8");if(i.includes(Ce))return"already";let r=/(['"`])(?:\.\/)?plugins\/withMachDeepLinks\1/g;if(r.test(i))return ae.writeFileSync(n,i.replace(r,(p,y)=>`${y}${Ce}${y}`)),"inserted";let o=/(^[ \t]*)plugins\s*:\s*\[([\s\S]*?)\]/m.exec(i);if(!o||o.index===void 0)return"manual";let s=i.includes(`\r
+`}async function $a(e,t,n={}){let i=be();if(!i){Se.error(`You are not logged in. Run \`${m.nameLower} login\` first.`);return}let r=_a.join(process.cwd(),m.configFileName);if(!oi.existsSync(r)){Se.error(`No ${m.configFileName} found. Run \`${m.nameLower} init\` or \`${m.nameLower} link\` first.`);return}let o;try{o=JSON.parse(oi.readFileSync(r,"utf-8"))}catch{Se.error(`Failed to parse ${m.configFileName}`);return}let{projectId:s}=o;if(!s){Se.error(`${m.configFileName} is missing projectId.`);return}e==="set"?await Qp(s,t,i):e==="list"?await ef(s,i):e==="pull"||e==="download"||e==="export"?await tf(s,n):Se.error(`Unknown env action: ${e}. Use 'set', 'list', or 'pull'.`)}async function Qp(e,t,n){if(t.length===0){Se.error(`Usage: ${m.nameLower} env set KEY=VALUE [KEY2=VALUE2 ...]`);return}let i=kr();i.start("Setting environment variables...");let r=0,o=0;for(let s of t){let[a,...l]=s.split("="),d=l.join("=");if(!a||d===void 0){Se.warn(`Invalid format for argument: ${s}. Expected KEY=VALUE.`),o++;continue}try{let c={key:a.trim(),value:d,type:"env",environment:"global",visibility:"secret"},{data:u}=await $.post(`/projects/${e}/secrets`,c);u.status==="success"?r++:(Se.error(`Failed to set ${a}: ${u.message}`),o++)}catch(c){Se.error(Nr(c,e,"set",a)),o++}}i.stop(`Set ${r} variable(s). ${o>0?`${o} failed.`:""}`)}async function ef(e,t){let n=kr();n.start("Fetching environment variables...");try{let{data:i}=await $.get(`/projects/${e}/secrets`);if(i.status==="success"){n.stop("Fetched variables.");let r=i.secrets||[];r.length===0?Se.info("No environment variables found for this project."):(Se.info(un.bold("Environment Variables (Global & Scoped):")),r.forEach(o=>{let s=o.visibility==="plain"?o.value:"********";console.log(`  ${un.cyan(o.key)} = ${s}  ${un.gray(`[${o.environment}]`)}`)}))}else n.stop(un.red(`Failed to fetch variables: ${i.message}`))}catch(i){n.stop("Failed to fetch variables."),Se.error(Nr(i,e,"list"))}}async function tf(e,t){let n=(t.environment||"development").trim(),i=t.out||".env.local",r=_a.resolve(process.cwd(),i);if(oi.existsSync(r)&&!t.overwrite){Se.error(`${i} already exists. Re-run with \`--overwrite\` to replace it.`);return}let o=kr();o.start(`Downloading ${n} environment variables...`);try{let{data:s}=await $.get(`/projects/${e}/secrets/export?env=${encodeURIComponent(n)}`);if(s.status!=="success"){o.stop(un.red(`Failed to download variables: ${s.message||"Unknown API error"}`));return}let a=s.secrets||{},l=Zp(a,n);oi.writeFileSync(r,l,{encoding:"utf-8",mode:384}),o.stop(`Wrote ${Object.keys(a).length} variable(s) to ${i}.`)}catch(s){o.stop("Failed to download variables."),Se.error(Nr(s,e,"pull"))}}import{cancel as nf,confirm as Ua,isCancel as li,log as Re,note as rf,outro as Tt,select as of,spinner as sf,text as af}from"@clack/prompts";import xe from"chalk";import z from"fs";import te from"path";import{spawnSync as Fa}from"child_process";import Mr from"crypto";import lf from"axios";import Oa from"crypto";import pn from"fs";import fn from"path";var Ra=e=>String(e||"").replace(/\\/g,"/").replace(/^\/+/,"");function Da(e,t){let n=fn.join(e,"metadata.json");if(!pn.existsSync(n))throw new Error(`Expo export did not create ${n}.`);let r=JSON.parse(pn.readFileSync(n,"utf-8"))?.fileMetadata?.[t],o=Ra(r?.bundle);if(!o)throw new Error(`Expo export metadata is missing the ${t} launch bundle.`);let s=new Set,a=(Array.isArray(r?.assets)?r.assets:[]).flatMap(l=>{let d=Ra(l?.path);return!d||s.has(d)?[]:(s.add(d),[{path:d,ext:String(l?.ext||"").replace(/^\./,"")||void 0}])});for(let l of[o,...a.map(d=>d.path)])if(!pn.existsSync(fn.join(e,l)))throw new Error(`Expo export metadata references a missing file: ${l}`);return{bundle:o,assets:a}}function Pa(e,t){return[fn.join(e,t.bundle),...t.assets.map(n=>fn.join(e,n.path)),fn.join(e,"metadata.json")]}function xr(e){return Oa.createHash("md5").update(pn.readFileSync(e)).digest("hex")}function Lr(e){return Oa.createHash("sha256").update(pn.readFileSync(e)).digest("base64url")}function Ca(e){let t=String(e||"").replace(/^\./,"").trim().toLowerCase();return t?`.${t}`:void 0}function si(e,t=!1){if(t)return"application/javascript";switch(String(e||"").replace(/^\./,"").trim().toLowerCase()){case"js":case"bundle":case"hbc":return"application/javascript";case"json":return"application/json";case"png":return"image/png";case"jpg":case"jpeg":return"image/jpeg";case"gif":return"image/gif";case"webp":return"image/webp";case"svg":return"image/svg+xml";case"ttf":return"font/ttf";case"otf":return"font/otf";case"woff":return"font/woff";case"woff2":return"font/woff2";case"mp3":return"audio/mpeg";case"m4a":return"audio/mp4";case"aac":return"audio/aac";case"wav":return"audio/wav";case"mp4":return"video/mp4";case"mov":return"video/quicktime";case"pdf":return"application/pdf";default:return"application/octet-stream"}}function Ta(e){if(!e||typeof e!="object"||Array.isArray(e))return;let{_internal:t,hooks:n,mods:i,...r}=e;return r}var ue=`${m.npmScope}/mach/expo-plugin`,Ur=()=>process.stdin.isTTY&&process.stdout.isTTY,di=()=>{nf("Operation cancelled."),process.exit(0)},Ae=e=>{if(typeof e!="string")return;let t=e.trim();return t.length>0?t:void 0};function kt(e){if(!z.existsSync(e))return null;try{return JSON.parse(z.readFileSync(e,"utf-8"))}catch{return null}}function Ba(e,t){z.writeFileSync(e,`${JSON.stringify(t,null,2)}
+`)}function mn(){let e=ce();return e?.projectId||(Re.error(`No ${m.configFileName} found or missing projectId. Run \`${m.nameLower} link\` first.`),process.exit(1)),e}function df(e){Ba(te.join(process.cwd(),m.configFileName),e)}function Fr(e){let t=$e(e.framework);if(t)return t;let n=kt(te.join(process.cwd(),"package.json"))||{},i={...n.dependencies||{},...n.devDependencies||{}};return i.expo?"expo":(i["react-native"],"react-native")}function Br(e,t){let n=String(e||"").trim().toLowerCase();return n==="expo"||n==="expo-updates"?"expo-updates":n==="react-native"||n==="mach-react-native"||n==="rn"?"mach-react-native":"expo-updates"}function ja(e){if(e==="mach-react-native")throw new Error("mach-react-native is reserved for a future Mach-native OTA client. Use expo-updates for Expo and bare React Native projects.");return e}function jr(e){let t=String(e||"all").trim().toLowerCase();if(t==="ios")return["ios"];if(t==="android")return["android"];if(t==="all"||t==="both")return["ios","android"];throw new Error("Platform must be ios, android, or all.")}function cf(e){return z.existsSync(te.join(e,"pnpm-lock.yaml"))?{command:"pnpm",args:["add","-D",`${m.npmScope}/mach@latest`],label:`pnpm add -D ${m.npmScope}/mach@latest`}:z.existsSync(te.join(e,"yarn.lock"))?{command:"yarn",args:["add","-D",`${m.npmScope}/mach@latest`],label:`yarn add -D ${m.npmScope}/mach@latest`}:z.existsSync(te.join(e,"bun.lockb"))||z.existsSync(te.join(e,"bun.lock"))?{command:"bun",args:["add","-d",`${m.npmScope}/mach@latest`],label:`bun add -d ${m.npmScope}/mach@latest`}:{command:"npm",args:["install","--save-dev",`${m.npmScope}/mach@latest`],label:`npm install --save-dev ${m.npmScope}/mach@latest`}}function ci(e){let t=kt(te.join(e,"package.json"))||{};return!!(t.dependencies?.[`${m.npmScope}/mach`]||t.devDependencies?.[`${m.npmScope}/mach`])}function ai(e){let t=kt(te.join(e,"node_modules",m.npmScope,"mach","package.json"));return Ae(t?.version)}function Ha(e,t){let n=o=>o.replace(/^v/,"").split(/[.-]/).slice(0,3).map(s=>Number.parseInt(s,10)||0),i=n(e),r=n(t);for(let o=0;o<3;o+=1)if(i[o]!==r[o])return i[o]>r[o]?1:-1;return 0}function uf(e){let t=ai(e);return!ci(e)||!t||Ha(t,et)<0}function pf(e){let t=cf(e),n=Fa(t.command,t.args,{cwd:e,stdio:"inherit",env:{...process.env}});if(n.error)return{ok:!1,label:t.label,error:n.error.message};if(n.status!==0)return{ok:!1,label:t.label,error:`${t.command} exited with code ${n.status}`};let i=ai(e),r=!!i&&Ha(i,et)>=0;return{ok:ci(e)&&r,label:t.label,error:r?void 0:`installed ${i||"unknown"}, requires ${et} or newer`}}function ka(e){if(typeof e=="string")return e;if(Array.isArray(e)&&typeof e[0]=="string")return e[0]}function ff(e,t){let n=["app.config.json","app.json"].find(a=>z.existsSync(te.join(e,a)));if(!n)return null;let i=te.join(e,n),r=kt(i);if(!r)return null;let o=r.expo&&typeof r.expo=="object"?r.expo:r;if(t==="react-native"&&n==="app.json"&&(!r.expo||typeof r.expo!="object")){let a=kt(te.join(e,"package.json"))||{},l=Ae(r.displayName)||Ae(r.name)||Ae(a.name)||"App",d=(Ae(a.name)||l).toLowerCase().replace(/[^a-z0-9-]+/g,"-").replace(/^-+|-+$/g,"")||"app";r.expo={name:l,slug:d,version:Ae(a.version)||"1.0.0"},o=r.expo}let s=Array.isArray(o.plugins)?o.plugins:[];return s.some(a=>ka(a)===ue)||(o.plugins=[...s.filter(a=>{let l=ka(a);return l!=="./plugins/withMachDeepLinks"&&l!=="plugins/withMachDeepLinks"}),ue],Ba(i,r)),n}function mf(e){let t=["app.config.ts","app.config.js"].find(p=>z.existsSync(te.join(e,p)));if(!t)return"missing";let n=te.join(e,t),i=z.readFileSync(n,"utf-8");if(i.includes(ue))return"already";let r=/(['"`])(?:\.\/)?plugins\/withMachDeepLinks\1/g;if(r.test(i))return z.writeFileSync(n,i.replace(r,(p,g)=>`${g}${ue}${g}`)),"inserted";let o=/(^[ \t]*)plugins\s*:\s*\[([\s\S]*?)\]/m.exec(i);if(!o||o.index===void 0)return"manual";let s=i.includes(`\r
 `)?`\r
 `:`
-`,a=o[1]||"",l=o[2]||"",c=l.match(/\r?\n([ \t]+)\S/)?.[1]||`${a}    `,u=l.trim().length===0?`${s}${c}'${Ce}',${s}${a}`:l.includes(`
-`)||l.includes("\r")?`${s}${c}'${Ce}',${l}`:`${s}${c}'${Ce}',${s}${c}${l.trim()}${s}${a}`,f=`${o[0].slice(0,o[0].indexOf("[")+1)}${u}]`;return ae.writeFileSync(n,`${i.slice(0,o.index)}${f}${i.slice(o.index+o[0].length)}`),"inserted"}async function Bh(e,t,n){let i=[];if(Lh(e)){let o=ar(e),s=!!(n.installPlugin||n.yes);if(!s&&!n.skipInstall&&qo()){let a=await Dd({message:o?`Update the local ${m.npmScope}/mach Expo plugin (${o} \u2192 ${St})?`:`Install ${m.npmScope}/mach locally so Expo can use ${Ce}?`,initialValue:!0});lr(a)&&dr(),s=!!a}if(s&&!n.skipInstall){let a=Mh(e);a.ok?i.push(`Installed a compatible ${Ce} with ${a.label}.`):i.push(`Could not install ${m.npmScope}/mach with ${a.label}: ${a.error||"unknown error"}.`)}else i.push(`Install ${m.npmScope}/mach@${St} or newer in this app so Expo can resolve ${Ce}.`)}else i.push(`Local ${Ce} is compatible (${ar(e)}).`);let r=Fh(e);if(r==="already"&&i.push(`Expo config already includes ${Ce}.`),r==="inserted"&&i.push(`Expo config updated to include ${Ce}.`),r==="manual"&&i.push(`Add "${Ce}" to the plugins array in app.config.ts/app.config.js.`),r==="missing"){let o=Uh(e,t);o?i.push(`${o} updated to include ${Ce}.`):i.push(`Add "${Ce}" to your Expo config plugins array.`)}return i}async function Pd(e,t){if(t.skipInstall)return!1;if(t.yes)return!0;if(!qo())return!1;let n=await Dd({message:e,initialValue:!0});return lr(n)&&dr(),!!n}async function jh(e,t,n){let i=[];if(t==="react-native"&&!Zt(e,"expo"))if(await Pd("Install Expo Modules required by the Mach OTA runtime? This updates package and native project files.",n)){let o=Ls(e);if(!o.ok||!Zt(e,"expo"))throw new Error(`Expo Modules installation failed: ${o.error||o.command}`);i.push("Installed and configured Expo Modules for the existing React Native project.")}else i.push("Expo Modules are required. Run `npx install-expo-modules@latest`, then run `mach ota setup` again.");if(!Zt(e,"expo-updates"))if(await Pd("Install the expo-updates runtime?",n)){let o=Ms(e);if(!o.ok||!Zt(e,"expo-updates"))throw new Error(`expo-updates installation failed: ${o.error||o.command}`);i.push("Installed the Expo-compatible expo-updates version.")}else i.push("Install expo-updates with `npx expo install expo-updates`, then run `mach ota setup` again.");return i}async function Rd(e,t,n,i,r){if(t)return t;if(r||!qo()){if(i)throw new Error(`${e.replace(/:$/,"")} is required.`);return}let o=await kh({message:e,placeholder:n,validate(s){if(i&&s.trim().length===0)return"Required."}});return lr(o)&&dr(),Fe(o)}function Qo(e,t,n){return Kn(e,{runtimeVersion:t.runtimeVersion,framework:Ze(t.framework)||Ze(e.framework),platform:n})}function Hh(e){let t=zn(process.cwd(),e);if(!t)throw new Error(`Resolved Expo OTA configuration does not match this publish: Expo config could not be resolved. Run \`mach ota setup\` to update ${Ce}, then create a new native build if its embedded runtime changes.`);let n=[];if(t.runtimeVersion!==e.runtimeVersion&&n.push(`runtime is ${t.runtimeVersion||"missing"} (expected ${e.runtimeVersion})`),t.channel!==e.channel&&n.push(`channel is ${t.channel||"missing"} (expected ${e.channel})`),t.url!==e.url&&n.push(`URL is ${t.url||"missing"} (expected ${e.url})`),n.length>0)throw new Error(`Resolved Expo OTA configuration does not match this publish: ${n.join("; ")}. Run \`mach ota setup\` to update ${Ce}, then create a new native build if its embedded runtime changes.`);return t}function Vh(e){return Jo.createHash("sha256").update(ae.readFileSync(e)).digest("hex")}function Gh(e){let t=Se.extname(e).toLowerCase();return t===".json"?"application/json":t===".js"||t===".bundle"||t===".hbc"?"application/javascript":t===".map"?"application/json":t===".png"?"image/png":t===".jpg"||t===".jpeg"?"image/jpeg":t===".webp"?"image/webp":t===".gif"?"image/gif":t===".svg"?"image/svg+xml":t===".ttf"?"font/ttf":t===".otf"?"font/otf":t===".woff"?"font/woff":t===".woff2"?"font/woff2":"application/octet-stream"}function Ld(e){let t=[];if(!ae.existsSync(e))return t;for(let n of ae.readdirSync(e)){let i=Se.join(e,n),r=ae.statSync(i);r.isDirectory()?t.push(...Ld(i)):r.isFile()&&t.push(i)}return t}function zh(e,t){let n=e.filter(i=>{let r=i.toLowerCase();return r.endsWith(".map")?!1:r.endsWith(".js")||r.endsWith(".bundle")||r.endsWith(".hbc")});return n.find(i=>i.toLowerCase().includes(t))||n.sort((i,r)=>ae.statSync(r).size-ae.statSync(i).size)[0]}async function Cd(e){let t=await D.post("/ota/upload-url",{projectId:e.projectId,updateId:e.updateId,platform:e.platform,fileName:e.fileName,contentType:e.contentType});if(t.data.status!=="success")throw new Error(t.data.message||`Could not create upload URL for ${e.fileName}`);let n=ae.statSync(e.filePath).size;return await Nh.put(t.data.uploadUrl,ae.createReadStream(e.filePath),{headers:{"Content-Type":e.contentType,"Content-Length":n},maxBodyLength:1/0,maxContentLength:1/0}),{key:t.data.key,url:t.data.publicUrl,contentType:e.contentType,hash:Vh(e.filePath),size:n}}function Md(e,t,n,i={}){let r=kd(e,t,{cwd:n,stdio:"inherit",env:{...process.env,CI:process.env.CI||"1",EXPO_NO_TELEMETRY:"1",...i}});if(r.error)throw new Error(r.error.message);if(r.status!==0)throw new Error(`${e} ${t.join(" ")} exited with code ${r.status}`)}function Kh(e,t,n,i,r){Md("npx",["expo","export","--platform",e,"--output-dir",t],process.cwd(),{MACH_OTA_RUNTIME_VERSION:n,MACH_OTA_CHANNEL:i,MACH_OTA_URL:r})}function Wh(e,t){let n=e==="ios"?"main.jsbundle":"index.android.bundle",r=["index.js","index.ts","index.tsx"].find(s=>ae.existsSync(Se.join(process.cwd(),s)))||"index.js",o=Se.join(t,"assets");ae.mkdirSync(o,{recursive:!0}),Md("npx",["react-native","bundle","--platform",e,"--dev","false","--entry-file",r,"--bundle-output",Se.join(t,n),"--assets-dest",o],process.cwd())}async function Jh(e){let t=e.config.projectId,n=`ota_${Date.now()}_${e.platform}_${Jo.randomUUID().slice(0,8)}`,i=Se.join(process.cwd(),".mach","ota",n,e.platform);ae.rmSync(i,{recursive:!0,force:!0}),ae.mkdirSync(i,{recursive:!0}),e.engine==="expo-updates"?Kh(e.platform,i,e.runtimeVersion,e.channel,e.config.ota?.url||""):Wh(e.platform,i);let r=e.engine==="expo-updates"?Id(i,e.platform):void 0,o=r?wd(i,r):Ld(i),s=r?Se.join(i,r.bundle):zh(o,e.platform);if(!s)throw new Error(`Could not find a ${e.platform} JS bundle in ${i}.`);let a=new Map((r?.assets||[]).map(b=>[b.path,b])),l=[];for(let b of o){let _=Se.relative(i,b).replace(/\\/g,"/"),w=a.get(_),T=b===s?"application/javascript":w?sr(w.ext):Gh(b);l.push({filePath:b,relative:_,uploaded:await Cd({projectId:t,updateId:n,platform:e.platform,filePath:b,fileName:_,contentType:T})})}let d=l.find(b=>b.filePath===s),c=e.engine==="expo-updates"?Jo.randomUUID():void 0,u=e.engine==="expo-updates"?$d(e.expoConfig):void 0;if(e.engine==="expo-updates"&&(!u||Object.keys(u).length===0))throw new Error("Could not resolve the public Expo config required by the OTA manifest. Run `mach ota verify` and try again.");let f=r?r.assets.map(b=>{let _=l.find(w=>w.relative===b.path);if(!_)throw new Error(`Could not find uploaded Expo asset ${b.path}.`);return{key:Ko(_.filePath),url:_.uploaded.url,contentType:sr(b.ext),fileExtension:vd(b.ext),hash:Wo(_.filePath),size:_.uploaded.size}}):l.filter(b=>b.filePath!==s&&!b.relative.endsWith(".map")).map(b=>({key:b.relative,url:b.uploaded.url,contentType:b.uploaded.contentType,hash:b.uploaded.hash,size:b.uploaded.size})),p=r?{key:Ko(d.filePath),url:d.uploaded.url,contentType:sr(void 0,!0),hash:Wo(d.filePath),size:d.uploaded.size}:{key:Se.basename(d.relative),url:d.uploaded.url,contentType:d.uploaded.contentType,hash:d.uploaded.hash,size:d.uploaded.size},y={id:c||n,createdAt:new Date().toISOString(),runtimeVersion:e.runtimeVersion,launchAsset:p,assets:f,metadata:{projectId:t,channel:e.channel,...e.message?{message:e.message}:{},engine:e.engine},extra:{...u?{expoClient:u}:{},mach:{projectId:t,updateId:n,...c?{expoUpdateId:c}:{},channel:e.channel,platform:e.platform}}},g=Se.join(i,"mach-manifest.json");ae.writeFileSync(g,JSON.stringify(y,null,2));let h=await Cd({projectId:t,updateId:n,platform:e.platform,filePath:g,fileName:"manifest.json",contentType:"application/json"}),S=await D.post("/ota/publish",{projectId:t,updateId:n,expoUpdateId:c,channelName:e.channel,runtimeVersion:e.runtimeVersion,platform:e.platform,manifestKey:h.key,message:e.message,launchAsset:p,assets:f});if(S.data.status!=="success")throw new Error(S.data.message||`Failed to publish ${e.platform} OTA update.`);return S.data.update}async function qh(e){let t=mi(),n=Ze(e.framework)||Yo(t),i;try{i=xd(Xo(e.engine,n))}catch(f){tt.error(f.message),process.exit(1)}let r=!!e.yes,o=await Rd("OTA channel:",Fe(e.channel||e.branch||t.ota?.channel)||"production","production",!0,r),s=`${xt.replace(/\/$/,"")}/api/ota/expo/${t.projectId}`,a=Fe(e.url||t.ota?.url),l=a?.includes("/api/ota/react-native/")?void 0:a,d=await Rd("Mach OTA update URL:",l||s,s,!0,r);t.framework=n;let c={...t.ota||{},enabled:!0,engine:i,channel:o,url:d,deploymentUrl:d,runtimeVersionPolicy:t.ota?.runtimeVersionPolicy||"appVersion"};delete c.statsUrl,t.ota=c,delete t.update,xh(t);let u=[`${m.configFileName} updated.`];if(u.push(...await jh(process.cwd(),n,e)),u.push(...await Bh(process.cwd(),n,e)),n==="react-native"&&Zt(process.cwd(),"expo")&&Zt(process.cwd(),"expo-updates")&&cr(process.cwd())){let f=Zo(e.platform||"all"),p=Br(process.cwd()).filter(y=>f.includes(y));p.length===0&&u.push("No matching committed ios/android project was found for native configuration sync.");for(let y of p){let g=Qo(t,e,y),S=Oi({cwd:process.cwd(),platforms:[y],runtimeVersion:g,channel:o,url:d}).find(b=>!b.ok);if(S)throw new Error(`Could not synchronize ${y} Expo Updates configuration: ${S.error||S.command}`);u.push(`Synchronized ${y} native Expo Updates configuration for runtime ${g}.`)}}u.push("Create and install one new native build after initial OTA setup. Existing app binaries keep their embedded update URL."),Ch(u.map(f=>`- ${f}`).join(`
-`),"OTA setup"),await Ud({...e,action:"verify"})}async function Yh(e){dn();let t=mi(),n=Ze(e.framework)||Yo(t),i;try{i=xd(Xo(e.engine||t.ota?.engine,n))}catch(a){tt.error(`${a.message} Run \`mach ota setup\` to migrate this project.`),process.exit(1)}let r=Fe(e.channel||e.branch||t.ota?.channel)||"production",o=Zo(e.platform||"all"),s=Dh();s.start(`Publishing OTA update (${o.join("+")}, ${r})`);try{let a=[];for(let l of o){let d=Qo(t,e,l),c=Hh({platform:l,runtimeVersion:d,channel:r,url:Fe(t.ota?.url)||""});s.message(`Exporting and uploading ${l} OTA bundle for runtime ${d}...`),a.push(await Jh({config:t,engine:i,platform:l,channel:r,runtimeVersion:d,message:e.message,expoConfig:c.expoConfig}))}if(s.stop("OTA update published."),e.json)tt.info(JSON.stringify({status:"success",updates:a},null,2));else{let l=Array.from(new Set(a.map(d=>d.runtimeVersion).filter(Boolean)));vn(ut.green(`\u2713 OTA update live on "${r}" for runtime ${l.join(", ")||"unknown"}.`));for(let d of a)tt.info(ut.dim(`${d.platform}: ${d.updateId}`))}}catch(a){s.stop("OTA publish failed."),tt.error(a.response?.data?.message||a.message),process.exit(1)}}async function Ud(e){let t=mi(),n=Ze(e.framework)||Yo(t),i=Xo(e.engine||t.ota?.engine,n),r=[],o=t.ota;if(r.push(o?.enabled?{level:"pass",message:"mach.config.json has ota.enabled."}:{level:"fail",message:"mach.config.json is missing ota.enabled. Run `mach ota setup`."}),r.push(o?.url?{level:"pass",message:`OTA URL configured: ${o.url}`}:{level:"fail",message:"OTA URL is missing. Run `mach ota setup`."}),r.push(o?.channel?{level:"pass",message:`Default channel: ${o.channel}`}:{level:"warn",message:"No default OTA channel configured; publish will use production."}),r.push(o?.runtimeVersionPolicy||o?.runtimeVersion?{level:"pass",message:"Runtime version policy configured."}:{level:"warn",message:"No explicit runtime policy configured; Mach will use Expo runtimeVersion or package.json version."}),i==="expo-updates"){let a=$n(Se.join(process.cwd(),"package.json"))||{},l={...a.dependencies||{},...a.devDependencies||{}};n==="react-native"&&r.push(l.expo?{level:"pass",message:"Expo Modules are installed for the bare React Native project."}:{level:"fail",message:"Expo Modules are missing. Run `mach ota setup` to install the bare React Native OTA runtime."}),r.push(l["expo-updates"]?{level:"pass",message:"expo-updates is installed."}:{level:"fail",message:"expo-updates is missing. Run `mach ota setup`."}),r.push(cr(process.cwd())?{level:"pass",message:`${m.npmScope}/mach is installed locally for the Expo plugin.`}:{level:"fail",message:`${m.npmScope}/mach is not installed locally; run \`mach ota setup\`.`});let d=Zo(e.platform||"all"),c=Fe(e.channel||e.branch||o?.channel)||"production",u=Fe(o?.url)||"",f=d.map(y=>{let g=Qo(t,e,y);return{platform:y,runtimeVersion:g,delivery:zn(process.cwd(),{platform:y,runtimeVersion:g,channel:c,url:u})}}),p=f[0]?.delivery;if(p){let y=p.expoConfig.updates?.enabled!==!1,g=Fe(p.expoConfig.updates?.checkAutomatically)?.toUpperCase()||"ON_LOAD";r.push(p.url===o?.url?{level:"pass",message:"Expo Updates URL resolves to Mach."}:{level:"warn",message:`Expo Updates URL resolves to ${p.url||"none"} instead of ${o?.url||"the Mach OTA URL"}.`}),r.push(p.channel===c?{level:"pass",message:`Expo update channel header resolves to ${c}.`}:{level:"warn",message:`Expo update channel header is ${p.channel||"not set"}; install the latest ${m.npmScope}/mach package and rebuild.`}),r.push(y?{level:"pass",message:"Expo Updates is enabled."}:{level:"fail",message:"Expo config has updates.enabled=false, so this app cannot receive OTA updates."}),r.push(g!=="NEVER"&&g!=="ON_ERROR_RECOVERY"?{level:"pass",message:`Expo checks for updates automatically (${g}).`}:{level:"fail",message:`Expo checkAutomatically is ${g}; use ON_LOAD to receive Mach updates when the app starts.`})}else r.push({level:"fail",message:`Could not resolve Expo config. Confirm ${Ce} is present and run \`mach ota setup\` again.`});for(let{platform:y,runtimeVersion:g,delivery:h}of f)r.push(h?.runtimeVersion===g?{level:"pass",message:`${y} Expo runtime resolves to ${g}.`}:{level:"fail",message:`${y} Expo runtime resolves to ${h?.runtimeVersion||"none"} instead of ${g}. Run \`mach ota setup\`, then rebuild the app.`});if(n==="react-native"){let y=d,g=Br(process.cwd()).filter(S=>y.includes(S)),h=Us(process.cwd());if(g.includes("android")){let S=!!(h.androidManifest&&h.androidStrings)&&ae.readFileSync(h.androidManifest,"utf-8").includes("expo.modules.updates.EXPO_UPDATE_URL")&&ae.readFileSync(h.androidStrings,"utf-8").includes("expo_runtime_version");r.push(S?{level:"pass",message:"Android native Expo Updates configuration is synchronized."}:{level:"fail",message:"Android native Expo Updates configuration is missing. Run `mach ota setup --platform android`."})}if(g.includes("ios")){let S=!!h.iosExpoPlist&&ae.readFileSync(h.iosExpoPlist,"utf-8").includes("EXUpdatesURL")&&ae.readFileSync(h.iosExpoPlist,"utf-8").includes("EXUpdatesRuntimeVersion");r.push(S?{level:"pass",message:"iOS native Expo Updates configuration is synchronized."}:{level:"fail",message:"iOS native Expo Updates configuration is missing. Run `mach ota setup --platform ios`."})}}}else r.push({level:"fail",message:"mach-react-native is not available yet. Run `mach ota setup` to migrate this project to expo-updates."});for(let a of r){let l=a.level==="pass"?ut.green("PASS"):a.level==="warn"?ut.yellow("WARN"):ut.red("FAIL");tt.info(`${l} ${a.message}`)}let s=r.filter(a=>a.level==="fail").length;s>0&&(vn(ut.red(`OTA verification failed with ${s} issue(s).`)),process.exit(1)),vn(ut.green("OTA verification passed."))}async function Xh(e){dn();let t=mi(),n=await D.get(`/ota/${t.projectId}/updates`),i=n.data.updates||[];if(e.json){tt.info(JSON.stringify(n.data,null,2));return}if(i.length===0){vn("No OTA updates found.");return}for(let r of i){let o=r.stats?.total||{};tt.info(`${ut.bold(r.updateId)} ${ut.dim(`${r.platform} ${r.channelName} runtime ${r.runtimeVersion}`)} ${r.status||"active"}`),tt.info(ut.dim(`  downloads ios=${o.iosDownloaded||0} android=${o.androidDownloaded||0} applied ios=${o.iosApplied||0} android=${o.androidApplied||0}`))}vn(`Found ${i.length} OTA update(s).`)}async function Od(e,t){dn();let n=mi(),i=Fe(t.updateId);i||(tt.error(`Missing update id. Use \`${m.nameLower} ota ${e} --update-id <id>\`.`),process.exit(1));let r=await D.post(`/ota/${n.projectId}/updates/${encodeURIComponent(i)}/${e}`);t.json?tt.info(JSON.stringify(r.data,null,2)):vn(ut.green(`\u2713 OTA update ${e==="rollback"?"rolled back":"promoted"}: ${i}`))}async function Gt(e,t={}){let n=e||t.action||"publish";if(n==="setup")return qh({...t,action:n});if(n==="publish")return Yh({...t,action:n});if(n==="verify")return Ud({...t,action:n});if(n==="list")return Xh({...t,action:n});if(n==="rollback")return Od("rollback",{...t,action:n});if(n==="promote")return Od("promote",{...t,action:n});let i=await Oh({message:"What do you want to do?",options:[{value:"setup",label:"Setup OTA"},{value:"publish",label:"Publish OTA update"},{value:"verify",label:"Verify OTA setup"},{value:"list",label:"List OTA updates"}]});return lr(i)&&dr(),Gt(i,t)}import{intro as Zh,outro as Fd,log as _n}from"@clack/prompts";import At from"chalk";async function Bd(){Zh(At.blue(`${m.name} CLI - User Profile`));let e=Ue();if(!e){_n.warn(At.yellow("You are not logged in.")),_n.info(`Run \`${m.nameLower} login\` to authenticate.`),Fd();return}_n.info(`${At.bold("Logged in as:")} ${At.green(e.email)}`);try{await D.get("/projects");let n=Ue().token.split(".");if(n.length===3){let i=JSON.parse(Buffer.from(n[1],"base64").toString());if(i.exp){let r=new Date(i.exp*1e3),o=new Date,s=r.getTime()-o.getTime();if(s>0){let a=Math.round(s/6e4),l=(a/60).toFixed(1);_n.info(`${At.bold("Token status:")} Valid (Expires in ~${l}h / ${a}m)`)}else _n.warn(`${At.bold("Token status:")} ${At.red("Expired")} (Auto-refresh failed)`)}}}catch{_n.warn(`${At.bold("Token status:")} ${At.red("Unreachable")} (Session might be truly expired)${xt}`)}Fd(At.blue("---"))}import{spawn as ty}from"child_process";import{log as zt}from"@clack/prompts";import nt from"chalk";import ny from"fs";import Qh from"net";async function ey(e){return new Promise(t=>{let n=Qh.createServer();n.once("error",i=>{i.code==="EADDRINUSE"?t(!0):t(!1)}),n.once("listening",()=>{n.close(),t(!1)}),n.listen(e,"0.0.0.0")})}async function jd(e,t=20){let n=e;for(;n<e+t;){if(!await ey(n))return n;n++}throw new Error(`Could not find an available port after ${t} attempts starting from ${e}.`)}var Hd=async e=>{zt.info(nt.blue(`Starting ${m.name} Dev Orchestrator...`));let t=Ie(),n=e.buildProfile||"development",i=t?Ve(t,n):null,r={...process.env};if(t?.projectId)try{zt.info(nt.dim(`Fetching managed secrets for profile: ${n}...`));let u=await D.get(`/projects/${t.projectId}/secrets/export?env=${n}`);u.data?.status==="success"&&u.data.secrets&&(Object.assign(r,u.data.secrets),zt.info(nt.magenta(`\u2713 Injected secrets from ${m.name} Dashboard.`)))}catch{zt.warn("Could not fetch managed secrets. Running with local env only.")}t&&Object.assign(r,pn(t,m.envPrefix)),i&&(Object.assign(r,pn(i,`${m.envPrefix}PROFILE_`)),i.env&&Object.assign(r,i.env));let o=!1;try{let u=JSON.parse(ny.readFileSync("package.json","utf-8"));o=!!(u.dependencies?.expo||u.devDependencies?.expo)}catch{zt.warn("Could not parse package.json. Defaulting to Bare React Native mode.")}let s=Number(e.port||i?.port||8081),a=await jd(s);a!==s&&zt.info(nt.yellow(`Port ${s} is busy. ${m.name} is using ${a} instead.`));let l=process.platform==="win32"?"npx.cmd":"npx",d=[];if(o?(d=["expo","start","--port",String(a)],e.clear&&d.push("--clear"),e.tunnel&&d.push("--tunnel"),e.lan&&d.push("--lan"),e.localhost&&d.push("--localhost"),e.ios&&d.push("--ios"),e.android&&d.push("--android"),e.web&&d.push("--web")):(d=["react-native","start","--port",String(a)],e.clear&&d.push("--clear")),o){let u=[`${nt.cyan("i")}  open iOS simulator`,`${nt.cyan("a")}  open Android emulator/device`,`${nt.cyan("w")}  open web`,`${nt.cyan("r")}  reload app`];zt.info([nt.bold("Launch controls"),...u.map(f=>`  ${f}`),"",nt.dim("Direct launch: mach start --ios | --android | --web"),nt.dim(`Metro URL: http://localhost:${a}`)].join(`
-`))}else zt.info(nt.dim(`Metro URL: http://localhost:${a}`));let c=ty(l,d,{stdio:"inherit",env:r});return new Promise((u,f)=>{c.on("exit",p=>{p===0?u():f(new Error(`Dev server exited with code ${p}`))}),c.on("error",p=>{f(p)})})};import{log as Je}from"@clack/prompts";import pt from"chalk";var Vd=async e=>{let t=Ie();t||(Je.error(pt.red(`No ${m.configFileName} found in the current directory.`)),process.exit(1));let n=e.profile||"development",i=Ve(t,n);if(e.json){console.log(JSON.stringify({project:t,resolved:i},null,2));return}Je.info(pt.bgBlue.white(` Resolved ${m.name} Config [${n}] `)),Je.info(pt.dim("----------------------------------------")),Je.info(`${pt.blue("Project ID:")} ${t.projectId}`),Je.info(`${pt.blue("Name:")} ${t.name}`),Je.info(`${pt.blue("Scheme:")} ${t.scheme}`),i?(Je.info(pt.dim(`
-Profile Settings:`)),Je.info(`${pt.cyan("Distribution:")} ${i.distribution||"none"}`),Je.info(`${pt.cyan("Development Client:")} ${i.developmentClient||"false"}`),i.env&&Object.keys(i.env).length>0&&(Je.info(pt.dim(`
-Environment Variables:`)),Object.entries(i.env).forEach(([r,o])=>{Je.info(`  ${r}=${o}`)}))):Je.warn(`Profile '${n}' not found.`),Je.info(pt.dim("----------------------------------------"))};import{cancel as wy,confirm as ac,isCancel as bi,log as Ar,note as vy,outro as Er,select as $y,text as lc}from"@clack/prompts";import mt from"chalk";import _y from"fs";import oc from"path";import an from"fs";import Pn from"path";var Rn="./plugins/withMachDeepLinks",es="mach.deep-links.json",zd=["/*"],ts=e=>{if(typeof e!="string")return;let t=e.trim();return t.length>0?t:void 0},pr=e=>{let t=new Set,n=[];for(let i of e){let r=ts(i);!r||t.has(r)||(t.add(r),n.push(r))}return n},ft=(...e)=>{for(let t of e){let n=ts(t);if(n)return n}},Gd=(e,t)=>e.length!==t.length?!1:e.every((n,i)=>n===t[i]);function Kd(e){if(typeof e!="string")return;let t=e.trim().toLowerCase();if(t==="ios"||t==="android"||t==="all")return t}function gi(e){let t=e.includes("://")?e:`https://${e}`,n=new URL(t),i=n.pathname==="/"?"":n.pathname.replace(/\/+$/,"");return`${n.protocol}//${n.host}${i}`}function ur(e){return new URL(gi(e)).hostname}function fr(e){return e.trim().toLowerCase().replace(/[^a-z0-9+.-]/g,"-").replace(/^-+|-+$/g,"")||"app"}function Wd(e=process.cwd()){let t=Pn.join(e,"package.json"),n=["app.json","app.config.json","app.config.js","app.config.ts"].some(r=>an.existsSync(Pn.join(e,r))),i=!1;if(an.existsSync(t))try{let r=JSON.parse(an.readFileSync(t,"utf-8"));i=!!(r.dependencies?.expo||r.devDependencies?.expo)}catch{i=!1}return n&&i?"expo":an.existsSync(Pn.join(e,"ios"))||an.existsSync(Pn.join(e,"android"))?"react-native":cn}function Jd(e,t,n){if(t)return t;let i=!!(e.ios?.bundleIdentifier||n?.ios?.bundleIdentifier||e.deepLinks?.ios?.bundleIdentifier),r=!!(e.android?.package||n?.android?.package||n?.android?.applicationId||e.deepLinks?.android?.package);return i&&!r?"ios":r&&!i?"android":"all"}function mr(e=process.cwd(),t){let n=t?.deepLinks?.web?.outputDir;return n||(an.existsSync(Pn.join(e,"public"))?"public":"deep-links")}function qd(e,t){let n=e.deepLinks,i=gi(t.baseUrl||n?.baseUrl||(t.domain?`https://${t.domain}`:"")),r=ts(t.domain)||(t.baseUrl?ur(i):n?.domain)||ur(i),o=t.profile||n?.profile||"production",s=Ve(e,o)||{},a=s.ios||{},l=s.android||{},d=e.submit?.[o]?.ios||{},c=e.submit?.[o]?.android||{},u=fr(t.scheme||n?.scheme||a.scheme||e.scheme||e.slug||e.name||"app"),f=Yt(e,o),p=pr([...t.androidFingerprint||[],...n?.android?.sha256CertFingerprints||[],...l.sha256CertFingerprints||[],...e.android?.sha256CertFingerprints||[]]);return{baseUrl:i,domain:r,scheme:u,profile:o!=="production"?o:void 0,paths:n?.paths?.length?n.paths:["/*"],ios:{appStoreId:ft(t.appStoreId,n?.ios?.appStoreId,a.ascAppId,d.ascAppId,e.ios?.ascAppId),appleTeamId:ft(t.appleTeamId,n?.ios?.appleTeamId,a.appleTeamId,a.developerTeamId,d.appleTeamId,d.developerTeamId,e.ios?.appleTeamId,e.ios?.developerTeamId,f.teamId),bundleIdentifier:ft(t.iosBundleId,n?.ios?.bundleIdentifier,a.bundleIdentifier,a.bundleId,e.ios?.bundleIdentifier,e.ios?.bundleId,e.expo?.ios?.bundleIdentifier),webCredentials:!!n?.ios?.webCredentials,activityContinuation:!!n?.ios?.activityContinuation},android:{package:ft(t.androidPackage,n?.android?.package,l.package,l.applicationId,e.android?.package,e.expo?.android?.package,c.packageName,c.package),sha256CertFingerprints:p},web:{smartAppBanner:n?.web?.smartAppBanner??!0,outputDir:t.output||n?.web?.outputDir||mr(process.cwd(),e)}}}function gr(e,t={}){let n=e.deepLinks,i=t.profile||n?.profile||"production",r=t.expoHints||null,o=ft(n?.baseUrl,r?.domain?`https://${r.domain}`:void 0);if(!o)return null;let s=gi(o),a=Ve(e,i)||{},l=a.ios||{},d=a.android||{},c=e.submit?.[i]?.ios||{},u=e.submit?.[i]?.android||{},f=Yt(e,i),p=ft(n?.domain,r?.domain)||ur(s),y=fr(ft(n?.scheme,l.scheme,e.scheme,r?.scheme,e.slug,e.name,"app")||"app"),g=n?.paths?.length?n.paths:[...zd];return{baseUrl:s,domain:p,scheme:y,profile:i!=="production"?i:void 0,paths:g,ios:{appStoreId:ft(n?.ios?.appStoreId,l.ascAppId,c.ascAppId,e.ios?.ascAppId),appleTeamId:ft(n?.ios?.appleTeamId,l.appleTeamId,l.developerTeamId,c.appleTeamId,c.developerTeamId,e.ios?.appleTeamId,e.ios?.developerTeamId,f.teamId),bundleIdentifier:ft(n?.ios?.bundleIdentifier,l.bundleIdentifier,l.bundleId,e.ios?.bundleIdentifier,e.ios?.bundleId,e.expo?.ios?.bundleIdentifier,r?.iosBundleIdentifier),webCredentials:!!n?.ios?.webCredentials,activityContinuation:!!n?.ios?.activityContinuation},android:{package:ft(n?.android?.package,d.package,d.applicationId,e.android?.package,e.expo?.android?.package,u.packageName,u.package,r?.androidPackage),sha256CertFingerprints:pr([...n?.android?.sha256CertFingerprints||[],...d.sha256CertFingerprints||[],...e.android?.sha256CertFingerprints||[]])},web:{smartAppBanner:n?.web?.smartAppBanner??!0,outputDir:n?.web?.outputDir||mr(t.cwd||process.cwd(),e)}}}function hr(e,t,n="production",i=process.cwd()){return t?.domain?gr({...e,deepLinks:{baseUrl:`https://${t.domain}`,domain:t.domain,scheme:t.scheme}},{profile:n,cwd:i,expoHints:t}):null}function iy(e,t,n=t.profile||"production"){let i=gr({...e,deepLinks:{baseUrl:t.baseUrl}},{profile:n}),r={baseUrl:t.baseUrl};n!=="production"&&(r.profile=n),t.domain&&t.domain!==ur(t.baseUrl)&&(r.domain=t.domain),t.scheme&&t.scheme!==i?.scheme&&(r.scheme=t.scheme),t.paths?.length&&!Gd(t.paths,zd)&&(r.paths=t.paths);let o={};t.ios?.bundleIdentifier&&t.ios.bundleIdentifier!==i?.ios?.bundleIdentifier&&(o.bundleIdentifier=t.ios.bundleIdentifier),t.ios?.appleTeamId&&t.ios.appleTeamId!==i?.ios?.appleTeamId&&(o.appleTeamId=t.ios.appleTeamId),t.ios?.appStoreId&&t.ios.appStoreId!==i?.ios?.appStoreId&&(o.appStoreId=t.ios.appStoreId),t.ios?.webCredentials&&(o.webCredentials=!0),t.ios?.activityContinuation&&(o.activityContinuation=!0),Object.keys(o).length>0&&(r.ios=o);let s={};t.android?.package&&t.android.package!==i?.android?.package&&(s.package=t.android.package);let a=t.android?.sha256CertFingerprints||[],l=i?.android?.sha256CertFingerprints||[];a.length>0&&!Gd(a,l)&&(s.sha256CertFingerprints=a),Object.keys(s).length>0&&(r.android=s);let d={outputDir:t.web?.outputDir||"deep-links"};return t.web?.smartAppBanner===!1&&(d.smartAppBanner=!1),r.web=d,r}function Yd(e,t,n,i=n.profile||"production"){let r={...e,framework:t,scheme:e.scheme||n.scheme};return{...r,deepLinks:iy(r,n,i)}}function Xd(e,t=process.cwd()){let n=Pn.join(t,"mach.config.json");return an.writeFileSync(n,`${JSON.stringify(e,null,2)}
-`),n}import Oe from"fs";import Le from"path";import{spawnSync as Zd}from"child_process";var hi="@radhya/mach/expo-plugin",ry=`const fs = require('fs')
+`,a=o[1]||"",l=o[2]||"",c=l.match(/\r?\n([ \t]+)\S/)?.[1]||`${a}    `,u=l.trim().length===0?`${s}${c}'${ue}',${s}${a}`:l.includes(`
+`)||l.includes("\r")?`${s}${c}'${ue}',${l}`:`${s}${c}'${ue}',${s}${c}${l.trim()}${s}${a}`,f=`${o[0].slice(0,o[0].indexOf("[")+1)}${u}]`;return z.writeFileSync(n,`${i.slice(0,o.index)}${f}${i.slice(o.index+o[0].length)}`),"inserted"}async function gf(e,t,n){let i=[];if(uf(e)){let o=ai(e),s=!!(n.installPlugin||n.yes);if(!s&&!n.skipInstall&&Ur()){let a=await Ua({message:o?`Update the local ${m.npmScope}/mach Expo plugin (${o} \u2192 ${et})?`:`Install ${m.npmScope}/mach locally so Expo can use ${ue}?`,initialValue:!0});li(a)&&di(),s=!!a}if(s&&!n.skipInstall){let a=pf(e);a.ok?i.push(`Installed a compatible ${ue} with ${a.label}.`):i.push(`Could not install ${m.npmScope}/mach with ${a.label}: ${a.error||"unknown error"}.`)}else i.push(`Install ${m.npmScope}/mach@${et} or newer in this app so Expo can resolve ${ue}.`)}else i.push(`Local ${ue} is compatible (${ai(e)}).`);let r=mf(e);if(r==="already"&&i.push(`Expo config already includes ${ue}.`),r==="inserted"&&i.push(`Expo config updated to include ${ue}.`),r==="manual"&&i.push(`Add "${ue}" to the plugins array in app.config.ts/app.config.js.`),r==="missing"){let o=ff(e,t);o?i.push(`${o} updated to include ${ue}.`):i.push(`Add "${ue}" to your Expo config plugins array.`)}return i}async function Na(e,t){if(t.skipInstall)return!1;if(t.yes)return!0;if(!Ur())return!1;let n=await Ua({message:e,initialValue:!0});return li(n)&&di(),!!n}async function hf(e,t,n){let i=[];if(t==="react-native"&&!ft(e,"expo"))if(await Na("Install Expo Modules required by the Mach OTA runtime? This updates package and native project files.",n)){let o=fo(e);if(!o.ok||!ft(e,"expo"))throw new Error(`Expo Modules installation failed: ${o.error||o.command}`);i.push("Installed and configured Expo Modules for the existing React Native project.")}else i.push("Expo Modules are required. Run `npx install-expo-modules@latest`, then run `mach ota setup` again.");if(!ft(e,"expo-updates"))if(await Na("Install the expo-updates runtime?",n)){let o=mo(e);if(!o.ok||!ft(e,"expo-updates"))throw new Error(`expo-updates installation failed: ${o.error||o.command}`);i.push("Installed the Expo-compatible expo-updates version.")}else i.push("Install expo-updates with `npx expo install expo-updates`, then run `mach ota setup` again.");return i}async function xa(e,t,n,i,r){if(t)return t;if(r||!Ur()){if(i)throw new Error(`${e.replace(/:$/,"")} is required.`);return}let o=await af({message:e,placeholder:n,validate(s){if(i&&s.trim().length===0)return"Required."}});return li(o)&&di(),Ae(o)}function Hr(e,t,n){return Kt(e,{runtimeVersion:t.runtimeVersion,framework:$e(t.framework)||$e(e.framework),platform:n})}function yf(e){let t=zt(process.cwd(),e);if(!t)throw new Error(`Resolved Expo OTA configuration does not match this publish: Expo config could not be resolved. Run \`mach ota setup\` to update ${ue}, then create a new native build if its embedded runtime changes.`);let n=[];if(t.runtimeVersion!==e.runtimeVersion&&n.push(`runtime is ${t.runtimeVersion||"missing"} (expected ${e.runtimeVersion})`),t.channel!==e.channel&&n.push(`channel is ${t.channel||"missing"} (expected ${e.channel})`),t.url!==e.url&&n.push(`URL is ${t.url||"missing"} (expected ${e.url})`),n.length>0)throw new Error(`Resolved Expo OTA configuration does not match this publish: ${n.join("; ")}. Run \`mach ota setup\` to update ${ue}, then create a new native build if its embedded runtime changes.`);return t}function bf(e){return Mr.createHash("sha256").update(z.readFileSync(e)).digest("hex")}function Af(e){let t=te.extname(e).toLowerCase();return t===".json"?"application/json":t===".js"||t===".bundle"||t===".hbc"?"application/javascript":t===".map"?"application/json":t===".png"?"image/png":t===".jpg"||t===".jpeg"?"image/jpeg":t===".webp"?"image/webp":t===".gif"?"image/gif":t===".svg"?"image/svg+xml":t===".ttf"?"font/ttf":t===".otf"?"font/otf":t===".woff"?"font/woff":t===".woff2"?"font/woff2":"application/octet-stream"}function Ga(e){let t=[];if(!z.existsSync(e))return t;for(let n of z.readdirSync(e)){let i=te.join(e,n),r=z.statSync(i);r.isDirectory()?t.push(...Ga(i)):r.isFile()&&t.push(i)}return t}function Sf(e,t){let n=e.filter(i=>{let r=i.toLowerCase();return r.endsWith(".map")?!1:r.endsWith(".js")||r.endsWith(".bundle")||r.endsWith(".hbc")});return n.find(i=>i.toLowerCase().includes(t))||n.sort((i,r)=>z.statSync(r).size-z.statSync(i).size)[0]}async function La(e){let t=await $.post("/ota/upload-url",{projectId:e.projectId,updateId:e.updateId,platform:e.platform,fileName:e.fileName,contentType:e.contentType});if(t.data.status!=="success")throw new Error(t.data.message||`Could not create upload URL for ${e.fileName}`);let n=z.statSync(e.filePath).size;return await lf.put(t.data.uploadUrl,z.createReadStream(e.filePath),{headers:{"Content-Type":e.contentType,"Content-Length":n},maxBodyLength:1/0,maxContentLength:1/0}),{key:t.data.key,url:t.data.publicUrl,contentType:e.contentType,hash:bf(e.filePath),size:n}}function Va(e,t,n,i={}){let r=Fa(e,t,{cwd:n,stdio:"inherit",env:{...process.env,CI:process.env.CI||"1",EXPO_NO_TELEMETRY:"1",...i}});if(r.error)throw new Error(r.error.message);if(r.status!==0)throw new Error(`${e} ${t.join(" ")} exited with code ${r.status}`)}function Ef(e,t,n,i,r){Va("npx",["expo","export","--platform",e,"--output-dir",t],process.cwd(),{MACH_OTA_RUNTIME_VERSION:n,MACH_OTA_CHANNEL:i,MACH_OTA_URL:r})}function If(e,t){let n=e==="ios"?"main.jsbundle":"index.android.bundle",r=["index.js","index.ts","index.tsx"].find(s=>z.existsSync(te.join(process.cwd(),s)))||"index.js",o=te.join(t,"assets");z.mkdirSync(o,{recursive:!0}),Va("npx",["react-native","bundle","--platform",e,"--dev","false","--entry-file",r,"--bundle-output",te.join(t,n),"--assets-dest",o],process.cwd())}async function wf(e){let t=e.config.projectId,n=`ota_${Date.now()}_${e.platform}_${Mr.randomUUID().slice(0,8)}`,i=te.join(process.cwd(),".mach","ota",n,e.platform);z.rmSync(i,{recursive:!0,force:!0}),z.mkdirSync(i,{recursive:!0}),e.engine==="expo-updates"?Ef(e.platform,i,e.runtimeVersion,e.channel,e.config.ota?.url||""):If(e.platform,i);let r=e.engine==="expo-updates"?Da(i,e.platform):void 0,o=r?Pa(i,r):Ga(i),s=r?te.join(i,r.bundle):Sf(o,e.platform);if(!s)throw new Error(`Could not find a ${e.platform} JS bundle in ${i}.`);let a=new Map((r?.assets||[]).map(w=>[w.path,w])),l=[];for(let w of o){let L=te.relative(i,w).replace(/\\/g,"/"),_=a.get(L),H=w===s?"application/javascript":_?si(_.ext):Af(w);l.push({filePath:w,relative:L,uploaded:await La({projectId:t,updateId:n,platform:e.platform,filePath:w,fileName:L,contentType:H})})}let d=l.find(w=>w.filePath===s),c=e.engine==="expo-updates"?Mr.randomUUID():void 0,u=e.engine==="expo-updates"?Ta(e.expoConfig):void 0;if(e.engine==="expo-updates"&&(!u||Object.keys(u).length===0))throw new Error("Could not resolve the public Expo config required by the OTA manifest. Run `mach ota verify` and try again.");let f=r?r.assets.map(w=>{let L=l.find(_=>_.relative===w.path);if(!L)throw new Error(`Could not find uploaded Expo asset ${w.path}.`);return{key:xr(L.filePath),url:L.uploaded.url,contentType:si(w.ext),fileExtension:Ca(w.ext),hash:Lr(L.filePath),size:L.uploaded.size}}):l.filter(w=>w.filePath!==s&&!w.relative.endsWith(".map")).map(w=>({key:w.relative,url:w.uploaded.url,contentType:w.uploaded.contentType,hash:w.uploaded.hash,size:w.uploaded.size})),p=r?{key:xr(d.filePath),url:d.uploaded.url,contentType:si(void 0,!0),hash:Lr(d.filePath),size:d.uploaded.size}:{key:te.basename(d.relative),url:d.uploaded.url,contentType:d.uploaded.contentType,hash:d.uploaded.hash,size:d.uploaded.size},g={id:c||n,createdAt:new Date().toISOString(),runtimeVersion:e.runtimeVersion,launchAsset:p,assets:f,metadata:{projectId:t,channel:e.channel,...e.message?{message:e.message}:{},engine:e.engine},extra:{...u?{expoClient:u}:{},mach:{projectId:t,updateId:n,...c?{expoUpdateId:c}:{},channel:e.channel,platform:e.platform}}},h=te.join(i,"mach-manifest.json");z.writeFileSync(h,JSON.stringify(g,null,2));let y=await La({projectId:t,updateId:n,platform:e.platform,filePath:h,fileName:"manifest.json",contentType:"application/json"}),b=await $.post("/ota/publish",{projectId:t,updateId:n,expoUpdateId:c,channelName:e.channel,runtimeVersion:e.runtimeVersion,platform:e.platform,manifestKey:y.key,message:e.message,launchAsset:p,assets:f});if(b.data.status!=="success")throw new Error(b.data.message||`Failed to publish ${e.platform} OTA update.`);return b.data.update}async function vf(e){let t=mn(),n=$e(e.framework)||Fr(t),i;try{i=ja(Br(e.engine,n))}catch(f){Re.error(f.message),process.exit(1)}let r=!!e.yes,o=await xa("OTA channel:",Ae(e.channel||e.branch||t.ota?.channel)||"production","production",!0,r),s=`${Qe.replace(/\/$/,"")}/api/ota/expo/${t.projectId}`,a=Ae(e.url||t.ota?.url),l=a?.includes("/api/ota/react-native/")?void 0:a,d=await xa("Mach OTA update URL:",l||s,s,!0,r);t.framework=n;let c={...t.ota||{},enabled:!0,engine:i,channel:o,url:d,deploymentUrl:d,runtimeVersionPolicy:t.ota?.runtimeVersionPolicy||"appVersion"};delete c.statsUrl,t.ota=c,delete t.update,df(t);let u=[`${m.configFileName} updated.`];if(u.push(...await hf(process.cwd(),n,e)),u.push(...await gf(process.cwd(),n,e)),n==="react-native"&&ft(process.cwd(),"expo")&&ft(process.cwd(),"expo-updates")&&ci(process.cwd())){let f=jr(e.platform||"all"),p=Li(process.cwd()).filter(g=>f.includes(g));p.length===0&&u.push("No matching committed ios/android project was found for native configuration sync.");for(let g of p){let h=Hr(t,e,g),b=go({cwd:process.cwd(),platforms:[g],runtimeVersion:h,channel:o,url:d}).find(w=>!w.ok);if(b)throw new Error(`Could not synchronize ${g} Expo Updates configuration: ${b.error||b.command}`);u.push(`Synchronized ${g} native Expo Updates configuration for runtime ${h}.`)}}u.push("Create and install one new native build after initial OTA setup. Existing app binaries keep their embedded update URL."),rf(u.map(f=>`- ${f}`).join(`
+`),"OTA setup"),await za({...e,action:"verify"})}async function _f(e){Et();let t=mn(),n=$e(e.framework)||Fr(t),i;try{i=ja(Br(e.engine||t.ota?.engine,n))}catch(a){Re.error(`${a.message} Run \`mach ota setup\` to migrate this project.`),process.exit(1)}let r=Ae(e.channel||e.branch||t.ota?.channel)||"production",o=jr(e.platform||"all"),s=sf();s.start(`Publishing OTA update (${o.join("+")}, ${r})`);try{let a=[];for(let l of o){let d=Hr(t,e,l),c=yf({platform:l,runtimeVersion:d,channel:r,url:Ae(t.ota?.url)||""});s.message(`Exporting and uploading ${l} OTA bundle for runtime ${d}...`),a.push(await wf({config:t,engine:i,platform:l,channel:r,runtimeVersion:d,message:e.message,expoConfig:c.expoConfig}))}if(s.stop("OTA update published."),e.json)Re.info(JSON.stringify({status:"success",updates:a},null,2));else{let l=Array.from(new Set(a.map(d=>d.runtimeVersion).filter(Boolean)));Tt(xe.green(`\u2713 OTA update live on "${r}" for runtime ${l.join(", ")||"unknown"}.`));for(let d of a)Re.info(xe.dim(`${d.platform}: ${d.updateId}`))}}catch(a){s.stop("OTA publish failed."),Re.error(a.response?.data?.message||a.message),process.exit(1)}}async function za(e){let t=mn(),n=$e(e.framework)||Fr(t),i=Br(e.engine||t.ota?.engine,n),r=[],o=t.ota;if(r.push(o?.enabled?{level:"pass",message:"mach.config.json has ota.enabled."}:{level:"fail",message:"mach.config.json is missing ota.enabled. Run `mach ota setup`."}),r.push(o?.url?{level:"pass",message:`OTA URL configured: ${o.url}`}:{level:"fail",message:"OTA URL is missing. Run `mach ota setup`."}),r.push(o?.channel?{level:"pass",message:`Default channel: ${o.channel}`}:{level:"warn",message:"No default OTA channel configured; publish will use production."}),r.push(o?.runtimeVersionPolicy||o?.runtimeVersion?{level:"pass",message:"Runtime version policy configured."}:{level:"warn",message:"No explicit runtime policy configured; Mach will use Expo runtimeVersion or package.json version."}),i==="expo-updates"){let a=kt(te.join(process.cwd(),"package.json"))||{},l={...a.dependencies||{},...a.devDependencies||{}};n==="react-native"&&r.push(l.expo?{level:"pass",message:"Expo Modules are installed for the bare React Native project."}:{level:"fail",message:"Expo Modules are missing. Run `mach ota setup` to install the bare React Native OTA runtime."}),r.push(l["expo-updates"]?{level:"pass",message:"expo-updates is installed."}:{level:"fail",message:"expo-updates is missing. Run `mach ota setup`."}),r.push(ci(process.cwd())?{level:"pass",message:`${m.npmScope}/mach is installed locally for the Expo plugin.`}:{level:"fail",message:`${m.npmScope}/mach is not installed locally; run \`mach ota setup\`.`});let d=jr(e.platform||"all"),c=Ae(e.channel||e.branch||o?.channel)||"production",u=Ae(o?.url)||"",f=d.map(g=>{let h=Hr(t,e,g);return{platform:g,runtimeVersion:h,delivery:zt(process.cwd(),{platform:g,runtimeVersion:h,channel:c,url:u})}}),p=f[0]?.delivery;if(p){let g=p.expoConfig.updates?.enabled!==!1,h=Ae(p.expoConfig.updates?.checkAutomatically)?.toUpperCase()||"ON_LOAD";r.push(p.url===o?.url?{level:"pass",message:"Expo Updates URL resolves to Mach."}:{level:"warn",message:`Expo Updates URL resolves to ${p.url||"none"} instead of ${o?.url||"the Mach OTA URL"}.`}),r.push(p.channel===c?{level:"pass",message:`Expo update channel header resolves to ${c}.`}:{level:"warn",message:`Expo update channel header is ${p.channel||"not set"}; install the latest ${m.npmScope}/mach package and rebuild.`}),r.push(g?{level:"pass",message:"Expo Updates is enabled."}:{level:"fail",message:"Expo config has updates.enabled=false, so this app cannot receive OTA updates."}),r.push(h!=="NEVER"&&h!=="ON_ERROR_RECOVERY"?{level:"pass",message:`Expo checks for updates automatically (${h}).`}:{level:"fail",message:`Expo checkAutomatically is ${h}; use ON_LOAD to receive Mach updates when the app starts.`})}else r.push({level:"fail",message:`Could not resolve Expo config. Confirm ${ue} is present and run \`mach ota setup\` again.`});for(let{platform:g,runtimeVersion:h,delivery:y}of f)r.push(y?.runtimeVersion===h?{level:"pass",message:`${g} Expo runtime resolves to ${h}.`}:{level:"fail",message:`${g} Expo runtime resolves to ${y?.runtimeVersion||"none"} instead of ${h}. Run \`mach ota setup\`, then rebuild the app.`});if(n==="react-native"){let g=d,h=Li(process.cwd()).filter(b=>g.includes(b)),y=ho(process.cwd());if(h.includes("android")){let b=!!(y.androidManifest&&y.androidStrings)&&z.readFileSync(y.androidManifest,"utf-8").includes("expo.modules.updates.EXPO_UPDATE_URL")&&z.readFileSync(y.androidStrings,"utf-8").includes("expo_runtime_version");r.push(b?{level:"pass",message:"Android native Expo Updates configuration is synchronized."}:{level:"fail",message:"Android native Expo Updates configuration is missing. Run `mach ota setup --platform android`."})}if(h.includes("ios")){let b=!!y.iosExpoPlist&&z.readFileSync(y.iosExpoPlist,"utf-8").includes("EXUpdatesURL")&&z.readFileSync(y.iosExpoPlist,"utf-8").includes("EXUpdatesRuntimeVersion");r.push(b?{level:"pass",message:"iOS native Expo Updates configuration is synchronized."}:{level:"fail",message:"iOS native Expo Updates configuration is missing. Run `mach ota setup --platform ios`."})}}}else r.push({level:"fail",message:"mach-react-native is not available yet. Run `mach ota setup` to migrate this project to expo-updates."});for(let a of r){let l=a.level==="pass"?xe.green("PASS"):a.level==="warn"?xe.yellow("WARN"):xe.red("FAIL");Re.info(`${l} ${a.message}`)}let s=r.filter(a=>a.level==="fail").length;s>0&&(Tt(xe.red(`OTA verification failed with ${s} issue(s).`)),process.exit(1)),Tt(xe.green("OTA verification passed."))}async function $f(e){Et();let t=mn(),n=await $.get(`/ota/${t.projectId}/updates`),i=n.data.updates||[];if(e.json){Re.info(JSON.stringify(n.data,null,2));return}if(i.length===0){Tt("No OTA updates found.");return}for(let r of i){let o=r.stats?.total||{};Re.info(`${xe.bold(r.updateId)} ${xe.dim(`${r.platform} ${r.channelName} runtime ${r.runtimeVersion}`)} ${r.status||"active"}`),Re.info(xe.dim(`  downloads ios=${o.iosDownloaded||0} android=${o.androidDownloaded||0} applied ios=${o.iosApplied||0} android=${o.androidApplied||0}`))}Tt(`Found ${i.length} OTA update(s).`)}async function Ma(e,t){Et();let n=mn(),i=Ae(t.updateId);i||(Re.error(`Missing update id. Use \`${m.nameLower} ota ${e} --update-id <id>\`.`),process.exit(1));let r=await $.post(`/ota/${n.projectId}/updates/${encodeURIComponent(i)}/${e}`);t.json?Re.info(JSON.stringify(r.data,null,2)):Tt(xe.green(`\u2713 OTA update ${e==="rollback"?"rolled back":"promoted"}: ${i}`))}async function at(e,t={}){let n=e||t.action||"publish";if(n==="setup")return vf({...t,action:n});if(n==="publish")return _f({...t,action:n});if(n==="verify")return za({...t,action:n});if(n==="list")return $f({...t,action:n});if(n==="rollback")return Ma("rollback",{...t,action:n});if(n==="promote")return Ma("promote",{...t,action:n});let i=await of({message:"What do you want to do?",options:[{value:"setup",label:"Setup OTA"},{value:"publish",label:"Publish OTA update"},{value:"verify",label:"Verify OTA setup"},{value:"list",label:"List OTA updates"}]});return li(i)&&di(),at(i,t)}import{intro as Rf,outro as Ka,log as Nt}from"@clack/prompts";import Ve from"chalk";async function Wa(){Rf(Ve.blue(`${m.name} CLI - User Profile`));let e=be();if(!e){Nt.warn(Ve.yellow("You are not logged in.")),Nt.info(`Run \`${m.nameLower} login\` to authenticate.`),Ka();return}Nt.info(`${Ve.bold("Logged in as:")} ${Ve.green(e.email)}`);try{await $.get("/projects");let n=be().token.split(".");if(n.length===3){let i=JSON.parse(Buffer.from(n[1],"base64").toString());if(i.exp){let r=new Date(i.exp*1e3),o=new Date,s=r.getTime()-o.getTime();if(s>0){let a=Math.round(s/6e4),l=(a/60).toFixed(1);Nt.info(`${Ve.bold("Token status:")} Valid (Expires in ~${l}h / ${a}m)`)}else Nt.warn(`${Ve.bold("Token status:")} ${Ve.red("Expired")} (Auto-refresh failed)`)}}}catch{Nt.warn(`${Ve.bold("Token status:")} ${Ve.red("Unreachable")} (Session might be truly expired)${Qe}`)}Ka(Ve.blue("---"))}import{spawn as Pf}from"child_process";import{log as lt}from"@clack/prompts";import Oe from"chalk";import Cf from"fs";import Of from"net";async function Df(e){return new Promise(t=>{let n=Of.createServer();n.once("error",i=>{i.code==="EADDRINUSE"?t(!0):t(!1)}),n.once("listening",()=>{n.close(),t(!1)}),n.listen(e,"0.0.0.0")})}async function qa(e,t=20){let n=e;for(;n<e+t;){if(!await Df(n))return n;n++}throw new Error(`Could not find an available port after ${t} attempts starting from ${e}.`)}var Ja=async e=>{lt.info(Oe.blue(`Starting ${m.name} Dev Orchestrator...`));let t=ce(),n=e.buildProfile||"development",i=t?Ie(t,n):null,r={...process.env};if(t?.projectId)try{lt.info(Oe.dim(`Fetching managed secrets for profile: ${n}...`));let u=await $.get(`/projects/${t.projectId}/secrets/export?env=${n}`);u.data?.status==="success"&&u.data.secrets&&(Object.assign(r,u.data.secrets),lt.info(Oe.magenta(`\u2713 Injected secrets from ${m.name} Dashboard.`)))}catch{lt.warn("Could not fetch managed secrets. Running with local env only.")}t&&Object.assign(r,vt(t,m.envPrefix)),i&&(Object.assign(r,vt(i,`${m.envPrefix}PROFILE_`)),i.env&&Object.assign(r,i.env));let o=!1;try{let u=JSON.parse(Cf.readFileSync("package.json","utf-8"));o=!!(u.dependencies?.expo||u.devDependencies?.expo)}catch{lt.warn("Could not parse package.json. Defaulting to Bare React Native mode.")}let s=Number(e.port||i?.port||8081),a=await qa(s);a!==s&&lt.info(Oe.yellow(`Port ${s} is busy. ${m.name} is using ${a} instead.`));let l=process.platform==="win32"?"npx.cmd":"npx",d=[];if(o?(d=["expo","start","--port",String(a)],e.clear&&d.push("--clear"),e.tunnel&&d.push("--tunnel"),e.lan&&d.push("--lan"),e.localhost&&d.push("--localhost"),e.ios&&d.push("--ios"),e.android&&d.push("--android"),e.web&&d.push("--web")):(d=["react-native","start","--port",String(a)],e.clear&&d.push("--clear")),o){let u=[`${Oe.cyan("i")}  open iOS simulator`,`${Oe.cyan("a")}  open Android emulator/device`,`${Oe.cyan("w")}  open web`,`${Oe.cyan("r")}  reload app`];lt.info([Oe.bold("Launch controls"),...u.map(f=>`  ${f}`),"",Oe.dim("Direct launch: mach start --ios | --android | --web"),Oe.dim(`Metro URL: http://localhost:${a}`)].join(`
+`))}else lt.info(Oe.dim(`Metro URL: http://localhost:${a}`));let c=Pf(l,d,{stdio:"inherit",env:r});return new Promise((u,f)=>{c.on("exit",p=>{p===0?u():f(new Error(`Dev server exited with code ${p}`))}),c.on("error",p=>{f(p)})})};import{log as we}from"@clack/prompts";import Le from"chalk";var Ya=async e=>{let t=ce();t||(we.error(Le.red(`No ${m.configFileName} found in the current directory.`)),process.exit(1));let n=e.profile||"development",i=Ie(t,n);if(e.json){console.log(JSON.stringify({project:t,resolved:i},null,2));return}we.info(Le.bgBlue.white(` Resolved ${m.name} Config [${n}] `)),we.info(Le.dim("----------------------------------------")),we.info(`${Le.blue("Project ID:")} ${t.projectId}`),we.info(`${Le.blue("Name:")} ${t.name}`),we.info(`${Le.blue("Scheme:")} ${t.scheme}`),i?(we.info(Le.dim(`
+Profile Settings:`)),we.info(`${Le.cyan("Distribution:")} ${i.distribution||"none"}`),we.info(`${Le.cyan("Development Client:")} ${i.developmentClient||"false"}`),i.env&&Object.keys(i.env).length>0&&(we.info(Le.dim(`
+Environment Variables:`)),Object.entries(i.env).forEach(([r,o])=>{we.info(`  ${r}=${o}`)}))):we.warn(`Profile '${n}' not found.`),we.info(Le.dim("----------------------------------------"))};import{cancel as Zf,confirm as ml,isCancel as bn,log as Si,note as Qf,outro as Ei,select as em,text as gl}from"@clack/prompts";import Ue from"chalk";import tm from"fs";import pl from"path";import At from"fs";import xt from"path";var Lt="./plugins/withMachDeepLinks",Gr="mach.deep-links.json",Za=["/*"],Vr=e=>{if(typeof e!="string")return;let t=e.trim();return t.length>0?t:void 0},pi=e=>{let t=new Set,n=[];for(let i of e){let r=Vr(i);!r||t.has(r)||(t.add(r),n.push(r))}return n},Me=(...e)=>{for(let t of e){let n=Vr(t);if(n)return n}},Xa=(e,t)=>e.length!==t.length?!1:e.every((n,i)=>n===t[i]);function Qa(e){if(typeof e!="string")return;let t=e.trim().toLowerCase();if(t==="ios"||t==="android"||t==="all")return t}function gn(e){let t=e.includes("://")?e:`https://${e}`,n=new URL(t),i=n.pathname==="/"?"":n.pathname.replace(/\/+$/,"");return`${n.protocol}//${n.host}${i}`}function ui(e){return new URL(gn(e)).hostname}function fi(e){return e.trim().toLowerCase().replace(/[^a-z0-9+.-]/g,"-").replace(/^-+|-+$/g,"")||"app"}function el(e=process.cwd()){let t=xt.join(e,"package.json"),n=["app.json","app.config.json","app.config.js","app.config.ts"].some(r=>At.existsSync(xt.join(e,r))),i=!1;if(At.existsSync(t))try{let r=JSON.parse(At.readFileSync(t,"utf-8"));i=!!(r.dependencies?.expo||r.devDependencies?.expo)}catch{i=!1}return n&&i?"expo":At.existsSync(xt.join(e,"ios"))||At.existsSync(xt.join(e,"android"))?"react-native":wt}function tl(e,t,n){if(t)return t;let i=!!(e.ios?.bundleIdentifier||n?.ios?.bundleIdentifier||e.deepLinks?.ios?.bundleIdentifier),r=!!(e.android?.package||n?.android?.package||n?.android?.applicationId||e.deepLinks?.android?.package);return i&&!r?"ios":r&&!i?"android":"all"}function mi(e=process.cwd(),t){let n=t?.deepLinks?.web?.outputDir;return n||(At.existsSync(xt.join(e,"public"))?"public":"deep-links")}function nl(e,t){let n=e.deepLinks,i=gn(t.baseUrl||n?.baseUrl||(t.domain?`https://${t.domain}`:"")),r=Vr(t.domain)||(t.baseUrl?ui(i):n?.domain)||ui(i),o=t.profile||n?.profile||"production",s=Ie(e,o)||{},a=s.ios||{},l=s.android||{},d=e.submit?.[o]?.ios||{},c=e.submit?.[o]?.android||{},u=fi(t.scheme||n?.scheme||a.scheme||e.scheme||e.slug||e.name||"app"),f=mt(e,o),p=pi([...t.androidFingerprint||[],...n?.android?.sha256CertFingerprints||[],...l.sha256CertFingerprints||[],...e.android?.sha256CertFingerprints||[]]);return{baseUrl:i,domain:r,scheme:u,profile:o!=="production"?o:void 0,paths:n?.paths?.length?n.paths:["/*"],ios:{appStoreId:Me(t.appStoreId,n?.ios?.appStoreId,a.ascAppId,d.ascAppId,e.ios?.ascAppId),appleTeamId:Me(t.appleTeamId,n?.ios?.appleTeamId,a.appleTeamId,a.developerTeamId,d.appleTeamId,d.developerTeamId,e.ios?.appleTeamId,e.ios?.developerTeamId,f.teamId),bundleIdentifier:Me(t.iosBundleId,n?.ios?.bundleIdentifier,a.bundleIdentifier,a.bundleId,e.ios?.bundleIdentifier,e.ios?.bundleId,e.expo?.ios?.bundleIdentifier),webCredentials:!!n?.ios?.webCredentials,activityContinuation:!!n?.ios?.activityContinuation},android:{package:Me(t.androidPackage,n?.android?.package,l.package,l.applicationId,e.android?.package,e.expo?.android?.package,c.packageName,c.package),sha256CertFingerprints:p},web:{smartAppBanner:n?.web?.smartAppBanner??!0,outputDir:t.output||n?.web?.outputDir||mi(process.cwd(),e)}}}function gi(e,t={}){let n=e.deepLinks,i=t.profile||n?.profile||"production",r=t.expoHints||null,o=Me(n?.baseUrl,r?.domain?`https://${r.domain}`:void 0);if(!o)return null;let s=gn(o),a=Ie(e,i)||{},l=a.ios||{},d=a.android||{},c=e.submit?.[i]?.ios||{},u=e.submit?.[i]?.android||{},f=mt(e,i),p=Me(n?.domain,r?.domain)||ui(s),g=fi(Me(n?.scheme,l.scheme,e.scheme,r?.scheme,e.slug,e.name,"app")||"app"),h=n?.paths?.length?n.paths:[...Za];return{baseUrl:s,domain:p,scheme:g,profile:i!=="production"?i:void 0,paths:h,ios:{appStoreId:Me(n?.ios?.appStoreId,l.ascAppId,c.ascAppId,e.ios?.ascAppId),appleTeamId:Me(n?.ios?.appleTeamId,l.appleTeamId,l.developerTeamId,c.appleTeamId,c.developerTeamId,e.ios?.appleTeamId,e.ios?.developerTeamId,f.teamId),bundleIdentifier:Me(n?.ios?.bundleIdentifier,l.bundleIdentifier,l.bundleId,e.ios?.bundleIdentifier,e.ios?.bundleId,e.expo?.ios?.bundleIdentifier,r?.iosBundleIdentifier),webCredentials:!!n?.ios?.webCredentials,activityContinuation:!!n?.ios?.activityContinuation},android:{package:Me(n?.android?.package,d.package,d.applicationId,e.android?.package,e.expo?.android?.package,u.packageName,u.package,r?.androidPackage),sha256CertFingerprints:pi([...n?.android?.sha256CertFingerprints||[],...d.sha256CertFingerprints||[],...e.android?.sha256CertFingerprints||[]])},web:{smartAppBanner:n?.web?.smartAppBanner??!0,outputDir:n?.web?.outputDir||mi(t.cwd||process.cwd(),e)}}}function hi(e,t,n="production",i=process.cwd()){return t?.domain?gi({...e,deepLinks:{baseUrl:`https://${t.domain}`,domain:t.domain,scheme:t.scheme}},{profile:n,cwd:i,expoHints:t}):null}function Tf(e,t,n=t.profile||"production"){let i=gi({...e,deepLinks:{baseUrl:t.baseUrl}},{profile:n}),r={baseUrl:t.baseUrl};n!=="production"&&(r.profile=n),t.domain&&t.domain!==ui(t.baseUrl)&&(r.domain=t.domain),t.scheme&&t.scheme!==i?.scheme&&(r.scheme=t.scheme),t.paths?.length&&!Xa(t.paths,Za)&&(r.paths=t.paths);let o={};t.ios?.bundleIdentifier&&t.ios.bundleIdentifier!==i?.ios?.bundleIdentifier&&(o.bundleIdentifier=t.ios.bundleIdentifier),t.ios?.appleTeamId&&t.ios.appleTeamId!==i?.ios?.appleTeamId&&(o.appleTeamId=t.ios.appleTeamId),t.ios?.appStoreId&&t.ios.appStoreId!==i?.ios?.appStoreId&&(o.appStoreId=t.ios.appStoreId),t.ios?.webCredentials&&(o.webCredentials=!0),t.ios?.activityContinuation&&(o.activityContinuation=!0),Object.keys(o).length>0&&(r.ios=o);let s={};t.android?.package&&t.android.package!==i?.android?.package&&(s.package=t.android.package);let a=t.android?.sha256CertFingerprints||[],l=i?.android?.sha256CertFingerprints||[];a.length>0&&!Xa(a,l)&&(s.sha256CertFingerprints=a),Object.keys(s).length>0&&(r.android=s);let d={outputDir:t.web?.outputDir||"deep-links"};return t.web?.smartAppBanner===!1&&(d.smartAppBanner=!1),r.web=d,r}function il(e,t,n,i=n.profile||"production"){let r={...e,framework:t,scheme:e.scheme||n.scheme};return{...r,deepLinks:Tf(r,n,i)}}function rl(e,t=process.cwd()){let n=xt.join(t,"mach.config.json");return At.writeFileSync(n,`${JSON.stringify(e,null,2)}
+`),n}import pe from"fs";import ye from"path";import{spawnSync as ol}from"child_process";var hn="@radhya/mach/expo-plugin",kf=`const fs = require('fs')
 const path = require('path')
 
 const unique = values => Array.from(new Set(values.filter(Boolean)))
@@ -2076,24 +1747,24 @@ module.exports = function withMachDeepLinks(config) {
   config.android.intentFilters = intentFilters
   return config
 }
-`,yi=e=>{if(typeof e=="string"){if(e===hi)return hi;if(e===Rn||e===Rn.replace(/^\.\//,""))return Rn}},is=e=>Array.isArray(e)?is(e[0]):yi(e),Qd=e=>!!is(e),oy=(e,t)=>{let n=yi(t)||t;return is(e)===n},sy=(e,t)=>Array.isArray(e)?[t,...e.slice(1)]:t,ay=(e,t)=>{let n=Array.isArray(e.plugins)?e.plugins:[];if(n.findIndex(o=>oy(o,t))>=0)return e.plugins=n,"already";let r=n.findIndex(Qd);return r>=0?(n[r]=sy(n[r],t),e.plugins=n,"updated"):(n.push(t),e.plugins=n,"inserted")},ns=/(['"`])((?:\.\/)?plugins\/withMachDeepLinks|@radhya\/mach\/expo-plugin)\1/g;function yr(e){let t=Le.join(e,"package.json");if(!Oe.existsSync(t))return!1;try{let n=JSON.parse(Oe.readFileSync(t,"utf-8"));return!!(n.dependencies?.["@radhya/mach"]||n.devDependencies?.["@radhya/mach"])}catch{return!1}}function ly(e){return Oe.existsSync(Le.join(e,"pnpm-lock.yaml"))?{command:"pnpm",args:["add","-D","@radhya/mach@latest"],label:"pnpm add -D @radhya/mach@latest"}:Oe.existsSync(Le.join(e,"yarn.lock"))?{command:"yarn",args:["add","-D","@radhya/mach@latest"],label:"yarn add -D @radhya/mach@latest"}:Oe.existsSync(Le.join(e,"bun.lockb"))||Oe.existsSync(Le.join(e,"bun.lock"))?{command:"bun",args:["add","-d","@radhya/mach@latest"],label:"bun add -d @radhya/mach@latest"}:{command:"npm",args:["install","--save-dev","@radhya/mach@latest"],label:"npm install --save-dev @radhya/mach@latest"}}function dy(e){let t=ly(e),n=Zd(t.command,t.args,{cwd:e,stdio:"inherit",env:{...process.env}});return n.error?{ok:!1,label:t.label,error:n.error.message}:n.status!==0?{ok:!1,label:t.label,error:`${t.command} exited with code ${n.status}`}:{ok:yr(e),label:t.label}}function cy(e,t){let n=Oe.readFileSync(e,"utf-8"),i=Array.from(n.matchAll(ns));if(i.length>0){let f=yi(t)||t,p=i.some(h=>yi(h[2])===f),y=i.some(h=>yi(h[2])!==f);if(p&&!y)return"already";let g=n.replace(ns,(h,S)=>`${S}${t}${S}`);return Oe.writeFileSync(e,g),"updated"}let r=/(^[ \t]*)plugins\s*:\s*\[([\s\S]*?)\]/m.exec(n);if(!r||r.index===void 0)return"unsupported";let o=n.includes(`\r
+`,yn=e=>{if(typeof e=="string"){if(e===hn)return hn;if(e===Lt||e===Lt.replace(/^\.\//,""))return Lt}},Kr=e=>Array.isArray(e)?Kr(e[0]):yn(e),sl=e=>!!Kr(e),Nf=(e,t)=>{let n=yn(t)||t;return Kr(e)===n},xf=(e,t)=>Array.isArray(e)?[t,...e.slice(1)]:t,Lf=(e,t)=>{let n=Array.isArray(e.plugins)?e.plugins:[];if(n.findIndex(o=>Nf(o,t))>=0)return e.plugins=n,"already";let r=n.findIndex(sl);return r>=0?(n[r]=xf(n[r],t),e.plugins=n,"updated"):(n.push(t),e.plugins=n,"inserted")},zr=/(['"`])((?:\.\/)?plugins\/withMachDeepLinks|@radhya\/mach\/expo-plugin)\1/g;function yi(e){let t=ye.join(e,"package.json");if(!pe.existsSync(t))return!1;try{let n=JSON.parse(pe.readFileSync(t,"utf-8"));return!!(n.dependencies?.["@radhya/mach"]||n.devDependencies?.["@radhya/mach"])}catch{return!1}}function Mf(e){return pe.existsSync(ye.join(e,"pnpm-lock.yaml"))?{command:"pnpm",args:["add","-D","@radhya/mach@latest"],label:"pnpm add -D @radhya/mach@latest"}:pe.existsSync(ye.join(e,"yarn.lock"))?{command:"yarn",args:["add","-D","@radhya/mach@latest"],label:"yarn add -D @radhya/mach@latest"}:pe.existsSync(ye.join(e,"bun.lockb"))||pe.existsSync(ye.join(e,"bun.lock"))?{command:"bun",args:["add","-d","@radhya/mach@latest"],label:"bun add -d @radhya/mach@latest"}:{command:"npm",args:["install","--save-dev","@radhya/mach@latest"],label:"npm install --save-dev @radhya/mach@latest"}}function Uf(e){let t=Mf(e),n=ol(t.command,t.args,{cwd:e,stdio:"inherit",env:{...process.env}});return n.error?{ok:!1,label:t.label,error:n.error.message}:n.status!==0?{ok:!1,label:t.label,error:`${t.command} exited with code ${n.status}`}:{ok:yi(e),label:t.label}}function Ff(e,t){let n=pe.readFileSync(e,"utf-8"),i=Array.from(n.matchAll(zr));if(i.length>0){let f=yn(t)||t,p=i.some(y=>yn(y[2])===f),g=i.some(y=>yn(y[2])!==f);if(p&&!g)return"already";let h=n.replace(zr,(y,b)=>`${b}${t}${b}`);return pe.writeFileSync(e,h),"updated"}let r=/(^[ \t]*)plugins\s*:\s*\[([\s\S]*?)\]/m.exec(n);if(!r||r.index===void 0)return"unsupported";let o=n.includes(`\r
 `)?`\r
 `:`
 `,s=r[1]||"",a=r[2]||"",d=a.match(/\r?\n([ \t]+)\S/)?.[1]||`${s}    `,c=a.trim().length===0?`${o}${d}'${t}',${o}${s}`:a.includes(`
-`)||a.includes("\r")?`${o}${d}'${t}',${a}`:`${o}${d}'${t}',${o}${d}${a.trim()}${o}${s}`,u=`${r[0].slice(0,r[0].indexOf("[")+1)}${c}]`;return Oe.writeFileSync(e,`${n.slice(0,r.index)}${u}${n.slice(r.index+r[0].length)}`),"inserted"}function ec(e,t,n={}){let i=[],r=[],o=[],s=yr(e);if(!s&&n.installPackage){o.push("Installing @radhya/mach locally so Expo can use @radhya/mach/expo-plugin.");let u=dy(e);u.ok?(s=!0,o.push(`Installed @radhya/mach with ${u.label}.`)):o.push(`Could not install @radhya/mach with ${u.label}: ${u.error||"unknown error"}. Falling back to local plugin.`)}let a=s?hi:Rn;if(s)o.push(`Using packaged Expo plugin ${hi}.`);else{let u=Le.join(e,"plugins/withMachDeepLinks.js");Oe.mkdirSync(Le.dirname(u),{recursive:!0}),Oe.writeFileSync(u,ry),i.push(Le.relative(e,u)),o.push(`Using local Expo plugin fallback ${Rn}. Install @radhya/mach in this app to use ${hi}.`)}let l=["app.config.ts","app.config.js"].find(u=>Oe.existsSync(Le.join(e,u)));if(l){let u=Le.join(e,l),f=cy(u,a);return f==="inserted"?i.push(l):f==="updated"?(i.push(l),o.push(`${l} updated to use ${a}.`)):f==="already"?o.push(`${l} already includes the Mach Expo plugin.`):o.push(`Add "${a}" to the plugins array in ${l}. Mach could not safely auto-edit this dynamic config.`),{written:i,skipped:r,notes:o}}let d=["app.config.json","app.json"].find(u=>Oe.existsSync(Le.join(e,u)));if(!d)return r.push("Expo config plugin insertion: no app.json or app.config.json found."),{written:i,skipped:r,notes:o};let c=Le.join(e,d);try{let u=JSON.parse(Oe.readFileSync(c,"utf-8")),f=u.expo&&typeof u.expo=="object"?u.expo:u,p=ay(f,a);Oe.writeFileSync(c,`${JSON.stringify(u,null,2)}
-`),i.push(d),p==="updated"&&o.push(`${d} updated to use ${a}.`)}catch(u){r.push(`Expo config plugin insertion failed: ${u.message}`)}return{written:i,skipped:r,notes:o}}function tc(e){let t=["app.config.ts","app.config.js"].find(i=>Oe.existsSync(Le.join(e,i)));if(t){let i=Oe.readFileSync(Le.join(e,t),"utf-8");return ns.test(i)?"manual":"missing"}let n=["app.config.json","app.json"].find(i=>Oe.existsSync(Le.join(e,i)));if(!n)return"missing";try{let i=JSON.parse(Oe.readFileSync(Le.join(e,n),"utf-8")),r=i.expo&&typeof i.expo=="object"?i.expo:i;return Array.isArray(r.plugins)&&r.plugins.some(Qd)?"wired":"missing"}catch{return"missing"}}function rs(e){let t=Zd("npx",["--no-install","expo","config","--type","public","--json"],{cwd:e,encoding:"utf-8",timeout:8e3,env:{...process.env,CI:"1",EXPO_NO_TELEMETRY:"1"}});if(t.error||t.status!==0||!t.stdout)return null;let n=t.stdout.trim(),i=n.indexOf("{");if(i<0)return null;try{return JSON.parse(n.slice(i))}catch{return null}}function uy(e){if(!e||typeof e!="object")return null;let n=(Array.isArray(e.ios?.associatedDomains)?e.ios.associatedDomains:[]).map(s=>typeof s=="string"?s.match(/^applinks:(.+)$/)?.[1]:void 0).find(Boolean),r=(Array.isArray(e.android?.intentFilters)?e.android.intentFilters:[]).flatMap(s=>Array.isArray(s?.data)?s.data:[]).find(s=>s?.scheme==="https"&&typeof s.host=="string")?.host,o=n||r;return!o&&!e.scheme&&!e.ios?.bundleIdentifier&&!e.android?.package?null:{domain:o,scheme:typeof e.scheme=="string"?e.scheme:void 0,iosBundleIdentifier:typeof e.ios?.bundleIdentifier=="string"?e.ios.bundleIdentifier:void 0,androidPackage:typeof e.android?.package=="string"?e.android.package:void 0}}function br(e){return uy(rs(e))}import Et from"fs";import qe from"path";var py=e=>{Et.mkdirSync(qe.dirname(e),{recursive:!0})},nc=(e,t)=>{py(e),Et.writeFileSync(e,`${JSON.stringify(t,null,2)}
-`)};var fy=e=>{let t=e.ios?.appleTeamId,n=e.ios?.bundleIdentifier;return!t||!n?null:`${t}.${n}`};function os(e){let t=fy(e);if(!t)return null;let n=e.paths?.length?e.paths:["/*"],i=n.map(s=>s==="/*"?"*":s),r=n.map(s=>({"/":s,comment:s==="/*"?"Matches all URLs":`Matches ${s}`})),o={applinks:{apps:[],details:[{appIDs:[t],components:r,appID:t,paths:i}]}};return e.ios?.webCredentials&&(o.webcredentials={apps:[t]}),e.ios?.activityContinuation&&(o.activitycontinuation={apps:[t]}),o}function my(e){let t=e.android?.package;return t?[{relation:["delegate_permission/common.handle_all_urls"],target:{namespace:"android_app",package_name:t,sha256_cert_fingerprints:e.android?.sha256CertFingerprints||[]}}]:null}function gy(e,t){let n=t.ios?.appStoreId;if(!n||!Et.existsSync(e))return!1;let i=`<meta name="apple-itunes-app" content="app-id=${n}, app-argument=${t.baseUrl}" />`,r=Et.readFileSync(e,"utf-8");if(/name=["']apple-itunes-app["']/i.test(r)){let o=r.replace(/<meta[^>]+name=["']apple-itunes-app["'][^>]*>/i,i);return Et.writeFileSync(e,o),!0}return/<head[^>]*>/i.test(r)?(Et.writeFileSync(e,r.replace(/<head([^>]*)>/i,`<head$1>
-    ${i}`)),!0):!1}function ic(e,t){let n=[],i=[],r=[],o=t.web?.outputDir||"deep-links",s=qe.join(e,o),a=os(t);if(a){let u=pr([qe.join(s,".well-known/apple-app-site-association"),qe.join(s,".well-known/apple-app-site-association.json"),qe.join(s,"apple-app-site-association"),qe.join(s,"apple-app-site-association.json")]);for(let f of u)nc(f,a),n.push(qe.relative(e,f))}else i.push("Apple AASA files: missing ios.appleTeamId or ios.bundleIdentifier");let l=my(t);if(l){let u=qe.join(s,".well-known/assetlinks.json");nc(u,l),n.push(qe.relative(e,u)),t.android?.sha256CertFingerprints?.length||r.push("assetlinks.json was generated without SHA256 fingerprints. Add them before Android App Links can verify.")}else i.push("Android assetlinks.json: missing android.package");let d=qe.join(e,es);Et.existsSync(d)&&(Et.unlinkSync(d),r.push(`Removed legacy ${es}; mach.config.json is now the source of truth.`));let c=qe.join(s,"index.html");return t.web?.smartAppBanner&&gy(c,t)?n.push(qe.relative(e,c)):t.web?.smartAppBanner&&t.ios?.appStoreId?r.push(`Smart App Banner skipped because ${qe.relative(e,c)} was not found.`):t.web?.smartAppBanner&&r.push("Smart App Banner skipped because ios.appStoreId is not configured."),o!=="public"&&r.push(`Host ${o}/.well-known files at https://${t.domain}/.well-known/.`),{written:n,skipped:i,notes:r}}function ss(e){if(!Et.existsSync(e))return null;try{return JSON.parse(Et.readFileSync(e,"utf-8"))}catch{return null}}import Kt from"fs";import Wt from"path";import{spawnSync as hy}from"child_process";var J=(e,t)=>({level:e,message:t}),rc=(e,t)=>Wt.join(e,t.web?.outputDir||"deep-links");function yy(e,t,n="fail"){let i=[],r=rc(e,t),o=Wt.join(r,".well-known/apple-app-site-association");if(!os(t))return i.push(J("warn","Skipping AASA verification because ios.appleTeamId or ios.bundleIdentifier is missing.")),i;if(!Kt.existsSync(o))return i.push(J(n,`${Wt.relative(e,o)} is missing.`)),i;Kt.statSync(o).size>128*1024?i.push(J("fail","Apple AASA file is larger than 128 KB.")):i.push(J("pass","Apple AASA file is under 128 KB."));let l=ss(o);if(!l)return i.push(J("fail","Apple AASA file is not valid JSON.")),i;let d=`${t.ios?.appleTeamId}.${t.ios?.bundleIdentifier}`,c=l.applinks?.details||[],u=Array.isArray(c)&&c.some(f=>f.appID===d||f.appIDs?.includes(d));return i.push(u?J("pass",`AASA contains ${d}.`):J("fail",`AASA does not contain ${d}.`)),i}function by(e,t,n="fail"){let i=[],r=rc(e,t),o=Wt.join(r,".well-known/assetlinks.json");if(!t.android?.package)return i.push(J("warn","Skipping Android Asset Links verification because android.package is missing.")),i;if(!Kt.existsSync(o))return i.push(J(n,`${Wt.relative(e,o)} is missing.`)),i;let s=ss(o);if(!s||!Array.isArray(s))return i.push(J("fail","assetlinks.json is not a valid JSON array.")),i;let a=s.find(d=>d?.target?.package_name===t.android?.package);i.push(a?J("pass",`assetlinks.json contains ${t.android.package}.`):J("fail",`assetlinks.json does not contain ${t.android.package}.`));let l=a?.target?.sha256_cert_fingerprints;return i.push(Array.isArray(l)&&l.length>0?J("pass","assetlinks.json has at least one SHA256 fingerprint."):J("warn","assetlinks.json has no SHA256 fingerprints.")),i}function Sy(e,t,n,i){if(t.framework!=="expo")return[];let r=[],o=rs(e),a=(Array.isArray(o?.ios?.associatedDomains)?o.ios.associatedDomains:[]).includes(`applinks:${n.domain}`);r.push(a?J("pass",`Expo iOS config contains applinks:${n.domain}.`):J(i?"warn":"fail",`Expo iOS config does not contain applinks:${n.domain}.`));let d=(Array.isArray(o?.android?.intentFilters)?o.android.intentFilters:[]).flatMap(u=>Array.isArray(u?.data)?u.data:[]).some(u=>u?.scheme==="https"&&u.host===n.domain);if(r.push(d?J("pass",`Expo Android config contains App Link host ${n.domain}.`):J(i?"warn":"fail",`Expo Android config does not contain App Link host ${n.domain}.`)),i)return r.push(J("warn","mach.config.json is missing deepLinks; values were inferred from Expo config. Run `mach deeplink setup` to persist Mach metadata and generate hosted files.")),r;let c=tc(e);return c==="wired"?r.push(J("pass","Expo deep link plugin is wired into Expo config and derives values from mach.config.json.")):c==="manual"&&a&&d?r.push(J("pass","Expo resolved config contains the deep-link settings from the dynamic config.")):c==="manual"?r.push(J("warn","Expo deep link plugin exists, but dynamic or missing Expo config means manual plugin insertion must be confirmed.")):a&&d?r.push(J("warn","Expo plugin is not wired, but resolved Expo config already contains the deep-link settings.")):r.push(J("fail","Expo deep link plugin is missing or not wired into Expo config.")),r}function Ay(e,t,n){if(t.framework!=="react-native")return[];let i=[],r=Wt.join(e,"android/app/src/main/AndroidManifest.xml");if(Kt.existsSync(r)){let s=Kt.readFileSync(r,"utf-8");i.push(s.includes(`android:host="${n.domain}"`)?J("pass","AndroidManifest.xml contains the App Links host."):J("warn","AndroidManifest.xml does not contain the App Links host. Native patching is planned for a later phase."))}let o=Wt.join(e,"ios");if(Kt.existsSync(o)){let a=Kt.readdirSync(o,{recursive:!0}).filter(l=>typeof l=="string"&&l.endsWith(".entitlements")).some(l=>Kt.readFileSync(Wt.join(o,l),"utf-8").includes(`applinks:${n.domain}`));i.push(a?J("pass","iOS entitlements contain the associated domain."):J("warn","iOS entitlements do not contain the associated domain. Native patching is planned for a later phase."))}return i}async function as(e,t){let n=[];try{let i=await fetch(e,{redirect:"manual"});if(i.status>=300&&i.status<400&&!t)return n.push(J("fail",`${e} redirects. Apple AASA endpoints must not redirect.`)),n;n.push(i.status===200?J("pass",`${e} returned HTTP 200.`):J("fail",`${e} returned HTTP ${i.status}.`));let r=i.headers.get("content-type")||"";!r.includes("application/json")&&!r.includes("text/json")&&n.push(J("warn",`${e} content-type is "${r||"missing"}"; application/json is recommended.`)),JSON.parse(await i.text()),n.push(J("pass",`${e} contains valid JSON.`))}catch(i){n.push(J("fail",`${e} check failed: ${i.message}`))}return n}async function Ey(e){let t=e.domain;return(await Promise.all([as(`https://${t}/.well-known/apple-app-site-association`,!1),as(`https://${t}/apple-app-site-association`,!1),as(`https://${t}/.well-known/assetlinks.json`,!0)])).flat()}function Iy(e){let t=e.android?.package;if(!t)return[J("warn","Cannot print Android device verification commands because android.package is missing.")];let i=hy("adb",["version"],{encoding:"utf-8"}).status===0?"Run":"Install Android platform-tools, then run";return[J("info",`${i}: adb shell pm set-app-links --package ${t} 0 all`),J("info",`${i}: adb shell pm verify-app-links --re-verify ${t}`),J("info",`${i}: adb shell pm get-app-links ${t}`)]}async function ls(e,t,n){let i=n.profile||t.deepLinks?.profile||"production",r=t.framework==="expo"?br(e):null,o=t.framework==="expo"?hr(t,r,i,e):null,s=!t.deepLinks&&!!o,a=t.deepLinks?gr(t,{profile:i,cwd:e,expoHints:r}):o,l=[];if(!a)return[J("fail","mach.config.json is missing deepLinks and Mach could not infer existing deep-link settings. Run `mach deeplink setup`.")];l.push(a.baseUrl?J("pass","deepLinks.baseUrl is configured."):J("fail","deepLinks.baseUrl is missing.")),l.push(a.domain?J("pass","deepLinks.domain is configured."):J("fail","deepLinks.domain is missing.")),l.push(a.scheme?J("pass","deepLinks.scheme is configured."):J("fail","deepLinks.scheme is missing."));let d=s?"warn":"fail";return l.push(...yy(e,a,d)),l.push(...by(e,a,d)),l.push(...Sy(e,t,a,s)),l.push(...Ay(e,t,a)),n.live&&l.push(...await Ey(a)),n.androidDevice&&l.push(...Iy(a)),l}var Si=()=>process.stdin.isTTY&&process.stdout.isTTY,sc=`${m.npmScope}/mach`,Ai=()=>{wy("Operation cancelled."),process.exit(0)},us=e=>{if(typeof e!="string")return;let t=e.trim();return t.length>0?t:void 0},Dt=(...e)=>{for(let t of e){let n=us(t);if(n)return n}},ln=async(e,t,n,i,r)=>{if(t)return t;if(r||!Si()){if(i)throw new Error(`${e.replace(/:$/,"")} is required. Pass it as an option or run interactively.`);return}let o=await lc({message:e,initialValue:t||"",placeholder:n,validate(s){if(i&&s.trim().length===0)return"Required."}});return bi(o)&&Ai(),us(o)};async function Py(e,t,n){let i=Ze(e.framework),r=Ze(t);if(r)return r;if(i)return i;let o=Wd();if(n||!Si())return o;let s=await $y({message:`Which framework should ${m.name} configure?`,initialValue:o,options:[{value:"expo",label:"Expo"},{value:"react-native",label:"React Native"},{value:"flutter",label:"Flutter (not supported yet)"}]});return bi(s)&&Ai(),s}var Sr=e=>e==="ios"||e==="all",ds=e=>e==="android"||e==="all";async function Ry(e,t,n){if(t!=="expo"||yr(e)||n.installPlugin===!1)return!1;if(n.installPlugin===!0||n.yes)return!0;if(!Si())return!1;let i=await ac({message:`Install ${sc} locally so Expo can use ${sc}/expo-plugin?`,initialValue:!0});return bi(i)&&Ai(),!!i}async function Cy(e,t){let n=!!t.yes,i=t.profile||e.deepLinks?.profile||"production",r=Ve(e,i)||{},o=r.ios||{},s=r.android||{},a=e.submit?.[i]?.ios||{},l=e.submit?.[i]?.android||{},d=Yt(e,i),c=await Py(e,t.framework,n);if(c==="flutter")throw new Error("Flutter deep-link automation is planned but not supported yet.");let u=Jd(e,Kd(t.platform),r),f=e.deepLinks,y=c==="expo"&&(!Dt(t.baseUrl,f?.baseUrl,t.domain?`https://${t.domain}`:void 0)||!Dt(t.scheme,f?.scheme,o.scheme,e.scheme,e.slug,e.name)||Sr(u)&&!Dt(t.iosBundleId,f?.ios?.bundleIdentifier,o.bundleIdentifier,o.bundleId,e.ios?.bundleIdentifier)||ds(u)&&!Dt(t.androidPackage,f?.android?.package,s.package,s.applicationId,e.android?.package,l.packageName,l.package))?hr(e,br(process.cwd()),i,process.cwd()):null,g=t.output||f?.web?.outputDir||mr(process.cwd(),e),h=await ln("Deep link base URL:",t.baseUrl||f?.baseUrl||(t.domain?`https://${t.domain}`:void 0)||y?.baseUrl,"https://app.example.com",!0,n),S=gi(h),b=t.baseUrl?new URL(S).hostname:void 0,_=await ln("Associated domain:",t.domain||b||f?.domain||y?.domain||new URL(S).hostname,"app.example.com",!0,n),w=fr(await ln("URI scheme:",Dt(t.scheme,f?.scheme,o.scheme,e.scheme,y?.scheme,e.slug,e.name,"app"),"myapp",!0,n)||"app"),T=Sr(u)?await ln("iOS bundle identifier:",Dt(t.iosBundleId,f?.ios?.bundleIdentifier,o.bundleIdentifier,o.bundleId,e.ios?.bundleIdentifier,y?.ios?.bundleIdentifier),"com.example.app",!0,n):f?.ios?.bundleIdentifier||e.ios?.bundleIdentifier,B=Sr(u)?await ln("Apple Team ID:",Dt(t.appleTeamId,f?.ios?.appleTeamId,o.appleTeamId,o.developerTeamId,a.appleTeamId,a.developerTeamId,e.ios?.appleTeamId,e.ios?.developerTeamId,d.teamId),"ABCDE12345",!0,n):f?.ios?.appleTeamId||e.ios?.appleTeamId,X=Sr(u)?await ln("App Store ID (optional, for Smart App Banner):",Dt(t.appStoreId,f?.ios?.appStoreId,o.ascAppId,a.ascAppId,e.ios?.ascAppId),"1234567890",!1,n):f?.ios?.appStoreId,U=ds(u)?await ln("Android package name:",Dt(t.androidPackage,f?.android?.package,s.package,s.applicationId,e.android?.package,l.packageName,l.package,y?.android?.package),"com.example.app",!0,n):f?.android?.package||e.android?.package,K=f?.android?.sha256CertFingerprints||[],v=t.androidFingerprint||[],R=e.android?.sha256CertFingerprints||[],I=s.sha256CertFingerprints||[],$=[...v,...K,...I,...R].filter(Boolean);if(ds(u)&&$.length===0&&!n&&Si()){let P=await lc({message:"Android SHA256 fingerprint (optional now, required for verified App Links):",placeholder:"AA:BB:CC:..."});bi(P)&&Ai(),us(P)&&$.push(P)}let x=qd(e,{...t,baseUrl:S,domain:_,scheme:w,output:g,appleTeamId:B,appStoreId:X,androidFingerprint:$});return x.ios={...x.ios||{},bundleIdentifier:T,appleTeamId:B,appStoreId:X},x.android={...x.android||{},package:U,sha256CertFingerprints:Array.from(new Set($))},{framework:c,platform:u,deepLinks:x}}var cs=(e,t)=>{t.length!==0&&vy(t.map(n=>`- ${n}`).join(`
-`),e)},dc=e=>e.filter(t=>t.level==="fail").length;function cc(e){for(let t of e){let n=t.level==="pass"?mt.green("PASS"):t.level==="warn"?mt.yellow("WARN"):t.level==="info"?mt.cyan("INFO"):mt.red("FAIL");Ar.info(`${n} ${t.message}`)}}async function uc(e){try{let t=process.cwd(),n=oc.join(t,m.configFileName),i=Ie()||{};if(!_y.existsSync(n)){let S=e.yes||!Si()?!0:await ac({message:`${m.configFileName} was not found. Create one with deep link settings?`,initialValue:!0});if(bi(S)&&Ai(),!S)return}let{framework:r,deepLinks:o}=await Cy(i,e),s=e.profile||i.deepLinks?.profile||"production",a=Yd(i,r,o,s),l=Xd(a,t),d=ic(t,o),c=await Ry(t,r,e),u=r==="expo"?ec(t,o,{installPackage:c}):{written:[],skipped:[],notes:r==="react-native"?["React Native native patching is planned for a later phase. Hosted files were generated now."]:[]},f=[oc.relative(t,l),...d.written,...u.written],p=[...d.skipped,...u.skipped],y=[...d.notes,...u.notes];cs("Written",f),cs("Skipped",p),cs("Notes",y);let g=await ls(t,a,{});cc(g);let h=dc(g);if(h>0){Er(mt.yellow(`Deep link setup finished with ${h} verification issue(s).`));return}Er(mt.green("Deep link setup complete."))}catch(t){Ar.error(mt.red(t.message||"Deep link setup failed.")),process.exit(1)}}async function pc(e){try{let t=Ie();t||(Ar.error(mt.red(`No ${m.configFileName} found in the current directory.`)),process.exit(1));let n=await ls(process.cwd(),t,e);cc(n);let i=dc(n);i>0&&(Er(mt.red(`Deep link verification failed with ${i} issue(s).`)),process.exit(1)),Er(mt.green("Deep link verification passed."))}catch(t){Ar.error(mt.red(t.message||"Deep link verification failed.")),process.exit(1)}}import{log as kt,spinner as fc}from"@clack/prompts";import Jt from"chalk";var Oy=e=>{let t=String(e||"").trim().toLowerCase();if(t==="ios"||t==="android")return t;throw new Error("Pass --platform ios or --platform android.")},Dy=e=>{let t=Number(e);if(!Number.isFinite(t))throw new Error("Counter value must be a non-negative integer.");let n=Math.floor(t);if(n<0)throw new Error("Counter value must be a non-negative integer.");return n},ky=(e,t,n)=>{let i=String(n.scope||"").trim();if(i)return i;let r=n.profile||"production",o=e==="android"?n.package||n.androidPackage:n.bundleId||n.iosBundleIdentifier;if(o)return String(o).trim();let s=e==="android"?un(t,r):Xt(t,r);if(s)return s;throw new Error(e==="android"?`Could not resolve Android package. Set android.package in ${m.configFileName}, or pass --package/--scope.`:`Could not resolve iOS bundle identifier. Set ios.bundleIdentifier in ${m.configFileName}, or pass --bundle-id/--scope.`)},Ny=()=>{let e=Ie();if(!e)throw new Error(`No ${m.configFileName} found in the current directory. Run \`${m.nameLower} init\` or \`${m.nameLower} link\` first.`);if(!e.projectId)throw new Error(`${m.configFileName} is missing projectId.`);return e},ps=e=>{kt.info(Jt.bgBlue.white(" Native Version Counter ")),kt.info(`${Jt.blue("Platform:")} ${e.platform}`),kt.info(`${Jt.blue("Scope:")} ${e.scope}`),kt.info(`${Jt.blue("Current DB value:")} ${e.current}`),kt.info(`${Jt.blue("Next build will use:")} ${e.next}`),e.seeded||kt.warn(Jt.yellow("This counter has not been seeded yet. Existing store apps should run `mach version seed` once before auto-version builds."))};async function fs(e,t={}){if(!Ue()){kt.error(`You are not logged in. Run \`${m.nameLower} login\` first.`);return}try{let i=Ny(),r=Oy(t.platform),o=ky(r,i,t),s=String(i.projectId);if(e==="show"){let c=fc();t.json||c.start("Fetching native version counter...");let{data:u}=await D.get(`/projects/${s}/version-counters`,{params:{platform:r,scope:o}});if(u.status!=="success")throw new Error(u.message||"Failed to fetch version counter.");t.json?console.log(JSON.stringify(u.counter,null,2)):(c.stop("Fetched native version counter."),ps(u.counter));return}let a=Dy(t.value),l=fc();t.json||l.start("Seeding native version counter...");let{data:d}=await D.post(`/projects/${s}/version-counters/seed`,{platform:r,scope:o,value:a,force:!!t.force});if(d.status!=="success")throw new Error(d.message||"Failed to seed version counter.");t.json?console.log(JSON.stringify(d.counter,null,2)):(l.stop(`Seeded ${r} counter for ${o}.`),ps(d.counter))}catch(i){let r=i?.response?.data?.message||i?.message||"Version command failed.";if(i?.response?.data?.counter&&!t.json){kt.error(Jt.red(r)),ps(i.response.data.counter);return}t.json?console.log(JSON.stringify({status:"error",message:r},null,2)):kt.error(Jt.red(r))}}import{log as it,spinner as wi,text as mc,select as gc,confirm as xy,isCancel as Ei,cancel as Ii,outro as vi,note as Ty}from"@clack/prompts";import le from"chalk";import{execSync as Ly}from"child_process";async function My(){try{let e=Ly("xcrun devicectl list devices --json-output -",{stdio:["pipe","pipe","pipe"]}).toString();return(JSON.parse(e).result?.devices||[]).filter(i=>i.connectionProperties?.transportType==="wired"||i.connectionProperties?.transportType==="localNetwork").map(i=>({udid:i.identifier,name:i.deviceProperties?.name||"Unknown Device",model:i.hardwareProperties?.marketingName||"iPhone"}))}catch{return[]}}var hc=e=>e?.trim().toUpperCase()||void 0;function yc(e){let t=Ie(),n=t?Yt(t):{},i=hc(e.teamId),r=i||n.teamId;return{...n,teamId:r,developerTeamId:i||n.developerTeamId||r}}async function Uy(e){let t=e.udid,n=e.name,i=yc(e),r=i.teamId;if(!t){let s=wi();s.start("Scanning for connected iOS devices...");let a=await My();if(s.stop(a.length>0?`Found ${a.length} device(s)`:"No devices detected"),a.length===1)t=a[0].udid,n=n||a[0].name,it.info(`Detected: ${le.bold(n)} (${le.dim(t.substring(0,12)+"...")})`);else if(a.length>1){let l=await gc({message:"Select a device to register:",options:a.map(c=>({value:c.udid,label:`${c.name} (${c.model})`,hint:c.udid.substring(0,12)+"..."}))});if(Ei(l)){Ii("Cancelled");return}t=l;let d=a.find(c=>c.udid===t);n=n||d.name}else{it.info(le.dim("No connected devices found. Enter UDID manually."));let l=await mc({message:"Device UDID:",placeholder:"00008101-XXXXXXXXXXXX",validate(d){if(d.length<10)return"UDID seems too short"}});if(Ei(l)){Ii("Cancelled");return}t=l}}if(!n){let s=await mc({message:"Device name:",placeholder:"Nitesh's iPhone",validate(a){if(a.length===0)return"Name is required"}});if(Ei(s)){Ii("Cancelled");return}n=s}let o=wi();o.start("Registering device...");try{await D.post("/devices",{udid:t,name:n,platform:"ios",addedVia:"cli",teamId:r,teamName:i.teamName,developerTeamId:i.developerTeamId,appStoreConnectTeamId:i.appStoreConnectTeamId,providerId:i.providerId,providerName:i.providerName}),o.stop(le.green("Device registered!")),it.info(`  ${le.bold("Name:")} ${n}`),it.info(`  ${le.bold("UDID:")} ${le.dim(t)}`),r&&it.info(`  ${le.bold("Team:")} ${le.dim(r)}`)}catch(s){o.stop(le.red("Failed to register device")),it.error(s.response?.data?.message||s.message)}vi(le.blue("---"))}async function Fy(e={}){let t=hc(e.teamId),n=wi();n.start("Fetching registered devices...");try{let r=(await D.get("/devices",t?{params:{teamId:t}}:void 0)).data.devices||[];if(n.stop(`${r.length} device(s) registered${t?` for team ${t}`:""}`),r.length===0){it.info(le.dim(`No devices registered yet. Run \`${m.nameLower} device register\` to add one.`)),vi(le.blue("---"));return}let o=r.map(s=>{let a=new Date(s.createdAt).toLocaleDateString();return`  ${le.bold(s.name.padEnd(24))} ${le.dim(s.udid.padEnd(28))} ${le.dim((s.teamId||"-").padEnd(12))} ${le.cyan((s.addedVia||"-").padEnd(10))} ${le.dim(a)}`});Ty(`  ${le.bold("Name".padEnd(24))} ${"UDID".padEnd(28)} ${"Team".padEnd(12)} ${"Via".padEnd(10)} Date
+`)||a.includes("\r")?`${o}${d}'${t}',${a}`:`${o}${d}'${t}',${o}${d}${a.trim()}${o}${s}`,u=`${r[0].slice(0,r[0].indexOf("[")+1)}${c}]`;return pe.writeFileSync(e,`${n.slice(0,r.index)}${u}${n.slice(r.index+r[0].length)}`),"inserted"}function al(e,t,n={}){let i=[],r=[],o=[],s=yi(e);if(!s&&n.installPackage){o.push("Installing @radhya/mach locally so Expo can use @radhya/mach/expo-plugin.");let u=Uf(e);u.ok?(s=!0,o.push(`Installed @radhya/mach with ${u.label}.`)):o.push(`Could not install @radhya/mach with ${u.label}: ${u.error||"unknown error"}. Falling back to local plugin.`)}let a=s?hn:Lt;if(s)o.push(`Using packaged Expo plugin ${hn}.`);else{let u=ye.join(e,"plugins/withMachDeepLinks.js");pe.mkdirSync(ye.dirname(u),{recursive:!0}),pe.writeFileSync(u,kf),i.push(ye.relative(e,u)),o.push(`Using local Expo plugin fallback ${Lt}. Install @radhya/mach in this app to use ${hn}.`)}let l=["app.config.ts","app.config.js"].find(u=>pe.existsSync(ye.join(e,u)));if(l){let u=ye.join(e,l),f=Ff(u,a);return f==="inserted"?i.push(l):f==="updated"?(i.push(l),o.push(`${l} updated to use ${a}.`)):f==="already"?o.push(`${l} already includes the Mach Expo plugin.`):o.push(`Add "${a}" to the plugins array in ${l}. Mach could not safely auto-edit this dynamic config.`),{written:i,skipped:r,notes:o}}let d=["app.config.json","app.json"].find(u=>pe.existsSync(ye.join(e,u)));if(!d)return r.push("Expo config plugin insertion: no app.json or app.config.json found."),{written:i,skipped:r,notes:o};let c=ye.join(e,d);try{let u=JSON.parse(pe.readFileSync(c,"utf-8")),f=u.expo&&typeof u.expo=="object"?u.expo:u,p=Lf(f,a);pe.writeFileSync(c,`${JSON.stringify(u,null,2)}
+`),i.push(d),p==="updated"&&o.push(`${d} updated to use ${a}.`)}catch(u){r.push(`Expo config plugin insertion failed: ${u.message}`)}return{written:i,skipped:r,notes:o}}function ll(e){let t=["app.config.ts","app.config.js"].find(i=>pe.existsSync(ye.join(e,i)));if(t){let i=pe.readFileSync(ye.join(e,t),"utf-8");return zr.test(i)?"manual":"missing"}let n=["app.config.json","app.json"].find(i=>pe.existsSync(ye.join(e,i)));if(!n)return"missing";try{let i=JSON.parse(pe.readFileSync(ye.join(e,n),"utf-8")),r=i.expo&&typeof i.expo=="object"?i.expo:i;return Array.isArray(r.plugins)&&r.plugins.some(sl)?"wired":"missing"}catch{return"missing"}}function Wr(e){let t=ol("npx",["--no-install","expo","config","--type","public","--json"],{cwd:e,encoding:"utf-8",timeout:8e3,env:{...process.env,CI:"1",EXPO_NO_TELEMETRY:"1"}});if(t.error||t.status!==0||!t.stdout)return null;let n=t.stdout.trim(),i=n.indexOf("{");if(i<0)return null;try{return JSON.parse(n.slice(i))}catch{return null}}function Bf(e){if(!e||typeof e!="object")return null;let n=(Array.isArray(e.ios?.associatedDomains)?e.ios.associatedDomains:[]).map(s=>typeof s=="string"?s.match(/^applinks:(.+)$/)?.[1]:void 0).find(Boolean),r=(Array.isArray(e.android?.intentFilters)?e.android.intentFilters:[]).flatMap(s=>Array.isArray(s?.data)?s.data:[]).find(s=>s?.scheme==="https"&&typeof s.host=="string")?.host,o=n||r;return!o&&!e.scheme&&!e.ios?.bundleIdentifier&&!e.android?.package?null:{domain:o,scheme:typeof e.scheme=="string"?e.scheme:void 0,iosBundleIdentifier:typeof e.ios?.bundleIdentifier=="string"?e.ios.bundleIdentifier:void 0,androidPackage:typeof e.android?.package=="string"?e.android.package:void 0}}function bi(e){return Bf(Wr(e))}import ze from"fs";import ve from"path";var jf=e=>{ze.mkdirSync(ve.dirname(e),{recursive:!0})},dl=(e,t)=>{jf(e),ze.writeFileSync(e,`${JSON.stringify(t,null,2)}
+`)};var Hf=e=>{let t=e.ios?.appleTeamId,n=e.ios?.bundleIdentifier;return!t||!n?null:`${t}.${n}`};function qr(e){let t=Hf(e);if(!t)return null;let n=e.paths?.length?e.paths:["/*"],i=n.map(s=>s==="/*"?"*":s),r=n.map(s=>({"/":s,comment:s==="/*"?"Matches all URLs":`Matches ${s}`})),o={applinks:{apps:[],details:[{appIDs:[t],components:r,appID:t,paths:i}]}};return e.ios?.webCredentials&&(o.webcredentials={apps:[t]}),e.ios?.activityContinuation&&(o.activitycontinuation={apps:[t]}),o}function Gf(e){let t=e.android?.package;return t?[{relation:["delegate_permission/common.handle_all_urls"],target:{namespace:"android_app",package_name:t,sha256_cert_fingerprints:e.android?.sha256CertFingerprints||[]}}]:null}function Vf(e,t){let n=t.ios?.appStoreId;if(!n||!ze.existsSync(e))return!1;let i=`<meta name="apple-itunes-app" content="app-id=${n}, app-argument=${t.baseUrl}" />`,r=ze.readFileSync(e,"utf-8");if(/name=["']apple-itunes-app["']/i.test(r)){let o=r.replace(/<meta[^>]+name=["']apple-itunes-app["'][^>]*>/i,i);return ze.writeFileSync(e,o),!0}return/<head[^>]*>/i.test(r)?(ze.writeFileSync(e,r.replace(/<head([^>]*)>/i,`<head$1>
+    ${i}`)),!0):!1}function cl(e,t){let n=[],i=[],r=[],o=t.web?.outputDir||"deep-links",s=ve.join(e,o),a=qr(t);if(a){let u=pi([ve.join(s,".well-known/apple-app-site-association"),ve.join(s,".well-known/apple-app-site-association.json"),ve.join(s,"apple-app-site-association"),ve.join(s,"apple-app-site-association.json")]);for(let f of u)dl(f,a),n.push(ve.relative(e,f))}else i.push("Apple AASA files: missing ios.appleTeamId or ios.bundleIdentifier");let l=Gf(t);if(l){let u=ve.join(s,".well-known/assetlinks.json");dl(u,l),n.push(ve.relative(e,u)),t.android?.sha256CertFingerprints?.length||r.push("assetlinks.json was generated without SHA256 fingerprints. Add them before Android App Links can verify.")}else i.push("Android assetlinks.json: missing android.package");let d=ve.join(e,Gr);ze.existsSync(d)&&(ze.unlinkSync(d),r.push(`Removed legacy ${Gr}; mach.config.json is now the source of truth.`));let c=ve.join(s,"index.html");return t.web?.smartAppBanner&&Vf(c,t)?n.push(ve.relative(e,c)):t.web?.smartAppBanner&&t.ios?.appStoreId?r.push(`Smart App Banner skipped because ${ve.relative(e,c)} was not found.`):t.web?.smartAppBanner&&r.push("Smart App Banner skipped because ios.appStoreId is not configured."),o!=="public"&&r.push(`Host ${o}/.well-known files at https://${t.domain}/.well-known/.`),{written:n,skipped:i,notes:r}}function Jr(e){if(!ze.existsSync(e))return null;try{return JSON.parse(ze.readFileSync(e,"utf-8"))}catch{return null}}import dt from"fs";import ct from"path";import{spawnSync as zf}from"child_process";var N=(e,t)=>({level:e,message:t}),ul=(e,t)=>ct.join(e,t.web?.outputDir||"deep-links");function Kf(e,t,n="fail"){let i=[],r=ul(e,t),o=ct.join(r,".well-known/apple-app-site-association");if(!qr(t))return i.push(N("warn","Skipping AASA verification because ios.appleTeamId or ios.bundleIdentifier is missing.")),i;if(!dt.existsSync(o))return i.push(N(n,`${ct.relative(e,o)} is missing.`)),i;dt.statSync(o).size>128*1024?i.push(N("fail","Apple AASA file is larger than 128 KB.")):i.push(N("pass","Apple AASA file is under 128 KB."));let l=Jr(o);if(!l)return i.push(N("fail","Apple AASA file is not valid JSON.")),i;let d=`${t.ios?.appleTeamId}.${t.ios?.bundleIdentifier}`,c=l.applinks?.details||[],u=Array.isArray(c)&&c.some(f=>f.appID===d||f.appIDs?.includes(d));return i.push(u?N("pass",`AASA contains ${d}.`):N("fail",`AASA does not contain ${d}.`)),i}function Wf(e,t,n="fail"){let i=[],r=ul(e,t),o=ct.join(r,".well-known/assetlinks.json");if(!t.android?.package)return i.push(N("warn","Skipping Android Asset Links verification because android.package is missing.")),i;if(!dt.existsSync(o))return i.push(N(n,`${ct.relative(e,o)} is missing.`)),i;let s=Jr(o);if(!s||!Array.isArray(s))return i.push(N("fail","assetlinks.json is not a valid JSON array.")),i;let a=s.find(d=>d?.target?.package_name===t.android?.package);i.push(a?N("pass",`assetlinks.json contains ${t.android.package}.`):N("fail",`assetlinks.json does not contain ${t.android.package}.`));let l=a?.target?.sha256_cert_fingerprints;return i.push(Array.isArray(l)&&l.length>0?N("pass","assetlinks.json has at least one SHA256 fingerprint."):N("warn","assetlinks.json has no SHA256 fingerprints.")),i}function qf(e,t,n,i){if(t.framework!=="expo")return[];let r=[],o=Wr(e),a=(Array.isArray(o?.ios?.associatedDomains)?o.ios.associatedDomains:[]).includes(`applinks:${n.domain}`);r.push(a?N("pass",`Expo iOS config contains applinks:${n.domain}.`):N(i?"warn":"fail",`Expo iOS config does not contain applinks:${n.domain}.`));let d=(Array.isArray(o?.android?.intentFilters)?o.android.intentFilters:[]).flatMap(u=>Array.isArray(u?.data)?u.data:[]).some(u=>u?.scheme==="https"&&u.host===n.domain);if(r.push(d?N("pass",`Expo Android config contains App Link host ${n.domain}.`):N(i?"warn":"fail",`Expo Android config does not contain App Link host ${n.domain}.`)),i)return r.push(N("warn","mach.config.json is missing deepLinks; values were inferred from Expo config. Run `mach deeplink setup` to persist Mach metadata and generate hosted files.")),r;let c=ll(e);return c==="wired"?r.push(N("pass","Expo deep link plugin is wired into Expo config and derives values from mach.config.json.")):c==="manual"&&a&&d?r.push(N("pass","Expo resolved config contains the deep-link settings from the dynamic config.")):c==="manual"?r.push(N("warn","Expo deep link plugin exists, but dynamic or missing Expo config means manual plugin insertion must be confirmed.")):a&&d?r.push(N("warn","Expo plugin is not wired, but resolved Expo config already contains the deep-link settings.")):r.push(N("fail","Expo deep link plugin is missing or not wired into Expo config.")),r}function Jf(e,t,n){if(t.framework!=="react-native")return[];let i=[],r=ct.join(e,"android/app/src/main/AndroidManifest.xml");if(dt.existsSync(r)){let s=dt.readFileSync(r,"utf-8");i.push(s.includes(`android:host="${n.domain}"`)?N("pass","AndroidManifest.xml contains the App Links host."):N("warn","AndroidManifest.xml does not contain the App Links host. Native patching is planned for a later phase."))}let o=ct.join(e,"ios");if(dt.existsSync(o)){let a=dt.readdirSync(o,{recursive:!0}).filter(l=>typeof l=="string"&&l.endsWith(".entitlements")).some(l=>dt.readFileSync(ct.join(o,l),"utf-8").includes(`applinks:${n.domain}`));i.push(a?N("pass","iOS entitlements contain the associated domain."):N("warn","iOS entitlements do not contain the associated domain. Native patching is planned for a later phase."))}return i}async function Yr(e,t){let n=[];try{let i=await fetch(e,{redirect:"manual"});if(i.status>=300&&i.status<400&&!t)return n.push(N("fail",`${e} redirects. Apple AASA endpoints must not redirect.`)),n;n.push(i.status===200?N("pass",`${e} returned HTTP 200.`):N("fail",`${e} returned HTTP ${i.status}.`));let r=i.headers.get("content-type")||"";!r.includes("application/json")&&!r.includes("text/json")&&n.push(N("warn",`${e} content-type is "${r||"missing"}"; application/json is recommended.`)),JSON.parse(await i.text()),n.push(N("pass",`${e} contains valid JSON.`))}catch(i){n.push(N("fail",`${e} check failed: ${i.message}`))}return n}async function Yf(e){let t=e.domain;return(await Promise.all([Yr(`https://${t}/.well-known/apple-app-site-association`,!1),Yr(`https://${t}/apple-app-site-association`,!1),Yr(`https://${t}/.well-known/assetlinks.json`,!0)])).flat()}function Xf(e){let t=e.android?.package;if(!t)return[N("warn","Cannot print Android device verification commands because android.package is missing.")];let i=zf("adb",["version"],{encoding:"utf-8"}).status===0?"Run":"Install Android platform-tools, then run";return[N("info",`${i}: adb shell pm set-app-links --package ${t} 0 all`),N("info",`${i}: adb shell pm verify-app-links --re-verify ${t}`),N("info",`${i}: adb shell pm get-app-links ${t}`)]}async function Xr(e,t,n){let i=n.profile||t.deepLinks?.profile||"production",r=t.framework==="expo"?bi(e):null,o=t.framework==="expo"?hi(t,r,i,e):null,s=!t.deepLinks&&!!o,a=t.deepLinks?gi(t,{profile:i,cwd:e,expoHints:r}):o,l=[];if(!a)return[N("fail","mach.config.json is missing deepLinks and Mach could not infer existing deep-link settings. Run `mach deeplink setup`.")];l.push(a.baseUrl?N("pass","deepLinks.baseUrl is configured."):N("fail","deepLinks.baseUrl is missing.")),l.push(a.domain?N("pass","deepLinks.domain is configured."):N("fail","deepLinks.domain is missing.")),l.push(a.scheme?N("pass","deepLinks.scheme is configured."):N("fail","deepLinks.scheme is missing."));let d=s?"warn":"fail";return l.push(...Kf(e,a,d)),l.push(...Wf(e,a,d)),l.push(...qf(e,t,a,s)),l.push(...Jf(e,t,a)),n.live&&l.push(...await Yf(a)),n.androidDevice&&l.push(...Xf(a)),l}var An=()=>process.stdin.isTTY&&process.stdout.isTTY,fl=`${m.npmScope}/mach`,Sn=()=>{Zf("Operation cancelled."),process.exit(0)},eo=e=>{if(typeof e!="string")return;let t=e.trim();return t.length>0?t:void 0},Ye=(...e)=>{for(let t of e){let n=eo(t);if(n)return n}},St=async(e,t,n,i,r)=>{if(t)return t;if(r||!An()){if(i)throw new Error(`${e.replace(/:$/,"")} is required. Pass it as an option or run interactively.`);return}let o=await gl({message:e,initialValue:t||"",placeholder:n,validate(s){if(i&&s.trim().length===0)return"Required."}});return bn(o)&&Sn(),eo(o)};async function nm(e,t,n){let i=$e(e.framework),r=$e(t);if(r)return r;if(i)return i;let o=el();if(n||!An())return o;let s=await em({message:`Which framework should ${m.name} configure?`,initialValue:o,options:[{value:"expo",label:"Expo"},{value:"react-native",label:"React Native"},{value:"flutter",label:"Flutter (not supported yet)"}]});return bn(s)&&Sn(),s}var Ai=e=>e==="ios"||e==="all",Zr=e=>e==="android"||e==="all";async function im(e,t,n){if(t!=="expo"||yi(e)||n.installPlugin===!1)return!1;if(n.installPlugin===!0||n.yes)return!0;if(!An())return!1;let i=await ml({message:`Install ${fl} locally so Expo can use ${fl}/expo-plugin?`,initialValue:!0});return bn(i)&&Sn(),!!i}async function rm(e,t){let n=!!t.yes,i=t.profile||e.deepLinks?.profile||"production",r=Ie(e,i)||{},o=r.ios||{},s=r.android||{},a=e.submit?.[i]?.ios||{},l=e.submit?.[i]?.android||{},d=mt(e,i),c=await nm(e,t.framework,n);if(c==="flutter")throw new Error("Flutter deep-link automation is planned but not supported yet.");let u=tl(e,Qa(t.platform),r),f=e.deepLinks,g=c==="expo"&&(!Ye(t.baseUrl,f?.baseUrl,t.domain?`https://${t.domain}`:void 0)||!Ye(t.scheme,f?.scheme,o.scheme,e.scheme,e.slug,e.name)||Ai(u)&&!Ye(t.iosBundleId,f?.ios?.bundleIdentifier,o.bundleIdentifier,o.bundleId,e.ios?.bundleIdentifier)||Zr(u)&&!Ye(t.androidPackage,f?.android?.package,s.package,s.applicationId,e.android?.package,l.packageName,l.package))?hi(e,bi(process.cwd()),i,process.cwd()):null,h=t.output||f?.web?.outputDir||mi(process.cwd(),e),y=await St("Deep link base URL:",t.baseUrl||f?.baseUrl||(t.domain?`https://${t.domain}`:void 0)||g?.baseUrl,"https://app.example.com",!0,n),b=gn(y),w=t.baseUrl?new URL(b).hostname:void 0,L=await St("Associated domain:",t.domain||w||f?.domain||g?.domain||new URL(b).hostname,"app.example.com",!0,n),_=fi(await St("URI scheme:",Ye(t.scheme,f?.scheme,o.scheme,e.scheme,g?.scheme,e.slug,e.name,"app"),"myapp",!0,n)||"app"),H=Ai(u)?await St("iOS bundle identifier:",Ye(t.iosBundleId,f?.ios?.bundleIdentifier,o.bundleIdentifier,o.bundleId,e.ios?.bundleIdentifier,g?.ios?.bundleIdentifier),"com.example.app",!0,n):f?.ios?.bundleIdentifier||e.ios?.bundleIdentifier,W=Ai(u)?await St("Apple Team ID:",Ye(t.appleTeamId,f?.ios?.appleTeamId,o.appleTeamId,o.developerTeamId,a.appleTeamId,a.developerTeamId,e.ios?.appleTeamId,e.ios?.developerTeamId,d.teamId),"ABCDE12345",!0,n):f?.ios?.appleTeamId||e.ios?.appleTeamId,Z=Ai(u)?await St("App Store ID (optional, for Smart App Banner):",Ye(t.appStoreId,f?.ios?.appStoreId,o.ascAppId,a.ascAppId,e.ios?.ascAppId),"1234567890",!1,n):f?.ios?.appStoreId,Ee=Zr(u)?await St("Android package name:",Ye(t.androidPackage,f?.android?.package,s.package,s.applicationId,e.android?.package,l.packageName,l.package,g?.android?.package),"com.example.app",!0,n):f?.android?.package||e.android?.package,oe=f?.android?.sha256CertFingerprints||[],R=t.androidFingerprint||[],T=e.android?.sha256CertFingerprints||[],E=s.sha256CertFingerprints||[],A=[...R,...oe,...E,...T].filter(Boolean);if(Zr(u)&&A.length===0&&!n&&An()){let v=await gl({message:"Android SHA256 fingerprint (optional now, required for verified App Links):",placeholder:"AA:BB:CC:..."});bn(v)&&Sn(),eo(v)&&A.push(v)}let D=nl(e,{...t,baseUrl:b,domain:L,scheme:_,output:h,appleTeamId:W,appStoreId:Z,androidFingerprint:A});return D.ios={...D.ios||{},bundleIdentifier:H,appleTeamId:W,appStoreId:Z},D.android={...D.android||{},package:Ee,sha256CertFingerprints:Array.from(new Set(A))},{framework:c,platform:u,deepLinks:D}}var Qr=(e,t)=>{t.length!==0&&Qf(t.map(n=>`- ${n}`).join(`
+`),e)},hl=e=>e.filter(t=>t.level==="fail").length;function yl(e){for(let t of e){let n=t.level==="pass"?Ue.green("PASS"):t.level==="warn"?Ue.yellow("WARN"):t.level==="info"?Ue.cyan("INFO"):Ue.red("FAIL");Si.info(`${n} ${t.message}`)}}async function bl(e){try{let t=process.cwd(),n=pl.join(t,m.configFileName),i=ce()||{};if(!tm.existsSync(n)){let b=e.yes||!An()?!0:await ml({message:`${m.configFileName} was not found. Create one with deep link settings?`,initialValue:!0});if(bn(b)&&Sn(),!b)return}let{framework:r,deepLinks:o}=await rm(i,e),s=e.profile||i.deepLinks?.profile||"production",a=il(i,r,o,s),l=rl(a,t),d=cl(t,o),c=await im(t,r,e),u=r==="expo"?al(t,o,{installPackage:c}):{written:[],skipped:[],notes:r==="react-native"?["React Native native patching is planned for a later phase. Hosted files were generated now."]:[]},f=[pl.relative(t,l),...d.written,...u.written],p=[...d.skipped,...u.skipped],g=[...d.notes,...u.notes];Qr("Written",f),Qr("Skipped",p),Qr("Notes",g);let h=await Xr(t,a,{});yl(h);let y=hl(h);if(y>0){Ei(Ue.yellow(`Deep link setup finished with ${y} verification issue(s).`));return}Ei(Ue.green("Deep link setup complete."))}catch(t){Si.error(Ue.red(t.message||"Deep link setup failed.")),process.exit(1)}}async function Al(e){try{let t=ce();t||(Si.error(Ue.red(`No ${m.configFileName} found in the current directory.`)),process.exit(1));let n=await Xr(process.cwd(),t,e);yl(n);let i=hl(n);i>0&&(Ei(Ue.red(`Deep link verification failed with ${i} issue(s).`)),process.exit(1)),Ei(Ue.green("Deep link verification passed."))}catch(t){Si.error(Ue.red(t.message||"Deep link verification failed.")),process.exit(1)}}import{log as Xe,spinner as Sl}from"@clack/prompts";import ut from"chalk";var om=e=>{let t=String(e||"").trim().toLowerCase();if(t==="ios"||t==="android")return t;throw new Error("Pass --platform ios or --platform android.")},sm=e=>{let t=Number(e);if(!Number.isFinite(t))throw new Error("Counter value must be a non-negative integer.");let n=Math.floor(t);if(n<0)throw new Error("Counter value must be a non-negative integer.");return n},am=(e,t,n)=>{let i=String(n.scope||"").trim();if(i)return i;let r=n.profile||"production",o=e==="android"?n.package||n.androidPackage:n.bundleId||n.iosBundleIdentifier;if(o)return String(o).trim();let s=e==="android"?Ln(t,r):Mn(t,r);if(s)return s;throw new Error(e==="android"?`Could not resolve Android package. Set android.package in ${m.configFileName}, or pass --package/--scope.`:`Could not resolve iOS bundle identifier. Set ios.bundleIdentifier in ${m.configFileName}, or pass --bundle-id/--scope.`)},lm=()=>{let e=ce();if(!e)throw new Error(`No ${m.configFileName} found in the current directory. Run \`${m.nameLower} init\` or \`${m.nameLower} link\` first.`);if(!e.projectId)throw new Error(`${m.configFileName} is missing projectId.`);return e},to=e=>{Xe.info(ut.bgBlue.white(" Native Version Counter ")),Xe.info(`${ut.blue("Platform:")} ${e.platform}`),Xe.info(`${ut.blue("Scope:")} ${e.scope}`),Xe.info(`${ut.blue("Current DB value:")} ${e.current}`),Xe.info(`${ut.blue("Next build will use:")} ${e.next}`),e.seeded||Xe.warn(ut.yellow("This counter has not been seeded yet. Existing store apps should run `mach version seed` once before auto-version builds."))};async function no(e,t={}){if(!be()){Xe.error(`You are not logged in. Run \`${m.nameLower} login\` first.`);return}try{let i=lm(),r=om(t.platform),o=am(r,i,t),s=String(i.projectId);if(e==="show"){let c=Sl();t.json||c.start("Fetching native version counter...");let{data:u}=await $.get(`/projects/${s}/version-counters`,{params:{platform:r,scope:o}});if(u.status!=="success")throw new Error(u.message||"Failed to fetch version counter.");t.json?console.log(JSON.stringify(u.counter,null,2)):(c.stop("Fetched native version counter."),to(u.counter));return}let a=sm(t.value),l=Sl();t.json||l.start("Seeding native version counter...");let{data:d}=await $.post(`/projects/${s}/version-counters/seed`,{platform:r,scope:o,value:a,force:!!t.force});if(d.status!=="success")throw new Error(d.message||"Failed to seed version counter.");t.json?console.log(JSON.stringify(d.counter,null,2)):(l.stop(`Seeded ${r} counter for ${o}.`),to(d.counter))}catch(i){let r=i?.response?.data?.message||i?.message||"Version command failed.";if(i?.response?.data?.counter&&!t.json){Xe.error(ut.red(r)),to(i.response.data.counter);return}t.json?console.log(JSON.stringify({status:"error",message:r},null,2)):Xe.error(ut.red(r))}}import{log as De,spinner as wn,text as El,select as Il,confirm as dm,isCancel as En,cancel as In,outro as vn,note as cm}from"@clack/prompts";import K from"chalk";import{execSync as um}from"child_process";async function pm(){try{let e=um("xcrun devicectl list devices --json-output -",{stdio:["pipe","pipe","pipe"]}).toString();return(JSON.parse(e).result?.devices||[]).filter(i=>i.connectionProperties?.transportType==="wired"||i.connectionProperties?.transportType==="localNetwork").map(i=>({udid:i.identifier,name:i.deviceProperties?.name||"Unknown Device",model:i.hardwareProperties?.marketingName||"iPhone"}))}catch{return[]}}var wl=e=>e?.trim().toUpperCase()||void 0;function vl(e){let t=ce(),n=t?mt(t):{},i=wl(e.teamId),r=i||n.teamId;return{...n,teamId:r,developerTeamId:i||n.developerTeamId||r}}async function fm(e){let t=e.udid,n=e.name,i=vl(e),r=i.teamId;if(!t){let s=wn();s.start("Scanning for connected iOS devices...");let a=await pm();if(s.stop(a.length>0?`Found ${a.length} device(s)`:"No devices detected"),a.length===1)t=a[0].udid,n=n||a[0].name,De.info(`Detected: ${K.bold(n)} (${K.dim(t.substring(0,12)+"...")})`);else if(a.length>1){let l=await Il({message:"Select a device to register:",options:a.map(c=>({value:c.udid,label:`${c.name} (${c.model})`,hint:c.udid.substring(0,12)+"..."}))});if(En(l)){In("Cancelled");return}t=l;let d=a.find(c=>c.udid===t);n=n||d.name}else{De.info(K.dim("No connected devices found. Enter UDID manually."));let l=await El({message:"Device UDID:",placeholder:"00008101-XXXXXXXXXXXX",validate(d){if(d.length<10)return"UDID seems too short"}});if(En(l)){In("Cancelled");return}t=l}}if(!n){let s=await El({message:"Device name:",placeholder:"Nitesh's iPhone",validate(a){if(a.length===0)return"Name is required"}});if(En(s)){In("Cancelled");return}n=s}let o=wn();o.start("Registering device...");try{await $.post("/devices",{udid:t,name:n,platform:"ios",addedVia:"cli",teamId:r,teamName:i.teamName,developerTeamId:i.developerTeamId,appStoreConnectTeamId:i.appStoreConnectTeamId,providerId:i.providerId,providerName:i.providerName}),o.stop(K.green("Device registered!")),De.info(`  ${K.bold("Name:")} ${n}`),De.info(`  ${K.bold("UDID:")} ${K.dim(t)}`),r&&De.info(`  ${K.bold("Team:")} ${K.dim(r)}`)}catch(s){o.stop(K.red("Failed to register device")),De.error(s.response?.data?.message||s.message)}vn(K.blue("---"))}async function mm(e={}){let t=wl(e.teamId),n=wn();n.start("Fetching registered devices...");try{let r=(await $.get("/devices",t?{params:{teamId:t}}:void 0)).data.devices||[];if(n.stop(`${r.length} device(s) registered${t?` for team ${t}`:""}`),r.length===0){De.info(K.dim(`No devices registered yet. Run \`${m.nameLower} device register\` to add one.`)),vn(K.blue("---"));return}let o=r.map(s=>{let a=new Date(s.createdAt).toLocaleDateString();return`  ${K.bold(s.name.padEnd(24))} ${K.dim(s.udid.padEnd(28))} ${K.dim((s.teamId||"-").padEnd(12))} ${K.cyan((s.addedVia||"-").padEnd(10))} ${K.dim(a)}`});cm(`  ${K.bold("Name".padEnd(24))} ${"UDID".padEnd(28)} ${"Team".padEnd(12)} ${"Via".padEnd(10)} Date
 `+o.join(`
-`),"Registered Devices")}catch(i){n.stop(le.red("Failed to fetch devices")),it.error(i.response?.data?.message||i.message)}vi(le.blue("---"))}async function By(e){let t=e.udid,n=yc(e).teamId;if(!t){let o=wi();o.start("Fetching registered devices...");try{let a=(await D.get("/devices",n?{params:{teamId:n}}:void 0)).data.devices||[];if(o.stop(`${a.length} device(s) found`),a.length===0){it.info(le.dim("No devices to remove.")),vi(le.blue("---"));return}let l=await gc({message:"Select device to remove:",options:a.map(c=>({value:c.deviceKey||c.udid,label:c.name,hint:`${c.udid.substring(0,12)}...${c.teamId?` \xB7 ${c.teamId}`:""}`}))});if(Ei(l)){Ii("Cancelled");return}let d=a.find(c=>(c.deviceKey||c.udid)===l);t=d?.udid||l,n=d?.teamId||n}catch(s){o.stop(le.red("Failed to fetch devices")),it.error(s.response?.data?.message||s.message);return}}let i=await xy({message:`Remove device ${le.dim(t.substring(0,12)+"...")}?`});if(Ei(i)||!i){Ii("Cancelled");return}let r=wi();r.start("Removing device...");try{await D.delete(`/devices/${encodeURIComponent(t)}`,n?{params:{teamId:n}}:void 0),r.stop(le.green("Device removed"))}catch(o){r.stop(le.red("Failed to remove device")),it.error(o.response?.data?.message||o.message)}vi(le.blue("---"))}async function Ir(e,t){switch(e){case"register":await Uy(t);break;case"list":await Fy(t);break;case"remove":await By(t);break;default:it.error(`Unknown action: ${e}`)}}import{log as ot,spinner as Kc}from"@clack/prompts";import ht from"chalk";import kr from"path";import Pi from"fs";import Ab from"os";import Eb from"axios";var rt=(o=>(o.CRITICAL="critical",o.HIGH="high",o.MEDIUM="medium",o.LOW="low",o.INFO="info",o))(rt||{}),gt=(l=>(l.PERMISSIONS="permissions",l.SECRETS="secrets",l.DEPENDENCIES="dependencies",l.STORAGE="storage",l.NETWORK="network",l.DEBUG="debug",l.MANIFEST="manifest",l.ATS="ats",l))(gt||{});import{spinner as Lc,log as _i}from"@clack/prompts";import Ye from"chalk";import{execSync as cb}from"child_process";import Mc from"fs";import Uc from"path";import qt from"fs";import $i from"path";import{execSync as jy}from"child_process";var bc={"android.permission.READ_PHONE_STATE":{severity:"high",description:"Can read phone number, IMEI, carrier info"},"android.permission.CALL_PHONE":{severity:"high",description:"Can make calls without user interaction"},"android.permission.SEND_SMS":{severity:"high",description:"Can send SMS without user interaction"},"android.permission.READ_SMS":{severity:"high",description:"Can read user SMS messages"},"android.permission.READ_CONTACTS":{severity:"medium",description:"Can read user contacts"},"android.permission.WRITE_CONTACTS":{severity:"medium",description:"Can modify user contacts"},"android.permission.READ_CALL_LOG":{severity:"high",description:"Can read call history"},"android.permission.CAMERA":{severity:"medium",description:"Camera access"},"android.permission.RECORD_AUDIO":{severity:"medium",description:"Microphone access"},"android.permission.ACCESS_FINE_LOCATION":{severity:"medium",description:"Precise GPS location"},"android.permission.ACCESS_COARSE_LOCATION":{severity:"medium",description:"Approximate location"},"android.permission.ACCESS_BACKGROUND_LOCATION":{severity:"high",description:"Background location tracking"},"android.permission.READ_EXTERNAL_STORAGE":{severity:"medium",description:"Read files on device"},"android.permission.WRITE_EXTERNAL_STORAGE":{severity:"medium",description:"Write files on device"},"android.permission.READ_MEDIA_IMAGES":{severity:"low",description:"Read photos"},"android.permission.READ_MEDIA_VIDEO":{severity:"low",description:"Read videos"},"android.permission.SYSTEM_ALERT_WINDOW":{severity:"high",description:"Draw overlays on other apps"},"android.permission.REQUEST_INSTALL_PACKAGES":{severity:"high",description:"Can install APKs"}},Hy={NSCameraUsageDescription:{severity:"medium",description:"Camera access declared"},NSMicrophoneUsageDescription:{severity:"medium",description:"Microphone access declared"},NSLocationWhenInUseUsageDescription:{severity:"medium",description:"Location (in-use) declared"},NSLocationAlwaysUsageDescription:{severity:"high",description:"Background location declared"},NSContactsUsageDescription:{severity:"medium",description:"Contacts access declared"},NSCalendarsUsageDescription:{severity:"low",description:"Calendar access declared"},NSPhotoLibraryUsageDescription:{severity:"low",description:"Photo library access declared"}};function Vy(e){try{let n=jy("npx expo config --type introspect --json 2>/dev/null",{cwd:e,encoding:"utf-8",timeout:3e4});return JSON.parse(n)}catch{}let t=$i.join(e,"app.json");if(qt.existsSync(t))try{let n=JSON.parse(qt.readFileSync(t,"utf-8"));return n.expo||n}catch{}return null}function Gy(e){let t=[],n=$i.join(e,"node_modules");if(!qt.existsSync(n))return t;let i=/<uses-permission\s+android:name="([^"]+)"/g;function r(o,s){let a=$i.join(o,"android","src","main","AndroidManifest.xml");if(!qt.existsSync(a))return;let l=qt.readFileSync(a,"utf-8"),d;for(;(d=i.exec(l))!==null;)t.push({pkg:s,permission:d[1]});i.lastIndex=0}for(let o of qt.readdirSync(n)){if(o.startsWith("."))continue;let s=$i.join(n,o);if(o.startsWith("@")){if(!qt.statSync(s).isDirectory())continue;for(let a of qt.readdirSync(s))r($i.join(s,a),`${o}/${a}`)}else r(s,o)}return t}async function Sc(e,t){let n=[],i=1,r=Vy(e),o=r?.android?.permissions||[],s=r?.android?.blockedPermissions||[];for(let d of o){let c=bc[d];c&&n.push({id:`PERM-${String(i++).padStart(3,"0")}`,title:`${d.split(".").pop()} declared`,description:c.description,severity:c.severity,category:"permissions",file:"app.config.ts",recommendation:"Remove from permissions if not needed, or add justification."})}let a=Gy(e);for(let{pkg:d,permission:c}of a){let u=bc[c];u&&(s.includes(c)||o.includes(c)||n.push({id:`PERM-${String(i++).padStart(3,"0")}`,title:`${c.split(".").pop()} injected by ${d}`,description:`${u.description}. Auto-injected via ${d} AndroidManifest.xml`,severity:u.severity,category:"permissions",file:`node_modules/${d}/android/src/main/AndroidManifest.xml`,recommendation:`Add "${c}" to blockedPermissions if not needed.`,autoFixable:!0}))}let l=r?.ios?.infoPlist||{};for(let[d,c]of Object.entries(Hy))d in l&&n.push({id:`PERM-${String(i++).padStart(3,"0")}`,title:`iOS: ${d} declared`,description:c.description,severity:c.severity,category:"permissions",file:"app.config.ts",recommendation:`Remove ${d} from infoPlist if the app does not use this capability.`});return{category:"permissions",label:"Permission Audit",findings:n,durationMs:0}}import ms from"fs";import wr from"path";var zy=[{id:"SEC-001",pattern:/(['"`])(?:sk|pk)_(?:live|test)_[a-zA-Z0-9]{20,}\1/g,severity:"critical",label:"Stripe API Key"},{id:"SEC-002",pattern:/(['"`])AIza[0-9A-Za-z\-_]{35}\1/g,severity:"high",label:"Google API Key"},{id:"SEC-003",pattern:/(['"`])AKIA[0-9A-Z]{16}\1/g,severity:"critical",label:"AWS Access Key ID"},{id:"SEC-004",pattern:/-----BEGIN (?:RSA |EC )?PRIVATE KEY-----/g,severity:"critical",label:"Private key in source"},{id:"SEC-005",pattern:/(?:ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9_]{36,}/g,severity:"high",label:"GitHub Token"},{id:"SEC-006",pattern:/xox[bpors]-[a-zA-Z0-9-]{10,}/g,severity:"high",label:"Slack Token"},{id:"SEC-007",pattern:/(?:password|secret|apikey|api_key)\s*[:=]\s*['"`][^'"`\n]{8,}['"`]/gi,severity:"high",label:"Hardcoded credential"}],Ky=new Set([".ts",".tsx",".js",".jsx"]),Wy=new Set(["node_modules",".expo",".git","android","ios","dist","build","__tests__","__mocks__"]);function Ac(e){let t=[],n=ms.readdirSync(e,{withFileTypes:!0});for(let i of n){if(Wy.has(i.name))continue;let r=wr.join(e,i.name);i.isDirectory()?t.push(...Ac(r)):Ky.has(wr.extname(i.name))&&t.push(r)}return t}function Jy(e){let t=e.trim();return t.startsWith("//")||t.startsWith("*")||t.startsWith("/*")}function qy(e){return/process\.env\./i.test(e)||/import\.meta\.env/i.test(e)}async function Ec(e,t){let n=[],i=wr.join(e,"src"),r=ms.existsSync(i)?i:e,o=Ac(r);for(let s of o){let l=ms.readFileSync(s,"utf-8").split(`
-`),d=wr.relative(e,s);for(let c=0;c<l.length;c++){let u=l[c];if(!Jy(u)&&!qy(u))for(let{id:f,pattern:p,severity:y,label:g}of zy)p.lastIndex=0,p.test(u)&&n.push({id:f,title:g,description:`Potential ${g.toLowerCase()} found in source code`,severity:y,category:"secrets",file:d,line:c+1,recommendation:`Move to environment variables or a secrets manager. Use \`${m.nameLower} env set\` for managed secrets.`})}}return{category:"secrets",label:"Secrets Detection",findings:n,durationMs:0}}import{execSync as Yy}from"child_process";var Xy={critical:"critical",high:"high",moderate:"medium",low:"low",info:"info"};async function Ic(e,t){let n=[],i=1,r;try{r=Yy("npm audit --json 2>/dev/null",{cwd:e,encoding:"utf-8",timeout:6e4})}catch(a){if(r=a.stdout||"",!r)return{category:"dependencies",label:"Dependency CVEs",findings:[],durationMs:0,error:"Failed to run npm audit. Ensure npm is available and dependencies are installed."}}let o;try{o=JSON.parse(r)}catch{return{category:"dependencies",label:"Dependency CVEs",findings:[],durationMs:0,error:"Failed to parse npm audit output."}}let s=o.vulnerabilities||{};for(let[a,l]of Object.entries(s)){let d=Xy[l.severity]||"info",c=Array.isArray(l.via)?l.via.map(u=>typeof u=="string"?u:u.title||u.name).join(", "):String(l.via);n.push({id:`DEP-${String(i++).padStart(3,"0")}`,title:`${a} \u2014 ${l.severity}`,description:`Via: ${c}. Range: ${l.range||"unknown"}`,severity:d,category:"dependencies",recommendation:l.fixAvailable?`Run \`npm audit fix\` or update ${a} to a patched version.`:"No fix available yet. Monitor for updates or evaluate alternatives.",autoFixable:!!l.fixAvailable})}return{category:"dependencies",label:"Dependency CVEs",findings:n,durationMs:0}}import vr from"fs";import $r from"path";var Zy=/(?:token|password|credential|secret|apiKey|api_key|session|auth|jwt|refresh_token|access_token|private_key|pin|otp)/i,wc=/AsyncStorage\s*\.\s*(?:setItem|mergeItem)\s*\(\s*['"`]([^'"`]+)['"`]/g,Qy=/from\s+['"]@react-native-async-storage\/async-storage['"]|from\s+['"]react-native['"].*AsyncStorage/,eb=new Set([".ts",".tsx",".js",".jsx"]),tb=new Set(["node_modules",".expo",".git","android","ios","dist","build"]);function vc(e){let t=[];if(!vr.existsSync(e))return t;let n=vr.readdirSync(e,{withFileTypes:!0});for(let i of n){if(tb.has(i.name))continue;let r=$r.join(e,i.name);i.isDirectory()?t.push(...vc(r)):eb.has($r.extname(i.name))&&t.push(r)}return t}async function $c(e,t){let n=[],i=1,r=$r.join(e,"src"),o=vr.existsSync(r)?r:e,s=vc(o);for(let a of s){let l=vr.readFileSync(a,"utf-8");if(!Qy.test(l))continue;let d=l.split(`
-`),c=$r.relative(e,a);for(let u=0;u<d.length;u++){let f=d[u];wc.lastIndex=0;let p;for(;(p=wc.exec(f))!==null;){let y=p[1];Zy.test(y)&&n.push({id:`STOR-${String(i++).padStart(3,"0")}`,title:`AsyncStorage used for "${y}"`,description:`Sensitive data key "${y}" stored in AsyncStorage (unencrypted).`,severity:"high",category:"storage",file:c,line:u+1,recommendation:"Use expo-secure-store (SecureStore) for sensitive data instead of AsyncStorage."})}}}return{category:"storage",label:"Insecure Storage",findings:n,durationMs:0}}import _r from"fs";import Pr from"path";var _c=/['"`](http:\/\/(?!localhost|127\.0\.0\.1|10\.|192\.168\.|0\.0\.0\.0|172\.(?:1[6-9]|2\d|3[01])\.)[^'"`\s]+)['"`]/g,nb=/\/api\/|\/v[0-9]+\/|\/graphql|\/rest\//i,ib=new Set([".ts",".tsx",".js",".jsx"]),rb=new Set(["node_modules",".expo",".git","android","ios","dist","build","__tests__","__mocks__"]);function Pc(e){let t=[];if(!_r.existsSync(e))return t;let n=_r.readdirSync(e,{withFileTypes:!0});for(let i of n){if(rb.has(i.name))continue;let r=Pr.join(e,i.name);i.isDirectory()?t.push(...Pc(r)):ib.has(Pr.extname(i.name))&&t.push(r)}return t}async function Rc(e,t){let n=[],i=1,r=Pr.join(e,"src"),o=_r.existsSync(r)?r:e,s=Pc(o);for(let a of s){let d=_r.readFileSync(a,"utf-8").split(`
-`),c=Pr.relative(e,a);for(let u=0;u<d.length;u++){let f=d[u],p=f.trim();if(p.startsWith("//")||p.startsWith("*"))continue;_c.lastIndex=0;let y;for(;(y=_c.exec(f))!==null;){let g=y[1],h=nb.test(g);n.push({id:`NET-${String(i++).padStart(3,"0")}`,title:`Insecure HTTP URL${h?" (API endpoint)":""}`,description:`Plain HTTP URL found: ${g}`,severity:h?"high":"medium",category:"network",file:c,line:u+1,recommendation:"Use HTTPS instead of HTTP for all network requests."})}}}return{category:"network",label:"HTTP URLs",findings:n,durationMs:0}}import Rr from"fs";import Cr from"path";var Cc=/(?:debug|debugMode|devMode|enableDebug)\s*[:=]\s*true/gi,Oc=/console\.(?:log|warn|info|debug)\s*\([^)]*(?:token|password|secret|credential|key|auth)/gi,ob=new Set([".ts",".tsx",".js",".jsx"]),sb=new Set(["node_modules",".expo",".git","android","ios","dist","build","__tests__","__mocks__"]);function Dc(e){let t=[];if(!Rr.existsSync(e))return t;let n=Rr.readdirSync(e,{withFileTypes:!0});for(let i of n){if(sb.has(i.name))continue;let r=Cr.join(e,i.name);i.isDirectory()?t.push(...Dc(r)):ob.has(Cr.extname(i.name))&&t.push(r)}return t}async function kc(e,t){let n=[],i=1,r=Cr.join(e,"src"),o=Rr.existsSync(r)?r:e,s=Dc(o);for(let a of s){let d=Rr.readFileSync(a,"utf-8").split(`
-`),c=Cr.relative(e,a);for(let u=0;u<d.length;u++){let f=d[u],p=f.trim();if(!(p.startsWith("//")||p.startsWith("*"))&&(Cc.lastIndex=0,Cc.test(f)&&n.push({id:`DBG-${String(i++).padStart(3,"0")}`,title:"Hardcoded debug flag",description:"Debug/dev mode enabled in source code",severity:"medium",category:"debug",file:c,line:u+1,recommendation:"Use __DEV__ or environment variables instead of hardcoded debug flags."}),Oc.lastIndex=0,Oc.test(f))){let y=d.slice(Math.max(0,u-3),u).join(`
-`);/__DEV__/.test(y)||n.push({id:`DBG-${String(i++).padStart(3,"0")}`,title:"Sensitive data in console log",description:"Console log may expose sensitive data (token, password, etc.) in production",severity:"medium",category:"debug",file:c,line:u+1,recommendation:"Wrap in __DEV__ check or remove sensitive data from console output."})}}}return{category:"debug",label:"Debug/Dev Flags",findings:n,durationMs:0}}import Nc from"fs";import gs from"path";var ab=new Set(["androidx.work.impl.background.systemjob.SystemJobService","androidx.work.impl.diagnostics.DiagnosticsReceiver","com.google.firebase.iid.FirebaseInstanceIdReceiver","com.google.android.gms.auth.api.signin.RevocationBoundService","androidx.profileinstaller.ProfileInstallReceiver","com.google.firebase.messaging.FirebaseMessagingService","com.google.android.gms.measurement.AppMeasurementService","com.google.android.gms.measurement.AppMeasurementJobService"]);function lb(e){let t=[gs.join(e,"android","app","src","main","AndroidManifest.xml"),gs.join(e,"android","AndroidManifest.xml")];for(let n of t)if(Nc.existsSync(n))return n;return null}async function xc(e,t){let n=[],i=1,r=lb(e);if(!r)return{category:"manifest",label:"Android Manifest",findings:[],durationMs:0,error:"No AndroidManifest.xml found. Run with --prebuild or run `expo prebuild` first."};let o=Nc.readFileSync(r,"utf-8"),s=gs.relative(e,r),a=/<(activity|service|receiver|provider)\s+([^>]*?)(?:\/>|>)/gs,l;for(;(l=a.exec(o))!==null;){let d=l[1],c=l[2],f=c.match(/android:name="([^"]+)"/)?.[1]||"unknown";if(ab.has(f))continue;let p=/android:exported="true"/.test(c),y=/android:permission="/.test(c);p&&!y&&n.push({id:`MAN-${String(i++).padStart(3,"0")}`,title:`Exported ${d}: ${f.split(".").pop()}`,description:`${f} is exported=true without android:permission protection`,severity:"medium",category:"manifest",file:s,recommendation:'Set android:exported="false" or add an android:permission attribute.'})}return/android:allowBackup="true"/.test(o)&&n.push({id:`MAN-${String(i++).padStart(3,"0")}`,title:"allowBackup is enabled",description:'android:allowBackup="true" allows data extraction via ADB backup',severity:"medium",category:"manifest",file:s,recommendation:'Set android:allowBackup="false" via expo-build-properties plugin.',autoFixable:!0}),/android:debuggable="true"/.test(o)&&n.push({id:`MAN-${String(i++).padStart(3,"0")}`,title:"App is debuggable",description:'android:debuggable="true" allows attaching a debugger in production',severity:"critical",category:"manifest",file:s,recommendation:"Ensure debuggable is false for production builds. This is usually set automatically for release builds."}),{category:"manifest",label:"Android Manifest",findings:n,durationMs:0}}import Or from"fs";import hs from"path";function db(e){let t=hs.join(e,"ios");if(!Or.existsSync(t))return null;let n=Or.readdirSync(t,{withFileTypes:!0});for(let i of n){if(!i.isDirectory()||i.name==="Pods"||i.name.startsWith("."))continue;let r=hs.join(t,i.name,"Info.plist");if(Or.existsSync(r))return r}return null}async function Tc(e,t){let n=[],i=1,r=db(e);if(!r)return{category:"ats",label:"iOS ATS Config",findings:[],durationMs:0,error:"No Info.plist found. Run with --prebuild or run `expo prebuild` first."};let o=Or.readFileSync(r,"utf-8"),s=hs.relative(e,r),a=o.match(/<key>NSAppTransportSecurity<\/key>\s*<dict>([\s\S]*?)<\/dict>/);if(a){let l=a[1];/<key>NSAllowsArbitraryLoads<\/key>\s*<true\s*\/>/.test(l)&&n.push({id:`ATS-${String(i++).padStart(3,"0")}`,title:"ATS disabled \u2014 NSAllowsArbitraryLoads",description:"App Transport Security is completely disabled. All HTTP connections are allowed.",severity:"critical",category:"ats",file:s,recommendation:"Remove NSAllowsArbitraryLoads or set to false. Use domain-specific exceptions only if absolutely necessary."});let d=l.match(/<key>NSExceptionDomains<\/key>\s*<dict>([\s\S]*?)<\/dict>/);if(d){let c=d[1].match(/<key>([^<]+)<\/key>/g);if(c)for(let u of c){let f=u.replace(/<\/?key>/g,"");f!=="NSExceptionDomains"&&n.push({id:`ATS-${String(i++).padStart(3,"0")}`,title:`ATS exception: ${f}`,description:`ATS exception configured for ${f}`,severity:"low",category:"ats",file:s,recommendation:`Verify that the ATS exception for ${f} is necessary. Use HTTPS where possible.`})}}}return{category:"ats",label:"iOS ATS Config",findings:n,durationMs:0}}var ub=[{category:"permissions",label:"Permission Audit",fn:Sc,requiresPrebuild:!1},{category:"secrets",label:"Secrets Detection",fn:Ec,requiresPrebuild:!1},{category:"dependencies",label:"Dependency CVEs",fn:Ic,requiresPrebuild:!1},{category:"storage",label:"Insecure Storage",fn:$c,requiresPrebuild:!1},{category:"network",label:"HTTP URLs",fn:Rc,requiresPrebuild:!1},{category:"debug",label:"Debug/Dev Flags",fn:kc,requiresPrebuild:!1},{category:"manifest",label:"Android Manifest",fn:xc,requiresPrebuild:!0},{category:"ats",label:"iOS ATS Config",fn:Tc,requiresPrebuild:!0}];async function Fc(e,t){let n=ub;t.category&&(n=n.filter(s=>s.category===t.category),n.length===0&&(_i.error(Ye.red(`Unknown category: ${t.category}`)),_i.info(Ye.dim(`Available: ${Object.values(gt).join(", ")}`)),process.exit(1)));let i=n.filter(s=>!s.requiresPrebuild),r=n.filter(s=>s.requiresPrebuild),o=[];for(let s of i){let a=Lc();a.start(Ye.dim(`Running ${s.label}...`));try{let l=Date.now(),d=await s.fn(e,t);d.durationMs=Date.now()-l,o.push(d);let c=d.findings.length;a.stop(c>0?Ye.yellow(`${s.label} \u2014 ${c} finding(s)`):Ye.green(`${s.label} \u2014 clean`))}catch(l){a.stop(Ye.red(`${s.label} \u2014 error`)),o.push({category:s.category,label:s.label,findings:[],durationMs:0,error:l.message})}}if(r.length>0){let s=Uc.join(e,"android"),a=Uc.join(e,"ios"),l=Mc.existsSync(s)||Mc.existsSync(a);if(!l&&t.prebuild){t.json||_i.info(Ye.dim(`
-Running expo prebuild for deeper analysis...`));try{cb("npx expo prebuild --no-install",{cwd:e,stdio:"pipe"})}catch{return _i.warn(Ye.yellow("Prebuild failed \u2014 skipping manifest/plist checks.")),o}}else if(!l)return t.json||_i.info(Ye.dim(`
-Skipping manifest/plist checks \u2014 no android/ios dirs. Use --prebuild to generate them.`)),o;for(let d of r){let c=Lc();c.start(Ye.dim(`Running ${d.label}...`));try{let u=Date.now(),f=await d.fn(e,t);f.durationMs=Date.now()-u,o.push(f);let p=f.findings.length;c.stop(p>0?Ye.yellow(`${d.label} \u2014 ${p} finding(s)`):Ye.green(`${d.label} \u2014 clean`))}catch(u){c.stop(Ye.red(`${d.label} \u2014 error`)),o.push({category:d.category,label:d.label,findings:[],durationMs:0,error:u.message})}}}return o}import De from"chalk";import{log as Pe}from"@clack/prompts";var Cn={critical:De.bgRed.white.bold,high:De.red.bold,medium:De.yellow.bold,low:De.blue,info:De.dim},Dr={critical:0,high:1,medium:2,low:3,info:4};function pb(e,t){if(!t)return!0;let n=Dr[t];return n===void 0?!0:Dr[e]<=n}function Bc(e,t){let n=0,i={critical:0,high:0,medium:0,low:0,info:0};for(let s of e){let a=s.findings.filter(d=>pb(d.severity,t));if(a.length===0&&!s.error)continue;if(Pe.info(""),Pe.info(De.bold(`  ${s.label}`)+De.dim(`  ${a.length} finding(s)`)),Pe.info(De.dim("  "+"\u2500".repeat(60))),s.error){Pe.error(De.red(`  Error: ${s.error}`));continue}let l=[...a].sort((d,c)=>Dr[d.severity]-Dr[c.severity]);for(let d of l){let c=Cn[d.severity](` ${d.severity.toUpperCase()} `);Pe.info(`  ${c}  ${De.bold(d.id)}  ${d.title}`),Pe.info(De.dim(`          ${d.description}`)),d.file&&Pe.info(De.dim(`          File: ${d.file}${d.line?`:${d.line}`:""}`)),Pe.info(De.cyan(`          Fix: ${d.recommendation}`)),Pe.info(""),i[d.severity]++,n++}}Pe.info(""),Pe.info(De.bold("  Summary")),Pe.info(De.dim("  "+"\u2500".repeat(60))),Pe.info(`  Total: ${De.bold(String(n))} finding(s)`),Pe.info(`  ${Cn.critical(` ${i.critical} Critical `)}  ${Cn.high(` ${i.high} High `)}  ${Cn.medium(` ${i.medium} Medium `)}  ${Cn.low(` ${i.low} Low `)}  ${Cn.info(` ${i.info} Info `)}`);let r=i.critical>0,o=i.high>0;r||o?(Pe.info(""),Pe.error(De.red.bold(`  FAIL \u2014 ${i.critical} critical, ${i.high} high issue(s) found`))):n>0?(Pe.info(""),Pe.warn(De.yellow("  PASS (with warnings) \u2014 no critical or high issues"))):(Pe.info(""),Pe.success(De.green.bold("  PASS \u2014 no issues found")))}function jc(e,t){let n=e.flatMap(r=>r.findings),i={};for(let r of Object.values(rt))i[r]=n.filter(o=>o.severity===r).length;return{version:"1.0.0",timestamp:new Date().toISOString(),project:t.name||"unknown",projectVersion:t.version||"0.0.0",summary:{total:n.length,...i},passed:i.critical===0&&i.high===0,checks:e.map(r=>({category:r.category,label:r.label,findingCount:r.findings.length,durationMs:r.durationMs,error:r.error||null})),findings:n}}import{log as Re,spinner as fb}from"@clack/prompts";import Ee from"chalk";import Nt from"fs";import mb from"os";import On from"path";import{execSync as gb}from"child_process";var Hc=16384,hb=1,yb=Buffer.from([127,69,76,70]);async function Vc(e){Re.info(Ee.bold.underline("16KB Page Alignment Check")),console.log("");let t=On.resolve(e);if(!Nt.existsSync(t))return Re.error(Ee.red(`APK file not found: ${t}`)),!1;if(!t.endsWith(".apk"))return Re.error(Ee.red("The provided file is not an APK file.")),!1;let n=fb();n.start("Extracting and analyzing native libraries...");let i=Nt.mkdtempSync(On.join(mb.tmpdir(),"mach-16kb-"));try{try{gb(`unzip -o -q "${t}" "lib/arm64-v8a/*.so" "lib/x86_64/*.so" -d "${i}" 2>/dev/null`,{encoding:"utf-8",maxBuffer:50*1024*1024})}catch{}let r=Gc(On.join(i,"lib"));if(r.length===0)return n.stop("Analysis complete."),Re.info(Ee.yellow("No arm64-v8a or x86_64 native libraries found in the APK.")),Re.info(Ee.dim("16KB alignment check only applies to arm64-v8a and x86_64 architectures.")),!0;let o=[];for(let l of r){let d=On.relative(i,l),c=Sb(d),u=On.basename(l),f=bb(l);f!==null&&o.push({name:u,filePath:d,arch:c,align:f,compatible:f>=Hc})}if(n.stop("Analysis complete."),o.length===0)return Re.info(Ee.yellow("No valid ELF shared libraries found.")),!0;let s=o.filter(l=>!l.compatible),a=o.filter(l=>l.compatible);if(Re.info(Ee.dim(`Checked ${o.length} native librar${o.length===1?"y":"ies"}
-`)),s.length>0){Re.info(Ee.red.bold(`Incompatible libraries:
-`));for(let l of s)Re.error(Ee.red(`${Ee.bold(l.name)} ${Ee.dim(`(${l.arch})`)}`)),Re.info(Ee.dim(`  PT_LOAD alignment: 2**${Math.log2(l.align)} (${l.align} bytes, needs 2**14 = ${Hc})`))}return a.length>0&&(console.log(""),Re.success(Ee.green(`${a.length} librar${a.length===1?"y":"ies"} correctly aligned (2**14 or higher).`))),console.log(""),s.length===0?(Re.success(Ee.green.bold("ELF Verification Successful. APK is 16KB compatible.")),!0):(Re.error(Ee.red.bold(`Found ${s.length} unaligned lib${s.length===1?"":"s"} (arm64-v8a/x86_64 libs need to be aligned).`)),console.log(""),Re.info(Ee.yellow("To fix this:")),Re.info(Ee.dim("  1. Rebuild with NDK r28+ which defaults to 16KB page alignment")),Re.info(Ee.dim("  2. Or set -DANDROID_SUPPORT_FLEXIBLE_PAGE_SIZES=ON in CMake")),Re.info(Ee.dim("  3. Update third-party libraries that ship prebuilt .so files")),Re.info(Ee.dim("  4. After rebuilding: zipalign -p -f -v 16 input.apk output.apk")),console.log(""),Re.info(Ee.dim("Reference: https://developer.android.com/guide/practices/page-sizes")),!1)}catch(r){return n.stop("Analysis failed."),Re.error(Ee.red(`Failed to analyze APK: ${r.message}`)),!1}finally{try{Nt.rmSync(i,{recursive:!0,force:!0})}catch{}}}function bb(e){let t=Nt.openSync(e,"r");try{let n=Buffer.alloc(64);if(Nt.readSync(t,n,0,64,0),!n.subarray(0,4).equals(yb))return null;let i=n[4]===2,r=n[5]===1,o=(f,p)=>r?f.readUInt16LE(p):f.readUInt16BE(p),s=(f,p)=>r?f.readUInt32LE(p):f.readUInt32BE(p),a=(f,p)=>Number(r?f.readBigUInt64LE(p):f.readBigUInt64BE(p)),l,d,c;i?(l=a(n,32),d=o(n,54),c=o(n,56)):(l=s(n,28),d=o(n,42),c=o(n,44));let u=null;for(let f=0;f<c;f++){let p=Buffer.alloc(d);if(Nt.readSync(t,p,0,d,l+f*d),s(p,0)!==hb)continue;let g;i?g=a(p,48):g=s(p,28),g>0&&(u===null||g<u)&&(u=g)}return u??0}catch{return null}finally{Nt.closeSync(t)}}function Gc(e){let t=[];if(!Nt.existsSync(e))return t;let n=Nt.readdirSync(e,{withFileTypes:!0});for(let i of n){let r=On.join(e,i.name);i.isDirectory()?t.push(...Gc(r)):i.name.endsWith(".so")&&t.push(r)}return t}function Sb(e){return e.includes("arm64-v8a")?"arm64-v8a":e.includes("x86_64")?"x86_64":"unknown"}var Wc=async e=>{if(Ue()||(ot.error(ht.red(`You are not logged in. Run \`${m.nameLower} login\` first.`)),process.exit(1)),e.apk){await Ib(e);return}let n=process.cwd(),i=kr.join(n,"package.json");Pi.existsSync(i)||(ot.error(ht.red("No package.json found. Run this command from a project root.")),process.exit(1));let r=JSON.parse(Pi.readFileSync(i,"utf-8")),o=!!(r.dependencies?.expo||r.devDependencies?.expo);e.json||(ot.info(ht.dim(`Project: ${r.name||"unknown"} v${r.version||"0.0.0"}`)),ot.info(ht.dim(`Type: ${o?"Expo":"Bare React Native"}`)),ot.info(""));let s={json:e.json,fix:e.fix,category:e.category,severity:e.severity,prebuild:e.prebuild},a=await Fc(n,s);e.json?console.log(JSON.stringify(jc(a,r),null,2)):Bc(a,e.severity);let l=a.some(c=>c.findings.some(u=>u.severity==="critical")),d=a.some(c=>c.findings.some(u=>u.severity==="high"));(l||d)&&process.exit(1)},zc=["16kb"];async function Ib(e){let t=e.category?.toLowerCase();t&&!zc.includes(t)&&(ot.error(ht.red(`Unknown APK check category: "${t}"`)),ot.info(ht.dim(`Available APK checks: ${zc.join(", ")}`)),process.exit(1));let n=await wb(e.apk);n||process.exit(1);let i=!t,r=!1;(i||t==="16kb")&&(await Vc(n)||(r=!0)),r&&process.exit(1)}async function wb(e){if(e.startsWith("build:")){let n=e.slice(6);return await vb(n)}if(e.startsWith("http://")||e.startsWith("https://"))return await Jc(e);let t=kr.resolve(e);return Pi.existsSync(t)?t:(ot.error(ht.red(`APK file not found: ${t}`)),null)}async function vb(e){let t=Kc();t.start(`Fetching APK from build ${e}...`);try{let n=await D.get(`/build/${e}`);if(n.data.status!=="success")throw new Error(n.data.message);let i=n.data.build;if(!i)throw new Error("Build not found");let r=i.artifacts?.find(o=>o.type?o.type==="apk":o.name?.endsWith(".apk")||o.url?.includes(".apk"));return!r||!r.url?(t.stop("No APK artifact found"),ot.error(ht.red("This build does not have an APK artifact.")),ot.info(ht.dim("Make sure the build produced an APK (not just an AAB).")),null):(t.stop(`Found build: ${i.buildId||e}`),await Jc(r.url))}catch(n){return t.stop("Failed to fetch build"),ot.error(ht.red(n.message)),null}}async function Jc(e){let t=Kc();t.start("Downloading APK...");try{let n=Pi.mkdtempSync(kr.join(Ab.tmpdir(),`${m.nameLower}-audit-`)),i=kr.join(n,"app.apk"),r=await Eb.get(e,{responseType:"arraybuffer"});Pi.writeFileSync(i,r.data);let o=(r.data.length/(1024*1024)).toFixed(1);return t.stop(`Downloaded APK (${o} MB)`),i}catch(n){return t.stop("Download failed"),ot.error(ht.red(`Failed to download APK: ${n.message}`)),null}}var Pb=console.log;console.log=()=>{};_b();console.log=Pb;he(fe.bgCyan.black(m.cliTag("Production Build Orchestrator")));var Ri=(e,t=[])=>t.concat(e),Z=new $b;Z.name(m.nameLower).description(`${m.name} CLI: Powerful Cloud Infrastructure Tools`).version(St).option("-y, --yes","Automatically answer yes to all prompts",!1).option("--quiet","Suppress non-essential output",!1);Z.command("agent").description("Manage local device discovery agent for the Install Hub (port 7070)").argument("[action]","start, run, install, status, restart, stop, or uninstall","start").action(async e=>{await Jl(e)});Z.command("host").description("Setup AWS S3 static hosting and CloudFront").action(async()=>{he(fe.bgCyan.black(m.cliTag("Hosting"))),await Ps()});Z.command("sitemap").description("Generate sitemap.xml from Expo Router app structure").option("-o, --output <path>","Output path for sitemap.xml","./public/sitemap.xml").action(async e=>{he(fe.bgCyan.black(m.cliTag("Sitemap Generator"))),await Ds(e)});Z.command("build").description("Run a build on a cloud provider (AWS Spot Instances)").argument("[platform]","Target platform (android, ios)").option("--platform <os>","Target platform alias (android, ios) [Optional]").option("--repo <url>","Git Repository URL").option("--branch <name>","Git Branch").option("--ami <id>","AMI ID").option("--bucket <name>","S3 Bucket for artifacts").option("--region <region>","AWS Region").option("--aws-profile <name>","AWS Credentials Profile").option("-p, --build-profile <name>","Build Profile (e.g. production, staging)").option("--profile <name>","Build Profile (alias for --build-profile)").option("--dry-run","Generate User Data script without launching").option("--keep-instance","Do not terminate the instance after build").option("--subnet <id>","VPC Subnet ID to launch the instance in").option("--security-group <id>","VPC Security Group ID to use").option("--ssh-host <host>","Remote host for iOS build (SSH)").option("--ssh-user <user>","SSH username for remote host").option("--ssh-key <path>","Path to private SSH key for remote host").option("--ios-scheme <scheme>","iOS Scheme to build").option("--ios-team-id <id>","Apple Development Team ID").option("--ios-configuration <config>","Xcode configuration (Release/Debug)").option("--ios-export-method <method>","Export method (ad-hoc, app-store, development, enterprise)").option("--ios-api-key-id <id>","App Store Connect API Key ID").option("--ios-api-key-issuer <id>","App Store Connect API Key Issuer ID").option("--ios-api-key-path <path>","Path to App Store Connect API Key (.p8) file").option("--simulator","Build for iOS Simulator (no signing required)").addOption(new st("--build-id <id>","Internal build ID").hideHelp()).addOption(new st("--project-id <id>","Internal project ID").hideHelp()).addOption(new st("--fail-only","Internal: mark an existing build failed").hideHelp()).addOption(new st("--error <message>","Internal failure message").hideHelp()).option("--local","Run build on local machine").option("--auto-version","Assign the next Android versionCode or iOS buildNumber from Mach").option("--auto-submit","Submit this build after it completes successfully").option("--submit-track <track>","Google Play track to use with --auto-submit").option("--submit-release-status <status>","Google Play release status to use with --auto-submit").option("--submit-rollout <fraction>","Google Play staged rollout fraction to use with --auto-submit").option("--submit-changes-not-sent-for-review","Commit Google Play changes without automatically sending them for review when using --auto-submit").option("--submit-credential-id <id>","Service credential ID to use with --auto-submit").option("--submit-json-output <path>","Write auto-submit metadata JSON to a file for CI/CD").option("--verbose","Enable verbose logging").option("--json-output <path>","Write build metadata JSON to a file for CI/CD").option("--maestro","Queue a managed Maestro test run after a successful build").option("--maestro-flows <path>","Maestro flow file or directory (default: .maestro)").option("--maestro-device <device>","iOS simulator model or identifier (default: iPhone 17 Pro; managed Android uses Pixel 6)").option("--maestro-retries <n>","Retries for the Maestro run","1").option("--maestro-record","Enable screen recording where supported").option("--maestro-use-build-source","Use Maestro flows from the build source snapshot instead of uploading local flows").option("--maestro-env <name>","Forward an environment variable to the managed Maestro runner; repeat or comma-separate names",Ri,[]).option("-y, --yes","Automatically answer yes to all prompts",!1).option("--quiet","Suppress non-essential output",!1).action(async(e,t)=>{let n=Z.opts();t.yes=t.yes||n.yes,t.quiet=t.quiet||n.quiet,t.platform=e||t.platform,t.buildProfile=t.profile||t.buildProfile,t.quiet||he(fe.bgCyan.black(m.cliTag("Cloud Build"))),await Wi(t)});Z.command("maestro").description("Run Maestro tests locally or with the managed Mach runner").option("--platform <os>","Target platform (android/ios)").option("-p, --profile <name>","Build profile to resolve when using --latest","production").option("--latest","Use the latest successful build for the platform/profile").option("--build-id <id>","Use a specific Mach build ID").option("--build-url <url>","Use a Mach build URL").option("--artifact-url <url>","Use a direct APK or iOS simulator app artifact URL").option("--local","Run Maestro on a connected local emulator/device instead of the managed runner").option("--maestro-flows <path>","Maestro flow file or directory (default: .maestro)").option("--maestro-device <device>","iOS simulator model or identifier (default: iPhone 17 Pro; managed Android uses Pixel 6)").option("--maestro-retries <n>","Retries for the Maestro run","1").option("--maestro-record","Enable screen recording where supported").option("--maestro-use-build-source","Use Maestro flows from the build source snapshot instead of uploading local flows").option("--maestro-env <name>","Forward an environment variable to the managed Maestro runner; repeat or comma-separate names",Ri,[]).option("--wait","Wait for managed Maestro completion and exit non-zero on failure").option("--wait-timeout <minutes>","Maximum minutes to wait for managed Maestro completion","60").option("--wait-interval <seconds>","Polling interval while waiting for managed Maestro completion","15").option("--json-output <path>","Write test run metadata JSON to a file for CI/CD").addOption(new st("--local-runner","Internal: execute a managed Maestro run on this machine").hideHelp()).addOption(new st("--test-run-id <id>","Internal test run ID").hideHelp()).addOption(new st("--project-id <id>","Internal project ID").hideHelp()).addOption(new st("--runner-token <token>","Internal runner token").hideHelp()).action(async e=>{he(fe.bgCyan.black(m.cliTag("Maestro Testing"))),await Da(e)});var Dn=e=>e.option("--platform <os>","Target platform: ios, android, or all","all").option("--channel <name>","OTA channel (for example: production, staging)").option("--branch <name>","Alias for --channel").option("--runtime-version <version>","Runtime version override").option("--message <text>","Release note/message for this OTA update").option("--framework <name>","Framework override: expo or react-native").option("--engine <name>","OTA engine override (currently expo-updates)").option("--url <url>","Mach OTA update URL override").option("--install-plugin","Install @radhya/mach locally for the Expo config plugin").option("--skip-install","Do not install local Expo plugin dependency").option("--update-id <id>","OTA update id for rollback/promote").option("--json","Print JSON output"),kn=Z.command("ota").description("Setup, publish, verify, and manage Mach OTA updates");Dn(kn.command("setup").description("Configure OTA for this project")).action(async e=>{let t=Z.opts();he(fe.bgCyan.black(m.cliTag("OTA Setup"))),await Gt("setup",{...e,yes:e.yes||t.yes})});Dn(kn.command("publish").description("Publish an OTA update")).action(async e=>{let t=Z.opts();he(fe.bgCyan.black(m.cliTag("OTA Publish"))),await Gt("publish",{...e,yes:e.yes||t.yes})});Dn(kn.command("verify").description("Verify OTA configuration")).action(async e=>{let t=Z.opts();he(fe.bgCyan.black(m.cliTag("OTA Verify"))),await Gt("verify",{...e,yes:e.yes||t.yes})});Dn(kn.command("list").description("List OTA updates for the linked project")).action(async e=>{let t=Z.opts();he(fe.bgCyan.black(m.cliTag("OTA Updates"))),await Gt("list",{...e,yes:e.yes||t.yes})});Dn(kn.command("rollback").description("Roll back an OTA update")).action(async e=>{let t=Z.opts();he(fe.bgCyan.black(m.cliTag("OTA Rollback"))),await Gt("rollback",{...e,yes:e.yes||t.yes})});Dn(kn.command("promote").description("Promote an OTA update")).action(async e=>{let t=Z.opts();he(fe.bgCyan.black(m.cliTag("OTA Promote"))),await Gt("promote",{...e,yes:e.yes||t.yes})});Z.command("submit").description("Automated Store Submission (App Store / Google Play)").option("--platform <os>","Target platform (ios/android)").option("-p, --profile <name>","Build/submission profile to submit from (e.g. production, preprod)").option("--track <track>","Google Play Track (internal, alpha, beta, production)").option("--release-status <status>","Google Play release status (completed, draft, halted, inProgress)").option("--rollout <fraction>","Google Play staged rollout fraction for inProgress releases (example: 0.1)").option("--changes-not-sent-for-review","Commit Google Play changes without automatically sending them for review").option("--ssh-host <host>","Remote macOS host for iOS submission").option("--ssh-user <user>","SSH username for remote iOS submission").option("--ssh-key <path>","Path to private SSH key for remote iOS submission").option("--credential-id <id>","Service credential ID to use when multiple submission credentials exist").option("--local","Run submission on this machine (internal runner mode for iOS)").addOption(new st("--submit-id <id>","Internal submission ID").hideHelp()).addOption(new st("--project-id <id>","Internal project ID").hideHelp()).addOption(new st("--package-name <name>","Internal Android package name").hideHelp()).addOption(new st("--bundle-id <id>","Internal iOS bundle identifier").hideHelp()).option("--json-output <path>","Write submission metadata JSON to a file for CI/CD").option("--latest","Use the latest successful build for submission").option("--build-id <id>","Use a specific build ID for submission").action(async e=>{let t=Z.opts();e.quiet=e.quiet||t.quiet,e.yes=e.yes||t.yes,he(fe.bgCyan.black(m.cliTag("Store Submission"))),await Hi(e)});Z.command("login").description(`Login to ${m.name} Dashboard`).action(async()=>{he(fe.bgCyan.black(m.cliTag("Login"))),await fd()});Z.command("logout").description(`Logout from ${m.name} on this machine`).action(async()=>{he(fe.bgCyan.black(m.cliTag("Logout"))),await md()});Z.command("link").description(`Link local directory to a ${m.name} Project`).action(async()=>{he(fe.bgCyan.black(m.cliTag("Link Project"))),await hd()});Z.command("me").description("Display currently logged in user details").action(async()=>{await Bd()});Z.command("init").description(`Create a new ${m.name} Project`).action(async()=>{he(fe.bgCyan.black(m.cliTag("Init Project"))),await yd()});Z.command("env").description("Manage Environment Variables").argument("<action>","Action to perform: set, list, pull, download, or export").argument("[args...]","Key=Value pairs for set action").option("-e, --environment <name>","Environment to pull/download","development").option("-o, --out <file>","Output file for pull/download",".env.local").option("--overwrite","Overwrite output file if it already exists").action(async(e,t,n)=>{he(fe.bgCyan.black(m.cliTag("Env Manager"))),await Sd(e,t,n)});Z.command("start").description("Start the development server (Metro)").option("-p, --build-profile <name>","Build profile (e.g. development, staging)","development").option("--tunnel","Use ngrok tunnel").option("--lan","Use LAN IP").option("--localhost","Use localhost").option("-c, --clear","Clear Metro cache").option("--port <number>","Port to listen on").option("--ios","Start on iOS").option("--android","Start on Android").option("--web","Start on Web").action(async e=>{he(fe.bgCyan.black(m.cliTag("Dev Server"))),await Hd(e)});var Ci=Z.command("push").description("Configure and send provider-direct APNs/FCM notifications");Ci.command("setup").description("Install and wire a working default push experience").option("--name <name>","Push app display name").option("--ios-bundle <id>","iOS bundle identifier").option("--android-package <name>","Android package name").option("-e, --environment <name>","development, preview, or production").option("--google-services-file <path>","Android google-services.json path").option("--skip-install","Generate setup without installing SDK dependencies").action(ad);Ci.command("init").description("Create only the server-side push app (advanced)").option("--name <name>","Push app display name").option("--ios-bundle <id>","iOS bundle identifier").option("--android-package <name>","Android package name").option("-e, --environment <name>","development, preview, or production","production").option("--google-services-file <path>","Expo Android google-services.json path").action(sd);var Yc=Ci.command("credentials").description("Configure provider credentials");Yc.command("apns").description("Configure an Apple APNs .p8 authentication key").requiredOption("--file <path>","APNs .p8 file").requiredOption("--team-id <id>","Apple Developer team ID").requiredOption("--key-id <id>","APNs key ID").option("--bundle-id <id>","iOS bundle identifier").option("--app <id>","MACH Push app ID").option("-e, --environment <name>","development, preview, or production").action(e=>Uo("apns",e));Yc.command("fcm").description("Configure a Firebase service-account JSON file").requiredOption("--file <path>","Firebase service-account JSON").option("--app <id>","MACH Push app ID").option("-e, --environment <name>","development, preview, or production").action(e=>Uo("fcm",e));Ci.command("send").description("Queue one transient push notification").requiredOption("--title <text>","Notification title").requiredOption("--body <text>","Notification body").option("--app <id>","MACH Push app ID").option("-e, --environment <name>","development, preview, or production").option("--token <token>","MACH push token; repeatable",Ri,[]).option("--user <id>","Application user ID; repeatable",Ri,[]).option("--all","Send to all active devices").option("--platform <platform>","Limit --all to ios or android").option("--data <json>","String-to-string custom data JSON").option("--sound <name>","Provider sound name").option("--badge <number>","iOS badge count").option("--ttl <seconds>","Provider time-to-live").option("--collapse-key <key>","Provider collapse key").option("--android-channel-id <id>","Android notification channel").action(ld);Ci.command("status").description("Show aggregate push delivery counters").option("--days <number>","Statistics range, 1-90","30").action(dd);Z.command("config").description("Show resolved configuration for a profile").option("-p, --profile <name>","Build profile to resolve","development").option("--json","Output as JSON").action(async e=>{await Vd(e)});var Xc=Z.command("version").description("Show or seed DB-owned native version counters"),Zc=e=>e.requiredOption("--platform <os>","Target platform: ios or android").option("-p, --profile <name>","Build profile used to resolve package/bundle scope","production").option("--scope <value>","Counter scope override, usually package name or bundle identifier").option("--package <name>","Android package override").option("--bundle-id <id>","iOS bundle identifier override").option("--json","Print JSON output");Zc(Xc.command("show").description("Show the current native version counter")).action(async e=>{he(fe.bgCyan.black(m.cliTag("Version Counter"))),await fs("show",e)});Zc(Xc.command("seed").description("Seed the native version counter for an existing app").argument("[value]","Latest already-used value; the next build uses value + 1").option("--value <number>","Latest already-used value; the next build uses value + 1").option("--force","Allow lowering an existing counter")).action(async(e,t)=>{he(fe.bgCyan.black(m.cliTag("Version Counter"))),await fs("seed",{...t,value:t.value??e})});var Qc=Z.command("deeplink").description("Configure and verify app links, universal links, and URI schemes");Qc.command("setup").description("Generate deep link config, hosted association files, and Expo plugin support").option("--domain <domain>","Associated domain, e.g. app.example.com").option("--base-url <url>","Base URL, e.g. https://app.example.com").option("-p, --profile <name>","Profile used for build/submit overrides").option("--platform <platform>","ios, android, or all").option("--framework <framework>","expo or react-native").option("--scheme <scheme>","URI scheme, e.g. myapp").option("--ios-bundle-id <id>","iOS bundle identifier").option("--android-package <name>","Android package name").option("--apple-team-id <id>","Apple Developer Team ID").option("--app-store-id <id>","App Store app ID for Smart App Banner").option("--android-fingerprint <sha256>","Android SHA256 signing certificate fingerprint; repeatable",Ri,[]).option("--output <dir>","Directory for hosted files, e.g. public or deep-links").option("--install-plugin","Install @radhya/mach locally so Expo can use the packaged config plugin").option("--no-install-plugin","Do not install @radhya/mach for Expo projects; use the local plugin fallback if the package is missing").option("-y, --yes","Automatically answer yes to prompts",!1).action(async e=>{let t=Z.opts();e.yes=e.yes||t.yes,he(fe.bgCyan.black(m.cliTag("Deep Links"))),await uc(e)});Qc.command("verify").description("Verify local and optionally live deep link configuration").option("-p, --profile <name>","Profile used for build/submit overrides").option("--live","Check hosted files over HTTPS").option("--android-device","Print Android device verification commands").action(async e=>{he(fe.bgCyan.black(m.cliTag("Deep Link Verify"))),await pc(e)});Z.command("credentials").description("Unified, interactive credential management (iOS/Android)").option("-p, --profile <name>","Build profile (production, staging, development)").option("--force","Force recreate certificates (nuke existing on Apple Portal)",!1).action(async e=>{let{credentialsMainCommand:t}=await import("./credentials-SOUQOL2C.js");await t(e)});Z.command("credentials:setup").description("Automated credential provisioning (iOS/Android) [Legacy]").requiredOption("--platform <os>","Platform: ios or android").option("--profile <name>","Build profile (production, staging, development)").option("--bundle-id <id>","Bundle ID / Package Name (optional, auto-detected)").option("--team-id <id>","Apple Team ID (iOS only)").option("--key-alias <alias>","Android keystore alias (optional, auto-generated)").option("--aws-profile <name>","AWS Credentials Profile (for S3 storage)").option("--force","Force recreate certificates (nuke existing on Apple Portal)",!1).action(async e=>{he(fe.bgCyan.black(m.cliTag("Credentials Setup"))),await Ln(e),qc(fe.green("Done!"))});Z.command("credentials:service").description("Upload Service Credentials (ASC API Key / Google Service JSON) [Legacy]").requiredOption("--platform <os>","Platform: ios or android").option("--file <path>","Path to credential file (.p8 or .json)").option("--issuer-id <id>","ASC API Key Issuer ID (iOS only)").option("--key-id <id>","ASC API Key ID (iOS only)").option("--bundle-id <id>","Bundle identifier / Android package name to attach this service credential to").option("--package-name <name>","Android package name to attach this service credential to").option("-p, --profile <name>","Build profile to resolve package/bundle identifier from config").action(async e=>{he(fe.bgCyan.black(m.cliTag("Service Credentials"))),await $s(e),qc(fe.green("Done!"))});var ys=Z.command("device").description("Manage registered iOS test devices");ys.command("register").description("Register a connected iOS device or enter UDID manually").option("--udid <udid>","Device UDID (skip auto-detection)").option("--name <name>","Device name").option("--team-id <id>","Apple Developer Team ID for this device").action(async e=>{await Ir("register",e)});ys.command("list").description("List all registered devices").option("--team-id <id>","Filter by Apple Developer Team ID").action(async e=>{await Ir("list",e)});ys.command("remove").description("Remove a registered device").option("--udid <udid>","Device UDID to remove").option("--team-id <id>","Apple Developer Team ID for this device").action(async e=>{await Ir("remove",e)});Z.command("audit").description("Run automated security audit on the project or APK").option("--apk <path>","Path to APK file (runs APK diagnostics like 16KB alignment)").option("--json","Output results as JSON (for CI/CD)").option("--fix","Auto-apply fixes where possible").option("--category <name>","Run only a specific check category (e.g. 16kb, permissions, secrets)").option("--severity <level>","Minimum severity to display (critical, high, medium, low, info)").option("--prebuild","Run expo prebuild for deeper manifest/plist analysis").action(async e=>{he(fe.bgCyan.black(m.cliTag(e.apk?"APK Audit":"Security Audit"))),await Wc(e)});var Rb=new Set(["login","logout","agent"]);Z.hook("preAction",(e,t)=>{let n=t.name(),i=t.opts?.()||{};n==="maestro"&&(i.local||i.localRunner)||t.parent?.name()!=="deeplink"&&(Rb.has(n)||dn())});Z.on("command:*",()=>{console.error(`Invalid command: %s
-See --help for a list of available commands.`,Z.args.join(" ")),process.exit(1)});process.argv.slice(2).length||Z.help();Z.parse(process.argv);
+`),"Registered Devices")}catch(i){n.stop(K.red("Failed to fetch devices")),De.error(i.response?.data?.message||i.message)}vn(K.blue("---"))}async function gm(e){let t=e.udid,n=vl(e).teamId;if(!t){let o=wn();o.start("Fetching registered devices...");try{let a=(await $.get("/devices",n?{params:{teamId:n}}:void 0)).data.devices||[];if(o.stop(`${a.length} device(s) found`),a.length===0){De.info(K.dim("No devices to remove.")),vn(K.blue("---"));return}let l=await Il({message:"Select device to remove:",options:a.map(c=>({value:c.deviceKey||c.udid,label:c.name,hint:`${c.udid.substring(0,12)}...${c.teamId?` \xB7 ${c.teamId}`:""}`}))});if(En(l)){In("Cancelled");return}let d=a.find(c=>(c.deviceKey||c.udid)===l);t=d?.udid||l,n=d?.teamId||n}catch(s){o.stop(K.red("Failed to fetch devices")),De.error(s.response?.data?.message||s.message);return}}let i=await dm({message:`Remove device ${K.dim(t.substring(0,12)+"...")}?`});if(En(i)||!i){In("Cancelled");return}let r=wn();r.start("Removing device...");try{await $.delete(`/devices/${encodeURIComponent(t)}`,n?{params:{teamId:n}}:void 0),r.stop(K.green("Device removed"))}catch(o){r.stop(K.red("Failed to remove device")),De.error(o.response?.data?.message||o.message)}vn(K.blue("---"))}async function Ii(e,t){switch(e){case"register":await fm(t);break;case"list":await mm(t);break;case"remove":await gm(t);break;default:De.error(`Unknown action: ${e}`)}}import{log as Ce,spinner as Ql}from"@clack/prompts";import Be from"chalk";import Ti from"path";import Rn from"fs";import Jm from"os";import Ym from"axios";var Pe=(o=>(o.CRITICAL="critical",o.HIGH="high",o.MEDIUM="medium",o.LOW="low",o.INFO="info",o))(Pe||{}),Fe=(l=>(l.PERMISSIONS="permissions",l.SECRETS="secrets",l.DEPENDENCIES="dependencies",l.STORAGE="storage",l.NETWORK="network",l.DEBUG="debug",l.MANIFEST="manifest",l.ATS="ats",l))(Fe||{});import{spinner as Gl,log as $n}from"@clack/prompts";import _e from"chalk";import{execSync as Fm}from"child_process";import Vl from"fs";import zl from"path";import pt from"fs";import _n from"path";import{execSync as hm}from"child_process";var _l={"android.permission.READ_PHONE_STATE":{severity:"high",description:"Can read phone number, IMEI, carrier info"},"android.permission.CALL_PHONE":{severity:"high",description:"Can make calls without user interaction"},"android.permission.SEND_SMS":{severity:"high",description:"Can send SMS without user interaction"},"android.permission.READ_SMS":{severity:"high",description:"Can read user SMS messages"},"android.permission.READ_CONTACTS":{severity:"medium",description:"Can read user contacts"},"android.permission.WRITE_CONTACTS":{severity:"medium",description:"Can modify user contacts"},"android.permission.READ_CALL_LOG":{severity:"high",description:"Can read call history"},"android.permission.CAMERA":{severity:"medium",description:"Camera access"},"android.permission.RECORD_AUDIO":{severity:"medium",description:"Microphone access"},"android.permission.ACCESS_FINE_LOCATION":{severity:"medium",description:"Precise GPS location"},"android.permission.ACCESS_COARSE_LOCATION":{severity:"medium",description:"Approximate location"},"android.permission.ACCESS_BACKGROUND_LOCATION":{severity:"high",description:"Background location tracking"},"android.permission.READ_EXTERNAL_STORAGE":{severity:"medium",description:"Read files on device"},"android.permission.WRITE_EXTERNAL_STORAGE":{severity:"medium",description:"Write files on device"},"android.permission.READ_MEDIA_IMAGES":{severity:"low",description:"Read photos"},"android.permission.READ_MEDIA_VIDEO":{severity:"low",description:"Read videos"},"android.permission.SYSTEM_ALERT_WINDOW":{severity:"high",description:"Draw overlays on other apps"},"android.permission.REQUEST_INSTALL_PACKAGES":{severity:"high",description:"Can install APKs"}},ym={NSCameraUsageDescription:{severity:"medium",description:"Camera access declared"},NSMicrophoneUsageDescription:{severity:"medium",description:"Microphone access declared"},NSLocationWhenInUseUsageDescription:{severity:"medium",description:"Location (in-use) declared"},NSLocationAlwaysUsageDescription:{severity:"high",description:"Background location declared"},NSContactsUsageDescription:{severity:"medium",description:"Contacts access declared"},NSCalendarsUsageDescription:{severity:"low",description:"Calendar access declared"},NSPhotoLibraryUsageDescription:{severity:"low",description:"Photo library access declared"}};function bm(e){try{let n=hm("npx expo config --type introspect --json 2>/dev/null",{cwd:e,encoding:"utf-8",timeout:3e4});return JSON.parse(n)}catch{}let t=_n.join(e,"app.json");if(pt.existsSync(t))try{let n=JSON.parse(pt.readFileSync(t,"utf-8"));return n.expo||n}catch{}return null}function Am(e){let t=[],n=_n.join(e,"node_modules");if(!pt.existsSync(n))return t;let i=/<uses-permission\s+android:name="([^"]+)"/g;function r(o,s){let a=_n.join(o,"android","src","main","AndroidManifest.xml");if(!pt.existsSync(a))return;let l=pt.readFileSync(a,"utf-8"),d;for(;(d=i.exec(l))!==null;)t.push({pkg:s,permission:d[1]});i.lastIndex=0}for(let o of pt.readdirSync(n)){if(o.startsWith("."))continue;let s=_n.join(n,o);if(o.startsWith("@")){if(!pt.statSync(s).isDirectory())continue;for(let a of pt.readdirSync(s))r(_n.join(s,a),`${o}/${a}`)}else r(s,o)}return t}async function $l(e,t){let n=[],i=1,r=bm(e),o=r?.android?.permissions||[],s=r?.android?.blockedPermissions||[];for(let d of o){let c=_l[d];c&&n.push({id:`PERM-${String(i++).padStart(3,"0")}`,title:`${d.split(".").pop()} declared`,description:c.description,severity:c.severity,category:"permissions",file:"app.config.ts",recommendation:"Remove from permissions if not needed, or add justification."})}let a=Am(e);for(let{pkg:d,permission:c}of a){let u=_l[c];u&&(s.includes(c)||o.includes(c)||n.push({id:`PERM-${String(i++).padStart(3,"0")}`,title:`${c.split(".").pop()} injected by ${d}`,description:`${u.description}. Auto-injected via ${d} AndroidManifest.xml`,severity:u.severity,category:"permissions",file:`node_modules/${d}/android/src/main/AndroidManifest.xml`,recommendation:`Add "${c}" to blockedPermissions if not needed.`,autoFixable:!0}))}let l=r?.ios?.infoPlist||{};for(let[d,c]of Object.entries(ym))d in l&&n.push({id:`PERM-${String(i++).padStart(3,"0")}`,title:`iOS: ${d} declared`,description:c.description,severity:c.severity,category:"permissions",file:"app.config.ts",recommendation:`Remove ${d} from infoPlist if the app does not use this capability.`});return{category:"permissions",label:"Permission Audit",findings:n,durationMs:0}}import io from"fs";import wi from"path";var Sm=[{id:"SEC-001",pattern:/(['"`])(?:sk|pk)_(?:live|test)_[a-zA-Z0-9]{20,}\1/g,severity:"critical",label:"Stripe API Key"},{id:"SEC-002",pattern:/(['"`])AIza[0-9A-Za-z\-_]{35}\1/g,severity:"high",label:"Google API Key"},{id:"SEC-003",pattern:/(['"`])AKIA[0-9A-Z]{16}\1/g,severity:"critical",label:"AWS Access Key ID"},{id:"SEC-004",pattern:/-----BEGIN (?:RSA |EC )?PRIVATE KEY-----/g,severity:"critical",label:"Private key in source"},{id:"SEC-005",pattern:/(?:ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9_]{36,}/g,severity:"high",label:"GitHub Token"},{id:"SEC-006",pattern:/xox[bpors]-[a-zA-Z0-9-]{10,}/g,severity:"high",label:"Slack Token"},{id:"SEC-007",pattern:/(?:password|secret|apikey|api_key)\s*[:=]\s*['"`][^'"`\n]{8,}['"`]/gi,severity:"high",label:"Hardcoded credential"}],Em=new Set([".ts",".tsx",".js",".jsx"]),Im=new Set(["node_modules",".expo",".git","android","ios","dist","build","__tests__","__mocks__"]);function Rl(e){let t=[],n=io.readdirSync(e,{withFileTypes:!0});for(let i of n){if(Im.has(i.name))continue;let r=wi.join(e,i.name);i.isDirectory()?t.push(...Rl(r)):Em.has(wi.extname(i.name))&&t.push(r)}return t}function wm(e){let t=e.trim();return t.startsWith("//")||t.startsWith("*")||t.startsWith("/*")}function vm(e){return/process\.env\./i.test(e)||/import\.meta\.env/i.test(e)}async function Ol(e,t){let n=[],i=wi.join(e,"src"),r=io.existsSync(i)?i:e,o=Rl(r);for(let s of o){let l=io.readFileSync(s,"utf-8").split(`
+`),d=wi.relative(e,s);for(let c=0;c<l.length;c++){let u=l[c];if(!wm(u)&&!vm(u))for(let{id:f,pattern:p,severity:g,label:h}of Sm)p.lastIndex=0,p.test(u)&&n.push({id:f,title:h,description:`Potential ${h.toLowerCase()} found in source code`,severity:g,category:"secrets",file:d,line:c+1,recommendation:`Move to environment variables or a secrets manager. Use \`${m.nameLower} env set\` for managed secrets.`})}}return{category:"secrets",label:"Secrets Detection",findings:n,durationMs:0}}import{execSync as _m}from"child_process";var $m={critical:"critical",high:"high",moderate:"medium",low:"low",info:"info"};async function Dl(e,t){let n=[],i=1,r;try{r=_m("npm audit --json 2>/dev/null",{cwd:e,encoding:"utf-8",timeout:6e4})}catch(a){if(r=a.stdout||"",!r)return{category:"dependencies",label:"Dependency CVEs",findings:[],durationMs:0,error:"Failed to run npm audit. Ensure npm is available and dependencies are installed."}}let o;try{o=JSON.parse(r)}catch{return{category:"dependencies",label:"Dependency CVEs",findings:[],durationMs:0,error:"Failed to parse npm audit output."}}let s=o.vulnerabilities||{};for(let[a,l]of Object.entries(s)){let d=$m[l.severity]||"info",c=Array.isArray(l.via)?l.via.map(u=>typeof u=="string"?u:u.title||u.name).join(", "):String(l.via);n.push({id:`DEP-${String(i++).padStart(3,"0")}`,title:`${a} \u2014 ${l.severity}`,description:`Via: ${c}. Range: ${l.range||"unknown"}`,severity:d,category:"dependencies",recommendation:l.fixAvailable?`Run \`npm audit fix\` or update ${a} to a patched version.`:"No fix available yet. Monitor for updates or evaluate alternatives.",autoFixable:!!l.fixAvailable})}return{category:"dependencies",label:"Dependency CVEs",findings:n,durationMs:0}}import vi from"fs";import _i from"path";var Rm=/(?:token|password|credential|secret|apiKey|api_key|session|auth|jwt|refresh_token|access_token|private_key|pin|otp)/i,Pl=/AsyncStorage\s*\.\s*(?:setItem|mergeItem)\s*\(\s*['"`]([^'"`]+)['"`]/g,Om=/from\s+['"]@react-native-async-storage\/async-storage['"]|from\s+['"]react-native['"].*AsyncStorage/,Dm=new Set([".ts",".tsx",".js",".jsx"]),Pm=new Set(["node_modules",".expo",".git","android","ios","dist","build"]);function Cl(e){let t=[];if(!vi.existsSync(e))return t;let n=vi.readdirSync(e,{withFileTypes:!0});for(let i of n){if(Pm.has(i.name))continue;let r=_i.join(e,i.name);i.isDirectory()?t.push(...Cl(r)):Dm.has(_i.extname(i.name))&&t.push(r)}return t}async function Tl(e,t){let n=[],i=1,r=_i.join(e,"src"),o=vi.existsSync(r)?r:e,s=Cl(o);for(let a of s){let l=vi.readFileSync(a,"utf-8");if(!Om.test(l))continue;let d=l.split(`
+`),c=_i.relative(e,a);for(let u=0;u<d.length;u++){let f=d[u];Pl.lastIndex=0;let p;for(;(p=Pl.exec(f))!==null;){let g=p[1];Rm.test(g)&&n.push({id:`STOR-${String(i++).padStart(3,"0")}`,title:`AsyncStorage used for "${g}"`,description:`Sensitive data key "${g}" stored in AsyncStorage (unencrypted).`,severity:"high",category:"storage",file:c,line:u+1,recommendation:"Use expo-secure-store (SecureStore) for sensitive data instead of AsyncStorage."})}}}return{category:"storage",label:"Insecure Storage",findings:n,durationMs:0}}import $i from"fs";import Ri from"path";var kl=/['"`](http:\/\/(?!localhost|127\.0\.0\.1|10\.|192\.168\.|0\.0\.0\.0|172\.(?:1[6-9]|2\d|3[01])\.)[^'"`\s]+)['"`]/g,Cm=/\/api\/|\/v[0-9]+\/|\/graphql|\/rest\//i,Tm=new Set([".ts",".tsx",".js",".jsx"]),km=new Set(["node_modules",".expo",".git","android","ios","dist","build","__tests__","__mocks__"]);function Nl(e){let t=[];if(!$i.existsSync(e))return t;let n=$i.readdirSync(e,{withFileTypes:!0});for(let i of n){if(km.has(i.name))continue;let r=Ri.join(e,i.name);i.isDirectory()?t.push(...Nl(r)):Tm.has(Ri.extname(i.name))&&t.push(r)}return t}async function xl(e,t){let n=[],i=1,r=Ri.join(e,"src"),o=$i.existsSync(r)?r:e,s=Nl(o);for(let a of s){let d=$i.readFileSync(a,"utf-8").split(`
+`),c=Ri.relative(e,a);for(let u=0;u<d.length;u++){let f=d[u],p=f.trim();if(p.startsWith("//")||p.startsWith("*"))continue;kl.lastIndex=0;let g;for(;(g=kl.exec(f))!==null;){let h=g[1],y=Cm.test(h);n.push({id:`NET-${String(i++).padStart(3,"0")}`,title:`Insecure HTTP URL${y?" (API endpoint)":""}`,description:`Plain HTTP URL found: ${h}`,severity:y?"high":"medium",category:"network",file:c,line:u+1,recommendation:"Use HTTPS instead of HTTP for all network requests."})}}}return{category:"network",label:"HTTP URLs",findings:n,durationMs:0}}import Oi from"fs";import Di from"path";var Ll=/(?:debug|debugMode|devMode|enableDebug)\s*[:=]\s*true/gi,Ml=/console\.(?:log|warn|info|debug)\s*\([^)]*(?:token|password|secret|credential|key|auth)/gi,Nm=new Set([".ts",".tsx",".js",".jsx"]),xm=new Set(["node_modules",".expo",".git","android","ios","dist","build","__tests__","__mocks__"]);function Ul(e){let t=[];if(!Oi.existsSync(e))return t;let n=Oi.readdirSync(e,{withFileTypes:!0});for(let i of n){if(xm.has(i.name))continue;let r=Di.join(e,i.name);i.isDirectory()?t.push(...Ul(r)):Nm.has(Di.extname(i.name))&&t.push(r)}return t}async function Fl(e,t){let n=[],i=1,r=Di.join(e,"src"),o=Oi.existsSync(r)?r:e,s=Ul(o);for(let a of s){let d=Oi.readFileSync(a,"utf-8").split(`
+`),c=Di.relative(e,a);for(let u=0;u<d.length;u++){let f=d[u],p=f.trim();if(!(p.startsWith("//")||p.startsWith("*"))&&(Ll.lastIndex=0,Ll.test(f)&&n.push({id:`DBG-${String(i++).padStart(3,"0")}`,title:"Hardcoded debug flag",description:"Debug/dev mode enabled in source code",severity:"medium",category:"debug",file:c,line:u+1,recommendation:"Use __DEV__ or environment variables instead of hardcoded debug flags."}),Ml.lastIndex=0,Ml.test(f))){let g=d.slice(Math.max(0,u-3),u).join(`
+`);/__DEV__/.test(g)||n.push({id:`DBG-${String(i++).padStart(3,"0")}`,title:"Sensitive data in console log",description:"Console log may expose sensitive data (token, password, etc.) in production",severity:"medium",category:"debug",file:c,line:u+1,recommendation:"Wrap in __DEV__ check or remove sensitive data from console output."})}}}return{category:"debug",label:"Debug/Dev Flags",findings:n,durationMs:0}}import Bl from"fs";import ro from"path";var Lm=new Set(["androidx.work.impl.background.systemjob.SystemJobService","androidx.work.impl.diagnostics.DiagnosticsReceiver","com.google.firebase.iid.FirebaseInstanceIdReceiver","com.google.android.gms.auth.api.signin.RevocationBoundService","androidx.profileinstaller.ProfileInstallReceiver","com.google.firebase.messaging.FirebaseMessagingService","com.google.android.gms.measurement.AppMeasurementService","com.google.android.gms.measurement.AppMeasurementJobService"]);function Mm(e){let t=[ro.join(e,"android","app","src","main","AndroidManifest.xml"),ro.join(e,"android","AndroidManifest.xml")];for(let n of t)if(Bl.existsSync(n))return n;return null}async function jl(e,t){let n=[],i=1,r=Mm(e);if(!r)return{category:"manifest",label:"Android Manifest",findings:[],durationMs:0,error:"No AndroidManifest.xml found. Run with --prebuild or run `expo prebuild` first."};let o=Bl.readFileSync(r,"utf-8"),s=ro.relative(e,r),a=/<(activity|service|receiver|provider)\s+([^>]*?)(?:\/>|>)/gs,l;for(;(l=a.exec(o))!==null;){let d=l[1],c=l[2],f=c.match(/android:name="([^"]+)"/)?.[1]||"unknown";if(Lm.has(f))continue;let p=/android:exported="true"/.test(c),g=/android:permission="/.test(c);p&&!g&&n.push({id:`MAN-${String(i++).padStart(3,"0")}`,title:`Exported ${d}: ${f.split(".").pop()}`,description:`${f} is exported=true without android:permission protection`,severity:"medium",category:"manifest",file:s,recommendation:'Set android:exported="false" or add an android:permission attribute.'})}return/android:allowBackup="true"/.test(o)&&n.push({id:`MAN-${String(i++).padStart(3,"0")}`,title:"allowBackup is enabled",description:'android:allowBackup="true" allows data extraction via ADB backup',severity:"medium",category:"manifest",file:s,recommendation:'Set android:allowBackup="false" via expo-build-properties plugin.',autoFixable:!0}),/android:debuggable="true"/.test(o)&&n.push({id:`MAN-${String(i++).padStart(3,"0")}`,title:"App is debuggable",description:'android:debuggable="true" allows attaching a debugger in production',severity:"critical",category:"manifest",file:s,recommendation:"Ensure debuggable is false for production builds. This is usually set automatically for release builds."}),{category:"manifest",label:"Android Manifest",findings:n,durationMs:0}}import Pi from"fs";import oo from"path";function Um(e){let t=oo.join(e,"ios");if(!Pi.existsSync(t))return null;let n=Pi.readdirSync(t,{withFileTypes:!0});for(let i of n){if(!i.isDirectory()||i.name==="Pods"||i.name.startsWith("."))continue;let r=oo.join(t,i.name,"Info.plist");if(Pi.existsSync(r))return r}return null}async function Hl(e,t){let n=[],i=1,r=Um(e);if(!r)return{category:"ats",label:"iOS ATS Config",findings:[],durationMs:0,error:"No Info.plist found. Run with --prebuild or run `expo prebuild` first."};let o=Pi.readFileSync(r,"utf-8"),s=oo.relative(e,r),a=o.match(/<key>NSAppTransportSecurity<\/key>\s*<dict>([\s\S]*?)<\/dict>/);if(a){let l=a[1];/<key>NSAllowsArbitraryLoads<\/key>\s*<true\s*\/>/.test(l)&&n.push({id:`ATS-${String(i++).padStart(3,"0")}`,title:"ATS disabled \u2014 NSAllowsArbitraryLoads",description:"App Transport Security is completely disabled. All HTTP connections are allowed.",severity:"critical",category:"ats",file:s,recommendation:"Remove NSAllowsArbitraryLoads or set to false. Use domain-specific exceptions only if absolutely necessary."});let d=l.match(/<key>NSExceptionDomains<\/key>\s*<dict>([\s\S]*?)<\/dict>/);if(d){let c=d[1].match(/<key>([^<]+)<\/key>/g);if(c)for(let u of c){let f=u.replace(/<\/?key>/g,"");f!=="NSExceptionDomains"&&n.push({id:`ATS-${String(i++).padStart(3,"0")}`,title:`ATS exception: ${f}`,description:`ATS exception configured for ${f}`,severity:"low",category:"ats",file:s,recommendation:`Verify that the ATS exception for ${f} is necessary. Use HTTPS where possible.`})}}}return{category:"ats",label:"iOS ATS Config",findings:n,durationMs:0}}var Bm=[{category:"permissions",label:"Permission Audit",fn:$l,requiresPrebuild:!1},{category:"secrets",label:"Secrets Detection",fn:Ol,requiresPrebuild:!1},{category:"dependencies",label:"Dependency CVEs",fn:Dl,requiresPrebuild:!1},{category:"storage",label:"Insecure Storage",fn:Tl,requiresPrebuild:!1},{category:"network",label:"HTTP URLs",fn:xl,requiresPrebuild:!1},{category:"debug",label:"Debug/Dev Flags",fn:Fl,requiresPrebuild:!1},{category:"manifest",label:"Android Manifest",fn:jl,requiresPrebuild:!0},{category:"ats",label:"iOS ATS Config",fn:Hl,requiresPrebuild:!0}];async function Kl(e,t){let n=Bm;t.category&&(n=n.filter(s=>s.category===t.category),n.length===0&&($n.error(_e.red(`Unknown category: ${t.category}`)),$n.info(_e.dim(`Available: ${Object.values(Fe).join(", ")}`)),process.exit(1)));let i=n.filter(s=>!s.requiresPrebuild),r=n.filter(s=>s.requiresPrebuild),o=[];for(let s of i){let a=Gl();a.start(_e.dim(`Running ${s.label}...`));try{let l=Date.now(),d=await s.fn(e,t);d.durationMs=Date.now()-l,o.push(d);let c=d.findings.length;a.stop(c>0?_e.yellow(`${s.label} \u2014 ${c} finding(s)`):_e.green(`${s.label} \u2014 clean`))}catch(l){a.stop(_e.red(`${s.label} \u2014 error`)),o.push({category:s.category,label:s.label,findings:[],durationMs:0,error:l.message})}}if(r.length>0){let s=zl.join(e,"android"),a=zl.join(e,"ios"),l=Vl.existsSync(s)||Vl.existsSync(a);if(!l&&t.prebuild){t.json||$n.info(_e.dim(`
+Running expo prebuild for deeper analysis...`));try{Fm("npx expo prebuild --no-install",{cwd:e,stdio:"pipe"})}catch{return $n.warn(_e.yellow("Prebuild failed \u2014 skipping manifest/plist checks.")),o}}else if(!l)return t.json||$n.info(_e.dim(`
+Skipping manifest/plist checks \u2014 no android/ios dirs. Use --prebuild to generate them.`)),o;for(let d of r){let c=Gl();c.start(_e.dim(`Running ${d.label}...`));try{let u=Date.now(),f=await d.fn(e,t);f.durationMs=Date.now()-u,o.push(f);let p=f.findings.length;c.stop(p>0?_e.yellow(`${d.label} \u2014 ${p} finding(s)`):_e.green(`${d.label} \u2014 clean`))}catch(u){c.stop(_e.red(`${d.label} \u2014 error`)),o.push({category:d.category,label:d.label,findings:[],durationMs:0,error:u.message})}}}return o}import fe from"chalk";import{log as le}from"@clack/prompts";var Mt={critical:fe.bgRed.white.bold,high:fe.red.bold,medium:fe.yellow.bold,low:fe.blue,info:fe.dim},Ci={critical:0,high:1,medium:2,low:3,info:4};function jm(e,t){if(!t)return!0;let n=Ci[t];return n===void 0?!0:Ci[e]<=n}function Wl(e,t){let n=0,i={critical:0,high:0,medium:0,low:0,info:0};for(let s of e){let a=s.findings.filter(d=>jm(d.severity,t));if(a.length===0&&!s.error)continue;if(le.info(""),le.info(fe.bold(`  ${s.label}`)+fe.dim(`  ${a.length} finding(s)`)),le.info(fe.dim("  "+"\u2500".repeat(60))),s.error){le.error(fe.red(`  Error: ${s.error}`));continue}let l=[...a].sort((d,c)=>Ci[d.severity]-Ci[c.severity]);for(let d of l){let c=Mt[d.severity](` ${d.severity.toUpperCase()} `);le.info(`  ${c}  ${fe.bold(d.id)}  ${d.title}`),le.info(fe.dim(`          ${d.description}`)),d.file&&le.info(fe.dim(`          File: ${d.file}${d.line?`:${d.line}`:""}`)),le.info(fe.cyan(`          Fix: ${d.recommendation}`)),le.info(""),i[d.severity]++,n++}}le.info(""),le.info(fe.bold("  Summary")),le.info(fe.dim("  "+"\u2500".repeat(60))),le.info(`  Total: ${fe.bold(String(n))} finding(s)`),le.info(`  ${Mt.critical(` ${i.critical} Critical `)}  ${Mt.high(` ${i.high} High `)}  ${Mt.medium(` ${i.medium} Medium `)}  ${Mt.low(` ${i.low} Low `)}  ${Mt.info(` ${i.info} Info `)}`);let r=i.critical>0,o=i.high>0;r||o?(le.info(""),le.error(fe.red.bold(`  FAIL \u2014 ${i.critical} critical, ${i.high} high issue(s) found`))):n>0?(le.info(""),le.warn(fe.yellow("  PASS (with warnings) \u2014 no critical or high issues"))):(le.info(""),le.success(fe.green.bold("  PASS \u2014 no issues found")))}function ql(e,t){let n=e.flatMap(r=>r.findings),i={};for(let r of Object.values(Pe))i[r]=n.filter(o=>o.severity===r).length;return{version:"1.0.0",timestamp:new Date().toISOString(),project:t.name||"unknown",projectVersion:t.version||"0.0.0",summary:{total:n.length,...i},passed:i.critical===0&&i.high===0,checks:e.map(r=>({category:r.category,label:r.label,findingCount:r.findings.length,durationMs:r.durationMs,error:r.error||null})),findings:n}}import{log as de,spinner as Hm}from"@clack/prompts";import ie from"chalk";import Ze from"fs";import Gm from"os";import Ut from"path";import{execSync as Vm}from"child_process";var Jl=16384,zm=1,Km=Buffer.from([127,69,76,70]);async function Yl(e){de.info(ie.bold.underline("16KB Page Alignment Check")),console.log("");let t=Ut.resolve(e);if(!Ze.existsSync(t))return de.error(ie.red(`APK file not found: ${t}`)),!1;if(!t.endsWith(".apk"))return de.error(ie.red("The provided file is not an APK file.")),!1;let n=Hm();n.start("Extracting and analyzing native libraries...");let i=Ze.mkdtempSync(Ut.join(Gm.tmpdir(),"mach-16kb-"));try{try{Vm(`unzip -o -q "${t}" "lib/arm64-v8a/*.so" "lib/x86_64/*.so" -d "${i}" 2>/dev/null`,{encoding:"utf-8",maxBuffer:50*1024*1024})}catch{}let r=Xl(Ut.join(i,"lib"));if(r.length===0)return n.stop("Analysis complete."),de.info(ie.yellow("No arm64-v8a or x86_64 native libraries found in the APK.")),de.info(ie.dim("16KB alignment check only applies to arm64-v8a and x86_64 architectures.")),!0;let o=[];for(let l of r){let d=Ut.relative(i,l),c=qm(d),u=Ut.basename(l),f=Wm(l);f!==null&&o.push({name:u,filePath:d,arch:c,align:f,compatible:f>=Jl})}if(n.stop("Analysis complete."),o.length===0)return de.info(ie.yellow("No valid ELF shared libraries found.")),!0;let s=o.filter(l=>!l.compatible),a=o.filter(l=>l.compatible);if(de.info(ie.dim(`Checked ${o.length} native librar${o.length===1?"y":"ies"}
+`)),s.length>0){de.info(ie.red.bold(`Incompatible libraries:
+`));for(let l of s)de.error(ie.red(`${ie.bold(l.name)} ${ie.dim(`(${l.arch})`)}`)),de.info(ie.dim(`  PT_LOAD alignment: 2**${Math.log2(l.align)} (${l.align} bytes, needs 2**14 = ${Jl})`))}return a.length>0&&(console.log(""),de.success(ie.green(`${a.length} librar${a.length===1?"y":"ies"} correctly aligned (2**14 or higher).`))),console.log(""),s.length===0?(de.success(ie.green.bold("ELF Verification Successful. APK is 16KB compatible.")),!0):(de.error(ie.red.bold(`Found ${s.length} unaligned lib${s.length===1?"":"s"} (arm64-v8a/x86_64 libs need to be aligned).`)),console.log(""),de.info(ie.yellow("To fix this:")),de.info(ie.dim("  1. Rebuild with NDK r28+ which defaults to 16KB page alignment")),de.info(ie.dim("  2. Or set -DANDROID_SUPPORT_FLEXIBLE_PAGE_SIZES=ON in CMake")),de.info(ie.dim("  3. Update third-party libraries that ship prebuilt .so files")),de.info(ie.dim("  4. After rebuilding: zipalign -p -f -v 16 input.apk output.apk")),console.log(""),de.info(ie.dim("Reference: https://developer.android.com/guide/practices/page-sizes")),!1)}catch(r){return n.stop("Analysis failed."),de.error(ie.red(`Failed to analyze APK: ${r.message}`)),!1}finally{try{Ze.rmSync(i,{recursive:!0,force:!0})}catch{}}}function Wm(e){let t=Ze.openSync(e,"r");try{let n=Buffer.alloc(64);if(Ze.readSync(t,n,0,64,0),!n.subarray(0,4).equals(Km))return null;let i=n[4]===2,r=n[5]===1,o=(f,p)=>r?f.readUInt16LE(p):f.readUInt16BE(p),s=(f,p)=>r?f.readUInt32LE(p):f.readUInt32BE(p),a=(f,p)=>Number(r?f.readBigUInt64LE(p):f.readBigUInt64BE(p)),l,d,c;i?(l=a(n,32),d=o(n,54),c=o(n,56)):(l=s(n,28),d=o(n,42),c=o(n,44));let u=null;for(let f=0;f<c;f++){let p=Buffer.alloc(d);if(Ze.readSync(t,p,0,d,l+f*d),s(p,0)!==zm)continue;let h;i?h=a(p,48):h=s(p,28),h>0&&(u===null||h<u)&&(u=h)}return u??0}catch{return null}finally{Ze.closeSync(t)}}function Xl(e){let t=[];if(!Ze.existsSync(e))return t;let n=Ze.readdirSync(e,{withFileTypes:!0});for(let i of n){let r=Ut.join(e,i.name);i.isDirectory()?t.push(...Xl(r)):i.name.endsWith(".so")&&t.push(r)}return t}function qm(e){return e.includes("arm64-v8a")?"arm64-v8a":e.includes("x86_64")?"x86_64":"unknown"}var ed=async e=>{if(be()||(Ce.error(Be.red(`You are not logged in. Run \`${m.nameLower} login\` first.`)),process.exit(1)),e.apk){await Xm(e);return}let n=process.cwd(),i=Ti.join(n,"package.json");Rn.existsSync(i)||(Ce.error(Be.red("No package.json found. Run this command from a project root.")),process.exit(1));let r=JSON.parse(Rn.readFileSync(i,"utf-8")),o=!!(r.dependencies?.expo||r.devDependencies?.expo);e.json||(Ce.info(Be.dim(`Project: ${r.name||"unknown"} v${r.version||"0.0.0"}`)),Ce.info(Be.dim(`Type: ${o?"Expo":"Bare React Native"}`)),Ce.info(""));let s={json:e.json,fix:e.fix,category:e.category,severity:e.severity,prebuild:e.prebuild},a=await Kl(n,s);e.json?console.log(JSON.stringify(ql(a,r),null,2)):Wl(a,e.severity);let l=a.some(c=>c.findings.some(u=>u.severity==="critical")),d=a.some(c=>c.findings.some(u=>u.severity==="high"));(l||d)&&process.exit(1)},Zl=["16kb"];async function Xm(e){let t=e.category?.toLowerCase();t&&!Zl.includes(t)&&(Ce.error(Be.red(`Unknown APK check category: "${t}"`)),Ce.info(Be.dim(`Available APK checks: ${Zl.join(", ")}`)),process.exit(1));let n=await Zm(e.apk);n||process.exit(1);let i=!t,r=!1;(i||t==="16kb")&&(await Yl(n)||(r=!0)),r&&process.exit(1)}async function Zm(e){if(e.startsWith("build:")){let n=e.slice(6);return await Qm(n)}if(e.startsWith("http://")||e.startsWith("https://"))return await td(e);let t=Ti.resolve(e);return Rn.existsSync(t)?t:(Ce.error(Be.red(`APK file not found: ${t}`)),null)}async function Qm(e){let t=Ql();t.start(`Fetching APK from build ${e}...`);try{let n=await $.get(`/build/${e}`);if(n.data.status!=="success")throw new Error(n.data.message);let i=n.data.build;if(!i)throw new Error("Build not found");let r=i.artifacts?.find(o=>o.type?o.type==="apk":o.name?.endsWith(".apk")||o.url?.includes(".apk"));return!r||!r.url?(t.stop("No APK artifact found"),Ce.error(Be.red("This build does not have an APK artifact.")),Ce.info(Be.dim("Make sure the build produced an APK (not just an AAB).")),null):(t.stop(`Found build: ${i.buildId||e}`),await td(r.url))}catch(n){return t.stop("Failed to fetch build"),Ce.error(Be.red(n.message)),null}}async function td(e){let t=Ql();t.start("Downloading APK...");try{let n=Rn.mkdtempSync(Ti.join(Jm.tmpdir(),`${m.nameLower}-audit-`)),i=Ti.join(n,"app.apk"),r=await Ym.get(e,{responseType:"arraybuffer"});Rn.writeFileSync(i,r.data);let o=(r.data.length/(1024*1024)).toFixed(1);return t.stop(`Downloaded APK (${o} MB)`),i}catch(n){return t.stop("Download failed"),Ce.error(Be.red(`Failed to download APK: ${n.message}`)),null}}var ng=console.log;console.log=()=>{};tg();console.log=ng;X(J.bgCyan.black(m.cliTag("Production Build Orchestrator")));var On=(e,t=[])=>t.concat(e),M=new eg;M.name(m.nameLower).description(`${m.name} CLI: Powerful Cloud Infrastructure Tools`).version(et).option("-y, --yes","Automatically answer yes to all prompts",!1).option("--quiet","Suppress non-essential output",!1);M.command("agent").description("Manage local device discovery agent for the Install Hub (port 7070)").argument("[action]","start, run, install, status, restart, stop, or uninstall","start").action(async e=>{await ha(e)});M.command("host").description("Setup AWS S3 static hosting and CloudFront").action(async()=>{X(J.bgCyan.black(m.cliTag("Hosting"))),await _o()});M.command("sitemap").description("Generate sitemap.xml from Expo Router app structure").option("-o, --output <path>","Output path for sitemap.xml","./public/sitemap.xml").action(async e=>{X(J.bgCyan.black(m.cliTag("Sitemap Generator"))),await Do(e)});M.command("build").description("Run a build on a cloud provider (AWS Spot Instances)").argument("[platform]","Target platform (android, ios)").option("--platform <os>","Target platform alias (android, ios) [Optional]").option("--repo <url>","Git Repository URL").option("--branch <name>","Git Branch").option("--ami <id>","AMI ID").option("--bucket <name>","S3 Bucket for artifacts").option("--region <region>","AWS Region").option("--aws-profile <name>","AWS Credentials Profile").option("-p, --build-profile <name>","Build Profile (e.g. production, staging)").option("--profile <name>","Build Profile (alias for --build-profile)").option("--dry-run","Generate User Data script without launching").option("--keep-instance","Do not terminate the instance after build").option("--subnet <id>","VPC Subnet ID to launch the instance in").option("--security-group <id>","VPC Security Group ID to use").option("--ssh-host <host>","Remote host for iOS build (SSH)").option("--ssh-user <user>","SSH username for remote host").option("--ssh-key <path>","Path to private SSH key for remote host").option("--ios-scheme <scheme>","iOS Scheme to build").option("--ios-team-id <id>","Apple Development Team ID").option("--ios-configuration <config>","Xcode configuration (Release/Debug)").option("--ios-export-method <method>","Export method (ad-hoc, app-store, development, enterprise)").option("--ios-api-key-id <id>","App Store Connect API Key ID").option("--ios-api-key-issuer <id>","App Store Connect API Key Issuer ID").option("--ios-api-key-path <path>","Path to App Store Connect API Key (.p8) file").option("--simulator","Build for iOS Simulator (no signing required)").addOption(new Te("--build-id <id>","Internal build ID").hideHelp()).addOption(new Te("--project-id <id>","Internal project ID").hideHelp()).addOption(new Te("--fail-only","Internal: mark an existing build failed").hideHelp()).addOption(new Te("--error <message>","Internal failure message").hideHelp()).option("--local","Run build on local machine").option("--auto-version","Assign the next Android versionCode or iOS buildNumber from Mach").option("--auto-submit","Submit this build after it completes successfully").option("--submit-track <track>","Google Play track to use with --auto-submit").option("--submit-release-status <status>","Google Play release status to use with --auto-submit").option("--submit-rollout <fraction>","Google Play staged rollout fraction to use with --auto-submit").option("--submit-changes-not-sent-for-review","Commit Google Play changes without automatically sending them for review when using --auto-submit").option("--submit-credential-id <id>","Service credential ID to use with --auto-submit").option("--submit-json-output <path>","Write auto-submit metadata JSON to a file for CI/CD").option("--verbose","Enable verbose logging").option("--json-output <path>","Write build metadata JSON to a file for CI/CD").option("--maestro","Queue a managed Maestro test run after a successful build").option("--maestro-flows <path>","Maestro flow file or directory (default: .maestro)").option("--maestro-device <device>","iOS simulator model or identifier (default: iPhone 17 Pro; managed Android uses Pixel 6)").option("--maestro-retries <n>","Retries for the Maestro run","1").option("--maestro-record","Enable screen recording where supported").option("--maestro-use-build-source","Use Maestro flows from the build source snapshot instead of uploading local flows").option("--maestro-env <name>","Forward an environment variable to the managed Maestro runner; repeat or comma-separate names",On,[]).option("-y, --yes","Automatically answer yes to all prompts",!1).option("--quiet","Suppress non-essential output",!1).action(async(e,t)=>{let n=M.opts();t.yes=t.yes||n.yes,t.quiet=t.quiet||n.quiet,t.platform=e||t.platform,t.buildProfile=t.profile||t.buildProfile,t.quiet||X(J.bgCyan.black(m.cliTag("Cloud Build"))),await Jn(t)});M.command("maestro").description("Run Maestro tests locally or with the managed Mach runner").option("--platform <os>","Target platform (android/ios)").option("-p, --profile <name>","Build profile to resolve when using --latest","production").option("--latest","Use the latest successful build for the platform/profile").option("--build-id <id>","Use a specific Mach build ID").option("--build-url <url>","Use a Mach build URL").option("--artifact-url <url>","Use a direct APK or iOS simulator app artifact URL").option("--local","Run Maestro on a connected local emulator/device instead of the managed runner").option("--maestro-flows <path>","Maestro flow file or directory (default: .maestro)").option("--maestro-device <device>","iOS simulator model or identifier (default: iPhone 17 Pro; managed Android uses Pixel 6)").option("--maestro-retries <n>","Retries for the Maestro run","1").option("--maestro-record","Enable screen recording where supported").option("--maestro-use-build-source","Use Maestro flows from the build source snapshot instead of uploading local flows").option("--maestro-env <name>","Forward an environment variable to the managed Maestro runner; repeat or comma-separate names",On,[]).option("--wait","Wait for managed Maestro completion and exit non-zero on failure").option("--wait-timeout <minutes>","Maximum minutes to wait for managed Maestro completion","60").option("--wait-interval <seconds>","Polling interval while waiting for managed Maestro completion","15").option("--json-output <path>","Write test run metadata JSON to a file for CI/CD").addOption(new Te("--local-runner","Internal: execute a managed Maestro run on this machine").hideHelp()).addOption(new Te("--test-run-id <id>","Internal test run ID").hideHelp()).addOption(new Te("--project-id <id>","Internal project ID").hideHelp()).addOption(new Te("--runner-token <token>","Internal runner token").hideHelp()).action(async e=>{X(J.bgCyan.black(m.cliTag("Maestro Testing"))),await Qo(e)});var Ft=e=>e.option("--platform <os>","Target platform: ios, android, or all","all").option("--channel <name>","OTA channel (for example: production, staging)").option("--branch <name>","Alias for --channel").option("--runtime-version <version>","Runtime version override").option("--message <text>","Release note/message for this OTA update").option("--framework <name>","Framework override: expo or react-native").option("--engine <name>","OTA engine override (currently expo-updates)").option("--url <url>","Mach OTA update URL override").option("--install-plugin","Install @radhya/mach locally for the Expo config plugin").option("--skip-install","Do not install local Expo plugin dependency").option("--update-id <id>","OTA update id for rollback/promote").option("--json","Print JSON output"),Bt=M.command("ota").description("Setup, publish, verify, and manage Mach OTA updates");Ft(Bt.command("setup").description("Configure OTA for this project")).action(async e=>{let t=M.opts();X(J.bgCyan.black(m.cliTag("OTA Setup"))),await at("setup",{...e,yes:e.yes||t.yes})});Ft(Bt.command("publish").description("Publish an OTA update")).action(async e=>{let t=M.opts();X(J.bgCyan.black(m.cliTag("OTA Publish"))),await at("publish",{...e,yes:e.yes||t.yes})});Ft(Bt.command("verify").description("Verify OTA configuration")).action(async e=>{let t=M.opts();X(J.bgCyan.black(m.cliTag("OTA Verify"))),await at("verify",{...e,yes:e.yes||t.yes})});Ft(Bt.command("list").description("List OTA updates for the linked project")).action(async e=>{let t=M.opts();X(J.bgCyan.black(m.cliTag("OTA Updates"))),await at("list",{...e,yes:e.yes||t.yes})});Ft(Bt.command("rollback").description("Roll back an OTA update")).action(async e=>{let t=M.opts();X(J.bgCyan.black(m.cliTag("OTA Rollback"))),await at("rollback",{...e,yes:e.yes||t.yes})});Ft(Bt.command("promote").description("Promote an OTA update")).action(async e=>{let t=M.opts();X(J.bgCyan.black(m.cliTag("OTA Promote"))),await at("promote",{...e,yes:e.yes||t.yes})});M.command("submit").description("Automated Store Submission (App Store / Google Play)").option("--platform <os>","Target platform (ios/android)").option("-p, --profile <name>","Build/submission profile to submit from (e.g. production, preprod)").option("--track <track>","Google Play Track (internal, alpha, beta, production)").option("--release-status <status>","Google Play release status (completed, draft, halted, inProgress)").option("--rollout <fraction>","Google Play staged rollout fraction for inProgress releases (example: 0.1)").option("--changes-not-sent-for-review","Commit Google Play changes without automatically sending them for review").option("--ssh-host <host>","Remote macOS host for iOS submission").option("--ssh-user <user>","SSH username for remote iOS submission").option("--ssh-key <path>","Path to private SSH key for remote iOS submission").option("--credential-id <id>","Service credential ID to use when multiple submission credentials exist").option("--local","Run submission on this machine (internal runner mode for iOS)").addOption(new Te("--submit-id <id>","Internal submission ID").hideHelp()).addOption(new Te("--project-id <id>","Internal project ID").hideHelp()).addOption(new Te("--package-name <name>","Internal Android package name").hideHelp()).addOption(new Te("--bundle-id <id>","Internal iOS bundle identifier").hideHelp()).option("--json-output <path>","Write submission metadata JSON to a file for CI/CD").option("--latest","Use the latest successful build for submission").option("--build-id <id>","Use a specific build ID for submission").action(async e=>{let t=M.opts();e.quiet=e.quiet||t.quiet,e.yes=e.yes||t.yes,X(J.bgCyan.black(m.cliTag("Store Submission"))),await Vn(e)});M.command("login").description(`Login to ${m.name} Dashboard`).action(async()=>{X(J.bgCyan.black(m.cliTag("Login"))),await Sa()});M.command("logout").description(`Logout from ${m.name} on this machine`).action(async()=>{X(J.bgCyan.black(m.cliTag("Logout"))),await Ea()});M.command("link").description(`Link local directory to a ${m.name} Project`).action(async()=>{X(J.bgCyan.black(m.cliTag("Link Project"))),await wa()});M.command("me").description("Display currently logged in user details").action(async()=>{await Wa()});M.command("init").description(`Create a new ${m.name} Project`).action(async()=>{X(J.bgCyan.black(m.cliTag("Init Project"))),await va()});M.command("env").description("Manage Environment Variables").argument("<action>","Action to perform: set, list, pull, download, or export").argument("[args...]","Key=Value pairs for set action").option("-e, --environment <name>","Environment to pull/download","development").option("-o, --out <file>","Output file for pull/download",".env.local").option("--overwrite","Overwrite output file if it already exists").action(async(e,t,n)=>{X(J.bgCyan.black(m.cliTag("Env Manager"))),await $a(e,t,n)});M.command("start").description("Start the development server (Metro)").option("-p, --build-profile <name>","Build profile (e.g. development, staging)","development").option("--tunnel","Use ngrok tunnel").option("--lan","Use LAN IP").option("--localhost","Use localhost").option("-c, --clear","Clear Metro cache").option("--port <number>","Port to listen on").option("--ios","Start on iOS").option("--android","Start on Android").option("--web","Start on Web").action(async e=>{X(J.bgCyan.black(m.cliTag("Dev Server"))),await Ja(e)});var Dn=M.command("push").description("Configure and send provider-direct APNs/FCM notifications");Dn.command("setup").description("Install and wire a working default push experience").option("--name <name>","Push app display name").option("--ios-bundle <id>","iOS bundle identifier").option("--android-package <name>","Android package name").option("-e, --environment <name>","development, preview, or production").option("--google-services-file <path>","Android google-services.json path").option("--skip-install","Generate setup without installing SDK dependencies").action(Eo);Dn.command("init").description("Create only the server-side push app (advanced)").option("--name <name>","Push app display name").option("--ios-bundle <id>","iOS bundle identifier").option("--android-package <name>","Android package name").option("-e, --environment <name>","development, preview, or production","production").option("--google-services-file <path>","Expo Android google-services.json path").action(So);var id=Dn.command("credentials").description("Configure provider credentials");id.command("apns").description("Configure an Apple APNs .p8 authentication key").requiredOption("--file <path>","APNs .p8 file").requiredOption("--team-id <id>","Apple Developer team ID").requiredOption("--key-id <id>","APNs key ID").option("--bundle-id <id>","iOS bundle identifier").option("--app <id>","MACH Push app ID").option("-e, --environment <name>","development, preview, or production").action(e=>Bi("apns",e));id.command("fcm").description("Configure a Firebase service-account JSON file").requiredOption("--file <path>","Firebase service-account JSON").option("--app <id>","MACH Push app ID").option("-e, --environment <name>","Deprecated; accepted for compatibility because FCM credentials are package-wide").action(e=>Bi("fcm",e));Dn.command("send").description("Queue one transient push notification").requiredOption("--title <text>","Notification title").requiredOption("--body <text>","Notification body").option("--app <id>","MACH Push app ID").option("-e, --environment <name>","development, preview, or production").option("--token <token>","MACH push token; repeatable",On,[]).option("--user <id>","Application user ID; repeatable",On,[]).option("--all","Send to all active devices").option("--platform <platform>","Limit --all to ios or android").option("--data <json>","String-to-string custom data JSON").option("--sound <name>","Provider sound name").option("--badge <number>","iOS badge count").option("--ttl <seconds>","Provider time-to-live").option("--collapse-key <key>","Provider collapse key").option("--android-channel-id <id>","Android notification channel").action(Io);Dn.command("status").description("Show aggregate push delivery counters").option("--days <number>","Statistics range, 1-90","30").action(wo);M.command("config").description("Show resolved configuration for a profile").option("-p, --profile <name>","Build profile to resolve","development").option("--json","Output as JSON").action(async e=>{await Ya(e)});var rd=M.command("version").description("Show or seed DB-owned native version counters"),od=e=>e.requiredOption("--platform <os>","Target platform: ios or android").option("-p, --profile <name>","Build profile used to resolve package/bundle scope","production").option("--scope <value>","Counter scope override, usually package name or bundle identifier").option("--package <name>","Android package override").option("--bundle-id <id>","iOS bundle identifier override").option("--json","Print JSON output");od(rd.command("show").description("Show the current native version counter")).action(async e=>{X(J.bgCyan.black(m.cliTag("Version Counter"))),await no("show",e)});od(rd.command("seed").description("Seed the native version counter for an existing app").argument("[value]","Latest already-used value; the next build uses value + 1").option("--value <number>","Latest already-used value; the next build uses value + 1").option("--force","Allow lowering an existing counter")).action(async(e,t)=>{X(J.bgCyan.black(m.cliTag("Version Counter"))),await no("seed",{...t,value:t.value??e})});var sd=M.command("deeplink").description("Configure and verify app links, universal links, and URI schemes");sd.command("setup").description("Generate deep link config, hosted association files, and Expo plugin support").option("--domain <domain>","Associated domain, e.g. app.example.com").option("--base-url <url>","Base URL, e.g. https://app.example.com").option("-p, --profile <name>","Profile used for build/submit overrides").option("--platform <platform>","ios, android, or all").option("--framework <framework>","expo or react-native").option("--scheme <scheme>","URI scheme, e.g. myapp").option("--ios-bundle-id <id>","iOS bundle identifier").option("--android-package <name>","Android package name").option("--apple-team-id <id>","Apple Developer Team ID").option("--app-store-id <id>","App Store app ID for Smart App Banner").option("--android-fingerprint <sha256>","Android SHA256 signing certificate fingerprint; repeatable",On,[]).option("--output <dir>","Directory for hosted files, e.g. public or deep-links").option("--install-plugin","Install @radhya/mach locally so Expo can use the packaged config plugin").option("--no-install-plugin","Do not install @radhya/mach for Expo projects; use the local plugin fallback if the package is missing").option("-y, --yes","Automatically answer yes to prompts",!1).action(async e=>{let t=M.opts();e.yes=e.yes||t.yes,X(J.bgCyan.black(m.cliTag("Deep Links"))),await bl(e)});sd.command("verify").description("Verify local and optionally live deep link configuration").option("-p, --profile <name>","Profile used for build/submit overrides").option("--live","Check hosted files over HTTPS").option("--android-device","Print Android device verification commands").action(async e=>{X(J.bgCyan.black(m.cliTag("Deep Link Verify"))),await Al(e)});M.command("credentials").description("Unified, interactive credential management (iOS/Android)").option("-p, --profile <name>","Build profile (production, staging, development)").option("--force","Force recreate certificates (nuke existing on Apple Portal)",!1).action(async e=>{let{credentialsMainCommand:t}=await import("./credentials-MUSYHFWP.js");await t(e)});M.command("credentials:setup").description("Automated credential provisioning (iOS/Android) [Legacy]").requiredOption("--platform <os>","Platform: ios or android").option("--profile <name>","Build profile (production, staging, development)").option("--bundle-id <id>","Bundle ID / Package Name (optional, auto-detected)").option("--team-id <id>","Apple Team ID (iOS only)").option("--key-alias <alias>","Android keystore alias (optional, auto-generated)").option("--aws-profile <name>","AWS Credentials Profile (for S3 storage)").option("--force","Force recreate certificates (nuke existing on Apple Portal)",!1).action(async e=>{X(J.bgCyan.black(m.cliTag("Credentials Setup"))),await jt(e),nd(J.green("Done!"))});M.command("credentials:service").description("Upload Service Credentials (ASC API Key / Google Service JSON) [Legacy]").requiredOption("--platform <os>","Platform: ios or android").option("--file <path>","Path to credential file (.p8 or .json)").option("--issuer-id <id>","ASC API Key Issuer ID (iOS only)").option("--key-id <id>","ASC API Key ID (iOS only)").option("--bundle-id <id>","Bundle identifier / Android package name to attach this service credential to").option("--package-name <name>","Android package name to attach this service credential to").option("-p, --profile <name>","Build profile to resolve package/bundle identifier from config").action(async e=>{X(J.bgCyan.black(m.cliTag("Service Credentials"))),await Ao(e),nd(J.green("Done!"))});var so=M.command("device").description("Manage registered iOS test devices");so.command("register").description("Register a connected iOS device or enter UDID manually").option("--udid <udid>","Device UDID (skip auto-detection)").option("--name <name>","Device name").option("--team-id <id>","Apple Developer Team ID for this device").action(async e=>{await Ii("register",e)});so.command("list").description("List all registered devices").option("--team-id <id>","Filter by Apple Developer Team ID").action(async e=>{await Ii("list",e)});so.command("remove").description("Remove a registered device").option("--udid <udid>","Device UDID to remove").option("--team-id <id>","Apple Developer Team ID for this device").action(async e=>{await Ii("remove",e)});M.command("audit").description("Run automated security audit on the project or APK").option("--apk <path>","Path to APK file (runs APK diagnostics like 16KB alignment)").option("--json","Output results as JSON (for CI/CD)").option("--fix","Auto-apply fixes where possible").option("--category <name>","Run only a specific check category (e.g. 16kb, permissions, secrets)").option("--severity <level>","Minimum severity to display (critical, high, medium, low, info)").option("--prebuild","Run expo prebuild for deeper manifest/plist analysis").action(async e=>{X(J.bgCyan.black(m.cliTag(e.apk?"APK Audit":"Security Audit"))),await ed(e)});var ig=new Set(["login","logout","agent"]);M.hook("preAction",(e,t)=>{let n=t.name(),i=t.opts?.()||{};n==="maestro"&&(i.local||i.localRunner)||t.parent?.name()!=="deeplink"&&(ig.has(n)||Et())});M.on("command:*",()=>{console.error(`Invalid command: %s
+See --help for a list of available commands.`,M.args.join(" ")),process.exit(1)});process.argv.slice(2).length||M.help();M.parse(process.argv);