@ship-et/buildatlas-cli 0.0.0-stage → 0.12.0

package/dist/config.js

@@ -0,0 +1,255 @@
+import { execFile as execFileCb } from 'node:child_process';
+import { chmod, mkdir, readFile, writeFile } from 'node:fs/promises';
+import { homedir } from 'node:os';
+import { dirname, join } from 'node:path';
+import { promisify } from 'node:util';
+import pc from 'picocolors';
+import { z } from 'zod';
+const execFile = promisify(execFileCb);
+/**
+ * The instance this CLI ships pointed at, so a first-time user does not have to type a
+ * URL. Overridden by a stored login, `--api`, or BUILDATLAS_API_URL — this is only the
+ * fallback when nothing else says otherwise. Baked at publish via BUILDATLAS_DEFAULT_API_URL
+ * for a differently-hosted build.
+ */
+export const DEFAULT_API_URL = process.env.BUILDATLAS_DEFAULT_API_URL ?? 'https://buildatlas.ship.et';
+/**
+ * Credentials live in ~/.buildatlas/auth.json at mode 0600. Env vars win over the
+ * file so CI can inject a token without writing to disk.
+ */
+const configSchema = z.object({
+    apiUrl: z.string().default(DEFAULT_API_URL),
+    token: z.string().optional(),
+    email: z.string().optional(),
+});
+export const configPath = () => join(homedir(), '.buildatlas', 'auth.json');
+/**
+ * Where the CLI used to keep its config, back when the command was `atlas`.
+ * Read as a fallback so an existing install does not silently become logged out
+ * after an upgrade; never written to.
+ */
+const legacyConfigPath = () => join(homedir(), '.atlas', 'auth.json');
+/**
+ * The API URL that was actually stored, as opposed to the localhost default.
+ *
+ * `login` needs the distinction: someone who installed this from npm and runs
+ * `buildatlas login` with no `--api` should be asked where their server is, not
+ * quietly pointed at localhost and then shown a connection error.
+ */
+export async function storedApiUrl() {
+    for (const path of [configPath(), legacyConfigPath()]) {
+        try {
+            const parsed = configSchema.partial().safeParse(JSON.parse(await readFile(path, 'utf8')));
+            if (parsed.success && parsed.data.apiUrl)
+                return parsed.data.apiUrl;
+        }
+        catch {
+            // Missing or unreadable; the caller treats that as "not configured".
+        }
+    }
+    return process.env.BUILDATLAS_API_URL ?? process.env.ATLAS_API_URL;
+}
+export async function loadConfig() {
+    let fromFile = {};
+    for (const path of [configPath(), legacyConfigPath()]) {
+        try {
+            fromFile = JSON.parse(await readFile(path, 'utf8'));
+            break;
+        }
+        catch {
+            // No config yet is normal — a fresh machine or a CI runner.
+        }
+    }
+    const parsed = configSchema.safeParse(fromFile);
+    const base = parsed.success ? parsed.data : configSchema.parse({});
+    return {
+        // BUILDATLAS_* is the current spelling; ATLAS_* still works so existing CI
+        // jobs keep running after the rename.
+        apiUrl: process.env.BUILDATLAS_API_URL ?? process.env.ATLAS_API_URL ?? base.apiUrl,
+        token: process.env.BUILDATLAS_TOKEN ?? process.env.ATLAS_TOKEN ?? base.token,
+        email: base.email,
+    };
+}
+export async function saveConfig(config) {
+    const path = configPath();
+    await mkdir(dirname(path), { recursive: true, mode: 0o700 });
+    await writeFile(path, `${JSON.stringify(config, null, 2)}\n`, { mode: 0o600 });
+    // writeFile only applies the mode when creating the file; enforce it for the
+    // overwrite case too so an existing world-readable file gets locked down.
+    await chmod(path, 0o600);
+}
+/**
+ * The project slug from the environment.
+ *
+ * BUILDATLAS_PROJECT is the current spelling; ATLAS_PROJECT is still honoured so
+ * CI jobs written before the CLI was renamed keep working.
+ */
+export function defaultProject() {
+    return process.env.BUILDATLAS_PROJECT ?? process.env.ATLAS_PROJECT;
+}
+/**
+ * Works out which project a command applies to.
+ *
+ * Order: `--project`, then the environment, then the app you are standing in.
+ * Reading it off disk is the point — you are already in the project directory, so
+ * requiring an env var to say so is make-work, and forgetting it produced "No
+ * project specified" for a project that was right there.
+ *
+ * `expo.extra.buildatlas.project` wins over `expo.slug`, for the case where the
+ * BuildAtlas project is named differently from the Expo one.
+ *
+ * Inference is reported by callers rather than applied silently: guessing wrong
+ * and uploading a keystore to another project is worse than an error.
+ */
+/**
+ * The app config as Expo itself resolves it.
+ *
+ * `npx expo config --type public` is Expo's own resolver, so a dynamic
+ * `app.config.js` — plugins, environment switches, computed identifiers and all —
+ * comes back fully evaluated. That is the only way to read a dynamic config
+ * correctly; anything else is guessing at what the JavaScript would have returned.
+ *
+ * An earlier version of this CLI refused to do this on the grounds that it means
+ * running the project's own code. That was the wrong line to draw: `buildatlas
+ * build` already runs that code on the runner during prebuild and bundling, this
+ * runs in the developer's own project at their own request, and it is the exact
+ * command Expo's documentation tells people to run. Refusing only meant every
+ * command needed `--project` spelled out.
+ *
+ * Slow — a few seconds, because it loads the project's config chain — so it is only
+ * reached when there is no static `app.json` to read instead.
+ */
+async function readExpoConfig(dir) {
+    const dynamic = await dynamicConfigIn(dir);
+    if (!dynamic)
+        return undefined;
+    // Printed because it is noticeably slower than reading a file, and silence here
+    // looks like a hang.
+    process.stderr.write(pc.dim(`  reading ${dynamic} via \`expo config\`…\n`));
+    try {
+        const { stdout } = await execFile('npx', ['--yes', 'expo', 'config', '--type', 'public', '--json'], {
+            cwd: dir,
+            // Expo prints notices before the JSON, and a large config is a large payload.
+            maxBuffer: 32 * 1024 * 1024,
+            timeout: 120_000,
+        });
+        // Anything before the first brace is Expo's own chatter.
+        const start = stdout.indexOf('{');
+        if (start === -1)
+            return undefined;
+        const parsed = JSON.parse(stdout.slice(start));
+        return {
+            slug: parsed.extra?.buildatlas?.project ?? parsed.slug,
+            name: parsed.name,
+            version: parsed.version,
+            owner: parsed.owner,
+            easProjectId: parsed.extra?.eas?.projectId,
+            bundleIdentifier: parsed.ios?.bundleIdentifier,
+            androidPackage: parsed.android?.package,
+            fromDynamicConfig: dynamic,
+        };
+    }
+    catch (err) {
+        // Not fatal: the caller falls back to asking for --slug, and the reason is worth
+        // showing because "expo config" failing usually means dependencies are not
+        // installed, which the build would trip over too.
+        process.stderr.write(pc.dim(`  (could not evaluate ${dynamic}: ${err.message.split('\n')[0]})\n`));
+        return undefined;
+    }
+}
+/** Everything a caller might want from the app config, static or dynamic. */
+export async function readResolvedAppConfig(dir) {
+    try {
+        const raw = await readFile(join(dir, 'app.json'), 'utf8');
+        const expo = JSON.parse(raw).expo ?? {};
+        return {
+            slug: expo.extra?.buildatlas?.project ?? expo.slug,
+            name: expo.name,
+            version: expo.version,
+            owner: expo.owner,
+            easProjectId: expo.extra?.eas?.projectId,
+            bundleIdentifier: expo.ios?.bundleIdentifier,
+            androidPackage: expo.android?.package,
+        };
+    }
+    catch {
+        // No static config; ask Expo.
+    }
+    return readExpoConfig(dir);
+}
+export async function resolveProject(explicit, dir = process.cwd()) {
+    if (explicit)
+        return { slug: explicit, source: 'flag' };
+    const fromEnv = defaultProject();
+    if (fromEnv)
+        return { slug: fromEnv, source: 'env' };
+    // Only app.json. Evaluating a dynamic app.config.js means running the project's
+    // own JavaScript just to learn a name, which is not a trade worth making.
+    try {
+        const raw = await readFile(join(dir, 'app.json'), 'utf8');
+        const expo = JSON.parse(raw).expo ?? {};
+        const configured = expo.extra?.buildatlas?.project;
+        if (typeof configured === 'string' && configured) {
+            return { slug: configured, source: 'config' };
+        }
+        if (typeof expo.slug === 'string' && expo.slug) {
+            return { slug: expo.slug, source: 'app.json' };
+        }
+    }
+    catch {
+        // No app.json, or unparseable. Fall through to the dynamic config below.
+    }
+    // Only now, because it costs seconds where reading a file costs nothing.
+    const dynamic = await readExpoConfig(dir);
+    if (dynamic?.slug) {
+        return { slug: dynamic.slug, source: 'app.config.js' };
+    }
+    throw new Error('No project specified. Pass --project <slug>, set BUILDATLAS_PROJECT, or run this ' +
+        `from a directory whose app.json has an "expo.slug".\n${await noProjectAdvice(dir)}`);
+}
+/**
+ * The dynamic config filenames Expo accepts, in its own resolution order.
+ *
+ * Used only to explain a failure. A project with one of these has no app.json and
+ * never will, so telling its owner to go and find one wastes their afternoon — which
+ * is exactly what the old message did.
+ */
+const DYNAMIC_CONFIGS = ['app.config.ts', 'app.config.js', 'app.config.mjs', 'app.config.cjs'];
+async function dynamicConfigIn(dir) {
+    for (const name of DYNAMIC_CONFIGS) {
+        try {
+            await readFile(join(dir, name), 'utf8');
+            return name;
+        }
+        catch {
+            // Not this one.
+        }
+    }
+    return undefined;
+}
+/**
+ * What to tell someone whose directory has no usable static config.
+ *
+ * Shared so `build`, `projects create` and everything else give the same answer,
+ * and so the two genuinely different causes get genuinely different advice: a
+ * dynamic config, which we will not evaluate, versus an app that lives in a
+ * subdirectory.
+ */
+export async function noProjectAdvice(dir) {
+    const dynamic = await dynamicConfigIn(dir);
+    if (dynamic) {
+        // Reaching here means `expo config` was tried and did not yield a slug — so the
+        // advice is about why that failed, not about passing flags instead.
+        return (`Found ${dynamic}, but evaluating it with \`expo config\` produced no slug.\n` +
+            `  Check it runs at all:  npx expo config --type public\n` +
+            `  A failure there is usually missing dependencies (run your install first) or an ` +
+            `error thrown by the config itself.\n` +
+            `  To skip evaluation entirely, pass --project <slug>, or put an app.json next to it ` +
+            `with just "expo": { "extra": { "buildatlas": { "project": "<slug>" } } } — that is read ` +
+            `directly and does not conflict with ${dynamic}.`);
+    }
+    return (`No app.json or app.config.js in ${dir}. If the app lives in a subdirectory — common in a ` +
+        `monorepo — point at it with --dir <path> for 'projects create', or run the command from ` +
+        `there.`);
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,IAAI,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,MAAM,YAAY,CAAC;AAC5B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;AAEvC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,0BAA0B,IAAI,4BAA4B,CAAC;AAEtG;;;GAGG;AACH,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC;IAC3C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC7B,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,UAAU,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;AAE5E;;;;GAIG;AACH,MAAM,gBAAgB,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;AAEtE;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,EAAE,EAAE,gBAAgB,EAAE,CAAC,EAAE,CAAC;QACtD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;YAC1F,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM;gBAAE,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;QACtE,CAAC;QAAC,MAAM,CAAC;YACP,qEAAqE;QACvE,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;AACrE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU;IAC9B,IAAI,QAAQ,GAAY,EAAE,CAAC;IAC3B,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,EAAE,EAAE,gBAAgB,EAAE,CAAC,EAAE,CAAC;QACtD,IAAI,CAAC;YACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;YACpD,MAAM;QACR,CAAC;QAAC,MAAM,CAAC;YACP,4DAA4D;QAC9D,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAEnE,OAAO;QACL,2EAA2E;QAC3E,sCAAsC;QACtC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,IAAI,CAAC,MAAM;QAClF,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,IAAI,CAAC,KAAK;QAC5E,KAAK,EAAE,IAAI,CAAC,KAAK;KAClB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,MAAmB;IAClD,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;IAC1B,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7D,MAAM,SAAS,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/E,6EAA6E;IAC7E,0EAA0E;IAC1E,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAC3B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc;IAC5B,OAAO,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;AACrE,CAAC;AAQD;;;;;;;;;;;;;GAaG;AAEH;;;;;;;;;;;;;;;;;GAiBG;AACH,KAAK,UAAU,cAAc,CAAC,GAAW;IACvC,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAE/B,gFAAgF;IAChF,qBAAqB;IACrB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,aAAa,OAAO,yBAAyB,CAAC,CAAC,CAAC;IAE5E,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE;YAClG,GAAG,EAAE,GAAG;YACR,8EAA8E;YAC9E,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;YAC3B,OAAO,EAAE,OAAO;SACjB,CAAC,CAAC;QAEH,yDAAyD;QACzD,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,KAAK,KAAK,CAAC,CAAC;YAAE,OAAO,SAAS,CAAC;QACnC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAQ5C,CAAC;QAEF,OAAO;YACL,IAAI,EAAE,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,IAAI,MAAM,CAAC,IAAI;YACtD,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,YAAY,EAAE,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,SAAS;YAC1C,gBAAgB,EAAE,MAAM,CAAC,GAAG,EAAE,gBAAgB;YAC9C,cAAc,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO;YACvC,iBAAiB,EAAE,OAAO;SAC3B,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,iFAAiF;QACjF,2EAA2E;QAC3E,kDAAkD;QAClD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,EAAE,CAAC,GAAG,CAAC,yBAAyB,OAAO,KAAM,GAAa,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CACxF,CAAC;QACF,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAcD,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,GAAW;IACrD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,CAAC;QAC1D,MAAM,IAAI,GAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAoC,CAAC,IAAI,IAAI,EAAE,CAAC;QAC5E,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,IAAI,IAAI,CAAC,IAAI;YAClD,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,YAAY,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,SAAS;YACxC,gBAAgB,EAAE,IAAI,CAAC,GAAG,EAAE,gBAAgB;YAC5C,cAAc,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO;SACtC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,8BAA8B;IAChC,CAAC;IACD,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,QAA4B,EAC5B,GAAG,GAAW,OAAO,CAAC,GAAG,EAAE;IAE3B,IAAI,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAExD,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;IACjC,IAAI,OAAO;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAErD,gFAAgF;IAChF,0EAA0E;IAC1E,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,CAAC;QAC1D,MAAM,IAAI,GAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAoC,CAAC,IAAI,IAAI,EAAE,CAAC;QAC5E,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC;QACnD,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,EAAE,CAAC;YACjD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QAChD,CAAC;QACD,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YAC/C,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QACjD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;IAC3E,CAAC;IAED,yEAAyE;IACzE,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,OAAO,EAAE,IAAI,EAAE,CAAC;QAClB,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IACzD,CAAC;IAED,MAAM,IAAI,KAAK,CACb,mFAAmF;QACjF,wDAAwD,MAAM,eAAe,CAAC,GAAG,CAAC,EAAE,CACvF,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,eAAe,GAAG,CAAC,eAAe,EAAE,eAAe,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,CAAC;AAE/F,KAAK,UAAU,eAAe,CAAC,GAAW;IACxC,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;YACxC,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,gBAAgB;QAClB,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,GAAW;IAC/C,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,OAAO,EAAE,CAAC;QACZ,gFAAgF;QAChF,oEAAoE;QACpE,OAAO,CACL,SAAS,OAAO,8DAA8D;YAC9E,0DAA0D;YAC1D,mFAAmF;YACnF,sCAAsC;YACtC,sFAAsF;YACtF,0FAA0F;YAC1F,uCAAuC,OAAO,GAAG,CAClD,CAAC;IACJ,CAAC;IACD,OAAO,CACL,mCAAmC,GAAG,qDAAqD;QAC3F,0FAA0F;QAC1F,QAAQ,CACT,CAAC;AACJ,CAAC"}

package/dist/detach.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Makes Ctrl-C detach from a build rather than look like it stopped one.
+ *
+ * Nothing in the CLI ever cancelled a build on Ctrl-C — the signal only killed the
+ * local process, and the build carried on. But it exited in silence, which is
+ * indistinguishable from having stopped it, so people reasonably assume they just
+ * killed their build.
+ *
+ * Cancelling is a deliberate act with a cost: it throws away however many minutes
+ * of compute have already gone in, and on a shared runner it is someone else's
+ * queue position too. So it stays an explicit command, never a keystroke, and this
+ * says so at the moment the question arises.
+ *
+ * A second Ctrl-C exits immediately, because a person pressing it twice wants out
+ * of the terminal, not another paragraph.
+ */
+export declare function detachOnInterrupt(buildId: string): () => void;
+//# sourceMappingURL=detach.d.ts.map

package/dist/detach.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"detach.d.ts","sourceRoot":"","sources":["../src/detach.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,IAAI,CA8B7D"}

package/dist/detach.js

@@ -0,0 +1,42 @@
+import pc from 'picocolors';
+/**
+ * Makes Ctrl-C detach from a build rather than look like it stopped one.
+ *
+ * Nothing in the CLI ever cancelled a build on Ctrl-C — the signal only killed the
+ * local process, and the build carried on. But it exited in silence, which is
+ * indistinguishable from having stopped it, so people reasonably assume they just
+ * killed their build.
+ *
+ * Cancelling is a deliberate act with a cost: it throws away however many minutes
+ * of compute have already gone in, and on a shared runner it is someone else's
+ * queue position too. So it stays an explicit command, never a keystroke, and this
+ * says so at the moment the question arises.
+ *
+ * A second Ctrl-C exits immediately, because a person pressing it twice wants out
+ * of the terminal, not another paragraph.
+ */
+export function detachOnInterrupt(buildId) {
+    let warned = false;
+    const onInterrupt = () => {
+        if (warned) {
+            // 130 is the conventional "terminated by SIGINT" status.
+            process.exit(130);
+        }
+        warned = true;
+        console.log(`\n${pc.yellow('detached')} — the build is still running on the server.\n` +
+            `  follow again : ${pc.bold(`buildatlas logs ${buildId}`)}\n` +
+            `  stop it      : ${pc.bold(`buildatlas cancel ${buildId}`)}\n` +
+            pc.dim('  (press Ctrl-C again to leave immediately)'));
+        // Exit cleanly rather than non-zero: detaching is not a build failure, and a
+        // non-zero status here would fail a CI step that was only being tidied up.
+        process.exit(0);
+    };
+    process.on('SIGINT', onInterrupt);
+    // SIGTERM too: a closed terminal or a `kill` should read the same way.
+    process.on('SIGTERM', onInterrupt);
+    return () => {
+        process.off('SIGINT', onInterrupt);
+        process.off('SIGTERM', onInterrupt);
+    };
+}
+//# sourceMappingURL=detach.js.map

package/dist/detach.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"detach.js","sourceRoot":"","sources":["../src/detach.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,YAAY,CAAC;AAE5B;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC/C,IAAI,MAAM,GAAG,KAAK,CAAC;IAEnB,MAAM,WAAW,GAAG,GAAG,EAAE;QACvB,IAAI,MAAM,EAAE,CAAC;YACX,yDAAyD;YACzD,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;QACD,MAAM,GAAG,IAAI,CAAC;QAEd,OAAO,CAAC,GAAG,CACT,KAAK,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,gDAAgD;YACxE,oBAAoB,EAAE,CAAC,IAAI,CAAC,mBAAmB,OAAO,EAAE,CAAC,IAAI;YAC7D,oBAAoB,EAAE,CAAC,IAAI,CAAC,qBAAqB,OAAO,EAAE,CAAC,IAAI;YAC/D,EAAE,CAAC,GAAG,CAAC,6CAA6C,CAAC,CACxD,CAAC;QAEF,6EAA6E;QAC7E,2EAA2E;QAC3E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IAEF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAClC,uEAAuE;IACvE,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAEnC,OAAO,GAAG,EAAE;QACV,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QACnC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IACtC,CAAC,CAAC;AACJ,CAAC"}

package/dist/eas-credentials-zip.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Reading the zip `eas credentials` hands you when you download a distribution
+ * certificate.
+ *
+ * The archive looks like this:
+ *
+ *     DistCert_C8FL4SPYK4.p12                  the certificate *and* private key
+ *     DistCertPrivateKey_C8FL4SPYK4.txt        the same key again, as PEM
+ *     DistCertCredentials_C8FL4SPYK4.md        prose, containing the .p12 password
+ *
+ * The password is machine-generated and 24 characters long, so transcribing it by
+ * hand is both tedious and the most likely place to introduce a typo — one that then
+ * surfaces as a keychain error mid-build rather than as "wrong password". Since the
+ * archive already contains it, read it.
+ *
+ * `unzip -p` rather than a zip library: it is present on macOS and every Linux that
+ * can run a build, and this avoids a dependency for one file format. Entries are
+ * streamed to stdout, never written to disk, so nothing has to be cleaned up
+ * afterwards and a crash cannot leave a private key in a temp directory.
+ */
+export interface EasCertificateBundle {
+    p12: Buffer;
+    password?: string;
+    /** For the label, and so the log can say which file it came from. */
+    p12Name: string;
+    /** Present when the archive also ships the key separately, which EAS's does. */
+    hasSeparateKey: boolean;
+}
+/**
+ * Pulls the certificate and its password out of an EAS credentials zip.
+ *
+ * Returns undefined when the archive is not one of these, so the caller can fall
+ * back to treating the path as a plain `.p12` rather than guessing.
+ */
+export declare function readEasCertificateZip(zipPath: string): Promise<EasCertificateBundle | undefined>;
+/** Whether a path is worth trying to read as a credentials archive. */
+export declare function looksLikeZip(path: string): boolean;
+//# sourceMappingURL=eas-credentials-zip.d.ts.map

package/dist/eas-credentials-zip.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"eas-credentials-zip.d.ts","sourceRoot":"","sources":["../src/eas-credentials-zip.ts"],"names":[],"mappings":"AAKA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,MAAM,WAAW,oBAAoB;IACnC,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,qEAAqE;IACrE,OAAO,EAAE,MAAM,CAAC;IAChB,gFAAgF;IAChF,cAAc,EAAE,OAAO,CAAC;CACzB;AAkBD;;;;;GAKG;AACH,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,oBAAoB,GAAG,SAAS,CAAC,CAoC3C;AAED,uEAAuE;AACvE,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAElD"}

package/dist/eas-credentials-zip.js

@@ -0,0 +1,63 @@
+import { execFile as execFileCb } from 'node:child_process';
+import { promisify } from 'node:util';
+const execFile = promisify(execFileCb);
+async function listEntries(zipPath) {
+    const { stdout } = await execFile('unzip', ['-Z', '-1', zipPath], { maxBuffer: 1024 * 1024 });
+    return stdout
+        .split('\n')
+        .map((l) => l.trim())
+        .filter(Boolean);
+}
+async function readEntry(zipPath, entry) {
+    const { stdout } = await execFile('unzip', ['-p', zipPath, entry], {
+        encoding: 'buffer',
+        maxBuffer: 32 * 1024 * 1024,
+    });
+    return stdout;
+}
+/**
+ * Pulls the certificate and its password out of an EAS credentials zip.
+ *
+ * Returns undefined when the archive is not one of these, so the caller can fall
+ * back to treating the path as a plain `.p12` rather than guessing.
+ */
+export async function readEasCertificateZip(zipPath) {
+    let entries;
+    try {
+        entries = await listEntries(zipPath);
+    }
+    catch {
+        // Not a readable zip, or no `unzip` on this machine. Either way the caller's
+        // plain-file path is the right fallback.
+        return undefined;
+    }
+    const p12Name = entries.find((e) => e.toLowerCase().endsWith('.p12'));
+    if (!p12Name)
+        return undefined;
+    const p12 = await readEntry(zipPath, p12Name);
+    // The password sits in a markdown file as a labelled line:
+    //   - Apple Distribution Certificate password: <24 chars>
+    // Matched on the label rather than the filename, since only the label is
+    // documented behaviour and the filename carries a per-certificate suffix.
+    let password;
+    const notes = entries.filter((e) => e.toLowerCase().endsWith('.md'));
+    for (const note of notes) {
+        const text = (await readEntry(zipPath, note)).toString('utf8');
+        const match = text.match(/password:\s*(\S+)/i);
+        if (match?.[1]) {
+            password = match[1];
+            break;
+        }
+    }
+    return {
+        p12,
+        password,
+        p12Name,
+        hasSeparateKey: entries.some((e) => /privatekey.*\.txt$/i.test(e)),
+    };
+}
+/** Whether a path is worth trying to read as a credentials archive. */
+export function looksLikeZip(path) {
+    return path.toLowerCase().endsWith('.zip');
+}
+//# sourceMappingURL=eas-credentials-zip.js.map

package/dist/eas-credentials-zip.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"eas-credentials-zip.js","sourceRoot":"","sources":["../src/eas-credentials-zip.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,IAAI,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,MAAM,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;AAgCvC,KAAK,UAAU,WAAW,CAAC,OAAe;IACxC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC;IAC9F,OAAO,MAAM;SACV,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC,CAAC;AACrB,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,OAAe,EAAE,KAAa;IACrD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE;QACjE,QAAQ,EAAE,QAAQ;QAClB,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;KAC5B,CAAC,CAAC;IACH,OAAO,MAA2B,CAAC;AACrC,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,OAAe;IAEf,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,6EAA6E;QAC7E,yCAAyC;QACzC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACtE,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAE/B,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAE9C,2DAA2D;IAC3D,0DAA0D;IAC1D,yEAAyE;IACzE,0EAA0E;IAC1E,IAAI,QAA4B,CAAC;IACjC,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IACrE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,CAAC,MAAM,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC/D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;QAC/C,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACf,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACpB,MAAM;QACR,CAAC;IACH,CAAC;IAED,OAAO;QACL,GAAG;QACH,QAAQ;QACR,OAAO;QACP,cAAc,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;KACnE,CAAC;AACJ,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAC7C,CAAC"}

package/dist/eas-json.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Deliberately untyped/loose — this is a read-only, best-effort peek at eas.json
+ * from the CLI side. Full validation belongs to the worker (`@buildatlas/shared`'s
+ * `eas-config.ts`), which the CLI does not depend on: it ships as a standalone
+ * published npm package, and `@buildatlas/shared` is a private workspace package
+ * that would not resolve for anyone who `npm install`s `buildatlas`.
+ */
+export interface ParsedEasJson {
+    build?: Record<string, {
+        extends?: string;
+        env?: Record<string, string>;
+    }>;
+}
+export declare function readEasJson(projectDir: string): Promise<ParsedEasJson>;
+/**
+ * Flattens a profile's `env` block by walking its `extends` chain root-first —
+ * the same precedence eas-cli (and BuildAtlas's worker, see
+ * `packages/shared/src/eas-config.ts`'s `resolveProfile`) use.
+ */
+export declare function resolveProfileEnv(easJson: ParsedEasJson, profileName: string): Record<string, string>;
+//# sourceMappingURL=eas-json.d.ts.map

package/dist/eas-json.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"eas-json.d.ts","sourceRoot":"","sources":["../src/eas-json.ts"],"names":[],"mappings":"AAGA;;;;;;GAMG;AACH,MAAM,WAAW,aAAa;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,CAAC,CAAC;CAC5E;AAED,wBAAsB,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAG5E;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,aAAa,EACtB,WAAW,EAAE,MAAM,GAClB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAoBxB"}

package/dist/eas-json.js

@@ -0,0 +1,32 @@
+import { readFile } from 'node:fs/promises';
+import { join } from 'node:path';
+export async function readEasJson(projectDir) {
+    const raw = await readFile(join(projectDir, 'eas.json'), 'utf8');
+    return JSON.parse(raw);
+}
+/**
+ * Flattens a profile's `env` block by walking its `extends` chain root-first —
+ * the same precedence eas-cli (and BuildAtlas's worker, see
+ * `packages/shared/src/eas-config.ts`'s `resolveProfile`) use.
+ */
+export function resolveProfileEnv(easJson, profileName) {
+    const profiles = easJson.build ?? {};
+    const chain = [];
+    const seen = new Set();
+    let cursor = profileName;
+    while (cursor) {
+        // A circular `extends` here is a pre-existing eas.json problem; the actual
+        // build will fail loudly on it later, so this just stops walking rather than
+        // duplicating that validation.
+        if (seen.has(cursor))
+            break;
+        seen.add(cursor);
+        const profile = profiles[cursor];
+        if (!profile)
+            break;
+        chain.unshift(profile.env ?? {});
+        cursor = profile.extends;
+    }
+    return chain.reduce((acc, env) => ({ ...acc, ...env }), {});
+}
+//# sourceMappingURL=eas-json.js.map

package/dist/eas-json.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"eas-json.js","sourceRoot":"","sources":["../src/eas-json.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAajC,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,UAAkB;IAClD,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,CAAC;IACjE,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAkB,CAAC;AAC1C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,OAAsB,EACtB,WAAmB;IAEnB,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;IACrC,MAAM,KAAK,GAA6B,EAAE,CAAC;IAC3C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,IAAI,MAAM,GAAuB,WAAW,CAAC;IAC7C,OAAO,MAAM,EAAE,CAAC;QACd,2EAA2E;QAC3E,6EAA6E;QAC7E,+BAA+B;QAC/B,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,MAAM;QAC5B,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACjB,MAAM,OAAO,GACX,QAAQ,CAAC,MAAM,CAAC,CAAC;QACnB,IAAI,CAAC,OAAO;YAAE,MAAM;QACpB,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;QACjC,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAC3B,CAAC;IAED,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;AAC9D,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":""}

package/dist/index.js

@@ -0,0 +1,67 @@
+#!/usr/bin/env node
+import { createRequire } from 'node:module';
+import { Command } from 'commander';
+import pc from 'picocolors';
+import { registerAuthCommands } from './commands/auth.js';
+import { registerBuildCommand } from './commands/build.js';
+import { registerBuildQueryCommands } from './commands/builds.js';
+import { registerCredentialCommands } from './commands/credentials.js';
+import { registerEnvCommand } from './commands/env.js';
+import { registerExpoTokenCommands } from './commands/expo-tokens.js';
+import { registerInitCommand } from './commands/init.js';
+import { registerProjectCommands } from './commands/projects.js';
+import { registerSubmitCommand } from './commands/submit.js';
+import { registerUpdateCommand } from './commands/update.js';
+import { AtlasApiError, apiRequest } from './client.js';
+import { loadConfig } from './config.js';
+// Read the version rather than repeating it. It was hardcoded here, drifted from
+// package.json, and a CLI whose --version lies is worse than one that has none:
+// it makes "did my install actually update?" unanswerable.
+//
+// '../package.json' resolves to the same file from src/index.ts in dev and from
+// dist/index.js once built.
+const { version } = createRequire(import.meta.url)('../package.json');
+const program = new Command();
+program
+    .name('buildatlas')
+    .description('BuildAtlas CLI — self-hosted builds for Expo, React Native, iOS and Android.')
+    .version(version);
+registerAuthCommands(program);
+registerInitCommand(program);
+registerBuildCommand(program);
+registerBuildQueryCommands(program);
+registerCredentialCommands(program);
+registerSubmitCommand(program);
+registerEnvCommand(program);
+registerExpoTokenCommands(program);
+registerProjectCommands(program);
+registerUpdateCommand(program);
+program
+    .command('whoami')
+    .description('Show the authenticated user')
+    .action(async () => {
+    const config = await loadConfig();
+    if (!config.token) {
+        console.error(pc.red('Not logged in.'), 'Run', pc.bold('buildatlas login'));
+        process.exitCode = 1;
+        return;
+    }
+    // Ask the server rather than reporting what is in the config file. A revoked
+    // token still leaves an email on disk, and "whoami says I am logged in but
+    // every other command fails" is a genuinely confusing place to start
+    // debugging.
+    try {
+        const { user } = await apiRequest(config, '/auth/me', {
+            token: config.token,
+        });
+        console.log(`${user.email} @ ${config.apiUrl}`);
+    }
+    catch (err) {
+        const reason = err instanceof AtlasApiError ? err.message : err.message;
+        console.error(pc.red('✖'), `Stored token is not usable: ${reason}`);
+        console.error(pc.dim(`  re-run: buildatlas login --api ${config.apiUrl}`));
+        process.exitCode = 1;
+    }
+});
+await program.parseAsync(process.argv);
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,MAAM,YAAY,CAAC;AAC5B,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAC;AACvE,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,iFAAiF;AACjF,gFAAgF;AAChF,2DAA2D;AAC3D,EAAE;AACF,gFAAgF;AAChF,4BAA4B;AAC5B,MAAM,EAAE,OAAO,EAAE,GAAG,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,iBAAiB,CAAwB,CAAC;AAE7F,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,YAAY,CAAC;KAClB,WAAW,CAAC,8EAA8E,CAAC;KAC3F,OAAO,CAAC,OAAO,CAAC,CAAC;AAEpB,oBAAoB,CAAC,OAAO,CAAC,CAAC;AAC9B,mBAAmB,CAAC,OAAO,CAAC,CAAC;AAC7B,oBAAoB,CAAC,OAAO,CAAC,CAAC;AAC9B,0BAA0B,CAAC,OAAO,CAAC,CAAC;AACpC,0BAA0B,CAAC,OAAO,CAAC,CAAC;AACpC,qBAAqB,CAAC,OAAO,CAAC,CAAC;AAC/B,kBAAkB,CAAC,OAAO,CAAC,CAAC;AAC5B,yBAAyB,CAAC,OAAO,CAAC,CAAC;AACnC,uBAAuB,CAAC,OAAO,CAAC,CAAC;AACjC,qBAAqB,CAAC,OAAO,CAAC,CAAC;AAE/B,OAAO;KACJ,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,6BAA6B,CAAC;KAC1C,MAAM,CAAC,KAAK,IAAI,EAAE;IACjB,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;IAClC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC;QAC5E,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IACD,6EAA6E;IAC7E,2EAA2E;IAC3E,qEAAqE;IACrE,aAAa;IACb,IAAI,CAAC;QACH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,UAAU,CAA8B,MAAM,EAAE,UAAU,EAAE;YACjF,KAAK,EAAE,MAAM,CAAC,KAAK;SACpB,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,GAAG,YAAY,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAE,GAAa,CAAC,OAAO,CAAC;QACnF,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,+BAA+B,MAAM,EAAE,CAAC,CAAC;QACpE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,oCAAoC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC3E,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC"}

package/dist/logs.d.ts

@@ -0,0 +1,13 @@
+import type { AtlasConfig } from './config.ts';
+/**
+ * Follows a build's log over SSE and resolves with its terminal status.
+ *
+ * Reconnects on a dropped connection, resuming from the last sequence number
+ * seen. That cursor is the whole reason the server numbers chunks: a build can run
+ * 20 minutes, and a laptop closing its lid mid-build should not truncate the log
+ * or replay it from the top.
+ */
+export declare function streamLogs(config: Pick<AtlasConfig, 'apiUrl' | 'token'>, buildId: string, { quiet }?: {
+    quiet?: boolean | undefined;
+}): Promise<string>;
+//# sourceMappingURL=logs.d.ts.map

package/dist/logs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logs.d.ts","sourceRoot":"","sources":["../src/logs.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAS/C;;;;;;;GAOG;AACH,wBAAsB,UAAU,CAC9B,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,GAAG,OAAO,CAAC,EAC7C,OAAO,EAAE,MAAM,EACf,EAAE,KAAa,EAAE;;CAAK,GACrB,OAAO,CAAC,MAAM,CAAC,CA+DjB"}