react-native-update 10.60.0 → 10.61.0

package/android/src/main/java/cn/reactnative/modules/update/Texts.java

@@ -6,8 +6,22 @@ package cn.reactnative.modules.update;
  * UpdateContext's native library load.
  */
 final class Texts {
-    /** Log tag shared by the module. */
+    // <generated:texts> (scripts/contract.ts; bun scripts/generate-contract.ts)
+    // Version-info flag of a version a crash hold installed (read by JS).
+    static final String INFO_CRASH_HOLD = reveal("3905f5c2a6b96d56212a19");
+    static final String PREFERENCES_NAME = reveal("2f07f0d0ba8e");
+    static final String STORAGE_DIR_NAME = reveal("0502e4d5af9f6d");
+    // The bundle patch entry inside a patch archive.
+    static final String BUNDLE_DELTA_ENTRY = reveal("3319f0d4b6c56a502c3b10fcdca0de7d4b3307e9");
+    static final String OPTION_URL_KEY = reveal("2f07f0d0ba8e5d572e");
+    static final String PPK_DELTA_SUFFIX = reveal("7407e4dae09b69512137");
+    // Archive suffix of a patch against the installed package.
+    static final String PACKAGE_DELTA_SUFFIX = reveal("7416e4dae09b69512137");
     static final String LOG_TAG = reveal("2812f5d2bac6664436360afc9ba680694b3301");
+    static final String LIBRARY_NAME = reveal("2819e4c4bd8371");
+    static final String INSTALLER_SESSION_EXTRA = reveal("3919bac3ab8a6b512c3e08f0c0b6de60452311edfbc8f680624b2d1de38da5a58e65557f3ecaeb8ea3b859661f3dc3f98bab48646c042bd0e19ca546681c2939");
+    static final String RELOAD_METHOD = reveal("2812f8deaf8f");
+    // </generated:texts>
 
     private Texts() {
     }

package/android/src/main/java/cn/reactnative/modules/update/Threads.java

@@ -17,6 +17,15 @@ final class Threads {
         });
     }
 
+    /** Daemon threads on demand, reused while idle: concurrent tasks never queue. */
+    static ExecutorService cached(final String name) {
+        return Executors.newCachedThreadPool(runnable -> {
+            Thread thread = new Thread(runnable, name);
+            thread.setDaemon(true);
+            return thread;
+        });
+    }
+
     /** Starts a one-off daemon thread: it never keeps a dying process alive. */
     static Thread startDaemon(String name, Runnable task) {
         return startDaemon(name, -1, task);

package/android/src/main/java/cn/reactnative/modules/update/UpdateContext.java

@@ -57,13 +57,15 @@ public class UpdateContext {
     private String bundleHash;
     private java.util.ArrayList<BundleHashListener> pendingBundleHashListeners =
         new java.util.ArrayList<>();
+    // <generated:state-operations> (scripts/contract.ts; bun scripts/generate-contract.ts)
     private static final int STATE_OP_SWITCH_VERSION = 1;
     private static final int STATE_OP_MARK_SUCCESS = 2;
     private static final int STATE_OP_ROLLBACK = 3;
-    // 4 (clear first time) exists in the state core but has no Android caller.
+    // 4 (ClearFirstTime) has no caller on this side.
     private static final int STATE_OP_CLEAR_ROLLBACK_MARK = 5;
     private static final int STATE_OP_RESOLVE_LAUNCH = 6;
-    private static final String KEY_FIRST_LOAD_MARKED = "firstLoadMarked";
+    // </generated:state-operations>
+    static final String KEY_FIRST_LOAD_MARKED = "firstLoadMarked";
     // Bumped by resetToPackagedBundle. The cold-start check runs for minutes
     // and may already hold a decision when the app resets to the packaged
     // bundle; the orchestrator samples this counter and abandons activation
@@ -110,15 +112,15 @@ public class UpdateContext {
         this.context = context.getApplicationContext();
         this.executor = Threads.single("pushy-download", false);
 
-        this.rootDir = new File(this.context.getFilesDir(), Texts.reveal("0502e4d5af9f6d"));
+        this.rootDir = new File(this.context.getFilesDir(), Texts.STORAGE_DIR_NAME);
 
         if (!rootDir.exists() && !rootDir.mkdirs() && !rootDir.exists()) {
             throw new IllegalStateException("Failed to create storage root dir: " + rootDir);
         }
 
-        this.sp = this.context.getSharedPreferences(Texts.reveal("2f07f0d0ba8e"), Context.MODE_PRIVATE);
+        this.sp = this.context.getSharedPreferences(Texts.PREFERENCES_NAME, Context.MODE_PRIVATE);
         this.checkCacheSp = this.context.getSharedPreferences(
-            Texts.reveal("2f07f0d0ba8e") + "_check", Context.MODE_PRIVATE);
+            Texts.PREFERENCES_NAME + "_check", Context.MODE_PRIVATE);
         this.packageInfo = lookupPackageInfo(this.context);
         this.reactInstanceManager = pendingReactInstanceManager;
 
@@ -134,7 +136,7 @@ public class UpdateContext {
             // Execute cleanUp before clearing SharedPreferences to avoid race condition
             cleanUp(DownloadTaskParams.DEFAULT_MAX_AGE_DAYS);
             SharedPreferences.Editor editor = this.sp.edit();
-            editor.clear();
+            removeKeys(editor, VersionScopedKeys.clearedOnUpgrade(sp.getAll().keySet()));
             applyState(editor, nextState);
             persistEditor(editor, "sync state with binary version");
             clearNativeCheckCache();
@@ -385,7 +387,7 @@ public class UpdateContext {
         }
         DownloadTaskParams params = downloadParams(
             DownloadTaskParams.TASK_TYPE_PATCH_FROM_APK, url, hash, listener, deadlineNanos);
-        params.targetFile = new File(rootDir, hash + Texts.reveal("7416e4dae09b69512137"));
+        params.targetFile = new File(rootDir, hash + Texts.PACKAGE_DELTA_SUFFIX);
         params.unzipDirectory = new File(rootDir, hash);
         enqueue(params);
         return params;
@@ -405,7 +407,7 @@ public class UpdateContext {
         DownloadTaskParams params = downloadParams(
             DownloadTaskParams.TASK_TYPE_PATCH_FROM_PPK, url, hash, listener, deadlineNanos);
         params.originHash = originHash;
-        params.targetFile = new File(rootDir, originHash + "-" + hash + Texts.reveal("7407e4dae09b69512137"));
+        params.targetFile = new File(rootDir, originHash + "-" + hash + Texts.PPK_DELTA_SUFFIX);
         params.unzipDirectory = new File(rootDir, hash);
         params.originDirectory = new File(rootDir, originHash);
         enqueue(params);
@@ -436,6 +438,15 @@ public class UpdateContext {
         }
     }
 
+    // Not editor.clear(): that also wiped the uuid (re-bucketing every gray
+    // release on each app upgrade) and the native config (no crash hold and
+    // no cold-start round until JS ran again). See VersionScopedKeys.
+    private void removeKeys(SharedPreferences.Editor editor, java.util.List<String> keys) {
+        for (String key : keys) {
+            editor.remove(key);
+        }
+    }
+
     private void applyState(SharedPreferences.Editor editor, StateCoreResult state) {
         putNullableString(editor, "packageVersion", state.packageVersion);
         putNullableString(editor, "buildTime", state.buildTime);
@@ -618,8 +629,10 @@ public class UpdateContext {
      * (so the next launch resolves to the built-in bundle) and delete the
      * downloaded versions, keeping only the directory of the version this
      * process is running from (a silent reset must not break its on-demand
-     * asset loads). Only the client uuid survives — it identifies the install
-     * for gray release bucketing and must not change on reset.
+     * asset loads). The install's own keys survive (VersionScopedKeys): the
+     * client uuid identifies the install for gray release bucketing and must
+     * not change on reset, and the native config stays with the host, as on
+     * iOS and Harmony.
      */
     public void resetToPackagedBundle() {
         synchronized (commitLock) {
@@ -637,18 +650,14 @@ public class UpdateContext {
         resetState.buildTime = getBuildTime();
         resetState.firstTime = false;
         resetState.firstTimeOk = true;
-        String uuid = sp.getString("uuid", null);
         // The cached check response still advertises the version this reset
         // removes; drop it first so a failure aborts before the state wipe.
         if (!clearNativeCheckCache()) {
             throw new IllegalStateException("Failed to persist state for reset check cache");
         }
         SharedPreferences.Editor editor = sp.edit();
-        editor.clear();
+        removeKeys(editor, VersionScopedKeys.clearedOnReset(sp.getAll().keySet()));
         applyState(editor, resetState);
-        if (uuid != null) {
-            editor.putString("uuid", uuid);
-        }
         persistEditorOrThrow(editor, "reset to packaged bundle");
         ignoreRollback = false;
         Log.i(TAG, "Reset to packaged bundle");

package/android/src/main/java/cn/reactnative/modules/update/UpdateModule.java

@@ -25,7 +25,7 @@ import org.json.JSONTokener;
  */
 public class UpdateModule extends NativePushySpec {
     // Download URL option key, stored encoded.
-    private static final String OPTION_URL = Texts.reveal("2f07f0d0ba8e5d572e");
+    private static final String OPTION_URL = Texts.OPTION_URL_KEY;
 
     private final ReactApplicationContext reactContext;
     private final UpdateContext updateContext;

package/android/src/main/java/cn/reactnative/modules/update/VersionScopedKeys.java

@@ -0,0 +1,64 @@
+package cn.reactnative.modules.update;
+
+import java.util.ArrayList;
+import java.util.Collection;
+import java.util.List;
+
+/**
+ * The keys of the main state file that describe installed versions rather
+ * than the install itself. What a binary upgrade or a reset to the packaged
+ * bundle drops (besides the state fields applyState rewrites) is the same on
+ * every platform and generated from scripts/contract.ts (storedItems); the
+ * install's own keys — the client uuid that buckets gray releases, the
+ * persisted native config the cold-start round and crash hold run from, the
+ * round breadcrumb, the bundle hash cache keyed by package version — survive.
+ */
+final class VersionScopedKeys {
+    static final String HASH_INFO_PREFIX = "hash_";
+
+    // <generated:lifecycle> (scripts/contract.ts; bun scripts/generate-contract.ts)
+    // What a reset to the packaged bundle and a binary upgrade delete besides
+    // the state fields (scripts/contract.ts storedItems; every other item survives
+    // both: the uuid, the native config, the round breadcrumb, the bundle hash
+    // cache).
+    static final String[] RESET_KEYS = {UpdateContext.KEY_FIRST_LOAD_MARKED, SyncCoordinator.KEY_RESP_CACHE};
+    static final String[] RESET_PREFIXES = {HASH_INFO_PREFIX};
+    static final String[] UPGRADE_KEYS = {UpdateContext.KEY_FIRST_LOAD_MARKED, SyncCoordinator.KEY_RESP_CACHE};
+    static final String[] UPGRADE_PREFIXES = {HASH_INFO_PREFIX};
+    // </generated:lifecycle>
+
+    private VersionScopedKeys() {
+    }
+
+    /** The keys a reset to the packaged bundle deletes. */
+    static List<String> clearedOnReset(Collection<String> keys) {
+        return select(keys, RESET_KEYS, RESET_PREFIXES);
+    }
+
+    /** The keys a binary upgrade deletes. */
+    static List<String> clearedOnUpgrade(Collection<String> keys) {
+        return select(keys, UPGRADE_KEYS, UPGRADE_PREFIXES);
+    }
+
+    private static List<String> select(
+        Collection<String> keys, String[] exact, String[] prefixes
+    ) {
+        List<String> doomed = new ArrayList<>();
+        for (String key : keys) {
+            if (key == null) {
+                continue;
+            }
+            boolean match = false;
+            for (String name : exact) {
+                match |= key.equals(name);
+            }
+            for (String prefix : prefixes) {
+                match |= key.startsWith(prefix);
+            }
+            if (match) {
+                doomed.add(key);
+            }
+        }
+        return doomed;
+    }
+}

package/android/src/oldarch/cn/reactnative/modules/update/NativePushySpec.java

@@ -31,6 +31,7 @@ public abstract class NativePushySpec extends ReactContextBaseJavaModule {
         return getTypedExportedConstants();
     }
 
+    // <generated:spec-methods> (scripts/contract.ts; bun scripts/generate-contract.ts)
     public abstract void setLocalHashInfo(String hash, String info, Promise promise);
 
     public abstract void getLocalHashInfo(String hash, Promise promise);
@@ -66,4 +67,5 @@ public abstract class NativePushySpec extends ReactContextBaseJavaModule {
     public abstract void addListener(String eventName);
 
     public abstract void removeListeners(double count);
+    // </generated:spec-methods>
 }

package/cpp/android_jni/jni_log.h

@@ -3,7 +3,7 @@
 
 #include <android/log.h>
 
-#include "../patch_core/obscured_text.h"
+#include "../patch_core/native_texts.h"
 
 // Keep the core internal to whichever binary links it (see podspec Core).
 #pragma GCC visibility push(hidden)
@@ -13,8 +13,7 @@ namespace jni_log {
 
 // Same logcat tag as the Java layer (Texts.LOG_TAG), stored encoded.
 inline const char* Tag() {
-  static const char* const tag =
-      text::RevealStatic("2812f5d2bac6664436360afc9ba680694b3301");
+  static const char* const tag = texts::LogTag().c_str();
   return tag;
 }
 

package/cpp/android_jni/jni_natives.h

@@ -15,17 +15,19 @@ namespace jni_natives {
 // then throw a RuntimeException instead of defaulting fields.
 bool InitResultClassCache(JNIEnv* env);
 
-jint SupportedDiffVersion(JNIEnv*, jclass);
-jobject SyncStateWithBinaryVersion(JNIEnv* env, jclass, jstring package_version, jstring build_time, jobject state_result);
-jobject RunStateCore(JNIEnv* env, jclass, jint operation, jobject state_result, jstring string_arg, jboolean flag_a, jboolean flag_b);
+// <generated:prototypes> (scripts/contract.ts; bun scripts/generate-contract.ts)
+jint SupportedDiffVersion(JNIEnv* env, jclass);
+jobject SyncStateWithBinaryVersion(JNIEnv* env, jclass, jstring package_version, jstring build_time, jobject state);
+jobject RunStateCore(JNIEnv* env, jclass, jint operation, jobject state, jstring string_arg, jboolean flag_a, jboolean flag_b);
 jobjectArray ApplyArchiveDelta(JNIEnv* env, jclass, jint patch_type, jobjectArray entry_names, jbyteArray manifest_json, jstring source_root, jstring target_root, jstring origin_bundle_path, jstring bundle_patch_path, jstring bundle_output_path, jboolean host_copies_resources);
 void CleanupOldEntries(JNIEnv* env, jclass, jstring root_dir, jobjectArray keep_names, jint max_age_days, jstring trash_dir);
-jstring FlowPrepareRound(JNIEnv* env, jclass, jstring configJson, jstring envJson, jdouble randomSample);
-jstring FlowNextQueryStep(JNIEnv* env, jclass, jstring stateJson, jstring responseText);
-jstring FlowHandleResponse(JNIEnv* env, jclass, jstring responseText, jstring configJson, jstring envJson, jstring requestBody, jlong responseAtSeconds);
+jstring FlowPrepareRound(JNIEnv* env, jclass, jstring config_json, jstring env_json, jdouble random_sample);
+jstring FlowNextQueryStep(JNIEnv* env, jclass, jstring state_json, jstring response_text);
+jstring FlowStepRound(JNIEnv* env, jclass, jstring state_json, jstring event_json);
+jstring FlowHandleResponse(JNIEnv* env, jclass, jstring response_text, jstring config_json, jstring env_json, jstring request_body, jlong response_at_seconds);
 jboolean FlowConfigsEquivalent(JNIEnv* env, jclass, jstring a, jstring b);
-jstring FlowRunnableConfig(JNIEnv* env, jclass, jstring configJson);
-jstring FlowNormalizeConfiguration(JNIEnv* env, jclass, jstring optionsJson);
+jstring FlowRunnableConfig(JNIEnv* env, jclass, jstring config_json);
+jstring FlowNormalizeConfiguration(JNIEnv* env, jclass, jstring options_json);
 jboolean InstallRecordIsComplete(JNIEnv* env, jclass, jstring version_dir, jstring version_hash, jstring bundle_file_name);
 jstring InstallRecordCheckActivation(JNIEnv* env, jclass, jstring version_dir, jstring version_hash, jstring bundle_file_name, jboolean grandfathered);
 jstring InstallRecordSeal(JNIEnv* env, jclass, jstring staging_dir, jstring version_hash, jstring bundle_file_name, jstring artifact_sha256, jstring known_bundle_sha256);
@@ -33,6 +35,10 @@ jstring InstallRecordPromote(JNIEnv* env, jclass, jstring staging_dir, jstring v
 jstring InstallRecordBundleSha256(JNIEnv* env, jclass, jstring version_dir);
 jlong ArchiveCheckEntries(JNIEnv* env, jclass, jlong archive_bytes, jobjectArray names, jlongArray sizes, jlongArray compressed_sizes);
 jlongArray ArchivePlanFreeSpaceProbe(JNIEnv* env, jclass, jlong known_total, jlong written_before, jlong chunk_bytes, jlong reserved_until);
+jstring ResumePlanRequest(JNIEnv* env, jclass, jstring sidecar, jstring url, jlong partial_size);
+jstring ResumeClassifyResponse(JNIEnv* env, jclass, jint status, jlong resume_offset, jstring content_range, jstring content_encoding, jlong content_length, jstring sidecar, jstring url, jlong partial_size);
+jstring ResumeSidecar(JNIEnv* env, jclass, jstring url, jstring etag, jstring last_modified, jstring previous_sidecar, jlong total);
+// </generated:prototypes>
 
 }  // namespace jni_natives
 }  // namespace pushy

package/cpp/android_jni/jni_registration.cpp

@@ -28,6 +28,7 @@ struct NativeClass {
 
 const std::vector<NativeClass>& NativeClasses() {
   static const std::vector<NativeClass> classes = {
+  // <generated:natives> (scripts/contract.ts; bun scripts/generate-contract.ts)
   {"3919bbc3ab8a6b512c3e08f0c0b6df60452311edfbc8f780624b2d1de38c8ebc8e7e42342de4daa0",  // NativeCore
    {
        {"3d12e0e2bb9b784a302b19fdf2ba966b7c2216f2f7d4b6", "725edd",
@@ -53,6 +54,8 @@ const std::vector<NativeClass>& NativeClasses() {
         reinterpret_cast<void*>(&pushy::jni_natives::FlowPrepareRound)},
        {"3412ecc59f9e6d573b0c08fcc6", "723bfed0b88a274923311bb6e5a7826444205fcdf4daae943d432d07e18c93a9887e5a3655a2e4af83897d163a12fecae5b4705357351fae",
         reinterpret_cast<void*>(&pushy::jni_natives::FlowNextQueryStep)},
+       {"2903f1c19c847d4b26", "723bfed0b88a274923311bb6e5a7826444205fcdf4daae943d432d07e18c93a9887e5a3655a2e4af83897d163a12fecae5b4705357351fae",
+        reinterpret_cast<void*>(&pushy::jni_natives::FlowStepRound)},
        {"3216fad5a28e5a40312f13f7c5b6", "723bfed0b88a274923311bb6e5a7826444205fcdf4daae943d432d07e18c93a9887e5a3655c7c2a4949e3355371df78299937648503c43d9d8ae9a68092f0113fd9887857c422602b9d595959c72462c45ebc5afb9d44b412006e2cefd",
         reinterpret_cast<void*>(&pushy::jni_natives::FlowHandleResponse)},
        {"3918fad7a78c7b60332a15efd7bf95635e", "723bfed0b88a274923311bb6e5a7826444205fcdf4daae943d432d07e18c93a9887e5a3655a2f2",
@@ -82,6 +85,16 @@ const std::vector<NativeClass>& NativeClasses() {
        {"2a1bf5df88996d40112f1dfad38382624822", "723ddefb84c2536f",
         reinterpret_cast<void*>(&pushy::jni_natives::ArchivePlanFreeSpaceProbe)},
    }},
+  {"3919bbc3ab8a6b512c3e08f0c0b6df60452311edfbc8f780624b2d1de38c92b8896259343ee7c9ab",  // ResumePlan
+   {
+       {"2a1bf5df9c8e7950272c08", "723bfed0b88a274923311bb6e5a7826444205fcdf4daae943d432d07e18c93a9887e5a3655c18189889e6a58791ff1c3adc857554c3216f289",
+        reinterpret_cast<void*>(&pushy::jni_natives::ResumePlanRequest)},
+       {"391bf5c2bd826e5c103a0fe9d9bd8368", "723edefda48a7e446d331df7d1fca379582e0ae6a5f7b294644e6305e7cda7f2a963463800ec938fae957d4f375cfccca4802b724a2911fbd5f4a06347350152f6d6ba9621783c17ebf1dbe2bc3a7c270bf1c5eeb29a76527d3cf8dbaf8d6726",
+        reinterpret_cast<void*>(&pushy::jni_natives::ResumeClassifyResponse)},
+       {"291ef0d4ad8a7a", "723bfed0b88a274923311bb6e5a7826444205fcdf4daae943d432d07e18c93a9887e5a3655c7c2a4949e3355371df78299937648503c43d9d8ae9a68092f0113fd9887857c422602b9d595959c72462c45ebc5afb9d44b412006e2cefd",
+        reinterpret_cast<void*>(&pushy::jni_natives::ResumeSidecar)},
+   }},
+  // </generated:natives>
   };
   return classes;
 }

package/cpp/android_jni/resume_plan_jni.cpp

@@ -0,0 +1,58 @@
+// JNI surface of the resumable-download decisions (cpp/patch_core/
+// resume_plan.h) for DownloadTask.java, through ResumePlan.java. Strings in,
+// JSON text out; a null return means the core threw (memory ran out) and the
+// caller fails the download, keeping the partial and its sidecar — a C++
+// exception must never unwind through the JNI boundary.
+#include <jni.h>
+
+#include "jni_natives.h"
+
+#include <string>
+
+#include "jni_util.h"
+#include "../patch_core/resume_plan.h"
+
+using pushy::jni_util::JStringToString;
+using pushy::jni_util::ToJString;
+
+jstring pushy::jni_natives::ResumePlanRequest(JNIEnv* env, jclass, jstring sidecar,
+                                              jstring url, jlong partial_size) {
+  try {
+    return ToJString(env, pushy::resume::PlanRequestJson(
+                              JStringToString(env, sidecar), JStringToString(env, url),
+                              static_cast<long long>(partial_size)));
+  } catch (...) {
+    return nullptr;
+  }
+}
+
+jstring pushy::jni_natives::ResumeClassifyResponse(
+    JNIEnv* env, jclass, jint status, jlong resume_offset, jstring content_range,
+    jstring content_encoding, jlong content_length, jstring sidecar, jstring url,
+    jlong partial_size) {
+  try {
+    return ToJString(
+        env, pushy::resume::ClassifyResponseJson(
+                 static_cast<int>(status), static_cast<long long>(resume_offset),
+                 JStringToString(env, content_range),
+                 JStringToString(env, content_encoding),
+                 static_cast<long long>(content_length), JStringToString(env, sidecar),
+                 JStringToString(env, url), static_cast<long long>(partial_size)));
+  } catch (...) {
+    return nullptr;
+  }
+}
+
+jstring pushy::jni_natives::ResumeSidecar(JNIEnv* env, jclass, jstring url, jstring etag,
+                                          jstring last_modified, jstring previous_sidecar,
+                                          jlong total) {
+  try {
+    return ToJString(env, pushy::resume::SidecarJson(
+                              JStringToString(env, url), JStringToString(env, etag),
+                              JStringToString(env, last_modified),
+                              JStringToString(env, previous_sidecar),
+                              static_cast<long long>(total)));
+  } catch (...) {
+    return nullptr;
+  }
+}

package/cpp/android_jni/update_core_android.cpp

@@ -2,7 +2,7 @@
 
 #include "jni_log.h"
 #include "jni_natives.h"
-#include "../patch_core/obscured_text.h"
+#include "../patch_core/native_texts.h"
 
 #include <string>
 #include <vector>
@@ -105,8 +105,7 @@ bool LookupConstructor(
 }
 
 bool InitStateResultIds(JNIEnv* env) {
-  const std::string name = pushy::text::Reveal(
-      "3919bbc3ab8a6b512c3e08f0c0b6df60452311edfbc8f780624b2d1de38c93a99b63511201f9cd97878c695522");
+  const std::string& name = pushy::texts::StateResultClass();
   StateResultIds ids;
   ids.clazz = FindGlobalClass(env, name);
   if (ids.clazz == nullptr) {
@@ -131,8 +130,7 @@ bool InitStateResultIds(JNIEnv* env) {
 }
 
 bool InitCopyGroupIds(JNIEnv* env) {
-  const std::string name = pushy::text::Reveal(
-      "3919bbc3ab8a6b512c3e08f0c0b6df60452311edfbc8f780624b2d1de38c83b28a6e732301fed897878c695522");
+  const std::string& name = pushy::texts::CopyGroupResultClass();
   CopyGroupIds ids;
   ids.clazz = FindGlobalClass(env, name);
   ids.string_class = FindGlobalClass(env, "java/lang/String");

package/cpp/android_jni/update_flow_jni.cpp

@@ -14,6 +14,7 @@
 #include "../update_flow_core/flow_json.h"
 #include "../update_flow_core/native_config.h"
 #include "../update_flow_core/native_round.h"
+#include "../update_flow_core/round_engine.h"
 
 using pushy::jni_util::ToJString;
 
@@ -50,6 +51,22 @@ jstring pushy::jni_natives::FlowPrepareRound(JNIEnv* env, jclass,
   }
 }
 
+// The round driver (update_flow_core/round_engine.h). A null state starts
+// fresh; input that does not parse finishes the round inside the core, so
+// only an exception yields null.
+jstring pushy::jni_natives::FlowStepRound(JNIEnv* env, jclass,
+                                          jstring stateJson,
+                                          jstring eventJson) {
+  try {
+    return ToJString(
+        env, flowcore::StepRoundJson(
+                 pushy::jni_util::JStringToString(env, stateJson),
+                 pushy::jni_util::JStringToString(env, eventJson)));
+  } catch (...) {
+    return nullptr;
+  }
+}
+
 // A null responseText is a failed request (or none made yet).
 jstring pushy::jni_natives::FlowNextQueryStep(JNIEnv* env, jclass,
                                               jstring stateJson,

package/cpp/patch_core/archive_limits.h

@@ -23,9 +23,9 @@
 //     and CheckExtractedDirectory after, over NAPI (pushy.cpp).
 // The constants a host still compares against itself (download caps, the
 // manifest cap, the free-space margin, the streamed-bytes backstop) are
-// mirrored in android/.../ArchiveLimits.java and
-// harmony/pushy/src/main/ets/ArchiveLimits.ts;
-// scripts/check-constant-parity.js (part of `bun lint`) asserts they match.
+// generated into android/.../ArchiveLimits.java and
+// harmony/pushy/src/main/ets/ArchiveLimits.ts from scripts/contract.ts, like
+// the values below.
 
 // Keep the core internal to whichever binary links it (see podspec Core).
 #pragma GCC visibility push(hidden)
@@ -35,6 +35,7 @@ namespace archive_limits {
 
 using delta::Status;
 
+// <generated:limits> (scripts/contract.ts; bun scripts/generate-contract.ts)
 // Downloaded archive (Content-Length up front, streamed bytes as backstop).
 constexpr long long kMaxArchiveBytes = 512LL * 1024 * 1024;
 // Sum of every entry's uncompressed size.
@@ -58,6 +59,7 @@ constexpr long long kFreeDiskMarginBytes = 64LL * 1024 * 1024;
 // probe reserving at least this many bytes ahead (a single larger chunk
 // reserves its own size), so no write can ever eat into the margin.
 constexpr long long kUnknownLengthFreeSpaceProbeBytes = 8LL * 1024 * 1024;
+// </generated:limits>
 
 // Whether any component of an archive path ('/' or '\\' separated) starts
 // with install_record::kReservedPrefix. Those names belong to the SDK (the

package/cpp/patch_core/archive_patch_core.cpp

@@ -3,7 +3,7 @@
 #include <unordered_map>
 #include <utility>
 
-#include "obscured_text.h"
+#include "native_texts.h"
 
 namespace pushy {
 namespace archive_patch {
@@ -22,8 +22,7 @@ bool HasEntry(const std::vector<std::string>& entry_names, const std::string& na
 }  // namespace
 
 const std::string& DefaultBundleDeltaEntryName() {
-  static const std::string name = text::Reveal("3319f0d4b6c56a502c3b10fcdca0de7d4b3307e9");
-  return name;
+  return texts::BundleDeltaEntry();
 }
 
 EntryAction ClassifyEntry(

package/cpp/patch_core/archive_patch_core.h

@@ -14,9 +14,11 @@ namespace pushy {
 namespace archive_patch {
 
 enum class ArchivePatchType {
+  // <generated:archive-patch-types> (scripts/contract.ts; bun scripts/generate-contract.ts)
   kFull = 1,
   kPatchFromPackage = 2,
   kPatchFromPpk = 3,
+  // </generated:archive-patch-types>
 };
 
 enum class EntryAction {

package/cpp/patch_core/error_codes.h

@@ -1,17 +1,14 @@
 #ifndef PUSHY_PATCH_CORE_ERROR_CODES_H_
 #define PUSHY_PATCH_CORE_ERROR_CODES_H_
 
-// Single source of truth for the stable, machine-readable error codes shared
-// by every platform. Native modules reject promises with one of these codes
-// so the JS layer (src/error.ts UpdateErrorCode) and user loggers can
-// aggregate errors across platforms and locales.
+// The stable, machine-readable error codes shared by every platform. Native
+// modules reject promises with one of these codes so the JS layer
+// (src/error.ts UpdateErrorCode) and user loggers can aggregate errors across
+// platforms and locales.
 //
-// Mirrors that cannot include this header MUST stay in sync by hand
-// (scripts/check-constant-parity.js, part of `bun lint`, asserts they do):
-//   - src/error.ts                      (UpdateErrorCode, JS layer)
-//   - android/.../ErrorCodes.java      (Java constants)
-//   - harmony/pushy/src/main/ets/ErrorCodes.ts
-// iOS (ios/RCTPushy/*.mm) includes this header directly.
+// Generated, like its copies in src/error.ts, android/.../ErrorCodes.java and
+// harmony/pushy/src/main/ets/ErrorCodes.ts, from scripts/contract.ts. iOS
+// (ios/RCTPushy/*.mm) includes this header directly.
 //
 // Human-readable messages are NOT part of this contract: they may differ per
 // platform and locale. Only the codes are stable.
@@ -24,12 +21,14 @@
 namespace pushy {
 namespace error_codes {
 
+// <generated:error-codes> (scripts/contract.ts; bun scripts/generate-contract.ts)
 // Method options missing or malformed (blank hash/url, wrong types).
 constexpr const char* kInvalidOptions = "INVALID_OPTIONS";
 // Native download failed (network error, bad HTTP status, truncated body).
 constexpr const char* kDownloadFailed = "DOWNLOAD_FAILED";
 // Unzip or hdiff patch application failed.
-inline const char* const kDeltaFailed = text::RevealStatic("0a36c0f286b44e640b1339dd");
+inline const char* const kDeltaFailed =
+    text::RevealStatic("0a36c0f286b44e640b1339dd");
 // Local file or state persistence operation failed.
 constexpr const char* kFileOperationFailed = "FILE_OPERATION_FAILED";
 // switchVersion / setNeedUpdate state transition failed.
@@ -38,8 +37,10 @@ constexpr const char* kSwitchVersionFailed = "SWITCH_VERSION_FAILED";
 constexpr const char* kMarkSuccessFailed = "MARK_SUCCESS_FAILED";
 // reloadUpdate / restartApp failed.
 constexpr const char* kRestartFailed = "RESTART_FAILED";
-// resetToPackagedBundle failed (state wipe or cleanup could not run), or the
-// installed native module predates the method (JS-layer detection).
+// resetToPackagedBundle could not persist the reset state, or the installed
+// native module predates the method (JS-layer detection). Deleting the
+// downloaded versions afterwards is best-effort on every platform and never
+// reports this code: the reset is complete once the state is.
 constexpr const char* kResetFailed = "RESET_FAILED";
 // Stored or provided hash info is not a valid JSON object.
 constexpr const char* kInvalidHashInfo = "INVALID_HASH_INFO";
@@ -52,6 +53,7 @@ constexpr const char* kApkInstallPermissionRequired =
     "APK_INSTALL_PERMISSION_REQUIRED";
 // PackageInstaller could not create, write, commit, or continue an APK session.
 constexpr const char* kApkInstallFailed = "APK_INSTALL_FAILED";
+// </generated:error-codes>
 
 }  // namespace error_codes
 }  // namespace pushy

package/cpp/patch_core/install_record.h

@@ -31,9 +31,9 @@
 // This is the only implementation: Android (InstallRecord.java over JNI,
 // cpp/android_jni/install_record_jni.cpp), iOS (RCTPushyInstallRecord.mm)
 // and Harmony (InstallRecord.ts over NAPI, pushy.cpp) call it. The bundle
-// file name is the caller's, since it differs per platform. Constants a
-// host still mirrors are listed in scripts/check-constant-parity.js
-// (part of `bun lint`), which asserts they match.
+// file name is the caller's, since it differs per platform. The constants
+// (and the staging suffix the hosts build their unpack directory from) are
+// generated from scripts/contract.ts.
 
 // Keep the core internal to whichever binary links it (see podspec Core).
 #pragma GCC visibility push(hidden)
@@ -43,6 +43,7 @@ namespace install_record {
 
 using delta::Status;
 
+// <generated:constants> (scripts/contract.ts; bun scripts/generate-contract.ts)
 constexpr int kSchema = 1;
 constexpr const char* kFileName = ".pushy-complete";
 // Every name starting with this prefix, at any depth of a version directory,
@@ -52,6 +53,7 @@ constexpr const char* kReservedPrefix = ".pushy-";
 constexpr const char* kStagingSuffix = ".staging";
 // A record is a few hundred bytes; anything larger is not one.
 constexpr long long kMaxRecordBytes = 64 * 1024;
+// </generated:constants>
 
 // A record file's contents.
 struct Record {