lakebed-native-cli 0.1.0

package/dist/cli/apple/devices.js

@@ -0,0 +1,49 @@
+import { runEas, runEasCapture } from "./eas-delegate.js";
+import { DEVICE_REGISTER_INTRO } from "./branding.js";
+export function parseDeviceListPayload(stdout) {
+    const trimmed = stdout.trim();
+    if (!trimmed)
+        return [];
+    const parsed = JSON.parse(trimmed);
+    if (Array.isArray(parsed))
+        return parsed;
+    if (parsed && typeof parsed === "object" && "devices" in parsed) {
+        return parsed.devices;
+    }
+    return parsed;
+}
+export async function cmdAppleDevicesRegister() {
+    console.log(DEVICE_REGISTER_INTRO);
+    const code = runEas(["device:create"]);
+    if (code !== 0)
+        process.exitCode = code;
+    else {
+        console.log("");
+        console.log("Device registered with Lakebed Native. Rebuild device installs to refresh provisioning.");
+    }
+}
+export async function cmdAppleDevicesList(opts) {
+    const { status, stdout, stderr } = runEasCapture(opts.json ? ["device:list", "--json", "--non-interactive"] : ["device:list", "--non-interactive"]);
+    if (status !== 0) {
+        if (opts.json)
+            console.log(JSON.stringify({ ok: false, error: stderr || stdout }));
+        else
+            console.error(stderr || stdout);
+        process.exitCode = status;
+        return;
+    }
+    if (opts.json) {
+        try {
+            console.log(JSON.stringify({ ok: true, devices: parseDeviceListPayload(stdout) }));
+        }
+        catch {
+            console.log(JSON.stringify({ ok: false, error: "Could not parse device list output" }));
+            process.exitCode = 1;
+        }
+    }
+    else {
+        console.log("Registered devices (Lakebed Native / Apple ad-hoc):");
+        console.log(stdout.trim() || "(none)");
+    }
+}
+//# sourceMappingURL=devices.js.map

package/dist/cli/apple/devices.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"devices.js","sourceRoot":"","sources":["../../../src/cli/apple/devices.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAEtD,MAAM,UAAU,sBAAsB,CAAC,MAAc;IACnD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IACxB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAY,CAAC;IAC9C,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IACzC,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,SAAS,IAAI,MAAM,EAAE,CAAC;QAChE,OAAQ,MAA+B,CAAC,OAAO,CAAC;IAClD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB;IAC3C,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;IACvC,IAAI,IAAI,KAAK,CAAC;QAAE,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;SACnC,CAAC;QACJ,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,yFAAyF,CAAC,CAAC;IACzG,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAAwB;IAChE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,aAAa,CAC9C,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,aAAa,EAAE,QAAQ,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,EAAE,mBAAmB,CAAC,CAClG,CAAC;IACF,IAAI,MAAM,KAAK,CAAC,EAAE,CAAC;QACjB,IAAI,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC;;YAC9E,OAAO,CAAC,KAAK,CAAC,MAAM,IAAI,MAAM,CAAC,CAAC;QACrC,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAC;QAC1B,OAAO;IACT,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,IAAI,CAAC;YACH,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,sBAAsB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QACrF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC,CAAC,CAAC;YACxF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;QACnE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,QAAQ,CAAC,CAAC;IACzC,CAAC;AACH,CAAC"}

package/dist/cli/apple/eas-delegate.d.ts

@@ -0,0 +1,25 @@
+/** EAS build profile for physical iOS devices (internal ad-hoc, remote credentials). */
+export declare const IOS_DEVICE_BUILD_PROFILE = "device-preview";
+/** EAS CLI v20+ uses `credentials:configure-build -e PROFILE` (not `credentials --profile`). */
+export declare function easConfigureBuildCredentialsArgs(profile: string): string[];
+export declare function runEasConfigureBuildCredentials(profile: string, opts?: {
+    interactive?: boolean;
+    cwd?: string;
+    capsuleDir?: string;
+}): number;
+export declare function runEas(args: string[], opts?: {
+    interactive?: boolean;
+    cwd?: string;
+    capsuleDir?: string;
+}): number;
+export declare function runEasCapture(args: string[], cwdOrCapsuleDir?: string): {
+    status: number;
+    stdout: string;
+    stderr: string;
+    cwd: string;
+};
+export declare function hasAscApiKeyEnv(): boolean;
+export declare function appleAuthHint(): string;
+/** Repo universal shell — used only for maintainer template builds, not per-capsule device packs. */
+export declare function getMaintainerShellDir(): string;
+//# sourceMappingURL=eas-delegate.d.ts.map

package/dist/cli/apple/eas-delegate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"eas-delegate.d.ts","sourceRoot":"","sources":["../../../src/cli/apple/eas-delegate.ts"],"names":[],"mappings":"AAKA,wFAAwF;AACxF,eAAO,MAAM,wBAAwB,mBAAmB,CAAC;AAEzD,gGAAgG;AAChG,wBAAgB,gCAAgC,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAE1E;AAED,wBAAgB,+BAA+B,CAC7C,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE;IAAE,WAAW,CAAC,EAAE,OAAO,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAClE,MAAM,CAER;AAED,wBAAgB,MAAM,CACpB,IAAI,EAAE,MAAM,EAAE,EACd,IAAI,CAAC,EAAE;IAAE,WAAW,CAAC,EAAE,OAAO,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAClE,MAAM,CASR;AAED,wBAAgB,aAAa,CAC3B,IAAI,EAAE,MAAM,EAAE,EACd,eAAe,CAAC,EAAE,MAAM,GACvB;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAoBjE;AAED,wBAAgB,eAAe,IAAI,OAAO,CAKzC;AAED,wBAAgB,aAAa,IAAI,MAAM,CAUtC;AAED,qGAAqG;AACrG,wBAAgB,qBAAqB,IAAI,MAAM,CAE9C"}

package/dist/cli/apple/eas-delegate.js

@@ -0,0 +1,63 @@
+import { spawnSync } from "node:child_process";
+import { getShellDir } from "../util.js";
+import { resolveEasCwd } from "../capsule-eas.js";
+import { sanitizeVendorOutput } from "./branding.js";
+/** EAS build profile for physical iOS devices (internal ad-hoc, remote credentials). */
+export const IOS_DEVICE_BUILD_PROFILE = "device-preview";
+/** EAS CLI v20+ uses `credentials:configure-build -e PROFILE` (not `credentials --profile`). */
+export function easConfigureBuildCredentialsArgs(profile) {
+    return ["credentials:configure-build", "-p", "ios", "-e", profile];
+}
+export function runEasConfigureBuildCredentials(profile, opts) {
+    return runEas(easConfigureBuildCredentialsArgs(profile), opts);
+}
+export function runEas(args, opts) {
+    const cwd = opts?.cwd ?? resolveEasCwd(opts?.capsuleDir);
+    const result = spawnSync("eas", args, {
+        cwd,
+        stdio: opts?.interactive === false ? "pipe" : "inherit",
+        encoding: "utf8",
+        env: process.env,
+    });
+    return result.status ?? 1;
+}
+export function runEasCapture(args, cwdOrCapsuleDir) {
+    const cwd = cwdOrCapsuleDir && cwdOrCapsuleDir.includes("app.json")
+        ? cwdOrCapsuleDir
+        : resolveEasCwd(cwdOrCapsuleDir);
+    const result = spawnSync("eas", args, {
+        cwd,
+        stdio: "pipe",
+        encoding: "utf8",
+        env: process.env,
+    });
+    const machineReadable = args.includes("--json");
+    const stdout = result.stdout ?? "";
+    const stderr = result.stderr ?? "";
+    return {
+        status: result.status ?? 1,
+        stdout: machineReadable ? stdout : sanitizeVendorOutput(stdout),
+        stderr: machineReadable ? stderr : sanitizeVendorOutput(stderr),
+        cwd,
+    };
+}
+export function hasAscApiKeyEnv() {
+    return !!(process.env.EXPO_ASC_API_KEY_PATH ||
+        (process.env.EXPO_ASC_KEY_ID && process.env.EXPO_ASC_ISSUER_ID));
+}
+export function appleAuthHint() {
+    if (hasAscApiKeyEnv()) {
+        return "App Store Connect API key detected. Lakebed Native will use it for automated signing setup.";
+    }
+    return [
+        "For cloud/CI signing, set App Store Connect API key env vars (recommended):",
+        "  EXPO_ASC_API_KEY_PATH, EXPO_ASC_KEY_ID, EXPO_ASC_ISSUER_ID",
+        "Or run setup interactively with your Apple Developer account.",
+        "See docs/apple-credentials.md",
+    ].join("\n");
+}
+/** Repo universal shell — used only for maintainer template builds, not per-capsule device packs. */
+export function getMaintainerShellDir() {
+    return getShellDir();
+}
+//# sourceMappingURL=eas-delegate.js.map

package/dist/cli/apple/eas-delegate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"eas-delegate.js","sourceRoot":"","sources":["../../../src/cli/apple/eas-delegate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAErD,wFAAwF;AACxF,MAAM,CAAC,MAAM,wBAAwB,GAAG,gBAAgB,CAAC;AAEzD,gGAAgG;AAChG,MAAM,UAAU,gCAAgC,CAAC,OAAe;IAC9D,OAAO,CAAC,6BAA6B,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,+BAA+B,CAC7C,OAAe,EACf,IAAmE;IAEnE,OAAO,MAAM,CAAC,gCAAgC,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,MAAM,CACpB,IAAc,EACd,IAAmE;IAEnE,MAAM,GAAG,GAAG,IAAI,EAAE,GAAG,IAAI,aAAa,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE;QACpC,GAAG;QACH,KAAK,EAAE,IAAI,EAAE,WAAW,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;QACvD,QAAQ,EAAE,MAAM;QAChB,GAAG,EAAE,OAAO,CAAC,GAAG;KACjB,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,IAAc,EACd,eAAwB;IAExB,MAAM,GAAG,GACP,eAAe,IAAI,eAAe,CAAC,QAAQ,CAAC,UAAU,CAAC;QACrD,CAAC,CAAC,eAAe;QACjB,CAAC,CAAC,aAAa,CAAC,eAAe,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE;QACpC,GAAG;QACH,KAAK,EAAE,MAAM;QACb,QAAQ,EAAE,MAAM;QAChB,GAAG,EAAE,OAAO,CAAC,GAAG;KACjB,CAAC,CAAC;IACH,MAAM,eAAe,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;IACnC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;IACnC,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,CAAC;QAC1B,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC;QAC/D,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC;QAC/D,GAAG;KACJ,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,OAAO,CAAC,CAAC,CACP,OAAO,CAAC,GAAG,CAAC,qBAAqB;QACjC,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAChE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,IAAI,eAAe,EAAE,EAAE,CAAC;QACtB,OAAO,6FAA6F,CAAC;IACvG,CAAC;IACD,OAAO;QACL,6EAA6E;QAC7E,8DAA8D;QAC9D,+DAA+D;QAC/D,+BAA+B;KAChC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU,qBAAqB;IACnC,OAAO,WAAW,EAAE,CAAC;AACvB,CAAC"}

package/dist/cli/apple/index.d.ts

@@ -0,0 +1,9 @@
+import { cmdAppleSetup } from "./setup.js";
+import { cmdAppleDevicesRegister, cmdAppleDevicesList } from "./devices.js";
+import { cmdAppleStatus } from "./status.js";
+import { cmdAppleBuildLocal, cmdAppleBuildAuto } from "./build-local.js";
+import { cmdAppleBuildCloud } from "./build-cloud.js";
+import { cmdAppleFetchShellIpa } from "./device-pack.js";
+export declare function cmdAppleGuide(): Promise<void>;
+export { cmdAppleSetup, cmdAppleDevicesRegister, cmdAppleDevicesList, cmdAppleStatus, cmdAppleBuildLocal, cmdAppleBuildAuto, cmdAppleBuildCloud, cmdAppleFetchShellIpa, };
+//# sourceMappingURL=index.d.ts.map

package/dist/cli/apple/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/cli/apple/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAC5E,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAGzD,wBAAsB,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC,CAEnD;AAED,OAAO,EACL,aAAa,EACb,uBAAuB,EACvB,mBAAmB,EACnB,cAAc,EACd,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,qBAAqB,GACtB,CAAC"}

package/dist/cli/apple/index.js

@@ -0,0 +1,12 @@
+import { cmdAppleSetup } from "./setup.js";
+import { cmdAppleDevicesRegister, cmdAppleDevicesList } from "./devices.js";
+import { cmdAppleStatus } from "./status.js";
+import { cmdAppleBuildLocal, cmdAppleBuildAuto } from "./build-local.js";
+import { cmdAppleBuildCloud } from "./build-cloud.js";
+import { cmdAppleFetchShellIpa } from "./device-pack.js";
+import { printIosBuildPathGuide, recommendIosDeviceBuildPath } from "./choose-path.js";
+export async function cmdAppleGuide() {
+    printIosBuildPathGuide(recommendIosDeviceBuildPath());
+}
+export { cmdAppleSetup, cmdAppleDevicesRegister, cmdAppleDevicesList, cmdAppleStatus, cmdAppleBuildLocal, cmdAppleBuildAuto, cmdAppleBuildCloud, cmdAppleFetchShellIpa, };
+//# sourceMappingURL=index.js.map

package/dist/cli/apple/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/cli/apple/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAC5E,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,sBAAsB,EAAE,2BAA2B,EAAE,MAAM,kBAAkB,CAAC;AAEvF,MAAM,CAAC,KAAK,UAAU,aAAa;IACjC,sBAAsB,CAAC,2BAA2B,EAAE,CAAC,CAAC;AACxD,CAAC;AAED,OAAO,EACL,aAAa,EACb,uBAAuB,EACvB,mBAAmB,EACnB,cAAc,EACd,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,qBAAqB,GACtB,CAAC"}

package/dist/cli/apple/route-device-build.d.ts

@@ -0,0 +1,16 @@
+export type IosDeviceRoute = "fast-pack" | "eas-cloud";
+export type IosDeviceRouteDecision = {
+    route: IosDeviceRoute;
+    canFastPack: boolean;
+    canEasCloud: boolean;
+    summary: string;
+    details: string[];
+    shellIpa?: string;
+};
+export declare function resolveIosDeviceRoute(opts?: {
+    force?: IosDeviceRoute;
+    shellIpa?: string;
+    credentialsConfigured?: boolean;
+    capsuleDir?: string;
+}): IosDeviceRouteDecision;
+//# sourceMappingURL=route-device-build.d.ts.map

package/dist/cli/apple/route-device-build.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"route-device-build.d.ts","sourceRoot":"","sources":["../../../src/cli/apple/route-device-build.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,cAAc,GAAG,WAAW,GAAG,WAAW,CAAC;AAEvD,MAAM,MAAM,sBAAsB,GAAG;IACnC,KAAK,EAAE,cAAc,CAAC;IACtB,WAAW,EAAE,OAAO,CAAC;IACrB,WAAW,EAAE,OAAO,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,wBAAgB,qBAAqB,CAAC,IAAI,CAAC,EAAE;IAC3C,KAAK,CAAC,EAAE,cAAc,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,sBAAsB,CAiDzB"}

package/dist/cli/apple/route-device-build.js

@@ -0,0 +1,54 @@
+import { detectPlatform } from "../platform-detect.js";
+import { checkAppleReadiness, resolveRouteSigningReady } from "./status.js";
+import { hasCodesignTools, hasRelevantSigningIdentity } from "./sign-ios.js";
+import { deviceShellIpaHint, resolveDeviceShellIpa } from "./shell-ipa.js";
+export function resolveIosDeviceRoute(opts) {
+    const platform = detectPlatform();
+    const apple = checkAppleReadiness(opts?.capsuleDir);
+    const creds = resolveRouteSigningReady(opts?.credentialsConfigured, opts?.capsuleDir);
+    const shellIpa = resolveDeviceShellIpa(opts?.shellIpa, opts?.capsuleDir);
+    const hasIdentity = hasRelevantSigningIdentity();
+    const canFastPack = platform.isMac &&
+        platform.hasXcode &&
+        hasCodesignTools() &&
+        !!shellIpa &&
+        creds &&
+        hasIdentity;
+    const canEasCloud = platform.hasEasCli && apple.shellLinked && apple.devicePreviewProfile && creds;
+    const details = [];
+    if (platform.isMac && platform.hasXcode) {
+        details.push(`Mac + Xcode (${platform.xcodeVersion ?? "ok"})`);
+        if (shellIpa)
+            details.push(`  Shell IPA: ${shellIpa}`);
+        else
+            details.push(`  Shell IPA: missing — ${deviceShellIpaHint(opts?.capsuleDir).split("\n")[0]}`);
+        if (!hasIdentity)
+            details.push("  Keychain: no distribution identity for this Apple team (run apple setup)");
+    }
+    else if (platform.isMac) {
+        details.push("Mac without Xcode — install Xcode for fast device pack");
+    }
+    else {
+        details.push("Not on macOS — fast IPA pack unavailable");
+    }
+    if (canEasCloud) {
+        details.push("Lakebed Native cloud: full device shell build (~12 min)");
+    }
+    else {
+        details.push("Lakebed Native cloud: complete lakebed-native apple setup first");
+    }
+    let route = "eas-cloud";
+    if (opts?.force)
+        route = opts.force;
+    else if (canFastPack)
+        route = "fast-pack";
+    else if (canEasCloud)
+        route = "eas-cloud";
+    else if (platform.isMac && platform.hasXcode)
+        route = "fast-pack";
+    const summary = route === "fast-pack"
+        ? "Fast device pack: inject JS bundle into prebuilt shell IPA + re-sign (seconds)"
+        : "Lakebed Native cloud build: compile + sign device shell (~12 min)";
+    return { route, canFastPack, canEasCloud, summary, details, shellIpa: shellIpa ?? undefined };
+}
+//# sourceMappingURL=route-device-build.js.map

package/dist/cli/apple/route-device-build.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"route-device-build.js","sourceRoot":"","sources":["../../../src/cli/apple/route-device-build.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAC5E,OAAO,EAAE,gBAAgB,EAAE,0BAA0B,EAAE,MAAM,eAAe,CAAC;AAC7E,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAa3E,MAAM,UAAU,qBAAqB,CAAC,IAKrC;IACC,MAAM,QAAQ,GAAG,cAAc,EAAE,CAAC;IAClC,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,wBAAwB,CAAC,IAAI,EAAE,qBAAqB,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;IACtF,MAAM,QAAQ,GAAG,qBAAqB,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;IACzE,MAAM,WAAW,GAAG,0BAA0B,EAAE,CAAC;IAEjD,MAAM,WAAW,GACf,QAAQ,CAAC,KAAK;QACd,QAAQ,CAAC,QAAQ;QACjB,gBAAgB,EAAE;QAClB,CAAC,CAAC,QAAQ;QACV,KAAK;QACL,WAAW,CAAC;IAEd,MAAM,WAAW,GACf,QAAQ,CAAC,SAAS,IAAI,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,oBAAoB,IAAI,KAAK,CAAC;IAEjF,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,IAAI,QAAQ,CAAC,KAAK,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACxC,OAAO,CAAC,IAAI,CAAC,gBAAgB,QAAQ,CAAC,YAAY,IAAI,IAAI,GAAG,CAAC,CAAC;QAC/D,IAAI,QAAQ;YAAE,OAAO,CAAC,IAAI,CAAC,gBAAgB,QAAQ,EAAE,CAAC,CAAC;;YAClD,OAAO,CAAC,IAAI,CAAC,0BAA0B,kBAAkB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACnG,IAAI,CAAC,WAAW;YAAE,OAAO,CAAC,IAAI,CAAC,4EAA4E,CAAC,CAAC;IAC/G,CAAC;SAAM,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QAC1B,OAAO,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;IACzE,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;IAC3D,CAAC;IAED,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC;IAC1E,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,IAAI,CAAC,iEAAiE,CAAC,CAAC;IAClF,CAAC;IAED,IAAI,KAAK,GAAmB,WAAW,CAAC;IACxC,IAAI,IAAI,EAAE,KAAK;QAAE,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;SAC/B,IAAI,WAAW;QAAE,KAAK,GAAG,WAAW,CAAC;SACrC,IAAI,WAAW;QAAE,KAAK,GAAG,WAAW,CAAC;SACrC,IAAI,QAAQ,CAAC,KAAK,IAAI,QAAQ,CAAC,QAAQ;QAAE,KAAK,GAAG,WAAW,CAAC;IAElE,MAAM,OAAO,GACX,KAAK,KAAK,WAAW;QACnB,CAAC,CAAC,gFAAgF;QAClF,CAAC,CAAC,mEAAmE,CAAC;IAE1E,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,IAAI,SAAS,EAAE,CAAC;AAChG,CAAC"}

package/dist/cli/apple/setup.d.ts

@@ -0,0 +1,5 @@
+export declare function cmdAppleSetup(opts: {
+    json?: boolean;
+    capsuleDir?: string;
+}): Promise<void>;
+//# sourceMappingURL=setup.d.ts.map

package/dist/cli/apple/setup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup.d.ts","sourceRoot":"","sources":["../../../src/cli/apple/setup.ts"],"names":[],"mappings":"AAOA,wBAAsB,aAAa,CACjC,IAAI,EAAE;IAAE,IAAI,CAAC,EAAE,OAAO,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAC5C,OAAO,CAAC,IAAI,CAAC,CA8Df"}

package/dist/cli/apple/setup.js

@@ -0,0 +1,69 @@
+import { detectPlatform } from "../platform-detect.js";
+import { IOS_DEVICE_BUILD_PROFILE, appleAuthHint, runEasConfigureBuildCredentials } from "./eas-delegate.js";
+import { ensureCapsuleEasProject } from "../capsule-eas.js";
+import { resolveCapsuleDir } from "../util.js";
+import { APPLE_SETUP_INTRO, IOS_BUILD_TOOLS_HINT } from "./branding.js";
+import { writeSigningConfiguredMarker } from "./status.js";
+export async function cmdAppleSetup(opts) {
+    const platform = detectPlatform();
+    const capsuleDir = opts.capsuleDir ? resolveCapsuleDir(opts.capsuleDir) : undefined;
+    if (!platform.hasEasCli) {
+        const msg = IOS_BUILD_TOOLS_HINT;
+        if (opts.json) {
+            console.log(JSON.stringify({ ok: false, error: msg }));
+        }
+        else {
+            console.error(msg);
+        }
+        process.exitCode = 1;
+        return;
+    }
+    if (capsuleDir) {
+        try {
+            await ensureCapsuleEasProject(capsuleDir, { json: opts.json });
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            if (opts.json)
+                console.log(JSON.stringify({ ok: false, error: msg }));
+            else
+                console.error(msg);
+            process.exitCode = 1;
+            return;
+        }
+    }
+    if (opts.json) {
+        console.log(JSON.stringify({
+            ok: true,
+            action: "apple-signing-setup",
+            profile: IOS_DEVICE_BUILD_PROFILE,
+            capsuleDir,
+            hint: appleAuthHint(),
+        }));
+    }
+    else {
+        console.log(APPLE_SETUP_INTRO);
+        if (capsuleDir) {
+            console.log("Using a dedicated signing identity for this capsule.");
+            console.log("");
+        }
+        console.log(appleAuthHint());
+        console.log("");
+        console.log(`Configuring Lakebed Native device build profile "${IOS_DEVICE_BUILD_PROFILE}"...`);
+        console.log("");
+    }
+    const code = runEasConfigureBuildCredentials(IOS_DEVICE_BUILD_PROFILE, {
+        interactive: !opts.json,
+        capsuleDir,
+    });
+    if (code !== 0)
+        process.exitCode = code;
+    else {
+        writeSigningConfiguredMarker(capsuleDir);
+        if (!opts.json) {
+            console.log("");
+            console.log("Apple signing setup complete. Register devices: lakebed-native apple devices register");
+        }
+    }
+}
+//# sourceMappingURL=setup.js.map

package/dist/cli/apple/setup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup.js","sourceRoot":"","sources":["../../../src/cli/apple/setup.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,wBAAwB,EAAE,aAAa,EAAE,+BAA+B,EAAE,MAAM,mBAAmB,CAAC;AAC7G,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AACxE,OAAO,EAAE,4BAA4B,EAAE,MAAM,aAAa,CAAC;AAE3D,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAA6C;IAE7C,MAAM,QAAQ,GAAG,cAAc,EAAE,CAAC;IAClC,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAEpF,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,oBAAoB,CAAC;QACjC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QACzD,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACrB,CAAC;QACD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,IAAI,UAAU,EAAE,CAAC;QACf,IAAI,CAAC;YACH,MAAM,uBAAuB,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACjE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,IAAI,IAAI,CAAC,IAAI;gBAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;;gBACjE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACxB,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;IACH,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CAAC;YACb,EAAE,EAAE,IAAI;YACR,MAAM,EAAE,qBAAqB;YAC7B,OAAO,EAAE,wBAAwB;YACjC,UAAU;YACV,IAAI,EAAE,aAAa,EAAE;SACtB,CAAC,CACH,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAC/B,IAAI,UAAU,EAAE,CAAC;YACf,OAAO,CAAC,GAAG,CAAC,sDAAsD,CAAC,CAAC;YACpE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,oDAAoD,wBAAwB,MAAM,CAAC,CAAC;QAChG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,IAAI,GAAG,+BAA+B,CAAC,wBAAwB,EAAE;QACrE,WAAW,EAAE,CAAC,IAAI,CAAC,IAAI;QACvB,UAAU;KACX,CAAC,CAAC;IAEH,IAAI,IAAI,KAAK,CAAC;QAAE,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;SACnC,CAAC;QACJ,4BAA4B,CAAC,UAAU,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,uFAAuF,CAAC,CAAC;QACvG,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/cli/apple/shell-ipa.d.ts

@@ -0,0 +1,7 @@
+export declare const DEVICE_SHELL_IPA_NAME = "LakebedNative-device.ipa";
+/** Resolve prebuilt ad-hoc shell IPA (from a prior EAS device-preview build). */
+export declare function resolveDeviceShellIpa(explicit?: string, capsuleDir?: string): string | null;
+export declare function deviceShellIpaHint(capsuleDir?: string): string;
+/** Download latest finished device-preview IPA for the capsule EAS project. */
+export declare function fetchLatestDeviceShellIpa(dest?: string, capsuleDir?: string): Promise<string>;
+//# sourceMappingURL=shell-ipa.d.ts.map

package/dist/cli/apple/shell-ipa.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell-ipa.d.ts","sourceRoot":"","sources":["../../../src/cli/apple/shell-ipa.ts"],"names":[],"mappings":"AAQA,eAAO,MAAM,qBAAqB,6BAA6B,CAAC;AAEhE,iFAAiF;AACjF,wBAAgB,qBAAqB,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAW3F;AAED,wBAAgB,kBAAkB,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAS9D;AAQD,+EAA+E;AAC/E,wBAAsB,yBAAyB,CAC7C,IAAI,CAAC,EAAE,MAAM,EACb,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,MAAM,CAAC,CAgDjB"}

package/dist/cli/apple/shell-ipa.js

@@ -0,0 +1,73 @@
+import { createWriteStream, existsSync, mkdirSync } from "node:fs";
+import { join } from "node:path";
+import { pipeline } from "node:stream/promises";
+import { getShellDir } from "../util.js";
+import { runEasCapture } from "./eas-delegate.js";
+import { IOS_DEVICE_BUILD_PROFILE } from "./eas-delegate.js";
+import { deviceShellIpaPath } from "../capsule-eas.js";
+export const DEVICE_SHELL_IPA_NAME = "LakebedNative-device.ipa";
+/** Resolve prebuilt ad-hoc shell IPA (from a prior EAS device-preview build). */
+export function resolveDeviceShellIpa(explicit, capsuleDir) {
+    const candidates = [
+        explicit,
+        process.env.LAKEBED_IOS_SHELL_IPA,
+        capsuleDir ? deviceShellIpaPath(capsuleDir) : undefined,
+        join(getShellDir(), DEVICE_SHELL_IPA_NAME),
+    ].filter(Boolean);
+    for (const path of candidates) {
+        if (existsSync(path))
+            return path;
+    }
+    return null;
+}
+export function deviceShellIpaHint(capsuleDir) {
+    return [
+        "Device shell IPA not found. Build once via Lakebed Native cloud, then save the artifact:",
+        `  npx lakebed-native apple fetch-shell-ipa${capsuleDir ? " ." : ""}`,
+        capsuleDir
+            ? `  # saves to ${deviceShellIpaPath(capsuleDir)}`
+            : `  # or copy the .ipa to shell/${DEVICE_SHELL_IPA_NAME}`,
+        "  npx lakebed-native pack --platform ios --device --cloud --wait",
+    ].join("\n");
+}
+/** Download latest finished device-preview IPA for the capsule EAS project. */
+export async function fetchLatestDeviceShellIpa(dest, capsuleDir) {
+    const outPath = dest ?? (capsuleDir ? deviceShellIpaPath(capsuleDir) : join(getShellDir(), DEVICE_SHELL_IPA_NAME));
+    mkdirSync(join(outPath, ".."), { recursive: true });
+    const { status, stdout, stderr } = runEasCapture([
+        "build:list",
+        "--platform",
+        "ios",
+        "--profile",
+        IOS_DEVICE_BUILD_PROFILE,
+        "--status",
+        "finished",
+        "--limit",
+        "1",
+        "--json",
+        "--non-interactive",
+    ], capsuleDir);
+    if (status !== 0) {
+        throw new Error(`Device build list failed: ${stderr || stdout}`);
+    }
+    let rows = [];
+    try {
+        const parsed = JSON.parse(stdout.trim());
+        rows = Array.isArray(parsed) ? parsed : (parsed.builds ?? []);
+    }
+    catch {
+        throw new Error(`Could not parse device build list: ${stdout.slice(0, 400)}`);
+    }
+    const build = rows[0];
+    const url = build?.artifacts?.buildUrl;
+    if (!url) {
+        throw new Error("No finished device-preview build found. Run: lakebed-native pack --platform ios --device --cloud --wait");
+    }
+    const res = await fetch(url);
+    if (!res.ok || !res.body) {
+        throw new Error(`Failed to download shell IPA (${res.status})`);
+    }
+    await pipeline(res.body, createWriteStream(outPath));
+    return outPath;
+}
+//# sourceMappingURL=shell-ipa.js.map

package/dist/cli/apple/shell-ipa.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell-ipa.js","sourceRoot":"","sources":["../../../src/cli/apple/shell-ipa.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACnE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAEvD,MAAM,CAAC,MAAM,qBAAqB,GAAG,0BAA0B,CAAC;AAEhE,iFAAiF;AACjF,MAAM,UAAU,qBAAqB,CAAC,QAAiB,EAAE,UAAmB;IAC1E,MAAM,UAAU,GAAG;QACjB,QAAQ;QACR,OAAO,CAAC,GAAG,CAAC,qBAAqB;QACjC,UAAU,CAAC,CAAC,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS;QACvD,IAAI,CAAC,WAAW,EAAE,EAAE,qBAAqB,CAAC;KAC3C,CAAC,MAAM,CAAC,OAAO,CAAa,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,IAAI,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;IACpC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,UAAmB;IACpD,OAAO;QACL,0FAA0F;QAC1F,6CAA6C,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;QACrE,UAAU;YACR,CAAC,CAAC,gBAAgB,kBAAkB,CAAC,UAAU,CAAC,EAAE;YAClD,CAAC,CAAC,iCAAiC,qBAAqB,EAAE;QAC5D,kEAAkE;KACnE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAQD,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,IAAa,EACb,UAAmB;IAEnB,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,qBAAqB,CAAC,CAAC,CAAC;IACnH,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEpD,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,aAAa,CAC9C;QACE,YAAY;QACZ,YAAY;QACZ,KAAK;QACL,WAAW;QACX,wBAAwB;QACxB,UAAU;QACV,UAAU;QACV,SAAS;QACT,GAAG;QACH,QAAQ;QACR,mBAAmB;KACpB,EACD,UAAU,CACX,CAAC;IAEF,IAAI,MAAM,KAAK,CAAC,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,6BAA6B,MAAM,IAAI,MAAM,EAAE,CAAC,CAAC;IACnE,CAAC;IAED,IAAI,IAAI,GAAkB,EAAE,CAAC;IAC7B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAA+C,CAAC;QACvF,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,sCAAsC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAChF,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACtB,MAAM,GAAG,GAAG,KAAK,EAAE,SAAS,EAAE,QAAQ,CAAC;IACvC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CACb,yGAAyG,CAC1G,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,iCAAiC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;IAClE,CAAC;IAED,MAAM,QAAQ,CAAC,GAAG,CAAC,IAAwC,EAAE,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC;IACzF,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/cli/apple/sign-ios.d.ts

@@ -0,0 +1,24 @@
+import type { StandaloneManifest } from "@lakebed-native/shared";
+export declare function hasCodesignTools(): boolean;
+export declare function listSigningIdentities(): string[];
+/** Distribution identity for the configured Apple team (device-preview / ad-hoc). */
+export declare function hasRelevantSigningIdentity(): boolean;
+export declare function pickSigningIdentity(preferredTeamId?: string): string | null;
+export declare function parseTeamIdFromMobileProvision(provisionPath: string): string | undefined;
+export declare function findAppBundleInPayload(payloadDir: string): string;
+export declare function extractEntitlements(appPath: string, destPlist: string): void;
+/** Deep-sign an .app bundle (frameworks first, then app). */
+export declare function resignAppBundle(appPath: string, identity: string, entitlementsPath?: string): void;
+export declare function injectLakebedIntoApp(appPath: string, manifest: StandaloneManifest, bundle: string): void;
+/** Unpack IPA, inject capsule assets, re-sign, repack. Mac + codesign only. */
+export declare function packIosDeviceIpa(opts: {
+    templateIpa: string;
+    outIpa: string;
+    manifest: StandaloneManifest;
+    bundle: string;
+    identity?: string;
+}): {
+    appName: string;
+    identity: string;
+};
+//# sourceMappingURL=sign-ios.d.ts.map

package/dist/cli/apple/sign-ios.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sign-ios.d.ts","sourceRoot":"","sources":["../../../src/cli/apple/sign-ios.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAMjE,wBAAgB,gBAAgB,IAAI,OAAO,CAS1C;AAED,wBAAgB,qBAAqB,IAAI,MAAM,EAAE,CAahD;AAED,qFAAqF;AACrF,wBAAgB,0BAA0B,IAAI,OAAO,CAOpD;AAED,wBAAgB,mBAAmB,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAmB3E;AAED,wBAAgB,8BAA8B,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAYxF;AAED,wBAAgB,sBAAsB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAQjE;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAI5E;AAED,6DAA6D;AAC7D,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CA4BlG;AAED,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,kBAAkB,EAC5B,MAAM,EAAE,MAAM,GACb,IAAI,CAKN;AAED,+EAA+E;AAC/E,wBAAgB,gBAAgB,CAAC,IAAI,EAAE;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAyCxC"}

package/dist/cli/apple/sign-ios.js

@@ -0,0 +1,148 @@
+import { execSync } from "node:child_process";
+import { existsSync, mkdirSync, mkdtempSync, readdirSync, rmSync, statSync, writeFileSync, } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+function run(cmd, cwd) {
+    execSync(cmd, { cwd, stdio: "pipe" });
+}
+export function hasCodesignTools() {
+    if (process.platform !== "darwin")
+        return false;
+    try {
+        execSync("xcodebuild -version", { stdio: "pipe" });
+        execSync("which codesign", { stdio: "pipe" });
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+export function listSigningIdentities() {
+    if (!hasCodesignTools())
+        return [];
+    try {
+        const raw = execSync("security find-identity -v -p codesigning", { encoding: "utf8" });
+        const ids = [];
+        for (const line of raw.split("\n")) {
+            const m = line.match(/^\s*\d+\)\s+(.+?)\s+"(.+)"$/);
+            if (m)
+                ids.push(m[2]);
+        }
+        return ids;
+    }
+    catch {
+        return [];
+    }
+}
+/** Distribution identity for the configured Apple team (device-preview / ad-hoc). */
+export function hasRelevantSigningIdentity() {
+    const teamId = process.env.EXPO_APPLE_TEAM_ID;
+    const distribution = listSigningIdentities().filter((id) => /Apple Distribution|iPhone Distribution/i.test(id));
+    if (teamId)
+        return distribution.some((id) => id.includes(teamId));
+    return distribution.length > 0;
+}
+export function pickSigningIdentity(preferredTeamId) {
+    const ids = listSigningIdentities();
+    if (!ids.length)
+        return null;
+    const prefer = (pattern) => ids.find((id) => pattern.test(id));
+    if (preferredTeamId) {
+        const teamMatch = ids.find((id) => id.includes(preferredTeamId));
+        if (teamMatch)
+            return teamMatch;
+    }
+    return (prefer(/Apple Development/i) ??
+        prefer(/iPhone Developer/i) ??
+        prefer(/Apple Distribution/i) ??
+        prefer(/iPhone Distribution/i) ??
+        ids[0] ??
+        null);
+}
+export function parseTeamIdFromMobileProvision(provisionPath) {
+    try {
+        const xml = execSync(`security cms -D -i ${JSON.stringify(provisionPath)}`, {
+            encoding: "utf8",
+        });
+        return (xml.match(/<key>TeamIdentifier<\/key>\s*<array>\s*<string>([^<]+)<\/string>/i)?.[1] ??
+            xml.match(/<key>ApplicationIdentifierPrefix<\/key>\s*<array>\s*<string>([^<]+)<\/string>/i)?.[1]);
+    }
+    catch {
+        return undefined;
+    }
+}
+export function findAppBundleInPayload(payloadDir) {
+    const apps = readdirSync(payloadDir).filter((n) => n.endsWith(".app"));
+    if (apps.length !== 1) {
+        throw new Error(`Expected one .app in Payload/, found ${apps.length}: ${apps.join(", ") || "(none)"}`);
+    }
+    return join(payloadDir, apps[0]);
+}
+export function extractEntitlements(appPath, destPlist) {
+    run(`/usr/bin/codesign -d --entitlements :- ${JSON.stringify(appPath)} > ${JSON.stringify(destPlist)}`);
+}
+/** Deep-sign an .app bundle (frameworks first, then app). */
+export function resignAppBundle(appPath, identity, entitlementsPath) {
+    const fwDir = join(appPath, "Frameworks");
+    if (existsSync(fwDir)) {
+        for (const name of readdirSync(fwDir)) {
+            const path = join(fwDir, name);
+            if (statSync(path).isDirectory() && (name.endsWith(".framework") || name.endsWith(".appex"))) {
+                run(`/usr/bin/codesign --force --sign ${JSON.stringify(identity)} ${JSON.stringify(path)}`);
+            }
+        }
+    }
+    const plugIns = join(appPath, "PlugIns");
+    if (existsSync(plugIns)) {
+        for (const name of readdirSync(plugIns)) {
+            const path = join(plugIns, name);
+            if (statSync(path).isDirectory() && name.endsWith(".appex")) {
+                run(`/usr/bin/codesign --force --sign ${JSON.stringify(identity)} ${JSON.stringify(path)}`);
+            }
+        }
+    }
+    const entFlag = entitlementsPath && existsSync(entitlementsPath)
+        ? `--entitlements ${JSON.stringify(entitlementsPath)} `
+        : "";
+    run(`/usr/bin/codesign --force --sign ${JSON.stringify(identity)} ${entFlag}${JSON.stringify(appPath)}`);
+}
+export function injectLakebedIntoApp(appPath, manifest, bundle) {
+    const assetDir = join(appPath, "lakebed");
+    mkdirSync(assetDir, { recursive: true });
+    writeFileSync(join(assetDir, "manifest.json"), JSON.stringify(manifest, null, 2));
+    writeFileSync(join(assetDir, "capsule.bundle"), bundle);
+}
+/** Unpack IPA, inject capsule assets, re-sign, repack. Mac + codesign only. */
+export function packIosDeviceIpa(opts) {
+    if (!hasCodesignTools()) {
+        throw new Error("iOS device IPA pack requires macOS with Xcode Command Line Tools (codesign).");
+    }
+    const work = mkdtempSync(join(tmpdir(), "lb-ipa-pack-"));
+    const payloadDir = join(work, "Payload");
+    try {
+        run(`unzip -q -o ${JSON.stringify(opts.templateIpa)} -d ${JSON.stringify(work)}`);
+        if (!existsSync(payloadDir)) {
+            throw new Error("Invalid IPA: missing Payload/");
+        }
+        const appPath = findAppBundleInPayload(payloadDir);
+        const appName = appPath.split("/").pop();
+        const entitlementsPath = join(work, "entitlements.plist");
+        extractEntitlements(appPath, entitlementsPath);
+        injectLakebedIntoApp(appPath, opts.manifest, opts.bundle);
+        const provision = join(appPath, "embedded.mobileprovision");
+        const teamId = existsSync(provision) ? parseTeamIdFromMobileProvision(provision) : undefined;
+        const identity = opts.identity ?? pickSigningIdentity(teamId);
+        if (!identity) {
+            throw new Error("No code signing identity in keychain. Run lakebed-native apple setup (Lakebed Native installs certs locally) or import your distribution certificate.");
+        }
+        resignAppBundle(appPath, identity, entitlementsPath);
+        const outIpa = opts.outIpa.endsWith(".ipa") ? opts.outIpa : `${opts.outIpa}.ipa`;
+        mkdirSync(join(outIpa, ".."), { recursive: true });
+        run(`cd ${JSON.stringify(work)} && zip -qr ${JSON.stringify(outIpa)} Payload`);
+        return { appName, identity };
+    }
+    finally {
+        rmSync(work, { recursive: true, force: true });
+    }
+}
+//# sourceMappingURL=sign-ios.js.map