@pmate/cli 0.36.1 → 0.37.1

package/README.md

@@ -313,3 +313,23 @@ A registration failure fails the release command, while preserving already uploa
 ### Android release signing
 
 `pmate service apk release <service> --env prod --variant release` resolves signing credentials from that service's server-side environment (host variables and local signing environment variables are not used). Configure `ANDROID_KEYSTORE_BASE64`, `ANDROID_KEYSTORE_PASSWORD`, `ANDROID_KEY_ALIAS`, and `ANDROID_KEY_PASSWORD` as Service Secrets, plus `ANDROID_SIGNING_CERT_SHA256` as the expected certificate fingerprint. Android SDK `apksigner` must be installed. The CLI signs the Gradle release APK and verifies its certificate before uploading; missing credentials, invalid signatures, or fingerprint mismatches stop publication. Keystore files use restricted temporary storage and are removed after signing. Existing apps must retain their compatible signing key. Debug builds keep their existing Gradle signing behavior.
+
+
+### iOS TestFlight builds
+
+On macOS with Xcode, a signed-in Apple developer account, valid signing profiles and an existing App Store Connect app:
+
+```sh
+# First build on this machine: import the highest Build already used in Apple.
+pmate service ios build td:time-duck-ios --scheme TimeDuck --team D9D59BE76S --last-build 2026101501
+# Subsequent builds on this machine:
+pmate service ios build td:time-duck-ios --scheme TimeDuck --team D9D59BE76S
+```
+
+`service ios build` archives Release and uploads directly to App Store Connect for TestFlight. It preserves the marketing version (for example `0.1.0`) and increments only the integer Build by one. It does not publish an App Store release. `uploaded-processing` means Apple accepted the upload; processing and TestFlight download availability require separate verification.
+
+Register an `ios` service with `repository` and `dir`. `--cwd` overrides the repository root; `--project` / `--workspace` paths are relative to the app directory. Exactly one discovered project/workspace is required unless explicitly selected. Always provide `--scheme`; `--team` overrides the project's signing team. `--json` returns version, Build, archive and log paths after upload.
+
+The first invocation requires `--last-build <highest-used-build>` (0 only for a new app). The next Build is one greater than the maximum of the project value, imported value and locally reserved sequence. A previous date-based Build therefore continues as that integer plus one. Import the current Apple maximum again after uploads outside this CLI or on another machine; this command does not query Apple build history. Do not lower or delete the sequence to reuse a number.
+
+Sequences, retained archives, derived data and logs live in `~/.pmate/ios-builds/`. Project/source version files are not changed. A bundle-level exclusive lock prevents simultaneous builds on the same machine; it does not coordinate different machines. Build/upload failures keep the reserved number and logs; retry consumes the next number. After an interrupted process, remove a leftover `.lock` file only after confirming no build is still running. Builds require automatic signing; resolve Apple account/certificate/profile errors in Xcode. Extension or App targets with fixed plist versions must produce matching archive metadata or the upload is stopped.

package/dist/index.d.ts

@@ -1003,6 +1003,19 @@ type ServiceCommandArgs = {
     dryRun: boolean;
     baseUrl?: string;
     json: boolean;
+} | {
+    type: Command.Service;
+    action: "ios-build";
+    namespace: string;
+    name: string;
+    scheme: string;
+    project?: string;
+    workspace?: string;
+    team?: string;
+    cwd?: string;
+    lastBuild?: number;
+    baseUrl?: string;
+    json: boolean;
 } | {
     type: Command.Service;
     action: "apk-release";

package/dist/index.js

@@ -8818,8 +8818,8 @@ __export(index_exports, {
   parseCommandArgs: () => parseCommandArgs
 });
 module.exports = __toCommonJS(index_exports);
-var import_node_fs28 = require("fs");
-var import_node_path33 = __toESM(require("path"));
+var import_node_fs29 = require("fs");
+var import_node_path34 = __toESM(require("path"));
 
 // src/managedSession.ts
 var import_node_fs = require("fs");
@@ -14267,9 +14267,9 @@ ${indent}\`\`\``;
   static richTextToPlain(richText) {
     return richText.map((item) => item.plain_text ?? item.text?.content ?? "").join("").trim();
   }
-  static async requestJson(path33, init) {
+  static async requestJson(path34, init) {
     const token = this.getToken();
-    const response = await fetch(`${this.baseUrl}${path33}`, {
+    const response = await fetch(`${this.baseUrl}${path34}`, {
       method: init.method,
       headers: {
         Authorization: `Bearer ${token}`,
@@ -16974,8 +16974,8 @@ function descriptorPathSegments(descriptor) {
   return ["chains", normalized.chain, "namespaces", normalized.ns, normalized.kind, normalized.name];
 }
 function buildPathUrl(baseUrl, pathSegments, query) {
-  const path33 = `/${pathSegments.map((segment) => encodeURIComponent(segment)).join("/")}`;
-  const url = new URL(path33, baseUrl);
+  const path34 = `/${pathSegments.map((segment) => encodeURIComponent(segment)).join("/")}`;
+  const url = new URL(path34, baseUrl);
   if (query) {
     for (const [key, value] of Object.entries(query)) {
       url.searchParams.set(key, String(value));
@@ -18404,12 +18404,19 @@ function readNamespaceFromPayload(payload) {
 }
 
 // src/commands/ServiceCommandHandler.ts
-var import_node_fs24 = require("fs");
+var import_node_fs25 = require("fs");
 var import_promises5 = require("fs/promises");
-var import_node_path29 = __toESM(require("path"));
-var import_node_child_process12 = require("child_process");
+var import_node_path30 = __toESM(require("path"));
+var import_node_child_process13 = require("child_process");
 var import_promises6 = require("readline/promises");
 
+// src/services/IosBuildService.ts
+var import_node_child_process11 = require("child_process");
+var import_node_crypto7 = require("crypto");
+var import_node_fs23 = require("fs");
+var import_node_os12 = __toESM(require("os"));
+var import_node_path28 = __toESM(require("path"));
+
 // src/services/AndroidApkReleaseService.ts
 var import_node_child_process10 = require("child_process");
 var import_node_crypto6 = require("crypto");
@@ -18900,6 +18907,153 @@ function capitalize(value) {
   return value.slice(0, 1).toUpperCase() + value.slice(1);
 }
 
+// src/services/IosBuildService.ts
+function iosBuildInteger(value) {
+  if (!/^(0|[1-9]\d*)$/.test(String(value)) || !Number.isSafeInteger(Number(value))) {
+    throw new Error(`iOS Build must be a non-negative safe integer: ${String(value)}`);
+  }
+  return Number(value);
+}
+async function runXcode(args, cwd, logPath) {
+  return new Promise((resolve, reject) => {
+    const child = (0, import_node_child_process11.spawn)("xcodebuild", args, { cwd, stdio: ["ignore", "pipe", "pipe"] });
+    let output = "";
+    child.stdout.on("data", (chunk) => {
+      if (args.includes("-json") || args.includes("-version")) output += chunk.toString();
+      (0, import_node_fs23.appendFileSync)(logPath, chunk);
+    });
+    child.stderr.on("data", (chunk) => (0, import_node_fs23.appendFileSync)(logPath, chunk));
+    child.on("error", reject);
+    child.on("close", (code) => code === 0 ? resolve(output) : reject(new Error(`xcodebuild failed (${code}); see ${logPath}`)));
+  });
+}
+var IosBuildService = class {
+  constructor(deps = {}) {
+    this.deps = deps;
+  }
+  async build(service, options) {
+    if ((this.deps.platform ?? process.platform) !== "darwin") throw new Error("iOS TestFlight builds require macOS and Xcode");
+    if (!("type" in service) || service.type !== "ios") throw new Error("iOS build requires an ios service");
+    if (!options.scheme?.trim() || options.scheme.startsWith("-")) throw new Error("An explicit --scheme is required");
+    if (options.project && options.workspace) throw new Error("Use only one of --project or --workspace");
+    if (options.team && !/^[A-Z0-9]{10}$/.test(options.team)) throw new Error("Invalid Apple team ID");
+    if (options.lastBuild !== void 0) iosBuildInteger(options.lastBuild);
+    const repository = service.repository ?? service.mobile?.repository;
+    const dir = service.dir ?? service.mobile?.dir;
+    if (!dir || !repository && !options.cwd) throw new Error("iOS service requires repository and dir, or --cwd and dir");
+    const repoRoot = options.cwd ? import_node_path28.default.resolve(options.cwd) : resolveRepositoryLocalRoot(repository);
+    const appDir = import_node_path28.default.resolve(repoRoot, dir);
+    if (!(0, import_node_fs23.existsSync)(appDir)) throw new Error(`iOS app dir not found: ${appDir}`);
+    const explicit = options.project ?? options.workspace;
+    const candidates = explicit ? [import_node_path28.default.resolve(appDir, explicit)] : (0, import_node_fs23.readdirSync)(appDir).filter((name) => /\.(xcodeproj|xcworkspace)$/.test(name)).map((name) => import_node_path28.default.join(appDir, name));
+    if (candidates.length !== 1 || !(0, import_node_fs23.existsSync)(candidates[0])) throw new Error("Specify exactly one existing --project or --workspace; project discovery is ambiguous or empty");
+    const project = candidates[0];
+    const expectedExtension = options.workspace ? ".xcworkspace" : options.project ? ".xcodeproj" : import_node_path28.default.extname(project);
+    if (![".xcodeproj", ".xcworkspace"].includes(expectedExtension) || import_node_path28.default.extname(project) !== expectedExtension) throw new Error("Invalid Xcode project/workspace extension");
+    const root = this.deps.stateRoot ?? import_node_path28.default.join(import_node_os12.default.homedir(), ".pmate", "ios-builds");
+    (0, import_node_fs23.mkdirSync)(root, { recursive: true, mode: 448 });
+    const preflightLog = import_node_path28.default.join(root, `preflight-${process.pid}-${Date.now()}.log`);
+    const run = this.deps.run ?? runXcode;
+    await run(["-version"], appDir, preflightLog);
+    const common2 = [expectedExtension === ".xcworkspace" ? "-workspace" : "-project", project, "-scheme", options.scheme, "-configuration", "Release", "-destination", "generic/platform=iOS"];
+    if (options.team) common2.push(`DEVELOPMENT_TEAM=${options.team}`);
+    const settings = JSON.parse(await run([...common2, "-showBuildSettings", "-json"], appDir, preflightLog));
+    const apps = settings.filter((item) => item.buildSettings.PRODUCT_TYPE === "com.apple.product-type.application");
+    if (apps.length !== 1) throw new Error("Scheme must contain exactly one application target");
+    const cfg = apps[0].buildSettings;
+    const bundleId = cfg.PRODUCT_BUNDLE_IDENTIFIER;
+    const version = cfg.MARKETING_VERSION;
+    const team = cfg.DEVELOPMENT_TEAM;
+    if (!bundleId || !/^\d+\.\d+(?:\.\d+)?$/.test(version ?? "") || !/^[A-Z0-9]{10}$/.test(team ?? "")) throw new Error("Missing or invalid bundle ID, MARKETING_VERSION or signing team; use --team if needed");
+    if (service.mobile && "bundleId" in service.mobile && service.mobile.bundleId !== bundleId) throw new Error("Service bundle ID does not match application target");
+    const currentBuild = iosBuildInteger(cfg.CURRENT_PROJECT_VERSION);
+    const key = (0, import_node_crypto7.createHash)("sha256").update(bundleId).digest("hex");
+    const statePath = import_node_path28.default.join(root, `${key}.json`);
+    const lockPath = import_node_path28.default.join(root, `${key}.lock`);
+    let lock;
+    try {
+      lock = (0, import_node_fs23.openSync)(lockPath, "wx", 384);
+    } catch (error) {
+      if (error.code === "EEXIST") throw new Error(`iOS build already locked: ${lockPath}. Remove only after confirming no build is running.`);
+      throw error;
+    }
+    try {
+      (0, import_node_fs23.writeFileSync)(lock, JSON.stringify({ pid: process.pid, bundleId }));
+      const previous = (0, import_node_fs23.existsSync)(statePath) ? JSON.parse((0, import_node_fs23.readFileSync)(statePath, "utf8")) : void 0;
+      if (previous && previous.bundleId !== bundleId) throw new Error("iOS build state bundle ID mismatch");
+      if (!previous && options.lastBuild === void 0) throw new Error("First build on this machine requires --last-build <highest Apple build>; use 0 only for a new app. Import again after external uploads or changing machines.");
+      const build = Math.max(currentBuild, previous ? iosBuildInteger(previous.build) : 0, options.lastBuild ?? 0) + 1;
+      iosBuildInteger(build);
+      const buildDir = import_node_path28.default.join(root, key, `${version}-${build}`);
+      (0, import_node_fs23.mkdirSync)(buildDir, { recursive: true, mode: 448 });
+      const archivePath = import_node_path28.default.join(buildDir, "App.xcarchive");
+      const logPath = import_node_path28.default.join(buildDir, "build.log");
+      const state = { bundleId, version, build, status: "reserved", archivePath, logPath };
+      const persist = () => {
+        const temp = `${statePath}.${process.pid}.tmp`;
+        (0, import_node_fs23.writeFileSync)(temp, JSON.stringify(state, null, 2) + "\n", { mode: 384 });
+        (0, import_node_fs23.renameSync)(temp, statePath);
+      };
+      persist();
+      (0, import_node_fs23.writeFileSync)(logPath, `Service ${service.id}: ${bundleId} ${version} (${build})
+Preflight log: ${preflightLog}
+`, { mode: 384 });
+      try {
+        await run([...common2, `CURRENT_PROJECT_VERSION=${build}`, `MARKETING_VERSION=${version}`, "-archivePath", archivePath, "-derivedDataPath", import_node_path28.default.join(buildDir, "DerivedData"), "-allowProvisioningUpdates", "archive"], appDir, logPath);
+        const applications = import_node_path28.default.join(archivePath, "Products", "Applications");
+        const builtApps = (0, import_node_fs23.readdirSync)(applications).filter((name) => name.endsWith(".app"));
+        if (builtApps.length !== 1) throw new Error("Archive must contain exactly one application");
+        const plist = (0, import_node_fs23.readFileSync)(import_node_path28.default.join(applications, builtApps[0], "Info.plist"));
+        const info = await (this.deps.readPlist ?? readPlist)(plist);
+        if (info.CFBundleIdentifier !== bundleId || info.CFBundleShortVersionString !== version || String(info.CFBundleVersion) !== String(build)) throw new Error("Archive metadata does not match requested bundle, version and Build; upload stopped");
+        const exportPlist = import_node_path28.default.join(buildDir, "ExportOptions.plist");
+        (0, import_node_fs23.writeFileSync)(exportPlist, `<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><dict><key>method</key><string>app-store-connect</string><key>destination</key><string>upload</string><key>teamID</key><string>${team}</string><key>signingStyle</key><string>automatic</string><key>manageAppVersionAndBuildNumber</key><false/><key>uploadSymbols</key><true/></dict></plist>`);
+        await run(["-exportArchive", "-archivePath", archivePath, "-exportOptionsPlist", exportPlist, "-exportPath", import_node_path28.default.join(buildDir, "export"), "-allowProvisioningUpdates"], appDir, logPath);
+        state.status = "uploaded-processing";
+        persist();
+        return { serviceId: service.id, bundleId, version, build, status: "uploaded-processing", archivePath, logPath };
+      } catch (error) {
+        state.status = "failed";
+        persist();
+        (0, import_node_fs23.appendFileSync)(logPath, `
+${String(error)}
+`);
+        throw new Error(`iOS Build ${build} failed; sequence reserved. See ${logPath}. ${String(error)}`);
+      }
+    } finally {
+      (0, import_node_fs23.closeSync)(lock);
+      (0, import_node_fs23.unlinkSync)(lockPath);
+    }
+  }
+};
+async function readPlist(input) {
+  return new Promise((resolve, reject) => {
+    const child = (0, import_node_child_process11.spawn)("plutil", ["-convert", "json", "-o", "-", "--", "-"], { stdio: ["pipe", "pipe", "pipe"] });
+    let output = "";
+    let error = "";
+    child.stdout.on("data", (chunk) => {
+      output += chunk.toString();
+    });
+    child.stderr.on("data", (chunk) => {
+      error += chunk.toString();
+    });
+    child.on("error", reject);
+    child.on("close", (code) => {
+      if (code !== 0) {
+        reject(new Error(`Cannot read archive plist: ${error}`));
+        return;
+      }
+      try {
+        resolve(JSON.parse(output));
+      } catch (err2) {
+        reject(err2);
+      }
+    });
+    child.stdin.on("error", reject);
+    child.stdin.end(input);
+  });
+}
+
 // src/services/DeveloperLogsClient.ts
 init_sessionStore();
 init_namespacedRef();
@@ -18987,10 +19141,10 @@ async function requestDeveloperLogTool(tool, params, fetcher = fetch, delegate)
 }
 
 // src/services/ServiceRuntimeRunner.ts
-var import_node_fs23 = require("fs");
-var import_node_os12 = __toESM(require("os"));
-var import_node_path28 = __toESM(require("path"));
-var import_node_child_process11 = require("child_process");
+var import_node_fs24 = require("fs");
+var import_node_os13 = __toESM(require("os"));
+var import_node_path29 = __toESM(require("path"));
+var import_node_child_process12 = require("child_process");
 var import_node_readline = require("readline");
 var import_chalk3 = __toESM(require("chalk"));
 var import_dotenv = require("dotenv");
@@ -19489,14 +19643,14 @@ var ServiceRuntimeRunner = class {
   }
   resolveRepoRoot(service, cwd) {
     if (cwd) {
-      return import_node_path28.default.resolve(process.cwd(), cwd);
+      return import_node_path29.default.resolve(process.cwd(), cwd);
     }
     const repository = this.getType(service) === "vite" || this.getType(service) === "static" ? this.getRepoStaticSite(service).repository.trim() : this.getType(service) === "fc" ? this.getFc(service).repository?.trim() : this.getType(service) === "ios" || this.getType(service) === "android" ? void 0 : this.getNetwork(service).repository?.trim();
     if (repository) {
       const repoName = repository.replace(/\/+$/, "").split("/").pop()?.replace(/\.git$/i, "");
       if (repoName) {
-        const candidate = import_node_path28.default.join(import_node_os12.default.homedir(), "dev", "pmate", repoName);
-        if ((0, import_node_fs23.existsSync)(candidate)) {
+        const candidate = import_node_path29.default.join(import_node_os13.default.homedir(), "dev", "pmate", repoName);
+        if ((0, import_node_fs24.existsSync)(candidate)) {
           return candidate;
         }
       }
@@ -19509,13 +19663,13 @@ var ServiceRuntimeRunner = class {
     if (!dir) {
       throw new Error(`Missing service dir for ${service.id}`);
     }
-    return import_node_path28.default.resolve(repoRoot, dir);
+    return import_node_path29.default.resolve(repoRoot, dir);
   }
   async deployVite(service, options) {
     this.assertDeployableStaticSite(service);
     const appDir = this.resolveLocalDir(service, options.cwd);
-    const packageJsonPath = import_node_path28.default.join(appDir, "package.json");
-    if (!(0, import_node_fs23.existsSync)(packageJsonPath)) {
+    const packageJsonPath = import_node_path29.default.join(appDir, "package.json");
+    if (!(0, import_node_fs24.existsSync)(packageJsonPath)) {
       throw new Error(`No package.json found at ${packageJsonPath}`);
     }
     const pkg2 = this.loadPackageJson(packageJsonPath);
@@ -19530,8 +19684,8 @@ var ServiceRuntimeRunner = class {
       this.resolveRepoRoot(service, options.cwd),
       buildEnv
     );
-    const distDir = import_node_path28.default.join(appDir, "dist");
-    if (!(0, import_node_fs23.existsSync)(distDir)) {
+    const distDir = import_node_path29.default.join(appDir, "dist");
+    if (!(0, import_node_fs24.existsSync)(distDir)) {
       throw new Error(`No dist directory found at ${distDir}`);
     }
     const site = this.getSite(service);
@@ -19544,8 +19698,8 @@ var ServiceRuntimeRunner = class {
   async deployStatic(service, options) {
     this.assertDeployableStaticSite(service);
     const appDir = this.resolveLocalDir(service, options.cwd);
-    const srcDir = import_node_path28.default.join(appDir, "src");
-    if (!(0, import_node_fs23.existsSync)(srcDir)) {
+    const srcDir = import_node_path29.default.join(appDir, "src");
+    if (!(0, import_node_fs24.existsSync)(srcDir)) {
       throw new Error(`No src directory found at ${srcDir}`);
     }
     const site = this.getSite(service);
@@ -19579,8 +19733,8 @@ var ServiceRuntimeRunner = class {
     this.validateFcConfig(service, fc);
     const repoRoot = this.resolveRepoRoot(service, options.cwd);
     const appDir = this.resolveLocalDir(service, options.cwd);
-    const packageJsonPath = import_node_path28.default.join(appDir, "package.json");
-    if (!(0, import_node_fs23.existsSync)(packageJsonPath)) {
+    const packageJsonPath = import_node_path29.default.join(appDir, "package.json");
+    if (!(0, import_node_fs24.existsSync)(packageJsonPath)) {
       throw new Error(`No package.json found at ${packageJsonPath}`);
     }
     const pkg2 = this.loadPackageJson(packageJsonPath);
@@ -19633,15 +19787,15 @@ var ServiceRuntimeRunner = class {
     const repoRoot = this.resolveRepoRoot(service, options.cwd);
     const appDir = this.resolveLocalDir(service, options.cwd);
     await this.ensurePnpmWorkspaceRoot(repoRoot);
-    const configPath = import_node_path28.default.join(appDir, fc.configFile ?? "s.yaml");
-    if (!(0, import_node_fs23.existsSync)(configPath)) {
+    const configPath = import_node_path29.default.join(appDir, fc.configFile ?? "s.yaml");
+    if (!(0, import_node_fs24.existsSync)(configPath)) {
       throw new Error(`Missing FC config file at ${configPath}`);
     }
-    const packageJsonPath = import_node_path28.default.join(appDir, "package.json");
-    if (!(0, import_node_fs23.existsSync)(packageJsonPath)) {
+    const packageJsonPath = import_node_path29.default.join(appDir, "package.json");
+    if (!(0, import_node_fs24.existsSync)(packageJsonPath)) {
       throw new Error(`No package.json found at ${packageJsonPath}`);
     }
-    const rawConfig = (0, import_node_fs23.readFileSync)(configPath, "utf8");
+    const rawConfig = (0, import_node_fs24.readFileSync)(configPath, "utf8");
     if (!rawConfig.includes(fc.functionName)) {
       throw new Error(`FC config ${configPath} does not mention functionName ${fc.functionName}`);
     }
@@ -19931,7 +20085,7 @@ var ServiceRuntimeRunner = class {
       const serverAddress = await resolveServerAddress(server);
       const templateName = exposeType === "websocket" ? "nginx.ws.template" : exposeType === "mixed" ? "nginx.mixed.template" : "nginx.rest.template";
       const templatePath = this.resolveTemplatePath(templateName);
-      const template = (0, import_node_fs23.readFileSync)(templatePath, "utf8");
+      const template = (0, import_node_fs24.readFileSync)(templatePath, "utf8");
       const host = `${subdomain}.${("domain" in network ? network.domain?.trim() : void 0) || "pmate.chat"}`;
       const rendered = template.replace(/\$\{\{PORT\}\}/g, String(port)).replace(/\$\{\{HOSTS\}\}/g, host).replace(/\$\{\{HOST\}\}/g, host);
       const remotePath = `/etc/nginx/sites-enabled/${subdomain}.conf`;
@@ -19963,11 +20117,11 @@ var ServiceRuntimeRunner = class {
     }
     if (config.ensurePackageJson) {
       const appDir = this.resolveLocalDir(service, options.cwd);
-      const packageJsonPath = import_node_path28.default.join(appDir, "package.json");
-      if (!(0, import_node_fs23.existsSync)(packageJsonPath)) {
+      const packageJsonPath = import_node_path29.default.join(appDir, "package.json");
+      if (!(0, import_node_fs24.existsSync)(packageJsonPath)) {
         throw new Error(`Missing package.json at ${packageJsonPath}`);
       }
-      const pkgStat = (0, import_node_fs23.statSync)(packageJsonPath);
+      const pkgStat = (0, import_node_fs24.statSync)(packageJsonPath);
       if (!pkgStat.isFile()) {
         throw new Error(`package.json is not a file at ${packageJsonPath}`);
       }
@@ -20378,9 +20532,9 @@ var ServiceRuntimeRunner = class {
     return tokens;
   }
   readPathValue(source, pathExpr) {
-    const path33 = pathExpr.split(".").map((segment) => segment.trim()).filter(Boolean);
+    const path34 = pathExpr.split(".").map((segment) => segment.trim()).filter(Boolean);
     let cursor = source;
-    for (const segment of path33) {
+    for (const segment of path34) {
       if (!cursor || typeof cursor !== "object" || Array.isArray(cursor)) {
         return void 0;
       }
@@ -20423,12 +20577,12 @@ var ServiceRuntimeRunner = class {
   }
   resolveTemplatePath(templateName) {
     const candidates = [
-      import_node_path28.default.join(__dirname, "..", "templates", templateName),
-      import_node_path28.default.join(__dirname, "..", "src", "templates", templateName),
-      import_node_path28.default.join(__dirname, "templates", templateName)
+      import_node_path29.default.join(__dirname, "..", "templates", templateName),
+      import_node_path29.default.join(__dirname, "..", "src", "templates", templateName),
+      import_node_path29.default.join(__dirname, "templates", templateName)
     ];
     for (const candidate of candidates) {
-      if ((0, import_node_fs23.existsSync)(candidate)) {
+      if ((0, import_node_fs24.existsSync)(candidate)) {
         return candidate;
       }
     }
@@ -20437,7 +20591,7 @@ var ServiceRuntimeRunner = class {
   writeRemoteConfig(server, content, remotePath) {
     return new Promise((resolve, reject) => {
       const target = `pmate@${server}`;
-      const child = (0, import_node_child_process11.spawn)("ssh", [target, "sudo", "tee", remotePath], {
+      const child = (0, import_node_child_process12.spawn)("ssh", [target, "sudo", "tee", remotePath], {
         stdio: ["pipe", "inherit", "inherit"]
       });
       child.on("error", reject);
@@ -20452,7 +20606,7 @@ var ServiceRuntimeRunner = class {
   reloadNginx(server) {
     return new Promise((resolve, reject) => {
       const target = `pmate@${server}`;
-      const child = (0, import_node_child_process11.spawn)("ssh", [target, "sudo", "nginx", "-s", "reload"], {
+      const child = (0, import_node_child_process12.spawn)("ssh", [target, "sudo", "nginx", "-s", "reload"], {
         stdio: ["ignore", "inherit", "inherit"]
       });
       child.on("error", reject);
@@ -20460,7 +20614,7 @@ var ServiceRuntimeRunner = class {
     });
   }
   loadPackageJson(packageJsonPath) {
-    const raw = (0, import_node_fs23.readFileSync)(packageJsonPath, "utf8");
+    const raw = (0, import_node_fs24.readFileSync)(packageJsonPath, "utf8");
     const parsed = JSON.parse(raw);
     if (!parsed || typeof parsed !== "object") {
       throw new Error(`Invalid package.json at ${packageJsonPath}`);
@@ -20469,7 +20623,7 @@ var ServiceRuntimeRunner = class {
   }
   writePackageJson(packageJsonPath, data) {
     const serialized = JSON.stringify(data, null, 2);
-    (0, import_node_fs23.writeFileSync)(packageJsonPath, `${serialized}
+    (0, import_node_fs24.writeFileSync)(packageJsonPath, `${serialized}
 `, "utf8");
   }
   validateFcConfig(service, fc) {
@@ -20496,8 +20650,8 @@ var ServiceRuntimeRunner = class {
     }
   }
   async ensurePnpmWorkspaceRoot(repoRoot) {
-    const workspacePath = import_node_path28.default.join(repoRoot, "pnpm-workspace.yaml");
-    if (!(0, import_node_fs23.existsSync)(workspacePath)) {
+    const workspacePath = import_node_path29.default.join(repoRoot, "pnpm-workspace.yaml");
+    if (!(0, import_node_fs24.existsSync)(workspacePath)) {
       throw new Error(`Missing pnpm-workspace.yaml at ${workspacePath}`);
     }
   }
@@ -20571,16 +20725,16 @@ var ServiceRuntimeRunner = class {
     if (!privateKeyPath) {
       throw new Error("Missing ssl.prv in ~/.pmate/config.yaml.");
     }
-    if (!(0, import_node_fs23.existsSync)(certificatePath)) {
+    if (!(0, import_node_fs24.existsSync)(certificatePath)) {
       throw new Error(`SSL certificate file not found: ${certificatePath}`);
     }
-    if (!(0, import_node_fs23.existsSync)(privateKeyPath)) {
+    if (!(0, import_node_fs24.existsSync)(privateKeyPath)) {
       throw new Error(`SSL private key file not found: ${privateKeyPath}`);
     }
     return {
       certName: host,
-      certificate: (0, import_node_fs23.readFileSync)(certificatePath, "utf8"),
-      privateKey: (0, import_node_fs23.readFileSync)(privateKeyPath, "utf8")
+      certificate: (0, import_node_fs24.readFileSync)(certificatePath, "utf8"),
+      privateKey: (0, import_node_fs24.readFileSync)(privateKeyPath, "utf8")
     };
   }
   resolveFcProtocol(fc, certConfig) {
@@ -20639,7 +20793,7 @@ var ServiceRuntimeRunner = class {
   }
   runCommandWithEnv(command, args, cwd, env) {
     return new Promise((resolve, reject) => {
-      const child = (0, import_node_child_process11.spawn)(command, args, {
+      const child = (0, import_node_child_process12.spawn)(command, args, {
         cwd,
         stdio: "inherit",
         env: { ...process.env, ...env ?? {} }
@@ -20650,7 +20804,7 @@ var ServiceRuntimeRunner = class {
   }
   runShellCommand(command, cwd, env) {
     return new Promise((resolve, reject) => {
-      const child = (0, import_node_child_process11.spawn)(command, [], {
+      const child = (0, import_node_child_process12.spawn)(command, [], {
         cwd,
         stdio: "inherit",
         shell: true,
@@ -20661,10 +20815,10 @@ var ServiceRuntimeRunner = class {
     });
   }
   runRemoteCommand(server, command) {
-    if (server === "local") return this.runCommandWithEnv("bash", ["-c", command], import_node_os12.default.homedir());
+    if (server === "local") return this.runCommandWithEnv("bash", ["-c", command], import_node_os13.default.homedir());
     return new Promise((resolve, reject) => {
       const target = `pmate@${server}`;
-      const child = (0, import_node_child_process11.spawn)("ssh", [target, "bash -ls"], { stdio: ["pipe", "inherit", "inherit"] });
+      const child = (0, import_node_child_process12.spawn)("ssh", [target, "bash -ls"], { stdio: ["pipe", "inherit", "inherit"] });
       child.stdin.on("error", reject);
       child.stdin.end(`${command}
 `);
@@ -20955,6 +21109,16 @@ var ServiceCommandHandler = class {
         );
         return;
       }
+      case "ios-build": {
+        const record = await registry.getService(args.namespace, args.name);
+        const result = await new IosBuildService().build(record, args);
+        if (args.json) this.renderJson(result, true);
+        else {
+          ui.success(`Uploaded iOS ${result.version} (${result.build}); Apple processing, TestFlight availability not yet verified`);
+          this.renderJson(result, true);
+        }
+        return;
+      }
       case "apk-release": {
         const record = await registry.getService(args.namespace, args.name);
         const apkRelease = new AndroidApkReleaseService(registry);
@@ -21057,7 +21221,7 @@ var ServiceCommandHandler = class {
             format: "dotenv"
           }
         );
-        const outputPath = import_node_path29.default.resolve(process.cwd(), args.output);
+        const outputPath = import_node_path30.default.resolve(process.cwd(), args.output);
         await (0, import_promises5.writeFile)(outputPath, payload.content, "utf8");
         ui.success(`Wrote env file for ${args.appId} to ${outputPath}`);
         this.renderJson({ ...payload, output: outputPath }, args.json);
@@ -21283,11 +21447,11 @@ var ServiceCommandHandler = class {
     return (baseUrl || process.env.PMATE_APPS_API_BASE_URL || "https://apps-api.pmate.chat").replace(/\/+$/, "");
   }
   readJsonFile(filePath) {
-    const absolutePath = import_node_path29.default.resolve(process.cwd(), filePath);
-    if (!(0, import_node_fs24.existsSync)(absolutePath)) {
+    const absolutePath = import_node_path30.default.resolve(process.cwd(), filePath);
+    if (!(0, import_node_fs25.existsSync)(absolutePath)) {
       throw new Error(`JSON file not found: ${absolutePath}`);
     }
-    const raw = (0, import_node_fs24.readFileSync)(absolutePath, "utf8");
+    const raw = (0, import_node_fs25.readFileSync)(absolutePath, "utf8");
     try {
       return JSON.parse(raw);
     } catch (error) {
@@ -21811,7 +21975,7 @@ var ServiceCommandHandler = class {
   removeRemoteConfig(server, remotePath) {
     return new Promise((resolve, reject) => {
       const target = `pmate@${server}`;
-      const child = (0, import_node_child_process12.spawn)("ssh", [target, "sudo", "rm", "-f", remotePath], {
+      const child = (0, import_node_child_process13.spawn)("ssh", [target, "sudo", "rm", "-f", remotePath], {
         stdio: ["ignore", "inherit", "inherit"]
       });
       child.on("error", (error) => {
@@ -21829,7 +21993,7 @@ var ServiceCommandHandler = class {
   reloadNginx(server) {
     return new Promise((resolve, reject) => {
       const target = `pmate@${server}`;
-      const child = (0, import_node_child_process12.spawn)("ssh", [target, "sudo", "nginx", "-s", "reload"], {
+      const child = (0, import_node_child_process13.spawn)("ssh", [target, "sudo", "nginx", "-s", "reload"], {
         stdio: ["ignore", "inherit", "inherit"]
       });
       child.on("error", (error) => {
@@ -21902,9 +22066,9 @@ function sleep3(ms) {
 }
 
 // src/commands/VercelCommandHandler.ts
-var import_node_child_process13 = require("child_process");
+var import_node_child_process14 = require("child_process");
 var import_node_util = require("util");
-var execFileAsync = (0, import_node_util.promisify)(import_node_child_process13.execFile);
+var execFileAsync = (0, import_node_util.promisify)(import_node_child_process14.execFile);
 function parseDeploymentTimestamp(deployment) {
   const candidates = [deployment.createdAt, deployment.readyAt, deployment.ready];
   for (const value of candidates) {
@@ -22095,9 +22259,9 @@ var RoleCommandHandler = class {
 };
 
 // src/commands/AccountCommandHandler.ts
-var import_node_fs25 = require("fs");
-var import_node_crypto7 = require("crypto");
-var import_node_path30 = __toESM(require("path"));
+var import_node_fs26 = require("fs");
+var import_node_crypto8 = require("crypto");
+var import_node_path31 = __toESM(require("path"));
 init_sessionStore();
 var AccountCommandHandler = class {
   async handle(args) {
@@ -22105,9 +22269,9 @@ var AccountCommandHandler = class {
       case "bot-keygen": {
         const keyFile = this.generateBotKeyFile(args.app, args.name);
         const outPath = args.out ? this.resolveFilePath(args.out) : this.resolveDefaultBotKeyPath(args.app, args.name);
-        (0, import_node_fs25.mkdirSync)(import_node_path30.default.dirname(outPath), { recursive: true });
-        (0, import_node_fs25.writeFileSync)(outPath, JSON.stringify(keyFile, null, 2), { mode: 384 });
-        (0, import_node_fs25.chmodSync)(outPath, 384);
+        (0, import_node_fs26.mkdirSync)(import_node_path31.default.dirname(outPath), { recursive: true });
+        (0, import_node_fs26.writeFileSync)(outPath, JSON.stringify(keyFile, null, 2), { mode: 384 });
+        (0, import_node_fs26.chmodSync)(outPath, 384);
         if (!args.json) {
           ui.success(`Bot key saved to ${outPath}`);
         }
@@ -22667,10 +22831,10 @@ var AccountCommandHandler = class {
       throw new Error("Missing visible apps input");
     }
     const absolutePath = this.resolveFilePath(args.filePath);
-    if (!(0, import_node_fs25.existsSync)(absolutePath)) {
+    if (!(0, import_node_fs26.existsSync)(absolutePath)) {
       throw new Error(`JSON file not found: ${absolutePath}`);
     }
-    const raw = (0, import_node_fs25.readFileSync)(absolutePath, "utf8");
+    const raw = (0, import_node_fs26.readFileSync)(absolutePath, "utf8");
     let parsed;
     try {
       parsed = JSON.parse(raw);
@@ -22684,19 +22848,19 @@ var AccountCommandHandler = class {
     return parsed;
   }
   resolveFilePath(filePath) {
-    return import_node_path30.default.resolve(process.cwd(), filePath);
+    return import_node_path31.default.resolve(process.cwd(), filePath);
   }
   resolveDefaultBotKeyPath(app, name) {
-    return import_node_path30.default.join(this.homeDir(), ".pmate", "bots", app, `${name}.bot-key.json`);
+    return import_node_path31.default.join(this.homeDir(), ".pmate", "bots", app, `${name}.bot-key.json`);
   }
   resolveDefaultAccessKeyPath(app, name) {
-    return import_node_path30.default.join(this.homeDir(), ".pmate", "access-keys", app, `${name}.access-key.json`);
+    return import_node_path31.default.join(this.homeDir(), ".pmate", "access-keys", app, `${name}.access-key.json`);
   }
   homeDir() {
     return process.env.HOME || process.env.USERPROFILE || process.cwd();
   }
   generateBotKeyFile(app, name) {
-    const { publicKey, privateKey } = (0, import_node_crypto7.generateKeyPairSync)("ed25519");
+    const { publicKey, privateKey } = (0, import_node_crypto8.generateKeyPairSync)("ed25519");
     return {
       type: "pmate-bot-key",
       version: 1,
@@ -22710,14 +22874,14 @@ var AccountCommandHandler = class {
   }
   renameDefaultBotKeyFile(app, name, newName) {
     const oldPath = this.resolveDefaultBotKeyPath(app, name);
-    if (!(0, import_node_fs25.existsSync)(oldPath)) {
+    if (!(0, import_node_fs26.existsSync)(oldPath)) {
       return void 0;
     }
     const keyFile = this.readBotKeyFile(oldPath, app, name);
     const newPath = this.resolveDefaultBotKeyPath(app, newName);
-    (0, import_node_fs25.mkdirSync)(import_node_path30.default.dirname(newPath), { recursive: true, mode: 448 });
-    (0, import_node_fs25.writeFileSync)(newPath, JSON.stringify({ ...keyFile, name: newName }, null, 2));
-    (0, import_node_fs25.chmodSync)(newPath, 384);
+    (0, import_node_fs26.mkdirSync)(import_node_path31.default.dirname(newPath), { recursive: true, mode: 448 });
+    (0, import_node_fs26.writeFileSync)(newPath, JSON.stringify({ ...keyFile, name: newName }, null, 2));
+    (0, import_node_fs26.chmodSync)(newPath, 384);
     return newPath;
   }
   readBotKeyFile(filePath, expectedApp, expectedName) {
@@ -22725,10 +22889,10 @@ var AccountCommandHandler = class {
       throw new Error("Missing bot key file");
     }
     const absolutePath = this.resolveFilePath(filePath);
-    if (!(0, import_node_fs25.existsSync)(absolutePath)) {
+    if (!(0, import_node_fs26.existsSync)(absolutePath)) {
       throw new Error(`Bot key file not found: ${absolutePath}`);
     }
-    const parsed = JSON.parse((0, import_node_fs25.readFileSync)(absolutePath, "utf8"));
+    const parsed = JSON.parse((0, import_node_fs26.readFileSync)(absolutePath, "utf8"));
     if (parsed.type !== "pmate-bot-key" || parsed.version !== 1 || parsed.algorithm !== "ed25519" || !parsed.publicKey || !parsed.privateKey) {
       throw new Error(`Invalid PMate bot key file: ${absolutePath}`);
     }
@@ -22745,10 +22909,10 @@ var AccountCommandHandler = class {
       throw new Error("Missing access key file");
     }
     const absolutePath = this.resolveFilePath(filePath);
-    if (!(0, import_node_fs25.existsSync)(absolutePath)) {
+    if (!(0, import_node_fs26.existsSync)(absolutePath)) {
       throw new Error(`Access key file not found: ${absolutePath}`);
     }
-    const parsed = JSON.parse((0, import_node_fs25.readFileSync)(absolutePath, "utf8"));
+    const parsed = JSON.parse((0, import_node_fs26.readFileSync)(absolutePath, "utf8"));
     if (parsed.type !== "pmate-access-key" || parsed.version !== 1 || !parsed.id || !parsed.app || !parsed.secret || !parsed.expiresAt) {
       throw new Error(`Invalid PMate access key file: ${absolutePath}`);
     }
@@ -22770,9 +22934,9 @@ var AccountCommandHandler = class {
       createdAt: result.key.createdAt
     };
     const outPath = out ? this.resolveFilePath(out) : this.resolveDefaultAccessKeyPath(result.key.app, result.key.name);
-    (0, import_node_fs25.mkdirSync)(import_node_path30.default.dirname(outPath), { recursive: true });
-    (0, import_node_fs25.writeFileSync)(outPath, JSON.stringify(keyFile, null, 2), { mode: 384 });
-    (0, import_node_fs25.chmodSync)(outPath, 384);
+    (0, import_node_fs26.mkdirSync)(import_node_path31.default.dirname(outPath), { recursive: true });
+    (0, import_node_fs26.writeFileSync)(outPath, JSON.stringify(keyFile, null, 2), { mode: 384 });
+    (0, import_node_fs26.chmodSync)(outPath, 384);
   }
   renderAccessKeyCreateResult(result, asJson, out) {
     if (asJson) {
@@ -22818,12 +22982,12 @@ var AccountCommandHandler = class {
     });
   }
   signBotChallenge(challenge, privateKey) {
-    const key = (0, import_node_crypto7.createPrivateKey)({
+    const key = (0, import_node_crypto8.createPrivateKey)({
       key: Buffer.from(privateKey, "base64url"),
       format: "der",
       type: "pkcs8"
     });
-    return (0, import_node_crypto7.sign)(
+    return (0, import_node_crypto8.sign)(
       null,
       Buffer.from(JSON.stringify({
         id: challenge.id,
@@ -22857,8 +23021,8 @@ function encodePathSegment2(value) {
 }
 
 // src/commands/OrgCommandHandler.ts
-var import_node_fs26 = require("fs");
-var import_node_path31 = __toESM(require("path"));
+var import_node_fs27 = require("fs");
+var import_node_path32 = __toESM(require("path"));
 init_sessionStore();
 var OrgCommandHandler = class {
   async handle(args) {
@@ -23028,11 +23192,11 @@ var OrgCommandHandler = class {
     if (!filePath) {
       throw new Error(`Missing ${itemLabel} input`);
     }
-    const absolutePath = import_node_path31.default.resolve(process.cwd(), filePath);
-    if (!(0, import_node_fs26.existsSync)(absolutePath)) {
+    const absolutePath = import_node_path32.default.resolve(process.cwd(), filePath);
+    if (!(0, import_node_fs27.existsSync)(absolutePath)) {
       throw new Error(`JSON file not found: ${absolutePath}`);
     }
-    const raw = (0, import_node_fs26.readFileSync)(absolutePath, "utf8");
+    const raw = (0, import_node_fs27.readFileSync)(absolutePath, "utf8");
     let parsed;
     try {
       parsed = JSON.parse(raw);
@@ -23103,10 +23267,10 @@ function encodePathSegment3(value) {
 }
 
 // src/commands/HostCommandHandler.ts
-var import_node_fs27 = require("fs");
-var import_node_os13 = require("os");
-var import_node_path32 = __toESM(require("path"));
-var import_node_child_process14 = require("child_process");
+var import_node_fs28 = require("fs");
+var import_node_os14 = require("os");
+var import_node_path33 = __toESM(require("path"));
+var import_node_child_process15 = require("child_process");
 var BLOCK_START = "# >>> pmate host env >>>";
 var BLOCK_END = "# <<< pmate host env <<<";
 var PROFILE_BLOCK = `${BLOCK_START}
@@ -23118,7 +23282,7 @@ fi
 ${BLOCK_END}`;
 var HostCommandHandler = class {
   async handle(args) {
-    const hostId = normalizeHostId(args.host ?? process.env.PMATE_HOST_ID ?? (0, import_node_os13.hostname)());
+    const hostId = normalizeHostId(args.host ?? process.env.PMATE_HOST_ID ?? (0, import_node_os14.hostname)());
     const client = new ServiceRegistryClient(args.baseUrl);
     if (args.action === "env-list") {
       const items = await client.listHostEnv(hostId);
@@ -23149,7 +23313,7 @@ async function applyHostEnvRemote(host, values) {
   const content = serializeHostEnv(values);
   const script = buildRemoteApplyScript(Buffer.from(content, "utf8").toString("base64"));
   await new Promise((resolve, reject) => {
-    const child = (0, import_node_child_process14.spawn)("ssh", [target, "bash -s"], { stdio: ["pipe", "pipe", "pipe"] });
+    const child = (0, import_node_child_process15.spawn)("ssh", [target, "bash -s"], { stdio: ["pipe", "pipe", "pipe"] });
     let stdout = "";
     let stderr = "";
     child.stdout.on("data", (chunk) => {
@@ -24194,6 +24358,7 @@ function parseServiceArgs(tokens) {
       json
     };
   }
+  if (action === "ios") return parseServiceIosArgs(rest);
   if (action === "apk") {
     return parseServiceApkArgs(rest, { baseUrl, json });
   }
@@ -24965,6 +25130,48 @@ function parseServiceEnvArgs(appId, tokens) {
   }
   throw new Error(`Unknown service env action: ${action}`);
 }
+function parseServiceIosArgs(tokens) {
+  const rest = [...tokens];
+  if (rest.shift() !== "build") throw new Error("Usage: service ios build <ns:service> --scheme <scheme>");
+  const ref = rest.shift();
+  if (!ref || ref.startsWith("-")) throw new Error("Missing iOS service ref");
+  const parsed = parseNamespacedRef(ref, { entityLabel: "service ref" });
+  const values = {};
+  let json = false;
+  const allowed = ["--scheme", "--project", "--workspace", "--team", "--cwd", "--last-build", "--base-url"];
+  while (rest.length) {
+    const token = rest.shift();
+    if (token === "--json") {
+      json = true;
+      continue;
+    }
+    if (!allowed.includes(token)) throw new Error(`Unknown service ios build option: ${token}`);
+    if (values[token] !== void 0) throw new Error(`Duplicate option: ${token}`);
+    values[token] = requireValue4(rest, token);
+  }
+  if (!values["--scheme"]) throw new Error("An explicit --scheme is required");
+  if (values["--project"] && values["--workspace"]) throw new Error("Use only one of --project or --workspace");
+  let lastBuild;
+  if (values["--last-build"] !== void 0) {
+    const value = values["--last-build"];
+    if (!/^(0|[1-9]\d*)$/.test(value) || !Number.isSafeInteger(Number(value))) throw new Error("--last-build must be a non-negative safe integer");
+    lastBuild = Number(value);
+  }
+  return {
+    type: "service" /* Service */,
+    action: "ios-build",
+    namespace: parsed.namespace,
+    name: parsed.objectId,
+    scheme: values["--scheme"],
+    project: values["--project"],
+    workspace: values["--workspace"],
+    team: values["--team"],
+    cwd: values["--cwd"],
+    lastBuild,
+    baseUrl: values["--base-url"],
+    json
+  };
+}
 
 // src/logsCommandParser.ts
 init_namespacedRef();
@@ -26433,7 +26640,7 @@ function requireValue11(tokens, option) {
 
 // src/index.ts
 var pkg = JSON.parse(
-  (0, import_node_fs28.readFileSync)(import_node_path33.default.resolve(__dirname, "..", "package.json"), "utf8")
+  (0, import_node_fs29.readFileSync)(import_node_path34.default.resolve(__dirname, "..", "package.json"), "utf8")
 );
 var HELP_TEXT = [
   import_chalk4.default.bold(`pmate v${pkg.version}`),
@@ -26598,6 +26805,7 @@ var HELP_TEXT = [
   `  ${import_chalk4.default.gray("                  delete <ns:objectId> [--base-url <url>] [--json]")}`,
   `  ${import_chalk4.default.gray("                  default base URL: https://apps-api.pmate.chat")}`,
   `  ${import_chalk4.default.cyan("service")}          Manage service registry entries via apps-api`,
+  "                    ios build <ns:service> --scheme <name> [--team <id>] [--last-build <n>] [--cwd <repo>] [--project <path>|--workspace <path>] [--json]",
   `  ${import_chalk4.default.gray("                  list [--namespace <ns>] [--repo <owner/name|https://github.com/owner/name>] [--server <name>] [--base-url <url>] [--json]")}`,
   `  ${import_chalk4.default.gray("                  get <ns:objectId> [--base-url <url>] [--json]")}`,
   `  ${import_chalk4.default.gray("                  view <ns:objectId> [--base-url <url>]")}`,

package/dist/templates/electron/calls.cjs

@@ -98,4 +98,5 @@ function createDesktopCalls({ appId, instanceId, origin, BrowserWindow, ipcMain,
     stop() { generation++; unsubscribe?.(); unsubscribe = undefined; client?.close(); client = undefined; identity = undefined; destroy(); people.clear() },
   }
 }
-module.exports = { createDesktopCalls }
+function supportsDesktopCalls(appId) { return ['pmate:hello', 'pmate:merry'].includes(appId) }
+module.exports = { createDesktopCalls, supportsDesktopCalls }

package/dist/templates/electron/main.cjs

@@ -7,7 +7,7 @@ const { installMediaPermissions } = require('./media.cjs')
 const { createDesktopNotifications } = require('./notifications.cjs')
 const { desktopInstanceId, createDesktopReach } = require('./reach.cjs')
 const { createRendererReach } = require('./reach-renderer.cjs')
-const { createDesktopCalls } = require('./calls.cjs')
+const { createDesktopCalls, supportsDesktopCalls } = require('./calls.cjs')
 const config = require('./desktop-config.json')
 const manifest = require('./resource-manifest.json')
 app.setName(config.productName)
@@ -75,7 +75,7 @@ else {
     installUpdateHandlers({ ipcMain, app, shell, appId: config.app, trusted: event => desktopNotifications.trusted(event) })
     const instanceId = desktopInstanceId(app.getPath('userData'))
     const rendererReach = createRendererReach({ ipcMain, getWindow: () => mainWindow, trusted: event => desktopNotifications.trusted(event) })
-    if (config.app === 'pmate:hello') desktopCalls = createDesktopCalls({ appId: config.app, instanceId, origin: config.origin, BrowserWindow, ipcMain, dialog })
+    if (supportsDesktopCalls(config.app)) desktopCalls = createDesktopCalls({ appId: config.app, instanceId, origin: config.origin, BrowserWindow, ipcMain, dialog })
     desktopReach = createDesktopReach({ appId: config.app, instanceId, present: input => desktopNotifications.display(input),
       configureCalls: identity => { rendererReach.reset(); return desktopCalls?.configure(identity) }, stopCalls: () => { rendererReach.reset(); desktopCalls?.stop() },
       incomingCall: (callId, teamId) => { if (!desktopCalls) throw new Error('Call handler unavailable'); return desktopCalls.incoming(callId, teamId) },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pmate/cli",
-  "version": "0.36.1",
+  "version": "0.37.1",
   "description": "CLI utilities for the pMate project",
   "license": "MIT",
   "bin": {