@intincrab/updiff 0.1.1 → 0.2.0

package/dist/report.js

@@ -31,11 +31,14 @@ export function renderText(report, options = {}) {
         for (const f of group) {
             lines.push(`  ${p.sev(sev, CHANGE_MARK[f.change])} ${f.title}`);
             if (f.detail)
-                lines.push(`      ${clip(f.detail, max)}`);
+                for (const d of clip(f.detail, max).split('\n'))
+                    lines.push(`      ${d}`);
             if (f.where?.length)
                 lines.push(p.dim(`      at ${f.where.join(', ')}`));
         }
     }
+    for (const note of report.notes ?? [])
+        lines.push('', p.dim(`Note: ${note}`));
     if (report.findings.some((f) => f.category === 'host'))
         lines.push('', p.dim(HOSTNAME_CAVEAT));
     return lines.join('\n') + '\n';
@@ -62,13 +65,17 @@ export function renderMarkdown(report) {
         lines.push(`## ${SEVERITY_LABEL[sev]}`, '');
         for (const f of group) {
             lines.push(`- ${CHANGE_MARK[f.change] === '+' ? 'Added' : CHANGE_MARK[f.change] === '-' ? 'Removed' : 'Changed'}: **${mdEscape(f.title)}**`);
-            if (f.detail)
+            if (f.detail?.includes('\n'))
+                lines.push('', '  ```diff', ...f.detail.split('\n').map((d) => `  ${d}`), '  ```', '');
+            else if (f.detail)
                 lines.push(`  ${mdEscape(f.detail)}`);
             if (f.where?.length)
                 lines.push(`  <sub>${f.where.map((w) => `\`${w}\``).join(', ')}</sub>`);
         }
         lines.push('');
     }
+    for (const note of report.notes ?? [])
+        lines.push(`> Note: ${mdEscape(note)}`, '');
     if (report.findings.some((f) => f.category === 'host'))
         lines.push(`> ${HOSTNAME_CAVEAT}`, '');
     lines.push('<sub>Generated by updiff. Static inspection only: the app was not run.</sub>', '');
@@ -99,13 +106,35 @@ export function renderScan(s, options = {}) {
     lines.push(`Signing        ${sig.status}${sig.teamId ? `, team ${sig.teamId}` : ''}${sig.authorities[0] ? ` (${sig.authorities[0]})` : ''}${sig.hardenedRuntime ? ', hardened runtime' : ', no hardened runtime'}`);
     const ents = Object.keys(main?.entitlements ?? {});
     const sandboxed = main?.entitlements?.['com.apple.security.app-sandbox'] === true;
+    if (s.notarization) {
+        const n = s.notarization;
+        const stapled = n.stapled === undefined ? '' : n.stapled ? ', ticket stapled' : ', ticket not stapled';
+        if (n.error)
+            lines.push(`Gatekeeper     could not verify the signature: ${n.error}`);
+        else
+            lines.push(`Gatekeeper     ${n.assessment}${n.source ? ` (${n.source})` : ''}${stapled}`);
+    }
+    if (s.info.appStoreReceipt)
+        lines.push('App Store      yes (bundle has a Mac App Store receipt)');
     lines.push(`Sandbox        ${sandboxed ? 'yes' : 'no'}`);
     lines.push(`Entitlements   ${ents.length ? ents.join(', ') : 'none'}`);
     const privacy = Object.keys(s.info.privacyUsage);
     lines.push(`Privacy asks   ${privacy.length ? privacy.map((k) => k.replace(/^NS/, '').replace(/UsageDescription$/, '')).join(', ') : 'none'}`);
     lines.push(`URL schemes    ${s.info.urlSchemes.length ? s.info.urlSchemes.join(', ') : 'none'}`);
+    const sparkle = s.code.some((c) => c.kind === 'framework' && c.path.endsWith('/Sparkle.framework'));
     if (s.info.sparkleFeedUrl)
         lines.push(`Update feed    ${s.info.sparkleFeedUrl}`);
+    for (const [i, url] of (s.info.sparkleFeedsInCode ?? []).entries())
+        lines.push(`${i === 0 && !s.info.sparkleFeedUrl ? 'Update feed   ' : '              '} ${url} (in code)`);
+    if (sparkle && !s.info.sparkleFeedUrl && !s.info.sparkleFeedsInCode?.length) {
+        lines.push('Update feed    Sparkle is bundled, but no feed was found (it may be built at runtime)');
+    }
+    if (s.local?.sparkleFeedInDefaults)
+        lines.push(`               ${s.local.sparkleFeedInDefaults} (set in this Mac's preferences)`);
+    if (s.local && (s.local.sparkleAutomaticChecks !== undefined || s.local.sparkleAutomaticallyUpdate !== undefined)) {
+        const onOff = (v) => (v === undefined ? 'default' : v ? 'on' : 'off');
+        lines.push(`This Mac       automatic update checks ${onOff(s.local.sparkleAutomaticChecks)}, automatic install ${onOff(s.local.sparkleAutomaticallyUpdate)}`);
+    }
     const counts = new Map();
     for (const c of s.code)
         if (c.kind !== 'main')

package/dist/store.js

@@ -81,6 +81,27 @@ export class Store {
         await Promise.all(drop.map((d) => rm(d.file, { force: true })));
         return drop.length;
     }
+    get extensionsDir() {
+        return join(this.home, 'extensions');
+    }
+    async saveExtensions(snapshot) {
+        await mkdir(this.extensionsDir, { recursive: true });
+        const file = join(this.extensionsDir, `${snapshot.takenAt.replace(/[:.]/g, '-')}.json`);
+        await writeFile(file, JSON.stringify(snapshot));
+        const all = (await readdir(this.extensionsDir)).filter((n) => n.endsWith('.json')).sort();
+        await Promise.all(all.slice(0, Math.max(0, all.length - 10)).map((n) => rm(join(this.extensionsDir, n), { force: true })));
+        return file;
+    }
+    async latestExtensions() {
+        try {
+            const all = (await readdir(this.extensionsDir)).filter((n) => n.endsWith('.json')).sort();
+            const last = all.at(-1);
+            return last ? JSON.parse(await readFile(join(this.extensionsDir, last), 'utf8')) : undefined;
+        }
+        catch {
+            return undefined;
+        }
+    }
     async saveReport(bundleId, fromVersion, toVersion, ext, content) {
         const dir = join(this.reportsDir, safe(bundleId));
         await mkdir(dir, { recursive: true });

package/dist/util.js

@@ -37,3 +37,37 @@ export function stableJson(v) {
     }
     return JSON.stringify(v);
 }
+/**
+ * Line diff of two texts as "+ line" / "- line" entries (unchanged lines left out).
+ * Uses a longest-common-subsequence table, so keep inputs to a few thousand lines.
+ */
+export function lineDiff(before, after) {
+    const a = before.split('\n');
+    const b = after.split('\n');
+    if (a.length * b.length > 4_000_000)
+        return [`(too long to compare line by line: ${a.length} → ${b.length} lines)`];
+    const lcs = Array.from({ length: a.length + 1 }, () => new Array(b.length + 1).fill(0));
+    for (let i = a.length - 1; i >= 0; i--) {
+        for (let j = b.length - 1; j >= 0; j--) {
+            lcs[i][j] = a[i] === b[j] ? lcs[i + 1][j + 1] + 1 : Math.max(lcs[i + 1][j], lcs[i][j + 1]);
+        }
+    }
+    const out = [];
+    let i = 0;
+    let j = 0;
+    while (i < a.length && j < b.length) {
+        if (a[i] === b[j]) {
+            i++;
+            j++;
+        }
+        else if (lcs[i + 1][j] >= lcs[i][j + 1])
+            out.push(`- ${a[i++]}`);
+        else
+            out.push(`+ ${b[j++]}`);
+    }
+    while (i < a.length)
+        out.push(`- ${a[i++]}`);
+    while (j < b.length)
+        out.push(`+ ${b[j++]}`);
+    return out;
+}

package/dist/version.js

@@ -1,2 +1,2 @@
 export const TOOL_NAME = 'updiff';
-export const TOOL_VERSION = '0.1.1';
+export const TOOL_VERSION = '0.2.0';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@intincrab/updiff",
-  "version": "0.1.1",
+  "version": "0.2.0",
   "description": "See what a macOS app update actually changed: entitlements, privacy prompts, background items, helpers, bundled packages and hostnames.",
   "repository": {
     "type": "git",