codeplay-common 4.8.7 → 4.8.8

package/files/finalrelease

@@ -7,7 +7,7 @@ node finalrelease "1,2,7"
 
 import { existsSync, readFileSync, readdirSync, promises, constants, writeFileSync, unlinkSync, mkdirSync, renameSync } from 'fs';
 import { join, resolve } from 'path';
-import { execSync, execFileSync } from 'child_process';
+import { execSync, execFileSync } from 'child_process';
 import { createInterface } from 'readline';
 
 import { fileURLToPath } from 'url';
@@ -179,49 +179,49 @@ const config = JSON.parse(fs.readFileSync(configPath, 'utf8'));
 
 const _appUniqueId = config.android?.APP_UNIQUE_ID;
 const _appName=config.appName;
-const _appPackageId=config.appId;
-
-const releaseSyncConfigPath = join(__dirname, 'buildCodeplay', 'release-sync.config.json');
-let releaseSyncConfig = {};
-if (existsSync(releaseSyncConfigPath)) {
-    try {
-        releaseSyncConfig = JSON.parse(readFileSync(releaseSyncConfigPath, 'utf8'));
-    } catch (error) {
-        console.warn(`⚠️ Could not read ${releaseSyncConfigPath}: ${error.message}`);
-    }
-}
-const RELEASE_SYNC_URL = process.env.CODEPLAY_RELEASE_SYNC_URL || releaseSyncConfig.url || 'https://htmlcodeplay.com/codeplay/api/v1/release/sync';
-const RELEASE_SYNC_TOKEN = process.env.CODEPLAY_RELEASE_SYNC_TOKEN || releaseSyncConfig.token || '';
-const RELEASE_PLATFORM_IDS = { PlayStore: 1, SamsungStore: 13, AmazonStore: 17, MiStore: 15, HuaweiStore: 12, OppoStore: 14, VivoStore: 16 };
-
-function syncReleaseToCodeplay(storeName, finalVersionName, finalVersionCode, releasedDate) {
-    if (!RELEASE_SYNC_TOKEN) {
-        console.warn(`⚠️ Codeplay release sync skipped: add a token to ${releaseSyncConfigPath}.`);
-        return;
-    }
-    const payload = JSON.stringify({
-        app_name: _appName,
-        package_id: _appPackageId,
-        version_name: String(finalVersionName),
-        version_code: String(finalVersionCode),
-        released_date: releasedDate,
-        language_id: 0,
-        language_name: 'Capacitor+ Framework 7',
-        notes: 'Automated release update',
-        status: 1,
-        folder_name: path.basename(process.cwd()),
-        app_unique_id: String(_appUniqueId || ''),
-        platform_id: RELEASE_PLATFORM_IDS[storeName],
-    });
-    try {
-        const response = execFileSync('curl.exe', ['-sS', '--fail-with-body', '-X', 'POST', RELEASE_SYNC_URL,
-            '-H', 'Content-Type: application/json', '-H', `X-Release-Token: ${RELEASE_SYNC_TOKEN}`, '--data-binary', payload],
-            { encoding: 'utf8', stdio: ['ignore', 'pipe', 'pipe'] });
-        console.log(`✅ Codeplay sync (${storeName}): ${response.trim()}`);
-    } catch (error) {
-        console.warn(`⚠️ Codeplay sync failed for ${storeName}; continuing release builds: ${error.message}`);
-    }
-}
+const _appPackageId=config.appId;
+
+const releaseSyncConfigPath = join(__dirname, 'buildCodeplay', 'release-sync.config.json');
+let releaseSyncConfig = {};
+if (existsSync(releaseSyncConfigPath)) {
+    try {
+        releaseSyncConfig = JSON.parse(readFileSync(releaseSyncConfigPath, 'utf8'));
+    } catch (error) {
+        console.warn(`⚠️ Could not read ${releaseSyncConfigPath}: ${error.message}`);
+    }
+}
+const RELEASE_SYNC_URL = process.env.CODEPLAY_RELEASE_SYNC_URL || releaseSyncConfig.url || 'https://htmlcodeplay.com/codeplay/api/v1/release/sync';
+const RELEASE_SYNC_TOKEN = process.env.CODEPLAY_RELEASE_SYNC_TOKEN || releaseSyncConfig.token || '';
+const RELEASE_PLATFORM_IDS = { PlayStore: 1, SamsungStore: 13, AmazonStore: 17, MiStore: 15, HuaweiStore: 12, OppoStore: 14, VivoStore: 16 };
+
+function syncReleaseToCodeplay(storeName, finalVersionName, finalVersionCode, releasedDate) {
+    if (!RELEASE_SYNC_TOKEN) {
+        console.warn(`⚠️ Codeplay release sync skipped: add a token to ${releaseSyncConfigPath}.`);
+        return;
+    }
+    const payload = JSON.stringify({
+        app_name: _appName,
+        package_id: _appPackageId,
+        version_name: String(finalVersionName),
+        version_code: String(finalVersionCode),
+        released_date: releasedDate,
+        language_id: 0,
+        language_name: 'Capacitor+ Framework 7',
+        notes: 'Automated release update',
+        status: 1,
+        folder_name: path.basename(process.cwd()),
+        app_unique_id: String(_appUniqueId || ''),
+        platform_id: RELEASE_PLATFORM_IDS[storeName],
+    });
+    try {
+        const response = execFileSync('curl.exe', ['-sS', '--fail-with-body', '-X', 'POST', RELEASE_SYNC_URL,
+            '-H', 'Content-Type: application/json', '-H', `X-Release-Token: ${RELEASE_SYNC_TOKEN}`, '--data-binary', payload],
+            { encoding: 'utf8', stdio: ['ignore', 'pipe', 'pipe'] });
+        console.log(`✅ Codeplay sync (${storeName}): ${response.trim()}`);
+    } catch (error) {
+        console.warn(`⚠️ Codeplay sync failed for ${storeName}; continuing release builds: ${error.message}`);
+    }
+}
 
 const FLOWCHART_API_APP_ID = 228;
 const FLOWCHART_SHARED_PATH = join('public', 'src', 'shared.js');
@@ -742,6 +742,71 @@ function findGradleBlock(content, headerPattern) {
     return null;
 }
 
+function ensureReleaseCodeOptimization() {
+    const currentContent = readFileSync(gradleFilePath, 'utf8');
+    const releaseBlock = findGradleBlock(currentContent, /buildTypes\s*\{[\s\S]*?\brelease\s*/);
+    if (!releaseBlock) throw new Error('Release build configuration was not found.');
+
+    const releaseContent = currentContent.slice(releaseBlock.start, releaseBlock.end);
+    const optimizedContent = releaseContent.replace(
+        /getDefaultProguardFile\(\s*(['"])proguard-android\.txt\1\s*\)/g,
+        "getDefaultProguardFile('proguard-android-optimize.txt')"
+    );
+    if (!/getDefaultProguardFile\(\s*(['"])proguard-android-optimize\.txt\1\s*\)/.test(optimizedContent)) {
+        throw new Error('Release build must use the optimisation-enabled default ProGuard rules.');
+    }
+    if (optimizedContent !== releaseContent) {
+        writeFileSync(gradleFilePath, currentContent.slice(0, releaseBlock.start)
+            + optimizedContent + currentContent.slice(releaseBlock.end), 'utf8');
+    }
+}
+
+function signReleaseBundleWithSha256() {
+    const buildOptions = readCapacitorConfig().android?.buildOptions;
+    if (!buildOptions?.keystorePath || !buildOptions.keystorePassword
+        || !buildOptions.keystoreAlias || !buildOptions.keystoreAliasPassword) {
+        throw new Error('Android AAB signing requires the existing keystore path, alias and passwords.');
+    }
+
+    const keystorePath = resolve(__dirname, 'android', buildOptions.keystorePath);
+    const bundleDirectory = join(__dirname, 'android', 'app', 'build', 'outputs', 'bundle', 'release');
+    const unsignedBundle = join(bundleDirectory, 'app-release.aab');
+    const signedBundle = join(bundleDirectory, 'app-release-signed.aab');
+    if (!existsSync(keystorePath) || !existsSync(unsignedBundle)) {
+        throw new Error('The configured upload keystore or release AAB was not found.');
+    }
+
+    const jarsigner = process.env.JAVA_HOME
+        ? join(process.env.JAVA_HOME, 'bin', process.platform === 'win32' ? 'jarsigner.exe' : 'jarsigner')
+        : 'jarsigner';
+    try {
+        // Keep passwords out of command arguments and error output.
+        execFileSync(jarsigner, [
+            '-sigalg', 'SHA256withRSA', '-digestalg', 'SHA-256',
+            '-keystore', keystorePath,
+            '-storepass:env', 'CODEPLAY_AAB_STORE_PASSWORD',
+            '-keypass:env', 'CODEPLAY_AAB_KEY_PASSWORD',
+            '-signedjar', signedBundle, unsignedBundle, buildOptions.keystoreAlias,
+        ], {
+            stdio: 'pipe',
+            env: {
+                ...process.env,
+                CODEPLAY_AAB_STORE_PASSWORD: buildOptions.keystorePassword,
+                CODEPLAY_AAB_KEY_PASSWORD: buildOptions.keystoreAliasPassword,
+            },
+        });
+        const verification = execFileSync(jarsigner, [
+            '-J-Duser.language=en', '-J-Duser.country=US', '-verify', signedBundle,
+        ], { encoding: 'utf8', stdio: 'pipe' });
+        if (!verification.includes('jar verified.') || verification.includes('treated as unsigned')) {
+            throw new Error('Signature verification failed.');
+        }
+    } catch {
+        throw new Error('SHA-256 AAB signing or verification failed. Check the configured upload key and JDK; release stopped.');
+    }
+    console.log('✅ Release AAB signed with SHA-256 using the existing upload key and signature verified.');
+}
+
 const amazonWindowExtensionsDependency = 'implementation "androidx.window.extensions.core:core:1.0.0"';
 const amazonWindowExtensionsDependencyPattern = /^[ \t]*implementation\s+["']androidx\.window\.extensions\.core:core:[^"']+["'][ \t]*(?:\r?\n)?/gm;
 
@@ -1013,11 +1078,14 @@ rl.question('Enter new versionCode (press enter to keep current): ', (newVersion
 
                 execSync('npx cap sync android', { stdio: 'inherit' });
 
+                ensureReleaseCodeOptimization();
+
                 if (buildType === "APK") {
                     console.log("📦 Using custom Node signing script for APK build...");
                     execSync('node buildCodeplay/apk-store-builder.js', { stdio: 'inherit' });
                 } else {
                     execSync(`npx cap build android --androidreleasetype=${buildType}`, { stdio: 'inherit' });
+                    signReleaseBundleWithSha256();
                 }
 
 
@@ -1036,11 +1104,11 @@ rl.question('Enter new versionCode (press enter to keep current): ', (newVersion
                 const checkFullPath = join("AAB", newFileName.replace(/\.aab$/, `.${newExt}`));
 
                 // Rename the output file
-                if (existsSync(oldFilePath)) {
-                    renameSync(oldFilePath, checkFullPath);
-                    console.log(`✅ Renamed output ${newExt.toUpperCase()} file to: ${path.basename(checkFullPath)}`);
-                    syncReleaseToCodeplay(storeName, finalVersionName, finalVersionCode, new Date().toISOString().slice(0, 10));
-                } else {
+                if (existsSync(oldFilePath)) {
+                    renameSync(oldFilePath, checkFullPath);
+                    console.log(`✅ Renamed output ${newExt.toUpperCase()} file to: ${path.basename(checkFullPath)}`);
+                    syncReleaseToCodeplay(storeName, finalVersionName, finalVersionCode, new Date().toISOString().slice(0, 10));
+                } else {
                     console.error(`❌ ${newExt.toUpperCase()} file not found after build.`);
                 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeplay-common",
-  "version": "4.8.7",
+  "version": "4.8.8",
   "description": "Common build scripts and files",
   "scripts": {
 	"postinstall": "node scripts/sync-files.js",