rnbuilder 0.6.70 → 0.6.72

package/README.md

@@ -10,10 +10,28 @@ React Native builder tool
 
 <!-- toc -->
 * [rnbuilder](#rnbuilder)
+* [Setup](#setup)
 * [Usage](#usage)
 * [Commands](#commands)
 <!-- tocstop -->
 
+# Setup
+
+## Google Play Store (Android)
+
+Builds are uploaded to Google Play using **GCP service account impersonation** — no private key files stored on disk.
+
+Run once per machine:
+
+```sh-session
+$ rnbuilder setup-gcp
+```
+
+Each client `.env` must set `GOOGLE_APPLICATION_CREDENTIALS` pointing to the SA's ADC file.
+Google Play Console limits one service account to 10 developer accounts — use multiple SAs for more clients.
+
+See [docs/gcp-service-account-impersonation.md](docs/gcp-service-account-impersonation.md) for full setup, adding new service accounts, client mapping, and troubleshooting.
+
 # Usage
 
 <!-- usage -->
@@ -22,7 +40,7 @@ $ npm install -g rnbuilder
 $ rnbuilder COMMAND
 running command...
 $ rnbuilder (-v|--version|version)
-rnbuilder/0.6.70 darwin-arm64 node-v24.13.0
+rnbuilder/0.6.72 darwin-arm64 node-v24.13.0
 $ rnbuilder --help [COMMAND]
 USAGE
   $ rnbuilder COMMAND
@@ -44,6 +62,7 @@ USAGE
 * [`rnbuilder onesignal [BUILD]`](#rnbuilder-onesignal-build)
 * [`rnbuilder reject-review [REJECT-REVIEW]`](#rnbuilder-reject-review-reject-review)
 * [`rnbuilder setup [SETUP]`](#rnbuilder-setup-setup)
+* [`rnbuilder setup-gcp`](#rnbuilder-setup-gcp)
 * [`rnbuilder submit-review [SUBMIT-REVIEW]`](#rnbuilder-submit-review-submit-review)
 * [`rnbuilder sync-udids [BUILD]`](#rnbuilder-sync-udids-build)
 
@@ -79,7 +98,7 @@ EXAMPLE
   hello world from ./src/build.ts!
 ```
 
-_See code: [src/commands/build.ts](https://github.com/r0b0t3d/rnbuilder/blob/v0.6.70/src/commands/build.ts)_
+_See code: [src/commands/build.ts](https://github.com/r0b0t3d/rnbuilder/blob/v0.6.72/src/commands/build.ts)_
 
 ## `rnbuilder check-version [MATCH-CHECK]`
 
@@ -98,7 +117,7 @@ EXAMPLE
        Nuke certificates ./src/match-check.ts!
 ```
 
-_See code: [src/commands/check-version.ts](https://github.com/r0b0t3d/rnbuilder/blob/v0.6.70/src/commands/check-version.ts)_
+_See code: [src/commands/check-version.ts](https://github.com/r0b0t3d/rnbuilder/blob/v0.6.72/src/commands/check-version.ts)_
 
 ## `rnbuilder codepush [BUILD]`
 
@@ -117,7 +136,7 @@ EXAMPLE
        Push changes to existing apps ./src/firebase-sync-udids.ts!
 ```
 
-_See code: [src/commands/codepush.ts](https://github.com/r0b0t3d/rnbuilder/blob/v0.6.70/src/commands/codepush.ts)_
+_See code: [src/commands/codepush.ts](https://github.com/r0b0t3d/rnbuilder/blob/v0.6.72/src/commands/codepush.ts)_
 
 ## `rnbuilder google-key [MATCH-CHECK]`
 
@@ -136,7 +155,7 @@ EXAMPLE
        Nuke certificates ./src/match-check.ts!
 ```
 
-_See code: [src/commands/google-key.ts](https://github.com/r0b0t3d/rnbuilder/blob/v0.6.70/src/commands/google-key.ts)_
+_See code: [src/commands/google-key.ts](https://github.com/r0b0t3d/rnbuilder/blob/v0.6.72/src/commands/google-key.ts)_
 
 ## `rnbuilder help [COMMAND]`
 
@@ -168,7 +187,7 @@ EXAMPLE
   initialize environment for first run from ./src/initialize.ts!
 ```
 
-_See code: [src/commands/initialize.ts](https://github.com/r0b0t3d/rnbuilder/blob/v0.6.70/src/commands/initialize.ts)_
+_See code: [src/commands/initialize.ts](https://github.com/r0b0t3d/rnbuilder/blob/v0.6.72/src/commands/initialize.ts)_
 
 ## `rnbuilder match-check [MATCH-CHECK]`
 
@@ -187,7 +206,7 @@ EXAMPLE
        Check match certificates ./src/match-check.ts!
 ```
 
-_See code: [src/commands/match-check.ts](https://github.com/r0b0t3d/rnbuilder/blob/v0.6.70/src/commands/match-check.ts)_
+_See code: [src/commands/match-check.ts](https://github.com/r0b0t3d/rnbuilder/blob/v0.6.72/src/commands/match-check.ts)_
 
 ## `rnbuilder match-nuke [BUILD]`
 
@@ -206,7 +225,7 @@ EXAMPLE
        Nuke certificates ./src/match-nuke.ts!
 ```
 
-_See code: [src/commands/match-nuke.ts](https://github.com/r0b0t3d/rnbuilder/blob/v0.6.70/src/commands/match-nuke.ts)_
+_See code: [src/commands/match-nuke.ts](https://github.com/r0b0t3d/rnbuilder/blob/v0.6.72/src/commands/match-nuke.ts)_
 
 ## `rnbuilder onesignal [BUILD]`
 
@@ -228,7 +247,7 @@ EXAMPLE
        Create and upload push certificate to One Signal from ./src/commands/onesignal.ts!
 ```
 
-_See code: [src/commands/onesignal.ts](https://github.com/r0b0t3d/rnbuilder/blob/v0.6.70/src/commands/onesignal.ts)_
+_See code: [src/commands/onesignal.ts](https://github.com/r0b0t3d/rnbuilder/blob/v0.6.72/src/commands/onesignal.ts)_
 
 ## `rnbuilder reject-review [REJECT-REVIEW]`
 
@@ -246,7 +265,7 @@ EXAMPLE
   $ rnbuilder reject-review
 ```
 
-_See code: [src/commands/reject-review.ts](https://github.com/r0b0t3d/rnbuilder/blob/v0.6.70/src/commands/reject-review.ts)_
+_See code: [src/commands/reject-review.ts](https://github.com/r0b0t3d/rnbuilder/blob/v0.6.72/src/commands/reject-review.ts)_
 
 ## `rnbuilder setup [SETUP]`
 
@@ -264,7 +283,21 @@ EXAMPLE
   hello world from ./src/setup.ts!
 ```
 
-_See code: [src/commands/setup.ts](https://github.com/r0b0t3d/rnbuilder/blob/v0.6.70/src/commands/setup.ts)_
+_See code: [src/commands/setup.ts](https://github.com/r0b0t3d/rnbuilder/blob/v0.6.72/src/commands/setup.ts)_
+
+## `rnbuilder setup-gcp`
+
+Setup GCP service account impersonation
+
+```
+USAGE
+  $ rnbuilder setup-gcp
+
+OPTIONS
+  -h, --help  show CLI help
+```
+
+_See code: [src/commands/setup-gcp.ts](https://github.com/r0b0t3d/rnbuilder/blob/v0.6.72/src/commands/setup-gcp.ts)_
 
 ## `rnbuilder submit-review [SUBMIT-REVIEW]`
 
@@ -283,7 +316,7 @@ EXAMPLE
        Push changes to existing apps ./src/firebase-sync-udids.ts!
 ```
 
-_See code: [src/commands/submit-review.ts](https://github.com/r0b0t3d/rnbuilder/blob/v0.6.70/src/commands/submit-review.ts)_
+_See code: [src/commands/submit-review.ts](https://github.com/r0b0t3d/rnbuilder/blob/v0.6.72/src/commands/submit-review.ts)_
 
 ## `rnbuilder sync-udids [BUILD]`
 
@@ -302,5 +335,5 @@ EXAMPLE
        Sync device UDIDs from firebase from ./src/firebase-sync-udids.ts!
 ```
 
-_See code: [src/commands/sync-udids.ts](https://github.com/r0b0t3d/rnbuilder/blob/v0.6.70/src/commands/sync-udids.ts)_
+_See code: [src/commands/sync-udids.ts](https://github.com/r0b0t3d/rnbuilder/blob/v0.6.72/src/commands/sync-udids.ts)_
 <!-- commandsstop -->

package/lib/commands/build.js

@@ -246,15 +246,15 @@ class Build extends command_1.Command {
             }
         }
         shell.exec('git pull');
-        shell.exec('bundle update --bundler');
-        shell.exec('bundle install');
-        // Clean fastlane builds
-        shell.exec('rm -rf fastlane/builds');
-        shell.exec('rm ios/.xcode.env.local');
         if (flags.cleanup) {
+            // Clean fastlane builds
+            shell.exec('rm -rf fastlane/builds');
+            shell.exec('rm ios/.xcode.env.local');
             shell.exec('rm -rf android/.gradle android/build android/app/build android/app/.cxx node_modules');
         }
         if (flags.install) {
+            shell.exec('bundle update --bundler');
+            shell.exec('bundle install');
             const installCmd = shell.test('-f', 'bun.lockb') || shell.test('-f', 'bun.lock')
                 ? 'bun install'
                 : shell.test('-f', 'pnpm-lock.yaml')

package/lib/commands/setup-gcp.d.ts

@@ -0,0 +1,8 @@
+import { Command } from '@oclif/command';
+export default class SetupGcp extends Command {
+    static description: string;
+    static flags: {
+        help: import("@oclif/parser/lib/flags").IBooleanFlag<void>;
+    };
+    run(): Promise<void>;
+}

package/lib/commands/setup-gcp.js

@@ -0,0 +1,26 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const command_1 = require("@oclif/command");
+const child_process_1 = require("child_process");
+const path = require("path");
+const common_1 = require("../utils/common");
+class SetupGcp extends command_1.Command {
+    async run() {
+        var _a, _b, _c, _d, _e;
+        const configs = common_1.getFastlaneConfigs();
+        const gcp = (_a = configs.gcp) !== null && _a !== void 0 ? _a : {};
+        const scriptPath = path.join(__dirname, '../../scripts/setup_gcp_impersonation.sh');
+        const result = child_process_1.spawnSync('bash', [scriptPath], {
+            stdio: 'inherit',
+            env: Object.assign(Object.assign({}, process.env), { GCP_PROJECT_ID: (_b = gcp.projectId) !== null && _b !== void 0 ? _b : '', GCP_USER_EMAIL: (_c = gcp.userEmail) !== null && _c !== void 0 ? _c : '', GCP_SERVICE_ACCOUNTS: ((_d = gcp.serviceAccounts) !== null && _d !== void 0 ? _d : []).join(',') }),
+        });
+        if (result.status !== 0) {
+            this.exit((_e = result.status) !== null && _e !== void 0 ? _e : 1);
+        }
+    }
+}
+exports.default = SetupGcp;
+SetupGcp.description = 'Setup GCP service account impersonation';
+SetupGcp.flags = {
+    help: command_1.flags.help({ char: 'h' }),
+};

package/lib/utils/setup/android.d.ts

@@ -1,4 +1,3 @@
-export declare function addProductFlavor({ client, applicationId, }: {
+export declare function addProductFlavor({ client, }: {
     client: string;
-    applicationId: string;
 }): void;

package/lib/utils/setup/android.js

@@ -3,49 +3,57 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.addProductFlavor = void 0;
 const fs = require("fs");
 const path = require("path");
-function insertIntoProductFlavors(gradle, flavor) {
-    // Find productFlavors block and insert before its closing brace
+function insertIntoProductFlavors(gradle, client) {
+    var _a;
     const blockStart = gradle.indexOf('productFlavors {');
     if (blockStart === -1) {
-        // No productFlavors block — append one inside android {}
         const androidEnd = gradle.lastIndexOf('}');
         return (gradle.slice(0, androidEnd) +
-            `\n    productFlavors {\n${flavor}\n    }\n` +
+            `\n    productFlavors {\n        ${client}\n    }\n` +
             gradle.slice(androidEnd));
     }
-    // Walk forward matching braces to find closing }
-    let depth = 0;
-    let i = blockStart;
-    while (i < gradle.length) {
+    const bracePos = gradle.indexOf('{', blockStart) + 1;
+    // Find closing brace of productFlavors block
+    let depth = 1;
+    let i = bracePos;
+    while (i < gradle.length && depth > 0) {
         if (gradle[i] === '{')
             depth++;
-        else if (gradle[i] === '}') {
+        else if (gradle[i] === '}')
             depth--;
-            if (depth === 0)
-                break;
-        }
         i++;
     }
-    return gradle.slice(0, i) + '\n' + flavor + '\n' + gradle.slice(i);
+    const blockEnd = i - 1;
+    const blockContent = gradle.slice(bracePos, blockEnd);
+    const lines = blockContent.split('\n');
+    // Detect indentation from existing flavor lines
+    const existingLine = lines.find(l => /^\s+\w+\s*$/.test(l));
+    const indent = existingLine ? ((_a = existingLine.match(/^(\s+)/)) !== null && _a !== void 0 ? _a : ['', '        '])[1] : '        ';
+    // Find insertion point to maintain alphabetical order
+    let insertAt = lines.length - 1; // default: before last empty/closing line
+    for (let li = 0; li < lines.length; li++) {
+        const name = lines[li].trim();
+        if (/^\w+$/.test(name) && name.localeCompare(client) > 0) {
+            insertAt = li;
+            break;
+        }
+    }
+    lines.splice(insertAt, 0, `${indent}${client}`);
+    return gradle.slice(0, bracePos) + lines.join('\n') + gradle.slice(blockEnd);
 }
-function addProductFlavor({ client, applicationId, }) {
+function addProductFlavor({ client, }) {
     const gradlePath = path.join(process.cwd(), 'android/app/build.gradle');
     if (!fs.existsSync(gradlePath)) {
         console.warn(`build.gradle not found at ${gradlePath} — skipping`);
         return;
     }
     const gradle = fs.readFileSync(gradlePath, 'utf-8');
-    // Already has this flavor
-    const flavorRegex = new RegExp(`\\b${client}\\s*\\{`);
+    const flavorRegex = new RegExp(`^\\s+${client}\\s*$`, 'm');
     if (flavorRegex.test(gradle)) {
         console.log(`Flavor "${client}" already exists in build.gradle — skipping`);
         return;
     }
-    const flavorBlock = `        ${client} {\n` +
-        `            dimension "default"\n` +
-        `            applicationId "${applicationId}"\n` +
-        `        }`;
-    const updated = insertIntoProductFlavors(gradle, flavorBlock);
+    const updated = insertIntoProductFlavors(gradle, client);
     fs.writeFileSync(gradlePath, updated, 'utf-8');
     console.log(`Added flavor "${client}" to android/app/build.gradle`);
 }

package/lib/utils/setup/client.js

@@ -24,7 +24,7 @@ exports.createClientConfig = async (client) => {
             default: `com.edular.${client}`,
         },
     ]);
-    android_1.addProductFlavor({ client, applicationId });
+    android_1.addProductFlavor({ client });
     ios_scheme_1.createXcodeScheme({ client, bundleId });
     return { appName, bundleId, applicationId };
 };

package/oclif.manifest.json

@@ -1 +1 @@
-{"version":"0.6.70","commands":{"build":{"id":"build","description":"Build react native apps","pluginName":"rnbuilder","pluginType":"core","aliases":[],"examples":["$ rnbuilder build\nhello world from ./src/build.ts!\n"],"flags":{"help":{"name":"help","type":"boolean","char":"h","description":"show CLI help","allowNo":false},"client":{"name":"client","type":"option","char":"c","description":"Set client that you want to build app"},"target":{"name":"target","type":"option","char":"t","description":"Set the build target: android, ios or both","options":["android","ios","android,ios"]},"env":{"name":"env","type":"option","char":"e","description":"Set the environment: prod, staging, dev"},"branch":{"name":"branch","type":"option","char":"b","description":"Set the source branch used to build the app"},"version":{"name":"version","type":"option","char":"v","description":"Set the version number for this build"},"installr":{"name":"installr","type":"option","char":"i","description":"If enabled, the build will be uploaded to installR"},"distribute":{"name":"distribute","type":"option","char":"d","description":"Specify where to distribute app"},"firebase":{"name":"firebase","type":"boolean","char":"f","description":"If enabled, the build will be uploaded to firebase","allowNo":false},"testersIos":{"name":"testersIos","type":"option","char":"t","description":"Tester ids for iOS distribution"},"testersAndroid":{"name":"testersAndroid","type":"option","char":"u","description":"Tester ids for Android distribution"},"gitReset":{"name":"gitReset","type":"boolean","char":"g","description":"Do git reset when building","allowNo":false},"cleanup":{"name":"cleanup","type":"boolean","char":"s","description":"Do cleanup when building","allowNo":false},"groupsIos":{"name":"groupsIos","type":"option","description":"Groups ids for iOS distribution"},"groupsAndroid":{"name":"groupsAndroid","type":"option","description":"Groups ids for Android distribution"},"skipCheckVersion":{"name":"skipCheckVersion","type":"boolean","description":"Skip checking current version on stores","allowNo":false},"install":{"name":"install","type":"boolean","char":"n","description":"Install dependencies before building","allowNo":false}},"args":[{"name":"build"}]},"check-version":{"id":"check-version","description":"Check live versions","pluginName":"rnbuilder","pluginType":"core","aliases":[],"examples":["$ rnbuilder check-version\n    Nuke certificates ./src/match-check.ts!\n"],"flags":{"help":{"name":"help","type":"boolean","char":"h","description":"show CLI help","allowNo":false},"client":{"name":"client","type":"option","char":"c","description":"Select client that you want to sync udids"}},"args":[{"name":"match-check"}]},"codepush":{"id":"codepush","description":"Push changes to existing apps","pluginName":"rnbuilder","pluginType":"core","aliases":[],"examples":["$ rnbuilder codepush\n    Push changes to existing apps ./src/firebase-sync-udids.ts!\n"],"flags":{"help":{"name":"help","type":"boolean","char":"h","description":"show CLI help","allowNo":false},"client":{"name":"client","type":"option","char":"c","description":"Select client that you want to push update"}},"args":[{"name":"build"}]},"google-key":{"id":"google-key","description":"Nuke certificates","pluginName":"rnbuilder","pluginType":"core","aliases":[],"examples":["$ rnbuilder match-check\n    Nuke certificates ./src/match-check.ts!\n"],"flags":{"help":{"name":"help","type":"boolean","char":"h","description":"show CLI help","allowNo":false},"client":{"name":"client","type":"option","char":"c","description":"Select client that you want to sync udids"}},"args":[{"name":"match-check"}]},"initialize":{"id":"initialize","description":"Initialize the environment for first run","pluginName":"rnbuilder","pluginType":"core","aliases":[],"examples":["$ rnbuilder initialize\ninitialize environment for first run from ./src/initialize.ts!\n"],"flags":{},"args":[]},"match-check":{"id":"match-check","description":"Check match certificates","pluginName":"rnbuilder","pluginType":"core","aliases":[],"examples":["$ rnbuilder match-check\n    Check match certificates ./src/match-check.ts!\n"],"flags":{"help":{"name":"help","type":"boolean","char":"h","description":"show CLI help","allowNo":false},"client":{"name":"client","type":"option","char":"c","description":"Select client that you want to check match certificates"}},"args":[{"name":"match-check"}]},"match-nuke":{"id":"match-nuke","description":"Nuke certificates","pluginName":"rnbuilder","pluginType":"core","aliases":[],"examples":["$ rnbuilder match-nuke\n    Nuke certificates ./src/match-nuke.ts!\n"],"flags":{"help":{"name":"help","type":"boolean","char":"h","description":"show CLI help","allowNo":false},"client":{"name":"client","type":"option","char":"c","description":"Select client that you want to sync udids"}},"args":[{"name":"build"}]},"onesignal":{"id":"onesignal","description":"Create and upload push cerfiticate to One Signal","pluginName":"rnbuilder","pluginType":"core","aliases":[],"examples":["$ rnbuilder onesignal\n    Create and upload push certificate to One Signal from ./src/commands/onesignal.ts!\n"],"flags":{"help":{"name":"help","type":"boolean","char":"h","description":"show CLI help","allowNo":false},"client":{"name":"client","type":"option","char":"c","description":"Select client that you want to sync udids"},"auth_token":{"name":"auth_token","type":"option","description":"Auth token for OneSignal"},"android_token":{"name":"android_token","type":"option"},"android_gcm_sender_id":{"name":"android_gcm_sender_id","type":"option"}},"args":[{"name":"build"}]},"reject-review":{"id":"reject-review","description":"Reject current App Store review version (In Review or Pending Developer Release)","pluginName":"rnbuilder","pluginType":"core","aliases":[],"examples":["$ rnbuilder reject-review\n"],"flags":{"help":{"name":"help","type":"boolean","char":"h","description":"show CLI help","allowNo":false},"client":{"name":"client","type":"option","char":"c","description":"Select client to reject App Store review version"}},"args":[{"name":"reject-review"}]},"setup":{"id":"setup","description":"Setup new client","pluginName":"rnbuilder","pluginType":"core","aliases":[],"examples":["$ rnbuilder build\nhello world from ./src/setup.ts!\n"],"flags":{"help":{"name":"help","type":"boolean","char":"h","description":"show CLI help","allowNo":false}},"args":[{"name":"setup"}]},"submit-review":{"id":"submit-review","description":"Submit ios for review","pluginName":"rnbuilder","pluginType":"core","aliases":[],"examples":["$ rnbuilder submit-review\n    Push changes to existing apps ./src/firebase-sync-udids.ts!\n"],"flags":{"help":{"name":"help","type":"boolean","char":"h","description":"show CLI help","allowNo":false},"client":{"name":"client","type":"option","char":"c","description":"Select client that you want to push update"}},"args":[{"name":"submit-review"}]},"sync-udids":{"id":"sync-udids","description":"Sync device UDIDs from firebase","pluginName":"rnbuilder","pluginType":"core","aliases":[],"examples":["$ rnbuilder sync-udids\n    Sync device UDIDs from firebase from ./src/firebase-sync-udids.ts!\n"],"flags":{"help":{"name":"help","type":"boolean","char":"h","description":"show CLI help","allowNo":false},"client":{"name":"client","type":"option","char":"c","description":"Select client that you want to sync udids"}},"args":[{"name":"build"}]}}}
+{"version":"0.6.72","commands":{"build":{"id":"build","description":"Build react native apps","pluginName":"rnbuilder","pluginType":"core","aliases":[],"examples":["$ rnbuilder build\nhello world from ./src/build.ts!\n"],"flags":{"help":{"name":"help","type":"boolean","char":"h","description":"show CLI help","allowNo":false},"client":{"name":"client","type":"option","char":"c","description":"Set client that you want to build app"},"target":{"name":"target","type":"option","char":"t","description":"Set the build target: android, ios or both","options":["android","ios","android,ios"]},"env":{"name":"env","type":"option","char":"e","description":"Set the environment: prod, staging, dev"},"branch":{"name":"branch","type":"option","char":"b","description":"Set the source branch used to build the app"},"version":{"name":"version","type":"option","char":"v","description":"Set the version number for this build"},"installr":{"name":"installr","type":"option","char":"i","description":"If enabled, the build will be uploaded to installR"},"distribute":{"name":"distribute","type":"option","char":"d","description":"Specify where to distribute app"},"firebase":{"name":"firebase","type":"boolean","char":"f","description":"If enabled, the build will be uploaded to firebase","allowNo":false},"testersIos":{"name":"testersIos","type":"option","char":"t","description":"Tester ids for iOS distribution"},"testersAndroid":{"name":"testersAndroid","type":"option","char":"u","description":"Tester ids for Android distribution"},"gitReset":{"name":"gitReset","type":"boolean","char":"g","description":"Do git reset when building","allowNo":false},"cleanup":{"name":"cleanup","type":"boolean","char":"s","description":"Do cleanup when building","allowNo":false},"groupsIos":{"name":"groupsIos","type":"option","description":"Groups ids for iOS distribution"},"groupsAndroid":{"name":"groupsAndroid","type":"option","description":"Groups ids for Android distribution"},"skipCheckVersion":{"name":"skipCheckVersion","type":"boolean","description":"Skip checking current version on stores","allowNo":false},"install":{"name":"install","type":"boolean","char":"n","description":"Install dependencies before building","allowNo":false}},"args":[{"name":"build"}]},"check-version":{"id":"check-version","description":"Check live versions","pluginName":"rnbuilder","pluginType":"core","aliases":[],"examples":["$ rnbuilder check-version\n    Nuke certificates ./src/match-check.ts!\n"],"flags":{"help":{"name":"help","type":"boolean","char":"h","description":"show CLI help","allowNo":false},"client":{"name":"client","type":"option","char":"c","description":"Select client that you want to sync udids"}},"args":[{"name":"match-check"}]},"codepush":{"id":"codepush","description":"Push changes to existing apps","pluginName":"rnbuilder","pluginType":"core","aliases":[],"examples":["$ rnbuilder codepush\n    Push changes to existing apps ./src/firebase-sync-udids.ts!\n"],"flags":{"help":{"name":"help","type":"boolean","char":"h","description":"show CLI help","allowNo":false},"client":{"name":"client","type":"option","char":"c","description":"Select client that you want to push update"}},"args":[{"name":"build"}]},"google-key":{"id":"google-key","description":"Nuke certificates","pluginName":"rnbuilder","pluginType":"core","aliases":[],"examples":["$ rnbuilder match-check\n    Nuke certificates ./src/match-check.ts!\n"],"flags":{"help":{"name":"help","type":"boolean","char":"h","description":"show CLI help","allowNo":false},"client":{"name":"client","type":"option","char":"c","description":"Select client that you want to sync udids"}},"args":[{"name":"match-check"}]},"initialize":{"id":"initialize","description":"Initialize the environment for first run","pluginName":"rnbuilder","pluginType":"core","aliases":[],"examples":["$ rnbuilder initialize\ninitialize environment for first run from ./src/initialize.ts!\n"],"flags":{},"args":[]},"match-check":{"id":"match-check","description":"Check match certificates","pluginName":"rnbuilder","pluginType":"core","aliases":[],"examples":["$ rnbuilder match-check\n    Check match certificates ./src/match-check.ts!\n"],"flags":{"help":{"name":"help","type":"boolean","char":"h","description":"show CLI help","allowNo":false},"client":{"name":"client","type":"option","char":"c","description":"Select client that you want to check match certificates"}},"args":[{"name":"match-check"}]},"match-nuke":{"id":"match-nuke","description":"Nuke certificates","pluginName":"rnbuilder","pluginType":"core","aliases":[],"examples":["$ rnbuilder match-nuke\n    Nuke certificates ./src/match-nuke.ts!\n"],"flags":{"help":{"name":"help","type":"boolean","char":"h","description":"show CLI help","allowNo":false},"client":{"name":"client","type":"option","char":"c","description":"Select client that you want to sync udids"}},"args":[{"name":"build"}]},"onesignal":{"id":"onesignal","description":"Create and upload push cerfiticate to One Signal","pluginName":"rnbuilder","pluginType":"core","aliases":[],"examples":["$ rnbuilder onesignal\n    Create and upload push certificate to One Signal from ./src/commands/onesignal.ts!\n"],"flags":{"help":{"name":"help","type":"boolean","char":"h","description":"show CLI help","allowNo":false},"client":{"name":"client","type":"option","char":"c","description":"Select client that you want to sync udids"},"auth_token":{"name":"auth_token","type":"option","description":"Auth token for OneSignal"},"android_token":{"name":"android_token","type":"option"},"android_gcm_sender_id":{"name":"android_gcm_sender_id","type":"option"}},"args":[{"name":"build"}]},"reject-review":{"id":"reject-review","description":"Reject current App Store review version (In Review or Pending Developer Release)","pluginName":"rnbuilder","pluginType":"core","aliases":[],"examples":["$ rnbuilder reject-review\n"],"flags":{"help":{"name":"help","type":"boolean","char":"h","description":"show CLI help","allowNo":false},"client":{"name":"client","type":"option","char":"c","description":"Select client to reject App Store review version"}},"args":[{"name":"reject-review"}]},"setup-gcp":{"id":"setup-gcp","description":"Setup GCP service account impersonation","pluginName":"rnbuilder","pluginType":"core","aliases":[],"flags":{"help":{"name":"help","type":"boolean","char":"h","description":"show CLI help","allowNo":false}},"args":[]},"setup":{"id":"setup","description":"Setup new client","pluginName":"rnbuilder","pluginType":"core","aliases":[],"examples":["$ rnbuilder build\nhello world from ./src/setup.ts!\n"],"flags":{"help":{"name":"help","type":"boolean","char":"h","description":"show CLI help","allowNo":false}},"args":[{"name":"setup"}]},"submit-review":{"id":"submit-review","description":"Submit ios for review","pluginName":"rnbuilder","pluginType":"core","aliases":[],"examples":["$ rnbuilder submit-review\n    Push changes to existing apps ./src/firebase-sync-udids.ts!\n"],"flags":{"help":{"name":"help","type":"boolean","char":"h","description":"show CLI help","allowNo":false},"client":{"name":"client","type":"option","char":"c","description":"Select client that you want to push update"}},"args":[{"name":"submit-review"}]},"sync-udids":{"id":"sync-udids","description":"Sync device UDIDs from firebase","pluginName":"rnbuilder","pluginType":"core","aliases":[],"examples":["$ rnbuilder sync-udids\n    Sync device UDIDs from firebase from ./src/firebase-sync-udids.ts!\n"],"flags":{"help":{"name":"help","type":"boolean","char":"h","description":"show CLI help","allowNo":false},"client":{"name":"client","type":"option","char":"c","description":"Select client that you want to sync udids"}},"args":[{"name":"build"}]}}}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "rnbuilder",
   "description": "React Native builder tool",
-  "version": "0.6.70",
+  "version": "0.6.72",
   "author": "Tuan Luong @r0b0t3d",
   "bin": "./bin/run",
   "bugs": "https://github.com/r0b0t3d/rnbuilder/issues",

package/scripts/setup_gcp_impersonation.sh

@@ -0,0 +1,128 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+if ! command -v gcloud >/dev/null 2>&1; then
+  echo "gcloud is not installed. Install Google Cloud SDK first."
+  exit 1
+fi
+
+if ! command -v python3 >/dev/null 2>&1; then
+  echo "python3 is required but not found."
+  exit 1
+fi
+
+echo "Available projects:"
+gcloud projects list --format="table(projectId,name)" 2>/dev/null || echo "  (could not list projects)"
+echo ""
+
+DEFAULT_PROJECT_ID="${GCP_PROJECT_ID:-edular-19fe4}"
+read -rp "Enter Google Cloud project ID [$DEFAULT_PROJECT_ID]: " PROJECT_ID
+PROJECT_ID="${PROJECT_ID:-$DEFAULT_PROJECT_ID}"
+
+DEFAULT_USER_EMAIL="${GCP_USER_EMAIL:-klassapp2013@gmail.com}"
+read -rp "Enter your Google account email [$DEFAULT_USER_EMAIL]: " USER_EMAIL
+USER_EMAIL="${USER_EMAIL:-$DEFAULT_USER_EMAIL}"
+
+gcloud config set project "$PROJECT_ID"
+
+echo ""
+echo "Logging into gcloud as $USER_EMAIL..."
+gcloud auth login "$USER_EMAIL"
+
+echo ""
+echo "Creating base ADC (user credentials, no impersonation)..."
+gcloud auth application-default login
+
+BASE_ADC="$HOME/.config/gcloud/application_default_credentials.json"
+ADC_DIR="$HOME/.config/gcloud"
+
+# Generate an impersonated ADC file for a service account.
+# Reuses the base user credentials — no extra gcloud login needed.
+generate_sa_adc() {
+  local sa_email="$1"
+  local sa_slug
+  sa_slug=$(printf '%s' "$sa_email" | cut -d'@' -f1 | tr -cs '[:alnum:]' '_' | sed 's/_*$//')
+  local output="$ADC_DIR/adc_${sa_slug}.json"
+
+  echo ""
+  echo "Granting roles/iam.serviceAccountTokenCreator to $USER_EMAIL for $sa_email..."
+  # Unset gcloud impersonation so the grant runs as the user, not as an SA
+  gcloud config unset auth/impersonate_service_account 2>/dev/null || true
+  gcloud iam service-accounts add-iam-policy-binding \
+    "$sa_email" \
+    --role="roles/iam.serviceAccountTokenCreator" \
+    --member="user:$USER_EMAIL" \
+    --project="$PROJECT_ID"
+
+  python3 - "$BASE_ADC" "$sa_email" "$output" <<'PYEOF'
+import json, sys
+
+base_path, sa_email, output_path = sys.argv[1], sys.argv[2], sys.argv[3]
+
+with open(base_path) as f:
+    base = json.load(f)
+
+# If base is already an impersonated ADC, extract its source_credentials.
+# Otherwise use base directly as the source (authorized_user).
+src = base.get("source_credentials", base)
+
+adc = {
+    "delegates": [],
+    "service_account_impersonation_url": (
+        "https://iamcredentials.googleapis.com/v1/projects/-/serviceAccounts/"
+        f"{sa_email}:generateAccessToken"
+    ),
+    "source_credentials": src,
+    "type": "impersonated_service_account",
+}
+
+with open(output_path, "w") as f:
+    json.dump(adc, f, indent=2)
+
+print(f"Created: {output_path}")
+print(f"Add to client .env:")
+print(f"  GOOGLE_APPLICATION_CREDENTIALS={output_path}")
+PYEOF
+}
+
+# Service accounts from repo's fastlane/configs.json (gcp.serviceAccounts), if provided.
+if [ -n "${GCP_SERVICE_ACCOUNTS:-}" ]; then
+  echo ""
+  echo "Service accounts from fastlane/configs.json:"
+  IFS=',' read -ra CONFIG_SAS <<< "$GCP_SERVICE_ACCOUNTS"
+  for sa in "${CONFIG_SAS[@]}"; do
+    echo "  - $sa"
+  done
+  for sa in "${CONFIG_SAS[@]}"; do
+    generate_sa_adc "$sa"
+  done
+else
+  read -rp "Enter service account email [fastlane@edular-19fe4.iam.gserviceaccount.com]: " SERVICE_ACCOUNT_EMAIL
+  SERVICE_ACCOUNT_EMAIL="${SERVICE_ACCOUNT_EMAIL:-fastlane@edular-19fe4.iam.gserviceaccount.com}"
+  generate_sa_adc "$SERVICE_ACCOUNT_EMAIL"
+fi
+
+# Additional service accounts
+while true; do
+  echo ""
+  read -rp "Add another service account? (y/N): " ADD_MORE
+  case "${ADD_MORE:-N}" in
+    [Yy]*)
+      read -rp "Enter service account email: " EXTRA_SA
+      if [ -n "${EXTRA_SA:-}" ]; then
+        generate_sa_adc "$EXTRA_SA"
+      fi
+      ;;
+    *) break ;;
+  esac
+done
+
+echo ""
+echo "Done."
+echo ""
+echo "To test a service account token:"
+echo "  gcloud auth print-access-token --impersonate-service-account=<SA_EMAIL>"
+echo ""
+echo "ADC files are in: $ADC_DIR/adc_*.json"
+echo "Each client .env needs:"
+echo "  GOOGLE_APPLICATION_CREDENTIALS=<path to their SA's adc file>"