Antigravity Background Agent で iOS dSYM 欠落を 6 アプリ分まとめて自動回復した運用記録

# .antigravity/agents/dsym-recovery.yaml
boundaries:
  auto:
    - DerivedData / Archives / TestFlight 配信済みビルドの dSYM 列挙
    - UUID 抽出（xcrun dwarfdump --uuid）
    - Crashlytics の missing-dsyms API への問い合わせ
    - upload-symbols スクリプトを使った再アップロード
    - 再アップロード後の UUID 一致確認
  approve:
    - App Store Connect API を使った dSYM 再ダウンロード（課金枠を消費するため）
    - 古いアーカイブの自動削除（90 日以上未参照のみ提案）
  human_only:
    - bitcode の有効化／無効化判断
    - SPM の Package.resolved 強制更新
    - Firebase SDK バージョンのアップグレード

#!/usr/bin/env bash
# scripts/dsym-locate.sh
# Background Agent が auto 階層で実行する dSYM 捜索スクリプト
set -euo pipefail
 
SEARCH_ROOTS=(
  "${HOME}/Library/Developer/Xcode/DerivedData"
  "${HOME}/Library/Developer/Xcode/Archives"
  "${HOME}/Library/MobileDevice/Provisioning Profiles"
)
 
OUTPUT_JSON="$(mktemp).json"
echo '[]' > "${OUTPUT_JSON}"
 
for ROOT in "${SEARCH_ROOTS[@]}"; do
  find "${ROOT}" -type d -name "*.dSYM" -mmin -10080 -print0 2>/dev/null | while IFS= read -r -d '' DSYM; do
    UUIDS=$(xcrun dwarfdump --uuid "${DSYM}" 2>/dev/null | awk '{print $2}' | sort -u)
    BUILD_DATE=$(stat -f %SB "${DSYM}")
    SIZE_KB=$(du -sk "${DSYM}" | awk '{print $1}')
    for UUID in ${UUIDS}; do
      jq --arg uuid "${UUID}" \
         --arg path "${DSYM}" \
         --arg date "${BUILD_DATE}" \
         --argjson size "${SIZE_KB}" \
         '. += [{uuid:$uuid, path:$path, build_date:$date, size_kb:$size}]' \
         "${OUTPUT_JSON}" > "${OUTPUT_JSON}.tmp" && mv "${OUTPUT_JSON}.tmp" "${OUTPUT_JSON}"
    done
  done
done
 
cat "${OUTPUT_JSON}"

// scripts/missing-dsyms-check.ts
import { execFile } from "node:child_process";
import { promisify } from "node:util";
import { readFile, writeFile } from "node:fs/promises";
 
const exec = promisify(execFile);
const APP_IDS = JSON.parse(await readFile("./apps.json", "utf8")) as Array<{
  bundleId: string;
  firebaseAppId: string;
  storedDsymPath: string;
}>;
 
interface MissingDsym {
  uuid: string;
  buildVersion: string;
  appVersion: string;
  occurrenceCount: number;
}
 
async function checkApp(app: typeof APP_IDS[number]): Promise<MissingDsym[]> {
  const { stdout } = await exec("firebase", [
    "crashlytics:symbols:check",
    "--app",
    app.firebaseAppId,
    "--json",
  ], {
    env: {
      ...process.env,
      GOOGLE_APPLICATION_CREDENTIALS: process.env.GOOGLE_APPLICATION_CREDENTIALS,
    },
    maxBuffer: 32 * 1024 * 1024,
  });
  const parsed = JSON.parse(stdout) as { missing: MissingDsym[] };
  return parsed.missing;
}
 
const results = await Promise.all(APP_IDS.map(checkApp));
const flat = results.flat();
await writeFile(
  "./missing_uuids.json",
  JSON.stringify(flat, null, 2),
  "utf8",
);
console.log(`Total missing UUIDs: ${flat.length}`);

#!/usr/bin/env bash
# scripts/upload-symbols-parallel.sh
set -euo pipefail
 
INVENTORY="$1"   # dsym_inventory.json
MISSING="$2"     # missing_uuids.json
GOOGLE_SERVICE_INFO_DIR="$3"
 
CANDIDATES=$(jq -r --argjson m "$(cat "${MISSING}")" '
  [.[] as $i | $m[] | select(.uuid == $i.uuid) | $i.path] | unique | .[]
' "${INVENTORY}")
 
PARALLEL_PER_APP=4
JOBS=()
APP_COUNT=0
 
while IFS= read -r DSYM; do
  APP_NAME=$(echo "${DSYM}" | sed -E 's|.*Archives/[0-9-]+/(.*)\.xcarchive.*|\1|' | sed -E 's|.*/Products/.*-([A-Za-z]+)\.dSYM.*|\1|' || echo "unknown")
  PLIST="${GOOGLE_SERVICE_INFO_DIR}/${APP_NAME}/GoogleService-Info.plist"
  if [ ! -f "${PLIST}" ]; then
    echo "skip: GoogleService-Info.plist missing for ${APP_NAME}" >&2
    continue
  fi
  /usr/local/bin/upload-symbols -gsp "${PLIST}" -p ios "${DSYM}" &
  JOBS+=($!)
  if [ "${#JOBS[@]}" -ge $((PARALLEL_PER_APP * 6)) ]; then
    wait -n
    JOBS=("${JOBS[@]/$!/}")
  fi
done <<< "${CANDIDATES}"
 
wait
echo "All upload-symbols jobs completed"

// scripts/asc-dsym-fetcher.ts
import jwt from "jsonwebtoken";
import { readFile, writeFile } from "node:fs/promises";
 
const KEY_ID = process.env.ASC_KEY_ID!;
const ISSUER_ID = process.env.ASC_ISSUER_ID!;
const PRIVATE_KEY = await readFile(process.env.ASC_PRIVATE_KEY_PATH!, "utf8");
 
function makeAscToken(): string {
  return jwt.sign({}, PRIVATE_KEY, {
    algorithm: "ES256",
    expiresIn: "20m",
    audience: "appstoreconnect-v1",
    keyid: KEY_ID,
    issuer: ISSUER_ID,
  });
}
 
interface BuildInfo {
  id: string;
  attributes: {
    version: string;
    uploadedDate: string;
    processingState: string;
  };
}
 
async function fetchDsymsForApp(appId: string): Promise<void> {
  const token = makeAscToken();
  const buildsRes = await fetch(
    `https://api.appstoreconnect.apple.com/v1/builds?filter[app]=${appId}&limit=10&sort=-uploadedDate`,
    { headers: { Authorization: `Bearer ${token}` } },
  );
  const { data } = await buildsRes.json() as { data: BuildInfo[] };
  for (const build of data) {
    const elapsedHours = (Date.now() - Date.parse(build.attributes.uploadedDate)) / 3_600_000;
    if (elapsedHours < 8) {
      console.log(`build ${build.id} too fresh (${elapsedHours.toFixed(1)}h) — postpone`);
      continue;
    }
    const dsymRes = await fetch(
      `https://api.appstoreconnect.apple.com/v1/builds/${build.id}/dSYMs`,
      { headers: { Authorization: `Bearer ${token}` } },
    );
    if (!dsymRes.ok) continue;
    const buf = Buffer.from(await dsymRes.arrayBuffer());
    await writeFile(`./asc_dsyms/${build.id}.zip`, buf);
  }
}