react-native-update 10.58.1 → 10.59.1

package/ios/RCTPushy/RCTPushyConfiguration.h

@@ -0,0 +1,13 @@
+#import <Foundation/Foundation.h>
+
+// Validates and snapshots host options without changing any update state.
+FOUNDATION_EXPORT NSString * _Nullable RCTPushyNormalizeConfiguration(
+    NSDictionary * _Nonnull options, NSError * _Nullable * _Nullable error);
+
+// Decodes text produced by scripts/encode-native-text.ts (byte i XORed with
+// (0x5A + 0x1D * i) & 0xFF), keeping service addresses and paths out of static
+// string scans of the binary. Not a secret.
+FOUNDATION_EXPORT NSString * _Nonnull RCTPushyRevealText(const char * _Nonnull hex);
+
+// Request path appended to an endpoint base.
+FOUNDATION_EXPORT NSString * _Nonnull RCTPushyQueryPath(void);

package/ios/RCTPushy/{RCTPushyNativeConfig.mm → RCTPushyConfiguration.mm}

@@ -1,4 +1,29 @@
-#import "RCTPushyNativeConfig.h"
+#import "RCTPushyConfiguration.h"
+
+// Read through a volatile so the optimizer cannot fold the decode of a constant
+// argument back into a plain string in the binary.
+static volatile unsigned char PushyTextKeyBase = 0x5A;
+
+NSString *RCTPushyRevealText(const char *hex) {
+    size_t length = strlen(hex) / 2;
+    NSMutableString *text = [NSMutableString stringWithCapacity:length];
+    unsigned char base = PushyTextKeyBase;
+    for (size_t i = 0; i < length; i++) {
+        char pair[3] = {hex[i * 2], hex[i * 2 + 1], 0};
+        unsigned char byte = (unsigned char)strtoul(pair, NULL, 16);
+        [text appendFormat:@"%c", (char)(byte ^ (unsigned char)(base + 0x1D * i))];
+    }
+    return text;
+}
+
+NSString *RCTPushyQueryPath(void) {
+    static NSString *path;
+    static dispatch_once_t once;
+    dispatch_once(&once, ^{
+        path = RCTPushyRevealText("7514fcd4ad805d55263e08fc99");
+    });
+    return path;
+}
 
 static void PushyConfigInvalid(NSString *message) {
     @throw [NSException exceptionWithName:NSInvalidArgumentException
@@ -48,7 +73,7 @@ static NSArray *PushyConfigUrls(id value, NSString *name, BOOL base) {
     return result;
 }
 
-NSString *RCTPushyNormalizeNativeConfig(NSDictionary *options, NSError **error) {
+NSString *RCTPushyNormalizeConfiguration(NSDictionary *options, NSError **error) {
     @try {
         if (![options isKindOfClass:NSDictionary.class]) {
             PushyConfigInvalid(@"expected an object");
@@ -63,16 +88,18 @@ NSString *RCTPushyNormalizeNativeConfig(NSDictionary *options, NSError **error)
         NSString *appKey = PushyConfigString(options[@"appKey"], @"appKey", NO);
         BOOL customEndpoints = options[@"endpoints"] != nil;
         NSArray *endpoints = PushyConfigUrls(customEndpoints ? options[@"endpoints"]
-            : @[@"https://update.react-native.cn/api", @"https://update.reactnative.cn/api"],
+            : @[RCTPushyRevealText("3203e0c1bdd1270a372f18f8c2b6de7f4f2607f5b3d5b9817b592947e5cdefbc8a7e"),
+                RCTPushyRevealText("3203e0c1bdd1270a372f18f8c2b6de7f4f2607f5f0daac9c644a620ae88ca1ad93")],
             @"endpoints", YES);
         NSArray *queryUrls = PushyConfigUrls(options[@"queryUrls"] ?: (customEndpoints ? @[]
-            : @[@"https://gitee.com/sunnylqm/react-native-pushy/raw/master/endpoints.json",
-                @"https://cdn.jsdelivr.net/gh/reactnativecn/react-native-update@master/endpoints.json"]),
+            : @[RCTPushyRevealText("3203e0c1bdd1270a253608fcd3fd9362476817f4f0d5a1996342631be3c2a3a9d779552507fdcde8928a6f512f5ce2ccbdc869404d2f1de79daa826d562c0913eec4fa9b7d4426"),
+                RCTPushyRevealText("3203e0c1bdd1270a213b12b7dca09468462e12f3b0d5bd813d482446f4c6a1be8e79552507fdcda68cd06e5c3710e480a4867048483e55e0c2ab8d7d43030d1ce9c3b183214e2601f2f0d5b782601e2719e8ca")]),
             @"queryUrls", NO);
         NSString *afterDownload = options[@"afterDownload"]
             ? PushyConfigString(options[@"afterDownload"], @"afterDownload", NO) : @"none";
-        if (![@[@"none", @"setNeedUpdate"] containsObject:afterDownload]) {
-            PushyConfigInvalid(@"afterDownload must be none or setNeedUpdate");
+        NSString *nextLaunch = RCTPushyRevealText("2912e0ffab8e6c70323b1dedd3");
+        if (![@[@"none", nextLaunch] containsObject:afterDownload]) {
+            PushyConfigInvalid([@"afterDownload must be none or " stringByAppendingString:nextLaunch]);
         }
         id disabled = options[@"disabled"] ?: @NO;
         if (![disabled isKindOfClass:NSNumber.class] || CFGetTypeID((__bridge CFTypeRef)disabled) != CFBooleanGetTypeID()) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "react-native-update",
-  "version": "10.58.1",
+  "version": "10.59.1",
   "description": "react-native hot update",
   "main": "src/index",
   "types": "src/index.ts",

package/react-native-update.podspec

@@ -166,9 +166,12 @@ Pod::Spec.new do |s|
     s.dependency 'ExpoModulesCore'
   end
 
-  s.subspec 'RCTPushy' do |ss|
-    ss.source_files = ['ios/RCTPushy/*.{h,m,mm}',
-                       'cpp/update_flow_core/flow_json.{h,cpp}',
+  # Shared C/C++ core. Built with hidden visibility so none of its symbols are
+  # exported when the pod is linked as a dynamic framework. Per-file flags: the
+  # Objective-C classes in the RCTPushy subspec keep default visibility, which
+  # the host app and the Expo module need to link against RCTPushy.
+  s.subspec 'Core' do |ss|
+    ss.source_files = ['cpp/update_flow_core/flow_json.{h,cpp}',
                        'cpp/update_flow_core/update_flow_core.{h,cpp}',
                        'cpp/patch_core/archive_patch_core.{h,cpp}',
                        'cpp/patch_core/digest.{h,cpp}',
@@ -181,6 +184,15 @@ Pod::Spec.new do |s|
                        'android/jni/HDiffPatch/file_for_patch.{h,c}',
                        'android/jni/lzma/C/LzmaDec.{h,c}',
                        'android/jni/lzma/C/Lzma2Dec.{h,c}']
+    ss.private_header_files = ['cpp/**/*.h', 'android/jni/**/*.h']
+    # NDEBUG matches the prebuilt Android library and keeps third-party assertion
+    # text (file and expression strings) out of the binary.
+    ss.compiler_flags = '-DNDEBUG -fvisibility=hidden -fvisibility-inlines-hidden'
+  end
+
+  s.subspec 'RCTPushy' do |ss|
+    ss.dependency 'react-native-update/Core'
+    ss.source_files = ['ios/RCTPushy/*.{h,m,mm}']
     ss.public_header_files = ['ios/RCTPushy/*.h']
   end
 

package/ios/RCTPushy/RCTPushyNativeConfig.h

@@ -1,5 +0,0 @@
-#import <Foundation/Foundation.h>
-
-// Validates and snapshots host options without changing any update state.
-FOUNDATION_EXPORT NSString * _Nullable RCTPushyNormalizeNativeConfig(
-    NSDictionary * _Nonnull options, NSError * _Nullable * _Nullable error);