@rightkit/release 0.3.0 → 0.4.1

package/swap-helper-bundle.mjs

@@ -1,7 +1,11 @@
 // The Developer-ID-signed `bin/darwin/rightkit-swap` that @rightkit/release ships (Orthic-Labs/rightkit#258).
-// rightkit-swap is the bin target of crates/rightkit-fs (renamex_np RENAME_SWAP). CI has no Apple signing secrets, so
-// @rightkit/release is published through `right-release publish npm --local` on the Mac, which calls
-// `prepareSwapHelper` before packing. install-app calls `assertShippedSwapHelperSigned` before it trusts the helper.
+// rightkit-swap is the bin target of crates/rightkit-fs (renamex_np RENAME_SWAP). Two signing routes produce it:
+// (a) local publish — `right-release publish npm --local` on the Mac calls `prepareSwapHelper` before packing;
+// (b) CI qualification — `publish.yml` build-swap -> sign-swap -> pack (docs/CI.md), where sign-swap imports the
+// Developer ID from the `release` environment secrets. Route (b) stays blocked until root provisions
+// APPLE_CERTIFICATE_BASE64/APPLE_CERTIFICATE_PASSWORD there; exporting that identity needs an Aqua login session
+// (SSH export fails errSecInteractionNotAllowed/-25308 & the signing agent has no key-export capability — never
+// retry either). install-app calls `assertShippedSwapHelperSigned` before it trusts the helper.
 import crypto from "node:crypto";
 import nodeFs from "node:fs";
 import path from "node:path";

package/target-distribution.mjs

@@ -0,0 +1,5 @@
+// The distribution an upload uses for one platform. An app that ships desktop and mobile has a different store per
+// platform, so `targets.<platform>.distribution` wins; the top-level `distribution` is the single-store fallback.
+export function targetDistribution(config, platform) {
+  return config?.targets?.[platform]?.distribution ?? config?.distribution;
+}

package/upload-release.mjs

@@ -36,7 +36,12 @@ if (platform === "android") {
   const { main } = await import("./android-play-upload.mjs");
   process.exit(await main({ releaseId, configName, apply, dryRun }));
 }
-if (apply) fail("--apply is Android only; win and mac preview with --dry-run");
+// iOS: TestFlight through the App Store Connect build-upload API (in process, no key file), with its own gate and a dry run by default (ios-upload.mjs).
+if (platform === "ios") {
+  const { main } = await import("./ios-upload.mjs");
+  process.exit(await main({ releaseId, configName, apply, dryRun }));
+}
+if (apply) fail("--apply is Android and iOS only; win and mac preview with --dry-run");
 
 // Tier, primary checkout, clean tree, sealed commit, ownership evidence, provider and repository are checked by
 // the gate that `right-release github --release` also uses; nothing below runs until it passes.
@@ -82,7 +87,7 @@ function writeJson(file, value) {
 }
 
 function usage(code) {
-  console.log("usage: right-release upload --release <sealed-id> --platform win|mac --tier patch|update [--config right-release.config.mjs] [--repo owner/repo] [--dry-run]\n       right-release upload --platform android --release <sealed-id> [--config right-release.config.mjs] [--apply]   (Play internal track; dry run unless --apply)");
+  console.log("usage: right-release upload --release <sealed-id> --platform win|mac --tier patch|update [--config right-release.config.mjs] [--repo owner/repo] [--dry-run]\n       right-release upload --platform android --release <sealed-id> [--config right-release.config.mjs] [--apply]   (Play internal track; dry run unless --apply)\n       right-release upload --platform ios --release <sealed-id> [--config right-release.config.mjs] [--apply]   (TestFlight; dry run unless --apply)");
   process.exit(code);
 }
 

package/bin/darwin/rightkit-swap.sign.json

@@ -1,6 +0,0 @@
-{
-  "schema": 1,
-  "sha256": "cbd04b2fa9af4c416c9d4983e2c63097dc0ca5f987d15eb272123df2de3d22cd",
-  "identity": "Developer ID Application: Adrian D'souza (6KLGD3LLKF)",
-  "codesign": "strict-valid"
-}