@onekeyfe/react-native-bundle-crypto 3.0.39

package/nitrogen/generated/shared/c++/HybridReactNativeBundleCryptoSpec.cpp

@@ -0,0 +1,30 @@
+///
+/// HybridReactNativeBundleCryptoSpec.cpp
+/// This file was generated by nitrogen. DO NOT MODIFY THIS FILE.
+/// https://github.com/mrousavy/nitro
+/// Copyright © 2026 Marc Rousavy @ Margelo
+///
+
+#include "HybridReactNativeBundleCryptoSpec.hpp"
+
+namespace margelo::nitro::reactnativebundlecrypto {
+
+  void HybridReactNativeBundleCryptoSpec::loadHybridMethods() {
+    // load base methods/properties
+    HybridObject::loadHybridMethods();
+    // load custom methods/properties
+    registerHybrids(this, [](Prototype& prototype) {
+      prototype.registerHybridMethod("verifyGpgCleartext", &HybridReactNativeBundleCryptoSpec::verifyGpgCleartext);
+      prototype.registerHybridMethod("verifyDetachedAsc", &HybridReactNativeBundleCryptoSpec::verifyDetachedAsc);
+      prototype.registerHybridMethod("sha256OfFile", &HybridReactNativeBundleCryptoSpec::sha256OfFile);
+      prototype.registerHybridMethod("secureEqualHex", &HybridReactNativeBundleCryptoSpec::secureEqualHex);
+      prototype.registerHybridMethod("verifyDirAgainstHashes", &HybridReactNativeBundleCryptoSpec::verifyDirAgainstHashes);
+      prototype.registerHybridMethod("hashDir", &HybridReactNativeBundleCryptoSpec::hashDir);
+      prototype.registerHybridMethod("validateExtractedPathSafety", &HybridReactNativeBundleCryptoSpec::validateExtractedPathSafety);
+      prototype.registerHybridMethod("atomicWriteFile", &HybridReactNativeBundleCryptoSpec::atomicWriteFile);
+      prototype.registerHybridMethod("safeRename", &HybridReactNativeBundleCryptoSpec::safeRename);
+      prototype.registerHybridMethod("listVersionDirs", &HybridReactNativeBundleCryptoSpec::listVersionDirs);
+    });
+  }
+
+} // namespace margelo::nitro::reactnativebundlecrypto

package/nitrogen/generated/shared/c++/HybridReactNativeBundleCryptoSpec.hpp

@@ -0,0 +1,84 @@
+///
+/// HybridReactNativeBundleCryptoSpec.hpp
+/// This file was generated by nitrogen. DO NOT MODIFY THIS FILE.
+/// https://github.com/mrousavy/nitro
+/// Copyright © 2026 Marc Rousavy @ Margelo
+///
+
+#pragma once
+
+#if __has_include(<NitroModules/HybridObject.hpp>)
+#include <NitroModules/HybridObject.hpp>
+#else
+#error NitroModules cannot be found! Are you sure you installed NitroModules properly?
+#endif
+
+// Forward declaration of `VerifyGpgCleartextResult` to properly resolve imports.
+namespace margelo::nitro::reactnativebundlecrypto { struct VerifyGpgCleartextResult; }
+// Forward declaration of `VerifyDetachedAscResult` to properly resolve imports.
+namespace margelo::nitro::reactnativebundlecrypto { struct VerifyDetachedAscResult; }
+// Forward declaration of `Sha256Result` to properly resolve imports.
+namespace margelo::nitro::reactnativebundlecrypto { struct Sha256Result; }
+// Forward declaration of `DirHashEntry` to properly resolve imports.
+namespace margelo::nitro::reactnativebundlecrypto { struct DirHashEntry; }
+
+#include "VerifyGpgCleartextResult.hpp"
+#include <NitroModules/Promise.hpp>
+#include <string>
+#include "VerifyDetachedAscResult.hpp"
+#include "Sha256Result.hpp"
+#include "DirHashEntry.hpp"
+#include <vector>
+
+namespace margelo::nitro::reactnativebundlecrypto {
+
+  using namespace margelo::nitro;
+
+  /**
+   * An abstract base class for `ReactNativeBundleCrypto`
+   * Inherit this class to create instances of `HybridReactNativeBundleCryptoSpec` in C++.
+   * You must explicitly call `HybridObject`'s constructor yourself, because it is virtual.
+   * @example
+   * ```cpp
+   * class HybridReactNativeBundleCrypto: public HybridReactNativeBundleCryptoSpec {
+   * public:
+   *   HybridReactNativeBundleCrypto(...): HybridObject(TAG) { ... }
+   *   // ...
+   * };
+   * ```
+   */
+  class HybridReactNativeBundleCryptoSpec: public virtual HybridObject {
+    public:
+      // Constructor
+      explicit HybridReactNativeBundleCryptoSpec(): HybridObject(TAG) { }
+
+      // Destructor
+      ~HybridReactNativeBundleCryptoSpec() override = default;
+
+    public:
+      // Properties
+      
+
+    public:
+      // Methods
+      virtual std::shared_ptr<Promise<VerifyGpgCleartextResult>> verifyGpgCleartext(const std::string& signedMessage) = 0;
+      virtual std::shared_ptr<Promise<VerifyDetachedAscResult>> verifyDetachedAsc(const std::string& ascContent) = 0;
+      virtual std::shared_ptr<Promise<Sha256Result>> sha256OfFile(const std::string& filePath) = 0;
+      virtual bool secureEqualHex(const std::string& a, const std::string& b) = 0;
+      virtual std::shared_ptr<Promise<bool>> verifyDirAgainstHashes(const std::string& dirPath, const std::vector<DirHashEntry>& entries) = 0;
+      virtual std::shared_ptr<Promise<std::vector<DirHashEntry>>> hashDir(const std::string& dirPath) = 0;
+      virtual std::shared_ptr<Promise<bool>> validateExtractedPathSafety(const std::string& destination) = 0;
+      virtual std::shared_ptr<Promise<void>> atomicWriteFile(const std::string& filePath, const std::string& contentUtf8) = 0;
+      virtual std::shared_ptr<Promise<void>> safeRename(const std::string& fromPath, const std::string& toPath) = 0;
+      virtual std::shared_ptr<Promise<std::vector<std::string>>> listVersionDirs(const std::string& parentDir) = 0;
+
+    protected:
+      // Hybrid Setup
+      void loadHybridMethods() override;
+
+    protected:
+      // Tag for logging
+      static constexpr auto TAG = "ReactNativeBundleCrypto";
+  };
+
+} // namespace margelo::nitro::reactnativebundlecrypto

package/nitrogen/generated/shared/c++/Sha256Result.hpp

@@ -0,0 +1,80 @@
+///
+/// Sha256Result.hpp
+/// This file was generated by nitrogen. DO NOT MODIFY THIS FILE.
+/// https://github.com/mrousavy/nitro
+/// Copyright © 2026 Marc Rousavy @ Margelo
+///
+
+#pragma once
+
+#if __has_include(<NitroModules/JSIConverter.hpp>)
+#include <NitroModules/JSIConverter.hpp>
+#else
+#error NitroModules cannot be found! Are you sure you installed NitroModules properly?
+#endif
+#if __has_include(<NitroModules/NitroDefines.hpp>)
+#include <NitroModules/NitroDefines.hpp>
+#else
+#error NitroModules cannot be found! Are you sure you installed NitroModules properly?
+#endif
+#if __has_include(<NitroModules/JSIHelpers.hpp>)
+#include <NitroModules/JSIHelpers.hpp>
+#else
+#error NitroModules cannot be found! Are you sure you installed NitroModules properly?
+#endif
+
+
+
+#include <string>
+#include <optional>
+
+namespace margelo::nitro::reactnativebundlecrypto {
+
+  /**
+   * A struct which can be represented as a JavaScript object (Sha256Result).
+   */
+  struct Sha256Result {
+  public:
+    std::optional<std::string> sha256     SWIFT_PRIVATE;
+    std::optional<std::string> failureReason     SWIFT_PRIVATE;
+
+  public:
+    Sha256Result() = default;
+    explicit Sha256Result(std::optional<std::string> sha256, std::optional<std::string> failureReason): sha256(sha256), failureReason(failureReason) {}
+  };
+
+} // namespace margelo::nitro::reactnativebundlecrypto
+
+namespace margelo::nitro {
+
+  // C++ Sha256Result <> JS Sha256Result (object)
+  template <>
+  struct JSIConverter<margelo::nitro::reactnativebundlecrypto::Sha256Result> final {
+    static inline margelo::nitro::reactnativebundlecrypto::Sha256Result fromJSI(jsi::Runtime& runtime, const jsi::Value& arg) {
+      jsi::Object obj = arg.asObject(runtime);
+      return margelo::nitro::reactnativebundlecrypto::Sha256Result(
+        JSIConverter<std::optional<std::string>>::fromJSI(runtime, obj.getProperty(runtime, "sha256")),
+        JSIConverter<std::optional<std::string>>::fromJSI(runtime, obj.getProperty(runtime, "failureReason"))
+      );
+    }
+    static inline jsi::Value toJSI(jsi::Runtime& runtime, const margelo::nitro::reactnativebundlecrypto::Sha256Result& arg) {
+      jsi::Object obj(runtime);
+      obj.setProperty(runtime, "sha256", JSIConverter<std::optional<std::string>>::toJSI(runtime, arg.sha256));
+      obj.setProperty(runtime, "failureReason", JSIConverter<std::optional<std::string>>::toJSI(runtime, arg.failureReason));
+      return obj;
+    }
+    static inline bool canConvert(jsi::Runtime& runtime, const jsi::Value& value) {
+      if (!value.isObject()) {
+        return false;
+      }
+      jsi::Object obj = value.getObject(runtime);
+      if (!nitro::isPlainObject(runtime, obj)) {
+        return false;
+      }
+      if (!JSIConverter<std::optional<std::string>>::canConvert(runtime, obj.getProperty(runtime, "sha256"))) return false;
+      if (!JSIConverter<std::optional<std::string>>::canConvert(runtime, obj.getProperty(runtime, "failureReason"))) return false;
+      return true;
+    }
+  };
+
+} // namespace margelo::nitro

package/nitrogen/generated/shared/c++/VerifyDetachedAscResult.hpp

@@ -0,0 +1,84 @@
+///
+/// VerifyDetachedAscResult.hpp
+/// This file was generated by nitrogen. DO NOT MODIFY THIS FILE.
+/// https://github.com/mrousavy/nitro
+/// Copyright © 2026 Marc Rousavy @ Margelo
+///
+
+#pragma once
+
+#if __has_include(<NitroModules/JSIConverter.hpp>)
+#include <NitroModules/JSIConverter.hpp>
+#else
+#error NitroModules cannot be found! Are you sure you installed NitroModules properly?
+#endif
+#if __has_include(<NitroModules/NitroDefines.hpp>)
+#include <NitroModules/NitroDefines.hpp>
+#else
+#error NitroModules cannot be found! Are you sure you installed NitroModules properly?
+#endif
+#if __has_include(<NitroModules/JSIHelpers.hpp>)
+#include <NitroModules/JSIHelpers.hpp>
+#else
+#error NitroModules cannot be found! Are you sure you installed NitroModules properly?
+#endif
+
+
+
+#include <string>
+#include <optional>
+
+namespace margelo::nitro::reactnativebundlecrypto {
+
+  /**
+   * A struct which can be represented as a JavaScript object (VerifyDetachedAscResult).
+   */
+  struct VerifyDetachedAscResult {
+  public:
+    bool valid     SWIFT_PRIVATE;
+    std::optional<std::string> sha256     SWIFT_PRIVATE;
+    std::optional<std::string> reason     SWIFT_PRIVATE;
+
+  public:
+    VerifyDetachedAscResult() = default;
+    explicit VerifyDetachedAscResult(bool valid, std::optional<std::string> sha256, std::optional<std::string> reason): valid(valid), sha256(sha256), reason(reason) {}
+  };
+
+} // namespace margelo::nitro::reactnativebundlecrypto
+
+namespace margelo::nitro {
+
+  // C++ VerifyDetachedAscResult <> JS VerifyDetachedAscResult (object)
+  template <>
+  struct JSIConverter<margelo::nitro::reactnativebundlecrypto::VerifyDetachedAscResult> final {
+    static inline margelo::nitro::reactnativebundlecrypto::VerifyDetachedAscResult fromJSI(jsi::Runtime& runtime, const jsi::Value& arg) {
+      jsi::Object obj = arg.asObject(runtime);
+      return margelo::nitro::reactnativebundlecrypto::VerifyDetachedAscResult(
+        JSIConverter<bool>::fromJSI(runtime, obj.getProperty(runtime, "valid")),
+        JSIConverter<std::optional<std::string>>::fromJSI(runtime, obj.getProperty(runtime, "sha256")),
+        JSIConverter<std::optional<std::string>>::fromJSI(runtime, obj.getProperty(runtime, "reason"))
+      );
+    }
+    static inline jsi::Value toJSI(jsi::Runtime& runtime, const margelo::nitro::reactnativebundlecrypto::VerifyDetachedAscResult& arg) {
+      jsi::Object obj(runtime);
+      obj.setProperty(runtime, "valid", JSIConverter<bool>::toJSI(runtime, arg.valid));
+      obj.setProperty(runtime, "sha256", JSIConverter<std::optional<std::string>>::toJSI(runtime, arg.sha256));
+      obj.setProperty(runtime, "reason", JSIConverter<std::optional<std::string>>::toJSI(runtime, arg.reason));
+      return obj;
+    }
+    static inline bool canConvert(jsi::Runtime& runtime, const jsi::Value& value) {
+      if (!value.isObject()) {
+        return false;
+      }
+      jsi::Object obj = value.getObject(runtime);
+      if (!nitro::isPlainObject(runtime, obj)) {
+        return false;
+      }
+      if (!JSIConverter<bool>::canConvert(runtime, obj.getProperty(runtime, "valid"))) return false;
+      if (!JSIConverter<std::optional<std::string>>::canConvert(runtime, obj.getProperty(runtime, "sha256"))) return false;
+      if (!JSIConverter<std::optional<std::string>>::canConvert(runtime, obj.getProperty(runtime, "reason"))) return false;
+      return true;
+    }
+  };
+
+} // namespace margelo::nitro

package/nitrogen/generated/shared/c++/VerifyGpgCleartextResult.hpp

@@ -0,0 +1,84 @@
+///
+/// VerifyGpgCleartextResult.hpp
+/// This file was generated by nitrogen. DO NOT MODIFY THIS FILE.
+/// https://github.com/mrousavy/nitro
+/// Copyright © 2026 Marc Rousavy @ Margelo
+///
+
+#pragma once
+
+#if __has_include(<NitroModules/JSIConverter.hpp>)
+#include <NitroModules/JSIConverter.hpp>
+#else
+#error NitroModules cannot be found! Are you sure you installed NitroModules properly?
+#endif
+#if __has_include(<NitroModules/NitroDefines.hpp>)
+#include <NitroModules/NitroDefines.hpp>
+#else
+#error NitroModules cannot be found! Are you sure you installed NitroModules properly?
+#endif
+#if __has_include(<NitroModules/JSIHelpers.hpp>)
+#include <NitroModules/JSIHelpers.hpp>
+#else
+#error NitroModules cannot be found! Are you sure you installed NitroModules properly?
+#endif
+
+
+
+#include <string>
+#include <optional>
+
+namespace margelo::nitro::reactnativebundlecrypto {
+
+  /**
+   * A struct which can be represented as a JavaScript object (VerifyGpgCleartextResult).
+   */
+  struct VerifyGpgCleartextResult {
+  public:
+    bool valid     SWIFT_PRIVATE;
+    std::optional<std::string> sha256     SWIFT_PRIVATE;
+    std::optional<std::string> reason     SWIFT_PRIVATE;
+
+  public:
+    VerifyGpgCleartextResult() = default;
+    explicit VerifyGpgCleartextResult(bool valid, std::optional<std::string> sha256, std::optional<std::string> reason): valid(valid), sha256(sha256), reason(reason) {}
+  };
+
+} // namespace margelo::nitro::reactnativebundlecrypto
+
+namespace margelo::nitro {
+
+  // C++ VerifyGpgCleartextResult <> JS VerifyGpgCleartextResult (object)
+  template <>
+  struct JSIConverter<margelo::nitro::reactnativebundlecrypto::VerifyGpgCleartextResult> final {
+    static inline margelo::nitro::reactnativebundlecrypto::VerifyGpgCleartextResult fromJSI(jsi::Runtime& runtime, const jsi::Value& arg) {
+      jsi::Object obj = arg.asObject(runtime);
+      return margelo::nitro::reactnativebundlecrypto::VerifyGpgCleartextResult(
+        JSIConverter<bool>::fromJSI(runtime, obj.getProperty(runtime, "valid")),
+        JSIConverter<std::optional<std::string>>::fromJSI(runtime, obj.getProperty(runtime, "sha256")),
+        JSIConverter<std::optional<std::string>>::fromJSI(runtime, obj.getProperty(runtime, "reason"))
+      );
+    }
+    static inline jsi::Value toJSI(jsi::Runtime& runtime, const margelo::nitro::reactnativebundlecrypto::VerifyGpgCleartextResult& arg) {
+      jsi::Object obj(runtime);
+      obj.setProperty(runtime, "valid", JSIConverter<bool>::toJSI(runtime, arg.valid));
+      obj.setProperty(runtime, "sha256", JSIConverter<std::optional<std::string>>::toJSI(runtime, arg.sha256));
+      obj.setProperty(runtime, "reason", JSIConverter<std::optional<std::string>>::toJSI(runtime, arg.reason));
+      return obj;
+    }
+    static inline bool canConvert(jsi::Runtime& runtime, const jsi::Value& value) {
+      if (!value.isObject()) {
+        return false;
+      }
+      jsi::Object obj = value.getObject(runtime);
+      if (!nitro::isPlainObject(runtime, obj)) {
+        return false;
+      }
+      if (!JSIConverter<bool>::canConvert(runtime, obj.getProperty(runtime, "valid"))) return false;
+      if (!JSIConverter<std::optional<std::string>>::canConvert(runtime, obj.getProperty(runtime, "sha256"))) return false;
+      if (!JSIConverter<std::optional<std::string>>::canConvert(runtime, obj.getProperty(runtime, "reason"))) return false;
+      return true;
+    }
+  };
+
+} // namespace margelo::nitro

package/package.json

@@ -0,0 +1,169 @@
+{
+  "name": "@onekeyfe/react-native-bundle-crypto",
+  "version": "3.0.39",
+  "description": "react-native-bundle-crypto",
+  "main": "./lib/module/index.js",
+  "types": "./lib/typescript/src/index.d.ts",
+  "exports": {
+    ".": {
+      "source": "./src/index.tsx",
+      "types": "./lib/typescript/src/index.d.ts",
+      "default": "./lib/module/index.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "src",
+    "lib",
+    "android",
+    "ios",
+    "cpp",
+    "nitrogen",
+    "nitro.json",
+    "*.podspec",
+    "react-native.config.js",
+    "!ios/build",
+    "!android/build",
+    "!android/gradle",
+    "!android/gradlew",
+    "!android/gradlew.bat",
+    "!android/local.properties",
+    "!**/__tests__",
+    "!**/__fixtures__",
+    "!**/__mocks__",
+    "!**/.*"
+  ],
+  "scripts": {
+    "clean": "del-cli android/build example/android/build example/android/app/build example/ios/build lib",
+    "prepare": "bob build",
+    "nitrogen": "nitrogen",
+    "typecheck": "tsc",
+    "lint": "eslint \"**/*.{js,ts,tsx}\"",
+    "test": "jest",
+    "release": "yarn prepare && npm whoami && npm publish --access public"
+  },
+  "keywords": [
+    "react-native",
+    "ios",
+    "android"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/OneKeyHQ/app-modules/react-native-bundle-crypto.git"
+  },
+  "author": "onekeyfe <huanming@onekey.so> (https://github.com/OneKeyHQ/app-modules)",
+  "license": "MIT",
+  "bugs": {
+    "url": "https://github.com/OneKeyHQ/app-modules/react-native-bundle-crypto/issues"
+  },
+  "homepage": "https://github.com/OneKeyHQ/app-modules/react-native-bundle-crypto#readme",
+  "publishConfig": {
+    "registry": "https://registry.npmjs.org/"
+  },
+  "devDependencies": {
+    "@commitlint/config-conventional": "^19.8.1",
+    "@eslint/compat": "^1.3.2",
+    "@eslint/eslintrc": "^3.3.1",
+    "@eslint/js": "^9.35.0",
+    "@react-native/babel-preset": "0.83.0",
+    "@react-native/eslint-config": "0.83.0",
+    "@release-it/conventional-changelog": "^10.0.1",
+    "@types/jest": "^29.5.14",
+    "@types/react": "^19.2.0",
+    "commitlint": "^19.8.1",
+    "del-cli": "^6.0.0",
+    "eslint": "^9.35.0",
+    "eslint-config-prettier": "^10.1.8",
+    "eslint-plugin-prettier": "^5.5.4",
+    "jest": "^29.7.0",
+    "lefthook": "^2.0.3",
+    "nitrogen": "0.31.10",
+    "prettier": "^2.8.8",
+    "react": "19.2.0",
+    "react-native": "patch:react-native@npm%3A0.83.0#~/.yarn/patches/react-native-npm-0.83.0-577d0f2d83.patch",
+    "react-native-builder-bob": "^0.40.13",
+    "react-native-nitro-modules": "0.33.2",
+    "release-it": "^19.0.4",
+    "turbo": "^2.5.6",
+    "typescript": "^5.9.2"
+  },
+  "peerDependencies": {
+    "react": "*",
+    "react-native": "*",
+    "react-native-nitro-modules": "0.33.2"
+  },
+  "react-native-builder-bob": {
+    "source": "src",
+    "output": "lib",
+    "targets": [
+      [
+        "custom",
+        {
+          "script": "nitrogen",
+          "clean": "nitrogen/"
+        }
+      ],
+      [
+        "module",
+        {
+          "esm": true
+        }
+      ],
+      [
+        "typescript",
+        {
+          "project": "tsconfig.build.json"
+        }
+      ]
+    ]
+  },
+  "prettier": {
+    "quoteProps": "consistent",
+    "singleQuote": true,
+    "tabWidth": 2,
+    "trailingComma": "es5",
+    "useTabs": false
+  },
+  "jest": {
+    "preset": "react-native",
+    "modulePathIgnorePatterns": [
+      "<rootDir>/example/node_modules",
+      "<rootDir>/lib/"
+    ]
+  },
+  "commitlint": {
+    "extends": [
+      "@commitlint/config-conventional"
+    ]
+  },
+  "release-it": {
+    "git": {
+      "commitMessage": "chore: release ${version}",
+      "tagName": "v${version}"
+    },
+    "npm": {
+      "publish": true
+    },
+    "github": {
+      "release": true
+    },
+    "plugins": {
+      "@release-it/conventional-changelog": {
+        "preset": {
+          "name": "angular"
+        }
+      }
+    }
+  },
+  "create-react-native-library": {
+    "type": "nitro-module",
+    "languages": "kotlin-swift",
+    "tools": [
+      "eslint",
+      "jest",
+      "lefthook",
+      "release-it"
+    ],
+    "version": "0.56.0"
+  }
+}

package/src/ReactNativeBundleCrypto.nitro.ts

@@ -0,0 +1,56 @@
+import type { HybridObject } from 'react-native-nitro-modules';
+
+export interface VerifyGpgCleartextResult {
+  valid: boolean;
+  sha256?: string; // taken from the signed JSON body when valid (mirrors bundle behavior)
+  reason?: string;
+}
+
+export interface VerifyDetachedAscResult {
+  valid: boolean;
+  sha256?: string; // mirrors APK behavior: taken from the detached SHA256SUMS.asc cleartext
+  reason?: string;
+}
+
+export interface Sha256Result {
+  sha256?: string;
+  failureReason?: string; // FILE_NOT_FOUND / IO_<code> / MISMATCH ... (mirrors current sub-types)
+}
+
+export interface DirHashEntry {
+  relativePath: string;
+  sha256: string;
+}
+
+export interface ReactNativeBundleCrypto
+  extends HybridObject<{ ios: 'swift'; android: 'kotlin' }> {
+  // ---- GPG / ASC (public key embedded, single source; never exposed to JS) ----
+  // bundle form: PGP CLEARTEXT SIGNED MESSAGE whose body is JSON containing sha256
+  verifyGpgCleartext(signedMessage: string): Promise<VerifyGpgCleartextResult>;
+  // APK form: detached SHA256SUMS.asc (cleartext-signed SHA256SUMS text)
+  verifyDetachedAsc(ascContent: string): Promise<VerifyDetachedAscResult>;
+
+  // ---- sha256 ----
+  sha256OfFile(filePath: string): Promise<Sha256Result>;
+  // constant-time comparison of two hex strings (mirrors current secureCompare semantics)
+  secureEqualHex(a: string, b: string): boolean;
+
+  // ---- per-entry directory hash verification (mirrors validateAllFilesInDir) ----
+  // verify every file under dirPath has sha256 == expected[relativePath], plus completeness.
+  verifyDirAgainstHashes(
+    dirPath: string,
+    entries: DirHashEntry[]
+  ): Promise<boolean>;
+  // compute relativePath -> sha256 for all files under dirPath (for chart to build its metadata)
+  hashDir(dirPath: string): Promise<DirHashEntry[]>;
+
+  // ---- safe file operations (verbs) ----
+  // guard against symlink / path traversal (mirrors validateExtractedPathSafety)
+  validateExtractedPathSafety(destination: string): Promise<boolean>;
+  // atomic write: temp file + rename
+  atomicWriteFile(filePath: string, contentUtf8: string): Promise<void>;
+  // safe rename (same-volume move, removes existing target first)
+  safeRename(fromPath: string, toPath: string): Promise<void>;
+  // enumerate version sub-directory names under a parent dir (e.g. "<appVersion>-<bundleVersion>")
+  listVersionDirs(parentDir: string): Promise<string[]>;
+}

package/src/index.tsx

@@ -0,0 +1,8 @@
+import { NitroModules } from 'react-native-nitro-modules';
+import type { ReactNativeBundleCrypto as ReactNativeBundleCryptoType } from './ReactNativeBundleCrypto.nitro';
+
+const ReactNativeBundleCryptoHybridObject =
+  NitroModules.createHybridObject<ReactNativeBundleCryptoType>('ReactNativeBundleCrypto');
+
+export const ReactNativeBundleCrypto = ReactNativeBundleCryptoHybridObject;
+export type * from './ReactNativeBundleCrypto.nitro';