@marinoscar/platform-api 0.0.0-stage → 0.1.0-next.4

package/dist/android-app/android-app.service.js

@@ -0,0 +1,227 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var AndroidAppService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AndroidAppService = exports.ANDROID_APP_TRUSTED_APPS_UPDATED_ACTION = void 0;
+exports.buildAssetLinks = buildAssetLinks;
+const common_1 = require("@nestjs/common");
+const android_app_1 = require("@marinoscar/platform-contract/android-app");
+const index_1 = require("../core/index");
+const index_2 = require("../settings/index");
+const device_sources_1 = require("./device-sources");
+// =============================================================================
+// AndroidAppService (#746; merged from EvoPath #279 and MemoriaHub)
+// =============================================================================
+//
+// The trusted Android apps: the `android_app` row of `system_settings`
+// (through the settings slice's row store, which validates and audits every
+// write), the Digital Asset Links statements built from it, the apps paired
+// devices report (every registered device source, merged), and the Web Push
+// subscription counts by platform (EvoPath).
+// =============================================================================
+/**
+ * The audit action of a trusted-apps write (both apps' string).
+ *
+ * @stability experimental
+ */
+exports.ANDROID_APP_TRUSTED_APPS_UPDATED_ACTION = 'android_app.trusted_apps.updated';
+const EMPTY = { trustedApps: [] };
+/**
+ * Builds the statement list `/.well-known/assetlinks.json` serves: one
+ * statement per package, listing every trusted fingerprint of it.
+ *
+ * @param apps - the trusted pairs.
+ * @returns the statements, in first-seen package order.
+ *
+ * @stability experimental
+ */
+function buildAssetLinks(apps) {
+    const byPackage = new Map();
+    for (const app of apps) {
+        const fingerprints = byPackage.get(app.packageName) ?? [];
+        const sha256 = (0, android_app_1.normalizeSha256Fingerprint)(app.sha256);
+        if (!fingerprints.includes(sha256))
+            fingerprints.push(sha256);
+        byPackage.set(app.packageName, fingerprints);
+    }
+    return [...byPackage.entries()].map(([packageName, fingerprints]) => ({
+        relation: [android_app_1.ASSET_LINKS_RELATION],
+        target: { namespace: 'android_app', package_name: packageName, sha256_cert_fingerprints: fingerprints },
+    }));
+}
+/**
+ * The trusted apps, the assetlinks statements, the reported apps and the
+ * push counts. Injected by the controllers, the release service and the
+ * doctor checks.
+ *
+ * @stability experimental
+ */
+let AndroidAppService = AndroidAppService_1 = class AndroidAppService {
+    prisma;
+    rows;
+    logger = new common_1.Logger(AndroidAppService_1.name);
+    constructor(prisma, rows) {
+        this.prisma = prisma;
+        this.rows = rows;
+    }
+    /**
+     * The trusted list. A stored value that does not validate reads as empty
+     * (logged), so a hand-edited row never breaks the public assetlinks route.
+     *
+     * @returns the trusted pairs.
+     */
+    async getTrustedApps() {
+        const snapshot = await this.rows.read(android_app_1.ANDROID_APP_SETTINGS_KEY, android_app_1.androidAppSettingsValueSchema, EMPTY);
+        return snapshot.value.trustedApps;
+    }
+    /**
+     * The Digital Asset Links statements for the current list.
+     *
+     * @returns the statements (`[]` when nothing is trusted).
+     */
+    async getAssetLinks() {
+        return buildAssetLinks(await this.getTrustedApps());
+    }
+    /**
+     * What every registered device source reports, merged and marked trusted
+     * or not. A failing source is logged and skipped: one broken native
+     * capability never hides the others.
+     *
+     * @param trusted - the trusted list (read when omitted).
+     * @returns the merged list, most devices first.
+     */
+    async getReportedApps(trusted) {
+        const list = trusted ?? (await this.getTrustedApps());
+        const rows = [];
+        for (const source of device_sources_1.androidDeviceSourceRegistry.list()) {
+            try {
+                rows.push(...(await source.reportedApps()));
+            }
+            catch (error) {
+                this.logger.warn(`Android device source "${source.id}" failed: ${error instanceof Error ? error.message : String(error)}`);
+            }
+        }
+        return (0, device_sources_1.mergeReportedApps)(rows, list);
+    }
+    /**
+     * Web Push subscription counts by platform (EvoPath).
+     *
+     * @returns the counts.
+     */
+    async getPushSubscriptionCounts() {
+        const [byPlatform, androidUsers] = await Promise.all([
+            this.prisma.pushSubscription.groupBy({ by: ['platform'], _count: { _all: true } }),
+            this.prisma.pushSubscription.groupBy({ by: ['userId'], where: { platform: 'android_app' } }),
+        ]);
+        let androidApp = 0;
+        let browser = 0;
+        for (const row of byPlatform) {
+            const count = row._count?._all ?? 0;
+            if (row.platform === 'android_app')
+                androidApp += count;
+            else
+                browser += count;
+        }
+        return { androidApp, browser, androidAppUsers: androidUsers.length };
+    }
+    /**
+     * The admin view.
+     *
+     * @returns trusted, reported, the statements and the push counts.
+     */
+    async describe() {
+        const trustedApps = await this.getTrustedApps();
+        const [reportedApps, pushSubscriptions] = await Promise.all([
+            this.getReportedApps(trustedApps),
+            this.getPushSubscriptionCounts(),
+        ]);
+        return { trustedApps, reportedApps, assetLinks: buildAssetLinks(trustedApps), pushSubscriptions };
+    }
+    /**
+     * Replaces the list (already validated and normalised by the pipe).
+     *
+     * @param input - the new list.
+     * @param userId - the actor.
+     * @returns the saved state.
+     */
+    async replace(input, userId) {
+        const before = await this.getTrustedApps();
+        await this.save(before, input.trustedApps, userId);
+        return this.describe();
+    }
+    /**
+     * Adds one pair when absent (making a release current trusts its signing
+     * key, both apps' rule). Never throws: returns whether it was added, false
+     * when already trusted, invalid, or the list is full (logged).
+     *
+     * @param app - the pair.
+     * @param userId - the actor.
+     * @returns whether the pair was added.
+     */
+    async ensureTrusted(app, userId) {
+        try {
+            const parsed = android_app_1.trustedAndroidAppSchema.safeParse(app);
+            if (!parsed.success) {
+                this.logger.warn(`Not trusting ${String(app?.packageName)}: not a valid (packageName, sha256) pair.`);
+                return false;
+            }
+            const before = await this.getTrustedApps();
+            if (this.isTrusted(before, parsed.data))
+                return false;
+            if (before.length >= android_app_1.MAX_TRUSTED_ANDROID_APPS) {
+                this.logger.warn(`Not trusting ${parsed.data.packageName}: the trusted apps list is full (${android_app_1.MAX_TRUSTED_ANDROID_APPS}). Remove an entry first.`);
+                return false;
+            }
+            await this.save(before, [...before, parsed.data], userId);
+            return true;
+        }
+        catch (error) {
+            this.logger.error(`Could not trust ${String(app?.packageName)}: ${error instanceof Error ? error.message : String(error)}`);
+            return false;
+        }
+    }
+    /**
+     * Whether a pair is in the list.
+     *
+     * @param list - the trusted list.
+     * @param app - the pair, any fingerprint form.
+     * @returns true when trusted.
+     */
+    isTrusted(list, app) {
+        const key = (0, android_app_1.trustedAppKey)(app.packageName, app.sha256);
+        return list.some((entry) => (0, android_app_1.trustedAppKey)(entry.packageName, entry.sha256) === key);
+    }
+    async save(before, next, userId) {
+        const beforeKeys = new Set(before.map((app) => (0, android_app_1.trustedAppKey)(app.packageName, app.sha256)));
+        const nextKeys = new Set(next.map((app) => (0, android_app_1.trustedAppKey)(app.packageName, app.sha256)));
+        await this.rows.write(android_app_1.ANDROID_APP_SETTINGS_KEY, { trustedApps: [...next] }, {
+            actorId: userId,
+            schema: android_app_1.androidAppSettingsValueSchema,
+            auditAction: exports.ANDROID_APP_TRUSTED_APPS_UPDATED_ACTION,
+            auditMeta: {
+                count: next.length,
+                added: next.filter((app) => !beforeKeys.has((0, android_app_1.trustedAppKey)(app.packageName, app.sha256))),
+                removed: before.filter((app) => !nextKeys.has((0, android_app_1.trustedAppKey)(app.packageName, app.sha256))),
+            },
+        });
+        this.logger.log(`Trusted Android apps saved by user ${userId} (${next.length} app(s))`);
+    }
+};
+exports.AndroidAppService = AndroidAppService;
+exports.AndroidAppService = AndroidAppService = AndroidAppService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, common_1.Inject)(index_1.PLATFORM_PRISMA)),
+    __metadata("design:paramtypes", [Object, index_2.SystemSettingsRowStore])
+], AndroidAppService);
+//# sourceMappingURL=android-app.service.js.map

package/dist/android-app/android-app.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"android-app.service.js","sourceRoot":"","sources":["../../src/android-app/android-app.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAoDA,0CAYC;AAhED,2CAA4D;AAC5D,2EAemD;AAEnD,yCAAgD;AAChD,6CAA2D;AAE3D,qDAA+G;AAE/G,gFAAgF;AAChF,oEAAoE;AACpE,gFAAgF;AAChF,EAAE;AACF,uEAAuE;AACvE,4EAA4E;AAC5E,4EAA4E;AAC5E,4EAA4E;AAC5E,6CAA6C;AAC7C,gFAAgF;AAEhF;;;;GAIG;AACU,QAAA,uCAAuC,GAAG,kCAAkC,CAAC;AAE1F,MAAM,KAAK,GAA4B,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;AAE3D;;;;;;;;GAQG;AACH,SAAgB,eAAe,CAAC,IAAkC;IAChE,MAAM,SAAS,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC9C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,YAAY,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;QAC1D,MAAM,MAAM,GAAG,IAAA,wCAA0B,EAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACtD,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9D,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,CAAC,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC;QACpE,QAAQ,EAAE,CAAC,kCAAoB,CAAC;QAChC,MAAM,EAAE,EAAE,SAAS,EAAE,aAAsB,EAAE,YAAY,EAAE,WAAW,EAAE,wBAAwB,EAAE,YAAY,EAAE;KACjH,CAAC,CAAC,CAAC;AACN,CAAC;AAED;;;;;;GAMG;AAEI,IAAM,iBAAiB,yBAAvB,MAAM,iBAAiB;IAIgB;IACzB;IAJF,MAAM,GAAG,IAAI,eAAM,CAAC,mBAAiB,CAAC,IAAI,CAAC,CAAC;IAE7D,YAC4C,MAAwB,EACjD,IAA4B;QADH,WAAM,GAAN,MAAM,CAAkB;QACjD,SAAI,GAAJ,IAAI,CAAwB;IAC5C,CAAC;IAEJ;;;;;OAKG;IACH,KAAK,CAAC,cAAc;QAClB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,sCAAwB,EAAE,2CAA6B,EAAE,KAAK,CAAC,CAAC;QACtG,OAAO,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC;IACpC,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,aAAa;QACjB,OAAO,eAAe,CAAC,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;IACtD,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,eAAe,CAAC,OAAsC;QAC1D,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;QACtD,MAAM,IAAI,GAA6B,EAAE,CAAC;QAC1C,KAAK,MAAM,MAAM,IAAI,4CAA2B,CAAC,IAAI,EAAE,EAAE,CAAC;YACxD,IAAI,CAAC;gBACH,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;YAC9C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0BAA0B,MAAM,CAAC,EAAE,aAAa,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC7H,CAAC;QACH,CAAC;QACD,OAAO,IAAA,kCAAiB,EAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACvC,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,yBAAyB;QAC7B,MAAM,CAAC,UAAU,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACnD,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;YAClF,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,aAAa,EAAE,EAAE,CAAC;SAC7F,CAAC,CAAC;QACH,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAI,GAAG,CAAC,MAAwC,EAAE,IAAI,IAAI,CAAC,CAAC;YACvE,IAAI,GAAG,CAAC,QAAQ,KAAK,aAAa;gBAAE,UAAU,IAAI,KAAK,CAAC;;gBACnD,OAAO,IAAI,KAAK,CAAC;QACxB,CAAC;QACD,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,eAAe,EAAE,YAAY,CAAC,MAAM,EAAE,CAAC;IACvE,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,QAAQ;QACZ,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAChD,MAAM,CAAC,YAAY,EAAE,iBAAiB,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC1D,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC;YACjC,IAAI,CAAC,yBAAyB,EAAE;SACjC,CAAC,CAAC;QACH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,eAAe,CAAC,WAAW,CAAC,EAAE,iBAAiB,EAAE,CAAC;IACpG,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,OAAO,CAAC,KAA4B,EAAE,MAAc;QACxD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAC3C,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QACnD,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;IACzB,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,aAAa,CAAC,GAA4C,EAAE,MAAc;QAC9E,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,qCAAuB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACtD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,MAAM,CAAC,GAAG,EAAE,WAAW,CAAC,2CAA2C,CAAC,CAAC;gBACtG,OAAO,KAAK,CAAC;YACf,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;YAC3C,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC;gBAAE,OAAO,KAAK,CAAC;YACtD,IAAI,MAAM,CAAC,MAAM,IAAI,sCAAwB,EAAE,CAAC;gBAC9C,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,gBAAgB,MAAM,CAAC,IAAI,CAAC,WAAW,oCAAoC,sCAAwB,2BAA2B,CAC/H,CAAC;gBACF,OAAO,KAAK,CAAC;YACf,CAAC;YACD,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,GAAG,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;YAC1D,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,MAAM,CAAC,GAAG,EAAE,WAAW,CAAC,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC5H,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACH,SAAS,CAAC,IAAkC,EAAE,GAA4C;QACxF,MAAM,GAAG,GAAG,IAAA,2BAAa,EAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QACvD,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAA,2BAAa,EAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC;IACtF,CAAC;IAEO,KAAK,CAAC,IAAI,CAAC,MAAoC,EAAE,IAAkC,EAAE,MAAc;QACzG,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAA,2BAAa,EAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC5F,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAA,2BAAa,EAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACxF,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACnB,sCAAwB,EACxB,EAAE,WAAW,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,EAC1B;YACE,OAAO,EAAE,MAAM;YACf,MAAM,EAAE,2CAA6B;YACrC,WAAW,EAAE,+CAAuC;YACpD,SAAS,EAAE;gBACT,KAAK,EAAE,IAAI,CAAC,MAAM;gBAClB,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAA,2BAAa,EAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;gBACxF,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAA,2BAAa,EAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;aAC3F;SACF,CACF,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,sCAAsC,MAAM,KAAK,IAAI,CAAC,MAAM,UAAU,CAAC,CAAC;IAC1F,CAAC;CACF,CAAA;AA/JY,8CAAiB;4BAAjB,iBAAiB;IAD7B,IAAA,mBAAU,GAAE;IAKR,WAAA,IAAA,eAAM,EAAC,uBAAe,CAAC,CAAA;6CACD,8BAAsB;GALpC,iBAAiB,CA+J7B"}

package/dist/android-app/asset-links.controller.d.ts

@@ -0,0 +1,19 @@
+import type { FastifyReply } from 'fastify';
+import { AndroidAppService } from './android-app.service';
+/**
+ * The public Digital Asset Links statement list.
+ *
+ * @stability experimental
+ */
+export declare class AssetLinksController {
+    private readonly androidApp;
+    private readonly logger;
+    constructor(androidApp: AndroidAppService);
+    /**
+     * Serves the statements, bare.
+     *
+     * @param reply - the Fastify reply (bypasses the envelope interceptor).
+     */
+    getAssetLinks(reply: FastifyReply): Promise<void>;
+}
+//# sourceMappingURL=asset-links.controller.d.ts.map

package/dist/android-app/asset-links.controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"asset-links.controller.d.ts","sourceRoot":"","sources":["../../src/android-app/asset-links.controller.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAK5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAgB1D;;;;GAIG;AACH,qBAGa,oBAAoB;IAGnB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAFvC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAyC;gBAEnC,UAAU,EAAE,iBAAiB;IAE1D;;;;OAIG;IAcG,aAAa,CAAQ,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;CAS/D"}

package/dist/android-app/asset-links.controller.js

@@ -0,0 +1,87 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var AssetLinksController_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AssetLinksController = void 0;
+const common_1 = require("@nestjs/common");
+const swagger_1 = require("@nestjs/swagger");
+const android_app_1 = require("@marinoscar/platform-contract/android-app");
+const index_1 = require("../core/index");
+const index_2 = require("../identity/index");
+const android_app_service_1 = require("./android-app.service");
+// =============================================================================
+//   GET /api/well-known/assetlinks.json   PUBLIC, deliberately
+//
+// Chrome (deciding whether a Trusted Web Activity may hide its URL bar) and
+// Google's Digital Asset Links verifier fetch `/.well-known/assetlinks.json`
+// unauthenticated, so this route is `@Public()` and reachable during a
+// maintenance window. It is read-only and serves only what the trusted list
+// already makes public (package names and certificate fingerprints, which
+// every installed APK discloses). The edge proxy maps the well-known path
+// here (`@marinoscar/platform-infra` nginx snippet `android-assetlinks.conf`).
+// The body is a bare JSON array, not the `{ data }` envelope: the verifier
+// requires exactly that shape.
+// =============================================================================
+/**
+ * The public Digital Asset Links statement list.
+ *
+ * @stability experimental
+ */
+let AssetLinksController = AssetLinksController_1 = class AssetLinksController {
+    androidApp;
+    logger = new common_1.Logger(AssetLinksController_1.name);
+    constructor(androidApp) {
+        this.androidApp = androidApp;
+    }
+    /**
+     * Serves the statements, bare.
+     *
+     * @param reply - the Fastify reply (bypasses the envelope interceptor).
+     */
+    async getAssetLinks(reply) {
+        const statements = await this.androidApp.getAssetLinks();
+        this.logger.debug(`assetlinks.json served (${statements.length} statement(s))`);
+        await reply
+            .status(200)
+            .header('Content-Type', 'application/json; charset=utf-8')
+            .header('Cache-Control', android_app_1.ASSET_LINKS_CACHE_CONTROL)
+            .send(JSON.stringify(statements));
+    }
+};
+exports.AssetLinksController = AssetLinksController;
+__decorate([
+    (0, common_1.Get)('assetlinks.json'),
+    (0, index_2.Public)(),
+    (0, swagger_1.ApiOperation)({
+        summary: 'Digital Asset Links statement list (public)',
+        description: 'Served at `/.well-known/assetlinks.json` by the edge proxy. A bare JSON array (no `{ data }` envelope) with one ' +
+            'statement per trusted Android package: `{ "relation": ["delegate_permission/common.handle_all_urls"], ' +
+            '"target": { "namespace": "android_app", "package_name": "<package>", "sha256_cert_fingerprints": ["AA:BB:..."] } }`. ' +
+            '`[]` when no app is trusted. `Cache-Control: public, max-age=300`. Deliberately public (Chrome and the ' +
+            'verifier fetch it unauthenticated) and reachable during a maintenance window.',
+    }),
+    (0, swagger_1.ApiProduces)('application/json'),
+    (0, swagger_1.ApiResponse)({ status: 200, description: 'The statement list (a bare JSON array)' }),
+    __param(0, (0, common_1.Res)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], AssetLinksController.prototype, "getAssetLinks", null);
+exports.AssetLinksController = AssetLinksController = AssetLinksController_1 = __decorate([
+    (0, swagger_1.ApiTags)('Android App'),
+    (0, common_1.Controller)('well-known'),
+    (0, index_1.AllowDuringMaintenance)(),
+    __metadata("design:paramtypes", [android_app_service_1.AndroidAppService])
+], AssetLinksController);
+//# sourceMappingURL=asset-links.controller.js.map

package/dist/android-app/asset-links.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"asset-links.controller.js","sourceRoot":"","sources":["../../src/android-app/asset-links.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAA8D;AAC9D,6CAAkF;AAElF,2EAAsF;AAEtF,yCAAuD;AACvD,6CAA2C;AAC3C,+DAA0D;AAE1D,gFAAgF;AAChF,+DAA+D;AAC/D,EAAE;AACF,4EAA4E;AAC5E,6EAA6E;AAC7E,uEAAuE;AACvE,4EAA4E;AAC5E,0EAA0E;AAC1E,0EAA0E;AAC1E,+EAA+E;AAC/E,2EAA2E;AAC3E,+BAA+B;AAC/B,gFAAgF;AAEhF;;;;GAIG;AAII,IAAM,oBAAoB,4BAA1B,MAAM,oBAAoB;IAGF;IAFZ,MAAM,GAAG,IAAI,eAAM,CAAC,sBAAoB,CAAC,IAAI,CAAC,CAAC;IAEhE,YAA6B,UAA6B;QAA7B,eAAU,GAAV,UAAU,CAAmB;IAAG,CAAC;IAE9D;;;;OAIG;IAcG,AAAN,KAAK,CAAC,aAAa,CAAQ,KAAmB;QAC5C,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,EAAE,CAAC;QACzD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,UAAU,CAAC,MAAM,gBAAgB,CAAC,CAAC;QAChF,MAAM,KAAK;aACR,MAAM,CAAC,GAAG,CAAC;aACX,MAAM,CAAC,cAAc,EAAE,iCAAiC,CAAC;aACzD,MAAM,CAAC,eAAe,EAAE,uCAAyB,CAAC;aAClD,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;IACtC,CAAC;CACF,CAAA;AAhCY,oDAAoB;AAuBzB;IAbL,IAAA,YAAG,EAAC,iBAAiB,CAAC;IACtB,IAAA,cAAM,GAAE;IACR,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,6CAA6C;QACtD,WAAW,EACT,kHAAkH;YAClH,wGAAwG;YACxG,uHAAuH;YACvH,yGAAyG;YACzG,+EAA+E;KAClF,CAAC;IACD,IAAA,qBAAW,EAAC,kBAAkB,CAAC;IAC/B,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,wCAAwC,EAAE,CAAC;IAC/D,WAAA,IAAA,YAAG,GAAE,CAAA;;;;yDAQzB;+BA/BU,oBAAoB;IAHhC,IAAA,iBAAO,EAAC,aAAa,CAAC;IACtB,IAAA,mBAAU,EAAC,YAAY,CAAC;IACxB,IAAA,8BAAsB,GAAE;qCAIkB,uCAAiB;GAH/C,oBAAoB,CAgChC"}

package/dist/android-app/data/android-app-db.d.ts

@@ -0,0 +1,117 @@
+/**
+ * Prisma's arguments for one delegate call, untyped on purpose (the app's
+ * client checks them at run time).
+ *
+ * @stability experimental
+ */
+export type AndroidAppQueryArgs = any;
+/**
+ * An `android_app_releases` row.
+ *
+ * @stability experimental
+ */
+export interface AndroidAppReleaseRow {
+    /** Primary key. */
+    id: string;
+    /** The application id inside the APK. */
+    packageName: string;
+    /** The human version. */
+    versionName: string;
+    /** The build number. */
+    versionCode: number;
+    /** The signing certificate fingerprint (upper-case colon pairs). */
+    signingSha256: string;
+    /** SHA-256 of the APK bytes, 64 lower-case hex digits. */
+    fileSha256: string;
+    /** The APK size. BigInt: returned as a decimal string. */
+    sizeBytes: bigint;
+    /** The object key, under `android-releases/`. */
+    storageKey: string;
+    /** The storage provider the bytes were written to, or null. */
+    storageProvider: string | null;
+    /** The bucket the bytes were written to, or null. */
+    bucket: string | null;
+    /** Release notes, or null. */
+    notes: string | null;
+    /** Whether users are offered it (at most one row: the raw-SQL index). */
+    isCurrent: boolean;
+    /** The uploader, or null once that account is gone. */
+    uploadedById: string | null;
+    /** Upload time. */
+    createdAt: Date;
+}
+/**
+ * What a batch write (`updateMany`, `deleteMany`) returns.
+ *
+ * @stability experimental
+ */
+export interface AndroidAppBatchResult {
+    /** Rows affected. */
+    count: number;
+}
+/**
+ * One delegate of the composed client, as the slice calls it.
+ *
+ * @stability experimental
+ */
+export interface AndroidAppDelegate<Row> {
+    /** Prisma `findUnique`. */
+    findUnique(args: AndroidAppQueryArgs): Promise<Row | null>;
+    /** Prisma `findFirst`. */
+    findFirst(args?: AndroidAppQueryArgs): Promise<Row | null>;
+    /** Prisma `findMany`. */
+    findMany(args?: AndroidAppQueryArgs): Promise<Row[]>;
+    /** Prisma `create`. */
+    create(args: AndroidAppQueryArgs): Promise<Row>;
+    /** Prisma `update`. */
+    update(args: AndroidAppQueryArgs): Promise<Row>;
+    /** Prisma `updateMany`. */
+    updateMany(args: AndroidAppQueryArgs): Promise<AndroidAppBatchResult>;
+    /** Prisma `deleteMany`. */
+    deleteMany(args?: AndroidAppQueryArgs): Promise<AndroidAppBatchResult>;
+    /** Prisma `count`. */
+    count(args?: AndroidAppQueryArgs): Promise<number>;
+    /** Prisma `groupBy`. */
+    groupBy(args: AndroidAppQueryArgs): Promise<Array<{
+        [field: string]: any;
+    }>>;
+}
+/**
+ * The client inside a transaction.
+ *
+ * @stability experimental
+ */
+export interface AndroidAppTx {
+    /** `android_app_releases`. */
+    androidAppRelease: AndroidAppDelegate<AndroidAppReleaseRow>;
+    /** `users` (identity fragment): the uploader and the download link's user. */
+    user: AndroidAppDelegate<any>;
+    /** `push_subscriptions` (notifications fragment): the counts and the test notification. */
+    pushSubscription: AndroidAppDelegate<any>;
+}
+/**
+ * The client the slice injects under `PLATFORM_PRISMA`.
+ *
+ * @stability experimental
+ */
+export interface AndroidAppPrisma extends AndroidAppTx {
+    /** Prisma's interactive transaction. */
+    $transaction<T>(fn: (tx: AndroidAppTx) => Promise<T>, options?: {
+        maxWait?: number;
+        timeout?: number;
+    }): Promise<T>;
+}
+/**
+ * Whether `error` is Prisma's unique violation (`P2002`), optionally on one
+ * named index. Structural (no generated client): reads `code`, the driver
+ * adapter's `meta.driverAdapterError.cause` (Prisma 7 with an adapter), then
+ * `meta.target`, then the message.
+ *
+ * @param error - anything thrown by a Prisma call.
+ * @param indexName - the index or constraint to match; omitted, any P2002.
+ * @returns true when it is that violation.
+ *
+ * @stability experimental
+ */
+export declare function isUniqueViolation(error: unknown, indexName?: string): boolean;
+//# sourceMappingURL=android-app-db.d.ts.map

package/dist/android-app/data/android-app-db.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"android-app-db.d.ts","sourceRoot":"","sources":["../../../src/android-app/data/android-app-db.ts"],"names":[],"mappings":"AAWA;;;;;GAKG;AACH,MAAM,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAEtC;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,mBAAmB;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,yCAAyC;IACzC,WAAW,EAAE,MAAM,CAAC;IACpB,yBAAyB;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,wBAAwB;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,oEAAoE;IACpE,aAAa,EAAE,MAAM,CAAC;IACtB,0DAA0D;IAC1D,UAAU,EAAE,MAAM,CAAC;IACnB,0DAA0D;IAC1D,SAAS,EAAE,MAAM,CAAC;IAClB,iDAAiD;IACjD,UAAU,EAAE,MAAM,CAAC;IACnB,+DAA+D;IAC/D,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,qDAAqD;IACrD,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,8BAA8B;IAC9B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,yEAAyE;IACzE,SAAS,EAAE,OAAO,CAAC;IACnB,uDAAuD;IACvD,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,mBAAmB;IACnB,SAAS,EAAE,IAAI,CAAC;CACjB;AAED;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC,qBAAqB;IACrB,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;;GAIG;AACH,MAAM,WAAW,kBAAkB,CAAC,GAAG;IACrC,2BAA2B;IAC3B,UAAU,CAAC,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;IAC3D,0BAA0B;IAC1B,SAAS,CAAC,IAAI,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;IAC3D,yBAAyB;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACrD,uBAAuB;IACvB,MAAM,CAAC,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAChD,uBAAuB;IACvB,MAAM,CAAC,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAChD,2BAA2B;IAC3B,UAAU,CAAC,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACtE,2BAA2B;IAC3B,UAAU,CAAC,IAAI,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACvE,sBAAsB;IACtB,KAAK,CAAC,IAAI,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACnD,wBAAwB;IACxB,OAAO,CAAC,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,KAAK,CAAC;QAAE,CAAC,KAAK,EAAE,MAAM,GAAG,GAAG,CAAA;KAAE,CAAC,CAAC,CAAC;CAC9E;AAED;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,8BAA8B;IAC9B,iBAAiB,EAAE,kBAAkB,CAAC,oBAAoB,CAAC,CAAC;IAC5D,8EAA8E;IAC9E,IAAI,EAAE,kBAAkB,CAAC,GAAG,CAAC,CAAC;IAC9B,2FAA2F;IAC3F,gBAAgB,EAAE,kBAAkB,CAAC,GAAG,CAAC,CAAC;CAC3C;AAED;;;;GAIG;AACH,MAAM,WAAW,gBAAiB,SAAQ,YAAY;IACpD,wCAAwC;IACxC,YAAY,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,YAAY,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;CACrH;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAe7E"}

package/dist/android-app/data/android-app-db.js

@@ -0,0 +1,48 @@
+"use strict";
+// =============================================================================
+// The data the android-app slice reads and writes, structurally (issue #746)
+// =============================================================================
+//
+// The slice never imports a generated Prisma client (the package rule): the
+// client arrives through the core port `PLATFORM_PRISMA` and is seen as
+// {@link AndroidAppPrisma}. Delegate arguments are untyped on purpose, so an
+// app's generated client is assignable as it is. The row mirrors the
+// `android-app` fragment of `@marinoscar/platform-db` column for column.
+// =============================================================================
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isUniqueViolation = isUniqueViolation;
+/**
+ * Whether `error` is Prisma's unique violation (`P2002`), optionally on one
+ * named index. Structural (no generated client): reads `code`, the driver
+ * adapter's `meta.driverAdapterError.cause` (Prisma 7 with an adapter), then
+ * `meta.target`, then the message.
+ *
+ * @param error - anything thrown by a Prisma call.
+ * @param indexName - the index or constraint to match; omitted, any P2002.
+ * @returns true when it is that violation.
+ *
+ * @stability experimental
+ */
+function isUniqueViolation(error, indexName) {
+    const candidate = error;
+    if (!candidate || candidate.code !== 'P2002')
+        return false;
+    if (indexName === undefined)
+        return true;
+    const meta = candidate.meta ?? {};
+    const cause = meta.driverAdapterError?.cause;
+    if (cause) {
+        const constraint = cause.constraint;
+        if (constraint?.index === indexName)
+            return true;
+        if (typeof cause.originalMessage === 'string' && cause.originalMessage.includes(indexName))
+            return true;
+    }
+    const target = meta.target;
+    if (typeof target === 'string' && target === indexName)
+        return true;
+    if (Array.isArray(target) && target.some((entry) => String(entry) === indexName))
+        return true;
+    return typeof candidate.message === 'string' && candidate.message.includes(indexName);
+}
+//# sourceMappingURL=android-app-db.js.map

package/dist/android-app/data/android-app-db.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"android-app-db.js","sourceRoot":"","sources":["../../../src/android-app/data/android-app-db.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,6EAA6E;AAC7E,gFAAgF;AAChF,EAAE;AACF,4EAA4E;AAC5E,wEAAwE;AACxE,6EAA6E;AAC7E,qEAAqE;AACrE,yEAAyE;AACzE,gFAAgF;;AAsHhF,8CAeC;AA3BD;;;;;;;;;;;GAWG;AACH,SAAgB,iBAAiB,CAAC,KAAc,EAAE,SAAkB;IAClE,MAAM,SAAS,GAAG,KAAqF,CAAC;IACxG,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3D,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,IAAI,EAAE,CAAC;IAClC,MAAM,KAAK,GAAI,IAAI,CAAC,kBAAsE,EAAE,KAAK,CAAC;IAClG,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,UAAU,GAAG,KAAK,CAAC,UAA6C,CAAC;QACvE,IAAI,UAAU,EAAE,KAAK,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACjD,IAAI,OAAO,KAAK,CAAC,eAAe,KAAK,QAAQ,IAAI,KAAK,CAAC,eAAe,CAAC,QAAQ,CAAC,SAAS,CAAC;YAAE,OAAO,IAAI,CAAC;IAC1G,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC3B,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACpE,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9F,OAAO,OAAO,SAAS,CAAC,OAAO,KAAK,QAAQ,IAAI,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;AACxF,CAAC"}

package/dist/android-app/device-sources.d.ts

@@ -0,0 +1,72 @@
+import { type Registry } from '../core/index';
+import type { ReportedAndroidApp, TrustedAndroidApp } from '@marinoscar/platform-contract/android-app';
+/**
+ * One (package, signing key) pair a device source saw on its paired devices.
+ *
+ * @stability experimental
+ */
+export interface AndroidDeviceSourceRow {
+    /** The application id the devices run. */
+    packageName: string;
+    /** The signing fingerprint they reported, in any accepted form. */
+    signingSha256: string;
+    /** How many active devices report the pair. */
+    deviceCount: number;
+    /** The latest sighting, or null. */
+    lastSeenAt: Date | null;
+}
+/**
+ * A native capability's paired devices, as the Android app page and the
+ * doctor see them. Read-only: a source never writes.
+ *
+ * @stability experimental
+ */
+export interface AndroidDeviceSource {
+    /** Stable id, lower kebab case (`health-sync`). */
+    readonly id: string;
+    /** Groups of (packageName, signingSha256) seen on active paired devices, with counts. */
+    reportedApps(): Promise<AndroidDeviceSourceRow[]>;
+    /**
+     * How many active devices run `packageName` with a build older than
+     * `versionCode`. Optional: a source that does not record the installed
+     * build omits it, and the releases doctor check counts none behind for it.
+     */
+    devicesBehind?(packageName: string, versionCode: number): Promise<number>;
+}
+/**
+ * Every registered device source, in registration order.
+ *
+ * @stability experimental
+ */
+export declare const androidDeviceSourceRegistry: Registry<AndroidDeviceSource>;
+/**
+ * Registers a device source: the seam a native capability (EvoPath's Health
+ * Connect sync, MemoriaHub's media sync) plugs its paired devices in through.
+ * Call it from the app's manifest, before `AndroidAppModule` composes.
+ *
+ * @param source - the source; its id must be unique.
+ * @throws RegistryError on a duplicate or malformed source, or after the registries froze.
+ *
+ * @example
+ * ```ts
+ * registerAndroidDeviceSource({ id: 'health-sync', reportedApps: () => healthSyncDevices.reportedApps() });
+ * ```
+ *
+ * @extensionPoint registry
+ * @stability experimental
+ */
+export declare function registerAndroidDeviceSource(source: AndroidDeviceSource): void;
+/**
+ * Merges every source's rows by `trustedAppKey(packageName, sha256)`: counts
+ * add, the latest sighting wins. Sorted as both apps did: most devices first,
+ * then package name, then fingerprint. Untrusted pairs stay listed, so an
+ * administrator can trust them.
+ *
+ * @param rows - every source's rows, concatenated.
+ * @param trusted - the trusted list, to mark each pair.
+ * @returns the merged, sorted list.
+ *
+ * @stability experimental
+ */
+export declare function mergeReportedApps(rows: readonly AndroidDeviceSourceRow[], trusted: readonly TrustedAndroidApp[]): ReportedAndroidApp[];
+//# sourceMappingURL=device-sources.d.ts.map

package/dist/android-app/device-sources.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"device-sources.d.ts","sourceRoot":"","sources":["../../src/android-app/device-sources.ts"],"names":[],"mappings":"AAaA,OAAO,EAAkB,KAAK,QAAQ,EAAE,MAAM,eAAe,CAAC;AAE9D,OAAO,KAAK,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,2CAA2C,CAAC;AAEvG;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,0CAA0C;IAC1C,WAAW,EAAE,MAAM,CAAC;IACpB,mEAAmE;IACnE,aAAa,EAAE,MAAM,CAAC;IACtB,+CAA+C;IAC/C,WAAW,EAAE,MAAM,CAAC;IACpB,oCAAoC;IACpC,UAAU,EAAE,IAAI,GAAG,IAAI,CAAC;CACzB;AAED;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IAClC,mDAAmD;IACnD,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,yFAAyF;IACzF,YAAY,IAAI,OAAO,CAAC,sBAAsB,EAAE,CAAC,CAAC;IAClD;;;;OAIG;IACH,aAAa,CAAC,CAAC,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAC3E;AAED;;;;GAIG;AACH,eAAO,MAAM,2BAA2B,EAAE,QAAQ,CAAC,mBAAmB,CAUpE,CAAC;AAEH;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,mBAAmB,GAAG,IAAI,CAE7E;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,SAAS,sBAAsB,EAAE,EACvC,OAAO,EAAE,SAAS,iBAAiB,EAAE,GACpC,kBAAkB,EAAE,CA0BtB"}