@limrun/ui 0.14.0-rc.4 → 0.14.0

package/dist/core/device-install/apple/gsa-srp.d.ts

@@ -1,26 +0,0 @@
-export type AppleSRPProtocol = 's2k' | 's2k_fo';
-export type AppleSRPInitRequest = {
-    a: string;
-    accountName: string;
-    protocols: AppleSRPProtocol[];
-};
-export type AppleSRPInitResponse = {
-    iteration: number;
-    salt: string;
-    protocol: AppleSRPProtocol;
-    b: string;
-    c: string;
-};
-export type AppleSRPCompleteProof = {
-    accountName: string;
-    m1: string;
-    m2: string;
-    c: string;
-};
-export declare class AppleGsaSrpClient {
-    private readonly accountName;
-    private srpClient?;
-    constructor(accountName: string);
-    init(): Promise<AppleSRPInitRequest>;
-    complete(password: string, serverData: AppleSRPInitResponse): Promise<AppleSRPCompleteProof>;
-}

package/dist/core/device-install/apple/index.d.ts

@@ -1,5 +0,0 @@
-export * from './client';
-export * from './crypto';
-export * from './gsa-srp';
-export * from './provisioning';
-export * from './relay';

package/dist/core/device-install/apple/provisioning.d.ts

@@ -1,212 +0,0 @@
-import { DeviceInstallSigningMode, ProvisioningProfileInfo, StoredSigningAssets } from '../types';
-import { AppleProvisioningRequest } from './relay';
-export type AppleDeveloperPortalTeam = {
-    name?: string;
-    teamId?: string;
-    providerId?: string | number;
-    publicProviderId?: string;
-    type?: string;
-    subType?: string;
-};
-export type AppleDeveloperPortalDevice = {
-    deviceId?: string;
-    name?: string;
-    deviceNumber?: string;
-    deviceClass?: string;
-    model?: string;
-    status?: string;
-};
-export type AppleDeveloperPortalAppID = {
-    appId?: string;
-    appIdId?: string;
-    identifier?: string;
-    bundleId?: string;
-    name?: string;
-    prefix?: string;
-    platform?: string;
-};
-export type AppleDeveloperPortalResponse = {
-    resultCode?: number;
-    resultString?: string;
-    userString?: string;
-    teams?: AppleDeveloperPortalTeam[];
-    provider?: AppleDeveloperPortalTeam;
-    availableProviders?: AppleDeveloperPortalTeam[];
-    appIds?: AppleDeveloperPortalAppID[];
-    devices?: AppleDeveloperPortalDevice[];
-    certRequests?: Array<Record<string, unknown>>;
-    certRequest?: Record<string, unknown>;
-    appId?: Record<string, unknown>;
-    device?: Record<string, unknown>;
-    provisioningProfile?: Record<string, unknown>;
-    provisioningProfiles?: Array<Record<string, unknown>>;
-};
-export type AppleProvisioningContext = {
-    bundleID: string;
-    deviceUDID: string;
-    teamID?: string;
-};
-export type AppleSigningAssetCacheInput = {
-    bundleID: string;
-    deviceUDID?: string;
-    teamID?: string;
-    signingMode?: DeviceInstallSigningMode;
-};
-export type PutAppleGeneratedSigningAssetsInput = {
-    bundleID: string;
-    deviceUDID?: string;
-    teamID?: string;
-    signingMode?: DeviceInstallSigningMode;
-    certificateID?: string;
-    certificateP12Base64: string;
-    certificatePassword?: string;
-    provisioningProfileBase64: string;
-    profile: ProvisioningProfileInfo;
-};
-export declare function listTeamsRequest(): AppleProvisioningRequest;
-export declare function findBundleIDRequest({ bundleID, teamID, }: Pick<AppleProvisioningContext, 'bundleID' | 'teamID'>): {
-    method: "POST";
-    path: string;
-    payload: Record<string, unknown>;
-};
-export declare function findDeviceRequest({ deviceUDID, teamID, }: Pick<AppleProvisioningContext, 'deviceUDID' | 'teamID'>): {
-    method: "POST";
-    path: string;
-    payload: Record<string, unknown>;
-};
-export declare function findDevelopmentCertificatesRequest(teamID?: string): {
-    method: "POST";
-    path: string;
-    payload: Record<string, unknown>;
-};
-export declare function findDistributionCertificatesRequest(teamID?: string): {
-    method: "POST";
-    path: string;
-    payload: Record<string, unknown>;
-};
-export declare function findDevelopmentProfilesRequest({ bundleID, teamID, }: Pick<AppleProvisioningContext, 'bundleID' | 'teamID'>): {
-    method: "POST";
-    path: string;
-    payload: Record<string, unknown>;
-};
-export declare function findAdHocProfilesRequest({ bundleID, teamID, }: Pick<AppleProvisioningContext, 'bundleID' | 'teamID'>): {
-    method: "POST";
-    path: string;
-    payload: Record<string, unknown>;
-};
-export declare function registerDeviceRequest({ deviceUDID, teamID, name, }: Pick<AppleProvisioningContext, 'deviceUDID' | 'teamID'> & {
-    name?: string;
-}): {
-    method: "POST";
-    path: string;
-    payload: {
-        teamId: string;
-        deviceNames: string;
-        deviceNumbers: string;
-        deviceClasses: string;
-        register: string;
-    };
-};
-export declare function createBundleIDRequest({ bundleID, teamID, name, }: Pick<AppleProvisioningContext, 'bundleID' | 'teamID'> & {
-    name?: string;
-}): {
-    method: "POST";
-    path: string;
-    payload: {
-        teamId: string;
-        name: string;
-        identifier: string;
-        type: string;
-    };
-};
-export declare function submitDevelopmentCSRRequest({ csrPEM, teamID }: {
-    csrPEM: string;
-    teamID?: string;
-}): {
-    method: "POST";
-    path: string;
-    payload: {
-        teamId: string;
-        type: string;
-        csrContent: string;
-    };
-};
-export declare function submitDistributionCSRRequest({ csrPEM, teamID }: {
-    csrPEM: string;
-    teamID?: string;
-}): {
-    method: "POST";
-    path: string;
-    payload: {
-        teamId: string;
-        type: string;
-        csrContent: string;
-    };
-};
-export declare function downloadCertificateRequest(certificateID: string, teamID?: string): {
-    method: "GET";
-    path: string;
-    payload: {
-        teamId: string;
-        certificateId: string;
-        type: string;
-    };
-};
-export declare function downloadDistributionCertificateRequest(certificateID: string, teamID?: string): {
-    method: "GET";
-    path: string;
-    payload: {
-        teamId: string;
-        certificateId: string;
-        type: string;
-    };
-};
-export declare function createDevelopmentProfileRequest({ bundleID, teamID, appIDID, certificateID, deviceIDs, name, }: Pick<AppleProvisioningContext, 'bundleID' | 'teamID'> & {
-    appIDID: string;
-    certificateID: string;
-    deviceIDs: string[];
-    name?: string;
-}): {
-    method: "POST";
-    path: string;
-    payload: {
-        teamId: string;
-        provisioningProfileName: string;
-        certificateIds: string[];
-        appIdId: string;
-        deviceIds: string[];
-        distributionType: string;
-        subPlatform: string;
-    };
-};
-export declare function createAdHocProfileRequest({ bundleID, teamID, appIDID, certificateID, deviceIDs, name, }: Pick<AppleProvisioningContext, 'bundleID' | 'teamID'> & {
-    appIDID: string;
-    certificateID: string;
-    deviceIDs: string[];
-    name?: string;
-}): {
-    method: "POST";
-    path: string;
-    payload: {
-        teamId: string;
-        provisioningProfileName: string;
-        certificateIds: string[];
-        appIdId: string;
-        deviceIds: string[];
-        distributionType: string;
-        subPlatform: string;
-    };
-};
-export declare function downloadProfileRequest(profileID: string, teamID?: string): {
-    method: "GET";
-    path: string;
-    payload: {
-        teamId: string;
-        provisioningProfileId: string;
-    };
-};
-export declare function getReusableAppleSigningAssets({ bundleID, deviceUDID, teamID, signingMode, }: AppleSigningAssetCacheInput): Promise<StoredSigningAssets | undefined>;
-export declare function putAppleGeneratedSigningAssets(input: PutAppleGeneratedSigningAssetsInput): Promise<StoredSigningAssets>;
-export declare function storedSigningAssetsReusable(stored: StoredSigningAssets, { bundleID, deviceUDID, teamID, signingMode }: AppleSigningAssetCacheInput): boolean;
-export declare function selectDeveloperPortalTeam(body: unknown): AppleDeveloperPortalTeam | undefined;
-export declare function teamIDCandidates(body: unknown): string[];

package/dist/core/device-install/apple/relay.d.ts

@@ -1,40 +0,0 @@
-import { AppleSRPCompleteProof, AppleSRPInitRequest, AppleSRPInitResponse } from './gsa-srp';
-export type AppleRelayResponse<T = unknown> = {
-    status: number;
-    statusText: string;
-    headers?: Record<string, string>;
-    body?: T;
-    rawBody?: string;
-    rawBodyBase64?: string;
-};
-export type AppleProvisioningRequest = {
-    method?: 'GET' | 'POST';
-    path: string;
-    payload?: unknown;
-};
-export declare class AppleRelayWebSocketClient {
-    private readonly apiUrl;
-    private readonly token?;
-    private readonly organizationId?;
-    private socket?;
-    private nextId;
-    private readonly pending;
-    constructor(apiUrl: string, token?: string | undefined, organizationId?: string | undefined);
-    connect(): Promise<void>;
-    request<T = unknown>(type: string, payload?: unknown): Promise<AppleRelayResponse<T>>;
-    close(): void;
-    private handleMessage;
-    private rejectPending;
-}
-export declare function openAppleRelayWebSocket(apiUrl: string, token?: string, organizationId?: string): Promise<AppleRelayWebSocketClient>;
-export declare function proxySrpInit(relay: AppleRelayWebSocketClient, payload: AppleSRPInitRequest): Promise<AppleRelayResponse<AppleSRPInitResponse>>;
-export declare function proxySrpComplete(relay: AppleRelayWebSocketClient, payload: AppleSRPCompleteProof & {
-    rememberMe: boolean;
-    trustTokens: string[];
-}): Promise<AppleRelayResponse<unknown>>;
-export declare function triggerTrustedDeviceTwoFactor(relay: AppleRelayWebSocketClient): Promise<AppleRelayResponse<unknown>>;
-export declare function triggerPhoneTwoFactor(relay: AppleRelayWebSocketClient, phoneNumberId: number, mode?: string): Promise<AppleRelayResponse<unknown>>;
-export declare function proxyTwoFactorCode(relay: AppleRelayWebSocketClient, code: string): Promise<AppleRelayResponse<unknown>>;
-export declare function proxyPhoneTwoFactorCode(relay: AppleRelayWebSocketClient, phoneNumberId: number, code: string, mode?: string): Promise<AppleRelayResponse<unknown>>;
-export declare function fetchAppleAccountSession(relay: AppleRelayWebSocketClient): Promise<AppleRelayResponse<unknown>>;
-export declare function proxyProvisioningRequest<T = unknown>(relay: AppleRelayWebSocketClient, request: AppleProvisioningRequest): Promise<AppleRelayResponse<T>>;

package/dist/core/device-install/index.d.ts

@@ -1,4 +0,0 @@
-export * from './types';
-export * from './apple';
-export * from './operations';
-export * from './storage';

package/dist/core/device-install/operations/index.d.ts

@@ -1,6 +0,0 @@
-export * from './limbuild-client';
-export * from './operations';
-export * from './relay-client';
-export * from './relay-protocol';
-export * from './usbmux';
-export * from './webusb';

package/dist/core/device-install/operations/limbuild-client.d.ts

@@ -1,43 +0,0 @@
-import { BuildLogLine, DeviceInstallBuildStatus } from '../types';
-export type LimbuildInfo = {
-    homeDir?: string;
-    lastBuildConfig?: {
-        bundleId?: string;
-        sdk?: string;
-    };
-};
-export type StartSignedDeviceBuildOptions = {
-    limbuildApiUrl: string;
-    token?: string;
-    certificateP12Base64: string;
-    certificatePassword?: string;
-    provisioningProfileBase64: string;
-    signedUploadUrl?: string;
-};
-export type BuildLogEventsOptions = {
-    limbuildApiUrl: string;
-    execId: string;
-    token?: string;
-    onLine: (line: BuildLogLine) => void;
-    onStatus: (status: DeviceInstallBuildStatus) => void;
-    onError?: (error: Error) => void;
-};
-export type IOSOTAInstall = {
-    installUrl: string;
-    landingUrl: string;
-    manifestUrl: string;
-    ipaUrl: string;
-    bundleId: string;
-    displayName: string;
-};
-export type GetIOSOTAInstallOptions = {
-    limbuildApiUrl: string;
-    execId: string;
-    token?: string;
-};
-export declare function fetchLimbuildInfo(limbuildApiUrl: string, token?: string): Promise<LimbuildInfo>;
-export declare function startSignedDeviceBuild({ limbuildApiUrl, token, certificateP12Base64, certificatePassword, provisioningProfileBase64, signedUploadUrl, }: StartSignedDeviceBuildOptions): Promise<{
-    execId?: string;
-}>;
-export declare function getIOSOTAInstall({ limbuildApiUrl, execId, token }: GetIOSOTAInstallOptions): Promise<IOSOTAInstall>;
-export declare function watchBuildLogEvents({ limbuildApiUrl, execId, token, onLine, onStatus, onError, }: BuildLogEventsOptions): () => void;

package/dist/core/device-install/operations/operations.d.ts

@@ -1,47 +0,0 @@
-import { DeviceHello, DeviceInstallLog, PairRecordPayload } from '../types';
-import { RelayClient } from './relay-client';
-import { UsbmuxSession } from './usbmux';
-import { UsbmuxCandidate } from './webusb';
-export type DeviceRelayTarget = {
-    device: USBDevice;
-    candidate: UsbmuxCandidate;
-    session?: UsbmuxSession;
-    claimedInterfaceNumber?: number;
-    hello: DeviceHello;
-};
-export type RequestUSBAccessOptions = {
-    log: DeviceInstallLog;
-};
-export type StartPairingRelayOptions = {
-    registryApiUrl: string;
-    token?: string;
-    organizationId?: string;
-    log: DeviceInstallLog;
-    target: DeviceRelayTarget;
-};
-export type InstallSource = {
-    assetId: string;
-    assetName?: never;
-    downloadUrl?: never;
-} | {
-    assetId?: never;
-    assetName: string;
-    downloadUrl?: never;
-} | {
-    assetId?: never;
-    assetName?: never;
-    downloadUrl: string;
-};
-export type StartInstallRelayOptions = StartPairingRelayOptions & {
-    pairRecord: PairRecordPayload;
-    installSource: InstallSource;
-};
-export declare function requestUSBAccess({ log }: RequestUSBAccessOptions): Promise<DeviceRelayTarget>;
-export declare function startPairingRelay({ registryApiUrl, token, organizationId, log, target, }: StartPairingRelayOptions): Promise<{
-    relay: RelayClient;
-    pairRecord: PairRecordPayload;
-    target: DeviceRelayTarget;
-}>;
-export declare function startInstallRelay({ registryApiUrl, token, organizationId, log, target, pairRecord, installSource, }: StartInstallRelayOptions): Promise<RelayClient>;
-export declare function closeDeviceRelayTarget(target: DeviceRelayTarget | undefined, log?: DeviceInstallLog): Promise<void>;
-export declare function deviceRelayWebSocketUrl(registryApiUrl: string, token?: string, organizationId?: string): string;

package/dist/core/device-install/operations/relay-client.d.ts

@@ -1,26 +0,0 @@
-import { DeviceHello, DeviceInstallLog, PairRecordPayload } from '../types';
-import { InstallSource } from './operations';
-import { UsbmuxSession } from './usbmux';
-export declare class RelayClient {
-    private readonly webSocketUrl;
-    private readonly session;
-    private readonly deviceHello;
-    private readonly log;
-    private socket?;
-    private streams;
-    private frameQueue;
-    private closed;
-    private pairRecordWaiter?;
-    constructor(webSocketUrl: string, session: UsbmuxSession, deviceHello: DeviceHello, log: DeviceInstallLog);
-    connect(): Promise<void>;
-    startPairing(): Promise<PairRecordPayload>;
-    startInstall(pairRecord: PairRecordPayload, installSource: InstallSource): Promise<void>;
-    close(): void;
-    private enqueueFrame;
-    private handleFrame;
-    private handleError;
-    private handlePairRecordReady;
-    private handleOpenStream;
-    private pumpDeviceToServer;
-    private send;
-}

package/dist/core/device-install/operations/relay-protocol.d.ts

@@ -1,27 +0,0 @@
-export declare const RELAY_PROTOCOL_VERSION = 1;
-export declare const RELAY_HEADER_BYTES = 16;
-export declare const RelayMessageType: {
-    readonly DeviceHello: 1;
-    readonly OpenStream: 2;
-    readonly OpenResult: 3;
-    readonly StreamData: 4;
-    readonly StreamClose: 5;
-    readonly InstallProgress: 6;
-    readonly Error: 7;
-    readonly Ping: 8;
-    readonly Pong: 9;
-    readonly StartPairing: 10;
-    readonly StartInstall: 11;
-    readonly PairRecordReady: 12;
-};
-export type RelayMessageType = (typeof RelayMessageType)[keyof typeof RelayMessageType];
-export type RelayFrame = {
-    type: RelayMessageType;
-    requestId: number;
-    streamId: number;
-    payload: Uint8Array;
-};
-export declare function encodeFrame(frame: RelayFrame): Uint8Array<ArrayBuffer>;
-export declare function decodeFrame(data: Uint8Array): RelayFrame;
-export declare function encodeJson(value: unknown): Uint8Array<ArrayBufferLike>;
-export declare function decodeJson<T>(payload: Uint8Array): T;

package/dist/core/device-install/operations/usbmux.d.ts

@@ -1,32 +0,0 @@
-import { UsbmuxCandidate, getBulkEndpoints } from './webusb';
-export type UsbmuxSession = {
-    device: USBDevice;
-    candidate: UsbmuxCandidate;
-    inEndpoint: ReturnType<typeof getBulkEndpoints>['inEndpoint'];
-    outEndpoint: ReturnType<typeof getBulkEndpoints>['outEndpoint'];
-    muxVersion: number;
-    txSeq: number;
-    rxSeq: number;
-    nextSport: number;
-    streams: Map<string, UsbmuxStream>;
-    writeChain: Promise<void>;
-    closed: boolean;
-};
-export type UsbmuxStream = {
-    session: UsbmuxSession;
-    sport: number;
-    dport: number;
-    seq: number;
-    ack: number;
-    queue: Uint8Array[];
-    waiters: Array<(value: Uint8Array) => void>;
-    error?: Error;
-    opened: Promise<void>;
-    resolveOpened: () => void;
-    rejectOpened: (error: Error) => void;
-};
-export declare function createUsbmuxSession(device: USBDevice, candidate: UsbmuxCandidate): Promise<UsbmuxSession>;
-export declare function openStream(session: UsbmuxSession, port: number): Promise<UsbmuxStream>;
-export declare function sendStreamData(stream: UsbmuxStream, bytes: Uint8Array): Promise<void>;
-export declare function receiveStreamData(stream: UsbmuxStream): Promise<Uint8Array<ArrayBufferLike>>;
-export declare function closeUsbmuxSession(session: UsbmuxSession): void;

package/dist/core/device-install/operations/webusb.d.ts

@@ -1,21 +0,0 @@
-export type UsbEndpoint = {
-    endpointNumber: number;
-    direction: 'in' | 'out';
-    type: string;
-    packetSize: number;
-};
-export type UsbmuxCandidate = {
-    configurationValue: number;
-    interfaceNumber: number;
-    alternateSetting: number;
-    endpoints: UsbEndpoint[];
-};
-export declare function requestAppleDevice(): Promise<USBDevice>;
-export declare function findUsbmuxCandidates(device: USBDevice): UsbmuxCandidate[];
-export declare function claimUsbmux(device: USBDevice, candidate: UsbmuxCandidate): Promise<void>;
-export declare function getBulkEndpoints(candidate: UsbmuxCandidate): {
-    outEndpoint: UsbEndpoint;
-    inEndpoint: UsbEndpoint;
-};
-export declare function transferOutWithZlp(device: USBDevice, endpoint: UsbEndpoint, bytes: Uint8Array): Promise<void>;
-export declare function transferIn(device: USBDevice, endpoint: UsbEndpoint, size?: number): Promise<Uint8Array<ArrayBufferLike>>;

package/dist/core/device-install/storage/browser-storage.d.ts

@@ -1,56 +0,0 @@
-import { DeviceInstallSigningMode, ProvisioningProfileInfo, PutSigningAssetsInput, StoredPairRecord, StoredSigningAssets, PairRecordPayload } from '../types';
-export declare function normalizeUDID(udid?: string): string;
-export declare function normalizeBundleID(bundleID?: string): string;
-export declare function getPairRecord(udid?: string): Promise<StoredPairRecord | undefined>;
-export declare function putPairRecord(record: PairRecordPayload, metadata?: {
-    productName?: string;
-}): Promise<StoredPairRecord>;
-export declare function getSigningAssets({ deviceUDID, bundleID, signingMode, }: {
-    deviceUDID?: string;
-    bundleID?: string;
-    signingMode?: DeviceInstallSigningMode;
-}): Promise<StoredSigningAssets | undefined>;
-export declare function getLatestSigningAssets(signingMode?: DeviceInstallSigningMode): Promise<StoredSigningAssets>;
-export declare function getLatestSigningAssetsWithCertificate(teamID?: string, signingMode?: DeviceInstallSigningMode): Promise<StoredSigningAssets>;
-export declare function putSigningAssets(input: PutSigningAssetsInput): Promise<StoredSigningAssets>;
-export declare function findSigningAssetsForBundle(bundleID?: string, signingMode?: DeviceInstallSigningMode): Promise<StoredSigningAssets[]>;
-export declare function profileContainsDevice(profile: ProvisioningProfileInfo, deviceUDID?: string): boolean;
-export declare function profileMatchesBundleID(profile: ProvisioningProfileInfo, bundleID?: string): boolean;
-export declare function parseProvisioningProfile(file: File): Promise<{
-    name: string | undefined;
-    uuid: string | undefined;
-    teamID: string;
-    applicationIdentifier: string | undefined;
-    bundleID: string | undefined;
-    provisionedDevices: string[];
-    certificateSerialNumbers: string[];
-    getTaskAllow: boolean | undefined;
-    expirationDate: string | undefined;
-}>;
-export declare function parseProvisioningProfileBase64(base64: string): {
-    name: string | undefined;
-    uuid: string | undefined;
-    teamID: string;
-    applicationIdentifier: string | undefined;
-    bundleID: string | undefined;
-    provisionedDevices: string[];
-    certificateSerialNumbers: string[];
-    getTaskAllow: boolean | undefined;
-    expirationDate: string | undefined;
-};
-export declare function parseProvisioningProfileBytes(bytes: Uint8Array): {
-    name: string | undefined;
-    uuid: string | undefined;
-    teamID: string;
-    applicationIdentifier: string | undefined;
-    bundleID: string | undefined;
-    provisionedDevices: string[];
-    certificateSerialNumbers: string[];
-    getTaskAllow: boolean | undefined;
-    expirationDate: string | undefined;
-};
-/**
- * Normalizes a certificate serial number for comparison: uppercase hex
- * without leading zeros, the format Apple's portal reports in serialNum.
- */
-export declare function normalizeCertificateSerial(serial?: string): string | undefined;

package/dist/core/device-install/storage/index.d.ts

@@ -1,2 +0,0 @@
-export * from './browser-storage';
-export * from './secret-store';

package/dist/core/device-install/storage/secret-store.d.ts

@@ -1,101 +0,0 @@
-/**
- * A pluggable store for Apple signing secrets.
- *
- * Credential material always lands in the browser first (the Apple relay
- * only proxies); the browser then writes it into a store implementing this
- * interface. Limrun's org secret store is the default implementation, an
- * IndexedDB-backed one keeps everything local, and customers can bring
- * their own store by implementing the same interface.
- */
-export declare const APPLE_CERTIFICATE_SECRET_TYPE = "appleCertificate";
-export declare const APPLE_PROVISIONING_PROFILE_SECRET_TYPE = "appleProvisioningProfile";
-export type SigningSecretType = typeof APPLE_CERTIFICATE_SECRET_TYPE | typeof APPLE_PROVISIONING_PROFILE_SECRET_TYPE;
-export type SigningSecretMetadata = {
-    type: string;
-    name: string;
-    createdAt?: string;
-};
-/** Type-specific flat key-value payload of a signing secret. */
-export type SigningSecretData = Record<string, string>;
-export type SigningSecret = SigningSecretMetadata & {
-    data: SigningSecretData;
-};
-export interface SigningSecretStore {
-    /**
-     * Stores a secret. When a secret with the same type and name already
-     * exists its data is overwritten. Returns the stored secret; callers
-     * should use the returned data.
-     */
-    put(type: SigningSecretType, name: string, data: SigningSecretData): Promise<SigningSecret>;
-    /** Returns the secret including its data, or undefined when absent. */
-    get(type: SigningSecretType, name: string): Promise<SigningSecret | undefined>;
-    /** Lists metadata of all stored signing secrets, never their data. */
-    list(): Promise<SigningSecretMetadata[]>;
-    /** Deletes a secret; resolves even when the secret does not exist. */
-    delete(type: SigningSecretType, name: string): Promise<void>;
-}
-/**
- * Apple's certificate types as defined by the App Store Connect API
- * (https://developer.apple.com/documentation/appstoreconnectapi/certificatetype).
- */
-export type AppleCertificateType = 'DEVELOPMENT' | 'DISTRIBUTION' | 'IOS_DEVELOPMENT' | 'IOS_DISTRIBUTION' | 'MAC_APP_DEVELOPMENT' | 'MAC_APP_DISTRIBUTION' | 'MAC_INSTALLER_DISTRIBUTION' | 'DEVELOPER_ID_APPLICATION' | 'DEVELOPER_ID_INSTALLER' | 'DEVELOPER_ID_KEXT' | 'PASS_TYPE_ID' | 'PASS_TYPE_ID_WITH_NFC';
-/** Data payload of an appleCertificate secret. */
-export type AppleCertificateSecretData = {
-    certificateP12Base64: string;
-    /** Which of Apple's certificate types the p12 holds. */
-    certificateType: AppleCertificateType;
-    certificatePassword?: string;
-    teamID?: string;
-    /** Apple's portal certificate id, never a Limrun DB id. */
-    certificateID?: string;
-    /** The certificate's serial number: uppercase hex, no leading zeros. */
-    serialNumber?: string;
-    expirationDate?: string;
-};
-/**
- * Data payload of an appleProvisioningProfile secret. The
- * certificateSerialNumbers, bundleIDs and deviceIDs fields duplicate what
- * the signed profile binds (as comma-separated lists) so profiles can be
- * filtered by certificate, bundle ID or device without parsing every
- * entry. Certificates are referenced by serial number, the identifier
- * Apple embeds in the profile itself.
- */
-export type AppleProvisioningProfileSecretData = {
-    provisioningProfileBase64: string;
-    certificateSerialNumbers?: string;
-    bundleIDs?: string;
-    deviceIDs?: string;
-    teamID?: string;
-    profileName?: string;
-    uuid?: string;
-    expirationDate?: string;
-};
-/** Stores an Apple certificate bundle, conventionally named `${teamID}/${certificateType}`. */
-export declare function putAppleCertificateSecret(store: SigningSecretStore, name: string, data: AppleCertificateSecretData): Promise<SigningSecret>;
-/**
- * Stores a provisioning profile, conventionally named `${teamID}/${uuid}`
- * so a team can hold many profiles for the same bundle ID and certificate
- * set; consumers select by the reference fields, not by name.
- */
-export declare function putAppleProvisioningProfileSecret(store: SigningSecretStore, name: string, data: AppleProvisioningProfileSecretData): Promise<SigningSecret>;
-export type LimrunSecretStoreOptions = {
-    /** Base URL of the Limrun backend API, e.g. https://api.limrun.com */
-    apiUrl: string;
-    /** Bearer token: a user or organization token. */
-    token: string;
-    /** Organization TID owning the secrets. */
-    organizationId: string;
-    /** Custom fetch, mainly for tests. */
-    fetch?: typeof fetch;
-};
-/**
- * A SigningSecretStore backed by Limrun's organization secret store
- * (`/v1/organizations/{org}/secrets`). Secrets are stored server-side and
- * shared across the organization.
- */
-export declare function createLimrunSecretStore(options: LimrunSecretStoreOptions): SigningSecretStore;
-/**
- * A SigningSecretStore keeping everything in the browser's IndexedDB.
- * Nothing leaves the machine; secrets are per-browser-profile.
- */
-export declare function createBrowserSecretStore(): SigningSecretStore;