@sitepong/fastnode 0.3.0 → 0.3.2

package/README.md

@@ -114,6 +114,12 @@ FASTNODE_USER=you@example.com npx @sitepong/fastnode rejections --app-id 1234567
 npx @sitepong/fastnode rejections --app-id 1234567890 --all --json
 ```
 
+You sign in once: the Apple ID session (never the password) is saved to
+`~/.fastnode/sessions` (0600; override with `FASTNODE_SESSION_DIR`), and later
+`rejections` and `privacy` runs on the same Apple ID reuse it until Apple
+expires it, with no password or 2FA prompt. `--fresh-login` forces a new
+sign-in.
+
 It prints each submission waiting on you (`UNRESOLVED_ISSUES`), the guideline
 reasons App Review attached, and the message text. `--all` includes resolved
 submissions too. From code: `getReviewFeedback(session, appId)` in

package/dist/actions/index.cjs

@@ -6953,6 +6953,79 @@ var init_app_asset_library_placements = __esm({
     };
   }
 });
+function sessionDir() {
+  return process.env.FASTNODE_SESSION_DIR || path.join(os.homedir(), ".fastnode", "sessions");
+}
+function fileFor(email) {
+  const key = crypto.createHash("sha256").update(email.trim().toLowerCase()).digest("hex").slice(0, 16);
+  return path.join(sessionDir(), `${key}.json`);
+}
+function ensureDir() {
+  const dir = sessionDir();
+  if (!fs.existsSync(dir)) fs.mkdirSync(dir, { recursive: true, mode: 448 });
+  fs.chmodSync(dir, 448);
+}
+function saveAppleSession(session) {
+  ensureDir();
+  const stored = { email: session.userEmail, savedAt: (/* @__PURE__ */ new Date()).toISOString(), session };
+  const path$1 = fileFor(session.userEmail);
+  fs.writeFileSync(path$1, JSON.stringify(stored), { mode: 384 });
+  fs.chmodSync(path$1, 384);
+  fs.writeFileSync(path.join(sessionDir(), "last-apple-id"), session.userEmail, { mode: 384 });
+}
+function clearAppleSession(email) {
+  const path = fileFor(email);
+  if (fs.existsSync(path)) fs.unlinkSync(path);
+}
+function lastAppleId() {
+  try {
+    return fs.readFileSync(path.join(sessionDir(), "last-apple-id"), "utf8").trim() || null;
+  } catch {
+    return null;
+  }
+}
+async function loadAppleSession(email, fetchImpl = fetch) {
+  const path = fileFor(email);
+  if (!fs.existsSync(path)) return null;
+  let stored;
+  try {
+    stored = JSON.parse(fs.readFileSync(path, "utf8"));
+  } catch {
+    return null;
+  }
+  const cookie = Object.entries(stored.session.cookies).map(([k, v]) => `${k}=${v}`).join("; ");
+  try {
+    const res = await fetchImpl(OLYMPUS_SESSION2, { headers: { Cookie: cookie, Accept: "application/json" } });
+    if (!res.ok) {
+      clearAppleSession(email);
+      return null;
+    }
+  } catch {
+    return null;
+  }
+  return stored.session;
+}
+async function signInWithAppleId(options) {
+  const email = options.email || lastAppleId() || await options.askEmail();
+  if (!options.fresh) {
+    const saved = await loadAppleSession(email);
+    if (saved) {
+      options.onLog?.(`Using saved Apple ID session for ${email}`);
+      return saved;
+    }
+  }
+  const password = await options.askPassword(email);
+  const session = await loginWithAppleId({ email, password, onLog: options.onLog });
+  saveAppleSession(session);
+  return session;
+}
+var OLYMPUS_SESSION2;
+var init_session_store = __esm({
+  "src/client/session-store.ts"() {
+    init_apple_session();
+    OLYMPUS_SESSION2 = "https://appstoreconnect.apple.com/olympus/v1/session";
+  }
+});
 
 // src/client/portal.ts
 function pickUniqueKeyName(base, taken) {
@@ -7721,6 +7794,7 @@ var init_iris = __esm({
       session;
       cookieStr;
       buildHeaders() {
+        this.cookieStr = Object.entries(this.session.cookies).map(([k, v]) => `${k}=${v}`).join("; ");
         return {
           Cookie: this.cookieStr,
           Accept: "application/vnd.api+json, application/json, text/plain, */*",
@@ -8031,8 +8105,14 @@ __export(client_exports, {
   TokenManager: () => TokenManager,
   beginLogin: () => beginLogin,
   checkPortalResponse: () => checkPortalResponse,
+  clearAppleSession: () => clearAppleSession,
+  lastAppleId: () => lastAppleId,
+  loadAppleSession: () => loadAppleSession,
   loginWithAppleId: () => loginWithAppleId,
   requestSmsCode: () => requestSmsCode,
+  saveAppleSession: () => saveAppleSession,
+  sessionDir: () => sessionDir,
+  signInWithAppleId: () => signInWithAppleId,
   submitTwoFactorCode: () => submitTwoFactorCode
 });
 var AppStoreConnectClient;
@@ -8080,6 +8160,7 @@ var init_client = __esm({
     init_auth();
     init_request();
     init_apple_session();
+    init_session_store();
     init_portal();
     init_iris();
     AppStoreConnectClient = class {