claude-in-mobile 3.12.0 → 3.13.0

package/dist/constants/timeouts.d.ts

@@ -46,4 +46,14 @@ export declare const CLIPBOARD: {
     readonly POLL_MS: 100;
     readonly SETTLE_MS: 200;
 };
+export declare const XCODE: {
+    /** `xcodebuild archive` of a real app can take 10+ min on cold DerivedData. */
+    readonly ARCHIVE_TIMEOUT_MS: number;
+    /** `-exportArchive` re-signs the bundle; usually < 2 min, 10 gives headroom. */
+    readonly EXPORT_TIMEOUT_MS: number;
+    /** altool upload to App Store Connect — network-bound for large IPAs. */
+    readonly UPLOAD_TIMEOUT_MS: number;
+    /** `xcodebuild -list -json` resolves SPM deps on first run — not instant. */
+    readonly LIST_TIMEOUT_MS: 60000;
+};
 //# sourceMappingURL=timeouts.d.ts.map

package/dist/constants/timeouts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"timeouts.d.ts","sourceRoot":"","sources":["../../src/constants/timeouts.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,eAAO,MAAM,GAAG;;;CAGN,CAAC;AAEX,eAAO,MAAM,OAAO;;;;CAIV,CAAC;AAEX,eAAO,MAAM,GAAG;;;;CAIN,CAAC;AAEX,eAAO,MAAM,MAAM;;;CAGT,CAAC;AAEX,eAAO,MAAM,IAAI;;;;;;CAMP,CAAC;AAEX,eAAO,MAAM,QAAQ;;CAEX,CAAC;AAEX,eAAO,MAAM,IAAI;;CAEP,CAAC;AAEX,eAAO,MAAM,WAAW;;;CAGd,CAAC;AAEX,eAAO,MAAM,MAAM;IACjB,2DAA2D;;;CAGnD,CAAC;AAEX,eAAO,MAAM,SAAS;;;CAGZ,CAAC"}
+{"version":3,"file":"timeouts.d.ts","sourceRoot":"","sources":["../../src/constants/timeouts.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,eAAO,MAAM,GAAG;;;CAGN,CAAC;AAEX,eAAO,MAAM,OAAO;;;;CAIV,CAAC;AAEX,eAAO,MAAM,GAAG;;;;CAIN,CAAC;AAEX,eAAO,MAAM,MAAM;;;CAGT,CAAC;AAEX,eAAO,MAAM,IAAI;;;;;;CAMP,CAAC;AAEX,eAAO,MAAM,QAAQ;;CAEX,CAAC;AAEX,eAAO,MAAM,IAAI;;CAEP,CAAC;AAEX,eAAO,MAAM,WAAW;;;CAGd,CAAC;AAEX,eAAO,MAAM,MAAM;IACjB,2DAA2D;;;CAGnD,CAAC;AAEX,eAAO,MAAM,SAAS;;;CAGZ,CAAC;AAEX,eAAO,MAAM,KAAK;IAChB,+EAA+E;;IAE/E,gFAAgF;;IAEhF,yEAAyE;;IAEzE,6EAA6E;;CAErE,CAAC"}

package/dist/constants/timeouts.js

@@ -46,4 +46,14 @@ export const CLIPBOARD = {
     POLL_MS: 100,
     SETTLE_MS: 200,
 };
+export const XCODE = {
+    /** `xcodebuild archive` of a real app can take 10+ min on cold DerivedData. */
+    ARCHIVE_TIMEOUT_MS: 15 * 60_000,
+    /** `-exportArchive` re-signs the bundle; usually < 2 min, 10 gives headroom. */
+    EXPORT_TIMEOUT_MS: 10 * 60_000,
+    /** altool upload to App Store Connect — network-bound for large IPAs. */
+    UPLOAD_TIMEOUT_MS: 10 * 60_000,
+    /** `xcodebuild -list -json` resolves SPM deps on first run — not instant. */
+    LIST_TIMEOUT_MS: 60_000,
+};
 //# sourceMappingURL=timeouts.js.map

package/dist/constants/timeouts.js.map

@@ -1 +1 @@
-{"version":3,"file":"timeouts.js","sourceRoot":"","sources":["../../src/constants/timeouts.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,CAAC,MAAM,GAAG,GAAG;IACjB,eAAe,EAAE,MAAM;IACvB,YAAY,EAAE,MAAM;CACZ,CAAC;AAEX,MAAM,CAAC,MAAM,OAAO,GAAG;IACrB,cAAc,EAAE,MAAM;IACtB,kBAAkB,EAAE,KAAK;IACzB,gBAAgB,EAAE,GAAG;CACb,CAAC;AAEX,MAAM,CAAC,MAAM,GAAG,GAAG;IACjB,iBAAiB,EAAE,MAAM;IACzB,OAAO,EAAE,OAAO;IAChB,UAAU,EAAE,MAAM;CACV,CAAC;AAEX,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,cAAc,EAAE,MAAM;IACtB,iBAAiB,EAAE,KAAK;CAChB,CAAC;AAEX,MAAM,CAAC,MAAM,IAAI,GAAG;IAClB,SAAS,EAAE,EAAE;IACb,eAAe,EAAE,MAAM;IACvB,kBAAkB,EAAE,GAAG;IACvB,mBAAmB,EAAE,GAAG;IACxB,oBAAoB,EAAE,GAAG;CACjB,CAAC;AAEX,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,4BAA4B,EAAE,MAAM;CAC5B,CAAC;AAEX,MAAM,CAAC,MAAM,IAAI,GAAG;IAClB,kBAAkB,EAAE,MAAM;CAClB,CAAC;AAEX,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,uBAAuB,EAAE,MAAM;IAC/B,gBAAgB,EAAE,GAAG;CACb,CAAC;AAEX,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,2DAA2D;IAC3D,kBAAkB,EAAE,GAAG;IACvB,kBAAkB,EAAE,CAAC;CACb,CAAC;AAEX,MAAM,CAAC,MAAM,SAAS,GAAG;IACvB,OAAO,EAAE,GAAG;IACZ,SAAS,EAAE,GAAG;CACN,CAAC"}
+{"version":3,"file":"timeouts.js","sourceRoot":"","sources":["../../src/constants/timeouts.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,CAAC,MAAM,GAAG,GAAG;IACjB,eAAe,EAAE,MAAM;IACvB,YAAY,EAAE,MAAM;CACZ,CAAC;AAEX,MAAM,CAAC,MAAM,OAAO,GAAG;IACrB,cAAc,EAAE,MAAM;IACtB,kBAAkB,EAAE,KAAK;IACzB,gBAAgB,EAAE,GAAG;CACb,CAAC;AAEX,MAAM,CAAC,MAAM,GAAG,GAAG;IACjB,iBAAiB,EAAE,MAAM;IACzB,OAAO,EAAE,OAAO;IAChB,UAAU,EAAE,MAAM;CACV,CAAC;AAEX,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,cAAc,EAAE,MAAM;IACtB,iBAAiB,EAAE,KAAK;CAChB,CAAC;AAEX,MAAM,CAAC,MAAM,IAAI,GAAG;IAClB,SAAS,EAAE,EAAE;IACb,eAAe,EAAE,MAAM;IACvB,kBAAkB,EAAE,GAAG;IACvB,mBAAmB,EAAE,GAAG;IACxB,oBAAoB,EAAE,GAAG;CACjB,CAAC;AAEX,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,4BAA4B,EAAE,MAAM;CAC5B,CAAC;AAEX,MAAM,CAAC,MAAM,IAAI,GAAG;IAClB,kBAAkB,EAAE,MAAM;CAClB,CAAC;AAEX,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,uBAAuB,EAAE,MAAM;IAC/B,gBAAgB,EAAE,GAAG;CACb,CAAC;AAEX,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,2DAA2D;IAC3D,kBAAkB,EAAE,GAAG;IACvB,kBAAkB,EAAE,CAAC;CACb,CAAC;AAEX,MAAM,CAAC,MAAM,SAAS,GAAG;IACvB,OAAO,EAAE,GAAG;IACZ,SAAS,EAAE,GAAG;CACN,CAAC;AAEX,MAAM,CAAC,MAAM,KAAK,GAAG;IACnB,+EAA+E;IAC/E,kBAAkB,EAAE,EAAE,GAAG,MAAM;IAC/B,gFAAgF;IAChF,iBAAiB,EAAE,EAAE,GAAG,MAAM;IAC9B,yEAAyE;IACzE,iBAAiB,EAAE,EAAE,GAAG,MAAM;IAC9B,6EAA6E;IAC7E,eAAe,EAAE,MAAM;CACf,CAAC"}

package/dist/errors/asc.d.ts

@@ -0,0 +1,31 @@
+import { MobileError } from "./base.js";
+/**
+ * App Store Connect / TestFlight error classes.
+ * Detail strings passed into these constructors MUST already be sanitized
+ * (sanitizeErrorMessage + slice) by the caller — see store/app-store-connect.ts.
+ */
+export declare class AscKeyMissingError extends MobileError {
+    constructor();
+}
+export declare class AscAuthError extends MobileError {
+    constructor(detail: string);
+}
+export declare class AscUploadError extends MobileError {
+    constructor(detail: string);
+}
+export declare class AscRateLimitError extends MobileError {
+    constructor(detail?: string);
+}
+export declare class IpaValidationError extends MobileError {
+    constructor(detail: string);
+}
+export declare class TestflightVersionCollisionError extends MobileError {
+    constructor(version: string);
+}
+export declare class TestflightSigningError extends MobileError {
+    constructor(detail: string);
+}
+export declare class TestflightProcessingFailedError extends MobileError {
+    constructor(buildId: string, state: string);
+}
+//# sourceMappingURL=asc.d.ts.map

package/dist/errors/asc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"asc.d.ts","sourceRoot":"","sources":["../../src/errors/asc.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAExC;;;;GAIG;AAEH,qBAAa,kBAAmB,SAAQ,WAAW;;CAUlD;AAED,qBAAa,YAAa,SAAQ,WAAW;gBAC/B,MAAM,EAAE,MAAM;CAQ3B;AAED,qBAAa,cAAe,SAAQ,WAAW;gBACjC,MAAM,EAAE,MAAM;CAG3B;AAED,qBAAa,iBAAkB,SAAQ,WAAW;gBACpC,MAAM,SAAK;CAOxB;AAED,qBAAa,kBAAmB,SAAQ,WAAW;gBACrC,MAAM,EAAE,MAAM;CAQ3B;AAED,qBAAa,+BAAgC,SAAQ,WAAW;gBAClD,OAAO,EAAE,MAAM;CAO5B;AAED,qBAAa,sBAAuB,SAAQ,WAAW;gBACzC,MAAM,EAAE,MAAM;CAO3B;AAED,qBAAa,+BAAgC,SAAQ,WAAW;gBAClD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;CAQ3C"}

package/dist/errors/asc.js

@@ -0,0 +1,59 @@
+import { MobileError } from "./base.js";
+/**
+ * App Store Connect / TestFlight error classes.
+ * Detail strings passed into these constructors MUST already be sanitized
+ * (sanitizeErrorMessage + slice) by the caller — see store/app-store-connect.ts.
+ */
+export class AscKeyMissingError extends MobileError {
+    constructor() {
+        super("App Store Connect API key is not configured.\n\n" +
+            "Set ASC_KEY_ID, ASC_ISSUER_ID and ASC_KEY_FILE (path to the .p8 key) environment variables.\n" +
+            "Alternatively set ASC_PRIVATE_KEY with the inline PEM content.\n" +
+            "Create a key in App Store Connect → Users and Access → Integrations.", "ASC_KEY_MISSING");
+    }
+}
+export class AscAuthError extends MobileError {
+    constructor(detail) {
+        super(`App Store Connect authentication failed: ${detail}\n\n` +
+            "Check ASC_KEY_ID / ASC_ISSUER_ID and that the .p8 key is valid, not revoked, " +
+            "and has sufficient role (App Manager or Admin).", "ASC_AUTH_ERROR");
+    }
+}
+export class AscUploadError extends MobileError {
+    constructor(detail) {
+        super(`App Store Connect upload failed: ${detail}`, "ASC_UPLOAD_ERROR");
+    }
+}
+export class AscRateLimitError extends MobileError {
+    constructor(detail = "") {
+        super(`App Store Connect rate limit exceeded (HTTP 429).${detail ? ` ${detail}` : ""} ` +
+            "Retry after a short delay.", "ASC_RATE_LIMIT");
+    }
+}
+export class IpaValidationError extends MobileError {
+    constructor(detail) {
+        super(`IPA failed App Store validation — Apple would silently drop this package ` +
+            `after upload (it never appears in TestFlight builds):\n${detail}\n\n` +
+            "Fix the issues above, rebuild, and upload again.", "IPA_VALIDATION_FAILED");
+    }
+}
+export class TestflightVersionCollisionError extends MobileError {
+    constructor(version) {
+        super(`TestFlight build with version ${version} already exists.\n\n` +
+            "Increment CFBundleVersion (build number) and re-upload.", "TESTFLIGHT_VERSION_COLLISION");
+    }
+}
+export class TestflightSigningError extends MobileError {
+    constructor(detail) {
+        super(`TestFlight signing failed: ${detail}\n\n` +
+            "Check signing identities: security find-identity -v -p codesigning", "TESTFLIGHT_SIGNING_ERROR");
+    }
+}
+export class TestflightProcessingFailedError extends MobileError {
+    constructor(buildId, state) {
+        super(`TestFlight build ${buildId} processing failed (state: ${state}).\n\n` +
+            "Check App Store Connect for details — common causes: missing export compliance, " +
+            "invalid Info.plist, asset validation failure.", "TESTFLIGHT_PROCESSING_FAILED");
+    }
+}
+//# sourceMappingURL=asc.js.map

package/dist/errors/asc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"asc.js","sourceRoot":"","sources":["../../src/errors/asc.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAExC;;;;GAIG;AAEH,MAAM,OAAO,kBAAmB,SAAQ,WAAW;IACjD;QACE,KAAK,CACH,kDAAkD;YAChD,+FAA+F;YAC/F,kEAAkE;YAClE,sEAAsE,EACxE,iBAAiB,CAClB,CAAC;IACJ,CAAC;CACF;AAED,MAAM,OAAO,YAAa,SAAQ,WAAW;IAC3C,YAAY,MAAc;QACxB,KAAK,CACH,4CAA4C,MAAM,MAAM;YACtD,+EAA+E;YAC/E,iDAAiD,EACnD,gBAAgB,CACjB,CAAC;IACJ,CAAC;CACF;AAED,MAAM,OAAO,cAAe,SAAQ,WAAW;IAC7C,YAAY,MAAc;QACxB,KAAK,CAAC,oCAAoC,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC;IAC1E,CAAC;CACF;AAED,MAAM,OAAO,iBAAkB,SAAQ,WAAW;IAChD,YAAY,MAAM,GAAG,EAAE;QACrB,KAAK,CACH,oDAAoD,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG;YAC/E,4BAA4B,EAC9B,gBAAgB,CACjB,CAAC;IACJ,CAAC;CACF;AAED,MAAM,OAAO,kBAAmB,SAAQ,WAAW;IACjD,YAAY,MAAc;QACxB,KAAK,CACH,2EAA2E;YACzE,0DAA0D,MAAM,MAAM;YACtE,kDAAkD,EACpD,uBAAuB,CACxB,CAAC;IACJ,CAAC;CACF;AAED,MAAM,OAAO,+BAAgC,SAAQ,WAAW;IAC9D,YAAY,OAAe;QACzB,KAAK,CACH,iCAAiC,OAAO,sBAAsB;YAC5D,yDAAyD,EAC3D,8BAA8B,CAC/B,CAAC;IACJ,CAAC;CACF;AAED,MAAM,OAAO,sBAAuB,SAAQ,WAAW;IACrD,YAAY,MAAc;QACxB,KAAK,CACH,8BAA8B,MAAM,MAAM;YACxC,oEAAoE,EACtE,0BAA0B,CAC3B,CAAC;IACJ,CAAC;CACF;AAED,MAAM,OAAO,+BAAgC,SAAQ,WAAW;IAC9D,YAAY,OAAe,EAAE,KAAa;QACxC,KAAK,CACH,oBAAoB,OAAO,8BAA8B,KAAK,QAAQ;YACpE,kFAAkF;YAClF,+CAA+C,EACjD,8BAA8B,CAC/B,CAAC;IACJ,CAAC;CACF"}

package/dist/errors/base.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"base.d.ts","sourceRoot":"","sources":["../../src/errors/base.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,qBAAa,WAAY,SAAQ,KAAK;aAES,IAAI,EAAE,MAAM;IADzD,SAAS,CAAC,EAAE,MAAM,CAAC;gBACP,OAAO,EAAE,MAAM,EAAkB,IAAI,EAAE,MAAM;CAI1D;AAED,sEAAsE;AACtE,eAAO,MAAM,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,EAAE,CAU3F,CAAC;AAEF,mFAAmF;AACnF,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,EAAE,CAYjG;AAOD,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAEnD"}
+{"version":3,"file":"base.d.ts","sourceRoot":"","sources":["../../src/errors/base.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,qBAAa,WAAY,SAAQ,KAAK;aAES,IAAI,EAAE,MAAM;IADzD,SAAS,CAAC,EAAE,MAAM,CAAC;gBACP,OAAO,EAAE,MAAM,EAAkB,IAAI,EAAE,MAAM;CAI1D;AAED,sEAAsE;AACtE,eAAO,MAAM,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,EAAE,CAmB3F,CAAC;AAEF,mFAAmF;AACnF,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,EAAE,CAYjG;AAQD,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAEnD"}

package/dist/errors/base.js

@@ -21,6 +21,15 @@ export const RECOVERY_HINTS = {
     BROWSER_SESSION_NOT_FOUND: [{ tool: "browser", args: { action: "open" } }],
     SCENARIO_NOT_FOUND: [{ tool: "recorder", args: { action: "list" } }],
     BASELINE_NOT_FOUND: [{ tool: "visual", args: { action: "baseline_save" } }],
+    // App Store Connect / TestFlight — recovery is a manual user action, so no
+    // tool call applies; the full hint text lives in the error message (errors/asc.ts):
+    //   ASC_KEY_MISSING              → "Set ASC_KEY_ID, ASC_ISSUER_ID and ASC_KEY_FILE env vars —
+    //                                   create a key in App Store Connect → Users and Access → Integrations"
+    //   TESTFLIGHT_VERSION_COLLISION → "Increment CFBundleVersion"
+    //   TESTFLIGHT_SIGNING_ERROR     → "Check signing: security find-identity -v -p codesigning"
+    ASC_KEY_MISSING: [],
+    TESTFLIGHT_VERSION_COLLISION: [],
+    TESTFLIGHT_SIGNING_ERROR: [],
 };
 /** Get recovery hints for an error, with dynamic handling for MODULE_NOT_LOADED */
 export function getRecoveryHints(error) {
@@ -38,6 +47,7 @@ export function getRecoveryHints(error) {
 const RETRYABLE_CODES = new Set([
     "DEVICE_OFFLINE", "COMMAND_TIMEOUT", "ADB_ERROR",
     "SYNC_BARRIER_TIMEOUT",
+    "ASC_RATE_LIMIT",
 ]);
 export function isRetryable(error) {
     return error instanceof MobileError && RETRYABLE_CODES.has(error.code);

package/dist/errors/base.js.map

@@ -1 +1 @@
-{"version":3,"file":"base.js","sourceRoot":"","sources":["../../src/errors/base.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,OAAO,WAAY,SAAQ,KAAK;IAES;IAD7C,SAAS,CAAU;IACnB,YAAY,OAAe,EAAkB,IAAY;QACvD,KAAK,CAAC,OAAO,CAAC,CAAC;QAD4B,SAAI,GAAJ,IAAI,CAAQ;QAEvD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;IACpC,CAAC;CACF;AAED,sEAAsE;AACtE,MAAM,CAAC,MAAM,cAAc,GAAqE;IAC9F,iBAAiB,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC;IAC7D,qBAAqB,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,CAAC;IAC1E,gBAAgB,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC;IAChE,cAAc,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC;IAC9D,iBAAiB,EAAE,EAAE,EAAE,wCAAwC;IAC/D,kBAAkB,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC;IACnE,yBAAyB,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC;IAC1E,kBAAkB,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC;IACpE,kBAAkB,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,EAAE,CAAC;CAC5E,CAAC;AAEF,mFAAmF;AACnF,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,IAAI,CAAC,CAAC,KAAK,YAAY,WAAW,CAAC;QAAE,OAAO,EAAE,CAAC;IAE/C,IAAI,KAAK,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;QACvC,wEAAwE;QACxE,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACpD,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;IAED,OAAO,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;AAC1C,CAAC;AAED,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,gBAAgB,EAAE,iBAAiB,EAAE,WAAW;IAChD,sBAAsB;CACvB,CAAC,CAAC;AAEH,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,OAAO,KAAK,YAAY,WAAW,IAAI,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AACzE,CAAC"}
+{"version":3,"file":"base.js","sourceRoot":"","sources":["../../src/errors/base.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,OAAO,WAAY,SAAQ,KAAK;IAES;IAD7C,SAAS,CAAU;IACnB,YAAY,OAAe,EAAkB,IAAY;QACvD,KAAK,CAAC,OAAO,CAAC,CAAC;QAD4B,SAAI,GAAJ,IAAI,CAAQ;QAEvD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;IACpC,CAAC;CACF;AAED,sEAAsE;AACtE,MAAM,CAAC,MAAM,cAAc,GAAqE;IAC9F,iBAAiB,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC;IAC7D,qBAAqB,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,CAAC;IAC1E,gBAAgB,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC;IAChE,cAAc,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC;IAC9D,iBAAiB,EAAE,EAAE,EAAE,wCAAwC;IAC/D,kBAAkB,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC;IACnE,yBAAyB,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC;IAC1E,kBAAkB,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC;IACpE,kBAAkB,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,EAAE,CAAC;IAC3E,2EAA2E;IAC3E,oFAAoF;IACpF,8FAA8F;IAC9F,yGAAyG;IACzG,+DAA+D;IAC/D,6FAA6F;IAC7F,eAAe,EAAE,EAAE;IACnB,4BAA4B,EAAE,EAAE;IAChC,wBAAwB,EAAE,EAAE;CAC7B,CAAC;AAEF,mFAAmF;AACnF,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,IAAI,CAAC,CAAC,KAAK,YAAY,WAAW,CAAC;QAAE,OAAO,EAAE,CAAC;IAE/C,IAAI,KAAK,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;QACvC,wEAAwE;QACxE,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACpD,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;IAED,OAAO,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;AAC1C,CAAC;AAED,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,gBAAgB,EAAE,iBAAiB,EAAE,WAAW;IAChD,sBAAsB;IACtB,gBAAgB;CACjB,CAAC,CAAC;AAEH,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,OAAO,KAAK,YAAY,WAAW,IAAI,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AACzE,CAAC"}

package/dist/errors/index.d.ts

@@ -6,6 +6,7 @@
  * or `./errors/index.js`; both are equivalent.
  */
 export * from "./base.js";
+export * from "./asc.js";
 export * from "./device.js";
 export * from "./adb.js";
 export * from "./ios.js";

package/dist/errors/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/errors/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,cAAc,UAAU,CAAC;AACzB,cAAc,UAAU,CAAC;AACzB,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,WAAW,CAAC;AAC1B,cAAc,WAAW,CAAC;AAC1B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,WAAW,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/errors/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,cAAc,WAAW,CAAC;AAC1B,cAAc,UAAU,CAAC;AACzB,cAAc,aAAa,CAAC;AAC5B,cAAc,UAAU,CAAC;AACzB,cAAc,UAAU,CAAC;AACzB,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,WAAW,CAAC;AAC1B,cAAc,WAAW,CAAC;AAC1B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,WAAW,CAAC"}

package/dist/errors/index.js

@@ -6,6 +6,7 @@
  * or `./errors/index.js`; both are equivalent.
  */
 export * from "./base.js";
+export * from "./asc.js";
 export * from "./device.js";
 export * from "./adb.js";
 export * from "./ios.js";

package/dist/errors/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/errors/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,cAAc,UAAU,CAAC;AACzB,cAAc,UAAU,CAAC;AACzB,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,WAAW,CAAC;AAC1B,cAAc,WAAW,CAAC;AAC1B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,WAAW,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/errors/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,cAAc,WAAW,CAAC;AAC1B,cAAc,UAAU,CAAC;AACzB,cAAc,aAAa,CAAC;AAC5B,cAAc,UAAU,CAAC;AACzB,cAAc,UAAU,CAAC;AACzB,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,WAAW,CAAC;AAC1B,cAAc,WAAW,CAAC;AAC1B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,WAAW,CAAC"}

package/dist/ios/build/classify-build-error.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Classify xcodebuild / altool failures into typed errors with stable codes,
+ * redacting signing identities and key-file names before anything reaches the
+ * caller (LLM context = untrusted sink for secrets).
+ *
+ * Mapping (codes carried by the typed classes, see src/errors/asc.ts):
+ *   TESTFLIGHT_SIGNING_ERROR      -> TestflightSigningError
+ *   TESTFLIGHT_VERSION_COLLISION  -> TestflightVersionCollisionError
+ *   ASC_AUTH_ERROR                -> AscAuthError
+ *   ASC_UPLOAD_ERROR              -> AscUploadError
+ */
+import { MobileError } from "../../errors.js";
+/**
+ * App Store bundle-reject patterns observed in real altool validate/upload
+ * runs, with actionable recovery hints. Matched against individual validation
+ * `detail :` lines (upload.ts) and against whole stderr (classifyXcodeError).
+ */
+export declare const BUNDLE_REJECT_HINTS: ReadonlyArray<{
+    pattern: RegExp;
+    hint: string;
+}>;
+/** First matching recovery hint for a bundle-reject message, if any. */
+export declare function bundleRejectHint(text: string): string | undefined;
+export declare function redactSigningInfo(text: string): string;
+/**
+ * Map raw stderr to a typed error. Patterns match against the RAW stderr
+ * (redaction may drop the very line that identifies the failure class), but
+ * the resulting message only ever contains redacted content.
+ */
+export declare function classifyXcodeError(stderr: string, context: string): MobileError;
+//# sourceMappingURL=classify-build-error.d.ts.map

package/dist/ios/build/classify-build-error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"classify-build-error.d.ts","sourceRoot":"","sources":["../../../src/ios/build/classify-build-error.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAGL,WAAW,EAGZ,MAAM,iBAAiB,CAAC;AAwBzB;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,EAAE,aAAa,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAiBhF,CAAC;AAEF,wEAAwE;AACxE,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAEjE;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAMtD;AAoBD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,WAAW,CAqC/E"}

package/dist/ios/build/classify-build-error.js

@@ -0,0 +1,115 @@
+/**
+ * Classify xcodebuild / altool failures into typed errors with stable codes,
+ * redacting signing identities and key-file names before anything reaches the
+ * caller (LLM context = untrusted sink for secrets).
+ *
+ * Mapping (codes carried by the typed classes, see src/errors/asc.ts):
+ *   TESTFLIGHT_SIGNING_ERROR      -> TestflightSigningError
+ *   TESTFLIGHT_VERSION_COLLISION  -> TestflightVersionCollisionError
+ *   ASC_AUTH_ERROR                -> AscAuthError
+ *   ASC_UPLOAD_ERROR              -> AscUploadError
+ */
+import { AscAuthError, AscUploadError, TestflightSigningError, TestflightVersionCollisionError, } from "../../errors.js";
+/** Max tail of (redacted) stderr that may appear in an error message. */
+const MAX_DETAIL_CHARS = 200;
+/** Max number of extracted `error:` / `e: ` lines in the default message. */
+const MAX_ERROR_LINES = 5;
+/**
+ * Compiler/linker error lines buried mid-log: xcodebuild `error:`, clang
+ * `<file>: error:`, gradle/Kotlin `e: `. The build-system tail ("Script-*.sh
+ * ... (2 failures)") is noise — these lines carry the actual cause.
+ */
+const ERROR_LINE_RE = /^(.*error:|e: |error: )/;
+/**
+ * Lines carrying signing identities or API-key material. Dropped wholesale —
+ * partial redaction of "Apple Distribution: Real Name (TEAMID)" still leaks PII.
+ */
+const SIGNING_IDENTITY_LINE = /Apple Distribution:|Developer ID|AuthKey_|\.p8/;
+/** Belt-and-suspenders token redaction for anything the line filter missed. */
+const KEY_TOKEN = /(?:AuthKey_[A-Za-z0-9._-]+|\S*\.p8\b)/g;
+/**
+ * App Store bundle-reject patterns observed in real altool validate/upload
+ * runs, with actionable recovery hints. Matched against individual validation
+ * `detail :` lines (upload.ts) and against whole stderr (classifyXcodeError).
+ */
+export const BUNDLE_REJECT_HINTS = [
+    {
+        pattern: /LaunchScreen|UILaunchScreen/,
+        hint: 'Add "UILaunchScreen": {} to Info.plist (iOS 14+) or include a LaunchScreen.storyboard',
+    },
+    {
+        pattern: /CFBundleIconName/,
+        hint: "Add a 1024x1024 AppIcon to Assets.xcassets and ensure CFBundleIconName is set " +
+            "(Xcode does this when the asset catalog has an AppIcon)",
+    },
+    {
+        pattern: /UISupportedInterfaceOrientations/,
+        hint: "iPad multitasking requires all four orientations in UISupportedInterfaceOrientations, " +
+            "or set UIRequiresFullScreen=true",
+    },
+];
+/** First matching recovery hint for a bundle-reject message, if any. */
+export function bundleRejectHint(text) {
+    return BUNDLE_REJECT_HINTS.find(({ pattern }) => pattern.test(text))?.hint;
+}
+export function redactSigningInfo(text) {
+    return text
+        .split("\n")
+        .filter((line) => !SIGNING_IDENTITY_LINE.test(line))
+        .join("\n")
+        .replace(KEY_TOKEN, "[REDACTED-KEY]");
+}
+function tail(text) {
+    const trimmed = text.trim();
+    return trimmed.length <= MAX_DETAIL_CHARS ? trimmed : trimmed.slice(-MAX_DETAIL_CHARS);
+}
+/**
+ * Pull actual `error:` / `e: ` lines out of REDACTED stderr. Returns undefined
+ * when none are present (then the caller falls back to the stderr tail).
+ */
+function extractErrorLines(redacted) {
+    const lines = redacted.split("\n").filter((line) => ERROR_LINE_RE.test(line));
+    if (lines.length === 0)
+        return undefined;
+    return lines
+        .slice(0, MAX_ERROR_LINES)
+        .map((line) => line.trim().slice(0, MAX_DETAIL_CHARS))
+        .join("\n");
+}
+/**
+ * Map raw stderr to a typed error. Patterns match against the RAW stderr
+ * (redaction may drop the very line that identifies the failure class), but
+ * the resulting message only ever contains redacted content.
+ */
+export function classifyXcodeError(stderr, context) {
+    const redacted = redactSigningInfo(stderr);
+    const detail = tail(redacted);
+    if (/No signing certificate|CODE_SIGN/i.test(stderr)) {
+        return new TestflightSigningError(`${context}: code signing failed. Ensure automatic signing is enabled and the ` +
+            `App Store Connect API key has the App Manager role. Details: ${detail}`);
+    }
+    if (/already been uploaded|DUPLICATE/i.test(stderr)) {
+        // The collision class wants the colliding version; best-effort extraction
+        // from the RAW stderr (never echoed back — only the parsed version is).
+        const version = /bundle version\s+"?([\w.]+)"?/i.exec(stderr)?.[1] ?? "(unknown)";
+        return new TestflightVersionCollisionError(version);
+    }
+    if (/Authentication credentials|401/i.test(stderr)) {
+        return new AscAuthError(`${context}: ${detail}`);
+    }
+    if (/Missing Compliance/i.test(stderr)) {
+        return new AscUploadError(`${context}: upload flagged "Missing Compliance". Set ` +
+            `ITSAppUsesNonExemptEncryption=false in Info.plist (if you only use exempt ` +
+            `encryption) or answer the export-compliance question in App Store Connect. ` +
+            `Details: ${detail}`);
+    }
+    const hint = bundleRejectHint(stderr);
+    if (hint) {
+        return new AscUploadError(`${context}: bundle rejected by App Store validation. Fix: ${hint}. Details: ${detail}`);
+    }
+    const errorLines = extractErrorLines(redacted);
+    return errorLines
+        ? new AscUploadError(`${context} failed:\n${errorLines}`)
+        : new AscUploadError(`${context} failed: ${detail}`);
+}
+//# sourceMappingURL=classify-build-error.js.map

package/dist/ios/build/classify-build-error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"classify-build-error.js","sourceRoot":"","sources":["../../../src/ios/build/classify-build-error.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EACL,YAAY,EACZ,cAAc,EAEd,sBAAsB,EACtB,+BAA+B,GAChC,MAAM,iBAAiB,CAAC;AAEzB,yEAAyE;AACzE,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAE7B,6EAA6E;AAC7E,MAAM,eAAe,GAAG,CAAC,CAAC;AAE1B;;;;GAIG;AACH,MAAM,aAAa,GAAG,yBAAyB,CAAC;AAEhD;;;GAGG;AACH,MAAM,qBAAqB,GAAG,gDAAgD,CAAC;AAE/E,+EAA+E;AAC/E,MAAM,SAAS,GAAG,wCAAwC,CAAC;AAE3D;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAqD;IACnF;QACE,OAAO,EAAE,6BAA6B;QACtC,IAAI,EAAE,uFAAuF;KAC9F;IACD;QACE,OAAO,EAAE,kBAAkB;QAC3B,IAAI,EACF,gFAAgF;YAChF,yDAAyD;KAC5D;IACD;QACE,OAAO,EAAE,kCAAkC;QAC3C,IAAI,EACF,wFAAwF;YACxF,kCAAkC;KACrC;CACF,CAAC;AAEF,wEAAwE;AACxE,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,OAAO,mBAAmB,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,OAAO,IAAI;SACR,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SACnD,IAAI,CAAC,IAAI,CAAC;SACV,OAAO,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,IAAI,CAAC,IAAY;IACxB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,OAAO,OAAO,CAAC,MAAM,IAAI,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,gBAAgB,CAAC,CAAC;AACzF,CAAC;AAED;;;GAGG;AACH,SAAS,iBAAiB,CAAC,QAAgB;IACzC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9E,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACzC,OAAO,KAAK;SACT,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC;SACzB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC;SACrD,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAc,EAAE,OAAe;IAChE,MAAM,QAAQ,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;IAE9B,IAAI,mCAAmC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACrD,OAAO,IAAI,sBAAsB,CAC/B,GAAG,OAAO,qEAAqE;YAC7E,gEAAgE,MAAM,EAAE,CAC3E,CAAC;IACJ,CAAC;IACD,IAAI,kCAAkC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACpD,0EAA0E;QAC1E,wEAAwE;QACxE,MAAM,OAAO,GAAG,gCAAgC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,WAAW,CAAC;QAClF,OAAO,IAAI,+BAA+B,CAAC,OAAO,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,iCAAiC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACnD,OAAO,IAAI,YAAY,CAAC,GAAG,OAAO,KAAK,MAAM,EAAE,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACvC,OAAO,IAAI,cAAc,CACvB,GAAG,OAAO,6CAA6C;YACrD,4EAA4E;YAC5E,6EAA6E;YAC7E,YAAY,MAAM,EAAE,CACvB,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,IAAI,EAAE,CAAC;QACT,OAAO,IAAI,cAAc,CACvB,GAAG,OAAO,mDAAmD,IAAI,cAAc,MAAM,EAAE,CACxF,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC/C,OAAO,UAAU;QACf,CAAC,CAAC,IAAI,cAAc,CAAC,GAAG,OAAO,aAAa,UAAU,EAAE,CAAC;QACzD,CAAC,CAAC,IAAI,cAAc,CAAC,GAAG,OAAO,YAAY,MAAM,EAAE,CAAC,CAAC;AACzD,CAAC"}

package/dist/ios/build/exec.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Internal execFile wrapper for the build pipeline.
+ *
+ * SECURITY: everything routes through execFile (argv form) — /bin/sh is never
+ * spawned, so shell metacharacters in paths/schemes are literal argv slots
+ * (CWE-78 mitigation, same contract as src/ios/simctl-exec.ts and src/adb/exec.ts).
+ *
+ * Returns a Result instead of throwing: callers need raw stderr to classify
+ * (and redact) build failures — see classify-build-error.ts.
+ */
+export type ToolResult = {
+    ok: true;
+    stdout: string;
+} | {
+    ok: false;
+    timedOut: boolean;
+    stderr: string;
+    stdout: string;
+};
+export declare function runTool(file: string, args: string[], options: {
+    timeoutMs: number;
+    cwd?: string;
+}): Promise<ToolResult>;
+//# sourceMappingURL=exec.d.ts.map

package/dist/ios/build/exec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exec.d.ts","sourceRoot":"","sources":["../../../src/ios/build/exec.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAUH,MAAM,MAAM,UAAU,GAClB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAG5B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAUrE,wBAAsB,OAAO,CAC3B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAC3C,OAAO,CAAC,UAAU,CAAC,CAerB"}

package/dist/ios/build/exec.js

@@ -0,0 +1,33 @@
+/**
+ * Internal execFile wrapper for the build pipeline.
+ *
+ * SECURITY: everything routes through execFile (argv form) — /bin/sh is never
+ * spawned, so shell metacharacters in paths/schemes are literal argv slots
+ * (CWE-78 mitigation, same contract as src/ios/simctl-exec.ts and src/adb/exec.ts).
+ *
+ * Returns a Result instead of throwing: callers need raw stderr to classify
+ * (and redact) build failures — see classify-build-error.ts.
+ */
+import { execFile } from "child_process";
+import { promisify } from "util";
+const execFileAsync = promisify(execFile);
+/** xcodebuild logs are huge; 50 MiB matches the other exec wrappers. */
+const MAX_BUFFER = 50 * 1024 * 1024;
+export async function runTool(file, args, options) {
+    try {
+        const { stdout } = await execFileAsync(file, args, {
+            encoding: "utf-8",
+            timeout: options.timeoutMs,
+            maxBuffer: MAX_BUFFER,
+            cwd: options.cwd,
+        });
+        return { ok: true, stdout: stdout.toString() };
+    }
+    catch (error) {
+        const e = error;
+        const timedOut = e.killed === true || e.signal === "SIGTERM";
+        const stderr = e.stderr?.toString() || e.message || String(error);
+        return { ok: false, timedOut, stderr, stdout: e.stdout?.toString() ?? "" };
+    }
+}
+//# sourceMappingURL=exec.js.map

package/dist/ios/build/exec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exec.js","sourceRoot":"","sources":["../../../src/ios/build/exec.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAEjC,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C,wEAAwE;AACxE,MAAM,UAAU,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAgBpC,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,IAAY,EACZ,IAAc,EACd,OAA4C;IAE5C,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE;YACjD,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,OAAO,CAAC,SAAS;YAC1B,SAAS,EAAE,UAAU;YACrB,GAAG,EAAE,OAAO,CAAC,GAAG;SACjB,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;IACjD,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,MAAM,CAAC,GAAG,KAAkB,CAAC;QAC7B,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC;QAC7D,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC;QAClE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC;IAC7E,CAAC;AACH,CAAC"}

package/dist/ios/build/export-options.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Generate ExportOptions.plist for `xcodebuild -exportArchive`.
+ *
+ * Fixed policy: automatic signing + generateAppStoreInformation — the pipeline
+ * targets App Store Connect / TestFlight uploads exclusively.
+ */
+export interface ExportOptionsConfig {
+    /** Only App Store Connect is supported by this pipeline. */
+    method?: "app-store-connect";
+    /** "upload" sends straight to ASC; "export" leaves the .ipa on disk. */
+    destination?: "upload" | "export";
+    /** Let Xcode bump CFBundleVersion on collision (default: true). */
+    manageVersion?: boolean;
+}
+/** Deterministic plist body — exported separately so tests can snapshot it. */
+export declare function renderExportOptionsPlist(config?: ExportOptionsConfig): string;
+/**
+ * Write the plist to a uniquely-named temp file inside `dir` and return its
+ * absolute path. Containment is validated so a hostile `dir` cannot place the
+ * file outside itself.
+ */
+export declare function writeExportOptionsPlist(dir: string, config?: ExportOptionsConfig): Promise<string>;
+//# sourceMappingURL=export-options.d.ts.map

package/dist/ios/build/export-options.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"export-options.d.ts","sourceRoot":"","sources":["../../../src/ios/build/export-options.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAOH,MAAM,WAAW,mBAAmB;IAClC,4DAA4D;IAC5D,MAAM,CAAC,EAAE,mBAAmB,CAAC;IAC7B,wEAAwE;IACxE,WAAW,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAClC,mEAAmE;IACnE,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAID,+EAA+E;AAC/E,wBAAgB,wBAAwB,CAAC,MAAM,GAAE,mBAAwB,GAAG,MAAM,CAsBjF;AAED;;;;GAIG;AACH,wBAAsB,uBAAuB,CAC3C,GAAG,EAAE,MAAM,EACX,MAAM,GAAE,mBAAwB,GAC/B,OAAO,CAAC,MAAM,CAAC,CAOjB"}

package/dist/ios/build/export-options.js

@@ -0,0 +1,48 @@
+/**
+ * Generate ExportOptions.plist for `xcodebuild -exportArchive`.
+ *
+ * Fixed policy: automatic signing + generateAppStoreInformation — the pipeline
+ * targets App Store Connect / TestFlight uploads exclusively.
+ */
+import { randomBytes } from "crypto";
+import { writeFile } from "fs/promises";
+import { join } from "path";
+import { validatePath, validatePathContainment } from "../../utils/sanitize.js";
+const PLIST_BOOL = (value) => (value ? "<true/>" : "<false/>");
+/** Deterministic plist body — exported separately so tests can snapshot it. */
+export function renderExportOptionsPlist(config = {}) {
+    const method = config.method ?? "app-store-connect";
+    const destination = config.destination ?? "upload";
+    const manageVersion = config.manageVersion ?? true;
+    return `<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+\t<key>method</key>
+\t<string>${method}</string>
+\t<key>destination</key>
+\t<string>${destination}</string>
+\t<key>signingStyle</key>
+\t<string>automatic</string>
+\t<key>generateAppStoreInformation</key>
+\t${PLIST_BOOL(true)}
+\t<key>manageAppVersionAndBuildNumber</key>
+\t${PLIST_BOOL(manageVersion)}
+</dict>
+</plist>
+`;
+}
+/**
+ * Write the plist to a uniquely-named temp file inside `dir` and return its
+ * absolute path. Containment is validated so a hostile `dir` cannot place the
+ * file outside itself.
+ */
+export async function writeExportOptionsPlist(dir, config = {}) {
+    validatePath(dir, "export options directory");
+    const fileName = `ExportOptions-${randomBytes(4).toString("hex")}.plist`;
+    const filePath = join(dir, fileName);
+    validatePathContainment(filePath, dir);
+    await writeFile(filePath, renderExportOptionsPlist(config), "utf-8");
+    return filePath;
+}
+//# sourceMappingURL=export-options.js.map

package/dist/ios/build/export-options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"export-options.js","sourceRoot":"","sources":["../../../src/ios/build/export-options.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AACrC,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,YAAY,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAWhF,MAAM,UAAU,GAAG,CAAC,KAAc,EAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;AAEhF,+EAA+E;AAC/E,MAAM,UAAU,wBAAwB,CAAC,SAA8B,EAAE;IACvE,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,mBAAmB,CAAC;IACpD,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,IAAI,QAAQ,CAAC;IACnD,MAAM,aAAa,GAAG,MAAM,CAAC,aAAa,IAAI,IAAI,CAAC;IAEnD,OAAO;;;;;YAKG,MAAM;;YAEN,WAAW;;;;IAInB,UAAU,CAAC,IAAI,CAAC;;IAEhB,UAAU,CAAC,aAAa,CAAC;;;CAG5B,CAAC;AACF,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,GAAW,EACX,SAA8B,EAAE;IAEhC,YAAY,CAAC,GAAG,EAAE,0BAA0B,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,iBAAiB,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC;IACzE,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACrC,uBAAuB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACvC,MAAM,SAAS,CAAC,QAAQ,EAAE,wBAAwB,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC;IACrE,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/ios/build/index.d.ts

@@ -0,0 +1,14 @@
+/**
+ * iOS build + TestFlight upload pipeline.
+ *
+ * Typical flow:
+ *   detectIosProject -> listSchemes -> pickReleaseScheme ->
+ *   archiveApp -> writeExportOptionsPlist -> exportArchive -> uploadIpa
+ * (Flutter projects short-circuit via buildFlutterIpa -> uploadIpa.)
+ */
+export { detectIosProject, listSchemes, pickReleaseScheme, xcodeTargetArgs, type ProjectInfo, type ProjectKind, } from "./project-detector.js";
+export { renderExportOptionsPlist, writeExportOptionsPlist, type ExportOptionsConfig, } from "./export-options.js";
+export { archiveApp, exportArchive, buildFlutterIpa, type AscApiAuth, } from "./xcode-build.js";
+export { uploadIpa, validateIpa } from "./upload.js";
+export { bundleRejectHint, classifyXcodeError, redactSigningInfo, } from "./classify-build-error.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/ios/build/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/ios/build/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EACL,gBAAgB,EAChB,WAAW,EACX,iBAAiB,EACjB,eAAe,EACf,KAAK,WAAW,EAChB,KAAK,WAAW,GACjB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,wBAAwB,EACxB,uBAAuB,EACvB,KAAK,mBAAmB,GACzB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,UAAU,EACV,aAAa,EACb,eAAe,EACf,KAAK,UAAU,GAChB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,2BAA2B,CAAC"}

package/dist/ios/build/index.js

@@ -0,0 +1,14 @@
+/**
+ * iOS build + TestFlight upload pipeline.
+ *
+ * Typical flow:
+ *   detectIosProject -> listSchemes -> pickReleaseScheme ->
+ *   archiveApp -> writeExportOptionsPlist -> exportArchive -> uploadIpa
+ * (Flutter projects short-circuit via buildFlutterIpa -> uploadIpa.)
+ */
+export { detectIosProject, listSchemes, pickReleaseScheme, xcodeTargetArgs, } from "./project-detector.js";
+export { renderExportOptionsPlist, writeExportOptionsPlist, } from "./export-options.js";
+export { archiveApp, exportArchive, buildFlutterIpa, } from "./xcode-build.js";
+export { uploadIpa, validateIpa } from "./upload.js";
+export { bundleRejectHint, classifyXcodeError, redactSigningInfo, } from "./classify-build-error.js";
+//# sourceMappingURL=index.js.map

package/dist/ios/build/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/ios/build/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EACL,gBAAgB,EAChB,WAAW,EACX,iBAAiB,EACjB,eAAe,GAGhB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,wBAAwB,EACxB,uBAAuB,GAExB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,UAAU,EACV,aAAa,EACb,eAAe,GAEhB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,2BAA2B,CAAC"}

package/dist/ios/build/project-detector.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Detect what kind of iOS project lives in a directory and resolve the
+ * workspace/project xcodebuild should be pointed at.
+ *
+ * Detection order (first match wins):
+ *   1. flutter       — pubspec.yaml + ios/
+ *   2. react-native  — package.json with a react-native dep + ios/*.xcworkspace
+ *   3. kmp           — iosApp/*.xcodeproj (Kotlin Multiplatform layout)
+ *   4. xcode         — *.xcworkspace (preferred) or *.xcodeproj in the dir itself
+ */
+export type ProjectKind = "flutter" | "react-native" | "kmp" | "xcode";
+export interface ProjectInfo {
+    kind: ProjectKind;
+    /** Absolute path to *.xcworkspace, when one exists (takes priority). */
+    workspacePath?: string;
+    /** Absolute path to *.xcodeproj, when no workspace is available. */
+    projectPath?: string;
+    /** Directory xcodebuild/flutter should run relative to. */
+    buildDir: string;
+}
+export declare function detectIosProject(dir: string): Promise<ProjectInfo>;
+/** `-workspace <ws>` or `-project <proj>` argv slice for xcodebuild. */
+export declare function xcodeTargetArgs(info: ProjectInfo): string[];
+export declare function listSchemes(info: ProjectInfo): Promise<string[]>;
+/**
+ * Pick the scheme to archive: exact "Release" > "<x>-Release" suffix > first
+ * scheme that is neither a test nor a debug scheme > first scheme.
+ */
+export declare function pickReleaseScheme(schemes: string[]): string;
+//# sourceMappingURL=project-detector.d.ts.map

package/dist/ios/build/project-detector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-detector.d.ts","sourceRoot":"","sources":["../../../src/ios/build/project-detector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAUH,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,cAAc,GAAG,KAAK,GAAG,OAAO,CAAC;AAEvE,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,WAAW,CAAC;IAClB,wEAAwE;IACxE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,oEAAoE;IACpE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,2DAA2D;IAC3D,QAAQ,EAAE,MAAM,CAAC;CAClB;AA0CD,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CA2DxE;AAED,wEAAwE;AACxE,wBAAgB,eAAe,CAAC,IAAI,EAAE,WAAW,GAAG,MAAM,EAAE,CAO3D;AAED,wBAAsB,WAAW,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAuBtE;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,CAa3D"}