@breeztech/breez-sdk-spark-react-native 0.6.4-dev2 → 0.6.4-dev5

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@breeztech/breez-sdk-spark-react-native",
-  "version": "0.6.4-dev2",
+  "version": "0.6.4-dev5",
   "description": "React Native bindings for the Breez SDK - Nodeless (Spark Implementation)",
   "source": "./src/index.tsx",
   "main": "./lib/commonjs/index.js",
@@ -195,5 +195,9 @@
     "type": "turbo-module",
     "languages": "cpp",
     "version": "0.49.0"
+  },
+  "checksums": {
+    "android": "2c89ea9184b14313c3c3abf495fc16609e39db1f7311ef291d0180921af4a11c",
+    "ios": "52174887ad7cbe1cb76b7d5bbc3ebf0db9f77b75208e2f61df7bde802e764a07"
   }
 }

package/plugin/build/withBinaryArtifacts.js

@@ -71,23 +71,52 @@ async function downloadBinaryArtifacts() {
     const packageJsonPath = path.join(packageRoot, 'package.json');
     const packageJson = JSON.parse(fs.readFileSync(packageJsonPath, 'utf-8'));
     const version = packageJson.version;
+    const androidChecksum = packageJson.checksums?.android;
+    const iosChecksum = packageJson.checksums?.ios;
+    if (!androidChecksum || !iosChecksum) {
+        throw new Error('Binary checksums not found in package.json');
+    }
     const repo = 'https://github.com/breez/breez-sdk-spark-react-native';
     const androidUrl = `${repo}/releases/download/${version}/android-artifacts.zip`;
     const iosUrl = `${repo}/releases/download/${version}/ios-artifacts.zip`;
-    // Download Android artifacts
+    // Download and verify Android artifacts
     try {
-        (0, child_process_1.execSync)(`curl -L "${androidUrl}" --output android-artifacts.zip && unzip -o android-artifacts.zip && rm -rf android-artifacts.zip`, { cwd: packageRoot, stdio: 'inherit' });
+        (0, child_process_1.execSync)(`curl -L "${androidUrl}" --output android-artifacts.zip`, {
+            cwd: packageRoot,
+            stdio: 'inherit',
+        });
+        const actualAndroidChecksum = (0, child_process_1.execSync)('shasum -a 256 android-artifacts.zip | cut -d" " -f1', { cwd: packageRoot, encoding: 'utf-8' }).trim();
+        if (actualAndroidChecksum !== androidChecksum) {
+            throw new Error(`Android artifacts checksum mismatch. Expected: ${androidChecksum}, Got: ${actualAndroidChecksum}`);
+        }
+        (0, child_process_1.execSync)('unzip -o android-artifacts.zip && rm -rf android-artifacts.zip', {
+            cwd: packageRoot,
+            stdio: 'inherit',
+        });
     }
     catch (error) {
-        console.error('Failed to download Android artifacts');
+        (0, child_process_1.execSync)('rm -f android-artifacts.zip', { cwd: packageRoot });
+        console.error('Failed to download or verify Android artifacts');
         throw error;
     }
-    // Download iOS artifacts
+    // Download and verify iOS artifacts
     try {
-        (0, child_process_1.execSync)(`curl -L "${iosUrl}" --output ios-artifacts.zip && unzip -o ios-artifacts.zip && rm -rf ios-artifacts.zip`, { cwd: packageRoot, stdio: 'inherit' });
+        (0, child_process_1.execSync)(`curl -L "${iosUrl}" --output ios-artifacts.zip`, {
+            cwd: packageRoot,
+            stdio: 'inherit',
+        });
+        const actualIosChecksum = (0, child_process_1.execSync)('shasum -a 256 ios-artifacts.zip | cut -d" " -f1', { cwd: packageRoot, encoding: 'utf-8' }).trim();
+        if (actualIosChecksum !== iosChecksum) {
+            throw new Error(`iOS artifacts checksum mismatch. Expected: ${iosChecksum}, Got: ${actualIosChecksum}`);
+        }
+        (0, child_process_1.execSync)('unzip -o ios-artifacts.zip && rm -rf ios-artifacts.zip', {
+            cwd: packageRoot,
+            stdio: 'inherit',
+        });
     }
     catch (error) {
-        console.error('Failed to download iOS artifacts');
+        (0, child_process_1.execSync)('rm -f ios-artifacts.zip', { cwd: packageRoot });
+        console.error('Failed to download or verify iOS artifacts');
         throw error;
     }
 }

package/scripts/postinstall.sh

@@ -1,14 +0,0 @@
-#!/bin/sh
-# Download prebuilt binary artifacts from the release
-REPO=https://github.com/breez/breez-sdk-spark-react-native
-TAG=$(node -p "require('./package.json').version")
-
-ANDROID_URL=$REPO/releases/download/$TAG/android-artifacts.zip
-curl -L $ANDROID_URL --output android-artifacts.zip
-unzip -o android-artifacts.zip
-rm -rf android-artifacts.zip
-
-IOS_URL=$REPO/releases/download/$TAG/ios-artifacts.zip
-curl -L $IOS_URL --output ios-artifacts.zip
-unzip -o ios-artifacts.zip
-rm -rf ios-artifacts.zip