@radhya/mach 2.2.0 → 2.2.2

package/dist/chunk-6OEZPCKM.js

@@ -1,441 +0,0 @@
-import{a as A,h as Z}from"./chunk-S64YFTRR.js";import{log as f,spinner as Ke,text as be,password as St,select as ke,confirm as mn,isCancel as G,cancel as z,intro as Ko,outro as Yo,note as Jo}from"@clack/prompts";import{log as ne,spinner as mt,text as Te,select as rt,isCancel as ue,cancel as xe,note as Pt,confirm as Pn}from"@clack/prompts";import ie from"chalk";import{spawnSync as ft}from"child_process";import ae from"fs";import Ce from"path";import Ht from"os";import vt from"fs";import{log as Ui}from"@clack/prompts";var ji=["react-native","expo","flutter"],ea="react-native",Sn=e=>{if(typeof e!="string")return;let t=e.trim();return t.length>0?t:void 0},bn=e=>Sn(e)?.toUpperCase()||void 0,Et=(...e)=>{for(let t of e){let n=Sn(t);if(n)return n}};function Li(e){if(typeof e!="string")return;let t=e.trim().toLowerCase();if(t==="react-native"||t==="react_native"||t==="reactnative")return"react-native";if(t==="expo")return"expo";if(t==="flutter")return"flutter"}function Wt(e){let t=Li(e?.framework);if(t)return t;let n=ji.map(i=>`"${i}"`).join(", ");throw e?.framework?new Error(`${A.configFileName} has invalid framework "${e.framework}". Use one of: ${n}.`):new Error(`${A.configFileName} is missing required field "framework". Add one of: ${n}.`)}function pt(e,t="production"){let n=e?.ios||{},i=e?.submit?.[t]?.ios||{},r=e?.submit?.production?.ios||{},o=bn(n.appleTeamId||n.developerTeamId||i.appleTeamId||i.developerTeamId||r.appleTeamId||r.developerTeamId),s=Et(n.appStoreConnectTeamId,n.itcTeamId,n.appleConnectTeamId,i.appStoreConnectTeamId,i.itcTeamId,i.appleConnectTeamId,r.appStoreConnectTeamId,r.itcTeamId,r.appleConnectTeamId);return{teamId:o,teamName:Et(n.appleTeamName,n.teamName,n.developerTeamName,i.appleTeamName,i.teamName,i.developerTeamName,r.appleTeamName,r.teamName,r.developerTeamName),developerTeamId:bn(n.developerTeamId||i.developerTeamId||r.developerTeamId||o),appStoreConnectTeamId:s,providerId:Et(n.providerId,i.providerId,r.providerId,s),providerName:Et(n.providerName,n.appStoreConnectTeamName,i.providerName,i.appStoreConnectTeamName,r.providerName,r.appStoreConnectTeamName)}}function wn(e){if(e){if(!vt.existsSync(e))return null;try{return JSON.parse(vt.readFileSync(e,"utf-8"))}catch{return null}}if(!vt.existsSync(`./${A.configFileName}`))return null;try{return JSON.parse(vt.readFileSync(`./${A.configFileName}`,"utf-8"))}catch{return null}}function et(e,t,n=new Set){if(n.has(t))throw new Error(`Circular inheritance detected in profile: ${t}`);n.add(t);let i=e.build?.[t];if(!i)return null;let r={...i};if(i.extends){let o=et(e,i.extends,n);o&&(r={...o,...i,env:{...o.env,...i.env},ios:{...o.ios,...i.ios},android:{...o.android,...i.android}})}if(r.envGroups&&Array.isArray(r.envGroups)){let o={};for(let s of r.envGroups){let a=e.envGroups?.[s];a?Object.assign(o,a):Ui.warn(`Environment group not found: ${s}`)}r.env={...o,...r.env}}return r}function tt(e,t){let n=t?et(e,t)||{}:{};if(n.android?.package)return n.android.package;if(n.androidPackage)return n.androidPackage;if(e.android?.package)return e.android.package;if(e.expo?.android?.package)return e.expo.android.package}function Ge(e,t){let n=t?et(e,t)||{}:{};if(n.ios?.bundleIdentifier)return n.ios.bundleIdentifier;if(n.iosBundleIdentifier)return n.iosBundleIdentifier;if(e.ios?.bundleIdentifier)return e.ios.bundleIdentifier;if(e.ios?.bundleId)return e.ios.bundleId;if(e.expo?.ios?.bundleIdentifier)return e.expo.ios.bundleIdentifier}var ta=(e,t=`${A.envPrefix}`)=>{let n={},i=(r,o)=>{if(r)for(let s in r){let a=r[s],c=`${o}${s.toUpperCase().replace(/[^A-Z0-9]/g,"_")}`;a!==null&&typeof a=="object"&&!Array.isArray(a)?i(a,`${c}_`):n[c]=String(a)}};return i(e,t),n};import{cancel as Mt,confirm as Xi,isCancel as Gt,log as Ye,select as Hi,text as Ki}from"@clack/prompts";import Je from"chalk";import Yi from"fs";import{createRequire as Ji}from"module";import zi from"os";import vn from"path";var Qi=Ji(import.meta.url),Zt=null;function qi(){return Zt||(Zt=Qi("@expo/apple-utils")),Zt}function nt(){let e=process.env.HOME||zi.homedir(),t=process.env.FASTLANE_GEM_HOME||vn.join(e,".local/share/fastlane/3.4.0");return{...process.env,PATH:[process.env.FASTLANE_BIN_DIR,"/usr/local/opt/ruby/bin","/opt/homebrew/opt/ruby/bin","/usr/local/bin","/opt/homebrew/bin","/usr/local/Cellar/fastlane/2.227.0/libexec/bin","/opt/homebrew/Cellar/fastlane/2.227.0/libexec/bin",vn.join(t,"bin"),process.env.PATH].filter(Boolean).join(":"),GEM_HOME:t,GEM_PATH:[t,"/usr/local/Cellar/fastlane/2.227.0/libexec","/opt/homebrew/Cellar/fastlane/2.227.0/libexec",process.env.GEM_PATH].filter(Boolean).join(":"),FASTLANE_INSTALLED_VIA_HOMEBREW:"true",FASTLANE_SKIP_UPDATE_CHECK:"1",FASTLANE_HIDE_CHANGELOG:"1",LANG:process.env.LANG||"en_US.UTF-8",LC_ALL:process.env.LC_ALL||"en_US.UTF-8",CI:"1"}}function er(e,t="production"){return e.submit||(e.submit={}),e.submit[t]||(e.submit[t]={}),e.submit[t].ios||(e.submit[t].ios={}),e.submit[t].ios}function tr(e,t,n="production"){if(!e||!t.id)return;let i=er(e,n);i.appleTeamId=t.id;try{Yi.writeFileSync(`./${A.configFileName}`,JSON.stringify(e,null,2))}catch{}}function nr(e){let t=String(e?.teamId||e?.id||"").trim().toUpperCase();return t?{id:t,name:String(e?.name||"").trim()||void 0,type:String(e?.type||"").trim()||void 0}:null}async function ir(e){try{let{Auth:t,Teams:n}=qi(),i=await t.loginAsync({username:e},{autoResolveProvider:!0}),r=String(i?.context?.teamId||"").trim().toUpperCase(),o=await n.getTeamsAsync(),s=new Map;for(let l of o||[]){let p=nr(l);p&&s.set(p.id,p)}let a=Array.from(s.values()),c=r?a.find(l=>l.id===r)||{id:r}:void 0;return{teams:a,selectedTeam:c}}catch(t){let n=t instanceof Error?t.message:String(t||"");return Ye.warn(Je.yellow(`Apple Developer team lookup failed${n?`: ${n}`:""}`)),{teams:[]}}}async function En(){Ye.warn(Je.yellow(`
-Apple Team ID is required to fetch certificates.`)),Ye.info(Je.dim("You can find this at: https://developer.apple.com/account -> Membership Details"));let e=await Ki({message:"Enter your 10-character Apple Team ID:",placeholder:"e.g. SA56KTS33U",validate:t=>/^[A-Z0-9]{10}$/i.test(t.trim())?void 0:"Team ID must be exactly 10 letters/numbers"});return Gt(e)?(Mt("Operation cancelled"),null):{id:e.trim().toUpperCase()}}function rr(e){let t=[e.id,e.type].filter(Boolean);return t.length>0?t.join(" \xB7 "):void 0}async function or(e,t){if(!e.config)return!1;if(e.persistConfig)return!0;if(!e.promptToPersistConfig)return!1;let n=e.profile||"production",i=await Xi({message:`Save Apple Team ID ${t} to ${A.configFileName} for "${n}" profile?`,initialValue:n==="production"});return Gt(i)?(Mt("Operation cancelled"),null):i}async function ut(e){let t=e.initialTeam?.teamId?.trim().toUpperCase();if(t){let l=e.initialTeam?.developerTeamId?.trim().toUpperCase();return{...e.initialTeam,teamId:t,developerTeamId:l||t}}Ye.info(Je.blue("Fetching Apple Developer teams..."));let{teams:n,selectedTeam:i}=await ir(e.appleId),r;if(i)r=i,Ye.success(Je.green(`\u2713 Using Apple Developer team ${r.name||r.id} (${r.id})`));else if(n.length===1)r=n[0],Ye.success(Je.green(`\u2713 Using Apple Developer team ${r.name||r.id} (${r.id})`));else if(n.length>1){let l=await Hi({message:"Select Apple Developer team:",options:[...n.map(p=>({value:p.id,label:p.name||p.id,hint:rr(p)})),{value:"__manual__",label:"Enter Team ID manually",hint:"Use if your team is not listed"}]});if(Gt(l))return Mt("Operation cancelled"),null;r=l==="__manual__"?await En():n.find(p=>p.id===l)||{id:l}}else Ye.warn(Je.yellow("Could not list Apple Developer teams automatically.")),r=await En();if(!r)return null;let o=r.id.trim().toUpperCase(),s=r.name?.trim(),a={...e.initialTeam,teamId:o,teamName:s||e.initialTeam?.teamName,developerTeamId:o},c=await or(e,o);return c===null?null:(c&&tr(e.config,{...r,id:o,name:s},e.profile),e.saveTeamId&&await e.saveTeamId(o,s),a)}var sr="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";function Ut(){let e=Ce.join(Ht.tmpdir(),A.nameLower);ae.existsSync(e)||ae.mkdirSync(e,{recursive:!0});let t=Ce.join(e,"manage_asc_keys.rb");return ae.writeFileSync(t,Buffer.from(sr,"base64").toString("utf-8"),{mode:493}),t}function jt(){return nt()}function Kt(e){let t=new Map,n=/-\s+(\d+)\s+\(([^)]+)\)/g,i=/\d+\)\s+"([^"]+)"\s+\((\d+)\)/g,r;for(;(r=n.exec(e))!==null;)t.set(r[1],{id:r[1],name:r[2]});for(;(r=i.exec(e))!==null;)t.set(r[2],{id:r[2],name:r[1]});return Array.from(t.values())}function Nn(e){return pt(e).appStoreConnectTeamId}function Rn(e,t,n){return{...jt(),FASTLANE_USER:e,FASTLANE_TEAM_ID:t,...n?{FASTLANE_ITC_TEAM_ID:n,FASTLANE_ASC_TEAM_ID:n}:{}}}function it(e,t="production",n={}){let i=pt(e,t),r=n.teamId||i.teamId,o=n.appStoreConnectTeamId||i.appStoreConnectTeamId;return{teamId:r,teamName:n.teamName||i.teamName,developerTeamId:n.developerTeamId||i.developerTeamId||r,appStoreConnectTeamId:o,providerId:n.providerId||i.providerId||o,providerName:n.providerName||i.providerName}}function kn(e,t){if(t.id){e.submit||(e.submit={}),e.submit.production||(e.submit.production={}),e.submit.production.ios||(e.submit.production.ios={}),e.submit.production.ios.appStoreConnectTeamId=t.id,e.submit.production.ios.providerId=t.id,t.name&&(e.submit.production.ios.appStoreConnectTeamName=t.name,e.submit.production.ios.providerName=t.name),t.developerTeamName&&(e.submit.production.ios.appleTeamName=t.developerTeamName);try{ae.writeFileSync(`./${A.configFileName}`,JSON.stringify(e,null,2))}catch{}}}async function ar(e,t,n,i){let r=mt();r.start("Fetching App Store Connect providers...");let o=ft("ruby",[e,"teams"],{env:Rn(n,i),stdio:["inherit","pipe","pipe"],encoding:"utf-8"});if(o.status!==0){r.stop("Could not fetch providers");let d=Kt(`${o.stdout||""}
-${o.stderr||""}`);if(d.length>0)return Lt(t,d,"Select the App Store Connect provider for this API key:");ne.warn(ie.yellow(`Could not list App Store Connect providers: ${o.stderr||"Unknown error"}`));return}let s=(o.stdout||"").match(new RegExp(`${A.jsonStartMarker}(.*)${A.jsonEndMarker}`));if(!s){r.stop("Could not parse providers");return}let a=JSON.parse(s[1]),c=(a.teams||[]).filter(d=>d.id&&d.name);if(r.stop(c.length===1?"Found 1 provider":`Found ${c.length} providers`),c.length===0)return;if(c.length===1){ne.success(ie.green(`\u2713 Using App Store Connect provider ${c[0].name} (${c[0].id})`));let d={...c[0],developerTeamName:a.developerTeamName};return kn(t,d),d}let l=c.filter(d=>d.recommended),p=c.filter(d=>!d.recommended);return Lt(t,[...l,...p],`Select the App Store Connect provider for Developer Team ${a.developerTeamName||i}:`,a.developerTeamName)}async function Lt(e,t,n,i){let r=await rt({message:n,options:t.map(c=>({value:c.id,label:c.name,hint:`${c.id}${c.recommended?" \xB7 recommended":""}`}))});if(ue(r))return xe("Operation cancelled"),null;let o=r,a={...t.find(c=>c.id===o)||{id:o,name:o},developerTeamName:i};return kn(e,a),ne.success(ie.green(`\u2713 Using App Store Connect provider ${a.name} (${a.id})`)),a}var xn=async e=>{let t=mt(),n=e.platform,i=`./${A.configFileName}`;if(!ae.existsSync(i)){ne.error(`No ${A.configFileName} found. Run \`${A.nameLower} init\` or \`${A.nameLower} link\` first.`);return}let r=JSON.parse(ae.readFileSync(i,"utf-8")),{projectId:o}=r,s=e.profile||"production";if(!o){ne.error(`${A.configFileName} is missing projectId.`);return}let a=e.file,c=n==="android"?e.packageName||e.bundleId:e.bundleId||Ge(r,s)||"*";if(n==="android"&&!c&&(c=await cr(o,r,s),c===null))return;if(n==="ios"&&!a){let u=await rt({message:"Manage App Store Connect API Key:",options:[{value:"magic",label:"\u2728 Create new automatically",hint:"Requires Apple ID + 2FA"},{value:"manual",label:"\u{1F50D} Configure manually",hint:"Provide existing .p8 file"},{value:"delete",label:"\u{1F5D1}\uFE0F  Delete an existing Key"}]});if(ue(u)){xe("Operation cancelled");return}if(u==="magic"){await pr(o,r);return}if(u==="delete"){await ur(o,r);return}}if(!a){let u=n==="ios"?"https://appstoreconnect.apple.com/access/api":"https://console.cloud.google.com/apis/credentials";Pt(`To submit to the ${n==="ios"?"App Store":"Google Play Store"}, you need a Service Key:
-
-1. Open: ${ie.cyan(u)}
-`+(n==="ios"?`2. Generate an "App Store Connect API Key" with ${ie.bold("Admin")} role.
-3. Download the ${ie.bold(".p8")} file.`:`2. Create a "Service Account", generate a ${ie.bold("JSON")} key.
-3. Download the ${ie.bold(".json")} file.`),"Guided Setup"),t.start("Scanning for downloaded keys...");let y=fr(n);if(t.stop(y.length>0?`Detected ${y.length} potential key(s)`:"No keys detected automatically"),y.length>0){let g=await rt({message:"Found these potential keys. Use one of them?",options:[...y.map(b=>({value:b.path,label:`${Ce.basename(b.path)} (${b.location})`})),{value:"manual",label:"Enter path manually..."}]});if(ue(g)){xe("Operation cancelled");return}g!=="manual"&&(a=g)}if(!a){let g=await Te({message:`Paste the path to your ${n==="ios"?".p8":".json"} file:`,validate:b=>ae.existsSync(b)?void 0:"File not found"});if(ue(g)){xe("Operation cancelled");return}a=g}}let l=e.issuerId,p=e.keyId;if(n==="ios"){if(!p&&a){let u=Ce.basename(a).match(/AuthKey_(.*)\.p8/);u&&(p=u[1],ne.info(`Auto-detected Key ID from filename: ${ie.green(p)}`))}if(!l){let u=await Te({message:"Enter App Store Connect Issuer ID (Found on the Keys page):",validate:y=>y.length>0?void 0:"Issuer ID is required"});if(ue(u)){xe("Operation cancelled");return}l=u}if(!p){let u=await Te({message:"Enter App Store Connect Key ID:",validate:y=>y.length>0?void 0:"Key ID is required"});if(ue(u)){xe("Operation cancelled");return}p=u}}if(n==="android"&&(!c||c==="*")){let u=await $n();if(u===null)return;c=u}let d=n==="ios"?it(r,s):{};await Xt(o,a,n,l,p,c,{...d})};async function cr(e,t,n){let i=await lr(e),r=dr(t,n);if(r&&!i.includes(r)&&i.unshift(r),i.length>0){let o=await rt({message:"Select Android package for this Google Play service key:",options:[...i.map(s=>({value:s,label:s,hint:s===r?"from config":void 0})),{value:"manual",label:"Enter another package name..."}]});if(ue(o))return xe("Operation cancelled"),null;if(o==="manual")return $n();if(o!=="manual")return o}if(r){let o=await Pn({message:`Use Android package from local config (${r})?`,initialValue:!0});if(ue(o))return xe("Operation cancelled"),null;if(o)return r}}async function $n(){let e=await Te({message:"Android package name for this Google Play service key:",placeholder:"com.example.app",validate:t=>t.includes(".")?void 0:"Enter a valid package name"});return ue(e)?(xe("Operation cancelled"),null):e}async function lr(e){try{let n=(await Z.get(`/credentials/${e}`)).data.credentials||[],i=new Set;for(let r of n)(r.platform==="android"||r.type==="android_keystore"||r.type==="google_service_account")&&r.bundleId&&r.bundleId!=="*"&&i.add(r.bundleId);return Array.from(i).sort()}catch(t){return ne.warn(ie.yellow(`Could not fetch saved Android package identifiers: ${t.message}`)),[]}}function dr(e,t){let n=tt(e,t);if(n)return n;let i=Ce.join(process.cwd(),"app.json");if(ae.existsSync(i))try{return JSON.parse(ae.readFileSync(i,"utf-8")).expo?.android?.package}catch{}let r=Ce.join(process.cwd(),"app.config.json");if(ae.existsSync(r))try{let o=JSON.parse(ae.readFileSync(r,"utf-8"));return o.expo?.android?.package||o.android?.package}catch{}}async function pr(e,t){let n=mt(),i=t.submit?.production?.ios?.appleId,r=it(t).teamId,o=Nn(t);if(!i){let c=await Te({message:"Apple ID:",placeholder:"your-email@example.com"});if(ue(c))return;i=c}if(!r){let c=await ut({appleId:i,config:t,profile:"production",initialTeam:it(t),promptToPersistConfig:!0});if(!c?.teamId)return;r=c.teamId}let s=await Te({message:"Enter a name for the new API Key:",initialValue:`[${A.name}] Project ${e}`});if(ue(s))return;let a=Ut();if(!ae.existsSync(a)){ne.error(`Magic Error: Helper script not found at ${a}`);return}try{let c=await ar(a,t,i,r);if(c===null)return;let l;if(c)l=c,o=c.id;else if(!o)return;n.start("Creating App Store Connect API Key...");let p=P=>ft("ruby",[a,"create",s],{env:Rn(i,r,P),stdio:["inherit","pipe","pipe"],encoding:"utf-8"}),d=p(o),u=d.stdout||"",y=d.stderr||"";if(d.status!==0){let P=Kt(`${u}
-${y}`);if(P.length>0){n.stop("Select App Store Connect team"),Pt(`Apple Developer Team IDs look like ${ie.bold(r)}.
-App Store Connect API keys use a numeric provider/team ID instead.`,"Team ID mismatch");let O=await Lt(t,P,"Select the App Store Connect provider for this API key:");if(!O)return;l=O,o=O.id,n.start("Creating API Key with selected App Store Connect team..."),d=p(o),u=d.stdout||"",y=d.stderr||""}}if(y&&(y.includes("DEBUG:")||y.includes("ERROR:"))&&y.split(`
-`).forEach(P=>{P.trim()&&ne.info(ie.dim(`[Ruby] ${P.trim()}`))}),d.status!==0){n.stop("Failed"),ne.error(`Magic creation failed: ${y}`);return}let g=u.match(new RegExp(`${A.jsonStartMarker}(.*)${A.jsonEndMarker}`));if(!g){n.stop("Parse Error"),ne.error("Could not parse response from Apple Portal.");return}let b=JSON.parse(g[1]),{id:w,issuerId:N,keyContent:C}=b,E=it(t,"production",{teamId:r,teamName:l?.developerTeamName,developerTeamId:r,appStoreConnectTeamId:o,providerId:o,providerName:l?.name});if(n.stop("Key Created Successfully"),ne.success(`\u2713 Created Key ID: ${ie.green(w)}`),!N){Pt(`Your Issuer ID is shown at the top of:
-  ${ie.cyan("https://appstoreconnect.apple.com/access/integrations/api")}
-
-It looks like: ${ie.dim("xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx")}`,"One More Thing");let P=await Te({message:"Enter your App Store Connect Issuer ID:",validate:O=>O.trim().length>0?void 0:"Issuer ID is required"});if(ue(P)){xe("Operation cancelled.");return}N=P.trim()}if(C){let P=Ce.join(Ht.tmpdir(),`AuthKey_${w}.p8`);ae.writeFileSync(P,C),await Xt(e,P,"ios",N,w,t.ios?.bundleIdentifier||"*",{...E}),ae.unlinkSync(P)}else{ne.warn(ie.yellow("\u26A0\uFE0F  Apple did not return the private key in the response.")),Pt(`Download the .p8 file manually:
-
-  1. Open: ${ie.cyan("https://appstoreconnect.apple.com/access/integrations/api")}
-  2. Find Key ID: ${ie.green(w)}
-  3. Click ${ie.bold("Download API Key")} (only available once)
-  4. Drag & drop the downloaded .p8 file below`,"Manual Step Required");let P=await Te({message:"Path to the downloaded .p8 file (drag & drop here):",validate:O=>ae.existsSync(O)?void 0:"File not found"});if(ue(P)){xe("Operation cancelled. Credential ID was registered but key content is missing.");return}await Xt(e,P,"ios",N,w,t.ios?.bundleIdentifier||"*",{...E})}}catch(c){n.stop("Error"),ne.error(`Error: ${c.message}`)}}async function ur(e,t){let n=mt(),i=t.submit?.production?.ios?.appleId,r=it(t).teamId,o=Nn(t);if(!i){let a=await Te({message:"Apple ID:"});if(ue(a))return;i=a}if(!r){let a=await ut({appleId:i,config:t,profile:"production",initialTeam:it(t),promptToPersistConfig:!0});if(!a?.teamId)return;r=a.teamId}n.start("Fetching existing API Keys...");let s=Ut();if(!ae.existsSync(s)){ne.error(`Magic Error: Helper script not found at ${s}`);return}try{let a=g=>ft("ruby",[s,"list"],{env:{...jt(),FASTLANE_USER:i,FASTLANE_TEAM_ID:r,...g?{FASTLANE_ITC_TEAM_ID:g,FASTLANE_ASC_TEAM_ID:g}:{}},stdio:["inherit","pipe","pipe"],encoding:"utf-8"}),c=a(o);if(c.status!==0){let g=Kt(`${c.stdout||""}
-${c.stderr||""}`);if(g.length>0){n.stop("Select App Store Connect team");let b=await rt({message:"Select the App Store Connect team to list API keys:",options:g.map(w=>({value:w.id,label:w.name,hint:w.id}))});if(ue(b)){xe("Operation cancelled");return}o=b,n.start("Fetching existing API Keys..."),c=a(o)}}if(c.status!==0){n.stop("Failed"),ne.error(`Listing failed: ${c.stderr}`);return}let l=c.stdout.match(new RegExp(`${A.jsonStartMarker}(.*)${A.jsonEndMarker}`));if(!l){n.stop("Parse Error");return}let p=JSON.parse(l[1]);if(n.stop(`Found ${p.length} keys`),p.length===0){ne.info("No API Keys found on this team.");return}let d=await rt({message:"Select a key to delete from Apple Developer Portal:",options:[...p.map(g=>({value:g.id,label:`ID: ${g.id} - ${g.name} (${g.role})`})),{value:"cancel",label:"Cancel"}]});if(ue(d)||d==="cancel")return;let u=await Pn({message:`Are you sure you want to delete Key ${d}? This cannot be undone.`});if(!u||ue(u))return;n.start(`Deleting Key ${d}...`);let y=ft("ruby",[Ut(),"delete",d],{env:{...jt(),FASTLANE_USER:i,FASTLANE_TEAM_ID:r,...o?{FASTLANE_ITC_TEAM_ID:o,FASTLANE_ASC_TEAM_ID:o}:{}},stdio:"pipe",encoding:"utf-8"});y.status===0?(n.stop("Deleted"),ne.success(`\u2713 Key ${d} has been removed from Apple Portal.`)):(n.stop("Deletion Failed"),ne.error(`Error: ${y.stderr}`))}catch(a){n.stop("Error"),ne.error(`Error: ${a.message}`)}}async function Xt(e,t,n,i,r,o="*",s={}){let a=mt();a.start(`Uploading Service Credentials for ${n}...`);try{let c=n==="ios"?"asc_api_key":"google_service_account",l=new URL(import.meta.url),p=Ce.dirname(l.pathname),d=[Ce.join(p,"isolated-upload.js"),Ce.join(p,"commands","isolated-upload.js"),Ce.resolve(p,"../commands/isolated-upload.js"),Ce.resolve(process.cwd(),`node_modules/.bin/${A.nameLower}-upload`)],u="";for(let g of d)if(ae.existsSync(g)){u=g;break}if(!u)throw new Error("Could not locate isolated-upload.js. Ensure the CLI is properly installed.");let y=ft("node",[u,e,t,c,o,"service","undefined","undefined",i||"undefined",r||"undefined","undefined","undefined","undefined",s.teamId||"undefined",s.teamName||"undefined",s.developerTeamId||"undefined",s.appStoreConnectTeamId||"undefined",s.providerId||"undefined",s.providerName||"undefined"],{stdio:"pipe",encoding:"utf-8",env:{...process.env,AT_CLI_ISOLATED:"1"}});if(y.status!==0){let g=y.stderr||y.stdout||"Unknown upload failure";a.stop("Upload Failed"),ne.error(ie.red(`Upload Failed: ${g}`));return}y.stdout.includes("SUCCESS")?(a.stop("Upload Success"),ne.success(ie.green(`\u2713 Service Credentials for ${n} uploaded successfully.`))):(a.stop("Upload Summary"),ne.warn(ie.yellow(`Upload finished but success not confirmed: ${y.stdout}`)))}catch(c){a.stop("Upload Error"),ne.error(ie.red(`Error: ${c.message}`))}}function fr(e){let t=e==="ios"?".p8":".json",n=[],i=[{path:"./",label:"Project Root"},{path:Ce.join(Ht.homedir(),"Downloads"),label:"Downloads"}];for(let r of i)if(ae.existsSync(r.path))try{let o=ae.readdirSync(r.path);for(let s of o)if(s.endsWith(t)){if(e==="android"&&!ae.readFileSync(Ce.join(r.path,s),"utf8").includes("service_account")||e==="ios"&&!s.startsWith("AuthKey"))continue;n.push({path:Ce.join(r.path,s),location:r.label})}}catch{}return n}import{spinner as xt}from"@clack/prompts";import q from"chalk";import{spawnSync as Bo}from"child_process";import se from"fs";import he from"path";import L from"fs";import ee from"path";var mr={expo:["src/app/_layout.tsx","src/app/_layout.ts","src/app/_layout.jsx","src/app/_layout.js","app/_layout.tsx","app/_layout.ts","app/_layout.jsx","app/_layout.js","src/App.tsx","src/App.ts","src/App.jsx","src/App.js","App.tsx","App.ts","App.jsx","App.js"],"react-native":["index.ts","index.tsx","index.js","index.jsx","src/index.ts","src/index.tsx","src/index.js","src/index.jsx","App.tsx","App.ts","App.jsx","App.js","src/App.tsx","src/App.ts","src/App.jsx","src/App.js"]};function Ee(e,t){return ee.relative(e,t).split(ee.sep).join("/")}function gr(e,t){return t.find(n=>L.existsSync(ee.join(e,n)))}function hr(e,t){return t.split(ee.sep).join("/").startsWith("src/")?ee.join(e,"src"):e}function yr(e){return e.endsWith(".ts")||e.endsWith(".tsx")}function Ir(e,t){let n=t.replace(/\.(?:tsx?|jsx?)$/,""),i=ee.relative(ee.dirname(e),n).split(ee.sep).join("/");return i.startsWith(".")||(i=`./${i}`),i}function Ar(e,t){let n=L.readFileSync(e,"utf8");if(n.includes("MACH Push setup")||/(?:from\s+)?['"][^'"]*mach-push['"]/.test(n))return!1;let i=Ir(e,t);return L.writeFileSync(e,`import '${i}'; // MACH Push setup
-${n}`),!0}function Cr(e,t){let n={projectId:e.projectId};return e.appId&&e.publishableKey&&(n.appId=e.appId,n.publishableKey=e.publishableKey),e.apiUrl&&e.apiUrl!=="https://mach-api.securejs.in"&&(n.apiUrl=e.apiUrl),e.environment&&e.environment!=="production"&&(n.environment=e.environment),`// Generated by \`mach push setup\`. Re-run the command to refresh.
-// Public client configuration only. Provider credentials are never written here.
-${t?`import type { MachPushConfig } from '@radhya/mach-push-react-native';
-`:""}
-
-export const machPushConfig${t?": MachPushConfig":""} = ${JSON.stringify(n,null,2)};
-`}function br(e,t){return t?`/**
- * MACH Push application hooks.
- *
- * This file belongs to your app and is never overwritten by
- * \`mach push setup\`. Customize these callbacks whenever you need to route
- * notification taps, update application state, or associate a user.
- */
-import { Platform } from 'react-native';
-import {
-  setupMachPush,
-  type MachPushNotification,
-  type MachPushPermissionStatus,
-  type MachPushRegistration,
-} from '@radhya/mach-push-react-native';
-import { machPushConfig } from '${e}';
-
-export function onMachPushNotificationReceived(
-  _notification: MachPushNotification,
-) {
-  // Notifications are displayed automatically. Add foreground behavior here.
-}
-
-export function onMachPushNotificationOpened(
-  _notification: MachPushNotification,
-) {
-  // Read _notification.data and navigate to the appropriate screen here.
-}
-
-export function onMachPushRegistered(
-  _registration: MachPushRegistration,
-) {
-  // The installation is now ready to receive MACH notifications.
-}
-
-export function onMachPushPermissionChanged(
-  _status: MachPushPermissionStatus,
-) {
-  // Optionally reflect notification permission in application settings.
-}
-
-export function onMachPushError(error: Error) {
-  console.warn('[MACH Push]', error.message);
-}
-
-let startPromise: ReturnType<typeof setupMachPush> | undefined;
-
-export function startMachPush() {
-  if (Platform.OS !== 'ios' && Platform.OS !== 'android') return undefined;
-  if (!startPromise) {
-    startPromise = setupMachPush(machPushConfig, {
-      onNotificationReceived: onMachPushNotificationReceived,
-      onNotificationOpened: onMachPushNotificationOpened,
-      onRegistered: onMachPushRegistered,
-      onPermissionChanged: onMachPushPermissionChanged,
-      onError: onMachPushError,
-    });
-  }
-  return startPromise;
-}
-
-// The basic experience works immediately. Remove this line if your product
-// asks for notification permission at a later, contextual moment.
-void startMachPush()?.catch(() => undefined);
-`:`/**
- * MACH Push application hooks.
- *
- * This file belongs to your app and is never overwritten by
- * \`mach push setup\`. Customize these callbacks whenever you need to route
- * notification taps, update application state, or associate a user.
- */
-import { Platform } from 'react-native';
-import { setupMachPush } from '@radhya/mach-push-react-native';
-import { machPushConfig } from '${e}';
-
-export function onMachPushNotificationReceived(_notification) {
-  // Notifications are displayed automatically. Add foreground behavior here.
-}
-
-export function onMachPushNotificationOpened(_notification) {
-  // Read _notification.data and navigate to the appropriate screen here.
-}
-
-export function onMachPushRegistered(_registration) {
-  // The installation is now ready to receive MACH notifications.
-}
-
-export function onMachPushPermissionChanged(_status) {
-  // Optionally reflect notification permission in application settings.
-}
-
-export function onMachPushError(error) {
-  console.warn('[MACH Push]', error.message);
-}
-
-let startPromise;
-
-export function startMachPush() {
-  if (Platform.OS !== 'ios' && Platform.OS !== 'android') return undefined;
-  if (!startPromise) {
-    startPromise = setupMachPush(machPushConfig, {
-      onNotificationReceived: onMachPushNotificationReceived,
-      onNotificationOpened: onMachPushNotificationOpened,
-      onRegistered: onMachPushRegistered,
-      onPermissionChanged: onMachPushPermissionChanged,
-      onError: onMachPushError,
-    });
-  }
-  return startPromise;
-}
-
-// The basic experience works immediately. Remove this line if your product
-// asks for notification permission at a later, contextual moment.
-void startMachPush()?.catch(() => undefined);
-`}function _n(e,t,n){let i=[],r=[],o=gr(e,mr[t]);if(!o)return{written:i,notes:["Could not locate the application entry point. Import the generated mach-push file once from your root App or layout."]};let s=ee.join(e,o),a=hr(e,o),c=yr(o)?"ts":"js",l=c==="ts",p=ee.join(a,`mach-push.generated.${c}`),d=ee.join(a,`mach-push.${c}`);return L.mkdirSync(a,{recursive:!0}),L.writeFileSync(p,Cr(n,l)),i.push(Ee(e,p)),L.existsSync(d)?r.push(`${Ee(e,d)} already exists; developer callbacks were preserved.`):(L.writeFileSync(d,br("./mach-push.generated",l)),i.push(Ee(e,d))),Ar(s,d)?i.push(Ee(e,s)):r.push(`${Ee(e,s)} already starts MACH Push.`),{written:i,notes:r,editableFile:Ee(e,d),generatedFile:Ee(e,p),entryFile:Ee(e,s)}}function Fn(e,t){if(!L.existsSync(e))return[];let n=[];for(let i of L.readdirSync(e,{withFileTypes:!0})){if(i.name==="Pods"||i.name==="build")continue;let r=ee.join(e,i.name);i.isDirectory()?n.push(...Fn(r,t)):t(r)&&n.push(r)}return n}function Sr(e,t){if(L.mkdirSync(ee.dirname(e),{recursive:!0}),!L.existsSync(e)){L.writeFileSync(e,`<?xml version="1.0" encoding="UTF-8"?>
-<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
-<plist version="1.0">
-<dict>
-  <key>aps-environment</key>
-  <string>${t}</string>
-</dict>
-</plist>
-`);return}let n=L.readFileSync(e,"utf8"),i=/(<key>aps-environment<\/key>\s*<string>)([^<]*)(<\/string>)/;if(i.test(n)){L.writeFileSync(e,n.replace(i,`$1${t}$3`));return}n.includes("</dict>")&&L.writeFileSync(e,n.replace("</dict>",`  <key>aps-environment</key>
-  <string>${t}</string>
-</dict>`))}function wr(e,t,n){let i=[],r=[],o=ee.join(e,"ios");if(!L.existsSync(o))return r.push("iOS native project is not present; no APNs entitlement was changed."),{written:i,notes:r};let a=Fn(o,p=>p.endsWith(".xcodeproj/project.pbxproj"))[0];if(!a)return r.push("Could not locate an iOS Xcode project for the APNs entitlement."),{written:i,notes:r};let c=L.readFileSync(a,"utf8"),l=Array.from(c.matchAll(/CODE_SIGN_ENTITLEMENTS\s*=\s*"?([^";$]+\.entitlements)"?;/g),p=>p[1].trim());if(l.length===0&&t){let p=ee.basename(ee.dirname(a),".xcodeproj"),u=[L.existsSync(ee.join(o,p))?p:"",`${p}.entitlements`].filter(Boolean).join("/"),y=!1;c=c.replace(/buildSettings = \{([\s\S]*?)\n(\s*)\};/g,(g,b,w)=>!new RegExp(`PRODUCT_BUNDLE_IDENTIFIER\\s*=\\s*"?${t.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}"?;`).test(b)||b.includes("CODE_SIGN_ENTITLEMENTS")?g:(y=!0,g.replace(/(\n\s*PRODUCT_BUNDLE_IDENTIFIER\s*=)/,`
-${w}	CODE_SIGN_ENTITLEMENTS = ${u};$1`))),y&&(L.writeFileSync(a,c),i.push(Ee(e,a)),l.push(u))}if(l.length===0)return r.push("Could not safely identify the iOS app target. Enable the Push Notifications capability in Xcode."),{written:i,notes:r};for(let p of new Set(l)){let d=ee.join(o,p);Sr(d,n),i.push(Ee(e,d))}return r.push(`iOS APNs entitlement is configured for ${n}.`),{written:[...new Set(i)],notes:r}}function vr(e,t){let n=L.readFileSync(e,"utf8");if(n.includes("com.google.gms.google-services"))return!1;let i=/plugins\s*\{/.exec(n);if(i?.index!==void 0){let r=t?`    id("com.google.gms.google-services")
-`:`    id 'com.google.gms.google-services'
-`,o=i.index+i[0].length;L.writeFileSync(e,`${n.slice(0,o)}
-${r}${n.slice(o)}`)}else{let r=t?`
-apply(plugin = "com.google.gms.google-services")
-`:`
-apply plugin: "com.google.gms.google-services"
-`;L.writeFileSync(e,`${n.trimEnd()}${r}`)}return!0}function Er(e){let t=["settings.gradle.kts","settings.gradle"].map(a=>ee.join(e,a)).find(a=>L.existsSync(a));if(t){let a=L.readFileSync(t,"utf8");if(a.includes("com.google.gms.google-services"))return;let c=/plugins\s*\{/.exec(a);if(c?.index!==void 0){let p=t.endsWith(".kts")?`    id("com.google.gms.google-services") version "4.4.4" apply false
-`:`    id "com.google.gms.google-services" version "4.4.4" apply false
-`,d=c.index+c[0].length;return L.writeFileSync(t,`${a.slice(0,d)}
-${p}${a.slice(d)}`),t}}let n=["build.gradle.kts","build.gradle"].map(a=>ee.join(e,a)).find(a=>L.existsSync(a));if(!n)return;let i=L.readFileSync(n,"utf8");if(i.includes("com.google.gms:google-services"))return;let r=/dependencies\s*\{/.exec(i);if(r?.index===void 0)return;let o=`        classpath("com.google.gms:google-services:4.4.4")
-`,s=r.index+r[0].length;return L.writeFileSync(n,`${i.slice(0,s)}
-${o}${i.slice(s)}`),n}function Pr(e,t){let n=[],i=[],r=ee.join(e,"android");if(!L.existsSync(r))return i.push("Android native project is not present; no Firebase configuration was changed."),{written:n,notes:i};if(!t)return i.push("Android needs google-services.json. Add it at the project root and re-run mach push setup."),{written:n,notes:i};let o=ee.resolve(e,t);if(!L.existsSync(o))return i.push(`Android Firebase file was not found at ${t}; re-run setup with --google-services-file.`),{written:n,notes:i};let s=ee.join(r,"app/google-services.json");L.mkdirSync(ee.dirname(s),{recursive:!0}),o!==s&&(L.copyFileSync(o,s),n.push(Ee(e,s)));let a=["build.gradle.kts","build.gradle"].map(l=>ee.join(r,"app",l)).find(l=>L.existsSync(l));if(!a)return i.push("Could not locate android/app/build.gradle to enable Firebase."),{written:n,notes:i};vr(a,a.endsWith(".kts"))&&n.push(Ee(e,a));let c=Er(r);return c&&n.push(Ee(e,c)),i.push("Android Firebase configuration and notification permission are wired."),{written:[...new Set(n)],notes:i}}function On(e,t){let n=wr(e,t.iosBundleId,t.iosEnvironment),i=Pr(e,t.googleServicesFile);return{written:[...new Set([...n.written,...i.written])],notes:[...n.notes,...i.notes]}}import{spinner as Rt,log as v,isCancel as kt,confirm as no,select as rn}from"@clack/prompts";import S from"chalk";import I from"fs";import h from"path";import{execFileSync as We,execSync as J,spawn as Qn}from"child_process";import fe from"os";import io from"crypto";import _r from"crypto";import{log as Pe}from"@clack/prompts";import Ne from"chalk";import{execSync as Nr}from"child_process";import Re from"fs";import Ue from"path";var Tn={id:"expo",displayName:"Expo",applyLocalProcessEnv:e=>{e.developmentClient?(Pe.info(Ne.blue("\u2139\uFE0F  Configuring Expo build to INCLUDE expo-dev-client (Development Client mode)...")),delete process.env.EXPO_NO_DEV_CLIENT,delete process.env.EXPO_AUTOLINKING_EXCLUDE):(Pe.info(Ne.blue("\u2139\uFE0F  Configuring Expo build to EXCLUDE expo-dev-client (Production/Staging mode)...")),process.env.EXPO_NO_DEV_CLIENT="1",process.env.EXPO_AUTOLINKING_EXCLUDE="expo-dev-client")},localAndroidEnv:(e,t)=>({EXPO_NO_DOTENV:"1",MACH_FRAMEWORK:"expo",MACH_BUILD_PROFILE:t}),remoteEnvSetupScript:()=>`
-export MACH_FRAMEWORK="expo"
-echo "[ENV] MACH_FRAMEWORK=$MACH_FRAMEWORK"
-export EXPO_NO_DOTENV="\${EXPO_NO_DOTENV:-1}"
-echo "[ENV] EXPO_NO_DOTENV=$EXPO_NO_DOTENV"
-`,iosRemotePrebuildScript:()=>`
-echo "[STEP_START:prebuild] $(date +%s)"
-echo "Expo framework configured. Running prebuild..."
-# Use --no-install so we can patch the Podfile before pod install.
-CI=1 npx expo prebuild --platform ios --clean --no-install
-`,androidRemoteVersionCodeScript:()=>`
-if [ ! -z "$ANDROID_VERSION_CODE" ]; then
-  node -e "const fs=require('fs');const p='app.json';if(fs.existsSync(p)){const j=JSON.parse(fs.readFileSync(p,'utf8'));j.expo=j.expo||{};j.expo.android=j.expo.android||{};j.expo.android.versionCode=Number(process.env.ANDROID_VERSION_CODE);fs.writeFileSync(p,JSON.stringify(j,null,2));console.log('[VERSIONING] app.json expo.android.versionCode updated');}"
-fi
-`,androidRemotePrebuildScript:()=>`
-patch_expo_android_version_code() {
-  if [ -z "$ANDROID_VERSION_CODE" ]; then
-    return 0
-  fi
-
-  node <<'NODE'
-const fs = require('fs');
-const code = Number(process.env.ANDROID_VERSION_CODE);
-if (!Number.isSafeInteger(code) || code < 1) {
-  console.log('[VERSIONING] Skipping generated Gradle patch: invalid ANDROID_VERSION_CODE');
-  process.exit(0);
-}
-
-const files = [
-  'android/app/build.gradle',
-  'android/app/build.gradle.kts',
-].filter((file) => fs.existsSync(file));
-
-let patched = false;
-for (const file of files) {
-  const original = fs.readFileSync(file, 'utf8');
-  let next = original;
-  if (file.endsWith('.kts')) {
-    next = next.replace(/\\bversionCode\\s*=\\s*\\d+/g, 'versionCode = ' + code);
-  } else {
-    next = next.replace(/\\bversionCode\\s+\\d+/g, 'versionCode ' + code);
-    next = next.replace(/\\bversionCode\\s*=\\s*\\d+/g, 'versionCode = ' + code);
-  }
-  if (next !== original) {
-    fs.writeFileSync(file, next);
-    console.log('[VERSIONING] ' + file + ' versionCode updated to ' + code);
-    patched = true;
-  }
-}
-
-if (!patched) {
-  console.log('[VERSIONING] Generated Android Gradle versionCode was not found; relying on Gradle property injection.');
-}
-NODE
-}
-
-# Compute a hash of native-affecting files and the Mach-injected app env to
-# decide if android/ cache is still valid. Env names are project-defined, so the
-# CLI precomputes MACH_ENV_FINGERPRINT from all relevant managed values.
-if [ -f "app.json" ] || [ -f "app.config.ts" ] || [ -f "app.config.js" ]; then
-  PREBUILD_HASH_FILE="\${MACH_APP_ROOT:-$PWD}/.mach-prebuild-hash"
-  PREBUILD_ENV_HASH="\${MACH_ENV_FINGERPRINT:-missing-env-fingerprint}"
-  PREBUILD_CURRENT_HASH=$(
-    {
-      cat app.json app.config.ts app.config.js 2>/dev/null
-      node -e "try{const p=require('./package.json');const keys=Object.keys({...p.dependencies,...p.devDependencies}).filter(k=>k.startsWith('expo-')||k.startsWith('@expo/')||k.startsWith('@react-native'));console.log(keys.join(','))}catch(e){}" 2>/dev/null
-      printf '%s\\n' "$PREBUILD_ENV_HASH"
-    } | md5sum | cut -d' ' -f1
-  )
-
-  ANDROID_CACHE_VALID=false
-  if [ -f "$PREBUILD_HASH_FILE" ] && [ -d "android" ] && [ -f "android/gradlew" ]; then
-    STORED_HASH=$(cat "$PREBUILD_HASH_FILE" 2>/dev/null)
-    if [ "$PREBUILD_CURRENT_HASH" = "$STORED_HASH" ]; then
-      ANDROID_CACHE_VALID=true
-      echo "[PREBUILD] android/ cache is valid (hash match) \u2014 skipping expo prebuild."
-    fi
-  fi
-
-  if [ "$ANDROID_CACHE_VALID" = "false" ]; then
-    echo "[PREBUILD] Running expo prebuild..."
-    if command -v expo >/dev/null 2>&1; then
-      expo prebuild --platform android --no-install
-    else
-      npx expo prebuild --platform android --no-install
-    fi
-    echo "$PREBUILD_CURRENT_HASH" > "$PREBUILD_HASH_FILE"
-  fi
-
-  patch_expo_android_version_code
-fi
-`,androidRemoteGradlePropertiesScript:()=>`
-echo "expo.enableHermes=true" >> gradle.properties
-`,androidRemoteReleaseGradlePropertiesScript:()=>`
-echo "expo.enableProguardInReleaseBuilds=true" >> gradle.properties
-`,prepareLocalProject:async e=>{let{platform:t,options:n,appRoot:i,cacheMeta:r,cacheMetaDir:o,currentBuildEnv:s,reportStep:a,loggedRun:c,configureXcodeNodeBinary:l,podsFingerprint:p,writeCacheMeta:d}=e,u=n.iosBundleIdentifier||"",y=n.name||"",g=Ue.join(i,"app.json"),b=null;Pe.info(Ne.blue(`Running Expo prebuild for ${t}...`));try{if(Re.existsSync(g)){b=Re.readFileSync(g,"utf-8");let N=JSON.parse(b);N.expo=N.expo||{},y||(y=N.expo.name||""),t==="ios"&&!u&&(u=N.expo?.ios?.bundleIdentifier||""),n.name&&(N.expo.name=n.name),n.scheme&&(N.expo.scheme=n.scheme),t==="ios"&&n.iosBundleIdentifier?(N.expo.ios=N.expo.ios||{},N.expo.ios.bundleIdentifier=n.iosBundleIdentifier):t==="android"&&n.androidPackage&&(N.expo.android=N.expo.android||{},N.expo.android.package=n.androidPackage),Re.writeFileSync(g,JSON.stringify(N,null,2))}let w=["exec","--","expo","prebuild","--platform",t,"--no-install"];if(await a("prebuild"),await c("npm",w,i,s()),t!=="ios"||!Re.existsSync(Ue.join(i,"ios")))return{appName:y,bundleId:u};await a("pods"),Pe.info(Ne.blue("Running pod install..."));try{let N=Ue.join(i,"ios"),C=Ue.join(N,"Podfile");if(!Re.existsSync(C))throw new Error("ios/Podfile not found. Skipping pod install.");let E=s();l(N,E);let P=Re.readFileSync(C,"utf-8"),O=n.iosDeploymentTarget||"13.4";if(!n.developmentClient&&(Pe.info(Ne.blue("\u2139\uFE0F  Patching Podfile to EXCLUDE expo-dev-client...")),P.includes("use_expo_modules!")&&!P.includes("exclude:"))){let F=/use_expo_modules!(\s*)$/m;F.test(P)?P=P.replace(F,'use_expo_modules!(exclude: ["expo-dev-client"])$1'):P=P.replace("use_expo_modules!",'use_expo_modules!(exclude: ["expo-dev-client"])')}let B=`
-      installer.generated_projects.each do |project|
-        project.targets.each do |target|
-          target.build_configurations.each do |config|
-            config.build_settings['IPHONEOS_DEPLOYMENT_TARGET'] = '${O}'
-          end
-        end
-      end
-      installer.pods_project.targets.each do |target|
-        target.build_configurations.each do |config|
-          config.build_settings['IPHONEOS_DEPLOYMENT_TARGET'] = '${O}'
-        end
-      end
-`,X=/post_install\s+do\s+\|installer\|/;if(X.test(P))Pe.info(Ne.dim(`Injecting deployment target (${O}) into existing post_install hook...`)),P=P.replace(X,`post_install do |installer|
-${B}`),Re.writeFileSync(C,P);else{Pe.info(Ne.dim(`Appending new post_install hook for deployment target (${O})...`));let F=`
-post_install do |installer|
-${B}
-end
-`;Re.appendFileSync(C,F)}let _="/opt/homebrew/bin/pod",V=Re.existsSync(_)?_:"pod",D=p(N);Re.existsSync(Ue.join(N,"Pods"))&&r.pods&&r.pods!==D&&(await e.reportLog(`[CACHE] Podfile/Podfile.lock changed \u2014 wiping ios/Pods
-`),Pe.info(Ne.dim("Podfile fingerprint changed \u2014 clearing Pods for clean install...")),Re.rmSync(Ue.join(N,"Pods"),{recursive:!0,force:!0})),Pe.info(Ne.dim(`Using pod command: ${V} in ${N}`)),await c(V,["install"],N,E),r.pods=D,d(o,r)}catch(N){let C=N.message||"Unknown error";Pe.warn(Ne.yellow(`Native "pod" command failed: ${C}`)),Pe.info(Ne.dim("Falling back to npm exec pod-install..."));let E=s();l(Ue.join(i,"ios"),E),Pe.info(Ne.magenta(`${A.nameUpper}_DEBUG: Executing pod-install override via npx --yes pod-install@latest`)),await c("npx",["--yes","pod-install@latest","ios"],i,E)}if(Re.existsSync(Ue.join(i,"ios/Pods"))){Pe.info(Ne.dim("Disabling signing for Pod targets to prevent conflicts..."));try{Nr(`find ios/Pods -name "project.pbxproj" -exec sed -i '' 's/buildSettings = {/buildSettings = { CODE_SIGNING_ALLOWED = NO; CODE_SIGNING_REQUIRED = NO; PROVISIONING_PROFILE_SPECIFIER = ""; EXPANDED_CODE_SIGN_IDENTITY = "";/g' {} +`,{cwd:i,stdio:"ignore"})}catch{}}return{appName:y,bundleId:u}}finally{b&&Re.writeFileSync(g,b)}}};import{log as Le}from"@clack/prompts";import Xe from"chalk";import Be from"fs";import gt from"path";import{spawnSync as Rr}from"child_process";import De from"fs";import je from"path";var Dn=(e,t)=>je.join(e,"node_modules",".bin",process.platform==="win32"?`${t}.cmd`:t),kr=e=>{try{return JSON.parse(De.readFileSync(je.join(e,"package.json"),"utf-8"))}catch{return{}}};function Va(e,t){let n=kr(e);return!!(n.dependencies?.[t]||n.devDependencies?.[t])}function Yt(e,t,n,i={}){let r=`${t} ${n.join(" ")}`,o=Rr(t,n,{cwd:e,stdio:"inherit",env:{...process.env,CI:process.env.CI||"1",EXPO_NO_TELEMETRY:"1",...i}});return o.error?{ok:!1,command:r,error:o.error.message}:o.status!==0?{ok:!1,command:r,error:`${t} exited with code ${o.status}`}:{ok:!0,command:r}}function Wa(e){return Yt(e,"npx",["--yes","install-expo-modules@latest"])}function Za(e){let t=Dn(e,"expo");return De.existsSync(t)?Yt(e,t,["install","expo-updates"]):{ok:!1,command:"npx expo install expo-updates",error:"Expo Modules are not installed. Install Expo Modules first."}}function Ma(e){let t=[];return De.existsSync(je.join(e,"ios"))&&t.push("ios"),De.existsSync(je.join(e,"android"))&&t.push("android"),t}function Bn(e){let t=Dn(e.cwd,"expo-updates");return De.existsSync(t)?e.platforms.map(n=>Yt(e.cwd,t,["configuration:syncnative","--platform",n,"--workflow","generic"],{MACH_OTA_RUNTIME_VERSION:e.runtimeVersion,MACH_OTA_CHANNEL:e.channel,MACH_OTA_URL:e.url})):[{ok:!1,command:"expo-updates configuration:syncnative",error:"expo-updates is not installed in this project."}]}function Ga(e){let t=je.join(e,"android","app","src","main","AndroidManifest.xml"),n=je.join(e,"android","app","src","main","res","values","strings.xml"),i,r=je.join(e,"ios");if(De.existsSync(r)){let o=[r];for(;o.length>0&&!i;){let s=o.shift();for(let a of De.readdirSync(s,{withFileTypes:!0})){if(a.name==="Pods"||a.name==="build")continue;let c=je.join(s,a.name);if(a.isDirectory())o.push(c);else if(a.isFile()&&a.name==="Expo.plist"){i=c;break}}}}return{...De.existsSync(t)?{androidManifest:t}:{},...De.existsSync(n)?{androidStrings:n}:{},...i?{iosExpoPlist:i}:{}}}var xr=(e,t)=>!Be.existsSync(e)||!Be.existsSync(t)?!1:Be.readFileSync(e,"utf-8")!==Be.readFileSync(t,"utf-8"),Jt={id:"react-native",displayName:"React Native",applyLocalProcessEnv:e=>{delete process.env.EXPO_NO_DEV_CLIENT,delete process.env.EXPO_AUTOLINKING_EXCLUDE,delete process.env.EXPO_NO_DOTENV},localAndroidEnv:(e,t)=>({MACH_FRAMEWORK:"react-native",MACH_BUILD_PROFILE:t}),remoteEnvSetupScript:()=>`
-export MACH_FRAMEWORK="react-native"
-echo "[ENV] MACH_FRAMEWORK=$MACH_FRAMEWORK"
-unset EXPO_NO_DOTENV
-`,iosRemotePrebuildScript:()=>`
-echo "[STEP_START:prebuild] $(date +%s)"
-echo "[PREBUILD] React Native framework configured. Skipping Expo prebuild."
-if [ -n "\${MACH_OTA_RUNTIME_VERSION:-}" ]; then
-  EXPO_UPDATES_BIN="$(command -v expo-updates || true)"
-  if [ -z "$EXPO_UPDATES_BIN" ]; then
-    echo "[OTA] expo-updates is missing. Run mach ota setup and commit the dependency changes."
-    exit 1
-  fi
-  echo "[OTA] Synchronizing iOS Expo Updates runtime $MACH_OTA_RUNTIME_VERSION"
-  "$EXPO_UPDATES_BIN" configuration:syncnative --platform ios --workflow generic
-fi
-`,androidRemoteVersionCodeScript:()=>`
-echo "[VERSIONING] React Native framework configured. Version code will be injected through Gradle."
-`,androidRemotePrebuildScript:()=>`
-echo "[PREBUILD] React Native framework configured. Skipping Expo prebuild."
-if [ -n "\${MACH_OTA_RUNTIME_VERSION:-}" ]; then
-  EXPO_UPDATES_BIN="$(command -v expo-updates || true)"
-  if [ -z "$EXPO_UPDATES_BIN" ]; then
-    echo "[OTA] expo-updates is missing. Run mach ota setup and commit the dependency changes."
-    exit 1
-  fi
-  echo "[OTA] Synchronizing Android Expo Updates runtime $MACH_OTA_RUNTIME_VERSION"
-  "$EXPO_UPDATES_BIN" configuration:syncnative --platform android --workflow generic
-fi
-`,androidRemoteGradlePropertiesScript:()=>`
-:
-`,androidRemoteReleaseGradlePropertiesScript:()=>`
-:
-`,prepareLocalProject:async e=>{let{platform:t,appRoot:n,cacheMeta:i,cacheMetaDir:r,currentBuildEnv:o,reportStep:s,reportLog:a,loggedRun:c,configureXcodeNodeBinary:l,podsFingerprint:p,writeCacheMeta:d}=e,u=o(),y=u.MACH_OTA_RUNTIME_VERSION,g=u.MACH_OTA_CHANNEL,b=u.MACH_OTA_URL;if(y&&g&&b){let k=Bn({cwd:n,platforms:[t],runtimeVersion:y,channel:g,url:b}).find(F=>!F.ok);if(k)throw new Error(`Could not synchronize ${t} Expo Updates configuration: ${k.error||k.command}. Run \`mach ota setup --platform ${t}\` and try again.`);Le.info(Xe.green(`\u2713 OTA runtime ${y} synchronized for ${t}`))}if(t!=="ios")return{};let w=gt.join(n,"ios"),N=gt.join(w,"Podfile");if(!Be.existsSync(N))throw new Error("React Native iOS build requires ios/Podfile. Commit the ios directory for vanilla React Native projects.");await s("pods"),Le.info(Xe.blue("Running React Native pod install..."));let C=o();l(w,C);let E=gt.join(w,"Pods"),P=gt.join(w,"Podfile.lock"),O=gt.join(E,"Manifest.lock"),B=Be.existsSync(E),X=p(w);B&&i.reactNativePods&&i.reactNativePods!==X?(await a(`[CACHE] React Native Podfile/Podfile.lock changed - wiping ios/Pods
-`),Le.info(Xe.dim("React Native Podfile fingerprint changed - clearing Pods for clean install...")),Be.rmSync(E,{recursive:!0,force:!0})):B&&xr(P,O)&&(await a(`[CACHE] React Native Pods Manifest.lock is out of sync - wiping ios/Pods
-`),Le.info(Xe.dim("React Native Pods manifest is out of sync - clearing Pods for clean install...")),Be.rmSync(E,{recursive:!0,force:!0}));let _="/opt/homebrew/bin/pod",V=Be.existsSync(_)?_:"pod";try{Le.info(Xe.dim(`Using pod command: ${V} in ${w}`)),await c(V,["install"],w,C)}catch(D){let k=D.message||"Unknown error";Le.warn(Xe.yellow(`Native "pod" command failed: ${k}`)),Le.info(Xe.dim("Falling back to npx pod-install..."));let F=o();l(w,F),Le.info(Xe.magenta(`${A.nameUpper}_DEBUG: Executing pod-install fallback via npx --yes pod-install@latest`)),await c("npx",["--yes","pod-install@latest","ios"],n,F)}return i.reactNativePods=p(w),d(r,i),{}}};var $r={expo:Tn,"react-native":Jt};function ht(e){if(!e)return Jt;if(e!=="flutter")return $r[e];throw new Error('Flutter builds are not implemented yet. Set framework to "expo" or "react-native" for this build.')}var Fr="mach-env-v3-project-layout",Or=new Set(["BUILD_ID","BUILD_NUMBER","ANDROID_VERSION_CODE","MACH_TOKEN","MACH_DEBUG","MACH_S3_DEBUG","MACH_ENV_FINGERPRINT","CODEARTIFACT_AUTH_TOKEN","EXPO_ZQRN_BB_REPO_TOKEN","SENTRY_AUTH_TOKEN","IOS_DIST_P12","IOS_PROVISIONING_PROFILE","IOS_P12_PASSWORD","MATCH_ENCRYPTION_PASSPHRASE","MATCH_PASSWORD","MATCH_KEYCHAIN_NAME","MATCH_KEYCHAIN_PASSWORD","APPLE_TEAM_ID","FASTLANE_TEAM_ID","ANDROID_KEYSTORE","ANDROID_KEYSTORE_BASE64","ANDROID_STORE_PASSWORD","ANDROID_KEY_PASSWORD","ANDROID_KEY_ALIAS","KEYSTORE_PASSWORD","KEYSTORE_ALIAS","AWS_ACCESS_KEY_ID","AWS_SECRET_ACCESS_KEY","AWS_SESSION_TOKEN","AWS_SECURITY_TOKEN","GITHUB_TOKEN","NPM_TOKEN"]),Tr=["PRESIGNED_","KEYSTORE_PASSWORD_"],Dr=e=>!e||Or.has(e)?!1:!Tr.some(t=>e.startsWith(t)),zt=(e,t,n)=>{let i=ht(n.framework);return{...e,...i.localAndroidEnv(n,t),MACH_APP_NAME:n.appName||n.name||"App",MACH_APP_DIRECTORY:n.appDirectory||"."}},Vn=e=>{let t=Object.entries(e).filter(([n])=>Dr(n)).sort(([n],[i])=>n.localeCompare(i));return _r.createHash("sha256").update(JSON.stringify({version:Fr,entries:t})).digest("hex")};var Br=/^\d+(?:\.\d+){0,2}$/,Vr="auto";var Wn=e=>typeof e=="string"&&e.trim().toLowerCase()===Vr,ic=(e,t,n,i=!0)=>e!=null&&String(e).trim()!==""?{kind:"persisted",value:e}:t!=null&&!Wn(t)?{kind:"explicit",value:t}:i&&(n||Wn(t))?{kind:"auto"}:{kind:"none"},yt=e=>{let t=String(e??"").trim();return!t||t==="undefined"||t==="null"?null:Br.test(t)?t:null},ot=(e,t)=>{let n=yt(e);if(!n)throw new Error(`Invalid iOS buildNumber from ${t}: "${String(e??"")}". Use one to three period-separated integers, for example "68" or "1.2.3".`);return n},Wr=e=>{if(typeof e=="string"&&!/^\d+$/.test(e.trim()))return null;let t=Number(e);return!Number.isSafeInteger(t)||t<1||t>21e8?null:String(t)},Oe=(e,t)=>{let n=Wr(e);if(!n)throw new Error(`Invalid Android versionCode from ${t}: "${String(e??"")}". Use an integer from 1 to 2100000000.`);return n},rc=(e,t,n,i)=>{let r=ot(n,i);return e.resolvedBuildNumber=r,t.BUILD_NUMBER=r,t.CURRENT_PROJECT_VERSION=r,t.MACH_IOS_BUILD_NUMBER_LOCKED="1",r},oc=(e,t,n,i)=>{let r=Oe(n,i);return e.resolvedVersionCode=r,t.ANDROID_VERSION_CODE=r,t.MACH_ANDROID_VERSION_CODE_LOCKED="1",r},sc=(e,t)=>{let n=t.buildNumber!==void 0&&t.buildNumber!==null&&String(t.buildNumber).trim()!=="",i=t.versionCode!==void 0&&t.versionCode!==null&&String(t.versionCode).trim()!=="";!e.resolvedBuildNumber&&n&&(e.resolvedBuildNumber=ot(t.buildNumber,"saved MACH build record")),!e.resolvedVersionCode&&i&&(e.resolvedVersionCode=Oe(t.versionCode,"saved MACH build record"))};import{execFileSync as Qt}from"child_process";import Ve from"fs";import ze from"path";var Zr=new Set(["Pods","build","DerivedData",".git"]),Zn=(e,t=[])=>{if(!Ve.existsSync(e))return t;for(let n of Ve.readdirSync(e,{withFileTypes:!0})){if(n.isSymbolicLink())continue;let i=ze.join(e,n.name);if(n.isDirectory()){if(Zr.has(n.name)||n.name.endsWith(".xcworkspace")||n.name.endsWith(".xcarchive")||n.name.endsWith(".framework")||n.name.endsWith(".xcframework")||n.name.endsWith(".bundle")||n.name.endsWith(".app")||n.name.endsWith(".appex"))continue;Zn(i,t);continue}n.isFile()&&n.name==="Info.plist"&&t.push(i)}return t},Mr=(e,t,n)=>{let i=String(e||"").trim().replace(/^"|"$/g,"");if(!i||(i=i.replace(/\$\(([^)]+)\)|\$\{([^}]+)\}/g,(o,s,a)=>{let l=t[s||a];return l===void 0?"":String(l)}),!i||i.includes("$(")||i.includes("${")))return null;let r=String(t.SRCROOT||t.PROJECT_DIR||n);return ze.resolve(ze.isAbsolute(i)?i:ze.join(r,i))},Gr=e=>{let t=e.indexOf("["),n=e.lastIndexOf("]");if(t<0||n<t)return[];let i=JSON.parse(e.slice(t,n+1));return Array.isArray(i)?i:[]},Ur=(e,t)=>{let n=new Set,i=[];(t.workspace||t.project)&&i.push([...t.workspace?["-workspace",t.workspace]:["-project",t.project],"-scheme",t.scheme]),t.project&&i.push(["-project",t.project,"-alltargets"]);for(let r of i){let o="";try{o=Qt("xcodebuild",[...r,"-configuration",t.configuration,"-showBuildSettings","-json"],{cwd:e,encoding:"utf8",maxBuffer:16*1024*1024})}catch{continue}for(let s of Gr(o)){let a=s?.buildSettings;if(!a)continue;let c=String(a.WRAPPER_EXTENSION||"").toLowerCase();if(c!=="app"&&c!=="appex")continue;let l=Mr(String(a.INFOPLIST_FILE||""),a,e);if(!l||!Ve.existsSync(l))continue;let p=ze.relative(e,l);p.startsWith("..")||ze.isAbsolute(p)||n.add(l)}}return[...n].sort()},jr=(e,t)=>{let n=Ve.readFileSync(e,"utf8");if(!/<plist(?:\s|>)/.test(n))return!1;let r=/<key>\s*CFBundleVersion\s*<\/key>/.exec(n),o;if(r){let s=r.index+r[0].length,a=n.slice(s),c=/^\s*<(string|integer)>[\s\S]*?<\/\1>/.exec(a);if(!c)throw new Error(`Could not update CFBundleVersion in ${e}: unsupported plist value type.`);o=n.slice(0,s)+`
-	<string>${t}</string>`+a.slice(c[0].length)}else{let s=n.lastIndexOf("</dict>");if(s<0)throw new Error(`Could not update CFBundleVersion in ${e}: root dictionary not found.`);o=n.slice(0,s)+`	<key>CFBundleVersion</key>
-	<string>${t}</string>
-`+n.slice(s)}return Ve.writeFileSync(e,o),!0},Lr=(e,t)=>{if(!jr(e,t)){if(process.platform!=="darwin")throw new Error(`Could not update binary Info.plist outside macOS: ${e}`);try{Qt("/usr/bin/plutil",["-replace","CFBundleVersion","-string",t,e])}catch{Qt("/usr/bin/plutil",["-insert","CFBundleVersion","-string",t,e])}}},Mn=(e,t,n)=>{let i=ot(t,"resolved MACH build"),r=ze.resolve(e),o=new Set;if(n)try{for(let l of Ur(r,n))o.add(l)}catch{}for(let l of Zn(r))o.add(l);let s=[...o].sort(),a=new Map,c=!1;try{for(let l of s)a.set(l,Ve.readFileSync(l)),Lr(l,i)}catch(l){for(let[p,d]of a)Ve.writeFileSync(p,d);throw l}return{buildNumber:i,plistPaths:s,restore:()=>{if(!c){c=!0;for(let[l,p]of a)Ve.existsSync(l)&&Ve.writeFileSync(l,p)}}}},qt=(e,t,n)=>{let i=ot(e,n),r=ot(t,"resolved MACH build");if(i!==r)throw new Error(`iOS build number mismatch in ${n}: expected MACH buildNumber ${r}, but the artifact contains CFBundleVersion ${i}.`);return i};import{execFileSync as Gn}from"child_process";import It from"fs";import ge from"path";import Xr from"adm-zip";var en=(e,t)=>{let n=0n,i=0n,r=t;for(;r<e.length&&i<=63n;){let o=e[r++];if(n|=BigInt(o&127)<<i,(o&128)===0)return{value:n,next:r};i+=7n}throw new Error("Malformed protobuf varint")},At=e=>{let t=[],n=0;for(;n<e.length;){let i=en(e,n);n=i.next;let r=Number(i.value>>3n),o=Number(i.value&7n);if(r<1)throw new Error("Malformed protobuf field number");if(o===0){let s=en(e,n);n=s.next,t.push({number:r,wireType:o,varint:s.value});continue}if(o===1){if(n+8>e.length)throw new Error("Truncated protobuf fixed64");t.push({number:r,wireType:o,bytes:e.subarray(n,n+8)}),n+=8;continue}if(o===2){let s=en(e,n);n=s.next;let a=Number(s.value);if(!Number.isSafeInteger(a)||n+a>e.length)throw new Error("Truncated protobuf length-delimited field");t.push({number:r,wireType:o,bytes:e.subarray(n,n+a)}),n+=a;continue}if(o===5){if(n+4>e.length)throw new Error("Truncated protobuf fixed32");t.push({number:r,wireType:o,bytes:e.subarray(n,n+4)}),n+=4;continue}throw new Error(`Unsupported protobuf wire type ${o}`)}return t},Un=(e,t)=>e.find(i=>i.number===t&&i.wireType===2)?.bytes?.toString("utf8"),Hr=e=>{let n=At(e).find(o=>o.number===7&&o.wireType===2)?.bytes;if(!n)return null;let r=At(n).find(o=>(o.number===6||o.number===7)&&o.wireType===0)?.varint;return r===void 0||r>BigInt(Number.MAX_SAFE_INTEGER)?null:r.toString()},Kr=e=>{let n=At(e).find(l=>l.number===1&&l.wireType===2)?.bytes;if(!n)throw new Error("AAB base manifest has no root XML element");let o=At(n).filter(l=>l.number===4&&l.wireType===2).map(l=>At(l.bytes)).find(l=>Un(l,2)==="versionCode");if(!o)throw new Error("AAB base manifest has no android:versionCode");let s=Un(o,3)?.trim();if(s&&/^\d+$/.test(s))return Oe(s,"packaged AAB manifest");let a=o.find(l=>l.number===6&&l.wireType===2)?.bytes,c=a?Hr(a):null;return Oe(c,"packaged AAB manifest")},jn=e=>{try{return It.accessSync(e,It.constants.X_OK),It.statSync(e).isFile()}catch{return!1}},tn=e=>String(process.env.PATH||"").split(ge.delimiter).filter(Boolean).map(t=>ge.join(t,e)),Ln=()=>Array.from(new Set([process.env.ANDROID_HOME,process.env.ANDROID_SDK_ROOT,process.platform==="darwin"?ge.join(process.env.HOME||"","Library/Android/sdk"):ge.join(process.env.HOME||"","Android/Sdk"),"/opt/android-sdk"].filter(e=>!!e))),Xn=e=>{try{return It.readdirSync(e).map(t=>ge.join(e,t)).filter(t=>It.statSync(t).isDirectory()).sort((t,n)=>n.localeCompare(t,void 0,{numeric:!0}))}catch{return[]}},Yr=()=>{let e=tn("apkanalyzer");for(let t of Ln()){let n=ge.join(t,"cmdline-tools");e.push(ge.join(n,"latest/bin/apkanalyzer"));for(let i of Xn(n))e.push(ge.join(i,"bin/apkanalyzer"))}return e},Jr=()=>{let e=[...tn("aapt2"),...tn("aapt")];for(let t of Ln())for(let n of Xn(ge.join(t,"build-tools")))e.push(ge.join(n,"aapt2"),ge.join(n,"aapt"));return e},zr=e=>{let t=e.trim();return/^\d+$/.test(t)?t:null},Qr=e=>e.match(/^package:.*\bversionCode='(\d+)'/m)?.[1]||null,qr=(e,t)=>{let n=t.apkanalyzer??Yr();for(let r of n)if(jn(r))try{let o=Gn(r,["manifest","version-code",e],{encoding:"utf8",stdio:["ignore","pipe","pipe"]}),s=zr(o);if(s)return Oe(s,"packaged APK manifest")}catch{}let i=t.aapt??Jr();for(let r of i)if(jn(r))try{let o=Gn(r,["dump","badging",e],{encoding:"utf8",stdio:["ignore","pipe","pipe"]}),s=Qr(o);if(s)return Oe(s,"packaged APK manifest")}catch{}throw new Error("Could not inspect the packaged APK versionCode. Install Android SDK command-line tools (apkanalyzer or aapt2) and rebuild; MACH will not publish an unverified artifact.")},eo=(e,t={})=>{let n=ge.extname(e).toLowerCase();if(n===".apk")return qr(e,t);if(n!==".aab")throw new Error(`Unsupported Android artifact for version validation: ${e}`);let i;try{i=new Xr(e)}catch(o){throw new Error(`Could not open AAB ${ge.basename(e)}: ${o.message}`)}let r=i.getEntry("base/manifest/AndroidManifest.xml")||i.getEntries().find(o=>o.entryName.replace(/\\/g,"/")==="base/manifest/AndroidManifest.xml");if(!r)throw new Error(`AAB ${ge.basename(e)} has no base module manifest`);try{return Kr(r.getData())}catch(o){throw new Error(`Could not read versionCode from ${ge.basename(e)}: ${o.message}`)}},nn=(e,t,n={})=>{let i=Oe(t,"resolved MACH build assignment"),r=eo(e,n);if(r!==i)throw new Error(`Android versionCode mismatch in ${ge.basename(e)}: expected ${i}, packaged ${r}. MACH stopped the build before upload.`);return r};import He from"fs";import Se from"path";var to=e=>{if(e==null)return".";if(typeof e!="string")throw new Error("appDirectory must be a relative directory path.");let t=e.trim();if(!t||t===".")return".";if(t.includes("\0"))throw new Error("appDirectory contains an invalid null byte.");let n=t.replace(/\\/g,"/");if(Se.posix.isAbsolute(n)||/^[A-Za-z]:\//.test(n))throw new Error("appDirectory must be relative to the project root.");let i=Se.posix.normalize(n).replace(/^\.\//,"");if(i===".."||i.startsWith("../")||i.includes("/../"))throw new Error("appDirectory must stay inside the project root.");return!i||i==="."?".":i.replace(/\/+$/,"")},Ct=(e,t,n={})=>{let i=Se.resolve(e),r=to(t),o=Se.resolve(i,...r.split("/").filter(a=>a&&a!==".")),s=Se.relative(i,o);if(s===".."||s.startsWith(`..${Se.sep}`)||Se.isAbsolute(s))throw new Error("appDirectory must stay inside the project root.");if(n.requireAppDirectory){if(!He.existsSync(o)||!He.statSync(o).isDirectory())throw new Error(`Configured appDirectory "${r}" does not exist inside the project root.`);if(!He.existsSync(Se.join(o,"package.json")))throw new Error(`Configured appDirectory "${r}" must contain a package.json.`);let a=He.realpathSync(i),c=He.realpathSync(o),l=Se.relative(a,c);if(l===".."||l.startsWith(`..${Se.sep}`)||Se.isAbsolute(l))throw new Error("Configured appDirectory resolves outside the project root.")}return{sourceRoot:i,appDirectory:r,appRoot:o}},bc=(e,t,n)=>{if(t==="react-native"){if(n==="android"){let i=Se.join(e.appRoot,"android/gradlew"),r=Se.join(e.appRoot,"gradlew");if(!He.existsSync(i)&&!He.existsSync(r))throw new Error(`React Native Android build requires android/gradlew inside appDirectory "${e.appDirectory}".`);return}if(!He.existsSync(Se.join(e.appRoot,"ios/Podfile")))throw new Error(`React Native iOS build requires ios/Podfile inside appDirectory "${e.appDirectory}".`)}};var qn=(e,t)=>t.filter(n=>I.existsSync(h.join(e,n))).reduce((n,i)=>n.update(I.readFileSync(h.join(e,i))),io.createHash("sha256")).digest("hex").slice(0,16),ro=e=>qn(e,["package.json","yarn.lock","package-lock.json","bun.lockb"]),oo=e=>qn(e,["Podfile","Podfile.lock"]),so=e=>{let t=h.join(e,"fingerprint.json");try{return JSON.parse(I.readFileSync(t,"utf-8"))}catch{return{}}},Hn=(e,t)=>{I.mkdirSync(e,{recursive:!0}),I.writeFileSync(h.join(e,"fingerprint.json"),JSON.stringify(t,null,2))},ao=7200*1e3,co=(e,t)=>{I.mkdirSync(e,{recursive:!0});let n=h.join(e,"build.lock");if(I.existsSync(n))try{let i=JSON.parse(I.readFileSync(n,"utf-8")),r=Date.now()-(i.timestamp||0);if(r<ao)throw new Error(`Another build is already running for this project (build ${i.buildId}, started ${Math.round(r/6e4)}m ago). Cancel it from the dashboard first, or wait for it to complete.`)}catch(i){if(i.message.includes("Another build"))throw i}I.writeFileSync(n,JSON.stringify({buildId:t,pid:process.pid,timestamp:Date.now()}))},lo=(e,t)=>{let n=h.join(e,"build.lock");try{I.existsSync(n)&&JSON.parse(I.readFileSync(n,"utf-8")).buildId===t&&I.unlinkSync(n)}catch{}},Kn=15e5,Yn=(e,t)=>{let n=e+t;return n.length>Kn?n.slice(-Kn):n},ei=e=>e.replace(/\u001b\[[0-9;]*m/g,""),ti=e=>/\berror:|fatal error:|xcodebuild: error|The following build commands failed|Command PhaseScriptExecution failed|PhaseScriptExecution|Command .* failed|CodeSign|Provisioning profile|No profiles|requires a provisioning profile|Undefined symbols|ld:|clang: error|SwiftCompile|CompileC|node: command not found|env: node|No such file or directory|Permission denied/i.test(e),po=e=>{let t=new Set,n=[];e.forEach((r,o)=>{ti(r)&&n.push(o)});for(let r of n){let o=/PhaseScriptExecution|Command PhaseScriptExecution failed|The following build commands failed/i.test(e[r])?18:8,s=/The following build commands failed/i.test(e[r])?18:10;for(let a=Math.max(0,r-o);a<=Math.min(e.length-1,r+s);a++)t.add(a)}if(t.size===0)return e.slice(-120);let i=Array.from(t).sort((r,o)=>r-o).map(r=>e[r]);return i.length>160?i.slice(-160):i},uo=(e,t,n,i)=>{let r=ei(i).replace(/\r/g,`
-`).split(`
-`).map(c=>c.trimEnd()).filter(Boolean),o=r.filter(ti),s=o.length>0?po(r):r.slice(-80),a=o.length>0?"Key failure output":"Last command output";return[`Command failed with code ${n}: ${e} ${t.join(" ")}`,s.length>0?`
-${a}:
-${s.join(`
-`)}`:""].join("")},fo=e=>e==="xcodebuild"&&process.env.MACH_XCODE_FULL_LOGS!=="1",mo=e=>{let t=ei(e).trim();return t?/\berror:|fatal error:|xcodebuild: error|The following build commands failed|Command PhaseScriptExecution failed|CodeSign|Provisioning profile|No profiles|requires a provisioning profile|Undefined symbols|ld:|clang: error|SwiftCompile|CompileC|CFBundleVersion|ARCHIVE SUCCEEDED|ARCHIVE FAILED|EXPORT SUCCEEDED|EXPORT FAILED|Exported .* to:|\[IPA VALID\]/i.test(t):!1},$e=e=>{try{I.existsSync(e)&&I.rmSync(e,{recursive:!0,force:!0})}catch{}},go=(e,t)=>{try{if(!I.existsSync(e))return;for(let n of I.readdirSync(e))t(n)&&$e(h.join(e,n))}catch{}},st=e=>{v.info(S.dim("Clearing Metro/Hermes JS transform caches..."));let t=fe.tmpdir();go(t,n=>n==="metro-cache"||n.startsWith("metro-")||n.startsWith("haste-map-")||n.startsWith("react-native-packager-cache-")),$e(h.join(e,".expo")),$e(h.join(e,"node_modules/.cache/metro")),$e(h.join(fe.homedir(),".cache/metro")),$e(h.join(fe.homedir(),".cache/react-native-packager")),$e(h.join(fe.homedir(),"Library/Caches/metro")),$e(h.join(fe.homedir(),"Library/Caches/react-native-packager"))},ho=e=>/Internal inconsistency error|never received target ended message/i.test(String(e?.message||e)),yo=e=>{v.warn(S.yellow("Xcode build system hit an internal inconsistency. Clearing simulator build state and retrying once...")),$e(h.join(e,"Build")),$e(h.join(e,"Index.noindex")),$e(h.join(e,"ModuleCache.noindex")),$e(h.join(e,"SourcePackages"))},Io=e=>{let t=String(e?.message||e);return/Permission denied/i.test(t)&&/Pods\/.*\.sh/i.test(t)},ni=e=>{let t=h.join(e,"Pods"),i=[h.join(t,"Target Support Files"),t].filter(a=>I.existsSync(a)),r=new Set,o=0,s=a=>{let c=a;try{c=I.realpathSync(a)}catch{}if(r.has(c))return;r.add(c);let l;try{l=I.readdirSync(a,{withFileTypes:!0})}catch{return}for(let p of l){let d=h.join(a,p.name);if(p.isDirectory()){s(d);continue}if(!(!p.isFile()||!p.name.endsWith(".sh")))try{let u=I.statSync(d),y=u.mode|493;y!==u.mode&&(I.chmodSync(d,y),o+=1)}catch{}}};for(let a of i)s(a);return o>0&&v.info(S.dim(`Repaired executable permissions on ${o} CocoaPods script${o===1?"":"s"}.`)),o},Ao=(e,t,n,i,r)=>{let o=c=>{let l=c.filter(d=>d?.id&&String(d?.platform||"").includes("iOS Simulator")&&!d?.error),p=l.find(d=>/iphone/i.test(d.name||""))||l[0];return p?.id?`id=${p.id}`:void 0},s=c=>{let l=[],p=!1;for(let d of c.split(`
-`)){if(/Ineligible destinations/i.test(d)&&(p=!0),p||!d.includes("platform:iOS Simulator")||d.includes("error:"))continue;let u=d.match(/\bid:([^,}]+)/)?.[1]?.trim(),y=d.match(/\bname:([^,}]+)/)?.[1]?.trim();u&&l.push({id:u,name:y,platform:"iOS Simulator"})}return o(l)},a=[t?"-workspace":"-project",t||n,"-scheme",i,"-configuration",r,"-sdk","iphonesimulator","-showdestinations"];try{let c=We("xcodebuild",[...a,"-json"],{cwd:e,encoding:"utf-8",stdio:["ignore","pipe","ignore"]}),l=JSON.parse(c),p=Array.isArray(l.destinations)?l.destinations:Array.isArray(l.availableDestinations)?l.availableDestinations:[],d=o(p);if(d)return d}catch{}try{let c=We("xcodebuild",a,{cwd:e,encoding:"utf-8",stdio:["ignore","pipe","ignore"]});return s(c)}catch{}},Ze=(e,t,n=process.cwd(),i={},r,o)=>new Promise((s,a)=>{let c="",l=fo(e),p=Date.now(),d=[i.MACH_APP_ROOT?h.join(i.MACH_APP_ROOT,"node_modules/.bin"):"",i.MACH_SOURCE_ROOT?h.join(i.MACH_SOURCE_ROOT,"node_modules/.bin"):"","/opt/homebrew/bin","/usr/local/bin","/usr/bin","/bin","/usr/sbin","/sbin",h.join(fe.homedir(),".npm-global/bin")],y=[...(process.env.PATH||"").split(":"),...d].filter((C,E,P)=>C&&P.indexOf(C)===E).join(":");process.env[`${A.envPrefix}DEBUG`]&&console.log(S.magenta(`[${A.nameUpper}_DEBUG] Execution PATH: ${y}`));let g={...process.env,...i,PATH:y,LANG:"en_US.UTF-8",LC_ALL:"en_US.UTF-8"};r&&process.env[`${A.envPrefix}DEBUG`]&&(r(S.magenta(`[ENVIRONMENT] node: ${process.execPath}
-`)),r(S.magenta(`[ENVIRONMENT] PATH: ${y}
-`)),r(S.magenta(`[ENVIRONMENT] command: ${e} ${t.join(" ")}
-`)));let b=e;if(["node","npm","npx","pod"].includes(e)){let C=h.dirname(process.execPath),E=h.join(C,e);I.existsSync(E)&&(b=E,r&&r(S.dim(`[EXEC] Using absolute path: ${b}
-`)))}let w=Qn(b,t,{stdio:"pipe",cwd:n,shell:!0,env:g,detached:process.platform!=="win32"});if(o){if(o.aborted){if(w.pid)try{process.kill(-w.pid,"SIGTERM")}catch{w.kill()}return a(new Error("Command aborted"))}o.addEventListener("abort",()=>{if(w.pid)try{process.kill(-w.pid,"SIGTERM")}catch{w.kill()}a(new Error("Command aborted"))})}let N=(C,E)=>{if(!l){E.write(C);return}let P=C.replace(/\r/g,`
-`).split(`
-`).filter(mo);if(P.length>0){E.write(`${P.join(`
-`)}
-`),p=Date.now();return}let O=Date.now();O-p>3e4&&(E.write(`[xcodebuild] still running; detailed output is streamed to Mach logs.
-`),p=O)};w.stdout.on("data",C=>{let E=C.toString();c=Yn(c,E),N(E,process.stdout),r&&r(E)}),w.stderr.on("data",C=>{let E=C.toString();c=Yn(c,E),N(E,process.stderr),r&&r(E)}),w.on("close",C=>{C===0?s(C):a(new Error(uo(e,t,C,c)))}),w.on("error",C=>a(C))}),Nt=async(e,t,n,i,r)=>{try{await Ze("xcodebuild",e,t,n,i,r)}catch(o){if(!Io(o))throw o;v.warn(S.yellow("CocoaPods script permission denied. Repairing Pods script permissions and retrying xcodebuild once...")),ni(t),await Ze("xcodebuild",e,t,n,i,r)}},Co=e=>{let t=Math.floor(e/1e3%60),n=Math.floor(e/(1e3*60)%60),i=Math.floor(e/(1e3*60*60)%24),r=[];return i>0&&r.push(`${i}h`),n>0&&r.push(`${n}m`),(t>0||r.length===0)&&r.push(`${t}s`),r.join(" ")},Qe=(e,t)=>{let n=[];try{if(!I.existsSync(e))return n;let i=I.readdirSync(e);for(let r of i){let o=h.join(e,r);try{let s=I.statSync(o);if(t.some(c=>r.endsWith(c))){n.push(h.resolve(o));continue}s.isDirectory()&&(n=n.concat(Qe(o,t)))}catch{}}}catch{}return n},ii=(e,t)=>{let n=yt(e);if(!n)throw new Error(`Invalid iOS CFBundleVersion from ${t}: "${e||""}". Apple requires one to three period-separated integers, for example "42" or "1.2.3". If you see "[Decryption Failed]", fix/remove the broken BUILD_NUMBER secret and rebuild.`);return n},on=(e,t)=>We("/usr/libexec/PlistBuddy",["-c",`Print :${t}`,e],{encoding:"utf-8"}).trim(),at=(e,t)=>{try{return on(e,t)}catch{return""}},Jn=e=>String(e||"").replace(/\.app$/i,"").replace(/[^a-z0-9]/gi,"").toLowerCase(),bo=e=>{try{return I.statSync(e).isDirectory()}catch{return!1}},So=(e,t,n)=>{if(!I.existsSync(e))throw new Error(`iOS simulator build output directory was not found: ${e}`);let i=I.readdirSync(e).filter(l=>l.endsWith(".app")).map(l=>h.join(e,l)).filter(bo);if(i.length===0){let p=Qe(e,[".app"]).map(d=>h.relative(e,d)).join(", ");throw new Error(`No top-level iOS simulator .app product was found in ${e}.`+(p?` Nested .app bundles found but ignored: ${p}`:""))}let r=new Set([t,n.iosScheme,n.scheme,n.appName].filter(Boolean).map(l=>Jn(String(l))).filter(Boolean)),o=i.map(l=>{let p=h.join(l,"Info.plist"),d=I.existsSync(p)?at(p,"CFBundleName"):"",u=I.existsSync(p)?at(p,"CFBundleDisplayName"):"",y=I.existsSync(p)?at(p,"CFBundleExecutable"):"",g=I.existsSync(p)?at(p,"CFBundleIdentifier"):"",b=y?h.join(l,y):"";return{appPath:l,bundleIdentifier:g,executable:y,isValid:I.existsSync(p)&&!!y&&I.existsSync(b),names:[h.basename(l,".app"),d,u,y].map(Jn).filter(Boolean)}}),s=o.filter(l=>l.isValid);if(s.length===0)throw new Error(`No valid iOS simulator .app product was found in ${e}. Candidates: `+o.map(l=>h.basename(l.appPath)).join(", "));let c=s.find(l=>l.names.some(p=>r.has(p)))||(s.length===1?s[0]:null);if(!c)throw new Error(`Multiple iOS simulator .app products were found in ${e}: `+s.map(l=>{let p=l.bundleIdentifier?` (${l.bundleIdentifier})`:"";return`${h.basename(l.appPath)}${p}`}).join(", ")+`. Set ios.scheme in ${A.configFileName} so ${A.name} can select the app target safely.`);return c.appPath},wo=(e,t)=>{let n=h.join(e,"Info.plist");if(!I.existsSync(n))throw new Error(`Could not validate iOS build number: ${n} not found.`);let i=ii(on(n,"CFBundleVersion"),n);return t?qt(i,t,n):i},ri=(e,t=[])=>{if(!I.existsSync(e))return t;for(let n of I.readdirSync(e,{withFileTypes:!0})){if(!n.isDirectory()||n.isSymbolicLink())continue;let i=h.join(e,n.name);n.name!=="Frameworks"&&((n.name.endsWith(".app")||n.name.endsWith(".appex"))&&t.push(i),ri(i,t))}return t},zn=(e,t)=>[e,...ri(e)].filter((i,r,o)=>o.indexOf(i)===r).map(i=>({bundlePath:i,buildNumber:wo(i,t)})),oi=e=>{let t=h.join(e,"Info.plist");if(!I.existsSync(t))throw new Error(`Could not validate iOS app executable: ${t} not found.`);let n=at(t,"CFBundleExecutable");if(!n)throw new Error(`Could not validate iOS app executable: CFBundleExecutable missing in ${t}.`);let i=h.join(e,n);if(!I.existsSync(i))throw new Error(`Could not validate iOS app executable: ${i} not found.`);return i},vo=()=>process.arch==="arm64"?"arm64":"x86_64",si=e=>{let t=oi(e),n="";try{n=We("lipo",["-info",t],{encoding:"utf-8"}).trim()}catch(r){throw new Error(`Could not inspect iOS simulator executable architecture for ${h.basename(e)}: ${r.message}`)}let i=vo();if(!new RegExp(`\\b${i}\\b`).test(n))throw new Error(`iOS simulator app ${h.basename(e)} cannot be installed on this runner because its executable does not include the required ${i} simulator architecture. lipo output: ${n}. Check the React Native iOS project ARCHS/EXCLUDED_ARCHS settings for iphonesimulator builds.`);return n},Eo=e=>{try{return We("xcrun",["vtool","-show-build",e],{encoding:"utf-8"}).trim()}catch(t){throw new Error(`Could not inspect iOS executable build platform for ${h.basename(e)}: ${t.message}`)}},ai=e=>{let t=oi(e),n=Eo(t);if(!/\bplatform\s+IOSSIMULATOR\b/i.test(n))throw new Error(`iOS simulator app ${h.basename(e)} was built for the wrong Apple platform. A simulator artifact must contain PLATFORM IOSSIMULATOR, not an iPhone device binary. vtool output: ${n}`);return n},ci=(e,t)=>{let i=We("unzip",["-Z1",e],{encoding:"utf-8"}).split(`
-`).map(o=>o.trim()).filter(o=>/^Payload\/.+\.(?:app|appex)\/Info\.plist$/.test(o)&&!o.includes("/Frameworks/"));if(i.length===0)throw new Error(`Could not validate iOS build number: ${h.basename(e)} has no Payload/*.app/Info.plist.`);let r=I.mkdtempSync(h.join(fe.tmpdir(),`${A.nameLower}-ipa-plist-`));try{let o="";for(let[s,a]of i.entries()){let c=h.join(r,`Info-${s}.plist`),l=We("unzip",["-p",e,a]);I.writeFileSync(c,l);let p=`${h.basename(e)}:${a}`,d=ii(on(c,"CFBundleVersion"),p);t&&qt(d,t,p),/^Payload\/[^/]+\.app\/Info\.plist$/.test(a)&&(o=d)}if(!o)throw new Error(`Could not validate iOS build number: ${h.basename(e)} has no main application Info.plist.`);return o}finally{I.rmSync(r,{recursive:!0,force:!0})}},Po=e=>`'${e.replace(/'/g,"'\\''")}'`,No=()=>process.execPath&&I.existsSync(process.execPath)?process.execPath:We("which",["node"],{encoding:"utf-8"}).trim(),li=(e,t,n)=>{if(!I.existsSync(e))return;let i=No();t.NODE_BINARY=i;let r=h.join(e,".xcode.env.local");I.writeFileSync(r,`export NODE_BINARY=${Po(i)}
-`);let o=`[NODE] Xcode NODE_BINARY: ${i}
-`;n&&n(S.dim(o)),v.info(S.dim(o.trim()))},Wc=async(e,t,n={},i,r={})=>{let o=Rt(),s=Date.now(),a=e.platform,c=e.buildProfile||"production",l=ht(e.framework),p=Ct(process.cwd(),e.appDirectory,{requireAppDirectory:!0}),d=p.sourceRoot,u=p.appRoot;e.appDirectory=p.appDirectory;let y=()=>({...zt(n,c,e),MACH_SOURCE_ROOT:d,MACH_APP_ROOT:u}),g=async(k,F={})=>{if(i)for(let H=1;H<=3;H++)try{await Z.patch(`/builds/${i}/${t}`,{status:k,...F});return}catch(ce){let re=ce?.response?.data?.message||ce?.message||String(ce);console.error(`[reportStatus] attempt ${H}/3 failed (status=${k}): ${re}`),H<3&&await new Promise(ve=>setTimeout(ve,2e3))}},b=new AbortController,{signal:w}=b,N=null;i&&(N=setInterval(async()=>{try{(await Z.get(`/builds/${i}/${t}`)).data.status==="cancelled"&&(v.warn(S.yellow(`
-\u{1F6D1} Build cancelled from dashboard. Terminating...`)),b.abort(),N&&clearInterval(N))}catch{}},5e3));let C=h.join(d,".mach-cache"),E="setup",P="",O=null,B=async()=>{if(!P||!i)return;let k=P;P="";try{let F=k;Object.values(n).forEach(H=>{if(H&&H.length>5){let ce=H.replace(/[.*+?^${}()|[\]\\]/g,"\\$&");F=F.replace(new RegExp(ce,"g"),"[SECRET]")}}),await Z.post(`/builds/${i}/${t}/logs`,{log:F,step:E})}catch{}},X=async()=>{O&&(clearTimeout(O),O=null),await B(),lo(C,t),N&&(clearInterval(N),N=null);try{let k=h.join(fe.tmpdir(),`${A.buildPrefix}-${t}.keychain-db`);I.existsSync(k)&&(J(`security delete-keychain "${k}"`,{stdio:"ignore"}),v.info(S.dim("\u{1F511} Build keychain deleted.")))}catch{}try{let k=h.join(fe.homedir(),"Library/MobileDevice/Provisioning Profiles");if(I.existsSync(k)){let F=I.readdirSync(k).filter(H=>H.includes(t)||H.startsWith(`${A.nameLower}-temp-${t}`));for(let H of F)I.unlinkSync(h.join(k,H))}}catch{}},_=async k=>{i&&(P+=k,P.length>=8192?(O&&(clearTimeout(O),O=null),await B()):O||(O=setTimeout(()=>{O=null,B()},2e3)))},V=async k=>{E=k,await _(`[STEP_START:${k}] ${Math.floor(Date.now()/1e3)}
-`)},D=async(k,F,H,ce)=>await Ze(k,F,H,ce,re=>{_(re)},w);v.info(S.blue(`\u{1F680} Starting local build for ${a} (${c})...`));try{co(C,t)}catch(k){throw await g("failed",{error:k.message,endTime:Date.now()}),k}await g("building"),await V("setup"),a==="ios"&&!e.simulator&&n.MACH_IOS_BUILD_NUMBER_LOCKED==="1"&&n.BUILD_NUMBER&&(v.info(S.dim(`Auto build number: ${n.BUILD_NUMBER}`)),await _(`[BUILD_NUMBER] ${n.BUILD_NUMBER}
-`)),await V("lock"),l.applyLocalProcessEnv(e);try{await V("clone"),v.info(S.dim("Preparing source...")),await V("read_config");let k=h.join(d,A.configFileName);if(I.existsSync(k)){let $=JSON.parse(I.readFileSync(k,"utf-8"))?.build?.[c]||{};await _(`[CONFIG] Profile: ${c}, distribution: ${$.distribution||"not set"}, simulator: ${$.simulator||!1}
-`)}if(await V("read_package"),e.nodeVersion){let R=process.env.NVM_DIR||h.join(fe.homedir(),".nvm"),$=h.join(R,"versions","node"),Y;if(I.existsSync($)){let M=I.readdirSync($).sort().reverse(),te=e.nodeVersion.startsWith("v")?e.nodeVersion:`v${e.nodeVersion}`,me=M.find(de=>de===te||de.startsWith(te+".")||de.startsWith(`v${e.nodeVersion}.`));me&&(Y=h.join($,me,"bin"))}if(Y&&I.existsSync(Y)){let M=process.env.PATH||"";process.env.PATH=`${Y}:${M}`,await _(`[NODE] Switched to Node ${e.nodeVersion} \u2014 using ${Y}
-`),v.info(S.green(`\u2713 Node switched to ${e.nodeVersion} (${Y})`))}else await _(`[NODE] Warning: Node ${e.nodeVersion} not found in nvm. Run: nvm install ${e.nodeVersion} on the build machine.
-`),v.warn(S.yellow(`Node ${e.nodeVersion} not found in nvm \u2014 using system default`))}await V("deps"),o.start("Checking dependencies...");let F=so(C),H=ro(d),ce=I.existsSync(h.join(d,"node_modules")),re=I.existsSync(h.join(d,"yarn.lock")),ve=I.existsSync(h.join(d,"bun.lockb"));ce&&F.node&&F.node!==H&&(o.stop("Dependency fingerprint changed \u2014 clearing node_modules for clean install..."),await _(`[CACHE] package.json/lockfile changed \u2014 wiping node_modules
-`),I.rmSync(h.join(d,"node_modules"),{recursive:!0,force:!0}),ce=!1);let Q="npm",oe=["install","--prefer-offline"];re?(Q="yarn",oe=["install","--prefer-offline"]):ve&&(Q="bun",oe=["install"]),ce?o.stop("Cached node_modules found. Syncing dependencies..."):o.stop("No cached dependencies. Running fresh install..."),e.preBuild&&(v.info(S.blue("Running pre-install hook...")),v.info(S.dim(`> ${e.preBuild}`)),await V("prebuild"),await D("bash",[e.preBuild],d,y())),v.info(S.dim(`Running ${Q} ${oe.join(" ")}...`)),await D(Q,oe,d,y()),F.node=H,Hn(C,F);let le=await l.prepareLocalProject({platform:a,options:e,sourceRoot:d,appRoot:u,cacheMeta:F,cacheMetaDir:C,currentBuildEnv:y,reportStep:V,reportLog:_,loggedRun:D,configureXcodeNodeBinary:li,podsFingerprint:oo,writeCacheMeta:Hn}),ye=le.bundleId||e.iosBundleIdentifier||"",U=le.appName||e.name||"",x=[];if(a==="android")await V("build"),x=await Ro(e,c,n,R=>_(R),w);else if(a==="ios"){await V("signing"),v.info(S.dim("Preparing credentials..."));let R=r?.distributionType;x=await ko(e,t,c,n,i,$=>_($),w,R,$=>V($))}if(e.postBuild&&(v.info(S.blue("Running post-build hook...")),v.info(S.dim(`> ${e.postBuild}`)),await D(e.postBuild,[],d,y())),a==="ios"){let R=yt(e.resolvedBuildNumber||n.BUILD_NUMBER);if(R)for(let $ of x.filter(Y=>Y.endsWith(".ipa"))){let Y=ci($,R);await _(`[IPA FINAL] CFBundleVersion ${Y} matches MACH buildNumber ${R}
-`)}}if(a==="android"){let R=e.resolvedVersionCode||n.ANDROID_VERSION_CODE;if(R){let $=Oe(R,"resolved MACH build assignment");if(x.length===0)throw new Error(`Android build produced no APK or AAB to verify against MACH versionCode ${$}.`);for(let Y of x){let M=nn(Y,$);await _(`[ANDROID FINAL] ${h.basename(Y)} versionCode ${M} matches MACH assignment
-`)}}}let W=Co(Date.now()-s);if(v.success(S.green(`
-\u2713 Local build completed successfully in ${W}`)),await g("building",{...ye&&{bundleId:ye},...U&&{appName:U}}),x.length>0&&(v.info(S.cyan(`
-\u{1F4E6} Generated Artifacts:`)),x.forEach(R=>{let $=h.resolve(R);v.info(S.dim(`  - ${R}`)),v.info(S.gray(`    Path: ${$}`))}),e.interactive)){let R=await no({message:"Install on connected device?"});if(!kt(R)&&R){if(a==="android"){let $=x.find(Y=>Y.endsWith(".apk"))||x[0];await $o($,Y=>_(Y))}else if(a==="ios"){let $=x.find(M=>M.endsWith(".ipa"))||x.find(M=>M.endsWith(".app"))||x[0],Y=ct("ios");e.simulator?await _o($,Y||"",M=>_(M)):await Fo($,Y||"",M=>_(M))}}}await V("upload");let K=[];for(let R of x)try{let $=h.join(fe.tmpdir(),`${t}-${h.basename(R)}`);I.copyFileSync(R,$),K.push($),v.info(S.dim(`  \u{1F4CB} Preserved artifact: ${h.basename(R)}`))}catch{v.warn(S.yellow(`  Failed to preserve artifact: ${h.basename(R)}`))}x=K,v.info(S.dim("\u{1F9F9} Cleaning workspace (preserving dependency cache)..."));try{let R=process.cwd(),$=new Set(["node_modules"]),Y=I.readdirSync(R),M=0;for(let te of Y)if(!$.has(te)){if(te==="ios"){let me=h.join(R,"ios"),de=I.readdirSync(me);for(let Ie of de)if(Ie!=="Pods")try{I.rmSync(h.join(me,Ie),{recursive:!0,force:!0}),M++}catch{}continue}try{I.rmSync(h.join(R,te),{recursive:!0,force:!0}),M++}catch{}}v.info(S.dim(`  Cleaned ${M} items. Cached: node_modules${I.existsSync(h.join(R,"ios","Pods"))?", ios/Pods":""}`)),v.info(S.green("\u{1F512} Security: No source code retained on build server. Only public dependencies cached."))}catch{v.warn(S.yellow("Post-build cleanup encountered errors (non-fatal)."))}try{let $=h.join(fe.homedir(),A.workspacesDir),Y=J(`df -k "${$}" | tail -1 | awk '{print $4}'`,{encoding:"utf8"}).trim(),M=parseInt(Y,10)*1024;if(M<53687091200&&I.existsSync($)){v.info(S.dim(`  \u26A0\uFE0F Low disk space (${(M/1024/1024/1024).toFixed(0)} GB free). Running cache eviction...`));let te=h.basename(process.cwd()),me=I.readdirSync($).filter(de=>de!==te).map(de=>{let Ie=h.join($,de);try{let qe=I.statSync(Ie);return qe.isDirectory()?{name:de,dir:Ie,mtime:qe.mtimeMs}:null}catch{return null}}).filter(Boolean);me.sort((de,Ie)=>de.mtime-Ie.mtime);for(let de of me){if(M>=53687091200)break;try{I.rmSync(de.dir,{recursive:!0,force:!0}),v.info(S.dim(`  \u{1F5D1}\uFE0F Evicted stale workspace: ${de.name}`));let Ie=J(`df -k "${$}" | tail -1 | awk '{print $4}'`,{encoding:"utf8"}).trim();if(parseInt(Ie,10)*1024>=53687091200)break}catch{}}}}catch{}return await X(),x}catch(k){throw await X(),k.message==="Command aborted"?(v.warn(S.yellow(`
-\u274C Build aborted.`)),await g("failed",{error:"Aborted by user",endTime:Date.now()}),k):(v.error(S.red(`
-\u2717 Local build failed: ${k.message}`)),await g("failed",{error:k.message,endTime:Date.now()}),k)}},Ro=async(e,t,n={},i,r)=>{let o=Ct(process.cwd(),e.appDirectory,{requireAppDirectory:!0}),s=h.join(o.appRoot,"android"),a=h.join(o.appRoot,"gradlew"),c=h.join(s,"gradlew"),l=I.existsSync(c)?c:I.existsSync(a)?a:null;if(!l)throw new Error(`Could not find gradlew inside appDirectory "${o.appDirectory}".`);let p=e.developmentClient?"assembleDebug":"assembleRelease";!e.developmentClient&&e.distribution==="store"?p="bundleRelease":!e.developmentClient&&e.distribution==="internal"&&(p="assembleRelease");let d=e.buildCommand||p;v.info(S.blue(`Running Android build: ${d}...`));let u=l===c?s:o.appRoot,y="./gradlew",g=[d],b=ht(e.framework),w={...n,...b.localAndroidEnv(e,t),MACH_APP_NAME:e.appName||e.name||"App",MACH_APP_DIRECTORY:o.appDirectory,MACH_SOURCE_ROOT:o.sourceRoot,MACH_APP_ROOT:o.appRoot},N=e.resolvedVersionCode||n.ANDROID_VERSION_CODE,C=N?Oe(N,"resolved MACH build assignment"):null;C&&(g.push(`-Pandroid.injected.version.code=${C}`),w.ANDROID_VERSION_CODE=C,v.info(S.green(`\u2713 Applying Android versionCode ${C}`)));for(let O of["app/build","build",".cxx"]){let B=h.join(u,O);I.existsSync(B)&&I.rmSync(B,{recursive:!0,force:!0})}st(o.appRoot),o.appRoot!==o.sourceRoot&&st(o.sourceRoot),await Ze(y,g,u,w,i,r);let E=h.join(u,"app/build/outputs"),P=Qe(E,[".apk",".aab"]);if(C&&P.length===0)throw new Error(`Android build produced no APK or AAB to verify against MACH versionCode ${C}.`);if(C)for(let O of P){let B=nn(O,C);v.info(S.dim(`Validated Android versionCode ${B} in ${h.basename(O)}`)),i?.(`[ANDROID VALID] ${h.basename(O)} versionCode ${B} matches MACH assignment
-`)}return P},ko=async(e,t,n,i={},r,o,s,a,c)=>{if(process.platform!=="darwin")throw new Error("iOS builds can only be run on macOS.");let l=Ct(process.cwd(),e.appDirectory,{requireAppDirectory:!0}),p=h.join(l.appRoot,"ios");if(!I.existsSync(p))throw new Error(`Could not find ios/ inside appDirectory "${l.appDirectory}".`);ni(p);let d=I.readdirSync(p),u=d.find(B=>B.endsWith(".xcworkspace")),y=d.find(B=>B.endsWith(".xcodeproj")),g={...zt(i,n,e),MACH_SOURCE_ROOT:l.sourceRoot,MACH_APP_ROOT:l.appRoot};li(p,g,o);let b=e.resolvedBuildNumber||g.BUILD_NUMBER||g.CURRENT_PROJECT_VERSION,w=yt(b);if(b&&!w)throw new Error(`Invalid iOS build number: "${b}". Apple requires one to three period-separated integers. Fix the Dashboard secret or remove it so Mach can use its auto build number.`);let N=w?[`BUILD_NUMBER=${w}`,`CURRENT_PROJECT_VERSION=${w}`,`INFOPLIST_KEY_CFBundleVersion=${w}`]:[];if(w&&(g.BUILD_NUMBER=w,g.CURRENT_PROJECT_VERSION=w,v.info(S.dim(`Using iOS build number: ${w}`))),!u&&!y)throw new Error("Could not find Xcode workspace or project in ios/ directory.");try{let B=J("xcode-select -p").toString().trim();v.info(S.dim(`Using Xcode at: ${B}`))}catch{v.warn(S.dim("Could not detect Xcode path."))}v.info(S.blue("Running iOS build via xcodebuild..."));let C=u?u.replace(".xcworkspace",""):y?.replace(".xcodeproj",""),E=e.iosScheme||C||e.scheme,P=e.developmentClient?"Debug":e.iosConfiguration||"Release",O;try{if(w){O=Mn(p,w,{workspace:u,project:y,scheme:E,configuration:P});let F=O.plistPaths.length>0?`${O.plistPaths.length} Xcode target Info.plist file(s)`:"generated Info.plist build settings";v.info(S.green(`\u2713 Applied iOS buildNumber ${w} to ${F}`)),o&&o(`[VERSIONING] Applied iOS buildNumber ${w} to ${F}
-`)}let B=(r||"default").replace(/[^a-zA-Z0-9-_]/g,"_"),X=h.join(fe.homedir(),`Library/Developer/Xcode/DerivedData/${A.nameLower}`,B);I.mkdirSync(X,{recursive:!0});let _=Vn(g),V=h.join(X,".mach-env-hash"),D=h.join(X,"Build"),k=I.existsSync(V)?I.readFileSync(V,"utf-8").trim():"";if(I.existsSync(D)){let F=k&&k!==_?"Build environment changed \u2014 clearing iOS DerivedData build products.":k?"Clearing iOS DerivedData build products to force a fresh JS bundle.":"DerivedData has no environment stamp \u2014 clearing iOS build products.";v.info(S.dim(F)),I.rmSync(D,{recursive:!0,force:!0})}if(I.writeFileSync(V,_),st(l.appRoot),l.appRoot!==l.sourceRoot&&st(l.sourceRoot),e.simulator){let F=Ao(p,u,y,E,P),H=F||"generic/platform=iOS Simulator",ce=["-destination",H];v.info(S.dim(F?`Building for simulator (Scheme: ${E}, Config: ${P}, Destination: ${H})...`:`Building for simulator (Scheme: ${E}, Config: ${P}, Destination: ${H})...`));let re=[u?"-workspace":"-project",u||y,"-scheme",E,"-configuration",P,"-sdk","iphonesimulator",...ce,"-derivedDataPath",X,...N,"COMPILER_INDEX_STORE_ENABLE=NO","CODE_SIGNING_ALLOWED=NO","CODE_SIGNING_REQUIRED=NO","ONLY_ACTIVE_ARCH=NO","EXCLUDED_ARCHS=","SUPPORTED_PLATFORMS=iphonesimulator"];try{await Nt(re,p,g,o,s)}catch(R){if(!ho(R))throw R;yo(X),st(l.appRoot),l.appRoot!==l.sourceRoot&&st(l.sourceRoot),await Nt(re,p,g,o,s)}let ve=h.join(X,"Build/Products",`${P}-iphonesimulator`),Q=So(ve,E,e),oe=h.basename(Q,".app"),le=at(h.join(Q,"Info.plist"),"CFBundleIdentifier")||"unknown bundle",U=zn(Q,w||void 0)[0].buildNumber,x=si(Q),W=ai(Q),K=h.join(ve,`${oe}_simulator.zip`);return v.info(S.dim(`Selected simulator app: ${h.relative(ve,Q)} (${le}, build ${U})`)),v.info(S.dim(`Simulator executable architecture: ${x}`)),v.info(S.dim(`Simulator executable platform: ${W.split(`
-`).find(R=>/\bplatform\b/i.test(R))?.trim()||"IOSSIMULATOR"}`)),v.info(S.dim(`Creating simulator artifact: ${K}...`)),$e(K),We("zip",["-r",K,h.basename(Q)],{cwd:h.dirname(Q),stdio:"pipe"}),[K]}else{v.info(S.dim(`Archiving (Scheme: ${E}, Config: ${P})...`));let F=h.join(p,"build.xcarchive"),H=h.join(p,"export");I.rmSync(F,{recursive:!0,force:!0}),I.rmSync(H,{recursive:!0,force:!0});let ce=i.IOS_DIST_P12,re=i.IOS_PROVISIONING_PROFILE,ve=i.IOS_P12_PASSWORD||"",Q=[],oe,le,ye={isAppStore:!1,isDevelopment:!1};if(ce&&re){v.info(S.blue("\u{1F510} CI/CD Signing: Importing certificates..."));try{let M=`${A.buildPrefix}-${t}.keychain-db`,te=h.join(fe.tmpdir(),M),me=A.keychainPassword;J(`security create-keychain -p "${me}" "${te}" 2>/dev/null || true`),J(`security set-keychain-settings -t 3600 -l "${te}"`),J(`security unlock-keychain -p "${me}" "${te}"`);let de=h.join(fe.tmpdir(),`cert-${t}.p12`),Ie=Buffer.from(ce,"base64");I.writeFileSync(de,Ie),v.info(S.dim(`P12 data size: ${Ie.length} bytes, first bytes: ${Ie.slice(0,4).toString("hex")}`)),(Ie.length<100||Ie[0]!==48)&&(v.warn(S.yellow("\u26A0\uFE0F  P12 data looks corrupted or was not decrypted correctly.")),v.warn(S.yellow("    This usually means MACH_ENCRYPTION_KEY on the Remote API differs from when credentials were uploaded.")));let qe=[ve,"",A.keychainPassword],hn=!1;for(let Ae of qe)try{J(`security import "${de}" -k "${te}" -P "${Ae}" -A -T /usr/bin/codesign -T /usr/bin/security`,{stdio:"pipe"}),hn=!0,v.info(S.dim(`\u2713 P12 imported successfully with password: ${Ae?"[set]":"[empty]"}`));break}catch(Fe){v.info(S.dim(`  P12 import attempt with password ${Ae?`"${Ae.substring(0,3)}..."`:"[empty]"} failed: ${Fe.message?.split(`
-`)[0]||"unknown"}`))}if(!hn)throw new Error("Failed to import P12.");I.unlinkSync(de),J(`security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k "${me}" "${te}"`);let Mi=J("security list-keychains -d user",{encoding:"utf-8"}).split(`
-`).map(Ae=>Ae.trim().replace(/^"|"$/g,"")).filter(Ae=>Ae.length>0),Gi=[te,...Mi].map(Ae=>`"${Ae}"`).join(" ");J(`security list-keychains -d user -s ${Gi}`),J(`security default-keychain -s "${te}"`);let Tt=h.join(fe.homedir(),"Library/MobileDevice/Provisioning Profiles");I.mkdirSync(Tt,{recursive:!0});let yn=Buffer.from(re,"base64"),Dt=h.join(Tt,`${A.nameLower}-temp-${t}.mobileprovision`);I.writeFileSync(Dt,yn);let Bt=yn.toString("utf-8"),In=/<key>get-task-allow<\/key>\s*<true\/>/.test(Bt);ye={isAppStore:!Bt.includes("<key>ProvisionedDevices</key>")&&!In,isDevelopment:In};try{let Fe=J(`security cms -D -i "${Dt}"`,{encoding:"utf-8"}).match(/<key>UUID<\/key>\s*<string>([^<]+)<\/string>/);le=Fe?Fe[1]:void 0}catch{let Fe=Bt.match(/<key>UUID<\/key>\s*<string>([^<]+)<\/string>/);le=Fe?Fe[1]:void 0}le||(v.warn("Could not extract UUID from provisioning profile. Using fallback."),le=`${A.nameLower}-${t}`);let Vt=h.join(Tt,`${le}.mobileprovision`);I.existsSync(Vt)&&I.unlinkSync(Vt),I.renameSync(Dt,Vt);try{let Ae=J(`security find-identity -v -p codesigning "${te}"`,{encoding:"utf-8"}),Fe=Array.from(Ae.matchAll(/"((?:Apple|iPhone) (?:Distribution|Developer|Development)[^"]*)"/g),dt=>dt[1]),An=ye.isDevelopment?Fe.find(dt=>/\b(Development|Developer)\b/.test(dt)):Fe.find(dt=>/\bDistribution\b/.test(dt)),Cn=Fe[0];(An||Cn)&&(oe=An||Cn,v.info(S.blue(`Identity auto-detected from keychain: "${oe}"`)))}catch{}oe||(oe=ye.isDevelopment?"Apple Development":"Apple Distribution",v.info(S.blue(`Identity fallback (profile heuristic): "${oe}"`))),v.info(S.dim(`Profile type: ${ye.isDevelopment?"Development":ye.isAppStore?"App Store":"Ad-Hoc"}`)),v.info(S.dim(`Identity Detection: get-task-allow=${ye.isDevelopment}, Selected Identity="${oe}"`)),Q.push("CODE_SIGN_STYLE=Manual"),Q.push(`CODE_SIGN_IDENTITY="${oe}"`),Q.push(`PROVISIONING_PROFILE_SPECIFIER=${le}`),e.iosTeamId&&Q.push(`DEVELOPMENT_TEAM=${e.iosTeamId}`)}catch(M){throw v.error(`Signing setup failed: ${M.message}`),M}}else Q.push("-allowProvisioningUpdates"),e.iosTeamId&&Q.push(`DEVELOPMENT_TEAM=${e.iosTeamId}`);c&&await c("archive"),v.info(S.blue(`Archive detected Identity: "${oe}"`)),v.info(S.blue(`Archive detected UUID: "${le}"`)),await Nt(["archive",u?"-workspace":"-project",u||y,"-scheme",E,"-configuration",P,"-archivePath",F,"-derivedDataPath",X,...N,...Q],p,g,o,s);let U=Qe(h.join(F,"Products","Applications"),[".app"]);for(let M of U)for(let te of zn(M,w||void 0))v.info(S.dim(`Validated iOS CFBundleVersion ${te.buildNumber} in ${h.basename(te.bundlePath)}`));let x;le?(ye.isAppStore?x="app-store":ye.isDevelopment?x="development":x="ad-hoc",v.info(S.blue(`Export method from profile: "${x}"`))):(x=e.distribution==="store"?"app-store":e.distribution==="internal"?"ad-hoc":"development",v.warn(S.yellow(`No profile UUID detected. Export method from distribution flag: "${x}"`)));let W=e.iosExportMethod||x,K=e.iosBundleIdentifier||ct("ios"),R=h.join(p,"ExportOptions.plist"),$=`<?xml version="1.0" encoding="UTF-8"?>
-<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
-<plist version="1.0">
-<dict>
-    <key>method</key>
-    <string>${W}</string>
-    <key>destination</key>
-    <string>export</string>
-    <key>signingStyle</key>
-    <string>${le?"manual":"automatic"}</string>
-    <key>thinning</key>
-    <string>&lt;none&gt;</string>
-    ${e.iosTeamId?`<key>teamID</key><string>${e.iosTeamId}</string>`:""}
-    ${K&&le?`
-    <key>provisioningProfiles</key>
-    <dict>
-        <key>${K}</key>
-        <string>${le}</string>
-    </dict>`:""}
-</dict>
-</plist>`;if(I.writeFileSync(R,$),process.env[`${A.envPrefix}DEBUG`]&&v.info(S.magenta(`[${A.nameUpper}_DEBUG] ExportOptions.plist:
-${$}`)),c&&await c("export"),v.info(S.blue(`Exporting with Bundle ID: "${K}"`)),v.info(S.blue(`Exporting with Method: "${W}"`)),o){o(S.magenta(`
-[DIAGNOSTIC] Checking available signing identities...
-`));try{let M=J("security find-identity -v -p codesigning",{encoding:"utf-8"});o(S.magenta(`${M}
-`))}catch(M){o(S.red(`[DIAGNOSTIC] Failed to list identities: ${M.message}
-`))}}await Nt(["-exportArchive","-archivePath",F,"-exportPath",H,"-exportOptionsPlist",R],p,g,o,s),c&&await c("validate");let Y=Qe(H,[".ipa"]);for(let M of Y)try{J(`unzip -t "${M}"`,{stdio:"pipe"});let te=ci(M,w||void 0);o&&o(`[IPA VALID] ${h.basename(M)} \u2014 archive integrity OK
-`),o&&o(`[IPA VALID] CFBundleVersion ${te}
-`)}catch(te){let me=`IPA validation failed for ${h.basename(M)}: ${te.message||"archive may be corrupt"}`;throw o&&o(`[IPA CORRUPT] ${me}
-`),new Error(me)}return Y}}finally{O?.restore()}},ct=e=>{try{let t=h.join(process.cwd(),A.configFileName),n={};if(I.existsSync(t)){if(n=JSON.parse(I.readFileSync(t,"utf-8")),e==="android"&&n.android?.package)return n.android.package;if(e==="ios"&&n.ios?.bundleIdentifier)return n.ios.bundleIdentifier}let r=Ct(process.cwd(),n.appDirectory).appRoot;if(e==="android"){let o=["android/app/build.gradle","app/build.gradle","build.gradle"];for(let s of o){let a=h.join(r,s);if(I.existsSync(a)){let l=I.readFileSync(a,"utf-8").match(/applicationId\s+['"]([^'"]+)['"]/);if(l)return l[1]}}}else{let o=h.join(r,"ios"),s=I.existsSync(o)?o:r,a=Qe(s,["Info.plist"]).filter(p=>!p.includes("/Pods/")&&!p.includes("/build/")&&!p.includes("/DerivedData/"));a.sort((p,d)=>d.split("/").length-p.split("/").length);for(let p of a){let u=I.readFileSync(p,"utf-8").match(/<key>CFBundleIdentifier<\/key>\s*<string>([^<]+)<\/string>/);if(u&&!u[1].includes("$"))return u[1]}let c=Qe(s,[".xcodeproj"]);if(c.length>0){let p=h.join(c[0],"project.pbxproj");if(I.existsSync(p)){let u=I.readFileSync(p,"utf-8").match(/PRODUCT_BUNDLE_IDENTIFIER\s*=\s*"?([^";\s]+)"?;/);if(u)return u[1]}}let l=["app.json","app.config.json","app.config.js","app.config.ts"];for(let p of l){let d=h.join(r,p);if(I.existsSync(d)){let y=I.readFileSync(d,"utf-8").match(/"bundleIdentifier":\s*"([^"]+)"/);if(y)return y[1]}}}}catch{return null}return null},xo=()=>{try{return J("emulator -version",{stdio:"ignore"}),"emulator"}catch{let t=fe.homedir(),n=[h.join(t,"Library/Android/sdk/emulator/emulator"),h.join(t,"Android/Sdk/emulator/emulator"),"/usr/local/lib/android/sdk/emulator/emulator"];for(let i of n)if(I.existsSync(i))return i}return"emulator"},$o=async(e,t)=>{let n=Rt();try{if(J("adb devices").toString().split(`
-`).slice(1).map(s=>s.trim()).filter(s=>s.length>0&&!s.startsWith("*")).map(s=>s.split("	")[0]).length===0){v.warn(S.yellow("No Android devices or emulators found."));let s=xo(),a=[];try{a=J(`${s} -list-avds`).toString().split(`
-`).filter(c=>c.trim().length>0)}catch{}if(a.length>0){let c=await rn({message:"Select an emulator to launch:",options:a.map(d=>({value:d,label:d}))});if(kt(c))return;n.start(`Launching emulator ${c}...`),Qn(s,["-avd",c],{detached:!0,stdio:"ignore"}).unref();let l=0,p=!1;for(;l<60;){try{if(J("adb shell getprop sys.boot_completed",{stdio:"pipe"}).toString().trim()==="1"){p=!0;break}}catch{}await new Promise(d=>setTimeout(d,2e3)),l++}if(!p)throw n.stop("Emulator launch timed out."),new Error("Emulator launch timed out. Please try launching it manually.");n.stop("Emulator launched.")}else throw new Error("No devices found and no emulators available to launch. (Make sure Android SDK is installed)")}n.start("Installing APK on device..."),await Ze("adb",["install","-r",e],process.cwd(),{},t),n.stop("Installation complete.");let o=ct("android");if(o){v.info(S.blue(`\u{1F680} Launching ${o}...`));try{J(`adb shell dumpsys package ${o}`).toString().split(`
-`).find(c=>c.includes("android.intent.action.MAIN")&&c.includes("android.intent.category.LAUNCHER"))?J(`adb shell monkey -p ${o} -c android.intent.category.LAUNCHER 1`,{stdio:"ignore"}):J(`adb shell monkey -p ${o} -c android.intent.category.LAUNCHER 1`,{stdio:"ignore"})}catch{v.warn("Could not auto-launch app. You may need to open it manually.")}}}catch(i){n.stop("Installation failed."),v.error(S.red(`Failed to install APK: ${i.message}`))}},_o=async(e,t,n)=>{let i=Rt();try{if(!J("xcrun simctl list devices booted").toString().includes("(Booted)")){v.warn(S.yellow("No iOS Simulator is currently booted."));let o=J("xcrun simctl list devices --json").toString(),s=JSON.parse(o).devices,a=[];Object.keys(s).forEach(d=>{s[d].forEach(u=>{u.isAvailable&&a.push({...u,runtime:d})})});let c=await rn({message:"Select a simulator to launch:",options:a.map(d=>({value:d.udid,label:`${d.name} (${d.runtime.split(".").pop()})`}))});if(kt(c))return;i.start(`Booting ${c}...`),J(`xcrun simctl boot ${c}`),J(`open -a Simulator --args -CurrentDeviceUDID ${c}`);let l=0,p=!1;for(;l<30;){try{if(J("xcrun simctl list devices booted").toString().includes(c)){p=!0;break}}catch{}await new Promise(d=>setTimeout(d,2e3)),l++}if(!p)throw i.stop("Simulator boot timed out."),new Error("Simulator boot timed out.");i.stop("Simulator booted.")}i.start("Installing on iOS Simulator..."),si(e),ai(e),await Ze("xcrun",["simctl","install","booted",e],process.cwd(),{},n),i.stop("Installation complete."),v.info(S.blue(`\u{1F680} Launching ${t}...`)),await Ze("xcrun",["simctl","launch","booted",t],process.cwd(),{},n)}catch(r){i.stop("Installation failed."),v.error(S.red(`Failed to install on Simulator: ${r.message}`))}},Fo=async(e,t,n)=>{let i=Rt();i.start("Scanning for connected iOS devices...");try{let r=J("xcrun devicectl list devices --json-output -").toString(),s=(JSON.parse(r).result?.devices||[]).filter(c=>c.connectionProperties?.transportType==="wired"||c.connectionProperties?.transportType==="localNetwork");if(s.length===0)throw i.stop("No connected iOS devices found."),new Error("Please connect your iPhone via USB or ensure it is on the same Wi-Fi for wireless debugging.");let a=s[0].identifier;if(s.length>1){i.stop();let c=await rn({message:"Select a device to install on:",options:s.map(l=>({value:l.identifier,label:`${l.deviceProperties?.name||l.name||l.model?.name} (${l.model?.name||"iPhone"}) - ${l.identifier}`}))});if(kt(c))return;a=c,i.start(`Installing on ${a}...`)}else i.message(`Installing on ${s[0].model.name}...`);await Ze("xcrun",["devicectl","device","install","app","--device",a,e],process.cwd(),{},n),i.stop("Installation complete."),v.info(S.blue(`\u{1F680} Launching ${t}...`)),await Ze("xcrun",["devicectl","device","launch","app","--device",a,t],process.cwd(),{},n)}catch(r){i.stop("Installation failed."),v.error(S.red(`Failed to install on device: ${r.message}`)),v.info(S.dim('Make sure your device is unlocked and "Developer Mode" is enabled in Settings -> Privacy & Security.'))}};import{createRequire as Oo}from"module";var To=Oo(import.meta.url),Do=To("../package.json"),sn=String(Do.version||"0.0.0");var mi="https://mach-api.securejs.in",Vo=["google-services.json","android/app/google-services.json"],di="0.1.4";function Wo(){return he.join(process.cwd(),A.configFileName)}function $t(){let e=wn();if(!e?.projectId)throw new Error(`No linked MACH project. Run \`${A.nameLower} link\` first.`);return e}function gi(e){se.writeFileSync(Wo(),`${JSON.stringify(e,null,2)}
-`)}function Zo(){return an(he.join(process.cwd(),"package.json"))}function an(e){if(!se.existsSync(e))return null;try{return JSON.parse(se.readFileSync(e,"utf8"))}catch{return null}}function Mo(e){let t=Zo();return!!(t?.dependencies?.[e]||t?.devDependencies?.[e])}function cn(e){let t=process.cwd(),n=an(he.join(t,"node_modules",...e.split("/"),"package.json"));if(typeof n?.version=="string")return n.version;let r=an(he.join(t,"package-lock.json"))?.packages?.[`node_modules/${e}`]?.version;return typeof r=="string"?r:void 0}function Go(e,t){let n=o=>o.replace(/^v/,"").split(/[.-]/).slice(0,3).map(s=>Number.parseInt(s,10)||0),i=n(e),r=n(t);for(let o=0;o<3;o+=1)if(i[o]!==r[o])return i[o]>r[o]?1:-1;return 0}function pi(e,t){let n=cn(e);return!Mo(e)||!n||Go(n,t)<0}function Uo(e,t=!1){let n=process.cwd();return se.existsSync(he.join(n,"pnpm-lock.yaml"))?{command:"pnpm",args:["add",...t?["-D"]:[],e],label:`pnpm add ${t?"-D ":""}${e}`}:se.existsSync(he.join(n,"yarn.lock"))?{command:"yarn",args:["add",...t?["-D"]:[],e],label:`yarn add ${t?"-D ":""}${e}`}:se.existsSync(he.join(n,"bun.lock"))||se.existsSync(he.join(n,"bun.lockb"))?{command:"bun",args:["add",...t?["-d"]:[],e],label:`bun add ${t?"-d ":""}${e}`}:{command:"npm",args:["install",...t?["--save-dev"]:["--save"],"--no-audit","--no-fund",e],label:`npm install ${t?"--save-dev ":"--save "}${e} --no-audit --no-fund`}}function ui(e,t=!1){let n=Uo(e,t);console.log(q.dim(`Installing dependency: ${n.label}`));let i=Bo(n.command,n.args,{cwd:process.cwd(),stdio:"inherit",timeout:12e4,env:{...process.env,NPM_CONFIG_AUDIT:"false",NPM_CONFIG_FUND:"false"}});return i.signal==="SIGTERM"?{ok:!1,note:`${n.label} timed out after 120s. Run it manually, or re-run \`${A.nameLower} push setup --skip-install\` to only generate files.`}:i.error||i.status!==0?{ok:!1,note:`${n.label} failed${i.error?`: ${i.error.message}`:` with code ${i.status}`}.`}:{ok:!0,note:`Installed with ${n.label}.`}}function jo(e,t){let n=[];if(t)return n.push("Dependency installation skipped."),n;if(pi("@radhya/mach-push-react-native",di)){let i=ui(`@radhya/mach-push-react-native@${di}`);if(!i.ok)throw new Error(`${i.note} No application files were wired.`);n.push(i.note)}else n.push(`@radhya/mach-push-react-native is already current (${cn("@radhya/mach-push-react-native")}).`);if(e==="expo")if(pi("@radhya/mach",sn)){let i=ui(`@radhya/mach@${sn}`,!0);if(!i.ok)throw new Error(`${i.note} No Expo configuration was changed.`);n.push(i.note)}else n.push(`@radhya/mach is already current for the Expo config (${cn("@radhya/mach")}).`);return n}function Lo(e,t){return e||t||["google-services.json","android/app/google-services.json"].find(n=>se.existsSync(he.join(process.cwd(),n)))}function hi(e){let t={enabled:!0};return e.appId&&e.publishableKey&&(t.appId=e.appId,t.publishableKey=e.publishableKey),e.apiUrl&&e.apiUrl!==mi&&(t.apiUrl=e.apiUrl),e.environment&&e.environment!=="production"&&(t.environment=e.environment),e.googleServicesFile&&!Vo.includes(e.googleServicesFile)&&(t.googleServicesFile=e.googleServicesFile),t}function Xo(e){return e==="development"?"development":"production"}function yi(e){let t=process.cwd(),n=e==="ios"?"bundleIdentifier":"package";for(let i of["app.json","app.config.json"]){let r=he.join(t,i);if(se.existsSync(r))try{let o=JSON.parse(se.readFileSync(r,"utf8")),a=(o.expo&&typeof o.expo=="object"?o.expo:o)?.[e]?.[n];if(typeof a=="string"&&a.trim())return a.trim()}catch{}}for(let i of["app.config.ts","app.config.js"]){let r=he.join(t,i);if(!se.existsSync(r))continue;let s=se.readFileSync(r,"utf8").match(new RegExp(`${n}\\s*:\\s*['"]([^'"]+)['"]`));if(s?.[1])return s[1]}}function Ii(e,t){return t||Ge(e)||yi("ios")||ct("ios")||void 0}function Ai(e,t){return t||tt(e)||yi("android")||ct("android")||void 0}function Ho(e,t){let n=se.readFileSync(e,"utf8");if(n.includes(t))return"already";let i=/(^[ \t]*)plugins\s*:\s*\[([\s\S]*?)\]/m.exec(n);if(!i||i.index===void 0)return"manual";let r=n.includes(`\r
-`)?`\r
-`:`
-`,o=i[1]||"",s=i[2]||"",a=s.match(/\r?\n([ \t]+)\S/)?.[1]||`${o}  `,c=s.trim().length===0?`${r}${a}'${t}',${r}${o}`:`${r}${a}'${t}',${s}`,l=i[0].indexOf("["),p=`${i[0].slice(0,l+1)}${c}]`;return se.writeFileSync(e,`${n.slice(0,i.index)}${p}${n.slice(i.index+i[0].length)}`),"inserted"}function Ci(){let e="@radhya/mach/expo-plugin",t=["app.config.ts","app.config.js"].find(c=>se.existsSync(he.join(process.cwd(),c)));if(t){let c=Ho(he.join(process.cwd(),t),e);return c==="inserted"?`${t} now includes ${e}.`:c==="already"?`${t} already includes ${e}.`:`Add "${e}" to the plugins array in ${t}; MACH could not safely edit its computed configuration.`}let n=["app.config.json","app.json"].find(c=>se.existsSync(he.join(process.cwd(),c)));if(!n)return`Add "${e}" to the Expo plugins array.`;let i=he.join(process.cwd(),n),r=JSON.parse(se.readFileSync(i,"utf8")),o=r.expo&&typeof r.expo=="object"?r.expo:r,s=Array.isArray(o.plugins)?o.plugins:[];return s.some(c=>(Array.isArray(c)?c[0]:c)===e)?`${n} already includes ${e}.`:(o.plugins=[...s,e],se.writeFileSync(i,`${JSON.stringify(r,null,2)}
-`),`${n} now includes ${e}.`)}async function bi(e){let t=$t(),n=e.app||t.push?.appId,i=e.environment||t.push?.environment||"production";if(n)return{config:t,appId:n,environment:i};let{data:r}=await Z.get(`/projects/${t.projectId}/push/overview?days=1`),s=(r?.apps||[]).filter(a=>a.status!=="disabled").sort((a,c)=>(c.updatedAt||0)-(a.updatedAt||0))[0]?.appId;if(!s)throw new Error(`Push is not configured. Run \`${A.nameLower} push setup\` first.`);return{config:t,appId:s,environment:i}}function fi(e){let t=he.resolve(e);if(!se.existsSync(t))throw new Error(`File not found: ${t}`);return t}function bt(e){let t=e?.response?.data?.message||e?.message||"Unknown error";console.error(q.red(t)),process.exitCode=1}async function el(e){let t=xt();try{let n=$t();if(Wt(n)==="flutter")throw new Error("MACH Push currently supports Expo and bare React Native. Flutter push support is planned for a later release.");let r=Ii(n,e.iosBundle),o=Ai(n,e.androidPackage);if(!r&&!o)throw new Error(`Add ios.bundleIdentifier or android.package to ${A.configFileName}, or pass --ios-bundle/--android-package.`);t.start("Creating MACH Push app..."),await Z.post(`/projects/${n.projectId}/push/apps`,{name:e.name||n.name||"Mobile app",iosBundleId:r,androidPackageName:o});let s=e.environment||"production";n.push=hi({environment:s,googleServicesFile:e.googleServicesFile}),gi(n);let a=n.framework==="expo"?Ci():void 0;t.stop(q.green("MACH Push app created.")),console.log(["",`${q.bold("Client config:")} ${A.configFileName} \u2192 push`,"","Install the mobile SDK:","  npm install @radhya/mach-push-react-native",...n.framework==="expo"?["  npm install --save-dev @radhya/mach",`  ${a}`,"  Run npx expo prebuild."]:[],"",`Next: run \`${A.nameLower} credentials\` and choose Push Notifications.`].join(`
-`))}catch(n){t.stop(q.red("MACH Push setup failed.")),bt(n)}}async function tl(e){let t=xt();try{let n=$t(),i=Wt(n);if(i==="flutter")throw new Error("MACH Push currently supports Expo and bare React Native. Flutter push support is planned for a later release.");let r=Ii(n,e.iosBundle),o=Ai(n,e.androidPackage);if(!r&&!o)throw new Error(`Add ios.bundleIdentifier or android.package to ${A.configFileName}, or pass --ios-bundle/--android-package.`);let s;t.start("Checking the MACH Push app...");let l=((await Z.get(`/projects/${n.projectId}/push/overview?days=1`)).data?.apps||[]).filter(E=>E.status!=="disabled").sort((E,P)=>(P.updatedAt||0)-(E.updatedAt||0)).find(E=>(!r||E.iosBundleId===r)&&(!o||E.androidPackageName===o));if(l)s=l.appId,t.stop(q.green("Existing MACH Push app linked."));else{let{data:E}=await Z.post(`/projects/${n.projectId}/push/apps`,{name:e.name||n.name||"Mobile app",iosBundleId:r,androidPackageName:o});s=E.app.appId,t.stop(q.green("MACH Push app created."))}if(!s)throw new Error("MACH Push did not return a usable application.");let p=n.push,d=e.environment||p?.environment||"production",u=p?.apiUrl||mi,y=Lo(e.googleServicesFile,p?.googleServicesFile);n.push=hi({apiUrl:u,environment:d,googleServicesFile:y}),gi(n);let g=jo(i,!!e.skipInstall),b=i==="expo"?Ci():void 0;if(b?.startsWith('Add "'))throw new Error(b);let w={projectId:n.projectId,apiUrl:u,environment:d},N=_n(process.cwd(),i,w);if(!N.entryFile)throw new Error(N.notes[0]||"MACH could not locate the application entry point.");let C=i==="expo"?{written:[],notes:[]}:On(process.cwd(),{iosBundleId:r,iosEnvironment:Xo(d),googleServicesFile:y});console.log(["",q.green.bold("MACH Push basic setup is ready."),`${q.bold("Framework:")} ${i}`,`${q.bold("Client config:")} ${A.configFileName} \u2192 push`,`${q.bold("Automatic startup:")} ${N.entryFile||"manual entry import required"}`,`${q.bold("Customize callbacks:")} ${N.editableFile||"see the setup notes below"}`,"",...g.map(E=>`\u2022 ${E}`),...b?[`\u2022 ${b}`]:[],...N.notes.map(E=>`\u2022 ${E}`),...C.notes.map(E=>`\u2022 ${E}`),...[...N.written,...C.written].map(E=>`\u2022 Updated ${E}.`),"",`Next: run \`${A.nameLower} credentials\` and choose Push Notifications, then create one new native build.`].join(`
-`))}catch(n){t.stop(q.red("MACH Push setup failed.")),bt(n)}}async function _t(e,t){let n=xt();try{let{config:i,appId:r,environment:o}=await bi(t),s;if(e==="apns"){if(!t.teamId||!t.keyId)throw new Error("APNs requires --team-id and --key-id.");let a=t.privateKey||(t.file?se.readFileSync(fi(t.file),"utf8"):"");if(!a)throw new Error("APNs requires --file or a generated private key.");let c=t.bundleId||Ge(i);if(!c)throw new Error("APNs requires --bundle-id.");s={environment:o,teamId:t.teamId,keyId:t.keyId,bundleId:c,privateKey:a}}else{let a=t.serviceAccount||(t.file?JSON.parse(se.readFileSync(fi(t.file),"utf8")):void 0);if(!a)throw new Error("FCM requires --file or a generated service account.");s={serviceAccount:a}}n.start(`Configuring ${e.toUpperCase()}...`),await Z.put(`/projects/${i.projectId}/push/apps/${r}/credentials/${e}`,s),n.stop(q.green(`${e.toUpperCase()} is ready.`))}catch(i){n.stop(q.red(`${e.toUpperCase()} setup failed.`)),bt(i)}}async function nl(e){let t=xt(),n=!1;try{let{config:i,appId:r,environment:o}=await bi(e),s=e.all?{all:!0,platform:e.platform}:e.token?.length?{machPushTokens:e.token}:e.user?.length?{externalUserIds:e.user}:null;if(!s)throw new Error('Choose --token, --user, or --all. Example: mach push send --all --title "Hello" --body "World"');let a;if(e.data){let d=JSON.parse(e.data);if(!d||typeof d!="object"||Array.isArray(d))throw new Error("--data must be a JSON object.");a=Object.fromEntries(Object.entries(d).map(([u,y])=>[u,String(y)]))}let c=e.badge===void 0?void 0:Number(e.badge),l=e.ttl===void 0?void 0:Number(e.ttl);t.start("Queueing notification..."),n=!0;let{data:p}=await Z.post(`/projects/${i.projectId}/push/send`,{appId:r,environment:o,target:s,notification:{title:e.title,body:e.body,data:a},options:{sound:e.sound,badge:c,ttlSeconds:l,collapseKey:e.collapseKey,androidChannelId:e.androidChannelId}});t.stop(q.green(`Notification queued: ${p.requestId}`))}catch(i){n?t.stop(q.red("Notification was not queued.")):console.error(q.red("Notification was not queued.")),bt(i)}}async function il(e){try{let t=$t(),n=Math.min(Math.max(Number(e.days||30),1),90),{data:i}=await Z.get(`/projects/${t.projectId}/push/overview?days=${n}`),r=i.totals,o=r.requested>0?`${(r.accepted/r.requested*100).toFixed(1)}%`:"\u2014";console.log([`${q.bold("Active devices:")} ${i.activeDevices}`,`${q.bold("Queued requests:")} ${r.queuedRequests}`,`${q.bold("Requested:")} ${r.requested}`,`${q.bold("Provider accepted:")} ${r.accepted}`,`${q.bold("Failed:")} ${r.failed}`,`${q.bold("Retried:")} ${r.retried}`,`${q.bold("Invalid devices:")} ${r.invalidDevices}`,`${q.bold("Acceptance:")} ${o}`].join(`
-`))}catch(t){bt(t)}}import Fi from"axios";import m from"chalk";import{execSync as we,spawnSync as _e}from"child_process";import{createRequire as zo}from"module";import Ft from"crypto";import T from"fs";import j from"path";import wt from"os";import Qo from"adm-zip";var qo=zo(import.meta.url);Fi.defaults.proxy=!1;function un(e,t){if(!T.existsSync(e))return;let n=T.readdirSync(e);for(let i of n){let r=j.join(e,i);if(T.statSync(r).isDirectory()){let s=un(r,t);if(s)return s}else if(t.test(i))return r}}var Me=e=>String(e||"").trim().toLowerCase().replace(/_/g,"-"),Si=e=>String(e||"unknown").trim().replace(/[^a-zA-Z0-9._-]/g,"_")||"unknown",es=(e,t)=>`ios-certificates/${Si(e)}/${Si(t)}/`;function ts(e){return"'"+e.replace(/'/g,"'\\''")+"'"}function wi(...e){let t=e.join(`
-`).split(/\r?\n/).map(n=>n.trim()).filter(Boolean);return t.length>0?t.slice(-8).join(`
-`):void 0}function ns(e,t,n){let i=_e(e,t,{env:n,encoding:"utf-8"});if(!(i.error||i.status!==0))return(i.stdout||i.stderr||"").trim()||void 0}function is(e,t,n,i,r=!1){let o=[`${e} match ${t}`];return n&&o.push(`--app_identifier "${n}"`),i&&o.push(`--profile_name "${i}"`),r&&(t==="adhoc"||t==="development")&&o.push("--force_for_new_devices"),o.join(" ")}function rs(e){let t=e?.match(/ruby\s+(\d+)\.(\d+)/);return t?{major:Number(t[1]),minor:Number(t[2])}:null}function os(e,t,n){let i=rs(e);return i?i.major!==t?i.major<t:i.minor<n:!1}function ln(e){let t=process.env.HOME||wt.homedir(),n=process.env.FASTLANE_GEM_HOME||j.join(t,".local/share/fastlane/3.4.0"),i=[process.env.FASTLANE_BINARY,"/usr/local/bin/fastlane","/opt/homebrew/bin/fastlane","/usr/local/Cellar/fastlane/2.227.0/libexec/bin/fastlane","/opt/homebrew/Cellar/fastlane/2.227.0/libexec/bin/fastlane",j.join(n,"bin/fastlane"),"fastlane"].filter(Boolean);for(let r of i){if(r.includes("/")&&!T.existsSync(r))continue;let o=_e(r,["--version"],{env:e,stdio:"ignore"});if(!o.error&&o.status===0)return{command:r,shellCommand:ts(r),env:e}}return null}function ss(e){if(process.env.MACH_SKIP_FASTLANE_INSTALL==="1")return{ok:!1,detail:"Automatic install skipped because MACH_SKIP_FASTLANE_INSTALL=1."};let t=_e("gem",["--version"],{env:e,encoding:"utf-8"});if(t.error||t.status!==0)return{ok:!1,detail:wi(t.stdout,t.stderr)||"RubyGems is not available."};let n=ns("ruby",["-v"],e);if(os(n,3,2))return{ok:!1,detail:[n?`Detected Ruby: ${n}`:void 0,"The latest fastlane dependency tree now requires Ruby >= 3.2.","Mach skipped automatic gem install because macOS system Ruby is too old for it."].filter(Boolean).join(`
-`)};let i=process.env.HOME||wt.homedir(),r=process.env.FASTLANE_GEM_HOME||j.join(i,".local/share/fastlane/3.4.0"),o=j.join(r,"bin");T.mkdirSync(o,{recursive:!0}),f.info(m.dim("fastlane not found. Installing fastlane into the local Mach cache..."));let s=_e("gem",["install","fastlane","--no-document","--install-dir",r,"--bindir",o],{env:{...e,GEM_HOME:r,GEM_PATH:[r,e.GEM_PATH].filter(Boolean).join(":")},encoding:"utf-8"});if(s.error||s.status!==0){let a=wi(s.stdout,s.stderr);return f.warn(m.yellow("Automatic fastlane install failed.")),a&&f.warn(m.dim(a)),{ok:!1,detail:[n?`Detected Ruby: ${n}`:void 0,a].filter(Boolean).join(`
-`)||void 0}}return f.success(m.green("\u2713 fastlane installed into the local Mach cache.")),{ok:!0}}function as(){return!process.env.CI&&process.stdin.isTTY&&process.stdout.isTTY}function cs(e){let t=_e("brew",["--version"],{env:e,encoding:"utf-8"});if(t.error||t.status!==0)return{ok:!1,detail:"Homebrew is not available on PATH."};f.info(m.dim("Installing fastlane with Homebrew..."));let n=_e("brew",["install","fastlane"],{env:e,stdio:"inherit"});return n.error||n.status!==0?{ok:!1,detail:"brew install fastlane failed."}:(f.success(m.green("\u2713 fastlane installed with Homebrew.")),{ok:!0})}async function ls(e){if(!as())return!1;f.warn(m.yellow("fastlane is required for iOS certificate/profile sync, but it was not found.")),e&&f.info(m.dim(e));let t=await mn({message:"Install fastlane now with Homebrew?",initialValue:!0});return G(t)?(z("Operation cancelled"),!1):!!t}async function ds(){let e=nt(),t=ln(e);if(t)return t;let n=ss(e);e=nt();let i=ln(e);if(i)return i;if(await ls(n.detail)){let r=cs(e);e=nt();let o=ln(e);if(o)return o;throw new Error(["fastlane is required for iOS certificate/profile sync, but it was still not found after Homebrew install.",r.detail?`Homebrew install failed:
-${r.detail}`:void 0,"Try running manually: brew install fastlane","Then run mach credentials again."].filter(Boolean).join(`
-`))}throw new Error(["fastlane is required for iOS certificate/profile sync, but it was not found on PATH.",n.detail?`Automatic install failed:
-${n.detail}`:void 0,"Recommended fix: brew install fastlane","Alternative: install Ruby 3.x, then run: gem install fastlane --no-document","Then run mach credentials again."].filter(Boolean).join(`
-`))}var pe=e=>{if(typeof e!="string")return;let t=e.trim();return t.length>0?t:void 0},gn=e=>pe(e.password)||pe(e.p12Password)||pe(e.certificatePassword)||pe(e.meta?.password)||pe(e.meta?.p12Password)||pe(e.meta?.certificatePassword),Oi=e=>pe(e.keystorePassword)||pe(e.storePassword)||pe(e.meta?.keystorePassword)||pe(e.meta?.storePassword),Ti=e=>pe(e.keyPassword)||pe(e.meta?.keyPassword),ps=e=>pe(e.alias)||pe(e.meta?.alias),vi=e=>e.credentialId||e.id,Ei=e=>e.bundleId||e.bundleIdentifier||e.meta?.bundleId||e.meta?.bundleIdentifier,Pi=e=>e.distributionType||e.meta?.distributionType,Ni=e=>!!gn(e)||!!Oi(e)||!!Ti(e),us=async(e,t,n)=>{if(!["ios_cert","android_keystore"].includes(n.type)||Ni(n))return n;let i=Ei(n),r=Pi(n);if(!i||!r)return n;try{let s=(await Z.get("/credentials/resolve",{params:{projectId:e,platform:t,bundleId:i,distributionType:r}})).data.credentials||[],a=vi(n),c=s.find(l=>{if(l.type!==n.type)return!1;let p=vi(l);return a&&p===a?!0:Ei(l)===i&&Me(Pi(l))===Me(r)&&Ni(l)});return c?{...n,...c,meta:{...n.meta,...c.meta}}:n}catch{return n}},fs=e=>{let t=Me(e);return t==="store"||t==="app-store"?"PRODUCTION":["adhoc","ad-hoc","internal","staging","stage"].includes(t)?"STAGING":"DEVELOPMENT"},ms=(e,t)=>{let n=gn(e);if(n)return n;let i=fs(e.distributionType);return["IOS_P12_PASSWORD",`${A.envPrefix}P12_PASSWORD`,`IOS_P12_PASSWORD_${i}`,`P12_PASSWORD_${i}`,"MACH_P12_PASSWORD","P12_PASSWORD","CERT_PASSWORD"].map(o=>pe(t[o])).find(Boolean)||""},gs=(e,t)=>{let n=Me(e.distributionType),i=n==="store"?"PRODUCTION":["internal","adhoc","ad-hoc","staging","stage"].includes(n)?"STAGING":"DEVELOPMENT",r=["PRODUCTION","STORE","INTERNAL","STAGING","DEVELOPMENT","RELEASE","DEBUG"],o=[`KEYSTORE_PASSWORD_${i}`,`KEYSTORE_PASSWORD_${String(e.distributionType||"").toUpperCase()}`,...r.map(d=>`KEYSTORE_PASSWORD_${d}`),"ANDROID_STORE_PASSWORD","ANDROID_KEYSTORE_PASSWORD","ANDROID_KEYSTONE_PASSWORD","KEYSTORE_PASSWORD"],s=[`KEY_PASSWORD_${i}`,`KEY_PASSWORD_${String(e.distributionType||"").toUpperCase()}`,"ANDROID_KEY_PASSWORD","KEY_PASSWORD"],a=[`KEYSTORE_ALIAS_${i}`,`KEYSTORE_ALIAS_${String(e.distributionType||"").toUpperCase()}`,...r.map(d=>`KEYSTORE_ALIAS_${d}`),"ANDROID_KEY_ALIAS","KEYSTORE_ALIAS"],c=Oi(e)||gn(e)||o.map(d=>pe(t[d])).find(Boolean)||"",l=Ti(e)||s.map(d=>pe(t[d])).find(Boolean)||c;return{alias:ps(e)||a.map(d=>pe(t[d])).find(Boolean)||"",keystorePassword:c,keyPassword:l}},Ri=(e,t,n)=>{let i=e.includes(".")?e.replace(/\.[^.]+$/i,".zip"):`${e}.zip`,r=j.basename(e),o=new Qo;return o.addLocalFile(e,void 0,r),o.addFile(t,Buffer.from(n.endsWith(`
-`)?n:`${n}
-`,"utf8")),o.writeZip(i),i},Di=e=>{let t=e.toLowerCase();return t==="production"||t==="prod"||t.includes("store")||t.endsWith("-production")||t.endsWith("-prod")},hs=e=>{let t=e.toLowerCase();return t==="staging"||t==="stage"||t.includes("preview")||t.includes("adhoc")||t.includes("ad-hoc")||t.endsWith("-staging")||t.endsWith("-stage")},ys=(e,t)=>{let n=et(e,t)||{},i=Me(n.distribution),r=Me(n.iosExportMethod||n.ios?.exportMethod),o=Me(n.environment);return r==="app-store"||i==="store"?"store":r==="development"||i==="development"?"development":r==="ad-hoc"||r==="adhoc"||i==="ad-hoc"||i==="adhoc"||i==="internal"?"adhoc":o==="production"||o==="store"?"store":o==="development"||o==="dev"?"development":o==="staging"||o==="stage"||o==="preview"?"adhoc":Di(t)?"store":hs(t)?"adhoc":"development"},Is=(e,t)=>{let n=et(e,t)||{},i=Me(n.distribution),r=Me(n.environment);return i==="store"||r==="production"||r==="store"||Di(t)?"store":"internal"},As=["development","preview","production"],Cs="U27F4V844T",dn=null;function Ot(){return dn||(dn=qo("@expo/apple-utils")),dn}function ki(e){let t=n=>n.replace(/^.*The password is only used to authenticate with Apple and never stored on Expo servers.*(?:\r?\n)?/gm,"").replace(/^.*Learn more\..*(?:\r?\n)?/gm,"");if(typeof e=="string")return t(e);if(Buffer.isBuffer(e)){let n=e.toString("utf-8"),i=t(n);return i===n?e:Buffer.from(i,"utf-8")}return e}async function bs(e){let t=process.stdout.write.bind(process.stdout),n=process.stderr.write.bind(process.stderr);process.stdout.write=(i,...r)=>t(ki(i),...r),process.stderr.write=(i,...r)=>n(ki(i),...r);try{return await e()}finally{process.stdout.write=t,process.stderr.write=n}}function Bi(e){return T.existsSync(j.resolve(e))?void 0:"File not found"}function Ss(){try{let e=`./${A.configFileName}`;return T.existsSync(e)?JSON.parse(T.readFileSync(e,"utf-8")):{}}catch{return{}}}function ws(e,t){let n=String(e.name||t||"Mobile app").trim().replace(/\s+/g," ")||"Mobile app",i=new Date,r=[i.getFullYear(),String(i.getMonth()+1).padStart(2,"0"),String(i.getDate()).padStart(2,"0")].join(""),o=Ft.randomBytes(2).toString("hex").toUpperCase(),s=` ${r}-${o}`;return`${`MACH Push ${n}`.slice(0,Math.max(1,50-s.length))}${s}`}async function vs(e){let t=e.submit?.production?.ios?.appleId||e.submit?.preview?.ios?.appleId||e.submit?.development?.ios?.appleId,n=await be({message:"Apple ID (for Apple Developer Portal):",initialValue:t,validate:i=>i.includes("@")?void 0:"Enter a valid Apple ID email"});return G(n)&&(z("Operation cancelled"),process.exit(0)),n}async function Es(e){let t=await St({message:`Apple password for ${e} (used only for Apple login, not stored):`,validate:n=>n.trim()?void 0:"Password is required"});return G(t)&&(z("Operation cancelled"),process.exit(0)),t}function Ps(e){return(Array.isArray(e?.services)?e.services:[]).some(n=>n?.id===Cs||/apple push notification|apns/i.test(String(n?.name||"")))}async function Ns(e){let{Keys:t}=Ot(),n=Ke();try{n.start("Fetching existing APNs keys from Apple...");let i=await t.getKeysAsync(e),o=(await Promise.all(i.map(async s=>{try{return await t.getKeyInfoAsync(e,{id:s.id})}catch{return s}}))).filter(Ps);return n.stop(m.green(`Found ${o.length} APNs key${o.length===1?"":"s"}.`)),o}catch(i){throw n.stop(m.red("Could not fetch APNs keys from Apple.")),i}}async function Rs(e){let{Keys:t}=Ot(),i=(await Ns(e)).filter(c=>c.canRevoke!==!1);if(i.length===0)return f.warn(m.yellow("No revokable APNs keys were found for this Apple team.")),!1;let r=await ke({message:"Select an APNs key to revoke:",options:i.map(c=>({value:c.id,label:`${c.name||"Untitled APNs key"} (${c.id})`,hint:c.canDownload?"APNs key, private key may still be downloadable":"APNs key"}))});G(r)&&(z("Operation cancelled"),process.exit(0));let o=i.find(c=>c.id===r);f.warn(m.yellow("Revoking this key can break push notifications for any service currently using it."));let s=await mn({message:`Revoke "${o?.name||"Untitled APNs key"}" (${r})? This cannot be undone.`,initialValue:!1});if(G(s)&&(z("Operation cancelled"),process.exit(0)),!s)return f.info(m.dim("APNs key was not revoked.")),!1;let a=Ke();try{return a.start(`Revoking APNs key ${r}...`),await t.revokeKeyAsync(e,{id:r}),a.stop(m.green(`Revoked APNs key ${r}.`)),!0}catch(c){throw a.stop(m.red(`Could not revoke APNs key ${r}.`)),c}}async function ks(e,t){let{Keys:n}=Ot(),i=0;for(;;){let r=t(),o=Ke();try{o.start(`Creating APNs auth key (${r})...`);let s=await n.createKeyAsync(e,{name:r,isApns:!0});o.message("Downloading APNs private key...");let a=await n.downloadKeyAsync(e,{id:s.id});if(!a)throw new Error("Apple did not return the APNs private key.");return o.stop(m.green(`APNs key generated: ${s.id}`)),{keyId:s.id,keyName:r,privateKey:a}}catch(s){if(o.stop(m.red("APNs key generation failed.")),$s(s)&&i<3){i+=1,f.warn(m.yellow("Apple says that APNs key name already exists. Retrying with a new generated name..."));continue}if(!Vi(s))throw s;Wi(s);let a=await ke({message:"Apple APNs key limit reached. What do you want to do?",options:[{value:"revoke",label:"List and revoke an existing APNs key",hint:"Then Mach will create a new key"},{value:"retry",label:"Try creating again"},{value:"exit",label:"Exit"}]});if((G(a)||a==="exit")&&(z("Operation cancelled"),process.exit(0)),a==="revoke"&&await Rs(e))continue}}}async function xs(e,t){let n=await vs(e);try{let i=await Es(n),{Auth:r}=Ot();f.info(m.dim("Signing in to Apple Developer Portal..."));let o=await bs(()=>r.loginAsync({username:n,password:i},{autoResolveProvider:!0})),s=String(o?.context?.teamId||"").trim().toUpperCase(),a=await ks(o.context,()=>ws(e,t));return{keyId:a.keyId,teamId:s,privateKey:a.privateKey}}catch(i){throw f.error(m.red("APNs key generation failed.")),i}}function Vi(e){let t=[e?.message,e?.response?.data,e?.cause?.message].filter(Boolean).join(`
-`);return/maximum allowed number.*keys/i.test(t)||/already reached the maximum/i.test(t)}function $s(e){let t=[e?.message,e?.response?.data,e?.cause?.message].filter(Boolean).join(`
-`);return/another key with same name exists/i.test(t)||/same name already exists/i.test(t)}function Wi(e){if(f.warn(m.yellow(e?.message||"Could not generate APNs key automatically.")),Vi(e)){f.info(m.dim("Apple rejected the request because this team is already at its APNs auth-key limit.")),f.info(m.dim("If you saved an existing .p8 file, upload it here. If not, delete an unused APNs key in Apple Developer, then generate again.")),f.info(m.dim("Apple only lets you download an APNs .p8 private key when the key is first created."));return}f.info(m.dim("You can upload an existing .p8 key, retry generation, or exit and try again later."))}async function pn(){let e=await ke({message:"Where should Mach save this APNs key?",options:[{value:"all",label:"All environments",hint:"Recommended \u2014 one APNs key works for sandbox and production"},{value:"development",label:"Development only"},{value:"preview",label:"Preview only"},{value:"production",label:"Production only"}]});return G(e)&&(z("Operation cancelled"),process.exit(0)),e==="all"?As:[e]}async function _s(e,t,n,i){let r=i.teamId||e.teamId;if(!r){let o=await be({message:"Apple Team ID:",validate:s=>/^[A-Z0-9]{10}$/i.test(s.trim())?void 0:"Team ID must be exactly 10 letters/numbers"});G(o)&&(z("Operation cancelled"),process.exit(0)),r=o.trim().toUpperCase()}for(let o of t)await _t("apns",{...e,environment:o,privateKey:i.privateKey,teamId:r,keyId:i.keyId,bundleId:n})}async function xi(e,t,n){let i=await be({message:"Path to APNs auth key (.p8):",validate:Bi});G(i)&&(z("Operation cancelled"),process.exit(0));let r=await be({message:"Apple Team ID:",initialValue:e.teamId,validate:s=>s.trim()?void 0:"Team ID is required"});G(r)&&(z("Operation cancelled"),process.exit(0));let o=await be({message:"APNs Key ID:",initialValue:e.keyId,validate:s=>s.trim()?void 0:"Key ID is required"});G(o)&&(z("Operation cancelled"),process.exit(0));for(let s of t)await _t("apns",{...e,environment:s,file:i,teamId:r,keyId:o,bundleId:n})}async function Fs(e){let t=Ss(),n=e.bundleId||Ge(t)||t.push?.iosBundleId;for(;;){let i=await ke({message:"How do you want to configure APNs?",options:[{value:"generate",label:"Generate new APNs key with Apple",hint:"Mach creates, downloads once, and uploads it securely"},{value:"upload",label:"Upload existing .p8 key",hint:"Use a key you already downloaded from Apple"}]});if(G(i)&&(z("Operation cancelled"),process.exit(0)),i==="upload"){let r=await pn();await xi(e,r,n);return}try{let r=await xs(t,n),o=await pn();await _s(e,o,n,r);return}catch(r){Wi(r);let o=await ke({message:"APNs key was not created. What do you want to do?",options:[{value:"upload",label:"Upload existing .p8 key"},{value:"retry",label:"Try generating again"},{value:"exit",label:"Exit"}]});if((G(o)||o==="exit")&&(z("Operation cancelled"),process.exit(0)),o==="upload"){let s=await pn();await xi(e,s,n);return}}}}async function Os(e){let t=await be({message:"Path to Firebase service account JSON:",validate:Bi});G(t)&&(z("Operation cancelled"),process.exit(0));let n;try{n=JSON.parse(T.readFileSync(t,"utf8"))}catch(i){z(`Invalid Firebase service account JSON: ${i.message}`),process.exit(1)}await _t("fcm",{...e,serviceAccount:n})}async function Ts(e,t){if(t==="ios"){await Fs(e);return}await Os(e)}function Ds(e,t,n){let i=T.readFileSync(n,"utf8"),r=Math.floor(Date.now()/1e3),o=Buffer.from(JSON.stringify({alg:"ES256",kid:e,typ:"JWT"})).toString("base64url"),s=Buffer.from(JSON.stringify({iss:t,iat:r,exp:r+1200,aud:"appstoreconnect-v1"})).toString("base64url"),a=`${o}.${s}`,c=Ft.createSign("SHA256");c.update(a);let l=c.sign({key:i,dsaEncoding:"ieee-p1363"}).toString("base64url");return`${a}.${l}`}async function Bs(e,t,n,i){let r=Ds(t,n,i),o=(await import("axios")).default;for(let s of e)try{await o.post("https://api.appstoreconnect.apple.com/v1/devices",{data:{type:"devices",attributes:{name:s.name,udid:s.udid,platform:"IOS"}}},{headers:{Authorization:`Bearer ${r}`,"Content-Type":"application/json"}}),f.info(m.dim(`  \u2713 Registered: ${s.name}`))}catch(a){let c=a.response?.data?.errors;c?.some(p=>p.code==="ENTITY_ERROR.ATTRIBUTE.INVALID.DUPLICATE"||p.detail?.toLowerCase().includes("already registered")||p.detail?.toLowerCase().includes("already exists"))?f.info(m.dim(`  Already on Portal: ${s.name}`)):f.warn(m.yellow(`  Could not register ${s.name}: ${c?.[0]?.detail||a.message}`))}}var Vs=async e=>{Ko(m.bgCyan.black(A.cliTag("Credentials")));let t=await ke({message:"Select platform:",options:[{value:"ios",label:"iOS"},{value:"android",label:"Android"}]});G(t)&&(z("Operation cancelled"),process.exit(0));let n=await ke({message:"What do you want to do?",options:[{value:"setup",label:"Build Credentials (Certs/Profiles)",hint:"Manage everything needed to build your project"},{value:"download",label:"Download credentials (credentials.json)",hint:"Sync credentials from Dashboard to local project"},{value:"service",label:"App Store Connect API Key (Magic)",hint:"Manage your API Key for automated submission"},{value:"push",label:"Push Notifications",hint:t==="ios"?"Upload APNs key":"Upload Firebase service account"},{value:"back",label:"Go back"},{value:"exit",label:"Exit"}].filter(i=>(t==="android"&&i.value==="service"&&(i.label="Google Service Account (JSON)"),!0))});if((G(n)||n==="exit")&&(z("Operation cancelled"),process.exit(0)),n==="back")return Vs(e);n==="setup"?await Ws({...e,platform:t}):n==="download"?await Xs({...e,platform:t}):n==="service"?await xn({...e,platform:t}):n==="push"&&await Ts(e,t),Yo(m.green("Done!"))},Ws=async e=>{let t=Ke(),n=e.platform,i=e.profile;if(!i){let a=await ke({message:"Select credential type:",options:[{value:"development",label:"Development",hint:"Local testing & simulators"},{value:"staging",label:"Ad Hoc / Staging",hint:"Internal distribution & device testing"},{value:"production",label:"Production / App Store",hint:"App Store & Play Store submission"}]});G(a)&&(z("Operation cancelled"),process.exit(0)),i=a}let r=`./${A.configFileName}`;if(!T.existsSync(r)){f.error(`No ${A.configFileName} found. Run \`${A.nameLower} init\` or \`${A.nameLower} link\` first.`);return}let o=JSON.parse(T.readFileSync(r,"utf-8")),{projectId:s}=o;if(!s){f.error(`${A.configFileName} is missing projectId.`);return}if(e.awsProfile&&f.warn(m.yellow(`Ignoring --aws-profile. Authenticating with ${A.name} Cloud...`)),f.info(m.dim(`Setting up credentials for: ${i}`)),n==="ios")await Zs(s,i,e,o);else{let a=Is(o,i);await Us(s,i,a,e,o)}};async function Zs(e,t,n,i){let r=n.bundleId;if(!r){let c=i.submit?.[t]?.ios?.bundleIdentifier||i.submit?.[t]?.ios?.bundleId||Ge(i,t),l=[];try{let d=(await Z.get(`/credentials/${e}`)).data.credentials||[];l=[...new Set(d.filter(u=>u.platform==="ios"&&u.bundleId&&u.bundleId!=="*").map(u=>u.bundleId))]}catch{}if(c&&!l.includes(c)&&l.unshift(c),l.length>0){let p=[...l.map(u=>({value:u,label:u,hint:u===c?"from config":void 0})),{value:"__new__",label:"+ Enter a new Bundle ID"}],d=await ke({message:"Which Bundle ID are you setting up credentials for?",options:p});if(G(d)&&(z("Operation cancelled"),process.exit(0)),d==="__new__"){let u=await be({message:"iOS Bundle ID (e.g. com.example.app):",placeholder:"com.example.app",validate:y=>y.includes(".")?void 0:"Please enter a valid Bundle ID"});G(u)&&(z("Operation cancelled"),process.exit(0)),r=u}else r=d}else{let p=await be({message:"iOS Bundle ID (e.g. com.example.app):",placeholder:"com.example.app",validate:d=>d.includes(".")?void 0:"Please enter a valid Bundle ID"});G(p)&&(z("Operation cancelled"),process.exit(0)),r=p}}f.info(m.dim(`Bundle ID: ${r}`));let o=ys(i,t),s=i.submit?.production?.ios?.appleId;s&&f.info(m.dim(`Using Apple ID from config: ${s}`)),await Gs(e,r,t,o,o==="store"?"appstore":o==="adhoc"?"adhoc":"development",n,i,s)}async function Ms(e){let t="MATCH_ENCRYPTION_PASSPHRASE";try{let s=((await Z.get(`/projects/${e}/secrets/export?env=development`)).data.secrets||{})[t];if(s&&!s.includes("[Decryption Failed]"))return f.info(m.dim("Using existing encryption passphrase from Dashboard")),f.info(m.cyan(`MATCH_PASSWORD: ${s}`)),s;if(s&&s.includes("[Decryption Failed]")){f.warn(m.yellow("\u26A0\uFE0F  Existing MATCH_PASSWORD could not be decrypted (encryption key changed).")),f.info(m.dim("Generating a fresh passphrase and cleaning old certificates..."));let a=Ft.randomBytes(32).toString("base64");try{await Z.post(`/projects/${e}/secrets`,{key:t,value:a,type:"managed",description:"Encryption passphrase for iOS certificates (fastlane match)",visibility:"secret"}),f.success(m.green("\u2713 New encryption passphrase generated and saved"))}catch{}try{await Z.post("/credentials/clean-match-storage",{projectId:e}),f.success(m.green("\u2713 Cleaned old certificates from storage"))}catch{}return a}}catch(r){f.info(m.dim(`Could not fetch existing passphrase from Dashboard: ${r.message}`))}let n=await ke({message:"No active encryption passphrase found on Dashboard. What would you like to do?",options:[{value:"generate",label:"Generate a new secure passphrase",hint:"Safe for first-time setup"},{value:"enter",label:"Enter existing passphrase manually",hint:"Required if you already have certs in S3"},{value:"cancel",label:"Cancel",hint:"Quit"}]});if((G(n)||n==="cancel")&&(z("Operation cancelled"),process.exit(0)),n==="enter"){let r=await St({message:"Enter your MATCH_PASSWORD (encryption passphrase):",validate:s=>s.length>0?void 0:"Passphrase is required"});G(r)&&(z("Operation cancelled"),process.exit(0));let o=r;try{await Z.post(`/projects/${e}/secrets`,{key:t,value:o,type:"managed",description:"Encryption passphrase for iOS certificates (fastlane match)"}),f.success(m.green("\u2713 Saved passphrase to Dashboard"))}catch{}return o}let i=Ft.randomBytes(32).toString("base64");try{await Z.post(`/projects/${e}/secrets`,{key:t,value:i,type:"managed",description:"Encryption passphrase for iOS certificates (fastlane match)",visibility:"secret"}),f.success(m.green("\u2713 Generated and saved encryption passphrase to Dashboard")),f.info(m.cyan(`MATCH_PASSWORD: ${i}`))}catch(r){f.warn(m.yellow(`Could not save passphrase to Dashboard: ${r.message}`))}return i}async function Gs(e,t,n,i,r,o,s,a){let c=Ke(),l=!1,p=b=>{c.start(b),l=!0},d=b=>{l&&(c.stop(b),l=!1)};f.info(m.blue("Configuring iOS certificate management..."));let u,y=pt(s,n),g=y;if(!a){let b=await be({message:"Apple ID (for Apple Developer Portal):",placeholder:"your-email@example.com",validate:w=>w.includes("@")?void 0:"Please enter a valid email"});G(b)&&(z("Operation cancelled"),process.exit(0)),a=b}try{let b=await Ms(e),w="",N="";try{let D=await Z.post("/credentials/build-server-token",{projectId:e});D.data.status==="success"&&D.data.credentials&&(process.env.AWS_ACCESS_KEY_ID=D.data.credentials.accessKeyId,process.env.AWS_SECRET_ACCESS_KEY=D.data.credentials.secretAccessKey,D.data.credentials.sessionToken&&(process.env.AWS_SESSION_TOKEN=D.data.credentials.sessionToken),N=D.data.credentials.region||"ap-south-1",w=D.data.credentials.bucket||A.bucketPrefix,process.env.AWS_REGION=N,delete process.env.AWS_PROFILE)}catch(D){throw f.error(`Failed to authenticate with ${A.name} Cloud.`),D}if(!w||!N){f.error(`Failed to resolve S3 configuration from ${A.name} Cloud.`);return}let C=o.teamId||y.teamId||s.submit?.production?.ios?.appleTeamId;if(!C)try{let k=(await Z.get(`/projects/${e}/secrets`)).data.secrets?.find(F=>F.key==="APPLE_TEAM_ID");k&&(C=k.value,f.info(m.dim(`Using Team ID from Dashboard: ${C}`)))}catch{}C&&C===s.submit?.production?.ios?.appleTeamId&&f.info(m.dim(`Using Apple Team ID from config: ${C}`));let E=await ut({appleId:a,config:s,profile:n,initialTeam:{...y,teamId:C,developerTeamId:y.developerTeamId||C},promptToPersistConfig:!C,saveTeamId:C?void 0:D=>$i(e,D)});if(!E?.teamId)return;C=E.teamId;let P={...y,...E,teamId:C,developerTeamId:E.developerTeamId||y.developerTeamId||C};g=P;let O=es(e,C);f.info(m.dim(`Using match storage prefix: ${O}`));let B=await ds(),X={...B.env};process.env.CI||delete X.CI,p(`Preparing ${r} certificate sync...`),d("Starting certificate sync...");let _=`${A.buildPrefix}-${C}.keychain-db`,V=A.keychainPassword;try{let k=`${process.env.HOME||"/Users/"+(process.env.USER||A.nameLower)}/Library/Keychains/${_}`;f.info(m.dim(`Ensuring keychain exists: ${_}`));try{we(`security create-keychain -p ${V} ${_} 2>/dev/null || true`),we(`security unlock-keychain -p ${V} ${_}`),we(`security set-keychain-settings ${_}`);let U=we("security list-keychains -d user").toString();if(!U.includes(_)){f.info(m.dim(`Adding ${_} to search list`));let W=[...U.replace(/"/g,"").split(`
-`).map(K=>K.trim()).filter(K=>K.length>0),k].join(" ");we(`security list-keychains -d user -s ${W}`)}}catch(U){f.warn(m.dim("Keychain setup warning (non-critical): "+U.message))}let F,H;try{let x=((await Z.get(`/credentials/${e}`)).data.credentials||[]).find(W=>W.type==="asc_api_key"&&W.issuerId);if(x){let W=await Z.get(`/credentials/${x.credentialId}/download`,{params:{projectId:e,format:"raw"}});if(W.data.downloadUrl){let R=await(await import("axios")).default.get(W.data.downloadUrl,{responseType:"arraybuffer"}),$=j.join(wt.tmpdir(),`mach-asc-${Date.now()}`);T.mkdirSync($,{recursive:!0}),u=j.join($,`AuthKey_${x.keyId}.p8`),T.writeFileSync(u,Buffer.from(R.data)),F=x.keyId,H=x.issuerId,f.success(m.green("\u2713 ASC API key loaded \u2014 no 2FA required for Portal operations"))}}}catch(U){f.warn(m.dim(`Could not load ASC API key: ${U.message}. Will fall back to Apple ID auth.`))}f.info(m.dim("Generating secure P12 export password..."));let ce=Zi();f.success(m.green("\u2713 Secure P12 password generated."));let re={...X,AWS_REGION:process.env.AWS_REGION||"ap-south-1",AWS_ACCESS_KEY_ID:process.env.AWS_ACCESS_KEY_ID,AWS_SECRET_ACCESS_KEY:process.env.AWS_SECRET_ACCESS_KEY,SSL_CERT_FILE:"/etc/ssl/cert.pem",AWS_CA_BUNDLE:"/etc/ssl/cert.pem",FASTLANE_SSL_CA_CERT:"/etc/ssl/cert.pem",MATCH_PASSWORD:b,FASTLANE_USER:a,FASTLANE_SKIP_UPDATE_CHECK:"1",FASTLANE_TEAM_ID:C,MATCH_KEYCHAIN_NAME:k,MATCH_KEYCHAIN_PASSWORD:V,TERM:process.env.TERM||"xterm-256color",SHELL:process.env.SHELL||"/bin/zsh",MATCH_OUTPUT_PATH:j.join(process.cwd(),"temp_match"),MATCH_STORAGE_MODE:"s3",MATCH_S3_REGION:N,MATCH_S3_BUCKET:w,MATCH_S3_OBJECT_PREFIX:O,MATCH_USERNAME:a,MATCH_APP_IDENTIFIER:t,MATCH_TYPE:r,[`${A.envPrefix}P12_PASSWORD`]:ce,...u&&F&&H?{APP_STORE_CONNECT_API_KEY_KEY_ID:F,APP_STORE_CONNECT_API_KEY_ISSUER_ID:H,APP_STORE_CONNECT_API_KEY_KEY_FILEPATH:u,FASTLANE_SKIP_2FA:"1"}:{}};if(o.force){f.warn(m.yellow(`
-\u26A0\uFE0F  Force flag detected: Hard resetting ${r} certificates...`)),f.info(m.dim("Detected decryption failure loop. Clearing remote storage directly to allow fresh generation.")),f.info(m.cyan(`Current MATCH_PASSWORD: ${b}`)),f.info(m.dim(`Cleaning match storage for Team ID: ${C}...`));try{(await Z.post("/credentials/clean-match-storage",{projectId:e,teamId:C,storagePrefix:O})).data.status==="success"&&f.success(m.green(`\u2713 Cleared S3 storage for Team ID: ${C}`))}catch(U){f.warn(m.yellow(`S3 cleanup via API failed: ${U.message}`)),f.info(m.dim("Continuing to attempt standard nuke..."))}try{we(`${B.shellCommand} match nuke ${r} --skip_confirmation`,{stdio:"inherit",cwd:process.cwd(),env:re}),f.success(m.green(`\u2713 Nuked existing ${r} credentials`))}catch{f.warn(m.yellow("Standard nuke failed (likely due to password mismatch).")),f.info(m.dim("Since S3 was cleared manually, proceeding to generation..."))}}let ve=r==="adhoc"||r==="development";if(r==="adhoc"||r==="development")try{f.info(m.blue("Fetching registered devices..."));let x=(await Z.get("/devices",C?{params:{teamId:C}}:void 0)).data.devices||[];if(C)try{let W=await Z.get("/devices",{params:{teamId:"LEGACY"}}),K=new Map;for(let R of[...x,...W.data.devices||[]])K.set(R.udid,R);x=Array.from(K.values())}catch{}if(x.length===0)f.warn(m.yellow("No registered devices found. Profile will only include devices already on the Apple Developer Portal.")),f.info(m.dim(`Register devices with: ${A.nameLower} device register`));else{let{multiselect:W}=await import("@clack/prompts"),K=await W({message:`Select devices to include in the ${r} profile:`,options:x.map(R=>({value:R.udid,label:`${R.name} (${R.udid.substring(0,12)}...)`,hint:R.model||R.platform})),initialValues:x.map(R=>R.udid)});if(!G(K)&&K.length>0){let R=x.filter($=>K.includes($.udid));if(f.info(m.blue(`Registering ${R.length} device(s) on Apple Developer Portal...`)),C&&await Promise.all(R.filter($=>!$.teamId).map($=>Z.post("/devices",{udid:$.udid,name:$.name,platform:"ios",addedVia:$.addedVia||"cli",teamId:C,teamName:P.teamName}).catch(()=>{}))),u&&F&&H)await Bs(R,F,H,u);else{f.info(m.dim("You will be prompted for a 2FA code once \u2014 type it and press Enter."));for(let $ of R){let Y=$.name.replace(/"/g,'\\"');_e(`${B.shellCommand} run register_device name:"${Y}" udid:"${$.udid}"`,{shell:!0,env:re,stdio:"inherit",cwd:process.cwd()})}}f.info(m.green("\u2713 Device registration complete.")),ve=!0}}}catch(U){f.warn(m.yellow(`Could not fetch registered devices: ${U.message}`)),f.info(m.dim("Continuing without explicit device registration."))}try{let U=`${A.nameLower} ${r} ${t}`,x=is(B.shellCommand,r,t,U,ve);ve&&f.info(m.dim(`Refreshing ${r} provisioning profile when device list changes (--force_for_new_devices).`));let W=_e(x,{shell:!0,cwd:process.cwd(),env:re,stdio:"inherit",encoding:"utf-8"});if(W.status!==0){f.warn(m.yellow(`
-Certificate sync failed. Attempting to create App ID and retry...`));try{we(`${B.shellCommand} produce --app_identifier "${t}" --app_name "${t}" --skip_itc`,{stdio:"inherit",env:re}),f.success(m.green("\u2713 App ID created successfully")),f.info(m.blue("Retrying certificate sync...")),W=_e(x,{shell:!0,cwd:process.cwd(),env:re,stdio:"inherit",encoding:"utf-8"})}catch{}if(W.status!==0)throw new Error("fastlane match failed")}}catch(U){f.warn(m.yellow(`
-Sync failed. This often happens if the encryption passphrase (MATCH_PASSWORD) is incorrect or session expired.`)),f.info(m.cyan(`Failed MATCH_PASSWORD was: ${b}`));let x=await ke({message:"What would you like to do?",options:[{value:"retry_password",label:"Retry with a different MATCH_PASSWORD",hint:"Manually enter the decryption passphrase"},{value:"check_portal",label:"Check Apple Portal (Resolve certificate limits)",hint:"See if you have too many certificates"},{value:"manual",label:"Fallback to manual upload",hint:"Provide .p12 and .mobileprovision files"},{value:"cancel",label:"Cancel",hint:"Go back"}]});if(G(x)||x==="cancel")throw U;if(x==="retry_password"){f.info(m.dim(`
-You are overriding the dashboard passphrase for this session.`));let W=await St({message:"Enter the correct MATCH_PASSWORD for this project:"});if(W&&!G(W)){b=W,f.info(m.blue("Retrying with provided passphrase...")),f.info(m.cyan(`New MATCH_PASSWORD: ${b}`));let K={...re,MATCH_PASSWORD:b};if(_e(`${B.shellCommand} match ${r}`,{shell:!0,stdio:"inherit",cwd:process.cwd(),env:K}).status===0)await Z.post(`/projects/${e}/secrets`,{key:"MATCH_ENCRYPTION_PASSPHRASE",value:b,description:"Encryption passphrase for iOS certificates (fastlane match)",visibility:"secret"}),f.success(m.green("\u2713 Dashboard passphrase updated.")),f.info(m.cyan(`MATCH_PASSWORD: ${b}`));else throw new Error("Sync failed again with provided passphrase.")}else throw U}else if(x==="check_portal")try{let W=await fn(re,r,B.shellCommand);if(W.length>0){if(f.info(m.dim(`Found ${W.length} existing ${r} certificates on the portal.`)),await Ks(r,re,e,B.shellCommand,W)&&(f.info(m.blue("Retrying certificate sync...")),_e(`${B.shellCommand} match ${r}`,{shell:!0,stdio:"inherit",cwd:process.cwd(),env:re}).status!==0))throw new Error("Retry failed")}else throw f.error(m.red("No existing certificates found on portal to resolve.")),U}catch(W){throw f.warn(m.dim(`Portal check warning: ${W.message}`)),U}else throw U}f.success(m.green("\u2713 Certificates fetched and synced"));let Q=j.join(process.cwd(),"temp_match"),oe=j.join(Q,`${A.fastlanePrefix}_export.p12`),le=un(Q,/\.mobileprovision$/);try{let x=`${process.env.HOME||"/Users/"+(process.env.USER||A.nameLower)}/Library/Keychains/${_}`;T.existsSync(Q)||T.mkdirSync(Q,{recursive:!0}),f.info(m.dim("Exporting certificate from keychain for dashboard upload..."));let W=we(`security find-identity -v -p codesigning "${x}"`,{encoding:"utf-8"});f.info(m.dim(`Identities in keychain:
-${W.trim()}`)),we(`security export -k "${x}" -t identities -f pkcs12 -o "${oe}" -P ""`,{stdio:"ignore"});try{let K=we(`openssl pkcs12 -in "${oe}" -nokeys -passin pass: -legacy 2>/dev/null || openssl pkcs12 -in "${oe}" -nokeys -passin pass: 2>/dev/null`,{encoding:"utf-8"});if(!K.includes(C))throw new Error(`Exported P12 does not contain identity for team ${C}. Found: ${K.substring(0,200)}`);f.success(m.green(`\u2713 P12 verified \u2014 contains correct team identity (${C})`))}catch(K){throw new Error(`P12 verification failed: ${K.message}`)}}catch{f.warn(m.dim("Could not export certificate from keychain."))}o.teamId&&!C&&await $i(e,o.teamId);let ye=T.existsSync(oe)?oe:un(Q,/\.p12$/);if(ye&&le){let U,x;try{let W=await fn(re,r,B.shellCommand);W.length>0&&(U=W[0].expires,x=W[0].id)}catch{f.warn(m.dim("Could not fetch expiration date or ID for dashboard record."))}await lt(e,ye,"ios_cert",t,i,void 0,U,o.teamId||C,x,ce,void 0,void 0,P.teamId,P.teamName,P.developerTeamId,P.appStoreConnectTeamId,P.providerId,P.providerName),await lt(e,le,"ios_profile",t,i,void 0,U,o.teamId||C,void 0,void 0,void 0,void 0,P.teamId,P.teamName,P.developerTeamId,P.appStoreConnectTeamId,P.providerId,P.providerName),f.success(m.green("\u2713 Both iOS certificate and provisioning profile uploaded successfully"));try{T.existsSync("./temp_match")&&T.rmSync("./temp_match",{recursive:!0,force:!0})}catch{}}else f.warn(m.yellow("Certificates generated but not found in expected location.")),f.info(m.dim("Falling back to manual upload...")),await _i(e,t,i,g)}catch(D){d("Certificate fetch failed"),f.error(m.red(`Error: ${D.message}`)),f.info(m.dim("Falling back to manual upload...")),await _i(e,t,i,g)}}catch(b){d("iOS setup failed"),f.error(m.red(`Error: ${b.message}`))}finally{if(u)try{T.rmSync(j.dirname(u),{recursive:!0,force:!0})}catch{}}}async function $i(e,t){try{await Z.post(`/projects/${e}/secrets`,{key:"APPLE_TEAM_ID",value:t,description:"Apple Developer Team ID (used for iOS signing)"}),f.success(m.green(`\u2713 Saved Team ID ${t} to Dashboard`))}catch(n){f.warn(m.yellow(`Could not save Team ID to Dashboard: ${n.message}`))}}async function _i(e,t,n,i={}){f.info(m.yellow(`
-Manual Upload Mode`)),f.info("Please provide your certificate and provisioning profile:");let r=await be({message:"Path to .p12 certificate file:",validate:a=>T.existsSync(a)?void 0:"File not found"});G(r)&&(z("Operation cancelled"),process.exit(0));let o=await be({message:"Path to .mobileprovision file:",validate:a=>T.existsSync(a)?void 0:"File not found"});G(o)&&(z("Operation cancelled"),process.exit(0));let s=Ke();s.start(`Uploading to ${A.name} Dashboard...`);try{await lt(e,r,"ios_cert",t,n,void 0,void 0,i.teamId,void 0,void 0,void 0,void 0,i.teamId,i.teamName,i.developerTeamId||i.teamId,i.appStoreConnectTeamId,i.providerId,i.providerName),await lt(e,o,"ios_profile",t,n,void 0,void 0,i.teamId,void 0,void 0,void 0,void 0,i.teamId,i.teamName,i.developerTeamId||i.teamId,i.appStoreConnectTeamId,i.providerId,i.providerName),s.stop("Upload complete"),f.success(m.green("\u2713 iOS credentials uploaded successfully"))}catch(a){throw s.stop("Upload failed"),a}}async function Us(e,t,n,i,r){let o=Ke();f.step(m.blue("Android Credential Setup"));let s=i.bundleId;if(!s){let d=tt(r,t),u=[];try{let g=(await Z.get(`/credentials/${e}`)).data.credentials||[];u=[...new Set(g.filter(b=>b.platform==="android"&&b.bundleId&&b.bundleId!=="*").map(b=>b.bundleId))]}catch{}if(d&&!u.includes(d)&&u.unshift(d),u.length>0){let y=[...u.map(b=>({value:b,label:b,hint:b===d?"from config":void 0})),{value:"__new__",label:"+ Enter a new Package Name"}],g=await ke({message:"Which Package Name are you setting up credentials for?",options:y});if(G(g)&&(z("Operation cancelled"),process.exit(0)),g==="__new__"){let b=await be({message:"Android Package Name (e.g. com.example.app):",placeholder:"com.example.app",validate:w=>w.includes(".")?void 0:"Please enter a valid package name"});G(b)&&(z("Operation cancelled"),process.exit(0)),s=b}else s=g}else{let y=await be({message:"Android Package Name (e.g. com.example.app):",placeholder:"com.example.app",validate:g=>g.includes(".")?void 0:"Please enter a valid package name"});G(y)&&(z("Operation cancelled"),process.exit(0)),s=y}}try{let y=((await Z.get(`/credentials/${e}`)).data.credentials||[]).find(g=>g.platform==="android"&&g.distributionType===n&&g.bundleId===s);if(y){f.warn(m.yellow(`\u26A0\uFE0F  Existing Android credentials found for ${n}`));let g=await be({message:"What would you like to do? (use/new/cancel)",validate:b=>{let w=b.toLowerCase();if(!(w==="use"||w==="new"||w==="cancel"))return"Please type: use, new, or cancel"}});if(G(g)||g.toLowerCase()==="cancel")return;if(g.toLowerCase()==="use"){f.success(m.green("\u2713 Using existing credentials."));return}await Z.delete(`/credentials/${y.credentialId}?projectId=${e}`)}}catch{}let a="./android/app/my-release-key.jks";if(T.existsSync(a)){let d=await mn({message:"Upload existing keystore?"});if(d&&!G(d)){let u=await be({message:"Key alias:",initialValue:"my-key-alias"});if(G(u))return;let y=await St({message:"Keystore password:"});if(G(y))return;let g=await St({message:"Key password (leave blank if same as keystore password):"});if(G(g))return;let b=g.trim()||y;await lt(e,a,"android_keystore",s,n,u,void 0,void 0,void 0,void 0,y,b),f.success(m.green("\u2713 Keystore uploaded"));return}}f.info(m.blue("Generating new Android keystore..."));let c=i.keyAlias||`${A.nameLower}-${Hs()}`,l=Zi(),p=`./${A.nameLower}-${t}.jks`;T.existsSync(p)&&T.unlinkSync(p),o.start("Generating keystore...");try{let d=l.replace(/'/g,"'\\''");we(`keytool -genkeypair -v -keystore "${p}" -alias "${c}" -keyalg RSA -keysize 2048 -validity 10000 -storepass '${d}' -keypass '${d}' -dname "CN=${A.name} Build, OU=Mobile, O=Company, L=City, S=State, C=US"`,{stdio:"inherit"}),o.stop("Keystore generated"),await lt(e,p,"android_keystore",s,n,c,void 0,void 0,void 0,void 0,l,l),f.success(m.green("\u2713 Android credentials uploaded successfully")),f.info(m.cyan(`Key Alias: ${c}`))}catch(d){throw o.stop("Generation failed"),new Error(`Keystore generation failed: ${d.message}`)}}var js=e=>new Promise(t=>setTimeout(t,e));function Ls(e){return/ECONNRESET|ETIMEDOUT|EAI_AGAIN|ENOTFOUND|ECONNABORTED|socket hang up|network|timeout|temporar/i.test(e)||/API_ERROR:\s*(408|409|425|429|5\d\d)/i.test(e)}async function lt(e,t,n,i,r,o,s,a,c,l,p,d,u,y,g,b,w,N){let C=j.basename(t);f.info(m.dim(`Uploading ${C} (Isolated process)...`));let E=new URL(import.meta.url),P=j.dirname(E.pathname),B=[j.join(P,"commands","isolated-upload.js"),e,t,n,i,r,o||"undefined",s||"undefined",a||"undefined",c||"undefined",l||"undefined",p||"undefined",d||"undefined",u||"undefined",y||"undefined",g||"undefined",b||"undefined",w||"undefined",N||"undefined"],X="",_=5;for(let V=1;V<=_;V++){let D=_e("node",B,{stdio:"pipe",encoding:"utf-8",env:{...process.env,AT_CLI_ISOLATED:"1"}});if(D.status===0&&D.stdout.includes("SUCCESS")){f.info(m.dim(`\u2713 ${C} uploaded and registered.`));return}if(D.status===0){f.warn(m.yellow(`Isolated upload finished but success not confirmed: ${D.stdout}`));return}if(X=(D.stderr||D.stdout||D.error?.message||"Unknown isolated upload failure").trim(),!Ls(X)||V>=_)throw f.error(m.red(`Isolated Upload Failed: ${X}`)),new Error(X);let F=Math.min(3e4,1500*Math.pow(2,V-1));f.warn(m.yellow(`Upload failed with a transient error. Retrying ${C} in ${Math.round(F/1e3)}s... (${V}/${_})`)),await js(F)}throw new Error(X||"Unknown isolated upload failure")}async function Xs(e){let t=Ke(),n=e.platform,i=`./${A.configFileName}`;if(!T.existsSync(i)){f.error(`No ${A.configFileName} found. Run \`${A.nameLower} init\` or \`${A.nameLower} link\` first.`);return}let r=JSON.parse(T.readFileSync(i,"utf-8")),{projectId:o}=r;if(!o){f.error(`${A.configFileName} is missing projectId.`);return}try{t.start("Fetching project secrets...");let a=(await Z.get(`/projects/${o}/secrets/export?env=all`)).data.secrets||{};t.stop("Secrets fetched and merged."),t.start("Fetching credentials...");let l=(await Z.get(`/credentials/${o}`)).data.credentials||[];t.stop(`Found ${l.length} metadata records.`);let p=l.filter(g=>g.platform===n);if(p.length===0){f.info(`No ${n} credentials found on Dashboard.`);return}let d="./credentials.json",u={};if(T.existsSync(d))try{u=JSON.parse(T.readFileSync(d,"utf-8"))}catch{f.warn("Could not parse existing credentials.json, creating a new one.")}u[n]||(u[n]={});let y=j.join(process.cwd(),"credentials",n);T.existsSync(y)||T.mkdirSync(y,{recursive:!0});for(let g of p){t.start(`Downloading ${g.type} (${g.distributionType})...`);try{let b=await Z.get(`/credentials/${g.credentialId}/download`,{params:{projectId:o,format:"raw"}});if(b.data.status==="success"&&b.data.downloadUrl){let w=j.join(process.cwd(),"credentials",n,g.distributionType);T.existsSync(w)||T.mkdirSync(w,{recursive:!0});let N=g.s3Key?.split(".").pop()||(g.type.includes("keystore")?"jks":g.type.includes("cert")?"p12":"mobileprovision"),C=`${g.type}.${N}`,E=j.join(w,C),P=await Fi.get(b.data.downloadUrl,{responseType:"arraybuffer"});T.writeFileSync(E,Buffer.from(P.data));let O=j.join("credentials",n,g.distributionType,C),B="",X="",_={alias:"",keystorePassword:"",keyPassword:""};if(n==="ios"&&g.type==="ios_cert"||n==="android"&&g.type==="android_keystore"){let V=await us(o,n,g);if(n==="ios"&&g.type==="ios_cert"&&N.toLowerCase()==="p12"){if(B=ms(V,a),B){let D=Ri(E,`${j.basename(E,j.extname(E))}-password.txt`,B);X=j.join("credentials",n,g.distributionType,j.basename(D))}}else if(n==="android"&&g.type==="android_keystore"&&(_=gs(V,a),_.keystorePassword||_.keyPassword)){let D=[_.alias?`keyAlias=${_.alias}`:void 0,_.keystorePassword?`keystorePassword=${_.keystorePassword}`:void 0,_.keyPassword?`keyPassword=${_.keyPassword}`:void 0].filter(Boolean).join(`
-`),k=Ri(E,`${j.basename(E,j.extname(E))}-passwords.txt`,D);X=j.join("credentials",n,g.distributionType,j.basename(k))}}if(n==="android")g.type==="android_keystore"&&(u.android.keystore={keystorePath:O,keystorePassword:_.keystorePassword,keyAlias:_.alias,keyPassword:_.keyPassword},X&&(u.android.keystore.keystoreArchivePath=X));else if(n==="ios"){let V=g.distributionType==="store"?"production":g.distributionType==="adhoc"?"staging":"development";u.ios[V]||(u.ios[V]={}),g.type==="ios_cert"?(u.ios[V].certificatePath=O,u.ios[V].certificatePassword=B,X&&(u.ios[V].certificateArchivePath=X)):g.type==="ios_profile"&&(u.ios[V].provisioningProfilePath=O)}t.stop(`\u2713 ${g.type} (${g.distributionType}) saved${X?" with password archive":""}.`)}}catch(b){let w=b.response?.data?.message||b.message;t.stop(m.dim(`- Skipped ${g.type} (${g.distributionType}): ${w}`))}}T.writeFileSync(d,JSON.stringify(u,null,2)),f.success(m.green("\u2713 Local credentials.json updated.")),Jo("Credentials have been synced to your local machine. Ensure credentials.json and credentials/ is added to your .gitignore.","Sync Complete")}catch(s){t.stop(m.red("Sync failed.")),f.error(`Error: ${s.message}`)}}function Zi(){let e="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_+=",t="";for(let n=0;n<24;n++)t+=e.charAt(Math.floor(Math.random()*e.length));return t}function Hs(e=8){let t="abcdefghijklmnopqrstuvwxyz0123456789",n="";for(let i=0;i<e;i++)n+=t.charAt(Math.floor(Math.random()*t.length));return n}async function Ks(e,t,n,i,r){let o=r||await fn(t,e,i);if(!o||o.length===0)return!1;let s=await ke({message:"Select a certificate to revoke:",options:[...o.map(a=>({value:`revoke:${a.id}`,label:`Revoke: ${a.name} (${a.expires})`})),{value:"nuke",label:"Revoke All"},{value:"cancel",label:"Cancel"}]});return G(s)||s==="cancel"?!1:s==="nuke"?(we(`${i} match nuke ${e}`,{stdio:"inherit",cwd:process.cwd(),env:t}),!0):typeof s=="string"&&s.startsWith("revoke:")?(await Ys(t,s.split(":")[1],i),!0):!1}async function fn(e,t,n){let i=t==="development"?"development":"distribution",r=`
-lane :${A.fastlanePrefix}_list_certs do
-  require 'spaceship'
-  require 'json'
-  begin
-    Spaceship::Portal.login(ENV['FASTLANE_USER'])
-    Spaceship::Portal.select_team(team_id: ENV['FASTLANE_TEAM_ID'])
-    output = Spaceship::Portal.certificate.all.select { |c|
-      if "${i}" == "development"
-        c.type_display_id.downcase.include?("development")
-      else
-        c.type_display_id.downcase.include?("distribution") || c.type_display_id.downcase.include?("production")
-      end
-    }.map { |c| { id: c.id, name: c.name, expires: c.expires.strftime('%Y-%m-%d'), type: c.type_display_id } }
-    puts "${A.jsonStartMarker}" + output.to_json + "${A.jsonEndMarker}"
-  rescue => e
-    $stderr.puts "ERROR: #{e.message}"
-    exit 1
-  end
-end`,o=j.join(wt.tmpdir(),`/tmp/${A.nameLower}-list-certs-${Date.now()}`),s=j.join(o,"fastlane"),a=j.join(s,"Fastfile");try{T.existsSync(s)||T.mkdirSync(s,{recursive:!0}),T.writeFileSync(a,r);let l=we(`${n} ${A.fastlanePrefix}_list_certs`,{env:{...e,CI:"1",FASTLANE_FASTFILE:a},cwd:o,stdio:["inherit","pipe","inherit"]}).toString().match(new RegExp(`${A.jsonStartMarker}(.*)${A.jsonEndMarker}`));return l?JSON.parse(l[1]):[]}finally{T.existsSync(o)&&T.rmSync(o,{recursive:!0,force:!0})}}async function Ys(e,t,n){let i=`
-lane :${A.fastlanePrefix}_revoke_cert do
-  require 'spaceship'
-  begin
-    Spaceship::Portal.login(ENV['FASTLANE_USER'])
-    Spaceship::Portal.select_team(team_id: ENV['FASTLANE_TEAM_ID'])
-    cert = Spaceship::Portal.certificate.all.find { |c| c.id == "${t}" }
-    cert.revoke! if cert
-  rescue => e
-    $stderr.puts "ERROR: #{e.message}"
-    exit 1
-  end
-end`,r=j.join(wt.tmpdir(),`/tmp/${A.nameLower}-revoke-cert-${Date.now()}`),o=j.join(r,"fastlane"),s=j.join(o,"Fastfile");try{T.existsSync(o)||T.mkdirSync(o,{recursive:!0}),T.writeFileSync(s,i),we(`${n} ${A.fastlanePrefix}_revoke_cert`,{env:{...e,CI:"1",FASTLANE_FASTFILE:s},cwd:r,stdio:["inherit","pipe","inherit"]})}finally{T.existsSync(r)&&T.rmSync(r,{recursive:!0,force:!0})}}export{Va as a,Wa as b,Za as c,Ma as d,Bn as e,Ga as f,ht as g,zt as h,Vn as i,Wn as j,ic as k,rc as l,oc as m,sc as n,to as o,Ct as p,bc as q,Wc as r,ct as s,ea as t,Li as u,Wt as v,pt as w,wn as x,et as y,tt as z,Ge as A,ta as B,xn as C,sn as D,el as E,tl as F,_t as G,nl as H,il as I,Vs as J,Ws as K,Xs as L};