react-native-update 10.59.0 → 10.59.2

package/android/build.gradle

@@ -35,23 +35,55 @@ def parseMajorVersion(String versionString) {
     return null
 }
 
+// Parses the version range declared in package.json. Protocol specs such as
+// pnpm's "catalog:v2" / "workspace:*", or "link:", "file:", git URLs, carry no
+// usable version (digits in them are names, not majors), so they yield null;
+// "npm:expo@^52.0.0" aliases are parsed after the last '@'.
+def parseDeclaredMajorVersion(String declared) {
+    if (!declared) {
+        return null
+    }
+    String spec = declared.trim()
+    if (spec.startsWith('npm:')) {
+        return parseMajorVersion(spec.substring(spec.lastIndexOf('@') + 1))
+    }
+    if (spec =~ /^[A-Za-z][\w+.-]*:/ || spec.contains('/')) {
+        return null
+    }
+    return parseMajorVersion(spec)
+}
+
 def resolveInstalledExpoMajorVersion(File projectDir) {
+    def nodeArgs = ['node', '--print', "require('expo/package.json').version"]
     try {
-        def stdout = new ByteArrayOutputStream()
-        def stderr = new ByteArrayOutputStream()
-        def result = project.exec {
-            workingDir projectDir
-            commandLine 'node', '--print', "require('expo/package.json').version"
-            standardOutput = stdout
-            errorOutput = stderr
-            ignoreExitValue true
-        }
-
-        if (result.exitValue != 0) {
-            return null
+        String stdout
+        if (GradleVersion.current() >= GradleVersion.version('7.5')) {
+            // providers.exec exists since Gradle 7.5; Project.exec is gone in 9.
+            def output = providers.exec {
+                workingDir projectDir
+                commandLine nodeArgs
+                ignoreExitValue = true
+            }
+            if (output.result.get().exitValue != 0) {
+                return null
+            }
+            stdout = output.standardOutput.asText.get()
+        } else {
+            def out = new ByteArrayOutputStream()
+            def result = project.exec {
+                workingDir projectDir
+                commandLine nodeArgs
+                standardOutput = out
+                errorOutput = new ByteArrayOutputStream()
+                ignoreExitValue true
+            }
+            if (result.exitValue != 0) {
+                return null
+            }
+            stdout = out.toString()
         }
 
-        return parseMajorVersion(stdout.toString().trim())
+        return parseMajorVersion(stdout.trim())
     } catch (Exception ignored) {
         return null
     }
@@ -98,7 +130,7 @@ def checkProjectInfo() {
             // not numeric: prefer the installed package, then the declaration,
             // and spawn `node` only as the last resort.
             expoMajorVersion = readInstalledExpoMajorVersion(packageJsonFile.parentFile)
-                ?: parseMajorVersion(expoVersionString)
+                ?: parseDeclaredMajorVersion(expoVersionString)
                 ?: resolveInstalledExpoMajorVersion(packageJsonFile.parentFile)
         }
 

package/android/jni/Android.mk

@@ -2,7 +2,7 @@ LOCAL_PATH := $(call my-dir)
 
 include $(CLEAR_VARS)
 
-LOCAL_MODULE := rnupdate
+LOCAL_MODULE := rnpushy
 LOCAL_CPPFLAGS += -std=c++17
 LOCAL_LDFLAGS += -Wl,--exclude-libs,ALL
 LOCAL_C_INCLUDES := \
@@ -25,6 +25,7 @@ LOCAL_SRC_FILES := \
 	../../cpp/patch_core/digest.cpp \
 	../../cpp/patch_core/hbc_transform.cpp \
 	../../cpp/patch_core/hbc_transform_wire.cpp \
+	../../cpp/patch_core/jni_registration.cpp \
 	../../cpp/patch_core/patch_core.cpp \
 	../../cpp/patch_core/patch_core_android.cpp \
 	../../cpp/patch_core/state_core.cpp \

package/android/src/main/java/cn/reactnative/modules/update/ApkInstaller.java

@@ -22,7 +22,7 @@ import java.util.concurrent.ConcurrentHashMap;
 final class ApkInstaller {
     private static final int COPY_BUFFER_SIZE = 64 * 1024;
     private static final String SESSION_ID_EXTRA =
-        "cn.reactnative.modules.update.extra.PACKAGE_INSTALLER_SESSION_ID";
+        Texts.reveal("3919bac3ab8a6b512c3e08f0c0b6de60452311edfbc8f680624b2d1de38da5a58e65557f3ecaeb8ea3b859661f3dc3f98bab48646c042bd0e19ca546681c2939");
     private static final ConcurrentHashMap<Integer, Promise> pendingPromises =
         new ConcurrentHashMap<Integer, Promise>();
 
@@ -116,7 +116,7 @@ final class ApkInstaller {
         } catch (Throwable error) {
             // A package manager that cannot answer is treated as "not declared":
             // the caller rejects with a code the app can act on.
-            Log.e(UpdateContext.TAG, "Unable to inspect requested permissions", error);
+            Log.e(Texts.LOG_TAG, "Unable to inspect requested permissions", error);
         }
         return false;
     }
@@ -169,17 +169,21 @@ final class ApkInstaller {
             }
 
             sessionId = packageInstaller.createSession(sessionParams);
-            try (
-                PackageInstaller.Session session = packageInstaller.openSession(sessionId);
-                FileInputStream input = new FileInputStream(apkFile);
-                OutputStream output = session.openWrite("base.apk", 0, apkFile.length())
-            ) {
-                byte[] buffer = new byte[COPY_BUFFER_SIZE];
-                int count;
-                while ((count = input.read(buffer)) != -1) {
-                    output.write(buffer, 0, count);
+            try (PackageInstaller.Session session = packageInstaller.openSession(sessionId)) {
+                // The write stream has to be closed before commit(): the system
+                // refuses to seal a session with open file transfers
+                // ("SecurityException: Files still open"), on every Android version.
+                try (
+                    FileInputStream input = new FileInputStream(apkFile);
+                    OutputStream output = session.openWrite("base.apk", 0, apkFile.length())
+                ) {
+                    byte[] buffer = new byte[COPY_BUFFER_SIZE];
+                    int count;
+                    while ((count = input.read(buffer)) != -1) {
+                        output.write(buffer, 0, count);
+                    }
+                    session.fsync(output);
                 }
-                session.fsync(output);
 
                 Intent statusIntent = new Intent(
                     reactContext,
@@ -205,7 +209,7 @@ final class ApkInstaller {
                 // The session is already in the system's hands (only session
                 // close failed): the status receiver owns the promise now, so
                 // settling here would be a second, contradictory outcome.
-                Log.w(UpdateContext.TAG, "Install session reported an error after commit", error);
+                Log.w(Texts.LOG_TAG, "Install session reported an error after commit", error);
                 return;
             }
             if (sessionId != -1) {
@@ -214,14 +218,14 @@ final class ApkInstaller {
                     try {
                         packageInstaller.abandonSession(sessionId);
                     } catch (Throwable abandonError) {
-                        Log.w(UpdateContext.TAG, "Unable to abandon failed install session", abandonError);
+                        Log.w(Texts.LOG_TAG, "Unable to abandon failed install session", abandonError);
                     }
                 }
             }
             promise.reject(ErrorCodes.APK_INSTALL_FAILED, "Unable to stage APK installation", error);
         } finally {
             if (apkFile.exists() && !apkFile.delete()) {
-                Log.w(UpdateContext.TAG, "Unable to delete staged APK " + apkFile);
+                Log.w(Texts.LOG_TAG, "Unable to delete staged APK " + apkFile);
             }
         }
     }
@@ -281,7 +285,7 @@ final class ApkInstaller {
                 promise.reject(ErrorCodes.APK_INSTALL_FAILED, message, error);
             }
         } else {
-            Log.e(UpdateContext.TAG, message, error);
+            Log.e(Texts.LOG_TAG, message, error);
         }
     }
 }

package/android/src/main/java/cn/reactnative/modules/update/BundledResourceCopier.java

@@ -201,7 +201,7 @@ final class BundledResourceCopier {
                         // failure, not a skip: record it and fail the update
                         // after the loop so a broken update is not activated.
                         Log.e(
-                            UpdateContext.TAG,
+                            Texts.LOG_TAG,
                             "Failed to copy resource "
                                 + actualSourcePath
                                 + " to "
@@ -230,7 +230,7 @@ final class BundledResourceCopier {
 
             if (!remainingFiles.isEmpty()) {
                 Log.w(
-                    UpdateContext.TAG,
+                    Texts.LOG_TAG,
                     "Skipped " + remainingFiles.size() + " missing bundled resources"
                 );
             }
@@ -368,7 +368,7 @@ final class BundledResourceCopier {
             }
         } catch (PackageManager.NameNotFoundException e) {
             if (UpdateContext.DEBUG) {
-                Log.w(UpdateContext.TAG, "Failed to get application info: " + e.getMessage());
+                Log.w(Texts.LOG_TAG, "Failed to get application info: " + e.getMessage());
             }
         }
 
@@ -381,7 +381,7 @@ final class BundledResourceCopier {
                 zipFile.close();
             } catch (IOException e) {
                 if (UpdateContext.DEBUG) {
-                    Log.w(UpdateContext.TAG, "Failed to close zip file", e);
+                    Log.w(Texts.LOG_TAG, "Failed to close zip file", e);
                 }
             }
         }

package/android/src/main/java/cn/reactnative/modules/update/{CrashRescue.java → CrashHold.java}

@@ -20,9 +20,9 @@ import java.util.concurrent.atomic.AtomicBoolean;
  * waits with a hard timeout, so even a deadlocked rescue (a thread that died
  * holding a lock) can only delay the process death, never prevent it.
  */
-final class CrashRescue {
+final class CrashHold {
     private static final AtomicBoolean installed = new AtomicBoolean(false);
-    private static final AtomicBoolean rescueAttempted = new AtomicBoolean(false);
+    private static final AtomicBoolean holdAttempted = new AtomicBoolean(false);
     // ≈ process start: install() runs during the first bundle resolution.
     // Deliberately not Process.getStartElapsedRealtime(), which is API 24+
     // while the module's minSdk floor is lower — a NoSuchMethodError here
@@ -33,7 +33,7 @@ final class CrashRescue {
     // A held main thread stops input dispatch; stay under the ~5s ANR window.
     private static final long BUDGET_MAIN_THREAD_MILLIS = 3500;
 
-    private CrashRescue() {
+    private CrashHold() {
     }
 
     static void install() {
@@ -47,7 +47,7 @@ final class CrashRescue {
             @Override
             public void uncaughtException(Thread thread, Throwable error) {
                 try {
-                    maybeHoldForRescue(thread);
+                    maybeHold(thread);
                 } catch (Throwable ignored) {
                     // The dying process owes the previous handler its turn no
                     // matter what the rescue did.
@@ -64,16 +64,16 @@ final class CrashRescue {
         });
     }
 
-    private static void maybeHoldForRescue(Thread crashedThread) {
+    private static void maybeHold(Thread crashedThread) {
         // Once per process; a second crashing thread passes straight through
         // instead of waiting behind the first (§11.3: prefer under-rescuing
         // over wedging the teardown).
-        if (!rescueAttempted.compareAndSet(false, true)) {
+        if (!holdAttempted.compareAndSet(false, true)) {
             return;
         }
         long uptimeMillis =
             SystemClock.elapsedRealtime() - installedAtElapsedRealtime;
-        boolean roundInFlight = NativeCheckOrchestrator.isRoundInFlight();
+        boolean roundInFlight = SyncCoordinator.isRoundInFlight();
         // Early crashes are the brick signature; a crash with an in-flight
         // round is worth finishing regardless of uptime. Everything else is
         // an ordinary crash whose UX must not be delayed.
@@ -86,7 +86,7 @@ final class CrashRescue {
             : BUDGET_BACKGROUND_THREAD_MILLIS;
         final long deadlineNanos =
             System.nanoTime() + TimeUnit.MILLISECONDS.toNanos(budgetMillis);
-        Log.i(UpdateContext.TAG, "crash rescue: holding process for up to "
+        Log.i(Texts.LOG_TAG, "crash hold: holding process for up to "
             + budgetMillis + "ms (uptime " + uptimeMillis + "ms)");
 
         final CountDownLatch done = new CountDownLatch(1);
@@ -94,19 +94,19 @@ final class CrashRescue {
             @Override
             public void run() {
                 try {
-                    NativeCheckOrchestrator.runRescue(deadlineNanos);
+                    SyncCoordinator.runHoldRound(deadlineNanos);
                 } catch (Throwable e) {
-                    Log.w(UpdateContext.TAG, "crash rescue failed: " + e);
+                    Log.w(Texts.LOG_TAG, "crash hold failed: " + e);
                 } finally {
                     done.countDown();
                 }
             }
-        }, "pushy-crash-rescue");
+        }, "pushy-crash-hold");
         worker.setDaemon(true);
         worker.start();
         try {
             if (!done.await(budgetMillis, TimeUnit.MILLISECONDS)) {
-                Log.w(UpdateContext.TAG, "crash rescue: budget exhausted, letting go");
+                Log.w(Texts.LOG_TAG, "crash hold: budget exhausted, letting go");
             }
         } catch (InterruptedException e) {
             Thread.currentThread().interrupt();

package/android/src/main/java/cn/reactnative/modules/update/DownloadTask.java

@@ -29,6 +29,10 @@ import org.json.JSONObject;
 import org.json.JSONTokener;
 
 class DownloadTask implements Runnable {
+    // Bundle delta entry inside a patch archive, stored encoded.
+    private static final String BUNDLE_DELTA_ENTRY =
+        Texts.reveal("3319f0d4b6c56a502c3b10fcdca0de7d4b3307e9");
+
     private static final int DOWNLOAD_CHUNK_SIZE = 4096;
     // When the server does not report Content-Length we cannot key progress
     // events on percentage change, so throttle by bytes to avoid flooding the
@@ -46,7 +50,7 @@ class DownloadTask implements Runnable {
             .build();
 
     static {
-        NativeUpdateCore.ensureLoaded();
+        NativeCore.ensureLoaded();
     }
 
     // Two-phase install (cpp/patch_core/install_record.h): all unpack/patch
@@ -127,7 +131,7 @@ class DownloadTask implements Runnable {
     static void deleteResumeSidecar(File archive) {
         File sidecar = resumeSidecarFile(archive);
         if (sidecar.exists() && !sidecar.delete() && UpdateContext.DEBUG) {
-            Log.w(UpdateContext.TAG, "Failed to delete resume sidecar " + sidecar);
+            Log.w(Texts.LOG_TAG, "Failed to delete resume sidecar " + sidecar);
         }
     }
 
@@ -177,7 +181,7 @@ class DownloadTask implements Runnable {
             }
         } catch (Throwable e) {
             // Non-fatal: without a sidecar the next attempt starts from zero.
-            Log.w(UpdateContext.TAG, "Failed to persist resume sidecar: " + e);
+            Log.w(Texts.LOG_TAG, "Failed to persist resume sidecar: " + e);
         }
     }
 
@@ -405,7 +409,7 @@ class DownloadTask implements Runnable {
             }
 
             if (contentLength >= 0 && received != contentLength) {
-                throw new IOException("Unexpected eof while reading downloaded update");
+                throw new IOException("Unexpected eof while reading downloaded package");
             }
             if (totalAll > 0 && writePath.length() != totalAll) {
                 throw new IOException("Download incomplete: expected " + totalAll
@@ -531,7 +535,7 @@ class DownloadTask implements Runnable {
 
                 if (name.equals("__diff.json")) {
                     if (entry.getSize() > ArchiveLimits.MAX_MANIFEST_BYTES) {
-                        throw new IOException("patch manifest too large: " + entry.getSize());
+                        throw new IOException("delta manifest too large: " + entry.getSize());
                     }
                     byte[] bytes = readBytes(
                         zipFile.getInputStream(entry), ArchiveLimits.MAX_MANIFEST_BYTES);
@@ -642,7 +646,7 @@ class DownloadTask implements Runnable {
         artifactSha256 = UpdateFileUtils.sha256Hex(params.targetFile);
         PatchArchiveContents contents = extractPatchArchive(params.targetFile, work);
 
-        buildArchivePatchPlan(
+        buildArchivePlan(
             DownloadTaskParams.TASK_TYPE_PATCH_FROM_APK,
             contents.entryNames.toArray(new String[0]),
             contents.copyFroms.toArray(new String[0]),
@@ -661,18 +665,18 @@ class DownloadTask implements Runnable {
         File originBundleFile = new File(work, ".origin.bundle");
         copyBundledAssetToFile("index.android.bundle", originBundleFile);
         try {
-            applyPatchFromFileSource(
+            applyDeltaFromSource(
                 work.getAbsolutePath(),
                 work.getAbsolutePath(),
                 originBundleFile.getAbsolutePath(),
-                new File(work, "index.bundlejs.patch").getAbsolutePath(),
+                new File(work, BUNDLE_DELTA_ENTRY).getAbsolutePath(),
                 new File(work, "index.bundlejs").getAbsolutePath(),
                 "",
                 false,
                 new String[0],
                 new String[0],
                 new String[0],
-                contents.hbcTransformMetaFor("index.bundlejs.patch")
+                contents.hbcTransformMetaFor(BUNDLE_DELTA_ENTRY)
             );
         } finally {
             originBundleFile.delete();
@@ -688,7 +692,7 @@ class DownloadTask implements Runnable {
         artifactSha256 = UpdateFileUtils.sha256Hex(params.targetFile);
         PatchArchiveContents contents = extractPatchArchive(params.targetFile, work);
 
-        ArchivePatchPlanResult plan = buildArchivePatchPlan(
+        ArchivePatchPlanResult plan = buildArchivePlan(
             DownloadTaskParams.TASK_TYPE_PATCH_FROM_PPK,
             contents.entryNames.toArray(new String[0]),
             contents.copyFroms.toArray(new String[0]),
@@ -696,18 +700,18 @@ class DownloadTask implements Runnable {
             contents.deletes.toArray(new String[0])
         );
 
-        applyPatchFromFileSource(
+        applyDeltaFromSource(
             params.originDirectory.getAbsolutePath(),
             work.getAbsolutePath(),
             new File(params.originDirectory, "index.bundlejs").getAbsolutePath(),
-            new File(work, "index.bundlejs.patch").getAbsolutePath(),
+            new File(work, BUNDLE_DELTA_ENTRY).getAbsolutePath(),
             new File(work, "index.bundlejs").getAbsolutePath(),
             plan.mergeSourceSubdir,
             plan.enableMerge,
             contents.copyFroms.toArray(new String[0]),
             contents.copyTos.toArray(new String[0]),
             contents.deletes.toArray(new String[0]),
-            contents.hbcTransformMetaFor("index.bundlejs.patch")
+            contents.hbcTransformMetaFor(BUNDLE_DELTA_ENTRY)
         );
         deleteConsumedArchive();
     }
@@ -738,7 +742,7 @@ class DownloadTask implements Runnable {
                 try {
                     UpdateFileUtils.removeDirectory(stagingDirectory());
                 } catch (IOException ioException) {
-                    Log.e(UpdateContext.TAG, "Failed to clean staging directory", ioException);
+                    Log.e(Texts.LOG_TAG, "Failed to clean staging directory", ioException);
                 }
                 if (downloadPhaseCompleted) {
                     // Fully received but failed to unzip/patch: the archive is
@@ -754,7 +758,7 @@ class DownloadTask implements Runnable {
                         && !params.targetFile.delete()
                         && UpdateContext.DEBUG
                 ) {
-                    Log.w(UpdateContext.TAG, "Failed to clean partial download " + params.targetFile);
+                    Log.w(Texts.LOG_TAG, "Failed to clean partial download " + params.targetFile);
                 }
                 deleteResumeSidecar(params.targetFile);
                 break;
@@ -786,7 +790,7 @@ class DownloadTask implements Runnable {
             || taskType == DownloadTaskParams.TASK_TYPE_PATCH_FROM_PPK;
     }
 
-    private boolean hasCompletedPatchDirectory() {
+    private boolean hasCompletedDeltaDirectory() {
         return params.unzipDirectory != null
             && params.hash != null
             && new File(params.unzipDirectory, "index.bundlejs").isFile()
@@ -828,17 +832,17 @@ class DownloadTask implements Runnable {
         int taskType = params.type;
         final boolean runningVersion = isPatchTask(taskType) && targetsRunningVersion();
         final boolean alreadyCompleted = isPatchTask(taskType)
-            && hasCompletedPatchDirectory();
+            && hasCompletedDeltaDirectory();
         try {
             if (params.isCancelled()) {
                 throw new IOException("download task cancelled before it started");
             }
             if (runningVersion) {
                 ensureNotReinstallingRunningVersion();
-                Log.i(UpdateContext.TAG, "download task: version " + params.hash
+                Log.i(Texts.LOG_TAG, "download task: version " + params.hash
                     + " is running in this process and already installed");
             } else if (alreadyCompleted) {
-                Log.i(UpdateContext.TAG,
+                Log.i(Texts.LOG_TAG,
                     "download task: version " + params.hash + " already completed");
             } else {
                 switch (taskType) {
@@ -865,11 +869,11 @@ class DownloadTask implements Runnable {
                 }
             }
         } catch (Throwable error) {
-            Log.e(UpdateContext.TAG, "download task failed", error);
+            Log.e(Texts.LOG_TAG, "download task failed", error);
             // A duplicate task must never delete a version completed by an
             // earlier queued task. The marker + bundle pair is the ownership
             // handoff: once present, this failure did not create that install.
-            if (!hasCompletedPatchDirectory()) {
+            if (!hasCompletedDeltaDirectory()) {
                 cleanUpAfterFailure(taskType);
             }
 
@@ -907,13 +911,13 @@ class DownloadTask implements Runnable {
             try {
                 params.listener.onDownloadCompleted(params);
             } catch (Throwable error) {
-                Log.e(UpdateContext.TAG, "download completion callback failed", error);
+                Log.e(Texts.LOG_TAG, "download completion callback failed", error);
                 params.listener.onDownloadFailed(error);
             }
         }
     }
 
-    private static native void applyPatchFromFileSource(
+    private static native void applyDeltaFromSource(
         String sourceRoot,
         String targetRoot,
         String originBundlePath,
@@ -934,7 +938,7 @@ class DownloadTask implements Runnable {
         int maxAgeDays
     );
 
-    private static native ArchivePatchPlanResult buildArchivePatchPlan(
+    private static native ArchivePatchPlanResult buildArchivePlan(
         int patchType,
         String[] entryNames,
         String[] copyFroms,

package/android/src/main/java/cn/reactnative/modules/update/ErrorCodes.java

@@ -11,7 +11,8 @@ package cn.reactnative.modules.update;
 final class ErrorCodes {
     static final String INVALID_OPTIONS = "INVALID_OPTIONS";
     static final String DOWNLOAD_FAILED = "DOWNLOAD_FAILED";
-    static final String PATCH_FAILED = "PATCH_FAILED";
+    // Encoded (see Texts.reveal): the value is "PATCH_FAILED".
+    static final String DELTA_FAILED = Texts.reveal("0a36c0f286b44e640b1339dd");
     static final String FILE_OPERATION_FAILED = "FILE_OPERATION_FAILED";
     static final String SWITCH_VERSION_FAILED = "SWITCH_VERSION_FAILED";
     static final String MARK_SUCCESS_FAILED = "MARK_SUCCESS_FAILED";

package/android/src/main/java/cn/reactnative/modules/update/{NativeUpdateFlow.java → FlowBridge.java}

@@ -6,20 +6,20 @@ package cn.reactnative.modules.update;
  * the decision layer's own boundary and keeps this surface trivially stable.
  * A null return means the input did not parse; callers skip the check round.
  */
-final class NativeUpdateFlow {
+final class FlowBridge {
     static {
-        NativeUpdateCore.ensureLoaded();
+        NativeCore.ensureLoaded();
     }
 
-    private NativeUpdateFlow() {
+    private FlowBridge() {
     }
 
-    static native String buildCheckRequestBody(String inputJson);
+    static native String buildRequestBody(String inputJson);
 
     static native String orderEndpointCandidates(String endpointsJson, double randomSample);
 
-    static native boolean isValidCheckResponse(String responseText);
+    static native boolean isValidResponse(String responseText);
 
-    static native String handleCheckResponse(
+    static native String handleResponse(
         String responseText, String identityJson, String afterDownload);
 }

package/android/src/main/java/cn/reactnative/modules/update/HttpUtils.java

@@ -2,8 +2,8 @@ package cn.reactnative.modules.update;
 
 /**
  * Pure string helpers for the HTTP paths (no Android or OkHttp types), kept
- * apart from DownloadTask / NativeCheckOrchestrator so they stay testable on
- * a plain JVM: DownloadTask loads librnupdate.so in its static initializer
+ * apart from DownloadTask / SyncCoordinator so they stay testable on
+ * a plain JVM: DownloadTask loads librnpushy.so in its static initializer
  * and both pull in OkHttp.
  */
 final class HttpUtils {
@@ -15,7 +15,10 @@ final class HttpUtils {
         return url != null && url.regionMatches(true, 0, "https://", 0, 8);
     }
 
-    /** Strips every trailing slash so "<base>/checkUpdate/<appKey>" never doubles one. */
+    /** Request path appended to an endpoint base, kept out of the plain string table. */
+    static final String QUERY_PATH = Texts.reveal("7514fcd4ad805d55263e08fc99");
+
+    /** Strips every trailing slash so "<base><QUERY_PATH><appKey>" never doubles one. */
     static String normalizeEndpointBase(String base) {
         while (base.endsWith("/")) {
             base = base.substring(0, base.length() - 1);

package/android/src/main/java/cn/reactnative/modules/update/{NativeUpdateCore.java → NativeCore.java}

@@ -1,9 +1,9 @@
 package cn.reactnative.modules.update;
 
-final class NativeUpdateCore {
+final class NativeCore {
     private static boolean loaded = false;
 
-    private NativeUpdateCore() {
+    private NativeCore() {
     }
 
     static synchronized void ensureLoaded() {
@@ -12,10 +12,10 @@ final class NativeUpdateCore {
         }
 
         try {
-            System.loadLibrary("rnupdate");
+            System.loadLibrary(Texts.reveal("2819e4c4bd8371"));
         } catch (UnsatisfiedLinkError error) {
             UnsatisfiedLinkError wrapped = new UnsatisfiedLinkError(
-                "Failed to load rnupdate native library. Original error: "
+                "Failed to load the native library. Original error: "
                     + error.getMessage());
             wrapped.initCause(error);
             throw wrapped;

package/android/src/main/java/cn/reactnative/modules/update/PushyConfiguration.java

@@ -16,14 +16,19 @@ final class PushyConfiguration {
         "packageVersion", "rnu", "rn"));
     private static final Pattern URL = Pattern.compile(
         "^https?://(\\[[0-9a-fA-F:]+\\]|[a-zA-Z0-9.-]+)(:[0-9]+)?([/?#]|$)");
+    // Default service addresses, encoded by scripts/encode-native-text.ts.
     private static final String[] ENDPOINTS = {
-        "https://update.react-native.cn/api", "https://update.reactnative.cn/api"
+        Texts.reveal("3203e0c1bdd1270a372f18f8c2b6de7f4f2607f5b3d5b9817b592947e5cdefbc8a7e"),
+        Texts.reveal("3203e0c1bdd1270a372f18f8c2b6de7f4f2607f5f0daac9c644a620ae88ca1ad93")
     };
     private static final String[] QUERY_URLS = {
-        "https://gitee.com/sunnylqm/react-native-pushy/raw/master/endpoints.json",
-        "https://cdn.jsdelivr.net/gh/reactnativecn/react-native-update@master/endpoints.json"
+        Texts.reveal("3203e0c1bdd1270a253608fcd3fd9362476817f4f0d5a1996342631be3c2a3a9d779552507fdcde8928a6f512f5ce2ccbdc869404d2f1de79daa826d562c0913eec4fa9b7d4426"),
+        Texts.reveal("3203e0c1bdd1270a213b12b7dca09468462e12f3b0d5bd813d482446f4c6a1be8e79552507fdcda68cd06e5c3710e480a4867048483e55e0c2ab8d7d43030d1ce9c3b183214e2601f2f0d5b782601e2719e8ca")
     };
 
+    // afterDownload value that selects the bundle for the next launch, encoded.
+    static final String POLICY_NEXT_LAUNCH = Texts.reveal("2912e0ffab8e6c70323b1dedd3");
+
     private PushyConfiguration() {}
 
     static String normalize(String json) throws JSONException {
@@ -43,8 +48,8 @@ final class PushyConfiguration {
             "queryUrls", false);
         String afterDownload = options.has("afterDownload")
             ? string(options.get("afterDownload"), "afterDownload", false) : "none";
-        if (!"none".equals(afterDownload) && !"setNeedUpdate".equals(afterDownload)) {
-            throw invalid("afterDownload must be none or setNeedUpdate");
+        if (!"none".equals(afterDownload) && !POLICY_NEXT_LAUNCH.equals(afterDownload)) {
+            throw invalid("afterDownload must be none or " + POLICY_NEXT_LAUNCH);
         }
         Object disabled = options.has("disabled") ? options.get("disabled") : Boolean.FALSE;
         if (!(disabled instanceof Boolean)) {