@hot-updater/react-native 1.0.0-rc.14 → 1.0.0-rc.16

package/src/specs/NativeHotUpdater.ts

@@ -2,48 +2,21 @@ import type { TurboModule } from "react-native";
 import { TurboModuleRegistry } from "react-native";
 import type { UnsafeObject } from "react-native/Libraries/Types/CodegenTypes";
 
-export interface ChangedAsset {
-  file?: {
-    compression?: "br" | null;
-    url: string;
-  } | null;
-  fileHash: string;
-  patch?: {
-    algorithm: "bsdiff";
-    baseBundleId: string;
-    baseFileHash: string;
-    patchFileHash: string;
-    patchUrl: string;
-  } | null;
-}
-
 export interface UpdateBundleParams {
   bundleId: string;
   channel?: string;
-  fileUrl: string | null;
-  /**
-   * File hash for integrity/signature verification.
-   *
-   * Format depends on signing configuration:
-   * - Signed: `sig:<base64_signature>` - Native will verify signature (and implicitly hash)
-   * - Unsigned: `<hex_hash>` - Native will verify SHA256 hash only
-   *
-   * Native determines verification mode by checking for "sig:" prefix.
-   */
-  fileHash: string | null;
   /**
-   * Optional signed manifest URL for manifest-driven installation.
+   * Signed manifest URL for installation.
    */
-  manifestUrl?: string | null;
+  manifestUrl: string;
   /**
    * File hash/signature for the manifest file itself.
    */
-  manifestFileHash?: string | null;
-  /**
-   * Per-file URLs for assets that must be downloaded instead of reused from
-   * the currently active bundle.
-   */
-  changedAssets?: UnsafeObject | null;
+  manifestFileHash: string;
+  /** Optional tar.br URL; integrity and sizes come from the verified manifest. */
+  archiveUrl?: string | null;
+  /** Full protocol v1 target file descriptor map. */
+  assets: UnsafeObject;
   /** Full Release Catalog selection receipt committed with the staged Bundle. */
   selection?: UnsafeObject | null;
 }
@@ -66,13 +39,12 @@ export interface Spec extends TurboModule {
    *
    *   Parameter validation:
    *   - MISSING_BUNDLE_ID: Missing or empty bundleId
-   *   - INVALID_FILE_URL: Invalid fileUrl provided
+   *   - INVALID_FILE_URL: Invalid manifest or asset URL provided
    *
    *   Bundle storage:
    *   - DIRECTORY_CREATION_FAILED: Failed to create bundle directory
    *   - DOWNLOAD_FAILED: Failed to download bundle
    *   - INCOMPLETE_DOWNLOAD: Download incomplete (size mismatch)
-   *   - EXTRACTION_FORMAT_ERROR: Invalid or corrupted archive format
    *   - INVALID_BUNDLE: Bundle missing required platform files
    *   - INSUFFICIENT_DISK_SPACE: Insufficient disk space
    *   - MOVE_OPERATION_FAILED: Failed to move bundle files

package/src/store.notification.spec.ts

@@ -61,10 +61,20 @@ describe("hotUpdaterStore notification scheduling", () => {
 
         const nextProgress = Math.min(1, progress + 0.01);
         emitProgress?.({
-          artifactType: "archive",
-          downloadedBytes: nextProgress * 1_000_000,
+          artifactType: "diff",
+          details: {
+            completedFilesCount: nextProgress === 1 ? 1 : 0,
+            files: [
+              {
+                order: 0,
+                path: "index.ios.bundle",
+                progress: nextProgress,
+                status: nextProgress === 1 ? "downloaded" : "downloading",
+              },
+            ],
+            totalFilesCount: 1,
+          },
           progress: nextProgress,
-          totalBytes: 1_000_000,
         });
       }, [progress]);
 

package/src/store.spec.ts

@@ -41,75 +41,6 @@ describe("hotUpdaterStore", () => {
     unsubscribe();
   });
 
-  it("notifies subscribers only when progress events change the snapshot", async () => {
-    const store = await importStore();
-    const listener = vi.fn();
-    const emitProgress = listeners.get("onProgress");
-
-    expect(emitProgress).toBeTypeOf("function");
-
-    const unsubscribe = store.subscribe(listener);
-
-    emitProgress?.({
-      artifactType: "archive",
-      progress: 0.5,
-    });
-    emitProgress?.({
-      artifactType: "archive",
-      progress: 0.5,
-    });
-    emitProgress?.({
-      artifactType: "archive",
-      progress: 1,
-    });
-    store.setState({ isUpdateDownloaded: true });
-
-    expect(listener).toHaveBeenCalledTimes(2);
-    expect(store.getSnapshot()).toEqual({
-      artifactType: "archive",
-      details: null,
-      downloadedBytes: undefined,
-      isUpdateDownloaded: true,
-      progress: 1,
-      totalBytes: undefined,
-    });
-
-    unsubscribe();
-  });
-
-  it("stores archive byte metadata and notifies when only bytes change", async () => {
-    const store = await importStore();
-    const listener = vi.fn();
-    const emitProgress = listeners.get("onProgress");
-
-    const unsubscribe = store.subscribe(listener);
-
-    emitProgress?.({
-      artifactType: "archive",
-      downloadedBytes: 100.4,
-      progress: 0.5,
-      totalBytes: 1_000,
-    });
-    emitProgress?.({
-      artifactType: "archive",
-      downloadedBytes: 250,
-      progress: 0.5,
-      totalBytes: 1_000,
-    });
-
-    expect(listener).toHaveBeenCalledTimes(2);
-    expect(store.getSnapshot()).toEqual({
-      artifactType: "archive",
-      details: null,
-      downloadedBytes: 250,
-      isUpdateDownloaded: false,
-      progress: 0.5,
-      totalBytes: 1_000,
-    });
-
-    unsubscribe();
-  });
-
   it("stores manifest progress metadata while keeping overall progress", async () => {
     const store = await importStore();
     const emitProgress = listeners.get("onProgress");
@@ -163,10 +94,8 @@ describe("hotUpdaterStore", () => {
         ],
         totalFilesCount: 2,
       },
-      downloadedBytes: undefined,
       isUpdateDownloaded: false,
       progress: 0.42,
-      totalBytes: undefined,
     });
   });
 
@@ -279,94 +208,8 @@ describe("hotUpdaterStore", () => {
         ],
         totalFilesCount: 2,
       },
-      downloadedBytes: undefined,
       isUpdateDownloaded: false,
       progress: 0.6,
-      totalBytes: undefined,
-    });
-  });
-
-  it("clears manifest metadata when archive progress events arrive", async () => {
-    const store = await importStore();
-    const emitProgress = listeners.get("onProgress");
-
-    emitProgress?.({
-      artifactType: "diff",
-      details: {
-        completedFilesCount: 2,
-        files: [
-          {
-            order: 0,
-            path: "index.ios.bundle",
-            progress: 1,
-            status: "downloaded",
-          },
-          {
-            order: 1,
-            path: "assets/logo.png",
-            progress: 1,
-            status: "downloaded",
-          },
-          {
-            order: 2,
-            path: "assets/bg.png",
-            progress: 0,
-            status: "pending",
-          },
-        ],
-        totalFilesCount: 3,
-      },
-      progress: 0.9,
-    });
-
-    emitProgress?.({
-      artifactType: "archive",
-      progress: 0.25,
-    });
-
-    expect(store.getSnapshot()).toEqual({
-      artifactType: "archive",
-      details: null,
-      downloadedBytes: undefined,
-      isUpdateDownloaded: false,
-      progress: 0.25,
-      totalBytes: undefined,
-    });
-  });
-
-  it("clears stale manifest metadata even when archive events omit optional fields", async () => {
-    const store = await importStore();
-    const emitProgress = listeners.get("onProgress");
-
-    emitProgress?.({
-      artifactType: "diff",
-      details: {
-        completedFilesCount: 0,
-        files: [
-          {
-            order: 0,
-            path: "manifest.asset.png",
-            progress: 0,
-            status: "failed",
-          },
-        ],
-        totalFilesCount: 1,
-      },
-      progress: 0.2,
-    });
-
-    emitProgress?.({
-      artifactType: "archive",
-      progress: 0.4,
-    });
-
-    expect(store.getSnapshot()).toEqual({
-      artifactType: "archive",
-      details: null,
-      downloadedBytes: undefined,
-      isUpdateDownloaded: false,
-      progress: 0.4,
-      totalBytes: undefined,
     });
   });
 });

package/src/store.ts

@@ -9,10 +9,8 @@ import { addListener } from "./native";
 
 export type HotUpdaterState = {
   progress: number;
-  downloadedBytes: number | undefined;
-  totalBytes: number | undefined;
   isUpdateDownloaded: boolean;
-  artifactType: "archive" | "diff" | null;
+  artifactType: "diff" | null;
   details: HotUpdaterDiffProgressDetails | null;
 };
 
@@ -56,8 +54,6 @@ const areDiffDetailsEqual = (
 const areStatesEqual = (left: HotUpdaterState, right: HotUpdaterState) => {
   return (
     left.progress === right.progress &&
-    left.downloadedBytes === right.downloadedBytes &&
-    left.totalBytes === right.totalBytes &&
     left.isUpdateDownloaded === right.isUpdateDownloaded &&
     left.artifactType === right.artifactType &&
     areDiffDetailsEqual(left.details, right.details)
@@ -78,8 +74,6 @@ const normalizeDownloadPath = (value: string | undefined) => {
 const createHotUpdaterStore = () => {
   let state: HotUpdaterState = {
     progress: 0,
-    downloadedBytes: undefined,
-    totalBytes: undefined,
     isUpdateDownloaded: false,
     artifactType: null,
     details: null,
@@ -165,10 +159,6 @@ const createHotUpdaterStore = () => {
       nextState.details = state.details;
     }
 
-    if (nextState.artifactType !== "diff") {
-      nextState.details = null;
-    }
-
     if (areStatesEqual(state, nextState)) {
       return;
     }
@@ -180,19 +170,8 @@ const createHotUpdaterStore = () => {
   const applyProgressEvent = (event: HotUpdaterProgressEvent) => {
     setState({
       artifactType: event.artifactType,
-      details:
-        event.artifactType === "diff"
-          ? normalizeDiffDetails(event.details)
-          : null,
-      downloadedBytes:
-        event.artifactType === "archive"
-          ? normalizeByteCount(event.downloadedBytes)
-          : undefined,
+      details: normalizeDiffDetails(event.details),
       progress: event.progress,
-      totalBytes:
-        event.artifactType === "archive"
-          ? normalizeByteCount(event.totalBytes)
-          : undefined,
     });
   };
 

package/src/uuidv7.spec.ts

@@ -0,0 +1,25 @@
+import { isUUIDv7 } from "@hot-updater/core";
+import { afterEach, describe, expect, it, vi } from "vitest";
+
+import { createUUIDv7 } from "./uuidv7";
+
+describe("createUUIDv7", () => {
+  afterEach(() => {
+    vi.useRealTimers();
+    vi.unstubAllGlobals();
+  });
+
+  it.each([
+    { label: "Web Crypto", crypto: globalThis.crypto },
+    { label: "no Web Crypto, as in React Native", crypto: undefined },
+  ])("leads with the 48-bit millisecond time using $label", ({ crypto }) => {
+    vi.useFakeTimers({ now: 0x0192_3456_789a });
+    vi.stubGlobal("crypto", crypto);
+
+    const id = createUUIDv7();
+
+    expect(isUUIDv7(id)).toBe(true);
+    expect(id.startsWith("01923456-789a-7")).toBe(true);
+    expect(createUUIDv7()).not.toBe(id);
+  });
+});

package/src/uuidv7.ts

@@ -0,0 +1,38 @@
+type RandomValuesSource = {
+  readonly getRandomValues?: (array: Uint8Array) => Uint8Array;
+};
+
+/**
+ * Creates an RFC 9562 UUIDv7: a 48-bit millisecond timestamp, then random bits.
+ *
+ * `createUUIDv7` from `@hot-updater/plugin-core` calls `crypto.getRandomValues`
+ * unconditionally, but React Native has no Web Crypto unless the app installs a
+ * polyfill. An Insights event ID only has to tell one event from another so a
+ * retried POST is counted once, so `Math.random` is enough without one.
+ */
+export const createUUIDv7 = (): string => {
+  const bytes = new Uint8Array(16);
+  const { crypto } = globalThis as { crypto?: RandomValuesSource };
+  if (typeof crypto?.getRandomValues === "function") {
+    crypto.getRandomValues(bytes);
+  } else {
+    for (let index = 0; index < bytes.length; index += 1) {
+      bytes[index] = Math.floor(Math.random() * 256);
+    }
+  }
+
+  // Division, not bit shifts: shifts truncate to 32 bits, and a millisecond
+  // timestamp already needs 41.
+  let timestamp = Date.now();
+  for (let index = 5; index >= 0; index -= 1) {
+    bytes[index] = timestamp % 256;
+    timestamp = Math.floor(timestamp / 256);
+  }
+  bytes[6] = 0x70 | (bytes[6]! & 0x0f);
+  bytes[8] = 0x80 | (bytes[8]! & 0x3f);
+
+  const hex = Array.from(bytes, (byte) =>
+    byte.toString(16).padStart(2, "0"),
+  ).join("");
+  return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`;
+};

package/src/wrap.spec.ts

@@ -5,6 +5,7 @@ import { createElement, type ComponentType } from "react";
 import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
 
 import type {
+  ActiveUpdateState,
   NotifyAppReadyInsightsEvent,
   NotifyAppReadyResult,
 } from "./native";
@@ -37,6 +38,7 @@ const mocks = vi.hoisted(() => ({
   getBundleId: vi.fn(() => "bundle-id"),
   getUpdateId: vi.fn(() => "release-id"),
   getChannel: vi.fn(() => "production"),
+  getActiveUpdateState: vi.fn<() => ActiveUpdateState>(),
   getCohort: vi.fn(() => "123"),
   getFingerprintHash: vi.fn(() => "fingerprint-hash"),
   getInstallId: vi.fn(() => "install-id"),
@@ -61,6 +63,7 @@ vi.mock("./native", () => ({
   getBundleId: mocks.getBundleId,
   getUpdateId: mocks.getUpdateId,
   getChannel: mocks.getChannel,
+  getActiveUpdateState: mocks.getActiveUpdateState,
   getCohort: mocks.getCohort,
   getFingerprintHash: mocks.getFingerprintHash,
   getInstallId: mocks.getInstallId,
@@ -99,6 +102,11 @@ describe("HotUpdater wrap initialization", () => {
     mocks.getBundleId.mockReturnValue("bundle-id");
     mocks.getUpdateId.mockReturnValue("release-id");
     mocks.getChannel.mockReturnValue("production");
+    mocks.getActiveUpdateState.mockReturnValue({
+      activeSelection: null,
+      stableSelection: null,
+      verificationPending: false,
+    });
     mocks.getCohort.mockReturnValue("123");
     mocks.getFingerprintHash.mockReturnValue("fingerprint-hash");
     mocks.getInstallId.mockReturnValue("install-id");

package/src/wrap.tsx

@@ -136,11 +136,9 @@ export function wrap(
           <Fallback
             artifactType={progressState.artifactType}
             details={progressState.details}
-            downloadedBytes={progressState.downloadedBytes}
             progress={progress}
             status={updateStatus}
             message={message}
-            totalBytes={progressState.totalBytes}
           />
         );
       }

package/src/wrap.types.ts

@@ -21,8 +21,6 @@ export type UpdateStatus =
 export type HotUpdaterFallbackComponentProps = {
   status: Exclude<UpdateStatus, "UPDATE_PROCESS_COMPLETED">;
   progress: number;
-  downloadedBytes: HotUpdaterState["downloadedBytes"];
-  totalBytes: HotUpdaterState["totalBytes"];
   message: string | null;
   artifactType: HotUpdaterState["artifactType"];
   details: HotUpdaterState["details"];
@@ -32,9 +30,15 @@ interface CommonHotUpdaterOptions {
   /**
    * Sends app-ready transitions and same-Bundle Release adoptions to the
    * configured server. Defaults to `true`; set to `false` to disable client
-   * reporting.
+   * reporting. Debug builds (`__DEV__`) send nothing unless you pass
+   * `{ debug: true }`, so development sessions stay out of production data.
    */
-  insights?: boolean;
+  insights?:
+    | boolean
+    | {
+        /** Also report from debug builds. Defaults to `false`. */
+        debug?: boolean;
+      };
   /** Base URL of a server exposing the Hot Updater v1 client HTTP protocol. */
   baseURL: HotUpdaterBaseURL;
   requestHeaders?: Record<string, string>;
@@ -56,6 +60,7 @@ export type HotUpdaterInitOptions = CommonHotUpdaterOptions;
 export type HotUpdaterOptions = AutoUpdateOptions;
 
 type InternalCommonOptions = {
+  /** Whether this runtime reports, with the debug-build default applied. */
   insights?: boolean;
   client: HotUpdaterHttpClient;
   requestHeaders?: Record<string, string>;

package/android/src/main/java/com/hotupdater/DecompressService.kt

@@ -1,89 +0,0 @@
-package com.hotupdater
-
-import android.util.Log
-import java.io.File
-
-/**
- * Unified decompression service that uses Strategy pattern to handle multiple compression formats.
- * Automatically detects format by trying each strategy's validation and delegates to appropriate decompression strategy.
- */
-class DecompressService {
-    companion object {
-        private const val TAG = "DecompressService"
-    }
-
-    // Strategies with reliable file signatures that can be validated cheaply.
-    // TAR.BR is attempted only as the final fallback because Brotli has no reliable magic bytes.
-    private val signatureStrategies =
-        listOf(
-            ZipDecompressionStrategy(),
-            TarGzDecompressionStrategy(),
-        )
-    private val tarBrStrategy = TarBrDecompressionStrategy()
-
-    /**
-     * Extracts a compressed file to the destination directory.
-     * Automatically detects compression format by trying each strategy's validation.
-     * @param filePath Path to the compressed file
-     * @param destinationPath Path to the destination directory
-     * @param progressCallback Callback for progress updates (0.0 - 1.0)
-     * @return true if extraction was successful, false otherwise
-     */
-    fun extractZipFile(
-        filePath: String,
-        destinationPath: String,
-        progressCallback: (Double) -> Unit,
-    ): Boolean {
-        // Collect file information for better error messages
-        val file = File(filePath)
-        val fileName = file.name
-        val fileSize = if (file.exists()) file.length() else 0L
-
-        // Try each signature-based strategy first.
-        for (strategy in signatureStrategies) {
-            if (strategy.isValid(filePath)) {
-                Log.d(TAG, "Using strategy for $fileName")
-                return strategy.decompress(filePath, destinationPath, progressCallback)
-            }
-        }
-
-        Log.d(TAG, "No ZIP/TAR.GZ signature matched for $fileName, trying TAR.BR fallback")
-
-        if (tarBrStrategy.decompress(filePath, destinationPath, progressCallback)) {
-            Log.d(TAG, "Using TAR.BR fallback for $fileName")
-            return true
-        }
-
-        val errorMessage = createInvalidArchiveMessage(fileName, fileSize)
-        Log.e(TAG, errorMessage)
-        return false
-    }
-
-    /**
-     * Validates if a file matches one of the signature-based archive formats.
-     * @param filePath Path to the file to validate
-     * @return true if the file is a valid compressed archive
-     */
-    fun isValidZipFile(filePath: String): Boolean {
-        for (strategy in signatureStrategies) {
-            if (strategy.isValid(filePath)) {
-                return true
-            }
-        }
-        Log.d(TAG, "No ZIP/TAR.GZ signature matched for file: $filePath. TAR.BR is handled during extraction fallback.")
-        return false
-    }
-
-    private fun createInvalidArchiveMessage(
-        fileName: String,
-        fileSize: Long,
-    ): String =
-        """
-        The downloaded bundle file is not a valid compressed archive: $fileName ($fileSize bytes)
-
-        Supported formats:
-        - ZIP archives (.zip)
-        - GZIP compressed TAR archives (.tar.gz)
-        - Brotli compressed TAR archives (.tar.br)
-        """.trimIndent()
-}

package/android/src/main/java/com/hotupdater/DecompressionStrategy.kt

@@ -1,26 +0,0 @@
-package com.hotupdater
-
-/**
- * Interface for decompression strategies
- */
-interface DecompressionStrategy {
-    /**
-     * Validates if a file can be decompressed by this strategy
-     * @param filePath Path to the file to validate
-     * @return true if the file is valid for this strategy
-     */
-    fun isValid(filePath: String): Boolean
-
-    /**
-     * Decompresses a file to the destination directory
-     * @param filePath Path to the compressed file
-     * @param destinationPath Path to the destination directory
-     * @param progressCallback Callback for progress updates (0.0 - 1.0)
-     * @return true if decompression was successful, false otherwise
-     */
-    fun decompress(
-        filePath: String,
-        destinationPath: String,
-        progressCallback: (Double) -> Unit,
-    ): Boolean
-}