runcloud 0.2.145 → 0.2.147

package/dist/commands/appStoreEvaluate.js

@@ -213,8 +213,9 @@ function evaluateRestorePurchases(root, item) {
         return makeItem(item, 'pass', 'Restore purchases flow appears in source.', evidence(restore));
     return makeItem(item, 'fail', 'IAP APIs found but no restore purchases flow was found.', evidence(iap));
 }
+const TRACKING_SDK = /["'](?:@react-native-firebase\/analytics|react-native-fbsdk(?:-next)?|expo-facebook|react-native-appsflyer|@amplitude\/[\w.-]+|@segment\/[\w.-]+)(?:\/[^"']*)?["']/;
 function evaluateTrackingWithoutAtt(root, item) {
-    const tracking = scan(root, /react-native-firebase\/analytics|facebook|appsflyer|amplitude|segment/i);
+    const tracking = scan(root, TRACKING_SDK);
     if (!tracking.length)
         return makeItem(item, 'pass', 'No tracking SDK patterns found.', 'scan: no tracking SDK patterns found');
     const att = scan(root, /expo-tracking-transparency|requestTrackingPermission/i);
@@ -271,7 +272,7 @@ function evaluatePermissionDescriptions(root, appJson, item) {
 function evaluatePrivacyManifest(root, item) {
     const hasManifest = findByName(root, 'PrivacyInfo.xcprivacy').length > 0;
     const requiredReasonApi = scan(root, /NSUserDefaults|systemUptime|fileModificationDate|diskSpace|activeInputModes/i);
-    const tracking = scan(root, /react-native-firebase\/analytics|facebook|appsflyer|amplitude|segment/i);
+    const tracking = scan(root, TRACKING_SDK);
     if (hasManifest)
         return makeItem(item, 'pass', 'PrivacyInfo.xcprivacy is present.', 'scan: PrivacyInfo.xcprivacy found');
     if (tracking.length)
@@ -323,8 +324,27 @@ function missingIosUsageDescriptions(root, appJson) {
             missing.push(`ios ${check.name} usage description (${check.keys.join(' or ')})`);
         }
     }
+    const entitlements = objectValue(getPath(appJson, ['expo', 'ios', 'entitlements']));
+    if (entitlements['com.apple.developer.healthkit'] === true || /@kingstinct\/react-native-healthkit/.test(source)) {
+        const plugin = configPluginOptions(appJson, '@kingstinct/react-native-healthkit');
+        const lacking = ['NSHealthShareUsageDescription', 'NSHealthUpdateUsageDescription'].filter((key) => !hasValue(infoPlist[key]) && !(plugin && plugin[key] !== false));
+        if (lacking.length)
+            missing.push(`ios HealthKit usage descriptions (${lacking.join(' and ')})`);
+    }
     return missing;
 }
+function configPluginOptions(appJson, name) {
+    const plugins = getPath(appJson, ['expo', 'plugins']);
+    if (!Array.isArray(plugins))
+        return undefined;
+    for (const entry of plugins) {
+        if (entry === name)
+            return {};
+        if (Array.isArray(entry) && entry[0] === name)
+            return objectValue(entry[1]);
+    }
+    return undefined;
+}
 function unresolvedReason(item) {
     if (JUDGMENT_IDS.has(item.id))
         return 'requires app-specific judgment over UI/copy behavior';

package/dist/commands/misc.js

@@ -5,6 +5,11 @@ export function assertDevOnly(env, command) {
         throw new Error(`\`newly ${command}\` is dev-only from the CLI. Prod ${command} requires the Newly web app (a browser session).`);
     }
 }
+export function assertKnownEnv(env, command) {
+    if (env !== 'dev' && env !== 'prod') {
+        throw new Error(`\`newly ${command}\` --env must be dev or prod (got ${JSON.stringify(env)})`);
+    }
+}
 export function parseDuration(s) {
     const m = /^(\d+)(s|m|h)$/.exec(s.trim());
     if (!m)
@@ -128,7 +133,7 @@ export function registerMisc(program) {
         .option('--project <id>', 'project id')
         .action(async (opts) => {
         try {
-            assertDevOnly(opts.env, 'secrets list');
+            assertKnownEnv(opts.env, 'secrets list');
             const { client, projectId } = makeClient(opts.project);
             console.log(await listSecrets(client, projectId, opts.env, opts.service));
         }
@@ -146,7 +151,7 @@ export function registerMisc(program) {
         .option('--project <id>', 'project id')
         .action(async (key, value, opts) => {
         try {
-            assertDevOnly(opts.env, 'secrets set');
+            assertKnownEnv(opts.env, 'secrets set');
             const { client, projectId } = makeClient(opts.project);
             await setSecret(client, projectId, opts.env, opts.service, key, value);
             console.log(`Secret ${key} set for ${opts.service} (${opts.env}). Redeploy to apply.`);

package/dist/version.js

@@ -1 +1 @@
-export const CLI_VERSION = '0.2.145';
+export const CLI_VERSION = '0.2.147';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "runcloud",
-  "version": "0.2.145",
+  "version": "0.2.147",
   "description": "Create and control run.cloud remote mobile simulators and cloud sandboxes",
   "license": "Apache-2.0",
   "keywords": [