react-native-bspatch 4.1.0 → 5.0.1

package/ios/RNBsPatch.mm

@@ -1,9 +1,11 @@
 #import <Foundation/Foundation.h>
+#import <Network/Network.h>
 #import <QuartzCore/QuartzCore.h>
 #import <CommonCrypto/CommonDigest.h>
 #import <Security/Security.h>
 #import <React/RCTLog.h>
 #import <React/RCTReloadCommand.h>
+#include <zlib.h>
 
 #if __has_include(<react_native_bspatch/react_native_bspatch-Swift.h>)
 #import <react_native_bspatch/react_native_bspatch-Swift.h>
@@ -29,6 +31,8 @@ extern "C" {
 /** One download: streams to a system temp file, moved to destPath only on a 2xx response. */
 @interface RNBsPatchDownload : NSObject <NSURLSessionDownloadDelegate>
 @property (nonatomic, copy) NSString *destPath;
+/** Where a failed attempt leaves NSURLSession resume data for the next call */
+@property (nonatomic, copy) NSString *resumePath;
 @property (nonatomic, copy) RCTPromiseResolveBlock resolve;
 @property (nonatomic, copy) RCTPromiseRejectBlock reject;
 @property (nonatomic, copy) void (^onProgress)(int64_t received, int64_t total);
@@ -48,6 +52,10 @@ totalBytesExpectedToWrite:(int64_t)expected
     CFTimeInterval now = CACurrentMediaTime();
     if (now - self.lastEmit < 0.25) return;
     self.lastEmit = now;
+    // written counts decoded bytes, expected the Content-Length on the wire: with a
+    // Content-Encoding they don't compare, so report the total as unknown like Android
+    NSString *encoding = [(NSHTTPURLResponse *)task.response valueForHTTPHeaderField:@"Content-Encoding"];
+    if (encoding.length > 0 && ![encoding isEqualToString:@"identity"]) expected = -1;
     self.onProgress(written, expected); // expected is -1 without a Content-Length
 }
 
@@ -79,6 +87,10 @@ didFinishDownloadingToURL:(NSURL *)location
 - (void)URLSession:(NSURLSession *)session task:(NSURLSessionTask *)task didCompleteWithError:(NSError *)error
 {
     NSError *e = error ?: self.error;
+    NSData *resumeData = error.userInfo[NSURLSessionDownloadTaskResumeData];
+    if (resumeData) {
+        [resumeData writeToFile:self.resumePath atomically:YES];
+    }
     if (e) {
         self.reject(@"ERR_DOWNLOAD", e.localizedDescription, e);
     } else {
@@ -109,6 +121,32 @@ static NSData *RNBsPatchSHA256(NSString *path)
     return [NSData dataWithBytes:digest length:sizeof(digest)];
 }
 
+/** Gunzips src into dst; NO on unreadable, non-gzip or truncated input. */
+static BOOL RNBsPatchGunzip(NSString *src, NSString *dst)
+{
+    gzFile in = gzopen(src.fileSystemRepresentation, "rb");
+    if (!in) return NO;
+    FILE *out = fopen(dst.fileSystemRepresentation, "wb");
+    if (!out) {
+        gzclose(in);
+        return NO;
+    }
+    char buffer[65536];
+    int n;
+    BOOL ok = YES;
+    while ((n = gzread(in, buffer, sizeof(buffer))) > 0) {
+        // gzdirect: zlib copies non-gzip input through as-is
+        if (gzdirect(in) || fwrite(buffer, 1, n, out) != (size_t)n) {
+            ok = NO;
+            break;
+        }
+    }
+    if (n < 0) ok = NO;
+    if (gzclose_r(in) != Z_OK) ok = NO; // Z_BUF_ERROR: input ended mid-stream
+    if (fclose(out) != 0) ok = NO;
+    return ok;
+}
+
 /** Runs block off the JS thread: resolves *result, or rejects with *error when it returns NO. */
 static void RNBsPatchIO(RCTPromiseResolveBlock resolve, RCTPromiseRejectBlock reject, BOOL (^block)(id *result, NSError **error))
 {
@@ -152,6 +190,34 @@ RCT_EXPORT_METHOD(applyPatch:(NSString *)oldPath
     });
 }
 
+RCT_EXPORT_METHOD(decompressFile:(NSString *)srcPath
+                  destPath:(NSString *)destPath
+                  format:(NSString *)format
+                  resolve:(RCTPromiseResolveBlock)resolve
+                  reject:(RCTPromiseRejectBlock)reject)
+{
+    RNBsPatchIO(resolve, reject, ^BOOL(id *result, NSError **error) {
+        NSString *part = [destPath stringByAppendingString:@".part"];
+        BOOL ok;
+        if ([format isEqualToString:@"gzip"]) {
+            ok = RNBsPatchGunzip(srcPath, part);
+        } else if ([format isEqualToString:@"bz2"]) {
+            ok = decompress_bz2(srcPath.fileSystemRepresentation, part.fileSystemRepresentation) == 0;
+        } else {
+            *error = [NSError errorWithDomain:@"RNBsPatch" code:1 userInfo:@{NSLocalizedDescriptionKey: [@"Unknown compression format: " stringByAppendingString:format]}];
+            return NO;
+        }
+        if (ok) ok = rename(part.fileSystemRepresentation, destPath.fileSystemRepresentation) == 0;
+        if (!ok) {
+            NSFileManager *fm = NSFileManager.defaultManager;
+            [fm removeItemAtPath:part error:nil];
+            [fm removeItemAtPath:destPath error:nil];
+            *error = [NSError errorWithDomain:@"RNBsPatch" code:2 userInfo:@{NSLocalizedDescriptionKey: [NSString stringWithFormat:@"Corrupt or unreadable %@ file: %@", format, srcPath]}];
+        }
+        return ok;
+    });
+}
+
 RCT_EXPORT_METHOD(reloadBundle)
 {
     dispatch_async(dispatch_get_main_queue(), ^{
@@ -288,9 +354,69 @@ RCT_EXPORT_METHOD(getAppVersion:(RCTPromiseResolveBlock)resolve
     return NSSearchPathForDirectoriesInDomains(NSDocumentDirectory, NSUserDomainMask, YES).firstObject;
 }
 
+- (NSString *)getEmbeddedPublicKeys
+{
+    id keys = [[NSBundle mainBundle] objectForInfoDictionaryKey:@"BsPatchPublicKey"];
+    return [keys isKindOfClass:[NSString class]] ? keys : @"";
+}
+
+- (NSString *)getAppBuild
+{
+    id build = [[NSBundle mainBundle] objectForInfoDictionaryKey:@"CFBundleVersion"];
+    return [build isKindOfClass:[NSString class]] ? build : @"";
+}
+
+// Written into the .app by the build phase `setup` adds (tools/fingerprint.js)
+- (NSString *)getRuntimeFingerprint
+{
+    NSString *path = [[NSBundle mainBundle] pathForResource:@"bspatch_fingerprint" ofType:@"txt"];
+    NSString *fingerprint = path ? [NSString stringWithContentsOfFile:path encoding:NSUTF8StringEncoding error:nil] : nil;
+    return [fingerprint stringByTrimmingCharactersInSet:NSCharacterSet.whitespaceAndNewlineCharacterSet] ?: @"";
+}
+
+- (void)getFreeDiskSpace:(RCTPromiseResolveBlock)resolve reject:(RCTPromiseRejectBlock)reject
+{
+    RNBsPatchIO(resolve, reject, ^BOOL(id *result, NSError **error) {
+        NSString *dir = [self getDocumentDir];
+        NSNumber *free = nil;
+        [[NSURL fileURLWithPath:dir] getResourceValue:&free forKey:NSURLVolumeAvailableCapacityForImportantUsageKey error:nil];
+        if (free.longLongValue <= 0) {
+            free = [NSFileManager.defaultManager attributesOfFileSystemForPath:dir error:error][NSFileSystemFreeSize];
+        }
+        *result = free;
+        return free != nil;
+    });
+}
+
+- (void)getNetworkType:(RCTPromiseResolveBlock)resolve reject:(RCTPromiseRejectBlock)reject
+{
+    nw_path_monitor_t monitor = nw_path_monitor_create();
+    nw_path_monitor_set_queue(monitor, dispatch_get_global_queue(QOS_CLASS_UTILITY, 0));
+    __block BOOL done = NO;
+    // The first update is the current path; cancelling releases the handler (and the monitor)
+    nw_path_monitor_set_update_handler(monitor, ^(nw_path_t path) {
+        if (done) return;
+        done = YES;
+        NSString *type = @"unknown";
+        if (nw_path_get_status(path) != nw_path_status_satisfied) {
+            type = @"none";
+        } else if (nw_path_uses_interface_type(path, nw_interface_type_wifi)) {
+            type = @"wifi";
+        } else if (nw_path_uses_interface_type(path, nw_interface_type_cellular)) {
+            type = @"cellular";
+        } else if (nw_path_uses_interface_type(path, nw_interface_type_wired)) {
+            type = @"ethernet";
+        }
+        resolve(type);
+        nw_path_monitor_cancel(monitor);
+    });
+    nw_path_monitor_start(monitor);
+}
+
 - (void)downloadFile:(NSString *)url
             destPath:(NSString *)destPath
            timeoutMs:(double)timeoutMs
+         headersJson:(NSString *)headersJson
              resolve:(RCTPromiseResolveBlock)resolve
               reject:(RCTPromiseRejectBlock)reject
 {
@@ -299,8 +425,18 @@ RCT_EXPORT_METHOD(getAppVersion:(RCTPromiseResolveBlock)resolve
         reject(@"ERR_DOWNLOAD", [NSString stringWithFormat:@"Invalid URL: %@", url], nil);
         return;
     }
+    id headers = [NSJSONSerialization JSONObjectWithData:[headersJson dataUsingEncoding:NSUTF8StringEncoding] options:0 error:nil];
+    if (![headers isKindOfClass:[NSDictionary class]]) {
+        reject(@"ERR_DOWNLOAD", [@"headersJson must be a JSON object, got: " stringByAppendingString:headersJson], nil);
+        return;
+    }
+    NSMutableURLRequest *request = [NSMutableURLRequest requestWithURL:nsurl];
+    for (NSString *name in headers) {
+        [request setValue:[headers[name] description] forHTTPHeaderField:name];
+    }
     RNBsPatchDownload *download = [RNBsPatchDownload new];
     download.destPath = destPath;
+    download.resumePath = [destPath stringByAppendingString:@".resumedata"];
     download.resolve = resolve;
     download.reject = reject;
     __weak RNBsPatch *weakSelf = self;
@@ -312,7 +448,12 @@ RCT_EXPORT_METHOD(getAppVersion:(RCTPromiseResolveBlock)resolve
     config.requestCachePolicy = NSURLRequestReloadIgnoringLocalCacheData;
     config.timeoutIntervalForRequest = timeoutMs / 1000.0; // idle timeout, same as Android readTimeout
     NSURLSession *session = [NSURLSession sessionWithConfiguration:config delegate:download delegateQueue:nil];
-    [[session downloadTaskWithURL:nsurl] resume];
+    // Single use: a failed attempt writes fresh resume data, invalid data fails this
+    // attempt and the next one starts over
+    NSData *resumeData = [NSData dataWithContentsOfFile:download.resumePath];
+    [NSFileManager.defaultManager removeItemAtPath:download.resumePath error:nil];
+    NSURLSessionDownloadTask *task = resumeData ? [session downloadTaskWithResumeData:resumeData] : nil;
+    [task ?: [session downloadTaskWithRequest:request] resume];
 }
 
 - (void)hashFile:(NSString *)path resolve:(RCTPromiseResolveBlock)resolve reject:(RCTPromiseRejectBlock)reject

package/lib/commonjs/NativeBsPatch.js.map

@@ -1 +1 @@
-{"version":3,"names":["_reactNative","require","_default","exports","default","TurboModuleRegistry","getEnforcing"],"sourceRoot":"../../src","sources":["NativeBsPatch.ts"],"mappings":";;;;;;AACA,IAAAA,YAAA,GAAAC,OAAA;AAAmD,IAAAC,QAAA,GAAAC,OAAA,CAAAC,OAAA,GA4FpCC,gCAAmB,CAACC,YAAY,CAAO,SAAS,CAAC","ignoreList":[]}
+{"version":3,"names":["_reactNative","require","_default","exports","default","TurboModuleRegistry","getEnforcing"],"sourceRoot":"../../src","sources":["NativeBsPatch.ts"],"mappings":";;;;;;AACA,IAAAA,YAAA,GAAAC,OAAA;AAAmD,IAAAC,QAAA,GAAAC,OAAA,CAAAC,OAAA,GA4HpCC,gCAAmB,CAACC,YAAY,CAAO,SAAS,CAAC","ignoreList":[]}

package/lib/commonjs/index.js

@@ -7,12 +7,19 @@ var _exportNames = {
   applyPatch: true,
   markAsHealthy: true,
   reloadBundle: true,
+  R2StorageProvider: true,
   GitHubRawStorageProvider: true
 };
 Object.defineProperty(exports, "GitHubRawStorageProvider", {
   enumerable: true,
   get: function () {
-    return _GitHubRawStorage.GitHubRawStorageProvider;
+    return _R2Storage.R2StorageProvider;
+  }
+});
+Object.defineProperty(exports, "R2StorageProvider", {
+  enumerable: true,
+  get: function () {
+    return _R2Storage.R2StorageProvider;
   }
 });
 exports.applyPatch = applyPatch;
@@ -56,7 +63,7 @@ Object.keys(_types).forEach(function (key) {
     }
   });
 });
-var _GitHubRawStorage = require("./ota/storage/GitHubRawStorage");
+var _R2Storage = require("./ota/storage/R2Storage");
 function _interopRequireDefault(e) { return e && e.__esModule ? e : { default: e }; }
 function applyPatch(oldBundlePath, newBundlePath, patchPath) {
   return _NativeBsPatch.default.applyPatch(oldBundlePath, newBundlePath, patchPath);

package/lib/commonjs/index.js.map

@@ -1 +1 @@
-{"version":3,"names":["_NativeBsPatch","_interopRequireDefault","require","_otaLogger","Object","keys","forEach","key","prototype","hasOwnProperty","call","_exportNames","exports","defineProperty","enumerable","get","_OtaProvider","_types","_GitHubRawStorage","e","__esModule","default","applyPatch","oldBundlePath","newBundlePath","patchPath","NativeBsPatch","markAsHealthy","reloadBundle","_default"],"sourceRoot":"../../src","sources":["index.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAAA,IAAAA,cAAA,GAAAC,sBAAA,CAAAC,OAAA;AAkBA,IAAAC,UAAA,GAAAD,OAAA;AAAAE,MAAA,CAAAC,IAAA,CAAAF,UAAA,EAAAG,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAH,MAAA,CAAAI,SAAA,CAAAC,cAAA,CAAAC,IAAA,CAAAC,YAAA,EAAAJ,GAAA;EAAA,IAAAA,GAAA,IAAAK,OAAA,IAAAA,OAAA,CAAAL,GAAA,MAAAJ,UAAA,CAAAI,GAAA;EAAAH,MAAA,CAAAS,cAAA,CAAAD,OAAA,EAAAL,GAAA;IAAAO,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAZ,UAAA,CAAAI,GAAA;IAAA;EAAA;AAAA;AACA,IAAAS,YAAA,GAAAd,OAAA;AAAAE,MAAA,CAAAC,IAAA,CAAAW,YAAA,EAAAV,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAH,MAAA,CAAAI,SAAA,CAAAC,cAAA,CAAAC,IAAA,CAAAC,YAAA,EAAAJ,GAAA;EAAA,IAAAA,GAAA,IAAAK,OAAA,IAAAA,OAAA,CAAAL,GAAA,MAAAS,YAAA,CAAAT,GAAA;EAAAH,MAAA,CAAAS,cAAA,CAAAD,OAAA,EAAAL,GAAA;IAAAO,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAC,YAAA,CAAAT,GAAA;IAAA;EAAA;AAAA;AACA,IAAAU,MAAA,GAAAf,OAAA;AAAAE,MAAA,CAAAC,IAAA,CAAAY,MAAA,EAAAX,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAH,MAAA,CAAAI,SAAA,CAAAC,cAAA,CAAAC,IAAA,CAAAC,YAAA,EAAAJ,GAAA;EAAA,IAAAA,GAAA,IAAAK,OAAA,IAAAA,OAAA,CAAAL,GAAA,MAAAU,MAAA,CAAAV,GAAA;EAAAH,MAAA,CAAAS,cAAA,CAAAD,OAAA,EAAAL,GAAA;IAAAO,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAE,MAAA,CAAAV,GAAA;IAAA;EAAA;AAAA;AAEA,IAAAW,iBAAA,GAAAhB,OAAA;AAA0E,SAAAD,uBAAAkB,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,KAAAE,OAAA,EAAAF,CAAA;AApBnE,SAASG,UAAUA,CACxBC,aAAqB,EACrBC,aAAqB,EACrBC,SAAiB,EACC;EAClB,OAAOC,sBAAa,CAACJ,UAAU,CAACC,aAAa,EAAEC,aAAa,EAAEC,SAAS,CAAC;AAC1E;AAEO,SAASE,aAAaA,CAAA,EAAS;EACpC,OAAOD,sBAAa,CAACC,aAAa,CAAC,CAAC;AACtC;AAEO,SAASC,YAAYA,CAAA,EAAS;EACnC,OAAOF,sBAAa,CAACE,YAAY,CAAC,CAAC;AACrC;AAAC,IAAAC,QAAA,GAAAjB,OAAA,CAAAS,OAAA,GAQc;EACbC,UAAU;EACVM,YAAY;EACZD;AACF,CAAC","ignoreList":[]}
+{"version":3,"names":["_NativeBsPatch","_interopRequireDefault","require","_otaLogger","Object","keys","forEach","key","prototype","hasOwnProperty","call","_exportNames","exports","defineProperty","enumerable","get","_OtaProvider","_types","_R2Storage","e","__esModule","default","applyPatch","oldBundlePath","newBundlePath","patchPath","NativeBsPatch","markAsHealthy","reloadBundle","_default"],"sourceRoot":"../../src","sources":["index.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,IAAAA,cAAA,GAAAC,sBAAA,CAAAC,OAAA;AAkBA,IAAAC,UAAA,GAAAD,OAAA;AAAAE,MAAA,CAAAC,IAAA,CAAAF,UAAA,EAAAG,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAH,MAAA,CAAAI,SAAA,CAAAC,cAAA,CAAAC,IAAA,CAAAC,YAAA,EAAAJ,GAAA;EAAA,IAAAA,GAAA,IAAAK,OAAA,IAAAA,OAAA,CAAAL,GAAA,MAAAJ,UAAA,CAAAI,GAAA;EAAAH,MAAA,CAAAS,cAAA,CAAAD,OAAA,EAAAL,GAAA;IAAAO,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAZ,UAAA,CAAAI,GAAA;IAAA;EAAA;AAAA;AACA,IAAAS,YAAA,GAAAd,OAAA;AAAAE,MAAA,CAAAC,IAAA,CAAAW,YAAA,EAAAV,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAH,MAAA,CAAAI,SAAA,CAAAC,cAAA,CAAAC,IAAA,CAAAC,YAAA,EAAAJ,GAAA;EAAA,IAAAA,GAAA,IAAAK,OAAA,IAAAA,OAAA,CAAAL,GAAA,MAAAS,YAAA,CAAAT,GAAA;EAAAH,MAAA,CAAAS,cAAA,CAAAD,OAAA,EAAAL,GAAA;IAAAO,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAC,YAAA,CAAAT,GAAA;IAAA;EAAA;AAAA;AACA,IAAAU,MAAA,GAAAf,OAAA;AAAAE,MAAA,CAAAC,IAAA,CAAAY,MAAA,EAAAX,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAH,MAAA,CAAAI,SAAA,CAAAC,cAAA,CAAAC,IAAA,CAAAC,YAAA,EAAAJ,GAAA;EAAA,IAAAA,GAAA,IAAAK,OAAA,IAAAA,OAAA,CAAAL,GAAA,MAAAU,MAAA,CAAAV,GAAA;EAAAH,MAAA,CAAAS,cAAA,CAAAD,OAAA,EAAAL,GAAA;IAAAO,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAE,MAAA,CAAAV,GAAA;IAAA;EAAA;AAAA;AAEA,IAAAW,UAAA,GAAAhB,OAAA;AAIiC,SAAAD,uBAAAkB,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,KAAAE,OAAA,EAAAF,CAAA;AAxB1B,SAASG,UAAUA,CACxBC,aAAqB,EACrBC,aAAqB,EACrBC,SAAiB,EACC;EAClB,OAAOC,sBAAa,CAACJ,UAAU,CAACC,aAAa,EAAEC,aAAa,EAAEC,SAAS,CAAC;AAC1E;AAEO,SAASE,aAAaA,CAAA,EAAS;EACpC,OAAOD,sBAAa,CAACC,aAAa,CAAC,CAAC;AACtC;AAEO,SAASC,YAAYA,CAAA,EAAS;EACnC,OAAOF,sBAAa,CAACE,YAAY,CAAC,CAAC;AACrC;AAAC,IAAAC,QAAA,GAAAjB,OAAA,CAAAS,OAAA,GAYc;EACbC,UAAU;EACVM,YAAY;EACZD;AACF,CAAC","ignoreList":[]}

package/lib/commonjs/ota/OtaProvider.js

@@ -8,6 +8,8 @@ exports.useOta = useOta;
 var _react = _interopRequireWildcard(require("react"));
 var _reactNative = require("react-native");
 var _NativeBsPatch = _interopRequireDefault(require("../NativeBsPatch"));
+var _eligibility = require("./eligibility");
+var _installId = require("./installId");
 var _otaCore = require("./otaCore");
 var _otaLogger = require("./otaLogger");
 var _otaMetadata = require("./otaMetadata");
@@ -16,6 +18,22 @@ var _jsxRuntime = require("react/jsx-runtime");
 function _interopRequireDefault(e) { return e && e.__esModule ? e : { default: e }; }
 function _interopRequireWildcard(e, t) { if ("function" == typeof WeakMap) var r = new WeakMap(), n = new WeakMap(); return (_interopRequireWildcard = function (e, t) { if (!t && e && e.__esModule) return e; var o, i, f = { __proto__: null, default: e }; if (null === e || "object" != typeof e && "function" != typeof e) return f; if (o = t ? n : r) { if (o.has(e)) return o.get(e); o.set(e, f); } for (const t in e) "default" !== t && {}.hasOwnProperty.call(e, t) && ((i = (o = Object.defineProperty) && Object.getOwnPropertyDescriptor(e, t)) && (i.get || i.set) ? o(f, t, i) : f[t] = e[t]); return f; })(e, t); }
 const OtaContext = /*#__PURE__*/(0, _react.createContext)(undefined);
+const DEFAULT_MIN_CHECK_INTERVAL_MS = 10 * 60 * 1000;
+
+/** Sync native getter, '' if it throws */
+const nativeString = get => {
+  try {
+    return get() ?? '';
+  } catch {
+    return '';
+  }
+};
+
+/** Bytecode version the running Hermes reads (undefined off Hermes) */
+const hermesBytecodeVersion = () => {
+  const v = globalThis.HermesInternal?.getRuntimeProperties?.()?.['Bytecode Version'];
+  return v ? Number(v) : undefined;
+};
 function OtaProvider({
   children,
   config,
@@ -33,12 +51,17 @@ function OtaProvider({
   const [patches, setPatches] = (0, _react.useState)([]);
   const [isInitialized, setIsInitialized] = (0, _react.useState)(false);
   const [isUpdateReady, setIsUpdateReady] = (0, _react.useState)(false);
+  const [isMandatory, setIsMandatory] = (0, _react.useState)(false);
+  const [installId, setInstallId] = (0, _react.useState)('');
   const appState = (0, _react.useRef)(_reactNative.AppState.currentState);
   const isCheckingRef = (0, _react.useRef)(false);
   const bootstrapDone = (0, _react.useRef)(false);
   /** Version the native resolver loaded for this JS session */
   const runningVersionRef = (0, _react.useRef)(config.baseAppVersion);
   const progressRef = (0, _react.useRef)(0);
+  const lastCheckRef = (0, _react.useRef)(0);
+  const appVersionRef = (0, _react.useRef)(config.appVersion ?? '');
+  const installIdRef = (0, _react.useRef)('');
   const isDebugUpdateEnabled = !__DEV__ || config.allowDebugUpdates === true;
 
   // No fallbacks: a missing env value disables OTA instead of silently pointing elsewhere.
@@ -57,36 +80,68 @@ function OtaProvider({
     progressRef.current = nextProgress;
     setProgress(nextProgress);
   }, []);
+
+  /** config.onEvent, plus a fire-and-forget POST to config.telemetry.url */
+  const onEvent = (0, _react.useCallback)(entry => {
+    config.onEvent?.(entry);
+    const telemetry = config.telemetry;
+    if (!telemetry) return;
+    fetch(telemetry.url, {
+      method: 'POST',
+      headers: {
+        'Content-Type': 'application/json',
+        ...telemetry.headers
+      },
+      body: JSON.stringify({
+        ...entry,
+        installId: installIdRef.current,
+        platform: _reactNative.Platform.OS,
+        appVersion: appVersionRef.current,
+        appBuild: nativeString(() => _NativeBsPatch.default.getAppBuild()),
+        runtimeFingerprint: nativeString(() => _NativeBsPatch.default.getRuntimeFingerprint()),
+        flavor: config.customServer?.channel,
+        otaVersion: runningVersionRef.current
+      })
+    }).catch(() => {});
+  }, [config]);
   const getEffectiveConfig = (0, _react.useCallback)(async () => {
-    if (config.appVersion) return config;
+    // The keys `patch` embedded in the app (primary + backup), unless the app passes its own
+    const publicKey = config.publicKey || nativeString(() => _NativeBsPatch.default.getEmbeddedPublicKeys()) || undefined;
+    const base = {
+      ...config,
+      publicKey,
+      onEvent
+    };
+    if (config.appVersion) return base;
     try {
       const nativeVer = await _NativeBsPatch.default.getAppVersion();
       if (!nativeVer) {
         throw new Error('Native appVersion is empty');
       }
+      appVersionRef.current = nativeVer;
       return {
-        ...config,
+        ...base,
         appVersion: nativeVer
       };
     } catch (e) {
       throw new Error(`[OtaProvider] Failed to auto-detect appVersion from native: ${e.message}. ` + `Please set versionName (Android) / CFBundleShortVersionString (iOS), or provide config.appVersion explicitly.`);
     }
-  }, [config]);
+  }, [config, onEvent]);
 
-  /**
-   * Core apply update logic — separated so it can be mapped to button clicks
-   * OR called automatically by checkUpdates()
-   */
-  const executeApplyUpdate = (0, _react.useCallback)(async (patchList, currentVer, targetVer) => {
-    const directPatch = (0, _otaCore.selectUpdate)(patchList, currentVer, targetVer);
-    if (!directPatch) {
-      if (__DEV__) {
-        console.warn('[OtaProvider] No update entry found for', currentVer, '->', targetVer);
-      }
-      setStatus(_types.OtaStatus.ERROR);
-      setMessage('No upgrade path found.');
-      return;
-    }
+  /** What decides which registry entries this install may take */
+  const eligibilityContext = (0, _react.useCallback)(async () => {
+    const metadata = await (0, _otaMetadata.loadMetadata)(config.baseAppVersion);
+    return {
+      platform: _reactNative.Platform.OS,
+      failedVersions: metadata.failedVersions ?? [],
+      runtimeFingerprint: nativeString(() => _NativeBsPatch.default.getRuntimeFingerprint()),
+      hermesBytecodeVersion: hermesBytecodeVersion(),
+      installId: await (0, _installId.getInstallId)()
+    };
+  }, [config.baseAppVersion]);
+
+  /** Installs one registry entry in the foreground (status + progress), then reloads */
+  const installEntry = (0, _react.useCallback)(async directPatch => {
     try {
       const effectiveConfig = await getEffectiveConfig();
       setStatus(_types.OtaStatus.DOWNLOADING);
@@ -108,6 +163,45 @@ function OtaProvider({
     }
   }, [getEffectiveConfig, setProgressIfChanged]);
 
+  /**
+   * Core apply update logic — separated so it can be mapped to button clicks
+   * OR called automatically by checkUpdates()
+   */
+  const executeApplyUpdate = (0, _react.useCallback)(async (patchList, currentVer, targetVer) => {
+    const directPatch = (0, _otaCore.selectUpdate)(patchList, currentVer, targetVer);
+    if (!directPatch) {
+      if (__DEV__) {
+        console.warn('[OtaProvider] No update entry found for', currentVer, '->', targetVer);
+      }
+      setStatus(_types.OtaStatus.ERROR);
+      setMessage('No upgrade path found.');
+      return;
+    }
+    await installEntry(directPatch);
+  }, [installEntry]);
+
+  /**
+   * Installs exactly this registry entry (a version list in a debug/QA screen): the patch
+   * when it starts from the running version, else its full bundle. Ignores the kill switch,
+   * rollout and QA list; still refuses what would break the app (native code, Hermes, …).
+   */
+  const applyEntry = (0, _react.useCallback)(async entry => {
+    if (!isDebugUpdateEnabled) {
+      setStatus(_types.OtaStatus.UP_TO_DATE);
+      setMessage('OTA updates are disabled while running a debug build.');
+      return;
+    }
+    const reason = (0, _eligibility.ineligibleReason)(entry, await eligibilityContext(), {
+      ignoreControls: true
+    });
+    if (reason) {
+      setStatus(_types.OtaStatus.ERROR);
+      setMessage(`Can't install V${entry.toVersion}: ${reason}`);
+      return;
+    }
+    await installEntry(entry);
+  }, [eligibilityContext, installEntry, isDebugUpdateEnabled]);
+
   /**
    * Exposed method for manual trigger
    */
@@ -132,6 +226,12 @@ function OtaProvider({
           setStatus(_types.OtaStatus.UP_TO_DATE);
           setMessage(`Update V${targetV} ready for next launch`);
           if (m) setMetrics(m);
+          if (directPatch.mandatory) {
+            setIsMandatory(true);
+            // Only in the foreground: a reload in the background is rolled back (see the
+            // AppState effect); the effect reloads once the app comes back
+            if (_reactNative.AppState.currentState === 'active') _NativeBsPatch.default.reloadBundle();
+          }
         }
       }, () => {},
       // silent: background doesn't spam progress
@@ -149,8 +249,9 @@ function OtaProvider({
   /**
    * Check for updates from the manifest.
    * Uses a ref to guard against concurrent calls (avoids stale closure).
+   * Automatic calls are throttled by minCheckIntervalMs; { force: true } always checks.
    */
-  const checkUpdates = (0, _react.useCallback)(async () => {
+  const checkUpdates = (0, _react.useCallback)(async options => {
     if (isCheckingRef.current || configError) return;
     if (!isDebugUpdateEnabled) {
       setPendingCount(0);
@@ -159,6 +260,9 @@ function OtaProvider({
       setMessage('OTA updates are disabled while running a debug build.');
       return;
     }
+    const minInterval = config.minCheckIntervalMs ?? DEFAULT_MIN_CHECK_INTERVAL_MS;
+    if (!options?.force && Date.now() - lastCheckRef.current < minInterval) return;
+    lastCheckRef.current = Date.now();
     isCheckingRef.current = true;
     setIsChecking(true);
     setStatus(_types.OtaStatus.CHECKING);
@@ -170,10 +274,16 @@ function OtaProvider({
       const metadata = await (0, _otaMetadata.loadMetadata)(config.baseAppVersion);
       const localV = metadata.currentVersion;
 
-      // The one platform filter (storage providers return every platform).
-      // Also skips versions that crashed on boot and were rolled back natively.
-      const failed = metadata.failedVersions ?? [];
-      const platformPatches = remotePatches.filter(p => (!p.platform || p.platform.toLowerCase() === _reactNative.Platform.OS) && !failed.includes(p.toVersion));
+      // Storage providers return every platform: keep what this install may take (platform,
+      // native fingerprint, Hermes, rollout/QA lists, kill switch, versions that crashed here)
+      const context = await eligibilityContext();
+      const platformPatches = remotePatches.filter(p => {
+        const reason = (0, _eligibility.ineligibleReason)(p, context);
+        if (reason && __DEV__ && p.toVersion > localV) {
+          console.log(`[OtaProvider] Skipping V${p.toVersion} (${p.id}): ${reason}`);
+        }
+        return !reason;
+      });
       const maxV = platformPatches.length > 0 ? Math.max(...platformPatches.map(p => p.toVersion)) : localV;
       setPatches(platformPatches);
       setCurrentVersion(localV);
@@ -184,7 +294,10 @@ function OtaProvider({
         setStatus(_types.OtaStatus.UPDATE_AVAILABLE);
 
         // Trigger behaviors based on mode
-        if (config.updateMode === _types.OtaUpdateMode.BACKGROUND_DOWNLOAD) {
+        const network = config.network?.wifiOnly ? await _NativeBsPatch.default.getNetworkType().catch(() => 'unknown') : 'wifi';
+        if (network !== 'wifi' && network !== 'ethernet') {
+          setMessage(`Update available: V${localV} → V${maxV} (waiting for Wi-Fi)`);
+        } else if (config.updateMode === _types.OtaUpdateMode.BACKGROUND_DOWNLOAD) {
           downloadBackgroundUpdate(platformPatches, localV, maxV);
         } else if (config.updateMode === _types.OtaUpdateMode.ON_APP_START || config.updateMode === _types.OtaUpdateMode.ON_APP_FOREGROUND) {
           // Auto-apply immediately!
@@ -202,7 +315,7 @@ function OtaProvider({
       isCheckingRef.current = false;
       setIsChecking(false);
     }
-  }, [config, configError, executeApplyUpdate, isDebugUpdateEnabled, downloadBackgroundUpdate, getEffectiveConfig]);
+  }, [config, configError, eligibilityContext, executeApplyUpdate, isDebugUpdateEnabled, downloadBackgroundUpdate, getEffectiveConfig]);
 
   /**
    * Bootstrap: runs once on mount.
@@ -217,6 +330,11 @@ function OtaProvider({
    */
   (0, _react.useEffect)(() => {
     const bootstrap = async () => {
+      (0, _installId.getInstallId)().then(id => {
+        installIdRef.current = id;
+        setInstallId(id);
+      }).catch(() => {});
+
       // Clean up any pending trash directories from previous resets (non-blocking)
       _NativeBsPatch.default.readDir(_otaMetadata.DOCUMENT_DIR).then(dirs => {
         for (const dir of dirs) {
@@ -249,23 +367,32 @@ function OtaProvider({
         setStatus(_types.OtaStatus.UP_TO_DATE);
       }
     };
-    bootstrap().then(() => setIsInitialized(true)).catch(() => {
-      // Bootstrap failed: keep UI blocked so user sees the error state.
-      // setIsInitialized stays false → isBlocking remains true → the error
-      // message is shown via loadingView instead of a silent blank screen.
-    });
+
+    // OTA must never take the app down: if bootstrap fails, render the app with OTA idle
+    bootstrap().catch(error => {
+      console.warn('[OtaProvider] Bootstrap failed, OTA disabled for this session:', error);
+      setMessage(`OTA disabled: ${error.message}`);
+      setStatus(_types.OtaStatus.ERROR);
+    }).finally(() => setIsInitialized(true));
     // eslint-disable-next-line react-hooks/exhaustive-deps
   }, []);
 
   /**
-   * AppState listener for ON_APP_FOREGROUND mode.
+   * AppState listener for ON_APP_FOREGROUND mode, and for a mandatory update that got
+   * ready while in the background.
    * A downloaded update is not reloaded on background: iOS suspends JS before the
    * first render, so the native resolver counts the launch as failed and rolls it back.
    * metadata already points at the new version, so the next cold start applies it
    */
+  const isMandatoryRef = (0, _react.useRef)(false);
+  isMandatoryRef.current = isMandatory && isUpdateReady;
   (0, _react.useEffect)(() => {
     const subscription = _reactNative.AppState.addEventListener('change', nextAppState => {
       if (appState.current.match(/inactive|background/) && nextAppState === 'active' && bootstrapDone.current) {
+        if (isMandatoryRef.current) {
+          _NativeBsPatch.default.reloadBundle();
+          return;
+        }
         const mode = config.updateMode ?? _types.OtaUpdateMode.MANUAL;
         if (mode === _types.OtaUpdateMode.ON_APP_FOREGROUND) {
           checkUpdates();
@@ -278,13 +405,13 @@ function OtaProvider({
     };
   }, [config.updateMode, checkUpdates]);
   const markAsHealthy = (0, _react.useCallback)(async () => {
-    const log = (0, _otaLogger.createOtaLogger)(config.onEvent);
+    const log = (0, _otaLogger.createOtaLogger)(onEvent);
     log.emit(_otaLogger.OtaEvent.MARK_HEALTHY);
     const appVersion = await _NativeBsPatch.default.getAppVersion().catch(() => config.appVersion);
     await (0, _otaMetadata.markHealthy)(config.baseAppVersion, runningVersionRef.current, appVersion);
-  }, [config]);
+  }, [config, onEvent]);
   const resetToFactory = (0, _react.useCallback)(async () => {
-    const log = (0, _otaLogger.createOtaLogger)(config.onEvent);
+    const log = (0, _otaLogger.createOtaLogger)(onEvent);
     try {
       setStatus(_types.OtaStatus.APPLYING);
       setMessage('Executing system wipe...');
@@ -300,7 +427,7 @@ function OtaProvider({
       setStatus(_types.OtaStatus.ERROR);
       setMessage(`Reset failed: ${error.message}`);
     }
-  }, [config]);
+  }, [onEvent]);
 
   // Memoized: consumers re-render only when something they can see changes
   const value = (0, _react.useMemo)(() => ({
@@ -313,13 +440,16 @@ function OtaProvider({
     isChecking,
     metrics,
     isUpdateReady,
+    isMandatory,
+    installId,
     applyUpdate,
     applyVersion,
+    applyEntry,
     resetToFactory,
     markAsHealthy,
     checkUpdate: checkUpdates,
     reloadBundle: () => _NativeBsPatch.default.reloadBundle()
-  }), [status, message, progress, currentVersion, latestVersion, pendingCount, isChecking, metrics, isUpdateReady, applyUpdate, applyVersion, resetToFactory, markAsHealthy, checkUpdates]);
+  }), [status, message, progress, currentVersion, latestVersion, pendingCount, isChecking, metrics, isUpdateReady, isMandatory, installId, applyUpdate, applyVersion, applyEntry, resetToFactory, markAsHealthy, checkUpdates]);
 
   // Logic to determine if we should block the UI
   const isBlocking = (0, _react.useMemo)(() => {