@radhya/mach 2.3.4 → 2.3.5
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -1,11 +1,11 @@
|
|
|
1
|
-
import{a as I,h as G,i as Et,k as
|
|
2
|
-
Apple Team ID is required to fetch certificates.`)),nt.info(it.dim("You can find this at: https://developer.apple.com/account -> Membership Details"));let e=await Yr({message:"Enter your 10-character Apple Team ID:",placeholder:"e.g. SA56KTS33U",validate:t=>/^[A-Z0-9]{10}$/i.test(t.trim())?void 0:"Team ID must be exactly 10 letters/numbers"});return un(e)?(pn("Operation cancelled"),null):{id:e.trim().toUpperCase()}}function so(e){let t=[e.id,e.type].filter(Boolean);return t.length>0?t.join(" \xB7 "):void 0}async function ao(e,t){if(!e.config)return!1;if(e.persistConfig)return!0;if(!e.promptToPersistConfig)return!1;let n=e.profile||"production",i=await Jr({message:`Save Apple Team ID ${t} to ${I.configFileName} for "${n}" profile?`,initialValue:n==="production"});return un(i)?(pn("Operation cancelled"),null):i}async function Rt(e){let t=e.initialTeam?.teamId?.trim().toUpperCase();if(t){let l=e.initialTeam?.developerTeamId?.trim().toUpperCase();return{...e.initialTeam,teamId:t,developerTeamId:l||t}}nt.info(it.blue("Fetching Apple Developer teams..."));let{teams:n,selectedTeam:i}=await oo(e.appleId),r;if(i)r=i,nt.success(it.green(`\u2713 Using Apple Developer team ${r.name||r.id} (${r.id})`));else if(n.length===1)r=n[0],nt.success(it.green(`\u2713 Using Apple Developer team ${r.name||r.id} (${r.id})`));else if(n.length>1){let l=await Kr({message:"Select Apple Developer team:",options:[...n.map(p=>({value:p.id,label:p.name||p.id,hint:so(p)})),{value:"__manual__",label:"Enter Team ID manually",hint:"Use if your team is not listed"}]});if(un(l))return pn("Operation cancelled"),null;r=l==="__manual__"?await ti():n.find(p=>p.id===l)||{id:l}}else nt.warn(it.yellow("Could not list Apple Developer teams automatically.")),r=await ti();if(!r)return null;let o=r.id.trim().toUpperCase(),s=r.name?.trim(),a={...e.initialTeam,teamId:o,teamName:s||e.initialTeam?.teamName,developerTeamId:o},c=await ao(e,o);return c===null?null:(c&&io(e.config,{...r,id:o,name:s},e.profile),e.saveTeamId&&await e.saveTeamId(o,s),a)}var co="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";function mn(){let e=Ne.join(In.tmpdir(),I.nameLower);ue.existsSync(e)||ue.mkdirSync(e,{recursive:!0});let t=Ne.join(e,"manage_asc_keys.rb");return ue.writeFileSync(t,Buffer.from(co,"base64").toString("utf-8"),{mode:493}),t}function gn(){return ut()}function An(e){let t=new Map,n=/-\s+(\d+)\s+\(([^)]+)\)/g,i=/\d+\)\s+"([^"]+)"\s+\((\d+)\)/g,r;for(;(r=n.exec(e))!==null;)t.set(r[1],{id:r[1],name:r[2]});for(;(r=i.exec(e))!==null;)t.set(r[2],{id:r[2],name:r[1]});return Array.from(t.values())}function ii(e){return Pt(e).appStoreConnectTeamId}function ri(e,t,n){return{...gn(),FASTLANE_USER:e,FASTLANE_TEAM_ID:t,...n?{FASTLANE_ITC_TEAM_ID:n,FASTLANE_ASC_TEAM_ID:n}:{}}}function ft(e,t="production",n={}){let i=Pt(e,t),r=n.teamId||i.teamId,o=n.appStoreConnectTeamId||i.appStoreConnectTeamId;return{teamId:r,teamName:n.teamName||i.teamName,developerTeamId:n.developerTeamId||i.developerTeamId||r,appStoreConnectTeamId:o,providerId:n.providerId||i.providerId||o,providerName:n.providerName||i.providerName}}function lo(e,t){if(!t.id)return;e.submit||(e.submit={}),e.submit.production||(e.submit.production={}),e.submit.production.ios||(e.submit.production.ios={});let n=e.submit.production.ios;n.appStoreConnectTeamId=t.id,delete n.providerId,delete n.appStoreConnectTeamName,delete n.providerName,delete n.appleTeamName}function oi(e,t){lo(e,t);try{ue.writeFileSync(`./${I.configFileName}`,JSON.stringify(e,null,2))}catch{}}async function po(e,t,n,i){let r=xt();r.start("Fetching App Store Connect providers...");let o=Nt("ruby",[e,"teams"],{env:ri(n,i),stdio:["inherit","pipe","pipe"],encoding:"utf-8"});if(o.status!==0){r.stop("Could not fetch providers");let d=An(`${o.stdout||""}
|
|
3
|
-
${o.stderr||""}`);if(d.length>0)return hn(t,d,"Select the App Store Connect provider for this API key:");re.warn(ae.yellow(`Could not list App Store Connect providers: ${o.stderr||"Unknown error"}`));return}let s=(o.stdout||"").match(new RegExp(`${I.jsonStartMarker}(.*)${I.jsonEndMarker}`));if(!s){r.stop("Could not parse providers");return}let a=JSON.parse(s[1]),c=(a.teams||[]).filter(d=>d.id&&d.name);if(r.stop(c.length===1?"Found 1 provider":`Found ${c.length} providers`),c.length===0)return;if(c.length===1){re.success(ae.green(`\u2713 Using App Store Connect provider ${c[0].name} (${c[0].id})`));let d={...c[0],developerTeamName:a.developerTeamName};return
|
|
1
|
+
import{a as I,h as G,i as Et,k as qn}from"./chunk-LO6DP2SE.js";import{log as m,spinner as tt,text as xe,password as bt,select as be,confirm as Jn,isCancel as U,cancel as z,intro as ya,outro as Ia,note as Aa}from"@clack/prompts";import{log as re,spinner as xt,text as Ze,select as mt,isCancel as ye,cancel as Be,note as Gt,confirm as ri}from"@clack/prompts";import ae from"chalk";import{spawnSync as Nt}from"child_process";import ue from"fs";import Ne from"path";import In from"os";import Mt from"fs";import{log as Xr}from"@clack/prompts";var Hr=["react-native","expo","flutter"],Pc="react-native",ti=e=>{if(typeof e!="string")return;let t=e.trim();return t.length>0?t:void 0},ei=e=>ti(e)?.toUpperCase()||void 0,jt=(...e)=>{for(let t of e){let n=ti(t);if(n)return n}};function Jr(e){if(typeof e!="string")return;let t=e.trim().toLowerCase();if(t==="react-native"||t==="react_native"||t==="reactnative")return"react-native";if(t==="expo")return"expo";if(t==="flutter")return"flutter"}function ln(e){let t=Jr(e?.framework);if(t)return t;let n=Hr.map(i=>`"${i}"`).join(", ");throw e?.framework?new Error(`${I.configFileName} has invalid framework "${e.framework}". Use one of: ${n}.`):new Error(`${I.configFileName} is missing required field "framework". Add one of: ${n}.`)}function Pt(e,t="production"){let n=e?.ios||{},i=e?.submit?.[t]?.ios||{},r=e?.submit?.production?.ios||{},o=ei(n.appleTeamId||n.developerTeamId||i.appleTeamId||i.developerTeamId||r.appleTeamId||r.developerTeamId),s=jt(n.appStoreConnectTeamId,n.itcTeamId,n.appleConnectTeamId,i.appStoreConnectTeamId,i.itcTeamId,i.appleConnectTeamId,r.appStoreConnectTeamId,r.itcTeamId,r.appleConnectTeamId);return{teamId:o,teamName:jt(n.appleTeamName,n.teamName,n.developerTeamName,i.appleTeamName,i.teamName,i.developerTeamName,r.appleTeamName,r.teamName,r.developerTeamName),developerTeamId:ei(n.developerTeamId||i.developerTeamId||r.developerTeamId||o),appStoreConnectTeamId:s,providerId:jt(n.providerId,i.providerId,r.providerId,s),providerName:jt(n.providerName,n.appStoreConnectTeamName,i.providerName,i.appStoreConnectTeamName,r.providerName,r.appStoreConnectTeamName)}}function ni(e){if(e){if(!Mt.existsSync(e))return null;try{return JSON.parse(Mt.readFileSync(e,"utf-8"))}catch{return null}}if(!Mt.existsSync(`./${I.configFileName}`))return null;try{return JSON.parse(Mt.readFileSync(`./${I.configFileName}`,"utf-8"))}catch{return null}}function dt(e,t,n=new Set){if(n.has(t))throw new Error(`Circular inheritance detected in profile: ${t}`);n.add(t);let i=e.build?.[t];if(!i)return null;let r={...i};if(i.extends){let o=dt(e,i.extends,n);o&&(r={...o,...i,env:{...o.env,...i.env},ios:{...o.ios,...i.ios},android:{...o.android,...i.android}})}if(r.envGroups&&Array.isArray(r.envGroups)){let o={};for(let s of r.envGroups){let a=e.envGroups?.[s];a?Object.assign(o,a):Xr.warn(`Environment group not found: ${s}`)}r.env={...o,...r.env}}return r}function pt(e,t){let n=t?dt(e,t)||{}:{};if(n.android?.package)return n.android.package;if(n.androidPackage)return n.androidPackage;if(e.android?.package)return e.android.package;if(e.expo?.android?.package)return e.expo.android.package}function Ke(e,t){let n=t?dt(e,t)||{}:{};if(n.ios?.bundleIdentifier)return n.ios.bundleIdentifier;if(n.iosBundleIdentifier)return n.iosBundleIdentifier;if(e.ios?.bundleIdentifier)return e.ios.bundleIdentifier;if(e.ios?.bundleId)return e.ios.bundleId;if(e.expo?.ios?.bundleIdentifier)return e.expo.ios.bundleIdentifier}var Rc=(e,t=`${I.envPrefix}`)=>{let n={},i=(r,o)=>{if(r)for(let s in r){let a=r[s],c=`${o}${s.toUpperCase().replace(/[^A-Z0-9]/g,"_")}`;a!==null&&typeof a=="object"&&!Array.isArray(a)?i(a,`${c}_`):n[c]=String(a)}};return i(e,t),n};import{cancel as pn,confirm as Kr,isCancel as un,log as nt,select as Yr,text as zr}from"@clack/prompts";import it from"chalk";import fn from"fs";import{createRequire as Qr}from"module";import qr from"os";import Wt from"path";var eo=Qr(import.meta.url),dn=null;function to(){return dn||(dn=eo("@expo/apple-utils")),dn}function Zt(e){if(!e)return!1;try{return fn.readdirSync(Wt.join(e,"gems"),{withFileTypes:!0}).some(t=>t.isDirectory()&&t.name.startsWith("fastlane-"))}catch{return!1}}function no(){let e=["/opt/homebrew/opt/fastlane/libexec","/usr/local/opt/fastlane/libexec"];for(let n of e)if(Zt(n))return n;let t=["/opt/homebrew/Cellar/fastlane","/usr/local/Cellar/fastlane"];for(let n of t)try{let i=fn.readdirSync(n,{withFileTypes:!0}).filter(r=>r.isDirectory()).map(r=>r.name).sort((r,o)=>o.localeCompare(r,void 0,{numeric:!0}));for(let r of i){let o=Wt.join(n,r,"libexec");if(Zt(o))return o}}catch{}}function ut(){let e=process.env.HOME||qr.homedir(),t=Wt.join(e,".local/share/fastlane/3.4.0"),n=process.env.FASTLANE_GEM_HOME?.trim(),i=Zt(n)?n:no()||(Zt(t)?t:n||t);return{...process.env,PATH:[process.env.FASTLANE_BIN_DIR,Wt.join(i,"bin"),"/usr/local/opt/ruby/bin","/opt/homebrew/opt/ruby/bin","/usr/local/bin","/opt/homebrew/bin",process.env.PATH].filter(Boolean).join(":"),GEM_HOME:i,GEM_PATH:[i,process.env.GEM_PATH].filter(Boolean).join(":"),FASTLANE_INSTALLED_VIA_HOMEBREW:"true",FASTLANE_SKIP_UPDATE_CHECK:"1",FASTLANE_HIDE_CHANGELOG:"1",LANG:process.env.LANG||"en_US.UTF-8",LC_ALL:process.env.LC_ALL||"en_US.UTF-8",CI:"1"}}function io(e,t="production"){return e.submit||(e.submit={}),e.submit[t]||(e.submit[t]={}),e.submit[t].ios||(e.submit[t].ios={}),e.submit[t].ios}function ro(e,t,n="production"){if(!e||!t.id)return;let i=io(e,n);i.appleTeamId=t.id;try{fn.writeFileSync(`./${I.configFileName}`,JSON.stringify(e,null,2))}catch{}}function oo(e){let t=String(e?.teamId||e?.id||"").trim().toUpperCase();return t?{id:t,name:String(e?.name||"").trim()||void 0,type:String(e?.type||"").trim()||void 0}:null}async function so(e){try{let{Auth:t,Teams:n}=to(),i=await t.loginAsync({username:e},{autoResolveProvider:!0}),r=String(i?.context?.teamId||"").trim().toUpperCase(),o=await n.getTeamsAsync(),s=new Map;for(let l of o||[]){let p=oo(l);p&&s.set(p.id,p)}let a=Array.from(s.values()),c=r?a.find(l=>l.id===r)||{id:r}:void 0;return{teams:a,selectedTeam:c}}catch(t){let n=t instanceof Error?t.message:String(t||"");return nt.warn(it.yellow(`Apple Developer team lookup failed${n?`: ${n}`:""}`)),{teams:[]}}}async function ii(){nt.warn(it.yellow(`
|
|
2
|
+
Apple Team ID is required to fetch certificates.`)),nt.info(it.dim("You can find this at: https://developer.apple.com/account -> Membership Details"));let e=await zr({message:"Enter your 10-character Apple Team ID:",placeholder:"e.g. SA56KTS33U",validate:t=>/^[A-Z0-9]{10}$/i.test(t.trim())?void 0:"Team ID must be exactly 10 letters/numbers"});return un(e)?(pn("Operation cancelled"),null):{id:e.trim().toUpperCase()}}function ao(e){let t=[e.id,e.type].filter(Boolean);return t.length>0?t.join(" \xB7 "):void 0}async function co(e,t){if(!e.config)return!1;if(e.persistConfig)return!0;if(!e.promptToPersistConfig)return!1;let n=e.profile||"production",i=await Kr({message:`Save Apple Team ID ${t} to ${I.configFileName} for "${n}" profile?`,initialValue:n==="production"});return un(i)?(pn("Operation cancelled"),null):i}async function Rt(e){let t=e.initialTeam?.teamId?.trim().toUpperCase();if(t){let l=e.initialTeam?.developerTeamId?.trim().toUpperCase();return{...e.initialTeam,teamId:t,developerTeamId:l||t}}nt.info(it.blue("Fetching Apple Developer teams..."));let{teams:n,selectedTeam:i}=await so(e.appleId),r;if(i)r=i,nt.success(it.green(`\u2713 Using Apple Developer team ${r.name||r.id} (${r.id})`));else if(n.length===1)r=n[0],nt.success(it.green(`\u2713 Using Apple Developer team ${r.name||r.id} (${r.id})`));else if(n.length>1){let l=await Yr({message:"Select Apple Developer team:",options:[...n.map(p=>({value:p.id,label:p.name||p.id,hint:ao(p)})),{value:"__manual__",label:"Enter Team ID manually",hint:"Use if your team is not listed"}]});if(un(l))return pn("Operation cancelled"),null;r=l==="__manual__"?await ii():n.find(p=>p.id===l)||{id:l}}else nt.warn(it.yellow("Could not list Apple Developer teams automatically.")),r=await ii();if(!r)return null;let o=r.id.trim().toUpperCase(),s=r.name?.trim(),a={...e.initialTeam,teamId:o,teamName:s||e.initialTeam?.teamName,developerTeamId:o},c=await co(e,o);return c===null?null:(c&&ro(e.config,{...r,id:o,name:s},e.profile),e.saveTeamId&&await e.saveTeamId(o,s),a)}var lo="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";function mn(){let e=Ne.join(In.tmpdir(),I.nameLower);ue.existsSync(e)||ue.mkdirSync(e,{recursive:!0});let t=Ne.join(e,"manage_asc_keys.rb");return ue.writeFileSync(t,Buffer.from(lo,"base64").toString("utf-8"),{mode:493}),t}function gn(){return ut()}function An(e){let t=new Map,n=/-\s+(\d+)\s+\(([^)]+)\)/g,i=/\d+\)\s+"([^"]+)"\s+\((\d+)\)/g,r;for(;(r=n.exec(e))!==null;)t.set(r[1],{id:r[1],name:r[2]});for(;(r=i.exec(e))!==null;)t.set(r[2],{id:r[2],name:r[1]});return Array.from(t.values())}function oi(e){return Pt(e).appStoreConnectTeamId}function si(e,t,n){return{...gn(),FASTLANE_USER:e,FASTLANE_TEAM_ID:t,...n?{FASTLANE_ITC_TEAM_ID:n,FASTLANE_ASC_TEAM_ID:n}:{}}}function ft(e,t="production",n={}){let i=Pt(e,t),r=n.teamId||i.teamId,o=n.appStoreConnectTeamId||i.appStoreConnectTeamId;return{teamId:r,teamName:n.teamName||i.teamName,developerTeamId:n.developerTeamId||i.developerTeamId||r,appStoreConnectTeamId:o,providerId:n.providerId||i.providerId||o,providerName:n.providerName||i.providerName}}function po(e,t){if(!t.id)return;e.submit||(e.submit={}),e.submit.production||(e.submit.production={}),e.submit.production.ios||(e.submit.production.ios={});let n=e.submit.production.ios;n.appStoreConnectTeamId=t.id,delete n.providerId,delete n.appStoreConnectTeamName,delete n.providerName,delete n.appleTeamName}function ai(e,t){po(e,t);try{ue.writeFileSync(`./${I.configFileName}`,JSON.stringify(e,null,2))}catch{}}async function uo(e,t,n,i){let r=xt();r.start("Fetching App Store Connect providers...");let o=Nt("ruby",[e,"teams"],{env:si(n,i),stdio:["inherit","pipe","pipe"],encoding:"utf-8"});if(o.status!==0){r.stop("Could not fetch providers");let d=An(`${o.stdout||""}
|
|
3
|
+
${o.stderr||""}`);if(d.length>0)return hn(t,d,"Select the App Store Connect provider for this API key:");re.warn(ae.yellow(`Could not list App Store Connect providers: ${o.stderr||"Unknown error"}`));return}let s=(o.stdout||"").match(new RegExp(`${I.jsonStartMarker}(.*)${I.jsonEndMarker}`));if(!s){r.stop("Could not parse providers");return}let a=JSON.parse(s[1]),c=(a.teams||[]).filter(d=>d.id&&d.name);if(r.stop(c.length===1?"Found 1 provider":`Found ${c.length} providers`),c.length===0)return;if(c.length===1){re.success(ae.green(`\u2713 Using App Store Connect provider ${c[0].name} (${c[0].id})`));let d={...c[0],developerTeamName:a.developerTeamName};return ai(t,d),d}let l=c.filter(d=>d.recommended),p=c.filter(d=>!d.recommended);return hn(t,[...l,...p],`Select the App Store Connect provider for Developer Team ${a.developerTeamName||i}:`,a.developerTeamName)}async function hn(e,t,n,i){let r=await mt({message:n,options:t.map(c=>({value:c.id,label:c.name,hint:`${c.id}${c.recommended?" \xB7 recommended":""}`}))});if(ye(r))return Be("Operation cancelled"),null;let o=r,a={...t.find(c=>c.id===o)||{id:o,name:o},developerTeamName:i};return ai(e,a),re.success(ae.green(`\u2713 Using App Store Connect provider ${a.name} (${a.id})`)),a}var ci=async e=>{let t=xt(),n=e.platform,i=`./${I.configFileName}`;if(!ue.existsSync(i)){re.error(`No ${I.configFileName} found. Run \`${I.nameLower} init\` or \`${I.nameLower} link\` first.`);return}let r=JSON.parse(ue.readFileSync(i,"utf-8")),{projectId:o}=r,s=e.profile||"production";if(!o){re.error(`${I.configFileName} is missing projectId.`);return}let a=e.file,c=n==="android"?e.packageName||e.bundleId:e.bundleId||Ke(r,s)||"*";if(n==="android"&&!c&&(c=await fo(o,r,s),c===null))return;if(n==="ios"&&!a){let f=await mt({message:"Manage App Store Connect API Key:",options:[{value:"magic",label:"\u2728 Create new automatically",hint:"Requires Apple ID + 2FA"},{value:"manual",label:"\u{1F50D} Configure manually",hint:"Provide existing .p8 file"},{value:"delete",label:"\u{1F5D1}\uFE0F Delete an existing Key"}]});if(ye(f)){Be("Operation cancelled");return}if(f==="magic"){await ho(o,r);return}if(f==="delete"){await yo(o,r);return}}if(!a){let f=n==="ios"?"https://appstoreconnect.apple.com/access/api":"https://console.cloud.google.com/apis/credentials";Gt(`To submit to the ${n==="ios"?"App Store":"Google Play Store"}, you need a Service Key:
|
|
4
4
|
|
|
5
5
|
1. Open: ${ae.cyan(f)}
|
|
6
6
|
`+(n==="ios"?`2. Generate an "App Store Connect API Key" with ${ae.bold("Admin")} role.
|
|
7
7
|
3. Download the ${ae.bold(".p8")} file.`:`2. Create a "Service Account", generate a ${ae.bold("JSON")} key.
|
|
8
|
-
3. Download the ${ae.bold(".json")} file.`),"Guided Setup"),t.start("Scanning for downloaded keys...");let g=
|
|
8
|
+
3. Download the ${ae.bold(".json")} file.`),"Guided Setup"),t.start("Scanning for downloaded keys...");let g=Io(n);if(t.stop(g.length>0?`Detected ${g.length} potential key(s)`:"No keys detected automatically"),g.length>0){let u=await mt({message:"Found these potential keys. Use one of them?",options:[...g.map(R=>({value:R.path,label:`${Ne.basename(R.path)} (${R.location})`})),{value:"manual",label:"Enter path manually..."}]});if(ye(u)){Be("Operation cancelled");return}u!=="manual"&&(a=u)}if(!a){let u=await Ze({message:`Paste the path to your ${n==="ios"?".p8":".json"} file:`,validate:R=>ue.existsSync(R)?void 0:"File not found"});if(ye(u)){Be("Operation cancelled");return}a=u}}let l=e.issuerId,p=e.keyId;if(n==="ios"){if(!p&&a){let f=Ne.basename(a).match(/AuthKey_(.*)\.p8/);f&&(p=f[1],re.info(`Auto-detected Key ID from filename: ${ae.green(p)}`))}if(!l){let f=await Ze({message:"Enter App Store Connect Issuer ID (Found on the Keys page):",validate:g=>g.length>0?void 0:"Issuer ID is required"});if(ye(f)){Be("Operation cancelled");return}l=f}if(!p){let f=await Ze({message:"Enter App Store Connect Key ID:",validate:g=>g.length>0?void 0:"Key ID is required"});if(ye(f)){Be("Operation cancelled");return}p=f}}if(n==="android"&&(!c||c==="*")){let f=await li();if(f===null)return;c=f}let d=n==="ios"?ft(r,s):{};await yn(o,a,n,l,p,c,{...d})};async function fo(e,t,n){let i=await mo(e),r=go(t,n);if(r&&!i.includes(r)&&i.unshift(r),i.length>0){let o=await mt({message:"Select Android package for this Google Play service key:",options:[...i.map(s=>({value:s,label:s,hint:s===r?"from config":void 0})),{value:"manual",label:"Enter another package name..."}]});if(ye(o))return Be("Operation cancelled"),null;if(o==="manual")return li();if(o!=="manual")return o}if(r){let o=await ri({message:`Use Android package from local config (${r})?`,initialValue:!0});if(ye(o))return Be("Operation cancelled"),null;if(o)return r}}async function li(){let e=await Ze({message:"Android package name for this Google Play service key:",placeholder:"com.example.app",validate:t=>t.includes(".")?void 0:"Enter a valid package name"});return ye(e)?(Be("Operation cancelled"),null):e}async function mo(e){try{let n=(await G.get(`/credentials/${e}`)).data.credentials||[],i=new Set;for(let r of n)(r.platform==="android"||r.type==="android_keystore"||r.type==="google_service_account")&&r.bundleId&&r.bundleId!=="*"&&i.add(r.bundleId);return Array.from(i).sort()}catch(t){return re.warn(ae.yellow(`Could not fetch saved Android package identifiers: ${t.message}`)),[]}}function go(e,t){let n=pt(e,t);if(n)return n;let i=Ne.join(process.cwd(),"app.json");if(ue.existsSync(i))try{return JSON.parse(ue.readFileSync(i,"utf-8")).expo?.android?.package}catch{}let r=Ne.join(process.cwd(),"app.config.json");if(ue.existsSync(r))try{let o=JSON.parse(ue.readFileSync(r,"utf-8"));return o.expo?.android?.package||o.android?.package}catch{}}async function ho(e,t){let n=xt(),i=t.submit?.production?.ios?.appleId,r=ft(t).teamId,o=oi(t);if(!i){let c=await Ze({message:"Apple ID:",placeholder:"your-email@example.com"});if(ye(c))return;i=c}if(!r){let c=await Rt({appleId:i,config:t,profile:"production",initialTeam:ft(t),promptToPersistConfig:!0});if(!c?.teamId)return;r=c.teamId}let s=await Ze({message:"Enter a name for the new API Key:",initialValue:`[${I.name}] Project ${e}`});if(ye(s))return;let a=mn();if(!ue.existsSync(a)){re.error(`Magic Error: Helper script not found at ${a}`);return}try{let c=await uo(a,t,i,r);if(c===null)return;let l;if(c)l=c,o=c.id;else if(!o)return;n.start("Creating App Store Connect API Key...");let p=S=>Nt("ruby",[a,"create",s],{env:si(i,r,S),stdio:["inherit","pipe","pipe"],encoding:"utf-8"}),d=p(o),f=d.stdout||"",g=d.stderr||"";if(d.status!==0){let S=An(`${f}
|
|
9
9
|
${g}`);if(S.length>0){n.stop("Select App Store Connect team"),Gt(`Apple Developer Team IDs look like ${ae.bold(r)}.
|
|
10
10
|
App Store Connect API keys use a numeric provider/team ID instead.`,"Team ID mismatch");let E=await hn(t,S,"Select the App Store Connect provider for this API key:");if(!E)return;l=E,o=E.id,n.start("Creating API Key with selected App Store Connect team..."),d=p(o),f=d.stdout||"",g=d.stderr||""}}if(g&&(g.includes("DEBUG:")||g.includes("ERROR:"))&&g.split(`
|
|
11
11
|
`).forEach(S=>{S.trim()&&re.info(ae.dim(`[Ruby] ${S.trim()}`))}),d.status!==0){n.stop("Failed"),re.error(`Magic creation failed: ${g}`);return}let u=f.match(new RegExp(`${I.jsonStartMarker}(.*)${I.jsonEndMarker}`));if(!u){n.stop("Parse Error"),re.error("Could not parse response from Apple Portal.");return}let R=JSON.parse(u[1]),{id:C,issuerId:v,keyContent:_}=R,b=ft(t,"production",{teamId:r,teamName:l?.developerTeamName,developerTeamId:r,appStoreConnectTeamId:o,providerId:o,providerName:l?.name});if(n.stop("Key Created Successfully"),re.success(`\u2713 Created Key ID: ${ae.green(C)}`),!v){Gt(`Your Issuer ID is shown at the top of:
|
|
@@ -16,15 +16,15 @@ It looks like: ${ae.dim("xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx")}`,"One More Thin
|
|
|
16
16
|
1. Open: ${ae.cyan("https://appstoreconnect.apple.com/access/integrations/api")}
|
|
17
17
|
2. Find Key ID: ${ae.green(C)}
|
|
18
18
|
3. Click ${ae.bold("Download API Key")} (only available once)
|
|
19
|
-
4. Drag & drop the downloaded .p8 file below`,"Manual Step Required");let S=await Ze({message:"Path to the downloaded .p8 file (drag & drop here):",validate:E=>ue.existsSync(E)?void 0:"File not found"});if(ye(S)){Be("Operation cancelled. Credential ID was registered but key content is missing.");return}await yn(e,S,"ios",v,C,t.ios?.bundleIdentifier||"*",{...b})}}catch(c){n.stop("Error"),re.error(`Error: ${c.message}`)}}async function
|
|
20
|
-
${c.stderr||""}`);if(u.length>0){n.stop("Select App Store Connect team");let R=await mt({message:"Select the App Store Connect team to list API keys:",options:u.map(C=>({value:C.id,label:C.name,hint:C.id}))});if(ye(R)){Be("Operation cancelled");return}o=R,n.start("Fetching existing API Keys..."),c=a(o)}}if(c.status!==0){n.stop("Failed"),re.error(`Listing failed: ${c.stderr}`);return}let l=c.stdout.match(new RegExp(`${I.jsonStartMarker}(.*)${I.jsonEndMarker}`));if(!l){n.stop("Parse Error");return}let p=JSON.parse(l[1]);if(n.stop(`Found ${p.length} keys`),p.length===0){re.info("No API Keys found on this team.");return}let d=await mt({message:"Select a key to delete from Apple Developer Portal:",options:[...p.map(u=>({value:u.id,label:`ID: ${u.id} - ${u.name} (${u.role})`})),{value:"cancel",label:"Cancel"}]});if(ye(d)||d==="cancel")return;let f=await
|
|
21
|
-
${n}`),!0}function
|
|
19
|
+
4. Drag & drop the downloaded .p8 file below`,"Manual Step Required");let S=await Ze({message:"Path to the downloaded .p8 file (drag & drop here):",validate:E=>ue.existsSync(E)?void 0:"File not found"});if(ye(S)){Be("Operation cancelled. Credential ID was registered but key content is missing.");return}await yn(e,S,"ios",v,C,t.ios?.bundleIdentifier||"*",{...b})}}catch(c){n.stop("Error"),re.error(`Error: ${c.message}`)}}async function yo(e,t){let n=xt(),i=t.submit?.production?.ios?.appleId,r=ft(t).teamId,o=oi(t);if(!i){let a=await Ze({message:"Apple ID:"});if(ye(a))return;i=a}if(!r){let a=await Rt({appleId:i,config:t,profile:"production",initialTeam:ft(t),promptToPersistConfig:!0});if(!a?.teamId)return;r=a.teamId}n.start("Fetching existing API Keys...");let s=mn();if(!ue.existsSync(s)){re.error(`Magic Error: Helper script not found at ${s}`);return}try{let a=u=>Nt("ruby",[s,"list"],{env:{...gn(),FASTLANE_USER:i,FASTLANE_TEAM_ID:r,...u?{FASTLANE_ITC_TEAM_ID:u,FASTLANE_ASC_TEAM_ID:u}:{}},stdio:["inherit","pipe","pipe"],encoding:"utf-8"}),c=a(o);if(c.status!==0){let u=An(`${c.stdout||""}
|
|
20
|
+
${c.stderr||""}`);if(u.length>0){n.stop("Select App Store Connect team");let R=await mt({message:"Select the App Store Connect team to list API keys:",options:u.map(C=>({value:C.id,label:C.name,hint:C.id}))});if(ye(R)){Be("Operation cancelled");return}o=R,n.start("Fetching existing API Keys..."),c=a(o)}}if(c.status!==0){n.stop("Failed"),re.error(`Listing failed: ${c.stderr}`);return}let l=c.stdout.match(new RegExp(`${I.jsonStartMarker}(.*)${I.jsonEndMarker}`));if(!l){n.stop("Parse Error");return}let p=JSON.parse(l[1]);if(n.stop(`Found ${p.length} keys`),p.length===0){re.info("No API Keys found on this team.");return}let d=await mt({message:"Select a key to delete from Apple Developer Portal:",options:[...p.map(u=>({value:u.id,label:`ID: ${u.id} - ${u.name} (${u.role})`})),{value:"cancel",label:"Cancel"}]});if(ye(d)||d==="cancel")return;let f=await ri({message:`Are you sure you want to delete Key ${d}? This cannot be undone.`});if(!f||ye(f))return;n.start(`Deleting Key ${d}...`);let g=Nt("ruby",[mn(),"delete",d],{env:{...gn(),FASTLANE_USER:i,FASTLANE_TEAM_ID:r,...o?{FASTLANE_ITC_TEAM_ID:o,FASTLANE_ASC_TEAM_ID:o}:{}},stdio:"pipe",encoding:"utf-8"});g.status===0?(n.stop("Deleted"),re.success(`\u2713 Key ${d} has been removed from Apple Portal.`)):(n.stop("Deletion Failed"),re.error(`Error: ${g.stderr}`))}catch(a){n.stop("Error"),re.error(`Error: ${a.message}`)}}async function yn(e,t,n,i,r,o="*",s={}){let a=xt();a.start(`Uploading Service Credentials for ${n}...`);try{let c=n==="ios"?"asc_api_key":"google_service_account",l=new URL(import.meta.url),p=Ne.dirname(l.pathname),d=[Ne.join(p,"isolated-upload.js"),Ne.join(p,"commands","isolated-upload.js"),Ne.resolve(p,"../commands/isolated-upload.js"),Ne.resolve(process.cwd(),`node_modules/.bin/${I.nameLower}-upload`)],f="";for(let u of d)if(ue.existsSync(u)){f=u;break}if(!f)throw new Error("Could not locate isolated-upload.js. Ensure the CLI is properly installed.");let g=Nt("node",[f,e,t,c,o,"service","undefined","undefined",i||"undefined",r||"undefined","undefined","undefined","undefined",s.teamId||"undefined",s.teamName||"undefined",s.developerTeamId||"undefined",s.appStoreConnectTeamId||"undefined",s.providerId||"undefined",s.providerName||"undefined"],{stdio:"pipe",encoding:"utf-8",env:{...process.env,AT_CLI_ISOLATED:"1"}});if(g.status!==0){let u=g.stderr||g.stdout||"Unknown upload failure";a.stop("Upload Failed"),re.error(ae.red(`Upload Failed: ${u}`));return}g.stdout.includes("SUCCESS")?(a.stop("Upload Success"),re.success(ae.green(`\u2713 Service Credentials for ${n} uploaded successfully.`))):(a.stop("Upload Summary"),re.warn(ae.yellow(`Upload finished but success not confirmed: ${g.stdout}`)))}catch(c){a.stop("Upload Error"),re.error(ae.red(`Error: ${c.message}`))}}function Io(e){let t=e==="ios"?".p8":".json",n=[],i=[{path:"./",label:"Project Root"},{path:Ne.join(In.homedir(),"Downloads"),label:"Downloads"}];for(let r of i)if(ue.existsSync(r.path))try{let o=ue.readdirSync(r.path);for(let s of o)if(s.endsWith(t)){if(e==="android"&&!ue.readFileSync(Ne.join(r.path,s),"utf8").includes("service_account")||e==="ios"&&!s.startsWith("AuthKey"))continue;n.push({path:Ne.join(r.path,s),location:r.label})}}catch{}return n}import{spinner as zt}from"@clack/prompts";import te from"chalk";import{spawnSync as oa}from"child_process";import de from"fs";import ve from"path";import K from"fs";import ie from"path";var Ao={expo:["src/app/_layout.tsx","src/app/_layout.ts","src/app/_layout.jsx","src/app/_layout.js","app/_layout.tsx","app/_layout.ts","app/_layout.jsx","app/_layout.js","src/App.tsx","src/App.ts","src/App.jsx","src/App.js","App.tsx","App.ts","App.jsx","App.js"],"react-native":["index.ts","index.tsx","index.js","index.jsx","src/index.ts","src/index.tsx","src/index.js","src/index.jsx","App.tsx","App.ts","App.jsx","App.js","src/App.tsx","src/App.ts","src/App.jsx","src/App.js"]};function $e(e,t){return ie.relative(e,t).split(ie.sep).join("/")}function bo(e,t){return t.find(n=>K.existsSync(ie.join(e,n)))}function Co(e,t){return t.split(ie.sep).join("/").startsWith("src/")?ie.join(e,"src"):e}function So(e){return e.endsWith(".ts")||e.endsWith(".tsx")}function wo(e,t){let n=t.replace(/\.(?:tsx?|jsx?)$/,""),i=ie.relative(ie.dirname(e),n).split(ie.sep).join("/");return i.startsWith(".")||(i=`./${i}`),i}function vo(e,t){let n=K.readFileSync(e,"utf8");if(n.includes("MACH Push setup")||/(?:from\s+)?['"][^'"]*mach-push['"]/.test(n))return!1;let i=wo(e,t);return K.writeFileSync(e,`import '${i}'; // MACH Push setup
|
|
21
|
+
${n}`),!0}function Eo(e,t){let n={projectId:e.projectId};return e.appId&&e.publishableKey&&(n.appId=e.appId,n.publishableKey=e.publishableKey),e.apiUrl&&e.apiUrl!=="https://mach-api.securejs.in"&&(n.apiUrl=e.apiUrl),e.environment&&e.environment!=="production"&&(n.environment=e.environment),`// Generated by \`mach push setup\`. Re-run the command to refresh.
|
|
22
22
|
// Public client configuration only. Provider credentials are never written here.
|
|
23
23
|
${t?`import type { MachPushConfig } from '@radhya/mach-push-react-native';
|
|
24
24
|
`:""}
|
|
25
25
|
|
|
26
26
|
export const machPushConfig${t?": MachPushConfig":""} = ${JSON.stringify(n,null,2)};
|
|
27
|
-
`}function
|
|
27
|
+
`}function Po(e,t){return t?`/**
|
|
28
28
|
* MACH Push application hooks.
|
|
29
29
|
*
|
|
30
30
|
* This file belongs to your app and is never overwritten by
|
|
@@ -137,7 +137,7 @@ export function startMachPush() {
|
|
|
137
137
|
// The basic experience works immediately. Remove this line if your product
|
|
138
138
|
// asks for notification permission at a later, contextual moment.
|
|
139
139
|
void startMachPush()?.catch(() => undefined);
|
|
140
|
-
`}function
|
|
140
|
+
`}function di(e,t,n){let i=[],r=[],o=bo(e,Ao[t]);if(!o)return{written:i,notes:["Could not locate the application entry point. Import the generated mach-push file once from your root App or layout."]};let s=ie.join(e,o),a=Co(e,o),c=So(o)?"ts":"js",l=c==="ts",p=ie.join(a,`mach-push.generated.${c}`),d=ie.join(a,`mach-push.${c}`);return K.mkdirSync(a,{recursive:!0}),K.writeFileSync(p,Eo(n,l)),i.push($e(e,p)),K.existsSync(d)?r.push(`${$e(e,d)} already exists; developer callbacks were preserved.`):(K.writeFileSync(d,Po("./mach-push.generated",l)),i.push($e(e,d))),vo(s,d)?i.push($e(e,s)):r.push(`${$e(e,s)} already starts MACH Push.`),{written:i,notes:r,editableFile:$e(e,d),generatedFile:$e(e,p),entryFile:$e(e,s)}}function pi(e,t){if(!K.existsSync(e))return[];let n=[];for(let i of K.readdirSync(e,{withFileTypes:!0})){if(i.name==="Pods"||i.name==="build")continue;let r=ie.join(e,i.name);i.isDirectory()?n.push(...pi(r,t)):t(r)&&n.push(r)}return n}function Ro(e,t){if(K.mkdirSync(ie.dirname(e),{recursive:!0}),!K.existsSync(e)){K.writeFileSync(e,`<?xml version="1.0" encoding="UTF-8"?>
|
|
141
141
|
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
|
|
142
142
|
<plist version="1.0">
|
|
143
143
|
<dict>
|
|
@@ -147,20 +147,20 @@ void startMachPush()?.catch(() => undefined);
|
|
|
147
147
|
</plist>
|
|
148
148
|
`);return}let n=K.readFileSync(e,"utf8"),i=/(<key>aps-environment<\/key>\s*<string>)([^<]*)(<\/string>)/;if(i.test(n)){K.writeFileSync(e,n.replace(i,`$1${t}$3`));return}n.includes("</dict>")&&K.writeFileSync(e,n.replace("</dict>",` <key>aps-environment</key>
|
|
149
149
|
<string>${t}</string>
|
|
150
|
-
</dict>`))}function
|
|
151
|
-
${C} CODE_SIGN_ENTITLEMENTS = ${f};$1`))),g&&(K.writeFileSync(a,c),i.push($e(e,a)),l.push(f))}if(l.length===0)return r.push("Could not safely identify the iOS app target. Enable the Push Notifications capability in Xcode."),{written:i,notes:r};for(let p of new Set(l)){let d=ie.join(o,p);
|
|
150
|
+
</dict>`))}function No(e,t,n){let i=[],r=[],o=ie.join(e,"ios");if(!K.existsSync(o))return r.push("iOS native project is not present; no APNs entitlement was changed."),{written:i,notes:r};let a=pi(o,p=>p.endsWith(".xcodeproj/project.pbxproj"))[0];if(!a)return r.push("Could not locate an iOS Xcode project for the APNs entitlement."),{written:i,notes:r};let c=K.readFileSync(a,"utf8"),l=Array.from(c.matchAll(/CODE_SIGN_ENTITLEMENTS\s*=\s*"?([^";$]+\.entitlements)"?;/g),p=>p[1].trim());if(l.length===0&&t){let p=ie.basename(ie.dirname(a),".xcodeproj"),f=[K.existsSync(ie.join(o,p))?p:"",`${p}.entitlements`].filter(Boolean).join("/"),g=!1;c=c.replace(/buildSettings = \{([\s\S]*?)\n(\s*)\};/g,(u,R,C)=>!new RegExp(`PRODUCT_BUNDLE_IDENTIFIER\\s*=\\s*"?${t.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}"?;`).test(R)||R.includes("CODE_SIGN_ENTITLEMENTS")?u:(g=!0,u.replace(/(\n\s*PRODUCT_BUNDLE_IDENTIFIER\s*=)/,`
|
|
151
|
+
${C} CODE_SIGN_ENTITLEMENTS = ${f};$1`))),g&&(K.writeFileSync(a,c),i.push($e(e,a)),l.push(f))}if(l.length===0)return r.push("Could not safely identify the iOS app target. Enable the Push Notifications capability in Xcode."),{written:i,notes:r};for(let p of new Set(l)){let d=ie.join(o,p);Ro(d,n),i.push($e(e,d))}return r.push(`iOS APNs entitlement is configured for ${n}.`),{written:[...new Set(i)],notes:r}}function xo(e,t){let n=K.readFileSync(e,"utf8");if(n.includes("com.google.gms.google-services"))return!1;let i=/plugins\s*\{/.exec(n);if(i?.index!==void 0){let r=t?` id("com.google.gms.google-services")
|
|
152
152
|
`:` id 'com.google.gms.google-services'
|
|
153
153
|
`,o=i.index+i[0].length;K.writeFileSync(e,`${n.slice(0,o)}
|
|
154
154
|
${r}${n.slice(o)}`)}else{let r=t?`
|
|
155
155
|
apply(plugin = "com.google.gms.google-services")
|
|
156
156
|
`:`
|
|
157
157
|
apply plugin: "com.google.gms.google-services"
|
|
158
|
-
`;K.writeFileSync(e,`${n.trimEnd()}${r}`)}return!0}function
|
|
158
|
+
`;K.writeFileSync(e,`${n.trimEnd()}${r}`)}return!0}function ko(e){let t=["settings.gradle.kts","settings.gradle"].map(a=>ie.join(e,a)).find(a=>K.existsSync(a));if(t){let a=K.readFileSync(t,"utf8");if(a.includes("com.google.gms.google-services"))return;let c=/plugins\s*\{/.exec(a);if(c?.index!==void 0){let p=t.endsWith(".kts")?` id("com.google.gms.google-services") version "4.4.4" apply false
|
|
159
159
|
`:` id "com.google.gms.google-services" version "4.4.4" apply false
|
|
160
160
|
`,d=c.index+c[0].length;return K.writeFileSync(t,`${a.slice(0,d)}
|
|
161
161
|
${p}${a.slice(d)}`),t}}let n=["build.gradle.kts","build.gradle"].map(a=>ie.join(e,a)).find(a=>K.existsSync(a));if(!n)return;let i=K.readFileSync(n,"utf8");if(i.includes("com.google.gms:google-services"))return;let r=/dependencies\s*\{/.exec(i);if(r?.index===void 0)return;let o=` classpath("com.google.gms:google-services:4.4.4")
|
|
162
162
|
`,s=r.index+r[0].length;return K.writeFileSync(n,`${i.slice(0,s)}
|
|
163
|
-
${o}${i.slice(s)}`),n}function
|
|
163
|
+
${o}${i.slice(s)}`),n}function Oo(e,t){let n=[],i=[],r=ie.join(e,"android");if(!K.existsSync(r))return i.push("Android native project is not present; no Firebase configuration was changed."),{written:n,notes:i};if(!t)return i.push("Android needs google-services.json. Add it at the project root and re-run mach push setup."),{written:n,notes:i};let o=ie.resolve(e,t);if(!K.existsSync(o))return i.push(`Android Firebase file was not found at ${t}; re-run setup with --google-services-file.`),{written:n,notes:i};let s=ie.join(r,"app/google-services.json");K.mkdirSync(ie.dirname(s),{recursive:!0}),o!==s&&(K.copyFileSync(o,s),n.push($e(e,s)));let a=["build.gradle.kts","build.gradle"].map(l=>ie.join(r,"app",l)).find(l=>K.existsSync(l));if(!a)return i.push("Could not locate android/app/build.gradle to enable Firebase."),{written:n,notes:i};xo(a,a.endsWith(".kts"))&&n.push($e(e,a));let c=ko(r);return c&&n.push($e(e,c)),i.push("Android Firebase configuration and notification permission are wired."),{written:[...new Set(n)],notes:i}}function ui(e,t){let n=No(e,t.iosBundleId,t.iosEnvironment),i=Oo(e,t.googleServicesFile);return{written:[...new Set([...n.written,...i.written])],notes:[...n.notes,...i.notes]}}import{spinner as Kt,log as P,isCancel as Yt,confirm as Es,select as Tn}from"@clack/prompts";import w from"chalk";import A from"fs";import y from"path";import{execFileSync as Xe,execSync as Q,spawn as Yi}from"child_process";import Ae from"os";import Ps from"crypto";import Bo from"crypto";import{log as _e}from"@clack/prompts";import Te from"chalk";import{execSync as $o}from"child_process";import Fe from"fs";import Ye from"path";var fi={id:"expo",displayName:"Expo",applyLocalProcessEnv:e=>{e.developmentClient?(_e.info(Te.blue("\u2139\uFE0F Configuring Expo build to INCLUDE expo-dev-client (Development Client mode)...")),delete process.env.EXPO_NO_DEV_CLIENT,delete process.env.EXPO_AUTOLINKING_EXCLUDE):(_e.info(Te.blue("\u2139\uFE0F Configuring Expo build to EXCLUDE expo-dev-client (Production/Staging mode)...")),process.env.EXPO_NO_DEV_CLIENT="1",process.env.EXPO_AUTOLINKING_EXCLUDE="expo-dev-client")},localAndroidEnv:(e,t)=>({EXPO_NO_DOTENV:"1",MACH_FRAMEWORK:"expo",MACH_BUILD_PROFILE:t}),remoteEnvSetupScript:()=>`
|
|
164
164
|
export MACH_FRAMEWORK="expo"
|
|
165
165
|
echo "[ENV] MACH_FRAMEWORK=$MACH_FRAMEWORK"
|
|
166
166
|
export EXPO_NO_DOTENV="\${EXPO_NO_DOTENV:-1}"
|
|
@@ -274,7 +274,7 @@ post_install do |installer|
|
|
|
274
274
|
${L}
|
|
275
275
|
end
|
|
276
276
|
`;Fe.appendFileSync(_,W)}let k="/opt/homebrew/bin/pod",F=Fe.existsSync(k)?k:"pod",M=p(v);Fe.existsSync(Ye.join(v,"Pods"))&&r.pods&&r.pods!==M&&(await e.reportLog(`[CACHE] Podfile/Podfile.lock changed \u2014 wiping ios/Pods
|
|
277
|
-
`),_e.info(Te.dim("Podfile fingerprint changed \u2014 clearing Pods for clean install...")),Fe.rmSync(Ye.join(v,"Pods"),{recursive:!0,force:!0})),_e.info(Te.dim(`Using pod command: ${F} in ${v}`)),await c(F,["install"],v,b),r.pods=M,d(o,r)}catch(v){let _=v.message||"Unknown error";_e.warn(Te.yellow(`Native "pod" command failed: ${_}`)),_e.info(Te.dim("Falling back to npm exec pod-install..."));let b=s();l(Ye.join(i,"ios"),b),_e.info(Te.magenta(`${I.nameUpper}_DEBUG: Executing pod-install override via npx --yes pod-install@latest`)),await c("npx",["--yes","pod-install@latest","ios"],i,b)}if(Fe.existsSync(Ye.join(i,"ios/Pods"))){_e.info(Te.dim("Disabling signing for Pod targets to prevent conflicts..."));try{
|
|
277
|
+
`),_e.info(Te.dim("Podfile fingerprint changed \u2014 clearing Pods for clean install...")),Fe.rmSync(Ye.join(v,"Pods"),{recursive:!0,force:!0})),_e.info(Te.dim(`Using pod command: ${F} in ${v}`)),await c(F,["install"],v,b),r.pods=M,d(o,r)}catch(v){let _=v.message||"Unknown error";_e.warn(Te.yellow(`Native "pod" command failed: ${_}`)),_e.info(Te.dim("Falling back to npm exec pod-install..."));let b=s();l(Ye.join(i,"ios"),b),_e.info(Te.magenta(`${I.nameUpper}_DEBUG: Executing pod-install override via npx --yes pod-install@latest`)),await c("npx",["--yes","pod-install@latest","ios"],i,b)}if(Fe.existsSync(Ye.join(i,"ios/Pods"))){_e.info(Te.dim("Disabling signing for Pod targets to prevent conflicts..."));try{$o(`find ios/Pods -name "project.pbxproj" -exec sed -i '' 's/buildSettings = {/buildSettings = { CODE_SIGNING_ALLOWED = NO; CODE_SIGNING_REQUIRED = NO; PROVISIONING_PROFILE_SPECIFIER = ""; EXPANDED_CODE_SIGN_IDENTITY = "";/g' {} +`,{cwd:i,stdio:"ignore"})}catch{}}return{appName:g,bundleId:f}}finally{R&&Fe.writeFileSync(u,R)}}};import{log as Qe}from"@clack/prompts";import qe from"chalk";import Ue from"fs";import kt from"path";import{spawnSync as _o}from"child_process";import Ge from"fs";import ze from"path";var mi=(e,t)=>ze.join(e,"node_modules",".bin",process.platform==="win32"?`${t}.cmd`:t),To=e=>{try{return JSON.parse(Ge.readFileSync(ze.join(e,"package.json"),"utf-8"))}catch{return{}}};function dl(e,t){let n=To(e);return!!(n.dependencies?.[t]||n.devDependencies?.[t])}function bn(e,t,n,i={}){let r=`${t} ${n.join(" ")}`,o=_o(t,n,{cwd:e,stdio:"inherit",env:{...process.env,CI:process.env.CI||"1",EXPO_NO_TELEMETRY:"1",...i}});return o.error?{ok:!1,command:r,error:o.error.message}:o.status!==0?{ok:!1,command:r,error:`${t} exited with code ${o.status}`}:{ok:!0,command:r}}function pl(e){return bn(e,"npx",["--yes","install-expo-modules@latest"])}function ul(e){let t=mi(e,"expo");return Ge.existsSync(t)?bn(e,t,["install","expo-updates"]):{ok:!1,command:"npx expo install expo-updates",error:"Expo Modules are not installed. Install Expo Modules first."}}function fl(e){let t=[];return Ge.existsSync(ze.join(e,"ios"))&&t.push("ios"),Ge.existsSync(ze.join(e,"android"))&&t.push("android"),t}function gi(e){let t=mi(e.cwd,"expo-updates");return Ge.existsSync(t)?e.platforms.map(n=>bn(e.cwd,t,["configuration:syncnative","--platform",n,"--workflow","generic"],{MACH_OTA_RUNTIME_VERSION:e.runtimeVersion,MACH_OTA_CHANNEL:e.channel,MACH_OTA_URL:e.url})):[{ok:!1,command:"expo-updates configuration:syncnative",error:"expo-updates is not installed in this project."}]}function ml(e){let t=ze.join(e,"android","app","src","main","AndroidManifest.xml"),n=ze.join(e,"android","app","src","main","res","values","strings.xml"),i,r=ze.join(e,"ios");if(Ge.existsSync(r)){let o=[r];for(;o.length>0&&!i;){let s=o.shift();for(let a of Ge.readdirSync(s,{withFileTypes:!0})){if(a.name==="Pods"||a.name==="build")continue;let c=ze.join(s,a.name);if(a.isDirectory())o.push(c);else if(a.isFile()&&a.name==="Expo.plist"){i=c;break}}}}return{...Ge.existsSync(t)?{androidManifest:t}:{},...Ge.existsSync(n)?{androidStrings:n}:{},...i?{iosExpoPlist:i}:{}}}var Fo=(e,t)=>!Ue.existsSync(e)||!Ue.existsSync(t)?!1:Ue.readFileSync(e,"utf-8")!==Ue.readFileSync(t,"utf-8"),Cn={id:"react-native",displayName:"React Native",applyLocalProcessEnv:e=>{delete process.env.EXPO_NO_DEV_CLIENT,delete process.env.EXPO_AUTOLINKING_EXCLUDE,delete process.env.EXPO_NO_DOTENV},localAndroidEnv:(e,t)=>({MACH_FRAMEWORK:"react-native",MACH_BUILD_PROFILE:t}),remoteEnvSetupScript:()=>`
|
|
278
278
|
export MACH_FRAMEWORK="react-native"
|
|
279
279
|
echo "[ENV] MACH_FRAMEWORK=$MACH_FRAMEWORK"
|
|
280
280
|
unset EXPO_NO_DOTENV
|
|
@@ -307,12 +307,12 @@ fi
|
|
|
307
307
|
:
|
|
308
308
|
`,androidRemoteReleaseGradlePropertiesScript:()=>`
|
|
309
309
|
:
|
|
310
|
-
`,prepareLocalProject:async e=>{let{platform:t,appRoot:n,cacheMeta:i,cacheMetaDir:r,currentBuildEnv:o,reportStep:s,reportLog:a,loggedRun:c,configureXcodeNodeBinary:l,podsFingerprint:p,writeCacheMeta:d}=e,f=o(),g=f.MACH_OTA_RUNTIME_VERSION,u=f.MACH_OTA_CHANNEL,R=f.MACH_OTA_URL;if(g&&u&&R){let N=
|
|
311
|
-
`),Qe.info(qe.dim("React Native Podfile fingerprint changed - clearing Pods for clean install...")),Ue.rmSync(b,{recursive:!0,force:!0})):L&&
|
|
312
|
-
`),Qe.info(qe.dim("React Native Pods manifest is out of sync - clearing Pods for clean install...")),Ue.rmSync(b,{recursive:!0,force:!0}));let k="/opt/homebrew/bin/pod",F=Ue.existsSync(k)?k:"pod";try{Qe.info(qe.dim(`Using pod command: ${F} in ${C}`)),await c(F,["install"],C,_)}catch(M){let N=M.message||"Unknown error";Qe.warn(qe.yellow(`Native "pod" command failed: ${N}`)),Qe.info(qe.dim("Falling back to npx pod-install..."));let W=o();l(C,W),Qe.info(qe.magenta(`${I.nameUpper}_DEBUG: Executing pod-install fallback via npx --yes pod-install@latest`)),await c("npx",["--yes","pod-install@latest","ios"],n,W)}return i.reactNativePods=p(C),d(r,i),{}}};var
|
|
310
|
+
`,prepareLocalProject:async e=>{let{platform:t,appRoot:n,cacheMeta:i,cacheMetaDir:r,currentBuildEnv:o,reportStep:s,reportLog:a,loggedRun:c,configureXcodeNodeBinary:l,podsFingerprint:p,writeCacheMeta:d}=e,f=o(),g=f.MACH_OTA_RUNTIME_VERSION,u=f.MACH_OTA_CHANNEL,R=f.MACH_OTA_URL;if(g&&u&&R){let N=gi({cwd:n,platforms:[t],runtimeVersion:g,channel:u,url:R}).find(W=>!W.ok);if(N)throw new Error(`Could not synchronize ${t} Expo Updates configuration: ${N.error||N.command}. Run \`mach ota setup --platform ${t}\` and try again.`);Qe.info(qe.green(`\u2713 OTA runtime ${g} synchronized for ${t}`))}if(t!=="ios")return{};let C=kt.join(n,"ios"),v=kt.join(C,"Podfile");if(!Ue.existsSync(v))throw new Error("React Native iOS build requires ios/Podfile. Commit the ios directory for vanilla React Native projects.");await s("pods"),Qe.info(qe.blue("Running React Native pod install..."));let _=o();l(C,_);let b=kt.join(C,"Pods"),S=kt.join(C,"Podfile.lock"),E=kt.join(b,"Manifest.lock"),L=Ue.existsSync(b),T=p(C);L&&i.reactNativePods&&i.reactNativePods!==T?(await a(`[CACHE] React Native Podfile/Podfile.lock changed - wiping ios/Pods
|
|
311
|
+
`),Qe.info(qe.dim("React Native Podfile fingerprint changed - clearing Pods for clean install...")),Ue.rmSync(b,{recursive:!0,force:!0})):L&&Fo(S,E)&&(await a(`[CACHE] React Native Pods Manifest.lock is out of sync - wiping ios/Pods
|
|
312
|
+
`),Qe.info(qe.dim("React Native Pods manifest is out of sync - clearing Pods for clean install...")),Ue.rmSync(b,{recursive:!0,force:!0}));let k="/opt/homebrew/bin/pod",F=Ue.existsSync(k)?k:"pod";try{Qe.info(qe.dim(`Using pod command: ${F} in ${C}`)),await c(F,["install"],C,_)}catch(M){let N=M.message||"Unknown error";Qe.warn(qe.yellow(`Native "pod" command failed: ${N}`)),Qe.info(qe.dim("Falling back to npx pod-install..."));let W=o();l(C,W),Qe.info(qe.magenta(`${I.nameUpper}_DEBUG: Executing pod-install fallback via npx --yes pod-install@latest`)),await c("npx",["--yes","pod-install@latest","ios"],n,W)}return i.reactNativePods=p(C),d(r,i),{}}};var Do={expo:fi,"react-native":Cn};function Ot(e){if(!e)return Cn;if(e!=="flutter")return Do[e];throw new Error('Flutter builds are not implemented yet. Set framework to "expo" or "react-native" for this build.')}var Vo="mach-env-v3-project-layout",Mo=new Set(["BUILD_ID","BUILD_NUMBER","ANDROID_VERSION_CODE","MACH_TOKEN","MACH_DEBUG","MACH_S3_DEBUG","MACH_ENV_FINGERPRINT","CODEARTIFACT_AUTH_TOKEN","EXPO_ZQRN_BB_REPO_TOKEN","SENTRY_AUTH_TOKEN","IOS_DIST_P12","IOS_PROVISIONING_PROFILE","IOS_PROVISIONING_PROFILES","IOS_P12_PASSWORD","MATCH_ENCRYPTION_PASSPHRASE","MATCH_PASSWORD","MATCH_KEYCHAIN_NAME","MATCH_KEYCHAIN_PASSWORD","APPLE_TEAM_ID","FASTLANE_TEAM_ID","ANDROID_KEYSTORE","ANDROID_KEYSTORE_BASE64","ANDROID_STORE_PASSWORD","ANDROID_KEY_PASSWORD","ANDROID_KEY_ALIAS","KEYSTORE_PASSWORD","KEYSTORE_ALIAS","AWS_ACCESS_KEY_ID","AWS_SECRET_ACCESS_KEY","AWS_SESSION_TOKEN","AWS_SECURITY_TOKEN","GITHUB_TOKEN","NPM_TOKEN"]),jo=["PRESIGNED_","KEYSTORE_PASSWORD_"],Wo=e=>!e||Mo.has(e)?!1:!jo.some(t=>e.startsWith(t)),Sn=(e,t,n)=>{let i=Ot(n.framework);return{...e,...i.localAndroidEnv(n,t),MACH_APP_NAME:n.appName||n.name||"App",MACH_APP_DIRECTORY:n.appDirectory||"."}},hi=e=>{let t=Object.entries(e).filter(([n])=>Wo(n)).sort(([n],[i])=>n.localeCompare(i));return Bo.createHash("sha256").update(JSON.stringify({version:Vo,entries:t})).digest("hex")};var Zo=/^\d+(?:\.\d+){0,2}$/,Go="auto";var yi=e=>typeof e=="string"&&e.trim().toLowerCase()===Go,xl=(e,t,n,i=!0)=>e!=null&&String(e).trim()!==""?{kind:"persisted",value:e}:t!=null&&!yi(t)?{kind:"explicit",value:t}:i&&(n||yi(t))?{kind:"auto"}:{kind:"none"},$t=e=>{let t=String(e??"").trim();return!t||t==="undefined"||t==="null"?null:Zo.test(t)?t:null},gt=(e,t)=>{let n=$t(e);if(!n)throw new Error(`Invalid iOS buildNumber from ${t}: "${String(e??"")}". Use one to three period-separated integers, for example "68" or "1.2.3".`);return n},Uo=e=>{if(typeof e=="string"&&!/^\d+$/.test(e.trim()))return null;let t=Number(e);return!Number.isSafeInteger(t)||t<1||t>21e8?null:String(t)},je=(e,t)=>{let n=Uo(e);if(!n)throw new Error(`Invalid Android versionCode from ${t}: "${String(e??"")}". Use an integer from 1 to 2100000000.`);return n},kl=(e,t,n,i)=>{let r=gt(n,i);return e.resolvedBuildNumber=r,t.BUILD_NUMBER=r,t.CURRENT_PROJECT_VERSION=r,t.MACH_IOS_BUILD_NUMBER_LOCKED="1",r},Ol=(e,t,n,i)=>{let r=je(n,i);return e.resolvedVersionCode=r,t.ANDROID_VERSION_CODE=r,t.MACH_ANDROID_VERSION_CODE_LOCKED="1",r},$l=(e,t)=>{let n=t.buildNumber!==void 0&&t.buildNumber!==null&&String(t.buildNumber).trim()!=="",i=t.versionCode!==void 0&&t.versionCode!==null&&String(t.versionCode).trim()!=="";!e.resolvedBuildNumber&&n&&(e.resolvedBuildNumber=gt(t.buildNumber,"saved MACH build record")),!e.resolvedVersionCode&&i&&(e.resolvedVersionCode=je(t.versionCode,"saved MACH build record"))};import{execFileSync as wn}from"child_process";import Le from"fs";import rt from"path";var Lo=new Set(["Pods","build","DerivedData",".git"]),Ii=(e,t=[])=>{if(!Le.existsSync(e))return t;for(let n of Le.readdirSync(e,{withFileTypes:!0})){if(n.isSymbolicLink())continue;let i=rt.join(e,n.name);if(n.isDirectory()){if(Lo.has(n.name)||n.name.endsWith(".xcworkspace")||n.name.endsWith(".xcarchive")||n.name.endsWith(".framework")||n.name.endsWith(".xcframework")||n.name.endsWith(".bundle")||n.name.endsWith(".app")||n.name.endsWith(".appex"))continue;Ii(i,t);continue}n.isFile()&&n.name==="Info.plist"&&t.push(i)}return t},Xo=(e,t,n)=>{let i=String(e||"").trim().replace(/^"|"$/g,"");if(!i||(i=i.replace(/\$\(([^)]+)\)|\$\{([^}]+)\}/g,(o,s,a)=>{let l=t[s||a];return l===void 0?"":String(l)}),!i||i.includes("$(")||i.includes("${")))return null;let r=String(t.SRCROOT||t.PROJECT_DIR||n);return rt.resolve(rt.isAbsolute(i)?i:rt.join(r,i))},Ho=e=>{let t=e.indexOf("["),n=e.lastIndexOf("]");if(t<0||n<t)return[];let i=JSON.parse(e.slice(t,n+1));return Array.isArray(i)?i:[]},Jo=(e,t)=>{let n=new Set,i=[];(t.workspace||t.project)&&i.push([...t.workspace?["-workspace",t.workspace]:["-project",t.project],"-scheme",t.scheme]),t.project&&i.push(["-project",t.project,"-alltargets"]);for(let r of i){let o="";try{o=wn("xcodebuild",[...r,"-configuration",t.configuration,"-showBuildSettings","-json"],{cwd:e,encoding:"utf8",maxBuffer:16*1024*1024})}catch{continue}for(let s of Ho(o)){let a=s?.buildSettings;if(!a)continue;let c=String(a.WRAPPER_EXTENSION||"").toLowerCase();if(c!=="app"&&c!=="appex")continue;let l=Xo(String(a.INFOPLIST_FILE||""),a,e);if(!l||!Le.existsSync(l))continue;let p=rt.relative(e,l);p.startsWith("..")||rt.isAbsolute(p)||n.add(l)}}return[...n].sort()},Ko=(e,t)=>{let n=Le.readFileSync(e,"utf8");if(!/<plist(?:\s|>)/.test(n))return!1;let r=/<key>\s*CFBundleVersion\s*<\/key>/.exec(n),o;if(r){let s=r.index+r[0].length,a=n.slice(s),c=/^\s*<(string|integer)>[\s\S]*?<\/\1>/.exec(a);if(!c)throw new Error(`Could not update CFBundleVersion in ${e}: unsupported plist value type.`);o=n.slice(0,s)+`
|
|
313
313
|
<string>${t}</string>`+a.slice(c[0].length)}else{let s=n.lastIndexOf("</dict>");if(s<0)throw new Error(`Could not update CFBundleVersion in ${e}: root dictionary not found.`);o=n.slice(0,s)+` <key>CFBundleVersion</key>
|
|
314
314
|
<string>${t}</string>
|
|
315
|
-
`+n.slice(s)}return Le.writeFileSync(e,o),!0},Ko=(e,t)=>{if(!Jo(e,t)){if(process.platform!=="darwin")throw new Error(`Could not update binary Info.plist outside macOS: ${e}`);try{wn("/usr/bin/plutil",["-replace","CFBundleVersion","-string",t,e])}catch{wn("/usr/bin/plutil",["-insert","CFBundleVersion","-string",t,e])}}},yi=(e,t,n)=>{let i=gt(t,"resolved MACH build"),r=rt.resolve(e),o=new Set;if(n)try{for(let l of Ho(r,n))o.add(l)}catch{}for(let l of hi(r))o.add(l);let s=[...o].sort(),a=new Map,c=!1;try{for(let l of s)a.set(l,Le.readFileSync(l)),Ko(l,i)}catch(l){for(let[p,d]of a)Le.writeFileSync(p,d);throw l}return{buildNumber:i,plistPaths:s,restore:()=>{if(!c){c=!0;for(let[l,p]of a)Le.existsSync(l)&&Le.writeFileSync(l,p)}}}},vn=(e,t,n)=>{let i=gt(e,n),r=gt(t,"resolved MACH build");if(i!==r)throw new Error(`iOS build number mismatch in ${n}: expected MACH buildNumber ${r}, but the artifact contains CFBundleVersion ${i}.`);return i};import{execFileSync as Ii}from"child_process";import _t from"fs";import we from"path";import Yo from"adm-zip";var En=(e,t)=>{let n=0n,i=0n,r=t;for(;r<e.length&&i<=63n;){let o=e[r++];if(n|=BigInt(o&127)<<i,(o&128)===0)return{value:n,next:r};i+=7n}throw new Error("Malformed protobuf varint")},Tt=e=>{let t=[],n=0;for(;n<e.length;){let i=En(e,n);n=i.next;let r=Number(i.value>>3n),o=Number(i.value&7n);if(r<1)throw new Error("Malformed protobuf field number");if(o===0){let s=En(e,n);n=s.next,t.push({number:r,wireType:o,varint:s.value});continue}if(o===1){if(n+8>e.length)throw new Error("Truncated protobuf fixed64");t.push({number:r,wireType:o,bytes:e.subarray(n,n+8)}),n+=8;continue}if(o===2){let s=En(e,n);n=s.next;let a=Number(s.value);if(!Number.isSafeInteger(a)||n+a>e.length)throw new Error("Truncated protobuf length-delimited field");t.push({number:r,wireType:o,bytes:e.subarray(n,n+a)}),n+=a;continue}if(o===5){if(n+4>e.length)throw new Error("Truncated protobuf fixed32");t.push({number:r,wireType:o,bytes:e.subarray(n,n+4)}),n+=4;continue}throw new Error(`Unsupported protobuf wire type ${o}`)}return t},Ai=(e,t)=>e.find(i=>i.number===t&&i.wireType===2)?.bytes?.toString("utf8"),zo=e=>{let n=Tt(e).find(o=>o.number===7&&o.wireType===2)?.bytes;if(!n)return null;let r=Tt(n).find(o=>(o.number===6||o.number===7)&&o.wireType===0)?.varint;return r===void 0||r>BigInt(Number.MAX_SAFE_INTEGER)?null:r.toString()},Qo=e=>{let n=Tt(e).find(l=>l.number===1&&l.wireType===2)?.bytes;if(!n)throw new Error("AAB base manifest has no root XML element");let o=Tt(n).filter(l=>l.number===4&&l.wireType===2).map(l=>Tt(l.bytes)).find(l=>Ai(l,2)==="versionCode");if(!o)throw new Error("AAB base manifest has no android:versionCode");let s=Ai(o,3)?.trim();if(s&&/^\d+$/.test(s))return je(s,"packaged AAB manifest");let a=o.find(l=>l.number===6&&l.wireType===2)?.bytes,c=a?zo(a):null;return je(c,"packaged AAB manifest")},bi=e=>{try{return _t.accessSync(e,_t.constants.X_OK),_t.statSync(e).isFile()}catch{return!1}},Pn=e=>String(process.env.PATH||"").split(we.delimiter).filter(Boolean).map(t=>we.join(t,e)),Ci=()=>Array.from(new Set([process.env.ANDROID_HOME,process.env.ANDROID_SDK_ROOT,process.platform==="darwin"?we.join(process.env.HOME||"","Library/Android/sdk"):we.join(process.env.HOME||"","Android/Sdk"),"/opt/android-sdk"].filter(e=>!!e))),Si=e=>{try{return _t.readdirSync(e).map(t=>we.join(e,t)).filter(t=>_t.statSync(t).isDirectory()).sort((t,n)=>n.localeCompare(t,void 0,{numeric:!0}))}catch{return[]}},qo=()=>{let e=Pn("apkanalyzer");for(let t of Ci()){let n=we.join(t,"cmdline-tools");e.push(we.join(n,"latest/bin/apkanalyzer"));for(let i of Si(n))e.push(we.join(i,"bin/apkanalyzer"))}return e},es=()=>{let e=[...Pn("aapt2"),...Pn("aapt")];for(let t of Ci())for(let n of Si(we.join(t,"build-tools")))e.push(we.join(n,"aapt2"),we.join(n,"aapt"));return e},ts=e=>{let t=e.trim();return/^\d+$/.test(t)?t:null},ns=e=>e.match(/^package:.*\bversionCode='(\d+)'/m)?.[1]||null,is=(e,t)=>{let n=t.apkanalyzer??qo();for(let r of n)if(bi(r))try{let o=Ii(r,["manifest","version-code",e],{encoding:"utf8",stdio:["ignore","pipe","pipe"]}),s=ts(o);if(s)return je(s,"packaged APK manifest")}catch{}let i=t.aapt??es();for(let r of i)if(bi(r))try{let o=Ii(r,["dump","badging",e],{encoding:"utf8",stdio:["ignore","pipe","pipe"]}),s=ns(o);if(s)return je(s,"packaged APK manifest")}catch{}throw new Error("Could not inspect the packaged APK versionCode. Install Android SDK command-line tools (apkanalyzer or aapt2) and rebuild; MACH will not publish an unverified artifact.")},rs=(e,t={})=>{let n=we.extname(e).toLowerCase();if(n===".apk")return is(e,t);if(n!==".aab")throw new Error(`Unsupported Android artifact for version validation: ${e}`);let i;try{i=new Yo(e)}catch(o){throw new Error(`Could not open AAB ${we.basename(e)}: ${o.message}`)}let r=i.getEntry("base/manifest/AndroidManifest.xml")||i.getEntries().find(o=>o.entryName.replace(/\\/g,"/")==="base/manifest/AndroidManifest.xml");if(!r)throw new Error(`AAB ${we.basename(e)} has no base module manifest`);try{return Qo(r.getData())}catch(o){throw new Error(`Could not read versionCode from ${we.basename(e)}: ${o.message}`)}},Rn=(e,t,n={})=>{let i=je(t,"resolved MACH build assignment"),r=rs(e,n);if(r!==i)throw new Error(`Android versionCode mismatch in ${we.basename(e)}: expected ${i}, packaged ${r}. MACH stopped the build before upload.`);return r};import me from"fs";import ee from"path";var Nn=e=>{let t=ee.join(e,"package.json");if(!me.existsSync(t))return null;try{return JSON.parse(me.readFileSync(t,"utf8"))}catch{return null}},wi=e=>{let t=Nn(e);if(!t)return 0;let n={...t.dependencies||{},...t.devDependencies||{}},i=0;return n.expo&&(i+=8),n["react-native"]&&(i+=8),me.existsSync(ee.join(e,"android"))&&(i+=3),me.existsSync(ee.join(e,"ios"))&&(i+=3),/^(app|mobile)$/i.test(ee.basename(e))&&(i+=1),i},os=e=>{let t=e?.workspaces;return Array.isArray(t)?t.filter(n=>typeof n=="string"):Array.isArray(t?.packages)?t.packages.filter(n=>typeof n=="string"):[]},ss=(e,t)=>{let n=new Set;for(let i of t){let r=i.replace(/\\/g,"/").replace(/\/+$/,"");if(!r||r.startsWith("/")||r===".."||r.startsWith("../")||r.includes("/../"))continue;if(!r.includes("*")){n.add(ee.resolve(e,r));continue}let o=r.match(/^(.*)\/\*$/);if(!o)continue;let s=ee.resolve(e,o[1]);if(!(!me.existsSync(s)||!me.statSync(s).isDirectory()))for(let a of me.readdirSync(s,{withFileTypes:!0}))a.isDirectory()&&n.add(ee.join(s,a.name))}for(let i of["apps","packages"]){let r=ee.join(e,i);if(!(!me.existsSync(r)||!me.statSync(r).isDirectory()))for(let o of me.readdirSync(r,{withFileTypes:!0}))o.isDirectory()&&n.add(ee.join(r,o.name))}return Array.from(n)},Xl=e=>{let t=ee.resolve(e);if(wi(t)>0)return".";let n=Nn(t),i=ss(t,os(n)).map(r=>({directory:r,score:wi(r)})).filter(r=>r.score>0).sort((r,o)=>o.score-r.score||r.directory.localeCompare(o.directory));return i.length===0||i[1]&&i[1].score===i[0].score?null:ee.relative(t,i[0].directory).split(ee.sep).join("/")},Hl=(e,t)=>{let n=ht(e,t,{requireAppDirectory:!0}),i=Nn(n.appRoot);return{...i?.dependencies||{},...i?.devDependencies||{}}.expo?"expo":"react-native"},as=e=>{if(e==null)return".";if(typeof e!="string")throw new Error("appDirectory must be a relative directory path.");let t=e.trim();if(!t||t===".")return".";if(t.includes("\0"))throw new Error("appDirectory contains an invalid null byte.");let n=t.replace(/\\/g,"/");if(ee.posix.isAbsolute(n)||/^[A-Za-z]:\//.test(n))throw new Error("appDirectory must be relative to the project root.");let i=ee.posix.normalize(n).replace(/^\.\//,"");if(i===".."||i.startsWith("../")||i.includes("/../"))throw new Error("appDirectory must stay inside the project root.");return!i||i==="."?".":i.replace(/\/+$/,"")},ht=(e,t,n={})=>{let i=ee.resolve(e),r=as(t),o=ee.resolve(i,...r.split("/").filter(a=>a&&a!==".")),s=ee.relative(i,o);if(s===".."||s.startsWith(`..${ee.sep}`)||ee.isAbsolute(s))throw new Error("appDirectory must stay inside the project root.");if(n.requireAppDirectory){if(!me.existsSync(o)||!me.statSync(o).isDirectory())throw new Error(`Configured appDirectory "${r}" does not exist inside the project root.`);if(!me.existsSync(ee.join(o,"package.json")))throw new Error(`Configured appDirectory "${r}" must contain a package.json.`);let a=me.realpathSync(i),c=me.realpathSync(o),l=ee.relative(a,c);if(l===".."||l.startsWith(`..${ee.sep}`)||ee.isAbsolute(l))throw new Error("Configured appDirectory resolves outside the project root.")}return{sourceRoot:i,appDirectory:r,appRoot:o}},Jl=(e,t,n)=>{if(t==="react-native"){if(n==="android"){let i=ee.join(e.appRoot,"android/gradlew"),r=ee.join(e.appRoot,"gradlew");if(!me.existsSync(i)&&!me.existsSync(r))throw new Error(`React Native Android build requires android/gradlew inside appDirectory "${e.appDirectory}".`);return}if(!me.existsSync(ee.join(e.appRoot,"ios/Podfile")))throw new Error(`React Native iOS build requires ios/Podfile inside appDirectory "${e.appDirectory}".`)}};import xn from"fs";import Lt from"path";import{spawnSync as cs}from"child_process";var ge=e=>{if(typeof e!="string")return;let t=e.trim();return t.length>0?t:void 0},vi=e=>e==null?void 0:ge(String(e)),Pi=e=>{if(!xn.existsSync(e))return null;try{return JSON.parse(xn.readFileSync(e,"utf-8"))}catch{return null}},ls=e=>{let t=e.trim();if(!t)return null;try{return JSON.parse(t)}catch{let n=t.indexOf("{"),i=t.lastIndexOf("}");if(n<0||i<=n)return null;try{return JSON.parse(t.slice(n,i+1))}catch{return null}}};function Ei(e=process.cwd()){let t=Pi(Lt.join(e,"package.json"))||{};return ge(t.version)}function ds(e=process.cwd()){let t=Pi(Lt.join(e,"package.json"))||{},n={...t.dependencies||{},...t.devDependencies||{}};if(n.expo)return"expo";if(n["react-native"])return"react-native"}function Ri(e=process.cwd(),t={}){let n=process.platform==="win32"?Lt.join(e,"node_modules",".bin","expo.cmd"):Lt.join(e,"node_modules",".bin","expo"),i=xn.existsSync(n),s=cs(i?n:"npx",i?["config","--type","public","--json"]:["--no-install","expo","config","--type","public","--json"],{cwd:e,encoding:"utf-8",stdio:["ignore","pipe","pipe"],env:{...process.env,EXPO_NO_TELEMETRY:"1",...t}});return s.error||s.status!==0?null:ls(s.stdout||"")}var Ni=e=>{let t=ge(e);if(!(!t||t==="manual"))return t},Ut=(e,t,n,i={})=>{let r=ge(e);if(r)return r;if(!e||typeof e!="object")return;let o=ge(e.policy);if(o==="appVersion")return ge(t.version);if(o==="sdkVersion")return ge(t.sdkVersion);if(o==="nativeVersion"){let s=ge(t.version);if(!s||!n)return;let a=n==="ios"?vi(i.iosBuildNumber)||vi(t.ios?.buildNumber):i.androidVersionCode!==void 0?String(i.androidVersionCode).trim():t.android?.versionCode!==void 0?String(t.android.versionCode).trim():void 0;return!a||a.toLowerCase()==="auto"?s:a?`${s}(${a})`:s}};function ps(e,t,n={},i){let r=t?Ut(e[t]?.runtimeVersion,e,t,n):void 0;if(r)return r;let o=Ut(e.runtimeVersion,e,t,n);return o||(i?Ut({policy:i},e,t,n):void 0)}function us(e,t){if(!(!e||typeof e!="object"))return ge(t?e[t]?.runtimeVersion:void 0)||ge(e.runtimeVersion)}function ql(e,t={}){return ge(t.MACH_OTA_CHANNEL)||ge(e.ota?.channel)||"production"}function xi(e,t){return[e?.runtimeVersion!==t.runtimeVersion?`runtime ${e?.runtimeVersion||"missing"} (expected ${t.runtimeVersion})`:void 0,e?.channel!==t.channel?`channel ${e?.channel||"missing"} (expected ${t.channel})`:void 0,e?.url!==t.url?`URL ${e?.url||"missing"} (expected ${t.url})`:void 0].filter(n=>!!n)}function ki(e,t){let n=Ri(e,{MACH_OTA_RUNTIME_VERSION:t.runtimeVersion,MACH_OTA_CHANNEL:t.channel,MACH_OTA_URL:t.url});return n?{runtimeVersion:us(n,t.platform),channel:ge(n.updates?.requestHeaders?.["expo-channel-name"]),url:ge(n.updates?.url),expoConfig:n}:null}function fs(e,t,n={}){let i=ge(n.runtimeVersion)||ge(e.ota?.runtimeVersion);if(i)return i;let r={iosBuildNumber:n.iosBuildNumber,androidVersionCode:n.androidVersionCode},o=Ni(e.ota?.runtimeVersionPolicy);if(o){let s=Ut({policy:o},t,n.platform,r);if(s)return s}return ps(t,n.platform,r)}function ed(e,t={}){let n=t.cwd||process.cwd(),i=ge(t.runtimeVersion)||ge(e.ota?.runtimeVersion);if(i)return i;let r=Ni(e.ota?.runtimeVersionPolicy),o={iosBuildNumber:t.iosBuildNumber,androidVersionCode:t.androidVersionCode};if((t.framework||e.framework||ds(n))==="expo"){let a=Ri(n),c=a?fs(e,a,{platform:t.platform,iosBuildNumber:o.iosBuildNumber,androidVersionCode:o.androidVersionCode}):void 0;if(c)return c}return Ei(n)||"1.0.0"}import Ft from"fs";import kn from"path";import{spawnSync as ms}from"child_process";var Xt=/^[A-Za-z0-9-]+(?:\.[A-Za-z0-9-]+)+$/;function $i(e){if(!e||typeof e!="object")return;let t=e,n=typeof t.targetName=="string"?t.targetName.trim():"",i=typeof t.bundleIdentifier=="string"?t.bundleIdentifier.trim():"";if(!(!n||n.length>128||/[\r\n\0]/.test(n)||!Xt.test(i)))return{targetName:n,bundleIdentifier:i}}function On(e){if(!e||typeof e!="object")return[];let t=e,i=(t.expo&&typeof t.expo=="object"?t.expo:t)?.extra?.eas?.build?.experimental?.ios?.appExtensions;return Array.isArray(i)?i.map($i).filter(Boolean):[]}function gs(e){for(let t of["app.json","app.config.json"]){let n=kn.join(e,t);if(Ft.existsSync(n))try{return On(JSON.parse(Ft.readFileSync(n,"utf8")))}catch{return[]}}return[]}function hs(e){let t=ms(process.platform==="win32"?"npx.cmd":"npx",["--no-install","expo","config","--type","public","--json"],{cwd:e,encoding:"utf8",timeout:15e3,maxBuffer:5242880,stdio:["ignore","pipe","ignore"]});if(t.status!==0||!t.stdout)return[];try{return On(JSON.parse(t.stdout))}catch{return[]}}function Oi(e,t,n){let i=t.replace(/[.*+?^${}()|[\]\\]/g,"\\$&");return e.match(new RegExp(`${i}(?:\\s+\\/\\*[^\\n]*\\*\\/)?\\s*=\\s*\\{\\s*isa\\s*=\\s*${n};([\\s\\S]*?)\\n\\s*\\};`))?.[1]}function ys(e){let t=kn.join(e,"ios");if(!Ft.existsSync(t))return[];let n=[],i=o=>{for(let s of Ft.readdirSync(o,{withFileTypes:!0})){if(s.name==="Pods"||s.name==="build")continue;let a=kn.join(o,s.name);s.isDirectory()?i(a):s.name==="project.pbxproj"&&n.push(a)}};i(t);let r=[];for(let o of n){let s=Ft.readFileSync(o,"utf8"),a=/([A-Fa-f0-9]{24})(?: \/\* ([^*\n]+) \*\/)? = \{\s*isa = PBXNativeTarget;([\s\S]*?)\n\s*\};/g;for(let c of s.matchAll(a)){let l=c[3]||"";if(!/productType\s*=\s*"?com\.apple\.product-type\.app-extension"?;/.test(l))continue;let p=(l.match(/\bname\s*=\s*"?([^";\n]+)"?;/)?.[1]||c[2]||"").trim(),d=l.match(/buildConfigurationList\s*=\s*([A-Fa-f0-9]{24})/)?.[1];if(!p||!d)continue;let g=[...(Oi(s,d,"XCConfigurationList")||"").matchAll(/([A-Fa-f0-9]{24})(?: \/\*[^*\n]+\*\/)?/g)].map(R=>R[1]),u;for(let R of g){let v=Oi(s,R,"XCBuildConfiguration")?.match(/PRODUCT_BUNDLE_IDENTIFIER\s*=\s*"?([^";\s]+)"?;/)?.[1]?.trim();if(v&&!v.includes("$")&&Xt.test(v)){u=v;break}}u&&r.push({targetName:p,bundleIdentifier:u})}}return r}function Is(e,t,n){if(!Xt.test(e))throw new Error(`Invalid main iOS bundle identifier "${e}".`);let i=[{targetName:t,bundleIdentifier:e,isMainApplication:!0}],r=new Set([e]),o=new Set(t?[t]:[]);for(let s of n){let a=$i(s);if(!a)throw new Error("Each ios.appExtensions entry requires a valid targetName and bundleIdentifier.");if(r.has(a.bundleIdentifier))throw new Error(`Duplicate iOS signing bundle identifier "${a.bundleIdentifier}".`);if(o.has(a.targetName))throw new Error(`Duplicate iOS signing target name "${a.targetName}".`);r.add(a.bundleIdentifier),o.add(a.targetName),i.push({...a,isMainApplication:!1})}return i}function od(e){let{config:t,resolvedProfile:n,framework:i,appRoot:r}=e,o=n?.ios?.appExtensions??t?.ios?.appExtensions,s=Array.isArray(o)?o:[];return s.length===0&&(s=On(t?.expo)),s.length===0&&i==="expo"&&(s=gs(r)),s.length===0&&i==="expo"&&(s=hs(r)),s.length===0&&(s=ys(r)),Is(e.mainBundleIdentifier,e.mainTargetName,s)}function sd(e){return JSON.stringify({version:1,profiles:e})}function _i(e){if(!e)return[];let t;try{t=JSON.parse(e)}catch{throw new Error("IOS_PROVISIONING_PROFILES contains invalid JSON.")}let n=t;if(n.version!==1||!Array.isArray(n.profiles))throw new Error("IOS_PROVISIONING_PROFILES has an unsupported format.");return n.profiles.map(i=>{let r=i.isMainApplication===!0,o=typeof i.bundleIdentifier=="string"?i.bundleIdentifier.trim():"",s=typeof i.targetName=="string"?i.targetName.trim():"";if(!Xt.test(o)||!r&&(!s||s.length>128||/[\r\n\0]/.test(s))||typeof i.profileBase64!="string"||i.profileBase64.length<64)throw new Error("IOS_PROVISIONING_PROFILES contains an invalid profile.");return{targetName:s||void 0,bundleIdentifier:o,isMainApplication:r,profileBase64:i.profileBase64}})}import Ie from"fs";import Ht from"os";import he from"path";import{execFileSync as Bi,spawnSync as Vi}from"child_process";var Ti=e=>e.replace(/&/g,"&").replace(/</g,"<").replace(/>/g,">").replace(/"/g,""").replace(/'/g,"'"),_n=(e,t)=>{let n=t.replace(/[.*+?^${}()|[\]\\]/g,"\\$&");return e.match(new RegExp(`<key>${n}<\\/key>\\s*<string>([^<]+)<\\/string>`))?.[1]?.trim()},As=e=>{let t=_n(e,"application-identifier");if(!t)return;let n=e.match(/<key>TeamIdentifier<\/key>\s*<array>\s*<string>([^<]+)<\/string>/)?.[1]?.trim();if(n&&t.startsWith(`${n}.`))return t.slice(n.length+1);let i=t.indexOf(".");return i>=0?t.slice(i+1):t},bs=(e,t)=>e===t||e==="*"?!0:e.endsWith(".*")?t.startsWith(`${e.slice(0,-2)}.`):!1;function Mi(e){let t=e.profileDirectory||he.join(Ht.homedir(),"Library","MobileDevice","Provisioning Profiles");return Ie.mkdirSync(t,{recursive:!0}),e.profiles.map((n,i)=>{let r=he.join(Ht.tmpdir(),`mach-profile-${e.buildId}-${i}.mobileprovision`);Ie.writeFileSync(r,Buffer.from(n.profileBase64,"base64"),{mode:384});try{let o=Bi("security",["cms","-D","-i",r],{encoding:"utf8",maxBuffer:5242880}),s=_n(o,"UUID");if(!s)throw new Error(`Provisioning profile for ${n.bundleIdentifier} has no UUID.`);let a=As(o);if(!a||!bs(a,n.bundleIdentifier))throw new Error(`Provisioning profile mismatch for ${n.bundleIdentifier}; profile contains ${a||"an unknown App ID"}.`);let c=/<key>get-task-allow<\/key>\s*<true\/>/.test(o),l=o.includes("<key>ProvisionedDevices</key>"),p=he.join(t,`${s}.mobileprovision`);return Ie.copyFileSync(r,p),Ie.chmodSync(p,384),{targetName:n.targetName,bundleIdentifier:n.bundleIdentifier,isMainApplication:n.isMainApplication,uuid:s,name:_n(o,"Name"),isAppStore:!l&&!c,isDevelopment:c}}finally{try{Ie.unlinkSync(r)}catch{}}})}var ji=(e,t=[])=>{if(!Ie.existsSync(e))return t;for(let n of Ie.readdirSync(e,{withFileTypes:!0})){if(n.name==="Pods"||n.name==="build"||n.name==="DerivedData")continue;let i=he.join(e,n.name);if(n.isDirectory()&&n.name.endsWith(".xcodeproj")){let r=he.join(i,"project.pbxproj");Ie.existsSync(r)&&t.push(r);continue}n.isDirectory()&&ji(i,t)}return t},Fi=e=>e.filter(t=>!!(t&&Ie.existsSync(t))),$n=e=>{if(!Ie.existsSync(e))return[];try{return Ie.readdirSync(e,{withFileTypes:!0}).filter(t=>t.isDirectory()).map(t=>he.join(e,t.name))}catch{return[]}},Di=(e,t,n)=>{let i=Vi(e,t,{env:n,encoding:"utf8",stdio:["ignore","pipe","ignore"]});if(!(i.error||i.status!==0))return i.stdout.trim()||void 0};function Cs(e={}){let t=e.baseEnv||process.env,n=e.homeDirectory||Ht.homedir(),i=String(t.GEM_PATH||"").split(he.delimiter).filter(Boolean),r=String(t.PATH||"").split(he.delimiter).filter(Boolean),o=[...e.fastlaneGemRoots||[],t.FASTLANE_GEM_HOME,...$n(he.join(n,".local/share/fastlane")),...$n("/opt/homebrew/Cellar/fastlane").map(a=>he.join(a,"libexec")),...$n("/usr/local/Cellar/fastlane").map(a=>he.join(a,"libexec")),...i],s=[...e.rubyBinDirectories||[],t.FASTLANE_BIN_DIR,"/opt/homebrew/opt/ruby/bin","/usr/local/opt/ruby/bin",...r];return{...t,PATH:[...new Set(Fi(s))].join(he.delimiter),GEM_PATH:[...new Set(Fi(o))].join(he.delimiter),FASTLANE_INSTALLED_VIA_HOMEBREW:t.FASTLANE_INSTALLED_VIA_HOMEBREW||"true",FASTLANE_SKIP_UPDATE_CHECK:"1",FASTLANE_HIDE_CHANGELOG:"1"}}var Ss=e=>{let t={...process.env},n=Di("brew",["--prefix","fastlane"],t),i=Di("brew",["--prefix","ruby"],t),r=Cs({baseEnv:t,fastlaneGemRoots:n?[he.join(n,"libexec")]:[],rubyBinDirectories:i?[he.join(i,"bin")]:[]}),o=[...process.env.MACH_XCODEPROJ_RUBY?[{command:process.env.MACH_XCODEPROJ_RUBY,prefixArguments:[],env:r}]:[],{command:"ruby",prefixArguments:[],env:r},{command:"bundle",prefixArguments:["exec","ruby"],env:r}];for(let s of o){let a=Vi(s.command,[...s.prefixArguments,"-e","require 'xcodeproj'; print Xcodeproj::VERSION"],{cwd:e,env:s.env,encoding:"utf8",stdio:["ignore","pipe","pipe"]});if(!a.error&&a.status===0)return s}throw new Error(["Mach could not load the Ruby xcodeproj library required for multi-target iOS signing.","Install Fastlane with Homebrew (`brew install fastlane`) or install the xcodeproj gem in the runner Ruby environment.","Mach checks Homebrew Fastlane, FASTLANE_GEM_HOME, and `bundle exec ruby` automatically."].join(" "))},ws=String.raw`
|
|
315
|
+
`+n.slice(s)}return Le.writeFileSync(e,o),!0},Yo=(e,t)=>{if(!Ko(e,t)){if(process.platform!=="darwin")throw new Error(`Could not update binary Info.plist outside macOS: ${e}`);try{wn("/usr/bin/plutil",["-replace","CFBundleVersion","-string",t,e])}catch{wn("/usr/bin/plutil",["-insert","CFBundleVersion","-string",t,e])}}},Ai=(e,t,n)=>{let i=gt(t,"resolved MACH build"),r=rt.resolve(e),o=new Set;if(n)try{for(let l of Jo(r,n))o.add(l)}catch{}for(let l of Ii(r))o.add(l);let s=[...o].sort(),a=new Map,c=!1;try{for(let l of s)a.set(l,Le.readFileSync(l)),Yo(l,i)}catch(l){for(let[p,d]of a)Le.writeFileSync(p,d);throw l}return{buildNumber:i,plistPaths:s,restore:()=>{if(!c){c=!0;for(let[l,p]of a)Le.existsSync(l)&&Le.writeFileSync(l,p)}}}},vn=(e,t,n)=>{let i=gt(e,n),r=gt(t,"resolved MACH build");if(i!==r)throw new Error(`iOS build number mismatch in ${n}: expected MACH buildNumber ${r}, but the artifact contains CFBundleVersion ${i}.`);return i};import{execFileSync as bi}from"child_process";import _t from"fs";import we from"path";import zo from"adm-zip";var En=(e,t)=>{let n=0n,i=0n,r=t;for(;r<e.length&&i<=63n;){let o=e[r++];if(n|=BigInt(o&127)<<i,(o&128)===0)return{value:n,next:r};i+=7n}throw new Error("Malformed protobuf varint")},Tt=e=>{let t=[],n=0;for(;n<e.length;){let i=En(e,n);n=i.next;let r=Number(i.value>>3n),o=Number(i.value&7n);if(r<1)throw new Error("Malformed protobuf field number");if(o===0){let s=En(e,n);n=s.next,t.push({number:r,wireType:o,varint:s.value});continue}if(o===1){if(n+8>e.length)throw new Error("Truncated protobuf fixed64");t.push({number:r,wireType:o,bytes:e.subarray(n,n+8)}),n+=8;continue}if(o===2){let s=En(e,n);n=s.next;let a=Number(s.value);if(!Number.isSafeInteger(a)||n+a>e.length)throw new Error("Truncated protobuf length-delimited field");t.push({number:r,wireType:o,bytes:e.subarray(n,n+a)}),n+=a;continue}if(o===5){if(n+4>e.length)throw new Error("Truncated protobuf fixed32");t.push({number:r,wireType:o,bytes:e.subarray(n,n+4)}),n+=4;continue}throw new Error(`Unsupported protobuf wire type ${o}`)}return t},Ci=(e,t)=>e.find(i=>i.number===t&&i.wireType===2)?.bytes?.toString("utf8"),Qo=e=>{let n=Tt(e).find(o=>o.number===7&&o.wireType===2)?.bytes;if(!n)return null;let r=Tt(n).find(o=>(o.number===6||o.number===7)&&o.wireType===0)?.varint;return r===void 0||r>BigInt(Number.MAX_SAFE_INTEGER)?null:r.toString()},qo=e=>{let n=Tt(e).find(l=>l.number===1&&l.wireType===2)?.bytes;if(!n)throw new Error("AAB base manifest has no root XML element");let o=Tt(n).filter(l=>l.number===4&&l.wireType===2).map(l=>Tt(l.bytes)).find(l=>Ci(l,2)==="versionCode");if(!o)throw new Error("AAB base manifest has no android:versionCode");let s=Ci(o,3)?.trim();if(s&&/^\d+$/.test(s))return je(s,"packaged AAB manifest");let a=o.find(l=>l.number===6&&l.wireType===2)?.bytes,c=a?Qo(a):null;return je(c,"packaged AAB manifest")},Si=e=>{try{return _t.accessSync(e,_t.constants.X_OK),_t.statSync(e).isFile()}catch{return!1}},Pn=e=>String(process.env.PATH||"").split(we.delimiter).filter(Boolean).map(t=>we.join(t,e)),wi=()=>Array.from(new Set([process.env.ANDROID_HOME,process.env.ANDROID_SDK_ROOT,process.platform==="darwin"?we.join(process.env.HOME||"","Library/Android/sdk"):we.join(process.env.HOME||"","Android/Sdk"),"/opt/android-sdk"].filter(e=>!!e))),vi=e=>{try{return _t.readdirSync(e).map(t=>we.join(e,t)).filter(t=>_t.statSync(t).isDirectory()).sort((t,n)=>n.localeCompare(t,void 0,{numeric:!0}))}catch{return[]}},es=()=>{let e=Pn("apkanalyzer");for(let t of wi()){let n=we.join(t,"cmdline-tools");e.push(we.join(n,"latest/bin/apkanalyzer"));for(let i of vi(n))e.push(we.join(i,"bin/apkanalyzer"))}return e},ts=()=>{let e=[...Pn("aapt2"),...Pn("aapt")];for(let t of wi())for(let n of vi(we.join(t,"build-tools")))e.push(we.join(n,"aapt2"),we.join(n,"aapt"));return e},ns=e=>{let t=e.trim();return/^\d+$/.test(t)?t:null},is=e=>e.match(/^package:.*\bversionCode='(\d+)'/m)?.[1]||null,rs=(e,t)=>{let n=t.apkanalyzer??es();for(let r of n)if(Si(r))try{let o=bi(r,["manifest","version-code",e],{encoding:"utf8",stdio:["ignore","pipe","pipe"]}),s=ns(o);if(s)return je(s,"packaged APK manifest")}catch{}let i=t.aapt??ts();for(let r of i)if(Si(r))try{let o=bi(r,["dump","badging",e],{encoding:"utf8",stdio:["ignore","pipe","pipe"]}),s=is(o);if(s)return je(s,"packaged APK manifest")}catch{}throw new Error("Could not inspect the packaged APK versionCode. Install Android SDK command-line tools (apkanalyzer or aapt2) and rebuild; MACH will not publish an unverified artifact.")},os=(e,t={})=>{let n=we.extname(e).toLowerCase();if(n===".apk")return rs(e,t);if(n!==".aab")throw new Error(`Unsupported Android artifact for version validation: ${e}`);let i;try{i=new zo(e)}catch(o){throw new Error(`Could not open AAB ${we.basename(e)}: ${o.message}`)}let r=i.getEntry("base/manifest/AndroidManifest.xml")||i.getEntries().find(o=>o.entryName.replace(/\\/g,"/")==="base/manifest/AndroidManifest.xml");if(!r)throw new Error(`AAB ${we.basename(e)} has no base module manifest`);try{return qo(r.getData())}catch(o){throw new Error(`Could not read versionCode from ${we.basename(e)}: ${o.message}`)}},Rn=(e,t,n={})=>{let i=je(t,"resolved MACH build assignment"),r=os(e,n);if(r!==i)throw new Error(`Android versionCode mismatch in ${we.basename(e)}: expected ${i}, packaged ${r}. MACH stopped the build before upload.`);return r};import me from"fs";import ee from"path";var Nn=e=>{let t=ee.join(e,"package.json");if(!me.existsSync(t))return null;try{return JSON.parse(me.readFileSync(t,"utf8"))}catch{return null}},Ei=e=>{let t=Nn(e);if(!t)return 0;let n={...t.dependencies||{},...t.devDependencies||{}},i=0;return n.expo&&(i+=8),n["react-native"]&&(i+=8),me.existsSync(ee.join(e,"android"))&&(i+=3),me.existsSync(ee.join(e,"ios"))&&(i+=3),/^(app|mobile)$/i.test(ee.basename(e))&&(i+=1),i},ss=e=>{let t=e?.workspaces;return Array.isArray(t)?t.filter(n=>typeof n=="string"):Array.isArray(t?.packages)?t.packages.filter(n=>typeof n=="string"):[]},as=(e,t)=>{let n=new Set;for(let i of t){let r=i.replace(/\\/g,"/").replace(/\/+$/,"");if(!r||r.startsWith("/")||r===".."||r.startsWith("../")||r.includes("/../"))continue;if(!r.includes("*")){n.add(ee.resolve(e,r));continue}let o=r.match(/^(.*)\/\*$/);if(!o)continue;let s=ee.resolve(e,o[1]);if(!(!me.existsSync(s)||!me.statSync(s).isDirectory()))for(let a of me.readdirSync(s,{withFileTypes:!0}))a.isDirectory()&&n.add(ee.join(s,a.name))}for(let i of["apps","packages"]){let r=ee.join(e,i);if(!(!me.existsSync(r)||!me.statSync(r).isDirectory()))for(let o of me.readdirSync(r,{withFileTypes:!0}))o.isDirectory()&&n.add(ee.join(r,o.name))}return Array.from(n)},Hl=e=>{let t=ee.resolve(e);if(Ei(t)>0)return".";let n=Nn(t),i=as(t,ss(n)).map(r=>({directory:r,score:Ei(r)})).filter(r=>r.score>0).sort((r,o)=>o.score-r.score||r.directory.localeCompare(o.directory));return i.length===0||i[1]&&i[1].score===i[0].score?null:ee.relative(t,i[0].directory).split(ee.sep).join("/")},Jl=(e,t)=>{let n=ht(e,t,{requireAppDirectory:!0}),i=Nn(n.appRoot);return{...i?.dependencies||{},...i?.devDependencies||{}}.expo?"expo":"react-native"},cs=e=>{if(e==null)return".";if(typeof e!="string")throw new Error("appDirectory must be a relative directory path.");let t=e.trim();if(!t||t===".")return".";if(t.includes("\0"))throw new Error("appDirectory contains an invalid null byte.");let n=t.replace(/\\/g,"/");if(ee.posix.isAbsolute(n)||/^[A-Za-z]:\//.test(n))throw new Error("appDirectory must be relative to the project root.");let i=ee.posix.normalize(n).replace(/^\.\//,"");if(i===".."||i.startsWith("../")||i.includes("/../"))throw new Error("appDirectory must stay inside the project root.");return!i||i==="."?".":i.replace(/\/+$/,"")},ht=(e,t,n={})=>{let i=ee.resolve(e),r=cs(t),o=ee.resolve(i,...r.split("/").filter(a=>a&&a!==".")),s=ee.relative(i,o);if(s===".."||s.startsWith(`..${ee.sep}`)||ee.isAbsolute(s))throw new Error("appDirectory must stay inside the project root.");if(n.requireAppDirectory){if(!me.existsSync(o)||!me.statSync(o).isDirectory())throw new Error(`Configured appDirectory "${r}" does not exist inside the project root.`);if(!me.existsSync(ee.join(o,"package.json")))throw new Error(`Configured appDirectory "${r}" must contain a package.json.`);let a=me.realpathSync(i),c=me.realpathSync(o),l=ee.relative(a,c);if(l===".."||l.startsWith(`..${ee.sep}`)||ee.isAbsolute(l))throw new Error("Configured appDirectory resolves outside the project root.")}return{sourceRoot:i,appDirectory:r,appRoot:o}},Kl=(e,t,n)=>{if(t==="react-native"){if(n==="android"){let i=ee.join(e.appRoot,"android/gradlew"),r=ee.join(e.appRoot,"gradlew");if(!me.existsSync(i)&&!me.existsSync(r))throw new Error(`React Native Android build requires android/gradlew inside appDirectory "${e.appDirectory}".`);return}if(!me.existsSync(ee.join(e.appRoot,"ios/Podfile")))throw new Error(`React Native iOS build requires ios/Podfile inside appDirectory "${e.appDirectory}".`)}};import xn from"fs";import Lt from"path";import{spawnSync as ls}from"child_process";var ge=e=>{if(typeof e!="string")return;let t=e.trim();return t.length>0?t:void 0},Pi=e=>e==null?void 0:ge(String(e)),Ni=e=>{if(!xn.existsSync(e))return null;try{return JSON.parse(xn.readFileSync(e,"utf-8"))}catch{return null}},ds=e=>{let t=e.trim();if(!t)return null;try{return JSON.parse(t)}catch{let n=t.indexOf("{"),i=t.lastIndexOf("}");if(n<0||i<=n)return null;try{return JSON.parse(t.slice(n,i+1))}catch{return null}}};function Ri(e=process.cwd()){let t=Ni(Lt.join(e,"package.json"))||{};return ge(t.version)}function ps(e=process.cwd()){let t=Ni(Lt.join(e,"package.json"))||{},n={...t.dependencies||{},...t.devDependencies||{}};if(n.expo)return"expo";if(n["react-native"])return"react-native"}function xi(e=process.cwd(),t={}){let n=process.platform==="win32"?Lt.join(e,"node_modules",".bin","expo.cmd"):Lt.join(e,"node_modules",".bin","expo"),i=xn.existsSync(n),s=ls(i?n:"npx",i?["config","--type","public","--json"]:["--no-install","expo","config","--type","public","--json"],{cwd:e,encoding:"utf-8",stdio:["ignore","pipe","pipe"],env:{...process.env,EXPO_NO_TELEMETRY:"1",...t}});return s.error||s.status!==0?null:ds(s.stdout||"")}var ki=e=>{let t=ge(e);if(!(!t||t==="manual"))return t},Ut=(e,t,n,i={})=>{let r=ge(e);if(r)return r;if(!e||typeof e!="object")return;let o=ge(e.policy);if(o==="appVersion")return ge(t.version);if(o==="sdkVersion")return ge(t.sdkVersion);if(o==="nativeVersion"){let s=ge(t.version);if(!s||!n)return;let a=n==="ios"?Pi(i.iosBuildNumber)||Pi(t.ios?.buildNumber):i.androidVersionCode!==void 0?String(i.androidVersionCode).trim():t.android?.versionCode!==void 0?String(t.android.versionCode).trim():void 0;return!a||a.toLowerCase()==="auto"?s:a?`${s}(${a})`:s}};function us(e,t,n={},i){let r=t?Ut(e[t]?.runtimeVersion,e,t,n):void 0;if(r)return r;let o=Ut(e.runtimeVersion,e,t,n);return o||(i?Ut({policy:i},e,t,n):void 0)}function fs(e,t){if(!(!e||typeof e!="object"))return ge(t?e[t]?.runtimeVersion:void 0)||ge(e.runtimeVersion)}function ed(e,t={}){return ge(t.MACH_OTA_CHANNEL)||ge(e.ota?.channel)||"production"}function Oi(e,t){return[e?.runtimeVersion!==t.runtimeVersion?`runtime ${e?.runtimeVersion||"missing"} (expected ${t.runtimeVersion})`:void 0,e?.channel!==t.channel?`channel ${e?.channel||"missing"} (expected ${t.channel})`:void 0,e?.url!==t.url?`URL ${e?.url||"missing"} (expected ${t.url})`:void 0].filter(n=>!!n)}function $i(e,t){let n=xi(e,{MACH_OTA_RUNTIME_VERSION:t.runtimeVersion,MACH_OTA_CHANNEL:t.channel,MACH_OTA_URL:t.url});return n?{runtimeVersion:fs(n,t.platform),channel:ge(n.updates?.requestHeaders?.["expo-channel-name"]),url:ge(n.updates?.url),expoConfig:n}:null}function ms(e,t,n={}){let i=ge(n.runtimeVersion)||ge(e.ota?.runtimeVersion);if(i)return i;let r={iosBuildNumber:n.iosBuildNumber,androidVersionCode:n.androidVersionCode},o=ki(e.ota?.runtimeVersionPolicy);if(o){let s=Ut({policy:o},t,n.platform,r);if(s)return s}return us(t,n.platform,r)}function td(e,t={}){let n=t.cwd||process.cwd(),i=ge(t.runtimeVersion)||ge(e.ota?.runtimeVersion);if(i)return i;let r=ki(e.ota?.runtimeVersionPolicy),o={iosBuildNumber:t.iosBuildNumber,androidVersionCode:t.androidVersionCode};if((t.framework||e.framework||ps(n))==="expo"){let a=xi(n),c=a?ms(e,a,{platform:t.platform,iosBuildNumber:o.iosBuildNumber,androidVersionCode:o.androidVersionCode}):void 0;if(c)return c}return Ri(n)||"1.0.0"}import Ft from"fs";import kn from"path";import{spawnSync as gs}from"child_process";var Xt=/^[A-Za-z0-9-]+(?:\.[A-Za-z0-9-]+)+$/;function Ti(e){if(!e||typeof e!="object")return;let t=e,n=typeof t.targetName=="string"?t.targetName.trim():"",i=typeof t.bundleIdentifier=="string"?t.bundleIdentifier.trim():"";if(!(!n||n.length>128||/[\r\n\0]/.test(n)||!Xt.test(i)))return{targetName:n,bundleIdentifier:i}}function On(e){if(!e||typeof e!="object")return[];let t=e,i=(t.expo&&typeof t.expo=="object"?t.expo:t)?.extra?.eas?.build?.experimental?.ios?.appExtensions;return Array.isArray(i)?i.map(Ti).filter(Boolean):[]}function hs(e){for(let t of["app.json","app.config.json"]){let n=kn.join(e,t);if(Ft.existsSync(n))try{return On(JSON.parse(Ft.readFileSync(n,"utf8")))}catch{return[]}}return[]}function ys(e){let t=gs(process.platform==="win32"?"npx.cmd":"npx",["--no-install","expo","config","--type","public","--json"],{cwd:e,encoding:"utf8",timeout:15e3,maxBuffer:5242880,stdio:["ignore","pipe","ignore"]});if(t.status!==0||!t.stdout)return[];try{return On(JSON.parse(t.stdout))}catch{return[]}}function _i(e,t,n){let i=t.replace(/[.*+?^${}()|[\]\\]/g,"\\$&");return e.match(new RegExp(`${i}(?:\\s+\\/\\*[^\\n]*\\*\\/)?\\s*=\\s*\\{\\s*isa\\s*=\\s*${n};([\\s\\S]*?)\\n\\s*\\};`))?.[1]}function Is(e){let t=kn.join(e,"ios");if(!Ft.existsSync(t))return[];let n=[],i=o=>{for(let s of Ft.readdirSync(o,{withFileTypes:!0})){if(s.name==="Pods"||s.name==="build")continue;let a=kn.join(o,s.name);s.isDirectory()?i(a):s.name==="project.pbxproj"&&n.push(a)}};i(t);let r=[];for(let o of n){let s=Ft.readFileSync(o,"utf8"),a=/([A-Fa-f0-9]{24})(?: \/\* ([^*\n]+) \*\/)? = \{\s*isa = PBXNativeTarget;([\s\S]*?)\n\s*\};/g;for(let c of s.matchAll(a)){let l=c[3]||"";if(!/productType\s*=\s*"?com\.apple\.product-type\.app-extension"?;/.test(l))continue;let p=(l.match(/\bname\s*=\s*"?([^";\n]+)"?;/)?.[1]||c[2]||"").trim(),d=l.match(/buildConfigurationList\s*=\s*([A-Fa-f0-9]{24})/)?.[1];if(!p||!d)continue;let g=[...(_i(s,d,"XCConfigurationList")||"").matchAll(/([A-Fa-f0-9]{24})(?: \/\*[^*\n]+\*\/)?/g)].map(R=>R[1]),u;for(let R of g){let v=_i(s,R,"XCBuildConfiguration")?.match(/PRODUCT_BUNDLE_IDENTIFIER\s*=\s*"?([^";\s]+)"?;/)?.[1]?.trim();if(v&&!v.includes("$")&&Xt.test(v)){u=v;break}}u&&r.push({targetName:p,bundleIdentifier:u})}}return r}function As(e,t,n){if(!Xt.test(e))throw new Error(`Invalid main iOS bundle identifier "${e}".`);let i=[{targetName:t,bundleIdentifier:e,isMainApplication:!0}],r=new Set([e]),o=new Set(t?[t]:[]);for(let s of n){let a=Ti(s);if(!a)throw new Error("Each ios.appExtensions entry requires a valid targetName and bundleIdentifier.");if(r.has(a.bundleIdentifier))throw new Error(`Duplicate iOS signing bundle identifier "${a.bundleIdentifier}".`);if(o.has(a.targetName))throw new Error(`Duplicate iOS signing target name "${a.targetName}".`);r.add(a.bundleIdentifier),o.add(a.targetName),i.push({...a,isMainApplication:!1})}return i}function sd(e){let{config:t,resolvedProfile:n,framework:i,appRoot:r}=e,o=n?.ios?.appExtensions??t?.ios?.appExtensions,s=Array.isArray(o)?o:[];return s.length===0&&(s=On(t?.expo)),s.length===0&&i==="expo"&&(s=hs(r)),s.length===0&&i==="expo"&&(s=ys(r)),s.length===0&&(s=Is(r)),As(e.mainBundleIdentifier,e.mainTargetName,s)}function ad(e){return JSON.stringify({version:1,profiles:e})}function Fi(e){if(!e)return[];let t;try{t=JSON.parse(e)}catch{throw new Error("IOS_PROVISIONING_PROFILES contains invalid JSON.")}let n=t;if(n.version!==1||!Array.isArray(n.profiles))throw new Error("IOS_PROVISIONING_PROFILES has an unsupported format.");return n.profiles.map(i=>{let r=i.isMainApplication===!0,o=typeof i.bundleIdentifier=="string"?i.bundleIdentifier.trim():"",s=typeof i.targetName=="string"?i.targetName.trim():"";if(!Xt.test(o)||!r&&(!s||s.length>128||/[\r\n\0]/.test(s))||typeof i.profileBase64!="string"||i.profileBase64.length<64)throw new Error("IOS_PROVISIONING_PROFILES contains an invalid profile.");return{targetName:s||void 0,bundleIdentifier:o,isMainApplication:r,profileBase64:i.profileBase64}})}import Ie from"fs";import Ht from"os";import he from"path";import{execFileSync as Mi,spawnSync as ji}from"child_process";var Di=e=>e.replace(/&/g,"&").replace(/</g,"<").replace(/>/g,">").replace(/"/g,""").replace(/'/g,"'"),_n=(e,t)=>{let n=t.replace(/[.*+?^${}()|[\]\\]/g,"\\$&");return e.match(new RegExp(`<key>${n}<\\/key>\\s*<string>([^<]+)<\\/string>`))?.[1]?.trim()},bs=e=>{let t=_n(e,"application-identifier");if(!t)return;let n=e.match(/<key>TeamIdentifier<\/key>\s*<array>\s*<string>([^<]+)<\/string>/)?.[1]?.trim();if(n&&t.startsWith(`${n}.`))return t.slice(n.length+1);let i=t.indexOf(".");return i>=0?t.slice(i+1):t},Cs=(e,t)=>e===t||e==="*"?!0:e.endsWith(".*")?t.startsWith(`${e.slice(0,-2)}.`):!1;function Wi(e){let t=e.profileDirectory||he.join(Ht.homedir(),"Library","MobileDevice","Provisioning Profiles");return Ie.mkdirSync(t,{recursive:!0}),e.profiles.map((n,i)=>{let r=he.join(Ht.tmpdir(),`mach-profile-${e.buildId}-${i}.mobileprovision`);Ie.writeFileSync(r,Buffer.from(n.profileBase64,"base64"),{mode:384});try{let o=Mi("security",["cms","-D","-i",r],{encoding:"utf8",maxBuffer:5242880}),s=_n(o,"UUID");if(!s)throw new Error(`Provisioning profile for ${n.bundleIdentifier} has no UUID.`);let a=bs(o);if(!a||!Cs(a,n.bundleIdentifier))throw new Error(`Provisioning profile mismatch for ${n.bundleIdentifier}; profile contains ${a||"an unknown App ID"}.`);let c=/<key>get-task-allow<\/key>\s*<true\/>/.test(o),l=o.includes("<key>ProvisionedDevices</key>"),p=he.join(t,`${s}.mobileprovision`);return Ie.copyFileSync(r,p),Ie.chmodSync(p,384),{targetName:n.targetName,bundleIdentifier:n.bundleIdentifier,isMainApplication:n.isMainApplication,uuid:s,name:_n(o,"Name"),isAppStore:!l&&!c,isDevelopment:c}}finally{try{Ie.unlinkSync(r)}catch{}}})}var Zi=(e,t=[])=>{if(!Ie.existsSync(e))return t;for(let n of Ie.readdirSync(e,{withFileTypes:!0})){if(n.name==="Pods"||n.name==="build"||n.name==="DerivedData")continue;let i=he.join(e,n.name);if(n.isDirectory()&&n.name.endsWith(".xcodeproj")){let r=he.join(i,"project.pbxproj");Ie.existsSync(r)&&t.push(r);continue}n.isDirectory()&&Zi(i,t)}return t},Bi=e=>e.filter(t=>!!(t&&Ie.existsSync(t))),$n=e=>{if(!Ie.existsSync(e))return[];try{return Ie.readdirSync(e,{withFileTypes:!0}).filter(t=>t.isDirectory()).map(t=>he.join(e,t.name))}catch{return[]}},Vi=(e,t,n)=>{let i=ji(e,t,{env:n,encoding:"utf8",stdio:["ignore","pipe","ignore"]});if(!(i.error||i.status!==0))return i.stdout.trim()||void 0};function Ss(e={}){let t=e.baseEnv||process.env,n=e.homeDirectory||Ht.homedir(),i=String(t.GEM_PATH||"").split(he.delimiter).filter(Boolean),r=String(t.PATH||"").split(he.delimiter).filter(Boolean),o=[...e.fastlaneGemRoots||[],t.FASTLANE_GEM_HOME,...$n(he.join(n,".local/share/fastlane")),...$n("/opt/homebrew/Cellar/fastlane").map(a=>he.join(a,"libexec")),...$n("/usr/local/Cellar/fastlane").map(a=>he.join(a,"libexec")),...i],s=[...e.rubyBinDirectories||[],t.FASTLANE_BIN_DIR,"/opt/homebrew/opt/ruby/bin","/usr/local/opt/ruby/bin",...r];return{...t,PATH:[...new Set(Bi(s))].join(he.delimiter),GEM_PATH:[...new Set(Bi(o))].join(he.delimiter),FASTLANE_INSTALLED_VIA_HOMEBREW:t.FASTLANE_INSTALLED_VIA_HOMEBREW||"true",FASTLANE_SKIP_UPDATE_CHECK:"1",FASTLANE_HIDE_CHANGELOG:"1"}}var ws=e=>{let t={...process.env},n=Vi("brew",["--prefix","fastlane"],t),i=Vi("brew",["--prefix","ruby"],t),r=Ss({baseEnv:t,fastlaneGemRoots:n?[he.join(n,"libexec")]:[],rubyBinDirectories:i?[he.join(i,"bin")]:[]}),o=[...process.env.MACH_XCODEPROJ_RUBY?[{command:process.env.MACH_XCODEPROJ_RUBY,prefixArguments:[],env:r}]:[],{command:"ruby",prefixArguments:[],env:r},{command:"bundle",prefixArguments:["exec","ruby"],env:r}];for(let s of o){let a=ji(s.command,[...s.prefixArguments,"-e","require 'xcodeproj'; print Xcodeproj::VERSION"],{cwd:e,env:s.env,encoding:"utf8",stdio:["ignore","pipe","pipe"]});if(!a.error&&a.status===0)return s}throw new Error(["Mach could not load the Ruby xcodeproj library required for multi-target iOS signing.","Install Fastlane with Homebrew (`brew install fastlane`) or install the xcodeproj gem in the runner Ruby environment.","Mach checks Homebrew Fastlane, FASTLANE_GEM_HOME, and `bundle exec ruby` automatically."].join(" "))},vs=String.raw`
|
|
316
316
|
require 'json'
|
|
317
317
|
require 'xcodeproj'
|
|
318
318
|
|
|
@@ -357,44 +357,44 @@ unless missing.empty?
|
|
|
357
357
|
end
|
|
358
358
|
|
|
359
359
|
puts JSON.generate(matched)
|
|
360
|
-
`;function
|
|
361
|
-
`)}var
|
|
360
|
+
`;function Gi(e){if(e.profiles.length<2)return{matchedTargets:[],restore:()=>{}};let t=Zi(e.iosDirectory);if(t.length===0)throw new Error(`Multi-target iOS signing requires a committed .xcodeproj in ${e.iosDirectory}.`);let n=new Map(t.map(a=>[a,Ie.readFileSync(a)])),i=Ie.mkdtempSync(he.join(Ht.tmpdir(),`mach-signing-${e.temporaryLabel}-`)),r=he.join(i,"profiles.json"),o=he.join(i,"apply.rb");Ie.writeFileSync(r,JSON.stringify({projects:t,profiles:e.profiles,teamId:e.teamId}),{mode:384}),Ie.writeFileSync(o,vs,{mode:448});let s=()=>{for(let[a,c]of n)Ie.writeFileSync(a,c)};try{let a=ws(e.iosDirectory),c=Mi(a.command,[...a.prefixArguments,o,r],{cwd:e.iosDirectory,env:a.env,encoding:"utf8",maxBuffer:5*1024*1024}),l=JSON.parse(c.trim()||"{}");return{matchedTargets:Object.entries(l).map(([p,d])=>`${d} (${p})`),restore:s}}catch(a){throw s(),a}finally{Ie.rmSync(i,{recursive:!0,force:!0})}}function Ui(e){return e.length===0?"":[" <key>provisioningProfiles</key>"," <dict>",...e.flatMap(t=>[` <key>${Di(t.bundleIdentifier)}</key>`,` <string>${Di(t.uuid)}</string>`])," </dict>"].join(`
|
|
361
|
+
`)}var zi=(e,t)=>t.filter(n=>A.existsSync(y.join(e,n))).reduce((n,i)=>n.update(A.readFileSync(y.join(e,i))),Ps.createHash("sha256")).digest("hex").slice(0,16),Rs=e=>zi(e,["package.json","yarn.lock","package-lock.json","bun.lockb"]),Ns=e=>zi(e,["Podfile","Podfile.lock"]),xs=e=>{let t=y.join(e,"fingerprint.json");try{return JSON.parse(A.readFileSync(t,"utf-8"))}catch{return{}}},Li=(e,t)=>{A.mkdirSync(e,{recursive:!0}),A.writeFileSync(y.join(e,"fingerprint.json"),JSON.stringify(t,null,2))},ks=7200*1e3,Os=(e,t)=>{A.mkdirSync(e,{recursive:!0});let n=y.join(e,"build.lock");if(A.existsSync(n))try{let i=JSON.parse(A.readFileSync(n,"utf-8")),r=Date.now()-(i.timestamp||0);if(r<ks)throw new Error(`Another build is already running for this project (build ${i.buildId}, started ${Math.round(r/6e4)}m ago). Cancel it from the dashboard first, or wait for it to complete.`)}catch(i){if(i.message.includes("Another build"))throw i}A.writeFileSync(n,JSON.stringify({buildId:t,pid:process.pid,timestamp:Date.now()}))},$s=(e,t)=>{let n=y.join(e,"build.lock");try{A.existsSync(n)&&JSON.parse(A.readFileSync(n,"utf-8")).buildId===t&&A.unlinkSync(n)}catch{}},Xi=15e5,Hi=(e,t)=>{let n=e+t;return n.length>Xi?n.slice(-Xi):n},Fn=e=>e.replace(/\u001b\[[0-9;]*m/g,""),Qi=e=>/^\s*\d+\s*\|/.test(e),Dn=e=>{let t=Fn(e).trim();return!t||Qi(t)?!1:/(?:^|\s)(?:fatal\s+)?error:|xcodebuild:\s*error|The following build commands failed|Command PhaseScriptExecution failed|PhaseScriptExecution|Command .* failed|CodeSign\b.*(?:failed|error:)|Provisioning profile.*(?:doesn't|does not|missing|not include|invalid|required)|No profiles|requires a provisioning profile|Undefined symbols|(?:^|\s)ld:|clang:\s*error|node: command not found|env: node|No such file or directory|Permission denied/i.test(t)},_s=e=>{let t=new Set,n=[];e.forEach((r,o)=>{Dn(r)&&n.push(o)});for(let r of n){let o=/PhaseScriptExecution|Command PhaseScriptExecution failed|The following build commands failed/i.test(e[r])?18:8,s=/The following build commands failed/i.test(e[r])?18:10;for(let a=Math.max(0,r-o);a<=Math.min(e.length-1,r+s);a++)t.add(a)}if(t.size===0)return e.slice(-120);let i=Array.from(t).sort((r,o)=>r-o).map(r=>e[r]);return i.length>160?i.slice(-160):i},Ts=(e,t,n,i)=>{let r=Fn(i).replace(/\r/g,`
|
|
362
362
|
`).split(`
|
|
363
|
-
`).map(c=>c.trimEnd()).filter(Boolean),o=r.filter(
|
|
363
|
+
`).map(c=>c.trimEnd()).filter(Boolean),o=r.filter(Dn),s=o.length>0?_s(r):r.slice(-80),a=o.length>0?"Key failure output":"Last command output";return[`Command failed with code ${n}: ${e} ${t.join(" ")}`,s.length>0?`
|
|
364
364
|
${a}:
|
|
365
365
|
${s.join(`
|
|
366
|
-
`)}`:""].join("")},
|
|
367
|
-
`)){if(/Ineligible destinations/i.test(d)&&(p=!0),p||!d.includes("platform:iOS Simulator")||d.includes("error:"))continue;let f=d.match(/\bid:([^,}]+)/)?.[1]?.trim(),g=d.match(/\bname:([^,}]+)/)?.[1]?.trim();f&&l.push({id:f,name:g,platform:"iOS Simulator"})}return o(l)},a=[t?"-workspace":"-project",t||n,"-scheme",i,"-configuration",r,"-sdk","iphonesimulator","-showdestinations"];try{let c=Xe("xcodebuild",[...a,"-json"],{cwd:e,encoding:"utf-8",stdio:["ignore","pipe","ignore"]}),l=JSON.parse(c),p=Array.isArray(l.destinations)?l.destinations:Array.isArray(l.availableDestinations)?l.availableDestinations:[],d=o(p);if(d)return d}catch{}try{let c=Xe("xcodebuild",a,{cwd:e,encoding:"utf-8",stdio:["ignore","pipe","ignore"]});return s(c)}catch{}},He=(e,t,n=process.cwd(),i={},r,o)=>new Promise((s,a)=>{let c="",l=
|
|
366
|
+
`)}`:""].join("")},Fs=e=>e==="xcodebuild"&&process.env.MACH_XCODE_FULL_LOGS!=="1",Ds=e=>{let t=Fn(e).trim();return!t||Qi(t)?!1:Dn(t)||/ARCHIVE SUCCEEDED|ARCHIVE FAILED|EXPORT SUCCEEDED|EXPORT FAILED|Exported .* to:|\[IPA VALID\]/i.test(t)},Ve=e=>{try{A.existsSync(e)&&A.rmSync(e,{recursive:!0,force:!0})}catch{}},Bs=(e,t)=>{try{if(!A.existsSync(e))return;for(let n of A.readdirSync(e))t(n)&&Ve(y.join(e,n))}catch{}},yt=e=>{P.info(w.dim("Clearing Metro/Hermes JS transform caches..."));let t=Ae.tmpdir();Bs(t,n=>n==="metro-cache"||n.startsWith("metro-")||n.startsWith("haste-map-")||n.startsWith("react-native-packager-cache-")),Ve(y.join(e,".expo")),Ve(y.join(e,"node_modules/.cache/metro")),Ve(y.join(Ae.homedir(),".cache/metro")),Ve(y.join(Ae.homedir(),".cache/react-native-packager")),Ve(y.join(Ae.homedir(),"Library/Caches/metro")),Ve(y.join(Ae.homedir(),"Library/Caches/react-native-packager"))},Vs=e=>/Internal inconsistency error|never received target ended message/i.test(String(e?.message||e)),Ms=e=>{P.warn(w.yellow("Xcode build system hit an internal inconsistency. Clearing simulator build state and retrying once...")),Ve(y.join(e,"Build")),Ve(y.join(e,"Index.noindex")),Ve(y.join(e,"ModuleCache.noindex")),Ve(y.join(e,"SourcePackages"))},js=e=>{let t=String(e?.message||e);return/Permission denied/i.test(t)&&/Pods\/.*\.sh/i.test(t)},qi=e=>{let t=y.join(e,"Pods"),i=[y.join(t,"Target Support Files"),t].filter(a=>A.existsSync(a)),r=new Set,o=0,s=a=>{let c=a;try{c=A.realpathSync(a)}catch{}if(r.has(c))return;r.add(c);let l;try{l=A.readdirSync(a,{withFileTypes:!0})}catch{return}for(let p of l){let d=y.join(a,p.name);if(p.isDirectory()){s(d);continue}if(!(!p.isFile()||!p.name.endsWith(".sh")))try{let f=A.statSync(d),g=f.mode|493;g!==f.mode&&(A.chmodSync(d,g),o+=1)}catch{}}};for(let a of i)s(a);return o>0&&P.info(w.dim(`Repaired executable permissions on ${o} CocoaPods script${o===1?"":"s"}.`)),o},Ws=(e,t,n,i,r)=>{let o=c=>{let l=c.filter(d=>d?.id&&String(d?.platform||"").includes("iOS Simulator")&&!d?.error),p=l.find(d=>/iphone/i.test(d.name||""))||l[0];return p?.id?`id=${p.id}`:void 0},s=c=>{let l=[],p=!1;for(let d of c.split(`
|
|
367
|
+
`)){if(/Ineligible destinations/i.test(d)&&(p=!0),p||!d.includes("platform:iOS Simulator")||d.includes("error:"))continue;let f=d.match(/\bid:([^,}]+)/)?.[1]?.trim(),g=d.match(/\bname:([^,}]+)/)?.[1]?.trim();f&&l.push({id:f,name:g,platform:"iOS Simulator"})}return o(l)},a=[t?"-workspace":"-project",t||n,"-scheme",i,"-configuration",r,"-sdk","iphonesimulator","-showdestinations"];try{let c=Xe("xcodebuild",[...a,"-json"],{cwd:e,encoding:"utf-8",stdio:["ignore","pipe","ignore"]}),l=JSON.parse(c),p=Array.isArray(l.destinations)?l.destinations:Array.isArray(l.availableDestinations)?l.availableDestinations:[],d=o(p);if(d)return d}catch{}try{let c=Xe("xcodebuild",a,{cwd:e,encoding:"utf-8",stdio:["ignore","pipe","ignore"]});return s(c)}catch{}},He=(e,t,n=process.cwd(),i={},r,o)=>new Promise((s,a)=>{let c="",l=Fs(e),p=Date.now(),d=new Map,f=[i.MACH_APP_ROOT?y.join(i.MACH_APP_ROOT,"node_modules/.bin"):"",i.MACH_SOURCE_ROOT?y.join(i.MACH_SOURCE_ROOT,"node_modules/.bin"):"","/opt/homebrew/bin","/usr/local/bin","/usr/bin","/bin","/usr/sbin","/sbin",y.join(Ae.homedir(),".npm-global/bin")],u=[...(process.env.PATH||"").split(":"),...f].filter((S,E,L)=>S&&L.indexOf(S)===E).join(":");process.env[`${I.envPrefix}DEBUG`]&&console.log(w.magenta(`[${I.nameUpper}_DEBUG] Execution PATH: ${u}`));let R={...process.env,...i,PATH:u,LANG:"en_US.UTF-8",LC_ALL:"en_US.UTF-8"};r&&process.env[`${I.envPrefix}DEBUG`]&&(r(w.magenta(`[ENVIRONMENT] node: ${process.execPath}
|
|
368
368
|
`)),r(w.magenta(`[ENVIRONMENT] PATH: ${u}
|
|
369
369
|
`)),r(w.magenta(`[ENVIRONMENT] command: ${e} ${t.join(" ")}
|
|
370
370
|
`)));let C=e;if(["node","npm","npx","pod"].includes(e)){let S=y.dirname(process.execPath),E=y.join(S,e);A.existsSync(E)&&(C=E,r&&r(w.dim(`[EXEC] Using absolute path: ${C}
|
|
371
|
-
`)))}let v=
|
|
371
|
+
`)))}let v=Yi(C,t,{stdio:"pipe",cwd:n,shell:!0,env:R,detached:process.platform!=="win32"});if(o){if(o.aborted){if(v.pid)try{process.kill(-v.pid,"SIGTERM")}catch{v.kill()}return a(new Error("Command aborted"))}o.addEventListener("abort",()=>{if(v.pid)try{process.kill(-v.pid,"SIGTERM")}catch{v.kill()}a(new Error("Command aborted"))})}let _=(S,E,L=!1)=>{if(!l)return S;let k=`${d.get(E)||""}${S.replace(/\r/g,`
|
|
372
372
|
`)}`.split(`
|
|
373
|
-
`),F=L?"":k.pop()||"";d.set(E,F);let M=k.filter(
|
|
373
|
+
`),F=L?"":k.pop()||"";d.set(E,F);let M=k.filter(Ds);if(M.length>0)return p=Date.now(),`${M.join(`
|
|
374
374
|
`)}
|
|
375
375
|
`;let N=Date.now();return N-p>3e4?(p=N,`[xcodebuild] still running; errors and milestones will appear here.
|
|
376
|
-
`):""},b=(S,E,L=!1)=>{let T=_(S,E,L);T&&(E.write(T),r&&r(T))};v.stdout.on("data",S=>{let E=S.toString();c=
|
|
377
|
-
`).map(o=>o.trim()).filter(o=>/^Payload\/.+\.(?:app|appex)\/Info\.plist$/.test(o)&&!o.includes("/Frameworks/"));if(i.length===0)throw new Error(`Could not validate iOS build number: ${y.basename(e)} has no Payload/*.app/Info.plist.`);let r=A.mkdtempSync(y.join(Ae.tmpdir(),`${I.nameLower}-ipa-plist-`));try{let o="";for(let[s,a]of i.entries()){let c=y.join(r,`Info-${s}.plist`),l=Xe("unzip",["-p",e,a]);A.writeFileSync(c,l);let p=`${y.basename(e)}:${a}`,d=
|
|
376
|
+
`):""},b=(S,E,L=!1)=>{let T=_(S,E,L);T&&(E.write(T),r&&r(T))};v.stdout.on("data",S=>{let E=S.toString();c=Hi(c,E),b(E,process.stdout)}),v.stderr.on("data",S=>{let E=S.toString();c=Hi(c,E),b(E,process.stderr)}),v.on("close",S=>{b("",process.stdout,!0),b("",process.stderr,!0),S===0?s(S):a(new Error(Ts(e,t,S,c)))}),v.on("error",S=>a(S))}),Jt=async(e,t,n,i,r)=>{try{await He("xcodebuild",e,t,n,i,r)}catch(o){if(!js(o))throw o;P.warn(w.yellow("CocoaPods script permission denied. Repairing Pods script permissions and retrying xcodebuild once...")),qi(t),await He("xcodebuild",e,t,n,i,r)}},Zs=e=>{let t=Math.floor(e/1e3%60),n=Math.floor(e/(1e3*60)%60),i=Math.floor(e/(1e3*60*60)%24),r=[];return i>0&&r.push(`${i}h`),n>0&&r.push(`${n}m`),(t>0||r.length===0)&&r.push(`${t}s`),r.join(" ")},ot=(e,t)=>{let n=[];try{if(!A.existsSync(e))return n;let i=A.readdirSync(e);for(let r of i){let o=y.join(e,r);try{let s=A.statSync(o);if(t.some(c=>r.endsWith(c))){n.push(y.resolve(o));continue}s.isDirectory()&&(n=n.concat(ot(o,t)))}catch{}}}catch{}return n},er=(e,t)=>{let n=$t(e);if(!n)throw new Error(`Invalid iOS CFBundleVersion from ${t}: "${e||""}". Apple requires one to three period-separated integers, for example "42" or "1.2.3". If you see "[Decryption Failed]", fix/remove the broken BUILD_NUMBER secret and rebuild.`);return n},Bn=(e,t)=>Xe("/usr/libexec/PlistBuddy",["-c",`Print :${t}`,e],{encoding:"utf-8"}).trim(),It=(e,t)=>{try{return Bn(e,t)}catch{return""}},Ji=e=>String(e||"").replace(/\.app$/i,"").replace(/[^a-z0-9]/gi,"").toLowerCase(),Gs=e=>{try{return A.statSync(e).isDirectory()}catch{return!1}},Us=(e,t,n)=>{if(!A.existsSync(e))throw new Error(`iOS simulator build output directory was not found: ${e}`);let i=A.readdirSync(e).filter(l=>l.endsWith(".app")).map(l=>y.join(e,l)).filter(Gs);if(i.length===0){let p=ot(e,[".app"]).map(d=>y.relative(e,d)).join(", ");throw new Error(`No top-level iOS simulator .app product was found in ${e}.`+(p?` Nested .app bundles found but ignored: ${p}`:""))}let r=new Set([t,n.iosScheme,n.scheme,n.appName].filter(Boolean).map(l=>Ji(String(l))).filter(Boolean)),o=i.map(l=>{let p=y.join(l,"Info.plist"),d=A.existsSync(p)?It(p,"CFBundleName"):"",f=A.existsSync(p)?It(p,"CFBundleDisplayName"):"",g=A.existsSync(p)?It(p,"CFBundleExecutable"):"",u=A.existsSync(p)?It(p,"CFBundleIdentifier"):"",R=g?y.join(l,g):"";return{appPath:l,bundleIdentifier:u,executable:g,isValid:A.existsSync(p)&&!!g&&A.existsSync(R),names:[y.basename(l,".app"),d,f,g].map(Ji).filter(Boolean)}}),s=o.filter(l=>l.isValid);if(s.length===0)throw new Error(`No valid iOS simulator .app product was found in ${e}. Candidates: `+o.map(l=>y.basename(l.appPath)).join(", "));let c=s.find(l=>l.names.some(p=>r.has(p)))||(s.length===1?s[0]:null);if(!c)throw new Error(`Multiple iOS simulator .app products were found in ${e}: `+s.map(l=>{let p=l.bundleIdentifier?` (${l.bundleIdentifier})`:"";return`${y.basename(l.appPath)}${p}`}).join(", ")+`. Set ios.scheme in ${I.configFileName} so ${I.name} can select the app target safely.`);return c.appPath},Ls=(e,t)=>{let n=y.join(e,"Info.plist");if(!A.existsSync(n))throw new Error(`Could not validate iOS build number: ${n} not found.`);let i=er(Bn(n,"CFBundleVersion"),n);return t?vn(i,t,n):i},tr=(e,t=[])=>{if(!A.existsSync(e))return t;for(let n of A.readdirSync(e,{withFileTypes:!0})){if(!n.isDirectory()||n.isSymbolicLink())continue;let i=y.join(e,n.name);n.name!=="Frameworks"&&((n.name.endsWith(".app")||n.name.endsWith(".appex"))&&t.push(i),tr(i,t))}return t},Ki=(e,t)=>[e,...tr(e)].filter((i,r,o)=>o.indexOf(i)===r).map(i=>({bundlePath:i,buildNumber:Ls(i,t)})),nr=e=>{let t=y.join(e,"Info.plist");if(!A.existsSync(t))throw new Error(`Could not validate iOS app executable: ${t} not found.`);let n=It(t,"CFBundleExecutable");if(!n)throw new Error(`Could not validate iOS app executable: CFBundleExecutable missing in ${t}.`);let i=y.join(e,n);if(!A.existsSync(i))throw new Error(`Could not validate iOS app executable: ${i} not found.`);return i},Xs=()=>process.arch==="arm64"?"arm64":"x86_64",ir=e=>{let t=nr(e),n="";try{n=Xe("lipo",["-info",t],{encoding:"utf-8"}).trim()}catch(r){throw new Error(`Could not inspect iOS simulator executable architecture for ${y.basename(e)}: ${r.message}`)}let i=Xs();if(!new RegExp(`\\b${i}\\b`).test(n))throw new Error(`iOS simulator app ${y.basename(e)} cannot be installed on this runner because its executable does not include the required ${i} simulator architecture. lipo output: ${n}. Check the React Native iOS project ARCHS/EXCLUDED_ARCHS settings for iphonesimulator builds.`);return n},Hs=e=>{try{return Xe("xcrun",["vtool","-show-build",e],{encoding:"utf-8"}).trim()}catch(t){throw new Error(`Could not inspect iOS executable build platform for ${y.basename(e)}: ${t.message}`)}},rr=e=>{let t=nr(e),n=Hs(t);if(!/\bplatform\s+IOSSIMULATOR\b/i.test(n))throw new Error(`iOS simulator app ${y.basename(e)} was built for the wrong Apple platform. A simulator artifact must contain PLATFORM IOSSIMULATOR, not an iPhone device binary. vtool output: ${n}`);return n},or=(e,t)=>{let i=Xe("unzip",["-Z1",e],{encoding:"utf-8"}).split(`
|
|
377
|
+
`).map(o=>o.trim()).filter(o=>/^Payload\/.+\.(?:app|appex)\/Info\.plist$/.test(o)&&!o.includes("/Frameworks/"));if(i.length===0)throw new Error(`Could not validate iOS build number: ${y.basename(e)} has no Payload/*.app/Info.plist.`);let r=A.mkdtempSync(y.join(Ae.tmpdir(),`${I.nameLower}-ipa-plist-`));try{let o="";for(let[s,a]of i.entries()){let c=y.join(r,`Info-${s}.plist`),l=Xe("unzip",["-p",e,a]);A.writeFileSync(c,l);let p=`${y.basename(e)}:${a}`,d=er(Bn(c,"CFBundleVersion"),p);t&&vn(d,t,p),/^Payload\/[^/]+\.app\/Info\.plist$/.test(a)&&(o=d)}if(!o)throw new Error(`Could not validate iOS build number: ${y.basename(e)} has no main application Info.plist.`);return o}finally{A.rmSync(r,{recursive:!0,force:!0})}},Js=e=>`'${e.replace(/'/g,"'\\''")}'`,Ks=()=>process.execPath&&A.existsSync(process.execPath)?process.execPath:Xe("which",["node"],{encoding:"utf-8"}).trim(),sr=(e,t,n)=>{if(!A.existsSync(e))return;let i=Ks();t.NODE_BINARY=i;let r=y.join(e,".xcode.env.local");A.writeFileSync(r,`export NODE_BINARY=${Js(i)}
|
|
378
378
|
`);let o=`[NODE] Xcode NODE_BINARY: ${i}
|
|
379
|
-
`;n&&n(w.dim(o)),P.info(w.dim(o.trim()))}
|
|
380
|
-
\u{1F6D1} Build cancelled from dashboard. Terminating...`)),R.abort(),v&&clearInterval(v))}catch{}},5e3));let _=y.join(d,".mach-cache"),b="setup",S="",E=null,L=async()=>{if(!S||!i)return;let N=S;S="";try{let W=N;Object.values(n).forEach(H=>{if(H&&H.length>5){let ne=H.replace(/[.*+?^${}()|[\]\\]/g,"\\$&");W=W.replace(new RegExp(ne,"g"),"[SECRET]")}}),await G.post(`/builds/${i}/${t}/logs`,{log:W,step:b})}catch{}},T=async()=>{E&&(clearTimeout(E),E=null),await L()
|
|
381
|
-
`)},M=async(N,W,H,ne)=>await He(N,W,H,ne,Ce=>{k(Ce)},C);P.info(w.blue(`\u{1F680} Starting local build for ${a} (${c})...`));try{
|
|
379
|
+
`;n&&n(w.dim(o)),P.info(w.dim(o.trim()))},_d=async(e,t,n={},i,r={})=>{let o=Kt(),s=Date.now(),a=e.platform,c=e.buildProfile||"production",l=Ot(e.framework),p=ht(process.cwd(),e.appDirectory,{requireAppDirectory:!0}),d=p.sourceRoot,f=p.appRoot;e.appDirectory=p.appDirectory;let g=()=>({...Sn(n,c,e),MACH_SOURCE_ROOT:d,MACH_APP_ROOT:f}),u=async(N,W={})=>{if(i)for(let H=1;H<=3;H++)try{await G.patch(`/builds/${i}/${t}`,{status:N,...W});return}catch(ne){let Ce=ne?.response?.data?.message||ne?.message||String(ne);console.error(`[reportStatus] attempt ${H}/3 failed (status=${N}): ${Ce}`),H<3&&await new Promise(se=>setTimeout(se,2e3))}},R=new AbortController,{signal:C}=R,v=null;i&&(v=setInterval(async()=>{try{(await G.get(`/builds/${i}/${t}`)).data.status==="cancelled"&&(P.warn(w.yellow(`
|
|
380
|
+
\u{1F6D1} Build cancelled from dashboard. Terminating...`)),R.abort(),v&&clearInterval(v))}catch{}},5e3));let _=y.join(d,".mach-cache"),b="setup",S="",E=null,L=async()=>{if(!S||!i)return;let N=S;S="";try{let W=N;Object.values(n).forEach(H=>{if(H&&H.length>5){let ne=H.replace(/[.*+?^${}()|[\]\\]/g,"\\$&");W=W.replace(new RegExp(ne,"g"),"[SECRET]")}}),await G.post(`/builds/${i}/${t}/logs`,{log:W,step:b})}catch{}},T=async()=>{E&&(clearTimeout(E),E=null),await L(),$s(_,t),v&&(clearInterval(v),v=null);try{let N=y.join(Ae.tmpdir(),`${I.buildPrefix}-${t}.keychain-db`);A.existsSync(N)&&(Q(`security delete-keychain "${N}"`,{stdio:"ignore"}),P.info(w.dim("\u{1F511} Build keychain deleted.")))}catch{}try{let N=y.join(Ae.homedir(),"Library/MobileDevice/Provisioning Profiles");if(A.existsSync(N)){let W=A.readdirSync(N).filter(H=>H.includes(t)||H.startsWith(`${I.nameLower}-temp-${t}`));for(let H of W)A.unlinkSync(y.join(N,H))}}catch{}},k=async N=>{i&&(S+=N,S.length>=8192?(E&&(clearTimeout(E),E=null),await L()):E||(E=setTimeout(()=>{E=null,L()},2e3)))},F=async N=>{b=N,await k(`[STEP_START:${N}] ${Math.floor(Date.now()/1e3)}
|
|
381
|
+
`)},M=async(N,W,H,ne)=>await He(N,W,H,ne,Ce=>{k(Ce)},C);P.info(w.blue(`\u{1F680} Starting local build for ${a} (${c})...`));try{Os(_,t)}catch(N){throw await u("failed",{error:N.message,endTime:Date.now()}),N}await u("building"),await F("setup"),a==="ios"&&!e.simulator&&n.MACH_IOS_BUILD_NUMBER_LOCKED==="1"&&n.BUILD_NUMBER&&(P.info(w.dim(`Auto build number: ${n.BUILD_NUMBER}`)),await k(`[BUILD_NUMBER] ${n.BUILD_NUMBER}
|
|
382
382
|
`)),await F("lock"),l.applyLocalProcessEnv(e);try{await F("clone"),P.info(w.dim("Preparing source...")),await F("read_config");let N=y.join(d,I.configFileName);if(A.existsSync(N)){let O=JSON.parse(A.readFileSync(N,"utf-8"))?.build?.[c]||{};await k(`[CONFIG] Profile: ${c}, distribution: ${O.distribution||"not set"}, simulator: ${O.simulator||!1}
|
|
383
383
|
`)}if(await F("read_package"),e.nodeVersion){let V=process.env.NVM_DIR||y.join(Ae.homedir(),".nvm"),O=y.join(V,"versions","node"),x;if(A.existsSync(O)){let $=A.readdirSync(O).sort().reverse(),Z=e.nodeVersion.startsWith("v")?e.nodeVersion:`v${e.nodeVersion}`,X=$.find(D=>D===Z||D.startsWith(Z+".")||D.startsWith(`v${e.nodeVersion}.`));X&&(x=y.join(O,X,"bin"))}if(x&&A.existsSync(x)){let $=process.env.PATH||"";process.env.PATH=`${x}:${$}`,await k(`[NODE] Switched to Node ${e.nodeVersion} \u2014 using ${x}
|
|
384
384
|
`),P.info(w.green(`\u2713 Node switched to ${e.nodeVersion} (${x})`))}else await k(`[NODE] Warning: Node ${e.nodeVersion} not found in nvm. Run: nvm install ${e.nodeVersion} on the build machine.
|
|
385
|
-
`),P.warn(w.yellow(`Node ${e.nodeVersion} not found in nvm \u2014 using system default`))}await F("deps"),o.start("Checking dependencies...");let W=
|
|
386
|
-
`),A.rmSync(y.join(d,"node_modules"),{recursive:!0,force:!0}),ne=!1);let ke="npm",q=["install","--prefer-offline"];if(Ce?(ke="yarn",q=["install","--prefer-offline"]):se&&(ke="bun",q=["install"]),ne?o.stop("Cached node_modules found. Syncing dependencies..."):o.stop("No cached dependencies. Running fresh install..."),e.preBuild&&(P.info(w.blue("Running pre-install hook...")),P.info(w.dim(`> ${e.preBuild}`)),await F("prebuild"),await M("bash",[e.preBuild],d,g())),P.info(w.dim(`Running ${ke} ${q.join(" ")}...`)),await M(ke,q,d,g()),W.node=H,
|
|
385
|
+
`),P.warn(w.yellow(`Node ${e.nodeVersion} not found in nvm \u2014 using system default`))}await F("deps"),o.start("Checking dependencies...");let W=xs(_),H=Rs(d),ne=A.existsSync(y.join(d,"node_modules")),Ce=A.existsSync(y.join(d,"yarn.lock")),se=A.existsSync(y.join(d,"bun.lockb"));ne&&W.node&&W.node!==H&&(o.stop("Dependency fingerprint changed \u2014 clearing node_modules for clean install..."),await k(`[CACHE] package.json/lockfile changed \u2014 wiping node_modules
|
|
386
|
+
`),A.rmSync(y.join(d,"node_modules"),{recursive:!0,force:!0}),ne=!1);let ke="npm",q=["install","--prefer-offline"];if(Ce?(ke="yarn",q=["install","--prefer-offline"]):se&&(ke="bun",q=["install"]),ne?o.stop("Cached node_modules found. Syncing dependencies..."):o.stop("No cached dependencies. Running fresh install..."),e.preBuild&&(P.info(w.blue("Running pre-install hook...")),P.info(w.dim(`> ${e.preBuild}`)),await F("prebuild"),await M("bash",[e.preBuild],d,g())),P.info(w.dim(`Running ${ke} ${q.join(" ")}...`)),await M(ke,q,d,g()),W.node=H,Li(_,W),e.framework==="expo"){let V=n.MACH_OTA_RUNTIME_VERSION,O=n.MACH_OTA_CHANNEL,x=n.MACH_OTA_URL;if(V&&O&&x){let $=$i(d,{platform:a,runtimeVersion:V,channel:O,url:x}),Z=Oi($,{runtimeVersion:V,channel:O,url:x});if(Z.length>0)throw new Error(`Expo OTA configuration mismatch after installing dependencies: ${Z.join("; ")}. Run \`${I.nameLower} ota setup\` to update the local Expo plugin before building.`);P.info(w.green(`\u2713 Expo OTA configuration verified (${O})`))}}let Oe=await l.prepareLocalProject({platform:a,options:e,sourceRoot:d,appRoot:f,cacheMeta:W,cacheMetaDir:_,currentBuildEnv:g,reportStep:F,reportLog:k,loggedRun:M,configureXcodeNodeBinary:sr,podsFingerprint:Ns,writeCacheMeta:Li}),Se=Oe.bundleId||e.iosBundleIdentifier||"",Ee=Oe.appName||e.name||"",j=[];if(a==="android")await F("build"),j=await Ys(e,c,n,V=>k(V),C);else if(a==="ios"){await F("signing"),P.info(w.dim("Preparing credentials..."));let V=r?.distributionType;j=await zs(e,t,c,n,i,O=>k(O),C,V,O=>F(O))}if(e.postBuild&&(P.info(w.blue("Running post-build hook...")),P.info(w.dim(`> ${e.postBuild}`)),await M(e.postBuild,[],d,g())),a==="ios"){let V=$t(e.resolvedBuildNumber||n.BUILD_NUMBER);if(V)for(let O of j.filter(x=>x.endsWith(".ipa"))){let x=or(O,V);await k(`[IPA FINAL] CFBundleVersion ${x} matches MACH buildNumber ${V}
|
|
387
387
|
`)}}if(a==="android"){let V=e.resolvedVersionCode||n.ANDROID_VERSION_CODE;if(V){let O=je(V,"resolved MACH build assignment");if(j.length===0)throw new Error(`Android build produced no APK or AAB to verify against MACH versionCode ${O}.`);for(let x of j){let $=Rn(x,O);await k(`[ANDROID FINAL] ${y.basename(x)} versionCode ${$} matches MACH assignment
|
|
388
|
-
`)}}}let Pe=
|
|
388
|
+
`)}}}let Pe=Zs(Date.now()-s);if(P.success(w.green(`
|
|
389
389
|
\u2713 Local build completed successfully in ${Pe}`)),await u("building",{...Se&&{bundleId:Se},...Ee&&{appName:Ee}}),j.length>0&&(P.info(w.cyan(`
|
|
390
|
-
\u{1F4E6} Generated Artifacts:`)),j.forEach(V=>{let O=y.resolve(V);P.info(w.dim(` - ${V}`)),P.info(w.gray(` Path: ${O}`))}),e.interactive)){let V=await
|
|
390
|
+
\u{1F4E6} Generated Artifacts:`)),j.forEach(V=>{let O=y.resolve(V);P.info(w.dim(` - ${V}`)),P.info(w.gray(` Path: ${O}`))}),e.interactive)){let V=await Es({message:"Install on connected device?"});if(!Yt(V)&&V){if(a==="android"){let O=j.find(x=>x.endsWith(".apk"))||j[0];await qs(O,x=>k(x))}else if(a==="ios"){let O=j.find($=>$.endsWith(".ipa"))||j.find($=>$.endsWith(".app"))||j[0],x=At("ios");e.simulator?await ea(O,x||"",$=>k($)):await ta(O,x||"",$=>k($))}}}await F("upload");let pe=[];for(let V of j)try{let O=y.join(Ae.tmpdir(),`${t}-${y.basename(V)}`);A.copyFileSync(V,O),pe.push(O),P.info(w.dim(` \u{1F4CB} Preserved artifact: ${y.basename(V)}`))}catch{P.warn(w.yellow(` Failed to preserve artifact: ${y.basename(V)}`))}j=pe,P.info(w.dim("\u{1F9F9} Cleaning workspace (preserving dependency cache)..."));try{let V=process.cwd(),O=new Set(["node_modules"]),x=A.readdirSync(V),$=0;for(let Z of x)if(!O.has(Z)){if(Z==="ios"){let X=y.join(V,"ios"),D=A.readdirSync(X);for(let Y of D)if(Y!=="Pods")try{A.rmSync(y.join(X,Y),{recursive:!0,force:!0}),$++}catch{}continue}try{A.rmSync(y.join(V,Z),{recursive:!0,force:!0}),$++}catch{}}P.info(w.dim(` Cleaned ${$} items. Cached: node_modules${A.existsSync(y.join(V,"ios","Pods"))?", ios/Pods":""}`)),P.info(w.green("\u{1F512} Security: No source code retained on build server. Only public dependencies cached."))}catch{P.warn(w.yellow("Post-build cleanup encountered errors (non-fatal)."))}try{let O=y.join(Ae.homedir(),I.workspacesDir),x=Q(`df -k "${O}" | tail -1 | awk '{print $4}'`,{encoding:"utf8"}).trim(),$=parseInt(x,10)*1024;if($<53687091200&&A.existsSync(O)){P.info(w.dim(` \u26A0\uFE0F Low disk space (${($/1024/1024/1024).toFixed(0)} GB free). Running cache eviction...`));let Z=y.basename(process.cwd()),X=A.readdirSync(O).filter(D=>D!==Z).map(D=>{let Y=y.join(O,D);try{let ce=A.statSync(Y);return ce.isDirectory()?{name:D,dir:Y,mtime:ce.mtimeMs}:null}catch{return null}}).filter(Boolean);X.sort((D,Y)=>D.mtime-Y.mtime);for(let D of X){if($>=53687091200)break;try{A.rmSync(D.dir,{recursive:!0,force:!0}),P.info(w.dim(` \u{1F5D1}\uFE0F Evicted stale workspace: ${D.name}`));let Y=Q(`df -k "${O}" | tail -1 | awk '{print $4}'`,{encoding:"utf8"}).trim();if(parseInt(Y,10)*1024>=53687091200)break}catch{}}}}catch{}return await T(),j}catch(N){throw await T(),N.message==="Command aborted"?(P.warn(w.yellow(`
|
|
391
391
|
\u274C Build aborted.`)),await u("failed",{error:"Aborted by user",endTime:Date.now()}),N):(P.error(w.red(`
|
|
392
|
-
\u2717 Local build failed: ${N.message}`)),await u("failed",{error:N.message,endTime:Date.now()}),N)}},
|
|
393
|
-
`)}return S},
|
|
394
|
-
`)}let T=(r||"default").replace(/[^a-zA-Z0-9-_]/g,"_"),k=y.join(Ae.homedir(),`Library/Developer/Xcode/DerivedData/${I.nameLower}`,T);A.mkdirSync(k,{recursive:!0});let F=
|
|
395
|
-
`).find(O=>/\bplatform\b/i.test(O))?.trim()||"IOSSIMULATOR"}`)),P.info(w.dim(`Creating simulator artifact: ${V}...`)),Ve(V),Xe("zip",["-r",V,y.basename(q)],{cwd:y.dirname(q),stdio:"pipe"}),[V]}else{P.info(w.dim(`Archiving (Scheme: ${b}, Config: ${S})...`));let H=y.join(p,"build.xcarchive"),ne=y.join(p,"export");A.rmSync(H,{recursive:!0,force:!0}),A.rmSync(ne,{recursive:!0,force:!0});let Ce=i.IOS_DIST_P12,se=i.IOS_PROVISIONING_PROFILE,ke=i.IOS_P12_PASSWORD||"",q=
|
|
396
|
-
`)[0]||"unknown"}`))}if(!
|
|
397
|
-
`).map(le=>le.trim().replace(/^"|"$/g,"")).filter(le=>le.length>0),
|
|
392
|
+
\u2717 Local build failed: ${N.message}`)),await u("failed",{error:N.message,endTime:Date.now()}),N)}},Ys=async(e,t,n={},i,r)=>{let o=ht(process.cwd(),e.appDirectory,{requireAppDirectory:!0}),s=y.join(o.appRoot,"android"),a=y.join(o.appRoot,"gradlew"),c=y.join(s,"gradlew"),l=A.existsSync(c)?c:A.existsSync(a)?a:null;if(!l)throw new Error(`Could not find gradlew inside appDirectory "${o.appDirectory}".`);let p=e.developmentClient?"assembleDebug":"assembleRelease";!e.developmentClient&&e.distribution==="store"?p="bundleRelease":!e.developmentClient&&e.distribution==="internal"&&(p="assembleRelease");let d=e.buildCommand||p;P.info(w.blue(`Running Android build: ${d}...`));let f=l===c?s:o.appRoot,g="./gradlew",u=[d],R=Ot(e.framework),C={...n,...R.localAndroidEnv(e,t),MACH_APP_NAME:e.appName||e.name||"App",MACH_APP_DIRECTORY:o.appDirectory,MACH_SOURCE_ROOT:o.sourceRoot,MACH_APP_ROOT:o.appRoot},v=e.resolvedVersionCode||n.ANDROID_VERSION_CODE,_=v?je(v,"resolved MACH build assignment"):null;_&&(u.push(`-Pandroid.injected.version.code=${_}`),C.ANDROID_VERSION_CODE=_,P.info(w.green(`\u2713 Applying Android versionCode ${_}`)));for(let E of["app/build","build",".cxx"]){let L=y.join(f,E);A.existsSync(L)&&A.rmSync(L,{recursive:!0,force:!0})}yt(o.appRoot),o.appRoot!==o.sourceRoot&&yt(o.sourceRoot),await He(g,u,f,C,i,r);let b=y.join(f,"app/build/outputs"),S=ot(b,[".apk",".aab"]);if(_&&S.length===0)throw new Error(`Android build produced no APK or AAB to verify against MACH versionCode ${_}.`);if(_)for(let E of S){let L=Rn(E,_);P.info(w.dim(`Validated Android versionCode ${L} in ${y.basename(E)}`)),i?.(`[ANDROID VALID] ${y.basename(E)} versionCode ${L} matches MACH assignment
|
|
393
|
+
`)}return S},zs=async(e,t,n,i={},r,o,s,a,c)=>{if(process.platform!=="darwin")throw new Error("iOS builds can only be run on macOS.");let l=ht(process.cwd(),e.appDirectory,{requireAppDirectory:!0}),p=y.join(l.appRoot,"ios");if(!A.existsSync(p))throw new Error(`Could not find ios/ inside appDirectory "${l.appDirectory}".`);qi(p);let d=A.readdirSync(p),f=d.find(T=>T.endsWith(".xcworkspace")),g=d.find(T=>T.endsWith(".xcodeproj")),u={...Sn(i,n,e),MACH_SOURCE_ROOT:l.sourceRoot,MACH_APP_ROOT:l.appRoot};sr(p,u,o);let R=e.resolvedBuildNumber||u.BUILD_NUMBER||u.CURRENT_PROJECT_VERSION,C=$t(R);if(R&&!C)throw new Error(`Invalid iOS build number: "${R}". Apple requires one to three period-separated integers. Fix the Dashboard secret or remove it so Mach can use its auto build number.`);let v=C?[`BUILD_NUMBER=${C}`,`CURRENT_PROJECT_VERSION=${C}`,`INFOPLIST_KEY_CFBundleVersion=${C}`]:[];if(C&&(u.BUILD_NUMBER=C,u.CURRENT_PROJECT_VERSION=C,P.info(w.dim(`Using iOS build number: ${C}`))),!f&&!g)throw new Error("Could not find Xcode workspace or project in ios/ directory.");try{let T=Q("xcode-select -p").toString().trim();P.info(w.dim(`Using Xcode at: ${T}`))}catch{P.warn(w.dim("Could not detect Xcode path."))}P.info(w.blue("Running iOS build via xcodebuild..."));let _=f?f.replace(".xcworkspace",""):g?.replace(".xcodeproj",""),b=e.iosScheme||_||e.scheme,S=e.developmentClient?"Debug":e.iosConfiguration||"Release",E,L;try{if(C){E=Ai(p,C,{workspace:f,project:g,scheme:b,configuration:S});let H=E.plistPaths.length>0?`${E.plistPaths.length} Xcode target Info.plist file(s)`:"generated Info.plist build settings";P.info(w.green(`\u2713 Applied iOS buildNumber ${C} to ${H}`)),o&&o(`[VERSIONING] Applied iOS buildNumber ${C} to ${H}
|
|
394
|
+
`)}let T=(r||"default").replace(/[^a-zA-Z0-9-_]/g,"_"),k=y.join(Ae.homedir(),`Library/Developer/Xcode/DerivedData/${I.nameLower}`,T);A.mkdirSync(k,{recursive:!0});let F=hi(u),M=y.join(k,".mach-env-hash"),N=y.join(k,"Build"),W=A.existsSync(M)?A.readFileSync(M,"utf-8").trim():"";if(A.existsSync(N)){let H=W&&W!==F?"Build environment changed \u2014 clearing iOS DerivedData build products.":W?"Clearing iOS DerivedData build products to force a fresh JS bundle.":"DerivedData has no environment stamp \u2014 clearing iOS build products.";P.info(w.dim(H)),A.rmSync(N,{recursive:!0,force:!0})}if(A.writeFileSync(M,F),yt(l.appRoot),l.appRoot!==l.sourceRoot&&yt(l.sourceRoot),e.simulator){let H=Ws(p,f,g,b,S),ne=H||"generic/platform=iOS Simulator",Ce=["-destination",ne];P.info(w.dim(H?`Building for simulator (Scheme: ${b}, Config: ${S}, Destination: ${ne})...`:`Building for simulator (Scheme: ${b}, Config: ${S}, Destination: ${ne})...`));let se=[f?"-workspace":"-project",f||g,"-scheme",b,"-configuration",S,"-sdk","iphonesimulator",...Ce,"-derivedDataPath",k,...v,"COMPILER_INDEX_STORE_ENABLE=NO","CODE_SIGNING_ALLOWED=NO","CODE_SIGNING_REQUIRED=NO","ONLY_ACTIVE_ARCH=NO","EXCLUDED_ARCHS=","SUPPORTED_PLATFORMS=iphonesimulator"];try{await Jt(se,p,u,o,s)}catch(O){if(!Vs(O))throw O;Ms(k),yt(l.appRoot),l.appRoot!==l.sourceRoot&&yt(l.sourceRoot),await Jt(se,p,u,o,s)}let ke=y.join(k,"Build/Products",`${S}-iphonesimulator`),q=Us(ke,b,e),Oe=y.basename(q,".app"),Se=It(y.join(q,"Info.plist"),"CFBundleIdentifier")||"unknown bundle",j=Ki(q,C||void 0)[0].buildNumber,Pe=ir(q),pe=rr(q),V=y.join(ke,`${Oe}_simulator.zip`);return P.info(w.dim(`Selected simulator app: ${y.relative(ke,q)} (${Se}, build ${j})`)),P.info(w.dim(`Simulator executable architecture: ${Pe}`)),P.info(w.dim(`Simulator executable platform: ${pe.split(`
|
|
395
|
+
`).find(O=>/\bplatform\b/i.test(O))?.trim()||"IOSSIMULATOR"}`)),P.info(w.dim(`Creating simulator artifact: ${V}...`)),Ve(V),Xe("zip",["-r",V,y.basename(q)],{cwd:y.dirname(q),stdio:"pipe"}),[V]}else{P.info(w.dim(`Archiving (Scheme: ${b}, Config: ${S})...`));let H=y.join(p,"build.xcarchive"),ne=y.join(p,"export");A.rmSync(H,{recursive:!0,force:!0}),A.rmSync(ne,{recursive:!0,force:!0});let Ce=i.IOS_DIST_P12,se=i.IOS_PROVISIONING_PROFILE,ke=i.IOS_P12_PASSWORD||"",q=Fi(i.IOS_PROVISIONING_PROFILES),Oe=q.length>1,Se=[],Ee,j,Pe=[],pe={isAppStore:!1,isDevelopment:!1};if(Ce&&se){P.info(w.blue("\u{1F510} CI/CD Signing: Importing certificates..."));try{let ce=`${I.buildPrefix}-${t}.keychain-db`,Re=y.join(Ae.tmpdir(),ce),at=I.keychainPassword;Q(`security create-keychain -p "${at}" "${Re}" 2>/dev/null || true`),Q(`security set-keychain-settings -t 3600 -l "${Re}"`),Q(`security unlock-keychain -p "${at}" "${Re}"`);let an=y.join(Ae.tmpdir(),`cert-${t}.p12`),wt=Buffer.from(Ce,"base64");A.writeFileSync(an,wt),P.info(w.dim(`P12 data size: ${wt.length} bytes, first bytes: ${wt.slice(0,4).toString("hex")}`)),(wt.length<100||wt[0]!==48)&&(P.warn(w.yellow("\u26A0\uFE0F P12 data looks corrupted or was not decrypted correctly.")),P.warn(w.yellow(" This usually means MACH_ENCRYPTION_KEY on the Remote API differs from when credentials were uploaded.")));let Zr=[ke,"",I.keychainPassword],Qn=!1;for(let le of Zr)try{Q(`security import "${an}" -k "${Re}" -P "${le}" -A -T /usr/bin/codesign -T /usr/bin/security`,{stdio:"pipe"}),Qn=!0,P.info(w.dim(`\u2713 P12 imported successfully with password: ${le?"[set]":"[empty]"}`));break}catch(De){P.info(w.dim(` P12 import attempt with password ${le?`"${le.substring(0,3)}..."`:"[empty]"} failed: ${De.message?.split(`
|
|
396
|
+
`)[0]||"unknown"}`))}if(!Qn)throw new Error("Failed to import P12.");A.unlinkSync(an),Q(`security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k "${at}" "${Re}"`);let Gr=Q("security list-keychains -d user",{encoding:"utf-8"}).split(`
|
|
397
|
+
`).map(le=>le.trim().replace(/^"|"$/g,"")).filter(le=>le.length>0),Ur=[Re,...Gr].map(le=>`"${le}"`).join(" ");if(Q(`security list-keychains -d user -s ${Ur}`),Q(`security default-keychain -s "${Re}"`),Oe){Pe=Wi({profiles:q,buildId:t});let le=Pe.find(De=>De.isMainApplication)||Pe[0];j=le.uuid,pe={isAppStore:le.isAppStore,isDevelopment:le.isDevelopment},L=Gi({iosDirectory:p,profiles:Pe,teamId:e.iosTeamId,temporaryLabel:t}),P.info(w.green(`\u2713 Applied target-specific signing to ${L.matchedTargets.length} Xcode targets`));for(let De of L.matchedTargets)P.info(w.dim(` - ${De}`))}else{let le=y.join(Ae.homedir(),"Library/MobileDevice/Provisioning Profiles");A.mkdirSync(le,{recursive:!0});let De=Buffer.from(se,"base64"),ct=y.join(le,`${I.nameLower}-temp-${t}.mobileprovision`);A.writeFileSync(ct,De);let lt=De.toString("utf-8"),Je=/<key>get-task-allow<\/key>\s*<true\/>/.test(lt);pe={isAppStore:!lt.includes("<key>ProvisionedDevices</key>")&&!Je,isDevelopment:Je};try{let vt=Q(`security cms -D -i "${ct}"`,{encoding:"utf-8"}).match(/<key>UUID<\/key>\s*<string>([^<]+)<\/string>/);j=vt?vt[1]:void 0}catch{let vt=lt.match(/<key>UUID<\/key>\s*<string>([^<]+)<\/string>/);j=vt?vt[1]:void 0}j||(P.warn("Could not extract UUID from provisioning profile. Using fallback."),j=`${I.nameLower}-${t}`);let cn=y.join(le,`${j}.mobileprovision`);A.existsSync(cn)&&A.unlinkSync(cn),A.renameSync(ct,cn)}try{let le=Q(`security find-identity -v -p codesigning "${Re}"`,{encoding:"utf-8"}),De=Array.from(le.matchAll(/"((?:Apple|iPhone) (?:Distribution|Developer|Development)[^"]*)"/g),Je=>Je[1]),ct=pe.isDevelopment?De.find(Je=>/\b(Development|Developer)\b/.test(Je)):De.find(Je=>/\bDistribution\b/.test(Je)),lt=De[0];(ct||lt)&&(Ee=ct||lt,P.info(w.blue(`Identity auto-detected from keychain: "${Ee}"`)))}catch{}Ee||(Ee=pe.isDevelopment?"Apple Development":"Apple Distribution",P.info(w.blue(`Identity fallback (profile heuristic): "${Ee}"`))),P.info(w.dim(`Profile type: ${pe.isDevelopment?"Development":pe.isAppStore?"App Store":"Ad-Hoc"}`)),P.info(w.dim(`Identity Detection: get-task-allow=${pe.isDevelopment}, Selected Identity="${Ee}"`)),Se.push("CODE_SIGN_STYLE=Manual"),Se.push(`CODE_SIGN_IDENTITY="${Ee}"`),Oe||Se.push(`PROVISIONING_PROFILE_SPECIFIER=${j}`),e.iosTeamId&&Se.push(`DEVELOPMENT_TEAM=${e.iosTeamId}`)}catch(ce){throw P.error(`Signing setup failed: ${ce.message}`),ce}}else Se.push("-allowProvisioningUpdates"),e.iosTeamId&&Se.push(`DEVELOPMENT_TEAM=${e.iosTeamId}`);c&&await c("archive"),P.info(w.blue(`Archive detected Identity: "${Ee}"`)),P.info(w.blue(`Archive detected UUID: "${j}"`)),await Jt(["archive",f?"-workspace":"-project",f||g,"-scheme",b,"-configuration",S,"-archivePath",H,"-derivedDataPath",k,...v,...Se],p,u,o,s);let V=ot(y.join(H,"Products","Applications"),[".app"]);for(let ce of V)for(let Re of Ki(ce,C||void 0))P.info(w.dim(`Validated iOS CFBundleVersion ${Re.buildNumber} in ${y.basename(Re.bundlePath)}`));let O;j?(pe.isAppStore?O="app-store":pe.isDevelopment?O="development":O="ad-hoc",P.info(w.blue(`Export method from profile: "${O}"`))):(O=e.distribution==="store"?"app-store":e.distribution==="internal"?"ad-hoc":"development",P.warn(w.yellow(`No profile UUID detected. Export method from distribution flag: "${O}"`)));let x=e.iosExportMethod||O,$=e.iosBundleIdentifier||At("ios"),Z=Oe?Pe:$&&j?[{bundleIdentifier:$,uuid:j}]:[],X=y.join(p,"ExportOptions.plist"),D=`<?xml version="1.0" encoding="UTF-8"?>
|
|
398
398
|
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
|
|
399
399
|
<plist version="1.0">
|
|
400
400
|
<dict>
|
|
@@ -407,48 +407,48 @@ ${s.join(`
|
|
|
407
407
|
<key>thinning</key>
|
|
408
408
|
<string><none></string>
|
|
409
409
|
${e.iosTeamId?`<key>teamID</key><string>${e.iosTeamId}</string>`:""}
|
|
410
|
-
${
|
|
410
|
+
${Ui(Z)}
|
|
411
411
|
</dict>
|
|
412
412
|
</plist>`;if(A.writeFileSync(X,D),process.env[`${I.envPrefix}DEBUG`]&&P.info(w.magenta(`[${I.nameUpper}_DEBUG] ExportOptions.plist:
|
|
413
413
|
${D}`)),c&&await c("export"),P.info(w.blue(`Exporting with Bundle ID: "${$}"`)),P.info(w.blue(`Exporting with Method: "${x}"`)),o){o(w.magenta(`
|
|
414
414
|
[DIAGNOSTIC] Checking available signing identities...
|
|
415
415
|
`));try{let ce=Q("security find-identity -v -p codesigning",{encoding:"utf-8"});o(w.magenta(`${ce}
|
|
416
416
|
`))}catch(ce){o(w.red(`[DIAGNOSTIC] Failed to list identities: ${ce.message}
|
|
417
|
-
`))}}await Jt(["-exportArchive","-archivePath",H,"-exportPath",ne,"-exportOptionsPlist",X],p,u,o,s),c&&await c("validate");let Y=ot(ne,[".ipa"]);for(let ce of Y)try{Q(`unzip -t "${ce}"`,{stdio:"pipe"});let Re=
|
|
417
|
+
`))}}await Jt(["-exportArchive","-archivePath",H,"-exportPath",ne,"-exportOptionsPlist",X],p,u,o,s),c&&await c("validate");let Y=ot(ne,[".ipa"]);for(let ce of Y)try{Q(`unzip -t "${ce}"`,{stdio:"pipe"});let Re=or(ce,C||void 0);o&&o(`[IPA VALID] ${y.basename(ce)} \u2014 archive integrity OK
|
|
418
418
|
`),o&&o(`[IPA VALID] CFBundleVersion ${Re}
|
|
419
419
|
`)}catch(Re){let at=`IPA validation failed for ${y.basename(ce)}: ${Re.message||"archive may be corrupt"}`;throw o&&o(`[IPA CORRUPT] ${at}
|
|
420
|
-
`),new Error(at)}return Y}}finally{L?.restore(),E?.restore()}},At=(e,t)=>{try{let n=y.join(process.cwd(),I.configFileName),i={};if(A.existsSync(n)){if(i=JSON.parse(A.readFileSync(n,"utf-8")),e==="android"&&i.android?.package)return i.android.package;if(e==="ios"&&i.ios?.bundleIdentifier)return i.ios.bundleIdentifier}let o=ht(process.cwd(),t??i.appDirectory).appRoot;if(e==="android"){let s=["android/app/build.gradle","app/build.gradle","build.gradle"];for(let a of s){let c=y.join(o,a);if(A.existsSync(c)){let p=A.readFileSync(c,"utf-8").match(/applicationId\s+['"]([^'"]+)['"]/);if(p)return p[1]}}}else{let s=y.join(o,"ios"),a=A.existsSync(s)?s:o,c=ot(a,["Info.plist"]).filter(d=>!d.includes("/Pods/")&&!d.includes("/build/")&&!d.includes("/DerivedData/"));c.sort((d,f)=>f.split("/").length-d.split("/").length);for(let d of c){let g=A.readFileSync(d,"utf-8").match(/<key>CFBundleIdentifier<\/key>\s*<string>([^<]+)<\/string>/);if(g&&!g[1].includes("$"))return g[1]}let l=ot(a,[".xcodeproj"]);if(l.length>0){let d=y.join(l[0],"project.pbxproj");if(A.existsSync(d)){let g=A.readFileSync(d,"utf-8").match(/PRODUCT_BUNDLE_IDENTIFIER\s*=\s*"?([^";\s]+)"?;/);if(g)return g[1]}}let p=["app.json","app.config.json","app.config.js","app.config.ts"];for(let d of p){let f=y.join(o,d);if(A.existsSync(f)){let u=A.readFileSync(f,"utf-8").match(/"bundleIdentifier":\s*"([^"]+)"/);if(u)return u[1]}}}}catch{return null}return null},
|
|
421
|
-
`).slice(1).map(s=>s.trim()).filter(s=>s.length>0&&!s.startsWith("*")).map(s=>s.split(" ")[0]).length===0){P.warn(w.yellow("No Android devices or emulators found."));let s=
|
|
422
|
-
`).filter(c=>c.trim().length>0)}catch{}if(a.length>0){let c=await Tn({message:"Select an emulator to launch:",options:a.map(d=>({value:d,label:d}))});if(Yt(c))return;n.start(`Launching emulator ${c}...`),
|
|
423
|
-
`).find(c=>c.includes("android.intent.action.MAIN")&&c.includes("android.intent.category.LAUNCHER"))?Q(`adb shell monkey -p ${o} -c android.intent.category.LAUNCHER 1`,{stdio:"ignore"}):Q(`adb shell monkey -p ${o} -c android.intent.category.LAUNCHER 1`,{stdio:"ignore"})}catch{P.warn("Could not auto-launch app. You may need to open it manually.")}}}catch(i){n.stop("Installation failed."),P.error(w.red(`Failed to install APK: ${i.message}`))}},
|
|
424
|
-
`)}function
|
|
420
|
+
`),new Error(at)}return Y}}finally{L?.restore(),E?.restore()}},At=(e,t)=>{try{let n=y.join(process.cwd(),I.configFileName),i={};if(A.existsSync(n)){if(i=JSON.parse(A.readFileSync(n,"utf-8")),e==="android"&&i.android?.package)return i.android.package;if(e==="ios"&&i.ios?.bundleIdentifier)return i.ios.bundleIdentifier}let o=ht(process.cwd(),t??i.appDirectory).appRoot;if(e==="android"){let s=["android/app/build.gradle","app/build.gradle","build.gradle"];for(let a of s){let c=y.join(o,a);if(A.existsSync(c)){let p=A.readFileSync(c,"utf-8").match(/applicationId\s+['"]([^'"]+)['"]/);if(p)return p[1]}}}else{let s=y.join(o,"ios"),a=A.existsSync(s)?s:o,c=ot(a,["Info.plist"]).filter(d=>!d.includes("/Pods/")&&!d.includes("/build/")&&!d.includes("/DerivedData/"));c.sort((d,f)=>f.split("/").length-d.split("/").length);for(let d of c){let g=A.readFileSync(d,"utf-8").match(/<key>CFBundleIdentifier<\/key>\s*<string>([^<]+)<\/string>/);if(g&&!g[1].includes("$"))return g[1]}let l=ot(a,[".xcodeproj"]);if(l.length>0){let d=y.join(l[0],"project.pbxproj");if(A.existsSync(d)){let g=A.readFileSync(d,"utf-8").match(/PRODUCT_BUNDLE_IDENTIFIER\s*=\s*"?([^";\s]+)"?;/);if(g)return g[1]}}let p=["app.json","app.config.json","app.config.js","app.config.ts"];for(let d of p){let f=y.join(o,d);if(A.existsSync(f)){let u=A.readFileSync(f,"utf-8").match(/"bundleIdentifier":\s*"([^"]+)"/);if(u)return u[1]}}}}catch{return null}return null},Qs=()=>{try{return Q("emulator -version",{stdio:"ignore"}),"emulator"}catch{let t=Ae.homedir(),n=[y.join(t,"Library/Android/sdk/emulator/emulator"),y.join(t,"Android/Sdk/emulator/emulator"),"/usr/local/lib/android/sdk/emulator/emulator"];for(let i of n)if(A.existsSync(i))return i}return"emulator"},qs=async(e,t)=>{let n=Kt();try{if(Q("adb devices").toString().split(`
|
|
421
|
+
`).slice(1).map(s=>s.trim()).filter(s=>s.length>0&&!s.startsWith("*")).map(s=>s.split(" ")[0]).length===0){P.warn(w.yellow("No Android devices or emulators found."));let s=Qs(),a=[];try{a=Q(`${s} -list-avds`).toString().split(`
|
|
422
|
+
`).filter(c=>c.trim().length>0)}catch{}if(a.length>0){let c=await Tn({message:"Select an emulator to launch:",options:a.map(d=>({value:d,label:d}))});if(Yt(c))return;n.start(`Launching emulator ${c}...`),Yi(s,["-avd",c],{detached:!0,stdio:"ignore"}).unref();let l=0,p=!1;for(;l<60;){try{if(Q("adb shell getprop sys.boot_completed",{stdio:"pipe"}).toString().trim()==="1"){p=!0;break}}catch{}await new Promise(d=>setTimeout(d,2e3)),l++}if(!p)throw n.stop("Emulator launch timed out."),new Error("Emulator launch timed out. Please try launching it manually.");n.stop("Emulator launched.")}else throw new Error("No devices found and no emulators available to launch. (Make sure Android SDK is installed)")}n.start("Installing APK on device..."),await He("adb",["install","-r",e],process.cwd(),{},t),n.stop("Installation complete.");let o=At("android");if(o){P.info(w.blue(`\u{1F680} Launching ${o}...`));try{Q(`adb shell dumpsys package ${o}`).toString().split(`
|
|
423
|
+
`).find(c=>c.includes("android.intent.action.MAIN")&&c.includes("android.intent.category.LAUNCHER"))?Q(`adb shell monkey -p ${o} -c android.intent.category.LAUNCHER 1`,{stdio:"ignore"}):Q(`adb shell monkey -p ${o} -c android.intent.category.LAUNCHER 1`,{stdio:"ignore"})}catch{P.warn("Could not auto-launch app. You may need to open it manually.")}}}catch(i){n.stop("Installation failed."),P.error(w.red(`Failed to install APK: ${i.message}`))}},ea=async(e,t,n)=>{let i=Kt();try{if(!Q("xcrun simctl list devices booted").toString().includes("(Booted)")){P.warn(w.yellow("No iOS Simulator is currently booted."));let o=Q("xcrun simctl list devices --json").toString(),s=JSON.parse(o).devices,a=[];Object.keys(s).forEach(d=>{s[d].forEach(f=>{f.isAvailable&&a.push({...f,runtime:d})})});let c=await Tn({message:"Select a simulator to launch:",options:a.map(d=>({value:d.udid,label:`${d.name} (${d.runtime.split(".").pop()})`}))});if(Yt(c))return;i.start(`Booting ${c}...`),Q(`xcrun simctl boot ${c}`),Q(`open -a Simulator --args -CurrentDeviceUDID ${c}`);let l=0,p=!1;for(;l<30;){try{if(Q("xcrun simctl list devices booted").toString().includes(c)){p=!0;break}}catch{}await new Promise(d=>setTimeout(d,2e3)),l++}if(!p)throw i.stop("Simulator boot timed out."),new Error("Simulator boot timed out.");i.stop("Simulator booted.")}i.start("Installing on iOS Simulator..."),ir(e),rr(e),await He("xcrun",["simctl","install","booted",e],process.cwd(),{},n),i.stop("Installation complete."),P.info(w.blue(`\u{1F680} Launching ${t}...`)),await He("xcrun",["simctl","launch","booted",t],process.cwd(),{},n)}catch(r){i.stop("Installation failed."),P.error(w.red(`Failed to install on Simulator: ${r.message}`))}},ta=async(e,t,n)=>{let i=Kt();i.start("Scanning for connected iOS devices...");try{let r=Q("xcrun devicectl list devices --json-output -").toString(),s=(JSON.parse(r).result?.devices||[]).filter(c=>c.connectionProperties?.transportType==="wired"||c.connectionProperties?.transportType==="localNetwork");if(s.length===0)throw i.stop("No connected iOS devices found."),new Error("Please connect your iPhone via USB or ensure it is on the same Wi-Fi for wireless debugging.");let a=s[0].identifier;if(s.length>1){i.stop();let c=await Tn({message:"Select a device to install on:",options:s.map(l=>({value:l.identifier,label:`${l.deviceProperties?.name||l.name||l.model?.name} (${l.model?.name||"iPhone"}) - ${l.identifier}`}))});if(Yt(c))return;a=c,i.start(`Installing on ${a}...`)}else i.message(`Installing on ${s[0].model.name}...`);await He("xcrun",["devicectl","device","install","app","--device",a,e],process.cwd(),{},n),i.stop("Installation complete."),P.info(w.blue(`\u{1F680} Launching ${t}...`)),await He("xcrun",["devicectl","device","launch","app","--device",a,t],process.cwd(),{},n)}catch(r){i.stop("Installation failed."),P.error(w.red(`Failed to install on device: ${r.message}`)),P.info(w.dim('Make sure your device is unlocked and "Developer Mode" is enabled in Settings -> Privacy & Security.'))}};import{createRequire as na}from"module";var ia=na(import.meta.url),ra=ia("../package.json"),Vn=String(ra.version||"0.0.0");var pr="https://mach-api.securejs.in",sa=["google-services.json","android/app/google-services.json"],ar="0.1.4";function aa(){return ve.join(process.cwd(),I.configFileName)}function Qt(){let e=ni();if(!e?.projectId)throw new Error(`No linked MACH project. Run \`${I.nameLower} link\` first.`);return e}function ur(e){de.writeFileSync(aa(),`${JSON.stringify(e,null,2)}
|
|
424
|
+
`)}function ca(){return Mn(ve.join(process.cwd(),"package.json"))}function Mn(e){if(!de.existsSync(e))return null;try{return JSON.parse(de.readFileSync(e,"utf8"))}catch{return null}}function la(e){let t=ca();return!!(t?.dependencies?.[e]||t?.devDependencies?.[e])}function jn(e){let t=process.cwd(),n=Mn(ve.join(t,"node_modules",...e.split("/"),"package.json"));if(typeof n?.version=="string")return n.version;let r=Mn(ve.join(t,"package-lock.json"))?.packages?.[`node_modules/${e}`]?.version;return typeof r=="string"?r:void 0}function da(e,t){let n=o=>o.replace(/^v/,"").split(/[.-]/).slice(0,3).map(s=>Number.parseInt(s,10)||0),i=n(e),r=n(t);for(let o=0;o<3;o+=1)if(i[o]!==r[o])return i[o]>r[o]?1:-1;return 0}function cr(e,t){let n=jn(e);return!la(e)||!n||da(n,t)<0}function pa(e,t=!1){let n=process.cwd();return de.existsSync(ve.join(n,"pnpm-lock.yaml"))?{command:"pnpm",args:["add",...t?["-D"]:[],e],label:`pnpm add ${t?"-D ":""}${e}`}:de.existsSync(ve.join(n,"yarn.lock"))?{command:"yarn",args:["add",...t?["-D"]:[],e],label:`yarn add ${t?"-D ":""}${e}`}:de.existsSync(ve.join(n,"bun.lock"))||de.existsSync(ve.join(n,"bun.lockb"))?{command:"bun",args:["add",...t?["-d"]:[],e],label:`bun add ${t?"-d ":""}${e}`}:{command:"npm",args:["install",...t?["--save-dev"]:["--save"],"--no-audit","--no-fund",e],label:`npm install ${t?"--save-dev ":"--save "}${e} --no-audit --no-fund`}}function lr(e,t=!1){let n=pa(e,t);console.log(te.dim(`Installing dependency: ${n.label}`));let i=oa(n.command,n.args,{cwd:process.cwd(),stdio:"inherit",timeout:12e4,env:{...process.env,NPM_CONFIG_AUDIT:"false",NPM_CONFIG_FUND:"false"}});return i.signal==="SIGTERM"?{ok:!1,note:`${n.label} timed out after 120s. Run it manually, or re-run \`${I.nameLower} push setup --skip-install\` to only generate files.`}:i.error||i.status!==0?{ok:!1,note:`${n.label} failed${i.error?`: ${i.error.message}`:` with code ${i.status}`}.`}:{ok:!0,note:`Installed with ${n.label}.`}}function ua(e,t){let n=[];if(t)return n.push("Dependency installation skipped."),n;if(cr("@radhya/mach-push-react-native",ar)){let i=lr(`@radhya/mach-push-react-native@${ar}`);if(!i.ok)throw new Error(`${i.note} No application files were wired.`);n.push(i.note)}else n.push(`@radhya/mach-push-react-native is already current (${jn("@radhya/mach-push-react-native")}).`);if(e==="expo")if(cr("@radhya/mach",Vn)){let i=lr(`@radhya/mach@${Vn}`,!0);if(!i.ok)throw new Error(`${i.note} No Expo configuration was changed.`);n.push(i.note)}else n.push(`@radhya/mach is already current for the Expo config (${jn("@radhya/mach")}).`);return n}function fa(e,t){return e||t||["google-services.json","android/app/google-services.json"].find(n=>de.existsSync(ve.join(process.cwd(),n)))}function fr(e){let t={enabled:!0};return e.appId&&e.publishableKey&&(t.appId=e.appId,t.publishableKey=e.publishableKey),e.apiUrl&&e.apiUrl!==pr&&(t.apiUrl=e.apiUrl),e.environment&&e.environment!=="production"&&(t.environment=e.environment),e.googleServicesFile&&!sa.includes(e.googleServicesFile)&&(t.googleServicesFile=e.googleServicesFile),t}function ma(e){return e==="development"?"development":"production"}function mr(e){let t=process.cwd(),n=e==="ios"?"bundleIdentifier":"package";for(let i of["app.json","app.config.json"]){let r=ve.join(t,i);if(de.existsSync(r))try{let o=JSON.parse(de.readFileSync(r,"utf8")),a=(o.expo&&typeof o.expo=="object"?o.expo:o)?.[e]?.[n];if(typeof a=="string"&&a.trim())return a.trim()}catch{}}for(let i of["app.config.ts","app.config.js"]){let r=ve.join(t,i);if(!de.existsSync(r))continue;let s=de.readFileSync(r,"utf8").match(new RegExp(`${n}\\s*:\\s*['"]([^'"]+)['"]`));if(s?.[1])return s[1]}}function gr(e,t){return t||Ke(e)||mr("ios")||At("ios")||void 0}function hr(e,t){return t||pt(e)||mr("android")||At("android")||void 0}function ga(e,t){let n=de.readFileSync(e,"utf8");if(n.includes(t))return"already";let i=/(^[ \t]*)plugins\s*:\s*\[([\s\S]*?)\]/m.exec(n);if(!i||i.index===void 0)return"manual";let r=n.includes(`\r
|
|
425
425
|
`)?`\r
|
|
426
426
|
`:`
|
|
427
|
-
`,o=i[1]||"",s=i[2]||"",a=s.match(/\r?\n([ \t]+)\S/)?.[1]||`${o} `,c=s.trim().length===0?`${r}${a}'${t}',${r}${o}`:`${r}${a}'${t}',${s}`,l=i[0].indexOf("["),p=`${i[0].slice(0,l+1)}${c}]`;return de.writeFileSync(e,`${n.slice(0,i.index)}${p}${n.slice(i.index+i[0].length)}`),"inserted"}function
|
|
428
|
-
`),`${n} now includes ${e}.`)}async function
|
|
429
|
-
`))}catch(n){t.stop(te.red("MACH Push setup failed.")),Dt(n)}}async function
|
|
430
|
-
`))}catch(n){t.stop(te.red("MACH Push setup failed.")),Dt(n)}}async function qt(e,t){let n=zt();try{let{config:i,appId:r,environment:o}=await
|
|
431
|
-
`))}catch(t){Dt(t)}}import
|
|
427
|
+
`,o=i[1]||"",s=i[2]||"",a=s.match(/\r?\n([ \t]+)\S/)?.[1]||`${o} `,c=s.trim().length===0?`${r}${a}'${t}',${r}${o}`:`${r}${a}'${t}',${s}`,l=i[0].indexOf("["),p=`${i[0].slice(0,l+1)}${c}]`;return de.writeFileSync(e,`${n.slice(0,i.index)}${p}${n.slice(i.index+i[0].length)}`),"inserted"}function yr(){let e="@radhya/mach/expo-plugin",t=["app.config.ts","app.config.js"].find(c=>de.existsSync(ve.join(process.cwd(),c)));if(t){let c=ga(ve.join(process.cwd(),t),e);return c==="inserted"?`${t} now includes ${e}.`:c==="already"?`${t} already includes ${e}.`:`Add "${e}" to the plugins array in ${t}; MACH could not safely edit its computed configuration.`}let n=["app.config.json","app.json"].find(c=>de.existsSync(ve.join(process.cwd(),c)));if(!n)return`Add "${e}" to the Expo plugins array.`;let i=ve.join(process.cwd(),n),r=JSON.parse(de.readFileSync(i,"utf8")),o=r.expo&&typeof r.expo=="object"?r.expo:r,s=Array.isArray(o.plugins)?o.plugins:[];return s.some(c=>(Array.isArray(c)?c[0]:c)===e)?`${n} already includes ${e}.`:(o.plugins=[...s,e],de.writeFileSync(i,`${JSON.stringify(r,null,2)}
|
|
428
|
+
`),`${n} now includes ${e}.`)}async function Ir(e){let t=Qt(),n=e.app||t.push?.appId,i=e.environment||t.push?.environment||"production";if(n)return{config:t,appId:n,environment:i};let{data:r}=await G.get(`/projects/${t.projectId}/push/overview?days=1`),s=(r?.apps||[]).filter(a=>a.status!=="disabled").sort((a,c)=>(c.updatedAt||0)-(a.updatedAt||0))[0]?.appId;if(!s)throw new Error(`Push is not configured. Run \`${I.nameLower} push setup\` first.`);return{config:t,appId:s,environment:i}}function dr(e){let t=ve.resolve(e);if(!de.existsSync(t))throw new Error(`File not found: ${t}`);return t}function Dt(e){let t=e?.response?.data?.message||e?.message||"Unknown error";console.error(te.red(t)),process.exitCode=1}async function Jd(e){let t=zt();try{let n=Qt();if(ln(n)==="flutter")throw new Error("MACH Push currently supports Expo and bare React Native. Flutter push support is planned for a later release.");let r=gr(n,e.iosBundle),o=hr(n,e.androidPackage);if(!r&&!o)throw new Error(`Add ios.bundleIdentifier or android.package to ${I.configFileName}, or pass --ios-bundle/--android-package.`);t.start("Creating MACH Push app..."),await G.post(`/projects/${n.projectId}/push/apps`,{name:e.name||n.name||"Mobile app",iosBundleId:r,androidPackageName:o});let s=e.environment||"production";n.push=fr({environment:s,googleServicesFile:e.googleServicesFile}),ur(n);let a=n.framework==="expo"?yr():void 0;t.stop(te.green("MACH Push app created.")),console.log(["",`${te.bold("Client config:")} ${I.configFileName} \u2192 push`,"","Install the mobile SDK:"," npm install @radhya/mach-push-react-native",...n.framework==="expo"?[" npm install --save-dev @radhya/mach",` ${a}`," Run npx expo prebuild."]:[],"",`Next: run \`${I.nameLower} credentials\` and choose Push Notifications.`].join(`
|
|
429
|
+
`))}catch(n){t.stop(te.red("MACH Push setup failed.")),Dt(n)}}async function Kd(e){let t=zt();try{let n=Qt(),i=ln(n);if(i==="flutter")throw new Error("MACH Push currently supports Expo and bare React Native. Flutter push support is planned for a later release.");let r=gr(n,e.iosBundle),o=hr(n,e.androidPackage);if(!r&&!o)throw new Error(`Add ios.bundleIdentifier or android.package to ${I.configFileName}, or pass --ios-bundle/--android-package.`);let s;t.start("Checking the MACH Push app...");let l=((await G.get(`/projects/${n.projectId}/push/overview?days=1`)).data?.apps||[]).filter(b=>b.status!=="disabled").sort((b,S)=>(S.updatedAt||0)-(b.updatedAt||0)).find(b=>(!r||b.iosBundleId===r)&&(!o||b.androidPackageName===o));if(l)s=l.appId,t.stop(te.green("Existing MACH Push app linked."));else{let{data:b}=await G.post(`/projects/${n.projectId}/push/apps`,{name:e.name||n.name||"Mobile app",iosBundleId:r,androidPackageName:o});s=b.app.appId,t.stop(te.green("MACH Push app created."))}if(!s)throw new Error("MACH Push did not return a usable application.");let p=n.push,d=e.environment||p?.environment||"production",f=p?.apiUrl||pr,g=fa(e.googleServicesFile,p?.googleServicesFile);n.push=fr({apiUrl:f,environment:d,googleServicesFile:g}),ur(n);let u=ua(i,!!e.skipInstall),R=i==="expo"?yr():void 0;if(R?.startsWith('Add "'))throw new Error(R);let C={projectId:n.projectId,apiUrl:f,environment:d},v=di(process.cwd(),i,C);if(!v.entryFile)throw new Error(v.notes[0]||"MACH could not locate the application entry point.");let _=i==="expo"?{written:[],notes:[]}:ui(process.cwd(),{iosBundleId:r,iosEnvironment:ma(d),googleServicesFile:g});console.log(["",te.green.bold("MACH Push basic setup is ready."),`${te.bold("Framework:")} ${i}`,`${te.bold("Client config:")} ${I.configFileName} \u2192 push`,`${te.bold("Automatic startup:")} ${v.entryFile||"manual entry import required"}`,`${te.bold("Customize callbacks:")} ${v.editableFile||"see the setup notes below"}`,"",...u.map(b=>`\u2022 ${b}`),...R?[`\u2022 ${R}`]:[],...v.notes.map(b=>`\u2022 ${b}`),..._.notes.map(b=>`\u2022 ${b}`),...[...v.written,..._.written].map(b=>`\u2022 Updated ${b}.`),"",`Next: run \`${I.nameLower} credentials\` and choose Push Notifications, then create one new native build.`].join(`
|
|
430
|
+
`))}catch(n){t.stop(te.red("MACH Push setup failed.")),Dt(n)}}async function qt(e,t){let n=zt();try{let{config:i,appId:r,environment:o}=await Ir(t),s;if(e==="apns"){if(!t.teamId||!t.keyId)throw new Error("APNs requires --team-id and --key-id.");let a=t.privateKey||(t.file?de.readFileSync(dr(t.file),"utf8"):"");if(!a)throw new Error("APNs requires --file or a generated private key.");let c=t.bundleId||Ke(i);if(!c)throw new Error("APNs requires --bundle-id.");s={environment:o,teamId:t.teamId,keyId:t.keyId,bundleId:c,privateKey:a}}else{let a=t.serviceAccount||(t.file?JSON.parse(de.readFileSync(dr(t.file),"utf8")):void 0);if(!a)throw new Error("FCM requires --file or a generated service account.");s={serviceAccount:a}}n.start(`Configuring ${e.toUpperCase()}...`),await G.put(`/projects/${i.projectId}/push/apps/${r}/credentials/${e}`,s),n.stop(te.green(`${e.toUpperCase()} is ready.`))}catch(i){n.stop(te.red(`${e.toUpperCase()} setup failed.`)),Dt(i)}}async function Yd(e){let t=zt(),n=!1;try{let{config:i,appId:r,environment:o}=await Ir(e),s=e.all?{all:!0,platform:e.platform}:e.token?.length?{machPushTokens:e.token}:e.user?.length?{externalUserIds:e.user}:null;if(!s)throw new Error('Choose --token, --user, or --all. Example: mach push send --all --title "Hello" --body "World"');let a;if(e.data){let d=JSON.parse(e.data);if(!d||typeof d!="object"||Array.isArray(d))throw new Error("--data must be a JSON object.");a=Object.fromEntries(Object.entries(d).map(([f,g])=>[f,String(g)]))}let c=e.badge===void 0?void 0:Number(e.badge),l=e.ttl===void 0?void 0:Number(e.ttl);t.start("Queueing notification..."),n=!0;let{data:p}=await G.post(`/projects/${i.projectId}/push/send`,{appId:r,environment:o,target:s,notification:{title:e.title,body:e.body,data:a},options:{sound:e.sound,badge:c,ttlSeconds:l,collapseKey:e.collapseKey,androidChannelId:e.androidChannelId}});t.stop(te.green(`Notification queued: ${p.requestId}`))}catch(i){n?t.stop(te.red("Notification was not queued.")):console.error(te.red("Notification was not queued.")),Dt(i)}}async function zd(e){try{let t=Qt(),n=Math.min(Math.max(Number(e.days||30),1),90),{data:i}=await G.get(`/projects/${t.projectId}/push/overview?days=${n}`),r=i.totals,o=r.requested>0?`${(r.accepted/r.requested*100).toFixed(1)}%`:"\u2014";console.log([`${te.bold("Active devices:")} ${i.activeDevices}`,`${te.bold("Queued requests:")} ${r.queuedRequests}`,`${te.bold("Requested:")} ${r.requested}`,`${te.bold("Provider accepted:")} ${r.accepted}`,`${te.bold("Failed:")} ${r.failed}`,`${te.bold("Retried:")} ${r.retried}`,`${te.bold("Invalid devices:")} ${r.invalidDevices}`,`${te.bold("Acceptance:")} ${o}`].join(`
|
|
431
|
+
`))}catch(t){Dt(t)}}import xr from"axios";import h from"chalk";import{execSync as Me,spawnSync as fe}from"child_process";import{createRequire as ba}from"module";import en from"crypto";import B from"fs";import J from"path";import st from"os";import Ca from"adm-zip";var We=e=>typeof e!="string"?void 0:e.trim()||void 0,Wn=e=>(We(e?.teamId)||We(e?.developerTeamId)||We(e?.issuerId)||We(e?.meta?.teamId)||We(e?.meta?.developerTeamId)||We(e?.meta?.issuerId))?.toUpperCase(),Zn=e=>We(e?.keyId)||We(e?.meta?.keyId),ha=(e,t)=>{let n=We(e)?.toLowerCase().replace(/_/g,"-");return t==="development"?n==="development"||n==="dev":t==="adhoc"?["adhoc","ad-hoc","internal","staging","stage","preview"].includes(n||""):["store","app-store","appstore","production","prod"].includes(n||"")},Ar=async({storedPassword:e,tryPassword:t,requestPassword:n})=>{if(e&&await t(e))return{status:"unlocked",password:e,source:"stored"};if(await t(""))return{status:"unlocked",password:"",source:"legacy-empty"};let i=await n();return i===void 0?{status:"cancelled"}:await t(i)?{status:"unlocked",password:i,source:"prompt"}:{status:"failed"}},Gn=(e,t,n)=>e?.type!=="ios_cert"||e?.platform&&e.platform!=="ios"||!We(e?.s3Key)||!ha(e?.distributionType,n)?!1:Wn(e)===t.trim().toUpperCase();var br=(e,t,n,i,r,o)=>{let s=["sigh","renew"];return e==="development"&&s.push("--development"),e==="adhoc"&&s.push("--adhoc"),s.push("--app_identifier",t,"--provisioning_name",n,"--cert_id",i,"--force","--output_path",r,"--filename",o),s};var Sa=ba(import.meta.url);xr.defaults.proxy=!1;function tn(e,t){if(!B.existsSync(e))return;let n=B.readdirSync(e);for(let i of n){let r=J.join(e,i);if(B.statSync(r).isDirectory()){let s=tn(r,t);if(s)return s}else if(t.test(i))return r}}var Ct=e=>String(e||"").trim().toLowerCase().replace(/_/g,"-"),Cr=e=>String(e||"unknown").trim().replace(/[^a-zA-Z0-9._-]/g,"_")||"unknown",wa=(e,t)=>`ios-certificates/${Cr(e)}/${Cr(t)}/`;function va(e){return"'"+e.replace(/'/g,"'\\''")+"'"}function St(...e){let t=e.join(`
|
|
432
432
|
`).split(/\r?\n/).map(n=>n.trim()).filter(Boolean);return t.length>0?t.slice(-8).join(`
|
|
433
|
-
`):void 0}function
|
|
433
|
+
`):void 0}function Ea(e,t,n){let i=fe(e,t,{env:n,encoding:"utf-8"});if(!(i.error||i.status!==0))return(i.stdout||i.stderr||"").trim()||void 0}function Pa(e,t,n,i,r=!1){let o=[`${e} match ${t}`];return n&&o.push(`--app_identifier "${n}"`),i&&o.push(`--profile_name "${i}"`),r&&(t==="adhoc"||t==="development")&&o.push("--force_for_new_devices"),o.join(" ")}function Ra(e){let t=e?.match(/ruby\s+(\d+)\.(\d+)/);return t?{major:Number(t[1]),minor:Number(t[2])}:null}function Na(e,t,n){let i=Ra(e);return i?i.major!==t?i.major<t:i.minor<n:!1}function Un(e){let t=process.env.HOME||st.homedir(),n=process.env.FASTLANE_GEM_HOME||J.join(t,".local/share/fastlane/3.4.0"),i=[process.env.FASTLANE_BINARY,"/usr/local/bin/fastlane","/opt/homebrew/bin/fastlane","/usr/local/Cellar/fastlane/2.227.0/libexec/bin/fastlane","/opt/homebrew/Cellar/fastlane/2.227.0/libexec/bin/fastlane",J.join(n,"bin/fastlane"),"fastlane"].filter(Boolean);for(let r of i){if(r.includes("/")&&!B.existsSync(r))continue;let o=fe(r,["--version"],{env:e,stdio:"ignore"});if(!o.error&&o.status===0)return{command:r,shellCommand:va(r),env:e}}return null}function xa(e){if(process.env.MACH_SKIP_FASTLANE_INSTALL==="1")return{ok:!1,detail:"Automatic install skipped because MACH_SKIP_FASTLANE_INSTALL=1."};let t=fe("gem",["--version"],{env:e,encoding:"utf-8"});if(t.error||t.status!==0)return{ok:!1,detail:St(t.stdout,t.stderr)||"RubyGems is not available."};let n=Ea("ruby",["-v"],e);if(Na(n,3,2))return{ok:!1,detail:[n?`Detected Ruby: ${n}`:void 0,"The latest fastlane dependency tree now requires Ruby >= 3.2.","Mach skipped automatic gem install because macOS system Ruby is too old for it."].filter(Boolean).join(`
|
|
434
434
|
`)};let i=process.env.HOME||st.homedir(),r=process.env.FASTLANE_GEM_HOME||J.join(i,".local/share/fastlane/3.4.0"),o=J.join(r,"bin");B.mkdirSync(o,{recursive:!0}),m.info(h.dim("fastlane not found. Installing fastlane into the local Mach cache..."));let s=fe("gem",["install","fastlane","--no-document","--install-dir",r,"--bindir",o],{env:{...e,GEM_HOME:r,GEM_PATH:[r,e.GEM_PATH].filter(Boolean).join(":")},encoding:"utf-8"});if(s.error||s.status!==0){let a=St(s.stdout,s.stderr);return m.warn(h.yellow("Automatic fastlane install failed.")),a&&m.warn(h.dim(a)),{ok:!1,detail:[n?`Detected Ruby: ${n}`:void 0,a].filter(Boolean).join(`
|
|
435
|
-
`)||void 0}}return m.success(h.green("\u2713 fastlane installed into the local Mach cache.")),{ok:!0}}function
|
|
435
|
+
`)||void 0}}return m.success(h.green("\u2713 fastlane installed into the local Mach cache.")),{ok:!0}}function ka(){return!process.env.CI&&process.stdin.isTTY&&process.stdout.isTTY}function Oa(e){let t=fe("brew",["--version"],{env:e,encoding:"utf-8"});if(t.error||t.status!==0)return{ok:!1,detail:"Homebrew is not available on PATH."};m.info(h.dim("Installing fastlane with Homebrew..."));let n=fe("brew",["install","fastlane"],{env:e,stdio:"inherit"});return n.error||n.status!==0?{ok:!1,detail:"brew install fastlane failed."}:(m.success(h.green("\u2713 fastlane installed with Homebrew.")),{ok:!0})}async function $a(e){if(!ka())return!1;m.warn(h.yellow("fastlane is required for iOS certificate/profile sync, but it was not found.")),e&&m.info(h.dim(e));let t=await Jn({message:"Install fastlane now with Homebrew?",initialValue:!0});return U(t)?(z("Operation cancelled"),!1):!!t}async function _a(){let e=ut(),t=Un(e);if(t)return t;let n=xa(e);e=ut();let i=Un(e);if(i)return i;if(await $a(n.detail)){let r=Oa(e);e=ut();let o=Un(e);if(o)return o;throw new Error(["fastlane is required for iOS certificate/profile sync, but it was still not found after Homebrew install.",r.detail?`Homebrew install failed:
|
|
436
436
|
${r.detail}`:void 0,"Try running manually: brew install fastlane","Then run mach credentials again."].filter(Boolean).join(`
|
|
437
437
|
`))}throw new Error(["fastlane is required for iOS certificate/profile sync, but it was not found on PATH.",n.detail?`Automatic install failed:
|
|
438
438
|
${n.detail}`:void 0,"Recommended fix: brew install fastlane","Alternative: install Ruby 3.x, then run: gem install fastlane --no-document","Then run mach credentials again."].filter(Boolean).join(`
|
|
439
|
-
`))}var oe=e=>{if(typeof e!="string")return;let t=e.trim();return t.length>0?t:void 0},
|
|
439
|
+
`))}var oe=e=>{if(typeof e!="string")return;let t=e.trim();return t.length>0?t:void 0},Kn=e=>oe(e.password)||oe(e.p12Password)||oe(e.certificatePassword)||oe(e.meta?.password)||oe(e.meta?.p12Password)||oe(e.meta?.certificatePassword),kr=e=>oe(e.keystorePassword)||oe(e.storePassword)||oe(e.meta?.keystorePassword)||oe(e.meta?.storePassword),Or=e=>oe(e.keyPassword)||oe(e.meta?.keyPassword),Ta=e=>oe(e.alias)||oe(e.meta?.alias),nn=e=>e.credentialId||e.id,rn=e=>e.bundleId||e.bundleIdentifier||e.meta?.bundleId||e.meta?.bundleIdentifier,Bt=e=>e.distributionType||e.meta?.distributionType,Sr=e=>!!Kn(e)||!!kr(e)||!!Or(e),$r=async(e,t,n)=>{if(!["ios_cert","android_keystore"].includes(n.type)||Sr(n))return n;let i=rn(n),r=Bt(n);if(!i||!r)return n;try{let s=(await G.get("/credentials/resolve",{params:{projectId:e,platform:t,bundleId:i,distributionType:r}})).data.credentials||[],a=nn(n),c=s.find(l=>{if(l.type!==n.type)return!1;let p=nn(l);return a&&p===a?!0:rn(l)===i&&Ct(Bt(l))===Ct(r)&&Sr(l)});return c?{...n,...c,meta:{...n.meta,...c.meta}}:n}catch{return n}},Fa=e=>{let t=Ct(e);return t==="store"||t==="app-store"?"PRODUCTION":["adhoc","ad-hoc","internal","staging","stage"].includes(t)?"STAGING":"DEVELOPMENT"},_r=(e,t)=>{let n=Kn(e);if(n)return n;let i=Fa(e.distributionType);return["IOS_P12_PASSWORD",`${I.envPrefix}P12_PASSWORD`,`IOS_P12_PASSWORD_${i}`,`P12_PASSWORD_${i}`,"MACH_P12_PASSWORD","P12_PASSWORD","CERT_PASSWORD"].map(o=>oe(t[o])).find(Boolean)||""},Da=(e,t)=>{let n=Ct(e.distributionType),i=n==="store"?"PRODUCTION":["internal","adhoc","ad-hoc","staging","stage"].includes(n)?"STAGING":"DEVELOPMENT",r=["PRODUCTION","STORE","INTERNAL","STAGING","DEVELOPMENT","RELEASE","DEBUG"],o=[`KEYSTORE_PASSWORD_${i}`,`KEYSTORE_PASSWORD_${String(e.distributionType||"").toUpperCase()}`,...r.map(d=>`KEYSTORE_PASSWORD_${d}`),"ANDROID_STORE_PASSWORD","ANDROID_KEYSTORE_PASSWORD","ANDROID_KEYSTONE_PASSWORD","KEYSTORE_PASSWORD"],s=[`KEY_PASSWORD_${i}`,`KEY_PASSWORD_${String(e.distributionType||"").toUpperCase()}`,"ANDROID_KEY_PASSWORD","KEY_PASSWORD"],a=[`KEYSTORE_ALIAS_${i}`,`KEYSTORE_ALIAS_${String(e.distributionType||"").toUpperCase()}`,...r.map(d=>`KEYSTORE_ALIAS_${d}`),"ANDROID_KEY_ALIAS","KEYSTORE_ALIAS"],c=kr(e)||Kn(e)||o.map(d=>oe(t[d])).find(Boolean)||"",l=Or(e)||s.map(d=>oe(t[d])).find(Boolean)||c;return{alias:Ta(e)||a.map(d=>oe(t[d])).find(Boolean)||"",keystorePassword:c,keyPassword:l}},wr=(e,t,n)=>{let i=e.includes(".")?e.replace(/\.[^.]+$/i,".zip"):`${e}.zip`,r=J.basename(e),o=new Ca;return o.addLocalFile(e,void 0,r),o.addFile(t,Buffer.from(n.endsWith(`
|
|
440
440
|
`)?n:`${n}
|
|
441
|
-
`,"utf8")),o.writeZip(i),i},
|
|
442
|
-
`);return/maximum allowed number.*keys/i.test(t)||/already reached the maximum/i.test(t)}function
|
|
443
|
-
`);return/another key with same name exists/i.test(t)||/same name already exists/i.test(t)}function Fr(e){if(m.warn(h.yellow(e?.message||"Could not generate APNs key automatically.")),Tr(e)){m.info(h.dim("Apple rejected the request because this team is already at its APNs auth-key limit.")),m.info(h.dim("If you saved an existing .p8 file, upload it here. If not, delete an unused APNs key in Apple Developer, then generate again.")),m.info(h.dim("Apple only lets you download an APNs .p8 private key when the key is first created."));return}m.info(h.dim("You can upload an existing .p8 key, retry generation, or exit and try again later."))}async function Un(){let e=await be({message:"Where should Mach save this APNs key?",options:[{value:"all",label:"All environments",hint:"Recommended \u2014 one APNs key works for sandbox and production"},{value:"development",label:"Development only"},{value:"preview",label:"Preview only"},{value:"production",label:"Production only"}]});return U(e)&&(z("Operation cancelled"),process.exit(0)),e==="all"?Va:[e]}async function za(e,t,n,i){let r=i.teamId||e.teamId;if(!r){let o=await xe({message:"Apple Team ID:",validate:s=>/^[A-Z0-9]{10}$/i.test(s.trim())?void 0:"Team ID must be exactly 10 letters/numbers"});U(o)&&(z("Operation cancelled"),process.exit(0)),r=o.trim().toUpperCase()}for(let o of t)await qt("apns",{...e,environment:o,privateKey:i.privateKey,teamId:r,keyId:i.keyId,bundleId:n})}async function vr(e,t,n){let i=await xe({message:"Path to APNs auth key (.p8):",validate:_r});U(i)&&(z("Operation cancelled"),process.exit(0));let r=await xe({message:"Apple Team ID:",initialValue:e.teamId,validate:s=>s.trim()?void 0:"Team ID is required"});U(r)&&(z("Operation cancelled"),process.exit(0));let o=await xe({message:"APNs Key ID:",initialValue:e.keyId,validate:s=>s.trim()?void 0:"Key ID is required"});U(o)&&(z("Operation cancelled"),process.exit(0));for(let s of t)await qt("apns",{...e,environment:s,file:i,teamId:r,keyId:o,bundleId:n})}async function Qa(e){let t=Wa(),n=e.bundleId||Ke(t)||t.push?.iosBundleId;for(;;){let i=await be({message:"How do you want to configure APNs?",options:[{value:"generate",label:"Generate new APNs key with Apple",hint:"Mach creates, downloads once, and uploads it securely"},{value:"upload",label:"Upload existing .p8 key",hint:"Use a key you already downloaded from Apple"}]});if(U(i)&&(z("Operation cancelled"),process.exit(0)),i==="upload"){let r=await Un();await vr(e,r,n);return}try{let r=await Ka(t,n),o=await Un();await za(e,o,n,r);return}catch(r){Fr(r);let o=await be({message:"APNs key was not created. What do you want to do?",options:[{value:"upload",label:"Upload existing .p8 key"},{value:"retry",label:"Try generating again"},{value:"exit",label:"Exit"}]});if((U(o)||o==="exit")&&(z("Operation cancelled"),process.exit(0)),o==="upload"){let s=await Un();await vr(e,s,n);return}}}}async function qa(e){let t=await xe({message:"Path to Firebase service account JSON:",validate:_r});U(t)&&(z("Operation cancelled"),process.exit(0));let n;try{n=JSON.parse(B.readFileSync(t,"utf8"))}catch(i){z(`Invalid Firebase service account JSON: ${i.message}`),process.exit(1)}await qt("fcm",{...e,serviceAccount:n})}async function ec(e,t){if(t==="ios"){await Qa(e);return}await qa(e)}function tc(e,t,n){let i=B.readFileSync(n,"utf8"),r=Math.floor(Date.now()/1e3),o=Buffer.from(JSON.stringify({alg:"ES256",kid:e,typ:"JWT"})).toString("base64url"),s=Buffer.from(JSON.stringify({iss:t,iat:r,exp:r+1200,aud:"appstoreconnect-v1"})).toString("base64url"),a=`${o}.${s}`,c=en.createSign("SHA256");c.update(a);let l=c.sign({key:i,dsaEncoding:"ieee-p1363"}).toString("base64url");return`${a}.${l}`}async function nc(e,t,n,i){let r=tc(t,n,i),o=(await import("axios")).default;for(let s of e)try{await o.post("https://api.appstoreconnect.apple.com/v1/devices",{data:{type:"devices",attributes:{name:s.name,udid:s.udid,platform:"IOS"}}},{headers:{Authorization:`Bearer ${r}`,"Content-Type":"application/json"}}),m.info(h.dim(` \u2713 Registered: ${s.name}`))}catch(a){let c=a.response?.data?.errors;c?.some(p=>p.code==="ENTITY_ERROR.ATTRIBUTE.INVALID.DUPLICATE"||p.detail?.toLowerCase().includes("already registered")||p.detail?.toLowerCase().includes("already exists"))?m.info(h.dim(` Already on Portal: ${s.name}`)):m.warn(h.yellow(` Could not register ${s.name}: ${c?.[0]?.detail||a.message}`))}}var ic=async e=>{ha(h.bgCyan.black(I.cliTag("Credentials")));let t=await be({message:"Select platform:",options:[{value:"ios",label:"iOS"},{value:"android",label:"Android"}]});U(t)&&(z("Operation cancelled"),process.exit(0));let n=await be({message:"What do you want to do?",options:[{value:"setup",label:"Build Credentials (Certs/Profiles)",hint:"Manage everything needed to build your project"},{value:"download",label:"Download credentials (credentials.json)",hint:"Sync credentials from Dashboard to local project"},{value:"service",label:"App Store Connect API Key (Magic)",hint:"Manage your API Key for automated submission"},{value:"push",label:"Push Notifications",hint:t==="ios"?"Upload APNs key":"Upload Firebase service account"},{value:"back",label:"Go back"},{value:"exit",label:"Exit"}].filter(i=>(t==="android"&&i.value==="service"&&(i.label="Google Service Account (JSON)"),!0))});if((U(n)||n==="exit")&&(z("Operation cancelled"),process.exit(0)),n==="back")return ic(e);n==="setup"?await rc({...e,platform:t}):n==="download"?await yc({...e,platform:t}):n==="service"?await si({...e,platform:t}):n==="push"&&await ec(e,t),ya(h.green("Done!"))},rc=async e=>{let t=tt(),n=e.platform,i=e.profile,r=e.credentialType;if(r&&!Et(r)){m.error("Credential type must be development, adhoc, or store.");return}if(!i&&r){let c=Et(r);i=c==="store"?"production":c==="adhoc"?"staging":"development"}if(!i){let c=await be({message:"Select credential type:",options:[{value:"development",label:"Development",hint:"Local testing & simulators"},{value:"staging",label:"Ad Hoc / Staging",hint:"Internal distribution & device testing"},{value:"production",label:"Production / App Store",hint:"App Store & Play Store submission"}]});U(c)&&(z("Operation cancelled"),process.exit(0)),i=c,r=c==="production"?"store":c==="staging"?"adhoc":"development"}let o=`./${I.configFileName}`;if(!B.existsSync(o)){m.error(`No ${I.configFileName} found. Run \`${I.nameLower} init\` or \`${I.nameLower} link\` first.`);return}let s=JSON.parse(B.readFileSync(o,"utf-8")),{projectId:a}=s;if(!a){m.error(`${I.configFileName} is missing projectId.`);return}if(e.awsProfile&&m.warn(h.yellow(`Ignoring --aws-profile. Authenticating with ${I.name} Cloud...`)),m.info(h.dim(`Setting up credentials for: ${i}`)),n==="ios")await oc(a,i,e,s,r);else{let c=Ba(s,i);await hc(a,i,c,e,s)}};async function oc(e,t,n,i,r){let o=n.bundleId;if(!o){let l=i.submit?.[t]?.ios?.bundleIdentifier||i.submit?.[t]?.ios?.bundleId||Ke(i,t),p=[];try{let f=(await G.get(`/credentials/${e}`)).data.credentials||[];p=[...new Set(f.filter(g=>g.platform==="ios"&&g.bundleId&&g.bundleId!=="*").map(g=>g.bundleId))]}catch{}if(l&&!p.includes(l)&&p.unshift(l),p.length>0){let d=[...p.map(g=>({value:g,label:g,hint:g===l?"from config":void 0})),{value:"__new__",label:"+ Enter a new Bundle ID"}],f=await be({message:"Which Bundle ID are you setting up credentials for?",options:d});if(U(f)&&(z("Operation cancelled"),process.exit(0)),f==="__new__"){let g=await xe({message:"iOS Bundle ID (e.g. com.example.app):",placeholder:"com.example.app",validate:u=>u.includes(".")?void 0:"Please enter a valid Bundle ID"});U(g)&&(z("Operation cancelled"),process.exit(0)),o=g}else o=f}else{let d=await xe({message:"iOS Bundle ID (e.g. com.example.app):",placeholder:"com.example.app",validate:f=>f.includes(".")?void 0:"Please enter a valid Bundle ID"});U(d)&&(z("Operation cancelled"),process.exit(0)),o=d}}m.info(h.dim(`Bundle ID: ${o}`));let s=zn({buildProfile:t,profile:dt(i,t)||{},requestedCredentialType:r});m.info(h.dim(`Credential storage type: ${s}`));let a=i.submit?.production?.ios?.appleId;a&&m.info(h.dim(`Using Apple ID from config: ${a}`)),await gc(e,o,t,s,s==="store"?"appstore":s==="adhoc"?"adhoc":"development",n,i,a)}var Jn=e=>oe(e.expiresAt)||oe(e.expires)||oe(e.expirationDate)||oe(e.meta?.expiresAt)||oe(e.meta?.expires),sc=e=>{let t=Et(Bt(e));return t==="development"?"Development":t==="adhoc"?"Ad Hoc":t==="store"?"App Store":Bt(e)||"Unknown signing type"},ac=e=>{let t=e.credential,n=rn(t)||"all apps",i=sc(t),r=Jn(t);return[e.projectName,i,n,r?`expires ${r}`:void 0].filter(Boolean).join(" \xB7 ")},Vt=e=>e==="development"?"Apple Development":"Apple Distribution",Dr=e=>e==="development"?"Development":e==="adhoc"?"Ad Hoc":"App Store",Kn=e=>{let t=Jn(e);if(!t)return!1;let n=Date.parse(t);return Number.isFinite(n)&&n<=Date.now()},cc=(e,t,n,i)=>{if(e?.type!=="ios_profile"||e?.platform&&e.platform!=="ios"||!oe(e?.s3Key)||Kn(e)||rn(e)!==n||Et(Bt(e))!==(i==="appstore"?"store":i))return!1;let o=Mn(e);return!o||o===t.trim().toUpperCase()};async function lc(e,t,n,i){let o=(await G.get(`/credentials/${e}`)).data.credentials||[],s=o.filter(c=>Wn(c,t,i)&&!Kn(c)).map(c=>({projectId:e,projectName:"This project",credential:c,certificateId:jn(c),teamId:t})),a=o.filter(c=>cc(c,t,n,i));return{certificates:s,profiles:a}}async function Er(e,t,n){let r=((await G.get("/projects")).data.projects||[]).filter(a=>a.projectId!==n),o=(await Promise.all(r.map(async a=>{if(!a.projectId)return[];try{return((await G.get(`/credentials/${a.projectId}`)).data.credentials||[]).filter(p=>Wn(p,e,t)&&!Kn(p)).map(p=>({projectId:a.projectId,projectName:a.name||a.slug||a.projectId,credential:p,certificateId:jn(p),teamId:e}))}catch{return[]}}))).flat(),s=new Map;for(let a of o){let c=`${a.projectId}:${a.certificateId||nn(a.credential)}`,l=s.get(c);(!l||String(a.credential.createdAt||"")>String(l.credential.createdAt||""))&&s.set(c,a)}return[...s.values()]}var Br=e=>String(e||"").replace(/[^a-zA-Z0-9]/g,"").toUpperCase(),dc=(e,t)=>{let n=s=>fe("openssl",["pkcs12","-in",e,"-clcerts","-nokeys","-passin",`pass:${t}`,...s?["-legacy"]:[]],{encoding:"utf-8"}),i=n(!0);if((i.error||i.status!==0)&&(i=n(!1)),i.error||i.status!==0||!i.stdout)return;let o=(fe("openssl",["x509","-noout","-serial"],{input:i.stdout,encoding:"utf-8"}).stdout||"").match(/serial=([A-Fa-f0-9:]+)/);return o?Br(o[1]):void 0};async function pc(e,t,n,i,r,o){if(e.certificateId)return e.certificateId;let s=await on(r,i,o);if(s.length===0)throw new Error(`No active ${Vt(i)} certificates were returned by the Apple Developer Portal.`);let a=dc(t,n),c=a?s.filter(d=>Br(d.serial)===a):[];if(c.length===1)return m.info(h.dim(`Matched the selected saved P12 to Apple certificate ${c[0].name||c[0].id}.`)),c[0].id;let l=Vt(i);m.warn(h.yellow("This saved certificate was created by an older Mach version without its Apple Portal ID. Select its matching active certificate below."));let p=await be({message:`Which ${l} certificate matches the selected saved P12?`,options:[...s.map(d=>({value:d.id,label:[d.name||`${l} certificate`,d.expires].filter(Boolean).join(" \xB7 "),hint:d.serial?`serial ${d.serial}`:void 0})),{value:"cancel",label:"Cancel"}]});if(!(U(p)||p==="cancel"))return p}async function uc(e,t,n){let i="";for(let o=1;o<=5;o++)try{let s=await G.get(`/credentials/${t}/download`,{params:{projectId:e,format:"proxy"},responseType:"arraybuffer"});B.writeFileSync(n,Buffer.from(s.data));return}catch(s){if(i=s?.response?.data?.message||s?.message||String(s),!Mr(i)||o>=5)break;let c=Math.min(15e3,1e3*Math.pow(2,o-1));m.warn(h.yellow(`Certificate download was interrupted (${i}). Retrying with a fresh secure link in ${Math.round(c/1e3)}s\u2026 (${o}/5)`)),await Vr(c)}throw new Error(`Could not download the saved Mach certificate after 5 attempts: ${i||"Unknown network error"}`)}async function fc({targetProjectId:e,targetBundleId:t,targetDistributionType:n,matchType:i,candidate:r,fastlane:o,matchEnv:s,keychainPath:a,keychainPassword:c,teamMeta:l}){let p=await Or(r.projectId,"ios",r.credential),d=$r(p,{})||void 0,f=B.mkdtempSync(J.join(st.tmpdir(),`${I.nameLower}-reuse-cert-`)),g=J.join(f,"selected-signing-certificate.p12"),u=`${I.nameLower} ${i} ${t}`,R=`${I.nameLower}-${i}-${Date.now()}.mobileprovision`;try{m.info(h.dim(`Downloading the selected certificate from ${r.projectName}\u2026`));let C=nn(p);if(!C)throw new Error("The selected Mach certificate no longer has a credential ID.");await uc(r.projectId,C,g),m.info(h.dim("Importing the selected certificate into Mach\u2019s team keychain\u2026"));let v=M=>fe("security",["import",g,"-k",a,"-P",M,"-T","/usr/bin/codesign"],{encoding:"utf-8"}),_,b=await Ir({storedPassword:d,tryPassword:M=>(M===""&&d&&m.warn(h.dim("Saved P12 did not unlock with its stored password; trying the legacy empty-password format\u2026")),_=v(M),!_.error&&_.status===0),requestPassword:async()=>{m.warn(h.yellow("This saved P12 is password protected, but Mach does not have its password."));let M=await bt({message:`P12 password for ${r.projectName}'s saved certificate:`,validate:N=>N.length>0?void 0:"The certificate password is required"});return U(M)?void 0:M}});if(b.status==="cancelled")return!1;if(b.status==="failed")throw new Error(St(_?.stdout,_?.stderr)||"Could not import the selected .p12 certificate. Check its password.");let S=b.password,E=fe("security",["set-key-partition-list","-S","apple-tool:,apple:,codesign:","-s","-k",c,a],{encoding:"utf-8"});if(E.error||E.status!==0)throw new Error(St(E.stdout,E.stderr)||"Could not grant codesign access to the imported certificate.");let L=await pc(r,g,S,i,s,o.shellCommand);if(!L)return!1;m.info(h.blue(`Creating a new ${Dr(i)} profile for ${t}\u2026`));let T=fe(o.command,Ar(i,t,u,L,f,R),{cwd:process.cwd(),env:s,stdio:"inherit"});if(T.error||T.status!==0)throw new Error("Apple could not create the provisioning profile with the selected certificate.");let k=tn(f,/\.mobileprovision$/);if(!k)throw new Error("The new provisioning profile was not produced by fastlane.");let F=Jn(p);return await et(e,g,"ios_cert",t,n,void 0,F,l.teamId,L,S,void 0,void 0,l.teamId,l.teamName,l.developerTeamId||l.teamId,l.appStoreConnectTeamId,l.providerId,l.providerName),await et(e,k,"ios_profile",t,n,void 0,void 0,l.teamId,void 0,void 0,void 0,void 0,l.teamId,l.teamName,l.developerTeamId||l.teamId,l.appStoreConnectTeamId,l.providerId,l.providerName),m.success(h.green(`\u2713 Reused the saved certificate and created credentials for ${t}.`)),!0}finally{try{B.rmSync(f,{recursive:!0,force:!0})}catch{}}}async function Ln({savedCertificates:e,targetProjectId:t,targetBundleId:n,targetDistributionType:i,matchType:r,fastlane:o,matchEnv:s,keychainPath:a,keychainPassword:c,teamMeta:l}){let p=Vt(r),d=await be({message:`Select a saved ${p} certificate to reuse:`,options:[...e.map((g,u)=>({value:String(u),label:ac(g),hint:g.certificateId?`Apple Team ${g.teamId}`:`Apple Team ${g.teamId} \xB7 legacy record; Apple certificate matching may be requested`})),{value:"cancel",label:"Cancel"}]});if(U(d)||d==="cancel")return!1;let f=e[Number(d)];if(!f)throw new Error("The selected saved certificate is no longer available.");return fc({targetProjectId:t,targetBundleId:n,targetDistributionType:i,matchType:r,candidate:f,fastlane:o,matchEnv:s,keychainPath:a,keychainPassword:c,teamMeta:l})}async function mc(e){let t="MATCH_ENCRYPTION_PASSPHRASE";try{let s=((await G.get(`/projects/${e}/secrets/export?env=development`)).data.secrets||{})[t];if(s&&!s.includes("[Decryption Failed]"))return m.info(h.dim("Using existing encryption passphrase from Dashboard")),s;if(s&&s.includes("[Decryption Failed]")){m.warn(h.yellow("\u26A0\uFE0F Existing MATCH_PASSWORD could not be decrypted (encryption key changed).")),m.info(h.dim("Generating a fresh passphrase and cleaning old certificates..."));let a=en.randomBytes(32).toString("base64");try{await G.post(`/projects/${e}/secrets`,{key:t,value:a,type:"managed",description:"Encryption passphrase for iOS certificates (fastlane match)",visibility:"secret"}),m.success(h.green("\u2713 New encryption passphrase generated and saved"))}catch{}try{await G.post("/credentials/clean-match-storage",{projectId:e}),m.success(h.green("\u2713 Cleaned old certificates from storage"))}catch{}return a}}catch(r){m.info(h.dim(`Could not fetch existing passphrase from Dashboard: ${r.message}`))}let n=await be({message:"No active encryption passphrase found on Dashboard. What would you like to do?",options:[{value:"generate",label:"Generate a new secure passphrase",hint:"Safe for first-time setup"},{value:"enter",label:"Enter existing passphrase manually",hint:"Required if you already have certs in S3"},{value:"cancel",label:"Cancel",hint:"Quit"}]});if((U(n)||n==="cancel")&&(z("Operation cancelled"),process.exit(0)),n==="enter"){let r=await bt({message:"Enter your MATCH_PASSWORD (encryption passphrase):",validate:s=>s.length>0?void 0:"Passphrase is required"});U(r)&&(z("Operation cancelled"),process.exit(0));let o=r;try{await G.post(`/projects/${e}/secrets`,{key:t,value:o,type:"managed",description:"Encryption passphrase for iOS certificates (fastlane match)"}),m.success(h.green("\u2713 Saved passphrase to Dashboard"))}catch{}return o}let i=en.randomBytes(32).toString("base64");try{await G.post(`/projects/${e}/secrets`,{key:t,value:i,type:"managed",description:"Encryption passphrase for iOS certificates (fastlane match)",visibility:"secret"}),m.success(h.green("\u2713 Generated and saved encryption passphrase to Dashboard"))}catch(r){m.warn(h.yellow(`Could not save passphrase to Dashboard: ${r.message}`))}return i}async function gc(e,t,n,i,r,o,s,a){let c=tt(),l=!1,p=C=>{c.start(C),l=!0},d=C=>{l&&(c.stop(C),l=!1)};m.info(h.blue("Configuring iOS certificate management..."));let f,g,u=Pt(s,n),R=u;if(!a){let C=await xe({message:"Apple ID (for Apple Developer Portal):",placeholder:"your-email@example.com",validate:v=>v.includes("@")?void 0:"Please enter a valid email"});U(C)&&(z("Operation cancelled"),process.exit(0)),a=C}try{let C=await mc(e),v="",_="";try{let N=await G.post("/credentials/build-server-token",{projectId:e});N.data.status==="success"&&N.data.credentials&&(process.env.AWS_ACCESS_KEY_ID=N.data.credentials.accessKeyId,process.env.AWS_SECRET_ACCESS_KEY=N.data.credentials.secretAccessKey,N.data.credentials.sessionToken&&(process.env.AWS_SESSION_TOKEN=N.data.credentials.sessionToken),_=N.data.credentials.region||"ap-south-1",v=N.data.credentials.bucket||I.bucketPrefix,process.env.AWS_REGION=_,delete process.env.AWS_PROFILE)}catch(N){throw m.error(`Failed to authenticate with ${I.name} Cloud.`),N}if(!v||!_){m.error(`Failed to resolve S3 configuration from ${I.name} Cloud.`);return}let b=o.teamId||u.teamId||s.submit?.production?.ios?.appleTeamId;if(!b)try{let W=(await G.get(`/projects/${e}/secrets`)).data.secrets?.find(H=>H.key==="APPLE_TEAM_ID");W&&(b=W.value,m.info(h.dim(`Using Team ID from Dashboard: ${b}`)))}catch{}b&&b===s.submit?.production?.ios?.appleTeamId&&m.info(h.dim(`Using Apple Team ID from config: ${b}`));let S=await Rt({appleId:a,config:s,profile:n,initialTeam:{...u,teamId:b,developerTeamId:u.developerTeamId||b},promptToPersistConfig:!b,saveTeamId:b?void 0:N=>Pr(e,N)});if(!S?.teamId)return;b=S.teamId;let E={...u,...S,teamId:b,developerTeamId:S.developerTeamId||u.developerTeamId||b};R=E;let L=Sa(e,b);m.info(h.dim(`Using match storage prefix: ${L}`));let T=await $a(),k={...T.env};process.env.CI||delete k.CI,p(`Preparing ${r} certificate sync...`),d("Starting certificate sync...");let F=`${I.buildPrefix}-${b}-${r}.keychain-db`,M=I.keychainPassword;try{let W=`${process.env.HOME||"/Users/"+(process.env.USER||I.nameLower)}/Library/Keychains/${F}`;m.info(h.dim(`Ensuring keychain exists: ${F}`));try{Me(`security create-keychain -p ${M} ${F} 2>/dev/null || true`),Me(`security unlock-keychain -p ${M} ${F}`),Me(`security set-keychain-settings ${F}`);let x=Me("security list-keychains -d user").toString();if(!x.includes(F)){m.info(h.dim(`Adding ${F} to search list`));let Z=[...x.replace(/"/g,"").split(`
|
|
444
|
-
`).map(X=>X.trim()).filter(X=>X.length>0),W].join(" ");Me(`security list-keychains -d user -s ${Z}`)}}catch(x){m.warn(h.dim("Keychain setup warning (non-critical): "+x.message))}let H,ne;try{let $=((await G.get(`/credentials/${e}`)).data.credentials||[]).find(Z=>Z.type==="asc_api_key"&&Z.issuerId);if($){let Z=await G.get(`/credentials/${$.credentialId}/download`,{params:{projectId:e,format:"raw"}});if(Z.data.downloadUrl){let D=await(await import("axios")).default.get(Z.data.downloadUrl,{responseType:"arraybuffer"}),Y=J.join(st.tmpdir(),`mach-asc-${Date.now()}`);B.mkdirSync(Y,{recursive:!0}),f=J.join(Y,`AuthKey_${$.keyId}.p8`),B.writeFileSync(f,Buffer.from(D.data)),H=$.keyId,ne=$.issuerId,m.success(h.green("\u2713 ASC API key loaded \u2014 no 2FA required for Portal operations"))}}}catch(x){m.warn(h.dim(`Could not load ASC API key: ${x.message}. Will fall back to Apple ID auth.`))}m.info(h.dim("Generating secure P12 export password..."));let Ce=
|
|
445
|
-
\u26A0\uFE0F Force flag detected: Hard resetting ${r} certificates...`)),m.info(h.dim("Detected decryption failure loop. Clearing remote storage directly to allow fresh generation.")),m.info(h.dim(`Cleaning match storage for Team ID: ${b}...`));try{(await G.post("/credentials/clean-match-storage",{projectId:e,teamId:b,storagePrefix:L})).data.status==="success"&&m.success(h.green(`\u2713 Cleared S3 storage for Team ID: ${b}`))}catch(x){m.warn(h.yellow(`S3 cleanup via API failed: ${x.message}`)),m.info(h.dim("Continuing to attempt standard nuke..."))}try{Me(`${T.shellCommand} match nuke ${r} --skip_confirmation`,{stdio:"inherit",cwd:process.cwd(),env:se}),m.success(h.green(`\u2713 Nuked existing ${r} credentials`))}catch{m.warn(h.yellow("Standard nuke failed (likely due to password mismatch).")),m.info(h.dim("Since S3 was cleared manually, proceeding to generation..."))}}let ke=r==="adhoc"||r==="development";if(r==="adhoc"||r==="development")try{m.info(h.blue("Fetching registered devices..."));let $=(await G.get("/devices",b?{params:{teamId:b}}:void 0)).data.devices||[];if(b)try{let Z=await G.get("/devices",{params:{teamId:"LEGACY"}}),X=new Map;for(let D of[...$,...Z.data.devices||[]])X.set(D.udid,D);$=Array.from(X.values())}catch{}if($.length===0)m.warn(h.yellow("No registered devices found. Profile will only include devices already on the Apple Developer Portal.")),m.info(h.dim(`Register devices with: ${I.nameLower} device register`));else{let{multiselect:Z}=await import("@clack/prompts"),X=await Z({message:`Select devices to include in the ${r} profile:`,options:$.map(D=>({value:D.udid,label:`${D.name} (${D.udid.substring(0,12)}...)`,hint:D.model||D.platform})),initialValues:$.map(D=>D.udid)});if(!U(X)&&X.length>0){let D=$.filter(Y=>X.includes(Y.udid));if(m.info(h.blue(`Registering ${D.length} device(s) on Apple Developer Portal...`)),b&&await Promise.all(D.filter(Y=>!Y.teamId).map(Y=>G.post("/devices",{udid:Y.udid,name:Y.name,platform:"ios",addedVia:Y.addedVia||"cli",teamId:b,teamName:E.teamName}).catch(()=>{}))),f&&H&&ne)await
|
|
441
|
+
`,"utf8")),o.writeZip(i),i},Ba=e=>{let t=e.toLowerCase();return t==="production"||t==="prod"||t.includes("store")||t.endsWith("-production")||t.endsWith("-prod")},Va=(e,t)=>{let n=dt(e,t)||{},i=Ct(n.distribution),r=Ct(n.environment);return i==="store"||r==="production"||r==="store"||Ba(t)?"store":"internal"},Ma=["development","preview","production"],ja="U27F4V844T",Ln=null;function sn(){return Ln||(Ln=Sa("@expo/apple-utils")),Ln}function vr(e){let t=n=>n.replace(/^.*The password is only used to authenticate with Apple and never stored on Expo servers.*(?:\r?\n)?/gm,"").replace(/^.*Learn more\..*(?:\r?\n)?/gm,"");if(typeof e=="string")return t(e);if(Buffer.isBuffer(e)){let n=e.toString("utf-8"),i=t(n);return i===n?e:Buffer.from(i,"utf-8")}return e}async function Wa(e){let t=process.stdout.write.bind(process.stdout),n=process.stderr.write.bind(process.stderr);process.stdout.write=(i,...r)=>t(vr(i),...r),process.stderr.write=(i,...r)=>n(vr(i),...r);try{return await e()}finally{process.stdout.write=t,process.stderr.write=n}}function Tr(e){return B.existsSync(J.resolve(e))?void 0:"File not found"}function Za(){try{let e=`./${I.configFileName}`;return B.existsSync(e)?JSON.parse(B.readFileSync(e,"utf-8")):{}}catch{return{}}}function Ga(e,t){let n=String(e.name||t||"Mobile app").trim().replace(/\s+/g," ")||"Mobile app",i=new Date,r=[i.getFullYear(),String(i.getMonth()+1).padStart(2,"0"),String(i.getDate()).padStart(2,"0")].join(""),o=en.randomBytes(2).toString("hex").toUpperCase(),s=` ${r}-${o}`;return`${`MACH Push ${n}`.slice(0,Math.max(1,50-s.length))}${s}`}async function Ua(e){let t=e.submit?.production?.ios?.appleId||e.submit?.preview?.ios?.appleId||e.submit?.development?.ios?.appleId,n=await xe({message:"Apple ID (for Apple Developer Portal):",initialValue:t,validate:i=>i.includes("@")?void 0:"Enter a valid Apple ID email"});return U(n)&&(z("Operation cancelled"),process.exit(0)),n}async function La(e){let t=await bt({message:`Apple password for ${e} (used only for Apple login, not stored):`,validate:n=>n.trim()?void 0:"Password is required"});return U(t)&&(z("Operation cancelled"),process.exit(0)),t}function Xa(e){return(Array.isArray(e?.services)?e.services:[]).some(n=>n?.id===ja||/apple push notification|apns/i.test(String(n?.name||"")))}async function Ha(e){let{Keys:t}=sn(),n=tt();try{n.start("Fetching existing APNs keys from Apple...");let i=await t.getKeysAsync(e),o=(await Promise.all(i.map(async s=>{try{return await t.getKeyInfoAsync(e,{id:s.id})}catch{return s}}))).filter(Xa);return n.stop(h.green(`Found ${o.length} APNs key${o.length===1?"":"s"}.`)),o}catch(i){throw n.stop(h.red("Could not fetch APNs keys from Apple.")),i}}async function Ja(e){let{Keys:t}=sn(),i=(await Ha(e)).filter(c=>c.canRevoke!==!1);if(i.length===0)return m.warn(h.yellow("No revokable APNs keys were found for this Apple team.")),!1;let r=await be({message:"Select an APNs key to revoke:",options:i.map(c=>({value:c.id,label:`${c.name||"Untitled APNs key"} (${c.id})`,hint:c.canDownload?"APNs key, private key may still be downloadable":"APNs key"}))});U(r)&&(z("Operation cancelled"),process.exit(0));let o=i.find(c=>c.id===r);m.warn(h.yellow("Revoking this key can break push notifications for any service currently using it."));let s=await Jn({message:`Revoke "${o?.name||"Untitled APNs key"}" (${r})? This cannot be undone.`,initialValue:!1});if(U(s)&&(z("Operation cancelled"),process.exit(0)),!s)return m.info(h.dim("APNs key was not revoked.")),!1;let a=tt();try{return a.start(`Revoking APNs key ${r}...`),await t.revokeKeyAsync(e,{id:r}),a.stop(h.green(`Revoked APNs key ${r}.`)),!0}catch(c){throw a.stop(h.red(`Could not revoke APNs key ${r}.`)),c}}async function Ka(e,t){let{Keys:n}=sn(),i=0;for(;;){let r=t(),o=tt();try{o.start(`Creating APNs auth key (${r})...`);let s=await n.createKeyAsync(e,{name:r,isApns:!0});o.message("Downloading APNs private key...");let a=await n.downloadKeyAsync(e,{id:s.id});if(!a)throw new Error("Apple did not return the APNs private key.");return o.stop(h.green(`APNs key generated: ${s.id}`)),{keyId:s.id,keyName:r,privateKey:a}}catch(s){if(o.stop(h.red("APNs key generation failed.")),za(s)&&i<3){i+=1,m.warn(h.yellow("Apple says that APNs key name already exists. Retrying with a new generated name..."));continue}if(!Fr(s))throw s;Dr(s);let a=await be({message:"Apple APNs key limit reached. What do you want to do?",options:[{value:"revoke",label:"List and revoke an existing APNs key",hint:"Then Mach will create a new key"},{value:"retry",label:"Try creating again"},{value:"exit",label:"Exit"}]});if((U(a)||a==="exit")&&(z("Operation cancelled"),process.exit(0)),a==="revoke"&&await Ja(e))continue}}}async function Ya(e,t){let n=await Ua(e);try{let i=await La(n),{Auth:r}=sn();m.info(h.dim("Signing in to Apple Developer Portal..."));let o=await Wa(()=>r.loginAsync({username:n,password:i},{autoResolveProvider:!0})),s=String(o?.context?.teamId||"").trim().toUpperCase(),a=await Ka(o.context,()=>Ga(e,t));return{keyId:a.keyId,teamId:s,privateKey:a.privateKey}}catch(i){throw m.error(h.red("APNs key generation failed.")),i}}function Fr(e){let t=[e?.message,e?.response?.data,e?.cause?.message].filter(Boolean).join(`
|
|
442
|
+
`);return/maximum allowed number.*keys/i.test(t)||/already reached the maximum/i.test(t)}function za(e){let t=[e?.message,e?.response?.data,e?.cause?.message].filter(Boolean).join(`
|
|
443
|
+
`);return/another key with same name exists/i.test(t)||/same name already exists/i.test(t)}function Dr(e){if(m.warn(h.yellow(e?.message||"Could not generate APNs key automatically.")),Fr(e)){m.info(h.dim("Apple rejected the request because this team is already at its APNs auth-key limit.")),m.info(h.dim("If you saved an existing .p8 file, upload it here. If not, delete an unused APNs key in Apple Developer, then generate again.")),m.info(h.dim("Apple only lets you download an APNs .p8 private key when the key is first created."));return}m.info(h.dim("You can upload an existing .p8 key, retry generation, or exit and try again later."))}async function Xn(){let e=await be({message:"Where should Mach save this APNs key?",options:[{value:"all",label:"All environments",hint:"Recommended \u2014 one APNs key works for sandbox and production"},{value:"development",label:"Development only"},{value:"preview",label:"Preview only"},{value:"production",label:"Production only"}]});return U(e)&&(z("Operation cancelled"),process.exit(0)),e==="all"?Ma:[e]}async function Qa(e,t,n,i){let r=i.teamId||e.teamId;if(!r){let o=await xe({message:"Apple Team ID:",validate:s=>/^[A-Z0-9]{10}$/i.test(s.trim())?void 0:"Team ID must be exactly 10 letters/numbers"});U(o)&&(z("Operation cancelled"),process.exit(0)),r=o.trim().toUpperCase()}for(let o of t)await qt("apns",{...e,environment:o,privateKey:i.privateKey,teamId:r,keyId:i.keyId,bundleId:n})}async function Er(e,t,n){let i=await xe({message:"Path to APNs auth key (.p8):",validate:Tr});U(i)&&(z("Operation cancelled"),process.exit(0));let r=await xe({message:"Apple Team ID:",initialValue:e.teamId,validate:s=>s.trim()?void 0:"Team ID is required"});U(r)&&(z("Operation cancelled"),process.exit(0));let o=await xe({message:"APNs Key ID:",initialValue:e.keyId,validate:s=>s.trim()?void 0:"Key ID is required"});U(o)&&(z("Operation cancelled"),process.exit(0));for(let s of t)await qt("apns",{...e,environment:s,file:i,teamId:r,keyId:o,bundleId:n})}async function qa(e){let t=Za(),n=e.bundleId||Ke(t)||t.push?.iosBundleId;for(;;){let i=await be({message:"How do you want to configure APNs?",options:[{value:"generate",label:"Generate new APNs key with Apple",hint:"Mach creates, downloads once, and uploads it securely"},{value:"upload",label:"Upload existing .p8 key",hint:"Use a key you already downloaded from Apple"}]});if(U(i)&&(z("Operation cancelled"),process.exit(0)),i==="upload"){let r=await Xn();await Er(e,r,n);return}try{let r=await Ya(t,n),o=await Xn();await Qa(e,o,n,r);return}catch(r){Dr(r);let o=await be({message:"APNs key was not created. What do you want to do?",options:[{value:"upload",label:"Upload existing .p8 key"},{value:"retry",label:"Try generating again"},{value:"exit",label:"Exit"}]});if((U(o)||o==="exit")&&(z("Operation cancelled"),process.exit(0)),o==="upload"){let s=await Xn();await Er(e,s,n);return}}}}async function ec(e){let t=await xe({message:"Path to Firebase service account JSON:",validate:Tr});U(t)&&(z("Operation cancelled"),process.exit(0));let n;try{n=JSON.parse(B.readFileSync(t,"utf8"))}catch(i){z(`Invalid Firebase service account JSON: ${i.message}`),process.exit(1)}await qt("fcm",{...e,serviceAccount:n})}async function tc(e,t){if(t==="ios"){await qa(e);return}await ec(e)}function nc(e,t,n){let i=B.readFileSync(n,"utf8"),r=Math.floor(Date.now()/1e3),o=Buffer.from(JSON.stringify({alg:"ES256",kid:e,typ:"JWT"})).toString("base64url"),s=Buffer.from(JSON.stringify({iss:t,iat:r,exp:r+1200,aud:"appstoreconnect-v1"})).toString("base64url"),a=`${o}.${s}`,c=en.createSign("SHA256");c.update(a);let l=c.sign({key:i,dsaEncoding:"ieee-p1363"}).toString("base64url");return`${a}.${l}`}async function ic(e,t,n,i){let r=nc(t,n,i),o=(await import("axios")).default;for(let s of e)try{await o.post("https://api.appstoreconnect.apple.com/v1/devices",{data:{type:"devices",attributes:{name:s.name,udid:s.udid,platform:"IOS"}}},{headers:{Authorization:`Bearer ${r}`,"Content-Type":"application/json"}}),m.info(h.dim(` \u2713 Registered: ${s.name}`))}catch(a){let c=a.response?.data?.errors;c?.some(p=>p.code==="ENTITY_ERROR.ATTRIBUTE.INVALID.DUPLICATE"||p.detail?.toLowerCase().includes("already registered")||p.detail?.toLowerCase().includes("already exists"))?m.info(h.dim(` Already on Portal: ${s.name}`)):m.warn(h.yellow(` Could not register ${s.name}: ${c?.[0]?.detail||a.message}`))}}var rc=async e=>{ya(h.bgCyan.black(I.cliTag("Credentials")));let t=await be({message:"Select platform:",options:[{value:"ios",label:"iOS"},{value:"android",label:"Android"}]});U(t)&&(z("Operation cancelled"),process.exit(0));let n=await be({message:"What do you want to do?",options:[{value:"setup",label:"Build Credentials (Certs/Profiles)",hint:"Manage everything needed to build your project"},{value:"download",label:"Download credentials (credentials.json)",hint:"Sync credentials from Dashboard to local project"},{value:"service",label:"App Store Connect API Key (Magic)",hint:"Manage your API Key for automated submission"},{value:"push",label:"Push Notifications",hint:t==="ios"?"Upload APNs key":"Upload Firebase service account"},{value:"back",label:"Go back"},{value:"exit",label:"Exit"}].filter(i=>(t==="android"&&i.value==="service"&&(i.label="Google Service Account (JSON)"),!0))});if((U(n)||n==="exit")&&(z("Operation cancelled"),process.exit(0)),n==="back")return rc(e);n==="setup"?await oc({...e,platform:t}):n==="download"?await Ic({...e,platform:t}):n==="service"?await ci({...e,platform:t}):n==="push"&&await tc(e,t),Ia(h.green("Done!"))},oc=async e=>{let t=tt(),n=e.platform,i=e.profile,r=e.credentialType;if(r&&!Et(r)){m.error("Credential type must be development, adhoc, or store.");return}if(!i&&r){let c=Et(r);i=c==="store"?"production":c==="adhoc"?"staging":"development"}if(!i){let c=await be({message:"Select credential type:",options:[{value:"development",label:"Development",hint:"Local testing & simulators"},{value:"staging",label:"Ad Hoc / Staging",hint:"Internal distribution & device testing"},{value:"production",label:"Production / App Store",hint:"App Store & Play Store submission"}]});U(c)&&(z("Operation cancelled"),process.exit(0)),i=c,r=c==="production"?"store":c==="staging"?"adhoc":"development"}let o=`./${I.configFileName}`;if(!B.existsSync(o)){m.error(`No ${I.configFileName} found. Run \`${I.nameLower} init\` or \`${I.nameLower} link\` first.`);return}let s=JSON.parse(B.readFileSync(o,"utf-8")),{projectId:a}=s;if(!a){m.error(`${I.configFileName} is missing projectId.`);return}if(e.awsProfile&&m.warn(h.yellow(`Ignoring --aws-profile. Authenticating with ${I.name} Cloud...`)),m.info(h.dim(`Setting up credentials for: ${i}`)),n==="ios")await sc(a,i,e,s,r);else{let c=Va(s,i);await yc(a,i,c,e,s)}};async function sc(e,t,n,i,r){let o=n.bundleId;if(!o){let l=i.submit?.[t]?.ios?.bundleIdentifier||i.submit?.[t]?.ios?.bundleId||Ke(i,t),p=[];try{let f=(await G.get(`/credentials/${e}`)).data.credentials||[];p=[...new Set(f.filter(g=>g.platform==="ios"&&g.bundleId&&g.bundleId!=="*").map(g=>g.bundleId))]}catch{}if(l&&!p.includes(l)&&p.unshift(l),p.length>0){let d=[...p.map(g=>({value:g,label:g,hint:g===l?"from config":void 0})),{value:"__new__",label:"+ Enter a new Bundle ID"}],f=await be({message:"Which Bundle ID are you setting up credentials for?",options:d});if(U(f)&&(z("Operation cancelled"),process.exit(0)),f==="__new__"){let g=await xe({message:"iOS Bundle ID (e.g. com.example.app):",placeholder:"com.example.app",validate:u=>u.includes(".")?void 0:"Please enter a valid Bundle ID"});U(g)&&(z("Operation cancelled"),process.exit(0)),o=g}else o=f}else{let d=await xe({message:"iOS Bundle ID (e.g. com.example.app):",placeholder:"com.example.app",validate:f=>f.includes(".")?void 0:"Please enter a valid Bundle ID"});U(d)&&(z("Operation cancelled"),process.exit(0)),o=d}}m.info(h.dim(`Bundle ID: ${o}`));let s=qn({buildProfile:t,profile:dt(i,t)||{},requestedCredentialType:r});m.info(h.dim(`Credential storage type: ${s}`));let a=i.submit?.production?.ios?.appleId;a&&m.info(h.dim(`Using Apple ID from config: ${a}`)),await hc(e,o,t,s,s==="store"?"appstore":s==="adhoc"?"adhoc":"development",n,i,a)}var Yn=e=>oe(e.expiresAt)||oe(e.expires)||oe(e.expirationDate)||oe(e.meta?.expiresAt)||oe(e.meta?.expires),ac=e=>{let t=Et(Bt(e));return t==="development"?"Development":t==="adhoc"?"Ad Hoc":t==="store"?"App Store":Bt(e)||"Unknown signing type"},cc=e=>{let t=e.credential,n=rn(t)||"all apps",i=ac(t),r=Yn(t);return[e.projectName,i,n,r?`expires ${r}`:void 0].filter(Boolean).join(" \xB7 ")},Vt=e=>e==="development"?"Apple Development":"Apple Distribution",Br=e=>e==="development"?"Development":e==="adhoc"?"Ad Hoc":"App Store",zn=e=>{let t=Yn(e);if(!t)return!1;let n=Date.parse(t);return Number.isFinite(n)&&n<=Date.now()},lc=(e,t,n,i)=>{if(e?.type!=="ios_profile"||e?.platform&&e.platform!=="ios"||!oe(e?.s3Key)||zn(e)||rn(e)!==n||Et(Bt(e))!==(i==="appstore"?"store":i))return!1;let o=Wn(e);return!o||o===t.trim().toUpperCase()};async function dc(e,t,n,i){let o=(await G.get(`/credentials/${e}`)).data.credentials||[],s=o.filter(c=>Gn(c,t,i)&&!zn(c)).map(c=>({projectId:e,projectName:"This project",credential:c,certificateId:Zn(c),teamId:t})),a=o.filter(c=>lc(c,t,n,i));return{certificates:s,profiles:a}}async function Pr(e,t,n){let r=((await G.get("/projects")).data.projects||[]).filter(a=>a.projectId!==n),o=(await Promise.all(r.map(async a=>{if(!a.projectId)return[];try{return((await G.get(`/credentials/${a.projectId}`)).data.credentials||[]).filter(p=>Gn(p,e,t)&&!zn(p)).map(p=>({projectId:a.projectId,projectName:a.name||a.slug||a.projectId,credential:p,certificateId:Zn(p),teamId:e}))}catch{return[]}}))).flat(),s=new Map;for(let a of o){let c=`${a.projectId}:${a.certificateId||nn(a.credential)}`,l=s.get(c);(!l||String(a.credential.createdAt||"")>String(l.credential.createdAt||""))&&s.set(c,a)}return[...s.values()]}var Vr=e=>String(e||"").replace(/[^a-zA-Z0-9]/g,"").toUpperCase(),pc=(e,t)=>{let n=s=>fe("openssl",["pkcs12","-in",e,"-clcerts","-nokeys","-passin",`pass:${t}`,...s?["-legacy"]:[]],{encoding:"utf-8"}),i=n(!0);if((i.error||i.status!==0)&&(i=n(!1)),i.error||i.status!==0||!i.stdout)return;let o=(fe("openssl",["x509","-noout","-serial"],{input:i.stdout,encoding:"utf-8"}).stdout||"").match(/serial=([A-Fa-f0-9:]+)/);return o?Vr(o[1]):void 0};async function uc(e,t,n,i,r,o){if(e.certificateId)return e.certificateId;let s=await on(r,i,o);if(s.length===0)throw new Error(`No active ${Vt(i)} certificates were returned by the Apple Developer Portal.`);let a=pc(t,n),c=a?s.filter(d=>Vr(d.serial)===a):[];if(c.length===1)return m.info(h.dim(`Matched the selected saved P12 to Apple certificate ${c[0].name||c[0].id}.`)),c[0].id;let l=Vt(i);m.warn(h.yellow("This saved certificate was created by an older Mach version without its Apple Portal ID. Select its matching active certificate below."));let p=await be({message:`Which ${l} certificate matches the selected saved P12?`,options:[...s.map(d=>({value:d.id,label:[d.name||`${l} certificate`,d.expires].filter(Boolean).join(" \xB7 "),hint:d.serial?`serial ${d.serial}`:void 0})),{value:"cancel",label:"Cancel"}]});if(!(U(p)||p==="cancel"))return p}async function fc(e,t,n){let i="";for(let o=1;o<=5;o++)try{let s=await G.get(`/credentials/${t}/download`,{params:{projectId:e,format:"proxy"},responseType:"arraybuffer"});B.writeFileSync(n,Buffer.from(s.data));return}catch(s){if(i=s?.response?.data?.message||s?.message||String(s),!jr(i)||o>=5)break;let c=Math.min(15e3,1e3*Math.pow(2,o-1));m.warn(h.yellow(`Certificate download was interrupted (${i}). Retrying with a fresh secure link in ${Math.round(c/1e3)}s\u2026 (${o}/5)`)),await Mr(c)}throw new Error(`Could not download the saved Mach certificate after 5 attempts: ${i||"Unknown network error"}`)}async function mc({targetProjectId:e,targetBundleId:t,targetDistributionType:n,matchType:i,candidate:r,fastlane:o,matchEnv:s,keychainPath:a,keychainPassword:c,teamMeta:l}){let p=await $r(r.projectId,"ios",r.credential),d=_r(p,{})||void 0,f=B.mkdtempSync(J.join(st.tmpdir(),`${I.nameLower}-reuse-cert-`)),g=J.join(f,"selected-signing-certificate.p12"),u=`${I.nameLower} ${i} ${t}`,R=`${I.nameLower}-${i}-${Date.now()}.mobileprovision`;try{m.info(h.dim(`Downloading the selected certificate from ${r.projectName}\u2026`));let C=nn(p);if(!C)throw new Error("The selected Mach certificate no longer has a credential ID.");await fc(r.projectId,C,g),m.info(h.dim("Importing the selected certificate into Mach\u2019s team keychain\u2026"));let v=M=>fe("security",["import",g,"-k",a,"-P",M,"-T","/usr/bin/codesign"],{encoding:"utf-8"}),_,b=await Ar({storedPassword:d,tryPassword:M=>(M===""&&d&&m.warn(h.dim("Saved P12 did not unlock with its stored password; trying the legacy empty-password format\u2026")),_=v(M),!_.error&&_.status===0),requestPassword:async()=>{m.warn(h.yellow("This saved P12 is password protected, but Mach does not have its password."));let M=await bt({message:`P12 password for ${r.projectName}'s saved certificate:`,validate:N=>N.length>0?void 0:"The certificate password is required"});return U(M)?void 0:M}});if(b.status==="cancelled")return!1;if(b.status==="failed")throw new Error(St(_?.stdout,_?.stderr)||"Could not import the selected .p12 certificate. Check its password.");let S=b.password,E=fe("security",["set-key-partition-list","-S","apple-tool:,apple:,codesign:","-s","-k",c,a],{encoding:"utf-8"});if(E.error||E.status!==0)throw new Error(St(E.stdout,E.stderr)||"Could not grant codesign access to the imported certificate.");let L=await uc(r,g,S,i,s,o.shellCommand);if(!L)return!1;m.info(h.blue(`Creating a new ${Br(i)} profile for ${t}\u2026`));let T=fe(o.command,br(i,t,u,L,f,R),{cwd:process.cwd(),env:s,stdio:"inherit"});if(T.error||T.status!==0)throw new Error("Apple could not create the provisioning profile with the selected certificate.");let k=tn(f,/\.mobileprovision$/);if(!k)throw new Error("The new provisioning profile was not produced by fastlane.");let F=Yn(p);return await et(e,g,"ios_cert",t,n,void 0,F,l.teamId,L,S,void 0,void 0,l.teamId,l.teamName,l.developerTeamId||l.teamId,l.appStoreConnectTeamId,l.providerId,l.providerName),await et(e,k,"ios_profile",t,n,void 0,void 0,l.teamId,void 0,void 0,void 0,void 0,l.teamId,l.teamName,l.developerTeamId||l.teamId,l.appStoreConnectTeamId,l.providerId,l.providerName),m.success(h.green(`\u2713 Reused the saved certificate and created credentials for ${t}.`)),!0}finally{try{B.rmSync(f,{recursive:!0,force:!0})}catch{}}}async function Hn({savedCertificates:e,targetProjectId:t,targetBundleId:n,targetDistributionType:i,matchType:r,fastlane:o,matchEnv:s,keychainPath:a,keychainPassword:c,teamMeta:l}){let p=Vt(r),d=await be({message:`Select a saved ${p} certificate to reuse:`,options:[...e.map((g,u)=>({value:String(u),label:cc(g),hint:g.certificateId?`Apple Team ${g.teamId}`:`Apple Team ${g.teamId} \xB7 legacy record; Apple certificate matching may be requested`})),{value:"cancel",label:"Cancel"}]});if(U(d)||d==="cancel")return!1;let f=e[Number(d)];if(!f)throw new Error("The selected saved certificate is no longer available.");return mc({targetProjectId:t,targetBundleId:n,targetDistributionType:i,matchType:r,candidate:f,fastlane:o,matchEnv:s,keychainPath:a,keychainPassword:c,teamMeta:l})}async function gc(e){let t="MATCH_ENCRYPTION_PASSPHRASE";try{let s=((await G.get(`/projects/${e}/secrets/export?env=development`)).data.secrets||{})[t];if(s&&!s.includes("[Decryption Failed]"))return m.info(h.dim("Using existing encryption passphrase from Dashboard")),s;if(s&&s.includes("[Decryption Failed]")){m.warn(h.yellow("\u26A0\uFE0F Existing MATCH_PASSWORD could not be decrypted (encryption key changed).")),m.info(h.dim("Generating a fresh passphrase and cleaning old certificates..."));let a=en.randomBytes(32).toString("base64");try{await G.post(`/projects/${e}/secrets`,{key:t,value:a,type:"managed",description:"Encryption passphrase for iOS certificates (fastlane match)",visibility:"secret"}),m.success(h.green("\u2713 New encryption passphrase generated and saved"))}catch{}try{await G.post("/credentials/clean-match-storage",{projectId:e}),m.success(h.green("\u2713 Cleaned old certificates from storage"))}catch{}return a}}catch(r){m.info(h.dim(`Could not fetch existing passphrase from Dashboard: ${r.message}`))}let n=await be({message:"No active encryption passphrase found on Dashboard. What would you like to do?",options:[{value:"generate",label:"Generate a new secure passphrase",hint:"Safe for first-time setup"},{value:"enter",label:"Enter existing passphrase manually",hint:"Required if you already have certs in S3"},{value:"cancel",label:"Cancel",hint:"Quit"}]});if((U(n)||n==="cancel")&&(z("Operation cancelled"),process.exit(0)),n==="enter"){let r=await bt({message:"Enter your MATCH_PASSWORD (encryption passphrase):",validate:s=>s.length>0?void 0:"Passphrase is required"});U(r)&&(z("Operation cancelled"),process.exit(0));let o=r;try{await G.post(`/projects/${e}/secrets`,{key:t,value:o,type:"managed",description:"Encryption passphrase for iOS certificates (fastlane match)"}),m.success(h.green("\u2713 Saved passphrase to Dashboard"))}catch{}return o}let i=en.randomBytes(32).toString("base64");try{await G.post(`/projects/${e}/secrets`,{key:t,value:i,type:"managed",description:"Encryption passphrase for iOS certificates (fastlane match)",visibility:"secret"}),m.success(h.green("\u2713 Generated and saved encryption passphrase to Dashboard"))}catch(r){m.warn(h.yellow(`Could not save passphrase to Dashboard: ${r.message}`))}return i}async function hc(e,t,n,i,r,o,s,a){let c=tt(),l=!1,p=C=>{c.start(C),l=!0},d=C=>{l&&(c.stop(C),l=!1)};m.info(h.blue("Configuring iOS certificate management..."));let f,g,u=Pt(s,n),R=u;if(!a){let C=await xe({message:"Apple ID (for Apple Developer Portal):",placeholder:"your-email@example.com",validate:v=>v.includes("@")?void 0:"Please enter a valid email"});U(C)&&(z("Operation cancelled"),process.exit(0)),a=C}try{let C=await gc(e),v="",_="";try{let N=await G.post("/credentials/build-server-token",{projectId:e});N.data.status==="success"&&N.data.credentials&&(process.env.AWS_ACCESS_KEY_ID=N.data.credentials.accessKeyId,process.env.AWS_SECRET_ACCESS_KEY=N.data.credentials.secretAccessKey,N.data.credentials.sessionToken&&(process.env.AWS_SESSION_TOKEN=N.data.credentials.sessionToken),_=N.data.credentials.region||"ap-south-1",v=N.data.credentials.bucket||I.bucketPrefix,process.env.AWS_REGION=_,delete process.env.AWS_PROFILE)}catch(N){throw m.error(`Failed to authenticate with ${I.name} Cloud.`),N}if(!v||!_){m.error(`Failed to resolve S3 configuration from ${I.name} Cloud.`);return}let b=o.teamId||u.teamId||s.submit?.production?.ios?.appleTeamId;if(!b)try{let W=(await G.get(`/projects/${e}/secrets`)).data.secrets?.find(H=>H.key==="APPLE_TEAM_ID");W&&(b=W.value,m.info(h.dim(`Using Team ID from Dashboard: ${b}`)))}catch{}b&&b===s.submit?.production?.ios?.appleTeamId&&m.info(h.dim(`Using Apple Team ID from config: ${b}`));let S=await Rt({appleId:a,config:s,profile:n,initialTeam:{...u,teamId:b,developerTeamId:u.developerTeamId||b},promptToPersistConfig:!b,saveTeamId:b?void 0:N=>Rr(e,N)});if(!S?.teamId)return;b=S.teamId;let E={...u,...S,teamId:b,developerTeamId:S.developerTeamId||u.developerTeamId||b};R=E;let L=wa(e,b);m.info(h.dim(`Using match storage prefix: ${L}`));let T=await _a(),k={...T.env};process.env.CI||delete k.CI,p(`Preparing ${r} certificate sync...`),d("Starting certificate sync...");let F=`${I.buildPrefix}-${b}-${r}.keychain-db`,M=I.keychainPassword;try{let W=`${process.env.HOME||"/Users/"+(process.env.USER||I.nameLower)}/Library/Keychains/${F}`;m.info(h.dim(`Ensuring keychain exists: ${F}`));try{Me(`security create-keychain -p ${M} ${F} 2>/dev/null || true`),Me(`security unlock-keychain -p ${M} ${F}`),Me(`security set-keychain-settings ${F}`);let x=Me("security list-keychains -d user").toString();if(!x.includes(F)){m.info(h.dim(`Adding ${F} to search list`));let Z=[...x.replace(/"/g,"").split(`
|
|
444
|
+
`).map(X=>X.trim()).filter(X=>X.length>0),W].join(" ");Me(`security list-keychains -d user -s ${Z}`)}}catch(x){m.warn(h.dim("Keychain setup warning (non-critical): "+x.message))}let H,ne;try{let $=((await G.get(`/credentials/${e}`)).data.credentials||[]).find(Z=>Z.type==="asc_api_key"&&Z.issuerId);if($){let Z=await G.get(`/credentials/${$.credentialId}/download`,{params:{projectId:e,format:"raw"}});if(Z.data.downloadUrl){let D=await(await import("axios")).default.get(Z.data.downloadUrl,{responseType:"arraybuffer"}),Y=J.join(st.tmpdir(),`mach-asc-${Date.now()}`);B.mkdirSync(Y,{recursive:!0}),f=J.join(Y,`AuthKey_${$.keyId}.p8`),B.writeFileSync(f,Buffer.from(D.data)),H=$.keyId,ne=$.issuerId,m.success(h.green("\u2713 ASC API key loaded \u2014 no 2FA required for Portal operations"))}}}catch(x){m.warn(h.dim(`Could not load ASC API key: ${x.message}. Will fall back to Apple ID auth.`))}m.info(h.dim("Generating secure P12 export password..."));let Ce=Wr();m.success(h.green("\u2713 Secure P12 password generated.")),g=B.mkdtempSync(J.join(st.tmpdir(),`${I.nameLower}-match-${r}-`));let se={...k,AWS_REGION:process.env.AWS_REGION||"ap-south-1",AWS_ACCESS_KEY_ID:process.env.AWS_ACCESS_KEY_ID,AWS_SECRET_ACCESS_KEY:process.env.AWS_SECRET_ACCESS_KEY,SSL_CERT_FILE:"/etc/ssl/cert.pem",AWS_CA_BUNDLE:"/etc/ssl/cert.pem",FASTLANE_SSL_CA_CERT:"/etc/ssl/cert.pem",MATCH_PASSWORD:C,FASTLANE_USER:a,FASTLANE_SKIP_UPDATE_CHECK:"1",FASTLANE_TEAM_ID:b,MATCH_KEYCHAIN_NAME:W,MATCH_KEYCHAIN_PASSWORD:M,TERM:process.env.TERM||"xterm-256color",SHELL:process.env.SHELL||"/bin/zsh",MATCH_OUTPUT_PATH:g,MATCH_STORAGE_MODE:"s3",MATCH_S3_REGION:_,MATCH_S3_BUCKET:v,MATCH_S3_OBJECT_PREFIX:L,MATCH_USERNAME:a,MATCH_APP_IDENTIFIER:t,MATCH_TYPE:r,[`${I.envPrefix}P12_PASSWORD`]:Ce,...f&&H&&ne?{APP_STORE_CONNECT_API_KEY_KEY_ID:H,APP_STORE_CONNECT_API_KEY_ISSUER_ID:ne,APP_STORE_CONNECT_API_KEY_KEY_FILEPATH:f,FASTLANE_SKIP_2FA:"1"}:{}};if(o.force){m.warn(h.yellow(`
|
|
445
|
+
\u26A0\uFE0F Force flag detected: Hard resetting ${r} certificates...`)),m.info(h.dim("Detected decryption failure loop. Clearing remote storage directly to allow fresh generation.")),m.info(h.dim(`Cleaning match storage for Team ID: ${b}...`));try{(await G.post("/credentials/clean-match-storage",{projectId:e,teamId:b,storagePrefix:L})).data.status==="success"&&m.success(h.green(`\u2713 Cleared S3 storage for Team ID: ${b}`))}catch(x){m.warn(h.yellow(`S3 cleanup via API failed: ${x.message}`)),m.info(h.dim("Continuing to attempt standard nuke..."))}try{Me(`${T.shellCommand} match nuke ${r} --skip_confirmation`,{stdio:"inherit",cwd:process.cwd(),env:se}),m.success(h.green(`\u2713 Nuked existing ${r} credentials`))}catch{m.warn(h.yellow("Standard nuke failed (likely due to password mismatch).")),m.info(h.dim("Since S3 was cleared manually, proceeding to generation..."))}}let ke=r==="adhoc"||r==="development";if(r==="adhoc"||r==="development")try{m.info(h.blue("Fetching registered devices..."));let $=(await G.get("/devices",b?{params:{teamId:b}}:void 0)).data.devices||[];if(b)try{let Z=await G.get("/devices",{params:{teamId:"LEGACY"}}),X=new Map;for(let D of[...$,...Z.data.devices||[]])X.set(D.udid,D);$=Array.from(X.values())}catch{}if($.length===0)m.warn(h.yellow("No registered devices found. Profile will only include devices already on the Apple Developer Portal.")),m.info(h.dim(`Register devices with: ${I.nameLower} device register`));else{let{multiselect:Z}=await import("@clack/prompts"),X=await Z({message:`Select devices to include in the ${r} profile:`,options:$.map(D=>({value:D.udid,label:`${D.name} (${D.udid.substring(0,12)}...)`,hint:D.model||D.platform})),initialValues:$.map(D=>D.udid)});if(!U(X)&&X.length>0){let D=$.filter(Y=>X.includes(Y.udid));if(m.info(h.blue(`Registering ${D.length} device(s) on Apple Developer Portal...`)),b&&await Promise.all(D.filter(Y=>!Y.teamId).map(Y=>G.post("/devices",{udid:Y.udid,name:Y.name,platform:"ios",addedVia:Y.addedVia||"cli",teamId:b,teamName:E.teamName}).catch(()=>{}))),f&&H&&ne)await ic(D,H,ne,f);else{m.info(h.dim("You will be prompted for a 2FA code once \u2014 type it and press Enter."));for(let Y of D){let ce=Y.name.replace(/"/g,'\\"');fe(`${T.shellCommand} run register_device name:"${ce}" udid:"${Y.udid}"`,{shell:!0,env:se,stdio:"inherit",cwd:process.cwd()})}}m.info(h.green("\u2713 Device registration complete.")),ke=!0}}}catch(x){m.warn(h.yellow(`Could not fetch registered devices: ${x.message}`)),m.info(h.dim("Continuing without explicit device registration."))}let q=r,Oe={certificates:[],profiles:[]};try{Oe=await dc(e,b,t,q)}catch{}let Se=Vt(q),Ee=Br(q);if(!o.force&&Oe.certificates.length>0&&Oe.profiles.length>0){m.success(h.green(`\u2713 Existing ${Se} certificate and ${Ee} profile found in Mach for ${t}.`)),m.info(h.dim("Reusing the saved credentials; no Apple certificate or Fastlane Match sync is needed."));return}if(Oe.certificates.length>0&&!o.force){let x=await be({message:`A saved ${Se} certificate already exists in this Mach project.`,options:[{value:"reuse",label:`Create or refresh the ${Ee} profile with the saved certificate`,hint:"Recommended \u2014 no new Apple certificate is requested"},{value:"sync",label:"Continue with normal certificate sync",hint:"May ask Apple to create another certificate if Match storage is incomplete"}]});if(U(x)){z("Operation cancelled");return}if(x==="reuse"){if(await Hn({savedCertificates:Oe.certificates,targetProjectId:e,targetBundleId:t,targetDistributionType:i,matchType:q,fastlane:T,matchEnv:se,keychainPath:W,keychainPassword:M,teamMeta:E}))return;throw new Error("Saved certificate reuse was cancelled or could not be completed. No new certificate was requested.")}}let j=[];try{j=await Pr(b,q,e)}catch{}if(j.length>0){let x=await be({message:`Saved ${Se} certificate${j.length===1?"":"s"} found for Apple Team ${b}.`,options:[{value:"reuse",label:"Reuse a saved certificate",hint:`${j.length} compatible certificate${j.length===1?"":"s"} found \u2014 no new Apple certificate is requested`},{value:"sync",label:"Continue with normal certificate sync",hint:"Use this only when you need a different signing identity"}]});if(U(x)){z("Operation cancelled");return}if(x==="reuse"){if(await Hn({savedCertificates:j,targetProjectId:e,targetBundleId:t,targetDistributionType:i,matchType:q,fastlane:T,matchEnv:se,keychainPath:W,keychainPassword:M,teamMeta:E}))return;throw new Error("Saved certificate reuse was cancelled or could not be completed. No new certificate was requested.")}}try{let x=`${I.nameLower} ${r} ${t}`,$=Pa(T.shellCommand,r,t,x,ke);ke&&m.info(h.dim(`Refreshing ${r} provisioning profile when device list changes (--force_for_new_devices).`));let Z=fe($,{shell:!0,cwd:process.cwd(),env:se,stdio:"inherit",encoding:"utf-8"});if(Z.status!==0){m.warn(h.yellow(`
|
|
446
446
|
Certificate sync failed. Attempting to create App ID and retry...`));try{Me(`${T.shellCommand} produce --app_identifier "${t}" --app_name "${t}" --skip_itc`,{stdio:"inherit",env:se}),m.success(h.green("\u2713 App ID created successfully")),m.info(h.blue("Retrying certificate sync...")),Z=fe($,{shell:!0,cwd:process.cwd(),env:se,stdio:"inherit",encoding:"utf-8"})}catch{}if(Z.status!==0)throw new Error("fastlane match failed")}}catch(x){let $=Vt(q);if(m.warn(h.yellow(`
|
|
447
|
-
Certificate sync failed. This can be caused by an incorrect encryption passphrase, an expired Apple session, or the ${$} certificate limit.`)),j.length===0)try{j=await
|
|
448
|
-
You are overriding the dashboard passphrase for this session.`));let X=await bt({message:"Enter the correct MATCH_PASSWORD for this project:"});if(X&&!U(X)){C=X,m.info(h.blue("Retrying with provided passphrase..."));let D={...se,MATCH_PASSWORD:C};if(fe(`${T.shellCommand} match ${r}`,{shell:!0,stdio:"inherit",cwd:process.cwd(),env:D}).status===0)await G.post(`/projects/${e}/secrets`,{key:"MATCH_ENCRYPTION_PASSPHRASE",value:C,description:"Encryption passphrase for iOS certificates (fastlane match)",visibility:"secret"}),m.success(h.green("\u2713 Dashboard passphrase updated."));else throw new Error("Sync failed again with provided passphrase.")}else throw x}else if(Z==="check_portal")try{let X=await on(se,r,T.shellCommand);if(X.length>0){if(m.info(h.dim(`Found ${X.length} existing ${r} certificates on the portal.`)),await
|
|
449
|
-
${Z.trim()}`));let X=fe("security",["export","-k",$,"-t","identities","-f","pkcs12","-o",pe,"-P",Ce],{encoding:"utf-8"});if(X.error||X.status!==0)throw new Error(St(X.stdout,X.stderr)||"security could not export the signing certificate.");try{let D=fe("openssl",["pkcs12","-in",pe,"-nokeys","-passin",`pass:${Ce}`,"-legacy"],{encoding:"utf-8"});if((D.error||D.status!==0)&&(D=fe("openssl",["pkcs12","-in",pe,"-nokeys","-passin",`pass:${Ce}`],{encoding:"utf-8"})),D.error||D.status!==0)throw new Error(St(D.stdout,D.stderr)||"openssl could not read the exported P12.");let Y=D.stdout||"";if(!Y.includes(b))throw new Error(`Exported P12 does not contain identity for team ${b}. Found: ${Y.substring(0,200)}`);m.success(h.green(`\u2713 P12 verified \u2014 contains correct team identity (${b})`))}catch(D){throw new Error(`P12 verification failed: ${D.message}`)}}catch{m.warn(h.dim("Could not export certificate from keychain."))}o.teamId&&!b&&await
|
|
450
|
-
Manual Upload Mode`)),m.info("Please provide your certificate and provisioning profile:");let r=await xe({message:"Path to .p12 certificate file:",validate:a=>B.existsSync(a)?void 0:"File not found"});U(r)&&(z("Operation cancelled"),process.exit(0));let o=await xe({message:"Path to .mobileprovision file:",validate:a=>B.existsSync(a)?void 0:"File not found"});U(o)&&(z("Operation cancelled"),process.exit(0));let s=tt();s.start(`Uploading to ${I.name} Dashboard...`);try{await et(e,r,"ios_cert",t,n,void 0,void 0,i.teamId,void 0,void 0,void 0,void 0,i.teamId,i.teamName,i.developerTeamId||i.teamId,i.appStoreConnectTeamId,i.providerId,i.providerName),await et(e,o,"ios_profile",t,n,void 0,void 0,i.teamId,void 0,void 0,void 0,void 0,i.teamId,i.teamName,i.developerTeamId||i.teamId,i.appStoreConnectTeamId,i.providerId,i.providerName),s.stop("Upload complete"),m.success(h.green("\u2713 iOS credentials uploaded successfully"))}catch(a){throw s.stop("Upload failed"),a}}async function
|
|
451
|
-
`),N=
|
|
447
|
+
Certificate sync failed. This can be caused by an incorrect encryption passphrase, an expired Apple session, or the ${$} certificate limit.`)),j.length===0)try{j=await Pr(b,q,e)}catch{}let Z=await be({message:"What would you like to do?",options:[...j.length>0?[{value:"reuse_saved",label:"Reuse a saved Mach certificate",hint:`${j.length} compatible certificate${j.length===1?"":"s"} found \u2014 no certificate is revoked`}]:[],{value:"retry_password",label:"Retry with a different MATCH_PASSWORD",hint:"Manually enter the decryption passphrase"},{value:"check_portal",label:"Check Apple Portal",hint:"Inspect certificate limits or explicitly revoke an old certificate"},{value:"manual",label:"Fallback to manual upload",hint:"Provide .p12 and .mobileprovision files"},{value:"cancel",label:"Cancel",hint:"Go back"}]});if(U(Z)||Z==="cancel")throw x;if(Z==="reuse_saved"){if(await Hn({savedCertificates:j,targetProjectId:e,targetBundleId:t,targetDistributionType:i,matchType:q,fastlane:T,matchEnv:se,keychainPath:W,keychainPassword:M,teamMeta:E}))return;throw x}else if(Z==="retry_password"){m.info(h.dim(`
|
|
448
|
+
You are overriding the dashboard passphrase for this session.`));let X=await bt({message:"Enter the correct MATCH_PASSWORD for this project:"});if(X&&!U(X)){C=X,m.info(h.blue("Retrying with provided passphrase..."));let D={...se,MATCH_PASSWORD:C};if(fe(`${T.shellCommand} match ${r}`,{shell:!0,stdio:"inherit",cwd:process.cwd(),env:D}).status===0)await G.post(`/projects/${e}/secrets`,{key:"MATCH_ENCRYPTION_PASSPHRASE",value:C,description:"Encryption passphrase for iOS certificates (fastlane match)",visibility:"secret"}),m.success(h.green("\u2713 Dashboard passphrase updated."));else throw new Error("Sync failed again with provided passphrase.")}else throw x}else if(Z==="check_portal")try{let X=await on(se,r,T.shellCommand);if(X.length>0){if(m.info(h.dim(`Found ${X.length} existing ${r} certificates on the portal.`)),await bc(r,se,e,T.shellCommand,X)&&(m.info(h.blue("Retrying certificate sync...")),fe(`${T.shellCommand} match ${r}`,{shell:!0,stdio:"inherit",cwd:process.cwd(),env:se}).status!==0))throw new Error("Retry failed")}else throw m.error(h.red("No existing certificates found on portal to resolve.")),x}catch(X){throw m.warn(h.dim(`Portal check warning: ${X.message}`)),x}else throw x}m.success(h.green("\u2713 Certificates fetched and synced"));let Pe=g,pe=J.join(Pe,`${I.fastlanePrefix}_export.p12`),V=tn(Pe,/\.mobileprovision$/);try{let $=`${process.env.HOME||"/Users/"+(process.env.USER||I.nameLower)}/Library/Keychains/${F}`;B.existsSync(Pe)||B.mkdirSync(Pe,{recursive:!0}),m.info(h.dim("Exporting certificate from keychain for dashboard upload..."));let Z=Me(`security find-identity -v -p codesigning "${$}"`,{encoding:"utf-8"});m.info(h.dim(`Identities in keychain:
|
|
449
|
+
${Z.trim()}`));let X=fe("security",["export","-k",$,"-t","identities","-f","pkcs12","-o",pe,"-P",Ce],{encoding:"utf-8"});if(X.error||X.status!==0)throw new Error(St(X.stdout,X.stderr)||"security could not export the signing certificate.");try{let D=fe("openssl",["pkcs12","-in",pe,"-nokeys","-passin",`pass:${Ce}`,"-legacy"],{encoding:"utf-8"});if((D.error||D.status!==0)&&(D=fe("openssl",["pkcs12","-in",pe,"-nokeys","-passin",`pass:${Ce}`],{encoding:"utf-8"})),D.error||D.status!==0)throw new Error(St(D.stdout,D.stderr)||"openssl could not read the exported P12.");let Y=D.stdout||"";if(!Y.includes(b))throw new Error(`Exported P12 does not contain identity for team ${b}. Found: ${Y.substring(0,200)}`);m.success(h.green(`\u2713 P12 verified \u2014 contains correct team identity (${b})`))}catch(D){throw new Error(`P12 verification failed: ${D.message}`)}}catch{m.warn(h.dim("Could not export certificate from keychain."))}o.teamId&&!b&&await Rr(e,o.teamId);let O=B.existsSync(pe)?pe:tn(Pe,/\.p12$/);if(O&&V){let x,$;try{let Z=await on(se,r,T.shellCommand);Z.length>0&&(x=Z[0].expires,$=Z[0].id)}catch{m.warn(h.dim("Could not fetch expiration date or ID for dashboard record."))}await et(e,O,"ios_cert",t,i,void 0,x,o.teamId||b,$,Ce,void 0,void 0,E.teamId,E.teamName,E.developerTeamId,E.appStoreConnectTeamId,E.providerId,E.providerName),await et(e,V,"ios_profile",t,i,void 0,x,o.teamId||b,void 0,void 0,void 0,void 0,E.teamId,E.teamName,E.developerTeamId,E.appStoreConnectTeamId,E.providerId,E.providerName),m.success(h.green("\u2713 Both iOS certificate and provisioning profile uploaded successfully"))}else m.warn(h.yellow("Certificates generated but not found in expected location.")),m.info(h.dim("Falling back to manual upload...")),await Nr(e,t,i,R)}catch(N){d("Certificate fetch failed"),m.error(h.red(`Error: ${N.message}`)),m.info(h.dim("Falling back to manual upload...")),await Nr(e,t,i,R)}}catch(C){d("iOS setup failed"),m.error(h.red(`Error: ${C.message}`))}finally{if(f)try{B.rmSync(J.dirname(f),{recursive:!0,force:!0})}catch{}if(g)try{B.rmSync(g,{recursive:!0,force:!0})}catch{}}}async function Rr(e,t){try{await G.post(`/projects/${e}/secrets`,{key:"APPLE_TEAM_ID",value:t,description:"Apple Developer Team ID (used for iOS signing)"}),m.success(h.green(`\u2713 Saved Team ID ${t} to Dashboard`))}catch(n){m.warn(h.yellow(`Could not save Team ID to Dashboard: ${n.message}`))}}async function Nr(e,t,n,i={}){m.info(h.yellow(`
|
|
450
|
+
Manual Upload Mode`)),m.info("Please provide your certificate and provisioning profile:");let r=await xe({message:"Path to .p12 certificate file:",validate:a=>B.existsSync(a)?void 0:"File not found"});U(r)&&(z("Operation cancelled"),process.exit(0));let o=await xe({message:"Path to .mobileprovision file:",validate:a=>B.existsSync(a)?void 0:"File not found"});U(o)&&(z("Operation cancelled"),process.exit(0));let s=tt();s.start(`Uploading to ${I.name} Dashboard...`);try{await et(e,r,"ios_cert",t,n,void 0,void 0,i.teamId,void 0,void 0,void 0,void 0,i.teamId,i.teamName,i.developerTeamId||i.teamId,i.appStoreConnectTeamId,i.providerId,i.providerName),await et(e,o,"ios_profile",t,n,void 0,void 0,i.teamId,void 0,void 0,void 0,void 0,i.teamId,i.teamName,i.developerTeamId||i.teamId,i.appStoreConnectTeamId,i.providerId,i.providerName),s.stop("Upload complete"),m.success(h.green("\u2713 iOS credentials uploaded successfully"))}catch(a){throw s.stop("Upload failed"),a}}async function yc(e,t,n,i,r){let o=tt();m.step(h.blue("Android Credential Setup"));let s=i.bundleId;if(!s){let d=pt(r,t),f=[];try{let u=(await G.get(`/credentials/${e}`)).data.credentials||[];f=[...new Set(u.filter(R=>R.platform==="android"&&R.bundleId&&R.bundleId!=="*").map(R=>R.bundleId))]}catch{}if(d&&!f.includes(d)&&f.unshift(d),f.length>0){let g=[...f.map(R=>({value:R,label:R,hint:R===d?"from config":void 0})),{value:"__new__",label:"+ Enter a new Package Name"}],u=await be({message:"Which Package Name are you setting up credentials for?",options:g});if(U(u)&&(z("Operation cancelled"),process.exit(0)),u==="__new__"){let R=await xe({message:"Android Package Name (e.g. com.example.app):",placeholder:"com.example.app",validate:C=>C.includes(".")?void 0:"Please enter a valid package name"});U(R)&&(z("Operation cancelled"),process.exit(0)),s=R}else s=u}else{let g=await xe({message:"Android Package Name (e.g. com.example.app):",placeholder:"com.example.app",validate:u=>u.includes(".")?void 0:"Please enter a valid package name"});U(g)&&(z("Operation cancelled"),process.exit(0)),s=g}}try{let g=((await G.get(`/credentials/${e}`)).data.credentials||[]).find(u=>u.platform==="android"&&u.distributionType===n&&u.bundleId===s);if(g){m.warn(h.yellow(`\u26A0\uFE0F Existing Android credentials found for ${n}`));let u=await xe({message:"What would you like to do? (use/new/cancel)",validate:R=>{let C=R.toLowerCase();if(!(C==="use"||C==="new"||C==="cancel"))return"Please type: use, new, or cancel"}});if(U(u)||u.toLowerCase()==="cancel")return;if(u.toLowerCase()==="use"){m.success(h.green("\u2713 Using existing credentials."));return}await G.delete(`/credentials/${g.credentialId}?projectId=${e}`)}}catch{}let a="./android/app/my-release-key.jks";if(B.existsSync(a)){let d=await Jn({message:"Upload existing keystore?"});if(d&&!U(d)){let f=await xe({message:"Key alias:",initialValue:"my-key-alias"});if(U(f))return;let g=await bt({message:"Keystore password:"});if(U(g))return;let u=await bt({message:"Key password (leave blank if same as keystore password):"});if(U(u))return;let R=u.trim()||g;await et(e,a,"android_keystore",s,n,f,void 0,void 0,void 0,void 0,g,R),m.success(h.green("\u2713 Keystore uploaded"));return}}m.info(h.blue("Generating new Android keystore..."));let c=i.keyAlias||`${I.nameLower}-${Ac()}`,l=Wr(),p=`./${I.nameLower}-${t}.jks`;B.existsSync(p)&&B.unlinkSync(p),o.start("Generating keystore...");try{let d=l.replace(/'/g,"'\\''");Me(`keytool -genkeypair -v -keystore "${p}" -alias "${c}" -keyalg RSA -keysize 2048 -validity 10000 -storepass '${d}' -keypass '${d}' -dname "CN=${I.name} Build, OU=Mobile, O=Company, L=City, S=State, C=US"`,{stdio:"inherit"}),o.stop("Keystore generated"),await et(e,p,"android_keystore",s,n,c,void 0,void 0,void 0,void 0,l,l),m.success(h.green("\u2713 Android credentials uploaded successfully")),m.info(h.cyan(`Key Alias: ${c}`))}catch(d){throw o.stop("Generation failed"),new Error(`Keystore generation failed: ${d.message}`)}}var Mr=e=>new Promise(t=>setTimeout(t,e));function jr(e){return/ECONNRESET|ETIMEDOUT|EAI_AGAIN|ENOTFOUND|ECONNABORTED|socket hang up|network|timeout|temporar/i.test(e)||/API_ERROR:\s*(408|409|425|429|5\d\d)/i.test(e)}async function et(e,t,n,i,r,o,s,a,c,l,p,d,f,g,u,R,C,v){let _=J.basename(t);m.info(h.dim(`Uploading ${_} (Isolated process)...`));let b=new URL(import.meta.url),S=J.dirname(b.pathname),L=[J.join(S,"commands","isolated-upload.js"),e,t,n,i,r,o||"undefined",s||"undefined",a||"undefined",c||"undefined",l||"undefined",p||"undefined",d||"undefined",f||"undefined",g||"undefined",u||"undefined",R||"undefined",C||"undefined",v||"undefined"],T="",k=5;for(let F=1;F<=k;F++){let M=fe("node",L,{stdio:"pipe",encoding:"utf-8",env:{...process.env,AT_CLI_ISOLATED:"1"}});if(M.status===0&&M.stdout.includes("SUCCESS")){m.info(h.dim(`\u2713 ${_} uploaded and registered.`));return}if(M.status===0){m.warn(h.yellow(`Isolated upload finished but success not confirmed: ${M.stdout}`));return}if(T=(M.stderr||M.stdout||M.error?.message||"Unknown isolated upload failure").trim(),!jr(T)||F>=k)throw m.error(h.red(`Isolated Upload Failed: ${T}`)),new Error(T);let W=Math.min(3e4,1500*Math.pow(2,F-1));m.warn(h.yellow(`Upload failed with a transient error. Retrying ${_} in ${Math.round(W/1e3)}s... (${F}/${k})`)),await Mr(W)}throw new Error(T||"Unknown isolated upload failure")}async function Ic(e){let t=tt(),n=e.platform,i=`./${I.configFileName}`;if(!B.existsSync(i)){m.error(`No ${I.configFileName} found. Run \`${I.nameLower} init\` or \`${I.nameLower} link\` first.`);return}let r=JSON.parse(B.readFileSync(i,"utf-8")),{projectId:o}=r;if(!o){m.error(`${I.configFileName} is missing projectId.`);return}try{t.start("Fetching project secrets...");let a=(await G.get(`/projects/${o}/secrets/export?env=all`)).data.secrets||{};t.stop("Secrets fetched and merged."),t.start("Fetching credentials...");let l=(await G.get(`/credentials/${o}`)).data.credentials||[];t.stop(`Found ${l.length} metadata records.`);let p=l.filter(u=>u.platform===n);if(p.length===0){m.info(`No ${n} credentials found on Dashboard.`);return}let d="./credentials.json",f={};if(B.existsSync(d))try{f=JSON.parse(B.readFileSync(d,"utf-8"))}catch{m.warn("Could not parse existing credentials.json, creating a new one.")}f[n]||(f[n]={});let g=J.join(process.cwd(),"credentials",n);B.existsSync(g)||B.mkdirSync(g,{recursive:!0});for(let u of p){t.start(`Downloading ${u.type} (${u.distributionType})...`);try{let R=await G.get(`/credentials/${u.credentialId}/download`,{params:{projectId:o,format:"raw"}});if(R.data.status==="success"&&R.data.downloadUrl){let C=J.join(process.cwd(),"credentials",n,u.distributionType);B.existsSync(C)||B.mkdirSync(C,{recursive:!0});let v=u.s3Key?.split(".").pop()||(u.type.includes("keystore")?"jks":u.type.includes("cert")?"p12":"mobileprovision"),_=`${u.type}.${v}`,b=J.join(C,_),S=await xr.get(R.data.downloadUrl,{responseType:"arraybuffer"});B.writeFileSync(b,Buffer.from(S.data));let E=J.join("credentials",n,u.distributionType,_),L="",T="",k={alias:"",keystorePassword:"",keyPassword:""};if(n==="ios"&&u.type==="ios_cert"||n==="android"&&u.type==="android_keystore"){let F=await $r(o,n,u);if(n==="ios"&&u.type==="ios_cert"&&v.toLowerCase()==="p12"){if(L=_r(F,a),L){let M=wr(b,`${J.basename(b,J.extname(b))}-password.txt`,L);T=J.join("credentials",n,u.distributionType,J.basename(M))}}else if(n==="android"&&u.type==="android_keystore"&&(k=Da(F,a),k.keystorePassword||k.keyPassword)){let M=[k.alias?`keyAlias=${k.alias}`:void 0,k.keystorePassword?`keystorePassword=${k.keystorePassword}`:void 0,k.keyPassword?`keyPassword=${k.keyPassword}`:void 0].filter(Boolean).join(`
|
|
451
|
+
`),N=wr(b,`${J.basename(b,J.extname(b))}-passwords.txt`,M);T=J.join("credentials",n,u.distributionType,J.basename(N))}}if(n==="android")u.type==="android_keystore"&&(f.android.keystore={keystorePath:E,keystorePassword:k.keystorePassword,keyAlias:k.alias,keyPassword:k.keyPassword},T&&(f.android.keystore.keystoreArchivePath=T));else if(n==="ios"){let F=u.distributionType==="store"?"production":u.distributionType==="adhoc"?"staging":"development";f.ios[F]||(f.ios[F]={}),u.type==="ios_cert"?(f.ios[F].certificatePath=E,f.ios[F].certificatePassword=L,T&&(f.ios[F].certificateArchivePath=T)):u.type==="ios_profile"&&(f.ios[F].provisioningProfilePath=E)}t.stop(`\u2713 ${u.type} (${u.distributionType}) saved${T?" with password archive":""}.`)}}catch(R){let C=R.response?.data?.message||R.message;t.stop(h.dim(`- Skipped ${u.type} (${u.distributionType}): ${C}`))}}B.writeFileSync(d,JSON.stringify(f,null,2)),m.success(h.green("\u2713 Local credentials.json updated.")),Aa("Credentials have been synced to your local machine. Ensure credentials.json and credentials/ is added to your .gitignore.","Sync Complete")}catch(s){t.stop(h.red("Sync failed.")),m.error(`Error: ${s.message}`)}}function Wr(){let e="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_+=",t="";for(let n=0;n<24;n++)t+=e.charAt(Math.floor(Math.random()*e.length));return t}function Ac(e=8){let t="abcdefghijklmnopqrstuvwxyz0123456789",n="";for(let i=0;i<e;i++)n+=t.charAt(Math.floor(Math.random()*t.length));return n}async function bc(e,t,n,i,r){let o=r||await on(t,e,i);if(!o||o.length===0)return!1;let s=await be({message:"Select a certificate to revoke:",options:[...o.map(a=>({value:`revoke:${a.id}`,label:`Revoke: ${a.name} (${a.expires})`})),{value:"nuke",label:"Revoke All"},{value:"cancel",label:"Cancel"}]});return U(s)||s==="cancel"?!1:s==="nuke"?(Me(`${i} match nuke ${e}`,{stdio:"inherit",cwd:process.cwd(),env:t}),!0):typeof s=="string"&&s.startsWith("revoke:")?(await Cc(t,s.split(":")[1],i),!0):!1}async function on(e,t,n){let i=t==="development"?"development":"distribution",r=`
|
|
452
452
|
lane :${I.fastlanePrefix}_list_certs do
|
|
453
453
|
require 'spaceship'
|
|
454
454
|
require 'json'
|
|
@@ -483,7 +483,7 @@ lane :${I.fastlanePrefix}_list_certs do
|
|
|
483
483
|
$stderr.puts "ERROR: #{e.message}"
|
|
484
484
|
exit 1
|
|
485
485
|
end
|
|
486
|
-
end`,o=J.join(st.tmpdir(),`/tmp/${I.nameLower}-list-certs-${Date.now()}`),s=J.join(o,"fastlane"),a=J.join(s,"Fastfile");try{B.existsSync(s)||B.mkdirSync(s,{recursive:!0}),B.writeFileSync(a,r);let l=Me(`${n} ${I.fastlanePrefix}_list_certs`,{env:{...e,CI:"1",FASTLANE_FASTFILE:a},cwd:o,stdio:["inherit","pipe","inherit"]}).toString().match(new RegExp(`${I.jsonStartMarker}(.*)${I.jsonEndMarker}`));return l?JSON.parse(l[1]):[]}finally{B.existsSync(o)&&B.rmSync(o,{recursive:!0,force:!0})}}async function
|
|
486
|
+
end`,o=J.join(st.tmpdir(),`/tmp/${I.nameLower}-list-certs-${Date.now()}`),s=J.join(o,"fastlane"),a=J.join(s,"Fastfile");try{B.existsSync(s)||B.mkdirSync(s,{recursive:!0}),B.writeFileSync(a,r);let l=Me(`${n} ${I.fastlanePrefix}_list_certs`,{env:{...e,CI:"1",FASTLANE_FASTFILE:a},cwd:o,stdio:["inherit","pipe","inherit"]}).toString().match(new RegExp(`${I.jsonStartMarker}(.*)${I.jsonEndMarker}`));return l?JSON.parse(l[1]):[]}finally{B.existsSync(o)&&B.rmSync(o,{recursive:!0,force:!0})}}async function Cc(e,t,n){let i=`
|
|
487
487
|
lane :${I.fastlanePrefix}_revoke_cert do
|
|
488
488
|
require 'spaceship'
|
|
489
489
|
begin
|
|
@@ -495,4 +495,4 @@ lane :${I.fastlanePrefix}_revoke_cert do
|
|
|
495
495
|
$stderr.puts "ERROR: #{e.message}"
|
|
496
496
|
exit 1
|
|
497
497
|
end
|
|
498
|
-
end`,r=J.join(st.tmpdir(),`/tmp/${I.nameLower}-revoke-cert-${Date.now()}`),o=J.join(r,"fastlane"),s=J.join(o,"Fastfile");try{B.existsSync(o)||B.mkdirSync(o,{recursive:!0}),B.writeFileSync(s,i),Me(`${n} ${I.fastlanePrefix}_revoke_cert`,{env:{...e,CI:"1",FASTLANE_FASTFILE:s},cwd:r,stdio:["inherit","pipe","inherit"]})}finally{B.existsSync(r)&&B.rmSync(r,{recursive:!0,force:!0})}}export{
|
|
498
|
+
end`,r=J.join(st.tmpdir(),`/tmp/${I.nameLower}-revoke-cert-${Date.now()}`),o=J.join(r,"fastlane"),s=J.join(o,"Fastfile");try{B.existsSync(o)||B.mkdirSync(o,{recursive:!0}),B.writeFileSync(s,i),Me(`${n} ${I.fastlanePrefix}_revoke_cert`,{env:{...e,CI:"1",FASTLANE_FASTFILE:s},cwd:r,stdio:["inherit","pipe","inherit"]})}finally{B.existsSync(r)&&B.rmSync(r,{recursive:!0,force:!0})}}export{dl as a,pl as b,ul as c,fl as d,gi as e,ml as f,Ot as g,Sn as h,hi as i,yi as j,xl as k,kl as l,Ol as m,$l as n,Hl as o,Jl as p,cs as q,ht as r,Kl as s,ed as t,Oi as u,$i as v,td as w,sd as x,ad as y,_d as z,At as A,Pc as B,Jr as C,ln as D,Pt as E,ni as F,dt as G,pt as H,Ke as I,Rc as J,ci as K,Vn as L,Jd as M,Kd as N,qt as O,Yd as P,zd as Q,rc as R,oc as S,Ic as T};
|