@limrun/ui 0.9.0-rc.9 → 0.13.3

package/src/core/device-install/apple/client.ts

@@ -29,9 +29,7 @@ export type AppleIDLoginResult = {
   close: () => Promise<void>;
 };
 
-type TwoFactorMethod =
-  | { type: 'trustedDevice' }
-  | { type: 'phone'; phoneNumberId: number; mode: string };
+type TwoFactorMethod = { type: 'trustedDevice' } | { type: 'phone'; phoneNumberId: number; mode: string };
 
 export async function startBrowserOwnedAppleIDLogin({
   limbuildApiUrl,
@@ -44,7 +42,9 @@ export async function startBrowserOwnedAppleIDLogin({
     const srp = new AppleGsaSrpClient(accountName);
     const initResponse = await proxySrpInit(limbuildApiUrl, appleSessionId, await srp.init(), token);
     if (initResponse.status < 200 || initResponse.status >= 300) {
-      throw new Error(`Apple SRP init failed: HTTP ${initResponse.status} ${initResponse.rawBody ?? ''}`.trim());
+      throw new Error(
+        `Apple SRP init failed: HTTP ${initResponse.status} ${initResponse.rawBody ?? ''}`.trim(),
+      );
     }
     if (!initResponse.body) {
       throw new Error('Apple SRP init response did not include a body.');
@@ -66,17 +66,20 @@ export async function startBrowserOwnedAppleIDLogin({
     if (requiresTwoFactor) {
       twoFactorChallengeResponse = await triggerTrustedDeviceTwoFactor(limbuildApiUrl, appleSessionId, token);
       const phone = trustedPhoneNumberFromChallenge(twoFactorChallengeResponse.body);
-      if (phone) {
+      // Only route codes through the phone/SMS endpoint when Apple actually
+      // falls back to phone verification (HTTP 412). The trusted-device
+      // challenge body frequently includes trusted-phone metadata even for a
+      // normal device push; routing those codes to the phone endpoint breaks
+      // trusted-device login.
+      if (twoFactorChallengeResponse.status === 412) {
+        if (!phone) {
+          throw new Error('Apple requested phone verification but did not include a trusted phone number.');
+        }
         twoFactorMethod = {
           type: 'phone',
           phoneNumberId: phone.id,
           mode: phone.pushMode ?? 'sms',
         };
-      }
-      if (twoFactorChallengeResponse.status === 412) {
-        if (!phone) {
-          throw new Error('Apple requested phone verification but did not include a trusted phone number.');
-        }
         twoFactorChallengeResponse = await triggerPhoneTwoFactor(
           limbuildApiUrl,
           appleSessionId,
@@ -93,7 +96,9 @@ export async function startBrowserOwnedAppleIDLogin({
         );
       }
     } else if (completeResponse.status < 200 || completeResponse.status >= 300) {
-      throw new Error(`Apple SRP complete failed: HTTP ${completeResponse.status} ${completeResponse.rawBody ?? ''}`.trim());
+      throw new Error(
+        `Apple SRP complete failed: HTTP ${completeResponse.status} ${completeResponse.rawBody ?? ''}`.trim(),
+      );
     }
     return {
       appleSessionId,
@@ -102,18 +107,20 @@ export async function startBrowserOwnedAppleIDLogin({
       requiresTwoFactor,
       finishTwoFactor: async (code) => {
         const response =
-          twoFactorMethod.type === 'phone'
-            ? await proxyPhoneTwoFactorCode(
-                limbuildApiUrl,
-                appleSessionId,
-                twoFactorMethod.phoneNumberId,
-                code,
-                twoFactorMethod.mode,
-                token,
-              )
-            : await proxyTwoFactorCode(limbuildApiUrl, appleSessionId, code, token);
+          twoFactorMethod.type === 'phone' ?
+            await proxyPhoneTwoFactorCode(
+              limbuildApiUrl,
+              appleSessionId,
+              twoFactorMethod.phoneNumberId,
+              code,
+              twoFactorMethod.mode,
+              token,
+            )
+          : await proxyTwoFactorCode(limbuildApiUrl, appleSessionId, code, token);
         if (response.status < 200 || response.status >= 300) {
-          throw new Error(`Apple two-factor code failed: HTTP ${response.status} ${response.rawBody ?? ''}`.trim());
+          throw new Error(
+            `Apple two-factor code failed: HTTP ${response.status} ${response.rawBody ?? ''}`.trim(),
+          );
         }
         return response;
       },

package/src/core/device-install/apple/crypto.ts

@@ -41,7 +41,11 @@ export async function generateAppleSigningKeyAndCSR(input: AppleCSRInput): Promi
     derContext(0, new Uint8Array()),
   );
   const signature = new Uint8Array(
-    await crypto.subtle.sign('RSASSA-PKCS1-v1_5', keyPair.privateKey, toArrayBuffer(certificationRequestInfo)),
+    await crypto.subtle.sign(
+      'RSASSA-PKCS1-v1_5',
+      keyPair.privateKey,
+      toArrayBuffer(certificationRequestInfo),
+    ),
   );
   const csrDER = derSequence(
     certificationRequestInfo,
@@ -62,11 +66,10 @@ export function exportAppleCertificateP12(input: ExportP12Input) {
   if (!input.certificateBase64 && !input.certificatePEM) {
     throw new Error('certificateBase64 or certificatePEM is required.');
   }
-  const privateKey = forge.pki.privateKeyFromPem(
-    pemFromBase64('PRIVATE KEY', input.privateKeyPKCS8Base64),
-  );
-  const certificate = input.certificatePEM
-    ? forge.pki.certificateFromPem(input.certificatePEM)
+  const privateKey = forge.pki.privateKeyFromPem(pemFromBase64('PRIVATE KEY', input.privateKeyPKCS8Base64));
+  const certificate =
+    input.certificatePEM ?
+      forge.pki.certificateFromPem(input.certificatePEM)
     : forge.pki.certificateFromAsn1(
         forge.asn1.fromDer(forge.util.createBuffer(base64ToBinary(input.certificateBase64!))),
       );

package/src/core/device-install/apple/gsa-srp.ts

@@ -79,13 +79,9 @@ async function deriveApplePassword(
   if (protocol === 's2k_fo') {
     passHash = stringToBytes(util.toHex(passHash));
   }
-  const imported = await crypto.subtle.importKey(
-    'raw',
-    toArrayBuffer(passHash),
-    { name: 'PBKDF2' },
-    false,
-    ['deriveBits'],
-  );
+  const imported = await crypto.subtle.importKey('raw', toArrayBuffer(passHash), { name: 'PBKDF2' }, false, [
+    'deriveBits',
+  ]);
   const derived = await crypto.subtle.deriveBits(
     {
       name: 'PBKDF2',

package/src/core/device-install/apple/provisioning.test.ts

@@ -0,0 +1,84 @@
+// @vitest-environment node
+
+import { describe, expect, test } from 'vitest';
+import {
+  createAdHocProfileRequest,
+  createDevelopmentProfileRequest,
+  downloadDistributionCertificateRequest,
+  findAdHocProfilesRequest,
+  findDevelopmentCertificatesRequest,
+  findDistributionCertificatesRequest,
+  submitDistributionCSRRequest,
+} from './provisioning';
+
+describe('Apple provisioning request helpers', () => {
+  test('keeps development certificate requests on Apple Development types', () => {
+    expect(findDevelopmentCertificatesRequest('TEAM').payload).toMatchObject({
+      teamId: 'TEAM',
+      types: '83Q87W3TGH,5QPB9NHCEI',
+    });
+  });
+
+  test('uses distribution certificate requests for Ad Hoc signing', () => {
+    expect(findDistributionCertificatesRequest('TEAM').payload).toMatchObject({
+      teamId: 'TEAM',
+      types: 'WXV89964HE,R58UK2EWSO',
+    });
+    expect(submitDistributionCSRRequest({ csrPEM: 'csr', teamID: 'TEAM' }).payload).toMatchObject({
+      teamId: 'TEAM',
+      type: 'WXV89964HE',
+      csrContent: 'csr',
+    });
+    expect(downloadDistributionCertificateRequest('CERT', 'TEAM').payload).toMatchObject({
+      teamId: 'TEAM',
+      certificateId: 'CERT',
+      type: 'WXV89964HE',
+    });
+  });
+
+  test('builds separate development and Ad Hoc profile payloads', () => {
+    expect(
+      createDevelopmentProfileRequest({
+        bundleID: 'com.example.app',
+        teamID: 'TEAM',
+        appIDID: 'APP',
+        certificateID: 'CERT',
+        deviceIDs: ['DEVICE'],
+      }).payload,
+    ).toMatchObject({
+      teamId: 'TEAM',
+      provisioningProfileName: 'Limrun com.example.app',
+      certificateIds: ['CERT'],
+      appIdId: 'APP',
+      deviceIds: ['DEVICE'],
+      distributionType: 'limited',
+      subPlatform: 'ios',
+    });
+
+    expect(
+      createAdHocProfileRequest({
+        bundleID: 'com.example.app',
+        teamID: 'TEAM',
+        appIDID: 'APP',
+        certificateID: 'CERT',
+        deviceIDs: ['DEVICE'],
+      }).payload,
+    ).toMatchObject({
+      teamId: 'TEAM',
+      provisioningProfileName: 'Limrun Ad Hoc com.example.app',
+      certificateIds: ['CERT'],
+      appIdId: 'APP',
+      deviceIds: ['DEVICE'],
+      distributionType: 'adhoc',
+      subPlatform: 'ios',
+    });
+  });
+
+  test('filters Ad Hoc profile list requests by Ad Hoc distribution type', () => {
+    expect(findAdHocProfilesRequest({ bundleID: 'com.example.app', teamID: 'TEAM' }).payload).toMatchObject({
+      teamId: 'TEAM',
+      search: 'com.example.app',
+      distributionType: 'adhoc',
+    });
+  });
+});

package/src/core/device-install/apple/provisioning.ts

@@ -1,4 +1,4 @@
-import type { ProvisioningProfileInfo, StoredSigningAssets } from '../types';
+import type { DeviceInstallSigningMode, ProvisioningProfileInfo, StoredSigningAssets } from '../types';
 import {
   getSigningAssets,
   normalizeBundleID,
@@ -64,15 +64,17 @@ export type AppleSigningAssetCacheInput = {
   bundleID: string;
   deviceUDID?: string;
   teamID?: string;
+  signingMode?: DeviceInstallSigningMode;
 };
 
 export type PutAppleGeneratedSigningAssetsInput = {
   bundleID: string;
   deviceUDID?: string;
   teamID?: string;
+  signingMode?: DeviceInstallSigningMode;
   certificateID?: string;
   certificateP12Base64: string;
-  certificatePassword: string;
+  certificatePassword?: string;
   provisioningProfileBase64: string;
   profile: ProvisioningProfileInfo;
 };
@@ -85,12 +87,18 @@ export function listTeamsRequest(): AppleProvisioningRequest {
   };
 }
 
-export function findBundleIDRequest({ bundleID, teamID = '' }: Pick<AppleProvisioningContext, 'bundleID' | 'teamID'>) {
+export function findBundleIDRequest({
+  bundleID,
+  teamID = '',
+}: Pick<AppleProvisioningContext, 'bundleID' | 'teamID'>) {
   void bundleID;
   return pagedRequest('/account/ios/identifiers/listAppIds.action', teamID, { sort: 'name=asc' });
 }
 
-export function findDeviceRequest({ deviceUDID, teamID = '' }: Pick<AppleProvisioningContext, 'deviceUDID' | 'teamID'>) {
+export function findDeviceRequest({
+  deviceUDID,
+  teamID = '',
+}: Pick<AppleProvisioningContext, 'deviceUDID' | 'teamID'>) {
   void deviceUDID;
   return pagedRequest('/account/ios/device/listDevices.action', teamID, {
     sort: 'name=asc',
@@ -105,6 +113,13 @@ export function findDevelopmentCertificatesRequest(teamID = '') {
   });
 }
 
+export function findDistributionCertificatesRequest(teamID = '') {
+  return pagedRequest('/account/ios/certificate/listCertRequests.action', teamID, {
+    sort: 'name=asc',
+    types: 'WXV89964HE,R58UK2EWSO',
+  });
+}
+
 export function findDevelopmentProfilesRequest({
   bundleID,
   teamID = '',
@@ -115,6 +130,17 @@ export function findDevelopmentProfilesRequest({
   });
 }
 
+export function findAdHocProfilesRequest({
+  bundleID,
+  teamID = '',
+}: Pick<AppleProvisioningContext, 'bundleID' | 'teamID'>) {
+  return pagedRequest('/account/ios/profile/listProvisioningProfiles.action', teamID, {
+    search: bundleID,
+    sort: 'name=asc',
+    distributionType: 'adhoc',
+  });
+}
+
 export function registerDeviceRequest({
   deviceUDID,
   teamID = '',
@@ -150,13 +176,7 @@ export function createBundleIDRequest({
   } satisfies AppleProvisioningRequest;
 }
 
-export function submitDevelopmentCSRRequest({
-  csrPEM,
-  teamID = '',
-}: {
-  csrPEM: string;
-  teamID?: string;
-}) {
+export function submitDevelopmentCSRRequest({ csrPEM, teamID = '' }: { csrPEM: string; teamID?: string }) {
   return {
     method: 'POST',
     path: '/account/ios/certificate/submitCertificateRequest.action',
@@ -168,6 +188,18 @@ export function submitDevelopmentCSRRequest({
   } satisfies AppleProvisioningRequest;
 }
 
+export function submitDistributionCSRRequest({ csrPEM, teamID = '' }: { csrPEM: string; teamID?: string }) {
+  return {
+    method: 'POST',
+    path: '/account/ios/certificate/submitCertificateRequest.action',
+    payload: {
+      teamId: teamID,
+      type: 'WXV89964HE',
+      csrContent: csrPEM,
+    },
+  } satisfies AppleProvisioningRequest;
+}
+
 export function downloadCertificateRequest(certificateID: string, teamID = '') {
   return {
     method: 'GET',
@@ -180,6 +212,18 @@ export function downloadCertificateRequest(certificateID: string, teamID = '') {
   } satisfies AppleProvisioningRequest;
 }
 
+export function downloadDistributionCertificateRequest(certificateID: string, teamID = '') {
+  return {
+    method: 'GET',
+    path: '/account/ios/certificate/downloadCertificateContent.action',
+    payload: {
+      teamId: teamID,
+      certificateId: certificateID,
+      type: 'WXV89964HE',
+    },
+  } satisfies AppleProvisioningRequest;
+}
+
 export function createDevelopmentProfileRequest({
   bundleID,
   teamID = '',
@@ -208,6 +252,34 @@ export function createDevelopmentProfileRequest({
   } satisfies AppleProvisioningRequest;
 }
 
+export function createAdHocProfileRequest({
+  bundleID,
+  teamID = '',
+  appIDID,
+  certificateID,
+  deviceIDs,
+  name,
+}: Pick<AppleProvisioningContext, 'bundleID' | 'teamID'> & {
+  appIDID: string;
+  certificateID: string;
+  deviceIDs: string[];
+  name?: string;
+}) {
+  return {
+    method: 'POST',
+    path: '/account/ios/profile/createProvisioningProfile.action',
+    payload: {
+      teamId: teamID,
+      provisioningProfileName: name ?? `Limrun Ad Hoc ${bundleID}`,
+      certificateIds: [certificateID],
+      appIdId: appIDID,
+      deviceIds: deviceIDs,
+      distributionType: 'adhoc',
+      subPlatform: 'ios',
+    },
+  } satisfies AppleProvisioningRequest;
+}
+
 export function downloadProfileRequest(profileID: string, teamID = '') {
   return {
     method: 'GET',
@@ -223,9 +295,10 @@ export async function getReusableAppleSigningAssets({
   bundleID,
   deviceUDID,
   teamID,
+  signingMode,
 }: AppleSigningAssetCacheInput) {
-  const stored = await getSigningAssets({ bundleID, deviceUDID });
-  if (!stored || !storedSigningAssetsReusable(stored, { bundleID, deviceUDID, teamID })) {
+  const stored = await getSigningAssets({ bundleID, deviceUDID, signingMode });
+  if (!stored || !storedSigningAssetsReusable(stored, { bundleID, deviceUDID, teamID, signingMode })) {
     return undefined;
   }
   return stored;
@@ -234,15 +307,24 @@ export async function getReusableAppleSigningAssets({
 export async function putAppleGeneratedSigningAssets(input: PutAppleGeneratedSigningAssetsInput) {
   return putSigningAssets({
     ...input,
-    certificateFileName: input.certificateID ? `${input.certificateID}.p12` : 'apple-development.p12',
-    profileFileName: input.profile.uuid ? `${input.profile.uuid}.mobileprovision` : 'apple-development.mobileprovision',
+    certificateFileName:
+      input.certificateID ? `${input.certificateID}.p12` : `apple-${input.signingMode ?? 'development'}.p12`,
+    certificatePassword: input.certificatePassword || undefined,
+    signingMode: input.signingMode,
+    profileFileName:
+      input.profile.uuid ?
+        `${input.profile.uuid}.mobileprovision`
+      : `${input.signingMode ?? 'development'}.mobileprovision`,
   });
 }
 
 export function storedSigningAssetsReusable(
   stored: StoredSigningAssets,
-  { bundleID, deviceUDID, teamID }: AppleSigningAssetCacheInput,
+  { bundleID, deviceUDID, teamID, signingMode = 'development' }: AppleSigningAssetCacheInput,
 ) {
+  if ((stored.signingMode ?? 'development') !== signingMode) {
+    return false;
+  }
   if (!profileMatchesBundleID(stored.profile, bundleID)) {
     return false;
   }

package/src/core/device-install/apple/relay.ts

@@ -26,7 +26,11 @@ export async function createAppleRelaySession(limbuildApiUrl: string, token?: st
   return (await response.json()) as { appleSessionId: string };
 }
 
-export async function deleteAppleRelaySession(limbuildApiUrl: string, appleSessionId: string, token?: string) {
+export async function deleteAppleRelaySession(
+  limbuildApiUrl: string,
+  appleSessionId: string,
+  token?: string,
+) {
   const response = await fetch(limbuildURL(limbuildApiUrl, '/apple/auth/session/delete', token), {
     method: 'POST',
     headers: jsonHeaders(token),

package/src/core/device-install/operations/limbuild-client.ts

@@ -12,7 +12,7 @@ export type StartSignedDeviceBuildOptions = {
   limbuildApiUrl: string;
   token?: string;
   certificateP12Base64: string;
-  certificatePassword: string;
+  certificatePassword?: string;
   provisioningProfileBase64: string;
 };
 
@@ -25,6 +25,21 @@ export type BuildLogEventsOptions = {
   onError?: (error: Error) => void;
 };
 
+export type IOSOTAInstall = {
+  installUrl: string;
+  landingUrl: string;
+  manifestUrl: string;
+  ipaUrl: string;
+  bundleId: string;
+  displayName: string;
+};
+
+export type GetIOSOTAInstallOptions = {
+  limbuildApiUrl: string;
+  execId: string;
+  token?: string;
+};
+
 export async function fetchLimbuildInfo(limbuildApiUrl: string, token?: string) {
   const url = new URL(`${limbuildApiUrl}/info`);
   if (token) {
@@ -59,10 +74,10 @@ export async function startSignedDeviceBuild({
     },
     body: JSON.stringify({
       command: 'xcodebuild',
-      xcodebuild: { sdk: 'iphoneos', configuration: 'Debug' },
+      xcodebuild: { sdk: 'iphoneos' },
       signing: {
         certificateP12Base64,
-        certificatePassword,
+        ...(certificatePassword ? { certificatePassword } : {}),
         provisioningProfileBase64,
       },
     }),
@@ -74,6 +89,21 @@ export async function startSignedDeviceBuild({
   return (await response.json()) as { execId?: string };
 }
 
+export async function getIOSOTAInstall({ limbuildApiUrl, execId, token }: GetIOSOTAInstallOptions) {
+  const url = new URL(`${limbuildApiUrl}/exec/${encodeURIComponent(execId)}/ios/ota`);
+  if (token) {
+    url.searchParams.set('token', token);
+  }
+  const response = await fetch(url.toString(), {
+    headers: token ? { Authorization: `Bearer ${token}` } : undefined,
+  });
+  if (!response.ok) {
+    const body = await response.text();
+    throw new Error(`OTA install metadata failed: HTTP ${response.status} ${body}`);
+  }
+  return (await response.json()) as IOSOTAInstall;
+}
+
 export function watchBuildLogEvents({
   limbuildApiUrl,
   execId,
@@ -93,11 +123,18 @@ export function watchBuildLogEvents({
   events.addEventListener('stderr', (event) => onLine({ type: 'stderr', data: event.data }));
   events.addEventListener('exitCode', (event) => {
     const code = parseInt(event.data, 10);
-    onStatus(code === 0 ? 'succeeded' : code < 0 ? 'cancelled' : 'failed');
+    onStatus(
+      code === 0 ? 'succeeded'
+      : code < 0 ? 'cancelled'
+      : 'failed',
+    );
     events.close();
   });
   events.onerror = () => {
     events.close();
+    // The stream closed without a terminal exitCode event. Mark the build as
+    // failed so consumers don't stay stuck on "running" and can retry.
+    onStatus('failed');
     onError?.(new Error('Build log stream closed before completion.'));
   };
   return () => events.close();

package/src/core/device-install/operations/operations.ts

@@ -155,7 +155,9 @@ async function claimBestUsbmuxCandidate(target: DeviceRelayTarget, log: DeviceIn
         lastError = error;
         log(
           'USB interface claim failed',
-          `configuration ${candidate.configurationValue}, interface ${candidate.interfaceNumber}: ${errorMessage(error)}`,
+          `configuration ${candidate.configurationValue}, interface ${
+            candidate.interfaceNumber
+          }: ${errorMessage(error)}`,
         );
         await resetUSBDevice(target);
         await sleep(250);

package/src/core/device-install/operations/relay-client.ts

@@ -40,10 +40,17 @@ export class RelayClient {
     socket.onclose = () => {
       this.closed = true;
       this.log('Relay socket closed');
-      if (this.pairRecordWaiter) {
-        this.pairRecordWaiter.reject(new Error('Relay socket closed'));
-        this.pairRecordWaiter = undefined;
-      }
+      // The server often sends PairRecordReady and then closes immediately. In
+      // Chromium, onclose can be delivered before the queued onmessage handler
+      // has finished processing that final frame. Drain the frame queue before
+      // rejecting the waiter so a successful pair is not reported as
+      // "Relay socket closed".
+      void this.frameQueue.finally(() => {
+        if (this.pairRecordWaiter) {
+          this.pairRecordWaiter.reject(new Error('Relay socket closed'));
+          this.pairRecordWaiter = undefined;
+        }
+      });
     };
     await new Promise<void>((resolve, reject) => {
       socket.onopen = () => resolve();
@@ -92,9 +99,11 @@ export class RelayClient {
   }
 
   private enqueueFrame(data: Uint8Array) {
-    this.frameQueue = this.frameQueue.then(() => this.handleFrame(decodeFrame(data))).catch((error) => {
-      this.log('Relay frame handling failed', error instanceof Error ? error.message : String(error));
-    });
+    this.frameQueue = this.frameQueue
+      .then(() => this.handleFrame(decodeFrame(data)))
+      .catch((error) => {
+        this.log('Relay frame handling failed', error instanceof Error ? error.message : String(error));
+      });
   }
 
   private async handleFrame(frame: ReturnType<typeof decodeFrame>) {
@@ -163,7 +172,10 @@ export class RelayClient {
       this.log(`Opened device stream ${streamId} to port ${port}`);
       void this.pumpDeviceToServer(streamId, stream);
     } catch (error) {
-      this.log(`Open device stream ${streamId} failed`, error instanceof Error ? error.message : String(error));
+      this.log(
+        `Open device stream ${streamId} failed`,
+        error instanceof Error ? error.message : String(error),
+      );
       await this.send({
         type: RelayMessageType.OpenResult,
         requestId,
@@ -230,26 +242,44 @@ function formatInstallProgress(message: string) {
   if (!message.startsWith(prefix)) {
     return message;
   }
-  const xml = message.slice(prefix.length);
-  const doc = new DOMParser().parseFromString(xml, 'application/xml');
-  const dict = doc.querySelector('plist > dict');
-  if (!dict) {
-    return message;
+  const plist = message.slice(prefix.length);
+  // The relay message is untrusted device input. Parsing it with DOMParser is
+  // both an XSS DOM sink and an XML entity-expansion (billion-laughs) vector,
+  // so extract only the fields we render via plain string scanning instead of
+  // building a DOM.
+  // Surface the real failure reason (e.g. ApplicationVerificationFailed) rather
+  // than collapsing it to an opaque numeric code downstream.
+  const error = readPlistValue(plist, 'Error');
+  if (error) {
+    const description = readPlistValue(plist, 'ErrorDescription');
+    return `Install error: ${error}${description ? ` — ${description}` : ''}`;
   }
-  const values = readPlistDict(dict);
-  const status = values.Status ?? 'Unknown';
-  const percent = values.PercentComplete ? `${values.PercentComplete}% ` : '';
-  return `Install progress: ${percent}${status}`;
+  const status = readPlistValue(plist, 'Status') ?? 'Unknown';
+  const percent = readPlistValue(plist, 'PercentComplete');
+  return `Install progress: ${percent ? `${percent}% ` : ''}${status}`;
 }
 
-function readPlistDict(dict: Element) {
-  const result: Record<string, string> = {};
-  const children = Array.from(dict.children);
-  for (let index = 0; index < children.length; index += 2) {
-    const key = children[index];
-    const value = children[index + 1];
-    if (!key || key.tagName !== 'key' || !value) continue;
-    result[key.textContent ?? ''] = value.textContent ?? '';
-  }
-  return result;
+// Returns the <string>/<integer>/<real> value immediately following
+// <key>NAME</key> in an Apple plist fragment, without an XML/DOM parser.
+function readPlistValue(plist: string, key: string): string | undefined {
+  const pattern = new RegExp(
+    `<key>\\s*${escapeRegExp(
+      key,
+    )}\\s*</key>\\s*<(?:string|integer|real)>([\\s\\S]*?)</(?:string|integer|real)>`,
+  );
+  const match = pattern.exec(plist);
+  return match ? decodeBasicXmlEntities(match[1].trim()) : undefined;
+}
+
+function escapeRegExp(value: string) {
+  return value.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+}
+
+function decodeBasicXmlEntities(value: string) {
+  return value
+    .replace(/&lt;/g, '<')
+    .replace(/&gt;/g, '>')
+    .replace(/&quot;/g, '"')
+    .replace(/&apos;/g, "'")
+    .replace(/&amp;/g, '&');
 }

package/src/core/device-install/operations/usbmux.ts

@@ -150,9 +150,9 @@ async function sendMux(session: UsbmuxSession, protocol: number, payload: Uint8A
   session.writeChain = session.writeChain.then(async () => {
     if (session.closed) return;
     const packet =
-      session.muxVersion >= 2
-        ? buildV2Packet(protocol, payload, session.txSeq++, session.rxSeq)
-        : buildV1Packet(protocol, payload);
+      session.muxVersion >= 2 ?
+        buildV2Packet(protocol, payload, session.txSeq++, session.rxSeq)
+      : buildV1Packet(protocol, payload);
     await transferOutWithZlp(session.device, session.outEndpoint, packet);
   });
   return session.writeChain;