@limrun/ui 0.14.0-rc.5 → 0.14.1

package/src/core/device-install/apple/provisioning.ts

@@ -1,419 +0,0 @@
-import type { DeviceInstallSigningMode, ProvisioningProfileInfo, StoredSigningAssets } from '../types';
-import {
-  getSigningAssets,
-  normalizeBundleID,
-  normalizeUDID,
-  profileContainsDevice,
-  profileMatchesBundleID,
-  putSigningAssets,
-} from '../storage';
-import type { AppleProvisioningRequest } from './relay';
-
-export type AppleDeveloperPortalTeam = {
-  name?: string;
-  teamId?: string;
-  providerId?: string | number;
-  publicProviderId?: string;
-  type?: string;
-  subType?: string;
-};
-
-export type AppleDeveloperPortalDevice = {
-  deviceId?: string;
-  name?: string;
-  deviceNumber?: string;
-  deviceClass?: string;
-  model?: string;
-  status?: string;
-};
-
-export type AppleDeveloperPortalAppID = {
-  appId?: string;
-  appIdId?: string;
-  identifier?: string;
-  bundleId?: string;
-  name?: string;
-  prefix?: string;
-  platform?: string;
-};
-
-export type AppleDeveloperPortalResponse = {
-  resultCode?: number;
-  resultString?: string;
-  userString?: string;
-  teams?: AppleDeveloperPortalTeam[];
-  provider?: AppleDeveloperPortalTeam;
-  availableProviders?: AppleDeveloperPortalTeam[];
-  appIds?: AppleDeveloperPortalAppID[];
-  devices?: AppleDeveloperPortalDevice[];
-  certRequests?: Array<Record<string, unknown>>;
-  certRequest?: Record<string, unknown>;
-  appId?: Record<string, unknown>;
-  device?: Record<string, unknown>;
-  provisioningProfile?: Record<string, unknown>;
-  provisioningProfiles?: Array<Record<string, unknown>>;
-};
-
-export type AppleProvisioningContext = {
-  bundleID: string;
-  deviceUDID: string;
-  teamID?: string;
-};
-
-export type AppleSigningAssetCacheInput = {
-  bundleID: string;
-  deviceUDID?: string;
-  teamID?: string;
-  signingMode?: DeviceInstallSigningMode;
-};
-
-export type PutAppleGeneratedSigningAssetsInput = {
-  bundleID: string;
-  deviceUDID?: string;
-  teamID?: string;
-  signingMode?: DeviceInstallSigningMode;
-  certificateID?: string;
-  certificateP12Base64: string;
-  certificatePassword?: string;
-  provisioningProfileBase64: string;
-  profile: ProvisioningProfileInfo;
-};
-
-export function listTeamsRequest(): AppleProvisioningRequest {
-  return {
-    method: 'POST',
-    path: '/account/listTeams.action',
-    payload: {},
-  };
-}
-
-export function findBundleIDRequest({
-  bundleID,
-  teamID = '',
-}: Pick<AppleProvisioningContext, 'bundleID' | 'teamID'>) {
-  void bundleID;
-  return pagedRequest('/account/ios/identifiers/listAppIds.action', teamID, { sort: 'name=asc' });
-}
-
-export function findDeviceRequest({
-  deviceUDID,
-  teamID = '',
-}: Pick<AppleProvisioningContext, 'deviceUDID' | 'teamID'>) {
-  void deviceUDID;
-  return pagedRequest('/account/ios/device/listDevices.action', teamID, {
-    sort: 'name=asc',
-    includeRemovedDevices: false,
-  });
-}
-
-export function findDevelopmentCertificatesRequest(teamID = '') {
-  return pagedRequest('/account/ios/certificate/listCertRequests.action', teamID, {
-    sort: 'name=asc',
-    types: '83Q87W3TGH,5QPB9NHCEI',
-  });
-}
-
-export function findDistributionCertificatesRequest(teamID = '') {
-  return pagedRequest('/account/ios/certificate/listCertRequests.action', teamID, {
-    sort: 'name=asc',
-    types: 'WXV89964HE,R58UK2EWSO',
-  });
-}
-
-export function findDevelopmentProfilesRequest({
-  bundleID,
-  teamID = '',
-}: Pick<AppleProvisioningContext, 'bundleID' | 'teamID'>) {
-  return pagedRequest('/account/ios/profile/listProvisioningProfiles.action', teamID, {
-    search: bundleID,
-    sort: 'name=asc',
-  });
-}
-
-export function findAdHocProfilesRequest({
-  bundleID,
-  teamID = '',
-}: Pick<AppleProvisioningContext, 'bundleID' | 'teamID'>) {
-  return pagedRequest('/account/ios/profile/listProvisioningProfiles.action', teamID, {
-    search: bundleID,
-    sort: 'name=asc',
-    distributionType: 'adhoc',
-  });
-}
-
-export function findAppStoreProfilesRequest({
-  bundleID,
-  teamID = '',
-}: Pick<AppleProvisioningContext, 'bundleID' | 'teamID'>) {
-  return pagedRequest('/account/ios/profile/listProvisioningProfiles.action', teamID, {
-    search: bundleID,
-    sort: 'name=asc',
-    distributionType: 'store',
-  });
-}
-
-export function registerDeviceRequest({
-  deviceUDID,
-  teamID = '',
-  name = 'Limrun iPhone',
-}: Pick<AppleProvisioningContext, 'deviceUDID' | 'teamID'> & { name?: string }) {
-  return {
-    method: 'POST',
-    path: '/account/ios/device/addDevices.action',
-    payload: {
-      teamId: teamID,
-      deviceNames: name,
-      deviceNumbers: normalizeUDID(deviceUDID),
-      deviceClasses: 'iphone',
-      register: 'single',
-    },
-  } satisfies AppleProvisioningRequest;
-}
-
-export function createBundleIDRequest({
-  bundleID,
-  teamID = '',
-  name,
-}: Pick<AppleProvisioningContext, 'bundleID' | 'teamID'> & { name?: string }) {
-  return {
-    method: 'POST',
-    path: '/account/ios/identifiers/addAppId.action',
-    payload: {
-      teamId: teamID,
-      name: name ?? bundleID,
-      identifier: bundleID,
-      type: 'explicit',
-    },
-  } satisfies AppleProvisioningRequest;
-}
-
-export function submitDevelopmentCSRRequest({ csrPEM, teamID = '' }: { csrPEM: string; teamID?: string }) {
-  return {
-    method: 'POST',
-    path: '/account/ios/certificate/submitCertificateRequest.action',
-    payload: {
-      teamId: teamID,
-      type: '83Q87W3TGH',
-      csrContent: csrPEM,
-    },
-  } satisfies AppleProvisioningRequest;
-}
-
-export function submitDistributionCSRRequest({ csrPEM, teamID = '' }: { csrPEM: string; teamID?: string }) {
-  return {
-    method: 'POST',
-    path: '/account/ios/certificate/submitCertificateRequest.action',
-    payload: {
-      teamId: teamID,
-      type: 'WXV89964HE',
-      csrContent: csrPEM,
-    },
-  } satisfies AppleProvisioningRequest;
-}
-
-export function downloadCertificateRequest(certificateID: string, teamID = '') {
-  return {
-    method: 'GET',
-    path: '/account/ios/certificate/downloadCertificateContent.action',
-    payload: {
-      teamId: teamID,
-      certificateId: certificateID,
-      type: '83Q87W3TGH',
-    },
-  } satisfies AppleProvisioningRequest;
-}
-
-export function downloadDistributionCertificateRequest(certificateID: string, teamID = '') {
-  return {
-    method: 'GET',
-    path: '/account/ios/certificate/downloadCertificateContent.action',
-    payload: {
-      teamId: teamID,
-      certificateId: certificateID,
-      type: 'WXV89964HE',
-    },
-  } satisfies AppleProvisioningRequest;
-}
-
-export function createDevelopmentProfileRequest({
-  bundleID,
-  teamID = '',
-  appIDID,
-  certificateID,
-  deviceIDs,
-  name,
-}: Pick<AppleProvisioningContext, 'bundleID' | 'teamID'> & {
-  appIDID: string;
-  certificateID: string;
-  deviceIDs: string[];
-  name?: string;
-}) {
-  return {
-    method: 'POST',
-    path: '/account/ios/profile/createProvisioningProfile.action',
-    payload: {
-      teamId: teamID,
-      provisioningProfileName: name ?? `Limrun ${bundleID}`,
-      certificateIds: [certificateID],
-      appIdId: appIDID,
-      deviceIds: deviceIDs,
-      distributionType: 'limited',
-      subPlatform: 'ios',
-    },
-  } satisfies AppleProvisioningRequest;
-}
-
-export function createAdHocProfileRequest({
-  bundleID,
-  teamID = '',
-  appIDID,
-  certificateID,
-  deviceIDs,
-  name,
-}: Pick<AppleProvisioningContext, 'bundleID' | 'teamID'> & {
-  appIDID: string;
-  certificateID: string;
-  deviceIDs: string[];
-  name?: string;
-}) {
-  return {
-    method: 'POST',
-    path: '/account/ios/profile/createProvisioningProfile.action',
-    payload: {
-      teamId: teamID,
-      provisioningProfileName: name ?? `Limrun Ad Hoc ${bundleID}`,
-      certificateIds: [certificateID],
-      appIdId: appIDID,
-      deviceIds: deviceIDs,
-      distributionType: 'adhoc',
-      subPlatform: 'ios',
-    },
-  } satisfies AppleProvisioningRequest;
-}
-
-/**
- * App Store distribution profiles bind no devices, and the name is required
- * because implementors brand profiles themselves; there is no default.
- */
-export function createAppStoreProfileRequest({
-  teamID = '',
-  appIDID,
-  certificateID,
-  name,
-}: Pick<AppleProvisioningContext, 'teamID'> & {
-  appIDID: string;
-  certificateID: string;
-  name: string;
-}) {
-  return {
-    method: 'POST',
-    path: '/account/ios/profile/createProvisioningProfile.action',
-    payload: {
-      teamId: teamID,
-      provisioningProfileName: name,
-      certificateIds: [certificateID],
-      appIdId: appIDID,
-      distributionType: 'store',
-      subPlatform: 'ios',
-    },
-  } satisfies AppleProvisioningRequest;
-}
-
-export function downloadProfileRequest(profileID: string, teamID = '') {
-  return {
-    method: 'GET',
-    path: '/account/ios/profile/downloadProfileContent',
-    payload: {
-      teamId: teamID,
-      provisioningProfileId: profileID,
-    },
-  } satisfies AppleProvisioningRequest;
-}
-
-export async function getReusableAppleSigningAssets({
-  bundleID,
-  deviceUDID,
-  teamID,
-  signingMode,
-}: AppleSigningAssetCacheInput) {
-  const stored = await getSigningAssets({ bundleID, deviceUDID, signingMode });
-  if (!stored || !storedSigningAssetsReusable(stored, { bundleID, deviceUDID, teamID, signingMode })) {
-    return undefined;
-  }
-  return stored;
-}
-
-export async function putAppleGeneratedSigningAssets(input: PutAppleGeneratedSigningAssetsInput) {
-  return putSigningAssets({
-    ...input,
-    certificateFileName:
-      input.certificateID ? `${input.certificateID}.p12` : `apple-${input.signingMode ?? 'development'}.p12`,
-    certificatePassword: input.certificatePassword || undefined,
-    signingMode: input.signingMode,
-    profileFileName:
-      input.profile.uuid ?
-        `${input.profile.uuid}.mobileprovision`
-      : `${input.signingMode ?? 'development'}.mobileprovision`,
-  });
-}
-
-export function storedSigningAssetsReusable(
-  stored: StoredSigningAssets,
-  { bundleID, deviceUDID, teamID, signingMode = 'development' }: AppleSigningAssetCacheInput,
-) {
-  if ((stored.signingMode ?? 'development') !== signingMode) {
-    return false;
-  }
-  if (!profileMatchesBundleID(stored.profile, bundleID)) {
-    return false;
-  }
-  if (teamID && stored.teamID && stored.teamID !== teamID) {
-    return false;
-  }
-  if (deviceUDID && !profileContainsDevice(stored.profile, deviceUDID)) {
-    return false;
-  }
-  if (stored.profile.expirationDate && new Date(stored.profile.expirationDate).getTime() <= Date.now()) {
-    return false;
-  }
-  return normalizeBundleID(stored.bundleID) === normalizeBundleID(bundleID);
-}
-
-export function selectDeveloperPortalTeam(body: unknown): AppleDeveloperPortalTeam | undefined {
-  const response = body as AppleDeveloperPortalResponse | undefined;
-  return response?.teams?.[0] ?? response?.provider ?? response?.availableProviders?.[0];
-}
-
-export function teamIDCandidates(body: unknown): string[] {
-  const response = body as AppleDeveloperPortalResponse | undefined;
-  const teams = [
-    ...(response?.teams ?? []),
-    ...(response?.provider ? [response.provider] : []),
-    ...(response?.availableProviders ?? []),
-  ];
-  const ids = new Set<string>();
-  for (const team of teams) {
-    for (const value of [team.teamId, team.providerId, team.publicProviderId]) {
-      if (value !== undefined && value !== '') {
-        ids.add(String(value));
-      }
-    }
-  }
-  return [...ids];
-}
-
-function pagedRequest(path: string, teamID: string, payload: Record<string, unknown> = {}) {
-  const basePayload: Record<string, unknown> = {
-    pageNumber: 1,
-    pageSize: 200,
-    ...payload,
-  };
-  if (teamID) {
-    basePayload.teamId = teamID;
-  }
-  return {
-    method: 'POST',
-    path,
-    payload: basePayload,
-  } satisfies AppleProvisioningRequest;
-}

package/src/core/device-install/apple/relay.ts

@@ -1,202 +0,0 @@
-import type { AppleSRPCompleteProof, AppleSRPInitRequest, AppleSRPInitResponse } from './gsa-srp';
-
-export type AppleRelayResponse<T = unknown> = {
-  status: number;
-  statusText: string;
-  headers?: Record<string, string>;
-  body?: T;
-  rawBody?: string;
-  rawBodyBase64?: string;
-};
-
-export type AppleProvisioningRequest = {
-  method?: 'GET' | 'POST';
-  path: string;
-  payload?: unknown;
-};
-
-/**
- * A session-authenticated App Store Connect request proxied by the relay.
- * Unlike provisioning requests, payloads pass through as JSON and GET
- * parameters go into an explicit query map because the App Store Connect
- * API uses bracketed JSON:API keys like fields[apiKeys].
- */
-export type AppStoreConnectRequest = {
-  method?: 'GET' | 'POST';
-  path: string;
-  query?: Record<string, string>;
-  payload?: unknown;
-};
-
-type AppleRelayWebSocketMessage<T = unknown> = {
-  id: string;
-  ok: boolean;
-  response?: AppleRelayResponse<T>;
-  error?: string;
-};
-
-export class AppleRelayWebSocketClient {
-  private socket?: WebSocket;
-  private nextId = 1;
-  private readonly pending = new Map<
-    string,
-    {
-      resolve: (response: AppleRelayResponse) => void;
-      reject: (error: Error) => void;
-    }
-  >();
-
-  constructor(
-    private readonly apiUrl: string,
-    private readonly token?: string,
-    private readonly organizationId?: string,
-  ) {}
-
-  async connect() {
-    if (this.socket && this.socket.readyState === WebSocket.OPEN) return;
-    const socket = new WebSocket(appleRelayWebSocketURL(this.apiUrl, this.token, this.organizationId));
-    this.socket = socket;
-    socket.onmessage = (event) => this.handleMessage(event);
-    socket.onclose = () => this.rejectPending(new Error('Apple relay WebSocket closed'));
-    socket.onerror = () => this.rejectPending(new Error('Apple relay WebSocket failed'));
-    await new Promise<void>((resolve, reject) => {
-      socket.onopen = () => resolve();
-      socket.onerror = () => reject(new Error('Apple relay WebSocket connection failed'));
-    });
-  }
-
-  request<T = unknown>(type: string, payload?: unknown) {
-    const socket = this.socket;
-    if (!socket || socket.readyState !== WebSocket.OPEN) {
-      throw new Error('Apple relay WebSocket is not connected.');
-    }
-    const id = String(this.nextId++);
-    const response = new Promise<AppleRelayResponse<T>>((resolve, reject) => {
-      this.pending.set(id, {
-        resolve: (value) => resolve(normalizeAppleProxyResponse<T>(value as AppleRelayResponse<T>)),
-        reject,
-      });
-    });
-    socket.send(JSON.stringify({ id, type, ...(payload === undefined ? {} : { payload }) }));
-    return response;
-  }
-
-  close() {
-    this.rejectPending(new Error('Apple relay WebSocket closed'));
-    this.socket?.close();
-    this.socket = undefined;
-  }
-
-  private handleMessage(event: MessageEvent) {
-    const message = JSON.parse(String(event.data)) as AppleRelayWebSocketMessage;
-    const waiter = this.pending.get(message.id);
-    if (!waiter) return;
-    this.pending.delete(message.id);
-    if (!message.ok) {
-      waiter.reject(new Error(message.error || 'Apple relay request failed'));
-      return;
-    }
-    if (!message.response) {
-      waiter.reject(new Error('Apple relay response was empty.'));
-      return;
-    }
-    waiter.resolve(message.response);
-  }
-
-  private rejectPending(error: Error) {
-    for (const waiter of this.pending.values()) {
-      waiter.reject(error);
-    }
-    this.pending.clear();
-  }
-}
-
-export async function openAppleRelayWebSocket(apiUrl: string, token?: string, organizationId?: string) {
-  const client = new AppleRelayWebSocketClient(apiUrl, token, organizationId);
-  await client.connect();
-  return client;
-}
-
-export async function proxySrpInit(relay: AppleRelayWebSocketClient, payload: AppleSRPInitRequest) {
-  return relay.request<AppleSRPInitResponse>('srpInit', payload);
-}
-
-export async function proxySrpComplete(
-  relay: AppleRelayWebSocketClient,
-  payload: AppleSRPCompleteProof & {
-    rememberMe: boolean;
-    trustTokens: string[];
-  },
-) {
-  return relay.request('srpComplete', payload);
-}
-
-export async function triggerTrustedDeviceTwoFactor(relay: AppleRelayWebSocketClient) {
-  return relay.request('triggerTrustedDevice2FA');
-}
-
-export async function triggerPhoneTwoFactor(
-  relay: AppleRelayWebSocketClient,
-  phoneNumberId: number,
-  mode = 'sms',
-) {
-  return relay.request('triggerPhone2FA', { phoneNumberId, mode });
-}
-
-export async function proxyTwoFactorCode(relay: AppleRelayWebSocketClient, code: string) {
-  return relay.request('submitTrustedDevice2FA', { code });
-}
-
-export async function proxyPhoneTwoFactorCode(
-  relay: AppleRelayWebSocketClient,
-  phoneNumberId: number,
-  code: string,
-  mode = 'sms',
-) {
-  return relay.request('submitPhone2FA', { phoneNumberId, mode, code });
-}
-
-export async function fetchAppleAccountSession(relay: AppleRelayWebSocketClient) {
-  return relay.request('finalize');
-}
-
-export async function proxyProvisioningRequest<T = unknown>(
-  relay: AppleRelayWebSocketClient,
-  request: AppleProvisioningRequest,
-) {
-  return relay.request<T>('provisioning', request);
-}
-
-export async function proxyAppStoreConnectRequest<T = unknown>(
-  relay: AppleRelayWebSocketClient,
-  request: AppStoreConnectRequest,
-) {
-  return relay.request<T>('appstoreconnect', request);
-}
-
-function normalizeAppleProxyResponse<T>(response: AppleRelayResponse<T>) {
-  if (response.body !== undefined || !response.rawBody) {
-    return response;
-  }
-  try {
-    return {
-      ...response,
-      body: JSON.parse(response.rawBody) as T,
-    };
-  } catch {
-    return response;
-  }
-}
-
-function appleRelayWebSocketURL(apiUrl: string, token?: string, organizationId?: string) {
-  const url = new URL(apiUrl);
-  url.protocol = url.protocol === 'https:' ? 'wss:' : 'ws:';
-  url.pathname = `${url.pathname.replace(/\/$/, '')}/ios/appstoreconnect/ws`;
-  if (token) {
-    url.searchParams.set('token', token);
-  }
-  if (organizationId) {
-    url.searchParams.set('organization', organizationId);
-  }
-  return url.toString();
-}

package/src/core/device-install/index.ts

@@ -1,4 +0,0 @@
-export * from './types';
-export * from './apple';
-export * from './operations';
-export * from './storage';

package/src/core/device-install/operations/index.ts

@@ -1,6 +0,0 @@
-export * from './limbuild-client';
-export * from './operations';
-export * from './relay-client';
-export * from './relay-protocol';
-export * from './usbmux';
-export * from './webusb';