ts-pantry 0.10.56 → 0.11.0

package/README.md

@@ -5,7 +5,7 @@ TypeScript types for Pantry package manager configuration with **full type valid
 ## Installation
 
 ```bash
-bun add -d ts-pantry ts-pantry
+bun add -d ts-pantry
 ```
 
 ## Usage
@@ -42,6 +42,62 @@ export default config
 - **IntelliSense Support**: Get autocomplete for all 3000+ packages from the pkgx registry
 - **Version Validation**: Invalid versions trigger TypeScript errors
 - **Zero Configuration**: Just import and use - no additional setup required
+- **App Store Automation**: Provision macOS identifiers, capabilities, certificates,
+  and profiles, then manage App Store versions and processed builds
+
+## App Store Connect
+
+Pantry owns the provider-neutral Apple distribution layer used by release actions
+and framework integrations. Authentication defaults to
+`APP_STORE_CONNECT_API_KEY_ID`, `APP_STORE_CONNECT_API_ISSUER_ID`, and
+`APP_STORE_CONNECT_API_KEY_PATH`.
+
+Provisioning is plan-only unless `checkOnly: false` is explicitly passed. It
+reuses active certificates and profiles and never revokes existing resources.
+Apple requires the initial app record to be created manually in App Store
+Connect; Pantry reports that remaining action in its result.
+
+```bash
+# Generate the two private-key/CSR pairs locally.
+ts-pantry app-store:csr --name "Example Desktop"
+
+# Safe plan (no Apple resources are changed).
+ts-pantry app-store:provision \
+  --bundle-id com.example.desktop \
+  --name "Example Desktop"
+
+# Apply after supplying CSRs for any missing certificates.
+ts-pantry app-store:provision \
+  --bundle-id com.example.desktop \
+  --name "Example Desktop" \
+  --app-certificate-csr .pantry/apple/mac-app-distribution.csr \
+  --installer-certificate-csr .pantry/apple/mac-installer-distribution.csr \
+  --apply
+```
+
+```typescript
+import {
+  AppStoreConnectClient,
+  ensureAppStoreVersions,
+  provisionMacApp,
+  waitForAppStoreBuilds,
+} from 'ts-pantry'
+
+const plan = await provisionMacApp({
+  identifier: 'com.example.desktop',
+  name: 'Example Desktop',
+  capabilities: ['APP_GROUPS'],
+})
+
+const client = new AppStoreConnectClient()
+const app = await client.findApp('com.example.desktop')
+if (app) {
+  const versions = await ensureAppStoreVersions(client, app.id, [
+    { platform: 'MAC_OS', version: '1.0.0' },
+  ])
+  await waitForAppStoreBuilds(client, app.id, versions, '42')
+}
+```
 
 ## Type Definitions
 

package/dist/app-store-connect.d.ts

@@ -0,0 +1,158 @@
+export declare function appStoreConnectToken(auth: Required<AppStoreConnectAuth>, now?: number): string;
+/** Create or align an editable App Store version for each requested Apple platform. */
+export declare function ensureAppStoreVersions(client: AppStoreConnectClient, appId: string, requestedVersions: Array<{ platform: AppStoreVersionPlatform, version: string }>): Promise<AppStoreVersionResult[]>;
+/** Wait for uploaded binaries to process, then select them for their App Store versions. */
+export declare function waitForAppStoreBuilds(client: AppStoreConnectClient, appId: string, versions: Array<Pick<AppStoreVersionResult, 'platform' | 'version' | 'id'>>, buildNumber: string, options?: WaitForAppStoreBuildsOptions): Promise<AppStoreBuildAttachmentResult[]>;
+export declare function provisionMacApp(options: MacAppProvisionOptions): Promise<MacAppProvisionResult>;
+export declare interface AppStoreConnectAuth {
+  keyId?: string
+  issuerId?: string
+  keyPath?: string
+}
+export declare interface AppStoreConnectResource<T extends Record<string, unknown>> {
+  type: string
+  id: string
+  attributes: T
+  relationships?: Record<string, { data?: { type: string, id: string } | null }>
+}
+export declare interface BundleIdAttributes extends Record<string, unknown> {
+  identifier: string
+  name: string
+  platform: BundleIdPlatform
+  seedId?: string
+}
+export declare interface BundleIdCapabilityAttributes extends Record<string, unknown> {
+  capabilityType: string
+  settings?: Array<Record<string, unknown>>
+}
+export declare interface CertificateAttributes extends Record<string, unknown> {
+  certificateType: MacDistributionCertificateType
+  displayName?: string
+  name?: string
+  serialNumber?: string
+  platform?: string
+  expirationDate?: string
+  certificateContent?: string
+  activated?: boolean
+}
+export declare interface ProfileAttributes extends Record<string, unknown> {
+  name: string
+  platform?: BundleIdPlatform
+  profileContent?: string
+  uuid?: string
+  createdDate?: string
+  expirationDate?: string
+  profileState: 'ACTIVE' | 'INVALID'
+  profileType: 'MAC_APP_STORE'
+}
+export declare interface AppAttributes extends Record<string, unknown> {
+  bundleId: string
+  name: string
+  primaryLocale: string
+  sku: string
+}
+export declare interface AppStoreVersionAttributes extends Record<string, unknown> {
+  platform: AppStoreVersionPlatform
+  versionString: string
+  appStoreState: string
+}
+export declare interface BuildAttributes extends Record<string, unknown> {
+  version: string
+  uploadedDate: string
+  expired: boolean
+  processingState: string
+}
+export declare interface PreReleaseVersionAttributes extends Record<string, unknown> {
+  version: string
+  platform: AppStoreVersionPlatform
+}
+export declare interface AppStoreBuildResult {
+  id: string
+  buildNumber: string
+  version: string
+  platform: AppStoreVersionPlatform
+  processingState: string
+}
+export declare interface AppStoreVersionResult {
+  platform: AppStoreVersionPlatform
+  version: string
+  created: boolean
+  updated: boolean
+  id: string
+  status: AppStoreVersionStatus
+  appStoreState: string
+  reason?: string
+}
+export declare interface AppStoreBuildAttachmentResult {
+  platform: AppStoreVersionPlatform
+  versionId: string
+  buildId: string
+  buildNumber: string
+}
+export declare interface WaitForAppStoreBuildsOptions {
+  timeoutMs?: number
+  pollIntervalMs?: number
+  sleep?: (milliseconds: number) => Promise<void>
+  now?: () => number
+}
+export declare interface AppStoreConnectClientOptions extends AppStoreConnectAuth {
+  baseUrl?: string
+  fetch?: typeof globalThis.fetch
+  now?: () => number
+}
+export declare interface MacAppProvisionOptions extends AppStoreConnectClientOptions {
+  identifier: string
+  name: string
+  capabilities?: string[]
+  appCertificateCsr?: string
+  installerCertificateCsr?: string
+  profileName?: string
+  checkOnly?: boolean
+}
+export declare interface MacAppProvisionResult {
+  mode: 'plan' | 'apply'
+  bundleId: { identifier: string, id?: string, exists: boolean, created: boolean }
+  capabilities: Array<{ type: string, enabled: boolean, created: boolean }>
+  certificates: Array<{
+    type: MacDistributionCertificateType
+    id?: string
+    exists: boolean
+    created: boolean
+    expirationDate?: string
+    certificateContent?: string
+  }>
+  profile: {
+    id?: string
+    name: string
+    exists: boolean
+    created: boolean
+    expirationDate?: string
+    profileContent?: string
+  }
+  appRecord: { exists: boolean, id?: string, manualAction?: string }
+  actions: string[]
+}
+export type BundleIdPlatform = 'IOS' | 'MAC_OS' | 'UNIVERSAL';
+export type AppStoreVersionPlatform = 'IOS' | 'MAC_OS';
+export type MacDistributionCertificateType = 'MAC_APP_DISTRIBUTION' | 'MAC_INSTALLER_DISTRIBUTION';
+export type AppStoreVersionStatus = 'ready' | 'deferred' | 'published';
+export declare class AppStoreConnectClient {
+  constructor(options?: AppStoreConnectClientOptions);
+  request<T>(path: string, init?: RequestInit): Promise<T>;
+  upload(url: string, init: RequestInit): Promise<void>;
+  findBundleId(identifier: string): Promise<AppStoreConnectResource<BundleIdAttributes> | undefined>;
+  registerBundleId(identifier: string, name: string, platform?: BundleIdPlatform): Promise<AppStoreConnectResource<BundleIdAttributes>>;
+  ensureBundleId(identifier: string, name: string, options?: { checkOnly?: boolean, platform?: BundleIdPlatform }): Promise<{ bundleId?: AppStoreConnectResource<BundleIdAttributes>, created: boolean }>;
+  listBundleIdCapabilities(bundleIdId: string): Promise<Array<AppStoreConnectResource<BundleIdCapabilityAttributes>>>;
+  enableBundleIdCapability(bundleIdId: string, capabilityType: string, settings?: Array<Record<string, unknown>>): Promise<AppStoreConnectResource<BundleIdCapabilityAttributes>>;
+  listCertificates(certificateType: MacDistributionCertificateType): Promise<Array<AppStoreConnectResource<CertificateAttributes>>>;
+  createCertificate(certificateType: MacDistributionCertificateType, csrContent: string): Promise<AppStoreConnectResource<CertificateAttributes>>;
+  listProfiles(bundleIdId: string): Promise<Array<AppStoreConnectResource<ProfileAttributes>>>;
+  createMacAppStoreProfile(name: string, bundleIdId: string, certificateId: string): Promise<AppStoreConnectResource<ProfileAttributes>>;
+  findApp(bundleId: string): Promise<AppStoreConnectResource<AppAttributes> | undefined>;
+  listAppStoreVersions(appId: string): Promise<Array<AppStoreConnectResource<AppStoreVersionAttributes>>>;
+  createAppStoreVersion(appId: string, platform: AppStoreVersionPlatform, versionString: string): Promise<AppStoreConnectResource<AppStoreVersionAttributes>>;
+  updateAppStoreVersion(versionId: string, versionString: string): Promise<AppStoreConnectResource<AppStoreVersionAttributes>>;
+  listBuilds(appId: string, buildNumber: string): Promise<AppStoreBuildResult[]>;
+  attachBuild(versionId: string, buildId: string): Promise<void>;
+}

package/dist/apple-certificates.d.ts

@@ -0,0 +1,20 @@
+/** Generate private keys and CSRs for the two Mac App Store certificate types. */
+export declare function generateMacCertificateRequests(options: MacCertificateRequestOptions): MacCertificateRequest[];
+/** Combine an Apple-issued certificate and its private key into a CI-ready P12. */
+export declare function exportAppleCertificateP12(options: AppleCertificateP12Options): string;
+export declare interface MacCertificateRequestOptions {
+  outputDirectory: string
+  commonName: string
+}
+export declare interface MacCertificateRequest {
+  type: 'MAC_APP_DISTRIBUTION' | 'MAC_INSTALLER_DISTRIBUTION'
+  keyPath: string
+  csrPath: string
+}
+export declare interface AppleCertificateP12Options {
+  certificatePath: string
+  privateKeyPath: string
+  outputPath: string
+  password: string
+  name: string
+}