@limrun/ui 0.13.3-rc.1 → 0.13.3

package/dist/device-install/react.js

@@ -1,88 +1,93 @@
-import { useState as d, useRef as b, useCallback as u, useEffect as D } from "react";
-import { closeDeviceRelayTarget as l, requestUSBAccess as N, pairDevice as q, startDeviceInstall as C } from "./index.js";
-import { j as T, k as j } from "../browser-storage-BJ__DGJ6.mjs";
+import { useState as u, useRef as h, useCallback as l, useEffect as D } from "react";
+import { closeDeviceRelayTarget as d, requestUSBAccess as N, pairDevice as q, startDeviceInstall as C } from "./index.js";
+import { j as T, k as j } from "../browser-storage-Cx9eW-bm.mjs";
 function F({
   apiUrl: a,
   token: v,
-  log: e = x
+  log: R = x
 }) {
-  const [r, m] = d(), [o, y] = d(), [h, n] = d(), [P, c] = d(), [S, f] = d(!1), w = b(void 0), R = b(void 0), i = u(async () => {
-    w.current?.close(), w.current = void 0, await l(R.current, e);
-  }, [e]);
+  const [e, m] = u(), [n, y] = u(), [g, s] = u(), [P, i] = u(), [S, f] = u(!1), w = h(void 0), b = h(void 0), r = h(R);
+  r.current = R;
+  const c = l(async () => {
+    w.current?.close(), w.current = void 0, await d(b.current, r.current);
+  }, []);
   D(() => {
-    R.current = r;
-  }, [r]), D(() => () => {
-    i();
-  }, [i]);
-  const A = u(async () => {
-    n("usb"), c(void 0), f(!1);
+    b.current = e;
+  }, [e]), D(() => () => {
+    c();
+  }, [c]);
+  const A = l(async () => {
+    s("usb"), i(void 0), f(!1);
     let t;
     try {
-      await i(), t = await N({ log: e });
-      const s = await T(t.hello.serialNumber);
-      return m(t), y(s), e(s ? "Pair record found" : "No pair record found", t.hello.serialNumber), t;
-    } catch (s) {
-      await l(t, e), m(void 0), y(void 0), c(p(s));
+      await c(), t = await N({ log: r.current });
+      const o = await T(t.hello.serialNumber);
+      return m(t), y(o), r.current(
+        o ? "Pair record found" : "No pair record found",
+        t.hello.serialNumber
+      ), t;
+    } catch (o) {
+      await d(t, r.current), m(void 0), y(void 0), i(p(o));
       return;
     } finally {
-      n(void 0);
+      s(void 0);
     }
-  }, [i, e]), B = u(async () => {
-    if (!a || !r)
+  }, [c]), B = l(async () => {
+    if (!a || !e)
       throw new Error("Select a USB device before pairing.");
-    n("pair"), c(void 0), f(!1);
+    s("pair"), i(void 0), f(!1);
     try {
-      await i();
+      await c();
       const t = await q({
         limbuildApiUrl: a,
         token: v,
-        log: e,
-        target: r
-      }), s = await j(t.pairRecord, {
-        productName: r.hello.productName
+        log: r.current,
+        target: e
+      }), o = await j(t.pairRecord, {
+        productName: e.hello.productName
       });
-      return t.relay.close(), await l(r, e), y(s), f(!1), e("Device paired", "The pair record was stored locally in this browser."), s;
+      return t.relay.close(), await d(e, r.current), y(o), f(!1), r.current("Device paired", "The pair record was stored locally in this browser."), o;
     } catch (t) {
-      await l(r, e), f(!0), c(p(t));
+      await d(e, r.current), f(!0), i(p(t));
       return;
     } finally {
-      n(void 0);
+      s(void 0);
     }
-  }, [a, i, r, e, v]), E = u(async () => {
-    if (!a || !r || !o)
+  }, [a, c, e, v]), E = l(async () => {
+    if (!a || !e || !n)
       throw new Error("Select and pair a USB device before starting installation.");
-    n("install"), c(void 0);
+    s("install"), i(void 0);
     try {
-      return await i(), w.current = await C({
+      return await c(), w.current = await C({
         limbuildApiUrl: a,
         token: v,
-        log: e,
-        target: r,
-        pairRecord: o
-      }), e("Device install started", "Installation will continue through the connected iPhone."), w.current;
+        log: r.current,
+        target: e,
+        pairRecord: n
+      }), r.current("Device install started", "Installation will continue through the connected iPhone."), w.current;
     } catch (t) {
-      await l(r, e), c(p(t));
+      await d(e, r.current), i(p(t));
       return;
     } finally {
-      n(void 0);
+      s(void 0);
     }
-  }, [a, i, r, e, o, v]), I = u(() => {
-    i(), e("Device relay stopped");
-  }, [i, e]);
+  }, [a, c, e, n, v]), I = l(() => {
+    c(), r.current("Device relay stopped");
+  }, [c]);
   return {
-    device: r,
-    pairRecord: o,
-    busyAction: h,
+    device: e,
+    pairRecord: n,
+    busyAction: g,
     error: P,
     pairConfirmationRequired: S,
-    hasPairRecord: !!o,
-    canPair: !!a && !h && !!r,
-    canInstall: !!a && !h && !!r && !!o,
+    hasPairRecord: !!n,
+    canPair: !!a && !g && !!e,
+    canInstall: !!a && !g && !!e && !!n,
     requestUSBAccess: A,
     pairBrowser: B,
     startInstallation: E,
     stopRelay: I,
-    clearError: () => c(void 0)
+    clearError: () => i(void 0)
   };
 }
 function x() {

package/dist/{index-BXg7HdIs.mjs → index-DFdCvi2_.mjs}

@@ -228,13 +228,9 @@ class kn {
 async function vn(t, e, r, d) {
   let T = new Uint8Array(await wt.hash(Na.h, Vt(Ir(e))));
   t === "s2k_fo" && (T = Ir(wt.toHex(T)));
-  const x = await crypto.subtle.importKey(
-    "raw",
-    Vt(T),
-    { name: "PBKDF2" },
-    !1,
-    ["deriveBits"]
-  ), l = await crypto.subtle.deriveBits(
+  const x = await crypto.subtle.importKey("raw", Vt(T), { name: "PBKDF2" }, !1, [
+    "deriveBits"
+  ]), l = await crypto.subtle.deriveBits(
     {
       name: "PBKDF2",
       hash: { name: "SHA-256" },

package/dist/limbuild-client-CgEncrgx.js

@@ -0,0 +1 @@
+"use strict";async function l(o,t){const a=new URL(`${o}/info`);t&&a.searchParams.set("token",t);const e=await fetch(a.toString(),{headers:t?{Authorization:`Bearer ${t}`}:void 0});if(!e.ok){const n=await e.text();throw new Error(`Info request failed: HTTP ${e.status} ${n}`)}return await e.json()}async function u({limbuildApiUrl:o,token:t,certificateP12Base64:a,certificatePassword:e,provisioningProfileBase64:n}){const d=new URL(`${o}/exec`);t&&d.searchParams.set("token",t);const r=await fetch(d.toString(),{method:"POST",headers:{"Content-Type":"application/json",...t?{Authorization:`Bearer ${t}`}:{}},body:JSON.stringify({command:"xcodebuild",xcodebuild:{sdk:"iphoneos"},signing:{certificateP12Base64:a,...e?{certificatePassword:e}:{},provisioningProfileBase64:n}})});if(!r.ok){const s=await r.text();throw new Error(`Build request failed: HTTP ${r.status} ${s}`)}return await r.json()}async function f({limbuildApiUrl:o,execId:t,token:a}){const e=new URL(`${o}/exec/${encodeURIComponent(t)}/ios/ota`);a&&e.searchParams.set("token",a);const n=await fetch(e.toString(),{headers:a?{Authorization:`Bearer ${a}`}:void 0});if(!n.ok){const d=await n.text();throw new Error(`OTA install metadata failed: HTTP ${n.status} ${d}`)}return await n.json()}function h({limbuildApiUrl:o,execId:t,token:a,onLine:e,onStatus:n,onError:d}){const r=new URL(`${o}/exec/${t}/events`);a&&r.searchParams.set("token",a);const s=new EventSource(r.toString());return n("running"),s.addEventListener("command",i=>e({type:"command",data:i.data})),s.addEventListener("stdout",i=>e({type:"stdout",data:i.data})),s.addEventListener("stderr",i=>e({type:"stderr",data:i.data})),s.addEventListener("exitCode",i=>{const c=parseInt(i.data,10);n(c===0?"succeeded":c<0?"cancelled":"failed"),s.close()}),s.onerror=()=>{s.close(),n("failed"),d?.(new Error("Build log stream closed before completion."))},()=>s.close()}exports.fetchLimbuildInfo=l;exports.getIOSOTAInstall=f;exports.startSignedDeviceBuild=u;exports.watchBuildLogEvents=h;

package/dist/{limbuild-client-CFJhYsRx.mjs → limbuild-client-D7U7w342.mjs}

@@ -66,9 +66,11 @@ function w({
   const s = new EventSource(r.toString());
   return n("running"), s.addEventListener("command", (i) => e({ type: "command", data: i.data })), s.addEventListener("stdout", (i) => e({ type: "stdout", data: i.data })), s.addEventListener("stderr", (i) => e({ type: "stderr", data: i.data })), s.addEventListener("exitCode", (i) => {
     const c = parseInt(i.data, 10);
-    n(c === 0 ? "succeeded" : c < 0 ? "cancelled" : "failed"), s.close();
+    n(
+      c === 0 ? "succeeded" : c < 0 ? "cancelled" : "failed"
+    ), s.close();
   }), s.onerror = () => {
-    s.close(), d?.(new Error("Build log stream closed before completion."));
+    s.close(), n("failed"), d?.(new Error("Build log stream closed before completion."));
   }, () => s.close();
 }
 export {

package/dist/{provisioning-CdseoMJQ.mjs → provisioning-DKbkBO-p.mjs}

@@ -1,4 +1,4 @@
-import { e as c, a as u, n as d, b as f, c as l, i as r } from "./browser-storage-BJ__DGJ6.mjs";
+import { e as c, a as u, n as d, b as f, c as l, i as r } from "./browser-storage-Cx9eW-bm.mjs";
 function g() {
   return {
     method: "POST",
@@ -6,10 +6,16 @@ function g() {
     payload: {}
   };
 }
-function v({ bundleID: e, teamID: i = "" }) {
+function v({
+  bundleID: e,
+  teamID: i = ""
+}) {
   return n("/account/ios/identifiers/listAppIds.action", i, { sort: "name=asc" });
 }
-function P({ deviceUDID: e, teamID: i = "" }) {
+function P({
+  deviceUDID: e,
+  teamID: i = ""
+}) {
   return n("/account/ios/device/listDevices.action", i, {
     sort: "name=asc",
     includeRemovedDevices: !1
@@ -79,10 +85,7 @@ function q({
     }
   };
 }
-function b({
-  csrPEM: e,
-  teamID: i = ""
-}) {
+function b({ csrPEM: e, teamID: i = "" }) {
   return {
     method: "POST",
     path: "/account/ios/certificate/submitCertificateRequest.action",
@@ -93,10 +96,7 @@ function b({
     }
   };
 }
-function C({
-  csrPEM: e,
-  teamID: i = ""
-}) {
+function C({ csrPEM: e, teamID: i = "" }) {
   return {
     method: "POST",
     path: "/account/ios/certificate/submitCertificateRequest.action",

package/dist/{provisioning-D2ZZQeyX.js → provisioning-Va0PH4Kk.js}

@@ -1 +1 @@
-"use strict";const a=require("./browser-storage-C1jQLXat.js");function c(){return{method:"POST",path:"/account/listTeams.action",payload:{}}}function u({bundleID:e,teamID:t=""}){return s("/account/ios/identifiers/listAppIds.action",t,{sort:"name=asc"})}function d({deviceUDID:e,teamID:t=""}){return s("/account/ios/device/listDevices.action",t,{sort:"name=asc",includeRemovedDevices:!1})}function f(e=""){return s("/account/ios/certificate/listCertRequests.action",e,{sort:"name=asc",types:"83Q87W3TGH,5QPB9NHCEI"})}function l(e=""){return s("/account/ios/certificate/listCertRequests.action",e,{sort:"name=asc",types:"WXV89964HE,R58UK2EWSO"})}function p({bundleID:e,teamID:t=""}){return s("/account/ios/profile/listProvisioningProfiles.action",t,{search:e,sort:"name=asc"})}function m({bundleID:e,teamID:t=""}){return s("/account/ios/profile/listProvisioningProfiles.action",t,{search:e,sort:"name=asc",distributionType:"adhoc"})}function R({deviceUDID:e,teamID:t="",name:i="Limrun iPhone"}){return{method:"POST",path:"/account/ios/device/addDevices.action",payload:{teamId:t,deviceNames:i,deviceNumbers:a.normalizeUDID(e),deviceClasses:"iphone",register:"single"}}}function g({bundleID:e,teamID:t="",name:i}){return{method:"POST",path:"/account/ios/identifiers/addAppId.action",payload:{teamId:t,name:i??e,identifier:e,type:"explicit"}}}function q({csrPEM:e,teamID:t=""}){return{method:"POST",path:"/account/ios/certificate/submitCertificateRequest.action",payload:{teamId:t,type:"83Q87W3TGH",csrContent:e}}}function v({csrPEM:e,teamID:t=""}){return{method:"POST",path:"/account/ios/certificate/submitCertificateRequest.action",payload:{teamId:t,type:"WXV89964HE",csrContent:e}}}function P(e,t=""){return{method:"GET",path:"/account/ios/certificate/downloadCertificateContent.action",payload:{teamId:t,certificateId:e,type:"83Q87W3TGH"}}}function D(e,t=""){return{method:"GET",path:"/account/ios/certificate/downloadCertificateContent.action",payload:{teamId:t,certificateId:e,type:"WXV89964HE"}}}function I({bundleID:e,teamID:t="",appIDID:i,certificateID:o,deviceIDs:n,name:r}){return{method:"POST",path:"/account/ios/profile/createProvisioningProfile.action",payload:{teamId:t,provisioningProfileName:r??`Limrun ${e}`,certificateIds:[o],appIdId:i,deviceIds:n,distributionType:"limited",subPlatform:"ios"}}}function h({bundleID:e,teamID:t="",appIDID:i,certificateID:o,deviceIDs:n,name:r}){return{method:"POST",path:"/account/ios/profile/createProvisioningProfile.action",payload:{teamId:t,provisioningProfileName:r??`Limrun Ad Hoc ${e}`,certificateIds:[o],appIdId:i,deviceIds:n,distributionType:"adhoc",subPlatform:"ios"}}}function C(e,t=""){return{method:"GET",path:"/account/ios/profile/downloadProfileContent",payload:{teamId:t,provisioningProfileId:e}}}async function b({bundleID:e,deviceUDID:t,teamID:i,signingMode:o}){const n=await a.getSigningAssets({bundleID:e,deviceUDID:t,signingMode:o});if(!(!n||!S(n,{bundleID:e,deviceUDID:t,teamID:i,signingMode:o})))return n}async function y(e){return a.putSigningAssets({...e,certificateFileName:e.certificateID?`${e.certificateID}.p12`:`apple-${e.signingMode??"development"}.p12`,certificatePassword:e.certificatePassword||void 0,signingMode:e.signingMode,profileFileName:e.profile.uuid?`${e.profile.uuid}.mobileprovision`:`${e.signingMode??"development"}.mobileprovision`})}function S(e,{bundleID:t,deviceUDID:i,teamID:o,signingMode:n="development"}){return(e.signingMode??"development")!==n||!a.profileMatchesBundleID(e.profile,t)||o&&e.teamID&&e.teamID!==o||i&&!a.profileContainsDevice(e.profile,i)||e.profile.expirationDate&&new Date(e.profile.expirationDate).getTime()<=Date.now()?!1:a.normalizeBundleID(e.bundleID)===a.normalizeBundleID(t)}function s(e,t,i={}){const o={pageNumber:1,pageSize:200,...i};return t&&(o.teamId=t),{method:"POST",path:e,payload:o}}exports.createAdHocProfileRequest=h;exports.createBundleIDRequest=g;exports.createDevelopmentProfileRequest=I;exports.downloadCertificateRequest=P;exports.downloadDistributionCertificateRequest=D;exports.downloadProfileRequest=C;exports.findAdHocProfilesRequest=m;exports.findBundleIDRequest=u;exports.findDevelopmentCertificatesRequest=f;exports.findDevelopmentProfilesRequest=p;exports.findDeviceRequest=d;exports.findDistributionCertificatesRequest=l;exports.getReusableAppleSigningAssets=b;exports.listTeamsRequest=c;exports.putAppleGeneratedSigningAssets=y;exports.registerDeviceRequest=R;exports.submitDevelopmentCSRRequest=q;exports.submitDistributionCSRRequest=v;
+"use strict";const a=require("./browser-storage-jJaIht4K.js");function c(){return{method:"POST",path:"/account/listTeams.action",payload:{}}}function u({bundleID:e,teamID:t=""}){return s("/account/ios/identifiers/listAppIds.action",t,{sort:"name=asc"})}function d({deviceUDID:e,teamID:t=""}){return s("/account/ios/device/listDevices.action",t,{sort:"name=asc",includeRemovedDevices:!1})}function f(e=""){return s("/account/ios/certificate/listCertRequests.action",e,{sort:"name=asc",types:"83Q87W3TGH,5QPB9NHCEI"})}function l(e=""){return s("/account/ios/certificate/listCertRequests.action",e,{sort:"name=asc",types:"WXV89964HE,R58UK2EWSO"})}function p({bundleID:e,teamID:t=""}){return s("/account/ios/profile/listProvisioningProfiles.action",t,{search:e,sort:"name=asc"})}function m({bundleID:e,teamID:t=""}){return s("/account/ios/profile/listProvisioningProfiles.action",t,{search:e,sort:"name=asc",distributionType:"adhoc"})}function R({deviceUDID:e,teamID:t="",name:i="Limrun iPhone"}){return{method:"POST",path:"/account/ios/device/addDevices.action",payload:{teamId:t,deviceNames:i,deviceNumbers:a.normalizeUDID(e),deviceClasses:"iphone",register:"single"}}}function g({bundleID:e,teamID:t="",name:i}){return{method:"POST",path:"/account/ios/identifiers/addAppId.action",payload:{teamId:t,name:i??e,identifier:e,type:"explicit"}}}function q({csrPEM:e,teamID:t=""}){return{method:"POST",path:"/account/ios/certificate/submitCertificateRequest.action",payload:{teamId:t,type:"83Q87W3TGH",csrContent:e}}}function v({csrPEM:e,teamID:t=""}){return{method:"POST",path:"/account/ios/certificate/submitCertificateRequest.action",payload:{teamId:t,type:"WXV89964HE",csrContent:e}}}function P(e,t=""){return{method:"GET",path:"/account/ios/certificate/downloadCertificateContent.action",payload:{teamId:t,certificateId:e,type:"83Q87W3TGH"}}}function D(e,t=""){return{method:"GET",path:"/account/ios/certificate/downloadCertificateContent.action",payload:{teamId:t,certificateId:e,type:"WXV89964HE"}}}function I({bundleID:e,teamID:t="",appIDID:i,certificateID:o,deviceIDs:n,name:r}){return{method:"POST",path:"/account/ios/profile/createProvisioningProfile.action",payload:{teamId:t,provisioningProfileName:r??`Limrun ${e}`,certificateIds:[o],appIdId:i,deviceIds:n,distributionType:"limited",subPlatform:"ios"}}}function h({bundleID:e,teamID:t="",appIDID:i,certificateID:o,deviceIDs:n,name:r}){return{method:"POST",path:"/account/ios/profile/createProvisioningProfile.action",payload:{teamId:t,provisioningProfileName:r??`Limrun Ad Hoc ${e}`,certificateIds:[o],appIdId:i,deviceIds:n,distributionType:"adhoc",subPlatform:"ios"}}}function C(e,t=""){return{method:"GET",path:"/account/ios/profile/downloadProfileContent",payload:{teamId:t,provisioningProfileId:e}}}async function b({bundleID:e,deviceUDID:t,teamID:i,signingMode:o}){const n=await a.getSigningAssets({bundleID:e,deviceUDID:t,signingMode:o});if(!(!n||!S(n,{bundleID:e,deviceUDID:t,teamID:i,signingMode:o})))return n}async function y(e){return a.putSigningAssets({...e,certificateFileName:e.certificateID?`${e.certificateID}.p12`:`apple-${e.signingMode??"development"}.p12`,certificatePassword:e.certificatePassword||void 0,signingMode:e.signingMode,profileFileName:e.profile.uuid?`${e.profile.uuid}.mobileprovision`:`${e.signingMode??"development"}.mobileprovision`})}function S(e,{bundleID:t,deviceUDID:i,teamID:o,signingMode:n="development"}){return(e.signingMode??"development")!==n||!a.profileMatchesBundleID(e.profile,t)||o&&e.teamID&&e.teamID!==o||i&&!a.profileContainsDevice(e.profile,i)||e.profile.expirationDate&&new Date(e.profile.expirationDate).getTime()<=Date.now()?!1:a.normalizeBundleID(e.bundleID)===a.normalizeBundleID(t)}function s(e,t,i={}){const o={pageNumber:1,pageSize:200,...i};return t&&(o.teamId=t),{method:"POST",path:e,payload:o}}exports.createAdHocProfileRequest=h;exports.createBundleIDRequest=g;exports.createDevelopmentProfileRequest=I;exports.downloadCertificateRequest=P;exports.downloadDistributionCertificateRequest=D;exports.downloadProfileRequest=C;exports.findAdHocProfilesRequest=m;exports.findBundleIDRequest=u;exports.findDevelopmentCertificatesRequest=f;exports.findDevelopmentProfilesRequest=p;exports.findDeviceRequest=d;exports.findDistributionCertificatesRequest=l;exports.getReusableAppleSigningAssets=b;exports.listTeamsRequest=c;exports.putAppleGeneratedSigningAssets=y;exports.registerDeviceRequest=R;exports.submitDevelopmentCSRRequest=q;exports.submitDistributionCSRRequest=v;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@limrun/ui",
-  "version": "0.13.3-rc.1",
+  "version": "0.13.3",
   "publishConfig": {
     "access": "public"
   },

package/src/app-store-relay/index.test.ts

@@ -1,11 +1,7 @@
 // @vitest-environment node
 
 import { afterEach, describe, expect, test, vi } from 'vitest';
-import {
-  assertAppleDeveloperPortalResponseOK,
-  deleteAppleProfile,
-  listAppleTeams,
-} from './index';
+import { assertAppleDeveloperPortalResponseOK, deleteAppleProfile, listAppleTeams } from './index';
 
 describe('App Store relay primitives', () => {
   afterEach(() => {

package/src/app-store-relay/index.ts

@@ -170,7 +170,12 @@ export async function listAppleTeams(options: AppleRelayClientOptions) {
     ...options,
     request: listTeamsRequest(),
     label: 'Apple Developer team list',
-    mapBody: (body) => uniqueAppleTeams([...(body?.teams ?? []), ...(body?.availableProviders ?? []), ...(body?.provider ? [body.provider] : [])]),
+    mapBody: (body) =>
+      uniqueAppleTeams([
+        ...(body?.teams ?? []),
+        ...(body?.availableProviders ?? []),
+        ...(body?.provider ? [body.provider] : []),
+      ]),
   });
 }
 
@@ -182,9 +187,9 @@ export async function listAppleCertificates({
   return requestAppleProvisioning<Array<Record<string, unknown>>>({
     ...options,
     request:
-      certificateKind === 'distribution'
-        ? findDistributionCertificatesRequest(teamId)
-        : findDevelopmentCertificatesRequest(teamId),
+      certificateKind === 'distribution' ?
+        findDistributionCertificatesRequest(teamId)
+      : findDevelopmentCertificatesRequest(teamId),
     label: 'Apple Developer certificate list',
     mapBody: (body) => body?.certRequests ?? [],
   });
@@ -199,10 +204,13 @@ export async function createAppleCertificate({
   return requestAppleProvisioning<Record<string, unknown> | undefined>({
     ...options,
     request:
-      certificateKind === 'distribution'
-        ? submitDistributionCSRRequest({ csrPEM, teamID: teamId })
-        : submitDevelopmentCSRRequest({ csrPEM, teamID: teamId }),
-    label: certificateKind === 'distribution' ? 'Apple Distribution certificate creation' : 'Apple Development certificate creation',
+      certificateKind === 'distribution' ?
+        submitDistributionCSRRequest({ csrPEM, teamID: teamId })
+      : submitDevelopmentCSRRequest({ csrPEM, teamID: teamId }),
+    label:
+      certificateKind === 'distribution' ?
+        'Apple Distribution certificate creation'
+      : 'Apple Development certificate creation',
     mapBody: (body) => body?.certRequest,
   });
 }
@@ -216,9 +224,9 @@ export async function downloadAppleCertificate({
   return requestAppleProvisioning<AppleRelayResponse>({
     ...options,
     request:
-      certificateKind === 'distribution'
-        ? downloadDistributionCertificateRequest(certificateId, teamId)
-        : downloadCertificateRequest(certificateId, teamId),
+      certificateKind === 'distribution' ?
+        downloadDistributionCertificateRequest(certificateId, teamId)
+      : downloadCertificateRequest(certificateId, teamId),
     label: 'Apple certificate download',
     validatePortalResponse: false,
     mapBody: (_body, response) => response,
@@ -247,16 +255,36 @@ export async function deleteAppleCertificate({
   });
 }
 
-export async function listAppleBundleIDs({ teamId = '', search = '', ...options }: ListAppleBundleIDsOptions) {
+export async function listAppleBundleIDs({
+  teamId = '',
+  search = '',
+  ...options
+}: ListAppleBundleIDsOptions) {
+  const query = search.trim().toLowerCase();
   return requestAppleProvisioning<AppleDeveloperPortalAppID[]>({
     ...options,
     request: findBundleIDRequest({ bundleID: search, teamID: teamId }),
     label: 'Apple bundle ID list',
-    mapBody: (body) => body?.appIds ?? [],
+    // Apple's listAppIds.action returns the full paginated list and does not
+    // honor a server-side search filter, so apply the `search` filter here.
+    mapBody: (body) => {
+      const appIds = body?.appIds ?? [];
+      if (!query) return appIds;
+      return appIds.filter((appId) =>
+        [appId.identifier, appId.bundleId, appId.name].some(
+          (value) => typeof value === 'string' && value.toLowerCase().includes(query),
+        ),
+      );
+    },
   });
 }
 
-export async function createAppleBundleID({ teamId = '', bundleId, name, ...options }: CreateAppleBundleIDOptions) {
+export async function createAppleBundleID({
+  teamId = '',
+  bundleId,
+  name,
+  ...options
+}: CreateAppleBundleIDOptions) {
   return requestAppleProvisioning<Record<string, unknown> | undefined>({
     ...options,
     request: createBundleIDRequest({ bundleID: bundleId, teamID: teamId, name }),
@@ -302,16 +330,39 @@ export async function deleteAppleBundleID({ teamId = '', appIdId, ...options }:
   });
 }
 
-export async function listAppleDevices({ teamId = '', deviceUDID = '', ...options }: ListAppleDevicesOptions) {
+export async function listAppleDevices({
+  teamId = '',
+  deviceUDID = '',
+  ...options
+}: ListAppleDevicesOptions) {
+  const wantedUDID = normalizeAppleUDID(deviceUDID);
   return requestAppleProvisioning<AppleDeveloperPortalDevice[]>({
     ...options,
     request: findDeviceRequest({ deviceUDID, teamID: teamId }),
     label: 'Apple device list',
-    mapBody: (body) => body?.devices ?? [],
+    // Apple's listDevices.action returns the full paginated list and does not
+    // honor a server-side UDID filter, so apply the `deviceUDID` filter here.
+    mapBody: (body) => {
+      const devices = body?.devices ?? [];
+      if (!wantedUDID) return devices;
+      return devices.filter((device) => normalizeAppleUDID(device.deviceNumber) === wantedUDID);
+    },
   });
 }
 
-export async function registerAppleDevice({ teamId = '', deviceUDID, name, ...options }: RegisterAppleDeviceOptions) {
+function normalizeAppleUDID(udid?: string) {
+  return (udid ?? '')
+    .replace(/-/g, '')
+    .replace(/[^a-fA-F0-9]/g, '')
+    .toUpperCase();
+}
+
+export async function registerAppleDevice({
+  teamId = '',
+  deviceUDID,
+  name,
+  ...options
+}: RegisterAppleDeviceOptions) {
   return requestAppleProvisioning<Record<string, unknown> | undefined>({
     ...options,
     request: registerDeviceRequest({ deviceUDID, teamID: teamId, name }),
@@ -320,7 +371,12 @@ export async function registerAppleDevice({ teamId = '', deviceUDID, name, ...op
   });
 }
 
-export async function updateAppleDevice({ teamId = '', deviceId, name, ...options }: UpdateAppleDeviceOptions) {
+export async function updateAppleDevice({
+  teamId = '',
+  deviceId,
+  name,
+  ...options
+}: UpdateAppleDeviceOptions) {
   return requestAppleProvisioning<Record<string, unknown> | undefined>({
     ...options,
     request: {
@@ -355,9 +411,9 @@ export async function listAppleProfiles({
   return requestAppleProvisioning<Array<Record<string, unknown>>>({
     ...options,
     request:
-      profileKind === 'adhoc'
-        ? findAdHocProfilesRequest({ bundleID: bundleId, teamID: teamId })
-        : findDevelopmentProfilesRequest({ bundleID: bundleId, teamID: teamId }),
+      profileKind === 'adhoc' ?
+        findAdHocProfilesRequest({ bundleID: bundleId, teamID: teamId })
+      : findDevelopmentProfilesRequest({ bundleID: bundleId, teamID: teamId }),
     label: 'Apple provisioning profile list',
     mapBody: (body) => body?.provisioningProfiles ?? [],
   });
@@ -380,29 +436,33 @@ export async function createAppleProfile({
   return requestAppleProvisioning<Record<string, unknown> | undefined>({
     ...options,
     request:
-      profileKind === 'adhoc'
-        ? createAdHocProfileRequest({
-            bundleID: bundleId,
-            teamID: teamId,
-            appIDID: appIdId,
-            certificateID: certificateId,
-            deviceIDs: deviceIds,
-            name,
-          })
-        : createDevelopmentProfileRequest({
-            bundleID: bundleId,
-            teamID: teamId,
-            appIDID: appIdId,
-            certificateID: certificateId,
-            deviceIDs: deviceIds,
-            name,
-          }),
+      profileKind === 'adhoc' ?
+        createAdHocProfileRequest({
+          bundleID: bundleId,
+          teamID: teamId,
+          appIDID: appIdId,
+          certificateID: certificateId,
+          deviceIDs: deviceIds,
+          name,
+        })
+      : createDevelopmentProfileRequest({
+          bundleID: bundleId,
+          teamID: teamId,
+          appIDID: appIdId,
+          certificateID: certificateId,
+          deviceIDs: deviceIds,
+          name,
+        }),
     label: 'Apple provisioning profile creation',
     mapBody: (body) => body?.provisioningProfile,
   });
 }
 
-export async function downloadAppleProfile({ teamId = '', profileId, ...options }: DownloadAppleProfileOptions) {
+export async function downloadAppleProfile({
+  teamId = '',
+  profileId,
+  ...options
+}: DownloadAppleProfileOptions) {
   return requestAppleProvisioning<AppleRelayResponse>({
     ...options,
     request: downloadProfileRequest(profileId, teamId),
@@ -425,12 +485,17 @@ export async function deleteAppleProfile({ teamId = '', profileId, ...options }:
   });
 }
 
-export function assertAppleDeveloperPortalResponseOK(response: AppleDeveloperPortalResponse | undefined, label: string) {
+export function assertAppleDeveloperPortalResponseOK(
+  response: AppleDeveloperPortalResponse | undefined,
+  label: string,
+) {
   if (!response) {
     throw new Error(`${label} returned an empty response.`);
   }
   if (response.resultCode !== undefined && response.resultCode !== 0) {
-    throw new Error(`${label} failed: ${response.userString ?? response.resultString ?? response.resultCode}`);
+    throw new Error(
+      `${label} failed: ${response.userString ?? response.resultString ?? response.resultCode}`,
+    );
   }
 }
 
@@ -438,7 +503,9 @@ function uniqueAppleTeams(teams: AppleDeveloperPortalTeam[]) {
   const seen = new Set<string>();
   const result: AppleDeveloperPortalTeam[] = [];
   for (const team of teams) {
-    const key = String(team.teamId ?? team.providerId ?? team.publicProviderId ?? team.name ?? JSON.stringify(team));
+    const key = String(
+      team.teamId ?? team.providerId ?? team.publicProviderId ?? team.name ?? JSON.stringify(team),
+    );
     if (seen.has(key)) continue;
     seen.add(key);
     result.push(team);

package/src/app-store-relay/react.ts

@@ -21,7 +21,9 @@ export type UseAppleIDLoginResult = {
   completeResponse?: AppleRelayResponse;
   twoFactorChallengeResponse?: AppleRelayResponse;
   error?: string;
-  startLogin: (input: Pick<AppleIDLoginInput, 'accountName' | 'password'>) => Promise<AppleIDLoginResult | undefined>;
+  startLogin: (
+    input: Pick<AppleIDLoginInput, 'accountName' | 'password'>,
+  ) => Promise<AppleIDLoginResult | undefined>;
   submitTwoFactorCode: (code: string) => Promise<AppleRelayResponse | undefined>;
   finalize: () => Promise<AppleRelayResponse | undefined>;
   close: () => Promise<void>;
@@ -31,7 +33,9 @@ export function useAppleIDLogin({ limbuildApiUrl, token }: UseAppleIDLoginOption
   const [status, setStatus] = useState<AppleIDLoginStatus>('idle');
   const [session, setSession] = useState<AppleIDLoginResult | undefined>();
   const [completeResponse, setCompleteResponse] = useState<AppleRelayResponse | undefined>();
-  const [twoFactorChallengeResponse, setTwoFactorChallengeResponse] = useState<AppleRelayResponse | undefined>();
+  const [twoFactorChallengeResponse, setTwoFactorChallengeResponse] = useState<
+    AppleRelayResponse | undefined
+  >();
   const [error, setError] = useState<string | undefined>();
   const sessionRef = useRef<AppleIDLoginResult | undefined>(undefined);
 

package/src/core/device-install/apple/client.ts

@@ -29,9 +29,7 @@ export type AppleIDLoginResult = {
   close: () => Promise<void>;
 };
 
-type TwoFactorMethod =
-  | { type: 'trustedDevice' }
-  | { type: 'phone'; phoneNumberId: number; mode: string };
+type TwoFactorMethod = { type: 'trustedDevice' } | { type: 'phone'; phoneNumberId: number; mode: string };
 
 export async function startBrowserOwnedAppleIDLogin({
   limbuildApiUrl,
@@ -44,7 +42,9 @@ export async function startBrowserOwnedAppleIDLogin({
     const srp = new AppleGsaSrpClient(accountName);
     const initResponse = await proxySrpInit(limbuildApiUrl, appleSessionId, await srp.init(), token);
     if (initResponse.status < 200 || initResponse.status >= 300) {
-      throw new Error(`Apple SRP init failed: HTTP ${initResponse.status} ${initResponse.rawBody ?? ''}`.trim());
+      throw new Error(
+        `Apple SRP init failed: HTTP ${initResponse.status} ${initResponse.rawBody ?? ''}`.trim(),
+      );
     }
     if (!initResponse.body) {
       throw new Error('Apple SRP init response did not include a body.');
@@ -66,17 +66,20 @@ export async function startBrowserOwnedAppleIDLogin({
     if (requiresTwoFactor) {
       twoFactorChallengeResponse = await triggerTrustedDeviceTwoFactor(limbuildApiUrl, appleSessionId, token);
       const phone = trustedPhoneNumberFromChallenge(twoFactorChallengeResponse.body);
-      if (phone) {
+      // Only route codes through the phone/SMS endpoint when Apple actually
+      // falls back to phone verification (HTTP 412). The trusted-device
+      // challenge body frequently includes trusted-phone metadata even for a
+      // normal device push; routing those codes to the phone endpoint breaks
+      // trusted-device login.
+      if (twoFactorChallengeResponse.status === 412) {
+        if (!phone) {
+          throw new Error('Apple requested phone verification but did not include a trusted phone number.');
+        }
         twoFactorMethod = {
           type: 'phone',
           phoneNumberId: phone.id,
           mode: phone.pushMode ?? 'sms',
         };
-      }
-      if (twoFactorChallengeResponse.status === 412) {
-        if (!phone) {
-          throw new Error('Apple requested phone verification but did not include a trusted phone number.');
-        }
         twoFactorChallengeResponse = await triggerPhoneTwoFactor(
           limbuildApiUrl,
           appleSessionId,
@@ -93,7 +96,9 @@ export async function startBrowserOwnedAppleIDLogin({
         );
       }
     } else if (completeResponse.status < 200 || completeResponse.status >= 300) {
-      throw new Error(`Apple SRP complete failed: HTTP ${completeResponse.status} ${completeResponse.rawBody ?? ''}`.trim());
+      throw new Error(
+        `Apple SRP complete failed: HTTP ${completeResponse.status} ${completeResponse.rawBody ?? ''}`.trim(),
+      );
     }
     return {
       appleSessionId,
@@ -102,18 +107,20 @@ export async function startBrowserOwnedAppleIDLogin({
       requiresTwoFactor,
       finishTwoFactor: async (code) => {
         const response =
-          twoFactorMethod.type === 'phone'
-            ? await proxyPhoneTwoFactorCode(
-                limbuildApiUrl,
-                appleSessionId,
-                twoFactorMethod.phoneNumberId,
-                code,
-                twoFactorMethod.mode,
-                token,
-              )
-            : await proxyTwoFactorCode(limbuildApiUrl, appleSessionId, code, token);
+          twoFactorMethod.type === 'phone' ?
+            await proxyPhoneTwoFactorCode(
+              limbuildApiUrl,
+              appleSessionId,
+              twoFactorMethod.phoneNumberId,
+              code,
+              twoFactorMethod.mode,
+              token,
+            )
+          : await proxyTwoFactorCode(limbuildApiUrl, appleSessionId, code, token);
         if (response.status < 200 || response.status >= 300) {
-          throw new Error(`Apple two-factor code failed: HTTP ${response.status} ${response.rawBody ?? ''}`.trim());
+          throw new Error(
+            `Apple two-factor code failed: HTTP ${response.status} ${response.rawBody ?? ''}`.trim(),
+          );
         }
         return response;
       },