@otakit/capacitor-updater 1.0.0

package/ios/Sources/UpdaterPlugin/ZipUtils.swift

@@ -0,0 +1,90 @@
+import Foundation
+import ZIPFoundation
+
+enum ZipUtilsError: Error {
+  case invalidZip
+  case pathTraversal(String)
+  case absolutePath(String)
+  case symlinkNotAllowed(String)
+  case unsupportedEntry(String)
+  case fileCountExceeded(Int)
+  case totalSizeExceeded(UInt64)
+}
+
+final class ZipUtils {
+  private let maxFiles = 10_000
+  private let maxTotalSize: UInt64 = 500_000_000 // 500 MB
+
+  func extractSecurely(zipURL: URL, to destination: URL) throws {
+    guard let archive = Archive(url: zipURL, accessMode: .read) else {
+      throw ZipUtilsError.invalidZip
+    }
+
+    let destinationPath = destination.standardizedFileURL.path
+    let destinationPrefix =
+      destinationPath.hasSuffix("/") ? destinationPath : "\(destinationPath)/"
+
+    var fileCount = 0
+    var totalSize: UInt64 = 0
+
+    for entry in archive {
+      if entry.path.hasPrefix("/") {
+        throw ZipUtilsError.absolutePath(entry.path)
+      }
+      if entry.path.contains("..") {
+        throw ZipUtilsError.pathTraversal(entry.path)
+      }
+      if entry.type == .symlink {
+        throw ZipUtilsError.symlinkNotAllowed(entry.path)
+      }
+      if entry.type != .directory && entry.type != .file {
+        throw ZipUtilsError.unsupportedEntry(entry.path)
+      }
+
+      let outputURL = destination
+        .appendingPathComponent(entry.path)
+        .standardizedFileURL
+      let outputPath = outputURL.path
+      if !(outputPath == destinationPath || outputPath.hasPrefix(destinationPrefix))
+      {
+        throw ZipUtilsError.pathTraversal(entry.path)
+      }
+
+      if entry.type == .file {
+        fileCount += 1
+        if fileCount > maxFiles {
+          throw ZipUtilsError.fileCountExceeded(fileCount)
+        }
+        totalSize += entry.uncompressedSize
+        if totalSize > maxTotalSize {
+          throw ZipUtilsError.totalSizeExceeded(totalSize)
+        }
+      }
+    }
+
+    try FileManager.default.createDirectory(
+      at: destination,
+      withIntermediateDirectories: true
+    )
+
+    for entry in archive {
+      let outputURL = destination.appendingPathComponent(entry.path)
+      switch entry.type {
+      case .directory:
+        try FileManager.default.createDirectory(
+          at: outputURL,
+          withIntermediateDirectories: true
+        )
+      case .file:
+        let parent = outputURL.deletingLastPathComponent()
+        try FileManager.default.createDirectory(
+          at: parent,
+          withIntermediateDirectories: true
+        )
+        _ = try archive.extract(entry, to: outputURL)
+      default:
+        throw ZipUtilsError.unsupportedEntry(entry.path)
+      }
+    }
+  }
+}

package/package.json

@@ -0,0 +1,85 @@
+{
+  "name": "@otakit/capacitor-updater",
+  "version": "1.0.0",
+  "description": "Capacitor plugin for OTA updates",
+  "main": "dist/plugin.cjs.js",
+  "module": "dist/esm/index.js",
+  "types": "dist/esm/index.d.ts",
+  "unpkg": "dist/plugin.js",
+  "publishConfig": {
+    "access": "public"
+  },
+  "files": [
+    "LICENSE",
+    "android/src/main/",
+    "android/build.gradle",
+    "dist/",
+    "ios/Sources/",
+    "ios/Tests/",
+    "UpdatekitUpdater.podspec"
+  ],
+  "author": "OtaKit",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/OtaKit/otakit.git"
+  },
+  "bugs": {
+    "url": "https://github.com/OtaKit/otakit/issues"
+  },
+  "homepage": "https://github.com/OtaKit/otakit/tree/main/packages/capacitor-plugin#readme",
+  "keywords": [
+    "capacitor",
+    "plugin",
+    "native",
+    "ota",
+    "update"
+  ],
+  "scripts": {
+    "verify": "npm run verify:minimal",
+    "verify:minimal": "node -e \"console.log('Native verification is not wired yet')\"",
+    "verify:web": "npm run build",
+    "lint": "npm run eslint && npm run prettier -- --check && npm run swiftlint -- lint",
+    "fmt": "npm run eslint -- --fix && npm run prettier -- --write && npm run swiftlint -- --fix --format",
+    "eslint": "eslint src",
+    "prettier": "prettier \"src/**/*.{ts,js}\" \"android/src/main/java/**/*.java\" --plugin=prettier-plugin-java",
+    "swiftlint": "node-swiftlint",
+    "docgen": "docgen --api UpdaterPlugin --output-readme README.md --output-json dist/docs.json",
+    "build": "npm run clean && tsc && rollup -c rollup.config.mjs",
+    "clean": "rimraf ./dist",
+    "watch": "tsc --watch",
+    "prepublishOnly": "npm run build",
+    "typecheck": "tsc --noEmit"
+  },
+  "devDependencies": {
+    "@capacitor/android": "^8.0.2",
+    "@capacitor/core": "8.0.2",
+    "@capacitor/docgen": "^0.3.1",
+    "@capacitor/ios": "^8.0.2",
+    "@eslint/js": "^9.18.0",
+    "@ionic/prettier-config": "^4.0.0",
+    "@ionic/swiftlint-config": "^2.0.0",
+    "eslint": "^9.39.2",
+    "typescript-eslint": "^8.32.1",
+    "prettier": "^3.8.1",
+    "prettier-plugin-java": "^2.8.1",
+    "rimraf": "^6.1.2",
+    "rollup": "^4.57.1",
+    "swiftlint": "^2.0.0",
+    "typescript": "^5.9.3"
+  },
+  "peerDependencies": {
+    "@capacitor/core": "^8.0.2"
+  },
+  "engines": {
+    "node": ">=20.0.0"
+  },
+  "capacitor": {
+    "ios": {
+      "src": "ios"
+    },
+    "android": {
+      "src": "android"
+    }
+  }
+}