@saltcorn/mobile-builder 1.7.0-alpha.0 → 1.7.0-beta.0

package/dist/utils/common-build-utils.js

@@ -3,6 +3,8 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.prepareBuildDirBase = prepareBuildDirBase;
+exports.installCapacitorDeps = installCapacitorDeps;
 exports.prepareBuildDir = prepareBuildDir;
 exports.writeCapacitorConfig = writeCapacitorConfig;
 exports.prepAppIcon = prepAppIcon;
@@ -23,12 +25,15 @@ exports.writeEntitlementsPlist = writeEntitlementsPlist;
 exports.injectCodeSignEntitlements = injectCodeSignEntitlements;
 exports.copyShareExtFiles = copyShareExtFiles;
 exports.modifyShareViewController = modifyShareViewController;
+exports.createShareExtensionTarget = createShareExtensionTarget;
 exports.modifyAppDelegate = modifyAppDelegate;
 exports.writePrivacyInfo = writePrivacyInfo;
 exports.copyServerFiles = copyServerFiles;
 exports.copySiteLogo = copySiteLogo;
 exports.writeCfgFile = writeCfgFile;
 exports.buildTablesFile = buildTablesFile;
+exports.zipDirectory = zipDirectory;
+exports.fetchRemoteAppBundle = fetchRemoteAppBundle;
 exports.copyTranslationFiles = copyTranslationFiles;
 exports.createSqliteDb = createSqliteDb;
 exports.prepareSplashPage = prepareSplashPage;
@@ -46,39 +51,52 @@ const page_1 = __importDefault(require("@saltcorn/data/models/page"));
 const file_1 = __importDefault(require("@saltcorn/data/models/file"));
 const state_1 = require("@saltcorn/data/db/state");
 const xml2js_1 = require("xml2js");
+const zip_1 = require("@saltcorn/admin-models/models/zip");
+const zip_extract_1 = require("@saltcorn/admin-models/models/zip-extract");
 const resizer = require("resize-with-sharp-or-jimp");
 /**
- * copy saltcorn-mobile-app as a template to buildDir
- * and install the capacitor and cordova modules to node_modules (cap sync will be run later)
+ * Copies the template into buildDir and installs base build tooling (no Capacitor deps).
  * @param buildDir directory where the app will be build
- * @param templateDir directory of the template code that will be copied to 'buildDir'
- * @param pushEnabled are push notifications enabled?
- * @param backgroundFetchEnabled is background fetch enabled?
- * @param pushSyncEnabled is push sync enabled?
+ * @param templateDir directory of the template code to copy
  */
-function prepareBuildDir(buildDir, templateDir, pushEnabled, backgroundFetchEnabled, pushSyncEnabled) {
-    const state = (0, state_1.getState)();
-    if (!state)
-        throw new Error("Unable to get the state object");
+function prepareBuildDirBase(buildDir, templateDir) {
     if ((0, fs_extra_1.existsSync)(buildDir))
         (0, fs_extra_1.rmSync)(buildDir, { force: true, recursive: true });
     (0, fs_extra_1.copySync)(templateDir, buildDir);
     (0, fs_extra_1.rmSync)(`${buildDir}/node_modules`, { recursive: true, force: true });
-    let result = (0, child_process_1.spawnSync)("npm", ["install"], {
+    const result = (0, child_process_1.spawnSync)("npm", ["install"], {
         cwd: buildDir,
     });
     console.log(result.output.toString());
+}
+/**
+ * Installs Capacitor/native/Cordova deps - build-machine only, not the remote server.
+ * @param buildDir prepareBuildDirBase'd build directory
+ * @param pushEnabled include push-notification native deps
+ * @param backgroundFetchEnabled include background-fetch native deps
+ * @param pushSyncEnabled include push-sync native deps
+ * @param includeNativeBuildTools install CLI/asset/Cordova tools too - false for a remote bundle
+ */
+function installCapacitorDeps(buildDir, pushEnabled, backgroundFetchEnabled, pushSyncEnabled, includeNativeBuildTools = true) {
+    const state = (0, state_1.getState)();
+    if (!state)
+        throw new Error("Unable to get the state object");
     // cap-plugins needed for saltcorn-plugins
     const additionalPlugins = state.capacitorPlugins.map((plugin) => `${plugin.name}@${plugin.version}`);
     console.log("installing capacitor deps and plugins");
     const capDepsAndPlugins = [
-        "@capacitor/cli@7.4.5",
+        ...(includeNativeBuildTools
+            ? [
+                "@capacitor/cli@7.4.5",
+                "@capacitor/assets@3.0.5",
+                "@capacitor-community/sqlite@7.0.3",
+            ]
+            : []),
         "@capacitor/core@7.4.5",
-        "@capacitor/assets@3.0.5",
         "@capacitor/filesystem@7.1.6",
+        "@capacitor/file-transfer@1.0.12",
         "@capacitor/camera@7.0.3",
         "@capacitor/network@7.0.3",
-        "@capacitor-community/sqlite@7.0.3",
         "@capacitor/screen-orientation@7.0.3",
         "@capacitor/app@7.1.0",
         "send-intent@7.0.0",
@@ -92,20 +110,32 @@ function prepareBuildDir(buildDir, templateDir, pushEnabled, backgroundFetchEnab
         ...(pushSyncEnabled ? ["capacitor-plugin-silent-notifications@7.0.1"] : []),
     ];
     console.log("capDepsAndPlugins", capDepsAndPlugins);
-    result = (0, child_process_1.spawnSync)("npm", ["install", "--legacy-peer-deps", ...capDepsAndPlugins], {
+    let result = (0, child_process_1.spawnSync)("npm", ["install", "--legacy-peer-deps", ...capDepsAndPlugins], {
         cwd: buildDir,
         maxBuffer: 1024 * 1024 * 10,
     });
     console.log(result.output.toString());
-    console.log("installing cordova plugins");
-    const cordovaPlugins = [
-        "cordova-plugin-file@8.1.3",
-        "cordova-plugin-inappbrowser@6.0.0",
-    ];
-    result = (0, child_process_1.spawnSync)("npm", ["install", "--legacy-peer-deps", ...cordovaPlugins], {
-        cwd: buildDir,
-        maxBuffer: 1024 * 1024 * 10,
-    });
+    if (includeNativeBuildTools) {
+        console.log("installing cordova plugins");
+        const cordovaPlugins = [
+            "cordova-plugin-file@8.1.3",
+            "cordova-plugin-inappbrowser@6.0.0",
+        ];
+        result = (0, child_process_1.spawnSync)("npm", ["install", "--legacy-peer-deps", ...cordovaPlugins], {
+            cwd: buildDir,
+            maxBuffer: 1024 * 1024 * 10,
+        });
+    }
+}
+/**
+ * Full local build dir setup: template + build tooling + Capacitor/native
+ * deps. Used by the normal (non-remote) build path, which does everything
+ * on one machine.
+ * @param includeNativeBuildTools forwarded to installCapacitorDeps - false for a remote bundle
+ */
+function prepareBuildDir(buildDir, templateDir, pushEnabled, backgroundFetchEnabled, pushSyncEnabled, includeNativeBuildTools = true) {
+    prepareBuildDirBase(buildDir, templateDir);
+    installCapacitorDeps(buildDir, pushEnabled, backgroundFetchEnabled, pushSyncEnabled, includeNativeBuildTools);
 }
 /**
  * Write `capacitor.config.ts` into the build directory.
@@ -121,9 +151,8 @@ const config: CapacitorConfig  = {
   appId: '${config.appId ? config.appId : "com.saltcorn.mobile.app"}',
   appName: '${config.appName ? config.appName : "SaltcornMobileApp"}',
   webDir: "www",
-  ios: {
-    scheme: "SaltcornMobileApp",
-  },
+  // ios.limitsNavigationsToAppBoundDomains was dropped - it caused noisy
+  // script-injection warnings and wasn't needed for the cookie fix to work.
   android: {
     buildOptions: {
       ${config.keystorePath && config.buildType === "release"
@@ -135,15 +164,21 @@ const config: CapacitorConfig  = {
         : ""}
       releaseType: '${config.buildType === "release" ? "AAB" : "APK"}',
     },
-    ${config.unsecureNetwork ? "allowMixedContent: true," : ""}
   },
-  ${config.unsecureNetwork
-        ? `server: {
-    cleartext: true,
-    androidScheme: 'http',
-  },`
-        : ""}
+  server: {
+    // App's origin on iOS - must match MOBILE_APP_ORIGINS in server/app.js.
+    iosScheme: 'SaltcornMobileApp',
+  },
   plugins: {
+    // Needed together with WKAppBoundDomains (see modifyInfoPlist) to
+    // exempt the remote server's session cookie from iOS's third-party
+    // cookie blocking.
+    CapacitorHttp: {
+      enabled: true,
+    },
+    CapacitorCookies: {
+      enabled: true,
+    },
     CapacitorSQLite: {
       iosDatabaseLocation: 'Library/CapacitorDatabase',
       iosIsEncryption: true,
@@ -236,9 +271,8 @@ function androidFeatures() {
  * @param allowShareTo add share-to intent filter
  * @param allowFCM add FCM push notification support
  * @param allowAuthIntent add authentication intent
- * @param allowClearTextTraffic allow HTTP cleartext traffic
  */
-async function modifyAndroidManifest(buildDir, allowShareTo, allowFCM, allowAuthIntent, allowClearTextTraffic) {
+async function modifyAndroidManifest(buildDir, allowShareTo, allowFCM, allowAuthIntent) {
     console.log("modifyAndroidManifest");
     try {
         const androidManifest = (0, path_1.join)(buildDir, "android", "app", "src", "main", "AndroidManifest.xml");
@@ -256,9 +290,6 @@ async function modifyAndroidManifest(buildDir, allowShareTo, allowFCM, allowAuth
             "android:fullBackupContent": "false",
             "android:dataExtractionRules": "@xml/data_extraction_rules",
             "android:networkSecurityConfig": "@xml/network_security_config",
-            ...(allowClearTextTraffic
-                ? { "android:usesCleartextTraffic": "true" }
-                : {}),
         };
         if (allowFCM) {
             parsed.manifest.application[0]["meta-data"] = [
@@ -399,24 +430,14 @@ function extractDomain(url) {
     return domain;
 }
 /**
- * Write the Android network security config.
- * When `allowClearTextTraffic` is true, permits HTTP for the server domain.
- * Otherwise writes a restrictive config (HTTPS only).
+ * Write the Android network security config. HTTPS is required, so this is
+ * always the restrictive (no cleartext) version.
  * @param buildDir directory where the app will be built
- * @param serverPath server URL used to extract the allowed domain
- * @param allowClearTextTraffic permit HTTP cleartext traffic to the server domain
  */
-function writeNetworkSecurityConfig(buildDir, serverPath, allowClearTextTraffic) {
+function writeNetworkSecurityConfig(buildDir) {
     console.log("writeNetworkSecurityConfig");
     const networkSecurityConfig = (0, path_1.join)(buildDir, "android", "app", "src", "main", "res", "xml", "network_security_config.xml");
-    const content = allowClearTextTraffic
-        ? `<?xml version="1.0" encoding="utf-8"?>
-<network-security-config>
-  <domain-config cleartextTrafficPermitted="true">
-    <domain includeSubdomains="true">${extractDomain(serverPath)}</domain>
-  </domain-config>
-</network-security-config>`
-        : `<?xml version="1.0" encoding="utf-8"?>
+    const content = `<?xml version="1.0" encoding="utf-8"?>
 <network-security-config>
   <base-config cleartextTrafficPermitted="false" />
 </network-security-config>`;
@@ -548,12 +569,13 @@ function prepareExportOptionsPlist({ buildDir, appId, iosParams }) {
             <string>${iosParams.shareExtensionProvisioningProfile.guuid}</string>`;
     };
     try {
+        const method = iosParams.isAdHoc ? "ad-hoc" : "app-store-connect";
         (0, fs_extra_1.writeFileSync)((0, path_1.join)(buildDir, "ExportOptions.plist"), `<?xml version="1.0" encoding="UTF-8"?>
       <!DOCTYPE plist PUBLIC "~//Apple/DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
       <plist version="1.0">
         <dict>
           <key>method</key>
-          <string>app-store-connect</string>
+          <string>${method}</string>
           <key>provisioningProfiles</key>
           <dict>          
             <key>${appId}</key>
@@ -574,12 +596,22 @@ function prepareExportOptionsPlist({ buildDir, appId, iosParams }) {
  * @param allowShareTo add URL scheme for share-to integration
  * @param backgroundSyncEnabled background sync task is scheduled
  * @param pushSyncEnabled add remote-notification background mode
- * @param allowClearTextTraffic allow arbitrary HTTP loads
  * @param backgroundFetchEnabled background.js is included (sync or heartbeat configured)
+ * @param serverURL server URL, added to WKAppBoundDomains for the iOS cookie
+ * fix - changing servers (e.g. a new ngrok URL) needs a rebuild to apply.
  */
-function modifyInfoPlist(buildDir, allowShareTo, backgroundSyncEnabled, pushSyncEnabled, allowClearTextTraffic, backgroundFetchEnabled = false) {
+function modifyInfoPlist(buildDir, allowShareTo, backgroundSyncEnabled, pushSyncEnabled, backgroundFetchEnabled = false, serverURL) {
     const infoPlist = (0, path_1.join)(buildDir, "ios", "App", "App", "Info.plist");
     const content = (0, fs_extra_1.readFileSync)(infoPlist, "utf8");
+    let appBoundHostname;
+    if (serverURL) {
+        try {
+            appBoundHostname = new URL(serverURL).hostname;
+        }
+        catch {
+            // invalid/missing URL - skip WKAppBoundDomains rather than write a broken plist
+        }
+    }
     const backgroundModes = [
         ...(backgroundFetchEnabled ? ["fetch", "processing"] : []),
         ...(pushSyncEnabled ? ["remote-notification"] : []),
@@ -587,7 +619,9 @@ function modifyInfoPlist(buildDir, allowShareTo, backgroundSyncEnabled, pushSync
     const taskIds = [
         "com.transistorsoft.fetch",
         ...(backgroundSyncEnabled ? ["com.transistorsoft.background_sync"] : []),
-        ...(backgroundFetchEnabled ? ["com.transistorsoft.push_sync_heartbeat"] : []),
+        ...(backgroundFetchEnabled
+            ? ["com.transistorsoft.push_sync_heartbeat"]
+            : []),
     ];
     const newCfgs = `
   ${backgroundFetchEnabled
@@ -619,6 +653,12 @@ function modifyInfoPlist(buildDir, allowShareTo, backgroundSyncEnabled, pushSync
   <true/>
   <key>LSSupportsOpeningDocumentsInPlace</key>
   <true/>
+  ${appBoundHostname
+        ? `<key>WKAppBoundDomains</key>
+  <array>
+    <string>${appBoundHostname}</string>
+  </array>`
+        : ""}
   ${allowShareTo
         ? `<key>CFBundleURLTypes</key>
   <array>
@@ -634,27 +674,25 @@ function modifyInfoPlist(buildDir, allowShareTo, backgroundSyncEnabled, pushSync
     </dict>
   </array>`
         : ""}
-  ${allowClearTextTraffic
-        ? `<key>NSAppTransportSecurity</key>
-  <dict>
-    <key>NSAllowsArbitraryLoads</key>
-    <true/>
-  </dict>`
-        : ""}
 `;
     // add newCfgs after the first <dict> tag
     const newContent = content.replace(/<dict>/, `<dict>${newCfgs}`);
     (0, fs_extra_1.writeFileSync)(infoPlist, newContent, "utf8");
 }
 /**
- * Write `App.entitlements` with the APNs environment and optional app group.
+ * Write `App.entitlements` with the optional APNs environment and app group.
  * @param buildDir directory where the app will be built
  * @param buildType `"debug"` → development APNs, `"release"` → production APNs
+ * @param pushSync include the APNs environment entitlement
  * @param appGroupId optional app group ID for share extension data sharing
  */
-function writeEntitlementsPlist(buildDir, buildType, appGroupId) {
+function writeEntitlementsPlist(buildDir, buildType, pushSync, appGroupId) {
     const file = (0, path_1.join)(buildDir, "ios", "App", "App", "App.entitlements");
     const apsEnv = buildType === "release" ? "production" : "development";
+    const apsEnvEntry = pushSync
+        ? `    <key>aps-environment</key>
+    <string>${apsEnv}</string>`
+        : "";
     const appGroupsEntry = appGroupId
         ? `    <key>com.apple.security.application-groups</key>
     <array>
@@ -666,8 +704,7 @@ function writeEntitlementsPlist(buildDir, buildType, appGroupId) {
 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
 <plist version="1.0">
 <dict>
-    <key>aps-environment</key>
-    <string>${apsEnv}</string>
+${apsEnvEntry}
 ${appGroupsEntry}
 </dict>
 </plist>`);
@@ -686,7 +723,9 @@ function injectCodeSignEntitlements(buildDir) {
     const pbxprojPath = (0, path_1.join)(buildDir, "ios", "App", "App.xcodeproj", "project.pbxproj");
     try {
         let content = (0, fs_extra_1.readFileSync)(pbxprojPath, "utf8");
-        if (content.includes("CODE_SIGN_ENTITLEMENTS")) {
+        // check for this exact insertion, not just any CODE_SIGN_ENTITLEMENTS -
+        // the share-ext target sets its own, which isn't the same thing
+        if (content.includes("CODE_SIGN_ENTITLEMENTS = App/App.entitlements;")) {
             console.log("CODE_SIGN_ENTITLEMENTS already set in project.pbxproj");
             return;
         }
@@ -720,6 +759,52 @@ function modifyShareViewController(buildDir, groupId) {
     content = content.replace(/YOUR_APP_GROUP_ID/g, groupId);
     (0, fs_extra_1.writeFileSync)(shareVCFile, content, "utf8");
 }
+/**
+ * Write the entitlements plist for the share extension target (app group
+ * only - no APNs entry, extensions don't receive push notifications).
+ * @param buildDir directory where the app will be built
+ * @param appGroupId app group ID shared with the main app
+ * @returns path to the entitlements file, relative to `ios/App`
+ */
+function writeShareExtEntitlementsPlist(buildDir, appGroupId) {
+    const relPath = (0, path_1.join)("share-ext", "ShareExtension.entitlements");
+    const file = (0, path_1.join)(buildDir, "ios", "App", relPath);
+    (0, fs_extra_1.writeFileSync)(file, `<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+    <key>com.apple.security.application-groups</key>
+    <array>
+        <string>${appGroupId}</string>
+    </array>
+</dict>
+</plist>`);
+    return relPath;
+}
+/**
+ * Add a "share-ext" Share Extension target to `App.xcodeproj`, so the app
+ * can be built with iOS share-to support without ever opening Xcode.
+ * @param buildDir directory where the app will be built
+ * @param appId main app's bundle id - the extension's is `${appId}.share-ext`
+ * @param appGroupId optional app group ID, wired into a matching
+ *   entitlements plist for the new target
+ */
+function createShareExtensionTarget(buildDir, appId, appGroupId) {
+    const iosAppDir = (0, path_1.join)(buildDir, "ios", "App");
+    const projectPath = (0, path_1.join)(iosAppDir, "App.xcodeproj");
+    const entitlementsRelPath = appGroupId
+        ? writeShareExtEntitlementsPlist(buildDir, appGroupId)
+        : undefined;
+    const scriptPath = (0, path_1.join)(__dirname, "xcode", "create_share_extension.rb");
+    const args = [scriptPath, projectPath, `${appId}.share-ext`];
+    if (entitlementsRelPath)
+        args.push(entitlementsRelPath);
+    const result = (0, child_process_1.spawnSync)("ruby", args, { cwd: iosAppDir });
+    if (result.status !== 0) {
+        throw new Error(`Unable to create the share extension target: ${result.stderr?.toString() || result.error?.message || "unknown error"}`);
+    }
+    console.log(result.stdout?.toString());
+}
 /**
  * Patch `AppDelegate.swift` to register background tasks and push handlers.
  * @param buildDir directory where the app will be built
@@ -734,7 +819,7 @@ function modifyAppDelegate(buildDir, pushSyncEnabled, allowShareTo, backgroundFe
     content = content.replace(/func application\(_ application: UIApplication, didFinishLaunchingWithOptions launchOptions: \[UIApplication.LaunchOptionsKey: Any\]\?\) -> Bool {/, `func application(_ application: UIApplication, didFinishLaunchingWithOptions launchOptions: [UIApplication.LaunchOptionsKey: Any]?) -> Bool {
         // Override point for customization after application launch.
 
-       
+
        ${backgroundFetchEnabled
         ? `// [capacitor-background-fetch]
        let fetchManager = TSBackgroundFetch.sharedInstance();
@@ -989,91 +1074,86 @@ function writeCfgFile({ buildDir, entryPoint, entryPointType, serverPath, synche
         cfg.tenantAppName = tenantAppName;
     (0, fs_extra_1.writeFileSync)((0, path_1.join)(buildDir, "www", "data", "config.js"), `var _sc_mobile_config = ${JSON.stringify(cfg)}`);
 }
-/**
- * create a file with all data from the db
- * the app updates its local db from this
- * @param buildDir directory where the app will be build
- * @param includedPlugins names of plugins that are bundled into the app
- */
-async function buildTablesFile(buildDir, includedPlugins) {
-    const state = (0, state_1.getState)();
-    if (!state)
-        throw new Error("Unable to get the state object");
-    await state.refresh_config(true);
-    // remove cfgs with excludeFromMobile or input_type=password
-    const filterPluginFunc = async (plugin) => {
-        let module = state.plugins[plugin.name];
-        if (!module)
-            module = state.plugins[state.plugin_module_names[plugin.name]];
-        if (module?.configuration_workflow) {
+const filterPluginFunc = async (state, plugin) => {
+    let module = state.plugins[plugin.name];
+    if (!module)
+        module = state.plugins[state.plugin_module_names[plugin.name]];
+    if (module?.configuration_workflow) {
+        try {
+            const flow = await module.configuration_workflow();
+            for (const step of flow?.steps || []) {
+                if (step.form) {
+                    const form = await step.form({});
+                    for (const field of form?.fields || []) {
+                        if (field.exclude_from_mobile || field.input_type === "password") {
+                            delete plugin.configuration[field.name];
+                        }
+                    }
+                }
+            }
+        }
+        catch (error) {
+            console.log(`Error in configuration_workflow of plugin ${plugin.name}`);
+            console.log(error);
+        }
+    }
+    return plugin;
+};
+const filterTableFunc = async (state, table) => {
+    let result = table;
+    if (table.provider_name) {
+        const oldProviderCfg = JSON.parse(JSON.stringify(table.provider_cfg || {}));
+        const provider = state.table_providers[table.provider_name];
+        if (provider?.configuration_workflow) {
             try {
-                const flow = await module.configuration_workflow();
+                const flow = await provider.configuration_workflow();
                 for (const step of flow?.steps || []) {
                     if (step.form) {
-                        const form = await step.form({});
+                        const form = await step.form(oldProviderCfg);
                         for (const field of form?.fields || []) {
                             if (field.exclude_from_mobile ||
                                 field.input_type === "password") {
-                                delete plugin.configuration[field.name];
+                                delete result.provider_cfg[field.name];
                             }
                         }
                     }
                 }
             }
             catch (error) {
-                console.log(`Error in configuration_workflow of plugin ${plugin.name}`);
+                console.log(`Error in configuration_workflow of table provider ${table.provider_name}`);
                 console.log(error);
             }
         }
-        return plugin;
-    };
-    const filterTableFunc = async (table) => {
-        let result = table;
-        if (table.provider_name) {
-            const oldProviderCfg = JSON.parse(JSON.stringify(table.provider_cfg || {}));
-            const provider = state.table_providers[table.provider_name];
-            if (provider?.configuration_workflow) {
-                try {
-                    const flow = await provider.configuration_workflow();
-                    for (const step of flow?.steps || []) {
-                        if (step.form) {
-                            const form = await step.form(oldProviderCfg);
-                            for (const field of form?.fields || []) {
-                                if (field.exclude_from_mobile ||
-                                    field.input_type === "password") {
-                                    delete result.provider_cfg[field.name];
-                                }
-                            }
-                        }
-                    }
-                }
-                catch (error) {
-                    console.log(`Error in configuration_workflow of table provider ${table.provider_name}`);
-                    console.log(error);
-                }
-            }
-        }
-        return result;
-    };
-    const filterFunc = async (table, rows) => {
-        switch (table) {
-            case "_sc_plugins":
-                const included = rows.filter((plugin) => includedPlugins ? includedPlugins.includes(plugin.name) : true);
-                return await Promise.all(included.map(filterPluginFunc));
-            case "_sc_config":
-                const allCfgs = state.configs;
-                // remove cfgs with excludeFromMobile or input_type=password
-                return rows.filter((row) => {
-                    const cfg = allCfgs[row.key];
-                    return (cfg && !(cfg.excludeFromMobile || cfg.input_type === "password"));
-                });
-            case "_sc_tables":
-                return await Promise.all(rows.map(filterTableFunc));
-            default:
-                return rows;
-        }
-    };
-    const wwwDir = (0, path_1.join)(buildDir, "www", "data");
+    }
+    return result;
+};
+const filterFunc = async (state, table, rows, includedPlugins) => {
+    switch (table) {
+        case "_sc_plugins":
+            const included = rows.filter((plugin) => includedPlugins ? includedPlugins.includes(plugin.name) : true);
+            return await Promise.all(included.map((plugin) => filterPluginFunc(state, plugin)));
+        case "_sc_config":
+            const allCfgs = state.configs;
+            // remove cfgs with excludeFromMobile or input_type=password
+            return rows.filter((row) => {
+                const cfg = allCfgs[row.key];
+                return (cfg && !(cfg.excludeFromMobile || cfg.input_type === "password"));
+            });
+        case "_sc_tables":
+            return await Promise.all(rows.map((table) => filterTableFunc(state, table)));
+        default:
+            return rows;
+    }
+};
+/**
+ * Reads and filters all _sc_ table rows for the sync/tables data dump.
+ * @param includedPlugins names of plugins that are bundled into the app
+ */
+const computeTablesData = async (includedPlugins) => {
+    const state = (0, state_1.getState)();
+    if (!state)
+        throw new Error("Unable to get the state object");
+    await state.refresh_config(true);
     const scTables = (await index_1.default.listScTables()).filter((table) => [
         "_sc_migrations",
         "_sc_errors",
@@ -1087,18 +1167,141 @@ async function buildTablesFile(buildDir, includedPlugins) {
         const dbData = await index_1.default.select(row.name);
         return {
             table: row.name,
-            rows: await filterFunc(row.name, dbData),
+            rows: await filterFunc(state, row.name, dbData, includedPlugins),
         };
     }));
-    const createdAt = new Date();
+    return { createdAt: new Date(), sc_tables: tablesWithData };
+};
+/**
+ * create a file with all data from the db
+ * the app updates its local db from this
+ * @param buildDir directory where the app will be build
+ * @param includedPlugins names of plugins that are bundled into the app
+ */
+async function buildTablesFile(buildDir, includedPlugins) {
+    const wwwDir = (0, path_1.join)(buildDir, "www", "data");
+    const { createdAt, sc_tables } = await computeTablesData(includedPlugins);
     (0, fs_extra_1.writeFileSync)((0, path_1.join)(wwwDir, "tables.json"), JSON.stringify({
         created_at: createdAt.valueOf(),
-        sc_tables: tablesWithData,
+        sc_tables,
     }));
     (0, fs_extra_1.writeFileSync)((0, path_1.join)(wwwDir, "tables_created_at.json"), JSON.stringify({
         created_at: createdAt.valueOf(),
     }));
 }
+const walkDir = (dir) => {
+    const results = [];
+    for (const entry of (0, fs_extra_1.readdirSync)(dir, { withFileTypes: true })) {
+        const full = (0, path_1.join)(dir, entry.name);
+        if (entry.isDirectory())
+            results.push(...walkDir(full));
+        else
+            results.push(full);
+    }
+    return results;
+};
+/**
+ * Zip a directory's contents (recursively), entry names relative to sourceDir.
+ * @param sourceDir directory to zip
+ * @param outputPath path of the zip file to write
+ */
+async function zipDirectory(sourceDir, outputPath) {
+    const zip = await zip_1.ZipBuilder.toFile(outputPath);
+    for (const filePath of walkDir(sourceDir)) {
+        const entryName = (0, path_1.relative)(sourceDir, filePath).split(path_1.sep).join("/");
+        await zip.addLocalFile(entryName, filePath);
+    }
+    await zip.finish();
+}
+/**
+ * Fetches the remote server's prepared www/ bundle and extracts it into buildDir/www.
+ * @param buildDir directory where the app will be build
+ * @param remoteSchemaUrl the /api/mobile-app/build-bundle URL
+ * @param apiKey bearer token for an admin user on that server
+ * @param options this machine's build settings, so the remote content matches
+ */
+async function fetchRemoteAppBundle(buildDir, remoteSchemaUrl, apiKey, options) {
+    const url = new URL(`${remoteSchemaUrl.replace(/\/+$/, "")}/api/mobile-app/build-bundle`);
+    if (options.includedPlugins?.length)
+        url.searchParams.set("includedPlugins", options.includedPlugins.join(","));
+    for (const platform of options.platforms)
+        url.searchParams.append("platforms", platform);
+    for (const table of options.synchedTables || [])
+        url.searchParams.append("synchedTables", table);
+    // empty in by-role mode - omit rather than send the literal string "undefined"
+    if (options.entryPoint)
+        url.searchParams.set("entryPoint", options.entryPoint);
+    url.searchParams.set("entryPointType", options.entryPointType);
+    url.searchParams.set("serverURL", options.serverURL);
+    if (options.splashPage)
+        url.searchParams.set("splashPage", options.splashPage);
+    if (options.tenantAppName)
+        url.searchParams.set("tenantAppName", options.tenantAppName);
+    url.searchParams.set("buildType", options.buildType);
+    if (options.autoPublicLogin)
+        url.searchParams.set("autoPublicLogin", options.autoPublicLogin);
+    if (options.showContinueAsPublicUser)
+        url.searchParams.set("showContinueAsPublicUser", "true");
+    if (options.allowOfflineMode)
+        url.searchParams.set("allowOfflineMode", options.allowOfflineMode);
+    if (options.syncOnReconnect)
+        url.searchParams.set("syncOnReconnect", "true");
+    if (options.syncOnAppResume)
+        url.searchParams.set("syncOnAppResume", "true");
+    if (options.pushSync)
+        url.searchParams.set("pushSync", "true");
+    if (options.syncInterval)
+        url.searchParams.set("syncInterval", String(options.syncInterval));
+    if (options.pushSyncHeartbeatInterval)
+        url.searchParams.set("pushSyncHeartbeatInterval", String(options.pushSyncHeartbeatInterval));
+    const headers = apiKey
+        ? { Authorization: `Bearer ${apiKey}` }
+        : {};
+    const readError = async (res) => {
+        try {
+            return (await res.json())?.error;
+        }
+        catch {
+            return undefined;
+        }
+    };
+    console.log(`Fetching remote app bundle from ${remoteSchemaUrl}...`);
+    // poll instead of one long request - some NAT/routers kill an idle connection
+    const startRes = await fetch(url.toString(), { method: "POST", headers });
+    if (!startRes.ok)
+        throw new Error(`Unable to start remote app bundle build at ${url}: ${(await readError(startRes)) || `${startRes.status} ${startRes.statusText}`}`);
+    const { job_id } = (await startRes.json());
+    // origin+pathname, not url.toString() - that still has the build options
+    const statusUrl = new URL(url.pathname + "/status", url.origin);
+    statusUrl.searchParams.set("job_id", job_id);
+    const POLL_DEADLINE = Date.now() + 30 * 60 * 1000;
+    while (true) {
+        if (Date.now() > POLL_DEADLINE)
+            throw new Error(`Timed out waiting for the remote app bundle build to finish (job ${job_id})`);
+        await new Promise((r) => setTimeout(r, 3000));
+        const statusRes = await fetch(statusUrl.toString(), { headers });
+        if (!statusRes.ok)
+            throw new Error(`Unable to check remote app bundle build status at ${statusUrl}: ${statusRes.status} ${statusRes.statusText}`);
+        const { status, error } = (await statusRes.json());
+        if (status === "error")
+            throw new Error(`Unable to build remote app bundle: ${error}`);
+        if (status === "done")
+            break;
+    }
+    const resultUrl = new URL(url.pathname + "/result", url.origin);
+    resultUrl.searchParams.set("job_id", job_id);
+    const resultRes = await fetch(resultUrl.toString(), { headers });
+    if (!resultRes.ok)
+        throw new Error(`Unable to fetch remote app bundle from ${resultUrl}: ${(await readError(resultRes)) || `${resultRes.status} ${resultRes.statusText}`}`);
+    // saved in buildDir (not just os.tmpdir()) so it's easy to find and
+    // inspect alongside the rest of the build output; not part of the app
+    // itself, so keeping it around here is harmless
+    const tmpZip = (0, path_1.join)(buildDir, "remote-bundle.zip");
+    (0, fs_extra_1.writeFileSync)(tmpZip, Buffer.from(await resultRes.arrayBuffer()));
+    console.log(`Remote app bundle saved to ${tmpZip}`);
+    await (0, zip_extract_1.extractZip)(tmpZip, (0, path_1.join)(buildDir, "www"));
+    console.log("Remote app bundle fetch finished");
+}
 /**
  * copy files form 'server/locales' into the app
  * @param buildDir directory where the app will be build
@@ -1231,6 +1434,7 @@ function writePodfile(buildDir, hasPush, hasBackgroundFetch, hasSilentPush) {
     pod 'CapacitorCommunitySqlite', :path => '../../node_modules/@capacitor-community/sqlite'
     pod 'CapacitorCamera', :path => '../../node_modules/@capacitor/camera'
     pod 'CapacitorFilesystem', :path => '../../node_modules/@capacitor/filesystem'
+    pod 'CapacitorFileTransfer', :path => '../../node_modules/@capacitor/file-transfer'
     ${hasGeolocation
         ? `pod 'CapacitorGeolocation', :path => '../../node_modules/@capacitor/geolocation'`
         : ""}