@capgo/cli 8.31.6 → 8.32.0

package/dist/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@capgo/cli",
   "type": "module",
-  "version": "8.31.6",
+  "version": "8.32.0",
   "description": "A CLI to upload to capgo servers",
   "author": "Martin martin@capgo.app",
   "license": "Apache 2.0",

package/dist/src/build/onboarding/apple-access.d.ts

@@ -11,16 +11,25 @@ export interface AssertAscAccessOptions {
     /** Test-only injection point. Defaults to globalThis.fetch. */
     fetchImpl?: typeof fetch;
 }
+interface AscProviderFailure {
+    /** Apple HTTP status and sanitized structured error fields, when available. */
+    status?: number;
+    code?: string;
+    title?: string;
+    detail?: string;
+}
 export type AscAccessResult = {
     ok: true;
-} | {
+} | ({
     ok: false;
     kind: 'no-app-access' | 'auth-error' | 'network';
     message: string;
-};
+} & AscProviderFailure);
 /**
  * Probe App Store Connect for app access. Never throws - every failure shape is
  * returned as `{ ok: false, kind }` so the prescan check can self-classify the
- * severity (auth-error -> error, no-app-access -> error, network -> info).
+ * severity from the HTTP status and sanitized Apple reason. Network failures
+ * remain distinguishable so prescan can surface them as warnings.
  */
 export declare function assertAscAccess(opts: AssertAscAccessOptions): Promise<AscAccessResult>;
+export {};

package/dist/src/build/prescan/checks/ios-certs.d.ts

@@ -7,5 +7,6 @@ export interface OpenedP12 {
 /** Open the saved P12; throws on wrong password / garbage. Exported for reuse by pairing check. */
 export declare function openP12(base64: string, password: string): OpenedP12;
 export declare const p12Opens: PrescanCheck;
+export declare const p12LegacyEncryption: PrescanCheck;
 export declare const p12Expiry: PrescanCheck;
 export declare const ascKeyValid: PrescanCheck;

package/dist/src/build/prescan/checks/store-access.d.ts

@@ -1,6 +1,12 @@
 import type { ValidateOptions, ValidationResult } from '../../onboarding/android/service-account-validation.js';
 import type { AscAccessResult, AssertAscAccessOptions } from '../../onboarding/apple-access.js';
-import type { PrescanCheck } from '../types';
+import type { Finding, PrescanCheck } from '../types';
+/** ASC authentication failures become build-blocking after a 14-day rollout. */
+export declare const ASC_PRESCAN_AUTH_ENFORCE_AFTER = "2026-08-17T00:00:00.000Z";
+/** Classify an ASC auth result without depending on scan context or I/O. */
+export declare function classifyAscAuthFinding(result: Extract<AscAccessResult, {
+    ok: false;
+}>): Finding;
 /** Injectable validator type so tests can supply a fake without any network. */
 type PlayValidator = (opts: ValidateOptions) => Promise<ValidationResult>;
 type AscAsserter = (opts: AssertAscAccessOptions) => Promise<AscAccessResult>;

package/dist/src/build/prescan/registry.d.ts

@@ -1,4 +1,6 @@
 import type { PrescanCheck } from './types';
 /** New iOS expansion checks become build-blocking at this UTC instant. */
 export declare const IOS_PRESCAN_EXPANSION_ENFORCE_AFTER = "2026-08-14T00:00:00.000Z";
+/** Legacy P12 encryption becomes mandatory for macOS runner compatibility at this UTC instant. */
+export declare const IOS_P12_LEGACY_ENFORCE_AFTER = "2026-08-17T00:00:00.000Z";
 export declare const ALL_CHECKS: PrescanCheck[];