@limrun/ui 0.14.0-rc.4 → 0.14.0

package/dist/apple-credentials/index.js

@@ -1,227 +0,0 @@
-import { listAppleCertificates as h, generateAppleSigningKeyAndCSR as C, createAppleCertificate as D, downloadAppleCertificate as I, exportAppleCertificateP12 as T, downloadAppleProfile as $, listAppleProfiles as B } from "../app-store-relay/index.js";
-import { l as R, f as N } from "../browser-storage-BnO-Ma-e.mjs";
-const A = "appleCertificate", v = "appleProvisioningProfile";
-function P(r) {
-  const e = {};
-  for (const [o, n] of Object.entries(r))
-    n && (e[o] = n);
-  return e;
-}
-async function j(r, e, o) {
-  return r.put(A, e, P(o));
-}
-async function O(r, e, o) {
-  return r.put(v, e, P(o));
-}
-function z(r) {
-  const e = r.fetch ?? fetch.bind(globalThis), o = r.apiUrl.replace(/\/+$/, ""), n = (t, s) => `${o}/v1/organizations/${encodeURIComponent(r.organizationId)}/secrets/${encodeURIComponent(
-    t
-  )}/${encodeURIComponent(s)}`, c = {
-    Authorization: `Bearer ${r.token}`,
-    "Content-Type": "application/json"
-  };
-  async function a(t, s) {
-    let i = `${t.status}`;
-    try {
-      const d = await t.json();
-      d.message && (i = d.message);
-    } catch {
-    }
-    throw new Error(`Failed to ${s} secret: ${i}`);
-  }
-  return {
-    async put(t, s, i) {
-      const d = await e(n(t, s), {
-        method: "PUT",
-        headers: c,
-        body: JSON.stringify({ data: i, replace: !0 })
-      });
-      d.ok || await a(d, "store");
-      const l = await d.json();
-      return { type: l.type, name: l.name, createdAt: l.createdAt, data: l.data };
-    },
-    async get(t, s) {
-      const i = await e(n(t, s), { method: "GET", headers: c });
-      if (i.status === 404) return;
-      i.ok || await a(i, "fetch");
-      const d = await i.json();
-      return { type: d.type, name: d.name, createdAt: d.createdAt, data: d.data };
-    },
-    async list() {
-      const t = await e(
-        `${o}/v1/organizations/${encodeURIComponent(r.organizationId)}/secrets`,
-        { method: "GET", headers: c }
-      );
-      return t.ok || await a(t, "list"), (await t.json()).filter(
-        (i) => i.type === A || i.type === v
-      ).map((i) => ({ type: i.type, name: i.name, createdAt: i.createdAt }));
-    },
-    async delete(t, s) {
-      const i = await e(n(t, s), { method: "DELETE", headers: c });
-      i.status !== 404 && (i.ok || await a(i, "delete"));
-    }
-  };
-}
-const _ = "limrun-signing-secrets", k = 1, p = "secrets";
-function M() {
-  const r = (n, c) => `${n}:${c}`;
-  function e() {
-    return new Promise((n, c) => {
-      const a = indexedDB.open(_, k);
-      a.onupgradeneeded = () => {
-        const t = a.result;
-        t.objectStoreNames.contains(p) || t.createObjectStore(p, { keyPath: "id" });
-      }, a.onsuccess = () => n(a.result), a.onerror = () => c(a.error ?? new Error("Open IndexedDB failed"));
-    });
-  }
-  function o(n) {
-    return new Promise((c, a) => {
-      n.onsuccess = () => c(n.result), n.onerror = () => a(n.error ?? new Error("IndexedDB request failed"));
-    });
-  }
-  return {
-    async put(n, c, a) {
-      const t = await e(), s = await o(
-        t.transaction(p, "readonly").objectStore(p).get(r(n, c))
-      ), i = {
-        id: r(n, c),
-        type: n,
-        name: c,
-        data: a,
-        createdAt: s?.createdAt ?? (/* @__PURE__ */ new Date()).toISOString()
-      };
-      return await o(
-        t.transaction(p, "readwrite").objectStore(p).put(i)
-      ), { type: n, name: c, createdAt: i.createdAt, data: a };
-    },
-    async get(n, c) {
-      const a = await e(), t = await o(
-        a.transaction(p, "readonly").objectStore(p).get(r(n, c))
-      );
-      if (t)
-        return { type: t.type, name: t.name, createdAt: t.createdAt, data: t.data };
-    },
-    async list() {
-      const n = await e();
-      return (await o(
-        n.transaction(p, "readonly").objectStore(p).getAll()
-      )).map((a) => ({ type: a.type, name: a.name, createdAt: a.createdAt }));
-    },
-    async delete(n, c) {
-      const a = await e();
-      await o(
-        a.transaction(p, "readwrite").objectStore(p).delete(r(n, c))
-      );
-    }
-  };
-}
-function x(r, e) {
-  return `${r}/${e}`;
-}
-async function F({
-  relay: r,
-  teamId: e,
-  secretStore: o,
-  commonName: n,
-  log: c = () => {
-  }
-}) {
-  const a = "DEVELOPMENT", t = x(e, a), s = await h({ relay: r, teamId: e, certificateKind: "development" }), i = (f) => f === void 0 ? void 0 : s.find(
-    (m) => u(m, "certificateId") === f || u(m, "certRequestId") === f
-  ), d = await o.get(A, t), l = u(d?.data, "certificateID");
-  if (d && l && d.data.certificateP12Base64) {
-    const f = i(l);
-    if (f) {
-      const m = u(f, "certificateId") ?? l;
-      return c("Reusing stored Apple certificate", m), { secret: d, certificateId: m, created: !1 };
-    }
-    c("Stored certificate is no longer on the team", "Minting a new one.");
-  }
-  const S = await C({ commonName: n ?? `Limrun ${e}` }), y = await D({
-    relay: r,
-    teamId: e,
-    certificateKind: "development",
-    csrPEM: S.csrPEM
-  }), w = u(y, "certificateId") ?? u(y, "certRequestId");
-  if (!w)
-    throw new Error("Apple certificate creation did not return a certificate ID.");
-  const g = await I({
-    relay: r,
-    teamId: e,
-    certificateKind: "development",
-    certificateId: w
-  });
-  if (!g.rawBodyBase64)
-    throw new Error("Apple certificate download returned no bytes.");
-  const b = {
-    certificateP12Base64: T({
-      privateKeyPKCS8Base64: S.privateKeyPKCS8Base64,
-      certificateBase64: g.rawBodyBase64,
-      password: "",
-      friendlyName: `Apple Development ${e}`
-    }),
-    certificateType: a,
-    teamID: e,
-    certificateID: w,
-    // Normalized so it equals the serials profiles reference.
-    serialNumber: R(u(y, "serialNum")),
-    expirationDate: u(y, "expirationDateString")
-  };
-  let E;
-  try {
-    E = await j(o, t, b);
-  } catch (f) {
-    throw new Error(
-      `Certificate ${w} was created on the Apple Developer portal but saving its private key to the secret store failed: ${K(f)}. The key cannot be recovered; revoke certificate ${w} at developer.apple.com before retrying, or the retry will mint another certificate against Apple's limit.`
-    );
-  }
-  return c("Apple certificate stored", w), { secret: E, certificateId: w, created: !0 };
-}
-function K(r) {
-  return r instanceof Error ? r.message : String(r);
-}
-async function G({
-  relay: r,
-  teamId: e,
-  profileId: o,
-  secretStore: n,
-  log: c = () => {
-  }
-}) {
-  const t = (await $({ relay: r, teamId: e, profileId: o })).rawBodyBase64;
-  if (!t)
-    throw new Error("Apple provisioning profile download returned no bytes.");
-  const s = N(t), i = `${e}/${s.uuid ?? o}`, d = await O(n, i, {
-    provisioningProfileBase64: t,
-    certificateSerialNumbers: s.certificateSerialNumbers.join(","),
-    bundleIDs: s.bundleID,
-    deviceIDs: s.provisionedDevices.join(","),
-    teamID: s.teamID ?? e,
-    profileName: s.name,
-    uuid: s.uuid,
-    expirationDate: s.expirationDate
-  });
-  return c("Apple provisioning profile stored", i), d;
-}
-async function V({ relay: r, teamId: e }) {
-  return B({ relay: r, teamId: e, profileKind: "development" });
-}
-function u(r, e) {
-  const o = r?.[e];
-  if (typeof o == "string") return o;
-  if (typeof o == "number" || typeof o == "boolean") return String(o);
-}
-export {
-  A as APPLE_CERTIFICATE_SECRET_TYPE,
-  v as APPLE_PROVISIONING_PROFILE_SECRET_TYPE,
-  x as appleCertificateSecretName,
-  M as createBrowserSecretStore,
-  z as createLimrunSecretStore,
-  F as ensureAppleCertificateSecret,
-  V as listTeamAppleProfiles,
-  R as normalizeCertificateSerial,
-  j as putAppleCertificateSecret,
-  O as putAppleProvisioningProfileSecret,
-  G as saveAppleProfileSecret,
-  u as stringField
-};

package/dist/browser-storage-BnO-Ma-e.mjs

@@ -1,219 +0,0 @@
-import { f as D } from "./index-YDu8K9a4.mjs";
-const P = "limbuild-device-pairing", x = 1, d = "pairRecords", y = "limbuild-device-signing", A = 1, c = "signingAssets";
-function l(e) {
-  return (e ?? "").replace(/-/g, "").replace(/[^a-fA-F0-9]/g, "");
-}
-function f(e) {
-  return (e ?? "").trim();
-}
-async function j(e) {
-  const t = l(e);
-  if (!t) return;
-  const r = await p(P, x, d, "udid");
-  return g(
-    r.transaction(d, "readonly").objectStore(d).get(t)
-  );
-}
-async function G(e, t = {}) {
-  const r = l(e.udid);
-  if (!r) throw new Error("Cannot store pair record without a UDID.");
-  const n = {
-    ...e,
-    udid: r,
-    productName: t.productName,
-    updatedAt: (/* @__PURE__ */ new Date()).toISOString()
-  }, i = await p(P, x, d, "udid");
-  return await g(
-    i.transaction(d, "readwrite").objectStore(d).put(n)
-  ), n;
-}
-async function M({
-  deviceUDID: e,
-  bundleID: t,
-  signingMode: r = "development"
-}) {
-  const n = f(t);
-  if (!n) return;
-  const i = l(e), o = await h(I("bundle", n, r));
-  if (o) return o;
-  if (i) {
-    const s = await h(I(i, n, r));
-    if (s) return s;
-  }
-  return (await T(n, r))[0];
-}
-async function k(e = "development") {
-  return (await b()).filter((r) => (r.signingMode ?? "development") === e).sort((r, n) => new Date(n.updatedAt).getTime() - new Date(r.updatedAt).getTime())[0];
-}
-async function V(e, t = "development") {
-  return (await b()).filter((n) => !n.certificateID || !n.certificateP12Base64 || (n.signingMode ?? "development") !== t ? !1 : !e || !n.teamID || n.teamID === e).sort((n, i) => new Date(i.updatedAt).getTime() - new Date(n.updatedAt).getTime())[0];
-}
-async function F(e) {
-  const t = f(e.bundleID);
-  if (!t)
-    throw new Error("Cannot store signing assets without a bundle ID.");
-  const r = l(e.deviceUDID), n = e.signingMode ?? "development", i = I("bundle", t, n), o = {
-    ...e,
-    id: i,
-    deviceUDID: r || void 0,
-    signingMode: n,
-    bundleID: t,
-    updatedAt: (/* @__PURE__ */ new Date()).toISOString()
-  }, a = await p(y, A, c, "id");
-  return await g(
-    a.transaction(c, "readwrite").objectStore(c).put(o)
-  ), o;
-}
-async function T(e, t = "development") {
-  const r = f(e);
-  return r ? (await b()).filter(
-    (i) => i.bundleID === r && (i.signingMode ?? "development") === t
-  ) : [];
-}
-function W(e, t) {
-  const r = l(t);
-  return !!r && e.provisionedDevices.some((n) => l(n) === r);
-}
-function $(e, t) {
-  const r = f(t), n = f(e.bundleID);
-  if (!r || !n) return !1;
-  if (n === r || n === "*") return !0;
-  if (!n.endsWith(".*")) return !1;
-  const i = n.slice(0, -1);
-  return r.startsWith(i);
-}
-async function q(e) {
-  return E(new Uint8Array(await e.arrayBuffer()));
-}
-function L(e) {
-  const t = atob(e), r = new Uint8Array(t.length);
-  for (let n = 0; n < t.length; n += 1)
-    r[n] = t.charCodeAt(n);
-  return E(r);
-}
-function E(e) {
-  const t = new TextDecoder("latin1").decode(e), r = t.indexOf("<?xml"), n = t.indexOf("</plist>");
-  if (r < 0 || n < r)
-    throw new Error("Provisioning profile plist not found.");
-  const i = t.slice(r, n + 8);
-  if (/<!ENTITY/i.test(i))
-    throw new Error("Provisioning profile plist contains a disallowed ENTITY declaration.");
-  const o = new DOMParser().parseFromString(i, "application/xml");
-  if (o.querySelector("parsererror"))
-    throw new Error("Provisioning profile plist could not be parsed.");
-  const a = o.querySelector("plist > dict");
-  if (!a)
-    throw new Error("Provisioning profile plist dictionary not found.");
-  const s = v(a);
-  if (!N(s))
-    throw new Error("Provisioning profile plist has an unexpected shape.");
-  const m = N(s.Entitlements) ? s.Entitlements : {}, S = u(m["application-identifier"]), B = _(S);
-  return {
-    name: u(s.Name),
-    uuid: u(s.UUID),
-    teamID: u(m["com.apple.developer.team-identifier"]) ?? w(s.TeamIdentifier)[0],
-    applicationIdentifier: S,
-    bundleID: B,
-    provisionedDevices: w(s.ProvisionedDevices),
-    certificateSerialNumbers: O(w(s.DeveloperCertificates)),
-    getTaskAllow: R(m["get-task-allow"]),
-    expirationDate: u(s.ExpirationDate)
-  };
-}
-function z(e) {
-  return (e ?? "").replace(/^0+/, "").toUpperCase() || void 0;
-}
-function O(e) {
-  const t = [];
-  for (const r of e)
-    try {
-      const n = atob(r.replace(/\s+/g, "")), i = D.pki.certificateFromAsn1(D.asn1.fromDer(D.util.createBuffer(n))), o = z(i.serialNumber);
-      o && !t.includes(o) && t.push(o);
-    } catch {
-    }
-  return t;
-}
-async function h(e) {
-  if (!e) return;
-  const t = await p(y, A, c, "id");
-  return g(
-    t.transaction(c, "readonly").objectStore(c).get(e)
-  );
-}
-async function b() {
-  const e = await p(y, A, c, "id");
-  return g(
-    e.transaction(c, "readonly").objectStore(c).getAll()
-  );
-}
-function I(e, t, r) {
-  return `${r}:${e}:${t}`;
-}
-function _(e) {
-  if (!e) return;
-  const t = e.indexOf(".");
-  return t >= 0 ? e.slice(t + 1) : void 0;
-}
-function v(e) {
-  switch (e.tagName) {
-    case "dict":
-      return C(e);
-    case "array":
-      return Array.from(e.children).map(v);
-    case "string":
-    case "date":
-      return e.textContent ?? "";
-    default:
-      return e.textContent ?? "";
-  }
-}
-function C(e) {
-  const t = {}, r = Array.from(e.children);
-  for (let n = 0; n < r.length; n += 2) {
-    const i = r[n], o = r[n + 1];
-    !i || i.tagName !== "key" || !o || (t[i.textContent ?? ""] = v(o));
-  }
-  return t;
-}
-function u(e) {
-  return typeof e == "string" && e ? e : void 0;
-}
-function w(e) {
-  return Array.isArray(e) ? e.filter((t) => typeof t == "string") : [];
-}
-function R(e) {
-  return typeof e == "boolean" ? e : void 0;
-}
-function N(e) {
-  return typeof e == "object" && e !== null && !Array.isArray(e);
-}
-function p(e, t, r, n) {
-  return new Promise((i, o) => {
-    const a = indexedDB.open(e, t);
-    a.onupgradeneeded = () => {
-      const s = a.result;
-      s.objectStoreNames.contains(r) || s.createObjectStore(r, { keyPath: n });
-    }, a.onsuccess = () => i(a.result), a.onerror = () => o(a.error ?? new Error("Open IndexedDB failed"));
-  });
-}
-function g(e) {
-  return new Promise((t, r) => {
-    e.onsuccess = () => t(e.result), e.onerror = () => r(e.error ?? new Error("IndexedDB request failed"));
-  });
-}
-export {
-  F as a,
-  $ as b,
-  W as c,
-  V as d,
-  M as e,
-  L as f,
-  k as g,
-  E as h,
-  f as i,
-  j,
-  G as k,
-  z as l,
-  l as n,
-  q as p
-};

package/dist/browser-storage-DLxIqZk5.js

@@ -1 +0,0 @@
-"use strict";const m=require("./index-ChhtuQ7e.js"),B="limbuild-device-pairing",x=1,l="pairRecords",A="limbuild-device-signing",y=1,c="signingAssets";function d(e){return(e??"").replace(/-/g,"").replace(/[^a-fA-F0-9]/g,"")}function u(e){return(e??"").trim()}async function C(e){const t=d(e);if(!t)return;const r=await g(B,x,l,"udid");return p(r.transaction(l,"readonly").objectStore(l).get(t))}async function T(e,t={}){const r=d(e.udid);if(!r)throw new Error("Cannot store pair record without a UDID.");const n={...e,udid:r,productName:t.productName,updatedAt:new Date().toISOString()},i=await g(B,x,l,"udid");return await p(i.transaction(l,"readwrite").objectStore(l).put(n)),n}async function R({deviceUDID:e,bundleID:t,signingMode:r="development"}){const n=u(t);if(!n)return;const i=d(e),o=await h(I("bundle",n,r));if(o)return o;if(i){const s=await h(I(i,n,r));if(s)return s}return(await M(n,r))[0]}async function O(e="development"){return(await S()).filter(r=>(r.signingMode??"development")===e).sort((r,n)=>new Date(n.updatedAt).getTime()-new Date(r.updatedAt).getTime())[0]}async function U(e,t="development"){return(await S()).filter(n=>!n.certificateID||!n.certificateP12Base64||(n.signingMode??"development")!==t?!1:!e||!n.teamID||n.teamID===e).sort((n,i)=>new Date(i.updatedAt).getTime()-new Date(n.updatedAt).getTime())[0]}async function _(e){const t=u(e.bundleID);if(!t)throw new Error("Cannot store signing assets without a bundle ID.");const r=d(e.deviceUDID),n=e.signingMode??"development",i=I("bundle",t,n),o={...e,id:i,deviceUDID:r||void 0,signingMode:n,bundleID:t,updatedAt:new Date().toISOString()},a=await g(A,y,c,"id");return await p(a.transaction(c,"readwrite").objectStore(c).put(o)),o}async function M(e,t="development"){const r=u(e);return r?(await S()).filter(i=>i.bundleID===r&&(i.signingMode??"development")===t):[]}function G(e,t){const r=d(t);return!!r&&e.provisionedDevices.some(n=>d(n)===r)}function j(e,t){const r=u(t),n=u(e.bundleID);if(!r||!n)return!1;if(n===r||n==="*")return!0;if(!n.endsWith(".*"))return!1;const i=n.slice(0,-1);return r.startsWith(i)}async function V(e){return v(new Uint8Array(await e.arrayBuffer()))}function k(e){const t=atob(e),r=new Uint8Array(t.length);for(let n=0;n<t.length;n+=1)r[n]=t.charCodeAt(n);return v(r)}function v(e){const t=new TextDecoder("latin1").decode(e),r=t.indexOf("<?xml"),n=t.indexOf("</plist>");if(r<0||n<r)throw new Error("Provisioning profile plist not found.");const i=t.slice(r,n+8);if(/<!ENTITY/i.test(i))throw new Error("Provisioning profile plist contains a disallowed ENTITY declaration.");const o=new DOMParser().parseFromString(i,"application/xml");if(o.querySelector("parsererror"))throw new Error("Provisioning profile plist could not be parsed.");const a=o.querySelector("plist > dict");if(!a)throw new Error("Provisioning profile plist dictionary not found.");const s=b(a);if(!N(s))throw new Error("Provisioning profile plist has an unexpected shape.");const D=N(s.Entitlements)?s.Entitlements:{},P=f(D["application-identifier"]),z=L(P);return{name:f(s.Name),uuid:f(s.UUID),teamID:f(D["com.apple.developer.team-identifier"])??w(s.TeamIdentifier)[0],applicationIdentifier:P,bundleID:z,provisionedDevices:w(s.ProvisionedDevices),certificateSerialNumbers:F(w(s.DeveloperCertificates)),getTaskAllow:q(D["get-task-allow"]),expirationDate:f(s.ExpirationDate)}}function E(e){return(e??"").replace(/^0+/,"").toUpperCase()||void 0}function F(e){const t=[];for(const r of e)try{const n=atob(r.replace(/\s+/g,"")),i=m.forge.pki.certificateFromAsn1(m.forge.asn1.fromDer(m.forge.util.createBuffer(n))),o=E(i.serialNumber);o&&!t.includes(o)&&t.push(o)}catch{}return t}async function h(e){if(!e)return;const t=await g(A,y,c,"id");return p(t.transaction(c,"readonly").objectStore(c).get(e))}async function S(){const e=await g(A,y,c,"id");return p(e.transaction(c,"readonly").objectStore(c).getAll())}function I(e,t,r){return`${r}:${e}:${t}`}function L(e){if(!e)return;const t=e.indexOf(".");return t>=0?e.slice(t+1):void 0}function b(e){switch(e.tagName){case"dict":return W(e);case"array":return Array.from(e.children).map(b);case"string":case"date":return e.textContent??"";default:return e.textContent??""}}function W(e){const t={},r=Array.from(e.children);for(let n=0;n<r.length;n+=2){const i=r[n],o=r[n+1];!i||i.tagName!=="key"||!o||(t[i.textContent??""]=b(o))}return t}function f(e){return typeof e=="string"&&e?e:void 0}function w(e){return Array.isArray(e)?e.filter(t=>typeof t=="string"):[]}function q(e){return typeof e=="boolean"?e:void 0}function N(e){return typeof e=="object"&&e!==null&&!Array.isArray(e)}function g(e,t,r,n){return new Promise((i,o)=>{const a=indexedDB.open(e,t);a.onupgradeneeded=()=>{const s=a.result;s.objectStoreNames.contains(r)||s.createObjectStore(r,{keyPath:n})},a.onsuccess=()=>i(a.result),a.onerror=()=>o(a.error??new Error("Open IndexedDB failed"))})}function p(e){return new Promise((t,r)=>{e.onsuccess=()=>t(e.result),e.onerror=()=>r(e.error??new Error("IndexedDB request failed"))})}exports.getLatestSigningAssets=O;exports.getLatestSigningAssetsWithCertificate=U;exports.getPairRecord=C;exports.getSigningAssets=R;exports.normalizeBundleID=u;exports.normalizeCertificateSerial=E;exports.normalizeUDID=d;exports.parseProvisioningProfile=V;exports.parseProvisioningProfileBase64=k;exports.parseProvisioningProfileBytes=v;exports.profileContainsDevice=G;exports.profileMatchesBundleID=j;exports.putPairRecord=T;exports.putSigningAssets=_;

package/dist/client-D1drDXxE.js

@@ -1 +0,0 @@
-"use strict";const F=require("./gsa-srp-CCIfUz7Y.js");class g{constructor(t,r,o){this.apiUrl=t,this.token=r,this.organizationId=o}socket;nextId=1;pending=new Map;async connect(){if(this.socket&&this.socket.readyState===WebSocket.OPEN)return;const t=new WebSocket(E(this.apiUrl,this.token,this.organizationId));this.socket=t,t.onmessage=r=>this.handleMessage(r),t.onclose=()=>this.rejectPending(new Error("Apple relay WebSocket closed")),t.onerror=()=>this.rejectPending(new Error("Apple relay WebSocket failed")),await new Promise((r,o)=>{t.onopen=()=>r(),t.onerror=()=>o(new Error("Apple relay WebSocket connection failed"))})}request(t,r){const o=this.socket;if(!o||o.readyState!==WebSocket.OPEN)throw new Error("Apple relay WebSocket is not connected.");const a=String(this.nextId++),n=new Promise((p,i)=>{this.pending.set(a,{resolve:h=>p(q(h)),reject:i})});return o.send(JSON.stringify({id:a,type:t,...r===void 0?{}:{payload:r}})),n}close(){this.rejectPending(new Error("Apple relay WebSocket closed")),this.socket?.close(),this.socket=void 0}handleMessage(t){const r=JSON.parse(String(t.data)),o=this.pending.get(r.id);if(o){if(this.pending.delete(r.id),!r.ok){o.reject(new Error(r.error||"Apple relay request failed"));return}if(!r.response){o.reject(new Error("Apple relay response was empty."));return}o.resolve(r.response)}}rejectPending(t){for(const r of this.pending.values())r.reject(t);this.pending.clear()}}async function m(e,t,r){const o=new g(e,t,r);return await o.connect(),o}async function S(e,t){return e.request("srpInit",t)}async function A(e,t){return e.request("srpComplete",t)}async function P(e){return e.request("triggerTrustedDevice2FA")}async function b(e,t,r="sms"){return e.request("triggerPhone2FA",{phoneNumberId:t,mode:r})}async function k(e,t){return e.request("submitTrustedDevice2FA",{code:t})}async function T(e,t,r,o="sms"){return e.request("submitPhone2FA",{phoneNumberId:t,mode:o,code:r})}async function v(e){return e.request("finalize")}async function R(e,t){return e.request("provisioning",t)}function q(e){if(e.body!==void 0||!e.rawBody)return e;try{return{...e,body:JSON.parse(e.rawBody)}}catch{return e}}function E(e,t,r){const o=new URL(e);return o.protocol=o.protocol==="https:"?"wss:":"ws:",o.pathname=`${o.pathname.replace(/\/$/,"")}/ios/appstoreconnect/ws`,t&&o.searchParams.set("token",t),r&&o.searchParams.set("organization",r),o.toString()}async function N({registryApiUrl:e,accountName:t,password:r,token:o,organizationId:a}){const n=await m(e,o,a);try{const p=new F.AppleGsaSrpClient(t),i=await S(n,await p.init());if(i.status<200||i.status>=300)throw new Error(`Apple SRP init failed: HTTP ${i.status} ${i.rawBody??""}`.trim());if(!i.body)throw new Error("Apple SRP init response did not include a body.");const h=await p.complete(r,i.body),u=await A(n,{...h,rememberMe:!1,trustTokens:[]}),y=u.status===409;let s,d={type:"trustedDevice"};if(y){s=await P(n);const c=x(s.body);if(s.status===412){if(!c)throw new Error("Apple requested phone verification but did not include a trusted phone number.");d={type:"phone",phoneNumberId:c.id,mode:c.pushMode??"sms"},s=await b(n,c.id,c.pushMode??"sms")}if(s.status<200||s.status>=300)throw new Error(`Apple two-factor challenge failed: HTTP ${s.status} ${s.rawBody??""}`.trim())}else if(u.status<200||u.status>=300)throw new Error(`Apple SRP complete failed: HTTP ${u.status} ${u.rawBody??""}`.trim());return{relay:n,completeResponse:u,twoFactorChallengeResponse:s,requiresTwoFactor:y,finishTwoFactor:async c=>{const l=d.type==="phone"?await T(n,d.phoneNumberId,c,d.mode):await k(n,c);if(l.status<200||l.status>=300)throw new Error(`Apple two-factor code failed: HTTP ${l.status} ${l.rawBody??""}`.trim());return l},finalize:async()=>v(n),close:async()=>n.close()}}catch(p){throw n.close(),p}}function x(e){if(!f(e))return;const t=f(e.phoneNumberVerification)?e.phoneNumberVerification:void 0,r=w(t?.trustedPhoneNumber)??w(e.trustedPhoneNumber)??w(e.phoneNumber);if(!r)return;const o=r.id;if(typeof o!="number")return;const a=typeof r.pushMode=="string"?r.pushMode:typeof e.mode=="string"?e.mode:void 0;return{id:o,pushMode:a}}function w(e){return f(e)?e:void 0}function f(e){return typeof e=="object"&&e!==null&&!Array.isArray(e)}exports.AppleRelayWebSocketClient=g;exports.fetchAppleAccountSession=v;exports.openAppleRelayWebSocket=m;exports.proxyPhoneTwoFactorCode=T;exports.proxyProvisioningRequest=R;exports.proxySrpComplete=A;exports.proxySrpInit=S;exports.proxyTwoFactorCode=k;exports.startBrowserOwnedAppleIDLogin=N;exports.triggerPhoneTwoFactor=b;exports.triggerTrustedDeviceTwoFactor=P;

package/dist/client-DSuNtWDv.mjs

@@ -1,184 +0,0 @@
-import { A as m } from "./gsa-srp-Bme3JLEi.mjs";
-class g {
-  constructor(t, r, o) {
-    this.apiUrl = t, this.token = r, this.organizationId = o;
-  }
-  socket;
-  nextId = 1;
-  pending = /* @__PURE__ */ new Map();
-  async connect() {
-    if (this.socket && this.socket.readyState === WebSocket.OPEN) return;
-    const t = new WebSocket(R(this.apiUrl, this.token, this.organizationId));
-    this.socket = t, t.onmessage = (r) => this.handleMessage(r), t.onclose = () => this.rejectPending(new Error("Apple relay WebSocket closed")), t.onerror = () => this.rejectPending(new Error("Apple relay WebSocket failed")), await new Promise((r, o) => {
-      t.onopen = () => r(), t.onerror = () => o(new Error("Apple relay WebSocket connection failed"));
-    });
-  }
-  request(t, r) {
-    const o = this.socket;
-    if (!o || o.readyState !== WebSocket.OPEN)
-      throw new Error("Apple relay WebSocket is not connected.");
-    const c = String(this.nextId++), n = new Promise((p, i) => {
-      this.pending.set(c, {
-        resolve: (h) => p(N(h)),
-        reject: i
-      });
-    });
-    return o.send(JSON.stringify({ id: c, type: t, ...r === void 0 ? {} : { payload: r } })), n;
-  }
-  close() {
-    this.rejectPending(new Error("Apple relay WebSocket closed")), this.socket?.close(), this.socket = void 0;
-  }
-  handleMessage(t) {
-    const r = JSON.parse(String(t.data)), o = this.pending.get(r.id);
-    if (o) {
-      if (this.pending.delete(r.id), !r.ok) {
-        o.reject(new Error(r.error || "Apple relay request failed"));
-        return;
-      }
-      if (!r.response) {
-        o.reject(new Error("Apple relay response was empty."));
-        return;
-      }
-      o.resolve(r.response);
-    }
-  }
-  rejectPending(t) {
-    for (const r of this.pending.values())
-      r.reject(t);
-    this.pending.clear();
-  }
-}
-async function b(e, t, r) {
-  const o = new g(e, t, r);
-  return await o.connect(), o;
-}
-async function A(e, t) {
-  return e.request("srpInit", t);
-}
-async function P(e, t) {
-  return e.request("srpComplete", t);
-}
-async function S(e) {
-  return e.request("triggerTrustedDevice2FA");
-}
-async function k(e, t, r = "sms") {
-  return e.request("triggerPhone2FA", { phoneNumberId: t, mode: r });
-}
-async function T(e, t) {
-  return e.request("submitTrustedDevice2FA", { code: t });
-}
-async function v(e, t, r, o = "sms") {
-  return e.request("submitPhone2FA", { phoneNumberId: t, mode: o, code: r });
-}
-async function E(e) {
-  return e.request("finalize");
-}
-async function W(e, t) {
-  return e.request("provisioning", t);
-}
-function N(e) {
-  if (e.body !== void 0 || !e.rawBody)
-    return e;
-  try {
-    return {
-      ...e,
-      body: JSON.parse(e.rawBody)
-    };
-  } catch {
-    return e;
-  }
-}
-function R(e, t, r) {
-  const o = new URL(e);
-  return o.protocol = o.protocol === "https:" ? "wss:" : "ws:", o.pathname = `${o.pathname.replace(/\/$/, "")}/ios/appstoreconnect/ws`, t && o.searchParams.set("token", t), r && o.searchParams.set("organization", r), o.toString();
-}
-async function M({
-  registryApiUrl: e,
-  accountName: t,
-  password: r,
-  token: o,
-  organizationId: c
-}) {
-  const n = await b(e, o, c);
-  try {
-    const p = new m(t), i = await A(n, await p.init());
-    if (i.status < 200 || i.status >= 300)
-      throw new Error(
-        `Apple SRP init failed: HTTP ${i.status} ${i.rawBody ?? ""}`.trim()
-      );
-    if (!i.body)
-      throw new Error("Apple SRP init response did not include a body.");
-    const h = await p.complete(r, i.body), u = await P(n, {
-      ...h,
-      rememberMe: !1,
-      trustTokens: []
-    }), y = u.status === 409;
-    let s, l = { type: "trustedDevice" };
-    if (y) {
-      s = await S(n);
-      const a = q(s.body);
-      if (s.status === 412) {
-        if (!a)
-          throw new Error("Apple requested phone verification but did not include a trusted phone number.");
-        l = {
-          type: "phone",
-          phoneNumberId: a.id,
-          mode: a.pushMode ?? "sms"
-        }, s = await k(n, a.id, a.pushMode ?? "sms");
-      }
-      if (s.status < 200 || s.status >= 300)
-        throw new Error(
-          `Apple two-factor challenge failed: HTTP ${s.status} ${s.rawBody ?? ""}`.trim()
-        );
-    } else if (u.status < 200 || u.status >= 300)
-      throw new Error(
-        `Apple SRP complete failed: HTTP ${u.status} ${u.rawBody ?? ""}`.trim()
-      );
-    return {
-      relay: n,
-      completeResponse: u,
-      twoFactorChallengeResponse: s,
-      requiresTwoFactor: y,
-      finishTwoFactor: async (a) => {
-        const d = l.type === "phone" ? await v(n, l.phoneNumberId, a, l.mode) : await T(n, a);
-        if (d.status < 200 || d.status >= 300)
-          throw new Error(
-            `Apple two-factor code failed: HTTP ${d.status} ${d.rawBody ?? ""}`.trim()
-          );
-        return d;
-      },
-      finalize: async () => E(n),
-      close: async () => n.close()
-    };
-  } catch (p) {
-    throw n.close(), p;
-  }
-}
-function q(e) {
-  if (!f(e)) return;
-  const t = f(e.phoneNumberVerification) ? e.phoneNumberVerification : void 0, r = w(t?.trustedPhoneNumber) ?? w(e.trustedPhoneNumber) ?? w(e.phoneNumber);
-  if (!r) return;
-  const o = r.id;
-  if (typeof o != "number") return;
-  const c = typeof r.pushMode == "string" ? r.pushMode : typeof e.mode == "string" ? e.mode : void 0;
-  return { id: o, pushMode: c };
-}
-function w(e) {
-  return f(e) ? e : void 0;
-}
-function f(e) {
-  return typeof e == "object" && e !== null && !Array.isArray(e);
-}
-export {
-  g as A,
-  v as a,
-  P as b,
-  A as c,
-  T as d,
-  S as e,
-  E as f,
-  b as o,
-  W as p,
-  M as s,
-  k as t
-};

package/dist/core/device-install/apple/client.d.ts

@@ -1,18 +0,0 @@
-import { AppleRelayWebSocketClient, AppleRelayResponse } from './relay';
-export type AppleIDLoginInput = {
-    registryApiUrl: string;
-    accountName: string;
-    password: string;
-    token?: string;
-    organizationId?: string;
-};
-export type AppleIDLoginResult = {
-    relay: AppleRelayWebSocketClient;
-    completeResponse: AppleRelayResponse;
-    twoFactorChallengeResponse?: AppleRelayResponse;
-    requiresTwoFactor: boolean;
-    finishTwoFactor: (code: string) => Promise<AppleRelayResponse>;
-    finalize: () => Promise<AppleRelayResponse>;
-    close: () => Promise<void>;
-};
-export declare function startBrowserOwnedAppleIDLogin({ registryApiUrl, accountName, password, token, organizationId, }: AppleIDLoginInput): Promise<AppleIDLoginResult>;

package/dist/core/device-install/apple/crypto.d.ts

@@ -1,20 +0,0 @@
-export type AppleSigningKeyMaterial = {
-    privateKey: CryptoKey;
-    privateKeyPKCS8Base64: string;
-    publicKeySPKIBase64: string;
-    csrPEM: string;
-    csrBase64: string;
-};
-export type AppleCSRInput = {
-    commonName: string;
-    emailAddress?: string;
-};
-export type ExportP12Input = {
-    privateKeyPKCS8Base64: string;
-    certificateBase64?: string;
-    certificatePEM?: string;
-    password: string;
-    friendlyName?: string;
-};
-export declare function generateAppleSigningKeyAndCSR(input: AppleCSRInput): Promise<AppleSigningKeyMaterial>;
-export declare function exportAppleCertificateP12(input: ExportP12Input): string;