react-native-bspatch 1.0.0

package/lib/typescript/ota/otaAssetResolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"otaAssetResolver.d.ts","sourceRoot":"","sources":["../../../src/ota/otaAssetResolver.ts"],"names":[],"mappings":"AAkCA;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,GAAU,SAAS,MAAM,KAAG,OAAO,CAAC,IAAI,CAqCxE,CAAC;AA4FF;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,QAAO,IAKxC,CAAC"}

package/lib/typescript/ota/otaCore.d.ts

@@ -0,0 +1,109 @@
+/**
+ * Core OTA Logic (Stateless)
+ *
+ * Responsibilities:
+ *  - Download patches with retry
+ *  - Verify integrity (SHA-256 hash)
+ *  - Verify security (HMAC signature)
+ *  - Handle gzip decompression
+ *  - Apply binary patch (bsdiff)
+ *  - Atomic bundle swap
+ *  - Full bundle fallback on failure
+ *  - Structured telemetry logging
+ */
+import { OtaStatus, type OtaConfig, type OtaMetrics, type OtaPatch } from './types';
+/**
+ * Compares two semantic version strings.
+ *
+ * @param a - First version string (e.g., "1.2.3")
+ * @param b - Second version string (e.g., "1.2.4")
+ * @returns `true` if `a >= b`, `false` otherwise
+ *
+ * @example
+ * semverGte("1.2.3", "1.2.3") // true
+ * semverGte("1.2.4", "1.2.3") // true
+ * semverGte("1.2.2", "1.2.3") // false
+ */
+export declare const semverGte: (a: string, b: string) => boolean;
+/**
+ * Verifies the SHA-256 hash of a file.
+ *
+ * @param path - Absolute path to the file to verify
+ * @param expectedHash - Expected SHA-256 hash (hex string). If undefined, verification is skipped.
+ * @returns `true` if hash matches or `expectedHash` is undefined, `false` otherwise
+ */
+export declare const verifyHash: (path: string, expectedHash?: string) => Promise<boolean>;
+/**
+ * Verify HMAC-SHA256 signature of a file.
+ *
+ * Uses CryptoJS to verify that the signature matches the file content
+ * using the provided HMAC key.
+ *
+ * @param filePath - Path to the file to verify
+ * @param signature - Base64-encoded HMAC signature to verify against
+ * @param publicKey - Base64-encoded HMAC key
+ * @returns true if signature is valid, false otherwise
+ *
+ * @example
+ * // Server-side (Node.js) - generate signature:
+ * const crypto = require('crypto');
+ * const key = crypto.randomBytes(32).toString('base64');
+ * const fileBuffer = fs.readFileSync('bundle.patch');
+ * const signature = crypto.createHmac('sha256', Buffer.from(key, 'base64'))
+ *     .update(fileBuffer)
+ *     .digest('base64');
+ */
+export declare const verifySignature: (filePath: string, signature?: string, publicKey?: string) => Promise<boolean>;
+/**
+ * Fetches the list of available OTA patches from the remote manifest.
+ *
+ * Falls back to bundled patches if the remote fetch fails, ensuring
+ * the app can still apply updates that were bundled at build time.
+ *
+ * @param config - OTA configuration containing storage provider and fallback patches
+ * @returns Array of available patches, or bundled patches if remote fetch fails
+ */
+export declare const fetchOtaManifest: (config: OtaConfig) => Promise<OtaPatch[]>;
+/**
+ * Gets the local filesystem path for a content-addressed asset.
+ *
+ * Assets are stored by their hash, so the same asset file is shared
+ * across all OTA versions that reference it.
+ *
+ * @param hash - SHA-256 hash of the asset content
+ * @param ext - File extension (e.g., "png", "jpg")
+ * @returns Absolute path to the asset in the local store
+ *
+ * @example
+ * getLocalAssetPath("abc123...", "png")
+ * // Returns: "/var/mobile/Containers/Data/Application/.../ota/assets/abc123....png"
+ */
+export declare const getLocalAssetPath: (hash: string, ext: string) => string;
+/**
+ * Gets the local filesystem path for a downloaded patch file.
+ *
+ * @param patch - Patch metadata object
+ * @param docDir - Document directory path (use `ReactNativeBlobUtil.fs.dirs.DocumentDir`)
+ * @returns Absolute path to the patch file
+ */
+export declare const getLocalPatchPath: (patch: OtaPatch, docDir: string) => string;
+/**
+ * Applies a single patch and reloads the bundle.
+ *
+ * Pipeline:
+ *  1. Version compatibility check
+ *  2. Download patch (with retry)
+ *  3. Decompress (if .gz)
+ *  4. Security signature check
+ *  5. Resolve source bundle
+ *  6. Verify source hash
+ *  7. Apply binary patch
+ *  8. Verify result hash
+ *  9. Atomic commit (mv)
+ * 10. Update metadata
+ * 11. Reload bundle
+ *
+ * On failure → fallback to full bundle download if URL available.
+ */
+export declare const applyOtaPatchInternal: (patch: OtaPatch, config: OtaConfig, onStatus: (status: OtaStatus, message: string, metrics?: OtaMetrics) => void, onProgress: (percent: number) => void) => Promise<void>;
+//# sourceMappingURL=otaCore.d.ts.map

package/lib/typescript/ota/otaCore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"otaCore.d.ts","sourceRoot":"","sources":["../../../src/ota/otaCore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAgBH,OAAO,EACH,SAAS,EAGT,KAAK,SAAS,EACd,KAAK,UAAU,EACf,KAAK,QAAQ,EAEhB,MAAM,SAAS,CAAC;AAqBjB;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,SAAS,GAAI,GAAG,MAAM,EAAE,GAAG,MAAM,KAAG,OAUhD,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,UAAU,GACnB,MAAM,MAAM,EACZ,eAAe,MAAM,KACtB,OAAO,CAAC,OAAO,CAQjB,CAAC;AAEF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,eAAe,GACxB,UAAU,MAAM,EAChB,YAAY,MAAM,EAClB,YAAY,MAAM,KACnB,OAAO,CAAC,OAAO,CA4BjB,CAAC;AA0FF;;;;;;;;GAQG;AACH,eAAO,MAAM,gBAAgB,GACzB,QAAQ,SAAS,KAClB,OAAO,CAAC,QAAQ,EAAE,CAWpB,CAAC;AAyLF;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,iBAAiB,GAAI,MAAM,MAAM,EAAE,KAAK,MAAM,KAAG,MACvB,CAAC;AAExC;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,GAAI,OAAO,QAAQ,EAAE,QAAQ,MAAM,KAAG,MACzB,CAAC;AAI5C;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,qBAAqB,GAC9B,OAAO,QAAQ,EACf,QAAQ,SAAS,EACjB,UAAU,CACN,MAAM,EAAE,SAAS,EACjB,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,UAAU,KACnB,IAAI,EACT,YAAY,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,kBAycxC,CAAC"}

package/lib/typescript/ota/otaLogger.d.ts

@@ -0,0 +1,44 @@
+/**
+ * OTA Structured Event Logger
+ *
+ * Provides a centralized logging system for all OTA operations.
+ * Events can be forwarded to external analytics via the `onEvent` callback in OtaConfig.
+ */
+export declare enum OtaEvent {
+    CHECK_UPDATE = "check_update",
+    DOWNLOAD_START = "download_start",
+    DOWNLOAD_SUCCESS = "download_success",
+    DOWNLOAD_FAIL = "download_fail",
+    PATCH_START = "patch_start",
+    PATCH_SUCCESS = "patch_success",
+    PATCH_FAIL = "patch_fail",
+    HASH_VERIFY_START = "hash_verify_start",
+    HASH_VERIFY_SUCCESS = "hash_verify_success",
+    HASH_MISMATCH = "hash_mismatch",
+    ROLLBACK = "rollback",
+    FALLBACK_FULL_BUNDLE = "fallback_full_bundle",
+    MARK_HEALTHY = "mark_healthy",
+    RESET_FACTORY = "reset_factory",
+    VERSION_INCOMPATIBLE = "version_incompatible",
+    SIGNATURE_INVALID = "signature_invalid",
+    DECOMPRESS_START = "decompress_start",
+    DECOMPRESS_SUCCESS = "decompress_success"
+}
+export type OtaLogEntry = {
+    event: OtaEvent;
+    timestamp: number;
+    version?: number;
+    message?: string;
+    durationMs?: number;
+    sizeKB?: number;
+    error?: string;
+    metadata?: Record<string, unknown>;
+};
+export type OtaEventCallback = (entry: OtaLogEntry) => void;
+/**
+ * Creates an OTA logger instance bound to an optional external callback.
+ */
+export declare const createOtaLogger: (onEvent?: OtaEventCallback) => {
+    emit: (event: OtaEvent, details?: Omit<OtaLogEntry, "event" | "timestamp">) => void;
+};
+//# sourceMappingURL=otaLogger.d.ts.map

package/lib/typescript/ota/otaLogger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"otaLogger.d.ts","sourceRoot":"","sources":["../../../src/ota/otaLogger.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,oBAAY,QAAQ;IAClB,YAAY,iBAAiB;IAC7B,cAAc,mBAAmB;IACjC,gBAAgB,qBAAqB;IACrC,aAAa,kBAAkB;IAC/B,WAAW,gBAAgB;IAC3B,aAAa,kBAAkB;IAC/B,UAAU,eAAe;IACzB,iBAAiB,sBAAsB;IACvC,mBAAmB,wBAAwB;IAC3C,aAAa,kBAAkB;IAC/B,QAAQ,aAAa;IACrB,oBAAoB,yBAAyB;IAC7C,YAAY,iBAAiB;IAC7B,aAAa,kBAAkB;IAC/B,oBAAoB,yBAAyB;IAC7C,iBAAiB,sBAAsB;IACvC,gBAAgB,qBAAqB;IACrC,kBAAkB,uBAAuB;CAC1C;AAED,MAAM,MAAM,WAAW,GAAG;IACxB,KAAK,EAAE,QAAQ,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG,CAAC,KAAK,EAAE,WAAW,KAAK,IAAI,CAAC;AAE5D;;GAEG;AACH,eAAO,MAAM,eAAe,GAAI,UAAU,gBAAgB;kBAE/C,QAAQ,YACL,IAAI,CAAC,WAAW,EAAE,OAAO,GAAG,WAAW,CAAC;CAsBrD,CAAC"}

package/lib/typescript/ota/otaMetadata.d.ts

@@ -0,0 +1,46 @@
+import { OtaMetadata } from './types';
+/**
+ * Ensures the OTA root directory exists.
+ */
+export declare const ensureOtaDir: () => Promise<void>;
+/**
+ * Loads the current OTA metadata from the local filesystem.
+ *
+ * @param defaultVersion - The version to return if no metadata exists (usually baseAppVersion).
+ * @returns The persisted metadata or a default if loading fails.
+ */
+export declare const loadMetadata: (defaultVersion: number) => Promise<OtaMetadata>;
+/**
+ * Persists OTA metadata to the local filesystem.
+ *
+ * @param metadata - The metadata object to save.
+ */
+export declare const saveMetadata: (metadata: OtaMetadata) => Promise<void>;
+/** Maximum number of previous versions kept in history for rollback. */
+export declare const MAX_VERSION_HISTORY = 3;
+/**
+ * Rotates OTA versions for auditing and rollback capabilities.
+ * Pushes the current version to the history and limits history to MAX_VERSION_HISTORY.
+ *
+ * @param metadata - Current metadata object.
+ * @param newVersion - The newly applied OTA version.
+ * @returns Updated metadata object.
+ */
+export declare const registerNewVersion: (metadata: OtaMetadata, newVersion: number) => OtaMetadata;
+/**
+ * Marks the current session as healthy, indicating a successful boot.
+ * This prevents the native bridge from rolling back the version on the next launch.
+ *
+ * @param defaultVersion - Base version for metadata lookup fallback.
+ * @returns The updated metadata.
+ */
+export declare const markHealthy: (defaultVersion: number) => Promise<OtaMetadata>;
+/**
+ * Resolves the absolute path to the JS bundle for a specific version.
+ *
+ * @param version - The OTA version number.
+ * @param baseVersion - The app's base version (bundled).
+ * @returns Absolute path to the bundle or null if it refers to the base bundle.
+ */
+export declare const getBundlePath: (version: number, baseVersion: number) => string | null;
+//# sourceMappingURL=otaMetadata.d.ts.map

package/lib/typescript/ota/otaMetadata.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"otaMetadata.d.ts","sourceRoot":"","sources":["../../../src/ota/otaMetadata.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAQtC;;GAEG;AACH,eAAO,MAAM,YAAY,QAAa,OAAO,CAAC,IAAI,CAIjD,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,YAAY,GACrB,gBAAgB,MAAM,KACvB,OAAO,CAAC,WAAW,CAmBrB,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,YAAY,GAAU,UAAU,WAAW,KAAG,OAAO,CAAC,IAAI,CAoBtE,CAAC;AAEF,wEAAwE;AACxE,eAAO,MAAM,mBAAmB,IAAI,CAAC;AAErC;;;;;;;GAOG;AACH,eAAO,MAAM,kBAAkB,GAC3B,UAAU,WAAW,EACrB,YAAY,MAAM,KACnB,WAiBF,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,WAAW,GACpB,gBAAgB,MAAM,KACvB,OAAO,CAAC,WAAW,CASrB,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,aAAa,GACtB,SAAS,MAAM,EACf,aAAa,MAAM,KACpB,MAAM,GAAG,IAUX,CAAC"}

package/lib/typescript/ota/storage/CustomStorage.d.ts

@@ -0,0 +1,12 @@
+import type { OtaPatch, OtaConfig, OtaStorageProvider } from '../types';
+/**
+ * Implementation for the custom MinIO-based storage server.
+ */
+export declare class CustomStorageProvider implements OtaStorageProvider {
+    private getEndpoint;
+    private getAccessToken;
+    fetchManifest(config: OtaConfig): Promise<OtaPatch[]>;
+    getUpdateFileUrl(filename: string, config: OtaConfig): Promise<string>;
+    getAssetUrl(hash: string, ext: string, config: OtaConfig): Promise<string>;
+}
+//# sourceMappingURL=CustomStorage.d.ts.map

package/lib/typescript/ota/storage/CustomStorage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CustomStorage.d.ts","sourceRoot":"","sources":["../../../../src/ota/storage/CustomStorage.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAUxE;;GAEG;AACH,qBAAa,qBAAsB,YAAW,kBAAkB;IAC9D,OAAO,CAAC,WAAW;YAIL,cAAc;IAqCtB,aAAa,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;IAuCrD,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC;IAwBtE,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC;CAsBjF"}

package/lib/typescript/ota/storage/GitHubReleaseStorage.d.ts

@@ -0,0 +1,20 @@
+/**
+ * GitHub Releases Storage Provider
+ *
+ * Reads the OTA registry from a GitHub Release asset and resolves download URLs
+ * directly from the release. Supports both public and token-authenticated repos.
+ *
+ * Registry format:
+ * - Expected at: `https://raw.githubusercontent.com/{owner}/{repo}/{tag}/{registryPath}`
+ * - Asset download: `https://github.com/{owner}/{repo}/releases/download/{tag}/{filename}`
+ */
+import type { OtaPatch, OtaConfig, OtaStorageProvider } from '../types';
+export declare class GitHubReleaseStorageProvider implements OtaStorageProvider {
+    private getRawRegistryUrl;
+    private getAssetDownloadUrl;
+    private authHeaders;
+    fetchManifest(config: OtaConfig): Promise<OtaPatch[]>;
+    getUpdateFileUrl(filename: string, config: OtaConfig): Promise<string>;
+    getAssetUrl(hash: string, ext: string, config: OtaConfig): Promise<string>;
+}
+//# sourceMappingURL=GitHubReleaseStorage.d.ts.map

package/lib/typescript/ota/storage/GitHubReleaseStorage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"GitHubReleaseStorage.d.ts","sourceRoot":"","sources":["../../../../src/ota/storage/GitHubReleaseStorage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAExE,qBAAa,4BAA6B,YAAW,kBAAkB;IACnE,OAAO,CAAC,iBAAiB;IAKzB,OAAO,CAAC,mBAAmB;IAK3B,OAAO,CAAC,WAAW;IAKb,aAAa,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;IAgDrD,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC;IAKtE,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC;CAanF"}

package/lib/typescript/ota/types.d.ts

@@ -0,0 +1,191 @@
+/**
+ * OTA Data Types
+ */
+import type { OtaEventCallback } from './otaLogger';
+export interface OtaStorageProvider {
+    /**
+     * Fetch the list of available patches for the current configuration.
+     */
+    fetchManifest(config: OtaConfig): Promise<OtaPatch[]>;
+    /**
+     * Get a signed download URL for a version-specific update file (patch or full bundle).
+     */
+    getUpdateFileUrl(filename: string, config: OtaConfig): Promise<string>;
+    /**
+     * Get a signed download URL for a content-addressed asset.
+     */
+    getAssetUrl(hash: string, ext: string, config: OtaConfig): Promise<string>;
+}
+export declare enum OtaUpdateMode {
+    MANUAL = "MANUAL",
+    ON_APP_START = "ON_APP_START",
+    ON_APP_FOREGROUND = "ON_APP_FOREGROUND",
+    BACKGROUND_DOWNLOAD = "BACKGROUND_DOWNLOAD"
+}
+export declare enum OtaStorageType {
+    /** Custom storage server (primary) */
+    CUSTOM = "CUSTOM",
+    /** GitHub Releases — public or token-authenticated */
+    GITHUB = "GITHUB"
+}
+export type OtaPatch = {
+    /** Unique ID: `v{from}-to-v{to}` */
+    id: string;
+    /** Human-readable label shown in UI */
+    label: string;
+    /** App version this patch belongs to */
+    appVersion: string;
+    /** Release tag (legacy, keep for type compatibility) */
+    releaseTag?: string;
+    /** Filename on the server (e.g. "v1-to-v3.patch") */
+    filename: string;
+    /** Version the app must be at to apply this patch */
+    fromVersion: number;
+    /** Version this patch upgrades to */
+    toVersion: number;
+    /** Integrity hashes (optional for legacy support) */
+    baseHash?: string;
+    /** Hash of the bundle after patching */
+    bundleHash?: string;
+    /** Minimum native app version required (semver) */
+    minAppVersion?: string;
+    /** URL for full bundle download (fallback when patch fails) */
+    fullBundleUrl?: string;
+    /** Whether the patch/bundle is gzip compressed */
+    compressed?: boolean;
+    /** HMAC-SHA256 signature for security verification */
+    signature?: string;
+    /** Whether this update is mandatory */
+    mandatory?: boolean;
+    /** URL to the asset manifest JSON for this version */
+    assetManifestUrl?: string;
+    /** Target platform for this patch */
+    platform?: string;
+};
+/**
+ * A single content-addressed asset from the OTA asset store.
+ */
+export type OtaAsset = {
+    /** SHA-256 hash of the file (used as filename: `{hash}.{ext}`) */
+    hash: string;
+    /** File extension without dot (e.g. "jpg", "png") */
+    ext: string;
+    /** Original relative path as Metro knows it (e.g. "drawable-mdpi/assets_images_foo.jpg") */
+    originalPath: string;
+};
+export type OtaRemotePatch = {
+    version: number;
+    minAppVersion: string;
+    patchUrl: string;
+    bundleHash: string;
+    baseHash: string;
+    mandatory: boolean;
+};
+export type OtaMetadata = {
+    currentVersion: number;
+    previousVersions: number[];
+    rollbackCount: number;
+    lastLaunchSuccessful: boolean;
+};
+export type OtaMetrics = {
+    patchSizeKB: number;
+    downloadMs: number;
+    applyMs: number;
+    totalMs: number;
+    fromCache: boolean;
+};
+export type OtaNetworkStrategy = {
+    retry?: number;
+    timeoutMs?: number;
+    wifiOnly?: boolean;
+};
+export type OtaConfig = {
+    /** Current app versionName (e.g. "1.0.0") */
+    appVersion: string;
+    /** Initial version baked into the APK (usually 1) */
+    baseAppVersion: number;
+    /** Default patches if manifest fetch fails */
+    bundledPatches?: OtaPatch[];
+    /** Enterprise configurations */
+    updateMode?: OtaUpdateMode;
+    maxRollback?: number;
+    network?: OtaNetworkStrategy;
+    /** Telemetry: structured event callback for analytics */
+    onEvent?: OtaEventCallback;
+    /** Public key for signature verification (base64) */
+    publicKey?: string;
+    /** Base URL for the shared hashed asset store (e.g. a GitHub release URL) */
+    assetBaseUrl?: string;
+    /** Storage strategy */
+    storageType?: OtaStorageType;
+    /** GitHub Releases configuration (used when storageType === GITHUB) */
+    githubRelease?: {
+        /** Owner / repo in the format "owner/repo" */
+        repo: string;
+        /** Tag name of the release to fetch updates from */
+        tag: string;
+        /**
+         * Path inside the release where ota_registry.json lives.
+         * If your release contains the file at root, set to "ota_registry.json".
+         * If it's inside a folder "ota/", set to "ota/ota_registry.json".
+         */
+        registryPath?: string;
+        /**
+         * Optional GitHub personal access token for private repos or higher rate limits.
+         * For public repos this is optional.
+         */
+        token?: string;
+        /**
+         * Asset base URL for content-addressed assets.
+         * Supports CDN URLs (jsDelivr, GitHub raw) or a custom base.
+         * Example: "https://cdn.jsdelivr.net/gh/owner/repo@tag/assets"
+         */
+        assetBaseUrl?: string;
+    };
+    /** Custom storage server configuration */
+    customServer?: {
+        baseUrl: string;
+        username: string;
+        password: string;
+        channel: string;
+        baseFolder?: string;
+        useMinio?: boolean;
+        /** Override default API endpoints for non-standard servers */
+        endpoints?: {
+            /** Auth login endpoint (default: /public/authen/login) */
+            login?: string;
+            /** Generate download link endpoint (default: /api/minio/gen-download-link) */
+            genDownloadLink?: string;
+            /** Direct file download endpoint (default: /files/downloadStreamFile) */
+            downloadFile?: string;
+        };
+    };
+    /** Storage provider instance (optional, defaults to CustomStorageProvider) */
+    storage?: OtaStorageProvider;
+};
+export declare enum OtaStatus {
+    IDLE = "IDLE",
+    CHECKING = "CHECKING",
+    UPDATE_AVAILABLE = "UPDATE_AVAILABLE",
+    UP_TO_DATE = "UP_TO_DATE",
+    DOWNLOADING = "DOWNLOADING",
+    APPLYING = "APPLYING",
+    SYNCING_ASSETS = "SYNCING_ASSETS",
+    SUCCESS = "SUCCESS",
+    ERROR = "ERROR"
+}
+export type OtaState = {
+    status: OtaStatus;
+    message: string;
+    progress: number;
+    currentVersion: number;
+    latestVersion: number;
+    pendingCount: number;
+    isChecking: boolean;
+    metrics: OtaMetrics | null;
+    applyUpdate: () => Promise<void>;
+    resetToFactory: () => Promise<void>;
+    markAsHealthy: () => Promise<void>;
+    checkUpdate: () => Promise<void>;
+};
+//# sourceMappingURL=types.d.ts.map

package/lib/typescript/ota/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/ota/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD,MAAM,WAAW,kBAAkB;IAC/B;;OAEG;IACH,aAAa,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;IAEtD;;OAEG;IACH,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAEvE;;OAEG;IACH,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAC9E;AAED,oBAAY,aAAa;IACrB,MAAM,WAAW;IACjB,YAAY,iBAAiB;IAC7B,iBAAiB,sBAAsB;IACvC,mBAAmB,wBAAwB;CAC9C;AAED,oBAAY,cAAc;IACtB,sCAAsC;IACtC,MAAM,WAAW;IACjB,sDAAsD;IACtD,MAAM,WAAW;CACpB;AAED,MAAM,MAAM,QAAQ,GAAG;IACnB,oCAAoC;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,uCAAuC;IACvC,KAAK,EAAE,MAAM,CAAC;IACd,wCAAwC;IACxC,UAAU,EAAE,MAAM,CAAC;IACnB,wDAAwD;IACxD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,qDAAqD;IACrD,QAAQ,EAAE,MAAM,CAAC;IACjB,qDAAqD;IACrD,WAAW,EAAE,MAAM,CAAC;IACpB,qCAAqC;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,qDAAqD;IACrD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,wCAAwC;IACxC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,mDAAmD;IACnD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,+DAA+D;IAC/D,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,kDAAkD;IAClD,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,sDAAsD;IACtD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,uCAAuC;IACvC,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,sDAAsD;IACtD,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,qCAAqC;IACrC,QAAQ,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,QAAQ,GAAG;IACnB,kEAAkE;IAClE,IAAI,EAAE,MAAM,CAAC;IACb,qDAAqD;IACrD,GAAG,EAAE,MAAM,CAAC;IACZ,4FAA4F;IAC5F,YAAY,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,OAAO,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,oBAAoB,EAAE,OAAO,CAAC;CACjC,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG;IACpB,6CAA6C;IAC7C,UAAU,EAAE,MAAM,CAAC;IACnB,qDAAqD;IACrD,cAAc,EAAE,MAAM,CAAC;IACvB,8CAA8C;IAC9C,cAAc,CAAC,EAAE,QAAQ,EAAE,CAAC;IAE5B,gCAAgC;IAChC,UAAU,CAAC,EAAE,aAAa,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,kBAAkB,CAAC;IAE7B,yDAAyD;IACzD,OAAO,CAAC,EAAE,gBAAgB,CAAC;IAC3B,qDAAqD;IACrD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,6EAA6E;IAC7E,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,uBAAuB;IACvB,WAAW,CAAC,EAAE,cAAc,CAAC;IAE7B,uEAAuE;IACvE,aAAa,CAAC,EAAE;QACZ,8CAA8C;QAC9C,IAAI,EAAE,MAAM,CAAC;QACb,oDAAoD;QACpD,GAAG,EAAE,MAAM,CAAC;QACZ;;;;WAIG;QACH,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB;;;WAGG;QACH,KAAK,CAAC,EAAE,MAAM,CAAC;QACf;;;;WAIG;QACH,YAAY,CAAC,EAAE,MAAM,CAAC;KACzB,CAAC;IAEF,0CAA0C;IAC1C,YAAY,CAAC,EAAE;QACX,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,EAAE,OAAO,CAAC;QACnB,8DAA8D;QAC9D,SAAS,CAAC,EAAE;YACR,0DAA0D;YAC1D,KAAK,CAAC,EAAE,MAAM,CAAC;YACf,8EAA8E;YAC9E,eAAe,CAAC,EAAE,MAAM,CAAC;YACzB,yEAAyE;YACzE,YAAY,CAAC,EAAE,MAAM,CAAC;SACzB,CAAC;KACL,CAAC;IAEF,8EAA8E;IAC9E,OAAO,CAAC,EAAE,kBAAkB,CAAC;CAChC,CAAC;AAEF,oBAAY,SAAS;IACjB,IAAI,SAAS;IACb,QAAQ,aAAa;IACrB,gBAAgB,qBAAqB;IACrC,UAAU,eAAe;IACzB,WAAW,gBAAgB;IAC3B,QAAQ,aAAa;IACrB,cAAc,mBAAmB;IACjC,OAAO,YAAY;IACnB,KAAK,UAAU;CAClB;AAED,MAAM,MAAM,QAAQ,GAAG;IACnB,MAAM,EAAE,SAAS,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,OAAO,CAAC;IACpB,OAAO,EAAE,UAAU,GAAG,IAAI,CAAC;IAC3B,WAAW,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACjC,cAAc,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACpC,aAAa,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,WAAW,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CACpC,CAAC"}

package/package.json

@@ -0,0 +1,89 @@
+{
+    "name": "react-native-bspatch",
+    "version": "1.0.0",
+    "description": "Premium OTA Update Solution for React Native using TurboModules and bsdiff",
+    "main": "lib/commonjs/index.js",
+    "module": "lib/module/index.js",
+    "types": "lib/typescript/index.d.ts",
+    "react-native": "src/index.ts",
+    "source": "src/index.ts",
+    "files": [
+        "android",
+        "ios",
+        "cpp",
+        "src",
+        "lib",
+        "tools",
+        "react-native-bspatch.podspec",
+        "README.md",
+        "LICENSE",
+        "!**/__tests__",
+        "!**/__fixtures__",
+        "!**/__mocks__"
+    ],
+    "keywords": [
+        "react-native",
+        "ota",
+        "update",
+        "bspatch",
+        "bsdiff",
+        "turbo-module",
+        "android",
+        "ios"
+    ],
+
+    "codegenConfig": {
+        "name": "RNBsPatchSpec",
+        "type": "modules",
+        "jsSrcsDir": "src"
+    },
+    "peerDependencies": {
+        "react": "*",
+        "react-native": "*",
+        "react-native-blob-util": "*"
+    },
+    "dependencies": {
+        "crypto-js": "^4.2.0"
+    },
+    "repository": {
+        "type": "git",
+        "url": "git+https://github.com/BuiHung1612/react-native-bspatch.git"
+    },
+    "author": "Hung Bui <https://github.com/BuiHung1612>",
+    "license": "MIT",
+    "bugs": {
+        "url": "https://github.com/BuiHung1612/react-native-bspatch/issues"
+    },
+    "homepage": "https://github.com/BuiHung1612/react-native-bspatch#readme",
+    "publishConfig": {
+        "access": "public"
+    },
+    "bin": {
+        "react-native-bspatch": "./tools/build_ota.sh"
+    },
+    "scripts": {
+        "setup": "node ./tools/setup_project.js",
+        "typecheck": "tsc --noEmit",
+        "prepare": "bob build"
+    },
+    "devDependencies": {
+        "@types/crypto-js": "^4.2.2",
+        "@types/react": "^19.2.0",
+        "react-native-builder-bob": "^0.43.0",
+        "typescript": "^5.0.0"
+    },
+    "react-native-builder-bob": {
+        "source": "src",
+        "output": "lib",
+        "targets": [
+            "commonjs",
+            "module",
+            [
+                "typescript",
+                {
+                    "project": "tsconfig.build.json"
+                }
+            ]
+        ]
+    }
+}

package/react-native-bspatch.podspec

@@ -0,0 +1,46 @@
+require "json"
+
+package = JSON.parse(File.read(File.join(__dir__, "package.json")))
+folly_compiler_flags = '-DFOLLY_NO_CONFIG -DFOLLY_MOBILE=1 -DFOLLY_USE_LIBCPP=1 -Wno-comma -Wno-shorten-64-to-32'
+
+Pod::Spec.new do |s|
+  s.name         = "react-native-bspatch"
+  s.version      = package["version"]
+  s.summary      = package["description"]
+  s.homepage     = package["homepage"]
+  s.license      = "MIT"
+  s.authors      = package["author"]
+
+  s.platforms    = { :ios => min_ios_version_supported }
+  s.source       = { :git => "https://github.com/BuiHung1612/react-native-bspatch.git", :tag => "#{s.version}" }
+
+  s.source_files = "ios/**/*.{h,m,mm,swift}", "cpp/**/*.{h,c,cpp}"
+  s.exclude_files = "cpp/bspatch_jni.cpp"
+  s.public_header_files = 'ios/**/*.h'
+
+  s.library = 'bz2'
+
+  s.dependency "SSZipArchive"
+
+  # Use install_modules_dependencies helper to install the dependencies if React Native version >=0.71.0.
+  if respond_to?(:install_modules_dependencies, true)
+    install_modules_dependencies(s)
+  else
+    s.dependency "React-Core"
+
+    # Don't install the dependencies when we run `pod install` in the old architecture.
+    if ENV['RCT_NEW_ARCH_ENABLED'] == '1' then
+      s.compiler_flags = folly_compiler_flags + " -DRCT_NEW_ARCH_ENABLED=1"
+      s.pod_target_xcconfig    = {
+          "HEADER_SEARCH_PATHS" => "\"$(PODS_ROOT)/boost\"",
+          "OTHER_CPLUSPLUSFLAGS" => "-DFOLLY_NO_CONFIG -DFOLLY_MOBILE=1 -DFOLLY_USE_LIBCPP=1",
+          "CLANG_CXX_LANGUAGE_STANDARD" => "c++17"
+      }
+      s.dependency "React-Codegen"
+      s.dependency "RCT-Folly"
+      s.dependency "RCTRequired"
+      s.dependency "RCTTypeSafety"
+      s.dependency "ReactCommon/turbomodule/core"
+    end
+  end    
+end

package/src/NativeBsPatch.ts

@@ -0,0 +1,52 @@
+import type { TurboModule } from 'react-native';
+import { TurboModuleRegistry } from 'react-native';
+
+export interface Spec extends TurboModule {
+  /**
+   * Apply a bspatch file to an old bundle to generate a new bundle
+   * @param oldPath The absolute path to the existing bundle file
+   * @param newPath The absolute path where the new bundle should be saved
+   * @param patchPath The absolute path to the patch file
+   * @param callback Promise-like callback receiving true if successful, or false on error.
+   */
+  applyPatch(
+    oldPath: string,
+    newPath: string,
+    patchPath: string,
+  ): Promise<boolean>;
+
+  /**
+   * Unzip a file to a target directory
+   * @param source The absolute path to the zip file
+   * @param targetDir The absolute path to the destination directory
+   */
+  unzip(source: string, targetDir: string): Promise<boolean>;
+  extractBundleFromAssets(
+    assetName: string,
+    destPath: string,
+  ): Promise<boolean>;
+
+  /**
+   * Decompress a gzip file to the destination path.
+   * @param sourcePath Absolute path to the .gz file
+   * @param destPath Absolute path to write the decompressed output
+   */
+  decompressGzip(sourcePath: string, destPath: string): Promise<boolean>;
+
+  /**
+   * Mark the current boot as healthy to prevent rollback
+   */
+  markAsHealthy(): void;
+
+  /**
+   * Reload the React Native JS bundle
+   */
+  reloadBundle(): void;
+
+  /**
+   * Log a message to the native console (NSLog on iOS)
+   */
+  logNative(message: string): void;
+}
+
+export default TurboModuleRegistry.getEnforcing<Spec>('BsPatch');

package/src/crypto-js.d.ts

@@ -0,0 +1 @@
+declare module 'crypto-js';