@renbostudios/edge-ota 0.2.6 → 0.2.7

package/dist/core/manifest.js

@@ -12,18 +12,39 @@
  * The client SDK deserialises this from the `manifest` part of the
  * multipart response (or directly from the response body in non-multipart mode).
  */
+function hexToBase64Url(hex) {
+    if (hex.length !== 64 || !/^[0-9a-fA-F]+$/.test(hex)) {
+        return hex;
+    }
+    const bytes = new Uint8Array(hex.length / 2);
+    for (let i = 0; i < hex.length; i += 2) {
+        bytes[i / 2] = parseInt(hex.substring(i, i + 2), 16);
+    }
+    let binString = "";
+    for (let i = 0; i < bytes.length; i++) {
+        binString += String.fromCharCode(bytes[i]);
+    }
+    const base64 = btoa(binString);
+    return base64
+        .replace(/\+/g, '-')
+        .replace(/\//g, '_')
+        .replace(/=+$/, '');
+}
 export function generateExpoManifest(params) {
     return {
         id: params.updateId,
         createdAt: params.createdAt,
         runtimeVersion: params.runtimeVersion,
         launchAsset: {
-            hash: params.bundleHash,
+            hash: hexToBase64Url(params.bundleHash),
             key: "bundle",
             contentType: "application/javascript",
             url: params.bundleUrl
         },
-        assets: params.assets,
+        assets: params.assets.map(asset => ({
+            ...asset,
+            hash: hexToBase64Url(asset.hash)
+        })),
         metadata: params.metadata ?? {},
         extra: params.extra ?? {}
     };
@@ -66,7 +87,8 @@ export function createExpoHeaders(signature) {
 export function buildMultipartManifestBody(manifest, signature) {
     const boundary = "expo-update-boundary-" + Math.random().toString(36).slice(2, 10);
     const manifestJson = JSON.stringify(manifest);
-    let partHeaders = "Content-Type: application/json\r\n";
+    let partHeaders = "Content-Disposition: inline; name=\"manifest\"\r\n";
+    partHeaders += "Content-Type: application/json\r\n";
     if (signature) {
         partHeaders += `expo-signature: sig="${signature}", keyid="root", alg="ecdsa-p256-sha256"\r\n`;
     }

package/dist/index.js

@@ -353,12 +353,10 @@ program
             console.log("  payload   ", payloadObj);
             continue;
         }
-        const zipPath = path.resolve(cwd, `update-bundle-${platform}.zip`);
-        console.log(`  packing    bundle → zip`);
-        await zipDirectory(distDir, zipPath);
-        const zipBuffer = fs.readFileSync(zipPath);
+        console.log(`  packing    bundle`);
+        const bundleBuffer = fs.readFileSync(bundlePath);
         const form = new FormData();
-        form.append("bundle", new Blob([zipBuffer], { type: "application/zip" }), `bundle-${platform}.zip`);
+        form.append("bundle", new Blob([bundleBuffer], { type: "application/javascript" }), `bundle-${platform}.hbc`);
         form.append("payload", payloadStr);
         form.append("signature", signature);
         form.append("platform", platform);
@@ -371,7 +369,6 @@ program
             },
             body: form
         });
-        fs.unlinkSync(zipPath);
         if (response.ok) {
             const body = await response.json().catch(() => ({}));
             const updateId = body.updateId || "unknown";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@renbostudios/edge-ota",
-  "version": "0.2.6",
+  "version": "0.2.7",
   "preferGlobal": true,
   "description": "Zero-SDK, self-hostable OTA update CLI for Expo — push signed JS bundles to any EdgeOTA server",
   "license": "MIT",