craft-native 0.0.392 → 0.0.393

package/dist/cli.js

@@ -3047,7 +3047,7 @@ function pinCraftNativeDependency(packagePath, craftVersion) {
 `);
 }
 // package.json
-var version = "0.0.392";
+var version = "0.0.393";
 
 // bin/cli.ts
 var spawnedFrom = process6.env[CRAFT_CLI_SPAWN_MARKER];

package/dist/index.cjs

@@ -375,7 +375,7 @@ function craftBinaryNotFoundMessage(triedPath) {
 `);
 }
 // package.json
-var version = "0.0.392";
+var version = "0.0.393";
 
 // src/sdk-version.ts
 var SDK_VERSION = version;
@@ -10783,6 +10783,15 @@ ${stdout}`;
       detail: `Expected Team ID ${policy.teamId}, bundle is signed by ${identity.teamId ?? "nobody"}`
     };
   }
+  if (policy.bundleIdentifier && identity.identifier !== policy.bundleIdentifier) {
+    return {
+      ok: false,
+      identity,
+      gatekeeperSource,
+      reason: "identifier-mismatch",
+      detail: `Expected bundle identifier ${policy.bundleIdentifier}, received ${identity.identifier ?? "none"}`
+    };
+  }
   return { ok: true, identity, gatekeeperSource };
 }
 async function clearQuarantine(appPath) {
@@ -10998,7 +11007,8 @@ class AutoUpdater extends import_events3.EventEmitter {
       if (!response.ok) {
         throw new Error(`HTTP ${response.status}`);
       }
-      const updateInfo = await response.json();
+      const input = await response.json();
+      const updateInfo = this.config.parseManifest ? this.config.parseManifest(input) : input;
       this.cachedEtag = response.headers.get("etag") || null;
       this.cachedLastModified = response.headers.get("last-modified") || null;
       this.cachedManifest = updateInfo;

package/dist/index.js

@@ -117,7 +117,7 @@ function craftBinaryNotFoundMessage(triedPath) {
 `);
 }
 // package.json
-var version = "0.0.392";
+var version = "0.0.393";
 
 // src/sdk-version.ts
 var SDK_VERSION = version;
@@ -10539,6 +10539,15 @@ ${stdout}`;
       detail: `Expected Team ID ${policy.teamId}, bundle is signed by ${identity.teamId ?? "nobody"}`
     };
   }
+  if (policy.bundleIdentifier && identity.identifier !== policy.bundleIdentifier) {
+    return {
+      ok: false,
+      identity,
+      gatekeeperSource,
+      reason: "identifier-mismatch",
+      detail: `Expected bundle identifier ${policy.bundleIdentifier}, received ${identity.identifier ?? "none"}`
+    };
+  }
   return { ok: true, identity, gatekeeperSource };
 }
 async function clearQuarantine(appPath) {
@@ -10754,7 +10763,8 @@ class AutoUpdater extends EventEmitter3 {
       if (!response.ok) {
         throw new Error(`HTTP ${response.status}`);
       }
-      const updateInfo = await response.json();
+      const input = await response.json();
+      const updateInfo = this.config.parseManifest ? this.config.parseManifest(input) : input;
       this.cachedEtag = response.headers.get("etag") || null;
       this.cachedLastModified = response.headers.get("last-modified") || null;
       this.cachedManifest = updateInfo;

package/dist/updater/index.d.ts

@@ -33,6 +33,8 @@ export interface UpdaterConfig {
      * The constructor will throw on a plain `http://` URL.
      */
     updateUrl: string;
+    /** Normalize an alternate release feed before version checks and caching. */
+    parseManifest?: (input: unknown) => UpdateInfo;
     currentVersion: string;
     appPath: string;
     autoDownload?: boolean;

package/dist/updater/macos-bundle.d.ts

@@ -32,6 +32,8 @@ export interface BundleIdentity {
     authority: string | null;
 }
 export interface BundleTrustPolicy {
+    /** Require the same application, in addition to the signing team. */
+    bundleIdentifier?: string;
     /**
      * Team ID the bundle must be signed by.
      *
@@ -49,7 +51,7 @@ export interface BundleTrustPolicy {
      */
     requireNotarized?: boolean;
 }
-export type BundleTrustFailure = 'unreadable' | 'codesign-invalid' | 'gatekeeper-rejected' | 'team-mismatch';
+export type BundleTrustFailure = 'unreadable' | 'codesign-invalid' | 'gatekeeper-rejected' | 'team-mismatch' | 'identifier-mismatch';
 export interface BundleTrustResult {
     ok: boolean;
     identity: BundleIdentity;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "craft-native",
-  "version": "0.0.392",
+  "version": "0.0.393",
   "type": "module",
   "description": "Build desktop apps with web languages - TypeScript SDK for Craft",
   "author": "Chris Breuer <chris@stacksjs.org>",