@todesktop/shared 7.195.0 → 7.196.1

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # @todesktop/shared
 
+## 7.196.1
+
+### Patch Changes
+
+- 3d6da7a: Add support for `app.useTdCert` flag to use ToDesktop code signing
+  certificates for Mac and Windows builds
+
+## 7.196.0
+
+### Minor Changes
+
+- 3ae0eaf: Add support for Electron Fuses configuration
+- 6e11f24: Add Bun package manager support
+
 ## 7.195.0
 
 ### Minor Changes

package/lib/cjs/base.d.ts

@@ -60,6 +60,7 @@ export interface IAppMeta {
         shouldCodeSign?: boolean;
         shouldRelease?: boolean;
         shouldSendCompletionEmail?: boolean;
+        source?: 'security-update';
         sourceArchiveDetails?: {
             bucket: string;
             hash?: string;
@@ -102,6 +103,24 @@ export interface IAppMeta {
         tempHSMCertName: string;
     };
 }
+export interface ElectronFuses {
+    /** Controls whether the cookie store on disk is encrypted using OS-level cryptography. Default: false (disabled). */
+    enableCookieEncryption?: boolean;
+    /** Controls whether Electron validates the integrity of the app.asar file. Default: false (disabled). */
+    enableEmbeddedAsarIntegrityValidation?: boolean;
+    /** Controls whether command line arguments like --inspect are respected. Default: true (enabled). */
+    enableNodeCliInspectArguments?: boolean;
+    /** Controls whether the NODE_OPTIONS environment variable is respected. Default: true (enabled). */
+    enableNodeOptionsEnvironmentVariable?: boolean;
+    /** Controls whether pages loaded via file:// protocol get extra privileges. Requires Electron 29+. Default: true (enabled). */
+    grantFileProtocolExtraPrivileges?: boolean;
+    /** Controls whether the browser process uses a V8 snapshot file. Default: false (disabled). */
+    loadBrowserProcessSpecificV8Snapshot?: boolean;
+    /** Controls whether Electron only loads the app from an asar archive. Default: false (disabled). */
+    onlyLoadAppFromAsar?: boolean;
+    /** Controls whether the ELECTRON_RUN_AS_NODE environment variable is respected. Default: true (enabled). */
+    runAsNode?: boolean;
+}
 export interface ToDesktopJson {
     appBuilderLibVersion?: string;
     appFiles?: string[];
@@ -112,6 +131,7 @@ export interface ToDesktopJson {
     asarUnpack?: boolean | string[];
     bucket?: string;
     buildVersion?: string;
+    bunVersion?: string;
     bytenode?: {
         enabled?: boolean;
         files?: string[];
@@ -133,6 +153,7 @@ export interface ToDesktopJson {
     extraResources?: ExtraFileReference[];
     fileAssociations?: IAppBuilderLib['config']['fileAssociations'];
     filesForDistribution?: string[];
+    fuses?: ElectronFuses;
     icon: FilePath;
     id: string;
     includeSubNodeModules?: boolean;
@@ -163,7 +184,7 @@ export interface ToDesktopJson {
     };
     nodeVersion?: string;
     npmVersion?: string;
-    packageManager?: 'npm' | 'pnpm' | 'yarn';
+    packageManager?: 'bun' | 'npm' | 'pnpm' | 'yarn';
     pnpmVersion?: string;
     productName?: string;
     rebuildLibrary?: '@electron/rebuild' | 'app-builder';
@@ -274,6 +295,9 @@ export interface BaseApp extends Schemable {
     customMacCodeSign?: CustomMacCodeSign;
     customNotarization?: CustomMacNotarization;
     customWindowsCodeSign?: CustomWindowsCodeSignAzureTrustedSigning | CustomWindowsCodeSignEV | CustomWindowsCodeSignFile;
+    debConfig?: {
+        installAptSources?: boolean;
+    };
     domainVerificationCode?: string;
     id: string;
     macHsmCertNames?: Record<MacTarget, string>;
@@ -313,6 +337,7 @@ export interface BaseApp extends Schemable {
         login?: string;
     };
     subscription?: Subscription;
+    useTdCert?: boolean;
     windowsHsmCertNames?: Record<WindowsTarget, string>;
 }
 export type Subscription = {

package/lib/cjs/desktopify.d.ts

@@ -20,6 +20,7 @@ export type FilePath = string;
 export type SemanticVersion = string;
 export type URL = string;
 export declare enum PackageManager {
+    bun = "bun",
     npm = "npm",
     pnpm = "pnpm",
     yarn = "yarn"

package/lib/cjs/desktopify.js

@@ -9,6 +9,7 @@ var PlatformName;
 })(PlatformName || (exports.PlatformName = PlatformName = {}));
 var PackageManager;
 (function (PackageManager) {
+    PackageManager["bun"] = "bun";
     PackageManager["npm"] = "npm";
     PackageManager["pnpm"] = "pnpm";
     PackageManager["yarn"] = "yarn";

package/lib/esm/base.d.ts

@@ -60,6 +60,7 @@ export interface IAppMeta {
         shouldCodeSign?: boolean;
         shouldRelease?: boolean;
         shouldSendCompletionEmail?: boolean;
+        source?: 'security-update';
         sourceArchiveDetails?: {
             bucket: string;
             hash?: string;
@@ -102,6 +103,24 @@ export interface IAppMeta {
         tempHSMCertName: string;
     };
 }
+export interface ElectronFuses {
+    /** Controls whether the cookie store on disk is encrypted using OS-level cryptography. Default: false (disabled). */
+    enableCookieEncryption?: boolean;
+    /** Controls whether Electron validates the integrity of the app.asar file. Default: false (disabled). */
+    enableEmbeddedAsarIntegrityValidation?: boolean;
+    /** Controls whether command line arguments like --inspect are respected. Default: true (enabled). */
+    enableNodeCliInspectArguments?: boolean;
+    /** Controls whether the NODE_OPTIONS environment variable is respected. Default: true (enabled). */
+    enableNodeOptionsEnvironmentVariable?: boolean;
+    /** Controls whether pages loaded via file:// protocol get extra privileges. Requires Electron 29+. Default: true (enabled). */
+    grantFileProtocolExtraPrivileges?: boolean;
+    /** Controls whether the browser process uses a V8 snapshot file. Default: false (disabled). */
+    loadBrowserProcessSpecificV8Snapshot?: boolean;
+    /** Controls whether Electron only loads the app from an asar archive. Default: false (disabled). */
+    onlyLoadAppFromAsar?: boolean;
+    /** Controls whether the ELECTRON_RUN_AS_NODE environment variable is respected. Default: true (enabled). */
+    runAsNode?: boolean;
+}
 export interface ToDesktopJson {
     appBuilderLibVersion?: string;
     appFiles?: string[];
@@ -112,6 +131,7 @@ export interface ToDesktopJson {
     asarUnpack?: boolean | string[];
     bucket?: string;
     buildVersion?: string;
+    bunVersion?: string;
     bytenode?: {
         enabled?: boolean;
         files?: string[];
@@ -133,6 +153,7 @@ export interface ToDesktopJson {
     extraResources?: ExtraFileReference[];
     fileAssociations?: IAppBuilderLib['config']['fileAssociations'];
     filesForDistribution?: string[];
+    fuses?: ElectronFuses;
     icon: FilePath;
     id: string;
     includeSubNodeModules?: boolean;
@@ -163,7 +184,7 @@ export interface ToDesktopJson {
     };
     nodeVersion?: string;
     npmVersion?: string;
-    packageManager?: 'npm' | 'pnpm' | 'yarn';
+    packageManager?: 'bun' | 'npm' | 'pnpm' | 'yarn';
     pnpmVersion?: string;
     productName?: string;
     rebuildLibrary?: '@electron/rebuild' | 'app-builder';
@@ -274,6 +295,9 @@ export interface BaseApp extends Schemable {
     customMacCodeSign?: CustomMacCodeSign;
     customNotarization?: CustomMacNotarization;
     customWindowsCodeSign?: CustomWindowsCodeSignAzureTrustedSigning | CustomWindowsCodeSignEV | CustomWindowsCodeSignFile;
+    debConfig?: {
+        installAptSources?: boolean;
+    };
     domainVerificationCode?: string;
     id: string;
     macHsmCertNames?: Record<MacTarget, string>;
@@ -313,6 +337,7 @@ export interface BaseApp extends Schemable {
         login?: string;
     };
     subscription?: Subscription;
+    useTdCert?: boolean;
     windowsHsmCertNames?: Record<WindowsTarget, string>;
 }
 export type Subscription = {

package/lib/esm/desktopify.d.ts

@@ -20,6 +20,7 @@ export type FilePath = string;
 export type SemanticVersion = string;
 export type URL = string;
 export declare enum PackageManager {
+    bun = "bun",
     npm = "npm",
     pnpm = "pnpm",
     yarn = "yarn"

package/lib/esm/desktopify.js

@@ -6,6 +6,7 @@ export var PlatformName;
 })(PlatformName || (PlatformName = {}));
 export var PackageManager;
 (function (PackageManager) {
+    PackageManager["bun"] = "bun";
     PackageManager["npm"] = "npm";
     PackageManager["pnpm"] = "pnpm";
     PackageManager["yarn"] = "yarn";

package/package.json

@@ -1,7 +1,8 @@
 {
   "name": "@todesktop/shared",
-  "version": "7.195.0",
+  "version": "7.196.1",
   "description": "",
+  "sideEffects": false,
   "main": "./lib/cjs/index.js",
   "module": "./lib/esm/index.js",
   "types": "./lib/esm/index.d.ts",

package/src/base.ts

@@ -74,6 +74,7 @@ export interface IAppMeta {
     shouldCodeSign?: boolean;
     shouldRelease?: boolean;
     shouldSendCompletionEmail?: boolean;
+    source?: 'security-update';
     sourceArchiveDetails?: {
       bucket: string;
       hash?: string;
@@ -117,6 +118,25 @@ export interface IAppMeta {
   };
 }
 
+export interface ElectronFuses {
+  /** Controls whether the cookie store on disk is encrypted using OS-level cryptography. Default: false (disabled). */
+  enableCookieEncryption?: boolean;
+  /** Controls whether Electron validates the integrity of the app.asar file. Default: false (disabled). */
+  enableEmbeddedAsarIntegrityValidation?: boolean;
+  /** Controls whether command line arguments like --inspect are respected. Default: true (enabled). */
+  enableNodeCliInspectArguments?: boolean;
+  /** Controls whether the NODE_OPTIONS environment variable is respected. Default: true (enabled). */
+  enableNodeOptionsEnvironmentVariable?: boolean;
+  /** Controls whether pages loaded via file:// protocol get extra privileges. Requires Electron 29+. Default: true (enabled). */
+  grantFileProtocolExtraPrivileges?: boolean;
+  /** Controls whether the browser process uses a V8 snapshot file. Default: false (disabled). */
+  loadBrowserProcessSpecificV8Snapshot?: boolean;
+  /** Controls whether Electron only loads the app from an asar archive. Default: false (disabled). */
+  onlyLoadAppFromAsar?: boolean;
+  /** Controls whether the ELECTRON_RUN_AS_NODE environment variable is respected. Default: true (enabled). */
+  runAsNode?: boolean;
+}
+
 export interface ToDesktopJson {
   appBuilderLibVersion?: string;
   appFiles?: string[];
@@ -127,6 +147,7 @@ export interface ToDesktopJson {
   asarUnpack?: boolean | string[];
   bucket?: string;
   buildVersion?: string;
+  bunVersion?: string;
   bytenode?: {
     enabled?: boolean;
     files?: string[];
@@ -148,6 +169,7 @@ export interface ToDesktopJson {
   extraResources?: ExtraFileReference[];
   fileAssociations?: IAppBuilderLib['config']['fileAssociations'];
   filesForDistribution?: string[];
+  fuses?: ElectronFuses;
   icon: FilePath;
   id: string;
   includeSubNodeModules?: boolean;
@@ -178,7 +200,7 @@ export interface ToDesktopJson {
   };
   nodeVersion?: string;
   npmVersion?: string;
-  packageManager?: 'npm' | 'pnpm' | 'yarn';
+  packageManager?: 'bun' | 'npm' | 'pnpm' | 'yarn';
   pnpmVersion?: string;
   productName?: string;
   rebuildLibrary?: '@electron/rebuild' | 'app-builder';
@@ -315,6 +337,9 @@ export interface BaseApp extends Schemable {
     | CustomWindowsCodeSignAzureTrustedSigning
     | CustomWindowsCodeSignEV
     | CustomWindowsCodeSignFile;
+  debConfig?: {
+    installAptSources?: boolean;
+  };
   domainVerificationCode?: string;
   id: string;
 
@@ -352,6 +377,7 @@ export interface BaseApp extends Schemable {
   shouldCreateSnapFiles?: boolean;
   snapStore?: { description?: string; login?: string };
   subscription?: Subscription;
+  useTdCert?: boolean;
   windowsHsmCertNames?: Record<WindowsTarget, string>;
 }
 

package/src/desktopify.ts

@@ -35,6 +35,7 @@ export type SemanticVersion = string; // TODO: define more
 export type URL = string; // TODO: define more
 
 export enum PackageManager {
+  bun = 'bun',
   npm = 'npm',
   pnpm = 'pnpm',
   yarn = 'yarn',