@limrun/ui 0.14.0-rc.4 → 0.14.0

package/dist/app-store-relay/index.js

@@ -1,484 +0,0 @@
-import { p as D } from "../client-DSuNtWDv.mjs";
-import { A as Pe, f as he, o as qe, a as Be, b as Se, c as Ce, d as Re, s as Te, t as Ee, e as Ke } from "../client-DSuNtWDv.mjs";
-import { f as p } from "../index-YDu8K9a4.mjs";
-import { A as ke } from "../gsa-srp-Bme3JLEi.mjs";
-import { l as w, f as g, a as I, s as P, b as h, d as q, c as B, e as S, h as C, i as R, r as T, j as E, k as K, m as U, n as k, o as x } from "../provisioning-B_DefBEp.mjs";
-const F = {
-  name: "RSASSA-PKCS1-v1_5",
-  modulusLength: 2048,
-  publicExponent: new Uint8Array([1, 0, 1]),
-  hash: "SHA-256"
-};
-async function re(e) {
-  if (!crypto.subtle)
-    throw new Error("WebCrypto is not available in this browser.");
-  const t = await crypto.subtle.generateKey(F, !0, ["sign", "verify"]), r = new Uint8Array(await crypto.subtle.exportKey("spki", t.publicKey)), n = l(
-    $(0),
-    N(e),
-    r,
-    L(0, new Uint8Array())
-  ), i = new Uint8Array(
-    await crypto.subtle.sign(
-      "RSASSA-PKCS1-v1_5",
-      t.privateKey,
-      J(n)
-    )
-  ), o = l(
-    n,
-    l(b("1.2.840.113549.1.1.11"), H()),
-    M(i)
-  ), s = new Uint8Array(await crypto.subtle.exportKey("pkcs8", t.privateKey));
-  return {
-    privateKey: t.privateKey,
-    privateKeyPKCS8Base64: d(s),
-    publicKeySPKIBase64: d(r),
-    csrPEM: j("CERTIFICATE REQUEST", o),
-    csrBase64: d(o)
-  };
-}
-function ne(e) {
-  if (!e.certificateBase64 && !e.certificatePEM)
-    throw new Error("certificateBase64 or certificatePEM is required.");
-  const t = p.pki.privateKeyFromPem(V("PRIVATE KEY", e.privateKeyPKCS8Base64)), r = e.certificatePEM ? p.pki.certificateFromPem(e.certificatePEM) : p.pki.certificateFromAsn1(
-    p.asn1.fromDer(p.util.createBuffer(z(e.certificateBase64)))
-  ), n = p.pkcs12.toPkcs12Asn1(t, [r], e.password, {
-    algorithm: "3des",
-    friendlyName: e.friendlyName
-  }), i = p.asn1.toDer(n).getBytes();
-  return Q(i);
-}
-function N(e) {
-  const t = [m("2.5.4.3", W(e.commonName))];
-  return e.emailAddress && t.push(m("1.2.840.113549.1.9.1", G(e.emailAddress))), l(...t);
-}
-function m(e, t) {
-  return O(l(b(e), t));
-}
-function l(...e) {
-  return c(48, f(...e));
-}
-function O(...e) {
-  return c(49, f(...e));
-}
-function L(e, t) {
-  return c(160 + e, t);
-}
-function $(e) {
-  return c(2, new Uint8Array([e]));
-}
-function H() {
-  return new Uint8Array([5, 0]);
-}
-function W(e) {
-  return c(12, new TextEncoder().encode(e));
-}
-function G(e) {
-  return c(22, new TextEncoder().encode(e));
-}
-function M(e) {
-  return c(3, f(new Uint8Array([0]), e));
-}
-function b(e) {
-  const t = e.split(".").map((n) => parseInt(n, 10));
-  if (t.length < 2 || t.some((n) => !Number.isFinite(n)))
-    throw new Error(`Invalid OID: ${e}`);
-  const r = [t[0] * 40 + t[1]];
-  for (const n of t.slice(2)) {
-    const i = [n & 127];
-    let o = n >> 7;
-    for (; o > 0; )
-      i.unshift(o & 127 | 128), o >>= 7;
-    r.push(...i);
-  }
-  return c(6, new Uint8Array(r));
-}
-function c(e, t) {
-  return f(new Uint8Array([e]), _(t.byteLength), t);
-}
-function _(e) {
-  if (e < 128)
-    return new Uint8Array([e]);
-  const t = [];
-  let r = e;
-  for (; r > 0; )
-    t.unshift(r & 255), r >>= 8;
-  return new Uint8Array([128 | t.length, ...t]);
-}
-function f(...e) {
-  const t = e.reduce((i, o) => i + o.byteLength, 0), r = new Uint8Array(t);
-  let n = 0;
-  for (const i of e)
-    r.set(i, n), n += i.byteLength;
-  return r;
-}
-function j(e, t) {
-  const n = d(t).match(/.{1,64}/g) ?? [];
-  return `-----BEGIN ${e}-----
-${n.join(`
-`)}
------END ${e}-----
-`;
-}
-function V(e, t) {
-  const r = t.match(/.{1,64}/g) ?? [];
-  return `-----BEGIN ${e}-----
-${r.join(`
-`)}
------END ${e}-----
-`;
-}
-function d(e) {
-  let t = "";
-  for (const r of e)
-    t += String.fromCharCode(r);
-  return btoa(t);
-}
-function Q(e) {
-  return btoa(e);
-}
-function z(e) {
-  return atob(e);
-}
-function J(e) {
-  const t = new Uint8Array(e.byteLength);
-  return t.set(e), t.buffer;
-}
-async function a({
-  relay: e,
-  request: t,
-  label: r = "Apple Developer Portal request",
-  validatePortalResponse: n = !0,
-  mapBody: i
-}) {
-  const o = await D(e, t);
-  return n && X(o.body, r), i ? i(o.body, o) : o;
-}
-async function ie(e) {
-  return a({
-    ...e,
-    request: w(),
-    label: "Apple Developer team list",
-    mapBody: (t) => Y([
-      ...t?.teams ?? [],
-      ...t?.availableProviders ?? [],
-      ...t?.provider ? [t.provider] : []
-    ])
-  });
-}
-async function oe({
-  certificateKind: e = "development",
-  teamId: t = "",
-  ...r
-}) {
-  return a({
-    ...r,
-    request: e === "distribution" ? g(t) : I(t),
-    label: "Apple Developer certificate list",
-    mapBody: (n) => n?.certRequests ?? []
-  });
-}
-async function ae({
-  certificateKind: e = "development",
-  teamId: t = "",
-  csrPEM: r,
-  ...n
-}) {
-  return a({
-    ...n,
-    request: e === "distribution" ? P({ csrPEM: r, teamID: t }) : h({ csrPEM: r, teamID: t }),
-    label: e === "distribution" ? "Apple Distribution certificate creation" : "Apple Development certificate creation",
-    mapBody: (i) => i?.certRequest
-  });
-}
-async function se({
-  certificateKind: e = "development",
-  certificateId: t,
-  teamId: r = "",
-  ...n
-}) {
-  return a({
-    ...n,
-    request: e === "distribution" ? q(t, r) : B(t, r),
-    label: "Apple certificate download",
-    validatePortalResponse: !1,
-    mapBody: (i, o) => o
-  });
-}
-async function ce({
-  certificateKind: e = "development",
-  certificateId: t,
-  teamId: r = "",
-  ...n
-}) {
-  return a({
-    ...n,
-    request: {
-      method: "POST",
-      path: "/account/ios/certificate/revokeCertificate.action",
-      payload: {
-        teamId: r,
-        certificateId: t,
-        type: e === "distribution" ? "WXV89964HE" : "83Q87W3TGH"
-      }
-    },
-    label: "Apple certificate deletion",
-    mapBody: (i) => i
-  });
-}
-async function pe({
-  teamId: e = "",
-  search: t = "",
-  ...r
-}) {
-  const n = t.trim().toLowerCase();
-  return a({
-    ...r,
-    request: S({ bundleID: t, teamID: e }),
-    label: "Apple bundle ID list",
-    // Apple's listAppIds.action returns the full paginated list and does not
-    // honor a server-side search filter, so apply the `search` filter here.
-    mapBody: (i) => {
-      const o = i?.appIds ?? [];
-      return n ? o.filter(
-        (s) => [s.identifier, s.bundleId, s.name].some(
-          (u) => typeof u == "string" && u.toLowerCase().includes(n)
-        )
-      ) : o;
-    }
-  });
-}
-async function le({
-  teamId: e = "",
-  bundleId: t,
-  name: r,
-  ...n
-}) {
-  return a({
-    ...n,
-    request: C({ bundleID: t, teamID: e, name: r }),
-    label: "Apple bundle ID creation",
-    mapBody: (i) => i?.appId
-  });
-}
-async function ue({
-  teamId: e = "",
-  appIdId: t,
-  bundleId: r,
-  name: n,
-  ...i
-}) {
-  return a({
-    ...i,
-    request: {
-      method: "POST",
-      path: "/account/ios/identifiers/updateAppId.action",
-      payload: {
-        teamId: e,
-        appIdId: t,
-        ...r ? { identifier: r } : {},
-        ...n ? { name: n } : {}
-      }
-    },
-    label: "Apple bundle ID update",
-    mapBody: (o) => o?.appId
-  });
-}
-async function de({ teamId: e = "", appIdId: t, ...r }) {
-  return a({
-    ...r,
-    request: {
-      method: "POST",
-      path: "/account/ios/identifiers/deleteAppId.action",
-      payload: { teamId: e, appIdId: t }
-    },
-    label: "Apple bundle ID deletion",
-    mapBody: (n) => n
-  });
-}
-async function fe({
-  teamId: e = "",
-  deviceUDID: t = "",
-  ...r
-}) {
-  const n = A(t);
-  return a({
-    ...r,
-    request: R({ deviceUDID: t, teamID: e }),
-    label: "Apple device list",
-    // Apple's listDevices.action returns the full paginated list and does not
-    // honor a server-side UDID filter, so apply the `deviceUDID` filter here.
-    mapBody: (i) => {
-      const o = i?.devices ?? [];
-      return n ? o.filter((s) => A(s.deviceNumber) === n) : o;
-    }
-  });
-}
-function A(e) {
-  return (e ?? "").replace(/-/g, "").replace(/[^a-fA-F0-9]/g, "").toUpperCase();
-}
-async function ye({
-  teamId: e = "",
-  deviceUDID: t,
-  name: r,
-  ...n
-}) {
-  return a({
-    ...n,
-    request: T({ deviceUDID: t, teamID: e, name: r }),
-    label: "Apple device registration",
-    mapBody: (i) => i?.device
-  });
-}
-async function me({
-  teamId: e = "",
-  deviceId: t,
-  name: r,
-  ...n
-}) {
-  return a({
-    ...n,
-    request: {
-      method: "POST",
-      path: "/account/ios/device/updateDevice.action",
-      payload: { teamId: e, deviceId: t, ...r ? { name: r } : {} }
-    },
-    label: "Apple device update",
-    mapBody: (i) => i?.device
-  });
-}
-async function Ae({ teamId: e = "", deviceId: t, ...r }) {
-  return a({
-    ...r,
-    request: {
-      method: "POST",
-      path: "/account/ios/device/deleteDevice.action",
-      payload: { teamId: e, deviceId: t }
-    },
-    label: "Apple device deletion",
-    mapBody: (n) => n
-  });
-}
-async function be({
-  profileKind: e = "development",
-  teamId: t = "",
-  bundleId: r = "",
-  ...n
-}) {
-  return a({
-    ...n,
-    request: e === "adhoc" ? E({ bundleID: r, teamID: t }) : K({ bundleID: r, teamID: t }),
-    label: "Apple provisioning profile list",
-    mapBody: (i) => i?.provisioningProfiles ?? []
-  });
-}
-async function ve({
-  profileKind: e = "development",
-  teamId: t = "",
-  bundleId: r,
-  appIdId: n,
-  certificateIds: i,
-  deviceIds: o,
-  name: s,
-  ...u
-}) {
-  const [y] = i;
-  if (!y)
-    throw new Error("At least one certificate ID is required to create an Apple provisioning profile.");
-  return a({
-    ...u,
-    request: e === "adhoc" ? U({
-      bundleID: r,
-      teamID: t,
-      appIDID: n,
-      certificateID: y,
-      deviceIDs: o,
-      name: s
-    }) : k({
-      bundleID: r,
-      teamID: t,
-      appIDID: n,
-      certificateID: y,
-      deviceIDs: o,
-      name: s
-    }),
-    label: "Apple provisioning profile creation",
-    mapBody: (v) => v?.provisioningProfile
-  });
-}
-async function De({
-  teamId: e = "",
-  profileId: t,
-  ...r
-}) {
-  return a({
-    ...r,
-    request: x(t, e),
-    label: "Apple provisioning profile download",
-    validatePortalResponse: !1,
-    mapBody: (n, i) => i
-  });
-}
-async function we({ teamId: e = "", profileId: t, ...r }) {
-  return a({
-    ...r,
-    request: {
-      method: "POST",
-      path: "/account/ios/profile/deleteProvisioningProfile.action",
-      payload: { teamId: e, provisioningProfileId: t }
-    },
-    label: "Apple provisioning profile deletion",
-    mapBody: (n) => n
-  });
-}
-function X(e, t) {
-  if (!e)
-    throw new Error(`${t} returned an empty response.`);
-  if (e.resultCode !== void 0 && e.resultCode !== 0)
-    throw new Error(
-      `${t} failed: ${e.userString ?? e.resultString ?? e.resultCode}`
-    );
-}
-function Y(e) {
-  const t = /* @__PURE__ */ new Set(), r = [];
-  for (const n of e) {
-    const i = String(
-      n.teamId ?? n.providerId ?? n.publicProviderId ?? n.name ?? JSON.stringify(n)
-    );
-    t.has(i) || (t.add(i), r.push(n));
-  }
-  return r;
-}
-export {
-  ke as AppleGsaSrpClient,
-  Pe as AppleRelayWebSocketClient,
-  X as assertAppleDeveloperPortalResponseOK,
-  le as createAppleBundleID,
-  ae as createAppleCertificate,
-  ve as createAppleProfile,
-  de as deleteAppleBundleID,
-  ce as deleteAppleCertificate,
-  Ae as deleteAppleDevice,
-  we as deleteAppleProfile,
-  se as downloadAppleCertificate,
-  De as downloadAppleProfile,
-  ne as exportAppleCertificateP12,
-  he as fetchAppleAccountSession,
-  re as generateAppleSigningKeyAndCSR,
-  pe as listAppleBundleIDs,
-  oe as listAppleCertificates,
-  fe as listAppleDevices,
-  be as listAppleProfiles,
-  ie as listAppleTeams,
-  qe as openAppleRelayWebSocket,
-  Be as proxyPhoneTwoFactorCode,
-  Se as proxySrpComplete,
-  Ce as proxySrpInit,
-  Re as proxyTwoFactorCode,
-  ye as registerAppleDevice,
-  a as requestAppleProvisioning,
-  Te as startBrowserOwnedAppleIDLogin,
-  Ee as triggerPhoneTwoFactor,
-  Ke as triggerTrustedDeviceTwoFactor,
-  ue as updateAppleBundleID,
-  me as updateAppleDevice
-};

package/dist/app-store-relay/react.cjs

@@ -1 +0,0 @@
-"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const t=require("react"),y=require("../client-D1drDXxE.js");require("../index-ChhtuQ7e.js");require("../gsa-srp-CCIfUz7Y.js");const w=require("../errors-BSkqS7U-.js");function m({registryApiUrl:i,token:u,organizationId:l}){const[g,o]=t.useState("idle"),[h,a]=t.useState(),[v,d]=t.useState(),[f,p]=t.useState(),[S,n]=t.useState(),r=t.useRef(void 0),b=t.useCallback(async()=>{await r.current?.close().catch(()=>{}),r.current=void 0,a(void 0),d(void 0),p(void 0),n(void 0),o("idle")},[]);t.useEffect(()=>()=>{r.current?.close(),r.current=void 0},[]);const C=t.useCallback(async({accountName:s,password:c})=>{o("authenticating"),n(void 0),await r.current?.close().catch(()=>{});try{const e=await y.startBrowserOwnedAppleIDLogin({registryApiUrl:i,token:u,organizationId:l,accountName:s,password:c});return r.current=e,a(e),d(e.completeResponse),p(e.twoFactorChallengeResponse),o(e.requiresTwoFactor?"two-factor-required":"authenticated"),e}catch(e){a(void 0),r.current=void 0,n(w.errorMessage(e)),o("error");return}},[i,l,u]),R=t.useCallback(async s=>{const c=r.current;if(!c)throw new Error("Start Apple ID login before submitting a two-factor code.");o("authenticating"),n(void 0);try{const e=await c.finishTwoFactor(s);return o("authenticated"),e}catch(e){n(w.errorMessage(e)),o("error");return}},[]),q=t.useCallback(async()=>{const s=r.current;if(!s)throw new Error("Start Apple ID login before finalizing the Apple session.");return s.finalize()},[]);return{status:g,session:h,completeResponse:v,twoFactorChallengeResponse:f,error:S,startLogin:C,submitTwoFactorCode:R,finalize:q,close:b}}exports.useAppleIDLogin=m;

package/dist/app-store-relay/react.d.ts

@@ -1,15 +0,0 @@
-import { AppleIDLoginInput, AppleIDLoginResult, AppleRelayResponse } from './index';
-export type UseAppleIDLoginOptions = Pick<AppleIDLoginInput, 'registryApiUrl' | 'token' | 'organizationId'>;
-export type AppleIDLoginStatus = 'idle' | 'authenticating' | 'two-factor-required' | 'authenticated' | 'error';
-export type UseAppleIDLoginResult = {
-    status: AppleIDLoginStatus;
-    session?: AppleIDLoginResult;
-    completeResponse?: AppleRelayResponse;
-    twoFactorChallengeResponse?: AppleRelayResponse;
-    error?: string;
-    startLogin: (input: Pick<AppleIDLoginInput, 'accountName' | 'password'>) => Promise<AppleIDLoginResult | undefined>;
-    submitTwoFactorCode: (code: string) => Promise<AppleRelayResponse | undefined>;
-    finalize: () => Promise<AppleRelayResponse | undefined>;
-    close: () => Promise<void>;
-};
-export declare function useAppleIDLogin({ registryApiUrl, token, organizationId, }: UseAppleIDLoginOptions): UseAppleIDLoginResult;

package/dist/app-store-relay/react.js

@@ -1,69 +0,0 @@
-import { useState as n, useRef as S, useCallback as i, useEffect as A } from "react";
-import { s as D } from "../client-DSuNtWDv.mjs";
-import "../index-YDu8K9a4.mjs";
-import "../gsa-srp-Bme3JLEi.mjs";
-import { e as w } from "../errors-gy8yQJos.mjs";
-function x({
-  registryApiUrl: u,
-  token: l,
-  organizationId: p
-}) {
-  const [h, o] = n("idle"), [v, a] = n(), [g, d] = n(), [m, f] = n(), [R, s] = n(), t = S(void 0), C = i(async () => {
-    await t.current?.close().catch(() => {
-    }), t.current = void 0, a(void 0), d(void 0), f(void 0), s(void 0), o("idle");
-  }, []);
-  A(() => () => {
-    t.current?.close(), t.current = void 0;
-  }, []);
-  const F = i(
-    async ({ accountName: r, password: c }) => {
-      o("authenticating"), s(void 0), await t.current?.close().catch(() => {
-      });
-      try {
-        const e = await D({
-          registryApiUrl: u,
-          token: l,
-          organizationId: p,
-          accountName: r,
-          password: c
-        });
-        return t.current = e, a(e), d(e.completeResponse), f(e.twoFactorChallengeResponse), o(e.requiresTwoFactor ? "two-factor-required" : "authenticated"), e;
-      } catch (e) {
-        a(void 0), t.current = void 0, s(w(e)), o("error");
-        return;
-      }
-    },
-    [u, p, l]
-  ), b = i(async (r) => {
-    const c = t.current;
-    if (!c)
-      throw new Error("Start Apple ID login before submitting a two-factor code.");
-    o("authenticating"), s(void 0);
-    try {
-      const e = await c.finishTwoFactor(r);
-      return o("authenticated"), e;
-    } catch (e) {
-      s(w(e)), o("error");
-      return;
-    }
-  }, []), y = i(async () => {
-    const r = t.current;
-    if (!r)
-      throw new Error("Start Apple ID login before finalizing the Apple session.");
-    return r.finalize();
-  }, []);
-  return {
-    status: h,
-    session: v,
-    completeResponse: g,
-    twoFactorChallengeResponse: m,
-    error: R,
-    startLogin: F,
-    submitTwoFactorCode: b,
-    finalize: y,
-    close: C
-  };
-}
-export {
-  x as useAppleIDLogin
-};

package/dist/apple-credentials/index.cjs

@@ -1 +0,0 @@
-"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const S=require("../app-store-relay/index.cjs"),E=require("../browser-storage-DLxIqZk5.js"),A="appleCertificate",P="appleProvisioningProfile";function b(r){const e={};for(const[o,i]of Object.entries(r))i&&(e[o]=i);return e}async function T(r,e,o){return r.put(A,e,b(o))}async function I(r,e,o){return r.put(P,e,b(o))}function R(r){const e=r.fetch??fetch.bind(globalThis),o=r.apiUrl.replace(/\/+$/,""),i=(t,s)=>`${o}/v1/organizations/${encodeURIComponent(r.organizationId)}/secrets/${encodeURIComponent(t)}/${encodeURIComponent(s)}`,c={Authorization:`Bearer ${r.token}`,"Content-Type":"application/json"};async function a(t,s){let n=`${t.status}`;try{const d=await t.json();d.message&&(n=d.message)}catch{}throw new Error(`Failed to ${s} secret: ${n}`)}return{async put(t,s,n){const d=await e(i(t,s),{method:"PUT",headers:c,body:JSON.stringify({data:n,replace:!0})});d.ok||await a(d,"store");const f=await d.json();return{type:f.type,name:f.name,createdAt:f.createdAt,data:f.data}},async get(t,s){const n=await e(i(t,s),{method:"GET",headers:c});if(n.status===404)return;n.ok||await a(n,"fetch");const d=await n.json();return{type:d.type,name:d.name,createdAt:d.createdAt,data:d.data}},async list(){const t=await e(`${o}/v1/organizations/${encodeURIComponent(r.organizationId)}/secrets`,{method:"GET",headers:c});return t.ok||await a(t,"list"),(await t.json()).filter(n=>n.type===A||n.type===P).map(n=>({type:n.type,name:n.name,createdAt:n.createdAt}))},async delete(t,s){const n=await e(i(t,s),{method:"DELETE",headers:c});n.status!==404&&(n.ok||await a(n,"delete"))}}}const B="limrun-signing-secrets",$=1,p="secrets";function _(){const r=(i,c)=>`${i}:${c}`;function e(){return new Promise((i,c)=>{const a=indexedDB.open(B,$);a.onupgradeneeded=()=>{const t=a.result;t.objectStoreNames.contains(p)||t.createObjectStore(p,{keyPath:"id"})},a.onsuccess=()=>i(a.result),a.onerror=()=>c(a.error??new Error("Open IndexedDB failed"))})}function o(i){return new Promise((c,a)=>{i.onsuccess=()=>c(i.result),i.onerror=()=>a(i.error??new Error("IndexedDB request failed"))})}return{async put(i,c,a){const t=await e(),s=await o(t.transaction(p,"readonly").objectStore(p).get(r(i,c))),n={id:r(i,c),type:i,name:c,data:a,createdAt:s?.createdAt??new Date().toISOString()};return await o(t.transaction(p,"readwrite").objectStore(p).put(n)),{type:i,name:c,createdAt:n.createdAt,data:a}},async get(i,c){const a=await e(),t=await o(a.transaction(p,"readonly").objectStore(p).get(r(i,c)));if(t)return{type:t.type,name:t.name,createdAt:t.createdAt,data:t.data}},async list(){const i=await e();return(await o(i.transaction(p,"readonly").objectStore(p).getAll())).map(a=>({type:a.type,name:a.name,createdAt:a.createdAt}))},async delete(i,c){const a=await e();await o(a.transaction(p,"readwrite").objectStore(p).delete(r(i,c)))}}}function h(r,e){return`${r}/${e}`}async function N({relay:r,teamId:e,secretStore:o,commonName:i,log:c=()=>{}}){const a="DEVELOPMENT",t=h(e,a),s=await S.listAppleCertificates({relay:r,teamId:e,certificateKind:"development"}),n=u=>u===void 0?void 0:s.find(m=>l(m,"certificateId")===u||l(m,"certRequestId")===u),d=await o.get(A,t),f=l(d?.data,"certificateID");if(d&&f&&d.data.certificateP12Base64){const u=n(f);if(u){const m=l(u,"certificateId")??f;return c("Reusing stored Apple certificate",m),{secret:d,certificateId:m,created:!1}}c("Stored certificate is no longer on the team","Minting a new one.")}const g=await S.generateAppleSigningKeyAndCSR({commonName:i??`Limrun ${e}`}),y=await S.createAppleCertificate({relay:r,teamId:e,certificateKind:"development",csrPEM:g.csrPEM}),w=l(y,"certificateId")??l(y,"certRequestId");if(!w)throw new Error("Apple certificate creation did not return a certificate ID.");const v=await S.downloadAppleCertificate({relay:r,teamId:e,certificateKind:"development",certificateId:w});if(!v.rawBodyBase64)throw new Error("Apple certificate download returned no bytes.");const D={certificateP12Base64:S.exportAppleCertificateP12({privateKeyPKCS8Base64:g.privateKeyPKCS8Base64,certificateBase64:v.rawBodyBase64,password:"",friendlyName:`Apple Development ${e}`}),certificateType:a,teamID:e,certificateID:w,serialNumber:E.normalizeCertificateSerial(l(y,"serialNum")),expirationDate:l(y,"expirationDateString")};let C;try{C=await T(o,t,D)}catch(u){throw new Error(`Certificate ${w} was created on the Apple Developer portal but saving its private key to the secret store failed: ${O(u)}. The key cannot be recovered; revoke certificate ${w} at developer.apple.com before retrying, or the retry will mint another certificate against Apple's limit.`)}return c("Apple certificate stored",w),{secret:C,certificateId:w,created:!0}}function O(r){return r instanceof Error?r.message:String(r)}async function j({relay:r,teamId:e,profileId:o,secretStore:i,log:c=()=>{}}){const t=(await S.downloadAppleProfile({relay:r,teamId:e,profileId:o})).rawBodyBase64;if(!t)throw new Error("Apple provisioning profile download returned no bytes.");const s=E.parseProvisioningProfileBase64(t),n=`${e}/${s.uuid??o}`,d=await I(i,n,{provisioningProfileBase64:t,certificateSerialNumbers:s.certificateSerialNumbers.join(","),bundleIDs:s.bundleID,deviceIDs:s.provisionedDevices.join(","),teamID:s.teamID??e,profileName:s.name,uuid:s.uuid,expirationDate:s.expirationDate});return c("Apple provisioning profile stored",n),d}async function k({relay:r,teamId:e}){return S.listAppleProfiles({relay:r,teamId:e,profileKind:"development"})}function l(r,e){const o=r?.[e];if(typeof o=="string")return o;if(typeof o=="number"||typeof o=="boolean")return String(o)}exports.normalizeCertificateSerial=E.normalizeCertificateSerial;exports.APPLE_CERTIFICATE_SECRET_TYPE=A;exports.APPLE_PROVISIONING_PROFILE_SECRET_TYPE=P;exports.appleCertificateSecretName=h;exports.createBrowserSecretStore=_;exports.createLimrunSecretStore=R;exports.ensureAppleCertificateSecret=N;exports.listTeamAppleProfiles=k;exports.putAppleCertificateSecret=T;exports.putAppleProvisioningProfileSecret=I;exports.saveAppleProfileSecret=j;exports.stringField=l;

package/dist/apple-credentials/index.d.ts

@@ -1,59 +0,0 @@
-import { AppleRelayWebSocketClient } from '../core/device-install/apple';
-import { AppleCertificateType, SigningSecret, SigningSecretStore } from '../core/device-install/storage/secret-store';
-export { APPLE_CERTIFICATE_SECRET_TYPE, APPLE_PROVISIONING_PROFILE_SECRET_TYPE, createBrowserSecretStore, createLimrunSecretStore, putAppleCertificateSecret, putAppleProvisioningProfileSecret, type AppleCertificateSecretData, type AppleCertificateType, type AppleProvisioningProfileSecretData, type LimrunSecretStoreOptions, type SigningSecret, type SigningSecretData, type SigningSecretMetadata, type SigningSecretStore, type SigningSecretType, } from '../core/device-install/storage/secret-store';
-export { normalizeCertificateSerial } from '../core/device-install/storage/browser-storage';
-/**
- * Conventional secret name of a team's certificate bundle. One bundle per
- * team and Apple certificate type; the type is in the name so development
- * and distribution material never collide.
- */
-export declare function appleCertificateSecretName(teamId: string, certificateType: AppleCertificateType): string;
-export type EnsureAppleCertificateInput = {
-    relay: AppleRelayWebSocketClient;
-    teamId: string;
-    secretStore: SigningSecretStore;
-    /** Common name used when minting a new certificate. */
-    commonName?: string;
-    log?: (message: string, detail?: string) => void;
-};
-export type EnsureAppleCertificateResult = {
-    secret: SigningSecret;
-    certificateId: string;
-    /** True when a new certificate was minted instead of reusing the stored one. */
-    created: boolean;
-};
-/**
- * Returns a usable development certificate secret for the team, reusing the
- * stored one when its certificate is still on the team and minting a new
- * one otherwise. Apple caps development certificates at 2 and never returns
- * private keys, so reuse of the stored p12 is strongly preferred.
- *
- * Durability of the stored material is the secret store's concern:
- * implementors who want retries or fallbacks build them into their
- * SigningSecretStore.
- */
-export declare function ensureAppleCertificateSecret({ relay, teamId, secretStore, commonName, log, }: EnsureAppleCertificateInput): Promise<EnsureAppleCertificateResult>;
-export type SaveAppleProfileInput = {
-    relay: AppleRelayWebSocketClient;
-    teamId: string;
-    profileId: string;
-    secretStore: SigningSecretStore;
-    log?: (message: string, detail?: string) => void;
-};
-/**
- * Downloads the provisioning profile and stores it as an
- * appleProvisioningProfile secret named `${teamId}/${uuid}`. The UUID is
- * unique per profile, so a team can hold many profiles for the same
- * bundle ID and certificate set; the reference fields (certificate
- * serials, bundle IDs, device IDs parsed out of the profile) are what
- * consumers filter on.
- */
-export declare function saveAppleProfileSecret({ relay, teamId, profileId, secretStore, log, }: SaveAppleProfileInput): Promise<SigningSecret>;
-export type ListTeamProfilesInput = {
-    relay: AppleRelayWebSocketClient;
-    teamId: string;
-};
-/** Lists the team's development provisioning profiles from the portal. */
-export declare function listTeamAppleProfiles({ relay, teamId }: ListTeamProfilesInput): Promise<Record<string, unknown>[]>;
-/** Read a string-ish value from a loosely typed portal record. */
-export declare function stringField(record: Record<string, unknown> | undefined, key: string): string | undefined;