feat(app-update): add in-app update flow with native e2e coverage

src/lib/app-update-config.ts

@@ -0,0 +1,36 @@
+const DEFAULT_RELEASE_API_URL = 'https://api.github.com/repos/bitsocialnet/5chan/releases/latest';
+const DEFAULT_RELEASES_BASE_URL = 'https://github.com/bitsocialnet/5chan/releases/tag/';
+
+const parseConfiguredHosts = (value: string | undefined): Set<string> =>
+  new Set(
+    `${value || ''}`
+      .split(',')
+      .map((host) => host.trim().toLowerCase())
+      .filter(Boolean),
+  );
+
+const configuredDownloadHosts = parseConfiguredHosts(import.meta.env.VITE_APP_UPDATE_ALLOWED_DOWNLOAD_HOSTS);
+
+const getReleaseApiUrl = (): string => {
+  const configuredUrl = import.meta.env.VITE_APP_UPDATE_RELEASE_API_URL;
+  return typeof configuredUrl === 'string' && configuredUrl.trim().length > 0 ? configuredUrl.trim() : DEFAULT_RELEASE_API_URL;
+};
+
+const getDefaultReleaseUrl = (version: string): string => `${DEFAULT_RELEASES_BASE_URL}v${version.trim().replace(/^v/i, '').split('-')[0]}`;
+
+const isAllowedDownloadUrl = (url: string): boolean => {
+  try {
+    const parsedUrl = new URL(url);
+    const hostname = parsedUrl.hostname.toLowerCase();
+
+    if (parsedUrl.protocol === 'https:' && hostname === 'github.com') {
+      return true;
+    }
+
+    return configuredDownloadHosts.has(hostname) && (parsedUrl.protocol === 'https:' || parsedUrl.protocol === 'http:');
+  } catch {
+    return false;
+  }
+};
+
+export { getDefaultReleaseUrl, getReleaseApiUrl, isAllowedDownloadUrl };