@wix/himalaya-cli 0.1627.0 → 0.1628.0

package/guides/qa-builds.md

@@ -204,11 +204,19 @@ each job records what it places before placing it: its signing folder (which hol
 until it is imported), the identity it imports into the agent keychain, and every copy of the App
 Store Connect key (`~/.private_keys/AuthKey_<id>.p8`, also when it replaces a file already there,
 and the temporary copy `altool` reads). The records live in `~/.himalaya/customer-secret-claims` in the account home.
-At the start of the next customer build on that Mac, before the pre-existing check, Himi removes
-what a job whose process has ended recorded, and leaves alone what a running job recorded, since a
-Mac may run more than one job at once. A matching identity that a running job owns, or that no
-record names, is still refused. SIGTERM and process exit remove the key copies directly, as they do
-the signing directory.
+Every dist job on a Mac, customer or not, starts by removing what a job whose process has ended
+recorded, and leaves alone what a running job recorded, since a Mac may run more than one job at
+once. An identity is removed only by a job that has the agent's `KEYCHAIN_PASSWORD` (a Job Service
+job), which unlocks the keychain first; a job without it leaves that record as it is. A customer
+build sweeps again after unlocking, before the pre-existing check. A matching identity that a
+running job owns, or that no record names, is still refused. SIGTERM and process exit remove the
+key copies directly, as they do the signing directory.
+
+App Store validation (the purpose-string and required-reason scans, the APNs check and `altool`)
+runs in a child process the job waits on without blocking, so a SIGTERM that lands while `altool`
+runs is handled at once: the job removes the key copies and the identity, and kills the child's
+process group. `altool` stops after 10 minutes, and the whole validation after 15
+(`customer_app_store_validation_timeout`).
 
 Outside that runner mode, Himi creates a temporary keychain and deletes it during cleanup. That
 keychain is recorded the same way before it is created, and the next customer build deletes one an

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wix/himalaya-cli",
-  "version": "0.1627.0",
+  "version": "0.1628.0",
   "type": "module",
   "description": "himi — the Himalaya authoring CLI. Build a Tier-5 content package on your own machine, push it to the production serve as a draft, preview it on web + Himi Player, and read worker logs back — the remote dev loop. Wraps @himalaya/serve-cli for transport.",
   "keywords": [
@@ -72,5 +72,5 @@
       "artifactId": "himalaya-cli"
     }
   },
-  "falconPackageHash": "3437d7237a03ba353247802e752b58234b9842f8b8d1758e436e262a"
+  "falconPackageHash": "186c60ced3f6652ebc1c45bc98791fe0b8c55718eaed2223bf2bf300"
 }