@mcesystems/apple-kit 1.0.51 → 1.0.53

package/dist/index.js

@@ -15027,19 +15027,19 @@ var require_printer = __commonJS({
       },
       // Document
       Document: function Document(node) {
-        return join10(node.definitions, "\n\n") + "\n";
+        return join9(node.definitions, "\n\n") + "\n";
       },
       OperationDefinition: function OperationDefinition(node) {
         var op = node.operation;
         var name = node.name;
-        var varDefs = wrap("(", join10(node.variableDefinitions, ", "), ")");
-        var directives = join10(node.directives, " ");
+        var varDefs = wrap("(", join9(node.variableDefinitions, ", "), ")");
+        var directives = join9(node.directives, " ");
         var selectionSet = node.selectionSet;
-        return !name && !directives && !varDefs && op === "query" ? selectionSet : join10([op, join10([name, varDefs]), directives, selectionSet], " ");
+        return !name && !directives && !varDefs && op === "query" ? selectionSet : join9([op, join9([name, varDefs]), directives, selectionSet], " ");
       },
       VariableDefinition: function VariableDefinition(_ref) {
         var variable = _ref.variable, type = _ref.type, defaultValue = _ref.defaultValue, directives = _ref.directives;
-        return variable + ": " + type + wrap(" = ", defaultValue) + wrap(" ", join10(directives, " "));
+        return variable + ": " + type + wrap(" = ", defaultValue) + wrap(" ", join9(directives, " "));
       },
       SelectionSet: function SelectionSet(_ref2) {
         var selections = _ref2.selections;
@@ -15047,7 +15047,7 @@ var require_printer = __commonJS({
       },
       Field: function Field(_ref3) {
         var alias = _ref3.alias, name = _ref3.name, args = _ref3.arguments, directives = _ref3.directives, selectionSet = _ref3.selectionSet;
-        return join10([wrap("", alias, ": ") + name + wrap("(", join10(args, ", "), ")"), join10(directives, " "), selectionSet], " ");
+        return join9([wrap("", alias, ": ") + name + wrap("(", join9(args, ", "), ")"), join9(directives, " "), selectionSet], " ");
       },
       Argument: function Argument(_ref4) {
         var name = _ref4.name, value = _ref4.value;
@@ -15056,18 +15056,18 @@ var require_printer = __commonJS({
       // Fragments
       FragmentSpread: function FragmentSpread(_ref5) {
         var name = _ref5.name, directives = _ref5.directives;
-        return "..." + name + wrap(" ", join10(directives, " "));
+        return "..." + name + wrap(" ", join9(directives, " "));
       },
       InlineFragment: function InlineFragment(_ref6) {
         var typeCondition = _ref6.typeCondition, directives = _ref6.directives, selectionSet = _ref6.selectionSet;
-        return join10(["...", wrap("on ", typeCondition), join10(directives, " "), selectionSet], " ");
+        return join9(["...", wrap("on ", typeCondition), join9(directives, " "), selectionSet], " ");
       },
       FragmentDefinition: function FragmentDefinition(_ref7) {
         var name = _ref7.name, typeCondition = _ref7.typeCondition, variableDefinitions = _ref7.variableDefinitions, directives = _ref7.directives, selectionSet = _ref7.selectionSet;
         return (
           // Note: fragment variable definitions are experimental and may be changed
           // or removed in the future.
-          "fragment ".concat(name).concat(wrap("(", join10(variableDefinitions, ", "), ")"), " ") + "on ".concat(typeCondition, " ").concat(wrap("", join10(directives, " "), " ")) + selectionSet
+          "fragment ".concat(name).concat(wrap("(", join9(variableDefinitions, ", "), ")"), " ") + "on ".concat(typeCondition, " ").concat(wrap("", join9(directives, " "), " ")) + selectionSet
         );
       },
       // Value
@@ -15096,11 +15096,11 @@ var require_printer = __commonJS({
       },
       ListValue: function ListValue(_ref13) {
         var values = _ref13.values;
-        return "[" + join10(values, ", ") + "]";
+        return "[" + join9(values, ", ") + "]";
       },
       ObjectValue: function ObjectValue(_ref14) {
         var fields = _ref14.fields;
-        return "{" + join10(fields, ", ") + "}";
+        return "{" + join9(fields, ", ") + "}";
       },
       ObjectField: function ObjectField(_ref15) {
         var name = _ref15.name, value = _ref15.value;
@@ -15109,7 +15109,7 @@ var require_printer = __commonJS({
       // Directive
       Directive: function Directive(_ref16) {
         var name = _ref16.name, args = _ref16.arguments;
-        return "@" + name + wrap("(", join10(args, ", "), ")");
+        return "@" + name + wrap("(", join9(args, ", "), ")");
       },
       // Type
       NamedType: function NamedType(_ref17) {
@@ -15127,7 +15127,7 @@ var require_printer = __commonJS({
       // Type System Definitions
       SchemaDefinition: function SchemaDefinition(_ref20) {
         var directives = _ref20.directives, operationTypes = _ref20.operationTypes;
-        return join10(["schema", join10(directives, " "), block(operationTypes)], " ");
+        return join9(["schema", join9(directives, " "), block(operationTypes)], " ");
       },
       OperationTypeDefinition: function OperationTypeDefinition(_ref21) {
         var operation = _ref21.operation, type = _ref21.type;
@@ -15135,85 +15135,85 @@ var require_printer = __commonJS({
       },
       ScalarTypeDefinition: addDescription(function(_ref22) {
         var name = _ref22.name, directives = _ref22.directives;
-        return join10(["scalar", name, join10(directives, " ")], " ");
+        return join9(["scalar", name, join9(directives, " ")], " ");
       }),
       ObjectTypeDefinition: addDescription(function(_ref23) {
         var name = _ref23.name, interfaces = _ref23.interfaces, directives = _ref23.directives, fields = _ref23.fields;
-        return join10(["type", name, wrap("implements ", join10(interfaces, " & ")), join10(directives, " "), block(fields)], " ");
+        return join9(["type", name, wrap("implements ", join9(interfaces, " & ")), join9(directives, " "), block(fields)], " ");
       }),
       FieldDefinition: addDescription(function(_ref24) {
         var name = _ref24.name, args = _ref24.arguments, type = _ref24.type, directives = _ref24.directives;
-        return name + (hasMultilineItems(args) ? wrap("(\n", indent(join10(args, "\n")), "\n)") : wrap("(", join10(args, ", "), ")")) + ": " + type + wrap(" ", join10(directives, " "));
+        return name + (hasMultilineItems(args) ? wrap("(\n", indent(join9(args, "\n")), "\n)") : wrap("(", join9(args, ", "), ")")) + ": " + type + wrap(" ", join9(directives, " "));
       }),
       InputValueDefinition: addDescription(function(_ref25) {
         var name = _ref25.name, type = _ref25.type, defaultValue = _ref25.defaultValue, directives = _ref25.directives;
-        return join10([name + ": " + type, wrap("= ", defaultValue), join10(directives, " ")], " ");
+        return join9([name + ": " + type, wrap("= ", defaultValue), join9(directives, " ")], " ");
       }),
       InterfaceTypeDefinition: addDescription(function(_ref26) {
         var name = _ref26.name, directives = _ref26.directives, fields = _ref26.fields;
-        return join10(["interface", name, join10(directives, " "), block(fields)], " ");
+        return join9(["interface", name, join9(directives, " "), block(fields)], " ");
       }),
       UnionTypeDefinition: addDescription(function(_ref27) {
         var name = _ref27.name, directives = _ref27.directives, types = _ref27.types;
-        return join10(["union", name, join10(directives, " "), types && types.length !== 0 ? "= " + join10(types, " | ") : ""], " ");
+        return join9(["union", name, join9(directives, " "), types && types.length !== 0 ? "= " + join9(types, " | ") : ""], " ");
       }),
       EnumTypeDefinition: addDescription(function(_ref28) {
         var name = _ref28.name, directives = _ref28.directives, values = _ref28.values;
-        return join10(["enum", name, join10(directives, " "), block(values)], " ");
+        return join9(["enum", name, join9(directives, " "), block(values)], " ");
       }),
       EnumValueDefinition: addDescription(function(_ref29) {
         var name = _ref29.name, directives = _ref29.directives;
-        return join10([name, join10(directives, " ")], " ");
+        return join9([name, join9(directives, " ")], " ");
       }),
       InputObjectTypeDefinition: addDescription(function(_ref30) {
         var name = _ref30.name, directives = _ref30.directives, fields = _ref30.fields;
-        return join10(["input", name, join10(directives, " "), block(fields)], " ");
+        return join9(["input", name, join9(directives, " "), block(fields)], " ");
       }),
       DirectiveDefinition: addDescription(function(_ref31) {
         var name = _ref31.name, args = _ref31.arguments, repeatable = _ref31.repeatable, locations = _ref31.locations;
-        return "directive @" + name + (hasMultilineItems(args) ? wrap("(\n", indent(join10(args, "\n")), "\n)") : wrap("(", join10(args, ", "), ")")) + (repeatable ? " repeatable" : "") + " on " + join10(locations, " | ");
+        return "directive @" + name + (hasMultilineItems(args) ? wrap("(\n", indent(join9(args, "\n")), "\n)") : wrap("(", join9(args, ", "), ")")) + (repeatable ? " repeatable" : "") + " on " + join9(locations, " | ");
       }),
       SchemaExtension: function SchemaExtension(_ref32) {
         var directives = _ref32.directives, operationTypes = _ref32.operationTypes;
-        return join10(["extend schema", join10(directives, " "), block(operationTypes)], " ");
+        return join9(["extend schema", join9(directives, " "), block(operationTypes)], " ");
       },
       ScalarTypeExtension: function ScalarTypeExtension(_ref33) {
         var name = _ref33.name, directives = _ref33.directives;
-        return join10(["extend scalar", name, join10(directives, " ")], " ");
+        return join9(["extend scalar", name, join9(directives, " ")], " ");
       },
       ObjectTypeExtension: function ObjectTypeExtension(_ref34) {
         var name = _ref34.name, interfaces = _ref34.interfaces, directives = _ref34.directives, fields = _ref34.fields;
-        return join10(["extend type", name, wrap("implements ", join10(interfaces, " & ")), join10(directives, " "), block(fields)], " ");
+        return join9(["extend type", name, wrap("implements ", join9(interfaces, " & ")), join9(directives, " "), block(fields)], " ");
       },
       InterfaceTypeExtension: function InterfaceTypeExtension(_ref35) {
         var name = _ref35.name, directives = _ref35.directives, fields = _ref35.fields;
-        return join10(["extend interface", name, join10(directives, " "), block(fields)], " ");
+        return join9(["extend interface", name, join9(directives, " "), block(fields)], " ");
       },
       UnionTypeExtension: function UnionTypeExtension(_ref36) {
         var name = _ref36.name, directives = _ref36.directives, types = _ref36.types;
-        return join10(["extend union", name, join10(directives, " "), types && types.length !== 0 ? "= " + join10(types, " | ") : ""], " ");
+        return join9(["extend union", name, join9(directives, " "), types && types.length !== 0 ? "= " + join9(types, " | ") : ""], " ");
       },
       EnumTypeExtension: function EnumTypeExtension(_ref37) {
         var name = _ref37.name, directives = _ref37.directives, values = _ref37.values;
-        return join10(["extend enum", name, join10(directives, " "), block(values)], " ");
+        return join9(["extend enum", name, join9(directives, " "), block(values)], " ");
       },
       InputObjectTypeExtension: function InputObjectTypeExtension(_ref38) {
         var name = _ref38.name, directives = _ref38.directives, fields = _ref38.fields;
-        return join10(["extend input", name, join10(directives, " "), block(fields)], " ");
+        return join9(["extend input", name, join9(directives, " "), block(fields)], " ");
       }
     };
     function addDescription(cb) {
       return function(node) {
-        return join10([node.description, cb(node)], "\n");
+        return join9([node.description, cb(node)], "\n");
       };
     }
-    function join10(maybeArray, separator) {
+    function join9(maybeArray, separator) {
       return maybeArray ? maybeArray.filter(function(x) {
         return x;
       }).join(separator || "") : "";
     }
     function block(array) {
-      return array && array.length !== 0 ? "{\n" + indent(join10(array, "\n")) + "\n}" : "";
+      return array && array.length !== 0 ? "{\n" + indent(join9(array, "\n")) + "\n}" : "";
     }
     function wrap(start, maybeString, end) {
       return maybeString ? start + maybeString + (end || "") : "";
@@ -33375,12 +33375,11 @@ async function installApp(ipaPath, udid, options) {
     const mdmClient = await resolveMdmClient(options.mdm);
     const mdmInstallOptions = getMdmInstallOptions(options.mdm);
     await mdmClient.installApp(udid, mdmInstallOptions);
-    return;
   }
+  await installLocalApp(ipaPath, udid);
+}
+async function installLocalApp(ipaPath, udid) {
   logTask(`Installing app ${ipaPath} on device ${udid}`);
-  if (!await isPaired(udid)) {
-    await waitForPairing(udid, 1e4);
-  }
   await runIDeviceTool("ideviceinstaller", ["-u", udid, "install", ipaPath]);
 }
 async function uninstallApp(bundleId, udid) {
@@ -33671,16 +33670,13 @@ function killPortForwardProcess(process2) {
 
 // src/logic/activationFlow.ts
 var import_node_fs4 = require("node:fs");
-var import_promises3 = require("node:fs/promises");
-var import_node_os3 = require("node:os");
-var import_node_path8 = require("node:path");
-var import_node_url2 = require("node:url");
-
-// src/utils/trustProfile.ts
-var import_node_crypto2 = require("node:crypto");
 var import_promises2 = require("node:fs/promises");
 var import_node_os2 = require("node:os");
 var import_node_path7 = require("node:path");
+var import_node_url2 = require("node:url");
+
+// src/utils/wifiProfile.ts
+var import_node_crypto2 = require("node:crypto");
 
 // src/utils/templateLoader.ts
 var import_node_fs3 = require("node:fs");
@@ -33770,56 +33766,7 @@ function escapeXml(str) {
   return str.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&apos;");
 }
 
-// src/utils/trustProfile.ts
-async function generateTrustProfile(config, options) {
-  const {
-    organizationName,
-    certificateBase64,
-    certificateDisplayName = `${organizationName} Enterprise Certificate`,
-    profileDisplayName = `${organizationName} Enterprise Trust`
-  } = config;
-  const profileUuid = (0, import_node_crypto2.randomUUID)().toUpperCase();
-  const certificateUuid = (0, import_node_crypto2.randomUUID)().toUpperCase();
-  const orgShortName = organizationName.split(/\s+/)[0].toLowerCase();
-  const timestamp = Date.now();
-  const profileId = `com.${orgShortName}.enterprise.trust.${timestamp}`;
-  const payloadId = `${profileId}.cert`;
-  logInfo(`Generating trust profile for: ${organizationName}`);
-  const cleanCertBase64 = certificateBase64.replace(/-----BEGIN CERTIFICATE-----/g, "").replace(/-----END CERTIFICATE-----/g, "").replace(/\s/g, "");
-  const template = await loadTemplate("certificate-trust.xml", options?.plistDir);
-  const certificateFileName = `${orgShortName}_enterprise.cer`;
-  const variables = {
-    organizationName,
-    certificateBase64: cleanCertBase64,
-    certificateDescription: `Trusts ${organizationName} enterprise apps`,
-    certificateDisplayName,
-    profileDisplayName,
-    profileId,
-    profileUuid,
-    payloadId,
-    certificateUuid,
-    certificateFileName,
-    removalDisallowed: "false"
-  };
-  return processTemplate(template, variables);
-}
-async function generateTrustProfileFromEnv(organizationName, options) {
-  const certBase64 = process.env.TRUST_CERT_BASE64;
-  if (!certBase64) {
-    logInfo("TRUST_CERT_BASE64 environment variable not set, skipping trust profile generation.");
-    return void 0;
-  }
-  return generateTrustProfile(
-    {
-      organizationName,
-      certificateBase64: certBase64
-    },
-    options
-  );
-}
-
 // src/utils/wifiProfile.ts
-var import_node_crypto3 = require("node:crypto");
 async function generateWifiProfile(config, options) {
   const {
     ssid,
@@ -33834,8 +33781,8 @@ async function generateWifiProfile(config, options) {
     eapType = "PEAP",
     acceptAnyCertificate = true
   } = config;
-  const profileUuid = (0, import_node_crypto3.randomUUID)().toUpperCase();
-  const payloadUuid = (0, import_node_crypto3.randomUUID)().toUpperCase();
+  const profileUuid = (0, import_node_crypto2.randomUUID)().toUpperCase();
+  const payloadUuid = (0, import_node_crypto2.randomUUID)().toUpperCase();
   const profileId = `com.mce.wifi.${ssid.replace(/[^a-zA-Z0-9]/g, "")}.${Date.now()}`;
   const payloadId = `${profileId}.payload`;
   logInfo(`Generating WiFi profile for SSID: ${ssid}, encryption: ${encryptionType}`);
@@ -34006,6 +33953,9 @@ function createIosCli(iosBinaryPath) {
     async installProfile(deviceId, profilePath) {
       return runIosCommand(iosBinaryPath, ["profile", "add", profilePath, "--udid", deviceId]);
     },
+    async removeProfile(deviceId, profileName) {
+      return runIosCommand(iosBinaryPath, ["profile", "remove", profileName, "--udid", deviceId]);
+    },
     async skipSteps(deviceId) {
       return runIosCommand(iosBinaryPath, ["prepare", "--skip-all", "--udid", deviceId]);
     },
@@ -34032,11 +33982,16 @@ function createIosCli(iosBinaryPath) {
 // src/logic/activationFlow.ts
 var import_meta3 = {};
 var DEFAULT_RETRIES = 150;
-var DEFAULT_RETRY_DELAY_MS = 2e3;
+var DEFAULT_RETRY_DELAY_MS = 1e3;
+var TIME_BETWEEN_INSTALLS = 5e3;
+var TIME_TO_WAIT_FOR_MANAGED_APP_INSTALL = 1e4;
+function sleep(ms) {
+  return new Promise((resolve5) => setTimeout(resolve5, ms));
+}
 var ActivationFlow = class {
   iosCli;
   mdmClientPromise;
-  organizationName;
+  // private readonly organizationName?: string;
   resourcesDir;
   constructor(config) {
     const iosBinaryPath = resolveIosBinaryPath(config);
@@ -34045,7 +34000,6 @@ var ActivationFlow = class {
     }
     this.iosCli = createIosCli(iosBinaryPath);
     this.mdmClientPromise = createMdmClientFromEnv({ resourcesDir: config.resourcesDir });
-    this.organizationName = config.organizationName ?? process.env.ORGANIZATION_NAME;
     this.resourcesDir = config.resourcesDir;
   }
   async run(udid) {
@@ -34058,25 +34012,27 @@ var ActivationFlow = class {
       await this.retryIosCommand("wipe", () => this.iosCli.wipe(udid));
       return "wiped";
     }
-    await this.installWifiProfile(udid);
+    const wifiProfileIdentifier = await this.installWifiProfile(udid);
     await this.installMdmProfile(udid);
-    await this.installTrustProfile(udid);
-    await this.installResourcesIpa(udid);
     await this.retryIosCommand("skip steps", () => this.iosCli.skipSteps(udid));
+    await this.installManagedApp(udid);
+    await sleep(TIME_TO_WAIT_FOR_MANAGED_APP_INSTALL);
+    await this.removeWifiProfile(udid, wifiProfileIdentifier);
     return "activated";
   }
   async installWifiProfile(udid) {
-    const plistDir = this.resourcesDir ? resolveResourcesPlistDir(this.resourcesDir) : void 0;
-    const wifiProfile = await generateWifiProfileFromEnv({ plistDir });
+    const wifiProfile = await generateWifiProfileFromEnv();
     if (!wifiProfile) {
-      return;
+      return void 0;
     }
     const wifiProfilePath = await saveWifiProfileToTemp(wifiProfile);
+    const wifiProfileIdentifier = getProfileIdentifierFromProfile(wifiProfile);
     await this.retryIosCommand(
       "install wifi profile",
       () => this.iosCli.installProfile(udid, wifiProfilePath)
     );
     await removeTempFile(wifiProfilePath, "wifi profile");
+    return wifiProfileIdentifier;
   }
   async getActivationState(udid) {
     const infoResult = await this.retryIosCommand("device info", () => this.iosCli.info(udid));
@@ -34087,15 +34043,6 @@ var ActivationFlow = class {
     return activationState;
   }
   async installMdmProfile(udid) {
-    const offlineProfilePath = getResourcesEnrollmentProfilePath(this.resourcesDir, udid);
-    if (offlineProfilePath) {
-      logTask("Installing MDM enrollment profile from resources");
-      await this.retryIosCommand(
-        "install mdm profile",
-        () => this.iosCli.installProfile(udid, offlineProfilePath)
-      );
-      return;
-    }
     const client = await this.requireMdmClient();
     logTask("Installing MDM enrollment profile");
     const enrollmentProfile = await this.retry(
@@ -34113,46 +34060,47 @@ var ActivationFlow = class {
     );
     await removeTempFile(profilePath, "mdm profile");
   }
-  async installTrustProfile(udid) {
-    const resourcesProfilePath = getResourcesTrustProfilePath(this.resourcesDir);
-    if ((0, import_node_fs4.existsSync)(resourcesProfilePath)) {
-      logTask("Installing trust profile from resources");
-      await this.retryIosCommand(
-        "install trust profile",
-        () => this.iosCli.installProfile(udid, resourcesProfilePath)
-      );
-      return;
-    }
-    if (!this.organizationName) {
-      logError("ORGANIZATION_NAME is required to generate trust profile");
-      throw new Error("ORGANIZATION_NAME is required for trust profile generation");
-    }
-    const plistDir = this.resourcesDir ? resolveResourcesPlistDir(this.resourcesDir) : void 0;
-    const trustProfile = await generateTrustProfileFromEnv(this.organizationName, { plistDir });
-    if (!trustProfile) {
-      return;
-    }
-    logTask("Generating trust profile and saving to resources");
-    await ensureResourcesDirExists(this.resourcesDir);
-    await (0, import_promises3.writeFile)(resourcesProfilePath, trustProfile, "utf-8");
-    await this.retryIosCommand(
-      "install trust profile",
-      () => this.iosCli.installProfile(udid, resourcesProfilePath)
-    );
+  // private async installTrustProfile(udid: string): Promise<void> {
+  // 	const resourcesProfilePath = getResourcesTrustProfilePath(this.resourcesDir);
+  // 	if (existsSync(resourcesProfilePath)) {
+  // 		logTask("Installing trust profile from resources");
+  // 		await this.retryIosCommand("install trust profile", () =>
+  // 			this.iosCli.installProfile(udid, resourcesProfilePath)
+  // 		);
+  // 		return;
+  // 	}
+  // 	if (!this.organizationName) {
+  // 		logError("ORGANIZATION_NAME is required to generate trust profile");
+  // 		throw new Error("ORGANIZATION_NAME is required for trust profile generation");
+  // 	}
+  // 	const trustProfile = await generateTrustProfileFromEnv(this.organizationName);
+  // 	if (!trustProfile) {
+  // 		return;
+  // 	}
+  // 	logTask("Generating trust profile and saving to resources");
+  // 	await ensureResourcesDirExists(this.resourcesDir);
+  // 	await writeFile(resourcesProfilePath, trustProfile, "utf-8");
+  // 	await this.retryIosCommand("install trust profile", () =>
+  // 		this.iosCli.installProfile(udid, resourcesProfilePath)
+  // 	);
+  // }
+  async installManagedApp(udid) {
+    const ipaPath = resolveManagedAppPath(this.resourcesDir);
+    await installLocalApp(ipaPath, udid);
+    const mdmInstallOptions = getMdmInstallOptionsFromEnv();
+    const client = await this.requireMdmClient();
+    logTask("Installing app via MDM for management takeover");
+    await sleep(TIME_BETWEEN_INSTALLS);
+    client.installApp(udid, mdmInstallOptions);
   }
-  async installResourcesIpa(udid) {
-    const ipaPath = await getResourcesIpaPath(this.resourcesDir);
-    if (!ipaPath) {
+  async removeWifiProfile(udid, profileIdentifier) {
+    if (!profileIdentifier) {
       return;
     }
-    logTask(`Installing IPA from resources: ${ipaPath}`);
-    await this.retry(
-      "install ipa",
-      async () => {
-        await installApp(ipaPath, udid);
-        return true;
-      },
-      (result) => result
+    logTask("Removing WiFi profile");
+    await this.retryIosCommand(
+      "remove wifi profile",
+      () => this.iosCli.removeProfile(udid, profileIdentifier)
     );
   }
   async requireMdmClient() {
@@ -34186,88 +34134,75 @@ var ActivationFlow = class {
   }
 };
 async function saveProfileToTemp(profile, prefix) {
-  const tempFilePath = (0, import_node_path8.join)((0, import_node_os3.tmpdir)(), `mce_${prefix}_${Date.now()}.mobileconfig`);
-  await (0, import_promises3.writeFile)(tempFilePath, profile, "utf-8");
+  const tempFilePath = (0, import_node_path7.join)((0, import_node_os2.tmpdir)(), `mce_${prefix}_${Date.now()}.mobileconfig`);
+  await (0, import_promises2.writeFile)(tempFilePath, profile, "utf-8");
   logInfo(`Profile saved to: ${tempFilePath}`);
   return tempFilePath;
 }
 async function removeTempFile(filePath, label) {
   try {
-    await (0, import_promises3.unlink)(filePath);
+    await (0, import_promises2.unlink)(filePath);
     logInfo(`Removed ${label} temp file: ${filePath}`);
   } catch (error) {
     const errorMsg = error instanceof Error ? error.message : String(error);
     logError(`Failed to remove ${label} temp file: ${errorMsg}`);
   }
 }
-function getResourcesTrustProfilePath(resourcesDir) {
+function resolveManagedAppPath(resourcesDir) {
   const resolvedResourcesDir = resolveResourcesDir(resourcesDir);
-  return (0, import_node_path8.join)(resolvedResourcesDir, "trust_profile.mobileconfig");
-}
-async function ensureResourcesDirExists(resourcesDir) {
-  const resolvedResourcesDir = resolveResourcesDir(resourcesDir);
-  await (0, import_promises3.mkdir)(resolvedResourcesDir, { recursive: true });
-}
-function resolveResourcesDir(resourcesDir) {
-  if (resourcesDir) {
-    return (0, import_node_path8.resolve)(resourcesDir);
+  const ipaPath = (0, import_node_path7.join)(resolvedResourcesDir, "deviceagent.ipa");
+  if (!(0, import_node_fs4.existsSync)(ipaPath)) {
+    throw new Error(`Managed app IPA not found at ${ipaPath}`);
   }
-  const currentFile = (0, import_node_url2.fileURLToPath)(import_meta3.url);
-  const currentDir = (0, import_node_path8.dirname)(currentFile);
-  const packageRoot = (0, import_node_path8.join)(currentDir, "..", "..");
-  return (0, import_node_path8.join)(packageRoot, "resources");
+  return ipaPath;
 }
-function resolveResourcesPlistDir(resourcesDir) {
-  return (0, import_node_path8.join)(resolveResourcesDir(resourcesDir), "plist");
+function getMdmInstallOptionsFromEnv() {
+  const appId = process.env.MDM_APP_ID;
+  const url = process.env.MDM_APP_URL;
+  const waitForInstalled = parseBooleanEnv(process.env.MDM_APP_WAIT_FOR_INSTALLED);
+  if (!appId && !url) {
+    throw new Error("MDM install requires MDM_APP_ID or MDM_APP_URL.");
+  }
+  return {
+    appId,
+    url,
+    waitForInstalled
+  };
 }
-async function getResourcesIpaPath(resourcesDir) {
-  const resolvedResourcesDir = resolveResourcesDir(resourcesDir);
-  const candidateDirs = [resolvedResourcesDir, (0, import_node_path8.join)(resolvedResourcesDir, "apps")];
-  for (const dir of candidateDirs) {
-    const entries = await safeReadDir(dir);
-    if (!entries) {
-      continue;
-    }
-    for (const entry of entries) {
-      if (!entry.isFile()) {
-        continue;
-      }
-      const name = entry.name.toLowerCase();
-      if (name.endsWith(".ipa")) {
-        return (0, import_node_path8.join)(dir, entry.name);
-      }
-    }
+function parseBooleanEnv(value) {
+  if (!value) {
+    return void 0;
+  }
+  const normalized = value.trim().toLowerCase();
+  if (normalized === "true" || normalized === "1" || normalized === "yes") {
+    return true;
+  }
+  if (normalized === "false" || normalized === "0" || normalized === "no") {
+    return false;
   }
   return void 0;
 }
-function isErrorWithCode(error) {
-  return typeof error === "object" && error !== null && "code" in error;
-}
-async function safeReadDir(dir) {
-  try {
-    return await (0, import_promises3.readdir)(dir, { withFileTypes: true });
-  } catch (error) {
-    if (isErrorWithCode(error) && typeof error.code === "string" && error.code === "ENOENT") {
-      return void 0;
-    }
-    const errorMsg = error instanceof Error ? error.message : String(error);
-    logError(`Failed to read resources directory ${dir}: ${errorMsg}`);
+function getProfileIdentifierFromProfile(profile) {
+  const pattern = /<key>PayloadIdentifier<\/key>\s*<string>([^<]+)<\/string>/g;
+  const matches = [];
+  let match = pattern.exec(profile);
+  while (match) {
+    matches.push(match[1].trim());
+    match = pattern.exec(profile);
+  }
+  if (matches.length === 0) {
     return void 0;
   }
+  return matches[matches.length - 1];
 }
-function getResourcesEnrollmentProfilePath(resourcesDir, udid) {
-  const baseDir = resolveResourcesDir(resourcesDir);
-  const mdmDir = (0, import_node_path8.join)(baseDir, "mdm");
-  const candidates = [
-    udid ? (0, import_node_path8.join)(mdmDir, `enrollment_${udid}.mobileconfig`) : void 0,
-    (0, import_node_path8.join)(mdmDir, "enrollment.mobileconfig")
-  ];
-  for (const candidate of candidates) {
-    if (candidate && (0, import_node_fs4.existsSync)(candidate)) {
-      return candidate;
-    }
+function resolveResourcesDir(resourcesDir) {
+  if (resourcesDir) {
+    return (0, import_node_path7.resolve)(resourcesDir);
   }
-  return void 0;
+  const currentFile = (0, import_node_url2.fileURLToPath)(import_meta3.url);
+  const currentDir = (0, import_node_path7.dirname)(currentFile);
+  const packageRoot = (0, import_node_path7.join)(currentDir, "..", "..");
+  return (0, import_node_path7.join)(packageRoot, "resources");
 }
 function resolveIosBinaryPath(config) {
   if (config.iosBinaryPath) {
@@ -34278,7 +34213,7 @@ function resolveIosBinaryPath(config) {
   }
   const platform = process.platform;
   const binaryName = platform === "win32" ? "ios.exe" : "ios";
-  return (0, import_node_path8.join)(resolveResourcesDir(config.resourcesDir), "ios", "bin", platform, binaryName);
+  return (0, import_node_path7.join)(resolveResourcesDir(config.resourcesDir), "ios", "bin", platform, binaryName);
 }
 function getActivationState2(output) {
   if (!Array.isArray(output) || output.length === 0) {
@@ -34553,7 +34488,7 @@ var AppleDeviceKit = class {
 
 // src/logic/actions/usbmuxd.ts
 var import_node_child_process4 = require("node:child_process");
-var import_node_path9 = require("node:path");
+var import_node_path8 = require("node:path");
 var usbmuxdProcess = null;
 function startUsbmuxd(foreground = false, options) {
   const current = usbmuxdProcess;
@@ -34563,7 +34498,7 @@ function startUsbmuxd(foreground = false, options) {
   }
   const binPath = getResourcesBinPath({ resourcesDir: options?.resourcesDir });
   const ext = process.platform === "win32" ? ".exe" : "";
-  const toolPath = binPath ? (0, import_node_path9.join)(binPath, `usbmuxd${ext}`) : `usbmuxd${ext}`;
+  const toolPath = binPath ? (0, import_node_path8.join)(binPath, `usbmuxd${ext}`) : `usbmuxd${ext}`;
   const args = foreground ? ["-f"] : [];
   const spawnOptions = {
     windowsHide: true,