@_nazmiforreal/flutter-ota 0.1.28 → 0.1.30

package/dart-src/root/lib/src/patcher_channel.dart

@@ -83,6 +83,16 @@ class PatcherChannel {
     return channel.invokeMethod<String>('currentVersion');
   }
 
+  /// Stable per-install device identifier, persisted natively (SharedPreferences).
+  ///
+  /// Generated once on first call and never changes for the app install (even
+  /// across patch updates and base APK upgrades), making it a suitable seed for
+  /// rollout cohort hashing. Throws [MissingPluginException] on non-Android
+  /// platforms and on Android bases compiled before this method existed.
+  static Future<String?> deviceId() async {
+    return channel.invokeMethod<String>('deviceId');
+  }
+
   /// Diagnostics from the last cold-start patch load.
   ///
   /// The native side returns `Map?` (see `BootDiagnosticStore`), deserialized by the
@@ -137,7 +147,10 @@ class PatcherChannel {
   }
 
   /// Checks whether a patch version (optionally with md5) is blacklisted.
-  static Future<bool> isVersionBlacklisted(String version, {String md5 = ''}) async {
+  static Future<bool> isVersionBlacklisted(
+    String version, {
+    String md5 = '',
+  }) async {
     final found = await channel.invokeMethod<bool>('isVersionBlacklisted', {
       'version': version,
       'md5': md5,

package/dart-src/root/lib/src/pkg/plugin_core/src/request_update_bundle_state.dart

@@ -1,4 +1,5 @@
-import 'package:flutter_ota_kit/src/pkg/core/flutter_ota_kit_core.dart' show Bundle;
+import 'package:flutter_ota_kit/src/pkg/core/flutter_ota_kit_core.dart'
+    show Bundle;
 
 import 'bundle_unit_of_work.dart';
 import 'bundle_unit_of_work_store.dart';

package/dart-src/root/lib/src/pkg/postgres/src/postgres_types.dart

@@ -1,4 +1,5 @@
-import 'package:flutter_ota_kit/src/pkg/core/flutter_ota_kit_core.dart' show Platform;
+import 'package:flutter_ota_kit/src/pkg/core/flutter_ota_kit_core.dart'
+    show Platform;
 
 /// Database row for the `bundles` table (snake_case columns).
 ///

package/dart-src/root/lib/src/pocketbase_update_source.dart

@@ -101,6 +101,7 @@ class PocketBaseUpdateSource {
       fingerprintHash: config.fingerprintHash,
       minBundleId: config.minBundleId,
       currentBundleId: currentBundleId,
+      cohort: config.cohort,
       timeout: timeout,
     );
   }

package/dart-src/root/lib/src/postgres_update_source.dart

@@ -89,6 +89,7 @@ class PostgresUpdateSource {
       fingerprintHash: config.fingerprintHash,
       minBundleId: config.minBundleId,
       currentBundleId: currentBundleId,
+      cohort: config.cohort,
       timeout: timeout,
     );
   }

package/dart-src/root/lib/src/shared_update_check.dart

@@ -6,9 +6,11 @@ import 'package:flutter_ota_kit/src/pkg/core/flutter_ota_kit_core.dart'
         AppVersionGetBundlesArgs,
         FingerprintGetBundlesArgs,
         GetBundlesArgs,
+        getDefaultNumericCohort,
         nilUuid,
         Platform,
         UpdateInfo,
+        UpdateStatus,
         UpdateStrategy;
 import 'package:flutter_ota_kit/src/pkg/client/flutter_ota_kit_client.dart'
     show ServerUpdateResult;
@@ -16,8 +18,24 @@ import 'package:flutter_ota_kit/src/pkg/plugin_core/flutter_ota_kit_plugin_core.
     show DatabasePlugin, StoragePlugin;
 
 import 'patch_info.dart' show PatchInfo;
+import 'patcher_channel.dart' show PatcherChannel;
 import 'app_version_resolver.dart';
 
+/// Stable rollout cohort derived from the native per-install device id.
+///
+/// Returns null on non-Android platforms, on Android bases compiled before
+/// `deviceId` existed, and in CLI/dart-VM contexts — callers must treat null
+/// as "no cohort", matching the pre-fix behaviour.
+Future<String?> _deviceCohort() async {
+  try {
+    final id = await PatcherChannel.deviceId();
+    if (id == null || id.isEmpty) return null;
+    return getDefaultNumericCohort(id);
+  } catch (_) {
+    return null;
+  }
+}
+
 final _uuidRe = RegExp(
   r'^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$',
 );
@@ -46,6 +64,7 @@ Future<ServerUpdateResult> performSharedUpdateCheck({
   required String? fingerprintHash,
   required String minBundleId,
   String? currentBundleId,
+  String? cohort,
   Duration timeout = const Duration(seconds: 10),
 }) async {
   final bundleId =
@@ -53,6 +72,10 @@ Future<ServerUpdateResult> performSharedUpdateCheck({
       ? currentBundleId
       : nilUuid;
 
+  final effectiveCohort = (cohort != null && cohort.isNotEmpty)
+      ? cohort
+      : await _deviceCohort();
+
   final GetBundlesArgs args;
   if (updateStrategy == UpdateStrategy.fingerprint) {
     args = FingerprintGetBundlesArgs(
@@ -61,6 +84,7 @@ Future<ServerUpdateResult> performSharedUpdateCheck({
       bundleId: bundleId,
       minBundleId: minBundleId,
       fingerprintHash: fingerprintHash ?? '',
+      cohort: effectiveCohort,
     );
   } else {
     final resolvedAppVersion = await resolveAppVersion(appVersion);
@@ -70,6 +94,7 @@ Future<ServerUpdateResult> performSharedUpdateCheck({
       bundleId: bundleId,
       minBundleId: minBundleId,
       appVersion: resolvedAppVersion,
+      cohort: effectiveCohort,
     );
   }
 
@@ -84,8 +109,11 @@ Future<ServerUpdateResult> performSharedUpdateCheck({
   if (info == null) return ServerUpdateResult.upToDate();
 
   final storageUri = info.storageUri;
-  // Server signals rollback with ROLLBACK status and null/empty storageUri
-  if (info.status == 'ROLLBACK') {
+  // Server signals rollback with ROLLBACK status and null/empty storageUri.
+  // NOTE: `info.status` is the `UpdateStatus` enum, not a String — comparing
+  // it to `'ROLLBACK'` is always false and silently swallowed every rollback
+  // response (including the nil-UUID "fall back to base" the SQL emits).
+  if (info.status == UpdateStatus.rollback) {
     return ServerUpdateResult(
       isUpToDate: false,
       patch: null,

package/dart-src/root/lib/src/supabase_update_source.dart

@@ -87,6 +87,7 @@ class SupabaseUpdateSource {
       fingerprintHash: config.fingerprintHash,
       minBundleId: config.minBundleId,
       currentBundleId: currentBundleId,
+      cohort: config.cohort,
       timeout: timeout,
     );
   }

package/dart-src/root/pubspec.yaml

@@ -1,6 +1,6 @@
 name: flutter_ota_kit
 description: Open-source, self-hosted code push (OTA updates) for Flutter Android. Patches Dart AOT libapp.so and assets on cold start with integrity checks and crash rollback.
-version: 0.2.1
+version: 0.2.5
 homepage: https://github.com/HYPER12755/flutter-ota-kit
 repository: https://github.com/HYPER12755/flutter-ota-kit
 issue_tracker: https://github.com/HYPER12755/flutter-ota-kit/issues
@@ -21,30 +21,30 @@ environment:
 dependencies:
   flutter:
     sdk: flutter
-  plugin_platform_interface: '>=2.0.2 <3.0.0'
-  package_info_plus: ^10.0.0
-  restart_app: ^1.9.1
+  plugin_platform_interface: '>=2.1.8 <3.0.0'
+  package_info_plus: ^10.2.1
+  restart_app: ^1.10.1
   # The npm `flutter-ota` CLI (`flutter_ota_kit_cli`) is intentionally NOT a pub
   # dependency; `dart run flutter_ota_kit:pack` is implemented in `lib/src/pack`.
-  archive: ^4.0.0
-  args: '>=2.4.0 <3.0.0'
-  crypto: '>=3.0.3 <4.0.0'
+  archive: ^4.3.0
+  args: '>=2.7.0 <3.0.0'
+  crypto: '>=3.0.7 <4.0.0'
   # Merged from the former sub-packages (core, plugin-core, client, and the
   # supabase/postgres/cloudflare/aws/pocketbase backends), now bundled directly
   # under lib/src/pkg/. Their external dependencies are unioned here.
-  http: ^1.2.0
-  path: ^1.9.0
-  mime: ^2.0.0
-  supabase: ^2.14.0
-  postgres: ^3.4.0
+  http: ^1.6.0
+  path: ^1.9.1
+  mime: ^2.1.0
+  supabase: ^2.16.1
+  postgres: ^3.5.17
   pointycastle: ^4.0.0
-  asn1lib: ^1.5.4
+  asn1lib: ^1.6.5
 
 dev_dependencies:
   flutter_test:
     sdk: flutter
   flutter_lints: ^6.0.0
-  test: ^1.25.0
+  test: ^1.31.1
 
 flutter:
   plugin:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@_nazmiforreal/flutter-ota",
-  "version": "0.1.28",
+  "version": "0.1.30",
   "description": "Command-line interface for flutter_ota_kit — an OTA code-push tool for Flutter, hot-updater compatible.",
   "bin": {
     "flutter-ota": "./bin/flutter-ota.js"