@ramonclaudio/vexpo 0.1.4 → 0.1.5

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Ramon Claudio
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -7,6 +7,10 @@ The setup CLI for [vexpo](https://github.com/ramonclaudio/vexpo) projects (Expo
 
 Scaffolded by [`create-vexpo`](https://www.npmjs.com/package/@ramonclaudio/create-vexpo) into your devDependencies. Run it with `npx vexpo`.
 
+<p align="center">
+  <img src="https://raw.githubusercontent.com/ramonclaudio/vexpo/main/docs/assets/demo-doctor.gif" width="720" alt="vexpo doctor auth-checking every credential against the live services">
+</p>
+
 ## Setup
 
 ```
@@ -19,6 +23,7 @@ vexpo full --skip-rebrand         full setup, skip the rebrand wizard
 vexpo doctor                      cross-source drift detection
 vexpo doctor --json               machine-readable output
 vexpo doctor --strict             exit non-zero on any warn
+vexpo doctor --redact             mask identifying values (screenshots, issue reports)
 
 vexpo accounts                    walk Apple/Expo/Convex/Resend signups (standalone)
 vexpo rebrand                     replace template defaults with your identity

package/dist/{chunk-W6O77AAZ.js → chunk-5BTLX335.js}

@@ -38,7 +38,11 @@ async function run(argv, opts = {}) {
     stdin: opts.stdin ?? "ignore",
     stdout: "pipe",
     stderr: "pipe",
-    env: opts.env,
+    // run() exists to PARSE output. A FORCE_COLOR=1 in the caller's shell
+    // (CI, recordings) makes child CLIs wrap fields in ANSI codes and every
+    // regex parser downstream silently misses. Force color off; an explicit
+    // opts.env can still override.
+    env: { FORCE_COLOR: "0", NO_COLOR: "1", ...opts.env },
     cwd: opts.cwd
   });
   const [code, stdout, stderr] = await Promise.all([

package/dist/{chunk-6O5TB4L4.js → chunk-BRSFTWP2.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { dlx } from './chunk-3RDUQUJW.js';
-import { run } from './chunk-W6O77AAZ.js';
+import { run } from './chunk-5BTLX335.js';
 
 // src/lib/eas-cli.ts
 function compact(argv) {

package/dist/cli.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import { ensureLine, readOne, readAll, removeLines, ENV_FILE } from './chunk-3TT4CDAJ.js';
-import { ascStatus } from './chunk-6O5TB4L4.js';
+import { ascStatus } from './chunk-BRSFTWP2.js';
 import { dlx, detectPackageManager, installCmdFor } from './chunk-3RDUQUJW.js';
-import { run, spawn } from './chunk-W6O77AAZ.js';
+import { run, spawn } from './chunk-5BTLX335.js';
 import { Command } from 'commander';
-import { readFile, access, writeFile, unlink, stat, mkdir, rename } from 'fs/promises';
+import { readFile, access, unlink, stat, mkdir, writeFile, rename } from 'fs/promises';
 import { createInterface } from 'readline/promises';
 import { homedir } from 'os';
 import { join } from 'path';
@@ -13,7 +13,7 @@ import { createSign } from 'crypto';
 
 // package.json
 var package_default = {
-  version: "0.1.4"};
+  version: "0.1.5"};
 function deploymentName(value) {
   if (!value) return void 0;
   const m = /^(?:dev|prod|preview):(.+)$/.exec(value);
@@ -470,7 +470,7 @@ async function askYesNo(question, defaultYes) {
   return raw === "y" || raw === "yes";
 }
 async function openUrlExternal(url) {
-  const { spawn: spawn2 } = await import('./proc-QPMIGTW6.js');
+  const { spawn: spawn2 } = await import('./proc-L3ORJMPB.js');
   const cmd = process.platform === "darwin" ? ["open", url] : process.platform === "win32" ? ["cmd", "/c", "start", "", url] : ["xdg-open", url];
   spawn2(cmd, { stdin: "ignore", stdout: "ignore", stderr: "ignore" });
 }
@@ -2385,6 +2385,23 @@ async function loadAscFromState2() {
   if (!existsSync(p8Path)) return null;
   return { issuerId, keyId, p8Path };
 }
+async function syncAscAppIdToEasJson(ascAppId) {
+  if (!ascAppId || !existsSync("eas.json")) return;
+  try {
+    const before = await readFile("eas.json", "utf8");
+    const after = withAscAppId(before, ascAppId);
+    if (after !== before) {
+      await writeFile("eas.json", after);
+      ok(`wrote ascAppId ${BOLD}${ascAppId}${RESET} to eas.json submit profiles`);
+      note("commit this in your fork: non-interactive `eas submit` (CI) needs it");
+    } else {
+      nop("eas.json submit profiles already carry ascAppId");
+    }
+  } catch (err) {
+    yep(`couldn't write ascAppId to eas.json: ${err instanceof Error ? err.message : err}`);
+    note("non-interactive submit will need `ascAppId` set manually in eas.json");
+  }
+}
 async function runAscConnect(opts = {}) {
   section("ASC connect");
   if (!opts.force) {
@@ -2399,6 +2416,7 @@ async function runAscConnect(opts = {}) {
           bundleId: status.appStoreConnectApp.bundleIdentifier,
           connectedAt: (/* @__PURE__ */ new Date()).toISOString()
         });
+        await syncAscAppIdToEasJson(status.appStoreConnectApp.ascAppIdentifier);
         return 0;
       }
     } catch {
@@ -2464,23 +2482,13 @@ async function runAscConnect(opts = {}) {
     connectedAt: (/* @__PURE__ */ new Date()).toISOString()
   });
   if (existsSync("eas.json")) {
+    let postStatus = null;
     try {
-      const ascAppId = (await ascStatus()).appStoreConnectApp?.ascAppIdentifier;
-      if (ascAppId) {
-        const before = await readFile("eas.json", "utf8");
-        const after = withAscAppId(before, ascAppId);
-        if (after !== before) {
-          await writeFile("eas.json", after);
-          ok(`wrote ascAppId ${BOLD}${ascAppId}${RESET} to eas.json submit profiles`);
-          note("commit this in your fork: non-interactive `eas submit` (CI) needs it");
-        } else {
-          nop("eas.json submit profiles already carry ascAppId");
-        }
-      }
-    } catch (err) {
-      yep(`couldn't write ascAppId to eas.json: ${err instanceof Error ? err.message : err}`);
-      note("non-interactive submit will need `ascAppId` set manually in eas.json");
+      postStatus = await ascStatus();
+    } catch {
+      postStatus = null;
     }
+    await syncAscAppIdToEasJson(postStatus?.appStoreConnectApp?.ascAppIdentifier);
   }
   return 0;
 }
@@ -4107,10 +4115,25 @@ function icon(severity) {
       return `${DIM}-${RESET}`;
   }
 }
+var REDACTIONS = [
+  [/https?:\/\/[a-z0-9-]+\.convex\.(cloud|site)[^\s]*/g, "https://<deployment>.convex.$1"],
+  [/\b[a-z]+-[a-z]+-\d{3}\b/g, "<deployment>"],
+  [/\b[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\b/gi, "<project-id>"],
+  [/\b[\w.+-]+@[\w-]+\.[\w.]+\b/g, "<email>"],
+  [/\b(?:[a-z0-9-]+\.){1,}[a-z]{2,}\b(?= verified)/g, "<domain>"],
+  [/\b(?:com|io|dev|app|net|org)(?:\.[a-z0-9-]+){2,}\b/gi, "<bundle-id>"],
+  [/\b[A-Z0-9]{10}\b/g, "<id>"],
+  [/(@)[\w-]+(\/)/g, "$1<owner>$2"]
+];
+function redactValue(text) {
+  let out = text;
+  for (const [re, sub] of REDACTIONS) out = out.replace(re, sub);
+  return out;
+}
 function categoryHeader(c) {
   return c.charAt(0).toUpperCase() + c.slice(1);
 }
-function printResults(checks) {
+function printResults(checks, redact) {
   const byCategory = /* @__PURE__ */ new Map();
   for (const c of checks) {
     if (!byCategory.has(c.category)) byCategory.set(c.category, []);
@@ -4123,8 +4146,9 @@ function printResults(checks) {
     section(categoryHeader(cat));
     const w = Math.max(...items.map((c) => c.name.length));
     for (const c of items) {
-      line(`  ${icon(c.severity)} ${BOLD}${c.name.padEnd(w)}${RESET}  ${c.message}`);
-      if (c.details) line(`       ${DIM}${c.details}${RESET}`);
+      const message = redact ? redactValue(c.message) : c.message;
+      line(`  ${icon(c.severity)} ${BOLD}${c.name.padEnd(w)}${RESET}  ${message}`);
+      if (c.details) line(`       ${DIM}${redact ? redactValue(c.details) : c.details}${RESET}`);
     }
   }
 }
@@ -4159,7 +4183,7 @@ async function runDoctor(options2) {
       process.stdout.write(JSON.stringify({ channel, summary, checks }, null, 2) + "\n");
     } else {
       section(`Verify (${channel})`);
-      printResults(checks);
+      printResults(checks, options2.redact === true);
       line();
       const parts = [
         `${GREEN}${summary.ok} ok${RESET}`,
@@ -5499,7 +5523,7 @@ async function liveCheckEas() {
 }
 async function liveCheckAscLink() {
   try {
-    const { ascStatus: ascStatus2 } = await import('./eas-integrations-5FVP7DI6.js');
+    const { ascStatus: ascStatus2 } = await import('./eas-integrations-ZULIUD4T.js');
     const status = await ascStatus2();
     return status.status === "connected";
   } catch {
@@ -6440,7 +6464,7 @@ program.command("rebrand").description("Replace template defaults with your fork
 program.command("review-account").description("Seed the App Review demo account on Convex.").option("--email <email>", "override demo email").option("--password <password>", "override demo password").option("--name <name>", "override demo display name", "App Review").option("--username <username>", "optional username").action((options2) => exitWith(runReviewAccount(options2)));
 program.command("doctor").description(
   "Cross-source drift detection. Auth-checks every credential, confirms IDs match across `.env.local`, Convex env, EAS env, `app.config.ts`. No eas-cli equivalent."
-).option("--channel <channel>", "dev | prod", "dev").option("--json", "machine-readable output", false).option("--strict", "exit non-zero on any warn", false).action((options2) => {
+).option("--channel <channel>", "dev | prod", "dev").option("--json", "machine-readable output", false).option("--strict", "exit non-zero on any warn", false).option("--redact", "mask identifying values (for screenshots and issue reports)", false).action((options2) => {
   exitWith(runDoctor(options2));
 });
 program.command("adopt").description(

package/dist/eas-integrations-ZULIUD4T.js

@@ -0,0 +1,4 @@
+#!/usr/bin/env node
+export { ascStatus } from './chunk-BRSFTWP2.js';
+import './chunk-3RDUQUJW.js';
+import './chunk-5BTLX335.js';

package/dist/proc-L3ORJMPB.js

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export { run, spawn, streamText } from './chunk-5BTLX335.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ramonclaudio/vexpo",
-  "version": "0.1.4",
+  "version": "0.1.5",
   "description": "Operational CLI for vexpo projects: setup orchestration, drift detection, env sync, Apple JWT signing, ASC API integration.",
   "keywords": [
     "apple-sign-in",

package/dist/eas-integrations-5FVP7DI6.js

@@ -1,4 +0,0 @@
-#!/usr/bin/env node
-export { ascStatus } from './chunk-6O5TB4L4.js';
-import './chunk-3RDUQUJW.js';
-import './chunk-W6O77AAZ.js';

package/dist/proc-QPMIGTW6.js

@@ -1,2 +0,0 @@
-#!/usr/bin/env node
-export { run, spawn, streamText } from './chunk-W6O77AAZ.js';