react-native-bspatch 4.1.0 → 5.0.0

package/lib/typescript/ota/storage/R2Storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"R2Storage.d.ts","sourceRoot":"","sources":["../../../../src/ota/storage/R2Storage.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAmBxE,uFAAuF;AACvF,eAAO,MAAM,SAAS,GAClB,KAAK,MAAM,EACX,WAAW,MAAM,EACjB,UAAU,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KACjC,OAAO,CAAC,GAAG,CAYb,CAAC;AAMF,eAAO,MAAM,gBAAgB,GAAI,SAAS,MAAM,KAAG,MAKlD,CAAC;AAEF,qBAAa,iBAAkB,YAAW,kBAAkB;IAClD,aAAa,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;IAiCrD,gBAAgB,CAClB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,SAAS,GAClB,OAAO,CAAC,MAAM,CAAC;IAeZ,WAAW,CACb,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,SAAS,GAClB,OAAO,CAAC,MAAM,CAAC;CAWrB"}

package/lib/typescript/ota/types.d.ts

@@ -43,16 +43,38 @@ export type OtaPatch = {
     minAppVersion?: string;
     /** Full bundle file: used when there is no OTA bundle to patch from, or the patch fails */
     fullBundleUrl?: string;
+    /** Size of the full bundle in bytes: download progress when it arrives Content-Encoded */
+    bundleSize?: number;
     /** RSA/ECDSA SHA-256 signature (base64) of the patch file */
     signature?: string;
     /** RSA/ECDSA SHA-256 signature (base64) of the resulting bundle */
     bundleSignature?: string;
     /** URL to the asset manifest JSON for this version */
     assetManifestUrl?: string;
+    /** SHA-256 of the asset manifest file (covered by entrySignature) */
+    assetManifestHash?: string;
+    /** Signature (base64) of entryPayload(entry): required when a public key is set */
+    entrySignature?: string;
     /** Target platform for this patch */
     platform?: string;
     /** Flavor/channel for this patch */
     flavor?: string;
+    /** How fullBundleUrl is compressed ('gzip' | 'bz2'); absent = raw .hbc */
+    fullBundleCompression?: string;
+    /** Native runtime fingerprint the bundle was built against: installs only on a matching binary */
+    runtimeFingerprint?: string;
+    /** Hermes bytecode version of the bundle: installs only on a runtime that reads it */
+    hermesBytecodeVersion?: number;
+    /** Client features this entry needs; a client missing one skips the entry */
+    requires?: string[];
+    /** Kill switch: no client installs this version */
+    disabled?: boolean;
+    /** Staged rollout: share of installs (0-100) that get this version, by a stable per-install bucket */
+    rolloutPercent?: number;
+    /** QA: only these install IDs (useOta().installId) get this version */
+    allowInstallIds?: string[];
+    /** Apply as soon as it's ready instead of on the next launch (BACKGROUND_DOWNLOAD) */
+    mandatory?: boolean;
 };
 /**
  * A single content-addressed asset from the OTA asset store.
@@ -89,6 +111,8 @@ export type OtaMetrics = {
 export type OtaNetworkStrategy = {
     retry?: number;
     timeoutMs?: number;
+    /** Automatic downloads only on Wi-Fi/Ethernet (manual applyUpdate always downloads) */
+    wifiOnly?: boolean;
 };
 export type OtaConfig = {
     /** Current app versionName (e.g. "1.0.0"). If omitted, auto-detected from native app. */
@@ -106,8 +130,22 @@ export type OtaConfig = {
     /** Telemetry: structured event callback for analytics */
     onEvent?: OtaEventCallback;
     /**
-     * SPKI public key (PEM or base64) for RSA/ECDSA signature verification.
-     * When set, patches and bundles without a valid signature are rejected.
+     * POSTs every OTA event as JSON to `url` (fire-and-forget), with installId, platform,
+     * appVersion, appBuild, runtimeFingerprint, flavor and the running OTA version attached.
+     */
+    telemetry?: {
+        url: string;
+        headers?: Record<string, string>;
+    };
+    /**
+     * Minimum time between automatic update checks (app start / foreground / checkUpdate()).
+     * checkUpdate({ force: true }) ignores it. Default 10 minutes.
+     */
+    minCheckIntervalMs?: number;
+    /**
+     * SPKI public key(s), PEM or base64 (comma-separated for several), for RSA/ECDSA
+     * signature verification. Defaults to the keys `patch` embedded in the app.
+     * When there is a key, unsigned or wrongly signed updates are rejected.
      */
     publicKey?: string;
     /**
@@ -116,12 +154,14 @@ export type OtaConfig = {
      * Read-only and public: never put upload credentials here, they ship inside the app.
      */
     customServer?: {
-        /** e.g. https://raw.githubusercontent.com/<owner>/<repo>/<branch> */
+        /** R2 public URL, e.g. https://pub-<id>.r2.dev or a custom domain */
         baseUrl: string;
         channel: string;
         baseFolder?: string;
+        /** Extra headers on every request (registry, bundles, assets), e.g. auth for a private server */
+        headers?: Record<string, string>;
     };
-    /** Storage provider instance (optional, defaults to GitHubRawStorageProvider) */
+    /** Storage provider instance (optional, defaults to R2StorageProvider) */
     storage?: OtaStorageProvider;
 };
 export declare enum OtaStatus {
@@ -146,12 +186,19 @@ export type OtaState = {
     metrics: OtaMetrics | null;
     /** True if a background update has been downloaded and prepared silently */
     isUpdateReady: boolean;
+    /** The ready update is marked mandatory: it reloads as soon as the app is in the foreground */
+    isMandatory: boolean;
+    /** Stable random ID of this install (rollout bucket, QA allow-lists, telemetry) */
+    installId: string;
     applyUpdate: () => Promise<void>;
     /** Installs and reloads `version` from the last checked manifest (full bundle, or a patch from the current version) */
     applyVersion: (version: number) => Promise<void>;
     resetToFactory: () => Promise<void>;
     markAsHealthy: () => Promise<void>;
-    checkUpdate: () => Promise<void>;
+    /** Checks now unless the last check was under minCheckIntervalMs ago (force: always) */
+    checkUpdate: (options?: {
+        force?: boolean;
+    }) => Promise<void>;
     /** Reload the React Native JS bundle immediately to apply downloaded update */
     reloadBundle: () => void;
 };

package/lib/typescript/ota/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/ota/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD,MAAM,WAAW,kBAAkB;IAC/B;;OAEG;IACH,aAAa,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;IAEtD;;OAEG;IACH,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAEvE;;OAEG;IACH,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAC9E;AAED,oBAAY,aAAa;IACrB,MAAM,WAAW;IACjB,YAAY,iBAAiB;IAC7B,iBAAiB,sBAAsB;IACvC,mBAAmB,wBAAwB;CAC9C;AAED,MAAM,MAAM,QAAQ,GAAG;IACnB,oCAAoC;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,uCAAuC;IACvC,KAAK,EAAE,MAAM,CAAC;IACd,wCAAwC;IACxC,UAAU,EAAE,MAAM,CAAC;IACnB,2FAA2F;IAC3F,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,qDAAqD;IACrD,WAAW,EAAE,MAAM,CAAC;IACpB,qCAAqC;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,qDAAqD;IACrD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,wCAAwC;IACxC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,mDAAmD;IACnD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,2FAA2F;IAC3F,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,6DAA6D;IAC7D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mEAAmE;IACnE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,sDAAsD;IACtD,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,qCAAqC;IACrC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oCAAoC;IACpC,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,QAAQ,GAAG;IACnB,kEAAkE;IAClE,IAAI,EAAE,MAAM,CAAC;IACb,qDAAqD;IACrD,GAAG,EAAE,MAAM,CAAC;IACZ,4FAA4F;IAC5F,YAAY,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,oBAAoB,EAAE,OAAO,CAAC;IAC9B,yGAAyG;IACzG,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,2EAA2E;IAC3E,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,oGAAoG;IACpG,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,oGAAoG;IACpG,cAAc,CAAC,EAAE,MAAM,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG;IACpB,yFAAyF;IACzF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,qDAAqD;IACrD,cAAc,EAAE,MAAM,CAAC;IACvB;;;OAGG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAE5B,gCAAgC;IAChC,UAAU,CAAC,EAAE,aAAa,CAAC;IAC3B,OAAO,CAAC,EAAE,kBAAkB,CAAC;IAE7B,yDAAyD;IACzD,OAAO,CAAC,EAAE,gBAAgB,CAAC;IAC3B;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB;;;;OAIG;IACH,YAAY,CAAC,EAAE;QACX,qEAAqE;QACrE,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,CAAC,EAAE,MAAM,CAAC;KACvB,CAAC;IAEF,iFAAiF;IACjF,OAAO,CAAC,EAAE,kBAAkB,CAAC;CAChC,CAAC;AAEF,oBAAY,SAAS;IACjB,IAAI,SAAS;IACb,QAAQ,aAAa;IACrB,gBAAgB,qBAAqB;IACrC,UAAU,eAAe;IACzB,WAAW,gBAAgB;IAC3B,QAAQ,aAAa;IACrB,cAAc,mBAAmB;IACjC,OAAO,YAAY;IACnB,KAAK,UAAU;CAClB;AAED,MAAM,MAAM,QAAQ,GAAG;IACnB,MAAM,EAAE,SAAS,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,OAAO,CAAC;IACpB,OAAO,EAAE,UAAU,GAAG,IAAI,CAAC;IAC3B,4EAA4E;IAC5E,aAAa,EAAE,OAAO,CAAC;IACvB,WAAW,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACjC,uHAAuH;IACvH,YAAY,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACjD,cAAc,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACpC,aAAa,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,WAAW,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACjC,+EAA+E;IAC/E,YAAY,EAAE,MAAM,IAAI,CAAC;CAC5B,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/ota/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD,MAAM,WAAW,kBAAkB;IAC/B;;OAEG;IACH,aAAa,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;IAEtD;;OAEG;IACH,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAEvE;;OAEG;IACH,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAC9E;AAED,oBAAY,aAAa;IACrB,MAAM,WAAW;IACjB,YAAY,iBAAiB;IAC7B,iBAAiB,sBAAsB;IACvC,mBAAmB,wBAAwB;CAC9C;AAED,MAAM,MAAM,QAAQ,GAAG;IACnB,oCAAoC;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,uCAAuC;IACvC,KAAK,EAAE,MAAM,CAAC;IACd,wCAAwC;IACxC,UAAU,EAAE,MAAM,CAAC;IACnB,2FAA2F;IAC3F,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,qDAAqD;IACrD,WAAW,EAAE,MAAM,CAAC;IACpB,qCAAqC;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,qDAAqD;IACrD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,wCAAwC;IACxC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,mDAAmD;IACnD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,2FAA2F;IAC3F,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,0FAA0F;IAC1F,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,6DAA6D;IAC7D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mEAAmE;IACnE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,sDAAsD;IACtD,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,qEAAqE;IACrE,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,mFAAmF;IACnF,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,qCAAqC;IACrC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oCAAoC;IACpC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,0EAA0E;IAC1E,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,kGAAkG;IAClG,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,sFAAsF;IACtF,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IAGpB,mDAAmD;IACnD,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,sGAAsG;IACtG,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,uEAAuE;IACvE,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,sFAAsF;IACtF,SAAS,CAAC,EAAE,OAAO,CAAC;CACvB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,QAAQ,GAAG;IACnB,kEAAkE;IAClE,IAAI,EAAE,MAAM,CAAC;IACb,qDAAqD;IACrD,GAAG,EAAE,MAAM,CAAC;IACZ,4FAA4F;IAC5F,YAAY,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,oBAAoB,EAAE,OAAO,CAAC;IAC9B,yGAAyG;IACzG,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,2EAA2E;IAC3E,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,oGAAoG;IACpG,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,oGAAoG;IACpG,cAAc,CAAC,EAAE,MAAM,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,uFAAuF;IACvF,QAAQ,CAAC,EAAE,OAAO,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG;IACpB,yFAAyF;IACzF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,qDAAqD;IACrD,cAAc,EAAE,MAAM,CAAC;IACvB;;;OAGG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAE5B,gCAAgC;IAChC,UAAU,CAAC,EAAE,aAAa,CAAC;IAC3B,OAAO,CAAC,EAAE,kBAAkB,CAAC;IAE7B,yDAAyD;IACzD,OAAO,CAAC,EAAE,gBAAgB,CAAC;IAC3B;;;OAGG;IACH,SAAS,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,CAAC;IAC9D;;;OAGG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB;;;;OAIG;IACH,YAAY,CAAC,EAAE;QACX,qEAAqE;QACrE,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,iGAAiG;QACjG,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;KACpC,CAAC;IAEF,0EAA0E;IAC1E,OAAO,CAAC,EAAE,kBAAkB,CAAC;CAChC,CAAC;AAEF,oBAAY,SAAS;IACjB,IAAI,SAAS;IACb,QAAQ,aAAa;IACrB,gBAAgB,qBAAqB;IACrC,UAAU,eAAe;IACzB,WAAW,gBAAgB;IAC3B,QAAQ,aAAa;IACrB,cAAc,mBAAmB;IACjC,OAAO,YAAY;IACnB,KAAK,UAAU;CAClB;AAED,MAAM,MAAM,QAAQ,GAAG;IACnB,MAAM,EAAE,SAAS,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,OAAO,CAAC;IACpB,OAAO,EAAE,UAAU,GAAG,IAAI,CAAC;IAC3B,4EAA4E;IAC5E,aAAa,EAAE,OAAO,CAAC;IACvB,+FAA+F;IAC/F,WAAW,EAAE,OAAO,CAAC;IACrB,mFAAmF;IACnF,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACjC,uHAAuH;IACvH,YAAY,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACjD,cAAc,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACpC,aAAa,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,wFAAwF;IACxF,WAAW,EAAE,CAAC,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9D,+EAA+E;IAC/E,YAAY,EAAE,MAAM,IAAI,CAAC;CAC5B,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "react-native-bspatch",
-  "version": "4.1.0",
+  "version": "5.0.0",
   "description": "Premium OTA Update Solution for React Native using TurboModules and bsdiff",
   "main": "lib/commonjs/index.js",
   "module": "lib/module/index.js",
@@ -62,7 +62,8 @@
     "bump-version": "node ./tools/bump_version.js",
     "generate-keys": "node ./tools/generate_keys.js",
     "typecheck": "tsc --noEmit",
-    "prepare": "bob build"
+    "prepare": "bob build",
+    "test": "node tools/__tests__/entry_signature.test.js && node tools/__tests__/signing_key.test.js && node tools/__tests__/eligibility.test.js"
   },
   "devDependencies": {
     "@types/react": "^19.2.0",

package/react-native-bspatch.podspec

@@ -18,7 +18,9 @@ Pod::Spec.new do |s|
   s.exclude_files = "cpp/bspatch_jni.cpp", "cpp/bzip2/**"
   s.public_header_files = 'ios/**/*.h'
 
-  s.library = 'bz2'
+  # bz2: bspatch + decompressFile, z: decompressFile gzip, Network: getNetworkType
+  s.libraries = 'bz2', 'z'
+  s.frameworks = 'Network'
 
   s.pod_target_xcconfig = {
     'OTHER_CFLAGS' => '$(inherited) -O3 -flto'

package/src/NativeBsPatch.ts

@@ -5,7 +5,7 @@ export type DownloadProgress = {
   /** destPath passed to downloadFile */
   path: string;
   received: number;
-  /** -1 when the server sends no Content-Length */
+  /** -1 when unknown: no Content-Length, or a Content-Encoding (received counts decoded bytes) */
   total: number;
 };
 
@@ -60,13 +60,45 @@ export interface Spec extends TurboModule {
   /** Directory the native resolver reads `ota/` from (filesDir on Android, Documents on iOS) */
   getDocumentDir(): string;
 
+  /**
+   * Public keys the CLI embedded in the app, comma-separated base64 SPKI (primary first,
+   * then the offline backup): Info.plist `BsPatchPublicKey` / Android string
+   * `bspatch_public_key`. '' when none.
+   */
+  getEmbeddedPublicKeys(): string;
+
+  /** Build number: versionCode (Android) / CFBundleVersion (iOS) */
+  getAppBuild(): string;
+
+  /**
+   * Native runtime fingerprint stamped into this binary at build time (Info.plist
+   * `BsPatchRuntimeFingerprint` / Android resValue `bspatch_runtime_fingerprint`);
+   * '' when the build hook didn't run. An OTA only installs on a matching binary.
+   */
+  getRuntimeFingerprint(): string;
+
+  /** Free bytes on the volume holding getDocumentDir() */
+  getFreeDiskSpace(): Promise<number>;
+
+  /** Current connection: 'wifi' | 'cellular' | 'ethernet' | 'none' | 'unknown' */
+  getNetworkType(): Promise<string>;
+
+  /**
+   * Decompresses srcPath into destPath (replacing it). format: 'gzip' | 'bz2'.
+   * Rejects on unknown format or corrupt input; destPath is removed on failure.
+   */
+  decompressFile(srcPath: string, destPath: string, format: string): Promise<void>;
+
   /**
    * Streams `url` to `destPath` (via `destPath.part`, renamed only on a 2xx response,
    * replacing any existing file). Rejects on network error or non-2xx status.
+   * A failed download of the same destPath is resumed (HTTP Range) on the next call
+   * when the server supports it; otherwise it restarts from zero.
    * @param timeoutMs Idle timeout: no bytes for this long fails the download
+   * @param headersJson Extra request headers as a JSON object string ('{}' for none)
    * @returns Size of the downloaded file in bytes
    */
-  downloadFile(url: string, destPath: string, timeoutMs: number): Promise<number>;
+  downloadFile(url: string, destPath: string, timeoutMs: number, headersJson: string): Promise<number>;
 
   /** Lowercase hex SHA-256 of a file */
   hashFile(path: string): Promise<string>;

package/src/index.ts

@@ -20,7 +20,11 @@ export * from './ota/otaLogger';
 export * from './ota/OtaProvider';
 export * from './ota/types';
 
-export { GitHubRawStorageProvider } from './ota/storage/GitHubRawStorage';
+export {
+  R2StorageProvider,
+  /** @deprecated Renamed to R2StorageProvider */
+  R2StorageProvider as GitHubRawStorageProvider,
+} from './ota/storage/R2Storage';
 
 export default {
   applyPatch,

package/src/ota/OtaProvider.tsx

@@ -17,8 +17,10 @@ import {
   View,
 } from 'react-native';
 import NativeBsPatch from '../NativeBsPatch';
+import { ineligibleReason } from './eligibility';
+import { getInstallId } from './installId';
 import { applyOtaPatchInternal, fetchOtaManifest, selectUpdate, validateOtaConfig } from './otaCore';
-import { createOtaLogger, OtaEvent } from './otaLogger';
+import { createOtaLogger, OtaEvent, type OtaLogEntry } from './otaLogger';
 import { DOCUMENT_DIR, loadMetadata, markHealthy, OTA_DIR } from './otaMetadata';
 import {
   OtaConfig,
@@ -31,6 +33,23 @@ import {
 
 const OtaContext = createContext<OtaState | undefined>(undefined);
 
+const DEFAULT_MIN_CHECK_INTERVAL_MS = 10 * 60 * 1000;
+
+/** Sync native getter, '' if it throws */
+const nativeString = (get: () => string): string => {
+  try {
+    return get() ?? '';
+  } catch {
+    return '';
+  }
+};
+
+/** Bytecode version the running Hermes reads (undefined off Hermes) */
+const hermesBytecodeVersion = (): number | undefined => {
+  const v = (globalThis as any).HermesInternal?.getRuntimeProperties?.()?.['Bytecode Version'];
+  return v ? Number(v) : undefined;
+};
+
 export function OtaProvider({
   children,
   config,
@@ -58,6 +77,8 @@ export function OtaProvider({
   const [patches, setPatches] = useState<OtaPatch[]>([]);
   const [isInitialized, setIsInitialized] = useState<boolean>(false);
   const [isUpdateReady, setIsUpdateReady] = useState<boolean>(false);
+  const [isMandatory, setIsMandatory] = useState<boolean>(false);
+  const [installId, setInstallId] = useState<string>('');
 
   const appState = useRef(AppState.currentState);
   const isCheckingRef = useRef(false);
@@ -65,6 +86,9 @@ export function OtaProvider({
   /** Version the native resolver loaded for this JS session */
   const runningVersionRef = useRef(config.baseAppVersion);
   const progressRef = useRef(0);
+  const lastCheckRef = useRef(0);
+  const appVersionRef = useRef(config.appVersion ?? '');
+  const installIdRef = useRef('');
   const isDebugUpdateEnabled = !__DEV__ || config.allowDebugUpdates === true;
 
   // No fallbacks: a missing env value disables OTA instead of silently pointing elsewhere.
@@ -85,21 +109,46 @@ export function OtaProvider({
     setProgress(nextProgress);
   }, []);
 
+  /** config.onEvent, plus a fire-and-forget POST to config.telemetry.url */
+  const onEvent = useCallback((entry: OtaLogEntry) => {
+    config.onEvent?.(entry);
+    const telemetry = config.telemetry;
+    if (!telemetry) return;
+    fetch(telemetry.url, {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json', ...telemetry.headers },
+      body: JSON.stringify({
+        ...entry,
+        installId: installIdRef.current,
+        platform: Platform.OS,
+        appVersion: appVersionRef.current,
+        appBuild: nativeString(() => NativeBsPatch.getAppBuild()),
+        runtimeFingerprint: nativeString(() => NativeBsPatch.getRuntimeFingerprint()),
+        flavor: config.customServer?.channel,
+        otaVersion: runningVersionRef.current,
+      }),
+    }).catch(() => {});
+  }, [config]);
+
   const getEffectiveConfig = useCallback(async (): Promise<OtaConfig> => {
-    if (config.appVersion) return config;
+    // The keys `patch` embedded in the app (primary + backup), unless the app passes its own
+    const publicKey = config.publicKey || nativeString(() => NativeBsPatch.getEmbeddedPublicKeys()) || undefined;
+    const base = { ...config, publicKey, onEvent };
+    if (config.appVersion) return base;
     try {
       const nativeVer = await NativeBsPatch.getAppVersion();
       if (!nativeVer) {
         throw new Error('Native appVersion is empty');
       }
-      return { ...config, appVersion: nativeVer };
+      appVersionRef.current = nativeVer;
+      return { ...base, appVersion: nativeVer };
     } catch (e) {
       throw new Error(
         `[OtaProvider] Failed to auto-detect appVersion from native: ${(e as Error).message}. ` +
         `Please set versionName (Android) / CFBundleShortVersionString (iOS), or provide config.appVersion explicitly.`
       );
     }
-  }, [config]);
+  }, [config, onEvent]);
 
   /**
    * Core apply update logic — separated so it can be mapped to button clicks
@@ -184,6 +233,12 @@ export function OtaProvider({
               setStatus(OtaStatus.UP_TO_DATE);
               setMessage(`Update V${targetV} ready for next launch`);
               if (m) setMetrics(m);
+              if (directPatch.mandatory) {
+                setIsMandatory(true);
+                // Only in the foreground: a reload in the background is rolled back (see the
+                // AppState effect); the effect reloads once the app comes back
+                if (AppState.currentState === 'active') NativeBsPatch.reloadBundle();
+              }
             }
           },
           () => {}, // silent: background doesn't spam progress
@@ -201,8 +256,9 @@ export function OtaProvider({
   /**
    * Check for updates from the manifest.
    * Uses a ref to guard against concurrent calls (avoids stale closure).
+   * Automatic calls are throttled by minCheckIntervalMs; { force: true } always checks.
    */
-  const checkUpdates = useCallback(async () => {
+  const checkUpdates = useCallback(async (options?: { force?: boolean }) => {
     if (isCheckingRef.current || configError) return;
     if (!isDebugUpdateEnabled) {
       setPendingCount(0);
@@ -211,6 +267,9 @@ export function OtaProvider({
       setMessage('OTA updates are disabled while running a debug build.');
       return;
     }
+    const minInterval = config.minCheckIntervalMs ?? DEFAULT_MIN_CHECK_INTERVAL_MS;
+    if (!options?.force && Date.now() - lastCheckRef.current < minInterval) return;
+    lastCheckRef.current = Date.now();
     isCheckingRef.current = true;
     setIsChecking(true);
     setStatus(OtaStatus.CHECKING);
@@ -223,14 +282,22 @@ export function OtaProvider({
       const metadata = await loadMetadata(config.baseAppVersion);
       const localV = metadata.currentVersion;
 
-      // The one platform filter (storage providers return every platform).
-      // Also skips versions that crashed on boot and were rolled back natively.
-      const failed = metadata.failedVersions ?? [];
-      const platformPatches = remotePatches.filter(
-        p =>
-          (!p.platform || p.platform.toLowerCase() === Platform.OS) &&
-          !failed.includes(p.toVersion),
-      );
+      // Storage providers return every platform: keep what this install may take (platform,
+      // native fingerprint, Hermes, rollout/QA lists, kill switch, versions that crashed here)
+      const context = {
+        platform: Platform.OS,
+        failedVersions: metadata.failedVersions ?? [],
+        runtimeFingerprint: nativeString(() => NativeBsPatch.getRuntimeFingerprint()),
+        hermesBytecodeVersion: hermesBytecodeVersion(),
+        installId: await getInstallId(),
+      };
+      const platformPatches = remotePatches.filter(p => {
+        const reason = ineligibleReason(p, context);
+        if (reason && __DEV__ && p.toVersion > localV) {
+          console.log(`[OtaProvider] Skipping V${p.toVersion} (${p.id}): ${reason}`);
+        }
+        return !reason;
+      });
 
       const maxV =
         platformPatches.length > 0
@@ -247,7 +314,12 @@ export function OtaProvider({
         setStatus(OtaStatus.UPDATE_AVAILABLE);
 
         // Trigger behaviors based on mode
-        if (config.updateMode === OtaUpdateMode.BACKGROUND_DOWNLOAD) {
+        const network = config.network?.wifiOnly
+          ? await NativeBsPatch.getNetworkType().catch(() => 'unknown')
+          : 'wifi';
+        if (network !== 'wifi' && network !== 'ethernet') {
+          setMessage(`Update available: V${localV} → V${maxV} (waiting for Wi-Fi)`);
+        } else if (config.updateMode === OtaUpdateMode.BACKGROUND_DOWNLOAD) {
           downloadBackgroundUpdate(platformPatches, localV, maxV);
         } else if (
           config.updateMode === OtaUpdateMode.ON_APP_START ||
@@ -283,6 +355,11 @@ export function OtaProvider({
    */
   useEffect(() => {
     const bootstrap = async () => {
+      getInstallId().then(id => {
+        installIdRef.current = id;
+        setInstallId(id);
+      }).catch(() => {});
+
       // Clean up any pending trash directories from previous resets (non-blocking)
       NativeBsPatch.readDir(DOCUMENT_DIR).then(dirs => {
         for (const dir of dirs) {
@@ -320,20 +397,26 @@ export function OtaProvider({
       }
     };
 
-    bootstrap().then(() => setIsInitialized(true)).catch(() => {
-      // Bootstrap failed: keep UI blocked so user sees the error state.
-      // setIsInitialized stays false → isBlocking remains true → the error
-      // message is shown via loadingView instead of a silent blank screen.
-    });
+    // OTA must never take the app down: if bootstrap fails, render the app with OTA idle
+    bootstrap()
+      .catch(error => {
+        console.warn('[OtaProvider] Bootstrap failed, OTA disabled for this session:', error);
+        setMessage(`OTA disabled: ${(error as Error).message}`);
+        setStatus(OtaStatus.ERROR);
+      })
+      .finally(() => setIsInitialized(true));
     // eslint-disable-next-line react-hooks/exhaustive-deps
   }, []);
 
   /**
-   * AppState listener for ON_APP_FOREGROUND mode.
+   * AppState listener for ON_APP_FOREGROUND mode, and for a mandatory update that got
+   * ready while in the background.
    * A downloaded update is not reloaded on background: iOS suspends JS before the
    * first render, so the native resolver counts the launch as failed and rolls it back.
    * metadata already points at the new version, so the next cold start applies it
    */
+  const isMandatoryRef = useRef(false);
+  isMandatoryRef.current = isMandatory && isUpdateReady;
   useEffect(() => {
     const subscription = AppState.addEventListener(
       'change',
@@ -343,6 +426,10 @@ export function OtaProvider({
           nextAppState === 'active' &&
           bootstrapDone.current
         ) {
+          if (isMandatoryRef.current) {
+            NativeBsPatch.reloadBundle();
+            return;
+          }
           const mode = config.updateMode ?? OtaUpdateMode.MANUAL;
           if (mode === OtaUpdateMode.ON_APP_FOREGROUND) {
             checkUpdates();
@@ -358,14 +445,14 @@ export function OtaProvider({
   }, [config.updateMode, checkUpdates]);
 
   const markAsHealthy = useCallback(async () => {
-    const log = createOtaLogger(config.onEvent);
+    const log = createOtaLogger(onEvent);
     log.emit(OtaEvent.MARK_HEALTHY);
     const appVersion = await NativeBsPatch.getAppVersion().catch(() => config.appVersion);
     await markHealthy(config.baseAppVersion, runningVersionRef.current, appVersion);
-  }, [config]);
+  }, [config, onEvent]);
 
   const resetToFactory = useCallback(async () => {
-    const log = createOtaLogger(config.onEvent);
+    const log = createOtaLogger(onEvent);
     try {
       setStatus(OtaStatus.APPLYING);
       setMessage('Executing system wipe...');
@@ -381,7 +468,7 @@ export function OtaProvider({
       setStatus(OtaStatus.ERROR);
       setMessage(`Reset failed: ${(error as Error).message}`);
     }
-  }, [config]);
+  }, [onEvent]);
 
   // Memoized: consumers re-render only when something they can see changes
   const value = useMemo<OtaState>(() => ({
@@ -394,6 +481,8 @@ export function OtaProvider({
     isChecking,
     metrics,
     isUpdateReady,
+    isMandatory,
+    installId,
     applyUpdate,
     applyVersion,
     resetToFactory,
@@ -410,6 +499,8 @@ export function OtaProvider({
     isChecking,
     metrics,
     isUpdateReady,
+    isMandatory,
+    installId,
     applyUpdate,
     applyVersion,
     resetToFactory,

package/src/ota/eligibility.ts

@@ -0,0 +1,48 @@
+import type { OtaPatch } from './types';
+
+/** Entry `requires` values this client understands */
+export const SUPPORTED_FEATURES = ['gzip', 'bz2'];
+
+export type EligibilityContext = {
+    /** Platform.OS */
+    platform: string;
+    /** Versions that crashed on boot here and were rolled back */
+    failedVersions: number[];
+    /** Fingerprint stamped into this binary ('' when the build hook didn't run) */
+    runtimeFingerprint: string;
+    /** Bytecode version of the running Hermes (undefined off Hermes) */
+    hermesBytecodeVersion?: number;
+    installId: string;
+};
+
+/** FNV-1a: stable 0-99 bucket for an install and version (a different slice of installs per version) */
+export const rolloutBucket = (installId: string, version: number): number => {
+    let h = 0x811c9dc5;
+    for (const c of `${installId}:${version}`) {
+        h ^= c.charCodeAt(0);
+        h = Math.imul(h, 0x01000193) >>> 0;
+    }
+    return h % 100;
+};
+
+/** Why this client must not install the entry, or null when it may */
+export const ineligibleReason = (e: OtaPatch, ctx: EligibilityContext): string | null => {
+    if (e.platform && e.platform.toLowerCase() !== ctx.platform) return 'other platform';
+    if (ctx.failedVersions.includes(e.toVersion)) return 'crashed on boot here before';
+    if (e.disabled) return 'disabled';
+    const missing = (e.requires ?? []).filter(f => !SUPPORTED_FEATURES.includes(f));
+    if (missing.length) return `needs a newer client (${missing.join(', ')})`;
+    if (e.runtimeFingerprint && e.runtimeFingerprint !== ctx.runtimeFingerprint) {
+        return ctx.runtimeFingerprint
+            ? 'built for different native code (needs a store build)'
+            : 'this binary has no runtime fingerprint (run `react-native-bspatch setup` and rebuild)';
+    }
+    if (e.hermesBytecodeVersion && ctx.hermesBytecodeVersion && e.hermesBytecodeVersion !== ctx.hermesBytecodeVersion) {
+        return `Hermes bytecode ${e.hermesBytecodeVersion}, runtime reads ${ctx.hermesBytecodeVersion}`;
+    }
+    if (e.allowInstallIds?.length && !e.allowInstallIds.includes(ctx.installId)) return 'not in the QA list';
+    if (e.rolloutPercent !== undefined && rolloutBucket(ctx.installId, e.toVersion) >= e.rolloutPercent) {
+        return `outside the ${e.rolloutPercent}% rollout`;
+    }
+    return null;
+};

package/src/ota/entrySignature.ts

@@ -0,0 +1,31 @@
+import type { OtaPatch } from './types';
+
+/**
+ * What `entrySignature` signs: the fields that decide which bundle a client installs.
+ * Must stay byte-for-byte equal to entryPayload in tools/update_registry.js.
+ */
+export const entryPayload = (p: OtaPatch): string =>
+    [
+        'bspatch-entry-v2',
+        p.appVersion,
+        p.flavor ?? '',
+        p.platform ?? '',
+        p.fromVersion,
+        p.toVersion,
+        p.bundleHash ?? '',
+        p.assetManifestHash ?? '',
+        p.minAppVersion ?? '',
+        p.runtimeFingerprint ?? '',
+        p.hermesBytecodeVersion ?? '',
+    ].join('\n');
+
+/** Public keys from config or the embedded list: PEM blocks, or base64 SPKI separated by commas/whitespace */
+export const parsePublicKeys = (keys: string | undefined): string[] => {
+    if (!keys) return [];
+    if (keys.includes('-----BEGIN')) {
+        return (keys.match(/-----BEGIN PUBLIC KEY-----[\s\S]*?-----END PUBLIC KEY-----/g) ?? []).map(block =>
+            block.replace(/-----[A-Z ]+-----|\s+/g, ''),
+        );
+    }
+    return keys.split(/[\s,]+/).filter(Boolean);
+};

package/src/ota/installId.ts

@@ -0,0 +1,18 @@
+import NativeBsPatch from '../NativeBsPatch';
+import { DOCUMENT_DIR } from './otaMetadata';
+
+// Outside ota/: resetToFactory and native rollbacks keep it
+const INSTALL_ID_PATH = `${DOCUMENT_DIR}/bspatch-install-id`;
+let installId: Promise<string> | undefined;
+
+/** Random ID made on first use and kept for the life of the install (rollout bucket, QA lists, telemetry) */
+export const getInstallId = (): Promise<string> =>
+    (installId ??= (async () => {
+        try {
+            const saved = (await NativeBsPatch.readFile(INSTALL_ID_PATH)).trim();
+            if (/^[0-9a-f]{32}$/.test(saved)) return saved;
+        } catch {}
+        const id = Array.from({ length: 32 }, () => Math.floor(Math.random() * 16).toString(16)).join('');
+        await NativeBsPatch.writeFile(INSTALL_ID_PATH, id).catch(() => {});
+        return id;
+    })());