@protobase/schema 0.57.1 → 0.57.3

package/dist/internal.d.ts

@@ -28,7 +28,7 @@ import { Locale, isLocale, locales, pickLocale } from "./locale.js";
 import { humanize } from "./humanize.js";
 import { labelFieldOf, recordTitle, recordTitleField } from "./record-title.js";
 import { apiOriginMeta } from "./api-origin-meta.js";
-import { MobileReleaseAnswer, mobileReleaseBasePath, mobileReleaseParams, mobileReleasePath, mobileReleaseQuery, mobileReleasesPath, releaseManifestFile } from "./mobile-release-address.js";
+import { MobileReleaseAnswer, ReleaseBinding, mobileReleaseBasePath, mobileReleaseParams, mobileReleasePath, mobileReleaseQuery, mobileReleasesPath, releaseManifestFile, releaseStatementContext, releaseStatementFile } from "./mobile-release-address.js";
 import { authBasePath } from "./auth-base-path.js";
 import { capacitorOrigin } from "./capacitor-origins.js";
 import { pushRecord, serviceWorkerFile } from "./push-record.js";
@@ -36,4 +36,4 @@ import { deviceIdParam, devicesPath } from "./devices-path.js";
 import { historyIdParam, historyIdPattern, historyPath } from "./history-path.js";
 import { listColumnNames } from "./list-columns.js";
 import { builtInFieldTypes } from "./built-in-field-types.js";
-export { type AddressCheck, type FormulaNode, type Locale, type MobileReleaseAnswer, type PluginHost, type PluginRequirement, type PropShapes, type RefShape, type SearchTerm, actionConditionError, actionInputErrors, addressErrors, addressPlaceholders, apiOriginMeta, appHrefError, applyAssistantEvent, authBasePath, boardErrors, bottomBarFor, builtInFieldTypes, capacitorOrigin, cardPhotoLimit, chartFields, checkEventFilter, checkedAccept, checkedProvider, datesErrors, decodeKey, defaultRecentLimit, deviceIdParam, devicesPath, displayFields, emptyAssistantState, encodeKey, fieldRefsIn, fillAddress, historyIdParam, historyIdPattern, historyPath, hrefField, hrefPlaceholders, humanize, inRange, isFieldRef, isGroupChart, isLocale, labelFieldOf, layoutItems, leavesApp, linkActionError, listColumnNames, locales, markFieldRefs, matchedSearchField, matchesSearch, mobileReleaseBasePath, mobileReleaseParams, mobileReleasePath, mobileReleaseQuery, mobileReleasesPath, navRecentErrors, parseCapability, parseFormula, parseSize, parseTable, pickLocale, pluginProblem, promptError, promptFields, pruneByShape, pushRecord, readEventStream, recordTitle, recordTitleField, redactSecrets, releaseManifestFile, renderPrompt, searchTerms, serviceWorkerFile, shapes, shownInputs, statusTones, tableDisplay, termMatches, unmarkFieldRefs, updateSetErrors, updateValues, viewOfList, webhookResources };
+export { type AddressCheck, type FormulaNode, type Locale, type MobileReleaseAnswer, type PluginHost, type PluginRequirement, type PropShapes, type RefShape, type ReleaseBinding, type SearchTerm, actionConditionError, actionInputErrors, addressErrors, addressPlaceholders, apiOriginMeta, appHrefError, applyAssistantEvent, authBasePath, boardErrors, bottomBarFor, builtInFieldTypes, capacitorOrigin, cardPhotoLimit, chartFields, checkEventFilter, checkedAccept, checkedProvider, datesErrors, decodeKey, defaultRecentLimit, deviceIdParam, devicesPath, displayFields, emptyAssistantState, encodeKey, fieldRefsIn, fillAddress, historyIdParam, historyIdPattern, historyPath, hrefField, hrefPlaceholders, humanize, inRange, isFieldRef, isGroupChart, isLocale, labelFieldOf, layoutItems, leavesApp, linkActionError, listColumnNames, locales, markFieldRefs, matchedSearchField, matchesSearch, mobileReleaseBasePath, mobileReleaseParams, mobileReleasePath, mobileReleaseQuery, mobileReleasesPath, navRecentErrors, parseCapability, parseFormula, parseSize, parseTable, pickLocale, pluginProblem, promptError, promptFields, pruneByShape, pushRecord, readEventStream, recordTitle, recordTitleField, redactSecrets, releaseManifestFile, releaseStatementContext, releaseStatementFile, renderPrompt, searchTerms, serviceWorkerFile, shapes, shownInputs, statusTones, tableDisplay, termMatches, unmarkFieldRefs, updateSetErrors, updateValues, viewOfList, webhookResources };

package/dist/internal.js

@@ -28,7 +28,7 @@ import { isLocale, locales, pickLocale } from "./locale.js";
 import { humanize } from "./humanize.js";
 import { labelFieldOf, recordTitle, recordTitleField } from "./record-title.js";
 import { apiOriginMeta } from "./api-origin-meta.js";
-import { mobileReleaseBasePath, mobileReleaseParams, mobileReleasePath, mobileReleaseQuery, mobileReleasesPath, releaseManifestFile } from "./mobile-release-address.js";
+import { mobileReleaseBasePath, mobileReleaseParams, mobileReleasePath, mobileReleaseQuery, mobileReleasesPath, releaseManifestFile, releaseStatementContext, releaseStatementFile } from "./mobile-release-address.js";
 import { authBasePath } from "./auth-base-path.js";
 import { capacitorOrigin } from "./capacitor-origins.js";
 import { pushRecord, serviceWorkerFile } from "./push-record.js";
@@ -36,4 +36,4 @@ import { deviceIdParam, devicesPath } from "./devices-path.js";
 import { historyIdParam, historyIdPattern, historyPath } from "./history-path.js";
 import { listColumnNames } from "./list-columns.js";
 import { builtInFieldTypes } from "./built-in-field-types.js";
-export { actionConditionError, actionInputErrors, addressErrors, addressPlaceholders, apiOriginMeta, appHrefError, applyAssistantEvent, authBasePath, boardErrors, bottomBarFor, builtInFieldTypes, capacitorOrigin, cardPhotoLimit, chartFields, checkEventFilter, checkedAccept, checkedProvider, datesErrors, decodeKey, defaultRecentLimit, deviceIdParam, devicesPath, displayFields, emptyAssistantState, encodeKey, fieldRefsIn, fillAddress, historyIdParam, historyIdPattern, historyPath, hrefField, hrefPlaceholders, humanize, inRange, isFieldRef, isGroupChart, isLocale, labelFieldOf, layoutItems, leavesApp, linkActionError, listColumnNames, locales, markFieldRefs, matchedSearchField, matchesSearch, mobileReleaseBasePath, mobileReleaseParams, mobileReleasePath, mobileReleaseQuery, mobileReleasesPath, navRecentErrors, parseCapability, parseFormula, parseSize, parseTable, pickLocale, pluginProblem, promptError, promptFields, pruneByShape, pushRecord, readEventStream, recordTitle, recordTitleField, redactSecrets, releaseManifestFile, renderPrompt, searchTerms, serviceWorkerFile, shapes, shownInputs, statusTones, tableDisplay, termMatches, unmarkFieldRefs, updateSetErrors, updateValues, viewOfList, webhookResources };
+export { actionConditionError, actionInputErrors, addressErrors, addressPlaceholders, apiOriginMeta, appHrefError, applyAssistantEvent, authBasePath, boardErrors, bottomBarFor, builtInFieldTypes, capacitorOrigin, cardPhotoLimit, chartFields, checkEventFilter, checkedAccept, checkedProvider, datesErrors, decodeKey, defaultRecentLimit, deviceIdParam, devicesPath, displayFields, emptyAssistantState, encodeKey, fieldRefsIn, fillAddress, historyIdParam, historyIdPattern, historyPath, hrefField, hrefPlaceholders, humanize, inRange, isFieldRef, isGroupChart, isLocale, labelFieldOf, layoutItems, leavesApp, linkActionError, listColumnNames, locales, markFieldRefs, matchedSearchField, matchesSearch, mobileReleaseBasePath, mobileReleaseParams, mobileReleasePath, mobileReleaseQuery, mobileReleasesPath, navRecentErrors, parseCapability, parseFormula, parseSize, parseTable, pickLocale, pluginProblem, promptError, promptFields, pruneByShape, pushRecord, readEventStream, recordTitle, recordTitleField, redactSecrets, releaseManifestFile, releaseStatementContext, releaseStatementFile, renderPrompt, searchTerms, serviceWorkerFile, shapes, shownInputs, statusTones, tableDisplay, termMatches, unmarkFieldRefs, updateSetErrors, updateValues, viewOfList, webhookResources };

package/dist/mobile-release-address.d.ts

@@ -15,6 +15,26 @@ export declare const mobileReleasesPath = "/api/mobile/releases";
  * file name `@capawesome/capacitor-live-update` reads in a release and in the app's own files.
  */
 export declare const releaseManifestFile = "capawesome-live-update-manifest.json";
+/**
+ * A signed release's statement, `{ payload, signature }`: `payload` the lowercase hex of the JSON `ReleaseBinding`,
+ * and `signature` the lowercase hex of the SHA256withRSA of `releaseStatementContext` followed by those decoded bytes. It binds the
+ * manifest to the release's order, app, binary and shell, which the per-file signatures say nothing of.
+ */
+export declare const releaseStatementFile = "protobase-release.json";
+/** What a statement's signature covers ahead of its payload, so no signed file of the app reads as a statement. */
+export declare const releaseStatementContext = "protobase-mobile-release\n";
+/**
+ * What a statement binds a release to: its manifest's sha256 in hex, its `order` (compared element by element, a
+ * device takes only a release above its own), the app id and native fingerprint of the binaries it runs on, and the
+ * Protobase version of the server, whose shells it works with.
+ */
+export type ReleaseBinding = {
+  manifest: string;
+  order: number[];
+  appId: string;
+  fingerprint: string;
+  shellVersion: string;
+};
 /**
  * The base URL path of the release `bundleId`: the updater fetches `<base>?href=<file>` for its manifest and each file.
  * The id sits in the path because the iOS updater replaces the base URL's whole query when it adds `href`.

package/dist/mobile-release-address.js

@@ -16,6 +16,14 @@ const mobileReleasesPath = "/api/mobile/releases";
 */
 const releaseManifestFile = "capawesome-live-update-manifest.json";
 /**
+* A signed release's statement, `{ payload, signature }`: `payload` the lowercase hex of the JSON `ReleaseBinding`,
+* and `signature` the lowercase hex of the SHA256withRSA of `releaseStatementContext` followed by those decoded bytes. It binds the
+* manifest to the release's order, app, binary and shell, which the per-file signatures say nothing of.
+*/
+const releaseStatementFile = "protobase-release.json";
+/** What a statement's signature covers ahead of its payload, so no signed file of the app reads as a statement. */
+const releaseStatementContext = "protobase-mobile-release\n";
+/**
 * The base URL path of the release `bundleId`: the updater fetches `<base>?href=<file>` for its manifest and each file.
 * The id sits in the path because the iOS updater replaces the base URL's whole query when it adds `href`.
 */
@@ -26,4 +34,4 @@ const mobileReleaseQuery = ({ fingerprint, shellVersion }) => new URLSearchParam
 	[mobileReleaseParams.shellVersion]: shellVersion
 }).toString();
 //#endregion
-export { mobileReleaseBasePath, mobileReleaseParams, mobileReleasePath, mobileReleaseQuery, mobileReleasesPath, releaseManifestFile };
+export { mobileReleaseBasePath, mobileReleaseParams, mobileReleasePath, mobileReleaseQuery, mobileReleasesPath, releaseManifestFile, releaseStatementContext, releaseStatementFile };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@protobase/schema",
-  "version": "0.57.1",
+  "version": "0.57.3",
   "description": "Resource, field, view and access definitions for Protobase configs.",
   "license": "Apache-2.0",
   "repository": {