EXTENSIONS

Administer an Apple Developer Program team over the App Store Connect API. Team-key auth with an ES256 JWT signed in WebCrypto (no JWT library, no native dependencies), cached in-process and re-signed near its 20-minute limit, with 429 and 5xx retry honouring Retry-After and a re-sign on a mid-flight 401. Roll the whole team up in one call: members by role, pending invitations, devices by class and status, and every certificate or provisioning profile that has expired or expires within a window, which catches the lapsed development profile that makes a tvOS or iOS app silently refuse to launch. Invite people with roles and the Certificates, Identifiers & Profiles permission, cancel invitations, change a member's roles, and register development devices by UDID. List users, invitations, devices, certificates, profiles, and bundle IDs, fully paged and filterable with a CEL selector, with daysToExpiry computed on anything that expires. Reach any unwrapped endpoint through an authenticated passthrough.