@_nazmiforreal/flutter-ota 0.1.8 → 0.1.10

package/bin/flutter-ota.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 'use strict';
 
-// Launcher for the flutter_patcher CLI.
+// Launcher for the flutter_ota_kit CLI.
 //
 // Resolves a platform+arch-specific prebuilt binary (`flutter-ota-<os>-<arch>`)
 // shipped next to this script, falling back to `dart run` of the bundled Dart
@@ -32,7 +32,7 @@ const binName = `flutter-ota-${platformName}-${archName}${ext}`;
 const binPath = path.join(binDir, binName);
 
 const sourceEntry = path.join(
-  binDir, '..', 'dart-src', 'packages', 'cli-tools', 'bin', 'flutter_patcher.dart',
+  binDir, '..', 'dart-src', 'packages', 'cli-tools', 'bin', 'flutter_ota_kit.dart',
 );
 const cliDir = path.dirname(path.dirname(sourceEntry));
 
@@ -68,7 +68,7 @@ if (fs.existsSync(binPath)) {
       console.error(
         'flutter-ota: `dart pub get` failed. Install dependencies or build ' +
           `a prebuilt manually:\n  cd ${cliDir} && dart compile exe ` +
-          `bin/flutter_patcher.dart -o ${binPath}`,
+          `bin/flutter_ota_kit.dart -o ${binPath}`,
       );
       process.exit(1);
     }

package/dart-src/packages/cli-tools/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 xuelinger
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dart-src/packages/cli-tools/README.md

@@ -0,0 +1,5 @@
+# flutter_ota_kit_cli
+
+Part of the [flutter_ota_kit](https://github.com/HYPER12755/flutter_ota_kit) OTA (over-the-air) update toolkit for Flutter Android.
+
+See the project README for usage, backend setup, and the architecture overview.

package/dart-src/packages/cli-tools/lib/src/commands/init.dart

@@ -7,7 +7,7 @@ import '../ui/ui.dart';
 
 /// `flutter_ota_kit init <backend>` — scaffold a Flutter project for OTA updates.
 ///
-/// Beyond writing the `.otat/config.json` (so every other `flutter_ota_kit` command
+/// Beyond writing the `.flutter_ota_kit/config.json` (so every other `flutter_ota_kit` command
 /// knows the backend), it also drops the files a host app actually needs:
 ///
 ///   * adds the `flutter_ota_kit` pub dependency to `pubspec.yaml`,
@@ -16,7 +16,7 @@ import '../ui/ui.dart';
 ///   * generates `lib/flutter_ota_kit_setup.dart` that wires the selected backend
 ///     and enables zero-click forced updates.
 ///
-/// All CLI working state is stored under `.otat/`.
+/// All CLI working state is stored under `.flutter_ota_kit/`.
 class InitCommand extends FlutterPatcherCommand {
   InitCommand({this.config, this.backendOverride});
 
@@ -28,7 +28,7 @@ class InitCommand extends FlutterPatcherCommand {
 
   @override
   String get description =>
-      'Scaffold flutter_ota_kit integration files + .otat config for the current '
+      'Scaffold flutter_ota_kit integration files + .flutter_ota_kit config for the current '
       'Flutter project. Usage: flutter_ota_kit init <supabase|postgres|cloudflare|aws>';
 
   @override
@@ -40,7 +40,7 @@ class InitCommand extends FlutterPatcherCommand {
     ..addOption('channel', abbr: 'c', defaultsTo: 'production', help: 'Default channel.')
     ..addOption('platform', defaultsTo: 'android', help: 'Default platform.')
     ..addOption('source', abbr: 's', defaultsTo: './dist', help: 'Default deploy source.')
-    ..addFlag('global', help: 'Write to the global ~/.otat config (no scaffolding).')
+    ..addFlag('global', help: 'Write to the global ~/.flutter_ota_kit config (no scaffolding).')
     ..addFlag('force', abbr: 'f', help: 'Overwrite an existing config.');
 
   String? _p(String label, String? current) {
@@ -209,7 +209,7 @@ class InitCommand extends FlutterPatcherCommand {
 
         if (global) {
           stdout.writeln(
-            '  ${yellow('⚠')} Secrets are stored in plaintext under ~/.otat. '
+            '  ${yellow('⚠')} Secrets are stored in plaintext under ~/.flutter_ota_kit. '
             'Restrict permissions and use a secrets manager in production.',
           );
           return;
@@ -224,6 +224,9 @@ class InitCommand extends FlutterPatcherCommand {
         stdout.writeln(
             '  2. In lib/main.dart call ${green('await setupFlutterOta();')} '
             'right after WidgetsFlutterBinding.ensureInitialized() (before runApp).');
+        stdout.writeln(
+            '     A `.env` scaffold was written — put secrets there, then build with '
+            '`--dart-define-from-file=.env` (environment overrides config).');
         if (provider == 'supabase') {
           stdout.writeln(
               '  3. Provision the backend once: ${dim('flutter_ota_kit migrate supabase')}');
@@ -242,6 +245,7 @@ class InitCommand extends FlutterPatcherCommand {
     _addPubDependency();
     _addInternetPermission();
     await _writeSetupFile(cfg, provider);
+    _writeEnvFile(cfg, provider);
     _ensureGitignore();
   }
 
@@ -306,22 +310,110 @@ class InitCommand extends FlutterPatcherCommand {
   void _ensureGitignore() {
     final gi = File('.gitignore');
     final content = gi.existsSync() ? gi.readAsStringSync() : '';
-    if (content.contains('.otat/')) {
-      step('.gitignore already ignores .otat/');
+    if (content.contains('.flutter_ota_kit/')) {
+      step('.gitignore already ignores .flutter_ota_kit/');
+      return;
+    }
+    final next = content.isEmpty ? '.flutter_ota_kit/\n' : '$content\n.flutter_ota_kit/\n';
+    gi.writeAsStringSync(next);
+    step('Added .flutter_ota_kit/ to .gitignore');
+  }
+
+  /// Write a `.env` scaffold for the selected backend. Every key is present but
+  /// empty by default; any value supplied during `init` (interactive prompt or
+  /// environment hint) is filled in so the app can be built with
+  /// `flutter run --dart-define-from-file=.env`. Secrets always land here (env),
+  /// never in committed source — the same values are also persisted to
+  /// `.flutter_ota_kit/config.json` for the CLI.
+  void _writeEnvFile(FlutterPatcherConfig cfg, String provider) {
+    final entries = <String, String>{};
+    switch (provider) {
+      case 'postgres':
+        final c = cfg.postgres;
+        entries['POSTGRES_HOST'] = c.host ?? '';
+        entries['POSTGRES_PORT'] = c.port ?? '5432';
+        entries['POSTGRES_DB'] = c.database ?? 'postgres';
+        entries['POSTGRES_USER'] = c.username ?? '';
+        entries['POSTGRES_PASSWORD'] = c.password ?? '';
+        entries['POSTGRES_SERVING_BASE_URL'] = c.servingBaseUrl ?? '';
+        entries['CHANNEL'] = cfg.channel;
+        entries['APP_VERSION'] = '1.0.0';
+      case 'cloudflare':
+        final c = cfg.cloudflare;
+        entries['CLOUDFLARE_ACCOUNT_ID'] = c.accountId ?? '';
+        entries['CLOUDFLARE_D1_DATABASE_ID'] = c.d1DatabaseId ?? '';
+        entries['CLOUDFLARE_API_TOKEN'] = c.apiToken ?? '';
+        entries['R2_BUCKET'] = c.r2Bucket ?? 'bundles';
+        entries['R2_ACCESS_KEY_ID'] = c.r2AccessKeyId ?? '';
+        entries['R2_SECRET_ACCESS_KEY'] = c.r2SecretAccessKey ?? '';
+        entries['R2_BASE_PATH'] = c.r2BasePath ?? '';
+        entries['CHANNEL'] = cfg.channel;
+        entries['APP_VERSION'] = '1.0.0';
+      case 'aws':
+        final c = cfg.aws;
+        entries['AWS_BUCKET'] = c.bucket ?? '';
+        entries['AWS_REGION'] = c.region ?? '';
+        entries['AWS_ACCESS_KEY_ID'] = c.accessKeyId ?? '';
+        entries['AWS_SECRET_ACCESS_KEY'] = c.secretAccessKey ?? '';
+        entries['AWS_ENDPOINT'] = c.endpoint ?? '';
+        entries['AWS_BASE_PATH'] = c.basePath ?? '';
+        entries['AWS_SESSION_TOKEN'] = c.sessionToken ?? '';
+        entries['CHANNEL'] = cfg.channel;
+        entries['APP_VERSION'] = '1.0.0';
+      case 'supabase':
+      default:
+        final c = cfg.supabase;
+        entries['SUPABASE_URL'] = c.url ?? '';
+        entries['SUPABASE_ANON_KEY'] = c.anonKey ?? '';
+        entries['SUPABASE_BUCKET'] = c.bucket ?? 'bundles';
+        entries['CHANNEL'] = cfg.channel;
+        entries['APP_VERSION'] = '1.0.0';
+        entries['SDK_VERSION'] = '1.0.0';
+    }
+
+    final buffer = StringBuffer();
+    buffer.writeln('# Generated by `flutter-ota init $provider`.');
+    buffer.writeln('# Fill in (or override) values, then build with:');
+    buffer.writeln('#   flutter run --dart-define-from-file=.env');
+    buffer.writeln('# Environment overrides the project config and any defaults.');
+    for (final e in entries.entries) {
+      buffer.writeln('${e.key}=${e.value}');
+    }
+
+    final file = File('.env');
+    if (file.existsSync() && !(argResults!['force'] as bool)) {
+      step('.env already exists; left untouched (use --force to overwrite)');
       return;
     }
-    final next = content.isEmpty ? '.otat/\n' : '$content\n.otat/\n';
+    file.writeAsStringSync(buffer.toString());
+    step('Wrote .env with $provider env scaffolding');
+    _ensureEnvGitignored();
+  }
+
+  void _ensureEnvGitignored() {
+    final gi = File('.gitignore');
+    final lines =
+        gi.existsSync() ? gi.readAsStringSync().split('\n') : const <String>[];
+    if (lines.contains('.env')) {
+      step('.gitignore already ignores .env');
+      return;
+    }
+    final next = '${gi.existsSync() ? gi.readAsStringSync() : ''}\n.env\n';
     gi.writeAsStringSync(next);
-    step('Added .otat/ to .gitignore');
+    step('Added .env to .gitignore');
   }
 
   String _q(String? s) => s == null ? "''" : "'${s.replaceAll("'", "\\'")}'";
 
   /// Build the body of `lib/flutter_ota_kit_setup.dart` for the selected backend.
+  ///
+  /// Non-secret values default to the project config (written during `init` under
+  /// `.flutter_ota_kit/`); every value can be overridden by a build-time
+  /// `--dart-define` / `.env` (environment wins). Secrets (keys/tokens) default
+  /// to empty and are ONLY read from the environment, never hard-coded here.
   String _setupBody(FlutterPatcherConfig cfg, String provider) {
     final channel = _q(cfg.channel);
-    final strategy = 'UpdateStrategy.appVersion';
-    final appVersion =
+    final appVersionExpr =
         "const String.fromEnvironment('APP_VERSION', defaultValue: '1.0.0')";
 
     late final String configure;
@@ -330,73 +422,73 @@ class InitCommand extends FlutterPatcherCommand {
         final c = cfg.postgres;
         configure = '''
   FlutterPatcher.configurePostgres(PostgresUpdateConfig(
-    host: ${_q(c.host)},
-    port: ${_q(c.port ?? '5432')},
-    database: ${_q(c.database)},
-    username: ${_q(c.username)},
-    password: ${_q(c.password)},
-    servingBaseUrl: ${_q(c.servingBaseUrl)},
-    channel: $channel,
+    host: const String.fromEnvironment('POSTGRES_HOST', defaultValue: ${_q(c.host ?? '')}),
+    port: int.tryParse(const String.fromEnvironment('POSTGRES_PORT', defaultValue: ${_q(c.port ?? '5432')})) ?? 5432,
+    database: const String.fromEnvironment('POSTGRES_DB', defaultValue: ${_q(c.database ?? 'postgres')}),
+    username: const String.fromEnvironment('POSTGRES_USER', defaultValue: ${_q(c.username ?? '')}),
+    password: const String.fromEnvironment('POSTGRES_PASSWORD', defaultValue: ''),
+    servingBaseUrl: const String.fromEnvironment('POSTGRES_SERVING_BASE_URL', defaultValue: ${_q(c.servingBaseUrl ?? '')}),
+    channel: const String.fromEnvironment('CHANNEL', defaultValue: $channel),
     platform: Platform.android,
-    updateStrategy: $strategy,
-    appVersion: $appVersion,
+    updateStrategy: UpdateStrategy.appVersion,
+    appVersion: $appVersionExpr,
   ));''';
       case 'cloudflare':
         final c = cfg.cloudflare;
         configure = '''
   FlutterPatcher.configureCloudflare(CloudflareUpdateConfig(
-    databaseId: ${_q(c.d1DatabaseId)},
-    accountId: ${_q(c.accountId)},
-    cloudflareApiToken: ${_q(c.apiToken)},
-    bucketName: ${_q(c.r2Bucket ?? 'bundles')},
-    accessKeyId: ${_q(c.r2AccessKeyId)},
-    secretAccessKey: ${_q(c.r2SecretAccessKey)},
-    basePath: ${_q(c.r2BasePath)},
-    channel: $channel,
+    accountId: const String.fromEnvironment('CLOUDFLARE_ACCOUNT_ID', defaultValue: ${_q(c.accountId ?? '')}),
+    databaseId: const String.fromEnvironment('CLOUDFLARE_D1_DATABASE_ID', defaultValue: ${_q(c.d1DatabaseId ?? '')}),
+    cloudflareApiToken: const String.fromEnvironment('CLOUDFLARE_API_TOKEN', defaultValue: ''),
+    bucketName: const String.fromEnvironment('R2_BUCKET', defaultValue: ${_q(c.r2Bucket ?? 'bundles')}),
+    accessKeyId: const String.fromEnvironment('R2_ACCESS_KEY_ID', defaultValue: ''),
+    secretAccessKey: const String.fromEnvironment('R2_SECRET_ACCESS_KEY', defaultValue: ''),
+    basePath: const String.fromEnvironment('R2_BASE_PATH', defaultValue: ${_q(c.r2BasePath ?? '')}),
+    channel: const String.fromEnvironment('CHANNEL', defaultValue: $channel),
     platform: Platform.android,
-    updateStrategy: $strategy,
-    appVersion: $appVersion,
+    updateStrategy: UpdateStrategy.appVersion,
+    appVersion: $appVersionExpr,
   ));''';
       case 'aws':
         final c = cfg.aws;
         configure = '''
   FlutterPatcher.configureAws(AwsUpdateConfig(
-    bucketName: ${_q(c.bucket)},
-    region: ${_q(c.region)},
-    accessKeyId: ${_q(c.accessKeyId)},
-    secretAccessKey: ${_q(c.secretAccessKey)},
-    basePath: ${_q(c.basePath)},
-    endpoint: ${_q(c.endpoint)},
-    channel: $channel,
+    bucketName: const String.fromEnvironment('AWS_BUCKET', defaultValue: ${_q(c.bucket ?? '')}),
+    region: const String.fromEnvironment('AWS_REGION', defaultValue: ${_q(c.region ?? '')}),
+    accessKeyId: const String.fromEnvironment('AWS_ACCESS_KEY_ID', defaultValue: ''),
+    secretAccessKey: const String.fromEnvironment('AWS_SECRET_ACCESS_KEY', defaultValue: ''),
+    basePath: const String.fromEnvironment('AWS_BASE_PATH', defaultValue: ${_q(c.basePath ?? '')}),
+    endpoint: const String.fromEnvironment('AWS_ENDPOINT', defaultValue: ${_q(c.endpoint ?? '')}),
+    channel: const String.fromEnvironment('CHANNEL', defaultValue: $channel),
     platform: Platform.android,
-    updateStrategy: $strategy,
-    appVersion: $appVersion,
+    updateStrategy: UpdateStrategy.appVersion,
+    appVersion: $appVersionExpr,
   ));''';
       case 'supabase':
       default:
         final c = cfg.supabase;
         configure = '''
   FlutterPatcher.configureSupabase(SupabaseUpdateConfig(
-    supabaseUrl: ${_q(c.url)},
-    anonKey: ${_q(c.anonKey)},
-    bucket: ${_q(c.bucket ?? 'bundles')},
-    channel: $channel,
+    supabaseUrl: const String.fromEnvironment('SUPABASE_URL', defaultValue: ${_q(c.url ?? '')}),
+    anonKey: const String.fromEnvironment('SUPABASE_ANON_KEY', defaultValue: ''),
+    bucket: const String.fromEnvironment('SUPABASE_BUCKET', defaultValue: ${_q(c.bucket ?? 'bundles')}),
+    channel: const String.fromEnvironment('CHANNEL', defaultValue: $channel),
     platform: Platform.android,
-    updateStrategy: $strategy,
-    appVersion: $appVersion,
-    sdkVersion: '1.0.0',
+    updateStrategy: UpdateStrategy.appVersion,
+    appVersion: $appVersionExpr,
+    sdkVersion: const String.fromEnvironment('SDK_VERSION', defaultValue: '1.0.0'),
   ));''';
     }
 
     return '''
-import 'dart:io' show Platform;
-
 import 'package:flutter_ota_kit/flutter_ota_kit.dart';
 
 // Generated by `flutter_ota_kit init $provider`.
 //
-// Secrets are hard-coded here for a zero-config quick start. For production,
-// prefer reading them from --dart-define / environment variables instead.
+// Non-secret values default to the project config (`.flutter_ota_kit/config.json`
+// set up during init); every value can be overridden by a build-time
+// `--dart-define` / `.env` (environment wins). Secrets (keys/tokens) are never
+// hard-coded here — supply them via `.env`.
 //
 // Call [setupFlutterOta] once in `main()`, after
 // WidgetsFlutterBinding.ensureInitialized() and before runApp(). It wires the

package/dart-src/packages/cli-tools/lib/src/config.dart

@@ -12,9 +12,9 @@ import 'package:path/path.dart' as p;
 /// Resolved configuration for the flutter_ota_kit CLI.
 ///
 /// Mirrors hot-updater's config precedence: explicit flags > environment
-/// variables > the project `.otat/config.json` (falling back to the global
-/// `~/.otat/config.json`). All CLI working state lives under `.otat/` so it can
-/// be git-ignored as a single unit.
+/// variables > the project `.flutter_ota_kit/config.json` (falling back to the
+/// global `~/.flutter_ota_kit/config.json`). All CLI working state lives under
+/// `.flutter_ota_kit/` so it can be git-ignored as a single unit.
 class FlutterPatcherConfig {
   FlutterPatcherConfig({
     required this.provider,
@@ -138,14 +138,14 @@ class SupabaseConfigJson {
 }
 
 /// Search order for a config file on disk. Both the project config and the
-/// global config live under a `.otat/` directory so all CLI state is grouped
-/// in one place (and can be git-ignored together).
+/// global config live under a `.flutter_ota_kit/` directory so all CLI state is
+/// grouped in one place (and can be git-ignored together).
 List<File> configCandidates() {
-  final cwd = File(p.join(Directory.current.path, '.otat', 'config.json'));
+  final cwd = File(p.join(Directory.current.path, '.flutter_ota_kit', 'config.json'));
   final home = Platform.environment['HOME'] ??
       Platform.environment['USERPROFILE'] ??
       '';
-  final global = File(p.join(home, '.otat', 'config.json'));
+  final global = File(p.join(home, '.flutter_ota_kit', 'config.json'));
   return [cwd, global];
 }
 

package/dart-src/packages/core/CHANGELOG.md

@@ -0,0 +1,3 @@
+## 0.1.0
+
+- Initial release of `flutter_ota_kit_core` as part of the flutter_ota_kit OTA toolkit.

package/dart-src/packages/core/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 xuelinger
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dart-src/packages/core/README.md

@@ -0,0 +1,23 @@
+# flutter_ota_kit_core
+
+Pure-Dart core of the [flutter_ota_kit](https://github.com/HYPER12755/flutter_ota_kit) OTA toolkit. It has **no Flutter dependency** and is shared by every other package (client, plugin-core, and all four backends).
+
+## What's inside
+
+- **Data model** — `Bundle`, `PatchInfo`, `AppUpdateInfo`, and the `Platform` / `UpdateStrategy` / status enums that describe an over-the-air update.
+- **Rollout math** — deterministic staged-rollout cohort helpers (`rollout.dart`).
+- **Semver** — `semverSatisfies(target, range)` for matching a device's app version against a bundle's rollout rule.
+- **Identifiers** — `uuidv7` generation plus a `NIL` sentinel (`uuid.dart`).
+- **Bundle artifacts** — helpers to describe and address content-addressed patch artifacts.
+
+## Usage
+
+```dart
+import 'package:flutter_ota_kit_core/flutter_ota_kit_core.dart';
+
+final ok = semverSatisfies('1.0.0', '>=1.0.0 <2.0.0'); // true
+```
+
+## License
+
+MIT — see the [project LICENSE](https://github.com/HYPER12755/flutter_ota_kit/blob/main/LICENSE).

package/dart-src/packages/core/pubspec.yaml

@@ -1,7 +1,12 @@
 name: flutter_ota_kit_core
 description: Core data model, rollout cohorts, and shared utilities for flutter_ota_kit — Dart translation of hot-updater's packages/core.
 version: 0.1.0
-publish_to: none
+publish_to: https://pub.dev
+homepage: https://github.com/HYPER12755/flutter_ota_kit
+repository: https://github.com/HYPER12755/flutter_ota_kit
+issue_tracker: https://github.com/HYPER12755/flutter_ota_kit/issues
+documentation: https://github.com/HYPER12755/flutter_ota_kit#readme
+license: MIT
 
 environment:
   sdk: '>=3.0.0 <4.0.0'

package/dart-src/plugins/aws/CHANGELOG.md

@@ -0,0 +1,3 @@
+## 0.1.0
+
+- Initial release of `flutter_ota_kit_aws` as part of the flutter_ota_kit OTA toolkit.

package/dart-src/plugins/aws/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 xuelinger
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dart-src/plugins/aws/README.md

@@ -0,0 +1,28 @@
+# flutter_ota_kit_aws
+
+AWS backend for flutter_ota_kit: bundle metadata in an **S3-backed blob
+database** and artifacts in **S3** (with optional CloudFront signed URLs). Used
+by the `flutter-ota` CLI and the Flutter SDK's `FlutterPatcher.configureAws(...)`.
+
+## What's inside
+
+- `s3Database` / `S3DatabaseConfig` — bundle metadata stored as S3 objects.
+- `s3Storage` / `AwsS3StorageConfig` — artifact storage in S3.
+- CloudFront signed URLs: `cloudfrontSignedUrl`, `verifyCloudfrontSignedUrl`,
+  and `withCloudFrontSignedUrl(...)`.
+- `AwsS3ClientLike` / `AwsCloudFrontClientLike` test seams.
+
+## Configuration (environment)
+
+| Variable | Purpose |
+| --- | --- |
+| `AWS_REGION` | S3 region (falls back to `AWS_REGION`/`AWS_DEFAULT_REGION` if unset). |
+| `AWS_BUCKET` | Target bucket name. |
+| `AWS_ACCESS_KEY_ID` / `AWS_SECRET_ACCESS_KEY` | Credentials. |
+| `AWS_ENDPOINT` | Optional custom endpoint (e.g. MinIO). |
+| `AWS_BASE_PATH` | Optional key prefix. |
+| `AWS_SESSION_TOKEN` | Optional temporary session token. |
+
+## License
+
+MIT.

package/dart-src/plugins/aws/pubspec.yaml

@@ -1,16 +1,19 @@
 name: flutter_ota_kit_aws
 description: AWS S3 storage + S3/DynamoDB database plugins for flutter_ota_kit (faithful port of hot-updater plugins/aws).
 version: 0.1.0
-publish_to: none
+publish_to: https://pub.dev
+homepage: https://github.com/HYPER12755/flutter_ota_kit
+repository: https://github.com/HYPER12755/flutter_ota_kit
+issue_tracker: https://github.com/HYPER12755/flutter_ota_kit/issues
+documentation: https://github.com/HYPER12755/flutter_ota_kit#readme
+license: MIT
 
 environment:
   sdk: ">=3.3.0 <4.0.0"
 
 dependencies:
-  flutter_ota_kit_core:
-    path: ../../packages/core
-  flutter_ota_kit_plugin_core:
-    path: ../../plugins/plugin-core
+  flutter_ota_kit_core: ^0.1.0
+  flutter_ota_kit_plugin_core: ^0.0.1
   crypto: ^3.0.0
   http: ^1.2.0
   path: ^1.9.0

package/dart-src/plugins/cloudflare/CHANGELOG.md

@@ -0,0 +1,3 @@
+## 0.1.0
+
+- Initial release of `flutter_ota_kit_cloudflare` as part of the flutter_ota_kit OTA toolkit.

package/dart-src/plugins/cloudflare/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 xuelinger
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dart-src/plugins/cloudflare/README.md

@@ -0,0 +1,25 @@
+# flutter_ota_kit_cloudflare
+
+Cloudflare backend for flutter_ota_kit: bundle metadata in **D1** (SQLite-at-edge)
+and artifacts in **R2** (S3-compatible storage). Used by the `flutter-ota` CLI and
+the Flutter SDK's `FlutterPatcher.configureCloudflare(...)`.
+
+## What's inside
+
+- `d1Database` / `D1DatabaseConfig` — bundle metadata in D1.
+  `CloudflareWorkerDatabaseConfig` / `cloudflareWorkerDatabase` for the
+  Worker-facing variant.
+- `r2Storage` / `R2S3StorageConfig` — artifact storage in R2 (AWS SigV4).
+- D1 row mappers and `D1ClientFactory` / `R2S3ClientFactory` test seams.
+
+## Configuration (environment)
+
+| Variable | Purpose |
+| --- | --- |
+| `CLOUDFLARE_ACCOUNT_ID` | Cloudflare account id. |
+| `CLOUDFLARE_API_TOKEN` | API token with D1 read/write + R2 permissions. |
+| R2 access/secret keys + bucket | Supplied via `R2S3StorageConfig` (see the CLI `init` and `doc/backends.md`). |
+
+## License
+
+MIT.

package/dart-src/plugins/cloudflare/pubspec.yaml

@@ -1,16 +1,19 @@
 name: flutter_ota_kit_cloudflare
 description: Cloudflare D1 + R2 storage plugins for flutter_ota_kit (faithful port of hot-updater plugins/cloudflare).
 version: 0.1.0
-publish_to: none
+publish_to: https://pub.dev
+homepage: https://github.com/HYPER12755/flutter_ota_kit
+repository: https://github.com/HYPER12755/flutter_ota_kit
+issue_tracker: https://github.com/HYPER12755/flutter_ota_kit/issues
+documentation: https://github.com/HYPER12755/flutter_ota_kit#readme
+license: MIT
 
 environment:
   sdk: ">=3.3.0 <4.0.0"
 
 dependencies:
-  flutter_ota_kit_core:
-    path: ../../packages/core
-  flutter_ota_kit_plugin_core:
-    path: ../../plugins/plugin-core
+  flutter_ota_kit_core: ^0.1.0
+  flutter_ota_kit_plugin_core: ^0.0.1
   crypto: ^3.0.0
   http: ^1.2.0
   path: ^1.9.0

package/dart-src/plugins/plugin-core/CHANGELOG.md

@@ -0,0 +1,3 @@
+## 0.0.1
+
+- Initial release of `flutter_ota_kit_plugin_core` as part of the flutter_ota_kit OTA toolkit.

package/dart-src/plugins/plugin-core/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 xuelinger
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dart-src/plugins/plugin-core/README.md

@@ -0,0 +1,21 @@
+# flutter_ota_kit_plugin_core
+
+Internal plugin abstractions shared by the flutter_ota_kit backend plugins
+(`flutter_ota_kit_supabase`, `flutter_ota_kit_postgres`,
+`flutter_ota_kit_cloudflare`, `flutter_ota_kit_aws`).
+
+## What's inside
+
+- The `Database`, `Storage`, and build interfaces that each backend implements.
+- Factory helpers: `createDatabasePlugin`, `createStoragePlugin`,
+  `createBlobDatabasePlugin`.
+- Pagination, content-addressed asset addressing, and storage/bundle layout
+  helpers used to keep all backends wire-compatible with the same bundle schema.
+
+This package is a building block for the concrete backends and the `flutter-ota`
+CLI; application code normally consumes the higher-level `flutter_ota_kit` API
+instead.
+
+## License
+
+MIT.

package/dart-src/plugins/plugin-core/pubspec.yaml

@@ -1,13 +1,18 @@
 name: flutter_ota_kit_plugin_core
 description: Plugin core abstractions for flutter_ota_kit — database, storage, and build interfaces.
 version: 0.0.1
+publish_to: https://pub.dev
+homepage: https://github.com/HYPER12755/flutter_ota_kit
+repository: https://github.com/HYPER12755/flutter_ota_kit
+issue_tracker: https://github.com/HYPER12755/flutter_ota_kit/issues
+documentation: https://github.com/HYPER12755/flutter_ota_kit#readme
+license: MIT
 
 environment:
   sdk: ">=3.3.0 <4.0.0"
 
 dependencies:
-  flutter_ota_kit_core:
-    path: ../../packages/core
+  flutter_ota_kit_core: ^0.1.0
   mime: ^1.0.0
 
 dev_dependencies:

package/dart-src/plugins/postgres/CHANGELOG.md

@@ -0,0 +1,3 @@
+## 0.1.0
+
+- Initial release of `flutter_ota_kit_postgres` as part of the flutter_ota_kit OTA toolkit.

package/dart-src/plugins/postgres/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 xuelinger
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dart-src/plugins/postgres/README.md

@@ -0,0 +1,29 @@
+# flutter_ota_kit_postgres
+
+Postgres backend for flutter_ota_kit: bundle metadata in a Postgres database and
+artifacts in the bytea-backed storage plugin. Used by the `flutter-ota` CLI and
+the Flutter SDK's `FlutterPatcher.configurePostgres(...)`.
+
+## What's inside
+
+- `postgresDatabase` / `PostgresConfig` — bundle read/write over a Postgres
+  connection.
+- `postgresStorage` / `PostgresStorageConfig` / `resolvePostgresStorageClient` —
+  artifact storage.
+- `getUpdateInfo` — resolve the latest applicable bundle for a device.
+- Row mappers (`PostgresBundleRow`, `PostgresBundlePatchRow`,
+  `bundleToRowValues`, `bundleToPatchRows`) for the `bundles` / `bundle_patches`
+  tables.
+
+## Configuration (environment)
+
+| Variable | Purpose |
+| --- | --- |
+| `DATABASE_URL` | Full Postgres connection string (preferred). |
+| `POSTGRES_HOST` / `POSTGRES_PORT` / `POSTGRES_DB` / `POSTGRES_USER` / `POSTGRES_PASSWORD` / `POSTGRES_SSLMODE` | Individual connection fields. |
+| `POSTGRES_SERVING_BASE_URL` | HTTP proxy/base URL in front of the storage table for artifact downloads. |
+| `POSTGRES_BASE_PATH` | Optional object-key prefix. |
+
+## License
+
+MIT.

package/dart-src/plugins/postgres/pubspec.yaml

@@ -1,16 +1,19 @@
 name: flutter_ota_kit_postgres
 description: Postgres plugin for flutter_ota_kit — database backend.
 version: 0.1.0
-publish_to: none
+publish_to: https://pub.dev
+homepage: https://github.com/HYPER12755/flutter_ota_kit
+repository: https://github.com/HYPER12755/flutter_ota_kit
+issue_tracker: https://github.com/HYPER12755/flutter_ota_kit/issues
+documentation: https://github.com/HYPER12755/flutter_ota_kit#readme
+license: MIT
 
 environment:
   sdk: ">=3.3.0 <4.0.0"
 
 dependencies:
-  flutter_ota_kit_core:
-    path: ../../packages/core
-  flutter_ota_kit_plugin_core:
-    path: ../../plugins/plugin-core
+  flutter_ota_kit_core: ^0.1.0
+  flutter_ota_kit_plugin_core: ^0.0.1
   postgres: ^3.4.0
 
 dev_dependencies:

package/dart-src/plugins/supabase/CHANGELOG.md

@@ -0,0 +1,3 @@
+## 0.1.0
+
+- Initial release of `flutter_ota_kit_supabase` as part of the flutter_ota_kit OTA toolkit.

package/dart-src/plugins/supabase/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 xuelinger
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dart-src/plugins/supabase/README.md

@@ -0,0 +1,53 @@
+# flutter_ota_kit_supabase
+
+Supabase backend for [flutter_ota_kit](https://github.com/HYPER12755/flutter_ota_kit).
+Implements the bundle **database** (PostgREST `bundles` table) and **storage**
+(signed URLs) used both by the `flutter-ota` CLI and by the Flutter SDK's
+`FlutterPatcher.configureSupabase(...)`.
+
+## What's inside
+
+- `supabaseDatabase` / `SupabaseDatabaseConfig` — read/update bundles over the
+  Supabase REST (PostgREST) API.
+- `supabaseStorage` / `SupabaseStorageConfig` / `parseSupabaseStorageUri` —
+  resolve presigned download URLs.
+- Edge-function variants: `supabaseEdgeFunctionDatabase`,
+  `supabaseEdgeFunctionStorage` (extra security boundary via a Supabase Edge
+  Function instead of direct client access).
+- `SupabaseClientFactory` / `createSupabaseHttpClient` — test seams / custom
+  HTTP clients.
+- `SupabaseServiceRoleConfig` — holds the service-role or anon key with a
+  `resolveKey()` helper.
+
+## Configuration (environment)
+
+| Variable | Purpose |
+| --- | --- |
+| `SUPABASE_URL` | Project REST URL (`https://<ref>.supabase.co`). |
+| `SUPABASE_ANON_KEY` | Public anon key (RLS-protected reads). |
+| `SUPABASE_SERVICE_ROLE_KEY` | Service-role key (migrations / writes). |
+| `SUPABASE_BUCKET` | Storage bucket holding patch artifacts. |
+| `SUPABASE_BASE_PATH` | Optional prefix for stored objects. |
+| `SUPABASE_DATABASE_URL` | Connection string for migrations (alternative). |
+
+## Usage (Flutter SDK)
+
+```dart
+import 'package:flutter_ota_kit/flutter_ota_kit.dart';
+
+FlutterPatcher.configureSupabase(SupabaseUpdateConfig(
+  supabaseUrl: 'https://<ref>.supabase.co',
+  anonKey: '<anon>',
+  bucket: 'bundles',
+  channel: 'production',
+  platform: Platform.android,
+  updateStrategy: UpdateStrategy.appVersion,
+  appVersion: '1.0.0',
+));
+```
+
+See [doc/backends.md](https://github.com/HYPER12755/flutter_ota_kit/blob/main/doc/backends.md).
+
+## License
+
+MIT.

package/dart-src/plugins/supabase/pubspec.yaml

@@ -1,16 +1,19 @@
 name: flutter_ota_kit_supabase
 description: Supabase plugin for flutter_ota_kit — database + storage backends.
-version: 0.1.0
-publish_to: none
+version: 0.1.1
+publish_to: https://pub.dev
+homepage: https://github.com/HYPER12755/flutter_ota_kit
+repository: https://github.com/HYPER12755/flutter_ota_kit
+issue_tracker: https://github.com/HYPER12755/flutter_ota_kit/issues
+documentation: https://github.com/HYPER12755/flutter_ota_kit#readme
+license: MIT
 
 environment:
   sdk: ">=3.3.0 <4.0.0"
 
 dependencies:
-  flutter_ota_kit_core:
-    path: ../../packages/core
-  flutter_ota_kit_plugin_core:
-    path: ../../plugins/plugin-core
+  flutter_ota_kit_core: ^0.1.0
+  flutter_ota_kit_plugin_core: ^0.0.1
   http: ^1.2.0
   supabase: ^2.14.0
 

package/dart-src/plugins/supabase/supabase/migrations/20260520014100_hot-updater_rls.sql

@@ -46,3 +46,14 @@ ALTER FUNCTION public.get_update_info_by_app_version(
   text
 )
   SET search_path = public, pg_catalog;
+
+-- OTA update checks are unauthenticated by design (the device only carries the
+-- anon key), so bundle metadata must be publicly readable. hot-updater's hosted
+-- Supabase flow relies on these policies existing.
+CREATE POLICY "allow public read bundles" ON public.bundles FOR SELECT USING (true);
+CREATE POLICY "allow public read bundle_patches" ON public.bundle_patches FOR SELECT USING (true);
+
+-- Allow anon/authenticated to resolve signed download URLs for the bundles bucket.
+CREATE POLICY "public bundles read" ON storage.objects
+  FOR SELECT TO anon, authenticated
+  USING (bucket_id = 'bundles');

package/migrations/supabase/20260520014100_hot-updater_rls.sql

@@ -46,3 +46,14 @@ ALTER FUNCTION public.get_update_info_by_app_version(
   text
 )
   SET search_path = public, pg_catalog;
+
+-- OTA update checks are unauthenticated by design (the device only carries the
+-- anon key), so bundle metadata must be publicly readable. hot-updater's hosted
+-- Supabase flow relies on these policies existing.
+CREATE POLICY "allow public read bundles" ON public.bundles FOR SELECT USING (true);
+CREATE POLICY "allow public read bundle_patches" ON public.bundle_patches FOR SELECT USING (true);
+
+-- Allow anon/authenticated to resolve signed download URLs for the bundles bucket.
+CREATE POLICY "public bundles read" ON storage.objects
+  FOR SELECT TO anon, authenticated
+  USING (bucket_id = 'bundles');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@_nazmiforreal/flutter-ota",
-  "version": "0.1.8",
+  "version": "0.1.10",
   "description": "Command-line interface for flutter_ota_kit — an OTA code-push tool for Flutter, hot-updater compatible.",
   "bin": {
     "flutter-ota": "./bin/flutter-ota.js"