ant-go 0.1.22

package/README.md

@@ -0,0 +1,242 @@
+# ant-go CLI
+
+Build iOS and Android apps with a single command — no complex CI/CD setup required.
+
+## Installation
+
+```bash
+npm install -g ant-go
+```
+
+## Upgrading
+
+```bash
+npm install -g ant-go@latest
+```
+
+To check your current version:
+
+```bash
+ant --version
+```
+
+> The CLI automatically notifies you when a newer version is available after each command.
+
+## Getting Started
+
+### 1. Login
+
+```bash
+# Login with email/password
+ant auth login
+
+# Or login with Google via browser
+ant auth login --browser
+```
+
+### 2. Add `projectId` to `app.json`
+
+Get your Project ID from [antgo.work](https://antgo.work) after creating a project.
+
+```json
+{
+  "expo": {
+    "extra": {
+      "ant": {
+        "projectId": "your-project-id"
+      }
+    }
+  }
+}
+```
+
+> The CLI automatically detects `bundleId`, `schemeName`, and `xcworkspace` from your project files. No extra configuration needed.
+
+### 3. Build
+
+```bash
+ant build --platform ios
+```
+
+---
+
+## Commands
+
+### `ant build`
+
+Packages your project, uploads it to the build server, and tracks progress.
+
+```bash
+ant build --platform ios
+ant build --platform ios --profile development
+ant build --platform ios --auto-submit        # auto-submit to TestFlight after build
+ant build --platform ios --reauth             # re-login to Apple Developer, clear cache
+ant build --platform ios --refresh-profile    # recreate Provisioning Profile
+```
+
+| Option | Description |
+|---|---|
+| `--platform <platform>` | `ios` or `android` |
+| `--profile <profile>` | Build profile from `ant.json` (default: `production`) |
+| `--project <path>` | Path to project directory (default: current directory) |
+| `--reauth` | Clear Apple Developer session cache and re-login |
+| `--refresh-profile` | Recreate Provisioning Profile (use when Capabilities change) |
+| `--auto-submit` | Automatically submit IPA to TestFlight after a successful build |
+
+---
+
+### `ant status <jobId>`
+
+Check the status of a build job.
+
+```bash
+ant status abc123xyz
+```
+
+```
+  Job ID:   abc123xyz
+  Status:   SUCCESS
+  Created:  4/27/2026, 10:30:00 AM
+  Updated:  4/27/2026, 10:45:12 AM
+  IPA:      https://storage.googleapis.com/.../MyApp.ipa
+```
+
+---
+
+### `ant auth login`
+
+Login to your antgo.work account. Token is stored at `~/.ant-go/config.json` and valid for 24 hours.
+
+```bash
+ant auth login
+ant auth login --browser   # Google OAuth
+```
+
+### `ant auth logout`
+
+Logout and revoke the current token.
+
+```bash
+ant auth logout
+```
+
+### `ant auth whoami`
+
+Display information about the currently logged-in account.
+
+```bash
+ant auth whoami
+```
+
+```
+  Name:    John Doe
+  Email:   dev@example.com
+  Plan:    Pro
+  Credits: 12 / 15
+  Expires: 2026-05-01 10:30:00
+```
+
+---
+
+## Build Profiles (`ant.json`)
+
+Place `ant.json` at the root of your project (next to `app.json`). If it doesn't exist, the CLI will create it with default profiles on first run.
+
+```json
+{
+  "build": {
+    "production": {
+      "distribution": "store"
+    },
+    "development": {
+      "developmentClient": true,
+      "distribution": "internal"
+    },
+    "preview": {
+      "distribution": "internal"
+    }
+  }
+}
+```
+
+| Profile | `distribution` | Use when |
+|---|---|---|
+| `production` | `store` | Releasing to App Store or distributing via TestFlight |
+| `development` | `internal` | Debugging on a real device, connecting to Metro bundler |
+| `preview` | `internal` | Sharing internal test builds before going to the store |
+
+> **`distribution: internal`** requires registering device UDIDs beforehand. The CLI guides you through this automatically via QR code.
+
+---
+
+## Add Device (iOS internal build)
+
+When building with `distribution: internal`, the CLI will ask which devices to include. To register a new device:
+
+1. CLI displays a **QR code** in the terminal.
+2. Scan the QR code with the **Camera app** on your iPhone (no separate app needed).
+3. iPhone downloads `.mobileconfig` → automatically sends UDID to the server.
+4. CLI receives the UDID, registers it on **Apple Developer Portal**, and creates a new Provisioning Profile.
+
+```bash
+ant build --platform ios --profile development
+```
+
+---
+
+## Auto Submit to TestFlight
+
+Add `--auto-submit` to automatically upload your IPA to TestFlight after a successful build (only works with `distribution: store`).
+
+```bash
+ant build --platform ios --auto-submit
+```
+
+The CLI will automatically:
+1. Generate and cache an **App Store Connect API Key** from your Apple Developer Portal session.
+2. Upload the key to the server for use during submission.
+3. After the build completes, the server triggers a TestFlight submission job.
+
+---
+
+## How It Works
+
+```
+ant build --platform ios
+    │
+    ├── Read app.json + ant.json
+    ├── Login to Apple Developer (cached 24h)
+    ├── Create/reuse Distribution Certificate (.p12)
+    ├── Create/reuse Provisioning Profile
+    ├── POST /api/builds → receive jobId + signed upload URLs
+    ├── Upload project.tar.gz → GCS
+    ├── Upload credentials.json → GCS
+    ├── POST /api/builds/:id/start
+    │
+    └── Track at: https://antgo.work/account/app/MyApp/builds/abc123xyz
+
+Mac Build Server (automatic):
+    ├── Download + extract project
+    ├── npm install + Fastlane + Xcode build
+    ├── Upload IPA → GCS
+    └── Update status + deduct credit → realtime dashboard
+```
+
+---
+
+## Credential Caching
+
+The CLI caches Apple credentials at `~/.ant-go/creds-<profileName>.json` (TTL: 24h):
+
+- Apple Developer session
+- Distribution Certificate (`.p12`)
+- Provisioning Profile
+- App Store Connect API Key (no expiry)
+
+Use `--reauth` to clear the cache and re-login from scratch.
+
+---
+
+## Full Documentation
+
+👉 **[antgo.work/docs](https://antgo.work/docs)**

package/bin/ant-go.js

@@ -0,0 +1,157 @@
+#!/usr/bin/env node
+
+const { program } = require('commander');
+const { version } = require('../package.json');
+const { startUpdateCheck } = require('../src/update-check');
+const { setLang, isFirstRun, markFirstRunDone } = require('../src/config');
+const { t, getLang } = require('../src/i18n');
+const chalk = require('chalk');
+
+// ── First-run welcome ─────────────────────────────────────────────────────────
+if (isFirstRun()) {
+  markFirstRunDone();
+  console.log('');
+  console.log(chalk.bold.cyan(`  🐜  ant-go CLI  v${version}`));
+  console.log(chalk.gray('  ─────────────────────────────────'));
+  console.log(`  ${t('firstRunWelcome')}`);
+  console.log('');
+  console.log(`  ${t('firstRunGetStarted')}`);
+  console.log(`  ${chalk.cyan('ant auth login')}`);
+  console.log('');
+  console.log(`  ${t('firstRunDocs')} ${chalk.cyan('https://antgo.work/docs')}`);
+  console.log('');
+  console.log(chalk.yellow(`  ${t('firstRunLangHint')}`));
+  console.log('');
+}
+
+// Kick off update check immediately (non-blocking)
+const showUpdateHint = startUpdateCheck();
+
+program
+  .name('ant')
+  .description('CLI to trigger iOS and Android builds')
+  .version(version);
+
+// ── auth ──────────────────────────────────────────────────────────────────────
+const auth = program
+  .command('auth')
+  .description('Manage account authentication');
+
+auth
+  .command('login')
+  .description('Login to your ant-go account')
+  .option('--browser', 'Login with Google via browser')
+  .action(async (options) => {
+    const { loginCommand } = require('../src/commands/auth');
+    await loginCommand({ browser: !!options.browser });
+    await showUpdateHint();
+    process.exit(0);
+  });
+
+auth
+  .command('logout')
+  .description('Logout from current account')
+  .action(async () => {
+    const { logoutCommand } = require('../src/commands/auth');
+    await logoutCommand();
+    await showUpdateHint();
+  });
+
+auth
+  .command('whoami')
+  .description('Show current logged-in account info')
+  .action(async () => {
+    const { whoamiCommand } = require('../src/commands/auth');
+    await whoamiCommand();
+    await showUpdateHint();
+  });
+
+// ── build ─────────────────────────────────────────────────────────────────────
+program
+  .command('build')
+  .description('Trigger a build (ios or android)')
+  .option('--platform <platform>', 'Build platform: ios or android')
+  .option('--profile <profile>', 'Build profile from ant.json (default: production)', 'production')
+  .option('--project <path>', 'Path to project directory (default: current directory)')
+  .option('--reauth', 'Clear Apple Developer session cache and re-login')
+  .option('--refresh-profile', 'Recreate Provisioning Profile')
+  .option('--auto-submit', 'Auto submit IPA to TestFlight after successful build')
+  .action(async (options) => {
+    const { runBuild } = require('../src/commands/build');
+    await runBuild(options);
+    await showUpdateHint();
+  });
+
+// ── status ────────────────────────────────────────────────────────────────────
+program
+  .command('status <jobId>')
+  .description('Check build job status')
+  .action(async (jobId) => {
+    const { checkStatus } = require('../src/commands/status');
+    await checkStatus(jobId);
+    await showUpdateHint();
+  });
+
+// ── set ───────────────────────────────────────────────────────────────────────
+const set = program
+  .command('set')
+  .description('Set CLI preferences');
+
+set
+  .command('lang <lang>')
+  .description('Set language: vi (Vietnamese) or en (English)')
+  .action((lang) => {
+    const valid = ['vi', 'en'];
+    if (!valid.includes(lang)) {
+      console.log('');
+      console.log(chalk.red(`  ${t('langInvalid')}`));
+      console.log('');
+      process.exit(1);
+    }
+    setLang(lang);
+    console.log('');
+    console.log(chalk.green(`  ${t('langSet', lang)}`));
+    console.log(chalk.gray(`  ${t('firstRunLangHint')}`));
+    console.log('');
+  });
+
+// ── uninstall ─────────────────────────────────────────────────────────────────
+program
+  .command('uninstall')
+  .description('Uninstall ant-go CLI from this machine')
+  .action(async () => {
+    const inquirer = require('inquirer');
+    const { execSync } = require('child_process');
+    const ora = require('ora');
+
+    console.log('');
+    const { confirm } = await inquirer.prompt([{
+      type: 'confirm',
+      name: 'confirm',
+      message: t('uninstallConfirm'),
+      default: false,
+    }]);
+
+    if (!confirm) {
+      console.log(chalk.gray(`  ${t('uninstallCancelled')}`));
+      console.log('');
+      process.exit(0);
+    }
+
+    const spinner = ora(t('uninstallRunning')).start();
+    try {
+      execSync('npm uninstall -g ant-go', { stdio: 'ignore' });
+      spinner.succeed(chalk.green(t('uninstallDone')));
+      console.log('');
+    } catch (err) {
+      spinner.fail(chalk.red(t('uninstallFailed', err.message)));
+      console.log('');
+      process.exit(1);
+    }
+  });
+
+program.parse(process.argv);
+
+if (!process.argv.slice(2).length) {
+  program.outputHelp();
+}

package/docs/add-device-flow.md

@@ -0,0 +1,207 @@
+# Add Device Flow — CLI
+
+Luồng đăng ký UDID thiết bị iOS từ CLI, được kích hoạt tự động khi chạy `ant build` với profile `distribution: internal`.
+
+---
+
+## Tổng quan
+
+```
+Developer Machine (CLI)              antgo.work API                 iPhone
+        │                                  │                           │
+        ├── ant build --profile development                         │
+        ├── ensureToken()                  │                           │
+        │                                  │                           │
+        ├── GET /api/user/me ─────────────►│ trả plan, quota, devices  │
+        │◄── { plan, freeBuildsRemaining,  │                           │
+        │      devices: [...] } ───────────┤                           │
+        ├── check quota (free builds?)     │                           │
+        │                                  │                           │
+        ├── distribution: internal?        │                           │
+        │       └─ selectDevices()         │                           │
+        │           ├─ multi-select UI     │                           │
+        │           └─ "Thêm device mới":  │                           │
+        │               POST /device-enroll/create                     │
+        │◄── { token, enrollUrl } ─────────┤                           │
+        │               hiện QR code       │                           │
+        │               poll status 3s     │◄── iPhone quét QR ────────┤
+        │                                  │    iOS gửi UDID           │
+        │◄── { status: registered, udid } ◄┤                           │
+        │               POST /api/devices ►│ lưu Firestore             │
+        │               loop lại chọn      │                           │
+        │                                  │                           │
+        ├── Apple login (cache / fresh)    │                           │
+        ├── sync UDIDs → Apple Developer (Device.getAsync / createAsync)
+        ├── Certificate (reuse / tạo mới)  │                           │
+        ├── Provisioning Profile({ devices: [id1, id2, ...] })         │
+        └── createBuild → upload → start   │                           │
+```
+
+---
+
+## Điều kiện kích hoạt
+
+Flow này chỉ chạy khi cả hai điều kiện đều đúng:
+
+1. `--platform ios`
+2. Profile được chọn có `distribution: "internal"` trong `ant.json`
+
+```json
+{
+  "build": {
+    "development": {
+      "distribution": "internal",
+      "developmentClient": true
+    }
+  }
+}
+```
+
+Lệnh kích hoạt:
+```bash
+ant build --platform ios --profile development
+```
+
+---
+
+## Các file liên quan
+
+| File | Vai trò |
+|---|---|
+| `cli/src/commands/build.js` | Entry point — fetch user info, check quota, gọi `ensureAppleCreds()` |
+| `cli/src/api.js` | `fetchUserInfo()`, `saveDevice()` |
+| `cli/src/apple-creds.js` | `enrollDevice()`, `selectDevices()`, `ensureAppleCreds()` |
+| `app/api/user/me/route.ts` | Trả user info + danh sách devices (fresh từ Firestore) |
+| `app/api/device-enroll/create/route.ts` | Tạo enrollment session |
+| `app/api/device-enroll/[token]/profile/route.ts` | Trả `.mobileconfig` cho iPhone |
+| `app/api/device-enroll/[token]/complete/route.ts` | Nhận UDID từ iOS |
+| `app/api/device-enroll/[token]/status/route.ts` | CLI poll để biết UDID về chưa |
+| `app/api/devices/route.ts` | Lưu / đọc devices — chấp nhận cả Firebase ID token lẫn CLI token |
+
+---
+
+## Flow chi tiết
+
+### Bước 1 — Fetch user info
+
+Ngay sau `ensureToken()`, CLI gọi `GET /api/user/me` với CLI token:
+
+```
+Response: {
+  plan: "free|starter|pro|team",
+  planStatus: "active|past_due|canceled|null",
+  freeBuildsRemaining: 5,
+  devices: [
+    { udid, name, deviceProduct, deviceSerial, addedAt }
+  ]
+}
+```
+
+Kiểm tra quota:
+- `plan === "free"` và `freeBuildsRemaining <= 0` → báo lỗi, thoát.
+- `planStatus === "past_due"` → hiện cảnh báo thanh toán, tiếp tục.
+
+---
+
+### Bước 2 — Multi-select device (`selectDevices`)
+
+Khi `distribution: internal`, CLI gọi `selectDevices(userDevices, projectId, apiClient)`.
+
+**Trường hợp chưa có device nào:** đi thẳng vào enrollment mới.
+
+**Trường hợp đã có device:** hiển thị checkbox multi-select:
+
+```
+📱  Chọn device để build (Space = chọn/bỏ, Enter = xác nhận):
+
+ ◉  My iPhone        iPhone17,1   (00008110-001234...)
+ ◯  iPad Pro 11"     iPad8,1      (00008130-000ABC...)
+ ─────────────────────────────────────────────────────
+ ◯  ＋ Thêm device mới
+```
+
+**Nếu user chọn "＋ Thêm device mới":**
+
+1. Chạy `enrollDevice(projectId)`:
+   - `POST /api/device-enroll/create` → nhận `token`, `enrollUrl`
+   - Hiện QR code trong terminal
+   - Poll `GET /api/device-enroll/{token}/status` mỗi 3 giây (max 10 phút)
+   - Nhận `{ udid, deviceProduct, deviceSerial }`
+2. Prompt tên device.
+3. `POST /api/devices` → lưu vào Firestore `users/{uid}/devices/{udid}`.
+4. Thêm device mới vào danh sách, **quay lại màn hình chọn**.
+
+Return: `string[]` — mảng các UDID được chọn.
+
+---
+
+### Bước 3 — Đăng nhập Apple Developer
+
+`ensureAppleCreds()` xử lý cache (TTL 24h) → login → 2FA → chọn team.
+
+---
+
+### Bước 4 — Đồng bộ UDIDs lên Apple Developer Portal
+
+Với mỗi UDID trong `selectedUdids`:
+
+```
+Device.getAsync(authCtx)
+    ├── UDID đã có trên Apple? → lấy deviceId
+    └── Chưa có → Device.createAsync({ name, udid, platform: 'IOS' }) → lấy deviceId mới
+
+deviceIds = [id1, id2, ...]
+```
+
+---
+
+### Bước 5 — Certificate + Provisioning Profile
+
+- **Certificate** (Development): reuse nếu còn hợp lệ, tạo mới nếu không.
+- **Provisioning Profile** (Development): tạo với **toàn bộ** `deviceIds`:
+  ```js
+  Profile.createAsync(authCtx, {
+    bundleId:     bundleIdObj.id,
+    certificates: [certId],
+    devices:      deviceIds,   // tất cả device đã chọn
+    profileType:  ProfileType.IOS_APP_DEVELOPMENT,
+  })
+  ```
+
+---
+
+### Bước 6 — Build
+
+CLI đóng gói project, upload lên GCS và gửi build job — giống hệt flow build bình thường (xem [../../docs/build-flow.md](../../docs/build-flow.md)).
+
+---
+
+## Cache credentials
+
+File: `~/.ant-go/creds-<profileName>.json` (TTL 24h, mode 0600)
+
+```json
+{
+  "appleId": "dev@example.com",
+  "p12Base64": "...",
+  "p12Password": "...",
+  "mobileprovisionBase64": "...",
+  "teamId": "TEAMID123",
+  "udids": ["00008110-001234ABCDEF", "00008130-000ABC123"],
+  "_savedAt": 1714512345678
+}
+```
+
+**Backward compat:** cache cũ có field `udid` (string) vẫn được đọc, convert thành `udids: [udid]`.
+
+---
+
+## Lỗi thường gặp
+
+| Lỗi | Nguyên nhân | Cách xử lý |
+|---|---|---|
+| `Bạn đã hết lượt build miễn phí` | `freeBuildsRemaining <= 0` | Nâng cấp plan tại antgo.work/account/billing |
+| `Device enrollment timeout` | iPhone không quét QR trong 10 phút | Chạy lại lệnh, quét QR nhanh hơn |
+| `Không tạo được enrollment session` | Mất kết nối đến antgo.work | Kiểm tra mạng, thử lại |
+| `App ID không tồn tại trên Apple Developer` | `bundleId` chưa được tạo trên portal | Tạo App ID thủ công tại developer.apple.com |
+| `Đăng nhập thất bại` | Sai Apple ID / password | Kiểm tra App-Specific Password tại appleid.apple.com |

package/package.json

@@ -0,0 +1,24 @@
+{
+  "name": "ant-go",
+  "version": "0.1.22",
+  "description": "CLI to trigger iOS builds via ant-go build server",
+  "main": "src/index.js",
+  "bin": {
+    "ant": "bin/ant-go.js"
+  },
+  "scripts": {
+    "start": "node bin/ant-go.js"
+  },
+  "dependencies": {
+    "@expo/apple-utils": "^2.1.21",
+    "axios": "^1.7.2",
+    "chalk": "^4.1.2",
+    "commander": "^12.1.0",
+    "inquirer": "^8.2.7",
+    "ora": "^5.4.1",
+    "qrcode-terminal": "^0.12.0"
+  },
+  "engines": {
+    "node": ">=18.0.0"
+  }
+}

package/src/api.js

@@ -0,0 +1,64 @@
+/**
+ * api.js — HTTP client gọi tới ant Next.js API
+ */
+
+const axios = require('axios');
+
+function createClient(apiUrl, authToken) {
+  const headers = { 'Content-Type': 'application/json' };
+  if (authToken) headers['Authorization'] = `Bearer ${authToken}`;
+  return axios.create({
+    baseURL: apiUrl.replace(/\/$/, ''),
+    headers,
+    timeout: 30_000,
+  });
+}
+
+// POST /api/builds — tạo build job, nhận signed URL
+async function createBuild(client, payload = {}) {
+  const { data } = await client.post('/api/builds', payload);
+  return data; // { jobId, uploadUrl }
+}
+
+// GET /api/builds/:id — lấy status
+async function getBuildStatus(client, jobId) {
+  const { data } = await client.get(`/api/builds/${jobId}`);
+  return data;
+}
+
+// Lấy user info + devices list (fresh từ Firestore)
+async function fetchUserInfo(client) {
+  const { data } = await client.get('/api/user/me');
+  return data;
+}
+
+// Lưu device mới vào Firestore sau khi enroll thành công
+async function saveDevice(client, { udid, name, deviceProduct, deviceSerial }) {
+  const { data } = await client.post('/api/devices', {
+    udid,
+    name,
+    deviceProduct,
+    deviceSerial,
+    source: 'cli',
+  });
+  return data;
+}
+
+// Upload ASC API Key lên dashboard (per-user, per-team)
+async function uploadAscKey(client, { teamId, keyId, issuerId, privateKeyP8 }) {
+  const { data } = await client.post('/api/user/asc-key', {
+    teamId,
+    keyId,
+    issuerId,
+    privateKeyP8,
+  });
+  return data;
+}
+
+// Lưu danh sách capabilities đang enabled vào dashboard (per-app)
+async function uploadCapabilities(client, { projectId, capabilities }) {
+  const { data } = await client.post(`/api/apps/${projectId}/capabilities`, { capabilities });
+  return data;
+}
+
+module.exports = { createClient, createBuild, getBuildStatus, fetchUserInfo, saveDevice, uploadAscKey, uploadCapabilities };