@hot-updater/react-native 0.33.1 → 0.34.0

package/android/src/main/java/com/hotupdater/HotUpdaterConfig.kt

@@ -0,0 +1,47 @@
+package com.hotupdater
+
+/**
+ * Thread-safe programmatic configuration holder for HotUpdater.
+ *
+ * When values are set here, they take priority over manifest metadata and
+ * Android string resources. This enables brownfield/AAR setups where the RN
+ * module cannot rely on the host app's manifest/strings.xml for configuration.
+ */
+object HotUpdaterConfig {
+    @Volatile
+    var fingerprintHash: String? = null
+
+    @Volatile
+    var publicKey: String? = null
+
+    @Volatile
+    var channel: String? = null
+
+    /**
+     * When set, this value is used verbatim as the storage isolation key,
+     * bypassing the default `HotUpdaterPrefs_{fingerprint}_{appVersion}_{channel}`
+     * composition. Use this to keep the OTA cache stable across host app version
+     * bumps (e.g. key only by fingerprint + channel).
+     */
+    @Volatile
+    var isolationKey: String? = null
+
+    fun configure(
+        fingerprintHash: String? = null,
+        publicKey: String? = null,
+        channel: String? = null,
+        isolationKey: String? = null,
+    ) {
+        this.fingerprintHash = fingerprintHash
+        this.publicKey = publicKey
+        this.channel = channel
+        this.isolationKey = isolationKey
+    }
+
+    fun clear() {
+        fingerprintHash = null
+        publicKey = null
+        channel = null
+        isolationKey = null
+    }
+}

package/android/src/main/java/com/hotupdater/HotUpdaterImpl.kt

@@ -105,6 +105,10 @@ class HotUpdaterImpl {
          * @return The isolation key in format: HotUpdaterPrefs_{fingerprintOrVersion}_{channel}
          */
         private fun getIsolationKey(context: Context): String {
+            // Programmatic override (brownfield/AAR). When set, it is used verbatim
+            // so the OTA cache can stay stable across host app version bumps.
+            HotUpdaterConfig.isolationKey?.takeIf { it.isNotEmpty() }?.let { return it }
+
             val fingerprintHash = getFingerprintHash(context)
 
             // Get app version and channel

package/android/src/main/java/com/hotupdater/NativeConfigUtils.kt

@@ -13,9 +13,21 @@ object NativeConfigUtils {
         context: Context,
         metaDataKey: String,
         stringResourceName: String,
-    ): String? =
-        getManifestMetaDataString(context, metaDataKey)
+    ): String? {
+        // Programmatic overrides take priority over manifest metadata and string
+        // resources (brownfield/AAR setups, see HotUpdaterConfig).
+        val override =
+            when (metaDataKey) {
+                FINGERPRINT_HASH_META_DATA_KEY -> HotUpdaterConfig.fingerprintHash
+                PUBLIC_KEY_META_DATA_KEY -> HotUpdaterConfig.publicKey
+                CHANNEL_META_DATA_KEY -> HotUpdaterConfig.channel
+                else -> null
+            }
+        override?.takeIf { it.isNotEmpty() }?.let { return it }
+
+        return getManifestMetaDataString(context, metaDataKey)
             ?: getStringResource(context, stringResourceName)
+    }
 
     private fun getManifestMetaDataString(
         context: Context,

package/android/src/newarch/HotUpdater.kt

@@ -99,6 +99,24 @@ class HotUpdater {
          */
         fun getChannel(context: Context): String = HotUpdaterImpl.getChannel(context)
 
+        /**
+         * Programmatic configuration for brownfield/AAR setups where manifest
+         * metadata or string resources in the host app are not desirable.
+         */
+        fun configure(
+            fingerprintHash: String? = null,
+            publicKey: String? = null,
+            channel: String? = null,
+            isolationKey: String? = null,
+        ) {
+            HotUpdaterConfig.configure(
+                fingerprintHash = fingerprintHash,
+                publicKey = publicKey,
+                channel = channel,
+                isolationKey = isolationKey,
+            )
+        }
+
         /**
          * Sets the ReactHost for brownfield apps (New Architecture).
          * Sets the ReactHost for brownfield apps that don't have ReactApplication.

package/android/src/oldarch/HotUpdater.kt

@@ -98,6 +98,24 @@ class HotUpdater {
          */
         fun getChannel(context: Context): String = HotUpdaterImpl.getChannel(context)
 
+        /**
+         * Programmatic configuration for brownfield/AAR setups where manifest
+         * metadata or string resources in the host app are not desirable.
+         */
+        fun configure(
+            fingerprintHash: String? = null,
+            publicKey: String? = null,
+            channel: String? = null,
+            isolationKey: String? = null,
+        ) {
+            HotUpdaterConfig.configure(
+                fingerprintHash = fingerprintHash,
+                publicKey = publicKey,
+                channel = channel,
+                isolationKey = isolationKey,
+            )
+        }
+
         /**
          * Sets the ReactHost for brownfield apps (Old Architecture - No-op).
          * In old architecture, this is a no-op since ReactHost is not available.

package/ios/HotUpdater/Internal/HotUpdater.mm

@@ -456,6 +456,14 @@ RCT_EXPORT_MODULE();
     return [[HotUpdater sharedImpl] bundleURLWithBundle:bundle];
 }
 
++ (void)configureWithFingerprintHash:(NSString *)fingerprintHash
+                           publicKey:(NSString *)publicKey
+                             channel:(NSString *)channel
+                        isolationKey:(NSString *)isolationKey {
+    HotUpdaterConfig *config = [HotUpdaterConfig shared];
+    [config configureWithFingerprintHash:fingerprintHash publicKey:publicKey channel:channel isolationKey:isolationKey];
+}
+
 #pragma mark - Progress Updates & Event Emitting (Keep in ObjC Wrapper)
 
 - (void)handleDownloadProgress:(NSNotification *)notification {

package/ios/HotUpdater/Internal/HotUpdaterConfig.swift

@@ -0,0 +1,54 @@
+import Foundation
+
+/// Thread-safe programmatic configuration holder for HotUpdater.
+///
+/// When values are set here, they take priority over `Info.plist` (iOS) and
+/// manifest metadata / string resources (Android). This enables brownfield /
+/// prebuilt-framework setups where the RN module cannot rely on the host app's
+/// `Info.plist` for configuration.
+@objcMembers
+public class HotUpdaterConfig: NSObject {
+    public static let shared = HotUpdaterConfig()
+
+    private let lock = NSLock()
+
+    private var _fingerprintHash: String?
+    private var _publicKey: String?
+    private var _channel: String?
+    private var _isolationKey: String?
+
+    public var fingerprintHash: String? {
+        get { lock.lock(); defer { lock.unlock() }; return _fingerprintHash }
+        set { lock.lock(); defer { lock.unlock() }; _fingerprintHash = newValue }
+    }
+
+    public var publicKey: String? {
+        get { lock.lock(); defer { lock.unlock() }; return _publicKey }
+        set { lock.lock(); defer { lock.unlock() }; _publicKey = newValue }
+    }
+
+    public var channel: String? {
+        get { lock.lock(); defer { lock.unlock() }; return _channel }
+        set { lock.lock(); defer { lock.unlock() }; _channel = newValue }
+    }
+
+    /// When set, used verbatim as the storage isolation key, bypassing the default
+    /// `hotupdater_{fingerprint}_{appVersion}_{channel}_` composition. Use this to keep
+    /// the OTA cache stable across host app version bumps (e.g. key only by fingerprint + channel).
+    public var isolationKey: String? {
+        get { lock.lock(); defer { lock.unlock() }; return _isolationKey }
+        set { lock.lock(); defer { lock.unlock() }; _isolationKey = newValue }
+    }
+
+    @objc(configureWithFingerprintHash:publicKey:channel:isolationKey:)
+    public func configureWithFingerprintHash(_ fingerprintHash: String?, publicKey: String?, channel: String?, isolationKey: String?) {
+        self.fingerprintHash = fingerprintHash
+        self.publicKey = publicKey
+        self.channel = channel
+        self.isolationKey = isolationKey
+    }
+
+    public func clear() {
+        configureWithFingerprintHash(nil, publicKey: nil, channel: nil, isolationKey: nil)
+    }
+}

package/ios/HotUpdater/Internal/HotUpdaterImpl.swift

@@ -93,6 +93,9 @@ private func hotUpdaterPerformRecoveryReload() -> Bool {
      * Returns the app version from main bundle info.
      */
     public static var appChannel: String {
+        if let override = HotUpdaterConfig.shared.channel, !override.isEmpty {
+            return override
+        }
         return Bundle.main.object(forInfoDictionaryKey: "HOT_UPDATER_CHANNEL") as? String ?? Self.DEFAULT_CHANNEL
     }
     
@@ -101,8 +104,15 @@ private func hotUpdaterPerformRecoveryReload() -> Bool {
      * @return The isolation key in format: hotupdater_{fingerprintOrVersion}_{channel}_
      */
     public static func getIsolationKey() -> String {
-        // Get fingerprint hash from Info.plist
-        let fingerprintHash = Bundle.main.object(forInfoDictionaryKey: "HOT_UPDATER_FINGERPRINT_HASH") as? String
+        // Programmatic override (brownfield/XCFramework). When set, it is used verbatim
+        // so the OTA cache can stay stable across host app version bumps.
+        if let override = HotUpdaterConfig.shared.isolationKey, !override.isEmpty {
+            return override
+        }
+
+        // Get fingerprint hash from programmatic override or Info.plist
+        let fingerprintHash = HotUpdaterConfig.shared.fingerprintHash
+            ?? Bundle.main.object(forInfoDictionaryKey: "HOT_UPDATER_FINGERPRINT_HASH") as? String
 
         // Get app version and channel
         let appVersion = self.appVersion ?? "unknown"
@@ -126,6 +136,9 @@ private func hotUpdaterPerformRecoveryReload() -> Bool {
      * @return The channel name or nil if not set
      */
     public func getChannel() -> String {
+        if let override = HotUpdaterConfig.shared.channel, !override.isEmpty {
+            return override
+        }
         if let savedChannel = try? preferences.getItem(forKey: Self.CHANNEL_STORAGE_KEY),
            !savedChannel.isEmpty {
             return savedChannel
@@ -143,6 +156,9 @@ private func hotUpdaterPerformRecoveryReload() -> Bool {
      * @return The fingerprint hash or nil if not set
      */
     public func getFingerprintHash() -> String? {
+        if let override = HotUpdaterConfig.shared.fingerprintHash, !override.isEmpty {
+            return override
+        }
         return Bundle.main.object(forInfoDictionaryKey: "HOT_UPDATER_FINGERPRINT_HASH") as? String
     }
 

package/ios/HotUpdater/Internal/SignatureVerifier.swift

@@ -106,6 +106,9 @@ public class SignatureVerifier {
      * @return Public key PEM string or nil if not configured
      */
     private static func getPublicKeyFromConfig() -> String? {
+        if let override = HotUpdaterConfig.shared.publicKey, !override.isEmpty {
+            return override
+        }
         guard let publicKeyPEM = Bundle.main.object(forInfoDictionaryKey: "HOT_UPDATER_PUBLIC_KEY") as? String else {
             NSLog("[SignatureVerifier] HOT_UPDATER_PUBLIC_KEY not found in Info.plist")
             return nil

package/ios/HotUpdater/Public/HotUpdater.h

@@ -35,6 +35,15 @@
  */
 - (NSURL *)bundleURLWithBundle:(NSBundle *)bundle NS_SWIFT_NAME(bundleURL(bundle:));
 
+/**
+ * Programmatic configuration for brownfield / XCFramework setups where
+ * Info.plist (host) or string resources (Android) are not desirable.
+ */
++ (void)configureWithFingerprintHash:(nullable NSString *)fingerprintHash
+                           publicKey:(nullable NSString *)publicKey
+                             channel:(nullable NSString *)channel
+                        isolationKey:(nullable NSString *)isolationKey;
+
 /**
  * 다운로드 진행 상황 업데이트 시간을 추적하는 속성
  */

package/lib/commonjs/sdkVersion.js

@@ -4,5 +4,5 @@ Object.defineProperty(exports, "__esModule", {
   value: true
 });
 exports.HOT_UPDATER_SDK_VERSION = void 0;
-const HOT_UPDATER_SDK_VERSION = exports.HOT_UPDATER_SDK_VERSION = "0.33.1";
+const HOT_UPDATER_SDK_VERSION = exports.HOT_UPDATER_SDK_VERSION = "0.34.0";
 //# sourceMappingURL=sdkVersion.js.map

package/lib/module/sdkVersion.js

@@ -1,4 +1,4 @@
 "use strict";
 
-export const HOT_UPDATER_SDK_VERSION = "0.33.1";
+export const HOT_UPDATER_SDK_VERSION = "0.34.0";
 //# sourceMappingURL=sdkVersion.js.map

package/lib/typescript/commonjs/sdkVersion.d.ts

@@ -1,2 +1,2 @@
-export declare const HOT_UPDATER_SDK_VERSION = "0.33.1";
+export declare const HOT_UPDATER_SDK_VERSION = "0.34.0";
 //# sourceMappingURL=sdkVersion.d.ts.map

package/lib/typescript/module/sdkVersion.d.ts

@@ -1,2 +1,2 @@
-export declare const HOT_UPDATER_SDK_VERSION = "0.33.1";
+export declare const HOT_UPDATER_SDK_VERSION = "0.34.0";
 //# sourceMappingURL=sdkVersion.d.ts.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hot-updater/react-native",
-  "version": "0.33.1",
+  "version": "0.34.0",
   "description": "React Native OTA solution for self-hosted",
   "source": "./src/index.ts",
   "main": "./lib/commonjs/index.js",
@@ -125,14 +125,14 @@
     "react-native": "0.79.1",
     "react-native-builder-bob": "0.41.0",
     "typescript": "^6.0.2",
-    "hot-updater": "0.33.1"
+    "hot-updater": "0.34.0"
   },
   "dependencies": {
     "use-sync-external-store": "1.5.0",
-    "@hot-updater/cli-tools": "0.33.1",
-    "@hot-updater/core": "0.33.1",
-    "@hot-updater/js": "0.33.1",
-    "@hot-updater/plugin-core": "0.33.1"
+    "@hot-updater/cli-tools": "0.34.0",
+    "@hot-updater/plugin-core": "0.34.0",
+    "@hot-updater/core": "0.34.0",
+    "@hot-updater/js": "0.34.0"
   },
   "scripts": {
     "build": "node ./scripts/sync-sdk-version.mjs run -- bob build && tsc -p plugin/tsconfig.build.json",

package/src/sdkVersion.ts

@@ -1 +1 @@
-export const HOT_UPDATER_SDK_VERSION = "0.33.1";
+export const HOT_UPDATER_SDK_VERSION = "0.34.0";