vibeview 0.17.1 → 0.18.0

package/dist/{chunk-SYFMOPJW.js → chunk-BJEDH672.js}

@@ -424,18 +424,51 @@ var ApiClient = class {
   async deleteSigningCredential(id) {
     await this.requestRaw("DELETE", `/signing-credentials/${id}`);
   }
+  /** GET /api/v1/signing-credentials/asc-keys. Requires VIEWER role. Metadata
+   *  only — the .p8 is never returned. */
+  async listAscKeys() {
+    return this.requestRaw("GET", "/signing-credentials/asc-keys");
+  }
+  /** POST /api/v1/signing-credentials/asc-keys (multipart). Requires ADMIN
+   *  role. Same-name upload is a rotation upsert server-side. Field names are
+   *  converted to the route's snake_case here, at the client boundary, like
+   *  addSigningCredential. */
+  async addAscKey(body) {
+    const formData = new FormData();
+    if (body.name !== void 0) formData.append("name", body.name);
+    formData.append("issuer_id", body.issuerId);
+    formData.append("key_id", body.keyId);
+    formData.append("file", new Blob([new Uint8Array(body.file)]), body.filename);
+    return this.requestFormData("POST", "/signing-credentials/asc-keys", formData);
+  }
+  /** DELETE /api/v1/signing-credentials/asc-keys/{id}. Requires ADMIN role. */
+  async deleteAscKey(id) {
+    await this.requestRaw("DELETE", `/signing-credentials/asc-keys/${id}`);
+  }
+  /** GET /api/v1/signing-credentials/{id}/material. Requires ADMIN role;
+   *  audited server-side. 404s (NotFoundError) for non-generated rows —
+   *  uploaded material is never readable back. */
+  async getSigningCredentialMaterial(id) {
+    return this.requestRaw("GET", `/signing-credentials/${id}/material`);
+  }
   /**
-   * POST /api/v1/signing-credentials/generate. Requires ADMIN role. Generates an Android
-   * keystore server-side and stores it as a credential; the response is the
-   * ONLY time the keystore bytes and passwords are ever returned. As with
-   * addSigningCredential, the CLI's camelCase (`keyAlias`) is converted to
-   * the route's snake_case at this boundary and nowhere else.
+   * POST /api/v1/signing-credentials/generate. Requires ADMIN role. Generates a signing
+   * credential server-side and stores it. `platform` omitted means android
+   * (the server default); for android the response carries the keystore
+   * bytes and passwords inline, for ios/tvos it is a plain credential (no
+   * inline material — see getSigningCredentialMaterial). As with
+   * addSigningCredential, the CLI's camelCase (`keyAlias`, `bundleId`,
+   * `ascKey`) is converted to the route's snake_case at this boundary and
+   * nowhere else.
    */
   async generateSigningCredential(body) {
     return this.requestRaw("POST", "/signing-credentials/generate", {
       name: body.name,
+      ...body.platform !== void 0 ? { platform: body.platform } : {},
       ...body.app !== void 0 ? { app: body.app } : {},
       ...body.keyAlias !== void 0 ? { key_alias: body.keyAlias } : {},
+      ...body.bundleId !== void 0 ? { bundle_id: body.bundleId } : {},
+      ...body.ascKey !== void 0 ? { asc_key: body.ascKey } : {},
       ...body.overwrite !== void 0 ? { overwrite: body.overwrite } : {}
     });
   }

package/dist/{chunk-3IMJ7FNN.js → chunk-MGP3UR7P.js}

@@ -5,7 +5,7 @@ import {
   loadConfig,
   resolveAuth,
   uploadAppBuild
-} from "./chunk-SYFMOPJW.js";
+} from "./chunk-BJEDH672.js";
 
 // src/lib/dev-state.ts
 import { existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from "fs";
@@ -1000,8 +1000,13 @@ function persistPickedAppId(cwd, cfg, platform, appId) {
   saveDevConfig(cwd, next);
   return next;
 }
-var CREATE_NEW_APP = "__vibeview_create_new_app__";
-var DONT_LINK_APP = "__vibeview_dont_link_app__";
+var APP_PICKER_SENTINEL = {
+  CREATE_NEW_APP: "__vibeview_create_new_app__",
+  DONT_LINK_APP: "__vibeview_dont_link_app__"
+};
+function isAppPickerSentinel(value) {
+  return Object.values(APP_PICKER_SENTINEL).includes(value);
+}
 async function resolveCloudAppIds(cwd, cfgRef, platforms, opts, listApps) {
   const createFromArtifact = /* @__PURE__ */ new Set();
   const missing = platforms.filter((p) => !cfgRef.current?.platforms?.[p]?.appId);
@@ -1041,18 +1046,23 @@ async function resolveCloudAppIds(cwd, cfgRef, platforms, opts, listApps) {
         // Under --production a "Don't link an app" row leads the list (the
         // neutral default, since the create-from-artifact escape hatch below
         // is suppressed there): production builds aren't linked to an app
-        // unless the user explicitly wants the link — see DONT_LINK_APP.
-        ...opts.production ? [{ value: DONT_LINK_APP, name: "Don't link an app" }] : [],
+        // unless the user explicitly wants the link — see APP_PICKER_SENTINEL.
+        ...opts.production ? [{ value: APP_PICKER_SENTINEL.DONT_LINK_APP, name: "Don't link an app" }] : [],
         ...apps.map((a) => ({ value: a.public_id, name: a.name })),
         // No create-from-artifact row under --production: a production build
         // never creates an app (internal_builds returns before app creation),
         // so offering it would promise something that can't happen. Picking
         // an EXISTING app is still meaningful — app-scoped signing
         // credentials resolve by app.
-        ...opts.production ? [] : [{ value: CREATE_NEW_APP, name: "Create a new app from this build" }]
+        ...opts.production ? [] : [
+          {
+            value: APP_PICKER_SENTINEL.CREATE_NEW_APP,
+            name: "Create a new app from this build"
+          }
+        ]
       ]
     });
-    if (appId === CREATE_NEW_APP || appId === DONT_LINK_APP) {
+    if (isAppPickerSentinel(appId)) {
       createFromArtifact.add(platform);
       continue;
     }

package/dist/cli.js

@@ -13,7 +13,7 @@ import {
   readDevState,
   readMetroState,
   runAgentVerb
-} from "./chunk-3IMJ7FNN.js";
+} from "./chunk-MGP3UR7P.js";
 import {
   ApiClient,
   EXIT_INFRA_ERROR,
@@ -26,7 +26,7 @@ import {
   resolveAuth,
   saveConfig,
   uploadApp
-} from "./chunk-SYFMOPJW.js";
+} from "./chunk-BJEDH672.js";
 
 // src/cli.ts
 import { createRequire } from "module";
@@ -1710,6 +1710,17 @@ function defaultDeps4(client) {
       await client.deleteSigningCredential(match.id);
     },
     generateCredential: (body) => client.generateSigningCredential(body),
+    getMaterial: (id) => client.getSigningCredentialMaterial(id),
+    addAscKey: (body) => client.addAscKey(body),
+    listAscKeys: () => client.listAscKeys(),
+    deleteAscKey: async (name) => {
+      const { keys } = await client.listAscKeys();
+      const match = keys.find((k) => k.name === name);
+      if (!match) {
+        throw new Error(`No App Store Connect key named "${name}" found.`);
+      }
+      await client.deleteAscKey(match.id);
+    },
     prompt: ({ message, hidden }) => hidden ? password2({ message }) : input({ message }),
     isTTY: Boolean(process.stdin.isTTY),
     readFile: (path) => readFileAsync2(path),
@@ -1802,16 +1813,18 @@ async function credentialsAdd(opts, deps) {
 async function credentialsGenerate(opts, deps) {
   const d = deps ?? defaultDeps4(clientFor2(opts));
   if (!opts.platform) {
-    throw new UsageError('--platform is required ("android" is the only platform available)');
+    throw new UsageError('--platform is required and must be "android", "ios", or "tvos"');
   }
-  if (opts.platform !== "android") {
-    throw new UsageError(
-      "iOS/tvOS generation isn't available yet because it requires an Apple Developer account; upload an exported certificate with `vibeview credentials add` instead"
-    );
+  if (!isCredentialPlatform(opts.platform)) {
+    throw new UsageError(`--platform must be "android", "ios", or "tvos" \u2014 got "${opts.platform}"`);
   }
   if (!opts.name) {
     throw new UsageError("--name is required");
   }
+  if (opts.platform !== "android") {
+    await generateAppleCredential(opts.platform, opts, d);
+    return;
+  }
   const outDir = opts.out ?? process.cwd();
   try {
     d.mkdir(outDir);
@@ -1871,6 +1884,200 @@ async function credentialsGenerate(opts, deps) {
     process.exitCode = 1;
   }
 }
+async function generateAppleCredential(platform, opts, d) {
+  try {
+    const result = await d.generateCredential({
+      name: opts.name,
+      platform,
+      ...opts.app !== void 0 ? { app: opts.app } : {},
+      ...opts.bundleId !== void 0 ? { bundleId: opts.bundleId } : {},
+      ...opts.ascKey !== void 0 ? { ascKey: opts.ascKey } : {},
+      // Same rule as the android path: only ever `overwrite: true`, otherwise
+      // the field is omitted and the server's 409-on-collision stays in charge.
+      ...opts.force ? { overwrite: true } : {}
+    });
+    if (opts.json) {
+      console.log(JSON.stringify(result));
+    } else {
+      console.log(chalk14.green(`\u2713 generated ${result.name} (${result.platform})`));
+      console.log("");
+      console.log(`  Scope:   ${chalk14.bold(result.app_public_id ?? "org-wide")}`);
+      const expires = formatExpires(result);
+      if (expires) {
+        console.log(`  Expires: ${chalk14.bold(expires)}`);
+      }
+      console.log("");
+      console.log(
+        `  The certificate and provisioning profile are stored with VibeView and already active for ${result.platform} production builds.`
+      );
+      console.log(
+        `  Run ${chalk14.bold(`vibeview credentials download ${result.name}`)} if you need the files locally.`
+      );
+    }
+    process.exitCode = 0;
+  } catch (err) {
+    printError3(opts, err);
+    process.exitCode = 1;
+  }
+}
+async function credentialsDownload(name, opts, deps) {
+  const d = deps ?? defaultDeps4(clientFor2(opts));
+  const outDir = opts.out ?? process.cwd();
+  try {
+    const { credentials: credentials2 } = await d.listCredentials(opts.app);
+    const wantApp = opts.app ?? null;
+    const matches = credentials2.filter(
+      (c) => c.name === name && (c.app_public_id ?? null) === wantApp
+    );
+    if (matches.length === 0) {
+      throw new Error(
+        `No credential named "${name}" found${opts.app ? ` for app "${opts.app}"` : ""}.`
+      );
+    }
+    if (matches.length > 1) {
+      throw new Error(
+        `Multiple credentials named "${name}" match (platforms: ${matches.map((c) => c.platform).join(", ")}) \u2014 narrow the lookup with --app.`
+      );
+    }
+    const cred = matches[0];
+    d.mkdir(outDir);
+    let material;
+    try {
+      material = await d.getMaterial(cred.id);
+    } catch (err) {
+      if (err instanceof NotFoundError) {
+        throw new Error(
+          `"${name}" was uploaded, not generated by VibeView \u2014 uploaded credential material is never readable back. Only credentials created by \`vibeview credentials generate\` can be downloaded.`
+        );
+      }
+      throw err;
+    }
+    const savedTo = join(outDir, basename2(material.filename));
+    const profileSavedTo = material.profile_base64 != null ? join(outDir, `${basename2(material.filename, extname(material.filename))}.mobileprovision`) : null;
+    if (opts.json) {
+      console.log(
+        JSON.stringify({
+          ...material,
+          saved_to: savedTo,
+          ...profileSavedTo !== null ? { profile_saved_to: profileSavedTo } : {}
+        })
+      );
+    }
+    const targets = [[savedTo, material.file_base64]];
+    if (profileSavedTo !== null) targets.push([profileSavedTo, material.profile_base64]);
+    for (const [path] of targets) {
+      if (await d.fileExists(path)) {
+        throw new Error(
+          `${path} already exists \u2014 refusing to overwrite it. Move it away or pass a different --out.`
+        );
+      }
+    }
+    for (const [path, base64] of targets) {
+      await d.writeFile(path, Buffer.from(base64, "base64"), 384);
+      await d.chmod(path, 384);
+    }
+    if (!opts.json) {
+      console.log(chalk14.green(`\u2713 downloaded ${material.name} (${material.platform})`));
+      console.log("");
+      console.log(`  Saved to: ${chalk14.bold(savedTo)}`);
+      if (profileSavedTo !== null) {
+        console.log(`  Profile:  ${chalk14.bold(profileSavedTo)}`);
+      }
+      for (const [key, value] of Object.entries(material.passwords)) {
+        console.log(`  ${key}: ${chalk14.bold(value)}`);
+      }
+      console.log("");
+      console.log(chalk14.yellow("  This download is recorded in your organization's audit log."));
+    }
+    process.exitCode = 0;
+  } catch (err) {
+    printError3(opts, err);
+    process.exitCode = 1;
+  }
+}
+async function ascKeyAdd(opts, deps) {
+  const d = deps ?? defaultDeps4(clientFor2(opts));
+  if (!opts.keyId) {
+    throw new UsageError("--key-id is required (the 10-character App Store Connect key id)");
+  }
+  if (!opts.issuerId) {
+    throw new UsageError("--issuer-id is required (the UUID shown above the keys table)");
+  }
+  if (!opts.file) {
+    throw new UsageError("--file is required (the AuthKey_<KEYID>.p8 file Apple let you download)");
+  }
+  try {
+    const file = await d.readFile(opts.file);
+    const result = await d.addAscKey({
+      ...opts.name !== void 0 ? { name: opts.name } : {},
+      keyId: opts.keyId,
+      issuerId: opts.issuerId,
+      file,
+      filename: basename2(opts.file)
+    });
+    if (opts.json) {
+      console.log(JSON.stringify(result));
+    } else {
+      console.log(chalk14.green(`\u2713 added App Store Connect key ${result.name}`));
+      console.log("");
+      console.log(`  Key ID:    ${chalk14.bold(result.key_id)}`);
+      console.log(`  Issuer ID: ${chalk14.bold(result.issuer_id)}`);
+      console.log("");
+      console.log(
+        chalk14.yellow(
+          "  The .p8 is stored encrypted and will never be shown again \u2014 keep your own copy somewhere safe."
+        )
+      );
+    }
+    process.exitCode = 0;
+  } catch (err) {
+    printError3(opts, err);
+    process.exitCode = 1;
+  }
+}
+async function ascKeyList(opts, deps) {
+  const d = deps ?? defaultDeps4(clientFor2(opts));
+  try {
+    const { keys } = await d.listAscKeys();
+    if (opts.json) {
+      console.log(JSON.stringify(keys, null, 2));
+    } else {
+      process.stdout.write(formatAscKeysHuman(keys));
+    }
+    process.exitCode = 0;
+  } catch (err) {
+    printError3(opts, err);
+    process.exitCode = 1;
+  }
+}
+function formatAscKeysHuman(keys) {
+  if (keys.length === 0) {
+    return "No App Store Connect keys found.\n";
+  }
+  const HEADERS3 = ["NAME", "KEY ID", "ISSUER ID", "CREATED"];
+  const rows = keys.map((k) => [k.name, k.key_id, k.issuer_id, k.created_at ?? ""]);
+  const widths = HEADERS3.map((h, i) => Math.max(h.length, ...rows.map((r) => r[i].length)));
+  const padCells = (cells) => cells.map((c, i) => c.padEnd(widths[i]));
+  const join3 = (cells) => cells.join("  ").trimEnd();
+  const lines = [chalk14.bold(join3(padCells(HEADERS3)))];
+  for (const row of rows) lines.push(join3(padCells(row)));
+  return lines.join("\n") + "\n";
+}
+async function ascKeyRm(name, opts, deps) {
+  const d = deps ?? defaultDeps4(clientFor2(opts));
+  try {
+    await d.deleteAscKey(name);
+    if (opts.json) {
+      console.log(JSON.stringify({ event: "deleted", name }));
+    } else {
+      console.log(chalk14.green(`\u2713 removed App Store Connect key ${name}`));
+    }
+    process.exitCode = 0;
+  } catch (err) {
+    printError3(opts, err);
+    process.exitCode = 1;
+  }
+}
 async function credentialsList(opts, deps) {
   const d = deps ?? defaultDeps4(clientFor2(opts));
   try {
@@ -2528,19 +2735,36 @@ credentials.command("add").description(
   "ios/tvos: the .mobileprovision file (required; tvOS profiles are distinct from iOS ones)"
 ).option("--app <id>", "Scope to a single app (default: org-wide)").option("--name <name>", "Credential name (default: the file basename without extension)").action((opts) => credentialsAdd(opts));
 credentials.command("generate").description(
-  "Generate an Android keystore server-side and store it as a signing credential. Saves the keystore file locally and prints its passwords ONCE \u2014 they can never be retrieved again."
-).option("--token <token>", "API token (or set VIBEVIEW_API_TOKEN)").option(
-  "--platform <platform>",
-  "android (iOS/tvOS certificates require an Apple Developer account)"
-).option("--name <name>", "Credential name").option("--app <id>", "Scope to a single app (default: org-wide)").option("--alias <alias>", "Key alias (default: server-chosen)").option("--out <dir>", "Directory to save the keystore file into (default: current directory)").option(
+  "Generate a signing credential server-side. android: saves the keystore file locally and prints its passwords ONCE. ios/tvos: creates the distribution certificate and provisioning profile through the App Store Connect API (requires a stored key \u2014 see `vibeview credentials asc-key add`); fetch the files later with `vibeview credentials download`."
+).option("--token <token>", "API token (or set VIBEVIEW_API_TOKEN)").option("--platform <platform>", "android, ios, or tvos").option("--name <name>", "Credential name").option("--app <id>", "Scope to a single app (default: org-wide)").option("--alias <alias>", "android: key alias (default: server-chosen)").option(
+  "--bundle-id <id>",
+  "ios/tvos: bundle id for the provisioning profile (default: the --app's package id)"
+).option(
+  "--asc-key <name>",
+  "ios/tvos: which stored App Store Connect key to use (default when exactly one)"
+).option(
+  "--out <dir>",
+  "android: directory to save the keystore file into (default: current directory)"
+).option(
   "--force",
   "Replace an existing credential of the same name \u2014 irreversible; breaks Play Store updates signed with the old key",
   false
 ).option(
   "--json",
-  "Print the raw generation response (including the one-time secrets) as JSON",
+  "Print the raw generation response (android: including the one-time secrets) as JSON",
   false
 ).action((opts) => credentialsGenerate(opts));
+credentials.command("download <name>").description(
+  "Download the files of a credential VibeView GENERATED (uploaded credentials are never readable back). Admin-only; the download is recorded in the audit log."
+).option("--token <token>", "API token (or set VIBEVIEW_API_TOKEN)").option("--app <id>", "Scope to a single app (default: org-wide)").option("--out <dir>", "Directory to save the files into (default: current directory)").option("--json", "Print the material (including passwords) and saved paths as JSON", false).action((name, opts) => credentialsDownload(name, opts));
+var ascKey = credentials.command("asc-key").description(
+  "Manage App Store Connect API keys (create one in App Store Connect \u2192 Users and Access \u2192 Integrations) \u2014 they power `credentials generate --platform ios|tvos`"
+);
+ascKey.command("add").description(
+  "Store an App Store Connect API key. The .p8 is stored encrypted and never shown again; uploading the same name again rotates the key."
+).option("--token <token>", "API token (or set VIBEVIEW_API_TOKEN)").option("--key-id <id>", "The 10-character key id (shown next to the key in App Store Connect)").option("--issuer-id <id>", "The issuer id (UUID shown above the keys table)").option("--file <path>", "The AuthKey_<KEYID>.p8 file Apple let you download once").option("--name <name>", "Key name (default: server-chosen)").option("--json", "Print the raw response as one JSON line", false).action((opts) => ascKeyAdd(opts));
+ascKey.command("list").description("List stored App Store Connect keys (metadata only \u2014 never the .p8)").option("--token <token>", "API token (or set VIBEVIEW_API_TOKEN)").option("--json", "Print the raw key list as a JSON array", false).action((opts) => ascKeyList(opts));
+ascKey.command("rm <name>").description("Remove a stored App Store Connect key").option("--token <token>", "API token (or set VIBEVIEW_API_TOKEN)").option("--json", "Print the result as one JSON line", false).action((name, opts) => ascKeyRm(name, opts));
 credentials.command("list").description("List signing credentials (never prints key material)").option("--token <token>", "API token (or set VIBEVIEW_API_TOKEN)").option("--app <id>", "Scope to a single app (default: org-wide credentials only)").option("--json", "Print the raw credential list as a JSON array", false).action((opts) => credentialsList(opts));
 credentials.command("rm <name>").description("Remove a signing credential (replace by rm then add)").option("--token <token>", "API token (or set VIBEVIEW_API_TOKEN)").option("--app <id>", "Scope to a single app (default: org-wide)").option("--json", "Print the result as one JSON line", false).action((name, opts) => credentialsRm(name, opts));
 var webhooks = program.command("webhooks").description("Manage build-completion webhook endpoints");
@@ -2555,7 +2779,7 @@ program.command("dev-stop").description("Stop a `vibeview dev --detach` session
 program.command("mcp").description(
   "Run an MCP stdio server exposing the agent verbs (tap, swipe, type, ...) plus dev_start/dev_stop as tools"
 ).option("--token <token>", "API token (or set VIBEVIEW_API_TOKEN)").action(async (opts) => {
-  const { runMcpServer } = await import("./server-AZLB25BY.js");
+  const { runMcpServer } = await import("./server-TJQKNXDR.js");
   await runMcpServer(opts);
 });
 program.command("agent-setup").description(

package/dist/{server-AZLB25BY.js → server-TJQKNXDR.js}

@@ -11,11 +11,11 @@ import {
   readDevState,
   renderEnvelope,
   startDevSession
-} from "./chunk-3IMJ7FNN.js";
+} from "./chunk-MGP3UR7P.js";
 import {
   ApiClient,
   resolveAuth
-} from "./chunk-SYFMOPJW.js";
+} from "./chunk-BJEDH672.js";
 
 // src/mcp/server.ts
 import { writeFileSync } from "fs";
@@ -239,7 +239,7 @@ async function handleUploadApp(args, deps) {
   }
   const name = typeof args.name === "string" && args.name ? args.name : void 0;
   const upload = deps.uploadApp ?? (async (f, n) => {
-    const { uploadAppBuild } = await import("./upload-app-XRB7CKA3.js");
+    const { uploadAppBuild } = await import("./upload-app-Y7MXT2PI.js");
     const { result: result2 } = await uploadAppBuild(f, { ...deps.auth, name: n });
     return result2;
   });

package/dist/{upload-app-XRB7CKA3.js → upload-app-Y7MXT2PI.js}

@@ -2,7 +2,7 @@
 import {
   uploadApp,
   uploadAppBuild
-} from "./chunk-SYFMOPJW.js";
+} from "./chunk-BJEDH672.js";
 export {
   uploadApp,
   uploadAppBuild

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vibeview",
-  "version": "0.17.1",
+  "version": "0.18.0",
   "description": "VibeView CLI -- run mobile tests from CI/CD pipelines",
   "type": "module",
   "bin": {