@exodus/react-native-bundle-loader 0.2.0-exodus.1

package/package.json

@@ -0,0 +1,149 @@
+{
+  "name": "@exodus/react-native-bundle-loader",
+  "version": "0.2.0-exodus.1",
+  "description": "Loads a remote React Native JS bundle.",
+  "main": "lib/commonjs/index",
+  "module": "lib/module/index",
+  "types": "lib/typescript/index.d.ts",
+  "react-native": "src/index",
+  "source": "src/index",
+  "files": [
+    "src",
+    "lib",
+    "android/build.gradle",
+    "android/gradle.properties",
+    "android/src/main",
+    "ios/BundleLoader.h",
+    "ios/BundleLoader.m",
+    "ios/BundleLoader.xcodeproj/project.pbxproj",
+    "react-native-bundle-loader.podspec",
+    "SECURITY.md",
+    "!**/*.map",
+    "!**/*.snap",
+    "!**/*.iml",
+    "!**/*.tgz",
+    "!**/*.test.*",
+    "!**/*.spec.*",
+    "!**/__tests__",
+    "!**/__snapshots__",
+    "!**/__fixtures__",
+    "!**/__mocks__",
+    "!**/.DS_Store",
+    "!**/.gitkeep",
+    "!**/xcuserdata",
+    "!**/.project",
+    "!**/.settings",
+    "!**/.idea",
+    "!**/.vscode",
+    "!android/src/test",
+    "!android/src/androidTest"
+  ],
+  "scripts": {
+    "test": "jest",
+    "typescript": "tsc --noEmit",
+    "lint": "eslint \"**/*.{js,ts,tsx}\"",
+    "prepare": "bob build",
+    "verify-pack": "rm -rf _pack && mkdir _pack && yarn prepare && npm pack --pack-destination _pack && tar -tzf _pack/*.tgz | LC_ALL=C sort | sed 's|^package/||' | diff -u .npm-tarball-allowlist -",
+    "preflight": "yarn lint && yarn typescript && yarn test --ci --runInBand && yarn verify-pack"
+  },
+  "engines": {
+    "node": ">=18.18"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "keywords": [
+    "react-native",
+    "ios",
+    "android",
+    "bundle",
+    "remote",
+    "ota",
+    "integrity"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/ExodusForks/react-native-bundle-loader.git"
+  },
+  "author": "Exodus Movement, Inc. <hello@exodus.com>",
+  "contributors": [
+    "Jusbrasil <dev@jusbrasil.com.br> (original author)"
+  ],
+  "license": "MIT",
+  "bugs": {
+    "url": "https://github.com/ExodusForks/react-native-bundle-loader/issues"
+  },
+  "homepage": "https://github.com/ExodusForks/react-native-bundle-loader#readme",
+  "dependencies": {
+    "@exodus/bytes": "1.15.0",
+    "@exodus/crypto": "1.0.0-rc.34"
+  },
+  "devDependencies": {
+    "@react-native-community/bob": "0.16.2",
+    "@react-native-community/eslint-config": "2.0.0",
+    "@types/jest": "26.0.14",
+    "@types/react": "16.9.52",
+    "@types/react-native": "0.62.13",
+    "eslint": "7.11.0",
+    "eslint-config-prettier": "6.13.0",
+    "eslint-plugin-prettier": "3.1.4",
+    "jest": "26.5.3",
+    "prettier": "2.1.2",
+    "react": "16.11.0",
+    "react-native": "0.62.2",
+    "typescript": "3.9.7"
+  },
+  "peerDependencies": {
+    "react": ">=16.8.0",
+    "react-native": ">=0.62.0"
+  },
+  "jest": {
+    "preset": "react-native",
+    "modulePathIgnorePatterns": [
+      "<rootDir>/lib/"
+    ]
+  },
+  "eslintConfig": {
+    "extends": [
+      "@react-native-community",
+      "prettier"
+    ],
+    "rules": {
+      "prettier/prettier": [
+        "error",
+        {
+          "quoteProps": "consistent",
+          "singleQuote": true,
+          "tabWidth": 2,
+          "trailingComma": "es5",
+          "useTabs": false
+        }
+      ]
+    }
+  },
+  "eslintIgnore": [
+    "node_modules/",
+    "lib/"
+  ],
+  "prettier": {
+    "quoteProps": "consistent",
+    "singleQuote": true,
+    "tabWidth": 2,
+    "trailingComma": "es5",
+    "useTabs": false
+  },
+  "@react-native-community/bob": {
+    "source": "src",
+    "output": "lib",
+    "targets": [
+      "commonjs",
+      "module",
+      [
+        "typescript",
+        {
+          "project": "tsconfig.build.json"
+        }
+      ]
+    ]
+  }
+}

package/react-native-bundle-loader.podspec

@@ -0,0 +1,19 @@
+require "json"
+
+package = JSON.parse(File.read(File.join(__dir__, "package.json")))
+
+Pod::Spec.new do |s|
+  s.name         = "react-native-bundle-loader"
+  s.version      = package["version"]
+  s.summary      = package["description"]
+  s.homepage     = package["homepage"]
+  s.license      = package["license"]
+  s.authors      = package["author"]
+
+  s.platforms    = { :ios => "13.0" }
+  s.source       = { :git => "https://github.com/ExodusForks/react-native-bundle-loader.git", :tag => "v#{s.version}" }
+
+  s.source_files = "ios/**/*.{h,m,mm}"
+
+  s.dependency "React-Core"
+end

package/src/index.tsx

@@ -0,0 +1,171 @@
+/** @format */
+import React, { useCallback, useState } from 'react';
+import {
+  Alert,
+  Modal,
+  NativeModules,
+  NativeSyntheticEvent,
+  StyleSheet,
+  Text,
+  TextInput,
+  TextInputChangeEventData,
+  TouchableOpacity,
+  View,
+} from 'react-native';
+import { hash } from '@exodus/crypto/hash';
+import { fromHex } from '@exodus/bytes/hex.js';
+import { toBase64 } from '@exodus/bytes/base64.js';
+
+export type RunningMode = 'LOCAL' | 'REMOTE';
+
+type NativeBundleLoader = {
+  load(url: string): void;
+  loadFromBase64?(base64: string): Promise<void>;
+  runningMode(): Promise<RunningMode>;
+};
+
+function getNative(): NativeBundleLoader {
+  const m = (NativeModules as { BundleLoader?: NativeBundleLoader })
+    .BundleLoader;
+  if (!m) {
+    throw new Error(
+      "@exodus/react-native-bundle-loader: native module 'BundleLoader' is not linked. " +
+        'On iOS, run `pod install` and rebuild the host app. ' +
+        'On Android, ensure BundleLoaderPackage is registered.'
+    );
+  }
+  return m;
+}
+
+function assertSafeUrl(url: string): void {
+  if (typeof url !== 'string' || url.length === 0) {
+    throw new Error('Bundle URL must be a non-empty string');
+  }
+  if (!/^https:\/\//.test(url)) {
+    throw new Error('Bundle URL must use the https scheme');
+  }
+}
+
+function timingSafeEqualBytes(a: Uint8Array, b: Uint8Array): boolean {
+  if (a.length !== b.length) return false;
+  let diff = 0;
+  /* eslint-disable no-bitwise */
+  for (let i = 0; i < a.length; i++) diff |= a[i] ^ b[i];
+  /* eslint-enable no-bitwise */
+  return diff === 0;
+}
+
+export async function loadVerified(
+  url: string,
+  expectedSha256Hex: string
+): Promise<void> {
+  assertSafeUrl(url);
+  if (
+    typeof expectedSha256Hex !== 'string' ||
+    expectedSha256Hex.length !== 64
+  ) {
+    throw new Error('Expected sha256 must be a 64-character hex string');
+  }
+  const expected = fromHex(expectedSha256Hex);
+
+  const response = await fetch(url);
+  if (!response.ok) {
+    throw new Error(`Bundle fetch failed: HTTP ${response.status}`);
+  }
+  const buffer = await response.arrayBuffer();
+  const bytes = new Uint8Array(buffer);
+  const actual = await hash('sha256', bytes, 'uint8');
+
+  if (!timingSafeEqualBytes(actual, expected)) {
+    throw new Error('Bundle hash mismatch — refusing to load');
+  }
+
+  const native = getNative();
+  if (typeof native.loadFromBase64 !== 'function') {
+    throw new Error(
+      'Native loadFromBase64 not available. Rebuild the host app after upgrading.'
+    );
+  }
+  await native.loadFromBase64(toBase64(bytes));
+}
+
+function loadUnverified(url: string): void {
+  assertSafeUrl(url);
+  getNative().load(url);
+}
+
+async function runningMode(): Promise<RunningMode> {
+  return getNative().runningMode();
+}
+
+const BundleLoader = {
+  load: loadUnverified,
+  loadVerified,
+  runningMode,
+};
+
+export default BundleLoader;
+
+const styles = StyleSheet.create({
+  container: { marginTop: 48, padding: 16, flex: 1 },
+  input: {
+    height: 48,
+    marginTop: 8,
+    paddingHorizontal: 8,
+    borderColor: 'gray',
+    borderRadius: 4,
+    borderWidth: 1,
+  },
+  button: {
+    backgroundColor: '#007AFF',
+    marginTop: 16,
+    height: 48,
+    justifyContent: 'center',
+  },
+  buttonText: {
+    color: 'white',
+    alignSelf: 'center',
+    fontSize: 18,
+    alignContent: 'center',
+  },
+});
+
+export function BundlePrompt() {
+  const [url, setUrl] = useState<string>('');
+
+  const reload = useCallback(() => {
+    if (!url) {
+      Alert.alert('Oops…', 'You need to provide a URL');
+      return;
+    }
+    try {
+      loadUnverified(url);
+    } catch (e) {
+      Alert.alert('Invalid URL', (e as Error).message);
+    }
+  }, [url]);
+
+  return (
+    <Modal>
+      <View style={styles.container}>
+        <TextInput
+          keyboardType="url"
+          onChange={(e: NativeSyntheticEvent<TextInputChangeEventData>) =>
+            setUrl(e.nativeEvent.text.trim())
+          }
+          style={styles.input}
+          clearButtonMode="always"
+          autoFocus
+          placeholder="https://…"
+        />
+        <TouchableOpacity
+          style={styles.button}
+          onPress={reload}
+          accessibilityLabel="Reload entire app"
+        >
+          <Text style={styles.buttonText}>Reload</Text>
+        </TouchableOpacity>
+      </View>
+    </Modal>
+  );
+}