@sitepong/fastnode 0.2.0 → 0.2.1

package/dist/deliver/index.d.cts

@@ -1,3 +1,3 @@
-import '../index-CMH_GpN9.cjs';
+import '../index-CdfgEZwh.cjs';
 import '../enums-B609j2rb.cjs';
-export { D as DeliverOptions, a as DeliverResult, L as LocalizedMetadata, M as MetadataSet, l as loadMetadata, s as submitForReview, b as uploadMetadata, c as uploadScreenshots, u as uploadToAppStore } from '../index-CdYdwxpQ.cjs';
+export { D as DeliverOptions, a as DeliverResult, L as LocalizedMetadata, M as MetadataSet, l as loadMetadata, s as submitForReview, b as uploadMetadata, c as uploadScreenshots, u as uploadToAppStore } from '../index-XsMsVc3O.cjs';

package/dist/deliver/index.d.ts

@@ -1,3 +1,3 @@
-import '../index-D2z7RiAM.js';
+import '../index-BwwpAlk2.js';
 import '../enums-B609j2rb.js';
-export { D as DeliverOptions, a as DeliverResult, L as LocalizedMetadata, M as MetadataSet, l as loadMetadata, s as submitForReview, b as uploadMetadata, c as uploadScreenshots, u as uploadToAppStore } from '../index-CsFIp7OO.js';
+export { D as DeliverOptions, a as DeliverResult, L as LocalizedMetadata, M as MetadataSet, l as loadMetadata, s as submitForReview, b as uploadMetadata, c as uploadScreenshots, u as uploadToAppStore } from '../index-BbY_H_f6.js';

package/dist/{index-Ce-WMV7c.d.cts → index-BN0iWhuw.d.cts}

@@ -1,4 +1,4 @@
-import { a as AppStoreConnectClient, P as Profile } from './index-CMH_GpN9.cjs';
+import { a as AppStoreConnectClient, P as Profile } from './index-CdfgEZwh.cjs';
 import { P as ProfileType } from './enums-B609j2rb.cjs';
 
 interface SighOptions {

package/dist/{index-CQKpbHZt.d.ts → index-BNP7Bpu5.d.ts}

@@ -1,4 +1,4 @@
-import { C as CertOptions, a as CertResult, c as createCertificate, d as downloadCertificate, f as findValidCertificates, r as revokeCertificate, b as revokeExpiredCertificates } from './cert-DtYDJBjG.js';
+import { C as CertOptions, a as CertResult, c as createCertificate, d as downloadCertificate, f as findValidCertificates, r as revokeCertificate, b as revokeExpiredCertificates } from './cert-e5GAgAPb.js';
 
 /**
  * Generate EC P-256 CSR — used by App Store Connect API (JWT auth).

package/dist/{index-CsFIp7OO.d.ts → index-BbY_H_f6.d.ts}

@@ -1,4 +1,4 @@
-import { a as AppStoreConnectClient } from './index-D2z7RiAM.js';
+import { a as AppStoreConnectClient } from './index-BwwpAlk2.js';
 import { b as Platform, R as ReleaseType } from './enums-B609j2rb.js';
 
 interface LocalizedMetadata {

package/dist/{index-AD8QXY1T.d.cts → index-BgHagzj1.d.cts}

@@ -1,4 +1,4 @@
-import { a as AppStoreConnectClient, k as Build } from './index-CMH_GpN9.cjs';
+import { a as AppStoreConnectClient, k as Build } from './index-CdfgEZwh.cjs';
 
 /**
  * Shared types for the pilot module's upload backends.

package/dist/{index-KCB2q1-8.d.cts → index-BjkOUQcQ.d.cts}

@@ -1,4 +1,4 @@
-import { a as AppStoreConnectClient, q as CapabilitySettingInput, B as BundleId, p as BundleIdCapability, j as App } from './index-CMH_GpN9.cjs';
+import { a as AppStoreConnectClient, q as CapabilitySettingInput, B as BundleId, p as BundleIdCapability, j as App } from './index-CdfgEZwh.cjs';
 import { B as BundleIdPlatform, d as CapabilityType } from './enums-B609j2rb.cjs';
 
 interface ProduceOptions {

package/dist/{index-D2z7RiAM.d.ts → index-BwwpAlk2.d.ts}

@@ -1571,6 +1571,11 @@ declare class PortalClient {
      * The exact body comes from @expo/apple-utils v2.1.21 — both fields
      * are produced by separate functions (`d` for the map, `h` for the
      * array) and merged into the create payload.
+     *
+     * Apple also rejects duplicate key names ("Another key with same
+     * name exists") — we dedupe by listing existing keys first and
+     * appending " (N)" until we find a free slot, mirroring the
+     * provisioning profile dedup.
      */
     createApnsAuthKey(rawName: string): Promise<{
         keyId: string;

package/dist/{index-Kq3rbG0u.d.ts → index-C2YLoFVl.d.ts}

@@ -1,4 +1,4 @@
-import { a as AppStoreConnectClient } from './index-D2z7RiAM.js';
+import { a as AppStoreConnectClient } from './index-BwwpAlk2.js';
 import { C as CertificateType } from './enums-B609j2rb.js';
 
 type PushCertKind = "development" | "production" | "website" | "voip" | "passbook";

package/dist/{index-CojSGJ7m.d.ts → index-CEldrbyz.d.ts}

@@ -1,4 +1,4 @@
-import { a as AppStoreConnectClient, P as Profile } from './index-D2z7RiAM.js';
+import { a as AppStoreConnectClient, P as Profile } from './index-BwwpAlk2.js';
 import { P as ProfileType } from './enums-B609j2rb.js';
 
 interface SighOptions {

package/dist/{index-CMH_GpN9.d.cts → index-CdfgEZwh.d.cts}

@@ -1571,6 +1571,11 @@ declare class PortalClient {
      * The exact body comes from @expo/apple-utils v2.1.21 — both fields
      * are produced by separate functions (`d` for the map, `h` for the
      * array) and merged into the create payload.
+     *
+     * Apple also rejects duplicate key names ("Another key with same
+     * name exists") — we dedupe by listing existing keys first and
+     * appending " (N)" until we find a free slot, mirroring the
+     * provisioning profile dedup.
      */
     createApnsAuthKey(rawName: string): Promise<{
         keyId: string;

package/dist/{index-BW8wQUGC.d.cts → index-Clyf4-lu.d.cts}

@@ -1,4 +1,4 @@
-import { a as AppStoreConnectClient } from './index-CMH_GpN9.cjs';
+import { a as AppStoreConnectClient } from './index-CdfgEZwh.cjs';
 
 interface RuleResult {
     passed: boolean;

package/dist/{index-CCs5irG7.d.cts → index-CtydPNxA.d.cts}

@@ -1,4 +1,4 @@
-import { C as CertOptions, a as CertResult, c as createCertificate, d as downloadCertificate, f as findValidCertificates, r as revokeCertificate, b as revokeExpiredCertificates } from './cert-6m1R8UeW.cjs';
+import { C as CertOptions, a as CertResult, c as createCertificate, d as downloadCertificate, f as findValidCertificates, r as revokeCertificate, b as revokeExpiredCertificates } from './cert-uLLdb5a7.cjs';
 
 /**
  * Generate EC P-256 CSR — used by App Store Connect API (JWT auth).

package/dist/{index-CQd4bo3G.d.cts → index-DHxi-QPC.d.cts}

@@ -1,6 +1,6 @@
-import { a as AppStoreConnectClient } from './index-CMH_GpN9.cjs';
-import { a as CertResult } from './cert-6m1R8UeW.cjs';
-import { S as SighResult } from './index-Ce-WMV7c.cjs';
+import { a as AppStoreConnectClient } from './index-CdfgEZwh.cjs';
+import { a as CertResult } from './cert-uLLdb5a7.cjs';
+import { S as SighResult } from './index-BN0iWhuw.cjs';
 
 type StorageMode = "git" | "s3" | "local";
 

package/dist/{index-DZaPkUnC.d.ts → index-Di4Ic0EE.d.ts}

@@ -1,6 +1,6 @@
-import { a as AppStoreConnectClient } from './index-D2z7RiAM.js';
-import { a as CertResult } from './cert-DtYDJBjG.js';
-import { S as SighResult } from './index-CojSGJ7m.js';
+import { a as AppStoreConnectClient } from './index-BwwpAlk2.js';
+import { a as CertResult } from './cert-e5GAgAPb.js';
+import { S as SighResult } from './index-CEldrbyz.js';
 
 type StorageMode = "git" | "s3" | "local";
 

package/dist/{index-BWK-T2-S.d.cts → index-DrCOh0Vh.d.cts}

@@ -1,4 +1,4 @@
-import { a as AppStoreConnectClient } from './index-CMH_GpN9.cjs';
+import { a as AppStoreConnectClient } from './index-CdfgEZwh.cjs';
 import { C as CertificateType } from './enums-B609j2rb.cjs';
 
 type PushCertKind = "development" | "production" | "website" | "voip" | "passbook";

package/dist/{index-BpiEBPVd.d.ts → index-EKU_G1G5.d.ts}

@@ -1,4 +1,4 @@
-import { a as AppStoreConnectClient, q as CapabilitySettingInput, B as BundleId, p as BundleIdCapability, j as App } from './index-D2z7RiAM.js';
+import { a as AppStoreConnectClient, q as CapabilitySettingInput, B as BundleId, p as BundleIdCapability, j as App } from './index-BwwpAlk2.js';
 import { B as BundleIdPlatform, d as CapabilityType } from './enums-B609j2rb.js';
 
 interface ProduceOptions {

package/dist/{index-CdYdwxpQ.d.cts → index-XsMsVc3O.d.cts}

@@ -1,4 +1,4 @@
-import { a as AppStoreConnectClient } from './index-CMH_GpN9.cjs';
+import { a as AppStoreConnectClient } from './index-CdfgEZwh.cjs';
 import { b as Platform, R as ReleaseType } from './enums-B609j2rb.cjs';
 
 interface LocalizedMetadata {

package/dist/{index-CLsvyTkh.d.ts → index-jeI44Q5G.d.ts}

@@ -1,4 +1,4 @@
-import { a as AppStoreConnectClient } from './index-D2z7RiAM.js';
+import { a as AppStoreConnectClient } from './index-BwwpAlk2.js';
 
 interface RuleResult {
     passed: boolean;

package/dist/{index-D82CmjMP.d.ts → index-mddpvrRX.d.ts}

@@ -1,4 +1,4 @@
-import { a as AppStoreConnectClient, k as Build } from './index-D2z7RiAM.js';
+import { a as AppStoreConnectClient, k as Build } from './index-BwwpAlk2.js';
 
 /**
  * Shared types for the pilot module's upload backends.

package/dist/index.cjs

@@ -2502,6 +2502,12 @@ var init_xcode_metrics = __esm({
 });
 
 // src/client/portal.ts
+function pickUniqueKeyName(base, taken) {
+  if (!taken.has(base)) return base;
+  let n = 1;
+  while (taken.has(`${base} - ${n}`)) n++;
+  return `${base} - ${n}`;
+}
 var PORTAL_BASE, PortalClient;
 var init_portal = __esm({
   "src/client/portal.ts"() {
@@ -2620,12 +2626,17 @@ var init_portal = __esm({
        * + period and collapse whitespace.
        */
       async createApiKey(rawName, serviceConfigurations = {}) {
-        const name = rawName.replace(/[^A-Za-z0-9 _\-.]/g, " ").replace(/\s+/g, " ").trim().slice(0, 50);
-        if (!name) throw new Error("createApiKey: name is empty after sanitization");
+        const baseName = rawName.replace(/[^A-Za-z0-9 _\-.]/g, " ").replace(/\s+/g, " ").trim().slice(0, 45);
+        if (!baseName) throw new Error("createApiKey: name is empty after sanitization");
+        let existingNames = /* @__PURE__ */ new Set();
         try {
-          await this.listApiKeys();
+          const list = await this.listApiKeys();
+          existingNames = new Set(
+            (list.keys ?? []).map((k) => String(k.keyName ?? "").trim())
+          );
         } catch {
         }
+        const name = pickUniqueKeyName(baseName, existingNames);
         const body = {
           teamId: this.teamId,
           name,
@@ -2680,14 +2691,24 @@ var init_portal = __esm({
        * The exact body comes from @expo/apple-utils v2.1.21 — both fields
        * are produced by separate functions (`d` for the map, `h` for the
        * array) and merged into the create payload.
+       *
+       * Apple also rejects duplicate key names ("Another key with same
+       * name exists") — we dedupe by listing existing keys first and
+       * appending " (N)" until we find a free slot, mirroring the
+       * provisioning profile dedup.
        */
       async createApnsAuthKey(rawName) {
-        const name = rawName.replace(/[^A-Za-z0-9 _\-.]/g, " ").replace(/\s+/g, " ").trim().slice(0, 50);
-        if (!name) throw new Error("createApnsAuthKey: name is empty after sanitization");
+        const baseName = rawName.replace(/[^A-Za-z0-9 _\-.]/g, " ").replace(/\s+/g, " ").trim().slice(0, 45);
+        if (!baseName) throw new Error("createApnsAuthKey: name is empty after sanitization");
+        let existingNames = /* @__PURE__ */ new Set();
         try {
-          await this.listApiKeys();
+          const list = await this.listApiKeys();
+          existingNames = new Set(
+            (list.keys ?? []).map((k) => String(k.keyName ?? "").trim())
+          );
         } catch {
         }
+        const name = pickUniqueKeyName(baseName, existingNames);
         const body = {
           teamId: this.teamId,
           name,
@@ -9003,6 +9024,8 @@ init_iris();
 init_client();
 init_csr();
 var DIST_CERT_TYPE = PortalClient.CERT_TYPES.IOS_DISTRIBUTION;
+var PUSH_PROD_TYPE = PortalClient.CERT_TYPES.IOS_PRODUCTION_PUSH;
+var PUSH_DEV_TYPE = PortalClient.CERT_TYPES.IOS_DEVELOPMENT_PUSH;
 function randomPassword(length = 32) {
   const alphabet = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789";
   const bytes = crypto.randomBytes(length);
@@ -9049,11 +9072,12 @@ async function oneClickListTeams(session) {
 async function oneClickInventory(session, teamId) {
   const portal = new PortalClient(session, teamId);
   await portal.init();
-  const [appIds, allCerts, profiles, pushCerts] = await Promise.all([
+  const [appIds, allCerts, profiles, pushCerts, apiKeys] = await Promise.all([
     portal.listAppIds(),
     portal.listCertificates([DIST_CERT_TYPE]),
     portal.listProfiles(),
-    portal.listPushCertificates()
+    portal.listPushCertificates(),
+    portal.listApiKeys().catch(() => ({ keys: [] }))
   ]);
   const distributionCerts = (allCerts ?? []).map((c) => ({
     certificateId: c.certificateId,
@@ -9062,6 +9086,15 @@ async function oneClickInventory(session, teamId) {
     expirationDate: c.expirationDateString,
     ownerName: c.ownerName
   }));
+  const apnsAuthKeys = (apiKeys.keys ?? []).filter(
+    (k) => (k.services ?? []).some(
+      (s) => s.id === PortalClient.APNS_SERVICE_ID || /apns/i.test(s.name ?? "")
+    )
+  ).map((k) => ({
+    keyId: k.keyId,
+    keyName: k.keyName,
+    dateCreated: k.dateCreated
+  }));
   return {
     team: { id: teamId },
     bundleIds: (appIds ?? []).map((a) => ({
@@ -9071,6 +9104,8 @@ async function oneClickInventory(session, teamId) {
     })),
     distributionCerts,
     distCertCapacity: { used: distributionCerts.length, max: 3 },
+    apnsAuthKeys,
+    apnsKeyCapacity: { used: apnsAuthKeys.length, max: 2 },
     pushCerts: (pushCerts ?? []).map((c) => ({
       certificateId: c.certificateId,
       name: c.name ?? "Push",
@@ -9108,15 +9143,52 @@ async function createDistCert(portal) {
   }
   return { certificateId: cert.certificateId, privateKeyPem: privateKey, certContent };
 }
+async function createPushCert(portal, appIdId, type) {
+  const { csr, privateKey } = generateRSACSR();
+  const cert = await portal.createCertificate({ type, csrContent: csr, appIdId });
+  let certContent;
+  if (cert.certificateContent) {
+    certContent = Buffer.from(cert.certificateContent, "base64");
+  } else {
+    certContent = await portal.downloadCertificate(cert.certificateId, type);
+  }
+  return { certificateId: cert.certificateId, privateKeyPem: privateKey, certContent };
+}
+function findExistingPushCertForBundle(pushCerts, appIdId, bundleIdentifier, kind) {
+  for (const c of pushCerts) {
+    const appMatches = c.appId?.appIdId === appIdId || c.appId?.identifier === bundleIdentifier;
+    if (!appMatches) continue;
+    const ts = (c.typeString ?? "").toLowerCase();
+    const name = (c.name ?? "").toLowerCase();
+    const looksLikePush = ts.includes("push") || ts.includes("apns") || name.includes("apple push services");
+    if (!looksLikePush) continue;
+    const isProduction = ts.includes("production");
+    const isSandbox = ts.includes("development") || ts.includes("sandbox");
+    const isUnified = !isProduction && !isSandbox;
+    if (!isUnified) {
+      if (kind === "production" && !isProduction) continue;
+      if (kind === "sandbox" && !isSandbox) continue;
+    }
+    return {
+      certificateId: c.certificateId,
+      name: c.name ?? "Apple Push Services",
+      expirationDate: c.expirationDateString
+    };
+  }
+  return null;
+}
 async function oneClickSetup(input) {
   const opts = {
     generateDistributionCert: input.options?.generateDistributionCert ?? true,
     generateStoreProfile: input.options?.generateStoreProfile ?? true,
     generateAscApiKey: input.options?.generateAscApiKey ?? true,
     generateApnsAuthKey: input.options?.generateApnsAuthKey ?? true,
+    generatePushProductionCert: input.options?.generatePushProductionCert ?? false,
+    generatePushSandboxCert: input.options?.generatePushSandboxCert ?? false,
     enableSignInWithApple: input.options?.enableSignInWithApple ?? true,
     enablePushNotifications: input.options?.enablePushNotifications ?? true,
-    revokeCertIds: input.options?.revokeCertIds ?? []
+    revokeCertIds: input.options?.revokeCertIds ?? [],
+    revokeApnsKeyIds: input.options?.revokeApnsKeyIds ?? []
   };
   const onProgress = input.onProgress ?? (() => {
   });
@@ -9187,6 +9259,11 @@ async function oneClickSetup(input) {
   created.provisioningProfileId = profile.id;
   const profileMeta = extractProfileMetadata(profile.content);
   if (profileMeta.uuid) created.profileUuid = profileMeta.uuid;
+  for (const keyId of opts.revokeApnsKeyIds) {
+    await step(`revoke_apns:${keyId}`, `Revoke APNs auth key ${keyId}`, async () => {
+      await portal.revokeApiKey(keyId);
+    });
+  }
   if (opts.generateApnsAuthKey) {
     await step("apns_auth_key", "APNs Authentication Key (.p8)", async () => {
       try {
@@ -9204,6 +9281,68 @@ async function oneClickSetup(input) {
       }
     });
   }
+  let pushCertCache = null;
+  const loadPushCerts = async () => {
+    if (pushCertCache == null) {
+      pushCertCache = await portal.listPushCertificates();
+    }
+    return pushCertCache;
+  };
+  async function provisionLegacyPushCert(stepId, label, kind, pushType, certType, friendlyName) {
+    await step(stepId, label, async () => {
+      try {
+        const existing = findExistingPushCertForBundle(
+          await loadPushCerts(),
+          appIdId,
+          input.bundleIdentifier,
+          kind
+        );
+        if (existing) {
+          warnings.push(
+            `${label} already exists for ${input.bundleIdentifier} ("${existing.name}"` + (existing.expirationDate ? `, expires ${existing.expirationDate}` : "") + `). Skipped \u2014 Apple caps these at 1 per bundle per environment and we can't recover the existing private key. Revoke it manually in Apple Developer Portal and re-run if you need a sitepong-managed copy.`
+          );
+          return;
+        }
+        const c = await createPushCert(portal, appIdId, pushType);
+        const pushPassword = randomPassword();
+        const p12 = bundleP12({
+          certificate: c.certContent,
+          privateKeyPem: c.privateKeyPem,
+          password: pushPassword,
+          friendlyName
+        });
+        additionalCerts.push({
+          cert_type: certType,
+          cert_base64: p12.toString("base64"),
+          cert_password: pushPassword
+        });
+      } catch (err) {
+        warnings.push(
+          `${label} could not be created: ${err.message}. You can upload an existing .p12 manually from the credentials list.`
+        );
+      }
+    });
+  }
+  if (opts.generatePushProductionCert) {
+    await provisionLegacyPushCert(
+      "push_prod_cert",
+      "APS Production push certificate (.p12)",
+      "production",
+      PUSH_PROD_TYPE,
+      "aps_production",
+      `${input.appName} APNs Production`
+    );
+  }
+  if (opts.generatePushSandboxCert) {
+    await provisionLegacyPushCert(
+      "push_sandbox_cert",
+      "APS Sandbox push certificate (.p12)",
+      "sandbox",
+      PUSH_DEV_TYPE,
+      "aps_sandbox",
+      `${input.appName} APNs Sandbox`
+    );
+  }
   let ascKeyId = "";
   let ascIssuerId = "";
   let ascP8Base64 = "";