@limrun/ui 0.9.0-rc.14 → 0.9.0-rc.15

package/src/hooks/use-device-install.ts

@@ -1,13 +1,17 @@
 import { useCallback, useEffect, useRef, useState } from 'react';
 import {
   closeDeviceRelayTarget,
+  createAdHocProfileRequest,
   createBundleIDRequest,
   createDevelopmentProfileRequest,
   downloadCertificateRequest,
+  downloadDistributionCertificateRequest,
   downloadProfileRequest,
   exportAppleCertificateP12,
   fetchLimbuildInfo,
+  findAdHocProfilesRequest,
   findDevelopmentCertificatesRequest,
+  findDistributionCertificatesRequest,
   findBundleIDRequest,
   findDeviceRequest,
   findDevelopmentProfilesRequest,
@@ -29,8 +33,10 @@ import {
   requestUSBAccess as requestDeviceUSBAccess,
   startBrowserOwnedAppleIDLogin,
   startSignedDeviceBuild,
+  getIOSOTAInstall,
   startInstallRelay,
   startPairingRelay,
+  submitDistributionCSRRequest,
   submitDevelopmentCSRRequest,
   watchBuildLogEvents,
   type AppleIDLoginResult,
@@ -43,7 +49,9 @@ import {
   type DeviceInstallBusyAction,
   type DeviceInstallStep,
   type DeviceInstallStepStatus,
+  type DeviceInstallSigningMode,
   type DeviceRelayTarget,
+  type IOSOTAInstall,
   type StoredPairRecord,
   type StoredSigningAssets,
 } from '../core/device-install';
@@ -74,6 +82,7 @@ export type UseDeviceInstallResult = {
   logs: string[];
   buildLogs: BuildLogLine[];
   buildStatus: DeviceInstallBuildStatus;
+  currentExecID?: string;
   appleSigningStatus: DeviceInstallAppleSigningStatus;
   appleTeams: AppleDeveloperPortalTeam[];
   appleDevices: AppleDeveloperPortalDevice[];
@@ -81,10 +90,12 @@ export type UseDeviceInstallResult = {
   applePortalSummary?: ApplePortalSummary;
   selectedAppleTeamID?: string;
   selectedAppleDeviceIDs: string[];
+  signingMode: DeviceInstallSigningMode;
   connectedAppleDeviceRegistered: boolean;
   connectedDeviceInProfile?: boolean;
   hasReusableAppleCertificate: boolean;
   appleBundleID: string;
+  otaInstall?: IOSOTAInstall;
   buildLogPanelOpen: boolean;
   busyAction?: DeviceInstallBusyAction;
   error?: string;
@@ -96,6 +107,7 @@ export type UseDeviceInstallResult = {
   setSigningFiles: (files: DeviceInstallSigningFiles) => void;
   setAppleBundleID: (bundleID: string) => void;
   setSelectedAppleDeviceIDs: (deviceIDs: string[]) => void;
+  setSigningMode: (mode: DeviceInstallSigningMode) => void;
   setBuildLogPanelOpen: (open: boolean) => void;
   startAppleIDLogin: (input: DeviceInstallAppleIDLoginInput) => Promise<void>;
   submitAppleTwoFactorCode: (code: string) => Promise<void>;
@@ -167,12 +179,15 @@ export function useDeviceInstall({
   const [appleTeams, setAppleTeams] = useState<AppleDeveloperPortalTeam[]>([]);
   const [appleDevices, setAppleDevices] = useState<AppleDeveloperPortalDevice[]>([]);
   const [appleAppIDs, setAppleAppIDs] = useState<AppleDeveloperPortalAppID[]>([]);
+  const [signingMode, setSigningModeState] = useState<DeviceInstallSigningMode>('development');
   const [selectedAppleDeviceIDs, setSelectedAppleDeviceIDs] = useState<string[]>([]);
   const [applePortalSummary, setApplePortalSummary] = useState<ApplePortalSummary | undefined>();
   const [selectedAppleTeamID, setSelectedAppleTeamID] = useState<string | undefined>();
   const [appleBundleID, setAppleBundleID] = useState('');
   const [reusableAppleCertificate, setReusableAppleCertificate] = useState<ReusableAppleCertificate | undefined>();
   const [buildLogPanelOpen, setBuildLogPanelOpen] = useState(false);
+  const [otaInstall, setOTAInstall] = useState<IOSOTAInstall | undefined>();
+  const [currentExecID, setCurrentExecID] = useState<string | undefined>();
   const [busyAction, setBusyAction] = useState<DeviceInstallBusyAction | undefined>();
   const [error, setError] = useState<string | undefined>();
   const [pairConfirmationRequired, setPairConfirmationRequired] = useState(false);
@@ -194,7 +209,7 @@ export function useDeviceInstall({
   const setSigningFiles = useCallback((files: DeviceInstallSigningFiles) => {
     setSigningFilesState((current) => {
       const next = { ...current, ...files };
-      const ready = !!next.certificateFile && !!next.provisioningProfileFile && !!next.certificatePassword;
+      const ready = !!next.certificateFile && !!next.provisioningProfileFile;
       setStepStatus('signing', ready ? 'complete' : 'active');
       if (ready) {
         setAppleSigningStatus('assets-ready');
@@ -205,9 +220,19 @@ export function useDeviceInstall({
     setSigningAssets(undefined);
   }, [setStepStatus]);
 
+  const setSigningMode = useCallback((mode: DeviceInstallSigningMode) => {
+    setSigningModeState(mode);
+    setSigningAssets(undefined);
+    setOTAInstall(undefined);
+    setCurrentStep('signing');
+    setStepStatuses(initialStepStatuses);
+    setAppleSigningStatus('idle');
+    log(mode === 'adhoc' ? 'Using Ad Hoc signing mode' : 'Using development signing mode');
+  }, [log]);
+
   useEffect(() => {
     let cancelled = false;
-    void getLatestSigningAssets().then((stored) => {
+    void getLatestSigningAssets(signingMode).then((stored) => {
       if (cancelled || !stored) return;
       setSigningAssets(stored);
       setAppleBundleID(stored.bundleID);
@@ -219,7 +244,7 @@ export function useDeviceInstall({
     return () => {
       cancelled = true;
     };
-  }, [log, setStepStatus]);
+  }, [log, setStepStatus, signingMode]);
 
   const selectedDeveloperTeamID = useCallback(() => {
     return developerPortalTeamID(appleTeams.find((team) => appleTeamSelectionID(team) === selectedAppleTeamID));
@@ -232,7 +257,7 @@ export function useDeviceInstall({
       return;
     }
     let cancelled = false;
-    void findReusableAppleCertificate(teamID).then((certificate) => {
+    void findReusableAppleCertificate(teamID, signingMode).then((certificate) => {
       if (!cancelled) {
         setReusableAppleCertificate(certificate);
       }
@@ -240,14 +265,14 @@ export function useDeviceInstall({
     return () => {
       cancelled = true;
     };
-  }, [selectedDeveloperTeamID]);
+  }, [selectedDeveloperTeamID, signingMode]);
 
   const connectedAppleDevice = selectedDevice?.hello.serialNumber
     ? appleDevices.find((device) => normalizeAppleUDID(device.deviceNumber) === normalizeAppleUDID(selectedDevice.hello.serialNumber))
     : undefined;
   const connectedAppleDeviceRegistered = !!connectedAppleDevice?.deviceId;
   const manualSigningFilesReady =
-    !!signingFiles.certificateFile && !!signingFiles.provisioningProfileFile && !!signingFiles.certificatePassword;
+    !!signingFiles.certificateFile && !!signingFiles.provisioningProfileFile;
   const signingInputsReady = !!signingAssets || manualSigningFilesReady;
   const connectedDeviceInProfile =
     selectedDevice?.hello.serialNumber && signingAssets
@@ -288,6 +313,7 @@ export function useDeviceInstall({
         bundleID,
         deviceUDID: selectedDevice?.hello.serialNumber,
         teamID: selectedDeveloperTeamID(),
+        signingMode,
       });
       if (cached) {
         setAppleSigningStatus('using-cached-profile');
@@ -296,7 +322,7 @@ export function useDeviceInstall({
         return cached;
       }
     }
-    const stored = await getLatestSigningAssets();
+    const stored = await getLatestSigningAssets(signingMode);
     if (stored) {
       log('Using stored signing assets', stored.bundleID);
       setSigningAssets(stored);
@@ -304,10 +330,9 @@ export function useDeviceInstall({
     }
     if (
       !signingFiles.certificateFile ||
-      !signingFiles.provisioningProfileFile ||
-      !signingFiles.certificatePassword
+      !signingFiles.provisioningProfileFile
     ) {
-      throw new Error('Upload a certificate, provisioning profile, and certificate password.');
+      throw new Error('Upload a certificate and provisioning profile.');
     }
     log('Preparing signing assets');
     const [certificateP12Base64, provisioningProfileBase64, profile] = await Promise.all([
@@ -318,13 +343,17 @@ export function useDeviceInstall({
     if (selectedDevice?.hello.serialNumber && !profileContainsDevice(profile, selectedDevice.hello.serialNumber)) {
       throw new Error('Provisioning profile does not include the selected iPhone.');
     }
+    if (signingMode === 'adhoc' && profile.getTaskAllow) {
+      throw new Error('Ad Hoc mode requires an Ad Hoc provisioning profile, not a development profile.');
+    }
     const storageBundleId = profile.bundleID ?? profile.applicationIdentifier ?? signingFiles.provisioningProfileFile.name;
     const storedAssets = await putSigningAssets({
       deviceUDID: selectedDevice?.hello.serialNumber,
+      signingMode,
       bundleID: storageBundleId,
       certificateP12Base64,
       certificateFileName: signingFiles.certificateFile.name,
-      certificatePassword: signingFiles.certificatePassword,
+      certificatePassword: signingFiles.certificatePassword || undefined,
       provisioningProfileBase64,
       profileFileName: signingFiles.provisioningProfileFile.name,
       profile,
@@ -332,7 +361,7 @@ export function useDeviceInstall({
     setSigningAssets(storedAssets);
     log('Signing assets stored locally', storageBundleId);
     return storedAssets;
-  }, [apiUrl, appleBundleID, log, selectedDeveloperTeamID, selectedDevice?.hello.serialNumber, signingAssets, signingFiles, token]);
+  }, [apiUrl, appleBundleID, log, selectedDeveloperTeamID, selectedDevice?.hello.serialNumber, signingAssets, signingFiles, signingMode, token]);
 
   const startAppleIDLogin = useCallback(
     async ({ accountName, password }: DeviceInstallAppleIDLoginInput) => {
@@ -368,7 +397,7 @@ export function useDeviceInstall({
               log,
             });
           }
-          await refreshApplePortalSummary(apiUrl, session.appleSessionId, token, teamID, setApplePortalSummary, log);
+          await refreshApplePortalSummary(apiUrl, session.appleSessionId, token, teamID, signingMode, setApplePortalSummary, log);
         }
         setAppleSigningStatus(session.requiresTwoFactor ? 'two-factor-required' : 'authenticated');
         log(
@@ -384,7 +413,7 @@ export function useDeviceInstall({
         setBusyAction(undefined);
       }
     },
-    [apiUrl, log, setStepStatus, token],
+    [apiUrl, log, setStepStatus, signingMode, token],
   );
 
   const submitAppleTwoFactorCode = useCallback(
@@ -421,7 +450,7 @@ export function useDeviceInstall({
               log,
             });
           }
-          await refreshApplePortalSummary(apiUrl, session.appleSessionId, token, teamID, setApplePortalSummary, log);
+          await refreshApplePortalSummary(apiUrl, session.appleSessionId, token, teamID, signingMode, setApplePortalSummary, log);
         }
         setAppleSigningStatus('authenticated');
         log('Apple ID two-factor authentication accepted');
@@ -434,7 +463,7 @@ export function useDeviceInstall({
         setBusyAction(undefined);
       }
     },
-    [apiUrl, log, setStepStatus, token],
+    [apiUrl, log, setStepStatus, signingMode, token],
   );
 
   const clearAppleIDLogin = useCallback(() => {
@@ -468,7 +497,7 @@ export function useDeviceInstall({
       void (async () => {
         try {
           await refreshAppleAppIDs(apiUrl, session.appleSessionId, token, developerTeamID, setAppleAppIDs, setAppleBundleID);
-          await refreshApplePortalSummary(apiUrl, session.appleSessionId, token, developerTeamID, setApplePortalSummary, log);
+          await refreshApplePortalSummary(apiUrl, session.appleSessionId, token, developerTeamID, signingMode, setApplePortalSummary, log);
           await refreshAppleDevices({
             apiUrl,
             token,
@@ -486,7 +515,7 @@ export function useDeviceInstall({
         }
       })();
     },
-    [apiUrl, appleTeams, log, token],
+    [apiUrl, appleTeams, log, signingMode, token],
   );
 
   const registerConnectedAppleDevice = useCallback(async () => {
@@ -543,9 +572,6 @@ export function useDeviceInstall({
     if (selectedAppleDeviceIDs.length === 0) {
       throw new Error('Select at least one Apple Developer device before preparing signing assets.');
     }
-    if (!reusableAppleCertificate && !signingFiles.certificatePassword) {
-      throw new Error('Enter a .p12 password before preparing signing assets.');
-    }
     const selectedPortalDevice = appleDevices.find(
       (device) => !!device.deviceNumber && selectedAppleDeviceIDs.includes(device.deviceId ?? ''),
     );
@@ -560,6 +586,7 @@ export function useDeviceInstall({
         bundleID,
         deviceUDID: signingDeviceUDID,
         teamID,
+        signingMode,
       });
       if (cached) {
         setSigningAssets(cached);
@@ -577,8 +604,9 @@ export function useDeviceInstall({
         bundleID,
         deviceUDID: signingDeviceUDID,
         deviceIDs: selectedAppleDeviceIDs,
-        certificatePassword: signingFiles.certificatePassword,
+        certificatePassword: signingFiles.certificatePassword || undefined,
         reusableCertificate: reusableAppleCertificate,
+        signingMode,
       });
       setSigningAssets(assets);
       setAppleSigningStatus('assets-ready');
@@ -609,6 +637,7 @@ export function useDeviceInstall({
     setStepStatus,
     reusableAppleCertificate,
     signingFiles.certificatePassword,
+    signingMode,
     token,
   ]);
 
@@ -621,6 +650,8 @@ export function useDeviceInstall({
     setBuildLogPanelOpen(true);
     setBuildLogs([]);
     setBuildStatus('queued');
+    setOTAInstall(undefined);
+    setCurrentExecID(undefined);
     stopBuildWatcherRef.current?.();
     try {
       const assets = await resolveSigningAssetsForBuild();
@@ -635,18 +666,38 @@ export function useDeviceInstall({
       if (!result.execId) {
         throw new Error('Build request did not return an exec ID.');
       }
-      log('Signed device build started', result.execId);
+      const execID = result.execId;
+      setCurrentExecID(execID);
+      log('Signed device build started', execID);
       stopBuildWatcherRef.current = watchBuildLogEvents({
         limbuildApiUrl: apiUrl,
-        execId: result.execId,
+        execId: execID,
         token,
         onLine: (line) => setBuildLogs((current) => [...current, line]),
         onStatus: (status) => {
           setBuildStatus(status);
           if (status === 'succeeded') {
             setStepStatus('build', 'complete');
-            setStepStatus('connect', 'active');
-            setCurrentStep('connect');
+            if (signingMode === 'adhoc') {
+              setStepStatus('connect', 'complete');
+              setStepStatus('install', 'active');
+              setCurrentStep('install');
+              void getIOSOTAInstall({ limbuildApiUrl: apiUrl, execId: execID, token })
+                .then((metadata) => {
+                  setOTAInstall(metadata);
+                  setStepStatus('install', 'complete');
+                  log('Ad Hoc install QR is ready');
+                })
+                .catch((caught) => {
+                  const message = errorMessage(caught);
+                  setError(message);
+                  setStepStatus('install', 'error');
+                  log('Ad Hoc install metadata failed', message);
+                });
+            } else {
+              setStepStatus('connect', 'active');
+              setCurrentStep('connect');
+            }
           } else if (status === 'failed' || status === 'cancelled') {
             setStepStatus('build', 'error');
           }
@@ -666,7 +717,7 @@ export function useDeviceInstall({
     } finally {
       setBusyAction(undefined);
     }
-  }, [apiUrl, log, resolveSigningAssetsForBuild, setStepStatus, token]);
+  }, [apiUrl, log, resolveSigningAssetsForBuild, setStepStatus, signingMode, token]);
 
   const requestUSBAccess = useCallback(async () => {
     setBusyAction('usb');
@@ -679,7 +730,7 @@ export function useDeviceInstall({
       target = await requestDeviceUSBAccess({ log });
       setPairConfirmationRequired(false);
       const storedPairRecord = await getPairRecord(target.hello.serialNumber);
-      const activeSigningAssets = signingAssets ?? (manualSigningFilesReady ? undefined : await getLatestSigningAssets());
+      const activeSigningAssets = signingAssets ?? (manualSigningFilesReady ? undefined : await getLatestSigningAssets(signingMode));
       if (activeSigningAssets) {
         if (!profileContainsDevice(activeSigningAssets.profile, target.hello.serialNumber)) {
           throw new Error('Stored provisioning profile does not include the selected iPhone.');
@@ -717,7 +768,7 @@ export function useDeviceInstall({
     } finally {
       setBusyAction(undefined);
     }
-  }, [apiUrl, cleanupDeviceAccess, log, manualSigningFilesReady, selectedDeveloperTeamID, setStepStatus, signingAssets, token]);
+  }, [apiUrl, cleanupDeviceAccess, log, manualSigningFilesReady, selectedDeveloperTeamID, setStepStatus, signingAssets, signingMode, token]);
 
   const pairBrowser = useCallback(async () => {
     if (!apiUrl || !selectedDevice) return;
@@ -800,6 +851,7 @@ export function useDeviceInstall({
     logs,
     buildLogs,
     buildStatus,
+    currentExecID,
     appleSigningStatus,
     appleTeams,
     appleDevices,
@@ -807,10 +859,12 @@ export function useDeviceInstall({
     applePortalSummary,
     selectedAppleTeamID,
     selectedAppleDeviceIDs,
+    signingMode,
     connectedAppleDeviceRegistered,
     connectedDeviceInProfile,
     hasReusableAppleCertificate: !!reusableAppleCertificate,
     appleBundleID,
+    otaInstall,
     buildLogPanelOpen,
     busyAction,
     error,
@@ -824,14 +878,14 @@ export function useDeviceInstall({
       !!appleIDLoginRef.current &&
       !!appleBundleID.trim() &&
       !!selectedDeveloperTeamID() &&
-      selectedAppleDeviceIDs.length > 0 &&
-      (!!reusableAppleCertificate || !!signingFiles.certificatePassword),
-    canRequestUSBAccess: !busyAction && buildStatus === 'succeeded',
-    canPairBrowser: !!apiUrl && !busyAction && buildStatus === 'succeeded' && !!selectedDevice,
-    canInstall: !!apiUrl && !busyAction && buildStatus === 'succeeded' && !!selectedDevice && !!pairRecord,
+      selectedAppleDeviceIDs.length > 0,
+    canRequestUSBAccess: signingMode === 'development' && !busyAction && buildStatus === 'succeeded',
+    canPairBrowser: signingMode === 'development' && !!apiUrl && !busyAction && buildStatus === 'succeeded' && !!selectedDevice,
+    canInstall: signingMode === 'development' && !!apiUrl && !busyAction && buildStatus === 'succeeded' && !!selectedDevice && !!pairRecord,
     setSigningFiles,
     setAppleBundleID,
     setSelectedAppleDeviceIDs,
+    setSigningMode,
     setBuildLogPanelOpen,
     startAppleIDLogin,
     submitAppleTwoFactorCode,
@@ -851,9 +905,12 @@ async function fetchStoredBuildInfo(apiUrl: string, token?: string) {
   return fetchLimbuildInfo(apiUrl, token);
 }
 
-async function findReusableAppleCertificate(teamID: string): Promise<ReusableAppleCertificate | undefined> {
-  const stored = await getLatestSigningAssetsWithCertificate(teamID);
-  if (!stored?.certificateID || !stored.certificateP12Base64 || !stored.certificatePassword) {
+async function findReusableAppleCertificate(
+  teamID: string,
+  signingMode: DeviceInstallSigningMode,
+): Promise<ReusableAppleCertificate | undefined> {
+  const stored = await getLatestSigningAssetsWithCertificate(teamID, signingMode);
+  if (!stored?.certificateID || !stored.certificateP12Base64) {
     return undefined;
   }
   return {
@@ -937,6 +994,7 @@ async function refreshApplePortalSummary(
   appleSessionId: string,
   token: string | undefined,
   teamID: string | undefined,
+  signingMode: DeviceInstallSigningMode,
   setApplePortalSummary: (summary: ApplePortalSummary | undefined) => void,
   log: (message: string, detail?: string) => void,
 ) {
@@ -944,13 +1002,15 @@ async function refreshApplePortalSummary(
     proxyProvisioningRequest<AppleDeveloperPortalResponse>(
       apiUrl,
       appleSessionId,
-      findDevelopmentCertificatesRequest(teamID ?? ''),
+      signingMode === 'adhoc' ? findDistributionCertificatesRequest(teamID ?? '') : findDevelopmentCertificatesRequest(teamID ?? ''),
       token,
     ),
     proxyProvisioningRequest<AppleDeveloperPortalResponse>(
       apiUrl,
       appleSessionId,
-      findDevelopmentProfilesRequest({ bundleID: '', teamID: teamID ?? '' }),
+      signingMode === 'adhoc'
+        ? findAdHocProfilesRequest({ bundleID: '', teamID: teamID ?? '' })
+        : findDevelopmentProfilesRequest({ bundleID: '', teamID: teamID ?? '' }),
       token,
     ),
   ]);
@@ -1021,6 +1081,7 @@ async function prepareAppleSigningAssetsForDevice({
   certificatePassword,
   deviceIDs,
   reusableCertificate,
+  signingMode,
 }: {
   apiUrl: string;
   token?: string;
@@ -1031,6 +1092,7 @@ async function prepareAppleSigningAssetsForDevice({
   deviceIDs: string[];
   certificatePassword?: string;
   reusableCertificate?: ReusableAppleCertificate;
+  signingMode: DeviceInstallSigningMode;
 }) {
   const normalizedUDID = deviceUDID?.replace(/-/g, '').replace(/[^a-fA-F0-9]/g, '') ?? '';
   const appIDID = await findOrCreateAppleBundleID({
@@ -1043,21 +1105,20 @@ async function prepareAppleSigningAssetsForDevice({
 
   let certificateID = reusableCertificate?.certificateID;
   let certificateP12Base64 = reusableCertificate?.certificateP12Base64;
-  let storedCertificatePassword = reusableCertificate?.certificatePassword;
-  if (!certificateID || !certificateP12Base64 || !storedCertificatePassword) {
-    if (!certificatePassword) {
-      throw new Error('Enter a .p12 password before preparing signing assets.');
-    }
+  let storedCertificatePassword = reusableCertificate?.certificatePassword || undefined;
+  if (!certificateID || !certificateP12Base64) {
     const keyMaterial = await generateAppleSigningKeyAndCSR({
       commonName: `Limrun ${bundleID}`,
     });
     const certificateResponse = await proxyProvisioningRequest<AppleDeveloperPortalResponse>(
       apiUrl,
       appleSessionId,
-      submitDevelopmentCSRRequest({ csrPEM: keyMaterial.csrPEM, teamID }),
+      signingMode === 'adhoc'
+        ? submitDistributionCSRRequest({ csrPEM: keyMaterial.csrPEM, teamID })
+        : submitDevelopmentCSRRequest({ csrPEM: keyMaterial.csrPEM, teamID }),
       token,
     );
-    assertApplePortalResponseOK(certificateResponse.body, 'Apple Development certificate creation');
+    assertApplePortalResponseOK(certificateResponse.body, signingMode === 'adhoc' ? 'Apple Distribution certificate creation' : 'Apple Development certificate creation');
     certificateID =
       stringField(certificateResponse.body?.certRequest, 'certificateId') ??
       stringField(certificateResponse.body?.certRequest, 'certRequestId') ??
@@ -1070,7 +1131,9 @@ async function prepareAppleSigningAssetsForDevice({
     const downloadedCertificate = await proxyProvisioningRequest(
       apiUrl,
       appleSessionId,
-      downloadCertificateRequest(certificateID, teamID),
+      signingMode === 'adhoc'
+        ? downloadDistributionCertificateRequest(certificateID, teamID)
+        : downloadCertificateRequest(certificateID, teamID),
       token,
     );
     if (downloadedCertificate.status < 200 || downloadedCertificate.status >= 300 || !downloadedCertificate.rawBodyBase64) {
@@ -1079,24 +1142,33 @@ async function prepareAppleSigningAssetsForDevice({
     certificateP12Base64 = exportAppleCertificateP12({
       privateKeyPKCS8Base64: keyMaterial.privateKeyPKCS8Base64,
       certificateBase64: downloadedCertificate.rawBodyBase64,
-      password: certificatePassword,
-      friendlyName: `Apple Development ${bundleID}`,
+      password: certificatePassword ?? '',
+      friendlyName: signingMode === 'adhoc' ? `Apple Distribution ${bundleID}` : `Apple Development ${bundleID}`,
     });
-    storedCertificatePassword = certificatePassword;
+    storedCertificatePassword = certificatePassword || undefined;
   }
 
-  const profileName = `Limrun ${bundleID}`;
+  const profileName = signingMode === 'adhoc' ? `Limrun Ad Hoc ${bundleID}` : `Limrun ${bundleID}`;
   const profileResponse = await proxyProvisioningRequest<AppleDeveloperPortalResponse>(
     apiUrl,
     appleSessionId,
-    createDevelopmentProfileRequest({
-      bundleID,
-      teamID,
-      appIDID,
-      certificateID,
-      deviceIDs,
-      name: profileName,
-    }),
+    signingMode === 'adhoc'
+      ? createAdHocProfileRequest({
+          bundleID,
+          teamID,
+          appIDID,
+          certificateID,
+          deviceIDs,
+          name: profileName,
+        })
+      : createDevelopmentProfileRequest({
+          bundleID,
+          teamID,
+          appIDID,
+          certificateID,
+          deviceIDs,
+          name: profileName,
+        }),
     token,
   );
   assertApplePortalResponseOK(profileResponse.body, 'Apple provisioning profile creation');
@@ -1118,11 +1190,15 @@ async function prepareAppleSigningAssetsForDevice({
   }
   const provisioningProfileBase64 = downloadedProfile.rawBodyBase64;
   const profile = parseProvisioningProfileBase64(provisioningProfileBase64);
+  if (signingMode === 'adhoc' && profile.getTaskAllow) {
+    throw new Error('Apple returned a development provisioning profile for Ad Hoc signing.');
+  }
 
   return putAppleGeneratedSigningAssets({
     bundleID,
     deviceUDID: normalizedUDID || undefined,
     teamID,
+    signingMode,
     certificateID,
     certificateP12Base64,
     certificatePassword: storedCertificatePassword,

package/dist/device-install-dialog-CjH25hnN.js

@@ -1,2 +0,0 @@
-"use strict";require('./device-install-dialog.css');const e=require("react/jsx-runtime"),d=require("react"),w=require("./use-device-install-Y1u6vIBB.js");function S(l){var t,a,n="";if(typeof l=="string"||typeof l=="number")n+=l;else if(typeof l=="object")if(Array.isArray(l)){var c=l.length;for(t=0;t<c;t++)l[t]&&(a=S(l[t]))&&(n&&(n+=" "),n+=a)}else for(a in l)l[a]&&(n&&(n+=" "),n+=a);return n}function u(){for(var l,t,a=0,n="",c=arguments.length;a<c;a++)(l=arguments[a])&&(t=S(l))&&(n&&(n+=" "),n+=t);return n}const P=[{id:"signing",title:"Prepare signing",description:"Choose Apple ID login or upload certificates for a registered developer device."},{id:"build",title:"Build for device",description:"Start the signed iPhone build before connecting over USB."},{id:"connect",title:"Connect and pair",description:"After the build succeeds, connect the iPhone with WebUSB and pair this browser."},{id:"install",title:"Start installation",description:"Relay the last successful device build to the paired iPhone."}];function I({disabled:l,...t}){const[a,n]=d.useState(!1),[c,h]=d.useState("signing"),[o,b]=d.useState(),[g,y]=d.useState(""),[m,A]=d.useState(""),[x,C]=d.useState(""),j=d.useId(),i=w.useDeviceInstall(t);d.useEffect(()=>{h(i.currentStep)},[i.currentStep]);const f=(r,p)=>{i.setSigningFiles({[r]:p.currentTarget.files?.[0]})};return e.jsxs("div",{className:"lr-device-install",children:[e.jsx("button",{type:"button",className:"lr-device-install__trigger",disabled:l||!t.apiUrl,onClick:()=>n(!0),children:"Install to iPhone"}),a&&e.jsx("div",{className:"lr-device-install__backdrop",role:"presentation",children:e.jsxs("section",{"aria-labelledby":j,"aria-modal":"true",className:"lr-device-install__dialog",role:"dialog",children:[e.jsxs("header",{className:"lr-device-install__header",children:[e.jsxs("div",{children:[e.jsx("h2",{id:j,children:"Install to a real iPhone"}),e.jsx("p",{children:"Prepare signing, build for the registered device, connect and pair, then install from this browser."})]}),e.jsx("button",{type:"button",className:"lr-device-install__icon-button",onClick:()=>n(!1),children:"Close"})]}),i.error&&e.jsx("div",{className:"lr-device-install__error",children:i.error}),e.jsx("div",{className:"lr-device-install__steps",children:P.map((r,p)=>e.jsxs(T,{index:p+1,step:r,active:i.currentStep===r.id,open:c===r.id,status:i.stepStatuses[r.id],onToggle:()=>h(r.id),children:[r.id==="signing"&&e.jsxs("div",{className:"lr-device-install__step-body",children:[e.jsxs("div",{className:"lr-device-install__choice-grid",children:[e.jsxs("button",{type:"button",className:u("lr-device-install__choice",o==="apple-id"&&"lr-device-install__choice--active"),onClick:()=>b("apple-id"),children:[e.jsx("strong",{children:"Apple ID login"}),e.jsx("span",{children:"Sign in, choose team, bundle ID, and registered devices, then generate signing assets."})]}),e.jsxs("button",{type:"button",className:u("lr-device-install__choice",o==="upload"&&"lr-device-install__choice--active"),onClick:()=>b("upload"),children:[e.jsx("strong",{children:"Upload certificates"}),e.jsx("span",{children:"Use an existing .p12 certificate and provisioning profile."})]})]}),o==="apple-id"&&e.jsxs("div",{className:"lr-device-install__section-panel",children:[e.jsxs("div",{className:"lr-device-install__grid",children:[e.jsxs("label",{className:"lr-device-install__field",children:[e.jsx("span",{children:"Apple ID"}),e.jsx("input",{type:"email",autoComplete:"username",placeholder:"name@example.com",value:g,onChange:s=>y(s.currentTarget.value)})]}),e.jsxs("label",{className:"lr-device-install__field",children:[e.jsx("span",{children:"Apple ID password"}),e.jsx("input",{type:"password",autoComplete:"current-password",placeholder:"Password stays in this browser",value:m,onChange:s=>A(s.currentTarget.value)})]}),!i.hasReusableAppleCertificate&&e.jsxs("label",{className:"lr-device-install__field",children:[e.jsx("span",{children:"Generated .p12 password"}),e.jsx("input",{type:"password",placeholder:"Used when exporting Apple certificate",onChange:s=>i.setSigningFiles({certificatePassword:s.currentTarget.value})})]})]}),e.jsxs("div",{className:"lr-device-install__actions",children:[e.jsx("button",{type:"button",className:"lr-device-install__secondary",disabled:l||!t.apiUrl||!g||!m||i.busyAction==="signing",onClick:()=>void i.startAppleIDLogin({accountName:g,password:m}),children:i.appleSigningStatus==="authenticating"?"Signing in...":"Sign in with Apple ID"}),e.jsxs("span",{className:"lr-device-install__hint",children:["Apple password is used only by browser-side SRP. Status: ",i.appleSigningStatus]})]}),i.appleSigningStatus==="two-factor-required"&&e.jsxs("div",{className:"lr-device-install__grid",children:[e.jsxs("label",{className:"lr-device-install__field",children:[e.jsx("span",{children:"Two-factor code"}),e.jsx("input",{type:"text",inputMode:"numeric",autoComplete:"one-time-code",value:x,onChange:s=>C(s.currentTarget.value)})]}),e.jsx("button",{type:"button",className:"lr-device-install__secondary",disabled:!x||i.busyAction==="signing",onClick:()=>void i.submitAppleTwoFactorCode(x),children:"Submit Apple ID code"})]}),i.appleTeams.length>0&&e.jsxs("label",{className:"lr-device-install__field",children:[e.jsx("span",{children:"Apple Developer team"}),e.jsx("select",{value:i.selectedAppleTeamID??"",onChange:s=>i.setSelectedAppleTeamID(s.currentTarget.value||void 0),children:i.appleTeams.map((s,_)=>{const v=s.teamId??(s.providerId===void 0?void 0:String(s.providerId))??s.publicProviderId??"";return e.jsxs("option",{value:v,children:[s.name??"Apple Developer Team"," ",v?`(${v})`:""]},`${v}-${_}`)})})]}),i.appleDevices.length>0&&e.jsxs("label",{className:"lr-device-install__field",children:[e.jsx("span",{children:"Apple Developer devices"}),e.jsx("select",{multiple:!0,value:i.selectedAppleDeviceIDs,onChange:s=>i.setSelectedAppleDeviceIDs(Array.from(s.currentTarget.selectedOptions).map(_=>_.value)),children:i.appleDevices.map(s=>e.jsxs("option",{value:s.deviceId??"",children:[s.name??s.model??"Apple device"," ",s.deviceNumber??""]},s.deviceId??s.deviceNumber))})]}),i.applePortalSummary&&e.jsxs("p",{className:"lr-device-install__hint",children:["Found ",i.applePortalSummary.certificateCount," certificates and"," ",i.applePortalSummary.profileCount," provisioning profiles."]}),i.hasReusableAppleCertificate&&e.jsx("p",{className:"lr-device-install__hint",children:"Reusing the certificate and private key stored in this browser."}),e.jsx("button",{type:"button",className:"lr-device-install__primary",disabled:l||!i.canPrepareAppleSigningAssets,onClick:()=>void i.prepareAppleSigningAssets(),children:i.appleSigningStatus==="preparing-assets"?"Preparing signing assets...":"Generate certificate and profile"})]}),o==="upload"&&e.jsxs("div",{className:"lr-device-install__section-panel",children:[e.jsxs("div",{className:"lr-device-install__grid",children:[e.jsxs("label",{className:"lr-device-install__field",children:[e.jsx("span",{children:"Certificate (.p12)"}),e.jsx("input",{type:"file",accept:".p12,application/x-pkcs12",onChange:s=>f("certificateFile",s)})]}),e.jsxs("label",{className:"lr-device-install__field",children:[e.jsx("span",{children:"Provisioning profile"}),e.jsx("input",{type:"file",accept:".mobileprovision",onChange:s=>f("provisioningProfileFile",s)})]}),e.jsxs("label",{className:"lr-device-install__field",children:[e.jsx("span",{children:"Uploaded .p12 password"}),e.jsx("input",{type:"password",placeholder:"Export password",onChange:s=>i.setSigningFiles({certificatePassword:s.currentTarget.value})})]})]}),e.jsx("p",{className:"lr-device-install__hint",children:"The provisioning profile will be checked against the connected iPhone before installation."})]}),i.hasSigningAssets&&e.jsx("p",{children:"Signing assets are stored in this browser for the selected bundle and device."})]}),r.id==="connect"&&e.jsxs("div",{className:"lr-device-install__step-body",children:[e.jsx("p",{children:"WebUSB works in Chromium browsers on secure origins. Once the build succeeds, connect the iPhone over USB, approve the browser permission prompt, then pair this browser."}),e.jsxs("div",{className:"lr-device-install__actions",children:[e.jsx("button",{type:"button",className:"lr-device-install__primary",disabled:l||!i.canRequestUSBAccess,onClick:()=>void i.requestUSBAccess(),children:i.busyAction==="usb"?"Selecting iPhone...":"Allow USB access"}),e.jsx("button",{type:"button",className:"lr-device-install__secondary",disabled:l||!i.canPairBrowser,onClick:()=>void i.pairBrowser(),children:i.busyAction==="pair"?"Pairing...":i.pairConfirmationRequired?"Confirm pair record":"Pair browser"})]}),i.device&&e.jsx("div",{className:"lr-device-install__device",children:`${i.device.productName??"iPhone"} ${i.device.serialNumber??""}`.trim()}),i.pairConfirmationRequired&&e.jsxs("p",{children:["Unlock the iPhone and tap ",e.jsx("strong",{children:"Trust"})," in the system dialog, then confirm the pair record."]}),e.jsx("p",{children:i.hasPairRecord?"Pair record is stored locally. Continue to installation.":"Pair this browser once before installing."})]}),r.id==="build"&&e.jsxs("div",{className:"lr-device-install__step-body",children:[e.jsxs("div",{className:"lr-device-install__checklist",children:[e.jsx(N,{label:"Signing assets",ready:i.hasSigningInputs}),e.jsx(N,{label:"Device build",ready:i.buildStatus==="succeeded"?!0:void 0,pendingText:"Not started"})]}),e.jsx("button",{type:"button",className:"lr-device-install__primary",disabled:l||!i.canBuild,onClick:()=>void i.startDeviceBuild(),children:i.busyAction==="build"?"Starting build...":"Start device build"}),e.jsxs("details",{className:"lr-device-install__build-logs",open:i.buildLogPanelOpen,onToggle:s=>i.setBuildLogPanelOpen(s.currentTarget.open),children:[e.jsxs("summary",{children:["Build logs (",i.buildStatus,")"]}),e.jsx("pre",{children:i.buildLogs.length>0?i.buildLogs.filter(s=>s.type!=="meta").map(s=>s.data).join(`
-`):"Build logs will appear here while the device build is running."})]})]}),r.id==="install"&&e.jsxs("div",{className:"lr-device-install__step-body",children:[e.jsx("button",{type:"button",className:"lr-device-install__primary",disabled:l||!i.canInstall,onClick:()=>void i.startInstallation(),children:i.busyAction==="install"?"Installing...":"Install last build"}),e.jsx("button",{type:"button",className:"lr-device-install__secondary",onClick:i.stopRelay,children:"Stop relay"})]})]},r.id))}),e.jsxs("footer",{className:"lr-device-install__logs",children:[e.jsx("h3",{children:"Progress"}),e.jsx("ol",{children:i.logs.map((r,p)=>e.jsx("li",{children:r},`${p}-${r.slice(0,24)}`))})]})]})})]})}function T({index:l,step:t,active:a,open:n,status:c,onToggle:h,children:o}){return e.jsxs("article",{className:u("lr-device-install__step",a&&"lr-device-install__step--active"),children:[e.jsxs("button",{type:"button",className:"lr-device-install__step-header","aria-expanded":n,onClick:h,children:[e.jsx("div",{className:"lr-device-install__step-number",children:l}),e.jsxs("div",{children:[e.jsx("h3",{children:t.title}),e.jsx("p",{children:t.description})]}),e.jsx("span",{className:u("lr-device-install__status",`lr-device-install__status--${c}`),children:c==="complete"?"✓ Completed":c})]}),n&&o]})}function N({label:l,ready:t,pendingText:a="Not ready"}){const n=t===void 0?a:t?"Ready":"Needs attention";return e.jsxs("div",{className:"lr-device-install__check-row",children:[e.jsx("span",{children:l}),e.jsx("strong",{children:n})]})}exports.DeviceInstallDialog=I;exports.clsx=u;