@radhya/mach 2.6.1 → 2.6.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/{chunk-UJHZ27JT.js → chunk-SGLXKXUK.js} +189 -104
- package/dist/credentials-ZGGJWXVT.js +1 -0
- package/dist/index.js +125 -101
- package/package.json +1 -1
- package/dist/credentials-BSXCVQX5.js +0 -1
package/dist/index.js
CHANGED
|
@@ -1,13 +1,13 @@
|
|
|
1
1
|
#!/usr/bin/env node
|
|
2
|
-
import{$ as
|
|
3
|
-
Run \`${f.nameLower} logout\`, then \`${f.nameLower} login\` with a project member, or run \`${f.nameLower} link\` to select an accessible project.`)}async function
|
|
4
|
-
`;s+=`Region: ${
|
|
5
|
-
`,s+=`S3 Website URL: ${
|
|
2
|
+
import{$ as vt,A as us,B as ur,C as pr,D as fr,E as ps,F as Ai,G as yi,H as mr,I as gr,J as fs,K as hr,L as Ar,M as bi,N as Ie,O as ms,P as gs,Q as hs,R as In,S as _n,T as As,U as ys,V as bs,W as Ss,X as Es,Y as Si,Z as _t,_ as Is,a as En,aa as _s,b as de,ba as vs,c as Yt,ca as Ei,d as lt,da as Rs,e as re,ea as $s,f as ce,g as K,h as lr,i as dr,ia as vn,j as qt,k as xt,l as is,m as os,n as hi,o as ss,p as as,q as cr,r as Ye,s as Et,t as ls,u as Jt,v as Xt,w as Zt,x as ds,y as It,z as cs}from"./chunk-SGLXKXUK.js";import{a as f,b as ns,c as Oe,d as rs,e as Wt,f as St,g as nt,h as w}from"./chunk-QFXPWC5D.js";import{Command as Kh,Option as Ke}from"commander";import{configDotenv as Wh}from"dotenv";import{intro as te,outro as Dc}from"@clack/prompts";import Y from"chalk";var dt=class extends Error{constructor(t){super(t),this.name="ProjectAccessError"}};function Ii(e){return typeof e!="string"?void 0:e.trim()||void 0}function ws(e,t){return Ii(e?.projectId)||Ii(t?.projectId)}function Nc(e,t){if(Array.isArray(e))return e.find(n=>Ii(n?.projectId)===t)}function xc(e,t){let n=Nc(e,t);if(n)return n;throw new dt(`The current ${f.name} account does not have access to the linked project (${t}).
|
|
3
|
+
Run \`${f.nameLower} logout\`, then \`${f.nameLower} login\` with a project member, or run \`${f.nameLower} link\` to select an accessible project.`)}async function Os(e){try{let n=(await w.get("/projects")).data;if(n?.status!=="success"||!Array.isArray(n.projects))throw new dt(`Could not verify access to the linked project before starting this command. Try \`${f.nameLower} login\` again.`);return xc(n.projects,e)}catch(t){throw t instanceof dt?t:t?.response?.status===401?new dt(`Could not verify access to the linked project because this ${f.name} session is no longer valid. Run \`${f.nameLower} login\` and try again.`):new dt("Could not verify access to the linked project before starting this command. Check your connection and try again.")}}import{text as Ds,confirm as Lc,spinner as Mc,isCancel as _i,cancel as Rn,note as Fc,outro as Uc}from"@clack/prompts";import $n from"chalk";async function Ps(){try{let e=await Ds({message:"Enter Bucket Name:",placeholder:"e.g. my-app-dev",validate(i){if(i.length===0)return"Bucket name is required"}});_i(e)&&(Rn("Operation cancelled."),process.exit(0));let t=await Ds({message:"Enter Region:",initialValue:"ap-south-1"});_i(t)&&(Rn("Operation cancelled."),process.exit(0));let n=await Lc({message:"Do you want to create a CloudFront Distribution for this bucket?",initialValue:!0});_i(n)&&(Rn("Operation cancelled."),process.exit(0));let r=Mc();r.start("Setting up hosting infrastructure...");try{let i=await w.post("/hosting/setup",{bucketName:e,region:t,createCloudFront:n});if(i.data.status!=="success")throw new Error(i.data.message||"Hosting setup failed");r.stop("Hosting setup complete!");let o=i.data,s=`Bucket Name: ${$n.cyan(o.bucketName)}
|
|
4
|
+
`;s+=`Region: ${$n.cyan(o.region)}
|
|
5
|
+
`,s+=`S3 Website URL: ${$n.blue(o.s3WebsiteUrl)}`,o.cloudFrontId&&(s+=`
|
|
6
6
|
|
|
7
|
-
CloudFront ID: ${
|
|
8
|
-
CloudFront URL: ${
|
|
7
|
+
CloudFront ID: ${$n.cyan(o.cloudFrontId)}`,s+=`
|
|
8
|
+
CloudFront URL: ${$n.blue(o.cloudFrontUrl)}`),Fc(s,"Setup Complete!"),Uc("You are all set!")}catch(i){r.stop("Setup failed"),Rn(`Error: ${i.response?.data?.message||i.message}`)}}catch(e){Rn(`An unexpected error occurred: ${e.message}`)}}import{readdir as Bc,writeFile as Hc,access as jc,mkdir as Gc}from"fs/promises";import{join as Ts}from"path";import{spinner as Vc,text as Cs,isCancel as ks,cancel as vi,note as zc,outro as Kc}from"@clack/prompts";import Wc from"chalk";async function Yc(){let e=["./app","./src/app"];for(let t of e)try{return await jc(t),t}catch{}return null}async function Ns(e){try{let t=re(),n=de(t?.framework);if(n&&n!=="expo")throw new Error(`\`${f.nameLower} sitemap\` scans Expo Router files and is not available for ${n}. Use your framework web router or a dedicated sitemap generator instead.`);let i=await Yc()||"./app",o=await Cs({message:"Enter path to your app directory:",placeholder:i,initialValue:i,validate(p){if(p.length===0)return"Path is required"}});ks(o)&&(vi("Operation cancelled."),process.exit(0));let s=await Cs({message:"Enter your website base URL:",placeholder:"https://example.com",validate(p){if(p.length===0)return"Base URL is required";if(!p.startsWith("http"))return"URL must start with http:// or https://"}});ks(s)&&(vi("Operation cancelled."),process.exit(0));let a=Vc();a.start("Scanning app directory for routes...");let l=await xs(o);a.stop(`Found ${l.length} routes`);let c=qc(l,s),d=e.output||"./public/sitemap.xml";a.start(`Writing sitemap to ${d}...`);let u=d.substring(0,d.lastIndexOf("/"));if(u)try{await Gc(u,{recursive:!0})}catch{}await Hc(d,c,"utf-8"),a.stop("Sitemap generated successfully!"),zc(`Routes included:
|
|
9
9
|
${l.map(p=>` \u2022 ${p.path}`).join(`
|
|
10
|
-
`)}`,"Sitemap Summary"),
|
|
10
|
+
`)}`,"Sitemap Summary"),Kc(`Sitemap saved to ${Wc.cyan(d)}`)}catch(t){vi(`An error occurred: ${t.message}`)}}async function xs(e,t=""){let n=[];try{let r=await Bc(e,{withFileTypes:!0});for(let i of r){let o=Ts(e,i.name);if(!(i.name.startsWith("_")||i.name.startsWith("."))){if(i.isDirectory()){let s=await xs(o,Ts(t,i.name));n.push(...s)}else if(i.isFile()){if(i.name==="index.tsx"||i.name==="index.ts"||i.name==="index.jsx"||i.name==="index.js"){let s=t===""?"/":`/${t}`;n.push({path:s,file:o})}else if(i.name.match(/\.(tsx|ts|jsx|js)$/)&&!i.name.includes("_layout")&&!i.name.includes("+")){let s=i.name.replace(/\.(tsx|ts|jsx|js)$/,""),a=`/${t}/${s}`.replace(/\/+/g,"/");n.push({path:a,file:o})}}}}}catch(r){throw new Error(`Failed to scan directory ${e}: ${r.message}`)}return n}function qc(e,t){let n=new Date().toISOString().split("T")[0];return`<?xml version="1.0" encoding="UTF-8"?>
|
|
11
11
|
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
|
|
12
12
|
${e.map(i=>{let o=i.path;return o=o.replace(/\/\([^)]+\)/g,""),o=o.replace(/\/\[.*?\]/g,"/:id"),o=o.replace(/\/+/g,"/"),o===""&&(o="/"),` <url>
|
|
13
13
|
<loc>${t}${o}</loc>
|
|
@@ -16,7 +16,7 @@ ${e.map(i=>{let o=i.path;return o=o.replace(/\/\([^)]+\)/g,""),o=o.replace(/\/\[
|
|
|
16
16
|
<priority>0.8</priority>
|
|
17
17
|
</url>`}).join(`
|
|
18
18
|
`)}
|
|
19
|
-
</urlset>`}import{randomUUID as
|
|
19
|
+
</urlset>`}import{randomUUID as zp}from"crypto";import ue from"path";import $r from"axios";import Ka from"os";import{spinner as to,select as Da,confirm as Pa,isCancel as wr,cancel as Ta,log as I}from"@clack/prompts";import _ from"chalk";import J from"fs";import{execSync as Ca}from"child_process";import ka from"adm-zip";import{spinner as Jc,log as yr}from"@clack/prompts";import Ms from"chalk";import Fs from"fs";import Us from"path";var Ls=`#!/bin/bash
|
|
20
20
|
# --- Mach Cloud Build Script (Android) ---
|
|
21
21
|
# All S3 operations use presigned URLs via curl \u2014 zero AWS credentials on instance.
|
|
22
22
|
BUILD_ID="{{BUILD_ID}}"
|
|
@@ -496,6 +496,13 @@ if [ ! -z "$ANDROID_VERSION_CODE" ]; then
|
|
|
496
496
|
exit 1
|
|
497
497
|
fi
|
|
498
498
|
echo "[VERSIONING] Applying injected versionCode: $ANDROID_VERSION_CODE"
|
|
499
|
+
if [ "$MACH_FRAMEWORK" != "flutter" ]; then
|
|
500
|
+
MACH_ANDROID_VERSION_INIT_SCRIPT="/tmp/mach-android-version.init.gradle"
|
|
501
|
+
cat > "$MACH_ANDROID_VERSION_INIT_SCRIPT" <<'MACH_ANDROID_VERSION_INIT_EOF'
|
|
502
|
+
{{ANDROID_VERSION_CODE_INIT_SCRIPT}}
|
|
503
|
+
MACH_ANDROID_VERSION_INIT_EOF
|
|
504
|
+
chmod 600 "$MACH_ANDROID_VERSION_INIT_SCRIPT"
|
|
505
|
+
fi
|
|
499
506
|
{{FRAMEWORK_ANDROID_VERSION_CODE}}
|
|
500
507
|
fi
|
|
501
508
|
|
|
@@ -632,15 +639,28 @@ else
|
|
|
632
639
|
echo "[SIGNING] To enable: set ANDROID_KEYSTORE_BASE64, ANDROID_KEY_ALIAS, ANDROID_KEY_PASSWORD as project secrets."
|
|
633
640
|
fi
|
|
634
641
|
|
|
642
|
+
VERSION_CODE_FLAGS=()
|
|
635
643
|
if [ ! -z "$ANDROID_VERSION_CODE" ]; then
|
|
636
|
-
|
|
644
|
+
VERSION_CODE_FLAGS+=( "--init-script" "$MACH_ANDROID_VERSION_INIT_SCRIPT" "--no-configuration-cache" )
|
|
645
|
+
echo "[VERSIONING] Running fail-fast Gradle preflight before compilation..."
|
|
646
|
+
$GRADLEW machVerifyInjectedVersionCode "\${SIGNING_FLAGS[@]}" "\${VERSION_CODE_FLAGS[@]}" --no-configure-on-demand --console=plain --no-daemon 2>&1
|
|
647
|
+
VERSION_PREFLIGHT_EXIT=$?
|
|
648
|
+
if [ $VERSION_PREFLIGHT_EXIT -ne 0 ]; then
|
|
649
|
+
echo "[VERSIONING] Preflight failed. No Android compile task was started."
|
|
650
|
+
upload_logs
|
|
651
|
+
report_status "failed" "Could not lock the assigned Android versionCode before compilation"
|
|
652
|
+
mark_done
|
|
653
|
+
sleep 5
|
|
654
|
+
sudo shutdown -h now
|
|
655
|
+
exit $VERSION_PREFLIGHT_EXIT
|
|
656
|
+
fi
|
|
637
657
|
fi
|
|
638
658
|
|
|
639
659
|
echo "[DISK] Before Gradle build:"
|
|
640
660
|
df -h /
|
|
641
661
|
du -sh /home/ubuntu/build /root/.gradle /root/.npm 2>/dev/null || true
|
|
642
662
|
|
|
643
|
-
$GRADLEW {{BUILD_COMMAND}} "\${SIGNING_FLAGS[@]}" --console=plain --no-daemon 2>&1
|
|
663
|
+
$GRADLEW {{BUILD_COMMAND}} "\${SIGNING_FLAGS[@]}" "\${VERSION_CODE_FLAGS[@]}" --console=plain --no-daemon 2>&1
|
|
644
664
|
BUILD_EXIT_CODE=$?
|
|
645
665
|
fi
|
|
646
666
|
|
|
@@ -658,8 +678,9 @@ if [ $BUILD_EXIT_CODE -eq 0 ]; then
|
|
|
658
678
|
fi
|
|
659
679
|
|
|
660
680
|
# Validate the values inside the final packaged manifests. The injected
|
|
661
|
-
#
|
|
662
|
-
#
|
|
681
|
+
# The Android Variant API injection supports Groovy, Kotlin DSL and custom
|
|
682
|
+
# version expressions. This exact packaged-manifest check is defense in depth
|
|
683
|
+
# against toolchain bugs or an unexpected plugin override.
|
|
663
684
|
if [ ! -z "$ANDROID_VERSION_CODE" ]; then
|
|
664
685
|
ARTIFACT_COUNT=0
|
|
665
686
|
if [ ! -z "$APK_FILE" ]; then
|
|
@@ -747,7 +768,10 @@ if [ $BUILD_EXIT_CODE -eq 0 ]; then
|
|
|
747
768
|
# Derive release name from app.json / package.json
|
|
748
769
|
APP_VERSION=$(node -p "try{const a=require(process.env.MACH_APP_ROOT + '/app.json');a.expo?.version||a.version||'1.0.0'}catch(e){require(process.env.MACH_APP_ROOT + '/package.json').version||'1.0.0'}" 2>/dev/null || echo "1.0.0")
|
|
749
770
|
APP_PACKAGE=$(node -p "try{const a=require(process.env.MACH_APP_ROOT + '/app.json');a.expo?.android?.package||a.expo?.bundleIdentifier||''}catch(e){''}" 2>/dev/null || echo "")
|
|
750
|
-
BUILD_NUMBER
|
|
771
|
+
BUILD_NUMBER="\${ANDROID_VERSION_CODE:-}"
|
|
772
|
+
if [ -z "$BUILD_NUMBER" ]; then
|
|
773
|
+
BUILD_NUMBER=$(node -p "try{const a=require(process.env.MACH_APP_ROOT + '/app.json');a.expo?.android?.versionCode||1}catch(e){1}" 2>/dev/null || echo "1")
|
|
774
|
+
fi
|
|
751
775
|
|
|
752
776
|
if [ ! -z "$APP_PACKAGE" ]; then
|
|
753
777
|
SENTRY_RELEASE="\${APP_PACKAGE}@\${APP_VERSION}+\${BUILD_NUMBER}"
|
|
@@ -829,13 +853,13 @@ for pid in "\${cache_pids[@]}"; do wait "$pid" || true; done
|
|
|
829
853
|
echo "Build orchestrator finished. Auto-terminating instance in 5 seconds..."
|
|
830
854
|
sleep 5
|
|
831
855
|
sudo shutdown -h now
|
|
832
|
-
`;var Be=e=>e.replace(/\\/g,"\\\\").replace(/"/g,'\\"').replace(/\$/g,"\\$").replace(/`/g,"\\`"),
|
|
833
|
-
`):"",
|
|
856
|
+
`;var Be=e=>e.replace(/\\/g,"\\\\").replace(/"/g,'\\"').replace(/\$/g,"\\$").replace(/`/g,"\\`"),rt=(e,t,n)=>e.replace(t,()=>n),Ri=e=>["1","true","yes","on"].includes(String(e||"").trim().toLowerCase()),Xc=(e,t,n)=>{let r=n.MACH_ANDROID_RELEASE_ABIS||n.MACH_ANDROID_ABIS||n.MACH_PROFILE_ANDROID_RELEASE_ABIS||n.MACH_PROFILE_ANDROID_ABIS||n.MACH_PROFILE_ANDROID_ARCHITECTURES||n.MACH_PROFILE_ANDROID_REACT_NATIVE_ARCHITECTURES;return r||(!!e.maestro||Ri(n.MACH_PROFILE_ANDROID_EMULATOR)||Ri(n.MACH_ANDROID_INCLUDE_EMULATOR_ABIS)||Ri(n.MACH_PROFILE_ANDROID_INCLUDE_EMULATOR_ABIS)?"armeabi-v7a,arm64-v8a,x86_64":"armeabi-v7a,arm64-v8a")},Bs=async(e,t,n={},r,i)=>{let o=Jc(),s=ur(e.framework),a=e.buildProfile||"production",l=e.apk===!0,c=e.developmentClient?"assembleDebug":e.distribution==="store"?"bundleRelease":"assembleRelease",d=e.buildCommand||(l?"assembleRelease":c),u=e.platform==="web"?"web":e.apk===!0?"apk":e.apk===!1||e.distribution==="store"?"appbundle":"apk",p=(e.flutterDartDefinesFromEnv||[]).map(v=>{if(n[v]===void 0)throw new Error(`Flutter compile-time value ${v} is required by dartDefinesFromEnv but is not defined.`);return v}).join(","),m=e.framework!=="flutter"&&e.nodeVersion?[`echo "[NODE] Switching to Node ${e.nodeVersion}..."`,`CURRENT_MAJOR=$(node -e "process.stdout.write(process.version.split('.')[0].replace('v',''))" 2>/dev/null || echo "0")`,`if [ "$CURRENT_MAJOR" != "${e.nodeVersion}" ]; then`,` curl -fsSL https://deb.nodesource.com/setup_${e.nodeVersion}.x | bash - 2>&1`," apt-get install -y nodejs 2>&1",' echo "[NODE] Installed Node $(node -v)"',"else",' echo "[NODE] Already on Node $(node -v) \u2014 no switch needed"',"fi"].join(`
|
|
857
|
+
`):"",A;if(i){let v=Us.isAbsolute(i)?i:Us.resolve(process.cwd(),i);Fs.existsSync(v)?(A=Fs.readFileSync(v,"utf-8"),yr.info(Ms.magenta(`\u2713 Loaded preBuild hook: ${i}`))):yr.warn(`preBuild script not found at ${v} \u2014 skipping`)}let g=Xc(e,a,n),h={...pr(n,a,e),MACH_ANDROID_RELEASE_ABIS:g},y=fr(h),b=rt(rt(rt(rt(Ls,/\{\{BUILD_ID\}\}/g,t),/\{\{BUILD_COMMAND\}\}/g,d),"{{NODE_VERSION_SETUP}}",m),"{{ENV_VARS}}",`
|
|
834
858
|
export MACH_APP_NAME="${Be(h.MACH_APP_NAME)}"
|
|
835
859
|
export MACH_BUILD_PROFILE="${Be(a)}"
|
|
836
860
|
export MACH_FRAMEWORK="${Be(s.id)}"
|
|
837
861
|
export MACH_ANDROID_RELEASE_ABIS="${Be(g)}"
|
|
838
|
-
export MACH_ENV_FINGERPRINT="${
|
|
862
|
+
export MACH_ENV_FINGERPRINT="${y}"
|
|
839
863
|
export MACH_FLUTTER_ARTIFACT="${Be(u)}"
|
|
840
864
|
export MACH_FLUTTER_FLAVOR="${Be(e.flutterFlavor||"")}"
|
|
841
865
|
export MACH_FLUTTER_TARGET="${Be(e.flutterTarget||"lib/main.dart")}"
|
|
@@ -848,7 +872,7 @@ export MACH_FLUTTER_SPLIT_DEBUG_INFO="${e.flutterSplitDebugInfo?"1":"0"}"
|
|
|
848
872
|
export MACH_FLUTTER_SPLIT_DEBUG_INFO_PATH=""
|
|
849
873
|
{{ENV_VARS}}
|
|
850
874
|
export MACH_APP_DIRECTORY="${Be(e.appDirectory||".")}"
|
|
851
|
-
`);if(b=
|
|
875
|
+
`);if(b=rt(b,"{{FRAMEWORK_ENV_SETUP}}",s.remoteEnvSetupScript().trim()),b=rt(b,"{{FRAMEWORK_ANDROID_VERSION_CODE}}",s.androidRemoteVersionCodeScript().trim()),b=rt(b,"{{ANDROID_VERSION_CODE_INIT_SCRIPT}}",ps.trim()),b=rt(b,"{{FRAMEWORK_ANDROID_PREBUILD}}",s.androidRemotePrebuildScript().trim()),b=rt(b,"{{FRAMEWORK_ANDROID_GRADLE_PROPERTIES}}",s.androidRemoteGradlePropertiesScript().trim()),b=rt(b,"{{FRAMEWORK_ANDROID_RELEASE_GRADLE_PROPERTIES}}",s.androidRemoteReleaseGradlePropertiesScript().trim()),e.dryRun){yr.info("User Data Script (dry run):"),console.log(b);return}o.start("Requesting cloud build instance...");try{let v=await w.post("/builds/launch-android",{projectId:r,buildId:t,platform:e.platform,buildProfile:e.buildProfile,buildCommand:d,instanceType:e.instanceType,ami:e.ami,keepInstance:e.keepInstance,region:e.region,subnet:e.subnet,securityGroup:e.securityGroup,projectSecrets:n,dryRun:e.dryRun,userDataScript:b,preBuildScriptContent:A});if(v.data.status!=="success")throw new Error(v.data.message||"Failed to launch build instance");let E=v.data.instanceId;return o.stop("Build Started"),yr.success(Ms.green(`Build initiated on cloud instance (${E}).`)),{instanceId:E}}catch(v){o.stop(e.platform==="web"?"Web Build Failed":"Android Build Failed");let E=v.response?.data?.message||v.message;throw new Error(`Failed to launch ${e.platform==="web"?"Flutter web":"Android"} build: ${E}`)}};import{spinner as Zc,log as Lt}from"@clack/prompts";import ct from"chalk";import Qc from"fs";import{execSync as wn}from"child_process";var Hs=`#!/bin/bash
|
|
852
876
|
# --- Mach Cloud Build Script (iOS) ---
|
|
853
877
|
# All S3 operations use presigned URLs via curl \u2014 zero AWS credentials on Mac.
|
|
854
878
|
|
|
@@ -2033,64 +2057,64 @@ touch done
|
|
|
2033
2057
|
if [ ! -z "$PRESIGNED_DONE_MARKER" ]; then
|
|
2034
2058
|
curl -X PUT -T done "$PRESIGNED_DONE_MARKER" --silent
|
|
2035
2059
|
fi
|
|
2036
|
-
`;var qe=e=>e.replace(/\\/g,"\\\\").replace(/"/g,'\\"').replace(/\$/g,"\\$").replace(/`/g,"\\`"),js=async(e,t,n={},r)=>{let i=
|
|
2060
|
+
`;var qe=e=>e.replace(/\\/g,"\\\\").replace(/"/g,'\\"').replace(/\$/g,"\\$").replace(/`/g,"\\`"),js=async(e,t,n={},r)=>{let i=Zc(),o=ur(e.framework);e.sshHost||(e.sshHost="localhost",Lt.message(ct.yellow("No SSH host provided, defaulting to localhost."))),i.start(`Connecting to remote Mac at ${ct.cyan(e.sshHost)}...`);let s=e.sshUser||process.env.USER||"ubuntu",a=e.sshKey,l=`${s}@${e.sshHost}`,c=`ssh ${a?`-i ${a}`:""} -o StrictHostKeyChecking=no ${l}`,d=`scp ${a?`-i ${a}`:""} -o StrictHostKeyChecking=no`;try{let u=s==="ubuntu"?"/home/ubuntu":`/Users/${s}`,p=(n.PROJECT_ID||"default_project").replace(/[^a-zA-Z0-9-_]/g,"_"),m=`${u}/${f.remoteWorkspacesDir}/${p}`;i.message(`Preparing stable workspace: ${m}...`),wn(`${c} "mkdir -p ${m}"`,{stdio:"inherit"}),i.message("Transferring source code...");let A=`/tmp/${f.nameLower}-source-${t}.zip`;wn(`${d} ${A} ${l}:${m}/source.zip`,{stdio:"inherit"});let g=e.iosApiKeyPath?`${m}/api_key.p8`:"",h="";e.iosApiKeyPath&&(i.message("Uploading App Store Connect API key..."),wn(`${d} ${e.iosApiKeyPath} ${l}:${g}`),e.iosApiKeyId&&e.iosApiKeyIssuer&&(h=`-authenticationKeyID ${e.iosApiKeyId} -authenticationKeyIssuerID ${e.iosApiKeyIssuer} -authenticationKeyPath ${g}`));let y={};if(r)try{let $=!!(n.IOS_DIST_P12&&(n.IOS_PROVISIONING_PROFILE||n.IOS_PROVISIONING_PROFILES)),R=await w.post(`/builds/${r}/${t}/build-urls`,{platform:"ios",includeCredentials:!$});R.data.status==="success"&&(y=R.data.urls)}catch($){Lt.warn(ct.yellow(`Could not fetch build URLs: ${$.message}`))}let b="";if(y.credentials&&y.credentials.length>0)for(let $ of y.credentials)$.type==="p12"?b+=`curl -sf -o "$CERT_DIR/${$.name}" "${$.downloadUrl}" || true
|
|
2037
2061
|
`:$.type==="mobileprovision"&&(b+=`curl -sf -o "$PROV_TEMP/${$.name}" "${$.downloadUrl}" || true
|
|
2038
2062
|
`);i.message("Generating macOS build script...");let v=process.env.CODEARTIFACT_AUTH_TOKEN?`export CODEARTIFACT_AUTH_TOKEN="${process.env.CODEARTIFACT_AUTH_TOKEN}"
|
|
2039
|
-
`:"";if(n)for(let[$,
|
|
2040
|
-
`}let
|
|
2041
|
-
`),
|
|
2042
|
-
`):"",ie=
|
|
2063
|
+
`:"";if(n)for(let[$,R]of Object.entries(n)){let O=R.replace(/"/g,'\\"').replace(/\$/g,"\\$").replace(/`/g,"\\`");v+=`export ${$}="${O}"
|
|
2064
|
+
`}let E=e.buildProfile||"production",L=pr(n,E,e),F=fr(L),B=e.flutterDartDefinesFromEnv||[];for(let $ of B)if(n[$]===void 0)throw new Error(`Flutter compile-time value ${$} is required by dartDefinesFromEnv but is not defined.`);Lt.info(ct.dim(`iOS remote build config: simulator=${String(!!e.simulator)}, configuration=${e.iosConfiguration||"Release"}, scheme=${e.iosScheme||"auto"}`));let H=[v,r?`export MACH_PROJECT_ID="${qe(r)}"`:"",`export MACH_BUILD_ID="${qe(t)}"`,w.defaults.baseURL?`export MACH_API_URL="${qe(String(w.defaults.baseURL).replace(/\/$/,""))}"`:"",y.logUpload?`export PRESIGNED_LOG_UPLOAD="${y.logUpload}"`:"",y.doneMarker?`export PRESIGNED_DONE_MARKER="${y.doneMarker}"`:"",y.cacheDerivedDataDownload?`export PRESIGNED_CACHE_DD_DOWNLOAD="${y.cacheDerivedDataDownload}"`:"",y.cacheDerivedDataUpload?`export PRESIGNED_CACHE_DD_UPLOAD="${y.cacheDerivedDataUpload}"`:"",y.cacheNodeModulesDownload?`export PRESIGNED_CACHE_NODE_DOWNLOAD="${y.cacheNodeModulesDownload}"`:"",y.cacheNodeModulesUpload?`export PRESIGNED_CACHE_NODE_UPLOAD="${y.cacheNodeModulesUpload}"`:"",y.cachePodsDownload?`export PRESIGNED_CACHE_PODS_DOWNLOAD="${y.cachePodsDownload}"`:"",y.cachePodsUpload?`export PRESIGNED_CACHE_PODS_UPLOAD="${y.cachePodsUpload}"`:"",y.cachePubDownload?`export PRESIGNED_CACHE_PUB_DOWNLOAD="${y.cachePubDownload}"`:"",y.cachePubUpload?`export PRESIGNED_CACHE_PUB_UPLOAD="${y.cachePubUpload}"`:"",y.artifactIpaUpload?`export PRESIGNED_ARTIFACT_IPA_UPLOAD="${y.artifactIpaUpload}"`:"",y.artifactAppZipUpload?`export PRESIGNED_ARTIFACT_APP_ZIP_UPLOAD="${y.artifactAppZipUpload}"`:"",y.flutterSymbolsUpload?`export PRESIGNED_FLUTTER_SYMBOLS_UPLOAD="${y.flutterSymbolsUpload}"`:"",`export BUILD_ID="${t}"`,`export MACH_BUILD_PROFILE="${qe(E)}"`,`export MACH_APP_NAME="${qe(L.MACH_APP_NAME)}"`,`export MACH_ENV_FINGERPRINT="${F}"`,e.framework==="flutter"?`export MACH_FLUTTER_FLAVOR="${qe(e.flutterFlavor||"")}"`:"",e.framework==="flutter"?`export MACH_FLUTTER_TARGET="${qe(e.flutterTarget||"lib/main.dart")}"`:"",e.framework==="flutter"?`export MACH_FLUTTER_MODE="${qe(e.flutterMode||"release")}"`:"",e.framework==="flutter"?`export MACH_FLUTTER_SIMULATOR="${e.simulator?"1":"0"}"`:"",e.framework==="flutter"?`export MACH_FLUTTER_BUILD_NAME="${qe(e.appVersion||"")}"`:"",e.framework==="flutter"?`export MACH_FLUTTER_SDK_VERSION="${qe(e.flutterSdkVersion||"")}"`:"",e.framework==="flutter"?`export MACH_FLUTTER_DART_DEFINE_KEYS="${qe(B.join(","))}"`:"",e.framework==="flutter"?`export MACH_FLUTTER_OBFUSCATE="${e.flutterObfuscate?"1":"0"}"`:"",e.framework==="flutter"?`export MACH_FLUTTER_SPLIT_DEBUG_INFO="${e.flutterSplitDebugInfo?"1":"0"}"`:"",o.remoteEnvSetupScript().trim(),`export ${f.envPrefix}PROJECT_ID="${p}"`,n.MATCH_ENCRYPTION_PASSPHRASE?`export MATCH_PASSWORD="${n.MATCH_ENCRYPTION_PASSPHRASE}"`:"",n.APPLE_TEAM_ID?`export FASTLANE_TEAM_ID="${n.APPLE_TEAM_ID}"`:"",`export MATCH_KEYCHAIN_NAME="${f.credentialsKeychain}"`,`export MATCH_KEYCHAIN_PASSWORD="${f.keychainPassword}"`].filter(Boolean).join(`
|
|
2065
|
+
`),Z=e.framework!=="flutter"&&e.nodeVersion?[`echo "[NODE] Switching to Node ${e.nodeVersion}..."`,'export NVM_DIR="$HOME/.nvm"','[ -s "$NVM_DIR/nvm.sh" ] && . "$NVM_DIR/nvm.sh" --no-use',`nvm install ${e.nodeVersion} 2>/dev/null || true`,`nvm use ${e.nodeVersion} --silent`,`export PATH="$NVM_DIR/versions/node/$(nvm version ${e.nodeVersion})/bin:$PATH"`,'echo "[NODE] Now using: $(node -v) at $(which node)"'].join(`
|
|
2066
|
+
`):"",ie=Hs,Pe={"{{REMOTE_DIR}}":m,"{{APP_DIRECTORY}}":e.appDirectory||".","{{ENV_VARS}}":H,"{{CREDENTIAL_DOWNLOADS}}":b,"{{IOS_SCHEME}}":e.iosScheme||"","{{IOS_CONFIG}}":e.iosConfiguration||"Release","{{TEAM_ID}}":e.iosTeamId||"","{{AUTH_PARAMS}}":h,"{{IS_SIMULATOR}}":e.simulator?"true":"false","{{BUILD_ID}}":t,"{{EXPORT_METHOD}}":e.iosExportMethod||"ad-hoc","{{NODE_VERSION_SETUP}}":Z,"{{FRAMEWORK_PREBUILD}}":o.iosRemotePrebuildScript().trim()};Object.entries(Pe).forEach(([$,R])=>{ie=ie.split($).join(R)});let S=`/tmp/${f.nameLower}-mac-build-${t}.sh`;if(Qc.writeFileSync(S,ie),wn(`${d} ${S} ${l}:${m}/build.sh`),i.stop("Remote script uploaded."),Lt.info(ct.cyan("Executing remote build. This might take a while...")),wn(`${c} "bash ${m}/build.sh"`,{stdio:"inherit"}),i.stop("Remote build finished!"),r){i.start("Fetching artifact links...");try{let R=(await w.get(`/builds/${r}/${t}/artifacts`)).data.artifacts||[],O=e.simulator===!0;if(R.length===0&&!O)throw i.stop("Build Failed!"),new Error("Build completed but no artifacts were generated. Check build logs for errors.");if(i.stop("Build Successful!"),R.length>0){Lt.success("Build Artifacts Ready:");for(let N of R)console.log(`
|
|
2043
2067
|
${ct.yellow(N.name)}:
|
|
2044
2068
|
${ct.cyan(N.downloadUrl)}`);console.log(`
|
|
2045
|
-
${ct.dim("Note: Links are valid for 7 days.")}`)}else O&&Lt.warn("Simulator build completed. No artifacts uploaded.")}catch($){i.stop("Could not fetch artifacts"),Lt.warn(ct.yellow(`Artifact listing failed: ${$.message}`))}}}catch(u){throw i.stop("iOS Build Failed"),u}};import P from"fs";import en from"os";import x from"path";import{spawn as
|
|
2069
|
+
${ct.dim("Note: Links are valid for 7 days.")}`)}else O&&Lt.warn("Simulator build completed. No artifacts uploaded.")}catch($){i.stop("Could not fetch artifacts"),Lt.warn(ct.yellow(`Artifact listing failed: ${$.message}`))}}}catch(u){throw i.stop("iOS Build Failed"),u}};import P from"fs";import en from"os";import x from"path";import{spawn as Xs,spawnSync as it}from"child_process";import{randomUUID as eu}from"crypto";import{pipeline as tu}from"stream/promises";import{isCancel as Di,log as C,select as Zs,spinner as Dn,text as nu}from"@clack/prompts";import On from"axios";import k from"chalk";import br from"adm-zip";var ru={android:"pixel_6",ios:"iphone_17_pro"};function Gs(e){return ru[e]}async function Qs(e){if(e.localRunner){let n=await lu(e);process.exitCode=n?n.exitCode:1;return}if(e.local){let n=await du(e);n&&(process.exitCode=n.exitCode);return}let t=await ki(e);if(t&&(C.success(k.green(`Maestro run ${t.status||"queued"}: ${t.testRunId}`)),t.launchDeferredReason&&C.warn(k.yellow(t.launchDeferredReason)),t.dashboardUrl&&C.info(k.dim("View test run: ")+k.white.underline(t.dashboardUrl)),e.wait)){let n=await cu(e,t);n&&(process.exitCode=n.status==="passed"?0:1)}}async function ea(e){let t=String(e.platform||"").trim().toLowerCase();if(t&&t!=="android"&&t!=="ios"){C.error(k.red("--platform must be android or ios.")),process.exitCode=1;return}try{let n=await w.get("/tests/maestro/devices",{...t?{params:{platform:t}}:{}}),r=Array.isArray(n.data?.devices)?n.data.devices:[];if(e.json){console.log(JSON.stringify({devices:r},null,2));return}if(r.length===0){C.warn(k.yellow("No managed Maestro devices are currently available."));return}console.log(`
|
|
2046
2070
|
Available managed Maestro devices:`);for(let i of r){let o=[i.platform==="ios"?"iOS":"Android",i.osVersion,i.isDefault?"default":""].filter(Boolean).join(" \xB7 ");console.log(` ${i.id.padEnd(20)} ${i.label}${o?` (${o})`:""}`)}console.log(`
|
|
2047
|
-
Use a profile with: mach maestro --maestro-device <id> ...`)}catch(n){let r=n.response?.data?.message||n.message||"Unknown error";C.error(k.red(`Could not list Maestro devices: ${r}`)),process.exitCode=1}}var
|
|
2071
|
+
Use a profile with: mach maestro --maestro-device <id> ...`)}catch(n){let r=n.response?.data?.message||n.message||"Unknown error";C.error(k.red(`Could not list Maestro devices: ${r}`)),process.exitCode=1}}var iu=new Set(["passed","failed","cancelled","interrupted"]),Vs=Number(process.env.MACH_FLOW_UPLOAD_MAX_ATTEMPTS||4),ou=Number(process.env.MACH_FLOW_UPLOAD_TIMEOUT_MS||12e4),ta=process.env.MACH_MAESTRO_FAST_FAIL_RETRY==="1";function Ci(e){let t=Array.isArray(e)?e:e?[e]:[];return[...new Set(t.flatMap(n=>String(n||"").split(",")).map(n=>n.trim()).filter(Boolean))]}function su(e){let t=Ci(e);if(t.length===0)return;let n={};for(let r of t){let i=process.env[r];i!==void 0&&(n[r]=i)}return Object.keys(n).length>0?n:void 0}function au(e){let t={};for(let[r,i]of Object.entries(process.env))r.startsWith("MAESTRO_TEST_")&&i!==void 0&&(t[r]=i);let n=Ci(e);for(let r of n){let i=process.env[r];i!==void 0&&(t[r]=i)}return t}async function lu(e){let t=e.projectId,n=e.testRunId,r=e.runnerToken||process.env.MACH_RUNNER_TOKEN||process.env.MACH_TOKEN,i=(process.env.MACH_API_URL||St).replace(/\/$/,""),o=P.mkdtempSync(x.join(en.tmpdir(),"mach-maestro-runner-")),s=x.join(o,"mach-maestro-output"),a=x.join(o,"runner.log");if(P.mkdirSync(s,{recursive:!0}),!t||!n||!r)return C.error(k.red("--local-runner requires --project-id, --test-run-id, and a runner token.")),{status:"failed",exitCode:1,attempts:0,flows:".maestro",platform:e.platform};let l=null,c=null,d=null,u,p,m=g=>{P.appendFileSync(a,`${g}${g.endsWith(`
|
|
2048
2072
|
`)?"":`
|
|
2049
|
-
`}`)},y=async(g,h)=>{try{await On.post(`${i}/internal/tests/${encodeURIComponent(n)}/runner`,{projectId:t,runnerToken:r,status:g,error:h,logPreview:yu(a),device:p,junitUrl:l?.urls?.junitDownloadUrl,logsUrl:l?.urls?.logsDownloadUrl,artifactsUrl:l?.urls?.artifactsDownloadUrl})}catch(A){m(`[WARN] Could not post runner update: ${A.message||A}`)}};try{m(`Mach Maestro local runner starting for ${n}`);let g=await On.post(`${i}/internal/tests/${encodeURIComponent(n)}/runner-payload`,{projectId:t,runnerToken:r});if(g.data?.status!=="success"||!g.data?.payload)throw new Error(g.data?.message||"Runner payload was not returned.");l=g.data.payload;let h=Object.keys(l.env||{});m(`Using Maestro env vars: ${h.length>0?h.join(", "):"none"}`);let A={...process.env,...l.env||{}},b=Au(l.env);b.length>0&&m(`Passing Maestro env vars to test command: ${h.sort().join(", ")}`),await y("running");let v=l.platform==="android"?"app.apk":"app.zip",S=x.join(o,v),L=x.join(o,"source.zip"),M=x.join(o,"source");P.mkdirSync(M,{recursive:!0}),m("Downloading app artifact..."),await Pi(l.artifactUrl,S),m(`Downloaded app artifact: ${v} (${zs(P.statSync(S).size)})`),m("Downloading Maestro source..."),await Pi(l.urls.sourceUrl,L),m(`Downloaded Maestro source: source.zip (${zs(P.statSync(L).size)})`),new br(L).extractAllTo(M,!0);let B=bu(M,l.flowPath||".maestro");if(!P.existsSync(B))throw new Error(`Maestro flow path not found: ${l.flowPath||".maestro"}`);if(m(`Resolved Maestro flow path: ${x.relative(M,B)||"."}`),l.platform==="ios"){let $=await $u(l.device||Hs("ios"),a);u=$.udid,p=$.name,await y("running");let w=wu(S,o),O=sa(w,a);m(`Resolved iOS app bundle: ${w}`),m(`Resolved iOS bundle id: ${O||"unknown"}`),Ou(w,a,$.udid),Ti("xcrun",["simctl","install",$.udid,w],a),O&&(d={platform:l.platform,appId:O,deviceId:$.udid}),O&&ut("xcrun",["simctl","get_app_container",$.udid,O,"app"],a),wi(s,a,"ios-before-maestro.png",$.udid),l.record&&(c=Ru(s,a,$.udid))}else{let $=Tu(S,a),w=Pu(l.device,a);u=w||void 0,p=l.device||Hs("android");let O=w?["-s",w]:[];m(`Resolved Android application id: ${$||"unknown"}`),Ti("adb",[...O,"install","-r",S],a),$&&(d={platform:l.platform,appId:$,deviceId:w||void 0})}let Q=Math.max(0,Math.min(10,Number(l.retries??1)))+1,ie=x.join(s,"report.xml"),Te=_u(a);if(!Te)throw new Error("Maestro CLI not found on this runner. Install Maestro or set MAESTRO_BIN to the full maestro path.");let E=1;for(let $=1;$<=Q;$+=1){m(`Running Maestro attempt ${$}/${Q}...`);let w=[...u?["--device",u]:[],"test","--platform",l.platform,...b,B,"--format","junit","--output",ie,"--test-output-dir",s];if(ea&&$<Q?E=(await oa(Te,w,{logPath:a,env:A,fastFailOnFlowFailure:!0})).exitCode:E=ut(Te,w,a,void 0,A),E===0)break}return l.platform==="ios"&&wi(s,a,"ios-after-maestro.png",u),await Ks(c,a),c=null,await qs(l.urls,o,s,a),E===0?(await y("passed"),C.success(k.green(`Managed Maestro run passed: ${n}`)),{status:"passed",exitCode:0,attempts:Q,flows:l.flowPath,platform:l.platform}):(await y("failed",`Maestro exited with code ${E}`),C.error(k.red(`Managed Maestro run failed with exit code ${E}`)),{status:"failed",exitCode:E,attempts:Q,flows:l.flowPath,platform:l.platform})}catch(g){let h=g.message||String(g);return m(`MACH_MAESTRO_RUN_FAILED: ${h}`),l?.platform==="ios"&&wi(s,a,"ios-after-failure.png",u),await Ks(c,a),l?.urls&&await qs(l.urls,o,s,a),await y("failed",h),C.error(k.red(`Managed Maestro runner failed: ${h}`)),{status:"failed",exitCode:1,attempts:0,flows:l?.flowPath||".maestro",platform:l?.platform||e.platform}}finally{Du(d,a)}}async function lu(e){let t=e.maestroFlows||".maestro",n=na(e.maestroRetries);if(n===null)return null;let r=x.resolve(t);if(!P.existsSync(r))return C.error(k.red(`Maestro flows not found: ${t}`)),{status:"failed",exitCode:1,attempts:0,flows:t,platform:e.platform};let i=await mu(e);if(i?.url){if(!await hu(i))return{status:"failed",exitCode:1,attempts:0,flows:t,platform:i.platform||e.platform}}else if(e.buildId||e.buildUrl||e.artifactUrl||e.latest)return{status:"failed",exitCode:1,attempts:0,flows:t,platform:e.platform};e.maestroRecord&&C.warn(k.yellow("--maestro-record is managed-runner only and is ignored in --local mode."));let o=i?.platform||e.platform,s=["test"];o&&s.push("--platform",o),e.maestroDevice&&s.push("--device",String(e.maestroDevice));let a=su(e.maestroEnv),l=Object.keys(a);if(l.length>0){C.info(k.dim(`Passing Maestro env vars to local run: ${l.join(", ")}`));for(let[m,y]of Object.entries(a))s.push("-e",`${m}=${y}`)}s.push(t);let c=n+1,d=1;for(let m=1;m<=c;m+=1){if(C.info(k.dim(`Running local Maestro attempt ${m}/${c}...`)),ea&&m<c){let y=await oa("maestro",s,{cwd:process.cwd(),env:process.env,echoOutput:!0,fastFailOnFlowFailure:!0});if(y.error){let g=y.error.message||"Failed to run Maestro";C.error(k.red(`Local Maestro failed to start: ${g}`)),C.info(k.dim("Install Maestro locally, then retry: https://maestro.mobile.dev/getting-started/installing-maestro")),d=1;break}d=y.exitCode}else{let y=rt("maestro",s,{cwd:process.cwd(),stdio:"inherit",env:process.env});if(y.error){let g=y.error.message||"Failed to run Maestro";C.error(k.red(`Local Maestro failed to start: ${g}`)),C.info(k.dim("Install Maestro locally, then retry: https://maestro.mobile.dev/getting-started/installing-maestro")),d=1;break}d=typeof y.status=="number"?y.status:1}if(d===0)break}let u=d===0?"passed":"failed",p={status:u,exitCode:d,attempts:c,flows:t,platform:o};return Fu(e,p),u==="passed"?C.success(k.green("Local Maestro run passed")):C.error(k.red(`Local Maestro run failed with exit code ${d}`)),p}async function ki(e){let t=re(`./${f.configFileName}`),n=e.projectId||t?.projectId,r=String(e.profile||e.buildProfile||K(t,"store","production")).toLowerCase();if(!n)return C.error(`No projectId found. Run \`${f.nameLower} link\` first or pass an internal project id.`),null;let i=e.platform;if(!i&&e.latest){let p=await Xs({message:"Select platform for the latest build:",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"}]});if(Di(p))return null;i=p}let o=await fu(e);if(!o)return null;if(o.kind==="latest"&&!i)return C.error("Pass --platform when using --latest."),null;if(o.kind==="artifact-url"&&!i)return C.error("Pass --platform when using --artifact-url."),null;let s=na(e.maestroRetries);if(s===null)return null;let a=Ci(e.maestroEnv),l=ou(e.maestroEnv);!e.quiet&&a.length>0&&C.info(k.dim(`Forwarding Maestro env vars by name: ${a.join(", ")}`));let c=await cu(e,n);if(c===null)return null;let d=Dn();e.quiet||d.start("Queuing Maestro run...");let u=String(e.maestroDevice||"").trim()||void 0;try{let p=await R.post("/tests/maestro",{projectId:n,platform:i,profile:r,latest:o.kind==="latest",buildId:o.kind==="build-id"?o.value:e.buildId,buildUrl:o.kind==="build-url"?o.value:e.buildUrl,artifactUrl:o.kind==="artifact-url"?o.value:e.artifactUrl,flowSourceKey:c,flows:e.maestroFlows||".maestro",...u?{device:u}:{},retries:s,record:!!e.maestroRecord,...a.length>0?{envNames:a}:{},...l?{env:l}:{}});if(p.data.status!=="success")throw new Error(p.data.message||"Failed to queue Maestro run");let m=p.data.testRun,y={testRunId:m.testRunId,status:m.status,projectId:n,buildId:m.buildId,platform:m.platform,dashboardUrl:m.dashboardUrl||`${nt}/tests/${m.testRunId}`,launchDeferredReason:m.launchDeferredReason};return la(e,y),e.quiet||d.stop("Maestro run queued"),y}catch(p){e.quiet||d.stop("Could not queue Maestro run");let m=p.response?.data?.message||p.message||"Unknown error";return C.error(k.red(`Maestro queue failed: ${m}`)),null}}async function du(e,t){let n=Vs(e.waitTimeout,60,"--wait-timeout"),r=Vs(e.waitInterval,15,"--wait-interval");if(n===null||r===null)return null;let i=n*60*1e3,o=Math.max(5,r)*1e3,s=Date.now(),a=t.status||"queued";for(C.info(k.dim(`Waiting for Maestro run ${t.testRunId} to finish...`));Date.now()-s<=i;){let l=await pu(t.projectId,t.testRunId);if(!l)return null;if(l.status&&l.status!==a&&(a=l.status,C.info(k.dim(`Maestro status: ${a}`))),ru.has(String(l.status)))return la(e,l),l.status==="passed"?C.success(k.green(`Maestro run passed: ${l.testRunId}`)):(C.error(k.red(`Maestro run ${l.status}: ${l.testRunId}`)),l.error&&C.error(k.red(String(l.error)))),l;await Ni(o)}return C.error(k.red(`Timed out waiting for Maestro run ${t.testRunId} after ${n} minute(s).`)),{...t,status:"timeout"}}async function cu(e,t){if(e.maestroUseBuildSource)return;let n=e.maestroFlows||".maestro",r=x.resolve(n);if(!P.existsSync(r))return e.maestroFlows?(C.error(k.red(`Maestro flows not found: ${n}`)),null):void 0;let i=x.relative(process.cwd(),r);if(!i||i.startsWith("..")||x.isAbsolute(i))return C.error(k.red("Managed Maestro flow uploads must be inside the current project directory.")),null;let o=Dn();e.quiet||o.start(`Uploading Maestro flows from ${i}...`);try{let s=await R.post("/tests/maestro/source-upload-url",{projectId:t,uploadId:Qc()});if(s.data.status!=="success"||!s.data.uploadUrl||!s.data.key)throw new Error(s.data.message||"Failed to get Maestro flow upload URL");let a=new br;if(P.statSync(r).isDirectory())a.addLocalFolder(r,i);else{let d=x.dirname(i);a.addLocalFile(r,d==="."?void 0:d,x.basename(i))}let c=a.toBuffer();return await uu(s.data.uploadUrl,c,"application/zip","Maestro flow upload",d=>{e.quiet||o.message(d)}),e.quiet||o.stop("Maestro flows uploaded"),s.data.key}catch(s){e.quiet||o.stop("Could not upload Maestro flows");let a=s.response?.data?.message||s.message||"Unknown error";return C.error(k.red(`Maestro flow upload failed: ${a}`)),null}}function ta(e){let t=e.response?.status,n=e.code||"",r=e.message||"";return t&&![408,409,425,429].includes(t)&&t<500?!1:/ECONNRESET|ETIMEDOUT|EAI_AGAIN|ENOTFOUND|ECONNABORTED|socket hang up|network|timeout/i.test(`${n} ${r}`)||!t}async function uu(e,t,n,r,i){let o;for(let s=1;s<=Gs;s+=1)try{await On.put(e,t,{headers:{"Content-Type":n},maxBodyLength:1/0,maxContentLength:1/0,timeout:iu});return}catch(a){if(o=a,!ta(a)||s>=Gs)break;let l=Math.min(2e4,2e3*s),c=a.code||a.response?.status||a.message||"network error";i?.(`${r} attempt ${s} failed (${c}), retrying...`),await Ni(l)}throw o}async function pu(e,t){try{let n=await R.get(`/tests/${encodeURIComponent(t)}`,{params:{projectId:e}});if(n.data.status!=="success")throw new Error(n.data.message||"Failed to fetch Maestro run");let r=n.data.testRun;return{testRunId:r.testRunId,status:r.status,projectId:e,buildId:r.buildId,platform:r.platform,dashboardUrl:r.dashboardUrl||`${nt}/tests/${r.testRunId}`,launchDeferredReason:r.launchDeferredReason,...r.error?{error:r.error}:{}}}catch(n){let r=n.response?.data?.message||n.message||"Unknown error";return C.error(k.red(`Could not fetch Maestro run status: ${r}`)),null}}async function fu(e){if(e.buildId)return{kind:"build-id",value:e.buildId};if(e.buildUrl)return{kind:"build-url",value:e.buildUrl};if(e.artifactUrl)return{kind:"artifact-url",value:e.artifactUrl};if(e.latest)return{kind:"latest"};let t=await Xs({message:"Select app artifact source for Maestro:",options:[{value:"latest",label:"Latest successful build"},{value:"build-id",label:"Build ID"},{value:"build-url",label:`${f.name} build URL`},{value:"artifact-url",label:"Direct artifact URL"}]});if(Di(t))return null;if(t==="latest")return{kind:"latest"};let n=await tu({message:t==="build-id"?"Enter build ID:":t==="build-url"?`Enter ${f.name} build URL:`:"Enter artifact URL:",validate:r=>{let i=String(r||"").trim();if(!i)return"Value is required";if((t==="build-url"||t==="artifact-url")&&!i.startsWith("http"))return"Must be a URL"}});return Di(n)?null:{kind:t,value:String(n).trim()}}function Vs(e,t,n){if(e==null||e==="")return t;let r=Number(e);return!Number.isFinite(r)||r<=0?(C.error(`${n} must be a positive number.`),null):r}function Ni(e){return new Promise(t=>setTimeout(t,e))}function na(e){if(e==null||e==="")return 1;let t=Number(e);return!Number.isInteger(t)||t<0||t>10?(C.error("--maestro-retries must be an integer between 0 and 10."),null):t}async function mu(e){if(e.artifactUrl)return{url:e.artifactUrl,platform:e.platform||Li(e.artifactUrl),name:aa(e.artifactUrl)};let t=e.buildId||Mu(e.buildUrl);return t?ra(t,e.platform):e.latest?gu(e):null}async function ra(e,t){let n=Dn();n.start(`Resolving build ${e}...`);try{let r=await R.get(`/public/builds/${encodeURIComponent(e)}`);if(r.data.status!=="success")throw new Error(r.data.message||"Build lookup failed");let i=t||r.data.build?.platform,o=Lu(r.data.artifacts||[],i);if(!o?.downloadUrl)throw new Error("No installable APK or simulator app artifact found for this build.");return n.stop("Build artifact resolved"),{url:o.downloadUrl,platform:i||Li(o.name||o.downloadUrl),name:o.name}}catch(r){n.stop("Could not resolve build artifact");let i=r.response?.data?.message||r.message||"Unknown error";return C.error(k.red(`Local Maestro artifact lookup failed: ${i}`)),null}}async function gu(e){let t=re(`./${f.configFileName}`),n=e.projectId||t?.projectId,r=String(e.profile||e.buildProfile||K(t,"store","production")).toLowerCase();if(!n)return C.error(`No projectId found. Run \`${f.nameLower} link\` first or pass --build-id/--artifact-url.`),null;if(!e.platform)return C.error("Pass --platform when using --latest with --local."),null;let i=Dn();i.start("Resolving latest build...");try{let o=await R.get(`/builds/${n}`,{params:{limit:100}}),a=(Array.isArray(o.data.builds)?o.data.builds:[]).find(l=>l.status==="success"&&l.platform===e.platform&&String(l.buildProfile||l.buildType||"production").toLowerCase()===r);if(!a?.buildId)throw new Error(`No successful ${e.platform} build found for profile ${r}.`);return i.stop(`Latest build resolved: ${a.buildId}`),ra(a.buildId,e.platform)}catch(o){i.stop("Could not resolve latest build");let s=o.response?.data?.message||o.message||"Unknown error";return C.error(k.red(`Latest build lookup failed: ${s}`)),null}}async function hu(e){let t=e.platform||Li(e.url);if(!t)return C.error(k.red("Could not infer platform for local install. Pass --platform android or --platform ios.")),!1;let n=P.mkdtempSync(x.join(en.tmpdir(),"mach-maestro-")),r=e.name||aa(e.url)||(t==="android"?"app.apk":"app.zip"),i=x.join(n,r),o=Dn();o.start(`Downloading ${r}...`);try{await Pi(e.url,i),o.stop("Artifact downloaded")}catch(s){return o.stop("Artifact download failed"),C.error(k.red(s.message||"Failed to download artifact")),!1}return t==="android"?Nu(i):xu(i,n)}async function Pi(e,t){let n=await On.get(e,{responseType:"stream"});await eu(n.data,P.createWriteStream(t))}function yu(e,t=12e3){try{return P.readFileSync(e,"utf-8").slice(-t)}catch{return""}}function zs(e){if(!Number.isFinite(e)||e<0)return"unknown size";if(e<1024)return`${e} B`;let t=["KB","MB","GB"],n=e/1024,r=t[0];for(let i=1;n>=1024&&i<t.length;i+=1)n/=1024,r=t[i];return`${n.toFixed(n>=10?1:2)} ${r}`}function Au(e){return Object.entries(e||{}).filter(([t,n])=>!!t&&n!==void 0).sort(([t],[n])=>t.localeCompare(n)).flatMap(([t,n])=>["-e",`${t}=${n}`])}function bu(e,t){let n=x.resolve(e,t||".maestro"),r=x.relative(e,n);if(r.startsWith("..")||x.isAbsolute(r))throw new Error("Maestro flow path must stay inside the build source.");return n}function ia(e,t){let n=[e];for(let r=0;r<t.length;r+=1){let i=t[r],o=t[r-1];(o==="-e"||o==="--env")&&/^[A-Za-z_][A-Za-z0-9_]*=/.test(i)?n.push(`${i.slice(0,i.indexOf("="))}=<redacted>`):n.push(i)}return n.join(" ")}function Su(e){return/\[Failed\]\s+/.test(e)}function Eu(e){if(!e.killed){try{e.kill("SIGTERM")}catch{}setTimeout(()=>{try{e.kill("SIGKILL")}catch{}},5e3).unref()}}function oa(e,t,n={}){let{cwd:r,env:i=process.env,logPath:o,echoOutput:s=!1,fastFailOnFlowFailure:a=!1}=n;return o&&P.appendFileSync(o,`
|
|
2050
|
-
$ ${
|
|
2051
|
-
`),new Promise(l=>{let c=!1,d=!1,u="",p=g=>{d||(d=!0,l(g))},m=
|
|
2073
|
+
`}`)},A=async(g,h)=>{try{await On.post(`${i}/internal/tests/${encodeURIComponent(n)}/runner`,{projectId:t,runnerToken:r,status:g,error:h,logPreview:yu(a),device:p,junitUrl:l?.urls?.junitDownloadUrl,logsUrl:l?.urls?.logsDownloadUrl,artifactsUrl:l?.urls?.artifactsDownloadUrl})}catch(y){m(`[WARN] Could not post runner update: ${y.message||y}`)}};try{m(`Mach Maestro local runner starting for ${n}`);let g=await On.post(`${i}/internal/tests/${encodeURIComponent(n)}/runner-payload`,{projectId:t,runnerToken:r});if(g.data?.status!=="success"||!g.data?.payload)throw new Error(g.data?.message||"Runner payload was not returned.");l=g.data.payload;let h=Object.keys(l.env||{});m(`Using Maestro env vars: ${h.length>0?h.join(", "):"none"}`);let y={...process.env,...l.env||{}},b=bu(l.env);b.length>0&&m(`Passing Maestro env vars to test command: ${h.sort().join(", ")}`),await A("running");let v=l.platform==="android"?"app.apk":"app.zip",E=x.join(o,v),L=x.join(o,"source.zip"),F=x.join(o,"source");P.mkdirSync(F,{recursive:!0}),m("Downloading app artifact..."),await Pi(l.artifactUrl,E),m(`Downloaded app artifact: ${v} (${Ks(P.statSync(E).size)})`),m("Downloading Maestro source..."),await Pi(l.urls.sourceUrl,L),m(`Downloaded Maestro source: source.zip (${Ks(P.statSync(L).size)})`),new br(L).extractAllTo(F,!0);let B=Su(F,l.flowPath||".maestro");if(!P.existsSync(B))throw new Error(`Maestro flow path not found: ${l.flowPath||".maestro"}`);if(m(`Resolved Maestro flow path: ${x.relative(F,B)||"."}`),l.platform==="ios"){let $=await $u(l.device||Gs("ios"),a);u=$.udid,p=$.name,await A("running");let R=wu(E,o),O=aa(R,a);m(`Resolved iOS app bundle: ${R}`),m(`Resolved iOS bundle id: ${O||"unknown"}`),Du(R,a,$.udid),Ti("xcrun",["simctl","install",$.udid,R],a),O&&(d={platform:l.platform,appId:O,deviceId:$.udid}),O&&ut("xcrun",["simctl","get_app_container",$.udid,O,"app"],a),$i(s,a,"ios-before-maestro.png",$.udid),l.record&&(c=Ou(s,a,$.udid))}else{let $=Cu(E,a),R=Tu(l.device,a);u=R||void 0,p=l.device||Gs("android");let O=R?["-s",R]:[];m(`Resolved Android application id: ${$||"unknown"}`),Ti("adb",[...O,"install","-r",E],a),$&&(d={platform:l.platform,appId:$,deviceId:R||void 0})}let Z=Math.max(0,Math.min(10,Number(l.retries??1)))+1,ie=x.join(s,"report.xml"),Pe=vu(a);if(!Pe)throw new Error("Maestro CLI not found on this runner. Install Maestro or set MAESTRO_BIN to the full maestro path.");let S=1;for(let $=1;$<=Z;$+=1){m(`Running Maestro attempt ${$}/${Z}...`);let R=[...u?["--device",u]:[],"test","--platform",l.platform,...b,B,"--format","junit","--output",ie,"--test-output-dir",s];if(ta&&$<Z?S=(await sa(Pe,R,{logPath:a,env:y,fastFailOnFlowFailure:!0})).exitCode:S=ut(Pe,R,a,void 0,y),S===0)break}return l.platform==="ios"&&$i(s,a,"ios-after-maestro.png",u),await Ws(c,a),c=null,await Js(l.urls,o,s,a),S===0?(await A("passed"),C.success(k.green(`Managed Maestro run passed: ${n}`)),{status:"passed",exitCode:0,attempts:Z,flows:l.flowPath,platform:l.platform}):(await A("failed",`Maestro exited with code ${S}`),C.error(k.red(`Managed Maestro run failed with exit code ${S}`)),{status:"failed",exitCode:S,attempts:Z,flows:l.flowPath,platform:l.platform})}catch(g){let h=g.message||String(g);return m(`MACH_MAESTRO_RUN_FAILED: ${h}`),l?.platform==="ios"&&$i(s,a,"ios-after-failure.png",u),await Ws(c,a),l?.urls&&await Js(l.urls,o,s,a),await A("failed",h),C.error(k.red(`Managed Maestro runner failed: ${h}`)),{status:"failed",exitCode:1,attempts:0,flows:l?.flowPath||".maestro",platform:l?.platform||e.platform}}finally{Pu(d,a)}}async function du(e){let t=e.maestroFlows||".maestro",n=ra(e.maestroRetries);if(n===null)return null;let r=x.resolve(t);if(!P.existsSync(r))return C.error(k.red(`Maestro flows not found: ${t}`)),{status:"failed",exitCode:1,attempts:0,flows:t,platform:e.platform};let i=await gu(e);if(i?.url){if(!await Au(i))return{status:"failed",exitCode:1,attempts:0,flows:t,platform:i.platform||e.platform}}else if(e.buildId||e.buildUrl||e.artifactUrl||e.latest)return{status:"failed",exitCode:1,attempts:0,flows:t,platform:e.platform};e.maestroRecord&&C.warn(k.yellow("--maestro-record is managed-runner only and is ignored in --local mode."));let o=i?.platform||e.platform,s=["test"];o&&s.push("--platform",o),e.maestroDevice&&s.push("--device",String(e.maestroDevice));let a=au(e.maestroEnv),l=Object.keys(a);if(l.length>0){C.info(k.dim(`Passing Maestro env vars to local run: ${l.join(", ")}`));for(let[m,A]of Object.entries(a))s.push("-e",`${m}=${A}`)}s.push(t);let c=n+1,d=1;for(let m=1;m<=c;m+=1){if(C.info(k.dim(`Running local Maestro attempt ${m}/${c}...`)),ta&&m<c){let A=await sa("maestro",s,{cwd:process.cwd(),env:process.env,echoOutput:!0,fastFailOnFlowFailure:!0});if(A.error){let g=A.error.message||"Failed to run Maestro";C.error(k.red(`Local Maestro failed to start: ${g}`)),C.info(k.dim("Install Maestro locally, then retry: https://maestro.mobile.dev/getting-started/installing-maestro")),d=1;break}d=A.exitCode}else{let A=it("maestro",s,{cwd:process.cwd(),stdio:"inherit",env:process.env});if(A.error){let g=A.error.message||"Failed to run Maestro";C.error(k.red(`Local Maestro failed to start: ${g}`)),C.info(k.dim("Install Maestro locally, then retry: https://maestro.mobile.dev/getting-started/installing-maestro")),d=1;break}d=typeof A.status=="number"?A.status:1}if(d===0)break}let u=d===0?"passed":"failed",p={status:u,exitCode:d,attempts:c,flows:t,platform:o};return Uu(e,p),u==="passed"?C.success(k.green("Local Maestro run passed")):C.error(k.red(`Local Maestro run failed with exit code ${d}`)),p}async function ki(e){let t=re(`./${f.configFileName}`),n=e.projectId||t?.projectId,r=String(e.profile||e.buildProfile||K(t,"store","production")).toLowerCase();if(!n)return C.error(`No projectId found. Run \`${f.nameLower} link\` first or pass an internal project id.`),null;let i=e.platform;if(!i&&e.latest){let p=await Zs({message:"Select platform for the latest build:",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"}]});if(Di(p))return null;i=p}let o=await mu(e);if(!o)return null;if(o.kind==="latest"&&!i)return C.error("Pass --platform when using --latest."),null;if(o.kind==="artifact-url"&&!i)return C.error("Pass --platform when using --artifact-url."),null;let s=ra(e.maestroRetries);if(s===null)return null;let a=Ci(e.maestroEnv),l=su(e.maestroEnv);!e.quiet&&a.length>0&&C.info(k.dim(`Forwarding Maestro env vars by name: ${a.join(", ")}`));let c=await uu(e,n);if(c===null)return null;let d=Dn();e.quiet||d.start("Queuing Maestro run...");let u=String(e.maestroDevice||"").trim()||void 0;try{let p=await w.post("/tests/maestro",{projectId:n,platform:i,profile:r,latest:o.kind==="latest",buildId:o.kind==="build-id"?o.value:e.buildId,buildUrl:o.kind==="build-url"?o.value:e.buildUrl,artifactUrl:o.kind==="artifact-url"?o.value:e.artifactUrl,flowSourceKey:c,flows:e.maestroFlows||".maestro",...u?{device:u}:{},retries:s,record:!!e.maestroRecord,...a.length>0?{envNames:a}:{},...l?{env:l}:{}});if(p.data.status!=="success")throw new Error(p.data.message||"Failed to queue Maestro run");let m=p.data.testRun,A={testRunId:m.testRunId,status:m.status,projectId:n,buildId:m.buildId,platform:m.platform,dashboardUrl:m.dashboardUrl||`${nt}/tests/${m.testRunId}`,launchDeferredReason:m.launchDeferredReason};return da(e,A),e.quiet||d.stop("Maestro run queued"),A}catch(p){e.quiet||d.stop("Could not queue Maestro run");let m=p.response?.data?.message||p.message||"Unknown error";return C.error(k.red(`Maestro queue failed: ${m}`)),null}}async function cu(e,t){let n=zs(e.waitTimeout,60,"--wait-timeout"),r=zs(e.waitInterval,15,"--wait-interval");if(n===null||r===null)return null;let i=n*60*1e3,o=Math.max(5,r)*1e3,s=Date.now(),a=t.status||"queued";for(C.info(k.dim(`Waiting for Maestro run ${t.testRunId} to finish...`));Date.now()-s<=i;){let l=await fu(t.projectId,t.testRunId);if(!l)return null;if(l.status&&l.status!==a&&(a=l.status,C.info(k.dim(`Maestro status: ${a}`))),iu.has(String(l.status)))return da(e,l),l.status==="passed"?C.success(k.green(`Maestro run passed: ${l.testRunId}`)):(C.error(k.red(`Maestro run ${l.status}: ${l.testRunId}`)),l.error&&C.error(k.red(String(l.error)))),l;await Ni(o)}return C.error(k.red(`Timed out waiting for Maestro run ${t.testRunId} after ${n} minute(s).`)),{...t,status:"timeout"}}async function uu(e,t){if(e.maestroUseBuildSource)return;let n=e.maestroFlows||".maestro",r=x.resolve(n);if(!P.existsSync(r))return e.maestroFlows?(C.error(k.red(`Maestro flows not found: ${n}`)),null):void 0;let i=x.relative(process.cwd(),r);if(!i||i.startsWith("..")||x.isAbsolute(i))return C.error(k.red("Managed Maestro flow uploads must be inside the current project directory.")),null;let o=Dn();e.quiet||o.start(`Uploading Maestro flows from ${i}...`);try{let s=await w.post("/tests/maestro/source-upload-url",{projectId:t,uploadId:eu()});if(s.data.status!=="success"||!s.data.uploadUrl||!s.data.key)throw new Error(s.data.message||"Failed to get Maestro flow upload URL");let a=new br;if(P.statSync(r).isDirectory())a.addLocalFolder(r,i);else{let d=x.dirname(i);a.addLocalFile(r,d==="."?void 0:d,x.basename(i))}let c=a.toBuffer();return await pu(s.data.uploadUrl,c,"application/zip","Maestro flow upload",d=>{e.quiet||o.message(d)}),e.quiet||o.stop("Maestro flows uploaded"),s.data.key}catch(s){e.quiet||o.stop("Could not upload Maestro flows");let a=s.response?.data?.message||s.message||"Unknown error";return C.error(k.red(`Maestro flow upload failed: ${a}`)),null}}function na(e){let t=e.response?.status,n=e.code||"",r=e.message||"";return t&&![408,409,425,429].includes(t)&&t<500?!1:/ECONNRESET|ETIMEDOUT|EAI_AGAIN|ENOTFOUND|ECONNABORTED|socket hang up|network|timeout/i.test(`${n} ${r}`)||!t}async function pu(e,t,n,r,i){let o;for(let s=1;s<=Vs;s+=1)try{await On.put(e,t,{headers:{"Content-Type":n},maxBodyLength:1/0,maxContentLength:1/0,timeout:ou});return}catch(a){if(o=a,!na(a)||s>=Vs)break;let l=Math.min(2e4,2e3*s),c=a.code||a.response?.status||a.message||"network error";i?.(`${r} attempt ${s} failed (${c}), retrying...`),await Ni(l)}throw o}async function fu(e,t){try{let n=await w.get(`/tests/${encodeURIComponent(t)}`,{params:{projectId:e}});if(n.data.status!=="success")throw new Error(n.data.message||"Failed to fetch Maestro run");let r=n.data.testRun;return{testRunId:r.testRunId,status:r.status,projectId:e,buildId:r.buildId,platform:r.platform,dashboardUrl:r.dashboardUrl||`${nt}/tests/${r.testRunId}`,launchDeferredReason:r.launchDeferredReason,...r.error?{error:r.error}:{}}}catch(n){let r=n.response?.data?.message||n.message||"Unknown error";return C.error(k.red(`Could not fetch Maestro run status: ${r}`)),null}}async function mu(e){if(e.buildId)return{kind:"build-id",value:e.buildId};if(e.buildUrl)return{kind:"build-url",value:e.buildUrl};if(e.artifactUrl)return{kind:"artifact-url",value:e.artifactUrl};if(e.latest)return{kind:"latest"};let t=await Zs({message:"Select app artifact source for Maestro:",options:[{value:"latest",label:"Latest successful build"},{value:"build-id",label:"Build ID"},{value:"build-url",label:`${f.name} build URL`},{value:"artifact-url",label:"Direct artifact URL"}]});if(Di(t))return null;if(t==="latest")return{kind:"latest"};let n=await nu({message:t==="build-id"?"Enter build ID:":t==="build-url"?`Enter ${f.name} build URL:`:"Enter artifact URL:",validate:r=>{let i=String(r||"").trim();if(!i)return"Value is required";if((t==="build-url"||t==="artifact-url")&&!i.startsWith("http"))return"Must be a URL"}});return Di(n)?null:{kind:t,value:String(n).trim()}}function zs(e,t,n){if(e==null||e==="")return t;let r=Number(e);return!Number.isFinite(r)||r<=0?(C.error(`${n} must be a positive number.`),null):r}function Ni(e){return new Promise(t=>setTimeout(t,e))}function ra(e){if(e==null||e==="")return 1;let t=Number(e);return!Number.isInteger(t)||t<0||t>10?(C.error("--maestro-retries must be an integer between 0 and 10."),null):t}async function gu(e){if(e.artifactUrl)return{url:e.artifactUrl,platform:e.platform||Li(e.artifactUrl),name:la(e.artifactUrl)};let t=e.buildId||Fu(e.buildUrl);return t?ia(t,e.platform):e.latest?hu(e):null}async function ia(e,t){let n=Dn();n.start(`Resolving build ${e}...`);try{let r=await w.get(`/public/builds/${encodeURIComponent(e)}`);if(r.data.status!=="success")throw new Error(r.data.message||"Build lookup failed");let i=t||r.data.build?.platform,o=Mu(r.data.artifacts||[],i);if(!o?.downloadUrl)throw new Error("No installable APK or simulator app artifact found for this build.");return n.stop("Build artifact resolved"),{url:o.downloadUrl,platform:i||Li(o.name||o.downloadUrl),name:o.name}}catch(r){n.stop("Could not resolve build artifact");let i=r.response?.data?.message||r.message||"Unknown error";return C.error(k.red(`Local Maestro artifact lookup failed: ${i}`)),null}}async function hu(e){let t=re(`./${f.configFileName}`),n=e.projectId||t?.projectId,r=String(e.profile||e.buildProfile||K(t,"store","production")).toLowerCase();if(!n)return C.error(`No projectId found. Run \`${f.nameLower} link\` first or pass --build-id/--artifact-url.`),null;if(!e.platform)return C.error("Pass --platform when using --latest with --local."),null;let i=Dn();i.start("Resolving latest build...");try{let o=await w.get(`/builds/${n}`,{params:{limit:100}}),a=(Array.isArray(o.data.builds)?o.data.builds:[]).find(l=>l.status==="success"&&l.platform===e.platform&&String(l.buildProfile||l.buildType||"production").toLowerCase()===r);if(!a?.buildId)throw new Error(`No successful ${e.platform} build found for profile ${r}.`);return i.stop(`Latest build resolved: ${a.buildId}`),ia(a.buildId,e.platform)}catch(o){i.stop("Could not resolve latest build");let s=o.response?.data?.message||o.message||"Unknown error";return C.error(k.red(`Latest build lookup failed: ${s}`)),null}}async function Au(e){let t=e.platform||Li(e.url);if(!t)return C.error(k.red("Could not infer platform for local install. Pass --platform android or --platform ios.")),!1;let n=P.mkdtempSync(x.join(en.tmpdir(),"mach-maestro-")),r=e.name||la(e.url)||(t==="android"?"app.apk":"app.zip"),i=x.join(n,r),o=Dn();o.start(`Downloading ${r}...`);try{await Pi(e.url,i),o.stop("Artifact downloaded")}catch(s){return o.stop("Artifact download failed"),C.error(k.red(s.message||"Failed to download artifact")),!1}return t==="android"?xu(i):Lu(i,n)}async function Pi(e,t){let n=await On.get(e,{responseType:"stream"});await tu(n.data,P.createWriteStream(t))}function yu(e,t=12e3){try{return P.readFileSync(e,"utf-8").slice(-t)}catch{return""}}function Ks(e){if(!Number.isFinite(e)||e<0)return"unknown size";if(e<1024)return`${e} B`;let t=["KB","MB","GB"],n=e/1024,r=t[0];for(let i=1;n>=1024&&i<t.length;i+=1)n/=1024,r=t[i];return`${n.toFixed(n>=10?1:2)} ${r}`}function bu(e){return Object.entries(e||{}).filter(([t,n])=>!!t&&n!==void 0).sort(([t],[n])=>t.localeCompare(n)).flatMap(([t,n])=>["-e",`${t}=${n}`])}function Su(e,t){let n=x.resolve(e,t||".maestro"),r=x.relative(e,n);if(r.startsWith("..")||x.isAbsolute(r))throw new Error("Maestro flow path must stay inside the build source.");return n}function oa(e,t){let n=[e];for(let r=0;r<t.length;r+=1){let i=t[r],o=t[r-1];(o==="-e"||o==="--env")&&/^[A-Za-z_][A-Za-z0-9_]*=/.test(i)?n.push(`${i.slice(0,i.indexOf("="))}=<redacted>`):n.push(i)}return n.join(" ")}function Eu(e){return/\[Failed\]\s+/.test(e)}function Iu(e){if(!e.killed){try{e.kill("SIGTERM")}catch{}setTimeout(()=>{try{e.kill("SIGKILL")}catch{}},5e3).unref()}}function sa(e,t,n={}){let{cwd:r,env:i=process.env,logPath:o,echoOutput:s=!1,fastFailOnFlowFailure:a=!1}=n;return o&&P.appendFileSync(o,`
|
|
2074
|
+
$ ${oa(e,t)}
|
|
2075
|
+
`),new Promise(l=>{let c=!1,d=!1,u="",p=g=>{d||(d=!0,l(g))},m=Xs(e,t,{cwd:r,env:i,stdio:["ignore","pipe","pipe"]}),A=g=>{u+=g;let h=u.split(/\r?\n/);u=h.pop()||"";for(let y of h)if(a&&Eu(y)&&!c){c=!0;let b="Mach fast-fail: detected failed Maestro flow; stopping this attempt early to retry...";o&&P.appendFileSync(o,`
|
|
2052
2076
|
${b}
|
|
2053
2077
|
`),s&&process.stderr.write(`${b}
|
|
2054
|
-
`),
|
|
2078
|
+
`),Iu(m)}};m.stdout?.on("data",g=>{let h=g.toString();o&&P.appendFileSync(o,h),s&&process.stdout.write(h),A(h)}),m.stderr?.on("data",g=>{let h=g.toString();o&&P.appendFileSync(o,h),s&&process.stderr.write(h),A(h)}),m.on("error",g=>{o&&P.appendFileSync(o,`${g.message}
|
|
2055
2079
|
`),p({exitCode:1,fastFailed:c,error:g})}),m.on("close",(g,h)=>{c&&o&&P.appendFileSync(o,`Maestro attempt stopped after first failed flow${h?` (${h})`:""}.
|
|
2056
2080
|
`),p({exitCode:typeof g=="number"?g:1,fastFailed:c})})})}function ut(e,t,n,r,i=process.env){P.appendFileSync(n,`
|
|
2057
|
-
$ ${
|
|
2058
|
-
`);let o=
|
|
2059
|
-
`),1):typeof o.status=="number"?o.status:1}function Ti(e,t,n,r){let i=ut(e,t,n,r);if(i!==0)throw new Error(`${e} ${t.join(" ")} failed with exit code ${i}`)}function
|
|
2060
|
-
`)[0]?.trim():"";r&&t.unshift(r);for(let i of t)if(i&&
|
|
2081
|
+
$ ${oa(e,t)}
|
|
2082
|
+
`);let o=it(e,t,{cwd:r,encoding:"utf-8",env:i});return o.stdout&&P.appendFileSync(n,o.stdout),o.stderr&&P.appendFileSync(n,o.stderr),o.error?(P.appendFileSync(n,`${o.error.message}
|
|
2083
|
+
`),1):typeof o.status=="number"?o.status:1}function Ti(e,t,n,r){let i=ut(e,t,n,r);if(i!==0)throw new Error(`${e} ${t.join(" ")} failed with exit code ${i}`)}function _u(e){try{return P.accessSync(e,P.constants.X_OK),!0}catch{return!1}}function vu(e){let t=[process.env.MAESTRO_BIN,x.join(en.homedir(),".maestro","bin","maestro"),"/opt/homebrew/bin/maestro","/usr/local/bin/maestro"].filter(Boolean),n=it("/usr/bin/env",["which","maestro"],{encoding:"utf-8",env:process.env}),r=n.status===0?String(n.stdout||"").split(`
|
|
2084
|
+
`)[0]?.trim():"";r&&t.unshift(r);for(let i of t)if(i&&_u(i))return e&&P.appendFileSync(e,`Using Maestro CLI at ${i}
|
|
2061
2085
|
`),i;return e&&P.appendFileSync(e,`Maestro CLI not found. Checked: ${t.join(", ")}
|
|
2062
|
-
`),null}function
|
|
2086
|
+
`),null}function Ru(e){let t=String(e||"").trim();return t?t.replace(/_/g," ").replace(/\bios\b/gi,"").replace(/\biphone\b/i,"iPhone").replace(/\bpro\b/gi,"Pro").replace(/\bmax\b/gi,"Max").replace(/\s+/g," ").trim():"iPhone 17 Pro"}async function $u(e,t){let n=Ru(e),r=it("xcrun",["simctl","list","devices","--json"],{encoding:"utf-8"});if(r.status!==0||!r.stdout)throw new Error("Could not list iOS simulators.");let i=JSON.parse(r.stdout),o=Object.values(i.devices||{}).flatMap(l=>Array.isArray(l)?l:[]).filter(l=>l?.isAvailable),s=n.toLowerCase(),a=o.find(l=>l.udid===e)||o.find(l=>l.name===n)||o.find(l=>String(l.name||"").toLowerCase().includes(s));if(!a?.udid)throw new Error(`No available iOS Simulator found for ${n}.`);return a.state==="Booted"?P.appendFileSync(t,`Using already booted iOS Simulator ${a.name} (${a.udid}).
|
|
2063
2087
|
`):(P.appendFileSync(t,`Booting iOS Simulator ${a.name} (${a.udid})...
|
|
2064
2088
|
`),ut("xcrun",["simctl","boot",a.udid],t)!==0&&P.appendFileSync(t,`simctl boot returned non-zero; continuing to bootstatus in case it was already booting.
|
|
2065
|
-
`),Ti("xcrun",["simctl","bootstatus",a.udid,"-b"],t)),{name:String(a.name||n),udid:a.udid}}function wu(e,t){if(e.endsWith(".ipa"))throw new Error("iOS Maestro runs need a simulator .app.zip artifact, not an App Store .ipa.");if(e.endsWith(".zip")){let n=x.join(t,"ios-app");P.mkdirSync(n,{recursive:!0}),new br(e).extractAllTo(n,!0);let r=xi(n);if(!r)throw new Error("Could not find a .app bundle inside the iOS artifact zip.");return r}if(e.endsWith(".app"))return e;throw new Error("iOS Maestro runs need a .app bundle or .app.zip artifact.")}function
|
|
2066
|
-
`),null;let r=
|
|
2067
|
-
`),null):i}function
|
|
2068
|
-
`)}function
|
|
2069
|
-
`);let i=
|
|
2070
|
-
`)}),i}async function
|
|
2089
|
+
`),Ti("xcrun",["simctl","bootstatus",a.udid,"-b"],t)),{name:String(a.name||n),udid:a.udid}}function wu(e,t){if(e.endsWith(".ipa"))throw new Error("iOS Maestro runs need a simulator .app.zip artifact, not an App Store .ipa.");if(e.endsWith(".zip")){let n=x.join(t,"ios-app");P.mkdirSync(n,{recursive:!0}),new br(e).extractAllTo(n,!0);let r=xi(n);if(!r)throw new Error("Could not find a .app bundle inside the iOS artifact zip.");return r}if(e.endsWith(".app"))return e;throw new Error("iOS Maestro runs need a .app bundle or .app.zip artifact.")}function aa(e,t){let n=x.join(e,"Info.plist");if(!P.existsSync(n))return P.appendFileSync(t,`Could not find Info.plist in ${e}; skipping uninstall.
|
|
2090
|
+
`),null;let r=it("/usr/bin/plutil",["-extract","CFBundleIdentifier","raw","-o","-",n],{encoding:"utf-8",env:process.env}),i=String(r.stdout||"").trim();return r.status!==0||!i?(P.appendFileSync(t,`Could not read CFBundleIdentifier from Info.plist; skipping uninstall.
|
|
2091
|
+
`),null):i}function $i(e,t,n,r){let i=x.join(e,n);ut("xcrun",["simctl","io",r||"booted","screenshot",i],t)!==0&&P.appendFileSync(t,`[WARN] Could not capture iOS simulator screenshot: ${n}
|
|
2092
|
+
`)}function Ou(e,t,n){let r=x.join(e,"ios-simulator-recording.mp4");P.appendFileSync(t,`Starting iOS simulator recording: ${r}
|
|
2093
|
+
`);let i=Xs("xcrun",["simctl","io",n||"booted","recordVideo",r],{stdio:["ignore","pipe","pipe"],env:process.env});return i.stdout?.on("data",o=>{P.appendFileSync(t,o)}),i.stderr?.on("data",o=>{P.appendFileSync(t,o)}),i.on("error",o=>{P.appendFileSync(t,`[WARN] Could not start iOS simulator recording: ${o.message}
|
|
2094
|
+
`)}),i}async function Ws(e,t){e&&await new Promise(n=>{let r=!1,i=()=>{r||(r=!0,n())};e.once("exit",i),e.once("close",i),e.killed||(P.appendFileSync(t,`Stopping iOS simulator recording...
|
|
2071
2095
|
`),e.kill("SIGINT")),setTimeout(()=>{!r&&!e.killed&&(P.appendFileSync(t,`[WARN] iOS simulator recording did not stop after SIGINT; sending SIGKILL.
|
|
2072
|
-
`),e.kill("SIGKILL")),i()},5e3).unref?.()})}function
|
|
2096
|
+
`),e.kill("SIGKILL")),i()},5e3).unref?.()})}function Du(e,t,n){let r=aa(e,t);if(!r)return;P.appendFileSync(t,`Uninstalling existing iOS app data for ${r} if present...
|
|
2073
2097
|
`),ut("xcrun",["simctl","uninstall",n||"booted",r],t)!==0&&P.appendFileSync(t,`No existing app install removed for ${r}; continuing.
|
|
2074
|
-
`)}function
|
|
2098
|
+
`)}function Pu(e,t){if(!e?.appId)return;if(P.appendFileSync(t,`Cleaning up installed app after Maestro run...
|
|
2075
2099
|
`),e.platform==="ios"){let i=ut("xcrun",["simctl","uninstall",e.deviceId||"booted",e.appId],t);i===0?P.appendFileSync(t,`Uninstalled iOS app ${e.appId} after Maestro run.
|
|
2076
2100
|
`):P.appendFileSync(t,`Warning: failed to uninstall iOS app ${e.appId} after Maestro run: xcrun simctl uninstall exited with code ${i}
|
|
2077
2101
|
`);return}let n=e.deviceId?["-s",e.deviceId]:[],r=ut("adb",[...n,"uninstall",e.appId],t);r===0?P.appendFileSync(t,`Uninstalled Android app ${e.appId} after Maestro run.
|
|
2078
2102
|
`):P.appendFileSync(t,`Warning: failed to uninstall Android app ${e.appId} after Maestro run: adb uninstall exited with code ${r}
|
|
2079
|
-
`)}function
|
|
2103
|
+
`)}function Tu(e,t){let n=it("adb",["devices"],{encoding:"utf-8",env:process.env});if(n.status!==0||n.error)return P.appendFileSync(t,`[WARN] Could not list Android devices before install; using adb default target.
|
|
2080
2104
|
`),null;let r=String(n.stdout||"").split(`
|
|
2081
2105
|
`).map(i=>i.trim().split(/\s+/)).filter(i=>i.length>=2&&i[1]==="device").map(i=>i[0]).filter(Boolean);return e&&r.includes(e)?(P.appendFileSync(t,`Using Android device ${e} for install and cleanup.
|
|
2082
2106
|
`),e):r.length===1?(P.appendFileSync(t,`Using Android device ${r[0]} for install and cleanup.
|
|
2083
2107
|
`),r[0]):(r.length>1&&P.appendFileSync(t,`[WARN] Multiple Android devices are connected; using adb default target for install and cleanup.
|
|
2084
|
-
`),null)}function
|
|
2085
|
-
`),null)}function
|
|
2086
|
-
`)[0]?.trim()||null}async function Oi(e,t,n){if(!P.existsSync(e))return;let r=P.readFileSync(e),i;for(let o=1;o<=3;o+=1)try{await On.put(t,r,{headers:{"Content-Type":n,"Content-Length":String(r.length)},maxBodyLength:1/0,maxContentLength:1/0,timeout:12e4});return}catch(s){if(i=s,!
|
|
2108
|
+
`),null)}function Cu(e,t){let r=(wi("aapt",["dump","badging",e])||wi("aapt2",["dump","badging",e]))?.match(/package:\s+name='([^']+)'/);if(r?.[1])return r[1];let o=wi("apkanalyzer",["manifest","application-id",e])?.split(/\s+/).find(Boolean);return o||(P.appendFileSync(t,`[WARN] Could not determine Android application id from APK; post-run uninstall will be skipped.
|
|
2109
|
+
`),null)}function wi(e,t){for(let n of ku(e)){let r=it(n,t,{encoding:"utf-8",env:process.env,maxBuffer:10485760});if(r.status===0&&r.stdout)return String(r.stdout).trim()}return null}function ku(e){let t=process.platform==="win32"&&!e.endsWith(".exe")?`${e}.exe`:e,n=[];if(e==="aapt"||e==="aapt2")for(let i of Ys()){let o=x.join(i,"build-tools");for(let s of qs(o))n.push(x.join(o,s,t))}if(e==="apkanalyzer")for(let i of Ys()){n.push(x.join(i,"cmdline-tools","latest","bin",t));let o=x.join(i,"cmdline-tools");for(let s of qs(o))n.push(x.join(o,s,"bin",t));n.push(x.join(i,"tools","bin",t))}let r=Nu(e);return r&&n.unshift(r),n.push(t),[...new Set(n)]}function Ys(){let e=[process.env.ANDROID_HOME,process.env.ANDROID_SDK_ROOT];return process.platform==="darwin"?e.push(x.join(en.homedir(),"Library","Android","sdk")):process.platform==="linux"&&e.push(x.join(en.homedir(),"Android","Sdk"),x.join(en.homedir(),"Android","sdk"),"/opt/android-sdk","/usr/lib/android-sdk"),[...new Set(e.filter(t=>!!t))]}function qs(e){try{return P.readdirSync(e,{withFileTypes:!0}).filter(t=>t.isDirectory()).map(t=>t.name).sort((t,n)=>n.localeCompare(t,void 0,{numeric:!0}))}catch{return[]}}function Nu(e){let t=process.platform==="win32"?"where":"/usr/bin/env",n=process.platform==="win32"?[e]:["which",e],r=it(t,n,{encoding:"utf-8",env:process.env});return r.status!==0||!r.stdout?null:String(r.stdout).split(`
|
|
2110
|
+
`)[0]?.trim()||null}async function Oi(e,t,n){if(!P.existsSync(e))return;let r=P.readFileSync(e),i;for(let o=1;o<=3;o+=1)try{await On.put(t,r,{headers:{"Content-Type":n,"Content-Length":String(r.length)},maxBodyLength:1/0,maxContentLength:1/0,timeout:12e4});return}catch(s){if(i=s,!na(s)||o>=3)break;await Ni(2e3*o)}throw i}async function Js(e,t,n,r){let i=x.join(n,"report.xml"),o=x.join(t,"artifacts.tar.gz");try{await Oi(i,e.junitUploadUrl,"application/xml")}catch(s){P.appendFileSync(r,`[WARN] Failed to upload JUnit report: ${s.message||s}
|
|
2087
2111
|
`)}try{await Oi(r,e.logUploadUrl,"text/plain")}catch(s){P.appendFileSync(r,`[WARN] Failed to upload runner log: ${s.message||s}
|
|
2088
2112
|
`)}try{ut("tar",["-czf",o,"-C",t,x.basename(n)],r),await Oi(o,e.artifactsUploadUrl,"application/gzip")}catch(s){P.appendFileSync(r,`[WARN] Failed to upload Maestro artifacts: ${s.message||s}
|
|
2089
|
-
`)}}function Nu(e){if(!e.endsWith(".apk"))return C.error(k.red("Local Android Maestro runs need an APK artifact.")),!1;C.info(k.dim("Installing APK on local Android device/emulator..."));let t=rt("adb",["install","-r",e],{stdio:"inherit",env:process.env});return t.error?(C.error(k.red(`adb failed to start: ${t.error.message}`)),!1):t.status!==0?(C.error(k.red(`adb install failed with exit code ${t.status??1}`)),!1):!0}function xu(e,t){if(e.endsWith(".ipa"))return C.error(k.red("Local iOS Maestro runs need an iOS Simulator .app.zip artifact, not an App Store .ipa.")),!1;let n=e;if(e.endsWith(".zip")){let i=x.join(t,"ios-app");P.mkdirSync(i,{recursive:!0}),new br(e).extractAllTo(i,!0);let o=xi(i);if(!o)return C.error(k.red("Could not find a .app bundle inside the downloaded zip.")),!1;n=o}if(!n.endsWith(".app"))return C.error(k.red("Local iOS Maestro runs need an iOS Simulator .app bundle or .app.zip artifact.")),!1;C.info(k.dim("Installing app on booted iOS Simulator..."));let r=rt("xcrun",["simctl","install","booted",n],{stdio:"inherit",env:process.env});return r.error?(C.error(k.red(`xcrun failed to start: ${r.error.message}`)),!1):r.status!==0?(C.error(k.red(`iOS Simulator install failed with exit code ${r.status??1}`)),!1):!0}function xi(e){let t=P.readdirSync(e,{withFileTypes:!0});for(let n of t){let r=x.join(e,n.name);if(n.isDirectory()&&n.name.endsWith(".app"))return r;if(n.isDirectory()){let i=xi(r);if(i)return i}}return null}function Lu(e,t){let n=String(t||"").toLowerCase();return n==="android"?e.find(r=>Qt(r,".apk")):n==="ios"?e.find(r=>Qt(r,".app.zip"))||e.find(r=>Qt(r,".zip")):e.find(r=>Qt(r,".apk"))||e.find(r=>Qt(r,".app.zip"))||e.find(r=>Qt(r,".zip"))}function Qt(e,t){return String(e?.name||e?.downloadUrl||e?.url||"").toLowerCase().endsWith(t)}function Li(e){let t=String(e||"").toLowerCase();if(t.includes(".apk"))return"android";if(t.includes(".app.zip")||t.endsWith(".app")||t.includes(".ipa"))return"ios"}function aa(e){if(e)try{return x.basename(new URL(e).pathname)||void 0}catch{return x.basename(e)||void 0}}function Mu(e){return e?e.match(/[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/i)?.[0]:void 0}function la(e,t){if(!e.jsonOutput)return;let n=x.resolve(e.jsonOutput),r={...t,updatedAt:new Date().toISOString()};try{let i=x.dirname(n);i&&i!=="."&&P.mkdirSync(i,{recursive:!0}),P.writeFileSync(n,JSON.stringify(r,null,2))}catch(i){C.warn(k.yellow(`Could not write Maestro metadata JSON: ${i.message}`))}}function Fu(e,t){if(!e.jsonOutput)return;let n=x.resolve(e.jsonOutput),r={mode:"local",...t,updatedAt:new Date().toISOString()};try{let i=x.dirname(n);i&&i!=="."&&P.mkdirSync(i,{recursive:!0}),P.writeFileSync(n,JSON.stringify(r,null,2))}catch(i){C.warn(k.yellow(`Could not write Maestro metadata JSON: ${i.message}`))}}import{spinner as Rt,text as Cn,select as Gi,isCancel as $t,cancel as Vi,log as ya}from"@clack/prompts";import J from"chalk";import ee from"fs";import _e from"path";import{spawn as Gu,spawnSync as Mt}from"child_process";import Aa from"axios";import Ut from"os";import Wi from"crypto";import Uu from"crypto";import tn from"axios";import da from"fs";var Tn=6e4,Bu=12e4,Mi=4,Pn=e=>encodeURIComponent(e),ju=e=>new Promise(t=>setTimeout(t,e));async function nn(e,t){let n;for(let r=1;r<=Mi;r++)try{return await t()}catch(i){if(n=i,r>=Mi||!Hu(i))throw i;let o=Number(i.response?.headers?.["retry-after"]),s=Number.isFinite(o)&&o>0?o*1e3:Math.min(2e3*r*r,15e3);console.log(`[Google Play] ${e} failed (attempt ${r}/${Mi}); retrying in ${Math.round(s/1e3)}s...`),await ju(s)}throw n}function Hu(e){let t=e.response?.status;return t?t===408||t===409||t===425||t===429||t>=500:!0}async function ua(e){let{packageName:t,serviceAccount:n,aabPath:r,track:i,releaseStatus:o,userFraction:s,changesNotSentForReview:a}=e,l;try{let d={Authorization:`Bearer ${await ca(n)}`,Connection:"close"},u=Pn(t);if(l=(await nn("create edit",()=>tn.post(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${u}/edits`,{},{headers:d,timeout:Tn}))).data.id,!l)throw new Error("Google Play edit insert succeeded but did not return an edit id.");let m=Pn(l),y=da.statSync(r),g=await nn("upload AAB",()=>tn.post(`https://androidpublisher.googleapis.com/upload/androidpublisher/v3/applications/${u}/edits/${m}/bundles`,da.createReadStream(r),{headers:{...d,"Content-Type":"application/octet-stream","Content-Length":y.size},maxBodyLength:1/0,maxContentLength:1/0,params:{uploadType:"media"},timeout:Bu})),h=Number(g.data.versionCode);if(!h)throw new Error("Google Play upload succeeded but did not return a versionCode.");let A={versionCodes:[String(h)],status:o};return(o==="inProgress"||o==="halted")&&typeof s=="number"&&(A.userFraction=s),await nn("update track",()=>tn.put(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${u}/edits/${m}/tracks/${Pn(i)}`,{releases:[A]},{headers:d,timeout:Tn})),await nn("commit edit",()=>tn.post(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${u}/edits/${m}:commit`,{},{headers:d,params:a?{changesNotSentForReview:!0}:void 0,timeout:Tn})),{editId:l,versionCode:h,track:i,releaseStatus:o,userFraction:s}}catch(c){if(l)try{let u=await ca(n);await nn("delete edit",()=>tn.delete(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${Pn(t)}/edits/${Pn(l)}`,{headers:{Authorization:`Bearer ${u}`,Connection:"close"},timeout:Tn}))}catch{}let d=c.response?.data?.error?.message||c.message;throw new Error(`Google Play API Error: ${d}`)}}async function ca(e){let t=Math.floor(Date.now()/1e3),n=t+3600,r={alg:"RS256",typ:"JWT"},i={iss:e.client_email,sub:e.client_email,aud:"https://oauth2.googleapis.com/token",iat:t,exp:n,scope:"https://www.googleapis.com/auth/androidpublisher"},o=Buffer.from(JSON.stringify(r)).toString("base64url"),s=Buffer.from(JSON.stringify(i)).toString("base64url"),a=`${o}.${s}`,l=Uu.createSign("RSA-SHA256");l.update(a);let c=l.sign(e.private_key,"base64url"),d=`${a}.${c}`;return(await nn("OAuth token exchange",()=>tn.post("https://oauth2.googleapis.com/token",{grant_type:"urn:ietf:params:oauth:grant-type:jwt-bearer",assertion:d},{headers:{Connection:"close"},timeout:Tn}))).data.access_token}var Vu=5e3,zu=12,ba=100,Fi=24,pa=8e3,Ku={completed:"completed",draft:"draft",halted:"halted",inprogress:"inProgress","in-progress":"inProgress"},Wu=e=>e?.type==="google_service_account",Er=e=>e?.bundleId||e?.packageName||e?.meta?.packageName||e?.meta?.bundleId,Sa=e=>e.submitArgs||process.argv.slice(3).join(" ");async function Ir(e){let t=Rt(),n=De(),r=Yu(e);if(!r){process.exitCode=1;return}let i=e.projectId||r.projectId,o=e.profile||e.buildProfile||K(r,"store","production");if(!i){oe(`${f.configFileName} is missing projectId. Pass --project-id in runner mode.`),process.exitCode=1;return}r.projectId=i,fe(J.dim(`Submit for project: ${r.name||i} | Profile: ${o}`));let s=e.platform;if(!s){let E=await Gi({message:"Select platform to submit:",options:[{value:"ios",label:"iOS (App Store Connect / TestFlight)"},{value:"android",label:"Android (Google Play Console)"}]});if($t(E)){Vi("Operation cancelled");return}s=E}if(s=String(s).toLowerCase(),s!=="ios"&&s!=="android"){oe(`Platform ${s} is not supported. Use 'ios' or 'android'.`),process.exitCode=1;return}let a=s==="ios"&&!e.local&&e.sshHost?cp(r,o,e):null;if(s==="ios"&&!e.local&&!a){await qu(r,o,e);return}let l=e.submitId,c=!!(e.local&&l),d=l||null,u=async(E,$={})=>{d&&await Qu(i,d,{status:E,...$})},p=s==="android"?e.packageName||e.androidPackage||ap(r,o):void 0,m=s==="ios"?e.bundleId||e.iosBundleIdentifier||dp(r,o):void 0,y,g,h,A=!1;try{s==="android"&&(y=e.track||r.submit?.[o]?.android?.track||r.submit?.production?.android?.track||"internal",g=up(r,o,e.releaseStatus),h=fp(r,o,e.rollout),A=mp(r,o,e.changesNotSentForReview),gp(g,h))}catch(E){oe(E.message),process.exitCode=1;return}if(s==="android"&&!c&&(d=await Ju(r,i,s,o,e,{packageName:p,track:y,releaseStatus:g,rollout:h,changesNotSentForReview:A}),!d)){oe("Could not create submission tracking record. Submission was not started."),process.exitCode=1;return}await u("running",{platform:s,profile:o,packageName:p,track:y,releaseStatus:g,rollout:h,startTime:Date.now(),...c?tp():{}});let b=null,v=null;try{v=await hp(i,s,e,n?.token),b=v?.filePath||null}catch(E){await u("failed",{error:`Failed to resolve submission artifact: ${E.message}`,endTime:Date.now()}),oe(`Failed to resolve submission artifact: ${E.message}`),process.exitCode=1;return}if(!b){let E=Ap(s,e);await u("failed",{error:E,endTime:Date.now()}),oe(E),process.exitCode=1;return}await u("running",{buildId:v?.buildId,artifactName:v?.artifactName,artifactSource:v?.source}),fe(`Using artifact: ${J.green(_e.basename(b))} `),t.start("Fetching submission credentials from Dashboard...");let S;try{let $=(await R.get(`/credentials/${i}`)).data.credentials||[];if(s==="android"&&!p){t.stop("Package name missing"),oe(`Could not resolve Android package name. Set android.package or build.${o}.android.package in ${f.configFileName}.`),await u("failed",{error:"Could not resolve Android package name.",endTime:Date.now()}),process.exitCode=1;return}let w=$.filter(Wu),O=s==="ios"?$.filter(N=>N.type==="asc_api_key"):lp(w,p);if(O.length===0){if(t.stop("Credentials missing"),oe(s==="android"?`No Google Play service credential found for package ${p}.`:`No Service Credentials found for ${s}.`),s==="android"){let N=w.map(Er).filter(Boolean).join(", ");N&&fe(`Found Google Play service credential(s) for: ${N}`),fe(`Use '${f.nameLower} credentials:service --platform android --package-name ${p}' or upload it under that package in the Dashboard.`)}else fe(`Use '${f.nameLower} credentials:service --platform ${s}' or use the Dashboard to upload them.`);await u("failed",{error:`No submission credentials found for ${s}.`,endTime:Date.now()}),process.exitCode=1;return}if(S=rp(O,e.credentialId),!S&&s==="ios"&&m&&(S=ip(O,m)),S||O.length===1)S=S||O[0],t.stop(`Using: ${S.name}`),s==="android"&&Er(S)==="*"&&fe(J.yellow(`Using legacy wildcard Google Play credential for ${p}. Upload a package-scoped credential when possible.`));else{if(t.stop("Multiple credentials found"),op()){let D=O.map(F=>`${F.name||"credential"} (${F.credentialId||F.id||"no-id"})`).join(", ");oe(`Multiple ${s==="ios"?"App Store Connect":"Google Play"} credentials found. Use --credential-id in CI. Available: ${D}`),await u("failed",{error:"Multiple submission credentials found; --credential-id is required in CI.",endTime:Date.now()}),process.exitCode=1;return}let N=await Gi({message:`Choose a ${s==="ios"?"App Store Connect":"Google Play"} credential:`,options:O.map(D=>({value:D.credentialId,label:D.name,hint:`${D.keyId?`ID: ${D.keyId}`:""} ${D.issuerId?`(Issuer: ${D.issuerId.substring(0,8)}...)`:""}`}))});if($t(N)){Vi("Submission cancelled"),await u("failed",{error:"Submission cancelled while selecting credential.",endTime:Date.now()}),process.exitCode=1;return}S=O.find(D=>D.credentialId===N),fe(`Using selected: ${J.green(S.name)}`)}}catch(E){t.stop("Failed to fetch credentials"),oe(`API Error: ${E.message} `),await u("failed",{error:`Failed to fetch credentials: ${E.message}`,endTime:Date.now()}),process.exitCode=1;return}let L=ee.mkdtempSync(_e.join(Ut.tmpdir(),`${f.nameLower}-submit-`)),M=S.keyId||S.meta?.keyId,B=S.issuerId||S.meta?.issuerId,j=S.type==="asc_api_key"?`AuthKey_${M}.p8`:"service-account.json",Q=_e.join(L,j);t.start("Downloading secure key...");try{let E=await R.get(`/credentials/${S.credentialId}/download`,{params:{projectId:i,format:"raw"}});if(E.data.status!=="success"||!E.data.downloadUrl)throw new Error("Failed to get secure download URL");let $=await Aa.get(E.data.downloadUrl,{responseType:"arraybuffer"});ee.writeFileSync(Q,Buffer.from($.data)),t.stop("Key downloaded to secure temp storage")}catch(E){t.stop("Download failed"),oe(`Failed to download key: ${E.message}`);try{ee.rmSync(L,{recursive:!0,force:!0})}catch{}await u("failed",{error:`Failed to download credential key: ${E.message}`,endTime:Date.now()}),process.exitCode=1;return}fe(J.blue(`Initiating ${s==="ios"?"TestFlight":"Google Play"} submission...`));let ie=!1,Te;try{if(s==="ios"){if(!M){let $=await Cn({message:"Enter App Store Connect Key ID (e.g. 2X948D...):",validate:w=>w.length>0?void 0:"Key ID is required"});if($t($)){await u("failed",{error:"Submission cancelled while entering ASC Key ID.",endTime:Date.now()}),process.exitCode=1;return}M=$}if(!B||B==="undefined"){let $=await Cn({message:"Enter App Store Connect Issuer ID (Found on ASC Keys page):",validate:w=>w.length>0?void 0:"Issuer ID is required"});if($t($)){await u("failed",{error:"Submission cancelled while entering ASC Issuer ID.",endTime:Date.now()}),process.exitCode=1;return}B=$}fe(`Using ASC Key ID: ${M}`),fe(`Using ASC Issuer ID: ${B}`);let E=a?await Sp(b,Q,B,M,m,a):await bp(b,Q,B,M,m);Ki(`${s==="ios"?"App Store":"Google Play"} submission successful!`),ie=!0}else Te=await $p(b,Q,y||"internal",p,g||"completed",h,A,o),Ki("Google Play submission successful!"),ie=!0}catch(E){oe(`Submission failed: ${E.message}`),await u("failed",{error:E.message,endTime:Date.now()}),wt(e,{status:"failed",projectId:i,submitId:d,platform:s,profile:o,buildId:v?.buildId||e.buildId,artifactName:v?.artifactName,error:E.message,dashboardUrl:d?Ft(d,i):void 0}),process.exitCode=1}finally{ie&&(await u("success",{endTime:Date.now(),versionCode:Te?.versionCode,track:y,releaseStatus:g}),wt(e,{status:"success",projectId:i,submitId:d,platform:s,profile:o,buildId:v?.buildId||e.buildId,artifactName:v?.artifactName,versionCode:Te?.versionCode,track:y,releaseStatus:g,dashboardUrl:d?Ft(d,i):void 0})),Bp(L),b&&b.includes(`${f.nameLower}-artifact-`)}}function Yu(e){let t=`./${f.configFileName}`;if(ee.existsSync(t))try{return JSON.parse(ee.readFileSync(t,"utf-8"))}catch(n){return oe(`Failed to read ${f.configFileName}: ${n.message}`),null}return e.projectId?{projectId:e.projectId}:(oe(`No ${f.configFileName} found. Run \`${f.nameLower} init\` or \`${f.nameLower} link\` first.`),null)}async function qu(e,t,n){let r=n.projectId||e.projectId;if(!r){oe(`${f.configFileName} is missing projectId.`),process.exitCode=1;return}let i=n.submitId||Wi.randomUUID(),o=!!n.latest||!n.buildId,s=Xu({...n,latest:o,profile:t,projectId:r,submitId:i}),a={projectId:r,submitId:i,platform:"ios",profile:t,latest:o,buildId:n.buildId,credentialId:n.credentialId,status:"pending",source:"cli",submitArgs:Sa(n),runnerArgs:s,runnerCommand:[f.nameLower,"submit",...s].map(sp).join(" "),appName:e.name,startTime:Date.now()},l=Rt();l.start("Queuing iOS submit on macOS runner...");try{let c=await R.post("/submissions",a),d=c.data?.submission||c.data?.submit||{},u=c.data?.dashboardUrl||Ft(i,r);l.stop("iOS submit queued"),fe(`Submission ID: ${J.cyan(i)}`),fe(`Dashboard: ${J.blue.underline(u)}`),wt(n,{status:"pending",projectId:r,submitId:i,platform:"ios",profile:t,latest:o,buildId:n.buildId,dashboardUrl:u}),await Zu(r,i,{...n,profile:t})}catch(c){l.stop("Could not queue iOS submit"),oe(np(c)),process.exitCode=1}}async function Ju(e,t,n,r,i,o={}){let s=i.submitId||Wi.randomUUID(),a=!!i.latest||!i.buildId,l={projectId:t,submitId:s,platform:n,profile:r,latest:a,buildId:i.buildId,credentialId:i.credentialId,status:"running",source:"cli-direct",submitArgs:Sa(i),appName:e.name,startTime:Date.now(),...o};try{let c=await R.post("/submissions",l),d=c.data?.submission||c.data?.submit||{},u=c.data?.dashboardUrl||d.dashboardUrl||Ft(s,t);return fe(`Submission ID: ${J.cyan(s)}`),fe(`Dashboard: ${J.blue.underline(u)}`),wt(i,{status:"running",projectId:t,submitId:s,platform:n,profile:r,latest:a,buildId:i.buildId,dashboardUrl:u}),s}catch(c){let d=c.response?.data?.message||c.response?.data?.error||c.message;return fe(J.yellow(`Could not create submission tracking record: ${d}`)),null}}function Xu(e){let t=["--local","--submit-id",e.submitId,"--project-id",e.projectId,"--platform","ios","--profile",e.profile||"production"];return e.buildId?t.push("--build-id",e.buildId):t.push("--latest"),e.credentialId&&t.push("--credential-id",e.credentialId),e.bundleId&&t.push("--bundle-id",e.bundleId),e.packageName&&t.push("--package-name",e.packageName),e.quiet&&t.push("--quiet"),e.jsonOutput&&t.push("--json-output",e.jsonOutput),t.filter(n=>n!=null&&n!=="")}async function Zu(e,t,n){let r=Rt(),i=0,o=0;for(n.quiet||r.start("Waiting for iOS submit runner...");;)try{let s=await R.get(`/submissions/${e}/${t}`),a=s.data?.submission||s.data?.submit||s.data,l=String(a?.status||"pending").toLowerCase();i=0;let c=Array.isArray(a?.logs)?a.logs:[];for(let d=o;d<c.length;d++){let u=c[d];u&&console.log(J.dim(String(u)))}if(o=c.length,["success","completed","succeeded"].includes(l)){n.quiet||r.stop("iOS submit completed"),Ki("App Store submission successful!"),wt(n,{status:"success",projectId:e,submitId:t,platform:"ios",profile:a?.profile||n.profile||"production",buildId:a?.buildId||n.buildId,artifactName:a?.artifactName,dashboardUrl:a?.dashboardUrl||Ft(t,e)});return}if(["failed","error","cancelled","canceled"].includes(l)){n.quiet||r.stop("iOS submit failed");let d=a?.error||a?.message||"Unknown iOS submit failure.";oe(d),wt(n,{status:"failed",projectId:e,submitId:t,platform:"ios",profile:a?.profile||n.profile||"production",buildId:a?.buildId||n.buildId,artifactName:a?.artifactName,error:d,dashboardUrl:a?.dashboardUrl||Ft(t,e)}),process.exitCode=1;return}n.quiet||r.message(`iOS submit ${l}...`),await zi(Vu)}catch(s){if(i++,i>=zu){n.quiet||r.stop("Lost connection to iOS submit status"),oe(`Could not fetch iOS submit status after ${i} attempts: ${s.message}`),process.exitCode=1;return}await zi(Math.min(2e3*i,15e3))}}async function Qu(e,t,n){let r;for(let i=1;i<=3;i++)try{await R.patch(`/submissions/${e}/${t}`,n);return}catch(o){if(r=o,i>=3||!ep(o))break;await zi(1e3*i)}ya.warn(J.dim(`Could not report submission status: ${r?.message||r}`))}function ep(e){let t=e.response?.status;return!t||t===408||t===409||t===425||t===429||t>=500}function tp(){let e={gitlabJobId:process.env.CI_JOB_ID,gitlabJobUrl:process.env.CI_JOB_URL,gitlabPipelineId:process.env.CI_PIPELINE_ID,gitlabProjectId:process.env.CI_PROJECT_ID,gitlabProjectPath:process.env.CI_PROJECT_PATH};return Object.fromEntries(Object.entries(e).filter(([,t])=>!!t))}function np(e){let t=e.response?.status,n=e.response?.data?.message||e.response?.data?.error;return t===404||t===405?["Managed iOS submit is not enabled on this Mach API yet.","Deploy the API/dashboard submission orchestration endpoint, then retry the same command.","Expected API: POST /submissions and GET/PATCH /submissions/:projectId/:submitId."].join(`
|
|
2090
|
-
`):n||e.message||String(e)}function Ft(e,t){if(!e)return nt;let n=t?`?projectId=${encodeURIComponent(t)}`:"";return`${nt}/submissions/${e}${n}`}function wt(e,t){if(!e.jsonOutput)return;let n=_e.resolve(e.jsonOutput),r={...t,url:t.url||t.dashboardUrl||Ft(t.submitId,t.projectId),updatedAt:new Date().toISOString()};try{let i=_e.dirname(n);i&&i!=="."&&ee.mkdirSync(i,{recursive:!0}),ee.writeFileSync(n,JSON.stringify(r,null,2))}catch(i){ya.warn(J.yellow(`Could not write submission metadata JSON: ${i.message}`))}}function rp(e,t){return t&&e.find(n=>n.credentialId===t||n.id===t||n.keyId===t||n.meta?.keyId===t)||null}function ip(e,t){let n=e.filter(r=>[r.bundleId,r.bundleIdentifier,r.appIdentifier,r.meta?.bundleId,r.meta?.bundleIdentifier,r.meta?.appIdentifier].filter(Boolean).map(String).includes(t));return n.length===1?n[0]:null}function op(){return process.env.CI==="true"||process.env.CI==="1"||!process.stdin.isTTY}function zi(e){return new Promise(t=>setTimeout(t,e))}function sp(e){return/^[a-zA-Z0-9_./:=@-]+$/.test(e)?e:`'${e.replace(/'/g,"'\\''")}'`}function ap(e,t){if(e.submit?.[t]?.android?.package)return e.submit[t].android.package;let n=lr(e,t);if(n)return n;let r=_e.join(process.cwd(),"app.json");if(ee.existsSync(r))try{return JSON.parse(ee.readFileSync(r,"utf-8")).expo?.android?.package}catch{}let i=_e.join(process.cwd(),"app.config.json");if(ee.existsSync(i))try{let o=JSON.parse(ee.readFileSync(i,"utf-8"));return o.expo?.android?.package||o.android?.package}catch{}}function lp(e,t){let n=e.filter(o=>Er(o)===t);if(n.length>0)return n;let r=e.filter(o=>{let s=Er(o);return!s||s==="*"});return e.length>0&&e.length===r.length?r:[]}function dp(e,t){return e.submit?.[t]?.ios?.bundleIdentifier?e.submit[t].ios.bundleIdentifier:e.submit?.[t]?.ios?.bundleId?e.submit[t].ios.bundleId:dr(e,t)}function cp(e,t,n){let r=e.submit?.[t]?.ios||{},i=e.submit?.production?.ios||{},o=n.sshHost||r.sshHost||i.sshHost||process.env.MACH_IOS_SUBMIT_SSH_HOST;return o?{sshHost:o,sshUser:n.sshUser||r.sshUser||i.sshUser||process.env.MACH_IOS_SUBMIT_SSH_USER||process.env.USER||"ubuntu",sshKey:n.sshKey||r.sshKey||i.sshKey||process.env.MACH_IOS_SUBMIT_SSH_KEY}:null}function up(e,t,n){let r=n||e.submit?.[t]?.android?.releaseStatus||e.submit?.production?.android?.releaseStatus||"completed";return pp(r)}function pp(e){let t=Ku[String(e).trim().toLowerCase()];if(!t)throw new Error(`Invalid Android release status "${e}". Use completed, draft, halted, or inProgress.`);return t}function fp(e,t,n){let r=n??e.submit?.[t]?.android?.rollout??e.submit?.[t]?.android?.userFraction??e.submit?.[t]?.android?.rolloutFraction??e.submit?.production?.android?.rollout??e.submit?.production?.android?.userFraction??e.submit?.production?.android?.rolloutFraction;if(r==null||r==="")return;let i=Number(r);if(!Number.isFinite(i)||i<=0||i>=1)throw new Error(`Invalid Android rollout fraction "${r}". Use a number greater than 0 and less than 1, for example 0.1.`);return i}function mp(e,t,n){let r=n??e.submit?.[t]?.android?.changesNotSentForReview??e.submit?.[t]?.android?.changes_not_sent_for_review??e.submit?.production?.android?.changesNotSentForReview??e.submit?.production?.android?.changes_not_sent_for_review??!1;return r===!0||r==="true"||r==="1"}function gp(e,t){if(e==="inProgress"&&t===void 0)throw new Error("Google Play staged rollout requires --rollout <fraction> when --release-status inProgress is used.");if(e!=="inProgress"&&e!=="halted"&&t!==void 0)throw new Error("Android rollout fraction can only be used with --release-status inProgress or halted.")}async function hp(e,t,n,r){let i=n.buildId?"id":n.latest?"latest":null;if(!i){let s=await Gi({message:"Select artifact source:",options:[{value:"latest",label:`Latest Production Build (${f.name})`},{value:"id",label:`Input Build ID (${f.name})`},{value:"url",label:"Remote URL"},{value:"local",label:"Local File Path"}]});if($t(s))return Vi("Operation cancelled"),null;i=s}if(i==="local"){let s=await Cn({message:"Enter path to artifact (.ipa/.aab):",validate:a=>{if(!ee.existsSync(a))return"File not found";if(t==="ios"&&!a.endsWith(".ipa"))return"Must be an .ipa file";if(t==="android"&&!a.endsWith(".aab"))return"Must be an .aab file"}});return $t(s)?null:{filePath:s,source:"local"}}let o=Rt();if(i==="latest"){let s=n.profile||n.buildProfile;o.start(`Fetching latest${s?` ${s}`:""} build...`);try{let a=await R.get(`/builds/${e}`,{params:{limit:50}});if(a.data.status!=="success")throw new Error(a.data.message);let l=a.data.builds||[],c=s?.toLowerCase(),d=S=>S.platform?.toLowerCase()===t.toLowerCase()&&S.status?.toLowerCase()==="success",u=S=>c?[S.buildProfile,S.profile,S.profileName,S.buildType].filter(Boolean).some(L=>String(L).toLowerCase()===c):!0,p=l.filter(S=>d(S)&&u(S)),m=p.find(S=>S.buildType?.toLowerCase()==="store"||S.distribution?.toLowerCase()==="store")||p[0],y=l.some(S=>S.platform?.toLowerCase()===t.toLowerCase()&&S.status?.toLowerCase()==="success");if(!m)return o.stop("No suitable build found"),oe(s&&y?`No successful ${t} builds found for profile "${s}".`:"No successful builds found for this platform."),null;o.stop(`Found build: ${m.buildId}`);let g=m.artifacts||[];if(g.length===0||g.every(S=>!(S.url||S.downloadUrl)))try{let S=await R.get(`/builds/${e}/${m.buildId}/artifacts`);S.data.status==="success"&&S.data.artifacts?.length>0?(g=S.data.artifacts.map(L=>({...L,url:L.url||L.downloadUrl})),console.log(J.cyan(` [RECOVERY] Fetched ${g.length} artifact(s) with download URLs.`))):console.log(J.yellow(" [RECOVERY] /artifacts endpoint returned 0 artifacts."))}catch(S){console.log(J.red(` [RECOVERY] /artifacts fetch failed: ${S.message}`))}let A=t==="ios",b=Ui(g,t);if(!b||!(b.url||b.downloadUrl))return oe("Build found but artifact URL is missing."),null;let v=b.url||b.downloadUrl;return{filePath:await Bi(v,A?"ios":"android"),buildId:m.buildId,artifactName:b.name,source:"latest"}}catch(a){return o.stop("Fetch failed"),oe(`API Error: ${a.message}`),null}}if(i==="id"){let s=n.buildId||await Cn({message:"Enter Build ID:",validate:l=>l.length<5?"Invalid ID":void 0});if($t(s))return null;let a=String(s);o.start("Fetching build...");try{let l=null;try{let m=await R.get(`/builds/${e}/${a}`);m.data.status==="success"&&(l=m.data.build)}catch(m){m.response?.status!==404&&console.log(J.dim(` [RECOVERY] Project build lookup skipped: ${m.message}`))}if(!l){let m=await R.get(`/build/${a}`);if(m.data.status!=="success")throw new Error(m.data.message);l=m.data.build}if(!l)throw new Error(`Build ${a} was not found.`);let c=t==="ios",d=Sr(l.artifacts);yp(d)||(d=await fa(e,a,d));let u=Ui(d,t);if(u||(d=await fa(e,a,d),u=Ui(d,t)),!u)throw new Error(`No ${c?".ipa":".aab"} artifact found for build ${a}. The build exists, but its artifact list does not contain a downloadable submission artifact.`);let p=u.url||u.downloadUrl;if(!p)throw new Error(`Artifact ${u.name||"(unnamed)"} for build ${a} has no download URL. Retry after the build artifact upload is visible in the Installation Hub.`);return o.stop(`Found build: ${l.buildId||a}`),{filePath:await Bi(p,c?"ios":"android"),buildId:l.buildId||a,artifactName:u.name,source:"id"}}catch(l){throw o.stop("Fetch failed"),l}}if(i==="url"){let s=await Cn({message:"Enter Artifact URL:",validate:a=>a.startsWith("http")?void 0:"Must be a valid URL"});return $t(s)?null:{filePath:await Bi(s,t),source:"url"}}return null}function Sr(e){return(e||[]).map(t=>({...t,url:t.url||t.downloadUrl}))}function yp(e){return e.some(t=>!!(t.url||t.downloadUrl))}function Ui(e,t){let n=t==="ios",r=n?"ipa":"aab",i=n?".ipa":".aab";return e.find(o=>{let s=String(o.type||"").toLowerCase(),a=String(o.name||"").toLowerCase(),l=String(o.url||o.downloadUrl||"").toLowerCase();return s?s===r:a.endsWith(i)||l.includes(i)})||null}function Ap(e,t){let n=e==="ios"?".ipa":".aab";if(t.buildId)return`No downloadable ${n} artifact found for build ${t.buildId}. Check that the build finished artifact upload before submitting.`;if(t.latest){let r=t.profile||t.buildProfile;return`No latest successful ${e}${r?` ${r}`:""} build has a downloadable ${n} artifact.`}return`No downloadable ${n} artifact was selected for submission.`}async function fa(e,t,n){try{let r=await R.get(`/builds/${e}/${t}/artifacts`);if(r.data.status==="success"&&r.data.artifacts?.length>0){let i=Sr(r.data.artifacts);return console.log(J.cyan(` [RECOVERY] Fetched ${i.length} artifact(s) with download URLs.`)),i}}catch(r){console.log(J.dim(` [RECOVERY] Project artifact lookup skipped: ${r.message}`))}try{let r=await R.get(`/public/builds/${t}`);if(r.data.status==="success"&&r.data.artifacts?.length>0){let i=Sr(r.data.artifacts);return console.log(J.cyan(` [RECOVERY] Fetched ${i.length} public artifact(s) with download URLs.`)),i}}catch(r){console.log(J.dim(` [RECOVERY] Public artifact lookup skipped: ${r.message}`))}return Sr(n)}async function Bi(e,t,n=3){let r=Rt();r.start("Downloading artifact...");let i=ee.mkdtempSync(_e.join(Ut.tmpdir(),`${f.nameLower}-artifact-`)),o=`app.${t==="ios"?"ipa":"aab"}`,s=_e.join(i,o);for(let a=1;a<=n;a++)try{a>1&&(r.message(`Downloading artifact (Retry ${a}/${n})...`),await new Promise(d=>setTimeout(d,2e3*a)));let l=ee.createWriteStream(s),c=await Aa({url:e,method:"GET",responseType:"stream",timeout:6e4});return await new Promise((d,u)=>{c.data.pipe(l);let p=!1;c.data.on("error",m=>{p||(p=!0,l.close(),u(m))}),l.on("finish",()=>{p||d()}),l.on("error",m=>{p||(p=!0,u(m))})}),r.stop("Download complete"),s}catch(l){if(a===n)throw r.stop("Download failed"),l}throw new Error("Download failed after retries")}async function bp(e,t,n,r,i){let o=Rt();if(i&&fe(`Bundle ID: ${J.green(i)}`),!n||!r)throw oe(`Missing credentials: issuerId=${n}, keyId=${r}. Check your Dashboard.`),new Error("Missing ASC API Key Metadata (IssuerID or KeyID)");let s=Ea(t,n,r),a=Rp();return o.start("Uploading to TestFlight (pilot)..."),new Promise((l,c)=>{let d=Dp(),u=Gu(a.command,["pilot","upload","--ipa",e,"--api_key_path",s,"--skip_submission","true","--skip_waiting_for_build_processing","true"],{stdio:["ignore","pipe","pipe"],env:a.env});u.stdout?.on("data",p=>d.append(p,process.stdout)),u.stderr?.on("data",p=>d.append(p,process.stderr)),u.on("close",p=>{if(d.flush(),p!==0){o.stop("Pilot failed");try{ee.unlinkSync(s)}catch{}c(Pp(p,d.lines()))}else{o.stop("IPA uploaded to TestFlight");try{ee.unlinkSync(s)}catch{}l({})}}),u.on("error",p=>{d.flush();try{ee.unlinkSync(s)}catch{}o.stop("Pilot execution error");let m=Fp(p);m.logs=d.lines(),c(m)})})}async function Sp(e,t,n,r,i,o){let s=Rt();if(i&&fe(`Bundle ID: ${J.green(i)}`),!n||!r)throw oe(`Missing credentials: issuerId=${n}, keyId=${r}. Check your Dashboard.`),new Error("Missing ASC API Key Metadata (IssuerID or KeyID)");let a=Ea(t,n,r),l=`${o.sshUser}@${o.sshHost}`,c=Ep(o),d=Ip(o),u="",p="";try{if(s.start(`Preparing remote iOS submit runner (${l})...`),u=_p("ssh",[...c,"mktemp -d /tmp/mach-submit.XXXXXX"]).trim(),!u)throw new Error("Remote runner did not return a temp directory.");s.stop(`Remote runner ready: ${l}`),s.start("Uploading IPA and App Store Connect key to remote runner..."),ji("scp",[...d,e,`${l}:${u}/app.ipa`],"IPA upload to remote runner"),ji("scp",[...d,a,`${l}:${u}/api_key.json`],"ASC key upload to remote runner"),p=_e.join(Ut.tmpdir(),`${f.nameLower}-ios-submit-${Date.now()}.sh`),ee.writeFileSync(p,vp(u)),ji("scp",[...d,p,`${l}:${u}/submit.sh`],"submit script upload to remote runner"),s.stop("Remote submit inputs uploaded"),s.start("Uploading to TestFlight on remote runner...");let m=`chmod +x ${kn(`${u}/submit.sh`)} && bash ${kn(`${u}/submit.sh`)}`,y=Mt("ssh",[...c,m],{stdio:"inherit"});if(y.error)throw Yi("ssh",y.error);if(y.status!==0)throw new Error(`Remote iOS submit failed with exit code ${y.status}.`);return s.stop("IPA uploaded to TestFlight"),{apiKeyJsonPath:null}}catch(m){throw s.stop("Remote iOS submit failed"),m}finally{try{ee.unlinkSync(a)}catch{}if(p)try{ee.unlinkSync(p)}catch{}if(u)try{Mt("ssh",[...c,`rm -rf ${kn(u)}`],{stdio:"ignore"})}catch{}}}function Ea(e,t,n){let r=ee.readFileSync(e,"utf8"),i;try{i=Wi.createPrivateKey(r).export({type:"pkcs8",format:"pem"})}catch{fe("Key normalization failed, falling back to manual re-wrapping..."),i=`-----BEGIN PRIVATE KEY-----
|
|
2113
|
+
`)}}function xu(e){if(!e.endsWith(".apk"))return C.error(k.red("Local Android Maestro runs need an APK artifact.")),!1;C.info(k.dim("Installing APK on local Android device/emulator..."));let t=it("adb",["install","-r",e],{stdio:"inherit",env:process.env});return t.error?(C.error(k.red(`adb failed to start: ${t.error.message}`)),!1):t.status!==0?(C.error(k.red(`adb install failed with exit code ${t.status??1}`)),!1):!0}function Lu(e,t){if(e.endsWith(".ipa"))return C.error(k.red("Local iOS Maestro runs need an iOS Simulator .app.zip artifact, not an App Store .ipa.")),!1;let n=e;if(e.endsWith(".zip")){let i=x.join(t,"ios-app");P.mkdirSync(i,{recursive:!0}),new br(e).extractAllTo(i,!0);let o=xi(i);if(!o)return C.error(k.red("Could not find a .app bundle inside the downloaded zip.")),!1;n=o}if(!n.endsWith(".app"))return C.error(k.red("Local iOS Maestro runs need an iOS Simulator .app bundle or .app.zip artifact.")),!1;C.info(k.dim("Installing app on booted iOS Simulator..."));let r=it("xcrun",["simctl","install","booted",n],{stdio:"inherit",env:process.env});return r.error?(C.error(k.red(`xcrun failed to start: ${r.error.message}`)),!1):r.status!==0?(C.error(k.red(`iOS Simulator install failed with exit code ${r.status??1}`)),!1):!0}function xi(e){let t=P.readdirSync(e,{withFileTypes:!0});for(let n of t){let r=x.join(e,n.name);if(n.isDirectory()&&n.name.endsWith(".app"))return r;if(n.isDirectory()){let i=xi(r);if(i)return i}}return null}function Mu(e,t){let n=String(t||"").toLowerCase();return n==="android"?e.find(r=>Qt(r,".apk")):n==="ios"?e.find(r=>Qt(r,".app.zip"))||e.find(r=>Qt(r,".zip")):e.find(r=>Qt(r,".apk"))||e.find(r=>Qt(r,".app.zip"))||e.find(r=>Qt(r,".zip"))}function Qt(e,t){return String(e?.name||e?.downloadUrl||e?.url||"").toLowerCase().endsWith(t)}function Li(e){let t=String(e||"").toLowerCase();if(t.includes(".apk"))return"android";if(t.includes(".app.zip")||t.endsWith(".app")||t.includes(".ipa"))return"ios"}function la(e){if(e)try{return x.basename(new URL(e).pathname)||void 0}catch{return x.basename(e)||void 0}}function Fu(e){return e?e.match(/[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/i)?.[0]:void 0}function da(e,t){if(!e.jsonOutput)return;let n=x.resolve(e.jsonOutput),r={...t,updatedAt:new Date().toISOString()};try{let i=x.dirname(n);i&&i!=="."&&P.mkdirSync(i,{recursive:!0}),P.writeFileSync(n,JSON.stringify(r,null,2))}catch(i){C.warn(k.yellow(`Could not write Maestro metadata JSON: ${i.message}`))}}function Uu(e,t){if(!e.jsonOutput)return;let n=x.resolve(e.jsonOutput),r={mode:"local",...t,updatedAt:new Date().toISOString()};try{let i=x.dirname(n);i&&i!=="."&&P.mkdirSync(i,{recursive:!0}),P.writeFileSync(n,JSON.stringify(r,null,2))}catch(i){C.warn(k.yellow(`Could not write Maestro metadata JSON: ${i.message}`))}}import{spinner as wt,text as Cn,select as Gi,isCancel as Rt,cancel as Vi,log as ya}from"@clack/prompts";import q from"chalk";import Q from"fs";import _e from"path";import{spawn as Vu,spawnSync as Mt}from"child_process";import ba from"axios";import Ut from"os";import Wi from"crypto";import Bu from"crypto";import tn from"axios";import ca from"fs";var Tn=6e4,Hu=12e4,Mi=4,Pn=e=>encodeURIComponent(e),ju=e=>new Promise(t=>setTimeout(t,e));async function nn(e,t){let n;for(let r=1;r<=Mi;r++)try{return await t()}catch(i){if(n=i,r>=Mi||!Gu(i))throw i;let o=Number(i.response?.headers?.["retry-after"]),s=Number.isFinite(o)&&o>0?o*1e3:Math.min(2e3*r*r,15e3);console.log(`[Google Play] ${e} failed (attempt ${r}/${Mi}); retrying in ${Math.round(s/1e3)}s...`),await ju(s)}throw n}function Gu(e){let t=e.response?.status;return t?t===408||t===409||t===425||t===429||t>=500:!0}async function pa(e){let{packageName:t,serviceAccount:n,aabPath:r,track:i,releaseStatus:o,userFraction:s,changesNotSentForReview:a}=e,l;try{let d={Authorization:`Bearer ${await ua(n)}`,Connection:"close"},u=Pn(t);if(l=(await nn("create edit",()=>tn.post(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${u}/edits`,{},{headers:d,timeout:Tn}))).data.id,!l)throw new Error("Google Play edit insert succeeded but did not return an edit id.");let m=Pn(l),A=ca.statSync(r),g=await nn("upload AAB",()=>tn.post(`https://androidpublisher.googleapis.com/upload/androidpublisher/v3/applications/${u}/edits/${m}/bundles`,ca.createReadStream(r),{headers:{...d,"Content-Type":"application/octet-stream","Content-Length":A.size},maxBodyLength:1/0,maxContentLength:1/0,params:{uploadType:"media"},timeout:Hu})),h=Number(g.data.versionCode);if(!h)throw new Error("Google Play upload succeeded but did not return a versionCode.");let y={versionCodes:[String(h)],status:o};return(o==="inProgress"||o==="halted")&&typeof s=="number"&&(y.userFraction=s),await nn("update track",()=>tn.put(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${u}/edits/${m}/tracks/${Pn(i)}`,{releases:[y]},{headers:d,timeout:Tn})),await nn("commit edit",()=>tn.post(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${u}/edits/${m}:commit`,{},{headers:d,params:a?{changesNotSentForReview:!0}:void 0,timeout:Tn})),{editId:l,versionCode:h,track:i,releaseStatus:o,userFraction:s}}catch(c){if(l)try{let u=await ua(n);await nn("delete edit",()=>tn.delete(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${Pn(t)}/edits/${Pn(l)}`,{headers:{Authorization:`Bearer ${u}`,Connection:"close"},timeout:Tn}))}catch{}let d=c.response?.data?.error?.message||c.message;throw new Error(`Google Play API Error: ${d}`)}}async function ua(e){let t=Math.floor(Date.now()/1e3),n=t+3600,r={alg:"RS256",typ:"JWT"},i={iss:e.client_email,sub:e.client_email,aud:"https://oauth2.googleapis.com/token",iat:t,exp:n,scope:"https://www.googleapis.com/auth/androidpublisher"},o=Buffer.from(JSON.stringify(r)).toString("base64url"),s=Buffer.from(JSON.stringify(i)).toString("base64url"),a=`${o}.${s}`,l=Bu.createSign("RSA-SHA256");l.update(a);let c=l.sign(e.private_key,"base64url"),d=`${a}.${c}`;return(await nn("OAuth token exchange",()=>tn.post("https://oauth2.googleapis.com/token",{grant_type:"urn:ietf:params:oauth:grant-type:jwt-bearer",assertion:d},{headers:{Connection:"close"},timeout:Tn}))).data.access_token}var zu=5e3,Ku=12,Sa=100,Fi=24,fa=8e3,Wu={completed:"completed",draft:"draft",halted:"halted",inprogress:"inProgress","in-progress":"inProgress"},Yu=e=>e?.type==="google_service_account",Er=e=>e?.bundleId||e?.packageName||e?.meta?.packageName||e?.meta?.bundleId,Ea=e=>e.submitArgs||process.argv.slice(3).join(" ");async function Ir(e){let t=wt(),n=Oe(),r=qu(e);if(!r){process.exitCode=1;return}let i=e.projectId||r.projectId,o=e.profile||e.buildProfile||K(r,"store","production");if(!i){oe(`${f.configFileName} is missing projectId. Pass --project-id in runner mode.`),process.exitCode=1;return}r.projectId=i,fe(q.dim(`Submit for project: ${r.name||i} | Profile: ${o}`));let s=e.platform;if(!s){let S=await Gi({message:"Select platform to submit:",options:[{value:"ios",label:"iOS (App Store Connect / TestFlight)"},{value:"android",label:"Android (Google Play Console)"}]});if(Rt(S)){Vi("Operation cancelled");return}s=S}if(s=String(s).toLowerCase(),s!=="ios"&&s!=="android"){oe(`Platform ${s} is not supported. Use 'ios' or 'android'.`),process.exitCode=1;return}let a=s==="ios"&&!e.local&&e.sshHost?up(r,o,e):null;if(s==="ios"&&!e.local&&!a){await Ju(r,o,e);return}let l=e.submitId,c=!!(e.local&&l),d=l||null,u=async(S,$={})=>{d&&await ep(i,d,{status:S,...$})},p=s==="android"?e.packageName||e.androidPackage||lp(r,o):void 0,m=s==="ios"?e.bundleId||e.iosBundleIdentifier||cp(r,o):void 0,A,g,h,y=!1;try{s==="android"&&(A=e.track||r.submit?.[o]?.android?.track||r.submit?.production?.android?.track||"internal",g=pp(r,o,e.releaseStatus),h=mp(r,o,e.rollout),y=gp(r,o,e.changesNotSentForReview),hp(g,h))}catch(S){oe(S.message),process.exitCode=1;return}if(s==="android"&&!c&&(d=await Xu(r,i,s,o,e,{packageName:p,track:A,releaseStatus:g,rollout:h,changesNotSentForReview:y}),!d)){oe("Could not create submission tracking record. Submission was not started."),process.exitCode=1;return}await u("running",{platform:s,profile:o,packageName:p,track:A,releaseStatus:g,rollout:h,startTime:Date.now(),...c?np():{}});let b=null,v=null;try{v=await Ap(i,s,e,n?.token),b=v?.filePath||null}catch(S){await u("failed",{error:`Failed to resolve submission artifact: ${S.message}`,endTime:Date.now()}),oe(`Failed to resolve submission artifact: ${S.message}`),process.exitCode=1;return}if(!b){let S=bp(s,e);await u("failed",{error:S,endTime:Date.now()}),oe(S),process.exitCode=1;return}await u("running",{buildId:v?.buildId,artifactName:v?.artifactName,artifactSource:v?.source}),fe(`Using artifact: ${q.green(_e.basename(b))} `),t.start("Fetching submission credentials from Dashboard...");let E;try{let $=(await w.get(`/credentials/${i}`)).data.credentials||[];if(s==="android"&&!p){t.stop("Package name missing"),oe(`Could not resolve Android package name. Set android.package or build.${o}.android.package in ${f.configFileName}.`),await u("failed",{error:"Could not resolve Android package name.",endTime:Date.now()}),process.exitCode=1;return}let R=$.filter(Yu),O=s==="ios"?$.filter(N=>N.type==="asc_api_key"):dp(R,p);if(O.length===0){if(t.stop("Credentials missing"),oe(s==="android"?`No Google Play service credential found for package ${p}.`:`No Service Credentials found for ${s}.`),s==="android"){let N=R.map(Er).filter(Boolean).join(", ");N&&fe(`Found Google Play service credential(s) for: ${N}`),fe(`Use '${f.nameLower} credentials:service --platform android --package-name ${p}' or upload it under that package in the Dashboard.`)}else fe(`Use '${f.nameLower} credentials:service --platform ${s}' or use the Dashboard to upload them.`);await u("failed",{error:`No submission credentials found for ${s}.`,endTime:Date.now()}),process.exitCode=1;return}if(E=ip(O,e.credentialId),!E&&s==="ios"&&m&&(E=op(O,m)),E||O.length===1)E=E||O[0],t.stop(`Using: ${E.name}`),s==="android"&&Er(E)==="*"&&fe(q.yellow(`Using legacy wildcard Google Play credential for ${p}. Upload a package-scoped credential when possible.`));else{if(t.stop("Multiple credentials found"),sp()){let D=O.map(M=>`${M.name||"credential"} (${M.credentialId||M.id||"no-id"})`).join(", ");oe(`Multiple ${s==="ios"?"App Store Connect":"Google Play"} credentials found. Use --credential-id in CI. Available: ${D}`),await u("failed",{error:"Multiple submission credentials found; --credential-id is required in CI.",endTime:Date.now()}),process.exitCode=1;return}let N=await Gi({message:`Choose a ${s==="ios"?"App Store Connect":"Google Play"} credential:`,options:O.map(D=>({value:D.credentialId,label:D.name,hint:`${D.keyId?`ID: ${D.keyId}`:""} ${D.issuerId?`(Issuer: ${D.issuerId.substring(0,8)}...)`:""}`}))});if(Rt(N)){Vi("Submission cancelled"),await u("failed",{error:"Submission cancelled while selecting credential.",endTime:Date.now()}),process.exitCode=1;return}E=O.find(D=>D.credentialId===N),fe(`Using selected: ${q.green(E.name)}`)}}catch(S){t.stop("Failed to fetch credentials"),oe(`API Error: ${S.message} `),await u("failed",{error:`Failed to fetch credentials: ${S.message}`,endTime:Date.now()}),process.exitCode=1;return}let L=Q.mkdtempSync(_e.join(Ut.tmpdir(),`${f.nameLower}-submit-`)),F=E.keyId||E.meta?.keyId,B=E.issuerId||E.meta?.issuerId,H=E.type==="asc_api_key"?`AuthKey_${F}.p8`:"service-account.json",Z=_e.join(L,H);t.start("Downloading secure key...");try{let S=await w.get(`/credentials/${E.credentialId}/download`,{params:{projectId:i,format:"raw"}});if(S.data.status!=="success"||!S.data.downloadUrl)throw new Error("Failed to get secure download URL");let $=await ba.get(S.data.downloadUrl,{responseType:"arraybuffer"});Q.writeFileSync(Z,Buffer.from($.data)),t.stop("Key downloaded to secure temp storage")}catch(S){t.stop("Download failed"),oe(`Failed to download key: ${S.message}`);try{Q.rmSync(L,{recursive:!0,force:!0})}catch{}await u("failed",{error:`Failed to download credential key: ${S.message}`,endTime:Date.now()}),process.exitCode=1;return}fe(q.blue(`Initiating ${s==="ios"?"TestFlight":"Google Play"} submission...`));let ie=!1,Pe;try{if(s==="ios"){if(!F){let $=await Cn({message:"Enter App Store Connect Key ID (e.g. 2X948D...):",validate:R=>R.length>0?void 0:"Key ID is required"});if(Rt($)){await u("failed",{error:"Submission cancelled while entering ASC Key ID.",endTime:Date.now()}),process.exitCode=1;return}F=$}if(!B||B==="undefined"){let $=await Cn({message:"Enter App Store Connect Issuer ID (Found on ASC Keys page):",validate:R=>R.length>0?void 0:"Issuer ID is required"});if(Rt($)){await u("failed",{error:"Submission cancelled while entering ASC Issuer ID.",endTime:Date.now()}),process.exitCode=1;return}B=$}fe(`Using ASC Key ID: ${F}`),fe(`Using ASC Issuer ID: ${B}`);let S=a?await Ep(b,Z,B,F,m,a):await Sp(b,Z,B,F,m);Ki(`${s==="ios"?"App Store":"Google Play"} submission successful!`),ie=!0}else Pe=await $p(b,Z,A||"internal",p,g||"completed",h,y,o),Ki("Google Play submission successful!"),ie=!0}catch(S){oe(`Submission failed: ${S.message}`),await u("failed",{error:S.message,endTime:Date.now()}),$t(e,{status:"failed",projectId:i,submitId:d,platform:s,profile:o,buildId:v?.buildId||e.buildId,artifactName:v?.artifactName,error:S.message,dashboardUrl:d?Ft(d,i):void 0}),process.exitCode=1}finally{ie&&(await u("success",{endTime:Date.now(),versionCode:Pe?.versionCode,track:A,releaseStatus:g}),$t(e,{status:"success",projectId:i,submitId:d,platform:s,profile:o,buildId:v?.buildId||e.buildId,artifactName:v?.artifactName,versionCode:Pe?.versionCode,track:A,releaseStatus:g,dashboardUrl:d?Ft(d,i):void 0})),Hp(L),b&&b.includes(`${f.nameLower}-artifact-`)}}function qu(e){let t=`./${f.configFileName}`;if(Q.existsSync(t))try{return JSON.parse(Q.readFileSync(t,"utf-8"))}catch(n){return oe(`Failed to read ${f.configFileName}: ${n.message}`),null}return e.projectId?{projectId:e.projectId}:(oe(`No ${f.configFileName} found. Run \`${f.nameLower} init\` or \`${f.nameLower} link\` first.`),null)}async function Ju(e,t,n){let r=n.projectId||e.projectId;if(!r){oe(`${f.configFileName} is missing projectId.`),process.exitCode=1;return}let i=n.submitId||Wi.randomUUID(),o=!!n.latest||!n.buildId,s=Zu({...n,latest:o,profile:t,projectId:r,submitId:i}),a={projectId:r,submitId:i,platform:"ios",profile:t,latest:o,buildId:n.buildId,credentialId:n.credentialId,status:"pending",source:"cli",submitArgs:Ea(n),runnerArgs:s,runnerCommand:[f.nameLower,"submit",...s].map(ap).join(" "),appName:e.name,startTime:Date.now()},l=wt();l.start("Queuing iOS submit on macOS runner...");try{let c=await w.post("/submissions",a),d=c.data?.submission||c.data?.submit||{},u=c.data?.dashboardUrl||Ft(i,r);l.stop("iOS submit queued"),fe(`Submission ID: ${q.cyan(i)}`),fe(`Dashboard: ${q.blue.underline(u)}`),$t(n,{status:"pending",projectId:r,submitId:i,platform:"ios",profile:t,latest:o,buildId:n.buildId,dashboardUrl:u}),await Qu(r,i,{...n,profile:t})}catch(c){l.stop("Could not queue iOS submit"),oe(rp(c)),process.exitCode=1}}async function Xu(e,t,n,r,i,o={}){let s=i.submitId||Wi.randomUUID(),a=!!i.latest||!i.buildId,l={projectId:t,submitId:s,platform:n,profile:r,latest:a,buildId:i.buildId,credentialId:i.credentialId,status:"running",source:"cli-direct",submitArgs:Ea(i),appName:e.name,startTime:Date.now(),...o};try{let c=await w.post("/submissions",l),d=c.data?.submission||c.data?.submit||{},u=c.data?.dashboardUrl||d.dashboardUrl||Ft(s,t);return fe(`Submission ID: ${q.cyan(s)}`),fe(`Dashboard: ${q.blue.underline(u)}`),$t(i,{status:"running",projectId:t,submitId:s,platform:n,profile:r,latest:a,buildId:i.buildId,dashboardUrl:u}),s}catch(c){let d=c.response?.data?.message||c.response?.data?.error||c.message;return fe(q.yellow(`Could not create submission tracking record: ${d}`)),null}}function Zu(e){let t=["--local","--submit-id",e.submitId,"--project-id",e.projectId,"--platform","ios","--profile",e.profile||"production"];return e.buildId?t.push("--build-id",e.buildId):t.push("--latest"),e.credentialId&&t.push("--credential-id",e.credentialId),e.bundleId&&t.push("--bundle-id",e.bundleId),e.packageName&&t.push("--package-name",e.packageName),e.quiet&&t.push("--quiet"),e.jsonOutput&&t.push("--json-output",e.jsonOutput),t.filter(n=>n!=null&&n!=="")}async function Qu(e,t,n){let r=wt(),i=0,o=0;for(n.quiet||r.start("Waiting for iOS submit runner...");;)try{let s=await w.get(`/submissions/${e}/${t}`),a=s.data?.submission||s.data?.submit||s.data,l=String(a?.status||"pending").toLowerCase();i=0;let c=Array.isArray(a?.logs)?a.logs:[];for(let d=o;d<c.length;d++){let u=c[d];u&&console.log(q.dim(String(u)))}if(o=c.length,["success","completed","succeeded"].includes(l)){n.quiet||r.stop("iOS submit completed"),Ki("App Store submission successful!"),$t(n,{status:"success",projectId:e,submitId:t,platform:"ios",profile:a?.profile||n.profile||"production",buildId:a?.buildId||n.buildId,artifactName:a?.artifactName,dashboardUrl:a?.dashboardUrl||Ft(t,e)});return}if(["failed","error","cancelled","canceled"].includes(l)){n.quiet||r.stop("iOS submit failed");let d=a?.error||a?.message||"Unknown iOS submit failure.";oe(d),$t(n,{status:"failed",projectId:e,submitId:t,platform:"ios",profile:a?.profile||n.profile||"production",buildId:a?.buildId||n.buildId,artifactName:a?.artifactName,error:d,dashboardUrl:a?.dashboardUrl||Ft(t,e)}),process.exitCode=1;return}n.quiet||r.message(`iOS submit ${l}...`),await zi(zu)}catch(s){if(i++,i>=Ku){n.quiet||r.stop("Lost connection to iOS submit status"),oe(`Could not fetch iOS submit status after ${i} attempts: ${s.message}`),process.exitCode=1;return}await zi(Math.min(2e3*i,15e3))}}async function ep(e,t,n){let r;for(let i=1;i<=3;i++)try{await w.patch(`/submissions/${e}/${t}`,n);return}catch(o){if(r=o,i>=3||!tp(o))break;await zi(1e3*i)}ya.warn(q.dim(`Could not report submission status: ${r?.message||r}`))}function tp(e){let t=e.response?.status;return!t||t===408||t===409||t===425||t===429||t>=500}function np(){let e={gitlabJobId:process.env.CI_JOB_ID,gitlabJobUrl:process.env.CI_JOB_URL,gitlabPipelineId:process.env.CI_PIPELINE_ID,gitlabProjectId:process.env.CI_PROJECT_ID,gitlabProjectPath:process.env.CI_PROJECT_PATH};return Object.fromEntries(Object.entries(e).filter(([,t])=>!!t))}function rp(e){let t=e.response?.status,n=e.response?.data?.message||e.response?.data?.error;return t===404||t===405?["Managed iOS submit is not enabled on this Mach API yet.","Deploy the API/dashboard submission orchestration endpoint, then retry the same command.","Expected API: POST /submissions and GET/PATCH /submissions/:projectId/:submitId."].join(`
|
|
2114
|
+
`):n||e.message||String(e)}function Ft(e,t){if(!e)return nt;let n=t?`?projectId=${encodeURIComponent(t)}`:"";return`${nt}/submissions/${e}${n}`}function $t(e,t){if(!e.jsonOutput)return;let n=_e.resolve(e.jsonOutput),r={...t,url:t.url||t.dashboardUrl||Ft(t.submitId,t.projectId),updatedAt:new Date().toISOString()};try{let i=_e.dirname(n);i&&i!=="."&&Q.mkdirSync(i,{recursive:!0}),Q.writeFileSync(n,JSON.stringify(r,null,2))}catch(i){ya.warn(q.yellow(`Could not write submission metadata JSON: ${i.message}`))}}function ip(e,t){return t&&e.find(n=>n.credentialId===t||n.id===t||n.keyId===t||n.meta?.keyId===t)||null}function op(e,t){let n=e.filter(r=>[r.bundleId,r.bundleIdentifier,r.appIdentifier,r.meta?.bundleId,r.meta?.bundleIdentifier,r.meta?.appIdentifier].filter(Boolean).map(String).includes(t));return n.length===1?n[0]:null}function sp(){return process.env.CI==="true"||process.env.CI==="1"||!process.stdin.isTTY}function zi(e){return new Promise(t=>setTimeout(t,e))}function ap(e){return/^[a-zA-Z0-9_./:=@-]+$/.test(e)?e:`'${e.replace(/'/g,"'\\''")}'`}function lp(e,t){if(e.submit?.[t]?.android?.package)return e.submit[t].android.package;let n=lr(e,t);if(n)return n;let r=_e.join(process.cwd(),"app.json");if(Q.existsSync(r))try{return JSON.parse(Q.readFileSync(r,"utf-8")).expo?.android?.package}catch{}let i=_e.join(process.cwd(),"app.config.json");if(Q.existsSync(i))try{let o=JSON.parse(Q.readFileSync(i,"utf-8"));return o.expo?.android?.package||o.android?.package}catch{}}function dp(e,t){let n=e.filter(o=>Er(o)===t);if(n.length>0)return n;let r=e.filter(o=>{let s=Er(o);return!s||s==="*"});return e.length>0&&e.length===r.length?r:[]}function cp(e,t){return e.submit?.[t]?.ios?.bundleIdentifier?e.submit[t].ios.bundleIdentifier:e.submit?.[t]?.ios?.bundleId?e.submit[t].ios.bundleId:dr(e,t)}function up(e,t,n){let r=e.submit?.[t]?.ios||{},i=e.submit?.production?.ios||{},o=n.sshHost||r.sshHost||i.sshHost||process.env.MACH_IOS_SUBMIT_SSH_HOST;return o?{sshHost:o,sshUser:n.sshUser||r.sshUser||i.sshUser||process.env.MACH_IOS_SUBMIT_SSH_USER||process.env.USER||"ubuntu",sshKey:n.sshKey||r.sshKey||i.sshKey||process.env.MACH_IOS_SUBMIT_SSH_KEY}:null}function pp(e,t,n){let r=n||e.submit?.[t]?.android?.releaseStatus||e.submit?.production?.android?.releaseStatus||"completed";return fp(r)}function fp(e){let t=Wu[String(e).trim().toLowerCase()];if(!t)throw new Error(`Invalid Android release status "${e}". Use completed, draft, halted, or inProgress.`);return t}function mp(e,t,n){let r=n??e.submit?.[t]?.android?.rollout??e.submit?.[t]?.android?.userFraction??e.submit?.[t]?.android?.rolloutFraction??e.submit?.production?.android?.rollout??e.submit?.production?.android?.userFraction??e.submit?.production?.android?.rolloutFraction;if(r==null||r==="")return;let i=Number(r);if(!Number.isFinite(i)||i<=0||i>=1)throw new Error(`Invalid Android rollout fraction "${r}". Use a number greater than 0 and less than 1, for example 0.1.`);return i}function gp(e,t,n){let r=n??e.submit?.[t]?.android?.changesNotSentForReview??e.submit?.[t]?.android?.changes_not_sent_for_review??e.submit?.production?.android?.changesNotSentForReview??e.submit?.production?.android?.changes_not_sent_for_review??!1;return r===!0||r==="true"||r==="1"}function hp(e,t){if(e==="inProgress"&&t===void 0)throw new Error("Google Play staged rollout requires --rollout <fraction> when --release-status inProgress is used.");if(e!=="inProgress"&&e!=="halted"&&t!==void 0)throw new Error("Android rollout fraction can only be used with --release-status inProgress or halted.")}async function Ap(e,t,n,r){let i=n.buildId?"id":n.latest?"latest":null;if(!i){let s=await Gi({message:"Select artifact source:",options:[{value:"latest",label:`Latest Production Build (${f.name})`},{value:"id",label:`Input Build ID (${f.name})`},{value:"url",label:"Remote URL"},{value:"local",label:"Local File Path"}]});if(Rt(s))return Vi("Operation cancelled"),null;i=s}if(i==="local"){let s=await Cn({message:"Enter path to artifact (.ipa/.aab):",validate:a=>{if(!Q.existsSync(a))return"File not found";if(t==="ios"&&!a.endsWith(".ipa"))return"Must be an .ipa file";if(t==="android"&&!a.endsWith(".aab"))return"Must be an .aab file"}});return Rt(s)?null:{filePath:s,source:"local"}}let o=wt();if(i==="latest"){let s=n.profile||n.buildProfile;o.start(`Fetching latest${s?` ${s}`:""} build...`);try{let a=await w.get(`/builds/${e}`,{params:{limit:50}});if(a.data.status!=="success")throw new Error(a.data.message);let l=a.data.builds||[],c=s?.toLowerCase(),d=E=>E.platform?.toLowerCase()===t.toLowerCase()&&E.status?.toLowerCase()==="success",u=E=>c?[E.buildProfile,E.profile,E.profileName,E.buildType].filter(Boolean).some(L=>String(L).toLowerCase()===c):!0,p=l.filter(E=>d(E)&&u(E)),m=p.find(E=>E.buildType?.toLowerCase()==="store"||E.distribution?.toLowerCase()==="store")||p[0],A=l.some(E=>E.platform?.toLowerCase()===t.toLowerCase()&&E.status?.toLowerCase()==="success");if(!m)return o.stop("No suitable build found"),oe(s&&A?`No successful ${t} builds found for profile "${s}".`:"No successful builds found for this platform."),null;o.stop(`Found build: ${m.buildId}`);let g=m.artifacts||[];if(g.length===0||g.every(E=>!(E.url||E.downloadUrl)))try{let E=await w.get(`/builds/${e}/${m.buildId}/artifacts`);E.data.status==="success"&&E.data.artifacts?.length>0?(g=E.data.artifacts.map(L=>({...L,url:L.url||L.downloadUrl})),console.log(q.cyan(` [RECOVERY] Fetched ${g.length} artifact(s) with download URLs.`))):console.log(q.yellow(" [RECOVERY] /artifacts endpoint returned 0 artifacts."))}catch(E){console.log(q.red(` [RECOVERY] /artifacts fetch failed: ${E.message}`))}let y=t==="ios",b=Ui(g,t);if(!b||!(b.url||b.downloadUrl))return oe("Build found but artifact URL is missing."),null;let v=b.url||b.downloadUrl;return{filePath:await Bi(v,y?"ios":"android"),buildId:m.buildId,artifactName:b.name,source:"latest"}}catch(a){return o.stop("Fetch failed"),oe(`API Error: ${a.message}`),null}}if(i==="id"){let s=n.buildId||await Cn({message:"Enter Build ID:",validate:l=>l.length<5?"Invalid ID":void 0});if(Rt(s))return null;let a=String(s);o.start("Fetching build...");try{let l=null;try{let m=await w.get(`/builds/${e}/${a}`);m.data.status==="success"&&(l=m.data.build)}catch(m){m.response?.status!==404&&console.log(q.dim(` [RECOVERY] Project build lookup skipped: ${m.message}`))}if(!l){let m=await w.get(`/build/${a}`);if(m.data.status!=="success")throw new Error(m.data.message);l=m.data.build}if(!l)throw new Error(`Build ${a} was not found.`);let c=t==="ios",d=Sr(l.artifacts);yp(d)||(d=await ma(e,a,d));let u=Ui(d,t);if(u||(d=await ma(e,a,d),u=Ui(d,t)),!u)throw new Error(`No ${c?".ipa":".aab"} artifact found for build ${a}. The build exists, but its artifact list does not contain a downloadable submission artifact.`);let p=u.url||u.downloadUrl;if(!p)throw new Error(`Artifact ${u.name||"(unnamed)"} for build ${a} has no download URL. Retry after the build artifact upload is visible in the Installation Hub.`);return o.stop(`Found build: ${l.buildId||a}`),{filePath:await Bi(p,c?"ios":"android"),buildId:l.buildId||a,artifactName:u.name,source:"id"}}catch(l){throw o.stop("Fetch failed"),l}}if(i==="url"){let s=await Cn({message:"Enter Artifact URL:",validate:a=>a.startsWith("http")?void 0:"Must be a valid URL"});return Rt(s)?null:{filePath:await Bi(s,t),source:"url"}}return null}function Sr(e){return(e||[]).map(t=>({...t,url:t.url||t.downloadUrl}))}function yp(e){return e.some(t=>!!(t.url||t.downloadUrl))}function Ui(e,t){let n=t==="ios",r=n?"ipa":"aab",i=n?".ipa":".aab";return e.find(o=>{let s=String(o.type||"").toLowerCase(),a=String(o.name||"").toLowerCase(),l=String(o.url||o.downloadUrl||"").toLowerCase();return s?s===r:a.endsWith(i)||l.includes(i)})||null}function bp(e,t){let n=e==="ios"?".ipa":".aab";if(t.buildId)return`No downloadable ${n} artifact found for build ${t.buildId}. Check that the build finished artifact upload before submitting.`;if(t.latest){let r=t.profile||t.buildProfile;return`No latest successful ${e}${r?` ${r}`:""} build has a downloadable ${n} artifact.`}return`No downloadable ${n} artifact was selected for submission.`}async function ma(e,t,n){try{let r=await w.get(`/builds/${e}/${t}/artifacts`);if(r.data.status==="success"&&r.data.artifacts?.length>0){let i=Sr(r.data.artifacts);return console.log(q.cyan(` [RECOVERY] Fetched ${i.length} artifact(s) with download URLs.`)),i}}catch(r){console.log(q.dim(` [RECOVERY] Project artifact lookup skipped: ${r.message}`))}try{let r=await w.get(`/public/builds/${t}`);if(r.data.status==="success"&&r.data.artifacts?.length>0){let i=Sr(r.data.artifacts);return console.log(q.cyan(` [RECOVERY] Fetched ${i.length} public artifact(s) with download URLs.`)),i}}catch(r){console.log(q.dim(` [RECOVERY] Public artifact lookup skipped: ${r.message}`))}return Sr(n)}async function Bi(e,t,n=3){let r=wt();r.start("Downloading artifact...");let i=Q.mkdtempSync(_e.join(Ut.tmpdir(),`${f.nameLower}-artifact-`)),o=`app.${t==="ios"?"ipa":"aab"}`,s=_e.join(i,o);for(let a=1;a<=n;a++)try{a>1&&(r.message(`Downloading artifact (Retry ${a}/${n})...`),await new Promise(d=>setTimeout(d,2e3*a)));let l=Q.createWriteStream(s),c=await ba({url:e,method:"GET",responseType:"stream",timeout:6e4});return await new Promise((d,u)=>{c.data.pipe(l);let p=!1;c.data.on("error",m=>{p||(p=!0,l.close(),u(m))}),l.on("finish",()=>{p||d()}),l.on("error",m=>{p||(p=!0,u(m))})}),r.stop("Download complete"),s}catch(l){if(a===n)throw r.stop("Download failed"),l}throw new Error("Download failed after retries")}async function Sp(e,t,n,r,i){let o=wt();if(i&&fe(`Bundle ID: ${q.green(i)}`),!n||!r)throw oe(`Missing credentials: issuerId=${n}, keyId=${r}. Check your Dashboard.`),new Error("Missing ASC API Key Metadata (IssuerID or KeyID)");let s=Ia(t,n,r),a=Op();return o.start("Uploading to TestFlight (pilot)..."),new Promise((l,c)=>{let d=Pp(),u=Vu(a.command,["pilot","upload","--ipa",e,"--api_key_path",s,"--skip_submission","true","--skip_waiting_for_build_processing","true"],{stdio:["ignore","pipe","pipe"],env:a.env});u.stdout?.on("data",p=>d.append(p,process.stdout)),u.stderr?.on("data",p=>d.append(p,process.stderr)),u.on("close",p=>{if(d.flush(),p!==0){o.stop("Pilot failed");try{Q.unlinkSync(s)}catch{}c(Tp(p,d.lines()))}else{o.stop("IPA uploaded to TestFlight");try{Q.unlinkSync(s)}catch{}l({})}}),u.on("error",p=>{d.flush();try{Q.unlinkSync(s)}catch{}o.stop("Pilot execution error");let m=Up(p);m.logs=d.lines(),c(m)})})}async function Ep(e,t,n,r,i,o){let s=wt();if(i&&fe(`Bundle ID: ${q.green(i)}`),!n||!r)throw oe(`Missing credentials: issuerId=${n}, keyId=${r}. Check your Dashboard.`),new Error("Missing ASC API Key Metadata (IssuerID or KeyID)");let a=Ia(t,n,r),l=`${o.sshUser}@${o.sshHost}`,c=Ip(o),d=_p(o),u="",p="";try{if(s.start(`Preparing remote iOS submit runner (${l})...`),u=vp("ssh",[...c,"mktemp -d /tmp/mach-submit.XXXXXX"]).trim(),!u)throw new Error("Remote runner did not return a temp directory.");s.stop(`Remote runner ready: ${l}`),s.start("Uploading IPA and App Store Connect key to remote runner..."),Hi("scp",[...d,e,`${l}:${u}/app.ipa`],"IPA upload to remote runner"),Hi("scp",[...d,a,`${l}:${u}/api_key.json`],"ASC key upload to remote runner"),p=_e.join(Ut.tmpdir(),`${f.nameLower}-ios-submit-${Date.now()}.sh`),Q.writeFileSync(p,Rp(u)),Hi("scp",[...d,p,`${l}:${u}/submit.sh`],"submit script upload to remote runner"),s.stop("Remote submit inputs uploaded"),s.start("Uploading to TestFlight on remote runner...");let m=`chmod +x ${kn(`${u}/submit.sh`)} && bash ${kn(`${u}/submit.sh`)}`,A=Mt("ssh",[...c,m],{stdio:"inherit"});if(A.error)throw Yi("ssh",A.error);if(A.status!==0)throw new Error(`Remote iOS submit failed with exit code ${A.status}.`);return s.stop("IPA uploaded to TestFlight"),{apiKeyJsonPath:null}}catch(m){throw s.stop("Remote iOS submit failed"),m}finally{try{Q.unlinkSync(a)}catch{}if(p)try{Q.unlinkSync(p)}catch{}if(u)try{Mt("ssh",[...c,`rm -rf ${kn(u)}`],{stdio:"ignore"})}catch{}}}function Ia(e,t,n){let r=Q.readFileSync(e,"utf8"),i;try{i=Wi.createPrivateKey(r).export({type:"pkcs8",format:"pem"})}catch{fe("Key normalization failed, falling back to manual re-wrapping..."),i=`-----BEGIN PRIVATE KEY-----
|
|
2091
2115
|
${(r.replace(/-----BEGIN[^-]*-----/g,"").replace(/-----END[^-]*-----/g,"").replace(/\s+/g,"").match(/.{1,64}/g)||[]).join(`
|
|
2092
2116
|
`)}
|
|
2093
|
-
-----END PRIVATE KEY-----`}let o=_e.join(Ut.tmpdir(),`api_key_${n}_${Date.now()}.json`),s={key_id:n,issuer_id:t,key:i,in_house:!1};return
|
|
2117
|
+
-----END PRIVATE KEY-----`}let o=_e.join(Ut.tmpdir(),`api_key_${n}_${Date.now()}.json`),s={key_id:n,issuer_id:t,key:i,in_house:!1};return Q.writeFileSync(o,JSON.stringify(s,null,2)),o}function Ip(e){let t=["-o","StrictHostKeyChecking=no","-o","ServerAliveInterval=30"];return e.sshKey&&t.push("-i",e.sshKey),t.push(`${e.sshUser}@${e.sshHost}`),t}function _p(e){let t=["-o","StrictHostKeyChecking=no","-o","ServerAliveInterval=30"];return e.sshKey&&t.push("-i",e.sshKey),t}function vp(e,t){let n=Mt(e,t,{encoding:"utf-8",stdio:["ignore","pipe","inherit"]});if(n.error)throw Yi(e,n.error);if(n.status!==0)throw new Error(`${e} failed with exit code ${n.status}.`);return n.stdout||""}function Hi(e,t,n){let r=Mt(e,t,{stdio:"inherit"});if(r.error)throw Yi(e,r.error);if(r.status!==0)throw new Error(`${n} failed with exit code ${r.status}.`)}function Yi(e,t){return t?.code==="ENOENT"?new Error(`${e} was not found on this machine. Install OpenSSH client tools or run iOS submit directly on the macOS runner.`):t}function kn(e){return`'${e.replace(/'/g,"'\\''")}'`}function Rp(e){let t=kn(`${e}/app.ipa`),n=kn(`${e}/api_key.json`);return`#!/bin/bash
|
|
2094
2118
|
set -euo pipefail
|
|
2095
2119
|
|
|
2096
2120
|
export PATH="/opt/homebrew/bin:/usr/local/bin:/usr/bin:/bin:/usr/sbin:/sbin:$HOME/.local/share/fastlane/3.4.0/bin:$PATH"
|
|
@@ -2118,34 +2142,34 @@ fastlane pilot upload \\
|
|
|
2118
2142
|
--api_key_path ${n} \\
|
|
2119
2143
|
--skip_submission true \\
|
|
2120
2144
|
--skip_waiting_for_build_processing true
|
|
2121
|
-
`}async function $p(e,t,n="internal",r,i="completed",o,s=!1,a="production"){let l=
|
|
2145
|
+
`}async function $p(e,t,n="internal",r,i="completed",o,s=!1,a="production"){let l=wt();if(!r||r==="*")throw new Error("Android package name is required for Google Play submission.");let c=o!==void 0?` (${o} rollout)`:"";l.start(`Uploading to Google Play ${n} track with ${i} release status${c}...`);try{let d=JSON.parse(Q.readFileSync(t,"utf-8"));wp(d);let u=await pa({packageName:r,serviceAccount:d,aabPath:e,track:n,releaseStatus:i,userFraction:o,changesNotSentForReview:s});return l.stop(`AAB uploaded to ${n} track (versionCode ${u.versionCode})`),u}catch(d){throw l.stop("Google Play upload failed"),new Error(Bp(d,n,r,a))}}function wp(e){if(!e?.client_email||!e?.private_key)throw new Error("Invalid Google service account JSON: missing client_email or private_key.")}function ji(){let e=process.env.HOME||Ut.homedir(),t=process.env.FASTLANE_GEM_HOME||_e.join(e,".local/share/fastlane/3.4.0"),n=[process.env.FASTLANE_BIN_DIR,"/usr/local/opt/ruby/bin","/opt/homebrew/opt/ruby/bin","/usr/local/bin","/opt/homebrew/bin","/usr/local/Cellar/fastlane/2.227.0/libexec/bin",_e.join(t,"bin"),process.env.PATH].filter(Boolean).join(":");return{...process.env,PATH:n,GEM_HOME:t,GEM_PATH:[t,"/usr/local/Cellar/fastlane/2.227.0/libexec",process.env.GEM_PATH].filter(Boolean).join(":"),FASTLANE_INSTALLED_VIA_HOMEBREW:"true",FASTLANE_SKIP_UPDATE_CHECK:"1",FASTLANE_HIDE_CHANGELOG:"1",LANG:process.env.LANG||"en_US.UTF-8",LC_ALL:process.env.LC_ALL||"en_US.UTF-8",CI:process.env.CI||"1"}}function Op(){let e=ji(),t=ga(e);if(t)return t;if(process.env.MACH_SKIP_FASTLANE_INSTALL!=="1"){Dp(e);let n=ga(ji());if(n)return n}return{command:"fastlane",env:ji()}}function ga(e){let t=process.env.HOME||Ut.homedir(),n=[process.env.FASTLANE_BINARY,"/usr/local/bin/fastlane","/opt/homebrew/bin/fastlane","/usr/local/Cellar/fastlane/2.227.0/libexec/bin/fastlane",_e.join(process.env.FASTLANE_GEM_HOME||_e.join(t,".local/share/fastlane/3.4.0"),"bin/fastlane"),"fastlane"].filter(Boolean);for(let r of n){if(r.includes("/")&&!Q.existsSync(r))continue;if(!Mt(r,["--version"],{env:e,stdio:"ignore"}).error)return{command:r,env:e}}return null}function Dp(e){let t=Mt("gem",["--version"],{env:e,stdio:"ignore"});if(t.error||t.status!==0)return;let n=process.env.HOME||Ut.homedir(),r=process.env.FASTLANE_GEM_HOME||_e.join(n,".local/share/fastlane/3.4.0"),i=_e.join(r,"bin");Q.mkdirSync(i,{recursive:!0}),fe(q.dim("fastlane not found. Installing fastlane into the local Mach runner cache..."));let o=Mt("gem",["install","fastlane","-NV","--install-dir",r,"--bindir",i],{env:{...e,GEM_HOME:r,GEM_PATH:[r,e.GEM_PATH].filter(Boolean).join(":")},stdio:"inherit"});(o.error||o.status!==0)&&fe(q.yellow("Automatic fastlane install failed; Mach will try PATH resolution once more."))}function Pp(e=Sa){let t=[],n="",r=i=>{let o=va(i);if(o)for(t.push(o);t.length>e;)t.shift()};return{append(i,o){let s=Buffer.isBuffer(i)?i.toString("utf8"):String(i);o.write(s),n+=s;let a=n.split(/\r?\n/);n=a.pop()||"";for(let l of a)r(l)},flush(){n.trim()&&r(n),n=""},lines(){return t.slice()}}}function Tp(e,t){let n=new Error(Cp(e,t));return n.logs=_a(t),n.exitCode=e,n}function Cp(e,t){let n=`fastlane pilot failed with exit code ${e??"unknown"}.`,r=kp(t);return r.length===0?n:`${n}
|
|
2122
2146
|
|
|
2123
2147
|
Fastlane output:
|
|
2124
2148
|
${r.join(`
|
|
2125
|
-
`)}`}function
|
|
2126
|
-
`),n=t.match(/CFBundleShortVersionString\s*\[([^\]]+)\]/i)?.[1]||t.match(/train version ['"]([^'"]+)['"]/i)?.[1];if(/Invalid Pre-Release Train/i.test(t)||/CFBundleShortVersionString[\s\S]*must contain a higher version/i.test(t))return[`App Store Connect rejected CFBundleShortVersionString${n?` ${n}`:""}: this App Store version train is closed or not higher than the approved version.`,'ios.buildNumber="auto" only changes CFBundleVersion; bump the marketing version (Expo app.json "expo.version" / iOS MARKETING_VERSION), rebuild, then submit the new build.'].join(" ");if(!/bundle version must be higher than the previously uploaded version/i.test(t))return null;let r=t.match(/previous(?:ly)?BundleVersion\s*:\s*([0-9.]+)/i)?.[1]||t.match(/previously uploaded version:\s*[‘'"]?([0-9.]+)/i)?.[1];return`App Store Connect rejected CFBundleVersion: the bundle version must be higher than the previously uploaded version.${r?` Previous uploaded build: ${r}.`:""}`}function
|
|
2127
|
-
`))}function
|
|
2149
|
+
`)}`}function kp(e){let t=_a(e);if(t.length===0)return[];let n=ha(t.filter(xp)),r=Np(t);if(r)return[r,...Aa(n,Fi-1,fa)];let i=n.length>0?n:t.slice(-Fi);return Aa(ha(i),Fi,fa)}function Np(e){let t=e.join(`
|
|
2150
|
+
`),n=t.match(/CFBundleShortVersionString\s*\[([^\]]+)\]/i)?.[1]||t.match(/train version ['"]([^'"]+)['"]/i)?.[1];if(/Invalid Pre-Release Train/i.test(t)||/CFBundleShortVersionString[\s\S]*must contain a higher version/i.test(t))return[`App Store Connect rejected CFBundleShortVersionString${n?` ${n}`:""}: this App Store version train is closed or not higher than the approved version.`,'ios.buildNumber="auto" only changes CFBundleVersion; bump the marketing version (Expo app.json "expo.version" / iOS MARKETING_VERSION), rebuild, then submit the new build.'].join(" ");if(!/bundle version must be higher than the previously uploaded version/i.test(t))return null;let r=t.match(/previous(?:ly)?BundleVersion\s*:\s*([0-9.]+)/i)?.[1]||t.match(/previously uploaded version:\s*[‘'"]?([0-9.]+)/i)?.[1];return`App Store Connect rejected CFBundleVersion: the bundle version must be higher than the previously uploaded version.${r?` Previous uploaded build: ${r}.`:""}`}function xp(e){return/\[!\]|ERROR ITMS-\d+|ITMS-\d+|ENTITY_ERROR|previousBundleVersion|CFBundleVersion|Application Loader Error Output|Transporter Error|Transporter transfer failed|Asset validation failed|Validation failed|Error Domain=|The request could not be completed|No suitable application records|Could not|authentication|unauthori[sz]ed|invalid|failed|exception/i.test(e)}function ha(e){let t=new Set,n=[];for(let r of e){let i=r.trim();!i||t.has(i)||(t.add(i),n.push(r))}return n}function Aa(e,t,n){let r=[],i=0;for(let o=e.length-1;o>=0&&r.length<t;o--){let s=e[o],a=i+s.length+1;if(a>n&&r.length>0)break;r.unshift(s.length>n?`${s.slice(0,n-18)}... [truncated]`:s),i=a}return r}function _a(e){if(!Array.isArray(e))return[];let t=[];for(let n of e){let r=String(n).split(/\r?\n/);for(let i of r){let o=va(i);o&&t.push(o)}}return t.slice(-Sa)}function va(e){return Mp(Lp(e).trimEnd()).trim()}function Lp(e){return e.replace(/[\u001b\u009b][[\]()#;?]*(?:(?:(?:[a-zA-Z\d]*(?:;[a-zA-Z\d]*)*)?\u0007)|(?:(?:\d{1,4}(?:;\d{0,4})*)?[\dA-PR-TZcf-nq-uy=><~]))/g,"")}function Mp(e){let t=e.replace(/-----BEGIN [^-]+-----[\s\S]*?-----END [^-]+-----/g,"[REDACTED_PRIVATE_KEY]").replace(/(authorization:\s*bearer\s+)[A-Za-z0-9._-]+/ig,"$1[REDACTED]").replace(/((?:password|token|secret|private[_-]?key)\s*[:=]\s*)("[^"]+"|'[^']+'|[^\s,]+)/ig,"$1[REDACTED]");for(let[n,r]of Object.entries(process.env))!r||r.length<8||/(TOKEN|SECRET|PASSWORD|PASS|PRIVATE|CREDENTIAL)/i.test(n)&&(t=t.replace(new RegExp(Fp(r),"g"),"[REDACTED]"));return t}function Fp(e){return e.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}function Up(e){return e?.code!=="ENOENT"?e:new Error(["fastlane was not found on PATH.","Mach submit uses Fastlane for iOS TestFlight/App Store uploads.","Run iOS submit on a macOS runner with Fastlane, or expose it via FASTLANE_BINARY / FASTLANE_BIN_DIR.","Example: gem install fastlane -NV"].join(`
|
|
2151
|
+
`))}function Bp(e,t,n,r="production"){let i=e?.message||String(e);if(/changesNotSentForReview/i.test(i))return["Google Play rejected the commit because this change may need explicit review handling.",`Package: ${n||"unknown"} | Track: ${t}`,`Retry with: ${f.nameLower} submit --latest --platform android --profile ${r} --track ${t} --changes-not-sent-for-review`,"Then send the change for review from Google Play Console if required."].join(`
|
|
2128
2152
|
`);if(/caller does not have permission|permission denied|insufficient permissions|not authorized/i.test(i))return["Google Play rejected the service account permissions.",`Package: ${n||"unknown"} | Track: ${t}`,"Grant this service account access to the app in Play Console with release permissions, then retry."].join(`
|
|
2129
2153
|
`);if(/package.*not found|application.*not found|no application was found/i.test(i))return["Google Play could not find this package for the selected service account.",`Package: ${n||"unknown"} | Track: ${t}`,"Check android.package / submit.<profile>.android.package and make sure the app exists in this Play Console account."].join(`
|
|
2130
2154
|
`);if(/only releases with status draft|draft app/i.test(i))return["Google Play requires a draft release for this app state.",`Package: ${n||"unknown"} | Track: ${t}`,`Retry with: ${f.nameLower} submit --latest --platform android --profile ${r} --track ${t} --release-status draft`].join(`
|
|
2131
2155
|
`);if(i.includes("does not allow any existing users to upgrade"))return["Google Play rejected this release because the uploaded AAB is not an upgrade for existing users.",`Package: ${n||"unknown"} | Track: ${t}`,"Build a new Android artifact with a higher versionCode, then submit that build.",`Recommended: ${f.nameLower} build --platform android --profile ${r} --auto-version`,`Then: ${f.nameLower} submit --latest --platform android --profile ${r} --track ${t}`].join(`
|
|
2132
2156
|
`);if(/version code \d+ has already been used/i.test(i))return[i.match(/version code \d+ has already been used[^\n]*/i)?.[0]||"Version code has already been used.",`Package: ${n||"unknown"} | Track: ${t}`,"Build a new Android artifact with a higher versionCode, then submit that build.",`Recommended: ${f.nameLower} build --platform android --profile ${r} --auto-version`].join(`
|
|
2133
|
-
`);let o=i.match(/Google Api Error:[^\n]+/)||i.match(/Google Play API Error:[^\n]+/);return o?o[0]:i||"Google Play submission failed"}function Bp(e){try{ee.existsSync(e)&&ee.rmSync(e,{recursive:!0,force:!0})}catch{}}function oe(e){console.log(J.red(`\u274C ${e}`))}function fe(e){console.log(J.gray(`\u2022 ${e}`))}function Ki(e){console.log(J.green(`\u2713 ${e}`))}import qi from"fs";import rn from"path";var jp=new Set([".gradle",".idea",".mach-cache",".expo",".dart_tool",".pub-cache",".turbo","build","builds","coverage","dist",".mach_cli","mach_cli"]),va=new Set([".git",".gradle",".cxx",".expo","DerivedData","node_modules","Pods"]),$a=e=>e.split(rn.sep).filter(Boolean).join("/"),_r=(e,t)=>e===t||e.startsWith(`${t}/`),vr=(e,t)=>e==="."?t:`${e}/${t}`,Hp=(e,t,n)=>{let r=n==="web"?["android","ios"]:[n==="ios"?"android":"ios"];for(let s of r){let a=vr(t,s);if(_r(e,a))return a}let i=e.split("/"),o=i.find(s=>va.has(s));return o||(i[0]===".yarn"&&i[1]==="cache"?".yarn/cache":i[0]||e)},Gp=(e,t,n=".")=>{let r=$a(e);if(!r)return!1;let i=bi(n),o=r.split("/"),s=o[0];if(o.some(u=>u===".dart_tool"||u===".pub-cache")||o.some(u=>u===".flutter-plugins"||u===".flutter-plugins-dependencies")||o.some(u=>va.has(u))||s===".yarn"&&o[1]==="cache"||jp.has(s))return!0;let a=t==="web"?["android","ios"]:[t==="ios"?"android":"ios"];for(let u of a)if(_r(r,vr(i,u)))return!0;let l=vr(i,"build");if(_r(r,l))return!0;let c=vr(i,"ios/Flutter/ephemeral");if(_r(r,c))return!0;let d=o.findIndex(u=>u==="android"||u==="ios");return!!(d>=0&&o.slice(d+1).includes("build"))},wa=(e,t,n,r=".")=>{let i=0,o=new Set,s=bi(r),a=(l,c)=>{let d=$a(c);if(Gp(d,n,s)){o.add(Hp(d,s,n));return}let u=qi.lstatSync(l);if(!u.isSymbolicLink()){if(u.isDirectory()){for(let p of qi.readdirSync(l))a(rn.join(l,p),rn.join(c,p));return}if(u.isFile()){let p=rn.dirname(d);e.addLocalFile(l,p==="."?void 0:p,rn.basename(d)),i+=1}}};for(let l of qi.readdirSync(t))a(rn.join(t,l),l);return{files:i,skipped:Array.from(o).sort()}};function Ra(e){return String(e||"").replace(/\\\/Users\\\/[^\\/\s"'`]+/g,"\\/Users\\/[REDACTED]").replace(/\/Users\/[^/\\\s"'`]+/g,"/Users/[REDACTED]")}var Ji=8,zp=6,ka=Number(process.env.MACH_ARTIFACT_UPLOAD_MAX_ATTEMPTS||2),Xi=Number(process.env.MACH_ARTIFACT_UPLOAD_TIMEOUT_MS||12e4),Zi="ap-south-1",Kp=`${f.envPrefix}S3_DEBUG`,Wp=()=>["1","true","yes","on"].includes(String(process.env[Kp]||"").trim().toLowerCase()),no=(e,t)=>{if(Wp()&&t)try{let n=new URL(t);I.info(_.dim(`[S3_DEBUG] ${e} host=${n.hostname} expectedRegion=${Zi}`)),n.hostname.includes(Zi)||I.warn(_.yellow(`[S3_DEBUG] ${e} host ${n.hostname} does not include ${Zi}`))}catch(n){I.warn(_.yellow(`[S3_DEBUG] Could not parse ${e} presigned URL host: ${n.message}`))}},Yp=[{value:"production",label:"production",hint:"Store / release build"},{value:"staging",label:"staging",hint:"Internal testing build"},{value:"development",label:"development",hint:"Development build"}],Ka=e=>new Promise(t=>setTimeout(t,e)),qp=e=>!e.yes&&!e.failOnly&&!e.buildId&&process.stdin.isTTY&&process.stdout.isTTY,Jp=e=>{if(!e||typeof e!="object")return;let t=[e.distribution?`distribution: ${e.distribution}`:void 0,e.environment?`env: ${e.environment}`:void 0,e.developmentClient?"development client":void 0,e.simulator||e.ios?.simulator?"simulator":void 0].filter(Boolean);return t.length>0?t.join(", "):void 0},Na=()=>{let e=re(`./${f.configFileName}`),t=e?.build&&typeof e.build=="object"?e.build:{},n=Object.keys(t);return n.length===0?Yp:n.map(r=>({value:r,label:r,hint:Jp(ce(e,r))}))},xa=e=>{let t=re(`./${f.configFileName}`);return t?K(t,"store",e[0]?.value||"production"):e[0]?.value||"production"},Xp=async e=>{let t=qp(e);if(!e.platform&&t){let n=normalizeFramework(re(`./${f.configFileName}`)?.framework),r=await Oa({message:"Select platform",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"},...n==="flutter"?[{value:"web",label:"Web"}]:[]]});Rr(r)&&(Pa("Build cancelled."),process.exit(0)),e.platform=r}if(!e.buildProfile&&t){let n=Na(),r=await Oa({message:"Select build profile",options:n,initialValue:xa(n)});Rr(r)&&(Pa("Build cancelled."),process.exit(0)),e.buildProfile=r}if(!e.buildProfile){let n=Na();e.buildProfile=xa(n)}},La=e=>{if(e===!0||e===!1)return e;if(e===1||e==="1")return!0;if(e===0||e==="0")return!1;if(typeof e!="string")return;let t=e.trim().toLowerCase();if(["true","yes","on"].includes(t))return!0;if(["false","no","off"].includes(t))return!1},Wa=(e,t)=>{if(e)for(let n of t){let r=n.replace(/[.*+?^${}()|[\]\\]/g,"\\$&"),i=e.match(new RegExp(`(?:^|\\s)${r}(?:=|\\s+)([^\\s]+)`));if(i?.[1])return i[1].replace(/^["']|["']$/g,"")}},Zp=(e,t)=>!!e&&t.some(n=>new RegExp(`(?:^|\\s)${n.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}(?:\\s|$)`).test(e)),Qp=e=>{let n=Wa(e,["--platform"])||e?.split(/\s+/).find(r=>r==="ios"||r==="android"||r==="web");return n==="ios"||n==="android"||n==="web"?n:void 0},ef=async e=>{if(!e.projectId||!e.buildId)return;let t=!!e.local;try{let n=await R.get(`/builds/${e.projectId}/${e.buildId}`),r=n.data?.build||n.data;if(!r||typeof r!="object"){if(t)throw new Error("MACH API returned an empty build record.");return}let i=typeof r.buildArgs=="string"?r.buildArgs:void 0;if(ps(e,r),!e.platform){let o=r.platform||Qp(i);(o==="ios"||o==="android"||o==="web")&&(e.platform=o)}if(e.buildProfile||(e.buildProfile=r.buildProfile||r.profile||r.profileName||Wa(i,["--profile","--build-profile","-p"])),e.simulator===void 0){let o=La(r.simulator??r.isSimulator);o!==void 0?e.simulator=o:Zp(i,["--simulator"])&&(e.simulator=!0)}if(e.developmentClient===void 0){let o=La(r.developmentClient??r.devClient);o!==void 0&&(e.developmentClient=o)}!e.flutterFlavor&&typeof r.flutterFlavor=="string"&&(e.flutterFlavor=r.flutterFlavor),!e.flutterTarget&&typeof r.flutterTarget=="string"&&(e.flutterTarget=r.flutterTarget),!e.flutterMode&&["debug","profile","release"].includes(r.flutterBuildMode)&&(e.flutterMode=r.flutterBuildMode),!e.flutterSdkVersion&&typeof r.flutterSdkVersion=="string"&&(e.flutterSdkVersion=r.flutterSdkVersion),!e.dartVersion&&typeof r.dartVersion=="string"&&(e.dartVersion=r.dartVersion),e.flutterObfuscate===void 0&&typeof r.flutterObfuscate=="boolean"&&(e.flutterObfuscate=r.flutterObfuscate),e.flutterSplitDebugInfo===void 0&&typeof r.flutterSplitDebugInfo=="boolean"&&(e.flutterSplitDebugInfo=r.flutterSplitDebugInfo)}catch(n){if(t){let r=n.response?.data?.message||n.message||"unknown error";throw new Error(`Could not load the canonical MACH build record for runner ${e.buildId}: ${r}. The runner stopped to avoid allocating or packaging a different native version.`)}I.warn(_.yellow(`Could not load saved build options for runner: ${n.message}`))}},tf=e=>{if(!Number.isFinite(e)||e<=0)return"0 B";let t=["B","KB","MB","GB"],n=Math.min(Math.floor(Math.log(e)/Math.log(1024)),t.length-1);return`${(e/Math.pow(1024,n)).toFixed(n===0?0:1)} ${t[n]}`},nf=e=>{let t=e.response?.status,n=e.code||"",r=e.message||"";return t?t===408||t===409||t===425||t===429||t>=500||/ECONNRESET|ETIMEDOUT|EAI_AGAIN|ENOTFOUND|ECONNABORTED|socket hang up|network|timeout/i.test(`${n} ${r}`):!0},xn=async(e,t,n=zp)=>{let r;for(let i=1;i<=n;i++)try{return await t()}catch(o){if(r=o,!nf(o)||i>=n)break;let s=Math.min(6e4,2e3*Math.pow(2,i-1)),a=o.response?.status||o.code||o.message||"network error";I.warn(_.yellow(`${e} failed transiently (${a}). Retrying in ${Math.round(s/1e3)}s... (${i}/${n})`)),await Ka(s)}throw r},rf=async(e,t,n)=>{let r=ue.basename(e),i=X.statSync(e).size,o=Math.round(Xi/1e3);no(`ARTIFACT_UPLOAD ${r}`,t);try{await xn(`Upload artifact ${r}`,async()=>{let s=new AbortController,a=X.createReadStream(e),l=setTimeout(()=>{a.destroy(new Error(`Artifact upload timed out after ${o}s`)),s.abort()},Xi);try{await wr.put(t,a,{headers:{"Content-Type":n,"Content-Length":i,Connection:"close"},maxBodyLength:1/0,maxContentLength:1/0,timeout:Xi,timeoutErrorMessage:`Artifact upload timed out after ${o}s`,signal:s.signal})}finally{clearTimeout(l)}},ka)}catch(s){throw new Error(`${r} (${tf(i)}) failed after ${ka} upload attempt(s): ${s.message||s}`)}return i},of=e=>{let t=e.response?.status;return t?t===408||t===429||t>=500:!0},pt=e=>e.credentialId||e.id,sf=async(e,t)=>{let n=pt(e);if(!n)return e.downloadUrl;let r=await R.get(`/credentials/${n}/download`,{params:{projectId:t,format:"raw"}});return r.data?.status==="success"&&r.data?.downloadUrl?r.data.downloadUrl:e.downloadUrl},ro=async(e,t)=>{let n=e.downloadUrl;for(let r=1;r<=Ji;r++)try{if((!n||r>1)&&(n=await sf(e,t)),!n)throw new Error(`Credential ${e.name||pt(e)||"unknown"} has no download URL.`);let i=await wr.get(n,{responseType:"arraybuffer",timeout:6e4,maxContentLength:1/0,maxBodyLength:1/0,headers:{Connection:"close"}});return Buffer.from(i.data).toString("base64")}catch(i){if(r>=Ji||!of(i))throw i;let o=Math.min(1500*r*r,15e3);I.warn(_.dim(` - Temporary network error downloading ${e.name}. Retrying... (${r}/${Ji})`)),await Ka(o)}throw new Error(`Failed to download credential ${e.name||pt(e)||"unknown"}.`)},af=(e,t)=>t?.ios?.buildNumber??t?.iosBuildNumber??e?.ios?.buildNumber??e?.expo?.ios?.buildNumber,lf=(e,t)=>t?.android?.versionCode??t?.androidVersionCode??e?.android?.versionCode??e?.expo?.android?.versionCode,Ma=(e,t,n,r)=>e==="ios"?t.iosBundleIdentifier||n?.ios?.bundleIdentifier||n?.expo?.ios?.bundleIdentifier||r:t.androidPackage||n?.android?.package||n?.expo?.android?.package||n?.name||r,Fa=async(e,t,n)=>{let r=await R.post(`/projects/${e}/next-build-number`,{platform:t,scope:n});if(r.data.status!=="success"||!r.data.buildNumber)throw new Error(r.data.message||"Dashboard did not return a build number.");return String(r.data.buildNumber)},Nn=e=>{let t={};return e.platform==="ios"&&e.resolvedBuildNumber&&(t.buildNumber=e.resolvedBuildNumber),e.platform==="android"&&e.resolvedVersionCode&&(t.versionCode=e.resolvedVersionCode),t},Ya=(e,t,n=[])=>{if(!X.existsSync(e))return n;let r;try{r=X.readdirSync(e,{withFileTypes:!0})}catch{return n}for(let i of r){if(i.name==="Pods"||i.name==="build"||i.name==="DerivedData")continue;let o=ue.join(e,i.name);i.isDirectory()?Ya(o,t,n):i.name===t&&n.push(o)}return n},df=(e,t)=>{let n=String(t.environment||"").toLowerCase(),r=e.toLowerCase(),i=0;return(n.includes("development")||n.includes("dev"))&&/(^|[.-])dev(elopment)?($|[.-])/.test(r)&&(i+=20),(n.includes("staging")||n.includes("stage"))&&/(^|[.-])stag(e|ing)?($|[.-])/.test(r)&&(i+=20),(n.includes("production")||n.includes("prod"))&&(/(^|[.-])(dev|development|stag|stage|staging)($|[.-])/.test(r)||(i+=20)),i},cf=(e,t)=>{let n=Ie(process.cwd(),e.appDirectory),r=ue.join(n.appRoot,"ios"),i=X.existsSync(r)?r:n.appRoot,o=Ya(i,"project.pbxproj"),s=[];for(let a of o)try{let c=X.readFileSync(a,"utf8").matchAll(/PRODUCT_BUNDLE_IDENTIFIER\s*=\s*"?([^";\s]+)"?;/g);for(let d of c){let u=d[1]?.trim();u&&!u.includes("$")&&!u.startsWith("com.apple.")&&!s.includes(u)&&s.push(u)}}catch{}if(s.length!==0)return s.length===1?s[0]:s.map(a=>({bundleId:a,score:df(a,e)})).sort((a,l)=>l.score-a.score)[0]?.bundleId},$r=e=>String(e||"").trim().toLowerCase().replace(/_/g,"-"),Or=(e,t)=>{let n=$r(e);return t==="ios"&&(n==="internal"||n==="ad-hoc")?"adhoc":t==="android"&&["internal","adhoc","ad-hoc","development","dev","staging","stage"].includes(n)?"internal":n},io=(e,t,n)=>{let r=Or(e.distributionType||e.meta?.distributionType,n);return r?r===Or(t,n):!0},Ua=(e,t,n)=>{let r=Or(e.distributionType||e.meta?.distributionType,n),i=Or(t,n);return r?r===i?3:n==="android"&&i!=="store"&&r!=="store"?2:0:1},qa=(e,t)=>{let n=$r(e.distribution),r=$r(e.iosExportMethod),i=$r(e.environment);return e.platform!=="ios"?n==="store"?"store":"internal":e.developmentClient||e.simulator?"development":r==="app-store"||n==="store"?"store":r==="development"||n==="development"?"development":r==="ad-hoc"||r==="adhoc"||n==="ad-hoc"||n==="adhoc"||n==="internal"?"adhoc":i==="production"||i==="store"?"store":i==="development"||i==="dev"?"development":"adhoc"},Ja=e=>e.bundleId||e.bundleIdentifier||e.packageName||e.meta?.bundleId||e.meta?.bundleIdentifier||e.meta?.packageName,Xa=(e,t)=>{if(!t)return!0;let n=Ja(e);return!n||n==="*"||n===t},uf=(e,t)=>e.type==="android_keystore"&&Xa(e,t),pf=(e,t,n)=>!!(e.local&&e.buildId)||!t||!n,Ba=(e,t)=>{let n=Ja(e);return!t||!n?0:n===t?2:n==="*"?1:-1},Za=e=>{try{let t=Buffer.from(e,"base64").toString("utf8"),n=t.match(/<key>application-identifier<\/key>\s*<string>([^<]+)<\/string>/)?.[1]?.trim();if(!n)return;let r=t.match(/<key>TeamIdentifier<\/key>\s*<array>\s*<string>([^<]+)<\/string>/)?.[1]?.trim();if(r&&n.startsWith(`${r}.`))return n.slice(r.length+1);let i=n.indexOf(".");return i>=0?n.slice(i+1):n}catch{return}},ff=(e,t)=>{if(e===t||e==="*")return!0;if(e.endsWith(".*")){let n=e.slice(0,-2);return t.startsWith(`${n}.`)}return!1},mf=(e,t)=>{if(!t)return!0;let n=Za(e);if(n)return ff(n,t);try{return Buffer.from(e,"base64").toString("latin1").includes(t)}catch{return!0}},oo=(e,t,n,r)=>[...e].sort((i,o)=>{let s=Ba(o,t)*10+Ua(o,n,r)-(Ba(i,t)*10+Ua(i,n,r));return s!==0?s:(o.createdAt||0)-(i.createdAt||0)}),so=e=>{if(typeof e!="string")return;let t=e.replace(/[^a-fA-F0-9]/g,"").toUpperCase();return t.length===40?t:void 0},gf=e=>so(e?.certificateSha1)||so(e?.meta?.certificateSha1),hf=e=>{let t=e?.profileCertificateSha1s??e?.meta?.profileCertificateSha1s;return Array.isArray(t)?t.map(so).filter(n=>!!n):[]},yf=e=>{let t=X.mkdtempSync(ue.join(za.tmpdir(),`${f.nameLower}-verify-signing-`));try{let n=ue.join(t,"certificate.p12");X.writeFileSync(n,Buffer.from(e.certificateBase64,"base64"),{mode:384});let r=[...new Set([e.storedPassword||"","",f.keychainPassword])],i;for(let o of r)try{let s=bs(n,o);for(let a=0;a<e.profiles.length;a++){let l=ue.join(t,`profile-${a}.mobileprovision`);X.writeFileSync(l,Buffer.from(e.profiles[a].profileBase64,"base64"),{mode:384}),Ss(s,As(l))}return o}catch(s){i=s instanceof Error?s:new Error(String(s))}throw i||new Error("Could not verify the iOS signing certificate.")}finally{try{X.rmSync(t,{recursive:!0,force:!0})}catch{}}},Af=async e=>{let{projectId:t,signingTargets:n,distributionType:r,teamId:i,projectSecrets:o}=e,s=new Map,a=[];for(let g of n){I.info(_.dim(` Credential target: bundle ${g.bundleIdentifier} (${r})`));let h=await R.get("/credentials/resolve",{params:{projectId:t,platform:"ios",bundleId:g.bundleIdentifier,distributionType:r,teamId:i}}),A=h.data.status==="success"&&Array.isArray(h.data.credentials)?h.data.credentials:[];s.set(g.bundleIdentifier,A),a.push(...A)}let l=[],c=[],d=new Map,u=[];for(let g of n){let h=oo((s.get(g.bundleIdentifier)||[]).filter(b=>b.type==="ios_profile"&&io(b,r,"ios")&&Xa(b,g.bundleIdentifier)),g.bundleIdentifier,r,"ios"),A;for(let b of h)if(!(!b.downloadUrl&&!pt(b)))try{let v=await ro(b,t);if(!mf(v,g.bundleIdentifier)){let S=Za(v)||"unknown";throw new Error(`expected ${g.bundleIdentifier}, found ${S}`)}A=v,d.set(g.bundleIdentifier,b),I.info(_.dim(` - Resolved ${b.name||"provisioning profile"} for ${g.bundleIdentifier}`));break}catch(v){l.push(`${b.name||pt(b)||g.bundleIdentifier}: ${v.message}`)}if(!A){u.push(g.bundleIdentifier);continue}c.push({...g,profileBase64:A})}let p=new Set,m=c.map(g=>hf(d.get(g.bundleIdentifier))).filter(g=>g.length>0),y=oo(a.filter(g=>{if(g.type!=="ios_cert"||!io(g,r,"ios"))return!1;let h=pt(g)||`${g.name||"certificate"}:${g.createdAt||""}`;if(p.has(h))return!1;p.add(h);let A=gf(g);return!(A&&m.length>0&&!m.every(b=>b.includes(A)))}),n[0]?.bundleIdentifier,r,"ios");for(let g of y)if(!(!g.downloadUrl&&!pt(g)))try{let h=await ro(g,t),A=c.length>0?yf({certificateBase64:h,storedPassword:g.password,profiles:c}):g.password||"";o.IOS_DIST_P12=h,o.IOS_P12_PASSWORD=A,I.info(_.dim(` - Verified ${g.name||"Apple signing certificate"} against ${c.length||1} provisioning profile${c.length===1?"":"s"}`));break}catch(h){l.push(`${g.name||pt(g)||"iOS certificate"}: ${h.message}`)}if(c.length>0){let g=c.find(h=>h.isMainApplication)||c[0];o.IOS_PROVISIONING_PROFILE=g.profileBase64,n.length>1&&c.length===n.length&&(o.IOS_PROVISIONING_PROFILES=ys(c))}return{missingProfileBundleIds:u,failures:l}},Dr=async e=>{if(e.failOnly){(!e.projectId||!e.buildId)&&(I.error(_.red("--project-id and --build-id are required with --fail-only.")),process.exit(1));let c=e.error||"Build runner failed before it could report a final status.";try{await R.patch(`/builds/${e.projectId}/${e.buildId}`,{status:"failed",error:c,endTime:Date.now()}),I.info(_.yellow(`Marked build ${e.buildId} as failed.`));return}catch(d){I.error(_.red(`Could not mark build failed: ${d.message}`)),process.exit(1)}}await ef(e),await Xp(e),e.platform!=="android"&&e.platform!=="ios"&&e.platform!=="web"&&(I.error(`Platform ${e.platform} is not supported. Use 'android', 'ios', or 'web'.`),process.exit(1)),e.platform==="web"&&e.framework&&e.framework!=="flutter"&&(I.error(_.red("Web builds are available only for Flutter projects.")),process.exit(1)),e.platform==="web"&&(e.autoSubmit||e.maestro)&&(I.error(_.red("Flutter web artifacts cannot use store auto-submit or managed Maestro mobile tests.")),process.exit(1)),e.autoSubmit&&e.platform==="ios"&&e.simulator&&(I.error(_.red("--auto-submit cannot be used with --simulator because simulator builds are not App Store artifacts.")),process.exit(1)),e.autoSubmit&&e.dryRun&&I.warn(_.yellow("--auto-submit is ignored during --dry-run."));let t=to(),n=e.buildId||Vp(),r=e.projectId,i=Date.now(),o=!!r,s=!0,a=async c=>{if(r)try{await R.patch(`/builds/${r}/${n}`,{status:"failed",error:c,endTime:Date.now()})}catch{}};if(e.local&&e.buildId&&r&&await xn("Mark isolated runner as building",()=>R.patch(`/builds/${r}/${n}`,{status:"building",runnerStartedAt:Date.now()})),e.local&&e.buildId){e.quiet||t.start(`Preparing isolated workspace for build: ${e.buildId}`);try{let c=await R.get(`/builds/${r}/${e.buildId}/source-url`);if(c.data.status!=="success")throw new Error("Failed to get source download URL from API");no("SOURCE_DOWNLOAD",c.data.downloadUrl);let d=await wr.get(c.data.downloadUrl,{responseType:"stream"}),u=(r||e.projectId||"default").replace(/[^a-zA-Z0-9-_]/g,"_"),p=ue.join(za.homedir(),f.workspacesDir,u);X.mkdirSync(p,{recursive:!0});let m=new Set(["node_modules",`.${f.nameLower}-cache-meta`]),y=new Set(["Pods"]);if(X.existsSync(p)){let v=X.readdirSync(p);for(let S of v){if(m.has(S))continue;if(S==="ios"){let M=ue.join(p,"ios");try{let B=X.readdirSync(M);for(let j of B)if(!y.has(j))try{X.rmSync(ue.join(M,j),{recursive:!0,force:!0})}catch{}}catch{}continue}let L=ue.join(p,S);try{X.rmSync(L,{recursive:!0,force:!0})}catch{}}}let g=ue.join(p,"source.zip"),h=d.data,A=X.createWriteStream(g);await new Promise((v,S)=>{h.pipe(A),h.on("error",L=>S(L)),A.on("finish",()=>v())}),new Ca(g).extractAllTo(p,!0);try{X.unlinkSync(g)}catch{}process.chdir(p),I.info(_.green(`\u2713 Persistent workspace ready: ${p}`)),I.info(_.dim(` \u{1F4E6} Cached dirs preserved: node_modules=${X.existsSync(ue.join(p,"node_modules"))?"\u2705":"\u274C"}, Pods=${X.existsSync(ue.join(p,"ios","Pods"))?"\u2705":"\u274C"}`)),t.stop()}catch(c){t.stop(`Failed to prepare isolated workspace: ${c.message}`),r&&await a(`Setup Error: ${c.message}`),process.exit(1)}}try{let c=e.repo;if(!c)try{c=Ta("git config --get remote.origin.url").toString().trim()}catch{I.warn("Could not detect git repository URL.")}!c&&e.dryRun,c||(c="https://github.com/placeholder/repo.git"),I.info(`Build ID: ${_.cyan(n)}`);let d={},u={},p=null,m=[],y=[],g=re(`./${f.configFileName}`);if(g||(I.error(_.red(`${f.configFileName} not found. Run \`${f.nameLower} init\` or \`${f.nameLower} link\` first.`)),process.exit(1)),g){p=g;let E=Yt(g);e.framework=E,r=g.projectId;let $=e.local&&e.buildId?process.env.MACH_APP_DIRECTORY:void 0,w=Ie(process.cwd(),$||g.appDirectory,{requireAppDirectory:!0});e.appDirectory=w.appDirectory,$&&process.env.MACH_DEBUG&&I.info(_.dim(`Runner app directory: ${e.appDirectory}`)),fs(w,E,e.platform);let O=e.buildProfile||"production",N=ce(g,O);!N&&e.buildProfile&&(I.error(`Build profile '${O}' not found in ${f.configFileName}`),process.exit(1));let D=N||{};D.distribution||(I.warn(_.yellow(`Build profile "${O}" has no distribution. Defaulting to internal. Profile names do not control build behavior.`)),D.distribution="internal"),process.env.MACH_DEBUG&&I.info(_.dim(`Framework: ${E} | Build profile: ${O} | Platform: ${e.platform} | Distribution: ${D.distribution||"store"} | Environment: ${D.environment||O}`)),D.env&&(u=D.env,I.info(_.blue(`Use Build Profile: ${O}`)));let F=e.platform,z=D[F]||{},q=["developmentClient","simulator","distribution","buildCommand","apk","iosScheme","preBuild","postBuild","scheme","environment","androidPackage","iosBundleIdentifier","name","iosDeploymentTarget","iosApiKeyId","iosApiKeyIssuer","iosApiKeyPath","iosTeamId","iosConfiguration","iosExportMethod","branch","repo","instanceType","ami","bucket","region","nodeVersion"];e.name=g.name,e.appName=g.name,e.androidPackage=g.android?.package,e.iosBundleIdentifier=g.ios?.bundleIdentifier,e.iosScheme=g.ios?.iosScheme,!e.nodeVersion&&g.nodeVersion&&(e.nodeVersion=g.nodeVersion);let Oe=H=>H==="androidPackage"?z.androidPackage??z.package??D.androidPackage??D.android?.package:H==="iosBundleIdentifier"?z.iosBundleIdentifier??z.bundleIdentifier??D.iosBundleIdentifier??D.ios?.bundleIdentifier:z[H]!==void 0?z[H]:D[H];for(let H of q){let ye=Oe(H),Nt=H==="androidPackage"||H==="iosBundleIdentifier";ye!==void 0&&(e[H]===void 0||Nt)&&(e[H]=ye)}if(E==="flutter"){let H=Jt(g,D,e.platform);Zt(w.appRoot,O,D,e.platform);let ye=Ye(w.appRoot),Nt=It();if(e.flutterFlavor=e.flutterFlavor||H.flavor||ye.defaultFlavor,e.flutterTarget=e.flutterTarget||Et(H.target),e.flutterMode=e.flutterMode||Xt(H,e),e.flutterDartDefinesFromEnv=e.flutterDartDefinesFromEnv||H.dartDefinesFromEnv,e.flutterObfuscate=e.flutterObfuscate??H.obfuscate??!1,e.flutterSplitDebugInfo=e.flutterSplitDebugInfo??H.splitDebugInfo??e.flutterObfuscate,e.flutterObfuscate||e.flutterSplitDebugInfo){if(e.platform==="web")throw new Error(`build.${O}.flutter obfuscation/splitDebugInfo is not supported for Flutter web.`);if(e.flutterMode!=="release")throw new Error(`build.${O}.flutter obfuscation/splitDebugInfo requires mode "release".`);e.flutterSplitDebugInfoPath=ue.join(w.appRoot,".mach","symbols",e.buildId||n,e.platform)}if(e.flutterSdkVersion=ls(e.flutterSdkVersion||g.flutter?.sdkVersion||Nt.flutter),e.dartVersion=e.dartVersion||Nt.dart,e.appVersion=ye.version||"1.0.0",e.platform==="ios"&&e.flutterFlavor&&!e.iosScheme&&(e.iosScheme=e.flutterFlavor),!e.iosConfiguration){let ts=e.flutterMode==="debug"?"Debug":e.flutterMode==="profile"?"Profile":"Release";e.iosConfiguration=e.flutterFlavor?`${ts}-${e.flutterFlavor}`:ts}}if(e.platform==="ios"&&!(z.iosBundleIdentifier??z.bundleIdentifier??D.iosBundleIdentifier??D.ios?.bundleIdentifier)){let ye=cf(e,O);ye&&ye!==e.iosBundleIdentifier&&(I.warn(_.yellow(`Detected native iOS bundle identifier ${ye}; using it for credential lookup. Set build.${O}.ios.bundleIdentifier to make this explicit.`)),e.iosBundleIdentifier=ye)}e.branch=e.branch||"main",e.iosConfiguration=e.iosConfiguration||(e.developmentClient?"Debug":"Release"),e.sshUser=e.sshUser||process.env.USER||"ubuntu",e.simulator===void 0&&(e.simulator=!1),e.local===void 0&&(e.local=!1),e.verbose===void 0&&(e.verbose=!1),I.info(_.dim(`Resolved build config: framework=${E}, appDirectory=${e.appDirectory}, profile=${O}, platform=${e.platform}, simulator=${e.platform==="ios"?String(!!e.simulator):"n/a"}, developmentClient=${String(!!e.developmentClient)}, distribution=${e.distribution||D.distribution||"store"}, iosConfiguration=${e.platform==="ios"?e.iosConfiguration||"Release":"n/a"}`+(E==="flutter"?`, flutterFlavor=${e.flutterFlavor||"default"}, flutterTarget=${e.flutterTarget}, flutterMode=${e.flutterMode}`:"")));let We=H=>{if(!H)return H;if(H.startsWith("scripts.")){let ye=H.split(".")[1],Nt=g.scripts?.[ye];if(Nt)return Nt;I.warn(`Script reference not found: ${H}`)}return H};if(e.buildCommand=We(e.buildCommand),e.preBuild=We(e.preBuild),e.postBuild=We(e.postBuild),!e.scheme&&g.scheme&&(e.scheme=g.scheme),e.platform==="ios"&&!e.simulator&&e.iosBundleIdentifier&&(m=hs({config:g,resolvedProfile:D,framework:E,appRoot:w.appRoot,mainBundleIdentifier:e.iosBundleIdentifier,mainTargetName:e.iosScheme||e.scheme||g.scheme}),m.length>1)){I.info(_.magenta(`\u2713 Detected ${m.length} signed iOS targets:`));for(let H of m)I.info(_.dim(` - ${H.targetName||(H.isMainApplication?"main application":"extension")}: ${H.bundleIdentifier}`))}let bt={...qt(g,f.envPrefix),...qt(D,`${f.envPrefix}PROFILE_`)};if(d={...d,...u,...bt},process.env.IOS_P12_PASSWORD&&!d.IOS_P12_PASSWORD&&(d.IOS_P12_PASSWORD=process.env.IOS_P12_PASSWORD),process.env.MATCH_PASSWORD&&!d.MATCH_PASSWORD&&(d.MATCH_PASSWORD=process.env.MATCH_PASSWORD),e.platform==="ios"){if(!e.iosTeamId&&D.ios?.appleTeamId&&(e.iosTeamId=D.ios.appleTeamId),!e.iosTeamId&&g.submit?.[O]?.ios?.appleTeamId&&(e.iosTeamId=g.submit[O].ios.appleTeamId),!e.iosTeamId){let H=K(g,"store",O),ye=at(g,H);ye.teamId&&(I.warn(_.yellow(`Using the iOS Team ID configured for store profile '${H}'.`)),e.iosTeamId=ye.teamId)}e.iosTeamId?I.info(_.magenta(`\u2713 Injected iOS Team ID from config: ${e.iosTeamId}`)):e.simulator||I.warn(_.yellow("\u26A0\uFE0F No iOS Team ID found. Device or archive signing may fail unless managed iOS credentials provide the team automatically."))}}let h="unknown";try{h=Ta("git rev-parse --abbrev-ref HEAD").toString().trim()}catch{I.warn("Failed to detect git branch.")}let A="1.0.0";try{if(e.framework==="flutter"){let E=Ie(process.cwd(),e.appDirectory);A=Ye(E.appRoot).version||"1.0.0",e.appVersion=A}else X.existsSync("./package.json")&&(A=JSON.parse(X.readFileSync("./package.json","utf-8")).version||"1.0.0")}catch{}let b=e.buildProfile||"production",v=e.framework==="flutter"?A:_n(g,{framework:e.framework,platform:e.platform==="web"?void 0:e.platform}),S="Internal";e.developmentClient?S="DevelopmentClient":e.distribution==="store"?S="Store":e.distribution==="development"&&(S="Development");let L=e.platform==="ios"?"iOS":e.platform==="android"?"Android":"Web",M=e.platform==="ios"&&e.simulator?" (Simulator)":"",B=`${L}${M} v${A} (${S})`;if(Ln(e,{status:"created",projectId:r,buildId:n,platform:e.platform,profile:b,branch:h,version:A,runtimeVersion:v,...Nn(e),buildType:S,developmentClient:!!e.developmentClient,summary:B}),r){try{let E=e.buildProfile||"production",$=e.environment||E;I.info(_.blue(`Fetching managed secrets for profile: ${E} (environment: ${$})...`));let O=(await R.get(`/projects/${r}/secrets/export?env=${$}`)).data;O.status==="success"&&O.secrets&&(d={...d,...O.secrets},Object.keys(O.secrets).length>0&&I.info(_.magenta(`\u2713 Injected ${Object.keys(O.secrets).length} secrets from Dashboard.`)))}catch(E){I.warn(`Failed to load managed secrets from Dashboard: ${E.message}`)}if(e.platform==="ios"){let E=e.buildProfile||"production",$=ce(g,E)||{},w=af(g,$),O=yi(w),N=e.distribution!==void 0?e.distribution==="store":S==="Store",D=w===void 0&&N,F=e.autoVersion||O||D,z=Ai(e.resolvedBuildNumber,w,F,!e.simulator);if(z.kind==="persisted"){let q=mr(e,d,z.value,"saved MACH build record");I.info(_.green(`\u2713 Reusing assigned iOS buildNumber ${q}`))}else if(z.kind==="explicit"){let q=mr(e,d,z.value,`${f.configFileName} (${E})`);I.info(_.green(`\u2713 Using configured iOS buildNumber ${q}`))}else if(z.kind==="auto"){t.start("Assigning iOS buildNumber from Mach counter...");try{let q=Ma("ios",e,g,E),Oe=await Fa(r,"ios",q);mr(e,d,Oe,"MACH version counter"),t.stop(`\u2713 Assigned iOS buildNumber ${_.green(Oe)} (${q})`)}catch(q){throw t.stop("iOS buildNumber assignment failed"),new Error(`Auto-versioning failed: ${q.response?.data?.message||q.message}`)}}}if(e.platform==="android"){let E=e.buildProfile||"production",$=ce(g,E)||{},w=lf(g,$),O=yi(w),N=e.distribution!==void 0?e.distribution==="store":S==="Store",D=w===void 0&&N,F=e.autoVersion||O||D,z=Ai(e.resolvedVersionCode,w,F);if(z.kind==="persisted"){let q=gr(e,d,z.value,"saved MACH build record");I.info(_.green(`\u2713 Reusing assigned Android versionCode ${q}`))}else if(z.kind==="explicit"){let q=gr(e,d,z.value,`${f.configFileName} (${E})`);I.info(_.green(`\u2713 Using configured Android versionCode ${q}`))}else if(z.kind==="auto"){t.start("Assigning Android versionCode from Mach counter...");try{let q=Ma("android",e,g,E),Oe=await Fa(r,"android",q);gr(e,d,Oe,"MACH version counter"),t.stop(`\u2713 Assigned Android versionCode ${_.green(Oe)} (${q})`)}catch(q){throw t.stop("Android versionCode assignment failed"),new Error(`Auto-versioning failed: ${q.response?.data?.message||q.message}`)}}}if(e.platform==="ios"&&e.simulator)I.info(_.dim("Skipping managed iOS signing credentials for simulator build."));else try{e.platform==="web"?I.info(_.dim("Skipping managed signing credentials for Flutter web build.")):I.info(_.blue("Fetching managed credentials..."));let E=qa(e,b),$=e.platform==="ios"?e.iosBundleIdentifier:e.androidPackage;if(e.platform==="ios"){let w=m.length>0?m:[{targetName:e.iosScheme||e.scheme,bundleIdentifier:e.iosBundleIdentifier,isMainApplication:!0}],O=await Af({projectId:r,signingTargets:w,distributionType:E,teamId:e.iosTeamId,projectSecrets:d});if(y=O.missingProfileBundleIds,O.failures.length>0&&(!d.IOS_DIST_P12||y.length>0))throw new Error(`Credential setup failed:
|
|
2157
|
+
`);let o=i.match(/Google Api Error:[^\n]+/)||i.match(/Google Play API Error:[^\n]+/);return o?o[0]:i||"Google Play submission failed"}function Hp(e){try{Q.existsSync(e)&&Q.rmSync(e,{recursive:!0,force:!0})}catch{}}function oe(e){console.log(q.red(`\u274C ${e}`))}function fe(e){console.log(q.gray(`\u2022 ${e}`))}function Ki(e){console.log(q.green(`\u2713 ${e}`))}import qi from"fs";import rn from"path";var jp=new Set([".gradle",".idea",".mach-cache",".expo",".dart_tool",".pub-cache",".turbo","build","builds","coverage","dist",".mach_cli","mach_cli"]),Ra=new Set([".git",".gradle",".cxx",".expo","DerivedData","node_modules","Pods"]),$a=e=>e.split(rn.sep).filter(Boolean).join("/"),_r=(e,t)=>e===t||e.startsWith(`${t}/`),vr=(e,t)=>e==="."?t:`${e}/${t}`,Gp=(e,t,n)=>{let r=n==="web"?["android","ios"]:[n==="ios"?"android":"ios"];for(let s of r){let a=vr(t,s);if(_r(e,a))return a}let i=e.split("/"),o=i.find(s=>Ra.has(s));return o||(i[0]===".yarn"&&i[1]==="cache"?".yarn/cache":i[0]||e)},Vp=(e,t,n=".")=>{let r=$a(e);if(!r)return!1;let i=bi(n),o=r.split("/"),s=o[0];if(o.some(u=>u===".dart_tool"||u===".pub-cache")||o.some(u=>u===".flutter-plugins"||u===".flutter-plugins-dependencies")||o.some(u=>Ra.has(u))||s===".yarn"&&o[1]==="cache"||jp.has(s))return!0;let a=t==="web"?["android","ios"]:[t==="ios"?"android":"ios"];for(let u of a)if(_r(r,vr(i,u)))return!0;let l=vr(i,"build");if(_r(r,l))return!0;let c=vr(i,"ios/Flutter/ephemeral");if(_r(r,c))return!0;let d=o.findIndex(u=>u==="android"||u==="ios");return!!(d>=0&&o.slice(d+1).includes("build"))},wa=(e,t,n,r=".")=>{let i=0,o=new Set,s=bi(r),a=(l,c)=>{let d=$a(c);if(Vp(d,n,s)){o.add(Gp(d,s,n));return}let u=qi.lstatSync(l);if(!u.isSymbolicLink()){if(u.isDirectory()){for(let p of qi.readdirSync(l))a(rn.join(l,p),rn.join(c,p));return}if(u.isFile()){let p=rn.dirname(d);e.addLocalFile(l,p==="."?void 0:p,rn.basename(d)),i+=1}}};for(let l of qi.readdirSync(t))a(rn.join(t,l),l);return{files:i,skipped:Array.from(o).sort()}};function Oa(e){return String(e||"").replace(/\\\/Users\\\/[^\\/\s"'`]+/g,"\\/Users\\/[REDACTED]").replace(/\/Users\/[^/\\\s"'`]+/g,"/Users/[REDACTED]")}var Ji=8,Kp=6,Na=Number(process.env.MACH_ARTIFACT_UPLOAD_MAX_ATTEMPTS||2),Xi=Number(process.env.MACH_ARTIFACT_UPLOAD_TIMEOUT_MS||12e4),Zi="ap-south-1",Wp=`${f.envPrefix}S3_DEBUG`,Yp=()=>["1","true","yes","on"].includes(String(process.env[Wp]||"").trim().toLowerCase()),no=(e,t)=>{if(Yp()&&t)try{let n=new URL(t);I.info(_.dim(`[S3_DEBUG] ${e} host=${n.hostname} expectedRegion=${Zi}`)),n.hostname.includes(Zi)||I.warn(_.yellow(`[S3_DEBUG] ${e} host ${n.hostname} does not include ${Zi}`))}catch(n){I.warn(_.yellow(`[S3_DEBUG] Could not parse ${e} presigned URL host: ${n.message}`))}},qp=[{value:"production",label:"production",hint:"Store / release build"},{value:"staging",label:"staging",hint:"Internal testing build"},{value:"development",label:"development",hint:"Development build"}],Wa=e=>new Promise(t=>setTimeout(t,e)),Jp=e=>!e.yes&&!e.failOnly&&!e.buildId&&process.stdin.isTTY&&process.stdout.isTTY,Xp=({distributionType:e,missingCertificate:t,missingProfileBundleIds:n,buildProfile:r})=>{let i=[...t?["Distribution Certificate"]:[],...n.length>0?[`Provisioning Profile${n.length===1?"":"s"} for ${n.join(", ")}`]:[]].join(" and "),o=`${f.nameLower} credentials --platform ios --profile ${r}`,s=n.length>0?`Run \`${o}\`, choose Build Credentials, then select or enter ${n.join(", ")}.`:`Run \`${o}\` and choose Build Credentials.`,a=n.length>0?"iOS signs the app and every extension as separate targets, so the main app profile cannot sign its extension.":"iOS requires a matching distribution certificate to sign the app.";return[`Missing iOS credentials: ${i}.`,`Why: ${a}`,`To fix: ${s}`,`Mach needs ${e} credentials for this ${r} build. Then run the build again.`].join(" ")},Zp=e=>{if(!e||typeof e!="object")return;let t=[e.distribution?`distribution: ${e.distribution}`:void 0,e.environment?`env: ${e.environment}`:void 0,e.developmentClient?"development client":void 0,e.simulator||e.ios?.simulator?"simulator":void 0].filter(Boolean);return t.length>0?t.join(", "):void 0},xa=()=>{let e=re(`./${f.configFileName}`),t=e?.build&&typeof e.build=="object"?e.build:{},n=Object.keys(t);return n.length===0?qp:n.map(r=>({value:r,label:r,hint:Zp(ce(e,r))}))},La=e=>{let t=re(`./${f.configFileName}`);return t?K(t,"store",e[0]?.value||"production"):e[0]?.value||"production"},Qp=async e=>{let t=Jp(e);if(!e.platform&&t){let n=normalizeFramework(re(`./${f.configFileName}`)?.framework),r=await Da({message:"Select platform",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"},...n==="flutter"?[{value:"web",label:"Web"}]:[]]});wr(r)&&(Ta("Build cancelled."),process.exit(0)),e.platform=r}if(!e.buildProfile&&t){let n=xa(),r=await Da({message:"Select build profile",options:n,initialValue:La(n)});wr(r)&&(Ta("Build cancelled."),process.exit(0)),e.buildProfile=r}if(!e.buildProfile){let n=xa();e.buildProfile=La(n)}},Ma=e=>{if(e===!0||e===!1)return e;if(e===1||e==="1")return!0;if(e===0||e==="0")return!1;if(typeof e!="string")return;let t=e.trim().toLowerCase();if(["true","yes","on"].includes(t))return!0;if(["false","no","off"].includes(t))return!1},Ya=(e,t)=>{if(e)for(let n of t){let r=n.replace(/[.*+?^${}()|[\]\\]/g,"\\$&"),i=e.match(new RegExp(`(?:^|\\s)${r}(?:=|\\s+)([^\\s]+)`));if(i?.[1])return i[1].replace(/^["']|["']$/g,"")}},ef=(e,t)=>!!e&&t.some(n=>new RegExp(`(?:^|\\s)${n.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}(?:\\s|$)`).test(e)),tf=e=>{let n=Ya(e,["--platform"])||e?.split(/\s+/).find(r=>r==="ios"||r==="android"||r==="web");return n==="ios"||n==="android"||n==="web"?n:void 0},nf=async e=>{if(!e.projectId||!e.buildId)return;let t=!!e.local;try{let n=await w.get(`/builds/${e.projectId}/${e.buildId}`),r=n.data?.build||n.data;if(!r||typeof r!="object"){if(t)throw new Error("MACH API returned an empty build record.");return}let i=typeof r.buildArgs=="string"?r.buildArgs:void 0;if(fs(e,r),!e.platform){let o=r.platform||tf(i);(o==="ios"||o==="android"||o==="web")&&(e.platform=o)}if(e.buildProfile||(e.buildProfile=r.buildProfile||r.profile||r.profileName||Ya(i,["--profile","--build-profile","-p"])),e.simulator===void 0){let o=Ma(r.simulator??r.isSimulator);o!==void 0?e.simulator=o:ef(i,["--simulator"])&&(e.simulator=!0)}if(e.developmentClient===void 0){let o=Ma(r.developmentClient??r.devClient);o!==void 0&&(e.developmentClient=o)}!e.flutterFlavor&&typeof r.flutterFlavor=="string"&&(e.flutterFlavor=r.flutterFlavor),!e.flutterTarget&&typeof r.flutterTarget=="string"&&(e.flutterTarget=r.flutterTarget),!e.flutterMode&&["debug","profile","release"].includes(r.flutterBuildMode)&&(e.flutterMode=r.flutterBuildMode),!e.flutterSdkVersion&&typeof r.flutterSdkVersion=="string"&&(e.flutterSdkVersion=r.flutterSdkVersion),!e.dartVersion&&typeof r.dartVersion=="string"&&(e.dartVersion=r.dartVersion),e.flutterObfuscate===void 0&&typeof r.flutterObfuscate=="boolean"&&(e.flutterObfuscate=r.flutterObfuscate),e.flutterSplitDebugInfo===void 0&&typeof r.flutterSplitDebugInfo=="boolean"&&(e.flutterSplitDebugInfo=r.flutterSplitDebugInfo)}catch(n){if(t){let r=n.response?.data?.message||n.message||"unknown error";throw new Error(`Could not load the canonical MACH build record for runner ${e.buildId}: ${r}. The runner stopped to avoid allocating or packaging a different native version.`)}I.warn(_.yellow(`Could not load saved build options for runner: ${n.message}`))}},rf=e=>{if(!Number.isFinite(e)||e<=0)return"0 B";let t=["B","KB","MB","GB"],n=Math.min(Math.floor(Math.log(e)/Math.log(1024)),t.length-1);return`${(e/Math.pow(1024,n)).toFixed(n===0?0:1)} ${t[n]}`},of=e=>{let t=e.response?.status,n=e.code||"",r=e.message||"";return t?t===408||t===409||t===425||t===429||t>=500||/ECONNRESET|ETIMEDOUT|EAI_AGAIN|ENOTFOUND|ECONNABORTED|socket hang up|network|timeout/i.test(`${n} ${r}`):!0},xn=async(e,t,n=Kp)=>{let r;for(let i=1;i<=n;i++)try{return await t()}catch(o){if(r=o,!of(o)||i>=n)break;let s=Math.min(6e4,2e3*Math.pow(2,i-1)),a=o.response?.status||o.code||o.message||"network error";I.warn(_.yellow(`${e} failed transiently (${a}). Retrying in ${Math.round(s/1e3)}s... (${i}/${n})`)),await Wa(s)}throw r},sf=async(e,t,n)=>{let r=ue.basename(e),i=J.statSync(e).size,o=Math.round(Xi/1e3);no(`ARTIFACT_UPLOAD ${r}`,t);try{await xn(`Upload artifact ${r}`,async()=>{let s=new AbortController,a=J.createReadStream(e),l=setTimeout(()=>{a.destroy(new Error(`Artifact upload timed out after ${o}s`)),s.abort()},Xi);try{await $r.put(t,a,{headers:{"Content-Type":n,"Content-Length":i,Connection:"close"},maxBodyLength:1/0,maxContentLength:1/0,timeout:Xi,timeoutErrorMessage:`Artifact upload timed out after ${o}s`,signal:s.signal})}finally{clearTimeout(l)}},Na)}catch(s){throw new Error(`${r} (${rf(i)}) failed after ${Na} upload attempt(s): ${s.message||s}`)}return i},af=e=>{let t=e.response?.status;return t?t===408||t===429||t>=500:!0},pt=e=>e.credentialId||e.id,lf=async(e,t)=>{let n=pt(e);if(!n)return e.downloadUrl;let r=await w.get(`/credentials/${n}/download`,{params:{projectId:t,format:"raw"}});return r.data?.status==="success"&&r.data?.downloadUrl?r.data.downloadUrl:e.downloadUrl},ro=async(e,t)=>{let n=e.downloadUrl;for(let r=1;r<=Ji;r++)try{if((!n||r>1)&&(n=await lf(e,t)),!n)throw new Error(`Credential ${e.name||pt(e)||"unknown"} has no download URL.`);let i=await $r.get(n,{responseType:"arraybuffer",timeout:6e4,maxContentLength:1/0,maxBodyLength:1/0,headers:{Connection:"close"}});return Buffer.from(i.data).toString("base64")}catch(i){if(r>=Ji||!af(i))throw i;let o=Math.min(1500*r*r,15e3);I.warn(_.dim(` - Temporary network error downloading ${e.name}. Retrying... (${r}/${Ji})`)),await Wa(o)}throw new Error(`Failed to download credential ${e.name||pt(e)||"unknown"}.`)},df=(e,t)=>t?.ios?.buildNumber??t?.iosBuildNumber??e?.ios?.buildNumber??e?.expo?.ios?.buildNumber,cf=(e,t)=>t?.android?.versionCode??t?.androidVersionCode??e?.android?.versionCode??e?.expo?.android?.versionCode,Fa=(e,t,n,r)=>e==="ios"?t.iosBundleIdentifier||n?.ios?.bundleIdentifier||n?.expo?.ios?.bundleIdentifier||r:t.androidPackage||n?.android?.package||n?.expo?.android?.package||n?.name||r,Ua=async(e,t,n)=>{let r=await w.post(`/projects/${e}/next-build-number`,{platform:t,scope:n});if(r.data.status!=="success"||!r.data.buildNumber)throw new Error(r.data.message||"Dashboard did not return a build number.");return String(r.data.buildNumber)},Nn=e=>{let t={};return e.platform==="ios"&&e.resolvedBuildNumber&&(t.buildNumber=e.resolvedBuildNumber),e.platform==="android"&&e.resolvedVersionCode&&(t.versionCode=e.resolvedVersionCode),t},qa=(e,t,n=[])=>{if(!J.existsSync(e))return n;let r;try{r=J.readdirSync(e,{withFileTypes:!0})}catch{return n}for(let i of r){if(i.name==="Pods"||i.name==="build"||i.name==="DerivedData")continue;let o=ue.join(e,i.name);i.isDirectory()?qa(o,t,n):i.name===t&&n.push(o)}return n},uf=(e,t)=>{let n=String(t.environment||"").toLowerCase(),r=e.toLowerCase(),i=0;return(n.includes("development")||n.includes("dev"))&&/(^|[.-])dev(elopment)?($|[.-])/.test(r)&&(i+=20),(n.includes("staging")||n.includes("stage"))&&/(^|[.-])stag(e|ing)?($|[.-])/.test(r)&&(i+=20),(n.includes("production")||n.includes("prod"))&&(/(^|[.-])(dev|development|stag|stage|staging)($|[.-])/.test(r)||(i+=20)),i},pf=(e,t)=>{let n=Ie(process.cwd(),e.appDirectory),r=ue.join(n.appRoot,"ios"),i=J.existsSync(r)?r:n.appRoot,o=qa(i,"project.pbxproj"),s=[];for(let a of o)try{let c=J.readFileSync(a,"utf8").matchAll(/PRODUCT_BUNDLE_IDENTIFIER\s*=\s*"?([^";\s]+)"?;/g);for(let d of c){let u=d[1]?.trim();u&&!u.includes("$")&&!u.startsWith("com.apple.")&&!s.includes(u)&&s.push(u)}}catch{}if(s.length!==0)return s.length===1?s[0]:s.map(a=>({bundleId:a,score:uf(a,e)})).sort((a,l)=>l.score-a.score)[0]?.bundleId},Rr=e=>String(e||"").trim().toLowerCase().replace(/_/g,"-"),Or=(e,t)=>{let n=Rr(e);return t==="ios"&&(n==="internal"||n==="ad-hoc")?"adhoc":t==="android"&&["internal","adhoc","ad-hoc","development","dev","staging","stage"].includes(n)?"internal":n},io=(e,t,n)=>{let r=Or(e.distributionType||e.meta?.distributionType,n);return r?r===Or(t,n):!0},Ba=(e,t,n)=>{let r=Or(e.distributionType||e.meta?.distributionType,n),i=Or(t,n);return r?r===i?3:n==="android"&&i!=="store"&&r!=="store"?2:0:1},Ja=(e,t)=>{let n=Rr(e.distribution),r=Rr(e.iosExportMethod),i=Rr(e.environment);return e.platform!=="ios"?n==="store"?"store":"internal":e.developmentClient||e.simulator?"development":r==="app-store"||n==="store"?"store":r==="development"||n==="development"?"development":r==="ad-hoc"||r==="adhoc"||n==="ad-hoc"||n==="adhoc"||n==="internal"?"adhoc":i==="production"||i==="store"?"store":i==="development"||i==="dev"?"development":"adhoc"},Xa=e=>e.bundleId||e.bundleIdentifier||e.packageName||e.meta?.bundleId||e.meta?.bundleIdentifier||e.meta?.packageName,Za=(e,t)=>{if(!t)return!0;let n=Xa(e);return!n||n==="*"||n===t},ff=(e,t)=>e.type==="android_keystore"&&Za(e,t),mf=(e,t,n)=>!!(e.local&&e.buildId)||!t||!n,Ha=(e,t)=>{let n=Xa(e);return!t||!n?0:n===t?2:n==="*"?1:-1},Qa=e=>{try{let t=Buffer.from(e,"base64").toString("utf8"),n=t.match(/<key>application-identifier<\/key>\s*<string>([^<]+)<\/string>/)?.[1]?.trim();if(!n)return;let r=t.match(/<key>TeamIdentifier<\/key>\s*<array>\s*<string>([^<]+)<\/string>/)?.[1]?.trim();if(r&&n.startsWith(`${r}.`))return n.slice(r.length+1);let i=n.indexOf(".");return i>=0?n.slice(i+1):n}catch{return}},gf=(e,t)=>{if(e===t||e==="*")return!0;if(e.endsWith(".*")){let n=e.slice(0,-2);return t.startsWith(`${n}.`)}return!1},hf=(e,t)=>{if(!t)return!0;let n=Qa(e);if(n)return gf(n,t);try{return Buffer.from(e,"base64").toString("latin1").includes(t)}catch{return!0}},oo=(e,t,n,r)=>[...e].sort((i,o)=>{let s=Ha(o,t)*10+Ba(o,n,r)-(Ha(i,t)*10+Ba(i,n,r));return s!==0?s:(o.createdAt||0)-(i.createdAt||0)}),so=e=>{if(typeof e!="string")return;let t=e.replace(/[^a-fA-F0-9]/g,"").toUpperCase();return t.length===40?t:void 0},Af=e=>so(e?.certificateSha1)||so(e?.meta?.certificateSha1),yf=e=>{let t=e?.profileCertificateSha1s??e?.meta?.profileCertificateSha1s;return Array.isArray(t)?t.map(so).filter(n=>!!n):[]},bf=e=>{let t=J.mkdtempSync(ue.join(Ka.tmpdir(),`${f.nameLower}-verify-signing-`));try{let n=ue.join(t,"certificate.p12");J.writeFileSync(n,Buffer.from(e.certificateBase64,"base64"),{mode:384});let r=[...new Set([e.storedPassword||"","",f.keychainPassword])],i;for(let o of r)try{let s=Ss(n,o);for(let a=0;a<e.profiles.length;a++){let l=ue.join(t,`profile-${a}.mobileprovision`);J.writeFileSync(l,Buffer.from(e.profiles[a].profileBase64,"base64"),{mode:384}),Es(s,bs(l))}return o}catch(s){i=s instanceof Error?s:new Error(String(s))}throw i||new Error("Could not verify the iOS signing certificate.")}finally{try{J.rmSync(t,{recursive:!0,force:!0})}catch{}}},Sf=async e=>{let{projectId:t,signingTargets:n,distributionType:r,teamId:i,projectSecrets:o}=e,s=new Map,a=[];for(let g of n){I.info(_.dim(` Credential target: bundle ${g.bundleIdentifier} (${r})`));let h=await w.get("/credentials/resolve",{params:{projectId:t,platform:"ios",bundleId:g.bundleIdentifier,distributionType:r,teamId:i}}),y=h.data.status==="success"&&Array.isArray(h.data.credentials)?h.data.credentials:[];s.set(g.bundleIdentifier,y),a.push(...y)}let l=[],c=[],d=new Map,u=[];for(let g of n){let h=oo((s.get(g.bundleIdentifier)||[]).filter(b=>b.type==="ios_profile"&&io(b,r,"ios")&&Za(b,g.bundleIdentifier)),g.bundleIdentifier,r,"ios"),y;for(let b of h)if(!(!b.downloadUrl&&!pt(b)))try{let v=await ro(b,t);if(!hf(v,g.bundleIdentifier)){let E=Qa(v)||"unknown";throw new Error(`expected ${g.bundleIdentifier}, found ${E}`)}y=v,d.set(g.bundleIdentifier,b),I.info(_.dim(` - Resolved ${b.name||"provisioning profile"} for ${g.bundleIdentifier}`));break}catch(v){l.push(`${b.name||pt(b)||g.bundleIdentifier}: ${v.message}`)}if(!y){u.push(g.bundleIdentifier);continue}c.push({...g,profileBase64:y})}let p=new Set,m=c.map(g=>yf(d.get(g.bundleIdentifier))).filter(g=>g.length>0),A=oo(a.filter(g=>{if(g.type!=="ios_cert"||!io(g,r,"ios"))return!1;let h=pt(g)||`${g.name||"certificate"}:${g.createdAt||""}`;if(p.has(h))return!1;p.add(h);let y=Af(g);return!(y&&m.length>0&&!m.every(b=>b.includes(y)))}),n[0]?.bundleIdentifier,r,"ios");for(let g of A)if(!(!g.downloadUrl&&!pt(g)))try{let h=await ro(g,t),y=c.length>0?bf({certificateBase64:h,storedPassword:g.password,profiles:c}):g.password||"";o.IOS_DIST_P12=h,o.IOS_P12_PASSWORD=y,I.info(_.dim(` - Verified ${g.name||"Apple signing certificate"} against ${c.length||1} provisioning profile${c.length===1?"":"s"}`));break}catch(h){l.push(`${g.name||pt(g)||"iOS certificate"}: ${h.message}`)}if(c.length>0){let g=c.find(h=>h.isMainApplication)||c[0];o.IOS_PROVISIONING_PROFILE=g.profileBase64,n.length>1&&c.length===n.length&&(o.IOS_PROVISIONING_PROFILES=ys(c))}return{missingProfileBundleIds:u,failures:l}},Dr=async e=>{if(e.failOnly){(!e.projectId||!e.buildId)&&(I.error(_.red("--project-id and --build-id are required with --fail-only.")),process.exit(1));let c=e.error||"Build runner failed before it could report a final status.";try{await w.patch(`/builds/${e.projectId}/${e.buildId}`,{status:"failed",error:c,endTime:Date.now()}),I.info(_.yellow(`Marked build ${e.buildId} as failed.`));return}catch(d){I.error(_.red(`Could not mark build failed: ${d.message}`)),process.exit(1)}}await nf(e),await Qp(e),e.platform!=="android"&&e.platform!=="ios"&&e.platform!=="web"&&(I.error(`Platform ${e.platform} is not supported. Use 'android', 'ios', or 'web'.`),process.exit(1)),e.platform==="web"&&e.framework&&e.framework!=="flutter"&&(I.error(_.red("Web builds are available only for Flutter projects.")),process.exit(1)),e.platform==="web"&&(e.autoSubmit||e.maestro)&&(I.error(_.red("Flutter web artifacts cannot use store auto-submit or managed Maestro mobile tests.")),process.exit(1)),e.autoSubmit&&e.platform==="ios"&&e.simulator&&(I.error(_.red("--auto-submit cannot be used with --simulator because simulator builds are not App Store artifacts.")),process.exit(1)),e.autoSubmit&&e.dryRun&&I.warn(_.yellow("--auto-submit is ignored during --dry-run."));let t=to(),n=e.buildId||zp(),r=e.projectId,i=Date.now(),o=!!r,s=!0,a=async c=>{if(r)try{await w.patch(`/builds/${r}/${n}`,{status:"failed",error:c,endTime:Date.now()})}catch{}};if(e.local&&e.buildId&&r&&await xn("Mark isolated runner as building",()=>w.patch(`/builds/${r}/${n}`,{status:"building",runnerStartedAt:Date.now()})),e.local&&e.buildId){e.quiet||t.start(`Preparing isolated workspace for build: ${e.buildId}`);try{let c=await w.get(`/builds/${r}/${e.buildId}/source-url`);if(c.data.status!=="success")throw new Error("Failed to get source download URL from API");no("SOURCE_DOWNLOAD",c.data.downloadUrl);let d=await $r.get(c.data.downloadUrl,{responseType:"stream"}),u=(r||e.projectId||"default").replace(/[^a-zA-Z0-9-_]/g,"_"),p=ue.join(Ka.homedir(),f.workspacesDir,u);J.mkdirSync(p,{recursive:!0});let m=new Set(["node_modules",`.${f.nameLower}-cache-meta`]),A=new Set(["Pods"]);if(J.existsSync(p)){let v=J.readdirSync(p);for(let E of v){if(m.has(E))continue;if(E==="ios"){let F=ue.join(p,"ios");try{let B=J.readdirSync(F);for(let H of B)if(!A.has(H))try{J.rmSync(ue.join(F,H),{recursive:!0,force:!0})}catch{}}catch{}continue}let L=ue.join(p,E);try{J.rmSync(L,{recursive:!0,force:!0})}catch{}}}let g=ue.join(p,"source.zip"),h=d.data,y=J.createWriteStream(g);await new Promise((v,E)=>{h.pipe(y),h.on("error",L=>E(L)),y.on("finish",()=>v())}),new ka(g).extractAllTo(p,!0);try{J.unlinkSync(g)}catch{}process.chdir(p),I.info(_.green(`\u2713 Persistent workspace ready: ${p}`)),I.info(_.dim(` \u{1F4E6} Cached dirs preserved: node_modules=${J.existsSync(ue.join(p,"node_modules"))?"\u2705":"\u274C"}, Pods=${J.existsSync(ue.join(p,"ios","Pods"))?"\u2705":"\u274C"}`)),t.stop()}catch(c){t.stop(`Failed to prepare isolated workspace: ${c.message}`),r&&await a(`Setup Error: ${c.message}`),process.exit(1)}}try{let c=e.repo;if(!c)try{c=Ca("git config --get remote.origin.url").toString().trim()}catch{I.warn("Could not detect git repository URL.")}!c&&e.dryRun,c||(c="https://github.com/placeholder/repo.git"),I.info(`Build ID: ${_.cyan(n)}`);let d={},u={},p=null,m=[],A=[],g=re(`./${f.configFileName}`);if(g||(I.error(_.red(`${f.configFileName} not found. Run \`${f.nameLower} init\` or \`${f.nameLower} link\` first.`)),process.exit(1)),g){p=g;let S=Yt(g);e.framework=S,r=g.projectId;let $=e.local&&e.buildId?process.env.MACH_APP_DIRECTORY:void 0,R=Ie(process.cwd(),$||g.appDirectory,{requireAppDirectory:!0});e.appDirectory=R.appDirectory,$&&process.env.MACH_DEBUG&&I.info(_.dim(`Runner app directory: ${e.appDirectory}`)),ms(R,S,e.platform);let O=e.buildProfile||"production",N=ce(g,O);!N&&e.buildProfile&&(I.error(`Build profile '${O}' not found in ${f.configFileName}`),process.exit(1));let D=N||{};D.distribution||(I.warn(_.yellow(`Build profile "${O}" has no distribution. Defaulting to internal. Profile names do not control build behavior.`)),D.distribution="internal"),process.env.MACH_DEBUG&&I.info(_.dim(`Framework: ${S} | Build profile: ${O} | Platform: ${e.platform} | Distribution: ${D.distribution||"store"} | Environment: ${D.environment||O}`)),D.env&&(u=D.env,I.info(_.blue(`Use Build Profile: ${O}`)));let M=e.platform,z=D[M]||{},ne=["developmentClient","simulator","distribution","buildCommand","apk","iosScheme","preBuild","postBuild","scheme","environment","androidPackage","iosBundleIdentifier","name","iosDeploymentTarget","iosApiKeyId","iosApiKeyIssuer","iosApiKeyPath","iosTeamId","iosConfiguration","iosExportMethod","branch","repo","instanceType","ami","bucket","region","nodeVersion"];e.name=g.name,e.appName=g.name,e.androidPackage=g.android?.package,e.iosBundleIdentifier=g.ios?.bundleIdentifier,e.iosScheme=g.ios?.iosScheme,!e.nodeVersion&&g.nodeVersion&&(e.nodeVersion=g.nodeVersion);let Ne=j=>j==="androidPackage"?z.androidPackage??z.package??D.androidPackage??D.android?.package:j==="iosBundleIdentifier"?z.iosBundleIdentifier??z.bundleIdentifier??D.iosBundleIdentifier??D.ios?.bundleIdentifier:z[j]!==void 0?z[j]:D[j];for(let j of ne){let Ae=Ne(j),Nt=j==="androidPackage"||j==="iosBundleIdentifier";Ae!==void 0&&(e[j]===void 0||Nt)&&(e[j]=Ae)}if(S==="flutter"){let j=Jt(g,D,e.platform);Zt(R.appRoot,O,D,e.platform);let Ae=Ye(R.appRoot),Nt=It();if(e.flutterFlavor=e.flutterFlavor||j.flavor||Ae.defaultFlavor,e.flutterTarget=e.flutterTarget||Et(j.target),e.flutterMode=e.flutterMode||Xt(j,e),e.flutterDartDefinesFromEnv=e.flutterDartDefinesFromEnv||j.dartDefinesFromEnv,e.flutterObfuscate=e.flutterObfuscate??j.obfuscate??!1,e.flutterSplitDebugInfo=e.flutterSplitDebugInfo??j.splitDebugInfo??e.flutterObfuscate,e.flutterObfuscate||e.flutterSplitDebugInfo){if(e.platform==="web")throw new Error(`build.${O}.flutter obfuscation/splitDebugInfo is not supported for Flutter web.`);if(e.flutterMode!=="release")throw new Error(`build.${O}.flutter obfuscation/splitDebugInfo requires mode "release".`);e.flutterSplitDebugInfoPath=ue.join(R.appRoot,".mach","symbols",e.buildId||n,e.platform)}if(e.flutterSdkVersion=ls(e.flutterSdkVersion||g.flutter?.sdkVersion||Nt.flutter),e.dartVersion=e.dartVersion||Nt.dart,e.appVersion=Ae.version||"1.0.0",e.platform==="ios"&&e.flutterFlavor&&!e.iosScheme&&(e.iosScheme=e.flutterFlavor),!e.iosConfiguration){let ts=e.flutterMode==="debug"?"Debug":e.flutterMode==="profile"?"Profile":"Release";e.iosConfiguration=e.flutterFlavor?`${ts}-${e.flutterFlavor}`:ts}}if(e.platform==="ios"&&!(z.iosBundleIdentifier??z.bundleIdentifier??D.iosBundleIdentifier??D.ios?.bundleIdentifier)){let Ae=pf(e,O);Ae&&Ae!==e.iosBundleIdentifier&&(I.warn(_.yellow(`Detected native iOS bundle identifier ${Ae}; using it for credential lookup. Set build.${O}.ios.bundleIdentifier to make this explicit.`)),e.iosBundleIdentifier=Ae)}e.branch=e.branch||"main",e.iosConfiguration=e.iosConfiguration||(e.developmentClient?"Debug":"Release"),e.sshUser=e.sshUser||process.env.USER||"ubuntu",e.simulator===void 0&&(e.simulator=!1),e.local===void 0&&(e.local=!1),e.verbose===void 0&&(e.verbose=!1),I.info(_.dim(`Resolved build config: framework=${S}, appDirectory=${e.appDirectory}, profile=${O}, platform=${e.platform}, simulator=${e.platform==="ios"?String(!!e.simulator):"n/a"}, developmentClient=${String(!!e.developmentClient)}, distribution=${e.distribution||D.distribution||"store"}, iosConfiguration=${e.platform==="ios"?e.iosConfiguration||"Release":"n/a"}`+(S==="flutter"?`, flutterFlavor=${e.flutterFlavor||"default"}, flutterTarget=${e.flutterTarget}, flutterMode=${e.flutterMode}`:"")));let We=j=>{if(!j)return j;if(j.startsWith("scripts.")){let Ae=j.split(".")[1],Nt=g.scripts?.[Ae];if(Nt)return Nt;I.warn(`Script reference not found: ${j}`)}return j};if(e.buildCommand=We(e.buildCommand),e.preBuild=We(e.preBuild),e.postBuild=We(e.postBuild),!e.scheme&&g.scheme&&(e.scheme=g.scheme),e.platform==="ios"&&!e.simulator&&e.iosBundleIdentifier&&(m=As({config:g,resolvedProfile:D,framework:S,appRoot:R.appRoot,mainBundleIdentifier:e.iosBundleIdentifier,mainTargetName:e.iosScheme||e.scheme||g.scheme}),m.length>1)){I.info(_.magenta(`\u2713 Detected ${m.length} signed iOS targets:`));for(let j of m)I.info(_.dim(` - ${j.targetName||(j.isMainApplication?"main application":"extension")}: ${j.bundleIdentifier}`))}let bt={...qt(g,f.envPrefix),...qt(D,`${f.envPrefix}PROFILE_`)};if(d={...d,...u,...bt},process.env.IOS_P12_PASSWORD&&!d.IOS_P12_PASSWORD&&(d.IOS_P12_PASSWORD=process.env.IOS_P12_PASSWORD),process.env.MATCH_PASSWORD&&!d.MATCH_PASSWORD&&(d.MATCH_PASSWORD=process.env.MATCH_PASSWORD),e.platform==="ios"){if(!e.iosTeamId&&D.ios?.appleTeamId&&(e.iosTeamId=D.ios.appleTeamId),!e.iosTeamId&&g.submit?.[O]?.ios?.appleTeamId&&(e.iosTeamId=g.submit[O].ios.appleTeamId),!e.iosTeamId){let j=K(g,"store",O),Ae=lt(g,j);Ae.teamId&&(I.warn(_.yellow(`Using the iOS Team ID configured for store profile '${j}'.`)),e.iosTeamId=Ae.teamId)}e.iosTeamId?I.info(_.magenta(`\u2713 Injected iOS Team ID from config: ${e.iosTeamId}`)):e.simulator||I.warn(_.yellow("\u26A0\uFE0F No iOS Team ID found. Device or archive signing may fail unless managed iOS credentials provide the team automatically."))}}let h="unknown";try{h=Ca("git rev-parse --abbrev-ref HEAD").toString().trim()}catch{I.warn("Failed to detect git branch.")}let y="1.0.0";try{if(e.framework==="flutter"){let S=Ie(process.cwd(),e.appDirectory);y=Ye(S.appRoot).version||"1.0.0",e.appVersion=y}else J.existsSync("./package.json")&&(y=JSON.parse(J.readFileSync("./package.json","utf-8")).version||"1.0.0")}catch{}let b=e.buildProfile||"production",v=e.framework==="flutter"?y:_n(g,{framework:e.framework,platform:e.platform==="web"?void 0:e.platform}),E="Internal";e.developmentClient?E="DevelopmentClient":e.distribution==="store"?E="Store":e.distribution==="development"&&(E="Development");let L=e.platform==="ios"?"iOS":e.platform==="android"?"Android":"Web",F=e.platform==="ios"&&e.simulator?" (Simulator)":"",B=`${L}${F} v${y} (${E})`;if(Ln(e,{status:"created",projectId:r,buildId:n,platform:e.platform,profile:b,branch:h,version:y,runtimeVersion:v,...Nn(e),buildType:E,developmentClient:!!e.developmentClient,summary:B}),r){try{let S=e.buildProfile||"production",$=e.environment||S;I.info(_.blue(`Fetching managed secrets for profile: ${S} (environment: ${$})...`));let O=(await w.get(`/projects/${r}/secrets/export?env=${$}`)).data;O.status==="success"&&O.secrets&&(d={...d,...O.secrets},Object.keys(O.secrets).length>0&&I.info(_.magenta(`\u2713 Injected ${Object.keys(O.secrets).length} secrets from Dashboard.`)))}catch(S){I.warn(`Failed to load managed secrets from Dashboard: ${S.message}`)}if(e.platform==="ios"){let S=e.buildProfile||"production",$=ce(g,S)||{},R=df(g,$),O=Ai(R),N=e.distribution!==void 0?e.distribution==="store":E==="Store",D=R===void 0&&N,M=e.autoVersion||O||D,z=yi(e.resolvedBuildNumber,R,M,!e.simulator);if(z.kind==="persisted"){let ne=mr(e,d,z.value,"saved MACH build record");I.info(_.green(`\u2713 Reusing assigned iOS buildNumber ${ne}`))}else if(z.kind==="explicit"){let ne=mr(e,d,z.value,`${f.configFileName} (${S})`);I.info(_.green(`\u2713 Using configured iOS buildNumber ${ne}`))}else if(z.kind==="auto"){t.start("Assigning iOS buildNumber from Mach counter...");try{let ne=Fa("ios",e,g,S),Ne=await Ua(r,"ios",ne);mr(e,d,Ne,"MACH version counter"),t.stop(`\u2713 Assigned iOS buildNumber ${_.green(Ne)} (${ne})`)}catch(ne){throw t.stop("iOS buildNumber assignment failed"),new Error(`Auto-versioning failed: ${ne.response?.data?.message||ne.message}`)}}}if(e.platform==="android"){let S=e.buildProfile||"production",$=ce(g,S)||{},R=cf(g,$),O=Ai(R),N=e.distribution!==void 0?e.distribution==="store":E==="Store",D=R===void 0&&N,M=e.autoVersion||O||D,z=yi(e.resolvedVersionCode,R,M);if(z.kind==="persisted"){let ne=gr(e,d,z.value,"saved MACH build record");I.info(_.green(`\u2713 Reusing assigned Android versionCode ${ne}`))}else if(z.kind==="explicit"){let ne=gr(e,d,z.value,`${f.configFileName} (${S})`);I.info(_.green(`\u2713 Using configured Android versionCode ${ne}`))}else if(z.kind==="auto"){t.start("Assigning Android versionCode from Mach counter...");try{let ne=Fa("android",e,g,S),Ne=await Ua(r,"android",ne);gr(e,d,Ne,"MACH version counter"),t.stop(`\u2713 Assigned Android versionCode ${_.green(Ne)} (${ne})`)}catch(ne){throw t.stop("Android versionCode assignment failed"),new Error(`Auto-versioning failed: ${ne.response?.data?.message||ne.message}`)}}}if(e.platform==="ios"&&e.simulator)I.info(_.dim("Skipping managed iOS signing credentials for simulator build."));else try{e.platform==="web"?I.info(_.dim("Skipping managed signing credentials for Flutter web build.")):I.info(_.blue("Fetching managed credentials..."));let S=Ja(e,b),$=e.platform==="ios"?e.iosBundleIdentifier:e.androidPackage;if(e.platform==="ios"){let R=m.length>0?m:[{targetName:e.iosScheme||e.scheme,bundleIdentifier:e.iosBundleIdentifier,isMainApplication:!0}],O=await Sf({projectId:r,signingTargets:R,distributionType:S,teamId:e.iosTeamId,projectSecrets:d});if(A=O.missingProfileBundleIds,O.failures.length>0&&(!d.IOS_DIST_P12||A.length>0))throw new Error(`Credential setup failed:
|
|
2134
2158
|
${O.failures.map(N=>`- ${N}`).join(`
|
|
2135
|
-
`)}`);O.failures.length>0&&I.warn(_.dim(` Skipped ${O.failures.length} stale or unusable credential(s).`))}else if(e.platform==="android"){I.info(_.dim(` Credential target: package ${$||"not set"} (${
|
|
2136
|
-
${D.map(
|
|
2137
|
-
`)}`)}if(v=e.framework==="flutter"?
|
|
2138
|
-
\u{1F517} Download Links:`));for(let N of O)I.info(_.dim(` - ${N.name}: `)+_.blue.underline(N.url));await xn("Finalize build in dashboard",()=>
|
|
2139
|
-
\u2713 Build completed and reported to dashboard.`)),e.maestro&&!
|
|
2140
|
-
${D}`)),await $(D),new Error(D)}}else if(r){let
|
|
2159
|
+
`)}`);O.failures.length>0&&I.warn(_.dim(` Skipped ${O.failures.length} stale or unusable credential(s).`))}else if(e.platform==="android"){I.info(_.dim(` Credential target: package ${$||"not set"} (${S})`));let R=await w.get("/credentials/resolve",{params:{projectId:r,platform:e.platform,bundleId:$,distributionType:S}}),O=R.data.status==="success"&&Array.isArray(R.data.credentials)?R.data.credentials:[],N=oo(O.filter(M=>ff(M,$)),$,S,e.platform),D=[];for(let M of N)if(!(d.ANDROID_KEYSTORE_BASE64||!M.downloadUrl&&!pt(M)))try{if(!io(M,S,"android")){let We=M.distributionType||M.meta?.distributionType||"unlabelled";I.info(_.dim(` - Reusing Android signing keystore labelled ${We} for ${S} (${$||"package not set"})`))}d.ANDROID_KEYSTORE_BASE64=await ro(M,r);let z=M.keystorePassword||M.password,ne=M.keyPassword||M.keystorePassword||M.password,Ne=M.alias||M.meta?.alias;if(z&&(d.ANDROID_STORE_PASSWORD=z),ne&&(d.ANDROID_KEY_PASSWORD=ne),Ne&&(d.ANDROID_KEY_ALIAS=Ne),!d.ANDROID_STORE_PASSWORD){let j=["ANDROID_STORE_PASSWORD",...[S==="store"?"PRODUCTION":"STAGING",S.toUpperCase(),"PRODUCTION","STORE","INTERNAL","STAGING","RELEASE","DEBUG"].map(Ae=>`KEYSTORE_PASSWORD_${Ae}`),"KEYSTORE_PASSWORD"].find(Ae=>!!d[Ae]);j&&(d.ANDROID_STORE_PASSWORD=d[j])}if(d.ANDROID_KEY_PASSWORD||(d.ANDROID_KEY_PASSWORD=d.ANDROID_STORE_PASSWORD||""),!d.ANDROID_KEY_ALIAS){let We=["ANDROID_KEY_ALIAS","KEYSTORE_ALIAS"].find(bt=>!!d[bt]);We&&(d.ANDROID_KEY_ALIAS=d[We])}I.info(_.dim(` - Injected ${M.name} as ANDROID_KEYSTORE_BASE64`))}catch(z){D.push(`${M.name||M.type}: ${z.message}`)}if(D.length>0&&!d.ANDROID_KEYSTORE_BASE64)throw new Error(`Credential setup failed:
|
|
2160
|
+
${D.map(M=>`- ${M}`).join(`
|
|
2161
|
+
`)}`)}if(v=e.framework==="flutter"?y:_n(g,{framework:e.framework,platform:e.platform,iosBuildNumber:e.resolvedBuildNumber||d.BUILD_NUMBER,androidVersionCode:e.resolvedVersionCode||d.ANDROID_VERSION_CODE}),g.ota?.enabled)if(e.framework==="flutter"){if(g.ota.engine!=="shorebird")throw new Error("Flutter OTA must use the shorebird engine. Run `mach ota setup --engine shorebird`.");if(!J.existsSync(ue.join(Ie(process.cwd(),e.appDirectory).appRoot,"shorebird.yaml")))throw new Error("Flutter OTA is enabled but shorebird.yaml is missing. Run `mach ota setup`.")}else{if(g.ota.engine==="mach-react-native")throw new Error("This project still uses the unfinished mach-react-native OTA engine. Run `mach ota setup` to migrate to expo-updates before building.");if(!g.ota.url)throw new Error("OTA is enabled but ota.url is missing. Run `mach ota setup` before building.");let R=gs(g,u);if(e.framework==="expo"){let O=In(process.cwd(),{platform:e.platform,runtimeVersion:v,channel:R,url:g.ota.url}),N=hs(O,{runtimeVersion:v,channel:R,url:g.ota.url});if(N.length>0){let D=J.existsSync(ue.join(process.cwd(),"node_modules",".bin","expo")),M=J.existsSync(ue.join(process.cwd(),"node_modules","@radhya","mach","expo-plugin","index.js"));if(!mf(e,D,M))throw new Error(`Expo OTA configuration mismatch: ${N.join("; ")}. Run \`${f.nameLower} ota setup\` to update the local Expo plugin before building.`);I.info(_.dim("Deferring Expo OTA validation until dependencies are installed on the build runner."))}}d.MACH_OTA_RUNTIME_VERSION=v,d.MACH_OTA_CHANNEL=R,d.MACH_OTA_URL=g.ota.url}if(e.platform==="ios"&&!e.simulator){let R=!!d.IOS_DIST_P12,O=!!d.IOS_PROVISIONING_PROFILE,N=m.length>1,D=N?!!d.IOS_PROVISIONING_PROFILES&&A.length===0:O;if(!R||!D){let M=Xp({distributionType:S,missingCertificate:!R,missingProfileBundleIds:A,buildProfile:b});if(e.local&&e.buildId)throw new Error(M);I.error(_.red(M)),e.quiet&&process.exit(1),N&&!D&&process.exit(1);let z=e.yes||await Pa({message:"Would you like to generate these credentials now?",initialValue:!0});if(z&&!wr(z))return await vn({platform:"ios",profile:b}),e.quiet||I.info(_.green("\u2713 Credentials setup complete! Restarting build phase...")),Dr(e);e.quiet||I.info(_.yellow(`Run \`${f.nameLower} credentials\` to set up signing credentials manually.`)),process.exit(1)}}if(e.platform==="android"&&!e.developmentClient&&(e.distribution==="internal"||e.distribution==="store")&&!(!!d.ANDROID_KEYSTORE_BASE64||!!d.ANDROID_KEYSTORE)){I.error(_.red("Missing Android credentials: Signing Keystore")),e.quiet&&process.exit(1);let O=e.yes||await Pa({message:"Would you like to automatically create and upload an Android Keystore for this profile now?",initialValue:!0});if(O&&!wr(O))return await vn({platform:"android",profile:b}),e.quiet||I.info(_.green("\u2713 Android Keystore setup complete! Restarting build phase...")),Dr(e);e.quiet||I.info(_.yellow(`Run \`${f.nameLower} credentials --platform android\` to set up a signing keystore manually.`)),process.exit(1)}}catch(S){if(String(S.message||"").startsWith("Credential download failed")||String(S.message||"").startsWith("Credential setup failed")||String(S.message||"").startsWith("Missing iOS credentials")||String(S.message||"").startsWith("Auto-versioning failed"))throw I.error(_.red(S.message)),S;e.platform==="ios"&&e.local&&e.buildId&&(I.error(_.red(`Failed to resolve iOS credentials: ${S.message}`)),process.exit(1)),I.warn(`Failed to resolve credentials: ${S.message}`)}}let H=!!(e.local&&e.buildId),Z=!!(e.local||e.sshHost),ie=!Z&&!H;if(H){I.info(_.magenta("\u{1F3D7}\uFE0F Runner Mode: Executing isolated build task..."));let S=await Si({...e,interactive:!1},n,d,r,{branch:h,version:y,runtimeVersion:v,summary:B,buildType:E,isolatedRunner:!0});await Pe(S),s=!1,process.exit(0)}async function Pe(S){let $=async R=>{if(r)try{await xn("Report failed build status",()=>w.patch(`/builds/${r}/${n}`,{status:"failed",error:R,endTime:Date.now()}),3)}catch(O){I.warn(_.yellow(`Could not report failed build status: ${O.message}`))}};if(r&&S.length>0){let R=to(),O=[];e.quiet||R.start("Uploading artifacts to Dashboard...");try{for(let N of S){let D=ue.basename(N),M=J.statSync(N).size,z=ue.extname(D).toLowerCase(),Ne=z===".zip"?"application/zip":"application/octet-stream",We=D.endsWith("flutter-web.zip")?"web-zip":D.endsWith("flutter-symbols.zip")?"debug-symbols":z.substring(1),bt=await xn(`Create artifact upload URL for ${D}`,()=>w.post(`/builds/${r}/${n}/artifact-upload-url`,{fileName:D,fileType:Ne}));if(bt.data.status!=="success")throw new Error(`Failed to get upload URL for ${D}`);await sf(N,bt.data.uploadUrl,Ne),O.push({name:D,url:bt.data.downloadUrl,size:M,type:We})}e.quiet||R.stop("Artifacts uploaded.")}catch(N){e.quiet||R.stop("Failed to upload artifacts.");let D=`Artifact upload failed: ${N.message}`;throw I.error(_.red(D)),await $(D),new Error(D)}if(r&&O.length>0)try{I.info(_.cyan(`
|
|
2162
|
+
\u{1F517} Download Links:`));for(let N of O)I.info(_.dim(` - ${N.name}: `)+_.blue.underline(N.url));await xn("Finalize build in dashboard",()=>w.patch(`/builds/${r}/${n}`,{status:"success",artifacts:O,endTime:Date.now(),runtimeVersion:v,...Nn(e),...eo(e,b)})),Ln(e,{status:"success",projectId:r,buildId:n,platform:e.platform,profile:b,branch:h,version:y,runtimeVersion:v,...Nn(e),buildType:E,developmentClient:!!e.developmentClient,summary:B,artifacts:O}),I.success(_.green(`
|
|
2163
|
+
\u2713 Build completed and reported to dashboard.`)),e.maestro&&!H&&await ja(r,n,e,b),e.autoSubmit&&!H&&await Qi(r,n,e,b)}catch(N){let D=`Build artifact uploaded but dashboard finalization failed: ${N.message}`;throw I.error(_.red(`
|
|
2164
|
+
${D}`)),await $(D),new Error(D)}}else if(r){let R="Build completed but produced no uploadable artifacts.";throw I.error(_.red(R)),await $(R),new Error(R)}}if(Z){if(I.info(_.cyan(`\u{1F680} Direct Build Mode: Executing on ${e.sshHost||"local"}...`)),r&&!o){let S=process.argv.slice(3).join(" ");await w.post("/builds",{projectId:r,buildId:n,platform:e.platform,status:"building",branch:h,version:y,runtimeVersion:v,...Nn(e),summary:B,startTime:i,buildType:E,buildProfile:b,buildArgs:S,framework:e.framework,appDirectory:e.appDirectory,simulator:!!e.simulator,developmentClient:!!e.developmentClient,...eo(e,b),...Ga(e,n,b,p)}),Va(e)}if(e.sshHost&&e.platform==="ios")await js(e,n,d,r),s=!1,e.autoSubmit&&await Qi(r,n,e,b);else{let S=await Si({...e,interactive:!!e.local},n,d,r,{branch:h,version:y,runtimeVersion:v,summary:B,buildType:E,isolatedRunner:!1});await Pe(S),s=!1}return}if(ie&&(I.info(_.blue("\u{1F6F0}\uFE0F Cloud Initiator Mode: Preparing orchestration...")),!e.dryRun)){e.quiet||t.start("Zipping and uploading local source...");let S=await w.post("/builds/source-upload-url",{projectId:r,buildId:n});if(S.data.status!=="success")throw t.stop("Failed to get upload URL."),new Error("Failed to get source upload URL from API");no("SOURCE_UPLOAD",S.data.uploadUrl);let $=new ka,R=wa($,process.cwd(),e.platform,e.appDirectory),O=$.toBuffer();if(!e.quiet){let D=R.skipped.length>0?` Skipped: ${R.skipped.join(", ")}.`:"";t.message(`Prepared source (${R.files} files).${D}`)}e.quiet||t.message(`Uploading source (${(O.length/1024/1024).toFixed(1)} MB)...`);let N=!1;for(let D=1;D<=3;D++)try{await $r.put(S.data.uploadUrl,O,{headers:{"Content-Type":"application/zip"},maxBodyLength:1/0,maxContentLength:1/0,timeout:12e4}),N=!0;break}catch(M){if(D<3)t.message(`Upload attempt ${D} failed (${M.code||M.message}), retrying...`),await new Promise(z=>setTimeout(z,2e3*D));else throw M}if(e.quiet||t.stop("Source uploaded"),r){let D=process.argv.slice(3).join(" ");s=e.platform==="android"||e.platform==="web",await w.post("/builds",{projectId:r,buildId:n,platform:e.platform,status:"pending",branch:h,version:y,runtimeVersion:v,...Nn(e),summary:B,startTime:i,buildType:E,buildProfile:b,buildArgs:D,framework:e.framework,appDirectory:e.appDirectory,simulator:!!e.simulator,developmentClient:!!e.developmentClient,...eo(e,b),...Ga(e,n,b,p)}),s=e.platform==="android"||e.platform==="web",I.info(_.green("\u2713 Cloud build registered.")),Va(e)}(e.platform==="android"||e.platform==="web")&&(await Bs(e,n,d,r,e.preBuild),s=!1),e.quiet||I.info(_.cyan("\u{1F4E1} Connecting to build stream...")),await _f(r,n,e),e.maestro&&await ja(r,n,e,b),e.autoSubmit&&await Qi(r,n,e,b);return}}catch(c){let d=c.message||"Build failed";c.response?.data?.message?d=c.response.data.message:c.message.includes("status code 402")?d="Insufficient wallet balance. Please add credits in the Dashboard.":c.message.includes("status code 403")&&(d="Monthly build quota exceeded. Upgrade your plan in the Dashboard."),r&&s&&await a(d),I.error(_.red(`\u2717 Build failed: ${d}`)),process.exit(1)}};async function ja(e,t,n,r){I.info(_.cyan(`
|
|
2141
2165
|
\u{1F3BC} Queuing managed Maestro test...`)),await ki({projectId:e,buildId:t,platform:n.platform,profile:r,maestroFlows:n.maestroFlows,maestroDevice:n.maestroDevice,maestroRetries:n.maestroRetries,maestroRecord:n.maestroRecord,maestroUseBuildSource:n.maestroUseBuildSource,maestroEnv:n.maestroEnv,quiet:n.quiet})}async function Qi(e,t,n,r){if(!e){I.error(_.red("Auto-submit requires a linked Mach project. Run `mach link` or pass --project-id.")),process.exitCode=1;return}I.info(_.cyan(`
|
|
2142
|
-
Auto-submit: submitting the successful build...`));try{let i=await
|
|
2143
|
-
\u2717 Build runner launch failed: ${
|
|
2144
|
-
\u2717 ${h?"Build cancelled":"Build failed"}: ${
|
|
2166
|
+
Auto-submit: submitting the successful build...`));try{let i=await Ef(e,t);if(i?.autoSubmit){let o=i.submissionId?`${nt}/submissions/${i.submissionId}?projectId=${encodeURIComponent(e)}`:void 0,s=String(i.status||"").toLowerCase(),a=String(i.autoSubmitStatus||"").toLowerCase(),l=i.submissionId||["success","completed","succeeded"].includes(s)||["starting","submitted","failed","skipped"].includes(a);if(i.submissionId?(I.info(_.green(`Auto-submit is already queued by Mach backend: ${i.submissionId}`)),I.info(_.dim(`Dashboard: ${o}`))):i.autoSubmitStatus==="failed"?I.warn(_.yellow(`Backend auto-submit failed: ${i.autoSubmitError||"Unknown error"}`)):l&&I.info(_.green("Auto-submit is registered with Mach backend; skipping local duplicate submit.")),l){$t(n,{status:i.autoSubmitStatus||"pending",projectId:e,submitId:i.submissionId,platform:n.platform,profile:r,buildId:t,dashboardUrl:o});return}}await Ir({platform:n.platform,profile:r,buildProfile:r,buildId:t,projectId:e,yes:n.yes,quiet:n.quiet,track:n.submitTrack,releaseStatus:n.submitReleaseStatus,rollout:n.submitRollout,changesNotSentForReview:n.submitChangesNotSentForReview,credentialId:n.submitCredentialId,packageName:n.androidPackage,jsonOutput:n.submitJsonOutput,submitArgs:el(n,t,r)})}catch(i){I.error(_.red(`Auto-submit failed: ${i.message||i}`)),process.exitCode=1}}function el(e,t,n){let r=["--platform",e.platform,"--profile",n,"--build-id",t];return e.submitTrack&&r.push("--track",String(e.submitTrack)),e.submitReleaseStatus&&r.push("--release-status",String(e.submitReleaseStatus)),e.submitRollout!==void 0&&r.push("--rollout",String(e.submitRollout)),e.submitChangesNotSentForReview&&r.push("--changes-not-sent-for-review"),e.submitCredentialId&&r.push("--credential-id",e.submitCredentialId),e.platform==="android"&&e.androidPackage&&r.push("--package-name",e.androidPackage),e.platform==="ios"&&e.iosBundleIdentifier&&r.push("--bundle-id",e.iosBundleIdentifier),e.submitJsonOutput&&r.push("--json-output",e.submitJsonOutput),r.join(" ")}async function Ef(e,t){try{let r=(await w.get(`/builds/${e}/${t}`)).data?.build;if(r?.autoSubmit)return r}catch(n){I.warn(_.dim(`Could not check backend auto-submit status: ${n.message}`))}return null}function ao(e){for(let t of Object.keys(e))e[t]===void 0&&delete e[t];return e}function eo(e,t){if(e.platform==="android"&&!e.androidPackage){let n=_t("android",e.appDirectory);n&&(e.androidPackage=n)}return ao({distribution:Ja(e,t),packageName:e.platform==="android"?e.androidPackage:void 0,bundleId:e.platform==="ios"?e.iosBundleIdentifier:void 0,appleTeamId:e.platform==="ios"?e.iosTeamId:void 0,developerTeamId:e.platform==="ios"?e.iosTeamId:void 0,flutterSdkVersion:e.framework==="flutter"?e.flutterSdkVersion:void 0,dartVersion:e.framework==="flutter"?e.dartVersion:void 0,flutterFlavor:e.framework==="flutter"?e.flutterFlavor:void 0,flutterTarget:e.framework==="flutter"?e.flutterTarget:void 0,flutterBuildMode:e.framework==="flutter"?e.flutterMode:void 0,flutterObfuscate:e.framework==="flutter"?e.flutterObfuscate:void 0,flutterSplitDebugInfo:e.framework==="flutter"?e.flutterSplitDebugInfo:void 0})}function If(e,t,n){let r=n?.submit?.[t]?.android||{},i=n?.submit?.production?.android||{},o=e.submitTrack||r.track||i.track,s=e.submitReleaseStatus||r.releaseStatus||i.releaseStatus,a=e.submitRollout??r.rollout??r.userFraction??r.rolloutFraction??i.rollout??i.userFraction??i.rolloutFraction,l=e.submitChangesNotSentForReview??r.changesNotSentForReview??r.changes_not_sent_for_review??i.changesNotSentForReview??i.changes_not_sent_for_review;return ao({track:o,releaseStatus:s,rollout:a,changesNotSentForReview:l===void 0?!1:l===!0||l==="true"||l==="1"})}function Ga(e,t,n,r){if(!e.autoSubmit||e.dryRun)return{};let i=e.platform==="android"?If(e,n,r):{};return{autoSubmit:!0,autoSubmitStatus:"pending",autoSubmitOptions:ao({platform:e.platform,profile:n,buildId:t,latest:!1,...i,credentialId:e.submitCredentialId,packageName:e.platform==="android"?e.androidPackage:void 0,bundleId:e.platform==="ios"?e.iosBundleIdentifier:void 0,submitArgs:el(e,t,n)})}}function Va(e){!e.autoSubmit||e.dryRun||e.quiet||(I.info(_.green("\u2713 Auto-submit has been registered with the build.")),I.info(_.dim(" You can close this terminal; submission will start after build success.")))}function za(e){return`${nt}/build/${e}`}function Ln(e,t){if(!e.jsonOutput)return;let n=ue.resolve(e.jsonOutput),r={...t,url:t.url||za(t.buildId),dashboardUrl:t.dashboardUrl||za(t.buildId),updatedAt:new Date().toISOString()};try{let i=ue.dirname(n);i&&i!=="."&&J.mkdirSync(i,{recursive:!0}),J.writeFileSync(n,JSON.stringify(r,null,2))}catch(i){I.warn(_.yellow(`Could not write build metadata JSON: ${i.message}`))}}async function _f(e,t,n){let i=to(),o="pending",s=0,a=0;for(n.quiet||i.start("Connecting to build stream...");;){try{let c=(await w.get(`/builds/${e}/${t}`)).data.build;if(c){o=c.status;let d=String(c.pipelineLaunchState||"").toLowerCase(),u=Number(c.pipelineLaunchClaimedAt),p=Number(c.pipelineLaunchDispatchStartedAt),m=d==="claimed"&&Number.isFinite(u)&&u>0&&Date.now()-u>=3e5,A=d==="dispatching"&&Number.isFinite(p)&&p>0&&Date.now()-p>=3e5;if(["","created","pending","queued"].includes(String(o||"").toLowerCase())&&(d==="retryable_failed"||d==="ambiguous"||m||A)){let h=A||d==="ambiguous"?"ambiguous":"retryable_failed",y=c.pipelineLaunchError||(h==="ambiguous"?"The iOS runner launch outcome is unknown. MACH blocked automatic relaunch to avoid a duplicate pipeline.":m?"The iOS runner was never dispatched before its launch lease expired. Retry this build.":"The iOS runner could not be launched. Retry this build.");n.quiet||i.stop("Build runner launch failed."),Ln(n,{status:"failed",projectId:e,buildId:t,platform:n.platform,profile:c.buildProfile,buildType:c.buildType,developmentClient:!!c.developmentClient,version:c.version,runtimeVersion:c.runtimeVersion,buildNumber:c.buildNumber,versionCode:c.versionCode,summary:c.summary,pipelineLaunchState:h,error:y,artifacts:c.artifacts||[]}),I.error(_.red(`
|
|
2167
|
+
\u2717 Build runner launch failed: ${y}`)),process.exit(1)}if(o==="building")n.quiet||i.message("Build in progress...");else if(o==="failed"||o==="error"||o==="cancelled"||o==="canceled"){let h=o==="cancelled"||o==="canceled";n.quiet||i.stop(h?"Build cancelled.":"Build failed.");let y=c.error||(h?"Build was cancelled.":"Unknown error");Ln(n,{status:o,projectId:e,buildId:t,platform:n.platform,profile:c.buildProfile,buildType:c.buildType,developmentClient:!!c.developmentClient,version:c.version,runtimeVersion:c.runtimeVersion,buildNumber:c.buildNumber,versionCode:c.versionCode,summary:c.summary,error:y,artifacts:c.artifacts||[]}),I.error(_.red(`
|
|
2168
|
+
\u2717 ${h?"Build cancelled":"Build failed"}: ${y}`)),process.exit(1)}else if(o==="completed"||o==="success"){n.quiet||i.stop("Build successful!"),Ln(n,{status:o,projectId:e,buildId:t,platform:n.platform,profile:c.buildProfile,buildType:c.buildType,developmentClient:!!c.developmentClient,version:c.version,runtimeVersion:c.runtimeVersion,buildNumber:c.buildNumber,versionCode:c.versionCode,summary:c.summary,artifacts:c.artifacts||[]}),I.success(_.green(`
|
|
2145
2169
|
\u2713 Build completed successfully!`));try{n.quiet||(I.info(_.magenta(`
|
|
2146
|
-
\u{1F4F1} Installation Hub:`)),I.info(_.dim(" - View & Install Build: ")+_.white.underline(`${nt}/build/${t}`)))}catch{}return}else if(o!=="pending"){n.quiet||i.stop(`Build status: ${o}`);return}}try{let d=await
|
|
2170
|
+
\u{1F4F1} Installation Hub:`)),I.info(_.dim(" - View & Install Build: ")+_.white.underline(`${nt}/build/${t}`)))}catch{}return}else if(o!=="pending"){n.quiet||i.stop(`Build status: ${o}`);return}}try{let d=await w.get(`/builds/${e}/${t}/logs`),u=typeof d.data=="string"?Oa(d.data):d.data;if(u&&typeof u=="string"&&!n.quiet){let p=u.split(`
|
|
2147
2171
|
`);if(p.length>s){for(let m=s;m<p.length;m++)p[m].trim()&&console.log(_.dim(` ${p[m]}`));s=p.length}}}catch{}a=0}catch{a++,a>10&&(i.stop("Connection lost."),I.error(_.red(`
|
|
2148
|
-
\u2717 Lost connection to Dashboard API.`)),process.exit(1))}await new Promise(l=>setTimeout(l,3e3))}}import*as xr from"http";import*as
|
|
2172
|
+
\u2717 Lost connection to Dashboard API.`)),process.exit(1))}await new Promise(l=>setTimeout(l,3e3))}}import*as xr from"http";import*as al from"net";import{execFile as vf,execFileSync as Pt,execSync as Cr,spawn as tl}from"child_process";import ae from"chalk";import{log as V}from"@clack/prompts";import Rf from"axios";import ee from"fs";import Je from"os";import G from"path";var ft=7070,Fn=`http://127.0.0.1:${ft}`,sn="com.radhya.mach.agent",on="Mach Agent",an=`${sn}.service`,$f=5e3,wf=3e3,Pr=null,Tr=null,Xe=()=>G.join(Je.homedir(),f.configDir),ll=()=>G.join(Je.homedir(),"Library","LaunchAgents"),kr=()=>G.join(ll(),`${sn}.plist`),dl=()=>G.join(Je.homedir(),".config","systemd","user"),co=()=>G.join(dl(),an),uo=()=>G.join(Xe(),"agent.cmd");function po(){return`gui/${process.getuid?.()||Number(Cr("id -u").toString().trim())}`}function cl(e){return e.replace(/&/g,"&").replace(/</g,"<").replace(/>/g,">").replace(/"/g,""").replace(/'/g,"'")}function Mn(e){return`<string>${cl(e)}</string>`}function fo(){let e=process.argv[1]?ee.realpathSync(process.argv[1]):"";if(!e||!ee.existsSync(e))throw new Error("Could not resolve the current Mach CLI entrypoint.");return[process.execPath,e,"agent","run"]}function mo(){let e=ul(),t=process.platform==="win32"?[process.env.SystemRoot?G.join(process.env.SystemRoot,"System32"):void 0,process.env.SystemRoot]:["/opt/homebrew/bin","/usr/local/bin","/usr/bin","/bin","/usr/sbin","/sbin"],n={HOME:Je.homedir(),PATH:[process.env.PATH,...e.flatMap(r=>[G.join(r,"platform-tools"),G.join(r,"emulator"),G.join(r,"cmdline-tools","latest","bin"),G.join(r,"tools","bin")]),...t].filter(Boolean).join(G.delimiter)};for(let r of["ANDROID_HOME","ANDROID_SDK_ROOT","JAVA_HOME","SHELL"])process.env[r]&&(n[r]=process.env[r]);return n}function ul(){let e=[process.env.ANDROID_HOME,process.env.ANDROID_SDK_ROOT];if(process.platform==="darwin")e.push(G.join(Je.homedir(),"Library","Android","sdk"));else if(process.platform==="linux")e.push(G.join(Je.homedir(),"Android","Sdk"),G.join(Je.homedir(),"Android","sdk"),"/opt/android-sdk","/usr/lib/android-sdk");else if(process.platform==="win32"){let t=process.env.LOCALAPPDATA,n=process.env.USERPROFILE||Je.homedir();e.push(t?G.join(t,"Android","Sdk"):void 0,G.join(n,"AppData","Local","Android","Sdk"))}return Array.from(new Set(e.filter(t=>!!t)))}function Of(e){return process.platform==="win32"&&!e.toLowerCase().endsWith(".exe")?`${e}.exe`:e}function pl(e,t){let n=Of(e);for(let r of ul()){let i=G.join(r,t,n);if(ee.existsSync(i))return i}return n}function fl(){return pl("adb","platform-tools")}function ml(){return pl("emulator","emulator")}function lo(e){return`"${e.replace(/\\/g,"\\\\").replace(/"/g,'\\"').replace(/%/g,"%%")}"`}function Df(){if(process.platform!=="linux")throw new Error("Linux service install requires Linux.");ee.mkdirSync(Xe(),{recursive:!0}),ee.mkdirSync(dl(),{recursive:!0});let e=fo(),t=mo(),n=Object.entries(t).map(([i,o])=>`Environment=${lo(`${i}=${o}`)}`).join(`
|
|
2149
2173
|
`),r=`[Unit]
|
|
2150
2174
|
Description=Mach local device agent
|
|
2151
2175
|
After=default.target
|
|
@@ -2162,12 +2186,12 @@ StandardError=append:%h/${f.configDir}/agent.error.log
|
|
|
2162
2186
|
|
|
2163
2187
|
[Install]
|
|
2164
2188
|
WantedBy=default.target
|
|
2165
|
-
`;return
|
|
2189
|
+
`;return ee.writeFileSync(co(),r),co()}function Dt(e,t={}){try{return Pt("systemctl",["--user",...e],{stdio:t.ignoreError?"ignore":"pipe"}),!0}catch(n){if(t.ignoreError)return!1;throw n}}function Pf(){if(process.platform!=="win32")throw new Error("Windows agent script requires Windows.");ee.mkdirSync(Xe(),{recursive:!0});let e=mo(),[t,n,...r]=fo(),i=G.join(Xe(),"agent.log"),o=G.join(Xe(),"agent.error.log"),s=Object.entries(e).map(([c,d])=>`set "${c}=${d}"`).join(`\r
|
|
2166
2190
|
`),a=r.map(c=>`"${c.replace(/"/g,'\\"')}"`).join(" "),l=`@echo off\r
|
|
2167
2191
|
${s}\r
|
|
2168
2192
|
cd /d "${Je.homedir()}"\r
|
|
2169
2193
|
"${t}" "${n}" ${a} >> "${i}" 2>> "${o}"\r
|
|
2170
|
-
`;return
|
|
2194
|
+
`;return ee.writeFileSync(uo(),l),uo()}function Un(e,t={}){try{return Pt("schtasks.exe",e,{stdio:t.ignoreError?"ignore":"pipe"}),!0}catch(n){if(t.ignoreError)return!1;throw n}}function Tf(){if(process.platform!=="darwin")throw new Error("Background agent install currently supports macOS only.");ee.mkdirSync(Xe(),{recursive:!0}),ee.mkdirSync(ll(),{recursive:!0});let e=fo(),t=mo(),n=G.join(Xe(),"agent.log"),r=G.join(Xe(),"agent.error.log"),i=Object.entries(t).map(([a,l])=>` <key>${cl(a)}</key>
|
|
2171
2195
|
${Mn(l)}`).join(`
|
|
2172
2196
|
`),o=e.map(a=>` ${Mn(a)}`).join(`
|
|
2173
2197
|
`),s=`<?xml version="1.0" encoding="UTF-8"?>
|
|
@@ -2192,23 +2216,23 @@ ${i}
|
|
|
2192
2216
|
${Mn(r)}
|
|
2193
2217
|
</dict>
|
|
2194
2218
|
</plist>
|
|
2195
|
-
`;return
|
|
2196
|
-
`).forEach(n=>{if(n.includes("List of devices")||!n.trim())return;let r=n.split(/\s+/);if(r.length<2||r[1]!=="device")return;let i=r[0],o=n.match(/model:([^\s]+)/);e.push({id:i,platform:"android",type:i.startsWith("emulator-")?"emulator":"physical",name:o?o[1].replace(/_/g," "):i,status:"online",details:n.trim()})})}catch{}try{let n=(await Nr(
|
|
2197
|
-
`).filter(i=>!!i.trim()),r=e.some(i=>i.platform==="android"&&i.id.startsWith("emulator-"));n.forEach(i=>{r||e.push({id:i,platform:"android",type:"emulator",name:i.replace(/_/g," "),status:"offline",details:`Android Virtual Device: ${i}`})})}catch{}return e}async function Al(){if(process.platform!=="darwin")return[];try{let e=await Nr("/usr/bin/xcrun",["simctl","list","devices","--json"]),t=JSON.parse(e),n=[];return Object.entries(t.devices||{}).forEach(([r,i])=>{i.forEach(o=>{o.isAvailable&&n.push({id:o.udid,platform:"ios",type:"simulator",name:o.name,status:o.state?.toLowerCase()==="booted"?"online":"offline",runtime:r,details:`${o.name} (${r})`})})}),n}catch{return[]}}async function Hf(){if(process.platform!=="darwin")return[];try{let e=await Nr("/usr/bin/xcrun",["devicectl","list","devices","--json-output","-"]);return(JSON.parse(e).result?.devices||[]).filter(n=>{let r=n.connectionProperties?.transportType;return r==="wired"||r==="localNetwork"}).map(n=>{let r=n.connectionProperties?.transportType,i=n.deviceProperties?.name||"iPhone";return{id:n.identifier,platform:"ios",type:"physical",name:i,status:"online",details:`${i} (${n.model?.name||n.hardwareModel||""}) - ${r}`}})}catch{return[]}}async function Gf(e){let t=await Al(),n=t.find(i=>i.id===e);if(n)return n;let r=t.filter(i=>i.status==="online");return r.length===1?r[0]:null}async function Vf(){let[e,t,n]=await Promise.all([jf(),Al(),Hf()]);return[...e,...t,...n]}async function zf(){let e=Date.now();return Pr&&e-Pr.updatedAt<$f?Pr.targets:(Tr||(Tr=Vf().then(t=>(Pr={targets:t,updatedAt:Date.now()},t)).finally(()=>{Tr=null})),Tr)}async function rl(e){let t=[];for await(let n of e)t.push(Buffer.isBuffer(n)?n:Buffer.from(n));return t.length===0?{}:JSON.parse(Buffer.concat(t).toString("utf-8"))}async function Kf(e,t){let n=await _f({method:"GET",url:e,responseType:"stream",timeout:12e4}),r=te.createWriteStream(t);n.data.pipe(r),await new Promise((i,o)=>{r.on("finish",i),r.on("error",o)})}function il(e,t){let n=e?.stderr?.toString?.().trim();if(n)return n;let r=e?.stdout?.toString?.().trim();return r||e?.message||t}function Wf(e,t){return Pt("/usr/libexec/PlistBuddy",["-c",`Print :${t}`,e],{encoding:"utf-8"}).trim()}function Yf(e){let t=G.join(e,"Info.plist");if(!te.existsSync(t))throw new Error(`Could not validate iOS app executable: ${t} not found.`);let n=Wf(t,"CFBundleExecutable"),r=G.join(e,n);if(!te.existsSync(r))throw new Error(`Could not validate iOS app executable: ${r} not found.`);return r}function qf(){return process.arch==="arm64"?"arm64":"x86_64"}function Jf(e){return te.existsSync(e)?te.readdirSync(e).map(t=>G.join(e,t)).filter(t=>t.endsWith(".app")&&te.statSync(t).isDirectory()):[]}function ol(e,t){let n=Jf(e);if(n.length===1)return n[0];if(n.length>1)throw new Error(`Multiple .app bundles found in ${t}: ${n.map(r=>G.basename(r)).join(", ")}. Mach cannot safely choose which app to install.`);return""}function Xf(e){let t=Yf(e),n=qf(),r="",i="";try{r=Pt("lipo",["-info",t],{encoding:"utf-8"}).trim()}catch(o){throw new Error(`Could not inspect iOS simulator app architecture for ${G.basename(e)}: ${o.message}`)}if(!new RegExp(`\\b${n}\\b`).test(r))throw new Error(`This iOS simulator artifact cannot be installed because ${G.basename(e)} does not include the ${n} simulator architecture. lipo output: ${r}. Rebuild the app with the latest Mach CLI and make sure the profile is a simulator build.`);try{i=Pt("/usr/bin/xcrun",["vtool","-show-build",t],{encoding:"utf-8"}).trim()}catch(o){throw new Error(`Could not inspect iOS simulator app platform for ${G.basename(e)}: ${o.message}`)}if(!/\bplatform\s+IOSSIMULATOR\b/i.test(i))throw new Error(`This iOS simulator artifact cannot be installed because ${G.basename(e)} was built for the wrong Apple platform. A simulator artifact must contain platform IOSSIMULATOR. vtool output: ${i}. Rebuild the app with the latest Mach CLI.`)}async function Zf(e,t,n){let r=n||(t.toLowerCase().includes(".apk")?"android":"ios"),i=t.toLowerCase().includes(".ipa"),o=te.mkdtempSync(G.join(Je.tmpdir(),`${ft}-install-`)),s=G.join(o,r==="android"?"install.apk":i?"install.ipa":"install.zip");try{if(await Kf(t,s),r==="android"){Pt(pl(),["-s",e,"install","-r",s],{stdio:"pipe"});return}if(process.platform!=="darwin")throw new Error("iOS local install requires macOS.");Cr(`unzip -o ${JSON.stringify(s)} -d ${JSON.stringify(o)}`,{stdio:"pipe"});let a=G.join(o,"Payload"),l=te.existsSync(a),c=i||l,d="";if(c?d=ol(a,"Payload"):d=ol(o,"the simulator artifact"),!d)throw new Error(`No .app bundle found inside the ${i?"IPA":"archive"}.`);let u=c?null:await Gf(e);if(u){try{Xf(d),Pt("/usr/bin/xcrun",["simctl","install",u.id,d],{stdio:"pipe"})}catch(p){throw new Error(il(p,"iOS Simulator install failed."))}return}if(!c)throw new Error("Selected iOS Simulator was not found. Refresh Install Hub devices or boot one simulator and try again.");try{Cr(`/usr/bin/xcrun devicectl device install app --device ${JSON.stringify(e)} ${JSON.stringify(d)}`,{stdio:"pipe"})}catch(p){throw new Error(il(p,"iOS device install failed."))}}finally{te.rmSync(o,{recursive:!0,force:!0})}}function Qf(e,t){if(!e)throw new Error("Device id is required.");if(t==="ios"){if(process.platform!=="darwin")throw new Error("iOS Simulator launch requires macOS.");return Cr(`/usr/bin/xcrun simctl boot ${JSON.stringify(e)}`,{stdio:"pipe"}),el("open",["-a","Simulator"],{detached:!0,stdio:"ignore"}).unref(),"Simulator booting..."}if(t==="android")return el(fl(),["-avd",e],{detached:!0,stdio:"ignore",windowsHide:!0}).unref(),"Emulator booting in background...";throw new Error("Invalid platform.")}async function em(){process.platform!=="darwin"&&V.warn("Running on non-macOS \u2014 iOS discovery unavailable, Android only.");let e=xr.createServer((r,i)=>{if(i.setHeader("Access-Control-Allow-Origin","*"),i.setHeader("Access-Control-Allow-Methods","GET, POST, OPTIONS"),i.setHeader("Access-Control-Allow-Headers","Content-Type, Authorization"),r.method==="OPTIONS"){i.writeHead(204),i.end();return}let o=new URL(r.url||"/",`http://localhost:${ft}`);if(r.method==="GET"&&o.pathname==="/local/devices"){zf().then(s=>{i.writeHead(200,{"Content-Type":"application/json"}),i.end(JSON.stringify({status:"success",targets:s}))}).catch(s=>{i.writeHead(500,{"Content-Type":"application/json"}),i.end(JSON.stringify({status:"error",message:s.message}))});return}if(r.method==="GET"&&o.pathname==="/health"){i.writeHead(200,{"Content-Type":"application/json"}),i.end(JSON.stringify({status:"success",service:"mach-agent",port:ft,platform:process.platform}));return}if(r.method==="POST"&&o.pathname==="/install-local"){t(r,i);return}if(r.method==="POST"&&o.pathname==="/local/boot"){n(r,i);return}i.writeHead(404),i.end()}),t=async(r,i)=>{try{let{deviceId:o,artifactUrl:s,platform:a}=await rl(r);if(!o||!s){i.writeHead(400,{"Content-Type":"application/json"}),i.end(JSON.stringify({status:"error",message:"deviceId and artifactUrl are required"}));return}await Zf(o,s,a),i.writeHead(200,{"Content-Type":"application/json"}),i.end(JSON.stringify({status:"success",message:`Installed on ${o}`}))}catch(o){i.writeHead(500,{"Content-Type":"application/json"}),i.end(JSON.stringify({status:"error",message:o.message||"Local install failed"}))}},n=async(r,i)=>{try{let{id:o,platform:s}=await rl(r),a=Qf(o,s);i.writeHead(200,{"Content-Type":"application/json"}),i.end(JSON.stringify({status:"success",message:a}))}catch(o){i.writeHead(500,{"Content-Type":"application/json"}),i.end(JSON.stringify({status:"error",message:o.message||"Local device launch failed"}))}};e.listen(ft,"127.0.0.1",()=>{V.success(ae.green(`Local device agent running on http://localhost:${ft}`)),V.info(ae.dim("Keep this running while using the Install Hub on the dashboard.")),V.info(ae.dim("Press Ctrl+C to stop."))}),e.on("error",r=>{r.code==="EADDRINUSE"?V.error(`Port ${ft} is already in use \u2014 agent may already be running.`):V.error(`Agent error: ${r.message}`),process.exit(1)}),await new Promise(()=>{})}async function bl(e="start"){let t=String(e||"start").toLowerCase();if(t==="start"||t==="run"){await em();return}if(t==="install"){await tl();return}if(t==="status"){await Bf();return}if(t==="stop"){await nl();return}if(t==="uninstall"){await Uf();return}if(t==="restart"){await nl(),await tl();return}V.error(`Unknown agent action: ${e}`),V.info(ae.dim(`Use: ${f.nameLower} agent start | install | status | restart | stop | uninstall`)),process.exit(1)}import{text as nm,password as rm,spinner as im,isCancel as Il}from"@clack/prompts";import bo from"chalk";import Bn from"fs";import Sl from"path";import tm from"os";var ho=Sl.join(tm.homedir(),f.configDir),yo=Sl.join(ho,"config.json");function Ao(){if(!Bn.existsSync(yo))return{};try{return JSON.parse(Bn.readFileSync(yo,"utf-8"))}catch{return{}}}function El(e){Bn.existsSync(ho)||Bn.mkdirSync(ho,{recursive:!0});let n={...Ao(),...e};Bn.writeFileSync(yo,JSON.stringify(n,null,2))}async function _l(){let e=Ao(),t=await nm({message:"Enter your email:",placeholder:"user@example.com",initialValue:e.lastLoginEmail,validate(i){if(i.length===0)return"Email is required!"}});if(Il(t))return;let n=await rm({message:"Enter your password:",validate(i){if(i.length===0)return"Password is required!"}});if(Il(n))return;let r=im();r.start("Authenticating...");try{let o=await(await fetch(`${St}/login`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({username:t,password:n})})).json();o.status==="success"&&o.user.token?(ns({id:o.user.id,email:t,token:o.user.token,refreshToken:o.user.refreshToken}),El({lastLoginEmail:t}),r.stop(bo.green("Login successful!"))):r.stop(bo.red("Login failed: "+(o.message||"Unknown error")))}catch(i){r.stop(bo.red("Network error: "+i.message))}}import{log as Lr,outro as om}from"@clack/prompts";import jn from"chalk";async function vl(){let e=rs(),t=`${f.envPrefix}TOKEN`;e?Lr.success(jn.green(`Logged out. Removed saved credentials from ~/${f.configDir}/credentials.json.`)):Lr.warn(jn.yellow(`No saved ${f.name} credentials found.`)),process.env[t]&&(Lr.warn(jn.yellow(`${t} is still set in this shell. Commands will continue to authenticate with that token until you unset it.`)),Lr.info(jn.dim(`Run: unset ${t}`))),om(jn.blue("---"))}import{outro as sm,select as am,spinner as lm,isCancel as dm}from"@clack/prompts";import Mr from"chalk";import So from"fs";import cm from"path";var $l=e=>e==="1234567890"||e==="ABC123DEFG"||e==="XXXXXXXXXX"?"":typeof e=="string"?e:"",um=()=>process.versions.node.split(".")[0]||"24";async function wl(){if(!De()){console.log(Mr.red(`You are not logged in. Run \`${f.nameLower} login\` first.`));return}let t=lm();t.start("Fetching projects...");try{let{data:n}=await R.get("/projects");if(t.stop("Projects loaded."),n.status!=="success"||!n.projects||n.projects.length===0){console.log(Mr.yellow(`No projects found. Run \`${f.nameLower} init\` to create one.`));return}let r=n.projects.map(M=>({value:M.projectId,label:`${M.name} (${M.slug})`})),i=await am({message:"Select a project to link:",options:r});if(dm(i))return;let o=cm.join(process.cwd(),f.configFileName),s={};if(So.existsSync(o))try{s=JSON.parse(So.readFileSync(o,"utf-8"))}catch{}let a=n.projects.find(M=>M.projectId===i),l=s.appDirectory||hr(process.cwd())||".",c=de(s.framework);try{c||=yr(process.cwd(),l)}catch{c||=En}let d=c||En,u=s.android?.package||_t("android",l),p=s.ios?.bundleIdentifier||_t("ios",l),m=s.android||{},y=d==="flutter"?It():{},g={development:{environment:"development",distribution:"development"},staging:{environment:"staging",distribution:"internal"},production:{environment:"production",distribution:"store"}},h=s.build||g,A=K({build:h},"store","production"),b=s.submit?.[A]||{},v=b.android||{},S=b.ios||{},L={...s,projectId:i,framework:d,appDirectory:l,name:a?.name,slug:a?.slug,...d==="flutter"?{flutter:{...s.flutter||{},...s.flutter?.sdkVersion||!y.flutter?{}:{sdkVersion:y.flutter}}}:{nodeVersion:s.nodeVersion||um()},scheme:s.scheme||a?.slug?.toLowerCase()||"app",android:{...m,package:u||"",versionCode:m.versionCode||"auto"},ios:{...s.ios||{},bundleIdentifier:p||"",buildNumber:s.ios?.buildNumber||"auto"},build:h,submit:{...s.submit||{},[A]:{...b,android:{...v,track:v.track||"internal",releaseStatus:v.releaseStatus||"completed"},ios:{...S,ascAppId:$l(S.ascAppId),appleTeamId:$l(S.appleTeamId)}}}};So.writeFileSync(o,JSON.stringify(L,null,2)),sm(Mr.green(`Linked to project ${L.name} (${L.slug})`))}catch(n){t.stop(Mr.red("Error fetching projects: "+n.message))}}import{outro as pm,text as Hn,select as fm,spinner as mm,isCancel as ln}from"@clack/prompts";import Gn from"chalk";import gm from"fs";import hm from"path";import{randomUUID as ym}from"crypto";var Am=()=>process.versions.node.split(".")[0]||"24";async function Rl(){if(!De()){console.log(Gn.red(`You are not logged in. Run \`${f.nameLower} login\` first.`));return}let t=await Hn({message:"Project Name:",placeholder:"My Awesome App",validate(d){if(d.length===0)return"Name is required!"}});if(ln(t))return;let n=await Hn({message:"Project Slug (URL friendly):",placeholder:"my-awesome-app",validate(d){if(d.length===0)return"Slug is required!";if(!/^[a-z0-9-]+$/.test(d))return"Slug must be lowercase alphanumeric with dashes."}});if(ln(n))return;let r=hr(process.cwd()),i=await Hn({message:"App Directory (relative to this project root):",initialValue:r||void 0,placeholder:".",validate(d){if(d.length===0)return"App directory is required!";try{Ie(process.cwd(),d,{requireAppDirectory:!0})}catch(u){return u.message}}});if(ln(i))return;let o=yr(process.cwd(),i),s=await fm({message:"Platform:",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"},...o==="flutter"?[]:[{value:"web",label:"Web"}],{value:"all",label:o==="flutter"?"Android & iOS":"All Platforms"}]});if(ln(s))return;let a="";if(s==="android"||s==="all"){let d=_t("android",i);if(a=await Hn({message:"Android Package Name:",initialValue:d||"",placeholder:"com.example.app",validate(u){if(u.length===0)return"Package name is required for Android!"}}),ln(a))return}let l="";if(s==="ios"||s==="all"){let d=_t("ios",i);if(l=await Hn({message:"iOS Bundle Identifier:",initialValue:d||"",placeholder:"com.example.app",validate(u){if(u.length===0)return"Bundle ID is required for iOS!"}}),ln(l))return}let c=mm();c.start("Creating project...");try{let d=ym(),p={projectId:d,name:t,slug:n,storageType:"managed",platforms:s==="all"?o==="flutter"?["android","ios"]:["android","ios","web"]:[s],framework:o,appDirectory:i},{data:m}=await R.post("/projects",p);if(m.status==="success"){c.stop(Gn.green("Project created successfully!"));let y=hm.join(process.cwd(),f.configFileName),g=o==="flutter"?It():{};gm.writeFileSync(y,JSON.stringify({projectId:d,framework:o,appDirectory:i,name:t,slug:n,...o==="flutter"?g.flutter?{flutter:{sdkVersion:g.flutter}}:{}:{nodeVersion:Am()},...a?{android:{package:a,versionCode:"auto"}}:{},...l?{ios:{bundleIdentifier:l,buildNumber:"auto"}}:{},build:{development:{environment:"development",distribution:"development"},staging:{environment:"staging",distribution:"internal"},production:{environment:"production",distribution:"store"}},submit:{production:{android:{track:"internal",releaseStatus:"completed"},ios:{ascAppId:"",appleTeamId:""}}}},null,2)),pm(Gn.green(`Initialized project ${t} and linked locally!`))}else c.stop(Gn.red("creation failed: "+m.message))}catch(d){c.stop(Gn.red("Network error: "+d.message))}}import{spinner as Eo,log as Ce}from"@clack/prompts";import Vn from"chalk";import Fr from"fs";import Ol from"path";function Io(e,t,n,r){let i=e?.response?.status,o=e?.response?.data?.message||e?.response?.data?.error,s=r?` ${r}`:"";return i===401?`Not logged in or token expired while trying to ${n}${s}. Run \`${f.nameLower} login\` and try again.`:i===403?[`Permission denied while trying to ${n}${s}.`,o?`API says: ${o}.`:void 0,`Current Mach account/token does not have access to project ${t}.`,`Run \`${f.nameLower} login\` with the correct account, or ask a project owner to grant access.`].filter(Boolean).join(" "):i===404?[`Project or environment endpoint was not found while trying to ${n}${s}.`,`Project ID: ${t}.`,o?`API says: ${o}.`:void 0].filter(Boolean).join(" "):i?`Failed to ${n}${s}: ${o||`API returned HTTP ${i}`}`:`Network error while trying to ${n}${s}: ${e?.message||"Unknown error"}`}function bm(e){let t=String(e??"");return t===""?'""':/^[A-Za-z0-9_./:@%+-]+$/.test(t)?t:JSON.stringify(t)}function Sm(e,t){return`${[`# Generated by ${f.nameLower} env pull --environment ${t}`,"# Do not commit this file.","",...Object.keys(e).sort((r,i)=>r.localeCompare(i)).map(r=>`${r}=${bm(e[r])}`)].join(`
|
|
2219
|
+
`;return ee.writeFileSync(kr(),s),kr()}function Ot(e,t={}){try{return Pt("launchctl",e,{stdio:t.ignoreError?"ignore":"pipe"}),!0}catch(n){if(t.ignoreError)return!1;throw n}}function Cf(e){return new Promise(t=>setTimeout(t,e))}function Nr(e,t,n=$f){return new Promise((r,i)=>{vf(e,t,{timeout:n,maxBuffer:10*1024*1024,windowsHide:!0},(o,s,a)=>{if(o){let l=a?.toString().trim();i(new Error(l||o.message));return}r(s?.toString()||"")})})}async function gl(){if(typeof fetch=="function"){let e=new AbortController,t=setTimeout(()=>e.abort(),3e3);try{return(await fetch(`${Fn}/health`,{signal:e.signal})).ok}catch{return!1}finally{clearTimeout(t)}}return new Promise(e=>{let t=!1,n=i=>{t||(t=!0,e(i))},r=xr.get(`${Fn}/health`,i=>{i.resume(),n(i.statusCode===200)});r.setTimeout(3e3,()=>{r.destroy(),n(!1)}),r.on("error",()=>n(!1))})}async function kf(e=8e3){let t=Date.now()+e;for(;Date.now()<t;){if(await gl())return!0;await Cf(250)}return!1}async function hl(){return new Promise(e=>{let t=!1,n=al.createConnection({host:"127.0.0.1",port:ft}),r=i=>{t||(t=!0,n.destroy(),e(i))};n.setTimeout(1e3),n.once("connect",()=>r(!0)),n.once("timeout",()=>r(!1)),n.once("error",()=>r(!1))})}async function go(){if(await kf()){V.success(ae.green("Mach agent installed and started."));return}if(await hl()){V.warn(`Mach agent service is installed, but port ${ft} is held by a process that is not answering /health.`),V.info(ae.dim(`Run \`${f.nameLower} agent stop\`, close any foreground \`${f.nameLower} agent\` terminal, then run \`${f.nameLower} agent install\` again.`));return}V.warn(`Mach agent service is installed, but it did not start listening on ${Fn}.`)}async function Nf(){let e=Tf(),t=po();Ot(["bootout",t,e],{ignoreError:!0}),Ot(["bootstrap",t,e],{ignoreError:!0})||Ot(["load","-w",e]),Ot(["enable",`${t}/${sn}`],{ignoreError:!0}),Ot(["kickstart","-k",`${t}/${sn}`],{ignoreError:!0}),await go(),V.info(ae.dim(`It will start automatically when you log in. Plist: ${e}`)),V.info(ae.dim(`Logs: ${G.join(Xe(),"agent.log")}`))}async function Al(){let e=kr(),t=po();Ot(["bootout",t,e],{ignoreError:!0})||Ot(["unload","-w",e],{ignoreError:!0})?V.success(ae.green("Mach agent service stopped.")):V.warn("Mach agent service was not loaded.")}async function xf(){await Al();let e=kr();ee.existsSync(e)&&ee.unlinkSync(e),V.success(ae.green("Mach agent service uninstalled."))}async function Lf(){let e=Df();Dt(["daemon-reload"]),Dt(["enable","--now",an]),await go(),V.info(ae.dim(`It will start automatically when you log in. Service: ${e}`)),V.info(ae.dim(`Logs: ${G.join(Xe(),"agent.log")}`))}async function Mf(){Dt(["stop",an],{ignoreError:!0})?V.success(ae.green("Mach agent service stopped.")):V.warn("Mach agent service was not running.")}async function Ff(){Dt(["disable","--now",an],{ignoreError:!0}),Dt(["daemon-reload"],{ignoreError:!0});let e=co();ee.existsSync(e)&&ee.unlinkSync(e),Dt(["daemon-reload"],{ignoreError:!0}),V.success(ae.green("Mach agent service uninstalled."))}async function Uf(){let e=Pf();Un(["/Create","/TN",on,"/SC","ONLOGON","/TR",`"${e}"`,"/RL","LIMITED","/F"]),Un(["/Run","/TN",on],{ignoreError:!0}),await go(),V.info(ae.dim(`It will start automatically when you log in. Task: ${on}`)),V.info(ae.dim(`Logs: ${G.join(Xe(),"agent.log")}`))}async function yl(){Un(["/End","/TN",on],{ignoreError:!0})?V.success(ae.green("Mach agent task stopped.")):V.warn("Mach agent task was not running.")}async function Bf(){await yl(),Un(["/Delete","/TN",on,"/F"],{ignoreError:!0});let e=uo();ee.existsSync(e)&&ee.unlinkSync(e),V.success(ae.green("Mach agent task uninstalled."))}async function nl(){if(process.platform==="darwin")return Nf();if(process.platform==="linux")return Lf();if(process.platform==="win32")return Uf();throw new Error(`Background agent install is not supported on ${process.platform}.`)}async function rl(){if(process.platform==="darwin")return Al();if(process.platform==="linux")return Mf();if(process.platform==="win32")return yl();V.warn(`Background agent service control is not supported on ${process.platform}.`)}async function Hf(){if(process.platform==="darwin")return xf();if(process.platform==="linux")return Ff();if(process.platform==="win32")return Bf();V.warn(`Background agent uninstall is not supported on ${process.platform}.`)}async function jf(){let e=await gl(),t=e?!0:await hl();if(e?V.success(ae.green(`Mach agent is online at ${Fn}`)):t?V.warn(`Mach agent port is open, but /health did not respond. Run \`${f.nameLower} agent restart\` if the dashboard still shows offline.`):V.warn(`Mach agent is not responding at ${Fn}`),process.platform==="darwin"){let n=Ot(["print",`${po()}/${sn}`],{ignoreError:!0});V.info(ae.dim(`Login service: ${n?"installed/loaded":"not loaded"}`))}else if(process.platform==="linux"){let n=Dt(["is-enabled",an],{ignoreError:!0}),r=Dt(["is-active",an],{ignoreError:!0});V.info(ae.dim(`Login service: ${n?"enabled":"not enabled"} / ${r?"active":"inactive"}`))}else if(process.platform==="win32"){let n=Un(["/Query","/TN",on],{ignoreError:!0});V.info(ae.dim(`Login task: ${n?"installed":"not installed"}`))}}async function Gf(){let e=[];try{(await Nr(fl(),["devices","-l"])).split(`
|
|
2220
|
+
`).forEach(n=>{if(n.includes("List of devices")||!n.trim())return;let r=n.split(/\s+/);if(r.length<2||r[1]!=="device")return;let i=r[0],o=n.match(/model:([^\s]+)/);e.push({id:i,platform:"android",type:i.startsWith("emulator-")?"emulator":"physical",name:o?o[1].replace(/_/g," "):i,status:"online",details:n.trim()})})}catch{}try{let n=(await Nr(ml(),["-list-avds"])).split(`
|
|
2221
|
+
`).filter(i=>!!i.trim()),r=e.some(i=>i.platform==="android"&&i.id.startsWith("emulator-"));n.forEach(i=>{r||e.push({id:i,platform:"android",type:"emulator",name:i.replace(/_/g," "),status:"offline",details:`Android Virtual Device: ${i}`})})}catch{}return e}async function bl(){if(process.platform!=="darwin")return[];try{let e=await Nr("/usr/bin/xcrun",["simctl","list","devices","--json"]),t=JSON.parse(e),n=[];return Object.entries(t.devices||{}).forEach(([r,i])=>{i.forEach(o=>{o.isAvailable&&n.push({id:o.udid,platform:"ios",type:"simulator",name:o.name,status:o.state?.toLowerCase()==="booted"?"online":"offline",runtime:r,details:`${o.name} (${r})`})})}),n}catch{return[]}}async function Vf(){if(process.platform!=="darwin")return[];try{let e=await Nr("/usr/bin/xcrun",["devicectl","list","devices","--json-output","-"]);return(JSON.parse(e).result?.devices||[]).filter(n=>{let r=n.connectionProperties?.transportType;return r==="wired"||r==="localNetwork"}).map(n=>{let r=n.connectionProperties?.transportType,i=n.deviceProperties?.name||"iPhone";return{id:n.identifier,platform:"ios",type:"physical",name:i,status:"online",details:`${i} (${n.model?.name||n.hardwareModel||""}) - ${r}`}})}catch{return[]}}async function zf(e){let t=await bl(),n=t.find(i=>i.id===e);if(n)return n;let r=t.filter(i=>i.status==="online");return r.length===1?r[0]:null}async function Kf(){let[e,t,n]=await Promise.all([Gf(),bl(),Vf()]);return[...e,...t,...n]}async function Wf(){let e=Date.now();return Pr&&e-Pr.updatedAt<wf?Pr.targets:(Tr||(Tr=Kf().then(t=>(Pr={targets:t,updatedAt:Date.now()},t)).finally(()=>{Tr=null})),Tr)}async function il(e){let t=[];for await(let n of e)t.push(Buffer.isBuffer(n)?n:Buffer.from(n));return t.length===0?{}:JSON.parse(Buffer.concat(t).toString("utf-8"))}async function Yf(e,t){let n=await Rf({method:"GET",url:e,responseType:"stream",timeout:12e4}),r=ee.createWriteStream(t);n.data.pipe(r),await new Promise((i,o)=>{r.on("finish",i),r.on("error",o)})}function ol(e,t){let n=e?.stderr?.toString?.().trim();if(n)return n;let r=e?.stdout?.toString?.().trim();return r||e?.message||t}function qf(e,t){return Pt("/usr/libexec/PlistBuddy",["-c",`Print :${t}`,e],{encoding:"utf-8"}).trim()}function Jf(e){let t=G.join(e,"Info.plist");if(!ee.existsSync(t))throw new Error(`Could not validate iOS app executable: ${t} not found.`);let n=qf(t,"CFBundleExecutable"),r=G.join(e,n);if(!ee.existsSync(r))throw new Error(`Could not validate iOS app executable: ${r} not found.`);return r}function Xf(){return process.arch==="arm64"?"arm64":"x86_64"}function Zf(e){return ee.existsSync(e)?ee.readdirSync(e).map(t=>G.join(e,t)).filter(t=>t.endsWith(".app")&&ee.statSync(t).isDirectory()):[]}function sl(e,t){let n=Zf(e);if(n.length===1)return n[0];if(n.length>1)throw new Error(`Multiple .app bundles found in ${t}: ${n.map(r=>G.basename(r)).join(", ")}. Mach cannot safely choose which app to install.`);return""}function Qf(e){let t=Jf(e),n=Xf(),r="",i="";try{r=Pt("lipo",["-info",t],{encoding:"utf-8"}).trim()}catch(o){throw new Error(`Could not inspect iOS simulator app architecture for ${G.basename(e)}: ${o.message}`)}if(!new RegExp(`\\b${n}\\b`).test(r))throw new Error(`This iOS simulator artifact cannot be installed because ${G.basename(e)} does not include the ${n} simulator architecture. lipo output: ${r}. Rebuild the app with the latest Mach CLI and make sure the profile is a simulator build.`);try{i=Pt("/usr/bin/xcrun",["vtool","-show-build",t],{encoding:"utf-8"}).trim()}catch(o){throw new Error(`Could not inspect iOS simulator app platform for ${G.basename(e)}: ${o.message}`)}if(!/\bplatform\s+IOSSIMULATOR\b/i.test(i))throw new Error(`This iOS simulator artifact cannot be installed because ${G.basename(e)} was built for the wrong Apple platform. A simulator artifact must contain platform IOSSIMULATOR. vtool output: ${i}. Rebuild the app with the latest Mach CLI.`)}async function em(e,t,n){let r=n||(t.toLowerCase().includes(".apk")?"android":"ios"),i=t.toLowerCase().includes(".ipa"),o=ee.mkdtempSync(G.join(Je.tmpdir(),`${ft}-install-`)),s=G.join(o,r==="android"?"install.apk":i?"install.ipa":"install.zip");try{if(await Yf(t,s),r==="android"){Pt(fl(),["-s",e,"install","-r",s],{stdio:"pipe"});return}if(process.platform!=="darwin")throw new Error("iOS local install requires macOS.");Cr(`unzip -o ${JSON.stringify(s)} -d ${JSON.stringify(o)}`,{stdio:"pipe"});let a=G.join(o,"Payload"),l=ee.existsSync(a),c=i||l,d="";if(c?d=sl(a,"Payload"):d=sl(o,"the simulator artifact"),!d)throw new Error(`No .app bundle found inside the ${i?"IPA":"archive"}.`);let u=c?null:await zf(e);if(u){try{Qf(d),Pt("/usr/bin/xcrun",["simctl","install",u.id,d],{stdio:"pipe"})}catch(p){throw new Error(ol(p,"iOS Simulator install failed."))}return}if(!c)throw new Error("Selected iOS Simulator was not found. Refresh Install Hub devices or boot one simulator and try again.");try{Cr(`/usr/bin/xcrun devicectl device install app --device ${JSON.stringify(e)} ${JSON.stringify(d)}`,{stdio:"pipe"})}catch(p){throw new Error(ol(p,"iOS device install failed."))}}finally{ee.rmSync(o,{recursive:!0,force:!0})}}function tm(e,t){if(!e)throw new Error("Device id is required.");if(t==="ios"){if(process.platform!=="darwin")throw new Error("iOS Simulator launch requires macOS.");return Cr(`/usr/bin/xcrun simctl boot ${JSON.stringify(e)}`,{stdio:"pipe"}),tl("open",["-a","Simulator"],{detached:!0,stdio:"ignore"}).unref(),"Simulator booting..."}if(t==="android")return tl(ml(),["-avd",e],{detached:!0,stdio:"ignore",windowsHide:!0}).unref(),"Emulator booting in background...";throw new Error("Invalid platform.")}async function nm(){process.platform!=="darwin"&&V.warn("Running on non-macOS \u2014 iOS discovery unavailable, Android only.");let e=xr.createServer((r,i)=>{if(i.setHeader("Access-Control-Allow-Origin","*"),i.setHeader("Access-Control-Allow-Methods","GET, POST, OPTIONS"),i.setHeader("Access-Control-Allow-Headers","Content-Type, Authorization"),r.method==="OPTIONS"){i.writeHead(204),i.end();return}let o=new URL(r.url||"/",`http://localhost:${ft}`);if(r.method==="GET"&&o.pathname==="/local/devices"){Wf().then(s=>{i.writeHead(200,{"Content-Type":"application/json"}),i.end(JSON.stringify({status:"success",targets:s}))}).catch(s=>{i.writeHead(500,{"Content-Type":"application/json"}),i.end(JSON.stringify({status:"error",message:s.message}))});return}if(r.method==="GET"&&o.pathname==="/health"){i.writeHead(200,{"Content-Type":"application/json"}),i.end(JSON.stringify({status:"success",service:"mach-agent",port:ft,platform:process.platform}));return}if(r.method==="POST"&&o.pathname==="/install-local"){t(r,i);return}if(r.method==="POST"&&o.pathname==="/local/boot"){n(r,i);return}i.writeHead(404),i.end()}),t=async(r,i)=>{try{let{deviceId:o,artifactUrl:s,platform:a}=await il(r);if(!o||!s){i.writeHead(400,{"Content-Type":"application/json"}),i.end(JSON.stringify({status:"error",message:"deviceId and artifactUrl are required"}));return}await em(o,s,a),i.writeHead(200,{"Content-Type":"application/json"}),i.end(JSON.stringify({status:"success",message:`Installed on ${o}`}))}catch(o){i.writeHead(500,{"Content-Type":"application/json"}),i.end(JSON.stringify({status:"error",message:o.message||"Local install failed"}))}},n=async(r,i)=>{try{let{id:o,platform:s}=await il(r),a=tm(o,s);i.writeHead(200,{"Content-Type":"application/json"}),i.end(JSON.stringify({status:"success",message:a}))}catch(o){i.writeHead(500,{"Content-Type":"application/json"}),i.end(JSON.stringify({status:"error",message:o.message||"Local device launch failed"}))}};e.listen(ft,"127.0.0.1",()=>{V.success(ae.green(`Local device agent running on http://localhost:${ft}`)),V.info(ae.dim("Keep this running while using the Install Hub on the dashboard.")),V.info(ae.dim("Press Ctrl+C to stop."))}),e.on("error",r=>{r.code==="EADDRINUSE"?V.error(`Port ${ft} is already in use \u2014 agent may already be running.`):V.error(`Agent error: ${r.message}`),process.exit(1)}),await new Promise(()=>{})}async function Sl(e="start"){let t=String(e||"start").toLowerCase();if(t==="start"||t==="run"){await nm();return}if(t==="install"){await nl();return}if(t==="status"){await jf();return}if(t==="stop"){await rl();return}if(t==="uninstall"){await Hf();return}if(t==="restart"){await rl(),await nl();return}V.error(`Unknown agent action: ${e}`),V.info(ae.dim(`Use: ${f.nameLower} agent start | install | status | restart | stop | uninstall`)),process.exit(1)}import{text as im,password as om,spinner as sm,isCancel as _l}from"@clack/prompts";import bo from"chalk";import Bn from"fs";import El from"path";import rm from"os";var ho=El.join(rm.homedir(),f.configDir),Ao=El.join(ho,"config.json");function yo(){if(!Bn.existsSync(Ao))return{};try{return JSON.parse(Bn.readFileSync(Ao,"utf-8"))}catch{return{}}}function Il(e){Bn.existsSync(ho)||Bn.mkdirSync(ho,{recursive:!0});let n={...yo(),...e};Bn.writeFileSync(Ao,JSON.stringify(n,null,2))}async function vl(){let e=yo(),t=await im({message:"Enter your email:",placeholder:"user@example.com",initialValue:e.lastLoginEmail,validate(i){if(i.length===0)return"Email is required!"}});if(_l(t))return;let n=await om({message:"Enter your password:",validate(i){if(i.length===0)return"Password is required!"}});if(_l(n))return;let r=sm();r.start("Authenticating...");try{let o=await(await fetch(`${St}/login`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({username:t,password:n})})).json();o.status==="success"&&o.user.token?(ns({id:o.user.id,email:t,token:o.user.token,refreshToken:o.user.refreshToken}),Il({lastLoginEmail:t}),r.stop(bo.green("Login successful!"))):r.stop(bo.red("Login failed: "+(o.message||"Unknown error")))}catch(i){r.stop(bo.red("Network error: "+i.message))}}import{log as Lr,outro as am}from"@clack/prompts";import Hn from"chalk";async function Rl(){let e=rs(),t=`${f.envPrefix}TOKEN`;e?Lr.success(Hn.green(`Logged out. Removed saved credentials from ~/${f.configDir}/credentials.json.`)):Lr.warn(Hn.yellow(`No saved ${f.name} credentials found.`)),process.env[t]&&(Lr.warn(Hn.yellow(`${t} is still set in this shell. Commands will continue to authenticate with that token until you unset it.`)),Lr.info(Hn.dim(`Run: unset ${t}`))),am(Hn.blue("---"))}import{outro as lm,select as dm,spinner as cm,isCancel as um}from"@clack/prompts";import Mr from"chalk";import So from"fs";import pm from"path";var $l=e=>e==="1234567890"||e==="ABC123DEFG"||e==="XXXXXXXXXX"?"":typeof e=="string"?e:"",fm=()=>process.versions.node.split(".")[0]||"24";async function wl(){if(!Oe()){console.log(Mr.red(`You are not logged in. Run \`${f.nameLower} login\` first.`));return}let t=cm();t.start("Fetching projects...");try{let{data:n}=await w.get("/projects");if(t.stop("Projects loaded."),n.status!=="success"||!n.projects||n.projects.length===0){console.log(Mr.yellow(`No projects found. Run \`${f.nameLower} init\` to create one.`));return}let r=n.projects.map(F=>({value:F.projectId,label:`${F.name} (${F.slug})`})),i=await dm({message:"Select a project to link:",options:r});if(um(i))return;let o=pm.join(process.cwd(),f.configFileName),s={};if(So.existsSync(o))try{s=JSON.parse(So.readFileSync(o,"utf-8"))}catch{}let a=n.projects.find(F=>F.projectId===i),l=s.appDirectory||hr(process.cwd())||".",c=de(s.framework);try{c||=Ar(process.cwd(),l)}catch{c||=En}let d=c||En,u=s.android?.package||_t("android",l),p=s.ios?.bundleIdentifier||_t("ios",l),m=s.android||{},A=d==="flutter"?It():{},g={development:{environment:"development",distribution:"development"},staging:{environment:"staging",distribution:"internal"},production:{environment:"production",distribution:"store"}},h=s.build||g,y=K({build:h},"store","production"),b=s.submit?.[y]||{},v=b.android||{},E=b.ios||{},L={...s,projectId:i,framework:d,appDirectory:l,name:a?.name,slug:a?.slug,...d==="flutter"?{flutter:{...s.flutter||{},...s.flutter?.sdkVersion||!A.flutter?{}:{sdkVersion:A.flutter}}}:{nodeVersion:s.nodeVersion||fm()},scheme:s.scheme||a?.slug?.toLowerCase()||"app",android:{...m,package:u||"",versionCode:m.versionCode||"auto"},ios:{...s.ios||{},bundleIdentifier:p||"",buildNumber:s.ios?.buildNumber||"auto"},build:h,submit:{...s.submit||{},[y]:{...b,android:{...v,track:v.track||"internal",releaseStatus:v.releaseStatus||"completed"},ios:{...E,ascAppId:$l(E.ascAppId),appleTeamId:$l(E.appleTeamId)}}}};So.writeFileSync(o,JSON.stringify(L,null,2)),lm(Mr.green(`Linked to project ${L.name} (${L.slug})`))}catch(n){t.stop(Mr.red("Error fetching projects: "+n.message))}}import{outro as mm,text as jn,select as gm,spinner as hm,isCancel as ln}from"@clack/prompts";import Gn from"chalk";import Am from"fs";import ym from"path";import{randomUUID as bm}from"crypto";var Sm=()=>process.versions.node.split(".")[0]||"24";async function Ol(){if(!Oe()){console.log(Gn.red(`You are not logged in. Run \`${f.nameLower} login\` first.`));return}let t=await jn({message:"Project Name:",placeholder:"My Awesome App",validate(d){if(d.length===0)return"Name is required!"}});if(ln(t))return;let n=await jn({message:"Project Slug (URL friendly):",placeholder:"my-awesome-app",validate(d){if(d.length===0)return"Slug is required!";if(!/^[a-z0-9-]+$/.test(d))return"Slug must be lowercase alphanumeric with dashes."}});if(ln(n))return;let r=hr(process.cwd()),i=await jn({message:"App Directory (relative to this project root):",initialValue:r||void 0,placeholder:".",validate(d){if(d.length===0)return"App directory is required!";try{Ie(process.cwd(),d,{requireAppDirectory:!0})}catch(u){return u.message}}});if(ln(i))return;let o=Ar(process.cwd(),i),s=await gm({message:"Platform:",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"},...o==="flutter"?[]:[{value:"web",label:"Web"}],{value:"all",label:o==="flutter"?"Android & iOS":"All Platforms"}]});if(ln(s))return;let a="";if(s==="android"||s==="all"){let d=_t("android",i);if(a=await jn({message:"Android Package Name:",initialValue:d||"",placeholder:"com.example.app",validate(u){if(u.length===0)return"Package name is required for Android!"}}),ln(a))return}let l="";if(s==="ios"||s==="all"){let d=_t("ios",i);if(l=await jn({message:"iOS Bundle Identifier:",initialValue:d||"",placeholder:"com.example.app",validate(u){if(u.length===0)return"Bundle ID is required for iOS!"}}),ln(l))return}let c=hm();c.start("Creating project...");try{let d=bm(),p={projectId:d,name:t,slug:n,storageType:"managed",platforms:s==="all"?o==="flutter"?["android","ios"]:["android","ios","web"]:[s],framework:o,appDirectory:i},{data:m}=await w.post("/projects",p);if(m.status==="success"){c.stop(Gn.green("Project created successfully!"));let A=ym.join(process.cwd(),f.configFileName),g=o==="flutter"?It():{};Am.writeFileSync(A,JSON.stringify({projectId:d,framework:o,appDirectory:i,name:t,slug:n,...o==="flutter"?g.flutter?{flutter:{sdkVersion:g.flutter}}:{}:{nodeVersion:Sm()},...a?{android:{package:a,versionCode:"auto"}}:{},...l?{ios:{bundleIdentifier:l,buildNumber:"auto"}}:{},build:{development:{environment:"development",distribution:"development"},staging:{environment:"staging",distribution:"internal"},production:{environment:"production",distribution:"store"}},submit:{production:{android:{track:"internal",releaseStatus:"completed"},ios:{ascAppId:"",appleTeamId:""}}}},null,2)),mm(Gn.green(`Initialized project ${t} and linked locally!`))}else c.stop(Gn.red("creation failed: "+m.message))}catch(d){c.stop(Gn.red("Network error: "+d.message))}}import{spinner as Eo,log as Te}from"@clack/prompts";import Vn from"chalk";import Fr from"fs";import Dl from"path";function Io(e,t,n,r){let i=e?.response?.status,o=e?.response?.data?.message||e?.response?.data?.error,s=r?` ${r}`:"";return i===401?`Not logged in or token expired while trying to ${n}${s}. Run \`${f.nameLower} login\` and try again.`:i===403?[`Permission denied while trying to ${n}${s}.`,o?`API says: ${o}.`:void 0,`Current Mach account/token does not have access to project ${t}.`,`Run \`${f.nameLower} login\` with the correct account, or ask a project owner to grant access.`].filter(Boolean).join(" "):i===404?[`Project or environment endpoint was not found while trying to ${n}${s}.`,`Project ID: ${t}.`,o?`API says: ${o}.`:void 0].filter(Boolean).join(" "):i?`Failed to ${n}${s}: ${o||`API returned HTTP ${i}`}`:`Network error while trying to ${n}${s}: ${e?.message||"Unknown error"}`}function Em(e){let t=String(e??"");return t===""?'""':/^[A-Za-z0-9_./:@%+-]+$/.test(t)?t:JSON.stringify(t)}function Im(e,t){return`${[`# Generated by ${f.nameLower} env pull --environment ${t}`,"# Do not commit this file.","",...Object.keys(e).sort((r,i)=>r.localeCompare(i)).map(r=>`${r}=${Em(e[r])}`)].join(`
|
|
2198
2222
|
`)}
|
|
2199
|
-
`}async function
|
|
2200
|
-
`)}function un(){let e=re();return e?.projectId||(xe.error(`No ${f.configFileName} found or missing projectId. Run \`${f.nameLower} link\` first.`),process.exit(1)),e}function
|
|
2223
|
+
`}async function Pl(e,t,n={}){let r=Oe();if(!r){Te.error(`You are not logged in. Run \`${f.nameLower} login\` first.`);return}let i=Dl.join(process.cwd(),f.configFileName);if(!Fr.existsSync(i)){Te.error(`No ${f.configFileName} found. Run \`${f.nameLower} init\` or \`${f.nameLower} link\` first.`);return}let o;try{o=JSON.parse(Fr.readFileSync(i,"utf-8"))}catch{Te.error(`Failed to parse ${f.configFileName}`);return}let{projectId:s}=o;if(!s){Te.error(`${f.configFileName} is missing projectId.`);return}e==="set"?await _m(s,t,r):e==="list"?await vm(s,r):e==="pull"||e==="download"||e==="export"?await Rm(s,n):Te.error(`Unknown env action: ${e}. Use 'set', 'list', or 'pull'.`)}async function _m(e,t,n){if(t.length===0){Te.error(`Usage: ${f.nameLower} env set KEY=VALUE [KEY2=VALUE2 ...]`);return}let r=Eo();r.start("Setting environment variables...");let i=0,o=0;for(let s of t){let[a,...l]=s.split("="),c=l.join("=");if(!a||c===void 0){Te.warn(`Invalid format for argument: ${s}. Expected KEY=VALUE.`),o++;continue}try{let d={key:a.trim(),value:c,type:"env",environment:"global",visibility:"secret"},{data:u}=await w.post(`/projects/${e}/secrets`,d);u.status==="success"?i++:(Te.error(`Failed to set ${a}: ${u.message}`),o++)}catch(d){Te.error(Io(d,e,"set",a)),o++}}r.stop(`Set ${i} variable(s). ${o>0?`${o} failed.`:""}`)}async function vm(e,t){let n=Eo();n.start("Fetching environment variables...");try{let{data:r}=await w.get(`/projects/${e}/secrets`);if(r.status==="success"){n.stop("Fetched variables.");let i=r.secrets||[];i.length===0?Te.info("No environment variables found for this project."):(Te.info(Vn.bold("Environment Variables (Global & Scoped):")),i.forEach(o=>{let s=o.visibility==="plain"?o.value:"********";console.log(` ${Vn.cyan(o.key)} = ${s} ${Vn.gray(`[${o.environment}]`)}`)}))}else n.stop(Vn.red(`Failed to fetch variables: ${r.message}`))}catch(r){n.stop("Failed to fetch variables."),Te.error(Io(r,e,"list"))}}async function Rm(e,t){let n=(t.environment||"development").trim(),r=t.out||".env.local",i=Dl.resolve(process.cwd(),r);if(Fr.existsSync(i)&&!t.overwrite){Te.error(`${r} already exists. Re-run with \`--overwrite\` to replace it.`);return}let o=Eo();o.start(`Downloading ${n} environment variables...`);try{let{data:s}=await w.get(`/projects/${e}/secrets/export?env=${encodeURIComponent(n)}`);if(s.status!=="success"){o.stop(Vn.red(`Failed to download variables: ${s.message||"Unknown API error"}`));return}let a=s.secrets||{},l=Im(a,n);Fr.writeFileSync(i,l,{encoding:"utf-8",mode:384}),o.stop(`Wrote ${Object.keys(a).length} variable(s) to ${r}.`)}catch(s){o.stop("Failed to download variables."),Te.error(Io(s,e,"pull"))}}import{cancel as Dm,confirm as Ql,isCancel as Hr,log as xe,note as Kl,outro as Ze,select as Pm,spinner as Tm,text as Cm}from"@clack/prompts";import ye from"chalk";import W from"fs";import se from"path";import{spawnSync as ed}from"child_process";import $o from"crypto";import km from"axios";import Cl from"crypto";import zn from"fs";import Kn from"path";var Tl=e=>String(e||"").replace(/\\/g,"/").replace(/^\/+/,"");function kl(e,t){let n=Kn.join(e,"metadata.json");if(!zn.existsSync(n))throw new Error(`Expo export did not create ${n}.`);let i=JSON.parse(zn.readFileSync(n,"utf-8"))?.fileMetadata?.[t],o=Tl(i?.bundle);if(!o)throw new Error(`Expo export metadata is missing the ${t} launch bundle.`);let s=new Set,a=(Array.isArray(i?.assets)?i.assets:[]).flatMap(l=>{let c=Tl(l?.path);return!c||s.has(c)?[]:(s.add(c),[{path:c,ext:String(l?.ext||"").replace(/^\./,"")||void 0}])});for(let l of[o,...a.map(c=>c.path)])if(!zn.existsSync(Kn.join(e,l)))throw new Error(`Expo export metadata references a missing file: ${l}`);return{bundle:o,assets:a}}function Nl(e,t){return[Kn.join(e,t.bundle),...t.assets.map(n=>Kn.join(e,n.path)),Kn.join(e,"metadata.json")]}function _o(e){return Cl.createHash("md5").update(zn.readFileSync(e)).digest("hex")}function vo(e){return Cl.createHash("sha256").update(zn.readFileSync(e)).digest("base64url")}function xl(e){let t=String(e||"").replace(/^\./,"").trim().toLowerCase();return t?`.${t}`:void 0}function Ur(e,t=!1){if(t)return"application/javascript";switch(String(e||"").replace(/^\./,"").trim().toLowerCase()){case"js":case"bundle":case"hbc":return"application/javascript";case"json":return"application/json";case"png":return"image/png";case"jpg":case"jpeg":return"image/jpeg";case"gif":return"image/gif";case"webp":return"image/webp";case"svg":return"image/svg+xml";case"ttf":return"font/ttf";case"otf":return"font/otf";case"woff":return"font/woff";case"woff2":return"font/woff2";case"mp3":return"audio/mpeg";case"m4a":return"audio/mp4";case"aac":return"audio/aac";case"wav":return"audio/wav";case"mp4":return"video/mp4";case"mov":return"video/quicktime";case"pdf":return"application/pdf";default:return"application/octet-stream"}}function Ll(e){if(!e||typeof e!="object"||Array.isArray(e))return;let{_internal:t,hooks:n,mods:r,...i}=e;return i}import Ml from"fs";import $m from"path";import{spawnSync as Fl}from"child_process";function Ul(e){let t=String(e||"all").trim().toLowerCase();if(t==="ios")return["ios"];if(t==="android")return["android"];if(t==="all"||t==="both")return["ios","android"];throw new Error("Platform must be ios, android, or all. Flutter web does not support Shorebird OTA.")}function Ro(e,t){let n=String(e.track||e.channel||t||"stable").trim().toLowerCase();if(n==="stable"||n==="production")return"stable";if(n==="staging"||n==="preview")return"staging";throw new Error("Shorebird track must be stable or staging.")}function wm(e=process.cwd()){let t=Fl("shorebird",["--version"],{cwd:e,encoding:"utf8",env:{...process.env}});return t.error||t.status!==0?{ok:!1,error:t.error?.message||t.stderr?.trim()||`exit ${t.status}`}:{ok:!0,version:(t.stdout||t.stderr||"").trim().split(/\r?\n/)[0]}}function Wn(e=process.cwd()){let t=$m.join(e,"shorebird.yaml");return Ml.existsSync(t)?Ml.readFileSync(t,"utf8").match(/^\s*app_id\s*:\s*['"]?([^\s#'"]+)/m)?.[1]:void 0}function Ht(e=process.cwd()){let t=wm(e);if(!t.ok)throw new Error("The Shorebird CLI is required for Flutter OTA. Install it from https://docs.shorebird.dev, then run `mach ota setup` again.");return t.version||"installed"}function Bt(e,t=process.cwd()){let n=Fl("shorebird",e,{cwd:t,stdio:"inherit",env:{...process.env,CI:process.env.CI||void 0}});if(n.error)throw new Error(n.error.message);if(n.status!==0)throw new Error(`shorebird ${e.join(" ")} exited with code ${n.status}.`)}function Bl(e,t,n){let r=n?.trim()||K(e,"store","production"),i=ce(e,r);if(!i)throw new Error(`Build profile "${r}" was not found in mach.config.json.`);let o={...i.flutter||{},...i[t]?.flutter||{}},s=[],a=[];o.flavor&&s.push("--flavor",String(o.flavor)),o.target&&s.push("--target",Et(o.target));let l=Array.isArray(o.dartDefinesFromEnv)?o.dartDefinesFromEnv:[];for(let c of l){let d=process.env[c];if(d===void 0)throw new Error(`Flutter compile-time value ${c} is required by dartDefinesFromEnv but is not defined.`);a.push(`--dart-define=${c}=${d}`)}return[...s,...a.length?["--",...a]:[]]}function Om(e){let t=e.releaseVersion?.trim(),n=e.patchNumber?.trim();if(!t||!n)throw new Error("Both --release-version <version> and --patch-number <number> are required.");if(!/^[1-9]\d*$/.test(n))throw new Error("--patch-number must be a positive integer.");return{releaseVersion:t,patchNumber:n}}function Hl(e,t){if(t.profile&&!ce(e,t.profile))throw new Error(`Build profile "${t.profile}" was not found in mach.config.json.`);if(Ht(),Wn())return;let n=["init"];if(e.name&&n.push("--display-name",e.name),(t.yes||process.env.CI)&&n.push("--no-confirm"),Bt(n),!Wn())throw new Error("Shorebird initialization finished without creating a valid shorebird.yaml.")}function jl(e,t){Ht();let n=e.flutter?.sdkVersion;for(let r of Ul(t.platform)){let i=["release",r];n&&i.push("--flutter-version",n),(t.yes||process.env.CI)&&i.push("--no-confirm"),i.push(...Bl(e,r,t.profile)),Bt(i)}}function Gl(e,t){Ht();let n=Ro(t,e.ota?.channel);for(let r of Ul(t.platform)){let i=["patch",r,"--release-version",t.releaseVersion?.trim()||"latest","--track",n];(t.yes||process.env.CI)&&i.push("--no-confirm"),i.push(...Bl(e,r,t.profile)),Bt(i)}}function Vl(e){if(Ht(),e.json)throw new Error("Shorebird does not provide a stable JSON contract for this command; omit --json.");Bt(["releases","list"]),e.releaseVersion&&Bt(["patches","list","--release-version",e.releaseVersion])}function zl(e,t){Ht();let{releaseVersion:n,patchNumber:r}=Om(t);if(e==="promote"){Bt(["patches","promote","--release-version",n,"--patch-number",r]);return}Bt(["patches","set-track","--release-version",n,"--patch-number",r,"--track","stable"])}var be=`${f.npmScope}/mach/expo-plugin`,Oo=()=>process.stdin.isTTY&&process.stdout.isTTY,jr=()=>{Dm("Operation cancelled."),process.exit(0)},De=e=>{if(typeof e!="string")return;let t=e.trim();return t.length>0?t:void 0};function dn(e){if(!W.existsSync(e))return null;try{return JSON.parse(W.readFileSync(e,"utf-8"))}catch{return null}}function td(e,t){W.writeFileSync(e,`${JSON.stringify(t,null,2)}
|
|
2224
|
+
`)}function un(){let e=re();return e?.projectId||(xe.error(`No ${f.configFileName} found or missing projectId. Run \`${f.nameLower} link\` first.`),process.exit(1)),e}function Wl(e){td(se.join(process.cwd(),f.configFileName),e)}function Gr(e){let t=de(e.framework);if(t)return t;let n=dn(se.join(process.cwd(),"package.json"))||{},r={...n.dependencies||{},...n.devDependencies||{}};return r.expo?"expo":(r["react-native"],"react-native")}function cn(e,t){let n=String(e||"").trim().toLowerCase();return n==="shorebird"?"shorebird":n==="expo"||n==="expo-updates"?"expo-updates":n==="react-native"||n==="mach-react-native"||n==="rn"?"mach-react-native":t==="flutter"?"shorebird":"expo-updates"}function nd(e){if(e==="shorebird")throw new Error("shorebird is only available for Flutter projects.");if(e==="mach-react-native")throw new Error("mach-react-native is reserved for a future Mach-native OTA client. Use expo-updates for Expo and bare React Native projects.");return e}function pn(e,t){return(de(t.framework)||Gr(e))==="flutter"}function Yn(e){return{platform:e.platform,profile:e.profile,releaseVersion:e.releaseVersion,patchNumber:e.patchNumber,track:e.track,channel:e.channel||e.branch,message:e.message,yes:e.yes,json:e.json}}function Do(e){if(e==="flutter")throw new Error("Mach OTA currently supports Expo and bare React Native through expo-updates; Flutter OTA is not enabled.");return e}function Po(e){let t=String(e||"all").trim().toLowerCase();if(t==="ios")return["ios"];if(t==="android")return["android"];if(t==="all"||t==="both")return["ios","android"];throw new Error("Platform must be ios, android, or all.")}function Nm(e){return W.existsSync(se.join(e,"pnpm-lock.yaml"))?{command:"pnpm",args:["add","-D",`${f.npmScope}/mach@latest`],label:`pnpm add -D ${f.npmScope}/mach@latest`}:W.existsSync(se.join(e,"yarn.lock"))?{command:"yarn",args:["add","-D",`${f.npmScope}/mach@latest`],label:`yarn add -D ${f.npmScope}/mach@latest`}:W.existsSync(se.join(e,"bun.lockb"))||W.existsSync(se.join(e,"bun.lock"))?{command:"bun",args:["add","-d",`${f.npmScope}/mach@latest`],label:`bun add -d ${f.npmScope}/mach@latest`}:{command:"npm",args:["install","--save-dev",`${f.npmScope}/mach@latest`],label:`npm install --save-dev ${f.npmScope}/mach@latest`}}function Vr(e){let t=dn(se.join(e,"package.json"))||{};return!!(t.dependencies?.[`${f.npmScope}/mach`]||t.devDependencies?.[`${f.npmScope}/mach`])}function Br(e){let t=dn(se.join(e,"node_modules",f.npmScope,"mach","package.json"));return De(t?.version)}function rd(e,t){let n=o=>o.replace(/^v/,"").split(/[.-]/).slice(0,3).map(s=>Number.parseInt(s,10)||0),r=n(e),i=n(t);for(let o=0;o<3;o+=1)if(r[o]!==i[o])return r[o]>i[o]?1:-1;return 0}function xm(e){let t=Br(e);return!Vr(e)||!t||rd(t,vt)<0}function Lm(e){let t=Nm(e),n=ed(t.command,t.args,{cwd:e,stdio:"inherit",env:{...process.env}});if(n.error)return{ok:!1,label:t.label,error:n.error.message};if(n.status!==0)return{ok:!1,label:t.label,error:`${t.command} exited with code ${n.status}`};let r=Br(e),i=!!r&&rd(r,vt)>=0;return{ok:Vr(e)&&i,label:t.label,error:i?void 0:`installed ${r||"unknown"}, requires ${vt} or newer`}}function Yl(e){if(typeof e=="string")return e;if(Array.isArray(e)&&typeof e[0]=="string")return e[0]}function Mm(e,t){let n=["app.config.json","app.json"].find(a=>W.existsSync(se.join(e,a)));if(!n)return null;let r=se.join(e,n),i=dn(r);if(!i)return null;let o=i.expo&&typeof i.expo=="object"?i.expo:i;if(t==="react-native"&&n==="app.json"&&(!i.expo||typeof i.expo!="object")){let a=dn(se.join(e,"package.json"))||{},l=De(i.displayName)||De(i.name)||De(a.name)||"App",c=(De(a.name)||l).toLowerCase().replace(/[^a-z0-9-]+/g,"-").replace(/^-+|-+$/g,"")||"app";i.expo={name:l,slug:c,version:De(a.version)||"1.0.0"},o=i.expo}let s=Array.isArray(o.plugins)?o.plugins:[];return s.some(a=>Yl(a)===be)||(o.plugins=[...s.filter(a=>{let l=Yl(a);return l!=="./plugins/withMachDeepLinks"&&l!=="plugins/withMachDeepLinks"}),be],td(r,i)),n}function Fm(e){let t=["app.config.ts","app.config.js"].find(m=>W.existsSync(se.join(e,m)));if(!t)return"missing";let n=se.join(e,t),r=W.readFileSync(n,"utf-8");if(r.includes(be))return"already";let i=/(['"`])(?:\.\/)?plugins\/withMachDeepLinks\1/g;if(i.test(r))return W.writeFileSync(n,r.replace(i,(m,A)=>`${A}${be}${A}`)),"inserted";let o=/(^[ \t]*)plugins\s*:\s*\[([\s\S]*?)\]/m.exec(r);if(!o||o.index===void 0)return"manual";let s=r.includes(`\r
|
|
2201
2225
|
`)?`\r
|
|
2202
2226
|
`:`
|
|
2203
2227
|
`,a=o[1]||"",l=o[2]||"",d=l.match(/\r?\n([ \t]+)\S/)?.[1]||`${a} `,u=l.trim().length===0?`${s}${d}'${be}',${s}${a}`:l.includes(`
|
|
2204
|
-
`)||l.includes("\r")?`${s}${d}'${be}',${l}`:`${s}${d}'${be}',${s}${d}${l.trim()}${s}${a}`,p=`${o[0].slice(0,o[0].indexOf("[")+1)}${u}]`;return W.writeFileSync(n,`${r.slice(0,o.index)}${p}${r.slice(o.index+o[0].length)}`),"inserted"}async function
|
|
2205
|
-
`),"Flutter OTA setup"),
|
|
2206
|
-
`),"OTA setup"),await Ro({...e,action:"verify"})}async function Wm(e){let t=un();if(pn(t,e)){if(cn(e.engine||t.ota?.engine,"flutter")!=="shorebird")throw new Error("Flutter OTA is not configured for Shorebird. Run `mach ota setup`.");Hl(t,Yn(e)),Ze(Ae.green("\u2713 Flutter OTA patch published through Shorebird."));return}Wt();let n=Do(de(e.framework)||Gr(t)),r;try{r=td(cn(e.engine||t.ota?.engine,n))}catch(a){xe.error(`${a.message} Run \`mach ota setup\` to migrate this project.`),process.exit(1)}let i=Pe(e.channel||e.branch||t.ota?.channel)||"production",o=Po(e.platform||"all"),s=Dm();s.start(`Publishing OTA update (${o.join("+")}, ${i})`);try{let a=[];for(let l of o){let c=To(t,e,l),d=Um({platform:l,runtimeVersion:c,channel:i,url:Pe(t.ota?.url)||""});s.message(`Exporting and uploading ${l} OTA bundle for runtime ${c}...`),a.push(await zm({config:t,engine:r,platform:l,channel:i,runtimeVersion:c,message:e.message,expoConfig:d.expoConfig}))}if(s.stop("OTA update published."),e.json)xe.info(JSON.stringify({status:"success",updates:a},null,2));else{let l=Array.from(new Set(a.map(c=>c.runtimeVersion).filter(Boolean)));Ze(Ae.green(`\u2713 OTA update live on "${i}" for runtime ${l.join(", ")||"unknown"}.`));for(let c of a)xe.info(Ae.dim(`${c.platform}: ${c.updateId}`))}}catch(a){s.stop("OTA publish failed."),xe.error(a.response?.data?.message||a.message),process.exit(1)}}async function Ro(e){let t=un();if(pn(t,e)){let a=[];e.profile&&a.push(ce(t,e.profile)?{level:"pass",message:`Flutter profile ${e.profile} resolves successfully.`}:{level:"fail",message:`Build profile ${e.profile} was not found in mach.config.json.`});let l=cn(e.engine||t.ota?.engine,"flutter");a.push(l==="shorebird"?{level:"pass",message:"Flutter OTA engine is Shorebird."}:{level:"fail",message:"Flutter OTA engine must be shorebird. Run `mach ota setup`."}),a.push(t.ota?.enabled?{level:"pass",message:"OTA is enabled in mach.config.json."}:{level:"fail",message:"OTA is not enabled. Run `mach ota setup`."});let c=Wn();a.push(c?{level:"pass",message:`shorebird.yaml contains app id ${c}.`}:{level:"fail",message:"shorebird.yaml is missing or has no app_id. Run `mach ota setup`."});try{let u=jt();a.push({level:"pass",message:`Shorebird CLI is available (${u}).`})}catch(u){a.push({level:"fail",message:u.message})}process.env.CI&&!process.env.SHOREBIRD_TOKEN?a.push({level:"fail",message:"CI requires SHOREBIRD_TOKEN in its secret environment."}):process.env.SHOREBIRD_TOKEN?a.push({level:"pass",message:"SHOREBIRD_TOKEN is available from the environment."}):a.push({level:"warn",message:"No SHOREBIRD_TOKEN is set. This is fine for an interactive machine already logged in to Shorebird."});for(let u of a){let p=u.level==="pass"?Ae.green("PASS"):u.level==="warn"?Ae.yellow("WARN"):Ae.red("FAIL");xe.info(`${p} ${u.message}`)}let d=a.filter(u=>u.level==="fail").length;if(d){Ze(Ae.red(`OTA verification failed with ${d} issue(s).`)),process.exitCode=1;return}Ze(Ae.green("Flutter OTA verification passed."));return}let n=Do(de(e.framework)||Gr(t)),r=cn(e.engine||t.ota?.engine,n),i=[],o=t.ota;if(i.push(o?.enabled?{level:"pass",message:"mach.config.json has ota.enabled."}:{level:"fail",message:"mach.config.json is missing ota.enabled. Run `mach ota setup`."}),i.push(o?.url?{level:"pass",message:`OTA URL configured: ${o.url}`}:{level:"fail",message:"OTA URL is missing. Run `mach ota setup`."}),i.push(o?.channel?{level:"pass",message:`Default channel: ${o.channel}`}:{level:"warn",message:"No default OTA channel configured; publish will use production."}),i.push(o?.runtimeVersionPolicy||o?.runtimeVersion?{level:"pass",message:"Runtime version policy configured."}:{level:"warn",message:"No explicit runtime policy configured; Mach will use Expo runtimeVersion or package.json version."}),r==="expo-updates"){let a=dn(se.join(process.cwd(),"package.json"))||{},l={...a.dependencies||{},...a.devDependencies||{}};n==="react-native"&&i.push(l.expo?{level:"pass",message:"Expo Modules are installed for the bare React Native project."}:{level:"fail",message:"Expo Modules are missing. Run `mach ota setup` to install the bare React Native OTA runtime."}),i.push(l["expo-updates"]?{level:"pass",message:"expo-updates is installed."}:{level:"fail",message:"expo-updates is missing. Run `mach ota setup`."}),i.push(Vr(process.cwd())?{level:"pass",message:`${f.npmScope}/mach is installed locally for the Expo plugin.`}:{level:"fail",message:`${f.npmScope}/mach is not installed locally; run \`mach ota setup\`.`});let c=Po(e.platform||"all"),d=Pe(e.channel||e.branch||o?.channel)||"production",u=Pe(o?.url)||"",p=c.map(y=>{let g=To(t,e,y);return{platform:y,runtimeVersion:g,delivery:In(process.cwd(),{platform:y,runtimeVersion:g,channel:d,url:u})}}),m=p[0]?.delivery;if(m){let y=m.expoConfig.updates?.enabled!==!1,g=Pe(m.expoConfig.updates?.checkAutomatically)?.toUpperCase()||"ON_LOAD";i.push(m.url===o?.url?{level:"pass",message:"Expo Updates URL resolves to Mach."}:{level:"warn",message:`Expo Updates URL resolves to ${m.url||"none"} instead of ${o?.url||"the Mach OTA URL"}.`}),i.push(m.channel===d?{level:"pass",message:`Expo update channel header resolves to ${d}.`}:{level:"warn",message:`Expo update channel header is ${m.channel||"not set"}; install the latest ${f.npmScope}/mach package and rebuild.`}),i.push(y?{level:"pass",message:"Expo Updates is enabled."}:{level:"fail",message:"Expo config has updates.enabled=false, so this app cannot receive OTA updates."}),i.push(g!=="NEVER"&&g!=="ON_ERROR_RECOVERY"?{level:"pass",message:`Expo checks for updates automatically (${g}).`}:{level:"fail",message:`Expo checkAutomatically is ${g}; use ON_LOAD to receive Mach updates when the app starts.`})}else i.push({level:"fail",message:`Could not resolve Expo config. Confirm ${be} is present and run \`mach ota setup\` again.`});for(let{platform:y,runtimeVersion:g,delivery:h}of p)i.push(h?.runtimeVersion===g?{level:"pass",message:`${y} Expo runtime resolves to ${g}.`}:{level:"fail",message:`${y} Expo runtime resolves to ${h?.runtimeVersion||"none"} instead of ${g}. Run \`mach ota setup\`, then rebuild the app.`});if(n==="react-native"){let y=c,g=hi(process.cwd()).filter(A=>y.includes(A)),h=as(process.cwd());if(g.includes("android")){let A=!!(h.androidManifest&&h.androidStrings)&&W.readFileSync(h.androidManifest,"utf-8").includes("expo.modules.updates.EXPO_UPDATE_URL")&&W.readFileSync(h.androidStrings,"utf-8").includes("expo_runtime_version");i.push(A?{level:"pass",message:"Android native Expo Updates configuration is synchronized."}:{level:"fail",message:"Android native Expo Updates configuration is missing. Run `mach ota setup --platform android`."})}if(g.includes("ios")){let A=!!h.iosExpoPlist&&W.readFileSync(h.iosExpoPlist,"utf-8").includes("EXUpdatesURL")&&W.readFileSync(h.iosExpoPlist,"utf-8").includes("EXUpdatesRuntimeVersion");i.push(A?{level:"pass",message:"iOS native Expo Updates configuration is synchronized."}:{level:"fail",message:"iOS native Expo Updates configuration is missing. Run `mach ota setup --platform ios`."})}}}else i.push({level:"fail",message:"mach-react-native is not available yet. Run `mach ota setup` to migrate this project to expo-updates."});for(let a of i){let l=a.level==="pass"?Ae.green("PASS"):a.level==="warn"?Ae.yellow("WARN"):Ae.red("FAIL");xe.info(`${l} ${a.message}`)}let s=i.filter(a=>a.level==="fail").length;s>0&&(Ze(Ae.red(`OTA verification failed with ${s} issue(s).`)),process.exit(1)),Ze(Ae.green("OTA verification passed."))}async function Ym(e){let t=un();if(pn(t,e)){Gl(Yn(e));return}Wt();let n=await R.get(`/ota/${t.projectId}/updates`),r=n.data.updates||[];if(e.json){xe.info(JSON.stringify(n.data,null,2));return}if(r.length===0){Ze("No OTA updates found.");return}for(let i of r){let o=i.stats?.total||{};xe.info(`${Ae.bold(i.updateId)} ${Ae.dim(`${i.platform} ${i.channelName} runtime ${i.runtimeVersion}`)} ${i.status||"active"}`),xe.info(Ae.dim(` downloads ios=${o.iosDownloaded||0} android=${o.androidDownloaded||0} applied ios=${o.iosApplied||0} android=${o.androidApplied||0}`))}Ze(`Found ${r.length} OTA update(s).`)}async function Xl(e,t){let n=un();if(pn(n,t)){Vl(e,Yn(t)),Ze(Ae.green(`\u2713 Shorebird patch ${e==="rollback"?"selected for rollback":"promoted"}.`));return}Wt();let r=Pe(t.updateId);r||(xe.error(`Missing update id. Use \`${f.nameLower} ota ${e} --update-id <id>\`.`),process.exit(1));let i=await R.post(`/ota/${n.projectId}/updates/${encodeURIComponent(r)}/${e}`);t.json?xe.info(JSON.stringify(i.data,null,2)):Ze(Ae.green(`\u2713 OTA update ${e==="rollback"?"rolled back":"promoted"}: ${r}`))}async function mt(e,t={}){let n=e||t.action||"publish";if(n==="setup")return Km({...t,action:n});if(n==="release"){let i=un();if(!pn(i,t))throw new Error("`mach ota release` is a Flutter/Shorebird command. Use `mach build` for Expo and React Native base builds.");jl(i,Yn(t)),Ze(Ae.green("\u2713 Flutter Shorebird base release created."));return}if(n==="publish")return Wm({...t,action:n});if(n==="verify")return Ro({...t,action:n});if(n==="list")return Ym({...t,action:n});if(n==="rollback")return Xl("rollback",{...t,action:n});if(n==="promote")return Xl("promote",{...t,action:n});let r=await Om({message:"What do you want to do?",options:[{value:"setup",label:"Setup OTA"},{value:"publish",label:"Publish OTA update"},{value:"verify",label:"Verify OTA setup"},{value:"list",label:"List OTA updates"}]});return jr(r)&&Hr(),mt(r,t)}import{intro as qm,outro as od,log as fn}from"@clack/prompts";import it from"chalk";async function sd(){qm(it.blue(`${f.name} CLI - User Profile`));let e=De();if(!e){fn.warn(it.yellow("You are not logged in.")),fn.info(`Run \`${f.nameLower} login\` to authenticate.`),od();return}fn.info(`${it.bold("Logged in as:")} ${it.green(e.email)}`);try{await R.get("/projects");let n=De().token.split(".");if(n.length===3){let r=JSON.parse(Buffer.from(n[1],"base64").toString());if(r.exp){let i=new Date(r.exp*1e3),o=new Date,s=i.getTime()-o.getTime();if(s>0){let a=Math.round(s/6e4),l=(a/60).toFixed(1);fn.info(`${it.bold("Token status:")} Valid (Expires in ~${l}h / ${a}m)`)}else fn.warn(`${it.bold("Token status:")} ${it.red("Expired")} (Auto-refresh failed)`)}}}catch{fn.warn(`${it.bold("Token status:")} ${it.red("Unreachable")} (Session might be truly expired)${St}`)}od(it.blue("---"))}import{spawn as ld}from"child_process";import{cancel as Zm,isCancel as Qm,log as je,select as eg}from"@clack/prompts";import $e from"chalk";import tg from"fs";import dd from"path";import Jm from"net";async function Xm(e){return new Promise(t=>{let n=Jm.createServer();n.once("error",r=>{r.code==="EADDRINUSE"?t(!0):t(!1)}),n.once("listening",()=>{n.close(),t(!1)}),n.listen(e,"0.0.0.0")})}async function ad(e,t=20){let n=e;for(;n<e+t;){if(!await Xm(n))return n;n++}throw new Error(`Could not find an available port after ${t} attempts starting from ${e}.`)}var cd=async e=>{je.info($e.blue(`Starting ${f.name} Dev Orchestrator...`));let t=re(),n=e.buildProfile||K(t,"development","development"),r=t?ce(t,n):null,i=t?Yt(t):void 0,o=Ie(process.cwd(),t?.appDirectory,{requireAppDirectory:!0}),s={...process.env};if(t?.projectId)try{je.info($e.dim(`Fetching managed secrets for profile: ${n}...`));let m=r?.environment||n,y=await R.get(`/projects/${t.projectId}/secrets/export?env=${encodeURIComponent(m)}`);y.data?.status==="success"&&y.data.secrets&&(Object.assign(s,y.data.secrets),je.info($e.magenta(`\u2713 Injected secrets from ${f.name} Dashboard.`)))}catch{je.warn("Could not fetch managed secrets. Running with local env only.")}if(t&&Object.assign(s,qt(t,f.envPrefix)),r&&(Object.assign(s,qt(r,`${f.envPrefix}PROFILE_`)),r.env&&Object.assign(s,r.env)),i==="flutter"){let m=e.ios?"ios":e.android?"android":void 0,y=Jt(t,r,m);Zt(o.appRoot,n,r||{},m);let g=Ye(o.appRoot),h=It().flutter;if(!h)throw new Error("Flutter CLI is unavailable. Install Flutter before running mach start.");if(t?.flutter?.sdkVersion&&h!==t.flutter.sdkVersion)throw new Error(`Flutter SDK mismatch: ${t.flutter.sdkVersion} is configured, but ${h} is active. Activate the pinned SDK (for example with FVM) before starting the app.`);let A=["run"];if([e.ios?"ios":"",e.android?"android":"",e.web?"web":""].filter(Boolean).length>1)throw new Error("Choose only one Flutter device target: --ios, --android, or --web.");if(e.web)A.push("-d","chrome");else if(e.ios||e.android){let M=e.ios?"ios":"android",B=us(cs(),M);if(B.length===0)throw new Error(`No available Flutter ${M==="ios"?"iOS":"Android"} device was found. Start a simulator/emulator or connect a device, then run \`flutter devices\`.`);let j=B[0];if(B.length>1&&process.stdin.isTTY&&process.stdout.isTTY){let Q=await eg({message:`Select Flutter ${M==="ios"?"iOS":"Android"} device:`,options:B.map(ie=>({value:ie.id,label:ie.name||ie.id,hint:ie.emulator?"Simulator / emulator":"Physical device"}))});if(Qm(Q)){Zm("Start cancelled.");return}j=B.find(ie=>ie.id===Q)||j}A.push("-d",j.id),je.info($e.dim(`Flutter device: ${j.name||j.id}`))}let v=y.flavor||g.defaultFlavor;v&&A.push("--flavor",v),A.push("--target",Et(y.target));let S=Xt(y,{developmentClient:r?.developmentClient,distribution:r?.distribution,simulator:r?.ios?.simulator??r?.simulator});S!=="debug"&&A.push(`--${S}`),A.push(...ds(y.dartDefinesFromEnv,s)),e.clear&&je.info($e.dim("Flutter manages incremental build caches; --clear is ignored.")),(e.tunnel||e.lan||e.localhost||e.port)&&je.info($e.dim("Metro network options do not apply to Flutter and were ignored.")),je.info($e.dim(`Flutter app: ${g.name||dd.basename(o.appRoot)} \xB7 profile ${n}`));let L=ld("flutter",A,{cwd:o.appRoot,stdio:"inherit",env:s});return new Promise((M,B)=>{L.on("exit",j=>j===0?M():B(new Error(`Flutter exited with code ${j}`))),L.on("error",B)})}let a=!1;try{let m=JSON.parse(tg.readFileSync(dd.join(o.appRoot,"package.json"),"utf-8"));a=!!(m.dependencies?.expo||m.devDependencies?.expo)}catch{je.warn("Could not parse package.json. Defaulting to Bare React Native mode.")}let l=Number(e.port||r?.port||8081),c=await ad(l);c!==l&&je.info($e.yellow(`Port ${l} is busy. ${f.name} is using ${c} instead.`));let d=process.platform==="win32"?"npx.cmd":"npx",u=[];if(a?(u=["expo","start","--port",String(c)],e.clear&&u.push("--clear"),e.tunnel&&u.push("--tunnel"),e.lan&&u.push("--lan"),e.localhost&&u.push("--localhost"),e.ios&&u.push("--ios"),e.android&&u.push("--android"),e.web&&u.push("--web")):(u=["react-native","start","--port",String(c)],e.clear&&u.push("--clear")),a){let m=[`${$e.cyan("i")} open iOS simulator`,`${$e.cyan("a")} open Android emulator/device`,`${$e.cyan("w")} open web`,`${$e.cyan("r")} reload app`];je.info([$e.bold("Launch controls"),...m.map(y=>` ${y}`),"",$e.dim("Direct launch: mach start --ios | --android | --web"),$e.dim(`Metro URL: http://localhost:${c}`)].join(`
|
|
2207
|
-
`))}else
|
|
2228
|
+
`)||l.includes("\r")?`${s}${d}'${be}',${l}`:`${s}${d}'${be}',${s}${d}${l.trim()}${s}${a}`,p=`${o[0].slice(0,o[0].indexOf("[")+1)}${u}]`;return W.writeFileSync(n,`${r.slice(0,o.index)}${p}${r.slice(o.index+o[0].length)}`),"inserted"}async function Um(e,t,n){let r=[];if(xm(e)){let o=Br(e),s=!!(n.installPlugin||n.yes);if(!s&&!n.skipInstall&&Oo()){let a=await Ql({message:o?`Update the local ${f.npmScope}/mach Expo plugin (${o} \u2192 ${vt})?`:`Install ${f.npmScope}/mach locally so Expo can use ${be}?`,initialValue:!0});Hr(a)&&jr(),s=!!a}if(s&&!n.skipInstall){let a=Lm(e);a.ok?r.push(`Installed a compatible ${be} with ${a.label}.`):r.push(`Could not install ${f.npmScope}/mach with ${a.label}: ${a.error||"unknown error"}.`)}else r.push(`Install ${f.npmScope}/mach@${vt} or newer in this app so Expo can resolve ${be}.`)}else r.push(`Local ${be} is compatible (${Br(e)}).`);let i=Fm(e);if(i==="already"&&r.push(`Expo config already includes ${be}.`),i==="inserted"&&r.push(`Expo config updated to include ${be}.`),i==="manual"&&r.push(`Add "${be}" to the plugins array in app.config.ts/app.config.js.`),i==="missing"){let o=Mm(e,t);o?r.push(`${o} updated to include ${be}.`):r.push(`Add "${be}" to your Expo config plugins array.`)}return r}async function ql(e,t){if(t.skipInstall)return!1;if(t.yes)return!0;if(!Oo())return!1;let n=await Ql({message:e,initialValue:!0});return Hr(n)&&jr(),!!n}async function Bm(e,t,n){let r=[];if(t==="react-native"&&!xt(e,"expo"))if(await ql("Install Expo Modules required by the Mach OTA runtime? This updates package and native project files.",n)){let o=is(e);if(!o.ok||!xt(e,"expo"))throw new Error(`Expo Modules installation failed: ${o.error||o.command}`);r.push("Installed and configured Expo Modules for the existing React Native project.")}else r.push("Expo Modules are required. Run `npx install-expo-modules@latest`, then run `mach ota setup` again.");if(!xt(e,"expo-updates"))if(await ql("Install the expo-updates runtime?",n)){let o=os(e);if(!o.ok||!xt(e,"expo-updates"))throw new Error(`expo-updates installation failed: ${o.error||o.command}`);r.push("Installed the Expo-compatible expo-updates version.")}else r.push("Install expo-updates with `npx expo install expo-updates`, then run `mach ota setup` again.");return r}async function Jl(e,t,n,r,i){if(t)return t;if(i||!Oo()){if(r)throw new Error(`${e.replace(/:$/,"")} is required.`);return}let o=await Cm({message:e,placeholder:n,validate(s){if(r&&s.trim().length===0)return"Required."}});return Hr(o)&&jr(),De(o)}function To(e,t,n){return _n(e,{runtimeVersion:t.runtimeVersion,framework:de(t.framework)||de(e.framework),platform:n})}function Hm(e){let t=In(process.cwd(),e);if(!t)throw new Error(`Resolved Expo OTA configuration does not match this publish: Expo config could not be resolved. Run \`mach ota setup\` to update ${be}, then create a new native build if its embedded runtime changes.`);let n=[];if(t.runtimeVersion!==e.runtimeVersion&&n.push(`runtime is ${t.runtimeVersion||"missing"} (expected ${e.runtimeVersion})`),t.channel!==e.channel&&n.push(`channel is ${t.channel||"missing"} (expected ${e.channel})`),t.url!==e.url&&n.push(`URL is ${t.url||"missing"} (expected ${e.url})`),n.length>0)throw new Error(`Resolved Expo OTA configuration does not match this publish: ${n.join("; ")}. Run \`mach ota setup\` to update ${be}, then create a new native build if its embedded runtime changes.`);return t}function jm(e){return $o.createHash("sha256").update(W.readFileSync(e)).digest("hex")}function Gm(e){let t=se.extname(e).toLowerCase();return t===".json"?"application/json":t===".js"||t===".bundle"||t===".hbc"?"application/javascript":t===".map"?"application/json":t===".png"?"image/png":t===".jpg"||t===".jpeg"?"image/jpeg":t===".webp"?"image/webp":t===".gif"?"image/gif":t===".svg"?"image/svg+xml":t===".ttf"?"font/ttf":t===".otf"?"font/otf":t===".woff"?"font/woff":t===".woff2"?"font/woff2":"application/octet-stream"}function id(e){let t=[];if(!W.existsSync(e))return t;for(let n of W.readdirSync(e)){let r=se.join(e,n),i=W.statSync(r);i.isDirectory()?t.push(...id(r)):i.isFile()&&t.push(r)}return t}function Vm(e,t){let n=e.filter(r=>{let i=r.toLowerCase();return i.endsWith(".map")?!1:i.endsWith(".js")||i.endsWith(".bundle")||i.endsWith(".hbc")});return n.find(r=>r.toLowerCase().includes(t))||n.sort((r,i)=>W.statSync(i).size-W.statSync(r).size)[0]}async function Xl(e){let t=await w.post("/ota/upload-url",{projectId:e.projectId,updateId:e.updateId,platform:e.platform,fileName:e.fileName,contentType:e.contentType});if(t.data.status!=="success")throw new Error(t.data.message||`Could not create upload URL for ${e.fileName}`);let n=W.statSync(e.filePath).size;return await km.put(t.data.uploadUrl,W.createReadStream(e.filePath),{headers:{"Content-Type":e.contentType,"Content-Length":n},maxBodyLength:1/0,maxContentLength:1/0}),{key:t.data.key,url:t.data.publicUrl,contentType:e.contentType,hash:jm(e.filePath),size:n}}function od(e,t,n,r={}){let i=ed(e,t,{cwd:n,stdio:"inherit",env:{...process.env,CI:process.env.CI||"1",EXPO_NO_TELEMETRY:"1",...r}});if(i.error)throw new Error(i.error.message);if(i.status!==0)throw new Error(`${e} ${t.join(" ")} exited with code ${i.status}`)}function zm(e,t,n,r,i){od("npx",["expo","export","--platform",e,"--output-dir",t],process.cwd(),{MACH_OTA_RUNTIME_VERSION:n,MACH_OTA_CHANNEL:r,MACH_OTA_URL:i})}function Km(e,t){let n=e==="ios"?"main.jsbundle":"index.android.bundle",i=["index.js","index.ts","index.tsx"].find(s=>W.existsSync(se.join(process.cwd(),s)))||"index.js",o=se.join(t,"assets");W.mkdirSync(o,{recursive:!0}),od("npx",["react-native","bundle","--platform",e,"--dev","false","--entry-file",i,"--bundle-output",se.join(t,n),"--assets-dest",o],process.cwd())}async function Wm(e){let t=e.config.projectId,n=`ota_${Date.now()}_${e.platform}_${$o.randomUUID().slice(0,8)}`,r=se.join(process.cwd(),".mach","ota",n,e.platform);W.rmSync(r,{recursive:!0,force:!0}),W.mkdirSync(r,{recursive:!0}),e.engine==="expo-updates"?zm(e.platform,r,e.runtimeVersion,e.channel,e.config.ota?.url||""):Km(e.platform,r);let i=e.engine==="expo-updates"?kl(r,e.platform):void 0,o=i?Nl(r,i):id(r),s=i?se.join(r,i.bundle):Vm(o,e.platform);if(!s)throw new Error(`Could not find a ${e.platform} JS bundle in ${r}.`);let a=new Map((i?.assets||[]).map(b=>[b.path,b])),l=[];for(let b of o){let v=se.relative(r,b).replace(/\\/g,"/"),E=a.get(v),L=b===s?"application/javascript":E?Ur(E.ext):Gm(b);l.push({filePath:b,relative:v,uploaded:await Xl({projectId:t,updateId:n,platform:e.platform,filePath:b,fileName:v,contentType:L})})}let c=l.find(b=>b.filePath===s),d=e.engine==="expo-updates"?$o.randomUUID():void 0,u=e.engine==="expo-updates"?Ll(e.expoConfig):void 0;if(e.engine==="expo-updates"&&(!u||Object.keys(u).length===0))throw new Error("Could not resolve the public Expo config required by the OTA manifest. Run `mach ota verify` and try again.");let p=i?i.assets.map(b=>{let v=l.find(E=>E.relative===b.path);if(!v)throw new Error(`Could not find uploaded Expo asset ${b.path}.`);return{key:_o(v.filePath),url:v.uploaded.url,contentType:Ur(b.ext),fileExtension:xl(b.ext),hash:vo(v.filePath),size:v.uploaded.size}}):l.filter(b=>b.filePath!==s&&!b.relative.endsWith(".map")).map(b=>({key:b.relative,url:b.uploaded.url,contentType:b.uploaded.contentType,hash:b.uploaded.hash,size:b.uploaded.size})),m=i?{key:_o(c.filePath),url:c.uploaded.url,contentType:Ur(void 0,!0),hash:vo(c.filePath),size:c.uploaded.size}:{key:se.basename(c.relative),url:c.uploaded.url,contentType:c.uploaded.contentType,hash:c.uploaded.hash,size:c.uploaded.size},A={id:d||n,createdAt:new Date().toISOString(),runtimeVersion:e.runtimeVersion,launchAsset:m,assets:p,metadata:{projectId:t,channel:e.channel,...e.message?{message:e.message}:{},engine:e.engine},extra:{...u?{expoClient:u}:{},mach:{projectId:t,updateId:n,...d?{expoUpdateId:d}:{},channel:e.channel,platform:e.platform}}},g=se.join(r,"mach-manifest.json");W.writeFileSync(g,JSON.stringify(A,null,2));let h=await Xl({projectId:t,updateId:n,platform:e.platform,filePath:g,fileName:"manifest.json",contentType:"application/json"}),y=await w.post("/ota/publish",{projectId:t,updateId:n,expoUpdateId:d,channelName:e.channel,runtimeVersion:e.runtimeVersion,platform:e.platform,manifestKey:h.key,message:e.message,launchAsset:m,assets:p});if(y.data.status!=="success")throw new Error(y.data.message||`Failed to publish ${e.platform} OTA update.`);return y.data.update}async function Ym(e){let t=un();if(pn(t,e)){if(cn(e.engine||t.ota?.engine,"flutter")!=="shorebird")throw new Error("Flutter OTA uses Shorebird. Run `mach ota setup --engine shorebird`.");let m=Yn(e),A=Ro(m,t.ota?.channel);return Hl(t,m),t.framework="flutter",t.ota={...t.ota||{},enabled:!0,engine:"shorebird",channel:A},delete t.ota.url,delete t.ota.deploymentUrl,delete t.ota.statsUrl,delete t.ota.runtimeVersion,delete t.ota.runtimeVersionPolicy,Wl(t),Kl([`- ${f.configFileName} now uses customer-owned Shorebird OTA.`,`- shorebird.yaml app id: ${Wn()}`,"- SHOREBIRD_TOKEN is read only from the environment/CI secret store and is never written to Mach config.","- Create a base binary with `mach ota release`, then publish Dart-only changes with `mach ota publish`."].join(`
|
|
2229
|
+
`),"Flutter OTA setup"),wo({...e,engine:"shorebird"})}let n=Do(de(e.framework)||Gr(t)),r;try{r=nd(cn(e.engine,n))}catch(p){xe.error(p.message),process.exit(1)}let i=!!e.yes,o=await Jl("OTA channel:",De(e.channel||e.branch||t.ota?.channel)||"production","production",!0,i),s=`${St.replace(/\/$/,"")}/api/ota/expo/${t.projectId}`,a=De(e.url||t.ota?.url),l=a?.includes("/api/ota/react-native/")?void 0:a,c=await Jl("Mach OTA update URL:",l||s,s,!0,i);t.framework=n;let d={...t.ota||{},enabled:!0,engine:r,channel:o,url:c,deploymentUrl:c,runtimeVersionPolicy:t.ota?.runtimeVersionPolicy||"appVersion"};delete d.statsUrl,t.ota=d,delete t.update,Wl(t);let u=[`${f.configFileName} updated.`];if(u.push(...await Bm(process.cwd(),n,e)),u.push(...await Um(process.cwd(),n,e)),n==="react-native"&&xt(process.cwd(),"expo")&&xt(process.cwd(),"expo-updates")&&Vr(process.cwd())){let p=Po(e.platform||"all"),m=hi(process.cwd()).filter(A=>p.includes(A));m.length===0&&u.push("No matching committed ios/android project was found for native configuration sync.");for(let A of m){let g=To(t,e,A),y=ss({cwd:process.cwd(),platforms:[A],runtimeVersion:g,channel:o,url:c}).find(b=>!b.ok);if(y)throw new Error(`Could not synchronize ${A} Expo Updates configuration: ${y.error||y.command}`);u.push(`Synchronized ${A} native Expo Updates configuration for runtime ${g}.`)}}u.push("Create and install one new native build after initial OTA setup. Existing app binaries keep their embedded update URL."),Kl(u.map(p=>`- ${p}`).join(`
|
|
2230
|
+
`),"OTA setup"),await wo({...e,action:"verify"})}async function qm(e){let t=un();if(pn(t,e)){if(cn(e.engine||t.ota?.engine,"flutter")!=="shorebird")throw new Error("Flutter OTA is not configured for Shorebird. Run `mach ota setup`.");Gl(t,Yn(e)),Ze(ye.green("\u2713 Flutter OTA patch published through Shorebird."));return}Wt();let n=Do(de(e.framework)||Gr(t)),r;try{r=nd(cn(e.engine||t.ota?.engine,n))}catch(a){xe.error(`${a.message} Run \`mach ota setup\` to migrate this project.`),process.exit(1)}let i=De(e.channel||e.branch||t.ota?.channel)||"production",o=Po(e.platform||"all"),s=Tm();s.start(`Publishing OTA update (${o.join("+")}, ${i})`);try{let a=[];for(let l of o){let c=To(t,e,l),d=Hm({platform:l,runtimeVersion:c,channel:i,url:De(t.ota?.url)||""});s.message(`Exporting and uploading ${l} OTA bundle for runtime ${c}...`),a.push(await Wm({config:t,engine:r,platform:l,channel:i,runtimeVersion:c,message:e.message,expoConfig:d.expoConfig}))}if(s.stop("OTA update published."),e.json)xe.info(JSON.stringify({status:"success",updates:a},null,2));else{let l=Array.from(new Set(a.map(c=>c.runtimeVersion).filter(Boolean)));Ze(ye.green(`\u2713 OTA update live on "${i}" for runtime ${l.join(", ")||"unknown"}.`));for(let c of a)xe.info(ye.dim(`${c.platform}: ${c.updateId}`))}}catch(a){s.stop("OTA publish failed."),xe.error(a.response?.data?.message||a.message),process.exit(1)}}async function wo(e){let t=un();if(pn(t,e)){let a=[];e.profile&&a.push(ce(t,e.profile)?{level:"pass",message:`Flutter profile ${e.profile} resolves successfully.`}:{level:"fail",message:`Build profile ${e.profile} was not found in mach.config.json.`});let l=cn(e.engine||t.ota?.engine,"flutter");a.push(l==="shorebird"?{level:"pass",message:"Flutter OTA engine is Shorebird."}:{level:"fail",message:"Flutter OTA engine must be shorebird. Run `mach ota setup`."}),a.push(t.ota?.enabled?{level:"pass",message:"OTA is enabled in mach.config.json."}:{level:"fail",message:"OTA is not enabled. Run `mach ota setup`."});let c=Wn();a.push(c?{level:"pass",message:`shorebird.yaml contains app id ${c}.`}:{level:"fail",message:"shorebird.yaml is missing or has no app_id. Run `mach ota setup`."});try{let u=Ht();a.push({level:"pass",message:`Shorebird CLI is available (${u}).`})}catch(u){a.push({level:"fail",message:u.message})}process.env.CI&&!process.env.SHOREBIRD_TOKEN?a.push({level:"fail",message:"CI requires SHOREBIRD_TOKEN in its secret environment."}):process.env.SHOREBIRD_TOKEN?a.push({level:"pass",message:"SHOREBIRD_TOKEN is available from the environment."}):a.push({level:"warn",message:"No SHOREBIRD_TOKEN is set. This is fine for an interactive machine already logged in to Shorebird."});for(let u of a){let p=u.level==="pass"?ye.green("PASS"):u.level==="warn"?ye.yellow("WARN"):ye.red("FAIL");xe.info(`${p} ${u.message}`)}let d=a.filter(u=>u.level==="fail").length;if(d){Ze(ye.red(`OTA verification failed with ${d} issue(s).`)),process.exitCode=1;return}Ze(ye.green("Flutter OTA verification passed."));return}let n=Do(de(e.framework)||Gr(t)),r=cn(e.engine||t.ota?.engine,n),i=[],o=t.ota;if(i.push(o?.enabled?{level:"pass",message:"mach.config.json has ota.enabled."}:{level:"fail",message:"mach.config.json is missing ota.enabled. Run `mach ota setup`."}),i.push(o?.url?{level:"pass",message:`OTA URL configured: ${o.url}`}:{level:"fail",message:"OTA URL is missing. Run `mach ota setup`."}),i.push(o?.channel?{level:"pass",message:`Default channel: ${o.channel}`}:{level:"warn",message:"No default OTA channel configured; publish will use production."}),i.push(o?.runtimeVersionPolicy||o?.runtimeVersion?{level:"pass",message:"Runtime version policy configured."}:{level:"warn",message:"No explicit runtime policy configured; Mach will use Expo runtimeVersion or package.json version."}),r==="expo-updates"){let a=dn(se.join(process.cwd(),"package.json"))||{},l={...a.dependencies||{},...a.devDependencies||{}};n==="react-native"&&i.push(l.expo?{level:"pass",message:"Expo Modules are installed for the bare React Native project."}:{level:"fail",message:"Expo Modules are missing. Run `mach ota setup` to install the bare React Native OTA runtime."}),i.push(l["expo-updates"]?{level:"pass",message:"expo-updates is installed."}:{level:"fail",message:"expo-updates is missing. Run `mach ota setup`."}),i.push(Vr(process.cwd())?{level:"pass",message:`${f.npmScope}/mach is installed locally for the Expo plugin.`}:{level:"fail",message:`${f.npmScope}/mach is not installed locally; run \`mach ota setup\`.`});let c=Po(e.platform||"all"),d=De(e.channel||e.branch||o?.channel)||"production",u=De(o?.url)||"",p=c.map(A=>{let g=To(t,e,A);return{platform:A,runtimeVersion:g,delivery:In(process.cwd(),{platform:A,runtimeVersion:g,channel:d,url:u})}}),m=p[0]?.delivery;if(m){let A=m.expoConfig.updates?.enabled!==!1,g=De(m.expoConfig.updates?.checkAutomatically)?.toUpperCase()||"ON_LOAD";i.push(m.url===o?.url?{level:"pass",message:"Expo Updates URL resolves to Mach."}:{level:"warn",message:`Expo Updates URL resolves to ${m.url||"none"} instead of ${o?.url||"the Mach OTA URL"}.`}),i.push(m.channel===d?{level:"pass",message:`Expo update channel header resolves to ${d}.`}:{level:"warn",message:`Expo update channel header is ${m.channel||"not set"}; install the latest ${f.npmScope}/mach package and rebuild.`}),i.push(A?{level:"pass",message:"Expo Updates is enabled."}:{level:"fail",message:"Expo config has updates.enabled=false, so this app cannot receive OTA updates."}),i.push(g!=="NEVER"&&g!=="ON_ERROR_RECOVERY"?{level:"pass",message:`Expo checks for updates automatically (${g}).`}:{level:"fail",message:`Expo checkAutomatically is ${g}; use ON_LOAD to receive Mach updates when the app starts.`})}else i.push({level:"fail",message:`Could not resolve Expo config. Confirm ${be} is present and run \`mach ota setup\` again.`});for(let{platform:A,runtimeVersion:g,delivery:h}of p)i.push(h?.runtimeVersion===g?{level:"pass",message:`${A} Expo runtime resolves to ${g}.`}:{level:"fail",message:`${A} Expo runtime resolves to ${h?.runtimeVersion||"none"} instead of ${g}. Run \`mach ota setup\`, then rebuild the app.`});if(n==="react-native"){let A=c,g=hi(process.cwd()).filter(y=>A.includes(y)),h=as(process.cwd());if(g.includes("android")){let y=!!(h.androidManifest&&h.androidStrings)&&W.readFileSync(h.androidManifest,"utf-8").includes("expo.modules.updates.EXPO_UPDATE_URL")&&W.readFileSync(h.androidStrings,"utf-8").includes("expo_runtime_version");i.push(y?{level:"pass",message:"Android native Expo Updates configuration is synchronized."}:{level:"fail",message:"Android native Expo Updates configuration is missing. Run `mach ota setup --platform android`."})}if(g.includes("ios")){let y=!!h.iosExpoPlist&&W.readFileSync(h.iosExpoPlist,"utf-8").includes("EXUpdatesURL")&&W.readFileSync(h.iosExpoPlist,"utf-8").includes("EXUpdatesRuntimeVersion");i.push(y?{level:"pass",message:"iOS native Expo Updates configuration is synchronized."}:{level:"fail",message:"iOS native Expo Updates configuration is missing. Run `mach ota setup --platform ios`."})}}}else i.push({level:"fail",message:"mach-react-native is not available yet. Run `mach ota setup` to migrate this project to expo-updates."});for(let a of i){let l=a.level==="pass"?ye.green("PASS"):a.level==="warn"?ye.yellow("WARN"):ye.red("FAIL");xe.info(`${l} ${a.message}`)}let s=i.filter(a=>a.level==="fail").length;s>0&&(Ze(ye.red(`OTA verification failed with ${s} issue(s).`)),process.exit(1)),Ze(ye.green("OTA verification passed."))}async function Jm(e){let t=un();if(pn(t,e)){Vl(Yn(e));return}Wt();let n=await w.get(`/ota/${t.projectId}/updates`),r=n.data.updates||[];if(e.json){xe.info(JSON.stringify(n.data,null,2));return}if(r.length===0){Ze("No OTA updates found.");return}for(let i of r){let o=i.stats?.total||{};xe.info(`${ye.bold(i.updateId)} ${ye.dim(`${i.platform} ${i.channelName} runtime ${i.runtimeVersion}`)} ${i.status||"active"}`),xe.info(ye.dim(` downloads ios=${o.iosDownloaded||0} android=${o.androidDownloaded||0} applied ios=${o.iosApplied||0} android=${o.androidApplied||0}`))}Ze(`Found ${r.length} OTA update(s).`)}async function Zl(e,t){let n=un();if(pn(n,t)){zl(e,Yn(t)),Ze(ye.green(`\u2713 Shorebird patch ${e==="rollback"?"selected for rollback":"promoted"}.`));return}Wt();let r=De(t.updateId);r||(xe.error(`Missing update id. Use \`${f.nameLower} ota ${e} --update-id <id>\`.`),process.exit(1));let i=await w.post(`/ota/${n.projectId}/updates/${encodeURIComponent(r)}/${e}`);t.json?xe.info(JSON.stringify(i.data,null,2)):Ze(ye.green(`\u2713 OTA update ${e==="rollback"?"rolled back":"promoted"}: ${r}`))}async function mt(e,t={}){let n=e||t.action||"publish";if(n==="setup")return Ym({...t,action:n});if(n==="release"){let i=un();if(!pn(i,t))throw new Error("`mach ota release` is a Flutter/Shorebird command. Use `mach build` for Expo and React Native base builds.");jl(i,Yn(t)),Ze(ye.green("\u2713 Flutter Shorebird base release created."));return}if(n==="publish")return qm({...t,action:n});if(n==="verify")return wo({...t,action:n});if(n==="list")return Jm({...t,action:n});if(n==="rollback")return Zl("rollback",{...t,action:n});if(n==="promote")return Zl("promote",{...t,action:n});let r=await Pm({message:"What do you want to do?",options:[{value:"setup",label:"Setup OTA"},{value:"publish",label:"Publish OTA update"},{value:"verify",label:"Verify OTA setup"},{value:"list",label:"List OTA updates"}]});return Hr(r)&&jr(),mt(r,t)}import{intro as Xm,outro as sd,log as fn}from"@clack/prompts";import ot from"chalk";async function ad(){Xm(ot.blue(`${f.name} CLI - User Profile`));let e=Oe();if(!e){fn.warn(ot.yellow("You are not logged in.")),fn.info(`Run \`${f.nameLower} login\` to authenticate.`),sd();return}fn.info(`${ot.bold("Logged in as:")} ${ot.green(e.email)}`);try{await w.get("/projects");let n=Oe().token.split(".");if(n.length===3){let r=JSON.parse(Buffer.from(n[1],"base64").toString());if(r.exp){let i=new Date(r.exp*1e3),o=new Date,s=i.getTime()-o.getTime();if(s>0){let a=Math.round(s/6e4),l=(a/60).toFixed(1);fn.info(`${ot.bold("Token status:")} Valid (Expires in ~${l}h / ${a}m)`)}else fn.warn(`${ot.bold("Token status:")} ${ot.red("Expired")} (Auto-refresh failed)`)}}}catch{fn.warn(`${ot.bold("Token status:")} ${ot.red("Unreachable")} (Session might be truly expired)${St}`)}sd(ot.blue("---"))}import{spawn as dd}from"child_process";import{cancel as eg,isCancel as tg,log as He,select as ng}from"@clack/prompts";import Re from"chalk";import rg from"fs";import cd from"path";import Zm from"net";async function Qm(e){return new Promise(t=>{let n=Zm.createServer();n.once("error",r=>{r.code==="EADDRINUSE"?t(!0):t(!1)}),n.once("listening",()=>{n.close(),t(!1)}),n.listen(e,"0.0.0.0")})}async function ld(e,t=20){let n=e;for(;n<e+t;){if(!await Qm(n))return n;n++}throw new Error(`Could not find an available port after ${t} attempts starting from ${e}.`)}var ud=async e=>{He.info(Re.blue(`Starting ${f.name} Dev Orchestrator...`));let t=re(),n=e.buildProfile||K(t,"development","development"),r=t?ce(t,n):null,i=t?Yt(t):void 0,o=Ie(process.cwd(),t?.appDirectory,{requireAppDirectory:!0}),s={...process.env};if(t?.projectId)try{He.info(Re.dim(`Fetching managed secrets for profile: ${n}...`));let m=r?.environment||n,A=await w.get(`/projects/${t.projectId}/secrets/export?env=${encodeURIComponent(m)}`);A.data?.status==="success"&&A.data.secrets&&(Object.assign(s,A.data.secrets),He.info(Re.magenta(`\u2713 Injected secrets from ${f.name} Dashboard.`)))}catch{He.warn("Could not fetch managed secrets. Running with local env only.")}if(t&&Object.assign(s,qt(t,f.envPrefix)),r&&(Object.assign(s,qt(r,`${f.envPrefix}PROFILE_`)),r.env&&Object.assign(s,r.env)),i==="flutter"){let m=e.ios?"ios":e.android?"android":void 0,A=Jt(t,r,m);Zt(o.appRoot,n,r||{},m);let g=Ye(o.appRoot),h=It().flutter;if(!h)throw new Error("Flutter CLI is unavailable. Install Flutter before running mach start.");if(t?.flutter?.sdkVersion&&h!==t.flutter.sdkVersion)throw new Error(`Flutter SDK mismatch: ${t.flutter.sdkVersion} is configured, but ${h} is active. Activate the pinned SDK (for example with FVM) before starting the app.`);let y=["run"];if([e.ios?"ios":"",e.android?"android":"",e.web?"web":""].filter(Boolean).length>1)throw new Error("Choose only one Flutter device target: --ios, --android, or --web.");if(e.web)y.push("-d","chrome");else if(e.ios||e.android){let F=e.ios?"ios":"android",B=us(cs(),F);if(B.length===0)throw new Error(`No available Flutter ${F==="ios"?"iOS":"Android"} device was found. Start a simulator/emulator or connect a device, then run \`flutter devices\`.`);let H=B[0];if(B.length>1&&process.stdin.isTTY&&process.stdout.isTTY){let Z=await ng({message:`Select Flutter ${F==="ios"?"iOS":"Android"} device:`,options:B.map(ie=>({value:ie.id,label:ie.name||ie.id,hint:ie.emulator?"Simulator / emulator":"Physical device"}))});if(tg(Z)){eg("Start cancelled.");return}H=B.find(ie=>ie.id===Z)||H}y.push("-d",H.id),He.info(Re.dim(`Flutter device: ${H.name||H.id}`))}let v=A.flavor||g.defaultFlavor;v&&y.push("--flavor",v),y.push("--target",Et(A.target));let E=Xt(A,{developmentClient:r?.developmentClient,distribution:r?.distribution,simulator:r?.ios?.simulator??r?.simulator});E!=="debug"&&y.push(`--${E}`),y.push(...ds(A.dartDefinesFromEnv,s)),e.clear&&He.info(Re.dim("Flutter manages incremental build caches; --clear is ignored.")),(e.tunnel||e.lan||e.localhost||e.port)&&He.info(Re.dim("Metro network options do not apply to Flutter and were ignored.")),He.info(Re.dim(`Flutter app: ${g.name||cd.basename(o.appRoot)} \xB7 profile ${n}`));let L=dd("flutter",y,{cwd:o.appRoot,stdio:"inherit",env:s});return new Promise((F,B)=>{L.on("exit",H=>H===0?F():B(new Error(`Flutter exited with code ${H}`))),L.on("error",B)})}let a=!1;try{let m=JSON.parse(rg.readFileSync(cd.join(o.appRoot,"package.json"),"utf-8"));a=!!(m.dependencies?.expo||m.devDependencies?.expo)}catch{He.warn("Could not parse package.json. Defaulting to Bare React Native mode.")}let l=Number(e.port||r?.port||8081),c=await ld(l);c!==l&&He.info(Re.yellow(`Port ${l} is busy. ${f.name} is using ${c} instead.`));let d=process.platform==="win32"?"npx.cmd":"npx",u=[];if(a?(u=["expo","start","--port",String(c)],e.clear&&u.push("--clear"),e.tunnel&&u.push("--tunnel"),e.lan&&u.push("--lan"),e.localhost&&u.push("--localhost"),e.ios&&u.push("--ios"),e.android&&u.push("--android"),e.web&&u.push("--web")):(u=["react-native","start","--port",String(c)],e.clear&&u.push("--clear")),a){let m=[`${Re.cyan("i")} open iOS simulator`,`${Re.cyan("a")} open Android emulator/device`,`${Re.cyan("w")} open web`,`${Re.cyan("r")} reload app`];He.info([Re.bold("Launch controls"),...m.map(A=>` ${A}`),"",Re.dim("Direct launch: mach start --ios | --android | --web"),Re.dim(`Metro URL: http://localhost:${c}`)].join(`
|
|
2231
|
+
`))}else He.info(Re.dim(`Metro URL: http://localhost:${c}`));let p=dd(d,u,{cwd:o.appRoot,stdio:"inherit",env:s});return new Promise((m,A)=>{p.on("exit",g=>{g===0?m():A(new Error(`Dev server exited with code ${g}`))}),p.on("error",g=>{A(g)})})};import{log as pe}from"@clack/prompts";import me from"chalk";var Co="[redacted]",zr=(e,t=[])=>{if(Array.isArray(e))return e.map((r,i)=>zr(r,[...t,String(i)]));if(!e||typeof e!="object")return e;let n={};for(let[r,i]of Object.entries(e)){let o=r==="env"||r==="envGroups";/(?:secret|token|password|private.?key|api.?key|credential)/i.test(r)&&typeof i!="object"?n[r]=Co:o&&i&&typeof i=="object"?n[r]=Object.fromEntries(Object.keys(i).map(a=>[a,Co])):n[r]=zr(i,[...t,r])}return n},pd=async e=>{let t=re();t||(pe.error(me.red(`No ${f.configFileName} found in the current directory.`)),process.exit(1));let n=e.profile||K(t,"development","development"),r=ce(t,n),i=Yt(t),o=Ie(process.cwd(),t.appDirectory);if(e.json){console.log(JSON.stringify({project:zr(t),resolved:zr(r)},null,2));return}if(pe.info(me.bgBlue.white(` Resolved ${f.name} Config [${n}] `)),pe.info(me.dim("----------------------------------------")),pe.info(`${me.blue("Project ID:")} ${t.projectId}`),pe.info(`${me.blue("Name:")} ${t.name}`),pe.info(`${me.blue("Scheme:")} ${t.scheme}`),pe.info(`${me.blue("App directory:")} ${t.appDirectory||"."}`),pe.info(`${me.blue("Framework:")} ${i}`),r){if(pe.info(me.dim(`
|
|
2208
2232
|
Profile Settings:`)),pe.info(`${me.cyan("Distribution:")} ${r.distribution||"none"}`),pe.info(`${me.cyan("Development Client:")} ${r.developmentClient||"false"}`),i==="flutter"){let s=Jt(t,r),a=Ye(o.appRoot),l=Xt(s,{developmentClient:r.developmentClient,distribution:r.distribution,simulator:r.ios?.simulator??r.simulator});pe.info(me.dim(`
|
|
2209
2233
|
Flutter Settings:`)),pe.info(`${me.cyan("SDK:")} ${t.flutter?.sdkVersion||"local toolchain"}`),pe.info(`${me.cyan("Flavor:")} ${s.flavor||a.defaultFlavor||"default"}`),pe.info(`${me.cyan("Target:")} ${Et(s.target)}`),pe.info(`${me.cyan("Mode:")} ${l}`),s.dartDefinesFromEnv?.length&&pe.info(`${me.cyan("Dart defines:")} ${s.dartDefinesFromEnv.join(", ")} ${me.dim("(values redacted; compile-time, not secrets)")}`)}r.env&&Object.keys(r.env).length>0&&(pe.info(me.dim(`
|
|
2210
|
-
Environment Variables:`)),Object.entries(r.env).forEach(([s,a])=>{pe.info(` ${s}=${Co}`)}))}else pe.warn(`Profile '${n}' not found.`);pe.info(me.dim("----------------------------------------"))};import{cancel as
|
|
2211
|
-
`),n}import Se from"fs";import
|
|
2234
|
+
Environment Variables:`)),Object.entries(r.env).forEach(([s,a])=>{pe.info(` ${s}=${Co}`)}))}else pe.warn(`Profile '${n}' not found.`);pe.info(me.dim("----------------------------------------"))};import{cancel as Dg,confirm as Go,isCancel as hn,log as ti,note as Pg,outro as ni,select as Tg,text as Nd}from"@clack/prompts";import et from"chalk";import Cg from"fs";import Td from"path";import jt from"fs";import mn from"path";var gn="./plugins/withMachDeepLinks",ko="mach.deep-links.json",md=["/*"],No=e=>{if(typeof e!="string")return;let t=e.trim();return t.length>0?t:void 0},Wr=e=>{let t=new Set,n=[];for(let r of e){let i=No(r);!i||t.has(i)||(t.add(i),n.push(i))}return n},Qe=(...e)=>{for(let t of e){let n=No(t);if(n)return n}},fd=(e,t)=>e.length!==t.length?!1:e.every((n,r)=>n===t[r]);function gd(e){if(typeof e!="string")return;let t=e.trim().toLowerCase();if(t==="ios"||t==="android"||t==="all")return t}function qn(e){let t=e.includes("://")?e:`https://${e}`,n=new URL(t),r=n.pathname==="/"?"":n.pathname.replace(/\/+$/,"");return`${n.protocol}//${n.host}${r}`}function Kr(e){return new URL(qn(e)).hostname}function Yr(e){return e.trim().toLowerCase().replace(/[^a-z0-9+.-]/g,"-").replace(/^-+|-+$/g,"")||"app"}function hd(e=process.cwd()){let t=mn.join(e,"package.json"),n=["app.json","app.config.json","app.config.js","app.config.ts"].some(i=>jt.existsSync(mn.join(e,i))),r=!1;if(jt.existsSync(t))try{let i=JSON.parse(jt.readFileSync(t,"utf-8"));r=!!(i.dependencies?.expo||i.devDependencies?.expo)}catch{r=!1}return n&&r?"expo":jt.existsSync(mn.join(e,"ios"))||jt.existsSync(mn.join(e,"android"))?"react-native":En}function Ad(e,t,n){if(t)return t;let r=!!(e.ios?.bundleIdentifier||n?.ios?.bundleIdentifier||e.deepLinks?.ios?.bundleIdentifier),i=!!(e.android?.package||n?.android?.package||n?.android?.applicationId||e.deepLinks?.android?.package);return r&&!i?"ios":i&&!r?"android":"all"}function qr(e=process.cwd(),t){let n=t?.deepLinks?.web?.outputDir;return n||(jt.existsSync(mn.join(e,"public"))?"public":"deep-links")}function yd(e,t){let n=e.deepLinks,r=qn(t.baseUrl||n?.baseUrl||(t.domain?`https://${t.domain}`:"")),i=No(t.domain)||(t.baseUrl?Kr(r):n?.domain)||Kr(r),o=t.profile||n?.profile||K(e,"store","production"),s=ce(e,o)||{},a=s.ios||{},l=s.android||{},c=e.submit?.[o]?.ios||{},d=e.submit?.[o]?.android||{},u=Yr(t.scheme||n?.scheme||a.scheme||e.scheme||e.slug||e.name||"app"),p=lt(e,o),m=Wr([...t.androidFingerprint||[],...n?.android?.sha256CertFingerprints||[],...l.sha256CertFingerprints||[],...e.android?.sha256CertFingerprints||[]]);return{baseUrl:r,domain:i,scheme:u,profile:o,paths:n?.paths?.length?n.paths:["/*"],ios:{appStoreId:Qe(t.appStoreId,n?.ios?.appStoreId,a.ascAppId,c.ascAppId,e.ios?.ascAppId),appleTeamId:Qe(t.appleTeamId,n?.ios?.appleTeamId,a.appleTeamId,a.developerTeamId,c.appleTeamId,c.developerTeamId,e.ios?.appleTeamId,e.ios?.developerTeamId,p.teamId),bundleIdentifier:Qe(t.iosBundleId,n?.ios?.bundleIdentifier,a.bundleIdentifier,a.bundleId,e.ios?.bundleIdentifier,e.ios?.bundleId,e.expo?.ios?.bundleIdentifier),webCredentials:!!n?.ios?.webCredentials,activityContinuation:!!n?.ios?.activityContinuation},android:{package:Qe(t.androidPackage,n?.android?.package,l.package,l.applicationId,e.android?.package,e.expo?.android?.package,d.packageName,d.package),sha256CertFingerprints:m,loginCredentials:!!n?.android?.loginCredentials},web:{smartAppBanner:n?.web?.smartAppBanner??!0,outputDir:t.output||n?.web?.outputDir||qr(process.cwd(),e)}}}function Jr(e,t={}){let n=e.deepLinks,r=t.profile||n?.profile||K(e,"store","production"),i=t.expoHints||null,o=Qe(n?.baseUrl,i?.domain?`https://${i.domain}`:void 0);if(!o)return null;let s=qn(o),a=ce(e,r)||{},l=a.ios||{},c=a.android||{},d=e.submit?.[r]?.ios||{},u=e.submit?.[r]?.android||{},p=lt(e,r),m=Qe(n?.domain,i?.domain)||Kr(s),A=Yr(Qe(n?.scheme,l.scheme,e.scheme,i?.scheme,e.slug,e.name,"app")||"app"),g=n?.paths?.length?n.paths:[...md];return{baseUrl:s,domain:m,scheme:A,profile:r,paths:g,ios:{appStoreId:Qe(n?.ios?.appStoreId,l.ascAppId,d.ascAppId,e.ios?.ascAppId),appleTeamId:Qe(n?.ios?.appleTeamId,l.appleTeamId,l.developerTeamId,d.appleTeamId,d.developerTeamId,e.ios?.appleTeamId,e.ios?.developerTeamId,p.teamId),bundleIdentifier:Qe(n?.ios?.bundleIdentifier,l.bundleIdentifier,l.bundleId,e.ios?.bundleIdentifier,e.ios?.bundleId,e.expo?.ios?.bundleIdentifier,i?.iosBundleIdentifier),webCredentials:!!n?.ios?.webCredentials,activityContinuation:!!n?.ios?.activityContinuation},android:{package:Qe(n?.android?.package,c.package,c.applicationId,e.android?.package,e.expo?.android?.package,u.packageName,u.package,i?.androidPackage),sha256CertFingerprints:Wr([...n?.android?.sha256CertFingerprints||[],...c.sha256CertFingerprints||[],...e.android?.sha256CertFingerprints||[]]),loginCredentials:!!n?.android?.loginCredentials},web:{smartAppBanner:n?.web?.smartAppBanner??!0,outputDir:n?.web?.outputDir||qr(t.cwd||process.cwd(),e)}}}function Xr(e,t,n=K(e,"store","production"),r=process.cwd()){return t?.domain?Jr({...e,deepLinks:{baseUrl:`https://${t.domain}`,domain:t.domain,scheme:t.scheme}},{profile:n,cwd:r,expoHints:t}):null}function ig(e,t,n=t.profile||K(e,"store","production")){let r=Jr({...e,deepLinks:{baseUrl:t.baseUrl}},{profile:n}),i={baseUrl:t.baseUrl};i.profile=n,t.domain&&t.domain!==Kr(t.baseUrl)&&(i.domain=t.domain),t.scheme&&t.scheme!==r?.scheme&&(i.scheme=t.scheme),t.paths?.length&&!fd(t.paths,md)&&(i.paths=t.paths);let o={};t.ios?.bundleIdentifier&&t.ios.bundleIdentifier!==r?.ios?.bundleIdentifier&&(o.bundleIdentifier=t.ios.bundleIdentifier),t.ios?.appleTeamId&&t.ios.appleTeamId!==r?.ios?.appleTeamId&&(o.appleTeamId=t.ios.appleTeamId),t.ios?.appStoreId&&t.ios.appStoreId!==r?.ios?.appStoreId&&(o.appStoreId=t.ios.appStoreId),t.ios?.webCredentials&&(o.webCredentials=!0),t.ios?.activityContinuation&&(o.activityContinuation=!0),Object.keys(o).length>0&&(i.ios=o);let s={};t.android?.package&&t.android.package!==r?.android?.package&&(s.package=t.android.package);let a=t.android?.sha256CertFingerprints||[],l=r?.android?.sha256CertFingerprints||[];a.length>0&&!fd(a,l)&&(s.sha256CertFingerprints=a),t.android?.loginCredentials&&(s.loginCredentials=!0),Object.keys(s).length>0&&(i.android=s);let c={outputDir:t.web?.outputDir||"deep-links"};return t.web?.smartAppBanner===!1&&(c.smartAppBanner=!1),i.web=c,i}function bd(e,t,n,r=n.profile||K(e,"store","production")){let i={...e,framework:t,scheme:e.scheme||n.scheme};return{...i,deepLinks:ig(i,n,r)}}function Sd(e,t=process.cwd()){let n=mn.join(t,"mach.config.json");return jt.writeFileSync(n,`${JSON.stringify(e,null,2)}
|
|
2235
|
+
`),n}import Se from"fs";import $e from"path";import{spawnSync as Ed}from"child_process";var Jn="@radhya/mach/expo-plugin",og=`const fs = require('fs')
|
|
2212
2236
|
const path = require('path')
|
|
2213
2237
|
|
|
2214
2238
|
const unique = values => Array.from(new Set(values.filter(Boolean)))
|
|
@@ -2328,14 +2352,14 @@ module.exports = function withMachDeepLinks(config) {
|
|
|
2328
2352
|
config.android.intentFilters = intentFilters
|
|
2329
2353
|
return config
|
|
2330
2354
|
}
|
|
2331
|
-
`,Xn=e=>{if(typeof e=="string"){if(e===Jn)return Jn;if(e===gn||e===gn.replace(/^\.\//,""))return gn}},Lo=e=>Array.isArray(e)?Lo(e[0]):Xn(e),
|
|
2355
|
+
`,Xn=e=>{if(typeof e=="string"){if(e===Jn)return Jn;if(e===gn||e===gn.replace(/^\.\//,""))return gn}},Lo=e=>Array.isArray(e)?Lo(e[0]):Xn(e),Id=e=>!!Lo(e),sg=(e,t)=>{let n=Xn(t)||t;return Lo(e)===n},ag=(e,t)=>Array.isArray(e)?[t,...e.slice(1)]:t,lg=(e,t)=>{let n=Array.isArray(e.plugins)?e.plugins:[];if(n.findIndex(o=>sg(o,t))>=0)return e.plugins=n,"already";let i=n.findIndex(Id);return i>=0?(n[i]=ag(n[i],t),e.plugins=n,"updated"):(n.push(t),e.plugins=n,"inserted")},xo=/(['"`])((?:\.\/)?plugins\/withMachDeepLinks|@radhya\/mach\/expo-plugin)\1/g;function Zr(e){let t=$e.join(e,"package.json");if(!Se.existsSync(t))return!1;try{let n=JSON.parse(Se.readFileSync(t,"utf-8"));return!!(n.dependencies?.["@radhya/mach"]||n.devDependencies?.["@radhya/mach"])}catch{return!1}}function dg(e){return Se.existsSync($e.join(e,"pnpm-lock.yaml"))?{command:"pnpm",args:["add","-D","@radhya/mach@latest"],label:"pnpm add -D @radhya/mach@latest"}:Se.existsSync($e.join(e,"yarn.lock"))?{command:"yarn",args:["add","-D","@radhya/mach@latest"],label:"yarn add -D @radhya/mach@latest"}:Se.existsSync($e.join(e,"bun.lockb"))||Se.existsSync($e.join(e,"bun.lock"))?{command:"bun",args:["add","-d","@radhya/mach@latest"],label:"bun add -d @radhya/mach@latest"}:{command:"npm",args:["install","--save-dev","@radhya/mach@latest"],label:"npm install --save-dev @radhya/mach@latest"}}function cg(e){let t=dg(e),n=Ed(t.command,t.args,{cwd:e,stdio:"inherit",env:{...process.env}});return n.error?{ok:!1,label:t.label,error:n.error.message}:n.status!==0?{ok:!1,label:t.label,error:`${t.command} exited with code ${n.status}`}:{ok:Zr(e),label:t.label}}function ug(e,t){let n=Se.readFileSync(e,"utf-8"),r=Array.from(n.matchAll(xo));if(r.length>0){let p=Xn(t)||t,m=r.some(h=>Xn(h[2])===p),A=r.some(h=>Xn(h[2])!==p);if(m&&!A)return"already";let g=n.replace(xo,(h,y)=>`${y}${t}${y}`);return Se.writeFileSync(e,g),"updated"}let i=/(^[ \t]*)plugins\s*:\s*\[([\s\S]*?)\]/m.exec(n);if(!i||i.index===void 0)return"unsupported";let o=n.includes(`\r
|
|
2332
2356
|
`)?`\r
|
|
2333
2357
|
`:`
|
|
2334
2358
|
`,s=i[1]||"",a=i[2]||"",c=a.match(/\r?\n([ \t]+)\S/)?.[1]||`${s} `,d=a.trim().length===0?`${o}${c}'${t}',${o}${s}`:a.includes(`
|
|
2335
|
-
`)||a.includes("\r")?`${o}${c}'${t}',${a}`:`${o}${c}'${t}',${o}${c}${a.trim()}${o}${s}`,u=`${i[0].slice(0,i[0].indexOf("[")+1)}${d}]`;return Se.writeFileSync(e,`${n.slice(0,i.index)}${u}${n.slice(i.index+i[0].length)}`),"inserted"}function
|
|
2336
|
-
`),r.push(c),m==="updated"&&o.push(`${c} updated to use ${a}.`)}catch(u){i.push(`Expo config plugin insertion failed: ${u.message}`)}return{written:r,skipped:i,notes:o}}function
|
|
2337
|
-
`)};var
|
|
2338
|
-
${r}`)),!0):!1}function $d(e,t){let n=[],r=[],i=[],o=t.web?.outputDir||"deep-links",s=Le.join(e,o),a=Fo(t);if(a){let u=Wr([Le.join(s,".well-known/apple-app-site-association"),Le.join(s,".well-known/apple-app-site-association.json"),Le.join(s,"apple-app-site-association"),Le.join(s,"apple-app-site-association.json")]);for(let p of u)vd(p,a),n.push(Le.relative(e,p))}else r.push("Apple AASA files: missing ios.appleTeamId or ios.bundleIdentifier");let l=fg(t);if(l){let u=Le.join(s,".well-known/assetlinks.json");vd(u,l),n.push(Le.relative(e,u)),t.android?.sha256CertFingerprints?.length||i.push("assetlinks.json was generated without SHA256 fingerprints. Add them before Android App Links can verify.")}else r.push("Android assetlinks.json: missing android.package");let c=Le.join(e,ko);ot.existsSync(c)&&(ot.unlinkSync(c),i.push(`Removed legacy ${ko}; mach.config.json is now the source of truth.`));let d=Le.join(s,"index.html");return t.web?.smartAppBanner&&mg(d,t)?n.push(Le.relative(e,d)):t.web?.smartAppBanner&&t.ios?.appStoreId?i.push(`Smart App Banner skipped because ${Le.relative(e,d)} was not found.`):t.web?.smartAppBanner&&i.push("Smart App Banner skipped because ios.appStoreId is not configured."),o!=="public"&&i.push(`Host ${o}/.well-known files at https://${t.domain}/.well-known/.`),{written:n,skipped:r,notes:i}}function Uo(e){if(!ot.existsSync(e))return null;try{return JSON.parse(ot.readFileSync(e,"utf-8"))}catch{return null}}import Re from"fs";import He from"path";import{spawnSync as gg}from"child_process";var T=(e,t)=>({level:e,message:t}),wd=(e,t)=>He.join(e,t.web?.outputDir||"deep-links");function hg(e,t,n="fail"){let r=[],i=wd(e,t),o=He.join(i,".well-known/apple-app-site-association");if(!Fo(t))return r.push(T("warn","Skipping AASA verification because ios.appleTeamId or ios.bundleIdentifier is missing.")),r;if(!Re.existsSync(o))return r.push(T(n,`${He.relative(e,o)} is missing.`)),r;Re.statSync(o).size>128*1024?r.push(T("fail","Apple AASA file is larger than 128 KB.")):r.push(T("pass","Apple AASA file is under 128 KB."));let l=Uo(o);if(!l)return r.push(T("fail","Apple AASA file is not valid JSON.")),r;let c=`${t.ios?.appleTeamId}.${t.ios?.bundleIdentifier}`,d=l.applinks?.details||[],u=Array.isArray(d)&&d.some(p=>p.appID===c||p.appIDs?.includes(c));if(r.push(u?T("pass",`AASA contains ${c}.`):T("fail",`AASA does not contain ${c}.`)),t.ios?.webCredentials){let p=l.webcredentials?.apps,m=Array.isArray(p)&&p.includes(c);r.push(m?T("pass",`AASA enables iOS Web Credentials for ${c}.`):T("fail",`AASA is missing iOS Web Credentials for ${c}.`))}return r}function yg(e,t,n="fail"){let r=[],i=wd(e,t),o=He.join(i,".well-known/assetlinks.json");if(!t.android?.package)return r.push(T("warn","Skipping Android Asset Links verification because android.package is missing.")),r;if(!Re.existsSync(o))return r.push(T(n,`${He.relative(e,o)} is missing.`)),r;let s=Uo(o);if(!s||!Array.isArray(s))return r.push(T("fail","assetlinks.json is not a valid JSON array.")),r;let a=s.find(c=>c?.target?.package_name===t.android?.package);r.push(a?T("pass",`assetlinks.json contains ${t.android.package}.`):T("fail",`assetlinks.json does not contain ${t.android.package}.`));let l=a?.target?.sha256_cert_fingerprints;if(r.push(Array.isArray(l)&&l.length>0?T("pass","assetlinks.json has at least one SHA256 fingerprint."):T("warn","assetlinks.json has no SHA256 fingerprints.")),t.android?.loginCredentials){let c=a?.relation,d=Array.isArray(c)&&c.includes("delegate_permission/common.get_login_creds");r.push(d?T("pass","assetlinks.json enables Android Login Credentials."):T("fail","assetlinks.json is missing Android Login Credentials."))}return r}function Ag(e,t,n,r){if(t.framework!=="expo")return[];let i=[],o=Mo(e),a=(Array.isArray(o?.ios?.associatedDomains)?o.ios.associatedDomains:[]).includes(`applinks:${n.domain}`);i.push(a?T("pass",`Expo iOS config contains applinks:${n.domain}.`):T(r?"warn":"fail",`Expo iOS config does not contain applinks:${n.domain}.`));let c=(Array.isArray(o?.android?.intentFilters)?o.android.intentFilters:[]).flatMap(u=>Array.isArray(u?.data)?u.data:[]).some(u=>u?.scheme==="https"&&u.host===n.domain);if(i.push(c?T("pass",`Expo Android config contains App Link host ${n.domain}.`):T(r?"warn":"fail",`Expo Android config does not contain App Link host ${n.domain}.`)),r)return i.push(T("warn","mach.config.json is missing deepLinks; values were inferred from Expo config. Run `mach deeplink setup` to persist Mach metadata and generate hosted files.")),i;let d=_d(e);return d==="wired"?i.push(T("pass","Expo deep link plugin is wired into Expo config and derives values from mach.config.json.")):d==="manual"&&a&&c?i.push(T("pass","Expo resolved config contains the deep-link settings from the dynamic config.")):d==="manual"?i.push(T("warn","Expo deep link plugin exists, but dynamic or missing Expo config means manual plugin insertion must be confirmed.")):a&&c?i.push(T("warn","Expo plugin is not wired, but resolved Expo config already contains the deep-link settings.")):i.push(T("fail","Expo deep link plugin is missing or not wired into Expo config.")),i}function bg(e,t,n){if(t.framework!=="react-native")return[];let r=[],i=He.join(e,"android/app/src/main/AndroidManifest.xml");if(Re.existsSync(i)){let s=Re.readFileSync(i,"utf-8");r.push(s.includes(`android:host="${n.domain}"`)?T("pass","AndroidManifest.xml contains the App Links host."):T("warn","AndroidManifest.xml does not contain the App Links host. Native patching is planned for a later phase."))}let o=He.join(e,"ios");if(Re.existsSync(o)){let a=Re.readdirSync(o,{recursive:!0}).filter(l=>typeof l=="string"&&l.endsWith(".entitlements")).some(l=>Re.readFileSync(He.join(o,l),"utf-8").includes(`applinks:${n.domain}`));r.push(a?T("pass","iOS entitlements contain the associated domain."):T("warn","iOS entitlements do not contain the associated domain. Native patching is planned for a later phase."))}return r}function Sg(e,t,n){if(t.framework!=="flutter")return[];let r=[],i;try{i=Ie(e,t.appDirectory,{requireAppDirectory:!0}).appRoot}catch(a){return[T("fail",a.message||"Could not resolve the Flutter app directory.")]}let o=He.join(i,"android/app/src/main/AndroidManifest.xml");if(Re.existsSync(o)){let a=Re.readFileSync(o,"utf8");r.push(a.includes(`android:host="${n.domain}"`)&&a.includes('android:autoVerify="true"')?T("pass",`Flutter Android manifest verifies https://${n.domain}.`):T("fail","Flutter Android manifest is missing its verified App Links intent filter.")),r.push(a.includes(`android:scheme="${n.scheme}"`)?T("pass",`Flutter Android manifest contains ${n.scheme}://.`):T("fail",`Flutter Android manifest is missing ${n.scheme}://.`))}else r.push(T("warn","Flutter Android project is not present."));let s=He.join(i,"ios");if(Re.existsSync(s)){let l=Re.readdirSync(s,{recursive:!0}).filter(d=>typeof d=="string"&&d.endsWith(".entitlements")).find(d=>Re.readFileSync(He.join(s,d),"utf8").includes(`applinks:${n.domain}`));r.push(l?T("pass",`Flutter iOS entitlements contain applinks:${n.domain}.`):T("fail","Flutter iOS entitlements are missing the associated domain."));let c=Re.readdirSync(s).filter(d=>d.endsWith(".xcodeproj")).map(d=>He.join(s,d,"project.pbxproj")).filter(d=>Re.existsSync(d));r.push(c.some(d=>Re.readFileSync(d,"utf8").includes("CODE_SIGN_ENTITLEMENTS"))?T("pass","Flutter Runner target has an entitlements build setting."):T("fail","Flutter Runner target is not connected to an entitlements file."))}else r.push(T("warn","Flutter iOS project is not present."));return r}async function Bo(e,t){let n=[];try{let r=await fetch(e,{redirect:"manual"});if(r.status>=300&&r.status<400&&!t)return n.push(T("fail",`${e} redirects. Apple AASA endpoints must not redirect.`)),n;n.push(r.status===200?T("pass",`${e} returned HTTP 200.`):T("fail",`${e} returned HTTP ${r.status}.`));let i=r.headers.get("content-type")||"";!i.includes("application/json")&&!i.includes("text/json")&&n.push(T("warn",`${e} content-type is "${i||"missing"}"; application/json is recommended.`)),JSON.parse(await r.text()),n.push(T("pass",`${e} contains valid JSON.`))}catch(r){n.push(T("fail",`${e} check failed: ${r.message}`))}return n}async function Eg(e){let t=e.domain;return(await Promise.all([Bo(`https://${t}/.well-known/apple-app-site-association`,!1),Bo(`https://${t}/apple-app-site-association`,!1),Bo(`https://${t}/.well-known/assetlinks.json`,!0)])).flat()}function Ig(e){let t=e.android?.package;if(!t)return[T("warn","Cannot print Android device verification commands because android.package is missing.")];let r=gg("adb",["version"],{encoding:"utf-8"}).status===0?"Run":"Install Android platform-tools, then run";return[T("info",`${r}: adb shell pm set-app-links --package ${t} 0 all`),T("info",`${r}: adb shell pm verify-app-links --re-verify ${t}`),T("info",`${r}: adb shell pm get-app-links ${t}`)]}async function jo(e,t,n){let r=n.profile||t.deepLinks?.profile||K(t,"store","production"),i=t.framework==="expo"?Qr(e):null,o=t.framework==="expo"?Xr(t,i,r,e):null,s=!t.deepLinks&&!!o,a=t.deepLinks?Jr(t,{profile:r,cwd:e,expoHints:i}):o,l=[];if(!a)return[T("fail","mach.config.json is missing deepLinks and Mach could not infer existing deep-link settings. Run `mach deeplink setup`.")];l.push(a.baseUrl?T("pass","deepLinks.baseUrl is configured."):T("fail","deepLinks.baseUrl is missing.")),l.push(a.domain?T("pass","deepLinks.domain is configured."):T("fail","deepLinks.domain is missing.")),l.push(a.scheme?T("pass","deepLinks.scheme is configured."):T("fail","deepLinks.scheme is missing."));let c=s?"warn":"fail";return l.push(...hg(e,a,c)),l.push(...yg(e,a,c)),l.push(...Ag(e,t,a,s)),l.push(...bg(e,t,a)),l.push(...Sg(e,t,a)),n.live&&l.push(...await Eg(a)),n.androidDevice&&l.push(...Ig(a)),l}import ve from"fs";import Ct from"path";var Tt=(e,t)=>Ct.relative(e,t).split(Ct.sep).join("/"),Od=e=>e.replace(/[.*+?^${}()|[\]\\]/g,"\\$&");function Rd(e,t,n){let r=e.lastIndexOf(t);return r<0?e:`${e.slice(0,r)}${n}${e.slice(r)}`}function _g(e,t){let n=[],r=[],i=[],o=Ct.join(e,"android/app/src/main/AndroidManifest.xml");if(!ve.existsSync(o))return i.push("AndroidManifest.xml is not present; Android App Links were not patched."),{written:n,skipped:r,notes:i};let s=ve.readFileSync(o,"utf8"),a=/<activity\b[\s\S]*?<intent-filter[\s\S]*?android\.intent\.action\.MAIN[\s\S]*?<\/intent-filter>[\s\S]*?<\/activity>/m.exec(s);if(!a||a.index===void 0)return i.push("Could not safely identify Flutter's launcher activity; add the App Links intent filter manually."),{written:n,skipped:r,notes:i};let l=a[0];if(!l.includes(`android:host="${t.domain}"`)){let d=`
|
|
2359
|
+
`)||a.includes("\r")?`${o}${c}'${t}',${a}`:`${o}${c}'${t}',${o}${c}${a.trim()}${o}${s}`,u=`${i[0].slice(0,i[0].indexOf("[")+1)}${d}]`;return Se.writeFileSync(e,`${n.slice(0,i.index)}${u}${n.slice(i.index+i[0].length)}`),"inserted"}function _d(e,t,n={}){let r=[],i=[],o=[],s=Zr(e);if(!s&&n.installPackage){o.push("Installing @radhya/mach locally so Expo can use @radhya/mach/expo-plugin.");let u=cg(e);u.ok?(s=!0,o.push(`Installed @radhya/mach with ${u.label}.`)):o.push(`Could not install @radhya/mach with ${u.label}: ${u.error||"unknown error"}. Falling back to local plugin.`)}let a=s?Jn:gn;if(s)o.push(`Using packaged Expo plugin ${Jn}.`);else{let u=$e.join(e,"plugins/withMachDeepLinks.js");Se.mkdirSync($e.dirname(u),{recursive:!0}),Se.writeFileSync(u,og),r.push($e.relative(e,u)),o.push(`Using local Expo plugin fallback ${gn}. Install @radhya/mach in this app to use ${Jn}.`)}let l=["app.config.ts","app.config.js"].find(u=>Se.existsSync($e.join(e,u)));if(l){let u=$e.join(e,l),p=ug(u,a);return p==="inserted"?r.push(l):p==="updated"?(r.push(l),o.push(`${l} updated to use ${a}.`)):p==="already"?o.push(`${l} already includes the Mach Expo plugin.`):o.push(`Add "${a}" to the plugins array in ${l}. Mach could not safely auto-edit this dynamic config.`),{written:r,skipped:i,notes:o}}let c=["app.config.json","app.json"].find(u=>Se.existsSync($e.join(e,u)));if(!c)return i.push("Expo config plugin insertion: no app.json or app.config.json found."),{written:r,skipped:i,notes:o};let d=$e.join(e,c);try{let u=JSON.parse(Se.readFileSync(d,"utf-8")),p=u.expo&&typeof u.expo=="object"?u.expo:u,m=lg(p,a);Se.writeFileSync(d,`${JSON.stringify(u,null,2)}
|
|
2360
|
+
`),r.push(c),m==="updated"&&o.push(`${c} updated to use ${a}.`)}catch(u){i.push(`Expo config plugin insertion failed: ${u.message}`)}return{written:r,skipped:i,notes:o}}function vd(e){let t=["app.config.ts","app.config.js"].find(r=>Se.existsSync($e.join(e,r)));if(t){let r=Se.readFileSync($e.join(e,t),"utf-8");return xo.test(r)?"manual":"missing"}let n=["app.config.json","app.json"].find(r=>Se.existsSync($e.join(e,r)));if(!n)return"missing";try{let r=JSON.parse(Se.readFileSync($e.join(e,n),"utf-8")),i=r.expo&&typeof r.expo=="object"?r.expo:r;return Array.isArray(i.plugins)&&i.plugins.some(Id)?"wired":"missing"}catch{return"missing"}}function Mo(e){let t=Ed("npx",["--no-install","expo","config","--type","public","--json"],{cwd:e,encoding:"utf-8",timeout:8e3,env:{...process.env,CI:"1",EXPO_NO_TELEMETRY:"1"}});if(t.error||t.status!==0||!t.stdout)return null;let n=t.stdout.trim(),r=n.indexOf("{");if(r<0)return null;try{return JSON.parse(n.slice(r))}catch{return null}}function pg(e){if(!e||typeof e!="object")return null;let n=(Array.isArray(e.ios?.associatedDomains)?e.ios.associatedDomains:[]).map(s=>typeof s=="string"?s.match(/^applinks:(.+)$/)?.[1]:void 0).find(Boolean),i=(Array.isArray(e.android?.intentFilters)?e.android.intentFilters:[]).flatMap(s=>Array.isArray(s?.data)?s.data:[]).find(s=>s?.scheme==="https"&&typeof s.host=="string")?.host,o=n||i;return!o&&!e.scheme&&!e.ios?.bundleIdentifier&&!e.android?.package?null:{domain:o,scheme:typeof e.scheme=="string"?e.scheme:void 0,iosBundleIdentifier:typeof e.ios?.bundleIdentifier=="string"?e.ios.bundleIdentifier:void 0,androidPackage:typeof e.android?.package=="string"?e.android.package:void 0}}function Qr(e){return pg(Mo(e))}import st from"fs";import Le from"path";var fg=e=>{st.mkdirSync(Le.dirname(e),{recursive:!0})},Rd=(e,t)=>{fg(e),st.writeFileSync(e,`${JSON.stringify(t,null,2)}
|
|
2361
|
+
`)};var mg=e=>{let t=e.ios?.appleTeamId,n=e.ios?.bundleIdentifier;return!t||!n?null:`${t}.${n}`};function Fo(e){let t=mg(e);if(!t)return null;let n=e.paths?.length?e.paths:["/*"],r=n.map(s=>s==="/*"?"*":s),i=n.map(s=>({"/":s,comment:s==="/*"?"Matches all URLs":`Matches ${s}`})),o={applinks:{apps:[],details:[{appIDs:[t],components:i,appID:t,paths:r}]}};return e.ios?.webCredentials&&(o.webcredentials={apps:[t]}),e.ios?.activityContinuation&&(o.activitycontinuation={apps:[t]}),o}function gg(e){let t=e.android?.package;return t?[{relation:["delegate_permission/common.handle_all_urls",...e.android?.loginCredentials?["delegate_permission/common.get_login_creds"]:[]],target:{namespace:"android_app",package_name:t,sha256_cert_fingerprints:e.android?.sha256CertFingerprints||[]}}]:null}function hg(e,t){let n=t.ios?.appStoreId;if(!n||!st.existsSync(e))return!1;let r=`<meta name="apple-itunes-app" content="app-id=${n}, app-argument=${t.baseUrl}" />`,i=st.readFileSync(e,"utf-8");if(/name=["']apple-itunes-app["']/i.test(i)){let o=i.replace(/<meta[^>]+name=["']apple-itunes-app["'][^>]*>/i,r);return st.writeFileSync(e,o),!0}return/<head[^>]*>/i.test(i)?(st.writeFileSync(e,i.replace(/<head([^>]*)>/i,`<head$1>
|
|
2362
|
+
${r}`)),!0):!1}function $d(e,t){let n=[],r=[],i=[],o=t.web?.outputDir||"deep-links",s=Le.join(e,o),a=Fo(t);if(a){let u=Wr([Le.join(s,".well-known/apple-app-site-association"),Le.join(s,".well-known/apple-app-site-association.json"),Le.join(s,"apple-app-site-association"),Le.join(s,"apple-app-site-association.json")]);for(let p of u)Rd(p,a),n.push(Le.relative(e,p))}else r.push("Apple AASA files: missing ios.appleTeamId or ios.bundleIdentifier");let l=gg(t);if(l){let u=Le.join(s,".well-known/assetlinks.json");Rd(u,l),n.push(Le.relative(e,u)),t.android?.sha256CertFingerprints?.length||i.push("assetlinks.json was generated without SHA256 fingerprints. Add them before Android App Links can verify.")}else r.push("Android assetlinks.json: missing android.package");let c=Le.join(e,ko);st.existsSync(c)&&(st.unlinkSync(c),i.push(`Removed legacy ${ko}; mach.config.json is now the source of truth.`));let d=Le.join(s,"index.html");return t.web?.smartAppBanner&&hg(d,t)?n.push(Le.relative(e,d)):t.web?.smartAppBanner&&t.ios?.appStoreId?i.push(`Smart App Banner skipped because ${Le.relative(e,d)} was not found.`):t.web?.smartAppBanner&&i.push("Smart App Banner skipped because ios.appStoreId is not configured."),o!=="public"&&i.push(`Host ${o}/.well-known files at https://${t.domain}/.well-known/.`),{written:n,skipped:r,notes:i}}function Uo(e){if(!st.existsSync(e))return null;try{return JSON.parse(st.readFileSync(e,"utf-8"))}catch{return null}}import we from"fs";import je from"path";import{spawnSync as Ag}from"child_process";var T=(e,t)=>({level:e,message:t}),wd=(e,t)=>je.join(e,t.web?.outputDir||"deep-links");function yg(e,t,n="fail"){let r=[],i=wd(e,t),o=je.join(i,".well-known/apple-app-site-association");if(!Fo(t))return r.push(T("warn","Skipping AASA verification because ios.appleTeamId or ios.bundleIdentifier is missing.")),r;if(!we.existsSync(o))return r.push(T(n,`${je.relative(e,o)} is missing.`)),r;we.statSync(o).size>128*1024?r.push(T("fail","Apple AASA file is larger than 128 KB.")):r.push(T("pass","Apple AASA file is under 128 KB."));let l=Uo(o);if(!l)return r.push(T("fail","Apple AASA file is not valid JSON.")),r;let c=`${t.ios?.appleTeamId}.${t.ios?.bundleIdentifier}`,d=l.applinks?.details||[],u=Array.isArray(d)&&d.some(p=>p.appID===c||p.appIDs?.includes(c));if(r.push(u?T("pass",`AASA contains ${c}.`):T("fail",`AASA does not contain ${c}.`)),t.ios?.webCredentials){let p=l.webcredentials?.apps,m=Array.isArray(p)&&p.includes(c);r.push(m?T("pass",`AASA enables iOS Web Credentials for ${c}.`):T("fail",`AASA is missing iOS Web Credentials for ${c}.`))}return r}function bg(e,t,n="fail"){let r=[],i=wd(e,t),o=je.join(i,".well-known/assetlinks.json");if(!t.android?.package)return r.push(T("warn","Skipping Android Asset Links verification because android.package is missing.")),r;if(!we.existsSync(o))return r.push(T(n,`${je.relative(e,o)} is missing.`)),r;let s=Uo(o);if(!s||!Array.isArray(s))return r.push(T("fail","assetlinks.json is not a valid JSON array.")),r;let a=s.find(c=>c?.target?.package_name===t.android?.package);r.push(a?T("pass",`assetlinks.json contains ${t.android.package}.`):T("fail",`assetlinks.json does not contain ${t.android.package}.`));let l=a?.target?.sha256_cert_fingerprints;if(r.push(Array.isArray(l)&&l.length>0?T("pass","assetlinks.json has at least one SHA256 fingerprint."):T("warn","assetlinks.json has no SHA256 fingerprints.")),t.android?.loginCredentials){let c=a?.relation,d=Array.isArray(c)&&c.includes("delegate_permission/common.get_login_creds");r.push(d?T("pass","assetlinks.json enables Android Login Credentials."):T("fail","assetlinks.json is missing Android Login Credentials."))}return r}function Sg(e,t,n,r){if(t.framework!=="expo")return[];let i=[],o=Mo(e),a=(Array.isArray(o?.ios?.associatedDomains)?o.ios.associatedDomains:[]).includes(`applinks:${n.domain}`);i.push(a?T("pass",`Expo iOS config contains applinks:${n.domain}.`):T(r?"warn":"fail",`Expo iOS config does not contain applinks:${n.domain}.`));let c=(Array.isArray(o?.android?.intentFilters)?o.android.intentFilters:[]).flatMap(u=>Array.isArray(u?.data)?u.data:[]).some(u=>u?.scheme==="https"&&u.host===n.domain);if(i.push(c?T("pass",`Expo Android config contains App Link host ${n.domain}.`):T(r?"warn":"fail",`Expo Android config does not contain App Link host ${n.domain}.`)),r)return i.push(T("warn","mach.config.json is missing deepLinks; values were inferred from Expo config. Run `mach deeplink setup` to persist Mach metadata and generate hosted files.")),i;let d=vd(e);return d==="wired"?i.push(T("pass","Expo deep link plugin is wired into Expo config and derives values from mach.config.json.")):d==="manual"&&a&&c?i.push(T("pass","Expo resolved config contains the deep-link settings from the dynamic config.")):d==="manual"?i.push(T("warn","Expo deep link plugin exists, but dynamic or missing Expo config means manual plugin insertion must be confirmed.")):a&&c?i.push(T("warn","Expo plugin is not wired, but resolved Expo config already contains the deep-link settings.")):i.push(T("fail","Expo deep link plugin is missing or not wired into Expo config.")),i}function Eg(e,t,n){if(t.framework!=="react-native")return[];let r=[],i=je.join(e,"android/app/src/main/AndroidManifest.xml");if(we.existsSync(i)){let s=we.readFileSync(i,"utf-8");r.push(s.includes(`android:host="${n.domain}"`)?T("pass","AndroidManifest.xml contains the App Links host."):T("warn","AndroidManifest.xml does not contain the App Links host. Native patching is planned for a later phase."))}let o=je.join(e,"ios");if(we.existsSync(o)){let a=we.readdirSync(o,{recursive:!0}).filter(l=>typeof l=="string"&&l.endsWith(".entitlements")).some(l=>we.readFileSync(je.join(o,l),"utf-8").includes(`applinks:${n.domain}`));r.push(a?T("pass","iOS entitlements contain the associated domain."):T("warn","iOS entitlements do not contain the associated domain. Native patching is planned for a later phase."))}return r}function Ig(e,t,n){if(t.framework!=="flutter")return[];let r=[],i;try{i=Ie(e,t.appDirectory,{requireAppDirectory:!0}).appRoot}catch(a){return[T("fail",a.message||"Could not resolve the Flutter app directory.")]}let o=je.join(i,"android/app/src/main/AndroidManifest.xml");if(we.existsSync(o)){let a=we.readFileSync(o,"utf8");r.push(a.includes(`android:host="${n.domain}"`)&&a.includes('android:autoVerify="true"')?T("pass",`Flutter Android manifest verifies https://${n.domain}.`):T("fail","Flutter Android manifest is missing its verified App Links intent filter.")),r.push(a.includes(`android:scheme="${n.scheme}"`)?T("pass",`Flutter Android manifest contains ${n.scheme}://.`):T("fail",`Flutter Android manifest is missing ${n.scheme}://.`))}else r.push(T("warn","Flutter Android project is not present."));let s=je.join(i,"ios");if(we.existsSync(s)){let l=we.readdirSync(s,{recursive:!0}).filter(d=>typeof d=="string"&&d.endsWith(".entitlements")).find(d=>we.readFileSync(je.join(s,d),"utf8").includes(`applinks:${n.domain}`));r.push(l?T("pass",`Flutter iOS entitlements contain applinks:${n.domain}.`):T("fail","Flutter iOS entitlements are missing the associated domain."));let c=we.readdirSync(s).filter(d=>d.endsWith(".xcodeproj")).map(d=>je.join(s,d,"project.pbxproj")).filter(d=>we.existsSync(d));r.push(c.some(d=>we.readFileSync(d,"utf8").includes("CODE_SIGN_ENTITLEMENTS"))?T("pass","Flutter Runner target has an entitlements build setting."):T("fail","Flutter Runner target is not connected to an entitlements file."))}else r.push(T("warn","Flutter iOS project is not present."));return r}async function Bo(e,t){let n=[];try{let r=await fetch(e,{redirect:"manual"});if(r.status>=300&&r.status<400&&!t)return n.push(T("fail",`${e} redirects. Apple AASA endpoints must not redirect.`)),n;n.push(r.status===200?T("pass",`${e} returned HTTP 200.`):T("fail",`${e} returned HTTP ${r.status}.`));let i=r.headers.get("content-type")||"";!i.includes("application/json")&&!i.includes("text/json")&&n.push(T("warn",`${e} content-type is "${i||"missing"}"; application/json is recommended.`)),JSON.parse(await r.text()),n.push(T("pass",`${e} contains valid JSON.`))}catch(r){n.push(T("fail",`${e} check failed: ${r.message}`))}return n}async function _g(e){let t=e.domain;return(await Promise.all([Bo(`https://${t}/.well-known/apple-app-site-association`,!1),Bo(`https://${t}/apple-app-site-association`,!1),Bo(`https://${t}/.well-known/assetlinks.json`,!0)])).flat()}function vg(e){let t=e.android?.package;if(!t)return[T("warn","Cannot print Android device verification commands because android.package is missing.")];let r=Ag("adb",["version"],{encoding:"utf-8"}).status===0?"Run":"Install Android platform-tools, then run";return[T("info",`${r}: adb shell pm set-app-links --package ${t} 0 all`),T("info",`${r}: adb shell pm verify-app-links --re-verify ${t}`),T("info",`${r}: adb shell pm get-app-links ${t}`)]}async function Ho(e,t,n){let r=n.profile||t.deepLinks?.profile||K(t,"store","production"),i=t.framework==="expo"?Qr(e):null,o=t.framework==="expo"?Xr(t,i,r,e):null,s=!t.deepLinks&&!!o,a=t.deepLinks?Jr(t,{profile:r,cwd:e,expoHints:i}):o,l=[];if(!a)return[T("fail","mach.config.json is missing deepLinks and Mach could not infer existing deep-link settings. Run `mach deeplink setup`.")];l.push(a.baseUrl?T("pass","deepLinks.baseUrl is configured."):T("fail","deepLinks.baseUrl is missing.")),l.push(a.domain?T("pass","deepLinks.domain is configured."):T("fail","deepLinks.domain is missing.")),l.push(a.scheme?T("pass","deepLinks.scheme is configured."):T("fail","deepLinks.scheme is missing."));let c=s?"warn":"fail";return l.push(...yg(e,a,c)),l.push(...bg(e,a,c)),l.push(...Sg(e,t,a,s)),l.push(...Eg(e,t,a)),l.push(...Ig(e,t,a)),n.live&&l.push(...await _g(a)),n.androidDevice&&l.push(...vg(a)),l}import ve from"fs";import Ct from"path";var Tt=(e,t)=>Ct.relative(e,t).split(Ct.sep).join("/"),Dd=e=>e.replace(/[.*+?^${}()|[\]\\]/g,"\\$&");function Od(e,t,n){let r=e.lastIndexOf(t);return r<0?e:`${e.slice(0,r)}${n}${e.slice(r)}`}function Rg(e,t){let n=[],r=[],i=[],o=Ct.join(e,"android/app/src/main/AndroidManifest.xml");if(!ve.existsSync(o))return i.push("AndroidManifest.xml is not present; Android App Links were not patched."),{written:n,skipped:r,notes:i};let s=ve.readFileSync(o,"utf8"),a=/<activity\b[\s\S]*?<intent-filter[\s\S]*?android\.intent\.action\.MAIN[\s\S]*?<\/intent-filter>[\s\S]*?<\/activity>/m.exec(s);if(!a||a.index===void 0)return i.push("Could not safely identify Flutter's launcher activity; add the App Links intent filter manually."),{written:n,skipped:r,notes:i};let l=a[0];if(!l.includes(`android:host="${t.domain}"`)){let d=`
|
|
2339
2363
|
<!-- MACH verified App Link -->
|
|
2340
2364
|
<intent-filter android:autoVerify="true">
|
|
2341
2365
|
<action android:name="android.intent.action.VIEW" />
|
|
@@ -2343,7 +2367,7 @@ module.exports = function withMachDeepLinks(config) {
|
|
|
2343
2367
|
<category android:name="android.intent.category.BROWSABLE" />
|
|
2344
2368
|
<data android:scheme="https" android:host="${t.domain}" />
|
|
2345
2369
|
</intent-filter>
|
|
2346
|
-
`;l=
|
|
2370
|
+
`;l=Od(l,"</activity>",d)}if(t.scheme&&!l.includes(`android:scheme="${t.scheme}"`)){let d=`
|
|
2347
2371
|
<!-- MACH custom URI scheme -->
|
|
2348
2372
|
<intent-filter>
|
|
2349
2373
|
<action android:name="android.intent.action.VIEW" />
|
|
@@ -2351,7 +2375,7 @@ module.exports = function withMachDeepLinks(config) {
|
|
|
2351
2375
|
<category android:name="android.intent.category.BROWSABLE" />
|
|
2352
2376
|
<data android:scheme="${t.scheme}" />
|
|
2353
2377
|
</intent-filter>
|
|
2354
|
-
`;l=
|
|
2378
|
+
`;l=Od(l,"</activity>",d)}let c=`${s.slice(0,a.index)}${l}${s.slice(a.index+a[0].length)}`;return c===s?r.push(Tt(e,o)):(ve.writeFileSync(o,c),n.push(Tt(e,o))),{written:n,skipped:r,notes:i}}function $g(e,t){if(ve.mkdirSync(Ct.dirname(e),{recursive:!0}),!ve.existsSync(e))return ve.writeFileSync(e,`<?xml version="1.0" encoding="UTF-8"?>
|
|
2355
2379
|
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
|
|
2356
2380
|
<plist version="1.0">
|
|
2357
2381
|
<dict>
|
|
@@ -2366,7 +2390,7 @@ module.exports = function withMachDeepLinks(config) {
|
|
|
2366
2390
|
<array>
|
|
2367
2391
|
<string>applinks:${t}</string>
|
|
2368
2392
|
</array>
|
|
2369
|
-
</dict>`);return i===n?!1:(ve.writeFileSync(e,i),!0)}function
|
|
2393
|
+
</dict>`);return i===n?!1:(ve.writeFileSync(e,i),!0)}function wg(e,t){if(!ve.existsSync(e))return!1;let n=ve.readFileSync(e,"utf8");if(new RegExp(`<string>\\s*${Dd(t)}\\s*</string>`).test(n))return!1;let r=` <key>CFBundleURLTypes</key>
|
|
2370
2394
|
<array>
|
|
2371
2395
|
<dict>
|
|
2372
2396
|
<key>CFBundleTypeRole</key>
|
|
@@ -2377,24 +2401,24 @@ module.exports = function withMachDeepLinks(config) {
|
|
|
2377
2401
|
</array>
|
|
2378
2402
|
</dict>
|
|
2379
2403
|
</array>
|
|
2380
|
-
`,i=n.replace("</dict>",`${r}</dict>`);return i===n?!1:(ve.writeFileSync(e,i),!0)}function
|
|
2404
|
+
`,i=n.replace("</dict>",`${r}</dict>`);return i===n?!1:(ve.writeFileSync(e,i),!0)}function Og(e,t){let n=[],r=[],i=[],o=Ct.join(e,"ios");if(!ve.existsSync(o))return i.push("The iOS project is not present; Associated Domains were not patched."),{written:n,skipped:r,notes:i};let s=ve.readdirSync(o).find(u=>u.endsWith(".xcodeproj")),a=s?.replace(/\.xcodeproj$/,"")||"Runner",l=s?Ct.join(o,s,"project.pbxproj"):void 0,c=Ct.join(o,a,`${a}.entitlements`);if($g(c,t.domain)?n.push(Tt(e,c)):r.push(Tt(e,c)),l&&ve.existsSync(l)){let u=ve.readFileSync(l,"utf8"),p=`${a}/${a}.entitlements`;if(u.includes("CODE_SIGN_ENTITLEMENTS"))u.includes(p)?r.push(Tt(e,l)):i.push(`The Xcode project already uses a different entitlements file. Add applinks:${t.domain} to that configured file.`);else{let m=t.ios?.bundleIdentifier,A=!1,g=u.replace(/buildSettings = \{([\s\S]*?)\n(\s*)\};/g,(h,y,b)=>m&&!new RegExp(`PRODUCT_BUNDLE_IDENTIFIER\\s*=\\s*"?${Dd(m)}"?;`).test(y)||!y.includes("PRODUCT_BUNDLE_IDENTIFIER")?h:(A=!0,`buildSettings = {${y}
|
|
2381
2405
|
${b} CODE_SIGN_ENTITLEMENTS = ${p};
|
|
2382
|
-
${b}};`));
|
|
2383
|
-
`),e)},
|
|
2406
|
+
${b}};`));A?(ve.writeFileSync(l,g),n.push(Tt(e,l))):i.push(`Set CODE_SIGN_ENTITLEMENTS to ${p} for the Runner target; Mach could not identify its build settings safely.`)}}let d=Ct.join(o,a,"Info.plist");return wg(d,t.scheme)?n.push(Tt(e,d)):ve.existsSync(d)&&r.push(Tt(e,d)),{written:n,skipped:r,notes:i}}function Pd(e,t){let n=Rg(e,t),r=Og(e,t);return{written:[...n.written,...r.written],skipped:[...n.skipped,...r.skipped],notes:[...n.notes,...r.notes]}}var An=()=>process.stdin.isTTY&&process.stdout.isTTY,Cd=`${f.npmScope}/mach`,yn=()=>{Dg("Operation cancelled."),process.exit(0)},Vo=e=>{if(typeof e!="string")return;let t=e.trim();return t.length>0?t:void 0},gt=(...e)=>{for(let t of e){let n=Vo(t);if(n)return n}},Gt=async(e,t,n,r,i)=>{if(t)return t;if(i||!An()){if(r)throw new Error(`${e.replace(/:$/,"")} is required. Pass it as an option or run interactively.`);return}let o=await Nd({message:e,initialValue:t||"",placeholder:n,validate(s){if(r&&s.trim().length===0)return"Required."}});return hn(o)&&yn(),Vo(o)},kd=async(e,t,n)=>{if(n||!An())return t;let r=await Go({message:e,initialValue:t});return hn(r)&&yn(),!!r};async function kg(e,t,n){let r=de(e.framework),i=de(t);if(i)return i;if(r)return r;let o=hd();if(n||!An())return o;let s=await Tg({message:`Which framework should ${f.name} configure?`,initialValue:o,options:[{value:"expo",label:"Expo"},{value:"react-native",label:"React Native"},{value:"flutter",label:"Flutter"}]});return hn(s)&&yn(),s}var Zn=e=>e==="ios"||e==="all",ei=e=>e==="android"||e==="all";async function Ng(e,t,n){if(t!=="expo"||Zr(e)||n.installPlugin===!1)return!1;if(n.installPlugin===!0||n.yes)return!0;if(!An())return!1;let r=await Go({message:`Install ${Cd} locally so Expo can use ${Cd}/expo-plugin?`,initialValue:!0});return hn(r)&&yn(),!!r}async function xg(e,t){let n=!!t.yes,r=t.profile||e.deepLinks?.profile||K(e,"store","production"),i=ce(e,r)||{},o=i.ios||{},s=i.android||{},a=e.submit?.[r]?.ios||{},l=e.submit?.[r]?.android||{},c=lt(e,r),d=await kg(e,t.framework,n),u=Ad(e,gd(t.platform),i),p=e.deepLinks,A=d==="expo"&&(!gt(t.baseUrl,p?.baseUrl,t.domain?`https://${t.domain}`:void 0)||!gt(t.scheme,p?.scheme,o.scheme,e.scheme,e.slug,e.name)||Zn(u)&&!gt(t.iosBundleId,p?.ios?.bundleIdentifier,o.bundleIdentifier,o.bundleId,e.ios?.bundleIdentifier)||ei(u)&&!gt(t.androidPackage,p?.android?.package,s.package,s.applicationId,e.android?.package,l.packageName,l.package))?Xr(e,Qr(process.cwd()),r,process.cwd()):null,g=t.output||p?.web?.outputDir||qr(process.cwd(),e),h=await Gt("Deep link base URL:",t.baseUrl||p?.baseUrl||(t.domain?`https://${t.domain}`:void 0)||A?.baseUrl,"https://app.example.com",!0,n),y=qn(h),b=t.baseUrl?new URL(y).hostname:void 0,v=await Gt("Associated domain:",t.domain||b||p?.domain||A?.domain||new URL(y).hostname,"app.example.com",!0,n),E=Yr(await Gt("URI scheme:",gt(t.scheme,p?.scheme,o.scheme,e.scheme,A?.scheme,e.slug,e.name,"app"),"myapp",!0,n)||"app"),L=Zn(u)?await Gt("iOS bundle identifier:",gt(t.iosBundleId,p?.ios?.bundleIdentifier,o.bundleIdentifier,o.bundleId,e.ios?.bundleIdentifier,A?.ios?.bundleIdentifier),"com.example.app",!0,n):p?.ios?.bundleIdentifier||e.ios?.bundleIdentifier,F=Zn(u)?await Gt("Apple Team ID:",gt(t.appleTeamId,p?.ios?.appleTeamId,o.appleTeamId,o.developerTeamId,a.appleTeamId,a.developerTeamId,e.ios?.appleTeamId,e.ios?.developerTeamId,c.teamId),"ABCDE12345",!0,n):p?.ios?.appleTeamId||e.ios?.appleTeamId,B=Zn(u)?await Gt("App Store ID (optional, for Smart App Banner):",gt(t.appStoreId,p?.ios?.appStoreId,o.ascAppId,a.ascAppId,e.ios?.ascAppId),"1234567890",!1,n):p?.ios?.appStoreId,H=Zn(u)?await kd("Enable iOS Web Credentials for HTTPS OAuth callbacks?",!!p?.ios?.webCredentials,n):!!p?.ios?.webCredentials,Z=ei(u)?await Gt("Android package name:",gt(t.androidPackage,p?.android?.package,s.package,s.applicationId,e.android?.package,l.packageName,l.package,A?.android?.package),"com.example.app",!0,n):p?.android?.package||e.android?.package,ie=p?.android?.sha256CertFingerprints||[],Pe=t.androidFingerprint||[],S=e.android?.sha256CertFingerprints||[],$=s.sha256CertFingerprints||[],R=[...Pe,...ie,...$,...S].filter(Boolean);if(ei(u)&&R.length===0&&!n&&An()){let D=await Nd({message:"Android SHA256 fingerprint (optional now, required for verified App Links):",placeholder:"AA:BB:CC:..."});hn(D)&&yn(),Vo(D)&&R.push(D)}let O=ei(u)?await kd("Enable Android Login Credentials for website password and passkey sharing?",!!p?.android?.loginCredentials,n):!!p?.android?.loginCredentials,N=yd(e,{...t,baseUrl:y,domain:v,scheme:E,output:g,appleTeamId:F,appStoreId:B,androidFingerprint:R});return N.ios={...N.ios||{},bundleIdentifier:L,appleTeamId:F,appStoreId:B,webCredentials:H},N.android={...N.android||{},package:Z,sha256CertFingerprints:Array.from(new Set(R)),loginCredentials:O},{framework:d,platform:u,deepLinks:N}}var jo=(e,t)=>{t.length!==0&&Pg(t.map(n=>`- ${n}`).join(`
|
|
2407
|
+
`),e)},xd=e=>e.filter(t=>t.level==="fail").length;function Ld(e){for(let t of e){let n=t.level==="pass"?et.green("PASS"):t.level==="warn"?et.yellow("WARN"):t.level==="info"?et.cyan("INFO"):et.red("FAIL");ti.info(`${n} ${t.message}`)}}async function Md(e){try{let t=process.cwd(),n=Td.join(t,f.configFileName),r=re()||{};if(!Cg.existsSync(n)){let b=e.yes||!An()?!0:await Go({message:`${f.configFileName} was not found. Create one with deep link settings?`,initialValue:!0});if(hn(b)&&yn(),!b)return}let{framework:i,deepLinks:o}=await xg(r,e),s=e.profile||r.deepLinks?.profile||K(r,"store","production"),a=bd(r,i,o,s),l=i==="flutter"?Ie(t,a.appDirectory,{requireAppDirectory:!0}).appRoot:t,c=Sd(a,t),d=$d(t,o),u=await Ng(t,i,e),p=i==="expo"?_d(t,o,{installPackage:u}):i==="flutter"?Pd(l,o):{written:[],skipped:[],notes:["React Native native patching is planned for a later phase. Hosted files were generated now."]},m=[Td.relative(t,c),...d.written,...p.written],A=[...d.skipped,...p.skipped],g=[...d.notes,...p.notes];jo("Written",m),jo("Skipped",A),jo("Notes",g);let h=await Ho(t,a,{});Ld(h);let y=xd(h);if(y>0){ni(et.yellow(`Deep link setup finished with ${y} verification issue(s).`));return}ni(et.green("Deep link setup complete."))}catch(t){ti.error(et.red(t.message||"Deep link setup failed.")),process.exit(1)}}async function Fd(e){try{let t=re();t||(ti.error(et.red(`No ${f.configFileName} found in the current directory.`)),process.exit(1));let n=await Ho(process.cwd(),t,e);Ld(n);let r=xd(n);r>0&&(ni(et.red(`Deep link verification failed with ${r} issue(s).`)),process.exit(1)),ni(et.green("Deep link verification passed."))}catch(t){ti.error(et.red(t.message||"Deep link verification failed.")),process.exit(1)}}import{log as ht,spinner as Ud}from"@clack/prompts";import kt from"chalk";var Lg=e=>{let t=String(e||"").trim().toLowerCase();if(t==="ios"||t==="android")return t;throw new Error("Pass --platform ios or --platform android.")},Mg=e=>{let t=Number(e);if(!Number.isFinite(t))throw new Error("Counter value must be a non-negative integer.");let n=Math.floor(t);if(n<0)throw new Error("Counter value must be a non-negative integer.");return n},Fg=(e,t,n)=>{let r=String(n.scope||"").trim();if(r)return r;let i=n.profile||K(t,"store","production"),o=e==="android"?n.package||n.androidPackage:n.bundleId||n.iosBundleIdentifier;if(o)return String(o).trim();let s=e==="android"?lr(t,i):dr(t,i);if(s)return s;throw new Error(e==="android"?`Could not resolve Android package. Set android.package in ${f.configFileName}, or pass --package/--scope.`:`Could not resolve iOS bundle identifier. Set ios.bundleIdentifier in ${f.configFileName}, or pass --bundle-id/--scope.`)},Ug=()=>{let e=re();if(!e)throw new Error(`No ${f.configFileName} found in the current directory. Run \`${f.nameLower} init\` or \`${f.nameLower} link\` first.`);if(!e.projectId)throw new Error(`${f.configFileName} is missing projectId.`);return e},zo=e=>{ht.info(kt.bgBlue.white(" Native Version Counter ")),ht.info(`${kt.blue("Platform:")} ${e.platform}`),ht.info(`${kt.blue("Scope:")} ${e.scope}`),ht.info(`${kt.blue("Current DB value:")} ${e.current}`),ht.info(`${kt.blue("Next build will use:")} ${e.next}`),e.seeded||ht.warn(kt.yellow("This counter has not been seeded yet. Existing store apps should run `mach version seed` once before auto-version builds."))};async function Ko(e,t={}){if(!Oe()){ht.error(`You are not logged in. Run \`${f.nameLower} login\` first.`);return}try{let r=Ug(),i=Lg(t.platform),o=Fg(i,r,t),s=String(r.projectId);if(e==="show"){let d=Ud();t.json||d.start("Fetching native version counter...");let{data:u}=await w.get(`/projects/${s}/version-counters`,{params:{platform:i,scope:o}});if(u.status!=="success")throw new Error(u.message||"Failed to fetch version counter.");t.json?console.log(JSON.stringify(u.counter,null,2)):(d.stop("Fetched native version counter."),zo(u.counter));return}let a=Mg(t.value),l=Ud();t.json||l.start("Seeding native version counter...");let{data:c}=await w.post(`/projects/${s}/version-counters/seed`,{platform:i,scope:o,value:a,force:!!t.force});if(c.status!=="success")throw new Error(c.message||"Failed to seed version counter.");t.json?console.log(JSON.stringify(c.counter,null,2)):(l.stop(`Seeded ${i} counter for ${o}.`),zo(c.counter))}catch(r){let i=r?.response?.data?.message||r?.message||"Version command failed.";if(r?.response?.data?.counter&&!t.json){ht.error(kt.red(i)),zo(r.response.data.counter);return}t.json?console.log(JSON.stringify({status:"error",message:i},null,2)):ht.error(kt.red(i))}}import{log as Ge,spinner as tr,text as Bd,select as Hd,confirm as Bg,isCancel as Qn,cancel as er,outro as nr,note as Hg}from"@clack/prompts";import X from"chalk";import{execSync as jg}from"child_process";async function Gg(){try{let e=jg("xcrun devicectl list devices --json-output -",{stdio:["pipe","pipe","pipe"]}).toString();return(JSON.parse(e).result?.devices||[]).filter(r=>r.connectionProperties?.transportType==="wired"||r.connectionProperties?.transportType==="localNetwork").map(r=>({udid:r.identifier,name:r.deviceProperties?.name||"Unknown Device",model:r.hardwareProperties?.marketingName||"iPhone"}))}catch{return[]}}var jd=e=>e?.trim().toUpperCase()||void 0;function Gd(e){let t=re(),n=t?lt(t):{},r=jd(e.teamId),i=r||n.teamId;return{...n,teamId:i,developerTeamId:r||n.developerTeamId||i}}async function Vg(e){let t=e.udid,n=e.name,r=Gd(e),i=r.teamId;if(!t){let s=tr();s.start("Scanning for connected iOS devices...");let a=await Gg();if(s.stop(a.length>0?`Found ${a.length} device(s)`:"No devices detected"),a.length===1)t=a[0].udid,n=n||a[0].name,Ge.info(`Detected: ${X.bold(n)} (${X.dim(t.substring(0,12)+"...")})`);else if(a.length>1){let l=await Hd({message:"Select a device to register:",options:a.map(d=>({value:d.udid,label:`${d.name} (${d.model})`,hint:d.udid.substring(0,12)+"..."}))});if(Qn(l)){er("Cancelled");return}t=l;let c=a.find(d=>d.udid===t);n=n||c.name}else{Ge.info(X.dim("No connected devices found. Enter UDID manually."));let l=await Bd({message:"Device UDID:",placeholder:"00008101-XXXXXXXXXXXX",validate(c){if(c.length<10)return"UDID seems too short"}});if(Qn(l)){er("Cancelled");return}t=l}}if(!n){let s=await Bd({message:"Device name:",placeholder:"Nitesh's iPhone",validate(a){if(a.length===0)return"Name is required"}});if(Qn(s)){er("Cancelled");return}n=s}let o=tr();o.start("Registering device...");try{await w.post("/devices",{udid:t,name:n,platform:"ios",addedVia:"cli",teamId:i,teamName:r.teamName,developerTeamId:r.developerTeamId,appStoreConnectTeamId:r.appStoreConnectTeamId,providerId:r.providerId,providerName:r.providerName}),o.stop(X.green("Device registered!")),Ge.info(` ${X.bold("Name:")} ${n}`),Ge.info(` ${X.bold("UDID:")} ${X.dim(t)}`),i&&Ge.info(` ${X.bold("Team:")} ${X.dim(i)}`)}catch(s){o.stop(X.red("Failed to register device")),Ge.error(s.response?.data?.message||s.message)}nr(X.blue("---"))}async function zg(e={}){let t=jd(e.teamId),n=tr();n.start("Fetching registered devices...");try{let i=(await w.get("/devices",t?{params:{teamId:t}}:void 0)).data.devices||[];if(n.stop(`${i.length} device(s) registered${t?` for team ${t}`:""}`),i.length===0){Ge.info(X.dim(`No devices registered yet. Run \`${f.nameLower} device register\` to add one.`)),nr(X.blue("---"));return}let o=i.map(s=>{let a=new Date(s.createdAt).toLocaleDateString();return` ${X.bold(s.name.padEnd(24))} ${X.dim(s.udid.padEnd(28))} ${X.dim((s.teamId||"-").padEnd(12))} ${X.cyan((s.addedVia||"-").padEnd(10))} ${X.dim(a)}`});Hg(` ${X.bold("Name".padEnd(24))} ${"UDID".padEnd(28)} ${"Team".padEnd(12)} ${"Via".padEnd(10)} Date
|
|
2384
2408
|
`+o.join(`
|
|
2385
|
-
`),"Registered Devices")}catch(r){n.stop(
|
|
2386
|
-
`),c=ii.relative(e,s);for(let d=0;d<l.length;d++){let u=l[d];if(!
|
|
2387
|
-
${r.stderr||""}`,o=Array.from(new Set(i.match(/GHSA-[A-Za-z0-9-]+/g)||[]));for(let s of o)t.push({id:`DEP-${String(n++).padStart(3,"0")}`,title:`Dart package security advisory ${s}`,description:"The Dart dependency resolver reported that a resolved package is affected by a published security advisory.",severity:"high",category:"dependencies",recommendation:`Review https://github.com/advisories/${s}, assess exposure, and update to a non-affected compatible package version.`});try{let s=JSON.parse(r.stdout||"{}");for(let a of s.packages||[]){if(!["direct","dev"].includes(String(a.kind||"")))continue;let l=Yo(a.current),c=Yo(a.resolvable),d=Yo(a.latest);!l||!c&&!d||l===(c||d)||t.push({id:`DEP-${String(n++).padStart(3,"0")}`,title:`${a.package||a.name} has a newer compatible version`,description:`Current ${l}; resolvable ${c||"unknown"}; latest ${d||"unknown"}. This is dependency freshness information, not a security finding.`,severity:"low",category:"dependencies",recommendation:"Review the package changelog, update intentionally, and run the application test suite."})}}catch{return{category:"dependencies",label:"Flutter Dependencies",findings:t,durationMs:0,error:"Could not parse `dart pub outdated --json` output."}}return{category:"dependencies",label:"Flutter Dependencies",findings:t,durationMs:0}}import oi from"fs";import si from"path";var
|
|
2388
|
-
`),p=si.relative(e,a);for(let m=0;m<u.length;m++){let
|
|
2389
|
-
`),d=li.relative(e,a);for(let u=0;u<c.length;u++){let p=c[u],m=p.trim();if(m.startsWith("//")||m.startsWith("*"))continue;
|
|
2390
|
-
`),d=ci.relative(e,a);for(let u=0;u<c.length;u++){let p=c[u],m=p.trim();if(!(m.startsWith("//")||m.startsWith("*"))&&(
|
|
2391
|
-
`);/__DEV__/.test(y)||n.push({id:`DBG-${String(r++).padStart(3,"0")}`,title:"Sensitive data in console log",description:"Console log may expose sensitive data (token, password, etc.) in production",severity:"medium",category:"debug",file:d,line:u+1,recommendation:"Wrap in __DEV__ check or remove sensitive data from console output."})}}}return{category:"debug",label:"Debug/Dev Flags",findings:n,durationMs:0}}import dc from"fs";import qo from"path";var yh=new Set(["androidx.work.impl.background.systemjob.SystemJobService","androidx.work.impl.diagnostics.DiagnosticsReceiver","com.google.firebase.iid.FirebaseInstanceIdReceiver","com.google.android.gms.auth.api.signin.RevocationBoundService","androidx.profileinstaller.ProfileInstallReceiver","com.google.firebase.messaging.FirebaseMessagingService","com.google.android.gms.measurement.AppMeasurementService","com.google.android.gms.measurement.AppMeasurementJobService"]);function Ah(e){let t=[qo.join(e,"android","app","src","main","AndroidManifest.xml"),qo.join(e,"android","AndroidManifest.xml")];for(let n of t)if(dc.existsSync(n))return n;return null}async function cc(e,t){let n=[],r=1,i=Ah(e);if(!i)return{category:"manifest",label:"Android Manifest",findings:[],durationMs:0,error:"No AndroidManifest.xml found in the configured app directory."};let o=dc.readFileSync(i,"utf-8"),s=qo.relative(e,i),a=/<(activity|activity-alias|service|receiver|provider)\s+([^>]*?)(?:\/>|>([\s\S]*?)<\/\1\s*>)/g,l;for(;(l=a.exec(o))!==null;){let c=l[1],d=l[2],u=l[3]||"",m=d.match(/android:name="([^"]+)"/)?.[1]||"unknown";if(yh.has(m))continue;let y=/android:exported="true"/.test(d),g=/android:permission="/.test(d),h=(c==="activity"||c==="activity-alias")&&/android:name="android\.intent\.action\.MAIN"/.test(u)&&/android:name="android\.intent\.category\.LAUNCHER"/.test(u);y&&!g&&!h&&n.push({id:`MAN-${String(r++).padStart(3,"0")}`,title:`Exported ${c}: ${m.split(".").pop()}`,description:`${m} is exported=true without android:permission protection`,severity:"medium",category:"manifest",file:s,recommendation:'Set android:exported="false" or add an android:permission attribute.'})}return/android:allowBackup="true"/.test(o)&&n.push({id:`MAN-${String(r++).padStart(3,"0")}`,title:"allowBackup is enabled",description:'android:allowBackup="true" allows data extraction via ADB backup',severity:"medium",category:"manifest",file:s,recommendation:'Set android:allowBackup="false" in native configuration (or via your framework build configuration).',autoFixable:!0}),/android:debuggable="true"/.test(o)&&n.push({id:`MAN-${String(r++).padStart(3,"0")}`,title:"App is debuggable",description:'android:debuggable="true" allows attaching a debugger in production',severity:"critical",category:"manifest",file:s,recommendation:"Ensure debuggable is false for production builds. This is usually set automatically for release builds."}),{category:"manifest",label:"Android Manifest",findings:n,durationMs:0}}import ui from"fs";import Jo from"path";function bh(e){let t=Jo.join(e,"ios");if(!ui.existsSync(t))return null;let n=ui.readdirSync(t,{withFileTypes:!0});for(let r of n){if(!r.isDirectory()||r.name==="Pods"||r.name.startsWith("."))continue;let i=Jo.join(t,r.name,"Info.plist");if(ui.existsSync(i))return i}return null}async function uc(e,t){let n=[],r=1,i=bh(e);if(!i)return{category:"ats",label:"iOS ATS Config",findings:[],durationMs:0,error:"No Info.plist found in the configured app directory."};let o=ui.readFileSync(i,"utf-8"),s=Jo.relative(e,i),a=o.match(/<key>NSAppTransportSecurity<\/key>\s*<dict>([\s\S]*?)<\/dict>/);if(a){let l=a[1];/<key>NSAllowsArbitraryLoads<\/key>\s*<true\s*\/>/.test(l)&&n.push({id:`ATS-${String(r++).padStart(3,"0")}`,title:"ATS disabled \u2014 NSAllowsArbitraryLoads",description:"App Transport Security is completely disabled. All HTTP connections are allowed.",severity:"critical",category:"ats",file:s,recommendation:"Remove NSAllowsArbitraryLoads or set to false. Use domain-specific exceptions only if absolutely necessary."});let c=l.match(/<key>NSExceptionDomains<\/key>\s*<dict>([\s\S]*?)<\/dict>/);if(c){let d=c[1].match(/<key>([^<]+)<\/key>/g);if(d)for(let u of d){let p=u.replace(/<\/?key>/g,"");p!=="NSExceptionDomains"&&n.push({id:`ATS-${String(r++).padStart(3,"0")}`,title:`ATS exception: ${p}`,description:`ATS exception configured for ${p}`,severity:"low",category:"ats",file:s,recommendation:`Verify that the ATS exception for ${p} is necessary. Use HTTPS where possible.`})}}}return{category:"ats",label:"iOS ATS Config",findings:n,durationMs:0}}import{spawnSync as pi}from"child_process";import Ve from"fs";import Fe from"path";var Sh=/^[A-Za-z][A-Za-z0-9_]*(?:\.[A-Za-z][A-Za-z0-9_]*)+$/,Eh=/^[A-Za-z0-9][A-Za-z0-9-]*(?:\.[A-Za-z0-9][A-Za-z0-9-]*)+$/,Ih=["package-lock.json","npm-shrinkwrap.json","yarn.lock","pnpm-lock.yaml","bun.lock","bun.lockb"],pc=e=>{if(!Ve.existsSync(e))return null;try{return JSON.parse(Ve.readFileSync(e,"utf-8"))}catch{return null}},fi=e=>{let t=String(e||"").match(/\d+/);if(!t)return;let n=Number(t[0]);return Number.isFinite(n)?n:void 0},mi=(e,t=420)=>{let n=e.split(/\r?\n/).map(r=>r.trim()).filter(Boolean).slice(-6).join(" ");return n.length>t?`${n.slice(0,t-1)}\u2026`:n};async function fc(e,t){let n=[],r=1,i=h=>{n.push({...h,id:`PROJECT-${String(r++).padStart(3,"0")}`,category:"project"})},o=Fe.join(e,f.configFileName),s=pc(o),a=de(s?.framework),l=s?st(e).appRoot:e,c=Fe.join(l,"package.json"),d=pc(c);if(!s)i({title:`${f.configFileName} is missing or invalid`,description:Ve.existsSync(o)?`${f.configFileName} could not be parsed as JSON.`:"Mach cannot validate build profiles, app identifiers, or OTA settings without its project configuration.",severity:Ve.existsSync(o)?"high":"medium",file:f.configFileName,recommendation:Ve.existsSync(o)?`Fix the JSON syntax in ${f.configFileName}, then rerun \`${f.nameLower} audit --category project\`.`:`Run \`${f.nameLower} init\` or \`${f.nameLower} link\` to create ${f.configFileName}.`});else{let h=de(s.framework);a=h;let A={...d?.dependencies||{},...d?.devDependencies||{}},b=cr(l)?"flutter":A.expo?"expo":A["react-native"]?"react-native":void 0;if(h?b&&h!==b&&h!=="flutter"&&i({title:"Configured framework does not match package.json",description:`Mach is configured for ${h}, but package.json looks like ${b}.`,severity:"high",file:f.configFileName,recommendation:`Update "framework" in ${f.configFileName}, or correct the project dependencies before building.`}):i({title:"Mach framework is missing or unsupported",description:`The framework must be one of expo, react-native, or flutter. Received ${String(s.framework||"nothing")}.`,severity:"high",file:f.configFileName,recommendation:`Set "framework" in ${f.configFileName} to the framework this project actually uses.`}),String(s.projectId||"").trim()||i({title:"Project is not linked to Mach",description:`${f.configFileName} does not contain a projectId.`,severity:"medium",file:f.configFileName,recommendation:`Run \`${f.nameLower} link\` and select the correct Mach project.`}),s.appDirectory){let j=Fe.resolve(e,s.appDirectory);Ve.existsSync(j)?!Ve.existsSync(Fe.join(j,"package.json"))&&!Ve.existsSync(Fe.join(j,"pubspec.yaml"))&&i({title:"Configured app directory has no application manifest",description:`${s.appDirectory} exists but has no package.json or pubspec.yaml.`,severity:"medium",file:f.configFileName,recommendation:"Point appDirectory to the workspace folder containing the application manifest."}):i({title:"Configured app directory does not exist",description:`Mach resolved appDirectory to ${j}, but that path is missing.`,severity:"high",file:f.configFileName,recommendation:"Correct appDirectory or restore the application folder."})}let v=String(s.android?.package||"").trim();v&&!Sh.test(v)&&i({title:"Android package name is invalid",description:`${v} is not a valid reverse-domain Android application ID.`,severity:"high",file:f.configFileName,recommendation:"Use a package name such as com.company.app and make it match the native project."});let S=String(s.ios?.bundleIdentifier||"").trim();S&&!Eh.test(S)&&i({title:"iOS bundle identifier is invalid",description:`${S} is not a valid reverse-domain bundle identifier.`,severity:"high",file:f.configFileName,recommendation:"Use a bundle identifier such as com.company.app and make it match the Xcode target."});let L=Object.keys(s.build||{});if(!L.length)i({title:"No Mach build profiles are configured",description:"Development, staging, and production behavior cannot be validated consistently.",severity:"medium",file:f.configFileName,recommendation:"Add explicit build profiles for the environments your team ships."});else for(let j of L){let Q=String(s.build?.[j]?.extends||"").trim();if(Q&&!s.build?.[Q]){i({title:`Build profile ${j} extends a missing profile`,description:`${j} extends ${Q}, but ${Q} is not defined.`,severity:"high",file:f.configFileName,recommendation:`Add the ${Q} profile or update ${j}.extends.`});continue}try{let ie=ce(s,j);h==="flutter"&&Zt(l,j,ie)}catch(ie){i({title:`Build profile ${j} cannot be resolved`,description:ie.message||"The profile inheritance chain is invalid.",severity:"high",file:f.configFileName,recommendation:"Remove circular or missing profile inheritance and rerun the audit."})}}let M=h==="flutter"?void 0:fi(s.nodeVersion),B=fi(process.versions.node);M&&B&&M!==B&&i({title:"Local Node version differs from Mach builds",description:`This shell uses Node ${B}, while Mach is configured for Node ${M}.`,severity:"low",file:f.configFileName,recommendation:`Use Node ${M} locally when reproducing build failures, or update nodeVersion intentionally.`})}let u=Ih.filter(h=>Ve.existsSync(Fe.join(e,h)));a==="flutter"?Ve.existsSync(Fe.join(l,"pubspec.lock"))||Ve.existsSync(Fe.join(e,"pubspec.lock"))||i({title:"Flutter application lockfile is missing",description:"A committed pubspec.lock is required for reproducible local and managed builds.",severity:"high",file:Fe.relative(e,Fe.join(l,"pubspec.lock"))||"pubspec.lock",recommendation:"Run `flutter pub get`, review pubspec.lock, and commit it for the application."}):u.length?a!=="flutter"&&u.length>1&&i({title:"Multiple package-manager lockfiles found",description:`Found ${u.join(", ")}. The selected package manager may differ between environments.`,severity:"medium",recommendation:"Keep only the lockfile for the package manager used by this project."}):i({title:"No package-manager lockfile found",description:"Cloud and local dependency resolution may produce different versions.",severity:"medium",recommendation:"Commit the lockfile created by the package manager used for Mach builds."});let p=a==="flutter"?void 0:fi(d?.engines?.node),m=fi(process.versions.node);p&&m&&/(?:>=|>|\^|~)/.test(String(d.engines.node))&&m<p&&i({title:"Current Node version is below package.json requirements",description:`package.json requires ${d.engines.node}, but this shell uses ${process.versions.node}.`,severity:"high",file:"package.json",recommendation:"Install a compatible Node release before running Mach commands."});let y=Fe.join(e,"node_modules",".bin",process.platform==="win32"?"expo.cmd":"expo");if(!!(d?.dependencies?.expo||d?.devDependencies?.expo)&&Ve.existsSync(y)){let h=pi(y,["install","--check"],{cwd:e,encoding:"utf-8",stdio:["ignore","pipe","pipe"],timeout:45e3,env:{...process.env,EXPO_NO_TELEMETRY:"1"}});if(h.status!==0){let A=mi(`${h.stdout||""}
|
|
2392
|
-
${h.stderr||""}`);i({title:"Expo dependencies need alignment",description:
|
|
2393
|
-
${h.stderr||""}`)||"The flutter executable could not be run.",severity:"high",recommendation:"Install the project Flutter SDK, add it to PATH, and pin flutter.sdkVersion for managed builds."});else{try{let
|
|
2409
|
+
`),"Registered Devices")}catch(r){n.stop(X.red("Failed to fetch devices")),Ge.error(r.response?.data?.message||r.message)}nr(X.blue("---"))}async function Kg(e){let t=e.udid,n=Gd(e).teamId;if(!t){let o=tr();o.start("Fetching registered devices...");try{let a=(await w.get("/devices",n?{params:{teamId:n}}:void 0)).data.devices||[];if(o.stop(`${a.length} device(s) found`),a.length===0){Ge.info(X.dim("No devices to remove.")),nr(X.blue("---"));return}let l=await Hd({message:"Select device to remove:",options:a.map(d=>({value:d.deviceKey||d.udid,label:d.name,hint:`${d.udid.substring(0,12)}...${d.teamId?` \xB7 ${d.teamId}`:""}`}))});if(Qn(l)){er("Cancelled");return}let c=a.find(d=>(d.deviceKey||d.udid)===l);t=c?.udid||l,n=c?.teamId||n}catch(s){o.stop(X.red("Failed to fetch devices")),Ge.error(s.response?.data?.message||s.message);return}}let r=await Bg({message:`Remove device ${X.dim(t.substring(0,12)+"...")}?`});if(Qn(r)||!r){er("Cancelled");return}let i=tr();i.start("Removing device...");try{await w.delete(`/devices/${encodeURIComponent(t)}`,n?{params:{teamId:n}}:void 0),i.stop(X.green("Device removed"))}catch(o){i.stop(X.red("Failed to remove device")),Ge.error(o.response?.data?.message||o.message)}nr(X.blue("---"))}async function ri(e,t){switch(e){case"register":await Vg(t);break;case"list":await zg(t);break;case"remove":await Kg(t);break;default:Ge.error(`Unknown action: ${e}`)}}import{log as ze,spinner as $c}from"@clack/prompts";import tt from"chalk";import or from"path";import Vt from"fs";import Hh from"os";import jh from"axios";var Ce=(o=>(o.CRITICAL="critical",o.HIGH="high",o.MEDIUM="medium",o.LOW="low",o.INFO="info",o))(Ce||{}),Me=(d=>(d.PROJECT="project",d.IMPACT="impact",d.PERMISSIONS="permissions",d.SECRETS="secrets",d.DEPENDENCIES="dependencies",d.STORAGE="storage",d.NETWORK="network",d.DEBUG="debug",d.MANIFEST="manifest",d.ATS="ats",d))(Me||{});import{spinner as hc,log as ir}from"@clack/prompts";import Ue from"chalk";import{execSync as Th}from"child_process";import Ac from"fs";import yc from"path";import ke from"fs";import At from"path";import{execSync as Yg}from"child_process";import Vd from"fs";import Wg from"path";var at=e=>{let t={},n=Wg.join(e,f.configFileName);if(Vd.existsSync(n))try{t=JSON.parse(Vd.readFileSync(n,"utf8"))}catch{}try{return{appRoot:Ie(e,t.appDirectory).appRoot,framework:de(t.framework)}}catch{return{appRoot:e,framework:de(t.framework)}}};var zd={"android.permission.READ_PHONE_STATE":{severity:"high",description:"Can read phone number, IMEI, carrier info"},"android.permission.CALL_PHONE":{severity:"high",description:"Can make calls without user interaction"},"android.permission.SEND_SMS":{severity:"high",description:"Can send SMS without user interaction"},"android.permission.READ_SMS":{severity:"high",description:"Can read user SMS messages"},"android.permission.READ_CONTACTS":{severity:"medium",description:"Can read user contacts"},"android.permission.WRITE_CONTACTS":{severity:"medium",description:"Can modify user contacts"},"android.permission.READ_CALL_LOG":{severity:"high",description:"Can read call history"},"android.permission.CAMERA":{severity:"medium",description:"Camera access"},"android.permission.RECORD_AUDIO":{severity:"medium",description:"Microphone access"},"android.permission.ACCESS_FINE_LOCATION":{severity:"medium",description:"Precise GPS location"},"android.permission.ACCESS_COARSE_LOCATION":{severity:"medium",description:"Approximate location"},"android.permission.ACCESS_BACKGROUND_LOCATION":{severity:"high",description:"Background location tracking"},"android.permission.READ_EXTERNAL_STORAGE":{severity:"medium",description:"Read files on device"},"android.permission.WRITE_EXTERNAL_STORAGE":{severity:"medium",description:"Write files on device"},"android.permission.READ_MEDIA_IMAGES":{severity:"low",description:"Read photos"},"android.permission.READ_MEDIA_VIDEO":{severity:"low",description:"Read videos"},"android.permission.SYSTEM_ALERT_WINDOW":{severity:"high",description:"Draw overlays on other apps"},"android.permission.REQUEST_INSTALL_PACKAGES":{severity:"high",description:"Can install APKs"}},Kd={NSCameraUsageDescription:{severity:"medium",description:"Camera access declared"},NSMicrophoneUsageDescription:{severity:"medium",description:"Microphone access declared"},NSLocationWhenInUseUsageDescription:{severity:"medium",description:"Location (in-use) declared"},NSLocationAlwaysUsageDescription:{severity:"high",description:"Background location declared"},NSContactsUsageDescription:{severity:"medium",description:"Contacts access declared"},NSCalendarsUsageDescription:{severity:"low",description:"Calendar access declared"},NSPhotoLibraryUsageDescription:{severity:"low",description:"Photo library access declared"}};function qg(e){try{if(ke.existsSync(At.join(e,"pubspec.yaml")))throw new Error("Flutter project");let n=Yg("npx expo config --type introspect --json 2>/dev/null",{cwd:e,encoding:"utf-8",timeout:3e4});return JSON.parse(n)}catch{}let t=At.join(e,"app.json");if(ke.existsSync(t))try{let n=JSON.parse(ke.readFileSync(t,"utf-8"));return n.expo||n}catch{}return null}var Jg=e=>{let t=At.join(e,"android","app","src","main","AndroidManifest.xml");if(!ke.existsSync(t))return[];let n=ke.readFileSync(t,"utf8");return Array.from(n.matchAll(/<uses-permission\s+[^>]*android:name="([^"]+)"/g)).map(r=>r[1])},Xg=e=>{let t=At.join(e,"ios"),n=new Set;if(!ke.existsSync(t))return n;let r=i=>{for(let o of ke.readdirSync(i,{withFileTypes:!0})){if(o.name==="Pods"||o.name==="build"||o.name.startsWith("."))continue;let s=At.join(i,o.name);if(o.isDirectory()&&r(s),o.isFile()&&o.name==="Info.plist"){let a=ke.readFileSync(s,"utf8");for(let l of Object.keys(Kd))a.includes(`<key>${l}</key>`)&&n.add(l)}}};return r(t),n};function Zg(e){let t=[],n=At.join(e,"node_modules");if(!ke.existsSync(n))return t;let r=/<uses-permission\s+android:name="([^"]+)"/g;function i(o,s){let a=At.join(o,"android","src","main","AndroidManifest.xml");if(!ke.existsSync(a))return;let l=ke.readFileSync(a,"utf-8"),c;for(;(c=r.exec(l))!==null;)t.push({pkg:s,permission:c[1]});r.lastIndex=0}for(let o of ke.readdirSync(n)){if(o.startsWith("."))continue;let s=At.join(n,o);if(o.startsWith("@")){if(!ke.statSync(s).isDirectory())continue;for(let a of ke.readdirSync(s))i(At.join(s,a),`${o}/${a}`)}else i(s,o)}return t}async function Wd(e,t){let n=[],r=1,{appRoot:i}=at(e),o=qg(i),s=Array.from(new Set([...o?.android?.permissions||[],...Jg(i)])),a=o?.android?.blockedPermissions||[];for(let u of s){let p=zd[u];p&&n.push({id:`PERM-${String(r++).padStart(3,"0")}`,title:`${u.split(".").pop()} declared`,description:p.description,severity:p.severity,category:"permissions",file:"app.config.ts",recommendation:"Remove from permissions if not needed, or add justification."})}let l=Zg(i);for(let{pkg:u,permission:p}of l){let m=zd[p];m&&(a.includes(p)||s.includes(p)||n.push({id:`PERM-${String(r++).padStart(3,"0")}`,title:`${p.split(".").pop()} injected by ${u}`,description:`${m.description}. Auto-injected via ${u} AndroidManifest.xml`,severity:m.severity,category:"permissions",file:`node_modules/${u}/android/src/main/AndroidManifest.xml`,recommendation:`Add "${p}" to blockedPermissions if not needed.`,autoFixable:!0}))}let c=o?.ios?.infoPlist||{},d=Xg(i);for(let[u,p]of Object.entries(Kd))(u in c||d.has(u))&&n.push({id:`PERM-${String(r++).padStart(3,"0")}`,title:`iOS: ${u} declared`,description:p.description,severity:p.severity,category:"permissions",file:"app.config.ts",recommendation:`Remove ${u} from infoPlist if the app does not use this capability.`});return{category:"permissions",label:"Permission Audit",findings:n,durationMs:0}}import Wo from"fs";import ii from"path";var Qg=[{id:"SEC-001",pattern:/(['"`])(?:sk|pk)_(?:live|test)_[a-zA-Z0-9]{20,}\1/g,severity:"critical",label:"Stripe API Key"},{id:"SEC-002",pattern:/(['"`])AIza[0-9A-Za-z\-_]{35}\1/g,severity:"high",label:"Google API Key"},{id:"SEC-003",pattern:/(['"`])AKIA[0-9A-Z]{16}\1/g,severity:"critical",label:"AWS Access Key ID"},{id:"SEC-004",pattern:/-----BEGIN (?:RSA |EC )?PRIVATE KEY-----/g,severity:"critical",label:"Private key in source"},{id:"SEC-005",pattern:/(?:ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9_]{36,}/g,severity:"high",label:"GitHub Token"},{id:"SEC-006",pattern:/xox[bpors]-[a-zA-Z0-9-]{10,}/g,severity:"high",label:"Slack Token"},{id:"SEC-007",pattern:/(?:password|secret|apikey|api_key)\s*[:=]\s*['"`][^'"`\n]{8,}['"`]/gi,severity:"high",label:"Hardcoded credential"}],eh=new Set([".ts",".tsx",".js",".jsx",".dart"]),th=new Set(["node_modules",".dart_tool",".expo",".git","android","ios","dist","build","__tests__","__mocks__"]);function Yd(e){let t=[],n=Wo.readdirSync(e,{withFileTypes:!0});for(let r of n){if(th.has(r.name))continue;let i=ii.join(e,r.name);r.isDirectory()?t.push(...Yd(i)):eh.has(ii.extname(r.name))&&t.push(i)}return t}function nh(e){let t=e.trim();return t.startsWith("//")||t.startsWith("*")||t.startsWith("/*")}function rh(e){return/process\.env\./i.test(e)||/import\.meta\.env/i.test(e)}async function qd(e,t){let n=[],r=ii.join(e,"src"),i=Wo.existsSync(r)?r:e,o=Yd(i);for(let s of o){let l=Wo.readFileSync(s,"utf-8").split(`
|
|
2410
|
+
`),c=ii.relative(e,s);for(let d=0;d<l.length;d++){let u=l[d];if(!nh(u)&&!rh(u))for(let{id:p,pattern:m,severity:A,label:g}of Qg)m.lastIndex=0,m.test(u)&&n.push({id:p,title:g,description:`Potential ${g.toLowerCase()} found in source code`,severity:A,category:"secrets",file:c,line:d+1,recommendation:`Move to environment variables or a secrets manager. Use \`${f.nameLower} env set\` for managed secrets.`})}}return{category:"secrets",label:"Secrets Detection",findings:n,durationMs:0}}import{execSync as ih,spawnSync as oh}from"child_process";import sh from"fs";import ah from"path";var lh={critical:"critical",high:"high",moderate:"medium",low:"low",info:"info"};async function Jd(e,t){let n=at(e).appRoot;if(sh.existsSync(ah.join(n,"pubspec.yaml")))return dh(n);let r=[],i=1,o;try{o=ih("npm audit --json 2>/dev/null",{cwd:e,encoding:"utf-8",timeout:6e4})}catch(l){if(o=l.stdout||"",!o)return{category:"dependencies",label:"Dependency CVEs",findings:[],durationMs:0,error:"Failed to run npm audit. Ensure npm is available and dependencies are installed."}}let s;try{s=JSON.parse(o)}catch{return{category:"dependencies",label:"Dependency CVEs",findings:[],durationMs:0,error:"Failed to parse npm audit output."}}let a=s.vulnerabilities||{};for(let[l,c]of Object.entries(a)){let d=lh[c.severity]||"info",u=Array.isArray(c.via)?c.via.map(p=>typeof p=="string"?p:p.title||p.name).join(", "):String(c.via);r.push({id:`DEP-${String(i++).padStart(3,"0")}`,title:`${l} \u2014 ${c.severity}`,description:`Via: ${u}. Range: ${c.range||"unknown"}`,severity:d,category:"dependencies",recommendation:c.fixAvailable?`Run \`npm audit fix\` or update ${l} to a patched version.`:"No fix available yet. Monitor for updates or evaluate alternatives.",autoFixable:!!c.fixAvailable})}return{category:"dependencies",label:"Dependency CVEs",findings:r,durationMs:0}}var Yo=e=>typeof e=="string"?e:e?.version;function dh(e){let t=[],n=1,r=oh("flutter",["pub","outdated","--json"],{cwd:e,encoding:"utf8",stdio:["ignore","pipe","pipe"],timeout:9e4});if(r.status!==0&&!r.stdout)return{category:"dependencies",label:"Flutter Dependencies",findings:t,durationMs:0,error:"Could not inspect Dart dependencies. Ensure the pinned Flutter/Dart SDK is available and run `flutter pub get`."};let i=`${r.stdout||""}
|
|
2411
|
+
${r.stderr||""}`,o=Array.from(new Set(i.match(/GHSA-[A-Za-z0-9-]+/g)||[]));for(let s of o)t.push({id:`DEP-${String(n++).padStart(3,"0")}`,title:`Dart package security advisory ${s}`,description:"The Dart dependency resolver reported that a resolved package is affected by a published security advisory.",severity:"high",category:"dependencies",recommendation:`Review https://github.com/advisories/${s}, assess exposure, and update to a non-affected compatible package version.`});try{let s=JSON.parse(r.stdout||"{}");for(let a of s.packages||[]){if(!["direct","dev"].includes(String(a.kind||"")))continue;let l=Yo(a.current),c=Yo(a.resolvable),d=Yo(a.latest);!l||!c&&!d||l===(c||d)||t.push({id:`DEP-${String(n++).padStart(3,"0")}`,title:`${a.package||a.name} has a newer compatible version`,description:`Current ${l}; resolvable ${c||"unknown"}; latest ${d||"unknown"}. This is dependency freshness information, not a security finding.`,severity:"low",category:"dependencies",recommendation:"Review the package changelog, update intentionally, and run the application test suite."})}}catch{return{category:"dependencies",label:"Flutter Dependencies",findings:t,durationMs:0,error:"Could not parse `dart pub outdated --json` output."}}return{category:"dependencies",label:"Flutter Dependencies",findings:t,durationMs:0}}import oi from"fs";import si from"path";var Xd=/(?:token|password|credential|secret|apiKey|api_key|session|auth|jwt|refresh_token|access_token|private_key|pin|otp)/i,Zd=/AsyncStorage\s*\.\s*(?:setItem|mergeItem)\s*\(\s*['"`]([^'"`]+)['"`]/g,ch=/from\s+['"]@react-native-async-storage\/async-storage['"]|from\s+['"]react-native['"].*AsyncStorage/,Qd=/(?:setString|setBool|setInt|setDouble|setStringList)\s*\(\s*['"]([^'"]+)['"]/g,uh=/package:shared_preferences\/shared_preferences\.dart/,ph=new Set([".ts",".tsx",".js",".jsx",".dart"]),fh=new Set(["node_modules",".dart_tool",".expo",".git","android","ios","dist","build"]);function ec(e){let t=[];if(!oi.existsSync(e))return t;let n=oi.readdirSync(e,{withFileTypes:!0});for(let r of n){if(fh.has(r.name))continue;let i=si.join(e,r.name);r.isDirectory()?t.push(...ec(i)):ph.has(si.extname(r.name))&&t.push(i)}return t}async function tc(e,t){let n=[],r=1,i=si.join(e,"src"),o=oi.existsSync(i)?i:e,s=ec(o);for(let a of s){let l=oi.readFileSync(a,"utf-8"),c=ch.test(l),d=uh.test(l);if(!c&&!d)continue;let u=l.split(`
|
|
2412
|
+
`),p=si.relative(e,a);for(let m=0;m<u.length;m++){let A=u[m];Zd.lastIndex=0;let g;for(;(g=Zd.exec(A))!==null;){let h=g[1];Xd.test(h)&&n.push({id:`STOR-${String(r++).padStart(3,"0")}`,title:`AsyncStorage used for "${h}"`,description:`Sensitive data key "${h}" stored in AsyncStorage (unencrypted).`,severity:"high",category:"storage",file:p,line:m+1,recommendation:"Use expo-secure-store (SecureStore) for sensitive data instead of AsyncStorage."})}if(d)for(Qd.lastIndex=0;(g=Qd.exec(A))!==null;){let h=g[1];Xd.test(h)&&n.push({id:`STOR-${String(r++).padStart(3,"0")}`,title:`SharedPreferences used for "${h}"`,description:`Sensitive data key "${h}" is stored in Flutter SharedPreferences, which is not encrypted secret storage.`,severity:"high",category:"storage",file:p,line:m+1,recommendation:"Store sensitive values with platform-backed secure storage and keep only non-sensitive preferences here."})}}}return{category:"storage",label:"Insecure Storage",findings:n,durationMs:0}}import ai from"fs";import li from"path";var nc=/['"`](http:\/\/(?!localhost|127\.0\.0\.1|10\.|192\.168\.|0\.0\.0\.0|172\.(?:1[6-9]|2\d|3[01])\.)[^'"`\s]+)['"`]/g,mh=/\/api\/|\/v[0-9]+\/|\/graphql|\/rest\//i,gh=new Set([".ts",".tsx",".js",".jsx",".dart"]),hh=new Set(["node_modules",".dart_tool",".expo",".git","android","ios","dist","build","__tests__","__mocks__"]);function rc(e){let t=[];if(!ai.existsSync(e))return t;let n=ai.readdirSync(e,{withFileTypes:!0});for(let r of n){if(hh.has(r.name))continue;let i=li.join(e,r.name);r.isDirectory()?t.push(...rc(i)):gh.has(li.extname(r.name))&&t.push(i)}return t}async function ic(e,t){let n=[],r=1,i=li.join(e,"src"),o=ai.existsSync(i)?i:e,s=rc(o);for(let a of s){let c=ai.readFileSync(a,"utf-8").split(`
|
|
2413
|
+
`),d=li.relative(e,a);for(let u=0;u<c.length;u++){let p=c[u],m=p.trim();if(m.startsWith("//")||m.startsWith("*"))continue;nc.lastIndex=0;let A;for(;(A=nc.exec(p))!==null;){let g=A[1],h=mh.test(g);n.push({id:`NET-${String(r++).padStart(3,"0")}`,title:`Insecure HTTP URL${h?" (API endpoint)":""}`,description:`Plain HTTP URL found: ${g}`,severity:h?"high":"medium",category:"network",file:d,line:u+1,recommendation:"Use HTTPS instead of HTTP for all network requests."})}}}return{category:"network",label:"HTTP URLs",findings:n,durationMs:0}}import di from"fs";import ci from"path";var oc=/(?:debug|debugMode|devMode|enableDebug)\s*[:=]\s*true/gi,sc=/console\.(?:log|warn|info|debug)\s*\([^)]*(?:token|password|secret|credential|key|auth)/gi,ac=/(?:debugPrint|print)\s*\([^)]*(?:token|password|secret|credential|key|auth)/gi,Ah=new Set([".ts",".tsx",".js",".jsx",".dart"]),yh=new Set(["node_modules",".dart_tool",".expo",".git","android","ios","dist","build","__tests__","__mocks__"]);function lc(e){let t=[];if(!di.existsSync(e))return t;let n=di.readdirSync(e,{withFileTypes:!0});for(let r of n){if(yh.has(r.name))continue;let i=ci.join(e,r.name);r.isDirectory()?t.push(...lc(i)):Ah.has(ci.extname(r.name))&&t.push(i)}return t}async function dc(e,t){let n=[],r=1,i=ci.join(e,"src"),o=di.existsSync(i)?i:e,s=lc(o);for(let a of s){let c=di.readFileSync(a,"utf-8").split(`
|
|
2414
|
+
`),d=ci.relative(e,a);for(let u=0;u<c.length;u++){let p=c[u],m=p.trim();if(!(m.startsWith("//")||m.startsWith("*"))&&(oc.lastIndex=0,oc.test(p)&&n.push({id:`DBG-${String(r++).padStart(3,"0")}`,title:"Hardcoded debug flag",description:"Debug/dev mode enabled in source code",severity:"medium",category:"debug",file:d,line:u+1,recommendation:"Use __DEV__ or environment variables instead of hardcoded debug flags."}),sc.lastIndex=0,ac.lastIndex=0,sc.test(p)||ac.test(p))){let A=c.slice(Math.max(0,u-3),u).join(`
|
|
2415
|
+
`);/__DEV__/.test(A)||n.push({id:`DBG-${String(r++).padStart(3,"0")}`,title:"Sensitive data in console log",description:"Console log may expose sensitive data (token, password, etc.) in production",severity:"medium",category:"debug",file:d,line:u+1,recommendation:"Wrap in __DEV__ check or remove sensitive data from console output."})}}}return{category:"debug",label:"Debug/Dev Flags",findings:n,durationMs:0}}import cc from"fs";import qo from"path";var bh=new Set(["androidx.work.impl.background.systemjob.SystemJobService","androidx.work.impl.diagnostics.DiagnosticsReceiver","com.google.firebase.iid.FirebaseInstanceIdReceiver","com.google.android.gms.auth.api.signin.RevocationBoundService","androidx.profileinstaller.ProfileInstallReceiver","com.google.firebase.messaging.FirebaseMessagingService","com.google.android.gms.measurement.AppMeasurementService","com.google.android.gms.measurement.AppMeasurementJobService"]);function Sh(e){let t=[qo.join(e,"android","app","src","main","AndroidManifest.xml"),qo.join(e,"android","AndroidManifest.xml")];for(let n of t)if(cc.existsSync(n))return n;return null}async function uc(e,t){let n=[],r=1,i=Sh(e);if(!i)return{category:"manifest",label:"Android Manifest",findings:[],durationMs:0,error:"No AndroidManifest.xml found in the configured app directory."};let o=cc.readFileSync(i,"utf-8"),s=qo.relative(e,i),a=/<(activity|activity-alias|service|receiver|provider)\s+([^>]*?)(?:\/>|>([\s\S]*?)<\/\1\s*>)/g,l;for(;(l=a.exec(o))!==null;){let c=l[1],d=l[2],u=l[3]||"",m=d.match(/android:name="([^"]+)"/)?.[1]||"unknown";if(bh.has(m))continue;let A=/android:exported="true"/.test(d),g=/android:permission="/.test(d),h=(c==="activity"||c==="activity-alias")&&/android:name="android\.intent\.action\.MAIN"/.test(u)&&/android:name="android\.intent\.category\.LAUNCHER"/.test(u);A&&!g&&!h&&n.push({id:`MAN-${String(r++).padStart(3,"0")}`,title:`Exported ${c}: ${m.split(".").pop()}`,description:`${m} is exported=true without android:permission protection`,severity:"medium",category:"manifest",file:s,recommendation:'Set android:exported="false" or add an android:permission attribute.'})}return/android:allowBackup="true"/.test(o)&&n.push({id:`MAN-${String(r++).padStart(3,"0")}`,title:"allowBackup is enabled",description:'android:allowBackup="true" allows data extraction via ADB backup',severity:"medium",category:"manifest",file:s,recommendation:'Set android:allowBackup="false" in native configuration (or via your framework build configuration).',autoFixable:!0}),/android:debuggable="true"/.test(o)&&n.push({id:`MAN-${String(r++).padStart(3,"0")}`,title:"App is debuggable",description:'android:debuggable="true" allows attaching a debugger in production',severity:"critical",category:"manifest",file:s,recommendation:"Ensure debuggable is false for production builds. This is usually set automatically for release builds."}),{category:"manifest",label:"Android Manifest",findings:n,durationMs:0}}import ui from"fs";import Jo from"path";function Eh(e){let t=Jo.join(e,"ios");if(!ui.existsSync(t))return null;let n=ui.readdirSync(t,{withFileTypes:!0});for(let r of n){if(!r.isDirectory()||r.name==="Pods"||r.name.startsWith("."))continue;let i=Jo.join(t,r.name,"Info.plist");if(ui.existsSync(i))return i}return null}async function pc(e,t){let n=[],r=1,i=Eh(e);if(!i)return{category:"ats",label:"iOS ATS Config",findings:[],durationMs:0,error:"No Info.plist found in the configured app directory."};let o=ui.readFileSync(i,"utf-8"),s=Jo.relative(e,i),a=o.match(/<key>NSAppTransportSecurity<\/key>\s*<dict>([\s\S]*?)<\/dict>/);if(a){let l=a[1];/<key>NSAllowsArbitraryLoads<\/key>\s*<true\s*\/>/.test(l)&&n.push({id:`ATS-${String(r++).padStart(3,"0")}`,title:"ATS disabled \u2014 NSAllowsArbitraryLoads",description:"App Transport Security is completely disabled. All HTTP connections are allowed.",severity:"critical",category:"ats",file:s,recommendation:"Remove NSAllowsArbitraryLoads or set to false. Use domain-specific exceptions only if absolutely necessary."});let c=l.match(/<key>NSExceptionDomains<\/key>\s*<dict>([\s\S]*?)<\/dict>/);if(c){let d=c[1].match(/<key>([^<]+)<\/key>/g);if(d)for(let u of d){let p=u.replace(/<\/?key>/g,"");p!=="NSExceptionDomains"&&n.push({id:`ATS-${String(r++).padStart(3,"0")}`,title:`ATS exception: ${p}`,description:`ATS exception configured for ${p}`,severity:"low",category:"ats",file:s,recommendation:`Verify that the ATS exception for ${p} is necessary. Use HTTPS where possible.`})}}}return{category:"ats",label:"iOS ATS Config",findings:n,durationMs:0}}import{spawnSync as pi}from"child_process";import Ve from"fs";import Fe from"path";var Ih=/^[A-Za-z][A-Za-z0-9_]*(?:\.[A-Za-z][A-Za-z0-9_]*)+$/,_h=/^[A-Za-z0-9][A-Za-z0-9-]*(?:\.[A-Za-z0-9][A-Za-z0-9-]*)+$/,vh=["package-lock.json","npm-shrinkwrap.json","yarn.lock","pnpm-lock.yaml","bun.lock","bun.lockb"],fc=e=>{if(!Ve.existsSync(e))return null;try{return JSON.parse(Ve.readFileSync(e,"utf-8"))}catch{return null}},fi=e=>{let t=String(e||"").match(/\d+/);if(!t)return;let n=Number(t[0]);return Number.isFinite(n)?n:void 0},mi=(e,t=420)=>{let n=e.split(/\r?\n/).map(r=>r.trim()).filter(Boolean).slice(-6).join(" ");return n.length>t?`${n.slice(0,t-1)}\u2026`:n};async function mc(e,t){let n=[],r=1,i=h=>{n.push({...h,id:`PROJECT-${String(r++).padStart(3,"0")}`,category:"project"})},o=Fe.join(e,f.configFileName),s=fc(o),a=de(s?.framework),l=s?at(e).appRoot:e,c=Fe.join(l,"package.json"),d=fc(c);if(!s)i({title:`${f.configFileName} is missing or invalid`,description:Ve.existsSync(o)?`${f.configFileName} could not be parsed as JSON.`:"Mach cannot validate build profiles, app identifiers, or OTA settings without its project configuration.",severity:Ve.existsSync(o)?"high":"medium",file:f.configFileName,recommendation:Ve.existsSync(o)?`Fix the JSON syntax in ${f.configFileName}, then rerun \`${f.nameLower} audit --category project\`.`:`Run \`${f.nameLower} init\` or \`${f.nameLower} link\` to create ${f.configFileName}.`});else{let h=de(s.framework);a=h;let y={...d?.dependencies||{},...d?.devDependencies||{}},b=cr(l)?"flutter":y.expo?"expo":y["react-native"]?"react-native":void 0;if(h?b&&h!==b&&h!=="flutter"&&i({title:"Configured framework does not match package.json",description:`Mach is configured for ${h}, but package.json looks like ${b}.`,severity:"high",file:f.configFileName,recommendation:`Update "framework" in ${f.configFileName}, or correct the project dependencies before building.`}):i({title:"Mach framework is missing or unsupported",description:`The framework must be one of expo, react-native, or flutter. Received ${String(s.framework||"nothing")}.`,severity:"high",file:f.configFileName,recommendation:`Set "framework" in ${f.configFileName} to the framework this project actually uses.`}),String(s.projectId||"").trim()||i({title:"Project is not linked to Mach",description:`${f.configFileName} does not contain a projectId.`,severity:"medium",file:f.configFileName,recommendation:`Run \`${f.nameLower} link\` and select the correct Mach project.`}),s.appDirectory){let H=Fe.resolve(e,s.appDirectory);Ve.existsSync(H)?!Ve.existsSync(Fe.join(H,"package.json"))&&!Ve.existsSync(Fe.join(H,"pubspec.yaml"))&&i({title:"Configured app directory has no application manifest",description:`${s.appDirectory} exists but has no package.json or pubspec.yaml.`,severity:"medium",file:f.configFileName,recommendation:"Point appDirectory to the workspace folder containing the application manifest."}):i({title:"Configured app directory does not exist",description:`Mach resolved appDirectory to ${H}, but that path is missing.`,severity:"high",file:f.configFileName,recommendation:"Correct appDirectory or restore the application folder."})}let v=String(s.android?.package||"").trim();v&&!Ih.test(v)&&i({title:"Android package name is invalid",description:`${v} is not a valid reverse-domain Android application ID.`,severity:"high",file:f.configFileName,recommendation:"Use a package name such as com.company.app and make it match the native project."});let E=String(s.ios?.bundleIdentifier||"").trim();E&&!_h.test(E)&&i({title:"iOS bundle identifier is invalid",description:`${E} is not a valid reverse-domain bundle identifier.`,severity:"high",file:f.configFileName,recommendation:"Use a bundle identifier such as com.company.app and make it match the Xcode target."});let L=Object.keys(s.build||{});if(!L.length)i({title:"No Mach build profiles are configured",description:"Development, staging, and production behavior cannot be validated consistently.",severity:"medium",file:f.configFileName,recommendation:"Add explicit build profiles for the environments your team ships."});else for(let H of L){let Z=String(s.build?.[H]?.extends||"").trim();if(Z&&!s.build?.[Z]){i({title:`Build profile ${H} extends a missing profile`,description:`${H} extends ${Z}, but ${Z} is not defined.`,severity:"high",file:f.configFileName,recommendation:`Add the ${Z} profile or update ${H}.extends.`});continue}try{let ie=ce(s,H);h==="flutter"&&Zt(l,H,ie)}catch(ie){i({title:`Build profile ${H} cannot be resolved`,description:ie.message||"The profile inheritance chain is invalid.",severity:"high",file:f.configFileName,recommendation:"Remove circular or missing profile inheritance and rerun the audit."})}}let F=h==="flutter"?void 0:fi(s.nodeVersion),B=fi(process.versions.node);F&&B&&F!==B&&i({title:"Local Node version differs from Mach builds",description:`This shell uses Node ${B}, while Mach is configured for Node ${F}.`,severity:"low",file:f.configFileName,recommendation:`Use Node ${F} locally when reproducing build failures, or update nodeVersion intentionally.`})}let u=vh.filter(h=>Ve.existsSync(Fe.join(e,h)));a==="flutter"?Ve.existsSync(Fe.join(l,"pubspec.lock"))||Ve.existsSync(Fe.join(e,"pubspec.lock"))||i({title:"Flutter application lockfile is missing",description:"A committed pubspec.lock is required for reproducible local and managed builds.",severity:"high",file:Fe.relative(e,Fe.join(l,"pubspec.lock"))||"pubspec.lock",recommendation:"Run `flutter pub get`, review pubspec.lock, and commit it for the application."}):u.length?a!=="flutter"&&u.length>1&&i({title:"Multiple package-manager lockfiles found",description:`Found ${u.join(", ")}. The selected package manager may differ between environments.`,severity:"medium",recommendation:"Keep only the lockfile for the package manager used by this project."}):i({title:"No package-manager lockfile found",description:"Cloud and local dependency resolution may produce different versions.",severity:"medium",recommendation:"Commit the lockfile created by the package manager used for Mach builds."});let p=a==="flutter"?void 0:fi(d?.engines?.node),m=fi(process.versions.node);p&&m&&/(?:>=|>|\^|~)/.test(String(d.engines.node))&&m<p&&i({title:"Current Node version is below package.json requirements",description:`package.json requires ${d.engines.node}, but this shell uses ${process.versions.node}.`,severity:"high",file:"package.json",recommendation:"Install a compatible Node release before running Mach commands."});let A=Fe.join(e,"node_modules",".bin",process.platform==="win32"?"expo.cmd":"expo");if(!!(d?.dependencies?.expo||d?.devDependencies?.expo)&&Ve.existsSync(A)){let h=pi(A,["install","--check"],{cwd:e,encoding:"utf-8",stdio:["ignore","pipe","pipe"],timeout:45e3,env:{...process.env,EXPO_NO_TELEMETRY:"1"}});if(h.status!==0){let y=mi(`${h.stdout||""}
|
|
2416
|
+
${h.stderr||""}`);i({title:"Expo dependencies need alignment",description:y||"Expo reported dependency versions that do not match the installed SDK.",severity:"medium",file:"package.json",recommendation:"Run `npx expo install --fix`, review the changes, and rerun the audit."})}}if(a==="flutter"){let h=pi("flutter",["--version","--machine"],{cwd:l,encoding:"utf8",stdio:["ignore","pipe","pipe"],timeout:3e4});if(h.status!==0)i({title:"Flutter SDK is unavailable",description:mi(`${h.stdout||""}
|
|
2417
|
+
${h.stderr||""}`)||"The flutter executable could not be run.",severity:"high",recommendation:"Install the project Flutter SDK, add it to PATH, and pin flutter.sdkVersion for managed builds."});else{try{let E=JSON.parse(h.stdout||"{}"),L=String(s?.flutter?.sdkVersion||"").trim();L&&E.frameworkVersion&&L!==E.frameworkVersion&&i({title:"Flutter SDK differs from Mach configuration",description:`This shell uses Flutter ${E.frameworkVersion}, while Mach is pinned to ${L}.`,severity:"medium",file:f.configFileName,recommendation:`Use Flutter ${L} locally or intentionally update flutter.sdkVersion after testing.`})}catch{}let b=pi("flutter",["doctor","-v"],{cwd:l,encoding:"utf8",stdio:["ignore","pipe","pipe"],timeout:9e4});b.status!==0&&i({title:"Flutter toolchain has unresolved requirements",description:mi(`${b.stdout||""}
|
|
2394
2418
|
${b.stderr||""}`),severity:"medium",recommendation:"Resolve the reported Flutter doctor issues for the platforms built by this project."});let v=pi("flutter",["analyze","--no-pub"],{cwd:l,encoding:"utf8",stdio:["ignore","pipe","pipe"],timeout:12e4});v.status!==0&&i({title:"Flutter static analysis did not pass",description:mi(`${v.stdout||""}
|
|
2395
|
-
${v.stderr||""}`),severity:"medium",recommendation:"Run `flutter analyze`, fix the reported issues, and rerun `mach audit`."})}Ye(l).sdkConstraint||i({title:"Dart SDK constraint is missing",description:"pubspec.yaml does not declare environment.sdk, so toolchain compatibility is ambiguous.",severity:"medium",file:Fe.relative(e,Fe.join(l,"pubspec.yaml")),recommendation:"Declare the supported Dart SDK range under environment.sdk in pubspec.yaml."})}return{category:"project",label:"Project Health",findings:n,durationMs:0}}import{execFileSync as
|
|
2396
|
-
Running expo prebuild for deeper analysis...`));try{
|
|
2397
|
-
Skipping manifest/plist checks \u2014 no android/ios dirs. Use --prebuild to generate them.`)),o;for(let u of i){let p=t.json?null:
|
|
2419
|
+
${v.stderr||""}`),severity:"medium",recommendation:"Run `flutter analyze`, fix the reported issues, and rerun `mach audit`."})}Ye(l).sdkConstraint||i({title:"Dart SDK constraint is missing",description:"pubspec.yaml does not declare environment.sdk, so toolchain compatibility is ambiguous.",severity:"medium",file:Fe.relative(e,Fe.join(l,"pubspec.yaml")),recommendation:"Declare the supported Dart SDK range under environment.sdk in pubspec.yaml."})}return{category:"project",label:"Project Health",findings:n,durationMs:0}}import{execFileSync as Rh}from"child_process";import $h from"path";var Qo=e=>e.trim().replace(/\\/g,"/"),Xo=(e,t)=>t.some(n=>n.test(e)),wh=[/(?:^|\/)AndroidManifest\.xml$/i,/(?:^|\/)Info\.plist$/i,/\.entitlements$/i,/PrivacyInfo\.xcprivacy$/i,/(?:^|\/)(?:app\.json|app\.config\.[cm]?[jt]s)$/i,/(?:^|\/)google-services\.json$/i,/(?:^|\/)GoogleService-Info\.plist$/i],Oh=[/^(?:ios|android|plugins|modules)\//i,/(?:^|\/)(?:Podfile|Podfile\.lock|Gemfile|gradle\.properties|settings\.gradle|build\.gradle)$/i,/\.(?:podspec|swift|m|mm|h|kt|java)$/i,/(?:^|\/)(?:package\.json|package-lock\.json|npm-shrinkwrap\.json|yarn\.lock|pnpm-lock\.yaml|bun\.lockb?)$/i,/(?:^|\/)(?:pubspec\.yaml|pubspec\.lock)$/i,/\.dart$/i,/(?:^|\/)mach\.config\.json$/i],Dh=[/\.(?:[cm]?[jt]sx?|css|scss|less|json|md|txt)$/i,/\.(?:png|jpe?g|gif|webp|svg|avif|mp3|wav|m4a|mp4|mov|ttf|otf|woff2?)$/i,/^(?:assets|src|app|components|hooks|lib|constants|context|locales|translations)\//i],Zo=e=>{let t=e.slice(0,8),n=e.length-t.length;return`${t.join(", ")}${n>0?` and ${n} more`:""}`};function Ph(e){let t=Array.from(new Set(e.map(Qo).filter(Boolean))).sort();if(!t.length)return{level:"none",title:"No changes to assess",description:"Mach did not find changed or untracked project files in the selected range.",recommendation:"Use `mach audit --since <git-ref>` to assess committed changes against a branch or tag.",matchedFiles:[]};let n=t.filter(o=>Xo(o,wh));if(n.length)return{level:"store-review",title:"Native rebuild and store review may be required",description:`App identity, permissions, privacy, or native metadata changed: ${Zo(n)}.`,recommendation:"Create new native builds, review permission/privacy declarations, and verify store metadata before submission.",matchedFiles:n};let r=t.filter(o=>Xo(o,Oh));if(r.length)return{level:"native",title:"Native rebuild required",description:`Native code, dependencies, or build configuration changed: ${Zo(r)}.`,recommendation:"Build new iOS and Android binaries for affected platforms; do not ship these changes only through OTA.",matchedFiles:r};let i=t.filter(o=>!Xo(o,Dh));return i.length?{level:"review",title:"Manual delivery review recommended",description:`Mach could not safely classify: ${Zo(i)}.`,recommendation:"Review whether these files alter native behavior. Use a native build when uncertain.",matchedFiles:i}:{level:"ota",title:"Changes look eligible for OTA",description:`Only JavaScript, TypeScript, content, or bundled assets changed across ${t.length} file${t.length===1?"":"s"}.`,recommendation:"An OTA release is appropriate if its runtime version matches the installed native builds. Run your normal tests before publishing.",matchedFiles:t}}var rr=(e,t)=>Rh("git",t,{cwd:e,encoding:"utf-8",stdio:["ignore","pipe","pipe"]}).split(/\r?\n/).map(Qo).filter(Boolean);async function gc(e,t){try{rr(e,["rev-parse","--show-toplevel"])}catch{return{category:"impact",label:"Delivery Impact",findings:[],durationMs:0,error:"This project is not inside a Git repository, so delivery impact could not be assessed."}}let n=String(t.since||"HEAD").trim(),r;try{rr(e,["rev-parse","--verify",`${n}^{commit}`]),r=rr(e,["diff","--name-only","--diff-filter=ACMR",n,"--"])}catch{return{category:"impact",label:"Delivery Impact",findings:[],durationMs:0,error:`Git reference ${n} could not be resolved.`}}if(!t.since)try{r.push(...rr(e,["ls-files","--others","--exclude-standard"]))}catch{}let i=rr(e,["rev-parse","--show-toplevel"])[0],o=Qo($h.relative(i,e));if(o){let c=`${o}/`;r=r.filter(d=>d.startsWith(c)).map(d=>d.slice(c.length))}let s=Ph(r),a=s.level==="store-review"||s.level==="native"?"medium":s.level==="review"?"low":"info",l={id:"IMPACT-001",title:s.title,description:s.description,severity:a,category:"impact",recommendation:s.recommendation};return{category:"impact",label:"Delivery Impact",findings:[l],durationMs:0}}var Ch=[{category:"project",label:"Project Health",fn:mc,requiresPrebuild:!1},{category:"impact",label:"Delivery Impact",fn:gc,requiresPrebuild:!1},{category:"permissions",label:"Permission Audit",fn:Wd,requiresPrebuild:!1},{category:"secrets",label:"Secrets Detection",fn:qd,requiresPrebuild:!1},{category:"dependencies",label:"Dependency CVEs",fn:Jd,requiresPrebuild:!1},{category:"storage",label:"Insecure Storage",fn:tc,requiresPrebuild:!1},{category:"network",label:"HTTP URLs",fn:ic,requiresPrebuild:!1},{category:"debug",label:"Debug/Dev Flags",fn:dc,requiresPrebuild:!1},{category:"manifest",label:"Android Manifest",fn:uc,requiresPrebuild:!0},{category:"ats",label:"iOS ATS Config",fn:pc,requiresPrebuild:!0}];async function bc(e,t){let n=Ch;t.category&&(n=n.filter(s=>s.category===t.category),n.length===0&&(ir.error(Ue.red(`Unknown category: ${t.category}`)),ir.info(Ue.dim(`Available: ${Object.values(Me).join(", ")}`)),process.exit(1)));let r=n.filter(s=>!s.requiresPrebuild),i=n.filter(s=>s.requiresPrebuild),o=[];for(let s of r){let a=t.json?null:hc();a?.start(Ue.dim(`Running ${s.label}...`));try{let l=Date.now(),c=await s.fn(e,t);c.durationMs=Date.now()-l,o.push(c);let d=c.findings.length;a?.stop(d>0?Ue.yellow(`${s.label} \u2014 ${d} finding(s)`):Ue.green(`${s.label} \u2014 clean`))}catch(l){a?.stop(Ue.red(`${s.label} \u2014 error`)),o.push({category:s.category,label:s.label,findings:[],durationMs:0,error:l.message})}}if(i.length>0){let{appRoot:s,framework:a}=at(e),l=yc.join(s,"android"),c=yc.join(s,"ios"),d=Ac.existsSync(l)||Ac.existsSync(c);if(!d&&t.prebuild&&a!=="flutter"){t.json||ir.info(Ue.dim(`
|
|
2420
|
+
Running expo prebuild for deeper analysis...`));try{Th("npx expo prebuild --no-install",{cwd:s,stdio:"pipe"})}catch{return ir.warn(Ue.yellow("Prebuild failed \u2014 skipping manifest/plist checks.")),o}}else if(!d)return t.json||ir.info(Ue.dim(`
|
|
2421
|
+
Skipping manifest/plist checks \u2014 no android/ios dirs. Use --prebuild to generate them.`)),o;for(let u of i){let p=t.json?null:hc();p?.start(Ue.dim(`Running ${u.label}...`));try{let m=Date.now(),A=await u.fn(s,t);A.durationMs=Date.now()-m,o.push(A);let g=A.findings.length;p?.stop(g>0?Ue.yellow(`${u.label} \u2014 ${g} finding(s)`):Ue.green(`${u.label} \u2014 clean`))}catch(m){p?.stop(Ue.red(`${u.label} \u2014 error`)),o.push({category:u.category,label:u.label,findings:[],durationMs:0,error:m.message})}}}return o}import Ee from"chalk";import{log as ge}from"@clack/prompts";var bn={critical:Ee.bgRed.white.bold,high:Ee.red.bold,medium:Ee.yellow.bold,low:Ee.blue,info:Ee.dim},gi={critical:0,high:1,medium:2,low:3,info:4};function kh(e,t){if(!t)return!0;let n=gi[t];return n===void 0?!0:gi[e]<=n}function Sc(e,t){let n=0,r={critical:0,high:0,medium:0,low:0,info:0};for(let s of e){let a=s.findings.filter(c=>kh(c.severity,t));if(a.length===0&&!s.error)continue;if(ge.info(""),ge.info(Ee.bold(` ${s.label}`)+Ee.dim(` ${a.length} finding(s)`)),ge.info(Ee.dim(" "+"\u2500".repeat(60))),s.error){ge.error(Ee.red(` Error: ${s.error}`));continue}let l=[...a].sort((c,d)=>gi[c.severity]-gi[d.severity]);for(let c of l){let d=bn[c.severity](` ${c.severity.toUpperCase()} `);ge.info(` ${d} ${Ee.bold(c.id)} ${c.title}`),ge.info(Ee.dim(` ${c.description}`)),c.file&&ge.info(Ee.dim(` File: ${c.file}${c.line?`:${c.line}`:""}`)),ge.info(Ee.cyan(` Fix: ${c.recommendation}`)),ge.info(""),r[c.severity]++,n++}}ge.info(""),ge.info(Ee.bold(" Summary")),ge.info(Ee.dim(" "+"\u2500".repeat(60))),ge.info(` Total: ${Ee.bold(String(n))} finding(s)`),ge.info(` ${bn.critical(` ${r.critical} Critical `)} ${bn.high(` ${r.high} High `)} ${bn.medium(` ${r.medium} Medium `)} ${bn.low(` ${r.low} Low `)} ${bn.info(` ${r.info} Info `)}`);let i=r.critical>0,o=r.high>0;i||o?(ge.info(""),ge.error(Ee.red.bold(` FAIL \u2014 ${r.critical} critical, ${r.high} high issue(s) found`))):n>0?(ge.info(""),ge.warn(Ee.yellow(" PASS (with warnings) \u2014 no critical or high issues"))):(ge.info(""),ge.success(Ee.green.bold(" PASS \u2014 no issues found")))}function Ec(e,t){let n=e.flatMap(i=>i.findings),r={};for(let i of Object.values(Ce))r[i]=n.filter(o=>o.severity===i).length;return{version:"1.0.0",timestamp:new Date().toISOString(),project:t.name||"unknown",projectVersion:t.version||"0.0.0",summary:{total:n.length,...r},passed:r.critical===0&&r.high===0,checks:e.map(i=>({category:i.category,label:i.label,findingCount:i.findings.length,durationMs:i.durationMs,error:i.error||null})),findings:n}}import{log as he,spinner as Nh}from"@clack/prompts";import le from"chalk";import yt from"fs";import xh from"os";import Sn from"path";import{execSync as Lh}from"child_process";var Ic=16384,Mh=1,Fh=Buffer.from([127,69,76,70]);async function _c(e){he.info(le.bold.underline("16KB Page Alignment Check")),console.log("");let t=Sn.resolve(e);if(!yt.existsSync(t))return he.error(le.red(`APK file not found: ${t}`)),!1;if(!t.endsWith(".apk"))return he.error(le.red("The provided file is not an APK file.")),!1;let n=Nh();n.start("Extracting and analyzing native libraries...");let r=yt.mkdtempSync(Sn.join(xh.tmpdir(),"mach-16kb-"));try{try{Lh(`unzip -o -q "${t}" "lib/arm64-v8a/*.so" "lib/x86_64/*.so" -d "${r}" 2>/dev/null`,{encoding:"utf-8",maxBuffer:50*1024*1024})}catch{}let i=vc(Sn.join(r,"lib"));if(i.length===0)return n.stop("Analysis complete."),he.info(le.yellow("No arm64-v8a or x86_64 native libraries found in the APK.")),he.info(le.dim("16KB alignment check only applies to arm64-v8a and x86_64 architectures.")),!0;let o=[];for(let l of i){let c=Sn.relative(r,l),d=Bh(c),u=Sn.basename(l),p=Uh(l);p!==null&&o.push({name:u,filePath:c,arch:d,align:p,compatible:p>=Ic})}if(n.stop("Analysis complete."),o.length===0)return he.info(le.yellow("No valid ELF shared libraries found.")),!0;let s=o.filter(l=>!l.compatible),a=o.filter(l=>l.compatible);if(he.info(le.dim(`Checked ${o.length} native librar${o.length===1?"y":"ies"}
|
|
2398
2422
|
`)),s.length>0){he.info(le.red.bold(`Incompatible libraries:
|
|
2399
|
-
`));for(let l of s)he.error(le.red(`${le.bold(l.name)} ${le.dim(`(${l.arch})`)}`)),he.info(le.dim(` PT_LOAD alignment: 2**${Math.log2(l.align)} (${l.align} bytes, needs 2**14 = ${Ec})`))}return a.length>0&&(console.log(""),he.success(le.green(`${a.length} librar${a.length===1?"y":"ies"} correctly aligned (2**14 or higher).`))),console.log(""),s.length===0?(he.success(le.green.bold("ELF Verification Successful. APK is 16KB compatible.")),!0):(he.error(le.red.bold(`Found ${s.length} unaligned lib${s.length===1?"":"s"} (arm64-v8a/x86_64 libs need to be aligned).`)),console.log(""),he.info(le.yellow("To fix this:")),he.info(le.dim(" 1. Rebuild with NDK r28+ which defaults to 16KB page alignment")),he.info(le.dim(" 2. Or set -DANDROID_SUPPORT_FLEXIBLE_PAGE_SIZES=ON in CMake")),he.info(le.dim(" 3. Update third-party libraries that ship prebuilt .so files")),he.info(le.dim(" 4. After rebuilding: zipalign -p -f -v 16 input.apk output.apk")),console.log(""),he.info(le.dim("Reference: https://developer.android.com/guide/practices/page-sizes")),!1)}catch(i){return n.stop("Analysis failed."),he.error(le.red(`Failed to analyze APK: ${i.message}`)),!1}finally{try{At.rmSync(r,{recursive:!0,force:!0})}catch{}}}function Mh(e){let t=At.openSync(e,"r");try{let n=Buffer.alloc(64);if(At.readSync(t,n,0,64,0),!n.subarray(0,4).equals(Lh))return null;let r=n[4]===2,i=n[5]===1,o=(p,m)=>i?p.readUInt16LE(m):p.readUInt16BE(m),s=(p,m)=>i?p.readUInt32LE(m):p.readUInt32BE(m),a=(p,m)=>Number(i?p.readBigUInt64LE(m):p.readBigUInt64BE(m)),l,c,d;r?(l=a(n,32),c=o(n,54),d=o(n,56)):(l=s(n,28),c=o(n,42),d=o(n,44));let u=null;for(let p=0;p<d;p++){let m=Buffer.alloc(c);if(At.readSync(t,m,0,c,l+p*c),s(m,0)!==xh)continue;let g;r?g=a(m,48):g=s(m,28),g>0&&(u===null||g<u)&&(u=g)}return u??0}catch{return null}finally{At.closeSync(t)}}function _c(e){let t=[];if(!At.existsSync(e))return t;let n=At.readdirSync(e,{withFileTypes:!0});for(let r of n){let i=Sn.join(e,r.name);r.isDirectory()?t.push(..._c(i)):r.name.endsWith(".so")&&t.push(i)}return t}function Fh(e){return e.includes("arm64-v8a")?"arm64-v8a":e.includes("x86_64")?"x86_64":"unknown"}var wc=async e=>{if(e.apk){await jh(e);return}let t=process.cwd(),n=st(t).appRoot,r=or.join(n,"package.json"),i=or.join(n,"pubspec.yaml");!Vt.existsSync(r)&&!Vt.existsSync(i)&&(ze.error(tt.red("No package.json or Flutter pubspec.yaml found. Run this command from a project root.")),process.exit(1));let o=Vt.existsSync(r)?JSON.parse(Vt.readFileSync(r,"utf-8")):Ye(n),s=cr(n),a=!s&&!!(o.dependencies?.expo||o.devDependencies?.expo);e.json||(ze.info(tt.dim(`Project: ${o.name||"unknown"} v${o.version||"0.0.0"}`)),ze.info(tt.dim(`Type: ${s?"Flutter":a?"Expo":"Bare React Native"}`)),ze.info(""));let l={json:e.json,fix:e.fix,category:e.category,severity:e.severity,prebuild:e.prebuild,since:e.since},c=await Ac(t,l);e.json?console.log(JSON.stringify(Sc(c,o),null,2)):bc(c,e.severity);let d=c.some(p=>p.findings.some(m=>m.severity==="critical")),u=c.some(p=>p.findings.some(m=>m.severity==="high"));(d||u)&&process.exit(1)},vc=["16kb"];async function jh(e){let t=e.category?.toLowerCase();t&&!vc.includes(t)&&(ze.error(tt.red(`Unknown APK check category: "${t}"`)),ze.info(tt.dim(`Available APK checks: ${vc.join(", ")}`)),process.exit(1));let n=await Hh(e.apk);n||process.exit(1);let r=!t,i=!1;(r||t==="16kb")&&(await Ic(n)||(i=!0)),i&&process.exit(1)}async function Hh(e){if(e.startsWith("build:")){let n=e.slice(6);return await Gh(n)}if(e.startsWith("http://")||e.startsWith("https://"))return await Rc(e);let t=or.resolve(e);return Vt.existsSync(t)?t:(ze.error(tt.red(`APK file not found: ${t}`)),null)}async function Gh(e){if(!De())return ze.error(tt.red(`A Mach build ID requires authentication. Run \`${f.nameLower} login\` first, or pass a local APK path.`)),null;let n=$c();n.start(`Fetching APK from build ${e}...`);try{let r=await R.get(`/build/${e}`);if(r.data.status!=="success")throw new Error(r.data.message);let i=r.data.build;if(!i)throw new Error("Build not found");let o=i.artifacts?.find(s=>s.type?s.type==="apk":s.name?.endsWith(".apk")||s.url?.includes(".apk"));return!o||!o.url?(n.stop("No APK artifact found"),ze.error(tt.red("This build does not have an APK artifact.")),ze.info(tt.dim("Make sure the build produced an APK (not just an AAB).")),null):(n.stop(`Found build: ${i.buildId||e}`),await Rc(o.url))}catch(r){return n.stop("Failed to fetch build"),ze.error(tt.red(r.message)),null}}async function Rc(e){let t=$c();t.start("Downloading APK...");try{let n=Vt.mkdtempSync(or.join(Uh.tmpdir(),`${f.nameLower}-audit-`)),r=or.join(n,"app.apk"),i=await Bh.get(e,{responseType:"arraybuffer"});Vt.writeFileSync(r,i.data);let o=(i.data.length/(1024*1024)).toFixed(1);return t.stop(`Downloaded APK (${o} MB)`),r}catch(n){return t.stop("Download failed"),ze.error(tt.red(`Failed to download APK: ${n.message}`)),null}}var Kh=console.log;console.log=()=>{};zh({quiet:!0});console.log=Kh;var Wh=process.argv.includes("--json");Wh||ne(Y.bgCyan.black(f.cliTag("Production Build Orchestrator")));var sr=(e,t=[])=>t.concat(e),U=new Vh;U.name(f.nameLower).description(`${f.name} CLI: Powerful Cloud Infrastructure Tools`).version(vt).option("-y, --yes","Automatically answer yes to all prompts",!1).option("--quiet","Suppress non-essential output",!1);U.command("agent").description("Manage local device discovery agent for the Install Hub (port 7070)").argument("[action]","start, run, install, status, restart, stop, or uninstall","start").action(async e=>{await bl(e)});U.command("host").description("Setup AWS S3 static hosting and CloudFront").action(async()=>{ne(Y.bgCyan.black(f.cliTag("Hosting"))),await Ds()});U.command("sitemap").description("Generate sitemap.xml from Expo Router app structure").option("-o, --output <path>","Output path for sitemap.xml","./public/sitemap.xml").action(async e=>{ne(Y.bgCyan.black(f.cliTag("Sitemap Generator"))),await ks(e)});U.command("build").description("Run a build on a cloud provider (AWS Spot Instances)").argument("[platform]","Target platform (android, ios, or Flutter web)").option("--platform <os>","Target platform alias (android, ios, web) [Optional]").option("--repo <url>","Git Repository URL").option("--branch <name>","Git Branch").option("--ami <id>","AMI ID").option("--bucket <name>","S3 Bucket for artifacts").option("--region <region>","AWS Region").option("--aws-profile <name>","AWS Credentials Profile").option("-p, --build-profile <name>","Any configured build profile name").option("--profile <name>","Build Profile (alias for --build-profile)").option("--dry-run","Generate User Data script without launching").option("--keep-instance","Do not terminate the instance after build").option("--subnet <id>","VPC Subnet ID to launch the instance in").option("--security-group <id>","VPC Security Group ID to use").option("--ssh-host <host>","Remote host for iOS build (SSH)").option("--ssh-user <user>","SSH username for remote host").option("--ssh-key <path>","Path to private SSH key for remote host").option("--ios-scheme <scheme>","iOS Scheme to build").option("--ios-team-id <id>","Apple Development Team ID").option("--ios-configuration <config>","Xcode configuration (Release/Debug)").option("--ios-export-method <method>","Export method (ad-hoc, app-store, development, enterprise)").option("--ios-api-key-id <id>","App Store Connect API Key ID").option("--ios-api-key-issuer <id>","App Store Connect API Key Issuer ID").option("--ios-api-key-path <path>","Path to App Store Connect API Key (.p8) file").option("--simulator","Build for iOS Simulator (no signing required)").addOption(new Ke("--build-id <id>","Internal build ID").hideHelp()).addOption(new Ke("--project-id <id>","Internal project ID").hideHelp()).addOption(new Ke("--fail-only","Internal: mark an existing build failed").hideHelp()).addOption(new Ke("--error <message>","Internal failure message").hideHelp()).option("--local","Run build on local machine").option("--auto-version","Assign the next Android versionCode or iOS buildNumber from Mach").option("--auto-submit","Submit this build after it completes successfully").option("--submit-track <track>","Google Play track to use with --auto-submit").option("--submit-release-status <status>","Google Play release status to use with --auto-submit").option("--submit-rollout <fraction>","Google Play staged rollout fraction to use with --auto-submit").option("--submit-changes-not-sent-for-review","Commit Google Play changes without automatically sending them for review when using --auto-submit").option("--submit-credential-id <id>","Service credential ID to use with --auto-submit").option("--submit-json-output <path>","Write auto-submit metadata JSON to a file for CI/CD").option("--verbose","Enable verbose logging").option("--json-output <path>","Write build metadata JSON to a file for CI/CD").option("--flutter-obfuscate","Obfuscate Flutter release Dart code and preserve split debug symbols").option("--flutter-split-debug-info","Preserve Flutter release split debug symbols without enabling obfuscation").option("--maestro","Queue a managed Maestro test run after a successful build").option("--maestro-flows <path>","Maestro flow file or directory (default: .maestro)").option("--maestro-device <device>","Managed device profile id (run `mach maestro devices` to list)").option("--maestro-retries <n>","Retries for the Maestro run","1").option("--maestro-record","Enable screen recording where supported").option("--maestro-use-build-source","Use Maestro flows from the build source snapshot instead of uploading local flows").option("--maestro-env <name>","Forward an environment variable to the managed Maestro runner; repeat or comma-separate names",sr,[]).option("-y, --yes","Automatically answer yes to all prompts",!1).option("--quiet","Suppress non-essential output",!1).action(async(e,t)=>{let n=U.opts();t.yes=t.yes||n.yes,t.quiet=t.quiet||n.quiet,t.platform=e||t.platform,t.buildProfile=t.profile||t.buildProfile,t.quiet||ne(Y.bgCyan.black(f.cliTag("Cloud Build"))),await Dr(t)});var Yh=U.command("maestro").description("Run Maestro tests locally or with the managed Mach runner").option("--platform <os>","Target platform (android/ios)").option("-p, --profile <name>","Build profile to resolve when using --latest").option("--latest","Use the latest successful build for the platform/profile").option("--build-id <id>","Use a specific Mach build ID").option("--build-url <url>","Use a Mach build URL").option("--artifact-url <url>","Use a direct APK or iOS simulator app artifact URL").option("--local","Run Maestro on a connected local emulator/device instead of the managed runner").option("--maestro-flows <path>","Maestro flow file or directory (default: .maestro)").option("--maestro-device <device>","Managed device profile id (run `mach maestro devices` to list); local runs accept a device identifier").option("--maestro-retries <n>","Retries for the Maestro run","1").option("--maestro-record","Enable screen recording where supported").option("--maestro-use-build-source","Use Maestro flows from the build source snapshot instead of uploading local flows").option("--maestro-env <name>","Forward an environment variable to the managed Maestro runner; repeat or comma-separate names",sr,[]).option("--wait","Wait for managed Maestro completion and exit non-zero on failure").option("--wait-timeout <minutes>","Maximum minutes to wait for managed Maestro completion","60").option("--wait-interval <seconds>","Polling interval while waiting for managed Maestro completion","15").option("--json-output <path>","Write test run metadata JSON to a file for CI/CD").addOption(new Ke("--local-runner","Internal: execute a managed Maestro run on this machine").hideHelp()).addOption(new Ke("--test-run-id <id>","Internal test run ID").hideHelp()).addOption(new Ke("--project-id <id>","Internal project ID").hideHelp()).addOption(new Ke("--runner-token <token>","Internal runner token").hideHelp()).action(async e=>{ne(Y.bgCyan.black(f.cliTag("Maestro Testing"))),await Zs(e)});Yh.command("devices").description("List device profiles available on the managed Maestro runner fleet").option("--platform <os>","Filter to android or ios").option("--json","Print machine-readable JSON").action(async e=>{await Qs(e)});var zt=e=>e.option("--platform <os>","Target platform: ios, android, or all","all").option("-p, --profile <name>","Flutter build profile used to resolve flavor, target, and Dart defines").option("--channel <name>","OTA channel (for example: production, staging)").option("--branch <name>","Alias for --channel").option("--runtime-version <version>","Runtime version override").option("--message <text>","Release note/message for this OTA update").option("--framework <name>","Framework override: expo, react-native, or flutter").option("--engine <name>","OTA engine override: expo-updates or shorebird").option("--url <url>","Mach OTA update URL override").option("--install-plugin","Install @radhya/mach locally for the Expo config plugin").option("--skip-install","Do not install local Expo plugin dependency").option("--update-id <id>","OTA update id for rollback/promote").option("--release-version <version>","Shorebird release version (defaults to latest for publish)").option("--patch-number <number>","Shorebird patch number for promote/rollback").option("--track <name>","Shorebird track: stable or staging").option("--json","Print JSON output"),Kt=U.command("ota").description("Setup, publish, verify, and manage Mach OTA updates");zt(Kt.command("setup").description("Configure OTA for this project")).action(async e=>{let t=U.opts();ne(Y.bgCyan.black(f.cliTag("OTA Setup"))),await mt("setup",{...e,yes:e.yes||t.yes})});zt(Kt.command("publish").description("Publish an OTA update")).action(async e=>{let t=U.opts();ne(Y.bgCyan.black(f.cliTag("OTA Publish"))),await mt("publish",{...e,yes:e.yes||t.yes})});zt(Kt.command("release").description("Create a Flutter Shorebird base release")).action(async e=>{let t=U.opts();ne(Y.bgCyan.black(f.cliTag("OTA Release"))),await mt("release",{...e,yes:e.yes||t.yes})});zt(Kt.command("verify").description("Verify OTA configuration")).action(async e=>{let t=U.opts();ne(Y.bgCyan.black(f.cliTag("OTA Verify"))),await mt("verify",{...e,yes:e.yes||t.yes})});zt(Kt.command("list").description("List OTA updates for the linked project")).action(async e=>{let t=U.opts();ne(Y.bgCyan.black(f.cliTag("OTA Updates"))),await mt("list",{...e,yes:e.yes||t.yes})});zt(Kt.command("rollback").description("Roll back an OTA update")).action(async e=>{let t=U.opts();ne(Y.bgCyan.black(f.cliTag("OTA Rollback"))),await mt("rollback",{...e,yes:e.yes||t.yes})});zt(Kt.command("promote").description("Promote an OTA update")).action(async e=>{let t=U.opts();ne(Y.bgCyan.black(f.cliTag("OTA Promote"))),await mt("promote",{...e,yes:e.yes||t.yes})});U.command("submit").description("Automated Store Submission (App Store / Google Play)").option("--platform <os>","Target platform (ios/android)").option("-p, --profile <name>","Build/submission profile to submit from (e.g. production, preprod)").option("--track <track>","Google Play Track (internal, alpha, beta, production)").option("--release-status <status>","Google Play release status (completed, draft, halted, inProgress)").option("--rollout <fraction>","Google Play staged rollout fraction for inProgress releases (example: 0.1)").option("--changes-not-sent-for-review","Commit Google Play changes without automatically sending them for review").option("--ssh-host <host>","Remote macOS host for iOS submission").option("--ssh-user <user>","SSH username for remote iOS submission").option("--ssh-key <path>","Path to private SSH key for remote iOS submission").option("--credential-id <id>","Service credential ID to use when multiple submission credentials exist").option("--local","Run submission on this machine (internal runner mode for iOS)").addOption(new Ke("--submit-id <id>","Internal submission ID").hideHelp()).addOption(new Ke("--project-id <id>","Internal project ID").hideHelp()).addOption(new Ke("--package-name <name>","Internal Android package name").hideHelp()).addOption(new Ke("--bundle-id <id>","Internal iOS bundle identifier").hideHelp()).option("--json-output <path>","Write submission metadata JSON to a file for CI/CD").option("--latest","Use the latest successful build for submission").option("--build-id <id>","Use a specific build ID for submission").action(async e=>{let t=U.opts();e.quiet=e.quiet||t.quiet,e.yes=e.yes||t.yes,ne(Y.bgCyan.black(f.cliTag("Store Submission"))),await Ir(e)});U.command("login").description(`Login to ${f.name} Dashboard`).action(async()=>{ne(Y.bgCyan.black(f.cliTag("Login"))),await _l()});U.command("logout").description(`Logout from ${f.name} on this machine`).action(async()=>{ne(Y.bgCyan.black(f.cliTag("Logout"))),await vl()});U.command("link").description(`Link local directory to a ${f.name} Project`).action(async()=>{ne(Y.bgCyan.black(f.cliTag("Link Project"))),await wl()});U.command("me").description("Display currently logged in user details").action(async()=>{await sd()});U.command("init").description(`Create a new ${f.name} Project`).action(async()=>{ne(Y.bgCyan.black(f.cliTag("Init Project"))),await Rl()});U.command("env").description("Manage Environment Variables").argument("<action>","Action to perform: set, list, pull, download, or export").argument("[args...]","Key=Value pairs for set action").option("-e, --environment <name>","Environment to pull/download","development").option("-o, --out <file>","Output file for pull/download",".env.local").option("--overwrite","Overwrite output file if it already exists").action(async(e,t,n)=>{ne(Y.bgCyan.black(f.cliTag("Env Manager"))),await Dl(e,t,n)});U.command("start").description("Start the app with its configured Flutter or JavaScript toolchain").option("-p, --build-profile <name>","Any configured build profile name").option("--tunnel","Use ngrok tunnel").option("--lan","Use LAN IP").option("--localhost","Use localhost").option("-c, --clear","Clear Metro cache").option("--port <number>","Port to listen on").option("--ios","Start on iOS").option("--android","Start on Android").option("--web","Start on Web").action(async e=>{ne(Y.bgCyan.black(f.cliTag("Dev Server"))),await cd(e)});var ar=U.command("push").description("Configure and send provider-direct APNs/FCM notifications");ar.command("setup").description("Install and wire a working default push experience").option("-p, --profile <name>","Build profile used to resolve app identity and Flutter entrypoint").option("--name <name>","Push app display name").option("--ios-bundle <id>","iOS bundle identifier").option("--android-package <name>","Android package name").option("-e, --environment <name>","development, preview, or production").option("--google-services-file <path>","Android google-services.json path").option("--skip-install","Generate setup without installing SDK dependencies").action(_s);ar.command("init").description("Create only the server-side push app (advanced)").option("-p, --profile <name>","Build profile used to resolve app identity").option("--name <name>","Push app display name").option("--ios-bundle <id>","iOS bundle identifier").option("--android-package <name>","Android package name").option("-e, --environment <name>","development, preview, or production","production").option("--google-services-file <path>","Expo Android google-services.json path").action(Is);var Dc=ar.command("credentials").description("Configure provider credentials");Dc.command("apns").description("Configure an Apple APNs .p8 authentication key").requiredOption("--file <path>","APNs .p8 file").requiredOption("--team-id <id>","Apple Developer team ID").requiredOption("--key-id <id>","APNs key ID").option("--bundle-id <id>","iOS bundle identifier").option("--app <id>","MACH Push app ID").option("-e, --environment <name>","development, preview, or production").action(e=>Ei("apns",e));Dc.command("fcm").description("Configure a Firebase service-account JSON file").requiredOption("--file <path>","Firebase service-account JSON").option("--app <id>","MACH Push app ID").option("-e, --environment <name>","Deprecated; accepted for compatibility because FCM credentials are package-wide").action(e=>Ei("fcm",e));ar.command("send").description("Queue one transient push notification").requiredOption("--title <text>","Notification title").requiredOption("--body <text>","Notification body").option("--app <id>","MACH Push app ID").option("-e, --environment <name>","development, preview, or production").option("--token <token>","MACH push token; repeatable",sr,[]).option("--user <id>","Application user ID; repeatable",sr,[]).option("--all","Send to all active devices").option("--platform <platform>","Limit --all to ios or android").option("--data <json>","String-to-string custom data JSON").option("--sound <name>","Provider sound name").option("--badge <number>","iOS badge count").option("--ttl <seconds>","Provider time-to-live").option("--collapse-key <key>","Provider collapse key").option("--android-channel-id <id>","Android notification channel").action(vs);ar.command("status").description("Show aggregate push delivery counters").option("--days <number>","Statistics range, 1-90","30").action($s);U.command("config").description("Show resolved configuration for a profile").option("-p, --profile <name>","Build profile to resolve").option("--json","Output as JSON").action(async e=>{await ud(e)});var Pc=U.command("version").description("Show or seed DB-owned native version counters"),Tc=e=>e.requiredOption("--platform <os>","Target platform: ios or android").option("-p, --profile <name>","Build profile used to resolve package/bundle scope").option("--scope <value>","Counter scope override, usually package name or bundle identifier").option("--package <name>","Android package override").option("--bundle-id <id>","iOS bundle identifier override").option("--json","Print JSON output");Tc(Pc.command("show").description("Show the current native version counter")).action(async e=>{ne(Y.bgCyan.black(f.cliTag("Version Counter"))),await Ko("show",e)});Tc(Pc.command("seed").description("Seed the native version counter for an existing app").argument("[value]","Latest already-used value; the next build uses value + 1").option("--value <number>","Latest already-used value; the next build uses value + 1").option("--force","Allow lowering an existing counter")).action(async(e,t)=>{ne(Y.bgCyan.black(f.cliTag("Version Counter"))),await Ko("seed",{...t,value:t.value??e})});var Cc=U.command("deeplink").description("Configure and verify app links, universal links, and URI schemes");Cc.command("setup").description("Generate deep link config, hosted association files, and Expo plugin support").option("--domain <domain>","Associated domain, e.g. app.example.com").option("--base-url <url>","Base URL, e.g. https://app.example.com").option("-p, --profile <name>","Profile used for build/submit overrides").option("--platform <platform>","ios, android, or all").option("--framework <framework>","expo, react-native, or flutter").option("--scheme <scheme>","URI scheme, e.g. myapp").option("--ios-bundle-id <id>","iOS bundle identifier").option("--android-package <name>","Android package name").option("--apple-team-id <id>","Apple Developer Team ID").option("--app-store-id <id>","App Store app ID for Smart App Banner").option("--android-fingerprint <sha256>","Android SHA256 signing certificate fingerprint; repeatable",sr,[]).option("--output <dir>","Directory for hosted files, e.g. public or deep-links").option("--install-plugin","Install @radhya/mach locally so Expo can use the packaged config plugin").option("--no-install-plugin","Do not install @radhya/mach for Expo projects; use the local plugin fallback if the package is missing").option("-y, --yes","Automatically answer yes to prompts",!1).action(async e=>{let t=U.opts();e.yes=e.yes||t.yes,ne(Y.bgCyan.black(f.cliTag("Deep Links"))),await Ld(e)});Cc.command("verify").description("Verify local and optionally live deep link configuration").option("-p, --profile <name>","Profile used for build/submit overrides").option("--live","Check hosted files over HTTPS").option("--android-device","Print Android device verification commands").action(async e=>{ne(Y.bgCyan.black(f.cliTag("Deep Link Verify"))),await Md(e)});U.command("credentials").description("Unified, interactive credential management (iOS/Android)").option("-p, --profile <name>","Any configured build profile name").option("--credential-type <type>","iOS signing type override: development, adhoc, or store").option("--force","Force recreate certificates (nuke existing on Apple Portal)",!1).action(async e=>{let{credentialsMainCommand:t}=await import("./credentials-BSXCVQX5.js");await t(e)});U.command("credentials:setup").description("Automated credential provisioning (iOS/Android) [Legacy]").requiredOption("--platform <os>","Platform: ios or android").option("--profile <name>","Any configured build profile name").option("--credential-type <type>","iOS signing type override: development, adhoc, or store").option("--bundle-id <id>","Bundle ID / Package Name (optional, auto-detected)").option("--team-id <id>","Apple Team ID (iOS only)").option("--key-alias <alias>","Android keystore alias (optional, auto-generated)").option("--aws-profile <name>","AWS Credentials Profile (for S3 storage)").option("--force","Force recreate certificates (nuke existing on Apple Portal)",!1).action(async e=>{ne(Y.bgCyan.black(f.cliTag("Credentials Setup"))),await vn(e),Oc(Y.green("Done!"))});U.command("credentials:service").description("Upload Service Credentials (ASC API Key / Google Service JSON) [Legacy]").requiredOption("--platform <os>","Platform: ios or android").option("--file <path>","Path to credential file (.p8 or .json)").option("--issuer-id <id>","ASC API Key Issuer ID (iOS only)").option("--key-id <id>","ASC API Key ID (iOS only)").option("--bundle-id <id>","Bundle identifier / Android package name to attach this service credential to").option("--package-name <name>","Android package name to attach this service credential to").option("-p, --profile <name>","Build profile to resolve package/bundle identifier from config").action(async e=>{ne(Y.bgCyan.black(f.cliTag("Service Credentials"))),await Es(e),Oc(Y.green("Done!"))});var es=U.command("device").description("Manage registered iOS test devices");es.command("register").description("Register a connected iOS device or enter UDID manually").option("--udid <udid>","Device UDID (skip auto-detection)").option("--name <name>","Device name").option("--team-id <id>","Apple Developer Team ID for this device").action(async e=>{await ri("register",e)});es.command("list").description("List all registered devices").option("--team-id <id>","Filter by Apple Developer Team ID").action(async e=>{await ri("list",e)});es.command("remove").description("Remove a registered device").option("--udid <udid>","Device UDID to remove").option("--team-id <id>","Apple Developer Team ID for this device").action(async e=>{await ri("remove",e)});U.command("audit").description("Run project health, delivery impact, and security checks").option("--apk <path>","Path to APK file (runs APK diagnostics like 16KB alignment)").option("--json","Output results as JSON (for CI/CD)").option("--fix","Auto-apply fixes where possible").option("--category <name>","Run one category (e.g. project, impact, permissions, secrets)").option("--severity <level>","Minimum severity to display (critical, high, medium, low, info)").option("--prebuild","Run expo prebuild for deeper manifest/plist analysis").option("--since <git-ref>","Assess delivery impact from a branch, tag, or commit").action(async e=>{e.json||ne(Y.bgCyan.black(f.cliTag(e.apk?"APK Audit":"Project Audit"))),await wc(e)});var qh=new Set(["login","logout","agent"]),Jh=new Set(["build","credentials","credentials:service","credentials:setup","env","push","submit","version"]),Xh=new Set(["publish","list","rollback","promote"]);function Zh(e){let t=[],n=e;for(;n&&n!==U;)t.unshift(n.name()),n=n.parent;return t}function Qh(e,t){let[n,r]=Zh(e);return Jh.has(n)?!0:n==="ota"?Xh.has(r):n==="maestro"?r!=="devices"&&!t.local&&!t.localRunner:!1}U.hook("preAction",async(e,t)=>{let n=t.name(),r=t.opts?.()||{};if(n==="maestro"&&(r.local||r.localRunner)||t.parent?.name()==="deeplink"||qh.has(n)||(Wt(),!Qh(t,r)))return;let i=ws(r,re());if(!i)throw new lt(`No linked ${f.name} project was found. Run \`${f.nameLower} link\` before using this command.`);await Rs(i)});U.on("command:*",()=>{console.error(`Invalid command: %s
|
|
2423
|
+
`));for(let l of s)he.error(le.red(`${le.bold(l.name)} ${le.dim(`(${l.arch})`)}`)),he.info(le.dim(` PT_LOAD alignment: 2**${Math.log2(l.align)} (${l.align} bytes, needs 2**14 = ${Ic})`))}return a.length>0&&(console.log(""),he.success(le.green(`${a.length} librar${a.length===1?"y":"ies"} correctly aligned (2**14 or higher).`))),console.log(""),s.length===0?(he.success(le.green.bold("ELF Verification Successful. APK is 16KB compatible.")),!0):(he.error(le.red.bold(`Found ${s.length} unaligned lib${s.length===1?"":"s"} (arm64-v8a/x86_64 libs need to be aligned).`)),console.log(""),he.info(le.yellow("To fix this:")),he.info(le.dim(" 1. Rebuild with NDK r28+ which defaults to 16KB page alignment")),he.info(le.dim(" 2. Or set -DANDROID_SUPPORT_FLEXIBLE_PAGE_SIZES=ON in CMake")),he.info(le.dim(" 3. Update third-party libraries that ship prebuilt .so files")),he.info(le.dim(" 4. After rebuilding: zipalign -p -f -v 16 input.apk output.apk")),console.log(""),he.info(le.dim("Reference: https://developer.android.com/guide/practices/page-sizes")),!1)}catch(i){return n.stop("Analysis failed."),he.error(le.red(`Failed to analyze APK: ${i.message}`)),!1}finally{try{yt.rmSync(r,{recursive:!0,force:!0})}catch{}}}function Uh(e){let t=yt.openSync(e,"r");try{let n=Buffer.alloc(64);if(yt.readSync(t,n,0,64,0),!n.subarray(0,4).equals(Fh))return null;let r=n[4]===2,i=n[5]===1,o=(p,m)=>i?p.readUInt16LE(m):p.readUInt16BE(m),s=(p,m)=>i?p.readUInt32LE(m):p.readUInt32BE(m),a=(p,m)=>Number(i?p.readBigUInt64LE(m):p.readBigUInt64BE(m)),l,c,d;r?(l=a(n,32),c=o(n,54),d=o(n,56)):(l=s(n,28),c=o(n,42),d=o(n,44));let u=null;for(let p=0;p<d;p++){let m=Buffer.alloc(c);if(yt.readSync(t,m,0,c,l+p*c),s(m,0)!==Mh)continue;let g;r?g=a(m,48):g=s(m,28),g>0&&(u===null||g<u)&&(u=g)}return u??0}catch{return null}finally{yt.closeSync(t)}}function vc(e){let t=[];if(!yt.existsSync(e))return t;let n=yt.readdirSync(e,{withFileTypes:!0});for(let r of n){let i=Sn.join(e,r.name);r.isDirectory()?t.push(...vc(i)):r.name.endsWith(".so")&&t.push(i)}return t}function Bh(e){return e.includes("arm64-v8a")?"arm64-v8a":e.includes("x86_64")?"x86_64":"unknown"}var wc=async e=>{if(e.apk){await Gh(e);return}let t=process.cwd(),n=at(t).appRoot,r=or.join(n,"package.json"),i=or.join(n,"pubspec.yaml");!Vt.existsSync(r)&&!Vt.existsSync(i)&&(ze.error(tt.red("No package.json or Flutter pubspec.yaml found. Run this command from a project root.")),process.exit(1));let o=Vt.existsSync(r)?JSON.parse(Vt.readFileSync(r,"utf-8")):Ye(n),s=cr(n),a=!s&&!!(o.dependencies?.expo||o.devDependencies?.expo);e.json||(ze.info(tt.dim(`Project: ${o.name||"unknown"} v${o.version||"0.0.0"}`)),ze.info(tt.dim(`Type: ${s?"Flutter":a?"Expo":"Bare React Native"}`)),ze.info(""));let l={json:e.json,fix:e.fix,category:e.category,severity:e.severity,prebuild:e.prebuild,since:e.since},c=await bc(t,l);e.json?console.log(JSON.stringify(Ec(c,o),null,2)):Sc(c,e.severity);let d=c.some(p=>p.findings.some(m=>m.severity==="critical")),u=c.some(p=>p.findings.some(m=>m.severity==="high"));(d||u)&&process.exit(1)},Rc=["16kb"];async function Gh(e){let t=e.category?.toLowerCase();t&&!Rc.includes(t)&&(ze.error(tt.red(`Unknown APK check category: "${t}"`)),ze.info(tt.dim(`Available APK checks: ${Rc.join(", ")}`)),process.exit(1));let n=await Vh(e.apk);n||process.exit(1);let r=!t,i=!1;(r||t==="16kb")&&(await _c(n)||(i=!0)),i&&process.exit(1)}async function Vh(e){if(e.startsWith("build:")){let n=e.slice(6);return await zh(n)}if(e.startsWith("http://")||e.startsWith("https://"))return await Oc(e);let t=or.resolve(e);return Vt.existsSync(t)?t:(ze.error(tt.red(`APK file not found: ${t}`)),null)}async function zh(e){if(!Oe())return ze.error(tt.red(`A Mach build ID requires authentication. Run \`${f.nameLower} login\` first, or pass a local APK path.`)),null;let n=$c();n.start(`Fetching APK from build ${e}...`);try{let r=await w.get(`/build/${e}`);if(r.data.status!=="success")throw new Error(r.data.message);let i=r.data.build;if(!i)throw new Error("Build not found");let o=i.artifacts?.find(s=>s.type?s.type==="apk":s.name?.endsWith(".apk")||s.url?.includes(".apk"));return!o||!o.url?(n.stop("No APK artifact found"),ze.error(tt.red("This build does not have an APK artifact.")),ze.info(tt.dim("Make sure the build produced an APK (not just an AAB).")),null):(n.stop(`Found build: ${i.buildId||e}`),await Oc(o.url))}catch(r){return n.stop("Failed to fetch build"),ze.error(tt.red(r.message)),null}}async function Oc(e){let t=$c();t.start("Downloading APK...");try{let n=Vt.mkdtempSync(or.join(Hh.tmpdir(),`${f.nameLower}-audit-`)),r=or.join(n,"app.apk"),i=await jh.get(e,{responseType:"arraybuffer"});Vt.writeFileSync(r,i.data);let o=(i.data.length/(1024*1024)).toFixed(1);return t.stop(`Downloaded APK (${o} MB)`),r}catch(n){return t.stop("Download failed"),ze.error(tt.red(`Failed to download APK: ${n.message}`)),null}}var Yh=console.log;console.log=()=>{};Wh({quiet:!0});console.log=Yh;var qh=process.argv.includes("--json");qh||te(Y.bgCyan.black(f.cliTag("Production Build Orchestrator")));var sr=(e,t=[])=>t.concat(e),U=new Kh;U.name(f.nameLower).description(`${f.name} CLI: Powerful Cloud Infrastructure Tools`).version(vt).option("-y, --yes","Automatically answer yes to all prompts",!1).option("--quiet","Suppress non-essential output",!1);U.command("agent").description("Manage local device discovery agent for the Install Hub (port 7070)").argument("[action]","start, run, install, status, restart, stop, or uninstall","start").action(async e=>{await Sl(e)});U.command("host").description("Setup AWS S3 static hosting and CloudFront").action(async()=>{te(Y.bgCyan.black(f.cliTag("Hosting"))),await Ps()});U.command("sitemap").description("Generate sitemap.xml from Expo Router app structure").option("-o, --output <path>","Output path for sitemap.xml","./public/sitemap.xml").action(async e=>{te(Y.bgCyan.black(f.cliTag("Sitemap Generator"))),await Ns(e)});U.command("build").description("Run a build on a cloud provider (AWS Spot Instances)").argument("[platform]","Target platform (android, ios, or Flutter web)").option("--platform <os>","Target platform alias (android, ios, web) [Optional]").option("--repo <url>","Git Repository URL").option("--branch <name>","Git Branch").option("--ami <id>","AMI ID").option("--bucket <name>","S3 Bucket for artifacts").option("--region <region>","AWS Region").option("--aws-profile <name>","AWS Credentials Profile").option("-p, --build-profile <name>","Any configured build profile name").option("--profile <name>","Build Profile (alias for --build-profile)").option("--dry-run","Generate User Data script without launching").option("--keep-instance","Do not terminate the instance after build").option("--subnet <id>","VPC Subnet ID to launch the instance in").option("--security-group <id>","VPC Security Group ID to use").option("--ssh-host <host>","Remote host for iOS build (SSH)").option("--ssh-user <user>","SSH username for remote host").option("--ssh-key <path>","Path to private SSH key for remote host").option("--ios-scheme <scheme>","iOS Scheme to build").option("--ios-team-id <id>","Apple Development Team ID").option("--ios-configuration <config>","Xcode configuration (Release/Debug)").option("--ios-export-method <method>","Export method (ad-hoc, app-store, development, enterprise)").option("--ios-api-key-id <id>","App Store Connect API Key ID").option("--ios-api-key-issuer <id>","App Store Connect API Key Issuer ID").option("--ios-api-key-path <path>","Path to App Store Connect API Key (.p8) file").option("--simulator","Build for iOS Simulator (no signing required)").addOption(new Ke("--build-id <id>","Internal build ID").hideHelp()).addOption(new Ke("--project-id <id>","Internal project ID").hideHelp()).addOption(new Ke("--fail-only","Internal: mark an existing build failed").hideHelp()).addOption(new Ke("--error <message>","Internal failure message").hideHelp()).option("--local","Run build on local machine").option("--auto-version","Assign the next Android versionCode or iOS buildNumber from Mach").option("--auto-submit","Submit this build after it completes successfully").option("--submit-track <track>","Google Play track to use with --auto-submit").option("--submit-release-status <status>","Google Play release status to use with --auto-submit").option("--submit-rollout <fraction>","Google Play staged rollout fraction to use with --auto-submit").option("--submit-changes-not-sent-for-review","Commit Google Play changes without automatically sending them for review when using --auto-submit").option("--submit-credential-id <id>","Service credential ID to use with --auto-submit").option("--submit-json-output <path>","Write auto-submit metadata JSON to a file for CI/CD").option("--verbose","Enable verbose logging").option("--json-output <path>","Write build metadata JSON to a file for CI/CD").option("--flutter-obfuscate","Obfuscate Flutter release Dart code and preserve split debug symbols").option("--flutter-split-debug-info","Preserve Flutter release split debug symbols without enabling obfuscation").option("--maestro","Queue a managed Maestro test run after a successful build").option("--maestro-flows <path>","Maestro flow file or directory (default: .maestro)").option("--maestro-device <device>","Managed device profile id (run `mach maestro devices` to list)").option("--maestro-retries <n>","Retries for the Maestro run","1").option("--maestro-record","Enable screen recording where supported").option("--maestro-use-build-source","Use Maestro flows from the build source snapshot instead of uploading local flows").option("--maestro-env <name>","Forward an environment variable to the managed Maestro runner; repeat or comma-separate names",sr,[]).option("-y, --yes","Automatically answer yes to all prompts",!1).option("--quiet","Suppress non-essential output",!1).action(async(e,t)=>{let n=U.opts();t.yes=t.yes||n.yes,t.quiet=t.quiet||n.quiet,t.platform=e||t.platform,t.buildProfile=t.profile||t.buildProfile,t.quiet||te(Y.bgCyan.black(f.cliTag("Cloud Build"))),await Dr(t)});var Jh=U.command("maestro").description("Run Maestro tests locally or with the managed Mach runner").option("--platform <os>","Target platform (android/ios)").option("-p, --profile <name>","Build profile to resolve when using --latest").option("--latest","Use the latest successful build for the platform/profile").option("--build-id <id>","Use a specific Mach build ID").option("--build-url <url>","Use a Mach build URL").option("--artifact-url <url>","Use a direct APK or iOS simulator app artifact URL").option("--local","Run Maestro on a connected local emulator/device instead of the managed runner").option("--maestro-flows <path>","Maestro flow file or directory (default: .maestro)").option("--maestro-device <device>","Managed device profile id (run `mach maestro devices` to list); local runs accept a device identifier").option("--maestro-retries <n>","Retries for the Maestro run","1").option("--maestro-record","Enable screen recording where supported").option("--maestro-use-build-source","Use Maestro flows from the build source snapshot instead of uploading local flows").option("--maestro-env <name>","Forward an environment variable to the managed Maestro runner; repeat or comma-separate names",sr,[]).option("--wait","Wait for managed Maestro completion and exit non-zero on failure").option("--wait-timeout <minutes>","Maximum minutes to wait for managed Maestro completion","60").option("--wait-interval <seconds>","Polling interval while waiting for managed Maestro completion","15").option("--json-output <path>","Write test run metadata JSON to a file for CI/CD").addOption(new Ke("--local-runner","Internal: execute a managed Maestro run on this machine").hideHelp()).addOption(new Ke("--test-run-id <id>","Internal test run ID").hideHelp()).addOption(new Ke("--project-id <id>","Internal project ID").hideHelp()).addOption(new Ke("--runner-token <token>","Internal runner token").hideHelp()).action(async e=>{te(Y.bgCyan.black(f.cliTag("Maestro Testing"))),await Qs(e)});Jh.command("devices").description("List device profiles available on the managed Maestro runner fleet").option("--platform <os>","Filter to android or ios").option("--json","Print machine-readable JSON").action(async e=>{await ea(e)});var zt=e=>e.option("--platform <os>","Target platform: ios, android, or all","all").option("-p, --profile <name>","Flutter build profile used to resolve flavor, target, and Dart defines").option("--channel <name>","OTA channel (for example: production, staging)").option("--branch <name>","Alias for --channel").option("--runtime-version <version>","Runtime version override").option("--message <text>","Release note/message for this OTA update").option("--framework <name>","Framework override: expo, react-native, or flutter").option("--engine <name>","OTA engine override: expo-updates or shorebird").option("--url <url>","Mach OTA update URL override").option("--install-plugin","Install @radhya/mach locally for the Expo config plugin").option("--skip-install","Do not install local Expo plugin dependency").option("--update-id <id>","OTA update id for rollback/promote").option("--release-version <version>","Shorebird release version (defaults to latest for publish)").option("--patch-number <number>","Shorebird patch number for promote/rollback").option("--track <name>","Shorebird track: stable or staging").option("--json","Print JSON output"),Kt=U.command("ota").description("Setup, publish, verify, and manage Mach OTA updates");zt(Kt.command("setup").description("Configure OTA for this project")).action(async e=>{let t=U.opts();te(Y.bgCyan.black(f.cliTag("OTA Setup"))),await mt("setup",{...e,yes:e.yes||t.yes})});zt(Kt.command("publish").description("Publish an OTA update")).action(async e=>{let t=U.opts();te(Y.bgCyan.black(f.cliTag("OTA Publish"))),await mt("publish",{...e,yes:e.yes||t.yes})});zt(Kt.command("release").description("Create a Flutter Shorebird base release")).action(async e=>{let t=U.opts();te(Y.bgCyan.black(f.cliTag("OTA Release"))),await mt("release",{...e,yes:e.yes||t.yes})});zt(Kt.command("verify").description("Verify OTA configuration")).action(async e=>{let t=U.opts();te(Y.bgCyan.black(f.cliTag("OTA Verify"))),await mt("verify",{...e,yes:e.yes||t.yes})});zt(Kt.command("list").description("List OTA updates for the linked project")).action(async e=>{let t=U.opts();te(Y.bgCyan.black(f.cliTag("OTA Updates"))),await mt("list",{...e,yes:e.yes||t.yes})});zt(Kt.command("rollback").description("Roll back an OTA update")).action(async e=>{let t=U.opts();te(Y.bgCyan.black(f.cliTag("OTA Rollback"))),await mt("rollback",{...e,yes:e.yes||t.yes})});zt(Kt.command("promote").description("Promote an OTA update")).action(async e=>{let t=U.opts();te(Y.bgCyan.black(f.cliTag("OTA Promote"))),await mt("promote",{...e,yes:e.yes||t.yes})});U.command("submit").description("Automated Store Submission (App Store / Google Play)").option("--platform <os>","Target platform (ios/android)").option("-p, --profile <name>","Build/submission profile to submit from (e.g. production, preprod)").option("--track <track>","Google Play Track (internal, alpha, beta, production)").option("--release-status <status>","Google Play release status (completed, draft, halted, inProgress)").option("--rollout <fraction>","Google Play staged rollout fraction for inProgress releases (example: 0.1)").option("--changes-not-sent-for-review","Commit Google Play changes without automatically sending them for review").option("--ssh-host <host>","Remote macOS host for iOS submission").option("--ssh-user <user>","SSH username for remote iOS submission").option("--ssh-key <path>","Path to private SSH key for remote iOS submission").option("--credential-id <id>","Service credential ID to use when multiple submission credentials exist").option("--local","Run submission on this machine (internal runner mode for iOS)").addOption(new Ke("--submit-id <id>","Internal submission ID").hideHelp()).addOption(new Ke("--project-id <id>","Internal project ID").hideHelp()).addOption(new Ke("--package-name <name>","Internal Android package name").hideHelp()).addOption(new Ke("--bundle-id <id>","Internal iOS bundle identifier").hideHelp()).option("--json-output <path>","Write submission metadata JSON to a file for CI/CD").option("--latest","Use the latest successful build for submission").option("--build-id <id>","Use a specific build ID for submission").action(async e=>{let t=U.opts();e.quiet=e.quiet||t.quiet,e.yes=e.yes||t.yes,te(Y.bgCyan.black(f.cliTag("Store Submission"))),await Ir(e)});U.command("login").description(`Login to ${f.name} Dashboard`).action(async()=>{te(Y.bgCyan.black(f.cliTag("Login"))),await vl()});U.command("logout").description(`Logout from ${f.name} on this machine`).action(async()=>{te(Y.bgCyan.black(f.cliTag("Logout"))),await Rl()});U.command("link").description(`Link local directory to a ${f.name} Project`).action(async()=>{te(Y.bgCyan.black(f.cliTag("Link Project"))),await wl()});U.command("me").description("Display currently logged in user details").action(async()=>{await ad()});U.command("init").description(`Create a new ${f.name} Project`).action(async()=>{te(Y.bgCyan.black(f.cliTag("Init Project"))),await Ol()});U.command("env").description("Manage Environment Variables").argument("<action>","Action to perform: set, list, pull, download, or export").argument("[args...]","Key=Value pairs for set action").option("-e, --environment <name>","Environment to pull/download","development").option("-o, --out <file>","Output file for pull/download",".env.local").option("--overwrite","Overwrite output file if it already exists").action(async(e,t,n)=>{te(Y.bgCyan.black(f.cliTag("Env Manager"))),await Pl(e,t,n)});U.command("start").description("Start the app with its configured Flutter or JavaScript toolchain").option("-p, --build-profile <name>","Any configured build profile name").option("--tunnel","Use ngrok tunnel").option("--lan","Use LAN IP").option("--localhost","Use localhost").option("-c, --clear","Clear Metro cache").option("--port <number>","Port to listen on").option("--ios","Start on iOS").option("--android","Start on Android").option("--web","Start on Web").action(async e=>{te(Y.bgCyan.black(f.cliTag("Dev Server"))),await ud(e)});var ar=U.command("push").description("Configure and send provider-direct APNs/FCM notifications");ar.command("setup").description("Install and wire a working default push experience").option("-p, --profile <name>","Build profile used to resolve app identity and Flutter entrypoint").option("--name <name>","Push app display name").option("--ios-bundle <id>","iOS bundle identifier").option("--android-package <name>","Android package name").option("-e, --environment <name>","development, preview, or production").option("--google-services-file <path>","Android google-services.json path").option("--skip-install","Generate setup without installing SDK dependencies").action(vs);ar.command("init").description("Create only the server-side push app (advanced)").option("-p, --profile <name>","Build profile used to resolve app identity").option("--name <name>","Push app display name").option("--ios-bundle <id>","iOS bundle identifier").option("--android-package <name>","Android package name").option("-e, --environment <name>","development, preview, or production","production").option("--google-services-file <path>","Expo Android google-services.json path").action(_s);var Pc=ar.command("credentials").description("Configure provider credentials");Pc.command("apns").description("Configure an Apple APNs .p8 authentication key").requiredOption("--file <path>","APNs .p8 file").requiredOption("--team-id <id>","Apple Developer team ID").requiredOption("--key-id <id>","APNs key ID").option("--bundle-id <id>","iOS bundle identifier").option("--app <id>","MACH Push app ID").option("-e, --environment <name>","development, preview, or production").action(e=>Ei("apns",e));Pc.command("fcm").description("Configure a Firebase service-account JSON file").requiredOption("--file <path>","Firebase service-account JSON").option("--app <id>","MACH Push app ID").option("-e, --environment <name>","Deprecated; accepted for compatibility because FCM credentials are package-wide").action(e=>Ei("fcm",e));ar.command("send").description("Queue one transient push notification").requiredOption("--title <text>","Notification title").requiredOption("--body <text>","Notification body").option("--app <id>","MACH Push app ID").option("-e, --environment <name>","development, preview, or production").option("--token <token>","MACH push token; repeatable",sr,[]).option("--user <id>","Application user ID; repeatable",sr,[]).option("--all","Send to all active devices").option("--platform <platform>","Limit --all to ios or android").option("--data <json>","String-to-string custom data JSON").option("--sound <name>","Provider sound name").option("--badge <number>","iOS badge count").option("--ttl <seconds>","Provider time-to-live").option("--collapse-key <key>","Provider collapse key").option("--android-channel-id <id>","Android notification channel").action(Rs);ar.command("status").description("Show aggregate push delivery counters").option("--days <number>","Statistics range, 1-90","30").action($s);U.command("config").description("Show resolved configuration for a profile").option("-p, --profile <name>","Build profile to resolve").option("--json","Output as JSON").action(async e=>{await pd(e)});var Tc=U.command("version").description("Show or seed DB-owned native version counters"),Cc=e=>e.requiredOption("--platform <os>","Target platform: ios or android").option("-p, --profile <name>","Build profile used to resolve package/bundle scope").option("--scope <value>","Counter scope override, usually package name or bundle identifier").option("--package <name>","Android package override").option("--bundle-id <id>","iOS bundle identifier override").option("--json","Print JSON output");Cc(Tc.command("show").description("Show the current native version counter")).action(async e=>{te(Y.bgCyan.black(f.cliTag("Version Counter"))),await Ko("show",e)});Cc(Tc.command("seed").description("Seed the native version counter for an existing app").argument("[value]","Latest already-used value; the next build uses value + 1").option("--value <number>","Latest already-used value; the next build uses value + 1").option("--force","Allow lowering an existing counter")).action(async(e,t)=>{te(Y.bgCyan.black(f.cliTag("Version Counter"))),await Ko("seed",{...t,value:t.value??e})});var kc=U.command("deeplink").description("Configure and verify app links, universal links, and URI schemes");kc.command("setup").description("Generate deep link config, hosted association files, and Expo plugin support").option("--domain <domain>","Associated domain, e.g. app.example.com").option("--base-url <url>","Base URL, e.g. https://app.example.com").option("-p, --profile <name>","Profile used for build/submit overrides").option("--platform <platform>","ios, android, or all").option("--framework <framework>","expo, react-native, or flutter").option("--scheme <scheme>","URI scheme, e.g. myapp").option("--ios-bundle-id <id>","iOS bundle identifier").option("--android-package <name>","Android package name").option("--apple-team-id <id>","Apple Developer Team ID").option("--app-store-id <id>","App Store app ID for Smart App Banner").option("--android-fingerprint <sha256>","Android SHA256 signing certificate fingerprint; repeatable",sr,[]).option("--output <dir>","Directory for hosted files, e.g. public or deep-links").option("--install-plugin","Install @radhya/mach locally so Expo can use the packaged config plugin").option("--no-install-plugin","Do not install @radhya/mach for Expo projects; use the local plugin fallback if the package is missing").option("-y, --yes","Automatically answer yes to prompts",!1).action(async e=>{let t=U.opts();e.yes=e.yes||t.yes,te(Y.bgCyan.black(f.cliTag("Deep Links"))),await Md(e)});kc.command("verify").description("Verify local and optionally live deep link configuration").option("-p, --profile <name>","Profile used for build/submit overrides").option("--live","Check hosted files over HTTPS").option("--android-device","Print Android device verification commands").action(async e=>{te(Y.bgCyan.black(f.cliTag("Deep Link Verify"))),await Fd(e)});U.command("credentials").description("Unified, interactive credential management (iOS/Android)").option("--platform <os>","Platform to manage: ios or android").option("-p, --profile <name>","Any configured build profile name").option("--credential-type <type>","iOS signing type override: development, adhoc, or store").option("--force","Force recreate certificates (nuke existing on Apple Portal)",!1).action(async e=>{let{credentialsMainCommand:t}=await import("./credentials-ZGGJWXVT.js");await t(e)});U.command("credentials:setup").description("Automated credential provisioning (iOS/Android) [Legacy]").requiredOption("--platform <os>","Platform: ios or android").option("--profile <name>","Any configured build profile name").option("--credential-type <type>","iOS signing type override: development, adhoc, or store").option("--bundle-id <id>","Bundle ID / Package Name (optional, auto-detected)").option("--team-id <id>","Apple Team ID (iOS only)").option("--key-alias <alias>","Android keystore alias (optional, auto-generated)").option("--aws-profile <name>","AWS Credentials Profile (for S3 storage)").option("--force","Force recreate certificates (nuke existing on Apple Portal)",!1).action(async e=>{te(Y.bgCyan.black(f.cliTag("Credentials Setup"))),await vn(e),Dc(Y.green("Done!"))});U.command("credentials:service").description("Upload Service Credentials (ASC API Key / Google Service JSON) [Legacy]").requiredOption("--platform <os>","Platform: ios or android").option("--file <path>","Path to credential file (.p8 or .json)").option("--issuer-id <id>","ASC API Key Issuer ID (iOS only)").option("--key-id <id>","ASC API Key ID (iOS only)").option("--bundle-id <id>","Bundle identifier / Android package name to attach this service credential to").option("--package-name <name>","Android package name to attach this service credential to").option("-p, --profile <name>","Build profile to resolve package/bundle identifier from config").action(async e=>{te(Y.bgCyan.black(f.cliTag("Service Credentials"))),await Is(e),Dc(Y.green("Done!"))});var es=U.command("device").description("Manage registered iOS test devices");es.command("register").description("Register a connected iOS device or enter UDID manually").option("--udid <udid>","Device UDID (skip auto-detection)").option("--name <name>","Device name").option("--team-id <id>","Apple Developer Team ID for this device").action(async e=>{await ri("register",e)});es.command("list").description("List all registered devices").option("--team-id <id>","Filter by Apple Developer Team ID").action(async e=>{await ri("list",e)});es.command("remove").description("Remove a registered device").option("--udid <udid>","Device UDID to remove").option("--team-id <id>","Apple Developer Team ID for this device").action(async e=>{await ri("remove",e)});U.command("audit").description("Run project health, delivery impact, and security checks").option("--apk <path>","Path to APK file (runs APK diagnostics like 16KB alignment)").option("--json","Output results as JSON (for CI/CD)").option("--fix","Auto-apply fixes where possible").option("--category <name>","Run one category (e.g. project, impact, permissions, secrets)").option("--severity <level>","Minimum severity to display (critical, high, medium, low, info)").option("--prebuild","Run expo prebuild for deeper manifest/plist analysis").option("--since <git-ref>","Assess delivery impact from a branch, tag, or commit").action(async e=>{e.json||te(Y.bgCyan.black(f.cliTag(e.apk?"APK Audit":"Project Audit"))),await wc(e)});var Xh=new Set(["login","logout","agent"]),Zh=new Set(["build","credentials","credentials:service","credentials:setup","env","push","submit","version"]),Qh=new Set(["publish","list","rollback","promote"]);function eA(e){let t=[],n=e;for(;n&&n!==U;)t.unshift(n.name()),n=n.parent;return t}function tA(e,t){let[n,r]=eA(e);return Zh.has(n)?!0:n==="ota"?Qh.has(r):n==="maestro"?r!=="devices"&&!t.local&&!t.localRunner:!1}U.hook("preAction",async(e,t)=>{let n=t.name(),r=t.opts?.()||{};if(n==="maestro"&&(r.local||r.localRunner)||t.parent?.name()==="deeplink"||Xh.has(n)||(Wt(),!tA(t,r)))return;let i=ws(r,re());if(!i)throw new dt(`No linked ${f.name} project was found. Run \`${f.nameLower} link\` before using this command.`);await Os(i)});U.on("command:*",()=>{console.error(`Invalid command: %s
|
|
2400
2424
|
See --help for a list of available commands.`,U.args.join(" ")),process.exit(1)});process.argv.slice(2).length||U.help();U.parseAsync(process.argv).catch(e=>{let t=e instanceof Error?e.message:String(e);console.error(Y.red(t)),process.exitCode=1});
|