@capgo/cli 8.48.2 → 8.49.0

package/dist/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@capgo/cli",
   "type": "module",
-  "version": "8.48.2",
+  "version": "8.49.0",
   "description": "A CLI to upload to capgo servers",
   "author": "Martin martin@capgo.app",
   "license": "Apache 2.0",
@@ -177,7 +177,7 @@
     "test:android-version": "bun test/test-android-version.mjs",
     "test:platform-flow-contract": "bun test/test-platform-flow-contract.mjs",
     "test:tail-engine-shared": "bun test/test-tail-engine-shared.mjs",
-    "test": "bun run build && bun run test:helper-dce && bun run test:version-detection:setup && bun run test:bundle && bun run test:bundle-validation && bun run test:functional && bun run test:semver && bun run test:auto-bump-version && bun run test:auto-bump-ai-diff && bun run test:version-edge-cases && bun run test:regex && bun run test:upload && bun run test:fail-on-incompatible && bun run test:native-dependencies && bun run test:package-json-guard && bun run test:credentials && bun run test:credentials-export && bun run test:credentials-validation && bun run test:android-service-account-validation && bun run test:build-zip-filter && bun run test:checksum && bun run test:build-needed && bun run test:build-cache-payload && bun run test:build-cancellation && bun run test:ci-prompts && bun run test:ci-secrets && bun run test:android-onboarding-progress && bun run test:onboarding-telemetry && bun run test:v2-event-migration && bun run test:analytics && bun run test:cli-headers && bun run test:min-cli-version && bun run test:authenticated-command-invocation && bun run test:analytics-error-category && bun run test:analytics-org-resolver && bun run test:supabase-perf && bun run test:preview-qr && bun run test:app-set-options && bun run test:mcp-analytics && bun run test:mcp-instructions && bun run test:mcp-live-update-onboarding && bun run test:mcp-stdout-guard && bun run test:mcp-platform-select && bun run test:mcp-explain-scopes && bun run test:mcp-oauth-reopen && bun run test:mcp-broker-oauth && bun run test:mcp-broker-session && bun run test:mcp-credentials-manage && bun run test:mcp-resume-prompt && bun run test:mcp-build-job && bun run test:mcp-build-tools && bun run test:app-created-source && bun run test:app-add-exists && bun run test:app-list-output-text && bun run test:doctor-analytics && bun run test:posthog-exception && bun run test:cli-recovery && bun run test:create-supabase-client && bun run test:build-platform-selection && bun run test:builder-project-discovery && bun run test:onboarding-recovery && bun run test:onboarding-progress && bun run test:onboarding-run-targets && bun run test:run-device-command && bun run test:init-monorepo-targeting && bun run test:init-app-conflict && bun run test:channel-add-exists && bun run test:wait-log && bun run test:init-guardrails && bun run test:init-replay && bun run test:init-telemetry && bun run test:prompt-preferences && bun run test:esm-sdk && bun run test:mcp && bun run test:mcp-no-key-handshake && bun run test:auth-session && bun run test:version-detection && bun run test:platform-paths && bun run test:project-type-detection && bun run test:payload-split && bun run test:manifest-path-encoding && bun run test:macos-signing && bun run test:asc-key-protocol && bun run test:apple-api-import-helpers && bun run test:apple-api-verify-key && bun run test:bundle-id-detector && bun run test:apple-api-app-list && bun run test:app-verification && bun run test:pbxproj-parser && bun run test:ai-log-capture && bun run test:ai-analyze-flow && bun run test:cicd-failure-help && bun run test:ai-sse-parser && bun run test:ai-render-markdown && bun run test:ai-stream-markdown && bun run test:ai-onboarding-mode && bun run test:ai-fit && bun run test:platform-layout && bun run test:frame-fit && bun run test:onboarding-min-size && bun run test:min-size-gate && bun run test:shell-size-gate && bun run test:build-log-sanitize && bun run test:build-output-viewport && bun run test:diff-viewer-viewport && bun run test:build-complete-exit && bun run test:ai-analyze-stream && bun run test:support-mailto && bun run test:support-redact && bun run test:support-internal-log && bun run test:support-help-menu && bun run test:support-contact && bun run test:support-upload-prompt && bun run test:support-bundle-files && bun run test:self-update && bun run test:update-prompt && bun run test:apple-api-cert-create && bun run test:android-tail-engine && bun run test:android-tail-render && bun run test:android-tail-routing && bun run test:dev-gate-stripped && bun run test:frame-fit-ios-shared && bun run test:ios-confirm-app-id && bun run test:ios-create-new && bun run test:ios-e2e && bun run test:ios-flow-contract && bun run test:ios-import-discovery && bun run test:ios-import-export && bun run test:ios-import-pickers && bun run test:ios-import-recovery && bun run test:ios-recovery && bun run test:ios-resume && bun run test:ios-tail-handoff && bun run test:ios-tui-render && bun run test:p8-error && bun run test:ios-tui-routing && bun run test:ios-updater-sync-validation && bun run test:ios-verify-app && bun run test:ios-marketing-version && bun run test:android-version && bun run test:platform-flow-contract && bun run test:tail-engine-shared && bun run test:prescan && bun run test:android-reporting-api && bun run test:android-gcp && bun run test:android-app-verification && bun run test:android-rename && bun run test:appflow-auth && bun run test:appflow-api-map && bun run test:appflow-validate && bun run test:appflow-flow && bun run test:appflow-gapfill && bun run test:appflow-engine && bun run test:appflow-tail && bun run test:appflow-fetch && bun run test:appflow-sa-decode && bun run test:app-permission-helper && bun run test:2fa-compliance-network && bun run test:organization-set-api-host && bun run test:trial-warning && bun run test:plan-validation",
+    "test": "bun run build && bun run test:helper-dce && bun run test:version-detection:setup && bun run test:bundle && bun run test:bundle-validation && bun run test:functional && bun run test:semver && bun run test:auto-bump-version && bun run test:auto-bump-ai-diff && bun run test:version-edge-cases && bun run test:regex && bun run test:upload && bun run test:fail-on-incompatible && bun run test:native-dependencies && bun run test:package-json-guard && bun run test:credentials && bun run test:credentials-export && bun run test:ios-provisioning-map && bun run test:ios-provisioning-command && bun run test:credentials-validation && bun run test:android-service-account-validation && bun run test:build-zip-filter && bun run test:checksum && bun run test:build-needed && bun run test:build-cache-payload && bun run test:build-cancellation && bun run test:ci-prompts && bun run test:ci-secrets && bun run test:android-onboarding-progress && bun run test:onboarding-telemetry && bun run test:v2-event-migration && bun run test:analytics && bun run test:cli-headers && bun run test:min-cli-version && bun run test:authenticated-command-invocation && bun run test:analytics-error-category && bun run test:analytics-org-resolver && bun run test:supabase-perf && bun run test:preview-qr && bun run test:app-set-options && bun run test:mcp-analytics && bun run test:mcp-instructions && bun run test:mcp-live-update-onboarding && bun run test:mcp-stdout-guard && bun run test:mcp-platform-select && bun run test:mcp-explain-scopes && bun run test:mcp-oauth-reopen && bun run test:mcp-broker-oauth && bun run test:mcp-broker-session && bun run test:mcp-credentials-manage && bun run test:mcp-resume-prompt && bun run test:mcp-build-job && bun run test:mcp-build-tools && bun run test:app-created-source && bun run test:app-add-exists && bun run test:app-list-output-text && bun run test:doctor-analytics && bun run test:posthog-exception && bun run test:cli-recovery && bun run test:create-supabase-client && bun run test:build-platform-selection && bun run test:builder-project-discovery && bun run test:onboarding-recovery && bun run test:onboarding-progress && bun run test:onboarding-run-targets && bun run test:run-device-command && bun run test:init-monorepo-targeting && bun run test:init-app-conflict && bun run test:channel-add-exists && bun run test:wait-log && bun run test:init-guardrails && bun run test:init-replay && bun run test:init-telemetry && bun run test:prompt-preferences && bun run test:esm-sdk && bun run test:mcp && bun run test:mcp-no-key-handshake && bun run test:auth-session && bun run test:version-detection && bun run test:platform-paths && bun run test:project-type-detection && bun run test:payload-split && bun run test:manifest-path-encoding && bun run test:macos-signing && bun run test:asc-key-protocol && bun run test:apple-api-import-helpers && bun run test:apple-api-verify-key && bun run test:bundle-id-detector && bun run test:apple-api-app-list && bun run test:app-verification && bun run test:pbxproj-parser && bun run test:ai-log-capture && bun run test:ai-analyze-flow && bun run test:cicd-failure-help && bun run test:ai-sse-parser && bun run test:ai-render-markdown && bun run test:ai-stream-markdown && bun run test:ai-onboarding-mode && bun run test:ai-fit && bun run test:platform-layout && bun run test:frame-fit && bun run test:onboarding-min-size && bun run test:min-size-gate && bun run test:shell-size-gate && bun run test:build-log-sanitize && bun run test:build-output-viewport && bun run test:diff-viewer-viewport && bun run test:build-complete-exit && bun run test:ai-analyze-stream && bun run test:support-mailto && bun run test:support-redact && bun run test:support-internal-log && bun run test:support-help-menu && bun run test:support-contact && bun run test:support-upload-prompt && bun run test:support-bundle-files && bun run test:self-update && bun run test:update-prompt && bun run test:apple-api-cert-create && bun run test:android-tail-engine && bun run test:android-tail-render && bun run test:android-tail-routing && bun run test:dev-gate-stripped && bun run test:frame-fit-ios-shared && bun run test:ios-confirm-app-id && bun run test:ios-create-new && bun run test:ios-e2e && bun run test:ios-flow-contract && bun run test:ios-import-discovery && bun run test:ios-import-export && bun run test:ios-import-pickers && bun run test:ios-import-recovery && bun run test:ios-recovery && bun run test:ios-resume && bun run test:ios-tail-handoff && bun run test:ios-tui-render && bun run test:p8-error && bun run test:ios-tui-routing && bun run test:ios-updater-sync-validation && bun run test:ios-verify-app && bun run test:ios-marketing-version && bun run test:android-version && bun run test:platform-flow-contract && bun run test:tail-engine-shared && bun run test:prescan && bun run test:android-reporting-api && bun run test:android-gcp && bun run test:android-app-verification && bun run test:android-rename && bun run test:appflow-auth && bun run test:appflow-api-map && bun run test:appflow-validate && bun run test:appflow-flow && bun run test:appflow-gapfill && bun run test:appflow-engine && bun run test:appflow-tail && bun run test:appflow-fetch && bun run test:appflow-sa-decode && bun run test:app-permission-helper && bun run test:2fa-compliance-network && bun run test:organization-set-api-host && bun run test:trial-warning && bun run test:plan-validation",
     "test:build-platform-selection": "bun test/test-build-platform-selection.mjs",
     "test:builder-project-discovery": "bun test/test-builder-project-discovery.mjs",
     "test:ai-log-capture": "bun test/test-ai-log-capture.mjs",
@@ -226,7 +226,9 @@
     "test:trial-warning": "bun test/test-trial-warning.mjs",
     "test:plan-validation": "bun test/test-plan-validation.mjs",
     "test:auto-bump-version": "bun test/test-auto-bump-version.mjs",
-    "test:auto-bump-ai-diff": "bun test/test-auto-bump-ai-diff.mjs"
+    "test:auto-bump-ai-diff": "bun test/test-auto-bump-ai-diff.mjs",
+    "test:ios-provisioning-map": "bun test/test-ios-provisioning-map.mjs",
+    "test:ios-provisioning-command": "bun test/test-ios-provisioning-command.mjs"
   },
   "dependencies": {
     "@inkjs/ui": "^2.0.0",

package/dist/src/build/credentials-export-command.d.ts

@@ -1,7 +1,5 @@
-import type { SavedCredentials } from '../schemas/build';
+import type { CredentialsPlatform, CredentialsStoreName, CredentialsStores } from './credentials-store-selection';
 import { link, mkdtemp, open, rmdir, unlink } from 'node:fs/promises';
-type Platform = 'ios' | 'android';
-type Store = 'local' | 'global';
 type CredentialsExportOptions = {
     appId?: string;
     platform?: string;
@@ -11,11 +9,10 @@ type CredentialsExportOptions = {
     raw?: boolean;
     decodeBase64?: boolean;
 };
-type CredentialsExportStores = Record<Store, SavedCredentials | null>;
 type ResolvedCredentialsExport = {
     value: string;
-    source: Store;
-    platforms: Platform[];
+    source: CredentialsStoreName;
+    platforms: CredentialsPlatform[];
 };
 type FileValue = {
     data: string | Buffer;
@@ -30,7 +27,7 @@ type FileWriterDependencies = {
     rmdir?: typeof rmdir;
 };
 export declare function isCredentialsExportInvocation(argv: readonly string[]): boolean;
-export declare function resolveCredentialsExport(variable: string, options: CredentialsExportOptions, savedStores: CredentialsExportStores): ResolvedCredentialsExport;
+export declare function resolveCredentialsExport(variable: string, options: CredentialsExportOptions, savedStores: CredentialsStores): ResolvedCredentialsExport;
 export declare function resolveCredentialsFileValue(variable: string, value: string, { decodeBase64, interactive, promptDecode }: {
     decodeBase64?: boolean;
     interactive: boolean;

package/dist/src/build/credentials-store-selection.d.ts

@@ -0,0 +1,16 @@
+import type { SavedCredentials } from '../schemas/build';
+export type CredentialsStoreName = 'local' | 'global';
+export type CredentialsPlatform = 'ios' | 'android';
+export interface CredentialsStoreOptions {
+    appId?: string;
+    local?: boolean;
+    global?: boolean;
+}
+export type CredentialsStores = Record<CredentialsStoreName, SavedCredentials | null>;
+export interface ResolvedCredentialsStore {
+    source: CredentialsStoreName;
+    saved: SavedCredentials;
+}
+export declare function credentialsPlatformFields(saved: SavedCredentials | null, platform: CredentialsPlatform): Record<string, unknown> | undefined;
+export declare function hasConfiguredCredentials(saved: SavedCredentials | null, platform?: CredentialsPlatform): boolean;
+export declare function resolveCredentialsStore(options: CredentialsStoreOptions, savedStores: CredentialsStores): ResolvedCredentialsStore;

package/dist/src/build/ios-provisioning-command.d.ts

@@ -0,0 +1,32 @@
+import type { CredentialsStoreName, CredentialsStores } from './credentials-store-selection';
+import type { ProvisioningMap } from './ios-provisioning-map';
+import type { PbxTarget } from './pbxproj-parser';
+import { DuplicateProfileError, createProfile, deleteProfile, ensureBundleId, findCertBySha1, generateJwt, verifyApiKey } from './onboarding/apple-api';
+import { openP12 } from './prescan/checks/ios-certs';
+export interface IosProvisioningOptions {
+    local?: boolean;
+    global?: boolean;
+}
+export interface IosProvisioningProject {
+    appId: string;
+    targets: PbxTarget[];
+}
+export interface IosProvisioningCommandDeps {
+    loadProject: () => Promise<IosProvisioningProject>;
+    loadStores: (appId: string, options: IosProvisioningOptions) => Promise<CredentialsStores>;
+    persistMap: (appId: string, source: CredentialsStoreName, map: ProvisioningMap) => Promise<void>;
+    canPrompt: () => boolean;
+    confirm: (message: string) => Promise<boolean>;
+    logInfo: (message: string) => void;
+    generateJwt: typeof generateJwt;
+    verifyApiKey: typeof verifyApiKey;
+    openP12: typeof openP12;
+    findCertBySha1: typeof findCertBySha1;
+    ensureBundleId: typeof ensureBundleId;
+    createProfile: typeof createProfile;
+    deleteProfile: typeof deleteProfile;
+}
+export declare function runIosProvisioningCommand(options: IosProvisioningOptions, deps: IosProvisioningCommandDeps): Promise<void>;
+export declare function defaultIosProvisioningCommandDeps(): IosProvisioningCommandDeps;
+export declare function iosProvisioningCommand(options: IosProvisioningOptions): Promise<void>;
+export { DuplicateProfileError };

package/dist/src/build/ios-provisioning-map.d.ts

@@ -0,0 +1,35 @@
+import type { PbxTarget } from './pbxproj-parser';
+export type ProvisioningMapErrorCode = 'missing' | 'empty' | 'malformed' | 'invalid';
+export declare class ProvisioningMapError extends Error {
+    readonly code: ProvisioningMapErrorCode;
+    constructor(code: ProvisioningMapErrorCode, message: string);
+}
+export interface ProvisioningMapEntry {
+    profile: string;
+    name: string;
+    readonly bundleId: string;
+}
+export type ProvisioningMap = Record<string, ProvisioningMapEntry>;
+export interface ProvisioningTargetGroup {
+    bundleId: string;
+    targetNames: string[];
+}
+export interface WildcardReuse {
+    entry: ProvisioningMapEntry;
+    sourceKeys: string[];
+    targets: ProvisioningTargetGroup[];
+}
+export interface ProvisioningCoverage {
+    exact: ProvisioningTargetGroup[];
+    missing: ProvisioningTargetGroup[];
+    unresolved: PbxTarget[];
+    wildcardReuse: WildcardReuse | null;
+    wildcardConflict: ProvisioningTargetGroup[];
+    generation: ProvisioningTargetGroup[];
+}
+/** Cache the parsed bundle ID without changing the persisted { profile, name } contract. */
+export declare function createProvisioningMapEntry(profile: string, name: string, bundleId: string): ProvisioningMapEntry;
+export declare function parseProvisioningMap(raw: unknown): ProvisioningMap;
+export declare function isConcreteBundleId(bundleId: string): boolean;
+export declare function wildcardBundleMatches(wildcardBundleId: string, targetBundleId: string): boolean;
+export declare function analyzeProvisioningCoverage(targets: PbxTarget[], map: ProvisioningMap): ProvisioningCoverage;

package/dist/src/build/prescan/checks/ios-profiles.d.ts

@@ -19,3 +19,4 @@ export declare const profileBundleMatch: PrescanCheck;
 export declare const profileTypeVsMode: PrescanCheck;
 export declare const certProfilePairing: PrescanCheck;
 export declare const targetsCovered: PrescanCheck;
+export declare const wildcardProfileTargets: PrescanCheck;