@portablecore/integrations 0.3.1 → 0.4.1

package/dist/apple.d.ts

@@ -0,0 +1,78 @@
+/**
+ * @portablecore/integrations — Apple Developer
+ *
+ * App Store Connect API authentication (JWT generation) and
+ * credential resolution for Apple Developer integrations.
+ *
+ * Apple's API authentication requires:
+ *   1. A .p8 private key (ECDSA P-256)
+ *   2. A Key ID (from App Store Connect)
+ *   3. An Issuer ID (from App Store Connect)
+ *
+ * These are combined into a short-lived JWT (max 20 min) signed with ES256.
+ *
+ * Reference: https://developer.apple.com/documentation/appstoreconnectapi/generating_tokens_for_api_requests
+ */
+import type { AnySupabaseClient, ProviderScope, ProviderConfigResult } from "./types.js";
+/**
+ * Configuration stored in the integration's credentials/settings for
+ * Apple Developer provider.
+ */
+export interface AppleDeveloperConfig {
+    /** The Key ID from App Store Connect → Users and Access → Keys */
+    key_id: string;
+    /** The Issuer ID (UUID) from App Store Connect */
+    issuer_id: string;
+    /** The Apple Developer Team ID */
+    team_id: string;
+    /** The .p8 private key contents (PEM format) */
+    p8_key: string;
+    /** Comma-separated bundle IDs this key can access */
+    bundle_ids?: string;
+    /** Vendor Number from App Store Connect (used for Sales & Trends reports) */
+    vendor_number?: string;
+}
+/**
+ * A generated JWT for App Store Connect API authentication.
+ */
+export interface AppStoreConnectToken {
+    /** The signed JWT string */
+    token: string;
+    /** When the token expires (Unix timestamp in seconds) */
+    expiresAt: number;
+    /** The Key ID used to generate this token */
+    keyId: string;
+    /** The Issuer ID */
+    issuerId: string;
+}
+/**
+ * Generates a JWT for the App Store Connect API.
+ *
+ * The token is valid for 20 minutes (the maximum allowed by Apple).
+ * Callers should cache and reuse tokens until they expire.
+ *
+ * @param config - The Apple Developer credentials (key_id, issuer_id, p8_key)
+ * @param audience - The JWT audience. Defaults to "appstoreconnect-v1".
+ * @returns The signed JWT and expiry metadata
+ */
+export declare function generateAppStoreConnectJWT(config: Pick<AppleDeveloperConfig, "key_id" | "issuer_id" | "p8_key">, audience?: string): AppStoreConnectToken;
+/**
+ * Resolves Apple Developer credentials from the database using the standard
+ * integration config resolution chain.
+ *
+ * @param supabase - A Supabase client with service role access
+ * @param scope - Optional scope for credential resolution
+ * @returns The resolved Apple Developer config, or null if not configured
+ */
+export declare function getAppleDeveloperConfig(supabase: AnySupabaseClient, scope?: ProviderScope): Promise<ProviderConfigResult<AppleDeveloperConfig> | null>;
+/**
+ * Convenience: resolve Apple Developer credentials and generate a fresh JWT.
+ *
+ * @param supabase - A Supabase client with service role access
+ * @param scope - Optional scope for credential resolution
+ * @returns The JWT and config source, or null if not configured
+ */
+export declare function getAppStoreConnectToken(supabase: AnySupabaseClient, scope?: ProviderScope): Promise<(AppStoreConnectToken & {
+    source: string;
+}) | null>;
+//# sourceMappingURL=apple.d.ts.map

package/dist/apple.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apple.d.ts","sourceRoot":"","sources":["../src/apple.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,OAAO,KAAK,EAAE,iBAAiB,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAA;AAOxF;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,kEAAkE;IAClE,MAAM,EAAE,MAAM,CAAA;IACd,kDAAkD;IAClD,SAAS,EAAE,MAAM,CAAA;IACjB,kCAAkC;IAClC,OAAO,EAAE,MAAM,CAAA;IACf,gDAAgD;IAChD,MAAM,EAAE,MAAM,CAAA;IACd,qDAAqD;IACrD,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,6EAA6E;IAC7E,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,4BAA4B;IAC5B,KAAK,EAAE,MAAM,CAAA;IACb,yDAAyD;IACzD,SAAS,EAAE,MAAM,CAAA;IACjB,6CAA6C;IAC7C,KAAK,EAAE,MAAM,CAAA;IACb,oBAAoB;IACpB,QAAQ,EAAE,MAAM,CAAA;CACjB;AAMD;;;;;;;;;GASG;AACH,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,IAAI,CAAC,oBAAoB,EAAE,QAAQ,GAAG,WAAW,GAAG,QAAQ,CAAC,EACrE,QAAQ,SAAuB,GAC9B,oBAAoB,CA2CtB;AAMD;;;;;;;GAOG;AACH,wBAAsB,uBAAuB,CAC3C,QAAQ,EAAE,iBAAiB,EAC3B,KAAK,CAAC,EAAE,aAAa,GACpB,OAAO,CAAC,oBAAoB,CAAC,oBAAoB,CAAC,GAAG,IAAI,CAAC,CAE5D;AAED;;;;;;GAMG;AACH,wBAAsB,uBAAuB,CAC3C,QAAQ,EAAE,iBAAiB,EAC3B,KAAK,CAAC,EAAE,aAAa,GACpB,OAAO,CAAC,CAAC,oBAAoB,GAAG;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,GAAG,IAAI,CAAC,CAU7D"}

package/dist/apple.js

@@ -0,0 +1,181 @@
+"use strict";
+/**
+ * @portablecore/integrations — Apple Developer
+ *
+ * App Store Connect API authentication (JWT generation) and
+ * credential resolution for Apple Developer integrations.
+ *
+ * Apple's API authentication requires:
+ *   1. A .p8 private key (ECDSA P-256)
+ *   2. A Key ID (from App Store Connect)
+ *   3. An Issuer ID (from App Store Connect)
+ *
+ * These are combined into a short-lived JWT (max 20 min) signed with ES256.
+ *
+ * Reference: https://developer.apple.com/documentation/appstoreconnectapi/generating_tokens_for_api_requests
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.generateAppStoreConnectJWT = generateAppStoreConnectJWT;
+exports.getAppleDeveloperConfig = getAppleDeveloperConfig;
+exports.getAppStoreConnectToken = getAppStoreConnectToken;
+const crypto_1 = require("crypto");
+const config_js_1 = require("./config.js");
+// ---------------------------------------------------------------------------
+// JWT Generation
+// ---------------------------------------------------------------------------
+/**
+ * Generates a JWT for the App Store Connect API.
+ *
+ * The token is valid for 20 minutes (the maximum allowed by Apple).
+ * Callers should cache and reuse tokens until they expire.
+ *
+ * @param config - The Apple Developer credentials (key_id, issuer_id, p8_key)
+ * @param audience - The JWT audience. Defaults to "appstoreconnect-v1".
+ * @returns The signed JWT and expiry metadata
+ */
+function generateAppStoreConnectJWT(config, audience = "appstoreconnect-v1") {
+    const now = Math.floor(Date.now() / 1000);
+    const expiresAt = now + 20 * 60; // 20 minutes
+    // JWT Header
+    const header = {
+        alg: "ES256",
+        kid: config.key_id,
+        typ: "JWT",
+    };
+    // JWT Payload
+    const payload = {
+        iss: config.issuer_id,
+        iat: now,
+        exp: expiresAt,
+        aud: audience,
+    };
+    // Encode header and payload
+    const encodedHeader = base64UrlEncode(JSON.stringify(header));
+    const encodedPayload = base64UrlEncode(JSON.stringify(payload));
+    const signingInput = `${encodedHeader}.${encodedPayload}`;
+    // Sign with ES256 (ECDSA P-256 + SHA-256)
+    const signer = (0, crypto_1.createSign)("SHA256");
+    signer.update(signingInput);
+    signer.end();
+    // The p8 key should be in PEM format
+    const privateKey = normalizeP8Key(config.p8_key);
+    const derSignature = signer.sign(privateKey);
+    // Convert DER-encoded signature to raw IEEE P1363 format (r || s, 64 bytes)
+    const rawSignature = derToRaw(derSignature);
+    const encodedSignature = base64UrlEncode(rawSignature);
+    return {
+        token: `${signingInput}.${encodedSignature}`,
+        expiresAt,
+        keyId: config.key_id,
+        issuerId: config.issuer_id,
+    };
+}
+// ---------------------------------------------------------------------------
+// Credential Resolution
+// ---------------------------------------------------------------------------
+/**
+ * Resolves Apple Developer credentials from the database using the standard
+ * integration config resolution chain.
+ *
+ * @param supabase - A Supabase client with service role access
+ * @param scope - Optional scope for credential resolution
+ * @returns The resolved Apple Developer config, or null if not configured
+ */
+async function getAppleDeveloperConfig(supabase, scope) {
+    return (0, config_js_1.getProviderConfig)(supabase, "apple-developer", scope);
+}
+/**
+ * Convenience: resolve Apple Developer credentials and generate a fresh JWT.
+ *
+ * @param supabase - A Supabase client with service role access
+ * @param scope - Optional scope for credential resolution
+ * @returns The JWT and config source, or null if not configured
+ */
+async function getAppStoreConnectToken(supabase, scope) {
+    const result = await getAppleDeveloperConfig(supabase, scope);
+    if (!result)
+        return null;
+    // The config might be in different places depending on how it was stored
+    const config = resolveAppleConfig(result);
+    if (!config)
+        return null;
+    const jwt = generateAppStoreConnectJWT(config);
+    return { ...jwt, source: result.source };
+}
+// ---------------------------------------------------------------------------
+// Internal Helpers
+// ---------------------------------------------------------------------------
+/**
+ * Resolve Apple config from the various places it could be stored
+ * in the integration record (config, credentials, settings, or access_token).
+ */
+function resolveAppleConfig(result) {
+    // Try the typed config first
+    if (result.config?.key_id && result.config?.issuer_id && result.config?.p8_key) {
+        return result.config;
+    }
+    // Try credentials JSONB
+    const creds = result.credentials;
+    if (creds?.key_id && creds?.issuer_id && creds?.p8_key) {
+        return creds;
+    }
+    // Try settings JSONB
+    const settings = result.settings;
+    if (settings?.key_id && settings?.issuer_id && settings?.p8_key) {
+        return settings;
+    }
+    return null;
+}
+/**
+ * Ensure the P8 key has proper PEM formatting.
+ */
+function normalizeP8Key(key) {
+    const trimmed = key.trim();
+    if (trimmed.startsWith("-----BEGIN PRIVATE KEY-----")) {
+        return trimmed;
+    }
+    // If someone pasted just the base64 content without headers
+    return `-----BEGIN PRIVATE KEY-----\n${trimmed}\n-----END PRIVATE KEY-----`;
+}
+/**
+ * Base64url encode (RFC 7515).
+ */
+function base64UrlEncode(input) {
+    const buf = typeof input === "string" ? Buffer.from(input, "utf8") : input;
+    return buf.toString("base64").replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+}
+/**
+ * Convert a DER-encoded ECDSA signature to raw IEEE P1363 format (r || s).
+ *
+ * Node.js's crypto.sign returns DER format, but JWT ES256 expects r||s (64 bytes).
+ */
+function derToRaw(derSig) {
+    // DER format: 0x30 [total-length] 0x02 [r-length] [r] 0x02 [s-length] [s]
+    let offset = 2; // skip SEQUENCE header (0x30, length)
+    // Parse r
+    if (derSig[offset] !== 0x02)
+        throw new Error("Invalid DER signature: expected INTEGER tag for r");
+    offset++;
+    const rLen = derSig[offset];
+    offset++;
+    let r = derSig.subarray(offset, offset + rLen);
+    offset += rLen;
+    // Parse s
+    if (derSig[offset] !== 0x02)
+        throw new Error("Invalid DER signature: expected INTEGER tag for s");
+    offset++;
+    const sLen = derSig[offset];
+    offset++;
+    let s = derSig.subarray(offset, offset + sLen);
+    // Remove leading zero padding (DER uses signed integers)
+    if (r.length > 32 && r[0] === 0x00)
+        r = r.subarray(1);
+    if (s.length > 32 && s[0] === 0x00)
+        s = s.subarray(1);
+    // Pad to 32 bytes each
+    const raw = Buffer.alloc(64);
+    r.copy(raw, 32 - r.length);
+    s.copy(raw, 64 - s.length);
+    return raw;
+}
+//# sourceMappingURL=apple.js.map

package/dist/apple.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apple.js","sourceRoot":"","sources":["../src/apple.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;;AAyDH,gEA8CC;AAcD,0DAKC;AASD,0DAaC;AA9ID,mCAAmC;AAEnC,2CAA+C;AAuC/C,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E;;;;;;;;;GASG;AACH,SAAgB,0BAA0B,CACxC,MAAqE,EACrE,QAAQ,GAAG,oBAAoB;IAE/B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAA;IACzC,MAAM,SAAS,GAAG,GAAG,GAAG,EAAE,GAAG,EAAE,CAAA,CAAC,aAAa;IAE7C,aAAa;IACb,MAAM,MAAM,GAAG;QACb,GAAG,EAAE,OAAO;QACZ,GAAG,EAAE,MAAM,CAAC,MAAM;QAClB,GAAG,EAAE,KAAK;KACX,CAAA;IAED,cAAc;IACd,MAAM,OAAO,GAAG;QACd,GAAG,EAAE,MAAM,CAAC,SAAS;QACrB,GAAG,EAAE,GAAG;QACR,GAAG,EAAE,SAAS;QACd,GAAG,EAAE,QAAQ;KACd,CAAA;IAED,4BAA4B;IAC5B,MAAM,aAAa,GAAG,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAA;IAC7D,MAAM,cAAc,GAAG,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAA;IAC/D,MAAM,YAAY,GAAG,GAAG,aAAa,IAAI,cAAc,EAAE,CAAA;IAEzD,0CAA0C;IAC1C,MAAM,MAAM,GAAG,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAA;IACnC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;IAC3B,MAAM,CAAC,GAAG,EAAE,CAAA;IAEZ,qCAAqC;IACrC,MAAM,UAAU,GAAG,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAChD,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IAE5C,4EAA4E;IAC5E,MAAM,YAAY,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAA;IAC3C,MAAM,gBAAgB,GAAG,eAAe,CAAC,YAAY,CAAC,CAAA;IAEtD,OAAO;QACL,KAAK,EAAE,GAAG,YAAY,IAAI,gBAAgB,EAAE;QAC5C,SAAS;QACT,KAAK,EAAE,MAAM,CAAC,MAAM;QACpB,QAAQ,EAAE,MAAM,CAAC,SAAS;KAC3B,CAAA;AACH,CAAC;AAED,8EAA8E;AAC9E,wBAAwB;AACxB,8EAA8E;AAE9E;;;;;;;GAOG;AACI,KAAK,UAAU,uBAAuB,CAC3C,QAA2B,EAC3B,KAAqB;IAErB,OAAO,IAAA,6BAAiB,EAAuB,QAAQ,EAAE,iBAAiB,EAAE,KAAK,CAAC,CAAA;AACpF,CAAC;AAED;;;;;;GAMG;AACI,KAAK,UAAU,uBAAuB,CAC3C,QAA2B,EAC3B,KAAqB;IAErB,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;IAC7D,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAA;IAExB,yEAAyE;IACzE,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAA;IACzC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAA;IAExB,MAAM,GAAG,GAAG,0BAA0B,CAAC,MAAM,CAAC,CAAA;IAC9C,OAAO,EAAE,GAAG,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAA;AAC1C,CAAC;AAED,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E;;;GAGG;AACH,SAAS,kBAAkB,CACzB,MAAkD;IAElD,6BAA6B;IAC7B,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,SAAS,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;QAC/E,OAAO,MAAM,CAAC,MAAM,CAAA;IACtB,CAAC;IAED,wBAAwB;IACxB,MAAM,KAAK,GAAG,MAAM,CAAC,WAAwD,CAAA;IAC7E,IAAI,KAAK,EAAE,MAAM,IAAI,KAAK,EAAE,SAAS,IAAI,KAAK,EAAE,MAAM,EAAE,CAAC;QACvD,OAAO,KAAsE,CAAA;IAC/E,CAAC;IAED,qBAAqB;IACrB,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAqD,CAAA;IAC7E,IAAI,QAAQ,EAAE,MAAM,IAAI,QAAQ,EAAE,SAAS,IAAI,QAAQ,EAAE,MAAM,EAAE,CAAC;QAChE,OAAO,QAAyE,CAAA;IAClF,CAAC;IAED,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CAAC,GAAW;IACjC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAA;IAC1B,IAAI,OAAO,CAAC,UAAU,CAAC,6BAA6B,CAAC,EAAE,CAAC;QACtD,OAAO,OAAO,CAAA;IAChB,CAAC;IACD,4DAA4D;IAC5D,OAAO,gCAAgC,OAAO,6BAA6B,CAAA;AAC7E,CAAC;AAED;;GAEG;AACH,SAAS,eAAe,CAAC,KAAsB;IAC7C,MAAM,GAAG,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;IAC1E,OAAO,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;AAC1F,CAAC;AAED;;;;GAIG;AACH,SAAS,QAAQ,CAAC,MAAc;IAC9B,0EAA0E;IAC1E,IAAI,MAAM,GAAG,CAAC,CAAA,CAAC,sCAAsC;IAErD,UAAU;IACV,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAA;IACjG,MAAM,EAAE,CAAA;IACR,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAE,CAAA;IAC5B,MAAM,EAAE,CAAA;IACR,IAAI,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,CAAA;IAC9C,MAAM,IAAI,IAAI,CAAA;IAEd,UAAU;IACV,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAA;IACjG,MAAM,EAAE,CAAA;IACR,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAE,CAAA;IAC5B,MAAM,EAAE,CAAA;IACR,IAAI,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,CAAA;IAE9C,yDAAyD;IACzD,IAAI,CAAC,CAAC,MAAM,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI;QAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAA;IACrD,IAAI,CAAC,CAAC,MAAM,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI;QAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAA;IAErD,uBAAuB;IACvB,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IAC5B,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,CAAA;IAC1B,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,CAAA;IAE1B,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/dist/index.d.ts

@@ -23,4 +23,6 @@ export { getProvider, getProviders, listProviders } from "./provider.js";
 export { getProviderConfig, getProviderApiKey } from "./config.js";
 export { getSurfaceCapabilities } from "./capabilities.js";
 export type { CredentialAvailability } from "./capabilities.js";
+export { generateAppStoreConnectJWT, getAppleDeveloperConfig, getAppStoreConnectToken, } from "./apple.js";
+export type { AppleDeveloperConfig, AppStoreConnectToken, } from "./apple.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAGH,YAAY,EACV,iBAAiB,EACjB,mBAAmB,EACnB,eAAe,EACf,aAAa,EACb,oBAAoB,EACpB,YAAY,EACZ,iBAAiB,GAClB,MAAM,YAAY,CAAA;AAEnB,OAAO,EAAE,2BAA2B,EAAE,MAAM,YAAY,CAAA;AAGxD,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAGxE,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAGlE,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAA;AAC1D,YAAY,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAGH,YAAY,EACV,iBAAiB,EACjB,mBAAmB,EACnB,eAAe,EACf,aAAa,EACb,oBAAoB,EACpB,YAAY,EACZ,iBAAiB,GAClB,MAAM,YAAY,CAAA;AAEnB,OAAO,EAAE,2BAA2B,EAAE,MAAM,YAAY,CAAA;AAGxD,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAGxE,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAGlE,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAA;AAC1D,YAAY,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAA;AAG/D,OAAO,EACL,0BAA0B,EAC1B,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,YAAY,CAAA;AACnB,YAAY,EACV,oBAAoB,EACpB,oBAAoB,GACrB,MAAM,YAAY,CAAA"}

package/dist/index.js

@@ -19,7 +19,7 @@
  * "The expert brings expertise. The surface provides integrations."
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.getSurfaceCapabilities = exports.getProviderApiKey = exports.getProviderConfig = exports.listProviders = exports.getProviders = exports.getProvider = exports.DEFAULT_CAPABILITY_MAPPINGS = void 0;
+exports.getAppStoreConnectToken = exports.getAppleDeveloperConfig = exports.generateAppStoreConnectJWT = exports.getSurfaceCapabilities = exports.getProviderApiKey = exports.getProviderConfig = exports.listProviders = exports.getProviders = exports.getProvider = exports.DEFAULT_CAPABILITY_MAPPINGS = void 0;
 var types_js_1 = require("./types.js");
 Object.defineProperty(exports, "DEFAULT_CAPABILITY_MAPPINGS", { enumerable: true, get: function () { return types_js_1.DEFAULT_CAPABILITY_MAPPINGS; } });
 // Provider lookup
@@ -34,4 +34,9 @@ Object.defineProperty(exports, "getProviderApiKey", { enumerable: true, get: fun
 // PEP capability discovery
 var capabilities_js_1 = require("./capabilities.js");
 Object.defineProperty(exports, "getSurfaceCapabilities", { enumerable: true, get: function () { return capabilities_js_1.getSurfaceCapabilities; } });
+// Apple Developer (App Store Connect API)
+var apple_js_1 = require("./apple.js");
+Object.defineProperty(exports, "generateAppStoreConnectJWT", { enumerable: true, get: function () { return apple_js_1.generateAppStoreConnectJWT; } });
+Object.defineProperty(exports, "getAppleDeveloperConfig", { enumerable: true, get: function () { return apple_js_1.getAppleDeveloperConfig; } });
+Object.defineProperty(exports, "getAppStoreConnectToken", { enumerable: true, get: function () { return apple_js_1.getAppStoreConnectToken; } });
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;GAkBG;;;AAaH,uCAAwD;AAA/C,uHAAA,2BAA2B,OAAA;AAEpC,kBAAkB;AAClB,6CAAwE;AAA/D,0GAAA,WAAW,OAAA;AAAE,2GAAA,YAAY,OAAA;AAAE,4GAAA,aAAa,OAAA;AAEjD,wBAAwB;AACxB,yCAAkE;AAAzD,8GAAA,iBAAiB,OAAA;AAAE,8GAAA,iBAAiB,OAAA;AAE7C,2BAA2B;AAC3B,qDAA0D;AAAjD,yHAAA,sBAAsB,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;GAkBG;;;AAaH,uCAAwD;AAA/C,uHAAA,2BAA2B,OAAA;AAEpC,kBAAkB;AAClB,6CAAwE;AAA/D,0GAAA,WAAW,OAAA;AAAE,2GAAA,YAAY,OAAA;AAAE,4GAAA,aAAa,OAAA;AAEjD,wBAAwB;AACxB,yCAAkE;AAAzD,8GAAA,iBAAiB,OAAA;AAAE,8GAAA,iBAAiB,OAAA;AAE7C,2BAA2B;AAC3B,qDAA0D;AAAjD,yHAAA,sBAAsB,OAAA;AAG/B,0CAA0C;AAC1C,uCAImB;AAHjB,sHAAA,0BAA0B,OAAA;AAC1B,mHAAA,uBAAuB,OAAA;AACvB,mHAAA,uBAAuB,OAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@portablecore/integrations",
-  "version": "0.3.1",
+  "version": "0.4.1",
   "description": "Shared integration provider registry and credential resolution for Portable platforms",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -20,11 +20,21 @@
     "./capabilities": {
       "types": "./dist/capabilities.d.ts",
       "default": "./dist/capabilities.js"
+    },
+    "./apple": {
+      "types": "./dist/apple.d.ts",
+      "default": "./dist/apple.js"
     }
   },
   "files": [
     "dist"
   ],
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsc --watch",
+    "clean": "rm -rf dist",
+    "typecheck": "tsc --noEmit"
+  },
   "keywords": [
     "portable",
     "integrations",
@@ -40,11 +50,5 @@
   "devDependencies": {
     "@supabase/supabase-js": "^2.49.0",
     "typescript": "^5.3.0"
-  },
-  "scripts": {
-    "build": "tsc",
-    "dev": "tsc --watch",
-    "clean": "rm -rf dist",
-    "typecheck": "tsc --noEmit"
   }
-}
+}