@sitepong/fastnode 0.1.2 → 0.2.1

package/dist/{index-BLubSlgK.d.cts → index-CdfgEZwh.d.cts}

@@ -1344,7 +1344,17 @@ declare class XcodeMetricsResource {
  * Apple ID Session Authentication
  * 1:1 port of Fastlane Spaceship client.rb + two_step_or_factor_client.rb
  *
- * Flow: SIRP auth → handle 2FA → olympus session → done
+ * Two flows:
+ *
+ *   loginWithAppleId({ email, password, onPrompt })
+ *     - blocking, CLI-style. onPrompt is awaited to collect 2FA codes.
+ *
+ *   beginLogin({ email, password }) → { kind: "logged_in" | "needs_2fa", ... }
+ *     submitTwoFactorCode({ pending, code, source, ... }) → AppleSession
+ *     requestSmsCode({ pending, phoneId, mode })
+ *     - HTTP-resumable. Used by the App Release wizard, where the 2FA
+ *       challenge is rendered in a browser modal and the code arrives in
+ *       a separate request.
  */
 interface AppleSessionConfig {
     email: string;
@@ -1367,6 +1377,53 @@ interface AppleSession {
     teamId?: string;
     pendingAgreements: ContractMessage[];
 }
+/**
+ * State held between beginLogin() and submitTwoFactorCode() — captures
+ * everything needed to resume an in-progress 2FA flow across HTTP requests.
+ * Stored server-side keyed by an opaque session id; never sent to the
+ * browser (the browser only sees the opaque id).
+ */
+interface PendingLogin {
+    cookies: Record<string, string>;
+    sessionId: string;
+    scnt: string;
+    serviceKey: string;
+    userEmail: string;
+}
+/**
+ * Description of the 2FA challenge presented to the user.
+ *
+ * Modern 2FA accounts (the default for everyone) have `kind: "device"` —
+ * Apple pushes the 6-digit code to all the user's trusted Apple devices
+ * (iPhone, Mac, etc.) and the user types it into our wizard. The legacy
+ * `trustedDevices` field is empty in this case; that field only ever
+ * populates for old "two-step verification" accounts which are
+ * essentially extinct.
+ *
+ * `kind: "phone_only"` is reserved for accounts that have no real Apple
+ * devices (Apple's `noTrustedDevices === true` flag) — those accounts
+ * must use SMS to a trusted phone number.
+ *
+ * Either way, the user can opt to receive the code via SMS instead by
+ * picking from `trustedPhoneNumbers` and calling requestSmsCode().
+ */
+interface TwoFactorChallenge {
+    kind: "device" | "phone_only";
+    codeLength: number;
+    trustedPhoneNumbers: {
+        id: number;
+        numberWithDialCode: string;
+        pushMode?: string;
+    }[];
+}
+type BeginLoginResult = {
+    kind: "logged_in";
+    session: AppleSession;
+} | {
+    kind: "needs_2fa";
+    pending: PendingLogin;
+    challenge: TwoFactorChallenge;
+};
 /** Thrown when an Apple Developer Program agreement needs to be accepted */
 declare class ProgramLicenseAgreementError extends Error {
     agreements: ContractMessage[];
@@ -1378,6 +1435,46 @@ declare class ProgramLicenseAgreementError extends Error {
  * Call this after any portal API call. Mirrors Spaceship::Client#handle_itc_response.
  */
 declare function checkPortalResponse(body: any, session?: AppleSession): void;
+/**
+ * Step 1 of HTTP-resumable login: do the SIRP exchange and detect whether
+ * 2FA is required. Returns either a fully-established session (no 2FA) or
+ * a pending state + a description of the 2FA challenge.
+ */
+declare function beginLogin(config: {
+    email: string;
+    password: string;
+    onLog?: (msg: string) => void;
+}): Promise<BeginLoginResult>;
+/**
+ * Ask Apple to send an SMS / voice code to the chosen trusted phone.
+ * Used by the wizard's "Send code via text instead" affordance.
+ */
+declare function requestSmsCode(input: {
+    pending: PendingLogin;
+    phoneId: number;
+    mode?: "sms" | "voice";
+}): Promise<void>;
+/**
+ * Step 2 of HTTP-resumable login: submit the 2FA code the user typed.
+ * Returns a fully-established AppleSession on success.
+ *
+ *   source = "device" → 4-digit code from a trusted Apple device
+ *   source = "phone"  → 6-digit code from SMS / push to trusted phone
+ */
+declare function submitTwoFactorCode(input: {
+    pending: PendingLogin;
+    code: string;
+    source: "device" | "phone";
+    phoneId?: number;
+    mode?: "sms" | "voice";
+    onLog?: (msg: string) => void;
+}): Promise<AppleSession>;
+/**
+ * Backward-compatible CLI-style login. Internally uses beginLogin +
+ * submitTwoFactorCode but routes 2FA through the synchronous onPrompt
+ * callback so existing scripts (test-login.ts, test-full-workflow.ts)
+ * keep working.
+ */
 declare function loginWithAppleId(config: AppleSessionConfig): Promise<AppleSession>;
 
 /**
@@ -1400,6 +1497,120 @@ declare class PortalClient {
     constructor(session: AppleSession, teamId: string);
     /** Initialize CSRF tokens — must be called before mutations */
     init(): Promise<void>;
+    /**
+     * JSON POST — different content type than the standard form-encoded
+     * `post()`. Used by the App Store Connect API key endpoints
+     * (`account/auth/key/v2/create`), which Spaceship discovered take a
+     * JSON body even though every other portal mutation is form-encoded.
+     *
+     * Like the form-encoded `post()`, this also runs the response through
+     * `checkPortalResponse` — Apple returns HTTP 200 even for errors and
+     * encodes the error in `resultCode`/`userString` fields, so a raw
+     * status check would silently miss real failures.
+     */
+    private postJson;
+    /**
+     * GET helper for the portal endpoints that take query parameters
+     * (currently just `account/auth/key/download`). Returns the raw text
+     * since download endpoints can return PEMs or JSON depending on Apple's
+     * mood — caller decides how to parse.
+     */
+    private getRaw;
+    /**
+     * Create an App Store Connect API key via the developer portal's
+     * `account/auth/key/v2/create` endpoint. Reverse-engineered from the
+     * _current_ @expo/apple-utils npm package (v2.1.21), which is what
+     * EAS CLI uses to manage Apple credentials in production.
+     *
+     * This differs from older published reverse-engineering guides:
+     *   • URL uses the `/v2/create` suffix (Apple kept it)
+     *   • Field is `serviceConfigurations`, shape is an object keyed by
+     *     service id (NOT `serviceConfigurationsRequests: [...]` array)
+     *   • Body REQUIRES `scope: "team"`
+     *   • Needs a scope-specific CSRF warmup via the `keys` endpoint
+     *     before the create call (EAS's `ensureCSRFAsync("keys", …)`)
+     *
+     * For an App Store Connect API key (PUBLIC_API, used by altool for
+     * TestFlight uploads), `serviceConfigurations` is an empty object `{}`.
+     * For an APNs auth key, it's `{ "U27F4V844T": [] }`. For MusicKit:
+     * `{ "6A7HVUVQ3M": [musicId] }`, etc.
+     *
+     * Apple's name validator rejects parentheses, brackets, and most
+     * punctuation — sanitize to alphanumeric + space + dash + underscore
+     * + period and collapse whitespace.
+     */
+    createApiKey(rawName: string, serviceConfigurations?: Record<string, unknown[]>): Promise<{
+        keyId: string;
+        raw: any;
+    }>;
+    /**
+     * Fetch a single API key by id via `account/auth/key/get`. Reverse-
+     * engineered from Spaceship's `get_key`. Returns the raw key record so
+     * the caller can extract whatever fields it needs (e.g. issuerId).
+     *
+     * Form-encoded POST — same shape as every other PortalClient mutation
+     * except the JSON `create` endpoint.
+     */
+    getApiKey(keyId: string): Promise<any>;
+    /**
+     * Revoke an existing key. Form-encoded POST per Spaceship's
+     * `revoke_key!`. Used for cleaning up orphan keys created during
+     * failed wizard runs.
+     */
+    revokeApiKey(keyId: string): Promise<void>;
+    /** Apple's hardcoded service id for APNs auth keys (from Spaceship). */
+    static readonly APNS_SERVICE_ID = "U27F4V844T";
+    /**
+     * Create an APNs Authentication Key (.p8) via the developer portal.
+     *
+     * Apple requires BOTH `serviceConfigurations` (the map) AND
+     * `serviceConfigurationsRequests` (the array of full config objects)
+     * in the v2/create body. Just sending the map alone results in
+     * "No value was provided for the parameter 'serviceConfigurations'".
+     *
+     * The exact body comes from @expo/apple-utils v2.1.21 — both fields
+     * are produced by separate functions (`d` for the map, `h` for the
+     * array) and merged into the create payload.
+     *
+     * Apple also rejects duplicate key names ("Another key with same
+     * name exists") — we dedupe by listing existing keys first and
+     * appending " (N)" until we find a free slot, mirroring the
+     * provisioning profile dedup.
+     */
+    createApnsAuthKey(rawName: string): Promise<{
+        keyId: string;
+        pem: string;
+        raw: any;
+    }>;
+    /**
+     * Find existing APNs auth keys in the team. Used by the wizard to
+     * detect "you already have one" cases and offer to reuse rather than
+     * proliferate keys.
+     */
+    listApnsAuthKeys(): Promise<{
+        keyId: string;
+        keyName: string;
+        canDownload: boolean;
+    }[]>;
+    /**
+     * Download an existing App Store Connect API key as PEM. Spaceship's
+     * `download_key` endpoint — GET with teamId + keyId in query string.
+     * Returns the raw .p8 PEM text. Apple shows the .p8 exactly once
+     * (after creation), so call this immediately after createApiKey.
+     */
+    downloadApiKey(keyId: string): Promise<string>;
+    /**
+     * List existing API keys via the portal. Used to discover the team's
+     * issuer id — every key in the team shares the same issuer id, and
+     * altool needs it alongside the key id and .p8 file.
+     *
+     * Form-encoded POST (NOT JSON), with pagination params, per Spaceship's
+     * `list_keys` method. JSON returned 415 from this endpoint.
+     */
+    listApiKeys(): Promise<{
+        keys: any[];
+        issuerId?: string;
+    }>;
     private post;
     listTeams(): Promise<any[]>;
     listAppIds(): Promise<any[]>;
@@ -1410,6 +1621,28 @@ declare class PortalClient {
         enableIAP?: boolean;
     }): Promise<any>;
     deleteAppId(appIdId: string): Promise<void>;
+    /**
+     * Toggle a capability (a.k.a. "service") on a bundle ID. Mirrors
+     * Spaceship::Portal's `update_service` — the legacy portal endpoint
+     * still works and is the only session-cookie-authenticated way to flip
+     * capabilities like Push Notifications and Sign in with Apple from
+     * outside the Apple Developer web UI.
+     *
+     * Common service codes (from Spaceship portal/portal_client.rb):
+     *   push          → push notifications
+     *   APG3427HIY    → Sign in with Apple
+     *   IAD53UNK2F    → in-app purchase
+     *   homeKit       → HomeKit
+     *   healthKit     → HealthKit
+     *
+     * @param featureType  Apple's internal capability key (string code or short name)
+     * @param enabled      true → turn on, false → turn off
+     */
+    setBundleCapability(params: {
+        appIdId: string;
+        featureType: string;
+        enabled: boolean;
+    }): Promise<void>;
     listCertificates(types?: string[]): Promise<any[]>;
     listPushCertificates(): Promise<any[]>;
     createCertificate(params: {
@@ -1470,6 +1703,134 @@ declare class PortalClient {
     static OLDER_IOS_CERTIFICATE_TYPES: readonly string[];
 }
 
+/**
+ * App Store Connect "iris" admin API client.
+ *
+ * The iris API lives at `https://appstoreconnect.apple.com/iris/v1/*` and
+ * is what App Store Connect's own web UI uses for everything that doesn't
+ * fit the public REST API (which requires JWT). Authentication is via the
+ * Olympus session cookies we already obtain after SIRP + 2FA login.
+ *
+ * Notable iris endpoints (reverse-engineered from the App Store Connect
+ * web app — Apple does not publish this API, so the shapes below are best
+ * effort and may need iteration):
+ *
+ *   POST /iris/v1/apiKeys
+ *     Body: { data: { type: "apiKeys", attributes: {
+ *       nickname, allAppsVisible, roles: ["DEVELOPER" | "APP_MANAGER" | ...]
+ *     }}}
+ *     Response: { data: { id, attributes: { nickname, kid, privateKey?, ... }}}
+ *
+ *     `kid` is the key ID used in JWT auth (e.g. "2X9R4HXF34"). The
+ *     `privateKey` field, when present, contains the PEM-encoded .p8
+ *     content. Apple shows this exactly ONCE at creation time — if we
+ *     don't capture it, the key is bricked and must be revoked.
+ *
+ *   GET  /iris/v1/apiKeys
+ *     List existing keys. Used to find the issuer id.
+ *
+ * Roles the wizard uses: "APP_MANAGER" is the minimum needed for
+ * TestFlight uploads via altool. Higher roles work too.
+ *
+ * Failure modes:
+ *   • 403 → user lacks Account Holder / Admin role → fall back to manual
+ *   • 4xx with `error.detail` → surface the message to the user
+ *   • 200 but no `privateKey` in response → endpoint shape changed,
+ *     surface so we can iterate
+ */
+
+type ApiKeyRole = "ADMIN" | "FINANCE" | "ACCESS_TO_REPORTS" | "APP_MANAGER" | "DEVELOPER" | "MARKETING" | "SALES" | "CUSTOMER_SUPPORT";
+interface IrisApiKey {
+    id: string;
+    /** Key ID used for JWT auth (the short alphanumeric string) */
+    kid: string;
+    nickname: string;
+    /** PEM-encoded .p8 private key — only present in create response, ONCE */
+    privateKey?: string;
+    /** Issuer id (UUID) — needed by altool/iTMSTransporter alongside the key id */
+    issuerId?: string;
+    roles: ApiKeyRole[];
+    allAppsVisible: boolean;
+}
+declare class IrisClient {
+    private session;
+    private cookieStr;
+    constructor(session: AppleSession);
+    private buildHeaders;
+    /**
+     * Issue a request and absorb any new cookies (Apple rotates session
+     * cookies on a lot of iris calls).
+     */
+    private request;
+    /**
+     * List existing API keys. Used both as a sanity check (the user has
+     * permission) and to discover the team's issuer id (which is the same
+     * for every key in the team and is needed by altool).
+     *
+     * Important: Apple's iris endpoint rejects most query parameters with
+     * `PARAMETER_ERROR.INVALID`. Call with no params and let the API return
+     * its default page.
+     */
+    listApiKeys(): Promise<{
+        keys: IrisApiKey[];
+        issuerId?: string;
+    }>;
+    /**
+     * Create a new API key. Apple returns the .p8 PEM exactly once in the
+     * create response — capture it immediately or the key is dead weight.
+     *
+     * `keyType` is required by Apple's iris API:
+     *   • PUBLIC_API     — the standard team-wide API key (what TestFlight uploads need)
+     *   • MARKETING_API  — for App Analytics access only
+     */
+    createApiKey(input: {
+        nickname: string;
+        roles?: ApiKeyRole[];
+        allAppsVisible?: boolean;
+        keyType?: "PUBLIC_API" | "MARKETING_API";
+    }): Promise<IrisApiKey>;
+    /**
+     * Fetch the .p8 PEM AND the team's issuer id for a previously-created
+     * ASC API key. Both come back in a single request via:
+     *
+     *   GET /iris/v1/apiKeys/{id}?fields[apiKeys]=privateKey&include=provider
+     *
+     * Sparse fieldset requesting ONLY `privateKey` is the magic that makes
+     * Apple actually include the (base64-encoded) PEM in the response —
+     * the default view returns `privateKey: null`. The `include=provider`
+     * pulls the team's contentProvider record into `included[]`, and its
+     * `id` field IS the issuer id altool needs (a UUID like
+     * `cfadaf94-44ca-4c2c-8fa6-ecc28d3c7d0d`).
+     *
+     * Reverse-engineered from @expo/apple-utils v2.1.21 (the package that
+     * powers EAS CLI), specifically the `ApiKey.downloadAsync` method
+     * combined with `ApiKey.infoAsync` reading `provider?.id`.
+     *
+     * Returns `{ pem, issuerId }`, or `null` if Apple won't return the
+     * private key (typically because the key was already downloaded once).
+     */
+    fetchApiKeyPrivateKey(keyId: string): Promise<{
+        pem: string;
+        issuerId?: string;
+    } | null>;
+    /**
+     * @deprecated Kept as a fallback probe for debugging. The real path
+     * is the sparse fieldset above — everything in this brute-force list
+     * returned 404 during testing. Left here so we can re-verify if Apple
+     * changes anything.
+     */
+    fetchApiKeyPrivateKeyBruteForce(keyId: string): Promise<string | null>;
+    /** Internal: like request() but lets us override headers. */
+    private requestWithHeaders;
+    /** Internal: fetch an absolute URL with the session cookies. */
+    private requestAbsolute;
+    deleteApiKey(keyId: string): Promise<void>;
+}
+/** Thrown when the user doesn't have permission to use the iris admin API. */
+declare class IrisAuthError extends Error {
+    constructor(message: string);
+}
+
 declare class AppStoreConnectClient {
     readonly http: RequestClient;
     readonly certificates: CertificatesResource;
@@ -1510,4 +1871,4 @@ declare class AppStoreConnectClient {
     request<T>(path: string, options?: RequestOptions): Promise<T>;
 }
 
-export { type JsonApiErrorResponse as $, AppStoreConnectClient as A, type BundleId as B, type Certificate as C, type Device as D, AppStoreVersionsResource as E, type AppStoreVersion as F, type AppStoreVersionLocalization as G, AppScreenshotsResource as H, type AppScreenshot as I, type JsonApiResource as J, type AppScreenshotSet as K, type ListParams as L, ReviewSubmissionsResource as M, type ReviewSubmission as N, type AppStoreVersionSubmission as O, type Profile as P, loginWithAppleId as Q, RequestClient as R, checkPortalResponse as S, TokenManager as T, type UploadOperation as U, ProgramLicenseAgreementError as V, type AppleSessionConfig as W, type AppleSession as X, type ContractMessage as Y, PortalClient as Z, type JsonApiRelationship as _, AppStoreConnectError as a, RateLimitError as b, type AppStoreConnectConfig as c, type TokenConfig as d, type RequestOptions as e, type JsonApiResponse as f, type JsonApiListResponse as g, type JsonApiError as h, type App as i, type Build as j, type BetaGroup as k, type BetaBuildLocalization as l, type BuildBetaDetail as m, type PreReleaseVersion$1 as n, type BundleIdCapability as o, type CapabilitySettingInput as p, type CapabilitySetting as q, type CapabilityOption as r, CertificatesResource as s, ProfilesResource as t, BundleIdsResource as u, DevicesResource as v, AppsResource as w, BuildsResource as x, BetaGroupsResource as y, CapabilitiesResource as z };
+export { type ContractMessage as $, type AppleSession as A, type BundleId as B, type Certificate as C, type Device as D, CapabilitiesResource as E, AppStoreVersionsResource as F, type AppStoreVersion as G, type AppStoreVersionLocalization as H, AppScreenshotsResource as I, type JsonApiResource as J, type AppScreenshot as K, type ListParams as L, type AppScreenshotSet as M, ReviewSubmissionsResource as N, type ReviewSubmission as O, type Profile as P, type AppStoreVersionSubmission as Q, RequestClient as R, loginWithAppleId as S, TokenManager as T, type UploadOperation as U, beginLogin as V, submitTwoFactorCode as W, requestSmsCode as X, checkPortalResponse as Y, ProgramLicenseAgreementError as Z, type AppleSessionConfig as _, AppStoreConnectClient as a, type PendingLogin as a0, type TwoFactorChallenge as a1, type BeginLoginResult as a2, PortalClient as a3, IrisClient as a4, IrisAuthError as a5, type IrisApiKey as a6, type ApiKeyRole as a7, type JsonApiRelationship as a8, type JsonApiErrorResponse as a9, AppStoreConnectError as b, RateLimitError as c, type AppStoreConnectConfig as d, type TokenConfig as e, type RequestOptions as f, type JsonApiResponse as g, type JsonApiListResponse as h, type JsonApiError as i, type App as j, type Build as k, type BetaGroup as l, type BetaBuildLocalization as m, type BuildBetaDetail as n, type PreReleaseVersion$1 as o, type BundleIdCapability as p, type CapabilitySettingInput as q, type CapabilitySetting as r, type CapabilityOption as s, CertificatesResource as t, ProfilesResource as u, BundleIdsResource as v, DevicesResource as w, AppsResource as x, BuildsResource as y, BetaGroupsResource as z };

package/dist/{index-DfCUVJX1.d.cts → index-Clyf4-lu.d.cts}

@@ -1,4 +1,4 @@
-import { A as AppStoreConnectClient } from './index-BLubSlgK.cjs';
+import { a as AppStoreConnectClient } from './index-CdfgEZwh.cjs';
 
 interface RuleResult {
     passed: boolean;

package/dist/index-CtydPNxA.d.cts

@@ -0,0 +1,61 @@
+import { C as CertOptions, a as CertResult, c as createCertificate, d as downloadCertificate, f as findValidCertificates, r as revokeCertificate, b as revokeExpiredCertificates } from './cert-uLLdb5a7.cjs';
+
+/**
+ * Generate EC P-256 CSR — used by App Store Connect API (JWT auth).
+ */
+declare function generateCSR(): Promise<{
+    csr: string;
+    privateKey: string;
+}>;
+/**
+ * Generate RSA 2048 CSR — required by Apple Developer Portal (session auth).
+ * Matches Fastlane's create_certificate_signing_request which uses RSA 2048.
+ */
+declare function generateRSACSR(): {
+    csr: string;
+    privateKey: string;
+};
+
+/**
+ * PKCS#12 (.p12) packaging — bundles a certificate + private key into an
+ * encrypted .p12 file, which is the format Apple's codesign, xcodebuild,
+ * and Fastlane's cert action all expect for distribution signing.
+ *
+ * Uses node-forge's pkcs12.toPkcs12Asn1 which emits the legacy-compatible
+ * format (3DES + RC2) that Keychain Access, iTMSTransporter, and older
+ * Apple tooling accept. OpenSSL 3's default format requires the -legacy
+ * flag and is not portable; node-forge sidesteps that entirely.
+ */
+interface BundleP12Options {
+    /** Certificate: PEM string, or raw DER Buffer as returned by PortalClient.downloadCertificate */
+    certificate: Buffer | string;
+    /** PEM-encoded RSA private key (as produced by generateRSACSR) */
+    privateKeyPem: string;
+    /** Password used to encrypt the .p12 */
+    password: string;
+    /** Friendly name embedded in the bag (shown in Keychain Access) */
+    friendlyName?: string;
+}
+/**
+ * Create a PKCS#12 buffer containing the given cert + private key,
+ * encrypted with `password`. Returns a Buffer suitable for writing to
+ * disk or uploading as a form field.
+ */
+declare function bundleP12(options: BundleP12Options): Buffer;
+
+type index_BundleP12Options = BundleP12Options;
+declare const index_CertOptions: typeof CertOptions;
+declare const index_CertResult: typeof CertResult;
+declare const index_bundleP12: typeof bundleP12;
+declare const index_createCertificate: typeof createCertificate;
+declare const index_downloadCertificate: typeof downloadCertificate;
+declare const index_findValidCertificates: typeof findValidCertificates;
+declare const index_generateCSR: typeof generateCSR;
+declare const index_generateRSACSR: typeof generateRSACSR;
+declare const index_revokeCertificate: typeof revokeCertificate;
+declare const index_revokeExpiredCertificates: typeof revokeExpiredCertificates;
+declare namespace index {
+  export { type index_BundleP12Options as BundleP12Options, index_CertOptions as CertOptions, index_CertResult as CertResult, index_bundleP12 as bundleP12, index_createCertificate as createCertificate, index_downloadCertificate as downloadCertificate, index_findValidCertificates as findValidCertificates, index_generateCSR as generateCSR, index_generateRSACSR as generateRSACSR, index_revokeCertificate as revokeCertificate, index_revokeExpiredCertificates as revokeExpiredCertificates };
+}
+
+export { type BundleP12Options as B, generateRSACSR as a, bundleP12 as b, generateCSR as g, index as i };

package/dist/{index-BQJIJlK7.d.cts → index-DHxi-QPC.d.cts}

@@ -1,6 +1,6 @@
-import { A as AppStoreConnectClient } from './index-BLubSlgK.cjs';
-import { a as CertResult } from './cert-BmJGtYtb.cjs';
-import { S as SighResult } from './index-BFdNOmPJ.cjs';
+import { a as AppStoreConnectClient } from './index-CdfgEZwh.cjs';
+import { a as CertResult } from './cert-uLLdb5a7.cjs';
+import { S as SighResult } from './index-BN0iWhuw.cjs';
 
 type StorageMode = "git" | "s3" | "local";
 

package/dist/{index-BN0ubxjZ.d.ts → index-Di4Ic0EE.d.ts}

@@ -1,6 +1,6 @@
-import { A as AppStoreConnectClient } from './index-D1Izm7qt.js';
-import { a as CertResult } from './cert-owkOFNW8.js';
-import { S as SighResult } from './index-TfXqwuac.js';
+import { a as AppStoreConnectClient } from './index-BwwpAlk2.js';
+import { a as CertResult } from './cert-e5GAgAPb.js';
+import { S as SighResult } from './index-CEldrbyz.js';
 
 type StorageMode = "git" | "s3" | "local";
 

package/dist/{index-EcVvViW8.d.cts → index-DrCOh0Vh.d.cts}

@@ -1,4 +1,4 @@
-import { A as AppStoreConnectClient } from './index-BLubSlgK.cjs';
+import { a as AppStoreConnectClient } from './index-CdfgEZwh.cjs';
 import { C as CertificateType } from './enums-B609j2rb.cjs';
 
 type PushCertKind = "development" | "production" | "website" | "voip" | "passbook";

package/dist/{index-B0yhu_LZ.d.ts → index-EKU_G1G5.d.ts}

@@ -1,4 +1,4 @@
-import { A as AppStoreConnectClient, p as CapabilitySettingInput, B as BundleId, o as BundleIdCapability, i as App } from './index-D1Izm7qt.js';
+import { a as AppStoreConnectClient, q as CapabilitySettingInput, B as BundleId, p as BundleIdCapability, j as App } from './index-BwwpAlk2.js';
 import { B as BundleIdPlatform, d as CapabilityType } from './enums-B609j2rb.js';
 
 interface ProduceOptions {

package/dist/{index-CWNLnSOL.d.cts → index-XsMsVc3O.d.cts}

@@ -1,4 +1,4 @@
-import { A as AppStoreConnectClient } from './index-BLubSlgK.cjs';
+import { a as AppStoreConnectClient } from './index-CdfgEZwh.cjs';
 import { b as Platform, R as ReleaseType } from './enums-B609j2rb.cjs';
 
 interface LocalizedMetadata {

package/dist/{index-B9yXicrQ.d.ts → index-jeI44Q5G.d.ts}

@@ -1,4 +1,4 @@
-import { A as AppStoreConnectClient } from './index-D1Izm7qt.js';
+import { a as AppStoreConnectClient } from './index-BwwpAlk2.js';
 
 interface RuleResult {
     passed: boolean;

package/dist/{index-DHw08dUc.d.ts → index-mddpvrRX.d.ts}

@@ -1,4 +1,4 @@
-import { A as AppStoreConnectClient, j as Build } from './index-D1Izm7qt.js';
+import { a as AppStoreConnectClient, k as Build } from './index-BwwpAlk2.js';
 
 /**
  * Shared types for the pilot module's upload backends.