crossbind 2.0.0-beta.68 → 2.0.0-beta.69

package/src/actions/googleSignIn.js

@@ -1,78 +0,0 @@
-import http from 'node:http';
-import { createHash, randomBytes } from 'node:crypto';
-import openUrl from '../utils/openUrl.js';
-
-// crossbind's own OAuth client, a desktop app's. Google counts a desktop app's secret as public, as every copy of the app
-// carries it, and PKCE ties each sign-in to the crossbind that started it. The secret is split only so that secret
-// scanners do not take it for a leaked one.
-const CLIENT_ID = '1070398855248-kemr8k5u0k8l2ovuvql32e220fhap165.apps.googleusercontent.com';
-const CLIENT_SECRET = ['GOCSPX', '5w7qGQktYssQg9C5ClWs4x0hZeHV'].join('-');
-const AUTHORIZE = 'https://accounts.google.com/o/oauth2/v2/auth';
-const TOKEN = 'https://oauth2.googleapis.com/token';
-
-const randomText = (bytes) => randomBytes(bytes).toString('base64url');
-
-async function tokens(grant) {
-    const response = await fetch(TOKEN, { method: 'POST', body: new URLSearchParams({ client_id: CLIENT_ID, client_secret: CLIENT_SECRET, ...grant }) });
-    const body = await response.json().catch(() => ({}));
-    if (!response.ok) {
-        const reason = `${response.status} ${body.error ?? ''} ${body.error_description ?? ''}`.trim();
-        throw Object.assign(new Error(`crossbind: Google refused crossbind's sign-in: ${reason}`), { reason: body.error });
-    }
-    return body;
-}
-
-// The code Google's page sends the browser back to this machine with once the user has signed in. A request without this
-// sign-in's state is no answer of Google's to it, and is turned away.
-function codeFrom(server, state) {
-    return new Promise((resolve, reject) => {
-        server.on('request', (request, response) => {
-            const query = new URL(request.url, 'http://127.0.0.1').searchParams;
-            if (query.get('state') !== state) {
-                response.writeHead(400, { connection: 'close' }).end();
-                return;
-            }
-            const code = query.get('code');
-            response.writeHead(200, { 'content-type': 'text/plain; charset=utf-8', connection: 'close' })
-                .end(code ? 'crossbind is signed in. Close this tab and go back to the terminal.' : 'crossbind is not signed in. Go back to the terminal.');
-            if (code) resolve(code);
-            else reject(new Error(`crossbind: Google's sign-in ended with ${query.get('error') ?? 'no code'}.`));
-        });
-    });
-}
-
-// Signs the user in with their Google account, in their browser, for scope: Google's page sends the browser back to a
-// port of this machine. It resolves to Google's tokens, whose scope says what the user granted, as the page lets them
-// leave a scope out.
-export async function signIn(scope) {
-    const server = http.createServer();
-    await new Promise((resolve, reject) => {
-        server.once('error', reject);
-        server.listen(0, '127.0.0.1', resolve);
-    });
-    const verifier = randomText(32);
-    const state = randomText(16);
-    const redirect = `http://127.0.0.1:${server.address().port}`;
-    const page = `${AUTHORIZE}?${new URLSearchParams({
-        client_id: CLIENT_ID,
-        redirect_uri: redirect,
-        response_type: 'code',
-        scope,
-        code_challenge: createHash('sha256').update(verifier).digest('base64url'),
-        code_challenge_method: 'S256',
-        state,
-        prompt: 'select_account',
-    })}`;
-    console.log(`crossbind: opening Google's sign-in in your browser; if it does not open, go to ${page}`);
-    openUrl(page);
-    try {
-        const code = await codeFrom(server, state);
-        return await tokens({ grant_type: 'authorization_code', code, code_verifier: verifier, redirect_uri: redirect });
-    } finally {
-        server.close();
-    }
-}
-
-// An hour's access token for the refresh token of an earlier sign-in. Google refuses one revoked or expired, with the
-// reason invalid_grant.
-export const accessToken = async (refreshToken) => (await tokens({ grant_type: 'refresh_token', refresh_token: refreshToken })).access_token;

package/src/actions/playSetup.js

@@ -1,19 +0,0 @@
-import { PLAY_SCOPE, keepSignIn } from './googlePlay.js';
-import { signIn } from './googleSignIn.js';
-import { askYesNo } from '../utils/ask.js';
-
-// Signs the user in to Google Play with their Google account, in their browser, once they say yes to question, and keeps
-// the sign-in in the system's keychain for later publishes. Google's page lets the user leave Play's access out, so the
-// sign-in is asked for again until it has it, or is null once the user says no.
-export async function signInToPlay(question) {
-    let asked = question;
-    while (await askYesNo(asked)) {
-        const { refresh_token: refreshToken, scope = '' } = await signIn(PLAY_SCOPE);
-        if (scope.split(' ').includes(PLAY_SCOPE)) {
-            if (!keepSignIn(refreshToken)) console.log('crossbind: this machine has no keychain to keep the sign-in in, so the next publish signs in again.');
-            return { refreshToken };
-        }
-        asked = "The sign-in left Google Play's access out, its box on Google's page. Sign in again? [Y/n] ";
-    }
-    return null;
-}

package/src/actions/publishAndroid.js

@@ -1,102 +0,0 @@
-import fs from 'node:fs';
-import state from '../state/index.js';
-import { SIGNING } from './androidGradle.js';
-import {
-    androidAppId, androidVersion, appBuildNumber, appOutputOf, clearAppOutputs,
-} from './buildApp.js';
-import {
-    PLAY, highestVersionCode, keptSignIn, playCredentials, uploadBundle,
-} from './googlePlay.js';
-import { signInToPlay } from './playSetup.js';
-import { askAppId } from './appSetup.js';
-import { makeUploadKey, releaseSigningEnv } from './uploadKey.js';
-import { askLine, askYesNo, hasTerminal } from '../utils/ask.js';
-import loadSystemConfig from '../utils/systemConfig.js';
-import openUrl from '../utils/openUrl.js';
-
-const PLAY_CONSOLE = 'https://play.google.com/console';
-const NO_APP_ID = 'crossbind: Google Play knows an app by its package name, app.id, which crossbind.config.js does not set: set it, as com.example.myapp, before the first publish, as Play keeps it for good.';
-const NO_UPLOAD_KEY = `crossbind: Google Play takes bundles signed with your upload key: crossbind app upload-key makes one, or ${SIGNING.keystore}, ${SIGNING.alias} and ${SIGNING.password} name yours.`;
-const NO_CREDENTIALS = `crossbind: Google Play takes uploads from your Google account, which a publish on a terminal signs in to, or from a service account: set ${PLAY.serviceAccount} to its e-mail, with gcloud signed in, ${PLAY.key} to its JSON key, or ${PLAY.token} to an access token of it; app.md's Publishing says how to make one.`;
-const SIGN_IN = 'Google Play takes uploads from your Google account once crossbind is signed in to it. Sign in now, in your browser? [Y/n] ';
-const ANOTHER_ACCOUNT = 'Sign in with another Google account? [Y/n] ';
-
-// The highest versionCode Play has seen, and the credentials that saw it, once the user has done what Play asks for,
-// which only the user can do: in Play Console, which crossbind opens before it waits for Enter and checks again, or, for
-// a Google account without release rights, by signing in with another.
-async function highestWithPlayConsole(appId, credentials) {
-    let current = credentials;
-    for (;;) {
-        try {
-            return { highest: await highestVersionCode(appId, current), credentials: current };
-        } catch (error) {
-            console.log(error.message);
-            if (error.status === 403 && current.refreshToken) {
-                current = await signInToPlay(ANOTHER_ACCOUNT);
-                if (!current) throw error;
-            } else {
-                if ([403, 404].includes(error.status)) {
-                    console.log(`crossbind: opening ${PLAY_CONSOLE}.`);
-                    openUrl(PLAY_CONSOLE);
-                }
-                await askLine('Press Enter once that is done to check again, or Ctrl-C to stop. ');
-            }
-        }
-    }
-}
-
-// Builds an Android app with the next versionCode Google Play takes, signed with the upload key, and releases its bundle
-// on a track. All it needs is checked before the build, which takes minutes: on a terminal, what is missing is asked for
-// and set up; without one, as in CI, every missing piece is named at once.
-export async function publishAndroid({ track, status, viteArgs }, { runVite }) {
-    const isGuided = hasTerminal();
-    const missing = [];
-    let appId = state.config.app.id === undefined ? null : androidAppId();
-    if (!appId && isGuided) appId = await askAppId('Google Play', 'package name');
-    if (!appId) missing.push(NO_APP_ID);
-
-    let signing = await releaseSigningEnv();
-    if (!signing.isSigned && isGuided && await askYesNo('This machine has no upload key, which Google Play takes bundles signed with. Make one now? [Y/n] ')) {
-        await makeUploadKey();
-        state.config.system = loadSystemConfig();
-        signing = await releaseSigningEnv();
-    }
-    if (!signing.isSigned) missing.push(NO_UPLOAD_KEY);
-
-    let credentials = playCredentials(process.env, state.config.system) ?? await keptSignIn();
-    if (!credentials && isGuided) credentials = await signInToPlay(SIGN_IN);
-    if (!credentials) missing.push(NO_CREDENTIALS);
-    if (missing.length > 0) throw new Error(missing.join('\n'));
-    const version = state.config.package?.version ?? '1.0.0';
-    console.log(`crossbind: publishing ${appId} ${version} to Google Play's ${track} track.`);
-
-    let highest;
-    if (isGuided) ({ highest, credentials } = await highestWithPlayConsole(appId, credentials));
-    else highest = await highestVersionCode(appId, credentials);
-    const versionCode = appBuildNumber() ?? Math.max(androidVersion().code, highest + 1);
-    console.log(highest
-        ? `crossbind: Google Play has seen versionCode ${highest} at most, so this build is ${versionCode}.`
-        : `crossbind: Google Play has no build of ${appId} yet, so this build is ${versionCode}.`);
-
-    clearAppOutputs();
-    const exitCode = await runVite(['build', ...viteArgs], {
-        ...process.env, ...signing.env, CROSSBIND_APP_PLATFORM: 'android', CROSSBIND_APP_BUILD_NUMBER: String(versionCode),
-    });
-    if (exitCode !== 0) throw Object.assign(new Error(`crossbind: the build ended with exit code ${exitCode}, so nothing went to Google Play.`), { exitCode });
-    const project = appOutputOf('android');
-    const aab = `${project}.aab`;
-    if (!fs.existsSync(aab)) throw new Error(`crossbind: the build made no bundle at ${aab}, so nothing went to Google Play.`);
-    const symbols = fs.existsSync(`${project}-symbols.zip`) ? `${project}-symbols.zip` : null;
-
-    console.log(`crossbind: uploading the bundle${symbols ? ' and its native debug symbols' : ''} to Google Play.`);
-    const released = await uploadBundle(appId, credentials, { aab, symbols, track, status });
-    const app = `${appId} ${version} (versionCode ${released.versionCode})`;
-    if (released.status !== 'draft') {
-        console.log(`crossbind: ${app} is out on Google Play's ${track} track.`);
-        return;
-    }
-    console.log(`crossbind: ${app} is a draft on Google Play's ${track} track.`);
-    if (status !== 'draft') {
-        console.log("crossbind: Play takes drafts alone until an app's first release is out: roll it out once in Play Console, under Test and release, and later publishes go out by themselves.");
-    }
-}

package/src/actions/publishIos.js

@@ -1,146 +0,0 @@
-import state from '../state/index.js';
-import { appStoreKey } from './appleSigning.js';
-import {
-    appBuildNumber, appOutputOf, appTeam, appVersion, clearAppOutputs,
-} from './buildApp.js';
-import {
-    addHermesDsym, archiveIosApp, archivedBinary, archivedPrivacy, uploadIosArchive, xcodeTeams,
-} from './appStoreConnect.js';
-import {
-    askAppId, askEncryption, askIcon, askPrivacy,
-} from './appSetup.js';
-import { appEncryption, appId } from '../utils/appOptions.js';
-import { resolveHermesDsym } from '../utils/hermes.js';
-import { unreasonedImports } from '../utils/requiredReasonApis.js';
-import { askLine, askYesNo, hasTerminal } from '../utils/ask.js';
-import loadSystemConfig, { updateSystemConfig } from '../utils/systemConfig.js';
-import openUrl from '../utils/openUrl.js';
-
-const NO_APP_ID = 'crossbind: App Store Connect knows an app by its bundle id, app.id, which crossbind.config.js does not set: set it, as com.example.myapp, before the first publish, as Apple keeps it for good.';
-const NO_TEAM = "crossbind: App Store Connect takes uploads from an Apple Developer Program team, which neither app.team in crossbind.config.js nor this machine's XCODE_DEVELOPMENT_TEAM names: set either to its id, which developer.apple.com/account shows under Membership details.";
-const NO_ICON = 'crossbind: App Store Connect takes no iOS app without an icon: set app.icon in crossbind.config.js to a square PNG, at best 1024 × 1024.';
-const NO_ENCRYPTION = 'crossbind: app.encryption is not set, so App Store Connect asks whether this build uses encryption before TestFlight hands it out; set it in crossbind.config.js to answer for every build.';
-const TEAM_ID = /^[A-Z0-9]{10}$/;
-
-async function pickTeam(teams) {
-    if (teams.length === 1) {
-        const [{ id, name }] = teams;
-        return await askYesNo(`Upload as team ${id}, ${name}, which Xcode is signed in to? [Y/n] `) ? teams[0] : null;
-    }
-    console.log('Xcode is signed in to these teams:');
-    teams.forEach(({ id, name }, index) => console.log(`  ${index + 1}) ${id} ${name}`));
-    for (;;) {
-        const team = teams[Number((await askLine(`Which one uploads, 1 to ${teams.length}? `)).trim()) - 1];
-        if (team) return team;
-    }
-}
-
-// A team id the user types, or null once they have signed in to Xcode, for its teams to be read again.
-async function typedTeam() {
-    console.log("crossbind: Xcode is signed in to no such team, as a free personal team is none. Sign in to Xcode, under Settings › Accounts, with your membership's Apple Account, or type the team's id, which developer.apple.com/account shows under Membership details.");
-    for (;;) {
-        const id = (await askLine('Team id, or Enter once Xcode is signed in: ')).trim().toUpperCase();
-        if (!id) return null;
-        if (TEAM_ID.test(id)) return id;
-        console.log('That is no team id, which is ten letters and digits.');
-    }
-}
-
-// The team the user picks of those Xcode is signed in to, or types, which this machine keeps as XCODE_DEVELOPMENT_TEAM.
-async function askTeam() {
-    console.log('crossbind: App Store Connect takes uploads from an Apple Developer Program team, which neither app.team nor XCODE_DEVELOPMENT_TEAM names.');
-    let id = null;
-    while (!id) {
-        const teams = xcodeTeams();
-        if (teams.length > 0) {
-            const team = await pickTeam(teams);
-            if (!team) throw new Error(NO_TEAM);
-            ({ id } = team);
-        } else {
-            id = await typedTeam();
-        }
-    }
-    updateSystemConfig({ XCODE_DEVELOPMENT_TEAM: id });
-    state.config.system = loadSystemConfig();
-    if (appTeam() !== id) throw new Error(`crossbind: ~/.crossbind.json did not take XCODE_DEVELOPMENT_TEAM: set app.team: '${id}' in crossbind.config.js.`);
-    console.log(`crossbind: ~/.crossbind.json keeps ${id} as XCODE_DEVELOPMENT_TEAM.`);
-}
-
-// A step that failed for what only the user can mend, in Xcode or on Apple's sites, runs again once they press Enter,
-// after crossbind opened the page that mends it where it knows one. Any other failure, or one without a terminal, stops
-// the publish.
-async function untilDone(isGuided, step) {
-    for (;;) {
-        try {
-            return step();
-        } catch (error) {
-            if (!isGuided || !error.isMendable) throw error;
-            console.log(error.message);
-            if (error.page) {
-                console.log(`crossbind: opening ${error.page}.`);
-                openUrl(error.page);
-            }
-            await askLine('Press Enter once that is done to try again, or Ctrl-C to stop. ');
-            console.log('crossbind: trying again, which can take a few minutes.');
-        }
-    }
-}
-
-async function buildIosApp(viteArgs, runVite) {
-    clearAppOutputs();
-    const exitCode = await runVite(['build', ...viteArgs], { ...process.env, CROSSBIND_APP_PLATFORM: 'ios' });
-    if (exitCode !== 0) throw Object.assign(new Error(`crossbind: the build ended with exit code ${exitCode}, so nothing went to App Store Connect.`), { exitCode });
-    return appOutputOf('ios');
-}
-
-const unreasonedError = (unreasoned) => new Error(`crossbind: App Store Connect refuses an iOS app that calls required reason API without Apple's reasons for it (ITMS-91053), and this app calls ${unreasoned.map(({ category, symbols }) => `${category} (${symbols.join(', ')})`).join(' and ')} with no reason in its privacy manifest. Give app.privacy Apple's reasons, as { fileTimestamp: ['C617.1'] }; Apple's "Describing use of required reason API" says what each covers. Nothing went to App Store Connect.`);
-
-// Builds an iOS app, archives it and uploads it to App Store Connect, whose TestFlight hands it out. All it needs is
-// checked before the build, which takes minutes: on a terminal, what is missing is asked for and set up; without one,
-// as in CI, every missing piece is named at once. The archived app then shows what required reason API it calls.
-export async function publishIos({ viteArgs }, { runVite }) {
-    if (process.platform !== 'darwin') throw new Error('crossbind: iOS apps build and go to App Store Connect on macOS, with Xcode.');
-    const isGuided = hasTerminal();
-    const key = appStoreKey();
-    const missing = [];
-    if (state.config.app.id === undefined) {
-        if (isGuided) await askAppId('App Store Connect', 'bundle id');
-        else missing.push(NO_APP_ID);
-    }
-    if (!appTeam()) {
-        if (isGuided) await askTeam();
-        else missing.push(NO_TEAM);
-    }
-    if (state.config.app.icon === undefined) {
-        if (isGuided) await askIcon();
-        else missing.push(NO_ICON);
-    }
-    if (missing.length > 0) throw new Error(missing.join('\n'));
-    if (appEncryption(state.config) === null) {
-        if (isGuided) await askEncryption();
-        else console.warn(NO_ENCRYPTION);
-    }
-    const hermesDsym = await resolveHermesDsym();
-
-    const facts = { id: appId(state.config), team: appTeam() };
-    console.log(`crossbind: publishing ${facts.id} ${appVersion()} to App Store Connect for team ${facts.team}; building the app first.`);
-    let archive;
-    for (;;) {
-        const project = await buildIosApp(viteArgs, runVite);
-        console.log('crossbind: archiving the app, which takes a few minutes.');
-        archive = await untilDone(isGuided, () => archiveIosApp(project, { facts }));
-        const unreasoned = unreasonedImports(archivedBinary(archive), archivedPrivacy(archive));
-        if (unreasoned.length === 0) break;
-        if (!isGuided) throw unreasonedError(unreasoned);
-        await askPrivacy(unreasoned);
-        console.log('crossbind: building the app again, with those reasons in its privacy manifest.');
-    }
-    addHermesDsym(archive, hermesDsym);
-    console.log(`crossbind: uploading the app to App Store Connect for team ${facts.team} with ${key ? `the API key ${key.keyId}` : "Xcode's account"}, which signs it.`);
-    const build = appBuildNumber();
-    await untilDone(isGuided, () => uploadIosArchive(archive, {
-        team: facts.team, key, isBuildManaged: build === null, facts,
-    }));
-    const app = build === null ? `${facts.id} ${appVersion()}, numbered by Xcode after the builds App Store Connect has of it,` : `${facts.id} ${appVersion()} (build ${build})`;
-    console.log(`crossbind: ${app} is on App Store Connect. TestFlight hands it out once Apple has processed it, usually within 5 to 30 minutes, and Apple mails when it has.`);
-}