@sitepong/fastnode 0.3.0 → 0.3.1

package/dist/deliver/index.d.cts

@@ -1,4 +1,4 @@
-import '../index-DrmS802s.cjs';
+import '../index-CpGV1f0L.cjs';
 import '../enums-yXNVh3UI.cjs';
-export { A as ASSET_FOLDERS, D as DeliverOptions, a as DeliverResult, L as LocalizedMetadata, M as MetadataSet, P as PlaceAssetsResult, U as UploadedAsset, g as categoryFor, l as loadMetadata, f as readImageSize, r as resolveImageGroups, s as submitForReview, d as uploadAssetLibrary, e as uploadLibraryAsset, b as uploadMetadata, c as uploadScreenshots, u as uploadToAppStore } from '../index-BaNcf7jt.cjs';
+export { A as ASSET_FOLDERS, D as DeliverOptions, a as DeliverResult, L as LocalizedMetadata, M as MetadataSet, P as PlaceAssetsResult, U as UploadedAsset, g as categoryFor, l as loadMetadata, f as readImageSize, r as resolveImageGroups, s as submitForReview, d as uploadAssetLibrary, e as uploadLibraryAsset, b as uploadMetadata, c as uploadScreenshots, u as uploadToAppStore } from '../index-BhGaVlK1.cjs';
 import '../apple-session-jUzBrql5.cjs';

package/dist/deliver/index.d.ts

@@ -1,4 +1,4 @@
-import '../index-lsuS2R1T.js';
+import '../index-CemR3UI9.js';
 import '../enums-yXNVh3UI.js';
-export { A as ASSET_FOLDERS, D as DeliverOptions, a as DeliverResult, L as LocalizedMetadata, M as MetadataSet, P as PlaceAssetsResult, U as UploadedAsset, g as categoryFor, l as loadMetadata, f as readImageSize, r as resolveImageGroups, s as submitForReview, d as uploadAssetLibrary, e as uploadLibraryAsset, b as uploadMetadata, c as uploadScreenshots, u as uploadToAppStore } from '../index-CBf0-NUQ.js';
+export { A as ASSET_FOLDERS, D as DeliverOptions, a as DeliverResult, L as LocalizedMetadata, M as MetadataSet, P as PlaceAssetsResult, U as UploadedAsset, g as categoryFor, l as loadMetadata, f as readImageSize, r as resolveImageGroups, s as submitForReview, d as uploadAssetLibrary, e as uploadLibraryAsset, b as uploadMetadata, c as uploadScreenshots, u as uploadToAppStore } from '../index-s2PigtDM.js';
 import '../apple-session-jUzBrql5.js';

package/dist/{index-DGkgRnZp.d.cts → index-925_Ov7X.d.cts}

@@ -1,4 +1,4 @@
-import { A as AppStoreConnectClient } from './index-DrmS802s.cjs';
+import { A as AppStoreConnectClient } from './index-CpGV1f0L.cjs';
 import { C as CertificateType } from './enums-yXNVh3UI.cjs';
 
 type PushCertKind = "development" | "production" | "website" | "voip" | "passbook";

package/dist/{index-DfkIz7i0.d.cts → index-BbVQzSV1.d.cts}

@@ -1,4 +1,4 @@
-import { A as AppStoreConnectClient, a8 as PortalClient, p as CapabilitySettingInput, B as BundleId, o as BundleIdCapability, i as App } from './index-DrmS802s.cjs';
+import { A as AppStoreConnectClient, a8 as PortalClient, p as CapabilitySettingInput, B as BundleId, o as BundleIdCapability, i as App } from './index-CpGV1f0L.cjs';
 import { B as BundleIdPlatform, d as CapabilityType } from './enums-yXNVh3UI.cjs';
 
 interface ProduceOptions {

package/dist/{index-BaNcf7jt.d.cts → index-BhGaVlK1.d.cts}

@@ -1,4 +1,4 @@
-import { A as AppStoreConnectClient, W as AppAssetLibraryRefDatumAttributes, X as AppAssetLibraryImageSpec } from './index-DrmS802s.cjs';
+import { A as AppStoreConnectClient, W as AppAssetLibraryRefDatumAttributes, X as AppAssetLibraryImageSpec } from './index-CpGV1f0L.cjs';
 import { l as AppAssetLibraryPlacementType, j as AppAssetLibraryAssetCategory, m as AppAssetLibraryAssetState, o as AppAssetLibraryFeature, b as Platform, R as ReleaseType } from './enums-yXNVh3UI.cjs';
 
 interface LocalizedMetadata {

package/dist/{index-DjC_gmnL.d.ts → index-C-EEYXSE.d.ts}

@@ -1,4 +1,4 @@
-import { A as AppStoreConnectClient, a8 as PortalClient, p as CapabilitySettingInput, B as BundleId, o as BundleIdCapability, i as App } from './index-lsuS2R1T.js';
+import { A as AppStoreConnectClient, a8 as PortalClient, p as CapabilitySettingInput, B as BundleId, o as BundleIdCapability, i as App } from './index-CemR3UI9.js';
 import { B as BundleIdPlatform, d as CapabilityType } from './enums-yXNVh3UI.js';
 
 interface ProduceOptions {

package/dist/{index-D1GHEM3c.d.ts → index-C18cijCd.d.ts}

@@ -1,4 +1,4 @@
-import { C as CertOptions, a as CertResult, c as createCertificate, d as downloadCertificate, f as findValidCertificates, r as revokeCertificate, b as revokeExpiredCertificates } from './cert-RvXmdMke.js';
+import { C as CertOptions, a as CertResult, c as createCertificate, d as downloadCertificate, f as findValidCertificates, r as revokeCertificate, b as revokeExpiredCertificates } from './cert-ClacRx9y.js';
 
 /**
  * Generate EC P-256 CSR — used by App Store Connect API (JWT auth).

package/dist/{index-rTZOdMRE.d.ts → index-CBM5XZKC.d.ts}

@@ -1,4 +1,4 @@
-import { A as AppStoreConnectClient } from './index-lsuS2R1T.js';
+import { A as AppStoreConnectClient } from './index-CemR3UI9.js';
 import { C as CertificateType } from './enums-yXNVh3UI.js';
 
 type PushCertKind = "development" | "production" | "website" | "voip" | "passbook";

package/dist/{index-lsuS2R1T.d.ts → index-CemR3UI9.d.ts}

@@ -1600,6 +1600,37 @@ declare class AppAssetLibrariesResource {
     }): Promise<AppAssetLibraryRefDatumAttributes>;
 }
 
+/**
+ * Keeps an Apple ID session between runs, like Spaceship's cookie in
+ * ~/.fastlane/spaceship/<user>/cookie — one password + 2FA covers every
+ * command (and every app on that Apple ID) until Apple expires the session.
+ *
+ * Files live in ~/.fastnode/sessions (or FASTNODE_SESSION_DIR), one per
+ * Apple ID, directory 0700 and files 0600: they are as good as a signed-in
+ * App Store Connect browser. A cached session is checked against olympus
+ * before use, so an expired one just falls through to a fresh sign-in.
+ */
+
+declare function sessionDir(): string;
+declare function saveAppleSession(session: AppleSession): void;
+declare function clearAppleSession(email: string): void;
+/** The Apple ID the last session was saved for, so a re-run needs no prompt at all. */
+declare function lastAppleId(): string | null;
+/** A saved session for this Apple ID that Apple still accepts, or null. */
+declare function loadAppleSession(email: string, fetchImpl?: typeof fetch): Promise<AppleSession | null>;
+/**
+ * Reuse the saved session for this Apple ID, or sign in (password + 2FA) and
+ * save the new one. The password is only asked for when a sign-in is needed.
+ */
+declare function signInWithAppleId(options: {
+    email?: string | null;
+    askEmail: () => Promise<string>;
+    askPassword: (email: string) => Promise<string>;
+    /** Ignore any saved session and sign in again. */
+    fresh?: boolean;
+    onLog?: (msg: string) => void;
+}): Promise<AppleSession>;
+
 /**
  * Apple Developer Portal Client
  * 1:1 port of Fastlane Spaceship PortalClient
@@ -2097,4 +2128,4 @@ declare class AppStoreConnectClient {
     request<T>(path: string, options?: RequestOptions): Promise<T>;
 }
 
-export { AppAssetLibraryVideosResource as $, AppStoreConnectClient as A, type BundleId as B, type Certificate as C, type Device as D, AppStoreVersionsResource as E, type AppStoreVersion as F, type AppStoreVersionLocalization as G, AppScreenshotsResource as H, type AppScreenshot as I, type JsonApiResource as J, type AppScreenshotSet as K, type ListParams as L, ReviewSubmissionsResource as M, type ReviewSubmission as N, type AppStoreVersionSubmission as O, type Profile as P, AppAssetLibrariesResource as Q, RequestClient as R, type AppAssetLibrary as S, TokenManager as T, type UploadOperation as U, type AppAssetLibraryRefDatum as V, type AppAssetLibraryRefDatumAttributes as W, type AppAssetLibraryImageSpec as X, type AppAssetLibraryVideoSpec as Y, type AppAssetLibraryDimensions as Z, AppAssetLibraryImagesResource as _, AppStoreConnectError as a, type AppAssetLibraryImage as a0, type AppAssetLibraryVideo as a1, type CreateAssetParams as a2, type UpdateAssetAttributes as a3, AppAssetLibraryPlacementsResource as a4, type AppAssetLibraryPlacement as a5, type PlacementTarget as a6, type PlacementTargetKind as a7, PortalClient as a8, IrisClient as a9, IrisAuthError as aa, type IrisApiKey as ab, type ApiKeyRole as ac, type JsonApiRelationship as ad, type JsonApiErrorResponse as ae, RateLimitError as b, type AppStoreConnectConfig as c, type TokenConfig as d, type RequestOptions as e, type JsonApiResponse as f, type JsonApiListResponse as g, type JsonApiError as h, type App as i, type Build as j, type BetaGroup as k, type BetaBuildLocalization as l, type BuildBetaDetail as m, type PreReleaseVersion$1 as n, type BundleIdCapability as o, type CapabilitySettingInput as p, type CapabilitySetting as q, type CapabilityOption as r, CertificatesResource as s, ProfilesResource as t, BundleIdsResource as u, DevicesResource as v, AppsResource as w, BuildsResource as x, BetaGroupsResource as y, CapabilitiesResource as z };
+export { AppAssetLibraryVideosResource as $, AppStoreConnectClient as A, type BundleId as B, type Certificate as C, type Device as D, AppStoreVersionsResource as E, type AppStoreVersion as F, type AppStoreVersionLocalization as G, AppScreenshotsResource as H, type AppScreenshot as I, type JsonApiResource as J, type AppScreenshotSet as K, type ListParams as L, ReviewSubmissionsResource as M, type ReviewSubmission as N, type AppStoreVersionSubmission as O, type Profile as P, AppAssetLibrariesResource as Q, RequestClient as R, type AppAssetLibrary as S, TokenManager as T, type UploadOperation as U, type AppAssetLibraryRefDatum as V, type AppAssetLibraryRefDatumAttributes as W, type AppAssetLibraryImageSpec as X, type AppAssetLibraryVideoSpec as Y, type AppAssetLibraryDimensions as Z, AppAssetLibraryImagesResource as _, AppStoreConnectError as a, type AppAssetLibraryImage as a0, type AppAssetLibraryVideo as a1, type CreateAssetParams as a2, type UpdateAssetAttributes as a3, AppAssetLibraryPlacementsResource as a4, type AppAssetLibraryPlacement as a5, type PlacementTarget as a6, type PlacementTargetKind as a7, PortalClient as a8, signInWithAppleId as a9, loadAppleSession as aa, saveAppleSession as ab, clearAppleSession as ac, lastAppleId as ad, sessionDir as ae, IrisClient as af, IrisAuthError as ag, type IrisApiKey as ah, type ApiKeyRole as ai, type JsonApiRelationship as aj, type JsonApiErrorResponse as ak, RateLimitError as b, type AppStoreConnectConfig as c, type TokenConfig as d, type RequestOptions as e, type JsonApiResponse as f, type JsonApiListResponse as g, type JsonApiError as h, type App as i, type Build as j, type BetaGroup as k, type BetaBuildLocalization as l, type BuildBetaDetail as m, type PreReleaseVersion$1 as n, type BundleIdCapability as o, type CapabilitySettingInput as p, type CapabilitySetting as q, type CapabilityOption as r, CertificatesResource as s, ProfilesResource as t, BundleIdsResource as u, DevicesResource as v, AppsResource as w, BuildsResource as x, BetaGroupsResource as y, CapabilitiesResource as z };

package/dist/{index-laE3_wm9.d.cts → index-CmcFPn_G.d.cts}

@@ -1,4 +1,4 @@
-import { A as AppStoreConnectClient, j as Build } from './index-DrmS802s.cjs';
+import { A as AppStoreConnectClient, j as Build } from './index-CpGV1f0L.cjs';
 
 /**
  * Shared types for the pilot module's upload backends.

package/dist/{index-DrmS802s.d.cts → index-CpGV1f0L.d.cts}

@@ -1600,6 +1600,37 @@ declare class AppAssetLibrariesResource {
     }): Promise<AppAssetLibraryRefDatumAttributes>;
 }
 
+/**
+ * Keeps an Apple ID session between runs, like Spaceship's cookie in
+ * ~/.fastlane/spaceship/<user>/cookie — one password + 2FA covers every
+ * command (and every app on that Apple ID) until Apple expires the session.
+ *
+ * Files live in ~/.fastnode/sessions (or FASTNODE_SESSION_DIR), one per
+ * Apple ID, directory 0700 and files 0600: they are as good as a signed-in
+ * App Store Connect browser. A cached session is checked against olympus
+ * before use, so an expired one just falls through to a fresh sign-in.
+ */
+
+declare function sessionDir(): string;
+declare function saveAppleSession(session: AppleSession): void;
+declare function clearAppleSession(email: string): void;
+/** The Apple ID the last session was saved for, so a re-run needs no prompt at all. */
+declare function lastAppleId(): string | null;
+/** A saved session for this Apple ID that Apple still accepts, or null. */
+declare function loadAppleSession(email: string, fetchImpl?: typeof fetch): Promise<AppleSession | null>;
+/**
+ * Reuse the saved session for this Apple ID, or sign in (password + 2FA) and
+ * save the new one. The password is only asked for when a sign-in is needed.
+ */
+declare function signInWithAppleId(options: {
+    email?: string | null;
+    askEmail: () => Promise<string>;
+    askPassword: (email: string) => Promise<string>;
+    /** Ignore any saved session and sign in again. */
+    fresh?: boolean;
+    onLog?: (msg: string) => void;
+}): Promise<AppleSession>;
+
 /**
  * Apple Developer Portal Client
  * 1:1 port of Fastlane Spaceship PortalClient
@@ -2097,4 +2128,4 @@ declare class AppStoreConnectClient {
     request<T>(path: string, options?: RequestOptions): Promise<T>;
 }
 
-export { AppAssetLibraryVideosResource as $, AppStoreConnectClient as A, type BundleId as B, type Certificate as C, type Device as D, AppStoreVersionsResource as E, type AppStoreVersion as F, type AppStoreVersionLocalization as G, AppScreenshotsResource as H, type AppScreenshot as I, type JsonApiResource as J, type AppScreenshotSet as K, type ListParams as L, ReviewSubmissionsResource as M, type ReviewSubmission as N, type AppStoreVersionSubmission as O, type Profile as P, AppAssetLibrariesResource as Q, RequestClient as R, type AppAssetLibrary as S, TokenManager as T, type UploadOperation as U, type AppAssetLibraryRefDatum as V, type AppAssetLibraryRefDatumAttributes as W, type AppAssetLibraryImageSpec as X, type AppAssetLibraryVideoSpec as Y, type AppAssetLibraryDimensions as Z, AppAssetLibraryImagesResource as _, AppStoreConnectError as a, type AppAssetLibraryImage as a0, type AppAssetLibraryVideo as a1, type CreateAssetParams as a2, type UpdateAssetAttributes as a3, AppAssetLibraryPlacementsResource as a4, type AppAssetLibraryPlacement as a5, type PlacementTarget as a6, type PlacementTargetKind as a7, PortalClient as a8, IrisClient as a9, IrisAuthError as aa, type IrisApiKey as ab, type ApiKeyRole as ac, type JsonApiRelationship as ad, type JsonApiErrorResponse as ae, RateLimitError as b, type AppStoreConnectConfig as c, type TokenConfig as d, type RequestOptions as e, type JsonApiResponse as f, type JsonApiListResponse as g, type JsonApiError as h, type App as i, type Build as j, type BetaGroup as k, type BetaBuildLocalization as l, type BuildBetaDetail as m, type PreReleaseVersion$1 as n, type BundleIdCapability as o, type CapabilitySettingInput as p, type CapabilitySetting as q, type CapabilityOption as r, CertificatesResource as s, ProfilesResource as t, BundleIdsResource as u, DevicesResource as v, AppsResource as w, BuildsResource as x, BetaGroupsResource as y, CapabilitiesResource as z };
+export { AppAssetLibraryVideosResource as $, AppStoreConnectClient as A, type BundleId as B, type Certificate as C, type Device as D, AppStoreVersionsResource as E, type AppStoreVersion as F, type AppStoreVersionLocalization as G, AppScreenshotsResource as H, type AppScreenshot as I, type JsonApiResource as J, type AppScreenshotSet as K, type ListParams as L, ReviewSubmissionsResource as M, type ReviewSubmission as N, type AppStoreVersionSubmission as O, type Profile as P, AppAssetLibrariesResource as Q, RequestClient as R, type AppAssetLibrary as S, TokenManager as T, type UploadOperation as U, type AppAssetLibraryRefDatum as V, type AppAssetLibraryRefDatumAttributes as W, type AppAssetLibraryImageSpec as X, type AppAssetLibraryVideoSpec as Y, type AppAssetLibraryDimensions as Z, AppAssetLibraryImagesResource as _, AppStoreConnectError as a, type AppAssetLibraryImage as a0, type AppAssetLibraryVideo as a1, type CreateAssetParams as a2, type UpdateAssetAttributes as a3, AppAssetLibraryPlacementsResource as a4, type AppAssetLibraryPlacement as a5, type PlacementTarget as a6, type PlacementTargetKind as a7, PortalClient as a8, signInWithAppleId as a9, loadAppleSession as aa, saveAppleSession as ab, clearAppleSession as ac, lastAppleId as ad, sessionDir as ae, IrisClient as af, IrisAuthError as ag, type IrisApiKey as ah, type ApiKeyRole as ai, type JsonApiRelationship as aj, type JsonApiErrorResponse as ak, RateLimitError as b, type AppStoreConnectConfig as c, type TokenConfig as d, type RequestOptions as e, type JsonApiResponse as f, type JsonApiListResponse as g, type JsonApiError as h, type App as i, type Build as j, type BetaGroup as k, type BetaBuildLocalization as l, type BuildBetaDetail as m, type PreReleaseVersion$1 as n, type BundleIdCapability as o, type CapabilitySettingInput as p, type CapabilitySetting as q, type CapabilityOption as r, CertificatesResource as s, ProfilesResource as t, BundleIdsResource as u, DevicesResource as v, AppsResource as w, BuildsResource as x, BetaGroupsResource as y, CapabilitiesResource as z };

package/dist/{index-C01Rkrir.d.ts → index-D9YQQ3FM.d.ts}

@@ -1,4 +1,4 @@
-import { A as AppStoreConnectClient, P as Profile } from './index-lsuS2R1T.js';
+import { A as AppStoreConnectClient, P as Profile } from './index-CemR3UI9.js';
 import { P as ProfileType } from './enums-yXNVh3UI.js';
 
 interface SighOptions {

package/dist/{index-C9mHBJED.d.ts → index-Dkf5sH1E.d.ts}

@@ -1,4 +1,4 @@
-import { A as AppStoreConnectClient } from './index-lsuS2R1T.js';
+import { A as AppStoreConnectClient } from './index-CemR3UI9.js';
 
 interface RuleResult {
     passed: boolean;

package/dist/{index-CAEiXVWd.d.ts → index-N6eV5yym.d.ts}

@@ -1,4 +1,4 @@
-import { A as AppStoreConnectClient, j as Build } from './index-lsuS2R1T.js';
+import { A as AppStoreConnectClient, j as Build } from './index-CemR3UI9.js';
 
 /**
  * Shared types for the pilot module's upload backends.

package/dist/{index-icIH5e5V.d.cts → index-O3EMrd5s.d.cts}

@@ -1,6 +1,6 @@
-import { A as AppStoreConnectClient } from './index-DrmS802s.cjs';
-import { a as CertResult } from './cert-eOoxGMN1.cjs';
-import { S as SighResult } from './index-DWOLZNlz.cjs';
+import { A as AppStoreConnectClient } from './index-CpGV1f0L.cjs';
+import { a as CertResult } from './cert-DffLKURp.cjs';
+import { S as SighResult } from './index-isT08RuY.cjs';
 
 type StorageMode = "git" | "s3" | "local";
 

package/dist/{index-BvyZ4uiw.d.ts → index-Ol0RtbQA.d.ts}

@@ -1,6 +1,6 @@
-import { A as AppStoreConnectClient } from './index-lsuS2R1T.js';
-import { a as CertResult } from './cert-RvXmdMke.js';
-import { S as SighResult } from './index-C01Rkrir.js';
+import { A as AppStoreConnectClient } from './index-CemR3UI9.js';
+import { a as CertResult } from './cert-ClacRx9y.js';
+import { S as SighResult } from './index-D9YQQ3FM.js';
 
 type StorageMode = "git" | "s3" | "local";
 

package/dist/{index-DLJso7Vs.d.cts → index-_24DRp3a.d.cts}

@@ -1,4 +1,4 @@
-import { C as CertOptions, a as CertResult, c as createCertificate, d as downloadCertificate, f as findValidCertificates, r as revokeCertificate, b as revokeExpiredCertificates } from './cert-eOoxGMN1.cjs';
+import { C as CertOptions, a as CertResult, c as createCertificate, d as downloadCertificate, f as findValidCertificates, r as revokeCertificate, b as revokeExpiredCertificates } from './cert-DffLKURp.cjs';
 
 /**
  * Generate EC P-256 CSR — used by App Store Connect API (JWT auth).

package/dist/{index-DWOLZNlz.d.cts → index-isT08RuY.d.cts}

@@ -1,4 +1,4 @@
-import { A as AppStoreConnectClient, P as Profile } from './index-DrmS802s.cjs';
+import { A as AppStoreConnectClient, P as Profile } from './index-CpGV1f0L.cjs';
 import { P as ProfileType } from './enums-yXNVh3UI.cjs';
 
 interface SighOptions {

package/dist/{index-BE7bwNff.d.cts → index-on573dnO.d.cts}

@@ -1,4 +1,4 @@
-import { A as AppStoreConnectClient } from './index-DrmS802s.cjs';
+import { A as AppStoreConnectClient } from './index-CpGV1f0L.cjs';
 
 interface RuleResult {
     passed: boolean;

package/dist/{index-CBf0-NUQ.d.ts → index-s2PigtDM.d.ts}

@@ -1,4 +1,4 @@
-import { A as AppStoreConnectClient, W as AppAssetLibraryRefDatumAttributes, X as AppAssetLibraryImageSpec } from './index-lsuS2R1T.js';
+import { A as AppStoreConnectClient, W as AppAssetLibraryRefDatumAttributes, X as AppAssetLibraryImageSpec } from './index-CemR3UI9.js';
 import { l as AppAssetLibraryPlacementType, j as AppAssetLibraryAssetCategory, m as AppAssetLibraryAssetState, o as AppAssetLibraryFeature, b as Platform, R as ReleaseType } from './enums-yXNVh3UI.js';
 
 interface LocalizedMetadata {

package/dist/index.cjs

@@ -3,11 +3,11 @@
 var jose = require('jose');
 var crypto = require('crypto');
 var readline = require('readline');
-var x509 = require('@peculiar/x509');
-var child_process = require('child_process');
 var fs = require('fs');
-var path = require('path');
 var os = require('os');
+var path = require('path');
+var x509 = require('@peculiar/x509');
+var child_process = require('child_process');
 var util = require('util');
 var promises = require('fs/promises');
 var emojiRegex = require('emoji-regex');
@@ -245,20 +245,6 @@ var init_srp = __esm({
     };
   }
 });
-
-// src/client/apple-session.ts
-var apple_session_exports = {};
-__export(apple_session_exports, {
-  ProgramLicenseAgreementError: () => ProgramLicenseAgreementError,
-  appleJson: () => appleJson,
-  beginLogin: () => beginLogin,
-  checkPortalResponse: () => checkPortalResponse,
-  fetchServiceKey: () => fetchServiceKey,
-  loginWithAppleId: () => loginWithAppleId,
-  requestSmsCode: () => requestSmsCode,
-  serviceKeyFromLocation: () => serviceKeyFromLocation,
-  submitTwoFactorCode: () => submitTwoFactorCode
-});
 async function appleJson(res, what) {
   const text = await res.text();
   try {
@@ -2810,6 +2796,90 @@ var init_app_asset_library_placements = __esm({
   }
 });
 
+// src/client/session-store.ts
+var session_store_exports = {};
+__export(session_store_exports, {
+  clearAppleSession: () => clearAppleSession,
+  lastAppleId: () => lastAppleId,
+  loadAppleSession: () => loadAppleSession,
+  saveAppleSession: () => saveAppleSession,
+  sessionDir: () => sessionDir,
+  signInWithAppleId: () => signInWithAppleId
+});
+function sessionDir() {
+  return process.env.FASTNODE_SESSION_DIR || path.join(os.homedir(), ".fastnode", "sessions");
+}
+function fileFor(email) {
+  const key = crypto.createHash("sha256").update(email.trim().toLowerCase()).digest("hex").slice(0, 16);
+  return path.join(sessionDir(), `${key}.json`);
+}
+function ensureDir() {
+  const dir = sessionDir();
+  if (!fs.existsSync(dir)) fs.mkdirSync(dir, { recursive: true, mode: 448 });
+  fs.chmodSync(dir, 448);
+}
+function saveAppleSession(session) {
+  ensureDir();
+  const stored = { email: session.userEmail, savedAt: (/* @__PURE__ */ new Date()).toISOString(), session };
+  const path$1 = fileFor(session.userEmail);
+  fs.writeFileSync(path$1, JSON.stringify(stored), { mode: 384 });
+  fs.chmodSync(path$1, 384);
+  fs.writeFileSync(path.join(sessionDir(), "last-apple-id"), session.userEmail, { mode: 384 });
+}
+function clearAppleSession(email) {
+  const path = fileFor(email);
+  if (fs.existsSync(path)) fs.unlinkSync(path);
+}
+function lastAppleId() {
+  try {
+    return fs.readFileSync(path.join(sessionDir(), "last-apple-id"), "utf8").trim() || null;
+  } catch {
+    return null;
+  }
+}
+async function loadAppleSession(email, fetchImpl = fetch) {
+  const path = fileFor(email);
+  if (!fs.existsSync(path)) return null;
+  let stored;
+  try {
+    stored = JSON.parse(fs.readFileSync(path, "utf8"));
+  } catch {
+    return null;
+  }
+  const cookie = Object.entries(stored.session.cookies).map(([k, v]) => `${k}=${v}`).join("; ");
+  try {
+    const res = await fetchImpl(OLYMPUS_SESSION2, { headers: { Cookie: cookie, Accept: "application/json" } });
+    if (!res.ok) {
+      clearAppleSession(email);
+      return null;
+    }
+  } catch {
+    return null;
+  }
+  return stored.session;
+}
+async function signInWithAppleId(options) {
+  const email = options.email || lastAppleId() || await options.askEmail();
+  if (!options.fresh) {
+    const saved = await loadAppleSession(email);
+    if (saved) {
+      options.onLog?.(`Using saved Apple ID session for ${email}`);
+      return saved;
+    }
+  }
+  const password = await options.askPassword(email);
+  const session = await loginWithAppleId({ email, password, onLog: options.onLog });
+  saveAppleSession(session);
+  return session;
+}
+var OLYMPUS_SESSION2;
+var init_session_store = __esm({
+  "src/client/session-store.ts"() {
+    init_apple_session();
+    OLYMPUS_SESSION2 = "https://appstoreconnect.apple.com/olympus/v1/session";
+  }
+});
+
 // src/client/portal.ts
 function pickUniqueKeyName(base, taken) {
   if (!taken.has(base)) return base;
@@ -3887,8 +3957,14 @@ __export(client_exports, {
   TokenManager: () => exports.TokenManager,
   beginLogin: () => beginLogin,
   checkPortalResponse: () => checkPortalResponse,
+  clearAppleSession: () => clearAppleSession,
+  lastAppleId: () => lastAppleId,
+  loadAppleSession: () => loadAppleSession,
   loginWithAppleId: () => loginWithAppleId,
   requestSmsCode: () => requestSmsCode,
+  saveAppleSession: () => saveAppleSession,
+  sessionDir: () => sessionDir,
+  signInWithAppleId: () => signInWithAppleId,
   submitTwoFactorCode: () => submitTwoFactorCode
 });
 exports.AppStoreConnectClient = void 0;
@@ -3936,6 +4012,7 @@ var init_client = __esm({
     init_auth();
     init_request();
     init_apple_session();
+    init_session_store();
     init_portal();
     init_iris();
     exports.AppStoreConnectClient = class {
@@ -25814,12 +25891,12 @@ function fail(what, r) {
 async function selectProviderForApp(session, appId, onLog) {
   const owns = async () => (await iris(session, "GET", `/apps/${appId}?fields[apps]=name`)).status === 200;
   if (await owns()) return;
-  const res = await fetch(OLYMPUS_SESSION2, { headers: { Cookie: cookieHeader(session), Accept: "application/json" } });
+  const res = await fetch(OLYMPUS_SESSION3, { headers: { Cookie: cookieHeader(session), Accept: "application/json" } });
   absorbCookies(session, res);
   const info = await res.json().catch(() => null);
   const providers = info?.availableProviders ?? [];
   for (const p of providers) {
-    const sw = await fetch(OLYMPUS_SESSION2, {
+    const sw = await fetch(OLYMPUS_SESSION3, {
       method: "POST",
       headers: { Cookie: cookieHeader(session), "Content-Type": "application/json", Accept: "application/json" },
       body: JSON.stringify({ provider: { providerId: p.providerId } })
@@ -25918,11 +25995,11 @@ function validateUsages(usages) {
     if (linked && unlinked) throw new Error(`${u.category} cannot be both linked and not linked to the user.`);
   }
 }
-var IRIS_BASE2, OLYMPUS_SESSION2, DATA_USAGE_CATEGORIES, DATA_USAGE_PURPOSES, DATA_PROTECTIONS;
+var IRIS_BASE2, OLYMPUS_SESSION3, DATA_USAGE_CATEGORIES, DATA_USAGE_PURPOSES, DATA_PROTECTIONS;
 var init_privacy = __esm({
   "src/privacy/index.ts"() {
     IRIS_BASE2 = "https://appstoreconnect.apple.com/iris/v1";
-    OLYMPUS_SESSION2 = "https://appstoreconnect.apple.com/olympus/v1/session";
+    OLYMPUS_SESSION3 = "https://appstoreconnect.apple.com/olympus/v1/session";
     DATA_USAGE_CATEGORIES = [
       "PAYMENT_INFORMATION",
       "CREDIT_AND_FRAUD",
@@ -29856,14 +29933,18 @@ function createLanesCommand() {
   });
 }
 function createPrivacyCommand() {
-  return new commander.Command("privacy").description("Upload App Privacy details (nutrition labels) to App Store Connect").requiredOption("--app-id <id>", "App Store Connect app id (numeric Apple ID)").requiredOption("-j, --json-path <path>", "Fastlane-format app_privacy_details.json").option("-u, --username <email>", "Apple ID", process.env.FASTNODE_USER ?? process.env.FASTLANE_USER).option("--skip-publish", "Save the answers without publishing them", false).action(async (opts) => {
-    const { loginWithAppleId: loginWithAppleId2 } = await Promise.resolve().then(() => (init_apple_session(), apple_session_exports));
+  return new commander.Command("privacy").description("Upload App Privacy details (nutrition labels) to App Store Connect").requiredOption("--app-id <id>", "App Store Connect app id (numeric Apple ID)").requiredOption("-j, --json-path <path>", "Fastlane-format app_privacy_details.json").option("-u, --username <email>", "Apple ID (defaults to the last one signed in)", process.env.FASTNODE_USER ?? process.env.FASTLANE_USER).option("--fresh-login", "Ignore the saved Apple ID session and sign in again", false).option("--skip-publish", "Save the answers without publishing them", false).action(async (opts) => {
+    const { signInWithAppleId: signInWithAppleId2, saveAppleSession: saveAppleSession2 } = await Promise.resolve().then(() => (init_session_store(), session_store_exports));
     const { uploadAppPrivacyDetails: uploadAppPrivacyDetails2, validateUsages: validateUsages2 } = await Promise.resolve().then(() => (init_privacy(), privacy_exports));
     const usages = JSON.parse(fs.readFileSync(opts.jsonPath, "utf8"));
     validateUsages2(usages);
-    const email = opts.username || await ask("Apple ID: ");
-    const password = process.env.FASTNODE_PASSWORD ?? process.env.FASTLANE_PASSWORD ?? await ask(`Password for ${email}: `, true);
-    const session = await loginWithAppleId2({ email, password, onLog: (m) => console.log(m) });
+    const session = await signInWithAppleId2({
+      email: opts.username,
+      askEmail: () => ask("Apple ID: "),
+      askPassword: async (email) => process.env.FASTNODE_PASSWORD ?? process.env.FASTLANE_PASSWORD ?? await ask(`Password for ${email}: `, true),
+      fresh: opts.freshLogin,
+      onLog: (m) => console.log(m)
+    });
     const result = await uploadAppPrivacyDetails2({
       session,
       appId: opts.appId,
@@ -29871,6 +29952,7 @@ function createPrivacyCommand() {
       skipPublish: opts.skipPublish,
       onLog: (m) => console.log(m)
     });
+    saveAppleSession2(session);
     console.log(`Done: ${result.created} answers${result.published ? ", published" : ""}.`);
   });
 }
@@ -29893,12 +29975,16 @@ function ask(question, secret = false) {
   });
 }
 function createRejectionsCommand() {
-  return new commander.Command("rejections").description("Show App Review's Resolution Center messages and rejection reasons").requiredOption("--app-id <ids...>", "App Store Connect app id(s) (numeric Apple ID)").option("-u, --username <email>", "Apple ID", process.env.FASTNODE_USER ?? process.env.FASTLANE_USER).option("--all", "Include resolved submissions, not just ones awaiting you", false).option("--json", "Print JSON instead of text", false).action(async (opts) => {
-    const { loginWithAppleId: loginWithAppleId2 } = await Promise.resolve().then(() => (init_apple_session(), apple_session_exports));
+  return new commander.Command("rejections").description("Show App Review's Resolution Center messages and rejection reasons").requiredOption("--app-id <ids...>", "App Store Connect app id(s) (numeric Apple ID)").option("-u, --username <email>", "Apple ID (defaults to the last one signed in)", process.env.FASTNODE_USER ?? process.env.FASTLANE_USER).option("--fresh-login", "Ignore the saved Apple ID session and sign in again", false).option("--all", "Include resolved submissions, not just ones awaiting you", false).option("--json", "Print JSON instead of text", false).action(async (opts) => {
+    const { signInWithAppleId: signInWithAppleId2, saveAppleSession: saveAppleSession2 } = await Promise.resolve().then(() => (init_session_store(), session_store_exports));
     const { getReviewFeedback: getReviewFeedback2 } = await Promise.resolve().then(() => (init_review(), review_exports));
-    const email = opts.username || await ask2("Apple ID: ");
-    const password = process.env.FASTNODE_PASSWORD ?? process.env.FASTLANE_PASSWORD ?? await ask2(`Password for ${email}: `, true);
-    const session = await loginWithAppleId2({ email, password, onLog: (m) => console.error(m) });
+    const session = await signInWithAppleId2({
+      email: opts.username,
+      askEmail: () => ask2("Apple ID: "),
+      askPassword: async (email) => process.env.FASTNODE_PASSWORD ?? process.env.FASTLANE_PASSWORD ?? await ask2(`Password for ${email}: `, true),
+      fresh: opts.freshLogin,
+      onLog: (m) => console.error(m)
+    });
     const all = {};
     for (const appId of opts.appId) {
       const feedback = await getReviewFeedback2(session, appId, { onlyOpen: !opts.all, onLog: (m) => console.error(m) });
@@ -29921,6 +30007,7 @@ Submission ${s.submissionId} \u2014 ${s.state} (submitted ${s.submittedDate ?? "
         }
       }
     }
+    saveAppleSession2(session);
     if (opts.json) console.log(JSON.stringify(all, null, 2));
   });
 }