@absolutejs/absolute 0.20.0-beta.59 → 0.20.0-beta.60

package/dist/index.js

@@ -9049,7 +9049,8 @@ var init_loadConfig = __esm(() => {
 
 // src/mobile/config.ts
 import { resolve as resolve11 } from "path";
-var APP_ID_PATTERN, SCHEME_PATTERN, APPLE_APP_ID_PREFIX_PATTERN, CERTIFICATE_FINGERPRINT_PATTERN, HOSTNAME_PATTERN, EXPO_RESERVED_ROUTE_PREFIXES, resolveProjectPath = (projectRoot, value, field) => {
+import { createPublicKey } from "crypto";
+var APP_ID_PATTERN, SCHEME_PATTERN, APPLE_APP_ID_PREFIX_PATTERN, CERTIFICATE_FINGERPRINT_PATTERN, UPDATE_NAME_PATTERN, UPDATE_PUBLIC_KEY_PATTERN, HOSTNAME_PATTERN, EXPO_RESERVED_ROUTE_PREFIXES, resolveProjectPath = (projectRoot, value, field) => {
   const root = resolve11(projectRoot);
   const path = resolve11(root, value);
   if (path !== root && !path.startsWith(`${root}/`)) {
@@ -9122,7 +9123,52 @@ var APP_ID_PATTERN, SCHEME_PATTERN, APPLE_APP_ID_PREFIX_PATTERN, CERTIFICATE_FIN
     }
     return value.match(/.{2}/g)?.join(":") ?? value;
   }))
-].sort(), validateExpoNativeRouteSegment = (path, segment, index, count, parameters) => {
+].sort(), normalizeUpdates = (config, productionOrigin) => {
+  if (!config.updates)
+    return;
+  const channel = requireText(config.updates.channel ?? "production", "mobile.updates.channel");
+  if (!UPDATE_NAME_PATTERN.test(channel))
+    throw new TypeError("mobile.updates.channel contains unsupported characters.");
+  const manifestUrl = new URL(config.updates.manifestUrl ?? `/__absolute/mobile/updates/${encodeURIComponent(channel)}/update.json`, `${productionOrigin}/`);
+  const loopback = manifestUrl.hostname === "localhost" || manifestUrl.hostname === "127.0.0.1" || manifestUrl.hostname === "[::1]";
+  if (manifestUrl.protocol !== "https:" && !loopback)
+    throw new TypeError("mobile.updates.manifestUrl must use HTTPS outside loopback development.");
+  if (manifestUrl.username || manifestUrl.password || manifestUrl.hash)
+    throw new TypeError("mobile.updates.manifestUrl cannot contain credentials or a fragment.");
+  const entries = Object.entries(config.updates.publicKeys).sort(([left], [right]) => left.localeCompare(right));
+  if (entries.length === 0)
+    throw new TypeError("mobile.updates.publicKeys must contain at least one key.");
+  const publicKeys = Object.fromEntries(entries.map(([keyId, key]) => {
+    if (!UPDATE_NAME_PATTERN.test(keyId))
+      throw new TypeError("mobile.updates.publicKeys contains an invalid key ID.");
+    const normalized = requireText(key, `mobile.updates.publicKeys.${keyId}`);
+    if (!UPDATE_PUBLIC_KEY_PATTERN.test(normalized))
+      throw new TypeError(`mobile.updates.publicKeys.${keyId} must be base64-encoded ECDSA P-256 SPKI DER.`);
+    let decoded;
+    try {
+      decoded = Buffer.from(normalized, "base64");
+    } catch {
+      throw new TypeError(`mobile.updates.publicKeys.${keyId} must be canonical base64.`);
+    }
+    let keyType;
+    let namedCurve;
+    try {
+      const publicKey = createPublicKey({
+        format: "der",
+        key: decoded,
+        type: "spki"
+      });
+      keyType = publicKey.asymmetricKeyType;
+      namedCurve = publicKey.asymmetricKeyDetails?.namedCurve;
+    } catch {
+      keyType = undefined;
+    }
+    if (decoded.toString("base64") !== normalized || keyType !== "ec" || namedCurve !== "prime256v1")
+      throw new TypeError(`mobile.updates.publicKeys.${keyId} is not an ECDSA P-256 SPKI public key.`);
+    return [keyId, normalized];
+  }));
+  return { channel, manifestUrl: manifestUrl.href, publicKeys };
+}, validateExpoNativeRouteSegment = (path, segment, index, count, parameters) => {
   if (segment === "*" && (index !== count - 1 || count === 1)) {
     throw new TypeError(`mobile.routes.native route ${path} must use * once, as the final segment after a static or parameterized prefix.`);
   }
@@ -9180,6 +9226,7 @@ var APP_ID_PATTERN, SCHEME_PATTERN, APPLE_APP_ID_PREFIX_PATTERN, CERTIFICATE_FIN
   if (deepLinkScheme && !SCHEME_PATTERN.test(deepLinkScheme)) {
     throw new TypeError("mobile.deepLinks.scheme is not a valid URL scheme.");
   }
+  const updates = normalizeUpdates(config, productionOrigin);
   return {
     androidCertificateFingerprints: normalizeCertificateFingerprints(config.deepLinks?.android?.sha256CertificateFingerprints),
     appId,
@@ -9196,7 +9243,8 @@ var APP_ID_PATTERN, SCHEME_PATTERN, APPLE_APP_ID_PREFIX_PATTERN, CERTIFICATE_FIN
     nativeProjectDirectory: resolveProjectPath(projectRoot, config.nativeProject?.directory ?? (config.engine === "expo" ? ".absolutejs/mobile/expo" : "mobile"), "mobile.nativeProject.directory"),
     platforms: normalizePlatforms(config.platforms),
     productionOrigin,
-    pushAndroidGoogleServicesFile: resolveProjectPath(projectRoot, config.pushNotifications?.android?.googleServicesFile ?? "google-services.json", "mobile.pushNotifications.android.googleServicesFile")
+    pushAndroidGoogleServicesFile: resolveProjectPath(projectRoot, config.pushNotifications?.android?.googleServicesFile ?? "google-services.json", "mobile.pushNotifications.android.googleServicesFile"),
+    ...updates ? { updates } : {}
   };
 };
 var init_config = __esm(() => {
@@ -9204,6 +9252,8 @@ var init_config = __esm(() => {
   SCHEME_PATTERN = /^[a-z][a-z0-9+.-]*$/;
   APPLE_APP_ID_PREFIX_PATTERN = /^[A-Z0-9]{10}$/;
   CERTIFICATE_FINGERPRINT_PATTERN = /^[0-9A-F]{64}$/;
+  UPDATE_NAME_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/u;
+  UPDATE_PUBLIC_KEY_PATTERN = /^[A-Za-z0-9+/]+={0,2}$/u;
   HOSTNAME_PATTERN = /^(?=.{1,253}$)(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)(?:\.(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?))*$/;
   EXPO_RESERVED_ROUTE_PREFIXES = new Set([
     "_expo",
@@ -41177,5 +41227,5 @@ export {
   wrapPageHandlerWithStreamingSlots
 };
 
-//# debugId=93E5701100F7F0FD64756E2164756E21
+//# debugId=AE2A866A06CFA8B064756E2164756E21
 //# sourceMappingURL=index.js.map