@_nazmiforreal/flutter-ota 0.1.0 → 0.1.1

package/dart-src/plugins/aws/lib/src/with_cloudfront_signed_url.dart

@@ -0,0 +1,136 @@
+import 'package:flutter_patcher_plugin_core/flutter_patcher_plugin_core.dart'
+    show
+        RuntimeStorageProfile,
+        StoragePlugin,
+        StoragePluginProfiles;
+
+import 'aws_cloudfront_signer.dart' show cloudfrontSignedUrl;
+import 'aws_ssm_client.dart' show AwsSsmClient;
+
+const int _oneYearInSeconds = 60 * 60 * 24 * 365;
+
+/// Configuration for wrapping a storage plugin with CloudFront signed URLs.
+///
+/// Faithful port of hot-updater `WithCloudFrontSignedUrlOptions` (minus the
+/// `TContext` generic, which the Dart runtime profile does not expose).
+class WithCloudFrontSignedUrlOptions {
+  const WithCloudFrontSignedUrlOptions({
+    required this.keyPairId,
+    this.publicBaseUrl,
+    this.publicBaseUrlResolver,
+    this.getPrivateKey,
+    this.ssmParameterName,
+    this.ssmRegion,
+    this.expiresSeconds,
+    this.accessKeyId,
+    this.secretAccessKey,
+    this.sessionToken,
+  });
+
+  final String keyPairId;
+  final String? publicBaseUrl;
+  final Future<String> Function()? publicBaseUrlResolver;
+  final Future<String> Function()? getPrivateKey;
+  final String? ssmParameterName;
+  final String? ssmRegion;
+  final int? expiresSeconds;
+  final String? accessKeyId;
+  final String? secretAccessKey;
+  final String? sessionToken;
+}
+
+/// Wrap a storage plugin factory so that `s3://` download URLs are rewritten as
+/// CloudFront signed URLs. Faithful port of `withCloudFrontSignedUrl.ts`.
+StoragePlugin Function() withCloudFrontSignedUrl(
+  StoragePlugin Function() storageFactory,
+  WithCloudFrontSignedUrlOptions config,
+) {
+  return () {
+    final base = storageFactory();
+    final runtime = base.profiles.runtime == null
+        ? null
+        : _CloudFrontSignedRuntimeProfile(base.profiles.runtime!, config);
+    return _CloudFrontSignedStoragePlugin(base, runtime);
+  };
+}
+
+class _CloudFrontSignedStoragePlugin implements StoragePlugin {
+  _CloudFrontSignedStoragePlugin(this._base, this._runtime);
+
+  final StoragePlugin _base;
+  final RuntimeStorageProfile? _runtime;
+
+  @override
+  String get name => '${_base.name}WithCloudFrontSignedUrl';
+
+  @override
+  String get supportedProtocol => _base.supportedProtocol;
+
+  @override
+  StoragePluginProfiles get profiles => StoragePluginProfiles(
+        node: _base.profiles.node,
+        runtime: _runtime,
+      );
+}
+
+class _CloudFrontSignedRuntimeProfile implements RuntimeStorageProfile {
+  _CloudFrontSignedRuntimeProfile(this._base, this._config);
+
+  final RuntimeStorageProfile _base;
+  final WithCloudFrontSignedUrlOptions _config;
+
+  @override
+  Future<Map<String, String>> getDownloadUrl(String storageUri) async {
+    final parsed = Uri.parse(storageUri);
+    if (parsed.scheme != 's3') {
+      return _base.getDownloadUrl(storageUri);
+    }
+
+    final privateKey = await _resolvePrivateKey();
+    final publicBaseUrl = await _resolvePublicBaseUrl();
+    final url = Uri.parse(publicBaseUrl);
+    final signedUrl = cloudfrontSignedUrl(
+      url: url.replace(path: parsed.path, query: null).toString(),
+      keyPairId: _config.keyPairId,
+      privateKeyPem: privateKey,
+      dateLessThan: DateTime.now().add(
+        Duration(seconds: _config.expiresSeconds ?? _oneYearInSeconds),
+      ),
+    );
+    return {'fileUrl': signedUrl};
+  }
+
+  @override
+  Future<String?> readText(String storageUri) => _base.readText(storageUri);
+
+  Future<String> _resolvePrivateKey() async {
+    if (_config.getPrivateKey != null) return _config.getPrivateKey!();
+    if (_config.ssmParameterName != null && _config.ssmRegion != null) {
+      final ssm = AwsSsmClient(
+        region: _config.ssmRegion!,
+        accessKeyId: _config.accessKeyId ?? '',
+        secretAccessKey: _config.secretAccessKey ?? '',
+        sessionToken: _config.sessionToken,
+      );
+      return ssm.getParameter(_config.ssmParameterName!);
+    }
+    throw StateError(
+      'withCloudFrontSignedUrl: no private key source configured '
+      '(provide getPrivateKey or ssmParameterName/ssmRegion).',
+    );
+  }
+
+  Future<String> _resolvePublicBaseUrl() async {
+    if (_config.publicBaseUrlResolver != null) {
+      final value = await _config.publicBaseUrlResolver!();
+      if (value.isEmpty) {
+        throw StateError('CloudFront publicBaseUrl resolver returned empty URL');
+      }
+      return value;
+    }
+    if (_config.publicBaseUrl != null && _config.publicBaseUrl!.isNotEmpty) {
+      return _config.publicBaseUrl!;
+    }
+    throw StateError('CloudFront publicBaseUrl is empty');
+  }
+}

package/dart-src/plugins/aws/pubspec.lock

@@ -0,0 +1,435 @@
+# Generated by pub
+# See https://dart.dev/tools/pub/glossary#lockfile
+packages:
+  _fe_analyzer_shared:
+    dependency: transitive
+    description:
+      name: _fe_analyzer_shared
+      sha256: "9a3386eea899815698dd55995277cf7cb8572ee52b399a6edfb7ae2b50e5fc19"
+      url: "https://pub.dev"
+    source: hosted
+    version: "105.0.0"
+  analyzer:
+    dependency: transitive
+    description:
+      name: analyzer
+      sha256: "62993bed6eadbe9596c5c20d5c167e7bc563c5fe266657a04ddeb93bdb84f4c9"
+      url: "https://pub.dev"
+    source: hosted
+    version: "14.1.0"
+  args:
+    dependency: transitive
+    description:
+      name: args
+      sha256: d0481093c50b1da8910eb0bb301626d4d8eb7284aa739614d2b394ee09e3ea04
+      url: "https://pub.dev"
+    source: hosted
+    version: "2.7.0"
+  asn1lib:
+    dependency: "direct main"
+    description:
+      name: asn1lib
+      sha256: "9a8f69025044eb466b9b60ef3bc3ac99b4dc6c158ae9c56d25eeccf5bc56d024"
+      url: "https://pub.dev"
+    source: hosted
+    version: "1.6.5"
+  async:
+    dependency: transitive
+    description:
+      name: async
+      sha256: e2eb0491ba5ddb6177742d2da23904574082139b07c1e33b8503b9f46f3e1a37
+      url: "https://pub.dev"
+    source: hosted
+    version: "2.13.1"
+  boolean_selector:
+    dependency: transitive
+    description:
+      name: boolean_selector
+      sha256: "8aab1771e1243a5063b8b0ff68042d67334e3feab9e95b9490f9a6ebf73b42ea"
+      url: "https://pub.dev"
+    source: hosted
+    version: "2.1.2"
+  cli_config:
+    dependency: transitive
+    description:
+      name: cli_config
+      sha256: ac20a183a07002b700f0c25e61b7ee46b23c309d76ab7b7640a028f18e4d99ec
+      url: "https://pub.dev"
+    source: hosted
+    version: "0.2.0"
+  collection:
+    dependency: transitive
+    description:
+      name: collection
+      sha256: "2f5709ae4d3d59dd8f7cd309b4e023046b57d8a6c82130785d2b0e5868084e76"
+      url: "https://pub.dev"
+    source: hosted
+    version: "1.19.1"
+  convert:
+    dependency: transitive
+    description:
+      name: convert
+      sha256: b30acd5944035672bc15c6b7a8b47d773e41e2f17de064350988c5d02adb1c68
+      url: "https://pub.dev"
+    source: hosted
+    version: "3.1.2"
+  coverage:
+    dependency: transitive
+    description:
+      name: coverage
+      sha256: "956a3de0725ca232ad353565a8290d3357592bf4250f6f298a185e2d949c5d3d"
+      url: "https://pub.dev"
+    source: hosted
+    version: "1.15.1"
+  crypto:
+    dependency: "direct main"
+    description:
+      name: crypto
+      sha256: c8ea0233063ba03258fbcf2ca4d6dadfefe14f02fab57702265467a19f27fadf
+      url: "https://pub.dev"
+    source: hosted
+    version: "3.0.7"
+  file:
+    dependency: transitive
+    description:
+      name: file
+      sha256: a3b4f84adafef897088c160faf7dfffb7696046cb13ae90b508c2cbc95d3b8d4
+      url: "https://pub.dev"
+    source: hosted
+    version: "7.0.1"
+  flutter_patcher_core:
+    dependency: "direct main"
+    description:
+      path: "../../packages/core"
+      relative: true
+    source: path
+    version: "0.1.0"
+  flutter_patcher_plugin_core:
+    dependency: "direct main"
+    description:
+      path: "../plugin-core"
+      relative: true
+    source: path
+    version: "0.0.1"
+  frontend_server_client:
+    dependency: transitive
+    description:
+      name: frontend_server_client
+      sha256: f64a0333a82f30b0cca061bc3d143813a486dc086b574bfb233b7c1372427694
+      url: "https://pub.dev"
+    source: hosted
+    version: "4.0.0"
+  glob:
+    dependency: transitive
+    description:
+      name: glob
+      sha256: c3f1ee72c96f8f78935e18aa8cecced9ab132419e8625dc187e1c2408efc20de
+      url: "https://pub.dev"
+    source: hosted
+    version: "2.1.3"
+  http:
+    dependency: "direct main"
+    description:
+      name: http
+      sha256: "87721a4a50b19c7f1d49001e51409bddc46303966ce89a65af4f4e6004896412"
+      url: "https://pub.dev"
+    source: hosted
+    version: "1.6.0"
+  http_multi_server:
+    dependency: transitive
+    description:
+      name: http_multi_server
+      sha256: aa6199f908078bb1c5efb8d8638d4ae191aac11b311132c3ef48ce352fb52ef8
+      url: "https://pub.dev"
+    source: hosted
+    version: "3.2.2"
+  http_parser:
+    dependency: transitive
+    description:
+      name: http_parser
+      sha256: "178d74305e7866013777bab2c3d8726205dc5a4dd935297175b19a23a2e66571"
+      url: "https://pub.dev"
+    source: hosted
+    version: "4.1.2"
+  io:
+    dependency: transitive
+    description:
+      name: io
+      sha256: dfd5a80599cf0165756e3181807ed3e77daf6dd4137caaad72d0b7931597650b
+      url: "https://pub.dev"
+    source: hosted
+    version: "1.0.5"
+  js:
+    dependency: transitive
+    description:
+      name: js
+      sha256: "53385261521cc4a0c4658fd0ad07a7d14591cf8fc33abbceae306ddb974888dc"
+      url: "https://pub.dev"
+    source: hosted
+    version: "0.7.2"
+  lints:
+    dependency: "direct dev"
+    description:
+      name: lints
+      sha256: "976c774dd944a42e83e2467f4cc670daef7eed6295b10b36ae8c85bcbf828235"
+      url: "https://pub.dev"
+    source: hosted
+    version: "4.0.0"
+  logging:
+    dependency: transitive
+    description:
+      name: logging
+      sha256: c8245ada5f1717ed44271ed1c26b8ce85ca3228fd2ffdb75468ab01979309d61
+      url: "https://pub.dev"
+    source: hosted
+    version: "1.3.0"
+  matcher:
+    dependency: transitive
+    description:
+      name: matcher
+      sha256: "31bd099b47c10cd1aeb55146a2d46ce0277630ecef3f7dae54ad7873f36696cd"
+      url: "https://pub.dev"
+    source: hosted
+    version: "0.12.20"
+  meta:
+    dependency: transitive
+    description:
+      name: meta
+      sha256: "307249ce4ff29d58a18e97f6345f539382eb9c9c29ecda628900f31de0443dd9"
+      url: "https://pub.dev"
+    source: hosted
+    version: "1.19.0"
+  mime:
+    dependency: transitive
+    description:
+      name: mime
+      sha256: "801fd0b26f14a4a58ccb09d5892c3fbdeff209594300a542492cf13fba9d247a"
+      url: "https://pub.dev"
+    source: hosted
+    version: "1.0.6"
+  node_preamble:
+    dependency: transitive
+    description:
+      name: node_preamble
+      sha256: "6e7eac89047ab8a8d26cf16127b5ed26de65209847630400f9aefd7cd5c730db"
+      url: "https://pub.dev"
+    source: hosted
+    version: "2.0.2"
+  package_config:
+    dependency: transitive
+    description:
+      name: package_config
+      sha256: ffcf4cf3d6c0b74ac43708d9f56625506e8a68aa935abe9d267a7330f320eb5d
+      url: "https://pub.dev"
+    source: hosted
+    version: "3.0.0"
+  path:
+    dependency: "direct main"
+    description:
+      name: path
+      sha256: "75cca69d1490965be98c73ceaea117e8a04dd21217b37b292c9ddbec0d955bc5"
+      url: "https://pub.dev"
+    source: hosted
+    version: "1.9.1"
+  pointycastle:
+    dependency: "direct main"
+    description:
+      name: pointycastle
+      sha256: "4be0097fcf3fd3e8449e53730c631200ebc7b88016acecab2b0da2f0149222fe"
+      url: "https://pub.dev"
+    source: hosted
+    version: "3.9.1"
+  pool:
+    dependency: transitive
+    description:
+      name: pool
+      sha256: "978783255c543aa3586a1b3c21f6e9d720eb315376a915872c61ef8b5c20177d"
+      url: "https://pub.dev"
+    source: hosted
+    version: "1.5.2"
+  pub_semver:
+    dependency: transitive
+    description:
+      name: pub_semver
+      sha256: "5bfcf68ca79ef689f8990d1160781b4bad40a3bd5e5218ad4076ddb7f4081585"
+      url: "https://pub.dev"
+    source: hosted
+    version: "2.2.0"
+  shelf:
+    dependency: transitive
+    description:
+      name: shelf
+      sha256: e7dd780a7ffb623c57850b33f43309312fc863fb6aa3d276a754bb299839ef12
+      url: "https://pub.dev"
+    source: hosted
+    version: "1.4.2"
+  shelf_packages_handler:
+    dependency: transitive
+    description:
+      name: shelf_packages_handler
+      sha256: "89f967eca29607c933ba9571d838be31d67f53f6e4ee15147d5dc2934fee1b1e"
+      url: "https://pub.dev"
+    source: hosted
+    version: "3.0.2"
+  shelf_static:
+    dependency: transitive
+    description:
+      name: shelf_static
+      sha256: c87c3875f91262785dade62d135760c2c69cb217ac759485334c5857ad89f6e3
+      url: "https://pub.dev"
+    source: hosted
+    version: "1.1.3"
+  shelf_web_socket:
+    dependency: transitive
+    description:
+      name: shelf_web_socket
+      sha256: "3632775c8e90d6c9712f883e633716432a27758216dfb61bd86a8321c0580925"
+      url: "https://pub.dev"
+    source: hosted
+    version: "3.0.0"
+  source_map_stack_trace:
+    dependency: transitive
+    description:
+      name: source_map_stack_trace
+      sha256: c0713a43e323c3302c2abe2a1cc89aa057a387101ebd280371d6a6c9fa68516b
+      url: "https://pub.dev"
+    source: hosted
+    version: "2.1.2"
+  source_maps:
+    dependency: transitive
+    description:
+      name: source_maps
+      sha256: "14c2945847669b44089bb1222f66873d7ff7103c58911917f2a63c5a62327898"
+      url: "https://pub.dev"
+    source: hosted
+    version: "0.10.14"
+  source_span:
+    dependency: transitive
+    description:
+      name: source_span
+      sha256: "56a02f1f4cd1a2d96303c0144c93bd6d909eea6bee6bf5a0e0b685edbd4c47ab"
+      url: "https://pub.dev"
+    source: hosted
+    version: "1.10.2"
+  stack_trace:
+    dependency: transitive
+    description:
+      name: stack_trace
+      sha256: "8b27215b45d22309b5cddda1aa2b19bdfec9df0e765f2de506401c071d38d1b1"
+      url: "https://pub.dev"
+    source: hosted
+    version: "1.12.1"
+  stream_channel:
+    dependency: transitive
+    description:
+      name: stream_channel
+      sha256: "969e04c80b8bcdf826f8f16579c7b14d780458bd97f56d107d3950fdbeef059d"
+      url: "https://pub.dev"
+    source: hosted
+    version: "2.1.4"
+  string_scanner:
+    dependency: transitive
+    description:
+      name: string_scanner
+      sha256: "921cd31725b72fe181906c6a94d987c78e3b98c2e205b397ea399d4054872b43"
+      url: "https://pub.dev"
+    source: hosted
+    version: "1.4.1"
+  term_glyph:
+    dependency: transitive
+    description:
+      name: term_glyph
+      sha256: "7f554798625ea768a7518313e58f83891c7f5024f88e46e7182a4558850a4b8e"
+      url: "https://pub.dev"
+    source: hosted
+    version: "1.2.2"
+  test:
+    dependency: "direct dev"
+    description:
+      name: test
+      sha256: "0d5ba5602ec3baa28c8ce365e1efc5575969c765f45c554a3e167dc7945b9c30"
+      url: "https://pub.dev"
+    source: hosted
+    version: "1.31.2"
+  test_api:
+    dependency: transitive
+    description:
+      name: test_api
+      sha256: "475610b2aa23c19687cce2961e44b0cc57cafe220f67c2b80201231b2a07fbe7"
+      url: "https://pub.dev"
+    source: hosted
+    version: "0.7.13"
+  test_core:
+    dependency: transitive
+    description:
+      name: test_core
+      sha256: a39c204a4fc7a7ccb04a2b985e359fda3cc37e45e0b8ac61c3fb1a05aa832132
+      url: "https://pub.dev"
+    source: hosted
+    version: "0.6.19"
+  typed_data:
+    dependency: transitive
+    description:
+      name: typed_data
+      sha256: f9049c039ebfeb4cf7a7104a675823cd72dba8297f264b6637062516699fa006
+      url: "https://pub.dev"
+    source: hosted
+    version: "1.4.0"
+  vm_service:
+    dependency: transitive
+    description:
+      name: vm_service
+      sha256: "5f37239c4851efcef929cea7824e76df7f2f0970aef85d66bbc430afa40e72f0"
+      url: "https://pub.dev"
+    source: hosted
+    version: "15.3.0"
+  watcher:
+    dependency: transitive
+    description:
+      name: watcher
+      sha256: "1398c9f081a753f9226febe8900fce8f7d0a67163334e1c94a2438339d79d635"
+      url: "https://pub.dev"
+    source: hosted
+    version: "1.2.1"
+  web:
+    dependency: transitive
+    description:
+      name: web
+      sha256: "868d88a33d8a87b18ffc05f9f030ba328ffefba92d6c127917a2ba740f9cfe4a"
+      url: "https://pub.dev"
+    source: hosted
+    version: "1.1.1"
+  web_socket:
+    dependency: transitive
+    description:
+      name: web_socket
+      sha256: "34d64019aa8e36bf9842ac014bb5d2f5586ca73df5e4d9bf5c936975cae6982c"
+      url: "https://pub.dev"
+    source: hosted
+    version: "1.0.1"
+  web_socket_channel:
+    dependency: transitive
+    description:
+      name: web_socket_channel
+      sha256: d645757fb0f4773d602444000a8131ff5d48c9e47adfe9772652dd1a4f2d45c8
+      url: "https://pub.dev"
+    source: hosted
+    version: "3.0.3"
+  webkit_inspection_protocol:
+    dependency: transitive
+    description:
+      name: webkit_inspection_protocol
+      sha256: "87d3f2333bb240704cd3f1c6b5b7acd8a10e7f0bc28c28dcf14e782014f4a572"
+      url: "https://pub.dev"
+    source: hosted
+    version: "1.2.1"
+  yaml:
+    dependency: transitive
+    description:
+      name: yaml
+      sha256: b9da305ac7c39faa3f030eccd175340f968459dae4af175130b3fc47e40d76ce
+      url: "https://pub.dev"
+    source: hosted
+    version: "3.1.3"
+sdks:
+  dart: ">=3.11.0 <4.0.0"

package/dart-src/plugins/aws/pubspec.yaml

@@ -0,0 +1,22 @@
+name: flutter_patcher_aws
+description: AWS S3 storage + S3/DynamoDB database plugins for flutter_patcher (faithful port of hot-updater plugins/aws).
+version: 0.1.0
+publish_to: none
+
+environment:
+  sdk: ">=3.3.0 <4.0.0"
+
+dependencies:
+  flutter_patcher_core:
+    path: ../../packages/core
+  flutter_patcher_plugin_core:
+    path: ../../plugins/plugin-core
+  crypto: ^3.0.0
+  http: ^1.2.0
+  path: ^1.9.0
+  pointycastle: ^3.9.1
+  asn1lib: ^1.5.4
+
+dev_dependencies:
+  test: ^1.25.0
+  lints: ^4.0.0

package/dart-src/plugins/cloudflare/lib/flutter_patcher_cloudflare.dart

@@ -0,0 +1,18 @@
+library;
+
+export 'src/d1_bundle_mapper.dart'
+    show
+        buildBundlePatchId,
+        bundleToPatchRows,
+        defaultRolloutCohortCount,
+        parseMetadata,
+        parseTargetCohorts,
+        transformRowToBundle;
+export 'src/d1_client.dart' show D1Client, D1ClientLike;
+export 'src/d1_config.dart' show D1ClientFactory, D1DatabaseConfig, resolveD1Client;
+export 'src/d1_database.dart' show d1Database;
+export 'src/cloudflare_worker_database.dart'
+    show CloudflareWorkerDatabaseConfig, cloudflareWorkerDatabase;
+export 'src/r2_config.dart' show R2S3ClientFactory, R2S3StorageConfig, resolveR2Client;
+export 'src/r2_s3_client.dart' show R2S3Client, R2S3ClientLike;
+export 'src/r2_storage.dart' show r2Storage;

package/dart-src/plugins/cloudflare/lib/src/cloudflare_worker_database.dart

@@ -0,0 +1,29 @@
+import 'package:flutter_patcher_plugin_core/flutter_patcher_plugin_core.dart'
+    show createDatabasePlugin;
+
+import 'd1_client.dart' show D1ClientLike;
+import 'd1_database_plugin.dart' show D1DatabasePlugin;
+
+/// Configuration for the Cloudflare Workers D1 database plugin.
+///
+/// Mirrors hot-updater's `CloudflareWorkerDatabaseConfig`: instead of talking
+/// to D1 over the REST API, the plugin uses a `D1Like` binding supplied by
+/// [getDb] (the Workers runtime `env.DB`). In the Dart port the binding is
+/// represented by a [D1ClientLike], which makes it trivially testable by
+/// injecting a mock.
+class CloudflareWorkerDatabaseConfig {
+  const CloudflareWorkerDatabaseConfig({required this.getDb});
+
+  final D1ClientLike Function() getDb;
+}
+
+/// Cloudflare Workers D1 database plugin (faithful port of hot-updater's
+/// `cloudflareWorkerDatabase`).
+///
+/// Shares the exact same SQL/update-info logic as [d1Database]; only the
+/// client source differs (an in-process D1 binding instead of the REST API).
+final cloudflareWorkerDatabase =
+    createDatabasePlugin<CloudflareWorkerDatabaseConfig>(
+  name: 'd1WorkerDatabase',
+  factory: (config) => D1DatabasePlugin(config.getDb()),
+);