@todesktop/cli 1.19.1 → 1.20.0-1

package/README.md

@@ -48,7 +48,7 @@ Create a `todesktop.json` file in the root of your Electron project.
 
 ```json
 {
-  "$schema": "https://unpkg.com/@todesktop/cli@1.19.0-1/schemas/schema.json",
+  "$schema": "https://unpkg.com/@todesktop/cli@1.20.0-1/schemas/schema.json",
   "schemaVersion": 1
   "id": "your-todesktop-id",
   "icon": "./desktop-icon.png",
@@ -413,7 +413,7 @@ To enable JSON validation and IntelliSense for your `todesktop.json` file in com
 - For example, if using a hosted version of the schema:
   ```json
   {
-    "$schema": "https://unpkg.com/@todesktop/cli@1.19.0-1/schemas/schema.json",
+    "$schema": "https://unpkg.com/@todesktop/cli@1.20.0-1/schemas/schema.json",
     "id": "your-todesktop-id"
   }
   ```
@@ -535,6 +535,60 @@ Example:
 }
 ```
 
+### `fuses` - (optional) object
+
+Configure Electron Fuses to enable or disable certain Electron features at package time. Fuses are compile-time feature flags that cannot be changed at runtime, providing security benefits. See https://www.electronjs.org/docs/latest/tutorial/fuses for more information.
+
+Fuses allow you to harden your Electron application by disabling features that
+your app doesn't need. Once a fuse is flipped at build time, it cannot be
+changed at runtime.
+
+Example:
+
+```json
+{
+  "fuses": {
+    "runAsNode": false,
+    "enableNodeOptionsEnvironmentVariable": false,
+    "enableNodeCliInspectArguments": false,
+    "enableCookieEncryption": true,
+    "onlyLoadAppFromAsar": true
+  }
+}
+```
+
+#### `fuses.runAsNode` - (optional) boolean
+
+Controls whether the ELECTRON_RUN_AS_NODE environment variable is respected. When disabled, the env variable will be ignored. Default: true (enabled).
+
+#### `fuses.enableCookieEncryption` - (optional) boolean
+
+Controls whether the cookie store on disk is encrypted using OS-level cryptography. Default: false (disabled).
+
+#### `fuses.enableNodeOptionsEnvironmentVariable` - (optional) boolean
+
+Controls whether the NODE_OPTIONS environment variable is respected. When disabled, the env variable will be ignored. Default: true (enabled).
+
+#### `fuses.enableNodeCliInspectArguments` - (optional) boolean
+
+Controls whether command line arguments like --inspect are respected. When disabled, these arguments will be ignored. Default: true (enabled).
+
+#### `fuses.enableEmbeddedAsarIntegrityValidation` - (optional) boolean
+
+Controls whether Electron validates the integrity of the app.asar file. Requires the integrity block in the asar header. Default: false (disabled).
+
+#### `fuses.onlyLoadAppFromAsar` - (optional) boolean
+
+Controls whether Electron only loads the app from an asar archive. When enabled, Electron will not search for loose files. Default: false (disabled).
+
+#### `fuses.loadBrowserProcessSpecificV8Snapshot` - (optional) boolean
+
+Controls whether the browser process uses a V8 snapshot file located at browser_v8_context_snapshot.bin. Default: false (disabled).
+
+#### `fuses.grantFileProtocolExtraPrivileges` - (optional) boolean
+
+Controls whether pages loaded via file:// protocol get extra privileges. When disabled, file:// pages are more restricted. Requires Electron 29+. Default: true (enabled).
+
 ### `appProtocolScheme` - (optional) string | string[]
 
 Default: no protocol scheme is registered
@@ -1039,11 +1093,11 @@ effective `package.json` that ToDesktop will use.
 
 ### `packageManager` - (optional) string
 
-Default: If `yarn.lock` exists, `yarn` is used. If `pnpm-lock.yaml` or `shrinkwrap.yaml` exists, `pnpm` is used. Otherwise, `npm` is used.
+Default: If `bun.lockb` or `bun.lock` exists, `bun` is used. If `yarn.lock` exists, `yarn` is used. If `pnpm-lock.yaml` or `shrinkwrap.yaml` exists, `pnpm` is used. Otherwise, `npm` is used.
 
 Example: `yarn`
 
-The package manager to use when installing dependencies. Valid values are `npm`, `yarn` or `pnpm`.
+The package manager to use when installing dependencies. Valid values are `npm`, `yarn`, `pnpm` or `bun`.
 
 ### `pnpmVersion` - string
 
@@ -1625,6 +1679,13 @@ Now, when we build your app on ToDesktop servers, it will also run your custom
 
 ## Changelog
 
+### 1.20.0
+
+#### Minor Changes
+
+- 3ae0eaf: Add support for Electron Fuses configuration
+- 6e11f24: Add Bun package manager support
+
 ### 1.19.0
 
 #### Minor Changes

package/dist/cli.js

@@ -409,6 +409,7 @@ var PlatformName;
 })(PlatformName || (PlatformName = {}));
 var PackageManager;
 (function(PackageManager2) {
+  PackageManager2["bun"] = "bun";
   PackageManager2["npm"] = "npm";
   PackageManager2["pnpm"] = "pnpm";
   PackageManager2["yarn"] = "yarn";
@@ -2476,6 +2477,7 @@ var schema_default = {
       }
     },
     bytenode: { $ref: "#/definitions/bytenodeConfigProperty" },
+    fuses: { $ref: "#/definitions/fusesConfigProperty" },
     asar: { $ref: "#/definitions/asarProperty" },
     asarUnpack: { $ref: "#/definitions/asarUnpackProperty" },
     buildVersion: { $ref: "#/definitions/buildVersionProperty" },
@@ -2522,6 +2524,7 @@ var schema_default = {
     nodeVersion: { $ref: "#/definitions/nodeVersionProperty" },
     npmVersion: { $ref: "#/definitions/npmVersionProperty" },
     pnpmVersion: { $ref: "#/definitions/pnpmVersionProperty" },
+    bunVersion: { $ref: "#/definitions/bunVersionProperty" },
     packageJson: { $ref: "#/definitions/packageJsonProperty" },
     packageManager: { $ref: "#/definitions/packageManagerProperty" },
     rebuildLibrary: { $ref: "#/definitions/rebuildLibraryProperty" },
@@ -2596,6 +2599,45 @@ var schema_default = {
         }
       ]
     },
+    fusesConfigProperty: {
+      type: "object",
+      additionalProperties: false,
+      description: "Configure Electron Fuses to enable or disable certain Electron features at package time. Fuses are compile-time feature flags that cannot be changed at runtime, providing security benefits. See https://www.electronjs.org/docs/latest/tutorial/fuses for more information.",
+      properties: {
+        runAsNode: {
+          type: "boolean",
+          description: "Controls whether the ELECTRON_RUN_AS_NODE environment variable is respected. When disabled, the env variable will be ignored. Default: true (enabled)."
+        },
+        enableCookieEncryption: {
+          type: "boolean",
+          description: "Controls whether the cookie store on disk is encrypted using OS-level cryptography. Default: false (disabled)."
+        },
+        enableNodeOptionsEnvironmentVariable: {
+          type: "boolean",
+          description: "Controls whether the NODE_OPTIONS environment variable is respected. When disabled, the env variable will be ignored. Default: true (enabled)."
+        },
+        enableNodeCliInspectArguments: {
+          type: "boolean",
+          description: "Controls whether command line arguments like --inspect are respected. When disabled, these arguments will be ignored. Default: true (enabled)."
+        },
+        enableEmbeddedAsarIntegrityValidation: {
+          type: "boolean",
+          description: "Controls whether Electron validates the integrity of the app.asar file. Requires the integrity block in the asar header. Default: false (disabled)."
+        },
+        onlyLoadAppFromAsar: {
+          type: "boolean",
+          description: "Controls whether Electron only loads the app from an asar archive. When enabled, Electron will not search for loose files. Default: false (disabled)."
+        },
+        loadBrowserProcessSpecificV8Snapshot: {
+          type: "boolean",
+          description: "Controls whether the browser process uses a V8 snapshot file located at browser_v8_context_snapshot.bin. Default: false (disabled)."
+        },
+        grantFileProtocolExtraPrivileges: {
+          type: "boolean",
+          description: "Controls whether pages loaded via file:// protocol get extra privileges. When disabled, file:// pages are more restricted. Requires Electron 29+. Default: true (enabled)."
+        }
+      }
+    },
     appFilesProperty: {
       type: "array",
       description: "This option allows you to decide which files get uploaded to be built on the ToDesktop servers. By default, all files in your app path are included in your app, except for `node_modules` and `.git`. Dependencies are installed on our build servers as there could be platform-specific postinstall steps.",
@@ -3089,6 +3131,13 @@ var schema_default = {
       description: "The version of pnpm that ToDesktop should use for installation.",
       examples: ["8.10.5"]
     },
+    bunVersionProperty: {
+      type: "string",
+      validSemver: {},
+      minLength: 1,
+      description: "The version of Bun that ToDesktop should use for installation.",
+      examples: ["1.3.6"]
+    },
     packageJsonProperty: {
       type: "object",
       description: "If you want to override the default `package.json` configuration, use the `packageJson` property. For example, you can use this to override the `productName` or `version` properties.",
@@ -3096,10 +3145,10 @@ var schema_default = {
     },
     packageManagerProperty: {
       type: "string",
-      enum: ["npm", "yarn", "pnpm"],
-      description: "The package manager to use when installing dependencies. Valid values are `npm`, `yarn` or `pnpm`.",
+      enum: ["npm", "yarn", "pnpm", "bun"],
+      description: "The package manager to use when installing dependencies. Valid values are `npm`, `yarn`, `pnpm` or `bun`.",
       examples: ["yarn"],
-      default: "If `yarn.lock` exists, `yarn` is used. If `pnpm-lock.yaml` or `shrinkwrap.yaml` exists, `pnpm` is used. Otherwise, `npm` is used."
+      default: "If `bun.lockb` or `bun.lock` exists, `bun` is used. If `yarn.lock` exists, `yarn` is used. If `pnpm-lock.yaml` or `shrinkwrap.yaml` exists, `pnpm` is used. Otherwise, `npm` is used."
     },
     rebuildLibraryProperty: {
       type: "string",
@@ -3351,6 +3400,7 @@ var schema_default = {
         },
         appPath: { $ref: "#/definitions/appPathProperty" },
         bytenode: { $ref: "#/definitions/bytenodeConfigProperty" },
+        fuses: { $ref: "#/definitions/fusesConfigProperty" },
         asar: { $ref: "#/definitions/asarProperty" },
         asarUnpack: { $ref: "#/definitions/asarUnpackProperty" },
         buildVersion: { $ref: "#/definitions/buildVersionProperty" },
@@ -3378,6 +3428,7 @@ var schema_default = {
         nodeVersion: { $ref: "#/definitions/nodeVersionProperty" },
         npmVersion: { $ref: "#/definitions/npmVersionProperty" },
         pnpmVersion: { $ref: "#/definitions/pnpmVersionProperty" },
+        bunVersion: { $ref: "#/definitions/bunVersionProperty" },
         packageJson: { $ref: "#/definitions/packageJsonProperty" },
         packageManager: { $ref: "#/definitions/packageManagerProperty" },
         rebuildLibrary: { $ref: "#/definitions/rebuildLibraryProperty" },
@@ -4417,7 +4468,9 @@ var getAppFiles = async (globsInput, appPath, appPkgJson) => {
       path8.join(appPath, "package-lock.json"),
       path8.join(appPath, "yarn.lock"),
       path8.join(appPath, "pnpm-lock.yaml"),
-      path8.join(appPath, "shrinkwrap.yaml")
+      path8.join(appPath, "shrinkwrap.yaml"),
+      path8.join(appPath, "bun.lockb"),
+      path8.join(appPath, "bun.lock")
     );
   } else {
     globs.push("**");
@@ -7522,7 +7575,8 @@ async function getBuildAttributes({
     id: appId,
     nodeVersion,
     npmVersion,
-    pnpmVersion
+    pnpmVersion,
+    bunVersion
   } = getProjectConfig(configPath).config;
   const { id: userId } = await findAppUserId_default(appId);
   const contextUserId = (_a2 = currentUser()) == null ? void 0 : _a2.uid;
@@ -7535,6 +7589,7 @@ async function getBuildAttributes({
     nodeVersion,
     npmVersion,
     pnpmVersion,
+    bunVersion,
     userId
   };
 }
@@ -8633,7 +8688,7 @@ var package_default = {
     access: "public"
   },
   name: "@todesktop/cli",
-  version: "1.19.1",
+  version: "1.20.0-1",
   license: "MIT",
   author: "Dave Jeffery <dave@todesktop.com> (http://www.todesktop.com/)",
   homepage: "https://todesktop.com/cli",
@@ -8648,7 +8703,7 @@ var package_default = {
     node: ">=16"
   },
   scripts: {
-    build: "node scripts/esbuild.js",
+    build: "npm run docs:generate && npm run types:generate && node scripts/esbuild.js",
     dev: "node scripts/esbuild.js --link --watch --stage dev",
     "dev:local:prod": "node scripts/esbuild.js --link --watch --stage prod-local",
     "dev:prod": "node scripts/esbuild.js --link --watch",
@@ -8656,18 +8711,18 @@ var package_default = {
     format: "prettier . --write && eslint --fix",
     lint: "prettier . --check && eslint",
     "types:generate": "node scripts/generate-types.js",
-    release: "npm run docs:generate && npm run build && pnpx np --tag=latest",
-    "release-beta": "npm run docs:generate && npm run build && npx np --any-branch --no-tests --tag=beta",
     test: "ava",
     "test:e2e": "node test/output-snapshots/output.test.js",
     "test--watch": "npm test -- --watch",
-    typecheck: "tsc --noEmit && tsc-strict"
+    typecheck: "tsc --noEmit && tsc-strict",
+    prepublishOnly: "npm run docs:generate"
   },
   files: [
     "scripts/postinstall.js",
     "schemas",
     "dist",
-    ".env"
+    ".env",
+    "README.md"
   ],
   dependencies: {
     "@segment/analytics-node": "^2.3.0",