@bravemobile/react-native-code-push 12.0.2 → 12.1.1

package/cli/utils/hash-utils.ts

@@ -0,0 +1,146 @@
+/**
+ * code based on appcenter-cli
+ */
+
+/**
+ * NOTE!!! This utility file is duplicated for use by the CodePush service (for server-driven hashing/
+ * integrity checks) and Management SDK (for end-to-end code signing), please keep them in sync.
+ */
+
+import crypto from "crypto";
+import fs from "fs";
+import path from "path";
+import { isDirectory } from "./file-utils.js";
+import { walk } from "./promisfied-fs.js";
+
+// Do not throw an exception if either of these modules are missing, as they may not be needed by the
+// consumer of this file.
+const HASH_ALGORITHM = 'sha256';
+class PackageManifest {
+    private _map: Map<string, string>;
+
+    constructor(map?: Map<string, string>) {
+        if (map == null) {
+            map = new Map();
+        }
+        this._map = map;
+    }
+
+    toMap(): Map<string, string> {
+        return this._map;
+    }
+
+    computePackageHash(): string {
+        let entries: string[] = [];
+        this._map.forEach((hash, name) => {
+            entries.push(name + ':' + hash);
+        });
+
+        // Make sure this list is alphabetically ordered so that other clients
+        // can also compute this hash easily given the update contents.
+        entries = entries.sort();
+
+        return crypto.createHash(HASH_ALGORITHM).update(JSON.stringify(entries)).digest('hex');
+    }
+
+    serialize(): string {
+        const obj: Record<string, string> = {};
+
+        this._map.forEach(function (value, key) {
+            obj[key] = value;
+        });
+
+        return JSON.stringify(obj);
+    }
+
+    static normalizePath(filePath: string): string {
+        //replace all backslashes coming from cli running on windows machines by slashes
+        return filePath.replace(/\\/g, '/');
+    }
+
+    static isIgnored(relativeFilePath: string): boolean {
+        const __MACOSX = '__MACOSX/';
+        const DS_STORE = '.DS_Store';
+        const CODEPUSH_METADATA = '.codepushrelease';
+        return (
+            relativeFilePath.startsWith(__MACOSX) ||
+            relativeFilePath === DS_STORE ||
+            relativeFilePath.endsWith('/' + DS_STORE) ||
+            relativeFilePath === CODEPUSH_METADATA ||
+            relativeFilePath.endsWith('/' + CODEPUSH_METADATA)
+        );
+    }
+}
+
+export async function generatePackageHashFromDirectory(directoryPath: string, basePath: string) {
+    try {
+        if (!isDirectory(directoryPath)) {
+            throw new Error('Not a directory. Please either create a directory, or use hashFile().');
+        }
+    } catch (error) {
+        throw new Error('Directory does not exist. Please either create a directory, or use hashFile().');
+    }
+
+    /**
+     * @type {PackageManifest}
+     */
+    const manifest = await generatePackageManifestFromDirectory(directoryPath, basePath);
+    return manifest.computePackageHash();
+}
+
+function generatePackageManifestFromDirectory(directoryPath: string, basePath: string): Promise<PackageManifest> {
+    // eslint-disable-next-line no-async-promise-executor
+    return new Promise(async (resolve, reject) => {
+        const fileHashesMap = new Map<string, string>();
+
+        const files: string[] = await walk(directoryPath);
+
+        if (!files || files.length === 0) {
+            reject('Error: Cannot sign the release because no files were found.');
+            return;
+        }
+
+        // Hash the files sequentially, because streaming them in parallel is not necessarily faster
+        const generateManifestPromise = files.reduce<Promise<unknown>>((soFar, filePath) => {
+            return soFar.then(() => {
+                const relativePath: string = PackageManifest.normalizePath(path.relative(basePath, filePath));
+                if (!PackageManifest.isIgnored(relativePath)) {
+                    return hashFile(filePath).then((hash) => {
+                        fileHashesMap.set(relativePath, hash);
+                    });
+                }
+            });
+        }, Promise.resolve(null));
+
+        generateManifestPromise.then(() => {
+            resolve(new PackageManifest(fileHashesMap));
+        }, reject);
+    });
+}
+
+function hashFile(filePath: string): Promise<string> {
+    const readStream: fs.ReadStream = fs.createReadStream(filePath);
+    return hashStream(readStream);
+}
+
+function hashStream(readStream: fs.ReadStream): Promise<string> {
+    return new Promise((resolve, reject) => {
+        const _hashStream = crypto.createHash(HASH_ALGORITHM)
+
+        readStream
+            .on('error', (error) => {
+                _hashStream.end();
+                reject(error);
+            })
+            .on('end', () => {
+                _hashStream.end();
+
+                const buffer = _hashStream.read();
+                const hash: string = buffer.toString('hex');
+
+                resolve(hash);
+            });
+
+        readStream.pipe(_hashStream);
+    });
+}

package/cli/utils/promisfied-fs.ts

@@ -0,0 +1,19 @@
+/**
+ * code based on appcenter-cli
+ */
+
+import { promises as fs } from "fs";
+import path from "path";
+
+export async function walk(dir: string): Promise<string[]> {
+    const stats = await fs.stat(dir);
+    if (stats.isDirectory()) {
+        let files: string[] = [];
+        for (const file of await fs.readdir(dir)) {
+            files = files.concat(await walk(path.join(dir, file)));
+        }
+        return files;
+    } else {
+        return [dir];
+    }
+}

package/cli/utils/{showLogo.js → showLogo.ts}

@@ -1,4 +1,4 @@
-function showLogo() {
+export function showLogo() {
   const logo = `
     
 +------------------------------------------------------------------+
@@ -19,5 +19,3 @@ Please refer to help command for more information.
     `;
   console.log(logo);
 }
-
-module.exports = { showLogo };

package/cli/utils/zip.ts

@@ -0,0 +1,65 @@
+/**
+ * code based on appcenter-cli
+ */
+
+import fs from "fs";
+import path from "path";
+import yazl from "yazl";
+import { generateRandomFilename, normalizePath, isDirectory } from "./file-utils.js";
+import { walk } from "./promisfied-fs.js";
+
+type ReleaseFile = { sourceLocation: string, targetLocation: string };
+
+export function zip(updateContentsPath: string): Promise<string> {
+
+    // eslint-disable-next-line no-async-promise-executor
+    return new Promise(async (resolve, reject) => {
+        const releaseFiles: ReleaseFile[] = [];
+
+        try {
+            if (!isDirectory(updateContentsPath)) {
+                releaseFiles.push({
+                    sourceLocation: updateContentsPath,
+                    targetLocation: normalizePath(path.basename(updateContentsPath)), // Put the file in the root
+                });
+            }
+        } catch (error: unknown) {
+            if (error instanceof Error) {
+                error.message = error.message + " Make sure you have added the platform you are making a release to.`.";
+            }
+            reject(error);
+        }
+
+        const directoryPath = updateContentsPath;
+        const baseDirectoryPath = path.join(directoryPath, '..'); // For legacy reasons, put the root directory in the zip
+
+        const files: string[] = await walk(updateContentsPath);
+
+        files.forEach((filePath) => {
+            const relativePath = path.relative(baseDirectoryPath, filePath);
+            releaseFiles.push({
+                sourceLocation: filePath,
+                targetLocation: normalizePath(relativePath),
+            });
+        });
+
+        const packagePath = path.join(process.cwd(), generateRandomFilename(15) + '.zip');
+        const zipFile = new yazl.ZipFile();
+        const writeStream = fs.createWriteStream(packagePath);
+
+        zipFile.outputStream
+            .pipe(writeStream)
+            .on('error', (error: unknown) => {
+                reject(error);
+            })
+            .on('close', () => {
+                resolve(packagePath);
+            });
+
+        releaseFiles.forEach((releaseFile) => {
+            zipFile.addFile(releaseFile.sourceLocation, releaseFile.targetLocation);
+        });
+
+        zipFile.end();
+    });
+}

package/package.json

@@ -1,9 +1,11 @@
 {
   "name": "@bravemobile/react-native-code-push",
-  "version": "12.0.2",
+  "version": "12.1.1",
   "description": "React Native plugin for the CodePush service",
-  "main": "CodePush.js",
-  "typings": "typings/react-native-code-push.d.ts",
+  "main": "src/CodePush.js",
+  "react-native": "src/CodePush.js",
+  "source": "src/CodePush.js",
+  "types": "typings/react-native-code-push.d.ts",
   "homepage": "https://microsoft.github.io/code-push",
   "keywords": [
     "react-native",
@@ -14,16 +16,42 @@
     "react-native-code-push",
     "expo-code-push"
   ],
+  "workspaces": [
+    "cli"
+  ],
   "author": "Soomgo Mobile Team (originally Microsoft Corporation)",
   "license": "MIT",
   "bin": {
-    "code-push": "cli/index.js"
+    "code-push": "bin/code-push.js"
   },
+  "files": [
+    "src",
+    "bin/code-push.js",
+    "android",
+    "ios",
+    "cli/dist",
+    "cli/**/*.ts",
+    "!cli/node_modules",
+    "expo",
+    "typings",
+    "*.podspec",
+    "react-native.config.js",
+    "app.plugin.js",
+    "package.json",
+    "!ios/build",
+    "!android/build",
+    "!android/app/build",
+    "!android/gradle",
+    "!android/gradlew",
+    "!android/gradlew.bat",
+    "!android/local.properties",
+    "!**/__tests__",
+    "!**/__fixtures__",
+    "!**/__mocks__",
+    "!**/.*"
+  ],
   "scripts": {
-    "clean": "shx rm -rf bin",
     "setup": "npm install --quiet --no-progress",
-    "prebuild:tests": "npm run clean && npm run tslint",
-    "build:tests": "tsc",
     "test": "npm run build:tests && npm run test:setup && npm run test:fast",
     "test:android": "npm run build:tests && npm run test:setup:android && npm run test:fast:android",
     "test:ios": "npm run build:tests && npm run test:setup:ios && npm run test:fast:ios",
@@ -36,9 +64,12 @@
     "test:debugger:android": "mocha --recursive --inspect-brk=0.0.0.0 bin/test --android",
     "test:debugger:ios": "mocha --recursive --inspect-brk=0.0.0.0 bin/test --ios",
     "tslint": "tslint -c tslint.json test/**/*.ts",
+    "type:cli": "npm run --workspace cli typecheck",
+    "build:cli": "npm run --workspace cli clean && npm run --workspace cli build",
+    "prepack": "npm run build:cli",
     "publish": "npm publish --access=public",
     "eslint": "eslint --quiet .",
-    "jest": "jest versioning/*"
+    "jest": "jest src/versioning/* && npm run --workspace cli test"
   },
   "repository": {
     "type": "git",
@@ -48,7 +79,7 @@
     "commander": "^12.1.0",
     "hoist-non-react-statics": "^3.3.2",
     "semver": "^7.3.5",
-    "shelljs": "^0.8.5",
+    "shelljs": "^0.10.0",
     "xcode": "^3.0.1",
     "yazl": "^3.3.1"
   },
@@ -64,11 +95,12 @@
   "devDependencies": {
     "@babel/core": "^7.26.0",
     "@babel/preset-env": "^7.26.0",
+    "@babel/preset-typescript": "^7.27.1",
     "@eslint/js": "^9.13.0",
     "@types/assert": "^1.5.2",
     "@types/mkdirp": "^1.0.1",
     "@types/mocha": "^9.0.0",
-    "@types/node": "^14.0.27",
+    "@types/node": "^18.19.129",
     "@types/q": "^1.5.4",
     "@types/semver": "^7.5.8",
     "@types/shelljs": "^0.8.15",
@@ -76,7 +108,6 @@
     "babel-jest": "^29.7.0",
     "body-parser": "latest",
     "code-push-plugin-testing-framework": "file:./code-push-plugin-testing-framework",
-    "del": "v6.0.0",
     "eslint": "^9.13.0",
     "eslint-plugin-react": "^7.37.2",
     "express": "latest",
@@ -85,7 +116,6 @@
     "mkdirp": "latest",
     "mocha": "^9.2.0",
     "q": "^1.5.1",
-    "shx": "^0.3.4",
     "slash": "^3.0.0",
     "ts-node": "^10.9.2",
     "tslint": "^6.1.3",

package/{AlertAdapter.js → src/AlertAdapter.js}

@@ -3,22 +3,22 @@ let { Alert } = React;
 
 if (Platform.OS === "android") {
   const { NativeModules: { CodePushDialog } } = React;
-    
+
   Alert = {
     alert(title, message, buttons) {
       if (buttons.length > 2) {
         throw "Can only show 2 buttons for Android dialog.";
       }
-      
+
       const button1Text = buttons[0] ? buttons[0].text : null,
             button2Text = buttons[1] ? buttons[1].text : null;
-      
+
       CodePushDialog.showDialog(
         title, message, button1Text, button2Text,
-        (buttonId) => { buttons[buttonId].onPress && buttons[buttonId].onPress(); }, 
+        (buttonId) => { buttons[buttonId].onPress && buttons[buttonId].onPress(); },
         (error) => { throw error; });
     }
   };
 }
 
-module.exports = { Alert };
+module.exports = { Alert };

package/AGENTS.md

@@ -1,32 +0,0 @@
-# Repository Guidelines
-
-## Project Structure & Module Organization
-- `CodePush.js` and `package-mixins.js` expose the JavaScript API, with supporting utilities in `logging.js` and `AlertAdapter.js`.
-- Native bridges live in `android/` and `ios/`; keep platform-specific assets scoped there.
-- The Expo sample and reference implementations sit in `Examples/`, while CLI logic and packaging helpers live in `cli/` and `code-push-plugin-testing-framework/`.
-- Automated tests are authored in TypeScript under `test/` and emitted into `bin/test` after build; documentation and release notes remain in `docs/` and `Recipes/`.
-
-## Build, Test, and Development Commands
-- `npm install` installs dependencies (Node >=18 is required).
-- `npm run build:tests` transpiles the TypeScript test harness into `bin/test`.
-- `npm run test` runs the full Mocha suite across Android and iOS adapters; use `npm run test:android` or `npm run test:ios` when iterating on a single platform.
-- `npm run test:fast` skips environment setup for quicker feedback once devices are ready.
-- `npm run eslint` checks JavaScript/TypeScript style; `npm run tslint` targets the legacy TypeScript specs; `npm run jest` covers the semver logic in `versioning/`.
-- `npm run clean` clears generated artifacts before rebuilding.
-
-## Coding Style & Naming Conventions
-- Use 2-space indentation and double quotes in TypeScript tests (see `tslint.json`); match surrounding style elsewhere and let ESLint guide fixes.
-- Components and HOCs use PascalCase (`CodePush`), utilities camelCase, and CLI binaries kebab-case.
-- Keep platform guards explicit (`Platform.OS`) and annotate non-obvious flows with concise comments.
-
-## Testing Guidelines
-- Place new specs alongside `test/test.ts`; share fixtures via `test/template/` or the helper utilities in `code-push-plugin-testing-framework/`.
-- Always run `npm run build:tests` before executing tests locally or in CI.
-- Document which device targets were used when running `npm run test`, and prefer `:android`/`:ios` variants during platform-specific debugging.
-- Extend `versioning/` tests when changing release or rollback logic and verify with `npm run jest`.
-
-## Commit & Pull Request Guidelines
-- Follow conventional commits (`type(scope): summary`), mirroring history such as `chore(Example): update the example app to v12`.
-- Reference related issues in the body, summarize behavioral changes, and attach screenshots/logs for Example app updates.
-- Ensure lint, Mocha, and Jest suites pass before requesting review; include the commands executed in the PR description.
-- Rebase instead of merging from main when tidying feature branches to keep history linear.

package/CONTRIBUTING.md

@@ -1,134 +0,0 @@
-# Contributing
-
-## Using the plugin
-
-### Environment setup
-
-`node.js` and `npm` are needed for using this project. `npm` comes bundled with the `node.js` installer. You can download the `node.js` installer here: https://nodejs.org/download/.
-
-Once you have installed `node.js` and `npm`, install the dev dependencies for the project.
-
-```
-npm install
-```
-
-### Using the plugin manually
-
-Follow these steps to test your modifications to the plugin manually:
-- clone this repository
-- install the dependencies
-
-	Navigate to the root folder from your command line console and run:
-	```
-	npm install
-	```
-- install the plugin in a React-Native project
-
-	Navigate to the root folder of your React-Native project from your command line console and run:
-	```
-	npm install local_path_to_your_clone_of_this_repo
-	```
-- configure the plugin using the steps in the README.md
-- build and run your app on an emulator or device
-
-## Test
-
-### Environment setup
-
-First, make sure you have installed the dependencies for the plugin by following the steps above.
-
-Then, make sure you have installed `react-native`.
-
-```
-npm install -g react-native
-```
-
-To run Android tests, make sure you have `sdk\tools`, `sdk\emulator` and  `sdk\platform-tools` in your PATH.
-
-To run iOS tests, make sure you've installed CocoaPods and have `.gem/bin` in your PATH.
-
-### Supported platforms
-
-The plugin has end to end tests for Android and iOS. Depending on your development machine OS, you can run some or all the tests.
-
-OS            | Supported tests
-------------- | -------------
-OS X          | Android, iOS
-Windows       | Android
-
-### Test descriptions
-
-The tests first build the app.
-
-They then check if the required emulators are currently running.
-
-If an Android emulator is not running, it attempts to boot the latest Android emulator. You can specify an emulator by adding env variable `ANDROID_EMU=yourEmulatorNameHere` to the npm command. For example: `ANDROID_EMU=yourEmulatorNameHere npm run test:android`.
-
-If an iOS simulator is not running, it attempts to boot the latest iOS iPhone simulator. You can specify a simulator by adding env variable `IOS_EMU=yourSimulatorNameHere` to the npm command. For example: `IOS_EMU="iPhone 8 (0567DFF8-329E-41A3-BD6D-E48E9DD5EF39)" npm run test:ios`.
-
-If all the required emulators are not running and the tests fail to boot them, the tests will fail.
-
-If you would like the tests to always restart the necessary emulators (killing them if they are currently running), setup a env variable `CLEAN=true` to the command. For example: `CLEAN=true npm run test`.
-
-The desired unit tests are then run.
-
-If you would like to skip building, add a `:fast` in the command you'd like to run. For example, `npm run test:ios` becomes `npm run test:fast:ios` or `npm run test:android` becomes `npm run test:fast:android`.
-
-There is a both a full unit test suite and a "core" set of unit tests that you may run. If you would like to run only the core tests, setup a env variable `CORE=true` to the command. For example: `CORE=true npm run test:android`.
-
-If you would like to pull the plugin from NPM rather than running the tests on the local version, setup a env variable `NPM=true` to the command. For example: `NPM=true npm run test:ios`.
-
-#### Default
-
-To run all of the unit tests on Android and iOS:
-```
-npm run test
-```
-
-#### iOS
-
-To run all of the unit tests on iOS:
-```
-npm run test:ios
-```
-
-#### Android
-
-To run all of the unit tests on Android:
-```
-npm run test:android
-```
-
-#### More examples
-
-All possible testing configurations have tasks!
-
-The platforms are ordered as follows, and ran in that order:
-android, ios
-
-To run the core unit tests on Android:
-```
-CORE=true npm run test:android
-```
-
-To run all of the unit tests on iOS and pull the plugin from NPM:
-```
-NPM=true npm run test:ios
-```
-
-To run all of the unit tests on Android and iOS without building first:
-```
-npm run test:fast
-```
-
-To run all of the unit tests on iOS and restart the emulators:
-```
-CLEAN=true npm run test:ios
-```
-
-To run the core unit tests on Android and pull the plugin from NPM:
-```
-NPM=true CORE=true npm run test:android
-```
-
-...and so on!

package/SECURITY.md

@@ -1,41 +0,0 @@
-<!-- BEGIN MICROSOFT SECURITY.MD V0.0.5 BLOCK -->
-
-## Security
-
-Microsoft takes the security of our software products and services seriously, which includes all source code repositories managed through our GitHub organizations, which include [Microsoft](https://github.com/Microsoft), [Azure](https://github.com/Azure), [DotNet](https://github.com/dotnet), [AspNet](https://github.com/aspnet), [Xamarin](https://github.com/xamarin), and [our GitHub organizations](https://opensource.microsoft.com/).
-
-If you believe you have found a security vulnerability in any Microsoft-owned repository that meets [Microsoft's definition of a security vulnerability](https://docs.microsoft.com/en-us/previous-versions/tn-archive/cc751383(v=technet.10)), please report it to us as described below.
-
-## Reporting Security Issues
-
-**Please do not report security vulnerabilities through public GitHub issues.**
-
-Instead, please report them to the Microsoft Security Response Center (MSRC) at [https://msrc.microsoft.com/create-report](https://msrc.microsoft.com/create-report).
-
-If you prefer to submit without logging in, send email to [secure@microsoft.com](mailto:secure@microsoft.com).  If possible, encrypt your message with our PGP key; please download it from the [Microsoft Security Response Center PGP Key page](https://www.microsoft.com/en-us/msrc/pgp-key-msrc).
-
-You should receive a response within 24 hours. If for some reason you do not, please follow up via email to ensure we received your original message. Additional information can be found at [microsoft.com/msrc](https://www.microsoft.com/msrc).
-
-Please include the requested information listed below (as much as you can provide) to help us better understand the nature and scope of the possible issue:
-
-* Type of issue (e.g. buffer overflow, SQL injection, cross-site scripting, etc.)
-* Full paths of source file(s) related to the manifestation of the issue
-* The location of the affected source code (tag/branch/commit or direct URL)
-* Any special configuration required to reproduce the issue
-* Step-by-step instructions to reproduce the issue
-* Proof-of-concept or exploit code (if possible)
-* Impact of the issue, including how an attacker might exploit the issue
-
-This information will help us triage your report more quickly.
-
-If you are reporting for a bug bounty, more complete reports can contribute to a higher bounty award. Please visit our [Microsoft Bug Bounty Program](https://microsoft.com/msrc/bounty) page for more details about our active programs.
-
-## Preferred Languages
-
-We prefer all communications to be in English.
-
-## Policy
-
-Microsoft follows the principle of [Coordinated Vulnerability Disclosure](https://www.microsoft.com/en-us/msrc/cvd).
-
-<!-- END MICROSOFT SECURITY.MD BLOCK -->

package/android/app/src/main/java/com/microsoft/codepush/react/ReactInstanceHolder.java

@@ -1,17 +0,0 @@
-package com.microsoft.codepush.react;
-
-import com.facebook.react.ReactInstanceManager;
-
-/**
- * Provides access to a {@link ReactInstanceManager}.
- *
- * ReactNativeHost already implements this interface, if you make use of that react-native
- * component (just add `implements ReactInstanceHolder`).
- */
-public interface ReactInstanceHolder {
-
-  /**
-   * Get the current {@link ReactInstanceManager} instance. May return null.
-   */
-  ReactInstanceManager getReactInstanceManager();
-}

package/android/gradle/wrapper/gradle-wrapper.properties

@@ -1,5 +0,0 @@
-distributionBase=GRADLE_USER_HOME
-distributionPath=wrapper/dists
-zipStoreBase=GRADLE_USER_HOME
-zipStorePath=wrapper/dists
-distributionUrl=https\://services.gradle.org/distributions/gradle-2.4-all.zip