+#!/bin/bash++# This script downloads the latest release version of EAS CLI from GitHub and+# installs it in /usr/local/bin++{+  # All code is inside a block to ensure the script executes only when+  # downloaded completely.++  set -e++  prefix="${EAS_PREFIX:-/usr/local}"

+name: Run installer tests+on:+  push:+    branches: [main]+  pull_request:+    types: [opened, synchronize]++jobs:+  test:+    runs-on: ubuntu-latest

 USAGE   $ eas build ``` -_See code: [src/commands/build/index.ts](https://github.com/expo/eas-cli/blob/v0.0.0/src/commands/build/index.ts)_+_See code: [build/commands/build/index.ts](https://github.com/expo/eas-cli/blob/v0.0.0/build/commands/build/index.ts)_

+#!/bin/bash++# This script downloads the latest release version of EAS CLI from GitHub and+# installs it in /usr/local/bin++{+  # All code is inside a block to ensure the script executes only when+  # downloaded completely.++  set -e++  prefix="${EAS_PREFIX:-/usr/local}"+  temp_dir="$(mktemp -d)"+  +  if  [ -t 1 ] && [ -z "$NO_COLOR" ]+  then+    # Use colors when stdout is a terminal and NO_COLOR isn't set.+    text_bold=$'\033[1m'+    text_normal=$'\033[22m'+    text_red=$'\033[31m'+    text_default_color=$'\033[39m'+  else+    # Disable colors+    text_bold=""+    text_normal=""+    text_red=""+    text_default_color=""+  fi++  abort() {+    echo -e "$text_bold$text_red$1$text_normal$text_default_color"+    exit 1+  }++  install() {+    needs_sudo=""+    # Make sure path exists and can be written to by the current user.+    if ! mkdir -p "$prefix/lib" || [[ ! -w "$prefix/lib" ]]+    then+      needs_sudo=true+    fi+    if ! mkdir -p "$prefix/bin" || [[ ! -w "$prefix/bin" ]]+    then+      needs_sudo=true+    fi+    if ! rm -rf "$prefix/lib/eas"+    then+      needs_sudo=true+    fi+    # Run commands with sudo if necessary.+    if [ -n "$needs_sudo" ]+    then+      echo "Installing requires superuser access."+      echo "The sudo command will prompt for your password."+      sudo rm -rf "$prefix/lib/eas"+      sudo mv "$temp_dir/eas" "$prefix/lib/eas"+      sudo ln -fs "$prefix/lib/eas/bin/eas" "$prefix/bin/eas"+    else+      +      mv "$temp_dir/eas" "$prefix/lib/eas"+      ln -fs "$prefix/lib/eas/bin/eas" "$prefix/bin/eas"+    fi+  }++  if [[ ! ":$PATH:" == *":$prefix/bin:"* ]]; then+    abort "Your path is missing $prefix/bin, you need to add this to use this installer."+  fi+  +  hardware="$(uname -m)"+  case "$hardware" in+    x86_64)+      arch="x64"+      ;;+    arm*)+      arch="arm"+      ;;+    *)+      abort "Unsupported CPU architecture $hardware."+      ;;+  esac++  case "$(uname -s)" in+    Darwin*)+      platform="darwin"+      if [[ "$arch" != "x64" ]]; then+        abort "Unsupported CPU architecture $hardware on macOS."+      fi+      ;;+    Linux*)+      platform="linux"+      ;;+    *)+      abort "This installer is only supported on macOS, Linux and Windows Subsystem for Linux."

 OPTIONS   --status=(in-queue|in-progress|errored|finished) ``` -_See code: [src/commands/build/status.ts](https://github.com/expo/eas-cli/blob/v0.0.0/src/commands/build/status.ts)_+_See code: [build/commands/build/status.ts](https://github.com/expo/eas-cli/blob/v0.0.0/build/commands/build/status.ts)_++## `eas credentials`++Manage your credentials++```+USAGE+  $ eas credentials+```++_See code: [build/commands/credentials.ts](https://github.com/expo/eas-cli/blob/v0.0.0/build/commands/credentials.ts)_++## `eas device:create`++register new Apple Devices to use for internal distribution

+import gql from 'graphql-tag';++import { graphqlClient, withErrorHandlingAsync } from '../client';+import { Project } from '../types/Project';++type ProjectIdType = Pick<Project, 'id'>;++export class ProjectQuery {+  static async idByUsernameAndSlugAsync(username: string, slug: string): Promise<ProjectIdType> {+    const data = await withErrorHandlingAsync(+      graphqlClient+        .query<{ project: { byUsernameAndSlug: ProjectIdType } }>(+          gql`+          {+            project {+              byUsernameAndSlug(username: "${username}", slug: "${slug}", sdkVersions: []) {

+import gql from 'graphql-tag';++import { graphqlClient, withErrorHandlingAsync } from '../client';+import { Project } from '../types/Project';++type ProjectIdType = Pick<Project, 'id'>;++export class ProjectQuery {+  static async idByUsernameAndSlugAsync(username: string, slug: string): Promise<ProjectIdType> {+    const data = await withErrorHandlingAsync(+      graphqlClient+        .query<{ project: { byUsernameAndSlug: ProjectIdType } }>(+          gql`+          {+            project {+              byUsernameAndSlug(username: "${username}", slug: "${slug}", sdkVersions: []) {

+import gql from 'graphql-tag';++import { graphqlClient, withErrorHandlingAsync } from '../client';+import { Build } from '../types/Build';++type Filters = Partial<Pick<Build, 'platform' | 'status'>> & {+  order?: number;+  limit?: number;+};++type ArtifactFragmentType = Pick<Build, 'artifacts'>;+type PlatformAndArtifactFragmentType = Pick<Build, 'platform' | 'artifacts'>;++export class BuildQuery {+  static async forArtifactByIdAsync(buildId: string): Promise<PlatformAndArtifactFragmentType> {+    const data = await withErrorHandlingAsync(+      graphqlClient+        .query<{ builds: { byId: PlatformAndArtifactFragmentType } }>(+          gql`+          {+            builds {+              byId(buildId: "${buildId}") {+                platform,+                artifacts {+                  buildUrl+                }+              }+            }+          }`+        )+        .toPromise()+    );++    return data.builds.byId;+  }++  static async allArtifactsForAppAsync(+    appId: string,+    filters?: Filters+  ): Promise<ArtifactFragmentType[]> {+    const filterData = [`appId: "${appId}"`];++    if (filters?.limit) {+      filterData.push(`limit: ${filters.limit}`);+    }+    if (filters?.order) {+      filterData.push(`order: ${filters.order}`);+    }+    if (filters?.platform) {+      filterData.push(`platform: ${filters.platform}`);+    }+    if (filters?.status) {+      filterData.push(`status: ${filters.status}`);+    }++    const data = await withErrorHandlingAsync(+      graphqlClient+        .query<{ builds: { allForApp: ArtifactFragmentType[] } }>(+          gql`+          {+            builds {+              allForApp(${filterData.join(', ')}) {+                artifacts {+                  buildUrl+                }+              }+            }+          }`

+import gql from 'graphql-tag';++import { graphqlClient, withErrorHandlingAsync } from '../client';+import { Build } from '../types/Build';++type Filters = Partial<Pick<Build, 'platform' | 'status'>> & {+  order?: number;+  limit?: number;+};++type ArtifactFragmentType = Pick<Build, 'artifacts'>;+type PlatformAndArtifactFragmentType = Pick<Build, 'platform' | 'artifacts'>;++export class BuildQuery {+  static async forArtifactByIdAsync(buildId: string): Promise<PlatformAndArtifactFragmentType> {+    const data = await withErrorHandlingAsync(+      graphqlClient+        .query<{ builds: { byId: PlatformAndArtifactFragmentType } }>(+          gql`+          {+            builds {+              byId(buildId: "${buildId}") {+                platform,+                artifacts {+                  buildUrl+                }+              }+            }+          }`

     "@babel/preset-typescript": "^7.10.4",     "@expo/babel-preset-cli": "^0.2.17",     "@expo/oclif-dev-cli": "1.23.0-expo",+    "@types/color-string": "^1.5.0",

+import crypto, { HexBase64Latin1Encoding, Utf8AsciiLatin1Encoding } from 'crypto';+import forge from 'node-forge';++/**+ * returns serial number as an uppercased hexidecimal string+ */+export function getFormattedSerialNumber(certificate: forge.pki.Certificate): string | null {+  const { serialNumber } = certificate;+  return serialNumber ? serialNumber.replace(/^0+/, '').toUpperCase() : null;+}++/**+ * Extracts a certificate from PKCS#12+ * This is assumed to be a conventional PKCS#12 where there is exactly one certificate and one key+ */+export function getX509Certificate(p12: forge.pkcs12.Pkcs12Pfx): forge.pki.Certificate {+  const certBagType = forge.pki.oids.certBag;+  const bags = p12.getBags({ bagType: certBagType })[certBagType];+  if (!bags || bags.length === 0) {+    throw new Error(`PKCS12: No certificates found`);+  }+  const certificate = bags[0].cert;+  if (!certificate) {+    throw new Error('PKCS12: bag is not a certificate');+  }+  return certificate;+}++/**+ * Extracts a certificate from PKCS#12+ * This is assumed to be a PKCS#12 in Keystore format where the friendlyName (alias) contains a PrivateKeyEntry+ * A PrivateKeyEntry contains exactly one certificate and one key+ * https://docs.oracle.com/javase/7/docs/api/java/security/KeyStore.PrivateKeyEntry.html+ */+export function getX509CertificateByFriendlyName(+  p12: forge.pkcs12.Pkcs12Pfx,+  friendlyName: string+): forge.pki.Certificate {+  const certBagType = forge.pki.oids.certBag;+  const bags = p12.getBags({ friendlyName, bagType: certBagType }).friendlyName;+  if (!bags || bags.length === 0) {+    throw new Error(`PKCS12: No certificates found under friendlyName: ${friendlyName}`);+  }+  const certificate = bags[0].cert;+  if (!certificate) {+    throw new Error('PKCS12: bag is not a certificate');+  }+  return certificate;+}++export function getPKCS12(

 export async function login(options: CommandOptions): Promise<User> {   } } -async function _usernamePasswordAuth(username?: string, password?: string): Promise<User> {+/**+ * Prompt for an OTP with the option to cancel the question by answering empty (pressing return key).+ */+async function _promptForOTPAsync(cancelBehavior: 'cancel' | 'menu'): Promise<string | null> {+  const enterMessage =+    cancelBehavior === 'cancel'+      ? `press ${log.chalk.bold('Enter')} to cancel`+      : `press ${log.chalk.bold('Enter')} for more options`;+  const otpQuestion: NewQuestion = {+    type: 'text',+    name: 'otp',+    message: `One-time password or backup code (${enterMessage}):`,+  };++  const { otp } = await promptNew(otpQuestion);+  if (!otp) {+    return null;+  }++  return otp;+}++/**+ * Prompt for user to choose a backup OTP method. If selected method is SMS, a request+ * for a new OTP will be sent to that method. Then, prompt for the OTP, and retry the user login.+ */+async function _promptForBackupOTPAsync(+  username: string,+  password: string,+  secondFactorDevices: SecondFactorDevice[]+): Promise<string | null> {+  const nonPrimarySecondFactorDevices = secondFactorDevices.filter(device => !device.is_primary);++  if (nonPrimarySecondFactorDevices.length === 0) {+    log.warn(+      'No other second-factor devices set up. Ensure you have set up and certified a backup device.'+    );+    process.exit(1);

 export async function login(options: CommandOptions): Promise<User> {   } } -async function _usernamePasswordAuth(username?: string, password?: string): Promise<User> {+/**+ * Prompt for an OTP with the option to cancel the question by answering empty (pressing return key).+ */+async function _promptForOTPAsync(cancelBehavior: 'cancel' | 'menu'): Promise<string | null> {+  const enterMessage =+    cancelBehavior === 'cancel'+      ? `press ${log.chalk.bold('Enter')} to cancel`+      : `press ${log.chalk.bold('Enter')} for more options`;+  const otpQuestion: NewQuestion = {+    type: 'text',+    name: 'otp',+    message: `One-time password or backup code (${enterMessage}):`,+  };++  const { otp } = await promptNew(otpQuestion);+  if (!otp) {+    return null;+  }++  return otp;+}++/**+ * Prompt for user to choose a backup OTP method. If selected method is SMS, a request+ * for a new OTP will be sent to that method. Then, prompt for the OTP, and retry the user login.+ */+async function _promptForBackupOTPAsync(+  username: string,+  password: string,+  secondFactorDevices: SecondFactorDevice[]+): Promise<string | null> {+  const nonPrimarySecondFactorDevices = secondFactorDevices.filter(device => !device.is_primary);++  if (nonPrimarySecondFactorDevices.length === 0) {+    log.warn(+      'No other second-factor devices set up. Ensure you have set up and certified a backup device.'+    );+    process.exit(1);+  }++  const hasAuthenticatorSecondFactorDevice = nonPrimarySecondFactorDevices.find(+    device => device.method === UserSecondFactorDeviceMethod.AUTHENTICATOR+  );++  const smsNonPrimarySecondFactorDevices = nonPrimarySecondFactorDevices.filter(+    device => device.method === UserSecondFactorDeviceMethod.SMS+  );++  const authenticatorChoiceSentinel = -1;+  const cancelChoiceSentinel = -2;++  const deviceChoices = smsNonPrimarySecondFactorDevices.map((device, idx) => ({+    title: device.sms_phone_number!,+    value: idx,+  }));++  if (hasAuthenticatorSecondFactorDevice) {+    deviceChoices.push({+      title: 'Authenticator',+      value: authenticatorChoiceSentinel,+    });+  }++  deviceChoices.push({+    title: 'Cancel',+    value: cancelChoiceSentinel,+  });++  const question = {+    message: 'Select a second-factor device:',+    choices: deviceChoices,+  };++  const selectedValue = await selectAsync(question);+  if (selectedValue === cancelChoiceSentinel) {+    return null;+  } else if (selectedValue === authenticatorChoiceSentinel) {+    return await _promptForOTPAsync('cancel');+  }++  const device = smsNonPrimarySecondFactorDevices[selectedValue];++  const apiAnonymous = ApiV2.clientForUser();+  await apiAnonymous.postAsync('auth/send-sms-otp', {+    username,+    password,+    secondFactorDeviceID: device.id,+  });++  return await _promptForOTPAsync('cancel');+}++/**+ * Handle the special case error indicating that a second-factor is required for+ * authentication.+ *+ * There are three cases we need to handle:+ * 1. User's primary second-factor device was SMS, OTP was automatically sent by the server to that+ *    device already. In this case we should just prompt for the SMS OTP (or backup code), which the+ *    user should be receiving shortly. We should give the user a way to cancel and the prompt and move+ *    to case 3 below.+ * 2. User's primary second-factor device is authenticator. In this case we should prompt for authenticator+ *    OTP (or backup code) and also give the user a way to cancel and move to case 3 below.+ * 3. User doesn't have a primary device or doesn't have access to their primary device. In this case+ *    we should show a picker of the SMS devices that they can have an OTP code sent to, and when+ *    the user picks one we show a prompt for the sent OTP.+ */+export async function _retryUsernamePasswordAuthWithOTPAsync(+  username: string,+  password: string,+  metadata: {+    secondFactorDevices?: SecondFactorDevice[];+    smsAutomaticallySent?: boolean;+  }+): Promise<User> {+  const { secondFactorDevices, smsAutomaticallySent } = metadata;+  invariant(+    secondFactorDevices !== undefined && smsAutomaticallySent !== undefined,+    `Malformed OTP error metadata: ${metadata}`+  );++  const primaryDevice = secondFactorDevices.find(device => device.is_primary);+  let otp: string | null = null;++  if (smsAutomaticallySent) {+    invariant(+      primaryDevice,+      'OTP should only automatically be sent when there is a primary device'+    );+    log(+      `One-time password was sent to the phone number ending in ${primaryDevice.sms_phone_number}.`+    );+    otp = await _promptForOTPAsync('menu');+  }++  if (primaryDevice?.method === UserSecondFactorDeviceMethod.AUTHENTICATOR) {+    log('One-time password from authenticator required.');+    otp = await _promptForOTPAsync('menu');+  }++  // user bailed on case 1 or 2, wants to move to case 3+  if (!otp) {+    otp = await _promptForBackupOTPAsync(username, password, secondFactorDevices);+  }++  if (!otp) {+    log.warn('Cancelled login');+    process.exit(1);

 export type PublicationDetail = {  const VERSION = 2; +async function getSlugAsync({+  projectRoot,+  exp,+}: {+  projectRoot: string;+  exp: Pick<ExpoConfig, 'slug'>;+}): Promise<string> {+  if (exp.slug) {

 node_modules *.tsbuildinfo .history +packages/*/build/++# Logs+logs+*.log++# Runtime data+pids+*.pid+*.seed++# Directory for instrumented libs generated by jscoverage/JSCover+lib-cov++# Coverage directory used by tools like istanbul coverage/++# Grunt intermediate storage (http://gruntjs.com/creating-plugins#storing-task-files)+.grunt++# node-waf configuration+.lock-wscript++# Compiled binary addons (http://nodejs.org/api/addons.html)+build/Release

 node_modules *.tsbuildinfo .history +packages/*/build/++# Logs+logs+*.log++# Runtime data+pids+*.pid+*.seed++# Directory for instrumented libs generated by jscoverage/JSCover+lib-cov++# Coverage directory used by tools like istanbul coverage/++# Grunt intermediate storage (http://gruntjs.com/creating-plugins#storing-task-files)+.grunt

 node_modules *.tsbuildinfo .history +**/*/build++# Logs+logs

 Command.prototype.asyncAction = function (asyncFn: Action, skipUpdateCheck: bool   }); }; +function getStringBetweenParens(value: string): string {+  const regExp = /\(([^)]+)\)/;+  const matches = regExp.exec(value);+  if (matches && matches?.length > 1) {+    return matches[1];+  }+  return value;+}++function focusLastPathComponent(value: string): string {

 Command.prototype.asyncAction = function (asyncFn: Action, skipUpdateCheck: bool   }); }; +function getStringBetweenParens(value: string): string {+  const regExp = /\(([^)]+)\)/;+  const matches = regExp.exec(value);+  if (matches && matches?.length > 1) {+    return matches[1];+  }+  return value;+}++function focusLastPathComponent(value: string): string {

 async function validateAsync(     return NO_ISSUES;   } -  let exp, pkg;-  try {-    const config = getConfig(projectRoot, {-      strict: true,-      skipSDKVersionRequirement,-    });-    exp = config.exp;-    pkg = config.pkg;-    ProjectUtils.clearNotification(projectRoot, 'doctor-config-json-not-read');-  } catch (e) {-    ProjectUtils.logError(-      projectRoot,-      'expo',-      `Error: could not load config json at ${projectRoot}: ${e.toString()}`,-      'doctor-config-json-not-read'-    );-    return ERROR;-  }+  const { exp, pkg } = getConfig(projectRoot, {+    strict: true,+    skipSDKVersionRequirement,+  });++  ProjectUtils.clearNotification(projectRoot, 'doctor-config-json-not-read');

+/* tslint:disable */+/**+ * This file was automatically generated by json-schema-to-typescript.+ * DO NOT MODIFY IT BY HAND. Instead, modify the source JSONSchema file,+ * and run json-schema-to-typescript to regenerate this file.+ */++export interface ExpoConfig {+  /**+   * The name of your app as it appears both within Expo client and on your home screen as a standalone app.+   */+  name: string;+  /**+   * A short description of what your app is and why it is great.+   */+  description?: string;+  /**+   * The friendly URL name for publishing. For example, `myAppName` will refer to the `expo.io/@project-owner/myAppName` project.+   */+  slug: string;+  /**+   * The Expo account name of the team owner, only applicable if you are enrolled in Expo Developer Services. If not provided, defaults to the username of the current user.+   */+  owner?: string;+  /**+   * Defaults to `unlisted`. `unlisted` hides the project from search results. `hidden` restricts access to the project page to only the owner and other users that have been granted access. Valid values: `public`, `unlisted`, `hidden`.+   */+  privacy?: 'public' | 'unlisted' | 'hidden';+  /**+   * The Expo sdkVersion to run the project on. This should line up with the version specified in your package.json.+   */+  sdkVersion?: string;+  /**+   * **Note: Don't use this property unless you are sure what you're doing**+   *+   * The runtime version associated with this manifest for bare workflow projects. If provided, this must match the version set in Expo.plist or AndroidManifest.xml.+   */+  runtimeVersion?: string;+  /**+   * Your app version. In addition to this field, you'll also use `ios.buildNumber` and `android.versionCode` — read more about how to version your app [here](../../distribution/app-stores/#versioning-your-app). On iOS this corresponds to `CFBundleShortVersionString`, and on Android, this corresponds to `versionName`. The required format can be found [here](https://developer.apple.com/documentation/bundleresources/information_property_list/cfbundleshortversionstring).+   */+  version?: string;+  /**+   * Platforms that your project explicitly supports. If not specified, it defaults to `["ios", "android"]`.+   */+  platforms?: ('android' | 'ios' | 'web')[];+  /**+   * If you would like to share the source code of your app on Github, enter the URL for the repository here and it will be linked to from your Expo project page.+   */+  githubUrl?: string;+  /**+   * Locks your app to a specific orientation with portrait or landscape. Defaults to no lock. Valid values: `default`, `portrait`, `landscape`+   */+  orientation?: ('default' | 'portrait' | 'landscape') | null;

 const printHelp = (): void => {   log.nested(`${PLATFORM_TAG} Press ${b('?')} to show a list of all available commands.`); }; +const div = chalk.dim(`|`);+ const printUsage = async (projectDir: string, options: Pick<StartOptions, 'webOnly'> = {}) => {   const { dev } = await ProjectSettings.readAsync(projectDir);   const openDevToolsAtStartup = await UserSettings.getAsync('openDevToolsAtStartup', true);   const username = await UserManager.getCurrentUsernameAsync();   const devMode = dev ? 'development' : 'production';-  const androidInfo = `${b`a`} to run on ${u`A`}ndroid (${b`shift+a`} to select the device/emulator)`;-  const iosInfo =-    process.platform === 'darwin'-      ? `${b`i`} to run on ${u`i`}OS simulator (${b`shift+i`} to select the simulator model)`-      : '';-  const webInfo = `${b`w`} to run on ${u`w`}eb`;-  const platformInstructions = [androidInfo, iosInfo, webInfo]-    .filter(Boolean)-    .map(instructions => ` \u203A Press ${instructions}.`)-    .join('\n');-  log.nested(`-${platformInstructions}- \u203A Press ${b`c`} to show info on ${u`c`}onnecting new devices.- \u203A Press ${b`d`} to open DevTools in the default web browser.- \u203A Press ${b`shift-d`} to ${-    openDevToolsAtStartup ? 'disable' : 'enable'-  } automatically opening ${u`D`}evTools at startup.${-    options.webOnly ? '' : `\n \u203A Press ${b`e`} to send an app link with ${u`e`}mail.`-  }- \u203A Press ${b`p`} to toggle ${u`p`}roduction mode. (current mode: ${i(devMode)})- \u203A Press ${b`r`} to ${u`r`}estart bundler, or ${b`shift-r`} to restart and clear cache.- \u203A Press ${b`o`} to ${u`o`}pen the project in your editor.- \u203A Press ${b`s`} to ${u`s`}ign ${-    username ? `out. (Signed in as ${i('@' + username)}.)` : 'in.'-  }-`);+  const currentAuth = `@${username}`;+  const currentToggle = openDevToolsAtStartup ? 'disabled' : 'enabled';++  const isMac = process.platform === 'darwin';++  const ui = [+    [],+    ['a', `open Android`],+    ['shift+a', `select a device or emulator`],

 export async function saveRecentExpRootAsync(root: string) {   return await recentExpsJsonFile.writeAsync(recentExps.slice(0, 100)); } -type PublishInfo = {-  args: {-    username: string;-    remoteUsername: string;-    remotePackageName: string;-    remoteFullPackageName: string;-    sdkVersion: string;-    iosBundleIdentifier?: string | null;-    androidPackage?: string | null;-  };-};--// TODO: remove / change, no longer publishInfo, this is just used for signing-/** @deprecated use getConfig from @expo/config */-export async function getPublishInfoAsync(root: string): Promise<PublishInfo> {