@radhya/mach 2.6.11 → 2.6.12
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +28 -1
- package/dist/index.js +138 -133
- package/package.json +1 -1
package/dist/index.js
CHANGED
|
@@ -1,17 +1,18 @@
|
|
|
1
1
|
#!/usr/bin/env node
|
|
2
|
-
import{$ as
|
|
3
|
-
Run \`${m.nameLower} logout\`, then \`${m.nameLower} login\` with a project member, or run \`${m.nameLower} link\` to select an accessible project.`)}async function
|
|
4
|
-
`;s+=`Region: ${
|
|
5
|
-
`,s+=`S3 Website URL: ${
|
|
6
|
-
|
|
7
|
-
CloudFront ID: ${
|
|
8
|
-
CloudFront URL: ${
|
|
9
|
-
`),n}import lt from"fs";import Fe from"path";var
|
|
10
|
-
`)};var
|
|
11
|
-
${r}`)),!0):!1}function ra(e,t){let n=[],r=[],i=[],o=t.web?.outputDir||"deep-links",s=Fe.join(e,o),a=jn(t);if(a){let u=Cr([Fe.join(s,".well-known/apple-app-site-association"),Fe.join(s,".well-known/apple-app-site-association.json"),Fe.join(s,"apple-app-site-association"),Fe.join(s,"apple-app-site-association.json")]);for(let f of u)na(f,a),n.push(Fe.relative(e,f))}else r.push("Apple AASA files: missing ios.appleTeamId or ios.bundleIdentifier");let l=ji(t);if(l){let u=Fe.join(s,".well-known/assetlinks.json");na(u,l),n.push(Fe.relative(e,u)),t.android?.sha256CertFingerprints?.length||i.push("assetlinks.json was generated without SHA256 fingerprints. Add them before Android App Links can verify.")}else r.push("Android assetlinks.json: missing android.package");let d=Fe.join(e,Fi);lt.existsSync(d)&&(lt.unlinkSync(d),i.push(`Removed legacy ${Fi}; mach.config.json is now the source of truth.`));let c=Fe.join(s,"index.html");return t.web?.smartAppBanner&&Nu(c,t)?n.push(Fe.relative(e,c)):t.web?.smartAppBanner&&t.ios?.appStoreId?i.push(`Smart App Banner skipped because ${Fe.relative(e,c)} was not found.`):t.web?.smartAppBanner&&i.push("Smart App Banner skipped because ios.appStoreId is not configured."),o!=="public"&&i.push(`Host ${o}/.well-known files at https://${t.domain}/.well-known/.`),{written:n,skipped:r,notes:i}}function fn(e){if(!lt.existsSync(e))return null;try{return JSON.parse(lt.readFileSync(e,"utf-8"))}catch{return null}}function xu(e){let t=String(e||"").trim().toLowerCase().replace(/\.$/,"");if(t)try{let n=new URL(`https://${t}`);return n.hostname!==t||n.pathname!=="/"?void 0:{hostname:n.hostname,url:n.origin}}catch{return}}function xr(e){if(!e.configured)return[];let t=[],n=(o,s)=>{let a=xu(o);!a||t.some(l=>l.hostname===a.hostname)||t.push({...a,source:s})},r=String(e.subdomain||"").trim(),i=String(e.baseDomain||"").trim();r&&i&&n(`${r}.${i}`,"mach");for(let o of e.domains||[])String(o.environment||"production").toLowerCase()==="production"&&String(o.status||"").toLowerCase()==="active"&&n(o.hostname,"custom-domain");return t}var Mu={".avif":"image/avif",".css":"text/css; charset=utf-8",".csv":"text/csv; charset=utf-8",".gif":"image/gif",".html":"text/html; charset=utf-8",".ico":"image/x-icon",".jpeg":"image/jpeg",".jpg":"image/jpeg",".js":"text/javascript; charset=utf-8",".json":"application/json; charset=utf-8",".map":"application/json; charset=utf-8",".mjs":"text/javascript; charset=utf-8",".png":"image/png",".svg":"image/svg+xml",".txt":"text/plain; charset=utf-8",".wasm":"application/wasm",".webmanifest":"application/manifest+json; charset=utf-8",".webp":"image/webp",".woff":"font/woff",".woff2":"font/woff2",".xml":"application/xml; charset=utf-8"},Fu=[".well-known/apple-app-site-association",".well-known/apple-app-site-association.json",".well-known/assetlinks.json","apple-app-site-association","apple-app-site-association.json"];function Vt(e){return e?.response?.data?.message||e?.message||"Unknown error"}function zt(e){let t=String(e.projectId||K()?.projectId||"").trim();if(!t)throw new Error(`${m.configFileName} is missing projectId. Run \`${m.nameLower} link\` or pass --project-id.`);return t}function ia(e){let t=String(e||"production").toLowerCase();if(t==="production"||t==="staging")return t;throw new Error("--alias must be production or staging.")}function Hi(e){return ia(e.alias||e.environment)}function Uu(e){let t=e.alias||e.environment?Hi(e):void 0,n=String(e.profile||"").trim();if(!n)return{environment:t||"production",output:e.output};let r=K();if(!r)throw new Error(`No ${m.configFileName} found. A web --profile is resolved from the linked project configuration.`);let i=se(r,n);if(!i)throw new Error(`Build profile '${n}' was not found in ${m.configFileName}.`);let o=i.web?.alias,s=t||(o?ia(o):"production");return{name:n,environment:s,output:e.output||(typeof i.web?.output=="string"?i.web.output:void 0)}}function oa(e){return Oe.posix.basename(e)==="apple-app-site-association"?"application/json; charset=utf-8":Mu[Oe.extname(e).toLowerCase()]||"application/octet-stream"}function sa(e){let t=Oe.posix.basename(e);return t==="index.html"||/\.html?$/i.test(e)?"public, max-age=0, must-revalidate":/\.(json|webmanifest|xml|map)$/i.test(e)?"public, max-age=300, must-revalidate":/(?:^|[._-])[a-f0-9]{8,}(?:[._-]|$)/i.test(t)?"public, max-age=31536000, immutable":"public, max-age=300, must-revalidate"}function ju(e){let t=[],n=Oe.resolve(e);if(!Dt.existsSync(n)||!Dt.statSync(n).isDirectory())throw new Error(`Web output directory does not exist: ${n}`);let r=o=>{for(let s of Dt.readdirSync(o,{withFileTypes:!0})){if(s.name===".DS_Store"||s.name===".git")continue;let a=Oe.join(o,s.name);if(s.isDirectory())r(a);else if(s.isFile()){let l=Oe.relative(n,a).split(Oe.sep).join("/"),d=Dt.statSync(a);t.push({path:l,absolutePath:a,size:d.size,contentType:oa(l),cacheControl:sa(l)})}}};if(r(n),t.sort((o,s)=>o.path.localeCompare(s.path)),!t.some(o=>o.path==="index.html"))throw new Error(`No index.html found in ${n}. Pass the finished static web output directory.`);if(t.length>1e4)throw new Error("A web deployment can contain at most 10,000 files.");if(t.reduce((o,s)=>o+s.size,0)>1024*1024*1024)throw new Error("A web deployment can be at most 1 GB.");return t}function Bu(e){let t=K(),n=t?.deepLinks?Gt(t,{cwd:process.cwd()}):null;if(!n?.baseUrl||!n.domain)return[];let r=String(n.web?.outputDir||"deep-links").trim();if(!r)return[];let i=Oe.resolve(e),o=Oe.resolve(r);return Gu(o,n),o===i?[]:Fu.flatMap(s=>{let a=Oe.join(o,s);return!Dt.existsSync(a)||!Dt.statSync(a).isFile()?[]:[{path:s,absolutePath:a,size:Dt.statSync(a).size,contentType:oa(s),cacheControl:sa(s)}]})}function Hu(e,t){let n=e?.applinks?.details;return Array.isArray(n)&&n.some(r=>r?.appID===t||Array.isArray(r?.appIDs)&&r.appIDs.includes(t))}function Gu(e,t){if(jn(t)){let i=Oe.join(e,".well-known/apple-app-site-association"),o=fn(i),s=`${t.ios?.appleTeamId}.${t.ios?.bundleIdentifier}`;if(!o||!Hu(o,s))throw new Error(`Deep-link safety check failed: ${Oe.relative(process.cwd(),i)} is missing or does not contain ${s}. Run \`mach deeplink setup\` from this app folder before deploying.`);if(t.ios?.webCredentials&&!o.webcredentials?.apps?.includes(s))throw new Error(`Deep-link safety check failed: ${Oe.relative(process.cwd(),i)} is missing webcredentials for ${s}. Run \`mach deeplink setup\` from this app folder before deploying.`)}if(ji(t)){let i=Oe.join(e,".well-known/assetlinks.json"),o=fn(i),s=t.android?.package;if(!(Array.isArray(o)?o.find(l=>l?.target?.package_name===s):void 0))throw new Error(`Deep-link safety check failed: ${Oe.relative(process.cwd(),i)} is missing ${s}. Run \`mach deeplink setup\` from this app folder before deploying.`)}}function Vu(e,t){if(!e?.domain)return;let n=xr(t);if(n.length!==0&&!n.some(r=>r.hostname===e.domain))throw new Error(`Deep-link safety check blocked this deployment: mach.config.json is configured for ${e.domain}, but the selected Mach project hosts ${n.map(r=>r.hostname).join(", ")}. Run the command from the intended app folder, or select that app's Mach project/configuration.`)}async function zu(e){let t=K(),n=t?.deepLinks?Gt(t,{cwd:process.cwd()}):null;if(n?.domain)try{let r=await I.get(`/projects/${encodeURIComponent(e)}/web`,{timeout:15e3});Vu(n,r.data||{})}catch(r){if(String(r?.message||"").startsWith("Deep-link safety check blocked"))throw r}}function Ku(e,t){let n=new Map(e.map(r=>[r.path,r]));return t.forEach(r=>n.set(r.path,r)),[...n.values()].sort((r,i)=>r.path.localeCompare(i.path))}function Wu(e){let t=K(),n=ce(t?.framework);if(n==="expo"){let r=e.output||"dist";if(Bi("npx",["expo","export","--platform","web","--output-dir",r],{stdio:"inherit",shell:process.platform==="win32"}).status!==0)throw new Error("Expo web export failed.");return r}if(n==="flutter"){if(Bi("flutter",["build","web","--release"],{stdio:"inherit",shell:process.platform==="win32"}).status!==0)throw new Error("Flutter web build failed.");return e.output||"build/web"}throw new Error("Automatic web builds are available for Expo and Flutter. For React Native Web, run your web build first and pass --output <directory>.")}function Yu(){let e=r=>{let i=Bi("git",r,{encoding:"utf8",stdio:["ignore","pipe","ignore"]});return i.status===0?String(i.stdout||"").trim():""},t=e(["branch","--show-current"]),n=e(["rev-parse","--short","HEAD"]);return{branch:t||void 0,commit:n||void 0}}async function qu(e,t){let n=Dt.readFileSync(t.absolutePath);for(let r=1;r<=3;r+=1)try{await Lu.put(e,n,{headers:{"Content-Type":t.contentType,"Cache-Control":t.cacheControl},maxBodyLength:1/0,maxContentLength:1/0});return}catch(i){if(r===3)throw i;await new Promise(o=>setTimeout(o,r*500))}}async function Ju(e,t,n){let i=(await I.post(`/projects/${encodeURIComponent(e)}/web/deployments/${encodeURIComponent(t)}/uploads`,{files:n.map(o=>({path:o.path,size:o.size,contentType:o.contentType,cacheControl:o.cacheControl}))})).data?.uploads||[];if(i.length!==n.length)throw new Error("Mach did not return upload URLs for every file.");for(let o=0;o<n.length;o+=6)await Promise.all(n.slice(o,o+6).map((s,a)=>qu(i[o+a].uploadUrl,s)))}async function aa(e){try{ke();let t=zt(e);await zu(t);let n=Uu(e),r=n.environment,i=e.build?Wu({...e,output:n.output}):n.output;if(!i)throw new Error("Pass --output <directory>, or use --build for Expo or Flutter.");let o=Bu(i),s=Ku(ju(i),o),a=s.reduce((p,h)=>p+h.size,0),l=Yu();console.log(pe.dim(`Uploading ${s.length} files (${Math.ceil(a/1024)} KB) from ${Oe.resolve(i)}${n.name?` \xB7 profile ${n.name}`:""}\u2026`)),o.length>0&&console.log(pe.dim(`Included ${o.length} generated deep-link association file${o.length===1?"":"s"}.`));let d=await I.post(`/projects/${encodeURIComponent(t)}/web/deployments`,{alias:r,fileCount:s.length,totalBytes:a,message:e.message,buildProfile:n.name,branch:l.branch,commit:l.commit}),c=d.data?.deployment?.deploymentId;if(!c)throw new Error("Mach did not create a deployment.");for(let p=0;p<s.length;p+=100){let h=s.slice(p,p+100);await Ju(t,c,h),console.log(pe.dim(`Uploaded ${Math.min(p+h.length,s.length)}/${s.length} files`))}let f=(await I.post(`/projects/${encodeURIComponent(t)}/web/deployments/${encodeURIComponent(c)}/complete`)).data?.deploymentUrl||d.data?.deployment?.deploymentUrl;if(console.log(`${pe.green("Deployment ready:")} ${f}`),e.promote!==!1){let p=await I.post(`/projects/${encodeURIComponent(t)}/web/deployments/${encodeURIComponent(c)}/promote`,{alias:r});console.log(`${pe.green(`${r} is live:`)} ${p.data?.url}`)}else console.log(pe.yellow(`Not promoted. Run \`${m.nameLower} web promote ${c} --alias ${r}\` when ready.`))}catch(t){console.error(pe.red(`Web deploy failed: ${Vt(t)}`)),process.exitCode=1}}async function la(e){try{ke();let t=zt(e),r=(await I.get(`/projects/${encodeURIComponent(t)}/web`)).data||{};if(!r.configured){console.log(pe.yellow("Mach Web Hosting is not configured by the operator yet."));return}console.log(`${pe.bold("Base domain:")} ${r.baseDomain}`),console.log(`${pe.bold("Web address:")} ${r.subdomain||r.projectSlug||"not configured"}.${r.baseDomain||""}`);for(let i of["production","staging"]){let o=r.aliases?.[i];console.log(`${i}: ${o?.url||pe.dim("not deployed")}`)}r.domains?.length&&(console.log(`
|
|
12
|
-
Custom domains:`),r.domains.forEach(i=>console.log(` ${i.hostname} (${i.status||"pending"})`)))}catch(t){console.error(pe.red(`Could not get web hosting status: ${Vt(t)}`)),process.exitCode=1}}async function
|
|
2
|
+
import{$ as Pt,A as Os,B as wr,C as vr,D as Rr,E as Ds,F as Ti,G as ki,H as $r,I as Pr,J as Cs,K as Or,L as Dr,M as Ni,N as ve,O as Ts,P as ks,Q as Ns,R as Nn,S as xn,T as xs,U as Ms,V as Ls,W as Fs,X as Us,Y as xi,Z as $t,_ as js,a as kn,aa as Bs,b as ce,ba as Hs,c as an,ca as Mi,d as ft,da as Gs,e as W,ea as Vs,f as se,g as K,h as Er,i as Ir,j as ln,k as Bt,l as Is,m as _s,n as Ci,na as Mn,o as ws,p as vs,q as _r,r as tt,s as vt,t as Rs,u as cn,v as dn,w as un,x as $s,y as Rt,z as Ps}from"./chunk-QRW3A5OH.js";import{a as m,b as Ss,c as we,d as Es,e as ke,f as wt,g as at,h as I}from"./chunk-QFXPWC5D.js";import{Command as Fb,Option as Qe}from"commander";import{configDotenv as Ub}from"dotenv";import{intro as re,outro as $u}from"@clack/prompts";import J from"chalk";import Bb from"path";var mt=class extends Error{constructor(t){super(t),this.name="ProjectAccessError"}};function Li(e){return typeof e!="string"?void 0:e.trim()||void 0}function zs(e,t){return Li(e?.projectId)||Li(t?.projectId)}function ku(e,t){if(Array.isArray(e))return e.find(n=>Li(n?.projectId)===t)}function Nu(e,t){let n=ku(e,t);if(n)return n;throw new mt(`The current ${m.name} account does not have access to the linked project (${t}).
|
|
3
|
+
Run \`${m.nameLower} logout\`, then \`${m.nameLower} login\` with a project member, or run \`${m.nameLower} link\` to select an accessible project.`)}async function Ws(e){try{let n=(await I.get("/projects")).data;if(n?.status!=="success"||!Array.isArray(n.projects))throw new mt(`Could not verify access to the linked project before starting this command. Try \`${m.nameLower} login\` again.`);return Nu(n.projects,e)}catch(t){throw t instanceof mt?t:t?.response?.status===401?new mt(`Could not verify access to the linked project because this ${m.name} session is no longer valid. Run \`${m.nameLower} login\` and try again.`):new mt("Could not verify access to the linked project before starting this command. Check your connection and try again.")}}import{text as Ks,confirm as xu,spinner as Mu,isCancel as Fi,cancel as Ln,note as Lu,outro as Fu}from"@clack/prompts";import Fn from"chalk";async function Ys(){try{let e=await Ks({message:"Enter Bucket Name:",placeholder:"e.g. my-app-dev",validate(i){if(i.length===0)return"Bucket name is required"}});Fi(e)&&(Ln("Operation cancelled."),process.exit(0));let t=await Ks({message:"Enter Region:",initialValue:"ap-south-1"});Fi(t)&&(Ln("Operation cancelled."),process.exit(0));let n=await xu({message:"Do you want to create a CloudFront Distribution for this bucket?",initialValue:!0});Fi(n)&&(Ln("Operation cancelled."),process.exit(0));let r=Mu();r.start("Setting up hosting infrastructure...");try{let i=await I.post("/hosting/setup",{bucketName:e,region:t,createCloudFront:n});if(i.data.status!=="success")throw new Error(i.data.message||"Hosting setup failed");r.stop("Hosting setup complete!");let o=i.data,s=`Bucket Name: ${Fn.cyan(o.bucketName)}
|
|
4
|
+
`;s+=`Region: ${Fn.cyan(o.region)}
|
|
5
|
+
`,s+=`S3 Website URL: ${Fn.blue(o.s3WebsiteUrl)}`,o.cloudFrontId&&(s+=`
|
|
6
|
+
|
|
7
|
+
CloudFront ID: ${Fn.cyan(o.cloudFrontId)}`,s+=`
|
|
8
|
+
CloudFront URL: ${Fn.blue(o.cloudFrontUrl)}`),Lu(s,"Setup Complete!"),Fu("You are all set!")}catch(i){r.stop("Setup failed"),Ln(`Error: ${i.response?.data?.message||i.message}`)}}catch(e){Ln(`An unexpected error occurred: ${e.message}`)}}import Vu from"axios";import Ot from"fs";import Pe from"path";import{spawnSync as Hi}from"child_process";import pe from"chalk";import Ht from"fs";import pn from"path";var fn="./plugins/withMachDeepLinks",Ui="mach.deep-links.json",Js=["/*"],ji=e=>{if(typeof e!="string")return;let t=e.trim();return t.length>0?t:void 0},Cr=e=>{let t=new Set,n=[];for(let r of e){let i=ji(r);!i||t.has(i)||(t.add(i),n.push(i))}return n},ze=(...e)=>{for(let t of e){let n=ji(t);if(n)return n}},qs=(e,t)=>e.length!==t.length?!1:e.every((n,r)=>n===t[r]);function Xs(e){if(typeof e!="string")return;let t=e.trim().toLowerCase();if(t==="ios"||t==="android"||t==="all")return t}function jn(e){let t=e.includes("://")?e:`https://${e}`,n=new URL(t),r=n.pathname==="/"?"":n.pathname.replace(/\/+$/,"");return`${n.protocol}//${n.host}${r}`}function Un(e){return new URL(jn(e)).hostname}function Tr(e){return e.trim().toLowerCase().replace(/[^a-z0-9+.-]/g,"-").replace(/^-+|-+$/g,"")||"app"}function Zs(e=process.cwd()){let t=pn.join(e,"package.json"),n=["app.json","app.config.json","app.config.js","app.config.ts"].some(i=>Ht.existsSync(pn.join(e,i))),r=!1;if(Ht.existsSync(t))try{let i=JSON.parse(Ht.readFileSync(t,"utf-8"));r=!!(i.dependencies?.expo||i.devDependencies?.expo)}catch{r=!1}return n&&r?"expo":Ht.existsSync(pn.join(e,"ios"))||Ht.existsSync(pn.join(e,"android"))?"react-native":kn}function Qs(e,t,n){if(t)return t;let r=!!(e.ios?.bundleIdentifier||n?.ios?.bundleIdentifier||e.deepLinks?.ios?.bundleIdentifier),i=!!(e.android?.package||n?.android?.package||n?.android?.applicationId||e.deepLinks?.android?.package);return r&&!i?"ios":i&&!r?"android":"all"}function kr(e=process.cwd(),t){let n=t?.deepLinks?.web?.outputDir;return n||(Ht.existsSync(pn.join(e,"public"))?"public":"deep-links")}function ea(e,t){let n=e.deepLinks,r=jn(t.baseUrl||n?.baseUrl||(t.domain?`https://${t.domain}`:"")),i=ji(t.domain)||(t.baseUrl?Un(r):n?.domain)||Un(r),o=t.profile||n?.profile||K(e,"store","production"),s=se(e,o)||{},a=s.ios||{},l=s.android||{},d=e.submit?.[o]?.ios||{},c=e.submit?.[o]?.android||{},u=Tr(t.scheme||n?.scheme||a.scheme||e.scheme||e.slug||e.name||"app"),f=ft(e,o),p=Cr([...t.androidFingerprint||[],...n?.android?.sha256CertFingerprints||[],...l.sha256CertFingerprints||[],...e.android?.sha256CertFingerprints||[]]);return{baseUrl:r,domain:i,scheme:u,profile:o,paths:n?.paths?.length?n.paths:["/*"],ios:{appStoreId:ze(t.appStoreId,n?.ios?.appStoreId,a.ascAppId,d.ascAppId,e.ios?.ascAppId),appleTeamId:ze(t.appleTeamId,n?.ios?.appleTeamId,a.appleTeamId,a.developerTeamId,d.appleTeamId,d.developerTeamId,e.ios?.appleTeamId,e.ios?.developerTeamId,f.teamId),bundleIdentifier:ze(t.iosBundleId,n?.ios?.bundleIdentifier,a.bundleIdentifier,a.bundleId,e.ios?.bundleIdentifier,e.ios?.bundleId,e.expo?.ios?.bundleIdentifier),webCredentials:!!n?.ios?.webCredentials,activityContinuation:!!n?.ios?.activityContinuation},android:{package:ze(t.androidPackage,n?.android?.package,l.package,l.applicationId,e.android?.package,e.expo?.android?.package,c.packageName,c.package),sha256CertFingerprints:p,loginCredentials:!!n?.android?.loginCredentials},web:{smartAppBanner:n?.web?.smartAppBanner??!0,outputDir:t.output||n?.web?.outputDir||kr(process.cwd(),e)}}}function Gt(e,t={}){let n=e.deepLinks,r=t.profile||n?.profile||K(e,"store","production"),i=t.expoHints||null,o=ze(n?.baseUrl,i?.domain?`https://${i.domain}`:void 0);if(!o)return null;let s=jn(o),a=se(e,r)||{},l=a.ios||{},d=a.android||{},c=e.submit?.[r]?.ios||{},u=e.submit?.[r]?.android||{},f=ft(e,r),p=n?.baseUrl?ze(n?.domain)||Un(s):ze(n?.domain,i?.domain)||Un(s),h=Tr(ze(n?.scheme,l.scheme,e.scheme,i?.scheme,e.slug,e.name,"app")||"app"),g=n?.paths?.length?n.paths:[...Js];return{baseUrl:s,domain:p,scheme:h,profile:r,paths:g,ios:{appStoreId:ze(n?.ios?.appStoreId,l.ascAppId,c.ascAppId,e.ios?.ascAppId),appleTeamId:ze(n?.ios?.appleTeamId,l.appleTeamId,l.developerTeamId,c.appleTeamId,c.developerTeamId,e.ios?.appleTeamId,e.ios?.developerTeamId,f.teamId),bundleIdentifier:ze(n?.ios?.bundleIdentifier,l.bundleIdentifier,l.bundleId,e.ios?.bundleIdentifier,e.ios?.bundleId,e.expo?.ios?.bundleIdentifier,i?.iosBundleIdentifier),webCredentials:!!n?.ios?.webCredentials,activityContinuation:!!n?.ios?.activityContinuation},android:{package:ze(n?.android?.package,d.package,d.applicationId,e.android?.package,e.expo?.android?.package,u.packageName,u.package,i?.androidPackage),sha256CertFingerprints:Cr([...n?.android?.sha256CertFingerprints||[],...d.sha256CertFingerprints||[],...e.android?.sha256CertFingerprints||[]]),loginCredentials:!!n?.android?.loginCredentials},web:{smartAppBanner:n?.web?.smartAppBanner??!0,outputDir:n?.web?.outputDir||kr(t.cwd||process.cwd(),e)}}}function Nr(e,t,n=K(e,"store","production"),r=process.cwd()){return t?.domain?Gt({...e,deepLinks:{baseUrl:`https://${t.domain}`,domain:t.domain,scheme:t.scheme}},{profile:n,cwd:r,expoHints:t}):null}function Uu(e,t,n=t.profile||K(e,"store","production")){let r=Gt({...e,deepLinks:{baseUrl:t.baseUrl}},{profile:n}),i={baseUrl:t.baseUrl};i.profile=n,t.domain&&t.domain!==Un(t.baseUrl)&&(i.domain=t.domain),t.scheme&&t.scheme!==r?.scheme&&(i.scheme=t.scheme),t.paths?.length&&!qs(t.paths,Js)&&(i.paths=t.paths);let o={};t.ios?.bundleIdentifier&&t.ios.bundleIdentifier!==r?.ios?.bundleIdentifier&&(o.bundleIdentifier=t.ios.bundleIdentifier),t.ios?.appleTeamId&&t.ios.appleTeamId!==r?.ios?.appleTeamId&&(o.appleTeamId=t.ios.appleTeamId),t.ios?.appStoreId&&t.ios.appStoreId!==r?.ios?.appStoreId&&(o.appStoreId=t.ios.appStoreId),t.ios?.webCredentials&&(o.webCredentials=!0),t.ios?.activityContinuation&&(o.activityContinuation=!0),Object.keys(o).length>0&&(i.ios=o);let s={};t.android?.package&&t.android.package!==r?.android?.package&&(s.package=t.android.package);let a=t.android?.sha256CertFingerprints||[],l=r?.android?.sha256CertFingerprints||[];a.length>0&&!qs(a,l)&&(s.sha256CertFingerprints=a),t.android?.loginCredentials&&(s.loginCredentials=!0),Object.keys(s).length>0&&(i.android=s);let d={outputDir:t.web?.outputDir||"deep-links"};return t.web?.smartAppBanner===!1&&(d.smartAppBanner=!1),i.web=d,i}function ta(e,t,n,r=n.profile||K(e,"store","production")){let i={...e,framework:t,scheme:e.scheme||n.scheme};return{...i,deepLinks:Uu(i,n,r)}}function na(e,t=process.cwd()){let n=pn.join(t,"mach.config.json");return Ht.writeFileSync(n,`${JSON.stringify(e,null,2)}
|
|
9
|
+
`),n}import lt from"fs";import Fe from"path";var ju=e=>{lt.mkdirSync(Fe.dirname(e),{recursive:!0})},ra=(e,t)=>{ju(e),lt.writeFileSync(e,`${JSON.stringify(t,null,2)}
|
|
10
|
+
`)};var Bu=e=>{let t=e.ios?.appleTeamId,n=e.ios?.bundleIdentifier;return!t||!n?null:`${t}.${n}`};function Bn(e){let t=Bu(e);if(!t)return null;let n=e.paths?.length?e.paths:["/*"],r=n.map(s=>s==="/*"?"*":s),i=n.map(s=>({"/":s,comment:s==="/*"?"Matches all URLs":`Matches ${s}`})),o={applinks:{apps:[],details:[{appIDs:[t],components:i,appID:t,paths:r}]}};return e.ios?.webCredentials&&(o.webcredentials={apps:[t]}),e.ios?.activityContinuation&&(o.activitycontinuation={apps:[t]}),o}function Bi(e){let t=e.android?.package;return t?[{relation:["delegate_permission/common.handle_all_urls",...e.android?.loginCredentials?["delegate_permission/common.get_login_creds"]:[]],target:{namespace:"android_app",package_name:t,sha256_cert_fingerprints:e.android?.sha256CertFingerprints||[]}}]:null}function Hu(e,t){let n=t.ios?.appStoreId;if(!n||!lt.existsSync(e))return!1;let r=`<meta name="apple-itunes-app" content="app-id=${n}, app-argument=${t.baseUrl}" />`,i=lt.readFileSync(e,"utf-8");if(/name=["']apple-itunes-app["']/i.test(i)){let o=i.replace(/<meta[^>]+name=["']apple-itunes-app["'][^>]*>/i,r);return lt.writeFileSync(e,o),!0}return/<head[^>]*>/i.test(i)?(lt.writeFileSync(e,i.replace(/<head([^>]*)>/i,`<head$1>
|
|
11
|
+
${r}`)),!0):!1}function ia(e,t){let n=[],r=[],i=[],o=t.web?.outputDir||"deep-links",s=Fe.join(e,o),a=Bn(t);if(a){let u=Cr([Fe.join(s,".well-known/apple-app-site-association"),Fe.join(s,".well-known/apple-app-site-association.json"),Fe.join(s,"apple-app-site-association"),Fe.join(s,"apple-app-site-association.json")]);for(let f of u)ra(f,a),n.push(Fe.relative(e,f))}else r.push("Apple AASA files: missing ios.appleTeamId or ios.bundleIdentifier");let l=Bi(t);if(l){let u=Fe.join(s,".well-known/assetlinks.json");ra(u,l),n.push(Fe.relative(e,u)),t.android?.sha256CertFingerprints?.length||i.push("assetlinks.json was generated without SHA256 fingerprints. Add them before Android App Links can verify.")}else r.push("Android assetlinks.json: missing android.package");let d=Fe.join(e,Ui);lt.existsSync(d)&&(lt.unlinkSync(d),i.push(`Removed legacy ${Ui}; mach.config.json is now the source of truth.`));let c=Fe.join(s,"index.html");return t.web?.smartAppBanner&&Hu(c,t)?n.push(Fe.relative(e,c)):t.web?.smartAppBanner&&t.ios?.appStoreId?i.push(`Smart App Banner skipped because ${Fe.relative(e,c)} was not found.`):t.web?.smartAppBanner&&i.push("Smart App Banner skipped because ios.appStoreId is not configured."),o!=="public"&&i.push(`Host ${o}/.well-known files at https://${t.domain}/.well-known/.`),{written:n,skipped:r,notes:i}}function mn(e){if(!lt.existsSync(e))return null;try{return JSON.parse(lt.readFileSync(e,"utf-8"))}catch{return null}}function Gu(e){let t=String(e||"").trim().toLowerCase().replace(/\.$/,"");if(t)try{let n=new URL(`https://${t}`);return n.hostname!==t||n.pathname!=="/"?void 0:{hostname:n.hostname,url:n.origin}}catch{return}}function xr(e){if(!e.configured)return[];let t=[],n=(o,s)=>{let a=Gu(o);!a||t.some(l=>l.hostname===a.hostname)||t.push({...a,source:s})},r=String(e.subdomain||"").trim(),i=String(e.baseDomain||"").trim();r&&i&&n(`${r}.${i}`,"mach");for(let o of e.domains||[])String(o.environment||"production").toLowerCase()==="production"&&String(o.status||"").toLowerCase()==="active"&&n(o.hostname,"custom-domain");return t}var zu={".avif":"image/avif",".css":"text/css; charset=utf-8",".csv":"text/csv; charset=utf-8",".gif":"image/gif",".html":"text/html; charset=utf-8",".ico":"image/x-icon",".jpeg":"image/jpeg",".jpg":"image/jpeg",".js":"text/javascript; charset=utf-8",".json":"application/json; charset=utf-8",".map":"application/json; charset=utf-8",".mjs":"text/javascript; charset=utf-8",".png":"image/png",".svg":"image/svg+xml",".txt":"text/plain; charset=utf-8",".wasm":"application/wasm",".webmanifest":"application/manifest+json; charset=utf-8",".webp":"image/webp",".woff":"font/woff",".woff2":"font/woff2",".xml":"application/xml; charset=utf-8"},Wu=[".well-known/apple-app-site-association",".well-known/apple-app-site-association.json",".well-known/assetlinks.json","apple-app-site-association","apple-app-site-association.json"];function Vt(e){return e?.response?.data?.message||e?.message||"Unknown error"}function zt(e){let t=String(e.projectId||W()?.projectId||"").trim();if(!t)throw new Error(`${m.configFileName} is missing projectId. Run \`${m.nameLower} link\` or pass --project-id.`);return t}function oa(e){let t=String(e||"production").toLowerCase();if(t==="production"||t==="staging")return t;throw new Error("--alias must be production or staging.")}function Gi(e){return oa(e.alias||e.environment)}function Ku(e){let t=e.alias||e.environment?Gi(e):void 0,n=String(e.profile||"").trim();if(!n)return{environment:t||"production",output:e.output};let r=W();if(!r)throw new Error(`No ${m.configFileName} found. A web --profile is resolved from the linked project configuration.`);let i=se(r,n);if(!i)throw new Error(`Build profile '${n}' was not found in ${m.configFileName}.`);let o=i.web?.alias,s=t||(o?oa(o):"production");return{name:n,environment:s,output:e.output||(typeof i.web?.output=="string"?i.web.output:void 0)}}function sa(e){return Pe.posix.basename(e)==="apple-app-site-association"?"application/json; charset=utf-8":zu[Pe.extname(e).toLowerCase()]||"application/octet-stream"}function aa(e){let t=Pe.posix.basename(e);return t==="index.html"||/\.html?$/i.test(e)?"public, max-age=0, must-revalidate":/\.(json|webmanifest|xml|map)$/i.test(e)?"public, max-age=300, must-revalidate":/(?:^|[._-])[a-f0-9]{8,}(?:[._-]|$)/i.test(t)?"public, max-age=31536000, immutable":"public, max-age=300, must-revalidate"}function Yu(e){let t=[],n=Pe.resolve(e);if(!Ot.existsSync(n)||!Ot.statSync(n).isDirectory())throw new Error(`Web output directory does not exist: ${n}`);let r=o=>{for(let s of Ot.readdirSync(o,{withFileTypes:!0})){if(s.name===".DS_Store"||s.name===".git")continue;let a=Pe.join(o,s.name);if(s.isDirectory())r(a);else if(s.isFile()){let l=Pe.relative(n,a).split(Pe.sep).join("/"),d=Ot.statSync(a);t.push({path:l,absolutePath:a,size:d.size,contentType:sa(l),cacheControl:aa(l)})}}};if(r(n),t.sort((o,s)=>o.path.localeCompare(s.path)),!t.some(o=>o.path==="index.html"))throw new Error(`No index.html found in ${n}. Pass the finished static web output directory.`);if(t.length>1e4)throw new Error("A web deployment can contain at most 10,000 files.");if(t.reduce((o,s)=>o+s.size,0)>1024*1024*1024)throw new Error("A web deployment can be at most 1 GB.");return t}function qu(e){let t=W(),n=t?.deepLinks?Gt(t,{cwd:process.cwd()}):null;if(!n?.baseUrl||!n.domain)return[];let r=String(n.web?.outputDir||"deep-links").trim();if(!r)return[];let i=Pe.resolve(e),o=Pe.resolve(r);return Xu(o,n),o===i?[]:Wu.flatMap(s=>{let a=Pe.join(o,s);return!Ot.existsSync(a)||!Ot.statSync(a).isFile()?[]:[{path:s,absolutePath:a,size:Ot.statSync(a).size,contentType:sa(s),cacheControl:aa(s)}]})}function Ju(e,t){let n=e?.applinks?.details;return Array.isArray(n)&&n.some(r=>r?.appID===t||Array.isArray(r?.appIDs)&&r.appIDs.includes(t))}function Xu(e,t){if(Bn(t)){let i=Pe.join(e,".well-known/apple-app-site-association"),o=mn(i),s=`${t.ios?.appleTeamId}.${t.ios?.bundleIdentifier}`;if(!o||!Ju(o,s))throw new Error(`Deep-link safety check failed: ${Pe.relative(process.cwd(),i)} is missing or does not contain ${s}. Run \`mach deeplink setup\` from this app folder before deploying.`);if(t.ios?.webCredentials&&!o.webcredentials?.apps?.includes(s))throw new Error(`Deep-link safety check failed: ${Pe.relative(process.cwd(),i)} is missing webcredentials for ${s}. Run \`mach deeplink setup\` from this app folder before deploying.`)}if(Bi(t)){let i=Pe.join(e,".well-known/assetlinks.json"),o=mn(i),s=t.android?.package;if(!(Array.isArray(o)?o.find(l=>l?.target?.package_name===s):void 0))throw new Error(`Deep-link safety check failed: ${Pe.relative(process.cwd(),i)} is missing ${s}. Run \`mach deeplink setup\` from this app folder before deploying.`)}}function Zu(e,t){if(!e?.domain)return;let n=xr(t);if(n.length!==0&&!n.some(r=>r.hostname===e.domain))throw new Error(`Deep-link safety check blocked this deployment: mach.config.json is configured for ${e.domain}, but the selected Mach project hosts ${n.map(r=>r.hostname).join(", ")}. Run the command from the intended app folder, or select that app's Mach project/configuration.`)}async function Qu(e){let t=W(),n=t?.deepLinks?Gt(t,{cwd:process.cwd()}):null;if(n?.domain)try{let r=await I.get(`/projects/${encodeURIComponent(e)}/web`,{timeout:15e3});Zu(n,r.data||{})}catch(r){if(String(r?.message||"").startsWith("Deep-link safety check blocked"))throw r}}function ep(e,t){let n=new Map(e.map(r=>[r.path,r]));return t.forEach(r=>n.set(r.path,r)),[...n.values()].sort((r,i)=>r.path.localeCompare(i.path))}function tp(e){let t=W(),n=ce(t?.framework);if(n==="expo"){let r=e.output||"dist";if(Hi("npx",["expo","export","--platform","web","--output-dir",r],{stdio:"inherit",shell:process.platform==="win32"}).status!==0)throw new Error("Expo web export failed.");return r}if(n==="flutter"){if(Hi("flutter",["build","web","--release"],{stdio:"inherit",shell:process.platform==="win32"}).status!==0)throw new Error("Flutter web build failed.");return e.output||"build/web"}throw new Error("Automatic web builds are available for Expo and Flutter. For React Native Web, run your web build first and pass --output <directory>.")}function np(){let e=r=>{let i=Hi("git",r,{encoding:"utf8",stdio:["ignore","pipe","ignore"]});return i.status===0?String(i.stdout||"").trim():""},t=e(["branch","--show-current"]),n=e(["rev-parse","--short","HEAD"]);return{branch:t||void 0,commit:n||void 0}}async function rp(e,t){let n=Ot.readFileSync(t.absolutePath);for(let r=1;r<=3;r+=1)try{await Vu.put(e,n,{headers:{"Content-Type":t.contentType,"Cache-Control":t.cacheControl},maxBodyLength:1/0,maxContentLength:1/0});return}catch(i){if(r===3)throw i;await new Promise(o=>setTimeout(o,r*500))}}async function ip(e,t,n){let i=(await I.post(`/projects/${encodeURIComponent(e)}/web/deployments/${encodeURIComponent(t)}/uploads`,{files:n.map(o=>({path:o.path,size:o.size,contentType:o.contentType,cacheControl:o.cacheControl}))})).data?.uploads||[];if(i.length!==n.length)throw new Error("Mach did not return upload URLs for every file.");for(let o=0;o<n.length;o+=6)await Promise.all(n.slice(o,o+6).map((s,a)=>rp(i[o+a].uploadUrl,s)))}async function la(e){try{ke();let t=zt(e);await Qu(t);let n=Ku(e),r=n.environment,i=e.build?tp({...e,output:n.output}):n.output;if(!i)throw new Error("Pass --output <directory>, or use --build for Expo or Flutter.");let o=qu(i),s=ep(Yu(i),o),a=s.reduce((p,h)=>p+h.size,0),l=np();console.log(pe.dim(`Uploading ${s.length} files (${Math.ceil(a/1024)} KB) from ${Pe.resolve(i)}${n.name?` \xB7 profile ${n.name}`:""}\u2026`)),o.length>0&&console.log(pe.dim(`Included ${o.length} generated deep-link association file${o.length===1?"":"s"}.`));let d=await I.post(`/projects/${encodeURIComponent(t)}/web/deployments`,{alias:r,fileCount:s.length,totalBytes:a,message:e.message,buildProfile:n.name,branch:l.branch,commit:l.commit}),c=d.data?.deployment?.deploymentId;if(!c)throw new Error("Mach did not create a deployment.");for(let p=0;p<s.length;p+=100){let h=s.slice(p,p+100);await ip(t,c,h),console.log(pe.dim(`Uploaded ${Math.min(p+h.length,s.length)}/${s.length} files`))}let f=(await I.post(`/projects/${encodeURIComponent(t)}/web/deployments/${encodeURIComponent(c)}/complete`)).data?.deploymentUrl||d.data?.deployment?.deploymentUrl;if(console.log(`${pe.green("Deployment ready:")} ${f}`),e.promote!==!1){let p=await I.post(`/projects/${encodeURIComponent(t)}/web/deployments/${encodeURIComponent(c)}/promote`,{alias:r});console.log(`${pe.green(`${r} is live:`)} ${p.data?.url}`)}else console.log(pe.yellow(`Not promoted. Run \`${m.nameLower} web promote ${c} --alias ${r}\` when ready.`))}catch(t){console.error(pe.red(`Web deploy failed: ${Vt(t)}`)),process.exitCode=1}}async function ca(e){try{ke();let t=zt(e),r=(await I.get(`/projects/${encodeURIComponent(t)}/web`)).data||{};if(!r.configured){console.log(pe.yellow("Mach Web Hosting is not configured by the operator yet."));return}console.log(`${pe.bold("Base domain:")} ${r.baseDomain}`),console.log(`${pe.bold("Web address:")} ${r.subdomain||r.projectSlug||"not configured"}.${r.baseDomain||""}`);for(let i of["production","staging"]){let o=r.aliases?.[i];console.log(`${i}: ${o?.url||pe.dim("not deployed")}`)}r.domains?.length&&(console.log(`
|
|
12
|
+
Custom domains:`),r.domains.forEach(i=>console.log(` ${i.hostname} (${i.status||"pending"})`)))}catch(t){console.error(pe.red(`Could not get web hosting status: ${Vt(t)}`)),process.exitCode=1}}async function da(e){try{ke();let t=zt(e),r=(await I.get(`/projects/${encodeURIComponent(t)}/web`)).data?.deployments||[];if(!r.length){console.log("No web deployments yet.");return}r.forEach(i=>{let o=i.createdAt?new Date(i.createdAt).toLocaleString():"";console.log(`${i.deploymentId} ${i.status} ${i.environment} ${o}`)})}catch(t){console.error(pe.red(`Could not list web deployments: ${Vt(t)}`)),process.exitCode=1}}async function ua(e,t){try{ke();let n=zt(t),r=Gi(t),i=await I.post(`/projects/${encodeURIComponent(n)}/web/deployments/${encodeURIComponent(e)}/promote`,{alias:r});console.log(`${pe.green(`${r} is live:`)} ${i.data?.url}`)}catch(n){console.error(pe.red(`Could not promote web deployment: ${Vt(n)}`)),process.exitCode=1}}async function pa(e){try{ke();let t=zt(e),n=Gi(e),r=await I.post(`/projects/${encodeURIComponent(t)}/web/rollback`,{alias:n,deploymentId:e.deployment});console.log(`${pe.green(`Rolled ${n} back to ${r.data?.deploymentId}:`)} ${r.data?.url}`)}catch(t){console.error(pe.red(`Could not roll back web deployment: ${Vt(t)}`)),process.exitCode=1}}async function fa(e){try{ke();let t=String(e.domain||"").trim().toLowerCase();if(!t)throw new Error("Pass --domain <hostname>, for example www.example.com.");let n=zt(e),i=(await I.post(`/projects/${encodeURIComponent(n)}/web/domains`,{hostname:t,alias:"production"})).data?.domain;console.log(`${pe.green("Domain requested:")} ${i?.hostname||t}`),console.log(`Create a CNAME: ${t} \u2192 ${i?.cnameTarget||"the Mach customer CNAME target shown in the dashboard"}`),console.log("Then run `mach web status` to see Cloudflare certificate status.")}catch(t){console.error(pe.red(`Could not add custom domain: ${Vt(t)}`)),process.exitCode=1}}async function ma(e,t){try{ke();let n=zt(t);await I.delete(`/projects/${encodeURIComponent(n)}/web/domains/${encodeURIComponent(e)}`),console.log(`${pe.green("Removed custom domain:")} ${e}`)}catch(n){console.error(pe.red(`Could not remove custom domain: ${Vt(n)}`)),process.exitCode=1}}import op from"fs";import ba from"path";import{spawnSync as sp}from"child_process";import{createRequire as ap}from"module";import ga from"chalk";var lp=new Set(["chromium","firefox","webkit"]);function Aa(e){let t=ba.join(e,"node_modules",".bin",process.platform==="win32"?"playwright.cmd":"playwright");return op.existsSync(t)?t:void 0}function cp(e){try{return ap(ba.join(e,"package.json")).resolve("@playwright/test/package.json"),!0}catch{return!1}}function dp(e){let t=Aa(e);return t?{command:t,prefixArgs:[]}:{command:process.platform==="win32"?"npx.cmd":"npx",prefixArgs:["--no-install","playwright"]}}function ha(e,t){if(e===void 0||e==="")return;let n=String(e).trim();if(!/^\d+$/.test(n))throw new Error(`${t} must be a non-negative whole number.`);return n}function up(e){let t=["test"],n=String(e.config||"").trim(),r=String(e.project||"").trim(),i=String(e.grep||"").trim(),o=String(e.trace||"").trim(),s=ha(e.workers,"--workers"),a=ha(e.retries,"--retries");return n&&t.push("--config",n),r&&t.push("--project",r),i&&t.push("--grep",i),e.headed&&t.push("--headed"),e.ui&&t.push("--ui"),e.debug&&t.push("--debug"),s!==void 0&&t.push("--workers",s),a!==void 0&&t.push("--retries",a),o&&t.push("--trace",o),Array.isArray(e.testFiles)&&t.push(...e.testFiles.filter(Boolean)),t}function pp(e){let t=String(e||"").trim().toLowerCase();if(!lp.has(t))throw new Error("--install-browser must be one of: chromium, firefox, webkit.");return t}function Vi(e){return[`Playwright was not found in ${e}.`,"Install it in this web project, then install the browser you need:"," npm install --save-dev @playwright/test"," npx playwright install chromium","",`${m.name} never downloads a browser or sends your test source, reports, screenshots, traces, or environment variables to its servers.`].join(`
|
|
13
|
+
`)}function ya(e,t,n,r){return sp(e.command,[...e.prefixArgs,...t],{cwd:n,env:r,stdio:"inherit"})}async function Sa(e){let t=process.cwd();if(!Aa(t)&&!cp(t))throw new Error(Vi(t));let n=dp(t),r={...process.env,...String(e.baseUrl||"").trim()?{PLAYWRIGHT_BASE_URL:String(e.baseUrl).trim()}:{}};if(e.installBrowser!==void 0){let s=pp(e.installBrowser);console.log(ga.cyan(`Installing Playwright ${s} locally for this machine...`));let a=ya(n,["install",s],t,r);if(a.error&&a.error.code==="ENOENT")throw new Error(Vi(t));if(a.status!==0){process.exitCode=a.status||1;return}}let i=up(e);console.log(ga.dim("Running Playwright locally. No Mach test runner, artifact upload, or test-run charge is used."));let o=ya(n,i,t,r);if(o.error&&o.error.code==="ENOENT")throw new Error(Vi(t));o.status!==0&&(process.exitCode=o.status||1)}import{readdir as fp,writeFile as mp,access as gp,mkdir as hp}from"fs/promises";import{join as Ea}from"path";import{spinner as yp,text as Ia,isCancel as _a,cancel as zi,note as bp,outro as Ap}from"@clack/prompts";import Sp from"chalk";async function Ep(){let e=["./app","./src/app"];for(let t of e)try{return await gp(t),t}catch{}return null}async function wa(e){try{let t=W(),n=ce(t?.framework);if(n&&n!=="expo")throw new Error(`\`${m.nameLower} sitemap\` scans Expo Router files and is not available for ${n}. Use your framework web router or a dedicated sitemap generator instead.`);let i=await Ep()||"./app",o=await Ia({message:"Enter path to your app directory:",placeholder:i,initialValue:i,validate(f){if(f.length===0)return"Path is required"}});_a(o)&&(zi("Operation cancelled."),process.exit(0));let s=await Ia({message:"Enter your website base URL:",placeholder:"https://example.com",validate(f){if(f.length===0)return"Base URL is required";if(!f.startsWith("http"))return"URL must start with http:// or https://"}});_a(s)&&(zi("Operation cancelled."),process.exit(0));let a=yp();a.start("Scanning app directory for routes...");let l=await va(o);a.stop(`Found ${l.length} routes`);let d=Ip(l,s),c=e.output||"./public/sitemap.xml";a.start(`Writing sitemap to ${c}...`);let u=c.substring(0,c.lastIndexOf("/"));if(u)try{await hp(u,{recursive:!0})}catch{}await mp(c,d,"utf-8"),a.stop("Sitemap generated successfully!"),bp(`Routes included:
|
|
13
14
|
${l.map(f=>` \u2022 ${f.path}`).join(`
|
|
14
|
-
`)}`,"Sitemap Summary"),
|
|
15
|
+
`)}`,"Sitemap Summary"),Ap(`Sitemap saved to ${Sp.cyan(c)}`)}catch(t){zi(`An error occurred: ${t.message}`)}}async function va(e,t=""){let n=[];try{let r=await fp(e,{withFileTypes:!0});for(let i of r){let o=Ea(e,i.name);if(!(i.name.startsWith("_")||i.name.startsWith("."))){if(i.isDirectory()){let s=await va(o,Ea(t,i.name));n.push(...s)}else if(i.isFile()){if(i.name==="index.tsx"||i.name==="index.ts"||i.name==="index.jsx"||i.name==="index.js"){let s=t===""?"/":`/${t}`;n.push({path:s,file:o})}else if(i.name.match(/\.(tsx|ts|jsx|js)$/)&&!i.name.includes("_layout")&&!i.name.includes("+")){let s=i.name.replace(/\.(tsx|ts|jsx|js)$/,""),a=`/${t}/${s}`.replace(/\/+/g,"/");n.push({path:a,file:o})}}}}}catch(r){throw new Error(`Failed to scan directory ${e}: ${r.message}`)}return n}function Ip(e,t){let n=new Date().toISOString().split("T")[0];return`<?xml version="1.0" encoding="UTF-8"?>
|
|
15
16
|
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
|
|
16
17
|
${e.map(i=>{let o=i.path;return o=o.replace(/\/\([^)]+\)/g,""),o=o.replace(/\/\[.*?\]/g,"/:id"),o=o.replace(/\/+/g,"/"),o===""&&(o="/"),` <url>
|
|
17
18
|
<loc>${t}${o}</loc>
|
|
@@ -20,7 +21,7 @@ ${e.map(i=>{let o=i.path;return o=o.replace(/\/\([^)]+\)/g,""),o=o.replace(/\/\[
|
|
|
20
21
|
<priority>0.8</priority>
|
|
21
22
|
</url>`}).join(`
|
|
22
23
|
`)}
|
|
23
|
-
</urlset>`}import{randomUUID as
|
|
24
|
+
</urlset>`}import{randomUUID as _m}from"crypto";import fe from"path";import zr from"axios";import Ll from"os";import{spinner as Io,select as Sl,confirm as El,isCancel as Wr,cancel as Il,log as _}from"@clack/prompts";import w from"chalk";import Z from"fs";import{execSync as _l}from"child_process";import wl from"adm-zip";import{spinner as _p,log as Mr}from"@clack/prompts";import $a from"chalk";import Pa from"fs";import Oa from"path";var Ra=`#!/bin/bash
|
|
24
25
|
# --- Mach Cloud Build Script (Android) ---
|
|
25
26
|
# All S3 operations use presigned URLs via curl \u2014 zero AWS credentials on instance.
|
|
26
27
|
BUILD_ID="{{BUILD_ID}}"
|
|
@@ -918,26 +919,26 @@ for pid in "\${cache_pids[@]}"; do wait "$pid" || true; done
|
|
|
918
919
|
echo "Build orchestrator finished. Auto-terminating instance in 5 seconds..."
|
|
919
920
|
sleep 5
|
|
920
921
|
sudo shutdown -h now
|
|
921
|
-
`;var
|
|
922
|
-
`):"",h;if(i){let v=
|
|
923
|
-
export MACH_APP_NAME="${
|
|
924
|
-
export MACH_BUILD_PROFILE="${
|
|
925
|
-
export MACH_FRAMEWORK="${
|
|
926
|
-
export MACH_ANDROID_RELEASE_ABIS="${
|
|
922
|
+
`;var We=e=>e.replace(/\\/g,"\\\\").replace(/"/g,'\\"').replace(/\$/g,"\\$").replace(/`/g,"\\`"),ct=(e,t,n)=>e.replace(t,()=>n),Wi=e=>["1","true","yes","on"].includes(String(e||"").trim().toLowerCase()),wp=(e,t,n)=>{let r=n.MACH_ANDROID_RELEASE_ABIS||n.MACH_ANDROID_ABIS||n.MACH_PROFILE_ANDROID_RELEASE_ABIS||n.MACH_PROFILE_ANDROID_ABIS||n.MACH_PROFILE_ANDROID_ARCHITECTURES||n.MACH_PROFILE_ANDROID_REACT_NATIVE_ARCHITECTURES;return r||(!!e.maestro||Wi(n.MACH_PROFILE_ANDROID_EMULATOR)||Wi(n.MACH_ANDROID_INCLUDE_EMULATOR_ABIS)||Wi(n.MACH_PROFILE_ANDROID_INCLUDE_EMULATOR_ABIS)?"armeabi-v7a,arm64-v8a,x86_64":"armeabi-v7a,arm64-v8a")},Da=async(e,t,n={},r,i)=>{let o=_p(),s=wr(e.framework),a=e.buildProfile||"production",l=e.apk===!0,d=e.developmentClient?"assembleDebug":e.distribution==="store"?"bundleRelease":"assembleRelease",c=e.buildCommand||(l?"assembleRelease":d),u=e.platform==="web"?"web":e.apk===!0?"apk":e.apk===!1||e.distribution==="store"?"appbundle":"apk",f=(e.flutterDartDefinesFromEnv||[]).map(v=>{if(n[v]===void 0)throw new Error(`Flutter compile-time value ${v} is required by dartDefinesFromEnv but is not defined.`);return v}).join(","),p=e.framework!=="flutter"&&e.nodeVersion?[`echo "[NODE] Switching to Node ${e.nodeVersion}..."`,`CURRENT_MAJOR=$(node -e "process.stdout.write(process.version.split('.')[0].replace('v',''))" 2>/dev/null || echo "0")`,`if [ "$CURRENT_MAJOR" != "${e.nodeVersion}" ]; then`,` curl -fsSL https://deb.nodesource.com/setup_${e.nodeVersion}.x | bash - 2>&1`," apt-get install -y nodejs 2>&1",' echo "[NODE] Installed Node $(node -v)"',"else",' echo "[NODE] Already on Node $(node -v) \u2014 no switch needed"',"fi"].join(`
|
|
923
|
+
`):"",h;if(i){let v=Oa.isAbsolute(i)?i:Oa.resolve(process.cwd(),i);Pa.existsSync(v)?(h=Pa.readFileSync(v,"utf-8"),Mr.info($a.magenta(`\u2713 Loaded preBuild hook: ${i}`))):Mr.warn(`preBuild script not found at ${v} \u2014 skipping`)}let g=wp(e,a,n),y={...vr(n,a,e),MACH_ANDROID_RELEASE_ABIS:g},b=Rr(y),A=ct(ct(ct(ct(Ra,/\{\{BUILD_ID\}\}/g,t),/\{\{BUILD_COMMAND\}\}/g,c),"{{NODE_VERSION_SETUP}}",p),"{{ENV_VARS}}",`
|
|
924
|
+
export MACH_APP_NAME="${We(y.MACH_APP_NAME)}"
|
|
925
|
+
export MACH_BUILD_PROFILE="${We(a)}"
|
|
926
|
+
export MACH_FRAMEWORK="${We(s.id)}"
|
|
927
|
+
export MACH_ANDROID_RELEASE_ABIS="${We(g)}"
|
|
927
928
|
export MACH_ENV_FINGERPRINT="${b}"
|
|
928
|
-
export MACH_FLUTTER_ARTIFACT="${
|
|
929
|
-
export MACH_FLUTTER_FLAVOR="${
|
|
930
|
-
export MACH_FLUTTER_TARGET="${
|
|
931
|
-
export MACH_FLUTTER_MODE="${
|
|
932
|
-
export MACH_FLUTTER_BUILD_NAME="${
|
|
933
|
-
export MACH_FLUTTER_SDK_VERSION="${
|
|
934
|
-
export MACH_FLUTTER_DART_DEFINE_KEYS="${
|
|
929
|
+
export MACH_FLUTTER_ARTIFACT="${We(u)}"
|
|
930
|
+
export MACH_FLUTTER_FLAVOR="${We(e.flutterFlavor||"")}"
|
|
931
|
+
export MACH_FLUTTER_TARGET="${We(e.flutterTarget||"lib/main.dart")}"
|
|
932
|
+
export MACH_FLUTTER_MODE="${We(e.flutterMode||"release")}"
|
|
933
|
+
export MACH_FLUTTER_BUILD_NAME="${We(e.appVersion||"")}"
|
|
934
|
+
export MACH_FLUTTER_SDK_VERSION="${We(e.flutterSdkVersion||"")}"
|
|
935
|
+
export MACH_FLUTTER_DART_DEFINE_KEYS="${We(f)}"
|
|
935
936
|
export MACH_FLUTTER_OBFUSCATE="${e.flutterObfuscate?"1":"0"}"
|
|
936
937
|
export MACH_FLUTTER_SPLIT_DEBUG_INFO="${e.flutterSplitDebugInfo?"1":"0"}"
|
|
937
938
|
export MACH_FLUTTER_SPLIT_DEBUG_INFO_PATH=""
|
|
938
939
|
{{ENV_VARS}}
|
|
939
|
-
export MACH_APP_DIRECTORY="${
|
|
940
|
-
`);if(A=ct(A,"{{FRAMEWORK_ENV_SETUP}}",s.remoteEnvSetupScript().trim()),A=ct(A,"{{FRAMEWORK_ANDROID_VERSION_CODE}}",s.androidRemoteVersionCodeScript().trim()),A=ct(A,"{{ANDROID_VERSION_CODE_INIT_SCRIPT}}",Ds.trim()),A=ct(A,"{{FRAMEWORK_ANDROID_PREBUILD}}",s.androidRemotePrebuildScript().trim()),A=ct(A,"{{FRAMEWORK_ANDROID_GRADLE_PROPERTIES}}",s.androidRemoteGradlePropertiesScript().trim()),A=ct(A,"{{FRAMEWORK_ANDROID_RELEASE_GRADLE_PROPERTIES}}",s.androidRemoteReleaseGradlePropertiesScript().trim()),e.dryRun){
|
|
940
|
+
export MACH_APP_DIRECTORY="${We(e.appDirectory||".")}"
|
|
941
|
+
`);if(A=ct(A,"{{FRAMEWORK_ENV_SETUP}}",s.remoteEnvSetupScript().trim()),A=ct(A,"{{FRAMEWORK_ANDROID_VERSION_CODE}}",s.androidRemoteVersionCodeScript().trim()),A=ct(A,"{{ANDROID_VERSION_CODE_INIT_SCRIPT}}",Ds.trim()),A=ct(A,"{{FRAMEWORK_ANDROID_PREBUILD}}",s.androidRemotePrebuildScript().trim()),A=ct(A,"{{FRAMEWORK_ANDROID_GRADLE_PROPERTIES}}",s.androidRemoteGradlePropertiesScript().trim()),A=ct(A,"{{FRAMEWORK_ANDROID_RELEASE_GRADLE_PROPERTIES}}",s.androidRemoteReleaseGradlePropertiesScript().trim()),e.dryRun){Mr.info("User Data Script (dry run):"),console.log(A);return}o.start("Requesting cloud build instance...");try{let v=await I.post("/builds/launch-android",{projectId:r,buildId:t,platform:e.platform,buildProfile:e.buildProfile,buildCommand:c,instanceType:e.instanceType,ami:e.ami,keepInstance:e.keepInstance,region:e.region,subnet:e.subnet,securityGroup:e.securityGroup,projectSecrets:n,dryRun:e.dryRun,userDataScript:A,preBuildScriptContent:h});if(v.data.status!=="success")throw new Error(v.data.message||"Failed to launch build instance");let E=v.data.instanceId;return o.stop("Build Started"),Mr.success($a.green(`Build initiated on cloud instance (${E}).`)),{instanceId:E}}catch(v){o.stop(e.platform==="web"?"Web Build Failed":"Android Build Failed");let E=v.response?.data?.message||v.message;throw new Error(`Failed to launch ${e.platform==="web"?"Flutter web":"Android"} build: ${E}`)}};import{spinner as vp,log as Wt}from"@clack/prompts";import gt from"chalk";import Rp from"fs";import{execSync as Hn}from"child_process";var Ca=`#!/bin/bash
|
|
941
942
|
# --- Mach Cloud Build Script (iOS) ---
|
|
942
943
|
# All S3 operations use presigned URLs via curl \u2014 zero AWS credentials on Mac.
|
|
943
944
|
|
|
@@ -2122,64 +2123,68 @@ touch done
|
|
|
2122
2123
|
if [ ! -z "$PRESIGNED_DONE_MARKER" ]; then
|
|
2123
2124
|
curl -X PUT -T done "$PRESIGNED_DONE_MARKER" --silent
|
|
2124
2125
|
fi
|
|
2125
|
-
`;var nt=e=>e.replace(/\\/g,"\\\\").replace(/"/g,'\\"').replace(/\$/g,"\\$").replace(/`/g,"\\`"),
|
|
2126
|
-
`:
|
|
2126
|
+
`;var nt=e=>e.replace(/\\/g,"\\\\").replace(/"/g,'\\"').replace(/\$/g,"\\$").replace(/`/g,"\\`"),Ta=async(e,t,n={},r)=>{let i=vp(),o=wr(e.framework);e.sshHost||(e.sshHost="localhost",Wt.message(gt.yellow("No SSH host provided, defaulting to localhost."))),i.start(`Connecting to remote Mac at ${gt.cyan(e.sshHost)}...`);let s=e.sshUser||process.env.USER||"ubuntu",a=e.sshKey,l=`${s}@${e.sshHost}`,d=`ssh ${a?`-i ${a}`:""} -o StrictHostKeyChecking=no ${l}`,c=`scp ${a?`-i ${a}`:""} -o StrictHostKeyChecking=no`;try{let u=s==="ubuntu"?"/home/ubuntu":`/Users/${s}`,f=(n.PROJECT_ID||"default_project").replace(/[^a-zA-Z0-9-_]/g,"_"),p=`${u}/${m.remoteWorkspacesDir}/${f}`;i.message(`Preparing stable workspace: ${p}...`),Hn(`${d} "mkdir -p ${p}"`,{stdio:"inherit"}),i.message("Transferring source code...");let h=`/tmp/${m.nameLower}-source-${t}.zip`;Hn(`${c} ${h} ${l}:${p}/source.zip`,{stdio:"inherit"});let g=e.iosApiKeyPath?`${p}/api_key.p8`:"",y="";e.iosApiKeyPath&&(i.message("Uploading App Store Connect API key..."),Hn(`${c} ${e.iosApiKeyPath} ${l}:${g}`),e.iosApiKeyId&&e.iosApiKeyIssuer&&(y=`-authenticationKeyID ${e.iosApiKeyId} -authenticationKeyIssuerID ${e.iosApiKeyIssuer} -authenticationKeyPath ${g}`));let b={};if(r)try{let D=!!(n.IOS_DIST_P12&&(n.IOS_PROVISIONING_PROFILE||n.IOS_PROVISIONING_PROFILES)),R=await I.post(`/builds/${r}/${t}/build-urls`,{platform:"ios",includeCredentials:!D});R.data.status==="success"&&(b=R.data.urls)}catch(D){Wt.warn(gt.yellow(`Could not fetch build URLs: ${D.message}`))}let A="";if(b.credentials&&b.credentials.length>0)for(let D of b.credentials)D.type==="p12"?A+=`curl -sf -o "$CERT_DIR/${D.name}" "${D.downloadUrl}" || true
|
|
2127
|
+
`:D.type==="mobileprovision"&&(A+=`curl -sf -o "$PROV_TEMP/${D.name}" "${D.downloadUrl}" || true
|
|
2127
2128
|
`);i.message("Generating macOS build script...");let v=process.env.CODEARTIFACT_AUTH_TOKEN?`export CODEARTIFACT_AUTH_TOKEN="${process.env.CODEARTIFACT_AUTH_TOKEN}"
|
|
2128
|
-
`:"";if(n)for(let[R
|
|
2129
|
-
`}let E=e.buildProfile||"production",L=vr(n,E,e),U=Rr(L),j=e.flutterDartDefinesFromEnv||[];for(let
|
|
2129
|
+
`:"";if(n)for(let[D,R]of Object.entries(n)){let $=R.replace(/"/g,'\\"').replace(/\$/g,"\\$").replace(/`/g,"\\`");v+=`export ${D}="${$}"
|
|
2130
|
+
`}let E=e.buildProfile||"production",L=vr(n,E,e),U=Rr(L),j=e.flutterDartDefinesFromEnv||[];for(let D of j)if(n[D]===void 0)throw new Error(`Flutter compile-time value ${D} is required by dartDefinesFromEnv but is not defined.`);Wt.info(gt.dim(`iOS remote build config: simulator=${String(!!e.simulator)}, configuration=${e.iosConfiguration||"Release"}, scheme=${e.iosScheme||"auto"}`));let H=[v,r?`export MACH_PROJECT_ID="${nt(r)}"`:"",`export MACH_BUILD_ID="${nt(t)}"`,I.defaults.baseURL?`export MACH_API_URL="${nt(String(I.defaults.baseURL).replace(/\/$/,""))}"`:"",b.logUpload?`export PRESIGNED_LOG_UPLOAD="${b.logUpload}"`:"",b.doneMarker?`export PRESIGNED_DONE_MARKER="${b.doneMarker}"`:"",b.cacheDerivedDataDownload?`export PRESIGNED_CACHE_DD_DOWNLOAD="${b.cacheDerivedDataDownload}"`:"",b.cacheDerivedDataUpload?`export PRESIGNED_CACHE_DD_UPLOAD="${b.cacheDerivedDataUpload}"`:"",b.cacheNodeModulesDownload?`export PRESIGNED_CACHE_NODE_DOWNLOAD="${b.cacheNodeModulesDownload}"`:"",b.cacheNodeModulesUpload?`export PRESIGNED_CACHE_NODE_UPLOAD="${b.cacheNodeModulesUpload}"`:"",b.cachePodsDownload?`export PRESIGNED_CACHE_PODS_DOWNLOAD="${b.cachePodsDownload}"`:"",b.cachePodsUpload?`export PRESIGNED_CACHE_PODS_UPLOAD="${b.cachePodsUpload}"`:"",b.cachePubDownload?`export PRESIGNED_CACHE_PUB_DOWNLOAD="${b.cachePubDownload}"`:"",b.cachePubUpload?`export PRESIGNED_CACHE_PUB_UPLOAD="${b.cachePubUpload}"`:"",b.artifactIpaUpload?`export PRESIGNED_ARTIFACT_IPA_UPLOAD="${b.artifactIpaUpload}"`:"",b.artifactAppZipUpload?`export PRESIGNED_ARTIFACT_APP_ZIP_UPLOAD="${b.artifactAppZipUpload}"`:"",b.flutterSymbolsUpload?`export PRESIGNED_FLUTTER_SYMBOLS_UPLOAD="${b.flutterSymbolsUpload}"`:"",`export BUILD_ID="${t}"`,`export MACH_BUILD_PROFILE="${nt(E)}"`,`export MACH_APP_NAME="${nt(L.MACH_APP_NAME)}"`,`export MACH_ENV_FINGERPRINT="${U}"`,e.framework==="flutter"?`export MACH_FLUTTER_FLAVOR="${nt(e.flutterFlavor||"")}"`:"",e.framework==="flutter"?`export MACH_FLUTTER_TARGET="${nt(e.flutterTarget||"lib/main.dart")}"`:"",e.framework==="flutter"?`export MACH_FLUTTER_MODE="${nt(e.flutterMode||"release")}"`:"",e.framework==="flutter"?`export MACH_FLUTTER_SIMULATOR="${e.simulator?"1":"0"}"`:"",e.framework==="flutter"?`export MACH_FLUTTER_BUILD_NAME="${nt(e.appVersion||"")}"`:"",e.framework==="flutter"?`export MACH_FLUTTER_SDK_VERSION="${nt(e.flutterSdkVersion||"")}"`:"",e.framework==="flutter"?`export MACH_FLUTTER_DART_DEFINE_KEYS="${nt(j.join(","))}"`:"",e.framework==="flutter"?`export MACH_FLUTTER_OBFUSCATE="${e.flutterObfuscate?"1":"0"}"`:"",e.framework==="flutter"?`export MACH_FLUTTER_SPLIT_DEBUG_INFO="${e.flutterSplitDebugInfo?"1":"0"}"`:"",o.remoteEnvSetupScript().trim(),`export ${m.envPrefix}PROJECT_ID="${f}"`,n.MATCH_ENCRYPTION_PASSPHRASE?`export MATCH_PASSWORD="${n.MATCH_ENCRYPTION_PASSPHRASE}"`:"",n.APPLE_TEAM_ID?`export FASTLANE_TEAM_ID="${n.APPLE_TEAM_ID}"`:"",`export MATCH_KEYCHAIN_NAME="${m.credentialsKeychain}"`,`export MATCH_KEYCHAIN_PASSWORD="${m.keychainPassword}"`].filter(Boolean).join(`
|
|
2130
2131
|
`),te=e.framework!=="flutter"&&e.nodeVersion?[`echo "[NODE] Switching to Node ${e.nodeVersion}..."`,'export NVM_DIR="$HOME/.nvm"','[ -s "$NVM_DIR/nvm.sh" ] && . "$NVM_DIR/nvm.sh" --no-use',`nvm install ${e.nodeVersion} 2>/dev/null || true`,`nvm use ${e.nodeVersion} --silent`,`export PATH="$NVM_DIR/versions/node/$(nvm version ${e.nodeVersion})/bin:$PATH"`,'echo "[NODE] Now using: $(node -v) at $(which node)"'].join(`
|
|
2131
|
-
`):"",ie=
|
|
2132
|
-
${gt.yellow(
|
|
2133
|
-
${gt.cyan(
|
|
2134
|
-
${gt.dim("Note: Links are valid for 7 days.")}`)}else
|
|
2132
|
+
`):"",ie=Ca,Ce={"{{REMOTE_DIR}}":p,"{{APP_DIRECTORY}}":e.appDirectory||".","{{ENV_VARS}}":H,"{{CREDENTIAL_DOWNLOADS}}":A,"{{IOS_SCHEME}}":e.iosScheme||"","{{IOS_CONFIG}}":e.iosConfiguration||"Release","{{TEAM_ID}}":e.iosTeamId||"","{{AUTH_PARAMS}}":y,"{{IS_SIMULATOR}}":e.simulator?"true":"false","{{BUILD_ID}}":t,"{{EXPORT_METHOD}}":e.iosExportMethod||"ad-hoc","{{NODE_VERSION_SETUP}}":te,"{{FRAMEWORK_PREBUILD}}":o.iosRemotePrebuildScript().trim()};Object.entries(Ce).forEach(([D,R])=>{ie=ie.split(D).join(R)});let S=`/tmp/${m.nameLower}-mac-build-${t}.sh`;if(Rp.writeFileSync(S,ie),Hn(`${c} ${S} ${l}:${p}/build.sh`),i.stop("Remote script uploaded."),Wt.info(gt.cyan("Executing remote build. This might take a while...")),Hn(`${d} "bash ${p}/build.sh"`,{stdio:"inherit"}),i.stop("Remote build finished!"),r){i.start("Fetching artifact links...");try{let R=(await I.get(`/builds/${r}/${t}/artifacts`)).data.artifacts||[],$=e.simulator===!0;if(R.length===0&&!$)throw i.stop("Build Failed!"),new Error("Build completed but no artifacts were generated. Check build logs for errors.");if(i.stop("Build Successful!"),R.length>0){Wt.success("Build Artifacts Ready:");for(let k of R)console.log(`
|
|
2133
|
+
${gt.yellow(k.name)}:
|
|
2134
|
+
${gt.cyan(k.downloadUrl)}`);console.log(`
|
|
2135
|
+
${gt.dim("Note: Links are valid for 7 days.")}`)}else $&&Wt.warn("Simulator build completed. No artifacts uploaded.")}catch(D){i.stop("Could not fetch artifacts"),Wt.warn(gt.yellow(`Artifact listing failed: ${D.message}`))}}}catch(u){throw i.stop("iOS Build Failed"),u}};import O from"fs";import hn from"os";import x from"path";import{spawn as Ha,spawnSync as dt}from"child_process";import{randomUUID as $p}from"crypto";import{pipeline as Pp}from"stream/promises";import{isCancel as qi,log as T,select as Ga,spinner as Gn,text as Op}from"@clack/prompts";import yn from"axios";import N from"chalk";import Fr from"adm-zip";var Dp={android:"pixel_6",ios:"iphone_17_pro"};function ka(e){return Dp[e]}async function Va(e){if(e.localRunner){let n=await Fp(e);process.exitCode=n?n.exitCode:1;return}if(e.local){let n=await Up(e);n&&(process.exitCode=n.exitCode);return}let t=await Qi(e);if(t&&(T.success(N.green(`Maestro run ${t.status||"queued"}: ${t.testRunId}`)),t.launchDeferredReason&&T.warn(N.yellow(t.launchDeferredReason)),t.dashboardUrl&&T.info(N.dim("View test run: ")+N.white.underline(t.dashboardUrl)),e.wait)){let n=await jp(e,t);n&&(process.exitCode=n.status==="passed"?0:1)}}async function za(e){let t=String(e.platform||"").trim().toLowerCase();if(t&&t!=="android"&&t!=="ios"){T.error(N.red("--platform must be android or ios.")),process.exitCode=1;return}try{let n=await I.get("/tests/maestro/devices",{...t?{params:{platform:t}}:{}}),r=Array.isArray(n.data?.devices)?n.data.devices:[];if(e.json){console.log(JSON.stringify({devices:r},null,2));return}if(r.length===0){T.warn(N.yellow("No managed Maestro devices are currently available."));return}console.log(`
|
|
2135
2136
|
Available managed Maestro devices:`);for(let i of r){let o=[i.platform==="ios"?"iOS":"Android",i.osVersion,i.isDefault?"default":""].filter(Boolean).join(" \xB7 ");console.log(` ${i.id.padEnd(20)} ${i.label}${o?` (${o})`:""}`)}console.log(`
|
|
2136
|
-
Use a profile with: mach maestro --maestro-device <id> ...`)}catch(n){let r=n.response?.data?.message||n.message||"Unknown error";T.error(
|
|
2137
|
+
Use a profile with: mach maestro --maestro-device <id> ...`)}catch(n){let r=n.response?.data?.message||n.message||"Unknown error";T.error(N.red(`Could not list Maestro devices: ${r}`)),process.exitCode=1}}var Cp=new Set(["passed","failed","cancelled","interrupted"]),Na=Number(process.env.MACH_FLOW_UPLOAD_MAX_ATTEMPTS||4),Tp=Number(process.env.MACH_FLOW_UPLOAD_TIMEOUT_MS||12e4),Wa=process.env.MACH_MAESTRO_FAST_FAIL_RETRY==="1",kp={".png":"image/png",".jpg":"image/jpeg",".jpeg":"image/jpeg",".webp":"image/webp",".gif":"image/gif",".mp4":"video/mp4",".mov":"video/quicktime",".webm":"video/webm",".m4v":"video/x-m4v"},Np=250,xp=2*1024*1024*1024;function Zi(e){let t=Array.isArray(e)?e:e?[e]:[];return[...new Set(t.flatMap(n=>String(n||"").split(",")).map(n=>n.trim()).filter(Boolean))]}function Mp(e){let t=Zi(e);if(t.length===0)return;let n={};for(let r of t){let i=process.env[r];i!==void 0&&(n[r]=i)}return Object.keys(n).length>0?n:void 0}function Lp(e){let t={};for(let[r,i]of Object.entries(process.env))r.startsWith("MAESTRO_TEST_")&&i!==void 0&&(t[r]=i);let n=Zi(e);for(let r of n){let i=process.env[r];i!==void 0&&(t[r]=i)}return t}async function Fp(e){let t=e.projectId,n=e.testRunId,r=e.runnerToken||process.env.MACH_RUNNER_TOKEN||process.env.MACH_TOKEN,i=(process.env.MACH_API_URL||wt).replace(/\/$/,""),o=O.mkdtempSync(x.join(hn.tmpdir(),"mach-maestro-runner-")),s=x.join(o,"mach-maestro-output"),a=x.join(o,"runner.log");if(O.mkdirSync(s,{recursive:!0}),!t||!n||!r)return T.error(N.red("--local-runner requires --project-id, --test-run-id, and a runner token.")),{status:"failed",exitCode:1,attempts:0,flows:".maestro",platform:e.platform};let l=null,d=null,c=null,u,f,p=g=>{O.appendFileSync(a,`${g}${g.endsWith(`
|
|
2137
2138
|
`)?"":`
|
|
2138
|
-
`}`)},h=async(g,y)=>{try{await Hn.post(`${i}/internal/tests/${encodeURIComponent(n)}/runner`,{projectId:t,runnerToken:r,status:g,error:y,logPreview:Dp(a),device:f,junitUrl:l?.urls?.junitDownloadUrl,logsUrl:l?.urls?.logsDownloadUrl,artifactsUrl:l?.urls?.artifactsDownloadUrl})}catch(b){p(`[WARN] Could not post runner update: ${b.message||b}`)}};try{p(`Mach Maestro local runner starting for ${n}`);let g=await Hn.post(`${i}/internal/tests/${encodeURIComponent(n)}/runner-payload`,{projectId:t,runnerToken:r});if(g.data?.status!=="success"||!g.data?.payload)throw new Error(g.data?.message||"Runner payload was not returned.");l=g.data.payload;let y=Object.keys(l.env||{});p(`Using Maestro env vars: ${y.length>0?y.join(", "):"none"}`);let b={...process.env,...l.env||{}},A=Pp(l.env);A.length>0&&p(`Passing Maestro env vars to test command: ${y.sort().join(", ")}`),await h("running");let v=l.platform==="android"?"app.apk":"app.zip",E=N.join(o,v),L=N.join(o,"source.zip"),U=N.join(o,"source");P.mkdirSync(U,{recursive:!0}),p("Downloading app artifact..."),await qi(l.artifactUrl,E),p(`Downloaded app artifact: ${v} (${Da(P.statSync(E).size)})`),p("Downloading Maestro source..."),await qi(l.urls.sourceUrl,L),p(`Downloaded Maestro source: source.zip (${Da(P.statSync(L).size)})`),new Mr(L).extractAllTo(U,!0);let j=Cp(U,l.flowPath||".maestro");if(!P.existsSync(j))throw new Error(`Maestro flow path not found: ${l.flowPath||".maestro"}`);if(p(`Resolved Maestro flow path: ${N.relative(U,j)||"."}`),l.platform==="ios"){let R=await Mp(l.device||Ra("ios"),a);u=R.udid,f=R.name,await h("running");let $=Fp(E,o),O=Va($,a);p(`Resolved iOS app bundle: ${$}`),p(`Resolved iOS bundle id: ${O||"unknown"}`),jp($,a,R.udid),Ji("xcrun",["simctl","install",R.udid,$],a),O&&(c={platform:l.platform,appId:O,deviceId:R.udid}),O&&ht("xcrun",["simctl","get_app_container",R.udid,O,"app"],a),zi(s,a,"ios-before-maestro.png",R.udid),l.record&&(d=Up(s,a,R.udid))}else{let R=Gp(E,a),$=Hp(l.device,a);u=$||void 0,f=l.device||Ra("android");let O=$?["-s",$]:[];p(`Resolved Android application id: ${R||"unknown"}`),Ji("adb",[...O,"install","-r",E],a),R&&(c={platform:l.platform,appId:R,deviceId:$||void 0})}let te=Math.max(0,Math.min(10,Number(l.retries??1)))+1,ie=N.join(s,"report.xml"),Ce=xp(a);if(!Ce)throw new Error("Maestro CLI not found on this runner. Install Maestro or set MAESTRO_BIN to the full maestro path.");let S=1;for(let R=1;R<=te;R+=1){p(`Running Maestro attempt ${R}/${te}...`);let $=[...u?["--device",u]:[],"test","--platform",l.platform,...A,j,"--format","junit","--output",ie,"--test-output-dir",s];if(Fa&&R<te?S=(await Ga(Ce,$,{logPath:a,env:b,fastFailOnFlowFailure:!0})).exitCode:S=ht(Ce,$,a,void 0,b),S===0)break}return l.platform==="ios"&&zi(s,a,"ios-after-maestro.png",u),await Pa(d,a),d=null,await ka(l.urls,o,s,a),S===0?(await h("passed"),T.success(k.green(`Managed Maestro run passed: ${n}`)),{status:"passed",exitCode:0,attempts:te,flows:l.flowPath,platform:l.platform}):(await h("failed",`Maestro exited with code ${S}`),T.error(k.red(`Managed Maestro run failed with exit code ${S}`)),{status:"failed",exitCode:S,attempts:te,flows:l.flowPath,platform:l.platform})}catch(g){let y=g.message||String(g);return p(`MACH_MAESTRO_RUN_FAILED: ${y}`),l?.platform==="ios"&&zi(s,a,"ios-after-failure.png",u),await Pa(d,a),l?.urls&&await ka(l.urls,o,s,a),await h("failed",y),T.error(k.red(`Managed Maestro runner failed: ${y}`)),{status:"failed",exitCode:1,attempts:0,flows:l?.flowPath||".maestro",platform:l?.platform||e.platform}}finally{Bp(c,a)}}async function Sp(e){let t=e.maestroFlows||".maestro",n=ja(e.maestroRetries);if(n===null)return null;let r=N.resolve(t);if(!P.existsSync(r))return T.error(k.red(`Maestro flows not found: ${t}`)),{status:"failed",exitCode:1,attempts:0,flows:t,platform:e.platform};let i=await Rp(e);if(i?.url){if(!await Op(i))return{status:"failed",exitCode:1,attempts:0,flows:t,platform:i.platform||e.platform}}else if(e.buildId||e.buildUrl||e.artifactUrl||e.latest)return{status:"failed",exitCode:1,attempts:0,flows:t,platform:e.platform};e.maestroRecord&&T.warn(k.yellow("--maestro-record is managed-runner only and is ignored in --local mode."));let o=i?.platform||e.platform,s=["test"];o&&s.push("--platform",o),e.maestroDevice&&s.push("--device",String(e.maestroDevice));let a=bp(e.maestroEnv),l=Object.keys(a);if(l.length>0){T.info(k.dim(`Passing Maestro env vars to local run: ${l.join(", ")}`));for(let[p,h]of Object.entries(a))s.push("-e",`${p}=${h}`)}s.push(t);let d=n+1,c=1;for(let p=1;p<=d;p+=1){if(T.info(k.dim(`Running local Maestro attempt ${p}/${d}...`)),Fa&&p<d){let h=await Ga("maestro",s,{cwd:process.cwd(),env:process.env,echoOutput:!0,fastFailOnFlowFailure:!0});if(h.error){let g=h.error.message||"Failed to run Maestro";T.error(k.red(`Local Maestro failed to start: ${g}`)),T.info(k.dim("Install Maestro locally, then retry: https://maestro.mobile.dev/getting-started/installing-maestro")),c=1;break}c=h.exitCode}else{let h=dt("maestro",s,{cwd:process.cwd(),stdio:"inherit",env:process.env});if(h.error){let g=h.error.message||"Failed to run Maestro";T.error(k.red(`Local Maestro failed to start: ${g}`)),T.info(k.dim("Install Maestro locally, then retry: https://maestro.mobile.dev/getting-started/installing-maestro")),c=1;break}c=typeof h.status=="number"?h.status:1}if(c===0)break}let u=c===0?"passed":"failed",f={status:u,exitCode:c,attempts:d,flows:t,platform:o};return Jp(e,f),u==="passed"?T.success(k.green("Local Maestro run passed")):T.error(k.red(`Local Maestro run failed with exit code ${c}`)),f}async function Zi(e){let t=K(`./${m.configFileName}`),n=e.projectId||t?.projectId,r=String(e.profile||e.buildProfile||W(t,"store","production")).toLowerCase();if(!n)return T.error(`No projectId found. Run \`${m.nameLower} link\` first or pass an internal project id.`),null;let i=e.platform;if(!i&&e.latest){let f=await xa({message:"Select platform for the latest build:",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"}]});if(Yi(f))return null;i=f}let o=await vp(e);if(!o)return null;if(o.kind==="latest"&&!i)return T.error("Pass --platform when using --latest."),null;if(o.kind==="artifact-url"&&!i)return T.error("Pass --platform when using --artifact-url."),null;let s=ja(e.maestroRetries);if(s===null)return null;let a=Xi(e.maestroEnv),l=yp(e.maestroEnv);!e.quiet&&a.length>0&&T.info(k.dim(`Forwarding Maestro env vars by name: ${a.join(", ")}`));let d=await Ip(e,n);if(d===null)return null;let c=Gn();e.quiet||c.start("Queuing Maestro run...");let u=String(e.maestroDevice||"").trim()||void 0;try{let f=await I.post("/tests/maestro",{projectId:n,platform:i,profile:r,latest:o.kind==="latest",buildId:o.kind==="build-id"?o.value:e.buildId,buildUrl:o.kind==="build-url"?o.value:e.buildUrl,artifactUrl:o.kind==="artifact-url"?o.value:e.artifactUrl,flowSourceKey:d,flows:e.maestroFlows||".maestro",...u?{device:u}:{},retries:s,record:!!e.maestroRecord,...a.length>0?{envNames:a}:{},...l?{env:l}:{}});if(f.data.status!=="success")throw new Error(f.data.message||"Failed to queue Maestro run");let p=f.data.testRun,h={testRunId:p.testRunId,status:p.status,projectId:n,buildId:p.buildId,platform:p.platform,dashboardUrl:p.dashboardUrl||`${at}/tests/${p.testRunId}`,launchDeferredReason:p.launchDeferredReason};return Ka(e,h),e.quiet||c.stop("Maestro run queued"),h}catch(f){e.quiet||c.stop("Could not queue Maestro run");let p=f.response?.data?.message||f.message||"Unknown error";return T.error(k.red(`Maestro queue failed: ${p}`)),null}}async function Ep(e,t){let n=Oa(e.waitTimeout,60,"--wait-timeout"),r=Oa(e.waitInterval,15,"--wait-interval");if(n===null||r===null)return null;let i=n*60*1e3,o=Math.max(5,r)*1e3,s=Date.now(),a=t.status||"queued";for(T.info(k.dim(`Waiting for Maestro run ${t.testRunId} to finish...`));Date.now()-s<=i;){let l=await wp(t.projectId,t.testRunId);if(!l)return null;if(l.status&&l.status!==a&&(a=l.status,T.info(k.dim(`Maestro status: ${a}`))),gp.has(String(l.status)))return Ka(e,l),l.status==="passed"?T.success(k.green(`Maestro run passed: ${l.testRunId}`)):(T.error(k.red(`Maestro run ${l.status}: ${l.testRunId}`)),l.error&&T.error(k.red(String(l.error)))),l;await Qi(o)}return T.error(k.red(`Timed out waiting for Maestro run ${t.testRunId} after ${n} minute(s).`)),{...t,status:"timeout"}}async function Ip(e,t){if(e.maestroUseBuildSource)return;let n=e.maestroFlows||".maestro",r=N.resolve(n);if(!P.existsSync(r))return e.maestroFlows?(T.error(k.red(`Maestro flows not found: ${n}`)),null):void 0;let i=N.relative(process.cwd(),r);if(!i||i.startsWith("..")||N.isAbsolute(i))return T.error(k.red("Managed Maestro flow uploads must be inside the current project directory.")),null;let o=Gn();e.quiet||o.start(`Uploading Maestro flows from ${i}...`);try{let s=await I.post("/tests/maestro/source-upload-url",{projectId:t,uploadId:up()});if(s.data.status!=="success"||!s.data.uploadUrl||!s.data.key)throw new Error(s.data.message||"Failed to get Maestro flow upload URL");let a=new Mr;if(P.statSync(r).isDirectory())a.addLocalFolder(r,i);else{let c=N.dirname(i);a.addLocalFile(r,c==="."?void 0:c,N.basename(i))}let d=a.toBuffer();return await _p(s.data.uploadUrl,d,"application/zip","Maestro flow upload",c=>{e.quiet||o.message(c)}),e.quiet||o.stop("Maestro flows uploaded"),s.data.key}catch(s){e.quiet||o.stop("Could not upload Maestro flows");let a=s.response?.data?.message||s.message||"Unknown error";return T.error(k.red(`Maestro flow upload failed: ${a}`)),null}}function Ua(e){let t=e.response?.status,n=e.code||"",r=e.message||"";return t&&![408,409,425,429].includes(t)&&t<500?!1:/ECONNRESET|ETIMEDOUT|EAI_AGAIN|ENOTFOUND|ECONNABORTED|socket hang up|network|timeout/i.test(`${n} ${r}`)||!t}async function _p(e,t,n,r,i){let o;for(let s=1;s<=$a;s+=1)try{await Hn.put(e,t,{headers:{"Content-Type":n},maxBodyLength:1/0,maxContentLength:1/0,timeout:hp});return}catch(a){if(o=a,!Ua(a)||s>=$a)break;let l=Math.min(2e4,2e3*s),d=a.code||a.response?.status||a.message||"network error";i?.(`${r} attempt ${s} failed (${d}), retrying...`),await Qi(l)}throw o}async function wp(e,t){try{let n=await I.get(`/tests/${encodeURIComponent(t)}`,{params:{projectId:e}});if(n.data.status!=="success")throw new Error(n.data.message||"Failed to fetch Maestro run");let r=n.data.testRun;return{testRunId:r.testRunId,status:r.status,projectId:e,buildId:r.buildId,platform:r.platform,dashboardUrl:r.dashboardUrl||`${at}/tests/${r.testRunId}`,launchDeferredReason:r.launchDeferredReason,...r.error?{error:r.error}:{}}}catch(n){let r=n.response?.data?.message||n.message||"Unknown error";return T.error(k.red(`Could not fetch Maestro run status: ${r}`)),null}}async function vp(e){if(e.buildId)return{kind:"build-id",value:e.buildId};if(e.buildUrl)return{kind:"build-url",value:e.buildUrl};if(e.artifactUrl)return{kind:"artifact-url",value:e.artifactUrl};if(e.latest)return{kind:"latest"};let t=await xa({message:"Select app artifact source for Maestro:",options:[{value:"latest",label:"Latest successful build"},{value:"build-id",label:"Build ID"},{value:"build-url",label:`${m.name} build URL`},{value:"artifact-url",label:"Direct artifact URL"}]});if(Yi(t))return null;if(t==="latest")return{kind:"latest"};let n=await fp({message:t==="build-id"?"Enter build ID:":t==="build-url"?`Enter ${m.name} build URL:`:"Enter artifact URL:",validate:r=>{let i=String(r||"").trim();if(!i)return"Value is required";if((t==="build-url"||t==="artifact-url")&&!i.startsWith("http"))return"Must be a URL"}});return Yi(n)?null:{kind:t,value:String(n).trim()}}function Oa(e,t,n){if(e==null||e==="")return t;let r=Number(e);return!Number.isFinite(r)||r<=0?(T.error(`${n} must be a positive number.`),null):r}function Qi(e){return new Promise(t=>setTimeout(t,e))}function ja(e){if(e==null||e==="")return 1;let t=Number(e);return!Number.isInteger(t)||t<0||t>10?(T.error("--maestro-retries must be an integer between 0 and 10."),null):t}async function Rp(e){if(e.artifactUrl)return{url:e.artifactUrl,platform:e.platform||to(e.artifactUrl),name:za(e.artifactUrl)};let t=e.buildId||qp(e.buildUrl);return t?Ba(t,e.platform):e.latest?$p(e):null}async function Ba(e,t){let n=Gn();n.start(`Resolving build ${e}...`);try{let r=await I.get(`/public/builds/${encodeURIComponent(e)}`);if(r.data.status!=="success")throw new Error(r.data.message||"Build lookup failed");let i=t||r.data.build?.platform,o=Yp(r.data.artifacts||[],i);if(!o?.downloadUrl)throw new Error("No installable APK or simulator app artifact found for this build.");return n.stop("Build artifact resolved"),{url:o.downloadUrl,platform:i||to(o.name||o.downloadUrl),name:o.name}}catch(r){n.stop("Could not resolve build artifact");let i=r.response?.data?.message||r.message||"Unknown error";return T.error(k.red(`Local Maestro artifact lookup failed: ${i}`)),null}}async function $p(e){let t=K(`./${m.configFileName}`),n=e.projectId||t?.projectId,r=String(e.profile||e.buildProfile||W(t,"store","production")).toLowerCase();if(!n)return T.error(`No projectId found. Run \`${m.nameLower} link\` first or pass --build-id/--artifact-url.`),null;if(!e.platform)return T.error("Pass --platform when using --latest with --local."),null;let i=Gn();i.start("Resolving latest build...");try{let o=await I.get(`/builds/${n}`,{params:{limit:100}}),a=(Array.isArray(o.data.builds)?o.data.builds:[]).find(l=>l.status==="success"&&l.platform===e.platform&&String(l.buildProfile||l.buildType||"production").toLowerCase()===r);if(!a?.buildId)throw new Error(`No successful ${e.platform} build found for profile ${r}.`);return i.stop(`Latest build resolved: ${a.buildId}`),Ba(a.buildId,e.platform)}catch(o){i.stop("Could not resolve latest build");let s=o.response?.data?.message||o.message||"Unknown error";return T.error(k.red(`Latest build lookup failed: ${s}`)),null}}async function Op(e){let t=e.platform||to(e.url);if(!t)return T.error(k.red("Could not infer platform for local install. Pass --platform android or --platform ios.")),!1;let n=P.mkdtempSync(N.join(gn.tmpdir(),"mach-maestro-")),r=e.name||za(e.url)||(t==="android"?"app.apk":"app.zip"),i=N.join(n,r),o=Gn();o.start(`Downloading ${r}...`);try{await qi(e.url,i),o.stop("Artifact downloaded")}catch(s){return o.stop("Artifact download failed"),T.error(k.red(s.message||"Failed to download artifact")),!1}return t==="android"?Kp(i):Wp(i,n)}async function qi(e,t){let n=await Hn.get(e,{responseType:"stream"});await pp(n.data,P.createWriteStream(t))}function Dp(e,t=12e3){try{return P.readFileSync(e,"utf-8").slice(-t)}catch{return""}}function Da(e){if(!Number.isFinite(e)||e<0)return"unknown size";if(e<1024)return`${e} B`;let t=["KB","MB","GB"],n=e/1024,r=t[0];for(let i=1;n>=1024&&i<t.length;i+=1)n/=1024,r=t[i];return`${n.toFixed(n>=10?1:2)} ${r}`}function Pp(e){return Object.entries(e||{}).filter(([t,n])=>!!t&&n!==void 0).sort(([t],[n])=>t.localeCompare(n)).flatMap(([t,n])=>["-e",`${t}=${n}`])}function Cp(e,t){let n=N.resolve(e,t||".maestro"),r=N.relative(e,n);if(r.startsWith("..")||N.isAbsolute(r))throw new Error("Maestro flow path must stay inside the build source.");return n}function Ha(e,t){let n=[e];for(let r=0;r<t.length;r+=1){let i=t[r],o=t[r-1];(o==="-e"||o==="--env")&&/^[A-Za-z_][A-Za-z0-9_]*=/.test(i)?n.push(`${i.slice(0,i.indexOf("="))}=<redacted>`):n.push(i)}return n.join(" ")}function Tp(e){return/\[Failed\]\s+/.test(e)}function kp(e){if(!e.killed){try{e.kill("SIGTERM")}catch{}setTimeout(()=>{try{e.kill("SIGKILL")}catch{}},5e3).unref()}}function Ga(e,t,n={}){let{cwd:r,env:i=process.env,logPath:o,echoOutput:s=!1,fastFailOnFlowFailure:a=!1}=n;return o&&P.appendFileSync(o,`
|
|
2139
|
-
$ ${
|
|
2140
|
-
`),new Promise(l=>{let d=!1,c=!1,u="",f=g=>{c||(c=!0,l(g))},p=
|
|
2139
|
+
`}`)},h=async(g,y,b)=>{try{await yn.post(`${i}/internal/tests/${encodeURIComponent(n)}/runner`,{projectId:t,runnerToken:r,status:g,error:y,logPreview:Yp(a),device:f,junitUrl:l?.urls?.junitDownloadUrl,logsUrl:l?.urls?.logsDownloadUrl,artifactsUrl:l?.urls?.artifactsDownloadUrl,...b?{visualMedia:b}:{}})}catch(A){p(`[WARN] Could not post runner update: ${A.message||A}`)}};try{p(`Mach Maestro local runner starting for ${n}`);let g=await yn.post(`${i}/internal/tests/${encodeURIComponent(n)}/runner-payload`,{projectId:t,runnerToken:r});if(g.data?.status!=="success"||!g.data?.payload)throw new Error(g.data?.message||"Runner payload was not returned.");l=g.data.payload;let y=Object.keys(l.env||{});p(`Using Maestro env vars: ${y.length>0?y.join(", "):"none"}`);let b={...process.env,...l.env||{}},A=qp(l.env);A.length>0&&p(`Passing Maestro env vars to test command: ${y.sort().join(", ")}`),await h("running");let v=l.platform==="android"?"app.apk":"app.zip",E=x.join(o,v),L=x.join(o,"source.zip"),U=x.join(o,"source");O.mkdirSync(U,{recursive:!0}),p("Downloading app artifact..."),await Ji(l.artifactUrl,E),p(`Downloaded app artifact: ${v} (${Ma(O.statSync(E).size)})`),p("Downloading Maestro source..."),await Ji(l.urls.sourceUrl,L),p(`Downloaded Maestro source: source.zip (${Ma(O.statSync(L).size)})`),new Fr(L).extractAllTo(U,!0);let j=Jp(U,l.flowPath||".maestro");if(!O.existsSync(j))throw new Error(`Maestro flow path not found: ${l.flowPath||".maestro"}`);if(p(`Resolved Maestro flow path: ${x.relative(U,j)||"."}`),l.platform==="ios"){let R=await nf(l.device||ka("ios"),a);u=R.udid,f=R.name,await h("running");let $=rf(E,o),k=Za($,a);p(`Resolved iOS app bundle: ${$}`),p(`Resolved iOS bundle id: ${k||"unknown"}`),af($,a,R.udid),Xi("xcrun",["simctl","install",R.udid,$],a),k&&(c={platform:l.platform,appId:k,deviceId:R.udid}),k&&ht("xcrun",["simctl","get_app_container",R.udid,k,"app"],a),Ki(s,a,"ios-before-maestro.png",R.udid),l.record&&(d=of(s,a,R.udid))}else{let R=df(E,a),$=cf(l.device,a);u=$||void 0,f=l.device||ka("android");let k=$?["-s",$]:[];p(`Resolved Android application id: ${R||"unknown"}`),Xi("adb",[...k,"install","-r",E],a),R&&(c={platform:l.platform,appId:R,deviceId:$||void 0})}let te=Math.max(0,Math.min(10,Number(l.retries??1)))+1,ie=x.join(s,"report.xml"),Ce=ef(a);if(!Ce)throw new Error("Maestro CLI not found on this runner. Install Maestro or set MAESTRO_BIN to the full maestro path.");let S=1;for(let R=1;R<=te;R+=1){p(`Running Maestro attempt ${R}/${te}...`);let $=[...u?["--device",u]:[],"test","--platform",l.platform,...A,j,"--format","junit","--output",ie,"--test-output-dir",s];if(Wa&&R<te?S=(await Xa(Ce,$,{logPath:a,env:b,fastFailOnFlowFailure:!0})).exitCode:S=ht(Ce,$,a,void 0,b),S===0)break}l.platform==="ios"&&Ki(s,a,"ios-after-maestro.png",u),await La(d,a),d=null;let D=await Fa({apiBase:i,projectId:t,testRunId:n,runnerToken:r,outputDir:s,logPath:a});return await Ba(l.urls,o,s,a),S===0?(await h("passed",void 0,D),T.success(N.green(`Managed Maestro run passed: ${n}`)),{status:"passed",exitCode:0,attempts:te,flows:l.flowPath,platform:l.platform}):(await h("failed",`Maestro exited with code ${S}`,D),T.error(N.red(`Managed Maestro run failed with exit code ${S}`)),{status:"failed",exitCode:S,attempts:te,flows:l.flowPath,platform:l.platform})}catch(g){let y=g.message||String(g);p(`MACH_MAESTRO_RUN_FAILED: ${y}`),l?.platform==="ios"&&Ki(s,a,"ios-after-failure.png",u),await La(d,a);let b=await Fa({apiBase:i,projectId:t,testRunId:n,runnerToken:r,outputDir:s,logPath:a});return l?.urls&&await Ba(l.urls,o,s,a),await h("failed",y,b),T.error(N.red(`Managed Maestro runner failed: ${y}`)),{status:"failed",exitCode:1,attempts:0,flows:l?.flowPath||".maestro",platform:l?.platform||e.platform}}finally{lf(c,a)}}async function Up(e){let t=e.maestroFlows||".maestro",n=Ya(e.maestroRetries);if(n===null)return null;let r=x.resolve(t);if(!O.existsSync(r))return T.error(N.red(`Maestro flows not found: ${t}`)),{status:"failed",exitCode:1,attempts:0,flows:t,platform:e.platform};let i=await zp(e);if(i?.url){if(!await Kp(i))return{status:"failed",exitCode:1,attempts:0,flows:t,platform:i.platform||e.platform}}else if(e.buildId||e.buildUrl||e.artifactUrl||e.latest)return{status:"failed",exitCode:1,attempts:0,flows:t,platform:e.platform};e.maestroRecord&&T.warn(N.yellow("--maestro-record is managed-runner only and is ignored in --local mode."));let o=i?.platform||e.platform,s=["test"];o&&s.push("--platform",o),e.maestroDevice&&s.push("--device",String(e.maestroDevice));let a=Lp(e.maestroEnv),l=Object.keys(a);if(l.length>0){T.info(N.dim(`Passing Maestro env vars to local run: ${l.join(", ")}`));for(let[p,h]of Object.entries(a))s.push("-e",`${p}=${h}`)}s.push(t);let d=n+1,c=1;for(let p=1;p<=d;p+=1){if(T.info(N.dim(`Running local Maestro attempt ${p}/${d}...`)),Wa&&p<d){let h=await Xa("maestro",s,{cwd:process.cwd(),env:process.env,echoOutput:!0,fastFailOnFlowFailure:!0});if(h.error){let g=h.error.message||"Failed to run Maestro";T.error(N.red(`Local Maestro failed to start: ${g}`)),T.info(N.dim("Install Maestro locally, then retry: https://maestro.mobile.dev/getting-started/installing-maestro")),c=1;break}c=h.exitCode}else{let h=dt("maestro",s,{cwd:process.cwd(),stdio:"inherit",env:process.env});if(h.error){let g=h.error.message||"Failed to run Maestro";T.error(N.red(`Local Maestro failed to start: ${g}`)),T.info(N.dim("Install Maestro locally, then retry: https://maestro.mobile.dev/getting-started/installing-maestro")),c=1;break}c=typeof h.status=="number"?h.status:1}if(c===0)break}let u=c===0?"passed":"failed",f={status:u,exitCode:c,attempts:d,flows:t,platform:o};return yf(e,f),u==="passed"?T.success(N.green("Local Maestro run passed")):T.error(N.red(`Local Maestro run failed with exit code ${c}`)),f}async function Qi(e){let t=W(`./${m.configFileName}`),n=e.projectId||t?.projectId,r=String(e.profile||e.buildProfile||K(t,"store","production")).toLowerCase();if(!n)return T.error(`No projectId found. Run \`${m.nameLower} link\` first or pass an internal project id.`),null;let i=e.platform;if(!i&&e.latest){let f=await Ga({message:"Select platform for the latest build:",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"}]});if(qi(f))return null;i=f}let o=await Vp(e);if(!o)return null;if(o.kind==="latest"&&!i)return T.error("Pass --platform when using --latest."),null;if(o.kind==="artifact-url"&&!i)return T.error("Pass --platform when using --artifact-url."),null;let s=Ya(e.maestroRetries);if(s===null)return null;let a=Zi(e.maestroEnv),l=Mp(e.maestroEnv);!e.quiet&&a.length>0&&T.info(N.dim(`Forwarding Maestro env vars by name: ${a.join(", ")}`));let d=await Bp(e,n);if(d===null)return null;let c=Gn();e.quiet||c.start("Queuing Maestro run...");let u=String(e.maestroDevice||"").trim()||void 0;try{let f=await I.post("/tests/maestro",{projectId:n,platform:i,profile:r,latest:o.kind==="latest",buildId:o.kind==="build-id"?o.value:e.buildId,buildUrl:o.kind==="build-url"?o.value:e.buildUrl,artifactUrl:o.kind==="artifact-url"?o.value:e.artifactUrl,flowSourceKey:d,flows:e.maestroFlows||".maestro",...u?{device:u}:{},retries:s,record:!!e.maestroRecord,...a.length>0?{envNames:a}:{},...l?{env:l}:{}});if(f.data.status!=="success")throw new Error(f.data.message||"Failed to queue Maestro run");let p=f.data.testRun,h={testRunId:p.testRunId,status:p.status,projectId:n,buildId:p.buildId,platform:p.platform,dashboardUrl:p.dashboardUrl||`${at}/tests/${p.testRunId}`,launchDeferredReason:p.launchDeferredReason};return el(e,h),e.quiet||c.stop("Maestro run queued"),h}catch(f){e.quiet||c.stop("Could not queue Maestro run");let p=f.response?.data?.message||f.message||"Unknown error";return T.error(N.red(`Maestro queue failed: ${p}`)),null}}async function jp(e,t){let n=xa(e.waitTimeout,60,"--wait-timeout"),r=xa(e.waitInterval,15,"--wait-interval");if(n===null||r===null)return null;let i=n*60*1e3,o=Math.max(5,r)*1e3,s=Date.now(),a=t.status||"queued";for(T.info(N.dim(`Waiting for Maestro run ${t.testRunId} to finish...`));Date.now()-s<=i;){let l=await Gp(t.projectId,t.testRunId);if(!l)return null;if(l.status&&l.status!==a&&(a=l.status,T.info(N.dim(`Maestro status: ${a}`))),Cp.has(String(l.status)))return el(e,l),l.status==="passed"?T.success(N.green(`Maestro run passed: ${l.testRunId}`)):(T.error(N.red(`Maestro run ${l.status}: ${l.testRunId}`)),l.error&&T.error(N.red(String(l.error)))),l;await eo(o)}return T.error(N.red(`Timed out waiting for Maestro run ${t.testRunId} after ${n} minute(s).`)),{...t,status:"timeout"}}async function Bp(e,t){if(e.maestroUseBuildSource)return;let n=e.maestroFlows||".maestro",r=x.resolve(n);if(!O.existsSync(r))return e.maestroFlows?(T.error(N.red(`Maestro flows not found: ${n}`)),null):void 0;let i=x.relative(process.cwd(),r);if(!i||i.startsWith("..")||x.isAbsolute(i))return T.error(N.red("Managed Maestro flow uploads must be inside the current project directory.")),null;let o=Gn();e.quiet||o.start(`Uploading Maestro flows from ${i}...`);try{let s=await I.post("/tests/maestro/source-upload-url",{projectId:t,uploadId:$p()});if(s.data.status!=="success"||!s.data.uploadUrl||!s.data.key)throw new Error(s.data.message||"Failed to get Maestro flow upload URL");let a=new Fr;if(O.statSync(r).isDirectory())a.addLocalFolder(r,i);else{let c=x.dirname(i);a.addLocalFile(r,c==="."?void 0:c,x.basename(i))}let d=a.toBuffer();return await Hp(s.data.uploadUrl,d,"application/zip","Maestro flow upload",c=>{e.quiet||o.message(c)}),e.quiet||o.stop("Maestro flows uploaded"),s.data.key}catch(s){e.quiet||o.stop("Could not upload Maestro flows");let a=s.response?.data?.message||s.message||"Unknown error";return T.error(N.red(`Maestro flow upload failed: ${a}`)),null}}function Ka(e){let t=e.response?.status,n=e.code||"",r=e.message||"";return t&&![408,409,425,429].includes(t)&&t<500?!1:/ECONNRESET|ETIMEDOUT|EAI_AGAIN|ENOTFOUND|ECONNABORTED|socket hang up|network|timeout/i.test(`${n} ${r}`)||!t}async function Hp(e,t,n,r,i){let o;for(let s=1;s<=Na;s+=1)try{await yn.put(e,t,{headers:{"Content-Type":n},maxBodyLength:1/0,maxContentLength:1/0,timeout:Tp});return}catch(a){if(o=a,!Ka(a)||s>=Na)break;let l=Math.min(2e4,2e3*s),d=a.code||a.response?.status||a.message||"network error";i?.(`${r} attempt ${s} failed (${d}), retrying...`),await eo(l)}throw o}async function Gp(e,t){try{let n=await I.get(`/tests/${encodeURIComponent(t)}`,{params:{projectId:e}});if(n.data.status!=="success")throw new Error(n.data.message||"Failed to fetch Maestro run");let r=n.data.testRun;return{testRunId:r.testRunId,status:r.status,projectId:e,buildId:r.buildId,platform:r.platform,dashboardUrl:r.dashboardUrl||`${at}/tests/${r.testRunId}`,launchDeferredReason:r.launchDeferredReason,...r.error?{error:r.error}:{}}}catch(n){let r=n.response?.data?.message||n.message||"Unknown error";return T.error(N.red(`Could not fetch Maestro run status: ${r}`)),null}}async function Vp(e){if(e.buildId)return{kind:"build-id",value:e.buildId};if(e.buildUrl)return{kind:"build-url",value:e.buildUrl};if(e.artifactUrl)return{kind:"artifact-url",value:e.artifactUrl};if(e.latest)return{kind:"latest"};let t=await Ga({message:"Select app artifact source for Maestro:",options:[{value:"latest",label:"Latest successful build"},{value:"build-id",label:"Build ID"},{value:"build-url",label:`${m.name} build URL`},{value:"artifact-url",label:"Direct artifact URL"}]});if(qi(t))return null;if(t==="latest")return{kind:"latest"};let n=await Op({message:t==="build-id"?"Enter build ID:":t==="build-url"?`Enter ${m.name} build URL:`:"Enter artifact URL:",validate:r=>{let i=String(r||"").trim();if(!i)return"Value is required";if((t==="build-url"||t==="artifact-url")&&!i.startsWith("http"))return"Must be a URL"}});return qi(n)?null:{kind:t,value:String(n).trim()}}function xa(e,t,n){if(e==null||e==="")return t;let r=Number(e);return!Number.isFinite(r)||r<=0?(T.error(`${n} must be a positive number.`),null):r}function eo(e){return new Promise(t=>setTimeout(t,e))}function Ya(e){if(e==null||e==="")return 1;let t=Number(e);return!Number.isInteger(t)||t<0||t>10?(T.error("--maestro-retries must be an integer between 0 and 10."),null):t}async function zp(e){if(e.artifactUrl)return{url:e.artifactUrl,platform:e.platform||no(e.artifactUrl),name:Qa(e.artifactUrl)};let t=e.buildId||hf(e.buildUrl);return t?qa(t,e.platform):e.latest?Wp(e):null}async function qa(e,t){let n=Gn();n.start(`Resolving build ${e}...`);try{let r=await I.get(`/public/builds/${encodeURIComponent(e)}`);if(r.data.status!=="success")throw new Error(r.data.message||"Build lookup failed");let i=t||r.data.build?.platform,o=gf(r.data.artifacts||[],i);if(!o?.downloadUrl)throw new Error("No installable APK or simulator app artifact found for this build.");return n.stop("Build artifact resolved"),{url:o.downloadUrl,platform:i||no(o.name||o.downloadUrl),name:o.name}}catch(r){n.stop("Could not resolve build artifact");let i=r.response?.data?.message||r.message||"Unknown error";return T.error(N.red(`Local Maestro artifact lookup failed: ${i}`)),null}}async function Wp(e){let t=W(`./${m.configFileName}`),n=e.projectId||t?.projectId,r=String(e.profile||e.buildProfile||K(t,"store","production")).toLowerCase();if(!n)return T.error(`No projectId found. Run \`${m.nameLower} link\` first or pass --build-id/--artifact-url.`),null;if(!e.platform)return T.error("Pass --platform when using --latest with --local."),null;let i=Gn();i.start("Resolving latest build...");try{let o=await I.get(`/builds/${n}`,{params:{limit:100}}),a=(Array.isArray(o.data.builds)?o.data.builds:[]).find(l=>l.status==="success"&&l.platform===e.platform&&String(l.buildProfile||l.buildType||"production").toLowerCase()===r);if(!a?.buildId)throw new Error(`No successful ${e.platform} build found for profile ${r}.`);return i.stop(`Latest build resolved: ${a.buildId}`),qa(a.buildId,e.platform)}catch(o){i.stop("Could not resolve latest build");let s=o.response?.data?.message||o.message||"Unknown error";return T.error(N.red(`Latest build lookup failed: ${s}`)),null}}async function Kp(e){let t=e.platform||no(e.url);if(!t)return T.error(N.red("Could not infer platform for local install. Pass --platform android or --platform ios.")),!1;let n=O.mkdtempSync(x.join(hn.tmpdir(),"mach-maestro-")),r=e.name||Qa(e.url)||(t==="android"?"app.apk":"app.zip"),i=x.join(n,r),o=Gn();o.start(`Downloading ${r}...`);try{await Ji(e.url,i),o.stop("Artifact downloaded")}catch(s){return o.stop("Artifact download failed"),T.error(N.red(s.message||"Failed to download artifact")),!1}return t==="android"?ff(i):mf(i,n)}async function Ji(e,t){let n=await yn.get(e,{responseType:"stream"});await Pp(n.data,O.createWriteStream(t))}function Yp(e,t=12e3){try{return O.readFileSync(e,"utf-8").slice(-t)}catch{return""}}function Ma(e){if(!Number.isFinite(e)||e<0)return"unknown size";if(e<1024)return`${e} B`;let t=["KB","MB","GB"],n=e/1024,r=t[0];for(let i=1;n>=1024&&i<t.length;i+=1)n/=1024,r=t[i];return`${n.toFixed(n>=10?1:2)} ${r}`}function qp(e){return Object.entries(e||{}).filter(([t,n])=>!!t&&n!==void 0).sort(([t],[n])=>t.localeCompare(n)).flatMap(([t,n])=>["-e",`${t}=${n}`])}function Jp(e,t){let n=x.resolve(e,t||".maestro"),r=x.relative(e,n);if(r.startsWith("..")||x.isAbsolute(r))throw new Error("Maestro flow path must stay inside the build source.");return n}function Ja(e,t){let n=[e];for(let r=0;r<t.length;r+=1){let i=t[r],o=t[r-1];(o==="-e"||o==="--env")&&/^[A-Za-z_][A-Za-z0-9_]*=/.test(i)?n.push(`${i.slice(0,i.indexOf("="))}=<redacted>`):n.push(i)}return n.join(" ")}function Xp(e){return/\[Failed\]\s+/.test(e)}function Zp(e){if(!e.killed){try{e.kill("SIGTERM")}catch{}setTimeout(()=>{try{e.kill("SIGKILL")}catch{}},5e3).unref()}}function Xa(e,t,n={}){let{cwd:r,env:i=process.env,logPath:o,echoOutput:s=!1,fastFailOnFlowFailure:a=!1}=n;return o&&O.appendFileSync(o,`
|
|
2140
|
+
$ ${Ja(e,t)}
|
|
2141
|
+
`),new Promise(l=>{let d=!1,c=!1,u="",f=g=>{c||(c=!0,l(g))},p=Ha(e,t,{cwd:r,env:i,stdio:["ignore","pipe","pipe"]}),h=g=>{u+=g;let y=u.split(/\r?\n/);u=y.pop()||"";for(let b of y)if(a&&Xp(b)&&!d){d=!0;let A="Mach fast-fail: detected failed Maestro flow; stopping this attempt early to retry...";o&&O.appendFileSync(o,`
|
|
2141
2142
|
${A}
|
|
2142
2143
|
`),s&&process.stderr.write(`${A}
|
|
2143
|
-
`),
|
|
2144
|
-
`),f({exitCode:1,fastFailed:d,error:g})}),p.on("close",(g,y)=>{d&&o&&
|
|
2145
|
-
`),f({exitCode:typeof g=="number"?g:1,fastFailed:d})})})}function ht(e,t,n,r,i=process.env){
|
|
2146
|
-
$ ${
|
|
2147
|
-
`);let o=dt(e,t,{cwd:r,encoding:"utf-8",env:i});return o.stdout&&
|
|
2148
|
-
`),1):typeof o.status=="number"?o.status:1}function
|
|
2149
|
-
`)[0]?.trim():"";r&&t.unshift(r);for(let i of t)if(i&&
|
|
2150
|
-
`),i;return e&&
|
|
2151
|
-
`),null}function
|
|
2152
|
-
`):(
|
|
2153
|
-
`),ht("xcrun",["simctl","boot",a.udid],t)!==0&&
|
|
2154
|
-
`),
|
|
2155
|
-
`),null;let r=dt("/usr/bin/plutil",["-extract","CFBundleIdentifier","raw","-o","-",n],{encoding:"utf-8",env:process.env}),i=String(r.stdout||"").trim();return r.status!==0||!i?(
|
|
2156
|
-
`),null):i}function
|
|
2157
|
-
`)}function
|
|
2158
|
-
`);let i=
|
|
2159
|
-
`)}),i}async function
|
|
2160
|
-
`),e.kill("SIGINT")),setTimeout(()=>{!r&&!e.killed&&(
|
|
2161
|
-
`),e.kill("SIGKILL")),i()},5e3).unref?.()})}function
|
|
2162
|
-
`),
|
|
2163
|
-
`)}
|
|
2164
|
-
`),
|
|
2165
|
-
`)
|
|
2166
|
-
`)
|
|
2167
|
-
`)
|
|
2168
|
-
`)
|
|
2144
|
+
`),Zp(p)}};p.stdout?.on("data",g=>{let y=g.toString();o&&O.appendFileSync(o,y),s&&process.stdout.write(y),h(y)}),p.stderr?.on("data",g=>{let y=g.toString();o&&O.appendFileSync(o,y),s&&process.stderr.write(y),h(y)}),p.on("error",g=>{o&&O.appendFileSync(o,`${g.message}
|
|
2145
|
+
`),f({exitCode:1,fastFailed:d,error:g})}),p.on("close",(g,y)=>{d&&o&&O.appendFileSync(o,`Maestro attempt stopped after first failed flow${y?` (${y})`:""}.
|
|
2146
|
+
`),f({exitCode:typeof g=="number"?g:1,fastFailed:d})})})}function ht(e,t,n,r,i=process.env){O.appendFileSync(n,`
|
|
2147
|
+
$ ${Ja(e,t)}
|
|
2148
|
+
`);let o=dt(e,t,{cwd:r,encoding:"utf-8",env:i});return o.stdout&&O.appendFileSync(n,o.stdout),o.stderr&&O.appendFileSync(n,o.stderr),o.error?(O.appendFileSync(n,`${o.error.message}
|
|
2149
|
+
`),1):typeof o.status=="number"?o.status:1}function Xi(e,t,n,r){let i=ht(e,t,n,r);if(i!==0)throw new Error(`${e} ${t.join(" ")} failed with exit code ${i}`)}function Qp(e){try{return O.accessSync(e,O.constants.X_OK),!0}catch{return!1}}function ef(e){let t=[process.env.MAESTRO_BIN,x.join(hn.homedir(),".maestro","bin","maestro"),"/opt/homebrew/bin/maestro","/usr/local/bin/maestro"].filter(Boolean),n=dt("/usr/bin/env",["which","maestro"],{encoding:"utf-8",env:process.env}),r=n.status===0?String(n.stdout||"").split(`
|
|
2150
|
+
`)[0]?.trim():"";r&&t.unshift(r);for(let i of t)if(i&&Qp(i))return e&&O.appendFileSync(e,`Using Maestro CLI at ${i}
|
|
2151
|
+
`),i;return e&&O.appendFileSync(e,`Maestro CLI not found. Checked: ${t.join(", ")}
|
|
2152
|
+
`),null}function tf(e){let t=String(e||"").trim();return t?t.replace(/_/g," ").replace(/\bios\b/gi,"").replace(/\biphone\b/i,"iPhone").replace(/\bpro\b/gi,"Pro").replace(/\bmax\b/gi,"Max").replace(/\s+/g," ").trim():"iPhone 17 Pro"}async function nf(e,t){let n=tf(e),r=dt("xcrun",["simctl","list","devices","--json"],{encoding:"utf-8"});if(r.status!==0||!r.stdout)throw new Error("Could not list iOS simulators.");let i=JSON.parse(r.stdout),o=Object.values(i.devices||{}).flatMap(l=>Array.isArray(l)?l:[]).filter(l=>l?.isAvailable),s=n.toLowerCase(),a=o.find(l=>l.udid===e)||o.find(l=>l.name===n)||o.find(l=>String(l.name||"").toLowerCase().includes(s));if(!a?.udid)throw new Error(`No available iOS Simulator found for ${n}.`);return a.state==="Booted"?O.appendFileSync(t,`Using already booted iOS Simulator ${a.name} (${a.udid}).
|
|
2153
|
+
`):(O.appendFileSync(t,`Booting iOS Simulator ${a.name} (${a.udid})...
|
|
2154
|
+
`),ht("xcrun",["simctl","boot",a.udid],t)!==0&&O.appendFileSync(t,`simctl boot returned non-zero; continuing to bootstatus in case it was already booting.
|
|
2155
|
+
`),Xi("xcrun",["simctl","bootstatus",a.udid,"-b"],t)),{name:String(a.name||n),udid:a.udid}}function rf(e,t){if(e.endsWith(".ipa"))throw new Error("iOS Maestro runs need a simulator .app.zip artifact, not an App Store .ipa.");if(e.endsWith(".zip")){let n=x.join(t,"ios-app");O.mkdirSync(n,{recursive:!0}),new Fr(e).extractAllTo(n,!0);let r=to(n);if(!r)throw new Error("Could not find a .app bundle inside the iOS artifact zip.");return r}if(e.endsWith(".app"))return e;throw new Error("iOS Maestro runs need a .app bundle or .app.zip artifact.")}function Za(e,t){let n=x.join(e,"Info.plist");if(!O.existsSync(n))return O.appendFileSync(t,`Could not find Info.plist in ${e}; skipping uninstall.
|
|
2156
|
+
`),null;let r=dt("/usr/bin/plutil",["-extract","CFBundleIdentifier","raw","-o","-",n],{encoding:"utf-8",env:process.env}),i=String(r.stdout||"").trim();return r.status!==0||!i?(O.appendFileSync(t,`Could not read CFBundleIdentifier from Info.plist; skipping uninstall.
|
|
2157
|
+
`),null):i}function Ki(e,t,n,r){let i=x.join(e,n);ht("xcrun",["simctl","io",r||"booted","screenshot",i],t)!==0&&O.appendFileSync(t,`[WARN] Could not capture iOS simulator screenshot: ${n}
|
|
2158
|
+
`)}function of(e,t,n){let r=x.join(e,"ios-simulator-recording.mp4");O.appendFileSync(t,`Starting iOS simulator recording: ${r}
|
|
2159
|
+
`);let i=Ha("xcrun",["simctl","io",n||"booted","recordVideo",r],{stdio:["ignore","pipe","pipe"],env:process.env});return i.stdout?.on("data",o=>{O.appendFileSync(t,o)}),i.stderr?.on("data",o=>{O.appendFileSync(t,o)}),i.on("error",o=>{O.appendFileSync(t,`[WARN] Could not start iOS simulator recording: ${o.message}
|
|
2160
|
+
`)}),i}async function La(e,t){e&&await new Promise(n=>{let r=!1,i=()=>{r||(r=!0,n())};e.once("exit",i),e.once("close",i),e.killed||(O.appendFileSync(t,`Stopping iOS simulator recording...
|
|
2161
|
+
`),e.kill("SIGINT")),setTimeout(()=>{!r&&!e.killed&&(O.appendFileSync(t,`[WARN] iOS simulator recording did not stop after SIGINT; sending SIGKILL.
|
|
2162
|
+
`),e.kill("SIGKILL")),i()},5e3).unref?.()})}function sf(e){let t=[],n=r=>{let i;try{i=O.readdirSync(r,{withFileTypes:!0})}catch{return}for(let o of i){let s=x.join(r,o.name);if(o.isDirectory()){n(s);continue}if(!o.isFile()||o.name.startsWith("._"))continue;let a=kp[x.extname(o.name).toLowerCase()];if(!a)continue;let l;try{l=O.statSync(s).size}catch{continue}l<0||l>xp||t.push({path:x.relative(e,s).split(x.sep).join("/"),size:l,absolutePath:s,mimeType:a})}};return n(e),t.sort((r,i)=>r.path.localeCompare(i.path)).slice(0,Np)}async function Fa({apiBase:e,projectId:t,testRunId:n,runnerToken:r,outputDir:i,logPath:o}){try{let s=sf(i);if(s.length===0)return[];O.appendFileSync(o,`Publishing ${s.length} visual Maestro artifact(s)...
|
|
2163
|
+
`);let a=await yn.post(`${e}/internal/tests/${encodeURIComponent(n)}/media-upload-urls`,{projectId:t,runnerToken:r,files:s.map(({path:u,size:f})=>({path:u,size:f}))},{timeout:3e4}),l=Array.isArray(a.data?.uploads)?a.data.uploads:[],d=new Map(s.map(u=>[u.path,u])),c=[];for(let u of l){let f=String(u?.path||""),p=d.get(f),h=String(u?.uploadUrl||""),g=String(u?.mimeType||"");if(!(!p||!h||g!==p.mimeType))try{await Lr(p.absolutePath,h,p.mimeType),c.push({path:p.path,size:p.size})}catch(y){O.appendFileSync(o,`[WARN] Could not upload visual Maestro artifact ${p.path}: ${y?.message||y}
|
|
2164
|
+
`)}}return O.appendFileSync(o,`Published ${c.length}/${s.length} visual Maestro artifact(s).
|
|
2165
|
+
`),c}catch(s){return O.appendFileSync(o,`[WARN] Could not publish visual Maestro artifacts: ${s?.message||s}
|
|
2166
|
+
`),[]}}function af(e,t,n){let r=Za(e,t);if(!r)return;O.appendFileSync(t,`Uninstalling existing iOS app data for ${r} if present...
|
|
2167
|
+
`),ht("xcrun",["simctl","uninstall",n||"booted",r],t)!==0&&O.appendFileSync(t,`No existing app install removed for ${r}; continuing.
|
|
2168
|
+
`)}function lf(e,t){if(!e?.appId)return;if(O.appendFileSync(t,`Cleaning up installed app after Maestro run...
|
|
2169
|
+
`),e.platform==="ios"){let i=ht("xcrun",["simctl","uninstall",e.deviceId||"booted",e.appId],t);i===0?O.appendFileSync(t,`Uninstalled iOS app ${e.appId} after Maestro run.
|
|
2170
|
+
`):O.appendFileSync(t,`Warning: failed to uninstall iOS app ${e.appId} after Maestro run: xcrun simctl uninstall exited with code ${i}
|
|
2171
|
+
`);return}let n=e.deviceId?["-s",e.deviceId]:[],r=ht("adb",[...n,"uninstall",e.appId],t);r===0?O.appendFileSync(t,`Uninstalled Android app ${e.appId} after Maestro run.
|
|
2172
|
+
`):O.appendFileSync(t,`Warning: failed to uninstall Android app ${e.appId} after Maestro run: adb uninstall exited with code ${r}
|
|
2173
|
+
`)}function cf(e,t){let n=dt("adb",["devices"],{encoding:"utf-8",env:process.env});if(n.status!==0||n.error)return O.appendFileSync(t,`[WARN] Could not list Android devices before install; using adb default target.
|
|
2169
2174
|
`),null;let r=String(n.stdout||"").split(`
|
|
2170
|
-
`).map(i=>i.trim().split(/\s+/)).filter(i=>i.length>=2&&i[1]==="device").map(i=>i[0]).filter(Boolean);return e&&r.includes(e)?(
|
|
2171
|
-
`),e):r.length===1?(
|
|
2172
|
-
`),r[0]):(r.length>1&&
|
|
2173
|
-
`),null)}function
|
|
2174
|
-
`),null)}function
|
|
2175
|
-
`)[0]?.trim()||null}async function
|
|
2176
|
-
`)}try{await
|
|
2177
|
-
`)}try{ht("tar",["-czf",o,"-C",t,
|
|
2178
|
-
`)}}function Kp(e){if(!e.endsWith(".apk"))return T.error(k.red("Local Android Maestro runs need an APK artifact.")),!1;T.info(k.dim("Installing APK on local Android device/emulator..."));let t=dt("adb",["install","-r",e],{stdio:"inherit",env:process.env});return t.error?(T.error(k.red(`adb failed to start: ${t.error.message}`)),!1):t.status!==0?(T.error(k.red(`adb install failed with exit code ${t.status??1}`)),!1):!0}function Wp(e,t){if(e.endsWith(".ipa"))return T.error(k.red("Local iOS Maestro runs need an iOS Simulator .app.zip artifact, not an App Store .ipa.")),!1;let n=e;if(e.endsWith(".zip")){let i=N.join(t,"ios-app");P.mkdirSync(i,{recursive:!0}),new Mr(e).extractAllTo(i,!0);let o=eo(i);if(!o)return T.error(k.red("Could not find a .app bundle inside the downloaded zip.")),!1;n=o}if(!n.endsWith(".app"))return T.error(k.red("Local iOS Maestro runs need an iOS Simulator .app bundle or .app.zip artifact.")),!1;T.info(k.dim("Installing app on booted iOS Simulator..."));let r=dt("xcrun",["simctl","install","booted",n],{stdio:"inherit",env:process.env});return r.error?(T.error(k.red(`xcrun failed to start: ${r.error.message}`)),!1):r.status!==0?(T.error(k.red(`iOS Simulator install failed with exit code ${r.status??1}`)),!1):!0}function eo(e){let t=P.readdirSync(e,{withFileTypes:!0});for(let n of t){let r=N.join(e,n.name);if(n.isDirectory()&&n.name.endsWith(".app"))return r;if(n.isDirectory()){let i=eo(r);if(i)return i}}return null}function Yp(e,t){let n=String(t||"").toLowerCase();return n==="android"?e.find(r=>mn(r,".apk")):n==="ios"?e.find(r=>mn(r,".app.zip"))||e.find(r=>mn(r,".zip")):e.find(r=>mn(r,".apk"))||e.find(r=>mn(r,".app.zip"))||e.find(r=>mn(r,".zip"))}function mn(e,t){return String(e?.name||e?.downloadUrl||e?.url||"").toLowerCase().endsWith(t)}function to(e){let t=String(e||"").toLowerCase();if(t.includes(".apk"))return"android";if(t.includes(".app.zip")||t.endsWith(".app")||t.includes(".ipa"))return"ios"}function za(e){if(e)try{return N.basename(new URL(e).pathname)||void 0}catch{return N.basename(e)||void 0}}function qp(e){return e?e.match(/[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/i)?.[0]:void 0}function Ka(e,t){if(!e.jsonOutput)return;let n=N.resolve(e.jsonOutput),r={...t,updatedAt:new Date().toISOString()};try{let i=N.dirname(n);i&&i!=="."&&P.mkdirSync(i,{recursive:!0}),P.writeFileSync(n,JSON.stringify(r,null,2))}catch(i){T.warn(k.yellow(`Could not write Maestro metadata JSON: ${i.message}`))}}function Jp(e,t){if(!e.jsonOutput)return;let n=N.resolve(e.jsonOutput),r={mode:"local",...t,updatedAt:new Date().toISOString()};try{let i=N.dirname(n);i&&i!=="."&&P.mkdirSync(i,{recursive:!0}),P.writeFileSync(n,JSON.stringify(r,null,2))}catch(i){T.warn(k.yellow(`Could not write Maestro metadata JSON: ${i.message}`))}}import{spinner as Tt,text as Kn,select as lo,isCancel as Pt,cancel as co,log as tl}from"@clack/prompts";import X from"chalk";import ne from"fs";import Re from"path";import{spawn as tf,spawnSync as Wt}from"child_process";import nl from"axios";import qt from"os";import fo from"crypto";import Xp from"crypto";import hn from"axios";import Wa from"fs";var zn=6e4,Zp=12e4,no=4,Vn=e=>encodeURIComponent(e),Qp=e=>new Promise(t=>setTimeout(t,e));async function yn(e,t){let n;for(let r=1;r<=no;r++)try{return await t()}catch(i){if(n=i,r>=no||!ef(i))throw i;let o=Number(i.response?.headers?.["retry-after"]),s=Number.isFinite(o)&&o>0?o*1e3:Math.min(2e3*r*r,15e3);console.log(`[Google Play] ${e} failed (attempt ${r}/${no}); retrying in ${Math.round(s/1e3)}s...`),await Qp(s)}throw n}function ef(e){let t=e.response?.status;return t?t===408||t===409||t===425||t===429||t>=500:!0}async function qa(e){let{packageName:t,serviceAccount:n,aabPath:r,track:i,releaseStatus:o,userFraction:s,changesNotSentForReview:a}=e,l;try{let c={Authorization:`Bearer ${await Ya(n)}`,Connection:"close"},u=Vn(t);if(l=(await yn("create edit",()=>hn.post(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${u}/edits`,{},{headers:c,timeout:zn}))).data.id,!l)throw new Error("Google Play edit insert succeeded but did not return an edit id.");let p=Vn(l),h=Wa.statSync(r),g=await yn("upload AAB",()=>hn.post(`https://androidpublisher.googleapis.com/upload/androidpublisher/v3/applications/${u}/edits/${p}/bundles`,Wa.createReadStream(r),{headers:{...c,"Content-Type":"application/octet-stream","Content-Length":h.size},maxBodyLength:1/0,maxContentLength:1/0,params:{uploadType:"media"},timeout:Zp})),y=Number(g.data.versionCode);if(!y)throw new Error("Google Play upload succeeded but did not return a versionCode.");let b={versionCodes:[String(y)],status:o};return(o==="inProgress"||o==="halted")&&typeof s=="number"&&(b.userFraction=s),await yn("update track",()=>hn.put(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${u}/edits/${p}/tracks/${Vn(i)}`,{releases:[b]},{headers:c,timeout:zn})),await yn("commit edit",()=>hn.post(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${u}/edits/${p}:commit`,{},{headers:c,params:a?{changesNotSentForReview:!0}:void 0,timeout:zn})),{editId:l,versionCode:y,track:i,releaseStatus:o,userFraction:s}}catch(d){if(l)try{let u=await Ya(n);await yn("delete edit",()=>hn.delete(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${Vn(t)}/edits/${Vn(l)}`,{headers:{Authorization:`Bearer ${u}`,Connection:"close"},timeout:zn}))}catch{}let c=d.response?.data?.error?.message||d.message;throw new Error(`Google Play API Error: ${c}`)}}async function Ya(e){let t=Math.floor(Date.now()/1e3),n=t+3600,r={alg:"RS256",typ:"JWT"},i={iss:e.client_email,sub:e.client_email,aud:"https://oauth2.googleapis.com/token",iat:t,exp:n,scope:"https://www.googleapis.com/auth/androidpublisher"},o=Buffer.from(JSON.stringify(r)).toString("base64url"),s=Buffer.from(JSON.stringify(i)).toString("base64url"),a=`${o}.${s}`,l=Xp.createSign("RSA-SHA256");l.update(a);let d=l.sign(e.private_key,"base64url"),c=`${a}.${d}`;return(await yn("OAuth token exchange",()=>hn.post("https://oauth2.googleapis.com/token",{grant_type:"urn:ietf:params:oauth:grant-type:jwt-bearer",assertion:c},{headers:{Connection:"close"},timeout:zn}))).data.access_token}var nf=5e3,rf=12,rl=100,ro=24,Ja=8e3,of={completed:"completed",draft:"draft",halted:"halted",inprogress:"inProgress","in-progress":"inProgress"},sf=e=>e?.type==="google_service_account",Ur=e=>e?.bundleId||e?.packageName||e?.meta?.packageName||e?.meta?.bundleId,il=e=>e.submitArgs||process.argv.slice(3).join(" ");async function jr(e){let t=Tt(),n=we(),r=af(e);if(!r){process.exitCode=1;return}let i=e.projectId||r.projectId,o=e.profile||e.buildProfile||W(r,"store","production");if(!i){ae(`${m.configFileName} is missing projectId. Pass --project-id in runner mode.`),process.exitCode=1;return}r.projectId=i,he(X.dim(`Submit for project: ${r.name||i} | Profile: ${o}`));let s=e.platform;if(!s){let S=await lo({message:"Select platform to submit:",options:[{value:"ios",label:"iOS (App Store Connect / TestFlight)"},{value:"android",label:"Android (Google Play Console)"}]});if(Pt(S)){co("Operation cancelled");return}s=S}if(s=String(s).toLowerCase(),s!=="ios"&&s!=="android"){ae(`Platform ${s} is not supported. Use 'ios' or 'android'.`),process.exitCode=1;return}let a=s==="ios"&&!e.local&&e.sshHost?_f(r,o,e):null;if(s==="ios"&&!e.local&&!a){await lf(r,o,e);return}let l=e.submitId,d=!!(e.local&&l),c=l||null,u=async(S,R={})=>{c&&await pf(i,c,{status:S,...R})},f=s==="android"?e.packageName||e.androidPackage||Sf(r,o):void 0,p=s==="ios"?e.bundleId||e.iosBundleIdentifier||If(r,o):void 0,h,g,y,b=!1;try{s==="android"&&(h=e.track||r.submit?.[o]?.android?.track||r.submit?.production?.android?.track||"internal",g=wf(r,o,e.releaseStatus),y=Rf(r,o,e.rollout),b=$f(r,o,e.changesNotSentForReview),Of(g,y))}catch(S){ae(S.message),process.exitCode=1;return}if(s==="android"&&!d&&(c=await cf(r,i,s,o,e,{packageName:f,track:h,releaseStatus:g,rollout:y,changesNotSentForReview:b}),!c)){ae("Could not create submission tracking record. Submission was not started."),process.exitCode=1;return}await u("running",{platform:s,profile:o,packageName:f,track:h,releaseStatus:g,rollout:y,startTime:Date.now(),...d?mf():{}});let A=null,v=null;try{v=await Df(i,s,e,n?.token),A=v?.filePath||null}catch(S){await u("failed",{error:`Failed to resolve submission artifact: ${S.message}`,endTime:Date.now()}),ae(`Failed to resolve submission artifact: ${S.message}`),process.exitCode=1;return}if(!A){let S=Cf(s,e);await u("failed",{error:S,endTime:Date.now()}),ae(S),process.exitCode=1;return}await u("running",{buildId:v?.buildId,artifactName:v?.artifactName,artifactSource:v?.source}),he(`Using artifact: ${X.green(Re.basename(A))} `),t.start("Fetching submission credentials from Dashboard...");let E;try{let R=(await I.get(`/credentials/${i}`)).data.credentials||[];if(s==="android"&&!f){t.stop("Package name missing"),ae(`Could not resolve Android package name. Set android.package or build.${o}.android.package in ${m.configFileName}.`),await u("failed",{error:"Could not resolve Android package name.",endTime:Date.now()}),process.exitCode=1;return}let $=R.filter(sf),O=s==="ios"?R.filter(F=>F.type==="asc_api_key"):Ef($,f);if(O.length===0){if(t.stop("Credentials missing"),ae(s==="android"?`No Google Play service credential found for package ${f}.`:`No Service Credentials found for ${s}.`),s==="android"){let F=$.map(Ur).filter(Boolean).join(", ");F&&he(`Found Google Play service credential(s) for: ${F}`),he(`Use '${m.nameLower} credentials:service --platform android --package-name ${f}' or upload it under that package in the Dashboard.`)}else he(`Use '${m.nameLower} credentials:service --platform ${s}' or use the Dashboard to upload them.`);await u("failed",{error:`No submission credentials found for ${s}.`,endTime:Date.now()}),process.exitCode=1;return}if(E=hf(O,e.credentialId),!E&&s==="ios"&&p&&(E=yf(O,p)),E||O.length===1)E=E||O[0],t.stop(`Using: ${E.name}`),s==="android"&&Ur(E)==="*"&&he(X.yellow(`Using legacy wildcard Google Play credential for ${f}. Upload a package-scoped credential when possible.`));else{if(t.stop("Multiple credentials found"),bf()){let D=O.map(M=>`${M.name||"credential"} (${M.credentialId||M.id||"no-id"})`).join(", ");ae(`Multiple ${s==="ios"?"App Store Connect":"Google Play"} credentials found. Use --credential-id in CI. Available: ${D}`),await u("failed",{error:"Multiple submission credentials found; --credential-id is required in CI.",endTime:Date.now()}),process.exitCode=1;return}let F=await lo({message:`Choose a ${s==="ios"?"App Store Connect":"Google Play"} credential:`,options:O.map(D=>({value:D.credentialId,label:D.name,hint:`${D.keyId?`ID: ${D.keyId}`:""} ${D.issuerId?`(Issuer: ${D.issuerId.substring(0,8)}...)`:""}`}))});if(Pt(F)){co("Submission cancelled"),await u("failed",{error:"Submission cancelled while selecting credential.",endTime:Date.now()}),process.exitCode=1;return}E=O.find(D=>D.credentialId===F),he(`Using selected: ${X.green(E.name)}`)}}catch(S){t.stop("Failed to fetch credentials"),ae(`API Error: ${S.message} `),await u("failed",{error:`Failed to fetch credentials: ${S.message}`,endTime:Date.now()}),process.exitCode=1;return}let L=ne.mkdtempSync(Re.join(qt.tmpdir(),`${m.nameLower}-submit-`)),U=E.keyId||E.meta?.keyId,j=E.issuerId||E.meta?.issuerId,H=E.type==="asc_api_key"?`AuthKey_${U}.p8`:"service-account.json",te=Re.join(L,H);t.start("Downloading secure key...");try{let S=await I.get(`/credentials/${E.credentialId}/download`,{params:{projectId:i,format:"raw"}});if(S.data.status!=="success"||!S.data.downloadUrl)throw new Error("Failed to get secure download URL");let R=await nl.get(S.data.downloadUrl,{responseType:"arraybuffer"});ne.writeFileSync(te,Buffer.from(R.data)),t.stop("Key downloaded to secure temp storage")}catch(S){t.stop("Download failed"),ae(`Failed to download key: ${S.message}`);try{ne.rmSync(L,{recursive:!0,force:!0})}catch{}await u("failed",{error:`Failed to download credential key: ${S.message}`,endTime:Date.now()}),process.exitCode=1;return}he(X.blue(`Initiating ${s==="ios"?"TestFlight":"Google Play"} submission...`));let ie=!1,Ce;try{if(s==="ios"){if(!U){let R=await Kn({message:"Enter App Store Connect Key ID (e.g. 2X948D...):",validate:$=>$.length>0?void 0:"Key ID is required"});if(Pt(R)){await u("failed",{error:"Submission cancelled while entering ASC Key ID.",endTime:Date.now()}),process.exitCode=1;return}U=R}if(!j||j==="undefined"){let R=await Kn({message:"Enter App Store Connect Issuer ID (Found on ASC Keys page):",validate:$=>$.length>0?void 0:"Issuer ID is required"});if(Pt(R)){await u("failed",{error:"Submission cancelled while entering ASC Issuer ID.",endTime:Date.now()}),process.exitCode=1;return}j=R}he(`Using ASC Key ID: ${U}`),he(`Using ASC Issuer ID: ${j}`);let S=a?await kf(A,te,j,U,p,a):await Tf(A,te,j,U,p);po(`${s==="ios"?"App Store":"Google Play"} submission successful!`),ie=!0}else Ce=await Ff(A,te,h||"internal",f,g||"completed",y,b,o),po("Google Play submission successful!"),ie=!0}catch(S){ae(`Submission failed: ${S.message}`),await u("failed",{error:S.message,endTime:Date.now()}),Ct(e,{status:"failed",projectId:i,submitId:c,platform:s,profile:o,buildId:v?.buildId||e.buildId,artifactName:v?.artifactName,error:S.message,dashboardUrl:c?Yt(c,i):void 0}),process.exitCode=1}finally{ie&&(await u("success",{endTime:Date.now(),versionCode:Ce?.versionCode,track:h,releaseStatus:g}),Ct(e,{status:"success",projectId:i,submitId:c,platform:s,profile:o,buildId:v?.buildId||e.buildId,artifactName:v?.artifactName,versionCode:Ce?.versionCode,track:h,releaseStatus:g,dashboardUrl:c?Yt(c,i):void 0})),Qf(L),A&&A.includes(`${m.nameLower}-artifact-`)}}function af(e){let t=`./${m.configFileName}`;if(ne.existsSync(t))try{return JSON.parse(ne.readFileSync(t,"utf-8"))}catch(n){return ae(`Failed to read ${m.configFileName}: ${n.message}`),null}return e.projectId?{projectId:e.projectId}:(ae(`No ${m.configFileName} found. Run \`${m.nameLower} init\` or \`${m.nameLower} link\` first.`),null)}async function lf(e,t,n){let r=n.projectId||e.projectId;if(!r){ae(`${m.configFileName} is missing projectId.`),process.exitCode=1;return}let i=n.submitId||fo.randomUUID(),o=!!n.latest||!n.buildId,s=df({...n,latest:o,profile:t,projectId:r,submitId:i}),a={projectId:r,submitId:i,platform:"ios",profile:t,latest:o,buildId:n.buildId,credentialId:n.credentialId,status:"pending",source:"cli",submitArgs:il(n),runnerArgs:s,runnerCommand:[m.nameLower,"submit",...s].map(Af).join(" "),appName:e.name,startTime:Date.now()},l=Tt();l.start("Queuing iOS submit on macOS runner...");try{let d=await I.post("/submissions",a),c=d.data?.submission||d.data?.submit||{},u=d.data?.dashboardUrl||Yt(i,r);l.stop("iOS submit queued"),he(`Submission ID: ${X.cyan(i)}`),he(`Dashboard: ${X.blue.underline(u)}`),Ct(n,{status:"pending",projectId:r,submitId:i,platform:"ios",profile:t,latest:o,buildId:n.buildId,dashboardUrl:u}),await uf(r,i,{...n,profile:t})}catch(d){l.stop("Could not queue iOS submit"),ae(gf(d)),process.exitCode=1}}async function cf(e,t,n,r,i,o={}){let s=i.submitId||fo.randomUUID(),a=!!i.latest||!i.buildId,l={projectId:t,submitId:s,platform:n,profile:r,latest:a,buildId:i.buildId,credentialId:i.credentialId,status:"running",source:"cli-direct",submitArgs:il(i),appName:e.name,startTime:Date.now(),...o};try{let d=await I.post("/submissions",l),c=d.data?.submission||d.data?.submit||{},u=d.data?.dashboardUrl||c.dashboardUrl||Yt(s,t);return he(`Submission ID: ${X.cyan(s)}`),he(`Dashboard: ${X.blue.underline(u)}`),Ct(i,{status:"running",projectId:t,submitId:s,platform:n,profile:r,latest:a,buildId:i.buildId,dashboardUrl:u}),s}catch(d){let c=d.response?.data?.message||d.response?.data?.error||d.message;return he(X.yellow(`Could not create submission tracking record: ${c}`)),null}}function df(e){let t=["--local","--submit-id",e.submitId,"--project-id",e.projectId,"--platform","ios","--profile",e.profile||"production"];return e.buildId?t.push("--build-id",e.buildId):t.push("--latest"),e.credentialId&&t.push("--credential-id",e.credentialId),e.bundleId&&t.push("--bundle-id",e.bundleId),e.packageName&&t.push("--package-name",e.packageName),e.quiet&&t.push("--quiet"),e.jsonOutput&&t.push("--json-output",e.jsonOutput),t.filter(n=>n!=null&&n!=="")}async function uf(e,t,n){let r=Tt(),i=0,o=0;for(n.quiet||r.start("Waiting for iOS submit runner...");;)try{let s=await I.get(`/submissions/${e}/${t}`),a=s.data?.submission||s.data?.submit||s.data,l=String(a?.status||"pending").toLowerCase();i=0;let d=Array.isArray(a?.logs)?a.logs:[];for(let c=o;c<d.length;c++){let u=d[c];u&&console.log(X.dim(String(u)))}if(o=d.length,["success","completed","succeeded"].includes(l)){n.quiet||r.stop("iOS submit completed"),po("App Store submission successful!"),Ct(n,{status:"success",projectId:e,submitId:t,platform:"ios",profile:a?.profile||n.profile||"production",buildId:a?.buildId||n.buildId,artifactName:a?.artifactName,dashboardUrl:a?.dashboardUrl||Yt(t,e)});return}if(["failed","error","cancelled","canceled"].includes(l)){n.quiet||r.stop("iOS submit failed");let c=a?.error||a?.message||"Unknown iOS submit failure.";ae(c),Ct(n,{status:"failed",projectId:e,submitId:t,platform:"ios",profile:a?.profile||n.profile||"production",buildId:a?.buildId||n.buildId,artifactName:a?.artifactName,error:c,dashboardUrl:a?.dashboardUrl||Yt(t,e)}),process.exitCode=1;return}n.quiet||r.message(`iOS submit ${l}...`),await uo(nf)}catch(s){if(i++,i>=rf){n.quiet||r.stop("Lost connection to iOS submit status"),ae(`Could not fetch iOS submit status after ${i} attempts: ${s.message}`),process.exitCode=1;return}await uo(Math.min(2e3*i,15e3))}}async function pf(e,t,n){let r;for(let i=1;i<=3;i++)try{await I.patch(`/submissions/${e}/${t}`,n);return}catch(o){if(r=o,i>=3||!ff(o))break;await uo(1e3*i)}tl.warn(X.dim(`Could not report submission status: ${r?.message||r}`))}function ff(e){let t=e.response?.status;return!t||t===408||t===409||t===425||t===429||t>=500}function mf(){let e={gitlabJobId:process.env.CI_JOB_ID,gitlabJobUrl:process.env.CI_JOB_URL,gitlabPipelineId:process.env.CI_PIPELINE_ID,gitlabProjectId:process.env.CI_PROJECT_ID,gitlabProjectPath:process.env.CI_PROJECT_PATH};return Object.fromEntries(Object.entries(e).filter(([,t])=>!!t))}function gf(e){let t=e.response?.status,n=e.response?.data?.message||e.response?.data?.error;return t===404||t===405?["Managed iOS submit is not enabled on this Mach API yet.","Deploy the API/dashboard submission orchestration endpoint, then retry the same command.","Expected API: POST /submissions and GET/PATCH /submissions/:projectId/:submitId."].join(`
|
|
2179
|
-
`):n||e.message||String(e)}function Yt(e,t){if(!e)return at;let n=t?`?projectId=${encodeURIComponent(t)}`:"";return`${at}/submissions/${e}${n}`}function Ct(e,t){if(!e.jsonOutput)return;let n=Re.resolve(e.jsonOutput),r={...t,url:t.url||t.dashboardUrl||Yt(t.submitId,t.projectId),updatedAt:new Date().toISOString()};try{let i=Re.dirname(n);i&&i!=="."&&ne.mkdirSync(i,{recursive:!0}),ne.writeFileSync(n,JSON.stringify(r,null,2))}catch(i){tl.warn(X.yellow(`Could not write submission metadata JSON: ${i.message}`))}}function hf(e,t){return t&&e.find(n=>n.credentialId===t||n.id===t||n.keyId===t||n.meta?.keyId===t)||null}function yf(e,t){let n=e.filter(r=>[r.bundleId,r.bundleIdentifier,r.appIdentifier,r.meta?.bundleId,r.meta?.bundleIdentifier,r.meta?.appIdentifier].filter(Boolean).map(String).includes(t));return n.length===1?n[0]:null}function bf(){return process.env.CI==="true"||process.env.CI==="1"||!process.stdin.isTTY}function uo(e){return new Promise(t=>setTimeout(t,e))}function Af(e){return/^[a-zA-Z0-9_./:=@-]+$/.test(e)?e:`'${e.replace(/'/g,"'\\''")}'`}function Sf(e,t){if(e.submit?.[t]?.android?.package)return e.submit[t].android.package;let n=Er(e,t);if(n)return n;let r=Re.join(process.cwd(),"app.json");if(ne.existsSync(r))try{return JSON.parse(ne.readFileSync(r,"utf-8")).expo?.android?.package}catch{}let i=Re.join(process.cwd(),"app.config.json");if(ne.existsSync(i))try{let o=JSON.parse(ne.readFileSync(i,"utf-8"));return o.expo?.android?.package||o.android?.package}catch{}}function Ef(e,t){let n=e.filter(o=>Ur(o)===t);if(n.length>0)return n;let r=e.filter(o=>{let s=Ur(o);return!s||s==="*"});return e.length>0&&e.length===r.length?r:[]}function If(e,t){return e.submit?.[t]?.ios?.bundleIdentifier?e.submit[t].ios.bundleIdentifier:e.submit?.[t]?.ios?.bundleId?e.submit[t].ios.bundleId:Ir(e,t)}function _f(e,t,n){let r=e.submit?.[t]?.ios||{},i=e.submit?.production?.ios||{},o=n.sshHost||r.sshHost||i.sshHost||process.env.MACH_IOS_SUBMIT_SSH_HOST;return o?{sshHost:o,sshUser:n.sshUser||r.sshUser||i.sshUser||process.env.MACH_IOS_SUBMIT_SSH_USER||process.env.USER||"ubuntu",sshKey:n.sshKey||r.sshKey||i.sshKey||process.env.MACH_IOS_SUBMIT_SSH_KEY}:null}function wf(e,t,n){let r=n||e.submit?.[t]?.android?.releaseStatus||e.submit?.production?.android?.releaseStatus||"completed";return vf(r)}function vf(e){let t=of[String(e).trim().toLowerCase()];if(!t)throw new Error(`Invalid Android release status "${e}". Use completed, draft, halted, or inProgress.`);return t}function Rf(e,t,n){let r=n??e.submit?.[t]?.android?.rollout??e.submit?.[t]?.android?.userFraction??e.submit?.[t]?.android?.rolloutFraction??e.submit?.production?.android?.rollout??e.submit?.production?.android?.userFraction??e.submit?.production?.android?.rolloutFraction;if(r==null||r==="")return;let i=Number(r);if(!Number.isFinite(i)||i<=0||i>=1)throw new Error(`Invalid Android rollout fraction "${r}". Use a number greater than 0 and less than 1, for example 0.1.`);return i}function $f(e,t,n){let r=n??e.submit?.[t]?.android?.changesNotSentForReview??e.submit?.[t]?.android?.changes_not_sent_for_review??e.submit?.production?.android?.changesNotSentForReview??e.submit?.production?.android?.changes_not_sent_for_review??!1;return r===!0||r==="true"||r==="1"}function Of(e,t){if(e==="inProgress"&&t===void 0)throw new Error("Google Play staged rollout requires --rollout <fraction> when --release-status inProgress is used.");if(e!=="inProgress"&&e!=="halted"&&t!==void 0)throw new Error("Android rollout fraction can only be used with --release-status inProgress or halted.")}async function Df(e,t,n,r){let i=n.buildId?"id":n.latest?"latest":null;if(!i){let s=await lo({message:"Select artifact source:",options:[{value:"latest",label:`Latest Production Build (${m.name})`},{value:"id",label:`Input Build ID (${m.name})`},{value:"url",label:"Remote URL"},{value:"local",label:"Local File Path"}]});if(Pt(s))return co("Operation cancelled"),null;i=s}if(i==="local"){let s=await Kn({message:"Enter path to artifact (.ipa/.aab):",validate:a=>{if(!ne.existsSync(a))return"File not found";if(t==="ios"&&!a.endsWith(".ipa"))return"Must be an .ipa file";if(t==="android"&&!a.endsWith(".aab"))return"Must be an .aab file"}});return Pt(s)?null:{filePath:s,source:"local"}}let o=Tt();if(i==="latest"){let s=n.profile||n.buildProfile;o.start(`Fetching latest${s?` ${s}`:""} build...`);try{let a=await I.get(`/builds/${e}`,{params:{limit:50}});if(a.data.status!=="success")throw new Error(a.data.message);let l=a.data.builds||[],d=s?.toLowerCase(),c=E=>E.platform?.toLowerCase()===t.toLowerCase()&&E.status?.toLowerCase()==="success",u=E=>d?[E.buildProfile,E.profile,E.profileName,E.buildType].filter(Boolean).some(L=>String(L).toLowerCase()===d):!0,f=l.filter(E=>c(E)&&u(E)),p=f.find(E=>E.buildType?.toLowerCase()==="store"||E.distribution?.toLowerCase()==="store")||f[0],h=l.some(E=>E.platform?.toLowerCase()===t.toLowerCase()&&E.status?.toLowerCase()==="success");if(!p)return o.stop("No suitable build found"),ae(s&&h?`No successful ${t} builds found for profile "${s}".`:"No successful builds found for this platform."),null;o.stop(`Found build: ${p.buildId}`);let g=p.artifacts||[];if(g.length===0||g.every(E=>!(E.url||E.downloadUrl)))try{let E=await I.get(`/builds/${e}/${p.buildId}/artifacts`);E.data.status==="success"&&E.data.artifacts?.length>0?(g=E.data.artifacts.map(L=>({...L,url:L.url||L.downloadUrl})),console.log(X.cyan(` [RECOVERY] Fetched ${g.length} artifact(s) with download URLs.`))):console.log(X.yellow(" [RECOVERY] /artifacts endpoint returned 0 artifacts."))}catch(E){console.log(X.red(` [RECOVERY] /artifacts fetch failed: ${E.message}`))}let b=t==="ios",A=io(g,t);if(!A||!(A.url||A.downloadUrl))return ae("Build found but artifact URL is missing."),null;let v=A.url||A.downloadUrl;return{filePath:await oo(v,b?"ios":"android"),buildId:p.buildId,artifactName:A.name,source:"latest"}}catch(a){return o.stop("Fetch failed"),ae(`API Error: ${a.message}`),null}}if(i==="id"){let s=n.buildId||await Kn({message:"Enter Build ID:",validate:l=>l.length<5?"Invalid ID":void 0});if(Pt(s))return null;let a=String(s);o.start("Fetching build...");try{let l=null;try{let p=await I.get(`/builds/${e}/${a}`);p.data.status==="success"&&(l=p.data.build)}catch(p){p.response?.status!==404&&console.log(X.dim(` [RECOVERY] Project build lookup skipped: ${p.message}`))}if(!l){let p=await I.get(`/build/${a}`);if(p.data.status!=="success")throw new Error(p.data.message);l=p.data.build}if(!l)throw new Error(`Build ${a} was not found.`);let d=t==="ios",c=Fr(l.artifacts);Pf(c)||(c=await Xa(e,a,c));let u=io(c,t);if(u||(c=await Xa(e,a,c),u=io(c,t)),!u)throw new Error(`No ${d?".ipa":".aab"} artifact found for build ${a}. The build exists, but its artifact list does not contain a downloadable submission artifact.`);let f=u.url||u.downloadUrl;if(!f)throw new Error(`Artifact ${u.name||"(unnamed)"} for build ${a} has no download URL. Retry after the build artifact upload is visible in the Installation Hub.`);return o.stop(`Found build: ${l.buildId||a}`),{filePath:await oo(f,d?"ios":"android"),buildId:l.buildId||a,artifactName:u.name,source:"id"}}catch(l){throw o.stop("Fetch failed"),l}}if(i==="url"){let s=await Kn({message:"Enter Artifact URL:",validate:a=>a.startsWith("http")?void 0:"Must be a valid URL"});return Pt(s)?null:{filePath:await oo(s,t),source:"url"}}return null}function Fr(e){return(e||[]).map(t=>({...t,url:t.url||t.downloadUrl}))}function Pf(e){return e.some(t=>!!(t.url||t.downloadUrl))}function io(e,t){let n=t==="ios",r=n?"ipa":"aab",i=n?".ipa":".aab";return e.find(o=>{let s=String(o.type||"").toLowerCase(),a=String(o.name||"").toLowerCase(),l=String(o.url||o.downloadUrl||"").toLowerCase();return s?s===r:a.endsWith(i)||l.includes(i)})||null}function Cf(e,t){let n=e==="ios"?".ipa":".aab";if(t.buildId)return`No downloadable ${n} artifact found for build ${t.buildId}. Check that the build finished artifact upload before submitting.`;if(t.latest){let r=t.profile||t.buildProfile;return`No latest successful ${e}${r?` ${r}`:""} build has a downloadable ${n} artifact.`}return`No downloadable ${n} artifact was selected for submission.`}async function Xa(e,t,n){try{let r=await I.get(`/builds/${e}/${t}/artifacts`);if(r.data.status==="success"&&r.data.artifacts?.length>0){let i=Fr(r.data.artifacts);return console.log(X.cyan(` [RECOVERY] Fetched ${i.length} artifact(s) with download URLs.`)),i}}catch(r){console.log(X.dim(` [RECOVERY] Project artifact lookup skipped: ${r.message}`))}try{let r=await I.get(`/public/builds/${t}`);if(r.data.status==="success"&&r.data.artifacts?.length>0){let i=Fr(r.data.artifacts);return console.log(X.cyan(` [RECOVERY] Fetched ${i.length} public artifact(s) with download URLs.`)),i}}catch(r){console.log(X.dim(` [RECOVERY] Public artifact lookup skipped: ${r.message}`))}return Fr(n)}async function oo(e,t,n=3){let r=Tt();r.start("Downloading artifact...");let i=ne.mkdtempSync(Re.join(qt.tmpdir(),`${m.nameLower}-artifact-`)),o=`app.${t==="ios"?"ipa":"aab"}`,s=Re.join(i,o);for(let a=1;a<=n;a++)try{a>1&&(r.message(`Downloading artifact (Retry ${a}/${n})...`),await new Promise(c=>setTimeout(c,2e3*a)));let l=ne.createWriteStream(s),d=await nl({url:e,method:"GET",responseType:"stream",timeout:6e4});return await new Promise((c,u)=>{d.data.pipe(l);let f=!1;d.data.on("error",p=>{f||(f=!0,l.close(),u(p))}),l.on("finish",()=>{f||c()}),l.on("error",p=>{f||(f=!0,u(p))})}),r.stop("Download complete"),s}catch(l){if(a===n)throw r.stop("Download failed"),l}throw new Error("Download failed after retries")}async function Tf(e,t,n,r,i){let o=Tt();if(i&&he(`Bundle ID: ${X.green(i)}`),!n||!r)throw ae(`Missing credentials: issuerId=${n}, keyId=${r}. Check your Dashboard.`),new Error("Missing ASC API Key Metadata (IssuerID or KeyID)");let s=ol(t,n,r),a=jf();return o.start("Uploading to TestFlight (pilot)..."),new Promise((l,d)=>{let c=Hf(),u=tf(a.command,["pilot","upload","--ipa",e,"--api_key_path",s,"--skip_submission","true","--skip_waiting_for_build_processing","true"],{stdio:["ignore","pipe","pipe"],env:a.env});u.stdout?.on("data",f=>c.append(f,process.stdout)),u.stderr?.on("data",f=>c.append(f,process.stderr)),u.on("close",f=>{if(c.flush(),f!==0){o.stop("Pilot failed");try{ne.unlinkSync(s)}catch{}d(Gf(f,c.lines()))}else{o.stop("IPA uploaded to TestFlight");try{ne.unlinkSync(s)}catch{}l({})}}),u.on("error",f=>{c.flush();try{ne.unlinkSync(s)}catch{}o.stop("Pilot execution error");let p=Xf(f);p.logs=c.lines(),d(p)})})}async function kf(e,t,n,r,i,o){let s=Tt();if(i&&he(`Bundle ID: ${X.green(i)}`),!n||!r)throw ae(`Missing credentials: issuerId=${n}, keyId=${r}. Check your Dashboard.`),new Error("Missing ASC API Key Metadata (IssuerID or KeyID)");let a=ol(t,n,r),l=`${o.sshUser}@${o.sshHost}`,d=Nf(o),c=xf(o),u="",f="";try{if(s.start(`Preparing remote iOS submit runner (${l})...`),u=Lf("ssh",[...d,"mktemp -d /tmp/mach-submit.XXXXXX"]).trim(),!u)throw new Error("Remote runner did not return a temp directory.");s.stop(`Remote runner ready: ${l}`),s.start("Uploading IPA and App Store Connect key to remote runner..."),so("scp",[...c,e,`${l}:${u}/app.ipa`],"IPA upload to remote runner"),so("scp",[...c,a,`${l}:${u}/api_key.json`],"ASC key upload to remote runner"),f=Re.join(qt.tmpdir(),`${m.nameLower}-ios-submit-${Date.now()}.sh`),ne.writeFileSync(f,Mf(u)),so("scp",[...c,f,`${l}:${u}/submit.sh`],"submit script upload to remote runner"),s.stop("Remote submit inputs uploaded"),s.start("Uploading to TestFlight on remote runner...");let p=`chmod +x ${Wn(`${u}/submit.sh`)} && bash ${Wn(`${u}/submit.sh`)}`,h=Wt("ssh",[...d,p],{stdio:"inherit"});if(h.error)throw mo("ssh",h.error);if(h.status!==0)throw new Error(`Remote iOS submit failed with exit code ${h.status}.`);return s.stop("IPA uploaded to TestFlight"),{apiKeyJsonPath:null}}catch(p){throw s.stop("Remote iOS submit failed"),p}finally{try{ne.unlinkSync(a)}catch{}if(f)try{ne.unlinkSync(f)}catch{}if(u)try{Wt("ssh",[...d,`rm -rf ${Wn(u)}`],{stdio:"ignore"})}catch{}}}function ol(e,t,n){let r=ne.readFileSync(e,"utf8"),i;try{i=fo.createPrivateKey(r).export({type:"pkcs8",format:"pem"})}catch{he("Key normalization failed, falling back to manual re-wrapping..."),i=`-----BEGIN PRIVATE KEY-----
|
|
2175
|
+
`).map(i=>i.trim().split(/\s+/)).filter(i=>i.length>=2&&i[1]==="device").map(i=>i[0]).filter(Boolean);return e&&r.includes(e)?(O.appendFileSync(t,`Using Android device ${e} for install and cleanup.
|
|
2176
|
+
`),e):r.length===1?(O.appendFileSync(t,`Using Android device ${r[0]} for install and cleanup.
|
|
2177
|
+
`),r[0]):(r.length>1&&O.appendFileSync(t,`[WARN] Multiple Android devices are connected; using adb default target for install and cleanup.
|
|
2178
|
+
`),null)}function df(e,t){let r=(Yi("aapt",["dump","badging",e])||Yi("aapt2",["dump","badging",e]))?.match(/package:\s+name='([^']+)'/);if(r?.[1])return r[1];let o=Yi("apkanalyzer",["manifest","application-id",e])?.split(/\s+/).find(Boolean);return o||(O.appendFileSync(t,`[WARN] Could not determine Android application id from APK; post-run uninstall will be skipped.
|
|
2179
|
+
`),null)}function Yi(e,t){for(let n of uf(e)){let r=dt(n,t,{encoding:"utf-8",env:process.env,maxBuffer:10485760});if(r.status===0&&r.stdout)return String(r.stdout).trim()}return null}function uf(e){let t=process.platform==="win32"&&!e.endsWith(".exe")?`${e}.exe`:e,n=[];if(e==="aapt"||e==="aapt2")for(let i of Ua()){let o=x.join(i,"build-tools");for(let s of ja(o))n.push(x.join(o,s,t))}if(e==="apkanalyzer")for(let i of Ua()){n.push(x.join(i,"cmdline-tools","latest","bin",t));let o=x.join(i,"cmdline-tools");for(let s of ja(o))n.push(x.join(o,s,"bin",t));n.push(x.join(i,"tools","bin",t))}let r=pf(e);return r&&n.unshift(r),n.push(t),[...new Set(n)]}function Ua(){let e=[process.env.ANDROID_HOME,process.env.ANDROID_SDK_ROOT];return process.platform==="darwin"?e.push(x.join(hn.homedir(),"Library","Android","sdk")):process.platform==="linux"&&e.push(x.join(hn.homedir(),"Android","Sdk"),x.join(hn.homedir(),"Android","sdk"),"/opt/android-sdk","/usr/lib/android-sdk"),[...new Set(e.filter(t=>!!t))]}function ja(e){try{return O.readdirSync(e,{withFileTypes:!0}).filter(t=>t.isDirectory()).map(t=>t.name).sort((t,n)=>n.localeCompare(t,void 0,{numeric:!0}))}catch{return[]}}function pf(e){let t=process.platform==="win32"?"where":"/usr/bin/env",n=process.platform==="win32"?[e]:["which",e],r=dt(t,n,{encoding:"utf-8",env:process.env});return r.status!==0||!r.stdout?null:String(r.stdout).split(`
|
|
2180
|
+
`)[0]?.trim()||null}async function Lr(e,t,n){if(!O.existsSync(e))return;let r=O.readFileSync(e),i;for(let o=1;o<=3;o+=1)try{await yn.put(t,r,{headers:{"Content-Type":n,"Content-Length":String(r.length)},maxBodyLength:1/0,maxContentLength:1/0,timeout:12e4});return}catch(s){if(i=s,!Ka(s)||o>=3)break;await eo(2e3*o)}throw i}async function Ba(e,t,n,r){let i=x.join(n,"report.xml"),o=x.join(t,"artifacts.tar.gz");try{await Lr(i,e.junitUploadUrl,"application/xml")}catch(s){O.appendFileSync(r,`[WARN] Failed to upload JUnit report: ${s.message||s}
|
|
2181
|
+
`)}try{await Lr(r,e.logUploadUrl,"text/plain")}catch(s){O.appendFileSync(r,`[WARN] Failed to upload runner log: ${s.message||s}
|
|
2182
|
+
`)}try{ht("tar",["-czf",o,"-C",t,x.basename(n)],r),await Lr(o,e.artifactsUploadUrl,"application/gzip")}catch(s){O.appendFileSync(r,`[WARN] Failed to upload Maestro artifacts: ${s.message||s}
|
|
2183
|
+
`)}}function ff(e){if(!e.endsWith(".apk"))return T.error(N.red("Local Android Maestro runs need an APK artifact.")),!1;T.info(N.dim("Installing APK on local Android device/emulator..."));let t=dt("adb",["install","-r",e],{stdio:"inherit",env:process.env});return t.error?(T.error(N.red(`adb failed to start: ${t.error.message}`)),!1):t.status!==0?(T.error(N.red(`adb install failed with exit code ${t.status??1}`)),!1):!0}function mf(e,t){if(e.endsWith(".ipa"))return T.error(N.red("Local iOS Maestro runs need an iOS Simulator .app.zip artifact, not an App Store .ipa.")),!1;let n=e;if(e.endsWith(".zip")){let i=x.join(t,"ios-app");O.mkdirSync(i,{recursive:!0}),new Fr(e).extractAllTo(i,!0);let o=to(i);if(!o)return T.error(N.red("Could not find a .app bundle inside the downloaded zip.")),!1;n=o}if(!n.endsWith(".app"))return T.error(N.red("Local iOS Maestro runs need an iOS Simulator .app bundle or .app.zip artifact.")),!1;T.info(N.dim("Installing app on booted iOS Simulator..."));let r=dt("xcrun",["simctl","install","booted",n],{stdio:"inherit",env:process.env});return r.error?(T.error(N.red(`xcrun failed to start: ${r.error.message}`)),!1):r.status!==0?(T.error(N.red(`iOS Simulator install failed with exit code ${r.status??1}`)),!1):!0}function to(e){let t=O.readdirSync(e,{withFileTypes:!0});for(let n of t){let r=x.join(e,n.name);if(n.isDirectory()&&n.name.endsWith(".app"))return r;if(n.isDirectory()){let i=to(r);if(i)return i}}return null}function gf(e,t){let n=String(t||"").toLowerCase();return n==="android"?e.find(r=>gn(r,".apk")):n==="ios"?e.find(r=>gn(r,".app.zip"))||e.find(r=>gn(r,".zip")):e.find(r=>gn(r,".apk"))||e.find(r=>gn(r,".app.zip"))||e.find(r=>gn(r,".zip"))}function gn(e,t){return String(e?.name||e?.downloadUrl||e?.url||"").toLowerCase().endsWith(t)}function no(e){let t=String(e||"").toLowerCase();if(t.includes(".apk"))return"android";if(t.includes(".app.zip")||t.endsWith(".app")||t.includes(".ipa"))return"ios"}function Qa(e){if(e)try{return x.basename(new URL(e).pathname)||void 0}catch{return x.basename(e)||void 0}}function hf(e){return e?e.match(/[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/i)?.[0]:void 0}function el(e,t){if(!e.jsonOutput)return;let n=x.resolve(e.jsonOutput),r={...t,updatedAt:new Date().toISOString()};try{let i=x.dirname(n);i&&i!=="."&&O.mkdirSync(i,{recursive:!0}),O.writeFileSync(n,JSON.stringify(r,null,2))}catch(i){T.warn(N.yellow(`Could not write Maestro metadata JSON: ${i.message}`))}}function yf(e,t){if(!e.jsonOutput)return;let n=x.resolve(e.jsonOutput),r={mode:"local",...t,updatedAt:new Date().toISOString()};try{let i=x.dirname(n);i&&i!=="."&&O.mkdirSync(i,{recursive:!0}),O.writeFileSync(n,JSON.stringify(r,null,2))}catch(i){T.warn(N.yellow(`Could not write Maestro metadata JSON: ${i.message}`))}}import{spinner as Tt,text as Wn,select as co,isCancel as Dt,cancel as uo,log as cl}from"@clack/prompts";import X from"chalk";import ne from"fs";import Re from"path";import{spawn as If,spawnSync as Kt}from"child_process";import dl from"axios";import qt from"os";import mo from"crypto";import bf from"crypto";import bn from"axios";import tl from"fs";var zn=6e4,Af=12e4,ro=4,Vn=e=>encodeURIComponent(e),Sf=e=>new Promise(t=>setTimeout(t,e));async function An(e,t){let n;for(let r=1;r<=ro;r++)try{return await t()}catch(i){if(n=i,r>=ro||!Ef(i))throw i;let o=Number(i.response?.headers?.["retry-after"]),s=Number.isFinite(o)&&o>0?o*1e3:Math.min(2e3*r*r,15e3);console.log(`[Google Play] ${e} failed (attempt ${r}/${ro}); retrying in ${Math.round(s/1e3)}s...`),await Sf(s)}throw n}function Ef(e){let t=e.response?.status;return t?t===408||t===409||t===425||t===429||t>=500:!0}async function rl(e){let{packageName:t,serviceAccount:n,aabPath:r,track:i,releaseStatus:o,userFraction:s,changesNotSentForReview:a}=e,l;try{let c={Authorization:`Bearer ${await nl(n)}`,Connection:"close"},u=Vn(t);if(l=(await An("create edit",()=>bn.post(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${u}/edits`,{},{headers:c,timeout:zn}))).data.id,!l)throw new Error("Google Play edit insert succeeded but did not return an edit id.");let p=Vn(l),h=tl.statSync(r),g=await An("upload AAB",()=>bn.post(`https://androidpublisher.googleapis.com/upload/androidpublisher/v3/applications/${u}/edits/${p}/bundles`,tl.createReadStream(r),{headers:{...c,"Content-Type":"application/octet-stream","Content-Length":h.size},maxBodyLength:1/0,maxContentLength:1/0,params:{uploadType:"media"},timeout:Af})),y=Number(g.data.versionCode);if(!y)throw new Error("Google Play upload succeeded but did not return a versionCode.");let b={versionCodes:[String(y)],status:o};return(o==="inProgress"||o==="halted")&&typeof s=="number"&&(b.userFraction=s),await An("update track",()=>bn.put(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${u}/edits/${p}/tracks/${Vn(i)}`,{releases:[b]},{headers:c,timeout:zn})),await An("commit edit",()=>bn.post(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${u}/edits/${p}:commit`,{},{headers:c,params:a?{changesNotSentForReview:!0}:void 0,timeout:zn})),{editId:l,versionCode:y,track:i,releaseStatus:o,userFraction:s}}catch(d){if(l)try{let u=await nl(n);await An("delete edit",()=>bn.delete(`https://androidpublisher.googleapis.com/androidpublisher/v3/applications/${Vn(t)}/edits/${Vn(l)}`,{headers:{Authorization:`Bearer ${u}`,Connection:"close"},timeout:zn}))}catch{}let c=d.response?.data?.error?.message||d.message;throw new Error(`Google Play API Error: ${c}`)}}async function nl(e){let t=Math.floor(Date.now()/1e3),n=t+3600,r={alg:"RS256",typ:"JWT"},i={iss:e.client_email,sub:e.client_email,aud:"https://oauth2.googleapis.com/token",iat:t,exp:n,scope:"https://www.googleapis.com/auth/androidpublisher"},o=Buffer.from(JSON.stringify(r)).toString("base64url"),s=Buffer.from(JSON.stringify(i)).toString("base64url"),a=`${o}.${s}`,l=bf.createSign("RSA-SHA256");l.update(a);let d=l.sign(e.private_key,"base64url"),c=`${a}.${d}`;return(await An("OAuth token exchange",()=>bn.post("https://oauth2.googleapis.com/token",{grant_type:"urn:ietf:params:oauth:grant-type:jwt-bearer",assertion:c},{headers:{Connection:"close"},timeout:zn}))).data.access_token}var _f=5e3,wf=12,ul=100,io=24,il=8e3,vf={completed:"completed",draft:"draft",halted:"halted",inprogress:"inProgress","in-progress":"inProgress"},Rf=e=>e?.type==="google_service_account",jr=e=>e?.bundleId||e?.packageName||e?.meta?.packageName||e?.meta?.bundleId,pl=e=>e.submitArgs||process.argv.slice(3).join(" ");async function Br(e){let t=Tt(),n=we(),r=$f(e);if(!r){process.exitCode=1;return}let i=e.projectId||r.projectId,o=e.profile||e.buildProfile||K(r,"store","production");if(!i){ae(`${m.configFileName} is missing projectId. Pass --project-id in runner mode.`),process.exitCode=1;return}r.projectId=i,he(X.dim(`Submit for project: ${r.name||i} | Profile: ${o}`));let s=e.platform;if(!s){let S=await co({message:"Select platform to submit:",options:[{value:"ios",label:"iOS (App Store Connect / TestFlight)"},{value:"android",label:"Android (Google Play Console)"}]});if(Dt(S)){uo("Operation cancelled");return}s=S}if(s=String(s).toLowerCase(),s!=="ios"&&s!=="android"){ae(`Platform ${s} is not supported. Use 'ios' or 'android'.`),process.exitCode=1;return}let a=s==="ios"&&!e.local&&e.sshHost?Gf(r,o,e):null;if(s==="ios"&&!e.local&&!a){await Pf(r,o,e);return}let l=e.submitId,d=!!(e.local&&l),c=l||null,u=async(S,D={})=>{c&&await Tf(i,c,{status:S,...D})},f=s==="android"?e.packageName||e.androidPackage||jf(r,o):void 0,p=s==="ios"?e.bundleId||e.iosBundleIdentifier||Hf(r,o):void 0,h,g,y,b=!1;try{s==="android"&&(h=e.track||r.submit?.[o]?.android?.track||r.submit?.production?.android?.track||"internal",g=Vf(r,o,e.releaseStatus),y=Wf(r,o,e.rollout),b=Kf(r,o,e.changesNotSentForReview),Yf(g,y))}catch(S){ae(S.message),process.exitCode=1;return}if(s==="android"&&!d&&(c=await Of(r,i,s,o,e,{packageName:f,track:h,releaseStatus:g,rollout:y,changesNotSentForReview:b}),!c)){ae("Could not create submission tracking record. Submission was not started."),process.exitCode=1;return}await u("running",{platform:s,profile:o,packageName:f,track:h,releaseStatus:g,rollout:y,startTime:Date.now(),...d?Nf():{}});let A=null,v=null;try{v=await qf(i,s,e,n?.token),A=v?.filePath||null}catch(S){await u("failed",{error:`Failed to resolve submission artifact: ${S.message}`,endTime:Date.now()}),ae(`Failed to resolve submission artifact: ${S.message}`),process.exitCode=1;return}if(!A){let S=Xf(s,e);await u("failed",{error:S,endTime:Date.now()}),ae(S),process.exitCode=1;return}await u("running",{buildId:v?.buildId,artifactName:v?.artifactName,artifactSource:v?.source}),he(`Using artifact: ${X.green(Re.basename(A))} `),t.start("Fetching submission credentials from Dashboard...");let E;try{let D=(await I.get(`/credentials/${i}`)).data.credentials||[];if(s==="android"&&!f){t.stop("Package name missing"),ae(`Could not resolve Android package name. Set android.package or build.${o}.android.package in ${m.configFileName}.`),await u("failed",{error:"Could not resolve Android package name.",endTime:Date.now()}),process.exitCode=1;return}let R=D.filter(Rf),$=s==="ios"?D.filter(k=>k.type==="asc_api_key"):Bf(R,f);if($.length===0){if(t.stop("Credentials missing"),ae(s==="android"?`No Google Play service credential found for package ${f}.`:`No Service Credentials found for ${s}.`),s==="android"){let k=R.map(jr).filter(Boolean).join(", ");k&&he(`Found Google Play service credential(s) for: ${k}`),he(`Use '${m.nameLower} credentials:service --platform android --package-name ${f}' or upload it under that package in the Dashboard.`)}else he(`Use '${m.nameLower} credentials:service --platform ${s}' or use the Dashboard to upload them.`);await u("failed",{error:`No submission credentials found for ${s}.`,endTime:Date.now()}),process.exitCode=1;return}if(E=Mf($,e.credentialId),!E&&s==="ios"&&p&&(E=Lf($,p)),E||$.length===1)E=E||$[0],t.stop(`Using: ${E.name}`),s==="android"&&jr(E)==="*"&&he(X.yellow(`Using legacy wildcard Google Play credential for ${f}. Upload a package-scoped credential when possible.`));else{if(t.stop("Multiple credentials found"),Ff()){let P=$.map(F=>`${F.name||"credential"} (${F.credentialId||F.id||"no-id"})`).join(", ");ae(`Multiple ${s==="ios"?"App Store Connect":"Google Play"} credentials found. Use --credential-id in CI. Available: ${P}`),await u("failed",{error:"Multiple submission credentials found; --credential-id is required in CI.",endTime:Date.now()}),process.exitCode=1;return}let k=await co({message:`Choose a ${s==="ios"?"App Store Connect":"Google Play"} credential:`,options:$.map(P=>({value:P.credentialId,label:P.name,hint:`${P.keyId?`ID: ${P.keyId}`:""} ${P.issuerId?`(Issuer: ${P.issuerId.substring(0,8)}...)`:""}`}))});if(Dt(k)){uo("Submission cancelled"),await u("failed",{error:"Submission cancelled while selecting credential.",endTime:Date.now()}),process.exitCode=1;return}E=$.find(P=>P.credentialId===k),he(`Using selected: ${X.green(E.name)}`)}}catch(S){t.stop("Failed to fetch credentials"),ae(`API Error: ${S.message} `),await u("failed",{error:`Failed to fetch credentials: ${S.message}`,endTime:Date.now()}),process.exitCode=1;return}let L=ne.mkdtempSync(Re.join(qt.tmpdir(),`${m.nameLower}-submit-`)),U=E.keyId||E.meta?.keyId,j=E.issuerId||E.meta?.issuerId,H=E.type==="asc_api_key"?`AuthKey_${U}.p8`:"service-account.json",te=Re.join(L,H);t.start("Downloading secure key...");try{let S=await I.get(`/credentials/${E.credentialId}/download`,{params:{projectId:i,format:"raw"}});if(S.data.status!=="success"||!S.data.downloadUrl)throw new Error("Failed to get secure download URL");let D=await dl.get(S.data.downloadUrl,{responseType:"arraybuffer"});ne.writeFileSync(te,Buffer.from(D.data)),t.stop("Key downloaded to secure temp storage")}catch(S){t.stop("Download failed"),ae(`Failed to download key: ${S.message}`);try{ne.rmSync(L,{recursive:!0,force:!0})}catch{}await u("failed",{error:`Failed to download credential key: ${S.message}`,endTime:Date.now()}),process.exitCode=1;return}he(X.blue(`Initiating ${s==="ios"?"TestFlight":"Google Play"} submission...`));let ie=!1,Ce;try{if(s==="ios"){if(!U){let D=await Wn({message:"Enter App Store Connect Key ID (e.g. 2X948D...):",validate:R=>R.length>0?void 0:"Key ID is required"});if(Dt(D)){await u("failed",{error:"Submission cancelled while entering ASC Key ID.",endTime:Date.now()}),process.exitCode=1;return}U=D}if(!j||j==="undefined"){let D=await Wn({message:"Enter App Store Connect Issuer ID (Found on ASC Keys page):",validate:R=>R.length>0?void 0:"Issuer ID is required"});if(Dt(D)){await u("failed",{error:"Submission cancelled while entering ASC Issuer ID.",endTime:Date.now()}),process.exitCode=1;return}j=D}he(`Using ASC Key ID: ${U}`),he(`Using ASC Issuer ID: ${j}`);let S=a?await Qf(A,te,j,U,p,a):await Zf(A,te,j,U,p);fo(`${s==="ios"?"App Store":"Google Play"} submission successful!`),ie=!0}else Ce=await im(A,te,h||"internal",f,g||"completed",y,b,o),fo("Google Play submission successful!"),ie=!0}catch(S){ae(`Submission failed: ${S.message}`),await u("failed",{error:S.message,endTime:Date.now()}),Ct(e,{status:"failed",projectId:i,submitId:c,platform:s,profile:o,buildId:v?.buildId||e.buildId,artifactName:v?.artifactName,error:S.message,dashboardUrl:c?Yt(c,i):void 0}),process.exitCode=1}finally{ie&&(await u("success",{endTime:Date.now(),versionCode:Ce?.versionCode,track:h,releaseStatus:g}),Ct(e,{status:"success",projectId:i,submitId:c,platform:s,profile:o,buildId:v?.buildId||e.buildId,artifactName:v?.artifactName,versionCode:Ce?.versionCode,track:h,releaseStatus:g,dashboardUrl:c?Yt(c,i):void 0})),Am(L),A&&A.includes(`${m.nameLower}-artifact-`)}}function $f(e){let t=`./${m.configFileName}`;if(ne.existsSync(t))try{return JSON.parse(ne.readFileSync(t,"utf-8"))}catch(n){return ae(`Failed to read ${m.configFileName}: ${n.message}`),null}return e.projectId?{projectId:e.projectId}:(ae(`No ${m.configFileName} found. Run \`${m.nameLower} init\` or \`${m.nameLower} link\` first.`),null)}async function Pf(e,t,n){let r=n.projectId||e.projectId;if(!r){ae(`${m.configFileName} is missing projectId.`),process.exitCode=1;return}let i=n.submitId||mo.randomUUID(),o=!!n.latest||!n.buildId,s=Df({...n,latest:o,profile:t,projectId:r,submitId:i}),a={projectId:r,submitId:i,platform:"ios",profile:t,latest:o,buildId:n.buildId,credentialId:n.credentialId,status:"pending",source:"cli",submitArgs:pl(n),runnerArgs:s,runnerCommand:[m.nameLower,"submit",...s].map(Uf).join(" "),appName:e.name,startTime:Date.now()},l=Tt();l.start("Queuing iOS submit on macOS runner...");try{let d=await I.post("/submissions",a),c=d.data?.submission||d.data?.submit||{},u=d.data?.dashboardUrl||Yt(i,r);l.stop("iOS submit queued"),he(`Submission ID: ${X.cyan(i)}`),he(`Dashboard: ${X.blue.underline(u)}`),Ct(n,{status:"pending",projectId:r,submitId:i,platform:"ios",profile:t,latest:o,buildId:n.buildId,dashboardUrl:u}),await Cf(r,i,{...n,profile:t})}catch(d){l.stop("Could not queue iOS submit"),ae(xf(d)),process.exitCode=1}}async function Of(e,t,n,r,i,o={}){let s=i.submitId||mo.randomUUID(),a=!!i.latest||!i.buildId,l={projectId:t,submitId:s,platform:n,profile:r,latest:a,buildId:i.buildId,credentialId:i.credentialId,status:"running",source:"cli-direct",submitArgs:pl(i),appName:e.name,startTime:Date.now(),...o};try{let d=await I.post("/submissions",l),c=d.data?.submission||d.data?.submit||{},u=d.data?.dashboardUrl||c.dashboardUrl||Yt(s,t);return he(`Submission ID: ${X.cyan(s)}`),he(`Dashboard: ${X.blue.underline(u)}`),Ct(i,{status:"running",projectId:t,submitId:s,platform:n,profile:r,latest:a,buildId:i.buildId,dashboardUrl:u}),s}catch(d){let c=d.response?.data?.message||d.response?.data?.error||d.message;return he(X.yellow(`Could not create submission tracking record: ${c}`)),null}}function Df(e){let t=["--local","--submit-id",e.submitId,"--project-id",e.projectId,"--platform","ios","--profile",e.profile||"production"];return e.buildId?t.push("--build-id",e.buildId):t.push("--latest"),e.credentialId&&t.push("--credential-id",e.credentialId),e.bundleId&&t.push("--bundle-id",e.bundleId),e.packageName&&t.push("--package-name",e.packageName),e.quiet&&t.push("--quiet"),e.jsonOutput&&t.push("--json-output",e.jsonOutput),t.filter(n=>n!=null&&n!=="")}async function Cf(e,t,n){let r=Tt(),i=0,o=0;for(n.quiet||r.start("Waiting for iOS submit runner...");;)try{let s=await I.get(`/submissions/${e}/${t}`),a=s.data?.submission||s.data?.submit||s.data,l=String(a?.status||"pending").toLowerCase();i=0;let d=Array.isArray(a?.logs)?a.logs:[];for(let c=o;c<d.length;c++){let u=d[c];u&&console.log(X.dim(String(u)))}if(o=d.length,["success","completed","succeeded"].includes(l)){n.quiet||r.stop("iOS submit completed"),fo("App Store submission successful!"),Ct(n,{status:"success",projectId:e,submitId:t,platform:"ios",profile:a?.profile||n.profile||"production",buildId:a?.buildId||n.buildId,artifactName:a?.artifactName,dashboardUrl:a?.dashboardUrl||Yt(t,e)});return}if(["failed","error","cancelled","canceled"].includes(l)){n.quiet||r.stop("iOS submit failed");let c=a?.error||a?.message||"Unknown iOS submit failure.";ae(c),Ct(n,{status:"failed",projectId:e,submitId:t,platform:"ios",profile:a?.profile||n.profile||"production",buildId:a?.buildId||n.buildId,artifactName:a?.artifactName,error:c,dashboardUrl:a?.dashboardUrl||Yt(t,e)}),process.exitCode=1;return}n.quiet||r.message(`iOS submit ${l}...`),await po(_f)}catch(s){if(i++,i>=wf){n.quiet||r.stop("Lost connection to iOS submit status"),ae(`Could not fetch iOS submit status after ${i} attempts: ${s.message}`),process.exitCode=1;return}await po(Math.min(2e3*i,15e3))}}async function Tf(e,t,n){let r;for(let i=1;i<=3;i++)try{await I.patch(`/submissions/${e}/${t}`,n);return}catch(o){if(r=o,i>=3||!kf(o))break;await po(1e3*i)}cl.warn(X.dim(`Could not report submission status: ${r?.message||r}`))}function kf(e){let t=e.response?.status;return!t||t===408||t===409||t===425||t===429||t>=500}function Nf(){let e={gitlabJobId:process.env.CI_JOB_ID,gitlabJobUrl:process.env.CI_JOB_URL,gitlabPipelineId:process.env.CI_PIPELINE_ID,gitlabProjectId:process.env.CI_PROJECT_ID,gitlabProjectPath:process.env.CI_PROJECT_PATH};return Object.fromEntries(Object.entries(e).filter(([,t])=>!!t))}function xf(e){let t=e.response?.status,n=e.response?.data?.message||e.response?.data?.error;return t===404||t===405?["Managed iOS submit is not enabled on this Mach API yet.","Deploy the API/dashboard submission orchestration endpoint, then retry the same command.","Expected API: POST /submissions and GET/PATCH /submissions/:projectId/:submitId."].join(`
|
|
2184
|
+
`):n||e.message||String(e)}function Yt(e,t){if(!e)return at;let n=t?`?projectId=${encodeURIComponent(t)}`:"";return`${at}/submissions/${e}${n}`}function Ct(e,t){if(!e.jsonOutput)return;let n=Re.resolve(e.jsonOutput),r={...t,url:t.url||t.dashboardUrl||Yt(t.submitId,t.projectId),updatedAt:new Date().toISOString()};try{let i=Re.dirname(n);i&&i!=="."&&ne.mkdirSync(i,{recursive:!0}),ne.writeFileSync(n,JSON.stringify(r,null,2))}catch(i){cl.warn(X.yellow(`Could not write submission metadata JSON: ${i.message}`))}}function Mf(e,t){return t&&e.find(n=>n.credentialId===t||n.id===t||n.keyId===t||n.meta?.keyId===t)||null}function Lf(e,t){let n=e.filter(r=>[r.bundleId,r.bundleIdentifier,r.appIdentifier,r.meta?.bundleId,r.meta?.bundleIdentifier,r.meta?.appIdentifier].filter(Boolean).map(String).includes(t));return n.length===1?n[0]:null}function Ff(){return process.env.CI==="true"||process.env.CI==="1"||!process.stdin.isTTY}function po(e){return new Promise(t=>setTimeout(t,e))}function Uf(e){return/^[a-zA-Z0-9_./:=@-]+$/.test(e)?e:`'${e.replace(/'/g,"'\\''")}'`}function jf(e,t){if(e.submit?.[t]?.android?.package)return e.submit[t].android.package;let n=Er(e,t);if(n)return n;let r=Re.join(process.cwd(),"app.json");if(ne.existsSync(r))try{return JSON.parse(ne.readFileSync(r,"utf-8")).expo?.android?.package}catch{}let i=Re.join(process.cwd(),"app.config.json");if(ne.existsSync(i))try{let o=JSON.parse(ne.readFileSync(i,"utf-8"));return o.expo?.android?.package||o.android?.package}catch{}}function Bf(e,t){let n=e.filter(o=>jr(o)===t);if(n.length>0)return n;let r=e.filter(o=>{let s=jr(o);return!s||s==="*"});return e.length>0&&e.length===r.length?r:[]}function Hf(e,t){return e.submit?.[t]?.ios?.bundleIdentifier?e.submit[t].ios.bundleIdentifier:e.submit?.[t]?.ios?.bundleId?e.submit[t].ios.bundleId:Ir(e,t)}function Gf(e,t,n){let r=e.submit?.[t]?.ios||{},i=e.submit?.production?.ios||{},o=n.sshHost||r.sshHost||i.sshHost||process.env.MACH_IOS_SUBMIT_SSH_HOST;return o?{sshHost:o,sshUser:n.sshUser||r.sshUser||i.sshUser||process.env.MACH_IOS_SUBMIT_SSH_USER||process.env.USER||"ubuntu",sshKey:n.sshKey||r.sshKey||i.sshKey||process.env.MACH_IOS_SUBMIT_SSH_KEY}:null}function Vf(e,t,n){let r=n||e.submit?.[t]?.android?.releaseStatus||e.submit?.production?.android?.releaseStatus||"completed";return zf(r)}function zf(e){let t=vf[String(e).trim().toLowerCase()];if(!t)throw new Error(`Invalid Android release status "${e}". Use completed, draft, halted, or inProgress.`);return t}function Wf(e,t,n){let r=n??e.submit?.[t]?.android?.rollout??e.submit?.[t]?.android?.userFraction??e.submit?.[t]?.android?.rolloutFraction??e.submit?.production?.android?.rollout??e.submit?.production?.android?.userFraction??e.submit?.production?.android?.rolloutFraction;if(r==null||r==="")return;let i=Number(r);if(!Number.isFinite(i)||i<=0||i>=1)throw new Error(`Invalid Android rollout fraction "${r}". Use a number greater than 0 and less than 1, for example 0.1.`);return i}function Kf(e,t,n){let r=n??e.submit?.[t]?.android?.changesNotSentForReview??e.submit?.[t]?.android?.changes_not_sent_for_review??e.submit?.production?.android?.changesNotSentForReview??e.submit?.production?.android?.changes_not_sent_for_review??!1;return r===!0||r==="true"||r==="1"}function Yf(e,t){if(e==="inProgress"&&t===void 0)throw new Error("Google Play staged rollout requires --rollout <fraction> when --release-status inProgress is used.");if(e!=="inProgress"&&e!=="halted"&&t!==void 0)throw new Error("Android rollout fraction can only be used with --release-status inProgress or halted.")}async function qf(e,t,n,r){let i=n.buildId?"id":n.latest?"latest":null;if(!i){let s=await co({message:"Select artifact source:",options:[{value:"latest",label:`Latest Production Build (${m.name})`},{value:"id",label:`Input Build ID (${m.name})`},{value:"url",label:"Remote URL"},{value:"local",label:"Local File Path"}]});if(Dt(s))return uo("Operation cancelled"),null;i=s}if(i==="local"){let s=await Wn({message:"Enter path to artifact (.ipa/.aab):",validate:a=>{if(!ne.existsSync(a))return"File not found";if(t==="ios"&&!a.endsWith(".ipa"))return"Must be an .ipa file";if(t==="android"&&!a.endsWith(".aab"))return"Must be an .aab file"}});return Dt(s)?null:{filePath:s,source:"local"}}let o=Tt();if(i==="latest"){let s=n.profile||n.buildProfile;o.start(`Fetching latest${s?` ${s}`:""} build...`);try{let a=await I.get(`/builds/${e}`,{params:{limit:50}});if(a.data.status!=="success")throw new Error(a.data.message);let l=a.data.builds||[],d=s?.toLowerCase(),c=E=>E.platform?.toLowerCase()===t.toLowerCase()&&E.status?.toLowerCase()==="success",u=E=>d?[E.buildProfile,E.profile,E.profileName,E.buildType].filter(Boolean).some(L=>String(L).toLowerCase()===d):!0,f=l.filter(E=>c(E)&&u(E)),p=f.find(E=>E.buildType?.toLowerCase()==="store"||E.distribution?.toLowerCase()==="store")||f[0],h=l.some(E=>E.platform?.toLowerCase()===t.toLowerCase()&&E.status?.toLowerCase()==="success");if(!p)return o.stop("No suitable build found"),ae(s&&h?`No successful ${t} builds found for profile "${s}".`:"No successful builds found for this platform."),null;o.stop(`Found build: ${p.buildId}`);let g=p.artifacts||[];if(g.length===0||g.every(E=>!(E.url||E.downloadUrl)))try{let E=await I.get(`/builds/${e}/${p.buildId}/artifacts`);E.data.status==="success"&&E.data.artifacts?.length>0?(g=E.data.artifacts.map(L=>({...L,url:L.url||L.downloadUrl})),console.log(X.cyan(` [RECOVERY] Fetched ${g.length} artifact(s) with download URLs.`))):console.log(X.yellow(" [RECOVERY] /artifacts endpoint returned 0 artifacts."))}catch(E){console.log(X.red(` [RECOVERY] /artifacts fetch failed: ${E.message}`))}let b=t==="ios",A=oo(g,t);if(!A||!(A.url||A.downloadUrl))return ae("Build found but artifact URL is missing."),null;let v=A.url||A.downloadUrl;return{filePath:await so(v,b?"ios":"android"),buildId:p.buildId,artifactName:A.name,source:"latest"}}catch(a){return o.stop("Fetch failed"),ae(`API Error: ${a.message}`),null}}if(i==="id"){let s=n.buildId||await Wn({message:"Enter Build ID:",validate:l=>l.length<5?"Invalid ID":void 0});if(Dt(s))return null;let a=String(s);o.start("Fetching build...");try{let l=null;try{let p=await I.get(`/builds/${e}/${a}`);p.data.status==="success"&&(l=p.data.build)}catch(p){p.response?.status!==404&&console.log(X.dim(` [RECOVERY] Project build lookup skipped: ${p.message}`))}if(!l){let p=await I.get(`/build/${a}`);if(p.data.status!=="success")throw new Error(p.data.message);l=p.data.build}if(!l)throw new Error(`Build ${a} was not found.`);let d=t==="ios",c=Ur(l.artifacts);Jf(c)||(c=await ol(e,a,c));let u=oo(c,t);if(u||(c=await ol(e,a,c),u=oo(c,t)),!u)throw new Error(`No ${d?".ipa":".aab"} artifact found for build ${a}. The build exists, but its artifact list does not contain a downloadable submission artifact.`);let f=u.url||u.downloadUrl;if(!f)throw new Error(`Artifact ${u.name||"(unnamed)"} for build ${a} has no download URL. Retry after the build artifact upload is visible in the Installation Hub.`);return o.stop(`Found build: ${l.buildId||a}`),{filePath:await so(f,d?"ios":"android"),buildId:l.buildId||a,artifactName:u.name,source:"id"}}catch(l){throw o.stop("Fetch failed"),l}}if(i==="url"){let s=await Wn({message:"Enter Artifact URL:",validate:a=>a.startsWith("http")?void 0:"Must be a valid URL"});return Dt(s)?null:{filePath:await so(s,t),source:"url"}}return null}function Ur(e){return(e||[]).map(t=>({...t,url:t.url||t.downloadUrl}))}function Jf(e){return e.some(t=>!!(t.url||t.downloadUrl))}function oo(e,t){let n=t==="ios",r=n?"ipa":"aab",i=n?".ipa":".aab";return e.find(o=>{let s=String(o.type||"").toLowerCase(),a=String(o.name||"").toLowerCase(),l=String(o.url||o.downloadUrl||"").toLowerCase();return s?s===r:a.endsWith(i)||l.includes(i)})||null}function Xf(e,t){let n=e==="ios"?".ipa":".aab";if(t.buildId)return`No downloadable ${n} artifact found for build ${t.buildId}. Check that the build finished artifact upload before submitting.`;if(t.latest){let r=t.profile||t.buildProfile;return`No latest successful ${e}${r?` ${r}`:""} build has a downloadable ${n} artifact.`}return`No downloadable ${n} artifact was selected for submission.`}async function ol(e,t,n){try{let r=await I.get(`/builds/${e}/${t}/artifacts`);if(r.data.status==="success"&&r.data.artifacts?.length>0){let i=Ur(r.data.artifacts);return console.log(X.cyan(` [RECOVERY] Fetched ${i.length} artifact(s) with download URLs.`)),i}}catch(r){console.log(X.dim(` [RECOVERY] Project artifact lookup skipped: ${r.message}`))}try{let r=await I.get(`/public/builds/${t}`);if(r.data.status==="success"&&r.data.artifacts?.length>0){let i=Ur(r.data.artifacts);return console.log(X.cyan(` [RECOVERY] Fetched ${i.length} public artifact(s) with download URLs.`)),i}}catch(r){console.log(X.dim(` [RECOVERY] Public artifact lookup skipped: ${r.message}`))}return Ur(n)}async function so(e,t,n=3){let r=Tt();r.start("Downloading artifact...");let i=ne.mkdtempSync(Re.join(qt.tmpdir(),`${m.nameLower}-artifact-`)),o=`app.${t==="ios"?"ipa":"aab"}`,s=Re.join(i,o);for(let a=1;a<=n;a++)try{a>1&&(r.message(`Downloading artifact (Retry ${a}/${n})...`),await new Promise(c=>setTimeout(c,2e3*a)));let l=ne.createWriteStream(s),d=await dl({url:e,method:"GET",responseType:"stream",timeout:6e4});return await new Promise((c,u)=>{d.data.pipe(l);let f=!1;d.data.on("error",p=>{f||(f=!0,l.close(),u(p))}),l.on("finish",()=>{f||c()}),l.on("error",p=>{f||(f=!0,u(p))})}),r.stop("Download complete"),s}catch(l){if(a===n)throw r.stop("Download failed"),l}throw new Error("Download failed after retries")}async function Zf(e,t,n,r,i){let o=Tt();if(i&&he(`Bundle ID: ${X.green(i)}`),!n||!r)throw ae(`Missing credentials: issuerId=${n}, keyId=${r}. Check your Dashboard.`),new Error("Missing ASC API Key Metadata (IssuerID or KeyID)");let s=fl(t,n,r),a=sm();return o.start("Uploading to TestFlight (pilot)..."),new Promise((l,d)=>{let c=lm(),u=If(a.command,["pilot","upload","--ipa",e,"--api_key_path",s,"--skip_submission","true","--skip_waiting_for_build_processing","true"],{stdio:["ignore","pipe","pipe"],env:a.env});u.stdout?.on("data",f=>c.append(f,process.stdout)),u.stderr?.on("data",f=>c.append(f,process.stderr)),u.on("close",f=>{if(c.flush(),f!==0){o.stop("Pilot failed");try{ne.unlinkSync(s)}catch{}d(cm(f,c.lines()))}else{o.stop("IPA uploaded to TestFlight");try{ne.unlinkSync(s)}catch{}l({})}}),u.on("error",f=>{c.flush();try{ne.unlinkSync(s)}catch{}o.stop("Pilot execution error");let p=ym(f);p.logs=c.lines(),d(p)})})}async function Qf(e,t,n,r,i,o){let s=Tt();if(i&&he(`Bundle ID: ${X.green(i)}`),!n||!r)throw ae(`Missing credentials: issuerId=${n}, keyId=${r}. Check your Dashboard.`),new Error("Missing ASC API Key Metadata (IssuerID or KeyID)");let a=fl(t,n,r),l=`${o.sshUser}@${o.sshHost}`,d=em(o),c=tm(o),u="",f="";try{if(s.start(`Preparing remote iOS submit runner (${l})...`),u=nm("ssh",[...d,"mktemp -d /tmp/mach-submit.XXXXXX"]).trim(),!u)throw new Error("Remote runner did not return a temp directory.");s.stop(`Remote runner ready: ${l}`),s.start("Uploading IPA and App Store Connect key to remote runner..."),ao("scp",[...c,e,`${l}:${u}/app.ipa`],"IPA upload to remote runner"),ao("scp",[...c,a,`${l}:${u}/api_key.json`],"ASC key upload to remote runner"),f=Re.join(qt.tmpdir(),`${m.nameLower}-ios-submit-${Date.now()}.sh`),ne.writeFileSync(f,rm(u)),ao("scp",[...c,f,`${l}:${u}/submit.sh`],"submit script upload to remote runner"),s.stop("Remote submit inputs uploaded"),s.start("Uploading to TestFlight on remote runner...");let p=`chmod +x ${Kn(`${u}/submit.sh`)} && bash ${Kn(`${u}/submit.sh`)}`,h=Kt("ssh",[...d,p],{stdio:"inherit"});if(h.error)throw go("ssh",h.error);if(h.status!==0)throw new Error(`Remote iOS submit failed with exit code ${h.status}.`);return s.stop("IPA uploaded to TestFlight"),{apiKeyJsonPath:null}}catch(p){throw s.stop("Remote iOS submit failed"),p}finally{try{ne.unlinkSync(a)}catch{}if(f)try{ne.unlinkSync(f)}catch{}if(u)try{Kt("ssh",[...d,`rm -rf ${Kn(u)}`],{stdio:"ignore"})}catch{}}}function fl(e,t,n){let r=ne.readFileSync(e,"utf8"),i;try{i=mo.createPrivateKey(r).export({type:"pkcs8",format:"pem"})}catch{he("Key normalization failed, falling back to manual re-wrapping..."),i=`-----BEGIN PRIVATE KEY-----
|
|
2180
2185
|
${(r.replace(/-----BEGIN[^-]*-----/g,"").replace(/-----END[^-]*-----/g,"").replace(/\s+/g,"").match(/.{1,64}/g)||[]).join(`
|
|
2181
2186
|
`)}
|
|
2182
|
-
-----END PRIVATE KEY-----`}let o=Re.join(qt.tmpdir(),`api_key_${n}_${Date.now()}.json`),s={key_id:n,issuer_id:t,key:i,in_house:!1};return ne.writeFileSync(o,JSON.stringify(s,null,2)),o}function
|
|
2187
|
+
-----END PRIVATE KEY-----`}let o=Re.join(qt.tmpdir(),`api_key_${n}_${Date.now()}.json`),s={key_id:n,issuer_id:t,key:i,in_house:!1};return ne.writeFileSync(o,JSON.stringify(s,null,2)),o}function em(e){let t=["-o","StrictHostKeyChecking=no","-o","ServerAliveInterval=30"];return e.sshKey&&t.push("-i",e.sshKey),t.push(`${e.sshUser}@${e.sshHost}`),t}function tm(e){let t=["-o","StrictHostKeyChecking=no","-o","ServerAliveInterval=30"];return e.sshKey&&t.push("-i",e.sshKey),t}function nm(e,t){let n=Kt(e,t,{encoding:"utf-8",stdio:["ignore","pipe","inherit"]});if(n.error)throw go(e,n.error);if(n.status!==0)throw new Error(`${e} failed with exit code ${n.status}.`);return n.stdout||""}function ao(e,t,n){let r=Kt(e,t,{stdio:"inherit"});if(r.error)throw go(e,r.error);if(r.status!==0)throw new Error(`${n} failed with exit code ${r.status}.`)}function go(e,t){return t?.code==="ENOENT"?new Error(`${e} was not found on this machine. Install OpenSSH client tools or run iOS submit directly on the macOS runner.`):t}function Kn(e){return`'${e.replace(/'/g,"'\\''")}'`}function rm(e){let t=Kn(`${e}/app.ipa`),n=Kn(`${e}/api_key.json`);return`#!/bin/bash
|
|
2183
2188
|
set -euo pipefail
|
|
2184
2189
|
|
|
2185
2190
|
export PATH="/opt/homebrew/bin:/usr/local/bin:/usr/bin:/bin:/usr/sbin:/sbin:$HOME/.local/share/fastlane/3.4.0/bin:$PATH"
|
|
@@ -2207,34 +2212,34 @@ fastlane pilot upload \\
|
|
|
2207
2212
|
--api_key_path ${n} \\
|
|
2208
2213
|
--skip_submission true \\
|
|
2209
2214
|
--skip_waiting_for_build_processing true
|
|
2210
|
-
`}async function
|
|
2215
|
+
`}async function im(e,t,n="internal",r,i="completed",o,s=!1,a="production"){let l=Tt();if(!r||r==="*")throw new Error("Android package name is required for Google Play submission.");let d=o!==void 0?` (${o} rollout)`:"";l.start(`Uploading to Google Play ${n} track with ${i} release status${d}...`);try{let c=JSON.parse(ne.readFileSync(t,"utf-8"));om(c);let u=await rl({packageName:r,serviceAccount:c,aabPath:e,track:n,releaseStatus:i,userFraction:o,changesNotSentForReview:s});return l.stop(`AAB uploaded to ${n} track (versionCode ${u.versionCode})`),u}catch(c){throw l.stop("Google Play upload failed"),new Error(bm(c,n,r,a))}}function om(e){if(!e?.client_email||!e?.private_key)throw new Error("Invalid Google service account JSON: missing client_email or private_key.")}function lo(){let e=process.env.HOME||qt.homedir(),t=process.env.FASTLANE_GEM_HOME||Re.join(e,".local/share/fastlane/3.4.0"),n=[process.env.FASTLANE_BIN_DIR,"/usr/local/opt/ruby/bin","/opt/homebrew/opt/ruby/bin","/usr/local/bin","/opt/homebrew/bin","/usr/local/Cellar/fastlane/2.227.0/libexec/bin",Re.join(t,"bin"),process.env.PATH].filter(Boolean).join(":");return{...process.env,PATH:n,GEM_HOME:t,GEM_PATH:[t,"/usr/local/Cellar/fastlane/2.227.0/libexec",process.env.GEM_PATH].filter(Boolean).join(":"),FASTLANE_INSTALLED_VIA_HOMEBREW:"true",FASTLANE_SKIP_UPDATE_CHECK:"1",FASTLANE_HIDE_CHANGELOG:"1",LANG:process.env.LANG||"en_US.UTF-8",LC_ALL:process.env.LC_ALL||"en_US.UTF-8",CI:process.env.CI||"1"}}function sm(){let e=lo(),t=sl(e);if(t)return t;if(process.env.MACH_SKIP_FASTLANE_INSTALL!=="1"){am(e);let n=sl(lo());if(n)return n}return{command:"fastlane",env:lo()}}function sl(e){let t=process.env.HOME||qt.homedir(),n=[process.env.FASTLANE_BINARY,"/usr/local/bin/fastlane","/opt/homebrew/bin/fastlane","/usr/local/Cellar/fastlane/2.227.0/libexec/bin/fastlane",Re.join(process.env.FASTLANE_GEM_HOME||Re.join(t,".local/share/fastlane/3.4.0"),"bin/fastlane"),"fastlane"].filter(Boolean);for(let r of n){if(r.includes("/")&&!ne.existsSync(r))continue;if(!Kt(r,["--version"],{env:e,stdio:"ignore"}).error)return{command:r,env:e}}return null}function am(e){let t=Kt("gem",["--version"],{env:e,stdio:"ignore"});if(t.error||t.status!==0)return;let n=process.env.HOME||qt.homedir(),r=process.env.FASTLANE_GEM_HOME||Re.join(n,".local/share/fastlane/3.4.0"),i=Re.join(r,"bin");ne.mkdirSync(i,{recursive:!0}),he(X.dim("fastlane not found. Installing fastlane into the local Mach runner cache..."));let o=Kt("gem",["install","fastlane","-NV","--install-dir",r,"--bindir",i],{env:{...e,GEM_HOME:r,GEM_PATH:[r,e.GEM_PATH].filter(Boolean).join(":")},stdio:"inherit"});(o.error||o.status!==0)&&he(X.yellow("Automatic fastlane install failed; Mach will try PATH resolution once more."))}function lm(e=ul){let t=[],n="",r=i=>{let o=gl(i);if(o)for(t.push(o);t.length>e;)t.shift()};return{append(i,o){let s=Buffer.isBuffer(i)?i.toString("utf8"):String(i);o.write(s),n+=s;let a=n.split(/\r?\n/);n=a.pop()||"";for(let l of a)r(l)},flush(){n.trim()&&r(n),n=""},lines(){return t.slice()}}}function cm(e,t){let n=new Error(dm(e,t));return n.logs=ml(t),n.exitCode=e,n}function dm(e,t){let n=`fastlane pilot failed with exit code ${e??"unknown"}.`,r=um(t);return r.length===0?n:`${n}
|
|
2211
2216
|
|
|
2212
2217
|
Fastlane output:
|
|
2213
2218
|
${r.join(`
|
|
2214
|
-
`)}`}function
|
|
2215
|
-
`),n=t.match(/CFBundleShortVersionString\s*\[([^\]]+)\]/i)?.[1]||t.match(/train version ['"]([^'"]+)['"]/i)?.[1];if(/Invalid Pre-Release Train/i.test(t)||/CFBundleShortVersionString[\s\S]*must contain a higher version/i.test(t))return[`App Store Connect rejected CFBundleShortVersionString${n?` ${n}`:""}: this App Store version train is closed or not higher than the approved version.`,'ios.buildNumber="auto" only changes CFBundleVersion; bump the marketing version (Expo app.json "expo.version" / iOS MARKETING_VERSION), rebuild, then submit the new build.'].join(" ");if(!/bundle version must be higher than the previously uploaded version/i.test(t))return null;let r=t.match(/previous(?:ly)?BundleVersion\s*:\s*([0-9.]+)/i)?.[1]||t.match(/previously uploaded version:\s*[‘'"]?([0-9.]+)/i)?.[1];return`App Store Connect rejected CFBundleVersion: the bundle version must be higher than the previously uploaded version.${r?` Previous uploaded build: ${r}.`:""}`}function
|
|
2216
|
-
`))}function
|
|
2219
|
+
`)}`}function um(e){let t=ml(e);if(t.length===0)return[];let n=al(t.filter(fm)),r=pm(t);if(r)return[r,...ll(n,io-1,il)];let i=n.length>0?n:t.slice(-io);return ll(al(i),io,il)}function pm(e){let t=e.join(`
|
|
2220
|
+
`),n=t.match(/CFBundleShortVersionString\s*\[([^\]]+)\]/i)?.[1]||t.match(/train version ['"]([^'"]+)['"]/i)?.[1];if(/Invalid Pre-Release Train/i.test(t)||/CFBundleShortVersionString[\s\S]*must contain a higher version/i.test(t))return[`App Store Connect rejected CFBundleShortVersionString${n?` ${n}`:""}: this App Store version train is closed or not higher than the approved version.`,'ios.buildNumber="auto" only changes CFBundleVersion; bump the marketing version (Expo app.json "expo.version" / iOS MARKETING_VERSION), rebuild, then submit the new build.'].join(" ");if(!/bundle version must be higher than the previously uploaded version/i.test(t))return null;let r=t.match(/previous(?:ly)?BundleVersion\s*:\s*([0-9.]+)/i)?.[1]||t.match(/previously uploaded version:\s*[‘'"]?([0-9.]+)/i)?.[1];return`App Store Connect rejected CFBundleVersion: the bundle version must be higher than the previously uploaded version.${r?` Previous uploaded build: ${r}.`:""}`}function fm(e){return/\[!\]|ERROR ITMS-\d+|ITMS-\d+|ENTITY_ERROR|previousBundleVersion|CFBundleVersion|Application Loader Error Output|Transporter Error|Transporter transfer failed|Asset validation failed|Validation failed|Error Domain=|The request could not be completed|No suitable application records|Could not|authentication|unauthori[sz]ed|invalid|failed|exception/i.test(e)}function al(e){let t=new Set,n=[];for(let r of e){let i=r.trim();!i||t.has(i)||(t.add(i),n.push(r))}return n}function ll(e,t,n){let r=[],i=0;for(let o=e.length-1;o>=0&&r.length<t;o--){let s=e[o],a=i+s.length+1;if(a>n&&r.length>0)break;r.unshift(s.length>n?`${s.slice(0,n-18)}... [truncated]`:s),i=a}return r}function ml(e){if(!Array.isArray(e))return[];let t=[];for(let n of e){let r=String(n).split(/\r?\n/);for(let i of r){let o=gl(i);o&&t.push(o)}}return t.slice(-ul)}function gl(e){return gm(mm(e).trimEnd()).trim()}function mm(e){return e.replace(/[\u001b\u009b][[\]()#;?]*(?:(?:(?:[a-zA-Z\d]*(?:;[a-zA-Z\d]*)*)?\u0007)|(?:(?:\d{1,4}(?:;\d{0,4})*)?[\dA-PR-TZcf-nq-uy=><~]))/g,"")}function gm(e){let t=e.replace(/-----BEGIN [^-]+-----[\s\S]*?-----END [^-]+-----/g,"[REDACTED_PRIVATE_KEY]").replace(/(authorization:\s*bearer\s+)[A-Za-z0-9._-]+/ig,"$1[REDACTED]").replace(/((?:password|token|secret|private[_-]?key)\s*[:=]\s*)("[^"]+"|'[^']+'|[^\s,]+)/ig,"$1[REDACTED]");for(let[n,r]of Object.entries(process.env))!r||r.length<8||/(TOKEN|SECRET|PASSWORD|PASS|PRIVATE|CREDENTIAL)/i.test(n)&&(t=t.replace(new RegExp(hm(r),"g"),"[REDACTED]"));return t}function hm(e){return e.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}function ym(e){return e?.code!=="ENOENT"?e:new Error(["fastlane was not found on PATH.","Mach submit uses Fastlane for iOS TestFlight/App Store uploads.","Run iOS submit on a macOS runner with Fastlane, or expose it via FASTLANE_BINARY / FASTLANE_BIN_DIR.","Example: gem install fastlane -NV"].join(`
|
|
2221
|
+
`))}function bm(e,t,n,r="production"){let i=e?.message||String(e);if(/changesNotSentForReview/i.test(i))return["Google Play rejected the commit because this change may need explicit review handling.",`Package: ${n||"unknown"} | Track: ${t}`,`Retry with: ${m.nameLower} submit --latest --platform android --profile ${r} --track ${t} --changes-not-sent-for-review`,"Then send the change for review from Google Play Console if required."].join(`
|
|
2217
2222
|
`);if(/caller does not have permission|permission denied|insufficient permissions|not authorized/i.test(i))return["Google Play rejected the service account permissions.",`Package: ${n||"unknown"} | Track: ${t}`,"Grant this service account access to the app in Play Console with release permissions, then retry."].join(`
|
|
2218
2223
|
`);if(/package.*not found|application.*not found|no application was found/i.test(i))return["Google Play could not find this package for the selected service account.",`Package: ${n||"unknown"} | Track: ${t}`,"Check android.package / submit.<profile>.android.package and make sure the app exists in this Play Console account."].join(`
|
|
2219
2224
|
`);if(/only releases with status draft|draft app/i.test(i))return["Google Play requires a draft release for this app state.",`Package: ${n||"unknown"} | Track: ${t}`,`Retry with: ${m.nameLower} submit --latest --platform android --profile ${r} --track ${t} --release-status draft`].join(`
|
|
2220
2225
|
`);if(i.includes("does not allow any existing users to upgrade"))return["Google Play rejected this release because the uploaded AAB is not an upgrade for existing users.",`Package: ${n||"unknown"} | Track: ${t}`,"Build a new Android artifact with a higher versionCode, then submit that build.",`Recommended: ${m.nameLower} build --platform android --profile ${r} --auto-version`,`Then: ${m.nameLower} submit --latest --platform android --profile ${r} --track ${t}`].join(`
|
|
2221
2226
|
`);if(/version code \d+ has already been used/i.test(i))return[i.match(/version code \d+ has already been used[^\n]*/i)?.[0]||"Version code has already been used.",`Package: ${n||"unknown"} | Track: ${t}`,"Build a new Android artifact with a higher versionCode, then submit that build.",`Recommended: ${m.nameLower} build --platform android --profile ${r} --auto-version`].join(`
|
|
2222
|
-
`);let o=i.match(/Google Api Error:[^\n]+/)||i.match(/Google Play API Error:[^\n]+/);return o?o[0]:i||"Google Play submission failed"}function Qf(e){try{ne.existsSync(e)&&ne.rmSync(e,{recursive:!0,force:!0})}catch{}}function ae(e){console.log(X.red(`\u274C ${e}`))}function he(e){console.log(X.gray(`\u2022 ${e}`))}function po(e){console.log(X.green(`\u2713 ${e}`))}import go from"fs";import bn from"path";var em=new Set([".gradle",".idea",".mach-cache",".expo",".dart_tool",".pub-cache",".turbo","build","builds","coverage","dist",".mach_cli","mach_cli"]),ll=new Set([".git",".gradle",".cxx",".expo","DerivedData","node_modules","Pods"]),cl=e=>e.split(bn.sep).filter(Boolean).join("/"),Br=(e,t)=>e===t||e.startsWith(`${t}/`),Hr=(e,t)=>e==="."?t:`${e}/${t}`,tm=(e,t,n)=>{let r=n==="web"?["android","ios"]:[n==="ios"?"android":"ios"];for(let s of r){let a=Hr(t,s);if(Br(e,a))return a}let i=e.split("/"),o=i.find(s=>ll.has(s));return o||(i[0]===".yarn"&&i[1]==="cache"?".yarn/cache":i[0]||e)},nm=(e,t,n=".")=>{let r=cl(e);if(!r)return!1;let i=ki(n),o=r.split("/"),s=o[0];if(o.some(u=>u===".dart_tool"||u===".pub-cache")||o.some(u=>u===".flutter-plugins"||u===".flutter-plugins-dependencies")||o.some(u=>ll.has(u))||s===".yarn"&&o[1]==="cache"||em.has(s))return!0;let a=t==="web"?["android","ios"]:[t==="ios"?"android":"ios"];for(let u of a)if(Br(r,Hr(i,u)))return!0;let l=Hr(i,"build");if(Br(r,l))return!0;let d=Hr(i,"ios/Flutter/ephemeral");if(Br(r,d))return!0;let c=o.findIndex(u=>u==="android"||u==="ios");return!!(c>=0&&o.slice(c+1).includes("build"))},dl=(e,t,n,r=".")=>{let i=0,o=new Set,s=ki(r),a=(l,d)=>{let c=cl(d);if(nm(c,n,s)){o.add(tm(c,s,n));return}let u=go.lstatSync(l);if(!u.isSymbolicLink()){if(u.isDirectory()){for(let f of go.readdirSync(l))a(bn.join(l,f),bn.join(d,f));return}if(u.isFile()){let f=bn.dirname(c);e.addLocalFile(l,f==="."?void 0:f,bn.basename(c)),i+=1}}};for(let l of go.readdirSync(t))a(bn.join(t,l),l);return{files:i,skipped:Array.from(o).sort()}};function ul(e){return String(e||"").replace(/\\\/Users\\\/[^\\/\s"'`]+/g,"\\/Users\\/[REDACTED]").replace(/\/Users\/[^/\\\s"'`]+/g,"/Users/[REDACTED]")}var ho=8,im=6,yl=Number(process.env.MACH_ARTIFACT_UPLOAD_MAX_ATTEMPTS||2),yo=Number(process.env.MACH_ARTIFACT_UPLOAD_TIMEOUT_MS||12e4),bo="ap-south-1",om=`${m.envPrefix}S3_DEBUG`,sm=()=>["1","true","yes","on"].includes(String(process.env[om]||"").trim().toLowerCase()),Io=(e,t)=>{if(sm()&&t)try{let n=new URL(t);_.info(w.dim(`[S3_DEBUG] ${e} host=${n.hostname} expectedRegion=${bo}`)),n.hostname.includes(bo)||_.warn(w.yellow(`[S3_DEBUG] ${e} host ${n.hostname} does not include ${bo}`))}catch(n){_.warn(w.yellow(`[S3_DEBUG] Could not parse ${e} presigned URL host: ${n.message}`))}},am=[{value:"production",label:"production",hint:"Store / release build"},{value:"staging",label:"staging",hint:"Internal testing build"},{value:"development",label:"development",hint:"Development build"}],Pl=e=>new Promise(t=>setTimeout(t,e)),lm=e=>!e.yes&&!e.failOnly&&!e.buildId&&process.stdin.isTTY&&process.stdout.isTTY,cm=({distributionType:e,missingCertificate:t,missingProfileBundleIds:n,buildProfile:r})=>{let i=[...t?["Distribution Certificate"]:[],...n.length>0?[`Provisioning Profile${n.length===1?"":"s"} for ${n.join(", ")}`]:[]].join(" and "),o=`${m.nameLower} credentials --platform ios --profile ${r}`,s=n.length>0?`Run \`${o}\`, choose Build Credentials, then select or enter ${n.join(", ")}.`:`Run \`${o}\` and choose Build Credentials.`,a=n.length>0?"iOS signs the app and every extension as separate targets, so the main app profile cannot sign its extension.":"iOS requires a matching distribution certificate to sign the app.";return[`Missing iOS credentials: ${i}.`,`Why: ${a}`,`To fix: ${s}`,`Mach needs ${e} credentials for this ${r} build. Then run the build again.`].join(" ")},dm=e=>{if(!e||typeof e!="object")return;let t=[e.distribution?`distribution: ${e.distribution}`:void 0,e.environment?`env: ${e.environment}`:void 0,e.developmentClient?"development client":void 0,e.simulator||e.ios?.simulator?"simulator":void 0].filter(Boolean);return t.length>0?t.join(", "):void 0},bl=()=>{let e=K(`./${m.configFileName}`),t=e?.build&&typeof e.build=="object"?e.build:{},n=Object.keys(t);return n.length===0?am:n.map(r=>({value:r,label:r,hint:dm(se(e,r))}))},Al=e=>{let t=K(`./${m.configFileName}`);return t?W(t,"store",e[0]?.value||"production"):e[0]?.value||"production"},um=async e=>{let t=lm(e);if(!e.platform&&t){let n=normalizeFramework(K(`./${m.configFileName}`)?.framework),r=await pl({message:"Select platform",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"},...n==="flutter"?[{value:"web",label:"Web"}]:[]]});zr(r)&&(ml("Build cancelled."),process.exit(0)),e.platform=r}if(!e.buildProfile&&t){let n=bl(),r=await pl({message:"Select build profile",options:n,initialValue:Al(n)});zr(r)&&(ml("Build cancelled."),process.exit(0)),e.buildProfile=r}if(!e.buildProfile){let n=bl();e.buildProfile=Al(n)}},Sl=e=>{if(e===!0||e===!1)return e;if(e===1||e==="1")return!0;if(e===0||e==="0")return!1;if(typeof e!="string")return;let t=e.trim().toLowerCase();if(["true","yes","on"].includes(t))return!0;if(["false","no","off"].includes(t))return!1},Cl=(e,t)=>{if(e)for(let n of t){let r=n.replace(/[.*+?^${}()|[\]\\]/g,"\\$&"),i=e.match(new RegExp(`(?:^|\\s)${r}(?:=|\\s+)([^\\s]+)`));if(i?.[1])return i[1].replace(/^["']|["']$/g,"")}},pm=(e,t)=>!!e&&t.some(n=>new RegExp(`(?:^|\\s)${n.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}(?:\\s|$)`).test(e)),fm=e=>{let n=Cl(e,["--platform"])||e?.split(/\s+/).find(r=>r==="ios"||r==="android"||r==="web");return n==="ios"||n==="android"||n==="web"?n:void 0},mm=async e=>{if(!e.projectId||!e.buildId)return;let t=!!e.local;try{let n=await I.get(`/builds/${e.projectId}/${e.buildId}`),r=n.data?.build||n.data;if(!r||typeof r!="object"){if(t)throw new Error("MACH API returned an empty build record.");return}let i=typeof r.buildArgs=="string"?r.buildArgs:void 0;if(Ps(e,r),!e.platform){let o=r.platform||fm(i);(o==="ios"||o==="android"||o==="web")&&(e.platform=o)}if(e.buildProfile||(e.buildProfile=r.buildProfile||r.profile||r.profileName||Cl(i,["--profile","--build-profile","-p"])),e.simulator===void 0){let o=Sl(r.simulator??r.isSimulator);o!==void 0?e.simulator=o:pm(i,["--simulator"])&&(e.simulator=!0)}if(e.developmentClient===void 0){let o=Sl(r.developmentClient??r.devClient);o!==void 0&&(e.developmentClient=o)}!e.flutterFlavor&&typeof r.flutterFlavor=="string"&&(e.flutterFlavor=r.flutterFlavor),!e.flutterTarget&&typeof r.flutterTarget=="string"&&(e.flutterTarget=r.flutterTarget),!e.flutterMode&&["debug","profile","release"].includes(r.flutterBuildMode)&&(e.flutterMode=r.flutterBuildMode),!e.flutterSdkVersion&&typeof r.flutterSdkVersion=="string"&&(e.flutterSdkVersion=r.flutterSdkVersion),!e.dartVersion&&typeof r.dartVersion=="string"&&(e.dartVersion=r.dartVersion),e.flutterObfuscate===void 0&&typeof r.flutterObfuscate=="boolean"&&(e.flutterObfuscate=r.flutterObfuscate),e.flutterSplitDebugInfo===void 0&&typeof r.flutterSplitDebugInfo=="boolean"&&(e.flutterSplitDebugInfo=r.flutterSplitDebugInfo)}catch(n){if(t){let r=n.response?.data?.message||n.message||"unknown error";throw new Error(`Could not load the canonical MACH build record for runner ${e.buildId}: ${r}. The runner stopped to avoid allocating or packaging a different native version.`)}_.warn(w.yellow(`Could not load saved build options for runner: ${n.message}`))}},gm=e=>{if(!Number.isFinite(e)||e<=0)return"0 B";let t=["B","KB","MB","GB"],n=Math.min(Math.floor(Math.log(e)/Math.log(1024)),t.length-1);return`${(e/Math.pow(1024,n)).toFixed(n===0?0:1)} ${t[n]}`},hm=e=>{let t=e.response?.status,n=e.code||"",r=e.message||"";return t?t===408||t===409||t===425||t===429||t>=500||/ECONNRESET|ETIMEDOUT|EAI_AGAIN|ENOTFOUND|ECONNABORTED|socket hang up|network|timeout/i.test(`${n} ${r}`):!0},qn=async(e,t,n=im)=>{let r;for(let i=1;i<=n;i++)try{return await t()}catch(o){if(r=o,!hm(o)||i>=n)break;let s=Math.min(6e4,2e3*Math.pow(2,i-1)),a=o.response?.status||o.code||o.message||"network error";_.warn(w.yellow(`${e} failed transiently (${a}). Retrying in ${Math.round(s/1e3)}s... (${i}/${n})`)),await Pl(s)}throw r},ym=async(e,t,n)=>{let r=fe.basename(e),i=Z.statSync(e).size,o=Math.round(yo/1e3);Io(`ARTIFACT_UPLOAD ${r}`,t);try{await qn(`Upload artifact ${r}`,async()=>{let s=new AbortController,a=Z.createReadStream(e),l=setTimeout(()=>{a.destroy(new Error(`Artifact upload timed out after ${o}s`)),s.abort()},yo);try{await Vr.put(t,a,{headers:{"Content-Type":n,"Content-Length":i,Connection:"close"},maxBodyLength:1/0,maxContentLength:1/0,timeout:yo,timeoutErrorMessage:`Artifact upload timed out after ${o}s`,signal:s.signal})}finally{clearTimeout(l)}},yl)}catch(s){throw new Error(`${r} (${gm(i)}) failed after ${yl} upload attempt(s): ${s.message||s}`)}return i},bm=e=>{let t=e.response?.status;return t?t===408||t===429||t>=500:!0},yt=e=>e.credentialId||e.id,Am=async(e,t)=>{let n=yt(e);if(!n)return e.downloadUrl;let r=await I.get(`/credentials/${n}/download`,{params:{projectId:t,format:"raw"}});return r.data?.status==="success"&&r.data?.downloadUrl?r.data.downloadUrl:e.downloadUrl},_o=async(e,t)=>{let n=e.downloadUrl;for(let r=1;r<=ho;r++)try{if((!n||r>1)&&(n=await Am(e,t)),!n)throw new Error(`Credential ${e.name||yt(e)||"unknown"} has no download URL.`);let i=await Vr.get(n,{responseType:"arraybuffer",timeout:6e4,maxContentLength:1/0,maxBodyLength:1/0,headers:{Connection:"close"}});return Buffer.from(i.data).toString("base64")}catch(i){if(r>=ho||!bm(i))throw i;let o=Math.min(1500*r*r,15e3);_.warn(w.dim(` - Temporary network error downloading ${e.name}. Retrying... (${r}/${ho})`)),await Pl(o)}throw new Error(`Failed to download credential ${e.name||yt(e)||"unknown"}.`)},Sm=(e,t)=>t?.ios?.buildNumber??t?.iosBuildNumber??e?.ios?.buildNumber??e?.expo?.ios?.buildNumber,Em=(e,t)=>t?.android?.versionCode??t?.androidVersionCode??e?.android?.versionCode??e?.expo?.android?.versionCode,El=(e,t,n,r)=>e==="ios"?t.iosBundleIdentifier||n?.ios?.bundleIdentifier||n?.expo?.ios?.bundleIdentifier||r:t.androidPackage||n?.android?.package||n?.expo?.android?.package||n?.name||r,Il=async(e,t,n)=>{let r=await I.post(`/projects/${e}/next-build-number`,{platform:t,scope:n});if(r.data.status!=="success"||!r.data.buildNumber)throw new Error(r.data.message||"Dashboard did not return a build number.");return String(r.data.buildNumber)},Yn=e=>{let t={};return e.platform==="ios"&&e.resolvedBuildNumber&&(t.buildNumber=e.resolvedBuildNumber),e.platform==="android"&&e.resolvedVersionCode&&(t.versionCode=e.resolvedVersionCode),t},Tl=(e,t,n=[])=>{if(!Z.existsSync(e))return n;let r;try{r=Z.readdirSync(e,{withFileTypes:!0})}catch{return n}for(let i of r){if(i.name==="Pods"||i.name==="build"||i.name==="DerivedData")continue;let o=fe.join(e,i.name);i.isDirectory()?Tl(o,t,n):i.name===t&&n.push(o)}return n},Im=(e,t)=>{let n=String(t.environment||"").toLowerCase(),r=e.toLowerCase(),i=0;return(n.includes("development")||n.includes("dev"))&&/(^|[.-])dev(elopment)?($|[.-])/.test(r)&&(i+=20),(n.includes("staging")||n.includes("stage"))&&/(^|[.-])stag(e|ing)?($|[.-])/.test(r)&&(i+=20),(n.includes("production")||n.includes("prod"))&&(/(^|[.-])(dev|development|stag|stage|staging)($|[.-])/.test(r)||(i+=20)),i},_m=(e,t)=>{let n=ve(process.cwd(),e.appDirectory),r=fe.join(n.appRoot,"ios"),i=Z.existsSync(r)?r:n.appRoot,o=Tl(i,"project.pbxproj"),s=[];for(let a of o)try{let d=Z.readFileSync(a,"utf8").matchAll(/PRODUCT_BUNDLE_IDENTIFIER\s*=\s*"?([^";\s]+)"?;/g);for(let c of d){let u=c[1]?.trim();u&&!u.includes("$")&&!u.startsWith("com.apple.")&&!s.includes(u)&&s.push(u)}}catch{}if(s.length!==0)return s.length===1?s[0]:s.map(a=>({bundleId:a,score:Im(a,e)})).sort((a,l)=>l.score-a.score)[0]?.bundleId},Gr=e=>String(e||"").trim().toLowerCase().replace(/_/g,"-"),Kr=(e,t)=>{let n=Gr(e);return t==="ios"&&(n==="internal"||n==="ad-hoc")?"adhoc":t==="android"&&["internal","adhoc","ad-hoc","development","dev","staging","stage"].includes(n)?"internal":n},wo=(e,t,n)=>{let r=Kr(e.distributionType||e.meta?.distributionType,n);return r?r===Kr(t,n):!0},_l=(e,t,n)=>{let r=Kr(e.distributionType||e.meta?.distributionType,n),i=Kr(t,n);return r?r===i?3:n==="android"&&i!=="store"&&r!=="store"?2:0:1},kl=(e,t)=>{let n=Gr(e.distribution),r=Gr(e.iosExportMethod),i=Gr(e.environment);return e.platform!=="ios"?n==="store"?"store":"internal":e.developmentClient||e.simulator?"development":r==="app-store"||n==="store"?"store":r==="development"||n==="development"?"development":r==="ad-hoc"||r==="adhoc"||n==="ad-hoc"||n==="adhoc"||n==="internal"?"adhoc":i==="production"||i==="store"?"store":i==="development"||i==="dev"?"development":"adhoc"},Nl=e=>e.bundleId||e.bundleIdentifier||e.packageName||e.meta?.bundleId||e.meta?.bundleIdentifier||e.meta?.packageName,xl=(e,t)=>{if(!t)return!0;let n=Nl(e);return!n||n==="*"||n===t},wm=(e,t)=>e.type==="android_keystore"&&xl(e,t),vm=(e,t,n)=>!!(e.local&&e.buildId)||!t||!n,wl=(e,t)=>{let n=Nl(e);return!t||!n?0:n===t?2:n==="*"?1:-1},Ll=e=>{try{let t=Buffer.from(e,"base64").toString("utf8"),n=t.match(/<key>application-identifier<\/key>\s*<string>([^<]+)<\/string>/)?.[1]?.trim();if(!n)return;let r=t.match(/<key>TeamIdentifier<\/key>\s*<array>\s*<string>([^<]+)<\/string>/)?.[1]?.trim();if(r&&n.startsWith(`${r}.`))return n.slice(r.length+1);let i=n.indexOf(".");return i>=0?n.slice(i+1):n}catch{return}},Rm=(e,t)=>{if(e===t||e==="*")return!0;if(e.endsWith(".*")){let n=e.slice(0,-2);return t.startsWith(`${n}.`)}return!1},$m=(e,t)=>{if(!t)return!0;let n=Ll(e);if(n)return Rm(n,t);try{return Buffer.from(e,"base64").toString("latin1").includes(t)}catch{return!0}},vo=(e,t,n,r)=>[...e].sort((i,o)=>{let s=wl(o,t)*10+_l(o,n,r)-(wl(i,t)*10+_l(i,n,r));return s!==0?s:(o.createdAt||0)-(i.createdAt||0)}),Ro=e=>{if(typeof e!="string")return;let t=e.replace(/[^a-fA-F0-9]/g,"").toUpperCase();return t.length===40?t:void 0},Om=e=>Ro(e?.certificateSha1)||Ro(e?.meta?.certificateSha1),Dm=e=>{let t=e?.profileCertificateSha1s??e?.meta?.profileCertificateSha1s;return Array.isArray(t)?t.map(Ro).filter(n=>!!n):[]},Pm=e=>{let t=Z.mkdtempSync(fe.join(Dl.tmpdir(),`${m.nameLower}-verify-signing-`));try{let n=fe.join(t,"certificate.p12");Z.writeFileSync(n,Buffer.from(e.certificateBase64,"base64"),{mode:384});let r=[...new Set([e.storedPassword||"","",m.keychainPassword])],i;for(let o of r)try{let s=Ms(n,o);for(let a=0;a<e.profiles.length;a++){let l=fe.join(t,`profile-${a}.mobileprovision`);Z.writeFileSync(l,Buffer.from(e.profiles[a].profileBase64,"base64"),{mode:384}),Fs(s,Ls(l))}return o}catch(s){i=s instanceof Error?s:new Error(String(s))}throw i||new Error("Could not verify the iOS signing certificate.")}finally{try{Z.rmSync(t,{recursive:!0,force:!0})}catch{}}},Cm=async e=>{let{projectId:t,signingTargets:n,distributionType:r,teamId:i,projectSecrets:o}=e,s=new Map,a=[];for(let g of n){_.info(w.dim(` Credential target: bundle ${g.bundleIdentifier} (${r})`));let y=await I.get("/credentials/resolve",{params:{projectId:t,platform:"ios",bundleId:g.bundleIdentifier,distributionType:r,teamId:i}}),b=y.data.status==="success"&&Array.isArray(y.data.credentials)?y.data.credentials:[];s.set(g.bundleIdentifier,b),a.push(...b)}let l=[],d=[],c=new Map,u=[];for(let g of n){let y=vo((s.get(g.bundleIdentifier)||[]).filter(A=>A.type==="ios_profile"&&wo(A,r,"ios")&&xl(A,g.bundleIdentifier)),g.bundleIdentifier,r,"ios"),b;for(let A of y)if(!(!A.downloadUrl&&!yt(A)))try{let v=await _o(A,t);if(!$m(v,g.bundleIdentifier)){let E=Ll(v)||"unknown";throw new Error(`expected ${g.bundleIdentifier}, found ${E}`)}b=v,c.set(g.bundleIdentifier,A),_.info(w.dim(` - Resolved ${A.name||"provisioning profile"} for ${g.bundleIdentifier}`));break}catch(v){l.push(`${A.name||yt(A)||g.bundleIdentifier}: ${v.message}`)}if(!b){u.push(g.bundleIdentifier);continue}d.push({...g,profileBase64:b})}let f=new Set,p=d.map(g=>Dm(c.get(g.bundleIdentifier))).filter(g=>g.length>0),h=vo(a.filter(g=>{if(g.type!=="ios_cert"||!wo(g,r,"ios"))return!1;let y=yt(g)||`${g.name||"certificate"}:${g.createdAt||""}`;if(f.has(y))return!1;f.add(y);let b=Om(g);return!(b&&p.length>0&&!p.every(A=>A.includes(b)))}),n[0]?.bundleIdentifier,r,"ios");for(let g of h)if(!(!g.downloadUrl&&!yt(g)))try{let y=await _o(g,t),b=d.length>0?Pm({certificateBase64:y,storedPassword:g.password,profiles:d}):g.password||"";o.IOS_DIST_P12=y,o.IOS_P12_PASSWORD=b,_.info(w.dim(` - Verified ${g.name||"Apple signing certificate"} against ${d.length||1} provisioning profile${d.length===1?"":"s"}`));break}catch(y){l.push(`${g.name||yt(g)||"iOS certificate"}: ${y.message}`)}if(d.length>0){let g=d.find(y=>y.isMainApplication)||d[0];o.IOS_PROVISIONING_PROFILE=g.profileBase64,n.length>1&&d.length===n.length&&(o.IOS_PROVISIONING_PROFILES=xs(d))}return{missingProfileBundleIds:u,failures:l}},Wr=async e=>{if(e.failOnly){(!e.projectId||!e.buildId)&&(_.error(w.red("--project-id and --build-id are required with --fail-only.")),process.exit(1));let d=e.error||"Build runner failed before it could report a final status.";try{await I.patch(`/builds/${e.projectId}/${e.buildId}`,{status:"failed",error:d,endTime:Date.now()}),_.info(w.yellow(`Marked build ${e.buildId} as failed.`));return}catch(c){_.error(w.red(`Could not mark build failed: ${c.message}`)),process.exit(1)}}await mm(e),await um(e),e.platform!=="android"&&e.platform!=="ios"&&e.platform!=="web"&&(_.error(`Platform ${e.platform} is not supported. Use 'android', 'ios', or 'web'.`),process.exit(1)),e.platform==="web"&&e.framework&&e.framework!=="flutter"&&(_.error(w.red("Web builds are available only for Flutter projects.")),process.exit(1)),e.platform==="web"&&(e.autoSubmit||e.maestro)&&(_.error(w.red("Flutter web artifacts cannot use store auto-submit or managed Maestro mobile tests.")),process.exit(1)),e.autoSubmit&&e.platform==="ios"&&e.simulator&&(_.error(w.red("--auto-submit cannot be used with --simulator because simulator builds are not App Store artifacts.")),process.exit(1)),e.autoSubmit&&e.dryRun&&_.warn(w.yellow("--auto-submit is ignored during --dry-run."));let t=Eo(),n=e.buildId||rm(),r=e.projectId,i=Date.now(),o=!!r,s=!0,a=async d=>{if(r)try{await I.patch(`/builds/${r}/${n}`,{status:"failed",error:d,endTime:Date.now()})}catch{}};if(e.local&&e.buildId&&r&&await qn("Mark isolated runner as building",()=>I.patch(`/builds/${r}/${n}`,{status:"building",runnerStartedAt:Date.now()})),e.local&&e.buildId){e.quiet||t.start(`Preparing isolated workspace for build: ${e.buildId}`);try{let d=await I.get(`/builds/${r}/${e.buildId}/source-url`);if(d.data.status!=="success")throw new Error("Failed to get source download URL from API");Io("SOURCE_DOWNLOAD",d.data.downloadUrl);let c=await Vr.get(d.data.downloadUrl,{responseType:"stream"}),u=(r||e.projectId||"default").replace(/[^a-zA-Z0-9-_]/g,"_"),f=fe.join(Dl.homedir(),m.workspacesDir,u);Z.mkdirSync(f,{recursive:!0});let p=new Set(["node_modules",`.${m.nameLower}-cache-meta`]),h=new Set(["Pods"]);if(Z.existsSync(f)){let v=Z.readdirSync(f);for(let E of v){if(p.has(E))continue;if(E==="ios"){let U=fe.join(f,"ios");try{let j=Z.readdirSync(U);for(let H of j)if(!h.has(H))try{Z.rmSync(fe.join(U,H),{recursive:!0,force:!0})}catch{}}catch{}continue}let L=fe.join(f,E);try{Z.rmSync(L,{recursive:!0,force:!0})}catch{}}}let g=fe.join(f,"source.zip"),y=c.data,b=Z.createWriteStream(g);await new Promise((v,E)=>{y.pipe(b),y.on("error",L=>E(L)),b.on("finish",()=>v())}),new hl(g).extractAllTo(f,!0);try{Z.unlinkSync(g)}catch{}process.chdir(f),_.info(w.green(`\u2713 Persistent workspace ready: ${f}`)),_.info(w.dim(` \u{1F4E6} Cached dirs preserved: node_modules=${Z.existsSync(fe.join(f,"node_modules"))?"\u2705":"\u274C"}, Pods=${Z.existsSync(fe.join(f,"ios","Pods"))?"\u2705":"\u274C"}`)),t.stop()}catch(d){t.stop(`Failed to prepare isolated workspace: ${d.message}`),r&&await a(`Setup Error: ${d.message}`),process.exit(1)}}try{let d=e.repo;if(!d)try{d=gl("git config --get remote.origin.url").toString().trim()}catch{_.warn("Could not detect git repository URL.")}!d&&e.dryRun,d||(d="https://github.com/placeholder/repo.git"),_.info(`Build ID: ${w.cyan(n)}`);let c={},u={},f=null,p=[],h=[],g=K(`./${m.configFileName}`);if(g||(_.error(w.red(`${m.configFileName} not found. Run \`${m.nameLower} init\` or \`${m.nameLower} link\` first.`)),process.exit(1)),g){f=g;let S=sn(g);e.framework=S,r=g.projectId;let R=e.local&&e.buildId?process.env.MACH_APP_DIRECTORY:void 0,$=ve(process.cwd(),R||g.appDirectory,{requireAppDirectory:!0});e.appDirectory=$.appDirectory,R&&process.env.MACH_DEBUG&&_.info(w.dim(`Runner app directory: ${e.appDirectory}`)),Cs($,S,e.platform);let O=e.buildProfile||"production",F=se(g,O);!F&&e.buildProfile&&(_.error(`Build profile '${O}' not found in ${m.configFileName}`),process.exit(1));let D=F||{};D.distribution||(_.warn(w.yellow(`Build profile "${O}" has no distribution. Defaulting to internal. Profile names do not control build behavior.`)),D.distribution="internal"),process.env.MACH_DEBUG&&_.info(w.dim(`Framework: ${S} | Build profile: ${O} | Platform: ${e.platform} | Distribution: ${D.distribution||"store"} | Environment: ${D.environment||O}`)),D.env&&(u=D.env,_.info(w.blue(`Use Build Profile: ${O}`)));let M=e.platform,z=D[M]||{},oe=["developmentClient","simulator","distribution","buildCommand","apk","iosScheme","preBuild","postBuild","scheme","environment","androidPackage","iosBundleIdentifier","name","iosDeploymentTarget","iosApiKeyId","iosApiKeyIssuer","iosApiKeyPath","iosTeamId","iosConfiguration","iosExportMethod","branch","repo","instanceType","ami","bucket","region","nodeVersion"];e.name=g.name,e.appName=g.name,e.androidPackage=g.android?.package,e.iosBundleIdentifier=g.ios?.bundleIdentifier,e.iosScheme=g.ios?.iosScheme,!e.nodeVersion&&g.nodeVersion&&(e.nodeVersion=g.nodeVersion);let Me=G=>G==="androidPackage"?z.androidPackage??z.package??D.androidPackage??D.android?.package:G==="iosBundleIdentifier"?z.iosBundleIdentifier??z.bundleIdentifier??D.iosBundleIdentifier??D.ios?.bundleIdentifier:z[G]!==void 0?z[G]:D[G];for(let G of oe){let Se=Me(G),jt=G==="androidPackage"||G==="iosBundleIdentifier";Se!==void 0&&(e[G]===void 0||jt)&&(e[G]=Se)}if(S==="flutter"){let G=ln(g,D,e.platform);dn($.appRoot,O,D,e.platform);let Se=tt($.appRoot),jt=Rt();if(e.flutterFlavor=e.flutterFlavor||G.flavor||Se.defaultFlavor,e.flutterTarget=e.flutterTarget||vt(G.target),e.flutterMode=e.flutterMode||cn(G,e),e.flutterDartDefinesFromEnv=e.flutterDartDefinesFromEnv||G.dartDefinesFromEnv,e.flutterObfuscate=e.flutterObfuscate??G.obfuscate??!1,e.flutterSplitDebugInfo=e.flutterSplitDebugInfo??G.splitDebugInfo??e.flutterObfuscate,e.flutterObfuscate||e.flutterSplitDebugInfo){if(e.platform==="web")throw new Error(`build.${O}.flutter obfuscation/splitDebugInfo is not supported for Flutter web.`);if(e.flutterMode!=="release")throw new Error(`build.${O}.flutter obfuscation/splitDebugInfo requires mode "release".`);e.flutterSplitDebugInfoPath=fe.join($.appRoot,".mach","symbols",e.buildId||n,e.platform)}if(e.flutterSdkVersion=vs(e.flutterSdkVersion||g.flutter?.sdkVersion||jt.flutter),e.dartVersion=e.dartVersion||jt.dart,e.appVersion=Se.version||"1.0.0",e.platform==="ios"&&e.flutterFlavor&&!e.iosScheme&&(e.iosScheme=e.flutterFlavor),!e.iosConfiguration){let bs=e.flutterMode==="debug"?"Debug":e.flutterMode==="profile"?"Profile":"Release";e.iosConfiguration=e.flutterFlavor?`${bs}-${e.flutterFlavor}`:bs}}if(e.platform==="ios"&&!(z.iosBundleIdentifier??z.bundleIdentifier??D.iosBundleIdentifier??D.ios?.bundleIdentifier)){let Se=_m(e,O);Se&&Se!==e.iosBundleIdentifier&&(_.warn(w.yellow(`Detected native iOS bundle identifier ${Se}; using it for credential lookup. Set build.${O}.ios.bundleIdentifier to make this explicit.`)),e.iosBundleIdentifier=Se)}e.branch=e.branch||"main",e.iosConfiguration=e.iosConfiguration||(e.developmentClient?"Debug":"Release"),e.sshUser=e.sshUser||process.env.USER||"ubuntu",e.simulator===void 0&&(e.simulator=!1),e.local===void 0&&(e.local=!1),e.verbose===void 0&&(e.verbose=!1),_.info(w.dim(`Resolved build config: framework=${S}, appDirectory=${e.appDirectory}, profile=${O}, platform=${e.platform}, simulator=${e.platform==="ios"?String(!!e.simulator):"n/a"}, developmentClient=${String(!!e.developmentClient)}, distribution=${e.distribution||D.distribution||"store"}, iosConfiguration=${e.platform==="ios"?e.iosConfiguration||"Release":"n/a"}`+(S==="flutter"?`, flutterFlavor=${e.flutterFlavor||"default"}, flutterTarget=${e.flutterTarget}, flutterMode=${e.flutterMode}`:"")));let et=G=>{if(!G)return G;if(G.startsWith("scripts.")){let Se=G.split(".")[1],jt=g.scripts?.[Se];if(jt)return jt;_.warn(`Script reference not found: ${G}`)}return G};if(e.buildCommand=et(e.buildCommand),e.preBuild=et(e.preBuild),e.postBuild=et(e.postBuild),!e.scheme&&g.scheme&&(e.scheme=g.scheme),e.platform==="ios"&&!e.simulator&&e.iosBundleIdentifier&&(p=Ns({config:g,resolvedProfile:D,framework:S,appRoot:$.appRoot,mainBundleIdentifier:e.iosBundleIdentifier,mainTargetName:e.iosScheme||e.scheme||g.scheme}),p.length>1)){_.info(w.magenta(`\u2713 Detected ${p.length} signed iOS targets:`));for(let G of p)_.info(w.dim(` - ${G.targetName||(G.isMainApplication?"main application":"extension")}: ${G.bundleIdentifier}`))}let _t={...an(g,m.envPrefix),...an(D,`${m.envPrefix}PROFILE_`)};if(c={...c,...u,..._t},process.env.IOS_P12_PASSWORD&&!c.IOS_P12_PASSWORD&&(c.IOS_P12_PASSWORD=process.env.IOS_P12_PASSWORD),process.env.MATCH_PASSWORD&&!c.MATCH_PASSWORD&&(c.MATCH_PASSWORD=process.env.MATCH_PASSWORD),e.platform==="ios"){if(!e.iosTeamId&&D.ios?.appleTeamId&&(e.iosTeamId=D.ios.appleTeamId),!e.iosTeamId&&g.submit?.[O]?.ios?.appleTeamId&&(e.iosTeamId=g.submit[O].ios.appleTeamId),!e.iosTeamId){let G=W(g,"store",O),Se=ft(g,G);Se.teamId&&(_.warn(w.yellow(`Using the iOS Team ID configured for store profile '${G}'.`)),e.iosTeamId=Se.teamId)}e.iosTeamId?_.info(w.magenta(`\u2713 Injected iOS Team ID from config: ${e.iosTeamId}`)):e.simulator||_.warn(w.yellow("\u26A0\uFE0F No iOS Team ID found. Device or archive signing may fail unless managed iOS credentials provide the team automatically."))}}let y="unknown";try{y=gl("git rev-parse --abbrev-ref HEAD").toString().trim()}catch{_.warn("Failed to detect git branch.")}let b="1.0.0";try{if(e.framework==="flutter"){let S=ve(process.cwd(),e.appDirectory);b=tt(S.appRoot).version||"1.0.0",e.appVersion=b}else Z.existsSync("./package.json")&&(b=JSON.parse(Z.readFileSync("./package.json","utf-8")).version||"1.0.0")}catch{}let A=e.buildProfile||"production",v=e.framework==="flutter"?b:Nn(g,{framework:e.framework,platform:e.platform==="web"?void 0:e.platform}),E="Internal";e.developmentClient?E="DevelopmentClient":e.distribution==="store"?E="Store":e.distribution==="development"&&(E="Development");let L=e.platform==="ios"?"iOS":e.platform==="android"?"Android":"Web",U=e.platform==="ios"&&e.simulator?" (Simulator)":"",j=`${L}${U} v${b} (${E})`;if(Jn(e,{status:"created",projectId:r,buildId:n,platform:e.platform,profile:A,branch:y,version:b,runtimeVersion:v,...Yn(e),buildType:E,developmentClient:!!e.developmentClient,summary:j}),r){try{let S=e.buildProfile||"production",R=e.environment||S;_.info(w.blue(`Fetching managed secrets for profile: ${S} (environment: ${R})...`));let O=(await I.get(`/projects/${r}/secrets/export?env=${R}`)).data;O.status==="success"&&O.secrets&&(c={...c,...O.secrets},Object.keys(O.secrets).length>0&&_.info(w.magenta(`\u2713 Injected ${Object.keys(O.secrets).length} secrets from Dashboard.`)))}catch(S){_.warn(`Failed to load managed secrets from Dashboard: ${S.message}`)}if(e.platform==="ios"){let S=e.buildProfile||"production",R=se(g,S)||{},$=Sm(g,R),O=Ci($),F=e.distribution!==void 0?e.distribution==="store":E==="Store",D=$===void 0&&F,M=e.autoVersion||O||D,z=Ti(e.resolvedBuildNumber,$,M,!e.simulator);if(z.kind==="persisted"){let oe=$r(e,c,z.value,"saved MACH build record");_.info(w.green(`\u2713 Reusing assigned iOS buildNumber ${oe}`))}else if(z.kind==="explicit"){let oe=$r(e,c,z.value,`${m.configFileName} (${S})`);_.info(w.green(`\u2713 Using configured iOS buildNumber ${oe}`))}else if(z.kind==="auto"){t.start("Assigning iOS buildNumber from Mach counter...");try{let oe=El("ios",e,g,S),Me=await Il(r,"ios",oe);$r(e,c,Me,"MACH version counter"),t.stop(`\u2713 Assigned iOS buildNumber ${w.green(Me)} (${oe})`)}catch(oe){throw t.stop("iOS buildNumber assignment failed"),new Error(`Auto-versioning failed: ${oe.response?.data?.message||oe.message}`)}}}if(e.platform==="android"){let S=e.buildProfile||"production",R=se(g,S)||{},$=Em(g,R),O=Ci($),F=e.distribution!==void 0?e.distribution==="store":E==="Store",D=$===void 0&&F,M=e.autoVersion||O||D,z=Ti(e.resolvedVersionCode,$,M);if(z.kind==="persisted"){let oe=Or(e,c,z.value,"saved MACH build record");_.info(w.green(`\u2713 Reusing assigned Android versionCode ${oe}`))}else if(z.kind==="explicit"){let oe=Or(e,c,z.value,`${m.configFileName} (${S})`);_.info(w.green(`\u2713 Using configured Android versionCode ${oe}`))}else if(z.kind==="auto"){t.start("Assigning Android versionCode from Mach counter...");try{let oe=El("android",e,g,S),Me=await Il(r,"android",oe);Or(e,c,Me,"MACH version counter"),t.stop(`\u2713 Assigned Android versionCode ${w.green(Me)} (${oe})`)}catch(oe){throw t.stop("Android versionCode assignment failed"),new Error(`Auto-versioning failed: ${oe.response?.data?.message||oe.message}`)}}}if(e.platform==="ios"&&e.simulator)_.info(w.dim("Skipping managed iOS signing credentials for simulator build."));else try{e.platform==="web"?_.info(w.dim("Skipping managed signing credentials for Flutter web build.")):_.info(w.blue("Fetching managed credentials..."));let S=kl(e,A),R=e.platform==="ios"?e.iosBundleIdentifier:e.androidPackage;if(e.platform==="ios"){let $=p.length>0?p:[{targetName:e.iosScheme||e.scheme,bundleIdentifier:e.iosBundleIdentifier,isMainApplication:!0}],O=await Cm({projectId:r,signingTargets:$,distributionType:S,teamId:e.iosTeamId,projectSecrets:c});if(h=O.missingProfileBundleIds,O.failures.length>0&&(!c.IOS_DIST_P12||h.length>0))throw new Error(`Credential setup failed:
|
|
2223
|
-
${
|
|
2224
|
-
`)}`)
|
|
2225
|
-
${
|
|
2226
|
-
`)}`)}if(v=e.framework==="flutter"?b:
|
|
2227
|
-
\u{1F517} Download Links:`));for(let
|
|
2228
|
-
\u2713 Build completed and reported to dashboard.`)),e.maestro&&!H&&await
|
|
2229
|
-
${
|
|
2230
|
-
\u{1F3BC} Queuing managed Maestro test...`)),await
|
|
2231
|
-
Auto-submit: submitting the successful build...`));try{let i=await
|
|
2227
|
+
`);let o=i.match(/Google Api Error:[^\n]+/)||i.match(/Google Play API Error:[^\n]+/);return o?o[0]:i||"Google Play submission failed"}function Am(e){try{ne.existsSync(e)&&ne.rmSync(e,{recursive:!0,force:!0})}catch{}}function ae(e){console.log(X.red(`\u274C ${e}`))}function he(e){console.log(X.gray(`\u2022 ${e}`))}function fo(e){console.log(X.green(`\u2713 ${e}`))}import ho from"fs";import Sn from"path";var Sm=new Set([".gradle",".idea",".mach-cache",".expo",".dart_tool",".pub-cache",".turbo","build","builds","coverage","dist",".mach_cli","mach_cli"]),hl=new Set([".git",".gradle",".cxx",".expo","DerivedData","node_modules","Pods"]),yl=e=>e.split(Sn.sep).filter(Boolean).join("/"),Hr=(e,t)=>e===t||e.startsWith(`${t}/`),Gr=(e,t)=>e==="."?t:`${e}/${t}`,Em=(e,t,n)=>{let r=n==="web"?["android","ios"]:[n==="ios"?"android":"ios"];for(let s of r){let a=Gr(t,s);if(Hr(e,a))return a}let i=e.split("/"),o=i.find(s=>hl.has(s));return o||(i[0]===".yarn"&&i[1]==="cache"?".yarn/cache":i[0]||e)},Im=(e,t,n=".")=>{let r=yl(e);if(!r)return!1;let i=Ni(n),o=r.split("/"),s=o[0];if(o.some(u=>u===".dart_tool"||u===".pub-cache")||o.some(u=>u===".flutter-plugins"||u===".flutter-plugins-dependencies")||o.some(u=>hl.has(u))||s===".yarn"&&o[1]==="cache"||Sm.has(s))return!0;let a=t==="web"?["android","ios"]:[t==="ios"?"android":"ios"];for(let u of a)if(Hr(r,Gr(i,u)))return!0;let l=Gr(i,"build");if(Hr(r,l))return!0;let d=Gr(i,"ios/Flutter/ephemeral");if(Hr(r,d))return!0;let c=o.findIndex(u=>u==="android"||u==="ios");return!!(c>=0&&o.slice(c+1).includes("build"))},bl=(e,t,n,r=".")=>{let i=0,o=new Set,s=Ni(r),a=(l,d)=>{let c=yl(d);if(Im(c,n,s)){o.add(Em(c,s,n));return}let u=ho.lstatSync(l);if(!u.isSymbolicLink()){if(u.isDirectory()){for(let f of ho.readdirSync(l))a(Sn.join(l,f),Sn.join(d,f));return}if(u.isFile()){let f=Sn.dirname(c);e.addLocalFile(l,f==="."?void 0:f,Sn.basename(c)),i+=1}}};for(let l of ho.readdirSync(t))a(Sn.join(t,l),l);return{files:i,skipped:Array.from(o).sort()}};function Al(e){return String(e||"").replace(/\\\/Users\\\/[^\\/\s"'`]+/g,"\\/Users\\/[REDACTED]").replace(/\/Users\/[^/\\\s"'`]+/g,"/Users/[REDACTED]")}var yo=8,wm=6,vl=Number(process.env.MACH_ARTIFACT_UPLOAD_MAX_ATTEMPTS||2),bo=Number(process.env.MACH_ARTIFACT_UPLOAD_TIMEOUT_MS||12e4),Ao="ap-south-1",vm=`${m.envPrefix}S3_DEBUG`,Rm=()=>["1","true","yes","on"].includes(String(process.env[vm]||"").trim().toLowerCase()),_o=(e,t)=>{if(Rm()&&t)try{let n=new URL(t);_.info(w.dim(`[S3_DEBUG] ${e} host=${n.hostname} expectedRegion=${Ao}`)),n.hostname.includes(Ao)||_.warn(w.yellow(`[S3_DEBUG] ${e} host ${n.hostname} does not include ${Ao}`))}catch(n){_.warn(w.yellow(`[S3_DEBUG] Could not parse ${e} presigned URL host: ${n.message}`))}},$m=[{value:"production",label:"production",hint:"Store / release build"},{value:"staging",label:"staging",hint:"Internal testing build"},{value:"development",label:"development",hint:"Development build"}],Fl=e=>new Promise(t=>setTimeout(t,e)),Pm=e=>!e.yes&&!e.failOnly&&!e.buildId&&process.stdin.isTTY&&process.stdout.isTTY,Om=({distributionType:e,missingCertificate:t,missingProfileBundleIds:n,buildProfile:r})=>{let i=[...t?["Distribution Certificate"]:[],...n.length>0?[`Provisioning Profile${n.length===1?"":"s"} for ${n.join(", ")}`]:[]].join(" and "),o=`${m.nameLower} credentials --platform ios --profile ${r}`,s=n.length>0?`Run \`${o}\`, choose Build Credentials, then select or enter ${n.join(", ")}.`:`Run \`${o}\` and choose Build Credentials.`,a=n.length>0?"iOS signs the app and every extension as separate targets, so the main app profile cannot sign its extension.":"iOS requires a matching distribution certificate to sign the app.";return[`Missing iOS credentials: ${i}.`,`Why: ${a}`,`To fix: ${s}`,`Mach needs ${e} credentials for this ${r} build. Then run the build again.`].join(" ")},Dm=e=>{if(!e||typeof e!="object")return;let t=[e.distribution?`distribution: ${e.distribution}`:void 0,e.environment?`env: ${e.environment}`:void 0,e.developmentClient?"development client":void 0,e.simulator||e.ios?.simulator?"simulator":void 0].filter(Boolean);return t.length>0?t.join(", "):void 0},Rl=()=>{let e=W(`./${m.configFileName}`),t=e?.build&&typeof e.build=="object"?e.build:{},n=Object.keys(t);return n.length===0?$m:n.map(r=>({value:r,label:r,hint:Dm(se(e,r))}))},$l=e=>{let t=W(`./${m.configFileName}`);return t?K(t,"store",e[0]?.value||"production"):e[0]?.value||"production"},Cm=async e=>{let t=Pm(e);if(!e.platform&&t){let n=normalizeFramework(W(`./${m.configFileName}`)?.framework),r=await Sl({message:"Select platform",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"},...n==="flutter"?[{value:"web",label:"Web"}]:[]]});Wr(r)&&(Il("Build cancelled."),process.exit(0)),e.platform=r}if(!e.buildProfile&&t){let n=Rl(),r=await Sl({message:"Select build profile",options:n,initialValue:$l(n)});Wr(r)&&(Il("Build cancelled."),process.exit(0)),e.buildProfile=r}if(!e.buildProfile){let n=Rl();e.buildProfile=$l(n)}},Pl=e=>{if(e===!0||e===!1)return e;if(e===1||e==="1")return!0;if(e===0||e==="0")return!1;if(typeof e!="string")return;let t=e.trim().toLowerCase();if(["true","yes","on"].includes(t))return!0;if(["false","no","off"].includes(t))return!1},Ul=(e,t)=>{if(e)for(let n of t){let r=n.replace(/[.*+?^${}()|[\]\\]/g,"\\$&"),i=e.match(new RegExp(`(?:^|\\s)${r}(?:=|\\s+)([^\\s]+)`));if(i?.[1])return i[1].replace(/^["']|["']$/g,"")}},Tm=(e,t)=>!!e&&t.some(n=>new RegExp(`(?:^|\\s)${n.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}(?:\\s|$)`).test(e)),km=e=>{let n=Ul(e,["--platform"])||e?.split(/\s+/).find(r=>r==="ios"||r==="android"||r==="web");return n==="ios"||n==="android"||n==="web"?n:void 0},Nm=async e=>{if(!e.projectId||!e.buildId)return;let t=!!e.local;try{let n=await I.get(`/builds/${e.projectId}/${e.buildId}`),r=n.data?.build||n.data;if(!r||typeof r!="object"){if(t)throw new Error("MACH API returned an empty build record.");return}let i=typeof r.buildArgs=="string"?r.buildArgs:void 0;if(Cs(e,r),!e.platform){let o=r.platform||km(i);(o==="ios"||o==="android"||o==="web")&&(e.platform=o)}if(e.buildProfile||(e.buildProfile=r.buildProfile||r.profile||r.profileName||Ul(i,["--profile","--build-profile","-p"])),e.simulator===void 0){let o=Pl(r.simulator??r.isSimulator);o!==void 0?e.simulator=o:Tm(i,["--simulator"])&&(e.simulator=!0)}if(e.developmentClient===void 0){let o=Pl(r.developmentClient??r.devClient);o!==void 0&&(e.developmentClient=o)}!e.flutterFlavor&&typeof r.flutterFlavor=="string"&&(e.flutterFlavor=r.flutterFlavor),!e.flutterTarget&&typeof r.flutterTarget=="string"&&(e.flutterTarget=r.flutterTarget),!e.flutterMode&&["debug","profile","release"].includes(r.flutterBuildMode)&&(e.flutterMode=r.flutterBuildMode),!e.flutterSdkVersion&&typeof r.flutterSdkVersion=="string"&&(e.flutterSdkVersion=r.flutterSdkVersion),!e.dartVersion&&typeof r.dartVersion=="string"&&(e.dartVersion=r.dartVersion),e.flutterObfuscate===void 0&&typeof r.flutterObfuscate=="boolean"&&(e.flutterObfuscate=r.flutterObfuscate),e.flutterSplitDebugInfo===void 0&&typeof r.flutterSplitDebugInfo=="boolean"&&(e.flutterSplitDebugInfo=r.flutterSplitDebugInfo)}catch(n){if(t){let r=n.response?.data?.message||n.message||"unknown error";throw new Error(`Could not load the canonical MACH build record for runner ${e.buildId}: ${r}. The runner stopped to avoid allocating or packaging a different native version.`)}_.warn(w.yellow(`Could not load saved build options for runner: ${n.message}`))}},xm=e=>{if(!Number.isFinite(e)||e<=0)return"0 B";let t=["B","KB","MB","GB"],n=Math.min(Math.floor(Math.log(e)/Math.log(1024)),t.length-1);return`${(e/Math.pow(1024,n)).toFixed(n===0?0:1)} ${t[n]}`},Mm=e=>{let t=e.response?.status,n=e.code||"",r=e.message||"";return t?t===408||t===409||t===425||t===429||t>=500||/ECONNRESET|ETIMEDOUT|EAI_AGAIN|ENOTFOUND|ECONNABORTED|socket hang up|network|timeout/i.test(`${n} ${r}`):!0},qn=async(e,t,n=wm)=>{let r;for(let i=1;i<=n;i++)try{return await t()}catch(o){if(r=o,!Mm(o)||i>=n)break;let s=Math.min(6e4,2e3*Math.pow(2,i-1)),a=o.response?.status||o.code||o.message||"network error";_.warn(w.yellow(`${e} failed transiently (${a}). Retrying in ${Math.round(s/1e3)}s... (${i}/${n})`)),await Fl(s)}throw r},Lm=async(e,t,n)=>{let r=fe.basename(e),i=Z.statSync(e).size,o=Math.round(bo/1e3);_o(`ARTIFACT_UPLOAD ${r}`,t);try{await qn(`Upload artifact ${r}`,async()=>{let s=new AbortController,a=Z.createReadStream(e),l=setTimeout(()=>{a.destroy(new Error(`Artifact upload timed out after ${o}s`)),s.abort()},bo);try{await zr.put(t,a,{headers:{"Content-Type":n,"Content-Length":i,Connection:"close"},maxBodyLength:1/0,maxContentLength:1/0,timeout:bo,timeoutErrorMessage:`Artifact upload timed out after ${o}s`,signal:s.signal})}finally{clearTimeout(l)}},vl)}catch(s){throw new Error(`${r} (${xm(i)}) failed after ${vl} upload attempt(s): ${s.message||s}`)}return i},Fm=e=>{let t=e.response?.status;return t?t===408||t===429||t>=500:!0},yt=e=>e.credentialId||e.id,Um=async(e,t)=>{let n=yt(e);if(!n)return e.downloadUrl;let r=await I.get(`/credentials/${n}/download`,{params:{projectId:t,format:"raw"}});return r.data?.status==="success"&&r.data?.downloadUrl?r.data.downloadUrl:e.downloadUrl},wo=async(e,t)=>{let n=e.downloadUrl;for(let r=1;r<=yo;r++)try{if((!n||r>1)&&(n=await Um(e,t)),!n)throw new Error(`Credential ${e.name||yt(e)||"unknown"} has no download URL.`);let i=await zr.get(n,{responseType:"arraybuffer",timeout:6e4,maxContentLength:1/0,maxBodyLength:1/0,headers:{Connection:"close"}});return Buffer.from(i.data).toString("base64")}catch(i){if(r>=yo||!Fm(i))throw i;let o=Math.min(1500*r*r,15e3);_.warn(w.dim(` - Temporary network error downloading ${e.name}. Retrying... (${r}/${yo})`)),await Fl(o)}throw new Error(`Failed to download credential ${e.name||yt(e)||"unknown"}.`)},jm=(e,t)=>t?.ios?.buildNumber??t?.iosBuildNumber??e?.ios?.buildNumber??e?.expo?.ios?.buildNumber,Bm=(e,t)=>t?.android?.versionCode??t?.androidVersionCode??e?.android?.versionCode??e?.expo?.android?.versionCode,Ol=(e,t,n,r)=>e==="ios"?t.iosBundleIdentifier||n?.ios?.bundleIdentifier||n?.expo?.ios?.bundleIdentifier||r:t.androidPackage||n?.android?.package||n?.expo?.android?.package||n?.name||r,Dl=async(e,t,n)=>{let r=await I.post(`/projects/${e}/next-build-number`,{platform:t,scope:n});if(r.data.status!=="success"||!r.data.buildNumber)throw new Error(r.data.message||"Dashboard did not return a build number.");return String(r.data.buildNumber)},Yn=e=>{let t={};return e.platform==="ios"&&e.resolvedBuildNumber&&(t.buildNumber=e.resolvedBuildNumber),e.platform==="android"&&e.resolvedVersionCode&&(t.versionCode=e.resolvedVersionCode),t},jl=(e,t,n=[])=>{if(!Z.existsSync(e))return n;let r;try{r=Z.readdirSync(e,{withFileTypes:!0})}catch{return n}for(let i of r){if(i.name==="Pods"||i.name==="build"||i.name==="DerivedData")continue;let o=fe.join(e,i.name);i.isDirectory()?jl(o,t,n):i.name===t&&n.push(o)}return n},Hm=(e,t)=>{let n=String(t.environment||"").toLowerCase(),r=e.toLowerCase(),i=0;return(n.includes("development")||n.includes("dev"))&&/(^|[.-])dev(elopment)?($|[.-])/.test(r)&&(i+=20),(n.includes("staging")||n.includes("stage"))&&/(^|[.-])stag(e|ing)?($|[.-])/.test(r)&&(i+=20),(n.includes("production")||n.includes("prod"))&&(/(^|[.-])(dev|development|stag|stage|staging)($|[.-])/.test(r)||(i+=20)),i},Gm=(e,t)=>{let n=ve(process.cwd(),e.appDirectory),r=fe.join(n.appRoot,"ios"),i=Z.existsSync(r)?r:n.appRoot,o=jl(i,"project.pbxproj"),s=[];for(let a of o)try{let d=Z.readFileSync(a,"utf8").matchAll(/PRODUCT_BUNDLE_IDENTIFIER\s*=\s*"?([^";\s]+)"?;/g);for(let c of d){let u=c[1]?.trim();u&&!u.includes("$")&&!u.startsWith("com.apple.")&&!s.includes(u)&&s.push(u)}}catch{}if(s.length!==0)return s.length===1?s[0]:s.map(a=>({bundleId:a,score:Hm(a,e)})).sort((a,l)=>l.score-a.score)[0]?.bundleId},Vr=e=>String(e||"").trim().toLowerCase().replace(/_/g,"-"),Kr=(e,t)=>{let n=Vr(e);return t==="ios"&&(n==="internal"||n==="ad-hoc")?"adhoc":t==="android"&&["internal","adhoc","ad-hoc","development","dev","staging","stage"].includes(n)?"internal":n},vo=(e,t,n)=>{let r=Kr(e.distributionType||e.meta?.distributionType,n);return r?r===Kr(t,n):!0},Cl=(e,t,n)=>{let r=Kr(e.distributionType||e.meta?.distributionType,n),i=Kr(t,n);return r?r===i?3:n==="android"&&i!=="store"&&r!=="store"?2:0:1},Bl=(e,t)=>{let n=Vr(e.distribution),r=Vr(e.iosExportMethod),i=Vr(e.environment);return e.platform!=="ios"?n==="store"?"store":"internal":e.developmentClient||e.simulator?"development":r==="app-store"||n==="store"?"store":r==="development"||n==="development"?"development":r==="ad-hoc"||r==="adhoc"||n==="ad-hoc"||n==="adhoc"||n==="internal"?"adhoc":i==="production"||i==="store"?"store":i==="development"||i==="dev"?"development":"adhoc"},Hl=e=>e.bundleId||e.bundleIdentifier||e.packageName||e.meta?.bundleId||e.meta?.bundleIdentifier||e.meta?.packageName,Gl=(e,t)=>{if(!t)return!0;let n=Hl(e);return!n||n==="*"||n===t},Vm=(e,t)=>e.type==="android_keystore"&&Gl(e,t),zm=(e,t,n)=>!!(e.local&&e.buildId)||!t||!n,Tl=(e,t)=>{let n=Hl(e);return!t||!n?0:n===t?2:n==="*"?1:-1},Vl=e=>{try{let t=Buffer.from(e,"base64").toString("utf8"),n=t.match(/<key>application-identifier<\/key>\s*<string>([^<]+)<\/string>/)?.[1]?.trim();if(!n)return;let r=t.match(/<key>TeamIdentifier<\/key>\s*<array>\s*<string>([^<]+)<\/string>/)?.[1]?.trim();if(r&&n.startsWith(`${r}.`))return n.slice(r.length+1);let i=n.indexOf(".");return i>=0?n.slice(i+1):n}catch{return}},Wm=(e,t)=>{if(e===t||e==="*")return!0;if(e.endsWith(".*")){let n=e.slice(0,-2);return t.startsWith(`${n}.`)}return!1},Km=(e,t)=>{if(!t)return!0;let n=Vl(e);if(n)return Wm(n,t);try{return Buffer.from(e,"base64").toString("latin1").includes(t)}catch{return!0}},Ro=(e,t,n,r)=>[...e].sort((i,o)=>{let s=Tl(o,t)*10+Cl(o,n,r)-(Tl(i,t)*10+Cl(i,n,r));return s!==0?s:(o.createdAt||0)-(i.createdAt||0)}),$o=e=>{if(typeof e!="string")return;let t=e.replace(/[^a-fA-F0-9]/g,"").toUpperCase();return t.length===40?t:void 0},Ym=e=>$o(e?.certificateSha1)||$o(e?.meta?.certificateSha1),qm=e=>{let t=e?.profileCertificateSha1s??e?.meta?.profileCertificateSha1s;return Array.isArray(t)?t.map($o).filter(n=>!!n):[]},Jm=e=>{let t=Z.mkdtempSync(fe.join(Ll.tmpdir(),`${m.nameLower}-verify-signing-`));try{let n=fe.join(t,"certificate.p12");Z.writeFileSync(n,Buffer.from(e.certificateBase64,"base64"),{mode:384});let r=[...new Set([e.storedPassword||"","",m.keychainPassword])],i;for(let o of r)try{let s=Fs(n,o);for(let a=0;a<e.profiles.length;a++){let l=fe.join(t,`profile-${a}.mobileprovision`);Z.writeFileSync(l,Buffer.from(e.profiles[a].profileBase64,"base64"),{mode:384}),Us(s,Ls(l))}return o}catch(s){i=s instanceof Error?s:new Error(String(s))}throw i||new Error("Could not verify the iOS signing certificate.")}finally{try{Z.rmSync(t,{recursive:!0,force:!0})}catch{}}},Xm=async e=>{let{projectId:t,signingTargets:n,distributionType:r,teamId:i,projectSecrets:o}=e,s=new Map,a=[];for(let g of n){_.info(w.dim(` Credential target: bundle ${g.bundleIdentifier} (${r})`));let y=await I.get("/credentials/resolve",{params:{projectId:t,platform:"ios",bundleId:g.bundleIdentifier,distributionType:r,teamId:i}}),b=y.data.status==="success"&&Array.isArray(y.data.credentials)?y.data.credentials:[];s.set(g.bundleIdentifier,b),a.push(...b)}let l=[],d=[],c=new Map,u=[];for(let g of n){let y=Ro((s.get(g.bundleIdentifier)||[]).filter(A=>A.type==="ios_profile"&&vo(A,r,"ios")&&Gl(A,g.bundleIdentifier)),g.bundleIdentifier,r,"ios"),b;for(let A of y)if(!(!A.downloadUrl&&!yt(A)))try{let v=await wo(A,t);if(!Km(v,g.bundleIdentifier)){let E=Vl(v)||"unknown";throw new Error(`expected ${g.bundleIdentifier}, found ${E}`)}b=v,c.set(g.bundleIdentifier,A),_.info(w.dim(` - Resolved ${A.name||"provisioning profile"} for ${g.bundleIdentifier}`));break}catch(v){l.push(`${A.name||yt(A)||g.bundleIdentifier}: ${v.message}`)}if(!b){u.push(g.bundleIdentifier);continue}d.push({...g,profileBase64:b})}let f=new Set,p=d.map(g=>qm(c.get(g.bundleIdentifier))).filter(g=>g.length>0),h=Ro(a.filter(g=>{if(g.type!=="ios_cert"||!vo(g,r,"ios"))return!1;let y=yt(g)||`${g.name||"certificate"}:${g.createdAt||""}`;if(f.has(y))return!1;f.add(y);let b=Ym(g);return!(b&&p.length>0&&!p.every(A=>A.includes(b)))}),n[0]?.bundleIdentifier,r,"ios");for(let g of h)if(!(!g.downloadUrl&&!yt(g)))try{let y=await wo(g,t),b=d.length>0?Jm({certificateBase64:y,storedPassword:g.password,profiles:d}):g.password||"";o.IOS_DIST_P12=y,o.IOS_P12_PASSWORD=b,_.info(w.dim(` - Verified ${g.name||"Apple signing certificate"} against ${d.length||1} provisioning profile${d.length===1?"":"s"}`));break}catch(y){l.push(`${g.name||yt(g)||"iOS certificate"}: ${y.message}`)}if(d.length>0){let g=d.find(y=>y.isMainApplication)||d[0];o.IOS_PROVISIONING_PROFILE=g.profileBase64,n.length>1&&d.length===n.length&&(o.IOS_PROVISIONING_PROFILES=Ms(d))}return{missingProfileBundleIds:u,failures:l}},Yr=async e=>{if(e.failOnly){(!e.projectId||!e.buildId)&&(_.error(w.red("--project-id and --build-id are required with --fail-only.")),process.exit(1));let d=e.error||"Build runner failed before it could report a final status.";try{await I.patch(`/builds/${e.projectId}/${e.buildId}`,{status:"failed",error:d,endTime:Date.now()}),_.info(w.yellow(`Marked build ${e.buildId} as failed.`));return}catch(c){_.error(w.red(`Could not mark build failed: ${c.message}`)),process.exit(1)}}await Nm(e),await Cm(e),e.platform!=="android"&&e.platform!=="ios"&&e.platform!=="web"&&(_.error(`Platform ${e.platform} is not supported. Use 'android', 'ios', or 'web'.`),process.exit(1)),e.platform==="web"&&e.framework&&e.framework!=="flutter"&&(_.error(w.red("Web builds are available only for Flutter projects.")),process.exit(1)),e.platform==="web"&&(e.autoSubmit||e.maestro)&&(_.error(w.red("Flutter web artifacts cannot use store auto-submit or managed Maestro mobile tests.")),process.exit(1)),e.autoSubmit&&e.platform==="ios"&&e.simulator&&(_.error(w.red("--auto-submit cannot be used with --simulator because simulator builds are not App Store artifacts.")),process.exit(1)),e.autoSubmit&&e.dryRun&&_.warn(w.yellow("--auto-submit is ignored during --dry-run."));let t=Io(),n=e.buildId||_m(),r=e.projectId,i=Date.now(),o=!!r,s=!0,a=async d=>{if(r)try{await I.patch(`/builds/${r}/${n}`,{status:"failed",error:d,endTime:Date.now()})}catch{}};if(e.local&&e.buildId&&r&&await qn("Mark isolated runner as building",()=>I.patch(`/builds/${r}/${n}`,{status:"building",runnerStartedAt:Date.now()})),e.local&&e.buildId){e.quiet||t.start(`Preparing isolated workspace for build: ${e.buildId}`);try{let d=await I.get(`/builds/${r}/${e.buildId}/source-url`);if(d.data.status!=="success")throw new Error("Failed to get source download URL from API");_o("SOURCE_DOWNLOAD",d.data.downloadUrl);let c=await zr.get(d.data.downloadUrl,{responseType:"stream"}),u=(r||e.projectId||"default").replace(/[^a-zA-Z0-9-_]/g,"_"),f=fe.join(Ll.homedir(),m.workspacesDir,u);Z.mkdirSync(f,{recursive:!0});let p=new Set(["node_modules",`.${m.nameLower}-cache-meta`]),h=new Set(["Pods"]);if(Z.existsSync(f)){let v=Z.readdirSync(f);for(let E of v){if(p.has(E))continue;if(E==="ios"){let U=fe.join(f,"ios");try{let j=Z.readdirSync(U);for(let H of j)if(!h.has(H))try{Z.rmSync(fe.join(U,H),{recursive:!0,force:!0})}catch{}}catch{}continue}let L=fe.join(f,E);try{Z.rmSync(L,{recursive:!0,force:!0})}catch{}}}let g=fe.join(f,"source.zip"),y=c.data,b=Z.createWriteStream(g);await new Promise((v,E)=>{y.pipe(b),y.on("error",L=>E(L)),b.on("finish",()=>v())}),new wl(g).extractAllTo(f,!0);try{Z.unlinkSync(g)}catch{}process.chdir(f),_.info(w.green(`\u2713 Persistent workspace ready: ${f}`)),_.info(w.dim(` \u{1F4E6} Cached dirs preserved: node_modules=${Z.existsSync(fe.join(f,"node_modules"))?"\u2705":"\u274C"}, Pods=${Z.existsSync(fe.join(f,"ios","Pods"))?"\u2705":"\u274C"}`)),t.stop()}catch(d){t.stop(`Failed to prepare isolated workspace: ${d.message}`),r&&await a(`Setup Error: ${d.message}`),process.exit(1)}}try{let d=e.repo;if(!d)try{d=_l("git config --get remote.origin.url").toString().trim()}catch{_.warn("Could not detect git repository URL.")}!d&&e.dryRun,d||(d="https://github.com/placeholder/repo.git"),_.info(`Build ID: ${w.cyan(n)}`);let c={},u={},f=null,p=[],h=[],g=W(`./${m.configFileName}`);if(g||(_.error(w.red(`${m.configFileName} not found. Run \`${m.nameLower} init\` or \`${m.nameLower} link\` first.`)),process.exit(1)),g){f=g;let S=an(g);e.framework=S,r=g.projectId;let D=e.local&&e.buildId?process.env.MACH_APP_DIRECTORY:void 0,R=ve(process.cwd(),D||g.appDirectory,{requireAppDirectory:!0});e.appDirectory=R.appDirectory,D&&process.env.MACH_DEBUG&&_.info(w.dim(`Runner app directory: ${e.appDirectory}`)),Ts(R,S,e.platform);let $=e.buildProfile||"production",k=se(g,$);!k&&e.buildProfile&&(_.error(`Build profile '${$}' not found in ${m.configFileName}`),process.exit(1));let P=k||{};P.distribution||(_.warn(w.yellow(`Build profile "${$}" has no distribution. Defaulting to internal. Profile names do not control build behavior.`)),P.distribution="internal"),process.env.MACH_DEBUG&&_.info(w.dim(`Framework: ${S} | Build profile: ${$} | Platform: ${e.platform} | Distribution: ${P.distribution||"store"} | Environment: ${P.environment||$}`)),P.env&&(u=P.env,_.info(w.blue(`Use Build Profile: ${$}`)));let F=e.platform,z=P[F]||{},oe=["developmentClient","simulator","distribution","buildCommand","apk","iosScheme","preBuild","postBuild","scheme","environment","androidPackage","iosBundleIdentifier","name","iosDeploymentTarget","iosApiKeyId","iosApiKeyIssuer","iosApiKeyPath","iosTeamId","iosConfiguration","iosExportMethod","branch","repo","instanceType","ami","bucket","region","nodeVersion"];e.name=g.name,e.appName=g.name,e.androidPackage=g.android?.package,e.iosBundleIdentifier=g.ios?.bundleIdentifier,e.iosScheme=g.ios?.iosScheme,!e.nodeVersion&&g.nodeVersion&&(e.nodeVersion=g.nodeVersion);let Le=G=>G==="androidPackage"?z.androidPackage??z.package??P.androidPackage??P.android?.package:G==="iosBundleIdentifier"?z.iosBundleIdentifier??z.bundleIdentifier??P.iosBundleIdentifier??P.ios?.bundleIdentifier:z[G]!==void 0?z[G]:P[G];for(let G of oe){let Se=Le(G),jt=G==="androidPackage"||G==="iosBundleIdentifier";Se!==void 0&&(e[G]===void 0||jt)&&(e[G]=Se)}if(S==="flutter"){let G=cn(g,P,e.platform);un(R.appRoot,$,P,e.platform);let Se=tt(R.appRoot),jt=Rt();if(e.flutterFlavor=e.flutterFlavor||G.flavor||Se.defaultFlavor,e.flutterTarget=e.flutterTarget||vt(G.target),e.flutterMode=e.flutterMode||dn(G,e),e.flutterDartDefinesFromEnv=e.flutterDartDefinesFromEnv||G.dartDefinesFromEnv,e.flutterObfuscate=e.flutterObfuscate??G.obfuscate??!1,e.flutterSplitDebugInfo=e.flutterSplitDebugInfo??G.splitDebugInfo??e.flutterObfuscate,e.flutterObfuscate||e.flutterSplitDebugInfo){if(e.platform==="web")throw new Error(`build.${$}.flutter obfuscation/splitDebugInfo is not supported for Flutter web.`);if(e.flutterMode!=="release")throw new Error(`build.${$}.flutter obfuscation/splitDebugInfo requires mode "release".`);e.flutterSplitDebugInfoPath=fe.join(R.appRoot,".mach","symbols",e.buildId||n,e.platform)}if(e.flutterSdkVersion=Rs(e.flutterSdkVersion||g.flutter?.sdkVersion||jt.flutter),e.dartVersion=e.dartVersion||jt.dart,e.appVersion=Se.version||"1.0.0",e.platform==="ios"&&e.flutterFlavor&&!e.iosScheme&&(e.iosScheme=e.flutterFlavor),!e.iosConfiguration){let As=e.flutterMode==="debug"?"Debug":e.flutterMode==="profile"?"Profile":"Release";e.iosConfiguration=e.flutterFlavor?`${As}-${e.flutterFlavor}`:As}}if(e.platform==="ios"&&!(z.iosBundleIdentifier??z.bundleIdentifier??P.iosBundleIdentifier??P.ios?.bundleIdentifier)){let Se=Gm(e,$);Se&&Se!==e.iosBundleIdentifier&&(_.warn(w.yellow(`Detected native iOS bundle identifier ${Se}; using it for credential lookup. Set build.${$}.ios.bundleIdentifier to make this explicit.`)),e.iosBundleIdentifier=Se)}e.branch=e.branch||"main",e.iosConfiguration=e.iosConfiguration||(e.developmentClient?"Debug":"Release"),e.sshUser=e.sshUser||process.env.USER||"ubuntu",e.simulator===void 0&&(e.simulator=!1),e.local===void 0&&(e.local=!1),e.verbose===void 0&&(e.verbose=!1),_.info(w.dim(`Resolved build config: framework=${S}, appDirectory=${e.appDirectory}, profile=${$}, platform=${e.platform}, simulator=${e.platform==="ios"?String(!!e.simulator):"n/a"}, developmentClient=${String(!!e.developmentClient)}, distribution=${e.distribution||P.distribution||"store"}, iosConfiguration=${e.platform==="ios"?e.iosConfiguration||"Release":"n/a"}`+(S==="flutter"?`, flutterFlavor=${e.flutterFlavor||"default"}, flutterTarget=${e.flutterTarget}, flutterMode=${e.flutterMode}`:"")));let et=G=>{if(!G)return G;if(G.startsWith("scripts.")){let Se=G.split(".")[1],jt=g.scripts?.[Se];if(jt)return jt;_.warn(`Script reference not found: ${G}`)}return G};if(e.buildCommand=et(e.buildCommand),e.preBuild=et(e.preBuild),e.postBuild=et(e.postBuild),!e.scheme&&g.scheme&&(e.scheme=g.scheme),e.platform==="ios"&&!e.simulator&&e.iosBundleIdentifier&&(p=xs({config:g,resolvedProfile:P,framework:S,appRoot:R.appRoot,mainBundleIdentifier:e.iosBundleIdentifier,mainTargetName:e.iosScheme||e.scheme||g.scheme}),p.length>1)){_.info(w.magenta(`\u2713 Detected ${p.length} signed iOS targets:`));for(let G of p)_.info(w.dim(` - ${G.targetName||(G.isMainApplication?"main application":"extension")}: ${G.bundleIdentifier}`))}let _t={...ln(g,m.envPrefix),...ln(P,`${m.envPrefix}PROFILE_`)};if(c={...c,...u,..._t},process.env.IOS_P12_PASSWORD&&!c.IOS_P12_PASSWORD&&(c.IOS_P12_PASSWORD=process.env.IOS_P12_PASSWORD),process.env.MATCH_PASSWORD&&!c.MATCH_PASSWORD&&(c.MATCH_PASSWORD=process.env.MATCH_PASSWORD),e.platform==="ios"){if(!e.iosTeamId&&P.ios?.appleTeamId&&(e.iosTeamId=P.ios.appleTeamId),!e.iosTeamId&&g.submit?.[$]?.ios?.appleTeamId&&(e.iosTeamId=g.submit[$].ios.appleTeamId),!e.iosTeamId){let G=K(g,"store",$),Se=ft(g,G);Se.teamId&&(_.warn(w.yellow(`Using the iOS Team ID configured for store profile '${G}'.`)),e.iosTeamId=Se.teamId)}e.iosTeamId?_.info(w.magenta(`\u2713 Injected iOS Team ID from config: ${e.iosTeamId}`)):e.simulator||_.warn(w.yellow("\u26A0\uFE0F No iOS Team ID found. Device or archive signing may fail unless managed iOS credentials provide the team automatically."))}}let y="unknown";try{y=_l("git rev-parse --abbrev-ref HEAD").toString().trim()}catch{_.warn("Failed to detect git branch.")}let b="1.0.0";try{if(e.framework==="flutter"){let S=ve(process.cwd(),e.appDirectory);b=tt(S.appRoot).version||"1.0.0",e.appVersion=b}else Z.existsSync("./package.json")&&(b=JSON.parse(Z.readFileSync("./package.json","utf-8")).version||"1.0.0")}catch{}let A=e.buildProfile||"production",v=e.framework==="flutter"?b:xn(g,{framework:e.framework,platform:e.platform==="web"?void 0:e.platform}),E="Internal";e.developmentClient?E="DevelopmentClient":e.distribution==="store"?E="Store":e.distribution==="development"&&(E="Development");let L=e.platform==="ios"?"iOS":e.platform==="android"?"Android":"Web",U=e.platform==="ios"&&e.simulator?" (Simulator)":"",j=`${L}${U} v${b} (${E})`;if(Jn(e,{status:"created",projectId:r,buildId:n,platform:e.platform,profile:A,branch:y,version:b,runtimeVersion:v,...Yn(e),buildType:E,developmentClient:!!e.developmentClient,summary:j}),r){try{let S=e.buildProfile||"production",D=e.environment||S;_.info(w.blue(`Fetching managed secrets for profile: ${S} (environment: ${D})...`));let $=(await I.get(`/projects/${r}/secrets/export?env=${D}`)).data;$.status==="success"&&$.secrets&&(c={...c,...$.secrets},Object.keys($.secrets).length>0&&_.info(w.magenta(`\u2713 Injected ${Object.keys($.secrets).length} secrets from Dashboard.`)))}catch(S){_.warn(`Failed to load managed secrets from Dashboard: ${S.message}`)}if(e.platform==="ios"){let S=e.buildProfile||"production",D=se(g,S)||{},R=jm(g,D),$=Ti(R),k=e.distribution!==void 0?e.distribution==="store":E==="Store",P=R===void 0&&k,F=e.autoVersion||$||P,z=ki(e.resolvedBuildNumber,R,F,!e.simulator);if(z.kind==="persisted"){let oe=$r(e,c,z.value,"saved MACH build record");_.info(w.green(`\u2713 Reusing assigned iOS buildNumber ${oe}`))}else if(z.kind==="explicit"){let oe=$r(e,c,z.value,`${m.configFileName} (${S})`);_.info(w.green(`\u2713 Using configured iOS buildNumber ${oe}`))}else if(z.kind==="auto"){t.start("Assigning iOS buildNumber from Mach counter...");try{let oe=Ol("ios",e,g,S),Le=await Dl(r,"ios",oe);$r(e,c,Le,"MACH version counter"),t.stop(`\u2713 Assigned iOS buildNumber ${w.green(Le)} (${oe})`)}catch(oe){throw t.stop("iOS buildNumber assignment failed"),new Error(`Auto-versioning failed: ${oe.response?.data?.message||oe.message}`)}}}if(e.platform==="android"){let S=e.buildProfile||"production",D=se(g,S)||{},R=Bm(g,D),$=Ti(R),k=e.distribution!==void 0?e.distribution==="store":E==="Store",P=R===void 0&&k,F=e.autoVersion||$||P,z=ki(e.resolvedVersionCode,R,F);if(z.kind==="persisted"){let oe=Pr(e,c,z.value,"saved MACH build record");_.info(w.green(`\u2713 Reusing assigned Android versionCode ${oe}`))}else if(z.kind==="explicit"){let oe=Pr(e,c,z.value,`${m.configFileName} (${S})`);_.info(w.green(`\u2713 Using configured Android versionCode ${oe}`))}else if(z.kind==="auto"){t.start("Assigning Android versionCode from Mach counter...");try{let oe=Ol("android",e,g,S),Le=await Dl(r,"android",oe);Pr(e,c,Le,"MACH version counter"),t.stop(`\u2713 Assigned Android versionCode ${w.green(Le)} (${oe})`)}catch(oe){throw t.stop("Android versionCode assignment failed"),new Error(`Auto-versioning failed: ${oe.response?.data?.message||oe.message}`)}}}if(e.platform==="ios"&&e.simulator)_.info(w.dim("Skipping managed iOS signing credentials for simulator build."));else try{e.platform==="web"?_.info(w.dim("Skipping managed signing credentials for Flutter web build.")):_.info(w.blue("Fetching managed credentials..."));let S=Bl(e,A),D=e.platform==="ios"?e.iosBundleIdentifier:e.androidPackage;if(e.platform==="ios"){let R=p.length>0?p:[{targetName:e.iosScheme||e.scheme,bundleIdentifier:e.iosBundleIdentifier,isMainApplication:!0}],$=await Xm({projectId:r,signingTargets:R,distributionType:S,teamId:e.iosTeamId,projectSecrets:c});if(h=$.missingProfileBundleIds,$.failures.length>0&&(!c.IOS_DIST_P12||h.length>0))throw new Error(`Credential setup failed:
|
|
2228
|
+
${$.failures.map(k=>`- ${k}`).join(`
|
|
2229
|
+
`)}`);$.failures.length>0&&_.warn(w.dim(` Skipped ${$.failures.length} stale or unusable credential(s).`))}else if(e.platform==="android"){_.info(w.dim(` Credential target: package ${D||"not set"} (${S})`));let R=await I.get("/credentials/resolve",{params:{projectId:r,platform:e.platform,bundleId:D,distributionType:S}}),$=R.data.status==="success"&&Array.isArray(R.data.credentials)?R.data.credentials:[],k=Ro($.filter(F=>Vm(F,D)),D,S,e.platform),P=[];for(let F of k)if(!(c.ANDROID_KEYSTORE_BASE64||!F.downloadUrl&&!yt(F)))try{if(!vo(F,S,"android")){let et=F.distributionType||F.meta?.distributionType||"unlabelled";_.info(w.dim(` - Reusing Android signing keystore labelled ${et} for ${S} (${D||"package not set"})`))}c.ANDROID_KEYSTORE_BASE64=await wo(F,r);let z=F.keystorePassword||F.password,oe=F.keyPassword||F.keystorePassword||F.password,Le=F.alias||F.meta?.alias;if(z&&(c.ANDROID_STORE_PASSWORD=z),oe&&(c.ANDROID_KEY_PASSWORD=oe),Le&&(c.ANDROID_KEY_ALIAS=Le),!c.ANDROID_STORE_PASSWORD){let G=["ANDROID_STORE_PASSWORD",...[S==="store"?"PRODUCTION":"STAGING",S.toUpperCase(),"PRODUCTION","STORE","INTERNAL","STAGING","RELEASE","DEBUG"].map(Se=>`KEYSTORE_PASSWORD_${Se}`),"KEYSTORE_PASSWORD"].find(Se=>!!c[Se]);G&&(c.ANDROID_STORE_PASSWORD=c[G])}if(c.ANDROID_KEY_PASSWORD||(c.ANDROID_KEY_PASSWORD=c.ANDROID_STORE_PASSWORD||""),!c.ANDROID_KEY_ALIAS){let et=["ANDROID_KEY_ALIAS","KEYSTORE_ALIAS"].find(_t=>!!c[_t]);et&&(c.ANDROID_KEY_ALIAS=c[et])}_.info(w.dim(` - Injected ${F.name} as ANDROID_KEYSTORE_BASE64`))}catch(z){P.push(`${F.name||F.type}: ${z.message}`)}if(P.length>0&&!c.ANDROID_KEYSTORE_BASE64)throw new Error(`Credential setup failed:
|
|
2230
|
+
${P.map(F=>`- ${F}`).join(`
|
|
2231
|
+
`)}`)}if(v=e.framework==="flutter"?b:xn(g,{framework:e.framework,platform:e.platform,iosBuildNumber:e.resolvedBuildNumber||c.BUILD_NUMBER,androidVersionCode:e.resolvedVersionCode||c.ANDROID_VERSION_CODE}),g.ota?.enabled)if(e.framework==="flutter"){if(g.ota.engine!=="shorebird")throw new Error("Flutter OTA must use the shorebird engine. Run `mach ota setup --engine shorebird`.");if(!Z.existsSync(fe.join(ve(process.cwd(),e.appDirectory).appRoot,"shorebird.yaml")))throw new Error("Flutter OTA is enabled but shorebird.yaml is missing. Run `mach ota setup`.")}else{if(g.ota.engine==="mach-react-native")throw new Error("This project still uses the unfinished mach-react-native OTA engine. Run `mach ota setup` to migrate to expo-updates before building.");if(!g.ota.url)throw new Error("OTA is enabled but ota.url is missing. Run `mach ota setup` before building.");let R=ks(g,u);if(e.framework==="expo"){let $=Nn(process.cwd(),{platform:e.platform,runtimeVersion:v,channel:R,url:g.ota.url}),k=Ns($,{runtimeVersion:v,channel:R,url:g.ota.url});if(k.length>0){let P=Z.existsSync(fe.join(process.cwd(),"node_modules",".bin","expo")),F=Z.existsSync(fe.join(process.cwd(),"node_modules","@radhya","mach","expo-plugin","index.js"));if(!zm(e,P,F))throw new Error(`Expo OTA configuration mismatch: ${k.join("; ")}. Run \`${m.nameLower} ota setup\` to update the local Expo plugin before building.`);_.info(w.dim("Deferring Expo OTA validation until dependencies are installed on the build runner."))}}c.MACH_OTA_RUNTIME_VERSION=v,c.MACH_OTA_CHANNEL=R,c.MACH_OTA_URL=g.ota.url}if(e.platform==="ios"&&!e.simulator){let R=!!c.IOS_DIST_P12,$=!!c.IOS_PROVISIONING_PROFILE,k=p.length>1,P=k?!!c.IOS_PROVISIONING_PROFILES&&h.length===0:$;if(!R||!P){let F=Om({distributionType:S,missingCertificate:!R,missingProfileBundleIds:h,buildProfile:A});if(e.local&&e.buildId)throw new Error(F);_.error(w.red(F)),e.quiet&&process.exit(1),k&&!P&&process.exit(1);let z=e.yes||await El({message:"Would you like to generate these credentials now?",initialValue:!0});if(z&&!Wr(z))return await Mn({platform:"ios",profile:A}),e.quiet||_.info(w.green("\u2713 Credentials setup complete! Restarting build phase...")),Yr(e);e.quiet||_.info(w.yellow(`Run \`${m.nameLower} credentials\` to set up signing credentials manually.`)),process.exit(1)}}if(e.platform==="android"&&!e.developmentClient&&(e.distribution==="internal"||e.distribution==="store")&&!(!!c.ANDROID_KEYSTORE_BASE64||!!c.ANDROID_KEYSTORE)){_.error(w.red("Missing Android credentials: Signing Keystore")),e.quiet&&process.exit(1);let $=e.yes||await El({message:"Would you like to automatically create and upload an Android Keystore for this profile now?",initialValue:!0});if($&&!Wr($))return await Mn({platform:"android",profile:A}),e.quiet||_.info(w.green("\u2713 Android Keystore setup complete! Restarting build phase...")),Yr(e);e.quiet||_.info(w.yellow(`Run \`${m.nameLower} credentials --platform android\` to set up a signing keystore manually.`)),process.exit(1)}}catch(S){if(String(S.message||"").startsWith("Credential download failed")||String(S.message||"").startsWith("Credential setup failed")||String(S.message||"").startsWith("Missing iOS credentials")||String(S.message||"").startsWith("Auto-versioning failed"))throw _.error(w.red(S.message)),S;e.platform==="ios"&&e.local&&e.buildId&&(_.error(w.red(`Failed to resolve iOS credentials: ${S.message}`)),process.exit(1)),_.warn(`Failed to resolve credentials: ${S.message}`)}}let H=!!(e.local&&e.buildId),te=!!(e.local||e.sshHost),ie=!te&&!H;if(H){_.info(w.magenta("\u{1F3D7}\uFE0F Runner Mode: Executing isolated build task..."));let S=await xi({...e,interactive:!1},n,c,r,{branch:y,version:b,runtimeVersion:v,summary:j,buildType:E,isolatedRunner:!0});await Ce(S),s=!1,process.exit(0)}async function Ce(S){let D=async R=>{if(r)try{await qn("Report failed build status",()=>I.patch(`/builds/${r}/${n}`,{status:"failed",error:R,endTime:Date.now()}),3)}catch($){_.warn(w.yellow(`Could not report failed build status: ${$.message}`))}};if(r&&S.length>0){let R=Io(),$=[];e.quiet||R.start("Uploading artifacts to Dashboard...");try{for(let k of S){let P=fe.basename(k),F=Z.statSync(k).size,z=fe.extname(P).toLowerCase(),Le=z===".zip"?"application/zip":"application/octet-stream",et=P.endsWith("flutter-web.zip")?"web-zip":P.endsWith("flutter-symbols.zip")?"debug-symbols":z.substring(1),_t=await qn(`Create artifact upload URL for ${P}`,()=>I.post(`/builds/${r}/${n}/artifact-upload-url`,{fileName:P,fileType:Le}));if(_t.data.status!=="success")throw new Error(`Failed to get upload URL for ${P}`);await Lm(k,_t.data.uploadUrl,Le),$.push({name:P,url:_t.data.downloadUrl,size:F,type:et})}e.quiet||R.stop("Artifacts uploaded.")}catch(k){e.quiet||R.stop("Failed to upload artifacts.");let P=`Artifact upload failed: ${k.message}`;throw _.error(w.red(P)),await D(P),new Error(P)}if(r&&$.length>0)try{_.info(w.cyan(`
|
|
2232
|
+
\u{1F517} Download Links:`));for(let k of $)_.info(w.dim(` - ${k.name}: `)+w.blue.underline(k.url));await qn("Finalize build in dashboard",()=>I.patch(`/builds/${r}/${n}`,{status:"success",artifacts:$,endTime:Date.now(),runtimeVersion:v,...Yn(e),...Eo(e,A)})),Jn(e,{status:"success",projectId:r,buildId:n,platform:e.platform,profile:A,branch:y,version:b,runtimeVersion:v,...Yn(e),buildType:E,developmentClient:!!e.developmentClient,summary:j,artifacts:$}),_.success(w.green(`
|
|
2233
|
+
\u2713 Build completed and reported to dashboard.`)),e.maestro&&!H&&await kl(r,n,e,A),e.autoSubmit&&!H&&await So(r,n,e,A)}catch(k){let P=`Build artifact uploaded but dashboard finalization failed: ${k.message}`;throw _.error(w.red(`
|
|
2234
|
+
${P}`)),await D(P),new Error(P)}}else if(r){let R="Build completed but produced no uploadable artifacts.";throw _.error(w.red(R)),await D(R),new Error(R)}}if(te){if(_.info(w.cyan(`\u{1F680} Direct Build Mode: Executing on ${e.sshHost||"local"}...`)),r&&!o){let S=process.argv.slice(3).join(" ");await I.post("/builds",{projectId:r,buildId:n,platform:e.platform,status:"building",branch:y,version:b,runtimeVersion:v,...Yn(e),summary:j,startTime:i,buildType:E,buildProfile:A,buildArgs:S,framework:e.framework,appDirectory:e.appDirectory,simulator:!!e.simulator,developmentClient:!!e.developmentClient,...Eo(e,A),...Nl(e,n,A,f)}),xl(e)}if(e.sshHost&&e.platform==="ios")await Ta(e,n,c,r),s=!1,e.autoSubmit&&await So(r,n,e,A);else{let S=await xi({...e,interactive:!!e.local},n,c,r,{branch:y,version:b,runtimeVersion:v,summary:j,buildType:E,isolatedRunner:!1});await Ce(S),s=!1}return}if(ie&&(_.info(w.blue("\u{1F6F0}\uFE0F Cloud Initiator Mode: Preparing orchestration...")),!e.dryRun)){e.quiet||t.start("Zipping and uploading local source...");let S=await I.post("/builds/source-upload-url",{projectId:r,buildId:n});if(S.data.status!=="success")throw t.stop("Failed to get upload URL."),new Error("Failed to get source upload URL from API");_o("SOURCE_UPLOAD",S.data.uploadUrl);let D=new wl,R=bl(D,process.cwd(),e.platform,e.appDirectory),$=D.toBuffer();if(!e.quiet){let P=R.skipped.length>0?` Skipped: ${R.skipped.join(", ")}.`:"";t.message(`Prepared source (${R.files} files).${P}`)}e.quiet||t.message(`Uploading source (${($.length/1024/1024).toFixed(1)} MB)...`);let k=!1;for(let P=1;P<=3;P++)try{await zr.put(S.data.uploadUrl,$,{headers:{"Content-Type":"application/zip"},maxBodyLength:1/0,maxContentLength:1/0,timeout:12e4}),k=!0;break}catch(F){if(P<3)t.message(`Upload attempt ${P} failed (${F.code||F.message}), retrying...`),await new Promise(z=>setTimeout(z,2e3*P));else throw F}if(e.quiet||t.stop("Source uploaded"),r){let P=process.argv.slice(3).join(" ");s=e.platform==="android"||e.platform==="web",await I.post("/builds",{projectId:r,buildId:n,platform:e.platform,status:"pending",branch:y,version:b,runtimeVersion:v,...Yn(e),summary:j,startTime:i,buildType:E,buildProfile:A,buildArgs:P,framework:e.framework,appDirectory:e.appDirectory,simulator:!!e.simulator,developmentClient:!!e.developmentClient,...Eo(e,A),...Nl(e,n,A,f)}),s=e.platform==="android"||e.platform==="web",_.info(w.green("\u2713 Cloud build registered.")),xl(e)}(e.platform==="android"||e.platform==="web")&&(await Da(e,n,c,r,e.preBuild),s=!1),e.quiet||_.info(w.cyan("\u{1F4E1} Connecting to build stream...")),await eg(r,n,e),e.maestro&&await kl(r,n,e,A),e.autoSubmit&&await So(r,n,e,A);return}}catch(d){let c=d.message||"Build failed";d.response?.data?.message?c=d.response.data.message:d.message.includes("status code 402")?c="Insufficient wallet balance. Please add credits in the Dashboard.":d.message.includes("status code 403")&&(c="Monthly build quota exceeded. Upgrade your plan in the Dashboard."),r&&s&&await a(c),_.error(w.red(`\u2717 Build failed: ${c}`)),process.exit(1)}};async function kl(e,t,n,r){_.info(w.cyan(`
|
|
2235
|
+
\u{1F3BC} Queuing managed Maestro test...`)),await Qi({projectId:e,buildId:t,platform:n.platform,profile:r,maestroFlows:n.maestroFlows,maestroDevice:n.maestroDevice,maestroRetries:n.maestroRetries,maestroRecord:n.maestroRecord,maestroUseBuildSource:n.maestroUseBuildSource,maestroEnv:n.maestroEnv,quiet:n.quiet})}async function So(e,t,n,r){if(!e){_.error(w.red("Auto-submit requires a linked Mach project. Run `mach link` or pass --project-id.")),process.exitCode=1;return}_.info(w.cyan(`
|
|
2236
|
+
Auto-submit: submitting the successful build...`));try{let i=await Zm(e,t);if(i?.autoSubmit){let o=i.submissionId?`${at}/submissions/${i.submissionId}?projectId=${encodeURIComponent(e)}`:void 0,s=String(i.status||"").toLowerCase(),a=String(i.autoSubmitStatus||"").toLowerCase(),l=i.submissionId||["success","completed","succeeded"].includes(s)||["starting","submitted","failed","skipped"].includes(a);if(i.submissionId?(_.info(w.green(`Auto-submit is already queued by Mach backend: ${i.submissionId}`)),_.info(w.dim(`Dashboard: ${o}`))):i.autoSubmitStatus==="failed"?_.warn(w.yellow(`Backend auto-submit failed: ${i.autoSubmitError||"Unknown error"}`)):l&&_.info(w.green("Auto-submit is registered with Mach backend; skipping local duplicate submit.")),l){Ct(n,{status:i.autoSubmitStatus||"pending",projectId:e,submitId:i.submissionId,platform:n.platform,profile:r,buildId:t,dashboardUrl:o});return}}await Br({platform:n.platform,profile:r,buildProfile:r,buildId:t,projectId:e,yes:n.yes,quiet:n.quiet,track:n.submitTrack,releaseStatus:n.submitReleaseStatus,rollout:n.submitRollout,changesNotSentForReview:n.submitChangesNotSentForReview,credentialId:n.submitCredentialId,packageName:n.androidPackage,jsonOutput:n.submitJsonOutput,submitArgs:zl(n,t,r)})}catch(i){_.error(w.red(`Auto-submit failed: ${i.message||i}`)),process.exitCode=1}}function zl(e,t,n){let r=["--platform",e.platform,"--profile",n,"--build-id",t];return e.submitTrack&&r.push("--track",String(e.submitTrack)),e.submitReleaseStatus&&r.push("--release-status",String(e.submitReleaseStatus)),e.submitRollout!==void 0&&r.push("--rollout",String(e.submitRollout)),e.submitChangesNotSentForReview&&r.push("--changes-not-sent-for-review"),e.submitCredentialId&&r.push("--credential-id",e.submitCredentialId),e.platform==="android"&&e.androidPackage&&r.push("--package-name",e.androidPackage),e.platform==="ios"&&e.iosBundleIdentifier&&r.push("--bundle-id",e.iosBundleIdentifier),e.submitJsonOutput&&r.push("--json-output",e.submitJsonOutput),r.join(" ")}async function Zm(e,t){try{let r=(await I.get(`/builds/${e}/${t}`)).data?.build;if(r?.autoSubmit)return r}catch(n){_.warn(w.dim(`Could not check backend auto-submit status: ${n.message}`))}return null}function Po(e){for(let t of Object.keys(e))e[t]===void 0&&delete e[t];return e}function Eo(e,t){if(e.platform==="android"&&!e.androidPackage){let n=$t("android",e.appDirectory);n&&(e.androidPackage=n)}return Po({distribution:Bl(e,t),packageName:e.platform==="android"?e.androidPackage:void 0,bundleId:e.platform==="ios"?e.iosBundleIdentifier:void 0,appleTeamId:e.platform==="ios"?e.iosTeamId:void 0,developerTeamId:e.platform==="ios"?e.iosTeamId:void 0,flutterSdkVersion:e.framework==="flutter"?e.flutterSdkVersion:void 0,dartVersion:e.framework==="flutter"?e.dartVersion:void 0,flutterFlavor:e.framework==="flutter"?e.flutterFlavor:void 0,flutterTarget:e.framework==="flutter"?e.flutterTarget:void 0,flutterBuildMode:e.framework==="flutter"?e.flutterMode:void 0,flutterObfuscate:e.framework==="flutter"?e.flutterObfuscate:void 0,flutterSplitDebugInfo:e.framework==="flutter"?e.flutterSplitDebugInfo:void 0})}function Qm(e,t,n){let r=n?.submit?.[t]?.android||{},i=n?.submit?.production?.android||{},o=e.submitTrack||r.track||i.track,s=e.submitReleaseStatus||r.releaseStatus||i.releaseStatus,a=e.submitRollout??r.rollout??r.userFraction??r.rolloutFraction??i.rollout??i.userFraction??i.rolloutFraction,l=e.submitChangesNotSentForReview??r.changesNotSentForReview??r.changes_not_sent_for_review??i.changesNotSentForReview??i.changes_not_sent_for_review;return Po({track:o,releaseStatus:s,rollout:a,changesNotSentForReview:l===void 0?!1:l===!0||l==="true"||l==="1"})}function Nl(e,t,n,r){if(!e.autoSubmit||e.dryRun)return{};let i=e.platform==="android"?Qm(e,n,r):{};return{autoSubmit:!0,autoSubmitStatus:"pending",autoSubmitOptions:Po({platform:e.platform,profile:n,buildId:t,latest:!1,...i,credentialId:e.submitCredentialId,packageName:e.platform==="android"?e.androidPackage:void 0,bundleId:e.platform==="ios"?e.iosBundleIdentifier:void 0,submitArgs:zl(e,t,n)})}}function xl(e){!e.autoSubmit||e.dryRun||e.quiet||(_.info(w.green("\u2713 Auto-submit has been registered with the build.")),_.info(w.dim(" You can close this terminal; submission will start after build success.")))}function Ml(e){return`${at}/build/${e}`}function Jn(e,t){if(!e.jsonOutput)return;let n=fe.resolve(e.jsonOutput),r={...t,url:t.url||Ml(t.buildId),dashboardUrl:t.dashboardUrl||Ml(t.buildId),updatedAt:new Date().toISOString()};try{let i=fe.dirname(n);i&&i!=="."&&Z.mkdirSync(i,{recursive:!0}),Z.writeFileSync(n,JSON.stringify(r,null,2))}catch(i){_.warn(w.yellow(`Could not write build metadata JSON: ${i.message}`))}}async function eg(e,t,n){let i=Io(),o="pending",s=0,a=0;for(n.quiet||i.start("Connecting to build stream...");;){try{let d=(await I.get(`/builds/${e}/${t}`)).data.build;if(d){o=d.status;let c=String(d.pipelineLaunchState||"").toLowerCase(),u=Number(d.pipelineLaunchClaimedAt),f=Number(d.pipelineLaunchDispatchStartedAt),p=c==="claimed"&&Number.isFinite(u)&&u>0&&Date.now()-u>=3e5,h=c==="dispatching"&&Number.isFinite(f)&&f>0&&Date.now()-f>=3e5;if(["","created","pending","queued"].includes(String(o||"").toLowerCase())&&(c==="retryable_failed"||c==="ambiguous"||p||h)){let y=h||c==="ambiguous"?"ambiguous":"retryable_failed",b=d.pipelineLaunchError||(y==="ambiguous"?"The iOS runner launch outcome is unknown. MACH blocked automatic relaunch to avoid a duplicate pipeline.":p?"The iOS runner was never dispatched before its launch lease expired. Retry this build.":"The iOS runner could not be launched. Retry this build.");n.quiet||i.stop("Build runner launch failed."),Jn(n,{status:"failed",projectId:e,buildId:t,platform:n.platform,profile:d.buildProfile,buildType:d.buildType,developmentClient:!!d.developmentClient,version:d.version,runtimeVersion:d.runtimeVersion,buildNumber:d.buildNumber,versionCode:d.versionCode,summary:d.summary,pipelineLaunchState:y,error:b,artifacts:d.artifacts||[]}),_.error(w.red(`
|
|
2232
2237
|
\u2717 Build runner launch failed: ${b}`)),process.exit(1)}if(o==="building")n.quiet||i.message("Build in progress...");else if(o==="failed"||o==="error"||o==="cancelled"||o==="canceled"){let y=o==="cancelled"||o==="canceled";n.quiet||i.stop(y?"Build cancelled.":"Build failed.");let b=d.error||(y?"Build was cancelled.":"Unknown error");Jn(n,{status:o,projectId:e,buildId:t,platform:n.platform,profile:d.buildProfile,buildType:d.buildType,developmentClient:!!d.developmentClient,version:d.version,runtimeVersion:d.runtimeVersion,buildNumber:d.buildNumber,versionCode:d.versionCode,summary:d.summary,error:b,artifacts:d.artifacts||[]}),_.error(w.red(`
|
|
2233
2238
|
\u2717 ${y?"Build cancelled":"Build failed"}: ${b}`)),process.exit(1)}else if(o==="completed"||o==="success"){n.quiet||i.stop("Build successful!"),Jn(n,{status:o,projectId:e,buildId:t,platform:n.platform,profile:d.buildProfile,buildType:d.buildType,developmentClient:!!d.developmentClient,version:d.version,runtimeVersion:d.runtimeVersion,buildNumber:d.buildNumber,versionCode:d.versionCode,summary:d.summary,artifacts:d.artifacts||[]}),_.success(w.green(`
|
|
2234
2239
|
\u2713 Build completed successfully!`));try{n.quiet||(_.info(w.magenta(`
|
|
2235
|
-
\u{1F4F1} Installation Hub:`)),_.info(w.dim(" - View & Install Build: ")+w.white.underline(`${at}/build/${t}`)))}catch{}return}else if(o!=="pending"){n.quiet||i.stop(`Build status: ${o}`);return}}try{let c=await I.get(`/builds/${e}/${t}/logs`),u=typeof c.data=="string"?
|
|
2240
|
+
\u{1F4F1} Installation Hub:`)),_.info(w.dim(" - View & Install Build: ")+w.white.underline(`${at}/build/${t}`)))}catch{}return}else if(o!=="pending"){n.quiet||i.stop(`Build status: ${o}`);return}}try{let c=await I.get(`/builds/${e}/${t}/logs`),u=typeof c.data=="string"?Al(c.data):c.data;if(u&&typeof u=="string"&&!n.quiet){let f=u.split(`
|
|
2236
2241
|
`);if(f.length>s){for(let p=s;p<f.length;p++)f[p].trim()&&console.log(w.dim(` ${f[p]}`));s=f.length}}}catch{}a=0}catch{a++,a>10&&(i.stop("Connection lost."),_.error(w.red(`
|
|
2237
|
-
\u2717 Lost connection to Dashboard API.`)),process.exit(1))}await new Promise(l=>setTimeout(l,3e3))}}import*as
|
|
2242
|
+
\u2717 Lost connection to Dashboard API.`)),process.exit(1))}await new Promise(l=>setTimeout(l,3e3))}}import*as Qr from"http";import*as Zl from"net";import{execFile as tg,execFileSync as Ke,execSync as Xr,spawn as Wl}from"child_process";import de from"chalk";import{log as V}from"@clack/prompts";import ng from"axios";import Y from"fs";import Ue from"os";import B from"path";var bt=7070,Zn=`http://127.0.0.1:${bt}`,In="com.radhya.mach.agent",En="Mach Agent",_n=`${In}.service`,rg=5e3,ig=3e3,qr=null,Jr=null,rt=()=>B.join(Ue.homedir(),m.configDir),Ql=()=>B.join(Ue.homedir(),"Library","LaunchAgents"),Zr=()=>B.join(Ql(),`${In}.plist`),ec=()=>B.join(Ue.homedir(),".config","systemd","user"),Do=()=>B.join(ec(),_n),Co=()=>B.join(rt(),"agent.cmd");function To(){return`gui/${process.getuid?.()||Number(Xr("id -u").toString().trim())}`}function tc(e){return e.replace(/&/g,"&").replace(/</g,"<").replace(/>/g,">").replace(/"/g,""").replace(/'/g,"'")}function Xn(e){return`<string>${tc(e)}</string>`}function ko(){let e=process.argv[1]?Y.realpathSync(process.argv[1]):"";if(!e||!Y.existsSync(e))throw new Error("Could not resolve the current Mach CLI entrypoint.");return[process.execPath,e,"agent","run"]}function No(){let e=nc(),t=process.platform==="win32"?[process.env.SystemRoot?B.join(process.env.SystemRoot,"System32"):void 0,process.env.SystemRoot]:["/opt/homebrew/bin","/usr/local/bin","/usr/bin","/bin","/usr/sbin","/sbin"],n={HOME:Ue.homedir(),PATH:[process.env.PATH,...e.flatMap(r=>[B.join(r,"platform-tools"),B.join(r,"emulator"),B.join(r,"cmdline-tools","latest","bin"),B.join(r,"tools","bin")]),...t].filter(Boolean).join(B.delimiter)};for(let r of["ANDROID_HOME","ANDROID_SDK_ROOT","JAVA_HOME","SHELL"])process.env[r]&&(n[r]=process.env[r]);return n}function nc(){let e=[process.env.ANDROID_HOME,process.env.ANDROID_SDK_ROOT];if(process.platform==="darwin")e.push(B.join(Ue.homedir(),"Library","Android","sdk"));else if(process.platform==="linux")e.push(B.join(Ue.homedir(),"Android","Sdk"),B.join(Ue.homedir(),"Android","sdk"),"/opt/android-sdk","/usr/lib/android-sdk");else if(process.platform==="win32"){let t=process.env.LOCALAPPDATA,n=process.env.USERPROFILE||Ue.homedir();e.push(t?B.join(t,"Android","Sdk"):void 0,B.join(n,"AppData","Local","Android","Sdk"))}return Array.from(new Set(e.filter(t=>!!t)))}function og(e){return process.platform==="win32"&&!e.toLowerCase().endsWith(".exe")?`${e}.exe`:e}function rc(e,t){let n=og(e);for(let r of nc()){let i=B.join(r,t,n);if(Y.existsSync(i))return i}return n}function ic(){return rc("adb","platform-tools")}function oc(){return rc("emulator","emulator")}function Oo(e){return`"${e.replace(/\\/g,"\\\\").replace(/"/g,'\\"').replace(/%/g,"%%")}"`}function sg(){if(process.platform!=="linux")throw new Error("Linux service install requires Linux.");Y.mkdirSync(rt(),{recursive:!0}),Y.mkdirSync(ec(),{recursive:!0});let e=ko(),t=No(),n=Object.entries(t).map(([i,o])=>`Environment=${Oo(`${i}=${o}`)}`).join(`
|
|
2238
2243
|
`),r=`[Unit]
|
|
2239
2244
|
Description=Mach local device agent
|
|
2240
2245
|
After=default.target
|
|
@@ -2251,12 +2256,12 @@ StandardError=append:%h/${m.configDir}/agent.error.log
|
|
|
2251
2256
|
|
|
2252
2257
|
[Install]
|
|
2253
2258
|
WantedBy=default.target
|
|
2254
|
-
`;return Y.writeFileSync(Do(),r),Do()}function Nt(e,t={}){try{return
|
|
2259
|
+
`;return Y.writeFileSync(Do(),r),Do()}function Nt(e,t={}){try{return Ke("systemctl",["--user",...e],{stdio:t.ignoreError?"ignore":"pipe"}),!0}catch(n){if(t.ignoreError)return!1;throw n}}function ag(){if(process.platform!=="win32")throw new Error("Windows agent script requires Windows.");Y.mkdirSync(rt(),{recursive:!0});let e=No(),[t,n,...r]=ko(),i=B.join(rt(),"agent.log"),o=B.join(rt(),"agent.error.log"),s=Object.entries(e).map(([d,c])=>`set "${d}=${c}"`).join(`\r
|
|
2255
2260
|
`),a=r.map(d=>`"${d.replace(/"/g,'\\"')}"`).join(" "),l=`@echo off\r
|
|
2256
2261
|
${s}\r
|
|
2257
2262
|
cd /d "${Ue.homedir()}"\r
|
|
2258
2263
|
"${t}" "${n}" ${a} >> "${i}" 2>> "${o}"\r
|
|
2259
|
-
`;return Y.writeFileSync(
|
|
2264
|
+
`;return Y.writeFileSync(Co(),l),Co()}function Qn(e,t={}){try{return Ke("schtasks.exe",e,{stdio:t.ignoreError?"ignore":"pipe"}),!0}catch(n){if(t.ignoreError)return!1;throw n}}function lg(){if(process.platform!=="darwin")throw new Error("Background agent install currently supports macOS only.");Y.mkdirSync(rt(),{recursive:!0}),Y.mkdirSync(Ql(),{recursive:!0});let e=ko(),t=No(),n=B.join(rt(),"agent.log"),r=B.join(rt(),"agent.error.log"),i=Object.entries(t).map(([a,l])=>` <key>${tc(a)}</key>
|
|
2260
2265
|
${Xn(l)}`).join(`
|
|
2261
2266
|
`),o=e.map(a=>` ${Xn(a)}`).join(`
|
|
2262
2267
|
`),s=`<?xml version="1.0" encoding="UTF-8"?>
|
|
@@ -2264,7 +2269,7 @@ cd /d "${Ue.homedir()}"\r
|
|
|
2264
2269
|
<plist version="1.0">
|
|
2265
2270
|
<dict>
|
|
2266
2271
|
<key>Label</key>
|
|
2267
|
-
${Xn(
|
|
2272
|
+
${Xn(In)}
|
|
2268
2273
|
<key>ProgramArguments</key>
|
|
2269
2274
|
<array>
|
|
2270
2275
|
${o}
|
|
@@ -2281,24 +2286,24 @@ ${i}
|
|
|
2281
2286
|
${Xn(r)}
|
|
2282
2287
|
</dict>
|
|
2283
2288
|
</plist>
|
|
2284
|
-
`;return Y.writeFileSync(
|
|
2285
|
-
`).forEach(n=>{if(n.includes("List of devices")||!n.trim())return;let r=n.split(/\s+/);if(r.length<2||r[1]!=="device")return;let i=r[0],o=n.match(/model:([^\s]+)/);e.push({id:i,platform:"android",type:i.startsWith("emulator-")?"emulator":"physical",name:o?o[1].replace(/_/g," "):i,status:"online",details:n.trim()})})}catch{}try{let n=(await Jt(
|
|
2286
|
-
`).filter(i=>!!i.trim()),r=e.some(i=>i.platform==="android"&&i.id.startsWith("emulator-"));n.forEach(i=>{r||e.push({id:i,platform:"android",type:"emulator",name:i.replace(/_/g," "),status:"offline",details:`Android Virtual Device: ${i}`})})}catch{}return e}async function nc(){if(process.platform!=="darwin")return[];try{let e=await Jt("/usr/bin/xcrun",["simctl","list","devices","--json"]),t=JSON.parse(e),n=[];return Object.entries(t.devices||{}).forEach(([r,i])=>{i.forEach(o=>{o.isAvailable&&n.push({id:o.udid,platform:"ios",type:"simulator",name:o.name,status:o.state?.toLowerCase()==="booted"?"online":"offline",runtime:r,details:`${o.name} (${r})`})})}),n}catch{return[]}}async function tg(){if(process.platform!=="darwin")return[];try{let e=await Jt("/usr/bin/xcrun",["devicectl","list","devices","--json-output","-"]);return(JSON.parse(e).result?.devices||[]).filter(n=>{let r=n.connectionProperties?.transportType;return r==="wired"||r==="localNetwork"}).map(n=>{let r=n.connectionProperties?.transportType,i=n.deviceProperties?.name||"iPhone";return{id:n.identifier,platform:"ios",type:"physical",name:i,status:"online",details:`${i} (${n.model?.name||n.hardwareModel||""}) - ${r}`}})}catch{return[]}}function ng(e){return e.match(/Provisioning UDID\s*:\s*([0-9A-F-]{16,})/i)?.[1]?.trim()||null}function rg(e,t){return e.toUpperCase().includes(t.trim().toUpperCase())}async function ig(){if(process.platform!=="darwin")return!1;if(process.arch==="arm64")return!0;try{return(await Jt("/usr/sbin/sysctl",["-in","sysctl.proc_translated"])).trim()==="1"}catch{return!1}}async function rc(){if(!await ig())return[];try{let[e,t]=await Promise.all([Jt("/usr/sbin/system_profiler",["SPHardwareDataType"]),Jt("/usr/sbin/scutil",["--get","ComputerName"]).catch(()=>Ue.hostname())]),n=ng(e);if(!n)return[];let r=t.trim()||"This Mac";return[{id:n,platform:"ios",type:"mac",name:r,status:"online",details:`${r} (Apple silicon Mac \xB7 Provisioning UDID available)`}]}catch{return[]}}async function og(e){let t=await nc(),n=t.find(i=>i.id===e);if(n)return n;let r=t.filter(i=>i.status==="online");return r.length===1?r[0]:null}async function sg(){let[e,t,n,r]=await Promise.all([eg(),nc(),tg(),rc()]);return[...e,...t,...n,...r]}async function ag(){let e=Date.now();return Yr&&e-Yr.updatedAt<Fm?Yr.targets:(qr||(qr=sg().then(t=>(Yr={targets:t,updatedAt:Date.now()},t)).finally(()=>{qr=null})),qr)}async function Bl(e){let t=[];for await(let n of e)t.push(Buffer.isBuffer(n)?n:Buffer.from(n));return t.length===0?{}:JSON.parse(Buffer.concat(t).toString("utf-8"))}async function lg(e,t){let n=await Lm({method:"GET",url:e,responseType:"stream",timeout:12e4}),r=Y.createWriteStream(t);n.data.pipe(r),await new Promise((i,o)=>{r.on("finish",i),r.on("error",o)})}function Hl(e,t){let n=e?.stderr?.toString?.().trim();if(n)return n;let r=e?.stdout?.toString?.().trim();return r||e?.message||t}function cg(e,t){return We("/usr/libexec/PlistBuddy",["-c",`Print :${t}`,e],{encoding:"utf-8"}).trim()}function ic(e){let t=B.join(e,"Info.plist");if(!Y.existsSync(t))throw new Error(`Could not validate iOS app executable: ${t} not found.`);let n=cg(t,"CFBundleExecutable"),r=B.join(e,n);if(!Y.existsSync(r))throw new Error(`Could not validate iOS app executable: ${r} not found.`);return r}function dg(e,t){let n=ic(e),r="",i="";try{r=We("lipo",["-info",n],{encoding:"utf-8"}).trim()}catch(a){throw new Error(`Could not inspect the IPA architecture: ${a.message}`)}if(!/\barm64\b/.test(r))throw new Error("This iOS IPA does not contain the arm64 architecture required by an Apple-silicon Mac.");try{i=We("/usr/bin/xcrun",["vtool","-show-build",n],{encoding:"utf-8"}).trim()}catch(a){throw new Error(`Could not inspect the IPA platform: ${a.message}`)}if(!/\bplatform\s+IOS\b/i.test(i))throw new Error("This package is not an iOS device IPA that can run on an Apple-silicon Mac.");let o=B.join(e,"embedded.mobileprovision");if(!Y.existsSync(o))throw new Error("This IPA has no embedded provisioning profile, so Mach cannot verify your Mac is allowed to install it.");let s="";try{s=We("/usr/bin/security",["cms","-D","-i",o],{encoding:"utf-8"})}catch(a){throw new Error(`Could not read the IPA provisioning profile: ${a.message}`)}if(!rg(s,t))throw new Error(`This IPA is not signed for this Mac. Add its Provisioning UDID (${t}) to your Apple Developer devices, regenerate the Development or Ad Hoc profile, and rebuild.`)}function ug(){return process.arch==="arm64"?"arm64":"x86_64"}function pg(e){return Y.existsSync(e)?Y.readdirSync(e).map(t=>B.join(e,t)).filter(t=>t.endsWith(".app")&&Y.statSync(t).isDirectory()):[]}function Gl(e,t){let n=pg(e);if(n.length===1)return n[0];if(n.length>1)throw new Error(`Multiple .app bundles found in ${t}: ${n.map(r=>B.basename(r)).join(", ")}. Mach cannot safely choose which app to install.`);return""}function fg(e){let t=ic(e),n=ug(),r="",i="";try{r=We("lipo",["-info",t],{encoding:"utf-8"}).trim()}catch(o){throw new Error(`Could not inspect iOS simulator app architecture for ${B.basename(e)}: ${o.message}`)}if(!new RegExp(`\\b${n}\\b`).test(r))throw new Error(`This iOS simulator artifact cannot be installed because ${B.basename(e)} does not include the ${n} simulator architecture. lipo output: ${r}. Rebuild the app with the latest Mach CLI and make sure the profile is a simulator build.`);try{i=We("/usr/bin/xcrun",["vtool","-show-build",t],{encoding:"utf-8"}).trim()}catch(o){throw new Error(`Could not inspect iOS simulator app platform for ${B.basename(e)}: ${o.message}`)}if(!/\bplatform\s+IOSSIMULATOR\b/i.test(i))throw new Error(`This iOS simulator artifact cannot be installed because ${B.basename(e)} was built for the wrong Apple platform. A simulator artifact must contain platform IOSSIMULATOR. vtool output: ${i}. Rebuild the app with the latest Mach CLI.`)}async function mg(e,t,n,r){let i=n||(t.toLowerCase().includes(".apk")?"android":"ios"),o=t.toLowerCase().includes(".ipa"),s=Y.mkdtempSync(B.join(Ue.tmpdir(),`${bt}-install-`)),a=B.join(s,i==="android"?"install.apk":o?"install.ipa":"install.zip");try{if(await lg(t,a),i==="android"){We(Jl(),["-s",e,"install","-r",a],{stdio:"pipe"});return}if(process.platform!=="darwin")throw new Error("iOS local install requires macOS.");Jr(`unzip -o ${JSON.stringify(a)} -d ${JSON.stringify(s)}`,{stdio:"pipe"});let l=B.join(s,"Payload"),d=Y.existsSync(l),c=o||d,u="";if(c?u=Gl(l,"Payload"):u=Gl(s,"the simulator artifact"),!u)throw new Error(`No .app bundle found inside the ${o?"IPA":"archive"}.`);if(r==="mac"){if(!o)throw new Error("An Apple-silicon Mac can install only a signed iOS IPA from Install Hub.");let h=(await rc()).find(b=>b.id===e);if(!h)throw new Error("This Apple-silicon Mac is no longer available. Refresh Install Hub and try again.");dg(u,h.id);let g=B.join(Ue.homedir(),"Downloads","Mach");Y.mkdirSync(g,{recursive:!0});let y=B.join(g,`mach-ios-${Date.now()}.ipa`);return Y.copyFileSync(a,y),We("open",[y],{stdio:"pipe"}),`Opened the signed IPA for installation on ${h.name}.`}let f=c?null:await og(e);if(f){try{fg(u),We("/usr/bin/xcrun",["simctl","install",f.id,u],{stdio:"pipe"})}catch(p){throw new Error(Hl(p,"iOS Simulator install failed."))}return}if(!c)throw new Error("Selected iOS Simulator was not found. Refresh Install Hub devices or boot one simulator and try again.");try{Jr(`/usr/bin/xcrun devicectl device install app --device ${JSON.stringify(e)} ${JSON.stringify(u)}`,{stdio:"pipe"})}catch(p){throw new Error(Hl(p,"iOS device install failed."))}}finally{Y.rmSync(s,{recursive:!0,force:!0})}}function gg(e,t){if(!e)throw new Error("Device id is required.");if(t==="ios"){if(process.platform!=="darwin")throw new Error("iOS Simulator launch requires macOS.");return Jr(`/usr/bin/xcrun simctl boot ${JSON.stringify(e)}`,{stdio:"pipe"}),Fl("open",["-a","Simulator"],{detached:!0,stdio:"ignore"}).unref(),"Simulator booting..."}if(t==="android")return Fl(Xl(),["-avd",e],{detached:!0,stdio:"ignore",windowsHide:!0}).unref(),"Emulator booting in background...";throw new Error("Invalid platform.")}async function hg(){process.platform!=="darwin"&&V.warn("Running on non-macOS \u2014 iOS discovery unavailable, Android only.");let e=Zr.createServer((r,i)=>{if(i.setHeader("Access-Control-Allow-Origin","*"),i.setHeader("Access-Control-Allow-Methods","GET, POST, OPTIONS"),i.setHeader("Access-Control-Allow-Headers","Content-Type, Authorization"),r.method==="OPTIONS"){i.writeHead(204),i.end();return}let o=new URL(r.url||"/",`http://localhost:${bt}`);if(r.method==="GET"&&o.pathname==="/local/devices"){ag().then(s=>{i.writeHead(200,{"Content-Type":"application/json"}),i.end(JSON.stringify({status:"success",targets:s}))}).catch(s=>{i.writeHead(500,{"Content-Type":"application/json"}),i.end(JSON.stringify({status:"error",message:s.message}))});return}if(r.method==="GET"&&o.pathname==="/health"){i.writeHead(200,{"Content-Type":"application/json"}),i.end(JSON.stringify({status:"success",service:"mach-agent",port:bt,platform:process.platform}));return}if(r.method==="POST"&&o.pathname==="/install-local"){t(r,i);return}if(r.method==="POST"&&o.pathname==="/local/boot"){n(r,i);return}i.writeHead(404),i.end()}),t=async(r,i)=>{try{let{deviceId:o,artifactUrl:s,platform:a,deviceType:l}=await Bl(r);if(!o||!s){i.writeHead(400,{"Content-Type":"application/json"}),i.end(JSON.stringify({status:"error",message:"deviceId and artifactUrl are required"}));return}let d=await mg(o,s,a,l);i.writeHead(200,{"Content-Type":"application/json"}),i.end(JSON.stringify({status:"success",message:d||`Installed on ${o}`}))}catch(o){i.writeHead(500,{"Content-Type":"application/json"}),i.end(JSON.stringify({status:"error",message:o.message||"Local install failed"}))}},n=async(r,i)=>{try{let{id:o,platform:s}=await Bl(r),a=gg(o,s);i.writeHead(200,{"Content-Type":"application/json"}),i.end(JSON.stringify({status:"success",message:a}))}catch(o){i.writeHead(500,{"Content-Type":"application/json"}),i.end(JSON.stringify({status:"error",message:o.message||"Local device launch failed"}))}};e.listen(bt,"127.0.0.1",()=>{V.success(de.green(`Local device agent running on http://localhost:${bt}`)),V.info(de.dim("Keep this running while using the Install Hub on the dashboard.")),V.info(de.dim("Press Ctrl+C to stop."))}),e.on("error",r=>{r.code==="EADDRINUSE"?V.error(`Port ${bt} is already in use \u2014 agent may already be running.`):V.error(`Agent error: ${r.message}`),process.exit(1)}),await new Promise(()=>{})}async function oc(e="start"){let t=String(e||"start").toLowerCase();if(t==="start"||t==="run"){await hg();return}if(t==="install"){await Ul();return}if(t==="status"){await Qm();return}if(t==="stop"){await jl();return}if(t==="uninstall"){await Zm();return}if(t==="restart"){await jl(),await Ul();return}V.error(`Unknown agent action: ${e}`),V.info(de.dim(`Use: ${m.nameLower} agent start | install | status | restart | stop | uninstall`)),process.exit(1)}import{text as bg,password as Ag,spinner as Sg,isCancel as lc}from"@clack/prompts";import Fo from"chalk";import er from"fs";import sc from"path";import yg from"os";var xo=sc.join(yg.homedir(),m.configDir),Lo=sc.join(xo,"config.json");function Mo(){if(!er.existsSync(Lo))return{};try{return JSON.parse(er.readFileSync(Lo,"utf-8"))}catch{return{}}}function ac(e){er.existsSync(xo)||er.mkdirSync(xo,{recursive:!0});let n={...Mo(),...e};er.writeFileSync(Lo,JSON.stringify(n,null,2))}async function cc(){let e=Mo(),t=await bg({message:"Enter your email:",placeholder:"user@example.com",initialValue:e.lastLoginEmail,validate(i){if(i.length===0)return"Email is required!"}});if(lc(t))return;let n=await Ag({message:"Enter your password:",validate(i){if(i.length===0)return"Password is required!"}});if(lc(n))return;let r=Sg();r.start("Authenticating...");try{let o=await(await fetch(`${wt}/login`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({username:t,password:n})})).json();o.status==="success"&&o.user.token?(As({id:o.user.id,email:t,token:o.user.token,refreshToken:o.user.refreshToken}),ac({lastLoginEmail:t}),r.stop(Fo.green("Login successful!"))):r.stop(Fo.red("Login failed: "+(o.message||"Unknown error")))}catch(i){r.stop(Fo.red("Network error: "+i.message))}}import{log as Qr,outro as Eg}from"@clack/prompts";import tr from"chalk";async function dc(){let e=Ss(),t=`${m.envPrefix}TOKEN`;e?Qr.success(tr.green(`Logged out. Removed saved credentials from ~/${m.configDir}/credentials.json.`)):Qr.warn(tr.yellow(`No saved ${m.name} credentials found.`)),process.env[t]&&(Qr.warn(tr.yellow(`${t} is still set in this shell. Commands will continue to authenticate with that token until you unset it.`)),Qr.info(tr.dim(`Run: unset ${t}`))),Eg(tr.blue("---"))}import{outro as Ig,select as _g,spinner as wg,isCancel as vg}from"@clack/prompts";import ei from"chalk";import Uo from"fs";import Rg from"path";var uc=e=>e==="1234567890"||e==="ABC123DEFG"||e==="XXXXXXXXXX"?"":typeof e=="string"?e:"",$g=()=>process.versions.node.split(".")[0]||"24";async function pc(){if(!we()){console.log(ei.red(`You are not logged in. Run \`${m.nameLower} login\` first.`));return}let t=wg();t.start("Fetching projects...");try{let{data:n}=await I.get("/projects");if(t.stop("Projects loaded."),n.status!=="success"||!n.projects||n.projects.length===0){console.log(ei.yellow(`No projects found. Run \`${m.nameLower} init\` to create one.`));return}let r=n.projects.map(U=>({value:U.projectId,label:`${U.name} (${U.slug})`})),i=await _g({message:"Select a project to link:",options:r});if(vg(i))return;let o=Rg.join(process.cwd(),m.configFileName),s={};if(Uo.existsSync(o))try{s=JSON.parse(Uo.readFileSync(o,"utf-8"))}catch{}let a=n.projects.find(U=>U.projectId===i),l=s.appDirectory||Dr(process.cwd())||".",d=ce(s.framework);try{d||=Pr(process.cwd(),l)}catch{d||=Tn}let c=d||Tn,u=s.android?.package||$t("android",l),f=s.ios?.bundleIdentifier||$t("ios",l),p=s.android||{},h=c==="flutter"?Rt():{},g={development:{environment:"development",distribution:"development"},staging:{environment:"staging",distribution:"internal"},production:{environment:"production",distribution:"store"}},y=s.build||g,b=W({build:y},"store","production"),A=s.submit?.[b]||{},v=A.android||{},E=A.ios||{},L={...s,projectId:i,framework:c,appDirectory:l,name:a?.name,slug:a?.slug,...c==="flutter"?{flutter:{...s.flutter||{},...s.flutter?.sdkVersion||!h.flutter?{}:{sdkVersion:h.flutter}}}:{nodeVersion:s.nodeVersion||$g()},scheme:s.scheme||a?.slug?.toLowerCase()||"app",android:{...p,package:u||"",versionCode:p.versionCode||"auto"},ios:{...s.ios||{},bundleIdentifier:f||"",buildNumber:s.ios?.buildNumber||"auto"},build:y,submit:{...s.submit||{},[b]:{...A,android:{...v,track:v.track||"internal",releaseStatus:v.releaseStatus||"completed"},ios:{...E,ascAppId:uc(E.ascAppId),appleTeamId:uc(E.appleTeamId)}}}};Uo.writeFileSync(o,JSON.stringify(L,null,2)),Ig(ei.green(`Linked to project ${L.name} (${L.slug})`))}catch(n){t.stop(ei.red("Error fetching projects: "+n.message))}}import{outro as Og,text as nr,select as Dg,spinner as Pg,isCancel as In}from"@clack/prompts";import rr from"chalk";import Cg from"fs";import Tg from"path";import{randomUUID as kg}from"crypto";var Ng=()=>process.versions.node.split(".")[0]||"24";async function fc(){if(!we()){console.log(rr.red(`You are not logged in. Run \`${m.nameLower} login\` first.`));return}let t=await nr({message:"Project Name:",placeholder:"My Awesome App",validate(c){if(c.length===0)return"Name is required!"}});if(In(t))return;let n=await nr({message:"Project Slug (URL friendly):",placeholder:"my-awesome-app",validate(c){if(c.length===0)return"Slug is required!";if(!/^[a-z0-9-]+$/.test(c))return"Slug must be lowercase alphanumeric with dashes."}});if(In(n))return;let r=Dr(process.cwd()),i=await nr({message:"App Directory (relative to this project root):",initialValue:r||void 0,placeholder:".",validate(c){if(c.length===0)return"App directory is required!";try{ve(process.cwd(),c,{requireAppDirectory:!0})}catch(u){return u.message}}});if(In(i))return;let o=Pr(process.cwd(),i),s=await Dg({message:"Platform:",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"},...o==="flutter"?[]:[{value:"web",label:"Web"}],{value:"all",label:o==="flutter"?"Android & iOS":"All Platforms"}]});if(In(s))return;let a="";if(s==="android"||s==="all"){let c=$t("android",i);if(a=await nr({message:"Android Package Name:",initialValue:c||"",placeholder:"com.example.app",validate(u){if(u.length===0)return"Package name is required for Android!"}}),In(a))return}let l="";if(s==="ios"||s==="all"){let c=$t("ios",i);if(l=await nr({message:"iOS Bundle Identifier:",initialValue:c||"",placeholder:"com.example.app",validate(u){if(u.length===0)return"Bundle ID is required for iOS!"}}),In(l))return}let d=Pg();d.start("Creating project...");try{let c=kg(),f={projectId:c,name:t,slug:n,storageType:"managed",platforms:s==="all"?o==="flutter"?["android","ios"]:["android","ios","web"]:[s],framework:o,appDirectory:i},{data:p}=await I.post("/projects",f);if(p.status==="success"){d.stop(rr.green("Project created successfully!"));let h=Tg.join(process.cwd(),m.configFileName),g=o==="flutter"?Rt():{};Cg.writeFileSync(h,JSON.stringify({projectId:c,framework:o,appDirectory:i,name:t,slug:n,...o==="flutter"?g.flutter?{flutter:{sdkVersion:g.flutter}}:{}:{nodeVersion:Ng()},...a?{android:{package:a,versionCode:"auto"}}:{},...l?{ios:{bundleIdentifier:l,buildNumber:"auto"}}:{},build:{development:{environment:"development",distribution:"development"},staging:{environment:"staging",distribution:"internal"},production:{environment:"production",distribution:"store"}},submit:{production:{android:{track:"internal",releaseStatus:"completed"},ios:{ascAppId:"",appleTeamId:""}}}},null,2)),Og(rr.green(`Initialized project ${t} and linked locally!`))}else d.stop(rr.red("creation failed: "+p.message))}catch(c){d.stop(rr.red("Network error: "+c.message))}}import{spinner as jo,log as Ne}from"@clack/prompts";import ir from"chalk";import ti from"fs";import mc from"path";function Bo(e,t,n,r){let i=e?.response?.status,o=e?.response?.data?.message||e?.response?.data?.error,s=r?` ${r}`:"";return i===401?`Not logged in or token expired while trying to ${n}${s}. Run \`${m.nameLower} login\` and try again.`:i===403?[`Permission denied while trying to ${n}${s}.`,o?`API says: ${o}.`:void 0,`Current Mach account/token does not have access to project ${t}.`,`Run \`${m.nameLower} login\` with the correct account, or ask a project owner to grant access.`].filter(Boolean).join(" "):i===404?[`Project or environment endpoint was not found while trying to ${n}${s}.`,`Project ID: ${t}.`,o?`API says: ${o}.`:void 0].filter(Boolean).join(" "):i?`Failed to ${n}${s}: ${o||`API returned HTTP ${i}`}`:`Network error while trying to ${n}${s}: ${e?.message||"Unknown error"}`}function xg(e){let t=String(e??"");return t===""?'""':/^[A-Za-z0-9_./:@%+-]+$/.test(t)?t:JSON.stringify(t)}function Lg(e,t){return`${[`# Generated by ${m.nameLower} env pull --environment ${t}`,"# Do not commit this file.","",...Object.keys(e).sort((r,i)=>r.localeCompare(i)).map(r=>`${r}=${xg(e[r])}`)].join(`
|
|
2289
|
+
`;return Y.writeFileSync(Zr(),s),Zr()}function kt(e,t={}){try{return Ke("launchctl",e,{stdio:t.ignoreError?"ignore":"pipe"}),!0}catch(n){if(t.ignoreError)return!1;throw n}}function cg(e){return new Promise(t=>setTimeout(t,e))}function Jt(e,t,n=rg){return new Promise((r,i)=>{tg(e,t,{timeout:n,maxBuffer:10*1024*1024,windowsHide:!0},(o,s,a)=>{if(o){let l=a?.toString().trim();i(new Error(l||o.message));return}r(s?.toString()||"")})})}async function sc(){if(typeof fetch=="function"){let e=new AbortController,t=setTimeout(()=>e.abort(),3e3);try{return(await fetch(`${Zn}/health`,{signal:e.signal})).ok}catch{return!1}finally{clearTimeout(t)}}return new Promise(e=>{let t=!1,n=i=>{t||(t=!0,e(i))},r=Qr.get(`${Zn}/health`,i=>{i.resume(),n(i.statusCode===200)});r.setTimeout(3e3,()=>{r.destroy(),n(!1)}),r.on("error",()=>n(!1))})}async function dg(e=8e3){let t=Date.now()+e;for(;Date.now()<t;){if(await sc())return!0;await cg(250)}return!1}async function ac(){return new Promise(e=>{let t=!1,n=Zl.createConnection({host:"127.0.0.1",port:bt}),r=i=>{t||(t=!0,n.destroy(),e(i))};n.setTimeout(1e3),n.once("connect",()=>r(!0)),n.once("timeout",()=>r(!1)),n.once("error",()=>r(!1))})}async function xo(){if(await dg()){V.success(de.green("Mach agent installed and started."));return}if(await ac()){V.warn(`Mach agent service is installed, but port ${bt} is held by a process that is not answering /health.`),V.info(de.dim(`Run \`${m.nameLower} agent stop\`, close any foreground \`${m.nameLower} agent\` terminal, then run \`${m.nameLower} agent install\` again.`));return}V.warn(`Mach agent service is installed, but it did not start listening on ${Zn}.`)}async function ug(){let e=lg(),t=To();kt(["bootout",t,e],{ignoreError:!0}),kt(["bootstrap",t,e],{ignoreError:!0})||kt(["load","-w",e]),kt(["enable",`${t}/${In}`],{ignoreError:!0}),kt(["kickstart","-k",`${t}/${In}`],{ignoreError:!0}),await xo(),V.info(de.dim(`It will start automatically when you log in. Plist: ${e}`)),V.info(de.dim(`Logs: ${B.join(rt(),"agent.log")}`))}async function lc(){let e=Zr(),t=To();kt(["bootout",t,e],{ignoreError:!0})||kt(["unload","-w",e],{ignoreError:!0})?V.success(de.green("Mach agent service stopped.")):V.warn("Mach agent service was not loaded.")}async function pg(){await lc();let e=Zr();Y.existsSync(e)&&Y.unlinkSync(e),V.success(de.green("Mach agent service uninstalled."))}async function fg(){let e=sg();Nt(["daemon-reload"]),Nt(["enable","--now",_n]),await xo(),V.info(de.dim(`It will start automatically when you log in. Service: ${e}`)),V.info(de.dim(`Logs: ${B.join(rt(),"agent.log")}`))}async function mg(){Nt(["stop",_n],{ignoreError:!0})?V.success(de.green("Mach agent service stopped.")):V.warn("Mach agent service was not running.")}async function gg(){Nt(["disable","--now",_n],{ignoreError:!0}),Nt(["daemon-reload"],{ignoreError:!0});let e=Do();Y.existsSync(e)&&Y.unlinkSync(e),Nt(["daemon-reload"],{ignoreError:!0}),V.success(de.green("Mach agent service uninstalled."))}async function hg(){let e=ag();Qn(["/Create","/TN",En,"/SC","ONLOGON","/TR",`"${e}"`,"/RL","LIMITED","/F"]),Qn(["/Run","/TN",En],{ignoreError:!0}),await xo(),V.info(de.dim(`It will start automatically when you log in. Task: ${En}`)),V.info(de.dim(`Logs: ${B.join(rt(),"agent.log")}`))}async function cc(){Qn(["/End","/TN",En],{ignoreError:!0})?V.success(de.green("Mach agent task stopped.")):V.warn("Mach agent task was not running.")}async function yg(){await cc(),Qn(["/Delete","/TN",En,"/F"],{ignoreError:!0});let e=Co();Y.existsSync(e)&&Y.unlinkSync(e),V.success(de.green("Mach agent task uninstalled."))}async function Kl(){if(process.platform==="darwin")return ug();if(process.platform==="linux")return fg();if(process.platform==="win32")return hg();throw new Error(`Background agent install is not supported on ${process.platform}.`)}async function Yl(){if(process.platform==="darwin")return lc();if(process.platform==="linux")return mg();if(process.platform==="win32")return cc();V.warn(`Background agent service control is not supported on ${process.platform}.`)}async function bg(){if(process.platform==="darwin")return pg();if(process.platform==="linux")return gg();if(process.platform==="win32")return yg();V.warn(`Background agent uninstall is not supported on ${process.platform}.`)}async function Ag(){let e=await sc(),t=e?!0:await ac();if(e?V.success(de.green(`Mach agent is online at ${Zn}`)):t?V.warn(`Mach agent port is open, but /health did not respond. Run \`${m.nameLower} agent restart\` if the dashboard still shows offline.`):V.warn(`Mach agent is not responding at ${Zn}`),process.platform==="darwin"){let n=kt(["print",`${To()}/${In}`],{ignoreError:!0});V.info(de.dim(`Login service: ${n?"installed/loaded":"not loaded"}`))}else if(process.platform==="linux"){let n=Nt(["is-enabled",_n],{ignoreError:!0}),r=Nt(["is-active",_n],{ignoreError:!0});V.info(de.dim(`Login service: ${n?"enabled":"not enabled"} / ${r?"active":"inactive"}`))}else if(process.platform==="win32"){let n=Qn(["/Query","/TN",En],{ignoreError:!0});V.info(de.dim(`Login task: ${n?"installed":"not installed"}`))}}async function Sg(){let e=[];try{(await Jt(ic(),["devices","-l"])).split(`
|
|
2290
|
+
`).forEach(n=>{if(n.includes("List of devices")||!n.trim())return;let r=n.split(/\s+/);if(r.length<2||r[1]!=="device")return;let i=r[0],o=n.match(/model:([^\s]+)/);e.push({id:i,platform:"android",type:i.startsWith("emulator-")?"emulator":"physical",name:o?o[1].replace(/_/g," "):i,status:"online",details:n.trim()})})}catch{}try{let n=(await Jt(oc(),["-list-avds"])).split(`
|
|
2291
|
+
`).filter(i=>!!i.trim()),r=e.some(i=>i.platform==="android"&&i.id.startsWith("emulator-"));n.forEach(i=>{r||e.push({id:i,platform:"android",type:"emulator",name:i.replace(/_/g," "),status:"offline",details:`Android Virtual Device: ${i}`})})}catch{}return e}async function dc(){if(process.platform!=="darwin")return[];try{let e=await Jt("/usr/bin/xcrun",["simctl","list","devices","--json"]),t=JSON.parse(e),n=[];return Object.entries(t.devices||{}).forEach(([r,i])=>{i.forEach(o=>{o.isAvailable&&n.push({id:o.udid,platform:"ios",type:"simulator",name:o.name,status:o.state?.toLowerCase()==="booted"?"online":"offline",runtime:r,details:`${o.name} (${r})`})})}),n}catch{return[]}}async function Eg(){if(process.platform!=="darwin")return[];try{let e=await Jt("/usr/bin/xcrun",["devicectl","list","devices","--json-output","-"]);return(JSON.parse(e).result?.devices||[]).filter(n=>{let r=n.connectionProperties?.transportType;return r==="wired"||r==="localNetwork"}).map(n=>{let r=n.connectionProperties?.transportType,i=n.deviceProperties?.name||"iPhone";return{id:n.identifier,platform:"ios",type:"physical",name:i,status:"online",details:`${i} (${n.model?.name||n.hardwareModel||""}) - ${r}`}})}catch{return[]}}function Ig(e){return e.match(/Provisioning UDID\s*:\s*([0-9A-F-]{16,})/i)?.[1]?.trim()||null}function _g(e,t){return e.toUpperCase().includes(t.trim().toUpperCase())}async function wg(){if(process.platform!=="darwin")return!1;if(process.arch==="arm64")return!0;try{return(await Jt("/usr/sbin/sysctl",["-in","sysctl.proc_translated"])).trim()==="1"}catch{return!1}}async function uc(){if(!await wg())return[];try{let[e,t]=await Promise.all([Jt("/usr/sbin/system_profiler",["SPHardwareDataType"]),Jt("/usr/sbin/scutil",["--get","ComputerName"]).catch(()=>Ue.hostname())]),n=Ig(e);if(!n)return[];let r=t.trim()||"This Mac";return[{id:n,platform:"ios",type:"mac",name:r,status:"online",details:`${r} (Apple silicon Mac \xB7 Provisioning UDID available)`}]}catch{return[]}}async function vg(e){let t=await dc(),n=t.find(i=>i.id===e);if(n)return n;let r=t.filter(i=>i.status==="online");return r.length===1?r[0]:null}async function Rg(){let[e,t,n,r]=await Promise.all([Sg(),dc(),Eg(),uc()]);return[...e,...t,...n,...r]}async function $g(){let e=Date.now();return qr&&e-qr.updatedAt<ig?qr.targets:(Jr||(Jr=Rg().then(t=>(qr={targets:t,updatedAt:Date.now()},t)).finally(()=>{Jr=null})),Jr)}async function ql(e){let t=[];for await(let n of e)t.push(Buffer.isBuffer(n)?n:Buffer.from(n));return t.length===0?{}:JSON.parse(Buffer.concat(t).toString("utf-8"))}async function Pg(e,t){let n=await ng({method:"GET",url:e,responseType:"stream",timeout:12e4}),r=Y.createWriteStream(t);n.data.pipe(r),await new Promise((i,o)=>{r.on("finish",i),r.on("error",o)})}function Jl(e,t){let n=e?.stderr?.toString?.().trim();if(n)return n;let r=e?.stdout?.toString?.().trim();return r||e?.message||t}function Og(e,t){return Ke("/usr/libexec/PlistBuddy",["-c",`Print :${t}`,e],{encoding:"utf-8"}).trim()}function pc(e){let t=B.join(e,"Info.plist");if(!Y.existsSync(t))throw new Error(`Could not validate iOS app executable: ${t} not found.`);let n=Og(t,"CFBundleExecutable"),r=B.join(e,n);if(!Y.existsSync(r))throw new Error(`Could not validate iOS app executable: ${r} not found.`);return r}function Dg(e,t){let n=pc(e),r="",i="";try{r=Ke("lipo",["-info",n],{encoding:"utf-8"}).trim()}catch(a){throw new Error(`Could not inspect the IPA architecture: ${a.message}`)}if(!/\barm64\b/.test(r))throw new Error("This iOS IPA does not contain the arm64 architecture required by an Apple-silicon Mac.");try{i=Ke("/usr/bin/xcrun",["vtool","-show-build",n],{encoding:"utf-8"}).trim()}catch(a){throw new Error(`Could not inspect the IPA platform: ${a.message}`)}if(!/\bplatform\s+IOS\b/i.test(i))throw new Error("This package is not an iOS device IPA that can run on an Apple-silicon Mac.");let o=B.join(e,"embedded.mobileprovision");if(!Y.existsSync(o))throw new Error("This IPA has no embedded provisioning profile, so Mach cannot verify your Mac is allowed to install it.");let s="";try{s=Ke("/usr/bin/security",["cms","-D","-i",o],{encoding:"utf-8"})}catch(a){throw new Error(`Could not read the IPA provisioning profile: ${a.message}`)}if(!_g(s,t))throw new Error(`This IPA is not signed for this Mac. Add its Provisioning UDID (${t}) to your Apple Developer devices, regenerate the Development or Ad Hoc profile, and rebuild.`)}function Cg(){return process.arch==="arm64"?"arm64":"x86_64"}function Tg(e){return Y.existsSync(e)?Y.readdirSync(e).map(t=>B.join(e,t)).filter(t=>t.endsWith(".app")&&Y.statSync(t).isDirectory()):[]}function Xl(e,t){let n=Tg(e);if(n.length===1)return n[0];if(n.length>1)throw new Error(`Multiple .app bundles found in ${t}: ${n.map(r=>B.basename(r)).join(", ")}. Mach cannot safely choose which app to install.`);return""}function kg(e){let t=pc(e),n=Cg(),r="",i="";try{r=Ke("lipo",["-info",t],{encoding:"utf-8"}).trim()}catch(o){throw new Error(`Could not inspect iOS simulator app architecture for ${B.basename(e)}: ${o.message}`)}if(!new RegExp(`\\b${n}\\b`).test(r))throw new Error(`This iOS simulator artifact cannot be installed because ${B.basename(e)} does not include the ${n} simulator architecture. lipo output: ${r}. Rebuild the app with the latest Mach CLI and make sure the profile is a simulator build.`);try{i=Ke("/usr/bin/xcrun",["vtool","-show-build",t],{encoding:"utf-8"}).trim()}catch(o){throw new Error(`Could not inspect iOS simulator app platform for ${B.basename(e)}: ${o.message}`)}if(!/\bplatform\s+IOSSIMULATOR\b/i.test(i))throw new Error(`This iOS simulator artifact cannot be installed because ${B.basename(e)} was built for the wrong Apple platform. A simulator artifact must contain platform IOSSIMULATOR. vtool output: ${i}. Rebuild the app with the latest Mach CLI.`)}async function Ng(e,t,n,r){let i=n||(t.toLowerCase().includes(".apk")?"android":"ios"),o=t.toLowerCase().includes(".ipa"),s=Y.mkdtempSync(B.join(Ue.tmpdir(),`${bt}-install-`)),a=B.join(s,i==="android"?"install.apk":o?"install.ipa":"install.zip");try{if(await Pg(t,a),i==="android"){Ke(ic(),["-s",e,"install","-r",a],{stdio:"pipe"});return}if(process.platform!=="darwin")throw new Error("iOS local install requires macOS.");Xr(`unzip -o ${JSON.stringify(a)} -d ${JSON.stringify(s)}`,{stdio:"pipe"});let l=B.join(s,"Payload"),d=Y.existsSync(l),c=o||d,u="";if(c?u=Xl(l,"Payload"):u=Xl(s,"the simulator artifact"),!u)throw new Error(`No .app bundle found inside the ${o?"IPA":"archive"}.`);if(r==="mac"){if(!o)throw new Error("An Apple-silicon Mac can install only a signed iOS IPA from Install Hub.");let h=(await uc()).find(b=>b.id===e);if(!h)throw new Error("This Apple-silicon Mac is no longer available. Refresh Install Hub and try again.");Dg(u,h.id);let g=B.join(Ue.homedir(),"Downloads","Mach");Y.mkdirSync(g,{recursive:!0});let y=B.join(g,`mach-ios-${Date.now()}.ipa`);return Y.copyFileSync(a,y),Ke("open",[y],{stdio:"pipe"}),`Opened the signed IPA for installation on ${h.name}.`}let f=c?null:await vg(e);if(f){try{kg(u),Ke("/usr/bin/xcrun",["simctl","install",f.id,u],{stdio:"pipe"})}catch(p){throw new Error(Jl(p,"iOS Simulator install failed."))}return}if(!c)throw new Error("Selected iOS Simulator was not found. Refresh Install Hub devices or boot one simulator and try again.");try{Xr(`/usr/bin/xcrun devicectl device install app --device ${JSON.stringify(e)} ${JSON.stringify(u)}`,{stdio:"pipe"})}catch(p){throw new Error(Jl(p,"iOS device install failed."))}}finally{Y.rmSync(s,{recursive:!0,force:!0})}}function xg(e,t){if(!e)throw new Error("Device id is required.");if(t==="ios"){if(process.platform!=="darwin")throw new Error("iOS Simulator launch requires macOS.");return Xr(`/usr/bin/xcrun simctl boot ${JSON.stringify(e)}`,{stdio:"pipe"}),Wl("open",["-a","Simulator"],{detached:!0,stdio:"ignore"}).unref(),"Simulator booting..."}if(t==="android")return Wl(oc(),["-avd",e],{detached:!0,stdio:"ignore",windowsHide:!0}).unref(),"Emulator booting in background...";throw new Error("Invalid platform.")}async function Mg(){process.platform!=="darwin"&&V.warn("Running on non-macOS \u2014 iOS discovery unavailable, Android only.");let e=Qr.createServer((r,i)=>{if(i.setHeader("Access-Control-Allow-Origin","*"),i.setHeader("Access-Control-Allow-Methods","GET, POST, OPTIONS"),i.setHeader("Access-Control-Allow-Headers","Content-Type, Authorization"),r.method==="OPTIONS"){i.writeHead(204),i.end();return}let o=new URL(r.url||"/",`http://localhost:${bt}`);if(r.method==="GET"&&o.pathname==="/local/devices"){$g().then(s=>{i.writeHead(200,{"Content-Type":"application/json"}),i.end(JSON.stringify({status:"success",targets:s}))}).catch(s=>{i.writeHead(500,{"Content-Type":"application/json"}),i.end(JSON.stringify({status:"error",message:s.message}))});return}if(r.method==="GET"&&o.pathname==="/health"){i.writeHead(200,{"Content-Type":"application/json"}),i.end(JSON.stringify({status:"success",service:"mach-agent",port:bt,platform:process.platform}));return}if(r.method==="POST"&&o.pathname==="/install-local"){t(r,i);return}if(r.method==="POST"&&o.pathname==="/local/boot"){n(r,i);return}i.writeHead(404),i.end()}),t=async(r,i)=>{try{let{deviceId:o,artifactUrl:s,platform:a,deviceType:l}=await ql(r);if(!o||!s){i.writeHead(400,{"Content-Type":"application/json"}),i.end(JSON.stringify({status:"error",message:"deviceId and artifactUrl are required"}));return}let d=await Ng(o,s,a,l);i.writeHead(200,{"Content-Type":"application/json"}),i.end(JSON.stringify({status:"success",message:d||`Installed on ${o}`}))}catch(o){i.writeHead(500,{"Content-Type":"application/json"}),i.end(JSON.stringify({status:"error",message:o.message||"Local install failed"}))}},n=async(r,i)=>{try{let{id:o,platform:s}=await ql(r),a=xg(o,s);i.writeHead(200,{"Content-Type":"application/json"}),i.end(JSON.stringify({status:"success",message:a}))}catch(o){i.writeHead(500,{"Content-Type":"application/json"}),i.end(JSON.stringify({status:"error",message:o.message||"Local device launch failed"}))}};e.listen(bt,"127.0.0.1",()=>{V.success(de.green(`Local device agent running on http://localhost:${bt}`)),V.info(de.dim("Keep this running while using the Install Hub on the dashboard.")),V.info(de.dim("Press Ctrl+C to stop."))}),e.on("error",r=>{r.code==="EADDRINUSE"?V.error(`Port ${bt} is already in use \u2014 agent may already be running.`):V.error(`Agent error: ${r.message}`),process.exit(1)}),await new Promise(()=>{})}async function fc(e="start"){let t=String(e||"start").toLowerCase();if(t==="start"||t==="run"){await Mg();return}if(t==="install"){await Kl();return}if(t==="status"){await Ag();return}if(t==="stop"){await Yl();return}if(t==="uninstall"){await bg();return}if(t==="restart"){await Yl(),await Kl();return}V.error(`Unknown agent action: ${e}`),V.info(de.dim(`Use: ${m.nameLower} agent start | install | status | restart | stop | uninstall`)),process.exit(1)}import{text as Fg,password as Ug,spinner as jg,isCancel as hc}from"@clack/prompts";import Uo from"chalk";import er from"fs";import mc from"path";import Lg from"os";var Mo=mc.join(Lg.homedir(),m.configDir),Lo=mc.join(Mo,"config.json");function Fo(){if(!er.existsSync(Lo))return{};try{return JSON.parse(er.readFileSync(Lo,"utf-8"))}catch{return{}}}function gc(e){er.existsSync(Mo)||er.mkdirSync(Mo,{recursive:!0});let n={...Fo(),...e};er.writeFileSync(Lo,JSON.stringify(n,null,2))}async function yc(){let e=Fo(),t=await Fg({message:"Enter your email:",placeholder:"user@example.com",initialValue:e.lastLoginEmail,validate(i){if(i.length===0)return"Email is required!"}});if(hc(t))return;let n=await Ug({message:"Enter your password:",validate(i){if(i.length===0)return"Password is required!"}});if(hc(n))return;let r=jg();r.start("Authenticating...");try{let o=await(await fetch(`${wt}/login`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({username:t,password:n})})).json();o.status==="success"&&o.user.token?(Ss({id:o.user.id,email:t,token:o.user.token,refreshToken:o.user.refreshToken}),gc({lastLoginEmail:t}),r.stop(Uo.green("Login successful!"))):r.stop(Uo.red("Login failed: "+(o.message||"Unknown error")))}catch(i){r.stop(Uo.red("Network error: "+i.message))}}import{log as ei,outro as Bg}from"@clack/prompts";import tr from"chalk";async function bc(){let e=Es(),t=`${m.envPrefix}TOKEN`;e?ei.success(tr.green(`Logged out. Removed saved credentials from ~/${m.configDir}/credentials.json.`)):ei.warn(tr.yellow(`No saved ${m.name} credentials found.`)),process.env[t]&&(ei.warn(tr.yellow(`${t} is still set in this shell. Commands will continue to authenticate with that token until you unset it.`)),ei.info(tr.dim(`Run: unset ${t}`))),Bg(tr.blue("---"))}import{outro as Hg,select as Gg,spinner as Vg,isCancel as zg}from"@clack/prompts";import ti from"chalk";import jo from"fs";import Wg from"path";var Ac=e=>e==="1234567890"||e==="ABC123DEFG"||e==="XXXXXXXXXX"?"":typeof e=="string"?e:"",Kg=()=>process.versions.node.split(".")[0]||"24";async function Sc(){if(!we()){console.log(ti.red(`You are not logged in. Run \`${m.nameLower} login\` first.`));return}let t=Vg();t.start("Fetching projects...");try{let{data:n}=await I.get("/projects");if(t.stop("Projects loaded."),n.status!=="success"||!n.projects||n.projects.length===0){console.log(ti.yellow(`No projects found. Run \`${m.nameLower} init\` to create one.`));return}let r=n.projects.map(U=>({value:U.projectId,label:`${U.name} (${U.slug})`})),i=await Gg({message:"Select a project to link:",options:r});if(zg(i))return;let o=Wg.join(process.cwd(),m.configFileName),s={};if(jo.existsSync(o))try{s=JSON.parse(jo.readFileSync(o,"utf-8"))}catch{}let a=n.projects.find(U=>U.projectId===i),l=s.appDirectory||Or(process.cwd())||".",d=ce(s.framework);try{d||=Dr(process.cwd(),l)}catch{d||=kn}let c=d||kn,u=s.android?.package||$t("android",l),f=s.ios?.bundleIdentifier||$t("ios",l),p=s.android||{},h=c==="flutter"?Rt():{},g={development:{environment:"development",distribution:"development"},staging:{environment:"staging",distribution:"internal"},production:{environment:"production",distribution:"store"}},y=s.build||g,b=K({build:y},"store","production"),A=s.submit?.[b]||{},v=A.android||{},E=A.ios||{},L={...s,projectId:i,framework:c,appDirectory:l,name:a?.name,slug:a?.slug,...c==="flutter"?{flutter:{...s.flutter||{},...s.flutter?.sdkVersion||!h.flutter?{}:{sdkVersion:h.flutter}}}:{nodeVersion:s.nodeVersion||Kg()},scheme:s.scheme||a?.slug?.toLowerCase()||"app",android:{...p,package:u||"",versionCode:p.versionCode||"auto"},ios:{...s.ios||{},bundleIdentifier:f||"",buildNumber:s.ios?.buildNumber||"auto"},build:y,submit:{...s.submit||{},[b]:{...A,android:{...v,track:v.track||"internal",releaseStatus:v.releaseStatus||"completed"},ios:{...E,ascAppId:Ac(E.ascAppId),appleTeamId:Ac(E.appleTeamId)}}}};jo.writeFileSync(o,JSON.stringify(L,null,2)),Hg(ti.green(`Linked to project ${L.name} (${L.slug})`))}catch(n){t.stop(ti.red("Error fetching projects: "+n.message))}}import{outro as Yg,text as nr,select as qg,spinner as Jg,isCancel as wn}from"@clack/prompts";import rr from"chalk";import Xg from"fs";import Zg from"path";import{randomUUID as Qg}from"crypto";var eh=()=>process.versions.node.split(".")[0]||"24";async function Ec(){if(!we()){console.log(rr.red(`You are not logged in. Run \`${m.nameLower} login\` first.`));return}let t=await nr({message:"Project Name:",placeholder:"My Awesome App",validate(c){if(c.length===0)return"Name is required!"}});if(wn(t))return;let n=await nr({message:"Project Slug (URL friendly):",placeholder:"my-awesome-app",validate(c){if(c.length===0)return"Slug is required!";if(!/^[a-z0-9-]+$/.test(c))return"Slug must be lowercase alphanumeric with dashes."}});if(wn(n))return;let r=Or(process.cwd()),i=await nr({message:"App Directory (relative to this project root):",initialValue:r||void 0,placeholder:".",validate(c){if(c.length===0)return"App directory is required!";try{ve(process.cwd(),c,{requireAppDirectory:!0})}catch(u){return u.message}}});if(wn(i))return;let o=Dr(process.cwd(),i),s=await qg({message:"Platform:",options:[{value:"android",label:"Android"},{value:"ios",label:"iOS"},...o==="flutter"?[]:[{value:"web",label:"Web"}],{value:"all",label:o==="flutter"?"Android & iOS":"All Platforms"}]});if(wn(s))return;let a="";if(s==="android"||s==="all"){let c=$t("android",i);if(a=await nr({message:"Android Package Name:",initialValue:c||"",placeholder:"com.example.app",validate(u){if(u.length===0)return"Package name is required for Android!"}}),wn(a))return}let l="";if(s==="ios"||s==="all"){let c=$t("ios",i);if(l=await nr({message:"iOS Bundle Identifier:",initialValue:c||"",placeholder:"com.example.app",validate(u){if(u.length===0)return"Bundle ID is required for iOS!"}}),wn(l))return}let d=Jg();d.start("Creating project...");try{let c=Qg(),f={projectId:c,name:t,slug:n,storageType:"managed",platforms:s==="all"?o==="flutter"?["android","ios"]:["android","ios","web"]:[s],framework:o,appDirectory:i},{data:p}=await I.post("/projects",f);if(p.status==="success"){d.stop(rr.green("Project created successfully!"));let h=Zg.join(process.cwd(),m.configFileName),g=o==="flutter"?Rt():{};Xg.writeFileSync(h,JSON.stringify({projectId:c,framework:o,appDirectory:i,name:t,slug:n,...o==="flutter"?g.flutter?{flutter:{sdkVersion:g.flutter}}:{}:{nodeVersion:eh()},...a?{android:{package:a,versionCode:"auto"}}:{},...l?{ios:{bundleIdentifier:l,buildNumber:"auto"}}:{},build:{development:{environment:"development",distribution:"development"},staging:{environment:"staging",distribution:"internal"},production:{environment:"production",distribution:"store"}},submit:{production:{android:{track:"internal",releaseStatus:"completed"},ios:{ascAppId:"",appleTeamId:""}}}},null,2)),Yg(rr.green(`Initialized project ${t} and linked locally!`))}else d.stop(rr.red("creation failed: "+p.message))}catch(c){d.stop(rr.red("Network error: "+c.message))}}import{spinner as Bo,log as Ne}from"@clack/prompts";import ir from"chalk";import ni from"fs";import Ic from"path";function Ho(e,t,n,r){let i=e?.response?.status,o=e?.response?.data?.message||e?.response?.data?.error,s=r?` ${r}`:"";return i===401?`Not logged in or token expired while trying to ${n}${s}. Run \`${m.nameLower} login\` and try again.`:i===403?[`Permission denied while trying to ${n}${s}.`,o?`API says: ${o}.`:void 0,`Current Mach account/token does not have access to project ${t}.`,`Run \`${m.nameLower} login\` with the correct account, or ask a project owner to grant access.`].filter(Boolean).join(" "):i===404?[`Project or environment endpoint was not found while trying to ${n}${s}.`,`Project ID: ${t}.`,o?`API says: ${o}.`:void 0].filter(Boolean).join(" "):i?`Failed to ${n}${s}: ${o||`API returned HTTP ${i}`}`:`Network error while trying to ${n}${s}: ${e?.message||"Unknown error"}`}function th(e){let t=String(e??"");return t===""?'""':/^[A-Za-z0-9_./:@%+-]+$/.test(t)?t:JSON.stringify(t)}function nh(e,t){return`${[`# Generated by ${m.nameLower} env pull --environment ${t}`,"# Do not commit this file.","",...Object.keys(e).sort((r,i)=>r.localeCompare(i)).map(r=>`${r}=${th(e[r])}`)].join(`
|
|
2287
2292
|
`)}
|
|
2288
|
-
`}async function
|
|
2289
|
-
`)}function
|
|
2293
|
+
`}async function _c(e,t,n={}){let r=we();if(!r){Ne.error(`You are not logged in. Run \`${m.nameLower} login\` first.`);return}let i=Ic.join(process.cwd(),m.configFileName);if(!ni.existsSync(i)){Ne.error(`No ${m.configFileName} found. Run \`${m.nameLower} init\` or \`${m.nameLower} link\` first.`);return}let o;try{o=JSON.parse(ni.readFileSync(i,"utf-8"))}catch{Ne.error(`Failed to parse ${m.configFileName}`);return}let{projectId:s}=o;if(!s){Ne.error(`${m.configFileName} is missing projectId.`);return}e==="set"?await rh(s,t,r):e==="list"?await ih(s,r):e==="pull"||e==="download"||e==="export"?await oh(s,n):Ne.error(`Unknown env action: ${e}. Use 'set', 'list', or 'pull'.`)}async function rh(e,t,n){if(t.length===0){Ne.error(`Usage: ${m.nameLower} env set KEY=VALUE [KEY2=VALUE2 ...]`);return}let r=Bo();r.start("Setting environment variables...");let i=0,o=0;for(let s of t){let[a,...l]=s.split("="),d=l.join("=");if(!a||d===void 0){Ne.warn(`Invalid format for argument: ${s}. Expected KEY=VALUE.`),o++;continue}try{let c={key:a.trim(),value:d,type:"env",environment:"global",visibility:"secret"},{data:u}=await I.post(`/projects/${e}/secrets`,c);u.status==="success"?i++:(Ne.error(`Failed to set ${a}: ${u.message}`),o++)}catch(c){Ne.error(Ho(c,e,"set",a)),o++}}r.stop(`Set ${i} variable(s). ${o>0?`${o} failed.`:""}`)}async function ih(e,t){let n=Bo();n.start("Fetching environment variables...");try{let{data:r}=await I.get(`/projects/${e}/secrets`);if(r.status==="success"){n.stop("Fetched variables.");let i=r.secrets||[];i.length===0?Ne.info("No environment variables found for this project."):(Ne.info(ir.bold("Environment Variables (Global & Scoped):")),i.forEach(o=>{let s=o.visibility==="plain"?o.value:"********";console.log(` ${ir.cyan(o.key)} = ${s} ${ir.gray(`[${o.environment}]`)}`)}))}else n.stop(ir.red(`Failed to fetch variables: ${r.message}`))}catch(r){n.stop("Failed to fetch variables."),Ne.error(Ho(r,e,"list"))}}async function oh(e,t){let n=(t.environment||"development").trim(),r=t.out||".env.local",i=Ic.resolve(process.cwd(),r);if(ni.existsSync(i)&&!t.overwrite){Ne.error(`${r} already exists. Re-run with \`--overwrite\` to replace it.`);return}let o=Bo();o.start(`Downloading ${n} environment variables...`);try{let{data:s}=await I.get(`/projects/${e}/secrets/export?env=${encodeURIComponent(n)}`);if(s.status!=="success"){o.stop(ir.red(`Failed to download variables: ${s.message||"Unknown API error"}`));return}let a=s.secrets||{},l=nh(a,n);ni.writeFileSync(i,l,{encoding:"utf-8",mode:384}),o.stop(`Wrote ${Object.keys(a).length} variable(s) to ${r}.`)}catch(s){o.stop("Failed to download variables."),Ne.error(Ho(s,e,"pull"))}}import{cancel as ch,confirm as Wc,isCancel as oi,log as je,note as Uc,outro as it,select as dh,spinner as uh,text as ph}from"@clack/prompts";import Ee from"chalk";import q from"fs";import le from"path";import{spawnSync as Kc}from"child_process";import Wo from"crypto";import fh from"axios";import vc from"crypto";import or from"fs";import sr from"path";var wc=e=>String(e||"").replace(/\\/g,"/").replace(/^\/+/,"");function Rc(e,t){let n=sr.join(e,"metadata.json");if(!or.existsSync(n))throw new Error(`Expo export did not create ${n}.`);let i=JSON.parse(or.readFileSync(n,"utf-8"))?.fileMetadata?.[t],o=wc(i?.bundle);if(!o)throw new Error(`Expo export metadata is missing the ${t} launch bundle.`);let s=new Set,a=(Array.isArray(i?.assets)?i.assets:[]).flatMap(l=>{let d=wc(l?.path);return!d||s.has(d)?[]:(s.add(d),[{path:d,ext:String(l?.ext||"").replace(/^\./,"")||void 0}])});for(let l of[o,...a.map(d=>d.path)])if(!or.existsSync(sr.join(e,l)))throw new Error(`Expo export metadata references a missing file: ${l}`);return{bundle:o,assets:a}}function $c(e,t){return[sr.join(e,t.bundle),...t.assets.map(n=>sr.join(e,n.path)),sr.join(e,"metadata.json")]}function Go(e){return vc.createHash("md5").update(or.readFileSync(e)).digest("hex")}function Vo(e){return vc.createHash("sha256").update(or.readFileSync(e)).digest("base64url")}function Pc(e){let t=String(e||"").replace(/^\./,"").trim().toLowerCase();return t?`.${t}`:void 0}function ri(e,t=!1){if(t)return"application/javascript";switch(String(e||"").replace(/^\./,"").trim().toLowerCase()){case"js":case"bundle":case"hbc":return"application/javascript";case"json":return"application/json";case"png":return"image/png";case"jpg":case"jpeg":return"image/jpeg";case"gif":return"image/gif";case"webp":return"image/webp";case"svg":return"image/svg+xml";case"ttf":return"font/ttf";case"otf":return"font/otf";case"woff":return"font/woff";case"woff2":return"font/woff2";case"mp3":return"audio/mpeg";case"m4a":return"audio/mp4";case"aac":return"audio/aac";case"wav":return"audio/wav";case"mp4":return"video/mp4";case"mov":return"video/quicktime";case"pdf":return"application/pdf";default:return"application/octet-stream"}}function Oc(e){if(!e||typeof e!="object"||Array.isArray(e))return;let{_internal:t,hooks:n,mods:r,...i}=e;return i}import Dc from"fs";import sh from"path";import{spawnSync as Cc}from"child_process";function Tc(e){let t=String(e||"all").trim().toLowerCase();if(t==="ios")return["ios"];if(t==="android")return["android"];if(t==="all"||t==="both")return["ios","android"];throw new Error("Platform must be ios, android, or all. Flutter web does not support Shorebird OTA.")}function zo(e,t){let n=String(e.track||e.channel||t||"stable").trim().toLowerCase();if(n==="stable"||n==="production")return"stable";if(n==="staging"||n==="preview")return"staging";throw new Error("Shorebird track must be stable or staging.")}function ah(e=process.cwd()){let t=Cc("shorebird",["--version"],{cwd:e,encoding:"utf8",env:{...process.env}});return t.error||t.status!==0?{ok:!1,error:t.error?.message||t.stderr?.trim()||`exit ${t.status}`}:{ok:!0,version:(t.stdout||t.stderr||"").trim().split(/\r?\n/)[0]}}function ar(e=process.cwd()){let t=sh.join(e,"shorebird.yaml");return Dc.existsSync(t)?Dc.readFileSync(t,"utf8").match(/^\s*app_id\s*:\s*['"]?([^\s#'"]+)/m)?.[1]:void 0}function Zt(e=process.cwd()){let t=ah(e);if(!t.ok)throw new Error("The Shorebird CLI is required for Flutter OTA. Install it from https://docs.shorebird.dev, then run `mach ota setup` again.");return t.version||"installed"}function Xt(e,t=process.cwd()){let n=Cc("shorebird",e,{cwd:t,stdio:"inherit",env:{...process.env,CI:process.env.CI||void 0}});if(n.error)throw new Error(n.error.message);if(n.status!==0)throw new Error(`shorebird ${e.join(" ")} exited with code ${n.status}.`)}function kc(e,t,n){let r=n?.trim()||K(e,"store","production"),i=se(e,r);if(!i)throw new Error(`Build profile "${r}" was not found in mach.config.json.`);let o={...i.flutter||{},...i[t]?.flutter||{}},s=[],a=[];o.flavor&&s.push("--flavor",String(o.flavor)),o.target&&s.push("--target",vt(o.target));let l=Array.isArray(o.dartDefinesFromEnv)?o.dartDefinesFromEnv:[];for(let d of l){let c=process.env[d];if(c===void 0)throw new Error(`Flutter compile-time value ${d} is required by dartDefinesFromEnv but is not defined.`);a.push(`--dart-define=${d}=${c}`)}return[...s,...a.length?["--",...a]:[]]}function lh(e){let t=e.releaseVersion?.trim(),n=e.patchNumber?.trim();if(!t||!n)throw new Error("Both --release-version <version> and --patch-number <number> are required.");if(!/^[1-9]\d*$/.test(n))throw new Error("--patch-number must be a positive integer.");return{releaseVersion:t,patchNumber:n}}function Nc(e,t){if(t.profile&&!se(e,t.profile))throw new Error(`Build profile "${t.profile}" was not found in mach.config.json.`);if(Zt(),ar())return;let n=["init"];if(e.name&&n.push("--display-name",e.name),(t.yes||process.env.CI)&&n.push("--no-confirm"),Xt(n),!ar())throw new Error("Shorebird initialization finished without creating a valid shorebird.yaml.")}function xc(e,t){Zt();let n=e.flutter?.sdkVersion;for(let r of Tc(t.platform)){let i=["release",r];n&&i.push("--flutter-version",n),(t.yes||process.env.CI)&&i.push("--no-confirm"),i.push(...kc(e,r,t.profile)),Xt(i)}}function Mc(e,t){Zt();let n=zo(t,e.ota?.channel);for(let r of Tc(t.platform)){let i=["patch",r,"--release-version",t.releaseVersion?.trim()||"latest","--track",n];(t.yes||process.env.CI)&&i.push("--no-confirm"),i.push(...kc(e,r,t.profile)),Xt(i)}}function Lc(e){if(Zt(),e.json)throw new Error("Shorebird does not provide a stable JSON contract for this command; omit --json.");Xt(["releases","list"]),e.releaseVersion&&Xt(["patches","list","--release-version",e.releaseVersion])}function Fc(e,t){Zt();let{releaseVersion:n,patchNumber:r}=lh(t);if(e==="promote"){Xt(["patches","promote","--release-version",n,"--patch-number",r]);return}Xt(["patches","set-track","--release-version",n,"--patch-number",r,"--track","stable"])}var Ie=`${m.npmScope}/mach/expo-plugin`,Yo=()=>process.stdin.isTTY&&process.stdout.isTTY,si=()=>{ch("Operation cancelled."),process.exit(0)},Te=e=>{if(typeof e!="string")return;let t=e.trim();return t.length>0?t:void 0};function vn(e){if(!q.existsSync(e))return null;try{return JSON.parse(q.readFileSync(e,"utf-8"))}catch{return null}}function Yc(e,t){q.writeFileSync(e,`${JSON.stringify(t,null,2)}
|
|
2294
|
+
`)}function $n(){let e=W();return e?.projectId||(je.error(`No ${m.configFileName} found or missing projectId. Run \`${m.nameLower} link\` first.`),process.exit(1)),e}function jc(e){Yc(le.join(process.cwd(),m.configFileName),e)}function ai(e){let t=ce(e.framework);if(t)return t;let n=vn(le.join(process.cwd(),"package.json"))||{},r={...n.dependencies||{},...n.devDependencies||{}};return r.expo?"expo":(r["react-native"],"react-native")}function Rn(e,t){let n=String(e||"").trim().toLowerCase();return n==="shorebird"?"shorebird":n==="expo"||n==="expo-updates"?"expo-updates":n==="react-native"||n==="mach-react-native"||n==="rn"?"mach-react-native":t==="flutter"?"shorebird":"expo-updates"}function qc(e){if(e==="shorebird")throw new Error("shorebird is only available for Flutter projects.");if(e==="mach-react-native")throw new Error("mach-react-native is reserved for a future Mach-native OTA client. Use expo-updates for Expo and bare React Native projects.");return e}function Pn(e,t){return(ce(t.framework)||ai(e))==="flutter"}function lr(e){return{platform:e.platform,profile:e.profile,releaseVersion:e.releaseVersion,patchNumber:e.patchNumber,track:e.track,channel:e.channel||e.branch,message:e.message,yes:e.yes,json:e.json}}function qo(e){if(e==="flutter")throw new Error("Mach OTA currently supports Expo and bare React Native through expo-updates; Flutter OTA is not enabled.");return e}function Jo(e){let t=String(e||"all").trim().toLowerCase();if(t==="ios")return["ios"];if(t==="android")return["android"];if(t==="all"||t==="both")return["ios","android"];throw new Error("Platform must be ios, android, or all.")}function mh(e){return q.existsSync(le.join(e,"pnpm-lock.yaml"))?{command:"pnpm",args:["add","-D",`${m.npmScope}/mach@latest`],label:`pnpm add -D ${m.npmScope}/mach@latest`}:q.existsSync(le.join(e,"yarn.lock"))?{command:"yarn",args:["add","-D",`${m.npmScope}/mach@latest`],label:`yarn add -D ${m.npmScope}/mach@latest`}:q.existsSync(le.join(e,"bun.lockb"))||q.existsSync(le.join(e,"bun.lock"))?{command:"bun",args:["add","-d",`${m.npmScope}/mach@latest`],label:`bun add -d ${m.npmScope}/mach@latest`}:{command:"npm",args:["install","--save-dev",`${m.npmScope}/mach@latest`],label:`npm install --save-dev ${m.npmScope}/mach@latest`}}function li(e){let t=vn(le.join(e,"package.json"))||{};return!!(t.dependencies?.[`${m.npmScope}/mach`]||t.devDependencies?.[`${m.npmScope}/mach`])}function ii(e){let t=vn(le.join(e,"node_modules",m.npmScope,"mach","package.json"));return Te(t?.version)}function Jc(e,t){let n=o=>o.replace(/^v/,"").split(/[.-]/).slice(0,3).map(s=>Number.parseInt(s,10)||0),r=n(e),i=n(t);for(let o=0;o<3;o+=1)if(r[o]!==i[o])return r[o]>i[o]?1:-1;return 0}function gh(e){let t=ii(e);return!li(e)||!t||Jc(t,Pt)<0}function hh(e){let t=mh(e),n=Kc(t.command,t.args,{cwd:e,stdio:"inherit",env:{...process.env}});if(n.error)return{ok:!1,label:t.label,error:n.error.message};if(n.status!==0)return{ok:!1,label:t.label,error:`${t.command} exited with code ${n.status}`};let r=ii(e),i=!!r&&Jc(r,Pt)>=0;return{ok:li(e)&&i,label:t.label,error:i?void 0:`installed ${r||"unknown"}, requires ${Pt} or newer`}}function Bc(e){if(typeof e=="string")return e;if(Array.isArray(e)&&typeof e[0]=="string")return e[0]}function yh(e,t){let n=["app.config.json","app.json"].find(a=>q.existsSync(le.join(e,a)));if(!n)return null;let r=le.join(e,n),i=vn(r);if(!i)return null;let o=i.expo&&typeof i.expo=="object"?i.expo:i;if(t==="react-native"&&n==="app.json"&&(!i.expo||typeof i.expo!="object")){let a=vn(le.join(e,"package.json"))||{},l=Te(i.displayName)||Te(i.name)||Te(a.name)||"App",d=(Te(a.name)||l).toLowerCase().replace(/[^a-z0-9-]+/g,"-").replace(/^-+|-+$/g,"")||"app";i.expo={name:l,slug:d,version:Te(a.version)||"1.0.0"},o=i.expo}let s=Array.isArray(o.plugins)?o.plugins:[];return s.some(a=>Bc(a)===Ie)||(o.plugins=[...s.filter(a=>{let l=Bc(a);return l!=="./plugins/withMachDeepLinks"&&l!=="plugins/withMachDeepLinks"}),Ie],Yc(r,i)),n}function bh(e){let t=["app.config.ts","app.config.js"].find(p=>q.existsSync(le.join(e,p)));if(!t)return"missing";let n=le.join(e,t),r=q.readFileSync(n,"utf-8");if(r.includes(Ie))return"already";let i=/(['"`])(?:\.\/)?plugins\/withMachDeepLinks\1/g;if(i.test(r))return q.writeFileSync(n,r.replace(i,(p,h)=>`${h}${Ie}${h}`)),"inserted";let o=/(^[ \t]*)plugins\s*:\s*\[([\s\S]*?)\]/m.exec(r);if(!o||o.index===void 0)return"manual";let s=r.includes(`\r
|
|
2290
2295
|
`)?`\r
|
|
2291
2296
|
`:`
|
|
2292
2297
|
`,a=o[1]||"",l=o[2]||"",c=l.match(/\r?\n([ \t]+)\S/)?.[1]||`${a} `,u=l.trim().length===0?`${s}${c}'${Ie}',${s}${a}`:l.includes(`
|
|
2293
|
-
`)||l.includes("\r")?`${s}${c}'${Ie}',${l}`:`${s}${c}'${Ie}',${s}${c}${l.trim()}${s}${a}`,f=`${o[0].slice(0,o[0].indexOf("[")+1)}${u}]`;return q.writeFileSync(n,`${r.slice(0,o.index)}${f}${r.slice(o.index+o[0].length)}`),"inserted"}async function
|
|
2294
|
-
`),"Flutter OTA setup"),Ko({...e,engine:"shorebird"})}let n=
|
|
2295
|
-
`),"OTA setup"),await Ko({...e,action:"verify"})}async function ch(e){let t=vn();if(Rn(t,e)){if(wn(e.engine||t.ota?.engine,"flutter")!=="shorebird")throw new Error("Flutter OTA is not configured for Shorebird. Run `mach ota setup`.");Oc(t,lr(e)),it(Ee.green("\u2713 Flutter OTA patch published through Shorebird."));return}ke();let n=Yo(ce(e.framework)||si(t)),r;try{r=Bc(wn(e.engine||t.ota?.engine,n))}catch(a){je.error(`${a.message} Run \`mach ota setup\` to migrate this project.`),process.exit(1)}let i=Te(e.channel||e.branch||t.ota?.channel)||"production",o=qo(e.platform||"all"),s=zg();s.start(`Publishing OTA update (${o.join("+")}, ${i})`);try{let a=[];for(let l of o){let d=Jo(t,e,l),c=th({platform:l,runtimeVersion:d,channel:i,url:Te(t.ota?.url)||""});s.message(`Exporting and uploading ${l} OTA bundle for runtime ${d}...`),a.push(await ah({config:t,engine:r,platform:l,channel:i,runtimeVersion:d,message:e.message,expoConfig:c.expoConfig}))}if(s.stop("OTA update published."),e.json)je.info(JSON.stringify({status:"success",updates:a},null,2));else{let l=Array.from(new Set(a.map(d=>d.runtimeVersion).filter(Boolean)));it(Ee.green(`\u2713 OTA update live on "${i}" for runtime ${l.join(", ")||"unknown"}.`));for(let d of a)je.info(Ee.dim(`${d.platform}: ${d.updateId}`))}}catch(a){s.stop("OTA publish failed."),je.error(a.response?.data?.message||a.message),process.exit(1)}}async function Ko(e){let t=vn();if(Rn(t,e)){let a=[];e.profile&&a.push(se(t,e.profile)?{level:"pass",message:`Flutter profile ${e.profile} resolves successfully.`}:{level:"fail",message:`Build profile ${e.profile} was not found in mach.config.json.`});let l=wn(e.engine||t.ota?.engine,"flutter");a.push(l==="shorebird"?{level:"pass",message:"Flutter OTA engine is Shorebird."}:{level:"fail",message:"Flutter OTA engine must be shorebird. Run `mach ota setup`."}),a.push(t.ota?.enabled?{level:"pass",message:"OTA is enabled in mach.config.json."}:{level:"fail",message:"OTA is not enabled. Run `mach ota setup`."});let d=ar();a.push(d?{level:"pass",message:`shorebird.yaml contains app id ${d}.`}:{level:"fail",message:"shorebird.yaml is missing or has no app_id. Run `mach ota setup`."});try{let u=Zt();a.push({level:"pass",message:`Shorebird CLI is available (${u}).`})}catch(u){a.push({level:"fail",message:u.message})}process.env.CI&&!process.env.SHOREBIRD_TOKEN?a.push({level:"fail",message:"CI requires SHOREBIRD_TOKEN in its secret environment."}):process.env.SHOREBIRD_TOKEN?a.push({level:"pass",message:"SHOREBIRD_TOKEN is available from the environment."}):a.push({level:"warn",message:"No SHOREBIRD_TOKEN is set. This is fine for an interactive machine already logged in to Shorebird."});for(let u of a){let f=u.level==="pass"?Ee.green("PASS"):u.level==="warn"?Ee.yellow("WARN"):Ee.red("FAIL");je.info(`${f} ${u.message}`)}let c=a.filter(u=>u.level==="fail").length;if(c){it(Ee.red(`OTA verification failed with ${c} issue(s).`)),process.exitCode=1;return}it(Ee.green("Flutter OTA verification passed."));return}let n=Yo(ce(e.framework)||si(t)),r=wn(e.engine||t.ota?.engine,n),i=[],o=t.ota;if(i.push(o?.enabled?{level:"pass",message:"mach.config.json has ota.enabled."}:{level:"fail",message:"mach.config.json is missing ota.enabled. Run `mach ota setup`."}),i.push(o?.url?{level:"pass",message:`OTA URL configured: ${o.url}`}:{level:"fail",message:"OTA URL is missing. Run `mach ota setup`."}),i.push(o?.channel?{level:"pass",message:`Default channel: ${o.channel}`}:{level:"warn",message:"No default OTA channel configured; publish will use production."}),i.push(o?.runtimeVersionPolicy||o?.runtimeVersion?{level:"pass",message:"Runtime version policy configured."}:{level:"warn",message:"No explicit runtime policy configured; Mach will use Expo runtimeVersion or package.json version."}),r==="expo-updates"){let a=_n(le.join(process.cwd(),"package.json"))||{},l={...a.dependencies||{},...a.devDependencies||{}};n==="react-native"&&i.push(l.expo?{level:"pass",message:"Expo Modules are installed for the bare React Native project."}:{level:"fail",message:"Expo Modules are missing. Run `mach ota setup` to install the bare React Native OTA runtime."}),i.push(l["expo-updates"]?{level:"pass",message:"expo-updates is installed."}:{level:"fail",message:"expo-updates is missing. Run `mach ota setup`."}),i.push(ai(process.cwd())?{level:"pass",message:`${m.npmScope}/mach is installed locally for the Expo plugin.`}:{level:"fail",message:`${m.npmScope}/mach is not installed locally; run \`mach ota setup\`.`});let d=qo(e.platform||"all"),c=Te(e.channel||e.branch||o?.channel)||"production",u=Te(o?.url)||"",f=d.map(h=>{let g=Jo(t,e,h);return{platform:h,runtimeVersion:g,delivery:kn(process.cwd(),{platform:h,runtimeVersion:g,channel:c,url:u})}}),p=f[0]?.delivery;if(p){let h=p.expoConfig.updates?.enabled!==!1,g=Te(p.expoConfig.updates?.checkAutomatically)?.toUpperCase()||"ON_LOAD";i.push(p.url===o?.url?{level:"pass",message:"Expo Updates URL resolves to Mach."}:{level:"warn",message:`Expo Updates URL resolves to ${p.url||"none"} instead of ${o?.url||"the Mach OTA URL"}.`}),i.push(p.channel===c?{level:"pass",message:`Expo update channel header resolves to ${c}.`}:{level:"warn",message:`Expo update channel header is ${p.channel||"not set"}; install the latest ${m.npmScope}/mach package and rebuild.`}),i.push(h?{level:"pass",message:"Expo Updates is enabled."}:{level:"fail",message:"Expo config has updates.enabled=false, so this app cannot receive OTA updates."}),i.push(g!=="NEVER"&&g!=="ON_ERROR_RECOVERY"?{level:"pass",message:`Expo checks for updates automatically (${g}).`}:{level:"fail",message:`Expo checkAutomatically is ${g}; use ON_LOAD to receive Mach updates when the app starts.`})}else i.push({level:"fail",message:`Could not resolve Expo config. Confirm ${Ie} is present and run \`mach ota setup\` again.`});for(let{platform:h,runtimeVersion:g,delivery:y}of f)i.push(y?.runtimeVersion===g?{level:"pass",message:`${h} Expo runtime resolves to ${g}.`}:{level:"fail",message:`${h} Expo runtime resolves to ${y?.runtimeVersion||"none"} instead of ${g}. Run \`mach ota setup\`, then rebuild the app.`});if(n==="react-native"){let h=d,g=Pi(process.cwd()).filter(b=>h.includes(b)),y=ws(process.cwd());if(g.includes("android")){let b=!!(y.androidManifest&&y.androidStrings)&&q.readFileSync(y.androidManifest,"utf-8").includes("expo.modules.updates.EXPO_UPDATE_URL")&&q.readFileSync(y.androidStrings,"utf-8").includes("expo_runtime_version");i.push(b?{level:"pass",message:"Android native Expo Updates configuration is synchronized."}:{level:"fail",message:"Android native Expo Updates configuration is missing. Run `mach ota setup --platform android`."})}if(g.includes("ios")){let b=!!y.iosExpoPlist&&q.readFileSync(y.iosExpoPlist,"utf-8").includes("EXUpdatesURL")&&q.readFileSync(y.iosExpoPlist,"utf-8").includes("EXUpdatesRuntimeVersion");i.push(b?{level:"pass",message:"iOS native Expo Updates configuration is synchronized."}:{level:"fail",message:"iOS native Expo Updates configuration is missing. Run `mach ota setup --platform ios`."})}}}else i.push({level:"fail",message:"mach-react-native is not available yet. Run `mach ota setup` to migrate this project to expo-updates."});for(let a of i){let l=a.level==="pass"?Ee.green("PASS"):a.level==="warn"?Ee.yellow("WARN"):Ee.red("FAIL");je.info(`${l} ${a.message}`)}let s=i.filter(a=>a.level==="fail").length;s>0&&(it(Ee.red(`OTA verification failed with ${s} issue(s).`)),process.exit(1)),it(Ee.green("OTA verification passed."))}async function dh(e){let t=vn();if(Rn(t,e)){Dc(lr(e));return}ke();let n=await I.get(`/ota/${t.projectId}/updates`),r=n.data.updates||[];if(e.json){je.info(JSON.stringify(n.data,null,2));return}if(r.length===0){it("No OTA updates found.");return}for(let i of r){let o=i.stats?.total||{};je.info(`${Ee.bold(i.updateId)} ${Ee.dim(`${i.platform} ${i.channelName} runtime ${i.runtimeVersion}`)} ${i.status||"active"}`),je.info(Ee.dim(` downloads ios=${o.iosDownloaded||0} android=${o.androidDownloaded||0} applied ios=${o.iosApplied||0} android=${o.androidApplied||0}`))}it(`Found ${r.length} OTA update(s).`)}async function Mc(e,t){let n=vn();if(Rn(n,t)){Pc(e,lr(t)),it(Ee.green(`\u2713 Shorebird patch ${e==="rollback"?"selected for rollback":"promoted"}.`));return}ke();let r=Te(t.updateId);r||(je.error(`Missing update id. Use \`${m.nameLower} ota ${e} --update-id <id>\`.`),process.exit(1));let i=await I.post(`/ota/${n.projectId}/updates/${encodeURIComponent(r)}/${e}`);t.json?je.info(JSON.stringify(i.data,null,2)):it(Ee.green(`\u2713 OTA update ${e==="rollback"?"rolled back":"promoted"}: ${r}`))}async function At(e,t={}){let n=e||t.action||"publish";if(n==="setup")return lh({...t,action:n});if(n==="release"){let i=vn();if(!Rn(i,t))throw new Error("`mach ota release` is a Flutter/Shorebird command. Use `mach build` for Expo and React Native base builds.");$c(i,lr(t)),it(Ee.green("\u2713 Flutter Shorebird base release created."));return}if(n==="publish")return ch({...t,action:n});if(n==="verify")return Ko({...t,action:n});if(n==="list")return dh({...t,action:n});if(n==="rollback")return Mc("rollback",{...t,action:n});if(n==="promote")return Mc("promote",{...t,action:n});let r=await Vg({message:"What do you want to do?",options:[{value:"setup",label:"Setup OTA"},{value:"publish",label:"Publish OTA update"},{value:"verify",label:"Verify OTA setup"},{value:"list",label:"List OTA updates"}]});return ii(r)&&oi(),At(r,t)}import{intro as uh,outro as zc,log as $n}from"@clack/prompts";import ut from"chalk";async function Kc(){uh(ut.blue(`${m.name} CLI - User Profile`));let e=we();if(!e){$n.warn(ut.yellow("You are not logged in.")),$n.info(`Run \`${m.nameLower} login\` to authenticate.`),zc();return}$n.info(`${ut.bold("Logged in as:")} ${ut.green(e.email)}`);try{await I.get("/projects");let n=we().token.split(".");if(n.length===3){let r=JSON.parse(Buffer.from(n[1],"base64").toString());if(r.exp){let i=new Date(r.exp*1e3),o=new Date,s=i.getTime()-o.getTime();if(s>0){let a=Math.round(s/6e4),l=(a/60).toFixed(1);$n.info(`${ut.bold("Token status:")} Valid (Expires in ~${l}h / ${a}m)`)}else $n.warn(`${ut.bold("Token status:")} ${ut.red("Expired")} (Auto-refresh failed)`)}}}catch{$n.warn(`${ut.bold("Token status:")} ${ut.red("Unreachable")} (Session might be truly expired)${wt}`)}zc(ut.blue("---"))}import{spawn as Yc}from"child_process";import{cancel as mh,isCancel as gh,log as Ye,select as hh}from"@clack/prompts";import De from"chalk";import yh from"fs";import qc from"path";import ph from"net";async function fh(e){return new Promise(t=>{let n=ph.createServer();n.once("error",r=>{r.code==="EADDRINUSE"?t(!0):t(!1)}),n.once("listening",()=>{n.close(),t(!1)}),n.listen(e,"0.0.0.0")})}async function Wc(e,t=20){let n=e;for(;n<e+t;){if(!await fh(n))return n;n++}throw new Error(`Could not find an available port after ${t} attempts starting from ${e}.`)}var Jc=async e=>{Ye.info(De.blue(`Starting ${m.name} Dev Orchestrator...`));let t=K(),n=e.buildProfile||W(t,"development","development"),r=t?se(t,n):null,i=t?sn(t):void 0,o=ve(process.cwd(),t?.appDirectory,{requireAppDirectory:!0}),s={...process.env};if(t?.projectId)try{Ye.info(De.dim(`Fetching managed secrets for profile: ${n}...`));let p=r?.environment||n,h=await I.get(`/projects/${t.projectId}/secrets/export?env=${encodeURIComponent(p)}`);h.data?.status==="success"&&h.data.secrets&&(Object.assign(s,h.data.secrets),Ye.info(De.magenta(`\u2713 Injected secrets from ${m.name} Dashboard.`)))}catch{Ye.warn("Could not fetch managed secrets. Running with local env only.")}if(t&&Object.assign(s,an(t,m.envPrefix)),r&&(Object.assign(s,an(r,`${m.envPrefix}PROFILE_`)),r.env&&Object.assign(s,r.env)),i==="flutter"){let p=e.ios?"ios":e.android?"android":void 0,h=ln(t,r,p);dn(o.appRoot,n,r||{},p);let g=tt(o.appRoot),y=Rt().flutter;if(!y)throw new Error("Flutter CLI is unavailable. Install Flutter before running mach start.");if(t?.flutter?.sdkVersion&&y!==t.flutter.sdkVersion)throw new Error(`Flutter SDK mismatch: ${t.flutter.sdkVersion} is configured, but ${y} is active. Activate the pinned SDK (for example with FVM) before starting the app.`);let b=["run"];if([e.ios?"ios":"",e.android?"android":"",e.web?"web":""].filter(Boolean).length>1)throw new Error("Choose only one Flutter device target: --ios, --android, or --web.");if(e.web)b.push("-d","chrome");else if(e.ios||e.android){let U=e.ios?"ios":"android",j=Os($s(),U);if(j.length===0)throw new Error(`No available Flutter ${U==="ios"?"iOS":"Android"} device was found. Start a simulator/emulator or connect a device, then run \`flutter devices\`.`);let H=j[0];if(j.length>1&&process.stdin.isTTY&&process.stdout.isTTY){let te=await hh({message:`Select Flutter ${U==="ios"?"iOS":"Android"} device:`,options:j.map(ie=>({value:ie.id,label:ie.name||ie.id,hint:ie.emulator?"Simulator / emulator":"Physical device"}))});if(gh(te)){mh("Start cancelled.");return}H=j.find(ie=>ie.id===te)||H}b.push("-d",H.id),Ye.info(De.dim(`Flutter device: ${H.name||H.id}`))}let v=h.flavor||g.defaultFlavor;v&&b.push("--flavor",v),b.push("--target",vt(h.target));let E=cn(h,{developmentClient:r?.developmentClient,distribution:r?.distribution,simulator:r?.ios?.simulator??r?.simulator});E!=="debug"&&b.push(`--${E}`),b.push(...Rs(h.dartDefinesFromEnv,s)),e.clear&&Ye.info(De.dim("Flutter manages incremental build caches; --clear is ignored.")),(e.tunnel||e.lan||e.localhost||e.port)&&Ye.info(De.dim("Metro network options do not apply to Flutter and were ignored.")),Ye.info(De.dim(`Flutter app: ${g.name||qc.basename(o.appRoot)} \xB7 profile ${n}`));let L=Yc("flutter",b,{cwd:o.appRoot,stdio:"inherit",env:s});return new Promise((U,j)=>{L.on("exit",H=>H===0?U():j(new Error(`Flutter exited with code ${H}`))),L.on("error",j)})}let a=!1;try{let p=JSON.parse(yh.readFileSync(qc.join(o.appRoot,"package.json"),"utf-8"));a=!!(p.dependencies?.expo||p.devDependencies?.expo)}catch{Ye.warn("Could not parse package.json. Defaulting to Bare React Native mode.")}let l=Number(e.port||r?.port||8081),d=await Wc(l);d!==l&&Ye.info(De.yellow(`Port ${l} is busy. ${m.name} is using ${d} instead.`));let c=process.platform==="win32"?"npx.cmd":"npx",u=[];if(a?(u=["expo","start","--port",String(d)],e.clear&&u.push("--clear"),e.tunnel&&u.push("--tunnel"),e.lan&&u.push("--lan"),e.localhost&&u.push("--localhost"),e.ios&&u.push("--ios"),e.android&&u.push("--android"),e.web&&u.push("--web")):(u=["react-native","start","--port",String(d)],e.clear&&u.push("--clear")),a){let p=[`${De.cyan("i")} open iOS simulator`,`${De.cyan("a")} open Android emulator/device`,`${De.cyan("w")} open web`,`${De.cyan("r")} reload app`];Ye.info([De.bold("Launch controls"),...p.map(h=>` ${h}`),"",De.dim("Direct launch: mach start --ios | --android | --web"),De.dim(`Metro URL: http://localhost:${d}`)].join(`
|
|
2296
|
-
`))}else Ye.info(
|
|
2297
|
-
Profile Settings:`)),me.info(`${ye.cyan("Distribution:")} ${r.distribution||"none"}`),me.info(`${ye.cyan("Development Client:")} ${r.developmentClient||"false"}`),i==="flutter"){let s=
|
|
2298
|
+
`)||l.includes("\r")?`${s}${c}'${Ie}',${l}`:`${s}${c}'${Ie}',${s}${c}${l.trim()}${s}${a}`,f=`${o[0].slice(0,o[0].indexOf("[")+1)}${u}]`;return q.writeFileSync(n,`${r.slice(0,o.index)}${f}${r.slice(o.index+o[0].length)}`),"inserted"}async function Ah(e,t,n){let r=[];if(gh(e)){let o=ii(e),s=!!(n.installPlugin||n.yes);if(!s&&!n.skipInstall&&Yo()){let a=await Wc({message:o?`Update the local ${m.npmScope}/mach Expo plugin (${o} \u2192 ${Pt})?`:`Install ${m.npmScope}/mach locally so Expo can use ${Ie}?`,initialValue:!0});oi(a)&&si(),s=!!a}if(s&&!n.skipInstall){let a=hh(e);a.ok?r.push(`Installed a compatible ${Ie} with ${a.label}.`):r.push(`Could not install ${m.npmScope}/mach with ${a.label}: ${a.error||"unknown error"}.`)}else r.push(`Install ${m.npmScope}/mach@${Pt} or newer in this app so Expo can resolve ${Ie}.`)}else r.push(`Local ${Ie} is compatible (${ii(e)}).`);let i=bh(e);if(i==="already"&&r.push(`Expo config already includes ${Ie}.`),i==="inserted"&&r.push(`Expo config updated to include ${Ie}.`),i==="manual"&&r.push(`Add "${Ie}" to the plugins array in app.config.ts/app.config.js.`),i==="missing"){let o=yh(e,t);o?r.push(`${o} updated to include ${Ie}.`):r.push(`Add "${Ie}" to your Expo config plugins array.`)}return r}async function Hc(e,t){if(t.skipInstall)return!1;if(t.yes)return!0;if(!Yo())return!1;let n=await Wc({message:e,initialValue:!0});return oi(n)&&si(),!!n}async function Sh(e,t,n){let r=[];if(t==="react-native"&&!Bt(e,"expo"))if(await Hc("Install Expo Modules required by the Mach OTA runtime? This updates package and native project files.",n)){let o=Is(e);if(!o.ok||!Bt(e,"expo"))throw new Error(`Expo Modules installation failed: ${o.error||o.command}`);r.push("Installed and configured Expo Modules for the existing React Native project.")}else r.push("Expo Modules are required. Run `npx install-expo-modules@latest`, then run `mach ota setup` again.");if(!Bt(e,"expo-updates"))if(await Hc("Install the expo-updates runtime?",n)){let o=_s(e);if(!o.ok||!Bt(e,"expo-updates"))throw new Error(`expo-updates installation failed: ${o.error||o.command}`);r.push("Installed the Expo-compatible expo-updates version.")}else r.push("Install expo-updates with `npx expo install expo-updates`, then run `mach ota setup` again.");return r}async function Gc(e,t,n,r,i){if(t)return t;if(i||!Yo()){if(r)throw new Error(`${e.replace(/:$/,"")} is required.`);return}let o=await ph({message:e,placeholder:n,validate(s){if(r&&s.trim().length===0)return"Required."}});return oi(o)&&si(),Te(o)}function Xo(e,t,n){return xn(e,{runtimeVersion:t.runtimeVersion,framework:ce(t.framework)||ce(e.framework),platform:n})}function Eh(e){let t=Nn(process.cwd(),e);if(!t)throw new Error(`Resolved Expo OTA configuration does not match this publish: Expo config could not be resolved. Run \`mach ota setup\` to update ${Ie}, then create a new native build if its embedded runtime changes.`);let n=[];if(t.runtimeVersion!==e.runtimeVersion&&n.push(`runtime is ${t.runtimeVersion||"missing"} (expected ${e.runtimeVersion})`),t.channel!==e.channel&&n.push(`channel is ${t.channel||"missing"} (expected ${e.channel})`),t.url!==e.url&&n.push(`URL is ${t.url||"missing"} (expected ${e.url})`),n.length>0)throw new Error(`Resolved Expo OTA configuration does not match this publish: ${n.join("; ")}. Run \`mach ota setup\` to update ${Ie}, then create a new native build if its embedded runtime changes.`);return t}function Ih(e){return Wo.createHash("sha256").update(q.readFileSync(e)).digest("hex")}function _h(e){let t=le.extname(e).toLowerCase();return t===".json"?"application/json":t===".js"||t===".bundle"||t===".hbc"?"application/javascript":t===".map"?"application/json":t===".png"?"image/png":t===".jpg"||t===".jpeg"?"image/jpeg":t===".webp"?"image/webp":t===".gif"?"image/gif":t===".svg"?"image/svg+xml":t===".ttf"?"font/ttf":t===".otf"?"font/otf":t===".woff"?"font/woff":t===".woff2"?"font/woff2":"application/octet-stream"}function Xc(e){let t=[];if(!q.existsSync(e))return t;for(let n of q.readdirSync(e)){let r=le.join(e,n),i=q.statSync(r);i.isDirectory()?t.push(...Xc(r)):i.isFile()&&t.push(r)}return t}function wh(e,t){let n=e.filter(r=>{let i=r.toLowerCase();return i.endsWith(".map")?!1:i.endsWith(".js")||i.endsWith(".bundle")||i.endsWith(".hbc")});return n.find(r=>r.toLowerCase().includes(t))||n.sort((r,i)=>q.statSync(i).size-q.statSync(r).size)[0]}async function Vc(e){let t=await I.post("/ota/upload-url",{projectId:e.projectId,updateId:e.updateId,platform:e.platform,fileName:e.fileName,contentType:e.contentType});if(t.data.status!=="success")throw new Error(t.data.message||`Could not create upload URL for ${e.fileName}`);let n=q.statSync(e.filePath).size;return await fh.put(t.data.uploadUrl,q.createReadStream(e.filePath),{headers:{"Content-Type":e.contentType,"Content-Length":n},maxBodyLength:1/0,maxContentLength:1/0}),{key:t.data.key,url:t.data.publicUrl,contentType:e.contentType,hash:Ih(e.filePath),size:n}}function Zc(e,t,n,r={}){let i=Kc(e,t,{cwd:n,stdio:"inherit",env:{...process.env,CI:process.env.CI||"1",EXPO_NO_TELEMETRY:"1",...r}});if(i.error)throw new Error(i.error.message);if(i.status!==0)throw new Error(`${e} ${t.join(" ")} exited with code ${i.status}`)}function vh(e,t,n,r,i){Zc("npx",["expo","export","--platform",e,"--output-dir",t],process.cwd(),{MACH_OTA_RUNTIME_VERSION:n,MACH_OTA_CHANNEL:r,MACH_OTA_URL:i})}function Rh(e,t){let n=e==="ios"?"main.jsbundle":"index.android.bundle",i=["index.js","index.ts","index.tsx"].find(s=>q.existsSync(le.join(process.cwd(),s)))||"index.js",o=le.join(t,"assets");q.mkdirSync(o,{recursive:!0}),Zc("npx",["react-native","bundle","--platform",e,"--dev","false","--entry-file",i,"--bundle-output",le.join(t,n),"--assets-dest",o],process.cwd())}async function $h(e){let t=e.config.projectId,n=`ota_${Date.now()}_${e.platform}_${Wo.randomUUID().slice(0,8)}`,r=le.join(process.cwd(),".mach","ota",n,e.platform);q.rmSync(r,{recursive:!0,force:!0}),q.mkdirSync(r,{recursive:!0}),e.engine==="expo-updates"?vh(e.platform,r,e.runtimeVersion,e.channel,e.config.ota?.url||""):Rh(e.platform,r);let i=e.engine==="expo-updates"?Rc(r,e.platform):void 0,o=i?$c(r,i):Xc(r),s=i?le.join(r,i.bundle):wh(o,e.platform);if(!s)throw new Error(`Could not find a ${e.platform} JS bundle in ${r}.`);let a=new Map((i?.assets||[]).map(A=>[A.path,A])),l=[];for(let A of o){let v=le.relative(r,A).replace(/\\/g,"/"),E=a.get(v),L=A===s?"application/javascript":E?ri(E.ext):_h(A);l.push({filePath:A,relative:v,uploaded:await Vc({projectId:t,updateId:n,platform:e.platform,filePath:A,fileName:v,contentType:L})})}let d=l.find(A=>A.filePath===s),c=e.engine==="expo-updates"?Wo.randomUUID():void 0,u=e.engine==="expo-updates"?Oc(e.expoConfig):void 0;if(e.engine==="expo-updates"&&(!u||Object.keys(u).length===0))throw new Error("Could not resolve the public Expo config required by the OTA manifest. Run `mach ota verify` and try again.");let f=i?i.assets.map(A=>{let v=l.find(E=>E.relative===A.path);if(!v)throw new Error(`Could not find uploaded Expo asset ${A.path}.`);return{key:Go(v.filePath),url:v.uploaded.url,contentType:ri(A.ext),fileExtension:Pc(A.ext),hash:Vo(v.filePath),size:v.uploaded.size}}):l.filter(A=>A.filePath!==s&&!A.relative.endsWith(".map")).map(A=>({key:A.relative,url:A.uploaded.url,contentType:A.uploaded.contentType,hash:A.uploaded.hash,size:A.uploaded.size})),p=i?{key:Go(d.filePath),url:d.uploaded.url,contentType:ri(void 0,!0),hash:Vo(d.filePath),size:d.uploaded.size}:{key:le.basename(d.relative),url:d.uploaded.url,contentType:d.uploaded.contentType,hash:d.uploaded.hash,size:d.uploaded.size},h={id:c||n,createdAt:new Date().toISOString(),runtimeVersion:e.runtimeVersion,launchAsset:p,assets:f,metadata:{projectId:t,channel:e.channel,...e.message?{message:e.message}:{},engine:e.engine},extra:{...u?{expoClient:u}:{},mach:{projectId:t,updateId:n,...c?{expoUpdateId:c}:{},channel:e.channel,platform:e.platform}}},g=le.join(r,"mach-manifest.json");q.writeFileSync(g,JSON.stringify(h,null,2));let y=await Vc({projectId:t,updateId:n,platform:e.platform,filePath:g,fileName:"manifest.json",contentType:"application/json"}),b=await I.post("/ota/publish",{projectId:t,updateId:n,expoUpdateId:c,channelName:e.channel,runtimeVersion:e.runtimeVersion,platform:e.platform,manifestKey:y.key,message:e.message,launchAsset:p,assets:f});if(b.data.status!=="success")throw new Error(b.data.message||`Failed to publish ${e.platform} OTA update.`);return b.data.update}async function Ph(e){let t=$n();if(Pn(t,e)){if(Rn(e.engine||t.ota?.engine,"flutter")!=="shorebird")throw new Error("Flutter OTA uses Shorebird. Run `mach ota setup --engine shorebird`.");let p=lr(e),h=zo(p,t.ota?.channel);return Nc(t,p),t.framework="flutter",t.ota={...t.ota||{},enabled:!0,engine:"shorebird",channel:h},delete t.ota.url,delete t.ota.deploymentUrl,delete t.ota.statsUrl,delete t.ota.runtimeVersion,delete t.ota.runtimeVersionPolicy,jc(t),Uc([`- ${m.configFileName} now uses customer-owned Shorebird OTA.`,`- shorebird.yaml app id: ${ar()}`,"- SHOREBIRD_TOKEN is read only from the environment/CI secret store and is never written to Mach config.","- Create a base binary with `mach ota release`, then publish Dart-only changes with `mach ota publish`."].join(`
|
|
2299
|
+
`),"Flutter OTA setup"),Ko({...e,engine:"shorebird"})}let n=qo(ce(e.framework)||ai(t)),r;try{r=qc(Rn(e.engine,n))}catch(f){je.error(f.message),process.exit(1)}let i=!!e.yes,o=await Gc("OTA channel:",Te(e.channel||e.branch||t.ota?.channel)||"production","production",!0,i),s=`${wt.replace(/\/$/,"")}/api/ota/expo/${t.projectId}`,a=Te(e.url||t.ota?.url),l=a?.includes("/api/ota/react-native/")?void 0:a,d=await Gc("Mach OTA update URL:",l||s,s,!0,i);t.framework=n;let c={...t.ota||{},enabled:!0,engine:r,channel:o,url:d,deploymentUrl:d,runtimeVersionPolicy:t.ota?.runtimeVersionPolicy||"appVersion"};delete c.statsUrl,t.ota=c,delete t.update,jc(t);let u=[`${m.configFileName} updated.`];if(u.push(...await Sh(process.cwd(),n,e)),u.push(...await Ah(process.cwd(),n,e)),n==="react-native"&&Bt(process.cwd(),"expo")&&Bt(process.cwd(),"expo-updates")&&li(process.cwd())){let f=Jo(e.platform||"all"),p=Ci(process.cwd()).filter(h=>f.includes(h));p.length===0&&u.push("No matching committed ios/android project was found for native configuration sync.");for(let h of p){let g=Xo(t,e,h),b=ws({cwd:process.cwd(),platforms:[h],runtimeVersion:g,channel:o,url:d}).find(A=>!A.ok);if(b)throw new Error(`Could not synchronize ${h} Expo Updates configuration: ${b.error||b.command}`);u.push(`Synchronized ${h} native Expo Updates configuration for runtime ${g}.`)}}u.push("Create and install one new native build after initial OTA setup. Existing app binaries keep their embedded update URL."),Uc(u.map(f=>`- ${f}`).join(`
|
|
2300
|
+
`),"OTA setup"),await Ko({...e,action:"verify"})}async function Oh(e){let t=$n();if(Pn(t,e)){if(Rn(e.engine||t.ota?.engine,"flutter")!=="shorebird")throw new Error("Flutter OTA is not configured for Shorebird. Run `mach ota setup`.");Mc(t,lr(e)),it(Ee.green("\u2713 Flutter OTA patch published through Shorebird."));return}ke();let n=qo(ce(e.framework)||ai(t)),r;try{r=qc(Rn(e.engine||t.ota?.engine,n))}catch(a){je.error(`${a.message} Run \`mach ota setup\` to migrate this project.`),process.exit(1)}let i=Te(e.channel||e.branch||t.ota?.channel)||"production",o=Jo(e.platform||"all"),s=uh();s.start(`Publishing OTA update (${o.join("+")}, ${i})`);try{let a=[];for(let l of o){let d=Xo(t,e,l),c=Eh({platform:l,runtimeVersion:d,channel:i,url:Te(t.ota?.url)||""});s.message(`Exporting and uploading ${l} OTA bundle for runtime ${d}...`),a.push(await $h({config:t,engine:r,platform:l,channel:i,runtimeVersion:d,message:e.message,expoConfig:c.expoConfig}))}if(s.stop("OTA update published."),e.json)je.info(JSON.stringify({status:"success",updates:a},null,2));else{let l=Array.from(new Set(a.map(d=>d.runtimeVersion).filter(Boolean)));it(Ee.green(`\u2713 OTA update live on "${i}" for runtime ${l.join(", ")||"unknown"}.`));for(let d of a)je.info(Ee.dim(`${d.platform}: ${d.updateId}`))}}catch(a){s.stop("OTA publish failed."),je.error(a.response?.data?.message||a.message),process.exit(1)}}async function Ko(e){let t=$n();if(Pn(t,e)){let a=[];e.profile&&a.push(se(t,e.profile)?{level:"pass",message:`Flutter profile ${e.profile} resolves successfully.`}:{level:"fail",message:`Build profile ${e.profile} was not found in mach.config.json.`});let l=Rn(e.engine||t.ota?.engine,"flutter");a.push(l==="shorebird"?{level:"pass",message:"Flutter OTA engine is Shorebird."}:{level:"fail",message:"Flutter OTA engine must be shorebird. Run `mach ota setup`."}),a.push(t.ota?.enabled?{level:"pass",message:"OTA is enabled in mach.config.json."}:{level:"fail",message:"OTA is not enabled. Run `mach ota setup`."});let d=ar();a.push(d?{level:"pass",message:`shorebird.yaml contains app id ${d}.`}:{level:"fail",message:"shorebird.yaml is missing or has no app_id. Run `mach ota setup`."});try{let u=Zt();a.push({level:"pass",message:`Shorebird CLI is available (${u}).`})}catch(u){a.push({level:"fail",message:u.message})}process.env.CI&&!process.env.SHOREBIRD_TOKEN?a.push({level:"fail",message:"CI requires SHOREBIRD_TOKEN in its secret environment."}):process.env.SHOREBIRD_TOKEN?a.push({level:"pass",message:"SHOREBIRD_TOKEN is available from the environment."}):a.push({level:"warn",message:"No SHOREBIRD_TOKEN is set. This is fine for an interactive machine already logged in to Shorebird."});for(let u of a){let f=u.level==="pass"?Ee.green("PASS"):u.level==="warn"?Ee.yellow("WARN"):Ee.red("FAIL");je.info(`${f} ${u.message}`)}let c=a.filter(u=>u.level==="fail").length;if(c){it(Ee.red(`OTA verification failed with ${c} issue(s).`)),process.exitCode=1;return}it(Ee.green("Flutter OTA verification passed."));return}let n=qo(ce(e.framework)||ai(t)),r=Rn(e.engine||t.ota?.engine,n),i=[],o=t.ota;if(i.push(o?.enabled?{level:"pass",message:"mach.config.json has ota.enabled."}:{level:"fail",message:"mach.config.json is missing ota.enabled. Run `mach ota setup`."}),i.push(o?.url?{level:"pass",message:`OTA URL configured: ${o.url}`}:{level:"fail",message:"OTA URL is missing. Run `mach ota setup`."}),i.push(o?.channel?{level:"pass",message:`Default channel: ${o.channel}`}:{level:"warn",message:"No default OTA channel configured; publish will use production."}),i.push(o?.runtimeVersionPolicy||o?.runtimeVersion?{level:"pass",message:"Runtime version policy configured."}:{level:"warn",message:"No explicit runtime policy configured; Mach will use Expo runtimeVersion or package.json version."}),r==="expo-updates"){let a=vn(le.join(process.cwd(),"package.json"))||{},l={...a.dependencies||{},...a.devDependencies||{}};n==="react-native"&&i.push(l.expo?{level:"pass",message:"Expo Modules are installed for the bare React Native project."}:{level:"fail",message:"Expo Modules are missing. Run `mach ota setup` to install the bare React Native OTA runtime."}),i.push(l["expo-updates"]?{level:"pass",message:"expo-updates is installed."}:{level:"fail",message:"expo-updates is missing. Run `mach ota setup`."}),i.push(li(process.cwd())?{level:"pass",message:`${m.npmScope}/mach is installed locally for the Expo plugin.`}:{level:"fail",message:`${m.npmScope}/mach is not installed locally; run \`mach ota setup\`.`});let d=Jo(e.platform||"all"),c=Te(e.channel||e.branch||o?.channel)||"production",u=Te(o?.url)||"",f=d.map(h=>{let g=Xo(t,e,h);return{platform:h,runtimeVersion:g,delivery:Nn(process.cwd(),{platform:h,runtimeVersion:g,channel:c,url:u})}}),p=f[0]?.delivery;if(p){let h=p.expoConfig.updates?.enabled!==!1,g=Te(p.expoConfig.updates?.checkAutomatically)?.toUpperCase()||"ON_LOAD";i.push(p.url===o?.url?{level:"pass",message:"Expo Updates URL resolves to Mach."}:{level:"warn",message:`Expo Updates URL resolves to ${p.url||"none"} instead of ${o?.url||"the Mach OTA URL"}.`}),i.push(p.channel===c?{level:"pass",message:`Expo update channel header resolves to ${c}.`}:{level:"warn",message:`Expo update channel header is ${p.channel||"not set"}; install the latest ${m.npmScope}/mach package and rebuild.`}),i.push(h?{level:"pass",message:"Expo Updates is enabled."}:{level:"fail",message:"Expo config has updates.enabled=false, so this app cannot receive OTA updates."}),i.push(g!=="NEVER"&&g!=="ON_ERROR_RECOVERY"?{level:"pass",message:`Expo checks for updates automatically (${g}).`}:{level:"fail",message:`Expo checkAutomatically is ${g}; use ON_LOAD to receive Mach updates when the app starts.`})}else i.push({level:"fail",message:`Could not resolve Expo config. Confirm ${Ie} is present and run \`mach ota setup\` again.`});for(let{platform:h,runtimeVersion:g,delivery:y}of f)i.push(y?.runtimeVersion===g?{level:"pass",message:`${h} Expo runtime resolves to ${g}.`}:{level:"fail",message:`${h} Expo runtime resolves to ${y?.runtimeVersion||"none"} instead of ${g}. Run \`mach ota setup\`, then rebuild the app.`});if(n==="react-native"){let h=d,g=Ci(process.cwd()).filter(b=>h.includes(b)),y=vs(process.cwd());if(g.includes("android")){let b=!!(y.androidManifest&&y.androidStrings)&&q.readFileSync(y.androidManifest,"utf-8").includes("expo.modules.updates.EXPO_UPDATE_URL")&&q.readFileSync(y.androidStrings,"utf-8").includes("expo_runtime_version");i.push(b?{level:"pass",message:"Android native Expo Updates configuration is synchronized."}:{level:"fail",message:"Android native Expo Updates configuration is missing. Run `mach ota setup --platform android`."})}if(g.includes("ios")){let b=!!y.iosExpoPlist&&q.readFileSync(y.iosExpoPlist,"utf-8").includes("EXUpdatesURL")&&q.readFileSync(y.iosExpoPlist,"utf-8").includes("EXUpdatesRuntimeVersion");i.push(b?{level:"pass",message:"iOS native Expo Updates configuration is synchronized."}:{level:"fail",message:"iOS native Expo Updates configuration is missing. Run `mach ota setup --platform ios`."})}}}else i.push({level:"fail",message:"mach-react-native is not available yet. Run `mach ota setup` to migrate this project to expo-updates."});for(let a of i){let l=a.level==="pass"?Ee.green("PASS"):a.level==="warn"?Ee.yellow("WARN"):Ee.red("FAIL");je.info(`${l} ${a.message}`)}let s=i.filter(a=>a.level==="fail").length;s>0&&(it(Ee.red(`OTA verification failed with ${s} issue(s).`)),process.exit(1)),it(Ee.green("OTA verification passed."))}async function Dh(e){let t=$n();if(Pn(t,e)){Lc(lr(e));return}ke();let n=await I.get(`/ota/${t.projectId}/updates`),r=n.data.updates||[];if(e.json){je.info(JSON.stringify(n.data,null,2));return}if(r.length===0){it("No OTA updates found.");return}for(let i of r){let o=i.stats?.total||{};je.info(`${Ee.bold(i.updateId)} ${Ee.dim(`${i.platform} ${i.channelName} runtime ${i.runtimeVersion}`)} ${i.status||"active"}`),je.info(Ee.dim(` downloads ios=${o.iosDownloaded||0} android=${o.androidDownloaded||0} applied ios=${o.iosApplied||0} android=${o.androidApplied||0}`))}it(`Found ${r.length} OTA update(s).`)}async function zc(e,t){let n=$n();if(Pn(n,t)){Fc(e,lr(t)),it(Ee.green(`\u2713 Shorebird patch ${e==="rollback"?"selected for rollback":"promoted"}.`));return}ke();let r=Te(t.updateId);r||(je.error(`Missing update id. Use \`${m.nameLower} ota ${e} --update-id <id>\`.`),process.exit(1));let i=await I.post(`/ota/${n.projectId}/updates/${encodeURIComponent(r)}/${e}`);t.json?je.info(JSON.stringify(i.data,null,2)):it(Ee.green(`\u2713 OTA update ${e==="rollback"?"rolled back":"promoted"}: ${r}`))}async function At(e,t={}){let n=e||t.action||"publish";if(n==="setup")return Ph({...t,action:n});if(n==="release"){let i=$n();if(!Pn(i,t))throw new Error("`mach ota release` is a Flutter/Shorebird command. Use `mach build` for Expo and React Native base builds.");xc(i,lr(t)),it(Ee.green("\u2713 Flutter Shorebird base release created."));return}if(n==="publish")return Oh({...t,action:n});if(n==="verify")return Ko({...t,action:n});if(n==="list")return Dh({...t,action:n});if(n==="rollback")return zc("rollback",{...t,action:n});if(n==="promote")return zc("promote",{...t,action:n});let r=await dh({message:"What do you want to do?",options:[{value:"setup",label:"Setup OTA"},{value:"publish",label:"Publish OTA update"},{value:"verify",label:"Verify OTA setup"},{value:"list",label:"List OTA updates"}]});return oi(r)&&si(),At(r,t)}import{intro as Ch,outro as Qc,log as On}from"@clack/prompts";import ut from"chalk";async function ed(){Ch(ut.blue(`${m.name} CLI - User Profile`));let e=we();if(!e){On.warn(ut.yellow("You are not logged in.")),On.info(`Run \`${m.nameLower} login\` to authenticate.`),Qc();return}On.info(`${ut.bold("Logged in as:")} ${ut.green(e.email)}`);try{await I.get("/projects");let n=we().token.split(".");if(n.length===3){let r=JSON.parse(Buffer.from(n[1],"base64").toString());if(r.exp){let i=new Date(r.exp*1e3),o=new Date,s=i.getTime()-o.getTime();if(s>0){let a=Math.round(s/6e4),l=(a/60).toFixed(1);On.info(`${ut.bold("Token status:")} Valid (Expires in ~${l}h / ${a}m)`)}else On.warn(`${ut.bold("Token status:")} ${ut.red("Expired")} (Auto-refresh failed)`)}}}catch{On.warn(`${ut.bold("Token status:")} ${ut.red("Unreachable")} (Session might be truly expired)${wt}`)}Qc(ut.blue("---"))}import{spawn as nd}from"child_process";import{cancel as Nh,isCancel as xh,log as Ye,select as Mh}from"@clack/prompts";import Oe from"chalk";import Lh from"fs";import rd from"path";import Th from"net";async function kh(e){return new Promise(t=>{let n=Th.createServer();n.once("error",r=>{r.code==="EADDRINUSE"?t(!0):t(!1)}),n.once("listening",()=>{n.close(),t(!1)}),n.listen(e,"0.0.0.0")})}async function td(e,t=20){let n=e;for(;n<e+t;){if(!await kh(n))return n;n++}throw new Error(`Could not find an available port after ${t} attempts starting from ${e}.`)}var id=async e=>{Ye.info(Oe.blue(`Starting ${m.name} Dev Orchestrator...`));let t=W(),n=e.buildProfile||K(t,"development","development"),r=t?se(t,n):null,i=t?an(t):void 0,o=ve(process.cwd(),t?.appDirectory,{requireAppDirectory:!0}),s={...process.env};if(t?.projectId)try{Ye.info(Oe.dim(`Fetching managed secrets for profile: ${n}...`));let p=r?.environment||n,h=await I.get(`/projects/${t.projectId}/secrets/export?env=${encodeURIComponent(p)}`);h.data?.status==="success"&&h.data.secrets&&(Object.assign(s,h.data.secrets),Ye.info(Oe.magenta(`\u2713 Injected secrets from ${m.name} Dashboard.`)))}catch{Ye.warn("Could not fetch managed secrets. Running with local env only.")}if(t&&Object.assign(s,ln(t,m.envPrefix)),r&&(Object.assign(s,ln(r,`${m.envPrefix}PROFILE_`)),r.env&&Object.assign(s,r.env)),i==="flutter"){let p=e.ios?"ios":e.android?"android":void 0,h=cn(t,r,p);un(o.appRoot,n,r||{},p);let g=tt(o.appRoot),y=Rt().flutter;if(!y)throw new Error("Flutter CLI is unavailable. Install Flutter before running mach start.");if(t?.flutter?.sdkVersion&&y!==t.flutter.sdkVersion)throw new Error(`Flutter SDK mismatch: ${t.flutter.sdkVersion} is configured, but ${y} is active. Activate the pinned SDK (for example with FVM) before starting the app.`);let b=["run"];if([e.ios?"ios":"",e.android?"android":"",e.web?"web":""].filter(Boolean).length>1)throw new Error("Choose only one Flutter device target: --ios, --android, or --web.");if(e.web)b.push("-d","chrome");else if(e.ios||e.android){let U=e.ios?"ios":"android",j=Os(Ps(),U);if(j.length===0)throw new Error(`No available Flutter ${U==="ios"?"iOS":"Android"} device was found. Start a simulator/emulator or connect a device, then run \`flutter devices\`.`);let H=j[0];if(j.length>1&&process.stdin.isTTY&&process.stdout.isTTY){let te=await Mh({message:`Select Flutter ${U==="ios"?"iOS":"Android"} device:`,options:j.map(ie=>({value:ie.id,label:ie.name||ie.id,hint:ie.emulator?"Simulator / emulator":"Physical device"}))});if(xh(te)){Nh("Start cancelled.");return}H=j.find(ie=>ie.id===te)||H}b.push("-d",H.id),Ye.info(Oe.dim(`Flutter device: ${H.name||H.id}`))}let v=h.flavor||g.defaultFlavor;v&&b.push("--flavor",v),b.push("--target",vt(h.target));let E=dn(h,{developmentClient:r?.developmentClient,distribution:r?.distribution,simulator:r?.ios?.simulator??r?.simulator});E!=="debug"&&b.push(`--${E}`),b.push(...$s(h.dartDefinesFromEnv,s)),e.clear&&Ye.info(Oe.dim("Flutter manages incremental build caches; --clear is ignored.")),(e.tunnel||e.lan||e.localhost||e.port)&&Ye.info(Oe.dim("Metro network options do not apply to Flutter and were ignored.")),Ye.info(Oe.dim(`Flutter app: ${g.name||rd.basename(o.appRoot)} \xB7 profile ${n}`));let L=nd("flutter",b,{cwd:o.appRoot,stdio:"inherit",env:s});return new Promise((U,j)=>{L.on("exit",H=>H===0?U():j(new Error(`Flutter exited with code ${H}`))),L.on("error",j)})}let a=!1;try{let p=JSON.parse(Lh.readFileSync(rd.join(o.appRoot,"package.json"),"utf-8"));a=!!(p.dependencies?.expo||p.devDependencies?.expo)}catch{Ye.warn("Could not parse package.json. Defaulting to Bare React Native mode.")}let l=Number(e.port||r?.port||8081),d=await td(l);d!==l&&Ye.info(Oe.yellow(`Port ${l} is busy. ${m.name} is using ${d} instead.`));let c=process.platform==="win32"?"npx.cmd":"npx",u=[];if(a?(u=["expo","start","--port",String(d)],e.clear&&u.push("--clear"),e.tunnel&&u.push("--tunnel"),e.lan&&u.push("--lan"),e.localhost&&u.push("--localhost"),e.ios&&u.push("--ios"),e.android&&u.push("--android"),e.web&&u.push("--web")):(u=["react-native","start","--port",String(d)],e.clear&&u.push("--clear")),a){let p=[`${Oe.cyan("i")} open iOS simulator`,`${Oe.cyan("a")} open Android emulator/device`,`${Oe.cyan("w")} open web`,`${Oe.cyan("r")} reload app`];Ye.info([Oe.bold("Launch controls"),...p.map(h=>` ${h}`),"",Oe.dim("Direct launch: mach start --ios | --android | --web"),Oe.dim(`Metro URL: http://localhost:${d}`)].join(`
|
|
2301
|
+
`))}else Ye.info(Oe.dim(`Metro URL: http://localhost:${d}`));let f=nd(c,u,{cwd:o.appRoot,stdio:"inherit",env:s});return new Promise((p,h)=>{f.on("exit",g=>{g===0?p():h(new Error(`Dev server exited with code ${g}`))}),f.on("error",g=>{h(g)})})};import{log as me}from"@clack/prompts";import ye from"chalk";var Zo="[redacted]",ci=(e,t=[])=>{if(Array.isArray(e))return e.map((r,i)=>ci(r,[...t,String(i)]));if(!e||typeof e!="object")return e;let n={};for(let[r,i]of Object.entries(e)){let o=r==="env"||r==="envGroups";/(?:secret|token|password|private.?key|api.?key|credential)/i.test(r)&&typeof i!="object"?n[r]=Zo:o&&i&&typeof i=="object"?n[r]=Object.fromEntries(Object.keys(i).map(a=>[a,Zo])):n[r]=ci(i,[...t,r])}return n},od=async e=>{let t=W();t||(me.error(ye.red(`No ${m.configFileName} found in the current directory.`)),process.exit(1));let n=e.profile||K(t,"development","development"),r=se(t,n),i=an(t),o=ve(process.cwd(),t.appDirectory);if(e.json){console.log(JSON.stringify({project:ci(t),resolved:ci(r)},null,2));return}if(me.info(ye.bgBlue.white(` Resolved ${m.name} Config [${n}] `)),me.info(ye.dim("----------------------------------------")),me.info(`${ye.blue("Project ID:")} ${t.projectId}`),me.info(`${ye.blue("Name:")} ${t.name}`),me.info(`${ye.blue("Scheme:")} ${t.scheme}`),me.info(`${ye.blue("App directory:")} ${t.appDirectory||"."}`),me.info(`${ye.blue("Framework:")} ${i}`),r){if(me.info(ye.dim(`
|
|
2302
|
+
Profile Settings:`)),me.info(`${ye.cyan("Distribution:")} ${r.distribution||"none"}`),me.info(`${ye.cyan("Development Client:")} ${r.developmentClient||"false"}`),i==="flutter"){let s=cn(t,r),a=tt(o.appRoot),l=dn(s,{developmentClient:r.developmentClient,distribution:r.distribution,simulator:r.ios?.simulator??r.simulator});me.info(ye.dim(`
|
|
2298
2303
|
Flutter Settings:`)),me.info(`${ye.cyan("SDK:")} ${t.flutter?.sdkVersion||"local toolchain"}`),me.info(`${ye.cyan("Flavor:")} ${s.flavor||a.defaultFlavor||"default"}`),me.info(`${ye.cyan("Target:")} ${vt(s.target)}`),me.info(`${ye.cyan("Mode:")} ${l}`),s.dartDefinesFromEnv?.length&&me.info(`${ye.cyan("Dart defines:")} ${s.dartDefinesFromEnv.join(", ")} ${ye.dim("(values redacted; compile-time, not secrets)")}`)}r.env&&Object.keys(r.env).length>0&&(me.info(ye.dim(`
|
|
2299
|
-
Environment Variables:`)),Object.entries(r.env).forEach(([s,a])=>{me.info(` ${s}=${
|
|
2304
|
+
Environment Variables:`)),Object.entries(r.env).forEach(([s,a])=>{me.info(` ${s}=${Zo}`)}))}else me.warn(`Profile '${n}' not found.`);me.info(ye.dim("----------------------------------------"))};import{cancel as yy,confirm as ls,isCancel as en,log as Dn,note as by,outro as gi,select as Dd,text as Cd}from"@clack/prompts";import Ay from"axios";import Be from"chalk";import Sy from"fs";import $d from"path";import{spawnSync as Fh}from"child_process";import Qo from"fs";import Uh from"os";import sd from"path";function ad(e){if(typeof e!="string")return;let t=e.replace(/[^a-fA-F0-9]/g,"").toUpperCase();if(t.length===64)return t.match(/.{1,2}/g)?.join(":")}function es(e){let t=[],n=[];for(let r of e.split(/[;,\r\n]+/).map(i=>i.trim()).filter(Boolean)){let i=ad(r);i?t.includes(i)||t.push(i):n.push(r)}return{fingerprints:t,invalid:n}}function jh(e){let t=e.match(/SHA(?:-|\s*)?256(?:\s+fingerprint)?\s*:\s*([A-Fa-f0-9:\s-]+)/i);return t?ad(t[1]):void 0}function ld(e){let t=Qo.mkdtempSync(sd.join(Uh.tmpdir(),"mach-deeplink-keystore-")),n=sd.join(t,"signing.keystore");try{Qo.writeFileSync(n,e.keystore,{mode:384});let r=["-list","-v","-keystore",n];e.alias&&r.push("-alias",e.alias);let i=Fh("keytool",r,{encoding:"utf8",input:`${e.keystorePassword}
|
|
2300
2305
|
`,maxBuffer:2*1024*1024});if(i.error)throw new Error("Java keytool is unavailable. Install a JDK to detect the Android signing fingerprint automatically.");let o=`${i.stdout||""}
|
|
2301
|
-
${i.stderr||""}`,s=
|
|
2306
|
+
${i.stderr||""}`,s=jh(o);if(i.status!==0||!s)throw new Error("Mach could not read a SHA-256 certificate fingerprint from the Android keystore.");return s}finally{try{Qo.rmSync(t,{recursive:!0,force:!0})}catch{}}}import ge from"fs";import Q from"path";import{spawnSync as ud}from"child_process";var Qt="@radhya/mach/expo-plugin",Bh=`const fs = require('fs')
|
|
2302
2307
|
const path = require('path')
|
|
2303
2308
|
|
|
2304
2309
|
const unique = values => Array.from(new Set(values.filter(Boolean)))
|
|
@@ -2425,12 +2430,12 @@ module.exports = function withMachDeepLinks(config, options) {
|
|
|
2425
2430
|
config.android.intentFilters = intentFilters
|
|
2426
2431
|
return config
|
|
2427
2432
|
}
|
|
2428
|
-
`,
|
|
2433
|
+
`,di=e=>{if(typeof e=="string"){if(e===Qt)return Qt;if(e===fn||e===fn.replace(/^\.\//,""))return fn}},Hh=["app.config.ts","app.config.js","app.config.json","app.json"],pd=["app.config.ts","app.config.js"],fd=["app.config.json","app.json"],cr=(e,t=Hh)=>t.find(n=>ge.existsSync(Q.join(e,n)));function pi(e){let t=Q.resolve(e);for(;;){if(cr(t))return t;let n=Q.dirname(t);if(n===t)return Q.resolve(e);t=n}}var Gh=[2,6,8],Vh=e=>{let t=e.split(Q.sep).join("/");return t.startsWith(".")?t:`./${t}`},md=(e,t)=>{if(Q.resolve(e)!==Q.resolve(t))return{machConfigPath:Vh(Q.relative(t,Q.join(e,"mach.config.json")))}},zh=e=>{let t=Q.join(e,"node_modules/@radhya/mach/package.json");if(ge.existsSync(t))try{let n=JSON.parse(ge.readFileSync(t,"utf-8")).version;return typeof n=="string"?n:void 0}catch{return}},Wh=(e,t)=>{let n=e?.match(/^(\d+)\.(\d+)\.(\d+)/)?.slice(1).map(Number);return!n||n.length!==3?!1:n.some((r,i)=>r!==t[i]&&r>t[i])||n.every((r,i)=>r===t[i])},ts=(e,t)=>Qh(e)?t?.machConfigPath?Wh(zh(e),Gh):!0:!1;function gd(e){let t=pi(e);return!ts(t,md(e,t))}var Kh=e=>{if(!Array.isArray(e)||!e[1]||typeof e[1]!="object")return;let t=typeof e[1].machConfigPath=="string"?e[1].machConfigPath:void 0;return t?{machConfigPath:t}:void 0},ns=e=>Array.isArray(e)?ns(e[0]):di(e),hd=e=>!!ns(e),Yh=(e,t)=>{let n=di(t)||t;return ns(e)===n},qh=(e,t)=>Kh(e)?.machConfigPath===t?.machConfigPath,yd=(e,t)=>t?[e,t]:e,cd=(e,t,n)=>!n&&Array.isArray(e)?[t,...e.slice(1)]:yd(t,n),Jh=(e,t,n)=>{let r=Array.isArray(e.plugins)?e.plugins:[],i=r.findIndex(s=>Yh(s,t));if(i>=0)return qh(r[i],n)?(e.plugins=r,"already"):(r[i]=cd(r[i],t,n),e.plugins=r,"updated");let o=r.findIndex(hd);return o>=0?(r[o]=cd(r[o],t,n),e.plugins=r,"updated"):(r.push(yd(t,n)),e.plugins=r,"inserted")},bd=String.raw`(?:\.\/)?plugins\/withMachDeepLinks|@radhya\/mach\/expo-plugin`,rs='[\\x27\\"`]',ui=new RegExp(`(${rs})(${bd})\\1`,"g"),Xh=new RegExp(`\\[\\s*(${rs})(${bd})\\1\\s*,\\s*\\{[^{}]*\\}\\s*\\]`,"g"),Ad=e=>e.replace(/\\/g,"\\\\").replace(/'/g,"\\'"),dd=(e,t)=>t?.machConfigPath?`['${e}', { machConfigPath: '${Ad(t.machConfigPath)}' }]`:`'${e}'`,Zh=(e,t,n)=>{let r=di(t)||t;if(!Array.from(e.matchAll(ui)).some(a=>di(a[2])===r))return!1;if(!n?.machConfigPath)return!0;let o=Ad(n.machConfigPath).replace(/[.*+?^${}()|[\]\\]/g,"\\$&");return new RegExp(`\\[\\s*(${rs})${r.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}\\1\\s*,\\s*\\{[^{}]*machConfigPath\\s*:\\s*[\\x27\\"]${o}[\\x27\\"][^{}]*\\}\\s*\\]`).test(e)},Sd=e=>{let t=Q.join(e,"plugins");if(!ge.existsSync(t))return!1;try{return ge.readdirSync(t).filter(n=>/\.(?:c?js|ts)$/.test(n)).some(n=>{let r=ge.readFileSync(Q.join(t,n),"utf-8");return r.includes(Qt)||r.includes("withMachDeepLinks")})}catch{return!1}};function Qh(e){let t=Q.join(e,"package.json");if(!ge.existsSync(t))return!1;try{let n=JSON.parse(ge.readFileSync(t,"utf-8"));return!!(n.dependencies?.["@radhya/mach"]||n.devDependencies?.["@radhya/mach"])}catch{return!1}}function ey(e){return ge.existsSync(Q.join(e,"pnpm-lock.yaml"))?{command:"pnpm",args:["add","-D","@radhya/mach@latest"],label:"pnpm add -D @radhya/mach@latest"}:ge.existsSync(Q.join(e,"yarn.lock"))?{command:"yarn",args:["add","-D","@radhya/mach@latest"],label:"yarn add -D @radhya/mach@latest"}:ge.existsSync(Q.join(e,"bun.lockb"))||ge.existsSync(Q.join(e,"bun.lock"))?{command:"bun",args:["add","-d","@radhya/mach@latest"],label:"bun add -d @radhya/mach@latest"}:{command:"npm",args:["install","--save-dev","@radhya/mach@latest"],label:"npm install --save-dev @radhya/mach@latest"}}function ty(e){let t=ey(e),n=ud(t.command,t.args,{cwd:e,stdio:"inherit",env:{...process.env}});return n.error?{ok:!1,label:t.label,error:n.error.message}:n.status!==0?{ok:!1,label:t.label,error:`${t.command} exited with code ${n.status}`}:{ok:!0,label:t.label}}function ny(e,t,n){let r=ge.readFileSync(e,"utf-8");if(Array.from(r.matchAll(ui)).length>0){if(Zh(r,t,n))return"already";let h=dd(t,n),g=r.replace(Xh,h);return g===r&&(g=r.replace(ui,h)),g===r?"unsupported":(ge.writeFileSync(e,g),"updated")}let o=/(^[ \t]*)plugins\s*:\s*\[([\s\S]*?)\]/m.exec(r);if(!o||o.index===void 0)return"unsupported";let s=r.includes(`\r
|
|
2429
2434
|
`)?`\r
|
|
2430
2435
|
`:`
|
|
2431
|
-
`,a=o[1]||"",l=o[2]||"",c=l.match(/\r?\n([ \t]+)\S/)?.[1]||`${a} `,u=
|
|
2432
|
-
`)||l.includes("\r")?`${s}${c}${u},${l}`:`${s}${c}${u},${s}${c}${l.trim()}${s}${a}`,p=`${o[0].slice(0,o[0].indexOf("[")+1)}${f}]`;return ge.writeFileSync(e,`${r.slice(0,o.index)}${p}${r.slice(o.index+o[0].length)}`),"inserted"}function
|
|
2433
|
-
`),r.push(Q.relative(e,f)),g==="updated"&&o.push(`${u} updated to use ${d}.`)}catch(p){i.push(`Expo config plugin insertion failed: ${p.message}`)}return{written:r,skipped:i,notes:o}}function md(e){let t=ui(e),n=cr(t,id);if(n){let i=ge.readFileSync(Q.join(t,n),"utf-8");return Array.from(i.matchAll(di)).length>0||pd(t)?"manual":"missing"}let r=cr(t,od);if(!r)return"missing";try{let i=JSON.parse(ge.readFileSync(Q.join(t,r),"utf-8")),o=i.expo&&typeof i.expo=="object"?i.expo:i;return Array.isArray(o.plugins)&&o.plugins.some(ld)?"wired":"missing"}catch{return"missing"}}function rs(e,t={}){let n=ui(e),r=rd("npx",["--no-install","expo","config","--type","public","--json"],{cwd:n,encoding:"utf-8",timeout:8e3,env:{...process.env,...t,CI:"1",EXPO_NO_TELEMETRY:"1"}});if(r.error||r.status!==0||!r.stdout)return null;let i=r.stdout.trim(),o=i.indexOf("{");if(o<0)return null;try{return JSON.parse(i.slice(o))}catch{return null}}function Mh(e){if(!e||typeof e!="object")return null;let n=(Array.isArray(e.ios?.associatedDomains)?e.ios.associatedDomains:[]).map(s=>typeof s=="string"?s.match(/^applinks:(.+)$/)?.[1]:void 0).find(Boolean),i=(Array.isArray(e.android?.intentFilters)?e.android.intentFilters:[]).flatMap(s=>Array.isArray(s?.data)?s.data:[]).find(s=>s?.scheme==="https"&&typeof s.host=="string")?.host,o=n||i;return!o&&!e.scheme&&!e.ios?.bundleIdentifier&&!e.android?.package?null:{domain:o,scheme:typeof e.scheme=="string"?e.scheme:void 0,iosBundleIdentifier:typeof e.ios?.bundleIdentifier=="string"?e.ios.bundleIdentifier:void 0,androidPackage:typeof e.android?.package=="string"?e.android.package:void 0}}function pi(e,t={}){return Mh(rs(e,t))}import Pe from"fs";import qe from"path";import{spawnSync as Fh}from"child_process";var C=(e,t)=>({level:e,message:t}),Uh=(e,t)=>{let n=se(e,t)||{};return{...Object.fromEntries(Object.entries(n.env||{}).filter(i=>typeof i[1]=="string")),MACH_PROFILE:t,EAS_BUILD_PROFILE:t}},gd=(e,t)=>qe.join(e,t.web?.outputDir||"deep-links");function jh(e,t,n="fail"){let r=[],i=gd(e,t),o=qe.join(i,".well-known/apple-app-site-association");if(!jn(t))return r.push(C("warn","Skipping AASA verification because ios.appleTeamId or ios.bundleIdentifier is missing.")),r;if(!Pe.existsSync(o))return r.push(C(n,`${qe.relative(e,o)} is missing.`)),r;Pe.statSync(o).size>128*1024?r.push(C("fail","Apple AASA file is larger than 128 KB.")):r.push(C("pass","Apple AASA file is under 128 KB."));let l=fn(o);if(!l)return r.push(C("fail","Apple AASA file is not valid JSON.")),r;let d=`${t.ios?.appleTeamId}.${t.ios?.bundleIdentifier}`,c=l.applinks?.details||[],u=Array.isArray(c)&&c.some(f=>f.appID===d||f.appIDs?.includes(d));if(r.push(u?C("pass",`AASA contains ${d}.`):C("fail",`AASA does not contain ${d}.`)),t.ios?.webCredentials){let f=l.webcredentials?.apps,p=Array.isArray(f)&&f.includes(d);r.push(p?C("pass",`AASA enables iOS Web Credentials for ${d}.`):C("fail",`AASA is missing iOS Web Credentials for ${d}.`))}return r}function Bh(e,t,n="fail"){let r=[],i=gd(e,t),o=qe.join(i,".well-known/assetlinks.json");if(!t.android?.package)return r.push(C("warn","Skipping Android Asset Links verification because android.package is missing.")),r;if(!Pe.existsSync(o))return r.push(C(n,`${qe.relative(e,o)} is missing.`)),r;let s=fn(o);if(!s||!Array.isArray(s))return r.push(C("fail","assetlinks.json is not a valid JSON array.")),r;let a=s.find(d=>d?.target?.package_name===t.android?.package);r.push(a?C("pass",`assetlinks.json contains ${t.android.package}.`):C("fail",`assetlinks.json does not contain ${t.android.package}.`));let l=a?.target?.sha256_cert_fingerprints;if(r.push(Array.isArray(l)&&l.length>0?C("pass","assetlinks.json has at least one SHA256 fingerprint."):C("warn","assetlinks.json has no SHA256 fingerprints.")),t.android?.loginCredentials){let d=a?.relation,c=Array.isArray(d)&&d.includes("delegate_permission/common.get_login_creds");r.push(c?C("pass","assetlinks.json enables Android Login Credentials."):C("fail","assetlinks.json is missing Android Login Credentials."))}return r}function Hh(e,t,n,r,i){if(t.framework!=="expo")return[];let o=[],s=rs(e,i),l=(Array.isArray(s?.ios?.associatedDomains)?s.ios.associatedDomains:[]).includes(`applinks:${n.domain}`);o.push(l?C("pass",`Expo iOS config contains applinks:${n.domain}.`):C(r?"warn":"fail",`Expo iOS config does not contain applinks:${n.domain}.`));let c=(Array.isArray(s?.android?.intentFilters)?s.android.intentFilters:[]).flatMap(f=>Array.isArray(f?.data)?f.data:[]).some(f=>f?.scheme==="https"&&f.host===n.domain);if(o.push(c?C("pass",`Expo Android config contains App Link host ${n.domain}.`):C(r?"warn":"fail",`Expo Android config does not contain App Link host ${n.domain}.`)),r)return o.push(C("warn","mach.config.json is missing deepLinks; values were inferred from Expo config. Run `mach deeplink setup` to persist Mach metadata and generate hosted files.")),o;let u=md(e);return u==="wired"?o.push(C("pass","Expo deep link plugin is wired into Expo config and derives values from mach.config.json.")):u==="manual"&&l&&c?o.push(C("pass","Expo resolved config contains the deep-link settings from the dynamic config.")):u==="manual"?o.push(C("warn","Expo deep link plugin exists, but dynamic or missing Expo config means manual plugin insertion must be confirmed.")):l&&c?o.push(C("warn","Expo plugin is not wired, but resolved Expo config already contains the deep-link settings.")):o.push(C("fail","Expo deep link plugin is missing or not wired into Expo config.")),o}function Gh(e,t,n){if(t.framework!=="react-native")return[];let r=[],i=qe.join(e,"android/app/src/main/AndroidManifest.xml");if(Pe.existsSync(i)){let s=Pe.readFileSync(i,"utf-8");r.push(s.includes(`android:host="${n.domain}"`)?C("pass","AndroidManifest.xml contains the App Links host."):C("warn","AndroidManifest.xml does not contain the App Links host. Native patching is planned for a later phase."))}let o=qe.join(e,"ios");if(Pe.existsSync(o)){let a=Pe.readdirSync(o,{recursive:!0}).filter(l=>typeof l=="string"&&l.endsWith(".entitlements")).some(l=>Pe.readFileSync(qe.join(o,l),"utf-8").includes(`applinks:${n.domain}`));r.push(a?C("pass","iOS entitlements contain the associated domain."):C("warn","iOS entitlements do not contain the associated domain. Native patching is planned for a later phase."))}return r}function Vh(e,t,n){if(t.framework!=="flutter")return[];let r=[],i;try{i=ve(e,t.appDirectory,{requireAppDirectory:!0}).appRoot}catch(a){return[C("fail",a.message||"Could not resolve the Flutter app directory.")]}let o=qe.join(i,"android/app/src/main/AndroidManifest.xml");if(Pe.existsSync(o)){let a=Pe.readFileSync(o,"utf8");r.push(a.includes(`android:host="${n.domain}"`)&&a.includes('android:autoVerify="true"')?C("pass",`Flutter Android manifest verifies https://${n.domain}.`):C("fail","Flutter Android manifest is missing its verified App Links intent filter.")),r.push(a.includes(`android:scheme="${n.scheme}"`)?C("pass",`Flutter Android manifest contains ${n.scheme}://.`):C("fail",`Flutter Android manifest is missing ${n.scheme}://.`))}else r.push(C("warn","Flutter Android project is not present."));let s=qe.join(i,"ios");if(Pe.existsSync(s)){let l=Pe.readdirSync(s,{recursive:!0}).filter(c=>typeof c=="string"&&c.endsWith(".entitlements")).find(c=>Pe.readFileSync(qe.join(s,c),"utf8").includes(`applinks:${n.domain}`));r.push(l?C("pass",`Flutter iOS entitlements contain applinks:${n.domain}.`):C("fail","Flutter iOS entitlements are missing the associated domain."));let d=Pe.readdirSync(s).filter(c=>c.endsWith(".xcodeproj")).map(c=>qe.join(s,c,"project.pbxproj")).filter(c=>Pe.existsSync(c));r.push(d.some(c=>Pe.readFileSync(c,"utf8").includes("CODE_SIGN_ENTITLEMENTS"))?C("pass","Flutter Runner target has an entitlements build setting."):C("fail","Flutter Runner target is not connected to an entitlements file."))}else r.push(C("warn","Flutter iOS project is not present."));return r}async function is(e,t){let n=[];try{let r=await fetch(e,{redirect:"manual"});if(r.status>=300&&r.status<400&&!t)return n.push(C("fail",`${e} redirects. Apple AASA endpoints must not redirect.`)),n;n.push(r.status===200?C("pass",`${e} returned HTTP 200.`):C("fail",`${e} returned HTTP ${r.status}.`));let i=r.headers.get("content-type")||"";!i.includes("application/json")&&!i.includes("text/json")&&n.push(C("warn",`${e} content-type is "${i||"missing"}"; application/json is recommended.`)),JSON.parse(await r.text()),n.push(C("pass",`${e} contains valid JSON.`))}catch(r){n.push(C("fail",`${e} check failed: ${r.message}`))}return n}async function zh(e){let t=e.domain;return(await Promise.all([is(`https://${t}/.well-known/apple-app-site-association`,!1),is(`https://${t}/apple-app-site-association`,!1),is(`https://${t}/.well-known/assetlinks.json`,!0)])).flat()}function Kh(e){let t=e.android?.package;if(!t)return[C("warn","Cannot print Android device verification commands because android.package is missing.")];let r=Fh("adb",["version"],{encoding:"utf-8"}).status===0?"Run":"Install Android platform-tools, then run";return[C("info",`${r}: adb shell pm set-app-links --package ${t} 0 all`),C("info",`${r}: adb shell pm verify-app-links --re-verify ${t}`),C("info",`${r}: adb shell pm get-app-links ${t}`)]}async function os(e,t,n){let r=n.profile||t.deepLinks?.profile||W(t,"store","production"),i=t.framework==="expo"?Uh(t,r):{},o=t.framework==="expo"?pi(e,i):null,s=t.framework==="expo"?Nr(t,o,r,e):null,a=!t.deepLinks&&!!s,l=t.deepLinks?Gt(t,{profile:r,cwd:e,expoHints:o}):s,d=[];if(!l)return[C("fail","mach.config.json is missing deepLinks and Mach could not infer existing deep-link settings. Run `mach deeplink setup`.")];d.push(l.baseUrl?C("pass","deepLinks.baseUrl is configured."):C("fail","deepLinks.baseUrl is missing.")),d.push(l.domain?C("pass","deepLinks.domain is configured."):C("fail","deepLinks.domain is missing.")),d.push(l.scheme?C("pass","deepLinks.scheme is configured."):C("fail","deepLinks.scheme is missing."));let c=a?"warn":"fail";return d.push(...jh(e,l,c)),d.push(...Bh(e,l,c)),d.push(...Hh(e,t,l,a,i)),d.push(...Gh(e,t,l)),d.push(...Vh(e,t,l)),n.live&&d.push(...await zh(l)),n.androidDevice&&d.push(...Kh(l)),d}import $e from"fs";import Lt from"path";var xt=(e,t)=>Lt.relative(e,t).split(Lt.sep).join("/"),yd=e=>e.replace(/[.*+?^${}()|[\]\\]/g,"\\$&");function hd(e,t,n){let r=e.lastIndexOf(t);return r<0?e:`${e.slice(0,r)}${n}${e.slice(r)}`}function Wh(e,t){let n=[],r=[],i=[],o=Lt.join(e,"android/app/src/main/AndroidManifest.xml");if(!$e.existsSync(o))return i.push("AndroidManifest.xml is not present; Android App Links were not patched."),{written:n,skipped:r,notes:i};let s=$e.readFileSync(o,"utf8"),a=/<activity\b[\s\S]*?<intent-filter[\s\S]*?android\.intent\.action\.MAIN[\s\S]*?<\/intent-filter>[\s\S]*?<\/activity>/m.exec(s);if(!a||a.index===void 0)return i.push("Could not safely identify Flutter's launcher activity; add the App Links intent filter manually."),{written:n,skipped:r,notes:i};let l=a[0];if(!l.includes(`android:host="${t.domain}"`)){let c=`
|
|
2436
|
+
`,a=o[1]||"",l=o[2]||"",c=l.match(/\r?\n([ \t]+)\S/)?.[1]||`${a} `,u=dd(t,n),f=l.trim().length===0?`${s}${c}${u},${s}${a}`:l.includes(`
|
|
2437
|
+
`)||l.includes("\r")?`${s}${c}${u},${l}`:`${s}${c}${u},${s}${c}${l.trim()}${s}${a}`,p=`${o[0].slice(0,o[0].indexOf("[")+1)}${f}]`;return ge.writeFileSync(e,`${r.slice(0,o.index)}${p}${r.slice(o.index+o[0].length)}`),"inserted"}function Ed(e,t,n={}){let r=[],i=[],o=[],s=pi(e),a=md(e,s),l=ts(s,a);if(!l&&n.installPackage){o.push("Installing @radhya/mach locally so Expo can use @radhya/mach/expo-plugin.");let p=ty(s);p.ok?(l=ts(s,a),l?o.push(`Installed @radhya/mach with ${p.label}.`):o.push(`@radhya/mach was installed with ${p.label}, but the installed Expo plugin does not support focused workspace config paths. Falling back to a local plugin.`)):o.push(`Could not install @radhya/mach with ${p.label}: ${p.error||"unknown error"}. Falling back to local plugin.`)}if(Q.resolve(e)!==s){let p=Sd(s);return i.push("Expo config plugin insertion: this Mach project is inside a shared Expo workspace."),l?o.push(`Using packaged Expo plugin ${Qt} through the shared workspace wrapper.`):o.push("The shared workspace needs @radhya/mach installed at its Expo root before its selector can apply this product\u2019s config."),o.push(p?"The shared Expo workspace already owns the Mach plugin. Its selector must choose this product\u2019s mach.config.json at build time.":"Add one shared Expo config-plugin wrapper that chooses the active product\u2019s mach.config.json at build time. Mach will not add a fixed product plugin that could affect other apps."),{written:r,skipped:i,notes:o}}let d=l?Qt:fn;if(l)o.push(`Using packaged Expo plugin ${Qt}.`);else{let p=Q.join(s,"plugins/withMachDeepLinks.js");ge.mkdirSync(Q.dirname(p),{recursive:!0}),ge.writeFileSync(p,Bh),r.push(Q.relative(e,p)),o.push(`Using local Expo plugin fallback ${fn}. Install @radhya/mach in this app to use ${Qt}.`)}let c=cr(s,pd);if(c){let p=Q.join(s,c),h=ny(p,d,a);return h==="inserted"?r.push(Q.relative(e,p)):h==="updated"?(r.push(Q.relative(e,p)),o.push(`${c} updated to use ${d}.`)):h==="already"?o.push(`${c} already includes the Mach Expo plugin.`):o.push(`Add "${d}" to the plugins array in ${c}. Mach could not safely auto-edit this dynamic config.`),{written:r,skipped:i,notes:o}}let u=cr(s,fd);if(!u)return i.push("Expo config plugin insertion: no Expo app config was found in this directory or its parents."),{written:r,skipped:i,notes:o};let f=Q.join(s,u);try{let p=JSON.parse(ge.readFileSync(f,"utf-8")),h=p.expo&&typeof p.expo=="object"?p.expo:p,g=Jh(h,d,a);ge.writeFileSync(f,`${JSON.stringify(p,null,2)}
|
|
2438
|
+
`),r.push(Q.relative(e,f)),g==="updated"&&o.push(`${u} updated to use ${d}.`)}catch(p){i.push(`Expo config plugin insertion failed: ${p.message}`)}return{written:r,skipped:i,notes:o}}function Id(e){let t=pi(e),n=cr(t,pd);if(n){let i=ge.readFileSync(Q.join(t,n),"utf-8");return Array.from(i.matchAll(ui)).length>0||Sd(t)?"manual":"missing"}let r=cr(t,fd);if(!r)return"missing";try{let i=JSON.parse(ge.readFileSync(Q.join(t,r),"utf-8")),o=i.expo&&typeof i.expo=="object"?i.expo:i;return Array.isArray(o.plugins)&&o.plugins.some(hd)?"wired":"missing"}catch{return"missing"}}function is(e,t={}){let n=pi(e),r=ud("npx",["--no-install","expo","config","--type","public","--json"],{cwd:n,encoding:"utf-8",timeout:8e3,env:{...process.env,...t,CI:"1",EXPO_NO_TELEMETRY:"1"}});if(r.error||r.status!==0||!r.stdout)return null;let i=r.stdout.trim(),o=i.indexOf("{");if(o<0)return null;try{return JSON.parse(i.slice(o))}catch{return null}}function ry(e){if(!e||typeof e!="object")return null;let n=(Array.isArray(e.ios?.associatedDomains)?e.ios.associatedDomains:[]).map(s=>typeof s=="string"?s.match(/^applinks:(.+)$/)?.[1]:void 0).find(Boolean),i=(Array.isArray(e.android?.intentFilters)?e.android.intentFilters:[]).flatMap(s=>Array.isArray(s?.data)?s.data:[]).find(s=>s?.scheme==="https"&&typeof s.host=="string")?.host,o=n||i;return!o&&!e.scheme&&!e.ios?.bundleIdentifier&&!e.android?.package?null:{domain:o,scheme:typeof e.scheme=="string"?e.scheme:void 0,iosBundleIdentifier:typeof e.ios?.bundleIdentifier=="string"?e.ios.bundleIdentifier:void 0,androidPackage:typeof e.android?.package=="string"?e.android.package:void 0}}function fi(e,t={}){return ry(is(e,t))}import De from"fs";import qe from"path";import{spawnSync as iy}from"child_process";var C=(e,t)=>({level:e,message:t}),oy=(e,t)=>{let n=se(e,t)||{};return{...Object.fromEntries(Object.entries(n.env||{}).filter(i=>typeof i[1]=="string")),MACH_PROFILE:t,EAS_BUILD_PROFILE:t}},_d=(e,t)=>qe.join(e,t.web?.outputDir||"deep-links");function sy(e,t,n="fail"){let r=[],i=_d(e,t),o=qe.join(i,".well-known/apple-app-site-association");if(!Bn(t))return r.push(C("warn","Skipping AASA verification because ios.appleTeamId or ios.bundleIdentifier is missing.")),r;if(!De.existsSync(o))return r.push(C(n,`${qe.relative(e,o)} is missing.`)),r;De.statSync(o).size>128*1024?r.push(C("fail","Apple AASA file is larger than 128 KB.")):r.push(C("pass","Apple AASA file is under 128 KB."));let l=mn(o);if(!l)return r.push(C("fail","Apple AASA file is not valid JSON.")),r;let d=`${t.ios?.appleTeamId}.${t.ios?.bundleIdentifier}`,c=l.applinks?.details||[],u=Array.isArray(c)&&c.some(f=>f.appID===d||f.appIDs?.includes(d));if(r.push(u?C("pass",`AASA contains ${d}.`):C("fail",`AASA does not contain ${d}.`)),t.ios?.webCredentials){let f=l.webcredentials?.apps,p=Array.isArray(f)&&f.includes(d);r.push(p?C("pass",`AASA enables iOS Web Credentials for ${d}.`):C("fail",`AASA is missing iOS Web Credentials for ${d}.`))}return r}function ay(e,t,n="fail"){let r=[],i=_d(e,t),o=qe.join(i,".well-known/assetlinks.json");if(!t.android?.package)return r.push(C("warn","Skipping Android Asset Links verification because android.package is missing.")),r;if(!De.existsSync(o))return r.push(C(n,`${qe.relative(e,o)} is missing.`)),r;let s=mn(o);if(!s||!Array.isArray(s))return r.push(C("fail","assetlinks.json is not a valid JSON array.")),r;let a=s.find(d=>d?.target?.package_name===t.android?.package);r.push(a?C("pass",`assetlinks.json contains ${t.android.package}.`):C("fail",`assetlinks.json does not contain ${t.android.package}.`));let l=a?.target?.sha256_cert_fingerprints;if(r.push(Array.isArray(l)&&l.length>0?C("pass","assetlinks.json has at least one SHA256 fingerprint."):C("warn","assetlinks.json has no SHA256 fingerprints.")),t.android?.loginCredentials){let d=a?.relation,c=Array.isArray(d)&&d.includes("delegate_permission/common.get_login_creds");r.push(c?C("pass","assetlinks.json enables Android Login Credentials."):C("fail","assetlinks.json is missing Android Login Credentials."))}return r}function ly(e,t,n,r,i){if(t.framework!=="expo")return[];let o=[],s=is(e,i),l=(Array.isArray(s?.ios?.associatedDomains)?s.ios.associatedDomains:[]).includes(`applinks:${n.domain}`);o.push(l?C("pass",`Expo iOS config contains applinks:${n.domain}.`):C(r?"warn":"fail",`Expo iOS config does not contain applinks:${n.domain}.`));let c=(Array.isArray(s?.android?.intentFilters)?s.android.intentFilters:[]).flatMap(f=>Array.isArray(f?.data)?f.data:[]).some(f=>f?.scheme==="https"&&f.host===n.domain);if(o.push(c?C("pass",`Expo Android config contains App Link host ${n.domain}.`):C(r?"warn":"fail",`Expo Android config does not contain App Link host ${n.domain}.`)),r)return o.push(C("warn","mach.config.json is missing deepLinks; values were inferred from Expo config. Run `mach deeplink setup` to persist Mach metadata and generate hosted files.")),o;let u=Id(e);return u==="wired"?o.push(C("pass","Expo deep link plugin is wired into Expo config and derives values from mach.config.json.")):u==="manual"&&l&&c?o.push(C("pass","Expo resolved config contains the deep-link settings from the dynamic config.")):u==="manual"?o.push(C("warn","Expo deep link plugin exists, but dynamic or missing Expo config means manual plugin insertion must be confirmed.")):l&&c?o.push(C("warn","Expo plugin is not wired, but resolved Expo config already contains the deep-link settings.")):o.push(C("fail","Expo deep link plugin is missing or not wired into Expo config.")),o}function cy(e,t,n){if(t.framework!=="react-native")return[];let r=[],i=qe.join(e,"android/app/src/main/AndroidManifest.xml");if(De.existsSync(i)){let s=De.readFileSync(i,"utf-8");r.push(s.includes(`android:host="${n.domain}"`)?C("pass","AndroidManifest.xml contains the App Links host."):C("warn","AndroidManifest.xml does not contain the App Links host. Native patching is planned for a later phase."))}let o=qe.join(e,"ios");if(De.existsSync(o)){let a=De.readdirSync(o,{recursive:!0}).filter(l=>typeof l=="string"&&l.endsWith(".entitlements")).some(l=>De.readFileSync(qe.join(o,l),"utf-8").includes(`applinks:${n.domain}`));r.push(a?C("pass","iOS entitlements contain the associated domain."):C("warn","iOS entitlements do not contain the associated domain. Native patching is planned for a later phase."))}return r}function dy(e,t,n){if(t.framework!=="flutter")return[];let r=[],i;try{i=ve(e,t.appDirectory,{requireAppDirectory:!0}).appRoot}catch(a){return[C("fail",a.message||"Could not resolve the Flutter app directory.")]}let o=qe.join(i,"android/app/src/main/AndroidManifest.xml");if(De.existsSync(o)){let a=De.readFileSync(o,"utf8");r.push(a.includes(`android:host="${n.domain}"`)&&a.includes('android:autoVerify="true"')?C("pass",`Flutter Android manifest verifies https://${n.domain}.`):C("fail","Flutter Android manifest is missing its verified App Links intent filter.")),r.push(a.includes(`android:scheme="${n.scheme}"`)?C("pass",`Flutter Android manifest contains ${n.scheme}://.`):C("fail",`Flutter Android manifest is missing ${n.scheme}://.`))}else r.push(C("warn","Flutter Android project is not present."));let s=qe.join(i,"ios");if(De.existsSync(s)){let l=De.readdirSync(s,{recursive:!0}).filter(c=>typeof c=="string"&&c.endsWith(".entitlements")).find(c=>De.readFileSync(qe.join(s,c),"utf8").includes(`applinks:${n.domain}`));r.push(l?C("pass",`Flutter iOS entitlements contain applinks:${n.domain}.`):C("fail","Flutter iOS entitlements are missing the associated domain."));let d=De.readdirSync(s).filter(c=>c.endsWith(".xcodeproj")).map(c=>qe.join(s,c,"project.pbxproj")).filter(c=>De.existsSync(c));r.push(d.some(c=>De.readFileSync(c,"utf8").includes("CODE_SIGN_ENTITLEMENTS"))?C("pass","Flutter Runner target has an entitlements build setting."):C("fail","Flutter Runner target is not connected to an entitlements file."))}else r.push(C("warn","Flutter iOS project is not present."));return r}async function os(e,t){let n=[];try{let r=await fetch(e,{redirect:"manual"});if(r.status>=300&&r.status<400&&!t)return n.push(C("fail",`${e} redirects. Apple AASA endpoints must not redirect.`)),n;n.push(r.status===200?C("pass",`${e} returned HTTP 200.`):C("fail",`${e} returned HTTP ${r.status}.`));let i=r.headers.get("content-type")||"";!i.includes("application/json")&&!i.includes("text/json")&&n.push(C("warn",`${e} content-type is "${i||"missing"}"; application/json is recommended.`)),JSON.parse(await r.text()),n.push(C("pass",`${e} contains valid JSON.`))}catch(r){n.push(C("fail",`${e} check failed: ${r.message}`))}return n}async function uy(e){let t=e.domain;return(await Promise.all([os(`https://${t}/.well-known/apple-app-site-association`,!1),os(`https://${t}/apple-app-site-association`,!1),os(`https://${t}/.well-known/assetlinks.json`,!0)])).flat()}function py(e){let t=e.android?.package;if(!t)return[C("warn","Cannot print Android device verification commands because android.package is missing.")];let r=iy("adb",["version"],{encoding:"utf-8"}).status===0?"Run":"Install Android platform-tools, then run";return[C("info",`${r}: adb shell pm set-app-links --package ${t} 0 all`),C("info",`${r}: adb shell pm verify-app-links --re-verify ${t}`),C("info",`${r}: adb shell pm get-app-links ${t}`)]}async function ss(e,t,n){let r=n.profile||t.deepLinks?.profile||K(t,"store","production"),i=t.framework==="expo"?oy(t,r):{},o=t.framework==="expo"?fi(e,i):null,s=t.framework==="expo"?Nr(t,o,r,e):null,a=!t.deepLinks&&!!s,l=t.deepLinks?Gt(t,{profile:r,cwd:e,expoHints:o}):s,d=[];if(!l)return[C("fail","mach.config.json is missing deepLinks and Mach could not infer existing deep-link settings. Run `mach deeplink setup`.")];d.push(l.baseUrl?C("pass","deepLinks.baseUrl is configured."):C("fail","deepLinks.baseUrl is missing.")),d.push(l.domain?C("pass","deepLinks.domain is configured."):C("fail","deepLinks.domain is missing.")),d.push(l.scheme?C("pass","deepLinks.scheme is configured."):C("fail","deepLinks.scheme is missing."));let c=a?"warn":"fail";return d.push(...sy(e,l,c)),d.push(...ay(e,l,c)),d.push(...ly(e,t,l,a,i)),d.push(...cy(e,t,l)),d.push(...dy(e,t,l)),n.live&&d.push(...await uy(l)),n.androidDevice&&d.push(...py(l)),d}import $e from"fs";import Mt from"path";var xt=(e,t)=>Mt.relative(e,t).split(Mt.sep).join("/"),vd=e=>e.replace(/[.*+?^${}()|[\]\\]/g,"\\$&");function wd(e,t,n){let r=e.lastIndexOf(t);return r<0?e:`${e.slice(0,r)}${n}${e.slice(r)}`}function fy(e,t){let n=[],r=[],i=[],o=Mt.join(e,"android/app/src/main/AndroidManifest.xml");if(!$e.existsSync(o))return i.push("AndroidManifest.xml is not present; Android App Links were not patched."),{written:n,skipped:r,notes:i};let s=$e.readFileSync(o,"utf8"),a=/<activity\b[\s\S]*?<intent-filter[\s\S]*?android\.intent\.action\.MAIN[\s\S]*?<\/intent-filter>[\s\S]*?<\/activity>/m.exec(s);if(!a||a.index===void 0)return i.push("Could not safely identify Flutter's launcher activity; add the App Links intent filter manually."),{written:n,skipped:r,notes:i};let l=a[0];if(!l.includes(`android:host="${t.domain}"`)){let c=`
|
|
2434
2439
|
<!-- MACH verified App Link -->
|
|
2435
2440
|
<intent-filter android:autoVerify="true">
|
|
2436
2441
|
<action android:name="android.intent.action.VIEW" />
|
|
@@ -2438,7 +2443,7 @@ module.exports = function withMachDeepLinks(config, options) {
|
|
|
2438
2443
|
<category android:name="android.intent.category.BROWSABLE" />
|
|
2439
2444
|
<data android:scheme="https" android:host="${t.domain}" />
|
|
2440
2445
|
</intent-filter>
|
|
2441
|
-
`;l=
|
|
2446
|
+
`;l=wd(l,"</activity>",c)}if(t.scheme&&!l.includes(`android:scheme="${t.scheme}"`)){let c=`
|
|
2442
2447
|
<!-- MACH custom URI scheme -->
|
|
2443
2448
|
<intent-filter>
|
|
2444
2449
|
<action android:name="android.intent.action.VIEW" />
|
|
@@ -2446,7 +2451,7 @@ module.exports = function withMachDeepLinks(config, options) {
|
|
|
2446
2451
|
<category android:name="android.intent.category.BROWSABLE" />
|
|
2447
2452
|
<data android:scheme="${t.scheme}" />
|
|
2448
2453
|
</intent-filter>
|
|
2449
|
-
`;l=
|
|
2454
|
+
`;l=wd(l,"</activity>",c)}let d=`${s.slice(0,a.index)}${l}${s.slice(a.index+a[0].length)}`;return d===s?r.push(xt(e,o)):($e.writeFileSync(o,d),n.push(xt(e,o))),{written:n,skipped:r,notes:i}}function my(e,t){if($e.mkdirSync(Mt.dirname(e),{recursive:!0}),!$e.existsSync(e))return $e.writeFileSync(e,`<?xml version="1.0" encoding="UTF-8"?>
|
|
2450
2455
|
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
|
|
2451
2456
|
<plist version="1.0">
|
|
2452
2457
|
<dict>
|
|
@@ -2461,7 +2466,7 @@ module.exports = function withMachDeepLinks(config, options) {
|
|
|
2461
2466
|
<array>
|
|
2462
2467
|
<string>applinks:${t}</string>
|
|
2463
2468
|
</array>
|
|
2464
|
-
</dict>`);return i===n?!1:($e.writeFileSync(e,i),!0)}function
|
|
2469
|
+
</dict>`);return i===n?!1:($e.writeFileSync(e,i),!0)}function gy(e,t){if(!$e.existsSync(e))return!1;let n=$e.readFileSync(e,"utf8");if(new RegExp(`<string>\\s*${vd(t)}\\s*</string>`).test(n))return!1;let r=` <key>CFBundleURLTypes</key>
|
|
2465
2470
|
<array>
|
|
2466
2471
|
<dict>
|
|
2467
2472
|
<key>CFBundleTypeRole</key>
|
|
@@ -2472,24 +2477,24 @@ module.exports = function withMachDeepLinks(config, options) {
|
|
|
2472
2477
|
</array>
|
|
2473
2478
|
</dict>
|
|
2474
2479
|
</array>
|
|
2475
|
-
`,i=n.replace("</dict>",`${r}</dict>`);return i===n?!1:($e.writeFileSync(e,i),!0)}function
|
|
2480
|
+
`,i=n.replace("</dict>",`${r}</dict>`);return i===n?!1:($e.writeFileSync(e,i),!0)}function hy(e,t){let n=[],r=[],i=[],o=Mt.join(e,"ios");if(!$e.existsSync(o))return i.push("The iOS project is not present; Associated Domains were not patched."),{written:n,skipped:r,notes:i};let s=$e.readdirSync(o).find(u=>u.endsWith(".xcodeproj")),a=s?.replace(/\.xcodeproj$/,"")||"Runner",l=s?Mt.join(o,s,"project.pbxproj"):void 0,d=Mt.join(o,a,`${a}.entitlements`);if(my(d,t.domain)?n.push(xt(e,d)):r.push(xt(e,d)),l&&$e.existsSync(l)){let u=$e.readFileSync(l,"utf8"),f=`${a}/${a}.entitlements`;if(u.includes("CODE_SIGN_ENTITLEMENTS"))u.includes(f)?r.push(xt(e,l)):i.push(`The Xcode project already uses a different entitlements file. Add applinks:${t.domain} to that configured file.`);else{let p=t.ios?.bundleIdentifier,h=!1,g=u.replace(/buildSettings = \{([\s\S]*?)\n(\s*)\};/g,(y,b,A)=>p&&!new RegExp(`PRODUCT_BUNDLE_IDENTIFIER\\s*=\\s*"?${vd(p)}"?;`).test(b)||!b.includes("PRODUCT_BUNDLE_IDENTIFIER")?y:(h=!0,`buildSettings = {${b}
|
|
2476
2481
|
${A} CODE_SIGN_ENTITLEMENTS = ${f};
|
|
2477
|
-
${A}};`));h?($e.writeFileSync(l,g),n.push(xt(e,l))):i.push(`Set CODE_SIGN_ENTITLEMENTS to ${f} for the Runner target; Mach could not identify its build settings safely.`)}}let c=
|
|
2478
|
-
`),e)},
|
|
2482
|
+
${A}};`));h?($e.writeFileSync(l,g),n.push(xt(e,l))):i.push(`Set CODE_SIGN_ENTITLEMENTS to ${f} for the Runner target; Mach could not identify its build settings safely.`)}}let c=Mt.join(o,a,"Info.plist");return gy(c,t.scheme)?n.push(xt(e,c)):$e.existsSync(c)&&r.push(xt(e,c)),{written:n,skipped:r,notes:i}}function Rd(e,t){let n=fy(e,t),r=hy(e,t);return{written:[...n.written,...r.written],skipped:[...n.skipped,...r.skipped],notes:[...n.notes,...r.notes]}}var Ft=()=>process.stdin.isTTY&&process.stdout.isTTY,Pd=`${m.npmScope}/mach`,tn=()=>{yy("Operation cancelled."),process.exit(0)},ur=e=>{if(typeof e!="string")return;let t=e.trim();return t.length>0?t:void 0},ot=(...e)=>{for(let t of e){let n=ur(t);if(n)return n}},Lt=async(e,t,n,r,i)=>{if(t)return t;if(i||!Ft()){if(r)throw new Error(`${e.replace(/:$/,"")} is required. Pass it as an option or run interactively.`);return}let o=await Cd({message:e,initialValue:t||"",placeholder:n,validate(s){if(r&&s.trim().length===0)return"Required."}});return en(o)&&tn(),ur(o)},hi=async(e,t,n)=>{if(n||!Ft())return t;let r=await ls({message:e,initialValue:t});return en(r)&&tn(),!!r};async function Ey(e,t,n){let r=ce(e.framework),i=ce(t);if(i)return i;if(r)return r;let o=Zs();if(n||!Ft())return o;let s=await Dd({message:`Which framework should ${m.name} configure?`,initialValue:o,options:[{value:"expo",label:"Expo"},{value:"react-native",label:"React Native"},{value:"flutter",label:"Flutter"}]});return en(s)&&tn(),s}var dr=e=>e==="ios"||e==="all",mi=e=>e==="android"||e==="all";async function Iy(e){let t=ur(e.projectId);if(!t||!we()?.token)return[];try{let n=await I.get(`/projects/${encodeURIComponent(t)}/web`,{timeout:15e3});return xr(n.data||{})}catch{return[]}}async function _y(e){let t=ot(e.options.baseUrl,e.existingBaseUrl,e.options.domain?`https://${e.options.domain}`:void 0,e.expoBaseUrl);if(t)return await Lt("Deep link base URL:",t,"https://app.example.com",!0,e.yes)||t;let n=await Iy(e.config);if(n.length>0){let r=n[0];if(e.yes||!Ft())return Dn.info(Be.dim(`Using Mach Web Hosting Production address: ${r.url}`)),r.url;let i=await Dd({message:"Choose the stable HTTPS host for deep links:",initialValue:r.url,options:[...n.map(o=>({value:o.url,label:o.source==="mach"?`Mach Web Hosting \xB7 Production (${o.hostname})`:`Active custom domain \xB7 Production (${o.hostname})`,hint:o.source==="mach"?"Recommended default":"Certificate active"})),{value:"__manual__",label:"Enter another HTTPS URL manually"}]});if(en(i)&&tn(),i!=="__manual__")return String(i)}return await Lt("Deep link base URL:",void 0,"https://app.example.com",!0,e.yes)}var yi=(e,...t)=>ot(...t.flatMap(n=>[e?.[n],e?.meta?.[n]])),Td=e=>{let t=String(e||"").trim().toLowerCase();return t==="production"||t==="prod"||t==="release"?"store":t==="staging"||t==="stage"||t==="ad-hoc"?"adhoc":t},Od=(e,t,n)=>{let r=yi(e,"bundleId","bundleIdentifier","packageName"),i=Td(yi(e,"distributionType")),o=0;return r===t?o+=100:(r==="*"||!r)&&(o+=10),n&&i===n&&(o+=20),o};async function wy(e){let t=ur(e.config.projectId);if(!(!t||!e.packageName||!we()?.token))try{let n=await I.get("/credentials/resolve",{params:{projectId:t,platform:"android",bundleId:e.packageName,distributionType:e.distribution||"store"},timeout:15e3}),i=(n.data?.status==="success"&&Array.isArray(n.data?.credentials)?n.data.credentials:[]).filter(a=>a?.type==="android_keystore"&&a?.downloadUrl).sort((a,l)=>{let d=Od(l,e.packageName,e.distribution||"")-Od(a,e.packageName,e.distribution||"");return d!==0?d:Number(l?.createdAt||0)-Number(a?.createdAt||0)})[0];if(!i)return;let o=yi(i,"keystorePassword","storePassword","password");if(!o)return;let s=await Ay.get(i.downloadUrl,{responseType:"arraybuffer",timeout:3e4});return ld({keystore:Buffer.from(s.data),keystorePassword:o,alias:yi(i,"alias","keyAlias")})}catch{return}}async function vy(e){let t=e.existing?.android?.sha256CertFingerprints||[],n=e.options.androidFingerprint||[],r=e.config.android?.sha256CertFingerprints||[],i=e.profileAndroid.sha256CertFingerprints||[],o=[...n,...t,...i,...r].filter(a=>typeof a=="string"&&a.trim().length>0);if(!mi(e.platform))return Array.from(new Set(o));if(o.length===0){let a=await wy({config:e.config,packageName:e.androidPackage,distribution:e.distribution});a&&(e.yes||!Ft()||await hi("Use SHA-256 fingerprint detected from this project's Mach-managed Android keystore?",!0,!1))&&(Dn.info(Be.dim("Detected the Android signing certificate from the Mach-managed keystore.")),o.push(a))}if(e.yes||!Ft())return Array.from(new Set(o));if(o.length>0&&!await hi("Add Google Play App Signing SHA-256 fingerprint(s) now?",!1,!1))return Array.from(new Set(o));let s=await Cd({message:o.length>0?"Google Play App Signing SHA256 fingerprint(s):":"Android SHA256 fingerprint(s) (optional now, required for verified App Links):",placeholder:"AA:BB:CC:... (comma-separated for multiple)",validate(a){if(!a.trim())return;if(es(a).invalid.length>0)return"Enter full SHA-256 fingerprint(s), separated by commas."}});return en(s)&&tn(),ur(s)?Array.from(new Set([...o,...es(s).fingerprints])):Array.from(new Set(o))}async function Ry(e,t,n){if(t!=="expo"||!gd(e)||n.installPlugin===!1)return!1;if(n.installPlugin===!0||n.yes)return!0;if(!Ft())return!1;let r=await ls({message:`Install ${Pd} locally so Expo can use ${Pd}/expo-plugin?`,initialValue:!0});return en(r)&&tn(),!!r}async function $y(e,t){let n=!!t.yes,r=t.profile||e.deepLinks?.profile||K(e,"store","production"),i=se(e,r)||{},o={...Object.fromEntries(Object.entries(i.env||{}).filter(R=>typeof R[1]=="string")),MACH_PROFILE:r,EAS_BUILD_PROFILE:r},s=i.ios||{},a=i.android||{},l=e.submit?.[r]?.ios||{},d=e.submit?.[r]?.android||{},c=ft(e,r),u=await Ey(e,t.framework,n),f=Qs(e,Xs(t.platform),i),p=e.deepLinks,g=u==="expo"&&(!ot(t.baseUrl,p?.baseUrl,t.domain?`https://${t.domain}`:void 0)||!ot(t.scheme,p?.scheme,s.scheme,e.scheme,e.slug,e.name)||dr(f)&&!ot(t.iosBundleId,p?.ios?.bundleIdentifier,s.bundleIdentifier,s.bundleId,e.ios?.bundleIdentifier)||mi(f)&&!ot(t.androidPackage,p?.android?.package,a.package,a.applicationId,e.android?.package,d.packageName,d.package))?Nr(e,fi(process.cwd(),o),r,process.cwd()):null,y=t.output||p?.web?.outputDir||kr(process.cwd(),e),b=await _y({config:e,options:t,existingBaseUrl:p?.baseUrl,expoBaseUrl:g?.baseUrl,yes:n}),A=jn(b),v=t.baseUrl?new URL(A).hostname:void 0,E=await Lt("Associated domain:",t.domain||v||p?.domain||g?.domain||new URL(A).hostname,"app.example.com",!0,n),L=Tr(await Lt("URI scheme:",ot(t.scheme,p?.scheme,s.scheme,e.scheme,g?.scheme,e.slug,e.name,"app"),"myapp",!0,n)||"app"),U=dr(f)?await Lt("iOS bundle identifier:",ot(t.iosBundleId,p?.ios?.bundleIdentifier,s.bundleIdentifier,s.bundleId,e.ios?.bundleIdentifier,g?.ios?.bundleIdentifier),"com.example.app",!0,n):p?.ios?.bundleIdentifier||e.ios?.bundleIdentifier,j=dr(f)?await Lt("Apple Team ID:",ot(t.appleTeamId,p?.ios?.appleTeamId,s.appleTeamId,s.developerTeamId,l.appleTeamId,l.developerTeamId,e.ios?.appleTeamId,e.ios?.developerTeamId,c.teamId),"ABCDE12345",!0,n):p?.ios?.appleTeamId||e.ios?.appleTeamId,H=dr(f)?await Lt("App Store ID (optional, for Smart App Banner):",ot(t.appStoreId,p?.ios?.appStoreId,s.ascAppId,l.ascAppId,e.ios?.ascAppId),"1234567890",!1,n):p?.ios?.appStoreId,te=dr(f)?await hi("Enable iOS Web Credentials for HTTPS OAuth callbacks?",!!p?.ios?.webCredentials,n):!!p?.ios?.webCredentials,ie=mi(f)?await Lt("Android package name:",ot(t.androidPackage,p?.android?.package,a.package,a.applicationId,e.android?.package,d.packageName,d.package,g?.android?.package),"com.example.app",!0,n):p?.android?.package||e.android?.package,Ce=await vy({config:e,options:t,existing:p,profileAndroid:a,androidPackage:ie,distribution:Td(i.distribution),platform:f,yes:n}),S=mi(f)?await hi("Enable Android Login Credentials for website password and passkey sharing?",!!p?.android?.loginCredentials,n):!!p?.android?.loginCredentials,D=ea(e,{...t,baseUrl:A,domain:E,scheme:L,output:y,appleTeamId:j,appStoreId:H,androidFingerprint:Ce});return D.ios={...D.ios||{},bundleIdentifier:U,appleTeamId:j,appStoreId:H,webCredentials:te},D.android={...D.android||{},package:ie,sha256CertFingerprints:Array.from(new Set(Ce)),loginCredentials:S},{framework:u,platform:f,deepLinks:D}}var as=(e,t)=>{t.length!==0&&by(t.map(n=>`- ${n}`).join(`
|
|
2483
|
+
`),e)},kd=e=>e.filter(t=>t.level==="fail").length;function Nd(e){for(let t of e){let n=t.level==="pass"?Be.green("PASS"):t.level==="warn"?Be.yellow("WARN"):t.level==="info"?Be.cyan("INFO"):Be.red("FAIL");Dn.info(`${n} ${t.message}`)}}async function xd(e){try{let t=process.cwd(),n=$d.join(t,m.configFileName),r=W()||{};if(!Sy.existsSync(n)){let A=e.yes||!Ft()?!0:await ls({message:`${m.configFileName} was not found. Create one with deep link settings?`,initialValue:!0});if(en(A)&&tn(),!A)return}let{framework:i,deepLinks:o}=await $y(r,e),s=e.profile||r.deepLinks?.profile||K(r,"store","production"),a=ta(r,i,o,s),l=i==="flutter"?ve(t,a.appDirectory,{requireAppDirectory:!0}).appRoot:t,d=na(a,t),c=ia(t,o),u=await Ry(t,i,e),f=i==="expo"?Ed(t,o,{installPackage:u}):i==="flutter"?Rd(l,o):{written:[],skipped:[],notes:["React Native native patching is planned for a later phase. Hosted files were generated now."]},p=[$d.relative(t,d),...c.written,...f.written],h=[...c.skipped,...f.skipped],g=[...c.notes,...f.notes];as("Written",p),as("Skipped",h),as("Notes",g);let y=await ss(t,a,{});Nd(y);let b=kd(y);if(b>0){gi(Be.yellow(`Deep link setup finished with ${b} verification issue(s).`));return}gi(Be.green("Deep link setup complete."))}catch(t){Dn.error(Be.red(t.message||"Deep link setup failed.")),process.exit(1)}}async function Md(e){try{let t=W();t||(Dn.error(Be.red(`No ${m.configFileName} found in the current directory.`)),process.exit(1));let n=await ss(process.cwd(),t,e);Nd(n);let r=kd(n);r>0&&(gi(Be.red(`Deep link verification failed with ${r} issue(s).`)),process.exit(1)),gi(Be.green("Deep link verification passed."))}catch(t){Dn.error(Be.red(t.message||"Deep link verification failed.")),process.exit(1)}}import{log as St,spinner as Ld}from"@clack/prompts";import Ut from"chalk";var Py=e=>{let t=String(e||"").trim().toLowerCase();if(t==="ios"||t==="android")return t;throw new Error("Pass --platform ios or --platform android.")},Oy=e=>{let t=Number(e);if(!Number.isFinite(t))throw new Error("Counter value must be a non-negative integer.");let n=Math.floor(t);if(n<0)throw new Error("Counter value must be a non-negative integer.");return n},Dy=(e,t,n)=>{let r=String(n.scope||"").trim();if(r)return r;let i=n.profile||K(t,"store","production"),o=e==="android"?n.package||n.androidPackage:n.bundleId||n.iosBundleIdentifier;if(o)return String(o).trim();let s=e==="android"?Er(t,i):Ir(t,i);if(s)return s;throw new Error(e==="android"?`Could not resolve Android package. Set android.package in ${m.configFileName}, or pass --package/--scope.`:`Could not resolve iOS bundle identifier. Set ios.bundleIdentifier in ${m.configFileName}, or pass --bundle-id/--scope.`)},Cy=()=>{let e=W();if(!e)throw new Error(`No ${m.configFileName} found in the current directory. Run \`${m.nameLower} init\` or \`${m.nameLower} link\` first.`);if(!e.projectId)throw new Error(`${m.configFileName} is missing projectId.`);return e},cs=e=>{St.info(Ut.bgBlue.white(" Native Version Counter ")),St.info(`${Ut.blue("Platform:")} ${e.platform}`),St.info(`${Ut.blue("Scope:")} ${e.scope}`),St.info(`${Ut.blue("Current DB value:")} ${e.current}`),St.info(`${Ut.blue("Next build will use:")} ${e.next}`),e.seeded||St.warn(Ut.yellow("This counter has not been seeded yet. Existing store apps should run `mach version seed` once before auto-version builds."))};async function ds(e,t={}){if(!we()){St.error(`You are not logged in. Run \`${m.nameLower} login\` first.`);return}try{let r=Cy(),i=Py(t.platform),o=Dy(i,r,t),s=String(r.projectId);if(e==="show"){let c=Ld();t.json||c.start("Fetching native version counter...");let{data:u}=await I.get(`/projects/${s}/version-counters`,{params:{platform:i,scope:o}});if(u.status!=="success")throw new Error(u.message||"Failed to fetch version counter.");t.json?console.log(JSON.stringify(u.counter,null,2)):(c.stop("Fetched native version counter."),cs(u.counter));return}let a=Oy(t.value),l=Ld();t.json||l.start("Seeding native version counter...");let{data:d}=await I.post(`/projects/${s}/version-counters/seed`,{platform:i,scope:o,value:a,force:!!t.force});if(d.status!=="success")throw new Error(d.message||"Failed to seed version counter.");t.json?console.log(JSON.stringify(d.counter,null,2)):(l.stop(`Seeded ${i} counter for ${o}.`),cs(d.counter))}catch(r){let i=r?.response?.data?.message||r?.message||"Version command failed.";if(r?.response?.data?.counter&&!t.json){St.error(Ut.red(i)),cs(r.response.data.counter);return}t.json?console.log(JSON.stringify({status:"error",message:i},null,2)):St.error(Ut.red(i))}}import{log as Je,spinner as mr,text as Fd,select as Ud,confirm as Ty,isCancel as pr,cancel as fr,outro as gr,note as ky}from"@clack/prompts";import ee from"chalk";import{execSync as Ny}from"child_process";async function xy(){try{let e=Ny("xcrun devicectl list devices --json-output -",{stdio:["pipe","pipe","pipe"]}).toString();return(JSON.parse(e).result?.devices||[]).filter(r=>r.connectionProperties?.transportType==="wired"||r.connectionProperties?.transportType==="localNetwork").map(r=>({udid:r.identifier,name:r.deviceProperties?.name||"Unknown Device",model:r.hardwareProperties?.marketingName||"iPhone"}))}catch{return[]}}var jd=e=>e?.trim().toUpperCase()||void 0;function Bd(e){let t=W(),n=t?ft(t):{},r=jd(e.teamId),i=r||n.teamId;return{...n,teamId:i,developerTeamId:r||n.developerTeamId||i}}async function My(e){let t=e.udid,n=e.name,r=Bd(e),i=r.teamId;if(!t){let s=mr();s.start("Scanning for connected iOS devices...");let a=await xy();if(s.stop(a.length>0?`Found ${a.length} device(s)`:"No devices detected"),a.length===1)t=a[0].udid,n=n||a[0].name,Je.info(`Detected: ${ee.bold(n)} (${ee.dim(t.substring(0,12)+"...")})`);else if(a.length>1){let l=await Ud({message:"Select a device to register:",options:a.map(c=>({value:c.udid,label:`${c.name} (${c.model})`,hint:c.udid.substring(0,12)+"..."}))});if(pr(l)){fr("Cancelled");return}t=l;let d=a.find(c=>c.udid===t);n=n||d.name}else{Je.info(ee.dim("No connected devices found. Enter UDID manually."));let l=await Fd({message:"Device UDID:",placeholder:"00008101-XXXXXXXXXXXX",validate(d){if(d.length<10)return"UDID seems too short"}});if(pr(l)){fr("Cancelled");return}t=l}}if(!n){let s=await Fd({message:"Device name:",placeholder:"Nitesh's iPhone",validate(a){if(a.length===0)return"Name is required"}});if(pr(s)){fr("Cancelled");return}n=s}let o=mr();o.start("Registering device...");try{await I.post("/devices",{udid:t,name:n,platform:"ios",addedVia:"cli",teamId:i,teamName:r.teamName,developerTeamId:r.developerTeamId,appStoreConnectTeamId:r.appStoreConnectTeamId,providerId:r.providerId,providerName:r.providerName}),o.stop(ee.green("Device registered!")),Je.info(` ${ee.bold("Name:")} ${n}`),Je.info(` ${ee.bold("UDID:")} ${ee.dim(t)}`),i&&Je.info(` ${ee.bold("Team:")} ${ee.dim(i)}`)}catch(s){o.stop(ee.red("Failed to register device")),Je.error(s.response?.data?.message||s.message)}gr(ee.blue("---"))}async function Ly(e={}){let t=jd(e.teamId),n=mr();n.start("Fetching registered devices...");try{let i=(await I.get("/devices",t?{params:{teamId:t}}:void 0)).data.devices||[];if(n.stop(`${i.length} device(s) registered${t?` for team ${t}`:""}`),i.length===0){Je.info(ee.dim(`No devices registered yet. Run \`${m.nameLower} device register\` to add one.`)),gr(ee.blue("---"));return}let o=i.map(s=>{let a=new Date(s.createdAt).toLocaleDateString();return` ${ee.bold(s.name.padEnd(24))} ${ee.dim(s.udid.padEnd(28))} ${ee.dim((s.teamId||"-").padEnd(12))} ${ee.cyan((s.addedVia||"-").padEnd(10))} ${ee.dim(a)}`});ky(` ${ee.bold("Name".padEnd(24))} ${"UDID".padEnd(28)} ${"Team".padEnd(12)} ${"Via".padEnd(10)} Date
|
|
2479
2484
|
`+o.join(`
|
|
2480
|
-
`),"Registered Devices")}catch(r){n.stop(ee.red("Failed to fetch devices")),Je.error(r.response?.data?.message||r.message)}gr(ee.blue("---"))}async function
|
|
2481
|
-
`),d=
|
|
2482
|
-
${r.stderr||""}`,o=Array.from(new Set(i.match(/GHSA-[A-Za-z0-9-]+/g)||[]));for(let s of o)t.push({id:`DEP-${String(n++).padStart(3,"0")}`,title:`Dart package security advisory ${s}`,description:"The Dart dependency resolver reported that a resolved package is affected by a published security advisory.",severity:"high",category:"dependencies",recommendation:`Review https://github.com/advisories/${s}, assess exposure, and update to a non-affected compatible package version.`});try{let s=JSON.parse(r.stdout||"{}");for(let a of s.packages||[]){if(!["direct","dev"].includes(String(a.kind||"")))continue;let l=
|
|
2483
|
-
`),f=
|
|
2484
|
-
`),c=
|
|
2485
|
-
`),c=
|
|
2486
|
-
`);/__DEV__/.test(h)||n.push({id:`DBG-${String(r++).padStart(3,"0")}`,title:"Sensitive data in console log",description:"Console log may expose sensitive data (token, password, etc.) in production",severity:"medium",category:"debug",file:c,line:u+1,recommendation:"Wrap in __DEV__ check or remove sensitive data from console output."})}}}return{category:"debug",label:"Debug/Dev Flags",findings:n,durationMs:0}}import eu from"fs";import ps from"path";var zy=new Set(["androidx.work.impl.background.systemjob.SystemJobService","androidx.work.impl.diagnostics.DiagnosticsReceiver","com.google.firebase.iid.FirebaseInstanceIdReceiver","com.google.android.gms.auth.api.signin.RevocationBoundService","androidx.profileinstaller.ProfileInstallReceiver","com.google.firebase.messaging.FirebaseMessagingService","com.google.android.gms.measurement.AppMeasurementService","com.google.android.gms.measurement.AppMeasurementJobService"]);function Ky(e){let t=[ps.join(e,"android","app","src","main","AndroidManifest.xml"),ps.join(e,"android","AndroidManifest.xml")];for(let n of t)if(eu.existsSync(n))return n;return null}async function tu(e,t){let n=[],r=1,i=Ky(e);if(!i)return{category:"manifest",label:"Android Manifest",findings:[],durationMs:0,error:"No AndroidManifest.xml found in the configured app directory."};let o=eu.readFileSync(i,"utf-8"),s=ps.relative(e,i),a=/<(activity|activity-alias|service|receiver|provider)\s+([^>]*?)(?:\/>|>([\s\S]*?)<\/\1\s*>)/g,l;for(;(l=a.exec(o))!==null;){let d=l[1],c=l[2],u=l[3]||"",p=c.match(/android:name="([^"]+)"/)?.[1]||"unknown";if(zy.has(p))continue;let h=/android:exported="true"/.test(c),g=/android:permission="/.test(c),y=(d==="activity"||d==="activity-alias")&&/android:name="android\.intent\.action\.MAIN"/.test(u)&&/android:name="android\.intent\.category\.LAUNCHER"/.test(u);h&&!g&&!y&&n.push({id:`MAN-${String(r++).padStart(3,"0")}`,title:`Exported ${d}: ${p.split(".").pop()}`,description:`${p} is exported=true without android:permission protection`,severity:"medium",category:"manifest",file:s,recommendation:'Set android:exported="false" or add an android:permission attribute.'})}return/android:allowBackup="true"/.test(o)&&n.push({id:`MAN-${String(r++).padStart(3,"0")}`,title:"allowBackup is enabled",description:'android:allowBackup="true" allows data extraction via ADB backup',severity:"medium",category:"manifest",file:s,recommendation:'Set android:allowBackup="false" in native configuration (or via your framework build configuration).',autoFixable:!0}),/android:debuggable="true"/.test(o)&&n.push({id:`MAN-${String(r++).padStart(3,"0")}`,title:"App is debuggable",description:'android:debuggable="true" allows attaching a debugger in production',severity:"critical",category:"manifest",file:s,recommendation:"Ensure debuggable is false for production builds. This is usually set automatically for release builds."}),{category:"manifest",label:"Android Manifest",findings:n,durationMs:0}}import vi from"fs";import fs from"path";function Wy(e){let t=fs.join(e,"ios");if(!vi.existsSync(t))return null;let n=vi.readdirSync(t,{withFileTypes:!0});for(let r of n){if(!r.isDirectory()||r.name==="Pods"||r.name.startsWith("."))continue;let i=fs.join(t,r.name,"Info.plist");if(vi.existsSync(i))return i}return null}async function nu(e,t){let n=[],r=1,i=Wy(e);if(!i)return{category:"ats",label:"iOS ATS Config",findings:[],durationMs:0,error:"No Info.plist found in the configured app directory."};let o=vi.readFileSync(i,"utf-8"),s=fs.relative(e,i),a=o.match(/<key>NSAppTransportSecurity<\/key>\s*<dict>([\s\S]*?)<\/dict>/);if(a){let l=a[1];/<key>NSAllowsArbitraryLoads<\/key>\s*<true\s*\/>/.test(l)&&n.push({id:`ATS-${String(r++).padStart(3,"0")}`,title:"ATS disabled \u2014 NSAllowsArbitraryLoads",description:"App Transport Security is completely disabled. All HTTP connections are allowed.",severity:"critical",category:"ats",file:s,recommendation:"Remove NSAllowsArbitraryLoads or set to false. Use domain-specific exceptions only if absolutely necessary."});let d=l.match(/<key>NSExceptionDomains<\/key>\s*<dict>([\s\S]*?)<\/dict>/);if(d){let c=d[1].match(/<key>([^<]+)<\/key>/g);if(c)for(let u of c){let f=u.replace(/<\/?key>/g,"");f!=="NSExceptionDomains"&&n.push({id:`ATS-${String(r++).padStart(3,"0")}`,title:`ATS exception: ${f}`,description:`ATS exception configured for ${f}`,severity:"low",category:"ats",file:s,recommendation:`Verify that the ATS exception for ${f} is necessary. Use HTTPS where possible.`})}}}return{category:"ats",label:"iOS ATS Config",findings:n,durationMs:0}}import{spawnSync as Ri}from"child_process";import Xe from"fs";import Ge from"path";var Yy=/^[A-Za-z][A-Za-z0-9_]*(?:\.[A-Za-z][A-Za-z0-9_]*)+$/,qy=/^[A-Za-z0-9][A-Za-z0-9-]*(?:\.[A-Za-z0-9][A-Za-z0-9-]*)+$/,Jy=["package-lock.json","npm-shrinkwrap.json","yarn.lock","pnpm-lock.yaml","bun.lock","bun.lockb"],ru=e=>{if(!Xe.existsSync(e))return null;try{return JSON.parse(Xe.readFileSync(e,"utf-8"))}catch{return null}},$i=e=>{let t=String(e||"").match(/\d+/);if(!t)return;let n=Number(t[0]);return Number.isFinite(n)?n:void 0},Oi=(e,t=420)=>{let n=e.split(/\r?\n/).map(r=>r.trim()).filter(Boolean).slice(-6).join(" ");return n.length>t?`${n.slice(0,t-1)}\u2026`:n};async function iu(e,t){let n=[],r=1,i=y=>{n.push({...y,id:`PROJECT-${String(r++).padStart(3,"0")}`,category:"project"})},o=Ge.join(e,m.configFileName),s=ru(o),a=ce(s?.framework),l=s?pt(e).appRoot:e,d=Ge.join(l,"package.json"),c=ru(d);if(!s)i({title:`${m.configFileName} is missing or invalid`,description:Xe.existsSync(o)?`${m.configFileName} could not be parsed as JSON.`:"Mach cannot validate build profiles, app identifiers, or OTA settings without its project configuration.",severity:Xe.existsSync(o)?"high":"medium",file:m.configFileName,recommendation:Xe.existsSync(o)?`Fix the JSON syntax in ${m.configFileName}, then rerun \`${m.nameLower} audit --category project\`.`:`Run \`${m.nameLower} init\` or \`${m.nameLower} link\` to create ${m.configFileName}.`});else{let y=ce(s.framework);a=y;let b={...c?.dependencies||{},...c?.devDependencies||{}},A=_r(l)?"flutter":b.expo?"expo":b["react-native"]?"react-native":void 0;if(y?A&&y!==A&&y!=="flutter"&&i({title:"Configured framework does not match package.json",description:`Mach is configured for ${y}, but package.json looks like ${A}.`,severity:"high",file:m.configFileName,recommendation:`Update "framework" in ${m.configFileName}, or correct the project dependencies before building.`}):i({title:"Mach framework is missing or unsupported",description:`The framework must be one of expo, react-native, or flutter. Received ${String(s.framework||"nothing")}.`,severity:"high",file:m.configFileName,recommendation:`Set "framework" in ${m.configFileName} to the framework this project actually uses.`}),String(s.projectId||"").trim()||i({title:"Project is not linked to Mach",description:`${m.configFileName} does not contain a projectId.`,severity:"medium",file:m.configFileName,recommendation:`Run \`${m.nameLower} link\` and select the correct Mach project.`}),s.appDirectory){let H=Ge.resolve(e,s.appDirectory);Xe.existsSync(H)?!Xe.existsSync(Ge.join(H,"package.json"))&&!Xe.existsSync(Ge.join(H,"pubspec.yaml"))&&i({title:"Configured app directory has no application manifest",description:`${s.appDirectory} exists but has no package.json or pubspec.yaml.`,severity:"medium",file:m.configFileName,recommendation:"Point appDirectory to the workspace folder containing the application manifest."}):i({title:"Configured app directory does not exist",description:`Mach resolved appDirectory to ${H}, but that path is missing.`,severity:"high",file:m.configFileName,recommendation:"Correct appDirectory or restore the application folder."})}let v=String(s.android?.package||"").trim();v&&!Yy.test(v)&&i({title:"Android package name is invalid",description:`${v} is not a valid reverse-domain Android application ID.`,severity:"high",file:m.configFileName,recommendation:"Use a package name such as com.company.app and make it match the native project."});let E=String(s.ios?.bundleIdentifier||"").trim();E&&!qy.test(E)&&i({title:"iOS bundle identifier is invalid",description:`${E} is not a valid reverse-domain bundle identifier.`,severity:"high",file:m.configFileName,recommendation:"Use a bundle identifier such as com.company.app and make it match the Xcode target."});let L=Object.keys(s.build||{});if(!L.length)i({title:"No Mach build profiles are configured",description:"Development, staging, and production behavior cannot be validated consistently.",severity:"medium",file:m.configFileName,recommendation:"Add explicit build profiles for the environments your team ships."});else for(let H of L){let te=String(s.build?.[H]?.extends||"").trim();if(te&&!s.build?.[te]){i({title:`Build profile ${H} extends a missing profile`,description:`${H} extends ${te}, but ${te} is not defined.`,severity:"high",file:m.configFileName,recommendation:`Add the ${te} profile or update ${H}.extends.`});continue}try{let ie=se(s,H);y==="flutter"&&dn(l,H,ie)}catch(ie){i({title:`Build profile ${H} cannot be resolved`,description:ie.message||"The profile inheritance chain is invalid.",severity:"high",file:m.configFileName,recommendation:"Remove circular or missing profile inheritance and rerun the audit."})}}let U=y==="flutter"?void 0:$i(s.nodeVersion),j=$i(process.versions.node);U&&j&&U!==j&&i({title:"Local Node version differs from Mach builds",description:`This shell uses Node ${j}, while Mach is configured for Node ${U}.`,severity:"low",file:m.configFileName,recommendation:`Use Node ${U} locally when reproducing build failures, or update nodeVersion intentionally.`})}let u=Jy.filter(y=>Xe.existsSync(Ge.join(e,y)));a==="flutter"?Xe.existsSync(Ge.join(l,"pubspec.lock"))||Xe.existsSync(Ge.join(e,"pubspec.lock"))||i({title:"Flutter application lockfile is missing",description:"A committed pubspec.lock is required for reproducible local and managed builds.",severity:"high",file:Ge.relative(e,Ge.join(l,"pubspec.lock"))||"pubspec.lock",recommendation:"Run `flutter pub get`, review pubspec.lock, and commit it for the application."}):u.length?a!=="flutter"&&u.length>1&&i({title:"Multiple package-manager lockfiles found",description:`Found ${u.join(", ")}. The selected package manager may differ between environments.`,severity:"medium",recommendation:"Keep only the lockfile for the package manager used by this project."}):i({title:"No package-manager lockfile found",description:"Cloud and local dependency resolution may produce different versions.",severity:"medium",recommendation:"Commit the lockfile created by the package manager used for Mach builds."});let f=a==="flutter"?void 0:$i(c?.engines?.node),p=$i(process.versions.node);f&&p&&/(?:>=|>|\^|~)/.test(String(c.engines.node))&&p<f&&i({title:"Current Node version is below package.json requirements",description:`package.json requires ${c.engines.node}, but this shell uses ${process.versions.node}.`,severity:"high",file:"package.json",recommendation:"Install a compatible Node release before running Mach commands."});let h=Ge.join(e,"node_modules",".bin",process.platform==="win32"?"expo.cmd":"expo");if(!!(c?.dependencies?.expo||c?.devDependencies?.expo)&&Xe.existsSync(h)){let y=Ri(h,["install","--check"],{cwd:e,encoding:"utf-8",stdio:["ignore","pipe","pipe"],timeout:45e3,env:{...process.env,EXPO_NO_TELEMETRY:"1"}});if(y.status!==0){let b=Oi(`${y.stdout||""}
|
|
2487
|
-
${y.stderr||""}`);i({title:"Expo dependencies need alignment",description:b||"Expo reported dependency versions that do not match the installed SDK.",severity:"medium",file:"package.json",recommendation:"Run `npx expo install --fix`, review the changes, and rerun the audit."})}}if(a==="flutter"){let y
|
|
2488
|
-
${y.stderr||""}`)||"The flutter executable could not be run.",severity:"high",recommendation:"Install the project Flutter SDK, add it to PATH, and pin flutter.sdkVersion for managed builds."});else{try{let E=JSON.parse(y.stdout||"{}"),L=String(s?.flutter?.sdkVersion||"").trim();L&&E.frameworkVersion&&L!==E.frameworkVersion&&i({title:"Flutter SDK differs from Mach configuration",description:`This shell uses Flutter ${E.frameworkVersion}, while Mach is pinned to ${L}.`,severity:"medium",file:m.configFileName,recommendation:`Use Flutter ${L} locally or intentionally update flutter.sdkVersion after testing.`})}catch{}let A
|
|
2489
|
-
${A.stderr||""}`),severity:"medium",recommendation:"Resolve the reported Flutter doctor issues for the platforms built by this project."});let v
|
|
2490
|
-
${v.stderr||""}`),severity:"medium",recommendation:"Run `flutter analyze`, fix the reported issues, and rerun `mach audit`."})}tt(l).sdkConstraint||i({title:"Dart SDK constraint is missing",description:"pubspec.yaml does not declare environment.sdk, so toolchain compatibility is ambiguous.",severity:"medium",file:Ge.relative(e,Ge.join(l,"pubspec.yaml")),recommendation:"Declare the supported Dart SDK range under environment.sdk in pubspec.yaml."})}return{category:"project",label:"Project Health",findings:n,durationMs:0}}import{execFileSync as
|
|
2491
|
-
Running expo prebuild for deeper analysis...`));try{
|
|
2492
|
-
Skipping manifest/plist checks \u2014 no android/ios dirs. Use --prebuild to generate them.`)),o;for(let u of i){let f=t.json?null:
|
|
2485
|
+
`),"Registered Devices")}catch(r){n.stop(ee.red("Failed to fetch devices")),Je.error(r.response?.data?.message||r.message)}gr(ee.blue("---"))}async function Fy(e){let t=e.udid,n=Bd(e).teamId;if(!t){let o=mr();o.start("Fetching registered devices...");try{let a=(await I.get("/devices",n?{params:{teamId:n}}:void 0)).data.devices||[];if(o.stop(`${a.length} device(s) found`),a.length===0){Je.info(ee.dim("No devices to remove.")),gr(ee.blue("---"));return}let l=await Ud({message:"Select device to remove:",options:a.map(c=>({value:c.deviceKey||c.udid,label:c.name,hint:`${c.udid.substring(0,12)}...${c.teamId?` \xB7 ${c.teamId}`:""}`}))});if(pr(l)){fr("Cancelled");return}let d=a.find(c=>(c.deviceKey||c.udid)===l);t=d?.udid||l,n=d?.teamId||n}catch(s){o.stop(ee.red("Failed to fetch devices")),Je.error(s.response?.data?.message||s.message);return}}let r=await Ty({message:`Remove device ${ee.dim(t.substring(0,12)+"...")}?`});if(pr(r)||!r){fr("Cancelled");return}let i=mr();i.start("Removing device...");try{await I.delete(`/devices/${encodeURIComponent(t)}`,n?{params:{teamId:n}}:void 0),i.stop(ee.green("Device removed"))}catch(o){i.stop(ee.red("Failed to remove device")),Je.error(o.response?.data?.message||o.message)}gr(ee.blue("---"))}async function bi(e,t){switch(e){case"register":await My(t);break;case"list":await Ly(t);break;case"remove":await Fy(t);break;default:Je.error(`Unknown action: ${e}`)}}import{log as Ze,spinner as wu}from"@clack/prompts";import st from"chalk";import br from"path";import nn from"fs";import kb from"os";import Nb from"axios";var xe=(o=>(o.CRITICAL="critical",o.HIGH="high",o.MEDIUM="medium",o.LOW="low",o.INFO="info",o))(xe||{}),He=(c=>(c.PROJECT="project",c.IMPACT="impact",c.PERMISSIONS="permissions",c.SECRETS="secrets",c.DEPENDENCIES="dependencies",c.STORAGE="storage",c.NETWORK="network",c.DEBUG="debug",c.MANIFEST="manifest",c.ATS="ats",c))(He||{});import{spinner as mu,log as yr}from"@clack/prompts";import Ve from"chalk";import{execSync as _b}from"child_process";import gu from"fs";import hu from"path";import Me from"fs";import Et from"path";import{execSync as jy}from"child_process";import Hd from"fs";import Uy from"path";var pt=e=>{let t={},n=Uy.join(e,m.configFileName);if(Hd.existsSync(n))try{t=JSON.parse(Hd.readFileSync(n,"utf8"))}catch{}try{return{appRoot:ve(e,t.appDirectory).appRoot,framework:ce(t.framework)}}catch{return{appRoot:e,framework:ce(t.framework)}}};var Gd={"android.permission.READ_PHONE_STATE":{severity:"high",description:"Can read phone number, IMEI, carrier info"},"android.permission.CALL_PHONE":{severity:"high",description:"Can make calls without user interaction"},"android.permission.SEND_SMS":{severity:"high",description:"Can send SMS without user interaction"},"android.permission.READ_SMS":{severity:"high",description:"Can read user SMS messages"},"android.permission.READ_CONTACTS":{severity:"medium",description:"Can read user contacts"},"android.permission.WRITE_CONTACTS":{severity:"medium",description:"Can modify user contacts"},"android.permission.READ_CALL_LOG":{severity:"high",description:"Can read call history"},"android.permission.CAMERA":{severity:"medium",description:"Camera access"},"android.permission.RECORD_AUDIO":{severity:"medium",description:"Microphone access"},"android.permission.ACCESS_FINE_LOCATION":{severity:"medium",description:"Precise GPS location"},"android.permission.ACCESS_COARSE_LOCATION":{severity:"medium",description:"Approximate location"},"android.permission.ACCESS_BACKGROUND_LOCATION":{severity:"high",description:"Background location tracking"},"android.permission.READ_EXTERNAL_STORAGE":{severity:"medium",description:"Read files on device"},"android.permission.WRITE_EXTERNAL_STORAGE":{severity:"medium",description:"Write files on device"},"android.permission.READ_MEDIA_IMAGES":{severity:"low",description:"Read photos"},"android.permission.READ_MEDIA_VIDEO":{severity:"low",description:"Read videos"},"android.permission.SYSTEM_ALERT_WINDOW":{severity:"high",description:"Draw overlays on other apps"},"android.permission.REQUEST_INSTALL_PACKAGES":{severity:"high",description:"Can install APKs"}},Vd={NSCameraUsageDescription:{severity:"medium",description:"Camera access declared"},NSMicrophoneUsageDescription:{severity:"medium",description:"Microphone access declared"},NSLocationWhenInUseUsageDescription:{severity:"medium",description:"Location (in-use) declared"},NSLocationAlwaysUsageDescription:{severity:"high",description:"Background location declared"},NSContactsUsageDescription:{severity:"medium",description:"Contacts access declared"},NSCalendarsUsageDescription:{severity:"low",description:"Calendar access declared"},NSPhotoLibraryUsageDescription:{severity:"low",description:"Photo library access declared"}};function By(e){try{if(Me.existsSync(Et.join(e,"pubspec.yaml")))throw new Error("Flutter project");let n=jy("npx expo config --type introspect --json 2>/dev/null",{cwd:e,encoding:"utf-8",timeout:3e4});return JSON.parse(n)}catch{}let t=Et.join(e,"app.json");if(Me.existsSync(t))try{let n=JSON.parse(Me.readFileSync(t,"utf-8"));return n.expo||n}catch{}return null}var Hy=e=>{let t=Et.join(e,"android","app","src","main","AndroidManifest.xml");if(!Me.existsSync(t))return[];let n=Me.readFileSync(t,"utf8");return Array.from(n.matchAll(/<uses-permission\s+[^>]*android:name="([^"]+)"/g)).map(r=>r[1])},Gy=e=>{let t=Et.join(e,"ios"),n=new Set;if(!Me.existsSync(t))return n;let r=i=>{for(let o of Me.readdirSync(i,{withFileTypes:!0})){if(o.name==="Pods"||o.name==="build"||o.name.startsWith("."))continue;let s=Et.join(i,o.name);if(o.isDirectory()&&r(s),o.isFile()&&o.name==="Info.plist"){let a=Me.readFileSync(s,"utf8");for(let l of Object.keys(Vd))a.includes(`<key>${l}</key>`)&&n.add(l)}}};return r(t),n};function Vy(e){let t=[],n=Et.join(e,"node_modules");if(!Me.existsSync(n))return t;let r=/<uses-permission\s+android:name="([^"]+)"/g;function i(o,s){let a=Et.join(o,"android","src","main","AndroidManifest.xml");if(!Me.existsSync(a))return;let l=Me.readFileSync(a,"utf-8"),d;for(;(d=r.exec(l))!==null;)t.push({pkg:s,permission:d[1]});r.lastIndex=0}for(let o of Me.readdirSync(n)){if(o.startsWith("."))continue;let s=Et.join(n,o);if(o.startsWith("@")){if(!Me.statSync(s).isDirectory())continue;for(let a of Me.readdirSync(s))i(Et.join(s,a),`${o}/${a}`)}else i(s,o)}return t}async function zd(e,t){let n=[],r=1,{appRoot:i}=pt(e),o=By(i),s=Array.from(new Set([...o?.android?.permissions||[],...Hy(i)])),a=o?.android?.blockedPermissions||[];for(let u of s){let f=Gd[u];f&&n.push({id:`PERM-${String(r++).padStart(3,"0")}`,title:`${u.split(".").pop()} declared`,description:f.description,severity:f.severity,category:"permissions",file:"app.config.ts",recommendation:"Remove from permissions if not needed, or add justification."})}let l=Vy(i);for(let{pkg:u,permission:f}of l){let p=Gd[f];p&&(a.includes(f)||s.includes(f)||n.push({id:`PERM-${String(r++).padStart(3,"0")}`,title:`${f.split(".").pop()} injected by ${u}`,description:`${p.description}. Auto-injected via ${u} AndroidManifest.xml`,severity:p.severity,category:"permissions",file:`node_modules/${u}/android/src/main/AndroidManifest.xml`,recommendation:`Add "${f}" to blockedPermissions if not needed.`,autoFixable:!0}))}let d=o?.ios?.infoPlist||{},c=Gy(i);for(let[u,f]of Object.entries(Vd))(u in d||c.has(u))&&n.push({id:`PERM-${String(r++).padStart(3,"0")}`,title:`iOS: ${u} declared`,description:f.description,severity:f.severity,category:"permissions",file:"app.config.ts",recommendation:`Remove ${u} from infoPlist if the app does not use this capability.`});return{category:"permissions",label:"Permission Audit",findings:n,durationMs:0}}import us from"fs";import Ai from"path";var zy=[{id:"SEC-001",pattern:/(['"`])(?:sk|pk)_(?:live|test)_[a-zA-Z0-9]{20,}\1/g,severity:"critical",label:"Stripe API Key"},{id:"SEC-002",pattern:/(['"`])AIza[0-9A-Za-z\-_]{35}\1/g,severity:"high",label:"Google API Key"},{id:"SEC-003",pattern:/(['"`])AKIA[0-9A-Z]{16}\1/g,severity:"critical",label:"AWS Access Key ID"},{id:"SEC-004",pattern:/-----BEGIN (?:RSA |EC )?PRIVATE KEY-----/g,severity:"critical",label:"Private key in source"},{id:"SEC-005",pattern:/(?:ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9_]{36,}/g,severity:"high",label:"GitHub Token"},{id:"SEC-006",pattern:/xox[bpors]-[a-zA-Z0-9-]{10,}/g,severity:"high",label:"Slack Token"},{id:"SEC-007",pattern:/(?:password|secret|apikey|api_key)\s*[:=]\s*['"`][^'"`\n]{8,}['"`]/gi,severity:"high",label:"Hardcoded credential"}],Wy=new Set([".ts",".tsx",".js",".jsx",".dart"]),Ky=new Set(["node_modules",".dart_tool",".expo",".git","android","ios","dist","build","__tests__","__mocks__"]);function Wd(e){let t=[],n=us.readdirSync(e,{withFileTypes:!0});for(let r of n){if(Ky.has(r.name))continue;let i=Ai.join(e,r.name);r.isDirectory()?t.push(...Wd(i)):Wy.has(Ai.extname(r.name))&&t.push(i)}return t}function Yy(e){let t=e.trim();return t.startsWith("//")||t.startsWith("*")||t.startsWith("/*")}function qy(e){return/process\.env\./i.test(e)||/import\.meta\.env/i.test(e)}async function Kd(e,t){let n=[],r=Ai.join(e,"src"),i=us.existsSync(r)?r:e,o=Wd(i);for(let s of o){let l=us.readFileSync(s,"utf-8").split(`
|
|
2486
|
+
`),d=Ai.relative(e,s);for(let c=0;c<l.length;c++){let u=l[c];if(!Yy(u)&&!qy(u))for(let{id:f,pattern:p,severity:h,label:g}of zy)p.lastIndex=0,p.test(u)&&n.push({id:f,title:g,description:`Potential ${g.toLowerCase()} found in source code`,severity:h,category:"secrets",file:d,line:c+1,recommendation:`Move to environment variables or a secrets manager. Use \`${m.nameLower} env set\` for managed secrets.`})}}return{category:"secrets",label:"Secrets Detection",findings:n,durationMs:0}}import{execSync as Jy,spawnSync as Xy}from"child_process";import Zy from"fs";import Qy from"path";var eb={critical:"critical",high:"high",moderate:"medium",low:"low",info:"info"};async function Yd(e,t){let n=pt(e).appRoot;if(Zy.existsSync(Qy.join(n,"pubspec.yaml")))return tb(n);let r=[],i=1,o;try{o=Jy("npm audit --json 2>/dev/null",{cwd:e,encoding:"utf-8",timeout:6e4})}catch(l){if(o=l.stdout||"",!o)return{category:"dependencies",label:"Dependency CVEs",findings:[],durationMs:0,error:"Failed to run npm audit. Ensure npm is available and dependencies are installed."}}let s;try{s=JSON.parse(o)}catch{return{category:"dependencies",label:"Dependency CVEs",findings:[],durationMs:0,error:"Failed to parse npm audit output."}}let a=s.vulnerabilities||{};for(let[l,d]of Object.entries(a)){let c=eb[d.severity]||"info",u=Array.isArray(d.via)?d.via.map(f=>typeof f=="string"?f:f.title||f.name).join(", "):String(d.via);r.push({id:`DEP-${String(i++).padStart(3,"0")}`,title:`${l} \u2014 ${d.severity}`,description:`Via: ${u}. Range: ${d.range||"unknown"}`,severity:c,category:"dependencies",recommendation:d.fixAvailable?`Run \`npm audit fix\` or update ${l} to a patched version.`:"No fix available yet. Monitor for updates or evaluate alternatives.",autoFixable:!!d.fixAvailable})}return{category:"dependencies",label:"Dependency CVEs",findings:r,durationMs:0}}var ps=e=>typeof e=="string"?e:e?.version;function tb(e){let t=[],n=1,r=Xy("flutter",["pub","outdated","--json"],{cwd:e,encoding:"utf8",stdio:["ignore","pipe","pipe"],timeout:9e4});if(r.status!==0&&!r.stdout)return{category:"dependencies",label:"Flutter Dependencies",findings:t,durationMs:0,error:"Could not inspect Dart dependencies. Ensure the pinned Flutter/Dart SDK is available and run `flutter pub get`."};let i=`${r.stdout||""}
|
|
2487
|
+
${r.stderr||""}`,o=Array.from(new Set(i.match(/GHSA-[A-Za-z0-9-]+/g)||[]));for(let s of o)t.push({id:`DEP-${String(n++).padStart(3,"0")}`,title:`Dart package security advisory ${s}`,description:"The Dart dependency resolver reported that a resolved package is affected by a published security advisory.",severity:"high",category:"dependencies",recommendation:`Review https://github.com/advisories/${s}, assess exposure, and update to a non-affected compatible package version.`});try{let s=JSON.parse(r.stdout||"{}");for(let a of s.packages||[]){if(!["direct","dev"].includes(String(a.kind||"")))continue;let l=ps(a.current),d=ps(a.resolvable),c=ps(a.latest);!l||!d&&!c||l===(d||c)||t.push({id:`DEP-${String(n++).padStart(3,"0")}`,title:`${a.package||a.name} has a newer compatible version`,description:`Current ${l}; resolvable ${d||"unknown"}; latest ${c||"unknown"}. This is dependency freshness information, not a security finding.`,severity:"low",category:"dependencies",recommendation:"Review the package changelog, update intentionally, and run the application test suite."})}}catch{return{category:"dependencies",label:"Flutter Dependencies",findings:t,durationMs:0,error:"Could not parse `dart pub outdated --json` output."}}return{category:"dependencies",label:"Flutter Dependencies",findings:t,durationMs:0}}import Si from"fs";import Ei from"path";var qd=/(?:token|password|credential|secret|apiKey|api_key|session|auth|jwt|refresh_token|access_token|private_key|pin|otp)/i,Jd=/AsyncStorage\s*\.\s*(?:setItem|mergeItem)\s*\(\s*['"`]([^'"`]+)['"`]/g,nb=/from\s+['"]@react-native-async-storage\/async-storage['"]|from\s+['"]react-native['"].*AsyncStorage/,Xd=/(?:setString|setBool|setInt|setDouble|setStringList)\s*\(\s*['"]([^'"]+)['"]/g,rb=/package:shared_preferences\/shared_preferences\.dart/,ib=new Set([".ts",".tsx",".js",".jsx",".dart"]),ob=new Set(["node_modules",".dart_tool",".expo",".git","android","ios","dist","build"]);function Zd(e){let t=[];if(!Si.existsSync(e))return t;let n=Si.readdirSync(e,{withFileTypes:!0});for(let r of n){if(ob.has(r.name))continue;let i=Ei.join(e,r.name);r.isDirectory()?t.push(...Zd(i)):ib.has(Ei.extname(r.name))&&t.push(i)}return t}async function Qd(e,t){let n=[],r=1,i=Ei.join(e,"src"),o=Si.existsSync(i)?i:e,s=Zd(o);for(let a of s){let l=Si.readFileSync(a,"utf-8"),d=nb.test(l),c=rb.test(l);if(!d&&!c)continue;let u=l.split(`
|
|
2488
|
+
`),f=Ei.relative(e,a);for(let p=0;p<u.length;p++){let h=u[p];Jd.lastIndex=0;let g;for(;(g=Jd.exec(h))!==null;){let y=g[1];qd.test(y)&&n.push({id:`STOR-${String(r++).padStart(3,"0")}`,title:`AsyncStorage used for "${y}"`,description:`Sensitive data key "${y}" stored in AsyncStorage (unencrypted).`,severity:"high",category:"storage",file:f,line:p+1,recommendation:"Use expo-secure-store (SecureStore) for sensitive data instead of AsyncStorage."})}if(c)for(Xd.lastIndex=0;(g=Xd.exec(h))!==null;){let y=g[1];qd.test(y)&&n.push({id:`STOR-${String(r++).padStart(3,"0")}`,title:`SharedPreferences used for "${y}"`,description:`Sensitive data key "${y}" is stored in Flutter SharedPreferences, which is not encrypted secret storage.`,severity:"high",category:"storage",file:f,line:p+1,recommendation:"Store sensitive values with platform-backed secure storage and keep only non-sensitive preferences here."})}}}return{category:"storage",label:"Insecure Storage",findings:n,durationMs:0}}import Ii from"fs";import _i from"path";var eu=/['"`](http:\/\/(?!localhost|127\.0\.0\.1|10\.|192\.168\.|0\.0\.0\.0|172\.(?:1[6-9]|2\d|3[01])\.)[^'"`\s]+)['"`]/g,sb=/\/api\/|\/v[0-9]+\/|\/graphql|\/rest\//i,ab=new Set([".ts",".tsx",".js",".jsx",".dart"]),lb=new Set(["node_modules",".dart_tool",".expo",".git","android","ios","dist","build","__tests__","__mocks__"]);function tu(e){let t=[];if(!Ii.existsSync(e))return t;let n=Ii.readdirSync(e,{withFileTypes:!0});for(let r of n){if(lb.has(r.name))continue;let i=_i.join(e,r.name);r.isDirectory()?t.push(...tu(i)):ab.has(_i.extname(r.name))&&t.push(i)}return t}async function nu(e,t){let n=[],r=1,i=_i.join(e,"src"),o=Ii.existsSync(i)?i:e,s=tu(o);for(let a of s){let d=Ii.readFileSync(a,"utf-8").split(`
|
|
2489
|
+
`),c=_i.relative(e,a);for(let u=0;u<d.length;u++){let f=d[u],p=f.trim();if(p.startsWith("//")||p.startsWith("*"))continue;eu.lastIndex=0;let h;for(;(h=eu.exec(f))!==null;){let g=h[1],y=sb.test(g);n.push({id:`NET-${String(r++).padStart(3,"0")}`,title:`Insecure HTTP URL${y?" (API endpoint)":""}`,description:`Plain HTTP URL found: ${g}`,severity:y?"high":"medium",category:"network",file:c,line:u+1,recommendation:"Use HTTPS instead of HTTP for all network requests."})}}}return{category:"network",label:"HTTP URLs",findings:n,durationMs:0}}import wi from"fs";import vi from"path";var ru=/(?:debug|debugMode|devMode|enableDebug)\s*[:=]\s*true/gi,iu=/console\.(?:log|warn|info|debug)\s*\([^)]*(?:token|password|secret|credential|key|auth)/gi,ou=/(?:debugPrint|print)\s*\([^)]*(?:token|password|secret|credential|key|auth)/gi,cb=new Set([".ts",".tsx",".js",".jsx",".dart"]),db=new Set(["node_modules",".dart_tool",".expo",".git","android","ios","dist","build","__tests__","__mocks__"]);function su(e){let t=[];if(!wi.existsSync(e))return t;let n=wi.readdirSync(e,{withFileTypes:!0});for(let r of n){if(db.has(r.name))continue;let i=vi.join(e,r.name);r.isDirectory()?t.push(...su(i)):cb.has(vi.extname(r.name))&&t.push(i)}return t}async function au(e,t){let n=[],r=1,i=vi.join(e,"src"),o=wi.existsSync(i)?i:e,s=su(o);for(let a of s){let d=wi.readFileSync(a,"utf-8").split(`
|
|
2490
|
+
`),c=vi.relative(e,a);for(let u=0;u<d.length;u++){let f=d[u],p=f.trim();if(!(p.startsWith("//")||p.startsWith("*"))&&(ru.lastIndex=0,ru.test(f)&&n.push({id:`DBG-${String(r++).padStart(3,"0")}`,title:"Hardcoded debug flag",description:"Debug/dev mode enabled in source code",severity:"medium",category:"debug",file:c,line:u+1,recommendation:"Use __DEV__ or environment variables instead of hardcoded debug flags."}),iu.lastIndex=0,ou.lastIndex=0,iu.test(f)||ou.test(f))){let h=d.slice(Math.max(0,u-3),u).join(`
|
|
2491
|
+
`);/__DEV__/.test(h)||n.push({id:`DBG-${String(r++).padStart(3,"0")}`,title:"Sensitive data in console log",description:"Console log may expose sensitive data (token, password, etc.) in production",severity:"medium",category:"debug",file:c,line:u+1,recommendation:"Wrap in __DEV__ check or remove sensitive data from console output."})}}}return{category:"debug",label:"Debug/Dev Flags",findings:n,durationMs:0}}import lu from"fs";import fs from"path";var ub=new Set(["androidx.work.impl.background.systemjob.SystemJobService","androidx.work.impl.diagnostics.DiagnosticsReceiver","com.google.firebase.iid.FirebaseInstanceIdReceiver","com.google.android.gms.auth.api.signin.RevocationBoundService","androidx.profileinstaller.ProfileInstallReceiver","com.google.firebase.messaging.FirebaseMessagingService","com.google.android.gms.measurement.AppMeasurementService","com.google.android.gms.measurement.AppMeasurementJobService"]);function pb(e){let t=[fs.join(e,"android","app","src","main","AndroidManifest.xml"),fs.join(e,"android","AndroidManifest.xml")];for(let n of t)if(lu.existsSync(n))return n;return null}async function cu(e,t){let n=[],r=1,i=pb(e);if(!i)return{category:"manifest",label:"Android Manifest",findings:[],durationMs:0,error:"No AndroidManifest.xml found in the configured app directory."};let o=lu.readFileSync(i,"utf-8"),s=fs.relative(e,i),a=/<(activity|activity-alias|service|receiver|provider)\s+([^>]*?)(?:\/>|>([\s\S]*?)<\/\1\s*>)/g,l;for(;(l=a.exec(o))!==null;){let d=l[1],c=l[2],u=l[3]||"",p=c.match(/android:name="([^"]+)"/)?.[1]||"unknown";if(ub.has(p))continue;let h=/android:exported="true"/.test(c),g=/android:permission="/.test(c),y=(d==="activity"||d==="activity-alias")&&/android:name="android\.intent\.action\.MAIN"/.test(u)&&/android:name="android\.intent\.category\.LAUNCHER"/.test(u);h&&!g&&!y&&n.push({id:`MAN-${String(r++).padStart(3,"0")}`,title:`Exported ${d}: ${p.split(".").pop()}`,description:`${p} is exported=true without android:permission protection`,severity:"medium",category:"manifest",file:s,recommendation:'Set android:exported="false" or add an android:permission attribute.'})}return/android:allowBackup="true"/.test(o)&&n.push({id:`MAN-${String(r++).padStart(3,"0")}`,title:"allowBackup is enabled",description:'android:allowBackup="true" allows data extraction via ADB backup',severity:"medium",category:"manifest",file:s,recommendation:'Set android:allowBackup="false" in native configuration (or via your framework build configuration).',autoFixable:!0}),/android:debuggable="true"/.test(o)&&n.push({id:`MAN-${String(r++).padStart(3,"0")}`,title:"App is debuggable",description:'android:debuggable="true" allows attaching a debugger in production',severity:"critical",category:"manifest",file:s,recommendation:"Ensure debuggable is false for production builds. This is usually set automatically for release builds."}),{category:"manifest",label:"Android Manifest",findings:n,durationMs:0}}import Ri from"fs";import ms from"path";function fb(e){let t=ms.join(e,"ios");if(!Ri.existsSync(t))return null;let n=Ri.readdirSync(t,{withFileTypes:!0});for(let r of n){if(!r.isDirectory()||r.name==="Pods"||r.name.startsWith("."))continue;let i=ms.join(t,r.name,"Info.plist");if(Ri.existsSync(i))return i}return null}async function du(e,t){let n=[],r=1,i=fb(e);if(!i)return{category:"ats",label:"iOS ATS Config",findings:[],durationMs:0,error:"No Info.plist found in the configured app directory."};let o=Ri.readFileSync(i,"utf-8"),s=ms.relative(e,i),a=o.match(/<key>NSAppTransportSecurity<\/key>\s*<dict>([\s\S]*?)<\/dict>/);if(a){let l=a[1];/<key>NSAllowsArbitraryLoads<\/key>\s*<true\s*\/>/.test(l)&&n.push({id:`ATS-${String(r++).padStart(3,"0")}`,title:"ATS disabled \u2014 NSAllowsArbitraryLoads",description:"App Transport Security is completely disabled. All HTTP connections are allowed.",severity:"critical",category:"ats",file:s,recommendation:"Remove NSAllowsArbitraryLoads or set to false. Use domain-specific exceptions only if absolutely necessary."});let d=l.match(/<key>NSExceptionDomains<\/key>\s*<dict>([\s\S]*?)<\/dict>/);if(d){let c=d[1].match(/<key>([^<]+)<\/key>/g);if(c)for(let u of c){let f=u.replace(/<\/?key>/g,"");f!=="NSExceptionDomains"&&n.push({id:`ATS-${String(r++).padStart(3,"0")}`,title:`ATS exception: ${f}`,description:`ATS exception configured for ${f}`,severity:"low",category:"ats",file:s,recommendation:`Verify that the ATS exception for ${f} is necessary. Use HTTPS where possible.`})}}}return{category:"ats",label:"iOS ATS Config",findings:n,durationMs:0}}import{spawnSync as $i}from"child_process";import Xe from"fs";import Ge from"path";var mb=/^[A-Za-z][A-Za-z0-9_]*(?:\.[A-Za-z][A-Za-z0-9_]*)+$/,gb=/^[A-Za-z0-9][A-Za-z0-9-]*(?:\.[A-Za-z0-9][A-Za-z0-9-]*)+$/,hb=["package-lock.json","npm-shrinkwrap.json","yarn.lock","pnpm-lock.yaml","bun.lock","bun.lockb"],uu=e=>{if(!Xe.existsSync(e))return null;try{return JSON.parse(Xe.readFileSync(e,"utf-8"))}catch{return null}},Pi=e=>{let t=String(e||"").match(/\d+/);if(!t)return;let n=Number(t[0]);return Number.isFinite(n)?n:void 0},Oi=(e,t=420)=>{let n=e.split(/\r?\n/).map(r=>r.trim()).filter(Boolean).slice(-6).join(" ");return n.length>t?`${n.slice(0,t-1)}\u2026`:n};async function pu(e,t){let n=[],r=1,i=y=>{n.push({...y,id:`PROJECT-${String(r++).padStart(3,"0")}`,category:"project"})},o=Ge.join(e,m.configFileName),s=uu(o),a=ce(s?.framework),l=s?pt(e).appRoot:e,d=Ge.join(l,"package.json"),c=uu(d);if(!s)i({title:`${m.configFileName} is missing or invalid`,description:Xe.existsSync(o)?`${m.configFileName} could not be parsed as JSON.`:"Mach cannot validate build profiles, app identifiers, or OTA settings without its project configuration.",severity:Xe.existsSync(o)?"high":"medium",file:m.configFileName,recommendation:Xe.existsSync(o)?`Fix the JSON syntax in ${m.configFileName}, then rerun \`${m.nameLower} audit --category project\`.`:`Run \`${m.nameLower} init\` or \`${m.nameLower} link\` to create ${m.configFileName}.`});else{let y=ce(s.framework);a=y;let b={...c?.dependencies||{},...c?.devDependencies||{}},A=_r(l)?"flutter":b.expo?"expo":b["react-native"]?"react-native":void 0;if(y?A&&y!==A&&y!=="flutter"&&i({title:"Configured framework does not match package.json",description:`Mach is configured for ${y}, but package.json looks like ${A}.`,severity:"high",file:m.configFileName,recommendation:`Update "framework" in ${m.configFileName}, or correct the project dependencies before building.`}):i({title:"Mach framework is missing or unsupported",description:`The framework must be one of expo, react-native, or flutter. Received ${String(s.framework||"nothing")}.`,severity:"high",file:m.configFileName,recommendation:`Set "framework" in ${m.configFileName} to the framework this project actually uses.`}),String(s.projectId||"").trim()||i({title:"Project is not linked to Mach",description:`${m.configFileName} does not contain a projectId.`,severity:"medium",file:m.configFileName,recommendation:`Run \`${m.nameLower} link\` and select the correct Mach project.`}),s.appDirectory){let H=Ge.resolve(e,s.appDirectory);Xe.existsSync(H)?!Xe.existsSync(Ge.join(H,"package.json"))&&!Xe.existsSync(Ge.join(H,"pubspec.yaml"))&&i({title:"Configured app directory has no application manifest",description:`${s.appDirectory} exists but has no package.json or pubspec.yaml.`,severity:"medium",file:m.configFileName,recommendation:"Point appDirectory to the workspace folder containing the application manifest."}):i({title:"Configured app directory does not exist",description:`Mach resolved appDirectory to ${H}, but that path is missing.`,severity:"high",file:m.configFileName,recommendation:"Correct appDirectory or restore the application folder."})}let v=String(s.android?.package||"").trim();v&&!mb.test(v)&&i({title:"Android package name is invalid",description:`${v} is not a valid reverse-domain Android application ID.`,severity:"high",file:m.configFileName,recommendation:"Use a package name such as com.company.app and make it match the native project."});let E=String(s.ios?.bundleIdentifier||"").trim();E&&!gb.test(E)&&i({title:"iOS bundle identifier is invalid",description:`${E} is not a valid reverse-domain bundle identifier.`,severity:"high",file:m.configFileName,recommendation:"Use a bundle identifier such as com.company.app and make it match the Xcode target."});let L=Object.keys(s.build||{});if(!L.length)i({title:"No Mach build profiles are configured",description:"Development, staging, and production behavior cannot be validated consistently.",severity:"medium",file:m.configFileName,recommendation:"Add explicit build profiles for the environments your team ships."});else for(let H of L){let te=String(s.build?.[H]?.extends||"").trim();if(te&&!s.build?.[te]){i({title:`Build profile ${H} extends a missing profile`,description:`${H} extends ${te}, but ${te} is not defined.`,severity:"high",file:m.configFileName,recommendation:`Add the ${te} profile or update ${H}.extends.`});continue}try{let ie=se(s,H);y==="flutter"&&un(l,H,ie)}catch(ie){i({title:`Build profile ${H} cannot be resolved`,description:ie.message||"The profile inheritance chain is invalid.",severity:"high",file:m.configFileName,recommendation:"Remove circular or missing profile inheritance and rerun the audit."})}}let U=y==="flutter"?void 0:Pi(s.nodeVersion),j=Pi(process.versions.node);U&&j&&U!==j&&i({title:"Local Node version differs from Mach builds",description:`This shell uses Node ${j}, while Mach is configured for Node ${U}.`,severity:"low",file:m.configFileName,recommendation:`Use Node ${U} locally when reproducing build failures, or update nodeVersion intentionally.`})}let u=hb.filter(y=>Xe.existsSync(Ge.join(e,y)));a==="flutter"?Xe.existsSync(Ge.join(l,"pubspec.lock"))||Xe.existsSync(Ge.join(e,"pubspec.lock"))||i({title:"Flutter application lockfile is missing",description:"A committed pubspec.lock is required for reproducible local and managed builds.",severity:"high",file:Ge.relative(e,Ge.join(l,"pubspec.lock"))||"pubspec.lock",recommendation:"Run `flutter pub get`, review pubspec.lock, and commit it for the application."}):u.length?a!=="flutter"&&u.length>1&&i({title:"Multiple package-manager lockfiles found",description:`Found ${u.join(", ")}. The selected package manager may differ between environments.`,severity:"medium",recommendation:"Keep only the lockfile for the package manager used by this project."}):i({title:"No package-manager lockfile found",description:"Cloud and local dependency resolution may produce different versions.",severity:"medium",recommendation:"Commit the lockfile created by the package manager used for Mach builds."});let f=a==="flutter"?void 0:Pi(c?.engines?.node),p=Pi(process.versions.node);f&&p&&/(?:>=|>|\^|~)/.test(String(c.engines.node))&&p<f&&i({title:"Current Node version is below package.json requirements",description:`package.json requires ${c.engines.node}, but this shell uses ${process.versions.node}.`,severity:"high",file:"package.json",recommendation:"Install a compatible Node release before running Mach commands."});let h=Ge.join(e,"node_modules",".bin",process.platform==="win32"?"expo.cmd":"expo");if(!!(c?.dependencies?.expo||c?.devDependencies?.expo)&&Xe.existsSync(h)){let y=$i(h,["install","--check"],{cwd:e,encoding:"utf-8",stdio:["ignore","pipe","pipe"],timeout:45e3,env:{...process.env,EXPO_NO_TELEMETRY:"1"}});if(y.status!==0){let b=Oi(`${y.stdout||""}
|
|
2492
|
+
${y.stderr||""}`);i({title:"Expo dependencies need alignment",description:b||"Expo reported dependency versions that do not match the installed SDK.",severity:"medium",file:"package.json",recommendation:"Run `npx expo install --fix`, review the changes, and rerun the audit."})}}if(a==="flutter"){let y=$i("flutter",["--version","--machine"],{cwd:l,encoding:"utf8",stdio:["ignore","pipe","pipe"],timeout:3e4});if(y.status!==0)i({title:"Flutter SDK is unavailable",description:Oi(`${y.stdout||""}
|
|
2493
|
+
${y.stderr||""}`)||"The flutter executable could not be run.",severity:"high",recommendation:"Install the project Flutter SDK, add it to PATH, and pin flutter.sdkVersion for managed builds."});else{try{let E=JSON.parse(y.stdout||"{}"),L=String(s?.flutter?.sdkVersion||"").trim();L&&E.frameworkVersion&&L!==E.frameworkVersion&&i({title:"Flutter SDK differs from Mach configuration",description:`This shell uses Flutter ${E.frameworkVersion}, while Mach is pinned to ${L}.`,severity:"medium",file:m.configFileName,recommendation:`Use Flutter ${L} locally or intentionally update flutter.sdkVersion after testing.`})}catch{}let A=$i("flutter",["doctor","-v"],{cwd:l,encoding:"utf8",stdio:["ignore","pipe","pipe"],timeout:9e4});A.status!==0&&i({title:"Flutter toolchain has unresolved requirements",description:Oi(`${A.stdout||""}
|
|
2494
|
+
${A.stderr||""}`),severity:"medium",recommendation:"Resolve the reported Flutter doctor issues for the platforms built by this project."});let v=$i("flutter",["analyze","--no-pub"],{cwd:l,encoding:"utf8",stdio:["ignore","pipe","pipe"],timeout:12e4});v.status!==0&&i({title:"Flutter static analysis did not pass",description:Oi(`${v.stdout||""}
|
|
2495
|
+
${v.stderr||""}`),severity:"medium",recommendation:"Run `flutter analyze`, fix the reported issues, and rerun `mach audit`."})}tt(l).sdkConstraint||i({title:"Dart SDK constraint is missing",description:"pubspec.yaml does not declare environment.sdk, so toolchain compatibility is ambiguous.",severity:"medium",file:Ge.relative(e,Ge.join(l,"pubspec.yaml")),recommendation:"Declare the supported Dart SDK range under environment.sdk in pubspec.yaml."})}return{category:"project",label:"Project Health",findings:n,durationMs:0}}import{execFileSync as yb}from"child_process";import bb from"path";var ys=e=>e.trim().replace(/\\/g,"/"),gs=(e,t)=>t.some(n=>n.test(e)),Ab=[/(?:^|\/)AndroidManifest\.xml$/i,/(?:^|\/)Info\.plist$/i,/\.entitlements$/i,/PrivacyInfo\.xcprivacy$/i,/(?:^|\/)(?:app\.json|app\.config\.[cm]?[jt]s)$/i,/(?:^|\/)google-services\.json$/i,/(?:^|\/)GoogleService-Info\.plist$/i],Sb=[/^(?:ios|android|plugins|modules)\//i,/(?:^|\/)(?:Podfile|Podfile\.lock|Gemfile|gradle\.properties|settings\.gradle|build\.gradle)$/i,/\.(?:podspec|swift|m|mm|h|kt|java)$/i,/(?:^|\/)(?:package\.json|package-lock\.json|npm-shrinkwrap\.json|yarn\.lock|pnpm-lock\.yaml|bun\.lockb?)$/i,/(?:^|\/)(?:pubspec\.yaml|pubspec\.lock)$/i,/\.dart$/i,/(?:^|\/)mach\.config\.json$/i],Eb=[/\.(?:[cm]?[jt]sx?|css|scss|less|json|md|txt)$/i,/\.(?:png|jpe?g|gif|webp|svg|avif|mp3|wav|m4a|mp4|mov|ttf|otf|woff2?)$/i,/^(?:assets|src|app|components|hooks|lib|constants|context|locales|translations)\//i],hs=e=>{let t=e.slice(0,8),n=e.length-t.length;return`${t.join(", ")}${n>0?` and ${n} more`:""}`};function Ib(e){let t=Array.from(new Set(e.map(ys).filter(Boolean))).sort();if(!t.length)return{level:"none",title:"No changes to assess",description:"Mach did not find changed or untracked project files in the selected range.",recommendation:"Use `mach audit --since <git-ref>` to assess committed changes against a branch or tag.",matchedFiles:[]};let n=t.filter(o=>gs(o,Ab));if(n.length)return{level:"store-review",title:"Native rebuild and store review may be required",description:`App identity, permissions, privacy, or native metadata changed: ${hs(n)}.`,recommendation:"Create new native builds, review permission/privacy declarations, and verify store metadata before submission.",matchedFiles:n};let r=t.filter(o=>gs(o,Sb));if(r.length)return{level:"native",title:"Native rebuild required",description:`Native code, dependencies, or build configuration changed: ${hs(r)}.`,recommendation:"Build new iOS and Android binaries for affected platforms; do not ship these changes only through OTA.",matchedFiles:r};let i=t.filter(o=>!gs(o,Eb));return i.length?{level:"review",title:"Manual delivery review recommended",description:`Mach could not safely classify: ${hs(i)}.`,recommendation:"Review whether these files alter native behavior. Use a native build when uncertain.",matchedFiles:i}:{level:"ota",title:"Changes look eligible for OTA",description:`Only JavaScript, TypeScript, content, or bundled assets changed across ${t.length} file${t.length===1?"":"s"}.`,recommendation:"An OTA release is appropriate if its runtime version matches the installed native builds. Run your normal tests before publishing.",matchedFiles:t}}var hr=(e,t)=>yb("git",t,{cwd:e,encoding:"utf-8",stdio:["ignore","pipe","pipe"]}).split(/\r?\n/).map(ys).filter(Boolean);async function fu(e,t){try{hr(e,["rev-parse","--show-toplevel"])}catch{return{category:"impact",label:"Delivery Impact",findings:[],durationMs:0,error:"This project is not inside a Git repository, so delivery impact could not be assessed."}}let n=String(t.since||"HEAD").trim(),r;try{hr(e,["rev-parse","--verify",`${n}^{commit}`]),r=hr(e,["diff","--name-only","--diff-filter=ACMR",n,"--"])}catch{return{category:"impact",label:"Delivery Impact",findings:[],durationMs:0,error:`Git reference ${n} could not be resolved.`}}if(!t.since)try{r.push(...hr(e,["ls-files","--others","--exclude-standard"]))}catch{}let i=hr(e,["rev-parse","--show-toplevel"])[0],o=ys(bb.relative(i,e));if(o){let d=`${o}/`;r=r.filter(c=>c.startsWith(d)).map(c=>c.slice(d.length))}let s=Ib(r),a=s.level==="store-review"||s.level==="native"?"medium":s.level==="review"?"low":"info",l={id:"IMPACT-001",title:s.title,description:s.description,severity:a,category:"impact",recommendation:s.recommendation};return{category:"impact",label:"Delivery Impact",findings:[l],durationMs:0}}var wb=[{category:"project",label:"Project Health",fn:pu,requiresPrebuild:!1},{category:"impact",label:"Delivery Impact",fn:fu,requiresPrebuild:!1},{category:"permissions",label:"Permission Audit",fn:zd,requiresPrebuild:!1},{category:"secrets",label:"Secrets Detection",fn:Kd,requiresPrebuild:!1},{category:"dependencies",label:"Dependency CVEs",fn:Yd,requiresPrebuild:!1},{category:"storage",label:"Insecure Storage",fn:Qd,requiresPrebuild:!1},{category:"network",label:"HTTP URLs",fn:nu,requiresPrebuild:!1},{category:"debug",label:"Debug/Dev Flags",fn:au,requiresPrebuild:!1},{category:"manifest",label:"Android Manifest",fn:cu,requiresPrebuild:!0},{category:"ats",label:"iOS ATS Config",fn:du,requiresPrebuild:!0}];async function yu(e,t){let n=wb;t.category&&(n=n.filter(s=>s.category===t.category),n.length===0&&(yr.error(Ve.red(`Unknown category: ${t.category}`)),yr.info(Ve.dim(`Available: ${Object.values(He).join(", ")}`)),process.exit(1)));let r=n.filter(s=>!s.requiresPrebuild),i=n.filter(s=>s.requiresPrebuild),o=[];for(let s of r){let a=t.json?null:mu();a?.start(Ve.dim(`Running ${s.label}...`));try{let l=Date.now(),d=await s.fn(e,t);d.durationMs=Date.now()-l,o.push(d);let c=d.findings.length;a?.stop(c>0?Ve.yellow(`${s.label} \u2014 ${c} finding(s)`):Ve.green(`${s.label} \u2014 clean`))}catch(l){a?.stop(Ve.red(`${s.label} \u2014 error`)),o.push({category:s.category,label:s.label,findings:[],durationMs:0,error:l.message})}}if(i.length>0){let{appRoot:s,framework:a}=pt(e),l=hu.join(s,"android"),d=hu.join(s,"ios"),c=gu.existsSync(l)||gu.existsSync(d);if(!c&&t.prebuild&&a!=="flutter"){t.json||yr.info(Ve.dim(`
|
|
2496
|
+
Running expo prebuild for deeper analysis...`));try{_b("npx expo prebuild --no-install",{cwd:s,stdio:"pipe"})}catch{return yr.warn(Ve.yellow("Prebuild failed \u2014 skipping manifest/plist checks.")),o}}else if(!c)return t.json||yr.info(Ve.dim(`
|
|
2497
|
+
Skipping manifest/plist checks \u2014 no android/ios dirs. Use --prebuild to generate them.`)),o;for(let u of i){let f=t.json?null:mu();f?.start(Ve.dim(`Running ${u.label}...`));try{let p=Date.now(),h=await u.fn(s,t);h.durationMs=Date.now()-p,o.push(h);let g=h.findings.length;f?.stop(g>0?Ve.yellow(`${u.label} \u2014 ${g} finding(s)`):Ve.green(`${u.label} \u2014 clean`))}catch(p){f?.stop(Ve.red(`${u.label} \u2014 error`)),o.push({category:u.category,label:u.label,findings:[],durationMs:0,error:p.message})}}}return o}import _e from"chalk";import{log as be}from"@clack/prompts";var Cn={critical:_e.bgRed.white.bold,high:_e.red.bold,medium:_e.yellow.bold,low:_e.blue,info:_e.dim},Di={critical:0,high:1,medium:2,low:3,info:4};function vb(e,t){if(!t)return!0;let n=Di[t];return n===void 0?!0:Di[e]<=n}function bu(e,t){let n=0,r={critical:0,high:0,medium:0,low:0,info:0};for(let s of e){let a=s.findings.filter(d=>vb(d.severity,t));if(a.length===0&&!s.error)continue;if(be.info(""),be.info(_e.bold(` ${s.label}`)+_e.dim(` ${a.length} finding(s)`)),be.info(_e.dim(" "+"\u2500".repeat(60))),s.error){be.error(_e.red(` Error: ${s.error}`));continue}let l=[...a].sort((d,c)=>Di[d.severity]-Di[c.severity]);for(let d of l){let c=Cn[d.severity](` ${d.severity.toUpperCase()} `);be.info(` ${c} ${_e.bold(d.id)} ${d.title}`),be.info(_e.dim(` ${d.description}`)),d.file&&be.info(_e.dim(` File: ${d.file}${d.line?`:${d.line}`:""}`)),be.info(_e.cyan(` Fix: ${d.recommendation}`)),be.info(""),r[d.severity]++,n++}}be.info(""),be.info(_e.bold(" Summary")),be.info(_e.dim(" "+"\u2500".repeat(60))),be.info(` Total: ${_e.bold(String(n))} finding(s)`),be.info(` ${Cn.critical(` ${r.critical} Critical `)} ${Cn.high(` ${r.high} High `)} ${Cn.medium(` ${r.medium} Medium `)} ${Cn.low(` ${r.low} Low `)} ${Cn.info(` ${r.info} Info `)}`);let i=r.critical>0,o=r.high>0;i||o?(be.info(""),be.error(_e.red.bold(` FAIL \u2014 ${r.critical} critical, ${r.high} high issue(s) found`))):n>0?(be.info(""),be.warn(_e.yellow(" PASS (with warnings) \u2014 no critical or high issues"))):(be.info(""),be.success(_e.green.bold(" PASS \u2014 no issues found")))}function Au(e,t){let n=e.flatMap(i=>i.findings),r={};for(let i of Object.values(xe))r[i]=n.filter(o=>o.severity===i).length;return{version:"1.0.0",timestamp:new Date().toISOString(),project:t.name||"unknown",projectVersion:t.version||"0.0.0",summary:{total:n.length,...r},passed:r.critical===0&&r.high===0,checks:e.map(i=>({category:i.category,label:i.label,findingCount:i.findings.length,durationMs:i.durationMs,error:i.error||null})),findings:n}}import{log as Ae,spinner as Rb}from"@clack/prompts";import ue from"chalk";import It from"fs";import $b from"os";import Tn from"path";import{execSync as Pb}from"child_process";var Su=16384,Ob=1,Db=Buffer.from([127,69,76,70]);async function Eu(e){Ae.info(ue.bold.underline("16KB Page Alignment Check")),console.log("");let t=Tn.resolve(e);if(!It.existsSync(t))return Ae.error(ue.red(`APK file not found: ${t}`)),!1;if(!t.endsWith(".apk"))return Ae.error(ue.red("The provided file is not an APK file.")),!1;let n=Rb();n.start("Extracting and analyzing native libraries...");let r=It.mkdtempSync(Tn.join($b.tmpdir(),"mach-16kb-"));try{try{Pb(`unzip -o -q "${t}" "lib/arm64-v8a/*.so" "lib/x86_64/*.so" -d "${r}" 2>/dev/null`,{encoding:"utf-8",maxBuffer:50*1024*1024})}catch{}let i=Iu(Tn.join(r,"lib"));if(i.length===0)return n.stop("Analysis complete."),Ae.info(ue.yellow("No arm64-v8a or x86_64 native libraries found in the APK.")),Ae.info(ue.dim("16KB alignment check only applies to arm64-v8a and x86_64 architectures.")),!0;let o=[];for(let l of i){let d=Tn.relative(r,l),c=Tb(d),u=Tn.basename(l),f=Cb(l);f!==null&&o.push({name:u,filePath:d,arch:c,align:f,compatible:f>=Su})}if(n.stop("Analysis complete."),o.length===0)return Ae.info(ue.yellow("No valid ELF shared libraries found.")),!0;let s=o.filter(l=>!l.compatible),a=o.filter(l=>l.compatible);if(Ae.info(ue.dim(`Checked ${o.length} native librar${o.length===1?"y":"ies"}
|
|
2493
2498
|
`)),s.length>0){Ae.info(ue.red.bold(`Incompatible libraries:
|
|
2494
|
-
`));for(let l of s)Ae.error(ue.red(`${ue.bold(l.name)} ${ue.dim(`(${l.arch})`)}`)),Ae.info(ue.dim(` PT_LOAD alignment: 2**${Math.log2(l.align)} (${l.align} bytes, needs 2**14 = ${pu})`))}return a.length>0&&(console.log(""),Ae.success(ue.green(`${a.length} librar${a.length===1?"y":"ies"} correctly aligned (2**14 or higher).`))),console.log(""),s.length===0?(Ae.success(ue.green.bold("ELF Verification Successful. APK is 16KB compatible.")),!0):(Ae.error(ue.red.bold(`Found ${s.length} unaligned lib${s.length===1?"":"s"} (arm64-v8a/x86_64 libs need to be aligned).`)),console.log(""),Ae.info(ue.yellow("To fix this:")),Ae.info(ue.dim(" 1. Rebuild with NDK r28+ which defaults to 16KB page alignment")),Ae.info(ue.dim(" 2. Or set -DANDROID_SUPPORT_FLEXIBLE_PAGE_SIZES=ON in CMake")),Ae.info(ue.dim(" 3. Update third-party libraries that ship prebuilt .so files")),Ae.info(ue.dim(" 4. After rebuilding: zipalign -p -f -v 16 input.apk output.apk")),console.log(""),Ae.info(ue.dim("Reference: https://developer.android.com/guide/practices/page-sizes")),!1)}catch(i){return n.stop("Analysis failed."),Ae.error(ue.red(`Failed to analyze APK: ${i.message}`)),!1}finally{try{It.rmSync(r,{recursive:!0,force:!0})}catch{}}}function ub(e){let t=It.openSync(e,"r");try{let n=Buffer.alloc(64);if(It.readSync(t,n,0,64,0),!n.subarray(0,4).equals(db))return null;let r=n[4]===2,i=n[5]===1,o=(f,p)=>i?f.readUInt16LE(p):f.readUInt16BE(p),s=(f,p)=>i?f.readUInt32LE(p):f.readUInt32BE(p),a=(f,p)=>Number(i?f.readBigUInt64LE(p):f.readBigUInt64BE(p)),l,d,c;r?(l=a(n,32),d=o(n,54),c=o(n,56)):(l=s(n,28),d=o(n,42),c=o(n,44));let u=null;for(let f=0;f<c;f++){let p=Buffer.alloc(d);if(It.readSync(t,p,0,d,l+f*d),s(p,0)!==cb)continue;let g;r?g=a(p,48):g=s(p,28),g>0&&(u===null||g<u)&&(u=g)}return u??0}catch{return null}finally{It.closeSync(t)}}function mu(e){let t=[];if(!It.existsSync(e))return t;let n=It.readdirSync(e,{withFileTypes:!0});for(let r of n){let i=Pn.join(e,r.name);r.isDirectory()?t.push(...mu(i)):r.name.endsWith(".so")&&t.push(i)}return t}function pb(e){return e.includes("arm64-v8a")?"arm64-v8a":e.includes("x86_64")?"x86_64":"unknown"}var yu=async e=>{if(e.apk){await gb(e);return}let t=process.cwd(),n=pt(t).appRoot,r=br.join(n,"package.json"),i=br.join(n,"pubspec.yaml");!nn.existsSync(r)&&!nn.existsSync(i)&&(Ze.error(st.red("No package.json or Flutter pubspec.yaml found. Run this command from a project root.")),process.exit(1));let o=nn.existsSync(r)?JSON.parse(nn.readFileSync(r,"utf-8")):tt(n),s=_r(n),a=!s&&!!(o.dependencies?.expo||o.devDependencies?.expo);e.json||(Ze.info(st.dim(`Project: ${o.name||"unknown"} v${o.version||"0.0.0"}`)),Ze.info(st.dim(`Type: ${s?"Flutter":a?"Expo":"Bare React Native"}`)),Ze.info(""));let l={json:e.json,fix:e.fix,category:e.category,severity:e.severity,prebuild:e.prebuild,since:e.since},d=await cu(t,l);e.json?console.log(JSON.stringify(uu(d,o),null,2)):du(d,e.severity);let c=d.some(f=>f.findings.some(p=>p.severity==="critical")),u=d.some(f=>f.findings.some(p=>p.severity==="high"));(c||u)&&process.exit(1)},gu=["16kb"];async function gb(e){let t=e.category?.toLowerCase();t&&!gu.includes(t)&&(Ze.error(st.red(`Unknown APK check category: "${t}"`)),Ze.info(st.dim(`Available APK checks: ${gu.join(", ")}`)),process.exit(1));let n=await hb(e.apk);n||process.exit(1);let r=!t,i=!1;(r||t==="16kb")&&(await fu(n)||(i=!0)),i&&process.exit(1)}async function hb(e){if(e.startsWith("build:")){let n=e.slice(6);return await yb(n)}if(e.startsWith("http://")||e.startsWith("https://"))return await bu(e);let t=br.resolve(e);return nn.existsSync(t)?t:(Ze.error(st.red(`APK file not found: ${t}`)),null)}async function yb(e){if(!we())return Ze.error(st.red(`A Mach build ID requires authentication. Run \`${m.nameLower} login\` first, or pass a local APK path.`)),null;let n=hu();n.start(`Fetching APK from build ${e}...`);try{let r=await I.get(`/build/${e}`);if(r.data.status!=="success")throw new Error(r.data.message);let i=r.data.build;if(!i)throw new Error("Build not found");let o=i.artifacts?.find(s=>s.type?s.type==="apk":s.name?.endsWith(".apk")||s.url?.includes(".apk"));return!o||!o.url?(n.stop("No APK artifact found"),Ze.error(st.red("This build does not have an APK artifact.")),Ze.info(st.dim("Make sure the build produced an APK (not just an AAB).")),null):(n.stop(`Found build: ${i.buildId||e}`),await bu(o.url))}catch(r){return n.stop("Failed to fetch build"),Ze.error(st.red(r.message)),null}}async function bu(e){let t=hu();t.start("Downloading APK...");try{let n=nn.mkdtempSync(br.join(fb.tmpdir(),`${m.nameLower}-audit-`)),r=br.join(n,"app.apk"),i=await mb.get(e,{responseType:"arraybuffer"});nn.writeFileSync(r,i.data);let o=(i.data.length/(1024*1024)).toFixed(1);return t.stop(`Downloaded APK (${o} MB)`),r}catch(n){return t.stop("Download failed"),Ze.error(st.red(`Failed to download APK: ${n.message}`)),null}}var Sb=console.log;console.log=()=>{};Ab({quiet:!0});console.log=Sb;var Ib=process.argv.includes("--json");Ib||re(J.bgCyan.black(m.cliTag("Production Build Orchestrator")));var Ar=(e,t=[])=>t.concat(e),x=new bb;x.name(m.nameLower).description(`${m.name} CLI: Powerful Cloud Infrastructure Tools`).version(Ot).option("-y, --yes","Automatically answer yes to all prompts",!1).option("--config <path>",`Use a specific ${m.configFileName}; app paths still resolve from the current directory`).option("--quiet","Suppress non-essential output",!1);x.command("agent").description("Manage local device discovery agent for the Install Hub (port 7070)").argument("[action]","start, run, install, status, restart, stop, or uninstall","start").action(async e=>{await oc(e)});x.command("host").description("Setup AWS S3 static hosting and CloudFront").action(async()=>{re(J.bgCyan.black(m.cliTag("Hosting"))),await Ws()});var Cn=x.command("web").description("Deploy static Expo, React Native Web, and Flutter web apps through Mach");Cn.command("deploy").description("Upload a finished static web build and promote it by default").option("-o, --output <directory>","Finished static output directory (for example dist or build/web)").option("--build","Build Expo or Flutter web locally before deploying").option("-p, --profile <name>","Existing Mach build profile; its web.alias selects the release address").option("-a, --alias <alias>","Override the profile alias: production or staging").option("--no-promote","Keep the deployment as an immutable preview only").option("-m, --message <message>","Deployment message").option("--project-id <id>","Mach project ID").action(async e=>{await aa(e)});Cn.command("status").description("Show production, staging, and custom-domain status").option("--project-id <id>","Mach project ID").action(async e=>{await la(e)});Cn.command("list").description("List recent web deployments").option("--project-id <id>","Mach project ID").action(async e=>{await ca(e)});Cn.command("promote <deployment-id>").description("Point a release alias at an existing ready deployment").option("-a, --alias <alias>","production or staging","production").option("--project-id <id>","Mach project ID").action(async(e,t)=>{await da(e,t)});Cn.command("rollback").description("Restore the previous ready deployment for an alias").option("-a, --alias <alias>","production or staging","production").option("--deployment <id>","Specific deployment to restore").option("--project-id <id>","Mach project ID").action(async e=>{await ua(e)});var Su=Cn.command("domain").description("Attach and manage customer-owned domains");Su.command("add").description("Add a Cloudflare for SaaS custom hostname to production").requiredOption("--domain <hostname>","Hostname such as www.example.com").option("--project-id <id>","Mach project ID").action(async e=>{await pa(e)});Su.command("remove <hostname>").description("Remove a custom hostname").option("--project-id <id>","Mach project ID").action(async(e,t)=>{await fa(e,t)});x.command("sitemap").description("Generate sitemap.xml from Expo Router app structure").option("-o, --output <path>","Output path for sitemap.xml","./public/sitemap.xml").action(async e=>{re(J.bgCyan.black(m.cliTag("Sitemap Generator"))),await ya(e)});x.command("build").description("Run a build on a cloud provider (AWS Spot Instances)").argument("[platform]","Target platform (android, ios, or Flutter web)").option("--platform <os>","Target platform alias (android, ios, web) [Optional]").option("--repo <url>","Git Repository URL").option("--branch <name>","Git Branch").option("--ami <id>","AMI ID").option("--bucket <name>","S3 Bucket for artifacts").option("--region <region>","AWS Region").option("--aws-profile <name>","AWS Credentials Profile").option("-p, --build-profile <name>","Any configured build profile name").option("--profile <name>","Build Profile (alias for --build-profile)").option("--dry-run","Generate User Data script without launching").option("--keep-instance","Do not terminate the instance after build").option("--subnet <id>","VPC Subnet ID to launch the instance in").option("--security-group <id>","VPC Security Group ID to use").option("--ssh-host <host>","Remote host for iOS build (SSH)").option("--ssh-user <user>","SSH username for remote host").option("--ssh-key <path>","Path to private SSH key for remote host").option("--ios-scheme <scheme>","iOS Scheme to build").option("--ios-team-id <id>","Apple Development Team ID").option("--ios-configuration <config>","Xcode configuration (Release/Debug)").option("--ios-export-method <method>","Export method (ad-hoc, app-store, development, enterprise)").option("--ios-api-key-id <id>","App Store Connect API Key ID").option("--ios-api-key-issuer <id>","App Store Connect API Key Issuer ID").option("--ios-api-key-path <path>","Path to App Store Connect API Key (.p8) file").option("--simulator","Build for iOS Simulator (no signing required)").addOption(new Qe("--build-id <id>","Internal build ID").hideHelp()).addOption(new Qe("--project-id <id>","Internal project ID").hideHelp()).addOption(new Qe("--fail-only","Internal: mark an existing build failed").hideHelp()).addOption(new Qe("--error <message>","Internal failure message").hideHelp()).option("--local","Run build on local machine").option("--auto-version","Assign the next Android versionCode or iOS buildNumber from Mach").option("--auto-submit","Submit this build after it completes successfully").option("--submit-track <track>","Google Play track to use with --auto-submit").option("--submit-release-status <status>","Google Play release status to use with --auto-submit").option("--submit-rollout <fraction>","Google Play staged rollout fraction to use with --auto-submit").option("--submit-changes-not-sent-for-review","Commit Google Play changes without automatically sending them for review when using --auto-submit").option("--submit-credential-id <id>","Service credential ID to use with --auto-submit").option("--submit-json-output <path>","Write auto-submit metadata JSON to a file for CI/CD").option("--verbose","Enable verbose logging").option("--json-output <path>","Write build metadata JSON to a file for CI/CD").option("--flutter-obfuscate","Obfuscate Flutter release Dart code and preserve split debug symbols").option("--flutter-split-debug-info","Preserve Flutter release split debug symbols without enabling obfuscation").option("--maestro","Queue a managed Maestro test run after a successful build").option("--maestro-flows <path>","Maestro flow file or directory (default: .maestro)").option("--maestro-device <device>","Managed device profile id (run `mach maestro devices` to list)").option("--maestro-retries <n>","Retries for the Maestro run","1").option("--maestro-record","Enable screen recording where supported").option("--maestro-use-build-source","Use Maestro flows from the build source snapshot instead of uploading local flows").option("--maestro-env <name>","Forward an environment variable to the managed Maestro runner; repeat or comma-separate names",Ar,[]).option("-y, --yes","Automatically answer yes to all prompts",!1).option("--quiet","Suppress non-essential output",!1).action(async(e,t)=>{let n=x.opts();t.yes=t.yes||n.yes,t.quiet=t.quiet||n.quiet,t.platform=e||t.platform,t.buildProfile=t.profile||t.buildProfile,t.quiet||re(J.bgCyan.black(m.cliTag("Cloud Build"))),await Wr(t)});var _b=x.command("maestro").description("Run Maestro tests locally or with the managed Mach runner").option("--platform <os>","Target platform (android/ios)").option("-p, --profile <name>","Build profile to resolve when using --latest").option("--latest","Use the latest successful build for the platform/profile").option("--build-id <id>","Use a specific Mach build ID").option("--build-url <url>","Use a Mach build URL").option("--artifact-url <url>","Use a direct APK or iOS simulator app artifact URL").option("--local","Run Maestro on a connected local emulator/device instead of the managed runner").option("--maestro-flows <path>","Maestro flow file or directory (default: .maestro)").option("--maestro-device <device>","Managed device profile id (run `mach maestro devices` to list); local runs accept a device identifier").option("--maestro-retries <n>","Retries for the Maestro run","1").option("--maestro-record","Enable screen recording where supported").option("--maestro-use-build-source","Use Maestro flows from the build source snapshot instead of uploading local flows").option("--maestro-env <name>","Forward an environment variable to the managed Maestro runner; repeat or comma-separate names",Ar,[]).option("--wait","Wait for managed Maestro completion and exit non-zero on failure").option("--wait-timeout <minutes>","Maximum minutes to wait for managed Maestro completion","60").option("--wait-interval <seconds>","Polling interval while waiting for managed Maestro completion","15").option("--json-output <path>","Write test run metadata JSON to a file for CI/CD").addOption(new Qe("--local-runner","Internal: execute a managed Maestro run on this machine").hideHelp()).addOption(new Qe("--test-run-id <id>","Internal test run ID").hideHelp()).addOption(new Qe("--project-id <id>","Internal project ID").hideHelp()).addOption(new Qe("--runner-token <token>","Internal runner token").hideHelp()).action(async e=>{re(J.bgCyan.black(m.cliTag("Maestro Testing"))),await La(e)});_b.command("devices").description("List device profiles available on the managed Maestro runner fleet").option("--platform <os>","Filter to android or ios").option("--json","Print machine-readable JSON").action(async e=>{await Ma(e)});var rn=e=>e.option("--platform <os>","Target platform: ios, android, or all","all").option("-p, --profile <name>","Flutter build profile used to resolve flavor, target, and Dart defines").option("--channel <name>","OTA channel (for example: production, staging)").option("--branch <name>","Alias for --channel").option("--runtime-version <version>","Runtime version override").option("--message <text>","Release note/message for this OTA update").option("--framework <name>","Framework override: expo, react-native, or flutter").option("--engine <name>","OTA engine override: expo-updates or shorebird").option("--url <url>","Mach OTA update URL override").option("--install-plugin","Install @radhya/mach locally for the Expo config plugin").option("--skip-install","Do not install local Expo plugin dependency").option("--update-id <id>","OTA update id for rollback/promote").option("--release-version <version>","Shorebird release version (defaults to latest for publish)").option("--patch-number <number>","Shorebird patch number for promote/rollback").option("--track <name>","Shorebird track: stable or staging").option("--json","Print JSON output"),on=x.command("ota").description("Setup, publish, verify, and manage Mach OTA updates");rn(on.command("setup").description("Configure OTA for this project")).action(async e=>{let t=x.opts();re(J.bgCyan.black(m.cliTag("OTA Setup"))),await At("setup",{...e,yes:e.yes||t.yes})});rn(on.command("publish").description("Publish an OTA update")).action(async e=>{let t=x.opts();re(J.bgCyan.black(m.cliTag("OTA Publish"))),await At("publish",{...e,yes:e.yes||t.yes})});rn(on.command("release").description("Create a Flutter Shorebird base release")).action(async e=>{let t=x.opts();re(J.bgCyan.black(m.cliTag("OTA Release"))),await At("release",{...e,yes:e.yes||t.yes})});rn(on.command("verify").description("Verify OTA configuration")).action(async e=>{let t=x.opts();re(J.bgCyan.black(m.cliTag("OTA Verify"))),await At("verify",{...e,yes:e.yes||t.yes})});rn(on.command("list").description("List OTA updates for the linked project")).action(async e=>{let t=x.opts();re(J.bgCyan.black(m.cliTag("OTA Updates"))),await At("list",{...e,yes:e.yes||t.yes})});rn(on.command("rollback").description("Roll back an OTA update")).action(async e=>{let t=x.opts();re(J.bgCyan.black(m.cliTag("OTA Rollback"))),await At("rollback",{...e,yes:e.yes||t.yes})});rn(on.command("promote").description("Promote an OTA update")).action(async e=>{let t=x.opts();re(J.bgCyan.black(m.cliTag("OTA Promote"))),await At("promote",{...e,yes:e.yes||t.yes})});x.command("submit").description("Automated Store Submission (App Store / Google Play)").option("--platform <os>","Target platform (ios/android)").option("-p, --profile <name>","Build/submission profile to submit from (e.g. production, preprod)").option("--track <track>","Google Play Track (internal, alpha, beta, production)").option("--release-status <status>","Google Play release status (completed, draft, halted, inProgress)").option("--rollout <fraction>","Google Play staged rollout fraction for inProgress releases (example: 0.1)").option("--changes-not-sent-for-review","Commit Google Play changes without automatically sending them for review").option("--ssh-host <host>","Remote macOS host for iOS submission").option("--ssh-user <user>","SSH username for remote iOS submission").option("--ssh-key <path>","Path to private SSH key for remote iOS submission").option("--credential-id <id>","Service credential ID to use when multiple submission credentials exist").option("--local","Run submission on this machine (internal runner mode for iOS)").addOption(new Qe("--submit-id <id>","Internal submission ID").hideHelp()).addOption(new Qe("--project-id <id>","Internal project ID").hideHelp()).addOption(new Qe("--package-name <name>","Internal Android package name").hideHelp()).addOption(new Qe("--bundle-id <id>","Internal iOS bundle identifier").hideHelp()).option("--json-output <path>","Write submission metadata JSON to a file for CI/CD").option("--latest","Use the latest successful build for submission").option("--build-id <id>","Use a specific build ID for submission").action(async e=>{let t=x.opts();e.quiet=e.quiet||t.quiet,e.yes=e.yes||t.yes,re(J.bgCyan.black(m.cliTag("Store Submission"))),await jr(e)});x.command("login").description(`Login to ${m.name} Dashboard`).action(async()=>{re(J.bgCyan.black(m.cliTag("Login"))),await cc()});x.command("logout").description(`Logout from ${m.name} on this machine`).action(async()=>{re(J.bgCyan.black(m.cliTag("Logout"))),await dc()});x.command("link").description(`Link local directory to a ${m.name} Project`).action(async()=>{re(J.bgCyan.black(m.cliTag("Link Project"))),await pc()});x.command("me").description("Display currently logged in user details").action(async()=>{await Kc()});x.command("init").description(`Create a new ${m.name} Project`).action(async()=>{re(J.bgCyan.black(m.cliTag("Init Project"))),await fc()});x.command("env").description("Manage Environment Variables").argument("<action>","Action to perform: set, list, pull, download, or export").argument("[args...]","Key=Value pairs for set action").option("-e, --environment <name>","Environment to pull/download","development").option("-o, --out <file>","Output file for pull/download",".env.local").option("--overwrite","Overwrite output file if it already exists").action(async(e,t,n)=>{re(J.bgCyan.black(m.cliTag("Env Manager"))),await gc(e,t,n)});x.command("start").description("Start the app with its configured Flutter or JavaScript toolchain").option("-p, --build-profile <name>","Any configured build profile name").option("--tunnel","Use ngrok tunnel").option("--lan","Use LAN IP").option("--localhost","Use localhost").option("-c, --clear","Clear Metro cache").option("--port <number>","Port to listen on").option("--ios","Start on iOS").option("--android","Start on Android").option("--web","Start on Web").action(async e=>{re(J.bgCyan.black(m.cliTag("Dev Server"))),await Jc(e)});var Sr=x.command("push").description("Configure and send provider-direct APNs/FCM notifications");Sr.command("setup").description("Install and wire a working default push experience").option("-p, --profile <name>","Build profile used to resolve app identity and Flutter entrypoint").option("--name <name>","Push app display name").option("--ios-bundle <id>","iOS bundle identifier").option("--android-package <name>","Android package name").option("-e, --environment <name>","development, preview, or production").option("--google-services-file <path>","Android google-services.json path").option("--skip-install","Generate setup without installing SDK dependencies").action(Bs);Sr.command("init").description("Create only the server-side push app (advanced)").option("-p, --profile <name>","Build profile used to resolve app identity").option("--name <name>","Push app display name").option("--ios-bundle <id>","iOS bundle identifier").option("--android-package <name>","Android package name").option("-e, --environment <name>","development, preview, or production","production").option("--google-services-file <path>","Expo Android google-services.json path").action(js);var Eu=Sr.command("credentials").description("Configure provider credentials");Eu.command("apns").description("Configure an Apple APNs .p8 authentication key").requiredOption("--file <path>","APNs .p8 file").requiredOption("--team-id <id>","Apple Developer team ID").requiredOption("--key-id <id>","APNs key ID").option("--bundle-id <id>","iOS bundle identifier").option("--app <id>","MACH Push app ID").option("-e, --environment <name>","development, preview, or production").action(e=>xi("apns",e));Eu.command("fcm").description("Configure a Firebase service-account JSON file").requiredOption("--file <path>","Firebase service-account JSON").option("--app <id>","MACH Push app ID").option("-e, --environment <name>","Deprecated; accepted for compatibility because FCM credentials are package-wide").action(e=>xi("fcm",e));Sr.command("send").description("Queue one transient push notification").requiredOption("--title <text>","Notification title").requiredOption("--body <text>","Notification body").option("--app <id>","MACH Push app ID").option("-e, --environment <name>","development, preview, or production").option("--token <token>","MACH push token; repeatable",Ar,[]).option("--user <id>","Application user ID; repeatable",Ar,[]).option("--all","Send to all active devices").option("--platform <platform>","Limit --all to ios or android").option("--data <json>","String-to-string custom data JSON").option("--sound <name>","Provider sound name").option("--badge <number>","iOS badge count").option("--ttl <seconds>","Provider time-to-live").option("--collapse-key <key>","Provider collapse key").option("--android-channel-id <id>","Android notification channel").action(Hs);Sr.command("status").description("Show aggregate push delivery counters").option("--days <number>","Statistics range, 1-90","30").action(Gs);x.command("config").description("Show resolved configuration for a profile").option("-p, --profile <name>","Build profile to resolve").option("--json","Output as JSON").action(async e=>{await Xc(e)});var Iu=x.command("version").description("Show or seed DB-owned native version counters"),_u=e=>e.requiredOption("--platform <os>","Target platform: ios or android").option("-p, --profile <name>","Build profile used to resolve package/bundle scope").option("--scope <value>","Counter scope override, usually package name or bundle identifier").option("--package <name>","Android package override").option("--bundle-id <id>","iOS bundle identifier override").option("--json","Print JSON output");_u(Iu.command("show").description("Show the current native version counter")).action(async e=>{re(J.bgCyan.black(m.cliTag("Version Counter"))),await cs("show",e)});_u(Iu.command("seed").description("Seed the native version counter for an existing app").argument("[value]","Latest already-used value; the next build uses value + 1").option("--value <number>","Latest already-used value; the next build uses value + 1").option("--force","Allow lowering an existing counter")).action(async(e,t)=>{re(J.bgCyan.black(m.cliTag("Version Counter"))),await cs("seed",{...t,value:t.value??e})});var wu=x.command("deeplink").description("Configure and verify app links, universal links, and URI schemes");wu.command("setup").description("Generate deep link config, hosted association files, and Expo plugin support").option("--domain <domain>","Associated domain, e.g. app.example.com").option("--base-url <url>","Base URL, e.g. https://app.example.com").option("-p, --profile <name>","Profile used for build/submit overrides").option("--platform <platform>","ios, android, or all").option("--framework <framework>","expo, react-native, or flutter").option("--scheme <scheme>","URI scheme, e.g. myapp").option("--ios-bundle-id <id>","iOS bundle identifier").option("--android-package <name>","Android package name").option("--apple-team-id <id>","Apple Developer Team ID").option("--app-store-id <id>","App Store app ID for Smart App Banner").option("--android-fingerprint <sha256>","Android SHA256 signing certificate fingerprint; repeatable",Ar,[]).option("--output <dir>","Directory for hosted files, e.g. public or deep-links").option("--install-plugin","Install @radhya/mach locally so Expo can use the packaged config plugin").option("--no-install-plugin","Do not install @radhya/mach for Expo projects; use the local plugin fallback if the package is missing").option("-y, --yes","Automatically answer yes to prompts",!1).action(async e=>{let t=x.opts();e.yes=e.yes||t.yes,re(J.bgCyan.black(m.cliTag("Deep Links"))),await $d(e)});wu.command("verify").description("Verify local and optionally live deep link configuration").option("-p, --profile <name>","Profile used for build/submit overrides").option("--live","Check hosted files over HTTPS").option("--android-device","Print Android device verification commands").action(async e=>{re(J.bgCyan.black(m.cliTag("Deep Link Verify"))),await Od(e)});x.command("credentials").description("Unified, interactive credential management (iOS/Android)").option("--platform <os>","Platform to manage: ios or android").option("-p, --profile <name>","Any configured build profile name").option("--credential-type <type>","iOS signing type override: development, adhoc, or store").option("--force","Force recreate certificates (nuke existing on Apple Portal)",!1).action(async e=>{let{credentialsMainCommand:t}=await import("./credentials-LFUCTBJU.js");await t(e)});x.command("credentials:setup").description("Automated credential provisioning (iOS/Android) [Legacy]").requiredOption("--platform <os>","Platform: ios or android").option("--profile <name>","Any configured build profile name").option("--credential-type <type>","iOS signing type override: development, adhoc, or store").option("--bundle-id <id>","Bundle ID / Package Name (optional, auto-detected)").option("--team-id <id>","Apple Team ID (iOS only)").option("--key-alias <alias>","Android keystore alias (optional, auto-generated)").option("--aws-profile <name>","AWS Credentials Profile (for S3 storage)").option("--force","Force recreate certificates (nuke existing on Apple Portal)",!1).action(async e=>{re(J.bgCyan.black(m.cliTag("Credentials Setup"))),await xn(e),Au(J.green("Done!"))});x.command("credentials:service").description("Upload Service Credentials (ASC API Key / Google Service JSON) [Legacy]").requiredOption("--platform <os>","Platform: ios or android").option("--file <path>","Path to credential file (.p8 or .json)").option("--issuer-id <id>","ASC API Key Issuer ID (iOS only)").option("--key-id <id>","ASC API Key ID (iOS only)").option("--bundle-id <id>","Bundle identifier / Android package name to attach this service credential to").option("--package-name <name>","Android package name to attach this service credential to").option("-p, --profile <name>","Build profile to resolve package/bundle identifier from config").action(async e=>{re(J.bgCyan.black(m.cliTag("Service Credentials"))),await Us(e),Au(J.green("Done!"))});var ys=x.command("device").description("Manage registered iOS test devices");ys.command("register").description("Register a connected iOS device or enter UDID manually").option("--udid <udid>","Device UDID (skip auto-detection)").option("--name <name>","Device name").option("--team-id <id>","Apple Developer Team ID for this device").action(async e=>{await yi("register",e)});ys.command("list").description("List all registered devices").option("--team-id <id>","Filter by Apple Developer Team ID").action(async e=>{await yi("list",e)});ys.command("remove").description("Remove a registered device").option("--udid <udid>","Device UDID to remove").option("--team-id <id>","Apple Developer Team ID for this device").action(async e=>{await yi("remove",e)});x.command("audit").description("Run project health, delivery impact, and security checks").option("--apk <path>","Path to APK file (runs APK diagnostics like 16KB alignment)").option("--json","Output results as JSON (for CI/CD)").option("--fix","Auto-apply fixes where possible").option("--category <name>","Run one category (e.g. project, impact, permissions, secrets)").option("--severity <level>","Minimum severity to display (critical, high, medium, low, info)").option("--prebuild","Run expo prebuild for deeper manifest/plist analysis").option("--since <git-ref>","Assess delivery impact from a branch, tag, or commit").action(async e=>{e.json||re(J.bgCyan.black(m.cliTag(e.apk?"APK Audit":"Project Audit"))),await yu(e)});var wb=new Set(["login","logout","agent"]),vb=new Set(["build","credentials","credentials:service","credentials:setup","env","push","submit","version"]),Rb=new Set(["publish","list","rollback","promote"]);function $b(e){let t=[],n=e;for(;n&&n!==x;)t.unshift(n.name()),n=n.parent;return t}function Ob(e,t){let[n,r]=$b(e);return vb.has(n)?!0:n==="ota"?Rb.has(r):n==="maestro"?r!=="devices"&&!t.local&&!t.localRunner:!1}x.hook("preAction",async(e,t)=>{let n=String(x.opts().config||"").trim();n&&(process.env.MACH_CONFIG_PATH=Eb.resolve(n));let r=t.name(),i=t.opts?.()||{};if(r==="maestro"&&(i.local||i.localRunner)||t.parent?.name()==="deeplink"||wb.has(r)||(ke(),!Ob(t,i)))return;let o=Vs(i,K());if(!o)throw new mt(`No linked ${m.name} project was found. Run \`${m.nameLower} link\` before using this command.`);await zs(o)});x.on("command:*",()=>{console.error(`Invalid command: %s
|
|
2495
|
-
See --help for a list of available commands.`,
|
|
2499
|
+
`));for(let l of s)Ae.error(ue.red(`${ue.bold(l.name)} ${ue.dim(`(${l.arch})`)}`)),Ae.info(ue.dim(` PT_LOAD alignment: 2**${Math.log2(l.align)} (${l.align} bytes, needs 2**14 = ${Su})`))}return a.length>0&&(console.log(""),Ae.success(ue.green(`${a.length} librar${a.length===1?"y":"ies"} correctly aligned (2**14 or higher).`))),console.log(""),s.length===0?(Ae.success(ue.green.bold("ELF Verification Successful. APK is 16KB compatible.")),!0):(Ae.error(ue.red.bold(`Found ${s.length} unaligned lib${s.length===1?"":"s"} (arm64-v8a/x86_64 libs need to be aligned).`)),console.log(""),Ae.info(ue.yellow("To fix this:")),Ae.info(ue.dim(" 1. Rebuild with NDK r28+ which defaults to 16KB page alignment")),Ae.info(ue.dim(" 2. Or set -DANDROID_SUPPORT_FLEXIBLE_PAGE_SIZES=ON in CMake")),Ae.info(ue.dim(" 3. Update third-party libraries that ship prebuilt .so files")),Ae.info(ue.dim(" 4. After rebuilding: zipalign -p -f -v 16 input.apk output.apk")),console.log(""),Ae.info(ue.dim("Reference: https://developer.android.com/guide/practices/page-sizes")),!1)}catch(i){return n.stop("Analysis failed."),Ae.error(ue.red(`Failed to analyze APK: ${i.message}`)),!1}finally{try{It.rmSync(r,{recursive:!0,force:!0})}catch{}}}function Cb(e){let t=It.openSync(e,"r");try{let n=Buffer.alloc(64);if(It.readSync(t,n,0,64,0),!n.subarray(0,4).equals(Db))return null;let r=n[4]===2,i=n[5]===1,o=(f,p)=>i?f.readUInt16LE(p):f.readUInt16BE(p),s=(f,p)=>i?f.readUInt32LE(p):f.readUInt32BE(p),a=(f,p)=>Number(i?f.readBigUInt64LE(p):f.readBigUInt64BE(p)),l,d,c;r?(l=a(n,32),d=o(n,54),c=o(n,56)):(l=s(n,28),d=o(n,42),c=o(n,44));let u=null;for(let f=0;f<c;f++){let p=Buffer.alloc(d);if(It.readSync(t,p,0,d,l+f*d),s(p,0)!==Ob)continue;let g;r?g=a(p,48):g=s(p,28),g>0&&(u===null||g<u)&&(u=g)}return u??0}catch{return null}finally{It.closeSync(t)}}function Iu(e){let t=[];if(!It.existsSync(e))return t;let n=It.readdirSync(e,{withFileTypes:!0});for(let r of n){let i=Tn.join(e,r.name);r.isDirectory()?t.push(...Iu(i)):r.name.endsWith(".so")&&t.push(i)}return t}function Tb(e){return e.includes("arm64-v8a")?"arm64-v8a":e.includes("x86_64")?"x86_64":"unknown"}var vu=async e=>{if(e.apk){await xb(e);return}let t=process.cwd(),n=pt(t).appRoot,r=br.join(n,"package.json"),i=br.join(n,"pubspec.yaml");!nn.existsSync(r)&&!nn.existsSync(i)&&(Ze.error(st.red("No package.json or Flutter pubspec.yaml found. Run this command from a project root.")),process.exit(1));let o=nn.existsSync(r)?JSON.parse(nn.readFileSync(r,"utf-8")):tt(n),s=_r(n),a=!s&&!!(o.dependencies?.expo||o.devDependencies?.expo);e.json||(Ze.info(st.dim(`Project: ${o.name||"unknown"} v${o.version||"0.0.0"}`)),Ze.info(st.dim(`Type: ${s?"Flutter":a?"Expo":"Bare React Native"}`)),Ze.info(""));let l={json:e.json,fix:e.fix,category:e.category,severity:e.severity,prebuild:e.prebuild,since:e.since},d=await yu(t,l);e.json?console.log(JSON.stringify(Au(d,o),null,2)):bu(d,e.severity);let c=d.some(f=>f.findings.some(p=>p.severity==="critical")),u=d.some(f=>f.findings.some(p=>p.severity==="high"));(c||u)&&process.exit(1)},_u=["16kb"];async function xb(e){let t=e.category?.toLowerCase();t&&!_u.includes(t)&&(Ze.error(st.red(`Unknown APK check category: "${t}"`)),Ze.info(st.dim(`Available APK checks: ${_u.join(", ")}`)),process.exit(1));let n=await Mb(e.apk);n||process.exit(1);let r=!t,i=!1;(r||t==="16kb")&&(await Eu(n)||(i=!0)),i&&process.exit(1)}async function Mb(e){if(e.startsWith("build:")){let n=e.slice(6);return await Lb(n)}if(e.startsWith("http://")||e.startsWith("https://"))return await Ru(e);let t=br.resolve(e);return nn.existsSync(t)?t:(Ze.error(st.red(`APK file not found: ${t}`)),null)}async function Lb(e){if(!we())return Ze.error(st.red(`A Mach build ID requires authentication. Run \`${m.nameLower} login\` first, or pass a local APK path.`)),null;let n=wu();n.start(`Fetching APK from build ${e}...`);try{let r=await I.get(`/build/${e}`);if(r.data.status!=="success")throw new Error(r.data.message);let i=r.data.build;if(!i)throw new Error("Build not found");let o=i.artifacts?.find(s=>s.type?s.type==="apk":s.name?.endsWith(".apk")||s.url?.includes(".apk"));return!o||!o.url?(n.stop("No APK artifact found"),Ze.error(st.red("This build does not have an APK artifact.")),Ze.info(st.dim("Make sure the build produced an APK (not just an AAB).")),null):(n.stop(`Found build: ${i.buildId||e}`),await Ru(o.url))}catch(r){return n.stop("Failed to fetch build"),Ze.error(st.red(r.message)),null}}async function Ru(e){let t=wu();t.start("Downloading APK...");try{let n=nn.mkdtempSync(br.join(kb.tmpdir(),`${m.nameLower}-audit-`)),r=br.join(n,"app.apk"),i=await Nb.get(e,{responseType:"arraybuffer"});nn.writeFileSync(r,i.data);let o=(i.data.length/(1024*1024)).toFixed(1);return t.stop(`Downloaded APK (${o} MB)`),r}catch(n){return t.stop("Download failed"),Ze.error(st.red(`Failed to download APK: ${n.message}`)),null}}var jb=console.log;console.log=()=>{};Ub({quiet:!0});console.log=jb;var Hb=process.argv.includes("--json");Hb||re(J.bgCyan.black(m.cliTag("Production Build Orchestrator")));var Ar=(e,t=[])=>t.concat(e),M=new Fb;M.name(m.nameLower).description(`${m.name} CLI: Powerful Cloud Infrastructure Tools`).version(Pt).option("-y, --yes","Automatically answer yes to all prompts",!1).option("--config <path>",`Use a specific ${m.configFileName}; app paths still resolve from the current directory`).option("--quiet","Suppress non-essential output",!1);M.command("agent").description("Manage local device discovery agent for the Install Hub (port 7070)").argument("[action]","start, run, install, status, restart, stop, or uninstall","start").action(async e=>{await fc(e)});M.command("host").description("Setup AWS S3 static hosting and CloudFront").action(async()=>{re(J.bgCyan.black(m.cliTag("Hosting"))),await Ys()});var rn=M.command("web").description("Deploy static Expo, React Native Web, and Flutter web apps through Mach");rn.command("deploy").description("Upload a finished static web build and promote it by default").option("-o, --output <directory>","Finished static output directory (for example dist or build/web)").option("--build","Build Expo or Flutter web locally before deploying").option("-p, --profile <name>","Existing Mach build profile; its web.alias selects the release address").option("-a, --alias <alias>","Override the profile alias: production or staging").option("--no-promote","Keep the deployment as an immutable preview only").option("-m, --message <message>","Deployment message").option("--project-id <id>","Mach project ID").action(async e=>{await la(e)});rn.command("status").description("Show production, staging, and custom-domain status").option("--project-id <id>","Mach project ID").action(async e=>{await ca(e)});rn.command("list").description("List recent web deployments").option("--project-id <id>","Mach project ID").action(async e=>{await da(e)});rn.command("promote <deployment-id>").description("Point a release alias at an existing ready deployment").option("-a, --alias <alias>","production or staging","production").option("--project-id <id>","Mach project ID").action(async(e,t)=>{await ua(e,t)});rn.command("rollback").description("Restore the previous ready deployment for an alias").option("-a, --alias <alias>","production or staging","production").option("--deployment <id>","Specific deployment to restore").option("--project-id <id>","Mach project ID").action(async e=>{await pa(e)});rn.command("test [test-files...]").description("Run project-local Playwright web E2E tests (no Mach runner or billing)").option("-c, --config <path>","Playwright configuration file").option("--base-url <url>","Set PLAYWRIGHT_BASE_URL for a config that reads it").option("--project <name>","Run one Playwright browser project from the project config").option("--grep <pattern>","Run tests whose title matches this regular expression").option("--headed","Show the browser window while testing").option("--ui","Open Playwright UI mode").option("--debug","Run Playwright Inspector").option("--workers <count>","Maximum parallel Playwright workers").option("--retries <count>","Retry failed Playwright tests this many times").option("--trace <mode>","Playwright trace mode, for example on-first-retry").option("--install-browser <browser>","Install a local browser binary before testing (chromium, firefox, or webkit)").action(async(e,t)=>{await Sa({...t,testFiles:e})});var Pu=rn.command("domain").description("Attach and manage customer-owned domains");Pu.command("add").description("Add a Cloudflare for SaaS custom hostname to production").requiredOption("--domain <hostname>","Hostname such as www.example.com").option("--project-id <id>","Mach project ID").action(async e=>{await fa(e)});Pu.command("remove <hostname>").description("Remove a custom hostname").option("--project-id <id>","Mach project ID").action(async(e,t)=>{await ma(e,t)});M.command("sitemap").description("Generate sitemap.xml from Expo Router app structure").option("-o, --output <path>","Output path for sitemap.xml","./public/sitemap.xml").action(async e=>{re(J.bgCyan.black(m.cliTag("Sitemap Generator"))),await wa(e)});M.command("build").description("Run a build on a cloud provider (AWS Spot Instances)").argument("[platform]","Target platform (android, ios, or Flutter web)").option("--platform <os>","Target platform alias (android, ios, web) [Optional]").option("--repo <url>","Git Repository URL").option("--branch <name>","Git Branch").option("--ami <id>","AMI ID").option("--bucket <name>","S3 Bucket for artifacts").option("--region <region>","AWS Region").option("--aws-profile <name>","AWS Credentials Profile").option("-p, --build-profile <name>","Any configured build profile name").option("--profile <name>","Build Profile (alias for --build-profile)").option("--dry-run","Generate User Data script without launching").option("--keep-instance","Do not terminate the instance after build").option("--subnet <id>","VPC Subnet ID to launch the instance in").option("--security-group <id>","VPC Security Group ID to use").option("--ssh-host <host>","Remote host for iOS build (SSH)").option("--ssh-user <user>","SSH username for remote host").option("--ssh-key <path>","Path to private SSH key for remote host").option("--ios-scheme <scheme>","iOS Scheme to build").option("--ios-team-id <id>","Apple Development Team ID").option("--ios-configuration <config>","Xcode configuration (Release/Debug)").option("--ios-export-method <method>","Export method (ad-hoc, app-store, development, enterprise)").option("--ios-api-key-id <id>","App Store Connect API Key ID").option("--ios-api-key-issuer <id>","App Store Connect API Key Issuer ID").option("--ios-api-key-path <path>","Path to App Store Connect API Key (.p8) file").option("--simulator","Build for iOS Simulator (no signing required)").addOption(new Qe("--build-id <id>","Internal build ID").hideHelp()).addOption(new Qe("--project-id <id>","Internal project ID").hideHelp()).addOption(new Qe("--fail-only","Internal: mark an existing build failed").hideHelp()).addOption(new Qe("--error <message>","Internal failure message").hideHelp()).option("--local","Run build on local machine").option("--auto-version","Assign the next Android versionCode or iOS buildNumber from Mach").option("--auto-submit","Submit this build after it completes successfully").option("--submit-track <track>","Google Play track to use with --auto-submit").option("--submit-release-status <status>","Google Play release status to use with --auto-submit").option("--submit-rollout <fraction>","Google Play staged rollout fraction to use with --auto-submit").option("--submit-changes-not-sent-for-review","Commit Google Play changes without automatically sending them for review when using --auto-submit").option("--submit-credential-id <id>","Service credential ID to use with --auto-submit").option("--submit-json-output <path>","Write auto-submit metadata JSON to a file for CI/CD").option("--verbose","Enable verbose logging").option("--json-output <path>","Write build metadata JSON to a file for CI/CD").option("--flutter-obfuscate","Obfuscate Flutter release Dart code and preserve split debug symbols").option("--flutter-split-debug-info","Preserve Flutter release split debug symbols without enabling obfuscation").option("--maestro","Queue a managed Maestro test run after a successful build").option("--maestro-flows <path>","Maestro flow file or directory (default: .maestro)").option("--maestro-device <device>","Managed device profile id (run `mach maestro devices` to list)").option("--maestro-retries <n>","Retries for the Maestro run","1").option("--maestro-record","Enable screen recording where supported").option("--maestro-use-build-source","Use Maestro flows from the build source snapshot instead of uploading local flows").option("--maestro-env <name>","Forward an environment variable to the managed Maestro runner; repeat or comma-separate names",Ar,[]).option("-y, --yes","Automatically answer yes to all prompts",!1).option("--quiet","Suppress non-essential output",!1).action(async(e,t)=>{let n=M.opts();t.yes=t.yes||n.yes,t.quiet=t.quiet||n.quiet,t.platform=e||t.platform,t.buildProfile=t.profile||t.buildProfile,t.quiet||re(J.bgCyan.black(m.cliTag("Cloud Build"))),await Yr(t)});var Gb=M.command("maestro").description("Run Maestro tests locally or with the managed Mach runner").option("--platform <os>","Target platform (android/ios)").option("-p, --profile <name>","Build profile to resolve when using --latest").option("--latest","Use the latest successful build for the platform/profile").option("--build-id <id>","Use a specific Mach build ID").option("--build-url <url>","Use a Mach build URL").option("--artifact-url <url>","Use a direct APK or iOS simulator app artifact URL").option("--local","Run Maestro on a connected local emulator/device instead of the managed runner").option("--maestro-flows <path>","Maestro flow file or directory (default: .maestro)").option("--maestro-device <device>","Managed device profile id (run `mach maestro devices` to list); local runs accept a device identifier").option("--maestro-retries <n>","Retries for the Maestro run","1").option("--maestro-record","Enable screen recording where supported").option("--maestro-use-build-source","Use Maestro flows from the build source snapshot instead of uploading local flows").option("--maestro-env <name>","Forward an environment variable to the managed Maestro runner; repeat or comma-separate names",Ar,[]).option("--wait","Wait for managed Maestro completion and exit non-zero on failure").option("--wait-timeout <minutes>","Maximum minutes to wait for managed Maestro completion","60").option("--wait-interval <seconds>","Polling interval while waiting for managed Maestro completion","15").option("--json-output <path>","Write test run metadata JSON to a file for CI/CD").addOption(new Qe("--local-runner","Internal: execute a managed Maestro run on this machine").hideHelp()).addOption(new Qe("--test-run-id <id>","Internal test run ID").hideHelp()).addOption(new Qe("--project-id <id>","Internal project ID").hideHelp()).addOption(new Qe("--runner-token <token>","Internal runner token").hideHelp()).action(async e=>{re(J.bgCyan.black(m.cliTag("Maestro Testing"))),await Va(e)});Gb.command("devices").description("List device profiles available on the managed Maestro runner fleet").option("--platform <os>","Filter to android or ios").option("--json","Print machine-readable JSON").action(async e=>{await za(e)});var on=e=>e.option("--platform <os>","Target platform: ios, android, or all","all").option("-p, --profile <name>","Flutter build profile used to resolve flavor, target, and Dart defines").option("--channel <name>","OTA channel (for example: production, staging)").option("--branch <name>","Alias for --channel").option("--runtime-version <version>","Runtime version override").option("--message <text>","Release note/message for this OTA update").option("--framework <name>","Framework override: expo, react-native, or flutter").option("--engine <name>","OTA engine override: expo-updates or shorebird").option("--url <url>","Mach OTA update URL override").option("--install-plugin","Install @radhya/mach locally for the Expo config plugin").option("--skip-install","Do not install local Expo plugin dependency").option("--update-id <id>","OTA update id for rollback/promote").option("--release-version <version>","Shorebird release version (defaults to latest for publish)").option("--patch-number <number>","Shorebird patch number for promote/rollback").option("--track <name>","Shorebird track: stable or staging").option("--json","Print JSON output"),sn=M.command("ota").description("Setup, publish, verify, and manage Mach OTA updates");on(sn.command("setup").description("Configure OTA for this project")).action(async e=>{let t=M.opts();re(J.bgCyan.black(m.cliTag("OTA Setup"))),await At("setup",{...e,yes:e.yes||t.yes})});on(sn.command("publish").description("Publish an OTA update")).action(async e=>{let t=M.opts();re(J.bgCyan.black(m.cliTag("OTA Publish"))),await At("publish",{...e,yes:e.yes||t.yes})});on(sn.command("release").description("Create a Flutter Shorebird base release")).action(async e=>{let t=M.opts();re(J.bgCyan.black(m.cliTag("OTA Release"))),await At("release",{...e,yes:e.yes||t.yes})});on(sn.command("verify").description("Verify OTA configuration")).action(async e=>{let t=M.opts();re(J.bgCyan.black(m.cliTag("OTA Verify"))),await At("verify",{...e,yes:e.yes||t.yes})});on(sn.command("list").description("List OTA updates for the linked project")).action(async e=>{let t=M.opts();re(J.bgCyan.black(m.cliTag("OTA Updates"))),await At("list",{...e,yes:e.yes||t.yes})});on(sn.command("rollback").description("Roll back an OTA update")).action(async e=>{let t=M.opts();re(J.bgCyan.black(m.cliTag("OTA Rollback"))),await At("rollback",{...e,yes:e.yes||t.yes})});on(sn.command("promote").description("Promote an OTA update")).action(async e=>{let t=M.opts();re(J.bgCyan.black(m.cliTag("OTA Promote"))),await At("promote",{...e,yes:e.yes||t.yes})});M.command("submit").description("Automated Store Submission (App Store / Google Play)").option("--platform <os>","Target platform (ios/android)").option("-p, --profile <name>","Build/submission profile to submit from (e.g. production, preprod)").option("--track <track>","Google Play Track (internal, alpha, beta, production)").option("--release-status <status>","Google Play release status (completed, draft, halted, inProgress)").option("--rollout <fraction>","Google Play staged rollout fraction for inProgress releases (example: 0.1)").option("--changes-not-sent-for-review","Commit Google Play changes without automatically sending them for review").option("--ssh-host <host>","Remote macOS host for iOS submission").option("--ssh-user <user>","SSH username for remote iOS submission").option("--ssh-key <path>","Path to private SSH key for remote iOS submission").option("--credential-id <id>","Service credential ID to use when multiple submission credentials exist").option("--local","Run submission on this machine (internal runner mode for iOS)").addOption(new Qe("--submit-id <id>","Internal submission ID").hideHelp()).addOption(new Qe("--project-id <id>","Internal project ID").hideHelp()).addOption(new Qe("--package-name <name>","Internal Android package name").hideHelp()).addOption(new Qe("--bundle-id <id>","Internal iOS bundle identifier").hideHelp()).option("--json-output <path>","Write submission metadata JSON to a file for CI/CD").option("--latest","Use the latest successful build for submission").option("--build-id <id>","Use a specific build ID for submission").action(async e=>{let t=M.opts();e.quiet=e.quiet||t.quiet,e.yes=e.yes||t.yes,re(J.bgCyan.black(m.cliTag("Store Submission"))),await Br(e)});M.command("login").description(`Login to ${m.name} Dashboard`).action(async()=>{re(J.bgCyan.black(m.cliTag("Login"))),await yc()});M.command("logout").description(`Logout from ${m.name} on this machine`).action(async()=>{re(J.bgCyan.black(m.cliTag("Logout"))),await bc()});M.command("link").description(`Link local directory to a ${m.name} Project`).action(async()=>{re(J.bgCyan.black(m.cliTag("Link Project"))),await Sc()});M.command("me").description("Display currently logged in user details").action(async()=>{await ed()});M.command("init").description(`Create a new ${m.name} Project`).action(async()=>{re(J.bgCyan.black(m.cliTag("Init Project"))),await Ec()});M.command("env").description("Manage Environment Variables").argument("<action>","Action to perform: set, list, pull, download, or export").argument("[args...]","Key=Value pairs for set action").option("-e, --environment <name>","Environment to pull/download","development").option("-o, --out <file>","Output file for pull/download",".env.local").option("--overwrite","Overwrite output file if it already exists").action(async(e,t,n)=>{re(J.bgCyan.black(m.cliTag("Env Manager"))),await _c(e,t,n)});M.command("start").description("Start the app with its configured Flutter or JavaScript toolchain").option("-p, --build-profile <name>","Any configured build profile name").option("--tunnel","Use ngrok tunnel").option("--lan","Use LAN IP").option("--localhost","Use localhost").option("-c, --clear","Clear Metro cache").option("--port <number>","Port to listen on").option("--ios","Start on iOS").option("--android","Start on Android").option("--web","Start on Web").action(async e=>{re(J.bgCyan.black(m.cliTag("Dev Server"))),await id(e)});var Sr=M.command("push").description("Configure and send provider-direct APNs/FCM notifications");Sr.command("setup").description("Install and wire a working default push experience").option("-p, --profile <name>","Build profile used to resolve app identity and Flutter entrypoint").option("--name <name>","Push app display name").option("--ios-bundle <id>","iOS bundle identifier").option("--android-package <name>","Android package name").option("-e, --environment <name>","development, preview, or production").option("--google-services-file <path>","Android google-services.json path").option("--skip-install","Generate setup without installing SDK dependencies").action(Hs);Sr.command("init").description("Create only the server-side push app (advanced)").option("-p, --profile <name>","Build profile used to resolve app identity").option("--name <name>","Push app display name").option("--ios-bundle <id>","iOS bundle identifier").option("--android-package <name>","Android package name").option("-e, --environment <name>","development, preview, or production","production").option("--google-services-file <path>","Expo Android google-services.json path").action(Bs);var Ou=Sr.command("credentials").description("Configure provider credentials");Ou.command("apns").description("Configure an Apple APNs .p8 authentication key").requiredOption("--file <path>","APNs .p8 file").requiredOption("--team-id <id>","Apple Developer team ID").requiredOption("--key-id <id>","APNs key ID").option("--bundle-id <id>","iOS bundle identifier").option("--app <id>","MACH Push app ID").option("-e, --environment <name>","development, preview, or production").action(e=>Mi("apns",e));Ou.command("fcm").description("Configure a Firebase service-account JSON file").requiredOption("--file <path>","Firebase service-account JSON").option("--app <id>","MACH Push app ID").option("-e, --environment <name>","Deprecated; accepted for compatibility because FCM credentials are package-wide").action(e=>Mi("fcm",e));Sr.command("send").description("Queue one transient push notification").requiredOption("--title <text>","Notification title").requiredOption("--body <text>","Notification body").option("--app <id>","MACH Push app ID").option("-e, --environment <name>","development, preview, or production").option("--token <token>","MACH push token; repeatable",Ar,[]).option("--user <id>","Application user ID; repeatable",Ar,[]).option("--all","Send to all active devices").option("--platform <platform>","Limit --all to ios or android").option("--data <json>","String-to-string custom data JSON").option("--sound <name>","Provider sound name").option("--badge <number>","iOS badge count").option("--ttl <seconds>","Provider time-to-live").option("--collapse-key <key>","Provider collapse key").option("--android-channel-id <id>","Android notification channel").action(Gs);Sr.command("status").description("Show aggregate push delivery counters").option("--days <number>","Statistics range, 1-90","30").action(Vs);M.command("config").description("Show resolved configuration for a profile").option("-p, --profile <name>","Build profile to resolve").option("--json","Output as JSON").action(async e=>{await od(e)});var Du=M.command("version").description("Show or seed DB-owned native version counters"),Cu=e=>e.requiredOption("--platform <os>","Target platform: ios or android").option("-p, --profile <name>","Build profile used to resolve package/bundle scope").option("--scope <value>","Counter scope override, usually package name or bundle identifier").option("--package <name>","Android package override").option("--bundle-id <id>","iOS bundle identifier override").option("--json","Print JSON output");Cu(Du.command("show").description("Show the current native version counter")).action(async e=>{re(J.bgCyan.black(m.cliTag("Version Counter"))),await ds("show",e)});Cu(Du.command("seed").description("Seed the native version counter for an existing app").argument("[value]","Latest already-used value; the next build uses value + 1").option("--value <number>","Latest already-used value; the next build uses value + 1").option("--force","Allow lowering an existing counter")).action(async(e,t)=>{re(J.bgCyan.black(m.cliTag("Version Counter"))),await ds("seed",{...t,value:t.value??e})});var Tu=M.command("deeplink").description("Configure and verify app links, universal links, and URI schemes");Tu.command("setup").description("Generate deep link config, hosted association files, and Expo plugin support").option("--domain <domain>","Associated domain, e.g. app.example.com").option("--base-url <url>","Base URL, e.g. https://app.example.com").option("-p, --profile <name>","Profile used for build/submit overrides").option("--platform <platform>","ios, android, or all").option("--framework <framework>","expo, react-native, or flutter").option("--scheme <scheme>","URI scheme, e.g. myapp").option("--ios-bundle-id <id>","iOS bundle identifier").option("--android-package <name>","Android package name").option("--apple-team-id <id>","Apple Developer Team ID").option("--app-store-id <id>","App Store app ID for Smart App Banner").option("--android-fingerprint <sha256>","Android SHA256 signing certificate fingerprint; repeatable",Ar,[]).option("--output <dir>","Directory for hosted files, e.g. public or deep-links").option("--install-plugin","Install @radhya/mach locally so Expo can use the packaged config plugin").option("--no-install-plugin","Do not install @radhya/mach for Expo projects; use the local plugin fallback if the package is missing").option("-y, --yes","Automatically answer yes to prompts",!1).action(async e=>{let t=M.opts();e.yes=e.yes||t.yes,re(J.bgCyan.black(m.cliTag("Deep Links"))),await xd(e)});Tu.command("verify").description("Verify local and optionally live deep link configuration").option("-p, --profile <name>","Profile used for build/submit overrides").option("--live","Check hosted files over HTTPS").option("--android-device","Print Android device verification commands").action(async e=>{re(J.bgCyan.black(m.cliTag("Deep Link Verify"))),await Md(e)});M.command("credentials").description("Unified, interactive credential management (iOS/Android)").option("--platform <os>","Platform to manage: ios or android").option("-p, --profile <name>","Any configured build profile name").option("--credential-type <type>","iOS signing type override: development, adhoc, or store").option("--force","Force recreate certificates (nuke existing on Apple Portal)",!1).action(async e=>{let{credentialsMainCommand:t}=await import("./credentials-LFUCTBJU.js");await t(e)});M.command("credentials:setup").description("Automated credential provisioning (iOS/Android) [Legacy]").requiredOption("--platform <os>","Platform: ios or android").option("--profile <name>","Any configured build profile name").option("--credential-type <type>","iOS signing type override: development, adhoc, or store").option("--bundle-id <id>","Bundle ID / Package Name (optional, auto-detected)").option("--team-id <id>","Apple Team ID (iOS only)").option("--key-alias <alias>","Android keystore alias (optional, auto-generated)").option("--aws-profile <name>","AWS Credentials Profile (for S3 storage)").option("--force","Force recreate certificates (nuke existing on Apple Portal)",!1).action(async e=>{re(J.bgCyan.black(m.cliTag("Credentials Setup"))),await Mn(e),$u(J.green("Done!"))});M.command("credentials:service").description("Upload Service Credentials (ASC API Key / Google Service JSON) [Legacy]").requiredOption("--platform <os>","Platform: ios or android").option("--file <path>","Path to credential file (.p8 or .json)").option("--issuer-id <id>","ASC API Key Issuer ID (iOS only)").option("--key-id <id>","ASC API Key ID (iOS only)").option("--bundle-id <id>","Bundle identifier / Android package name to attach this service credential to").option("--package-name <name>","Android package name to attach this service credential to").option("-p, --profile <name>","Build profile to resolve package/bundle identifier from config").action(async e=>{re(J.bgCyan.black(m.cliTag("Service Credentials"))),await js(e),$u(J.green("Done!"))});var bs=M.command("device").description("Manage registered iOS test devices");bs.command("register").description("Register a connected iOS device or enter UDID manually").option("--udid <udid>","Device UDID (skip auto-detection)").option("--name <name>","Device name").option("--team-id <id>","Apple Developer Team ID for this device").action(async e=>{await bi("register",e)});bs.command("list").description("List all registered devices").option("--team-id <id>","Filter by Apple Developer Team ID").action(async e=>{await bi("list",e)});bs.command("remove").description("Remove a registered device").option("--udid <udid>","Device UDID to remove").option("--team-id <id>","Apple Developer Team ID for this device").action(async e=>{await bi("remove",e)});M.command("audit").description("Run project health, delivery impact, and security checks").option("--apk <path>","Path to APK file (runs APK diagnostics like 16KB alignment)").option("--json","Output results as JSON (for CI/CD)").option("--fix","Auto-apply fixes where possible").option("--category <name>","Run one category (e.g. project, impact, permissions, secrets)").option("--severity <level>","Minimum severity to display (critical, high, medium, low, info)").option("--prebuild","Run expo prebuild for deeper manifest/plist analysis").option("--since <git-ref>","Assess delivery impact from a branch, tag, or commit").action(async e=>{e.json||re(J.bgCyan.black(m.cliTag(e.apk?"APK Audit":"Project Audit"))),await vu(e)});var Vb=new Set(["login","logout","agent"]),zb=new Set(["build","credentials","credentials:service","credentials:setup","env","push","submit","version"]),Wb=new Set(["publish","list","rollback","promote"]);function Kb(e){let t=[],n=e;for(;n&&n!==M;)t.unshift(n.name()),n=n.parent;return t}function Yb(e,t){let[n,r]=Kb(e);return zb.has(n)?!0:n==="ota"?Wb.has(r):n==="maestro"?r!=="devices"&&!t.local&&!t.localRunner:!1}M.hook("preAction",async(e,t)=>{let n=String(M.opts().config||"").trim();n&&(process.env.MACH_CONFIG_PATH=Bb.resolve(n));let r=t.name(),i=t.opts?.()||{};if(r==="maestro"&&(i.local||i.localRunner)||t.parent?.name()==="web"&&r==="test"||t.parent?.name()==="deeplink"||Vb.has(r)||(ke(),!Yb(t,i)))return;let o=zs(i,W());if(!o)throw new mt(`No linked ${m.name} project was found. Run \`${m.nameLower} link\` before using this command.`);await Ws(o)});M.on("command:*",()=>{console.error(`Invalid command: %s
|
|
2500
|
+
See --help for a list of available commands.`,M.args.join(" ")),process.exit(1)});process.argv.slice(2).length||M.help();M.parseAsync(process.argv).catch(e=>{let t=e instanceof Error?e.message:String(e);console.error(J.red(t)),process.exitCode=1});
|