@mcesystems/apple-kit 1.0.61 → 1.0.62

package/dist/index.mjs

@@ -32380,16 +32380,91 @@ async function getActivationState(udid) {
 }
 
 // src/logic/actions/device.ts
-import { existsSync as existsSync3 } from "node:fs";
-import { join as join7 } from "node:path";
+import { existsSync as existsSync2 } from "node:fs";
+import { join as join3 } from "node:path";
 
-// src/logic/activationFlow.ts
-import { unlink, writeFile } from "node:fs/promises";
-import { tmpdir } from "node:os";
-import { join as join6 } from "node:path";
+// src/logic/dataParser.ts
+function parsePlistOutput(output) {
+  const result = {};
+  const lines = output.split("\n");
+  for (const line of lines) {
+    const colonIndex = line.indexOf(":");
+    if (colonIndex > 0) {
+      const key = line.substring(0, colonIndex).trim();
+      const value = line.substring(colonIndex + 1).trim();
+      result[key] = value;
+    }
+  }
+  return result;
+}
+function parseAppList(output) {
+  const apps = [];
+  const lines = output.trim().split("\n");
+  for (const line of lines) {
+    const match = line.match(/^([^,]+),\s*([^,]+),\s*"?([^"]+)"?/);
+    if (match) {
+      apps.push({
+        bundleId: match[1].trim(),
+        version: match[2].trim(),
+        displayName: match[3].trim(),
+        bundleVersion: ""
+      });
+    }
+  }
+  return apps;
+}
+
+// src/logic/actions/device.ts
+async function getDeviceInfo(udid) {
+  logTask(`Getting device info for ${udid}`);
+  const result = await runIDeviceTool("ideviceinfo", ["-u", udid]);
+  if (!result) {
+    throw new Error("Failed to get device info");
+  }
+  const props = parsePlistOutput(result.stdout);
+  return {
+    deviceName: props.DeviceName || "",
+    productType: props.ProductType || "",
+    productVersion: props.ProductVersion || "",
+    buildVersion: props.BuildVersion || "",
+    serialNumber: props.SerialNumber || "",
+    udid: props.UniqueDeviceID || udid,
+    wifiAddress: props.WiFiAddress || "",
+    bluetoothAddress: props.BluetoothAddress || "",
+    phoneNumber: props.PhoneNumber || "",
+    cpuArchitecture: props.CPUArchitecture || "",
+    hardwareModel: props.HardwareModel || "",
+    modelNumber: props.ModelNumber || "",
+    regionInfo: props.RegionInfo || "",
+    timeZone: props.TimeZone || "",
+    uniqueChipID: props.UniqueChipID || "",
+    isPaired: true
+    // If we can get info, device is paired
+  };
+}
+async function info(udid, iosCli2) {
+  logTask(`Getting device info for ${udid}`);
+  const result = await iosCli2.info(udid);
+  if (!result) {
+    throw new Error("Failed to get device info");
+  }
+  return result.output[0];
+}
+async function wipeDevice(udid, iosCli2) {
+  logTask(`Wiping device ${udid}`);
+  await iosCli2.wipe(udid);
+}
+async function removeProfile(profileIdentifier, udid, iosCli2) {
+  logTask(`Removing profile ${profileIdentifier} from device ${udid}`);
+  await iosCli2.removeProfile(udid, profileIdentifier);
+}
+async function listProfiles(udid, iosCli2) {
+  logTask(`Listing profiles for device ${udid}`);
+  return iosCli2.listProfiles(udid);
+}
 
 // src/utils/mdmClient.ts
-import { join as join3 } from "node:path";
+import { join as join4 } from "node:path";
 
 // ../../node_modules/.pnpm/graphql-request@5.2.0_encoding@0.1.13_graphql@14.7.0/node_modules/graphql-request/build/esm/defaultJsonSerializer.js
 var defaultJsonSerializer = {
@@ -33159,7 +33234,7 @@ function createMdmClient(config) {
 }
 async function createMDMClient() {
   const endpoint = process.env.MDM_ENDPOINT;
-  const credPath = join3(getResourcesPath(), "@clientLocal.json");
+  const credPath = join4(getResourcesPath(), "@clientLocal.json");
   if (!endpoint || !credPath) {
     return void 0;
   }
@@ -33172,107 +33247,313 @@ async function createMDMClient() {
   });
 }
 
-// src/utils/wifiProfile.ts
-import { randomUUID } from "node:crypto";
-
-// src/utils/templateLoader.ts
-import { existsSync as existsSync2 } from "node:fs";
-import { readFile } from "node:fs/promises";
-import { dirname, isAbsolute, join as join4, resolve } from "node:path";
-import { fileURLToPath } from "node:url";
-function resolveEnvPlistDir() {
-  const envPath = join4(getResourcesPath(), "plist");
-  if (!existsSync2(envPath)) {
-    return null;
-  }
-  const absolutePath = isAbsolute(envPath) ? envPath : join4(process.cwd(), envPath);
-  if (existsSync2(absolutePath)) {
-    return absolutePath;
+// src/logic/actions/pair.ts
+async function isPaired(udid) {
+  logTask(`Checking pairing status for ${udid}`);
+  try {
+    const result = await runIDeviceTool("idevicepair", ["-u", udid, "validate"]);
+    if (!result) {
+      return false;
+    }
+    return result.stdout.toLowerCase().includes("success");
+  } catch {
+    return false;
   }
-  return null;
 }
-function getPlistDir(overrideDir) {
-  if (overrideDir) {
-    return resolve(overrideDir);
-  }
-  const envPlistDir = resolveEnvPlistDir();
-  if (envPlistDir) {
-    return envPlistDir;
+async function trustDevice(udid, timeout2 = 6e4, onWaitingForTrust) {
+  logTask(`Trusting device ${udid}`);
+  if (await isPaired(udid)) {
+    logInfo(`Device ${udid} is already trusted`);
+    return true;
   }
-  let baseDir;
+  logInfo(`Initiating pairing for device ${udid}`);
   try {
-    if (typeof import.meta !== "undefined" && import.meta.url) {
-      const currentFile = fileURLToPath(import.meta.url);
-      baseDir = dirname(currentFile);
-    } else {
-      baseDir = typeof __dirname !== "undefined" ? __dirname : process.cwd();
+    const pairResult = await pair(udid);
+    if (pairResult) {
+      logInfo(`Device ${udid} paired successfully`);
+      return true;
     }
-  } catch {
-    baseDir = process.cwd();
+  } catch (error) {
+    logError(`Pairing failed with ${udid}: ${error}`);
   }
-  const sourcePlistDir = join4(baseDir, "../plist");
-  if (existsSync2(sourcePlistDir)) {
-    return sourcePlistDir;
+  logInfo("Please accept the trust dialog on the device...");
+  onWaitingForTrust?.();
+  try {
+    await waitForPairing(udid, timeout2, 1e3);
+    logInfo(`Device ${udid} is now trusted`);
+    return true;
+  } catch {
+    logInfo(`Timeout waiting for trust acceptance on device ${udid}`);
+    return false;
   }
-  const distPlistDir = join4(baseDir, "../plist");
-  if (existsSync2(distPlistDir)) {
-    return distPlistDir;
+}
+async function waitForPairing(udid, timeout2 = 12e4, pollInterval = 1e3) {
+  logTask(`Waiting for pairing on device ${udid}`);
+  const startTime = Date.now();
+  while (Date.now() - startTime < timeout2) {
+    if (await isPaired(udid)) {
+      logInfo(`Device ${udid} is now paired`);
+      return true;
+    }
+    await new Promise((resolve2) => setTimeout(resolve2, pollInterval));
   }
-  const distPlistDir2 = join4(baseDir, "../dist/plist");
-  if (existsSync2(distPlistDir2)) {
-    return distPlistDir2;
+  throw new Error(`Timeout waiting for device pairing after ${timeout2}ms`);
+}
+async function pair(udid) {
+  logTask(`Initiating pairing for device ${udid}`);
+  try {
+    const result = await runIDeviceTool("idevicepair", ["-u", udid, "pair"]);
+    if (!result) {
+      return false;
+    }
+    return result.stdout.toLowerCase().includes("success");
+  } catch (error) {
+    const errorMsg = error instanceof Error ? error.message : String(error);
+    if (errorMsg.includes("Please accept the trust dialog")) {
+      return false;
+    }
+    throw error;
   }
-  const srcPlistFallback = join4(process.cwd(), "src/plist");
-  if (existsSync2(srcPlistFallback)) {
-    return srcPlistFallback;
+}
+async function unpair(udid) {
+  logTask(`Un-pairing device ${udid}`);
+  try {
+    const result = await runIDeviceTool("idevicepair", ["-u", udid, "unpair"]);
+    if (!result) {
+      return false;
+    }
+    return result.stdout.toLowerCase().includes("success");
+  } catch {
+    return false;
   }
-  const distPlistFallback = join4(process.cwd(), "dist/plist");
-  if (existsSync2(distPlistFallback)) {
-    return distPlistFallback;
+}
+
+// src/logic/actions/install.ts
+async function installLocalApp(ipaPath, udid) {
+  logTask(`Installing app ${ipaPath} on device ${udid}`);
+  await runIDeviceTool("ideviceinstaller", ["-u", udid, "install", ipaPath]);
+}
+async function installManagedApp(ipaPath, udid, options) {
+  await installLocalApp(ipaPath, udid);
+  const client = await createMDMClient();
+  logTask("Installing app via MDM for management takeover");
+  if (client) {
+    client.installApp(udid, options);
   }
-  return join4(process.cwd(), "src/plist");
 }
-async function loadTemplate(templateName, plistDir) {
-  const templatePath = join4(getPlistDir(plistDir), templateName);
-  const content = await readFile(templatePath, "utf-8");
-  return content;
+async function uninstallApp(bundleId, udid) {
+  logTask(`Uninstalling app ${bundleId} from device ${udid}`);
+  if (!await isPaired(udid)) {
+    await waitForPairing(udid, 1e4);
+  }
+  await runIDeviceTool("ideviceinstaller", ["-u", udid, "uninstall", bundleId]);
 }
-function processTemplate(template, variables) {
-  let result = template;
-  result = result.replace(/\{\{#if\s+(\w+)\}\}([\s\S]*?)\{\{\/if\}\}/g, (_match, key, content) => {
-    const value = variables[key];
-    if (value && value !== false && value !== "" && value !== null && value !== void 0) {
-      return processTemplate(content, variables);
-    }
-    return "";
-  });
-  result = result.replace(/\{\{(\w+)\}\}/g, (_match, key) => {
-    const value = variables[key];
-    if (value === void 0 || value === null) {
-      return "";
-    }
-    if (typeof value === "boolean") {
-      return value ? "true" : "false";
+async function listApps(udid) {
+  logTask(`Listing apps on device ${udid}`);
+  if (!await isPaired(udid)) {
+    await waitForPairing(udid, 1e4);
+  }
+  try {
+    const result = await runIDeviceTool("ideviceinstaller", ["-u", udid, "list"]);
+    if (!result) {
+      return [];
     }
-    return escapeXml(String(value));
-  });
-  return result;
+    const { stdout } = result;
+    return parseAppList(stdout);
+  } catch {
+    return [];
+  }
 }
-function escapeXml(str) {
-  return str.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&apos;");
+async function isAppInstalled(bundleId, udid) {
+  logTask(`Checking if app ${bundleId} is installed on device ${udid}`);
+  const apps = await listApps(udid);
+  return apps.some((app) => app.bundleId === bundleId);
+}
+async function launchApp(bundleId, _args, udid) {
+  logTask(`Launching app ${bundleId} on device ${udid}`);
 }
 
-// src/utils/wifiProfile.ts
-async function generateWifiProfile(config, options) {
-  const {
-    ssid,
-    password,
-    encryptionType = "WPA2",
-    autoJoin = true,
-    hiddenNetwork = false,
-    organizationName = "MCE Systems",
-    displayName = `WiFi - ${ssid}`,
-    enterprise = false,
+// src/logic/actions/proxy.ts
+import { spawn } from "node:child_process";
+import { join as join5 } from "node:path";
+function startPortForward(localPort, devicePort, udid, startupTimeout = 500) {
+  return new Promise((resolve2, reject) => {
+    logTask(`Starting port forward ${localPort} -> ${devicePort} for device ${udid}`);
+    const binPath = getResourcesBinPath();
+    const ext = process.platform === "win32" ? ".exe" : "";
+    const toolPath = binPath ? join5(binPath, `iproxy${ext}`) : `iproxy${ext}`;
+    const spawnOptions = {
+      windowsHide: true,
+      stdio: ["ignore", "pipe", "pipe"]
+    };
+    if (binPath) {
+      spawnOptions.cwd = binPath;
+    }
+    logInfo(`Spawning iproxy with path: ${toolPath}`);
+    logInfo(`Arguments: ${[localPort.toString(), devicePort.toString(), "-u", udid].join(" ")}`);
+    logInfo(`Options: ${JSON.stringify(spawnOptions)}`);
+    const child = spawn(
+      toolPath,
+      [localPort.toString(), devicePort.toString(), "-u", udid],
+      spawnOptions
+    );
+    let hasResolved = false;
+    let stderrOutput = "";
+    child.stdout?.on("data", (data) => {
+      logTask(`${data.toString()}`);
+    });
+    child.stderr?.on("data", (data) => {
+      logError(`${data.toString()}`);
+      const msg = data.toString();
+      stderrOutput += msg;
+      if (msg.toLowerCase().includes("error") && !hasResolved) {
+        hasResolved = true;
+        child.kill();
+        reject(new Error(`Port forwarding failed: ${msg}`));
+      }
+    });
+    child.on("error", (error) => {
+      if (!hasResolved) {
+        hasResolved = true;
+        reject(new Error(`Failed to start iproxy: ${error.message}`));
+      }
+    });
+    child.on("exit", (code) => {
+      if (!hasResolved) {
+        hasResolved = true;
+        if (code !== 0 && code !== null) {
+          reject(new Error(`iproxy exited with code ${code}: ${stderrOutput}`));
+        }
+      }
+    });
+    setTimeout(() => {
+      if (!hasResolved) {
+        hasResolved = true;
+        logTask(`Port forward started: ${localPort} -> ${devicePort} for device ${udid}`);
+        resolve2({
+          result: {
+            localPort,
+            devicePort
+          },
+          process: child
+        });
+      }
+    }, startupTimeout);
+  });
+}
+function killPortForwardProcess(process2) {
+  if (process2 && !process2.killed) {
+    logTask("Killing port forward process");
+    process2.kill();
+  }
+}
+
+// src/logic/activationFlow.ts
+import { unlink, writeFile } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { join as join7 } from "node:path";
+
+// src/utils/wifiProfile.ts
+import { randomUUID } from "node:crypto";
+
+// src/utils/templateLoader.ts
+import { existsSync as existsSync3 } from "node:fs";
+import { readFile } from "node:fs/promises";
+import { dirname, isAbsolute, join as join6, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+function resolveEnvPlistDir() {
+  const envPath = join6(getResourcesPath(), "plist");
+  if (!existsSync3(envPath)) {
+    return null;
+  }
+  const absolutePath = isAbsolute(envPath) ? envPath : join6(process.cwd(), envPath);
+  if (existsSync3(absolutePath)) {
+    return absolutePath;
+  }
+  return null;
+}
+function getPlistDir(overrideDir) {
+  if (overrideDir) {
+    return resolve(overrideDir);
+  }
+  const envPlistDir = resolveEnvPlistDir();
+  if (envPlistDir) {
+    return envPlistDir;
+  }
+  let baseDir;
+  try {
+    if (typeof import.meta !== "undefined" && import.meta.url) {
+      const currentFile = fileURLToPath(import.meta.url);
+      baseDir = dirname(currentFile);
+    } else {
+      baseDir = typeof __dirname !== "undefined" ? __dirname : process.cwd();
+    }
+  } catch {
+    baseDir = process.cwd();
+  }
+  const sourcePlistDir = join6(baseDir, "../plist");
+  if (existsSync3(sourcePlistDir)) {
+    return sourcePlistDir;
+  }
+  const distPlistDir = join6(baseDir, "../plist");
+  if (existsSync3(distPlistDir)) {
+    return distPlistDir;
+  }
+  const distPlistDir2 = join6(baseDir, "../dist/plist");
+  if (existsSync3(distPlistDir2)) {
+    return distPlistDir2;
+  }
+  const srcPlistFallback = join6(process.cwd(), "src/plist");
+  if (existsSync3(srcPlistFallback)) {
+    return srcPlistFallback;
+  }
+  const distPlistFallback = join6(process.cwd(), "dist/plist");
+  if (existsSync3(distPlistFallback)) {
+    return distPlistFallback;
+  }
+  return join6(process.cwd(), "src/plist");
+}
+async function loadTemplate(templateName, plistDir) {
+  const templatePath = join6(getPlistDir(plistDir), templateName);
+  const content = await readFile(templatePath, "utf-8");
+  return content;
+}
+function processTemplate(template, variables) {
+  let result = template;
+  result = result.replace(/\{\{#if\s+(\w+)\}\}([\s\S]*?)\{\{\/if\}\}/g, (_match, key, content) => {
+    const value = variables[key];
+    if (value && value !== false && value !== "" && value !== null && value !== void 0) {
+      return processTemplate(content, variables);
+    }
+    return "";
+  });
+  result = result.replace(/\{\{(\w+)\}\}/g, (_match, key) => {
+    const value = variables[key];
+    if (value === void 0 || value === null) {
+      return "";
+    }
+    if (typeof value === "boolean") {
+      return value ? "true" : "false";
+    }
+    return escapeXml(String(value));
+  });
+  return result;
+}
+function escapeXml(str) {
+  return str.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&apos;");
+}
+
+// src/utils/wifiProfile.ts
+async function generateWifiProfile(config, options) {
+  const {
+    ssid,
+    password,
+    encryptionType = "WPA2",
+    autoJoin = true,
+    hiddenNetwork = false,
+    organizationName = "MCE Systems",
+    displayName = `WiFi - ${ssid}`,
+    enterprise = false,
     username,
     eapType = "PEAP",
     acceptAnyCertificate = true
@@ -33386,89 +33667,223 @@ function parseWifiEapType(value) {
   }
 }
 
-// src/logic/iosCli.ts
-import { spawn } from "node:child_process";
-import { join as join5 } from "node:path";
-var ios;
-function iosCli() {
-  const iosBinaryPath = resolveIosBinaryPath();
-  if (!iosBinaryPath) {
-    throw new Error("iosBinaryPath is required. Provide iosBinaryPath or resourcesDir.");
-  }
-  return createIosCli(iosBinaryPath);
-}
-if (!ios) {
-  ios = iosCli();
-}
-function runIosCommand(iosBinaryPath, args) {
-  return new Promise((resolve2, reject) => {
-    const child = spawn(iosBinaryPath, args, {
-      windowsHide: true,
-      stdio: ["ignore", "pipe", "pipe"]
-    });
-    let stdout = "";
-    let stderr = "";
-    child.stdout?.on("data", (data) => {
-      stdout += data.toString();
-    });
-    child.stderr?.on("data", (data) => {
-      stderr += data.toString();
-    });
-    child.on("error", (error) => {
-      reject(error);
-    });
-    child.on("close", (code) => {
-      console.log(`stdout: ${stdout}`);
-      console.log(`stderr: ${stderr}`);
-      console.log(`exitCode: ${code}`);
-      const output = stdout.split("\n").map((line) => line.trim()).filter((line) => line.length > 0).map((line) => safeParseJson(line)).filter((item) => Boolean(item));
-      const logMessages = stderr.split("\n").map((line) => line.trim()).filter((line) => line.length > 0).map((line) => safeParseJson(line)).filter((item) => Boolean(item)).map((lineJson) => ({
-        level: lineJson.level,
-        msg: lineJson.msg,
-        timestamp: lineJson.timestamp
-      }));
-      resolve2({
-        command: iosBinaryPath,
-        args,
-        output,
-        logMessages,
-        exitCode: code ?? 0
-      });
-    });
-  });
-}
-function safeParseJson(line) {
-  try {
-    const parsed = JSON.parse(line);
-    return parsed && typeof parsed === "object" ? parsed : void 0;
-  } catch {
-    return void 0;
+// src/logic/activationFlow.ts
+var DEFAULT_RETRIES = 150;
+var DEFAULT_RETRY_DELAY_MS = 1e3;
+var ActivationFlow = class {
+  iosCli;
+  mdmClientPromise;
+  constructor(iosCli2) {
+    this.iosCli = iosCli2;
+    this.mdmClientPromise = createMDMClient();
   }
-}
-function isRecord(value) {
-  return Boolean(value) && typeof value === "object" && !Array.isArray(value);
-}
-function getStringField(record, key) {
-  const value = record[key];
-  return typeof value === "string" ? value : void 0;
-}
-function getBooleanField(record, key) {
-  const value = record[key];
-  return typeof value === "boolean" ? value : void 0;
-}
-function getNumberField(record, key) {
-  const value = record[key];
-  return typeof value === "number" ? value : void 0;
-}
-function getRecordField(record, key) {
-  const value = record[key];
-  return isRecord(value) ? value : void 0;
-}
-function toProfileManifest(record) {
-  if (!record) {
-    return void 0;
+  async run(udid) {
+    logTask(`Starting activation flow for device ${udid}`);
+    await this.retryActivateCommand("activate device", () => this.iosCli.activate(udid));
+    const wifiProfileIdentifier = await this.installWifiProfile(udid);
+    await this.installMdmProfile(udid);
+    await this.retryIosCommand("skip steps", () => this.iosCli.skipSteps(udid));
+    return () => this.removeWifiProfile(udid, wifiProfileIdentifier);
   }
-  const description = getStringField(record, "Description");
+  async installWifiProfile(udid) {
+    const wifiProfile = await generateWifiProfileFromEnv();
+    if (!wifiProfile) {
+      return void 0;
+    }
+    const wifiProfilePath = await saveWifiProfileToTemp(wifiProfile);
+    const wifiProfileIdentifier = getProfileIdentifierFromProfile(wifiProfile);
+    await this.retryIosCommand(
+      "install wifi profile",
+      () => this.iosCli.installProfile(udid, wifiProfilePath)
+    );
+    await removeTempFile(wifiProfilePath, "wifi profile");
+    return wifiProfileIdentifier;
+  }
+  async installMdmProfile(udid) {
+    const client = await this.requireMdmClient();
+    logTask("Installing MDM enrollment profile");
+    const enrollmentProfile = await this.retry(
+      "generate mdm enrollment profile",
+      () => client.generateEnrollmentProfile(udid),
+      (result) => result.status === "OK" && Boolean(result.profile)
+    );
+    if (!enrollmentProfile.profile) {
+      throw new Error("MDM enrollment profile missing from response");
+    }
+    const profilePath = await saveProfileToTemp(enrollmentProfile.profile, "mdm_profile");
+    await this.retryIosCommand(
+      "install mdm profile",
+      () => this.iosCli.installProfile(udid, profilePath)
+    );
+    await removeTempFile(profilePath, "mdm profile");
+  }
+  async removeWifiProfile(udid, profileIdentifier) {
+    if (!profileIdentifier) {
+      return;
+    }
+    logTask("Removing WiFi profile");
+    await this.retryIosCommand(
+      "remove wifi profile",
+      () => this.iosCli.removeProfile(udid, profileIdentifier)
+    );
+  }
+  async requireMdmClient() {
+    const client = await this.mdmClientPromise;
+    if (!client) {
+      throw new Error("MDM client not configured. Set mdm endpoint and credential path.");
+    }
+    return client;
+  }
+  async retryIosCommand(label, command) {
+    return this.retry(label, command, (result) => result.exitCode === 0);
+  }
+  async retryActivateCommand(label, command) {
+    return this.retry(label, command, (result) => isActivationSuccess(result));
+  }
+  async retry(label, command, isSuccess, retries = +(process.env.DEFAULT_RETRIES ?? DEFAULT_RETRIES), retryDelayMs = +(process.env.DEFAULT_RETRY_DELAY_MS ?? DEFAULT_RETRY_DELAY_MS)) {
+    for (let attempt = 0; attempt < retries; attempt += 1) {
+      try {
+        const result = await command();
+        if (isSuccess(result)) {
+          return result;
+        }
+      } catch (error) {
+        const errorMsg = error instanceof Error ? error.message : String(error);
+        logError(`${label} failed: ${errorMsg}`);
+      }
+      logInfo(`Retrying ${label}... ${attempt + 1} of ${retries}`);
+      await new Promise((resolve2) => setTimeout(resolve2, retryDelayMs));
+    }
+    throw new Error(`Failed to ${label} after ${retries} attempts`);
+  }
+};
+async function saveProfileToTemp(profile, prefix) {
+  const tempFilePath = join7(tmpdir(), `mce_${prefix}_${Date.now()}.mobileconfig`);
+  await writeFile(tempFilePath, profile, "utf-8");
+  logInfo(`Profile saved to: ${tempFilePath}`);
+  return tempFilePath;
+}
+async function removeTempFile(filePath, label) {
+  try {
+    await unlink(filePath);
+    logInfo(`Removed ${label} temp file: ${filePath}`);
+  } catch (error) {
+    const errorMsg = error instanceof Error ? error.message : String(error);
+    logError(`Failed to remove ${label} temp file: ${errorMsg}`);
+  }
+}
+function getProfileIdentifierFromProfile(profile) {
+  const pattern = /<key>PayloadIdentifier<\/key>\s*<string>([^<]+)<\/string>/g;
+  const matches = [];
+  let match = pattern.exec(profile);
+  while (match) {
+    matches.push(match[1].trim());
+    match = pattern.exec(profile);
+  }
+  if (matches.length === 0) {
+    return void 0;
+  }
+  return matches[matches.length - 1];
+}
+function resolveIosBinaryPath() {
+  const platform = process.platform;
+  const binaryName = platform === "win32" ? "ios.exe" : "ios";
+  return join7(getResourcesBinPath(), binaryName);
+}
+function isActivationSuccess(result) {
+  if (result.exitCode !== 0) {
+    return false;
+  }
+  if (result.logMessages.length === 0) {
+    return true;
+  }
+  const hasFatal = result.logMessages.some((log) => log.level === "error");
+  return !hasFatal;
+}
+
+// src/logic/iosCli.ts
+import { spawn as spawn2 } from "node:child_process";
+import { join as join8 } from "node:path";
+var ios;
+function iosCli() {
+  const iosBinaryPath = resolveIosBinaryPath();
+  if (!iosBinaryPath) {
+    throw new Error("iosBinaryPath is required. Provide iosBinaryPath or resourcesDir.");
+  }
+  return createIosCli(iosBinaryPath);
+}
+if (!ios) {
+  ios = iosCli();
+}
+function runIosCommand(iosBinaryPath, args) {
+  return new Promise((resolve2, reject) => {
+    const child = spawn2(iosBinaryPath, args, {
+      windowsHide: true,
+      stdio: ["ignore", "pipe", "pipe"]
+    });
+    let stdout = "";
+    let stderr = "";
+    child.stdout?.on("data", (data) => {
+      stdout += data.toString();
+    });
+    child.stderr?.on("data", (data) => {
+      stderr += data.toString();
+    });
+    child.on("error", (error) => {
+      reject(error);
+    });
+    child.on("close", (code) => {
+      console.log(`stdout: ${stdout}`);
+      console.log(`stderr: ${stderr}`);
+      console.log(`exitCode: ${code}`);
+      const output = stdout.split("\n").map((line) => line.trim()).filter((line) => line.length > 0).map((line) => safeParseJson(line)).filter((item) => Boolean(item));
+      const logMessages = stderr.split("\n").map((line) => line.trim()).filter((line) => line.length > 0).map((line) => safeParseJson(line)).filter((item) => Boolean(item)).map((lineJson) => ({
+        level: lineJson.level,
+        msg: lineJson.msg,
+        timestamp: lineJson.timestamp
+      }));
+      resolve2({
+        command: iosBinaryPath,
+        args,
+        output,
+        logMessages,
+        exitCode: code ?? 0
+      });
+    });
+  });
+}
+function safeParseJson(line) {
+  try {
+    const parsed = JSON.parse(line);
+    return parsed && typeof parsed === "object" ? parsed : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function isRecord(value) {
+  return Boolean(value) && typeof value === "object" && !Array.isArray(value);
+}
+function getStringField(record, key) {
+  const value = record[key];
+  return typeof value === "string" ? value : void 0;
+}
+function getBooleanField(record, key) {
+  const value = record[key];
+  return typeof value === "boolean" ? value : void 0;
+}
+function getNumberField(record, key) {
+  const value = record[key];
+  return typeof value === "number" ? value : void 0;
+}
+function getRecordField(record, key) {
+  const value = record[key];
+  return isRecord(value) ? value : void 0;
+}
+function toProfileManifest(record) {
+  if (!record) {
+    return void 0;
+  }
+  const description = getStringField(record, "Description");
   const isActive = getBooleanField(record, "IsActive");
   if (description === void 0 && isActive === void 0) {
     return void 0;
@@ -33562,7 +33977,7 @@ function createIosCli(iosBinaryPath) {
       return runIosCommand(iosBinaryPath, [
         "prepare",
         "--skip-all",
-        `--certfile=${join5(resourcesDir2, "cert.der")}`,
+        `--certfile=${join8(resourcesDir2, "cert.der")}`,
         `--orgname=${process.env.ORGANIZATION_NAME}`,
         "--udid",
         deviceId
@@ -33594,454 +34009,26 @@ function createIosCli(iosBinaryPath) {
     }
   };
 }
-var iosCli_default = ios;
 
-// src/logic/activationFlow.ts
-var DEFAULT_RETRIES = 150;
-var DEFAULT_RETRY_DELAY_MS = 1e3;
-var ActivationFlow = class {
-  iosCli;
-  mdmClientPromise;
-  constructor() {
+// src/logic/appleDeviceKit.ts
+var AppleDeviceKit = class {
+  constructor(udid, logicalPort) {
+    this.logicalPort = logicalPort;
+    this.deviceId = udid;
+    logInfo(
+      `AppleDeviceKit initialized for device: ${this.deviceId}, logical port: ${this.logicalPort}`
+    );
     const iosBinaryPath = resolveIosBinaryPath();
     if (!iosBinaryPath) {
       throw new Error("iosBinaryPath is required. Provide iosBinaryPath or resourcesDir.");
     }
     this.iosCli = createIosCli(iosBinaryPath);
-    this.mdmClientPromise = createMDMClient();
-  }
-  async run(udid) {
-    logTask(`Starting activation flow for device ${udid}`);
-    await this.retryActivateCommand("activate device", () => this.iosCli.activate(udid));
-    const wifiProfileIdentifier = await this.installWifiProfile(udid);
-    await this.installMdmProfile(udid);
-    await this.retryIosCommand("skip steps", () => this.iosCli.skipSteps(udid));
-    return () => this.removeWifiProfile(udid, wifiProfileIdentifier);
-  }
-  async installWifiProfile(udid) {
-    const wifiProfile = await generateWifiProfileFromEnv();
-    if (!wifiProfile) {
-      return void 0;
-    }
-    const wifiProfilePath = await saveWifiProfileToTemp(wifiProfile);
-    const wifiProfileIdentifier = getProfileIdentifierFromProfile(wifiProfile);
-    await this.retryIosCommand(
-      "install wifi profile",
-      () => this.iosCli.installProfile(udid, wifiProfilePath)
-    );
-    await removeTempFile(wifiProfilePath, "wifi profile");
-    return wifiProfileIdentifier;
-  }
-  async installMdmProfile(udid) {
-    const client = await this.requireMdmClient();
-    logTask("Installing MDM enrollment profile");
-    const enrollmentProfile = await this.retry(
-      "generate mdm enrollment profile",
-      () => client.generateEnrollmentProfile(udid),
-      (result) => result.status === "OK" && Boolean(result.profile)
-    );
-    if (!enrollmentProfile.profile) {
-      throw new Error("MDM enrollment profile missing from response");
-    }
-    const profilePath = await saveProfileToTemp(enrollmentProfile.profile, "mdm_profile");
-    await this.retryIosCommand(
-      "install mdm profile",
-      () => this.iosCli.installProfile(udid, profilePath)
-    );
-    await removeTempFile(profilePath, "mdm profile");
-  }
-  async removeWifiProfile(udid, profileIdentifier) {
-    if (!profileIdentifier) {
-      return;
-    }
-    logTask("Removing WiFi profile");
-    await this.retryIosCommand(
-      "remove wifi profile",
-      () => this.iosCli.removeProfile(udid, profileIdentifier)
-    );
-  }
-  async requireMdmClient() {
-    const client = await this.mdmClientPromise;
-    if (!client) {
-      throw new Error("MDM client not configured. Set mdm endpoint and credential path.");
-    }
-    return client;
-  }
-  async retryIosCommand(label, command) {
-    return this.retry(label, command, (result) => result.exitCode === 0);
-  }
-  async retryActivateCommand(label, command) {
-    return this.retry(label, command, (result) => isActivationSuccess(result));
-  }
-  async retry(label, command, isSuccess, retries = +(process.env.DEFAULT_RETRIES ?? DEFAULT_RETRIES), retryDelayMs = +(process.env.DEFAULT_RETRY_DELAY_MS ?? DEFAULT_RETRY_DELAY_MS)) {
-    for (let attempt = 0; attempt < retries; attempt += 1) {
-      try {
-        const result = await command();
-        if (isSuccess(result)) {
-          return result;
-        }
-      } catch (error) {
-        const errorMsg = error instanceof Error ? error.message : String(error);
-        logError(`${label} failed: ${errorMsg}`);
-      }
-      logInfo(`Retrying ${label}... ${attempt + 1} of ${retries}`);
-      await new Promise((resolve2) => setTimeout(resolve2, retryDelayMs));
-    }
-    throw new Error(`Failed to ${label} after ${retries} attempts`);
-  }
-};
-async function saveProfileToTemp(profile, prefix) {
-  const tempFilePath = join6(tmpdir(), `mce_${prefix}_${Date.now()}.mobileconfig`);
-  await writeFile(tempFilePath, profile, "utf-8");
-  logInfo(`Profile saved to: ${tempFilePath}`);
-  return tempFilePath;
-}
-async function removeTempFile(filePath, label) {
-  try {
-    await unlink(filePath);
-    logInfo(`Removed ${label} temp file: ${filePath}`);
-  } catch (error) {
-    const errorMsg = error instanceof Error ? error.message : String(error);
-    logError(`Failed to remove ${label} temp file: ${errorMsg}`);
-  }
-}
-function getProfileIdentifierFromProfile(profile) {
-  const pattern = /<key>PayloadIdentifier<\/key>\s*<string>([^<]+)<\/string>/g;
-  const matches = [];
-  let match = pattern.exec(profile);
-  while (match) {
-    matches.push(match[1].trim());
-    match = pattern.exec(profile);
-  }
-  if (matches.length === 0) {
-    return void 0;
-  }
-  return matches[matches.length - 1];
-}
-function resolveIosBinaryPath() {
-  const platform = process.platform;
-  const binaryName = platform === "win32" ? "ios.exe" : "ios";
-  return join6(getResourcesBinPath(), binaryName);
-}
-function isActivationSuccess(result) {
-  if (result.exitCode !== 0) {
-    return false;
-  }
-  if (result.logMessages.length === 0) {
-    return true;
-  }
-  const hasFatal = result.logMessages.some((log) => log.level === "error");
-  return !hasFatal;
-}
-
-// src/logic/dataParser.ts
-function parsePlistOutput(output) {
-  const result = {};
-  const lines = output.split("\n");
-  for (const line of lines) {
-    const colonIndex = line.indexOf(":");
-    if (colonIndex > 0) {
-      const key = line.substring(0, colonIndex).trim();
-      const value = line.substring(colonIndex + 1).trim();
-      result[key] = value;
-    }
-  }
-  return result;
-}
-function parseAppList(output) {
-  const apps = [];
-  const lines = output.trim().split("\n");
-  for (const line of lines) {
-    const match = line.match(/^([^,]+),\s*([^,]+),\s*"?([^"]+)"?/);
-    if (match) {
-      apps.push({
-        bundleId: match[1].trim(),
-        version: match[2].trim(),
-        displayName: match[3].trim(),
-        bundleVersion: ""
-      });
-    }
-  }
-  return apps;
-}
-
-// src/logic/actions/device.ts
-async function getDeviceInfo(udid) {
-  logTask(`Getting device info for ${udid}`);
-  const result = await runIDeviceTool("ideviceinfo", ["-u", udid]);
-  if (!result) {
-    throw new Error("Failed to get device info");
-  }
-  const props = parsePlistOutput(result.stdout);
-  return {
-    deviceName: props.DeviceName || "",
-    productType: props.ProductType || "",
-    productVersion: props.ProductVersion || "",
-    buildVersion: props.BuildVersion || "",
-    serialNumber: props.SerialNumber || "",
-    udid: props.UniqueDeviceID || udid,
-    wifiAddress: props.WiFiAddress || "",
-    bluetoothAddress: props.BluetoothAddress || "",
-    phoneNumber: props.PhoneNumber || "",
-    cpuArchitecture: props.CPUArchitecture || "",
-    hardwareModel: props.HardwareModel || "",
-    modelNumber: props.ModelNumber || "",
-    regionInfo: props.RegionInfo || "",
-    timeZone: props.TimeZone || "",
-    uniqueChipID: props.UniqueChipID || "",
-    isPaired: true
-    // If we can get info, device is paired
-  };
-}
-async function info(udid) {
-  logTask(`Getting device info for ${udid}`);
-  const iosBinaryPath = resolveIosBinaryPath();
-  if (!iosBinaryPath) {
-    throw new Error("iosBinaryPath is required. Provide iosBinaryPath or resourcesDir.");
-  }
-  const iosCli2 = createIosCli(iosBinaryPath);
-  const result = await iosCli2.info(udid);
-  if (!result) {
-    throw new Error("Failed to get device info");
-  }
-  return result.output[0];
-}
-async function wipeDevice(udid) {
-  if (!iosCli_default) {
-    throw new Error("ios is not initialized");
-  }
-  logTask(`Wiping device ${udid}`);
-  await iosCli_default.wipe(udid);
-}
-async function removeProfile(profileIdentifier, udid) {
-  if (!iosCli_default) {
-    throw new Error("ios is not initialized");
-  }
-  logTask(`Removing profile ${profileIdentifier} from device ${udid}`);
-  await iosCli_default.removeProfile(udid, profileIdentifier);
-}
-async function listProfiles(udid) {
-  if (!iosCli_default) {
-    throw new Error("ios is not initialized");
-  }
-  logTask(`Listing profiles for device ${udid}`);
-  return iosCli_default.listProfiles(udid);
-}
-
-// src/logic/actions/pair.ts
-async function isPaired(udid) {
-  logTask(`Checking pairing status for ${udid}`);
-  try {
-    const result = await runIDeviceTool("idevicepair", ["-u", udid, "validate"]);
-    if (!result) {
-      return false;
-    }
-    return result.stdout.toLowerCase().includes("success");
-  } catch {
-    return false;
-  }
-}
-async function trustDevice(udid, timeout2 = 6e4, onWaitingForTrust) {
-  logTask(`Trusting device ${udid}`);
-  if (await isPaired(udid)) {
-    logInfo(`Device ${udid} is already trusted`);
-    return true;
-  }
-  logInfo(`Initiating pairing for device ${udid}`);
-  try {
-    const pairResult = await pair(udid);
-    if (pairResult) {
-      logInfo(`Device ${udid} paired successfully`);
-      return true;
-    }
-  } catch (error) {
-    logError(`Pairing failed with ${udid}: ${error}`);
-  }
-  logInfo("Please accept the trust dialog on the device...");
-  onWaitingForTrust?.();
-  try {
-    await waitForPairing(udid, timeout2, 1e3);
-    logInfo(`Device ${udid} is now trusted`);
-    return true;
-  } catch {
-    logInfo(`Timeout waiting for trust acceptance on device ${udid}`);
-    return false;
-  }
-}
-async function waitForPairing(udid, timeout2 = 12e4, pollInterval = 1e3) {
-  logTask(`Waiting for pairing on device ${udid}`);
-  const startTime = Date.now();
-  while (Date.now() - startTime < timeout2) {
-    if (await isPaired(udid)) {
-      logInfo(`Device ${udid} is now paired`);
-      return true;
-    }
-    await new Promise((resolve2) => setTimeout(resolve2, pollInterval));
-  }
-  throw new Error(`Timeout waiting for device pairing after ${timeout2}ms`);
-}
-async function pair(udid) {
-  logTask(`Initiating pairing for device ${udid}`);
-  try {
-    const result = await runIDeviceTool("idevicepair", ["-u", udid, "pair"]);
-    if (!result) {
-      return false;
-    }
-    return result.stdout.toLowerCase().includes("success");
-  } catch (error) {
-    const errorMsg = error instanceof Error ? error.message : String(error);
-    if (errorMsg.includes("Please accept the trust dialog")) {
-      return false;
-    }
-    throw error;
-  }
-}
-async function unpair(udid) {
-  logTask(`Un-pairing device ${udid}`);
-  try {
-    const result = await runIDeviceTool("idevicepair", ["-u", udid, "unpair"]);
-    if (!result) {
-      return false;
-    }
-    return result.stdout.toLowerCase().includes("success");
-  } catch {
-    return false;
-  }
-}
-
-// src/logic/actions/install.ts
-async function installLocalApp(ipaPath, udid) {
-  logTask(`Installing app ${ipaPath} on device ${udid}`);
-  await runIDeviceTool("ideviceinstaller", ["-u", udid, "install", ipaPath]);
-}
-async function installManagedApp(ipaPath, udid, options) {
-  await installLocalApp(ipaPath, udid);
-  const client = await createMDMClient();
-  logTask("Installing app via MDM for management takeover");
-  if (client) {
-    client.installApp(udid, options);
-  }
-}
-async function uninstallApp(bundleId, udid) {
-  logTask(`Uninstalling app ${bundleId} from device ${udid}`);
-  if (!await isPaired(udid)) {
-    await waitForPairing(udid, 1e4);
-  }
-  await runIDeviceTool("ideviceinstaller", ["-u", udid, "uninstall", bundleId]);
-}
-async function listApps(udid) {
-  logTask(`Listing apps on device ${udid}`);
-  if (!await isPaired(udid)) {
-    await waitForPairing(udid, 1e4);
-  }
-  try {
-    const result = await runIDeviceTool("ideviceinstaller", ["-u", udid, "list"]);
-    if (!result) {
-      return [];
-    }
-    const { stdout } = result;
-    return parseAppList(stdout);
-  } catch {
-    return [];
-  }
-}
-async function isAppInstalled(bundleId, udid) {
-  logTask(`Checking if app ${bundleId} is installed on device ${udid}`);
-  const apps = await listApps(udid);
-  return apps.some((app) => app.bundleId === bundleId);
-}
-async function launchApp(bundleId, _args, udid) {
-  logTask(`Launching app ${bundleId} on device ${udid}`);
-}
-
-// src/logic/actions/proxy.ts
-import { spawn as spawn2 } from "node:child_process";
-import { join as join8 } from "node:path";
-function startPortForward(localPort, devicePort, udid, startupTimeout = 500) {
-  return new Promise((resolve2, reject) => {
-    logTask(`Starting port forward ${localPort} -> ${devicePort} for device ${udid}`);
-    const binPath = getResourcesBinPath();
-    const ext = process.platform === "win32" ? ".exe" : "";
-    const toolPath = binPath ? join8(binPath, `iproxy${ext}`) : `iproxy${ext}`;
-    const spawnOptions = {
-      windowsHide: true,
-      stdio: ["ignore", "pipe", "pipe"]
-    };
-    if (binPath) {
-      spawnOptions.cwd = binPath;
-    }
-    logInfo(`Spawning iproxy with path: ${toolPath}`);
-    logInfo(`Arguments: ${[localPort.toString(), devicePort.toString(), "-u", udid].join(" ")}`);
-    logInfo(`Options: ${JSON.stringify(spawnOptions)}`);
-    const child = spawn2(
-      toolPath,
-      [localPort.toString(), devicePort.toString(), "-u", udid],
-      spawnOptions
-    );
-    let hasResolved = false;
-    let stderrOutput = "";
-    child.stdout?.on("data", (data) => {
-      logTask(`${data.toString()}`);
-    });
-    child.stderr?.on("data", (data) => {
-      logError(`${data.toString()}`);
-      const msg = data.toString();
-      stderrOutput += msg;
-      if (msg.toLowerCase().includes("error") && !hasResolved) {
-        hasResolved = true;
-        child.kill();
-        reject(new Error(`Port forwarding failed: ${msg}`));
-      }
-    });
-    child.on("error", (error) => {
-      if (!hasResolved) {
-        hasResolved = true;
-        reject(new Error(`Failed to start iproxy: ${error.message}`));
-      }
-    });
-    child.on("exit", (code) => {
-      if (!hasResolved) {
-        hasResolved = true;
-        if (code !== 0 && code !== null) {
-          reject(new Error(`iproxy exited with code ${code}: ${stderrOutput}`));
-        }
-      }
-    });
-    setTimeout(() => {
-      if (!hasResolved) {
-        hasResolved = true;
-        logTask(`Port forward started: ${localPort} -> ${devicePort} for device ${udid}`);
-        resolve2({
-          result: {
-            localPort,
-            devicePort
-          },
-          process: child
-        });
-      }
-    }, startupTimeout);
-  });
-}
-function killPortForwardProcess(process2) {
-  if (process2 && !process2.killed) {
-    logTask("Killing port forward process");
-    process2.kill();
-  }
-}
-
-// src/logic/appleDeviceKit.ts
-var AppleDeviceKit = class {
-  constructor(udid, logicalPort) {
-    this.logicalPort = logicalPort;
-    this.deviceId = udid;
-    logInfo(
-      `AppleDeviceKit initialized for device: ${this.deviceId}, logical port: ${this.logicalPort}`
-    );
   }
   deviceId;
   proxyProcess = null;
   localDevicePort = null;
   isDisposed = false;
+  iosCli;
   static setResourcesDir(dir) {
     setResourcesDir(dir);
   }
@@ -34062,7 +34049,7 @@ var AppleDeviceKit = class {
   }
   async info() {
     this.ensureNotDisposed();
-    return info(this.deviceId);
+    return info(this.deviceId, this.iosCli);
   }
   /**
    * Check if device is paired/trusted with this computer
@@ -34214,13 +34201,13 @@ var AppleDeviceKit = class {
    * Wipe the device
    */
   async wipe() {
-    return wipeDevice(this.deviceId);
+    return wipeDevice(this.deviceId, this.iosCli);
   }
-  removeProfile(profileIdentifier) {
-    return removeProfile(profileIdentifier, this.deviceId);
+  async removeProfile(profileIdentifier) {
+    return removeProfile(profileIdentifier, this.deviceId, this.iosCli);
   }
-  listProfiles() {
-    return listProfiles(this.deviceId);
+  async listProfiles() {
+    return listProfiles(this.deviceId, this.iosCli);
   }
   /**
    * Activate the device using the activation flow.
@@ -34233,7 +34220,7 @@ var AppleDeviceKit = class {
    */
   async activate() {
     this.ensureNotDisposed();
-    const flow = new ActivationFlow();
+    const flow = new ActivationFlow(this.iosCli);
     return await flow.run(this.deviceId);
   }
   /**