@limrun/ui 0.14.0-rc.5 → 0.14.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@limrun/ui",
-  "version": "0.14.0-rc.5",
+  "version": "0.14.0",
   "publishConfig": {
     "access": "public",
     "tag": "next"
@@ -14,51 +14,6 @@
       "import": "./dist/index.js",
       "require": "./dist/index.cjs"
     },
-    "./app-store-relay": {
-      "types": "./dist/app-store-relay/index.d.ts",
-      "import": "./dist/app-store-relay/index.js",
-      "require": "./dist/app-store-relay/index.cjs"
-    },
-    "./app-store-relay/react": {
-      "types": "./dist/app-store-relay/react.d.ts",
-      "import": "./dist/app-store-relay/react.js",
-      "require": "./dist/app-store-relay/react.cjs"
-    },
-    "./apple-credentials": {
-      "types": "./dist/apple-credentials/index.d.ts",
-      "import": "./dist/apple-credentials/index.js",
-      "require": "./dist/apple-credentials/index.cjs"
-    },
-    "./device-build": {
-      "types": "./dist/device-build/index.d.ts",
-      "import": "./dist/device-build/index.js",
-      "require": "./dist/device-build/index.cjs"
-    },
-    "./device-build/react": {
-      "types": "./dist/device-build/react.d.ts",
-      "import": "./dist/device-build/react.js",
-      "require": "./dist/device-build/react.cjs"
-    },
-    "./device-install": {
-      "types": "./dist/device-install/index.d.ts",
-      "import": "./dist/device-install/index.js",
-      "require": "./dist/device-install/index.cjs"
-    },
-    "./device-install/react": {
-      "types": "./dist/device-install/react.d.ts",
-      "import": "./dist/device-install/react.js",
-      "require": "./dist/device-install/react.cjs"
-    },
-    "./play-publish": {
-      "types": "./dist/play-publish/index.d.ts",
-      "import": "./dist/play-publish/index.js",
-      "require": "./dist/play-publish/index.cjs"
-    },
-    "./play-publish/react": {
-      "types": "./dist/play-publish/react.d.ts",
-      "import": "./dist/play-publish/react.js",
-      "require": "./dist/play-publish/react.cjs"
-    },
     "./package.json": "./package.json"
   },
   "scripts": {
@@ -76,23 +31,27 @@
     "directory": "packages/ui"
   },
   "license": "MIT",
+  "peerDependencies": {
+    "react": "^18.0.0 || ^19.0.0",
+    "react-dom": "^18.0.0 || ^19.0.0"
+  },
   "devDependencies": {
-    "@types/node-forge": "^1.3.14",
     "@types/react": "^19.1.12",
     "@types/react-dom": "^19.1.9",
     "@vitejs/plugin-react-swc": "^4.0.1",
+    "eslint": "^9.39.1",
     "jsdom": "^26.0.0",
     "path": "^0.12.7",
     "react": "^19.1.1",
     "react-dom": "^19.1.1",
+    "typescript": "5.8.3",
+    "typescript-eslint": "8.31.1",
     "vite": "^7.1.4",
     "vite-plugin-dts": "^4.5.4",
     "vite-plugin-lib-inject-css": "^2.2.2",
-    "vitest": "^2.1.9"
+    "vitest": "^3.2.6"
   },
   "dependencies": {
-    "@foxt/js-srp": "^0.0.3-patch2",
-    "clsx": "^2.1.1",
-    "node-forge": "^1.4.0"
+    "clsx": "^2.1.1"
   }
 }

package/src/components/remote-control.tsx

@@ -233,6 +233,45 @@ interface RemoteControlProps {
    * 16:9 / 1920×1080 — applies).
    */
   cameraAspect?: CameraAspect;
+
+  /**
+   * iOS only: when true, capture the user's microphone via
+   * `getUserMedia({ audio: true })` and stream it live into the
+   * simulator's mock microphone. Unlike the camera (which is
+   * demand-driven by apps inside the sim), the microphone is
+   * user-driven: flip this prop from a button in your UI. The
+   * component handles the browser permission prompt, the WebRTC
+   * track attach (no SDP renegotiation — the audio slot is
+   * pre-allocated) and the `microphoneStart`/`microphoneStop`
+   * signaling to the host. Progress and failures are reported via
+   * `onMicrophoneStateChange`. Ignored on Android instances.
+   */
+  microphoneEnabled?: boolean;
+
+  /**
+   * Fires whenever the live-microphone pipeline changes state:
+   * after an enable attempt resolves (granted or denied), when the
+   * host acknowledges or rejects the stream, when the browser
+   * revokes the track mid-stream, and on disable. Use it to render
+   * the mic button's on/off/error state.
+   */
+  onMicrophoneStateChange?: (state: MicrophoneState) => void;
+}
+
+/**
+ * Snapshot of the live-microphone pipeline, reported through
+ * `onMicrophoneStateChange`.
+ */
+export interface MicrophoneState {
+  /** True while the browser mic is captured and streaming to the sim. */
+  active: boolean;
+  /**
+   * Human-readable failure from the last attempt, if any (permission
+   * denied, no device, host rejection, ...).
+   */
+  error?: string;
+  /** Device label of the captured microphone, when available. */
+  label?: string;
 }
 
 /**
@@ -510,6 +549,8 @@ export const RemoteControl = forwardRef<RemoteControlHandle, RemoteControlProps>
       onCameraStats,
       cameraResolutionCap = 'auto',
       cameraAspect,
+      microphoneEnabled = false,
+      onMicrophoneStateChange,
     }: RemoteControlProps,
     ref,
   ) => {
@@ -594,6 +635,28 @@ export const RemoteControl = forwardRef<RemoteControlHandle, RemoteControlProps>
       packetsSent?: number;
       packetsLost?: number;
     } | null>(null);
+    // User-driven outbound microphone state (iOS only). Unlike the
+    // camera, the mic is toggled by the `microphoneEnabled` prop; the
+    // track rides a pre-allocated sendonly audio transceiver so
+    // enabling/disabling is just a `replaceTrack`, plus a
+    // `microphoneStart`/`microphoneStop` WS signal so the host's
+    // audio state machine switches its source.
+    const microphoneEnabledRef = useRef(microphoneEnabled);
+    microphoneEnabledRef.current = microphoneEnabled;
+    const onMicrophoneStateChangeRef = useRef(onMicrophoneStateChange);
+    onMicrophoneStateChangeRef.current = onMicrophoneStateChange;
+    const outboundMicSenderRef = useRef<RTCRtpSender | null>(null);
+    const outboundMicStreamRef = useRef<MediaStream | null>(null);
+    // Bumped by detach and teardown so an attach suspended on an await
+    // (the getUserMedia prompt) detects it was superseded and bails.
+    const micGenerationRef = useRef(0);
+    // Serializes attach/detach work so their awaits (replaceTrack on the
+    // shared sender) can never interleave and undo each other's effects.
+    const micOpQueueRef = useRef<Promise<void>>(Promise.resolve());
+    // Correlates the in-flight `microphoneStart` with its result so a
+    // host-side rejection (e.g. no loopback device on the node) can
+    // tear the capture back down and surface the error.
+    const micStartPendingIdRef = useRef<string | null>(null);
     const firstFrameShownRef = useRef(false);
     const pendingScreenshotResolversRef = useRef<
       Map<string, (value: ScreenshotData | PromiseLike<ScreenshotData>) => void>
@@ -1694,6 +1757,149 @@ export const RemoteControl = forwardRef<RemoteControlHandle, RemoteControlProps>
       stopMediaStream(stream);
     };
 
+    // Runs one attach/detach operation after all previously queued ones,
+    // so two operations' awaits never interleave on the shared sender (a
+    // stale detach could otherwise clear a fresh attach's track, or send
+    // `microphoneStop` after its `microphoneStart`).
+    const runMicOp = (op: () => Promise<void>): Promise<void> => {
+      const next = micOpQueueRef.current.then(op).catch((err) => {
+        debugWarn('microphone operation failed:', err);
+      });
+      micOpQueueRef.current = next;
+      return next;
+    };
+
+    // Capture the user's microphone and stream it to the simulator's
+    // mock microphone. Safe to call redundantly: bails when already
+    // attached, when the connection isn't up yet (the ICE-connected
+    // handler re-invokes it), or when the prop flipped off mid-prompt.
+    // Does NOT bump the generation: a redundant call (e.g. the ICE
+    // handler firing on both `connected` and `completed`) must not
+    // cancel an attach already in flight; only detach/teardown cancel.
+    const attachMicrophone = (): Promise<void> => {
+      if (platform !== 'ios') return Promise.resolve();
+      return runMicOp(() => attachMicrophoneOp());
+    };
+
+    const attachMicrophoneOp = async () => {
+      const generation = micGenerationRef.current;
+      const isCurrent = () => generation === micGenerationRef.current && microphoneEnabledRef.current;
+      const reportMicError = (error: string) => {
+        safeInvoke('onMicrophoneStateChange', onMicrophoneStateChangeRef.current, {
+          active: false,
+          error,
+        });
+      };
+      if (!isCurrent()) return;
+      const ws = wsRef.current;
+      const sender = outboundMicSenderRef.current;
+      if (!ws || ws.readyState !== WebSocket.OPEN || !sender) {
+        // Not connected yet — the post-connect hook retries while the
+        // prop is still on.
+        return;
+      }
+      if (outboundMicStreamRef.current) return;
+      if (!navigator.mediaDevices || typeof navigator.mediaDevices.getUserMedia !== 'function') {
+        // eslint-disable-next-line no-console
+        console.warn(
+          '[RemoteControl] navigator.mediaDevices.getUserMedia unavailable. ' +
+            'getUserMedia requires a secure context (https or http://localhost).',
+        );
+        reportMicError('Microphone capture requires a secure context (https)');
+        return;
+      }
+      let stream: MediaStream | null = null;
+      try {
+        stream = await navigator.mediaDevices.getUserMedia({ audio: true, video: false });
+      } catch (err) {
+        // eslint-disable-next-line no-console
+        console.warn('[RemoteControl] microphone getUserMedia denied/failed:', err);
+      }
+      if (!isCurrent()) {
+        if (stream) stopMediaStream(stream);
+        return;
+      }
+      if (!stream) {
+        reportMicError('Microphone permission denied or no device available');
+        return;
+      }
+      const audioTrack = stream.getAudioTracks()[0] ?? null;
+      if (!audioTrack) {
+        stopMediaStream(stream);
+        reportMicError('Captured stream has no audio track');
+        return;
+      }
+      try {
+        await sender.replaceTrack(audioTrack);
+      } catch (err) {
+        debugWarn('replaceTrack(audioTrack) failed:', err);
+        stopMediaStream(stream);
+        reportMicError('Failed to attach the microphone track to the connection');
+        return;
+      }
+      if (!isCurrent()) {
+        try {
+          await sender.replaceTrack(null);
+        } catch (err) {
+          debugWarn('replaceTrack(null) on stale mic attach failed:', err);
+        }
+        stopMediaStream(stream);
+        return;
+      }
+      outboundMicStreamRef.current = stream;
+      // If the browser revokes the track later (user clicks Stop in
+      // the tab's mic indicator, device unplugged, ...) tear down and
+      // tell the host, so the sim's mic goes back to silence instead
+      // of freezing on the last buffer.
+      audioTrack.onended = () => {
+        if (outboundMicStreamRef.current !== stream) return;
+        void detachMicrophone('microphone capture ended by the browser');
+      };
+      const id = `ui-mic-${Date.now()}-${Math.random().toString(36).substring(2, 9)}`;
+      micStartPendingIdRef.current = id;
+      ws.send(JSON.stringify({ type: 'microphoneStart', id }));
+      safeInvoke('onMicrophoneStateChange', onMicrophoneStateChangeRef.current, {
+        active: true,
+        label: audioTrack.label || undefined,
+      });
+    };
+
+    // Stop the live microphone: drop the track from the sender, stop
+    // the capture (turning the browser's mic indicator off) and tell
+    // the host to switch its audio source back to silence. Safe to
+    // call when nothing is attached.
+    const detachMicrophone = (error?: string): Promise<void> => {
+      // Bump synchronously (not on the queue) so an attach that is
+      // suspended on an await bails at its next checkpoint even while
+      // it still owns the queue.
+      ++micGenerationRef.current;
+      micStartPendingIdRef.current = null;
+      return runMicOp(async () => {
+        const sender = outboundMicSenderRef.current;
+        const stream = outboundMicStreamRef.current;
+        outboundMicStreamRef.current = null;
+        if (sender && stream) {
+          try {
+            await sender.replaceTrack(null);
+          } catch (err) {
+            debugWarn('replaceTrack(null) on mic detach failed:', err);
+          }
+        }
+        if (stream) stopMediaStream(stream);
+        const ws = wsRef.current;
+        if (stream && ws && ws.readyState === WebSocket.OPEN) {
+          const id = `ui-mic-${Date.now()}-${Math.random().toString(36).substring(2, 9)}`;
+          ws.send(JSON.stringify({ type: 'microphoneStop', id }));
+        }
+        if (stream || error) {
+          safeInvoke('onMicrophoneStateChange', onMicrophoneStateChangeRef.current, {
+            active: false,
+            ...(error !== undefined && { error }),
+          });
+        }
+      });
+    };
+
     // Translate the user-facing resolution cap into a
     // MediaTrackConstraints fragment we can feed `getUserMedia`
     // or `applyConstraints`. Always returns a 30 fps ceiling so
@@ -1845,6 +2051,22 @@ export const RemoteControl = forwardRef<RemoteControlHandle, RemoteControlProps>
       stopCameraStatsPoller();
       stopOutboundLocalStream();
       outboundCameraSenderRef.current = null;
+      // Same for the live microphone. No `microphoneStop` signal here —
+      // the WS is going away with the connection; if `microphoneEnabled`
+      // is still on, the post-reconnect hook re-attaches.
+      ++micGenerationRef.current;
+      micStartPendingIdRef.current = null;
+      if (outboundMicStreamRef.current) {
+        stopMediaStream(outboundMicStreamRef.current);
+        outboundMicStreamRef.current = null;
+        // The capture is gone; report it so consumers don't keep a stale
+        // `active: true` across drops (a re-attach after reconnect
+        // reports again).
+        safeInvoke('onMicrophoneStateChange', onMicrophoneStateChangeRef.current, {
+          active: false,
+        });
+      }
+      outboundMicSenderRef.current = null;
       // A scheduled cursor flush would otherwise call setState on a
       // teardown component once the next frame runs.
       if (cursorRafIdRef.current !== undefined) {
@@ -2162,6 +2384,18 @@ export const RemoteControl = forwardRef<RemoteControlHandle, RemoteControlProps>
           : null;
         outboundCameraSenderRef.current = outboundCameraTransceiver?.sender ?? null;
 
+        // Same pre-allocation for the live microphone: a sendonly audio
+        // slot negotiated once at connection setup, so toggling the mic
+        // later is just `replaceTrack` — no SDP renegotiation. iOS only,
+        // like the camera.
+        const outboundMicTransceiver =
+          platform === 'ios' ?
+            peerConnection.addTransceiver('audio', {
+              direction: 'sendonly',
+            })
+          : null;
+        outboundMicSenderRef.current = outboundMicTransceiver?.sender ?? null;
+
         // As hardware encoder, we use H265 for iOS and VP9 for Android.
         // We make sure these two are the first ones in the list.
         // If not, the fallback is H264 which is also hardware accelerated, although not as good,
@@ -2383,6 +2617,11 @@ export const RemoteControl = forwardRef<RemoteControlHandle, RemoteControlProps>
           updateStatus('ICE state: ' + iceState);
           if (iceState === 'connected' || iceState === 'completed') {
             clearIceDisconnectedGrace();
+            // Re-attach the live microphone across reconnects (or apply a
+            // prop that was flipped on before the connection was up).
+            if (microphoneEnabledRef.current && !outboundMicStreamRef.current) {
+              void attachMicrophone();
+            }
             return;
           }
           if (iceState === 'failed') {
@@ -2780,6 +3019,22 @@ export const RemoteControl = forwardRef<RemoteControlHandle, RemoteControlProps>
               startCameraStatsPoller();
               break;
             }
+            case 'microphoneStartResult': {
+              if (micStartPendingIdRef.current === null || message.id !== micStartPendingIdRef.current) {
+                break;
+              }
+              micStartPendingIdRef.current = null;
+              if (typeof message.error === 'string') {
+                // Host rejected the stream (e.g. no loopback device
+                // assigned on the node). Tear the capture back down so
+                // the browser's mic indicator doesn't stay lit for a
+                // stream nobody hears.
+                // eslint-disable-next-line no-console
+                console.warn('[RemoteControl] microphoneStart rejected by host:', message.error);
+                void detachMicrophone(message.error);
+              }
+              break;
+            }
             case 'terminateAppResult':
               if (typeof message.id !== 'string') {
                 debugWarn('Received invalid terminateApp result message:', message);
@@ -2906,6 +3161,18 @@ export const RemoteControl = forwardRef<RemoteControlHandle, RemoteControlProps>
       }
     }, [cameraAspect]);
 
+    // Drive the live microphone from the `microphoneEnabled` prop.
+    // When flipped on before the connection is up, attachMicrophone
+    // bails and the ICE-connected handler picks it up instead.
+    useEffect(() => {
+      if (microphoneEnabled) {
+        void attachMicrophone();
+      } else {
+        void detachMicrophone();
+      }
+      // eslint-disable-next-line react-hooks/exhaustive-deps
+    }, [microphoneEnabled]);
+
     useEffect(() => {
       // Reset video loaded state when connection params change
       setVideoLoaded(false);

package/src/index.ts

@@ -1,5 +1,5 @@
 export { RemoteControl } from './components/remote-control';
-export type { RemoteControlHandle } from './components/remote-control';
+export type { RemoteControlHandle, MicrophoneState } from './components/remote-control';
 
 // Accessibility / inspect-mode types and helpers. Exported so customers can
 // build their own side panels, search UIs, or agent-driven inspectors on top

package/vite.config.ts

@@ -11,15 +11,6 @@ export default defineConfig({
     lib: {
       entry: {
         index: resolve(__dirname, 'src/index.ts'),
-        'app-store-relay/index': resolve(__dirname, 'src/app-store-relay/index.ts'),
-        'app-store-relay/react': resolve(__dirname, 'src/app-store-relay/react.ts'),
-        'apple-credentials/index': resolve(__dirname, 'src/apple-credentials/index.ts'),
-        'device-build/index': resolve(__dirname, 'src/device-build/index.ts'),
-        'device-build/react': resolve(__dirname, 'src/device-build/react.ts'),
-        'device-install/index': resolve(__dirname, 'src/device-install/index.ts'),
-        'device-install/react': resolve(__dirname, 'src/device-install/react.ts'),
-        'play-publish/index': resolve(__dirname, 'src/play-publish/index.ts'),
-        'play-publish/react': resolve(__dirname, 'src/play-publish/react.ts'),
       },
       name: 'LimrunUI',
       formats: ['es', 'cjs'],

package/dist/app-store-relay/index.cjs

@@ -1,9 +0,0 @@
-"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const s=require("../client-C9z_sgOf.js"),f=require("../index-ChhtuQ7e.js"),B=require("../gsa-srp-CCIfUz7Y.js"),a=require("../provisioning-CbC4h--7.js"),T={name:"RSASSA-PKCS1-v1_5",modulusLength:2048,publicExponent:new Uint8Array([1,0,1]),hash:"SHA-256"};async function K(e){if(!crypto.subtle)throw new Error("WebCrypto is not available in this browser.");const t=await crypto.subtle.generateKey(T,!0,["sign","verify"]),r=new Uint8Array(await crypto.subtle.exportKey("spki",t.publicKey)),n=A(U(0),$(e),r,x(0,new Uint8Array)),o=new Uint8Array(await crypto.subtle.sign("RSASSA-PKCS1-v1_5",t.privateKey,M(n))),i=A(n,A(C("1.2.840.113549.1.1.11"),L()),N(o)),p=new Uint8Array(await crypto.subtle.exportKey("pkcs8",t.privateKey));return{privateKey:t.privateKey,privateKeyPKCS8Base64:w(p),publicKeySPKIBase64:w(r),csrPEM:V("CERTIFICATE REQUEST",i),csrBase64:w(i)}}function E(e){if(!e.certificateBase64&&!e.certificatePEM)throw new Error("certificateBase64 or certificatePEM is required.");const t=f.forge.pki.privateKeyFromPem(H("PRIVATE KEY",e.privateKeyPKCS8Base64)),r=e.certificatePEM?f.forge.pki.certificateFromPem(e.certificatePEM):f.forge.pki.certificateFromAsn1(f.forge.asn1.fromDer(f.forge.util.createBuffer(G(e.certificateBase64)))),n=f.forge.pkcs12.toPkcs12Asn1(t,[r],e.password,{algorithm:"3des",friendlyName:e.friendlyName}),o=f.forge.asn1.toDer(n).getBytes();return W(o)}function $(e){const t=[D("2.5.4.3",O(e.commonName))];return e.emailAddress&&t.push(D("1.2.840.113549.1.9.1",F(e.emailAddress))),A(...t)}function D(e,t){return k(A(C(e),t))}function A(...e){return u(48,b(...e))}function k(...e){return u(49,b(...e))}function x(e,t){return u(160+e,t)}function U(e){return u(2,new Uint8Array([e]))}function L(){return new Uint8Array([5,0])}function O(e){return u(12,new TextEncoder().encode(e))}function F(e){return u(22,new TextEncoder().encode(e))}function N(e){return u(3,b(new Uint8Array([0]),e))}function C(e){const t=e.split(".").map(n=>parseInt(n,10));if(t.length<2||t.some(n=>!Number.isFinite(n)))throw new Error(`Invalid OID: ${e}`);const r=[t[0]*40+t[1]];for(const n of t.slice(2)){const o=[n&127];let i=n>>7;for(;i>0;)o.unshift(i&127|128),i>>=7;r.push(...o)}return u(6,new Uint8Array(r))}function u(e,t){return b(new Uint8Array([e]),z(t.byteLength),t)}function z(e){if(e<128)return new Uint8Array([e]);const t=[];let r=e;for(;r>0;)t.unshift(r&255),r>>=8;return new Uint8Array([128|t.length,...t])}function b(...e){const t=e.reduce((o,i)=>o+i.byteLength,0),r=new Uint8Array(t);let n=0;for(const o of e)r.set(o,n),n+=o.byteLength;return r}function V(e,t){const n=w(t).match(/.{1,64}/g)??[];return`-----BEGIN ${e}-----
-${n.join(`
-`)}
------END ${e}-----
-`}function H(e,t){const r=t.match(/.{1,64}/g)??[];return`-----BEGIN ${e}-----
-${r.join(`
-`)}
------END ${e}-----
-`}function w(e){let t="";for(const r of e)t+=String.fromCharCode(r);return btoa(t)}function W(e){return btoa(e)}function G(e){return atob(e)}function M(e){const t=new Uint8Array(e.byteLength);return t.set(e),t.buffer}async function c({relay:e,request:t,label:r="Apple Developer Portal request",validatePortalResponse:n=!0,mapBody:o}){const i=await s.proxyProvisioningRequest(e,t);return n&&q(i.body,r),o?o(i.body,i):i}async function _(e){return c({...e,request:a.listTeamsRequest(),label:"Apple Developer team list",mapBody:t=>Ae([...t?.teams??[],...t?.availableProviders??[],...t?.provider?[t.provider]:[]])})}async function j({certificateKind:e="development",teamId:t="",...r}){return c({...r,request:e==="distribution"?a.findDistributionCertificatesRequest(t):a.findDevelopmentCertificatesRequest(t),label:"Apple Developer certificate list",mapBody:n=>n?.certRequests??[]})}async function Q({certificateKind:e="development",teamId:t="",csrPEM:r,...n}){return c({...n,request:e==="distribution"?a.submitDistributionCSRRequest({csrPEM:r,teamID:t}):a.submitDevelopmentCSRRequest({csrPEM:r,teamID:t}),label:e==="distribution"?"Apple Distribution certificate creation":"Apple Development certificate creation",mapBody:o=>o?.certRequest})}async function J({certificateKind:e="development",certificateId:t,teamId:r="",...n}){return c({...n,request:e==="distribution"?a.downloadDistributionCertificateRequest(t,r):a.downloadCertificateRequest(t,r),label:"Apple certificate download",validatePortalResponse:!1,mapBody:(o,i)=>i})}async function X({certificateKind:e="development",certificateId:t,teamId:r="",...n}){return c({...n,request:{method:"POST",path:"/account/ios/certificate/revokeCertificate.action",payload:{teamId:r,certificateId:t,type:e==="distribution"?"WXV89964HE":"83Q87W3TGH"}},label:"Apple certificate deletion",mapBody:o=>o})}async function Y({teamId:e="",search:t="",...r}){const n=t.trim().toLowerCase();return c({...r,request:a.findBundleIDRequest({bundleID:t,teamID:e}),label:"Apple bundle ID list",mapBody:o=>{const i=o?.appIds??[];return n?i.filter(p=>[p.identifier,p.bundleId,p.name].some(l=>typeof l=="string"&&l.toLowerCase().includes(n))):i}})}async function Z({teamId:e="",bundleId:t,name:r,...n}){return c({...n,request:a.createBundleIDRequest({bundleID:t,teamID:e,name:r}),label:"Apple bundle ID creation",mapBody:o=>o?.appId})}async function ee({teamId:e="",appIdId:t,bundleId:r,name:n,...o}){return c({...o,request:{method:"POST",path:"/account/ios/identifiers/updateAppId.action",payload:{teamId:e,appIdId:t,...r?{identifier:r}:{},...n?{name:n}:{}}},label:"Apple bundle ID update",mapBody:i=>i?.appId})}async function te({teamId:e="",appIdId:t,...r}){return c({...r,request:{method:"POST",path:"/account/ios/identifiers/deleteAppId.action",payload:{teamId:e,appIdId:t}},label:"Apple bundle ID deletion",mapBody:n=>n})}async function re({teamId:e="",deviceUDID:t="",...r}){const n=I(t);return c({...r,request:a.findDeviceRequest({deviceUDID:t,teamID:e}),label:"Apple device list",mapBody:o=>{const i=o?.devices??[];return n?i.filter(p=>I(p.deviceNumber)===n):i}})}function I(e){return(e??"").replace(/-/g,"").replace(/[^a-fA-F0-9]/g,"").toUpperCase()}async function ne({teamId:e="",deviceUDID:t,name:r,...n}){return c({...n,request:a.registerDeviceRequest({deviceUDID:t,teamID:e,name:r}),label:"Apple device registration",mapBody:o=>o?.device})}async function oe({teamId:e="",deviceId:t,name:r,...n}){return c({...n,request:{method:"POST",path:"/account/ios/device/updateDevice.action",payload:{teamId:e,deviceId:t,...r?{name:r}:{}}},label:"Apple device update",mapBody:o=>o?.device})}async function ie({teamId:e="",deviceId:t,...r}){return c({...r,request:{method:"POST",path:"/account/ios/device/deleteDevice.action",payload:{teamId:e,deviceId:t}},label:"Apple device deletion",mapBody:n=>n})}async function pe({profileKind:e="development",teamId:t="",bundleId:r="",...n}){return c({...n,request:e==="adhoc"?a.findAdHocProfilesRequest({bundleID:r,teamID:t}):e==="appstore"?a.findAppStoreProfilesRequest({bundleID:r,teamID:t}):a.findDevelopmentProfilesRequest({bundleID:r,teamID:t}),label:"Apple provisioning profile list",mapBody:o=>o?.provisioningProfiles??[]})}async function ae({profileKind:e="development",teamId:t="",bundleId:r,appIdId:n,certificateIds:o,deviceIds:i=[],name:p,...l}){const[d]=o;if(!d)throw new Error("At least one certificate ID is required to create an Apple provisioning profile.");let v;if(e==="appstore"){if(!p)throw new Error("An explicit name is required to create an App Store provisioning profile.");v=a.createAppStoreProfileRequest({teamID:t,appIDID:n,certificateID:d,name:p})}else e==="adhoc"?v=a.createAdHocProfileRequest({bundleID:r,teamID:t,appIDID:n,certificateID:d,deviceIDs:i,name:p}):v=a.createDevelopmentProfileRequest({bundleID:r,teamID:t,appIDID:n,certificateID:d,deviceIDs:i,name:p});return c({...l,request:v,label:"Apple provisioning profile creation",mapBody:R=>R?.provisioningProfile})}async function se({teamId:e="",profileId:t,...r}){return c({...r,request:a.downloadProfileRequest(t,e),label:"Apple provisioning profile download",validatePortalResponse:!1,mapBody:(n,o)=>o})}async function ce({teamId:e="",profileId:t,...r}){return c({...r,request:{method:"POST",path:"/account/ios/profile/deleteProvisioningProfile.action",payload:{teamId:e,provisioningProfileId:t}},label:"Apple provisioning profile deletion",mapBody:n=>n})}async function le({relay:e,providerId:t}){const r=Number(t),n=await s.proxyAppStoreConnectRequest(e,{method:"POST",path:"/olympus/v1/session",payload:{provider:{providerId:Number.isNaN(r)?t:r}}});if(n.status<200||n.status>=300)throw new Error(`App Store Connect provider switch failed: HTTP ${n.status} ${n.rawBody??""}`.trim());return n}async function ue({relay:e}){const t=await s.proxyAppStoreConnectRequest(e,{path:"/iris/v1/apiKeys"});return y(t,"App Store Connect API key list"),h(t.body?.data)}async function de({relay:e,nickname:t,roles:r=["APP_MANAGER"],allAppsVisible:n=!0}){if(!t)throw new Error("A nickname is required to create an App Store Connect API key.");const o=await s.proxyAppStoreConnectRequest(e,{method:"POST",path:"/iris/v1/apiKeys",payload:{data:{type:"apiKeys",attributes:{nickname:t,allAppsVisible:n,keyType:"PUBLIC_API",roles:r}}}});y(o,"App Store Connect API key creation");const i=m(o.body?.data);if(!i?.id)throw new Error("App Store Connect API key creation did not return a key ID.");return i}async function fe({relay:e,keyId:t}){const r=await s.proxyAppStoreConnectRequest(e,{path:`/iris/v1/apiKeys/${encodeURIComponent(t)}`,query:{"fields[apiKeys]":"privateKey",include:"provider"}});y(r,"App Store Connect API key download");const n=m(r.body?.data),o=S(n?.attributes,"privateKey");if(!o)throw new Error(`App Store Connect API key ${t} returned no private key. Apple serves it only once; revoke the key and create a new one.`);const i=(r.body?.included??[]).find(l=>l.type==="providers"),p=S(i?.attributes,"publicProviderId")??S(n?.attributes,"issuerId")??i?.id;return{privateKeyPem:o,issuerId:p}}async function P({relay:e,bundleId:t}){const r=await s.proxyAppStoreConnectRequest(e,{path:"/iris/v1/apps",query:{"filter[bundleId]":t}});return y(r,"App Store Connect app lookup"),h(r.body?.data).find(n=>S(n.attributes,"bundleId")===t)}async function g({relay:e,bundleId:t,name:r,sku:n,primaryLocale:o="en-US",versionString:i="1.0"}){if(!r)throw new Error("An app name is required to create an App Store Connect app record.");const p="IOS",l=await s.proxyAppStoreConnectRequest(e,{method:"POST",path:"/iris/v1/apps",payload:{data:{type:"apps",attributes:{sku:n||t,primaryLocale:o,bundleId:t},relationships:{appStoreVersions:{data:[{type:"appStoreVersions",id:`\${store-version-${p}}`}]},appInfos:{data:[{type:"appInfos",id:"${new-appInfo-id}"}]}}},included:[{type:"appInfos",id:"${new-appInfo-id}",relationships:{appInfoLocalizations:{data:[{type:"appInfoLocalizations",id:"${new-appInfoLocalization-id}"}]}}},{type:"appInfoLocalizations",id:"${new-appInfoLocalization-id}",attributes:{locale:o,name:r}},{type:"appStoreVersions",id:`\${store-version-${p}}`,attributes:{platform:p,versionString:i},relationships:{appStoreVersionLocalizations:{data:[{type:"appStoreVersionLocalizations",id:`\${new-${p}VersionLocalization-id}`}]}}},{type:"appStoreVersionLocalizations",id:`\${new-${p}VersionLocalization-id}`,attributes:{locale:o}}]}});y(l,"App Store Connect app creation");const d=m(l.body?.data);if(!d?.id)throw new Error("App Store Connect app creation did not return an app ID.");return d}async function ye(e){const t=await P({relay:e.relay,bundleId:e.bundleId});return t?{app:t,created:!1}:{app:await g(e),created:!0}}function y(e,t){const r=e.body?.errors;if(r&&r.length>0){const n=r.map(o=>o.detail??o.title??o.code??o.status).filter(Boolean).join("; ");throw new Error(`${t} failed: ${n||`HTTP ${e.status}`}`)}if(e.status<200||e.status>=300)throw new Error(`${t} failed: HTTP ${e.status} ${e.rawBody??""}`.trim())}function h(e){return e?Array.isArray(e)?e:[e]:[]}function m(e){if(e)return Array.isArray(e)?e[0]:e}function S(e,t){const r=e?.[t];return typeof r=="string"&&r!==""?r:void 0}function q(e,t){if(!e)throw new Error(`${t} returned an empty response.`);if(e.resultCode!==void 0&&e.resultCode!==0)throw new Error(`${t} failed: ${e.userString??e.resultString??e.resultCode}`)}function Ae(e){const t=new Set,r=[];for(const n of e){const o=String(n.teamId??n.providerId??n.publicProviderId??n.name??JSON.stringify(n));t.has(o)||(t.add(o),r.push(n))}return r}exports.AppleRelayWebSocketClient=s.AppleRelayWebSocketClient;exports.fetchAppleAccountSession=s.fetchAppleAccountSession;exports.openAppleRelayWebSocket=s.openAppleRelayWebSocket;exports.proxyAppStoreConnectRequest=s.proxyAppStoreConnectRequest;exports.proxyPhoneTwoFactorCode=s.proxyPhoneTwoFactorCode;exports.proxySrpComplete=s.proxySrpComplete;exports.proxySrpInit=s.proxySrpInit;exports.proxyTwoFactorCode=s.proxyTwoFactorCode;exports.startBrowserOwnedAppleIDLogin=s.startBrowserOwnedAppleIDLogin;exports.triggerPhoneTwoFactor=s.triggerPhoneTwoFactor;exports.triggerTrustedDeviceTwoFactor=s.triggerTrustedDeviceTwoFactor;exports.AppleGsaSrpClient=B.AppleGsaSrpClient;exports.assertAppStoreConnectResponseOK=y;exports.assertAppleDeveloperPortalResponseOK=q;exports.createAppStoreConnectApiKey=de;exports.createAppStoreConnectApp=g;exports.createAppleBundleID=Z;exports.createAppleCertificate=Q;exports.createAppleProfile=ae;exports.deleteAppleBundleID=te;exports.deleteAppleCertificate=X;exports.deleteAppleDevice=ie;exports.deleteAppleProfile=ce;exports.downloadAppStoreConnectApiKeyPrivateKey=fe;exports.downloadAppleCertificate=J;exports.downloadAppleProfile=se;exports.ensureAppStoreConnectApp=ye;exports.exportAppleCertificateP12=E;exports.findAppStoreConnectApp=P;exports.generateAppleSigningKeyAndCSR=K;exports.listAppStoreConnectApiKeys=ue;exports.listAppleBundleIDs=Y;exports.listAppleCertificates=j;exports.listAppleDevices=re;exports.listAppleProfiles=pe;exports.listAppleTeams=_;exports.registerAppleDevice=ne;exports.requestAppleProvisioning=c;exports.switchAppStoreConnectProvider=le;exports.updateAppleBundleID=ee;exports.updateAppleDevice=oe;