@limrun/ui 0.9.0-rc.9 → 0.13.3

package/README.md

@@ -4,14 +4,31 @@
 
 See [examples](../../examples/) to see how it can be used.
 
-## Real Device Installation
-
-`@limrun/ui` also includes a browser-based iPhone installation flow:
-
-- `@limrun/ui/device-install/react` exports the headless `useDeviceInstall` hook for clients that want to render their own UI.
-- `@limrun/ui/device-install` exports the guided `DeviceInstallDialog` UI, which walks users through a signed device build, USB access, browser pairing, and installation.
-
-WebUSB requires a Chromium browser and a secure context. Pair records and signing assets, including the `.p12` password, are stored in the browser's IndexedDB.
+## Real Device Installation Primitives
+
+`@limrun/ui` includes browser primitives for building your own iPhone
+installation UI. The package no longer exports a guided install dialog.
+
+- `@limrun/ui/app-store-relay` exports framework-agnostic Apple ID relay and Apple Developer Portal calls for teams, certificates, profiles, bundle IDs, and devices.
+- `@limrun/ui/app-store-relay/react` exports thin React state helpers for Apple ID login.
+- `@limrun/ui/device-build` exports signing asset helpers, signed build triggering, build log watching, and OTA install metadata.
+- `@limrun/ui/device-build/react` exports build state helpers.
+- `@limrun/ui/device-install` exports WebUSB access, pairing, pair-record storage, and install relay primitives.
+- `@limrun/ui/device-install/react` exports focused React state for device access, pairing, and relay installation.
+
+The primitives are intentionally low-level. Your app decides whether to create
+or reuse Apple certificates and provisioning profiles, how to present devices
+and bundle IDs, and when to persist signing assets.
+
+```ts
+import { listAppleTeams, createAppleProfile } from '@limrun/ui/app-store-relay';
+import { startSignedDeviceBuild } from '@limrun/ui/device-build';
+import { requestUSBAccess, pairDevice, startDeviceInstall } from '@limrun/ui/device-install';
+```
+
+WebUSB requires a Chromium browser and a secure context. Pair records and signing
+assets, including the `.p12` password when provided, are stored in the browser's
+IndexedDB only when you call the storage helpers.
 
 ### Releasing
 

package/dist/app-store-relay/index.cjs

@@ -0,0 +1,9 @@
+"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const l=require("../client-ASLtHFLh.js"),u=require("../index-CMeQfhYy.js"),p=require("../provisioning-Va0PH4Kk.js"),P={name:"RSASSA-PKCS1-v1_5",modulusLength:2048,publicExponent:new Uint8Array([1,0,1]),hash:"SHA-256"};async function I(e){if(!crypto.subtle)throw new Error("WebCrypto is not available in this browser.");const t=await crypto.subtle.generateKey(P,!0,["sign","verify"]),r=new Uint8Array(await crypto.subtle.exportKey("spki",t.publicKey)),n=f(C(0),h(e),r,B(0,new Uint8Array)),i=new Uint8Array(await crypto.subtle.sign("RSASSA-PKCS1-v1_5",t.privateKey,N(n))),o=f(n,f(g("1.2.840.113549.1.1.11"),R()),E(i)),s=new Uint8Array(await crypto.subtle.exportKey("pkcs8",t.privateKey));return{privateKey:t.privateKey,privateKeyPKCS8Base64:y(s),publicKeySPKIBase64:y(r),csrPEM:U("CERTIFICATE REQUEST",o),csrBase64:y(o)}}function S(e){if(!e.certificateBase64&&!e.certificatePEM)throw new Error("certificateBase64 or certificatePEM is required.");const t=u.forge.pki.privateKeyFromPem(F("PRIVATE KEY",e.privateKeyPKCS8Base64)),r=e.certificatePEM?u.forge.pki.certificateFromPem(e.certificatePEM):u.forge.pki.certificateFromAsn1(u.forge.asn1.fromDer(u.forge.util.createBuffer(k(e.certificateBase64)))),n=u.forge.pkcs12.toPkcs12Asn1(t,[r],e.password,{algorithm:"3des",friendlyName:e.friendlyName}),i=u.forge.asn1.toDer(n).getBytes();return O(i)}function h(e){const t=[v("2.5.4.3",T(e.commonName))];return e.emailAddress&&t.push(v("1.2.840.113549.1.9.1",K(e.emailAddress))),f(...t)}function v(e,t){return q(f(g(e),t))}function f(...e){return d(48,A(...e))}function q(...e){return d(49,A(...e))}function B(e,t){return d(160+e,t)}function C(e){return d(2,new Uint8Array([e]))}function R(){return new Uint8Array([5,0])}function T(e){return d(12,new TextEncoder().encode(e))}function K(e){return d(22,new TextEncoder().encode(e))}function E(e){return d(3,A(new Uint8Array([0]),e))}function g(e){const t=e.split(".").map(n=>parseInt(n,10));if(t.length<2||t.some(n=>!Number.isFinite(n)))throw new Error(`Invalid OID: ${e}`);const r=[t[0]*40+t[1]];for(const n of t.slice(2)){const i=[n&127];let o=n>>7;for(;o>0;)i.unshift(o&127|128),o>>=7;r.push(...i)}return d(6,new Uint8Array(r))}function d(e,t){return A(new Uint8Array([e]),x(t.byteLength),t)}function x(e){if(e<128)return new Uint8Array([e]);const t=[];let r=e;for(;r>0;)t.unshift(r&255),r>>=8;return new Uint8Array([128|t.length,...t])}function A(...e){const t=e.reduce((i,o)=>i+o.byteLength,0),r=new Uint8Array(t);let n=0;for(const i of e)r.set(i,n),n+=i.byteLength;return r}function U(e,t){const n=y(t).match(/.{1,64}/g)??[];return`-----BEGIN ${e}-----
+${n.join(`
+`)}
+-----END ${e}-----
+`}function F(e,t){const r=t.match(/.{1,64}/g)??[];return`-----BEGIN ${e}-----
+${r.join(`
+`)}
+-----END ${e}-----
+`}function y(e){let t="";for(const r of e)t+=String.fromCharCode(r);return btoa(t)}function O(e){return btoa(e)}function k(e){return atob(e)}function N(e){const t=new Uint8Array(e.byteLength);return t.set(e),t.buffer}async function a({apiUrl:e,token:t,appleSessionId:r,request:n,label:i="Apple Developer Portal request",validatePortalResponse:o=!0,mapBody:s}){const c=await l.proxyProvisioningRequest(e,r,n,t);return o&&b(c.body,i),s?s(c.body,c):c}async function L(e){return a({...e,request:p.listTeamsRequest(),label:"Apple Developer team list",mapBody:t=>re([...t?.teams??[],...t?.availableProviders??[],...t?.provider?[t.provider]:[]])})}async function $({certificateKind:e="development",teamId:t="",...r}){return a({...r,request:e==="distribution"?p.findDistributionCertificatesRequest(t):p.findDevelopmentCertificatesRequest(t),label:"Apple Developer certificate list",mapBody:n=>n?.certRequests??[]})}async function G({certificateKind:e="development",teamId:t="",csrPEM:r,...n}){return a({...n,request:e==="distribution"?p.submitDistributionCSRRequest({csrPEM:r,teamID:t}):p.submitDevelopmentCSRRequest({csrPEM:r,teamID:t}),label:e==="distribution"?"Apple Distribution certificate creation":"Apple Development certificate creation",mapBody:i=>i?.certRequest})}async function H({certificateKind:e="development",certificateId:t,teamId:r="",...n}){return a({...n,request:e==="distribution"?p.downloadDistributionCertificateRequest(t,r):p.downloadCertificateRequest(t,r),label:"Apple certificate download",validatePortalResponse:!1,mapBody:(i,o)=>o})}async function M({certificateKind:e="development",certificateId:t,teamId:r="",...n}){return a({...n,request:{method:"POST",path:"/account/ios/certificate/revokeCertificate.action",payload:{teamId:r,certificateId:t,type:e==="distribution"?"WXV89964HE":"83Q87W3TGH"}},label:"Apple certificate deletion",mapBody:i=>i})}async function _({teamId:e="",search:t="",...r}){const n=t.trim().toLowerCase();return a({...r,request:p.findBundleIDRequest({bundleID:t,teamID:e}),label:"Apple bundle ID list",mapBody:i=>{const o=i?.appIds??[];return n?o.filter(s=>[s.identifier,s.bundleId,s.name].some(c=>typeof c=="string"&&c.toLowerCase().includes(n))):o}})}async function j({teamId:e="",bundleId:t,name:r,...n}){return a({...n,request:p.createBundleIDRequest({bundleID:t,teamID:e,name:r}),label:"Apple bundle ID creation",mapBody:i=>i?.appId})}async function V({teamId:e="",appIdId:t,bundleId:r,name:n,...i}){return a({...i,request:{method:"POST",path:"/account/ios/identifiers/updateAppId.action",payload:{teamId:e,appIdId:t,...r?{identifier:r}:{},...n?{name:n}:{}}},label:"Apple bundle ID update",mapBody:o=>o?.appId})}async function W({teamId:e="",appIdId:t,...r}){return a({...r,request:{method:"POST",path:"/account/ios/identifiers/deleteAppId.action",payload:{teamId:e,appIdId:t}},label:"Apple bundle ID deletion",mapBody:n=>n})}async function Q({teamId:e="",deviceUDID:t="",...r}){const n=D(t);return a({...r,request:p.findDeviceRequest({deviceUDID:t,teamID:e}),label:"Apple device list",mapBody:i=>{const o=i?.devices??[];return n?o.filter(s=>D(s.deviceNumber)===n):o}})}function D(e){return(e??"").replace(/-/g,"").replace(/[^a-fA-F0-9]/g,"").toUpperCase()}async function z({teamId:e="",deviceUDID:t,name:r,...n}){return a({...n,request:p.registerDeviceRequest({deviceUDID:t,teamID:e,name:r}),label:"Apple device registration",mapBody:i=>i?.device})}async function J({teamId:e="",deviceId:t,name:r,...n}){return a({...n,request:{method:"POST",path:"/account/ios/device/updateDevice.action",payload:{teamId:e,deviceId:t,...r?{name:r}:{}}},label:"Apple device update",mapBody:i=>i?.device})}async function X({teamId:e="",deviceId:t,...r}){return a({...r,request:{method:"POST",path:"/account/ios/device/deleteDevice.action",payload:{teamId:e,deviceId:t}},label:"Apple device deletion",mapBody:n=>n})}async function Y({profileKind:e="development",teamId:t="",bundleId:r="",...n}){return a({...n,request:e==="adhoc"?p.findAdHocProfilesRequest({bundleID:r,teamID:t}):p.findDevelopmentProfilesRequest({bundleID:r,teamID:t}),label:"Apple provisioning profile list",mapBody:i=>i?.provisioningProfiles??[]})}async function Z({profileKind:e="development",teamId:t="",bundleId:r,appIdId:n,certificateIds:i,deviceIds:o,name:s,...c}){const[m]=i;if(!m)throw new Error("At least one certificate ID is required to create an Apple provisioning profile.");return a({...c,request:e==="adhoc"?p.createAdHocProfileRequest({bundleID:r,teamID:t,appIDID:n,certificateID:m,deviceIDs:o,name:s}):p.createDevelopmentProfileRequest({bundleID:r,teamID:t,appIDID:n,certificateID:m,deviceIDs:o,name:s}),label:"Apple provisioning profile creation",mapBody:w=>w?.provisioningProfile})}async function ee({teamId:e="",profileId:t,...r}){return a({...r,request:p.downloadProfileRequest(t,e),label:"Apple provisioning profile download",validatePortalResponse:!1,mapBody:(n,i)=>i})}async function te({teamId:e="",profileId:t,...r}){return a({...r,request:{method:"POST",path:"/account/ios/profile/deleteProvisioningProfile.action",payload:{teamId:e,provisioningProfileId:t}},label:"Apple provisioning profile deletion",mapBody:n=>n})}function b(e,t){if(!e)throw new Error(`${t} returned an empty response.`);if(e.resultCode!==void 0&&e.resultCode!==0)throw new Error(`${t} failed: ${e.userString??e.resultString??e.resultCode}`)}function re(e){const t=new Set,r=[];for(const n of e){const i=String(n.teamId??n.providerId??n.publicProviderId??n.name??JSON.stringify(n));t.has(i)||(t.add(i),r.push(n))}return r}exports.createAppleRelaySession=l.createAppleRelaySession;exports.deleteAppleRelaySession=l.deleteAppleRelaySession;exports.fetchAppleAccountSession=l.fetchAppleAccountSession;exports.proxyPhoneTwoFactorCode=l.proxyPhoneTwoFactorCode;exports.proxySrpComplete=l.proxySrpComplete;exports.proxySrpInit=l.proxySrpInit;exports.proxyTwoFactorCode=l.proxyTwoFactorCode;exports.startBrowserOwnedAppleIDLogin=l.startBrowserOwnedAppleIDLogin;exports.triggerPhoneTwoFactor=l.triggerPhoneTwoFactor;exports.triggerTrustedDeviceTwoFactor=l.triggerTrustedDeviceTwoFactor;exports.AppleGsaSrpClient=u.AppleGsaSrpClient;exports.assertAppleDeveloperPortalResponseOK=b;exports.createAppleBundleID=j;exports.createAppleCertificate=G;exports.createAppleProfile=Z;exports.deleteAppleBundleID=W;exports.deleteAppleCertificate=M;exports.deleteAppleDevice=X;exports.deleteAppleProfile=te;exports.downloadAppleCertificate=H;exports.downloadAppleProfile=ee;exports.exportAppleCertificateP12=S;exports.generateAppleSigningKeyAndCSR=I;exports.listAppleBundleIDs=_;exports.listAppleCertificates=$;exports.listAppleDevices=Q;exports.listAppleProfiles=Y;exports.listAppleTeams=L;exports.registerAppleDevice=z;exports.requestAppleProvisioning=a;exports.updateAppleBundleID=V;exports.updateAppleDevice=J;

package/dist/app-store-relay/index.d.ts

@@ -0,0 +1,102 @@
+import { AppleDeveloperPortalAppID, AppleDeveloperPortalDevice, AppleDeveloperPortalResponse, AppleDeveloperPortalTeam, AppleProvisioningRequest, AppleRelayResponse } from '../core/device-install/apple';
+export * from '../core/device-install/apple/client';
+export * from '../core/device-install/apple/crypto';
+export * from '../core/device-install/apple/gsa-srp';
+export type { AppleDeveloperPortalAppID, AppleDeveloperPortalDevice, AppleDeveloperPortalResponse, AppleDeveloperPortalTeam, AppleProvisioningRequest, AppleRelayResponse, } from '../core/device-install/apple';
+export { createAppleRelaySession, deleteAppleRelaySession, fetchAppleAccountSession, proxyPhoneTwoFactorCode, proxySrpComplete, proxySrpInit, proxyTwoFactorCode, triggerPhoneTwoFactor, triggerTrustedDeviceTwoFactor, } from '../core/device-install/apple';
+export type AppleRelayClientOptions = {
+    apiUrl: string;
+    token?: string;
+    appleSessionId: string;
+};
+export type AppleTeamScopedOptions = AppleRelayClientOptions & {
+    teamId?: string;
+};
+export type AppleCertificateKind = 'development' | 'distribution';
+export type AppleProfileKind = 'development' | 'adhoc';
+export type RequestAppleProvisioningOptions<T = unknown> = AppleRelayClientOptions & {
+    request: AppleProvisioningRequest;
+    label?: string;
+    validatePortalResponse?: boolean;
+    mapBody?: (body: AppleDeveloperPortalResponse | undefined, response: AppleRelayResponse<T>) => T;
+};
+export type MappedAppleProvisioningOptions<T> = RequestAppleProvisioningOptions<T> & {
+    mapBody: (body: AppleDeveloperPortalResponse | undefined, response: AppleRelayResponse<T>) => T;
+};
+export type ListAppleCertificatesOptions = AppleTeamScopedOptions & {
+    certificateKind?: AppleCertificateKind;
+};
+export type CreateAppleCertificateOptions = AppleTeamScopedOptions & {
+    certificateKind?: AppleCertificateKind;
+    csrPEM: string;
+};
+export type DownloadAppleCertificateOptions = AppleTeamScopedOptions & {
+    certificateKind?: AppleCertificateKind;
+    certificateId: string;
+};
+export type DeleteAppleCertificateOptions = DownloadAppleCertificateOptions;
+export type ListAppleBundleIDsOptions = AppleTeamScopedOptions & {
+    search?: string;
+};
+export type CreateAppleBundleIDOptions = AppleTeamScopedOptions & {
+    bundleId: string;
+    name?: string;
+};
+export type UpdateAppleBundleIDOptions = AppleTeamScopedOptions & {
+    appIdId: string;
+    bundleId?: string;
+    name?: string;
+};
+export type DeleteAppleBundleIDOptions = AppleTeamScopedOptions & {
+    appIdId: string;
+};
+export type ListAppleDevicesOptions = AppleTeamScopedOptions & {
+    deviceUDID?: string;
+};
+export type RegisterAppleDeviceOptions = AppleTeamScopedOptions & {
+    deviceUDID: string;
+    name?: string;
+};
+export type UpdateAppleDeviceOptions = AppleTeamScopedOptions & {
+    deviceId: string;
+    name?: string;
+};
+export type DeleteAppleDeviceOptions = AppleTeamScopedOptions & {
+    deviceId: string;
+};
+export type ListAppleProfilesOptions = AppleTeamScopedOptions & {
+    profileKind?: AppleProfileKind;
+    bundleId?: string;
+};
+export type CreateAppleProfileOptions = AppleTeamScopedOptions & {
+    profileKind?: AppleProfileKind;
+    bundleId: string;
+    appIdId: string;
+    certificateIds: string[];
+    deviceIds: string[];
+    name?: string;
+};
+export type DownloadAppleProfileOptions = AppleTeamScopedOptions & {
+    profileId: string;
+};
+export type DeleteAppleProfileOptions = DownloadAppleProfileOptions;
+export declare function requestAppleProvisioning<T>(options: MappedAppleProvisioningOptions<T>): Promise<T>;
+export declare function requestAppleProvisioning<T = AppleDeveloperPortalResponse>(options: RequestAppleProvisioningOptions<T>): Promise<AppleRelayResponse<T>>;
+export declare function listAppleTeams(options: AppleRelayClientOptions): Promise<AppleDeveloperPortalTeam[]>;
+export declare function listAppleCertificates({ certificateKind, teamId, ...options }: ListAppleCertificatesOptions): Promise<Record<string, unknown>[]>;
+export declare function createAppleCertificate({ certificateKind, teamId, csrPEM, ...options }: CreateAppleCertificateOptions): Promise<Record<string, unknown> | undefined>;
+export declare function downloadAppleCertificate({ certificateKind, certificateId, teamId, ...options }: DownloadAppleCertificateOptions): Promise<AppleRelayResponse>;
+export declare function deleteAppleCertificate({ certificateKind, certificateId, teamId, ...options }: DeleteAppleCertificateOptions): Promise<AppleDeveloperPortalResponse | undefined>;
+export declare function listAppleBundleIDs({ teamId, search, ...options }: ListAppleBundleIDsOptions): Promise<AppleDeveloperPortalAppID[]>;
+export declare function createAppleBundleID({ teamId, bundleId, name, ...options }: CreateAppleBundleIDOptions): Promise<Record<string, unknown> | undefined>;
+export declare function updateAppleBundleID({ teamId, appIdId, bundleId, name, ...options }: UpdateAppleBundleIDOptions): Promise<Record<string, unknown> | undefined>;
+export declare function deleteAppleBundleID({ teamId, appIdId, ...options }: DeleteAppleBundleIDOptions): Promise<AppleDeveloperPortalResponse | undefined>;
+export declare function listAppleDevices({ teamId, deviceUDID, ...options }: ListAppleDevicesOptions): Promise<AppleDeveloperPortalDevice[]>;
+export declare function registerAppleDevice({ teamId, deviceUDID, name, ...options }: RegisterAppleDeviceOptions): Promise<Record<string, unknown> | undefined>;
+export declare function updateAppleDevice({ teamId, deviceId, name, ...options }: UpdateAppleDeviceOptions): Promise<Record<string, unknown> | undefined>;
+export declare function deleteAppleDevice({ teamId, deviceId, ...options }: DeleteAppleDeviceOptions): Promise<AppleDeveloperPortalResponse | undefined>;
+export declare function listAppleProfiles({ profileKind, teamId, bundleId, ...options }: ListAppleProfilesOptions): Promise<Record<string, unknown>[]>;
+export declare function createAppleProfile({ profileKind, teamId, bundleId, appIdId, certificateIds, deviceIds, name, ...options }: CreateAppleProfileOptions): Promise<Record<string, unknown> | undefined>;
+export declare function downloadAppleProfile({ teamId, profileId, ...options }: DownloadAppleProfileOptions): Promise<AppleRelayResponse>;
+export declare function deleteAppleProfile({ teamId, profileId, ...options }: DeleteAppleProfileOptions): Promise<AppleDeveloperPortalResponse | undefined>;
+export declare function assertAppleDeveloperPortalResponseOK(response: AppleDeveloperPortalResponse | undefined, label: string): void;

package/dist/app-store-relay/index.js

@@ -0,0 +1,486 @@
+import { p as D } from "../client-CGdh8yoJ.mjs";
+import { c as he, d as Pe, f as qe, a as Be, b as Se, e as Ce, g as Re, s as Te, t as Ee, h as Ke } from "../client-CGdh8yoJ.mjs";
+import { f as l } from "../index-DFdCvi2_.mjs";
+import { A as xe } from "../index-DFdCvi2_.mjs";
+import { l as w, f as g, a as I, s as h, b as P, d as q, c as B, e as S, g as C, h as R, r as T, i as E, j as K, k as U, m as x, n as k } from "../provisioning-DKbkBO-p.mjs";
+const F = {
+  name: "RSASSA-PKCS1-v1_5",
+  modulusLength: 2048,
+  publicExponent: new Uint8Array([1, 0, 1]),
+  hash: "SHA-256"
+};
+async function re(e) {
+  if (!crypto.subtle)
+    throw new Error("WebCrypto is not available in this browser.");
+  const t = await crypto.subtle.generateKey(F, !0, ["sign", "verify"]), r = new Uint8Array(await crypto.subtle.exportKey("spki", t.publicKey)), n = u(
+    $(0),
+    N(e),
+    r,
+    L(0, new Uint8Array())
+  ), i = new Uint8Array(
+    await crypto.subtle.sign(
+      "RSASSA-PKCS1-v1_5",
+      t.privateKey,
+      J(n)
+    )
+  ), o = u(
+    n,
+    u(v("1.2.840.113549.1.1.11"), H()),
+    _(i)
+  ), s = new Uint8Array(await crypto.subtle.exportKey("pkcs8", t.privateKey));
+  return {
+    privateKey: t.privateKey,
+    privateKeyPKCS8Base64: d(s),
+    publicKeySPKIBase64: d(r),
+    csrPEM: V("CERTIFICATE REQUEST", o),
+    csrBase64: d(o)
+  };
+}
+function ne(e) {
+  if (!e.certificateBase64 && !e.certificatePEM)
+    throw new Error("certificateBase64 or certificatePEM is required.");
+  const t = l.pki.privateKeyFromPem(W("PRIVATE KEY", e.privateKeyPKCS8Base64)), r = e.certificatePEM ? l.pki.certificateFromPem(e.certificatePEM) : l.pki.certificateFromAsn1(
+    l.asn1.fromDer(l.util.createBuffer(z(e.certificateBase64)))
+  ), n = l.pkcs12.toPkcs12Asn1(t, [r], e.password, {
+    algorithm: "3des",
+    friendlyName: e.friendlyName
+  }), i = l.asn1.toDer(n).getBytes();
+  return Q(i);
+}
+function N(e) {
+  const t = [m("2.5.4.3", G(e.commonName))];
+  return e.emailAddress && t.push(m("1.2.840.113549.1.9.1", M(e.emailAddress))), u(...t);
+}
+function m(e, t) {
+  return O(u(v(e), t));
+}
+function u(...e) {
+  return p(48, f(...e));
+}
+function O(...e) {
+  return p(49, f(...e));
+}
+function L(e, t) {
+  return p(160 + e, t);
+}
+function $(e) {
+  return p(2, new Uint8Array([e]));
+}
+function H() {
+  return new Uint8Array([5, 0]);
+}
+function G(e) {
+  return p(12, new TextEncoder().encode(e));
+}
+function M(e) {
+  return p(22, new TextEncoder().encode(e));
+}
+function _(e) {
+  return p(3, f(new Uint8Array([0]), e));
+}
+function v(e) {
+  const t = e.split(".").map((n) => parseInt(n, 10));
+  if (t.length < 2 || t.some((n) => !Number.isFinite(n)))
+    throw new Error(`Invalid OID: ${e}`);
+  const r = [t[0] * 40 + t[1]];
+  for (const n of t.slice(2)) {
+    const i = [n & 127];
+    let o = n >> 7;
+    for (; o > 0; )
+      i.unshift(o & 127 | 128), o >>= 7;
+    r.push(...i);
+  }
+  return p(6, new Uint8Array(r));
+}
+function p(e, t) {
+  return f(new Uint8Array([e]), j(t.byteLength), t);
+}
+function j(e) {
+  if (e < 128)
+    return new Uint8Array([e]);
+  const t = [];
+  let r = e;
+  for (; r > 0; )
+    t.unshift(r & 255), r >>= 8;
+  return new Uint8Array([128 | t.length, ...t]);
+}
+function f(...e) {
+  const t = e.reduce((i, o) => i + o.byteLength, 0), r = new Uint8Array(t);
+  let n = 0;
+  for (const i of e)
+    r.set(i, n), n += i.byteLength;
+  return r;
+}
+function V(e, t) {
+  const n = d(t).match(/.{1,64}/g) ?? [];
+  return `-----BEGIN ${e}-----
+${n.join(`
+`)}
+-----END ${e}-----
+`;
+}
+function W(e, t) {
+  const r = t.match(/.{1,64}/g) ?? [];
+  return `-----BEGIN ${e}-----
+${r.join(`
+`)}
+-----END ${e}-----
+`;
+}
+function d(e) {
+  let t = "";
+  for (const r of e)
+    t += String.fromCharCode(r);
+  return btoa(t);
+}
+function Q(e) {
+  return btoa(e);
+}
+function z(e) {
+  return atob(e);
+}
+function J(e) {
+  const t = new Uint8Array(e.byteLength);
+  return t.set(e), t.buffer;
+}
+async function a({
+  apiUrl: e,
+  token: t,
+  appleSessionId: r,
+  request: n,
+  label: i = "Apple Developer Portal request",
+  validatePortalResponse: o = !0,
+  mapBody: s
+}) {
+  const c = await D(e, r, n, t);
+  return o && X(c.body, i), s ? s(c.body, c) : c;
+}
+async function ie(e) {
+  return a({
+    ...e,
+    request: w(),
+    label: "Apple Developer team list",
+    mapBody: (t) => Y([
+      ...t?.teams ?? [],
+      ...t?.availableProviders ?? [],
+      ...t?.provider ? [t.provider] : []
+    ])
+  });
+}
+async function oe({
+  certificateKind: e = "development",
+  teamId: t = "",
+  ...r
+}) {
+  return a({
+    ...r,
+    request: e === "distribution" ? g(t) : I(t),
+    label: "Apple Developer certificate list",
+    mapBody: (n) => n?.certRequests ?? []
+  });
+}
+async function ae({
+  certificateKind: e = "development",
+  teamId: t = "",
+  csrPEM: r,
+  ...n
+}) {
+  return a({
+    ...n,
+    request: e === "distribution" ? h({ csrPEM: r, teamID: t }) : P({ csrPEM: r, teamID: t }),
+    label: e === "distribution" ? "Apple Distribution certificate creation" : "Apple Development certificate creation",
+    mapBody: (i) => i?.certRequest
+  });
+}
+async function se({
+  certificateKind: e = "development",
+  certificateId: t,
+  teamId: r = "",
+  ...n
+}) {
+  return a({
+    ...n,
+    request: e === "distribution" ? q(t, r) : B(t, r),
+    label: "Apple certificate download",
+    validatePortalResponse: !1,
+    mapBody: (i, o) => o
+  });
+}
+async function ce({
+  certificateKind: e = "development",
+  certificateId: t,
+  teamId: r = "",
+  ...n
+}) {
+  return a({
+    ...n,
+    request: {
+      method: "POST",
+      path: "/account/ios/certificate/revokeCertificate.action",
+      payload: {
+        teamId: r,
+        certificateId: t,
+        type: e === "distribution" ? "WXV89964HE" : "83Q87W3TGH"
+      }
+    },
+    label: "Apple certificate deletion",
+    mapBody: (i) => i
+  });
+}
+async function pe({
+  teamId: e = "",
+  search: t = "",
+  ...r
+}) {
+  const n = t.trim().toLowerCase();
+  return a({
+    ...r,
+    request: S({ bundleID: t, teamID: e }),
+    label: "Apple bundle ID list",
+    // Apple's listAppIds.action returns the full paginated list and does not
+    // honor a server-side search filter, so apply the `search` filter here.
+    mapBody: (i) => {
+      const o = i?.appIds ?? [];
+      return n ? o.filter(
+        (s) => [s.identifier, s.bundleId, s.name].some(
+          (c) => typeof c == "string" && c.toLowerCase().includes(n)
+        )
+      ) : o;
+    }
+  });
+}
+async function le({
+  teamId: e = "",
+  bundleId: t,
+  name: r,
+  ...n
+}) {
+  return a({
+    ...n,
+    request: C({ bundleID: t, teamID: e, name: r }),
+    label: "Apple bundle ID creation",
+    mapBody: (i) => i?.appId
+  });
+}
+async function ue({
+  teamId: e = "",
+  appIdId: t,
+  bundleId: r,
+  name: n,
+  ...i
+}) {
+  return a({
+    ...i,
+    request: {
+      method: "POST",
+      path: "/account/ios/identifiers/updateAppId.action",
+      payload: {
+        teamId: e,
+        appIdId: t,
+        ...r ? { identifier: r } : {},
+        ...n ? { name: n } : {}
+      }
+    },
+    label: "Apple bundle ID update",
+    mapBody: (o) => o?.appId
+  });
+}
+async function de({ teamId: e = "", appIdId: t, ...r }) {
+  return a({
+    ...r,
+    request: {
+      method: "POST",
+      path: "/account/ios/identifiers/deleteAppId.action",
+      payload: { teamId: e, appIdId: t }
+    },
+    label: "Apple bundle ID deletion",
+    mapBody: (n) => n
+  });
+}
+async function fe({
+  teamId: e = "",
+  deviceUDID: t = "",
+  ...r
+}) {
+  const n = A(t);
+  return a({
+    ...r,
+    request: R({ deviceUDID: t, teamID: e }),
+    label: "Apple device list",
+    // Apple's listDevices.action returns the full paginated list and does not
+    // honor a server-side UDID filter, so apply the `deviceUDID` filter here.
+    mapBody: (i) => {
+      const o = i?.devices ?? [];
+      return n ? o.filter((s) => A(s.deviceNumber) === n) : o;
+    }
+  });
+}
+function A(e) {
+  return (e ?? "").replace(/-/g, "").replace(/[^a-fA-F0-9]/g, "").toUpperCase();
+}
+async function ye({
+  teamId: e = "",
+  deviceUDID: t,
+  name: r,
+  ...n
+}) {
+  return a({
+    ...n,
+    request: T({ deviceUDID: t, teamID: e, name: r }),
+    label: "Apple device registration",
+    mapBody: (i) => i?.device
+  });
+}
+async function me({
+  teamId: e = "",
+  deviceId: t,
+  name: r,
+  ...n
+}) {
+  return a({
+    ...n,
+    request: {
+      method: "POST",
+      path: "/account/ios/device/updateDevice.action",
+      payload: { teamId: e, deviceId: t, ...r ? { name: r } : {} }
+    },
+    label: "Apple device update",
+    mapBody: (i) => i?.device
+  });
+}
+async function Ae({ teamId: e = "", deviceId: t, ...r }) {
+  return a({
+    ...r,
+    request: {
+      method: "POST",
+      path: "/account/ios/device/deleteDevice.action",
+      payload: { teamId: e, deviceId: t }
+    },
+    label: "Apple device deletion",
+    mapBody: (n) => n
+  });
+}
+async function ve({
+  profileKind: e = "development",
+  teamId: t = "",
+  bundleId: r = "",
+  ...n
+}) {
+  return a({
+    ...n,
+    request: e === "adhoc" ? E({ bundleID: r, teamID: t }) : K({ bundleID: r, teamID: t }),
+    label: "Apple provisioning profile list",
+    mapBody: (i) => i?.provisioningProfiles ?? []
+  });
+}
+async function be({
+  profileKind: e = "development",
+  teamId: t = "",
+  bundleId: r,
+  appIdId: n,
+  certificateIds: i,
+  deviceIds: o,
+  name: s,
+  ...c
+}) {
+  const [y] = i;
+  if (!y)
+    throw new Error("At least one certificate ID is required to create an Apple provisioning profile.");
+  return a({
+    ...c,
+    request: e === "adhoc" ? U({
+      bundleID: r,
+      teamID: t,
+      appIDID: n,
+      certificateID: y,
+      deviceIDs: o,
+      name: s
+    }) : x({
+      bundleID: r,
+      teamID: t,
+      appIDID: n,
+      certificateID: y,
+      deviceIDs: o,
+      name: s
+    }),
+    label: "Apple provisioning profile creation",
+    mapBody: (b) => b?.provisioningProfile
+  });
+}
+async function De({
+  teamId: e = "",
+  profileId: t,
+  ...r
+}) {
+  return a({
+    ...r,
+    request: k(t, e),
+    label: "Apple provisioning profile download",
+    validatePortalResponse: !1,
+    mapBody: (n, i) => i
+  });
+}
+async function we({ teamId: e = "", profileId: t, ...r }) {
+  return a({
+    ...r,
+    request: {
+      method: "POST",
+      path: "/account/ios/profile/deleteProvisioningProfile.action",
+      payload: { teamId: e, provisioningProfileId: t }
+    },
+    label: "Apple provisioning profile deletion",
+    mapBody: (n) => n
+  });
+}
+function X(e, t) {
+  if (!e)
+    throw new Error(`${t} returned an empty response.`);
+  if (e.resultCode !== void 0 && e.resultCode !== 0)
+    throw new Error(
+      `${t} failed: ${e.userString ?? e.resultString ?? e.resultCode}`
+    );
+}
+function Y(e) {
+  const t = /* @__PURE__ */ new Set(), r = [];
+  for (const n of e) {
+    const i = String(
+      n.teamId ?? n.providerId ?? n.publicProviderId ?? n.name ?? JSON.stringify(n)
+    );
+    t.has(i) || (t.add(i), r.push(n));
+  }
+  return r;
+}
+export {
+  xe as AppleGsaSrpClient,
+  X as assertAppleDeveloperPortalResponseOK,
+  le as createAppleBundleID,
+  ae as createAppleCertificate,
+  be as createAppleProfile,
+  he as createAppleRelaySession,
+  de as deleteAppleBundleID,
+  ce as deleteAppleCertificate,
+  Ae as deleteAppleDevice,
+  we as deleteAppleProfile,
+  Pe as deleteAppleRelaySession,
+  se as downloadAppleCertificate,
+  De as downloadAppleProfile,
+  ne as exportAppleCertificateP12,
+  qe as fetchAppleAccountSession,
+  re as generateAppleSigningKeyAndCSR,
+  pe as listAppleBundleIDs,
+  oe as listAppleCertificates,
+  fe as listAppleDevices,
+  ve as listAppleProfiles,
+  ie as listAppleTeams,
+  Be as proxyPhoneTwoFactorCode,
+  Se as proxySrpComplete,
+  Ce as proxySrpInit,
+  Re as proxyTwoFactorCode,
+  ye as registerAppleDevice,
+  a as requestAppleProvisioning,
+  Te as startBrowserOwnedAppleIDLogin,
+  Ee as triggerPhoneTwoFactor,
+  Ke as triggerTrustedDeviceTwoFactor,
+  ue as updateAppleBundleID,
+  me as updateAppleDevice
+};

package/dist/app-store-relay/react.cjs

@@ -0,0 +1 @@
+"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const t=require("react"),R=require("../client-ASLtHFLh.js");require("../index-CMeQfhYy.js");function m({limbuildApiUrl:n,token:u}){const[g,o]=t.useState("idle"),[f,i]=t.useState(),[w,l]=t.useState(),[h,d]=t.useState(),[v,c]=t.useState(),r=t.useRef(void 0),S=t.useCallback(async()=>{await r.current?.close().catch(()=>{}),r.current=void 0,i(void 0),l(void 0),d(void 0),c(void 0),o("idle")},[]);t.useEffect(()=>()=>{r.current?.close(),r.current=void 0},[]);const b=t.useCallback(async({accountName:s,password:a})=>{o("authenticating"),c(void 0),await r.current?.close().catch(()=>{});try{const e=await R.startBrowserOwnedAppleIDLogin({limbuildApiUrl:n,token:u,accountName:s,password:a});return r.current=e,i(e),l(e.completeResponse),d(e.twoFactorChallengeResponse),o(e.requiresTwoFactor?"two-factor-required":"authenticated"),e}catch(e){i(void 0),r.current=void 0,c(p(e)),o("error");return}},[n,u]),C=t.useCallback(async s=>{const a=r.current;if(!a)throw new Error("Start Apple ID login before submitting a two-factor code.");o("authenticating"),c(void 0);try{const e=await a.finishTwoFactor(s);return o("authenticated"),e}catch(e){c(p(e)),o("error");return}},[]),y=t.useCallback(async()=>{const s=r.current;if(!s)throw new Error("Start Apple ID login before finalizing the Apple session.");return s.finalize()},[]);return{status:g,session:f,completeResponse:w,twoFactorChallengeResponse:h,error:v,startLogin:b,submitTwoFactorCode:C,finalize:y,close:S}}function p(n){return n instanceof Error?n.message:String(n)}exports.useAppleIDLogin=m;

package/dist/app-store-relay/react.d.ts

@@ -0,0 +1,15 @@
+import { AppleIDLoginInput, AppleIDLoginResult, AppleRelayResponse } from './index';
+export type UseAppleIDLoginOptions = Pick<AppleIDLoginInput, 'limbuildApiUrl' | 'token'>;
+export type AppleIDLoginStatus = 'idle' | 'authenticating' | 'two-factor-required' | 'authenticated' | 'error';
+export type UseAppleIDLoginResult = {
+    status: AppleIDLoginStatus;
+    session?: AppleIDLoginResult;
+    completeResponse?: AppleRelayResponse;
+    twoFactorChallengeResponse?: AppleRelayResponse;
+    error?: string;
+    startLogin: (input: Pick<AppleIDLoginInput, 'accountName' | 'password'>) => Promise<AppleIDLoginResult | undefined>;
+    submitTwoFactorCode: (code: string) => Promise<AppleRelayResponse | undefined>;
+    finalize: () => Promise<AppleRelayResponse | undefined>;
+    close: () => Promise<void>;
+};
+export declare function useAppleIDLogin({ limbuildApiUrl, token }: UseAppleIDLoginOptions): UseAppleIDLoginResult;