@limrun/ui 0.14.0-rc.2 → 0.14.0-rc.4

package/dist/play-publish/index.cjs

@@ -0,0 +1 @@
+"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const f="https://accounts.google.com/gsi/client",w="https://www.googleapis.com/auth/androidpublisher";function u(){return globalThis.google?.accounts?.oauth2}let c;function y(){return u()?Promise.resolve():typeof document>"u"?Promise.reject(new Error("Google sign-in requires a browser environment.")):(c||(c=new Promise((o,r)=>{const t=document.createElement("script");t.src=f,t.async=!0,t.addEventListener("load",()=>{u()?o():r(new Error("Google sign-in script loaded without the OAuth client."))},{once:!0}),t.addEventListener("error",()=>{t.remove(),r(new Error("Failed to load the Google sign-in script."))},{once:!0}),document.head.appendChild(t)}),c.catch(()=>{c=void 0})),c)}function m(o){return u()?p(o):y().then(()=>p(o))}function p({clientId:o,scope:r=w}){return new Promise((t,n)=>{u().initTokenClient({client_id:o,scope:r,callback:e=>{if(e.error){n(new Error(e.error_description||e.error));return}if(!e.access_token){n(new Error("Google returned no access token."));return}t(e.access_token)},error_callback:e=>{const a=e?.type==="popup_failed_to_open"?"Google sign-in popup was blocked by the browser.":"Google sign-in was cancelled.";n(new Error(e?.message||a))}}).requestAccessToken()})}class l extends Error{code;status;constructor(r,t={}){super(r),this.name="PlaystorePublishError",this.code=t.code,this.status=t.status}}async function b(o){const{registryApiUrl:r,token:t,organizationId:n,...h}=o;let e;try{e=new URL(r)}catch{throw new l(`Invalid registry URL: ${r}`)}e.pathname=`${e.pathname.replace(/\/$/,"")}/android/playstore/publish`,e.search="",e.hash="";const a={"Content-Type":"application/json"};t&&(a.Authorization=`Bearer ${t}`),n&&(a["X-Limrun-Organization"]=n);let s;try{s=await fetch(e.toString(),{method:"POST",headers:a,body:JSON.stringify(h)})}catch(d){throw new l(`Cannot reach the registry: ${d instanceof Error?d.message:String(d)}`)}const g=await s.text();let i;try{i=g?JSON.parse(g):void 0}catch{i=void 0}if(!s.ok)throw new l(i?.message||`Play publish failed with HTTP ${s.status}`,{code:i?.code,status:s.status});if(typeof i?.versionCode!="number")throw new l("Play publish response is missing versionCode.",{status:s.status});return{versionCode:i.versionCode}}exports.ANDROID_PUBLISHER_SCOPE=w;exports.PlaystorePublishError=l;exports.loadGoogleIdentityServices=y;exports.publishToPlaystore=b;exports.requestGoogleAccessToken=m;

package/dist/play-publish/index.d.ts

@@ -0,0 +1,2 @@
+export { ANDROID_PUBLISHER_SCOPE, loadGoogleIdentityServices, requestGoogleAccessToken, type RequestGoogleAccessTokenInput, } from '../core/play-publish/google';
+export { publishToPlaystore, PlaystorePublishError, type PlaystorePublishInput, type PlaystorePublishResult, } from '../core/play-publish/publish';

package/dist/play-publish/index.js

@@ -0,0 +1,109 @@
+const w = "https://accounts.google.com/gsi/client", f = "https://www.googleapis.com/auth/androidpublisher";
+function u() {
+  return globalThis.google?.accounts?.oauth2;
+}
+let c;
+function y() {
+  return u() ? Promise.resolve() : typeof document > "u" ? Promise.reject(new Error("Google sign-in requires a browser environment.")) : (c || (c = new Promise((o, r) => {
+    const t = document.createElement("script");
+    t.src = w, t.async = !0, t.addEventListener(
+      "load",
+      () => {
+        u() ? o() : r(new Error("Google sign-in script loaded without the OAuth client."));
+      },
+      { once: !0 }
+    ), t.addEventListener(
+      "error",
+      () => {
+        t.remove(), r(new Error("Failed to load the Google sign-in script."));
+      },
+      { once: !0 }
+    ), document.head.appendChild(t);
+  }), c.catch(() => {
+    c = void 0;
+  })), c);
+}
+function m(o) {
+  return u() ? p(o) : y().then(() => p(o));
+}
+function p({
+  clientId: o,
+  scope: r = f
+}) {
+  return new Promise((t, n) => {
+    u().initTokenClient({
+      client_id: o,
+      scope: r,
+      callback: (e) => {
+        if (e.error) {
+          n(new Error(e.error_description || e.error));
+          return;
+        }
+        if (!e.access_token) {
+          n(new Error("Google returned no access token."));
+          return;
+        }
+        t(e.access_token);
+      },
+      error_callback: (e) => {
+        const a = e?.type === "popup_failed_to_open" ? "Google sign-in popup was blocked by the browser." : "Google sign-in was cancelled.";
+        n(new Error(e?.message || a));
+      }
+    }).requestAccessToken();
+  });
+}
+class l extends Error {
+  code;
+  status;
+  constructor(r, t = {}) {
+    super(r), this.name = "PlaystorePublishError", this.code = t.code, this.status = t.status;
+  }
+}
+async function b(o) {
+  const { registryApiUrl: r, token: t, organizationId: n, ...h } = o;
+  let e;
+  try {
+    e = new URL(r);
+  } catch {
+    throw new l(`Invalid registry URL: ${r}`);
+  }
+  e.pathname = `${e.pathname.replace(/\/$/, "")}/android/playstore/publish`, e.search = "", e.hash = "";
+  const a = { "Content-Type": "application/json" };
+  t && (a.Authorization = `Bearer ${t}`), n && (a["X-Limrun-Organization"] = n);
+  let s;
+  try {
+    s = await fetch(e.toString(), {
+      method: "POST",
+      headers: a,
+      body: JSON.stringify(h)
+    });
+  } catch (d) {
+    throw new l(
+      `Cannot reach the registry: ${d instanceof Error ? d.message : String(d)}`
+    );
+  }
+  const g = await s.text();
+  let i;
+  try {
+    i = g ? JSON.parse(g) : void 0;
+  } catch {
+    i = void 0;
+  }
+  if (!s.ok)
+    throw new l(i?.message || `Play publish failed with HTTP ${s.status}`, {
+      code: i?.code,
+      status: s.status
+    });
+  if (typeof i?.versionCode != "number")
+    throw new l("Play publish response is missing versionCode.", {
+      status: s.status
+    });
+  return { versionCode: i.versionCode };
+}
+export {
+  f as ANDROID_PUBLISHER_SCOPE,
+  l as PlaystorePublishError,
+  y as loadGoogleIdentityServices,
+  b as publishToPlaystore,
+  m as requestGoogleAccessToken
+};

package/dist/play-publish/react.cjs

@@ -0,0 +1 @@
+"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const e=require("react"),I=require("../errors-BSkqS7U-.js"),d=require("./index.cjs");function N({registryApiUrl:f,token:h,organizationId:y,googleClientId:g}){const[k,t]=e.useState("idle"),[S,M]=e.useState(),[P,l]=e.useState(),[T,n]=e.useState(),[p,i]=e.useState(),v=e.useRef(void 0),s=e.useRef(0),a=e.useRef(!1),C=e.useCallback(()=>d.loadGoogleIdentityServices().then(()=>!0,()=>!1),[]),b=e.useCallback(r=>{n(r),i(void 0),l(void 0),t("error")},[]),R=e.useCallback(async()=>{if(a.current)return!1;if(!g)return b("Google OAuth client ID is not configured."),!1;a.current=!0;const r=s.current;t("signing-in"),n(void 0),i(void 0);try{const o=await d.requestGoogleAccessToken({clientId:g});return v.current=o,M(o),r===s.current?t("ready"):t(u=>u==="idle"?"ready":u),!0}catch(o){return r===s.current&&(n(I.errorMessage(o)),t("error")),!1}finally{a.current=!1}},[g]),G=e.useCallback(async r=>{if(a.current)return;if(!f){b("Registry URL is not configured.");return}const o=v.current;if(!o){b("Sign in with Google before publishing.");return}a.current=!0;const u=s.current;t("publishing"),n(void 0),i(void 0),l(void 0);try{const c=await d.publishToPlaystore({registryApiUrl:f,token:h,organizationId:y,accessToken:o,packageName:r.packageName,assetId:r.assetId,assetName:r.assetName,track:r.track,releaseStatus:r.releaseStatus});return u===s.current&&(l(c.versionCode),t("published")),c}catch(c){u===s.current&&(n(I.errorMessage(c)),c instanceof d.PlaystorePublishError&&i(c.code),t("error"));return}finally{a.current=!1}},[f,h,y]),m=e.useCallback(()=>{s.current+=1,l(void 0),n(void 0),i(void 0),t(v.current?"ready":"idle")},[]);return e.useMemo(()=>({status:k,isSignedIn:S!==void 0,versionCode:P,error:T,errorCode:p,preloadGoogle:C,signInWithGoogle:R,publish:G,reset:m}),[k,S,P,T,p,C,R,G,m])}exports.usePlaystorePublish=N;

package/dist/play-publish/react.d.ts

@@ -0,0 +1,31 @@
+import { PlaystorePublishInput, PlaystorePublishResult } from './index';
+export type UsePlaystorePublishOptions = Partial<Pick<PlaystorePublishInput, 'registryApiUrl' | 'token' | 'organizationId'>> & {
+    /** Google OAuth Web application client ID used for sign-in. */
+    googleClientId?: string;
+};
+export type PlaystorePublishStatus = 'idle' | 'signing-in' | 'ready' | 'publishing' | 'published' | 'error';
+export type PlaystorePublishRequest = Omit<PlaystorePublishInput, 'registryApiUrl' | 'token' | 'organizationId' | 'accessToken'>;
+export type UsePlaystorePublishResult = {
+    status: PlaystorePublishStatus;
+    isSignedIn: boolean;
+    versionCode?: number;
+    error?: string;
+    /** Registry error code driving per-cause UX, e.g. versionCodeExists. */
+    errorCode?: string;
+    /**
+     * Warm up the Google sign-in script (e.g. on dialog open) so
+     * signInWithGoogle stays synchronous with the click. Resolves true once
+     * the script is ready; await it to gate the sign-in button, or ignore
+     * the result and rely on the blocked-popup error plus retry.
+     */
+    preloadGoogle: () => Promise<boolean>;
+    signInWithGoogle: () => Promise<boolean>;
+    publish: (request: PlaystorePublishRequest) => Promise<PlaystorePublishResult | undefined>;
+    /**
+     * Clears the outcome state (keeps the Google session). Does not cancel an
+     * in-flight sign-in or publish: their completion is ignored status-wise
+     * and new calls stay refused until the in-flight one settles.
+     */
+    reset: () => void;
+};
+export declare function usePlaystorePublish({ registryApiUrl, token, organizationId, googleClientId, }: UsePlaystorePublishOptions): UsePlaystorePublishResult;

package/dist/play-publish/react.js

@@ -0,0 +1,91 @@
+import { useState as u, useRef as y, useCallback as d, useMemo as E } from "react";
+import { e as N } from "../errors-gy8yQJos.mjs";
+import { loadGoogleIdentityServices as x, requestGoogleAccessToken as M, publishToPlaystore as A, PlaystorePublishError as D } from "./index.js";
+function W({
+  registryApiUrl: f,
+  token: k,
+  organizationId: m,
+  googleClientId: g
+}) {
+  const [b, r] = u("idle"), [p, w] = u(), [T, l] = u(), [G, s] = u(), [S, c] = u(), v = y(void 0), t = y(0), n = y(!1), R = d(
+    () => x().then(
+      () => !0,
+      () => !1
+    ),
+    []
+  ), h = d((e) => {
+    s(e), c(void 0), l(void 0), r("error");
+  }, []), P = d(async () => {
+    if (n.current)
+      return !1;
+    if (!g)
+      return h("Google OAuth client ID is not configured."), !1;
+    n.current = !0;
+    const e = t.current;
+    r("signing-in"), s(void 0), c(void 0);
+    try {
+      const o = await M({ clientId: g });
+      return v.current = o, w(o), e === t.current ? r("ready") : r((a) => a === "idle" ? "ready" : a), !0;
+    } catch (o) {
+      return e === t.current && (s(N(o)), r("error")), !1;
+    } finally {
+      n.current = !1;
+    }
+  }, [g]), C = d(
+    async (e) => {
+      if (n.current)
+        return;
+      if (!f) {
+        h("Registry URL is not configured.");
+        return;
+      }
+      const o = v.current;
+      if (!o) {
+        h("Sign in with Google before publishing.");
+        return;
+      }
+      n.current = !0;
+      const a = t.current;
+      r("publishing"), s(void 0), c(void 0), l(void 0);
+      try {
+        const i = await A({
+          registryApiUrl: f,
+          token: k,
+          organizationId: m,
+          accessToken: o,
+          packageName: e.packageName,
+          assetId: e.assetId,
+          assetName: e.assetName,
+          track: e.track,
+          releaseStatus: e.releaseStatus
+        });
+        return a === t.current && (l(i.versionCode), r("published")), i;
+      } catch (i) {
+        a === t.current && (s(N(i)), i instanceof D && c(i.code), r("error"));
+        return;
+      } finally {
+        n.current = !1;
+      }
+    },
+    [f, k, m]
+  ), I = d(() => {
+    t.current += 1, l(void 0), s(void 0), c(void 0), r(v.current ? "ready" : "idle");
+  }, []);
+  return E(
+    () => ({
+      status: b,
+      isSignedIn: p !== void 0,
+      versionCode: T,
+      error: G,
+      errorCode: S,
+      preloadGoogle: R,
+      signInWithGoogle: P,
+      publish: C,
+      reset: I
+    }),
+    [b, p, T, G, S, R, P, C, I]
+  );
+}
+export {
+  W as usePlaystorePublish
+};

package/dist/{provisioning-DKbkBO-p.mjs → provisioning-B_DefBEp.mjs}

@@ -1,4 +1,4 @@
-import { e as c, a as u, n as d, b as f, c as l, i as r } from "./browser-storage-Cx9eW-bm.mjs";
+import { e as c, a as u, n as d, b as f, c as l, i as r } from "./browser-storage-BnO-Ma-e.mjs";
 function g() {
   return {
     method: "POST",
@@ -224,15 +224,15 @@ export {
   S as d,
   v as e,
   I as f,
-  q as g,
-  P as h,
-  y as i,
-  R as j,
-  w as k,
+  O as g,
+  q as h,
+  P as i,
+  y as j,
+  R as k,
   g as l,
-  A as m,
-  H as n,
-  O as o,
+  w as m,
+  A as n,
+  H as o,
   E as p,
   D as r,
   C as s

package/dist/{provisioning-Va0PH4Kk.js → provisioning-BlQMccX_.js}

@@ -1 +1 @@
-"use strict";const a=require("./browser-storage-jJaIht4K.js");function c(){return{method:"POST",path:"/account/listTeams.action",payload:{}}}function u({bundleID:e,teamID:t=""}){return s("/account/ios/identifiers/listAppIds.action",t,{sort:"name=asc"})}function d({deviceUDID:e,teamID:t=""}){return s("/account/ios/device/listDevices.action",t,{sort:"name=asc",includeRemovedDevices:!1})}function f(e=""){return s("/account/ios/certificate/listCertRequests.action",e,{sort:"name=asc",types:"83Q87W3TGH,5QPB9NHCEI"})}function l(e=""){return s("/account/ios/certificate/listCertRequests.action",e,{sort:"name=asc",types:"WXV89964HE,R58UK2EWSO"})}function p({bundleID:e,teamID:t=""}){return s("/account/ios/profile/listProvisioningProfiles.action",t,{search:e,sort:"name=asc"})}function m({bundleID:e,teamID:t=""}){return s("/account/ios/profile/listProvisioningProfiles.action",t,{search:e,sort:"name=asc",distributionType:"adhoc"})}function R({deviceUDID:e,teamID:t="",name:i="Limrun iPhone"}){return{method:"POST",path:"/account/ios/device/addDevices.action",payload:{teamId:t,deviceNames:i,deviceNumbers:a.normalizeUDID(e),deviceClasses:"iphone",register:"single"}}}function g({bundleID:e,teamID:t="",name:i}){return{method:"POST",path:"/account/ios/identifiers/addAppId.action",payload:{teamId:t,name:i??e,identifier:e,type:"explicit"}}}function q({csrPEM:e,teamID:t=""}){return{method:"POST",path:"/account/ios/certificate/submitCertificateRequest.action",payload:{teamId:t,type:"83Q87W3TGH",csrContent:e}}}function v({csrPEM:e,teamID:t=""}){return{method:"POST",path:"/account/ios/certificate/submitCertificateRequest.action",payload:{teamId:t,type:"WXV89964HE",csrContent:e}}}function P(e,t=""){return{method:"GET",path:"/account/ios/certificate/downloadCertificateContent.action",payload:{teamId:t,certificateId:e,type:"83Q87W3TGH"}}}function D(e,t=""){return{method:"GET",path:"/account/ios/certificate/downloadCertificateContent.action",payload:{teamId:t,certificateId:e,type:"WXV89964HE"}}}function I({bundleID:e,teamID:t="",appIDID:i,certificateID:o,deviceIDs:n,name:r}){return{method:"POST",path:"/account/ios/profile/createProvisioningProfile.action",payload:{teamId:t,provisioningProfileName:r??`Limrun ${e}`,certificateIds:[o],appIdId:i,deviceIds:n,distributionType:"limited",subPlatform:"ios"}}}function h({bundleID:e,teamID:t="",appIDID:i,certificateID:o,deviceIDs:n,name:r}){return{method:"POST",path:"/account/ios/profile/createProvisioningProfile.action",payload:{teamId:t,provisioningProfileName:r??`Limrun Ad Hoc ${e}`,certificateIds:[o],appIdId:i,deviceIds:n,distributionType:"adhoc",subPlatform:"ios"}}}function C(e,t=""){return{method:"GET",path:"/account/ios/profile/downloadProfileContent",payload:{teamId:t,provisioningProfileId:e}}}async function b({bundleID:e,deviceUDID:t,teamID:i,signingMode:o}){const n=await a.getSigningAssets({bundleID:e,deviceUDID:t,signingMode:o});if(!(!n||!S(n,{bundleID:e,deviceUDID:t,teamID:i,signingMode:o})))return n}async function y(e){return a.putSigningAssets({...e,certificateFileName:e.certificateID?`${e.certificateID}.p12`:`apple-${e.signingMode??"development"}.p12`,certificatePassword:e.certificatePassword||void 0,signingMode:e.signingMode,profileFileName:e.profile.uuid?`${e.profile.uuid}.mobileprovision`:`${e.signingMode??"development"}.mobileprovision`})}function S(e,{bundleID:t,deviceUDID:i,teamID:o,signingMode:n="development"}){return(e.signingMode??"development")!==n||!a.profileMatchesBundleID(e.profile,t)||o&&e.teamID&&e.teamID!==o||i&&!a.profileContainsDevice(e.profile,i)||e.profile.expirationDate&&new Date(e.profile.expirationDate).getTime()<=Date.now()?!1:a.normalizeBundleID(e.bundleID)===a.normalizeBundleID(t)}function s(e,t,i={}){const o={pageNumber:1,pageSize:200,...i};return t&&(o.teamId=t),{method:"POST",path:e,payload:o}}exports.createAdHocProfileRequest=h;exports.createBundleIDRequest=g;exports.createDevelopmentProfileRequest=I;exports.downloadCertificateRequest=P;exports.downloadDistributionCertificateRequest=D;exports.downloadProfileRequest=C;exports.findAdHocProfilesRequest=m;exports.findBundleIDRequest=u;exports.findDevelopmentCertificatesRequest=f;exports.findDevelopmentProfilesRequest=p;exports.findDeviceRequest=d;exports.findDistributionCertificatesRequest=l;exports.getReusableAppleSigningAssets=b;exports.listTeamsRequest=c;exports.putAppleGeneratedSigningAssets=y;exports.registerDeviceRequest=R;exports.submitDevelopmentCSRRequest=q;exports.submitDistributionCSRRequest=v;
+"use strict";const a=require("./browser-storage-DLxIqZk5.js");function c(){return{method:"POST",path:"/account/listTeams.action",payload:{}}}function u({bundleID:e,teamID:t=""}){return s("/account/ios/identifiers/listAppIds.action",t,{sort:"name=asc"})}function d({deviceUDID:e,teamID:t=""}){return s("/account/ios/device/listDevices.action",t,{sort:"name=asc",includeRemovedDevices:!1})}function f(e=""){return s("/account/ios/certificate/listCertRequests.action",e,{sort:"name=asc",types:"83Q87W3TGH,5QPB9NHCEI"})}function l(e=""){return s("/account/ios/certificate/listCertRequests.action",e,{sort:"name=asc",types:"WXV89964HE,R58UK2EWSO"})}function p({bundleID:e,teamID:t=""}){return s("/account/ios/profile/listProvisioningProfiles.action",t,{search:e,sort:"name=asc"})}function m({bundleID:e,teamID:t=""}){return s("/account/ios/profile/listProvisioningProfiles.action",t,{search:e,sort:"name=asc",distributionType:"adhoc"})}function R({deviceUDID:e,teamID:t="",name:i="Limrun iPhone"}){return{method:"POST",path:"/account/ios/device/addDevices.action",payload:{teamId:t,deviceNames:i,deviceNumbers:a.normalizeUDID(e),deviceClasses:"iphone",register:"single"}}}function g({bundleID:e,teamID:t="",name:i}){return{method:"POST",path:"/account/ios/identifiers/addAppId.action",payload:{teamId:t,name:i??e,identifier:e,type:"explicit"}}}function q({csrPEM:e,teamID:t=""}){return{method:"POST",path:"/account/ios/certificate/submitCertificateRequest.action",payload:{teamId:t,type:"83Q87W3TGH",csrContent:e}}}function v({csrPEM:e,teamID:t=""}){return{method:"POST",path:"/account/ios/certificate/submitCertificateRequest.action",payload:{teamId:t,type:"WXV89964HE",csrContent:e}}}function P(e,t=""){return{method:"GET",path:"/account/ios/certificate/downloadCertificateContent.action",payload:{teamId:t,certificateId:e,type:"83Q87W3TGH"}}}function D(e,t=""){return{method:"GET",path:"/account/ios/certificate/downloadCertificateContent.action",payload:{teamId:t,certificateId:e,type:"WXV89964HE"}}}function I({bundleID:e,teamID:t="",appIDID:i,certificateID:o,deviceIDs:n,name:r}){return{method:"POST",path:"/account/ios/profile/createProvisioningProfile.action",payload:{teamId:t,provisioningProfileName:r??`Limrun ${e}`,certificateIds:[o],appIdId:i,deviceIds:n,distributionType:"limited",subPlatform:"ios"}}}function h({bundleID:e,teamID:t="",appIDID:i,certificateID:o,deviceIDs:n,name:r}){return{method:"POST",path:"/account/ios/profile/createProvisioningProfile.action",payload:{teamId:t,provisioningProfileName:r??`Limrun Ad Hoc ${e}`,certificateIds:[o],appIdId:i,deviceIds:n,distributionType:"adhoc",subPlatform:"ios"}}}function C(e,t=""){return{method:"GET",path:"/account/ios/profile/downloadProfileContent",payload:{teamId:t,provisioningProfileId:e}}}async function b({bundleID:e,deviceUDID:t,teamID:i,signingMode:o}){const n=await a.getSigningAssets({bundleID:e,deviceUDID:t,signingMode:o});if(!(!n||!S(n,{bundleID:e,deviceUDID:t,teamID:i,signingMode:o})))return n}async function y(e){return a.putSigningAssets({...e,certificateFileName:e.certificateID?`${e.certificateID}.p12`:`apple-${e.signingMode??"development"}.p12`,certificatePassword:e.certificatePassword||void 0,signingMode:e.signingMode,profileFileName:e.profile.uuid?`${e.profile.uuid}.mobileprovision`:`${e.signingMode??"development"}.mobileprovision`})}function S(e,{bundleID:t,deviceUDID:i,teamID:o,signingMode:n="development"}){return(e.signingMode??"development")!==n||!a.profileMatchesBundleID(e.profile,t)||o&&e.teamID&&e.teamID!==o||i&&!a.profileContainsDevice(e.profile,i)||e.profile.expirationDate&&new Date(e.profile.expirationDate).getTime()<=Date.now()?!1:a.normalizeBundleID(e.bundleID)===a.normalizeBundleID(t)}function s(e,t,i={}){const o={pageNumber:1,pageSize:200,...i};return t&&(o.teamId=t),{method:"POST",path:e,payload:o}}exports.createAdHocProfileRequest=h;exports.createBundleIDRequest=g;exports.createDevelopmentProfileRequest=I;exports.downloadCertificateRequest=P;exports.downloadDistributionCertificateRequest=D;exports.downloadProfileRequest=C;exports.findAdHocProfilesRequest=m;exports.findBundleIDRequest=u;exports.findDevelopmentCertificatesRequest=f;exports.findDevelopmentProfilesRequest=p;exports.findDeviceRequest=d;exports.findDistributionCertificatesRequest=l;exports.getReusableAppleSigningAssets=b;exports.listTeamsRequest=c;exports.putAppleGeneratedSigningAssets=y;exports.registerDeviceRequest=R;exports.submitDevelopmentCSRRequest=q;exports.submitDistributionCSRRequest=v;

package/package.json

@@ -1,8 +1,9 @@
 {
   "name": "@limrun/ui",
-  "version": "0.14.0-rc.2",
+  "version": "0.14.0-rc.4",
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "tag": "next"
   },
   "main": "./dist/index.js",
   "module": "./dist/index.js",
@@ -23,6 +24,11 @@
       "import": "./dist/app-store-relay/react.js",
       "require": "./dist/app-store-relay/react.cjs"
     },
+    "./apple-credentials": {
+      "types": "./dist/apple-credentials/index.d.ts",
+      "import": "./dist/apple-credentials/index.js",
+      "require": "./dist/apple-credentials/index.cjs"
+    },
     "./device-build": {
       "types": "./dist/device-build/index.d.ts",
       "import": "./dist/device-build/index.js",
@@ -43,6 +49,16 @@
       "import": "./dist/device-install/react.js",
       "require": "./dist/device-install/react.cjs"
     },
+    "./play-publish": {
+      "types": "./dist/play-publish/index.d.ts",
+      "import": "./dist/play-publish/index.js",
+      "require": "./dist/play-publish/index.cjs"
+    },
+    "./play-publish/react": {
+      "types": "./dist/play-publish/react.d.ts",
+      "import": "./dist/play-publish/react.js",
+      "require": "./dist/play-publish/react.cjs"
+    },
     "./package.json": "./package.json"
   },
   "scripts": {

package/src/app-store-relay/index.test.ts

@@ -21,12 +21,12 @@ describe('Registry relay primitives', () => {
     expect(relay.request.mock.calls[0]).toMatchObject([
       'provisioning',
       {
-      method: 'POST',
-      path: '/account/ios/profile/deleteProvisioningProfile.action',
-      payload: {
-        teamId: 'TEAM',
-        provisioningProfileId: 'PROFILE',
-      },
+        method: 'POST',
+        path: '/account/ios/profile/deleteProvisioningProfile.action',
+        payload: {
+          teamId: 'TEAM',
+          provisioningProfileId: 'PROFILE',
+        },
       },
     ]);
   });

package/src/app-store-relay/react.ts

@@ -5,6 +5,7 @@ import {
   type AppleIDLoginResult,
   type AppleRelayResponse,
 } from './index';
+import { errorMessage } from '../core/errors';
 
 export type UseAppleIDLoginOptions = Pick<AppleIDLoginInput, 'registryApiUrl' | 'token' | 'organizationId'>;
 
@@ -29,7 +30,11 @@ export type UseAppleIDLoginResult = {
   close: () => Promise<void>;
 };
 
-export function useAppleIDLogin({ registryApiUrl, token, organizationId }: UseAppleIDLoginOptions): UseAppleIDLoginResult {
+export function useAppleIDLogin({
+  registryApiUrl,
+  token,
+  organizationId,
+}: UseAppleIDLoginOptions): UseAppleIDLoginResult {
   const [status, setStatus] = useState<AppleIDLoginStatus>('idle');
   const [session, setSession] = useState<AppleIDLoginResult | undefined>();
   const [completeResponse, setCompleteResponse] = useState<AppleRelayResponse | undefined>();
@@ -124,7 +129,3 @@ export function useAppleIDLogin({ registryApiUrl, token, organizationId }: UseAp
     close,
   };
 }
-
-function errorMessage(error: unknown) {
-  return error instanceof Error ? error.message : String(error);
-}

package/src/apple-credentials/index.test.ts

@@ -0,0 +1,158 @@
+// @vitest-environment node
+
+import forge from 'node-forge';
+import { describe, expect, test } from 'vitest';
+import type { AppleRelayWebSocketClient } from '../core/device-install/apple';
+import {
+  APPLE_CERTIFICATE_SECRET_TYPE,
+  appleCertificateSecretName,
+  ensureAppleCertificateSecret,
+  type SigningSecret,
+  type SigningSecretMetadata,
+  type SigningSecretStore,
+  type SigningSecretType,
+} from './index';
+
+/**
+ * A self-signed certificate is enough for exportAppleCertificateP12: the
+ * p12 bundling never verifies that the key matches the certificate.
+ */
+function selfSignedCertificateBase64() {
+  const keys = forge.pki.rsa.generateKeyPair(1024);
+  const cert = forge.pki.createCertificate();
+  cert.publicKey = keys.publicKey;
+  cert.serialNumber = '01';
+  cert.validity.notBefore = new Date();
+  cert.validity.notAfter = new Date(Date.now() + 24 * 60 * 60 * 1000);
+  const attrs = [{ name: 'commonName', value: 'Apple Development Test' }];
+  cert.setSubject(attrs);
+  cert.setIssuer(attrs);
+  cert.sign(keys.privateKey);
+  return forge.util.encode64(forge.asn1.toDer(forge.pki.certificateToAsn1(cert)).getBytes());
+}
+
+function memorySecretStore(options: { failPuts?: () => boolean } = {}) {
+  const entries = new Map<string, SigningSecret>();
+  const store: SigningSecretStore = {
+    async put(type: SigningSecretType, name: string, data: Record<string, string>) {
+      if (options.failPuts?.()) {
+        throw new Error('secret store unavailable');
+      }
+      const secret: SigningSecret = { type, name, data, createdAt: new Date().toISOString() };
+      entries.set(`${type}:${name}`, secret);
+      return secret;
+    },
+    async get(type: SigningSecretType, name: string) {
+      return entries.get(`${type}:${name}`);
+    },
+    async list() {
+      return [...entries.values()].map(({ data: _data, ...metadata }): SigningSecretMetadata => metadata);
+    },
+    async delete(type: SigningSecretType, name: string) {
+      entries.delete(`${type}:${name}`);
+    },
+  };
+  return { store, entries };
+}
+
+type PortalState = { mintedCertificateIds: string[]; certificateBase64: string };
+
+/**
+ * Fakes the relay's provisioning proxy: minting appends to
+ * mintedCertificateIds, listing reflects what has been minted so far.
+ */
+function fakePortalRelay(state: PortalState): AppleRelayWebSocketClient {
+  return {
+    async request(_type: string, payload: unknown) {
+      const request = payload as { path: string };
+      if (request.path.includes('listCertRequests')) {
+        return portalOK({
+          certRequests: state.mintedCertificateIds.map((certificateId) => ({ certificateId })),
+        });
+      }
+      if (request.path.includes('submitCertificateRequest')) {
+        const certificateId = `CERT${state.mintedCertificateIds.length + 1}`;
+        state.mintedCertificateIds.push(certificateId);
+        return portalOK({
+          certRequest: {
+            certificateId,
+            serialNum: '01',
+            expirationDateString: '2027-01-01',
+          },
+        });
+      }
+      if (request.path.includes('downloadCertificateContent')) {
+        return { status: 200, statusText: 'OK', rawBodyBase64: state.certificateBase64 };
+      }
+      throw new Error(`unexpected portal path: ${request.path}`);
+    },
+  } as unknown as AppleRelayWebSocketClient;
+}
+
+function portalOK(body: Record<string, unknown>) {
+  return { status: 200, statusText: 'OK', body: { resultCode: 0, ...body } };
+}
+
+describe('ensureAppleCertificateSecret', () => {
+  const teamId = 'TEAM1';
+  const secretName = appleCertificateSecretName(teamId, 'DEVELOPMENT');
+
+  test('surfaces an actionable error when the store write fails after minting', async () => {
+    const state: PortalState = {
+      mintedCertificateIds: [],
+      certificateBase64: selfSignedCertificateBase64(),
+    };
+    const broken = memorySecretStore({ failPuts: () => true });
+
+    await expect(
+      ensureAppleCertificateSecret({
+        relay: fakePortalRelay(state),
+        teamId,
+        secretStore: broken.store,
+      }),
+    ).rejects.toThrow(/revoke certificate CERT1/);
+    expect(state.mintedCertificateIds).toEqual(['CERT1']);
+  });
+
+  test('mints and stores the certificate with its type in the secret name', async () => {
+    const state: PortalState = {
+      mintedCertificateIds: [],
+      certificateBase64: selfSignedCertificateBase64(),
+    };
+    const org = memorySecretStore();
+
+    const result = await ensureAppleCertificateSecret({
+      relay: fakePortalRelay(state),
+      teamId,
+      secretStore: org.store,
+    });
+    expect(result.created).toBe(true);
+    expect(result.certificateId).toBe('CERT1');
+    const stored = await org.store.get(APPLE_CERTIFICATE_SECRET_TYPE, secretName);
+    expect(stored?.data.certificateID).toBe('CERT1');
+    expect(stored?.data.certificateType).toBe('DEVELOPMENT');
+    expect(stored?.data.certificateP12Base64).toBeTruthy();
+  });
+
+  test('reuses the stored certificate when it is still on the team', async () => {
+    const state: PortalState = {
+      mintedCertificateIds: ['CERT1'],
+      certificateBase64: selfSignedCertificateBase64(),
+    };
+    const org = memorySecretStore();
+    await org.store.put(APPLE_CERTIFICATE_SECRET_TYPE, secretName, {
+      certificateP12Base64: 'cDEy',
+      certificateID: 'CERT1',
+      teamID: teamId,
+    });
+
+    const result = await ensureAppleCertificateSecret({
+      relay: fakePortalRelay(state),
+      teamId,
+      secretStore: org.store,
+    });
+    expect(result.created).toBe(false);
+    expect(result.certificateId).toBe('CERT1');
+    expect(state.mintedCertificateIds).toEqual(['CERT1']);
+  });
+});