@akoskomuves/appstoreconnect-mcp 0.1.1

package/CHANGELOG.md

@@ -0,0 +1,74 @@
+# appstoreconnect-mcp
+
+## 0.1.1
+
+### Patch Changes
+
+- 0b98884: `ppp_compute_proposal` and `ppp_apply_proposal`: skip territories where the App Store Connect billing currency differs from the bundled Apple Music index currency. Marked as `currency-mismatch (asc=X, am=Y)` in the proposal table and excluded from the apply set.
+
+  This guards against a dimensional bug: the Apple Music price ratio is only a valid PPP-FX signal when both numerator (local Apple Music price) and the ASC billing currency match. For USD-billed Gulf markets (BHR, KWT, OMN) where Apple Music is sold in BHD/KWD/OMR, the formula would have produced artificially low prices (~$0.69 instead of ~$1.80 for a $4.99 anchor). Now those markets are explicitly skipped — set them manually via `asc_post_subscription_price` if needed.
+
+- eb65a2b: Compact PPP proposal output so the diff table fits in a normal terminal.
+
+  Apple's `subscriptionPricePoint` IDs are ~50-char base64 strings that blew the proposal table past 80 columns and forced wrap. `ppp_compute_proposal` now shows `POINT_ID` as the last 8 characters of the ID (e.g. `…NjEifQ`) by default; pass `raw: true` to see full IDs. `ppp_apply_proposal`'s elicitation confirmation message drops the `POINT_ID` column entirely — the user is reviewing prices, not relationship IDs, and the server uses the IDs internally regardless.
+
+- 175e96d: Handle Apple's 429 rate limits transparently in the HTTP client.
+
+  `client.request` now retries on 429 up to 6 times, honouring the `Retry-After` header when present and falling back to exponential backoff (2s → 4s → 8s … capped at 60s). Without this, applying many subscription prices in parallel would cause Apple to start rejecting writes after ~50 requests/minute and the per-row catch in `ppp_apply_proposal` was reporting them as failed without retry — leaving partial pending schedules. Discovered when a 60-territory apply only landed 10 of the writes before Apple started throwing 429s.
+
+  Also lowered the default `maxConcurrency` for `ppp_apply_proposal` from 5 to 2. With the new retry behaviour the higher concurrency mostly produced backoff stalls; 2 keeps writes well under Apple's threshold without sacrificing meaningful wall time on a typical 60-row run.
+
+## 0.1.0
+
+### Minor Changes
+
+- a2108dd: Compact responses + auto-pagination across all read tools.
+
+  Each list/get tool now returns a clean text table by default (`asc_list_apps`, `asc_list_subscription_groups`, `asc_list_subscriptions`, `asc_list_subscription_prices`, `asc_list_subscription_price_points`, `asc_list_territories`, `asc_get_app`). Every tool accepts `raw: true` to get the original JSON:API payload, and paginated tools accept `maxItems` (default 500–1000).
+
+  Internal changes:
+
+  - New `paginate()` helper follows `links.next`, merges and dedupes `included` resources across pages.
+  - Sparse fieldsets (`fields[type]=…`) applied per tool to avoid pulling unused attributes.
+  - `&limit=200` set on all list endpoints (was missing on `subscriptionPrices`, capping responses at 50/175 territories).
+  - New `digest.ts` module with one digester per resource type, joining `data` ↔ `included` to surface the actually useful columns (territory + currency + amount instead of relationship URIs).
+
+  Net effect: a full 175-territory subscription price schedule fits in ~5 KB of text instead of ~90 KB of nested JSON.
+
+- cf4afca: Add `init` and `doctor` subcommands.
+
+  `appstoreconnect-mcp init` is an interactive wizard that opens App Store Connect, copies the `.p8` to `~/.appstore/` with `chmod 600`, prompts for issuer/key IDs (Key ID auto-detected from the filename), verifies auth with a real ASC call, and registers the MCP in any installed clients (Claude Code, Claude Desktop, Cursor, Windsurf — auto-detected).
+
+  `appstoreconnect-mcp doctor` is a read-only diagnostic — checks key directory permissions, parses each `.p8`, lists registered clients, and optionally hits the live API if env vars are set.
+
+  The default no-arg invocation continues to start the MCP server over stdio (unchanged behavior for clients).
+
+- b0794b6: Add `ppp_apply_proposal` — the single-tool entry point for a PPP rebalance.
+
+  Computes the same proposal as `ppp_compute_proposal`, then asks the user to confirm via MCP elicitation (Claude Code, Claude Desktop, etc.), and on confirm POSTs all eligible price changes against App Store Connect in parallel. The user-facing flow collapses from "propose → review → manually trigger 14 writes → verify" into a single tool call with one in-client confirmation prompt.
+
+  Built-in guardrails:
+
+  - `maxDropPct` (default 90%) — refuses to apply if any single row drops more than this; guards against a bad Apple Music index entry crashing a price.
+  - `maxConcurrency` (default 5) — parallel POSTs well under Apple's 50/min rate limit.
+  - `preserveCurrentPrice: true` by default — existing subscribers are grandfathered.
+  - `startDate` defaults to today + 7 days (Apple requires ≥24h; 7 is a safety buffer).
+  - `confirm: true` arg as a fallback for clients that don't support elicitation, or for automation.
+
+  Refactored `src/domains/ppp.ts` to share the proposal-computation logic between `ppp_compute_proposal` and `ppp_apply_proposal`. Added an in-domain `concurrentMap` helper covered by 5 new tests (37 total now passing).
+
+- 3f0f600: Add `ppp_load_index` and `ppp_compute_proposal` tools.
+
+  `ppp_compute_proposal` is the single entry point for a Purchasing Power Parity rebalance: it fetches the current price schedule for the target subscription, loads the bundled Apple Music Individual-plan price snapshot (`data/apple-music-prices.json`), computes a per-territory factor using Apple Music ratios as the implied PPP-FX rate, fetches valid price points in parallel for territories where the target differs from current, snaps to the nearest valid Apple price point (configurable `roundStrategy`: `nearest` / `down` / `up`), and returns a compact dry-run table with `POINT_ID`s ready to feed back into `asc_post_subscription_price`. Apply a configurable sanity floor (`floorFactor`, default 0.15) so bad index data can't crash the price.
+
+  `ppp_load_index` returns the bundled snapshot as a sorted table (or raw JSON) so users can see what reference data is in play.
+
+  The bundled snapshot covers ~70 territories with high-confidence Apple Music prices as of 2026-05-09; refresh upstream by editing `data/apple-music-prices.json` and resubmitting.
+
+  Updated `examples/ppp-rebalance/SKILL.md` to drive the new tool. The skill now does discover → propose → review → apply → verify → rollback, with the gotchas (preserveCurrentPrice, Russia, USD-only territories, snap direction) called out.
+
+### Patch Changes
+
+- d4326ce: `init`: scan `~/.appstore`, `~/Downloads`, and `~/Desktop` for `.p8` files and present them as a select list (sorted most-recent-first, with auto-detected Key IDs). Falls back to manual path entry. Avoids the chore of typing a 60-character path.
+
+This changelog is generated from [changesets](.changeset/). See [CONTRIBUTING.md](CONTRIBUTING.md#working-on-a-change).

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Akos Komuves
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,158 @@
+# appstoreconnect-mcp
+
+[![npm](https://img.shields.io/npm/v/@akoskomuves/appstoreconnect-mcp.svg)](https://www.npmjs.com/package/@akoskomuves/appstoreconnect-mcp)
+[![CI](https://github.com/akoskomuves/appstoreconnect-mcp/actions/workflows/ci.yml/badge.svg)](https://github.com/akoskomuves/appstoreconnect-mcp/actions/workflows/ci.yml)
+[![License: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](LICENSE)
+
+A [Model Context Protocol](https://modelcontextprotocol.io) server for the [Apple App Store Connect API](https://developer.apple.com/documentation/appstoreconnectapi). Drives apps, subscriptions, pricing, and more from any MCP-compatible client (Claude Code, Claude Desktop, Cursor, Windsurf).
+
+The first published surface is **subscription pricing** — including a Purchasing Power Parity rebalance flow that's already been used to schedule 120 production price changes across 65 territories on a real iOS app. New ASC domains (TestFlight, sales, screenshots, IAPs) are designed to plug in one file at a time; see [Roadmap](#roadmap).
+
+## Install (zero-config)
+
+```sh
+npx @akoskomuves/appstoreconnect-mcp init
+```
+
+The wizard:
+
+1. Opens [App Store Connect → Keys](https://appstoreconnect.apple.com/access/integrations/api) so you can download a `.p8` (skipped if you already have one).
+2. Copies the key to `~/.appstore/` with `chmod 600`.
+3. Asks for your Issuer ID and (auto-detected) Key ID.
+4. Verifies auth with a real API call before writing anything.
+5. Detects which MCP clients you have installed — Claude Code, Claude Desktop, Cursor, Windsurf — and registers itself in the ones you pick.
+
+When something looks off later, run a read-only diagnostic:
+
+```sh
+npx @akoskomuves/appstoreconnect-mcp doctor
+```
+
+### Manual install
+
+If you'd rather wire it up by hand, add to `~/.claude.json` (Claude Code), `claude_desktop_config.json` (Claude Desktop), or your client's equivalent:
+
+```json
+{
+  "mcpServers": {
+    "appstoreconnect": {
+      "command": "npx",
+      "args": ["-y", "@akoskomuves/appstoreconnect-mcp"],
+      "env": {
+        "ASC_ISSUER_ID": "...",
+        "ASC_KEY_ID": "...",
+        "ASC_PRIVATE_KEY_PATH": "~/.appstore/AuthKey_XXXXXXXXXX.p8"
+      }
+    }
+  }
+}
+```
+
+Or via Claude Code's CLI:
+
+```sh
+claude mcp add appstoreconnect \
+  -e ASC_ISSUER_ID=... \
+  -e ASC_KEY_ID=... \
+  -e ASC_PRIVATE_KEY_PATH=~/.appstore/AuthKey_XXXXXXXXXX.p8 \
+  -- npx -y @akoskomuves/appstoreconnect-mcp
+```
+
+## Configure
+
+Generate an App Store Connect API key at [App Store Connect → Users and Access → Integrations → Keys](https://appstoreconnect.apple.com/access/integrations/api). Pricing writes need the **Admin** role; read-only operations work with **App Manager**.
+
+| Variable | What |
+| --- | --- |
+| `ASC_ISSUER_ID` | Issuer UUID from the Keys page |
+| `ASC_KEY_ID` | 10-character Key ID |
+| `ASC_PRIVATE_KEY_PATH` | Path to your downloaded `AuthKey_XXXXXXXXXX.p8` file (`~` is expanded) |
+
+The `.p8` file is a private key — never commit it. Recommended: `~/.appstore/AuthKey_XXXXXXXXXX.p8` outside any repo.
+
+## Tools
+
+### Apps
+- `asc_list_apps` — list apps (filter by `bundleId`)
+- `asc_get_app` — fetch one app by ID
+
+### Subscriptions
+- `asc_list_subscription_groups` — groups for an app
+- `asc_list_subscriptions` — auto-renewable subscriptions in a group
+- `asc_list_subscription_prices` — current price schedule per subscription
+- `asc_list_subscription_price_points` — valid price points for a subscription in a territory
+
+### Pricing (writes)
+- `asc_post_subscription_price` — schedule a price change for one territory
+- `asc_delete_subscription_price` — cancel a pending scheduled change
+
+### Territories
+- `asc_list_territories` — all 175 App Store territories
+
+### PPP rebalancing
+- `ppp_load_index` — return the bundled Apple Music Individual-plan price snapshot used as the PPP signal
+- `ppp_compute_proposal` — compute a proposed per-territory price schedule for a subscription (read-only dry-run; uses Apple Music ratios as implied PPP-FX, snaps to valid Apple price points, applies a configurable round strategy and floor)
+- `ppp_apply_proposal` — same computation, then schedule the changes against ASC after confirming via MCP elicitation (or `confirm: true` for unattended use). Refuses to apply if any row drops by more than `maxDropPct` (default 90%); paces writes at `maxConcurrency` (default 2) and retries 429s automatically; skips territories where ASC billing currency ≠ Apple Music currency.
+
+### Response shape
+
+Every list/get tool returns a compact text table by default — designed for an LLM to read without burning context. Every tool also accepts:
+
+- `raw: true` — return the full JSON:API payload (`data`, `included`, `links`, `meta`) for debugging or advanced use.
+- `maxItems: number` — cap auto-pagination (default 500–1000 depending on the tool). The MCP follows `links.next` and merges + dedupes `included` resources across pages.
+
+Sparse fieldsets (`fields[type]=...`) are applied per tool to avoid pulling unused attributes. The whole 175-territory price schedule comes back in one paginated call (200/page) at roughly 1/10th the size of the unfiltered payload.
+
+## Production behavior
+
+A few details worth knowing before running `ppp_apply_proposal` against a live App Store Connect account:
+
+- **Rate limit handling.** Apple throttles POST endpoints around 50/min. `client.request` honours `Retry-After` headers and falls back to exponential backoff (2s → 60s, capped, up to 6 retries). A 60-territory rebalance pacing through retries finishes in about 2 minutes wall time with zero manual intervention.
+- **Currency-mismatch skip.** If the bundled Apple Music index lists a territory in one currency (say BHD) but ASC bills your subscription in another (USD), the PPP-FX ratio breaks dimensionally. The proposal marks those rows `currency-mismatch (asc=USD, am=BHD)` and excludes them from the apply set. Common in Gulf USD-billed markets (BHR, KWT, OMN). Set those manually if you want to.
+- **Sanity floor.** `floorFactor` (default 0.15) is a hard lower bound on per-territory drops as a fraction of the current price — guards against a stale index entry collapsing a price to near-zero. For a more conservative rebalance, pass 0.30 or 0.50.
+- **Sanity ceiling on drops.** `maxDropPct` (default 90%) refuses to apply *any* run where a single row drops more than this. If you've ever seen Apple Music tank a market price aggressively, this catches the resulting outlier before you write it to ASC.
+- **Refresh the snapshot when you care.** `data/apple-music-prices.json` is a hand-curated snapshot. Each entry is dated; the snapshot date is shown in proposal output. Pull request a refresh when Apple Music prices move and the project will fold it in.
+
+## PPP rebalancing skill
+
+The `examples/ppp-rebalance/` directory contains a [Claude Code skill](https://docs.claude.com/en/docs/claude-code/skills) that wraps these tools into a Purchasing Power Parity workflow (dry-run → schedule → rollback) with the gotchas baked in.
+
+```sh
+mkdir -p ~/.claude/skills && \
+  ln -s "$PWD/examples/ppp-rebalance" ~/.claude/skills/ppp-rebalance
+```
+
+Then ask Claude: *"Rebalance my subscription prices using the ppp-rebalance skill."*
+
+## Roadmap
+
+- [x] **v0.1** — Apps · subscriptions · subscription pricing · PPP rebalance (with elicitation, 429 retry, currency-mismatch skip, sanity floor/ceiling)
+- [ ] TestFlight (beta groups, testers, builds)
+- [ ] App metadata (screenshots, descriptions, localizations)
+- [ ] Sales reports / analytics
+- [ ] In-app purchases (non-subscription)
+- [ ] Customer reviews
+- [ ] Real-FX support for currency-mismatched territories (today they're skipped; with an FX feed we could compute a correct target)
+
+Each new domain is one file under `src/domains/` plus a `register*` call in `src/index.ts`. Contributions welcome — see [CONTRIBUTING.md](CONTRIBUTING.md).
+
+## Develop
+
+```sh
+git clone https://github.com/akoskomuves/appstoreconnect-mcp.git
+cd appstoreconnect-mcp
+npm install
+npm run dev   # tsx watch mode
+npm test
+npm run build
+```
+
+See [CONTRIBUTING.md](CONTRIBUTING.md) for the contributor flow (changesets, PR template, branch naming).
+
+## Security
+
+Never commit `.p8` keys. Report vulnerabilities privately — see [SECURITY.md](SECURITY.md).
+
+## License
+
+[MIT](LICENSE) © 2026 Akos Komuves

package/data/apple-music-prices.json

@@ -0,0 +1,78 @@
+{
+  "$comment": "Apple Music Individual plan price per territory. Used as a Purchasing Power Parity reference: target_local = base_anchor_price * (apple_music_local / apple_music_anchor). Refresh by visiting apple.com/<country-slug>/apple-music/. Territories not listed here are skipped by ppp_compute_proposal.",
+  "snapshot": "2026-05-09",
+  "anchor": "USA",
+  "prices": [
+    { "territory": "USA", "currency": "USD", "individualPrice": 10.99 },
+    { "territory": "GBR", "currency": "GBP", "individualPrice": 10.99 },
+    { "territory": "CAN", "currency": "CAD", "individualPrice": 10.99 },
+    { "territory": "AUS", "currency": "AUD", "individualPrice": 12.99 },
+    { "territory": "NZL", "currency": "NZD", "individualPrice": 12.99 },
+    { "territory": "JPN", "currency": "JPY", "individualPrice": 1080 },
+    { "territory": "KOR", "currency": "KRW", "individualPrice": 9900 },
+    { "territory": "SGP", "currency": "SGD", "individualPrice": 10.98 },
+    { "territory": "HKG", "currency": "HKD", "individualPrice": 78 },
+    { "territory": "TWN", "currency": "TWD", "individualPrice": 170 },
+    { "territory": "MYS", "currency": "MYR", "individualPrice": 16.9 },
+    { "territory": "THA", "currency": "THB", "individualPrice": 129 },
+    { "territory": "PHL", "currency": "PHP", "individualPrice": 129 },
+    { "territory": "VNM", "currency": "VND", "individualPrice": 65000 },
+    { "territory": "IDN", "currency": "IDR", "individualPrice": 59000 },
+    { "territory": "IND", "currency": "INR", "individualPrice": 99 },
+    { "territory": "PAK", "currency": "PKR", "individualPrice": 360 },
+    { "territory": "CHN", "currency": "CNY", "individualPrice": 10 },
+
+    { "territory": "AUT", "currency": "EUR", "individualPrice": 10.99 },
+    { "territory": "BEL", "currency": "EUR", "individualPrice": 10.99 },
+    { "territory": "DEU", "currency": "EUR", "individualPrice": 10.99 },
+    { "territory": "ESP", "currency": "EUR", "individualPrice": 10.99 },
+    { "territory": "FIN", "currency": "EUR", "individualPrice": 10.99 },
+    { "territory": "FRA", "currency": "EUR", "individualPrice": 10.99 },
+    { "territory": "GRC", "currency": "EUR", "individualPrice": 10.99 },
+    { "territory": "IRL", "currency": "EUR", "individualPrice": 10.99 },
+    { "territory": "ITA", "currency": "EUR", "individualPrice": 10.99 },
+    { "territory": "LUX", "currency": "EUR", "individualPrice": 10.99 },
+    { "territory": "NLD", "currency": "EUR", "individualPrice": 10.99 },
+    { "territory": "PRT", "currency": "EUR", "individualPrice": 10.99 },
+    { "territory": "EST", "currency": "EUR", "individualPrice": 10.99 },
+    { "territory": "LVA", "currency": "EUR", "individualPrice": 10.99 },
+    { "territory": "LTU", "currency": "EUR", "individualPrice": 10.99 },
+    { "territory": "SVN", "currency": "EUR", "individualPrice": 10.99 },
+    { "territory": "SVK", "currency": "EUR", "individualPrice": 10.99 },
+    { "territory": "CYP", "currency": "EUR", "individualPrice": 10.99 },
+    { "territory": "MLT", "currency": "EUR", "individualPrice": 10.99 },
+    { "territory": "HRV", "currency": "EUR", "individualPrice": 10.99 },
+    { "territory": "BGR", "currency": "BGN", "individualPrice": 19.99 },
+    { "territory": "POL", "currency": "PLN", "individualPrice": 24.99 },
+    { "territory": "ROU", "currency": "RON", "individualPrice": 24.99 },
+    { "territory": "HUN", "currency": "HUF", "individualPrice": 1490 },
+    { "territory": "CZE", "currency": "CZK", "individualPrice": 169 },
+    { "territory": "DNK", "currency": "DKK", "individualPrice": 79 },
+    { "territory": "SWE", "currency": "SEK", "individualPrice": 119 },
+    { "territory": "NOR", "currency": "NOK", "individualPrice": 109 },
+    { "territory": "ISL", "currency": "USD", "individualPrice": 10.99 },
+    { "territory": "CHE", "currency": "CHF", "individualPrice": 12.95 },
+    { "territory": "TUR", "currency": "TRY", "individualPrice": 36.99 },
+    { "territory": "ISR", "currency": "ILS", "individualPrice": 19.9 },
+
+    { "territory": "BRA", "currency": "BRL", "individualPrice": 21.9 },
+    { "territory": "MEX", "currency": "MXN", "individualPrice": 115 },
+    { "territory": "ARG", "currency": "USD", "individualPrice": 10.99 },
+    { "territory": "CHL", "currency": "CLP", "individualPrice": 4990 },
+    { "territory": "COL", "currency": "COP", "individualPrice": 14000 },
+    { "territory": "PER", "currency": "PEN", "individualPrice": 17.9 },
+
+    { "territory": "ZAF", "currency": "ZAR", "individualPrice": 64.99 },
+    { "territory": "EGY", "currency": "EGP", "individualPrice": 89 },
+    { "territory": "NGA", "currency": "NGN", "individualPrice": 900 },
+    { "territory": "KEN", "currency": "KES", "individualPrice": 250 },
+    { "territory": "ARE", "currency": "AED", "individualPrice": 19.99 },
+    { "territory": "SAU", "currency": "SAR", "individualPrice": 19.99 },
+    { "territory": "QAT", "currency": "QAR", "individualPrice": 19.99 },
+    { "territory": "KWT", "currency": "KWD", "individualPrice": 1.49 },
+    { "territory": "BHR", "currency": "BHD", "individualPrice": 1.49 },
+    { "territory": "OMN", "currency": "OMR", "individualPrice": 1.99 },
+    { "territory": "JOR", "currency": "USD", "individualPrice": 4.99 },
+    { "territory": "LBN", "currency": "USD", "individualPrice": 4.99 }
+  ]
+}

package/dist/auth.d.ts

@@ -0,0 +1,9 @@
+import type { Config } from './config.js';
+export declare class TokenProvider {
+    private readonly config;
+    private cache;
+    constructor(config: Config);
+    getToken(): Promise<string>;
+    invalidate(): void;
+}
+//# sourceMappingURL=auth.d.ts.map

package/dist/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAY1C,qBAAa,aAAa;IAGZ,OAAO,CAAC,QAAQ,CAAC,MAAM;IAFnC,OAAO,CAAC,KAAK,CAA4B;gBAEZ,MAAM,EAAE,MAAM;IAErC,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC;IAkBjC,UAAU,IAAI,IAAI;CAGnB"}

package/dist/auth.js

@@ -0,0 +1,33 @@
+import { importPKCS8, SignJWT } from 'jose';
+const ASC_AUDIENCE = 'appstoreconnect-v1';
+// Apple caps token lifetime at 20 min; use 19 to leave buffer for clock skew.
+const TOKEN_TTL_SECONDS = 60 * 19;
+const REFRESH_AHEAD_SECONDS = 30;
+export class TokenProvider {
+    config;
+    cache = null;
+    constructor(config) {
+        this.config = config;
+    }
+    async getToken() {
+        const now = Math.floor(Date.now() / 1000);
+        if (this.cache && this.cache.expiresAt > now + REFRESH_AHEAD_SECONDS) {
+            return this.cache.jwt;
+        }
+        const key = await importPKCS8(this.config.privateKey, 'ES256');
+        const expiresAt = now + TOKEN_TTL_SECONDS;
+        const jwt = await new SignJWT({})
+            .setProtectedHeader({ alg: 'ES256', kid: this.config.keyId, typ: 'JWT' })
+            .setIssuer(this.config.issuerId)
+            .setAudience(ASC_AUDIENCE)
+            .setIssuedAt(now)
+            .setExpirationTime(expiresAt)
+            .sign(key);
+        this.cache = { jwt, expiresAt };
+        return jwt;
+    }
+    invalidate() {
+        this.cache = null;
+    }
+}
+//# sourceMappingURL=auth.js.map

package/dist/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAG5C,MAAM,YAAY,GAAG,oBAAoB,CAAC;AAC1C,8EAA8E;AAC9E,MAAM,iBAAiB,GAAG,EAAE,GAAG,EAAE,CAAC;AAClC,MAAM,qBAAqB,GAAG,EAAE,CAAC;AAOjC,MAAM,OAAO,aAAa;IAGK;IAFrB,KAAK,GAAuB,IAAI,CAAC;IAEzC,YAA6B,MAAc;QAAd,WAAM,GAAN,MAAM,CAAQ;IAAG,CAAC;IAE/C,KAAK,CAAC,QAAQ;QACZ,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,GAAG,GAAG,qBAAqB,EAAE,CAAC;YACrE,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;QACxB,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC/D,MAAM,SAAS,GAAG,GAAG,GAAG,iBAAiB,CAAC;QAC1C,MAAM,GAAG,GAAG,MAAM,IAAI,OAAO,CAAC,EAAE,CAAC;aAC9B,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;aACxE,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;aAC/B,WAAW,CAAC,YAAY,CAAC;aACzB,WAAW,CAAC,GAAG,CAAC;aAChB,iBAAiB,CAAC,SAAS,CAAC;aAC5B,IAAI,CAAC,GAAG,CAAC,CAAC;QACb,IAAI,CAAC,KAAK,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;QAChC,OAAO,GAAG,CAAC;IACb,CAAC;IAED,UAAU;QACR,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;CACF"}

package/dist/client.d.ts

@@ -0,0 +1,6 @@
+import type { Config } from './config.js';
+export interface ASCClient {
+    request<T>(path: string, init?: RequestInit): Promise<T>;
+}
+export declare function createASCClient(config: Config): ASCClient;
+//# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAQ1C,MAAM,WAAW,SAAS;IACxB,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;CAC1D;AAuBD,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAwDzD"}

package/dist/client.js

@@ -0,0 +1,75 @@
+import { TokenProvider } from './auth.js';
+import { ASCError } from './errors.js';
+const ASC_BASE_URL = 'https://api.appstoreconnect.apple.com';
+const MAX_RATE_LIMIT_RETRIES = 6;
+const RATE_LIMIT_FALLBACK_MS = 2000;
+const RATE_LIMIT_MAX_BACKOFF_MS = 60_000;
+/**
+ * Parse a Retry-After header value. Apple sometimes returns seconds, sometimes
+ * an HTTP-date. Returns the wait in milliseconds, or undefined if the header
+ * is missing/unparseable.
+ */
+function parseRetryAfter(value) {
+    if (!value)
+        return undefined;
+    const trimmed = value.trim();
+    const seconds = Number(trimmed);
+    if (Number.isFinite(seconds) && seconds >= 0)
+        return seconds * 1000;
+    const date = Date.parse(trimmed);
+    if (!Number.isNaN(date))
+        return Math.max(0, date - Date.now());
+    return undefined;
+}
+function exponentialBackoff(attempt) {
+    return Math.min(RATE_LIMIT_MAX_BACKOFF_MS, RATE_LIMIT_FALLBACK_MS * 2 ** attempt);
+}
+const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
+export function createASCClient(config) {
+    const tokens = new TokenProvider(config);
+    async function send(url, init) {
+        const token = await tokens.getToken();
+        const headers = new Headers(init.headers);
+        headers.set('authorization', `Bearer ${token}`);
+        headers.set('accept', 'application/json');
+        if (init.body && !headers.has('content-type')) {
+            headers.set('content-type', 'application/json');
+        }
+        return fetch(url, { ...init, headers });
+    }
+    async function request(path, init = {}) {
+        const url = path.startsWith('http') ? path : `${ASC_BASE_URL}${path}`;
+        let response = await send(url, init);
+        // Auth refresh on 401 (one-shot — no token loop).
+        if (response.status === 401) {
+            tokens.invalidate();
+            response = await send(url, init);
+        }
+        // Apple's POST endpoints have a global per-minute throttle and 429s are
+        // common when applying many subscription prices at once. Honour Retry-After
+        // when present, otherwise fall back to exponential backoff.
+        let attempt = 0;
+        while (response.status === 429 && attempt < MAX_RATE_LIMIT_RETRIES) {
+            const retryAfter = parseRetryAfter(response.headers.get('retry-after'));
+            const waitMs = retryAfter ?? exponentialBackoff(attempt);
+            await sleep(waitMs);
+            response = await send(url, init);
+            attempt += 1;
+        }
+        if (!response.ok) {
+            let details;
+            try {
+                details = await response.json();
+            }
+            catch {
+                details = await response.text().catch(() => undefined);
+            }
+            throw new ASCError(response.status, `App Store Connect API ${response.status} on ${init.method ?? 'GET'} ${path}`, details);
+        }
+        if (response.status === 204)
+            return undefined;
+        return (await response.json());
+    }
+    return { request };
+}
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC,MAAM,YAAY,GAAG,uCAAuC,CAAC;AAC7D,MAAM,sBAAsB,GAAG,CAAC,CAAC;AACjC,MAAM,sBAAsB,GAAG,IAAI,CAAC;AACpC,MAAM,yBAAyB,GAAG,MAAM,CAAC;AAMzC;;;;GAIG;AACH,SAAS,eAAe,CAAC,KAAoB;IAC3C,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAChC,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC;QAAE,OAAO,OAAO,GAAG,IAAI,CAAC;IACpE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACjC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC/D,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAe;IACzC,OAAO,IAAI,CAAC,GAAG,CAAC,yBAAyB,EAAE,sBAAsB,GAAG,CAAC,IAAI,OAAO,CAAC,CAAC;AACpF,CAAC;AAED,MAAM,KAAK,GAAG,CAAC,EAAU,EAAiB,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AAEnF,MAAM,UAAU,eAAe,CAAC,MAAc;IAC5C,MAAM,MAAM,GAAG,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC;IAEzC,KAAK,UAAU,IAAI,CAAC,GAAW,EAAE,IAAiB;QAChD,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,KAAK,EAAE,CAAC,CAAC;QAChD,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;QAC1C,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;YAC9C,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;QAClD,CAAC;QACD,OAAO,KAAK,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,UAAU,OAAO,CAAI,IAAY,EAAE,OAAoB,EAAE;QAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,YAAY,GAAG,IAAI,EAAE,CAAC;QAEtE,IAAI,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAErC,kDAAkD;QAClD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5B,MAAM,CAAC,UAAU,EAAE,CAAC;YACpB,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACnC,CAAC;QAED,wEAAwE;QACxE,4EAA4E;QAC5E,4DAA4D;QAC5D,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,OAAO,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,OAAO,GAAG,sBAAsB,EAAE,CAAC;YACnE,MAAM,UAAU,GAAG,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;YACxE,MAAM,MAAM,GAAG,UAAU,IAAI,kBAAkB,CAAC,OAAO,CAAC,CAAC;YACzD,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;YACpB,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACjC,OAAO,IAAI,CAAC,CAAC;QACf,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,IAAI,OAAgB,CAAC;YACrB,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YAClC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACzD,CAAC;YACD,MAAM,IAAI,QAAQ,CAChB,QAAQ,CAAC,MAAM,EACf,yBAAyB,QAAQ,CAAC,MAAM,OAAO,IAAI,CAAC,MAAM,IAAI,KAAK,IAAI,IAAI,EAAE,EAC7E,OAAO,CACR,CAAC;QACJ,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,SAAc,CAAC;QACnD,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAM,CAAC;IACtC,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,CAAC;AACrB,CAAC"}

package/dist/clients.d.ts

@@ -0,0 +1,31 @@
+export type ClientId = 'claude-code' | 'claude-desktop' | 'cursor' | 'windsurf';
+export interface ClientDescriptor {
+    id: ClientId;
+    label: string;
+    configPath: string;
+}
+export interface MCPServerEntry {
+    command: string;
+    args?: string[];
+    env?: Record<string, string>;
+}
+export declare function listClients(): ClientDescriptor[];
+export declare function detectClients(): ClientDescriptor[];
+export declare function clientById(id: ClientId): ClientDescriptor;
+export declare function readServer(client: ClientDescriptor, name: string): MCPServerEntry | undefined;
+export declare function upsertServer(client: ClientDescriptor, name: string, entry: MCPServerEntry): void;
+export declare function removeServer(client: ClientDescriptor, name: string): boolean;
+/**
+ * Decide what command + args to write into a client config given how this CLI
+ * was invoked. If we're running from inside a published `node_modules`, prefer
+ * `npx -y appstoreconnect-mcp`. Otherwise (local dev checkout) point at the
+ * absolute path of the built `dist/index.js`.
+ */
+export declare function resolveServerInvocation(meta: {
+    execScriptPath: string;
+    pkgName: string;
+}): {
+    command: string;
+    args: string[];
+};
+//# sourceMappingURL=clients.d.ts.map

package/dist/clients.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"clients.d.ts","sourceRoot":"","sources":["../src/clients.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,QAAQ,GAAG,aAAa,GAAG,gBAAgB,GAAG,QAAQ,GAAG,UAAU,CAAC;AAEhF,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,QAAQ,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9B;AA0CD,wBAAgB,WAAW,IAAI,gBAAgB,EAAE,CAEhD;AAED,wBAAgB,aAAa,IAAI,gBAAgB,EAAE,CAElD;AAED,wBAAgB,UAAU,CAAC,EAAE,EAAE,QAAQ,GAAG,gBAAgB,CAEzD;AAkBD,wBAAgB,UAAU,CAAC,MAAM,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAG7F;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,GAAG,IAAI,CAIhG;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAM5E;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE;IAAE,cAAc,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG;IAC1F,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB,CAMA"}

package/dist/clients.js

@@ -0,0 +1,88 @@
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { homedir, platform } from 'node:os';
+import { dirname, join } from 'node:path';
+const HOME = homedir();
+const PLATFORM = platform();
+const CLIENTS = {
+    'claude-code': {
+        id: 'claude-code',
+        label: 'Claude Code',
+        configPath: join(HOME, '.claude.json'),
+    },
+    'claude-desktop': {
+        id: 'claude-desktop',
+        label: 'Claude Desktop',
+        configPath: PLATFORM === 'darwin'
+            ? join(HOME, 'Library', 'Application Support', 'Claude', 'claude_desktop_config.json')
+            : PLATFORM === 'win32'
+                ? join(process.env.APPDATA ?? join(HOME, 'AppData', 'Roaming'), 'Claude', 'claude_desktop_config.json')
+                : join(HOME, '.config', 'Claude', 'claude_desktop_config.json'),
+    },
+    cursor: {
+        id: 'cursor',
+        label: 'Cursor',
+        configPath: join(HOME, '.cursor', 'mcp.json'),
+    },
+    windsurf: {
+        id: 'windsurf',
+        label: 'Windsurf',
+        configPath: join(HOME, '.codeium', 'windsurf', 'mcp_config.json'),
+    },
+};
+export function listClients() {
+    return Object.values(CLIENTS);
+}
+export function detectClients() {
+    return listClients().filter((c) => existsSync(c.configPath));
+}
+export function clientById(id) {
+    return CLIENTS[id];
+}
+function readConfig(path) {
+    if (!existsSync(path))
+        return {};
+    try {
+        const raw = readFileSync(path, 'utf-8');
+        if (!raw.trim())
+            return {};
+        return JSON.parse(raw);
+    }
+    catch (err) {
+        throw new Error(`Cannot parse ${path} as JSON: ${err.message}`);
+    }
+}
+function writeConfig(path, config) {
+    mkdirSync(dirname(path), { recursive: true });
+    writeFileSync(path, `${JSON.stringify(config, null, 2)}\n`, 'utf-8');
+}
+export function readServer(client, name) {
+    const config = readConfig(client.configPath);
+    return config.mcpServers?.[name];
+}
+export function upsertServer(client, name, entry) {
+    const config = readConfig(client.configPath);
+    config.mcpServers = { ...config.mcpServers, [name]: entry };
+    writeConfig(client.configPath, config);
+}
+export function removeServer(client, name) {
+    const config = readConfig(client.configPath);
+    if (!config.mcpServers || !(name in config.mcpServers))
+        return false;
+    delete config.mcpServers[name];
+    writeConfig(client.configPath, config);
+    return true;
+}
+/**
+ * Decide what command + args to write into a client config given how this CLI
+ * was invoked. If we're running from inside a published `node_modules`, prefer
+ * `npx -y appstoreconnect-mcp`. Otherwise (local dev checkout) point at the
+ * absolute path of the built `dist/index.js`.
+ */
+export function resolveServerInvocation(meta) {
+    const fromNodeModules = meta.execScriptPath.includes(`/node_modules/${meta.pkgName}/`);
+    if (fromNodeModules) {
+        return { command: 'npx', args: ['-y', meta.pkgName] };
+    }
+    return { command: 'node', args: [meta.execScriptPath] };
+}
+//# sourceMappingURL=clients.js.map

package/dist/clients.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"clients.js","sourceRoot":"","sources":["../src/clients.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAqB1C,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;AACvB,MAAM,QAAQ,GAAG,QAAQ,EAAE,CAAC;AAE5B,MAAM,OAAO,GAAuC;IAClD,aAAa,EAAE;QACb,EAAE,EAAE,aAAa;QACjB,KAAK,EAAE,aAAa;QACpB,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC;KACvC;IACD,gBAAgB,EAAE;QAChB,EAAE,EAAE,gBAAgB;QACpB,KAAK,EAAE,gBAAgB;QACvB,UAAU,EACR,QAAQ,KAAK,QAAQ;YACnB,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,qBAAqB,EAAE,QAAQ,EAAE,4BAA4B,CAAC;YACtF,CAAC,CAAC,QAAQ,KAAK,OAAO;gBACpB,CAAC,CAAC,IAAI,CACF,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,EACvD,QAAQ,EACR,4BAA4B,CAC7B;gBACH,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,4BAA4B,CAAC;KACtE;IACD,MAAM,EAAE;QACN,EAAE,EAAE,QAAQ;QACZ,KAAK,EAAE,QAAQ;QACf,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,UAAU,CAAC;KAC9C;IACD,QAAQ,EAAE;QACR,EAAE,EAAE,UAAU;QACd,KAAK,EAAE,UAAU;QACjB,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,iBAAiB,CAAC;KAClE;CACF,CAAC;AAEF,MAAM,UAAU,WAAW;IACzB,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,OAAO,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,EAAY;IACrC,OAAO,OAAO,CAAC,EAAE,CAAC,CAAC;AACrB,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAC9B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACxC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE;YAAE,OAAO,EAAE,CAAC;QAC3B,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAmB,CAAC;IAC3C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,gBAAgB,IAAI,aAAc,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IAC7E,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,MAAsB;IACvD,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,aAAa,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAAwB,EAAE,IAAY;IAC/D,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC7C,OAAO,MAAM,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAwB,EAAE,IAAY,EAAE,KAAqB;IACxF,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC7C,MAAM,CAAC,UAAU,GAAG,EAAE,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC;IAC5D,WAAW,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAwB,EAAE,IAAY;IACjE,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC7C,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IACrE,OAAO,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAC/B,WAAW,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACvC,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAAiD;IAIvF,MAAM,eAAe,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,iBAAiB,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC;IACvF,IAAI,eAAe,EAAE,CAAC;QACpB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;IACxD,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;AAC1D,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,7 @@
+export interface Config {
+    issuerId: string;
+    keyId: string;
+    privateKey: string;
+}
+export declare function loadConfig(): Config;
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,MAAM;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;CACpB;AAcD,wBAAgB,UAAU,IAAI,MAAM,CAanC"}