@radhya/mach 2.4.3 → 2.4.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/dist/index.js CHANGED
@@ -1,13 +1,13 @@
1
1
  #!/usr/bin/env node
2
- import{A as Wt,B as _o,C as wo,D as $o,E as Yt,F as qt,G as vo,H as Ro,I as Po,J as Oo,K as Do,L as ji,M as $t,N as Co,O as nt,P as To,Q as No,R as Hi,S as ko,T as xo,V as Jt,a as Ln,b as ve,c as go,d as gt,e as re,f as _e,g as Mn,h as Un,i as wt,j as ht,k as ho,l as yo,m as Mi,n as Ao,o as So,p as Fn,q as Bn,r as jn,s as Ui,t as Fi,u as Hn,v as Gn,w as bo,x as Io,y as Eo,z as Bi}from"./chunk-YADIUJBS.js";import{a as f,b as fo,c as Ae,d as mo,e as _t,f as tt,g as He,h as w}from"./chunk-LO6DP2SE.js";import{Command as mg,Option as Ne}from"commander";import{configDotenv as gg}from"dotenv";import{intro as Z,outro as yd}from"@clack/prompts";import W from"chalk";var We=class extends Error{constructor(t){super(t),this.name="ProjectAccessError"}};function Gi(e){return typeof e!="string"?void 0:e.trim()||void 0}function Lo(e,t){return Gi(e?.projectId)||Gi(t?.projectId)}function Ed(e,t){if(Array.isArray(e))return e.find(n=>Gi(n?.projectId)===t)}function _d(e,t){let n=Ed(e,t);if(n)return n;throw new We(`The current ${f.name} account does not have access to the linked project (${t}).
3
- Run \`${f.nameLower} logout\`, then \`${f.nameLower} login\` with a project member, or run \`${f.nameLower} link\` to select an accessible project.`)}async function Mo(e){try{let n=(await w.get("/projects")).data;if(n?.status!=="success"||!Array.isArray(n.projects))throw new We(`Could not verify access to the linked project before starting this command. Try \`${f.nameLower} login\` again.`);return _d(n.projects,e)}catch(t){throw t instanceof We?t:t?.response?.status===401?new We(`Could not verify access to the linked project because this ${f.name} session is no longer valid. Run \`${f.nameLower} login\` and try again.`):new We("Could not verify access to the linked project before starting this command. Check your connection and try again.")}}import{text as Uo,confirm as wd,spinner as $d,isCancel as Vi,cancel as Xt,note as vd,outro as Rd}from"@clack/prompts";import Zt from"chalk";async function Fo(){try{let e=await Uo({message:"Enter Bucket Name:",placeholder:"e.g. my-app-dev",validate(r){if(r.length===0)return"Bucket name is required"}});Vi(e)&&(Xt("Operation cancelled."),process.exit(0));let t=await Uo({message:"Enter Region:",initialValue:"ap-south-1"});Vi(t)&&(Xt("Operation cancelled."),process.exit(0));let n=await wd({message:"Do you want to create a CloudFront Distribution for this bucket?",initialValue:!0});Vi(n)&&(Xt("Operation cancelled."),process.exit(0));let i=$d();i.start("Setting up hosting infrastructure...");try{let r=await w.post("/hosting/setup",{bucketName:e,region:t,createCloudFront:n});if(r.data.status!=="success")throw new Error(r.data.message||"Hosting setup failed");i.stop("Hosting setup complete!");let o=r.data,s=`Bucket Name: ${Zt.cyan(o.bucketName)}
2
+ import{A as Wt,B as vo,C as Ro,D as Po,E as Yt,F as qt,G as Oo,H as Do,I as Co,J as To,K as No,L as ji,M as nt,N as ko,O as it,P as xo,Q as Lo,R as Hi,S as Mo,T as Uo,V as Jt,a as Ln,b as ve,c as Ao,d as ht,e as re,f as _e,g as Mn,h as Un,i as $t,j as yt,k as So,l as bo,m as Mi,n as Io,o as Eo,p as Fn,q as Bn,r as jn,s as Ui,t as Fi,u as Hn,v as Gn,w as _o,x as wo,y as $o,z as Bi}from"./chunk-RQIGJOFA.js";import{a as f,b as ho,c as ye,d as yo,e as wt,f as tt,g as He,h as w}from"./chunk-LO6DP2SE.js";import{Command as gg,Option as Ne}from"commander";import{configDotenv as hg}from"dotenv";import{intro as Z,outro as Sd}from"@clack/prompts";import z from"chalk";var We=class extends Error{constructor(t){super(t),this.name="ProjectAccessError"}};function Gi(e){return typeof e!="string"?void 0:e.trim()||void 0}function Fo(e,t){return Gi(e?.projectId)||Gi(t?.projectId)}function wd(e,t){if(Array.isArray(e))return e.find(n=>Gi(n?.projectId)===t)}function $d(e,t){let n=wd(e,t);if(n)return n;throw new We(`The current ${f.name} account does not have access to the linked project (${t}).
3
+ Run \`${f.nameLower} logout\`, then \`${f.nameLower} login\` with a project member, or run \`${f.nameLower} link\` to select an accessible project.`)}async function Bo(e){try{let n=(await w.get("/projects")).data;if(n?.status!=="success"||!Array.isArray(n.projects))throw new We(`Could not verify access to the linked project before starting this command. Try \`${f.nameLower} login\` again.`);return $d(n.projects,e)}catch(t){throw t instanceof We?t:t?.response?.status===401?new We(`Could not verify access to the linked project because this ${f.name} session is no longer valid. Run \`${f.nameLower} login\` and try again.`):new We("Could not verify access to the linked project before starting this command. Check your connection and try again.")}}import{text as jo,confirm as vd,spinner as Rd,isCancel as Vi,cancel as Xt,note as Pd,outro as Od}from"@clack/prompts";import Zt from"chalk";async function Ho(){try{let e=await jo({message:"Enter Bucket Name:",placeholder:"e.g. my-app-dev",validate(r){if(r.length===0)return"Bucket name is required"}});Vi(e)&&(Xt("Operation cancelled."),process.exit(0));let t=await jo({message:"Enter Region:",initialValue:"ap-south-1"});Vi(t)&&(Xt("Operation cancelled."),process.exit(0));let n=await vd({message:"Do you want to create a CloudFront Distribution for this bucket?",initialValue:!0});Vi(n)&&(Xt("Operation cancelled."),process.exit(0));let i=Rd();i.start("Setting up hosting infrastructure...");try{let r=await w.post("/hosting/setup",{bucketName:e,region:t,createCloudFront:n});if(r.data.status!=="success")throw new Error(r.data.message||"Hosting setup failed");i.stop("Hosting setup complete!");let o=r.data,s=`Bucket Name: ${Zt.cyan(o.bucketName)}
4
4
  `;s+=`Region: ${Zt.cyan(o.region)}
5
5
  `,s+=`S3 Website URL: ${Zt.blue(o.s3WebsiteUrl)}`,o.cloudFrontId&&(s+=`
6
6
 
7
7
  CloudFront ID: ${Zt.cyan(o.cloudFrontId)}`,s+=`
8
- CloudFront URL: ${Zt.blue(o.cloudFrontUrl)}`),vd(s,"Setup Complete!"),Rd("You are all set!")}catch(r){i.stop("Setup failed"),Xt(`Error: ${r.response?.data?.message||r.message}`)}}catch(e){Xt(`An unexpected error occurred: ${e.message}`)}}import{readdir as Pd,writeFile as Od,access as Dd,mkdir as Cd}from"fs/promises";import{join as Bo}from"path";import{spinner as Td,text as jo,isCancel as Ho,cancel as zi,note as Nd,outro as kd}from"@clack/prompts";import xd from"chalk";async function Ld(){let e=["./app","./src/app"];for(let t of e)try{return await Dd(t),t}catch{}return null}async function Go(e){try{let n=await Ld()||"./app",i=await jo({message:"Enter path to your app directory:",placeholder:n,initialValue:n,validate(c){if(c.length===0)return"Path is required"}});Ho(i)&&(zi("Operation cancelled."),process.exit(0));let r=await jo({message:"Enter your website base URL:",placeholder:"https://example.com",validate(c){if(c.length===0)return"Base URL is required";if(!c.startsWith("http"))return"URL must start with http:// or https://"}});Ho(r)&&(zi("Operation cancelled."),process.exit(0));let o=Td();o.start("Scanning app directory for routes...");let s=await Vo(i);o.stop(`Found ${s.length} routes`);let a=Md(s,r),l=e.output||"./public/sitemap.xml";o.start(`Writing sitemap to ${l}...`);let d=l.substring(0,l.lastIndexOf("/"));if(d)try{await Cd(d,{recursive:!0})}catch{}await Od(l,a,"utf-8"),o.stop("Sitemap generated successfully!"),Nd(`Routes included:
8
+ CloudFront URL: ${Zt.blue(o.cloudFrontUrl)}`),Pd(s,"Setup Complete!"),Od("You are all set!")}catch(r){i.stop("Setup failed"),Xt(`Error: ${r.response?.data?.message||r.message}`)}}catch(e){Xt(`An unexpected error occurred: ${e.message}`)}}import{readdir as Dd,writeFile as Cd,access as Td,mkdir as Nd}from"fs/promises";import{join as Go}from"path";import{spinner as kd,text as Vo,isCancel as zo,cancel as zi,note as xd,outro as Ld}from"@clack/prompts";import Md from"chalk";async function Ud(){let e=["./app","./src/app"];for(let t of e)try{return await Td(t),t}catch{}return null}async function Ko(e){try{let n=await Ud()||"./app",i=await Vo({message:"Enter path to your app directory:",placeholder:n,initialValue:n,validate(c){if(c.length===0)return"Path is required"}});zo(i)&&(zi("Operation cancelled."),process.exit(0));let r=await Vo({message:"Enter your website base URL:",placeholder:"https://example.com",validate(c){if(c.length===0)return"Base URL is required";if(!c.startsWith("http"))return"URL must start with http:// or https://"}});zo(r)&&(zi("Operation cancelled."),process.exit(0));let o=kd();o.start("Scanning app directory for routes...");let s=await Wo(i);o.stop(`Found ${s.length} routes`);let a=Fd(s,r),l=e.output||"./public/sitemap.xml";o.start(`Writing sitemap to ${l}...`);let d=l.substring(0,l.lastIndexOf("/"));if(d)try{await Nd(d,{recursive:!0})}catch{}await Cd(l,a,"utf-8"),o.stop("Sitemap generated successfully!"),xd(`Routes included:
9
9
  ${s.map(c=>` \u2022 ${c.path}`).join(`
10
- `)}`,"Sitemap Summary"),kd(`Sitemap saved to ${xd.cyan(l)}`)}catch(t){zi(`An error occurred: ${t.message}`)}}async function Vo(e,t=""){let n=[];try{let i=await Pd(e,{withFileTypes:!0});for(let r of i){let o=Bo(e,r.name);if(!(r.name.startsWith("_")||r.name.startsWith("."))){if(r.isDirectory()){let s=await Vo(o,Bo(t,r.name));n.push(...s)}else if(r.isFile()){if(r.name==="index.tsx"||r.name==="index.ts"||r.name==="index.jsx"||r.name==="index.js"){let s=t===""?"/":`/${t}`;n.push({path:s,file:o})}else if(r.name.match(/\.(tsx|ts|jsx|js)$/)&&!r.name.includes("_layout")&&!r.name.includes("+")){let s=r.name.replace(/\.(tsx|ts|jsx|js)$/,""),a=`/${t}/${s}`.replace(/\/+/g,"/");n.push({path:a,file:o})}}}}}catch(i){throw new Error(`Failed to scan directory ${e}: ${i.message}`)}return n}function Md(e,t){let n=new Date().toISOString().split("T")[0];return`<?xml version="1.0" encoding="UTF-8"?>
10
+ `)}`,"Sitemap Summary"),Ld(`Sitemap saved to ${Md.cyan(l)}`)}catch(t){zi(`An error occurred: ${t.message}`)}}async function Wo(e,t=""){let n=[];try{let i=await Dd(e,{withFileTypes:!0});for(let r of i){let o=Go(e,r.name);if(!(r.name.startsWith("_")||r.name.startsWith("."))){if(r.isDirectory()){let s=await Wo(o,Go(t,r.name));n.push(...s)}else if(r.isFile()){if(r.name==="index.tsx"||r.name==="index.ts"||r.name==="index.jsx"||r.name==="index.js"){let s=t===""?"/":`/${t}`;n.push({path:s,file:o})}else if(r.name.match(/\.(tsx|ts|jsx|js)$/)&&!r.name.includes("_layout")&&!r.name.includes("+")){let s=r.name.replace(/\.(tsx|ts|jsx|js)$/,""),a=`/${t}/${s}`.replace(/\/+/g,"/");n.push({path:a,file:o})}}}}}catch(i){throw new Error(`Failed to scan directory ${e}: ${i.message}`)}return n}function Fd(e,t){let n=new Date().toISOString().split("T")[0];return`<?xml version="1.0" encoding="UTF-8"?>
11
11
  <urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
12
12
  ${e.map(r=>{let o=r.path;return o=o.replace(/\/\([^)]+\)/g,""),o=o.replace(/\/\[.*?\]/g,"/:id"),o=o.replace(/\/+/g,"/"),o===""&&(o="/"),` <url>
13
13
  <loc>${t}${o}</loc>
@@ -16,7 +16,7 @@ ${e.map(r=>{let o=r.path;return o=o.replace(/\/\([^)]+\)/g,""),o=o.replace(/\/\[
16
16
  <priority>0.8</priority>
17
17
  </url>`}).join(`
18
18
  `)}
19
- </urlset>`}import{randomUUID as ku}from"crypto";import de from"path";import Xn from"axios";import ia from"os";import{spinner as br,select as Hs,confirm as Gs,isCancel as Zn,cancel as Vs,log as E}from"@clack/prompts";import _ from"chalk";import q from"fs";import{execSync as zs}from"child_process";import Ks from"adm-zip";import{spinner as Ud,log as Vn}from"@clack/prompts";import Ko from"chalk";import Wo from"fs";import Yo from"path";var zo=`#!/bin/bash
19
+ </urlset>`}import{randomUUID as Lu}from"crypto";import de from"path";import Xn from"axios";import oa from"os";import{spinner as Er,select as Vs,confirm as zs,isCancel as Zn,cancel as Ks,log as I}from"@clack/prompts";import E from"chalk";import W from"fs";import{execSync as Ws}from"child_process";import Ys from"adm-zip";import{spinner as Bd,log as Vn}from"@clack/prompts";import qo from"chalk";import Jo from"fs";import Xo from"path";var Yo=`#!/bin/bash
20
20
  # --- Mach Cloud Build Script (Android) ---
21
21
  # All S3 operations use presigned URLs via curl \u2014 zero AWS credentials on instance.
22
22
  BUILD_ID="{{BUILD_ID}}"
@@ -723,8 +723,8 @@ for pid in "\${cache_pids[@]}"; do wait "$pid" || true; done
723
723
  echo "Build orchestrator finished. Auto-terminating instance in 5 seconds..."
724
724
  sleep 5
725
725
  sudo shutdown -h now
726
- `;var zn=e=>e.replace(/\\/g,"\\\\").replace(/"/g,'\\"').replace(/\$/g,"\\$").replace(/`/g,"\\`"),Ki=e=>["1","true","yes","on"].includes(String(e||"").trim().toLowerCase()),Fd=e=>/(^|[-_])(maestro|e2e|test|emulator)([-_]|$)/i.test(e),Bd=(e,t,n)=>{let i=n.MACH_ANDROID_RELEASE_ABIS||n.MACH_ANDROID_ABIS||n.MACH_PROFILE_ANDROID_RELEASE_ABIS||n.MACH_PROFILE_ANDROID_ABIS||n.MACH_PROFILE_ANDROID_ARCHITECTURES||n.MACH_PROFILE_ANDROID_REACT_NATIVE_ARCHITECTURES;return i||(!!e.maestro||Fd(t)||Ki(n.MACH_PROFILE_ANDROID_EMULATOR)||Ki(n.MACH_ANDROID_INCLUDE_EMULATOR_ABIS)||Ki(n.MACH_PROFILE_ANDROID_INCLUDE_EMULATOR_ABIS)?"armeabi-v7a,arm64-v8a,x86_64":"armeabi-v7a,arm64-v8a")},qo=async(e,t,n={},i,r)=>{let o=Ud(),s=Fn(e.framework),a=e.buildProfile||"production",l=a==="production",d=e.apk===!0,c=e.developmentClient?"assembleDebug":l?"bundleRelease":"assembleRelease",u=e.buildCommand||(d?"assembleRelease":c),p=e.nodeVersion?[`echo "[NODE] Switching to Node ${e.nodeVersion}..."`,`CURRENT_MAJOR=$(node -e "process.stdout.write(process.version.split('.')[0].replace('v',''))" 2>/dev/null || echo "0")`,`if [ "$CURRENT_MAJOR" != "${e.nodeVersion}" ]; then`,` curl -fsSL https://deb.nodesource.com/setup_${e.nodeVersion}.x | bash - 2>&1`," apt-get install -y nodejs 2>&1",' echo "[NODE] Installed Node $(node -v)"',"else",' echo "[NODE] Already on Node $(node -v) \u2014 no switch needed"',"fi"].join(`
727
- `):"",m;if(r){let A=Yo.isAbsolute(r)?r:Yo.resolve(process.cwd(),r);Wo.existsSync(A)?(m=Wo.readFileSync(A,"utf-8"),Vn.info(Ko.magenta(`\u2713 Loaded preBuild hook: ${r}`))):Vn.warn(`preBuild script not found at ${A} \u2014 skipping`)}let h=Bd(e,a,n),g={...Bn(n,a,e),MACH_ANDROID_RELEASE_ABIS:h},S=jn(g),b=zo.replace(/\{\{BUILD_ID\}\}/g,t).replace(/\{\{BUILD_COMMAND\}\}/g,u).replace("{{NODE_VERSION_SETUP}}",p).replace("{{ENV_VARS}}",`
726
+ `;var zn=e=>e.replace(/\\/g,"\\\\").replace(/"/g,'\\"').replace(/\$/g,"\\$").replace(/`/g,"\\`"),Ki=e=>["1","true","yes","on"].includes(String(e||"").trim().toLowerCase()),jd=e=>/(^|[-_])(maestro|e2e|test|emulator)([-_]|$)/i.test(e),Hd=(e,t,n)=>{let i=n.MACH_ANDROID_RELEASE_ABIS||n.MACH_ANDROID_ABIS||n.MACH_PROFILE_ANDROID_RELEASE_ABIS||n.MACH_PROFILE_ANDROID_ABIS||n.MACH_PROFILE_ANDROID_ARCHITECTURES||n.MACH_PROFILE_ANDROID_REACT_NATIVE_ARCHITECTURES;return i||(!!e.maestro||jd(t)||Ki(n.MACH_PROFILE_ANDROID_EMULATOR)||Ki(n.MACH_ANDROID_INCLUDE_EMULATOR_ABIS)||Ki(n.MACH_PROFILE_ANDROID_INCLUDE_EMULATOR_ABIS)?"armeabi-v7a,arm64-v8a,x86_64":"armeabi-v7a,arm64-v8a")},Zo=async(e,t,n={},i,r)=>{let o=Bd(),s=Fn(e.framework),a=e.buildProfile||"production",l=a==="production",d=e.apk===!0,c=e.developmentClient?"assembleDebug":l?"bundleRelease":"assembleRelease",u=e.buildCommand||(d?"assembleRelease":c),p=e.nodeVersion?[`echo "[NODE] Switching to Node ${e.nodeVersion}..."`,`CURRENT_MAJOR=$(node -e "process.stdout.write(process.version.split('.')[0].replace('v',''))" 2>/dev/null || echo "0")`,`if [ "$CURRENT_MAJOR" != "${e.nodeVersion}" ]; then`,` curl -fsSL https://deb.nodesource.com/setup_${e.nodeVersion}.x | bash - 2>&1`," apt-get install -y nodejs 2>&1",' echo "[NODE] Installed Node $(node -v)"',"else",' echo "[NODE] Already on Node $(node -v) \u2014 no switch needed"',"fi"].join(`
727
+ `):"",m;if(r){let A=Xo.isAbsolute(r)?r:Xo.resolve(process.cwd(),r);Jo.existsSync(A)?(m=Jo.readFileSync(A,"utf-8"),Vn.info(qo.magenta(`\u2713 Loaded preBuild hook: ${r}`))):Vn.warn(`preBuild script not found at ${A} \u2014 skipping`)}let h=Hd(e,a,n),g={...Bn(n,a,e),MACH_ANDROID_RELEASE_ABIS:h},S=jn(g),b=Yo.replace(/\{\{BUILD_ID\}\}/g,t).replace(/\{\{BUILD_COMMAND\}\}/g,u).replace("{{NODE_VERSION_SETUP}}",p).replace("{{ENV_VARS}}",`
728
728
  export MACH_APP_NAME="${zn(g.MACH_APP_NAME)}"
729
729
  export MACH_BUILD_PROFILE="${zn(a)}"
730
730
  export MACH_ANDROID_RELEASE_ABIS="${zn(h)}"
@@ -732,7 +732,7 @@ export MACH_ENV_FINGERPRINT="${S}"
732
732
  ${s.remoteEnvSetupScript().trim()}
733
733
  {{ENV_VARS}}
734
734
  export MACH_APP_DIRECTORY="${zn(e.appDirectory||".")}"
735
- `).replace("{{FRAMEWORK_ANDROID_VERSION_CODE}}",s.androidRemoteVersionCodeScript().trim()).replace("{{FRAMEWORK_ANDROID_PREBUILD}}",s.androidRemotePrebuildScript().trim()).replace("{{FRAMEWORK_ANDROID_GRADLE_PROPERTIES}}",s.androidRemoteGradlePropertiesScript().trim()).replace("{{FRAMEWORK_ANDROID_RELEASE_GRADLE_PROPERTIES}}",s.androidRemoteReleaseGradlePropertiesScript().trim());if(e.dryRun){Vn.info("User Data Script (dry run):"),console.log(b);return}o.start("Requesting cloud build instance...");try{let A=await w.post("/builds/launch-android",{projectId:i,buildId:t,platform:e.platform,buildProfile:e.buildProfile,buildCommand:u,instanceType:e.instanceType,ami:e.ami,keepInstance:e.keepInstance,region:e.region,subnet:e.subnet,securityGroup:e.securityGroup,projectSecrets:n,dryRun:e.dryRun,userDataScript:b,preBuildScriptContent:m});if(A.data.status!=="success")throw new Error(A.data.message||"Failed to launch build instance");let D=A.data.instanceId;return o.stop("Build Started"),Vn.success(Ko.green(`Build initiated on cloud instance (${D}).`)),{instanceId:D}}catch(A){o.stop("Android Build Failed");let D=A.response?.data?.message||A.message;throw new Error(`Failed to launch Android build: ${D}`)}};import{spinner as jd,log as yt}from"@clack/prompts";import Ye from"chalk";import Hd from"fs";import{execSync as Qt}from"child_process";var Jo=`#!/bin/bash
735
+ `).replace("{{FRAMEWORK_ANDROID_VERSION_CODE}}",s.androidRemoteVersionCodeScript().trim()).replace("{{FRAMEWORK_ANDROID_PREBUILD}}",s.androidRemotePrebuildScript().trim()).replace("{{FRAMEWORK_ANDROID_GRADLE_PROPERTIES}}",s.androidRemoteGradlePropertiesScript().trim()).replace("{{FRAMEWORK_ANDROID_RELEASE_GRADLE_PROPERTIES}}",s.androidRemoteReleaseGradlePropertiesScript().trim());if(e.dryRun){Vn.info("User Data Script (dry run):"),console.log(b);return}o.start("Requesting cloud build instance...");try{let A=await w.post("/builds/launch-android",{projectId:i,buildId:t,platform:e.platform,buildProfile:e.buildProfile,buildCommand:u,instanceType:e.instanceType,ami:e.ami,keepInstance:e.keepInstance,region:e.region,subnet:e.subnet,securityGroup:e.securityGroup,projectSecrets:n,dryRun:e.dryRun,userDataScript:b,preBuildScriptContent:m});if(A.data.status!=="success")throw new Error(A.data.message||"Failed to launch build instance");let D=A.data.instanceId;return o.stop("Build Started"),Vn.success(qo.green(`Build initiated on cloud instance (${D}).`)),{instanceId:D}}catch(A){o.stop("Android Build Failed");let D=A.response?.data?.message||A.message;throw new Error(`Failed to launch Android build: ${D}`)}};import{spinner as Gd,log as At}from"@clack/prompts";import Ye from"chalk";import Vd from"fs";import{execSync as Qt}from"child_process";var Qo=`#!/bin/bash
736
736
  # --- Mach Cloud Build Script (iOS) ---
737
737
  # All S3 operations use presigned URLs via curl \u2014 zero AWS credentials on Mac.
738
738
 
@@ -1828,64 +1828,64 @@ touch done
1828
1828
  if [ ! -z "$PRESIGNED_DONE_MARKER" ]; then
1829
1829
  curl -X PUT -T done "$PRESIGNED_DONE_MARKER" --silent
1830
1830
  fi
1831
- `;var Xo=e=>e.replace(/\\/g,"\\\\").replace(/"/g,'\\"').replace(/\$/g,"\\$").replace(/`/g,"\\`"),Zo=async(e,t,n={},i)=>{let r=jd(),o=Fn(e.framework);e.sshHost||(e.sshHost="localhost",yt.message(Ye.yellow("No SSH host provided, defaulting to localhost."))),r.start(`Connecting to remote Mac at ${Ye.cyan(e.sshHost)}...`);let s=e.sshUser||process.env.USER||"ubuntu",a=e.sshKey,l=`${s}@${e.sshHost}`,d=`ssh ${a?`-i ${a}`:""} -o StrictHostKeyChecking=no ${l}`,c=`scp ${a?`-i ${a}`:""} -o StrictHostKeyChecking=no`;try{let u=s==="ubuntu"?"/home/ubuntu":`/Users/${s}`,p=(n.PROJECT_ID||"default_project").replace(/[^a-zA-Z0-9-_]/g,"_"),m=`${u}/${f.remoteWorkspacesDir}/${p}`;r.message(`Preparing stable workspace: ${m}...`),Qt(`${d} "mkdir -p ${m}"`,{stdio:"inherit"}),r.message("Transferring source code...");let h=`/tmp/${f.nameLower}-source-${t}.zip`;Qt(`${c} ${h} ${l}:${m}/source.zip`,{stdio:"inherit"});let g=e.iosApiKeyPath?`${m}/api_key.p8`:"",S="";e.iosApiKeyPath&&(r.message("Uploading App Store Connect API key..."),Qt(`${c} ${e.iosApiKeyPath} ${l}:${g}`),e.iosApiKeyId&&e.iosApiKeyIssuer&&(S=`-authenticationKeyID ${e.iosApiKeyId} -authenticationKeyIssuerID ${e.iosApiKeyIssuer} -authenticationKeyPath ${g}`));let b={};if(i)try{let y=!!(n.IOS_DIST_P12&&(n.IOS_PROVISIONING_PROFILE||n.IOS_PROVISIONING_PROFILES)),$=await w.post(`/builds/${i}/${t}/build-urls`,{platform:"ios",includeCredentials:!y});$.data.status==="success"&&(b=$.data.urls)}catch(y){yt.warn(Ye.yellow(`Could not fetch build URLs: ${y.message}`))}let A="";if(b.credentials&&b.credentials.length>0)for(let y of b.credentials)y.type==="p12"?A+=`curl -sf -o "$CERT_DIR/${y.name}" "${y.downloadUrl}" || true
1831
+ `;var es=e=>e.replace(/\\/g,"\\\\").replace(/"/g,'\\"').replace(/\$/g,"\\$").replace(/`/g,"\\`"),ts=async(e,t,n={},i)=>{let r=Gd(),o=Fn(e.framework);e.sshHost||(e.sshHost="localhost",At.message(Ye.yellow("No SSH host provided, defaulting to localhost."))),r.start(`Connecting to remote Mac at ${Ye.cyan(e.sshHost)}...`);let s=e.sshUser||process.env.USER||"ubuntu",a=e.sshKey,l=`${s}@${e.sshHost}`,d=`ssh ${a?`-i ${a}`:""} -o StrictHostKeyChecking=no ${l}`,c=`scp ${a?`-i ${a}`:""} -o StrictHostKeyChecking=no`;try{let u=s==="ubuntu"?"/home/ubuntu":`/Users/${s}`,p=(n.PROJECT_ID||"default_project").replace(/[^a-zA-Z0-9-_]/g,"_"),m=`${u}/${f.remoteWorkspacesDir}/${p}`;r.message(`Preparing stable workspace: ${m}...`),Qt(`${d} "mkdir -p ${m}"`,{stdio:"inherit"}),r.message("Transferring source code...");let h=`/tmp/${f.nameLower}-source-${t}.zip`;Qt(`${c} ${h} ${l}:${m}/source.zip`,{stdio:"inherit"});let g=e.iosApiKeyPath?`${m}/api_key.p8`:"",S="";e.iosApiKeyPath&&(r.message("Uploading App Store Connect API key..."),Qt(`${c} ${e.iosApiKeyPath} ${l}:${g}`),e.iosApiKeyId&&e.iosApiKeyIssuer&&(S=`-authenticationKeyID ${e.iosApiKeyId} -authenticationKeyIssuerID ${e.iosApiKeyIssuer} -authenticationKeyPath ${g}`));let b={};if(i)try{let y=!!(n.IOS_DIST_P12&&(n.IOS_PROVISIONING_PROFILE||n.IOS_PROVISIONING_PROFILES)),$=await w.post(`/builds/${i}/${t}/build-urls`,{platform:"ios",includeCredentials:!y});$.data.status==="success"&&(b=$.data.urls)}catch(y){At.warn(Ye.yellow(`Could not fetch build URLs: ${y.message}`))}let A="";if(b.credentials&&b.credentials.length>0)for(let y of b.credentials)y.type==="p12"?A+=`curl -sf -o "$CERT_DIR/${y.name}" "${y.downloadUrl}" || true
1832
1832
  `:y.type==="mobileprovision"&&(A+=`curl -sf -o "$PROV_TEMP/${y.name}" "${y.downloadUrl}" || true
1833
1833
  `);r.message("Generating macOS build script...");let D=process.env.CODEARTIFACT_AUTH_TOKEN?`export CODEARTIFACT_AUTH_TOKEN="${process.env.CODEARTIFACT_AUTH_TOKEN}"
1834
1834
  `:"";if(n)for(let[y,$]of Object.entries(n)){let v=$.replace(/"/g,'\\"').replace(/\$/g,"\\$").replace(/`/g,"\\`");D+=`export ${y}="${v}"
1835
- `}let I=e.buildProfile||"production",H=Bn(n,I,e),Q=jn(H);yt.info(Ye.dim(`iOS remote build config: simulator=${String(!!e.simulator)}, configuration=${e.iosConfiguration||"Release"}, scheme=${e.iosScheme||"auto"}`));let z=[D,b.logUpload?`export PRESIGNED_LOG_UPLOAD="${b.logUpload}"`:"",b.doneMarker?`export PRESIGNED_DONE_MARKER="${b.doneMarker}"`:"",b.cacheDerivedDataDownload?`export PRESIGNED_CACHE_DD_DOWNLOAD="${b.cacheDerivedDataDownload}"`:"",b.cacheDerivedDataUpload?`export PRESIGNED_CACHE_DD_UPLOAD="${b.cacheDerivedDataUpload}"`:"",b.cacheNodeModulesDownload?`export PRESIGNED_CACHE_NODE_DOWNLOAD="${b.cacheNodeModulesDownload}"`:"",b.cacheNodeModulesUpload?`export PRESIGNED_CACHE_NODE_UPLOAD="${b.cacheNodeModulesUpload}"`:"",b.cachePodsDownload?`export PRESIGNED_CACHE_PODS_DOWNLOAD="${b.cachePodsDownload}"`:"",b.cachePodsUpload?`export PRESIGNED_CACHE_PODS_UPLOAD="${b.cachePodsUpload}"`:"",b.artifactIpaUpload?`export PRESIGNED_ARTIFACT_IPA_UPLOAD="${b.artifactIpaUpload}"`:"",b.artifactAppZipUpload?`export PRESIGNED_ARTIFACT_APP_ZIP_UPLOAD="${b.artifactAppZipUpload}"`:"",`export BUILD_ID="${t}"`,`export MACH_BUILD_PROFILE="${Xo(I)}"`,`export MACH_APP_NAME="${Xo(H.MACH_APP_NAME)}"`,`export MACH_ENV_FINGERPRINT="${Q}"`,o.remoteEnvSetupScript().trim(),`export ${f.envPrefix}PROJECT_ID="${p}"`,n.MATCH_ENCRYPTION_PASSPHRASE?`export MATCH_PASSWORD="${n.MATCH_ENCRYPTION_PASSPHRASE}"`:"",n.APPLE_TEAM_ID?`export FASTLANE_TEAM_ID="${n.APPLE_TEAM_ID}"`:"",`export MATCH_KEYCHAIN_NAME="${f.credentialsKeychain}"`,`export MATCH_KEYCHAIN_PASSWORD="${f.keychainPassword}"`].filter(Boolean).join(`
1836
- `),me=e.nodeVersion?[`echo "[NODE] Switching to Node ${e.nodeVersion}..."`,'export NVM_DIR="$HOME/.nvm"','[ -s "$NVM_DIR/nvm.sh" ] && . "$NVM_DIR/nvm.sh" --no-use',`nvm install ${e.nodeVersion} 2>/dev/null || true`,`nvm use ${e.nodeVersion} --silent`,`export PATH="$NVM_DIR/versions/node/$(nvm version ${e.nodeVersion})/bin:$PATH"`,'echo "[NODE] Now using: $(node -v) at $(which node)"'].join(`
1837
- `):"",oe=Jo,ke={"{{REMOTE_DIR}}":m,"{{APP_DIRECTORY}}":e.appDirectory||".","{{ENV_VARS}}":z,"{{CREDENTIAL_DOWNLOADS}}":A,"{{IOS_SCHEME}}":e.iosScheme||"","{{IOS_CONFIG}}":e.iosConfiguration||"Release","{{TEAM_ID}}":e.iosTeamId||"","{{AUTH_PARAMS}}":S,"{{IS_SIMULATOR}}":e.simulator?"true":"false","{{BUILD_ID}}":t,"{{EXPORT_METHOD}}":e.iosExportMethod||"ad-hoc","{{NODE_VERSION_SETUP}}":me,"{{FRAMEWORK_PREBUILD}}":o.iosRemotePrebuildScript().trim()};Object.entries(ke).forEach(([y,$])=>{oe=oe.split(y).join($)});let ye=`/tmp/${f.nameLower}-mac-build-${t}.sh`;if(Hd.writeFileSync(ye,oe),Qt(`${c} ${ye} ${l}:${m}/build.sh`),r.stop("Remote script uploaded."),yt.info(Ye.cyan("Executing remote build. This might take a while...")),Qt(`${d} "bash ${m}/build.sh"`,{stdio:"inherit"}),r.stop("Remote build finished!"),i){r.start("Fetching artifact links...");try{let $=(await w.get(`/builds/${i}/${t}/artifacts`)).data.artifacts||[],v=e.simulator===!0;if($.length===0&&!v)throw r.stop("Build Failed!"),new Error("Build completed but no artifacts were generated. Check build logs for errors.");if(r.stop("Build Successful!"),$.length>0){yt.success("Build Artifacts Ready:");for(let R of $)console.log(`
1835
+ `}let _=e.buildProfile||"production",Y=Bn(n,_,e),te=jn(Y);At.info(Ye.dim(`iOS remote build config: simulator=${String(!!e.simulator)}, configuration=${e.iosConfiguration||"Release"}, scheme=${e.iosScheme||"auto"}`));let X=[D,b.logUpload?`export PRESIGNED_LOG_UPLOAD="${b.logUpload}"`:"",b.doneMarker?`export PRESIGNED_DONE_MARKER="${b.doneMarker}"`:"",b.cacheDerivedDataDownload?`export PRESIGNED_CACHE_DD_DOWNLOAD="${b.cacheDerivedDataDownload}"`:"",b.cacheDerivedDataUpload?`export PRESIGNED_CACHE_DD_UPLOAD="${b.cacheDerivedDataUpload}"`:"",b.cacheNodeModulesDownload?`export PRESIGNED_CACHE_NODE_DOWNLOAD="${b.cacheNodeModulesDownload}"`:"",b.cacheNodeModulesUpload?`export PRESIGNED_CACHE_NODE_UPLOAD="${b.cacheNodeModulesUpload}"`:"",b.cachePodsDownload?`export PRESIGNED_CACHE_PODS_DOWNLOAD="${b.cachePodsDownload}"`:"",b.cachePodsUpload?`export PRESIGNED_CACHE_PODS_UPLOAD="${b.cachePodsUpload}"`:"",b.artifactIpaUpload?`export PRESIGNED_ARTIFACT_IPA_UPLOAD="${b.artifactIpaUpload}"`:"",b.artifactAppZipUpload?`export PRESIGNED_ARTIFACT_APP_ZIP_UPLOAD="${b.artifactAppZipUpload}"`:"",`export BUILD_ID="${t}"`,`export MACH_BUILD_PROFILE="${es(_)}"`,`export MACH_APP_NAME="${es(Y.MACH_APP_NAME)}"`,`export MACH_ENV_FINGERPRINT="${te}"`,o.remoteEnvSetupScript().trim(),`export ${f.envPrefix}PROJECT_ID="${p}"`,n.MATCH_ENCRYPTION_PASSPHRASE?`export MATCH_PASSWORD="${n.MATCH_ENCRYPTION_PASSPHRASE}"`:"",n.APPLE_TEAM_ID?`export FASTLANE_TEAM_ID="${n.APPLE_TEAM_ID}"`:"",`export MATCH_KEYCHAIN_NAME="${f.credentialsKeychain}"`,`export MATCH_KEYCHAIN_PASSWORD="${f.keychainPassword}"`].filter(Boolean).join(`
1836
+ `),Se=e.nodeVersion?[`echo "[NODE] Switching to Node ${e.nodeVersion}..."`,'export NVM_DIR="$HOME/.nvm"','[ -s "$NVM_DIR/nvm.sh" ] && . "$NVM_DIR/nvm.sh" --no-use',`nvm install ${e.nodeVersion} 2>/dev/null || true`,`nvm use ${e.nodeVersion} --silent`,`export PATH="$NVM_DIR/versions/node/$(nvm version ${e.nodeVersion})/bin:$PATH"`,'echo "[NODE] Now using: $(node -v) at $(which node)"'].join(`
1837
+ `):"",oe=Qo,ke={"{{REMOTE_DIR}}":m,"{{APP_DIRECTORY}}":e.appDirectory||".","{{ENV_VARS}}":X,"{{CREDENTIAL_DOWNLOADS}}":A,"{{IOS_SCHEME}}":e.iosScheme||"","{{IOS_CONFIG}}":e.iosConfiguration||"Release","{{TEAM_ID}}":e.iosTeamId||"","{{AUTH_PARAMS}}":S,"{{IS_SIMULATOR}}":e.simulator?"true":"false","{{BUILD_ID}}":t,"{{EXPORT_METHOD}}":e.iosExportMethod||"ad-hoc","{{NODE_VERSION_SETUP}}":Se,"{{FRAMEWORK_PREBUILD}}":o.iosRemotePrebuildScript().trim()};Object.entries(ke).forEach(([y,$])=>{oe=oe.split(y).join($)});let he=`/tmp/${f.nameLower}-mac-build-${t}.sh`;if(Vd.writeFileSync(he,oe),Qt(`${c} ${he} ${l}:${m}/build.sh`),r.stop("Remote script uploaded."),At.info(Ye.cyan("Executing remote build. This might take a while...")),Qt(`${d} "bash ${m}/build.sh"`,{stdio:"inherit"}),r.stop("Remote build finished!"),i){r.start("Fetching artifact links...");try{let $=(await w.get(`/builds/${i}/${t}/artifacts`)).data.artifacts||[],v=e.simulator===!0;if($.length===0&&!v)throw r.stop("Build Failed!"),new Error("Build completed but no artifacts were generated. Check build logs for errors.");if(r.stop("Build Successful!"),$.length>0){At.success("Build Artifacts Ready:");for(let R of $)console.log(`
1838
1838
  ${Ye.yellow(R.name)}:
1839
1839
  ${Ye.cyan(R.downloadUrl)}`);console.log(`
1840
- ${Ye.dim("Note: Links are valid for 7 days.")}`)}else v&&yt.warn("Simulator build completed. No artifacts uploaded.")}catch(y){r.stop("Could not fetch artifacts"),yt.warn(Ye.yellow(`Artifact listing failed: ${y.message}`))}}}catch(u){throw r.stop("iOS Build Failed"),u}};import O from"fs";import Rt from"os";import k from"path";import{spawn as as,spawnSync as Ge}from"child_process";import{randomUUID as Gd}from"crypto";import{pipeline as Vd}from"stream/promises";import{isCancel as Ji,log as C,select as ls,spinner as tn,text as zd}from"@clack/prompts";import en from"axios";import T from"chalk";import Kn from"adm-zip";var Kd={android:"pixel_6",ios:"iphone_17_pro"};function Qo(e){return Kd[e]}async function ds(e){if(e.localRunner){let n=await Xd(e);process.exitCode=n?n.exitCode:1;return}if(e.local){let n=await Zd(e);n&&(process.exitCode=n.exitCode);return}let t=await er(e);if(t&&(C.success(T.green(`Maestro run ${t.status||"queued"}: ${t.testRunId}`)),t.launchDeferredReason&&C.warn(T.yellow(t.launchDeferredReason)),t.dashboardUrl&&C.info(T.dim("View test run: ")+T.white.underline(t.dashboardUrl)),e.wait)){let n=await Qd(e,t);n&&(process.exitCode=n.status==="passed"?0:1)}}async function cs(e){let t=String(e.platform||"").trim().toLowerCase();if(t&&t!=="android"&&t!=="ios"){C.error(T.red("--platform must be android or ios.")),process.exitCode=1;return}try{let n=await w.get("/tests/maestro/devices",{...t?{params:{platform:t}}:{}}),i=Array.isArray(n.data?.devices)?n.data.devices:[];if(e.json){console.log(JSON.stringify({devices:i},null,2));return}if(i.length===0){C.warn(T.yellow("No managed Maestro devices are currently available."));return}console.log(`
1840
+ ${Ye.dim("Note: Links are valid for 7 days.")}`)}else v&&At.warn("Simulator build completed. No artifacts uploaded.")}catch(y){r.stop("Could not fetch artifacts"),At.warn(Ye.yellow(`Artifact listing failed: ${y.message}`))}}}catch(u){throw r.stop("iOS Build Failed"),u}};import O from"fs";import Rt from"os";import k from"path";import{spawn as cs,spawnSync as Ge}from"child_process";import{randomUUID as zd}from"crypto";import{pipeline as Kd}from"stream/promises";import{isCancel as Ji,log as C,select as us,spinner as tn,text as Wd}from"@clack/prompts";import en from"axios";import T from"chalk";import Kn from"adm-zip";var Yd={android:"pixel_6",ios:"iphone_17_pro"};function ns(e){return Yd[e]}async function ps(e){if(e.localRunner){let n=await Qd(e);process.exitCode=n?n.exitCode:1;return}if(e.local){let n=await ec(e);n&&(process.exitCode=n.exitCode);return}let t=await er(e);if(t&&(C.success(T.green(`Maestro run ${t.status||"queued"}: ${t.testRunId}`)),t.launchDeferredReason&&C.warn(T.yellow(t.launchDeferredReason)),t.dashboardUrl&&C.info(T.dim("View test run: ")+T.white.underline(t.dashboardUrl)),e.wait)){let n=await tc(e,t);n&&(process.exitCode=n.status==="passed"?0:1)}}async function fs(e){let t=String(e.platform||"").trim().toLowerCase();if(t&&t!=="android"&&t!=="ios"){C.error(T.red("--platform must be android or ios.")),process.exitCode=1;return}try{let n=await w.get("/tests/maestro/devices",{...t?{params:{platform:t}}:{}}),i=Array.isArray(n.data?.devices)?n.data.devices:[];if(e.json){console.log(JSON.stringify({devices:i},null,2));return}if(i.length===0){C.warn(T.yellow("No managed Maestro devices are currently available."));return}console.log(`
1841
1841
  Available managed Maestro devices:`);for(let r of i){let o=[r.platform==="ios"?"iOS":"Android",r.osVersion,r.isDefault?"default":""].filter(Boolean).join(" \xB7 ");console.log(` ${r.id.padEnd(20)} ${r.label}${o?` (${o})`:""}`)}console.log(`
1842
- Use a profile with: mach maestro --maestro-device <id> ...`)}catch(n){let i=n.response?.data?.message||n.message||"Unknown error";C.error(T.red(`Could not list Maestro devices: ${i}`)),process.exitCode=1}}var Wd=new Set(["passed","failed","cancelled","interrupted"]),es=Number(process.env.MACH_FLOW_UPLOAD_MAX_ATTEMPTS||4),Yd=Number(process.env.MACH_FLOW_UPLOAD_TIMEOUT_MS||12e4),us=process.env.MACH_MAESTRO_FAST_FAIL_RETRY==="1";function Qi(e){let t=Array.isArray(e)?e:e?[e]:[];return[...new Set(t.flatMap(n=>String(n||"").split(",")).map(n=>n.trim()).filter(Boolean))]}function qd(e){let t=Qi(e);if(t.length===0)return;let n={};for(let i of t){let r=process.env[i];r!==void 0&&(n[i]=r)}return Object.keys(n).length>0?n:void 0}function Jd(e){let t={};for(let[i,r]of Object.entries(process.env))i.startsWith("MAESTRO_TEST_")&&r!==void 0&&(t[i]=r);let n=Qi(e);for(let i of n){let r=process.env[i];r!==void 0&&(t[i]=r)}return t}async function Xd(e){let t=e.projectId,n=e.testRunId,i=e.runnerToken||process.env.MACH_RUNNER_TOKEN||process.env.MACH_TOKEN,r=(process.env.MACH_API_URL||tt).replace(/\/$/,""),o=O.mkdtempSync(k.join(Rt.tmpdir(),"mach-maestro-runner-")),s=k.join(o,"mach-maestro-output"),a=k.join(o,"runner.log");if(O.mkdirSync(s,{recursive:!0}),!t||!n||!i)return C.error(T.red("--local-runner requires --project-id, --test-run-id, and a runner token.")),{status:"failed",exitCode:1,attempts:0,flows:".maestro",platform:e.platform};let l=null,d=null,c=null,u,p,m=g=>{O.appendFileSync(a,`${g}${g.endsWith(`
1842
+ Use a profile with: mach maestro --maestro-device <id> ...`)}catch(n){let i=n.response?.data?.message||n.message||"Unknown error";C.error(T.red(`Could not list Maestro devices: ${i}`)),process.exitCode=1}}var qd=new Set(["passed","failed","cancelled","interrupted"]),is=Number(process.env.MACH_FLOW_UPLOAD_MAX_ATTEMPTS||4),Jd=Number(process.env.MACH_FLOW_UPLOAD_TIMEOUT_MS||12e4),ms=process.env.MACH_MAESTRO_FAST_FAIL_RETRY==="1";function Qi(e){let t=Array.isArray(e)?e:e?[e]:[];return[...new Set(t.flatMap(n=>String(n||"").split(",")).map(n=>n.trim()).filter(Boolean))]}function Xd(e){let t=Qi(e);if(t.length===0)return;let n={};for(let i of t){let r=process.env[i];r!==void 0&&(n[i]=r)}return Object.keys(n).length>0?n:void 0}function Zd(e){let t={};for(let[i,r]of Object.entries(process.env))i.startsWith("MAESTRO_TEST_")&&r!==void 0&&(t[i]=r);let n=Qi(e);for(let i of n){let r=process.env[i];r!==void 0&&(t[i]=r)}return t}async function Qd(e){let t=e.projectId,n=e.testRunId,i=e.runnerToken||process.env.MACH_RUNNER_TOKEN||process.env.MACH_TOKEN,r=(process.env.MACH_API_URL||tt).replace(/\/$/,""),o=O.mkdtempSync(k.join(Rt.tmpdir(),"mach-maestro-runner-")),s=k.join(o,"mach-maestro-output"),a=k.join(o,"runner.log");if(O.mkdirSync(s,{recursive:!0}),!t||!n||!i)return C.error(T.red("--local-runner requires --project-id, --test-run-id, and a runner token.")),{status:"failed",exitCode:1,attempts:0,flows:".maestro",platform:e.platform};let l=null,d=null,c=null,u,p,m=g=>{O.appendFileSync(a,`${g}${g.endsWith(`
1843
1843
  `)?"":`
1844
- `}`)},h=async(g,S)=>{try{await en.post(`${r}/internal/tests/${encodeURIComponent(n)}/runner`,{projectId:t,runnerToken:i,status:g,error:S,logPreview:ac(a),device:p,junitUrl:l?.urls?.junitDownloadUrl,logsUrl:l?.urls?.logsDownloadUrl,artifactsUrl:l?.urls?.artifactsDownloadUrl})}catch(b){m(`[WARN] Could not post runner update: ${b.message||b}`)}};try{m(`Mach Maestro local runner starting for ${n}`);let g=await en.post(`${r}/internal/tests/${encodeURIComponent(n)}/runner-payload`,{projectId:t,runnerToken:i});if(g.data?.status!=="success"||!g.data?.payload)throw new Error(g.data?.message||"Runner payload was not returned.");l=g.data.payload;let S=Object.keys(l.env||{});m(`Using Maestro env vars: ${S.length>0?S.join(", "):"none"}`);let b={...process.env,...l.env||{}},A=lc(l.env);A.length>0&&m(`Passing Maestro env vars to test command: ${S.sort().join(", ")}`),await h("running");let D=l.platform==="android"?"app.apk":"app.zip",I=k.join(o,D),H=k.join(o,"source.zip"),Q=k.join(o,"source");O.mkdirSync(Q,{recursive:!0}),m("Downloading app artifact..."),await Xi(l.artifactUrl,I),m(`Downloaded app artifact: ${D} (${ns(O.statSync(I).size)})`),m("Downloading Maestro source..."),await Xi(l.urls.sourceUrl,H),m(`Downloaded Maestro source: source.zip (${ns(O.statSync(H).size)})`),new Kn(H).extractAllTo(Q,!0);let z=dc(Q,l.flowPath||".maestro");if(!O.existsSync(z))throw new Error(`Maestro flow path not found: ${l.flowPath||".maestro"}`);if(m(`Resolved Maestro flow path: ${k.relative(Q,z)||"."}`),l.platform==="ios"){let $=await gc(l.device||Qo("ios"),a);u=$.udid,p=$.name,await h("running");let v=hc(I,o),R=ys(v,a);m(`Resolved iOS app bundle: ${v}`),m(`Resolved iOS bundle id: ${R||"unknown"}`),Ac(v,a,$.udid),Zi("xcrun",["simctl","install",$.udid,v],a),R&&(c={platform:l.platform,appId:R,deviceId:$.udid}),R&&qe("xcrun",["simctl","get_app_container",$.udid,R,"app"],a),Wi(s,a,"ios-before-maestro.png",$.udid),l.record&&(d=yc(s,a,$.udid))}else{let $=Ic(I,a),v=bc(l.device,a);u=v||void 0,p=l.device||Qo("android");let R=v?["-s",v]:[];m(`Resolved Android application id: ${$||"unknown"}`),Zi("adb",[...R,"install","-r",I],a),$&&(c={platform:l.platform,appId:$,deviceId:v||void 0})}let oe=Math.max(0,Math.min(10,Number(l.retries??1)))+1,ke=k.join(s,"report.xml"),ye=fc(a);if(!ye)throw new Error("Maestro CLI not found on this runner. Install Maestro or set MAESTRO_BIN to the full maestro path.");let y=1;for(let $=1;$<=oe;$+=1){m(`Running Maestro attempt ${$}/${oe}...`);let v=[...u?["--device",u]:[],"test","--platform",l.platform,...A,z,"--format","junit","--output",ke,"--test-output-dir",s];if(us&&$<oe?y=(await hs(ye,v,{logPath:a,env:b,fastFailOnFlowFailure:!0})).exitCode:y=qe(ye,v,a,void 0,b),y===0)break}return l.platform==="ios"&&Wi(s,a,"ios-after-maestro.png",u),await is(d,a),d=null,await ss(l.urls,o,s,a),y===0?(await h("passed"),C.success(T.green(`Managed Maestro run passed: ${n}`)),{status:"passed",exitCode:0,attempts:oe,flows:l.flowPath,platform:l.platform}):(await h("failed",`Maestro exited with code ${y}`),C.error(T.red(`Managed Maestro run failed with exit code ${y}`)),{status:"failed",exitCode:y,attempts:oe,flows:l.flowPath,platform:l.platform})}catch(g){let S=g.message||String(g);return m(`MACH_MAESTRO_RUN_FAILED: ${S}`),l?.platform==="ios"&&Wi(s,a,"ios-after-failure.png",u),await is(d,a),l?.urls&&await ss(l.urls,o,s,a),await h("failed",S),C.error(T.red(`Managed Maestro runner failed: ${S}`)),{status:"failed",exitCode:1,attempts:0,flows:l?.flowPath||".maestro",platform:l?.platform||e.platform}}finally{Sc(c,a)}}async function Zd(e){let t=e.maestroFlows||".maestro",n=fs(e.maestroRetries);if(n===null)return null;let i=k.resolve(t);if(!O.existsSync(i))return C.error(T.red(`Maestro flows not found: ${t}`)),{status:"failed",exitCode:1,attempts:0,flows:t,platform:e.platform};let r=await rc(e);if(r?.url){if(!await sc(r))return{status:"failed",exitCode:1,attempts:0,flows:t,platform:r.platform||e.platform}}else if(e.buildId||e.buildUrl||e.artifactUrl||e.latest)return{status:"failed",exitCode:1,attempts:0,flows:t,platform:e.platform};e.maestroRecord&&C.warn(T.yellow("--maestro-record is managed-runner only and is ignored in --local mode."));let o=r?.platform||e.platform,s=["test"];o&&s.push("--platform",o),e.maestroDevice&&s.push("--device",String(e.maestroDevice));let a=Jd(e.maestroEnv),l=Object.keys(a);if(l.length>0){C.info(T.dim(`Passing Maestro env vars to local run: ${l.join(", ")}`));for(let[m,h]of Object.entries(a))s.push("-e",`${m}=${h}`)}s.push(t);let d=n+1,c=1;for(let m=1;m<=d;m+=1){if(C.info(T.dim(`Running local Maestro attempt ${m}/${d}...`)),us&&m<d){let h=await hs("maestro",s,{cwd:process.cwd(),env:process.env,echoOutput:!0,fastFailOnFlowFailure:!0});if(h.error){let g=h.error.message||"Failed to run Maestro";C.error(T.red(`Local Maestro failed to start: ${g}`)),C.info(T.dim("Install Maestro locally, then retry: https://maestro.mobile.dev/getting-started/installing-maestro")),c=1;break}c=h.exitCode}else{let h=Ge("maestro",s,{cwd:process.cwd(),stdio:"inherit",env:process.env});if(h.error){let g=h.error.message||"Failed to run Maestro";C.error(T.red(`Local Maestro failed to start: ${g}`)),C.info(T.dim("Install Maestro locally, then retry: https://maestro.mobile.dev/getting-started/installing-maestro")),c=1;break}c=typeof h.status=="number"?h.status:1}if(c===0)break}let u=c===0?"passed":"failed",p={status:u,exitCode:c,attempts:d,flows:t,platform:o};return Pc(e,p),u==="passed"?C.success(T.green("Local Maestro run passed")):C.error(T.red(`Local Maestro run failed with exit code ${c}`)),p}async function er(e){let t=re(`./${f.configFileName}`),n=e.projectId||t?.projectId,i=String(e.profile||e.buildProfile||"production").toLowerCase();if(!n)return C.error(`No projectId found. Run \`${f.nameLower} link\` first or pass an internal project id.`),null;let r=e.platform;if(!r&&e.latest){let p=await ls({message:"Select platform for the latest build:",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"}]});if(Ji(p))return null;r=p}let o=await ic(e);if(!o)return null;if(o.kind==="latest"&&!r)return C.error("Pass --platform when using --latest."),null;if(o.kind==="artifact-url"&&!r)return C.error("Pass --platform when using --artifact-url."),null;let s=fs(e.maestroRetries);if(s===null)return null;let a=Qi(e.maestroEnv),l=qd(e.maestroEnv);!e.quiet&&a.length>0&&C.info(T.dim(`Forwarding Maestro env vars by name: ${a.join(", ")}`));let d=await ec(e,n);if(d===null)return null;let c=tn();e.quiet||c.start("Queuing Maestro run...");let u=String(e.maestroDevice||"").trim()||void 0;try{let p=await w.post("/tests/maestro",{projectId:n,platform:r,profile:i,latest:o.kind==="latest",buildId:o.kind==="build-id"?o.value:e.buildId,buildUrl:o.kind==="build-url"?o.value:e.buildUrl,artifactUrl:o.kind==="artifact-url"?o.value:e.artifactUrl,flowSourceKey:d,flows:e.maestroFlows||".maestro",...u?{device:u}:{},retries:s,record:!!e.maestroRecord,...a.length>0?{envNames:a}:{},...l?{env:l}:{}});if(p.data.status!=="success")throw new Error(p.data.message||"Failed to queue Maestro run");let m=p.data.testRun,h={testRunId:m.testRunId,status:m.status,projectId:n,buildId:m.buildId,platform:m.platform,dashboardUrl:m.dashboardUrl||`${He}/tests/${m.testRunId}`,launchDeferredReason:m.launchDeferredReason};return Ss(e,h),e.quiet||c.stop("Maestro run queued"),h}catch(p){e.quiet||c.stop("Could not queue Maestro run");let m=p.response?.data?.message||p.message||"Unknown error";return C.error(T.red(`Maestro queue failed: ${m}`)),null}}async function Qd(e,t){let n=ts(e.waitTimeout,60,"--wait-timeout"),i=ts(e.waitInterval,15,"--wait-interval");if(n===null||i===null)return null;let r=n*60*1e3,o=Math.max(5,i)*1e3,s=Date.now(),a=t.status||"queued";for(C.info(T.dim(`Waiting for Maestro run ${t.testRunId} to finish...`));Date.now()-s<=r;){let l=await nc(t.projectId,t.testRunId);if(!l)return null;if(l.status&&l.status!==a&&(a=l.status,C.info(T.dim(`Maestro status: ${a}`))),Wd.has(String(l.status)))return Ss(e,l),l.status==="passed"?C.success(T.green(`Maestro run passed: ${l.testRunId}`)):(C.error(T.red(`Maestro run ${l.status}: ${l.testRunId}`)),l.error&&C.error(T.red(String(l.error)))),l;await tr(o)}return C.error(T.red(`Timed out waiting for Maestro run ${t.testRunId} after ${n} minute(s).`)),{...t,status:"timeout"}}async function ec(e,t){if(e.maestroUseBuildSource)return;let n=e.maestroFlows||".maestro",i=k.resolve(n);if(!O.existsSync(i))return e.maestroFlows?(C.error(T.red(`Maestro flows not found: ${n}`)),null):void 0;let r=k.relative(process.cwd(),i);if(!r||r.startsWith("..")||k.isAbsolute(r))return C.error(T.red("Managed Maestro flow uploads must be inside the current project directory.")),null;let o=tn();e.quiet||o.start(`Uploading Maestro flows from ${r}...`);try{let s=await w.post("/tests/maestro/source-upload-url",{projectId:t,uploadId:Gd()});if(s.data.status!=="success"||!s.data.uploadUrl||!s.data.key)throw new Error(s.data.message||"Failed to get Maestro flow upload URL");let a=new Kn;if(O.statSync(i).isDirectory())a.addLocalFolder(i,r);else{let c=k.dirname(r);a.addLocalFile(i,c==="."?void 0:c,k.basename(r))}let d=a.toBuffer();return await tc(s.data.uploadUrl,d,"application/zip","Maestro flow upload",c=>{e.quiet||o.message(c)}),e.quiet||o.stop("Maestro flows uploaded"),s.data.key}catch(s){e.quiet||o.stop("Could not upload Maestro flows");let a=s.response?.data?.message||s.message||"Unknown error";return C.error(T.red(`Maestro flow upload failed: ${a}`)),null}}function ps(e){let t=e.response?.status,n=e.code||"",i=e.message||"";return t&&![408,409,425,429].includes(t)&&t<500?!1:/ECONNRESET|ETIMEDOUT|EAI_AGAIN|ENOTFOUND|ECONNABORTED|socket hang up|network|timeout/i.test(`${n} ${i}`)||!t}async function tc(e,t,n,i,r){let o;for(let s=1;s<=es;s+=1)try{await en.put(e,t,{headers:{"Content-Type":n},maxBodyLength:1/0,maxContentLength:1/0,timeout:Yd});return}catch(a){if(o=a,!ps(a)||s>=es)break;let l=Math.min(2e4,2e3*s),d=a.code||a.response?.status||a.message||"network error";r?.(`${i} attempt ${s} failed (${d}), retrying...`),await tr(l)}throw o}async function nc(e,t){try{let n=await w.get(`/tests/${encodeURIComponent(t)}`,{params:{projectId:e}});if(n.data.status!=="success")throw new Error(n.data.message||"Failed to fetch Maestro run");let i=n.data.testRun;return{testRunId:i.testRunId,status:i.status,projectId:e,buildId:i.buildId,platform:i.platform,dashboardUrl:i.dashboardUrl||`${He}/tests/${i.testRunId}`,launchDeferredReason:i.launchDeferredReason,...i.error?{error:i.error}:{}}}catch(n){let i=n.response?.data?.message||n.message||"Unknown error";return C.error(T.red(`Could not fetch Maestro run status: ${i}`)),null}}async function ic(e){if(e.buildId)return{kind:"build-id",value:e.buildId};if(e.buildUrl)return{kind:"build-url",value:e.buildUrl};if(e.artifactUrl)return{kind:"artifact-url",value:e.artifactUrl};if(e.latest)return{kind:"latest"};let t=await ls({message:"Select app artifact source for Maestro:",options:[{value:"latest",label:"Latest successful build"},{value:"build-id",label:"Build ID"},{value:"build-url",label:`${f.name} build URL`},{value:"artifact-url",label:"Direct artifact URL"}]});if(Ji(t))return null;if(t==="latest")return{kind:"latest"};let n=await zd({message:t==="build-id"?"Enter build ID:":t==="build-url"?`Enter ${f.name} build URL:`:"Enter artifact URL:",validate:i=>{let r=String(i||"").trim();if(!r)return"Value is required";if((t==="build-url"||t==="artifact-url")&&!r.startsWith("http"))return"Must be a URL"}});return Ji(n)?null:{kind:t,value:String(n).trim()}}function ts(e,t,n){if(e==null||e==="")return t;let i=Number(e);return!Number.isFinite(i)||i<=0?(C.error(`${n} must be a positive number.`),null):i}function tr(e){return new Promise(t=>setTimeout(t,e))}function fs(e){if(e==null||e==="")return 1;let t=Number(e);return!Number.isInteger(t)||t<0||t>10?(C.error("--maestro-retries must be an integer between 0 and 10."),null):t}async function rc(e){if(e.artifactUrl)return{url:e.artifactUrl,platform:e.platform||ir(e.artifactUrl),name:As(e.artifactUrl)};let t=e.buildId||Rc(e.buildUrl);return t?ms(t,e.platform):e.latest?oc(e):null}async function ms(e,t){let n=tn();n.start(`Resolving build ${e}...`);try{let i=await w.get(`/public/builds/${encodeURIComponent(e)}`);if(i.data.status!=="success")throw new Error(i.data.message||"Build lookup failed");let r=t||i.data.build?.platform,o=vc(i.data.artifacts||[],r);if(!o?.downloadUrl)throw new Error("No installable APK or simulator app artifact found for this build.");return n.stop("Build artifact resolved"),{url:o.downloadUrl,platform:r||ir(o.name||o.downloadUrl),name:o.name}}catch(i){n.stop("Could not resolve build artifact");let r=i.response?.data?.message||i.message||"Unknown error";return C.error(T.red(`Local Maestro artifact lookup failed: ${r}`)),null}}async function oc(e){let t=re(`./${f.configFileName}`),n=e.projectId||t?.projectId,i=String(e.profile||e.buildProfile||"production").toLowerCase();if(!n)return C.error(`No projectId found. Run \`${f.nameLower} link\` first or pass --build-id/--artifact-url.`),null;if(!e.platform)return C.error("Pass --platform when using --latest with --local."),null;let r=tn();r.start("Resolving latest build...");try{let o=await w.get(`/builds/${n}`,{params:{limit:100}}),a=(Array.isArray(o.data.builds)?o.data.builds:[]).find(l=>l.status==="success"&&l.platform===e.platform&&String(l.buildProfile||l.buildType||"production").toLowerCase()===i);if(!a?.buildId)throw new Error(`No successful ${e.platform} build found for profile ${i}.`);return r.stop(`Latest build resolved: ${a.buildId}`),ms(a.buildId,e.platform)}catch(o){r.stop("Could not resolve latest build");let s=o.response?.data?.message||o.message||"Unknown error";return C.error(T.red(`Latest build lookup failed: ${s}`)),null}}async function sc(e){let t=e.platform||ir(e.url);if(!t)return C.error(T.red("Could not infer platform for local install. Pass --platform android or --platform ios.")),!1;let n=O.mkdtempSync(k.join(Rt.tmpdir(),"mach-maestro-")),i=e.name||As(e.url)||(t==="android"?"app.apk":"app.zip"),r=k.join(n,i),o=tn();o.start(`Downloading ${i}...`);try{await Xi(e.url,r),o.stop("Artifact downloaded")}catch(s){return o.stop("Artifact download failed"),C.error(T.red(s.message||"Failed to download artifact")),!1}return t==="android"?wc(r):$c(r,n)}async function Xi(e,t){let n=await en.get(e,{responseType:"stream"});await Vd(n.data,O.createWriteStream(t))}function ac(e,t=12e3){try{return O.readFileSync(e,"utf-8").slice(-t)}catch{return""}}function ns(e){if(!Number.isFinite(e)||e<0)return"unknown size";if(e<1024)return`${e} B`;let t=["KB","MB","GB"],n=e/1024,i=t[0];for(let r=1;n>=1024&&r<t.length;r+=1)n/=1024,i=t[r];return`${n.toFixed(n>=10?1:2)} ${i}`}function lc(e){return Object.entries(e||{}).filter(([t,n])=>!!t&&n!==void 0).sort(([t],[n])=>t.localeCompare(n)).flatMap(([t,n])=>["-e",`${t}=${n}`])}function dc(e,t){let n=k.resolve(e,t||".maestro"),i=k.relative(e,n);if(i.startsWith("..")||k.isAbsolute(i))throw new Error("Maestro flow path must stay inside the build source.");return n}function gs(e,t){let n=[e];for(let i=0;i<t.length;i+=1){let r=t[i],o=t[i-1];(o==="-e"||o==="--env")&&/^[A-Za-z_][A-Za-z0-9_]*=/.test(r)?n.push(`${r.slice(0,r.indexOf("="))}=<redacted>`):n.push(r)}return n.join(" ")}function cc(e){return/\[Failed\]\s+/.test(e)}function uc(e){if(!e.killed){try{e.kill("SIGTERM")}catch{}setTimeout(()=>{try{e.kill("SIGKILL")}catch{}},5e3).unref()}}function hs(e,t,n={}){let{cwd:i,env:r=process.env,logPath:o,echoOutput:s=!1,fastFailOnFlowFailure:a=!1}=n;return o&&O.appendFileSync(o,`
1845
- $ ${gs(e,t)}
1846
- `),new Promise(l=>{let d=!1,c=!1,u="",p=g=>{c||(c=!0,l(g))},m=as(e,t,{cwd:i,env:r,stdio:["ignore","pipe","pipe"]}),h=g=>{u+=g;let S=u.split(/\r?\n/);u=S.pop()||"";for(let b of S)if(a&&cc(b)&&!d){d=!0;let A="Mach fast-fail: detected failed Maestro flow; stopping this attempt early to retry...";o&&O.appendFileSync(o,`
1844
+ `}`)},h=async(g,S)=>{try{await en.post(`${r}/internal/tests/${encodeURIComponent(n)}/runner`,{projectId:t,runnerToken:i,status:g,error:S,logPreview:dc(a),device:p,junitUrl:l?.urls?.junitDownloadUrl,logsUrl:l?.urls?.logsDownloadUrl,artifactsUrl:l?.urls?.artifactsDownloadUrl})}catch(b){m(`[WARN] Could not post runner update: ${b.message||b}`)}};try{m(`Mach Maestro local runner starting for ${n}`);let g=await en.post(`${r}/internal/tests/${encodeURIComponent(n)}/runner-payload`,{projectId:t,runnerToken:i});if(g.data?.status!=="success"||!g.data?.payload)throw new Error(g.data?.message||"Runner payload was not returned.");l=g.data.payload;let S=Object.keys(l.env||{});m(`Using Maestro env vars: ${S.length>0?S.join(", "):"none"}`);let b={...process.env,...l.env||{}},A=cc(l.env);A.length>0&&m(`Passing Maestro env vars to test command: ${S.sort().join(", ")}`),await h("running");let D=l.platform==="android"?"app.apk":"app.zip",_=k.join(o,D),Y=k.join(o,"source.zip"),te=k.join(o,"source");O.mkdirSync(te,{recursive:!0}),m("Downloading app artifact..."),await Xi(l.artifactUrl,_),m(`Downloaded app artifact: ${D} (${os(O.statSync(_).size)})`),m("Downloading Maestro source..."),await Xi(l.urls.sourceUrl,Y),m(`Downloaded Maestro source: source.zip (${os(O.statSync(Y).size)})`),new Kn(Y).extractAllTo(te,!0);let X=uc(te,l.flowPath||".maestro");if(!O.existsSync(X))throw new Error(`Maestro flow path not found: ${l.flowPath||".maestro"}`);if(m(`Resolved Maestro flow path: ${k.relative(te,X)||"."}`),l.platform==="ios"){let $=await yc(l.device||ns("ios"),a);u=$.udid,p=$.name,await h("running");let v=Ac(_,o),R=bs(v,a);m(`Resolved iOS app bundle: ${v}`),m(`Resolved iOS bundle id: ${R||"unknown"}`),bc(v,a,$.udid),Zi("xcrun",["simctl","install",$.udid,v],a),R&&(c={platform:l.platform,appId:R,deviceId:$.udid}),R&&qe("xcrun",["simctl","get_app_container",$.udid,R,"app"],a),Wi(s,a,"ios-before-maestro.png",$.udid),l.record&&(d=Sc(s,a,$.udid))}else{let $=_c(_,a),v=Ec(l.device,a);u=v||void 0,p=l.device||ns("android");let R=v?["-s",v]:[];m(`Resolved Android application id: ${$||"unknown"}`),Zi("adb",[...R,"install","-r",_],a),$&&(c={platform:l.platform,appId:$,deviceId:v||void 0})}let oe=Math.max(0,Math.min(10,Number(l.retries??1)))+1,ke=k.join(s,"report.xml"),he=gc(a);if(!he)throw new Error("Maestro CLI not found on this runner. Install Maestro or set MAESTRO_BIN to the full maestro path.");let y=1;for(let $=1;$<=oe;$+=1){m(`Running Maestro attempt ${$}/${oe}...`);let v=[...u?["--device",u]:[],"test","--platform",l.platform,...A,X,"--format","junit","--output",ke,"--test-output-dir",s];if(ms&&$<oe?y=(await Ss(he,v,{logPath:a,env:b,fastFailOnFlowFailure:!0})).exitCode:y=qe(he,v,a,void 0,b),y===0)break}return l.platform==="ios"&&Wi(s,a,"ios-after-maestro.png",u),await ss(d,a),d=null,await ds(l.urls,o,s,a),y===0?(await h("passed"),C.success(T.green(`Managed Maestro run passed: ${n}`)),{status:"passed",exitCode:0,attempts:oe,flows:l.flowPath,platform:l.platform}):(await h("failed",`Maestro exited with code ${y}`),C.error(T.red(`Managed Maestro run failed with exit code ${y}`)),{status:"failed",exitCode:y,attempts:oe,flows:l.flowPath,platform:l.platform})}catch(g){let S=g.message||String(g);return m(`MACH_MAESTRO_RUN_FAILED: ${S}`),l?.platform==="ios"&&Wi(s,a,"ios-after-failure.png",u),await ss(d,a),l?.urls&&await ds(l.urls,o,s,a),await h("failed",S),C.error(T.red(`Managed Maestro runner failed: ${S}`)),{status:"failed",exitCode:1,attempts:0,flows:l?.flowPath||".maestro",platform:l?.platform||e.platform}}finally{Ic(c,a)}}async function ec(e){let t=e.maestroFlows||".maestro",n=hs(e.maestroRetries);if(n===null)return null;let i=k.resolve(t);if(!O.existsSync(i))return C.error(T.red(`Maestro flows not found: ${t}`)),{status:"failed",exitCode:1,attempts:0,flows:t,platform:e.platform};let r=await sc(e);if(r?.url){if(!await lc(r))return{status:"failed",exitCode:1,attempts:0,flows:t,platform:r.platform||e.platform}}else if(e.buildId||e.buildUrl||e.artifactUrl||e.latest)return{status:"failed",exitCode:1,attempts:0,flows:t,platform:e.platform};e.maestroRecord&&C.warn(T.yellow("--maestro-record is managed-runner only and is ignored in --local mode."));let o=r?.platform||e.platform,s=["test"];o&&s.push("--platform",o),e.maestroDevice&&s.push("--device",String(e.maestroDevice));let a=Zd(e.maestroEnv),l=Object.keys(a);if(l.length>0){C.info(T.dim(`Passing Maestro env vars to local run: ${l.join(", ")}`));for(let[m,h]of Object.entries(a))s.push("-e",`${m}=${h}`)}s.push(t);let d=n+1,c=1;for(let m=1;m<=d;m+=1){if(C.info(T.dim(`Running local Maestro attempt ${m}/${d}...`)),ms&&m<d){let h=await Ss("maestro",s,{cwd:process.cwd(),env:process.env,echoOutput:!0,fastFailOnFlowFailure:!0});if(h.error){let g=h.error.message||"Failed to run Maestro";C.error(T.red(`Local Maestro failed to start: ${g}`)),C.info(T.dim("Install Maestro locally, then retry: https://maestro.mobile.dev/getting-started/installing-maestro")),c=1;break}c=h.exitCode}else{let h=Ge("maestro",s,{cwd:process.cwd(),stdio:"inherit",env:process.env});if(h.error){let g=h.error.message||"Failed to run Maestro";C.error(T.red(`Local Maestro failed to start: ${g}`)),C.info(T.dim("Install Maestro locally, then retry: https://maestro.mobile.dev/getting-started/installing-maestro")),c=1;break}c=typeof h.status=="number"?h.status:1}if(c===0)break}let u=c===0?"passed":"failed",p={status:u,exitCode:c,attempts:d,flows:t,platform:o};return Dc(e,p),u==="passed"?C.success(T.green("Local Maestro run passed")):C.error(T.red(`Local Maestro run failed with exit code ${c}`)),p}async function er(e){let t=re(`./${f.configFileName}`),n=e.projectId||t?.projectId,i=String(e.profile||e.buildProfile||"production").toLowerCase();if(!n)return C.error(`No projectId found. Run \`${f.nameLower} link\` first or pass an internal project id.`),null;let r=e.platform;if(!r&&e.latest){let p=await us({message:"Select platform for the latest build:",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"}]});if(Ji(p))return null;r=p}let o=await oc(e);if(!o)return null;if(o.kind==="latest"&&!r)return C.error("Pass --platform when using --latest."),null;if(o.kind==="artifact-url"&&!r)return C.error("Pass --platform when using --artifact-url."),null;let s=hs(e.maestroRetries);if(s===null)return null;let a=Qi(e.maestroEnv),l=Xd(e.maestroEnv);!e.quiet&&a.length>0&&C.info(T.dim(`Forwarding Maestro env vars by name: ${a.join(", ")}`));let d=await nc(e,n);if(d===null)return null;let c=tn();e.quiet||c.start("Queuing Maestro run...");let u=String(e.maestroDevice||"").trim()||void 0;try{let p=await w.post("/tests/maestro",{projectId:n,platform:r,profile:i,latest:o.kind==="latest",buildId:o.kind==="build-id"?o.value:e.buildId,buildUrl:o.kind==="build-url"?o.value:e.buildUrl,artifactUrl:o.kind==="artifact-url"?o.value:e.artifactUrl,flowSourceKey:d,flows:e.maestroFlows||".maestro",...u?{device:u}:{},retries:s,record:!!e.maestroRecord,...a.length>0?{envNames:a}:{},...l?{env:l}:{}});if(p.data.status!=="success")throw new Error(p.data.message||"Failed to queue Maestro run");let m=p.data.testRun,h={testRunId:m.testRunId,status:m.status,projectId:n,buildId:m.buildId,platform:m.platform,dashboardUrl:m.dashboardUrl||`${He}/tests/${m.testRunId}`,launchDeferredReason:m.launchDeferredReason};return Es(e,h),e.quiet||c.stop("Maestro run queued"),h}catch(p){e.quiet||c.stop("Could not queue Maestro run");let m=p.response?.data?.message||p.message||"Unknown error";return C.error(T.red(`Maestro queue failed: ${m}`)),null}}async function tc(e,t){let n=rs(e.waitTimeout,60,"--wait-timeout"),i=rs(e.waitInterval,15,"--wait-interval");if(n===null||i===null)return null;let r=n*60*1e3,o=Math.max(5,i)*1e3,s=Date.now(),a=t.status||"queued";for(C.info(T.dim(`Waiting for Maestro run ${t.testRunId} to finish...`));Date.now()-s<=r;){let l=await rc(t.projectId,t.testRunId);if(!l)return null;if(l.status&&l.status!==a&&(a=l.status,C.info(T.dim(`Maestro status: ${a}`))),qd.has(String(l.status)))return Es(e,l),l.status==="passed"?C.success(T.green(`Maestro run passed: ${l.testRunId}`)):(C.error(T.red(`Maestro run ${l.status}: ${l.testRunId}`)),l.error&&C.error(T.red(String(l.error)))),l;await tr(o)}return C.error(T.red(`Timed out waiting for Maestro run ${t.testRunId} after ${n} minute(s).`)),{...t,status:"timeout"}}async function nc(e,t){if(e.maestroUseBuildSource)return;let n=e.maestroFlows||".maestro",i=k.resolve(n);if(!O.existsSync(i))return e.maestroFlows?(C.error(T.red(`Maestro flows not found: ${n}`)),null):void 0;let r=k.relative(process.cwd(),i);if(!r||r.startsWith("..")||k.isAbsolute(r))return C.error(T.red("Managed Maestro flow uploads must be inside the current project directory.")),null;let o=tn();e.quiet||o.start(`Uploading Maestro flows from ${r}...`);try{let s=await w.post("/tests/maestro/source-upload-url",{projectId:t,uploadId:zd()});if(s.data.status!=="success"||!s.data.uploadUrl||!s.data.key)throw new Error(s.data.message||"Failed to get Maestro flow upload URL");let a=new Kn;if(O.statSync(i).isDirectory())a.addLocalFolder(i,r);else{let c=k.dirname(r);a.addLocalFile(i,c==="."?void 0:c,k.basename(r))}let d=a.toBuffer();return await ic(s.data.uploadUrl,d,"application/zip","Maestro flow upload",c=>{e.quiet||o.message(c)}),e.quiet||o.stop("Maestro flows uploaded"),s.data.key}catch(s){e.quiet||o.stop("Could not upload Maestro flows");let a=s.response?.data?.message||s.message||"Unknown error";return C.error(T.red(`Maestro flow upload failed: ${a}`)),null}}function gs(e){let t=e.response?.status,n=e.code||"",i=e.message||"";return t&&![408,409,425,429].includes(t)&&t<500?!1:/ECONNRESET|ETIMEDOUT|EAI_AGAIN|ENOTFOUND|ECONNABORTED|socket hang up|network|timeout/i.test(`${n} ${i}`)||!t}async function ic(e,t,n,i,r){let o;for(let s=1;s<=is;s+=1)try{await en.put(e,t,{headers:{"Content-Type":n},maxBodyLength:1/0,maxContentLength:1/0,timeout:Jd});return}catch(a){if(o=a,!gs(a)||s>=is)break;let l=Math.min(2e4,2e3*s),d=a.code||a.response?.status||a.message||"network error";r?.(`${i} attempt ${s} failed (${d}), retrying...`),await tr(l)}throw o}async function rc(e,t){try{let n=await w.get(`/tests/${encodeURIComponent(t)}`,{params:{projectId:e}});if(n.data.status!=="success")throw new Error(n.data.message||"Failed to fetch Maestro run");let i=n.data.testRun;return{testRunId:i.testRunId,status:i.status,projectId:e,buildId:i.buildId,platform:i.platform,dashboardUrl:i.dashboardUrl||`${He}/tests/${i.testRunId}`,launchDeferredReason:i.launchDeferredReason,...i.error?{error:i.error}:{}}}catch(n){let i=n.response?.data?.message||n.message||"Unknown error";return C.error(T.red(`Could not fetch Maestro run status: ${i}`)),null}}async function oc(e){if(e.buildId)return{kind:"build-id",value:e.buildId};if(e.buildUrl)return{kind:"build-url",value:e.buildUrl};if(e.artifactUrl)return{kind:"artifact-url",value:e.artifactUrl};if(e.latest)return{kind:"latest"};let t=await us({message:"Select app artifact source for Maestro:",options:[{value:"latest",label:"Latest successful build"},{value:"build-id",label:"Build ID"},{value:"build-url",label:`${f.name} build URL`},{value:"artifact-url",label:"Direct artifact URL"}]});if(Ji(t))return null;if(t==="latest")return{kind:"latest"};let n=await Wd({message:t==="build-id"?"Enter build ID:":t==="build-url"?`Enter ${f.name} build URL:`:"Enter artifact URL:",validate:i=>{let r=String(i||"").trim();if(!r)return"Value is required";if((t==="build-url"||t==="artifact-url")&&!r.startsWith("http"))return"Must be a URL"}});return Ji(n)?null:{kind:t,value:String(n).trim()}}function rs(e,t,n){if(e==null||e==="")return t;let i=Number(e);return!Number.isFinite(i)||i<=0?(C.error(`${n} must be a positive number.`),null):i}function tr(e){return new Promise(t=>setTimeout(t,e))}function hs(e){if(e==null||e==="")return 1;let t=Number(e);return!Number.isInteger(t)||t<0||t>10?(C.error("--maestro-retries must be an integer between 0 and 10."),null):t}async function sc(e){if(e.artifactUrl)return{url:e.artifactUrl,platform:e.platform||ir(e.artifactUrl),name:Is(e.artifactUrl)};let t=e.buildId||Oc(e.buildUrl);return t?ys(t,e.platform):e.latest?ac(e):null}async function ys(e,t){let n=tn();n.start(`Resolving build ${e}...`);try{let i=await w.get(`/public/builds/${encodeURIComponent(e)}`);if(i.data.status!=="success")throw new Error(i.data.message||"Build lookup failed");let r=t||i.data.build?.platform,o=Pc(i.data.artifacts||[],r);if(!o?.downloadUrl)throw new Error("No installable APK or simulator app artifact found for this build.");return n.stop("Build artifact resolved"),{url:o.downloadUrl,platform:r||ir(o.name||o.downloadUrl),name:o.name}}catch(i){n.stop("Could not resolve build artifact");let r=i.response?.data?.message||i.message||"Unknown error";return C.error(T.red(`Local Maestro artifact lookup failed: ${r}`)),null}}async function ac(e){let t=re(`./${f.configFileName}`),n=e.projectId||t?.projectId,i=String(e.profile||e.buildProfile||"production").toLowerCase();if(!n)return C.error(`No projectId found. Run \`${f.nameLower} link\` first or pass --build-id/--artifact-url.`),null;if(!e.platform)return C.error("Pass --platform when using --latest with --local."),null;let r=tn();r.start("Resolving latest build...");try{let o=await w.get(`/builds/${n}`,{params:{limit:100}}),a=(Array.isArray(o.data.builds)?o.data.builds:[]).find(l=>l.status==="success"&&l.platform===e.platform&&String(l.buildProfile||l.buildType||"production").toLowerCase()===i);if(!a?.buildId)throw new Error(`No successful ${e.platform} build found for profile ${i}.`);return r.stop(`Latest build resolved: ${a.buildId}`),ys(a.buildId,e.platform)}catch(o){r.stop("Could not resolve latest build");let s=o.response?.data?.message||o.message||"Unknown error";return C.error(T.red(`Latest build lookup failed: ${s}`)),null}}async function lc(e){let t=e.platform||ir(e.url);if(!t)return C.error(T.red("Could not infer platform for local install. Pass --platform android or --platform ios.")),!1;let n=O.mkdtempSync(k.join(Rt.tmpdir(),"mach-maestro-")),i=e.name||Is(e.url)||(t==="android"?"app.apk":"app.zip"),r=k.join(n,i),o=tn();o.start(`Downloading ${i}...`);try{await Xi(e.url,r),o.stop("Artifact downloaded")}catch(s){return o.stop("Artifact download failed"),C.error(T.red(s.message||"Failed to download artifact")),!1}return t==="android"?vc(r):Rc(r,n)}async function Xi(e,t){let n=await en.get(e,{responseType:"stream"});await Kd(n.data,O.createWriteStream(t))}function dc(e,t=12e3){try{return O.readFileSync(e,"utf-8").slice(-t)}catch{return""}}function os(e){if(!Number.isFinite(e)||e<0)return"unknown size";if(e<1024)return`${e} B`;let t=["KB","MB","GB"],n=e/1024,i=t[0];for(let r=1;n>=1024&&r<t.length;r+=1)n/=1024,i=t[r];return`${n.toFixed(n>=10?1:2)} ${i}`}function cc(e){return Object.entries(e||{}).filter(([t,n])=>!!t&&n!==void 0).sort(([t],[n])=>t.localeCompare(n)).flatMap(([t,n])=>["-e",`${t}=${n}`])}function uc(e,t){let n=k.resolve(e,t||".maestro"),i=k.relative(e,n);if(i.startsWith("..")||k.isAbsolute(i))throw new Error("Maestro flow path must stay inside the build source.");return n}function As(e,t){let n=[e];for(let i=0;i<t.length;i+=1){let r=t[i],o=t[i-1];(o==="-e"||o==="--env")&&/^[A-Za-z_][A-Za-z0-9_]*=/.test(r)?n.push(`${r.slice(0,r.indexOf("="))}=<redacted>`):n.push(r)}return n.join(" ")}function pc(e){return/\[Failed\]\s+/.test(e)}function fc(e){if(!e.killed){try{e.kill("SIGTERM")}catch{}setTimeout(()=>{try{e.kill("SIGKILL")}catch{}},5e3).unref()}}function Ss(e,t,n={}){let{cwd:i,env:r=process.env,logPath:o,echoOutput:s=!1,fastFailOnFlowFailure:a=!1}=n;return o&&O.appendFileSync(o,`
1845
+ $ ${As(e,t)}
1846
+ `),new Promise(l=>{let d=!1,c=!1,u="",p=g=>{c||(c=!0,l(g))},m=cs(e,t,{cwd:i,env:r,stdio:["ignore","pipe","pipe"]}),h=g=>{u+=g;let S=u.split(/\r?\n/);u=S.pop()||"";for(let b of S)if(a&&pc(b)&&!d){d=!0;let A="Mach fast-fail: detected failed Maestro flow; stopping this attempt early to retry...";o&&O.appendFileSync(o,`
1847
1847
  ${A}
1848
1848
  `),s&&process.stderr.write(`${A}
1849
- `),uc(m)}};m.stdout?.on("data",g=>{let S=g.toString();o&&O.appendFileSync(o,S),s&&process.stdout.write(S),h(S)}),m.stderr?.on("data",g=>{let S=g.toString();o&&O.appendFileSync(o,S),s&&process.stderr.write(S),h(S)}),m.on("error",g=>{o&&O.appendFileSync(o,`${g.message}
1849
+ `),fc(m)}};m.stdout?.on("data",g=>{let S=g.toString();o&&O.appendFileSync(o,S),s&&process.stdout.write(S),h(S)}),m.stderr?.on("data",g=>{let S=g.toString();o&&O.appendFileSync(o,S),s&&process.stderr.write(S),h(S)}),m.on("error",g=>{o&&O.appendFileSync(o,`${g.message}
1850
1850
  `),p({exitCode:1,fastFailed:d,error:g})}),m.on("close",(g,S)=>{d&&o&&O.appendFileSync(o,`Maestro attempt stopped after first failed flow${S?` (${S})`:""}.
1851
1851
  `),p({exitCode:typeof g=="number"?g:1,fastFailed:d})})})}function qe(e,t,n,i,r=process.env){O.appendFileSync(n,`
1852
- $ ${gs(e,t)}
1852
+ $ ${As(e,t)}
1853
1853
  `);let o=Ge(e,t,{cwd:i,encoding:"utf-8",env:r});return o.stdout&&O.appendFileSync(n,o.stdout),o.stderr&&O.appendFileSync(n,o.stderr),o.error?(O.appendFileSync(n,`${o.error.message}
1854
- `),1):typeof o.status=="number"?o.status:1}function Zi(e,t,n,i){let r=qe(e,t,n,i);if(r!==0)throw new Error(`${e} ${t.join(" ")} failed with exit code ${r}`)}function pc(e){try{return O.accessSync(e,O.constants.X_OK),!0}catch{return!1}}function fc(e){let t=[process.env.MAESTRO_BIN,k.join(Rt.homedir(),".maestro","bin","maestro"),"/opt/homebrew/bin/maestro","/usr/local/bin/maestro"].filter(Boolean),n=Ge("/usr/bin/env",["which","maestro"],{encoding:"utf-8",env:process.env}),i=n.status===0?String(n.stdout||"").split(`
1855
- `)[0]?.trim():"";i&&t.unshift(i);for(let r of t)if(r&&pc(r))return e&&O.appendFileSync(e,`Using Maestro CLI at ${r}
1854
+ `),1):typeof o.status=="number"?o.status:1}function Zi(e,t,n,i){let r=qe(e,t,n,i);if(r!==0)throw new Error(`${e} ${t.join(" ")} failed with exit code ${r}`)}function mc(e){try{return O.accessSync(e,O.constants.X_OK),!0}catch{return!1}}function gc(e){let t=[process.env.MAESTRO_BIN,k.join(Rt.homedir(),".maestro","bin","maestro"),"/opt/homebrew/bin/maestro","/usr/local/bin/maestro"].filter(Boolean),n=Ge("/usr/bin/env",["which","maestro"],{encoding:"utf-8",env:process.env}),i=n.status===0?String(n.stdout||"").split(`
1855
+ `)[0]?.trim():"";i&&t.unshift(i);for(let r of t)if(r&&mc(r))return e&&O.appendFileSync(e,`Using Maestro CLI at ${r}
1856
1856
  `),r;return e&&O.appendFileSync(e,`Maestro CLI not found. Checked: ${t.join(", ")}
1857
- `),null}function mc(e){let t=String(e||"").trim();return t?t.replace(/_/g," ").replace(/\bios\b/gi,"").replace(/\biphone\b/i,"iPhone").replace(/\bpro\b/gi,"Pro").replace(/\bmax\b/gi,"Max").replace(/\s+/g," ").trim():"iPhone 17 Pro"}async function gc(e,t){let n=mc(e),i=Ge("xcrun",["simctl","list","devices","--json"],{encoding:"utf-8"});if(i.status!==0||!i.stdout)throw new Error("Could not list iOS simulators.");let r=JSON.parse(i.stdout),o=Object.values(r.devices||{}).flatMap(l=>Array.isArray(l)?l:[]).filter(l=>l?.isAvailable),s=n.toLowerCase(),a=o.find(l=>l.udid===e)||o.find(l=>l.name===n)||o.find(l=>String(l.name||"").toLowerCase().includes(s));if(!a?.udid)throw new Error(`No available iOS Simulator found for ${n}.`);return a.state==="Booted"?O.appendFileSync(t,`Using already booted iOS Simulator ${a.name} (${a.udid}).
1857
+ `),null}function hc(e){let t=String(e||"").trim();return t?t.replace(/_/g," ").replace(/\bios\b/gi,"").replace(/\biphone\b/i,"iPhone").replace(/\bpro\b/gi,"Pro").replace(/\bmax\b/gi,"Max").replace(/\s+/g," ").trim():"iPhone 17 Pro"}async function yc(e,t){let n=hc(e),i=Ge("xcrun",["simctl","list","devices","--json"],{encoding:"utf-8"});if(i.status!==0||!i.stdout)throw new Error("Could not list iOS simulators.");let r=JSON.parse(i.stdout),o=Object.values(r.devices||{}).flatMap(l=>Array.isArray(l)?l:[]).filter(l=>l?.isAvailable),s=n.toLowerCase(),a=o.find(l=>l.udid===e)||o.find(l=>l.name===n)||o.find(l=>String(l.name||"").toLowerCase().includes(s));if(!a?.udid)throw new Error(`No available iOS Simulator found for ${n}.`);return a.state==="Booted"?O.appendFileSync(t,`Using already booted iOS Simulator ${a.name} (${a.udid}).
1858
1858
  `):(O.appendFileSync(t,`Booting iOS Simulator ${a.name} (${a.udid})...
1859
1859
  `),qe("xcrun",["simctl","boot",a.udid],t)!==0&&O.appendFileSync(t,`simctl boot returned non-zero; continuing to bootstatus in case it was already booting.
1860
- `),Zi("xcrun",["simctl","bootstatus",a.udid,"-b"],t)),{name:String(a.name||n),udid:a.udid}}function hc(e,t){if(e.endsWith(".ipa"))throw new Error("iOS Maestro runs need a simulator .app.zip artifact, not an App Store .ipa.");if(e.endsWith(".zip")){let n=k.join(t,"ios-app");O.mkdirSync(n,{recursive:!0}),new Kn(e).extractAllTo(n,!0);let i=nr(n);if(!i)throw new Error("Could not find a .app bundle inside the iOS artifact zip.");return i}if(e.endsWith(".app"))return e;throw new Error("iOS Maestro runs need a .app bundle or .app.zip artifact.")}function ys(e,t){let n=k.join(e,"Info.plist");if(!O.existsSync(n))return O.appendFileSync(t,`Could not find Info.plist in ${e}; skipping uninstall.
1860
+ `),Zi("xcrun",["simctl","bootstatus",a.udid,"-b"],t)),{name:String(a.name||n),udid:a.udid}}function Ac(e,t){if(e.endsWith(".ipa"))throw new Error("iOS Maestro runs need a simulator .app.zip artifact, not an App Store .ipa.");if(e.endsWith(".zip")){let n=k.join(t,"ios-app");O.mkdirSync(n,{recursive:!0}),new Kn(e).extractAllTo(n,!0);let i=nr(n);if(!i)throw new Error("Could not find a .app bundle inside the iOS artifact zip.");return i}if(e.endsWith(".app"))return e;throw new Error("iOS Maestro runs need a .app bundle or .app.zip artifact.")}function bs(e,t){let n=k.join(e,"Info.plist");if(!O.existsSync(n))return O.appendFileSync(t,`Could not find Info.plist in ${e}; skipping uninstall.
1861
1861
  `),null;let i=Ge("/usr/bin/plutil",["-extract","CFBundleIdentifier","raw","-o","-",n],{encoding:"utf-8",env:process.env}),r=String(i.stdout||"").trim();return i.status!==0||!r?(O.appendFileSync(t,`Could not read CFBundleIdentifier from Info.plist; skipping uninstall.
1862
1862
  `),null):r}function Wi(e,t,n,i){let r=k.join(e,n);qe("xcrun",["simctl","io",i||"booted","screenshot",r],t)!==0&&O.appendFileSync(t,`[WARN] Could not capture iOS simulator screenshot: ${n}
1863
- `)}function yc(e,t,n){let i=k.join(e,"ios-simulator-recording.mp4");O.appendFileSync(t,`Starting iOS simulator recording: ${i}
1864
- `);let r=as("xcrun",["simctl","io",n||"booted","recordVideo",i],{stdio:["ignore","pipe","pipe"],env:process.env});return r.stdout?.on("data",o=>{O.appendFileSync(t,o)}),r.stderr?.on("data",o=>{O.appendFileSync(t,o)}),r.on("error",o=>{O.appendFileSync(t,`[WARN] Could not start iOS simulator recording: ${o.message}
1865
- `)}),r}async function is(e,t){e&&await new Promise(n=>{let i=!1,r=()=>{i||(i=!0,n())};e.once("exit",r),e.once("close",r),e.killed||(O.appendFileSync(t,`Stopping iOS simulator recording...
1863
+ `)}function Sc(e,t,n){let i=k.join(e,"ios-simulator-recording.mp4");O.appendFileSync(t,`Starting iOS simulator recording: ${i}
1864
+ `);let r=cs("xcrun",["simctl","io",n||"booted","recordVideo",i],{stdio:["ignore","pipe","pipe"],env:process.env});return r.stdout?.on("data",o=>{O.appendFileSync(t,o)}),r.stderr?.on("data",o=>{O.appendFileSync(t,o)}),r.on("error",o=>{O.appendFileSync(t,`[WARN] Could not start iOS simulator recording: ${o.message}
1865
+ `)}),r}async function ss(e,t){e&&await new Promise(n=>{let i=!1,r=()=>{i||(i=!0,n())};e.once("exit",r),e.once("close",r),e.killed||(O.appendFileSync(t,`Stopping iOS simulator recording...
1866
1866
  `),e.kill("SIGINT")),setTimeout(()=>{!i&&!e.killed&&(O.appendFileSync(t,`[WARN] iOS simulator recording did not stop after SIGINT; sending SIGKILL.
1867
- `),e.kill("SIGKILL")),r()},5e3).unref?.()})}function Ac(e,t,n){let i=ys(e,t);if(!i)return;O.appendFileSync(t,`Uninstalling existing iOS app data for ${i} if present...
1867
+ `),e.kill("SIGKILL")),r()},5e3).unref?.()})}function bc(e,t,n){let i=bs(e,t);if(!i)return;O.appendFileSync(t,`Uninstalling existing iOS app data for ${i} if present...
1868
1868
  `),qe("xcrun",["simctl","uninstall",n||"booted",i],t)!==0&&O.appendFileSync(t,`No existing app install removed for ${i}; continuing.
1869
- `)}function Sc(e,t){if(!e?.appId)return;if(O.appendFileSync(t,`Cleaning up installed app after Maestro run...
1869
+ `)}function Ic(e,t){if(!e?.appId)return;if(O.appendFileSync(t,`Cleaning up installed app after Maestro run...
1870
1870
  `),e.platform==="ios"){let r=qe("xcrun",["simctl","uninstall",e.deviceId||"booted",e.appId],t);r===0?O.appendFileSync(t,`Uninstalled iOS app ${e.appId} after Maestro run.
1871
1871
  `):O.appendFileSync(t,`Warning: failed to uninstall iOS app ${e.appId} after Maestro run: xcrun simctl uninstall exited with code ${r}
1872
1872
  `);return}let n=e.deviceId?["-s",e.deviceId]:[],i=qe("adb",[...n,"uninstall",e.appId],t);i===0?O.appendFileSync(t,`Uninstalled Android app ${e.appId} after Maestro run.
1873
1873
  `):O.appendFileSync(t,`Warning: failed to uninstall Android app ${e.appId} after Maestro run: adb uninstall exited with code ${i}
1874
- `)}function bc(e,t){let n=Ge("adb",["devices"],{encoding:"utf-8",env:process.env});if(n.status!==0||n.error)return O.appendFileSync(t,`[WARN] Could not list Android devices before install; using adb default target.
1874
+ `)}function Ec(e,t){let n=Ge("adb",["devices"],{encoding:"utf-8",env:process.env});if(n.status!==0||n.error)return O.appendFileSync(t,`[WARN] Could not list Android devices before install; using adb default target.
1875
1875
  `),null;let i=String(n.stdout||"").split(`
1876
1876
  `).map(r=>r.trim().split(/\s+/)).filter(r=>r.length>=2&&r[1]==="device").map(r=>r[0]).filter(Boolean);return e&&i.includes(e)?(O.appendFileSync(t,`Using Android device ${e} for install and cleanup.
1877
1877
  `),e):i.length===1?(O.appendFileSync(t,`Using Android device ${i[0]} for install and cleanup.
1878
1878
  `),i[0]):(i.length>1&&O.appendFileSync(t,`[WARN] Multiple Android devices are connected; using adb default target for install and cleanup.
1879
- `),null)}function Ic(e,t){let i=(Yi("aapt",["dump","badging",e])||Yi("aapt2",["dump","badging",e]))?.match(/package:\s+name='([^']+)'/);if(i?.[1])return i[1];let o=Yi("apkanalyzer",["manifest","application-id",e])?.split(/\s+/).find(Boolean);return o||(O.appendFileSync(t,`[WARN] Could not determine Android application id from APK; post-run uninstall will be skipped.
1880
- `),null)}function Yi(e,t){for(let n of Ec(e)){let i=Ge(n,t,{encoding:"utf-8",env:process.env,maxBuffer:10485760});if(i.status===0&&i.stdout)return String(i.stdout).trim()}return null}function Ec(e){let t=process.platform==="win32"&&!e.endsWith(".exe")?`${e}.exe`:e,n=[];if(e==="aapt"||e==="aapt2")for(let r of rs()){let o=k.join(r,"build-tools");for(let s of os(o))n.push(k.join(o,s,t))}if(e==="apkanalyzer")for(let r of rs()){n.push(k.join(r,"cmdline-tools","latest","bin",t));let o=k.join(r,"cmdline-tools");for(let s of os(o))n.push(k.join(o,s,"bin",t));n.push(k.join(r,"tools","bin",t))}let i=_c(e);return i&&n.unshift(i),n.push(t),[...new Set(n)]}function rs(){let e=[process.env.ANDROID_HOME,process.env.ANDROID_SDK_ROOT];return process.platform==="darwin"?e.push(k.join(Rt.homedir(),"Library","Android","sdk")):process.platform==="linux"&&e.push(k.join(Rt.homedir(),"Android","Sdk"),k.join(Rt.homedir(),"Android","sdk"),"/opt/android-sdk","/usr/lib/android-sdk"),[...new Set(e.filter(t=>!!t))]}function os(e){try{return O.readdirSync(e,{withFileTypes:!0}).filter(t=>t.isDirectory()).map(t=>t.name).sort((t,n)=>n.localeCompare(t,void 0,{numeric:!0}))}catch{return[]}}function _c(e){let t=process.platform==="win32"?"where":"/usr/bin/env",n=process.platform==="win32"?[e]:["which",e],i=Ge(t,n,{encoding:"utf-8",env:process.env});return i.status!==0||!i.stdout?null:String(i.stdout).split(`
1881
- `)[0]?.trim()||null}async function qi(e,t,n){if(!O.existsSync(e))return;let i=O.readFileSync(e),r;for(let o=1;o<=3;o+=1)try{await en.put(t,i,{headers:{"Content-Type":n,"Content-Length":String(i.length)},maxBodyLength:1/0,maxContentLength:1/0,timeout:12e4});return}catch(s){if(r=s,!ps(s)||o>=3)break;await tr(2e3*o)}throw r}async function ss(e,t,n,i){let r=k.join(n,"report.xml"),o=k.join(t,"artifacts.tar.gz");try{await qi(r,e.junitUploadUrl,"application/xml")}catch(s){O.appendFileSync(i,`[WARN] Failed to upload JUnit report: ${s.message||s}
1879
+ `),null)}function _c(e,t){let i=(Yi("aapt",["dump","badging",e])||Yi("aapt2",["dump","badging",e]))?.match(/package:\s+name='([^']+)'/);if(i?.[1])return i[1];let o=Yi("apkanalyzer",["manifest","application-id",e])?.split(/\s+/).find(Boolean);return o||(O.appendFileSync(t,`[WARN] Could not determine Android application id from APK; post-run uninstall will be skipped.
1880
+ `),null)}function Yi(e,t){for(let n of wc(e)){let i=Ge(n,t,{encoding:"utf-8",env:process.env,maxBuffer:10485760});if(i.status===0&&i.stdout)return String(i.stdout).trim()}return null}function wc(e){let t=process.platform==="win32"&&!e.endsWith(".exe")?`${e}.exe`:e,n=[];if(e==="aapt"||e==="aapt2")for(let r of as()){let o=k.join(r,"build-tools");for(let s of ls(o))n.push(k.join(o,s,t))}if(e==="apkanalyzer")for(let r of as()){n.push(k.join(r,"cmdline-tools","latest","bin",t));let o=k.join(r,"cmdline-tools");for(let s of ls(o))n.push(k.join(o,s,"bin",t));n.push(k.join(r,"tools","bin",t))}let i=$c(e);return i&&n.unshift(i),n.push(t),[...new Set(n)]}function as(){let e=[process.env.ANDROID_HOME,process.env.ANDROID_SDK_ROOT];return process.platform==="darwin"?e.push(k.join(Rt.homedir(),"Library","Android","sdk")):process.platform==="linux"&&e.push(k.join(Rt.homedir(),"Android","Sdk"),k.join(Rt.homedir(),"Android","sdk"),"/opt/android-sdk","/usr/lib/android-sdk"),[...new Set(e.filter(t=>!!t))]}function ls(e){try{return O.readdirSync(e,{withFileTypes:!0}).filter(t=>t.isDirectory()).map(t=>t.name).sort((t,n)=>n.localeCompare(t,void 0,{numeric:!0}))}catch{return[]}}function $c(e){let t=process.platform==="win32"?"where":"/usr/bin/env",n=process.platform==="win32"?[e]:["which",e],i=Ge(t,n,{encoding:"utf-8",env:process.env});return i.status!==0||!i.stdout?null:String(i.stdout).split(`
1881
+ `)[0]?.trim()||null}async function qi(e,t,n){if(!O.existsSync(e))return;let i=O.readFileSync(e),r;for(let o=1;o<=3;o+=1)try{await en.put(t,i,{headers:{"Content-Type":n,"Content-Length":String(i.length)},maxBodyLength:1/0,maxContentLength:1/0,timeout:12e4});return}catch(s){if(r=s,!gs(s)||o>=3)break;await tr(2e3*o)}throw r}async function ds(e,t,n,i){let r=k.join(n,"report.xml"),o=k.join(t,"artifacts.tar.gz");try{await qi(r,e.junitUploadUrl,"application/xml")}catch(s){O.appendFileSync(i,`[WARN] Failed to upload JUnit report: ${s.message||s}
1882
1882
  `)}try{await qi(i,e.logUploadUrl,"text/plain")}catch(s){O.appendFileSync(i,`[WARN] Failed to upload runner log: ${s.message||s}
1883
1883
  `)}try{qe("tar",["-czf",o,"-C",t,k.basename(n)],i),await qi(o,e.artifactsUploadUrl,"application/gzip")}catch(s){O.appendFileSync(i,`[WARN] Failed to upload Maestro artifacts: ${s.message||s}
1884
- `)}}function wc(e){if(!e.endsWith(".apk"))return C.error(T.red("Local Android Maestro runs need an APK artifact.")),!1;C.info(T.dim("Installing APK on local Android device/emulator..."));let t=Ge("adb",["install","-r",e],{stdio:"inherit",env:process.env});return t.error?(C.error(T.red(`adb failed to start: ${t.error.message}`)),!1):t.status!==0?(C.error(T.red(`adb install failed with exit code ${t.status??1}`)),!1):!0}function $c(e,t){if(e.endsWith(".ipa"))return C.error(T.red("Local iOS Maestro runs need an iOS Simulator .app.zip artifact, not an App Store .ipa.")),!1;let n=e;if(e.endsWith(".zip")){let r=k.join(t,"ios-app");O.mkdirSync(r,{recursive:!0}),new Kn(e).extractAllTo(r,!0);let o=nr(r);if(!o)return C.error(T.red("Could not find a .app bundle inside the downloaded zip.")),!1;n=o}if(!n.endsWith(".app"))return C.error(T.red("Local iOS Maestro runs need an iOS Simulator .app bundle or .app.zip artifact.")),!1;C.info(T.dim("Installing app on booted iOS Simulator..."));let i=Ge("xcrun",["simctl","install","booted",n],{stdio:"inherit",env:process.env});return i.error?(C.error(T.red(`xcrun failed to start: ${i.error.message}`)),!1):i.status!==0?(C.error(T.red(`iOS Simulator install failed with exit code ${i.status??1}`)),!1):!0}function nr(e){let t=O.readdirSync(e,{withFileTypes:!0});for(let n of t){let i=k.join(e,n.name);if(n.isDirectory()&&n.name.endsWith(".app"))return i;if(n.isDirectory()){let r=nr(i);if(r)return r}}return null}function vc(e,t){let n=String(t||"").toLowerCase();return n==="android"?e.find(i=>vt(i,".apk")):n==="ios"?e.find(i=>vt(i,".app.zip"))||e.find(i=>vt(i,".zip")):e.find(i=>vt(i,".apk"))||e.find(i=>vt(i,".app.zip"))||e.find(i=>vt(i,".zip"))}function vt(e,t){return String(e?.name||e?.downloadUrl||e?.url||"").toLowerCase().endsWith(t)}function ir(e){let t=String(e||"").toLowerCase();if(t.includes(".apk"))return"android";if(t.includes(".app.zip")||t.endsWith(".app")||t.includes(".ipa"))return"ios"}function As(e){if(e)try{return k.basename(new URL(e).pathname)||void 0}catch{return k.basename(e)||void 0}}function Rc(e){return e?e.match(/[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/i)?.[0]:void 0}function Ss(e,t){if(!e.jsonOutput)return;let n=k.resolve(e.jsonOutput),i={...t,updatedAt:new Date().toISOString()};try{let r=k.dirname(n);r&&r!=="."&&O.mkdirSync(r,{recursive:!0}),O.writeFileSync(n,JSON.stringify(i,null,2))}catch(r){C.warn(T.yellow(`Could not write Maestro metadata JSON: ${r.message}`))}}function Pc(e,t){if(!e.jsonOutput)return;let n=k.resolve(e.jsonOutput),i={mode:"local",...t,updatedAt:new Date().toISOString()};try{let r=k.dirname(n);r&&r!=="."&&O.mkdirSync(r,{recursive:!0}),O.writeFileSync(n,JSON.stringify(i,null,2))}catch(r){C.warn(T.yellow(`Could not write Maestro metadata JSON: ${r.message}`))}}import{spinner as ot,text as on,select as dr,isCancel as it,cancel as cr,log as Os}from"@clack/prompts";import G from"chalk";import Y from"fs";import fe from"path";import{spawn as Nc,spawnSync as At}from"child_process";import Ds from"axios";import bt from"os";import fr from"crypto";import Oc from"crypto";import Pt from"axios";import bs from"fs";var rn=6e4,Dc=12e4,rr=4,nn=e=>encodeURIComponent(e),Cc=e=>new Promise(t=>setTimeout(t,e));async function Ot(e,t){let n;for(let i=1;i<=rr;i++)try{return await t()}catch(r){if(n=r,i>=rr||!Tc(r))throw r;let o=Number(r.response?.headers?.["retry-after"]),s=Number.isFinite(o)&&o>0?o*1e3:Math.min(2e3*i*i,15e3);console.log(`[Google Play] ${e} failed (attempt ${i}/${rr}); retrying in ${Math.round(s/1e3)}s...`),await Cc(s)}throw n}function Tc(e){let t=e.response?.status;return t?t===408||t===409||t===425||t===429||t>=500:!0}async function Es(e){let{packageName:t,serviceAccount:n,aabPath:i,track:r,releaseStatus:o,userFraction:s,changesNotSentForReview:a}=e,l;try{let c={Authorization:`Bearer ${await Is(n)}`,Connection:"close"},u=nn(t);if(l=(await Ot("create edit",()=>Pt.post(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${u}/edits`,{},{headers:c,timeout:rn}))).data.id,!l)throw new Error("Google Play edit insert succeeded but did not return an edit id.");let m=nn(l),h=bs.statSync(i),g=await Ot("upload AAB",()=>Pt.post(`https://androidpublisher.googleapis.com/upload/androidpublisher/v3/applications/${u}/edits/${m}/bundles`,bs.createReadStream(i),{headers:{...c,"Content-Type":"application/octet-stream","Content-Length":h.size},maxBodyLength:1/0,maxContentLength:1/0,params:{uploadType:"media"},timeout:Dc})),S=Number(g.data.versionCode);if(!S)throw new Error("Google Play upload succeeded but did not return a versionCode.");let b={versionCodes:[String(S)],status:o};return(o==="inProgress"||o==="halted")&&typeof s=="number"&&(b.userFraction=s),await Ot("update track",()=>Pt.put(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${u}/edits/${m}/tracks/${nn(r)}`,{releases:[b]},{headers:c,timeout:rn})),await Ot("commit edit",()=>Pt.post(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${u}/edits/${m}:commit`,{},{headers:c,params:a?{changesNotSentForReview:!0}:void 0,timeout:rn})),{editId:l,versionCode:S,track:r,releaseStatus:o,userFraction:s}}catch(d){if(l)try{let u=await Is(n);await Ot("delete edit",()=>Pt.delete(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${nn(t)}/edits/${nn(l)}`,{headers:{Authorization:`Bearer ${u}`,Connection:"close"},timeout:rn}))}catch{}let c=d.response?.data?.error?.message||d.message;throw new Error(`Google Play API Error: ${c}`)}}async function Is(e){let t=Math.floor(Date.now()/1e3),n=t+3600,i={alg:"RS256",typ:"JWT"},r={iss:e.client_email,sub:e.client_email,aud:"https://oauth2.googleapis.com/token",iat:t,exp:n,scope:"https://www.googleapis.com/auth/androidpublisher"},o=Buffer.from(JSON.stringify(i)).toString("base64url"),s=Buffer.from(JSON.stringify(r)).toString("base64url"),a=`${o}.${s}`,l=Oc.createSign("RSA-SHA256");l.update(a);let d=l.sign(e.private_key,"base64url"),c=`${a}.${d}`;return(await Ot("OAuth token exchange",()=>Pt.post("https://oauth2.googleapis.com/token",{grant_type:"urn:ietf:params:oauth:grant-type:jwt-bearer",assertion:c},{headers:{Connection:"close"},timeout:rn}))).data.access_token}var kc=5e3,xc=12,Cs=100,or=24,_s=8e3,Lc={completed:"completed",draft:"draft",halted:"halted",inprogress:"inProgress","in-progress":"inProgress"},Mc=e=>e?.type==="google_service_account",Yn=e=>e?.bundleId||e?.packageName||e?.meta?.packageName||e?.meta?.bundleId,Ts=e=>e.submitArgs||process.argv.slice(3).join(" ");async function qn(e){let t=ot(),n=Ae(),i=Uc(e);if(!i){process.exitCode=1;return}let r=e.projectId||i.projectId,o=e.profile||e.buildProfile||"production";if(!r){ee(`${f.configFileName} is missing projectId. Pass --project-id in runner mode.`),process.exitCode=1;return}i.projectId=r,se(G.dim(`Submit for project: ${i.name||r} | Profile: ${o}`));let s=e.platform;if(!s){let y=await dr({message:"Select platform to submit:",options:[{value:"ios",label:"iOS (App Store Connect / TestFlight)"},{value:"android",label:"Android (Google Play Console)"}]});if(it(y)){cr("Operation cancelled");return}s=y}if(s=String(s).toLowerCase(),s!=="ios"&&s!=="android"){ee(`Platform ${s} is not supported. Use 'ios' or 'android'.`),process.exitCode=1;return}let a=s==="ios"&&!e.local&&e.sshHost?eu(i,o,e):null;if(s==="ios"&&!e.local&&!a){await Fc(i,o,e);return}let l=e.submitId,d=!!(e.local&&l),c=l||null,u=async(y,$={})=>{c&&await Gc(r,c,{status:y,...$})},p=s==="android"?e.packageName||e.androidPackage||Xc(i,o):void 0,m=s==="ios"?e.bundleId||e.iosBundleIdentifier||Qc(i,o):void 0,h,g,S,b=!1;try{s==="android"&&(h=e.track||i.submit?.[o]?.android?.track||i.submit?.production?.android?.track||"internal",g=tu(i,o,e.releaseStatus),S=iu(i,o,e.rollout),b=ru(i,o,e.changesNotSentForReview),ou(g,S))}catch(y){ee(y.message),process.exitCode=1;return}if(s==="android"&&!d&&(c=await Bc(i,r,s,o,e,{packageName:p,track:h,releaseStatus:g,rollout:S,changesNotSentForReview:b}),!c)){ee("Could not create submission tracking record. Submission was not started."),process.exitCode=1;return}await u("running",{platform:s,profile:o,packageName:p,track:h,releaseStatus:g,rollout:S,startTime:Date.now(),...d?zc():{}});let A=null,D=null;try{D=await su(r,s,e,n?.token),A=D?.filePath||null}catch(y){await u("failed",{error:`Failed to resolve submission artifact: ${y.message}`,endTime:Date.now()}),ee(`Failed to resolve submission artifact: ${y.message}`),process.exitCode=1;return}if(!A){let y=lu(s,e);await u("failed",{error:y,endTime:Date.now()}),ee(y),process.exitCode=1;return}await u("running",{buildId:D?.buildId,artifactName:D?.artifactName,artifactSource:D?.source}),se(`Using artifact: ${G.green(fe.basename(A))} `),t.start("Fetching submission credentials from Dashboard...");let I;try{let $=(await w.get(`/credentials/${r}`)).data.credentials||[];if(s==="android"&&!p){t.stop("Package name missing"),ee("Could not resolve Android package name. Set android.package in mach.config.json/app.json."),await u("failed",{error:"Could not resolve Android package name.",endTime:Date.now()}),process.exitCode=1;return}let v=$.filter(Mc),R=s==="ios"?$.filter(x=>x.type==="asc_api_key"):Zc(v,p);if(R.length===0){if(t.stop("Credentials missing"),ee(s==="android"?`No Google Play service credential found for package ${p}.`:`No Service Credentials found for ${s}.`),s==="android"){let x=v.map(Yn).filter(Boolean).join(", ");x&&se(`Found Google Play service credential(s) for: ${x}`),se(`Use '${f.nameLower} credentials:service --platform android --package-name ${p}' or upload it under that package in the Dashboard.`)}else se(`Use '${f.nameLower} credentials:service --platform ${s}' or use the Dashboard to upload them.`);await u("failed",{error:`No submission credentials found for ${s}.`,endTime:Date.now()}),process.exitCode=1;return}if(I=Wc(R,e.credentialId),!I&&s==="ios"&&m&&(I=Yc(R,m)),I||R.length===1)I=I||R[0],t.stop(`Using: ${I.name}`),s==="android"&&Yn(I)==="*"&&se(G.yellow(`Using legacy wildcard Google Play credential for ${p}. Upload a package-scoped credential when possible.`));else{if(t.stop("Multiple credentials found"),qc()){let P=R.map(L=>`${L.name||"credential"} (${L.credentialId||L.id||"no-id"})`).join(", ");ee(`Multiple ${s==="ios"?"App Store Connect":"Google Play"} credentials found. Use --credential-id in CI. Available: ${P}`),await u("failed",{error:"Multiple submission credentials found; --credential-id is required in CI.",endTime:Date.now()}),process.exitCode=1;return}let x=await dr({message:`Choose a ${s==="ios"?"App Store Connect":"Google Play"} credential:`,options:R.map(P=>({value:P.credentialId,label:P.name,hint:`${P.keyId?`ID: ${P.keyId}`:""} ${P.issuerId?`(Issuer: ${P.issuerId.substring(0,8)}...)`:""}`}))});if(it(x)){cr("Submission cancelled"),await u("failed",{error:"Submission cancelled while selecting credential.",endTime:Date.now()}),process.exitCode=1;return}I=R.find(P=>P.credentialId===x),se(`Using selected: ${G.green(I.name)}`)}}catch(y){t.stop("Failed to fetch credentials"),ee(`API Error: ${y.message} `),await u("failed",{error:`Failed to fetch credentials: ${y.message}`,endTime:Date.now()}),process.exitCode=1;return}let H=Y.mkdtempSync(fe.join(bt.tmpdir(),`${f.nameLower}-submit-`)),Q=I.keyId||I.meta?.keyId,z=I.issuerId||I.meta?.issuerId,me=I.type==="asc_api_key"?`AuthKey_${Q}.p8`:"service-account.json",oe=fe.join(H,me);t.start("Downloading secure key...");try{let y=await w.get(`/credentials/${I.credentialId}/download`,{params:{projectId:r,format:"raw"}});if(y.data.status!=="success"||!y.data.downloadUrl)throw new Error("Failed to get secure download URL");let $=await Ds.get(y.data.downloadUrl,{responseType:"arraybuffer"});Y.writeFileSync(oe,Buffer.from($.data)),t.stop("Key downloaded to secure temp storage")}catch(y){t.stop("Download failed"),ee(`Failed to download key: ${y.message}`);try{Y.rmSync(H,{recursive:!0,force:!0})}catch{}await u("failed",{error:`Failed to download credential key: ${y.message}`,endTime:Date.now()}),process.exitCode=1;return}se(G.blue(`Initiating ${s==="ios"?"TestFlight":"Google Play"} submission...`));let ke=!1,ye;try{if(s==="ios"){if(!Q){let $=await on({message:"Enter App Store Connect Key ID (e.g. 2X948D...):",validate:v=>v.length>0?void 0:"Key ID is required"});if(it($)){await u("failed",{error:"Submission cancelled while entering ASC Key ID.",endTime:Date.now()}),process.exitCode=1;return}Q=$}if(!z||z==="undefined"){let $=await on({message:"Enter App Store Connect Issuer ID (Found on ASC Keys page):",validate:v=>v.length>0?void 0:"Issuer ID is required"});if(it($)){await u("failed",{error:"Submission cancelled while entering ASC Issuer ID.",endTime:Date.now()}),process.exitCode=1;return}z=$}se(`Using ASC Key ID: ${Q}`),se(`Using ASC Issuer ID: ${z}`);let y=a?await cu(A,oe,z,Q,m,a):await du(A,oe,z,Q,m);pr(`${s==="ios"?"App Store":"Google Play"} submission successful!`),ke=!0}else ye=await gu(A,oe,h||"internal",p,g||"completed",S,b,o),pr("Google Play submission successful!"),ke=!0}catch(y){ee(`Submission failed: ${y.message}`),await u("failed",{error:y.message,endTime:Date.now()}),rt(e,{status:"failed",projectId:r,submitId:c,platform:s,profile:o,buildId:D?.buildId||e.buildId,artifactName:D?.artifactName,error:y.message,dashboardUrl:c?St(c,r):void 0}),process.exitCode=1}finally{ke&&(await u("success",{endTime:Date.now(),versionCode:ye?.versionCode,track:h,releaseStatus:g}),rt(e,{status:"success",projectId:r,submitId:c,platform:s,profile:o,buildId:D?.buildId||e.buildId,artifactName:D?.artifactName,versionCode:ye?.versionCode,track:h,releaseStatus:g,dashboardUrl:c?St(c,r):void 0})),Du(H),A&&A.includes(`${f.nameLower}-artifact-`)}}function Uc(e){let t=`./${f.configFileName}`;if(Y.existsSync(t))try{return JSON.parse(Y.readFileSync(t,"utf-8"))}catch(n){return ee(`Failed to read ${f.configFileName}: ${n.message}`),null}return e.projectId?{projectId:e.projectId}:(ee(`No ${f.configFileName} found. Run \`${f.nameLower} init\` or \`${f.nameLower} link\` first.`),null)}async function Fc(e,t,n){let i=n.projectId||e.projectId;if(!i){ee(`${f.configFileName} is missing projectId.`),process.exitCode=1;return}let r=n.submitId||fr.randomUUID(),o=!!n.latest||!n.buildId,s=jc({...n,latest:o,profile:t,projectId:i,submitId:r}),a={projectId:i,submitId:r,platform:"ios",profile:t,latest:o,buildId:n.buildId,credentialId:n.credentialId,status:"pending",source:"cli",submitArgs:Ts(n),runnerArgs:s,runnerCommand:[f.nameLower,"submit",...s].map(Jc).join(" "),appName:e.name,startTime:Date.now()},l=ot();l.start("Queuing iOS submit on macOS runner...");try{let d=await w.post("/submissions",a),c=d.data?.submission||d.data?.submit||{},u=d.data?.dashboardUrl||St(r,i);l.stop("iOS submit queued"),se(`Submission ID: ${G.cyan(r)}`),se(`Dashboard: ${G.blue.underline(u)}`),rt(n,{status:"pending",projectId:i,submitId:r,platform:"ios",profile:t,latest:o,buildId:n.buildId,dashboardUrl:u}),await Hc(i,r,n)}catch(d){l.stop("Could not queue iOS submit"),ee(Kc(d)),process.exitCode=1}}async function Bc(e,t,n,i,r,o={}){let s=r.submitId||fr.randomUUID(),a=!!r.latest||!r.buildId,l={projectId:t,submitId:s,platform:n,profile:i,latest:a,buildId:r.buildId,credentialId:r.credentialId,status:"running",source:"cli-direct",submitArgs:Ts(r),appName:e.name,startTime:Date.now(),...o};try{let d=await w.post("/submissions",l),c=d.data?.submission||d.data?.submit||{},u=d.data?.dashboardUrl||c.dashboardUrl||St(s,t);return se(`Submission ID: ${G.cyan(s)}`),se(`Dashboard: ${G.blue.underline(u)}`),rt(r,{status:"running",projectId:t,submitId:s,platform:n,profile:i,latest:a,buildId:r.buildId,dashboardUrl:u}),s}catch(d){let c=d.response?.data?.message||d.response?.data?.error||d.message;return se(G.yellow(`Could not create submission tracking record: ${c}`)),null}}function jc(e){let t=["--local","--submit-id",e.submitId,"--project-id",e.projectId,"--platform","ios","--profile",e.profile||"production"];return e.buildId?t.push("--build-id",e.buildId):t.push("--latest"),e.credentialId&&t.push("--credential-id",e.credentialId),e.bundleId&&t.push("--bundle-id",e.bundleId),e.packageName&&t.push("--package-name",e.packageName),e.quiet&&t.push("--quiet"),e.jsonOutput&&t.push("--json-output",e.jsonOutput),t.filter(n=>n!=null&&n!=="")}async function Hc(e,t,n){let i=ot(),r=0,o=0;for(n.quiet||i.start("Waiting for iOS submit runner...");;)try{let s=await w.get(`/submissions/${e}/${t}`),a=s.data?.submission||s.data?.submit||s.data,l=String(a?.status||"pending").toLowerCase();r=0;let d=Array.isArray(a?.logs)?a.logs:[];for(let c=o;c<d.length;c++){let u=d[c];u&&console.log(G.dim(String(u)))}if(o=d.length,["success","completed","succeeded"].includes(l)){n.quiet||i.stop("iOS submit completed"),pr("App Store submission successful!"),rt(n,{status:"success",projectId:e,submitId:t,platform:"ios",profile:a?.profile||n.profile||"production",buildId:a?.buildId||n.buildId,artifactName:a?.artifactName,dashboardUrl:a?.dashboardUrl||St(t,e)});return}if(["failed","error","cancelled","canceled"].includes(l)){n.quiet||i.stop("iOS submit failed");let c=a?.error||a?.message||"Unknown iOS submit failure.";ee(c),rt(n,{status:"failed",projectId:e,submitId:t,platform:"ios",profile:a?.profile||n.profile||"production",buildId:a?.buildId||n.buildId,artifactName:a?.artifactName,error:c,dashboardUrl:a?.dashboardUrl||St(t,e)}),process.exitCode=1;return}n.quiet||i.message(`iOS submit ${l}...`),await ur(kc)}catch(s){if(r++,r>=xc){n.quiet||i.stop("Lost connection to iOS submit status"),ee(`Could not fetch iOS submit status after ${r} attempts: ${s.message}`),process.exitCode=1;return}await ur(Math.min(2e3*r,15e3))}}async function Gc(e,t,n){let i;for(let r=1;r<=3;r++)try{await w.patch(`/submissions/${e}/${t}`,n);return}catch(o){if(i=o,r>=3||!Vc(o))break;await ur(1e3*r)}Os.warn(G.dim(`Could not report submission status: ${i?.message||i}`))}function Vc(e){let t=e.response?.status;return!t||t===408||t===409||t===425||t===429||t>=500}function zc(){let e={gitlabJobId:process.env.CI_JOB_ID,gitlabJobUrl:process.env.CI_JOB_URL,gitlabPipelineId:process.env.CI_PIPELINE_ID,gitlabProjectId:process.env.CI_PROJECT_ID,gitlabProjectPath:process.env.CI_PROJECT_PATH};return Object.fromEntries(Object.entries(e).filter(([,t])=>!!t))}function Kc(e){let t=e.response?.status,n=e.response?.data?.message||e.response?.data?.error;return t===404||t===405?["Managed iOS submit is not enabled on this Mach API yet.","Deploy the API/dashboard submission orchestration endpoint, then retry the same command.","Expected API: POST /submissions and GET/PATCH /submissions/:projectId/:submitId."].join(`
1885
- `):n||e.message||String(e)}function St(e,t){if(!e)return He;let n=t?`?projectId=${encodeURIComponent(t)}`:"";return`${He}/submissions/${e}${n}`}function rt(e,t){if(!e.jsonOutput)return;let n=fe.resolve(e.jsonOutput),i={...t,url:t.url||t.dashboardUrl||St(t.submitId,t.projectId),updatedAt:new Date().toISOString()};try{let r=fe.dirname(n);r&&r!=="."&&Y.mkdirSync(r,{recursive:!0}),Y.writeFileSync(n,JSON.stringify(i,null,2))}catch(r){Os.warn(G.yellow(`Could not write submission metadata JSON: ${r.message}`))}}function Wc(e,t){return t&&e.find(n=>n.credentialId===t||n.id===t||n.keyId===t||n.meta?.keyId===t)||null}function Yc(e,t){let n=e.filter(i=>[i.bundleId,i.bundleIdentifier,i.appIdentifier,i.meta?.bundleId,i.meta?.bundleIdentifier,i.meta?.appIdentifier].filter(Boolean).map(String).includes(t));return n.length===1?n[0]:null}function qc(){return process.env.CI==="true"||process.env.CI==="1"||!process.stdin.isTTY}function ur(e){return new Promise(t=>setTimeout(t,e))}function Jc(e){return/^[a-zA-Z0-9_./:=@-]+$/.test(e)?e:`'${e.replace(/'/g,"'\\''")}'`}function Xc(e,t){if(e.submit?.[t]?.android?.package)return e.submit[t].android.package;let n=Mn(e,t);if(n)return n;let i=fe.join(process.cwd(),"app.json");if(Y.existsSync(i))try{return JSON.parse(Y.readFileSync(i,"utf-8")).expo?.android?.package}catch{}let r=fe.join(process.cwd(),"app.config.json");if(Y.existsSync(r))try{let o=JSON.parse(Y.readFileSync(r,"utf-8"));return o.expo?.android?.package||o.android?.package}catch{}}function Zc(e,t){let n=e.filter(o=>Yn(o)===t);if(n.length>0)return n;let i=e.filter(o=>{let s=Yn(o);return!s||s==="*"});return e.length>0&&e.length===i.length?i:[]}function Qc(e,t){return e.submit?.[t]?.ios?.bundleIdentifier?e.submit[t].ios.bundleIdentifier:e.submit?.[t]?.ios?.bundleId?e.submit[t].ios.bundleId:Un(e,t)}function eu(e,t,n){let i=e.submit?.[t]?.ios||{},r=e.submit?.production?.ios||{},o=n.sshHost||i.sshHost||r.sshHost||process.env.MACH_IOS_SUBMIT_SSH_HOST;return o?{sshHost:o,sshUser:n.sshUser||i.sshUser||r.sshUser||process.env.MACH_IOS_SUBMIT_SSH_USER||process.env.USER||"ubuntu",sshKey:n.sshKey||i.sshKey||r.sshKey||process.env.MACH_IOS_SUBMIT_SSH_KEY}:null}function tu(e,t,n){let i=n||e.submit?.[t]?.android?.releaseStatus||e.submit?.production?.android?.releaseStatus||"completed";return nu(i)}function nu(e){let t=Lc[String(e).trim().toLowerCase()];if(!t)throw new Error(`Invalid Android release status "${e}". Use completed, draft, halted, or inProgress.`);return t}function iu(e,t,n){let i=n??e.submit?.[t]?.android?.rollout??e.submit?.[t]?.android?.userFraction??e.submit?.[t]?.android?.rolloutFraction??e.submit?.production?.android?.rollout??e.submit?.production?.android?.userFraction??e.submit?.production?.android?.rolloutFraction;if(i==null||i==="")return;let r=Number(i);if(!Number.isFinite(r)||r<=0||r>=1)throw new Error(`Invalid Android rollout fraction "${i}". Use a number greater than 0 and less than 1, for example 0.1.`);return r}function ru(e,t,n){let i=n??e.submit?.[t]?.android?.changesNotSentForReview??e.submit?.[t]?.android?.changes_not_sent_for_review??e.submit?.production?.android?.changesNotSentForReview??e.submit?.production?.android?.changes_not_sent_for_review??!1;return i===!0||i==="true"||i==="1"}function ou(e,t){if(e==="inProgress"&&t===void 0)throw new Error("Google Play staged rollout requires --rollout <fraction> when --release-status inProgress is used.");if(e!=="inProgress"&&e!=="halted"&&t!==void 0)throw new Error("Android rollout fraction can only be used with --release-status inProgress or halted.")}async function su(e,t,n,i){let r=n.buildId?"id":n.latest?"latest":null;if(!r){let s=await dr({message:"Select artifact source:",options:[{value:"latest",label:`Latest Production Build (${f.name})`},{value:"id",label:`Input Build ID (${f.name})`},{value:"url",label:"Remote URL"},{value:"local",label:"Local File Path"}]});if(it(s))return cr("Operation cancelled"),null;r=s}if(r==="local"){let s=await on({message:"Enter path to artifact (.ipa/.aab):",validate:a=>{if(!Y.existsSync(a))return"File not found";if(t==="ios"&&!a.endsWith(".ipa"))return"Must be an .ipa file";if(t==="android"&&!a.endsWith(".aab"))return"Must be an .aab file"}});return it(s)?null:{filePath:s,source:"local"}}let o=ot();if(r==="latest"){let s=n.profile||n.buildProfile;o.start(`Fetching latest${s?` ${s}`:""} build...`);try{let a=await w.get(`/builds/${e}`,{params:{limit:50}});if(a.data.status!=="success")throw new Error(a.data.message);let l=a.data.builds||[],d=s?.toLowerCase(),c=I=>I.platform?.toLowerCase()===t.toLowerCase()&&I.status?.toLowerCase()==="success",u=I=>d?[I.buildProfile,I.profile,I.profileName,I.buildType].filter(Boolean).some(H=>String(H).toLowerCase()===d):!0,p=l.filter(I=>c(I)&&u(I)),m=p.find(I=>I.buildType?.toLowerCase()==="store"||I.distribution?.toLowerCase()==="store")||p[0],h=l.some(I=>I.platform?.toLowerCase()===t.toLowerCase()&&I.status?.toLowerCase()==="success");if(!m)return o.stop("No suitable build found"),ee(s&&h?`No successful ${t} builds found for profile "${s}".`:"No successful builds found for this platform."),null;o.stop(`Found build: ${m.buildId}`);let g=m.artifacts||[];if(g.length===0||g.every(I=>!(I.url||I.downloadUrl)))try{let I=await w.get(`/builds/${e}/${m.buildId}/artifacts`);I.data.status==="success"&&I.data.artifacts?.length>0?(g=I.data.artifacts.map(H=>({...H,url:H.url||H.downloadUrl})),console.log(G.cyan(` [RECOVERY] Fetched ${g.length} artifact(s) with download URLs.`))):console.log(G.yellow(" [RECOVERY] /artifacts endpoint returned 0 artifacts."))}catch(I){console.log(G.red(` [RECOVERY] /artifacts fetch failed: ${I.message}`))}let b=t==="ios",A=g.find(I=>{let H=(I.type||"").toLowerCase(),Q=(I.name||"").toLowerCase();if(console.log(G.dim(` - Checking: ${I.name} (Type: ${I.type}, HasLink: ${!!(I.url||I.downloadUrl)})`)),H)return H===(b?"ipa":"aab");let z=b?".ipa":".aab",me=(I.url||I.downloadUrl||"").toLowerCase();return Q.endsWith(z)||me.includes(z)});if(!A||!(A.url||A.downloadUrl))return ee("Build found but artifact URL is missing."),null;let D=A.url||A.downloadUrl;return{filePath:await sr(D,b?"ios":"android"),buildId:m.buildId,artifactName:A.name,source:"latest"}}catch(a){return o.stop("Fetch failed"),ee(`API Error: ${a.message}`),null}}if(r==="id"){let s=n.buildId||await on({message:"Enter Build ID:",validate:l=>l.length<5?"Invalid ID":void 0});if(it(s))return null;let a=String(s);o.start("Fetching build...");try{let l=null;try{let m=await w.get(`/builds/${e}/${a}`);m.data.status==="success"&&(l=m.data.build)}catch(m){m.response?.status!==404&&console.log(G.dim(` [RECOVERY] Project build lookup skipped: ${m.message}`))}if(!l){let m=await w.get(`/build/${a}`);if(m.data.status!=="success")throw new Error(m.data.message);l=m.data.build}if(!l)throw new Error(`Build ${a} was not found.`);let d=t==="ios",c=Wn(l.artifacts);au(c)||(c=await $s(e,a,c));let u=ws(c,t);if(u||(c=await $s(e,a,c),u=ws(c,t)),!u)throw new Error(`No ${d?".ipa":".aab"} artifact found for build ${a}. The build exists, but its artifact list does not contain a downloadable submission artifact.`);let p=u.url||u.downloadUrl;if(!p)throw new Error(`Artifact ${u.name||"(unnamed)"} for build ${a} has no download URL. Retry after the build artifact upload is visible in the Installation Hub.`);return o.stop(`Found build: ${l.buildId||a}`),{filePath:await sr(p,d?"ios":"android"),buildId:l.buildId||a,artifactName:u.name,source:"id"}}catch(l){throw o.stop("Fetch failed"),l}}if(r==="url"){let s=await on({message:"Enter Artifact URL:",validate:a=>a.startsWith("http")?void 0:"Must be a valid URL"});return it(s)?null:{filePath:await sr(s,t),source:"url"}}return null}function Wn(e){return(e||[]).map(t=>({...t,url:t.url||t.downloadUrl}))}function au(e){return e.some(t=>!!(t.url||t.downloadUrl))}function ws(e,t){let n=t==="ios",i=n?"ipa":"aab",r=n?".ipa":".aab";return e.find(o=>{let s=String(o.type||"").toLowerCase(),a=String(o.name||"").toLowerCase(),l=String(o.url||o.downloadUrl||"").toLowerCase();return s?s===i:a.endsWith(r)||l.includes(r)})||null}function lu(e,t){let n=e==="ios"?".ipa":".aab";if(t.buildId)return`No downloadable ${n} artifact found for build ${t.buildId}. Check that the build finished artifact upload before submitting.`;if(t.latest){let i=t.profile||t.buildProfile;return`No latest successful ${e}${i?` ${i}`:""} build has a downloadable ${n} artifact.`}return`No downloadable ${n} artifact was selected for submission.`}async function $s(e,t,n){try{let i=await w.get(`/builds/${e}/${t}/artifacts`);if(i.data.status==="success"&&i.data.artifacts?.length>0){let r=Wn(i.data.artifacts);return console.log(G.cyan(` [RECOVERY] Fetched ${r.length} artifact(s) with download URLs.`)),r}}catch(i){console.log(G.dim(` [RECOVERY] Project artifact lookup skipped: ${i.message}`))}try{let i=await w.get(`/public/builds/${t}`);if(i.data.status==="success"&&i.data.artifacts?.length>0){let r=Wn(i.data.artifacts);return console.log(G.cyan(` [RECOVERY] Fetched ${r.length} public artifact(s) with download URLs.`)),r}}catch(i){console.log(G.dim(` [RECOVERY] Public artifact lookup skipped: ${i.message}`))}return Wn(n)}async function sr(e,t,n=3){let i=ot();i.start("Downloading artifact...");let r=Y.mkdtempSync(fe.join(bt.tmpdir(),`${f.nameLower}-artifact-`)),o=`app.${t==="ios"?"ipa":"aab"}`,s=fe.join(r,o);for(let a=1;a<=n;a++)try{a>1&&(i.message(`Downloading artifact (Retry ${a}/${n})...`),await new Promise(c=>setTimeout(c,2e3*a)));let l=Y.createWriteStream(s),d=await Ds({url:e,method:"GET",responseType:"stream",timeout:6e4});return await new Promise((c,u)=>{d.data.pipe(l);let p=!1;d.data.on("error",m=>{p||(p=!0,l.close(),u(m))}),l.on("finish",()=>{p||c()}),l.on("error",m=>{p||(p=!0,u(m))})}),i.stop("Download complete"),s}catch(l){if(a===n)throw i.stop("Download failed"),l}throw new Error("Download failed after retries")}async function du(e,t,n,i,r){let o=ot();if(r&&se(`Bundle ID: ${G.green(r)}`),!n||!i)throw ee(`Missing credentials: issuerId=${n}, keyId=${i}. Check your Dashboard.`),new Error("Missing ASC API Key Metadata (IssuerID or KeyID)");let s=Ns(t,n,i),a=yu();return o.start("Uploading to TestFlight (pilot)..."),new Promise((l,d)=>{let c=Su(),u=Nc(a.command,["pilot","upload","--ipa",e,"--api_key_path",s,"--skip_submission","true","--skip_waiting_for_build_processing","true"],{stdio:["ignore","pipe","pipe"],env:a.env});u.stdout?.on("data",p=>c.append(p,process.stdout)),u.stderr?.on("data",p=>c.append(p,process.stderr)),u.on("close",p=>{if(c.flush(),p!==0){o.stop("Pilot failed");try{Y.unlinkSync(s)}catch{}d(bu(p,c.lines()))}else{o.stop("IPA uploaded to TestFlight");try{Y.unlinkSync(s)}catch{}l({})}}),u.on("error",p=>{c.flush();try{Y.unlinkSync(s)}catch{}o.stop("Pilot execution error");let m=Pu(p);m.logs=c.lines(),d(m)})})}async function cu(e,t,n,i,r,o){let s=ot();if(r&&se(`Bundle ID: ${G.green(r)}`),!n||!i)throw ee(`Missing credentials: issuerId=${n}, keyId=${i}. Check your Dashboard.`),new Error("Missing ASC API Key Metadata (IssuerID or KeyID)");let a=Ns(t,n,i),l=`${o.sshUser}@${o.sshHost}`,d=uu(o),c=pu(o),u="",p="";try{if(s.start(`Preparing remote iOS submit runner (${l})...`),u=fu("ssh",[...d,"mktemp -d /tmp/mach-submit.XXXXXX"]).trim(),!u)throw new Error("Remote runner did not return a temp directory.");s.stop(`Remote runner ready: ${l}`),s.start("Uploading IPA and App Store Connect key to remote runner..."),ar("scp",[...c,e,`${l}:${u}/app.ipa`],"IPA upload to remote runner"),ar("scp",[...c,a,`${l}:${u}/api_key.json`],"ASC key upload to remote runner"),p=fe.join(bt.tmpdir(),`${f.nameLower}-ios-submit-${Date.now()}.sh`),Y.writeFileSync(p,mu(u)),ar("scp",[...c,p,`${l}:${u}/submit.sh`],"submit script upload to remote runner"),s.stop("Remote submit inputs uploaded"),s.start("Uploading to TestFlight on remote runner...");let m=`chmod +x ${sn(`${u}/submit.sh`)} && bash ${sn(`${u}/submit.sh`)}`,h=At("ssh",[...d,m],{stdio:"inherit"});if(h.error)throw mr("ssh",h.error);if(h.status!==0)throw new Error(`Remote iOS submit failed with exit code ${h.status}.`);return s.stop("IPA uploaded to TestFlight"),{apiKeyJsonPath:null}}catch(m){throw s.stop("Remote iOS submit failed"),m}finally{try{Y.unlinkSync(a)}catch{}if(p)try{Y.unlinkSync(p)}catch{}if(u)try{At("ssh",[...d,`rm -rf ${sn(u)}`],{stdio:"ignore"})}catch{}}}function Ns(e,t,n){let i=Y.readFileSync(e,"utf8"),r;try{r=fr.createPrivateKey(i).export({type:"pkcs8",format:"pem"})}catch{se("Key normalization failed, falling back to manual re-wrapping..."),r=`-----BEGIN PRIVATE KEY-----
1884
+ `)}}function vc(e){if(!e.endsWith(".apk"))return C.error(T.red("Local Android Maestro runs need an APK artifact.")),!1;C.info(T.dim("Installing APK on local Android device/emulator..."));let t=Ge("adb",["install","-r",e],{stdio:"inherit",env:process.env});return t.error?(C.error(T.red(`adb failed to start: ${t.error.message}`)),!1):t.status!==0?(C.error(T.red(`adb install failed with exit code ${t.status??1}`)),!1):!0}function Rc(e,t){if(e.endsWith(".ipa"))return C.error(T.red("Local iOS Maestro runs need an iOS Simulator .app.zip artifact, not an App Store .ipa.")),!1;let n=e;if(e.endsWith(".zip")){let r=k.join(t,"ios-app");O.mkdirSync(r,{recursive:!0}),new Kn(e).extractAllTo(r,!0);let o=nr(r);if(!o)return C.error(T.red("Could not find a .app bundle inside the downloaded zip.")),!1;n=o}if(!n.endsWith(".app"))return C.error(T.red("Local iOS Maestro runs need an iOS Simulator .app bundle or .app.zip artifact.")),!1;C.info(T.dim("Installing app on booted iOS Simulator..."));let i=Ge("xcrun",["simctl","install","booted",n],{stdio:"inherit",env:process.env});return i.error?(C.error(T.red(`xcrun failed to start: ${i.error.message}`)),!1):i.status!==0?(C.error(T.red(`iOS Simulator install failed with exit code ${i.status??1}`)),!1):!0}function nr(e){let t=O.readdirSync(e,{withFileTypes:!0});for(let n of t){let i=k.join(e,n.name);if(n.isDirectory()&&n.name.endsWith(".app"))return i;if(n.isDirectory()){let r=nr(i);if(r)return r}}return null}function Pc(e,t){let n=String(t||"").toLowerCase();return n==="android"?e.find(i=>vt(i,".apk")):n==="ios"?e.find(i=>vt(i,".app.zip"))||e.find(i=>vt(i,".zip")):e.find(i=>vt(i,".apk"))||e.find(i=>vt(i,".app.zip"))||e.find(i=>vt(i,".zip"))}function vt(e,t){return String(e?.name||e?.downloadUrl||e?.url||"").toLowerCase().endsWith(t)}function ir(e){let t=String(e||"").toLowerCase();if(t.includes(".apk"))return"android";if(t.includes(".app.zip")||t.endsWith(".app")||t.includes(".ipa"))return"ios"}function Is(e){if(e)try{return k.basename(new URL(e).pathname)||void 0}catch{return k.basename(e)||void 0}}function Oc(e){return e?e.match(/[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/i)?.[0]:void 0}function Es(e,t){if(!e.jsonOutput)return;let n=k.resolve(e.jsonOutput),i={...t,updatedAt:new Date().toISOString()};try{let r=k.dirname(n);r&&r!=="."&&O.mkdirSync(r,{recursive:!0}),O.writeFileSync(n,JSON.stringify(i,null,2))}catch(r){C.warn(T.yellow(`Could not write Maestro metadata JSON: ${r.message}`))}}function Dc(e,t){if(!e.jsonOutput)return;let n=k.resolve(e.jsonOutput),i={mode:"local",...t,updatedAt:new Date().toISOString()};try{let r=k.dirname(n);r&&r!=="."&&O.mkdirSync(r,{recursive:!0}),O.writeFileSync(n,JSON.stringify(i,null,2))}catch(r){C.warn(T.yellow(`Could not write Maestro metadata JSON: ${r.message}`))}}import{spinner as st,text as on,select as cr,isCancel as rt,cancel as ur,log as Cs}from"@clack/prompts";import G from"chalk";import K from"fs";import fe from"path";import{spawn as xc,spawnSync as St}from"child_process";import Ts from"axios";import It from"os";import mr from"crypto";import Cc from"crypto";import Pt from"axios";import _s from"fs";var rn=6e4,Tc=12e4,rr=4,nn=e=>encodeURIComponent(e),Nc=e=>new Promise(t=>setTimeout(t,e));async function Ot(e,t){let n;for(let i=1;i<=rr;i++)try{return await t()}catch(r){if(n=r,i>=rr||!kc(r))throw r;let o=Number(r.response?.headers?.["retry-after"]),s=Number.isFinite(o)&&o>0?o*1e3:Math.min(2e3*i*i,15e3);console.log(`[Google Play] ${e} failed (attempt ${i}/${rr}); retrying in ${Math.round(s/1e3)}s...`),await Nc(s)}throw n}function kc(e){let t=e.response?.status;return t?t===408||t===409||t===425||t===429||t>=500:!0}async function $s(e){let{packageName:t,serviceAccount:n,aabPath:i,track:r,releaseStatus:o,userFraction:s,changesNotSentForReview:a}=e,l;try{let c={Authorization:`Bearer ${await ws(n)}`,Connection:"close"},u=nn(t);if(l=(await Ot("create edit",()=>Pt.post(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${u}/edits`,{},{headers:c,timeout:rn}))).data.id,!l)throw new Error("Google Play edit insert succeeded but did not return an edit id.");let m=nn(l),h=_s.statSync(i),g=await Ot("upload AAB",()=>Pt.post(`https://androidpublisher.googleapis.com/upload/androidpublisher/v3/applications/${u}/edits/${m}/bundles`,_s.createReadStream(i),{headers:{...c,"Content-Type":"application/octet-stream","Content-Length":h.size},maxBodyLength:1/0,maxContentLength:1/0,params:{uploadType:"media"},timeout:Tc})),S=Number(g.data.versionCode);if(!S)throw new Error("Google Play upload succeeded but did not return a versionCode.");let b={versionCodes:[String(S)],status:o};return(o==="inProgress"||o==="halted")&&typeof s=="number"&&(b.userFraction=s),await Ot("update track",()=>Pt.put(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${u}/edits/${m}/tracks/${nn(r)}`,{releases:[b]},{headers:c,timeout:rn})),await Ot("commit edit",()=>Pt.post(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${u}/edits/${m}:commit`,{},{headers:c,params:a?{changesNotSentForReview:!0}:void 0,timeout:rn})),{editId:l,versionCode:S,track:r,releaseStatus:o,userFraction:s}}catch(d){if(l)try{let u=await ws(n);await Ot("delete edit",()=>Pt.delete(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${nn(t)}/edits/${nn(l)}`,{headers:{Authorization:`Bearer ${u}`,Connection:"close"},timeout:rn}))}catch{}let c=d.response?.data?.error?.message||d.message;throw new Error(`Google Play API Error: ${c}`)}}async function ws(e){let t=Math.floor(Date.now()/1e3),n=t+3600,i={alg:"RS256",typ:"JWT"},r={iss:e.client_email,sub:e.client_email,aud:"https://oauth2.googleapis.com/token",iat:t,exp:n,scope:"https://www.googleapis.com/auth/androidpublisher"},o=Buffer.from(JSON.stringify(i)).toString("base64url"),s=Buffer.from(JSON.stringify(r)).toString("base64url"),a=`${o}.${s}`,l=Cc.createSign("RSA-SHA256");l.update(a);let d=l.sign(e.private_key,"base64url"),c=`${a}.${d}`;return(await Ot("OAuth token exchange",()=>Pt.post("https://oauth2.googleapis.com/token",{grant_type:"urn:ietf:params:oauth:grant-type:jwt-bearer",assertion:c},{headers:{Connection:"close"},timeout:rn}))).data.access_token}var Lc=5e3,Mc=12,Ns=100,or=24,vs=8e3,Uc={completed:"completed",draft:"draft",halted:"halted",inprogress:"inProgress","in-progress":"inProgress"},Fc=e=>e?.type==="google_service_account",Yn=e=>e?.bundleId||e?.packageName||e?.meta?.packageName||e?.meta?.bundleId,ks=e=>e.submitArgs||process.argv.slice(3).join(" ");async function qn(e){let t=st(),n=ye(),i=Bc(e);if(!i){process.exitCode=1;return}let r=e.projectId||i.projectId,o=e.profile||e.buildProfile||"production";if(!r){Q(`${f.configFileName} is missing projectId. Pass --project-id in runner mode.`),process.exitCode=1;return}i.projectId=r,se(G.dim(`Submit for project: ${i.name||r} | Profile: ${o}`));let s=e.platform;if(!s){let y=await cr({message:"Select platform to submit:",options:[{value:"ios",label:"iOS (App Store Connect / TestFlight)"},{value:"android",label:"Android (Google Play Console)"}]});if(rt(y)){ur("Operation cancelled");return}s=y}if(s=String(s).toLowerCase(),s!=="ios"&&s!=="android"){Q(`Platform ${s} is not supported. Use 'ios' or 'android'.`),process.exitCode=1;return}let a=s==="ios"&&!e.local&&e.sshHost?nu(i,o,e):null;if(s==="ios"&&!e.local&&!a){await jc(i,o,e);return}let l=e.submitId,d=!!(e.local&&l),c=l||null,u=async(y,$={})=>{c&&await zc(r,c,{status:y,...$})},p=s==="android"?e.packageName||e.androidPackage||Qc(i,o):void 0,m=s==="ios"?e.bundleId||e.iosBundleIdentifier||tu(i,o):void 0,h,g,S,b=!1;try{s==="android"&&(h=e.track||i.submit?.[o]?.android?.track||i.submit?.production?.android?.track||"internal",g=iu(i,o,e.releaseStatus),S=ou(i,o,e.rollout),b=su(i,o,e.changesNotSentForReview),au(g,S))}catch(y){Q(y.message),process.exitCode=1;return}if(s==="android"&&!d&&(c=await Hc(i,r,s,o,e,{packageName:p,track:h,releaseStatus:g,rollout:S,changesNotSentForReview:b}),!c)){Q("Could not create submission tracking record. Submission was not started."),process.exitCode=1;return}await u("running",{platform:s,profile:o,packageName:p,track:h,releaseStatus:g,rollout:S,startTime:Date.now(),...d?Wc():{}});let A=null,D=null;try{D=await lu(r,s,e,n?.token),A=D?.filePath||null}catch(y){await u("failed",{error:`Failed to resolve submission artifact: ${y.message}`,endTime:Date.now()}),Q(`Failed to resolve submission artifact: ${y.message}`),process.exitCode=1;return}if(!A){let y=cu(s,e);await u("failed",{error:y,endTime:Date.now()}),Q(y),process.exitCode=1;return}await u("running",{buildId:D?.buildId,artifactName:D?.artifactName,artifactSource:D?.source}),se(`Using artifact: ${G.green(fe.basename(A))} `),t.start("Fetching submission credentials from Dashboard...");let _;try{let $=(await w.get(`/credentials/${r}`)).data.credentials||[];if(s==="android"&&!p){t.stop("Package name missing"),Q("Could not resolve Android package name. Set android.package in mach.config.json/app.json."),await u("failed",{error:"Could not resolve Android package name.",endTime:Date.now()}),process.exitCode=1;return}let v=$.filter(Fc),R=s==="ios"?$.filter(x=>x.type==="asc_api_key"):eu(v,p);if(R.length===0){if(t.stop("Credentials missing"),Q(s==="android"?`No Google Play service credential found for package ${p}.`:`No Service Credentials found for ${s}.`),s==="android"){let x=v.map(Yn).filter(Boolean).join(", ");x&&se(`Found Google Play service credential(s) for: ${x}`),se(`Use '${f.nameLower} credentials:service --platform android --package-name ${p}' or upload it under that package in the Dashboard.`)}else se(`Use '${f.nameLower} credentials:service --platform ${s}' or use the Dashboard to upload them.`);await u("failed",{error:`No submission credentials found for ${s}.`,endTime:Date.now()}),process.exitCode=1;return}if(_=qc(R,e.credentialId),!_&&s==="ios"&&m&&(_=Jc(R,m)),_||R.length===1)_=_||R[0],t.stop(`Using: ${_.name}`),s==="android"&&Yn(_)==="*"&&se(G.yellow(`Using legacy wildcard Google Play credential for ${p}. Upload a package-scoped credential when possible.`));else{if(t.stop("Multiple credentials found"),Xc()){let P=R.map(L=>`${L.name||"credential"} (${L.credentialId||L.id||"no-id"})`).join(", ");Q(`Multiple ${s==="ios"?"App Store Connect":"Google Play"} credentials found. Use --credential-id in CI. Available: ${P}`),await u("failed",{error:"Multiple submission credentials found; --credential-id is required in CI.",endTime:Date.now()}),process.exitCode=1;return}let x=await cr({message:`Choose a ${s==="ios"?"App Store Connect":"Google Play"} credential:`,options:R.map(P=>({value:P.credentialId,label:P.name,hint:`${P.keyId?`ID: ${P.keyId}`:""} ${P.issuerId?`(Issuer: ${P.issuerId.substring(0,8)}...)`:""}`}))});if(rt(x)){ur("Submission cancelled"),await u("failed",{error:"Submission cancelled while selecting credential.",endTime:Date.now()}),process.exitCode=1;return}_=R.find(P=>P.credentialId===x),se(`Using selected: ${G.green(_.name)}`)}}catch(y){t.stop("Failed to fetch credentials"),Q(`API Error: ${y.message} `),await u("failed",{error:`Failed to fetch credentials: ${y.message}`,endTime:Date.now()}),process.exitCode=1;return}let Y=K.mkdtempSync(fe.join(It.tmpdir(),`${f.nameLower}-submit-`)),te=_.keyId||_.meta?.keyId,X=_.issuerId||_.meta?.issuerId,Se=_.type==="asc_api_key"?`AuthKey_${te}.p8`:"service-account.json",oe=fe.join(Y,Se);t.start("Downloading secure key...");try{let y=await w.get(`/credentials/${_.credentialId}/download`,{params:{projectId:r,format:"raw"}});if(y.data.status!=="success"||!y.data.downloadUrl)throw new Error("Failed to get secure download URL");let $=await Ts.get(y.data.downloadUrl,{responseType:"arraybuffer"});K.writeFileSync(oe,Buffer.from($.data)),t.stop("Key downloaded to secure temp storage")}catch(y){t.stop("Download failed"),Q(`Failed to download key: ${y.message}`);try{K.rmSync(Y,{recursive:!0,force:!0})}catch{}await u("failed",{error:`Failed to download credential key: ${y.message}`,endTime:Date.now()}),process.exitCode=1;return}se(G.blue(`Initiating ${s==="ios"?"TestFlight":"Google Play"} submission...`));let ke=!1,he;try{if(s==="ios"){if(!te){let $=await on({message:"Enter App Store Connect Key ID (e.g. 2X948D...):",validate:v=>v.length>0?void 0:"Key ID is required"});if(rt($)){await u("failed",{error:"Submission cancelled while entering ASC Key ID.",endTime:Date.now()}),process.exitCode=1;return}te=$}if(!X||X==="undefined"){let $=await on({message:"Enter App Store Connect Issuer ID (Found on ASC Keys page):",validate:v=>v.length>0?void 0:"Issuer ID is required"});if(rt($)){await u("failed",{error:"Submission cancelled while entering ASC Issuer ID.",endTime:Date.now()}),process.exitCode=1;return}X=$}se(`Using ASC Key ID: ${te}`),se(`Using ASC Issuer ID: ${X}`);let y=a?await pu(A,oe,X,te,m,a):await uu(A,oe,X,te,m);fr(`${s==="ios"?"App Store":"Google Play"} submission successful!`),ke=!0}else he=await yu(A,oe,h||"internal",p,g||"completed",S,b,o),fr("Google Play submission successful!"),ke=!0}catch(y){Q(`Submission failed: ${y.message}`),await u("failed",{error:y.message,endTime:Date.now()}),ot(e,{status:"failed",projectId:r,submitId:c,platform:s,profile:o,buildId:D?.buildId||e.buildId,artifactName:D?.artifactName,error:y.message,dashboardUrl:c?bt(c,r):void 0}),process.exitCode=1}finally{ke&&(await u("success",{endTime:Date.now(),versionCode:he?.versionCode,track:h,releaseStatus:g}),ot(e,{status:"success",projectId:r,submitId:c,platform:s,profile:o,buildId:D?.buildId||e.buildId,artifactName:D?.artifactName,versionCode:he?.versionCode,track:h,releaseStatus:g,dashboardUrl:c?bt(c,r):void 0})),Tu(Y),A&&A.includes(`${f.nameLower}-artifact-`)}}function Bc(e){let t=`./${f.configFileName}`;if(K.existsSync(t))try{return JSON.parse(K.readFileSync(t,"utf-8"))}catch(n){return Q(`Failed to read ${f.configFileName}: ${n.message}`),null}return e.projectId?{projectId:e.projectId}:(Q(`No ${f.configFileName} found. Run \`${f.nameLower} init\` or \`${f.nameLower} link\` first.`),null)}async function jc(e,t,n){let i=n.projectId||e.projectId;if(!i){Q(`${f.configFileName} is missing projectId.`),process.exitCode=1;return}let r=n.submitId||mr.randomUUID(),o=!!n.latest||!n.buildId,s=Gc({...n,latest:o,profile:t,projectId:i,submitId:r}),a={projectId:i,submitId:r,platform:"ios",profile:t,latest:o,buildId:n.buildId,credentialId:n.credentialId,status:"pending",source:"cli",submitArgs:ks(n),runnerArgs:s,runnerCommand:[f.nameLower,"submit",...s].map(Zc).join(" "),appName:e.name,startTime:Date.now()},l=st();l.start("Queuing iOS submit on macOS runner...");try{let d=await w.post("/submissions",a),c=d.data?.submission||d.data?.submit||{},u=d.data?.dashboardUrl||bt(r,i);l.stop("iOS submit queued"),se(`Submission ID: ${G.cyan(r)}`),se(`Dashboard: ${G.blue.underline(u)}`),ot(n,{status:"pending",projectId:i,submitId:r,platform:"ios",profile:t,latest:o,buildId:n.buildId,dashboardUrl:u}),await Vc(i,r,n)}catch(d){l.stop("Could not queue iOS submit"),Q(Yc(d)),process.exitCode=1}}async function Hc(e,t,n,i,r,o={}){let s=r.submitId||mr.randomUUID(),a=!!r.latest||!r.buildId,l={projectId:t,submitId:s,platform:n,profile:i,latest:a,buildId:r.buildId,credentialId:r.credentialId,status:"running",source:"cli-direct",submitArgs:ks(r),appName:e.name,startTime:Date.now(),...o};try{let d=await w.post("/submissions",l),c=d.data?.submission||d.data?.submit||{},u=d.data?.dashboardUrl||c.dashboardUrl||bt(s,t);return se(`Submission ID: ${G.cyan(s)}`),se(`Dashboard: ${G.blue.underline(u)}`),ot(r,{status:"running",projectId:t,submitId:s,platform:n,profile:i,latest:a,buildId:r.buildId,dashboardUrl:u}),s}catch(d){let c=d.response?.data?.message||d.response?.data?.error||d.message;return se(G.yellow(`Could not create submission tracking record: ${c}`)),null}}function Gc(e){let t=["--local","--submit-id",e.submitId,"--project-id",e.projectId,"--platform","ios","--profile",e.profile||"production"];return e.buildId?t.push("--build-id",e.buildId):t.push("--latest"),e.credentialId&&t.push("--credential-id",e.credentialId),e.bundleId&&t.push("--bundle-id",e.bundleId),e.packageName&&t.push("--package-name",e.packageName),e.quiet&&t.push("--quiet"),e.jsonOutput&&t.push("--json-output",e.jsonOutput),t.filter(n=>n!=null&&n!=="")}async function Vc(e,t,n){let i=st(),r=0,o=0;for(n.quiet||i.start("Waiting for iOS submit runner...");;)try{let s=await w.get(`/submissions/${e}/${t}`),a=s.data?.submission||s.data?.submit||s.data,l=String(a?.status||"pending").toLowerCase();r=0;let d=Array.isArray(a?.logs)?a.logs:[];for(let c=o;c<d.length;c++){let u=d[c];u&&console.log(G.dim(String(u)))}if(o=d.length,["success","completed","succeeded"].includes(l)){n.quiet||i.stop("iOS submit completed"),fr("App Store submission successful!"),ot(n,{status:"success",projectId:e,submitId:t,platform:"ios",profile:a?.profile||n.profile||"production",buildId:a?.buildId||n.buildId,artifactName:a?.artifactName,dashboardUrl:a?.dashboardUrl||bt(t,e)});return}if(["failed","error","cancelled","canceled"].includes(l)){n.quiet||i.stop("iOS submit failed");let c=a?.error||a?.message||"Unknown iOS submit failure.";Q(c),ot(n,{status:"failed",projectId:e,submitId:t,platform:"ios",profile:a?.profile||n.profile||"production",buildId:a?.buildId||n.buildId,artifactName:a?.artifactName,error:c,dashboardUrl:a?.dashboardUrl||bt(t,e)}),process.exitCode=1;return}n.quiet||i.message(`iOS submit ${l}...`),await pr(Lc)}catch(s){if(r++,r>=Mc){n.quiet||i.stop("Lost connection to iOS submit status"),Q(`Could not fetch iOS submit status after ${r} attempts: ${s.message}`),process.exitCode=1;return}await pr(Math.min(2e3*r,15e3))}}async function zc(e,t,n){let i;for(let r=1;r<=3;r++)try{await w.patch(`/submissions/${e}/${t}`,n);return}catch(o){if(i=o,r>=3||!Kc(o))break;await pr(1e3*r)}Cs.warn(G.dim(`Could not report submission status: ${i?.message||i}`))}function Kc(e){let t=e.response?.status;return!t||t===408||t===409||t===425||t===429||t>=500}function Wc(){let e={gitlabJobId:process.env.CI_JOB_ID,gitlabJobUrl:process.env.CI_JOB_URL,gitlabPipelineId:process.env.CI_PIPELINE_ID,gitlabProjectId:process.env.CI_PROJECT_ID,gitlabProjectPath:process.env.CI_PROJECT_PATH};return Object.fromEntries(Object.entries(e).filter(([,t])=>!!t))}function Yc(e){let t=e.response?.status,n=e.response?.data?.message||e.response?.data?.error;return t===404||t===405?["Managed iOS submit is not enabled on this Mach API yet.","Deploy the API/dashboard submission orchestration endpoint, then retry the same command.","Expected API: POST /submissions and GET/PATCH /submissions/:projectId/:submitId."].join(`
1885
+ `):n||e.message||String(e)}function bt(e,t){if(!e)return He;let n=t?`?projectId=${encodeURIComponent(t)}`:"";return`${He}/submissions/${e}${n}`}function ot(e,t){if(!e.jsonOutput)return;let n=fe.resolve(e.jsonOutput),i={...t,url:t.url||t.dashboardUrl||bt(t.submitId,t.projectId),updatedAt:new Date().toISOString()};try{let r=fe.dirname(n);r&&r!=="."&&K.mkdirSync(r,{recursive:!0}),K.writeFileSync(n,JSON.stringify(i,null,2))}catch(r){Cs.warn(G.yellow(`Could not write submission metadata JSON: ${r.message}`))}}function qc(e,t){return t&&e.find(n=>n.credentialId===t||n.id===t||n.keyId===t||n.meta?.keyId===t)||null}function Jc(e,t){let n=e.filter(i=>[i.bundleId,i.bundleIdentifier,i.appIdentifier,i.meta?.bundleId,i.meta?.bundleIdentifier,i.meta?.appIdentifier].filter(Boolean).map(String).includes(t));return n.length===1?n[0]:null}function Xc(){return process.env.CI==="true"||process.env.CI==="1"||!process.stdin.isTTY}function pr(e){return new Promise(t=>setTimeout(t,e))}function Zc(e){return/^[a-zA-Z0-9_./:=@-]+$/.test(e)?e:`'${e.replace(/'/g,"'\\''")}'`}function Qc(e,t){if(e.submit?.[t]?.android?.package)return e.submit[t].android.package;let n=Mn(e,t);if(n)return n;let i=fe.join(process.cwd(),"app.json");if(K.existsSync(i))try{return JSON.parse(K.readFileSync(i,"utf-8")).expo?.android?.package}catch{}let r=fe.join(process.cwd(),"app.config.json");if(K.existsSync(r))try{let o=JSON.parse(K.readFileSync(r,"utf-8"));return o.expo?.android?.package||o.android?.package}catch{}}function eu(e,t){let n=e.filter(o=>Yn(o)===t);if(n.length>0)return n;let i=e.filter(o=>{let s=Yn(o);return!s||s==="*"});return e.length>0&&e.length===i.length?i:[]}function tu(e,t){return e.submit?.[t]?.ios?.bundleIdentifier?e.submit[t].ios.bundleIdentifier:e.submit?.[t]?.ios?.bundleId?e.submit[t].ios.bundleId:Un(e,t)}function nu(e,t,n){let i=e.submit?.[t]?.ios||{},r=e.submit?.production?.ios||{},o=n.sshHost||i.sshHost||r.sshHost||process.env.MACH_IOS_SUBMIT_SSH_HOST;return o?{sshHost:o,sshUser:n.sshUser||i.sshUser||r.sshUser||process.env.MACH_IOS_SUBMIT_SSH_USER||process.env.USER||"ubuntu",sshKey:n.sshKey||i.sshKey||r.sshKey||process.env.MACH_IOS_SUBMIT_SSH_KEY}:null}function iu(e,t,n){let i=n||e.submit?.[t]?.android?.releaseStatus||e.submit?.production?.android?.releaseStatus||"completed";return ru(i)}function ru(e){let t=Uc[String(e).trim().toLowerCase()];if(!t)throw new Error(`Invalid Android release status "${e}". Use completed, draft, halted, or inProgress.`);return t}function ou(e,t,n){let i=n??e.submit?.[t]?.android?.rollout??e.submit?.[t]?.android?.userFraction??e.submit?.[t]?.android?.rolloutFraction??e.submit?.production?.android?.rollout??e.submit?.production?.android?.userFraction??e.submit?.production?.android?.rolloutFraction;if(i==null||i==="")return;let r=Number(i);if(!Number.isFinite(r)||r<=0||r>=1)throw new Error(`Invalid Android rollout fraction "${i}". Use a number greater than 0 and less than 1, for example 0.1.`);return r}function su(e,t,n){let i=n??e.submit?.[t]?.android?.changesNotSentForReview??e.submit?.[t]?.android?.changes_not_sent_for_review??e.submit?.production?.android?.changesNotSentForReview??e.submit?.production?.android?.changes_not_sent_for_review??!1;return i===!0||i==="true"||i==="1"}function au(e,t){if(e==="inProgress"&&t===void 0)throw new Error("Google Play staged rollout requires --rollout <fraction> when --release-status inProgress is used.");if(e!=="inProgress"&&e!=="halted"&&t!==void 0)throw new Error("Android rollout fraction can only be used with --release-status inProgress or halted.")}async function lu(e,t,n,i){let r=n.buildId?"id":n.latest?"latest":null;if(!r){let s=await cr({message:"Select artifact source:",options:[{value:"latest",label:`Latest Production Build (${f.name})`},{value:"id",label:`Input Build ID (${f.name})`},{value:"url",label:"Remote URL"},{value:"local",label:"Local File Path"}]});if(rt(s))return ur("Operation cancelled"),null;r=s}if(r==="local"){let s=await on({message:"Enter path to artifact (.ipa/.aab):",validate:a=>{if(!K.existsSync(a))return"File not found";if(t==="ios"&&!a.endsWith(".ipa"))return"Must be an .ipa file";if(t==="android"&&!a.endsWith(".aab"))return"Must be an .aab file"}});return rt(s)?null:{filePath:s,source:"local"}}let o=st();if(r==="latest"){let s=n.profile||n.buildProfile;o.start(`Fetching latest${s?` ${s}`:""} build...`);try{let a=await w.get(`/builds/${e}`,{params:{limit:50}});if(a.data.status!=="success")throw new Error(a.data.message);let l=a.data.builds||[],d=s?.toLowerCase(),c=_=>_.platform?.toLowerCase()===t.toLowerCase()&&_.status?.toLowerCase()==="success",u=_=>d?[_.buildProfile,_.profile,_.profileName,_.buildType].filter(Boolean).some(Y=>String(Y).toLowerCase()===d):!0,p=l.filter(_=>c(_)&&u(_)),m=p.find(_=>_.buildType?.toLowerCase()==="store"||_.distribution?.toLowerCase()==="store")||p[0],h=l.some(_=>_.platform?.toLowerCase()===t.toLowerCase()&&_.status?.toLowerCase()==="success");if(!m)return o.stop("No suitable build found"),Q(s&&h?`No successful ${t} builds found for profile "${s}".`:"No successful builds found for this platform."),null;o.stop(`Found build: ${m.buildId}`);let g=m.artifacts||[];if(g.length===0||g.every(_=>!(_.url||_.downloadUrl)))try{let _=await w.get(`/builds/${e}/${m.buildId}/artifacts`);_.data.status==="success"&&_.data.artifacts?.length>0?(g=_.data.artifacts.map(Y=>({...Y,url:Y.url||Y.downloadUrl})),console.log(G.cyan(` [RECOVERY] Fetched ${g.length} artifact(s) with download URLs.`))):console.log(G.yellow(" [RECOVERY] /artifacts endpoint returned 0 artifacts."))}catch(_){console.log(G.red(` [RECOVERY] /artifacts fetch failed: ${_.message}`))}let b=t==="ios",A=sr(g,t);if(!A||!(A.url||A.downloadUrl))return Q("Build found but artifact URL is missing."),null;let D=A.url||A.downloadUrl;return{filePath:await ar(D,b?"ios":"android"),buildId:m.buildId,artifactName:A.name,source:"latest"}}catch(a){return o.stop("Fetch failed"),Q(`API Error: ${a.message}`),null}}if(r==="id"){let s=n.buildId||await on({message:"Enter Build ID:",validate:l=>l.length<5?"Invalid ID":void 0});if(rt(s))return null;let a=String(s);o.start("Fetching build...");try{let l=null;try{let m=await w.get(`/builds/${e}/${a}`);m.data.status==="success"&&(l=m.data.build)}catch(m){m.response?.status!==404&&console.log(G.dim(` [RECOVERY] Project build lookup skipped: ${m.message}`))}if(!l){let m=await w.get(`/build/${a}`);if(m.data.status!=="success")throw new Error(m.data.message);l=m.data.build}if(!l)throw new Error(`Build ${a} was not found.`);let d=t==="ios",c=Wn(l.artifacts);du(c)||(c=await Rs(e,a,c));let u=sr(c,t);if(u||(c=await Rs(e,a,c),u=sr(c,t)),!u)throw new Error(`No ${d?".ipa":".aab"} artifact found for build ${a}. The build exists, but its artifact list does not contain a downloadable submission artifact.`);let p=u.url||u.downloadUrl;if(!p)throw new Error(`Artifact ${u.name||"(unnamed)"} for build ${a} has no download URL. Retry after the build artifact upload is visible in the Installation Hub.`);return o.stop(`Found build: ${l.buildId||a}`),{filePath:await ar(p,d?"ios":"android"),buildId:l.buildId||a,artifactName:u.name,source:"id"}}catch(l){throw o.stop("Fetch failed"),l}}if(r==="url"){let s=await on({message:"Enter Artifact URL:",validate:a=>a.startsWith("http")?void 0:"Must be a valid URL"});return rt(s)?null:{filePath:await ar(s,t),source:"url"}}return null}function Wn(e){return(e||[]).map(t=>({...t,url:t.url||t.downloadUrl}))}function du(e){return e.some(t=>!!(t.url||t.downloadUrl))}function sr(e,t){let n=t==="ios",i=n?"ipa":"aab",r=n?".ipa":".aab";return e.find(o=>{let s=String(o.type||"").toLowerCase(),a=String(o.name||"").toLowerCase(),l=String(o.url||o.downloadUrl||"").toLowerCase();return s?s===i:a.endsWith(r)||l.includes(r)})||null}function cu(e,t){let n=e==="ios"?".ipa":".aab";if(t.buildId)return`No downloadable ${n} artifact found for build ${t.buildId}. Check that the build finished artifact upload before submitting.`;if(t.latest){let i=t.profile||t.buildProfile;return`No latest successful ${e}${i?` ${i}`:""} build has a downloadable ${n} artifact.`}return`No downloadable ${n} artifact was selected for submission.`}async function Rs(e,t,n){try{let i=await w.get(`/builds/${e}/${t}/artifacts`);if(i.data.status==="success"&&i.data.artifacts?.length>0){let r=Wn(i.data.artifacts);return console.log(G.cyan(` [RECOVERY] Fetched ${r.length} artifact(s) with download URLs.`)),r}}catch(i){console.log(G.dim(` [RECOVERY] Project artifact lookup skipped: ${i.message}`))}try{let i=await w.get(`/public/builds/${t}`);if(i.data.status==="success"&&i.data.artifacts?.length>0){let r=Wn(i.data.artifacts);return console.log(G.cyan(` [RECOVERY] Fetched ${r.length} public artifact(s) with download URLs.`)),r}}catch(i){console.log(G.dim(` [RECOVERY] Public artifact lookup skipped: ${i.message}`))}return Wn(n)}async function ar(e,t,n=3){let i=st();i.start("Downloading artifact...");let r=K.mkdtempSync(fe.join(It.tmpdir(),`${f.nameLower}-artifact-`)),o=`app.${t==="ios"?"ipa":"aab"}`,s=fe.join(r,o);for(let a=1;a<=n;a++)try{a>1&&(i.message(`Downloading artifact (Retry ${a}/${n})...`),await new Promise(c=>setTimeout(c,2e3*a)));let l=K.createWriteStream(s),d=await Ts({url:e,method:"GET",responseType:"stream",timeout:6e4});return await new Promise((c,u)=>{d.data.pipe(l);let p=!1;d.data.on("error",m=>{p||(p=!0,l.close(),u(m))}),l.on("finish",()=>{p||c()}),l.on("error",m=>{p||(p=!0,u(m))})}),i.stop("Download complete"),s}catch(l){if(a===n)throw i.stop("Download failed"),l}throw new Error("Download failed after retries")}async function uu(e,t,n,i,r){let o=st();if(r&&se(`Bundle ID: ${G.green(r)}`),!n||!i)throw Q(`Missing credentials: issuerId=${n}, keyId=${i}. Check your Dashboard.`),new Error("Missing ASC API Key Metadata (IssuerID or KeyID)");let s=xs(t,n,i),a=Su();return o.start("Uploading to TestFlight (pilot)..."),new Promise((l,d)=>{let c=Iu(),u=xc(a.command,["pilot","upload","--ipa",e,"--api_key_path",s,"--skip_submission","true","--skip_waiting_for_build_processing","true"],{stdio:["ignore","pipe","pipe"],env:a.env});u.stdout?.on("data",p=>c.append(p,process.stdout)),u.stderr?.on("data",p=>c.append(p,process.stderr)),u.on("close",p=>{if(c.flush(),p!==0){o.stop("Pilot failed");try{K.unlinkSync(s)}catch{}d(Eu(p,c.lines()))}else{o.stop("IPA uploaded to TestFlight");try{K.unlinkSync(s)}catch{}l({})}}),u.on("error",p=>{c.flush();try{K.unlinkSync(s)}catch{}o.stop("Pilot execution error");let m=Du(p);m.logs=c.lines(),d(m)})})}async function pu(e,t,n,i,r,o){let s=st();if(r&&se(`Bundle ID: ${G.green(r)}`),!n||!i)throw Q(`Missing credentials: issuerId=${n}, keyId=${i}. Check your Dashboard.`),new Error("Missing ASC API Key Metadata (IssuerID or KeyID)");let a=xs(t,n,i),l=`${o.sshUser}@${o.sshHost}`,d=fu(o),c=mu(o),u="",p="";try{if(s.start(`Preparing remote iOS submit runner (${l})...`),u=gu("ssh",[...d,"mktemp -d /tmp/mach-submit.XXXXXX"]).trim(),!u)throw new Error("Remote runner did not return a temp directory.");s.stop(`Remote runner ready: ${l}`),s.start("Uploading IPA and App Store Connect key to remote runner..."),lr("scp",[...c,e,`${l}:${u}/app.ipa`],"IPA upload to remote runner"),lr("scp",[...c,a,`${l}:${u}/api_key.json`],"ASC key upload to remote runner"),p=fe.join(It.tmpdir(),`${f.nameLower}-ios-submit-${Date.now()}.sh`),K.writeFileSync(p,hu(u)),lr("scp",[...c,p,`${l}:${u}/submit.sh`],"submit script upload to remote runner"),s.stop("Remote submit inputs uploaded"),s.start("Uploading to TestFlight on remote runner...");let m=`chmod +x ${sn(`${u}/submit.sh`)} && bash ${sn(`${u}/submit.sh`)}`,h=St("ssh",[...d,m],{stdio:"inherit"});if(h.error)throw gr("ssh",h.error);if(h.status!==0)throw new Error(`Remote iOS submit failed with exit code ${h.status}.`);return s.stop("IPA uploaded to TestFlight"),{apiKeyJsonPath:null}}catch(m){throw s.stop("Remote iOS submit failed"),m}finally{try{K.unlinkSync(a)}catch{}if(p)try{K.unlinkSync(p)}catch{}if(u)try{St("ssh",[...d,`rm -rf ${sn(u)}`],{stdio:"ignore"})}catch{}}}function xs(e,t,n){let i=K.readFileSync(e,"utf8"),r;try{r=mr.createPrivateKey(i).export({type:"pkcs8",format:"pem"})}catch{se("Key normalization failed, falling back to manual re-wrapping..."),r=`-----BEGIN PRIVATE KEY-----
1886
1886
  ${(i.replace(/-----BEGIN[^-]*-----/g,"").replace(/-----END[^-]*-----/g,"").replace(/\s+/g,"").match(/.{1,64}/g)||[]).join(`
1887
1887
  `)}
1888
- -----END PRIVATE KEY-----`}let o=fe.join(bt.tmpdir(),`api_key_${n}_${Date.now()}.json`),s={key_id:n,issuer_id:t,key:r,in_house:!1};return Y.writeFileSync(o,JSON.stringify(s,null,2)),o}function uu(e){let t=["-o","StrictHostKeyChecking=no","-o","ServerAliveInterval=30"];return e.sshKey&&t.push("-i",e.sshKey),t.push(`${e.sshUser}@${e.sshHost}`),t}function pu(e){let t=["-o","StrictHostKeyChecking=no","-o","ServerAliveInterval=30"];return e.sshKey&&t.push("-i",e.sshKey),t}function fu(e,t){let n=At(e,t,{encoding:"utf-8",stdio:["ignore","pipe","inherit"]});if(n.error)throw mr(e,n.error);if(n.status!==0)throw new Error(`${e} failed with exit code ${n.status}.`);return n.stdout||""}function ar(e,t,n){let i=At(e,t,{stdio:"inherit"});if(i.error)throw mr(e,i.error);if(i.status!==0)throw new Error(`${n} failed with exit code ${i.status}.`)}function mr(e,t){return t?.code==="ENOENT"?new Error(`${e} was not found on this machine. Install OpenSSH client tools or run iOS submit directly on the macOS runner.`):t}function sn(e){return`'${e.replace(/'/g,"'\\''")}'`}function mu(e){let t=sn(`${e}/app.ipa`),n=sn(`${e}/api_key.json`);return`#!/bin/bash
1888
+ -----END PRIVATE KEY-----`}let o=fe.join(It.tmpdir(),`api_key_${n}_${Date.now()}.json`),s={key_id:n,issuer_id:t,key:r,in_house:!1};return K.writeFileSync(o,JSON.stringify(s,null,2)),o}function fu(e){let t=["-o","StrictHostKeyChecking=no","-o","ServerAliveInterval=30"];return e.sshKey&&t.push("-i",e.sshKey),t.push(`${e.sshUser}@${e.sshHost}`),t}function mu(e){let t=["-o","StrictHostKeyChecking=no","-o","ServerAliveInterval=30"];return e.sshKey&&t.push("-i",e.sshKey),t}function gu(e,t){let n=St(e,t,{encoding:"utf-8",stdio:["ignore","pipe","inherit"]});if(n.error)throw gr(e,n.error);if(n.status!==0)throw new Error(`${e} failed with exit code ${n.status}.`);return n.stdout||""}function lr(e,t,n){let i=St(e,t,{stdio:"inherit"});if(i.error)throw gr(e,i.error);if(i.status!==0)throw new Error(`${n} failed with exit code ${i.status}.`)}function gr(e,t){return t?.code==="ENOENT"?new Error(`${e} was not found on this machine. Install OpenSSH client tools or run iOS submit directly on the macOS runner.`):t}function sn(e){return`'${e.replace(/'/g,"'\\''")}'`}function hu(e){let t=sn(`${e}/app.ipa`),n=sn(`${e}/api_key.json`);return`#!/bin/bash
1889
1889
  set -euo pipefail
1890
1890
 
1891
1891
  export PATH="/opt/homebrew/bin:/usr/local/bin:/usr/bin:/bin:/usr/sbin:/sbin:$HOME/.local/share/fastlane/3.4.0/bin:$PATH"
@@ -1913,42 +1913,42 @@ fastlane pilot upload \\
1913
1913
  --api_key_path ${n} \\
1914
1914
  --skip_submission true \\
1915
1915
  --skip_waiting_for_build_processing true
1916
- `}async function gu(e,t,n="internal",i,r="completed",o,s=!1,a="production"){let l=ot();if(!i||i==="*")throw new Error("Android package name is required for Google Play submission.");let d=o!==void 0?` (${o} rollout)`:"";l.start(`Uploading to Google Play ${n} track with ${r} release status${d}...`);try{let c=JSON.parse(Y.readFileSync(t,"utf-8"));hu(c);let u=await Es({packageName:i,serviceAccount:c,aabPath:e,track:n,releaseStatus:r,userFraction:o,changesNotSentForReview:s});return l.stop(`AAB uploaded to ${n} track (versionCode ${u.versionCode})`),u}catch(c){throw l.stop("Google Play upload failed"),new Error(Ou(c,n,i,a))}}function hu(e){if(!e?.client_email||!e?.private_key)throw new Error("Invalid Google service account JSON: missing client_email or private_key.")}function lr(){let e=process.env.HOME||bt.homedir(),t=process.env.FASTLANE_GEM_HOME||fe.join(e,".local/share/fastlane/3.4.0"),n=[process.env.FASTLANE_BIN_DIR,"/usr/local/opt/ruby/bin","/opt/homebrew/opt/ruby/bin","/usr/local/bin","/opt/homebrew/bin","/usr/local/Cellar/fastlane/2.227.0/libexec/bin",fe.join(t,"bin"),process.env.PATH].filter(Boolean).join(":");return{...process.env,PATH:n,GEM_HOME:t,GEM_PATH:[t,"/usr/local/Cellar/fastlane/2.227.0/libexec",process.env.GEM_PATH].filter(Boolean).join(":"),FASTLANE_INSTALLED_VIA_HOMEBREW:"true",FASTLANE_SKIP_UPDATE_CHECK:"1",FASTLANE_HIDE_CHANGELOG:"1",LANG:process.env.LANG||"en_US.UTF-8",LC_ALL:process.env.LC_ALL||"en_US.UTF-8",CI:process.env.CI||"1"}}function yu(){let e=lr(),t=vs(e);if(t)return t;if(process.env.MACH_SKIP_FASTLANE_INSTALL!=="1"){Au(e);let n=vs(lr());if(n)return n}return{command:"fastlane",env:lr()}}function vs(e){let t=process.env.HOME||bt.homedir(),n=[process.env.FASTLANE_BINARY,"/usr/local/bin/fastlane","/opt/homebrew/bin/fastlane","/usr/local/Cellar/fastlane/2.227.0/libexec/bin/fastlane",fe.join(process.env.FASTLANE_GEM_HOME||fe.join(t,".local/share/fastlane/3.4.0"),"bin/fastlane"),"fastlane"].filter(Boolean);for(let i of n){if(i.includes("/")&&!Y.existsSync(i))continue;if(!At(i,["--version"],{env:e,stdio:"ignore"}).error)return{command:i,env:e}}return null}function Au(e){let t=At("gem",["--version"],{env:e,stdio:"ignore"});if(t.error||t.status!==0)return;let n=process.env.HOME||bt.homedir(),i=process.env.FASTLANE_GEM_HOME||fe.join(n,".local/share/fastlane/3.4.0"),r=fe.join(i,"bin");Y.mkdirSync(r,{recursive:!0}),se(G.dim("fastlane not found. Installing fastlane into the local Mach runner cache..."));let o=At("gem",["install","fastlane","-NV","--install-dir",i,"--bindir",r],{env:{...e,GEM_HOME:i,GEM_PATH:[i,e.GEM_PATH].filter(Boolean).join(":")},stdio:"inherit"});(o.error||o.status!==0)&&se(G.yellow("Automatic fastlane install failed; Mach will try PATH resolution once more."))}function Su(e=Cs){let t=[],n="",i=r=>{let o=xs(r);if(o)for(t.push(o);t.length>e;)t.shift()};return{append(r,o){let s=Buffer.isBuffer(r)?r.toString("utf8"):String(r);o.write(s),n+=s;let a=n.split(/\r?\n/);n=a.pop()||"";for(let l of a)i(l)},flush(){n.trim()&&i(n),n=""},lines(){return t.slice()}}}function bu(e,t){let n=new Error(Iu(e,t));return n.logs=ks(t),n.exitCode=e,n}function Iu(e,t){let n=`fastlane pilot failed with exit code ${e??"unknown"}.`,i=Eu(t);return i.length===0?n:`${n}
1916
+ `}async function yu(e,t,n="internal",i,r="completed",o,s=!1,a="production"){let l=st();if(!i||i==="*")throw new Error("Android package name is required for Google Play submission.");let d=o!==void 0?` (${o} rollout)`:"";l.start(`Uploading to Google Play ${n} track with ${r} release status${d}...`);try{let c=JSON.parse(K.readFileSync(t,"utf-8"));Au(c);let u=await $s({packageName:i,serviceAccount:c,aabPath:e,track:n,releaseStatus:r,userFraction:o,changesNotSentForReview:s});return l.stop(`AAB uploaded to ${n} track (versionCode ${u.versionCode})`),u}catch(c){throw l.stop("Google Play upload failed"),new Error(Cu(c,n,i,a))}}function Au(e){if(!e?.client_email||!e?.private_key)throw new Error("Invalid Google service account JSON: missing client_email or private_key.")}function dr(){let e=process.env.HOME||It.homedir(),t=process.env.FASTLANE_GEM_HOME||fe.join(e,".local/share/fastlane/3.4.0"),n=[process.env.FASTLANE_BIN_DIR,"/usr/local/opt/ruby/bin","/opt/homebrew/opt/ruby/bin","/usr/local/bin","/opt/homebrew/bin","/usr/local/Cellar/fastlane/2.227.0/libexec/bin",fe.join(t,"bin"),process.env.PATH].filter(Boolean).join(":");return{...process.env,PATH:n,GEM_HOME:t,GEM_PATH:[t,"/usr/local/Cellar/fastlane/2.227.0/libexec",process.env.GEM_PATH].filter(Boolean).join(":"),FASTLANE_INSTALLED_VIA_HOMEBREW:"true",FASTLANE_SKIP_UPDATE_CHECK:"1",FASTLANE_HIDE_CHANGELOG:"1",LANG:process.env.LANG||"en_US.UTF-8",LC_ALL:process.env.LC_ALL||"en_US.UTF-8",CI:process.env.CI||"1"}}function Su(){let e=dr(),t=Ps(e);if(t)return t;if(process.env.MACH_SKIP_FASTLANE_INSTALL!=="1"){bu(e);let n=Ps(dr());if(n)return n}return{command:"fastlane",env:dr()}}function Ps(e){let t=process.env.HOME||It.homedir(),n=[process.env.FASTLANE_BINARY,"/usr/local/bin/fastlane","/opt/homebrew/bin/fastlane","/usr/local/Cellar/fastlane/2.227.0/libexec/bin/fastlane",fe.join(process.env.FASTLANE_GEM_HOME||fe.join(t,".local/share/fastlane/3.4.0"),"bin/fastlane"),"fastlane"].filter(Boolean);for(let i of n){if(i.includes("/")&&!K.existsSync(i))continue;if(!St(i,["--version"],{env:e,stdio:"ignore"}).error)return{command:i,env:e}}return null}function bu(e){let t=St("gem",["--version"],{env:e,stdio:"ignore"});if(t.error||t.status!==0)return;let n=process.env.HOME||It.homedir(),i=process.env.FASTLANE_GEM_HOME||fe.join(n,".local/share/fastlane/3.4.0"),r=fe.join(i,"bin");K.mkdirSync(r,{recursive:!0}),se(G.dim("fastlane not found. Installing fastlane into the local Mach runner cache..."));let o=St("gem",["install","fastlane","-NV","--install-dir",i,"--bindir",r],{env:{...e,GEM_HOME:i,GEM_PATH:[i,e.GEM_PATH].filter(Boolean).join(":")},stdio:"inherit"});(o.error||o.status!==0)&&se(G.yellow("Automatic fastlane install failed; Mach will try PATH resolution once more."))}function Iu(e=Ns){let t=[],n="",i=r=>{let o=Ms(r);if(o)for(t.push(o);t.length>e;)t.shift()};return{append(r,o){let s=Buffer.isBuffer(r)?r.toString("utf8"):String(r);o.write(s),n+=s;let a=n.split(/\r?\n/);n=a.pop()||"";for(let l of a)i(l)},flush(){n.trim()&&i(n),n=""},lines(){return t.slice()}}}function Eu(e,t){let n=new Error(_u(e,t));return n.logs=Ls(t),n.exitCode=e,n}function _u(e,t){let n=`fastlane pilot failed with exit code ${e??"unknown"}.`,i=wu(t);return i.length===0?n:`${n}
1917
1917
 
1918
1918
  Fastlane output:
1919
1919
  ${i.join(`
1920
- `)}`}function Eu(e){let t=ks(e);if(t.length===0)return[];let n=Rs(t.filter(wu)),i=_u(t);if(i)return[i,...Ps(n,or-1,_s)];let r=n.length>0?n:t.slice(-or);return Ps(Rs(r),or,_s)}function _u(e){let t=e.join(`
1921
- `),n=t.match(/CFBundleShortVersionString\s*\[([^\]]+)\]/i)?.[1]||t.match(/train version ['"]([^'"]+)['"]/i)?.[1];if(/Invalid Pre-Release Train/i.test(t)||/CFBundleShortVersionString[\s\S]*must contain a higher version/i.test(t))return[`App Store Connect rejected CFBundleShortVersionString${n?` ${n}`:""}: this App Store version train is closed or not higher than the approved version.`,'ios.buildNumber="auto" only changes CFBundleVersion; bump the marketing version (Expo app.json "expo.version" / iOS MARKETING_VERSION), rebuild, then submit the new build.'].join(" ");if(!/bundle version must be higher than the previously uploaded version/i.test(t))return null;let i=t.match(/previous(?:ly)?BundleVersion\s*:\s*([0-9.]+)/i)?.[1]||t.match(/previously uploaded version:\s*[‘'"]?([0-9.]+)/i)?.[1];return`App Store Connect rejected CFBundleVersion: the bundle version must be higher than the previously uploaded version.${i?` Previous uploaded build: ${i}.`:""}`}function wu(e){return/\[!\]|ERROR ITMS-\d+|ITMS-\d+|ENTITY_ERROR|previousBundleVersion|CFBundleVersion|Application Loader Error Output|Transporter Error|Transporter transfer failed|Asset validation failed|Validation failed|Error Domain=|The request could not be completed|No suitable application records|Could not|authentication|unauthori[sz]ed|invalid|failed|exception/i.test(e)}function Rs(e){let t=new Set,n=[];for(let i of e){let r=i.trim();!r||t.has(r)||(t.add(r),n.push(i))}return n}function Ps(e,t,n){let i=[],r=0;for(let o=e.length-1;o>=0&&i.length<t;o--){let s=e[o],a=r+s.length+1;if(a>n&&i.length>0)break;i.unshift(s.length>n?`${s.slice(0,n-18)}... [truncated]`:s),r=a}return i}function ks(e){if(!Array.isArray(e))return[];let t=[];for(let n of e){let i=String(n).split(/\r?\n/);for(let r of i){let o=xs(r);o&&t.push(o)}}return t.slice(-Cs)}function xs(e){return vu($u(e).trimEnd()).trim()}function $u(e){return e.replace(/[\u001b\u009b][[\]()#;?]*(?:(?:(?:[a-zA-Z\d]*(?:;[a-zA-Z\d]*)*)?\u0007)|(?:(?:\d{1,4}(?:;\d{0,4})*)?[\dA-PR-TZcf-nq-uy=><~]))/g,"")}function vu(e){let t=e.replace(/-----BEGIN [^-]+-----[\s\S]*?-----END [^-]+-----/g,"[REDACTED_PRIVATE_KEY]").replace(/(authorization:\s*bearer\s+)[A-Za-z0-9._-]+/ig,"$1[REDACTED]").replace(/((?:password|token|secret|private[_-]?key)\s*[:=]\s*)("[^"]+"|'[^']+'|[^\s,]+)/ig,"$1[REDACTED]");for(let[n,i]of Object.entries(process.env))!i||i.length<8||/(TOKEN|SECRET|PASSWORD|PASS|PRIVATE|CREDENTIAL)/i.test(n)&&(t=t.replace(new RegExp(Ru(i),"g"),"[REDACTED]"));return t}function Ru(e){return e.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}function Pu(e){return e?.code!=="ENOENT"?e:new Error(["fastlane was not found on PATH.","Mach submit uses Fastlane for iOS TestFlight/App Store uploads.","Run iOS submit on a macOS runner with Fastlane, or expose it via FASTLANE_BINARY / FASTLANE_BIN_DIR.","Example: gem install fastlane -NV"].join(`
1922
- `))}function Ou(e,t,n,i="production"){let r=e?.message||String(e);if(/changesNotSentForReview/i.test(r))return["Google Play rejected the commit because this change may need explicit review handling.",`Package: ${n||"unknown"} | Track: ${t}`,`Retry with: ${f.nameLower} submit --latest --platform android --profile ${i} --track ${t} --changes-not-sent-for-review`,"Then send the change for review from Google Play Console if required."].join(`
1920
+ `)}`}function wu(e){let t=Ls(e);if(t.length===0)return[];let n=Os(t.filter(vu)),i=$u(t);if(i)return[i,...Ds(n,or-1,vs)];let r=n.length>0?n:t.slice(-or);return Ds(Os(r),or,vs)}function $u(e){let t=e.join(`
1921
+ `),n=t.match(/CFBundleShortVersionString\s*\[([^\]]+)\]/i)?.[1]||t.match(/train version ['"]([^'"]+)['"]/i)?.[1];if(/Invalid Pre-Release Train/i.test(t)||/CFBundleShortVersionString[\s\S]*must contain a higher version/i.test(t))return[`App Store Connect rejected CFBundleShortVersionString${n?` ${n}`:""}: this App Store version train is closed or not higher than the approved version.`,'ios.buildNumber="auto" only changes CFBundleVersion; bump the marketing version (Expo app.json "expo.version" / iOS MARKETING_VERSION), rebuild, then submit the new build.'].join(" ");if(!/bundle version must be higher than the previously uploaded version/i.test(t))return null;let i=t.match(/previous(?:ly)?BundleVersion\s*:\s*([0-9.]+)/i)?.[1]||t.match(/previously uploaded version:\s*[‘'"]?([0-9.]+)/i)?.[1];return`App Store Connect rejected CFBundleVersion: the bundle version must be higher than the previously uploaded version.${i?` Previous uploaded build: ${i}.`:""}`}function vu(e){return/\[!\]|ERROR ITMS-\d+|ITMS-\d+|ENTITY_ERROR|previousBundleVersion|CFBundleVersion|Application Loader Error Output|Transporter Error|Transporter transfer failed|Asset validation failed|Validation failed|Error Domain=|The request could not be completed|No suitable application records|Could not|authentication|unauthori[sz]ed|invalid|failed|exception/i.test(e)}function Os(e){let t=new Set,n=[];for(let i of e){let r=i.trim();!r||t.has(r)||(t.add(r),n.push(i))}return n}function Ds(e,t,n){let i=[],r=0;for(let o=e.length-1;o>=0&&i.length<t;o--){let s=e[o],a=r+s.length+1;if(a>n&&i.length>0)break;i.unshift(s.length>n?`${s.slice(0,n-18)}... [truncated]`:s),r=a}return i}function Ls(e){if(!Array.isArray(e))return[];let t=[];for(let n of e){let i=String(n).split(/\r?\n/);for(let r of i){let o=Ms(r);o&&t.push(o)}}return t.slice(-Ns)}function Ms(e){return Pu(Ru(e).trimEnd()).trim()}function Ru(e){return e.replace(/[\u001b\u009b][[\]()#;?]*(?:(?:(?:[a-zA-Z\d]*(?:;[a-zA-Z\d]*)*)?\u0007)|(?:(?:\d{1,4}(?:;\d{0,4})*)?[\dA-PR-TZcf-nq-uy=><~]))/g,"")}function Pu(e){let t=e.replace(/-----BEGIN [^-]+-----[\s\S]*?-----END [^-]+-----/g,"[REDACTED_PRIVATE_KEY]").replace(/(authorization:\s*bearer\s+)[A-Za-z0-9._-]+/ig,"$1[REDACTED]").replace(/((?:password|token|secret|private[_-]?key)\s*[:=]\s*)("[^"]+"|'[^']+'|[^\s,]+)/ig,"$1[REDACTED]");for(let[n,i]of Object.entries(process.env))!i||i.length<8||/(TOKEN|SECRET|PASSWORD|PASS|PRIVATE|CREDENTIAL)/i.test(n)&&(t=t.replace(new RegExp(Ou(i),"g"),"[REDACTED]"));return t}function Ou(e){return e.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}function Du(e){return e?.code!=="ENOENT"?e:new Error(["fastlane was not found on PATH.","Mach submit uses Fastlane for iOS TestFlight/App Store uploads.","Run iOS submit on a macOS runner with Fastlane, or expose it via FASTLANE_BINARY / FASTLANE_BIN_DIR.","Example: gem install fastlane -NV"].join(`
1922
+ `))}function Cu(e,t,n,i="production"){let r=e?.message||String(e);if(/changesNotSentForReview/i.test(r))return["Google Play rejected the commit because this change may need explicit review handling.",`Package: ${n||"unknown"} | Track: ${t}`,`Retry with: ${f.nameLower} submit --latest --platform android --profile ${i} --track ${t} --changes-not-sent-for-review`,"Then send the change for review from Google Play Console if required."].join(`
1923
1923
  `);if(/caller does not have permission|permission denied|insufficient permissions|not authorized/i.test(r))return["Google Play rejected the service account permissions.",`Package: ${n||"unknown"} | Track: ${t}`,"Grant this service account access to the app in Play Console with release permissions, then retry."].join(`
1924
1924
  `);if(/package.*not found|application.*not found|no application was found/i.test(r))return["Google Play could not find this package for the selected service account.",`Package: ${n||"unknown"} | Track: ${t}`,"Check android.package / submit.<profile>.android.package and make sure the app exists in this Play Console account."].join(`
1925
1925
  `);if(/only releases with status draft|draft app/i.test(r))return["Google Play requires a draft release for this app state.",`Package: ${n||"unknown"} | Track: ${t}`,`Retry with: ${f.nameLower} submit --latest --platform android --profile ${i} --track ${t} --release-status draft`].join(`
1926
1926
  `);if(r.includes("does not allow any existing users to upgrade"))return["Google Play rejected this release because the uploaded AAB is not an upgrade for existing users.",`Package: ${n||"unknown"} | Track: ${t}`,"Build a new Android artifact with a higher versionCode, then submit that build.",`Recommended: ${f.nameLower} build --platform android --profile ${i} --auto-version`,`Then: ${f.nameLower} submit --latest --platform android --profile ${i} --track ${t}`].join(`
1927
1927
  `);if(/version code \d+ has already been used/i.test(r))return[r.match(/version code \d+ has already been used[^\n]*/i)?.[0]||"Version code has already been used.",`Package: ${n||"unknown"} | Track: ${t}`,"Build a new Android artifact with a higher versionCode, then submit that build.",`Recommended: ${f.nameLower} build --platform android --profile ${i} --auto-version`].join(`
1928
- `);let o=r.match(/Google Api Error:[^\n]+/)||r.match(/Google Play API Error:[^\n]+/);return o?o[0]:r||"Google Play submission failed"}function Du(e){try{Y.existsSync(e)&&Y.rmSync(e,{recursive:!0,force:!0})}catch{}}function ee(e){console.log(G.red(`\u274C ${e}`))}function se(e){console.log(G.gray(`\u2022 ${e}`))}function pr(e){console.log(G.green(`\u2713 ${e}`))}import gr from"fs";import Dt from"path";var Cu=new Set([".gradle",".idea",".mach-cache",".expo",".turbo","build","builds","coverage","dist",".mach_cli","mach_cli"]),Ls=new Set([".git",".gradle",".cxx",".expo","DerivedData","node_modules","Pods"]),Ms=e=>e.split(Dt.sep).filter(Boolean).join("/"),Us=(e,t)=>e===t||e.startsWith(`${t}/`),Fs=(e,t)=>e==="."?t:`${e}/${t}`,Tu=(e,t,n)=>{let i=Fs(t,n==="ios"?"android":"ios");if(Us(e,i))return i;let r=e.split("/"),o=r.find(s=>Ls.has(s));return o||(r[0]===".yarn"&&r[1]==="cache"?".yarn/cache":r[0]||e)},Nu=(e,t,n=".")=>{let i=Ms(e);if(!i)return!1;let r=Bi(n),o=i.split("/"),s=o[0];if(o.some(d=>Ls.has(d))||s===".yarn"&&o[1]==="cache"||Cu.has(s))return!0;let a=Fs(r,t==="ios"?"android":"ios");if(Us(i,a))return!0;let l=o.findIndex(d=>d==="android"||d==="ios");return!!(l>=0&&o.slice(l+1).includes("build"))},Bs=(e,t,n,i=".")=>{let r=0,o=new Set,s=Bi(i),a=(l,d)=>{let c=Ms(d);if(Nu(c,n,s)){o.add(Tu(c,s,n));return}let u=gr.lstatSync(l);if(!u.isSymbolicLink()){if(u.isDirectory()){for(let p of gr.readdirSync(l))a(Dt.join(l,p),Dt.join(d,p));return}if(u.isFile()){let p=Dt.dirname(c);e.addLocalFile(l,p==="."?void 0:p,Dt.basename(c)),r+=1}}};for(let l of gr.readdirSync(t))a(Dt.join(t,l),l);return{files:r,skipped:Array.from(o).sort()}};function js(e){return String(e||"").replace(/\\\/Users\\\/[^\\/\s"'`]+/g,"\\/Users\\/[REDACTED]").replace(/\/Users\/[^/\\\s"'`]+/g,"/Users/[REDACTED]")}var hr=8,xu=6,Ws=Number(process.env.MACH_ARTIFACT_UPLOAD_MAX_ATTEMPTS||2),yr=Number(process.env.MACH_ARTIFACT_UPLOAD_TIMEOUT_MS||12e4),Ar="ap-south-1",Lu=`${f.envPrefix}S3_DEBUG`,Mu=()=>["1","true","yes","on"].includes(String(process.env[Lu]||"").trim().toLowerCase()),Ir=(e,t)=>{if(Mu()&&t)try{let n=new URL(t);E.info(_.dim(`[S3_DEBUG] ${e} host=${n.hostname} expectedRegion=${Ar}`)),n.hostname.includes(Ar)||E.warn(_.yellow(`[S3_DEBUG] ${e} host ${n.hostname} does not include ${Ar}`))}catch(n){E.warn(_.yellow(`[S3_DEBUG] Could not parse ${e} presigned URL host: ${n.message}`))}},Uu=[{value:"production",label:"production",hint:"Store / release build"},{value:"staging",label:"staging",hint:"Internal testing build"},{value:"development",label:"development",hint:"Development build"}],ra=e=>new Promise(t=>setTimeout(t,e)),Fu=e=>!e.yes&&!e.failOnly&&!e.buildId&&process.stdin.isTTY&&process.stdout.isTTY,Bu=e=>{if(!e||typeof e!="object")return;let t=[e.distribution?`distribution: ${e.distribution}`:void 0,e.environment?`env: ${e.environment}`:void 0,e.developmentClient?"development client":void 0,e.simulator?"simulator":void 0].filter(Boolean);return t.length>0?t.join(", "):void 0},ju=()=>{let e=re(`./${f.configFileName}`),t=e?.build&&typeof e.build=="object"?e.build:{},n=Object.keys(t);return n.length===0?Uu:n.map(i=>({value:i,label:i,hint:Bu(t[i])}))},Hu=async e=>{let t=Fu(e);if(!e.platform&&t){let n=await Hs({message:"Select platform",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"}]});Zn(n)&&(Vs("Build cancelled."),process.exit(0)),e.platform=n}if(!e.buildProfile&&t){let n=ju(),i=await Hs({message:"Select build profile",options:n,initialValue:n.find(r=>r.value==="production")?.value||n[0]?.value});Zn(i)&&(Vs("Build cancelled."),process.exit(0)),e.buildProfile=i}e.buildProfile||(e.buildProfile="production")},Ys=e=>{if(e===!0||e===!1)return e;if(e===1||e==="1")return!0;if(e===0||e==="0")return!1;if(typeof e!="string")return;let t=e.trim().toLowerCase();if(["true","yes","on"].includes(t))return!0;if(["false","no","off"].includes(t))return!1},oa=(e,t)=>{if(e)for(let n of t){let i=n.replace(/[.*+?^${}()|[\]\\]/g,"\\$&"),r=e.match(new RegExp(`(?:^|\\s)${i}(?:=|\\s+)([^\\s]+)`));if(r?.[1])return r[1].replace(/^["']|["']$/g,"")}},Gu=(e,t)=>!!e&&t.some(n=>new RegExp(`(?:^|\\s)${n.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}(?:\\s|$)`).test(e)),Vu=e=>{let n=oa(e,["--platform"])||e?.split(/\s+/).find(i=>i==="ios"||i==="android");return n==="ios"||n==="android"?n:void 0},zu=async e=>{if(!e.projectId||!e.buildId)return;let t=!!e.local;try{let n=await w.get(`/builds/${e.projectId}/${e.buildId}`),i=n.data?.build||n.data;if(!i||typeof i!="object"){if(t)throw new Error("MACH API returned an empty build record.");return}let r=typeof i.buildArgs=="string"?i.buildArgs:void 0;if(bo(e,i),!e.platform){let o=i.platform||Vu(r);(o==="ios"||o==="android")&&(e.platform=o)}if(e.buildProfile||(e.buildProfile=i.buildProfile||i.profile||i.profileName||oa(r,["--profile","--build-profile","-p"])),e.simulator===void 0){let o=Ys(i.simulator??i.isSimulator);o!==void 0?e.simulator=o:Gu(r,["--simulator"])&&(e.simulator=!0)}if(e.developmentClient===void 0){let o=Ys(i.developmentClient??i.devClient);o!==void 0&&(e.developmentClient=o)}}catch(n){if(t){let i=n.response?.data?.message||n.message||"unknown error";throw new Error(`Could not load the canonical MACH build record for runner ${e.buildId}: ${i}. The runner stopped to avoid allocating or packaging a different native version.`)}E.warn(_.yellow(`Could not load saved build options for runner: ${n.message}`))}},Ku=e=>{if(!Number.isFinite(e)||e<=0)return"0 B";let t=["B","KB","MB","GB"],n=Math.min(Math.floor(Math.log(e)/Math.log(1024)),t.length-1);return`${(e/Math.pow(1024,n)).toFixed(n===0?0:1)} ${t[n]}`},Wu=e=>{let t=e.response?.status,n=e.code||"",i=e.message||"";return t?t===408||t===409||t===425||t===429||t>=500||/ECONNRESET|ETIMEDOUT|EAI_AGAIN|ENOTFOUND|ECONNABORTED|socket hang up|network|timeout/i.test(`${n} ${i}`):!0},ln=async(e,t,n=xu)=>{let i;for(let r=1;r<=n;r++)try{return await t()}catch(o){if(i=o,!Wu(o)||r>=n)break;let s=Math.min(6e4,2e3*Math.pow(2,r-1)),a=o.response?.status||o.code||o.message||"network error";E.warn(_.yellow(`${e} failed transiently (${a}). Retrying in ${Math.round(s/1e3)}s... (${r}/${n})`)),await ra(s)}throw i},Yu=async(e,t,n)=>{let i=de.basename(e),r=q.statSync(e).size,o=Math.round(yr/1e3);Ir(`ARTIFACT_UPLOAD ${i}`,t);try{await ln(`Upload artifact ${i}`,async()=>{let s=new AbortController,a=q.createReadStream(e),l=setTimeout(()=>{a.destroy(new Error(`Artifact upload timed out after ${o}s`)),s.abort()},yr);try{await Xn.put(t,a,{headers:{"Content-Type":n,"Content-Length":r,Connection:"close"},maxBodyLength:1/0,maxContentLength:1/0,timeout:yr,timeoutErrorMessage:`Artifact upload timed out after ${o}s`,signal:s.signal})}finally{clearTimeout(l)}},Ws)}catch(s){throw new Error(`${i} (${Ku(r)}) failed after ${Ws} upload attempt(s): ${s.message||s}`)}return r},qu=e=>{let t=e.response?.status;return t?t===408||t===429||t>=500:!0},Je=e=>e.credentialId||e.id,Ju=async(e,t)=>{let n=Je(e);if(!n)return e.downloadUrl;let i=await w.get(`/credentials/${n}/download`,{params:{projectId:t,format:"raw"}});return i.data?.status==="success"&&i.data?.downloadUrl?i.data.downloadUrl:e.downloadUrl},Er=async(e,t)=>{let n=e.downloadUrl;for(let i=1;i<=hr;i++)try{if((!n||i>1)&&(n=await Ju(e,t)),!n)throw new Error(`Credential ${e.name||Je(e)||"unknown"} has no download URL.`);let r=await Xn.get(n,{responseType:"arraybuffer",timeout:6e4,maxContentLength:1/0,maxBodyLength:1/0,headers:{Connection:"close"}});return Buffer.from(r.data).toString("base64")}catch(r){if(i>=hr||!qu(r))throw r;let o=Math.min(1500*i*i,15e3);E.warn(_.dim(` - Temporary network error downloading ${e.name}. Retrying... (${i}/${hr})`)),await ra(o)}throw new Error(`Failed to download credential ${e.name||Je(e)||"unknown"}.`)},Xu=(e,t)=>t?.ios?.buildNumber??t?.iosBuildNumber??e?.ios?.buildNumber??e?.expo?.ios?.buildNumber,Zu=(e,t)=>t?.android?.versionCode??t?.androidVersionCode??e?.android?.versionCode??e?.expo?.android?.versionCode,qs=(e,t,n,i)=>e==="ios"?t.iosBundleIdentifier||n?.ios?.bundleIdentifier||n?.expo?.ios?.bundleIdentifier||i:t.androidPackage||n?.android?.package||n?.expo?.android?.package||n?.name||i,Js=async(e,t,n)=>{let i=await w.post(`/projects/${e}/next-build-number`,{platform:t,scope:n});if(i.data.status!=="success"||!i.data.buildNumber)throw new Error(i.data.message||"Dashboard did not return a build number.");return String(i.data.buildNumber)},an=e=>{let t={};return e.platform==="ios"&&e.resolvedBuildNumber&&(t.buildNumber=e.resolvedBuildNumber),e.platform==="android"&&e.resolvedVersionCode&&(t.versionCode=e.resolvedVersionCode),t},sa=(e,t,n=[])=>{if(!q.existsSync(e))return n;let i;try{i=q.readdirSync(e,{withFileTypes:!0})}catch{return n}for(let r of i){if(r.name==="Pods"||r.name==="build"||r.name==="DerivedData")continue;let o=de.join(e,r.name);r.isDirectory()?sa(o,t,n):r.name===t&&n.push(o)}return n},Qu=(e,t,n)=>{let i=`${n} ${t.environment||""}`.toLowerCase(),r=e.toLowerCase(),o=0;return(i.includes("development")||i.includes("dev"))&&/(^|[.-])dev(elopment)?($|[.-])/.test(r)&&(o+=20),(i.includes("staging")||i.includes("stage"))&&/(^|[.-])stag(e|ing)?($|[.-])/.test(r)&&(o+=20),(i.includes("production")||i.includes("prod"))&&(/(^|[.-])(dev|development|stag|stage|staging)($|[.-])/.test(r)||(o+=20)),o},ep=(e,t)=>{let n=Wt(process.cwd(),e.appDirectory),i=de.join(n.appRoot,"ios"),r=q.existsSync(i)?i:n.appRoot,o=sa(r,"project.pbxproj"),s=[];for(let a of o)try{let d=q.readFileSync(a,"utf8").matchAll(/PRODUCT_BUNDLE_IDENTIFIER\s*=\s*"?([^";\s]+)"?;/g);for(let c of d){let u=c[1]?.trim();u&&!u.includes("$")&&!u.startsWith("com.apple.")&&!s.includes(u)&&s.push(u)}}catch{}if(s.length!==0)return s.length===1?s[0]:s.map(a=>({bundleId:a,score:Qu(a,e,t)})).sort((a,l)=>l.score-a.score)[0]?.bundleId},Jn=e=>String(e||"").trim().toLowerCase().replace(/_/g,"-"),Qn=(e,t)=>{let n=Jn(e);return t==="ios"&&(n==="internal"||n==="ad-hoc")?"adhoc":t==="android"&&["internal","adhoc","ad-hoc","development","dev","staging","stage"].includes(n)?"internal":n},_r=(e,t,n)=>{let i=Qn(e.distributionType||e.meta?.distributionType,n);return i?i===Qn(t,n):!0},Xs=(e,t,n)=>{let i=Qn(e.distributionType||e.meta?.distributionType,n),r=Qn(t,n);return i?i===r?3:n==="android"&&r!=="store"&&i!=="store"?2:0:1},tp=e=>{let t=e.toLowerCase();return t==="development"||t==="dev"||t.startsWith("development-")||t.startsWith("dev-")||t.endsWith("-development")||t.endsWith("-dev")},np=e=>{let t=e.toLowerCase();return t.includes("staging")||t.includes("stage")||t.includes("preview")||t.includes("adhoc")||t.includes("ad-hoc")},ip=(e,t)=>{let n=Jn(e.distribution),i=Jn(e.iosExportMethod),r=Jn(e.environment);return e.platform!=="ios"?n==="store"?"store":"internal":e.developmentClient||e.simulator?"development":i==="app-store"||n==="store"?"store":i==="development"||n==="development"?"development":i==="ad-hoc"||i==="adhoc"||n==="ad-hoc"||n==="adhoc"||n==="internal"?"adhoc":r==="production"||r==="store"?"store":r==="development"||r==="dev"?"development":r==="staging"||r==="stage"||r==="preview"?"adhoc":t.toLowerCase()==="production"||t.toLowerCase().includes("store")?"store":tp(t)?"development":(np(t),"adhoc")},aa=e=>e.bundleId||e.bundleIdentifier||e.packageName||e.meta?.bundleId||e.meta?.bundleIdentifier||e.meta?.packageName,la=(e,t)=>{if(!t)return!0;let n=aa(e);return!n||n==="*"||n===t},rp=(e,t)=>e.type==="android_keystore"&&la(e,t),Zs=(e,t)=>{let n=aa(e);return!t||!n?0:n===t?2:n==="*"?1:-1},da=e=>{try{let t=Buffer.from(e,"base64").toString("utf8"),n=t.match(/<key>application-identifier<\/key>\s*<string>([^<]+)<\/string>/)?.[1]?.trim();if(!n)return;let i=t.match(/<key>TeamIdentifier<\/key>\s*<array>\s*<string>([^<]+)<\/string>/)?.[1]?.trim();if(i&&n.startsWith(`${i}.`))return n.slice(i.length+1);let r=n.indexOf(".");return r>=0?n.slice(r+1):n}catch{return}},op=(e,t)=>{if(e===t||e==="*")return!0;if(e.endsWith(".*")){let n=e.slice(0,-2);return t.startsWith(`${n}.`)}return!1},sp=(e,t)=>{if(!t)return!0;let n=da(e);if(n)return op(n,t);try{return Buffer.from(e,"base64").toString("latin1").includes(t)}catch{return!0}},wr=(e,t,n,i)=>[...e].sort((r,o)=>{let s=Zs(o,t)*10+Xs(o,n,i)-(Zs(r,t)*10+Xs(r,n,i));return s!==0?s:(o.createdAt||0)-(r.createdAt||0)}),$r=e=>{if(typeof e!="string")return;let t=e.replace(/[^a-fA-F0-9]/g,"").toUpperCase();return t.length===40?t:void 0},ap=e=>$r(e?.certificateSha1)||$r(e?.meta?.certificateSha1),lp=e=>{let t=e?.profileCertificateSha1s??e?.meta?.profileCertificateSha1s;return Array.isArray(t)?t.map($r).filter(n=>!!n):[]},dp=e=>{let t=q.mkdtempSync(de.join(ia.tmpdir(),`${f.nameLower}-verify-signing-`));try{let n=de.join(t,"certificate.p12");q.writeFileSync(n,Buffer.from(e.certificateBase64,"base64"),{mode:384});let i=[...new Set([e.storedPassword||"","",f.keychainPassword])],r;for(let o of i)try{let s=Oo(n,o);for(let a=0;a<e.profiles.length;a++){let l=de.join(t,`profile-${a}.mobileprovision`);q.writeFileSync(l,Buffer.from(e.profiles[a].profileBase64,"base64"),{mode:384}),Do(s,Po(l))}return o}catch(s){r=s instanceof Error?s:new Error(String(s))}throw r||new Error("Could not verify the iOS signing certificate.")}finally{try{q.rmSync(t,{recursive:!0,force:!0})}catch{}}},cp=async e=>{let{projectId:t,signingTargets:n,distributionType:i,teamId:r,projectSecrets:o}=e,s=new Map,a=[];for(let g of n){E.info(_.dim(` Credential target: bundle ${g.bundleIdentifier} (${i})`));let S=await w.get("/credentials/resolve",{params:{projectId:t,platform:"ios",bundleId:g.bundleIdentifier,distributionType:i,teamId:r}}),b=S.data.status==="success"&&Array.isArray(S.data.credentials)?S.data.credentials:[];s.set(g.bundleIdentifier,b),a.push(...b)}let l=[],d=[],c=new Map,u=[];for(let g of n){let S=wr((s.get(g.bundleIdentifier)||[]).filter(A=>A.type==="ios_profile"&&_r(A,i,"ios")&&la(A,g.bundleIdentifier)),g.bundleIdentifier,i,"ios"),b;for(let A of S)if(!(!A.downloadUrl&&!Je(A)))try{let D=await Er(A,t);if(!sp(D,g.bundleIdentifier)){let I=da(D)||"unknown";throw new Error(`expected ${g.bundleIdentifier}, found ${I}`)}b=D,c.set(g.bundleIdentifier,A),E.info(_.dim(` - Resolved ${A.name||"provisioning profile"} for ${g.bundleIdentifier}`));break}catch(D){l.push(`${A.name||Je(A)||g.bundleIdentifier}: ${D.message}`)}if(!b){u.push(g.bundleIdentifier);continue}d.push({...g,profileBase64:b})}let p=new Set,m=d.map(g=>lp(c.get(g.bundleIdentifier))).filter(g=>g.length>0),h=wr(a.filter(g=>{if(g.type!=="ios_cert"||!_r(g,i,"ios"))return!1;let S=Je(g)||`${g.name||"certificate"}:${g.createdAt||""}`;if(p.has(S))return!1;p.add(S);let b=ap(g);return!(b&&m.length>0&&!m.every(A=>A.includes(b)))}),n[0]?.bundleIdentifier,i,"ios");for(let g of h)if(!(!g.downloadUrl&&!Je(g)))try{let S=await Er(g,t),b=d.length>0?dp({certificateBase64:S,storedPassword:g.password,profiles:d}):g.password||"";o.IOS_DIST_P12=S,o.IOS_P12_PASSWORD=b,E.info(_.dim(` - Verified ${g.name||"Apple signing certificate"} against ${d.length||1} provisioning profile${d.length===1?"":"s"}`));break}catch(S){l.push(`${g.name||Je(g)||"iOS certificate"}: ${S.message}`)}if(d.length>0){let g=d.find(S=>S.isMainApplication)||d[0];o.IOS_PROVISIONING_PROFILE=g.profileBase64,n.length>1&&d.length===n.length&&(o.IOS_PROVISIONING_PROFILES=Ro(d))}return{missingProfileBundleIds:u,failures:l}},ei=async e=>{if(e.failOnly){(!e.projectId||!e.buildId)&&(E.error(_.red("--project-id and --build-id are required with --fail-only.")),process.exit(1));let d=e.error||"Build runner failed before it could report a final status.";try{await w.patch(`/builds/${e.projectId}/${e.buildId}`,{status:"failed",error:d,endTime:Date.now()}),E.info(_.yellow(`Marked build ${e.buildId} as failed.`));return}catch(c){E.error(_.red(`Could not mark build failed: ${c.message}`)),process.exit(1)}}await zu(e),await Hu(e),e.platform!=="android"&&e.platform!=="ios"&&(E.error(`Platform ${e.platform} is not supported. Use 'android' or 'ios'.`),process.exit(1)),e.autoSubmit&&e.platform==="ios"&&e.simulator&&(E.error(_.red("--auto-submit cannot be used with --simulator because simulator builds are not App Store artifacts.")),process.exit(1)),e.autoSubmit&&e.dryRun&&E.warn(_.yellow("--auto-submit is ignored during --dry-run."));let t=br(),n=e.buildId||ku(),i=e.projectId,r=Date.now(),o=!!i,s=!0,a=async d=>{if(i)try{await w.patch(`/builds/${i}/${n}`,{status:"failed",error:d,endTime:Date.now()})}catch{}};if(e.local&&e.buildId&&i&&await ln("Mark isolated runner as building",()=>w.patch(`/builds/${i}/${n}`,{status:"building",runnerStartedAt:Date.now()})),e.local&&e.buildId){e.quiet||t.start(`Preparing isolated workspace for build: ${e.buildId}`);try{let d=await w.get(`/builds/${i}/${e.buildId}/source-url`);if(d.data.status!=="success")throw new Error("Failed to get source download URL from API");Ir("SOURCE_DOWNLOAD",d.data.downloadUrl);let c=await Xn.get(d.data.downloadUrl,{responseType:"stream"}),u=(i||e.projectId||"default").replace(/[^a-zA-Z0-9-_]/g,"_"),p=de.join(ia.homedir(),f.workspacesDir,u);q.mkdirSync(p,{recursive:!0});let m=new Set(["node_modules",`.${f.nameLower}-cache-meta`]),h=new Set(["Pods"]);if(q.existsSync(p)){let D=q.readdirSync(p);for(let I of D){if(m.has(I))continue;if(I==="ios"){let Q=de.join(p,"ios");try{let z=q.readdirSync(Q);for(let me of z)if(!h.has(me))try{q.rmSync(de.join(Q,me),{recursive:!0,force:!0})}catch{}}catch{}continue}let H=de.join(p,I);try{q.rmSync(H,{recursive:!0,force:!0})}catch{}}}let g=de.join(p,"source.zip"),S=c.data,b=q.createWriteStream(g);await new Promise((D,I)=>{S.pipe(b),S.on("error",H=>I(H)),b.on("finish",()=>D())}),new Ks(g).extractAllTo(p,!0);try{q.unlinkSync(g)}catch{}process.chdir(p),E.info(_.green(`\u2713 Persistent workspace ready: ${p}`)),E.info(_.dim(` \u{1F4E6} Cached dirs preserved: node_modules=${q.existsSync(de.join(p,"node_modules"))?"\u2705":"\u274C"}, Pods=${q.existsSync(de.join(p,"ios","Pods"))?"\u2705":"\u274C"}`)),t.stop()}catch(d){t.stop(`Failed to prepare isolated workspace: ${d.message}`),i&&await a(`Setup Error: ${d.message}`),process.exit(1)}}try{let d=e.repo;if(!d)try{d=zs("git config --get remote.origin.url").toString().trim()}catch{E.warn("Could not detect git repository URL.")}!d&&e.dryRun,d||(d="https://github.com/placeholder/repo.git"),E.info(`Build ID: ${_.cyan(n)}`);let c={},u={},p=null,m=[],h=[],g=re(`./${f.configFileName}`);if(g||(E.error(_.red(`${f.configFileName} not found. Run \`${f.nameLower} init\` or \`${f.nameLower} link\` first.`)),process.exit(1)),g){p=g;let y=go(g);e.framework=y,i=g.projectId;let $=e.local&&e.buildId?process.env.MACH_APP_DIRECTORY:void 0,v=Wt(process.cwd(),$||g.appDirectory,{requireAppDirectory:!0});e.appDirectory=v.appDirectory,$&&process.env.MACH_DEBUG&&E.info(_.dim(`Runner app directory: ${e.appDirectory}`)),_o(v,y,e.platform);let R=e.buildProfile||"production",x=_e(g,R);!x&&e.buildProfile&&(E.error(`Build profile '${R}' not found in ${f.configFileName}`),process.exit(1));let P=x||{};process.env.MACH_DEBUG&&E.info(_.dim(`Framework: ${y} | Build profile: ${R} | Platform: ${e.platform} | Distribution: ${P.distribution||"store"} | Environment: ${P.environment||R}`)),P.env&&(u=P.env,E.info(_.blue(`Use Build Profile: ${R}`)));let L=e.platform,B=P[L]||{},j=["developmentClient","simulator","distribution","buildCommand","apk","iosScheme","preBuild","postBuild","scheme","environment","androidPackage","iosBundleIdentifier","name","iosDeploymentTarget","iosApiKeyId","iosApiKeyIssuer","iosApiKeyPath","iosTeamId","iosConfiguration","iosExportMethod","branch","repo","instanceType","ami","bucket","region","nodeVersion"];e.name=g.name,e.appName=g.name,e.androidPackage=g.android?.package,e.iosBundleIdentifier=g.ios?.bundleIdentifier,e.iosScheme=g.ios?.iosScheme,!e.nodeVersion&&g.nodeVersion&&(e.nodeVersion=g.nodeVersion);let ge=J=>J==="androidPackage"?B.androidPackage??B.package??P.androidPackage??P.android?.package:J==="iosBundleIdentifier"?B.iosBundleIdentifier??B.bundleIdentifier??P.iosBundleIdentifier??P.ios?.bundleIdentifier:B[J]!==void 0?B[J]:P[J];for(let J of j){let Ee=ge(J),xn=J==="androidPackage"||J==="iosBundleIdentifier";Ee!==void 0&&(e[J]===void 0||xn)&&(e[J]=Ee)}if(e.platform==="ios"&&!(B.iosBundleIdentifier??B.bundleIdentifier??P.iosBundleIdentifier??P.ios?.bundleIdentifier)){let Ee=ep(e,R);Ee&&Ee!==e.iosBundleIdentifier&&(E.warn(_.yellow(`Detected native iOS bundle identifier ${Ee}; using it for credential lookup. Set build.${R}.ios.bundleIdentifier to make this explicit.`)),e.iosBundleIdentifier=Ee)}e.branch=e.branch||"main",e.iosConfiguration=e.iosConfiguration||(e.developmentClient?"Debug":"Release"),e.sshUser=e.sshUser||process.env.USER||"ubuntu",e.simulator===void 0&&(e.simulator=!1),e.local===void 0&&(e.local=!1),e.verbose===void 0&&(e.verbose=!1),E.info(_.dim(`Resolved build config: framework=${y}, appDirectory=${e.appDirectory}, profile=${R}, platform=${e.platform}, simulator=${e.platform==="ios"?String(!!e.simulator):"n/a"}, developmentClient=${String(!!e.developmentClient)}, distribution=${e.distribution||P.distribution||"store"}, iosConfiguration=${e.platform==="ios"?e.iosConfiguration||"Release":"n/a"}`));let Ke=J=>{if(!J)return J;if(J.startsWith("scripts.")){let Ee=J.split(".")[1],xn=g.scripts?.[Ee];if(xn)return xn;E.warn(`Script reference not found: ${J}`)}return J};if(e.buildCommand=Ke(e.buildCommand),e.preBuild=Ke(e.preBuild),e.postBuild=Ke(e.postBuild),!e.scheme&&g.scheme&&(e.scheme=g.scheme),e.platform==="ios"&&!e.simulator&&e.iosBundleIdentifier&&(m=vo({config:g,resolvedProfile:P,framework:y,appRoot:v.appRoot,mainBundleIdentifier:e.iosBundleIdentifier,mainTargetName:e.iosScheme||e.scheme||g.scheme}),m.length>1)){E.info(_.magenta(`\u2713 Detected ${m.length} signed iOS targets:`));for(let J of m)E.info(_.dim(` - ${J.targetName||(J.isMainApplication?"main application":"extension")}: ${J.bundleIdentifier}`))}let kn={...wt(g,f.envPrefix),...wt(P,`${f.envPrefix}PROFILE_`)};c={...c,...u,...kn},process.env.IOS_P12_PASSWORD&&!c.IOS_P12_PASSWORD&&(c.IOS_P12_PASSWORD=process.env.IOS_P12_PASSWORD),process.env.MATCH_PASSWORD&&!c.MATCH_PASSWORD&&(c.MATCH_PASSWORD=process.env.MATCH_PASSWORD),e.platform==="ios"&&(!e.iosTeamId&&P.ios?.appleTeamId&&(e.iosTeamId=P.ios.appleTeamId),!e.iosTeamId&&g.submit?.[R]?.ios?.appleTeamId&&(e.iosTeamId=g.submit[R].ios.appleTeamId),!e.iosTeamId&&g.submit?.production?.ios?.appleTeamId&&(E.warn(_.yellow(`Check: Using 'production' Team ID for '${R}' build.`)),e.iosTeamId=g.submit.production.ios.appleTeamId),e.iosTeamId?E.info(_.magenta(`\u2713 Injected iOS Team ID from config: ${e.iosTeamId}`)):e.simulator||E.warn(_.yellow("\u26A0\uFE0F No iOS Team ID found. Device or archive signing may fail unless managed iOS credentials provide the team automatically.")))}let S="unknown";try{S=zs("git rev-parse --abbrev-ref HEAD").toString().trim()}catch{E.warn("Failed to detect git branch.")}let b="1.0.0";try{q.existsSync("./package.json")&&(b=JSON.parse(q.readFileSync("./package.json","utf-8")).version||"1.0.0")}catch{}let A=e.buildProfile||"production",D=qt(g,{framework:e.framework,platform:e.platform}),I="Internal";e.developmentClient?I="DevelopmentClient":A.toLowerCase().includes("store")||A.toLowerCase()==="production"?I="Store":A.toLowerCase().includes("preview")||A.toLowerCase().includes("staging")?I="Staging":(A.toLowerCase().includes("development")||A.toLowerCase().includes("dev"))&&(I="Development");let H=e.platform==="ios"?"iOS":"Android",Q=e.platform==="ios"&&e.simulator?" (Simulator)":"",z=`${H}${Q} v${b} (${I})`;if(dn(e,{status:"created",projectId:i,buildId:n,platform:e.platform,profile:A,branch:S,version:b,runtimeVersion:D,...an(e),buildType:I,developmentClient:!!e.developmentClient,summary:z}),i){try{let y=e.buildProfile||"production",$=e.environment||y;E.info(_.blue(`Fetching managed secrets for profile: ${y} (environment: ${$})...`));let R=(await w.get(`/projects/${i}/secrets/export?env=${$}`)).data;R.status==="success"&&R.secrets&&(c={...c,...R.secrets},Object.keys(R.secrets).length>0&&E.info(_.magenta(`\u2713 Injected ${Object.keys(R.secrets).length} secrets from Dashboard.`)))}catch(y){E.warn(`Failed to load managed secrets from Dashboard: ${y.message}`)}if(e.platform==="ios"){let y=e.buildProfile||"production",$=_e(g,y)||{},v=Xu(g,$),R=Ui(v),x=e.distribution!==void 0?e.distribution==="store":I==="Store",P=v===void 0&&x,L=e.autoVersion||R||P,B=Fi(e.resolvedBuildNumber,v,L,!e.simulator);if(B.kind==="persisted"){let j=Hn(e,c,B.value,"saved MACH build record");E.info(_.green(`\u2713 Reusing assigned iOS buildNumber ${j}`))}else if(B.kind==="explicit"){let j=Hn(e,c,B.value,`${f.configFileName} (${y})`);E.info(_.green(`\u2713 Using configured iOS buildNumber ${j}`))}else if(B.kind==="auto"){t.start("Assigning iOS buildNumber from Mach counter...");try{let j=qs("ios",e,g,y),ge=await Js(i,"ios",j);Hn(e,c,ge,"MACH version counter"),t.stop(`\u2713 Assigned iOS buildNumber ${_.green(ge)} (${j})`)}catch(j){throw t.stop("iOS buildNumber assignment failed"),new Error(`Auto-versioning failed: ${j.response?.data?.message||j.message}`)}}}if(e.platform==="android"){let y=e.buildProfile||"production",$=_e(g,y)||{},v=Zu(g,$),R=Ui(v),x=e.distribution!==void 0?e.distribution==="store":I==="Store",P=v===void 0&&x,L=e.autoVersion||R||P,B=Fi(e.resolvedVersionCode,v,L);if(B.kind==="persisted"){let j=Gn(e,c,B.value,"saved MACH build record");E.info(_.green(`\u2713 Reusing assigned Android versionCode ${j}`))}else if(B.kind==="explicit"){let j=Gn(e,c,B.value,`${f.configFileName} (${y})`);E.info(_.green(`\u2713 Using configured Android versionCode ${j}`))}else if(B.kind==="auto"){t.start("Assigning Android versionCode from Mach counter...");try{let j=qs("android",e,g,y),ge=await Js(i,"android",j);Gn(e,c,ge,"MACH version counter"),t.stop(`\u2713 Assigned Android versionCode ${_.green(ge)} (${j})`)}catch(j){throw t.stop("Android versionCode assignment failed"),new Error(`Auto-versioning failed: ${j.response?.data?.message||j.message}`)}}}if(e.platform==="ios"&&e.simulator)E.info(_.dim("Skipping managed iOS signing credentials for simulator build."));else try{E.info(_.blue("Fetching managed credentials..."));let y=ip(e,A),$=e.platform==="ios"?e.iosBundleIdentifier:e.androidPackage;if(e.platform==="ios"){let v=m.length>0?m:[{targetName:e.iosScheme||e.scheme,bundleIdentifier:e.iosBundleIdentifier,isMainApplication:!0}],R=await cp({projectId:i,signingTargets:v,distributionType:y,teamId:e.iosTeamId,projectSecrets:c});if(h=R.missingProfileBundleIds,R.failures.length>0&&(!c.IOS_DIST_P12||h.length>0))throw new Error(`Credential setup failed:
1928
+ `);let o=r.match(/Google Api Error:[^\n]+/)||r.match(/Google Play API Error:[^\n]+/);return o?o[0]:r||"Google Play submission failed"}function Tu(e){try{K.existsSync(e)&&K.rmSync(e,{recursive:!0,force:!0})}catch{}}function Q(e){console.log(G.red(`\u274C ${e}`))}function se(e){console.log(G.gray(`\u2022 ${e}`))}function fr(e){console.log(G.green(`\u2713 ${e}`))}import hr from"fs";import Dt from"path";var Nu=new Set([".gradle",".idea",".mach-cache",".expo",".turbo","build","builds","coverage","dist",".mach_cli","mach_cli"]),Us=new Set([".git",".gradle",".cxx",".expo","DerivedData","node_modules","Pods"]),Fs=e=>e.split(Dt.sep).filter(Boolean).join("/"),Bs=(e,t)=>e===t||e.startsWith(`${t}/`),js=(e,t)=>e==="."?t:`${e}/${t}`,ku=(e,t,n)=>{let i=js(t,n==="ios"?"android":"ios");if(Bs(e,i))return i;let r=e.split("/"),o=r.find(s=>Us.has(s));return o||(r[0]===".yarn"&&r[1]==="cache"?".yarn/cache":r[0]||e)},xu=(e,t,n=".")=>{let i=Fs(e);if(!i)return!1;let r=Bi(n),o=i.split("/"),s=o[0];if(o.some(d=>Us.has(d))||s===".yarn"&&o[1]==="cache"||Nu.has(s))return!0;let a=js(r,t==="ios"?"android":"ios");if(Bs(i,a))return!0;let l=o.findIndex(d=>d==="android"||d==="ios");return!!(l>=0&&o.slice(l+1).includes("build"))},Hs=(e,t,n,i=".")=>{let r=0,o=new Set,s=Bi(i),a=(l,d)=>{let c=Fs(d);if(xu(c,n,s)){o.add(ku(c,s,n));return}let u=hr.lstatSync(l);if(!u.isSymbolicLink()){if(u.isDirectory()){for(let p of hr.readdirSync(l))a(Dt.join(l,p),Dt.join(d,p));return}if(u.isFile()){let p=Dt.dirname(c);e.addLocalFile(l,p==="."?void 0:p,Dt.basename(c)),r+=1}}};for(let l of hr.readdirSync(t))a(Dt.join(t,l),l);return{files:r,skipped:Array.from(o).sort()}};function Gs(e){return String(e||"").replace(/\\\/Users\\\/[^\\/\s"'`]+/g,"\\/Users\\/[REDACTED]").replace(/\/Users\/[^/\\\s"'`]+/g,"/Users/[REDACTED]")}var yr=8,Mu=6,qs=Number(process.env.MACH_ARTIFACT_UPLOAD_MAX_ATTEMPTS||2),Ar=Number(process.env.MACH_ARTIFACT_UPLOAD_TIMEOUT_MS||12e4),Sr="ap-south-1",Uu=`${f.envPrefix}S3_DEBUG`,Fu=()=>["1","true","yes","on"].includes(String(process.env[Uu]||"").trim().toLowerCase()),_r=(e,t)=>{if(Fu()&&t)try{let n=new URL(t);I.info(E.dim(`[S3_DEBUG] ${e} host=${n.hostname} expectedRegion=${Sr}`)),n.hostname.includes(Sr)||I.warn(E.yellow(`[S3_DEBUG] ${e} host ${n.hostname} does not include ${Sr}`))}catch(n){I.warn(E.yellow(`[S3_DEBUG] Could not parse ${e} presigned URL host: ${n.message}`))}},Bu=[{value:"production",label:"production",hint:"Store / release build"},{value:"staging",label:"staging",hint:"Internal testing build"},{value:"development",label:"development",hint:"Development build"}],sa=e=>new Promise(t=>setTimeout(t,e)),ju=e=>!e.yes&&!e.failOnly&&!e.buildId&&process.stdin.isTTY&&process.stdout.isTTY,Hu=e=>{if(!e||typeof e!="object")return;let t=[e.distribution?`distribution: ${e.distribution}`:void 0,e.environment?`env: ${e.environment}`:void 0,e.developmentClient?"development client":void 0,e.simulator?"simulator":void 0].filter(Boolean);return t.length>0?t.join(", "):void 0},Gu=()=>{let e=re(`./${f.configFileName}`),t=e?.build&&typeof e.build=="object"?e.build:{},n=Object.keys(t);return n.length===0?Bu:n.map(i=>({value:i,label:i,hint:Hu(t[i])}))},Vu=async e=>{let t=ju(e);if(!e.platform&&t){let n=await Vs({message:"Select platform",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"}]});Zn(n)&&(Ks("Build cancelled."),process.exit(0)),e.platform=n}if(!e.buildProfile&&t){let n=Gu(),i=await Vs({message:"Select build profile",options:n,initialValue:n.find(r=>r.value==="production")?.value||n[0]?.value});Zn(i)&&(Ks("Build cancelled."),process.exit(0)),e.buildProfile=i}e.buildProfile||(e.buildProfile="production")},Js=e=>{if(e===!0||e===!1)return e;if(e===1||e==="1")return!0;if(e===0||e==="0")return!1;if(typeof e!="string")return;let t=e.trim().toLowerCase();if(["true","yes","on"].includes(t))return!0;if(["false","no","off"].includes(t))return!1},aa=(e,t)=>{if(e)for(let n of t){let i=n.replace(/[.*+?^${}()|[\]\\]/g,"\\$&"),r=e.match(new RegExp(`(?:^|\\s)${i}(?:=|\\s+)([^\\s]+)`));if(r?.[1])return r[1].replace(/^["']|["']$/g,"")}},zu=(e,t)=>!!e&&t.some(n=>new RegExp(`(?:^|\\s)${n.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}(?:\\s|$)`).test(e)),Ku=e=>{let n=aa(e,["--platform"])||e?.split(/\s+/).find(i=>i==="ios"||i==="android");return n==="ios"||n==="android"?n:void 0},Wu=async e=>{if(!e.projectId||!e.buildId)return;let t=!!e.local;try{let n=await w.get(`/builds/${e.projectId}/${e.buildId}`),i=n.data?.build||n.data;if(!i||typeof i!="object"){if(t)throw new Error("MACH API returned an empty build record.");return}let r=typeof i.buildArgs=="string"?i.buildArgs:void 0;if(_o(e,i),!e.platform){let o=i.platform||Ku(r);(o==="ios"||o==="android")&&(e.platform=o)}if(e.buildProfile||(e.buildProfile=i.buildProfile||i.profile||i.profileName||aa(r,["--profile","--build-profile","-p"])),e.simulator===void 0){let o=Js(i.simulator??i.isSimulator);o!==void 0?e.simulator=o:zu(r,["--simulator"])&&(e.simulator=!0)}if(e.developmentClient===void 0){let o=Js(i.developmentClient??i.devClient);o!==void 0&&(e.developmentClient=o)}}catch(n){if(t){let i=n.response?.data?.message||n.message||"unknown error";throw new Error(`Could not load the canonical MACH build record for runner ${e.buildId}: ${i}. The runner stopped to avoid allocating or packaging a different native version.`)}I.warn(E.yellow(`Could not load saved build options for runner: ${n.message}`))}},Yu=e=>{if(!Number.isFinite(e)||e<=0)return"0 B";let t=["B","KB","MB","GB"],n=Math.min(Math.floor(Math.log(e)/Math.log(1024)),t.length-1);return`${(e/Math.pow(1024,n)).toFixed(n===0?0:1)} ${t[n]}`},qu=e=>{let t=e.response?.status,n=e.code||"",i=e.message||"";return t?t===408||t===409||t===425||t===429||t>=500||/ECONNRESET|ETIMEDOUT|EAI_AGAIN|ENOTFOUND|ECONNABORTED|socket hang up|network|timeout/i.test(`${n} ${i}`):!0},ln=async(e,t,n=Mu)=>{let i;for(let r=1;r<=n;r++)try{return await t()}catch(o){if(i=o,!qu(o)||r>=n)break;let s=Math.min(6e4,2e3*Math.pow(2,r-1)),a=o.response?.status||o.code||o.message||"network error";I.warn(E.yellow(`${e} failed transiently (${a}). Retrying in ${Math.round(s/1e3)}s... (${r}/${n})`)),await sa(s)}throw i},Ju=async(e,t,n)=>{let i=de.basename(e),r=W.statSync(e).size,o=Math.round(Ar/1e3);_r(`ARTIFACT_UPLOAD ${i}`,t);try{await ln(`Upload artifact ${i}`,async()=>{let s=new AbortController,a=W.createReadStream(e),l=setTimeout(()=>{a.destroy(new Error(`Artifact upload timed out after ${o}s`)),s.abort()},Ar);try{await Xn.put(t,a,{headers:{"Content-Type":n,"Content-Length":r,Connection:"close"},maxBodyLength:1/0,maxContentLength:1/0,timeout:Ar,timeoutErrorMessage:`Artifact upload timed out after ${o}s`,signal:s.signal})}finally{clearTimeout(l)}},qs)}catch(s){throw new Error(`${i} (${Yu(r)}) failed after ${qs} upload attempt(s): ${s.message||s}`)}return r},Xu=e=>{let t=e.response?.status;return t?t===408||t===429||t>=500:!0},Je=e=>e.credentialId||e.id,Zu=async(e,t)=>{let n=Je(e);if(!n)return e.downloadUrl;let i=await w.get(`/credentials/${n}/download`,{params:{projectId:t,format:"raw"}});return i.data?.status==="success"&&i.data?.downloadUrl?i.data.downloadUrl:e.downloadUrl},wr=async(e,t)=>{let n=e.downloadUrl;for(let i=1;i<=yr;i++)try{if((!n||i>1)&&(n=await Zu(e,t)),!n)throw new Error(`Credential ${e.name||Je(e)||"unknown"} has no download URL.`);let r=await Xn.get(n,{responseType:"arraybuffer",timeout:6e4,maxContentLength:1/0,maxBodyLength:1/0,headers:{Connection:"close"}});return Buffer.from(r.data).toString("base64")}catch(r){if(i>=yr||!Xu(r))throw r;let o=Math.min(1500*i*i,15e3);I.warn(E.dim(` - Temporary network error downloading ${e.name}. Retrying... (${i}/${yr})`)),await sa(o)}throw new Error(`Failed to download credential ${e.name||Je(e)||"unknown"}.`)},Qu=(e,t)=>t?.ios?.buildNumber??t?.iosBuildNumber??e?.ios?.buildNumber??e?.expo?.ios?.buildNumber,ep=(e,t)=>t?.android?.versionCode??t?.androidVersionCode??e?.android?.versionCode??e?.expo?.android?.versionCode,Xs=(e,t,n,i)=>e==="ios"?t.iosBundleIdentifier||n?.ios?.bundleIdentifier||n?.expo?.ios?.bundleIdentifier||i:t.androidPackage||n?.android?.package||n?.expo?.android?.package||n?.name||i,Zs=async(e,t,n)=>{let i=await w.post(`/projects/${e}/next-build-number`,{platform:t,scope:n});if(i.data.status!=="success"||!i.data.buildNumber)throw new Error(i.data.message||"Dashboard did not return a build number.");return String(i.data.buildNumber)},an=e=>{let t={};return e.platform==="ios"&&e.resolvedBuildNumber&&(t.buildNumber=e.resolvedBuildNumber),e.platform==="android"&&e.resolvedVersionCode&&(t.versionCode=e.resolvedVersionCode),t},la=(e,t,n=[])=>{if(!W.existsSync(e))return n;let i;try{i=W.readdirSync(e,{withFileTypes:!0})}catch{return n}for(let r of i){if(r.name==="Pods"||r.name==="build"||r.name==="DerivedData")continue;let o=de.join(e,r.name);r.isDirectory()?la(o,t,n):r.name===t&&n.push(o)}return n},tp=(e,t,n)=>{let i=`${n} ${t.environment||""}`.toLowerCase(),r=e.toLowerCase(),o=0;return(i.includes("development")||i.includes("dev"))&&/(^|[.-])dev(elopment)?($|[.-])/.test(r)&&(o+=20),(i.includes("staging")||i.includes("stage"))&&/(^|[.-])stag(e|ing)?($|[.-])/.test(r)&&(o+=20),(i.includes("production")||i.includes("prod"))&&(/(^|[.-])(dev|development|stag|stage|staging)($|[.-])/.test(r)||(o+=20)),o},np=(e,t)=>{let n=Wt(process.cwd(),e.appDirectory),i=de.join(n.appRoot,"ios"),r=W.existsSync(i)?i:n.appRoot,o=la(r,"project.pbxproj"),s=[];for(let a of o)try{let d=W.readFileSync(a,"utf8").matchAll(/PRODUCT_BUNDLE_IDENTIFIER\s*=\s*"?([^";\s]+)"?;/g);for(let c of d){let u=c[1]?.trim();u&&!u.includes("$")&&!u.startsWith("com.apple.")&&!s.includes(u)&&s.push(u)}}catch{}if(s.length!==0)return s.length===1?s[0]:s.map(a=>({bundleId:a,score:tp(a,e,t)})).sort((a,l)=>l.score-a.score)[0]?.bundleId},Jn=e=>String(e||"").trim().toLowerCase().replace(/_/g,"-"),Qn=(e,t)=>{let n=Jn(e);return t==="ios"&&(n==="internal"||n==="ad-hoc")?"adhoc":t==="android"&&["internal","adhoc","ad-hoc","development","dev","staging","stage"].includes(n)?"internal":n},$r=(e,t,n)=>{let i=Qn(e.distributionType||e.meta?.distributionType,n);return i?i===Qn(t,n):!0},Qs=(e,t,n)=>{let i=Qn(e.distributionType||e.meta?.distributionType,n),r=Qn(t,n);return i?i===r?3:n==="android"&&r!=="store"&&i!=="store"?2:0:1},ip=e=>{let t=e.toLowerCase();return t==="development"||t==="dev"||t.startsWith("development-")||t.startsWith("dev-")||t.endsWith("-development")||t.endsWith("-dev")},rp=e=>{let t=e.toLowerCase();return t.includes("staging")||t.includes("stage")||t.includes("preview")||t.includes("adhoc")||t.includes("ad-hoc")},da=(e,t)=>{let n=Jn(e.distribution),i=Jn(e.iosExportMethod),r=Jn(e.environment);return e.platform!=="ios"?n==="store"?"store":"internal":e.developmentClient||e.simulator?"development":i==="app-store"||n==="store"?"store":i==="development"||n==="development"?"development":i==="ad-hoc"||i==="adhoc"||n==="ad-hoc"||n==="adhoc"||n==="internal"?"adhoc":r==="production"||r==="store"?"store":r==="development"||r==="dev"?"development":r==="staging"||r==="stage"||r==="preview"?"adhoc":t.toLowerCase()==="production"||t.toLowerCase().includes("store")?"store":ip(t)?"development":(rp(t),"adhoc")},ca=e=>e.bundleId||e.bundleIdentifier||e.packageName||e.meta?.bundleId||e.meta?.bundleIdentifier||e.meta?.packageName,ua=(e,t)=>{if(!t)return!0;let n=ca(e);return!n||n==="*"||n===t},op=(e,t)=>e.type==="android_keystore"&&ua(e,t),ea=(e,t)=>{let n=ca(e);return!t||!n?0:n===t?2:n==="*"?1:-1},pa=e=>{try{let t=Buffer.from(e,"base64").toString("utf8"),n=t.match(/<key>application-identifier<\/key>\s*<string>([^<]+)<\/string>/)?.[1]?.trim();if(!n)return;let i=t.match(/<key>TeamIdentifier<\/key>\s*<array>\s*<string>([^<]+)<\/string>/)?.[1]?.trim();if(i&&n.startsWith(`${i}.`))return n.slice(i.length+1);let r=n.indexOf(".");return r>=0?n.slice(r+1):n}catch{return}},sp=(e,t)=>{if(e===t||e==="*")return!0;if(e.endsWith(".*")){let n=e.slice(0,-2);return t.startsWith(`${n}.`)}return!1},ap=(e,t)=>{if(!t)return!0;let n=pa(e);if(n)return sp(n,t);try{return Buffer.from(e,"base64").toString("latin1").includes(t)}catch{return!0}},vr=(e,t,n,i)=>[...e].sort((r,o)=>{let s=ea(o,t)*10+Qs(o,n,i)-(ea(r,t)*10+Qs(r,n,i));return s!==0?s:(o.createdAt||0)-(r.createdAt||0)}),Rr=e=>{if(typeof e!="string")return;let t=e.replace(/[^a-fA-F0-9]/g,"").toUpperCase();return t.length===40?t:void 0},lp=e=>Rr(e?.certificateSha1)||Rr(e?.meta?.certificateSha1),dp=e=>{let t=e?.profileCertificateSha1s??e?.meta?.profileCertificateSha1s;return Array.isArray(t)?t.map(Rr).filter(n=>!!n):[]},cp=e=>{let t=W.mkdtempSync(de.join(oa.tmpdir(),`${f.nameLower}-verify-signing-`));try{let n=de.join(t,"certificate.p12");W.writeFileSync(n,Buffer.from(e.certificateBase64,"base64"),{mode:384});let i=[...new Set([e.storedPassword||"","",f.keychainPassword])],r;for(let o of i)try{let s=To(n,o);for(let a=0;a<e.profiles.length;a++){let l=de.join(t,`profile-${a}.mobileprovision`);W.writeFileSync(l,Buffer.from(e.profiles[a].profileBase64,"base64"),{mode:384}),No(s,Co(l))}return o}catch(s){r=s instanceof Error?s:new Error(String(s))}throw r||new Error("Could not verify the iOS signing certificate.")}finally{try{W.rmSync(t,{recursive:!0,force:!0})}catch{}}},up=async e=>{let{projectId:t,signingTargets:n,distributionType:i,teamId:r,projectSecrets:o}=e,s=new Map,a=[];for(let g of n){I.info(E.dim(` Credential target: bundle ${g.bundleIdentifier} (${i})`));let S=await w.get("/credentials/resolve",{params:{projectId:t,platform:"ios",bundleId:g.bundleIdentifier,distributionType:i,teamId:r}}),b=S.data.status==="success"&&Array.isArray(S.data.credentials)?S.data.credentials:[];s.set(g.bundleIdentifier,b),a.push(...b)}let l=[],d=[],c=new Map,u=[];for(let g of n){let S=vr((s.get(g.bundleIdentifier)||[]).filter(A=>A.type==="ios_profile"&&$r(A,i,"ios")&&ua(A,g.bundleIdentifier)),g.bundleIdentifier,i,"ios"),b;for(let A of S)if(!(!A.downloadUrl&&!Je(A)))try{let D=await wr(A,t);if(!ap(D,g.bundleIdentifier)){let _=pa(D)||"unknown";throw new Error(`expected ${g.bundleIdentifier}, found ${_}`)}b=D,c.set(g.bundleIdentifier,A),I.info(E.dim(` - Resolved ${A.name||"provisioning profile"} for ${g.bundleIdentifier}`));break}catch(D){l.push(`${A.name||Je(A)||g.bundleIdentifier}: ${D.message}`)}if(!b){u.push(g.bundleIdentifier);continue}d.push({...g,profileBase64:b})}let p=new Set,m=d.map(g=>dp(c.get(g.bundleIdentifier))).filter(g=>g.length>0),h=vr(a.filter(g=>{if(g.type!=="ios_cert"||!$r(g,i,"ios"))return!1;let S=Je(g)||`${g.name||"certificate"}:${g.createdAt||""}`;if(p.has(S))return!1;p.add(S);let b=lp(g);return!(b&&m.length>0&&!m.every(A=>A.includes(b)))}),n[0]?.bundleIdentifier,i,"ios");for(let g of h)if(!(!g.downloadUrl&&!Je(g)))try{let S=await wr(g,t),b=d.length>0?cp({certificateBase64:S,storedPassword:g.password,profiles:d}):g.password||"";o.IOS_DIST_P12=S,o.IOS_P12_PASSWORD=b,I.info(E.dim(` - Verified ${g.name||"Apple signing certificate"} against ${d.length||1} provisioning profile${d.length===1?"":"s"}`));break}catch(S){l.push(`${g.name||Je(g)||"iOS certificate"}: ${S.message}`)}if(d.length>0){let g=d.find(S=>S.isMainApplication)||d[0];o.IOS_PROVISIONING_PROFILE=g.profileBase64,n.length>1&&d.length===n.length&&(o.IOS_PROVISIONING_PROFILES=Do(d))}return{missingProfileBundleIds:u,failures:l}},ei=async e=>{if(e.failOnly){(!e.projectId||!e.buildId)&&(I.error(E.red("--project-id and --build-id are required with --fail-only.")),process.exit(1));let d=e.error||"Build runner failed before it could report a final status.";try{await w.patch(`/builds/${e.projectId}/${e.buildId}`,{status:"failed",error:d,endTime:Date.now()}),I.info(E.yellow(`Marked build ${e.buildId} as failed.`));return}catch(c){I.error(E.red(`Could not mark build failed: ${c.message}`)),process.exit(1)}}await Wu(e),await Vu(e),e.platform!=="android"&&e.platform!=="ios"&&(I.error(`Platform ${e.platform} is not supported. Use 'android' or 'ios'.`),process.exit(1)),e.autoSubmit&&e.platform==="ios"&&e.simulator&&(I.error(E.red("--auto-submit cannot be used with --simulator because simulator builds are not App Store artifacts.")),process.exit(1)),e.autoSubmit&&e.dryRun&&I.warn(E.yellow("--auto-submit is ignored during --dry-run."));let t=Er(),n=e.buildId||Lu(),i=e.projectId,r=Date.now(),o=!!i,s=!0,a=async d=>{if(i)try{await w.patch(`/builds/${i}/${n}`,{status:"failed",error:d,endTime:Date.now()})}catch{}};if(e.local&&e.buildId&&i&&await ln("Mark isolated runner as building",()=>w.patch(`/builds/${i}/${n}`,{status:"building",runnerStartedAt:Date.now()})),e.local&&e.buildId){e.quiet||t.start(`Preparing isolated workspace for build: ${e.buildId}`);try{let d=await w.get(`/builds/${i}/${e.buildId}/source-url`);if(d.data.status!=="success")throw new Error("Failed to get source download URL from API");_r("SOURCE_DOWNLOAD",d.data.downloadUrl);let c=await Xn.get(d.data.downloadUrl,{responseType:"stream"}),u=(i||e.projectId||"default").replace(/[^a-zA-Z0-9-_]/g,"_"),p=de.join(oa.homedir(),f.workspacesDir,u);W.mkdirSync(p,{recursive:!0});let m=new Set(["node_modules",`.${f.nameLower}-cache-meta`]),h=new Set(["Pods"]);if(W.existsSync(p)){let D=W.readdirSync(p);for(let _ of D){if(m.has(_))continue;if(_==="ios"){let te=de.join(p,"ios");try{let X=W.readdirSync(te);for(let Se of X)if(!h.has(Se))try{W.rmSync(de.join(te,Se),{recursive:!0,force:!0})}catch{}}catch{}continue}let Y=de.join(p,_);try{W.rmSync(Y,{recursive:!0,force:!0})}catch{}}}let g=de.join(p,"source.zip"),S=c.data,b=W.createWriteStream(g);await new Promise((D,_)=>{S.pipe(b),S.on("error",Y=>_(Y)),b.on("finish",()=>D())}),new Ys(g).extractAllTo(p,!0);try{W.unlinkSync(g)}catch{}process.chdir(p),I.info(E.green(`\u2713 Persistent workspace ready: ${p}`)),I.info(E.dim(` \u{1F4E6} Cached dirs preserved: node_modules=${W.existsSync(de.join(p,"node_modules"))?"\u2705":"\u274C"}, Pods=${W.existsSync(de.join(p,"ios","Pods"))?"\u2705":"\u274C"}`)),t.stop()}catch(d){t.stop(`Failed to prepare isolated workspace: ${d.message}`),i&&await a(`Setup Error: ${d.message}`),process.exit(1)}}try{let d=e.repo;if(!d)try{d=Ws("git config --get remote.origin.url").toString().trim()}catch{I.warn("Could not detect git repository URL.")}!d&&e.dryRun,d||(d="https://github.com/placeholder/repo.git"),I.info(`Build ID: ${E.cyan(n)}`);let c={},u={},p=null,m=[],h=[],g=re(`./${f.configFileName}`);if(g||(I.error(E.red(`${f.configFileName} not found. Run \`${f.nameLower} init\` or \`${f.nameLower} link\` first.`)),process.exit(1)),g){p=g;let y=Ao(g);e.framework=y,i=g.projectId;let $=e.local&&e.buildId?process.env.MACH_APP_DIRECTORY:void 0,v=Wt(process.cwd(),$||g.appDirectory,{requireAppDirectory:!0});e.appDirectory=v.appDirectory,$&&process.env.MACH_DEBUG&&I.info(E.dim(`Runner app directory: ${e.appDirectory}`)),vo(v,y,e.platform);let R=e.buildProfile||"production",x=_e(g,R);!x&&e.buildProfile&&(I.error(`Build profile '${R}' not found in ${f.configFileName}`),process.exit(1));let P=x||{};process.env.MACH_DEBUG&&I.info(E.dim(`Framework: ${y} | Build profile: ${R} | Platform: ${e.platform} | Distribution: ${P.distribution||"store"} | Environment: ${P.environment||R}`)),P.env&&(u=P.env,I.info(E.blue(`Use Build Profile: ${R}`)));let L=e.platform,B=P[L]||{},j=["developmentClient","simulator","distribution","buildCommand","apk","iosScheme","preBuild","postBuild","scheme","environment","androidPackage","iosBundleIdentifier","name","iosDeploymentTarget","iosApiKeyId","iosApiKeyIssuer","iosApiKeyPath","iosTeamId","iosConfiguration","iosExportMethod","branch","repo","instanceType","ami","bucket","region","nodeVersion"];e.name=g.name,e.appName=g.name,e.androidPackage=g.android?.package,e.iosBundleIdentifier=g.ios?.bundleIdentifier,e.iosScheme=g.ios?.iosScheme,!e.nodeVersion&&g.nodeVersion&&(e.nodeVersion=g.nodeVersion);let me=q=>q==="androidPackage"?B.androidPackage??B.package??P.androidPackage??P.android?.package:q==="iosBundleIdentifier"?B.iosBundleIdentifier??B.bundleIdentifier??P.iosBundleIdentifier??P.ios?.bundleIdentifier:B[q]!==void 0?B[q]:P[q];for(let q of j){let Ee=me(q),xn=q==="androidPackage"||q==="iosBundleIdentifier";Ee!==void 0&&(e[q]===void 0||xn)&&(e[q]=Ee)}if(e.platform==="ios"&&!(B.iosBundleIdentifier??B.bundleIdentifier??P.iosBundleIdentifier??P.ios?.bundleIdentifier)){let Ee=np(e,R);Ee&&Ee!==e.iosBundleIdentifier&&(I.warn(E.yellow(`Detected native iOS bundle identifier ${Ee}; using it for credential lookup. Set build.${R}.ios.bundleIdentifier to make this explicit.`)),e.iosBundleIdentifier=Ee)}e.branch=e.branch||"main",e.iosConfiguration=e.iosConfiguration||(e.developmentClient?"Debug":"Release"),e.sshUser=e.sshUser||process.env.USER||"ubuntu",e.simulator===void 0&&(e.simulator=!1),e.local===void 0&&(e.local=!1),e.verbose===void 0&&(e.verbose=!1),I.info(E.dim(`Resolved build config: framework=${y}, appDirectory=${e.appDirectory}, profile=${R}, platform=${e.platform}, simulator=${e.platform==="ios"?String(!!e.simulator):"n/a"}, developmentClient=${String(!!e.developmentClient)}, distribution=${e.distribution||P.distribution||"store"}, iosConfiguration=${e.platform==="ios"?e.iosConfiguration||"Release":"n/a"}`));let Ke=q=>{if(!q)return q;if(q.startsWith("scripts.")){let Ee=q.split(".")[1],xn=g.scripts?.[Ee];if(xn)return xn;I.warn(`Script reference not found: ${q}`)}return q};if(e.buildCommand=Ke(e.buildCommand),e.preBuild=Ke(e.preBuild),e.postBuild=Ke(e.postBuild),!e.scheme&&g.scheme&&(e.scheme=g.scheme),e.platform==="ios"&&!e.simulator&&e.iosBundleIdentifier&&(m=Oo({config:g,resolvedProfile:P,framework:y,appRoot:v.appRoot,mainBundleIdentifier:e.iosBundleIdentifier,mainTargetName:e.iosScheme||e.scheme||g.scheme}),m.length>1)){I.info(E.magenta(`\u2713 Detected ${m.length} signed iOS targets:`));for(let q of m)I.info(E.dim(` - ${q.targetName||(q.isMainApplication?"main application":"extension")}: ${q.bundleIdentifier}`))}let kn={...$t(g,f.envPrefix),...$t(P,`${f.envPrefix}PROFILE_`)};c={...c,...u,...kn},process.env.IOS_P12_PASSWORD&&!c.IOS_P12_PASSWORD&&(c.IOS_P12_PASSWORD=process.env.IOS_P12_PASSWORD),process.env.MATCH_PASSWORD&&!c.MATCH_PASSWORD&&(c.MATCH_PASSWORD=process.env.MATCH_PASSWORD),e.platform==="ios"&&(!e.iosTeamId&&P.ios?.appleTeamId&&(e.iosTeamId=P.ios.appleTeamId),!e.iosTeamId&&g.submit?.[R]?.ios?.appleTeamId&&(e.iosTeamId=g.submit[R].ios.appleTeamId),!e.iosTeamId&&g.submit?.production?.ios?.appleTeamId&&(I.warn(E.yellow(`Check: Using 'production' Team ID for '${R}' build.`)),e.iosTeamId=g.submit.production.ios.appleTeamId),e.iosTeamId?I.info(E.magenta(`\u2713 Injected iOS Team ID from config: ${e.iosTeamId}`)):e.simulator||I.warn(E.yellow("\u26A0\uFE0F No iOS Team ID found. Device or archive signing may fail unless managed iOS credentials provide the team automatically.")))}let S="unknown";try{S=Ws("git rev-parse --abbrev-ref HEAD").toString().trim()}catch{I.warn("Failed to detect git branch.")}let b="1.0.0";try{W.existsSync("./package.json")&&(b=JSON.parse(W.readFileSync("./package.json","utf-8")).version||"1.0.0")}catch{}let A=e.buildProfile||"production",D=qt(g,{framework:e.framework,platform:e.platform}),_="Internal";e.developmentClient?_="DevelopmentClient":A.toLowerCase().includes("store")||A.toLowerCase()==="production"?_="Store":A.toLowerCase().includes("preview")||A.toLowerCase().includes("staging")?_="Staging":(A.toLowerCase().includes("development")||A.toLowerCase().includes("dev"))&&(_="Development");let Y=e.platform==="ios"?"iOS":"Android",te=e.platform==="ios"&&e.simulator?" (Simulator)":"",X=`${Y}${te} v${b} (${_})`;if(dn(e,{status:"created",projectId:i,buildId:n,platform:e.platform,profile:A,branch:S,version:b,runtimeVersion:D,...an(e),buildType:_,developmentClient:!!e.developmentClient,summary:X}),i){try{let y=e.buildProfile||"production",$=e.environment||y;I.info(E.blue(`Fetching managed secrets for profile: ${y} (environment: ${$})...`));let R=(await w.get(`/projects/${i}/secrets/export?env=${$}`)).data;R.status==="success"&&R.secrets&&(c={...c,...R.secrets},Object.keys(R.secrets).length>0&&I.info(E.magenta(`\u2713 Injected ${Object.keys(R.secrets).length} secrets from Dashboard.`)))}catch(y){I.warn(`Failed to load managed secrets from Dashboard: ${y.message}`)}if(e.platform==="ios"){let y=e.buildProfile||"production",$=_e(g,y)||{},v=Qu(g,$),R=Ui(v),x=e.distribution!==void 0?e.distribution==="store":_==="Store",P=v===void 0&&x,L=e.autoVersion||R||P,B=Fi(e.resolvedBuildNumber,v,L,!e.simulator);if(B.kind==="persisted"){let j=Hn(e,c,B.value,"saved MACH build record");I.info(E.green(`\u2713 Reusing assigned iOS buildNumber ${j}`))}else if(B.kind==="explicit"){let j=Hn(e,c,B.value,`${f.configFileName} (${y})`);I.info(E.green(`\u2713 Using configured iOS buildNumber ${j}`))}else if(B.kind==="auto"){t.start("Assigning iOS buildNumber from Mach counter...");try{let j=Xs("ios",e,g,y),me=await Zs(i,"ios",j);Hn(e,c,me,"MACH version counter"),t.stop(`\u2713 Assigned iOS buildNumber ${E.green(me)} (${j})`)}catch(j){throw t.stop("iOS buildNumber assignment failed"),new Error(`Auto-versioning failed: ${j.response?.data?.message||j.message}`)}}}if(e.platform==="android"){let y=e.buildProfile||"production",$=_e(g,y)||{},v=ep(g,$),R=Ui(v),x=e.distribution!==void 0?e.distribution==="store":_==="Store",P=v===void 0&&x,L=e.autoVersion||R||P,B=Fi(e.resolvedVersionCode,v,L);if(B.kind==="persisted"){let j=Gn(e,c,B.value,"saved MACH build record");I.info(E.green(`\u2713 Reusing assigned Android versionCode ${j}`))}else if(B.kind==="explicit"){let j=Gn(e,c,B.value,`${f.configFileName} (${y})`);I.info(E.green(`\u2713 Using configured Android versionCode ${j}`))}else if(B.kind==="auto"){t.start("Assigning Android versionCode from Mach counter...");try{let j=Xs("android",e,g,y),me=await Zs(i,"android",j);Gn(e,c,me,"MACH version counter"),t.stop(`\u2713 Assigned Android versionCode ${E.green(me)} (${j})`)}catch(j){throw t.stop("Android versionCode assignment failed"),new Error(`Auto-versioning failed: ${j.response?.data?.message||j.message}`)}}}if(e.platform==="ios"&&e.simulator)I.info(E.dim("Skipping managed iOS signing credentials for simulator build."));else try{I.info(E.blue("Fetching managed credentials..."));let y=da(e,A),$=e.platform==="ios"?e.iosBundleIdentifier:e.androidPackage;if(e.platform==="ios"){let v=m.length>0?m:[{targetName:e.iosScheme||e.scheme,bundleIdentifier:e.iosBundleIdentifier,isMainApplication:!0}],R=await up({projectId:i,signingTargets:v,distributionType:y,teamId:e.iosTeamId,projectSecrets:c});if(h=R.missingProfileBundleIds,R.failures.length>0&&(!c.IOS_DIST_P12||h.length>0))throw new Error(`Credential setup failed:
1929
1929
  ${R.failures.map(x=>`- ${x}`).join(`
1930
- `)}`);R.failures.length>0&&E.warn(_.dim(` Skipped ${R.failures.length} stale or unusable credential(s).`))}else{E.info(_.dim(` Credential target: package ${$||"not set"} (${y})`));let v=await w.get("/credentials/resolve",{params:{projectId:i,platform:e.platform,bundleId:$,distributionType:y}}),R=v.data.status==="success"&&Array.isArray(v.data.credentials)?v.data.credentials:[],x=wr(R.filter(L=>rp(L,$)),$,y,e.platform),P=[];for(let L of x)if(!(c.ANDROID_KEYSTORE_BASE64||!L.downloadUrl&&!Je(L)))try{if(!_r(L,y,"android")){let Ke=L.distributionType||L.meta?.distributionType||"unlabelled";E.info(_.dim(` - Reusing Android signing keystore labelled ${Ke} for ${y} (${$||"package not set"})`))}c.ANDROID_KEYSTORE_BASE64=await Er(L,i);let B=L.keystorePassword||L.password,j=L.keyPassword||L.keystorePassword||L.password,ge=L.alias||L.meta?.alias;if(B&&(c.ANDROID_STORE_PASSWORD=B),j&&(c.ANDROID_KEY_PASSWORD=j),ge&&(c.ANDROID_KEY_ALIAS=ge),!c.ANDROID_STORE_PASSWORD){let J=["ANDROID_STORE_PASSWORD",...[y==="store"?"PRODUCTION":"STAGING",y.toUpperCase(),"PRODUCTION","STORE","INTERNAL","STAGING","RELEASE","DEBUG"].map(Ee=>`KEYSTORE_PASSWORD_${Ee}`),"KEYSTORE_PASSWORD"].find(Ee=>!!c[Ee]);J&&(c.ANDROID_STORE_PASSWORD=c[J])}if(c.ANDROID_KEY_PASSWORD||(c.ANDROID_KEY_PASSWORD=c.ANDROID_STORE_PASSWORD||""),!c.ANDROID_KEY_ALIAS){let Ke=["ANDROID_KEY_ALIAS","KEYSTORE_ALIAS"].find(kn=>!!c[kn]);Ke&&(c.ANDROID_KEY_ALIAS=c[Ke])}E.info(_.dim(` - Injected ${L.name} as ANDROID_KEYSTORE_BASE64`))}catch(B){P.push(`${L.name||L.type}: ${B.message}`)}if(P.length>0&&!c.ANDROID_KEYSTORE_BASE64)throw new Error(`Credential setup failed:
1930
+ `)}`);R.failures.length>0&&I.warn(E.dim(` Skipped ${R.failures.length} stale or unusable credential(s).`))}else{I.info(E.dim(` Credential target: package ${$||"not set"} (${y})`));let v=await w.get("/credentials/resolve",{params:{projectId:i,platform:e.platform,bundleId:$,distributionType:y}}),R=v.data.status==="success"&&Array.isArray(v.data.credentials)?v.data.credentials:[],x=vr(R.filter(L=>op(L,$)),$,y,e.platform),P=[];for(let L of x)if(!(c.ANDROID_KEYSTORE_BASE64||!L.downloadUrl&&!Je(L)))try{if(!$r(L,y,"android")){let Ke=L.distributionType||L.meta?.distributionType||"unlabelled";I.info(E.dim(` - Reusing Android signing keystore labelled ${Ke} for ${y} (${$||"package not set"})`))}c.ANDROID_KEYSTORE_BASE64=await wr(L,i);let B=L.keystorePassword||L.password,j=L.keyPassword||L.keystorePassword||L.password,me=L.alias||L.meta?.alias;if(B&&(c.ANDROID_STORE_PASSWORD=B),j&&(c.ANDROID_KEY_PASSWORD=j),me&&(c.ANDROID_KEY_ALIAS=me),!c.ANDROID_STORE_PASSWORD){let q=["ANDROID_STORE_PASSWORD",...[y==="store"?"PRODUCTION":"STAGING",y.toUpperCase(),"PRODUCTION","STORE","INTERNAL","STAGING","RELEASE","DEBUG"].map(Ee=>`KEYSTORE_PASSWORD_${Ee}`),"KEYSTORE_PASSWORD"].find(Ee=>!!c[Ee]);q&&(c.ANDROID_STORE_PASSWORD=c[q])}if(c.ANDROID_KEY_PASSWORD||(c.ANDROID_KEY_PASSWORD=c.ANDROID_STORE_PASSWORD||""),!c.ANDROID_KEY_ALIAS){let Ke=["ANDROID_KEY_ALIAS","KEYSTORE_ALIAS"].find(kn=>!!c[kn]);Ke&&(c.ANDROID_KEY_ALIAS=c[Ke])}I.info(E.dim(` - Injected ${L.name} as ANDROID_KEYSTORE_BASE64`))}catch(B){P.push(`${L.name||L.type}: ${B.message}`)}if(P.length>0&&!c.ANDROID_KEYSTORE_BASE64)throw new Error(`Credential setup failed:
1931
1931
  ${P.map(L=>`- ${L}`).join(`
1932
- `)}`)}if(D=qt(g,{framework:e.framework,platform:e.platform,iosBuildNumber:e.resolvedBuildNumber||c.BUILD_NUMBER,androidVersionCode:e.resolvedVersionCode||c.ANDROID_VERSION_CODE}),g.ota?.enabled){if(g.ota.engine==="mach-react-native")throw new Error("This project still uses the unfinished mach-react-native OTA engine. Run `mach ota setup` to migrate to expo-updates before building.");if(!g.ota.url)throw new Error("OTA is enabled but ota.url is missing. Run `mach ota setup` before building.");let v=wo(g,u);if(e.framework==="expo"){let R=Yt(process.cwd(),{platform:e.platform,runtimeVersion:D,channel:v,url:g.ota.url}),x=$o(R,{runtimeVersion:D,channel:v,url:g.ota.url});if(x.length>0){let P=q.existsSync(de.join(process.cwd(),"node_modules",".bin","expo")),L=q.existsSync(de.join(process.cwd(),"node_modules","@radhya","mach","expo-plugin","index.js"));if(P&&L)throw new Error(`Expo OTA configuration mismatch: ${x.join("; ")}. Run \`${f.nameLower} ota setup\` to update the local Expo plugin before building.`);E.info(_.dim("Deferring Expo OTA validation until dependencies are installed on the build runner."))}}c.MACH_OTA_RUNTIME_VERSION=D,c.MACH_OTA_CHANNEL=v,c.MACH_OTA_URL=g.ota.url}if(e.platform==="ios"&&!e.simulator){let v=!!c.IOS_DIST_P12,R=!!c.IOS_PROVISIONING_PROFILE,x=m.length>1,P=x?!!c.IOS_PROVISIONING_PROFILES&&h.length===0:R;if(!v||!P){let L=h.length>0?`Provisioning Profiles for ${h.join(", ")}`:"Provisioning Profile",B=[...v?[]:["Distribution Certificate"],...P?[]:[L]].join(" and ");if(e.local&&e.buildId)throw new Error(`Missing iOS credentials: ${B}. Expected ${y} credentials for ${$||"the selected bundle ID"}. Run \`${f.nameLower} credentials --platform ios --profile ${A}\` and select ${$||"the correct bundle ID"}.`);if(E.error(_.red(`Missing iOS credentials: ${B}`)),h.length>0)for(let ge of h)E.info(_.yellow(`Run \`${f.nameLower} credentials --platform ios --profile ${A}\` and select ${ge}.`));e.quiet&&process.exit(1),x&&!P&&process.exit(1);let j=e.yes||await Gs({message:"Would you like to generate these credentials now?",initialValue:!0});if(j&&!Zn(j))return await Jt({platform:"ios",profile:A}),e.quiet||E.info(_.green("\u2713 Credentials setup complete! Restarting build phase...")),ei(e);e.quiet||E.info(_.yellow(`Run \`${f.nameLower} credentials\` to set up signing credentials manually.`)),process.exit(1)}}if(e.platform==="android"&&!e.developmentClient&&(e.distribution==="internal"||e.distribution==="store")&&!(!!c.ANDROID_KEYSTORE_BASE64||!!c.ANDROID_KEYSTORE)){E.error(_.red("Missing Android credentials: Signing Keystore")),e.quiet&&process.exit(1);let R=e.yes||await Gs({message:"Would you like to automatically create and upload an Android Keystore for this profile now?",initialValue:!0});if(R&&!Zn(R))return await Jt({platform:"android",profile:A}),e.quiet||E.info(_.green("\u2713 Android Keystore setup complete! Restarting build phase...")),ei(e);e.quiet||E.info(_.yellow(`Run \`${f.nameLower} credentials --platform android\` to set up a signing keystore manually.`)),process.exit(1)}}catch(y){(String(y.message||"").startsWith("Credential download failed")||String(y.message||"").startsWith("Credential setup failed")||String(y.message||"").startsWith("Missing iOS credentials")||String(y.message||"").startsWith("Auto-versioning failed"))&&(E.error(_.red(y.message)),process.exit(1)),e.platform==="ios"&&e.local&&e.buildId&&(E.error(_.red(`Failed to resolve iOS credentials: ${y.message}`)),process.exit(1)),E.warn(`Failed to resolve credentials: ${y.message}`)}}let me=!!(e.local&&e.buildId),oe=!!(e.local||e.sshHost),ke=!oe&&!me;if(me){E.info(_.magenta("\u{1F3D7}\uFE0F Runner Mode: Executing isolated build task..."));let y=await ji({...e,interactive:!1},n,c,i,{branch:S,version:b,runtimeVersion:D,summary:z,buildType:I});await ye(y),s=!1,process.exit(0)}async function ye(y){let $=async v=>{if(i)try{await ln("Report failed build status",()=>w.patch(`/builds/${i}/${n}`,{status:"failed",error:v,endTime:Date.now()}),3)}catch(R){E.warn(_.yellow(`Could not report failed build status: ${R.message}`))}};if(i&&y.length>0){let v=br(),R=[];e.quiet||v.start("Uploading artifacts to Dashboard...");try{for(let x of y){let P=de.basename(x),L=q.statSync(x).size,B=de.extname(P).toLowerCase(),j="application/octet-stream",ge=await ln(`Create artifact upload URL for ${P}`,()=>w.post(`/builds/${i}/${n}/artifact-upload-url`,{fileName:P,fileType:j}));if(ge.data.status!=="success")throw new Error(`Failed to get upload URL for ${P}`);await Yu(x,ge.data.uploadUrl,j),R.push({name:P,url:ge.data.downloadUrl,size:L,type:B.substring(1)})}e.quiet||v.stop("Artifacts uploaded.")}catch(x){e.quiet||v.stop("Failed to upload artifacts.");let P=`Artifact upload failed: ${x.message}`;throw E.error(_.red(P)),await $(P),new Error(P)}if(i&&R.length>0)try{E.info(_.cyan(`
1933
- \u{1F517} Download Links:`));for(let x of R)E.info(_.dim(` - ${x.name}: `)+_.blue.underline(x.url));await ln("Finalize build in dashboard",()=>w.patch(`/builds/${i}/${n}`,{status:"success",artifacts:R,endTime:Date.now(),runtimeVersion:D,...an(e)})),dn(e,{status:"success",projectId:i,buildId:n,platform:e.platform,profile:A,branch:S,version:b,runtimeVersion:D,...an(e),buildType:I,developmentClient:!!e.developmentClient,summary:z,artifacts:R}),E.success(_.green(`
1934
- \u2713 Build completed and reported to dashboard.`)),e.maestro&&!me&&await Qs(i,n,e,A),e.autoSubmit&&!me&&await Sr(i,n,e,A)}catch(x){let P=`Build artifact uploaded but dashboard finalization failed: ${x.message}`;throw E.error(_.red(`
1935
- ${P}`)),await $(P),new Error(P)}}else if(i){let v="Build completed but produced no uploadable artifacts.";throw E.error(_.red(v)),await $(v),new Error(v)}}if(oe){if(E.info(_.cyan(`\u{1F680} Direct Build Mode: Executing on ${e.sshHost||"local"}...`)),i&&!o){let y=process.argv.slice(3).join(" ");await w.post("/builds",{projectId:i,buildId:n,platform:e.platform,status:"building",branch:S,version:b,runtimeVersion:D,...an(e),summary:z,startTime:r,buildType:I,buildProfile:A,buildArgs:y,framework:e.framework,appDirectory:e.appDirectory,simulator:!!e.simulator,developmentClient:!!e.developmentClient,...ea(e,n,A,p)}),ta(e)}if(e.sshHost&&e.platform==="ios")await Zo(e,n,c,i),s=!1,e.autoSubmit&&await Sr(i,n,e,A);else{let y=await ji({...e,interactive:!!e.local},n,c,i,{branch:S,version:b,runtimeVersion:D,summary:z,buildType:I});await ye(y),s=!1}return}if(ke&&(E.info(_.blue("\u{1F6F0}\uFE0F Cloud Initiator Mode: Preparing orchestration...")),!e.dryRun)){e.quiet||t.start("Zipping and uploading local source...");let y=await w.post("/builds/source-upload-url",{projectId:i,buildId:n});if(y.data.status!=="success")throw t.stop("Failed to get upload URL."),new Error("Failed to get source upload URL from API");Ir("SOURCE_UPLOAD",y.data.uploadUrl);let $=new Ks,v=Bs($,process.cwd(),e.platform,e.appDirectory),R=$.toBuffer();if(!e.quiet){let P=v.skipped.length>0?` Skipped: ${v.skipped.join(", ")}.`:"";t.message(`Prepared source (${v.files} files).${P}`)}e.quiet||t.message(`Uploading source (${(R.length/1024/1024).toFixed(1)} MB)...`);let x=!1;for(let P=1;P<=3;P++)try{await Xn.put(y.data.uploadUrl,R,{headers:{"Content-Type":"application/zip"},maxBodyLength:1/0,maxContentLength:1/0,timeout:12e4}),x=!0;break}catch(L){if(P<3)t.message(`Upload attempt ${P} failed (${L.code||L.message}), retrying...`),await new Promise(B=>setTimeout(B,2e3*P));else throw L}if(e.quiet||t.stop("Source uploaded"),i){let P=process.argv.slice(3).join(" ");s=e.platform==="android",await w.post("/builds",{projectId:i,buildId:n,platform:e.platform,status:"pending",branch:S,version:b,runtimeVersion:D,...an(e),summary:z,startTime:r,buildType:I,buildProfile:A,buildArgs:P,framework:e.framework,appDirectory:e.appDirectory,simulator:!!e.simulator,developmentClient:!!e.developmentClient,...ea(e,n,A,p)}),s=e.platform==="android",E.info(_.green("\u2713 Cloud build registered.")),ta(e)}e.platform==="android"&&(await qo(e,n,c,i,e.preBuild),s=!1),e.quiet||E.info(_.cyan("\u{1F4E1} Connecting to build stream...")),await fp(i,n,e),e.maestro&&await Qs(i,n,e,A),e.autoSubmit&&await Sr(i,n,e,A);return}}catch(d){let c=d.message||"Build failed";d.response?.data?.message?c=d.response.data.message:d.message.includes("status code 402")?c="Insufficient wallet balance. Please add credits in the Dashboard.":d.message.includes("status code 403")&&(c="Monthly build quota exceeded. Upgrade your plan in the Dashboard."),i&&s&&await a(c),E.error(_.red(`\u2717 Build failed: ${c}`)),process.exit(1)}};async function Qs(e,t,n,i){E.info(_.cyan(`
1936
- \u{1F3BC} Queuing managed Maestro test...`)),await er({projectId:e,buildId:t,platform:n.platform,profile:i,maestroFlows:n.maestroFlows,maestroDevice:n.maestroDevice,maestroRetries:n.maestroRetries,maestroRecord:n.maestroRecord,maestroUseBuildSource:n.maestroUseBuildSource,maestroEnv:n.maestroEnv,quiet:n.quiet})}async function Sr(e,t,n,i){if(!e){E.error(_.red("Auto-submit requires a linked Mach project. Run `mach link` or pass --project-id.")),process.exitCode=1;return}E.info(_.cyan(`
1937
- Auto-submit: submitting the successful build...`));try{let r=await up(e,t);if(r?.autoSubmit){let o=r.submissionId?`${He}/submissions/${r.submissionId}?projectId=${encodeURIComponent(e)}`:void 0,s=String(r.status||"").toLowerCase(),a=String(r.autoSubmitStatus||"").toLowerCase(),l=r.submissionId||["success","completed","succeeded"].includes(s)||["starting","submitted","failed","skipped"].includes(a);if(r.submissionId?(E.info(_.green(`Auto-submit is already queued by Mach backend: ${r.submissionId}`)),E.info(_.dim(`Dashboard: ${o}`))):r.autoSubmitStatus==="failed"?E.warn(_.yellow(`Backend auto-submit failed: ${r.autoSubmitError||"Unknown error"}`)):l&&E.info(_.green("Auto-submit is registered with Mach backend; skipping local duplicate submit.")),l){rt(n,{status:r.autoSubmitStatus||"pending",projectId:e,submitId:r.submissionId,platform:n.platform,profile:i,buildId:t,dashboardUrl:o});return}}await qn({platform:n.platform,profile:i,buildProfile:i,buildId:t,projectId:e,yes:n.yes,quiet:n.quiet,track:n.submitTrack,releaseStatus:n.submitReleaseStatus,rollout:n.submitRollout,changesNotSentForReview:n.submitChangesNotSentForReview,credentialId:n.submitCredentialId,packageName:n.androidPackage,jsonOutput:n.submitJsonOutput,submitArgs:ca(n,t,i)})}catch(r){E.error(_.red(`Auto-submit failed: ${r.message||r}`)),process.exitCode=1}}function ca(e,t,n){let i=["--platform",e.platform,"--profile",n,"--build-id",t];return e.submitTrack&&i.push("--track",String(e.submitTrack)),e.submitReleaseStatus&&i.push("--release-status",String(e.submitReleaseStatus)),e.submitRollout!==void 0&&i.push("--rollout",String(e.submitRollout)),e.submitChangesNotSentForReview&&i.push("--changes-not-sent-for-review"),e.submitCredentialId&&i.push("--credential-id",e.submitCredentialId),e.platform==="android"&&e.androidPackage&&i.push("--package-name",e.androidPackage),e.platform==="ios"&&e.iosBundleIdentifier&&i.push("--bundle-id",e.iosBundleIdentifier),e.submitJsonOutput&&i.push("--json-output",e.submitJsonOutput),i.join(" ")}async function up(e,t){try{let i=(await w.get(`/builds/${e}/${t}`)).data?.build;if(i?.autoSubmit)return i}catch(n){E.warn(_.dim(`Could not check backend auto-submit status: ${n.message}`))}return null}function ua(e){for(let t of Object.keys(e))e[t]===void 0&&delete e[t];return e}function pp(e,t,n){let i=n?.submit?.[t]?.android||{},r=n?.submit?.production?.android||{},o=e.submitTrack||i.track||r.track,s=e.submitReleaseStatus||i.releaseStatus||r.releaseStatus,a=e.submitRollout??i.rollout??i.userFraction??i.rolloutFraction??r.rollout??r.userFraction??r.rolloutFraction,l=e.submitChangesNotSentForReview??i.changesNotSentForReview??i.changes_not_sent_for_review??r.changesNotSentForReview??r.changes_not_sent_for_review;return ua({track:o,releaseStatus:s,rollout:a,changesNotSentForReview:l===void 0?!1:l===!0||l==="true"||l==="1"})}function ea(e,t,n,i){if(!e.autoSubmit||e.dryRun)return{};let r=e.platform==="android"?pp(e,n,i):{};return{autoSubmit:!0,autoSubmitStatus:"pending",autoSubmitOptions:ua({platform:e.platform,profile:n,buildId:t,latest:!1,...r,credentialId:e.submitCredentialId,packageName:e.platform==="android"?e.androidPackage:void 0,bundleId:e.platform==="ios"?e.iosBundleIdentifier:void 0,submitArgs:ca(e,t,n)})}}function ta(e){!e.autoSubmit||e.dryRun||e.quiet||(E.info(_.green("\u2713 Auto-submit has been registered with the build.")),E.info(_.dim(" You can close this terminal; submission will start after build success.")))}function na(e){return`${He}/build/${e}`}function dn(e,t){if(!e.jsonOutput)return;let n=de.resolve(e.jsonOutput),i={...t,url:t.url||na(t.buildId),dashboardUrl:t.dashboardUrl||na(t.buildId),updatedAt:new Date().toISOString()};try{let r=de.dirname(n);r&&r!=="."&&q.mkdirSync(r,{recursive:!0}),q.writeFileSync(n,JSON.stringify(i,null,2))}catch(r){E.warn(_.yellow(`Could not write build metadata JSON: ${r.message}`))}}async function fp(e,t,n){let r=br(),o="pending",s=0,a=0;for(n.quiet||r.start("Connecting to build stream...");;){try{let d=(await w.get(`/builds/${e}/${t}`)).data.build;if(d){o=d.status;let c=String(d.pipelineLaunchState||"").toLowerCase(),u=Number(d.pipelineLaunchClaimedAt),p=Number(d.pipelineLaunchDispatchStartedAt),m=c==="claimed"&&Number.isFinite(u)&&u>0&&Date.now()-u>=3e5,h=c==="dispatching"&&Number.isFinite(p)&&p>0&&Date.now()-p>=3e5;if(["","created","pending","queued"].includes(String(o||"").toLowerCase())&&(c==="retryable_failed"||c==="ambiguous"||m||h)){let S=h||c==="ambiguous"?"ambiguous":"retryable_failed",b=d.pipelineLaunchError||(S==="ambiguous"?"The iOS runner launch outcome is unknown. MACH blocked automatic relaunch to avoid a duplicate pipeline.":m?"The iOS runner was never dispatched before its launch lease expired. Retry this build.":"The iOS runner could not be launched. Retry this build.");n.quiet||r.stop("Build runner launch failed."),dn(n,{status:"failed",projectId:e,buildId:t,platform:n.platform,profile:d.buildProfile,buildType:d.buildType,developmentClient:!!d.developmentClient,version:d.version,runtimeVersion:d.runtimeVersion,buildNumber:d.buildNumber,versionCode:d.versionCode,summary:d.summary,pipelineLaunchState:S,error:b,artifacts:d.artifacts||[]}),E.error(_.red(`
1938
- \u2717 Build runner launch failed: ${b}`)),process.exit(1)}if(o==="building")n.quiet||r.message("Build in progress...");else if(o==="failed"||o==="error"||o==="cancelled"||o==="canceled"){let S=o==="cancelled"||o==="canceled";n.quiet||r.stop(S?"Build cancelled.":"Build failed.");let b=d.error||(S?"Build was cancelled.":"Unknown error");dn(n,{status:o,projectId:e,buildId:t,platform:n.platform,profile:d.buildProfile,buildType:d.buildType,developmentClient:!!d.developmentClient,version:d.version,runtimeVersion:d.runtimeVersion,buildNumber:d.buildNumber,versionCode:d.versionCode,summary:d.summary,error:b,artifacts:d.artifacts||[]}),E.error(_.red(`
1939
- \u2717 ${S?"Build cancelled":"Build failed"}: ${b}`)),process.exit(1)}else if(o==="completed"||o==="success"){n.quiet||r.stop("Build successful!"),dn(n,{status:o,projectId:e,buildId:t,platform:n.platform,profile:d.buildProfile,buildType:d.buildType,developmentClient:!!d.developmentClient,version:d.version,runtimeVersion:d.runtimeVersion,buildNumber:d.buildNumber,versionCode:d.versionCode,summary:d.summary,artifacts:d.artifacts||[]}),E.success(_.green(`
1940
- \u2713 Build completed successfully!`));try{n.quiet||(E.info(_.magenta(`
1941
- \u{1F4F1} Installation Hub:`)),E.info(_.dim(" - View & Install Build: ")+_.white.underline(`${He}/build/${t}`)))}catch{}return}else if(o!=="pending"){n.quiet||r.stop(`Build status: ${o}`);return}}try{let c=await w.get(`/builds/${e}/${t}/logs`),u=typeof c.data=="string"?js(c.data):c.data;if(u&&typeof u=="string"&&!n.quiet){let p=u.split(`
1942
- `);if(p.length>s){for(let m=s;m<p.length;m++)p[m].trim()&&console.log(_.dim(` ${p[m]}`));s=p.length}}}catch{}a=0}catch{a++,a>10&&(r.stop("Connection lost."),E.error(_.red(`
1943
- \u2717 Lost connection to Dashboard API.`)),process.exit(1))}await new Promise(l=>setTimeout(l,3e3))}}import*as si from"http";import*as Aa from"net";import{execFile as mp,execFileSync as lt,execSync as ii,spawn as pa}from"child_process";import ne from"chalk";import{log as F}from"@clack/prompts";import gp from"axios";import X from"fs";import xe from"os";import U from"path";var Xe=7070,un=`http://127.0.0.1:${Xe}`,Tt="com.radhya.mach.agent",Ct="Mach Agent",Nt=`${Tt}.service`,hp=5e3,yp=3e3,ti=null,ni=null,Le=()=>U.join(xe.homedir(),f.configDir),Sa=()=>U.join(xe.homedir(),"Library","LaunchAgents"),ri=()=>U.join(Sa(),`${Tt}.plist`),ba=()=>U.join(xe.homedir(),".config","systemd","user"),Rr=()=>U.join(ba(),Nt),Pr=()=>U.join(Le(),"agent.cmd");function Or(){return`gui/${process.getuid?.()||Number(ii("id -u").toString().trim())}`}function Ia(e){return e.replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;").replace(/"/g,"&quot;").replace(/'/g,"&apos;")}function cn(e){return`<string>${Ia(e)}</string>`}function Dr(){let e=process.argv[1]?X.realpathSync(process.argv[1]):"";if(!e||!X.existsSync(e))throw new Error("Could not resolve the current Mach CLI entrypoint.");return[process.execPath,e,"agent","run"]}function Cr(){let e=Ea(),t=process.platform==="win32"?[process.env.SystemRoot?U.join(process.env.SystemRoot,"System32"):void 0,process.env.SystemRoot]:["/opt/homebrew/bin","/usr/local/bin","/usr/bin","/bin","/usr/sbin","/sbin"],n={HOME:xe.homedir(),PATH:[process.env.PATH,...e.flatMap(i=>[U.join(i,"platform-tools"),U.join(i,"emulator"),U.join(i,"cmdline-tools","latest","bin"),U.join(i,"tools","bin")]),...t].filter(Boolean).join(U.delimiter)};for(let i of["ANDROID_HOME","ANDROID_SDK_ROOT","JAVA_HOME","SHELL"])process.env[i]&&(n[i]=process.env[i]);return n}function Ea(){let e=[process.env.ANDROID_HOME,process.env.ANDROID_SDK_ROOT];if(process.platform==="darwin")e.push(U.join(xe.homedir(),"Library","Android","sdk"));else if(process.platform==="linux")e.push(U.join(xe.homedir(),"Android","Sdk"),U.join(xe.homedir(),"Android","sdk"),"/opt/android-sdk","/usr/lib/android-sdk");else if(process.platform==="win32"){let t=process.env.LOCALAPPDATA,n=process.env.USERPROFILE||xe.homedir();e.push(t?U.join(t,"Android","Sdk"):void 0,U.join(n,"AppData","Local","Android","Sdk"))}return Array.from(new Set(e.filter(t=>!!t)))}function Ap(e){return process.platform==="win32"&&!e.toLowerCase().endsWith(".exe")?`${e}.exe`:e}function _a(e,t){let n=Ap(e);for(let i of Ea()){let r=U.join(i,t,n);if(X.existsSync(r))return r}return n}function wa(){return _a("adb","platform-tools")}function $a(){return _a("emulator","emulator")}function vr(e){return`"${e.replace(/\\/g,"\\\\").replace(/"/g,'\\"').replace(/%/g,"%%")}"`}function Sp(){if(process.platform!=="linux")throw new Error("Linux service install requires Linux.");X.mkdirSync(Le(),{recursive:!0}),X.mkdirSync(ba(),{recursive:!0});let e=Dr(),t=Cr(),n=Object.entries(t).map(([r,o])=>`Environment=${vr(`${r}=${o}`)}`).join(`
1932
+ `)}`)}if(D=qt(g,{framework:e.framework,platform:e.platform,iosBuildNumber:e.resolvedBuildNumber||c.BUILD_NUMBER,androidVersionCode:e.resolvedVersionCode||c.ANDROID_VERSION_CODE}),g.ota?.enabled){if(g.ota.engine==="mach-react-native")throw new Error("This project still uses the unfinished mach-react-native OTA engine. Run `mach ota setup` to migrate to expo-updates before building.");if(!g.ota.url)throw new Error("OTA is enabled but ota.url is missing. Run `mach ota setup` before building.");let v=Ro(g,u);if(e.framework==="expo"){let R=Yt(process.cwd(),{platform:e.platform,runtimeVersion:D,channel:v,url:g.ota.url}),x=Po(R,{runtimeVersion:D,channel:v,url:g.ota.url});if(x.length>0){let P=W.existsSync(de.join(process.cwd(),"node_modules",".bin","expo")),L=W.existsSync(de.join(process.cwd(),"node_modules","@radhya","mach","expo-plugin","index.js"));if(P&&L)throw new Error(`Expo OTA configuration mismatch: ${x.join("; ")}. Run \`${f.nameLower} ota setup\` to update the local Expo plugin before building.`);I.info(E.dim("Deferring Expo OTA validation until dependencies are installed on the build runner."))}}c.MACH_OTA_RUNTIME_VERSION=D,c.MACH_OTA_CHANNEL=v,c.MACH_OTA_URL=g.ota.url}if(e.platform==="ios"&&!e.simulator){let v=!!c.IOS_DIST_P12,R=!!c.IOS_PROVISIONING_PROFILE,x=m.length>1,P=x?!!c.IOS_PROVISIONING_PROFILES&&h.length===0:R;if(!v||!P){let L=h.length>0?`Provisioning Profiles for ${h.join(", ")}`:"Provisioning Profile",B=[...v?[]:["Distribution Certificate"],...P?[]:[L]].join(" and ");if(e.local&&e.buildId)throw new Error(`Missing iOS credentials: ${B}. Expected ${y} credentials for ${$||"the selected bundle ID"}. Run \`${f.nameLower} credentials --platform ios --profile ${A}\` and select ${$||"the correct bundle ID"}.`);if(I.error(E.red(`Missing iOS credentials: ${B}`)),h.length>0)for(let me of h)I.info(E.yellow(`Run \`${f.nameLower} credentials --platform ios --profile ${A}\` and select ${me}.`));e.quiet&&process.exit(1),x&&!P&&process.exit(1);let j=e.yes||await zs({message:"Would you like to generate these credentials now?",initialValue:!0});if(j&&!Zn(j))return await Jt({platform:"ios",profile:A}),e.quiet||I.info(E.green("\u2713 Credentials setup complete! Restarting build phase...")),ei(e);e.quiet||I.info(E.yellow(`Run \`${f.nameLower} credentials\` to set up signing credentials manually.`)),process.exit(1)}}if(e.platform==="android"&&!e.developmentClient&&(e.distribution==="internal"||e.distribution==="store")&&!(!!c.ANDROID_KEYSTORE_BASE64||!!c.ANDROID_KEYSTORE)){I.error(E.red("Missing Android credentials: Signing Keystore")),e.quiet&&process.exit(1);let R=e.yes||await zs({message:"Would you like to automatically create and upload an Android Keystore for this profile now?",initialValue:!0});if(R&&!Zn(R))return await Jt({platform:"android",profile:A}),e.quiet||I.info(E.green("\u2713 Android Keystore setup complete! Restarting build phase...")),ei(e);e.quiet||I.info(E.yellow(`Run \`${f.nameLower} credentials --platform android\` to set up a signing keystore manually.`)),process.exit(1)}}catch(y){(String(y.message||"").startsWith("Credential download failed")||String(y.message||"").startsWith("Credential setup failed")||String(y.message||"").startsWith("Missing iOS credentials")||String(y.message||"").startsWith("Auto-versioning failed"))&&(I.error(E.red(y.message)),process.exit(1)),e.platform==="ios"&&e.local&&e.buildId&&(I.error(E.red(`Failed to resolve iOS credentials: ${y.message}`)),process.exit(1)),I.warn(`Failed to resolve credentials: ${y.message}`)}}let Se=!!(e.local&&e.buildId),oe=!!(e.local||e.sshHost),ke=!oe&&!Se;if(Se){I.info(E.magenta("\u{1F3D7}\uFE0F Runner Mode: Executing isolated build task..."));let y=await ji({...e,interactive:!1},n,c,i,{branch:S,version:b,runtimeVersion:D,summary:X,buildType:_});await he(y),s=!1,process.exit(0)}async function he(y){let $=async v=>{if(i)try{await ln("Report failed build status",()=>w.patch(`/builds/${i}/${n}`,{status:"failed",error:v,endTime:Date.now()}),3)}catch(R){I.warn(E.yellow(`Could not report failed build status: ${R.message}`))}};if(i&&y.length>0){let v=Er(),R=[];e.quiet||v.start("Uploading artifacts to Dashboard...");try{for(let x of y){let P=de.basename(x),L=W.statSync(x).size,B=de.extname(P).toLowerCase(),j="application/octet-stream",me=await ln(`Create artifact upload URL for ${P}`,()=>w.post(`/builds/${i}/${n}/artifact-upload-url`,{fileName:P,fileType:j}));if(me.data.status!=="success")throw new Error(`Failed to get upload URL for ${P}`);await Ju(x,me.data.uploadUrl,j),R.push({name:P,url:me.data.downloadUrl,size:L,type:B.substring(1)})}e.quiet||v.stop("Artifacts uploaded.")}catch(x){e.quiet||v.stop("Failed to upload artifacts.");let P=`Artifact upload failed: ${x.message}`;throw I.error(E.red(P)),await $(P),new Error(P)}if(i&&R.length>0)try{I.info(E.cyan(`
1933
+ \u{1F517} Download Links:`));for(let x of R)I.info(E.dim(` - ${x.name}: `)+E.blue.underline(x.url));await ln("Finalize build in dashboard",()=>w.patch(`/builds/${i}/${n}`,{status:"success",artifacts:R,endTime:Date.now(),runtimeVersion:D,...an(e),...Ir(e,A)})),dn(e,{status:"success",projectId:i,buildId:n,platform:e.platform,profile:A,branch:S,version:b,runtimeVersion:D,...an(e),buildType:_,developmentClient:!!e.developmentClient,summary:X,artifacts:R}),I.success(E.green(`
1934
+ \u2713 Build completed and reported to dashboard.`)),e.maestro&&!Se&&await ta(i,n,e,A),e.autoSubmit&&!Se&&await br(i,n,e,A)}catch(x){let P=`Build artifact uploaded but dashboard finalization failed: ${x.message}`;throw I.error(E.red(`
1935
+ ${P}`)),await $(P),new Error(P)}}else if(i){let v="Build completed but produced no uploadable artifacts.";throw I.error(E.red(v)),await $(v),new Error(v)}}if(oe){if(I.info(E.cyan(`\u{1F680} Direct Build Mode: Executing on ${e.sshHost||"local"}...`)),i&&!o){let y=process.argv.slice(3).join(" ");await w.post("/builds",{projectId:i,buildId:n,platform:e.platform,status:"building",branch:S,version:b,runtimeVersion:D,...an(e),summary:X,startTime:r,buildType:_,buildProfile:A,buildArgs:y,framework:e.framework,appDirectory:e.appDirectory,simulator:!!e.simulator,developmentClient:!!e.developmentClient,...Ir(e,A),...na(e,n,A,p)}),ia(e)}if(e.sshHost&&e.platform==="ios")await ts(e,n,c,i),s=!1,e.autoSubmit&&await br(i,n,e,A);else{let y=await ji({...e,interactive:!!e.local},n,c,i,{branch:S,version:b,runtimeVersion:D,summary:X,buildType:_});await he(y),s=!1}return}if(ke&&(I.info(E.blue("\u{1F6F0}\uFE0F Cloud Initiator Mode: Preparing orchestration...")),!e.dryRun)){e.quiet||t.start("Zipping and uploading local source...");let y=await w.post("/builds/source-upload-url",{projectId:i,buildId:n});if(y.data.status!=="success")throw t.stop("Failed to get upload URL."),new Error("Failed to get source upload URL from API");_r("SOURCE_UPLOAD",y.data.uploadUrl);let $=new Ys,v=Hs($,process.cwd(),e.platform,e.appDirectory),R=$.toBuffer();if(!e.quiet){let P=v.skipped.length>0?` Skipped: ${v.skipped.join(", ")}.`:"";t.message(`Prepared source (${v.files} files).${P}`)}e.quiet||t.message(`Uploading source (${(R.length/1024/1024).toFixed(1)} MB)...`);let x=!1;for(let P=1;P<=3;P++)try{await Xn.put(y.data.uploadUrl,R,{headers:{"Content-Type":"application/zip"},maxBodyLength:1/0,maxContentLength:1/0,timeout:12e4}),x=!0;break}catch(L){if(P<3)t.message(`Upload attempt ${P} failed (${L.code||L.message}), retrying...`),await new Promise(B=>setTimeout(B,2e3*P));else throw L}if(e.quiet||t.stop("Source uploaded"),i){let P=process.argv.slice(3).join(" ");s=e.platform==="android",await w.post("/builds",{projectId:i,buildId:n,platform:e.platform,status:"pending",branch:S,version:b,runtimeVersion:D,...an(e),summary:X,startTime:r,buildType:_,buildProfile:A,buildArgs:P,framework:e.framework,appDirectory:e.appDirectory,simulator:!!e.simulator,developmentClient:!!e.developmentClient,...Ir(e,A),...na(e,n,A,p)}),s=e.platform==="android",I.info(E.green("\u2713 Cloud build registered.")),ia(e)}e.platform==="android"&&(await Zo(e,n,c,i,e.preBuild),s=!1),e.quiet||I.info(E.cyan("\u{1F4E1} Connecting to build stream...")),await mp(i,n,e),e.maestro&&await ta(i,n,e,A),e.autoSubmit&&await br(i,n,e,A);return}}catch(d){let c=d.message||"Build failed";d.response?.data?.message?c=d.response.data.message:d.message.includes("status code 402")?c="Insufficient wallet balance. Please add credits in the Dashboard.":d.message.includes("status code 403")&&(c="Monthly build quota exceeded. Upgrade your plan in the Dashboard."),i&&s&&await a(c),I.error(E.red(`\u2717 Build failed: ${c}`)),process.exit(1)}};async function ta(e,t,n,i){I.info(E.cyan(`
1936
+ \u{1F3BC} Queuing managed Maestro test...`)),await er({projectId:e,buildId:t,platform:n.platform,profile:i,maestroFlows:n.maestroFlows,maestroDevice:n.maestroDevice,maestroRetries:n.maestroRetries,maestroRecord:n.maestroRecord,maestroUseBuildSource:n.maestroUseBuildSource,maestroEnv:n.maestroEnv,quiet:n.quiet})}async function br(e,t,n,i){if(!e){I.error(E.red("Auto-submit requires a linked Mach project. Run `mach link` or pass --project-id.")),process.exitCode=1;return}I.info(E.cyan(`
1937
+ Auto-submit: submitting the successful build...`));try{let r=await pp(e,t);if(r?.autoSubmit){let o=r.submissionId?`${He}/submissions/${r.submissionId}?projectId=${encodeURIComponent(e)}`:void 0,s=String(r.status||"").toLowerCase(),a=String(r.autoSubmitStatus||"").toLowerCase(),l=r.submissionId||["success","completed","succeeded"].includes(s)||["starting","submitted","failed","skipped"].includes(a);if(r.submissionId?(I.info(E.green(`Auto-submit is already queued by Mach backend: ${r.submissionId}`)),I.info(E.dim(`Dashboard: ${o}`))):r.autoSubmitStatus==="failed"?I.warn(E.yellow(`Backend auto-submit failed: ${r.autoSubmitError||"Unknown error"}`)):l&&I.info(E.green("Auto-submit is registered with Mach backend; skipping local duplicate submit.")),l){ot(n,{status:r.autoSubmitStatus||"pending",projectId:e,submitId:r.submissionId,platform:n.platform,profile:i,buildId:t,dashboardUrl:o});return}}await qn({platform:n.platform,profile:i,buildProfile:i,buildId:t,projectId:e,yes:n.yes,quiet:n.quiet,track:n.submitTrack,releaseStatus:n.submitReleaseStatus,rollout:n.submitRollout,changesNotSentForReview:n.submitChangesNotSentForReview,credentialId:n.submitCredentialId,packageName:n.androidPackage,jsonOutput:n.submitJsonOutput,submitArgs:fa(n,t,i)})}catch(r){I.error(E.red(`Auto-submit failed: ${r.message||r}`)),process.exitCode=1}}function fa(e,t,n){let i=["--platform",e.platform,"--profile",n,"--build-id",t];return e.submitTrack&&i.push("--track",String(e.submitTrack)),e.submitReleaseStatus&&i.push("--release-status",String(e.submitReleaseStatus)),e.submitRollout!==void 0&&i.push("--rollout",String(e.submitRollout)),e.submitChangesNotSentForReview&&i.push("--changes-not-sent-for-review"),e.submitCredentialId&&i.push("--credential-id",e.submitCredentialId),e.platform==="android"&&e.androidPackage&&i.push("--package-name",e.androidPackage),e.platform==="ios"&&e.iosBundleIdentifier&&i.push("--bundle-id",e.iosBundleIdentifier),e.submitJsonOutput&&i.push("--json-output",e.submitJsonOutput),i.join(" ")}async function pp(e,t){try{let i=(await w.get(`/builds/${e}/${t}`)).data?.build;if(i?.autoSubmit)return i}catch(n){I.warn(E.dim(`Could not check backend auto-submit status: ${n.message}`))}return null}function Pr(e){for(let t of Object.keys(e))e[t]===void 0&&delete e[t];return e}function Ir(e,t){if(e.platform==="android"&&!e.androidPackage){let n=nt("android",e.appDirectory);n&&(e.androidPackage=n)}return Pr({distribution:da(e,t),packageName:e.platform==="android"?e.androidPackage:void 0,bundleId:e.platform==="ios"?e.iosBundleIdentifier:void 0,appleTeamId:e.platform==="ios"?e.iosTeamId:void 0,developerTeamId:e.platform==="ios"?e.iosTeamId:void 0})}function fp(e,t,n){let i=n?.submit?.[t]?.android||{},r=n?.submit?.production?.android||{},o=e.submitTrack||i.track||r.track,s=e.submitReleaseStatus||i.releaseStatus||r.releaseStatus,a=e.submitRollout??i.rollout??i.userFraction??i.rolloutFraction??r.rollout??r.userFraction??r.rolloutFraction,l=e.submitChangesNotSentForReview??i.changesNotSentForReview??i.changes_not_sent_for_review??r.changesNotSentForReview??r.changes_not_sent_for_review;return Pr({track:o,releaseStatus:s,rollout:a,changesNotSentForReview:l===void 0?!1:l===!0||l==="true"||l==="1"})}function na(e,t,n,i){if(!e.autoSubmit||e.dryRun)return{};let r=e.platform==="android"?fp(e,n,i):{};return{autoSubmit:!0,autoSubmitStatus:"pending",autoSubmitOptions:Pr({platform:e.platform,profile:n,buildId:t,latest:!1,...r,credentialId:e.submitCredentialId,packageName:e.platform==="android"?e.androidPackage:void 0,bundleId:e.platform==="ios"?e.iosBundleIdentifier:void 0,submitArgs:fa(e,t,n)})}}function ia(e){!e.autoSubmit||e.dryRun||e.quiet||(I.info(E.green("\u2713 Auto-submit has been registered with the build.")),I.info(E.dim(" You can close this terminal; submission will start after build success.")))}function ra(e){return`${He}/build/${e}`}function dn(e,t){if(!e.jsonOutput)return;let n=de.resolve(e.jsonOutput),i={...t,url:t.url||ra(t.buildId),dashboardUrl:t.dashboardUrl||ra(t.buildId),updatedAt:new Date().toISOString()};try{let r=de.dirname(n);r&&r!=="."&&W.mkdirSync(r,{recursive:!0}),W.writeFileSync(n,JSON.stringify(i,null,2))}catch(r){I.warn(E.yellow(`Could not write build metadata JSON: ${r.message}`))}}async function mp(e,t,n){let r=Er(),o="pending",s=0,a=0;for(n.quiet||r.start("Connecting to build stream...");;){try{let d=(await w.get(`/builds/${e}/${t}`)).data.build;if(d){o=d.status;let c=String(d.pipelineLaunchState||"").toLowerCase(),u=Number(d.pipelineLaunchClaimedAt),p=Number(d.pipelineLaunchDispatchStartedAt),m=c==="claimed"&&Number.isFinite(u)&&u>0&&Date.now()-u>=3e5,h=c==="dispatching"&&Number.isFinite(p)&&p>0&&Date.now()-p>=3e5;if(["","created","pending","queued"].includes(String(o||"").toLowerCase())&&(c==="retryable_failed"||c==="ambiguous"||m||h)){let S=h||c==="ambiguous"?"ambiguous":"retryable_failed",b=d.pipelineLaunchError||(S==="ambiguous"?"The iOS runner launch outcome is unknown. MACH blocked automatic relaunch to avoid a duplicate pipeline.":m?"The iOS runner was never dispatched before its launch lease expired. Retry this build.":"The iOS runner could not be launched. Retry this build.");n.quiet||r.stop("Build runner launch failed."),dn(n,{status:"failed",projectId:e,buildId:t,platform:n.platform,profile:d.buildProfile,buildType:d.buildType,developmentClient:!!d.developmentClient,version:d.version,runtimeVersion:d.runtimeVersion,buildNumber:d.buildNumber,versionCode:d.versionCode,summary:d.summary,pipelineLaunchState:S,error:b,artifacts:d.artifacts||[]}),I.error(E.red(`
1938
+ \u2717 Build runner launch failed: ${b}`)),process.exit(1)}if(o==="building")n.quiet||r.message("Build in progress...");else if(o==="failed"||o==="error"||o==="cancelled"||o==="canceled"){let S=o==="cancelled"||o==="canceled";n.quiet||r.stop(S?"Build cancelled.":"Build failed.");let b=d.error||(S?"Build was cancelled.":"Unknown error");dn(n,{status:o,projectId:e,buildId:t,platform:n.platform,profile:d.buildProfile,buildType:d.buildType,developmentClient:!!d.developmentClient,version:d.version,runtimeVersion:d.runtimeVersion,buildNumber:d.buildNumber,versionCode:d.versionCode,summary:d.summary,error:b,artifacts:d.artifacts||[]}),I.error(E.red(`
1939
+ \u2717 ${S?"Build cancelled":"Build failed"}: ${b}`)),process.exit(1)}else if(o==="completed"||o==="success"){n.quiet||r.stop("Build successful!"),dn(n,{status:o,projectId:e,buildId:t,platform:n.platform,profile:d.buildProfile,buildType:d.buildType,developmentClient:!!d.developmentClient,version:d.version,runtimeVersion:d.runtimeVersion,buildNumber:d.buildNumber,versionCode:d.versionCode,summary:d.summary,artifacts:d.artifacts||[]}),I.success(E.green(`
1940
+ \u2713 Build completed successfully!`));try{n.quiet||(I.info(E.magenta(`
1941
+ \u{1F4F1} Installation Hub:`)),I.info(E.dim(" - View & Install Build: ")+E.white.underline(`${He}/build/${t}`)))}catch{}return}else if(o!=="pending"){n.quiet||r.stop(`Build status: ${o}`);return}}try{let c=await w.get(`/builds/${e}/${t}/logs`),u=typeof c.data=="string"?Gs(c.data):c.data;if(u&&typeof u=="string"&&!n.quiet){let p=u.split(`
1942
+ `);if(p.length>s){for(let m=s;m<p.length;m++)p[m].trim()&&console.log(E.dim(` ${p[m]}`));s=p.length}}}catch{}a=0}catch{a++,a>10&&(r.stop("Connection lost."),I.error(E.red(`
1943
+ \u2717 Lost connection to Dashboard API.`)),process.exit(1))}await new Promise(l=>setTimeout(l,3e3))}}import*as si from"http";import*as ba from"net";import{execFile as gp,execFileSync as dt,execSync as ii,spawn as ma}from"child_process";import ne from"chalk";import{log as F}from"@clack/prompts";import hp from"axios";import J from"fs";import xe from"os";import U from"path";var Xe=7070,un=`http://127.0.0.1:${Xe}`,Tt="com.radhya.mach.agent",Ct="Mach Agent",Nt=`${Tt}.service`,yp=5e3,Ap=3e3,ti=null,ni=null,Le=()=>U.join(xe.homedir(),f.configDir),Ia=()=>U.join(xe.homedir(),"Library","LaunchAgents"),ri=()=>U.join(Ia(),`${Tt}.plist`),Ea=()=>U.join(xe.homedir(),".config","systemd","user"),Dr=()=>U.join(Ea(),Nt),Cr=()=>U.join(Le(),"agent.cmd");function Tr(){return`gui/${process.getuid?.()||Number(ii("id -u").toString().trim())}`}function _a(e){return e.replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;").replace(/"/g,"&quot;").replace(/'/g,"&apos;")}function cn(e){return`<string>${_a(e)}</string>`}function Nr(){let e=process.argv[1]?J.realpathSync(process.argv[1]):"";if(!e||!J.existsSync(e))throw new Error("Could not resolve the current Mach CLI entrypoint.");return[process.execPath,e,"agent","run"]}function kr(){let e=wa(),t=process.platform==="win32"?[process.env.SystemRoot?U.join(process.env.SystemRoot,"System32"):void 0,process.env.SystemRoot]:["/opt/homebrew/bin","/usr/local/bin","/usr/bin","/bin","/usr/sbin","/sbin"],n={HOME:xe.homedir(),PATH:[process.env.PATH,...e.flatMap(i=>[U.join(i,"platform-tools"),U.join(i,"emulator"),U.join(i,"cmdline-tools","latest","bin"),U.join(i,"tools","bin")]),...t].filter(Boolean).join(U.delimiter)};for(let i of["ANDROID_HOME","ANDROID_SDK_ROOT","JAVA_HOME","SHELL"])process.env[i]&&(n[i]=process.env[i]);return n}function wa(){let e=[process.env.ANDROID_HOME,process.env.ANDROID_SDK_ROOT];if(process.platform==="darwin")e.push(U.join(xe.homedir(),"Library","Android","sdk"));else if(process.platform==="linux")e.push(U.join(xe.homedir(),"Android","Sdk"),U.join(xe.homedir(),"Android","sdk"),"/opt/android-sdk","/usr/lib/android-sdk");else if(process.platform==="win32"){let t=process.env.LOCALAPPDATA,n=process.env.USERPROFILE||xe.homedir();e.push(t?U.join(t,"Android","Sdk"):void 0,U.join(n,"AppData","Local","Android","Sdk"))}return Array.from(new Set(e.filter(t=>!!t)))}function Sp(e){return process.platform==="win32"&&!e.toLowerCase().endsWith(".exe")?`${e}.exe`:e}function $a(e,t){let n=Sp(e);for(let i of wa()){let r=U.join(i,t,n);if(J.existsSync(r))return r}return n}function va(){return $a("adb","platform-tools")}function Ra(){return $a("emulator","emulator")}function Or(e){return`"${e.replace(/\\/g,"\\\\").replace(/"/g,'\\"').replace(/%/g,"%%")}"`}function bp(){if(process.platform!=="linux")throw new Error("Linux service install requires Linux.");J.mkdirSync(Le(),{recursive:!0}),J.mkdirSync(Ea(),{recursive:!0});let e=Nr(),t=kr(),n=Object.entries(t).map(([r,o])=>`Environment=${Or(`${r}=${o}`)}`).join(`
1944
1944
  `),i=`[Unit]
1945
1945
  Description=Mach local device agent
1946
1946
  After=default.target
1947
1947
 
1948
1948
  [Service]
1949
1949
  Type=simple
1950
- ExecStart=${e.map(vr).join(" ")}
1951
- WorkingDirectory=${vr(xe.homedir())}
1950
+ ExecStart=${e.map(Or).join(" ")}
1951
+ WorkingDirectory=${Or(xe.homedir())}
1952
1952
  ${n}
1953
1953
  Restart=on-failure
1954
1954
  RestartSec=5
@@ -1957,12 +1957,12 @@ StandardError=append:%h/${f.configDir}/agent.error.log
1957
1957
 
1958
1958
  [Install]
1959
1959
  WantedBy=default.target
1960
- `;return X.writeFileSync(Rr(),i),Rr()}function at(e,t={}){try{return lt("systemctl",["--user",...e],{stdio:t.ignoreError?"ignore":"pipe"}),!0}catch(n){if(t.ignoreError)return!1;throw n}}function bp(){if(process.platform!=="win32")throw new Error("Windows agent script requires Windows.");X.mkdirSync(Le(),{recursive:!0});let e=Cr(),[t,n,...i]=Dr(),r=U.join(Le(),"agent.log"),o=U.join(Le(),"agent.error.log"),s=Object.entries(e).map(([d,c])=>`set "${d}=${c}"`).join(`\r
1960
+ `;return J.writeFileSync(Dr(),i),Dr()}function lt(e,t={}){try{return dt("systemctl",["--user",...e],{stdio:t.ignoreError?"ignore":"pipe"}),!0}catch(n){if(t.ignoreError)return!1;throw n}}function Ip(){if(process.platform!=="win32")throw new Error("Windows agent script requires Windows.");J.mkdirSync(Le(),{recursive:!0});let e=kr(),[t,n,...i]=Nr(),r=U.join(Le(),"agent.log"),o=U.join(Le(),"agent.error.log"),s=Object.entries(e).map(([d,c])=>`set "${d}=${c}"`).join(`\r
1961
1961
  `),a=i.map(d=>`"${d.replace(/"/g,'\\"')}"`).join(" "),l=`@echo off\r
1962
1962
  ${s}\r
1963
1963
  cd /d "${xe.homedir()}"\r
1964
1964
  "${t}" "${n}" ${a} >> "${r}" 2>> "${o}"\r
1965
- `;return X.writeFileSync(Pr(),l),Pr()}function pn(e,t={}){try{return lt("schtasks.exe",e,{stdio:t.ignoreError?"ignore":"pipe"}),!0}catch(n){if(t.ignoreError)return!1;throw n}}function Ip(){if(process.platform!=="darwin")throw new Error("Background agent install currently supports macOS only.");X.mkdirSync(Le(),{recursive:!0}),X.mkdirSync(Sa(),{recursive:!0});let e=Dr(),t=Cr(),n=U.join(Le(),"agent.log"),i=U.join(Le(),"agent.error.log"),r=Object.entries(t).map(([a,l])=>` <key>${Ia(a)}</key>
1965
+ `;return J.writeFileSync(Cr(),l),Cr()}function pn(e,t={}){try{return dt("schtasks.exe",e,{stdio:t.ignoreError?"ignore":"pipe"}),!0}catch(n){if(t.ignoreError)return!1;throw n}}function Ep(){if(process.platform!=="darwin")throw new Error("Background agent install currently supports macOS only.");J.mkdirSync(Le(),{recursive:!0}),J.mkdirSync(Ia(),{recursive:!0});let e=Nr(),t=kr(),n=U.join(Le(),"agent.log"),i=U.join(Le(),"agent.error.log"),r=Object.entries(t).map(([a,l])=>` <key>${_a(a)}</key>
1966
1966
  ${cn(l)}`).join(`
1967
1967
  `),o=e.map(a=>` ${cn(a)}`).join(`
1968
1968
  `),s=`<?xml version="1.0" encoding="UTF-8"?>
@@ -1987,21 +1987,21 @@ ${r}
1987
1987
  ${cn(i)}
1988
1988
  </dict>
1989
1989
  </plist>
1990
- `;return X.writeFileSync(ri(),s),ri()}function st(e,t={}){try{return lt("launchctl",e,{stdio:t.ignoreError?"ignore":"pipe"}),!0}catch(n){if(t.ignoreError)return!1;throw n}}function Ep(e){return new Promise(t=>setTimeout(t,e))}function oi(e,t,n=hp){return new Promise((i,r)=>{mp(e,t,{timeout:n,maxBuffer:10*1024*1024,windowsHide:!0},(o,s,a)=>{if(o){let l=a?.toString().trim();r(new Error(l||o.message));return}i(s?.toString()||"")})})}async function va(){if(typeof fetch=="function"){let e=new AbortController,t=setTimeout(()=>e.abort(),3e3);try{return(await fetch(`${un}/health`,{signal:e.signal})).ok}catch{return!1}finally{clearTimeout(t)}}return new Promise(e=>{let t=!1,n=r=>{t||(t=!0,e(r))},i=si.get(`${un}/health`,r=>{r.resume(),n(r.statusCode===200)});i.setTimeout(3e3,()=>{i.destroy(),n(!1)}),i.on("error",()=>n(!1))})}async function _p(e=8e3){let t=Date.now()+e;for(;Date.now()<t;){if(await va())return!0;await Ep(250)}return!1}async function Ra(){return new Promise(e=>{let t=!1,n=Aa.createConnection({host:"127.0.0.1",port:Xe}),i=r=>{t||(t=!0,n.destroy(),e(r))};n.setTimeout(1e3),n.once("connect",()=>i(!0)),n.once("timeout",()=>i(!1)),n.once("error",()=>i(!1))})}async function Tr(){if(await _p()){F.success(ne.green("Mach agent installed and started."));return}if(await Ra()){F.warn(`Mach agent service is installed, but port ${Xe} is held by a process that is not answering /health.`),F.info(ne.dim(`Run \`${f.nameLower} agent stop\`, close any foreground \`${f.nameLower} agent\` terminal, then run \`${f.nameLower} agent install\` again.`));return}F.warn(`Mach agent service is installed, but it did not start listening on ${un}.`)}async function wp(){let e=Ip(),t=Or();st(["bootout",t,e],{ignoreError:!0}),st(["bootstrap",t,e],{ignoreError:!0})||st(["load","-w",e]),st(["enable",`${t}/${Tt}`],{ignoreError:!0}),st(["kickstart","-k",`${t}/${Tt}`],{ignoreError:!0}),await Tr(),F.info(ne.dim(`It will start automatically when you log in. Plist: ${e}`)),F.info(ne.dim(`Logs: ${U.join(Le(),"agent.log")}`))}async function Pa(){let e=ri(),t=Or();st(["bootout",t,e],{ignoreError:!0})||st(["unload","-w",e],{ignoreError:!0})?F.success(ne.green("Mach agent service stopped.")):F.warn("Mach agent service was not loaded.")}async function $p(){await Pa();let e=ri();X.existsSync(e)&&X.unlinkSync(e),F.success(ne.green("Mach agent service uninstalled."))}async function vp(){let e=Sp();at(["daemon-reload"]),at(["enable","--now",Nt]),await Tr(),F.info(ne.dim(`It will start automatically when you log in. Service: ${e}`)),F.info(ne.dim(`Logs: ${U.join(Le(),"agent.log")}`))}async function Rp(){at(["stop",Nt],{ignoreError:!0})?F.success(ne.green("Mach agent service stopped.")):F.warn("Mach agent service was not running.")}async function Pp(){at(["disable","--now",Nt],{ignoreError:!0}),at(["daemon-reload"],{ignoreError:!0});let e=Rr();X.existsSync(e)&&X.unlinkSync(e),at(["daemon-reload"],{ignoreError:!0}),F.success(ne.green("Mach agent service uninstalled."))}async function Op(){let e=bp();pn(["/Create","/TN",Ct,"/SC","ONLOGON","/TR",`"${e}"`,"/RL","LIMITED","/F"]),pn(["/Run","/TN",Ct],{ignoreError:!0}),await Tr(),F.info(ne.dim(`It will start automatically when you log in. Task: ${Ct}`)),F.info(ne.dim(`Logs: ${U.join(Le(),"agent.log")}`))}async function Oa(){pn(["/End","/TN",Ct],{ignoreError:!0})?F.success(ne.green("Mach agent task stopped.")):F.warn("Mach agent task was not running.")}async function Dp(){await Oa(),pn(["/Delete","/TN",Ct,"/F"],{ignoreError:!0});let e=Pr();X.existsSync(e)&&X.unlinkSync(e),F.success(ne.green("Mach agent task uninstalled."))}async function fa(){if(process.platform==="darwin")return wp();if(process.platform==="linux")return vp();if(process.platform==="win32")return Op();throw new Error(`Background agent install is not supported on ${process.platform}.`)}async function ma(){if(process.platform==="darwin")return Pa();if(process.platform==="linux")return Rp();if(process.platform==="win32")return Oa();F.warn(`Background agent service control is not supported on ${process.platform}.`)}async function Cp(){if(process.platform==="darwin")return $p();if(process.platform==="linux")return Pp();if(process.platform==="win32")return Dp();F.warn(`Background agent uninstall is not supported on ${process.platform}.`)}async function Tp(){let e=await va(),t=e?!0:await Ra();if(e?F.success(ne.green(`Mach agent is online at ${un}`)):t?F.warn(`Mach agent port is open, but /health did not respond. Run \`${f.nameLower} agent restart\` if the dashboard still shows offline.`):F.warn(`Mach agent is not responding at ${un}`),process.platform==="darwin"){let n=st(["print",`${Or()}/${Tt}`],{ignoreError:!0});F.info(ne.dim(`Login service: ${n?"installed/loaded":"not loaded"}`))}else if(process.platform==="linux"){let n=at(["is-enabled",Nt],{ignoreError:!0}),i=at(["is-active",Nt],{ignoreError:!0});F.info(ne.dim(`Login service: ${n?"enabled":"not enabled"} / ${i?"active":"inactive"}`))}else if(process.platform==="win32"){let n=pn(["/Query","/TN",Ct],{ignoreError:!0});F.info(ne.dim(`Login task: ${n?"installed":"not installed"}`))}}async function Np(){let e=[];try{(await oi(wa(),["devices","-l"])).split(`
1991
- `).forEach(n=>{if(n.includes("List of devices")||!n.trim())return;let i=n.split(/\s+/);if(i.length<2||i[1]!=="device")return;let r=i[0],o=n.match(/model:([^\s]+)/);e.push({id:r,platform:"android",type:r.startsWith("emulator-")?"emulator":"physical",name:o?o[1].replace(/_/g," "):r,status:"online",details:n.trim()})})}catch{}try{let n=(await oi($a(),["-list-avds"])).split(`
1992
- `).filter(r=>!!r.trim()),i=e.some(r=>r.platform==="android"&&r.id.startsWith("emulator-"));n.forEach(r=>{i||e.push({id:r,platform:"android",type:"emulator",name:r.replace(/_/g," "),status:"offline",details:`Android Virtual Device: ${r}`})})}catch{}return e}async function Da(){if(process.platform!=="darwin")return[];try{let e=await oi("/usr/bin/xcrun",["simctl","list","devices","--json"]),t=JSON.parse(e),n=[];return Object.entries(t.devices||{}).forEach(([i,r])=>{r.forEach(o=>{o.isAvailable&&n.push({id:o.udid,platform:"ios",type:"simulator",name:o.name,status:o.state?.toLowerCase()==="booted"?"online":"offline",runtime:i,details:`${o.name} (${i})`})})}),n}catch{return[]}}async function kp(){if(process.platform!=="darwin")return[];try{let e=await oi("/usr/bin/xcrun",["devicectl","list","devices","--json-output","-"]);return(JSON.parse(e).result?.devices||[]).filter(n=>{let i=n.connectionProperties?.transportType;return i==="wired"||i==="localNetwork"}).map(n=>{let i=n.connectionProperties?.transportType,r=n.deviceProperties?.name||"iPhone";return{id:n.identifier,platform:"ios",type:"physical",name:r,status:"online",details:`${r} (${n.model?.name||n.hardwareModel||""}) - ${i}`}})}catch{return[]}}async function xp(e){let t=await Da(),n=t.find(r=>r.id===e);if(n)return n;let i=t.filter(r=>r.status==="online");return i.length===1?i[0]:null}async function Lp(){let[e,t,n]=await Promise.all([Np(),Da(),kp()]);return[...e,...t,...n]}async function Mp(){let e=Date.now();return ti&&e-ti.updatedAt<yp?ti.targets:(ni||(ni=Lp().then(t=>(ti={targets:t,updatedAt:Date.now()},t)).finally(()=>{ni=null})),ni)}async function ga(e){let t=[];for await(let n of e)t.push(Buffer.isBuffer(n)?n:Buffer.from(n));return t.length===0?{}:JSON.parse(Buffer.concat(t).toString("utf-8"))}async function Up(e,t){let n=await gp({method:"GET",url:e,responseType:"stream",timeout:12e4}),i=X.createWriteStream(t);n.data.pipe(i),await new Promise((r,o)=>{i.on("finish",r),i.on("error",o)})}function ha(e,t){let n=e?.stderr?.toString?.().trim();if(n)return n;let i=e?.stdout?.toString?.().trim();return i||e?.message||t}function Fp(e,t){return lt("/usr/libexec/PlistBuddy",["-c",`Print :${t}`,e],{encoding:"utf-8"}).trim()}function Bp(e){let t=U.join(e,"Info.plist");if(!X.existsSync(t))throw new Error(`Could not validate iOS app executable: ${t} not found.`);let n=Fp(t,"CFBundleExecutable"),i=U.join(e,n);if(!X.existsSync(i))throw new Error(`Could not validate iOS app executable: ${i} not found.`);return i}function jp(){return process.arch==="arm64"?"arm64":"x86_64"}function Hp(e){return X.existsSync(e)?X.readdirSync(e).map(t=>U.join(e,t)).filter(t=>t.endsWith(".app")&&X.statSync(t).isDirectory()):[]}function ya(e,t){let n=Hp(e);if(n.length===1)return n[0];if(n.length>1)throw new Error(`Multiple .app bundles found in ${t}: ${n.map(i=>U.basename(i)).join(", ")}. Mach cannot safely choose which app to install.`);return""}function Gp(e){let t=Bp(e),n=jp(),i="",r="";try{i=lt("lipo",["-info",t],{encoding:"utf-8"}).trim()}catch(o){throw new Error(`Could not inspect iOS simulator app architecture for ${U.basename(e)}: ${o.message}`)}if(!new RegExp(`\\b${n}\\b`).test(i))throw new Error(`This iOS simulator artifact cannot be installed because ${U.basename(e)} does not include the ${n} simulator architecture. lipo output: ${i}. Rebuild the app with the latest Mach CLI and make sure the profile is a simulator build.`);try{r=lt("/usr/bin/xcrun",["vtool","-show-build",t],{encoding:"utf-8"}).trim()}catch(o){throw new Error(`Could not inspect iOS simulator app platform for ${U.basename(e)}: ${o.message}`)}if(!/\bplatform\s+IOSSIMULATOR\b/i.test(r))throw new Error(`This iOS simulator artifact cannot be installed because ${U.basename(e)} was built for the wrong Apple platform. A simulator artifact must contain platform IOSSIMULATOR. vtool output: ${r}. Rebuild the app with the latest Mach CLI.`)}async function Vp(e,t,n){let i=n||(t.toLowerCase().includes(".apk")?"android":"ios"),r=t.toLowerCase().includes(".ipa"),o=X.mkdtempSync(U.join(xe.tmpdir(),`${Xe}-install-`)),s=U.join(o,i==="android"?"install.apk":r?"install.ipa":"install.zip");try{if(await Up(t,s),i==="android"){lt(wa(),["-s",e,"install","-r",s],{stdio:"pipe"});return}if(process.platform!=="darwin")throw new Error("iOS local install requires macOS.");ii(`unzip -o ${JSON.stringify(s)} -d ${JSON.stringify(o)}`,{stdio:"pipe"});let a=U.join(o,"Payload"),l=X.existsSync(a),d=r||l,c="";if(d?c=ya(a,"Payload"):c=ya(o,"the simulator artifact"),!c)throw new Error(`No .app bundle found inside the ${r?"IPA":"archive"}.`);let u=d?null:await xp(e);if(u){try{Gp(c),lt("/usr/bin/xcrun",["simctl","install",u.id,c],{stdio:"pipe"})}catch(p){throw new Error(ha(p,"iOS Simulator install failed."))}return}if(!d)throw new Error("Selected iOS Simulator was not found. Refresh Install Hub devices or boot one simulator and try again.");try{ii(`/usr/bin/xcrun devicectl device install app --device ${JSON.stringify(e)} ${JSON.stringify(c)}`,{stdio:"pipe"})}catch(p){throw new Error(ha(p,"iOS device install failed."))}}finally{X.rmSync(o,{recursive:!0,force:!0})}}function zp(e,t){if(!e)throw new Error("Device id is required.");if(t==="ios"){if(process.platform!=="darwin")throw new Error("iOS Simulator launch requires macOS.");return ii(`/usr/bin/xcrun simctl boot ${JSON.stringify(e)}`,{stdio:"pipe"}),pa("open",["-a","Simulator"],{detached:!0,stdio:"ignore"}).unref(),"Simulator booting..."}if(t==="android")return pa($a(),["-avd",e],{detached:!0,stdio:"ignore",windowsHide:!0}).unref(),"Emulator booting in background...";throw new Error("Invalid platform.")}async function Kp(){process.platform!=="darwin"&&F.warn("Running on non-macOS \u2014 iOS discovery unavailable, Android only.");let e=si.createServer((i,r)=>{if(r.setHeader("Access-Control-Allow-Origin","*"),r.setHeader("Access-Control-Allow-Methods","GET, POST, OPTIONS"),r.setHeader("Access-Control-Allow-Headers","Content-Type, Authorization"),i.method==="OPTIONS"){r.writeHead(204),r.end();return}let o=new URL(i.url||"/",`http://localhost:${Xe}`);if(i.method==="GET"&&o.pathname==="/local/devices"){Mp().then(s=>{r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",targets:s}))}).catch(s=>{r.writeHead(500,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:s.message}))});return}if(i.method==="GET"&&o.pathname==="/health"){r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",service:"mach-agent",port:Xe,platform:process.platform}));return}if(i.method==="POST"&&o.pathname==="/install-local"){t(i,r);return}if(i.method==="POST"&&o.pathname==="/local/boot"){n(i,r);return}r.writeHead(404),r.end()}),t=async(i,r)=>{try{let{deviceId:o,artifactUrl:s,platform:a}=await ga(i);if(!o||!s){r.writeHead(400,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:"deviceId and artifactUrl are required"}));return}await Vp(o,s,a),r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",message:`Installed on ${o}`}))}catch(o){r.writeHead(500,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:o.message||"Local install failed"}))}},n=async(i,r)=>{try{let{id:o,platform:s}=await ga(i),a=zp(o,s);r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",message:a}))}catch(o){r.writeHead(500,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:o.message||"Local device launch failed"}))}};e.listen(Xe,"127.0.0.1",()=>{F.success(ne.green(`Local device agent running on http://localhost:${Xe}`)),F.info(ne.dim("Keep this running while using the Install Hub on the dashboard.")),F.info(ne.dim("Press Ctrl+C to stop."))}),e.on("error",i=>{i.code==="EADDRINUSE"?F.error(`Port ${Xe} is already in use \u2014 agent may already be running.`):F.error(`Agent error: ${i.message}`),process.exit(1)}),await new Promise(()=>{})}async function Ca(e="start"){let t=String(e||"start").toLowerCase();if(t==="start"||t==="run"){await Kp();return}if(t==="install"){await fa();return}if(t==="status"){await Tp();return}if(t==="stop"){await ma();return}if(t==="uninstall"){await Cp();return}if(t==="restart"){await ma(),await fa();return}F.error(`Unknown agent action: ${e}`),F.info(ne.dim(`Use: ${f.nameLower} agent start | install | status | restart | stop | uninstall`)),process.exit(1)}import{text as Yp,password as qp,spinner as Jp,isCancel as ka}from"@clack/prompts";import Lr from"chalk";import fn from"fs";import Ta from"path";import Wp from"os";var Nr=Ta.join(Wp.homedir(),f.configDir),kr=Ta.join(Nr,"config.json");function xr(){if(!fn.existsSync(kr))return{};try{return JSON.parse(fn.readFileSync(kr,"utf-8"))}catch{return{}}}function Na(e){fn.existsSync(Nr)||fn.mkdirSync(Nr,{recursive:!0});let n={...xr(),...e};fn.writeFileSync(kr,JSON.stringify(n,null,2))}async function xa(){let e=xr(),t=await Yp({message:"Enter your email:",placeholder:"user@example.com",initialValue:e.lastLoginEmail,validate(r){if(r.length===0)return"Email is required!"}});if(ka(t))return;let n=await qp({message:"Enter your password:",validate(r){if(r.length===0)return"Password is required!"}});if(ka(n))return;let i=Jp();i.start("Authenticating...");try{let o=await(await fetch(`${tt}/login`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({username:t,password:n})})).json();o.status==="success"&&o.user.token?(fo({id:o.user.id,email:t,token:o.user.token,refreshToken:o.user.refreshToken}),Na({lastLoginEmail:t}),i.stop(Lr.green("Login successful!"))):i.stop(Lr.red("Login failed: "+(o.message||"Unknown error")))}catch(r){i.stop(Lr.red("Network error: "+r.message))}}import{log as ai,outro as Xp}from"@clack/prompts";import mn from"chalk";async function La(){let e=mo(),t=`${f.envPrefix}TOKEN`;e?ai.success(mn.green(`Logged out. Removed saved credentials from ~/${f.configDir}/credentials.json.`)):ai.warn(mn.yellow(`No saved ${f.name} credentials found.`)),process.env[t]&&(ai.warn(mn.yellow(`${t} is still set in this shell. Commands will continue to authenticate with that token until you unset it.`)),ai.info(mn.dim(`Run: unset ${t}`))),Xp(mn.blue("---"))}import{outro as Zp,select as Qp,spinner as ef,isCancel as tf}from"@clack/prompts";import li from"chalk";import Mr from"fs";import nf from"path";var Ma=e=>e==="1234567890"||e==="ABC123DEFG"||e==="XXXXXXXXXX"?"":typeof e=="string"?e:"",rf=()=>process.versions.node.split(".")[0]||"24";async function Ua(){if(!Ae()){console.log(li.red(`You are not logged in. Run \`${f.nameLower} login\` first.`));return}let t=ef();t.start("Fetching projects...");try{let{data:n}=await w.get("/projects");if(t.stop("Projects loaded."),n.status!=="success"||!n.projects||n.projects.length===0){console.log(li.yellow(`No projects found. Run \`${f.nameLower} init\` to create one.`));return}let i=n.projects.map(h=>({value:h.projectId,label:`${h.name} (${h.slug})`})),r=await Qp({message:"Select a project to link:",options:i});if(tf(r))return;let o=nf.join(process.cwd(),f.configFileName),s={};if(Mr.existsSync(o))try{s=JSON.parse(Mr.readFileSync(o,"utf-8"))}catch{}let a=n.projects.find(h=>h.projectId===r),l=s.android?.package||$t("android"),d=s.ios?.bundleIdentifier||$t("ios"),c=s.android||{},u=s.submit?.production?.android||{},p=s.submit?.production?.ios||{},m={projectId:r,framework:ve(s.framework)||Ln,...s.appDirectory?{appDirectory:s.appDirectory}:{},name:a?.name,slug:a?.slug,nodeVersion:s.nodeVersion||rf(),scheme:a?.slug?.toLowerCase()||"app",android:{...c,package:l||"",versionCode:c.versionCode||"auto"},ios:{bundleIdentifier:d||"",buildNumber:s.ios?.buildNumber||"auto"},build:{development:{environment:"development",distribution:"development"},staging:{environment:"staging",distribution:"internal"},production:{environment:"production",distribution:"store"}},submit:{production:{android:{...u,track:u.track||"internal",releaseStatus:u.releaseStatus||"completed"},ios:{ascAppId:Ma(p.ascAppId),appleTeamId:Ma(p.appleTeamId)}}}};Mr.writeFileSync(o,JSON.stringify(m,null,2)),Zp(li.green(`Linked to project ${m.name} (${m.slug})`))}catch(n){t.stop(li.red("Error fetching projects: "+n.message))}}import{outro as of,text as gn,select as sf,spinner as af,isCancel as kt}from"@clack/prompts";import hn from"chalk";import lf from"fs";import df from"path";import{randomUUID as cf}from"crypto";var uf=()=>process.versions.node.split(".")[0]||"24";async function Fa(){if(!Ae()){console.log(hn.red(`You are not logged in. Run \`${f.nameLower} login\` first.`));return}let t=await gn({message:"Project Name:",placeholder:"My Awesome App",validate(c){if(c.length===0)return"Name is required!"}});if(kt(t))return;let n=await gn({message:"Project Slug (URL friendly):",placeholder:"my-awesome-app",validate(c){if(c.length===0)return"Slug is required!";if(!/^[a-z0-9-]+$/.test(c))return"Slug must be lowercase alphanumeric with dashes."}});if(kt(n))return;let i=Io(process.cwd()),r=await gn({message:"App Directory (relative to this project root):",initialValue:i||void 0,placeholder:".",validate(c){if(c.length===0)return"App directory is required!";try{Wt(process.cwd(),c,{requireAppDirectory:!0})}catch(u){return u.message}}});if(kt(r))return;let o=Eo(process.cwd(),r),s=await sf({message:"Platform:",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"},{value:"web",label:"Web"},{value:"all",label:"All Platforms"}]});if(kt(s))return;let a="";if(s==="android"||s==="all"){let c=$t("android",r);if(a=await gn({message:"Android Package Name:",initialValue:c||"",placeholder:"com.example.app",validate(u){if(u.length===0)return"Package name is required for Android!"}}),kt(a))return}let l="";if(s==="ios"||s==="all"){let c=$t("ios",r);if(l=await gn({message:"iOS Bundle Identifier:",initialValue:c||"",placeholder:"com.example.app",validate(u){if(u.length===0)return"Bundle ID is required for iOS!"}}),kt(l))return}let d=af();d.start("Creating project...");try{let c=cf(),p={projectId:c,name:t,slug:n,storageType:"managed",platforms:s==="all"?["android","ios","web"]:[s]},{data:m}=await w.post("/projects",p);if(m.status==="success"){d.stop(hn.green("Project created successfully!"));let h=df.join(process.cwd(),f.configFileName);lf.writeFileSync(h,JSON.stringify({projectId:c,framework:o,appDirectory:r,name:t,slug:n,nodeVersion:uf(),...a?{android:{package:a,versionCode:"auto"}}:{},...l?{ios:{bundleIdentifier:l,buildNumber:"auto"}}:{},build:{development:{environment:"development",distribution:"development"},staging:{environment:"staging",distribution:"internal"},production:{environment:"production",distribution:"store"}},submit:{production:{android:{track:"internal",releaseStatus:"completed"},ios:{ascAppId:"",appleTeamId:""}}}},null,2)),of(hn.green(`Initialized project ${t} and linked locally!`))}else d.stop(hn.red("creation failed: "+m.message))}catch(c){d.stop(hn.red("Network error: "+c.message))}}import{spinner as Ur,log as be}from"@clack/prompts";import yn from"chalk";import di from"fs";import Ba from"path";function Fr(e,t,n,i){let r=e?.response?.status,o=e?.response?.data?.message||e?.response?.data?.error,s=i?` ${i}`:"";return r===401?`Not logged in or token expired while trying to ${n}${s}. Run \`${f.nameLower} login\` and try again.`:r===403?[`Permission denied while trying to ${n}${s}.`,o?`API says: ${o}.`:void 0,`Current Mach account/token does not have access to project ${t}.`,`Run \`${f.nameLower} login\` with the correct account, or ask a project owner to grant access.`].filter(Boolean).join(" "):r===404?[`Project or environment endpoint was not found while trying to ${n}${s}.`,`Project ID: ${t}.`,o?`API says: ${o}.`:void 0].filter(Boolean).join(" "):r?`Failed to ${n}${s}: ${o||`API returned HTTP ${r}`}`:`Network error while trying to ${n}${s}: ${e?.message||"Unknown error"}`}function pf(e){let t=String(e??"");return t===""?'""':/^[A-Za-z0-9_./:@%+-]+$/.test(t)?t:JSON.stringify(t)}function ff(e,t){return`${[`# Generated by ${f.nameLower} env pull --environment ${t}`,"# Do not commit this file.","",...Object.keys(e).sort((i,r)=>i.localeCompare(r)).map(i=>`${i}=${pf(e[i])}`)].join(`
1990
+ `;return J.writeFileSync(ri(),s),ri()}function at(e,t={}){try{return dt("launchctl",e,{stdio:t.ignoreError?"ignore":"pipe"}),!0}catch(n){if(t.ignoreError)return!1;throw n}}function _p(e){return new Promise(t=>setTimeout(t,e))}function oi(e,t,n=yp){return new Promise((i,r)=>{gp(e,t,{timeout:n,maxBuffer:10*1024*1024,windowsHide:!0},(o,s,a)=>{if(o){let l=a?.toString().trim();r(new Error(l||o.message));return}i(s?.toString()||"")})})}async function Pa(){if(typeof fetch=="function"){let e=new AbortController,t=setTimeout(()=>e.abort(),3e3);try{return(await fetch(`${un}/health`,{signal:e.signal})).ok}catch{return!1}finally{clearTimeout(t)}}return new Promise(e=>{let t=!1,n=r=>{t||(t=!0,e(r))},i=si.get(`${un}/health`,r=>{r.resume(),n(r.statusCode===200)});i.setTimeout(3e3,()=>{i.destroy(),n(!1)}),i.on("error",()=>n(!1))})}async function wp(e=8e3){let t=Date.now()+e;for(;Date.now()<t;){if(await Pa())return!0;await _p(250)}return!1}async function Oa(){return new Promise(e=>{let t=!1,n=ba.createConnection({host:"127.0.0.1",port:Xe}),i=r=>{t||(t=!0,n.destroy(),e(r))};n.setTimeout(1e3),n.once("connect",()=>i(!0)),n.once("timeout",()=>i(!1)),n.once("error",()=>i(!1))})}async function xr(){if(await wp()){F.success(ne.green("Mach agent installed and started."));return}if(await Oa()){F.warn(`Mach agent service is installed, but port ${Xe} is held by a process that is not answering /health.`),F.info(ne.dim(`Run \`${f.nameLower} agent stop\`, close any foreground \`${f.nameLower} agent\` terminal, then run \`${f.nameLower} agent install\` again.`));return}F.warn(`Mach agent service is installed, but it did not start listening on ${un}.`)}async function $p(){let e=Ep(),t=Tr();at(["bootout",t,e],{ignoreError:!0}),at(["bootstrap",t,e],{ignoreError:!0})||at(["load","-w",e]),at(["enable",`${t}/${Tt}`],{ignoreError:!0}),at(["kickstart","-k",`${t}/${Tt}`],{ignoreError:!0}),await xr(),F.info(ne.dim(`It will start automatically when you log in. Plist: ${e}`)),F.info(ne.dim(`Logs: ${U.join(Le(),"agent.log")}`))}async function Da(){let e=ri(),t=Tr();at(["bootout",t,e],{ignoreError:!0})||at(["unload","-w",e],{ignoreError:!0})?F.success(ne.green("Mach agent service stopped.")):F.warn("Mach agent service was not loaded.")}async function vp(){await Da();let e=ri();J.existsSync(e)&&J.unlinkSync(e),F.success(ne.green("Mach agent service uninstalled."))}async function Rp(){let e=bp();lt(["daemon-reload"]),lt(["enable","--now",Nt]),await xr(),F.info(ne.dim(`It will start automatically when you log in. Service: ${e}`)),F.info(ne.dim(`Logs: ${U.join(Le(),"agent.log")}`))}async function Pp(){lt(["stop",Nt],{ignoreError:!0})?F.success(ne.green("Mach agent service stopped.")):F.warn("Mach agent service was not running.")}async function Op(){lt(["disable","--now",Nt],{ignoreError:!0}),lt(["daemon-reload"],{ignoreError:!0});let e=Dr();J.existsSync(e)&&J.unlinkSync(e),lt(["daemon-reload"],{ignoreError:!0}),F.success(ne.green("Mach agent service uninstalled."))}async function Dp(){let e=Ip();pn(["/Create","/TN",Ct,"/SC","ONLOGON","/TR",`"${e}"`,"/RL","LIMITED","/F"]),pn(["/Run","/TN",Ct],{ignoreError:!0}),await xr(),F.info(ne.dim(`It will start automatically when you log in. Task: ${Ct}`)),F.info(ne.dim(`Logs: ${U.join(Le(),"agent.log")}`))}async function Ca(){pn(["/End","/TN",Ct],{ignoreError:!0})?F.success(ne.green("Mach agent task stopped.")):F.warn("Mach agent task was not running.")}async function Cp(){await Ca(),pn(["/Delete","/TN",Ct,"/F"],{ignoreError:!0});let e=Cr();J.existsSync(e)&&J.unlinkSync(e),F.success(ne.green("Mach agent task uninstalled."))}async function ga(){if(process.platform==="darwin")return $p();if(process.platform==="linux")return Rp();if(process.platform==="win32")return Dp();throw new Error(`Background agent install is not supported on ${process.platform}.`)}async function ha(){if(process.platform==="darwin")return Da();if(process.platform==="linux")return Pp();if(process.platform==="win32")return Ca();F.warn(`Background agent service control is not supported on ${process.platform}.`)}async function Tp(){if(process.platform==="darwin")return vp();if(process.platform==="linux")return Op();if(process.platform==="win32")return Cp();F.warn(`Background agent uninstall is not supported on ${process.platform}.`)}async function Np(){let e=await Pa(),t=e?!0:await Oa();if(e?F.success(ne.green(`Mach agent is online at ${un}`)):t?F.warn(`Mach agent port is open, but /health did not respond. Run \`${f.nameLower} agent restart\` if the dashboard still shows offline.`):F.warn(`Mach agent is not responding at ${un}`),process.platform==="darwin"){let n=at(["print",`${Tr()}/${Tt}`],{ignoreError:!0});F.info(ne.dim(`Login service: ${n?"installed/loaded":"not loaded"}`))}else if(process.platform==="linux"){let n=lt(["is-enabled",Nt],{ignoreError:!0}),i=lt(["is-active",Nt],{ignoreError:!0});F.info(ne.dim(`Login service: ${n?"enabled":"not enabled"} / ${i?"active":"inactive"}`))}else if(process.platform==="win32"){let n=pn(["/Query","/TN",Ct],{ignoreError:!0});F.info(ne.dim(`Login task: ${n?"installed":"not installed"}`))}}async function kp(){let e=[];try{(await oi(va(),["devices","-l"])).split(`
1991
+ `).forEach(n=>{if(n.includes("List of devices")||!n.trim())return;let i=n.split(/\s+/);if(i.length<2||i[1]!=="device")return;let r=i[0],o=n.match(/model:([^\s]+)/);e.push({id:r,platform:"android",type:r.startsWith("emulator-")?"emulator":"physical",name:o?o[1].replace(/_/g," "):r,status:"online",details:n.trim()})})}catch{}try{let n=(await oi(Ra(),["-list-avds"])).split(`
1992
+ `).filter(r=>!!r.trim()),i=e.some(r=>r.platform==="android"&&r.id.startsWith("emulator-"));n.forEach(r=>{i||e.push({id:r,platform:"android",type:"emulator",name:r.replace(/_/g," "),status:"offline",details:`Android Virtual Device: ${r}`})})}catch{}return e}async function Ta(){if(process.platform!=="darwin")return[];try{let e=await oi("/usr/bin/xcrun",["simctl","list","devices","--json"]),t=JSON.parse(e),n=[];return Object.entries(t.devices||{}).forEach(([i,r])=>{r.forEach(o=>{o.isAvailable&&n.push({id:o.udid,platform:"ios",type:"simulator",name:o.name,status:o.state?.toLowerCase()==="booted"?"online":"offline",runtime:i,details:`${o.name} (${i})`})})}),n}catch{return[]}}async function xp(){if(process.platform!=="darwin")return[];try{let e=await oi("/usr/bin/xcrun",["devicectl","list","devices","--json-output","-"]);return(JSON.parse(e).result?.devices||[]).filter(n=>{let i=n.connectionProperties?.transportType;return i==="wired"||i==="localNetwork"}).map(n=>{let i=n.connectionProperties?.transportType,r=n.deviceProperties?.name||"iPhone";return{id:n.identifier,platform:"ios",type:"physical",name:r,status:"online",details:`${r} (${n.model?.name||n.hardwareModel||""}) - ${i}`}})}catch{return[]}}async function Lp(e){let t=await Ta(),n=t.find(r=>r.id===e);if(n)return n;let i=t.filter(r=>r.status==="online");return i.length===1?i[0]:null}async function Mp(){let[e,t,n]=await Promise.all([kp(),Ta(),xp()]);return[...e,...t,...n]}async function Up(){let e=Date.now();return ti&&e-ti.updatedAt<Ap?ti.targets:(ni||(ni=Mp().then(t=>(ti={targets:t,updatedAt:Date.now()},t)).finally(()=>{ni=null})),ni)}async function ya(e){let t=[];for await(let n of e)t.push(Buffer.isBuffer(n)?n:Buffer.from(n));return t.length===0?{}:JSON.parse(Buffer.concat(t).toString("utf-8"))}async function Fp(e,t){let n=await hp({method:"GET",url:e,responseType:"stream",timeout:12e4}),i=J.createWriteStream(t);n.data.pipe(i),await new Promise((r,o)=>{i.on("finish",r),i.on("error",o)})}function Aa(e,t){let n=e?.stderr?.toString?.().trim();if(n)return n;let i=e?.stdout?.toString?.().trim();return i||e?.message||t}function Bp(e,t){return dt("/usr/libexec/PlistBuddy",["-c",`Print :${t}`,e],{encoding:"utf-8"}).trim()}function jp(e){let t=U.join(e,"Info.plist");if(!J.existsSync(t))throw new Error(`Could not validate iOS app executable: ${t} not found.`);let n=Bp(t,"CFBundleExecutable"),i=U.join(e,n);if(!J.existsSync(i))throw new Error(`Could not validate iOS app executable: ${i} not found.`);return i}function Hp(){return process.arch==="arm64"?"arm64":"x86_64"}function Gp(e){return J.existsSync(e)?J.readdirSync(e).map(t=>U.join(e,t)).filter(t=>t.endsWith(".app")&&J.statSync(t).isDirectory()):[]}function Sa(e,t){let n=Gp(e);if(n.length===1)return n[0];if(n.length>1)throw new Error(`Multiple .app bundles found in ${t}: ${n.map(i=>U.basename(i)).join(", ")}. Mach cannot safely choose which app to install.`);return""}function Vp(e){let t=jp(e),n=Hp(),i="",r="";try{i=dt("lipo",["-info",t],{encoding:"utf-8"}).trim()}catch(o){throw new Error(`Could not inspect iOS simulator app architecture for ${U.basename(e)}: ${o.message}`)}if(!new RegExp(`\\b${n}\\b`).test(i))throw new Error(`This iOS simulator artifact cannot be installed because ${U.basename(e)} does not include the ${n} simulator architecture. lipo output: ${i}. Rebuild the app with the latest Mach CLI and make sure the profile is a simulator build.`);try{r=dt("/usr/bin/xcrun",["vtool","-show-build",t],{encoding:"utf-8"}).trim()}catch(o){throw new Error(`Could not inspect iOS simulator app platform for ${U.basename(e)}: ${o.message}`)}if(!/\bplatform\s+IOSSIMULATOR\b/i.test(r))throw new Error(`This iOS simulator artifact cannot be installed because ${U.basename(e)} was built for the wrong Apple platform. A simulator artifact must contain platform IOSSIMULATOR. vtool output: ${r}. Rebuild the app with the latest Mach CLI.`)}async function zp(e,t,n){let i=n||(t.toLowerCase().includes(".apk")?"android":"ios"),r=t.toLowerCase().includes(".ipa"),o=J.mkdtempSync(U.join(xe.tmpdir(),`${Xe}-install-`)),s=U.join(o,i==="android"?"install.apk":r?"install.ipa":"install.zip");try{if(await Fp(t,s),i==="android"){dt(va(),["-s",e,"install","-r",s],{stdio:"pipe"});return}if(process.platform!=="darwin")throw new Error("iOS local install requires macOS.");ii(`unzip -o ${JSON.stringify(s)} -d ${JSON.stringify(o)}`,{stdio:"pipe"});let a=U.join(o,"Payload"),l=J.existsSync(a),d=r||l,c="";if(d?c=Sa(a,"Payload"):c=Sa(o,"the simulator artifact"),!c)throw new Error(`No .app bundle found inside the ${r?"IPA":"archive"}.`);let u=d?null:await Lp(e);if(u){try{Vp(c),dt("/usr/bin/xcrun",["simctl","install",u.id,c],{stdio:"pipe"})}catch(p){throw new Error(Aa(p,"iOS Simulator install failed."))}return}if(!d)throw new Error("Selected iOS Simulator was not found. Refresh Install Hub devices or boot one simulator and try again.");try{ii(`/usr/bin/xcrun devicectl device install app --device ${JSON.stringify(e)} ${JSON.stringify(c)}`,{stdio:"pipe"})}catch(p){throw new Error(Aa(p,"iOS device install failed."))}}finally{J.rmSync(o,{recursive:!0,force:!0})}}function Kp(e,t){if(!e)throw new Error("Device id is required.");if(t==="ios"){if(process.platform!=="darwin")throw new Error("iOS Simulator launch requires macOS.");return ii(`/usr/bin/xcrun simctl boot ${JSON.stringify(e)}`,{stdio:"pipe"}),ma("open",["-a","Simulator"],{detached:!0,stdio:"ignore"}).unref(),"Simulator booting..."}if(t==="android")return ma(Ra(),["-avd",e],{detached:!0,stdio:"ignore",windowsHide:!0}).unref(),"Emulator booting in background...";throw new Error("Invalid platform.")}async function Wp(){process.platform!=="darwin"&&F.warn("Running on non-macOS \u2014 iOS discovery unavailable, Android only.");let e=si.createServer((i,r)=>{if(r.setHeader("Access-Control-Allow-Origin","*"),r.setHeader("Access-Control-Allow-Methods","GET, POST, OPTIONS"),r.setHeader("Access-Control-Allow-Headers","Content-Type, Authorization"),i.method==="OPTIONS"){r.writeHead(204),r.end();return}let o=new URL(i.url||"/",`http://localhost:${Xe}`);if(i.method==="GET"&&o.pathname==="/local/devices"){Up().then(s=>{r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",targets:s}))}).catch(s=>{r.writeHead(500,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:s.message}))});return}if(i.method==="GET"&&o.pathname==="/health"){r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",service:"mach-agent",port:Xe,platform:process.platform}));return}if(i.method==="POST"&&o.pathname==="/install-local"){t(i,r);return}if(i.method==="POST"&&o.pathname==="/local/boot"){n(i,r);return}r.writeHead(404),r.end()}),t=async(i,r)=>{try{let{deviceId:o,artifactUrl:s,platform:a}=await ya(i);if(!o||!s){r.writeHead(400,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:"deviceId and artifactUrl are required"}));return}await zp(o,s,a),r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",message:`Installed on ${o}`}))}catch(o){r.writeHead(500,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:o.message||"Local install failed"}))}},n=async(i,r)=>{try{let{id:o,platform:s}=await ya(i),a=Kp(o,s);r.writeHead(200,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"success",message:a}))}catch(o){r.writeHead(500,{"Content-Type":"application/json"}),r.end(JSON.stringify({status:"error",message:o.message||"Local device launch failed"}))}};e.listen(Xe,"127.0.0.1",()=>{F.success(ne.green(`Local device agent running on http://localhost:${Xe}`)),F.info(ne.dim("Keep this running while using the Install Hub on the dashboard.")),F.info(ne.dim("Press Ctrl+C to stop."))}),e.on("error",i=>{i.code==="EADDRINUSE"?F.error(`Port ${Xe} is already in use \u2014 agent may already be running.`):F.error(`Agent error: ${i.message}`),process.exit(1)}),await new Promise(()=>{})}async function Na(e="start"){let t=String(e||"start").toLowerCase();if(t==="start"||t==="run"){await Wp();return}if(t==="install"){await ga();return}if(t==="status"){await Np();return}if(t==="stop"){await ha();return}if(t==="uninstall"){await Tp();return}if(t==="restart"){await ha(),await ga();return}F.error(`Unknown agent action: ${e}`),F.info(ne.dim(`Use: ${f.nameLower} agent start | install | status | restart | stop | uninstall`)),process.exit(1)}import{text as qp,password as Jp,spinner as Xp,isCancel as La}from"@clack/prompts";import Fr from"chalk";import fn from"fs";import ka from"path";import Yp from"os";var Lr=ka.join(Yp.homedir(),f.configDir),Mr=ka.join(Lr,"config.json");function Ur(){if(!fn.existsSync(Mr))return{};try{return JSON.parse(fn.readFileSync(Mr,"utf-8"))}catch{return{}}}function xa(e){fn.existsSync(Lr)||fn.mkdirSync(Lr,{recursive:!0});let n={...Ur(),...e};fn.writeFileSync(Mr,JSON.stringify(n,null,2))}async function Ma(){let e=Ur(),t=await qp({message:"Enter your email:",placeholder:"user@example.com",initialValue:e.lastLoginEmail,validate(r){if(r.length===0)return"Email is required!"}});if(La(t))return;let n=await Jp({message:"Enter your password:",validate(r){if(r.length===0)return"Password is required!"}});if(La(n))return;let i=Xp();i.start("Authenticating...");try{let o=await(await fetch(`${tt}/login`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({username:t,password:n})})).json();o.status==="success"&&o.user.token?(ho({id:o.user.id,email:t,token:o.user.token,refreshToken:o.user.refreshToken}),xa({lastLoginEmail:t}),i.stop(Fr.green("Login successful!"))):i.stop(Fr.red("Login failed: "+(o.message||"Unknown error")))}catch(r){i.stop(Fr.red("Network error: "+r.message))}}import{log as ai,outro as Zp}from"@clack/prompts";import mn from"chalk";async function Ua(){let e=yo(),t=`${f.envPrefix}TOKEN`;e?ai.success(mn.green(`Logged out. Removed saved credentials from ~/${f.configDir}/credentials.json.`)):ai.warn(mn.yellow(`No saved ${f.name} credentials found.`)),process.env[t]&&(ai.warn(mn.yellow(`${t} is still set in this shell. Commands will continue to authenticate with that token until you unset it.`)),ai.info(mn.dim(`Run: unset ${t}`))),Zp(mn.blue("---"))}import{outro as Qp,select as ef,spinner as tf,isCancel as nf}from"@clack/prompts";import li from"chalk";import Br from"fs";import rf from"path";var Fa=e=>e==="1234567890"||e==="ABC123DEFG"||e==="XXXXXXXXXX"?"":typeof e=="string"?e:"",of=()=>process.versions.node.split(".")[0]||"24";async function Ba(){if(!ye()){console.log(li.red(`You are not logged in. Run \`${f.nameLower} login\` first.`));return}let t=tf();t.start("Fetching projects...");try{let{data:n}=await w.get("/projects");if(t.stop("Projects loaded."),n.status!=="success"||!n.projects||n.projects.length===0){console.log(li.yellow(`No projects found. Run \`${f.nameLower} init\` to create one.`));return}let i=n.projects.map(h=>({value:h.projectId,label:`${h.name} (${h.slug})`})),r=await ef({message:"Select a project to link:",options:i});if(nf(r))return;let o=rf.join(process.cwd(),f.configFileName),s={};if(Br.existsSync(o))try{s=JSON.parse(Br.readFileSync(o,"utf-8"))}catch{}let a=n.projects.find(h=>h.projectId===r),l=s.android?.package||nt("android"),d=s.ios?.bundleIdentifier||nt("ios"),c=s.android||{},u=s.submit?.production?.android||{},p=s.submit?.production?.ios||{},m={projectId:r,framework:ve(s.framework)||Ln,...s.appDirectory?{appDirectory:s.appDirectory}:{},name:a?.name,slug:a?.slug,nodeVersion:s.nodeVersion||of(),scheme:a?.slug?.toLowerCase()||"app",android:{...c,package:l||"",versionCode:c.versionCode||"auto"},ios:{bundleIdentifier:d||"",buildNumber:s.ios?.buildNumber||"auto"},build:{development:{environment:"development",distribution:"development"},staging:{environment:"staging",distribution:"internal"},production:{environment:"production",distribution:"store"}},submit:{production:{android:{...u,track:u.track||"internal",releaseStatus:u.releaseStatus||"completed"},ios:{ascAppId:Fa(p.ascAppId),appleTeamId:Fa(p.appleTeamId)}}}};Br.writeFileSync(o,JSON.stringify(m,null,2)),Qp(li.green(`Linked to project ${m.name} (${m.slug})`))}catch(n){t.stop(li.red("Error fetching projects: "+n.message))}}import{outro as sf,text as gn,select as af,spinner as lf,isCancel as kt}from"@clack/prompts";import hn from"chalk";import df from"fs";import cf from"path";import{randomUUID as uf}from"crypto";var pf=()=>process.versions.node.split(".")[0]||"24";async function ja(){if(!ye()){console.log(hn.red(`You are not logged in. Run \`${f.nameLower} login\` first.`));return}let t=await gn({message:"Project Name:",placeholder:"My Awesome App",validate(c){if(c.length===0)return"Name is required!"}});if(kt(t))return;let n=await gn({message:"Project Slug (URL friendly):",placeholder:"my-awesome-app",validate(c){if(c.length===0)return"Slug is required!";if(!/^[a-z0-9-]+$/.test(c))return"Slug must be lowercase alphanumeric with dashes."}});if(kt(n))return;let i=wo(process.cwd()),r=await gn({message:"App Directory (relative to this project root):",initialValue:i||void 0,placeholder:".",validate(c){if(c.length===0)return"App directory is required!";try{Wt(process.cwd(),c,{requireAppDirectory:!0})}catch(u){return u.message}}});if(kt(r))return;let o=$o(process.cwd(),r),s=await af({message:"Platform:",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"},{value:"web",label:"Web"},{value:"all",label:"All Platforms"}]});if(kt(s))return;let a="";if(s==="android"||s==="all"){let c=nt("android",r);if(a=await gn({message:"Android Package Name:",initialValue:c||"",placeholder:"com.example.app",validate(u){if(u.length===0)return"Package name is required for Android!"}}),kt(a))return}let l="";if(s==="ios"||s==="all"){let c=nt("ios",r);if(l=await gn({message:"iOS Bundle Identifier:",initialValue:c||"",placeholder:"com.example.app",validate(u){if(u.length===0)return"Bundle ID is required for iOS!"}}),kt(l))return}let d=lf();d.start("Creating project...");try{let c=uf(),p={projectId:c,name:t,slug:n,storageType:"managed",platforms:s==="all"?["android","ios","web"]:[s]},{data:m}=await w.post("/projects",p);if(m.status==="success"){d.stop(hn.green("Project created successfully!"));let h=cf.join(process.cwd(),f.configFileName);df.writeFileSync(h,JSON.stringify({projectId:c,framework:o,appDirectory:r,name:t,slug:n,nodeVersion:pf(),...a?{android:{package:a,versionCode:"auto"}}:{},...l?{ios:{bundleIdentifier:l,buildNumber:"auto"}}:{},build:{development:{environment:"development",distribution:"development"},staging:{environment:"staging",distribution:"internal"},production:{environment:"production",distribution:"store"}},submit:{production:{android:{track:"internal",releaseStatus:"completed"},ios:{ascAppId:"",appleTeamId:""}}}},null,2)),sf(hn.green(`Initialized project ${t} and linked locally!`))}else d.stop(hn.red("creation failed: "+m.message))}catch(c){d.stop(hn.red("Network error: "+c.message))}}import{spinner as jr,log as be}from"@clack/prompts";import yn from"chalk";import di from"fs";import Ha from"path";function Hr(e,t,n,i){let r=e?.response?.status,o=e?.response?.data?.message||e?.response?.data?.error,s=i?` ${i}`:"";return r===401?`Not logged in or token expired while trying to ${n}${s}. Run \`${f.nameLower} login\` and try again.`:r===403?[`Permission denied while trying to ${n}${s}.`,o?`API says: ${o}.`:void 0,`Current Mach account/token does not have access to project ${t}.`,`Run \`${f.nameLower} login\` with the correct account, or ask a project owner to grant access.`].filter(Boolean).join(" "):r===404?[`Project or environment endpoint was not found while trying to ${n}${s}.`,`Project ID: ${t}.`,o?`API says: ${o}.`:void 0].filter(Boolean).join(" "):r?`Failed to ${n}${s}: ${o||`API returned HTTP ${r}`}`:`Network error while trying to ${n}${s}: ${e?.message||"Unknown error"}`}function ff(e){let t=String(e??"");return t===""?'""':/^[A-Za-z0-9_./:@%+-]+$/.test(t)?t:JSON.stringify(t)}function mf(e,t){return`${[`# Generated by ${f.nameLower} env pull --environment ${t}`,"# Do not commit this file.","",...Object.keys(e).sort((i,r)=>i.localeCompare(r)).map(i=>`${i}=${ff(e[i])}`)].join(`
1993
1993
  `)}
1994
- `}async function ja(e,t,n={}){let i=Ae();if(!i){be.error(`You are not logged in. Run \`${f.nameLower} login\` first.`);return}let r=Ba.join(process.cwd(),f.configFileName);if(!di.existsSync(r)){be.error(`No ${f.configFileName} found. Run \`${f.nameLower} init\` or \`${f.nameLower} link\` first.`);return}let o;try{o=JSON.parse(di.readFileSync(r,"utf-8"))}catch{be.error(`Failed to parse ${f.configFileName}`);return}let{projectId:s}=o;if(!s){be.error(`${f.configFileName} is missing projectId.`);return}e==="set"?await mf(s,t,i):e==="list"?await gf(s,i):e==="pull"||e==="download"||e==="export"?await hf(s,n):be.error(`Unknown env action: ${e}. Use 'set', 'list', or 'pull'.`)}async function mf(e,t,n){if(t.length===0){be.error(`Usage: ${f.nameLower} env set KEY=VALUE [KEY2=VALUE2 ...]`);return}let i=Ur();i.start("Setting environment variables...");let r=0,o=0;for(let s of t){let[a,...l]=s.split("="),d=l.join("=");if(!a||d===void 0){be.warn(`Invalid format for argument: ${s}. Expected KEY=VALUE.`),o++;continue}try{let c={key:a.trim(),value:d,type:"env",environment:"global",visibility:"secret"},{data:u}=await w.post(`/projects/${e}/secrets`,c);u.status==="success"?r++:(be.error(`Failed to set ${a}: ${u.message}`),o++)}catch(c){be.error(Fr(c,e,"set",a)),o++}}i.stop(`Set ${r} variable(s). ${o>0?`${o} failed.`:""}`)}async function gf(e,t){let n=Ur();n.start("Fetching environment variables...");try{let{data:i}=await w.get(`/projects/${e}/secrets`);if(i.status==="success"){n.stop("Fetched variables.");let r=i.secrets||[];r.length===0?be.info("No environment variables found for this project."):(be.info(yn.bold("Environment Variables (Global & Scoped):")),r.forEach(o=>{let s=o.visibility==="plain"?o.value:"********";console.log(` ${yn.cyan(o.key)} = ${s} ${yn.gray(`[${o.environment}]`)}`)}))}else n.stop(yn.red(`Failed to fetch variables: ${i.message}`))}catch(i){n.stop("Failed to fetch variables."),be.error(Fr(i,e,"list"))}}async function hf(e,t){let n=(t.environment||"development").trim(),i=t.out||".env.local",r=Ba.resolve(process.cwd(),i);if(di.existsSync(r)&&!t.overwrite){be.error(`${i} already exists. Re-run with \`--overwrite\` to replace it.`);return}let o=Ur();o.start(`Downloading ${n} environment variables...`);try{let{data:s}=await w.get(`/projects/${e}/secrets/export?env=${encodeURIComponent(n)}`);if(s.status!=="success"){o.stop(yn.red(`Failed to download variables: ${s.message||"Unknown API error"}`));return}let a=s.secrets||{},l=ff(a,n);di.writeFileSync(r,l,{encoding:"utf-8",mode:384}),o.stop(`Wrote ${Object.keys(a).length} variable(s) to ${i}.`)}catch(s){o.stop("Failed to download variables."),be.error(Fr(s,e,"pull"))}}import{cancel as yf,confirm as Qa,isCancel as pi,log as Re,note as Af,outro as xt,select as Sf,spinner as bf,text as If}from"@clack/prompts";import Me from"chalk";import V from"fs";import te from"path";import{spawnSync as el}from"child_process";import Hr from"crypto";import Ef from"axios";import Ga from"crypto";import An from"fs";import Sn from"path";var Ha=e=>String(e||"").replace(/\\/g,"/").replace(/^\/+/,"");function Va(e,t){let n=Sn.join(e,"metadata.json");if(!An.existsSync(n))throw new Error(`Expo export did not create ${n}.`);let r=JSON.parse(An.readFileSync(n,"utf-8"))?.fileMetadata?.[t],o=Ha(r?.bundle);if(!o)throw new Error(`Expo export metadata is missing the ${t} launch bundle.`);let s=new Set,a=(Array.isArray(r?.assets)?r.assets:[]).flatMap(l=>{let d=Ha(l?.path);return!d||s.has(d)?[]:(s.add(d),[{path:d,ext:String(l?.ext||"").replace(/^\./,"")||void 0}])});for(let l of[o,...a.map(d=>d.path)])if(!An.existsSync(Sn.join(e,l)))throw new Error(`Expo export metadata references a missing file: ${l}`);return{bundle:o,assets:a}}function za(e,t){return[Sn.join(e,t.bundle),...t.assets.map(n=>Sn.join(e,n.path)),Sn.join(e,"metadata.json")]}function Br(e){return Ga.createHash("md5").update(An.readFileSync(e)).digest("hex")}function jr(e){return Ga.createHash("sha256").update(An.readFileSync(e)).digest("base64url")}function Ka(e){let t=String(e||"").replace(/^\./,"").trim().toLowerCase();return t?`.${t}`:void 0}function ci(e,t=!1){if(t)return"application/javascript";switch(String(e||"").replace(/^\./,"").trim().toLowerCase()){case"js":case"bundle":case"hbc":return"application/javascript";case"json":return"application/json";case"png":return"image/png";case"jpg":case"jpeg":return"image/jpeg";case"gif":return"image/gif";case"webp":return"image/webp";case"svg":return"image/svg+xml";case"ttf":return"font/ttf";case"otf":return"font/otf";case"woff":return"font/woff";case"woff2":return"font/woff2";case"mp3":return"audio/mpeg";case"m4a":return"audio/mp4";case"aac":return"audio/aac";case"wav":return"audio/wav";case"mp4":return"video/mp4";case"mov":return"video/quicktime";case"pdf":return"application/pdf";default:return"application/octet-stream"}}function Wa(e){if(!e||typeof e!="object"||Array.isArray(e))return;let{_internal:t,hooks:n,mods:i,...r}=e;return r}var ce=`${f.npmScope}/mach/expo-plugin`,Gr=()=>process.stdin.isTTY&&process.stdout.isTTY,fi=()=>{yf("Operation cancelled."),process.exit(0)},Se=e=>{if(typeof e!="string")return;let t=e.trim();return t.length>0?t:void 0};function Lt(e){if(!V.existsSync(e))return null;try{return JSON.parse(V.readFileSync(e,"utf-8"))}catch{return null}}function tl(e,t){V.writeFileSync(e,`${JSON.stringify(t,null,2)}
1995
- `)}function bn(){let e=re();return e?.projectId||(Re.error(`No ${f.configFileName} found or missing projectId. Run \`${f.nameLower} link\` first.`),process.exit(1)),e}function _f(e){tl(te.join(process.cwd(),f.configFileName),e)}function Vr(e){let t=ve(e.framework);if(t)return t;let n=Lt(te.join(process.cwd(),"package.json"))||{},i={...n.dependencies||{},...n.devDependencies||{}};return i.expo?"expo":(i["react-native"],"react-native")}function zr(e,t){let n=String(e||"").trim().toLowerCase();return n==="expo"||n==="expo-updates"?"expo-updates":n==="react-native"||n==="mach-react-native"||n==="rn"?"mach-react-native":"expo-updates"}function nl(e){if(e==="mach-react-native")throw new Error("mach-react-native is reserved for a future Mach-native OTA client. Use expo-updates for Expo and bare React Native projects.");return e}function Kr(e){let t=String(e||"all").trim().toLowerCase();if(t==="ios")return["ios"];if(t==="android")return["android"];if(t==="all"||t==="both")return["ios","android"];throw new Error("Platform must be ios, android, or all.")}function wf(e){return V.existsSync(te.join(e,"pnpm-lock.yaml"))?{command:"pnpm",args:["add","-D",`${f.npmScope}/mach@latest`],label:`pnpm add -D ${f.npmScope}/mach@latest`}:V.existsSync(te.join(e,"yarn.lock"))?{command:"yarn",args:["add","-D",`${f.npmScope}/mach@latest`],label:`yarn add -D ${f.npmScope}/mach@latest`}:V.existsSync(te.join(e,"bun.lockb"))||V.existsSync(te.join(e,"bun.lock"))?{command:"bun",args:["add","-d",`${f.npmScope}/mach@latest`],label:`bun add -d ${f.npmScope}/mach@latest`}:{command:"npm",args:["install","--save-dev",`${f.npmScope}/mach@latest`],label:`npm install --save-dev ${f.npmScope}/mach@latest`}}function mi(e){let t=Lt(te.join(e,"package.json"))||{};return!!(t.dependencies?.[`${f.npmScope}/mach`]||t.devDependencies?.[`${f.npmScope}/mach`])}function ui(e){let t=Lt(te.join(e,"node_modules",f.npmScope,"mach","package.json"));return Se(t?.version)}function il(e,t){let n=o=>o.replace(/^v/,"").split(/[.-]/).slice(0,3).map(s=>Number.parseInt(s,10)||0),i=n(e),r=n(t);for(let o=0;o<3;o+=1)if(i[o]!==r[o])return i[o]>r[o]?1:-1;return 0}function $f(e){let t=ui(e);return!mi(e)||!t||il(t,nt)<0}function vf(e){let t=wf(e),n=el(t.command,t.args,{cwd:e,stdio:"inherit",env:{...process.env}});if(n.error)return{ok:!1,label:t.label,error:n.error.message};if(n.status!==0)return{ok:!1,label:t.label,error:`${t.command} exited with code ${n.status}`};let i=ui(e),r=!!i&&il(i,nt)>=0;return{ok:mi(e)&&r,label:t.label,error:r?void 0:`installed ${i||"unknown"}, requires ${nt} or newer`}}function Ya(e){if(typeof e=="string")return e;if(Array.isArray(e)&&typeof e[0]=="string")return e[0]}function Rf(e,t){let n=["app.config.json","app.json"].find(a=>V.existsSync(te.join(e,a)));if(!n)return null;let i=te.join(e,n),r=Lt(i);if(!r)return null;let o=r.expo&&typeof r.expo=="object"?r.expo:r;if(t==="react-native"&&n==="app.json"&&(!r.expo||typeof r.expo!="object")){let a=Lt(te.join(e,"package.json"))||{},l=Se(r.displayName)||Se(r.name)||Se(a.name)||"App",d=(Se(a.name)||l).toLowerCase().replace(/[^a-z0-9-]+/g,"-").replace(/^-+|-+$/g,"")||"app";r.expo={name:l,slug:d,version:Se(a.version)||"1.0.0"},o=r.expo}let s=Array.isArray(o.plugins)?o.plugins:[];return s.some(a=>Ya(a)===ce)||(o.plugins=[...s.filter(a=>{let l=Ya(a);return l!=="./plugins/withMachDeepLinks"&&l!=="plugins/withMachDeepLinks"}),ce],tl(i,r)),n}function Pf(e){let t=["app.config.ts","app.config.js"].find(m=>V.existsSync(te.join(e,m)));if(!t)return"missing";let n=te.join(e,t),i=V.readFileSync(n,"utf-8");if(i.includes(ce))return"already";let r=/(['"`])(?:\.\/)?plugins\/withMachDeepLinks\1/g;if(r.test(i))return V.writeFileSync(n,i.replace(r,(m,h)=>`${h}${ce}${h}`)),"inserted";let o=/(^[ \t]*)plugins\s*:\s*\[([\s\S]*?)\]/m.exec(i);if(!o||o.index===void 0)return"manual";let s=i.includes(`\r
1994
+ `}async function Ga(e,t,n={}){let i=ye();if(!i){be.error(`You are not logged in. Run \`${f.nameLower} login\` first.`);return}let r=Ha.join(process.cwd(),f.configFileName);if(!di.existsSync(r)){be.error(`No ${f.configFileName} found. Run \`${f.nameLower} init\` or \`${f.nameLower} link\` first.`);return}let o;try{o=JSON.parse(di.readFileSync(r,"utf-8"))}catch{be.error(`Failed to parse ${f.configFileName}`);return}let{projectId:s}=o;if(!s){be.error(`${f.configFileName} is missing projectId.`);return}e==="set"?await gf(s,t,i):e==="list"?await hf(s,i):e==="pull"||e==="download"||e==="export"?await yf(s,n):be.error(`Unknown env action: ${e}. Use 'set', 'list', or 'pull'.`)}async function gf(e,t,n){if(t.length===0){be.error(`Usage: ${f.nameLower} env set KEY=VALUE [KEY2=VALUE2 ...]`);return}let i=jr();i.start("Setting environment variables...");let r=0,o=0;for(let s of t){let[a,...l]=s.split("="),d=l.join("=");if(!a||d===void 0){be.warn(`Invalid format for argument: ${s}. Expected KEY=VALUE.`),o++;continue}try{let c={key:a.trim(),value:d,type:"env",environment:"global",visibility:"secret"},{data:u}=await w.post(`/projects/${e}/secrets`,c);u.status==="success"?r++:(be.error(`Failed to set ${a}: ${u.message}`),o++)}catch(c){be.error(Hr(c,e,"set",a)),o++}}i.stop(`Set ${r} variable(s). ${o>0?`${o} failed.`:""}`)}async function hf(e,t){let n=jr();n.start("Fetching environment variables...");try{let{data:i}=await w.get(`/projects/${e}/secrets`);if(i.status==="success"){n.stop("Fetched variables.");let r=i.secrets||[];r.length===0?be.info("No environment variables found for this project."):(be.info(yn.bold("Environment Variables (Global & Scoped):")),r.forEach(o=>{let s=o.visibility==="plain"?o.value:"********";console.log(` ${yn.cyan(o.key)} = ${s} ${yn.gray(`[${o.environment}]`)}`)}))}else n.stop(yn.red(`Failed to fetch variables: ${i.message}`))}catch(i){n.stop("Failed to fetch variables."),be.error(Hr(i,e,"list"))}}async function yf(e,t){let n=(t.environment||"development").trim(),i=t.out||".env.local",r=Ha.resolve(process.cwd(),i);if(di.existsSync(r)&&!t.overwrite){be.error(`${i} already exists. Re-run with \`--overwrite\` to replace it.`);return}let o=jr();o.start(`Downloading ${n} environment variables...`);try{let{data:s}=await w.get(`/projects/${e}/secrets/export?env=${encodeURIComponent(n)}`);if(s.status!=="success"){o.stop(yn.red(`Failed to download variables: ${s.message||"Unknown API error"}`));return}let a=s.secrets||{},l=mf(a,n);di.writeFileSync(r,l,{encoding:"utf-8",mode:384}),o.stop(`Wrote ${Object.keys(a).length} variable(s) to ${i}.`)}catch(s){o.stop("Failed to download variables."),be.error(Hr(s,e,"pull"))}}import{cancel as Af,confirm as tl,isCancel as pi,log as Re,note as Sf,outro as xt,select as bf,spinner as If,text as Ef}from"@clack/prompts";import Me from"chalk";import H from"fs";import ee from"path";import{spawnSync as nl}from"child_process";import zr from"crypto";import _f from"axios";import za from"crypto";import An from"fs";import Sn from"path";var Va=e=>String(e||"").replace(/\\/g,"/").replace(/^\/+/,"");function Ka(e,t){let n=Sn.join(e,"metadata.json");if(!An.existsSync(n))throw new Error(`Expo export did not create ${n}.`);let r=JSON.parse(An.readFileSync(n,"utf-8"))?.fileMetadata?.[t],o=Va(r?.bundle);if(!o)throw new Error(`Expo export metadata is missing the ${t} launch bundle.`);let s=new Set,a=(Array.isArray(r?.assets)?r.assets:[]).flatMap(l=>{let d=Va(l?.path);return!d||s.has(d)?[]:(s.add(d),[{path:d,ext:String(l?.ext||"").replace(/^\./,"")||void 0}])});for(let l of[o,...a.map(d=>d.path)])if(!An.existsSync(Sn.join(e,l)))throw new Error(`Expo export metadata references a missing file: ${l}`);return{bundle:o,assets:a}}function Wa(e,t){return[Sn.join(e,t.bundle),...t.assets.map(n=>Sn.join(e,n.path)),Sn.join(e,"metadata.json")]}function Gr(e){return za.createHash("md5").update(An.readFileSync(e)).digest("hex")}function Vr(e){return za.createHash("sha256").update(An.readFileSync(e)).digest("base64url")}function Ya(e){let t=String(e||"").replace(/^\./,"").trim().toLowerCase();return t?`.${t}`:void 0}function ci(e,t=!1){if(t)return"application/javascript";switch(String(e||"").replace(/^\./,"").trim().toLowerCase()){case"js":case"bundle":case"hbc":return"application/javascript";case"json":return"application/json";case"png":return"image/png";case"jpg":case"jpeg":return"image/jpeg";case"gif":return"image/gif";case"webp":return"image/webp";case"svg":return"image/svg+xml";case"ttf":return"font/ttf";case"otf":return"font/otf";case"woff":return"font/woff";case"woff2":return"font/woff2";case"mp3":return"audio/mpeg";case"m4a":return"audio/mp4";case"aac":return"audio/aac";case"wav":return"audio/wav";case"mp4":return"video/mp4";case"mov":return"video/quicktime";case"pdf":return"application/pdf";default:return"application/octet-stream"}}function qa(e){if(!e||typeof e!="object"||Array.isArray(e))return;let{_internal:t,hooks:n,mods:i,...r}=e;return r}var ce=`${f.npmScope}/mach/expo-plugin`,Kr=()=>process.stdin.isTTY&&process.stdout.isTTY,fi=()=>{Af("Operation cancelled."),process.exit(0)},Ae=e=>{if(typeof e!="string")return;let t=e.trim();return t.length>0?t:void 0};function Lt(e){if(!H.existsSync(e))return null;try{return JSON.parse(H.readFileSync(e,"utf-8"))}catch{return null}}function il(e,t){H.writeFileSync(e,`${JSON.stringify(t,null,2)}
1995
+ `)}function bn(){let e=re();return e?.projectId||(Re.error(`No ${f.configFileName} found or missing projectId. Run \`${f.nameLower} link\` first.`),process.exit(1)),e}function wf(e){il(ee.join(process.cwd(),f.configFileName),e)}function Wr(e){let t=ve(e.framework);if(t)return t;let n=Lt(ee.join(process.cwd(),"package.json"))||{},i={...n.dependencies||{},...n.devDependencies||{}};return i.expo?"expo":(i["react-native"],"react-native")}function Yr(e,t){let n=String(e||"").trim().toLowerCase();return n==="expo"||n==="expo-updates"?"expo-updates":n==="react-native"||n==="mach-react-native"||n==="rn"?"mach-react-native":"expo-updates"}function rl(e){if(e==="mach-react-native")throw new Error("mach-react-native is reserved for a future Mach-native OTA client. Use expo-updates for Expo and bare React Native projects.");return e}function qr(e){let t=String(e||"all").trim().toLowerCase();if(t==="ios")return["ios"];if(t==="android")return["android"];if(t==="all"||t==="both")return["ios","android"];throw new Error("Platform must be ios, android, or all.")}function $f(e){return H.existsSync(ee.join(e,"pnpm-lock.yaml"))?{command:"pnpm",args:["add","-D",`${f.npmScope}/mach@latest`],label:`pnpm add -D ${f.npmScope}/mach@latest`}:H.existsSync(ee.join(e,"yarn.lock"))?{command:"yarn",args:["add","-D",`${f.npmScope}/mach@latest`],label:`yarn add -D ${f.npmScope}/mach@latest`}:H.existsSync(ee.join(e,"bun.lockb"))||H.existsSync(ee.join(e,"bun.lock"))?{command:"bun",args:["add","-d",`${f.npmScope}/mach@latest`],label:`bun add -d ${f.npmScope}/mach@latest`}:{command:"npm",args:["install","--save-dev",`${f.npmScope}/mach@latest`],label:`npm install --save-dev ${f.npmScope}/mach@latest`}}function mi(e){let t=Lt(ee.join(e,"package.json"))||{};return!!(t.dependencies?.[`${f.npmScope}/mach`]||t.devDependencies?.[`${f.npmScope}/mach`])}function ui(e){let t=Lt(ee.join(e,"node_modules",f.npmScope,"mach","package.json"));return Ae(t?.version)}function ol(e,t){let n=o=>o.replace(/^v/,"").split(/[.-]/).slice(0,3).map(s=>Number.parseInt(s,10)||0),i=n(e),r=n(t);for(let o=0;o<3;o+=1)if(i[o]!==r[o])return i[o]>r[o]?1:-1;return 0}function vf(e){let t=ui(e);return!mi(e)||!t||ol(t,it)<0}function Rf(e){let t=$f(e),n=nl(t.command,t.args,{cwd:e,stdio:"inherit",env:{...process.env}});if(n.error)return{ok:!1,label:t.label,error:n.error.message};if(n.status!==0)return{ok:!1,label:t.label,error:`${t.command} exited with code ${n.status}`};let i=ui(e),r=!!i&&ol(i,it)>=0;return{ok:mi(e)&&r,label:t.label,error:r?void 0:`installed ${i||"unknown"}, requires ${it} or newer`}}function Ja(e){if(typeof e=="string")return e;if(Array.isArray(e)&&typeof e[0]=="string")return e[0]}function Pf(e,t){let n=["app.config.json","app.json"].find(a=>H.existsSync(ee.join(e,a)));if(!n)return null;let i=ee.join(e,n),r=Lt(i);if(!r)return null;let o=r.expo&&typeof r.expo=="object"?r.expo:r;if(t==="react-native"&&n==="app.json"&&(!r.expo||typeof r.expo!="object")){let a=Lt(ee.join(e,"package.json"))||{},l=Ae(r.displayName)||Ae(r.name)||Ae(a.name)||"App",d=(Ae(a.name)||l).toLowerCase().replace(/[^a-z0-9-]+/g,"-").replace(/^-+|-+$/g,"")||"app";r.expo={name:l,slug:d,version:Ae(a.version)||"1.0.0"},o=r.expo}let s=Array.isArray(o.plugins)?o.plugins:[];return s.some(a=>Ja(a)===ce)||(o.plugins=[...s.filter(a=>{let l=Ja(a);return l!=="./plugins/withMachDeepLinks"&&l!=="plugins/withMachDeepLinks"}),ce],il(i,r)),n}function Of(e){let t=["app.config.ts","app.config.js"].find(m=>H.existsSync(ee.join(e,m)));if(!t)return"missing";let n=ee.join(e,t),i=H.readFileSync(n,"utf-8");if(i.includes(ce))return"already";let r=/(['"`])(?:\.\/)?plugins\/withMachDeepLinks\1/g;if(r.test(i))return H.writeFileSync(n,i.replace(r,(m,h)=>`${h}${ce}${h}`)),"inserted";let o=/(^[ \t]*)plugins\s*:\s*\[([\s\S]*?)\]/m.exec(i);if(!o||o.index===void 0)return"manual";let s=i.includes(`\r
1996
1996
  `)?`\r
1997
1997
  `:`
1998
1998
  `,a=o[1]||"",l=o[2]||"",c=l.match(/\r?\n([ \t]+)\S/)?.[1]||`${a} `,u=l.trim().length===0?`${s}${c}'${ce}',${s}${a}`:l.includes(`
1999
- `)||l.includes("\r")?`${s}${c}'${ce}',${l}`:`${s}${c}'${ce}',${s}${c}${l.trim()}${s}${a}`,p=`${o[0].slice(0,o[0].indexOf("[")+1)}${u}]`;return V.writeFileSync(n,`${i.slice(0,o.index)}${p}${i.slice(o.index+o[0].length)}`),"inserted"}async function Of(e,t,n){let i=[];if($f(e)){let o=ui(e),s=!!(n.installPlugin||n.yes);if(!s&&!n.skipInstall&&Gr()){let a=await Qa({message:o?`Update the local ${f.npmScope}/mach Expo plugin (${o} \u2192 ${nt})?`:`Install ${f.npmScope}/mach locally so Expo can use ${ce}?`,initialValue:!0});pi(a)&&fi(),s=!!a}if(s&&!n.skipInstall){let a=vf(e);a.ok?i.push(`Installed a compatible ${ce} with ${a.label}.`):i.push(`Could not install ${f.npmScope}/mach with ${a.label}: ${a.error||"unknown error"}.`)}else i.push(`Install ${f.npmScope}/mach@${nt} or newer in this app so Expo can resolve ${ce}.`)}else i.push(`Local ${ce} is compatible (${ui(e)}).`);let r=Pf(e);if(r==="already"&&i.push(`Expo config already includes ${ce}.`),r==="inserted"&&i.push(`Expo config updated to include ${ce}.`),r==="manual"&&i.push(`Add "${ce}" to the plugins array in app.config.ts/app.config.js.`),r==="missing"){let o=Rf(e,t);o?i.push(`${o} updated to include ${ce}.`):i.push(`Add "${ce}" to your Expo config plugins array.`)}return i}async function qa(e,t){if(t.skipInstall)return!1;if(t.yes)return!0;if(!Gr())return!1;let n=await Qa({message:e,initialValue:!0});return pi(n)&&fi(),!!n}async function Df(e,t,n){let i=[];if(t==="react-native"&&!ht(e,"expo"))if(await qa("Install Expo Modules required by the Mach OTA runtime? This updates package and native project files.",n)){let o=ho(e);if(!o.ok||!ht(e,"expo"))throw new Error(`Expo Modules installation failed: ${o.error||o.command}`);i.push("Installed and configured Expo Modules for the existing React Native project.")}else i.push("Expo Modules are required. Run `npx install-expo-modules@latest`, then run `mach ota setup` again.");if(!ht(e,"expo-updates"))if(await qa("Install the expo-updates runtime?",n)){let o=yo(e);if(!o.ok||!ht(e,"expo-updates"))throw new Error(`expo-updates installation failed: ${o.error||o.command}`);i.push("Installed the Expo-compatible expo-updates version.")}else i.push("Install expo-updates with `npx expo install expo-updates`, then run `mach ota setup` again.");return i}async function Ja(e,t,n,i,r){if(t)return t;if(r||!Gr()){if(i)throw new Error(`${e.replace(/:$/,"")} is required.`);return}let o=await If({message:e,placeholder:n,validate(s){if(i&&s.trim().length===0)return"Required."}});return pi(o)&&fi(),Se(o)}function Wr(e,t,n){return qt(e,{runtimeVersion:t.runtimeVersion,framework:ve(t.framework)||ve(e.framework),platform:n})}function Cf(e){let t=Yt(process.cwd(),e);if(!t)throw new Error(`Resolved Expo OTA configuration does not match this publish: Expo config could not be resolved. Run \`mach ota setup\` to update ${ce}, then create a new native build if its embedded runtime changes.`);let n=[];if(t.runtimeVersion!==e.runtimeVersion&&n.push(`runtime is ${t.runtimeVersion||"missing"} (expected ${e.runtimeVersion})`),t.channel!==e.channel&&n.push(`channel is ${t.channel||"missing"} (expected ${e.channel})`),t.url!==e.url&&n.push(`URL is ${t.url||"missing"} (expected ${e.url})`),n.length>0)throw new Error(`Resolved Expo OTA configuration does not match this publish: ${n.join("; ")}. Run \`mach ota setup\` to update ${ce}, then create a new native build if its embedded runtime changes.`);return t}function Tf(e){return Hr.createHash("sha256").update(V.readFileSync(e)).digest("hex")}function Nf(e){let t=te.extname(e).toLowerCase();return t===".json"?"application/json":t===".js"||t===".bundle"||t===".hbc"?"application/javascript":t===".map"?"application/json":t===".png"?"image/png":t===".jpg"||t===".jpeg"?"image/jpeg":t===".webp"?"image/webp":t===".gif"?"image/gif":t===".svg"?"image/svg+xml":t===".ttf"?"font/ttf":t===".otf"?"font/otf":t===".woff"?"font/woff":t===".woff2"?"font/woff2":"application/octet-stream"}function rl(e){let t=[];if(!V.existsSync(e))return t;for(let n of V.readdirSync(e)){let i=te.join(e,n),r=V.statSync(i);r.isDirectory()?t.push(...rl(i)):r.isFile()&&t.push(i)}return t}function kf(e,t){let n=e.filter(i=>{let r=i.toLowerCase();return r.endsWith(".map")?!1:r.endsWith(".js")||r.endsWith(".bundle")||r.endsWith(".hbc")});return n.find(i=>i.toLowerCase().includes(t))||n.sort((i,r)=>V.statSync(r).size-V.statSync(i).size)[0]}async function Xa(e){let t=await w.post("/ota/upload-url",{projectId:e.projectId,updateId:e.updateId,platform:e.platform,fileName:e.fileName,contentType:e.contentType});if(t.data.status!=="success")throw new Error(t.data.message||`Could not create upload URL for ${e.fileName}`);let n=V.statSync(e.filePath).size;return await Ef.put(t.data.uploadUrl,V.createReadStream(e.filePath),{headers:{"Content-Type":e.contentType,"Content-Length":n},maxBodyLength:1/0,maxContentLength:1/0}),{key:t.data.key,url:t.data.publicUrl,contentType:e.contentType,hash:Tf(e.filePath),size:n}}function ol(e,t,n,i={}){let r=el(e,t,{cwd:n,stdio:"inherit",env:{...process.env,CI:process.env.CI||"1",EXPO_NO_TELEMETRY:"1",...i}});if(r.error)throw new Error(r.error.message);if(r.status!==0)throw new Error(`${e} ${t.join(" ")} exited with code ${r.status}`)}function xf(e,t,n,i,r){ol("npx",["expo","export","--platform",e,"--output-dir",t],process.cwd(),{MACH_OTA_RUNTIME_VERSION:n,MACH_OTA_CHANNEL:i,MACH_OTA_URL:r})}function Lf(e,t){let n=e==="ios"?"main.jsbundle":"index.android.bundle",r=["index.js","index.ts","index.tsx"].find(s=>V.existsSync(te.join(process.cwd(),s)))||"index.js",o=te.join(t,"assets");V.mkdirSync(o,{recursive:!0}),ol("npx",["react-native","bundle","--platform",e,"--dev","false","--entry-file",r,"--bundle-output",te.join(t,n),"--assets-dest",o],process.cwd())}async function Mf(e){let t=e.config.projectId,n=`ota_${Date.now()}_${e.platform}_${Hr.randomUUID().slice(0,8)}`,i=te.join(process.cwd(),".mach","ota",n,e.platform);V.rmSync(i,{recursive:!0,force:!0}),V.mkdirSync(i,{recursive:!0}),e.engine==="expo-updates"?xf(e.platform,i,e.runtimeVersion,e.channel,e.config.ota?.url||""):Lf(e.platform,i);let r=e.engine==="expo-updates"?Va(i,e.platform):void 0,o=r?za(i,r):rl(i),s=r?te.join(i,r.bundle):kf(o,e.platform);if(!s)throw new Error(`Could not find a ${e.platform} JS bundle in ${i}.`);let a=new Map((r?.assets||[]).map(A=>[A.path,A])),l=[];for(let A of o){let D=te.relative(i,A).replace(/\\/g,"/"),I=a.get(D),H=A===s?"application/javascript":I?ci(I.ext):Nf(A);l.push({filePath:A,relative:D,uploaded:await Xa({projectId:t,updateId:n,platform:e.platform,filePath:A,fileName:D,contentType:H})})}let d=l.find(A=>A.filePath===s),c=e.engine==="expo-updates"?Hr.randomUUID():void 0,u=e.engine==="expo-updates"?Wa(e.expoConfig):void 0;if(e.engine==="expo-updates"&&(!u||Object.keys(u).length===0))throw new Error("Could not resolve the public Expo config required by the OTA manifest. Run `mach ota verify` and try again.");let p=r?r.assets.map(A=>{let D=l.find(I=>I.relative===A.path);if(!D)throw new Error(`Could not find uploaded Expo asset ${A.path}.`);return{key:Br(D.filePath),url:D.uploaded.url,contentType:ci(A.ext),fileExtension:Ka(A.ext),hash:jr(D.filePath),size:D.uploaded.size}}):l.filter(A=>A.filePath!==s&&!A.relative.endsWith(".map")).map(A=>({key:A.relative,url:A.uploaded.url,contentType:A.uploaded.contentType,hash:A.uploaded.hash,size:A.uploaded.size})),m=r?{key:Br(d.filePath),url:d.uploaded.url,contentType:ci(void 0,!0),hash:jr(d.filePath),size:d.uploaded.size}:{key:te.basename(d.relative),url:d.uploaded.url,contentType:d.uploaded.contentType,hash:d.uploaded.hash,size:d.uploaded.size},h={id:c||n,createdAt:new Date().toISOString(),runtimeVersion:e.runtimeVersion,launchAsset:m,assets:p,metadata:{projectId:t,channel:e.channel,...e.message?{message:e.message}:{},engine:e.engine},extra:{...u?{expoClient:u}:{},mach:{projectId:t,updateId:n,...c?{expoUpdateId:c}:{},channel:e.channel,platform:e.platform}}},g=te.join(i,"mach-manifest.json");V.writeFileSync(g,JSON.stringify(h,null,2));let S=await Xa({projectId:t,updateId:n,platform:e.platform,filePath:g,fileName:"manifest.json",contentType:"application/json"}),b=await w.post("/ota/publish",{projectId:t,updateId:n,expoUpdateId:c,channelName:e.channel,runtimeVersion:e.runtimeVersion,platform:e.platform,manifestKey:S.key,message:e.message,launchAsset:m,assets:p});if(b.data.status!=="success")throw new Error(b.data.message||`Failed to publish ${e.platform} OTA update.`);return b.data.update}async function Uf(e){let t=bn(),n=ve(e.framework)||Vr(t),i;try{i=nl(zr(e.engine,n))}catch(p){Re.error(p.message),process.exit(1)}let r=!!e.yes,o=await Ja("OTA channel:",Se(e.channel||e.branch||t.ota?.channel)||"production","production",!0,r),s=`${tt.replace(/\/$/,"")}/api/ota/expo/${t.projectId}`,a=Se(e.url||t.ota?.url),l=a?.includes("/api/ota/react-native/")?void 0:a,d=await Ja("Mach OTA update URL:",l||s,s,!0,r);t.framework=n;let c={...t.ota||{},enabled:!0,engine:i,channel:o,url:d,deploymentUrl:d,runtimeVersionPolicy:t.ota?.runtimeVersionPolicy||"appVersion"};delete c.statsUrl,t.ota=c,delete t.update,_f(t);let u=[`${f.configFileName} updated.`];if(u.push(...await Df(process.cwd(),n,e)),u.push(...await Of(process.cwd(),n,e)),n==="react-native"&&ht(process.cwd(),"expo")&&ht(process.cwd(),"expo-updates")&&mi(process.cwd())){let p=Kr(e.platform||"all"),m=Mi(process.cwd()).filter(h=>p.includes(h));m.length===0&&u.push("No matching committed ios/android project was found for native configuration sync.");for(let h of m){let g=Wr(t,e,h),b=Ao({cwd:process.cwd(),platforms:[h],runtimeVersion:g,channel:o,url:d}).find(A=>!A.ok);if(b)throw new Error(`Could not synchronize ${h} Expo Updates configuration: ${b.error||b.command}`);u.push(`Synchronized ${h} native Expo Updates configuration for runtime ${g}.`)}}u.push("Create and install one new native build after initial OTA setup. Existing app binaries keep their embedded update URL."),Af(u.map(p=>`- ${p}`).join(`
2000
- `),"OTA setup"),await sl({...e,action:"verify"})}async function Ff(e){_t();let t=bn(),n=ve(e.framework)||Vr(t),i;try{i=nl(zr(e.engine||t.ota?.engine,n))}catch(a){Re.error(`${a.message} Run \`mach ota setup\` to migrate this project.`),process.exit(1)}let r=Se(e.channel||e.branch||t.ota?.channel)||"production",o=Kr(e.platform||"all"),s=bf();s.start(`Publishing OTA update (${o.join("+")}, ${r})`);try{let a=[];for(let l of o){let d=Wr(t,e,l),c=Cf({platform:l,runtimeVersion:d,channel:r,url:Se(t.ota?.url)||""});s.message(`Exporting and uploading ${l} OTA bundle for runtime ${d}...`),a.push(await Mf({config:t,engine:i,platform:l,channel:r,runtimeVersion:d,message:e.message,expoConfig:c.expoConfig}))}if(s.stop("OTA update published."),e.json)Re.info(JSON.stringify({status:"success",updates:a},null,2));else{let l=Array.from(new Set(a.map(d=>d.runtimeVersion).filter(Boolean)));xt(Me.green(`\u2713 OTA update live on "${r}" for runtime ${l.join(", ")||"unknown"}.`));for(let d of a)Re.info(Me.dim(`${d.platform}: ${d.updateId}`))}}catch(a){s.stop("OTA publish failed."),Re.error(a.response?.data?.message||a.message),process.exit(1)}}async function sl(e){let t=bn(),n=ve(e.framework)||Vr(t),i=zr(e.engine||t.ota?.engine,n),r=[],o=t.ota;if(r.push(o?.enabled?{level:"pass",message:"mach.config.json has ota.enabled."}:{level:"fail",message:"mach.config.json is missing ota.enabled. Run `mach ota setup`."}),r.push(o?.url?{level:"pass",message:`OTA URL configured: ${o.url}`}:{level:"fail",message:"OTA URL is missing. Run `mach ota setup`."}),r.push(o?.channel?{level:"pass",message:`Default channel: ${o.channel}`}:{level:"warn",message:"No default OTA channel configured; publish will use production."}),r.push(o?.runtimeVersionPolicy||o?.runtimeVersion?{level:"pass",message:"Runtime version policy configured."}:{level:"warn",message:"No explicit runtime policy configured; Mach will use Expo runtimeVersion or package.json version."}),i==="expo-updates"){let a=Lt(te.join(process.cwd(),"package.json"))||{},l={...a.dependencies||{},...a.devDependencies||{}};n==="react-native"&&r.push(l.expo?{level:"pass",message:"Expo Modules are installed for the bare React Native project."}:{level:"fail",message:"Expo Modules are missing. Run `mach ota setup` to install the bare React Native OTA runtime."}),r.push(l["expo-updates"]?{level:"pass",message:"expo-updates is installed."}:{level:"fail",message:"expo-updates is missing. Run `mach ota setup`."}),r.push(mi(process.cwd())?{level:"pass",message:`${f.npmScope}/mach is installed locally for the Expo plugin.`}:{level:"fail",message:`${f.npmScope}/mach is not installed locally; run \`mach ota setup\`.`});let d=Kr(e.platform||"all"),c=Se(e.channel||e.branch||o?.channel)||"production",u=Se(o?.url)||"",p=d.map(h=>{let g=Wr(t,e,h);return{platform:h,runtimeVersion:g,delivery:Yt(process.cwd(),{platform:h,runtimeVersion:g,channel:c,url:u})}}),m=p[0]?.delivery;if(m){let h=m.expoConfig.updates?.enabled!==!1,g=Se(m.expoConfig.updates?.checkAutomatically)?.toUpperCase()||"ON_LOAD";r.push(m.url===o?.url?{level:"pass",message:"Expo Updates URL resolves to Mach."}:{level:"warn",message:`Expo Updates URL resolves to ${m.url||"none"} instead of ${o?.url||"the Mach OTA URL"}.`}),r.push(m.channel===c?{level:"pass",message:`Expo update channel header resolves to ${c}.`}:{level:"warn",message:`Expo update channel header is ${m.channel||"not set"}; install the latest ${f.npmScope}/mach package and rebuild.`}),r.push(h?{level:"pass",message:"Expo Updates is enabled."}:{level:"fail",message:"Expo config has updates.enabled=false, so this app cannot receive OTA updates."}),r.push(g!=="NEVER"&&g!=="ON_ERROR_RECOVERY"?{level:"pass",message:`Expo checks for updates automatically (${g}).`}:{level:"fail",message:`Expo checkAutomatically is ${g}; use ON_LOAD to receive Mach updates when the app starts.`})}else r.push({level:"fail",message:`Could not resolve Expo config. Confirm ${ce} is present and run \`mach ota setup\` again.`});for(let{platform:h,runtimeVersion:g,delivery:S}of p)r.push(S?.runtimeVersion===g?{level:"pass",message:`${h} Expo runtime resolves to ${g}.`}:{level:"fail",message:`${h} Expo runtime resolves to ${S?.runtimeVersion||"none"} instead of ${g}. Run \`mach ota setup\`, then rebuild the app.`});if(n==="react-native"){let h=d,g=Mi(process.cwd()).filter(b=>h.includes(b)),S=So(process.cwd());if(g.includes("android")){let b=!!(S.androidManifest&&S.androidStrings)&&V.readFileSync(S.androidManifest,"utf-8").includes("expo.modules.updates.EXPO_UPDATE_URL")&&V.readFileSync(S.androidStrings,"utf-8").includes("expo_runtime_version");r.push(b?{level:"pass",message:"Android native Expo Updates configuration is synchronized."}:{level:"fail",message:"Android native Expo Updates configuration is missing. Run `mach ota setup --platform android`."})}if(g.includes("ios")){let b=!!S.iosExpoPlist&&V.readFileSync(S.iosExpoPlist,"utf-8").includes("EXUpdatesURL")&&V.readFileSync(S.iosExpoPlist,"utf-8").includes("EXUpdatesRuntimeVersion");r.push(b?{level:"pass",message:"iOS native Expo Updates configuration is synchronized."}:{level:"fail",message:"iOS native Expo Updates configuration is missing. Run `mach ota setup --platform ios`."})}}}else r.push({level:"fail",message:"mach-react-native is not available yet. Run `mach ota setup` to migrate this project to expo-updates."});for(let a of r){let l=a.level==="pass"?Me.green("PASS"):a.level==="warn"?Me.yellow("WARN"):Me.red("FAIL");Re.info(`${l} ${a.message}`)}let s=r.filter(a=>a.level==="fail").length;s>0&&(xt(Me.red(`OTA verification failed with ${s} issue(s).`)),process.exit(1)),xt(Me.green("OTA verification passed."))}async function Bf(e){_t();let t=bn(),n=await w.get(`/ota/${t.projectId}/updates`),i=n.data.updates||[];if(e.json){Re.info(JSON.stringify(n.data,null,2));return}if(i.length===0){xt("No OTA updates found.");return}for(let r of i){let o=r.stats?.total||{};Re.info(`${Me.bold(r.updateId)} ${Me.dim(`${r.platform} ${r.channelName} runtime ${r.runtimeVersion}`)} ${r.status||"active"}`),Re.info(Me.dim(` downloads ios=${o.iosDownloaded||0} android=${o.androidDownloaded||0} applied ios=${o.iosApplied||0} android=${o.androidApplied||0}`))}xt(`Found ${i.length} OTA update(s).`)}async function Za(e,t){_t();let n=bn(),i=Se(t.updateId);i||(Re.error(`Missing update id. Use \`${f.nameLower} ota ${e} --update-id <id>\`.`),process.exit(1));let r=await w.post(`/ota/${n.projectId}/updates/${encodeURIComponent(i)}/${e}`);t.json?Re.info(JSON.stringify(r.data,null,2)):xt(Me.green(`\u2713 OTA update ${e==="rollback"?"rolled back":"promoted"}: ${i}`))}async function dt(e,t={}){let n=e||t.action||"publish";if(n==="setup")return Uf({...t,action:n});if(n==="publish")return Ff({...t,action:n});if(n==="verify")return sl({...t,action:n});if(n==="list")return Bf({...t,action:n});if(n==="rollback")return Za("rollback",{...t,action:n});if(n==="promote")return Za("promote",{...t,action:n});let i=await Sf({message:"What do you want to do?",options:[{value:"setup",label:"Setup OTA"},{value:"publish",label:"Publish OTA update"},{value:"verify",label:"Verify OTA setup"},{value:"list",label:"List OTA updates"}]});return pi(i)&&fi(),dt(i,t)}import{intro as jf,outro as al,log as Mt}from"@clack/prompts";import Ve from"chalk";async function ll(){jf(Ve.blue(`${f.name} CLI - User Profile`));let e=Ae();if(!e){Mt.warn(Ve.yellow("You are not logged in.")),Mt.info(`Run \`${f.nameLower} login\` to authenticate.`),al();return}Mt.info(`${Ve.bold("Logged in as:")} ${Ve.green(e.email)}`);try{await w.get("/projects");let n=Ae().token.split(".");if(n.length===3){let i=JSON.parse(Buffer.from(n[1],"base64").toString());if(i.exp){let r=new Date(i.exp*1e3),o=new Date,s=r.getTime()-o.getTime();if(s>0){let a=Math.round(s/6e4),l=(a/60).toFixed(1);Mt.info(`${Ve.bold("Token status:")} Valid (Expires in ~${l}h / ${a}m)`)}else Mt.warn(`${Ve.bold("Token status:")} ${Ve.red("Expired")} (Auto-refresh failed)`)}}}catch{Mt.warn(`${Ve.bold("Token status:")} ${Ve.red("Unreachable")} (Session might be truly expired)${tt}`)}al(Ve.blue("---"))}import{spawn as Vf}from"child_process";import{log as ct}from"@clack/prompts";import Pe from"chalk";import zf from"fs";import Hf from"net";async function Gf(e){return new Promise(t=>{let n=Hf.createServer();n.once("error",i=>{i.code==="EADDRINUSE"?t(!0):t(!1)}),n.once("listening",()=>{n.close(),t(!1)}),n.listen(e,"0.0.0.0")})}async function dl(e,t=20){let n=e;for(;n<e+t;){if(!await Gf(n))return n;n++}throw new Error(`Could not find an available port after ${t} attempts starting from ${e}.`)}var cl=async e=>{ct.info(Pe.blue(`Starting ${f.name} Dev Orchestrator...`));let t=re(),n=e.buildProfile||"development",i=t?_e(t,n):null,r={...process.env};if(t?.projectId)try{ct.info(Pe.dim(`Fetching managed secrets for profile: ${n}...`));let u=await w.get(`/projects/${t.projectId}/secrets/export?env=${n}`);u.data?.status==="success"&&u.data.secrets&&(Object.assign(r,u.data.secrets),ct.info(Pe.magenta(`\u2713 Injected secrets from ${f.name} Dashboard.`)))}catch{ct.warn("Could not fetch managed secrets. Running with local env only.")}t&&Object.assign(r,wt(t,f.envPrefix)),i&&(Object.assign(r,wt(i,`${f.envPrefix}PROFILE_`)),i.env&&Object.assign(r,i.env));let o=!1;try{let u=JSON.parse(zf.readFileSync("package.json","utf-8"));o=!!(u.dependencies?.expo||u.devDependencies?.expo)}catch{ct.warn("Could not parse package.json. Defaulting to Bare React Native mode.")}let s=Number(e.port||i?.port||8081),a=await dl(s);a!==s&&ct.info(Pe.yellow(`Port ${s} is busy. ${f.name} is using ${a} instead.`));let l=process.platform==="win32"?"npx.cmd":"npx",d=[];if(o?(d=["expo","start","--port",String(a)],e.clear&&d.push("--clear"),e.tunnel&&d.push("--tunnel"),e.lan&&d.push("--lan"),e.localhost&&d.push("--localhost"),e.ios&&d.push("--ios"),e.android&&d.push("--android"),e.web&&d.push("--web")):(d=["react-native","start","--port",String(a)],e.clear&&d.push("--clear")),o){let u=[`${Pe.cyan("i")} open iOS simulator`,`${Pe.cyan("a")} open Android emulator/device`,`${Pe.cyan("w")} open web`,`${Pe.cyan("r")} reload app`];ct.info([Pe.bold("Launch controls"),...u.map(p=>` ${p}`),"",Pe.dim("Direct launch: mach start --ios | --android | --web"),Pe.dim(`Metro URL: http://localhost:${a}`)].join(`
2001
- `))}else ct.info(Pe.dim(`Metro URL: http://localhost:${a}`));let c=Vf(l,d,{stdio:"inherit",env:r});return new Promise((u,p)=>{c.on("exit",m=>{m===0?u():p(new Error(`Dev server exited with code ${m}`))}),c.on("error",m=>{p(m)})})};import{log as Ie}from"@clack/prompts";import Oe from"chalk";var ul=async e=>{let t=re();t||(Ie.error(Oe.red(`No ${f.configFileName} found in the current directory.`)),process.exit(1));let n=e.profile||"development",i=_e(t,n);if(e.json){console.log(JSON.stringify({project:t,resolved:i},null,2));return}Ie.info(Oe.bgBlue.white(` Resolved ${f.name} Config [${n}] `)),Ie.info(Oe.dim("----------------------------------------")),Ie.info(`${Oe.blue("Project ID:")} ${t.projectId}`),Ie.info(`${Oe.blue("Name:")} ${t.name}`),Ie.info(`${Oe.blue("Scheme:")} ${t.scheme}`),Ie.info(`${Oe.blue("App directory:")} ${t.appDirectory||"."}`),i?(Ie.info(Oe.dim(`
1999
+ `)||l.includes("\r")?`${s}${c}'${ce}',${l}`:`${s}${c}'${ce}',${s}${c}${l.trim()}${s}${a}`,p=`${o[0].slice(0,o[0].indexOf("[")+1)}${u}]`;return H.writeFileSync(n,`${i.slice(0,o.index)}${p}${i.slice(o.index+o[0].length)}`),"inserted"}async function Df(e,t,n){let i=[];if(vf(e)){let o=ui(e),s=!!(n.installPlugin||n.yes);if(!s&&!n.skipInstall&&Kr()){let a=await tl({message:o?`Update the local ${f.npmScope}/mach Expo plugin (${o} \u2192 ${it})?`:`Install ${f.npmScope}/mach locally so Expo can use ${ce}?`,initialValue:!0});pi(a)&&fi(),s=!!a}if(s&&!n.skipInstall){let a=Rf(e);a.ok?i.push(`Installed a compatible ${ce} with ${a.label}.`):i.push(`Could not install ${f.npmScope}/mach with ${a.label}: ${a.error||"unknown error"}.`)}else i.push(`Install ${f.npmScope}/mach@${it} or newer in this app so Expo can resolve ${ce}.`)}else i.push(`Local ${ce} is compatible (${ui(e)}).`);let r=Of(e);if(r==="already"&&i.push(`Expo config already includes ${ce}.`),r==="inserted"&&i.push(`Expo config updated to include ${ce}.`),r==="manual"&&i.push(`Add "${ce}" to the plugins array in app.config.ts/app.config.js.`),r==="missing"){let o=Pf(e,t);o?i.push(`${o} updated to include ${ce}.`):i.push(`Add "${ce}" to your Expo config plugins array.`)}return i}async function Xa(e,t){if(t.skipInstall)return!1;if(t.yes)return!0;if(!Kr())return!1;let n=await tl({message:e,initialValue:!0});return pi(n)&&fi(),!!n}async function Cf(e,t,n){let i=[];if(t==="react-native"&&!yt(e,"expo"))if(await Xa("Install Expo Modules required by the Mach OTA runtime? This updates package and native project files.",n)){let o=So(e);if(!o.ok||!yt(e,"expo"))throw new Error(`Expo Modules installation failed: ${o.error||o.command}`);i.push("Installed and configured Expo Modules for the existing React Native project.")}else i.push("Expo Modules are required. Run `npx install-expo-modules@latest`, then run `mach ota setup` again.");if(!yt(e,"expo-updates"))if(await Xa("Install the expo-updates runtime?",n)){let o=bo(e);if(!o.ok||!yt(e,"expo-updates"))throw new Error(`expo-updates installation failed: ${o.error||o.command}`);i.push("Installed the Expo-compatible expo-updates version.")}else i.push("Install expo-updates with `npx expo install expo-updates`, then run `mach ota setup` again.");return i}async function Za(e,t,n,i,r){if(t)return t;if(r||!Kr()){if(i)throw new Error(`${e.replace(/:$/,"")} is required.`);return}let o=await Ef({message:e,placeholder:n,validate(s){if(i&&s.trim().length===0)return"Required."}});return pi(o)&&fi(),Ae(o)}function Jr(e,t,n){return qt(e,{runtimeVersion:t.runtimeVersion,framework:ve(t.framework)||ve(e.framework),platform:n})}function Tf(e){let t=Yt(process.cwd(),e);if(!t)throw new Error(`Resolved Expo OTA configuration does not match this publish: Expo config could not be resolved. Run \`mach ota setup\` to update ${ce}, then create a new native build if its embedded runtime changes.`);let n=[];if(t.runtimeVersion!==e.runtimeVersion&&n.push(`runtime is ${t.runtimeVersion||"missing"} (expected ${e.runtimeVersion})`),t.channel!==e.channel&&n.push(`channel is ${t.channel||"missing"} (expected ${e.channel})`),t.url!==e.url&&n.push(`URL is ${t.url||"missing"} (expected ${e.url})`),n.length>0)throw new Error(`Resolved Expo OTA configuration does not match this publish: ${n.join("; ")}. Run \`mach ota setup\` to update ${ce}, then create a new native build if its embedded runtime changes.`);return t}function Nf(e){return zr.createHash("sha256").update(H.readFileSync(e)).digest("hex")}function kf(e){let t=ee.extname(e).toLowerCase();return t===".json"?"application/json":t===".js"||t===".bundle"||t===".hbc"?"application/javascript":t===".map"?"application/json":t===".png"?"image/png":t===".jpg"||t===".jpeg"?"image/jpeg":t===".webp"?"image/webp":t===".gif"?"image/gif":t===".svg"?"image/svg+xml":t===".ttf"?"font/ttf":t===".otf"?"font/otf":t===".woff"?"font/woff":t===".woff2"?"font/woff2":"application/octet-stream"}function sl(e){let t=[];if(!H.existsSync(e))return t;for(let n of H.readdirSync(e)){let i=ee.join(e,n),r=H.statSync(i);r.isDirectory()?t.push(...sl(i)):r.isFile()&&t.push(i)}return t}function xf(e,t){let n=e.filter(i=>{let r=i.toLowerCase();return r.endsWith(".map")?!1:r.endsWith(".js")||r.endsWith(".bundle")||r.endsWith(".hbc")});return n.find(i=>i.toLowerCase().includes(t))||n.sort((i,r)=>H.statSync(r).size-H.statSync(i).size)[0]}async function Qa(e){let t=await w.post("/ota/upload-url",{projectId:e.projectId,updateId:e.updateId,platform:e.platform,fileName:e.fileName,contentType:e.contentType});if(t.data.status!=="success")throw new Error(t.data.message||`Could not create upload URL for ${e.fileName}`);let n=H.statSync(e.filePath).size;return await _f.put(t.data.uploadUrl,H.createReadStream(e.filePath),{headers:{"Content-Type":e.contentType,"Content-Length":n},maxBodyLength:1/0,maxContentLength:1/0}),{key:t.data.key,url:t.data.publicUrl,contentType:e.contentType,hash:Nf(e.filePath),size:n}}function al(e,t,n,i={}){let r=nl(e,t,{cwd:n,stdio:"inherit",env:{...process.env,CI:process.env.CI||"1",EXPO_NO_TELEMETRY:"1",...i}});if(r.error)throw new Error(r.error.message);if(r.status!==0)throw new Error(`${e} ${t.join(" ")} exited with code ${r.status}`)}function Lf(e,t,n,i,r){al("npx",["expo","export","--platform",e,"--output-dir",t],process.cwd(),{MACH_OTA_RUNTIME_VERSION:n,MACH_OTA_CHANNEL:i,MACH_OTA_URL:r})}function Mf(e,t){let n=e==="ios"?"main.jsbundle":"index.android.bundle",r=["index.js","index.ts","index.tsx"].find(s=>H.existsSync(ee.join(process.cwd(),s)))||"index.js",o=ee.join(t,"assets");H.mkdirSync(o,{recursive:!0}),al("npx",["react-native","bundle","--platform",e,"--dev","false","--entry-file",r,"--bundle-output",ee.join(t,n),"--assets-dest",o],process.cwd())}async function Uf(e){let t=e.config.projectId,n=`ota_${Date.now()}_${e.platform}_${zr.randomUUID().slice(0,8)}`,i=ee.join(process.cwd(),".mach","ota",n,e.platform);H.rmSync(i,{recursive:!0,force:!0}),H.mkdirSync(i,{recursive:!0}),e.engine==="expo-updates"?Lf(e.platform,i,e.runtimeVersion,e.channel,e.config.ota?.url||""):Mf(e.platform,i);let r=e.engine==="expo-updates"?Ka(i,e.platform):void 0,o=r?Wa(i,r):sl(i),s=r?ee.join(i,r.bundle):xf(o,e.platform);if(!s)throw new Error(`Could not find a ${e.platform} JS bundle in ${i}.`);let a=new Map((r?.assets||[]).map(A=>[A.path,A])),l=[];for(let A of o){let D=ee.relative(i,A).replace(/\\/g,"/"),_=a.get(D),Y=A===s?"application/javascript":_?ci(_.ext):kf(A);l.push({filePath:A,relative:D,uploaded:await Qa({projectId:t,updateId:n,platform:e.platform,filePath:A,fileName:D,contentType:Y})})}let d=l.find(A=>A.filePath===s),c=e.engine==="expo-updates"?zr.randomUUID():void 0,u=e.engine==="expo-updates"?qa(e.expoConfig):void 0;if(e.engine==="expo-updates"&&(!u||Object.keys(u).length===0))throw new Error("Could not resolve the public Expo config required by the OTA manifest. Run `mach ota verify` and try again.");let p=r?r.assets.map(A=>{let D=l.find(_=>_.relative===A.path);if(!D)throw new Error(`Could not find uploaded Expo asset ${A.path}.`);return{key:Gr(D.filePath),url:D.uploaded.url,contentType:ci(A.ext),fileExtension:Ya(A.ext),hash:Vr(D.filePath),size:D.uploaded.size}}):l.filter(A=>A.filePath!==s&&!A.relative.endsWith(".map")).map(A=>({key:A.relative,url:A.uploaded.url,contentType:A.uploaded.contentType,hash:A.uploaded.hash,size:A.uploaded.size})),m=r?{key:Gr(d.filePath),url:d.uploaded.url,contentType:ci(void 0,!0),hash:Vr(d.filePath),size:d.uploaded.size}:{key:ee.basename(d.relative),url:d.uploaded.url,contentType:d.uploaded.contentType,hash:d.uploaded.hash,size:d.uploaded.size},h={id:c||n,createdAt:new Date().toISOString(),runtimeVersion:e.runtimeVersion,launchAsset:m,assets:p,metadata:{projectId:t,channel:e.channel,...e.message?{message:e.message}:{},engine:e.engine},extra:{...u?{expoClient:u}:{},mach:{projectId:t,updateId:n,...c?{expoUpdateId:c}:{},channel:e.channel,platform:e.platform}}},g=ee.join(i,"mach-manifest.json");H.writeFileSync(g,JSON.stringify(h,null,2));let S=await Qa({projectId:t,updateId:n,platform:e.platform,filePath:g,fileName:"manifest.json",contentType:"application/json"}),b=await w.post("/ota/publish",{projectId:t,updateId:n,expoUpdateId:c,channelName:e.channel,runtimeVersion:e.runtimeVersion,platform:e.platform,manifestKey:S.key,message:e.message,launchAsset:m,assets:p});if(b.data.status!=="success")throw new Error(b.data.message||`Failed to publish ${e.platform} OTA update.`);return b.data.update}async function Ff(e){let t=bn(),n=ve(e.framework)||Wr(t),i;try{i=rl(Yr(e.engine,n))}catch(p){Re.error(p.message),process.exit(1)}let r=!!e.yes,o=await Za("OTA channel:",Ae(e.channel||e.branch||t.ota?.channel)||"production","production",!0,r),s=`${tt.replace(/\/$/,"")}/api/ota/expo/${t.projectId}`,a=Ae(e.url||t.ota?.url),l=a?.includes("/api/ota/react-native/")?void 0:a,d=await Za("Mach OTA update URL:",l||s,s,!0,r);t.framework=n;let c={...t.ota||{},enabled:!0,engine:i,channel:o,url:d,deploymentUrl:d,runtimeVersionPolicy:t.ota?.runtimeVersionPolicy||"appVersion"};delete c.statsUrl,t.ota=c,delete t.update,wf(t);let u=[`${f.configFileName} updated.`];if(u.push(...await Cf(process.cwd(),n,e)),u.push(...await Df(process.cwd(),n,e)),n==="react-native"&&yt(process.cwd(),"expo")&&yt(process.cwd(),"expo-updates")&&mi(process.cwd())){let p=qr(e.platform||"all"),m=Mi(process.cwd()).filter(h=>p.includes(h));m.length===0&&u.push("No matching committed ios/android project was found for native configuration sync.");for(let h of m){let g=Jr(t,e,h),b=Io({cwd:process.cwd(),platforms:[h],runtimeVersion:g,channel:o,url:d}).find(A=>!A.ok);if(b)throw new Error(`Could not synchronize ${h} Expo Updates configuration: ${b.error||b.command}`);u.push(`Synchronized ${h} native Expo Updates configuration for runtime ${g}.`)}}u.push("Create and install one new native build after initial OTA setup. Existing app binaries keep their embedded update URL."),Sf(u.map(p=>`- ${p}`).join(`
2000
+ `),"OTA setup"),await ll({...e,action:"verify"})}async function Bf(e){wt();let t=bn(),n=ve(e.framework)||Wr(t),i;try{i=rl(Yr(e.engine||t.ota?.engine,n))}catch(a){Re.error(`${a.message} Run \`mach ota setup\` to migrate this project.`),process.exit(1)}let r=Ae(e.channel||e.branch||t.ota?.channel)||"production",o=qr(e.platform||"all"),s=If();s.start(`Publishing OTA update (${o.join("+")}, ${r})`);try{let a=[];for(let l of o){let d=Jr(t,e,l),c=Tf({platform:l,runtimeVersion:d,channel:r,url:Ae(t.ota?.url)||""});s.message(`Exporting and uploading ${l} OTA bundle for runtime ${d}...`),a.push(await Uf({config:t,engine:i,platform:l,channel:r,runtimeVersion:d,message:e.message,expoConfig:c.expoConfig}))}if(s.stop("OTA update published."),e.json)Re.info(JSON.stringify({status:"success",updates:a},null,2));else{let l=Array.from(new Set(a.map(d=>d.runtimeVersion).filter(Boolean)));xt(Me.green(`\u2713 OTA update live on "${r}" for runtime ${l.join(", ")||"unknown"}.`));for(let d of a)Re.info(Me.dim(`${d.platform}: ${d.updateId}`))}}catch(a){s.stop("OTA publish failed."),Re.error(a.response?.data?.message||a.message),process.exit(1)}}async function ll(e){let t=bn(),n=ve(e.framework)||Wr(t),i=Yr(e.engine||t.ota?.engine,n),r=[],o=t.ota;if(r.push(o?.enabled?{level:"pass",message:"mach.config.json has ota.enabled."}:{level:"fail",message:"mach.config.json is missing ota.enabled. Run `mach ota setup`."}),r.push(o?.url?{level:"pass",message:`OTA URL configured: ${o.url}`}:{level:"fail",message:"OTA URL is missing. Run `mach ota setup`."}),r.push(o?.channel?{level:"pass",message:`Default channel: ${o.channel}`}:{level:"warn",message:"No default OTA channel configured; publish will use production."}),r.push(o?.runtimeVersionPolicy||o?.runtimeVersion?{level:"pass",message:"Runtime version policy configured."}:{level:"warn",message:"No explicit runtime policy configured; Mach will use Expo runtimeVersion or package.json version."}),i==="expo-updates"){let a=Lt(ee.join(process.cwd(),"package.json"))||{},l={...a.dependencies||{},...a.devDependencies||{}};n==="react-native"&&r.push(l.expo?{level:"pass",message:"Expo Modules are installed for the bare React Native project."}:{level:"fail",message:"Expo Modules are missing. Run `mach ota setup` to install the bare React Native OTA runtime."}),r.push(l["expo-updates"]?{level:"pass",message:"expo-updates is installed."}:{level:"fail",message:"expo-updates is missing. Run `mach ota setup`."}),r.push(mi(process.cwd())?{level:"pass",message:`${f.npmScope}/mach is installed locally for the Expo plugin.`}:{level:"fail",message:`${f.npmScope}/mach is not installed locally; run \`mach ota setup\`.`});let d=qr(e.platform||"all"),c=Ae(e.channel||e.branch||o?.channel)||"production",u=Ae(o?.url)||"",p=d.map(h=>{let g=Jr(t,e,h);return{platform:h,runtimeVersion:g,delivery:Yt(process.cwd(),{platform:h,runtimeVersion:g,channel:c,url:u})}}),m=p[0]?.delivery;if(m){let h=m.expoConfig.updates?.enabled!==!1,g=Ae(m.expoConfig.updates?.checkAutomatically)?.toUpperCase()||"ON_LOAD";r.push(m.url===o?.url?{level:"pass",message:"Expo Updates URL resolves to Mach."}:{level:"warn",message:`Expo Updates URL resolves to ${m.url||"none"} instead of ${o?.url||"the Mach OTA URL"}.`}),r.push(m.channel===c?{level:"pass",message:`Expo update channel header resolves to ${c}.`}:{level:"warn",message:`Expo update channel header is ${m.channel||"not set"}; install the latest ${f.npmScope}/mach package and rebuild.`}),r.push(h?{level:"pass",message:"Expo Updates is enabled."}:{level:"fail",message:"Expo config has updates.enabled=false, so this app cannot receive OTA updates."}),r.push(g!=="NEVER"&&g!=="ON_ERROR_RECOVERY"?{level:"pass",message:`Expo checks for updates automatically (${g}).`}:{level:"fail",message:`Expo checkAutomatically is ${g}; use ON_LOAD to receive Mach updates when the app starts.`})}else r.push({level:"fail",message:`Could not resolve Expo config. Confirm ${ce} is present and run \`mach ota setup\` again.`});for(let{platform:h,runtimeVersion:g,delivery:S}of p)r.push(S?.runtimeVersion===g?{level:"pass",message:`${h} Expo runtime resolves to ${g}.`}:{level:"fail",message:`${h} Expo runtime resolves to ${S?.runtimeVersion||"none"} instead of ${g}. Run \`mach ota setup\`, then rebuild the app.`});if(n==="react-native"){let h=d,g=Mi(process.cwd()).filter(b=>h.includes(b)),S=Eo(process.cwd());if(g.includes("android")){let b=!!(S.androidManifest&&S.androidStrings)&&H.readFileSync(S.androidManifest,"utf-8").includes("expo.modules.updates.EXPO_UPDATE_URL")&&H.readFileSync(S.androidStrings,"utf-8").includes("expo_runtime_version");r.push(b?{level:"pass",message:"Android native Expo Updates configuration is synchronized."}:{level:"fail",message:"Android native Expo Updates configuration is missing. Run `mach ota setup --platform android`."})}if(g.includes("ios")){let b=!!S.iosExpoPlist&&H.readFileSync(S.iosExpoPlist,"utf-8").includes("EXUpdatesURL")&&H.readFileSync(S.iosExpoPlist,"utf-8").includes("EXUpdatesRuntimeVersion");r.push(b?{level:"pass",message:"iOS native Expo Updates configuration is synchronized."}:{level:"fail",message:"iOS native Expo Updates configuration is missing. Run `mach ota setup --platform ios`."})}}}else r.push({level:"fail",message:"mach-react-native is not available yet. Run `mach ota setup` to migrate this project to expo-updates."});for(let a of r){let l=a.level==="pass"?Me.green("PASS"):a.level==="warn"?Me.yellow("WARN"):Me.red("FAIL");Re.info(`${l} ${a.message}`)}let s=r.filter(a=>a.level==="fail").length;s>0&&(xt(Me.red(`OTA verification failed with ${s} issue(s).`)),process.exit(1)),xt(Me.green("OTA verification passed."))}async function jf(e){wt();let t=bn(),n=await w.get(`/ota/${t.projectId}/updates`),i=n.data.updates||[];if(e.json){Re.info(JSON.stringify(n.data,null,2));return}if(i.length===0){xt("No OTA updates found.");return}for(let r of i){let o=r.stats?.total||{};Re.info(`${Me.bold(r.updateId)} ${Me.dim(`${r.platform} ${r.channelName} runtime ${r.runtimeVersion}`)} ${r.status||"active"}`),Re.info(Me.dim(` downloads ios=${o.iosDownloaded||0} android=${o.androidDownloaded||0} applied ios=${o.iosApplied||0} android=${o.androidApplied||0}`))}xt(`Found ${i.length} OTA update(s).`)}async function el(e,t){wt();let n=bn(),i=Ae(t.updateId);i||(Re.error(`Missing update id. Use \`${f.nameLower} ota ${e} --update-id <id>\`.`),process.exit(1));let r=await w.post(`/ota/${n.projectId}/updates/${encodeURIComponent(i)}/${e}`);t.json?Re.info(JSON.stringify(r.data,null,2)):xt(Me.green(`\u2713 OTA update ${e==="rollback"?"rolled back":"promoted"}: ${i}`))}async function ct(e,t={}){let n=e||t.action||"publish";if(n==="setup")return Ff({...t,action:n});if(n==="publish")return Bf({...t,action:n});if(n==="verify")return ll({...t,action:n});if(n==="list")return jf({...t,action:n});if(n==="rollback")return el("rollback",{...t,action:n});if(n==="promote")return el("promote",{...t,action:n});let i=await bf({message:"What do you want to do?",options:[{value:"setup",label:"Setup OTA"},{value:"publish",label:"Publish OTA update"},{value:"verify",label:"Verify OTA setup"},{value:"list",label:"List OTA updates"}]});return pi(i)&&fi(),ct(i,t)}import{intro as Hf,outro as dl,log as Mt}from"@clack/prompts";import Ve from"chalk";async function cl(){Hf(Ve.blue(`${f.name} CLI - User Profile`));let e=ye();if(!e){Mt.warn(Ve.yellow("You are not logged in.")),Mt.info(`Run \`${f.nameLower} login\` to authenticate.`),dl();return}Mt.info(`${Ve.bold("Logged in as:")} ${Ve.green(e.email)}`);try{await w.get("/projects");let n=ye().token.split(".");if(n.length===3){let i=JSON.parse(Buffer.from(n[1],"base64").toString());if(i.exp){let r=new Date(i.exp*1e3),o=new Date,s=r.getTime()-o.getTime();if(s>0){let a=Math.round(s/6e4),l=(a/60).toFixed(1);Mt.info(`${Ve.bold("Token status:")} Valid (Expires in ~${l}h / ${a}m)`)}else Mt.warn(`${Ve.bold("Token status:")} ${Ve.red("Expired")} (Auto-refresh failed)`)}}}catch{Mt.warn(`${Ve.bold("Token status:")} ${Ve.red("Unreachable")} (Session might be truly expired)${tt}`)}dl(Ve.blue("---"))}import{spawn as zf}from"child_process";import{log as ut}from"@clack/prompts";import Pe from"chalk";import Kf from"fs";import Gf from"net";async function Vf(e){return new Promise(t=>{let n=Gf.createServer();n.once("error",i=>{i.code==="EADDRINUSE"?t(!0):t(!1)}),n.once("listening",()=>{n.close(),t(!1)}),n.listen(e,"0.0.0.0")})}async function ul(e,t=20){let n=e;for(;n<e+t;){if(!await Vf(n))return n;n++}throw new Error(`Could not find an available port after ${t} attempts starting from ${e}.`)}var pl=async e=>{ut.info(Pe.blue(`Starting ${f.name} Dev Orchestrator...`));let t=re(),n=e.buildProfile||"development",i=t?_e(t,n):null,r={...process.env};if(t?.projectId)try{ut.info(Pe.dim(`Fetching managed secrets for profile: ${n}...`));let u=await w.get(`/projects/${t.projectId}/secrets/export?env=${n}`);u.data?.status==="success"&&u.data.secrets&&(Object.assign(r,u.data.secrets),ut.info(Pe.magenta(`\u2713 Injected secrets from ${f.name} Dashboard.`)))}catch{ut.warn("Could not fetch managed secrets. Running with local env only.")}t&&Object.assign(r,$t(t,f.envPrefix)),i&&(Object.assign(r,$t(i,`${f.envPrefix}PROFILE_`)),i.env&&Object.assign(r,i.env));let o=!1;try{let u=JSON.parse(Kf.readFileSync("package.json","utf-8"));o=!!(u.dependencies?.expo||u.devDependencies?.expo)}catch{ut.warn("Could not parse package.json. Defaulting to Bare React Native mode.")}let s=Number(e.port||i?.port||8081),a=await ul(s);a!==s&&ut.info(Pe.yellow(`Port ${s} is busy. ${f.name} is using ${a} instead.`));let l=process.platform==="win32"?"npx.cmd":"npx",d=[];if(o?(d=["expo","start","--port",String(a)],e.clear&&d.push("--clear"),e.tunnel&&d.push("--tunnel"),e.lan&&d.push("--lan"),e.localhost&&d.push("--localhost"),e.ios&&d.push("--ios"),e.android&&d.push("--android"),e.web&&d.push("--web")):(d=["react-native","start","--port",String(a)],e.clear&&d.push("--clear")),o){let u=[`${Pe.cyan("i")} open iOS simulator`,`${Pe.cyan("a")} open Android emulator/device`,`${Pe.cyan("w")} open web`,`${Pe.cyan("r")} reload app`];ut.info([Pe.bold("Launch controls"),...u.map(p=>` ${p}`),"",Pe.dim("Direct launch: mach start --ios | --android | --web"),Pe.dim(`Metro URL: http://localhost:${a}`)].join(`
2001
+ `))}else ut.info(Pe.dim(`Metro URL: http://localhost:${a}`));let c=zf(l,d,{stdio:"inherit",env:r});return new Promise((u,p)=>{c.on("exit",m=>{m===0?u():p(new Error(`Dev server exited with code ${m}`))}),c.on("error",m=>{p(m)})})};import{log as Ie}from"@clack/prompts";import Oe from"chalk";var fl=async e=>{let t=re();t||(Ie.error(Oe.red(`No ${f.configFileName} found in the current directory.`)),process.exit(1));let n=e.profile||"development",i=_e(t,n);if(e.json){console.log(JSON.stringify({project:t,resolved:i},null,2));return}Ie.info(Oe.bgBlue.white(` Resolved ${f.name} Config [${n}] `)),Ie.info(Oe.dim("----------------------------------------")),Ie.info(`${Oe.blue("Project ID:")} ${t.projectId}`),Ie.info(`${Oe.blue("Name:")} ${t.name}`),Ie.info(`${Oe.blue("Scheme:")} ${t.scheme}`),Ie.info(`${Oe.blue("App directory:")} ${t.appDirectory||"."}`),i?(Ie.info(Oe.dim(`
2002
2002
  Profile Settings:`)),Ie.info(`${Oe.cyan("Distribution:")} ${i.distribution||"none"}`),Ie.info(`${Oe.cyan("Development Client:")} ${i.developmentClient||"false"}`),i.env&&Object.keys(i.env).length>0&&(Ie.info(Oe.dim(`
2003
- Environment Variables:`)),Object.entries(i.env).forEach(([r,o])=>{Ie.info(` ${r}=${o}`)}))):Ie.warn(`Profile '${n}' not found.`),Ie.info(Oe.dim("----------------------------------------"))};import{cancel as pm,confirm as ro,isCancel as Bt,log as wi,note as fm,outro as $i,select as mm,text as Dl}from"@clack/prompts";import Fe from"chalk";import gm from"fs";import Rl from"path";import It from"fs";import Ut from"path";var Ft="./plugins/withMachDeepLinks",Yr="mach.deep-links.json",fl=["/*"],qr=e=>{if(typeof e!="string")return;let t=e.trim();return t.length>0?t:void 0},hi=e=>{let t=new Set,n=[];for(let i of e){let r=qr(i);!r||t.has(r)||(t.add(r),n.push(r))}return n},Ue=(...e)=>{for(let t of e){let n=qr(t);if(n)return n}},pl=(e,t)=>e.length!==t.length?!1:e.every((n,i)=>n===t[i]);function ml(e){if(typeof e!="string")return;let t=e.trim().toLowerCase();if(t==="ios"||t==="android"||t==="all")return t}function In(e){let t=e.includes("://")?e:`https://${e}`,n=new URL(t),i=n.pathname==="/"?"":n.pathname.replace(/\/+$/,"");return`${n.protocol}//${n.host}${i}`}function gi(e){return new URL(In(e)).hostname}function yi(e){return e.trim().toLowerCase().replace(/[^a-z0-9+.-]/g,"-").replace(/^-+|-+$/g,"")||"app"}function gl(e=process.cwd()){let t=Ut.join(e,"package.json"),n=["app.json","app.config.json","app.config.js","app.config.ts"].some(r=>It.existsSync(Ut.join(e,r))),i=!1;if(It.existsSync(t))try{let r=JSON.parse(It.readFileSync(t,"utf-8"));i=!!(r.dependencies?.expo||r.devDependencies?.expo)}catch{i=!1}return n&&i?"expo":It.existsSync(Ut.join(e,"ios"))||It.existsSync(Ut.join(e,"android"))?"react-native":Ln}function hl(e,t,n){if(t)return t;let i=!!(e.ios?.bundleIdentifier||n?.ios?.bundleIdentifier||e.deepLinks?.ios?.bundleIdentifier),r=!!(e.android?.package||n?.android?.package||n?.android?.applicationId||e.deepLinks?.android?.package);return i&&!r?"ios":r&&!i?"android":"all"}function Ai(e=process.cwd(),t){let n=t?.deepLinks?.web?.outputDir;return n||(It.existsSync(Ut.join(e,"public"))?"public":"deep-links")}function yl(e,t){let n=e.deepLinks,i=In(t.baseUrl||n?.baseUrl||(t.domain?`https://${t.domain}`:"")),r=qr(t.domain)||(t.baseUrl?gi(i):n?.domain)||gi(i),o=t.profile||n?.profile||"production",s=_e(e,o)||{},a=s.ios||{},l=s.android||{},d=e.submit?.[o]?.ios||{},c=e.submit?.[o]?.android||{},u=yi(t.scheme||n?.scheme||a.scheme||e.scheme||e.slug||e.name||"app"),p=gt(e,o),m=hi([...t.androidFingerprint||[],...n?.android?.sha256CertFingerprints||[],...l.sha256CertFingerprints||[],...e.android?.sha256CertFingerprints||[]]);return{baseUrl:i,domain:r,scheme:u,profile:o!=="production"?o:void 0,paths:n?.paths?.length?n.paths:["/*"],ios:{appStoreId:Ue(t.appStoreId,n?.ios?.appStoreId,a.ascAppId,d.ascAppId,e.ios?.ascAppId),appleTeamId:Ue(t.appleTeamId,n?.ios?.appleTeamId,a.appleTeamId,a.developerTeamId,d.appleTeamId,d.developerTeamId,e.ios?.appleTeamId,e.ios?.developerTeamId,p.teamId),bundleIdentifier:Ue(t.iosBundleId,n?.ios?.bundleIdentifier,a.bundleIdentifier,a.bundleId,e.ios?.bundleIdentifier,e.ios?.bundleId,e.expo?.ios?.bundleIdentifier),webCredentials:!!n?.ios?.webCredentials,activityContinuation:!!n?.ios?.activityContinuation},android:{package:Ue(t.androidPackage,n?.android?.package,l.package,l.applicationId,e.android?.package,e.expo?.android?.package,c.packageName,c.package),sha256CertFingerprints:m,loginCredentials:!!n?.android?.loginCredentials},web:{smartAppBanner:n?.web?.smartAppBanner??!0,outputDir:t.output||n?.web?.outputDir||Ai(process.cwd(),e)}}}function Si(e,t={}){let n=e.deepLinks,i=t.profile||n?.profile||"production",r=t.expoHints||null,o=Ue(n?.baseUrl,r?.domain?`https://${r.domain}`:void 0);if(!o)return null;let s=In(o),a=_e(e,i)||{},l=a.ios||{},d=a.android||{},c=e.submit?.[i]?.ios||{},u=e.submit?.[i]?.android||{},p=gt(e,i),m=Ue(n?.domain,r?.domain)||gi(s),h=yi(Ue(n?.scheme,l.scheme,e.scheme,r?.scheme,e.slug,e.name,"app")||"app"),g=n?.paths?.length?n.paths:[...fl];return{baseUrl:s,domain:m,scheme:h,profile:i!=="production"?i:void 0,paths:g,ios:{appStoreId:Ue(n?.ios?.appStoreId,l.ascAppId,c.ascAppId,e.ios?.ascAppId),appleTeamId:Ue(n?.ios?.appleTeamId,l.appleTeamId,l.developerTeamId,c.appleTeamId,c.developerTeamId,e.ios?.appleTeamId,e.ios?.developerTeamId,p.teamId),bundleIdentifier:Ue(n?.ios?.bundleIdentifier,l.bundleIdentifier,l.bundleId,e.ios?.bundleIdentifier,e.ios?.bundleId,e.expo?.ios?.bundleIdentifier,r?.iosBundleIdentifier),webCredentials:!!n?.ios?.webCredentials,activityContinuation:!!n?.ios?.activityContinuation},android:{package:Ue(n?.android?.package,d.package,d.applicationId,e.android?.package,e.expo?.android?.package,u.packageName,u.package,r?.androidPackage),sha256CertFingerprints:hi([...n?.android?.sha256CertFingerprints||[],...d.sha256CertFingerprints||[],...e.android?.sha256CertFingerprints||[]]),loginCredentials:!!n?.android?.loginCredentials},web:{smartAppBanner:n?.web?.smartAppBanner??!0,outputDir:n?.web?.outputDir||Ai(t.cwd||process.cwd(),e)}}}function bi(e,t,n="production",i=process.cwd()){return t?.domain?Si({...e,deepLinks:{baseUrl:`https://${t.domain}`,domain:t.domain,scheme:t.scheme}},{profile:n,cwd:i,expoHints:t}):null}function Kf(e,t,n=t.profile||"production"){let i=Si({...e,deepLinks:{baseUrl:t.baseUrl}},{profile:n}),r={baseUrl:t.baseUrl};n!=="production"&&(r.profile=n),t.domain&&t.domain!==gi(t.baseUrl)&&(r.domain=t.domain),t.scheme&&t.scheme!==i?.scheme&&(r.scheme=t.scheme),t.paths?.length&&!pl(t.paths,fl)&&(r.paths=t.paths);let o={};t.ios?.bundleIdentifier&&t.ios.bundleIdentifier!==i?.ios?.bundleIdentifier&&(o.bundleIdentifier=t.ios.bundleIdentifier),t.ios?.appleTeamId&&t.ios.appleTeamId!==i?.ios?.appleTeamId&&(o.appleTeamId=t.ios.appleTeamId),t.ios?.appStoreId&&t.ios.appStoreId!==i?.ios?.appStoreId&&(o.appStoreId=t.ios.appStoreId),t.ios?.webCredentials&&(o.webCredentials=!0),t.ios?.activityContinuation&&(o.activityContinuation=!0),Object.keys(o).length>0&&(r.ios=o);let s={};t.android?.package&&t.android.package!==i?.android?.package&&(s.package=t.android.package);let a=t.android?.sha256CertFingerprints||[],l=i?.android?.sha256CertFingerprints||[];a.length>0&&!pl(a,l)&&(s.sha256CertFingerprints=a),t.android?.loginCredentials&&(s.loginCredentials=!0),Object.keys(s).length>0&&(r.android=s);let d={outputDir:t.web?.outputDir||"deep-links"};return t.web?.smartAppBanner===!1&&(d.smartAppBanner=!1),r.web=d,r}function Al(e,t,n,i=n.profile||"production"){let r={...e,framework:t,scheme:e.scheme||n.scheme};return{...r,deepLinks:Kf(r,n,i)}}function Sl(e,t=process.cwd()){let n=Ut.join(t,"mach.config.json");return It.writeFileSync(n,`${JSON.stringify(e,null,2)}
2004
- `),n}import ue from"fs";import he from"path";import{spawnSync as bl}from"child_process";var En="@radhya/mach/expo-plugin",Wf=`const fs = require('fs')
2003
+ Environment Variables:`)),Object.entries(i.env).forEach(([r,o])=>{Ie.info(` ${r}=${o}`)}))):Ie.warn(`Profile '${n}' not found.`),Ie.info(Oe.dim("----------------------------------------"))};import{cancel as fm,confirm as ao,isCancel as Bt,log as wi,note as mm,outro as $i,select as gm,text as Tl}from"@clack/prompts";import Fe from"chalk";import hm from"fs";import Ol from"path";import Et from"fs";import Ut from"path";var Ft="./plugins/withMachDeepLinks",Xr="mach.deep-links.json",gl=["/*"],Zr=e=>{if(typeof e!="string")return;let t=e.trim();return t.length>0?t:void 0},hi=e=>{let t=new Set,n=[];for(let i of e){let r=Zr(i);!r||t.has(r)||(t.add(r),n.push(r))}return n},Ue=(...e)=>{for(let t of e){let n=Zr(t);if(n)return n}},ml=(e,t)=>e.length!==t.length?!1:e.every((n,i)=>n===t[i]);function hl(e){if(typeof e!="string")return;let t=e.trim().toLowerCase();if(t==="ios"||t==="android"||t==="all")return t}function In(e){let t=e.includes("://")?e:`https://${e}`,n=new URL(t),i=n.pathname==="/"?"":n.pathname.replace(/\/+$/,"");return`${n.protocol}//${n.host}${i}`}function gi(e){return new URL(In(e)).hostname}function yi(e){return e.trim().toLowerCase().replace(/[^a-z0-9+.-]/g,"-").replace(/^-+|-+$/g,"")||"app"}function yl(e=process.cwd()){let t=Ut.join(e,"package.json"),n=["app.json","app.config.json","app.config.js","app.config.ts"].some(r=>Et.existsSync(Ut.join(e,r))),i=!1;if(Et.existsSync(t))try{let r=JSON.parse(Et.readFileSync(t,"utf-8"));i=!!(r.dependencies?.expo||r.devDependencies?.expo)}catch{i=!1}return n&&i?"expo":Et.existsSync(Ut.join(e,"ios"))||Et.existsSync(Ut.join(e,"android"))?"react-native":Ln}function Al(e,t,n){if(t)return t;let i=!!(e.ios?.bundleIdentifier||n?.ios?.bundleIdentifier||e.deepLinks?.ios?.bundleIdentifier),r=!!(e.android?.package||n?.android?.package||n?.android?.applicationId||e.deepLinks?.android?.package);return i&&!r?"ios":r&&!i?"android":"all"}function Ai(e=process.cwd(),t){let n=t?.deepLinks?.web?.outputDir;return n||(Et.existsSync(Ut.join(e,"public"))?"public":"deep-links")}function Sl(e,t){let n=e.deepLinks,i=In(t.baseUrl||n?.baseUrl||(t.domain?`https://${t.domain}`:"")),r=Zr(t.domain)||(t.baseUrl?gi(i):n?.domain)||gi(i),o=t.profile||n?.profile||"production",s=_e(e,o)||{},a=s.ios||{},l=s.android||{},d=e.submit?.[o]?.ios||{},c=e.submit?.[o]?.android||{},u=yi(t.scheme||n?.scheme||a.scheme||e.scheme||e.slug||e.name||"app"),p=ht(e,o),m=hi([...t.androidFingerprint||[],...n?.android?.sha256CertFingerprints||[],...l.sha256CertFingerprints||[],...e.android?.sha256CertFingerprints||[]]);return{baseUrl:i,domain:r,scheme:u,profile:o!=="production"?o:void 0,paths:n?.paths?.length?n.paths:["/*"],ios:{appStoreId:Ue(t.appStoreId,n?.ios?.appStoreId,a.ascAppId,d.ascAppId,e.ios?.ascAppId),appleTeamId:Ue(t.appleTeamId,n?.ios?.appleTeamId,a.appleTeamId,a.developerTeamId,d.appleTeamId,d.developerTeamId,e.ios?.appleTeamId,e.ios?.developerTeamId,p.teamId),bundleIdentifier:Ue(t.iosBundleId,n?.ios?.bundleIdentifier,a.bundleIdentifier,a.bundleId,e.ios?.bundleIdentifier,e.ios?.bundleId,e.expo?.ios?.bundleIdentifier),webCredentials:!!n?.ios?.webCredentials,activityContinuation:!!n?.ios?.activityContinuation},android:{package:Ue(t.androidPackage,n?.android?.package,l.package,l.applicationId,e.android?.package,e.expo?.android?.package,c.packageName,c.package),sha256CertFingerprints:m,loginCredentials:!!n?.android?.loginCredentials},web:{smartAppBanner:n?.web?.smartAppBanner??!0,outputDir:t.output||n?.web?.outputDir||Ai(process.cwd(),e)}}}function Si(e,t={}){let n=e.deepLinks,i=t.profile||n?.profile||"production",r=t.expoHints||null,o=Ue(n?.baseUrl,r?.domain?`https://${r.domain}`:void 0);if(!o)return null;let s=In(o),a=_e(e,i)||{},l=a.ios||{},d=a.android||{},c=e.submit?.[i]?.ios||{},u=e.submit?.[i]?.android||{},p=ht(e,i),m=Ue(n?.domain,r?.domain)||gi(s),h=yi(Ue(n?.scheme,l.scheme,e.scheme,r?.scheme,e.slug,e.name,"app")||"app"),g=n?.paths?.length?n.paths:[...gl];return{baseUrl:s,domain:m,scheme:h,profile:i!=="production"?i:void 0,paths:g,ios:{appStoreId:Ue(n?.ios?.appStoreId,l.ascAppId,c.ascAppId,e.ios?.ascAppId),appleTeamId:Ue(n?.ios?.appleTeamId,l.appleTeamId,l.developerTeamId,c.appleTeamId,c.developerTeamId,e.ios?.appleTeamId,e.ios?.developerTeamId,p.teamId),bundleIdentifier:Ue(n?.ios?.bundleIdentifier,l.bundleIdentifier,l.bundleId,e.ios?.bundleIdentifier,e.ios?.bundleId,e.expo?.ios?.bundleIdentifier,r?.iosBundleIdentifier),webCredentials:!!n?.ios?.webCredentials,activityContinuation:!!n?.ios?.activityContinuation},android:{package:Ue(n?.android?.package,d.package,d.applicationId,e.android?.package,e.expo?.android?.package,u.packageName,u.package,r?.androidPackage),sha256CertFingerprints:hi([...n?.android?.sha256CertFingerprints||[],...d.sha256CertFingerprints||[],...e.android?.sha256CertFingerprints||[]]),loginCredentials:!!n?.android?.loginCredentials},web:{smartAppBanner:n?.web?.smartAppBanner??!0,outputDir:n?.web?.outputDir||Ai(t.cwd||process.cwd(),e)}}}function bi(e,t,n="production",i=process.cwd()){return t?.domain?Si({...e,deepLinks:{baseUrl:`https://${t.domain}`,domain:t.domain,scheme:t.scheme}},{profile:n,cwd:i,expoHints:t}):null}function Wf(e,t,n=t.profile||"production"){let i=Si({...e,deepLinks:{baseUrl:t.baseUrl}},{profile:n}),r={baseUrl:t.baseUrl};n!=="production"&&(r.profile=n),t.domain&&t.domain!==gi(t.baseUrl)&&(r.domain=t.domain),t.scheme&&t.scheme!==i?.scheme&&(r.scheme=t.scheme),t.paths?.length&&!ml(t.paths,gl)&&(r.paths=t.paths);let o={};t.ios?.bundleIdentifier&&t.ios.bundleIdentifier!==i?.ios?.bundleIdentifier&&(o.bundleIdentifier=t.ios.bundleIdentifier),t.ios?.appleTeamId&&t.ios.appleTeamId!==i?.ios?.appleTeamId&&(o.appleTeamId=t.ios.appleTeamId),t.ios?.appStoreId&&t.ios.appStoreId!==i?.ios?.appStoreId&&(o.appStoreId=t.ios.appStoreId),t.ios?.webCredentials&&(o.webCredentials=!0),t.ios?.activityContinuation&&(o.activityContinuation=!0),Object.keys(o).length>0&&(r.ios=o);let s={};t.android?.package&&t.android.package!==i?.android?.package&&(s.package=t.android.package);let a=t.android?.sha256CertFingerprints||[],l=i?.android?.sha256CertFingerprints||[];a.length>0&&!ml(a,l)&&(s.sha256CertFingerprints=a),t.android?.loginCredentials&&(s.loginCredentials=!0),Object.keys(s).length>0&&(r.android=s);let d={outputDir:t.web?.outputDir||"deep-links"};return t.web?.smartAppBanner===!1&&(d.smartAppBanner=!1),r.web=d,r}function bl(e,t,n,i=n.profile||"production"){let r={...e,framework:t,scheme:e.scheme||n.scheme};return{...r,deepLinks:Wf(r,n,i)}}function Il(e,t=process.cwd()){let n=Ut.join(t,"mach.config.json");return Et.writeFileSync(n,`${JSON.stringify(e,null,2)}
2004
+ `),n}import ue from"fs";import ge from"path";import{spawnSync as El}from"child_process";var En="@radhya/mach/expo-plugin",Yf=`const fs = require('fs')
2005
2005
  const path = require('path')
2006
2006
 
2007
2007
  const unique = values => Array.from(new Set(values.filter(Boolean)))
@@ -2121,24 +2121,24 @@ module.exports = function withMachDeepLinks(config) {
2121
2121
  config.android.intentFilters = intentFilters
2122
2122
  return config
2123
2123
  }
2124
- `,_n=e=>{if(typeof e=="string"){if(e===En)return En;if(e===Ft||e===Ft.replace(/^\.\//,""))return Ft}},Xr=e=>Array.isArray(e)?Xr(e[0]):_n(e),Il=e=>!!Xr(e),Yf=(e,t)=>{let n=_n(t)||t;return Xr(e)===n},qf=(e,t)=>Array.isArray(e)?[t,...e.slice(1)]:t,Jf=(e,t)=>{let n=Array.isArray(e.plugins)?e.plugins:[];if(n.findIndex(o=>Yf(o,t))>=0)return e.plugins=n,"already";let r=n.findIndex(Il);return r>=0?(n[r]=qf(n[r],t),e.plugins=n,"updated"):(n.push(t),e.plugins=n,"inserted")},Jr=/(['"`])((?:\.\/)?plugins\/withMachDeepLinks|@radhya\/mach\/expo-plugin)\1/g;function Ii(e){let t=he.join(e,"package.json");if(!ue.existsSync(t))return!1;try{let n=JSON.parse(ue.readFileSync(t,"utf-8"));return!!(n.dependencies?.["@radhya/mach"]||n.devDependencies?.["@radhya/mach"])}catch{return!1}}function Xf(e){return ue.existsSync(he.join(e,"pnpm-lock.yaml"))?{command:"pnpm",args:["add","-D","@radhya/mach@latest"],label:"pnpm add -D @radhya/mach@latest"}:ue.existsSync(he.join(e,"yarn.lock"))?{command:"yarn",args:["add","-D","@radhya/mach@latest"],label:"yarn add -D @radhya/mach@latest"}:ue.existsSync(he.join(e,"bun.lockb"))||ue.existsSync(he.join(e,"bun.lock"))?{command:"bun",args:["add","-d","@radhya/mach@latest"],label:"bun add -d @radhya/mach@latest"}:{command:"npm",args:["install","--save-dev","@radhya/mach@latest"],label:"npm install --save-dev @radhya/mach@latest"}}function Zf(e){let t=Xf(e),n=bl(t.command,t.args,{cwd:e,stdio:"inherit",env:{...process.env}});return n.error?{ok:!1,label:t.label,error:n.error.message}:n.status!==0?{ok:!1,label:t.label,error:`${t.command} exited with code ${n.status}`}:{ok:Ii(e),label:t.label}}function Qf(e,t){let n=ue.readFileSync(e,"utf-8"),i=Array.from(n.matchAll(Jr));if(i.length>0){let p=_n(t)||t,m=i.some(S=>_n(S[2])===p),h=i.some(S=>_n(S[2])!==p);if(m&&!h)return"already";let g=n.replace(Jr,(S,b)=>`${b}${t}${b}`);return ue.writeFileSync(e,g),"updated"}let r=/(^[ \t]*)plugins\s*:\s*\[([\s\S]*?)\]/m.exec(n);if(!r||r.index===void 0)return"unsupported";let o=n.includes(`\r
2124
+ `,_n=e=>{if(typeof e=="string"){if(e===En)return En;if(e===Ft||e===Ft.replace(/^\.\//,""))return Ft}},eo=e=>Array.isArray(e)?eo(e[0]):_n(e),_l=e=>!!eo(e),qf=(e,t)=>{let n=_n(t)||t;return eo(e)===n},Jf=(e,t)=>Array.isArray(e)?[t,...e.slice(1)]:t,Xf=(e,t)=>{let n=Array.isArray(e.plugins)?e.plugins:[];if(n.findIndex(o=>qf(o,t))>=0)return e.plugins=n,"already";let r=n.findIndex(_l);return r>=0?(n[r]=Jf(n[r],t),e.plugins=n,"updated"):(n.push(t),e.plugins=n,"inserted")},Qr=/(['"`])((?:\.\/)?plugins\/withMachDeepLinks|@radhya\/mach\/expo-plugin)\1/g;function Ii(e){let t=ge.join(e,"package.json");if(!ue.existsSync(t))return!1;try{let n=JSON.parse(ue.readFileSync(t,"utf-8"));return!!(n.dependencies?.["@radhya/mach"]||n.devDependencies?.["@radhya/mach"])}catch{return!1}}function Zf(e){return ue.existsSync(ge.join(e,"pnpm-lock.yaml"))?{command:"pnpm",args:["add","-D","@radhya/mach@latest"],label:"pnpm add -D @radhya/mach@latest"}:ue.existsSync(ge.join(e,"yarn.lock"))?{command:"yarn",args:["add","-D","@radhya/mach@latest"],label:"yarn add -D @radhya/mach@latest"}:ue.existsSync(ge.join(e,"bun.lockb"))||ue.existsSync(ge.join(e,"bun.lock"))?{command:"bun",args:["add","-d","@radhya/mach@latest"],label:"bun add -d @radhya/mach@latest"}:{command:"npm",args:["install","--save-dev","@radhya/mach@latest"],label:"npm install --save-dev @radhya/mach@latest"}}function Qf(e){let t=Zf(e),n=El(t.command,t.args,{cwd:e,stdio:"inherit",env:{...process.env}});return n.error?{ok:!1,label:t.label,error:n.error.message}:n.status!==0?{ok:!1,label:t.label,error:`${t.command} exited with code ${n.status}`}:{ok:Ii(e),label:t.label}}function em(e,t){let n=ue.readFileSync(e,"utf-8"),i=Array.from(n.matchAll(Qr));if(i.length>0){let p=_n(t)||t,m=i.some(S=>_n(S[2])===p),h=i.some(S=>_n(S[2])!==p);if(m&&!h)return"already";let g=n.replace(Qr,(S,b)=>`${b}${t}${b}`);return ue.writeFileSync(e,g),"updated"}let r=/(^[ \t]*)plugins\s*:\s*\[([\s\S]*?)\]/m.exec(n);if(!r||r.index===void 0)return"unsupported";let o=n.includes(`\r
2125
2125
  `)?`\r
2126
2126
  `:`
2127
2127
  `,s=r[1]||"",a=r[2]||"",d=a.match(/\r?\n([ \t]+)\S/)?.[1]||`${s} `,c=a.trim().length===0?`${o}${d}'${t}',${o}${s}`:a.includes(`
2128
- `)||a.includes("\r")?`${o}${d}'${t}',${a}`:`${o}${d}'${t}',${o}${d}${a.trim()}${o}${s}`,u=`${r[0].slice(0,r[0].indexOf("[")+1)}${c}]`;return ue.writeFileSync(e,`${n.slice(0,r.index)}${u}${n.slice(r.index+r[0].length)}`),"inserted"}function El(e,t,n={}){let i=[],r=[],o=[],s=Ii(e);if(!s&&n.installPackage){o.push("Installing @radhya/mach locally so Expo can use @radhya/mach/expo-plugin.");let u=Zf(e);u.ok?(s=!0,o.push(`Installed @radhya/mach with ${u.label}.`)):o.push(`Could not install @radhya/mach with ${u.label}: ${u.error||"unknown error"}. Falling back to local plugin.`)}let a=s?En:Ft;if(s)o.push(`Using packaged Expo plugin ${En}.`);else{let u=he.join(e,"plugins/withMachDeepLinks.js");ue.mkdirSync(he.dirname(u),{recursive:!0}),ue.writeFileSync(u,Wf),i.push(he.relative(e,u)),o.push(`Using local Expo plugin fallback ${Ft}. Install @radhya/mach in this app to use ${En}.`)}let l=["app.config.ts","app.config.js"].find(u=>ue.existsSync(he.join(e,u)));if(l){let u=he.join(e,l),p=Qf(u,a);return p==="inserted"?i.push(l):p==="updated"?(i.push(l),o.push(`${l} updated to use ${a}.`)):p==="already"?o.push(`${l} already includes the Mach Expo plugin.`):o.push(`Add "${a}" to the plugins array in ${l}. Mach could not safely auto-edit this dynamic config.`),{written:i,skipped:r,notes:o}}let d=["app.config.json","app.json"].find(u=>ue.existsSync(he.join(e,u)));if(!d)return r.push("Expo config plugin insertion: no app.json or app.config.json found."),{written:i,skipped:r,notes:o};let c=he.join(e,d);try{let u=JSON.parse(ue.readFileSync(c,"utf-8")),p=u.expo&&typeof u.expo=="object"?u.expo:u,m=Jf(p,a);ue.writeFileSync(c,`${JSON.stringify(u,null,2)}
2129
- `),i.push(d),m==="updated"&&o.push(`${d} updated to use ${a}.`)}catch(u){r.push(`Expo config plugin insertion failed: ${u.message}`)}return{written:i,skipped:r,notes:o}}function _l(e){let t=["app.config.ts","app.config.js"].find(i=>ue.existsSync(he.join(e,i)));if(t){let i=ue.readFileSync(he.join(e,t),"utf-8");return Jr.test(i)?"manual":"missing"}let n=["app.config.json","app.json"].find(i=>ue.existsSync(he.join(e,i)));if(!n)return"missing";try{let i=JSON.parse(ue.readFileSync(he.join(e,n),"utf-8")),r=i.expo&&typeof i.expo=="object"?i.expo:i;return Array.isArray(r.plugins)&&r.plugins.some(Il)?"wired":"missing"}catch{return"missing"}}function Zr(e){let t=bl("npx",["--no-install","expo","config","--type","public","--json"],{cwd:e,encoding:"utf-8",timeout:8e3,env:{...process.env,CI:"1",EXPO_NO_TELEMETRY:"1"}});if(t.error||t.status!==0||!t.stdout)return null;let n=t.stdout.trim(),i=n.indexOf("{");if(i<0)return null;try{return JSON.parse(n.slice(i))}catch{return null}}function em(e){if(!e||typeof e!="object")return null;let n=(Array.isArray(e.ios?.associatedDomains)?e.ios.associatedDomains:[]).map(s=>typeof s=="string"?s.match(/^applinks:(.+)$/)?.[1]:void 0).find(Boolean),r=(Array.isArray(e.android?.intentFilters)?e.android.intentFilters:[]).flatMap(s=>Array.isArray(s?.data)?s.data:[]).find(s=>s?.scheme==="https"&&typeof s.host=="string")?.host,o=n||r;return!o&&!e.scheme&&!e.ios?.bundleIdentifier&&!e.android?.package?null:{domain:o,scheme:typeof e.scheme=="string"?e.scheme:void 0,iosBundleIdentifier:typeof e.ios?.bundleIdentifier=="string"?e.ios.bundleIdentifier:void 0,androidPackage:typeof e.android?.package=="string"?e.android.package:void 0}}function Ei(e){return em(Zr(e))}import ze from"fs";import we from"path";var tm=e=>{ze.mkdirSync(we.dirname(e),{recursive:!0})},wl=(e,t)=>{tm(e),ze.writeFileSync(e,`${JSON.stringify(t,null,2)}
2130
- `)};var nm=e=>{let t=e.ios?.appleTeamId,n=e.ios?.bundleIdentifier;return!t||!n?null:`${t}.${n}`};function Qr(e){let t=nm(e);if(!t)return null;let n=e.paths?.length?e.paths:["/*"],i=n.map(s=>s==="/*"?"*":s),r=n.map(s=>({"/":s,comment:s==="/*"?"Matches all URLs":`Matches ${s}`})),o={applinks:{apps:[],details:[{appIDs:[t],components:r,appID:t,paths:i}]}};return e.ios?.webCredentials&&(o.webcredentials={apps:[t]}),e.ios?.activityContinuation&&(o.activitycontinuation={apps:[t]}),o}function im(e){let t=e.android?.package;return t?[{relation:["delegate_permission/common.handle_all_urls",...e.android?.loginCredentials?["delegate_permission/common.get_login_creds"]:[]],target:{namespace:"android_app",package_name:t,sha256_cert_fingerprints:e.android?.sha256CertFingerprints||[]}}]:null}function rm(e,t){let n=t.ios?.appStoreId;if(!n||!ze.existsSync(e))return!1;let i=`<meta name="apple-itunes-app" content="app-id=${n}, app-argument=${t.baseUrl}" />`,r=ze.readFileSync(e,"utf-8");if(/name=["']apple-itunes-app["']/i.test(r)){let o=r.replace(/<meta[^>]+name=["']apple-itunes-app["'][^>]*>/i,i);return ze.writeFileSync(e,o),!0}return/<head[^>]*>/i.test(r)?(ze.writeFileSync(e,r.replace(/<head([^>]*)>/i,`<head$1>
2131
- ${i}`)),!0):!1}function $l(e,t){let n=[],i=[],r=[],o=t.web?.outputDir||"deep-links",s=we.join(e,o),a=Qr(t);if(a){let u=hi([we.join(s,".well-known/apple-app-site-association"),we.join(s,".well-known/apple-app-site-association.json"),we.join(s,"apple-app-site-association"),we.join(s,"apple-app-site-association.json")]);for(let p of u)wl(p,a),n.push(we.relative(e,p))}else i.push("Apple AASA files: missing ios.appleTeamId or ios.bundleIdentifier");let l=im(t);if(l){let u=we.join(s,".well-known/assetlinks.json");wl(u,l),n.push(we.relative(e,u)),t.android?.sha256CertFingerprints?.length||r.push("assetlinks.json was generated without SHA256 fingerprints. Add them before Android App Links can verify.")}else i.push("Android assetlinks.json: missing android.package");let d=we.join(e,Yr);ze.existsSync(d)&&(ze.unlinkSync(d),r.push(`Removed legacy ${Yr}; mach.config.json is now the source of truth.`));let c=we.join(s,"index.html");return t.web?.smartAppBanner&&rm(c,t)?n.push(we.relative(e,c)):t.web?.smartAppBanner&&t.ios?.appStoreId?r.push(`Smart App Banner skipped because ${we.relative(e,c)} was not found.`):t.web?.smartAppBanner&&r.push("Smart App Banner skipped because ios.appStoreId is not configured."),o!=="public"&&r.push(`Host ${o}/.well-known files at https://${t.domain}/.well-known/.`),{written:n,skipped:i,notes:r}}function eo(e){if(!ze.existsSync(e))return null;try{return JSON.parse(ze.readFileSync(e,"utf-8"))}catch{return null}}import ut from"fs";import pt from"path";import{spawnSync as om}from"child_process";var N=(e,t)=>({level:e,message:t}),vl=(e,t)=>pt.join(e,t.web?.outputDir||"deep-links");function sm(e,t,n="fail"){let i=[],r=vl(e,t),o=pt.join(r,".well-known/apple-app-site-association");if(!Qr(t))return i.push(N("warn","Skipping AASA verification because ios.appleTeamId or ios.bundleIdentifier is missing.")),i;if(!ut.existsSync(o))return i.push(N(n,`${pt.relative(e,o)} is missing.`)),i;ut.statSync(o).size>128*1024?i.push(N("fail","Apple AASA file is larger than 128 KB.")):i.push(N("pass","Apple AASA file is under 128 KB."));let l=eo(o);if(!l)return i.push(N("fail","Apple AASA file is not valid JSON.")),i;let d=`${t.ios?.appleTeamId}.${t.ios?.bundleIdentifier}`,c=l.applinks?.details||[],u=Array.isArray(c)&&c.some(p=>p.appID===d||p.appIDs?.includes(d));if(i.push(u?N("pass",`AASA contains ${d}.`):N("fail",`AASA does not contain ${d}.`)),t.ios?.webCredentials){let p=l.webcredentials?.apps,m=Array.isArray(p)&&p.includes(d);i.push(m?N("pass",`AASA enables iOS Web Credentials for ${d}.`):N("fail",`AASA is missing iOS Web Credentials for ${d}.`))}return i}function am(e,t,n="fail"){let i=[],r=vl(e,t),o=pt.join(r,".well-known/assetlinks.json");if(!t.android?.package)return i.push(N("warn","Skipping Android Asset Links verification because android.package is missing.")),i;if(!ut.existsSync(o))return i.push(N(n,`${pt.relative(e,o)} is missing.`)),i;let s=eo(o);if(!s||!Array.isArray(s))return i.push(N("fail","assetlinks.json is not a valid JSON array.")),i;let a=s.find(d=>d?.target?.package_name===t.android?.package);i.push(a?N("pass",`assetlinks.json contains ${t.android.package}.`):N("fail",`assetlinks.json does not contain ${t.android.package}.`));let l=a?.target?.sha256_cert_fingerprints;if(i.push(Array.isArray(l)&&l.length>0?N("pass","assetlinks.json has at least one SHA256 fingerprint."):N("warn","assetlinks.json has no SHA256 fingerprints.")),t.android?.loginCredentials){let d=a?.relation,c=Array.isArray(d)&&d.includes("delegate_permission/common.get_login_creds");i.push(c?N("pass","assetlinks.json enables Android Login Credentials."):N("fail","assetlinks.json is missing Android Login Credentials."))}return i}function lm(e,t,n,i){if(t.framework!=="expo")return[];let r=[],o=Zr(e),a=(Array.isArray(o?.ios?.associatedDomains)?o.ios.associatedDomains:[]).includes(`applinks:${n.domain}`);r.push(a?N("pass",`Expo iOS config contains applinks:${n.domain}.`):N(i?"warn":"fail",`Expo iOS config does not contain applinks:${n.domain}.`));let d=(Array.isArray(o?.android?.intentFilters)?o.android.intentFilters:[]).flatMap(u=>Array.isArray(u?.data)?u.data:[]).some(u=>u?.scheme==="https"&&u.host===n.domain);if(r.push(d?N("pass",`Expo Android config contains App Link host ${n.domain}.`):N(i?"warn":"fail",`Expo Android config does not contain App Link host ${n.domain}.`)),i)return r.push(N("warn","mach.config.json is missing deepLinks; values were inferred from Expo config. Run `mach deeplink setup` to persist Mach metadata and generate hosted files.")),r;let c=_l(e);return c==="wired"?r.push(N("pass","Expo deep link plugin is wired into Expo config and derives values from mach.config.json.")):c==="manual"&&a&&d?r.push(N("pass","Expo resolved config contains the deep-link settings from the dynamic config.")):c==="manual"?r.push(N("warn","Expo deep link plugin exists, but dynamic or missing Expo config means manual plugin insertion must be confirmed.")):a&&d?r.push(N("warn","Expo plugin is not wired, but resolved Expo config already contains the deep-link settings.")):r.push(N("fail","Expo deep link plugin is missing or not wired into Expo config.")),r}function dm(e,t,n){if(t.framework!=="react-native")return[];let i=[],r=pt.join(e,"android/app/src/main/AndroidManifest.xml");if(ut.existsSync(r)){let s=ut.readFileSync(r,"utf-8");i.push(s.includes(`android:host="${n.domain}"`)?N("pass","AndroidManifest.xml contains the App Links host."):N("warn","AndroidManifest.xml does not contain the App Links host. Native patching is planned for a later phase."))}let o=pt.join(e,"ios");if(ut.existsSync(o)){let a=ut.readdirSync(o,{recursive:!0}).filter(l=>typeof l=="string"&&l.endsWith(".entitlements")).some(l=>ut.readFileSync(pt.join(o,l),"utf-8").includes(`applinks:${n.domain}`));i.push(a?N("pass","iOS entitlements contain the associated domain."):N("warn","iOS entitlements do not contain the associated domain. Native patching is planned for a later phase."))}return i}async function to(e,t){let n=[];try{let i=await fetch(e,{redirect:"manual"});if(i.status>=300&&i.status<400&&!t)return n.push(N("fail",`${e} redirects. Apple AASA endpoints must not redirect.`)),n;n.push(i.status===200?N("pass",`${e} returned HTTP 200.`):N("fail",`${e} returned HTTP ${i.status}.`));let r=i.headers.get("content-type")||"";!r.includes("application/json")&&!r.includes("text/json")&&n.push(N("warn",`${e} content-type is "${r||"missing"}"; application/json is recommended.`)),JSON.parse(await i.text()),n.push(N("pass",`${e} contains valid JSON.`))}catch(i){n.push(N("fail",`${e} check failed: ${i.message}`))}return n}async function cm(e){let t=e.domain;return(await Promise.all([to(`https://${t}/.well-known/apple-app-site-association`,!1),to(`https://${t}/apple-app-site-association`,!1),to(`https://${t}/.well-known/assetlinks.json`,!0)])).flat()}function um(e){let t=e.android?.package;if(!t)return[N("warn","Cannot print Android device verification commands because android.package is missing.")];let i=om("adb",["version"],{encoding:"utf-8"}).status===0?"Run":"Install Android platform-tools, then run";return[N("info",`${i}: adb shell pm set-app-links --package ${t} 0 all`),N("info",`${i}: adb shell pm verify-app-links --re-verify ${t}`),N("info",`${i}: adb shell pm get-app-links ${t}`)]}async function no(e,t,n){let i=n.profile||t.deepLinks?.profile||"production",r=t.framework==="expo"?Ei(e):null,o=t.framework==="expo"?bi(t,r,i,e):null,s=!t.deepLinks&&!!o,a=t.deepLinks?Si(t,{profile:i,cwd:e,expoHints:r}):o,l=[];if(!a)return[N("fail","mach.config.json is missing deepLinks and Mach could not infer existing deep-link settings. Run `mach deeplink setup`.")];l.push(a.baseUrl?N("pass","deepLinks.baseUrl is configured."):N("fail","deepLinks.baseUrl is missing.")),l.push(a.domain?N("pass","deepLinks.domain is configured."):N("fail","deepLinks.domain is missing.")),l.push(a.scheme?N("pass","deepLinks.scheme is configured."):N("fail","deepLinks.scheme is missing."));let d=s?"warn":"fail";return l.push(...sm(e,a,d)),l.push(...am(e,a,d)),l.push(...lm(e,t,a,s)),l.push(...dm(e,t,a)),n.live&&l.push(...await cm(a)),n.androidDevice&&l.push(...um(a)),l}var jt=()=>process.stdin.isTTY&&process.stdout.isTTY,Pl=`${f.npmScope}/mach`,Ht=()=>{pm("Operation cancelled."),process.exit(0)},oo=e=>{if(typeof e!="string")return;let t=e.trim();return t.length>0?t:void 0},Ze=(...e)=>{for(let t of e){let n=oo(t);if(n)return n}},Et=async(e,t,n,i,r)=>{if(t)return t;if(r||!jt()){if(i)throw new Error(`${e.replace(/:$/,"")} is required. Pass it as an option or run interactively.`);return}let o=await Dl({message:e,initialValue:t||"",placeholder:n,validate(s){if(i&&s.trim().length===0)return"Required."}});return Bt(o)&&Ht(),oo(o)},Ol=async(e,t,n)=>{if(n||!jt())return t;let i=await ro({message:e,initialValue:t});return Bt(i)&&Ht(),!!i};async function hm(e,t,n){let i=ve(e.framework),r=ve(t);if(r)return r;if(i)return i;let o=gl();if(n||!jt())return o;let s=await mm({message:`Which framework should ${f.name} configure?`,initialValue:o,options:[{value:"expo",label:"Expo"},{value:"react-native",label:"React Native"},{value:"flutter",label:"Flutter (not supported yet)"}]});return Bt(s)&&Ht(),s}var wn=e=>e==="ios"||e==="all",_i=e=>e==="android"||e==="all";async function ym(e,t,n){if(t!=="expo"||Ii(e)||n.installPlugin===!1)return!1;if(n.installPlugin===!0||n.yes)return!0;if(!jt())return!1;let i=await ro({message:`Install ${Pl} locally so Expo can use ${Pl}/expo-plugin?`,initialValue:!0});return Bt(i)&&Ht(),!!i}async function Am(e,t){let n=!!t.yes,i=t.profile||e.deepLinks?.profile||"production",r=_e(e,i)||{},o=r.ios||{},s=r.android||{},a=e.submit?.[i]?.ios||{},l=e.submit?.[i]?.android||{},d=gt(e,i),c=await hm(e,t.framework,n);if(c==="flutter")throw new Error("Flutter deep-link automation is planned but not supported yet.");let u=hl(e,ml(t.platform),r),p=e.deepLinks,h=c==="expo"&&(!Ze(t.baseUrl,p?.baseUrl,t.domain?`https://${t.domain}`:void 0)||!Ze(t.scheme,p?.scheme,o.scheme,e.scheme,e.slug,e.name)||wn(u)&&!Ze(t.iosBundleId,p?.ios?.bundleIdentifier,o.bundleIdentifier,o.bundleId,e.ios?.bundleIdentifier)||_i(u)&&!Ze(t.androidPackage,p?.android?.package,s.package,s.applicationId,e.android?.package,l.packageName,l.package))?bi(e,Ei(process.cwd()),i,process.cwd()):null,g=t.output||p?.web?.outputDir||Ai(process.cwd(),e),S=await Et("Deep link base URL:",t.baseUrl||p?.baseUrl||(t.domain?`https://${t.domain}`:void 0)||h?.baseUrl,"https://app.example.com",!0,n),b=In(S),A=t.baseUrl?new URL(b).hostname:void 0,D=await Et("Associated domain:",t.domain||A||p?.domain||h?.domain||new URL(b).hostname,"app.example.com",!0,n),I=yi(await Et("URI scheme:",Ze(t.scheme,p?.scheme,o.scheme,e.scheme,h?.scheme,e.slug,e.name,"app"),"myapp",!0,n)||"app"),H=wn(u)?await Et("iOS bundle identifier:",Ze(t.iosBundleId,p?.ios?.bundleIdentifier,o.bundleIdentifier,o.bundleId,e.ios?.bundleIdentifier,h?.ios?.bundleIdentifier),"com.example.app",!0,n):p?.ios?.bundleIdentifier||e.ios?.bundleIdentifier,Q=wn(u)?await Et("Apple Team ID:",Ze(t.appleTeamId,p?.ios?.appleTeamId,o.appleTeamId,o.developerTeamId,a.appleTeamId,a.developerTeamId,e.ios?.appleTeamId,e.ios?.developerTeamId,d.teamId),"ABCDE12345",!0,n):p?.ios?.appleTeamId||e.ios?.appleTeamId,z=wn(u)?await Et("App Store ID (optional, for Smart App Banner):",Ze(t.appStoreId,p?.ios?.appStoreId,o.ascAppId,a.ascAppId,e.ios?.ascAppId),"1234567890",!1,n):p?.ios?.appStoreId,me=wn(u)?await Ol("Enable iOS Web Credentials for HTTPS OAuth callbacks?",!!p?.ios?.webCredentials,n):!!p?.ios?.webCredentials,oe=_i(u)?await Et("Android package name:",Ze(t.androidPackage,p?.android?.package,s.package,s.applicationId,e.android?.package,l.packageName,l.package,h?.android?.package),"com.example.app",!0,n):p?.android?.package||e.android?.package,ke=p?.android?.sha256CertFingerprints||[],ye=t.androidFingerprint||[],y=e.android?.sha256CertFingerprints||[],$=s.sha256CertFingerprints||[],v=[...ye,...ke,...$,...y].filter(Boolean);if(_i(u)&&v.length===0&&!n&&jt()){let P=await Dl({message:"Android SHA256 fingerprint (optional now, required for verified App Links):",placeholder:"AA:BB:CC:..."});Bt(P)&&Ht(),oo(P)&&v.push(P)}let R=_i(u)?await Ol("Enable Android Login Credentials for website password and passkey sharing?",!!p?.android?.loginCredentials,n):!!p?.android?.loginCredentials,x=yl(e,{...t,baseUrl:b,domain:D,scheme:I,output:g,appleTeamId:Q,appStoreId:z,androidFingerprint:v});return x.ios={...x.ios||{},bundleIdentifier:H,appleTeamId:Q,appStoreId:z,webCredentials:me},x.android={...x.android||{},package:oe,sha256CertFingerprints:Array.from(new Set(v)),loginCredentials:R},{framework:c,platform:u,deepLinks:x}}var io=(e,t)=>{t.length!==0&&fm(t.map(n=>`- ${n}`).join(`
2132
- `),e)},Cl=e=>e.filter(t=>t.level==="fail").length;function Tl(e){for(let t of e){let n=t.level==="pass"?Fe.green("PASS"):t.level==="warn"?Fe.yellow("WARN"):t.level==="info"?Fe.cyan("INFO"):Fe.red("FAIL");wi.info(`${n} ${t.message}`)}}async function Nl(e){try{let t=process.cwd(),n=Rl.join(t,f.configFileName),i=re()||{};if(!gm.existsSync(n)){let b=e.yes||!jt()?!0:await ro({message:`${f.configFileName} was not found. Create one with deep link settings?`,initialValue:!0});if(Bt(b)&&Ht(),!b)return}let{framework:r,deepLinks:o}=await Am(i,e),s=e.profile||i.deepLinks?.profile||"production",a=Al(i,r,o,s),l=Sl(a,t),d=$l(t,o),c=await ym(t,r,e),u=r==="expo"?El(t,o,{installPackage:c}):{written:[],skipped:[],notes:r==="react-native"?["React Native native patching is planned for a later phase. Hosted files were generated now."]:[]},p=[Rl.relative(t,l),...d.written,...u.written],m=[...d.skipped,...u.skipped],h=[...d.notes,...u.notes];io("Written",p),io("Skipped",m),io("Notes",h);let g=await no(t,a,{});Tl(g);let S=Cl(g);if(S>0){$i(Fe.yellow(`Deep link setup finished with ${S} verification issue(s).`));return}$i(Fe.green("Deep link setup complete."))}catch(t){wi.error(Fe.red(t.message||"Deep link setup failed.")),process.exit(1)}}async function kl(e){try{let t=re();t||(wi.error(Fe.red(`No ${f.configFileName} found in the current directory.`)),process.exit(1));let n=await no(process.cwd(),t,e);Tl(n);let i=Cl(n);i>0&&($i(Fe.red(`Deep link verification failed with ${i} issue(s).`)),process.exit(1)),$i(Fe.green("Deep link verification passed."))}catch(t){wi.error(Fe.red(t.message||"Deep link verification failed.")),process.exit(1)}}import{log as Qe,spinner as xl}from"@clack/prompts";import ft from"chalk";var Sm=e=>{let t=String(e||"").trim().toLowerCase();if(t==="ios"||t==="android")return t;throw new Error("Pass --platform ios or --platform android.")},bm=e=>{let t=Number(e);if(!Number.isFinite(t))throw new Error("Counter value must be a non-negative integer.");let n=Math.floor(t);if(n<0)throw new Error("Counter value must be a non-negative integer.");return n},Im=(e,t,n)=>{let i=String(n.scope||"").trim();if(i)return i;let r=n.profile||"production",o=e==="android"?n.package||n.androidPackage:n.bundleId||n.iosBundleIdentifier;if(o)return String(o).trim();let s=e==="android"?Mn(t,r):Un(t,r);if(s)return s;throw new Error(e==="android"?`Could not resolve Android package. Set android.package in ${f.configFileName}, or pass --package/--scope.`:`Could not resolve iOS bundle identifier. Set ios.bundleIdentifier in ${f.configFileName}, or pass --bundle-id/--scope.`)},Em=()=>{let e=re();if(!e)throw new Error(`No ${f.configFileName} found in the current directory. Run \`${f.nameLower} init\` or \`${f.nameLower} link\` first.`);if(!e.projectId)throw new Error(`${f.configFileName} is missing projectId.`);return e},so=e=>{Qe.info(ft.bgBlue.white(" Native Version Counter ")),Qe.info(`${ft.blue("Platform:")} ${e.platform}`),Qe.info(`${ft.blue("Scope:")} ${e.scope}`),Qe.info(`${ft.blue("Current DB value:")} ${e.current}`),Qe.info(`${ft.blue("Next build will use:")} ${e.next}`),e.seeded||Qe.warn(ft.yellow("This counter has not been seeded yet. Existing store apps should run `mach version seed` once before auto-version builds."))};async function ao(e,t={}){if(!Ae()){Qe.error(`You are not logged in. Run \`${f.nameLower} login\` first.`);return}try{let i=Em(),r=Sm(t.platform),o=Im(r,i,t),s=String(i.projectId);if(e==="show"){let c=xl();t.json||c.start("Fetching native version counter...");let{data:u}=await w.get(`/projects/${s}/version-counters`,{params:{platform:r,scope:o}});if(u.status!=="success")throw new Error(u.message||"Failed to fetch version counter.");t.json?console.log(JSON.stringify(u.counter,null,2)):(c.stop("Fetched native version counter."),so(u.counter));return}let a=bm(t.value),l=xl();t.json||l.start("Seeding native version counter...");let{data:d}=await w.post(`/projects/${s}/version-counters/seed`,{platform:r,scope:o,value:a,force:!!t.force});if(d.status!=="success")throw new Error(d.message||"Failed to seed version counter.");t.json?console.log(JSON.stringify(d.counter,null,2)):(l.stop(`Seeded ${r} counter for ${o}.`),so(d.counter))}catch(i){let r=i?.response?.data?.message||i?.message||"Version command failed.";if(i?.response?.data?.counter&&!t.json){Qe.error(ft.red(r)),so(i.response.data.counter);return}t.json?console.log(JSON.stringify({status:"error",message:r},null,2)):Qe.error(ft.red(r))}}import{log as De,spinner as Rn,text as Ll,select as Ml,confirm as _m,isCancel as $n,cancel as vn,outro as Pn,note as wm}from"@clack/prompts";import K from"chalk";import{execSync as $m}from"child_process";async function vm(){try{let e=$m("xcrun devicectl list devices --json-output -",{stdio:["pipe","pipe","pipe"]}).toString();return(JSON.parse(e).result?.devices||[]).filter(i=>i.connectionProperties?.transportType==="wired"||i.connectionProperties?.transportType==="localNetwork").map(i=>({udid:i.identifier,name:i.deviceProperties?.name||"Unknown Device",model:i.hardwareProperties?.marketingName||"iPhone"}))}catch{return[]}}var Ul=e=>e?.trim().toUpperCase()||void 0;function Fl(e){let t=re(),n=t?gt(t):{},i=Ul(e.teamId),r=i||n.teamId;return{...n,teamId:r,developerTeamId:i||n.developerTeamId||r}}async function Rm(e){let t=e.udid,n=e.name,i=Fl(e),r=i.teamId;if(!t){let s=Rn();s.start("Scanning for connected iOS devices...");let a=await vm();if(s.stop(a.length>0?`Found ${a.length} device(s)`:"No devices detected"),a.length===1)t=a[0].udid,n=n||a[0].name,De.info(`Detected: ${K.bold(n)} (${K.dim(t.substring(0,12)+"...")})`);else if(a.length>1){let l=await Ml({message:"Select a device to register:",options:a.map(c=>({value:c.udid,label:`${c.name} (${c.model})`,hint:c.udid.substring(0,12)+"..."}))});if($n(l)){vn("Cancelled");return}t=l;let d=a.find(c=>c.udid===t);n=n||d.name}else{De.info(K.dim("No connected devices found. Enter UDID manually."));let l=await Ll({message:"Device UDID:",placeholder:"00008101-XXXXXXXXXXXX",validate(d){if(d.length<10)return"UDID seems too short"}});if($n(l)){vn("Cancelled");return}t=l}}if(!n){let s=await Ll({message:"Device name:",placeholder:"Nitesh's iPhone",validate(a){if(a.length===0)return"Name is required"}});if($n(s)){vn("Cancelled");return}n=s}let o=Rn();o.start("Registering device...");try{await w.post("/devices",{udid:t,name:n,platform:"ios",addedVia:"cli",teamId:r,teamName:i.teamName,developerTeamId:i.developerTeamId,appStoreConnectTeamId:i.appStoreConnectTeamId,providerId:i.providerId,providerName:i.providerName}),o.stop(K.green("Device registered!")),De.info(` ${K.bold("Name:")} ${n}`),De.info(` ${K.bold("UDID:")} ${K.dim(t)}`),r&&De.info(` ${K.bold("Team:")} ${K.dim(r)}`)}catch(s){o.stop(K.red("Failed to register device")),De.error(s.response?.data?.message||s.message)}Pn(K.blue("---"))}async function Pm(e={}){let t=Ul(e.teamId),n=Rn();n.start("Fetching registered devices...");try{let r=(await w.get("/devices",t?{params:{teamId:t}}:void 0)).data.devices||[];if(n.stop(`${r.length} device(s) registered${t?` for team ${t}`:""}`),r.length===0){De.info(K.dim(`No devices registered yet. Run \`${f.nameLower} device register\` to add one.`)),Pn(K.blue("---"));return}let o=r.map(s=>{let a=new Date(s.createdAt).toLocaleDateString();return` ${K.bold(s.name.padEnd(24))} ${K.dim(s.udid.padEnd(28))} ${K.dim((s.teamId||"-").padEnd(12))} ${K.cyan((s.addedVia||"-").padEnd(10))} ${K.dim(a)}`});wm(` ${K.bold("Name".padEnd(24))} ${"UDID".padEnd(28)} ${"Team".padEnd(12)} ${"Via".padEnd(10)} Date
2128
+ `)||a.includes("\r")?`${o}${d}'${t}',${a}`:`${o}${d}'${t}',${o}${d}${a.trim()}${o}${s}`,u=`${r[0].slice(0,r[0].indexOf("[")+1)}${c}]`;return ue.writeFileSync(e,`${n.slice(0,r.index)}${u}${n.slice(r.index+r[0].length)}`),"inserted"}function wl(e,t,n={}){let i=[],r=[],o=[],s=Ii(e);if(!s&&n.installPackage){o.push("Installing @radhya/mach locally so Expo can use @radhya/mach/expo-plugin.");let u=Qf(e);u.ok?(s=!0,o.push(`Installed @radhya/mach with ${u.label}.`)):o.push(`Could not install @radhya/mach with ${u.label}: ${u.error||"unknown error"}. Falling back to local plugin.`)}let a=s?En:Ft;if(s)o.push(`Using packaged Expo plugin ${En}.`);else{let u=ge.join(e,"plugins/withMachDeepLinks.js");ue.mkdirSync(ge.dirname(u),{recursive:!0}),ue.writeFileSync(u,Yf),i.push(ge.relative(e,u)),o.push(`Using local Expo plugin fallback ${Ft}. Install @radhya/mach in this app to use ${En}.`)}let l=["app.config.ts","app.config.js"].find(u=>ue.existsSync(ge.join(e,u)));if(l){let u=ge.join(e,l),p=em(u,a);return p==="inserted"?i.push(l):p==="updated"?(i.push(l),o.push(`${l} updated to use ${a}.`)):p==="already"?o.push(`${l} already includes the Mach Expo plugin.`):o.push(`Add "${a}" to the plugins array in ${l}. Mach could not safely auto-edit this dynamic config.`),{written:i,skipped:r,notes:o}}let d=["app.config.json","app.json"].find(u=>ue.existsSync(ge.join(e,u)));if(!d)return r.push("Expo config plugin insertion: no app.json or app.config.json found."),{written:i,skipped:r,notes:o};let c=ge.join(e,d);try{let u=JSON.parse(ue.readFileSync(c,"utf-8")),p=u.expo&&typeof u.expo=="object"?u.expo:u,m=Xf(p,a);ue.writeFileSync(c,`${JSON.stringify(u,null,2)}
2129
+ `),i.push(d),m==="updated"&&o.push(`${d} updated to use ${a}.`)}catch(u){r.push(`Expo config plugin insertion failed: ${u.message}`)}return{written:i,skipped:r,notes:o}}function $l(e){let t=["app.config.ts","app.config.js"].find(i=>ue.existsSync(ge.join(e,i)));if(t){let i=ue.readFileSync(ge.join(e,t),"utf-8");return Qr.test(i)?"manual":"missing"}let n=["app.config.json","app.json"].find(i=>ue.existsSync(ge.join(e,i)));if(!n)return"missing";try{let i=JSON.parse(ue.readFileSync(ge.join(e,n),"utf-8")),r=i.expo&&typeof i.expo=="object"?i.expo:i;return Array.isArray(r.plugins)&&r.plugins.some(_l)?"wired":"missing"}catch{return"missing"}}function to(e){let t=El("npx",["--no-install","expo","config","--type","public","--json"],{cwd:e,encoding:"utf-8",timeout:8e3,env:{...process.env,CI:"1",EXPO_NO_TELEMETRY:"1"}});if(t.error||t.status!==0||!t.stdout)return null;let n=t.stdout.trim(),i=n.indexOf("{");if(i<0)return null;try{return JSON.parse(n.slice(i))}catch{return null}}function tm(e){if(!e||typeof e!="object")return null;let n=(Array.isArray(e.ios?.associatedDomains)?e.ios.associatedDomains:[]).map(s=>typeof s=="string"?s.match(/^applinks:(.+)$/)?.[1]:void 0).find(Boolean),r=(Array.isArray(e.android?.intentFilters)?e.android.intentFilters:[]).flatMap(s=>Array.isArray(s?.data)?s.data:[]).find(s=>s?.scheme==="https"&&typeof s.host=="string")?.host,o=n||r;return!o&&!e.scheme&&!e.ios?.bundleIdentifier&&!e.android?.package?null:{domain:o,scheme:typeof e.scheme=="string"?e.scheme:void 0,iosBundleIdentifier:typeof e.ios?.bundleIdentifier=="string"?e.ios.bundleIdentifier:void 0,androidPackage:typeof e.android?.package=="string"?e.android.package:void 0}}function Ei(e){return tm(to(e))}import ze from"fs";import we from"path";var nm=e=>{ze.mkdirSync(we.dirname(e),{recursive:!0})},vl=(e,t)=>{nm(e),ze.writeFileSync(e,`${JSON.stringify(t,null,2)}
2130
+ `)};var im=e=>{let t=e.ios?.appleTeamId,n=e.ios?.bundleIdentifier;return!t||!n?null:`${t}.${n}`};function no(e){let t=im(e);if(!t)return null;let n=e.paths?.length?e.paths:["/*"],i=n.map(s=>s==="/*"?"*":s),r=n.map(s=>({"/":s,comment:s==="/*"?"Matches all URLs":`Matches ${s}`})),o={applinks:{apps:[],details:[{appIDs:[t],components:r,appID:t,paths:i}]}};return e.ios?.webCredentials&&(o.webcredentials={apps:[t]}),e.ios?.activityContinuation&&(o.activitycontinuation={apps:[t]}),o}function rm(e){let t=e.android?.package;return t?[{relation:["delegate_permission/common.handle_all_urls",...e.android?.loginCredentials?["delegate_permission/common.get_login_creds"]:[]],target:{namespace:"android_app",package_name:t,sha256_cert_fingerprints:e.android?.sha256CertFingerprints||[]}}]:null}function om(e,t){let n=t.ios?.appStoreId;if(!n||!ze.existsSync(e))return!1;let i=`<meta name="apple-itunes-app" content="app-id=${n}, app-argument=${t.baseUrl}" />`,r=ze.readFileSync(e,"utf-8");if(/name=["']apple-itunes-app["']/i.test(r)){let o=r.replace(/<meta[^>]+name=["']apple-itunes-app["'][^>]*>/i,i);return ze.writeFileSync(e,o),!0}return/<head[^>]*>/i.test(r)?(ze.writeFileSync(e,r.replace(/<head([^>]*)>/i,`<head$1>
2131
+ ${i}`)),!0):!1}function Rl(e,t){let n=[],i=[],r=[],o=t.web?.outputDir||"deep-links",s=we.join(e,o),a=no(t);if(a){let u=hi([we.join(s,".well-known/apple-app-site-association"),we.join(s,".well-known/apple-app-site-association.json"),we.join(s,"apple-app-site-association"),we.join(s,"apple-app-site-association.json")]);for(let p of u)vl(p,a),n.push(we.relative(e,p))}else i.push("Apple AASA files: missing ios.appleTeamId or ios.bundleIdentifier");let l=rm(t);if(l){let u=we.join(s,".well-known/assetlinks.json");vl(u,l),n.push(we.relative(e,u)),t.android?.sha256CertFingerprints?.length||r.push("assetlinks.json was generated without SHA256 fingerprints. Add them before Android App Links can verify.")}else i.push("Android assetlinks.json: missing android.package");let d=we.join(e,Xr);ze.existsSync(d)&&(ze.unlinkSync(d),r.push(`Removed legacy ${Xr}; mach.config.json is now the source of truth.`));let c=we.join(s,"index.html");return t.web?.smartAppBanner&&om(c,t)?n.push(we.relative(e,c)):t.web?.smartAppBanner&&t.ios?.appStoreId?r.push(`Smart App Banner skipped because ${we.relative(e,c)} was not found.`):t.web?.smartAppBanner&&r.push("Smart App Banner skipped because ios.appStoreId is not configured."),o!=="public"&&r.push(`Host ${o}/.well-known files at https://${t.domain}/.well-known/.`),{written:n,skipped:i,notes:r}}function io(e){if(!ze.existsSync(e))return null;try{return JSON.parse(ze.readFileSync(e,"utf-8"))}catch{return null}}import pt from"fs";import ft from"path";import{spawnSync as sm}from"child_process";var N=(e,t)=>({level:e,message:t}),Pl=(e,t)=>ft.join(e,t.web?.outputDir||"deep-links");function am(e,t,n="fail"){let i=[],r=Pl(e,t),o=ft.join(r,".well-known/apple-app-site-association");if(!no(t))return i.push(N("warn","Skipping AASA verification because ios.appleTeamId or ios.bundleIdentifier is missing.")),i;if(!pt.existsSync(o))return i.push(N(n,`${ft.relative(e,o)} is missing.`)),i;pt.statSync(o).size>128*1024?i.push(N("fail","Apple AASA file is larger than 128 KB.")):i.push(N("pass","Apple AASA file is under 128 KB."));let l=io(o);if(!l)return i.push(N("fail","Apple AASA file is not valid JSON.")),i;let d=`${t.ios?.appleTeamId}.${t.ios?.bundleIdentifier}`,c=l.applinks?.details||[],u=Array.isArray(c)&&c.some(p=>p.appID===d||p.appIDs?.includes(d));if(i.push(u?N("pass",`AASA contains ${d}.`):N("fail",`AASA does not contain ${d}.`)),t.ios?.webCredentials){let p=l.webcredentials?.apps,m=Array.isArray(p)&&p.includes(d);i.push(m?N("pass",`AASA enables iOS Web Credentials for ${d}.`):N("fail",`AASA is missing iOS Web Credentials for ${d}.`))}return i}function lm(e,t,n="fail"){let i=[],r=Pl(e,t),o=ft.join(r,".well-known/assetlinks.json");if(!t.android?.package)return i.push(N("warn","Skipping Android Asset Links verification because android.package is missing.")),i;if(!pt.existsSync(o))return i.push(N(n,`${ft.relative(e,o)} is missing.`)),i;let s=io(o);if(!s||!Array.isArray(s))return i.push(N("fail","assetlinks.json is not a valid JSON array.")),i;let a=s.find(d=>d?.target?.package_name===t.android?.package);i.push(a?N("pass",`assetlinks.json contains ${t.android.package}.`):N("fail",`assetlinks.json does not contain ${t.android.package}.`));let l=a?.target?.sha256_cert_fingerprints;if(i.push(Array.isArray(l)&&l.length>0?N("pass","assetlinks.json has at least one SHA256 fingerprint."):N("warn","assetlinks.json has no SHA256 fingerprints.")),t.android?.loginCredentials){let d=a?.relation,c=Array.isArray(d)&&d.includes("delegate_permission/common.get_login_creds");i.push(c?N("pass","assetlinks.json enables Android Login Credentials."):N("fail","assetlinks.json is missing Android Login Credentials."))}return i}function dm(e,t,n,i){if(t.framework!=="expo")return[];let r=[],o=to(e),a=(Array.isArray(o?.ios?.associatedDomains)?o.ios.associatedDomains:[]).includes(`applinks:${n.domain}`);r.push(a?N("pass",`Expo iOS config contains applinks:${n.domain}.`):N(i?"warn":"fail",`Expo iOS config does not contain applinks:${n.domain}.`));let d=(Array.isArray(o?.android?.intentFilters)?o.android.intentFilters:[]).flatMap(u=>Array.isArray(u?.data)?u.data:[]).some(u=>u?.scheme==="https"&&u.host===n.domain);if(r.push(d?N("pass",`Expo Android config contains App Link host ${n.domain}.`):N(i?"warn":"fail",`Expo Android config does not contain App Link host ${n.domain}.`)),i)return r.push(N("warn","mach.config.json is missing deepLinks; values were inferred from Expo config. Run `mach deeplink setup` to persist Mach metadata and generate hosted files.")),r;let c=$l(e);return c==="wired"?r.push(N("pass","Expo deep link plugin is wired into Expo config and derives values from mach.config.json.")):c==="manual"&&a&&d?r.push(N("pass","Expo resolved config contains the deep-link settings from the dynamic config.")):c==="manual"?r.push(N("warn","Expo deep link plugin exists, but dynamic or missing Expo config means manual plugin insertion must be confirmed.")):a&&d?r.push(N("warn","Expo plugin is not wired, but resolved Expo config already contains the deep-link settings.")):r.push(N("fail","Expo deep link plugin is missing or not wired into Expo config.")),r}function cm(e,t,n){if(t.framework!=="react-native")return[];let i=[],r=ft.join(e,"android/app/src/main/AndroidManifest.xml");if(pt.existsSync(r)){let s=pt.readFileSync(r,"utf-8");i.push(s.includes(`android:host="${n.domain}"`)?N("pass","AndroidManifest.xml contains the App Links host."):N("warn","AndroidManifest.xml does not contain the App Links host. Native patching is planned for a later phase."))}let o=ft.join(e,"ios");if(pt.existsSync(o)){let a=pt.readdirSync(o,{recursive:!0}).filter(l=>typeof l=="string"&&l.endsWith(".entitlements")).some(l=>pt.readFileSync(ft.join(o,l),"utf-8").includes(`applinks:${n.domain}`));i.push(a?N("pass","iOS entitlements contain the associated domain."):N("warn","iOS entitlements do not contain the associated domain. Native patching is planned for a later phase."))}return i}async function ro(e,t){let n=[];try{let i=await fetch(e,{redirect:"manual"});if(i.status>=300&&i.status<400&&!t)return n.push(N("fail",`${e} redirects. Apple AASA endpoints must not redirect.`)),n;n.push(i.status===200?N("pass",`${e} returned HTTP 200.`):N("fail",`${e} returned HTTP ${i.status}.`));let r=i.headers.get("content-type")||"";!r.includes("application/json")&&!r.includes("text/json")&&n.push(N("warn",`${e} content-type is "${r||"missing"}"; application/json is recommended.`)),JSON.parse(await i.text()),n.push(N("pass",`${e} contains valid JSON.`))}catch(i){n.push(N("fail",`${e} check failed: ${i.message}`))}return n}async function um(e){let t=e.domain;return(await Promise.all([ro(`https://${t}/.well-known/apple-app-site-association`,!1),ro(`https://${t}/apple-app-site-association`,!1),ro(`https://${t}/.well-known/assetlinks.json`,!0)])).flat()}function pm(e){let t=e.android?.package;if(!t)return[N("warn","Cannot print Android device verification commands because android.package is missing.")];let i=sm("adb",["version"],{encoding:"utf-8"}).status===0?"Run":"Install Android platform-tools, then run";return[N("info",`${i}: adb shell pm set-app-links --package ${t} 0 all`),N("info",`${i}: adb shell pm verify-app-links --re-verify ${t}`),N("info",`${i}: adb shell pm get-app-links ${t}`)]}async function oo(e,t,n){let i=n.profile||t.deepLinks?.profile||"production",r=t.framework==="expo"?Ei(e):null,o=t.framework==="expo"?bi(t,r,i,e):null,s=!t.deepLinks&&!!o,a=t.deepLinks?Si(t,{profile:i,cwd:e,expoHints:r}):o,l=[];if(!a)return[N("fail","mach.config.json is missing deepLinks and Mach could not infer existing deep-link settings. Run `mach deeplink setup`.")];l.push(a.baseUrl?N("pass","deepLinks.baseUrl is configured."):N("fail","deepLinks.baseUrl is missing.")),l.push(a.domain?N("pass","deepLinks.domain is configured."):N("fail","deepLinks.domain is missing.")),l.push(a.scheme?N("pass","deepLinks.scheme is configured."):N("fail","deepLinks.scheme is missing."));let d=s?"warn":"fail";return l.push(...am(e,a,d)),l.push(...lm(e,a,d)),l.push(...dm(e,t,a,s)),l.push(...cm(e,t,a)),n.live&&l.push(...await um(a)),n.androidDevice&&l.push(...pm(a)),l}var jt=()=>process.stdin.isTTY&&process.stdout.isTTY,Dl=`${f.npmScope}/mach`,Ht=()=>{fm("Operation cancelled."),process.exit(0)},lo=e=>{if(typeof e!="string")return;let t=e.trim();return t.length>0?t:void 0},Ze=(...e)=>{for(let t of e){let n=lo(t);if(n)return n}},_t=async(e,t,n,i,r)=>{if(t)return t;if(r||!jt()){if(i)throw new Error(`${e.replace(/:$/,"")} is required. Pass it as an option or run interactively.`);return}let o=await Tl({message:e,initialValue:t||"",placeholder:n,validate(s){if(i&&s.trim().length===0)return"Required."}});return Bt(o)&&Ht(),lo(o)},Cl=async(e,t,n)=>{if(n||!jt())return t;let i=await ao({message:e,initialValue:t});return Bt(i)&&Ht(),!!i};async function ym(e,t,n){let i=ve(e.framework),r=ve(t);if(r)return r;if(i)return i;let o=yl();if(n||!jt())return o;let s=await gm({message:`Which framework should ${f.name} configure?`,initialValue:o,options:[{value:"expo",label:"Expo"},{value:"react-native",label:"React Native"},{value:"flutter",label:"Flutter (not supported yet)"}]});return Bt(s)&&Ht(),s}var wn=e=>e==="ios"||e==="all",_i=e=>e==="android"||e==="all";async function Am(e,t,n){if(t!=="expo"||Ii(e)||n.installPlugin===!1)return!1;if(n.installPlugin===!0||n.yes)return!0;if(!jt())return!1;let i=await ao({message:`Install ${Dl} locally so Expo can use ${Dl}/expo-plugin?`,initialValue:!0});return Bt(i)&&Ht(),!!i}async function Sm(e,t){let n=!!t.yes,i=t.profile||e.deepLinks?.profile||"production",r=_e(e,i)||{},o=r.ios||{},s=r.android||{},a=e.submit?.[i]?.ios||{},l=e.submit?.[i]?.android||{},d=ht(e,i),c=await ym(e,t.framework,n);if(c==="flutter")throw new Error("Flutter deep-link automation is planned but not supported yet.");let u=Al(e,hl(t.platform),r),p=e.deepLinks,h=c==="expo"&&(!Ze(t.baseUrl,p?.baseUrl,t.domain?`https://${t.domain}`:void 0)||!Ze(t.scheme,p?.scheme,o.scheme,e.scheme,e.slug,e.name)||wn(u)&&!Ze(t.iosBundleId,p?.ios?.bundleIdentifier,o.bundleIdentifier,o.bundleId,e.ios?.bundleIdentifier)||_i(u)&&!Ze(t.androidPackage,p?.android?.package,s.package,s.applicationId,e.android?.package,l.packageName,l.package))?bi(e,Ei(process.cwd()),i,process.cwd()):null,g=t.output||p?.web?.outputDir||Ai(process.cwd(),e),S=await _t("Deep link base URL:",t.baseUrl||p?.baseUrl||(t.domain?`https://${t.domain}`:void 0)||h?.baseUrl,"https://app.example.com",!0,n),b=In(S),A=t.baseUrl?new URL(b).hostname:void 0,D=await _t("Associated domain:",t.domain||A||p?.domain||h?.domain||new URL(b).hostname,"app.example.com",!0,n),_=yi(await _t("URI scheme:",Ze(t.scheme,p?.scheme,o.scheme,e.scheme,h?.scheme,e.slug,e.name,"app"),"myapp",!0,n)||"app"),Y=wn(u)?await _t("iOS bundle identifier:",Ze(t.iosBundleId,p?.ios?.bundleIdentifier,o.bundleIdentifier,o.bundleId,e.ios?.bundleIdentifier,h?.ios?.bundleIdentifier),"com.example.app",!0,n):p?.ios?.bundleIdentifier||e.ios?.bundleIdentifier,te=wn(u)?await _t("Apple Team ID:",Ze(t.appleTeamId,p?.ios?.appleTeamId,o.appleTeamId,o.developerTeamId,a.appleTeamId,a.developerTeamId,e.ios?.appleTeamId,e.ios?.developerTeamId,d.teamId),"ABCDE12345",!0,n):p?.ios?.appleTeamId||e.ios?.appleTeamId,X=wn(u)?await _t("App Store ID (optional, for Smart App Banner):",Ze(t.appStoreId,p?.ios?.appStoreId,o.ascAppId,a.ascAppId,e.ios?.ascAppId),"1234567890",!1,n):p?.ios?.appStoreId,Se=wn(u)?await Cl("Enable iOS Web Credentials for HTTPS OAuth callbacks?",!!p?.ios?.webCredentials,n):!!p?.ios?.webCredentials,oe=_i(u)?await _t("Android package name:",Ze(t.androidPackage,p?.android?.package,s.package,s.applicationId,e.android?.package,l.packageName,l.package,h?.android?.package),"com.example.app",!0,n):p?.android?.package||e.android?.package,ke=p?.android?.sha256CertFingerprints||[],he=t.androidFingerprint||[],y=e.android?.sha256CertFingerprints||[],$=s.sha256CertFingerprints||[],v=[...he,...ke,...$,...y].filter(Boolean);if(_i(u)&&v.length===0&&!n&&jt()){let P=await Tl({message:"Android SHA256 fingerprint (optional now, required for verified App Links):",placeholder:"AA:BB:CC:..."});Bt(P)&&Ht(),lo(P)&&v.push(P)}let R=_i(u)?await Cl("Enable Android Login Credentials for website password and passkey sharing?",!!p?.android?.loginCredentials,n):!!p?.android?.loginCredentials,x=Sl(e,{...t,baseUrl:b,domain:D,scheme:_,output:g,appleTeamId:te,appStoreId:X,androidFingerprint:v});return x.ios={...x.ios||{},bundleIdentifier:Y,appleTeamId:te,appStoreId:X,webCredentials:Se},x.android={...x.android||{},package:oe,sha256CertFingerprints:Array.from(new Set(v)),loginCredentials:R},{framework:c,platform:u,deepLinks:x}}var so=(e,t)=>{t.length!==0&&mm(t.map(n=>`- ${n}`).join(`
2132
+ `),e)},Nl=e=>e.filter(t=>t.level==="fail").length;function kl(e){for(let t of e){let n=t.level==="pass"?Fe.green("PASS"):t.level==="warn"?Fe.yellow("WARN"):t.level==="info"?Fe.cyan("INFO"):Fe.red("FAIL");wi.info(`${n} ${t.message}`)}}async function xl(e){try{let t=process.cwd(),n=Ol.join(t,f.configFileName),i=re()||{};if(!hm.existsSync(n)){let b=e.yes||!jt()?!0:await ao({message:`${f.configFileName} was not found. Create one with deep link settings?`,initialValue:!0});if(Bt(b)&&Ht(),!b)return}let{framework:r,deepLinks:o}=await Sm(i,e),s=e.profile||i.deepLinks?.profile||"production",a=bl(i,r,o,s),l=Il(a,t),d=Rl(t,o),c=await Am(t,r,e),u=r==="expo"?wl(t,o,{installPackage:c}):{written:[],skipped:[],notes:r==="react-native"?["React Native native patching is planned for a later phase. Hosted files were generated now."]:[]},p=[Ol.relative(t,l),...d.written,...u.written],m=[...d.skipped,...u.skipped],h=[...d.notes,...u.notes];so("Written",p),so("Skipped",m),so("Notes",h);let g=await oo(t,a,{});kl(g);let S=Nl(g);if(S>0){$i(Fe.yellow(`Deep link setup finished with ${S} verification issue(s).`));return}$i(Fe.green("Deep link setup complete."))}catch(t){wi.error(Fe.red(t.message||"Deep link setup failed.")),process.exit(1)}}async function Ll(e){try{let t=re();t||(wi.error(Fe.red(`No ${f.configFileName} found in the current directory.`)),process.exit(1));let n=await oo(process.cwd(),t,e);kl(n);let i=Nl(n);i>0&&($i(Fe.red(`Deep link verification failed with ${i} issue(s).`)),process.exit(1)),$i(Fe.green("Deep link verification passed."))}catch(t){wi.error(Fe.red(t.message||"Deep link verification failed.")),process.exit(1)}}import{log as Qe,spinner as Ml}from"@clack/prompts";import mt from"chalk";var bm=e=>{let t=String(e||"").trim().toLowerCase();if(t==="ios"||t==="android")return t;throw new Error("Pass --platform ios or --platform android.")},Im=e=>{let t=Number(e);if(!Number.isFinite(t))throw new Error("Counter value must be a non-negative integer.");let n=Math.floor(t);if(n<0)throw new Error("Counter value must be a non-negative integer.");return n},Em=(e,t,n)=>{let i=String(n.scope||"").trim();if(i)return i;let r=n.profile||"production",o=e==="android"?n.package||n.androidPackage:n.bundleId||n.iosBundleIdentifier;if(o)return String(o).trim();let s=e==="android"?Mn(t,r):Un(t,r);if(s)return s;throw new Error(e==="android"?`Could not resolve Android package. Set android.package in ${f.configFileName}, or pass --package/--scope.`:`Could not resolve iOS bundle identifier. Set ios.bundleIdentifier in ${f.configFileName}, or pass --bundle-id/--scope.`)},_m=()=>{let e=re();if(!e)throw new Error(`No ${f.configFileName} found in the current directory. Run \`${f.nameLower} init\` or \`${f.nameLower} link\` first.`);if(!e.projectId)throw new Error(`${f.configFileName} is missing projectId.`);return e},co=e=>{Qe.info(mt.bgBlue.white(" Native Version Counter ")),Qe.info(`${mt.blue("Platform:")} ${e.platform}`),Qe.info(`${mt.blue("Scope:")} ${e.scope}`),Qe.info(`${mt.blue("Current DB value:")} ${e.current}`),Qe.info(`${mt.blue("Next build will use:")} ${e.next}`),e.seeded||Qe.warn(mt.yellow("This counter has not been seeded yet. Existing store apps should run `mach version seed` once before auto-version builds."))};async function uo(e,t={}){if(!ye()){Qe.error(`You are not logged in. Run \`${f.nameLower} login\` first.`);return}try{let i=_m(),r=bm(t.platform),o=Em(r,i,t),s=String(i.projectId);if(e==="show"){let c=Ml();t.json||c.start("Fetching native version counter...");let{data:u}=await w.get(`/projects/${s}/version-counters`,{params:{platform:r,scope:o}});if(u.status!=="success")throw new Error(u.message||"Failed to fetch version counter.");t.json?console.log(JSON.stringify(u.counter,null,2)):(c.stop("Fetched native version counter."),co(u.counter));return}let a=Im(t.value),l=Ml();t.json||l.start("Seeding native version counter...");let{data:d}=await w.post(`/projects/${s}/version-counters/seed`,{platform:r,scope:o,value:a,force:!!t.force});if(d.status!=="success")throw new Error(d.message||"Failed to seed version counter.");t.json?console.log(JSON.stringify(d.counter,null,2)):(l.stop(`Seeded ${r} counter for ${o}.`),co(d.counter))}catch(i){let r=i?.response?.data?.message||i?.message||"Version command failed.";if(i?.response?.data?.counter&&!t.json){Qe.error(mt.red(r)),co(i.response.data.counter);return}t.json?console.log(JSON.stringify({status:"error",message:r},null,2)):Qe.error(mt.red(r))}}import{log as De,spinner as Rn,text as Ul,select as Fl,confirm as wm,isCancel as $n,cancel as vn,outro as Pn,note as $m}from"@clack/prompts";import V from"chalk";import{execSync as vm}from"child_process";async function Rm(){try{let e=vm("xcrun devicectl list devices --json-output -",{stdio:["pipe","pipe","pipe"]}).toString();return(JSON.parse(e).result?.devices||[]).filter(i=>i.connectionProperties?.transportType==="wired"||i.connectionProperties?.transportType==="localNetwork").map(i=>({udid:i.identifier,name:i.deviceProperties?.name||"Unknown Device",model:i.hardwareProperties?.marketingName||"iPhone"}))}catch{return[]}}var Bl=e=>e?.trim().toUpperCase()||void 0;function jl(e){let t=re(),n=t?ht(t):{},i=Bl(e.teamId),r=i||n.teamId;return{...n,teamId:r,developerTeamId:i||n.developerTeamId||r}}async function Pm(e){let t=e.udid,n=e.name,i=jl(e),r=i.teamId;if(!t){let s=Rn();s.start("Scanning for connected iOS devices...");let a=await Rm();if(s.stop(a.length>0?`Found ${a.length} device(s)`:"No devices detected"),a.length===1)t=a[0].udid,n=n||a[0].name,De.info(`Detected: ${V.bold(n)} (${V.dim(t.substring(0,12)+"...")})`);else if(a.length>1){let l=await Fl({message:"Select a device to register:",options:a.map(c=>({value:c.udid,label:`${c.name} (${c.model})`,hint:c.udid.substring(0,12)+"..."}))});if($n(l)){vn("Cancelled");return}t=l;let d=a.find(c=>c.udid===t);n=n||d.name}else{De.info(V.dim("No connected devices found. Enter UDID manually."));let l=await Ul({message:"Device UDID:",placeholder:"00008101-XXXXXXXXXXXX",validate(d){if(d.length<10)return"UDID seems too short"}});if($n(l)){vn("Cancelled");return}t=l}}if(!n){let s=await Ul({message:"Device name:",placeholder:"Nitesh's iPhone",validate(a){if(a.length===0)return"Name is required"}});if($n(s)){vn("Cancelled");return}n=s}let o=Rn();o.start("Registering device...");try{await w.post("/devices",{udid:t,name:n,platform:"ios",addedVia:"cli",teamId:r,teamName:i.teamName,developerTeamId:i.developerTeamId,appStoreConnectTeamId:i.appStoreConnectTeamId,providerId:i.providerId,providerName:i.providerName}),o.stop(V.green("Device registered!")),De.info(` ${V.bold("Name:")} ${n}`),De.info(` ${V.bold("UDID:")} ${V.dim(t)}`),r&&De.info(` ${V.bold("Team:")} ${V.dim(r)}`)}catch(s){o.stop(V.red("Failed to register device")),De.error(s.response?.data?.message||s.message)}Pn(V.blue("---"))}async function Om(e={}){let t=Bl(e.teamId),n=Rn();n.start("Fetching registered devices...");try{let r=(await w.get("/devices",t?{params:{teamId:t}}:void 0)).data.devices||[];if(n.stop(`${r.length} device(s) registered${t?` for team ${t}`:""}`),r.length===0){De.info(V.dim(`No devices registered yet. Run \`${f.nameLower} device register\` to add one.`)),Pn(V.blue("---"));return}let o=r.map(s=>{let a=new Date(s.createdAt).toLocaleDateString();return` ${V.bold(s.name.padEnd(24))} ${V.dim(s.udid.padEnd(28))} ${V.dim((s.teamId||"-").padEnd(12))} ${V.cyan((s.addedVia||"-").padEnd(10))} ${V.dim(a)}`});$m(` ${V.bold("Name".padEnd(24))} ${"UDID".padEnd(28)} ${"Team".padEnd(12)} ${"Via".padEnd(10)} Date
2133
2133
  `+o.join(`
2134
- `),"Registered Devices")}catch(i){n.stop(K.red("Failed to fetch devices")),De.error(i.response?.data?.message||i.message)}Pn(K.blue("---"))}async function Om(e){let t=e.udid,n=Fl(e).teamId;if(!t){let o=Rn();o.start("Fetching registered devices...");try{let a=(await w.get("/devices",n?{params:{teamId:n}}:void 0)).data.devices||[];if(o.stop(`${a.length} device(s) found`),a.length===0){De.info(K.dim("No devices to remove.")),Pn(K.blue("---"));return}let l=await Ml({message:"Select device to remove:",options:a.map(c=>({value:c.deviceKey||c.udid,label:c.name,hint:`${c.udid.substring(0,12)}...${c.teamId?` \xB7 ${c.teamId}`:""}`}))});if($n(l)){vn("Cancelled");return}let d=a.find(c=>(c.deviceKey||c.udid)===l);t=d?.udid||l,n=d?.teamId||n}catch(s){o.stop(K.red("Failed to fetch devices")),De.error(s.response?.data?.message||s.message);return}}let i=await _m({message:`Remove device ${K.dim(t.substring(0,12)+"...")}?`});if($n(i)||!i){vn("Cancelled");return}let r=Rn();r.start("Removing device...");try{await w.delete(`/devices/${encodeURIComponent(t)}`,n?{params:{teamId:n}}:void 0),r.stop(K.green("Device removed"))}catch(o){r.stop(K.red("Failed to remove device")),De.error(o.response?.data?.message||o.message)}Pn(K.blue("---"))}async function vi(e,t){switch(e){case"register":await Rm(t);break;case"list":await Pm(t);break;case"remove":await Om(t);break;default:De.error(`Unknown action: ${e}`)}}import{log as Te,spinner as md}from"@clack/prompts";import je from"chalk";import Li from"path";import Cn from"fs";import dg from"os";import cg from"axios";var Ce=(o=>(o.CRITICAL="critical",o.HIGH="high",o.MEDIUM="medium",o.LOW="low",o.INFO="info",o))(Ce||{}),Be=(l=>(l.PERMISSIONS="permissions",l.SECRETS="secrets",l.DEPENDENCIES="dependencies",l.STORAGE="storage",l.NETWORK="network",l.DEBUG="debug",l.MANIFEST="manifest",l.ATS="ats",l))(Be||{});import{spinner as rd,log as Dn}from"@clack/prompts";import $e from"chalk";import{execSync as Qm}from"child_process";import od from"fs";import sd from"path";import mt from"fs";import On from"path";import{execSync as Dm}from"child_process";var Bl={"android.permission.READ_PHONE_STATE":{severity:"high",description:"Can read phone number, IMEI, carrier info"},"android.permission.CALL_PHONE":{severity:"high",description:"Can make calls without user interaction"},"android.permission.SEND_SMS":{severity:"high",description:"Can send SMS without user interaction"},"android.permission.READ_SMS":{severity:"high",description:"Can read user SMS messages"},"android.permission.READ_CONTACTS":{severity:"medium",description:"Can read user contacts"},"android.permission.WRITE_CONTACTS":{severity:"medium",description:"Can modify user contacts"},"android.permission.READ_CALL_LOG":{severity:"high",description:"Can read call history"},"android.permission.CAMERA":{severity:"medium",description:"Camera access"},"android.permission.RECORD_AUDIO":{severity:"medium",description:"Microphone access"},"android.permission.ACCESS_FINE_LOCATION":{severity:"medium",description:"Precise GPS location"},"android.permission.ACCESS_COARSE_LOCATION":{severity:"medium",description:"Approximate location"},"android.permission.ACCESS_BACKGROUND_LOCATION":{severity:"high",description:"Background location tracking"},"android.permission.READ_EXTERNAL_STORAGE":{severity:"medium",description:"Read files on device"},"android.permission.WRITE_EXTERNAL_STORAGE":{severity:"medium",description:"Write files on device"},"android.permission.READ_MEDIA_IMAGES":{severity:"low",description:"Read photos"},"android.permission.READ_MEDIA_VIDEO":{severity:"low",description:"Read videos"},"android.permission.SYSTEM_ALERT_WINDOW":{severity:"high",description:"Draw overlays on other apps"},"android.permission.REQUEST_INSTALL_PACKAGES":{severity:"high",description:"Can install APKs"}},Cm={NSCameraUsageDescription:{severity:"medium",description:"Camera access declared"},NSMicrophoneUsageDescription:{severity:"medium",description:"Microphone access declared"},NSLocationWhenInUseUsageDescription:{severity:"medium",description:"Location (in-use) declared"},NSLocationAlwaysUsageDescription:{severity:"high",description:"Background location declared"},NSContactsUsageDescription:{severity:"medium",description:"Contacts access declared"},NSCalendarsUsageDescription:{severity:"low",description:"Calendar access declared"},NSPhotoLibraryUsageDescription:{severity:"low",description:"Photo library access declared"}};function Tm(e){try{let n=Dm("npx expo config --type introspect --json 2>/dev/null",{cwd:e,encoding:"utf-8",timeout:3e4});return JSON.parse(n)}catch{}let t=On.join(e,"app.json");if(mt.existsSync(t))try{let n=JSON.parse(mt.readFileSync(t,"utf-8"));return n.expo||n}catch{}return null}function Nm(e){let t=[],n=On.join(e,"node_modules");if(!mt.existsSync(n))return t;let i=/<uses-permission\s+android:name="([^"]+)"/g;function r(o,s){let a=On.join(o,"android","src","main","AndroidManifest.xml");if(!mt.existsSync(a))return;let l=mt.readFileSync(a,"utf-8"),d;for(;(d=i.exec(l))!==null;)t.push({pkg:s,permission:d[1]});i.lastIndex=0}for(let o of mt.readdirSync(n)){if(o.startsWith("."))continue;let s=On.join(n,o);if(o.startsWith("@")){if(!mt.statSync(s).isDirectory())continue;for(let a of mt.readdirSync(s))r(On.join(s,a),`${o}/${a}`)}else r(s,o)}return t}async function jl(e,t){let n=[],i=1,r=Tm(e),o=r?.android?.permissions||[],s=r?.android?.blockedPermissions||[];for(let d of o){let c=Bl[d];c&&n.push({id:`PERM-${String(i++).padStart(3,"0")}`,title:`${d.split(".").pop()} declared`,description:c.description,severity:c.severity,category:"permissions",file:"app.config.ts",recommendation:"Remove from permissions if not needed, or add justification."})}let a=Nm(e);for(let{pkg:d,permission:c}of a){let u=Bl[c];u&&(s.includes(c)||o.includes(c)||n.push({id:`PERM-${String(i++).padStart(3,"0")}`,title:`${c.split(".").pop()} injected by ${d}`,description:`${u.description}. Auto-injected via ${d} AndroidManifest.xml`,severity:u.severity,category:"permissions",file:`node_modules/${d}/android/src/main/AndroidManifest.xml`,recommendation:`Add "${c}" to blockedPermissions if not needed.`,autoFixable:!0}))}let l=r?.ios?.infoPlist||{};for(let[d,c]of Object.entries(Cm))d in l&&n.push({id:`PERM-${String(i++).padStart(3,"0")}`,title:`iOS: ${d} declared`,description:c.description,severity:c.severity,category:"permissions",file:"app.config.ts",recommendation:`Remove ${d} from infoPlist if the app does not use this capability.`});return{category:"permissions",label:"Permission Audit",findings:n,durationMs:0}}import lo from"fs";import Ri from"path";var km=[{id:"SEC-001",pattern:/(['"`])(?:sk|pk)_(?:live|test)_[a-zA-Z0-9]{20,}\1/g,severity:"critical",label:"Stripe API Key"},{id:"SEC-002",pattern:/(['"`])AIza[0-9A-Za-z\-_]{35}\1/g,severity:"high",label:"Google API Key"},{id:"SEC-003",pattern:/(['"`])AKIA[0-9A-Z]{16}\1/g,severity:"critical",label:"AWS Access Key ID"},{id:"SEC-004",pattern:/-----BEGIN (?:RSA |EC )?PRIVATE KEY-----/g,severity:"critical",label:"Private key in source"},{id:"SEC-005",pattern:/(?:ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9_]{36,}/g,severity:"high",label:"GitHub Token"},{id:"SEC-006",pattern:/xox[bpors]-[a-zA-Z0-9-]{10,}/g,severity:"high",label:"Slack Token"},{id:"SEC-007",pattern:/(?:password|secret|apikey|api_key)\s*[:=]\s*['"`][^'"`\n]{8,}['"`]/gi,severity:"high",label:"Hardcoded credential"}],xm=new Set([".ts",".tsx",".js",".jsx"]),Lm=new Set(["node_modules",".expo",".git","android","ios","dist","build","__tests__","__mocks__"]);function Hl(e){let t=[],n=lo.readdirSync(e,{withFileTypes:!0});for(let i of n){if(Lm.has(i.name))continue;let r=Ri.join(e,i.name);i.isDirectory()?t.push(...Hl(r)):xm.has(Ri.extname(i.name))&&t.push(r)}return t}function Mm(e){let t=e.trim();return t.startsWith("//")||t.startsWith("*")||t.startsWith("/*")}function Um(e){return/process\.env\./i.test(e)||/import\.meta\.env/i.test(e)}async function Gl(e,t){let n=[],i=Ri.join(e,"src"),r=lo.existsSync(i)?i:e,o=Hl(r);for(let s of o){let l=lo.readFileSync(s,"utf-8").split(`
2135
- `),d=Ri.relative(e,s);for(let c=0;c<l.length;c++){let u=l[c];if(!Mm(u)&&!Um(u))for(let{id:p,pattern:m,severity:h,label:g}of km)m.lastIndex=0,m.test(u)&&n.push({id:p,title:g,description:`Potential ${g.toLowerCase()} found in source code`,severity:h,category:"secrets",file:d,line:c+1,recommendation:`Move to environment variables or a secrets manager. Use \`${f.nameLower} env set\` for managed secrets.`})}}return{category:"secrets",label:"Secrets Detection",findings:n,durationMs:0}}import{execSync as Fm}from"child_process";var Bm={critical:"critical",high:"high",moderate:"medium",low:"low",info:"info"};async function Vl(e,t){let n=[],i=1,r;try{r=Fm("npm audit --json 2>/dev/null",{cwd:e,encoding:"utf-8",timeout:6e4})}catch(a){if(r=a.stdout||"",!r)return{category:"dependencies",label:"Dependency CVEs",findings:[],durationMs:0,error:"Failed to run npm audit. Ensure npm is available and dependencies are installed."}}let o;try{o=JSON.parse(r)}catch{return{category:"dependencies",label:"Dependency CVEs",findings:[],durationMs:0,error:"Failed to parse npm audit output."}}let s=o.vulnerabilities||{};for(let[a,l]of Object.entries(s)){let d=Bm[l.severity]||"info",c=Array.isArray(l.via)?l.via.map(u=>typeof u=="string"?u:u.title||u.name).join(", "):String(l.via);n.push({id:`DEP-${String(i++).padStart(3,"0")}`,title:`${a} \u2014 ${l.severity}`,description:`Via: ${c}. Range: ${l.range||"unknown"}`,severity:d,category:"dependencies",recommendation:l.fixAvailable?`Run \`npm audit fix\` or update ${a} to a patched version.`:"No fix available yet. Monitor for updates or evaluate alternatives.",autoFixable:!!l.fixAvailable})}return{category:"dependencies",label:"Dependency CVEs",findings:n,durationMs:0}}import Pi from"fs";import Oi from"path";var jm=/(?:token|password|credential|secret|apiKey|api_key|session|auth|jwt|refresh_token|access_token|private_key|pin|otp)/i,zl=/AsyncStorage\s*\.\s*(?:setItem|mergeItem)\s*\(\s*['"`]([^'"`]+)['"`]/g,Hm=/from\s+['"]@react-native-async-storage\/async-storage['"]|from\s+['"]react-native['"].*AsyncStorage/,Gm=new Set([".ts",".tsx",".js",".jsx"]),Vm=new Set(["node_modules",".expo",".git","android","ios","dist","build"]);function Kl(e){let t=[];if(!Pi.existsSync(e))return t;let n=Pi.readdirSync(e,{withFileTypes:!0});for(let i of n){if(Vm.has(i.name))continue;let r=Oi.join(e,i.name);i.isDirectory()?t.push(...Kl(r)):Gm.has(Oi.extname(i.name))&&t.push(r)}return t}async function Wl(e,t){let n=[],i=1,r=Oi.join(e,"src"),o=Pi.existsSync(r)?r:e,s=Kl(o);for(let a of s){let l=Pi.readFileSync(a,"utf-8");if(!Hm.test(l))continue;let d=l.split(`
2136
- `),c=Oi.relative(e,a);for(let u=0;u<d.length;u++){let p=d[u];zl.lastIndex=0;let m;for(;(m=zl.exec(p))!==null;){let h=m[1];jm.test(h)&&n.push({id:`STOR-${String(i++).padStart(3,"0")}`,title:`AsyncStorage used for "${h}"`,description:`Sensitive data key "${h}" stored in AsyncStorage (unencrypted).`,severity:"high",category:"storage",file:c,line:u+1,recommendation:"Use expo-secure-store (SecureStore) for sensitive data instead of AsyncStorage."})}}}return{category:"storage",label:"Insecure Storage",findings:n,durationMs:0}}import Di from"fs";import Ci from"path";var Yl=/['"`](http:\/\/(?!localhost|127\.0\.0\.1|10\.|192\.168\.|0\.0\.0\.0|172\.(?:1[6-9]|2\d|3[01])\.)[^'"`\s]+)['"`]/g,zm=/\/api\/|\/v[0-9]+\/|\/graphql|\/rest\//i,Km=new Set([".ts",".tsx",".js",".jsx"]),Wm=new Set(["node_modules",".expo",".git","android","ios","dist","build","__tests__","__mocks__"]);function ql(e){let t=[];if(!Di.existsSync(e))return t;let n=Di.readdirSync(e,{withFileTypes:!0});for(let i of n){if(Wm.has(i.name))continue;let r=Ci.join(e,i.name);i.isDirectory()?t.push(...ql(r)):Km.has(Ci.extname(i.name))&&t.push(r)}return t}async function Jl(e,t){let n=[],i=1,r=Ci.join(e,"src"),o=Di.existsSync(r)?r:e,s=ql(o);for(let a of s){let d=Di.readFileSync(a,"utf-8").split(`
2137
- `),c=Ci.relative(e,a);for(let u=0;u<d.length;u++){let p=d[u],m=p.trim();if(m.startsWith("//")||m.startsWith("*"))continue;Yl.lastIndex=0;let h;for(;(h=Yl.exec(p))!==null;){let g=h[1],S=zm.test(g);n.push({id:`NET-${String(i++).padStart(3,"0")}`,title:`Insecure HTTP URL${S?" (API endpoint)":""}`,description:`Plain HTTP URL found: ${g}`,severity:S?"high":"medium",category:"network",file:c,line:u+1,recommendation:"Use HTTPS instead of HTTP for all network requests."})}}}return{category:"network",label:"HTTP URLs",findings:n,durationMs:0}}import Ti from"fs";import Ni from"path";var Xl=/(?:debug|debugMode|devMode|enableDebug)\s*[:=]\s*true/gi,Zl=/console\.(?:log|warn|info|debug)\s*\([^)]*(?:token|password|secret|credential|key|auth)/gi,Ym=new Set([".ts",".tsx",".js",".jsx"]),qm=new Set(["node_modules",".expo",".git","android","ios","dist","build","__tests__","__mocks__"]);function Ql(e){let t=[];if(!Ti.existsSync(e))return t;let n=Ti.readdirSync(e,{withFileTypes:!0});for(let i of n){if(qm.has(i.name))continue;let r=Ni.join(e,i.name);i.isDirectory()?t.push(...Ql(r)):Ym.has(Ni.extname(i.name))&&t.push(r)}return t}async function ed(e,t){let n=[],i=1,r=Ni.join(e,"src"),o=Ti.existsSync(r)?r:e,s=Ql(o);for(let a of s){let d=Ti.readFileSync(a,"utf-8").split(`
2138
- `),c=Ni.relative(e,a);for(let u=0;u<d.length;u++){let p=d[u],m=p.trim();if(!(m.startsWith("//")||m.startsWith("*"))&&(Xl.lastIndex=0,Xl.test(p)&&n.push({id:`DBG-${String(i++).padStart(3,"0")}`,title:"Hardcoded debug flag",description:"Debug/dev mode enabled in source code",severity:"medium",category:"debug",file:c,line:u+1,recommendation:"Use __DEV__ or environment variables instead of hardcoded debug flags."}),Zl.lastIndex=0,Zl.test(p))){let h=d.slice(Math.max(0,u-3),u).join(`
2139
- `);/__DEV__/.test(h)||n.push({id:`DBG-${String(i++).padStart(3,"0")}`,title:"Sensitive data in console log",description:"Console log may expose sensitive data (token, password, etc.) in production",severity:"medium",category:"debug",file:c,line:u+1,recommendation:"Wrap in __DEV__ check or remove sensitive data from console output."})}}}return{category:"debug",label:"Debug/Dev Flags",findings:n,durationMs:0}}import td from"fs";import co from"path";var Jm=new Set(["androidx.work.impl.background.systemjob.SystemJobService","androidx.work.impl.diagnostics.DiagnosticsReceiver","com.google.firebase.iid.FirebaseInstanceIdReceiver","com.google.android.gms.auth.api.signin.RevocationBoundService","androidx.profileinstaller.ProfileInstallReceiver","com.google.firebase.messaging.FirebaseMessagingService","com.google.android.gms.measurement.AppMeasurementService","com.google.android.gms.measurement.AppMeasurementJobService"]);function Xm(e){let t=[co.join(e,"android","app","src","main","AndroidManifest.xml"),co.join(e,"android","AndroidManifest.xml")];for(let n of t)if(td.existsSync(n))return n;return null}async function nd(e,t){let n=[],i=1,r=Xm(e);if(!r)return{category:"manifest",label:"Android Manifest",findings:[],durationMs:0,error:"No AndroidManifest.xml found. Run with --prebuild or run `expo prebuild` first."};let o=td.readFileSync(r,"utf-8"),s=co.relative(e,r),a=/<(activity|service|receiver|provider)\s+([^>]*?)(?:\/>|>)/gs,l;for(;(l=a.exec(o))!==null;){let d=l[1],c=l[2],p=c.match(/android:name="([^"]+)"/)?.[1]||"unknown";if(Jm.has(p))continue;let m=/android:exported="true"/.test(c),h=/android:permission="/.test(c);m&&!h&&n.push({id:`MAN-${String(i++).padStart(3,"0")}`,title:`Exported ${d}: ${p.split(".").pop()}`,description:`${p} is exported=true without android:permission protection`,severity:"medium",category:"manifest",file:s,recommendation:'Set android:exported="false" or add an android:permission attribute.'})}return/android:allowBackup="true"/.test(o)&&n.push({id:`MAN-${String(i++).padStart(3,"0")}`,title:"allowBackup is enabled",description:'android:allowBackup="true" allows data extraction via ADB backup',severity:"medium",category:"manifest",file:s,recommendation:'Set android:allowBackup="false" via expo-build-properties plugin.',autoFixable:!0}),/android:debuggable="true"/.test(o)&&n.push({id:`MAN-${String(i++).padStart(3,"0")}`,title:"App is debuggable",description:'android:debuggable="true" allows attaching a debugger in production',severity:"critical",category:"manifest",file:s,recommendation:"Ensure debuggable is false for production builds. This is usually set automatically for release builds."}),{category:"manifest",label:"Android Manifest",findings:n,durationMs:0}}import ki from"fs";import uo from"path";function Zm(e){let t=uo.join(e,"ios");if(!ki.existsSync(t))return null;let n=ki.readdirSync(t,{withFileTypes:!0});for(let i of n){if(!i.isDirectory()||i.name==="Pods"||i.name.startsWith("."))continue;let r=uo.join(t,i.name,"Info.plist");if(ki.existsSync(r))return r}return null}async function id(e,t){let n=[],i=1,r=Zm(e);if(!r)return{category:"ats",label:"iOS ATS Config",findings:[],durationMs:0,error:"No Info.plist found. Run with --prebuild or run `expo prebuild` first."};let o=ki.readFileSync(r,"utf-8"),s=uo.relative(e,r),a=o.match(/<key>NSAppTransportSecurity<\/key>\s*<dict>([\s\S]*?)<\/dict>/);if(a){let l=a[1];/<key>NSAllowsArbitraryLoads<\/key>\s*<true\s*\/>/.test(l)&&n.push({id:`ATS-${String(i++).padStart(3,"0")}`,title:"ATS disabled \u2014 NSAllowsArbitraryLoads",description:"App Transport Security is completely disabled. All HTTP connections are allowed.",severity:"critical",category:"ats",file:s,recommendation:"Remove NSAllowsArbitraryLoads or set to false. Use domain-specific exceptions only if absolutely necessary."});let d=l.match(/<key>NSExceptionDomains<\/key>\s*<dict>([\s\S]*?)<\/dict>/);if(d){let c=d[1].match(/<key>([^<]+)<\/key>/g);if(c)for(let u of c){let p=u.replace(/<\/?key>/g,"");p!=="NSExceptionDomains"&&n.push({id:`ATS-${String(i++).padStart(3,"0")}`,title:`ATS exception: ${p}`,description:`ATS exception configured for ${p}`,severity:"low",category:"ats",file:s,recommendation:`Verify that the ATS exception for ${p} is necessary. Use HTTPS where possible.`})}}}return{category:"ats",label:"iOS ATS Config",findings:n,durationMs:0}}var eg=[{category:"permissions",label:"Permission Audit",fn:jl,requiresPrebuild:!1},{category:"secrets",label:"Secrets Detection",fn:Gl,requiresPrebuild:!1},{category:"dependencies",label:"Dependency CVEs",fn:Vl,requiresPrebuild:!1},{category:"storage",label:"Insecure Storage",fn:Wl,requiresPrebuild:!1},{category:"network",label:"HTTP URLs",fn:Jl,requiresPrebuild:!1},{category:"debug",label:"Debug/Dev Flags",fn:ed,requiresPrebuild:!1},{category:"manifest",label:"Android Manifest",fn:nd,requiresPrebuild:!0},{category:"ats",label:"iOS ATS Config",fn:id,requiresPrebuild:!0}];async function ad(e,t){let n=eg;t.category&&(n=n.filter(s=>s.category===t.category),n.length===0&&(Dn.error($e.red(`Unknown category: ${t.category}`)),Dn.info($e.dim(`Available: ${Object.values(Be).join(", ")}`)),process.exit(1)));let i=n.filter(s=>!s.requiresPrebuild),r=n.filter(s=>s.requiresPrebuild),o=[];for(let s of i){let a=rd();a.start($e.dim(`Running ${s.label}...`));try{let l=Date.now(),d=await s.fn(e,t);d.durationMs=Date.now()-l,o.push(d);let c=d.findings.length;a.stop(c>0?$e.yellow(`${s.label} \u2014 ${c} finding(s)`):$e.green(`${s.label} \u2014 clean`))}catch(l){a.stop($e.red(`${s.label} \u2014 error`)),o.push({category:s.category,label:s.label,findings:[],durationMs:0,error:l.message})}}if(r.length>0){let s=sd.join(e,"android"),a=sd.join(e,"ios"),l=od.existsSync(s)||od.existsSync(a);if(!l&&t.prebuild){t.json||Dn.info($e.dim(`
2140
- Running expo prebuild for deeper analysis...`));try{Qm("npx expo prebuild --no-install",{cwd:e,stdio:"pipe"})}catch{return Dn.warn($e.yellow("Prebuild failed \u2014 skipping manifest/plist checks.")),o}}else if(!l)return t.json||Dn.info($e.dim(`
2141
- Skipping manifest/plist checks \u2014 no android/ios dirs. Use --prebuild to generate them.`)),o;for(let d of r){let c=rd();c.start($e.dim(`Running ${d.label}...`));try{let u=Date.now(),p=await d.fn(e,t);p.durationMs=Date.now()-u,o.push(p);let m=p.findings.length;c.stop(m>0?$e.yellow(`${d.label} \u2014 ${m} finding(s)`):$e.green(`${d.label} \u2014 clean`))}catch(u){c.stop($e.red(`${d.label} \u2014 error`)),o.push({category:d.category,label:d.label,findings:[],durationMs:0,error:u.message})}}}return o}import pe from"chalk";import{log as ae}from"@clack/prompts";var Gt={critical:pe.bgRed.white.bold,high:pe.red.bold,medium:pe.yellow.bold,low:pe.blue,info:pe.dim},xi={critical:0,high:1,medium:2,low:3,info:4};function tg(e,t){if(!t)return!0;let n=xi[t];return n===void 0?!0:xi[e]<=n}function ld(e,t){let n=0,i={critical:0,high:0,medium:0,low:0,info:0};for(let s of e){let a=s.findings.filter(d=>tg(d.severity,t));if(a.length===0&&!s.error)continue;if(ae.info(""),ae.info(pe.bold(` ${s.label}`)+pe.dim(` ${a.length} finding(s)`)),ae.info(pe.dim(" "+"\u2500".repeat(60))),s.error){ae.error(pe.red(` Error: ${s.error}`));continue}let l=[...a].sort((d,c)=>xi[d.severity]-xi[c.severity]);for(let d of l){let c=Gt[d.severity](` ${d.severity.toUpperCase()} `);ae.info(` ${c} ${pe.bold(d.id)} ${d.title}`),ae.info(pe.dim(` ${d.description}`)),d.file&&ae.info(pe.dim(` File: ${d.file}${d.line?`:${d.line}`:""}`)),ae.info(pe.cyan(` Fix: ${d.recommendation}`)),ae.info(""),i[d.severity]++,n++}}ae.info(""),ae.info(pe.bold(" Summary")),ae.info(pe.dim(" "+"\u2500".repeat(60))),ae.info(` Total: ${pe.bold(String(n))} finding(s)`),ae.info(` ${Gt.critical(` ${i.critical} Critical `)} ${Gt.high(` ${i.high} High `)} ${Gt.medium(` ${i.medium} Medium `)} ${Gt.low(` ${i.low} Low `)} ${Gt.info(` ${i.info} Info `)}`);let r=i.critical>0,o=i.high>0;r||o?(ae.info(""),ae.error(pe.red.bold(` FAIL \u2014 ${i.critical} critical, ${i.high} high issue(s) found`))):n>0?(ae.info(""),ae.warn(pe.yellow(" PASS (with warnings) \u2014 no critical or high issues"))):(ae.info(""),ae.success(pe.green.bold(" PASS \u2014 no issues found")))}function dd(e,t){let n=e.flatMap(r=>r.findings),i={};for(let r of Object.values(Ce))i[r]=n.filter(o=>o.severity===r).length;return{version:"1.0.0",timestamp:new Date().toISOString(),project:t.name||"unknown",projectVersion:t.version||"0.0.0",summary:{total:n.length,...i},passed:i.critical===0&&i.high===0,checks:e.map(r=>({category:r.category,label:r.label,findingCount:r.findings.length,durationMs:r.durationMs,error:r.error||null})),findings:n}}import{log as le,spinner as ng}from"@clack/prompts";import ie from"chalk";import et from"fs";import ig from"os";import Vt from"path";import{execSync as rg}from"child_process";var cd=16384,og=1,sg=Buffer.from([127,69,76,70]);async function ud(e){le.info(ie.bold.underline("16KB Page Alignment Check")),console.log("");let t=Vt.resolve(e);if(!et.existsSync(t))return le.error(ie.red(`APK file not found: ${t}`)),!1;if(!t.endsWith(".apk"))return le.error(ie.red("The provided file is not an APK file.")),!1;let n=ng();n.start("Extracting and analyzing native libraries...");let i=et.mkdtempSync(Vt.join(ig.tmpdir(),"mach-16kb-"));try{try{rg(`unzip -o -q "${t}" "lib/arm64-v8a/*.so" "lib/x86_64/*.so" -d "${i}" 2>/dev/null`,{encoding:"utf-8",maxBuffer:50*1024*1024})}catch{}let r=pd(Vt.join(i,"lib"));if(r.length===0)return n.stop("Analysis complete."),le.info(ie.yellow("No arm64-v8a or x86_64 native libraries found in the APK.")),le.info(ie.dim("16KB alignment check only applies to arm64-v8a and x86_64 architectures.")),!0;let o=[];for(let l of r){let d=Vt.relative(i,l),c=lg(d),u=Vt.basename(l),p=ag(l);p!==null&&o.push({name:u,filePath:d,arch:c,align:p,compatible:p>=cd})}if(n.stop("Analysis complete."),o.length===0)return le.info(ie.yellow("No valid ELF shared libraries found.")),!0;let s=o.filter(l=>!l.compatible),a=o.filter(l=>l.compatible);if(le.info(ie.dim(`Checked ${o.length} native librar${o.length===1?"y":"ies"}
2134
+ `),"Registered Devices")}catch(i){n.stop(V.red("Failed to fetch devices")),De.error(i.response?.data?.message||i.message)}Pn(V.blue("---"))}async function Dm(e){let t=e.udid,n=jl(e).teamId;if(!t){let o=Rn();o.start("Fetching registered devices...");try{let a=(await w.get("/devices",n?{params:{teamId:n}}:void 0)).data.devices||[];if(o.stop(`${a.length} device(s) found`),a.length===0){De.info(V.dim("No devices to remove.")),Pn(V.blue("---"));return}let l=await Fl({message:"Select device to remove:",options:a.map(c=>({value:c.deviceKey||c.udid,label:c.name,hint:`${c.udid.substring(0,12)}...${c.teamId?` \xB7 ${c.teamId}`:""}`}))});if($n(l)){vn("Cancelled");return}let d=a.find(c=>(c.deviceKey||c.udid)===l);t=d?.udid||l,n=d?.teamId||n}catch(s){o.stop(V.red("Failed to fetch devices")),De.error(s.response?.data?.message||s.message);return}}let i=await wm({message:`Remove device ${V.dim(t.substring(0,12)+"...")}?`});if($n(i)||!i){vn("Cancelled");return}let r=Rn();r.start("Removing device...");try{await w.delete(`/devices/${encodeURIComponent(t)}`,n?{params:{teamId:n}}:void 0),r.stop(V.green("Device removed"))}catch(o){r.stop(V.red("Failed to remove device")),De.error(o.response?.data?.message||o.message)}Pn(V.blue("---"))}async function vi(e,t){switch(e){case"register":await Pm(t);break;case"list":await Om(t);break;case"remove":await Dm(t);break;default:De.error(`Unknown action: ${e}`)}}import{log as Te,spinner as hd}from"@clack/prompts";import je from"chalk";import Li from"path";import Cn from"fs";import cg from"os";import ug from"axios";var Ce=(o=>(o.CRITICAL="critical",o.HIGH="high",o.MEDIUM="medium",o.LOW="low",o.INFO="info",o))(Ce||{}),Be=(l=>(l.PERMISSIONS="permissions",l.SECRETS="secrets",l.DEPENDENCIES="dependencies",l.STORAGE="storage",l.NETWORK="network",l.DEBUG="debug",l.MANIFEST="manifest",l.ATS="ats",l))(Be||{});import{spinner as sd,log as Dn}from"@clack/prompts";import $e from"chalk";import{execSync as eg}from"child_process";import ad from"fs";import ld from"path";import gt from"fs";import On from"path";import{execSync as Cm}from"child_process";var Hl={"android.permission.READ_PHONE_STATE":{severity:"high",description:"Can read phone number, IMEI, carrier info"},"android.permission.CALL_PHONE":{severity:"high",description:"Can make calls without user interaction"},"android.permission.SEND_SMS":{severity:"high",description:"Can send SMS without user interaction"},"android.permission.READ_SMS":{severity:"high",description:"Can read user SMS messages"},"android.permission.READ_CONTACTS":{severity:"medium",description:"Can read user contacts"},"android.permission.WRITE_CONTACTS":{severity:"medium",description:"Can modify user contacts"},"android.permission.READ_CALL_LOG":{severity:"high",description:"Can read call history"},"android.permission.CAMERA":{severity:"medium",description:"Camera access"},"android.permission.RECORD_AUDIO":{severity:"medium",description:"Microphone access"},"android.permission.ACCESS_FINE_LOCATION":{severity:"medium",description:"Precise GPS location"},"android.permission.ACCESS_COARSE_LOCATION":{severity:"medium",description:"Approximate location"},"android.permission.ACCESS_BACKGROUND_LOCATION":{severity:"high",description:"Background location tracking"},"android.permission.READ_EXTERNAL_STORAGE":{severity:"medium",description:"Read files on device"},"android.permission.WRITE_EXTERNAL_STORAGE":{severity:"medium",description:"Write files on device"},"android.permission.READ_MEDIA_IMAGES":{severity:"low",description:"Read photos"},"android.permission.READ_MEDIA_VIDEO":{severity:"low",description:"Read videos"},"android.permission.SYSTEM_ALERT_WINDOW":{severity:"high",description:"Draw overlays on other apps"},"android.permission.REQUEST_INSTALL_PACKAGES":{severity:"high",description:"Can install APKs"}},Tm={NSCameraUsageDescription:{severity:"medium",description:"Camera access declared"},NSMicrophoneUsageDescription:{severity:"medium",description:"Microphone access declared"},NSLocationWhenInUseUsageDescription:{severity:"medium",description:"Location (in-use) declared"},NSLocationAlwaysUsageDescription:{severity:"high",description:"Background location declared"},NSContactsUsageDescription:{severity:"medium",description:"Contacts access declared"},NSCalendarsUsageDescription:{severity:"low",description:"Calendar access declared"},NSPhotoLibraryUsageDescription:{severity:"low",description:"Photo library access declared"}};function Nm(e){try{let n=Cm("npx expo config --type introspect --json 2>/dev/null",{cwd:e,encoding:"utf-8",timeout:3e4});return JSON.parse(n)}catch{}let t=On.join(e,"app.json");if(gt.existsSync(t))try{let n=JSON.parse(gt.readFileSync(t,"utf-8"));return n.expo||n}catch{}return null}function km(e){let t=[],n=On.join(e,"node_modules");if(!gt.existsSync(n))return t;let i=/<uses-permission\s+android:name="([^"]+)"/g;function r(o,s){let a=On.join(o,"android","src","main","AndroidManifest.xml");if(!gt.existsSync(a))return;let l=gt.readFileSync(a,"utf-8"),d;for(;(d=i.exec(l))!==null;)t.push({pkg:s,permission:d[1]});i.lastIndex=0}for(let o of gt.readdirSync(n)){if(o.startsWith("."))continue;let s=On.join(n,o);if(o.startsWith("@")){if(!gt.statSync(s).isDirectory())continue;for(let a of gt.readdirSync(s))r(On.join(s,a),`${o}/${a}`)}else r(s,o)}return t}async function Gl(e,t){let n=[],i=1,r=Nm(e),o=r?.android?.permissions||[],s=r?.android?.blockedPermissions||[];for(let d of o){let c=Hl[d];c&&n.push({id:`PERM-${String(i++).padStart(3,"0")}`,title:`${d.split(".").pop()} declared`,description:c.description,severity:c.severity,category:"permissions",file:"app.config.ts",recommendation:"Remove from permissions if not needed, or add justification."})}let a=km(e);for(let{pkg:d,permission:c}of a){let u=Hl[c];u&&(s.includes(c)||o.includes(c)||n.push({id:`PERM-${String(i++).padStart(3,"0")}`,title:`${c.split(".").pop()} injected by ${d}`,description:`${u.description}. Auto-injected via ${d} AndroidManifest.xml`,severity:u.severity,category:"permissions",file:`node_modules/${d}/android/src/main/AndroidManifest.xml`,recommendation:`Add "${c}" to blockedPermissions if not needed.`,autoFixable:!0}))}let l=r?.ios?.infoPlist||{};for(let[d,c]of Object.entries(Tm))d in l&&n.push({id:`PERM-${String(i++).padStart(3,"0")}`,title:`iOS: ${d} declared`,description:c.description,severity:c.severity,category:"permissions",file:"app.config.ts",recommendation:`Remove ${d} from infoPlist if the app does not use this capability.`});return{category:"permissions",label:"Permission Audit",findings:n,durationMs:0}}import po from"fs";import Ri from"path";var xm=[{id:"SEC-001",pattern:/(['"`])(?:sk|pk)_(?:live|test)_[a-zA-Z0-9]{20,}\1/g,severity:"critical",label:"Stripe API Key"},{id:"SEC-002",pattern:/(['"`])AIza[0-9A-Za-z\-_]{35}\1/g,severity:"high",label:"Google API Key"},{id:"SEC-003",pattern:/(['"`])AKIA[0-9A-Z]{16}\1/g,severity:"critical",label:"AWS Access Key ID"},{id:"SEC-004",pattern:/-----BEGIN (?:RSA |EC )?PRIVATE KEY-----/g,severity:"critical",label:"Private key in source"},{id:"SEC-005",pattern:/(?:ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9_]{36,}/g,severity:"high",label:"GitHub Token"},{id:"SEC-006",pattern:/xox[bpors]-[a-zA-Z0-9-]{10,}/g,severity:"high",label:"Slack Token"},{id:"SEC-007",pattern:/(?:password|secret|apikey|api_key)\s*[:=]\s*['"`][^'"`\n]{8,}['"`]/gi,severity:"high",label:"Hardcoded credential"}],Lm=new Set([".ts",".tsx",".js",".jsx"]),Mm=new Set(["node_modules",".expo",".git","android","ios","dist","build","__tests__","__mocks__"]);function Vl(e){let t=[],n=po.readdirSync(e,{withFileTypes:!0});for(let i of n){if(Mm.has(i.name))continue;let r=Ri.join(e,i.name);i.isDirectory()?t.push(...Vl(r)):Lm.has(Ri.extname(i.name))&&t.push(r)}return t}function Um(e){let t=e.trim();return t.startsWith("//")||t.startsWith("*")||t.startsWith("/*")}function Fm(e){return/process\.env\./i.test(e)||/import\.meta\.env/i.test(e)}async function zl(e,t){let n=[],i=Ri.join(e,"src"),r=po.existsSync(i)?i:e,o=Vl(r);for(let s of o){let l=po.readFileSync(s,"utf-8").split(`
2135
+ `),d=Ri.relative(e,s);for(let c=0;c<l.length;c++){let u=l[c];if(!Um(u)&&!Fm(u))for(let{id:p,pattern:m,severity:h,label:g}of xm)m.lastIndex=0,m.test(u)&&n.push({id:p,title:g,description:`Potential ${g.toLowerCase()} found in source code`,severity:h,category:"secrets",file:d,line:c+1,recommendation:`Move to environment variables or a secrets manager. Use \`${f.nameLower} env set\` for managed secrets.`})}}return{category:"secrets",label:"Secrets Detection",findings:n,durationMs:0}}import{execSync as Bm}from"child_process";var jm={critical:"critical",high:"high",moderate:"medium",low:"low",info:"info"};async function Kl(e,t){let n=[],i=1,r;try{r=Bm("npm audit --json 2>/dev/null",{cwd:e,encoding:"utf-8",timeout:6e4})}catch(a){if(r=a.stdout||"",!r)return{category:"dependencies",label:"Dependency CVEs",findings:[],durationMs:0,error:"Failed to run npm audit. Ensure npm is available and dependencies are installed."}}let o;try{o=JSON.parse(r)}catch{return{category:"dependencies",label:"Dependency CVEs",findings:[],durationMs:0,error:"Failed to parse npm audit output."}}let s=o.vulnerabilities||{};for(let[a,l]of Object.entries(s)){let d=jm[l.severity]||"info",c=Array.isArray(l.via)?l.via.map(u=>typeof u=="string"?u:u.title||u.name).join(", "):String(l.via);n.push({id:`DEP-${String(i++).padStart(3,"0")}`,title:`${a} \u2014 ${l.severity}`,description:`Via: ${c}. Range: ${l.range||"unknown"}`,severity:d,category:"dependencies",recommendation:l.fixAvailable?`Run \`npm audit fix\` or update ${a} to a patched version.`:"No fix available yet. Monitor for updates or evaluate alternatives.",autoFixable:!!l.fixAvailable})}return{category:"dependencies",label:"Dependency CVEs",findings:n,durationMs:0}}import Pi from"fs";import Oi from"path";var Hm=/(?:token|password|credential|secret|apiKey|api_key|session|auth|jwt|refresh_token|access_token|private_key|pin|otp)/i,Wl=/AsyncStorage\s*\.\s*(?:setItem|mergeItem)\s*\(\s*['"`]([^'"`]+)['"`]/g,Gm=/from\s+['"]@react-native-async-storage\/async-storage['"]|from\s+['"]react-native['"].*AsyncStorage/,Vm=new Set([".ts",".tsx",".js",".jsx"]),zm=new Set(["node_modules",".expo",".git","android","ios","dist","build"]);function Yl(e){let t=[];if(!Pi.existsSync(e))return t;let n=Pi.readdirSync(e,{withFileTypes:!0});for(let i of n){if(zm.has(i.name))continue;let r=Oi.join(e,i.name);i.isDirectory()?t.push(...Yl(r)):Vm.has(Oi.extname(i.name))&&t.push(r)}return t}async function ql(e,t){let n=[],i=1,r=Oi.join(e,"src"),o=Pi.existsSync(r)?r:e,s=Yl(o);for(let a of s){let l=Pi.readFileSync(a,"utf-8");if(!Gm.test(l))continue;let d=l.split(`
2136
+ `),c=Oi.relative(e,a);for(let u=0;u<d.length;u++){let p=d[u];Wl.lastIndex=0;let m;for(;(m=Wl.exec(p))!==null;){let h=m[1];Hm.test(h)&&n.push({id:`STOR-${String(i++).padStart(3,"0")}`,title:`AsyncStorage used for "${h}"`,description:`Sensitive data key "${h}" stored in AsyncStorage (unencrypted).`,severity:"high",category:"storage",file:c,line:u+1,recommendation:"Use expo-secure-store (SecureStore) for sensitive data instead of AsyncStorage."})}}}return{category:"storage",label:"Insecure Storage",findings:n,durationMs:0}}import Di from"fs";import Ci from"path";var Jl=/['"`](http:\/\/(?!localhost|127\.0\.0\.1|10\.|192\.168\.|0\.0\.0\.0|172\.(?:1[6-9]|2\d|3[01])\.)[^'"`\s]+)['"`]/g,Km=/\/api\/|\/v[0-9]+\/|\/graphql|\/rest\//i,Wm=new Set([".ts",".tsx",".js",".jsx"]),Ym=new Set(["node_modules",".expo",".git","android","ios","dist","build","__tests__","__mocks__"]);function Xl(e){let t=[];if(!Di.existsSync(e))return t;let n=Di.readdirSync(e,{withFileTypes:!0});for(let i of n){if(Ym.has(i.name))continue;let r=Ci.join(e,i.name);i.isDirectory()?t.push(...Xl(r)):Wm.has(Ci.extname(i.name))&&t.push(r)}return t}async function Zl(e,t){let n=[],i=1,r=Ci.join(e,"src"),o=Di.existsSync(r)?r:e,s=Xl(o);for(let a of s){let d=Di.readFileSync(a,"utf-8").split(`
2137
+ `),c=Ci.relative(e,a);for(let u=0;u<d.length;u++){let p=d[u],m=p.trim();if(m.startsWith("//")||m.startsWith("*"))continue;Jl.lastIndex=0;let h;for(;(h=Jl.exec(p))!==null;){let g=h[1],S=Km.test(g);n.push({id:`NET-${String(i++).padStart(3,"0")}`,title:`Insecure HTTP URL${S?" (API endpoint)":""}`,description:`Plain HTTP URL found: ${g}`,severity:S?"high":"medium",category:"network",file:c,line:u+1,recommendation:"Use HTTPS instead of HTTP for all network requests."})}}}return{category:"network",label:"HTTP URLs",findings:n,durationMs:0}}import Ti from"fs";import Ni from"path";var Ql=/(?:debug|debugMode|devMode|enableDebug)\s*[:=]\s*true/gi,ed=/console\.(?:log|warn|info|debug)\s*\([^)]*(?:token|password|secret|credential|key|auth)/gi,qm=new Set([".ts",".tsx",".js",".jsx"]),Jm=new Set(["node_modules",".expo",".git","android","ios","dist","build","__tests__","__mocks__"]);function td(e){let t=[];if(!Ti.existsSync(e))return t;let n=Ti.readdirSync(e,{withFileTypes:!0});for(let i of n){if(Jm.has(i.name))continue;let r=Ni.join(e,i.name);i.isDirectory()?t.push(...td(r)):qm.has(Ni.extname(i.name))&&t.push(r)}return t}async function nd(e,t){let n=[],i=1,r=Ni.join(e,"src"),o=Ti.existsSync(r)?r:e,s=td(o);for(let a of s){let d=Ti.readFileSync(a,"utf-8").split(`
2138
+ `),c=Ni.relative(e,a);for(let u=0;u<d.length;u++){let p=d[u],m=p.trim();if(!(m.startsWith("//")||m.startsWith("*"))&&(Ql.lastIndex=0,Ql.test(p)&&n.push({id:`DBG-${String(i++).padStart(3,"0")}`,title:"Hardcoded debug flag",description:"Debug/dev mode enabled in source code",severity:"medium",category:"debug",file:c,line:u+1,recommendation:"Use __DEV__ or environment variables instead of hardcoded debug flags."}),ed.lastIndex=0,ed.test(p))){let h=d.slice(Math.max(0,u-3),u).join(`
2139
+ `);/__DEV__/.test(h)||n.push({id:`DBG-${String(i++).padStart(3,"0")}`,title:"Sensitive data in console log",description:"Console log may expose sensitive data (token, password, etc.) in production",severity:"medium",category:"debug",file:c,line:u+1,recommendation:"Wrap in __DEV__ check or remove sensitive data from console output."})}}}return{category:"debug",label:"Debug/Dev Flags",findings:n,durationMs:0}}import id from"fs";import fo from"path";var Xm=new Set(["androidx.work.impl.background.systemjob.SystemJobService","androidx.work.impl.diagnostics.DiagnosticsReceiver","com.google.firebase.iid.FirebaseInstanceIdReceiver","com.google.android.gms.auth.api.signin.RevocationBoundService","androidx.profileinstaller.ProfileInstallReceiver","com.google.firebase.messaging.FirebaseMessagingService","com.google.android.gms.measurement.AppMeasurementService","com.google.android.gms.measurement.AppMeasurementJobService"]);function Zm(e){let t=[fo.join(e,"android","app","src","main","AndroidManifest.xml"),fo.join(e,"android","AndroidManifest.xml")];for(let n of t)if(id.existsSync(n))return n;return null}async function rd(e,t){let n=[],i=1,r=Zm(e);if(!r)return{category:"manifest",label:"Android Manifest",findings:[],durationMs:0,error:"No AndroidManifest.xml found. Run with --prebuild or run `expo prebuild` first."};let o=id.readFileSync(r,"utf-8"),s=fo.relative(e,r),a=/<(activity|service|receiver|provider)\s+([^>]*?)(?:\/>|>)/gs,l;for(;(l=a.exec(o))!==null;){let d=l[1],c=l[2],p=c.match(/android:name="([^"]+)"/)?.[1]||"unknown";if(Xm.has(p))continue;let m=/android:exported="true"/.test(c),h=/android:permission="/.test(c);m&&!h&&n.push({id:`MAN-${String(i++).padStart(3,"0")}`,title:`Exported ${d}: ${p.split(".").pop()}`,description:`${p} is exported=true without android:permission protection`,severity:"medium",category:"manifest",file:s,recommendation:'Set android:exported="false" or add an android:permission attribute.'})}return/android:allowBackup="true"/.test(o)&&n.push({id:`MAN-${String(i++).padStart(3,"0")}`,title:"allowBackup is enabled",description:'android:allowBackup="true" allows data extraction via ADB backup',severity:"medium",category:"manifest",file:s,recommendation:'Set android:allowBackup="false" via expo-build-properties plugin.',autoFixable:!0}),/android:debuggable="true"/.test(o)&&n.push({id:`MAN-${String(i++).padStart(3,"0")}`,title:"App is debuggable",description:'android:debuggable="true" allows attaching a debugger in production',severity:"critical",category:"manifest",file:s,recommendation:"Ensure debuggable is false for production builds. This is usually set automatically for release builds."}),{category:"manifest",label:"Android Manifest",findings:n,durationMs:0}}import ki from"fs";import mo from"path";function Qm(e){let t=mo.join(e,"ios");if(!ki.existsSync(t))return null;let n=ki.readdirSync(t,{withFileTypes:!0});for(let i of n){if(!i.isDirectory()||i.name==="Pods"||i.name.startsWith("."))continue;let r=mo.join(t,i.name,"Info.plist");if(ki.existsSync(r))return r}return null}async function od(e,t){let n=[],i=1,r=Qm(e);if(!r)return{category:"ats",label:"iOS ATS Config",findings:[],durationMs:0,error:"No Info.plist found. Run with --prebuild or run `expo prebuild` first."};let o=ki.readFileSync(r,"utf-8"),s=mo.relative(e,r),a=o.match(/<key>NSAppTransportSecurity<\/key>\s*<dict>([\s\S]*?)<\/dict>/);if(a){let l=a[1];/<key>NSAllowsArbitraryLoads<\/key>\s*<true\s*\/>/.test(l)&&n.push({id:`ATS-${String(i++).padStart(3,"0")}`,title:"ATS disabled \u2014 NSAllowsArbitraryLoads",description:"App Transport Security is completely disabled. All HTTP connections are allowed.",severity:"critical",category:"ats",file:s,recommendation:"Remove NSAllowsArbitraryLoads or set to false. Use domain-specific exceptions only if absolutely necessary."});let d=l.match(/<key>NSExceptionDomains<\/key>\s*<dict>([\s\S]*?)<\/dict>/);if(d){let c=d[1].match(/<key>([^<]+)<\/key>/g);if(c)for(let u of c){let p=u.replace(/<\/?key>/g,"");p!=="NSExceptionDomains"&&n.push({id:`ATS-${String(i++).padStart(3,"0")}`,title:`ATS exception: ${p}`,description:`ATS exception configured for ${p}`,severity:"low",category:"ats",file:s,recommendation:`Verify that the ATS exception for ${p} is necessary. Use HTTPS where possible.`})}}}return{category:"ats",label:"iOS ATS Config",findings:n,durationMs:0}}var tg=[{category:"permissions",label:"Permission Audit",fn:Gl,requiresPrebuild:!1},{category:"secrets",label:"Secrets Detection",fn:zl,requiresPrebuild:!1},{category:"dependencies",label:"Dependency CVEs",fn:Kl,requiresPrebuild:!1},{category:"storage",label:"Insecure Storage",fn:ql,requiresPrebuild:!1},{category:"network",label:"HTTP URLs",fn:Zl,requiresPrebuild:!1},{category:"debug",label:"Debug/Dev Flags",fn:nd,requiresPrebuild:!1},{category:"manifest",label:"Android Manifest",fn:rd,requiresPrebuild:!0},{category:"ats",label:"iOS ATS Config",fn:od,requiresPrebuild:!0}];async function dd(e,t){let n=tg;t.category&&(n=n.filter(s=>s.category===t.category),n.length===0&&(Dn.error($e.red(`Unknown category: ${t.category}`)),Dn.info($e.dim(`Available: ${Object.values(Be).join(", ")}`)),process.exit(1)));let i=n.filter(s=>!s.requiresPrebuild),r=n.filter(s=>s.requiresPrebuild),o=[];for(let s of i){let a=sd();a.start($e.dim(`Running ${s.label}...`));try{let l=Date.now(),d=await s.fn(e,t);d.durationMs=Date.now()-l,o.push(d);let c=d.findings.length;a.stop(c>0?$e.yellow(`${s.label} \u2014 ${c} finding(s)`):$e.green(`${s.label} \u2014 clean`))}catch(l){a.stop($e.red(`${s.label} \u2014 error`)),o.push({category:s.category,label:s.label,findings:[],durationMs:0,error:l.message})}}if(r.length>0){let s=ld.join(e,"android"),a=ld.join(e,"ios"),l=ad.existsSync(s)||ad.existsSync(a);if(!l&&t.prebuild){t.json||Dn.info($e.dim(`
2140
+ Running expo prebuild for deeper analysis...`));try{eg("npx expo prebuild --no-install",{cwd:e,stdio:"pipe"})}catch{return Dn.warn($e.yellow("Prebuild failed \u2014 skipping manifest/plist checks.")),o}}else if(!l)return t.json||Dn.info($e.dim(`
2141
+ Skipping manifest/plist checks \u2014 no android/ios dirs. Use --prebuild to generate them.`)),o;for(let d of r){let c=sd();c.start($e.dim(`Running ${d.label}...`));try{let u=Date.now(),p=await d.fn(e,t);p.durationMs=Date.now()-u,o.push(p);let m=p.findings.length;c.stop(m>0?$e.yellow(`${d.label} \u2014 ${m} finding(s)`):$e.green(`${d.label} \u2014 clean`))}catch(u){c.stop($e.red(`${d.label} \u2014 error`)),o.push({category:d.category,label:d.label,findings:[],durationMs:0,error:u.message})}}}return o}import pe from"chalk";import{log as ae}from"@clack/prompts";var Gt={critical:pe.bgRed.white.bold,high:pe.red.bold,medium:pe.yellow.bold,low:pe.blue,info:pe.dim},xi={critical:0,high:1,medium:2,low:3,info:4};function ng(e,t){if(!t)return!0;let n=xi[t];return n===void 0?!0:xi[e]<=n}function cd(e,t){let n=0,i={critical:0,high:0,medium:0,low:0,info:0};for(let s of e){let a=s.findings.filter(d=>ng(d.severity,t));if(a.length===0&&!s.error)continue;if(ae.info(""),ae.info(pe.bold(` ${s.label}`)+pe.dim(` ${a.length} finding(s)`)),ae.info(pe.dim(" "+"\u2500".repeat(60))),s.error){ae.error(pe.red(` Error: ${s.error}`));continue}let l=[...a].sort((d,c)=>xi[d.severity]-xi[c.severity]);for(let d of l){let c=Gt[d.severity](` ${d.severity.toUpperCase()} `);ae.info(` ${c} ${pe.bold(d.id)} ${d.title}`),ae.info(pe.dim(` ${d.description}`)),d.file&&ae.info(pe.dim(` File: ${d.file}${d.line?`:${d.line}`:""}`)),ae.info(pe.cyan(` Fix: ${d.recommendation}`)),ae.info(""),i[d.severity]++,n++}}ae.info(""),ae.info(pe.bold(" Summary")),ae.info(pe.dim(" "+"\u2500".repeat(60))),ae.info(` Total: ${pe.bold(String(n))} finding(s)`),ae.info(` ${Gt.critical(` ${i.critical} Critical `)} ${Gt.high(` ${i.high} High `)} ${Gt.medium(` ${i.medium} Medium `)} ${Gt.low(` ${i.low} Low `)} ${Gt.info(` ${i.info} Info `)}`);let r=i.critical>0,o=i.high>0;r||o?(ae.info(""),ae.error(pe.red.bold(` FAIL \u2014 ${i.critical} critical, ${i.high} high issue(s) found`))):n>0?(ae.info(""),ae.warn(pe.yellow(" PASS (with warnings) \u2014 no critical or high issues"))):(ae.info(""),ae.success(pe.green.bold(" PASS \u2014 no issues found")))}function ud(e,t){let n=e.flatMap(r=>r.findings),i={};for(let r of Object.values(Ce))i[r]=n.filter(o=>o.severity===r).length;return{version:"1.0.0",timestamp:new Date().toISOString(),project:t.name||"unknown",projectVersion:t.version||"0.0.0",summary:{total:n.length,...i},passed:i.critical===0&&i.high===0,checks:e.map(r=>({category:r.category,label:r.label,findingCount:r.findings.length,durationMs:r.durationMs,error:r.error||null})),findings:n}}import{log as le,spinner as ig}from"@clack/prompts";import ie from"chalk";import et from"fs";import rg from"os";import Vt from"path";import{execSync as og}from"child_process";var pd=16384,sg=1,ag=Buffer.from([127,69,76,70]);async function fd(e){le.info(ie.bold.underline("16KB Page Alignment Check")),console.log("");let t=Vt.resolve(e);if(!et.existsSync(t))return le.error(ie.red(`APK file not found: ${t}`)),!1;if(!t.endsWith(".apk"))return le.error(ie.red("The provided file is not an APK file.")),!1;let n=ig();n.start("Extracting and analyzing native libraries...");let i=et.mkdtempSync(Vt.join(rg.tmpdir(),"mach-16kb-"));try{try{og(`unzip -o -q "${t}" "lib/arm64-v8a/*.so" "lib/x86_64/*.so" -d "${i}" 2>/dev/null`,{encoding:"utf-8",maxBuffer:50*1024*1024})}catch{}let r=md(Vt.join(i,"lib"));if(r.length===0)return n.stop("Analysis complete."),le.info(ie.yellow("No arm64-v8a or x86_64 native libraries found in the APK.")),le.info(ie.dim("16KB alignment check only applies to arm64-v8a and x86_64 architectures.")),!0;let o=[];for(let l of r){let d=Vt.relative(i,l),c=dg(d),u=Vt.basename(l),p=lg(l);p!==null&&o.push({name:u,filePath:d,arch:c,align:p,compatible:p>=pd})}if(n.stop("Analysis complete."),o.length===0)return le.info(ie.yellow("No valid ELF shared libraries found.")),!0;let s=o.filter(l=>!l.compatible),a=o.filter(l=>l.compatible);if(le.info(ie.dim(`Checked ${o.length} native librar${o.length===1?"y":"ies"}
2142
2142
  `)),s.length>0){le.info(ie.red.bold(`Incompatible libraries:
2143
- `));for(let l of s)le.error(ie.red(`${ie.bold(l.name)} ${ie.dim(`(${l.arch})`)}`)),le.info(ie.dim(` PT_LOAD alignment: 2**${Math.log2(l.align)} (${l.align} bytes, needs 2**14 = ${cd})`))}return a.length>0&&(console.log(""),le.success(ie.green(`${a.length} librar${a.length===1?"y":"ies"} correctly aligned (2**14 or higher).`))),console.log(""),s.length===0?(le.success(ie.green.bold("ELF Verification Successful. APK is 16KB compatible.")),!0):(le.error(ie.red.bold(`Found ${s.length} unaligned lib${s.length===1?"":"s"} (arm64-v8a/x86_64 libs need to be aligned).`)),console.log(""),le.info(ie.yellow("To fix this:")),le.info(ie.dim(" 1. Rebuild with NDK r28+ which defaults to 16KB page alignment")),le.info(ie.dim(" 2. Or set -DANDROID_SUPPORT_FLEXIBLE_PAGE_SIZES=ON in CMake")),le.info(ie.dim(" 3. Update third-party libraries that ship prebuilt .so files")),le.info(ie.dim(" 4. After rebuilding: zipalign -p -f -v 16 input.apk output.apk")),console.log(""),le.info(ie.dim("Reference: https://developer.android.com/guide/practices/page-sizes")),!1)}catch(r){return n.stop("Analysis failed."),le.error(ie.red(`Failed to analyze APK: ${r.message}`)),!1}finally{try{et.rmSync(i,{recursive:!0,force:!0})}catch{}}}function ag(e){let t=et.openSync(e,"r");try{let n=Buffer.alloc(64);if(et.readSync(t,n,0,64,0),!n.subarray(0,4).equals(sg))return null;let i=n[4]===2,r=n[5]===1,o=(p,m)=>r?p.readUInt16LE(m):p.readUInt16BE(m),s=(p,m)=>r?p.readUInt32LE(m):p.readUInt32BE(m),a=(p,m)=>Number(r?p.readBigUInt64LE(m):p.readBigUInt64BE(m)),l,d,c;i?(l=a(n,32),d=o(n,54),c=o(n,56)):(l=s(n,28),d=o(n,42),c=o(n,44));let u=null;for(let p=0;p<c;p++){let m=Buffer.alloc(d);if(et.readSync(t,m,0,d,l+p*d),s(m,0)!==og)continue;let g;i?g=a(m,48):g=s(m,28),g>0&&(u===null||g<u)&&(u=g)}return u??0}catch{return null}finally{et.closeSync(t)}}function pd(e){let t=[];if(!et.existsSync(e))return t;let n=et.readdirSync(e,{withFileTypes:!0});for(let i of n){let r=Vt.join(e,i.name);i.isDirectory()?t.push(...pd(r)):i.name.endsWith(".so")&&t.push(r)}return t}function lg(e){return e.includes("arm64-v8a")?"arm64-v8a":e.includes("x86_64")?"x86_64":"unknown"}var gd=async e=>{if(Ae()||(Te.error(je.red(`You are not logged in. Run \`${f.nameLower} login\` first.`)),process.exit(1)),e.apk){await ug(e);return}let n=process.cwd(),i=Li.join(n,"package.json");Cn.existsSync(i)||(Te.error(je.red("No package.json found. Run this command from a project root.")),process.exit(1));let r=JSON.parse(Cn.readFileSync(i,"utf-8")),o=!!(r.dependencies?.expo||r.devDependencies?.expo);e.json||(Te.info(je.dim(`Project: ${r.name||"unknown"} v${r.version||"0.0.0"}`)),Te.info(je.dim(`Type: ${o?"Expo":"Bare React Native"}`)),Te.info(""));let s={json:e.json,fix:e.fix,category:e.category,severity:e.severity,prebuild:e.prebuild},a=await ad(n,s);e.json?console.log(JSON.stringify(dd(a,r),null,2)):ld(a,e.severity);let l=a.some(c=>c.findings.some(u=>u.severity==="critical")),d=a.some(c=>c.findings.some(u=>u.severity==="high"));(l||d)&&process.exit(1)},fd=["16kb"];async function ug(e){let t=e.category?.toLowerCase();t&&!fd.includes(t)&&(Te.error(je.red(`Unknown APK check category: "${t}"`)),Te.info(je.dim(`Available APK checks: ${fd.join(", ")}`)),process.exit(1));let n=await pg(e.apk);n||process.exit(1);let i=!t,r=!1;(i||t==="16kb")&&(await ud(n)||(r=!0)),r&&process.exit(1)}async function pg(e){if(e.startsWith("build:")){let n=e.slice(6);return await fg(n)}if(e.startsWith("http://")||e.startsWith("https://"))return await hd(e);let t=Li.resolve(e);return Cn.existsSync(t)?t:(Te.error(je.red(`APK file not found: ${t}`)),null)}async function fg(e){let t=md();t.start(`Fetching APK from build ${e}...`);try{let n=await w.get(`/build/${e}`);if(n.data.status!=="success")throw new Error(n.data.message);let i=n.data.build;if(!i)throw new Error("Build not found");let r=i.artifacts?.find(o=>o.type?o.type==="apk":o.name?.endsWith(".apk")||o.url?.includes(".apk"));return!r||!r.url?(t.stop("No APK artifact found"),Te.error(je.red("This build does not have an APK artifact.")),Te.info(je.dim("Make sure the build produced an APK (not just an AAB).")),null):(t.stop(`Found build: ${i.buildId||e}`),await hd(r.url))}catch(n){return t.stop("Failed to fetch build"),Te.error(je.red(n.message)),null}}async function hd(e){let t=md();t.start("Downloading APK...");try{let n=Cn.mkdtempSync(Li.join(dg.tmpdir(),`${f.nameLower}-audit-`)),i=Li.join(n,"app.apk"),r=await cg.get(e,{responseType:"arraybuffer"});Cn.writeFileSync(i,r.data);let o=(r.data.length/(1024*1024)).toFixed(1);return t.stop(`Downloaded APK (${o} MB)`),i}catch(n){return t.stop("Download failed"),Te.error(je.red(`Failed to download APK: ${n.message}`)),null}}var hg=console.log;console.log=()=>{};gg();console.log=hg;Z(W.bgCyan.black(f.cliTag("Production Build Orchestrator")));var Tn=(e,t=[])=>t.concat(e),M=new mg;M.name(f.nameLower).description(`${f.name} CLI: Powerful Cloud Infrastructure Tools`).version(nt).option("-y, --yes","Automatically answer yes to all prompts",!1).option("--quiet","Suppress non-essential output",!1);M.command("agent").description("Manage local device discovery agent for the Install Hub (port 7070)").argument("[action]","start, run, install, status, restart, stop, or uninstall","start").action(async e=>{await Ca(e)});M.command("host").description("Setup AWS S3 static hosting and CloudFront").action(async()=>{Z(W.bgCyan.black(f.cliTag("Hosting"))),await Fo()});M.command("sitemap").description("Generate sitemap.xml from Expo Router app structure").option("-o, --output <path>","Output path for sitemap.xml","./public/sitemap.xml").action(async e=>{Z(W.bgCyan.black(f.cliTag("Sitemap Generator"))),await Go(e)});M.command("build").description("Run a build on a cloud provider (AWS Spot Instances)").argument("[platform]","Target platform (android, ios)").option("--platform <os>","Target platform alias (android, ios) [Optional]").option("--repo <url>","Git Repository URL").option("--branch <name>","Git Branch").option("--ami <id>","AMI ID").option("--bucket <name>","S3 Bucket for artifacts").option("--region <region>","AWS Region").option("--aws-profile <name>","AWS Credentials Profile").option("-p, --build-profile <name>","Build Profile (e.g. production, staging)").option("--profile <name>","Build Profile (alias for --build-profile)").option("--dry-run","Generate User Data script without launching").option("--keep-instance","Do not terminate the instance after build").option("--subnet <id>","VPC Subnet ID to launch the instance in").option("--security-group <id>","VPC Security Group ID to use").option("--ssh-host <host>","Remote host for iOS build (SSH)").option("--ssh-user <user>","SSH username for remote host").option("--ssh-key <path>","Path to private SSH key for remote host").option("--ios-scheme <scheme>","iOS Scheme to build").option("--ios-team-id <id>","Apple Development Team ID").option("--ios-configuration <config>","Xcode configuration (Release/Debug)").option("--ios-export-method <method>","Export method (ad-hoc, app-store, development, enterprise)").option("--ios-api-key-id <id>","App Store Connect API Key ID").option("--ios-api-key-issuer <id>","App Store Connect API Key Issuer ID").option("--ios-api-key-path <path>","Path to App Store Connect API Key (.p8) file").option("--simulator","Build for iOS Simulator (no signing required)").addOption(new Ne("--build-id <id>","Internal build ID").hideHelp()).addOption(new Ne("--project-id <id>","Internal project ID").hideHelp()).addOption(new Ne("--fail-only","Internal: mark an existing build failed").hideHelp()).addOption(new Ne("--error <message>","Internal failure message").hideHelp()).option("--local","Run build on local machine").option("--auto-version","Assign the next Android versionCode or iOS buildNumber from Mach").option("--auto-submit","Submit this build after it completes successfully").option("--submit-track <track>","Google Play track to use with --auto-submit").option("--submit-release-status <status>","Google Play release status to use with --auto-submit").option("--submit-rollout <fraction>","Google Play staged rollout fraction to use with --auto-submit").option("--submit-changes-not-sent-for-review","Commit Google Play changes without automatically sending them for review when using --auto-submit").option("--submit-credential-id <id>","Service credential ID to use with --auto-submit").option("--submit-json-output <path>","Write auto-submit metadata JSON to a file for CI/CD").option("--verbose","Enable verbose logging").option("--json-output <path>","Write build metadata JSON to a file for CI/CD").option("--maestro","Queue a managed Maestro test run after a successful build").option("--maestro-flows <path>","Maestro flow file or directory (default: .maestro)").option("--maestro-device <device>","Managed device profile id (run `mach maestro devices` to list)").option("--maestro-retries <n>","Retries for the Maestro run","1").option("--maestro-record","Enable screen recording where supported").option("--maestro-use-build-source","Use Maestro flows from the build source snapshot instead of uploading local flows").option("--maestro-env <name>","Forward an environment variable to the managed Maestro runner; repeat or comma-separate names",Tn,[]).option("-y, --yes","Automatically answer yes to all prompts",!1).option("--quiet","Suppress non-essential output",!1).action(async(e,t)=>{let n=M.opts();t.yes=t.yes||n.yes,t.quiet=t.quiet||n.quiet,t.platform=e||t.platform,t.buildProfile=t.profile||t.buildProfile,t.quiet||Z(W.bgCyan.black(f.cliTag("Cloud Build"))),await ei(t)});var yg=M.command("maestro").description("Run Maestro tests locally or with the managed Mach runner").option("--platform <os>","Target platform (android/ios)").option("-p, --profile <name>","Build profile to resolve when using --latest","production").option("--latest","Use the latest successful build for the platform/profile").option("--build-id <id>","Use a specific Mach build ID").option("--build-url <url>","Use a Mach build URL").option("--artifact-url <url>","Use a direct APK or iOS simulator app artifact URL").option("--local","Run Maestro on a connected local emulator/device instead of the managed runner").option("--maestro-flows <path>","Maestro flow file or directory (default: .maestro)").option("--maestro-device <device>","Managed device profile id (run `mach maestro devices` to list); local runs accept a device identifier").option("--maestro-retries <n>","Retries for the Maestro run","1").option("--maestro-record","Enable screen recording where supported").option("--maestro-use-build-source","Use Maestro flows from the build source snapshot instead of uploading local flows").option("--maestro-env <name>","Forward an environment variable to the managed Maestro runner; repeat or comma-separate names",Tn,[]).option("--wait","Wait for managed Maestro completion and exit non-zero on failure").option("--wait-timeout <minutes>","Maximum minutes to wait for managed Maestro completion","60").option("--wait-interval <seconds>","Polling interval while waiting for managed Maestro completion","15").option("--json-output <path>","Write test run metadata JSON to a file for CI/CD").addOption(new Ne("--local-runner","Internal: execute a managed Maestro run on this machine").hideHelp()).addOption(new Ne("--test-run-id <id>","Internal test run ID").hideHelp()).addOption(new Ne("--project-id <id>","Internal project ID").hideHelp()).addOption(new Ne("--runner-token <token>","Internal runner token").hideHelp()).action(async e=>{Z(W.bgCyan.black(f.cliTag("Maestro Testing"))),await ds(e)});yg.command("devices").description("List device profiles available on the managed Maestro runner fleet").option("--platform <os>","Filter to android or ios").option("--json","Print machine-readable JSON").action(async e=>{await cs(e)});var zt=e=>e.option("--platform <os>","Target platform: ios, android, or all","all").option("--channel <name>","OTA channel (for example: production, staging)").option("--branch <name>","Alias for --channel").option("--runtime-version <version>","Runtime version override").option("--message <text>","Release note/message for this OTA update").option("--framework <name>","Framework override: expo or react-native").option("--engine <name>","OTA engine override (currently expo-updates)").option("--url <url>","Mach OTA update URL override").option("--install-plugin","Install @radhya/mach locally for the Expo config plugin").option("--skip-install","Do not install local Expo plugin dependency").option("--update-id <id>","OTA update id for rollback/promote").option("--json","Print JSON output"),Kt=M.command("ota").description("Setup, publish, verify, and manage Mach OTA updates");zt(Kt.command("setup").description("Configure OTA for this project")).action(async e=>{let t=M.opts();Z(W.bgCyan.black(f.cliTag("OTA Setup"))),await dt("setup",{...e,yes:e.yes||t.yes})});zt(Kt.command("publish").description("Publish an OTA update")).action(async e=>{let t=M.opts();Z(W.bgCyan.black(f.cliTag("OTA Publish"))),await dt("publish",{...e,yes:e.yes||t.yes})});zt(Kt.command("verify").description("Verify OTA configuration")).action(async e=>{let t=M.opts();Z(W.bgCyan.black(f.cliTag("OTA Verify"))),await dt("verify",{...e,yes:e.yes||t.yes})});zt(Kt.command("list").description("List OTA updates for the linked project")).action(async e=>{let t=M.opts();Z(W.bgCyan.black(f.cliTag("OTA Updates"))),await dt("list",{...e,yes:e.yes||t.yes})});zt(Kt.command("rollback").description("Roll back an OTA update")).action(async e=>{let t=M.opts();Z(W.bgCyan.black(f.cliTag("OTA Rollback"))),await dt("rollback",{...e,yes:e.yes||t.yes})});zt(Kt.command("promote").description("Promote an OTA update")).action(async e=>{let t=M.opts();Z(W.bgCyan.black(f.cliTag("OTA Promote"))),await dt("promote",{...e,yes:e.yes||t.yes})});M.command("submit").description("Automated Store Submission (App Store / Google Play)").option("--platform <os>","Target platform (ios/android)").option("-p, --profile <name>","Build/submission profile to submit from (e.g. production, preprod)").option("--track <track>","Google Play Track (internal, alpha, beta, production)").option("--release-status <status>","Google Play release status (completed, draft, halted, inProgress)").option("--rollout <fraction>","Google Play staged rollout fraction for inProgress releases (example: 0.1)").option("--changes-not-sent-for-review","Commit Google Play changes without automatically sending them for review").option("--ssh-host <host>","Remote macOS host for iOS submission").option("--ssh-user <user>","SSH username for remote iOS submission").option("--ssh-key <path>","Path to private SSH key for remote iOS submission").option("--credential-id <id>","Service credential ID to use when multiple submission credentials exist").option("--local","Run submission on this machine (internal runner mode for iOS)").addOption(new Ne("--submit-id <id>","Internal submission ID").hideHelp()).addOption(new Ne("--project-id <id>","Internal project ID").hideHelp()).addOption(new Ne("--package-name <name>","Internal Android package name").hideHelp()).addOption(new Ne("--bundle-id <id>","Internal iOS bundle identifier").hideHelp()).option("--json-output <path>","Write submission metadata JSON to a file for CI/CD").option("--latest","Use the latest successful build for submission").option("--build-id <id>","Use a specific build ID for submission").action(async e=>{let t=M.opts();e.quiet=e.quiet||t.quiet,e.yes=e.yes||t.yes,Z(W.bgCyan.black(f.cliTag("Store Submission"))),await qn(e)});M.command("login").description(`Login to ${f.name} Dashboard`).action(async()=>{Z(W.bgCyan.black(f.cliTag("Login"))),await xa()});M.command("logout").description(`Logout from ${f.name} on this machine`).action(async()=>{Z(W.bgCyan.black(f.cliTag("Logout"))),await La()});M.command("link").description(`Link local directory to a ${f.name} Project`).action(async()=>{Z(W.bgCyan.black(f.cliTag("Link Project"))),await Ua()});M.command("me").description("Display currently logged in user details").action(async()=>{await ll()});M.command("init").description(`Create a new ${f.name} Project`).action(async()=>{Z(W.bgCyan.black(f.cliTag("Init Project"))),await Fa()});M.command("env").description("Manage Environment Variables").argument("<action>","Action to perform: set, list, pull, download, or export").argument("[args...]","Key=Value pairs for set action").option("-e, --environment <name>","Environment to pull/download","development").option("-o, --out <file>","Output file for pull/download",".env.local").option("--overwrite","Overwrite output file if it already exists").action(async(e,t,n)=>{Z(W.bgCyan.black(f.cliTag("Env Manager"))),await ja(e,t,n)});M.command("start").description("Start the development server (Metro)").option("-p, --build-profile <name>","Build profile (e.g. development, staging)","development").option("--tunnel","Use ngrok tunnel").option("--lan","Use LAN IP").option("--localhost","Use localhost").option("-c, --clear","Clear Metro cache").option("--port <number>","Port to listen on").option("--ios","Start on iOS").option("--android","Start on Android").option("--web","Start on Web").action(async e=>{Z(W.bgCyan.black(f.cliTag("Dev Server"))),await cl(e)});var Nn=M.command("push").description("Configure and send provider-direct APNs/FCM notifications");Nn.command("setup").description("Install and wire a working default push experience").option("--name <name>","Push app display name").option("--ios-bundle <id>","iOS bundle identifier").option("--android-package <name>","Android package name").option("-e, --environment <name>","development, preview, or production").option("--google-services-file <path>","Android google-services.json path").option("--skip-install","Generate setup without installing SDK dependencies").action(No);Nn.command("init").description("Create only the server-side push app (advanced)").option("--name <name>","Push app display name").option("--ios-bundle <id>","iOS bundle identifier").option("--android-package <name>","Android package name").option("-e, --environment <name>","development, preview, or production","production").option("--google-services-file <path>","Expo Android google-services.json path").action(To);var Ad=Nn.command("credentials").description("Configure provider credentials");Ad.command("apns").description("Configure an Apple APNs .p8 authentication key").requiredOption("--file <path>","APNs .p8 file").requiredOption("--team-id <id>","Apple Developer team ID").requiredOption("--key-id <id>","APNs key ID").option("--bundle-id <id>","iOS bundle identifier").option("--app <id>","MACH Push app ID").option("-e, --environment <name>","development, preview, or production").action(e=>Hi("apns",e));Ad.command("fcm").description("Configure a Firebase service-account JSON file").requiredOption("--file <path>","Firebase service-account JSON").option("--app <id>","MACH Push app ID").option("-e, --environment <name>","Deprecated; accepted for compatibility because FCM credentials are package-wide").action(e=>Hi("fcm",e));Nn.command("send").description("Queue one transient push notification").requiredOption("--title <text>","Notification title").requiredOption("--body <text>","Notification body").option("--app <id>","MACH Push app ID").option("-e, --environment <name>","development, preview, or production").option("--token <token>","MACH push token; repeatable",Tn,[]).option("--user <id>","Application user ID; repeatable",Tn,[]).option("--all","Send to all active devices").option("--platform <platform>","Limit --all to ios or android").option("--data <json>","String-to-string custom data JSON").option("--sound <name>","Provider sound name").option("--badge <number>","iOS badge count").option("--ttl <seconds>","Provider time-to-live").option("--collapse-key <key>","Provider collapse key").option("--android-channel-id <id>","Android notification channel").action(ko);Nn.command("status").description("Show aggregate push delivery counters").option("--days <number>","Statistics range, 1-90","30").action(xo);M.command("config").description("Show resolved configuration for a profile").option("-p, --profile <name>","Build profile to resolve","development").option("--json","Output as JSON").action(async e=>{await ul(e)});var Sd=M.command("version").description("Show or seed DB-owned native version counters"),bd=e=>e.requiredOption("--platform <os>","Target platform: ios or android").option("-p, --profile <name>","Build profile used to resolve package/bundle scope","production").option("--scope <value>","Counter scope override, usually package name or bundle identifier").option("--package <name>","Android package override").option("--bundle-id <id>","iOS bundle identifier override").option("--json","Print JSON output");bd(Sd.command("show").description("Show the current native version counter")).action(async e=>{Z(W.bgCyan.black(f.cliTag("Version Counter"))),await ao("show",e)});bd(Sd.command("seed").description("Seed the native version counter for an existing app").argument("[value]","Latest already-used value; the next build uses value + 1").option("--value <number>","Latest already-used value; the next build uses value + 1").option("--force","Allow lowering an existing counter")).action(async(e,t)=>{Z(W.bgCyan.black(f.cliTag("Version Counter"))),await ao("seed",{...t,value:t.value??e})});var Id=M.command("deeplink").description("Configure and verify app links, universal links, and URI schemes");Id.command("setup").description("Generate deep link config, hosted association files, and Expo plugin support").option("--domain <domain>","Associated domain, e.g. app.example.com").option("--base-url <url>","Base URL, e.g. https://app.example.com").option("-p, --profile <name>","Profile used for build/submit overrides").option("--platform <platform>","ios, android, or all").option("--framework <framework>","expo or react-native").option("--scheme <scheme>","URI scheme, e.g. myapp").option("--ios-bundle-id <id>","iOS bundle identifier").option("--android-package <name>","Android package name").option("--apple-team-id <id>","Apple Developer Team ID").option("--app-store-id <id>","App Store app ID for Smart App Banner").option("--android-fingerprint <sha256>","Android SHA256 signing certificate fingerprint; repeatable",Tn,[]).option("--output <dir>","Directory for hosted files, e.g. public or deep-links").option("--install-plugin","Install @radhya/mach locally so Expo can use the packaged config plugin").option("--no-install-plugin","Do not install @radhya/mach for Expo projects; use the local plugin fallback if the package is missing").option("-y, --yes","Automatically answer yes to prompts",!1).action(async e=>{let t=M.opts();e.yes=e.yes||t.yes,Z(W.bgCyan.black(f.cliTag("Deep Links"))),await Nl(e)});Id.command("verify").description("Verify local and optionally live deep link configuration").option("-p, --profile <name>","Profile used for build/submit overrides").option("--live","Check hosted files over HTTPS").option("--android-device","Print Android device verification commands").action(async e=>{Z(W.bgCyan.black(f.cliTag("Deep Link Verify"))),await kl(e)});M.command("credentials").description("Unified, interactive credential management (iOS/Android)").option("-p, --profile <name>","Build profile (production, staging, development)").option("--credential-type <type>","iOS signing type override: development, adhoc, or store").option("--force","Force recreate certificates (nuke existing on Apple Portal)",!1).action(async e=>{let{credentialsMainCommand:t}=await import("./credentials-KGD3Q75D.js");await t(e)});M.command("credentials:setup").description("Automated credential provisioning (iOS/Android) [Legacy]").requiredOption("--platform <os>","Platform: ios or android").option("--profile <name>","Build profile (production, staging, development)").option("--credential-type <type>","iOS signing type override: development, adhoc, or store").option("--bundle-id <id>","Bundle ID / Package Name (optional, auto-detected)").option("--team-id <id>","Apple Team ID (iOS only)").option("--key-alias <alias>","Android keystore alias (optional, auto-generated)").option("--aws-profile <name>","AWS Credentials Profile (for S3 storage)").option("--force","Force recreate certificates (nuke existing on Apple Portal)",!1).action(async e=>{Z(W.bgCyan.black(f.cliTag("Credentials Setup"))),await Jt(e),yd(W.green("Done!"))});M.command("credentials:service").description("Upload Service Credentials (ASC API Key / Google Service JSON) [Legacy]").requiredOption("--platform <os>","Platform: ios or android").option("--file <path>","Path to credential file (.p8 or .json)").option("--issuer-id <id>","ASC API Key Issuer ID (iOS only)").option("--key-id <id>","ASC API Key ID (iOS only)").option("--bundle-id <id>","Bundle identifier / Android package name to attach this service credential to").option("--package-name <name>","Android package name to attach this service credential to").option("-p, --profile <name>","Build profile to resolve package/bundle identifier from config").action(async e=>{Z(W.bgCyan.black(f.cliTag("Service Credentials"))),await Co(e),yd(W.green("Done!"))});var po=M.command("device").description("Manage registered iOS test devices");po.command("register").description("Register a connected iOS device or enter UDID manually").option("--udid <udid>","Device UDID (skip auto-detection)").option("--name <name>","Device name").option("--team-id <id>","Apple Developer Team ID for this device").action(async e=>{await vi("register",e)});po.command("list").description("List all registered devices").option("--team-id <id>","Filter by Apple Developer Team ID").action(async e=>{await vi("list",e)});po.command("remove").description("Remove a registered device").option("--udid <udid>","Device UDID to remove").option("--team-id <id>","Apple Developer Team ID for this device").action(async e=>{await vi("remove",e)});M.command("audit").description("Run automated security audit on the project or APK").option("--apk <path>","Path to APK file (runs APK diagnostics like 16KB alignment)").option("--json","Output results as JSON (for CI/CD)").option("--fix","Auto-apply fixes where possible").option("--category <name>","Run only a specific check category (e.g. 16kb, permissions, secrets)").option("--severity <level>","Minimum severity to display (critical, high, medium, low, info)").option("--prebuild","Run expo prebuild for deeper manifest/plist analysis").action(async e=>{Z(W.bgCyan.black(f.cliTag(e.apk?"APK Audit":"Security Audit"))),await gd(e)});var Ag=new Set(["login","logout","agent"]),Sg=new Set(["build","credentials","credentials:service","credentials:setup","env","push","submit","version"]),bg=new Set(["publish","list","rollback","promote"]);function Ig(e){let t=[],n=e;for(;n&&n!==M;)t.unshift(n.name()),n=n.parent;return t}function Eg(e,t){let[n,i]=Ig(e);return Sg.has(n)?!0:n==="ota"?bg.has(i):n==="maestro"?i!=="devices"&&!t.local&&!t.localRunner:!1}M.hook("preAction",async(e,t)=>{let n=t.name(),i=t.opts?.()||{};if(n==="maestro"&&(i.local||i.localRunner)||t.parent?.name()==="deeplink"||Ag.has(n)||(_t(),!Eg(t,i)))return;let r=Lo(i,re());if(!r)throw new We(`No linked ${f.name} project was found. Run \`${f.nameLower} link\` before using this command.`);await Mo(r)});M.on("command:*",()=>{console.error(`Invalid command: %s
2144
- See --help for a list of available commands.`,M.args.join(" ")),process.exit(1)});process.argv.slice(2).length||M.help();M.parseAsync(process.argv).catch(e=>{let t=e instanceof Error?e.message:String(e);console.error(W.red(t)),process.exitCode=1});
2143
+ `));for(let l of s)le.error(ie.red(`${ie.bold(l.name)} ${ie.dim(`(${l.arch})`)}`)),le.info(ie.dim(` PT_LOAD alignment: 2**${Math.log2(l.align)} (${l.align} bytes, needs 2**14 = ${pd})`))}return a.length>0&&(console.log(""),le.success(ie.green(`${a.length} librar${a.length===1?"y":"ies"} correctly aligned (2**14 or higher).`))),console.log(""),s.length===0?(le.success(ie.green.bold("ELF Verification Successful. APK is 16KB compatible.")),!0):(le.error(ie.red.bold(`Found ${s.length} unaligned lib${s.length===1?"":"s"} (arm64-v8a/x86_64 libs need to be aligned).`)),console.log(""),le.info(ie.yellow("To fix this:")),le.info(ie.dim(" 1. Rebuild with NDK r28+ which defaults to 16KB page alignment")),le.info(ie.dim(" 2. Or set -DANDROID_SUPPORT_FLEXIBLE_PAGE_SIZES=ON in CMake")),le.info(ie.dim(" 3. Update third-party libraries that ship prebuilt .so files")),le.info(ie.dim(" 4. After rebuilding: zipalign -p -f -v 16 input.apk output.apk")),console.log(""),le.info(ie.dim("Reference: https://developer.android.com/guide/practices/page-sizes")),!1)}catch(r){return n.stop("Analysis failed."),le.error(ie.red(`Failed to analyze APK: ${r.message}`)),!1}finally{try{et.rmSync(i,{recursive:!0,force:!0})}catch{}}}function lg(e){let t=et.openSync(e,"r");try{let n=Buffer.alloc(64);if(et.readSync(t,n,0,64,0),!n.subarray(0,4).equals(ag))return null;let i=n[4]===2,r=n[5]===1,o=(p,m)=>r?p.readUInt16LE(m):p.readUInt16BE(m),s=(p,m)=>r?p.readUInt32LE(m):p.readUInt32BE(m),a=(p,m)=>Number(r?p.readBigUInt64LE(m):p.readBigUInt64BE(m)),l,d,c;i?(l=a(n,32),d=o(n,54),c=o(n,56)):(l=s(n,28),d=o(n,42),c=o(n,44));let u=null;for(let p=0;p<c;p++){let m=Buffer.alloc(d);if(et.readSync(t,m,0,d,l+p*d),s(m,0)!==sg)continue;let g;i?g=a(m,48):g=s(m,28),g>0&&(u===null||g<u)&&(u=g)}return u??0}catch{return null}finally{et.closeSync(t)}}function md(e){let t=[];if(!et.existsSync(e))return t;let n=et.readdirSync(e,{withFileTypes:!0});for(let i of n){let r=Vt.join(e,i.name);i.isDirectory()?t.push(...md(r)):i.name.endsWith(".so")&&t.push(r)}return t}function dg(e){return e.includes("arm64-v8a")?"arm64-v8a":e.includes("x86_64")?"x86_64":"unknown"}var yd=async e=>{if(ye()||(Te.error(je.red(`You are not logged in. Run \`${f.nameLower} login\` first.`)),process.exit(1)),e.apk){await pg(e);return}let n=process.cwd(),i=Li.join(n,"package.json");Cn.existsSync(i)||(Te.error(je.red("No package.json found. Run this command from a project root.")),process.exit(1));let r=JSON.parse(Cn.readFileSync(i,"utf-8")),o=!!(r.dependencies?.expo||r.devDependencies?.expo);e.json||(Te.info(je.dim(`Project: ${r.name||"unknown"} v${r.version||"0.0.0"}`)),Te.info(je.dim(`Type: ${o?"Expo":"Bare React Native"}`)),Te.info(""));let s={json:e.json,fix:e.fix,category:e.category,severity:e.severity,prebuild:e.prebuild},a=await dd(n,s);e.json?console.log(JSON.stringify(ud(a,r),null,2)):cd(a,e.severity);let l=a.some(c=>c.findings.some(u=>u.severity==="critical")),d=a.some(c=>c.findings.some(u=>u.severity==="high"));(l||d)&&process.exit(1)},gd=["16kb"];async function pg(e){let t=e.category?.toLowerCase();t&&!gd.includes(t)&&(Te.error(je.red(`Unknown APK check category: "${t}"`)),Te.info(je.dim(`Available APK checks: ${gd.join(", ")}`)),process.exit(1));let n=await fg(e.apk);n||process.exit(1);let i=!t,r=!1;(i||t==="16kb")&&(await fd(n)||(r=!0)),r&&process.exit(1)}async function fg(e){if(e.startsWith("build:")){let n=e.slice(6);return await mg(n)}if(e.startsWith("http://")||e.startsWith("https://"))return await Ad(e);let t=Li.resolve(e);return Cn.existsSync(t)?t:(Te.error(je.red(`APK file not found: ${t}`)),null)}async function mg(e){let t=hd();t.start(`Fetching APK from build ${e}...`);try{let n=await w.get(`/build/${e}`);if(n.data.status!=="success")throw new Error(n.data.message);let i=n.data.build;if(!i)throw new Error("Build not found");let r=i.artifacts?.find(o=>o.type?o.type==="apk":o.name?.endsWith(".apk")||o.url?.includes(".apk"));return!r||!r.url?(t.stop("No APK artifact found"),Te.error(je.red("This build does not have an APK artifact.")),Te.info(je.dim("Make sure the build produced an APK (not just an AAB).")),null):(t.stop(`Found build: ${i.buildId||e}`),await Ad(r.url))}catch(n){return t.stop("Failed to fetch build"),Te.error(je.red(n.message)),null}}async function Ad(e){let t=hd();t.start("Downloading APK...");try{let n=Cn.mkdtempSync(Li.join(cg.tmpdir(),`${f.nameLower}-audit-`)),i=Li.join(n,"app.apk"),r=await ug.get(e,{responseType:"arraybuffer"});Cn.writeFileSync(i,r.data);let o=(r.data.length/(1024*1024)).toFixed(1);return t.stop(`Downloaded APK (${o} MB)`),i}catch(n){return t.stop("Download failed"),Te.error(je.red(`Failed to download APK: ${n.message}`)),null}}var yg=console.log;console.log=()=>{};hg();console.log=yg;Z(z.bgCyan.black(f.cliTag("Production Build Orchestrator")));var Tn=(e,t=[])=>t.concat(e),M=new gg;M.name(f.nameLower).description(`${f.name} CLI: Powerful Cloud Infrastructure Tools`).version(it).option("-y, --yes","Automatically answer yes to all prompts",!1).option("--quiet","Suppress non-essential output",!1);M.command("agent").description("Manage local device discovery agent for the Install Hub (port 7070)").argument("[action]","start, run, install, status, restart, stop, or uninstall","start").action(async e=>{await Na(e)});M.command("host").description("Setup AWS S3 static hosting and CloudFront").action(async()=>{Z(z.bgCyan.black(f.cliTag("Hosting"))),await Ho()});M.command("sitemap").description("Generate sitemap.xml from Expo Router app structure").option("-o, --output <path>","Output path for sitemap.xml","./public/sitemap.xml").action(async e=>{Z(z.bgCyan.black(f.cliTag("Sitemap Generator"))),await Ko(e)});M.command("build").description("Run a build on a cloud provider (AWS Spot Instances)").argument("[platform]","Target platform (android, ios)").option("--platform <os>","Target platform alias (android, ios) [Optional]").option("--repo <url>","Git Repository URL").option("--branch <name>","Git Branch").option("--ami <id>","AMI ID").option("--bucket <name>","S3 Bucket for artifacts").option("--region <region>","AWS Region").option("--aws-profile <name>","AWS Credentials Profile").option("-p, --build-profile <name>","Build Profile (e.g. production, staging)").option("--profile <name>","Build Profile (alias for --build-profile)").option("--dry-run","Generate User Data script without launching").option("--keep-instance","Do not terminate the instance after build").option("--subnet <id>","VPC Subnet ID to launch the instance in").option("--security-group <id>","VPC Security Group ID to use").option("--ssh-host <host>","Remote host for iOS build (SSH)").option("--ssh-user <user>","SSH username for remote host").option("--ssh-key <path>","Path to private SSH key for remote host").option("--ios-scheme <scheme>","iOS Scheme to build").option("--ios-team-id <id>","Apple Development Team ID").option("--ios-configuration <config>","Xcode configuration (Release/Debug)").option("--ios-export-method <method>","Export method (ad-hoc, app-store, development, enterprise)").option("--ios-api-key-id <id>","App Store Connect API Key ID").option("--ios-api-key-issuer <id>","App Store Connect API Key Issuer ID").option("--ios-api-key-path <path>","Path to App Store Connect API Key (.p8) file").option("--simulator","Build for iOS Simulator (no signing required)").addOption(new Ne("--build-id <id>","Internal build ID").hideHelp()).addOption(new Ne("--project-id <id>","Internal project ID").hideHelp()).addOption(new Ne("--fail-only","Internal: mark an existing build failed").hideHelp()).addOption(new Ne("--error <message>","Internal failure message").hideHelp()).option("--local","Run build on local machine").option("--auto-version","Assign the next Android versionCode or iOS buildNumber from Mach").option("--auto-submit","Submit this build after it completes successfully").option("--submit-track <track>","Google Play track to use with --auto-submit").option("--submit-release-status <status>","Google Play release status to use with --auto-submit").option("--submit-rollout <fraction>","Google Play staged rollout fraction to use with --auto-submit").option("--submit-changes-not-sent-for-review","Commit Google Play changes without automatically sending them for review when using --auto-submit").option("--submit-credential-id <id>","Service credential ID to use with --auto-submit").option("--submit-json-output <path>","Write auto-submit metadata JSON to a file for CI/CD").option("--verbose","Enable verbose logging").option("--json-output <path>","Write build metadata JSON to a file for CI/CD").option("--maestro","Queue a managed Maestro test run after a successful build").option("--maestro-flows <path>","Maestro flow file or directory (default: .maestro)").option("--maestro-device <device>","Managed device profile id (run `mach maestro devices` to list)").option("--maestro-retries <n>","Retries for the Maestro run","1").option("--maestro-record","Enable screen recording where supported").option("--maestro-use-build-source","Use Maestro flows from the build source snapshot instead of uploading local flows").option("--maestro-env <name>","Forward an environment variable to the managed Maestro runner; repeat or comma-separate names",Tn,[]).option("-y, --yes","Automatically answer yes to all prompts",!1).option("--quiet","Suppress non-essential output",!1).action(async(e,t)=>{let n=M.opts();t.yes=t.yes||n.yes,t.quiet=t.quiet||n.quiet,t.platform=e||t.platform,t.buildProfile=t.profile||t.buildProfile,t.quiet||Z(z.bgCyan.black(f.cliTag("Cloud Build"))),await ei(t)});var Ag=M.command("maestro").description("Run Maestro tests locally or with the managed Mach runner").option("--platform <os>","Target platform (android/ios)").option("-p, --profile <name>","Build profile to resolve when using --latest","production").option("--latest","Use the latest successful build for the platform/profile").option("--build-id <id>","Use a specific Mach build ID").option("--build-url <url>","Use a Mach build URL").option("--artifact-url <url>","Use a direct APK or iOS simulator app artifact URL").option("--local","Run Maestro on a connected local emulator/device instead of the managed runner").option("--maestro-flows <path>","Maestro flow file or directory (default: .maestro)").option("--maestro-device <device>","Managed device profile id (run `mach maestro devices` to list); local runs accept a device identifier").option("--maestro-retries <n>","Retries for the Maestro run","1").option("--maestro-record","Enable screen recording where supported").option("--maestro-use-build-source","Use Maestro flows from the build source snapshot instead of uploading local flows").option("--maestro-env <name>","Forward an environment variable to the managed Maestro runner; repeat or comma-separate names",Tn,[]).option("--wait","Wait for managed Maestro completion and exit non-zero on failure").option("--wait-timeout <minutes>","Maximum minutes to wait for managed Maestro completion","60").option("--wait-interval <seconds>","Polling interval while waiting for managed Maestro completion","15").option("--json-output <path>","Write test run metadata JSON to a file for CI/CD").addOption(new Ne("--local-runner","Internal: execute a managed Maestro run on this machine").hideHelp()).addOption(new Ne("--test-run-id <id>","Internal test run ID").hideHelp()).addOption(new Ne("--project-id <id>","Internal project ID").hideHelp()).addOption(new Ne("--runner-token <token>","Internal runner token").hideHelp()).action(async e=>{Z(z.bgCyan.black(f.cliTag("Maestro Testing"))),await ps(e)});Ag.command("devices").description("List device profiles available on the managed Maestro runner fleet").option("--platform <os>","Filter to android or ios").option("--json","Print machine-readable JSON").action(async e=>{await fs(e)});var zt=e=>e.option("--platform <os>","Target platform: ios, android, or all","all").option("--channel <name>","OTA channel (for example: production, staging)").option("--branch <name>","Alias for --channel").option("--runtime-version <version>","Runtime version override").option("--message <text>","Release note/message for this OTA update").option("--framework <name>","Framework override: expo or react-native").option("--engine <name>","OTA engine override (currently expo-updates)").option("--url <url>","Mach OTA update URL override").option("--install-plugin","Install @radhya/mach locally for the Expo config plugin").option("--skip-install","Do not install local Expo plugin dependency").option("--update-id <id>","OTA update id for rollback/promote").option("--json","Print JSON output"),Kt=M.command("ota").description("Setup, publish, verify, and manage Mach OTA updates");zt(Kt.command("setup").description("Configure OTA for this project")).action(async e=>{let t=M.opts();Z(z.bgCyan.black(f.cliTag("OTA Setup"))),await ct("setup",{...e,yes:e.yes||t.yes})});zt(Kt.command("publish").description("Publish an OTA update")).action(async e=>{let t=M.opts();Z(z.bgCyan.black(f.cliTag("OTA Publish"))),await ct("publish",{...e,yes:e.yes||t.yes})});zt(Kt.command("verify").description("Verify OTA configuration")).action(async e=>{let t=M.opts();Z(z.bgCyan.black(f.cliTag("OTA Verify"))),await ct("verify",{...e,yes:e.yes||t.yes})});zt(Kt.command("list").description("List OTA updates for the linked project")).action(async e=>{let t=M.opts();Z(z.bgCyan.black(f.cliTag("OTA Updates"))),await ct("list",{...e,yes:e.yes||t.yes})});zt(Kt.command("rollback").description("Roll back an OTA update")).action(async e=>{let t=M.opts();Z(z.bgCyan.black(f.cliTag("OTA Rollback"))),await ct("rollback",{...e,yes:e.yes||t.yes})});zt(Kt.command("promote").description("Promote an OTA update")).action(async e=>{let t=M.opts();Z(z.bgCyan.black(f.cliTag("OTA Promote"))),await ct("promote",{...e,yes:e.yes||t.yes})});M.command("submit").description("Automated Store Submission (App Store / Google Play)").option("--platform <os>","Target platform (ios/android)").option("-p, --profile <name>","Build/submission profile to submit from (e.g. production, preprod)").option("--track <track>","Google Play Track (internal, alpha, beta, production)").option("--release-status <status>","Google Play release status (completed, draft, halted, inProgress)").option("--rollout <fraction>","Google Play staged rollout fraction for inProgress releases (example: 0.1)").option("--changes-not-sent-for-review","Commit Google Play changes without automatically sending them for review").option("--ssh-host <host>","Remote macOS host for iOS submission").option("--ssh-user <user>","SSH username for remote iOS submission").option("--ssh-key <path>","Path to private SSH key for remote iOS submission").option("--credential-id <id>","Service credential ID to use when multiple submission credentials exist").option("--local","Run submission on this machine (internal runner mode for iOS)").addOption(new Ne("--submit-id <id>","Internal submission ID").hideHelp()).addOption(new Ne("--project-id <id>","Internal project ID").hideHelp()).addOption(new Ne("--package-name <name>","Internal Android package name").hideHelp()).addOption(new Ne("--bundle-id <id>","Internal iOS bundle identifier").hideHelp()).option("--json-output <path>","Write submission metadata JSON to a file for CI/CD").option("--latest","Use the latest successful build for submission").option("--build-id <id>","Use a specific build ID for submission").action(async e=>{let t=M.opts();e.quiet=e.quiet||t.quiet,e.yes=e.yes||t.yes,Z(z.bgCyan.black(f.cliTag("Store Submission"))),await qn(e)});M.command("login").description(`Login to ${f.name} Dashboard`).action(async()=>{Z(z.bgCyan.black(f.cliTag("Login"))),await Ma()});M.command("logout").description(`Logout from ${f.name} on this machine`).action(async()=>{Z(z.bgCyan.black(f.cliTag("Logout"))),await Ua()});M.command("link").description(`Link local directory to a ${f.name} Project`).action(async()=>{Z(z.bgCyan.black(f.cliTag("Link Project"))),await Ba()});M.command("me").description("Display currently logged in user details").action(async()=>{await cl()});M.command("init").description(`Create a new ${f.name} Project`).action(async()=>{Z(z.bgCyan.black(f.cliTag("Init Project"))),await ja()});M.command("env").description("Manage Environment Variables").argument("<action>","Action to perform: set, list, pull, download, or export").argument("[args...]","Key=Value pairs for set action").option("-e, --environment <name>","Environment to pull/download","development").option("-o, --out <file>","Output file for pull/download",".env.local").option("--overwrite","Overwrite output file if it already exists").action(async(e,t,n)=>{Z(z.bgCyan.black(f.cliTag("Env Manager"))),await Ga(e,t,n)});M.command("start").description("Start the development server (Metro)").option("-p, --build-profile <name>","Build profile (e.g. development, staging)","development").option("--tunnel","Use ngrok tunnel").option("--lan","Use LAN IP").option("--localhost","Use localhost").option("-c, --clear","Clear Metro cache").option("--port <number>","Port to listen on").option("--ios","Start on iOS").option("--android","Start on Android").option("--web","Start on Web").action(async e=>{Z(z.bgCyan.black(f.cliTag("Dev Server"))),await pl(e)});var Nn=M.command("push").description("Configure and send provider-direct APNs/FCM notifications");Nn.command("setup").description("Install and wire a working default push experience").option("--name <name>","Push app display name").option("--ios-bundle <id>","iOS bundle identifier").option("--android-package <name>","Android package name").option("-e, --environment <name>","development, preview, or production").option("--google-services-file <path>","Android google-services.json path").option("--skip-install","Generate setup without installing SDK dependencies").action(Lo);Nn.command("init").description("Create only the server-side push app (advanced)").option("--name <name>","Push app display name").option("--ios-bundle <id>","iOS bundle identifier").option("--android-package <name>","Android package name").option("-e, --environment <name>","development, preview, or production","production").option("--google-services-file <path>","Expo Android google-services.json path").action(xo);var bd=Nn.command("credentials").description("Configure provider credentials");bd.command("apns").description("Configure an Apple APNs .p8 authentication key").requiredOption("--file <path>","APNs .p8 file").requiredOption("--team-id <id>","Apple Developer team ID").requiredOption("--key-id <id>","APNs key ID").option("--bundle-id <id>","iOS bundle identifier").option("--app <id>","MACH Push app ID").option("-e, --environment <name>","development, preview, or production").action(e=>Hi("apns",e));bd.command("fcm").description("Configure a Firebase service-account JSON file").requiredOption("--file <path>","Firebase service-account JSON").option("--app <id>","MACH Push app ID").option("-e, --environment <name>","Deprecated; accepted for compatibility because FCM credentials are package-wide").action(e=>Hi("fcm",e));Nn.command("send").description("Queue one transient push notification").requiredOption("--title <text>","Notification title").requiredOption("--body <text>","Notification body").option("--app <id>","MACH Push app ID").option("-e, --environment <name>","development, preview, or production").option("--token <token>","MACH push token; repeatable",Tn,[]).option("--user <id>","Application user ID; repeatable",Tn,[]).option("--all","Send to all active devices").option("--platform <platform>","Limit --all to ios or android").option("--data <json>","String-to-string custom data JSON").option("--sound <name>","Provider sound name").option("--badge <number>","iOS badge count").option("--ttl <seconds>","Provider time-to-live").option("--collapse-key <key>","Provider collapse key").option("--android-channel-id <id>","Android notification channel").action(Mo);Nn.command("status").description("Show aggregate push delivery counters").option("--days <number>","Statistics range, 1-90","30").action(Uo);M.command("config").description("Show resolved configuration for a profile").option("-p, --profile <name>","Build profile to resolve","development").option("--json","Output as JSON").action(async e=>{await fl(e)});var Id=M.command("version").description("Show or seed DB-owned native version counters"),Ed=e=>e.requiredOption("--platform <os>","Target platform: ios or android").option("-p, --profile <name>","Build profile used to resolve package/bundle scope","production").option("--scope <value>","Counter scope override, usually package name or bundle identifier").option("--package <name>","Android package override").option("--bundle-id <id>","iOS bundle identifier override").option("--json","Print JSON output");Ed(Id.command("show").description("Show the current native version counter")).action(async e=>{Z(z.bgCyan.black(f.cliTag("Version Counter"))),await uo("show",e)});Ed(Id.command("seed").description("Seed the native version counter for an existing app").argument("[value]","Latest already-used value; the next build uses value + 1").option("--value <number>","Latest already-used value; the next build uses value + 1").option("--force","Allow lowering an existing counter")).action(async(e,t)=>{Z(z.bgCyan.black(f.cliTag("Version Counter"))),await uo("seed",{...t,value:t.value??e})});var _d=M.command("deeplink").description("Configure and verify app links, universal links, and URI schemes");_d.command("setup").description("Generate deep link config, hosted association files, and Expo plugin support").option("--domain <domain>","Associated domain, e.g. app.example.com").option("--base-url <url>","Base URL, e.g. https://app.example.com").option("-p, --profile <name>","Profile used for build/submit overrides").option("--platform <platform>","ios, android, or all").option("--framework <framework>","expo or react-native").option("--scheme <scheme>","URI scheme, e.g. myapp").option("--ios-bundle-id <id>","iOS bundle identifier").option("--android-package <name>","Android package name").option("--apple-team-id <id>","Apple Developer Team ID").option("--app-store-id <id>","App Store app ID for Smart App Banner").option("--android-fingerprint <sha256>","Android SHA256 signing certificate fingerprint; repeatable",Tn,[]).option("--output <dir>","Directory for hosted files, e.g. public or deep-links").option("--install-plugin","Install @radhya/mach locally so Expo can use the packaged config plugin").option("--no-install-plugin","Do not install @radhya/mach for Expo projects; use the local plugin fallback if the package is missing").option("-y, --yes","Automatically answer yes to prompts",!1).action(async e=>{let t=M.opts();e.yes=e.yes||t.yes,Z(z.bgCyan.black(f.cliTag("Deep Links"))),await xl(e)});_d.command("verify").description("Verify local and optionally live deep link configuration").option("-p, --profile <name>","Profile used for build/submit overrides").option("--live","Check hosted files over HTTPS").option("--android-device","Print Android device verification commands").action(async e=>{Z(z.bgCyan.black(f.cliTag("Deep Link Verify"))),await Ll(e)});M.command("credentials").description("Unified, interactive credential management (iOS/Android)").option("-p, --profile <name>","Build profile (production, staging, development)").option("--credential-type <type>","iOS signing type override: development, adhoc, or store").option("--force","Force recreate certificates (nuke existing on Apple Portal)",!1).action(async e=>{let{credentialsMainCommand:t}=await import("./credentials-GLRX2E7R.js");await t(e)});M.command("credentials:setup").description("Automated credential provisioning (iOS/Android) [Legacy]").requiredOption("--platform <os>","Platform: ios or android").option("--profile <name>","Build profile (production, staging, development)").option("--credential-type <type>","iOS signing type override: development, adhoc, or store").option("--bundle-id <id>","Bundle ID / Package Name (optional, auto-detected)").option("--team-id <id>","Apple Team ID (iOS only)").option("--key-alias <alias>","Android keystore alias (optional, auto-generated)").option("--aws-profile <name>","AWS Credentials Profile (for S3 storage)").option("--force","Force recreate certificates (nuke existing on Apple Portal)",!1).action(async e=>{Z(z.bgCyan.black(f.cliTag("Credentials Setup"))),await Jt(e),Sd(z.green("Done!"))});M.command("credentials:service").description("Upload Service Credentials (ASC API Key / Google Service JSON) [Legacy]").requiredOption("--platform <os>","Platform: ios or android").option("--file <path>","Path to credential file (.p8 or .json)").option("--issuer-id <id>","ASC API Key Issuer ID (iOS only)").option("--key-id <id>","ASC API Key ID (iOS only)").option("--bundle-id <id>","Bundle identifier / Android package name to attach this service credential to").option("--package-name <name>","Android package name to attach this service credential to").option("-p, --profile <name>","Build profile to resolve package/bundle identifier from config").action(async e=>{Z(z.bgCyan.black(f.cliTag("Service Credentials"))),await ko(e),Sd(z.green("Done!"))});var go=M.command("device").description("Manage registered iOS test devices");go.command("register").description("Register a connected iOS device or enter UDID manually").option("--udid <udid>","Device UDID (skip auto-detection)").option("--name <name>","Device name").option("--team-id <id>","Apple Developer Team ID for this device").action(async e=>{await vi("register",e)});go.command("list").description("List all registered devices").option("--team-id <id>","Filter by Apple Developer Team ID").action(async e=>{await vi("list",e)});go.command("remove").description("Remove a registered device").option("--udid <udid>","Device UDID to remove").option("--team-id <id>","Apple Developer Team ID for this device").action(async e=>{await vi("remove",e)});M.command("audit").description("Run automated security audit on the project or APK").option("--apk <path>","Path to APK file (runs APK diagnostics like 16KB alignment)").option("--json","Output results as JSON (for CI/CD)").option("--fix","Auto-apply fixes where possible").option("--category <name>","Run only a specific check category (e.g. 16kb, permissions, secrets)").option("--severity <level>","Minimum severity to display (critical, high, medium, low, info)").option("--prebuild","Run expo prebuild for deeper manifest/plist analysis").action(async e=>{Z(z.bgCyan.black(f.cliTag(e.apk?"APK Audit":"Security Audit"))),await yd(e)});var Sg=new Set(["login","logout","agent"]),bg=new Set(["build","credentials","credentials:service","credentials:setup","env","push","submit","version"]),Ig=new Set(["publish","list","rollback","promote"]);function Eg(e){let t=[],n=e;for(;n&&n!==M;)t.unshift(n.name()),n=n.parent;return t}function _g(e,t){let[n,i]=Eg(e);return bg.has(n)?!0:n==="ota"?Ig.has(i):n==="maestro"?i!=="devices"&&!t.local&&!t.localRunner:!1}M.hook("preAction",async(e,t)=>{let n=t.name(),i=t.opts?.()||{};if(n==="maestro"&&(i.local||i.localRunner)||t.parent?.name()==="deeplink"||Sg.has(n)||(wt(),!_g(t,i)))return;let r=Fo(i,re());if(!r)throw new We(`No linked ${f.name} project was found. Run \`${f.nameLower} link\` before using this command.`);await Bo(r)});M.on("command:*",()=>{console.error(`Invalid command: %s
2144
+ See --help for a list of available commands.`,M.args.join(" ")),process.exit(1)});process.argv.slice(2).length||M.help();M.parseAsync(process.argv).catch(e=>{let t=e instanceof Error?e.message:String(e);console.error(z.red(t)),process.exitCode=1});