@limrun/ui 0.14.0-rc.3 → 0.14.0-rc.4

package/dist/play-publish/index.cjs

@@ -1 +1 @@
-"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const y="https://accounts.google.com/gsi/client",p="https://www.googleapis.com/auth/androidpublisher";function d(){return globalThis.google?.accounts?.oauth2}let c;function w(){return d()?Promise.resolve():typeof document>"u"?Promise.reject(new Error("Google sign-in requires a browser environment.")):(c||(c=new Promise((r,o)=>{const t=document.createElement("script");t.src=y,t.async=!0,t.addEventListener("load",()=>{d()?r():o(new Error("Google sign-in script loaded without the OAuth client."))},{once:!0}),t.addEventListener("error",()=>{t.remove(),o(new Error("Failed to load the Google sign-in script."))},{once:!0}),document.head.appendChild(t)}),c.catch(()=>{c=void 0})),c)}async function f({clientId:r,scope:o=p}){return await w(),new Promise((t,n)=>{d().initTokenClient({client_id:r,scope:o,callback:e=>{if(e.error){n(new Error(e.error_description||e.error));return}if(!e.access_token){n(new Error("Google returned no access token."));return}t(e.access_token)},error_callback:e=>{const a=e?.type==="popup_failed_to_open"?"Google sign-in popup was blocked by the browser.":"Google sign-in was cancelled.";n(new Error(e?.message||a))}}).requestAccessToken()})}class l extends Error{code;status;constructor(o,t={}){super(o),this.name="PlaystorePublishError",this.code=t.code,this.status=t.status}}async function m(r){const{registryApiUrl:o,token:t,organizationId:n,...h}=r;let e;try{e=new URL(o)}catch{throw new l(`Invalid registry URL: ${o}`)}e.pathname=`${e.pathname.replace(/\/$/,"")}/android/playstore/publish`,e.search="",e.hash="";const a={"Content-Type":"application/json"};t&&(a.Authorization=`Bearer ${t}`),n&&(a["X-Limrun-Organization"]=n);let s;try{s=await fetch(e.toString(),{method:"POST",headers:a,body:JSON.stringify(h)})}catch(u){throw new l(`Cannot reach the registry: ${u instanceof Error?u.message:String(u)}`)}const g=await s.text();let i;try{i=g?JSON.parse(g):void 0}catch{i=void 0}if(!s.ok)throw new l(i?.message||`Play publish failed with HTTP ${s.status}`,{code:i?.code,status:s.status});if(typeof i?.versionCode!="number")throw new l("Play publish response is missing versionCode.",{status:s.status});return{versionCode:i.versionCode}}exports.ANDROID_PUBLISHER_SCOPE=p;exports.PlaystorePublishError=l;exports.loadGoogleIdentityServices=w;exports.publishToPlaystore=m;exports.requestGoogleAccessToken=f;
+"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const f="https://accounts.google.com/gsi/client",w="https://www.googleapis.com/auth/androidpublisher";function u(){return globalThis.google?.accounts?.oauth2}let c;function y(){return u()?Promise.resolve():typeof document>"u"?Promise.reject(new Error("Google sign-in requires a browser environment.")):(c||(c=new Promise((o,r)=>{const t=document.createElement("script");t.src=f,t.async=!0,t.addEventListener("load",()=>{u()?o():r(new Error("Google sign-in script loaded without the OAuth client."))},{once:!0}),t.addEventListener("error",()=>{t.remove(),r(new Error("Failed to load the Google sign-in script."))},{once:!0}),document.head.appendChild(t)}),c.catch(()=>{c=void 0})),c)}function m(o){return u()?p(o):y().then(()=>p(o))}function p({clientId:o,scope:r=w}){return new Promise((t,n)=>{u().initTokenClient({client_id:o,scope:r,callback:e=>{if(e.error){n(new Error(e.error_description||e.error));return}if(!e.access_token){n(new Error("Google returned no access token."));return}t(e.access_token)},error_callback:e=>{const a=e?.type==="popup_failed_to_open"?"Google sign-in popup was blocked by the browser.":"Google sign-in was cancelled.";n(new Error(e?.message||a))}}).requestAccessToken()})}class l extends Error{code;status;constructor(r,t={}){super(r),this.name="PlaystorePublishError",this.code=t.code,this.status=t.status}}async function b(o){const{registryApiUrl:r,token:t,organizationId:n,...h}=o;let e;try{e=new URL(r)}catch{throw new l(`Invalid registry URL: ${r}`)}e.pathname=`${e.pathname.replace(/\/$/,"")}/android/playstore/publish`,e.search="",e.hash="";const a={"Content-Type":"application/json"};t&&(a.Authorization=`Bearer ${t}`),n&&(a["X-Limrun-Organization"]=n);let s;try{s=await fetch(e.toString(),{method:"POST",headers:a,body:JSON.stringify(h)})}catch(d){throw new l(`Cannot reach the registry: ${d instanceof Error?d.message:String(d)}`)}const g=await s.text();let i;try{i=g?JSON.parse(g):void 0}catch{i=void 0}if(!s.ok)throw new l(i?.message||`Play publish failed with HTTP ${s.status}`,{code:i?.code,status:s.status});if(typeof i?.versionCode!="number")throw new l("Play publish response is missing versionCode.",{status:s.status});return{versionCode:i.versionCode}}exports.ANDROID_PUBLISHER_SCOPE=w;exports.PlaystorePublishError=l;exports.loadGoogleIdentityServices=y;exports.publishToPlaystore=b;exports.requestGoogleAccessToken=m;

package/dist/play-publish/index.js

@@ -1,21 +1,21 @@
-const p = "https://accounts.google.com/gsi/client", w = "https://www.googleapis.com/auth/androidpublisher";
-function d() {
+const w = "https://accounts.google.com/gsi/client", f = "https://www.googleapis.com/auth/androidpublisher";
+function u() {
   return globalThis.google?.accounts?.oauth2;
 }
 let c;
 function y() {
-  return d() ? Promise.resolve() : typeof document > "u" ? Promise.reject(new Error("Google sign-in requires a browser environment.")) : (c || (c = new Promise((r, o) => {
+  return u() ? Promise.resolve() : typeof document > "u" ? Promise.reject(new Error("Google sign-in requires a browser environment.")) : (c || (c = new Promise((o, r) => {
     const t = document.createElement("script");
-    t.src = p, t.async = !0, t.addEventListener(
+    t.src = w, t.async = !0, t.addEventListener(
       "load",
       () => {
-        d() ? r() : o(new Error("Google sign-in script loaded without the OAuth client."));
+        u() ? o() : r(new Error("Google sign-in script loaded without the OAuth client."));
       },
       { once: !0 }
     ), t.addEventListener(
       "error",
       () => {
-        t.remove(), o(new Error("Failed to load the Google sign-in script."));
+        t.remove(), r(new Error("Failed to load the Google sign-in script."));
       },
       { once: !0 }
     ), document.head.appendChild(t);
@@ -23,14 +23,17 @@ function y() {
     c = void 0;
   })), c);
 }
-async function f({
-  clientId: r,
-  scope: o = w
+function m(o) {
+  return u() ? p(o) : y().then(() => p(o));
+}
+function p({
+  clientId: o,
+  scope: r = f
 }) {
-  return await y(), new Promise((t, n) => {
-    d().initTokenClient({
-      client_id: r,
-      scope: o,
+  return new Promise((t, n) => {
+    u().initTokenClient({
+      client_id: o,
+      scope: r,
       callback: (e) => {
         if (e.error) {
           n(new Error(e.error_description || e.error));
@@ -52,17 +55,17 @@ async function f({
 class l extends Error {
   code;
   status;
-  constructor(o, t = {}) {
-    super(o), this.name = "PlaystorePublishError", this.code = t.code, this.status = t.status;
+  constructor(r, t = {}) {
+    super(r), this.name = "PlaystorePublishError", this.code = t.code, this.status = t.status;
   }
 }
-async function m(r) {
-  const { registryApiUrl: o, token: t, organizationId: n, ...h } = r;
+async function b(o) {
+  const { registryApiUrl: r, token: t, organizationId: n, ...h } = o;
   let e;
   try {
-    e = new URL(o);
+    e = new URL(r);
   } catch {
-    throw new l(`Invalid registry URL: ${o}`);
+    throw new l(`Invalid registry URL: ${r}`);
   }
   e.pathname = `${e.pathname.replace(/\/$/, "")}/android/playstore/publish`, e.search = "", e.hash = "";
   const a = { "Content-Type": "application/json" };
@@ -74,9 +77,9 @@ async function m(r) {
       headers: a,
       body: JSON.stringify(h)
     });
-  } catch (u) {
+  } catch (d) {
     throw new l(
-      `Cannot reach the registry: ${u instanceof Error ? u.message : String(u)}`
+      `Cannot reach the registry: ${d instanceof Error ? d.message : String(d)}`
     );
   }
   const g = await s.text();
@@ -98,9 +101,9 @@ async function m(r) {
   return { versionCode: i.versionCode };
 }
 export {
-  w as ANDROID_PUBLISHER_SCOPE,
+  f as ANDROID_PUBLISHER_SCOPE,
   l as PlaystorePublishError,
   y as loadGoogleIdentityServices,
-  m as publishToPlaystore,
-  f as requestGoogleAccessToken
+  b as publishToPlaystore,
+  m as requestGoogleAccessToken
 };

package/dist/play-publish/react.cjs

@@ -1 +1 @@
-"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const e=require("react"),l=require("./index.cjs");function q({registryApiUrl:n,token:g,organizationId:v,googleClientId:d}){const[S,r]=e.useState("idle"),[P,R]=e.useState(!1),[k,b]=e.useState(),[C,t]=e.useState(),[p,c]=e.useState(),f=e.useRef(void 0),s=e.useRef(0),o=e.useRef(!1),G=e.useCallback(()=>{l.loadGoogleIdentityServices().catch(()=>{})},[]),T=e.useCallback(async()=>{if(o.current)return!1;if(!d)return t("Google OAuth client ID is not configured."),r("error"),!1;o.current=!0;const a=s.current;r("signing-in"),t(void 0),c(void 0);try{const u=await l.requestGoogleAccessToken({clientId:d});return f.current=u,a===s.current&&(R(!0),r("ready")),!0}catch(u){return a===s.current&&(t(y(u)),r("error")),!1}finally{o.current=!1}},[d]),E=e.useCallback(async a=>{if(o.current)return;if(!n){t("Registry URL is not configured."),r("error");return}const u=f.current;if(!u){t("Sign in with Google before publishing."),r("error");return}o.current=!0;const h=s.current;r("publishing"),t(void 0),c(void 0);try{const i=await l.publishToPlaystore({registryApiUrl:n,token:g,organizationId:v,accessToken:u,...a});return h===s.current&&(b(i.versionCode),r("published")),i}catch(i){h===s.current&&(t(y(i)),i instanceof l.PlaystorePublishError&&c(i.code),r("error"));return}finally{o.current=!1}},[n,g,v]),I=e.useCallback(()=>{s.current+=1,b(void 0),t(void 0),c(void 0),r(f.current?"ready":"idle")},[]);return{status:S,isSignedIn:P,versionCode:k,error:C,errorCode:p,preloadGoogle:G,signInWithGoogle:T,publish:E,reset:I}}function y(n){return n instanceof Error?n.message:String(n)}exports.usePlaystorePublish=q;
+"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const e=require("react"),I=require("../errors-BSkqS7U-.js"),d=require("./index.cjs");function N({registryApiUrl:f,token:h,organizationId:y,googleClientId:g}){const[k,t]=e.useState("idle"),[S,M]=e.useState(),[P,l]=e.useState(),[T,n]=e.useState(),[p,i]=e.useState(),v=e.useRef(void 0),s=e.useRef(0),a=e.useRef(!1),C=e.useCallback(()=>d.loadGoogleIdentityServices().then(()=>!0,()=>!1),[]),b=e.useCallback(r=>{n(r),i(void 0),l(void 0),t("error")},[]),R=e.useCallback(async()=>{if(a.current)return!1;if(!g)return b("Google OAuth client ID is not configured."),!1;a.current=!0;const r=s.current;t("signing-in"),n(void 0),i(void 0);try{const o=await d.requestGoogleAccessToken({clientId:g});return v.current=o,M(o),r===s.current?t("ready"):t(u=>u==="idle"?"ready":u),!0}catch(o){return r===s.current&&(n(I.errorMessage(o)),t("error")),!1}finally{a.current=!1}},[g]),G=e.useCallback(async r=>{if(a.current)return;if(!f){b("Registry URL is not configured.");return}const o=v.current;if(!o){b("Sign in with Google before publishing.");return}a.current=!0;const u=s.current;t("publishing"),n(void 0),i(void 0),l(void 0);try{const c=await d.publishToPlaystore({registryApiUrl:f,token:h,organizationId:y,accessToken:o,packageName:r.packageName,assetId:r.assetId,assetName:r.assetName,track:r.track,releaseStatus:r.releaseStatus});return u===s.current&&(l(c.versionCode),t("published")),c}catch(c){u===s.current&&(n(I.errorMessage(c)),c instanceof d.PlaystorePublishError&&i(c.code),t("error"));return}finally{a.current=!1}},[f,h,y]),m=e.useCallback(()=>{s.current+=1,l(void 0),n(void 0),i(void 0),t(v.current?"ready":"idle")},[]);return e.useMemo(()=>({status:k,isSignedIn:S!==void 0,versionCode:P,error:T,errorCode:p,preloadGoogle:C,signInWithGoogle:R,publish:G,reset:m}),[k,S,P,T,p,C,R,G,m])}exports.usePlaystorePublish=N;

package/dist/play-publish/react.d.ts

@@ -12,10 +12,20 @@ export type UsePlaystorePublishResult = {
     error?: string;
     /** Registry error code driving per-cause UX, e.g. versionCodeExists. */
     errorCode?: string;
-    /** Warm up the Google sign-in script (e.g. on dialog open) so signInWithGoogle stays synchronous with the click. */
-    preloadGoogle: () => void;
+    /**
+     * Warm up the Google sign-in script (e.g. on dialog open) so
+     * signInWithGoogle stays synchronous with the click. Resolves true once
+     * the script is ready; await it to gate the sign-in button, or ignore
+     * the result and rely on the blocked-popup error plus retry.
+     */
+    preloadGoogle: () => Promise<boolean>;
     signInWithGoogle: () => Promise<boolean>;
     publish: (request: PlaystorePublishRequest) => Promise<PlaystorePublishResult | undefined>;
+    /**
+     * Clears the outcome state (keeps the Google session). Does not cancel an
+     * in-flight sign-in or publish: their completion is ignored status-wise
+     * and new calls stay refused until the in-flight one settles.
+     */
     reset: () => void;
 };
 export declare function usePlaystorePublish({ registryApiUrl, token, organizationId, googleClientId, }: UsePlaystorePublishOptions): UsePlaystorePublishResult;

package/dist/play-publish/react.js

@@ -1,81 +1,91 @@
-import { useState as c, useRef as g, useCallback as f } from "react";
-import { loadGoogleIdentityServices as w, requestGoogleAccessToken as x, publishToPlaystore as q, PlaystorePublishError as D } from "./index.js";
-function O({
-  registryApiUrl: t,
-  token: v,
-  organizationId: h,
-  googleClientId: d
+import { useState as u, useRef as y, useCallback as d, useMemo as E } from "react";
+import { e as N } from "../errors-gy8yQJos.mjs";
+import { loadGoogleIdentityServices as x, requestGoogleAccessToken as M, publishToPlaystore as A, PlaystorePublishError as D } from "./index.js";
+function W({
+  registryApiUrl: f,
+  token: k,
+  organizationId: m,
+  googleClientId: g
 }) {
-  const [S, e] = c("idle"), [G, R] = c(!1), [m, y] = c(), [P, r] = c(), [T, u] = c(), l = g(void 0), n = g(0), o = g(!1), k = f(() => {
-    w().catch(() => {
-    });
-  }, []), C = f(async () => {
-    if (o.current)
+  const [b, r] = u("idle"), [p, w] = u(), [T, l] = u(), [G, s] = u(), [S, c] = u(), v = y(void 0), t = y(0), n = y(!1), R = d(
+    () => x().then(
+      () => !0,
+      () => !1
+    ),
+    []
+  ), h = d((e) => {
+    s(e), c(void 0), l(void 0), r("error");
+  }, []), P = d(async () => {
+    if (n.current)
       return !1;
-    if (!d)
-      return r("Google OAuth client ID is not configured."), e("error"), !1;
-    o.current = !0;
-    const a = n.current;
-    e("signing-in"), r(void 0), u(void 0);
+    if (!g)
+      return h("Google OAuth client ID is not configured."), !1;
+    n.current = !0;
+    const e = t.current;
+    r("signing-in"), s(void 0), c(void 0);
     try {
-      const s = await x({ clientId: d });
-      return l.current = s, a === n.current && (R(!0), e("ready")), !0;
-    } catch (s) {
-      return a === n.current && (r(p(s)), e("error")), !1;
+      const o = await M({ clientId: g });
+      return v.current = o, w(o), e === t.current ? r("ready") : r((a) => a === "idle" ? "ready" : a), !0;
+    } catch (o) {
+      return e === t.current && (s(N(o)), r("error")), !1;
     } finally {
-      o.current = !1;
+      n.current = !1;
     }
-  }, [d]), E = f(
-    async (a) => {
-      if (o.current)
+  }, [g]), C = d(
+    async (e) => {
+      if (n.current)
         return;
-      if (!t) {
-        r("Registry URL is not configured."), e("error");
+      if (!f) {
+        h("Registry URL is not configured.");
         return;
       }
-      const s = l.current;
-      if (!s) {
-        r("Sign in with Google before publishing."), e("error");
+      const o = v.current;
+      if (!o) {
+        h("Sign in with Google before publishing.");
         return;
       }
-      o.current = !0;
-      const b = n.current;
-      e("publishing"), r(void 0), u(void 0);
+      n.current = !0;
+      const a = t.current;
+      r("publishing"), s(void 0), c(void 0), l(void 0);
       try {
-        const i = await q({
-          registryApiUrl: t,
-          token: v,
-          organizationId: h,
-          accessToken: s,
-          ...a
+        const i = await A({
+          registryApiUrl: f,
+          token: k,
+          organizationId: m,
+          accessToken: o,
+          packageName: e.packageName,
+          assetId: e.assetId,
+          assetName: e.assetName,
+          track: e.track,
+          releaseStatus: e.releaseStatus
         });
-        return b === n.current && (y(i.versionCode), e("published")), i;
+        return a === t.current && (l(i.versionCode), r("published")), i;
       } catch (i) {
-        b === n.current && (r(p(i)), i instanceof D && u(i.code), e("error"));
+        a === t.current && (s(N(i)), i instanceof D && c(i.code), r("error"));
         return;
       } finally {
-        o.current = !1;
+        n.current = !1;
       }
     },
-    [t, v, h]
-  ), I = f(() => {
-    n.current += 1, y(void 0), r(void 0), u(void 0), e(l.current ? "ready" : "idle");
+    [f, k, m]
+  ), I = d(() => {
+    t.current += 1, l(void 0), s(void 0), c(void 0), r(v.current ? "ready" : "idle");
   }, []);
-  return {
-    status: S,
-    isSignedIn: G,
-    versionCode: m,
-    error: P,
-    errorCode: T,
-    preloadGoogle: k,
-    signInWithGoogle: C,
-    publish: E,
-    reset: I
-  };
-}
-function p(t) {
-  return t instanceof Error ? t.message : String(t);
+  return E(
+    () => ({
+      status: b,
+      isSignedIn: p !== void 0,
+      versionCode: T,
+      error: G,
+      errorCode: S,
+      preloadGoogle: R,
+      signInWithGoogle: P,
+      publish: C,
+      reset: I
+    }),
+    [b, p, T, G, S, R, P, C, I]
+  );
 }
 export {
-  O as usePlaystorePublish
+  W as usePlaystorePublish
 };

package/dist/{provisioning-BmsEnF6X.mjs → provisioning-B_DefBEp.mjs}

@@ -1,4 +1,4 @@
-import { e as c, a as u, n as d, b as f, c as l, i as r } from "./browser-storage-Cx9eW-bm.mjs";
+import { e as c, a as u, n as d, b as f, c as l, i as r } from "./browser-storage-BnO-Ma-e.mjs";
 function g() {
   return {
     method: "POST",

package/dist/{provisioning-Va0PH4Kk.js → provisioning-BlQMccX_.js}

@@ -1 +1 @@
-"use strict";const a=require("./browser-storage-jJaIht4K.js");function c(){return{method:"POST",path:"/account/listTeams.action",payload:{}}}function u({bundleID:e,teamID:t=""}){return s("/account/ios/identifiers/listAppIds.action",t,{sort:"name=asc"})}function d({deviceUDID:e,teamID:t=""}){return s("/account/ios/device/listDevices.action",t,{sort:"name=asc",includeRemovedDevices:!1})}function f(e=""){return s("/account/ios/certificate/listCertRequests.action",e,{sort:"name=asc",types:"83Q87W3TGH,5QPB9NHCEI"})}function l(e=""){return s("/account/ios/certificate/listCertRequests.action",e,{sort:"name=asc",types:"WXV89964HE,R58UK2EWSO"})}function p({bundleID:e,teamID:t=""}){return s("/account/ios/profile/listProvisioningProfiles.action",t,{search:e,sort:"name=asc"})}function m({bundleID:e,teamID:t=""}){return s("/account/ios/profile/listProvisioningProfiles.action",t,{search:e,sort:"name=asc",distributionType:"adhoc"})}function R({deviceUDID:e,teamID:t="",name:i="Limrun iPhone"}){return{method:"POST",path:"/account/ios/device/addDevices.action",payload:{teamId:t,deviceNames:i,deviceNumbers:a.normalizeUDID(e),deviceClasses:"iphone",register:"single"}}}function g({bundleID:e,teamID:t="",name:i}){return{method:"POST",path:"/account/ios/identifiers/addAppId.action",payload:{teamId:t,name:i??e,identifier:e,type:"explicit"}}}function q({csrPEM:e,teamID:t=""}){return{method:"POST",path:"/account/ios/certificate/submitCertificateRequest.action",payload:{teamId:t,type:"83Q87W3TGH",csrContent:e}}}function v({csrPEM:e,teamID:t=""}){return{method:"POST",path:"/account/ios/certificate/submitCertificateRequest.action",payload:{teamId:t,type:"WXV89964HE",csrContent:e}}}function P(e,t=""){return{method:"GET",path:"/account/ios/certificate/downloadCertificateContent.action",payload:{teamId:t,certificateId:e,type:"83Q87W3TGH"}}}function D(e,t=""){return{method:"GET",path:"/account/ios/certificate/downloadCertificateContent.action",payload:{teamId:t,certificateId:e,type:"WXV89964HE"}}}function I({bundleID:e,teamID:t="",appIDID:i,certificateID:o,deviceIDs:n,name:r}){return{method:"POST",path:"/account/ios/profile/createProvisioningProfile.action",payload:{teamId:t,provisioningProfileName:r??`Limrun ${e}`,certificateIds:[o],appIdId:i,deviceIds:n,distributionType:"limited",subPlatform:"ios"}}}function h({bundleID:e,teamID:t="",appIDID:i,certificateID:o,deviceIDs:n,name:r}){return{method:"POST",path:"/account/ios/profile/createProvisioningProfile.action",payload:{teamId:t,provisioningProfileName:r??`Limrun Ad Hoc ${e}`,certificateIds:[o],appIdId:i,deviceIds:n,distributionType:"adhoc",subPlatform:"ios"}}}function C(e,t=""){return{method:"GET",path:"/account/ios/profile/downloadProfileContent",payload:{teamId:t,provisioningProfileId:e}}}async function b({bundleID:e,deviceUDID:t,teamID:i,signingMode:o}){const n=await a.getSigningAssets({bundleID:e,deviceUDID:t,signingMode:o});if(!(!n||!S(n,{bundleID:e,deviceUDID:t,teamID:i,signingMode:o})))return n}async function y(e){return a.putSigningAssets({...e,certificateFileName:e.certificateID?`${e.certificateID}.p12`:`apple-${e.signingMode??"development"}.p12`,certificatePassword:e.certificatePassword||void 0,signingMode:e.signingMode,profileFileName:e.profile.uuid?`${e.profile.uuid}.mobileprovision`:`${e.signingMode??"development"}.mobileprovision`})}function S(e,{bundleID:t,deviceUDID:i,teamID:o,signingMode:n="development"}){return(e.signingMode??"development")!==n||!a.profileMatchesBundleID(e.profile,t)||o&&e.teamID&&e.teamID!==o||i&&!a.profileContainsDevice(e.profile,i)||e.profile.expirationDate&&new Date(e.profile.expirationDate).getTime()<=Date.now()?!1:a.normalizeBundleID(e.bundleID)===a.normalizeBundleID(t)}function s(e,t,i={}){const o={pageNumber:1,pageSize:200,...i};return t&&(o.teamId=t),{method:"POST",path:e,payload:o}}exports.createAdHocProfileRequest=h;exports.createBundleIDRequest=g;exports.createDevelopmentProfileRequest=I;exports.downloadCertificateRequest=P;exports.downloadDistributionCertificateRequest=D;exports.downloadProfileRequest=C;exports.findAdHocProfilesRequest=m;exports.findBundleIDRequest=u;exports.findDevelopmentCertificatesRequest=f;exports.findDevelopmentProfilesRequest=p;exports.findDeviceRequest=d;exports.findDistributionCertificatesRequest=l;exports.getReusableAppleSigningAssets=b;exports.listTeamsRequest=c;exports.putAppleGeneratedSigningAssets=y;exports.registerDeviceRequest=R;exports.submitDevelopmentCSRRequest=q;exports.submitDistributionCSRRequest=v;
+"use strict";const a=require("./browser-storage-DLxIqZk5.js");function c(){return{method:"POST",path:"/account/listTeams.action",payload:{}}}function u({bundleID:e,teamID:t=""}){return s("/account/ios/identifiers/listAppIds.action",t,{sort:"name=asc"})}function d({deviceUDID:e,teamID:t=""}){return s("/account/ios/device/listDevices.action",t,{sort:"name=asc",includeRemovedDevices:!1})}function f(e=""){return s("/account/ios/certificate/listCertRequests.action",e,{sort:"name=asc",types:"83Q87W3TGH,5QPB9NHCEI"})}function l(e=""){return s("/account/ios/certificate/listCertRequests.action",e,{sort:"name=asc",types:"WXV89964HE,R58UK2EWSO"})}function p({bundleID:e,teamID:t=""}){return s("/account/ios/profile/listProvisioningProfiles.action",t,{search:e,sort:"name=asc"})}function m({bundleID:e,teamID:t=""}){return s("/account/ios/profile/listProvisioningProfiles.action",t,{search:e,sort:"name=asc",distributionType:"adhoc"})}function R({deviceUDID:e,teamID:t="",name:i="Limrun iPhone"}){return{method:"POST",path:"/account/ios/device/addDevices.action",payload:{teamId:t,deviceNames:i,deviceNumbers:a.normalizeUDID(e),deviceClasses:"iphone",register:"single"}}}function g({bundleID:e,teamID:t="",name:i}){return{method:"POST",path:"/account/ios/identifiers/addAppId.action",payload:{teamId:t,name:i??e,identifier:e,type:"explicit"}}}function q({csrPEM:e,teamID:t=""}){return{method:"POST",path:"/account/ios/certificate/submitCertificateRequest.action",payload:{teamId:t,type:"83Q87W3TGH",csrContent:e}}}function v({csrPEM:e,teamID:t=""}){return{method:"POST",path:"/account/ios/certificate/submitCertificateRequest.action",payload:{teamId:t,type:"WXV89964HE",csrContent:e}}}function P(e,t=""){return{method:"GET",path:"/account/ios/certificate/downloadCertificateContent.action",payload:{teamId:t,certificateId:e,type:"83Q87W3TGH"}}}function D(e,t=""){return{method:"GET",path:"/account/ios/certificate/downloadCertificateContent.action",payload:{teamId:t,certificateId:e,type:"WXV89964HE"}}}function I({bundleID:e,teamID:t="",appIDID:i,certificateID:o,deviceIDs:n,name:r}){return{method:"POST",path:"/account/ios/profile/createProvisioningProfile.action",payload:{teamId:t,provisioningProfileName:r??`Limrun ${e}`,certificateIds:[o],appIdId:i,deviceIds:n,distributionType:"limited",subPlatform:"ios"}}}function h({bundleID:e,teamID:t="",appIDID:i,certificateID:o,deviceIDs:n,name:r}){return{method:"POST",path:"/account/ios/profile/createProvisioningProfile.action",payload:{teamId:t,provisioningProfileName:r??`Limrun Ad Hoc ${e}`,certificateIds:[o],appIdId:i,deviceIds:n,distributionType:"adhoc",subPlatform:"ios"}}}function C(e,t=""){return{method:"GET",path:"/account/ios/profile/downloadProfileContent",payload:{teamId:t,provisioningProfileId:e}}}async function b({bundleID:e,deviceUDID:t,teamID:i,signingMode:o}){const n=await a.getSigningAssets({bundleID:e,deviceUDID:t,signingMode:o});if(!(!n||!S(n,{bundleID:e,deviceUDID:t,teamID:i,signingMode:o})))return n}async function y(e){return a.putSigningAssets({...e,certificateFileName:e.certificateID?`${e.certificateID}.p12`:`apple-${e.signingMode??"development"}.p12`,certificatePassword:e.certificatePassword||void 0,signingMode:e.signingMode,profileFileName:e.profile.uuid?`${e.profile.uuid}.mobileprovision`:`${e.signingMode??"development"}.mobileprovision`})}function S(e,{bundleID:t,deviceUDID:i,teamID:o,signingMode:n="development"}){return(e.signingMode??"development")!==n||!a.profileMatchesBundleID(e.profile,t)||o&&e.teamID&&e.teamID!==o||i&&!a.profileContainsDevice(e.profile,i)||e.profile.expirationDate&&new Date(e.profile.expirationDate).getTime()<=Date.now()?!1:a.normalizeBundleID(e.bundleID)===a.normalizeBundleID(t)}function s(e,t,i={}){const o={pageNumber:1,pageSize:200,...i};return t&&(o.teamId=t),{method:"POST",path:e,payload:o}}exports.createAdHocProfileRequest=h;exports.createBundleIDRequest=g;exports.createDevelopmentProfileRequest=I;exports.downloadCertificateRequest=P;exports.downloadDistributionCertificateRequest=D;exports.downloadProfileRequest=C;exports.findAdHocProfilesRequest=m;exports.findBundleIDRequest=u;exports.findDevelopmentCertificatesRequest=f;exports.findDevelopmentProfilesRequest=p;exports.findDeviceRequest=d;exports.findDistributionCertificatesRequest=l;exports.getReusableAppleSigningAssets=b;exports.listTeamsRequest=c;exports.putAppleGeneratedSigningAssets=y;exports.registerDeviceRequest=R;exports.submitDevelopmentCSRRequest=q;exports.submitDistributionCSRRequest=v;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@limrun/ui",
-  "version": "0.14.0-rc.3",
+  "version": "0.14.0-rc.4",
   "publishConfig": {
     "access": "public",
     "tag": "next"
@@ -24,6 +24,11 @@
       "import": "./dist/app-store-relay/react.js",
       "require": "./dist/app-store-relay/react.cjs"
     },
+    "./apple-credentials": {
+      "types": "./dist/apple-credentials/index.d.ts",
+      "import": "./dist/apple-credentials/index.js",
+      "require": "./dist/apple-credentials/index.cjs"
+    },
     "./device-build": {
       "types": "./dist/device-build/index.d.ts",
       "import": "./dist/device-build/index.js",

package/src/app-store-relay/react.ts

@@ -5,6 +5,7 @@ import {
   type AppleIDLoginResult,
   type AppleRelayResponse,
 } from './index';
+import { errorMessage } from '../core/errors';
 
 export type UseAppleIDLoginOptions = Pick<AppleIDLoginInput, 'registryApiUrl' | 'token' | 'organizationId'>;
 
@@ -128,7 +129,3 @@ export function useAppleIDLogin({
     close,
   };
 }
-
-function errorMessage(error: unknown) {
-  return error instanceof Error ? error.message : String(error);
-}

package/src/apple-credentials/index.test.ts

@@ -0,0 +1,158 @@
+// @vitest-environment node
+
+import forge from 'node-forge';
+import { describe, expect, test } from 'vitest';
+import type { AppleRelayWebSocketClient } from '../core/device-install/apple';
+import {
+  APPLE_CERTIFICATE_SECRET_TYPE,
+  appleCertificateSecretName,
+  ensureAppleCertificateSecret,
+  type SigningSecret,
+  type SigningSecretMetadata,
+  type SigningSecretStore,
+  type SigningSecretType,
+} from './index';
+
+/**
+ * A self-signed certificate is enough for exportAppleCertificateP12: the
+ * p12 bundling never verifies that the key matches the certificate.
+ */
+function selfSignedCertificateBase64() {
+  const keys = forge.pki.rsa.generateKeyPair(1024);
+  const cert = forge.pki.createCertificate();
+  cert.publicKey = keys.publicKey;
+  cert.serialNumber = '01';
+  cert.validity.notBefore = new Date();
+  cert.validity.notAfter = new Date(Date.now() + 24 * 60 * 60 * 1000);
+  const attrs = [{ name: 'commonName', value: 'Apple Development Test' }];
+  cert.setSubject(attrs);
+  cert.setIssuer(attrs);
+  cert.sign(keys.privateKey);
+  return forge.util.encode64(forge.asn1.toDer(forge.pki.certificateToAsn1(cert)).getBytes());
+}
+
+function memorySecretStore(options: { failPuts?: () => boolean } = {}) {
+  const entries = new Map<string, SigningSecret>();
+  const store: SigningSecretStore = {
+    async put(type: SigningSecretType, name: string, data: Record<string, string>) {
+      if (options.failPuts?.()) {
+        throw new Error('secret store unavailable');
+      }
+      const secret: SigningSecret = { type, name, data, createdAt: new Date().toISOString() };
+      entries.set(`${type}:${name}`, secret);
+      return secret;
+    },
+    async get(type: SigningSecretType, name: string) {
+      return entries.get(`${type}:${name}`);
+    },
+    async list() {
+      return [...entries.values()].map(({ data: _data, ...metadata }): SigningSecretMetadata => metadata);
+    },
+    async delete(type: SigningSecretType, name: string) {
+      entries.delete(`${type}:${name}`);
+    },
+  };
+  return { store, entries };
+}
+
+type PortalState = { mintedCertificateIds: string[]; certificateBase64: string };
+
+/**
+ * Fakes the relay's provisioning proxy: minting appends to
+ * mintedCertificateIds, listing reflects what has been minted so far.
+ */
+function fakePortalRelay(state: PortalState): AppleRelayWebSocketClient {
+  return {
+    async request(_type: string, payload: unknown) {
+      const request = payload as { path: string };
+      if (request.path.includes('listCertRequests')) {
+        return portalOK({
+          certRequests: state.mintedCertificateIds.map((certificateId) => ({ certificateId })),
+        });
+      }
+      if (request.path.includes('submitCertificateRequest')) {
+        const certificateId = `CERT${state.mintedCertificateIds.length + 1}`;
+        state.mintedCertificateIds.push(certificateId);
+        return portalOK({
+          certRequest: {
+            certificateId,
+            serialNum: '01',
+            expirationDateString: '2027-01-01',
+          },
+        });
+      }
+      if (request.path.includes('downloadCertificateContent')) {
+        return { status: 200, statusText: 'OK', rawBodyBase64: state.certificateBase64 };
+      }
+      throw new Error(`unexpected portal path: ${request.path}`);
+    },
+  } as unknown as AppleRelayWebSocketClient;
+}
+
+function portalOK(body: Record<string, unknown>) {
+  return { status: 200, statusText: 'OK', body: { resultCode: 0, ...body } };
+}
+
+describe('ensureAppleCertificateSecret', () => {
+  const teamId = 'TEAM1';
+  const secretName = appleCertificateSecretName(teamId, 'DEVELOPMENT');
+
+  test('surfaces an actionable error when the store write fails after minting', async () => {
+    const state: PortalState = {
+      mintedCertificateIds: [],
+      certificateBase64: selfSignedCertificateBase64(),
+    };
+    const broken = memorySecretStore({ failPuts: () => true });
+
+    await expect(
+      ensureAppleCertificateSecret({
+        relay: fakePortalRelay(state),
+        teamId,
+        secretStore: broken.store,
+      }),
+    ).rejects.toThrow(/revoke certificate CERT1/);
+    expect(state.mintedCertificateIds).toEqual(['CERT1']);
+  });
+
+  test('mints and stores the certificate with its type in the secret name', async () => {
+    const state: PortalState = {
+      mintedCertificateIds: [],
+      certificateBase64: selfSignedCertificateBase64(),
+    };
+    const org = memorySecretStore();
+
+    const result = await ensureAppleCertificateSecret({
+      relay: fakePortalRelay(state),
+      teamId,
+      secretStore: org.store,
+    });
+    expect(result.created).toBe(true);
+    expect(result.certificateId).toBe('CERT1');
+    const stored = await org.store.get(APPLE_CERTIFICATE_SECRET_TYPE, secretName);
+    expect(stored?.data.certificateID).toBe('CERT1');
+    expect(stored?.data.certificateType).toBe('DEVELOPMENT');
+    expect(stored?.data.certificateP12Base64).toBeTruthy();
+  });
+
+  test('reuses the stored certificate when it is still on the team', async () => {
+    const state: PortalState = {
+      mintedCertificateIds: ['CERT1'],
+      certificateBase64: selfSignedCertificateBase64(),
+    };
+    const org = memorySecretStore();
+    await org.store.put(APPLE_CERTIFICATE_SECRET_TYPE, secretName, {
+      certificateP12Base64: 'cDEy',
+      certificateID: 'CERT1',
+      teamID: teamId,
+    });
+
+    const result = await ensureAppleCertificateSecret({
+      relay: fakePortalRelay(state),
+      teamId,
+      secretStore: org.store,
+    });
+    expect(result.created).toBe(false);
+    expect(result.certificateId).toBe('CERT1');
+    expect(state.mintedCertificateIds).toEqual(['CERT1']);
+  });
+});