@otakit/capacitor-updater 1.0.0 → 1.2.0

package/android/src/main/java/com/updatekit/updater/UpdaterPlugin.java

@@ -21,6 +21,7 @@ import java.nio.charset.StandardCharsets;
 import java.security.MessageDigest;
 import java.util.concurrent.ExecutorService;
 import java.util.concurrent.Executors;
+import java.util.concurrent.atomic.AtomicBoolean;
 
 @CapacitorPlugin(name = "OtaKit")
 public class UpdaterPlugin extends Plugin {
@@ -38,12 +39,19 @@ public class UpdaterPlugin extends Plugin {
   private String updateUrl;
   private String appId;
   private String channel;
+  private String runtimeVersion;
   private java.util.List<ManifestVerifier.KeyEntry> manifestKeys = new java.util.ArrayList<>();
+  private long checkIntervalMs = 600_000;
+  private final AtomicBoolean checkInProgress = new AtomicBoolean(false);
   private static final String DEFAULT_UPDATE_URL = "https://www.otakit.app/api/v1";
   private static final String API_PATH_SUFFIX = "/api/v1";
   private static final String UPDATE_MODE_MANUAL = "manual";
   private static final String UPDATE_MODE_NEXT_LAUNCH = "next-launch";
+  private static final String UPDATE_MODE_NEXT_RESUME = "next-resume";
   private static final String UPDATE_MODE_IMMEDIATE = "immediate";
+  private static final String KEY_LAST_CHECK_TIMESTAMP = "last_check_timestamp";
+  private static final String TRIGGER_LAUNCH = "launch";
+  private static final String TRIGGER_RESUME = "resume";
 
   @Override
   public void load() {
@@ -64,13 +72,14 @@ public class UpdaterPlugin extends Plugin {
       }
     } catch (PackageManager.NameNotFoundException ignored) {}
 
-    this.store = new BundleStore(getContext(), builtinVersion, nativeBuild);
     this.updateUrl = resolveUpdateUrl(
       getConfig().getString("serverUrl"),
       System.getenv("OTAKIT_SERVER_URL")
     );
     this.appId = getConfig().getString("appId");
     this.channel = trimToNull(getConfig().getString("channel"));
+    this.runtimeVersion = trimToNull(getConfig().getString("runtimeVersion"));
+    this.store = new BundleStore(getContext(), builtinVersion, nativeBuild, this.runtimeVersion);
     this.allowInsecureUrls = getConfig().getBoolean("allowInsecureUrls", false);
     String configuredUpdateMode = getConfig().getString("updateMode", UPDATE_MODE_NEXT_LAUNCH);
     this.updateMode = resolveUpdateMode(configuredUpdateMode);
@@ -112,6 +121,9 @@ public class UpdaterPlugin extends Plugin {
     }
 
     this.appReadyTimeoutMs = Math.max(1000, getConfig().getInt("appReadyTimeout", 10_000));
+    this.checkIntervalMs = Math.max(600_000, getConfig().getInt("checkInterval", 600_000));
+
+    pruneIncompatibleBundles();
 
     BundleInfo current = store.getCurrentBundle();
     if (current.status == BundleStatus.TRIAL) {
@@ -135,26 +147,84 @@ public class UpdaterPlugin extends Plugin {
     }
 
     if (isAutomaticUpdateMode()) {
-      startAutoUpdate();
+      runAutomaticUpdate(TRIGGER_LAUNCH);
     }
   }
 
-  private void startAutoUpdate() {
-    executor.execute(() -> {
-      try {
-        BundleInfo downloaded = performCheckAndDownload(null, true);
-        if (UPDATE_MODE_IMMEDIATE.equals(updateMode) && downloaded != null) {
+  @Override
+  protected void handleOnResume() {
+    super.handleOnResume();
+    if (isAutomaticUpdateMode()) {
+      runAutomaticUpdate(TRIGGER_RESUME);
+    }
+  }
+
+  private void runAutomaticUpdate(String trigger) {
+    // Resume-only guards
+    if (TRIGGER_RESUME.equals(trigger)) {
+      if (UPDATE_MODE_MANUAL.equals(updateMode)) return;
+
+      // next-resume and immediate: activate staged bundle on resume without server check
+      if ((UPDATE_MODE_NEXT_RESUME.equals(updateMode) || UPDATE_MODE_IMMEDIATE.equals(updateMode))) {
+        String stagedId = store.getStagedBundleId();
+        if (stagedId != null && store.getBundle(stagedId) != null) {
           activateStagedBundleForReload();
           reloadWebView();
+          return;
         }
-      } catch (Exception e) {
-        if (UPDATE_MODE_IMMEDIATE.equals(updateMode)) {
-          android.util.Log.w("UpdateKit", "immediate startup update failed", e);
+      }
+
+      if (shouldThrottleCheck()) return;
+    }
+
+    // Acquire in-flight guard (submit-time)
+    if (!checkInProgress.compareAndSet(false, true)) return;
+
+    if (UPDATE_MODE_IMMEDIATE.equals(updateMode)) {
+      // Immediate: check+download, activate if found
+      executor.execute(() -> {
+        try {
+          BundleInfo result = performCheckAndDownload(null, true);
+          recordCheckTimestamp();
+          if (result != null) {
+            activateStagedBundleForReload();
+            reloadWebView();
+          }
+        } catch (Exception e) {
+          android.util.Log.w("OtaKit", "immediate update failed (" + trigger + ")", e);
+        } finally {
+          checkInProgress.set(false);
         }
+      });
+      return;
+    }
+
+    // next-launch / next-resume: background check+download (fire-and-forget)
+    executor.execute(() -> {
+      try {
+        performCheckAndDownload(null, true);
+        recordCheckTimestamp();
+      } catch (Exception ignored) {
+        // Check failed — timestamp not recorded, will retry on next trigger
+      } finally {
+        checkInProgress.set(false);
       }
     });
   }
 
+  private boolean shouldThrottleCheck() {
+    long lastCheck = store.getPrefs().getLong(KEY_LAST_CHECK_TIMESTAMP, 0);
+    if (lastCheck <= 0) return false;
+    long elapsed = System.currentTimeMillis() - lastCheck;
+    return elapsed < checkIntervalMs;
+  }
+
+  private void recordCheckTimestamp() {
+    store.getPrefs().edit()
+      .putLong(KEY_LAST_CHECK_TIMESTAMP, System.currentTimeMillis())
+      .apply();
+  }
+
   private boolean shouldActivateStagedOnLaunch() {
     return !UPDATE_MODE_MANUAL.equals(updateMode);
   }
@@ -175,12 +245,15 @@ public class UpdaterPlugin extends Plugin {
     if (UPDATE_MODE_MANUAL.equals(raw)) {
       return UPDATE_MODE_MANUAL;
     }
+    if (UPDATE_MODE_NEXT_RESUME.equals(raw)) {
+      return UPDATE_MODE_NEXT_RESUME;
+    }
     if (UPDATE_MODE_IMMEDIATE.equals(raw)) {
       return UPDATE_MODE_IMMEDIATE;
     }
 
     android.util.Log.w(
-      "UpdateKit",
+      "OtaKit",
       "Unknown updateMode '" + raw + "', defaulting to 'next-launch'"
     );
     return UPDATE_MODE_NEXT_LAUNCH;
@@ -209,10 +282,37 @@ public class UpdaterPlugin extends Plugin {
 
   @PluginMethod
   public void check(PluginCall call) {
+    // Respect throttle — return staged bundle as a LatestVersion if available, else null
+    if (shouldThrottleCheck() || !checkInProgress.compareAndSet(false, true)) {
+      String stagedId = store.getStagedBundleId();
+      if (stagedId != null) {
+        BundleInfo staged = store.getBundle(stagedId);
+        if (staged != null) {
+          JSObject result = new JSObject();
+          result.put("version", staged.version);
+          result.put("url", "");
+          result.put("sha256", staged.sha256 != null ? staged.sha256 : "");
+          result.put("size", 0);
+          result.put("downloaded", true);
+          if (staged.runtimeVersion != null) {
+            result.put("runtimeVersion", staged.runtimeVersion);
+          }
+          if (staged.releaseId != null) {
+            result.put("releaseId", staged.releaseId);
+          }
+          call.resolve(result);
+          return;
+        }
+      }
+      call.resolve((JSObject) null);
+      return;
+    }
     String targetChannel = resolveTargetChannel(null);
     executor.execute(() -> {
       try {
         ManifestClient.LatestManifest latest = fetchLatest(targetChannel);
+        // check() does NOT record timestamp — only download() and automatic paths do.
+        // This keeps check() -> download() working without the throttle blocking download().
         if (latest == null) {
           call.resolve((JSObject) null);
         } else {
@@ -221,15 +321,31 @@ public class UpdaterPlugin extends Plugin {
         }
       } catch (Exception e) {
         call.reject("check failed: " + e.getMessage());
+      } finally {
+        checkInProgress.set(false);
       }
     });
   }
 
   @PluginMethod
   public void download(PluginCall call) {
+    // Respect throttle — return staged info if available, else null
+    if (shouldThrottleCheck() || !checkInProgress.compareAndSet(false, true)) {
+      String stagedId = store.getStagedBundleId();
+      if (stagedId != null) {
+        BundleInfo staged = store.getBundle(stagedId);
+        if (staged != null) {
+          call.resolve(staged.toJSObject());
+          return;
+        }
+      }
+      call.resolve((JSObject) null);
+      return;
+    }
     executor.execute(() -> {
       try {
         BundleInfo bundle = performCheckAndDownload(null, true);
+        recordCheckTimestamp();
         if (bundle == null) {
           call.resolve((JSObject) null);
         } else {
@@ -237,6 +353,8 @@ public class UpdaterPlugin extends Plugin {
         }
       } catch (Exception e) {
         call.reject("download failed: " + e.getMessage());
+      } finally {
+        checkInProgress.set(false);
       }
     });
   }
@@ -402,7 +520,7 @@ public class UpdaterPlugin extends Plugin {
       channel,
       current.version,
       current.releaseId,
-      store.getNativeBuild(),
+      runtimeVersion,
       "android",
       allowInsecureUrls,
       manifestKeys
@@ -419,6 +537,12 @@ public class UpdaterPlugin extends Plugin {
       return null;
     }
 
+    if (!isCompatibleRuntime(latest.runtimeVersion)) {
+      throw new IllegalStateException(
+        "Manifest runtimeVersion does not match the installed app runtime"
+      );
+    }
+
     BundleInfo staged = findMatchingStagedBundle(latest, targetChannel);
     if (emitEvents) {
       notifyListeners("updateAvailable", manifestToJSObject(latest, staged != null));
@@ -434,6 +558,7 @@ public class UpdaterPlugin extends Plugin {
         latest.version,
         latest.sha256,
         latest.size,
+        latest.runtimeVersion,
         targetChannel,
         latest.releaseId
       );
@@ -447,6 +572,7 @@ public class UpdaterPlugin extends Plugin {
           refreshed.version,
           refreshed.sha256,
           refreshed.size,
+          refreshed.runtimeVersion,
           targetChannel,
           refreshed.releaseId
         );
@@ -469,7 +595,7 @@ public class UpdaterPlugin extends Plugin {
 
   private BundleInfo downloadAndStage(URL url, String version, String expectedSha256)
     throws Exception {
-    return downloadAndStage(url, version, expectedSha256, 0, null, null);
+    return downloadAndStage(url, version, expectedSha256, 0, null, null, null);
   }
 
   private BundleInfo downloadAndStage(
@@ -477,6 +603,7 @@ public class UpdaterPlugin extends Plugin {
     String version,
     String expectedSha256,
     int expectedSize,
+    String runtimeVersion,
     String channel,
     String releaseId
   ) throws Exception {
@@ -524,6 +651,7 @@ public class UpdaterPlugin extends Plugin {
       BundleInfo info = new BundleInfo(
         bundleId,
         version,
+        runtimeVersion,
         BundleStatus.PENDING,
         System.currentTimeMillis(),
         expectedSha256,
@@ -619,6 +747,12 @@ public class UpdaterPlugin extends Plugin {
       store.setStagedBundleId(null);
       return store.getCurrentBundle();
     }
+    if (!isCompatibleRuntime(staged)) {
+      try {
+        store.deleteBundle(staged.id);
+      } catch (Exception ignored) {}
+      return store.getCurrentBundle();
+    }
 
     store.setCurrentBundleId(staged.id);
     store.setStagedBundleId(null);
@@ -636,6 +770,12 @@ public class UpdaterPlugin extends Plugin {
       store.setStagedBundleId(null);
       return;
     }
+    if (!isCompatibleRuntime(staged)) {
+      try {
+        store.deleteBundle(staged.id);
+      } catch (Exception ignored) {}
+      return;
+    }
 
     store.setCurrentBundleId(staged.id);
     store.setStagedBundleId(null);
@@ -763,12 +903,12 @@ public class UpdaterPlugin extends Plugin {
     object.put("sha256", latest.sha256);
     object.put("size", latest.size);
     object.put("downloaded", downloaded);
+    if (latest.runtimeVersion != null) {
+      object.put("runtimeVersion", latest.runtimeVersion);
+    }
     if (latest.releaseId != null) {
       object.put("releaseId", latest.releaseId);
     }
-    if (latest.minNativeBuild != null) {
-      object.put("minNativeBuild", latest.minNativeBuild);
-    }
     return object;
   }
 
@@ -791,6 +931,10 @@ public class UpdaterPlugin extends Plugin {
       return null;
     }
 
+    if (!java.util.Objects.equals(trimToNull(staged.runtimeVersion), trimToNull(latest.runtimeVersion))) {
+      return null;
+    }
+
     if (
       latest.releaseId != null &&
       staged.releaseId != null &&
@@ -950,6 +1094,29 @@ public class UpdaterPlugin extends Plugin {
     );
   }
 
+  private void pruneIncompatibleBundles() {
+    for (BundleInfo bundle : store.listDownloadedBundleInfos()) {
+      if (!isCompatibleRuntime(bundle)) {
+        try {
+          store.deleteBundle(bundle.id);
+        } catch (Exception ignored) {}
+      }
+    }
+
+    BundleInfo failed = store.getFailedBundle();
+    if (failed != null && !isCompatibleRuntime(failed)) {
+      store.setFailedBundle(null);
+    }
+  }
+
+  private boolean isCompatibleRuntime(String bundleRuntimeVersion) {
+    return java.util.Objects.equals(trimToNull(bundleRuntimeVersion), runtimeVersion);
+  }
+
+  private boolean isCompatibleRuntime(BundleInfo bundle) {
+    return isCompatibleRuntime(bundle.runtimeVersion);
+  }
+
   private long getFreeDiskSpace() {
     try {
       android.os.StatFs statFs = new android.os.StatFs(

package/dist/esm/definitions.d.ts

@@ -19,6 +19,8 @@ export interface BundleInfo {
     id: string;
     /** Semantic version string */
     version: string;
+    /** Native compatibility lane for this bundle. */
+    runtimeVersion?: string;
     /** Current status of the bundle */
     status: BundleStatus;
     /** ISO timestamp when bundle was downloaded */
@@ -33,6 +35,8 @@ export interface BundleInfo {
 export interface LatestVersion {
     /** Version string */
     version: string;
+    /** Native compatibility lane for this update. */
+    runtimeVersion?: string;
     /** Download URL */
     url: string;
     /** SHA-256 checksum */
@@ -43,8 +47,6 @@ export interface LatestVersion {
     downloaded?: boolean;
     /** Release history ID associated with this manifest */
     releaseId?: string;
-    /** Minimum native build required */
-    minNativeBuild?: number;
 }
 export interface BundleListResult {
     bundles: BundleInfo[];
@@ -57,7 +59,7 @@ export interface OtaKitState {
 export interface OtaKitDebugState extends OtaKitState {
     fallback: BundleInfo;
 }
-export type OtaKitUpdateMode = 'manual' | 'next-launch' | 'immediate';
+export type OtaKitUpdateMode = 'manual' | 'next-launch' | 'next-resume' | 'immediate';
 export interface OtaKitManifestKey {
     kid: string;
     key: string;
@@ -70,8 +72,16 @@ export interface OtaKitConfig {
     appId: string;
     /** Optional named release track. Omit to use the base channel. */
     channel?: string;
+    /** Optional native compatibility lane. Set this when a new store build should start a new OTA line. */
+    runtimeVersion?: string;
     /** Overall update behavior. Defaults to next-launch. */
     updateMode?: OtaKitUpdateMode;
+    /**
+     * Minimum milliseconds between automatic update checks.
+     * Applies to both resume-triggered and manual check()/download() calls.
+     * Debug APIs bypass this throttle. Defaults to 600000 (10 min).
+     */
+    checkInterval?: number;
     /** Milliseconds to wait for notifyAppReady(). Defaults to 10000. */
     appReadyTimeout?: number;
     /** Custom API base URL for self-hosted or custom servers. */

package/dist/esm/definitions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"definitions.d.ts","sourceRoot":"","sources":["../../src/definitions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAE5D;;GAEG;AACH,oBAAY,YAAY;IACtB,+BAA+B;IAC/B,OAAO,YAAY;IACnB,iDAAiD;IACjD,OAAO,YAAY;IACnB,mCAAmC;IACnC,KAAK,UAAU;IACf,wBAAwB;IACxB,OAAO,YAAY;IACnB,yDAAyD;IACzD,KAAK,UAAU;CAChB;AAED,MAAM,WAAW,UAAU;IACzB,+BAA+B;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,8BAA8B;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,mCAAmC;IACnC,MAAM,EAAE,YAAY,CAAC;IACrB,+CAA+C;IAC/C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iCAAiC;IACjC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qDAAqD;IACrD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gEAAgE;IAChE,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,aAAa;IAC5B,qBAAqB;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,mBAAmB;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,uBAAuB;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,2BAA2B;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,6DAA6D;IAC7D,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,uDAAuD;IACvD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oCAAoC;IACpC,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,UAAU,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,UAAU,CAAC;IACpB,MAAM,EAAE,UAAU,GAAG,IAAI,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,gBAAiB,SAAQ,WAAW;IACnD,QAAQ,EAAE,UAAU,CAAC;CACtB;AAED,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,aAAa,GAAG,WAAW,CAAC;AAEtE,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,0DAA0D;IAC1D,KAAK,EAAE,MAAM,CAAC;IACd,kEAAkE;IAClE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,wDAAwD;IACxD,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B,oEAAoE;IACpE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,6DAA6D;IAC7D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yEAAyE;IACzE,YAAY,CAAC,EAAE,iBAAiB,EAAE,CAAC;IACnC,oEAAoE;IACpE,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED,MAAM,WAAW,cAAc;IAC7B;;;OAGG;IACH,KAAK,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;IAErE;;;OAGG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IAErE;;;;;OAKG;IACH,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAEvB;;OAEG;IACH,WAAW,IAAI,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAEzC;;OAEG;IACH,YAAY,CAAC,OAAO,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE3D;;OAEG;IACH,cAAc,IAAI,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;CAC9C;AAED,MAAM,MAAM,WAAW,GACnB,iBAAiB,GACjB,kBAAkB,GAClB,gBAAgB,GAChB,iBAAiB,GACjB,mBAAmB,GACnB,UAAU,GACV,UAAU,CAAC;AAEf,MAAM,WAAW,YAAY;IAC3B;;OAEG;IACH,QAAQ,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC;IAEjC;;;OAGG;IACH,KAAK,IAAI,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;IAEvC;;;;OAIG;IACH,QAAQ,IAAI,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IAEvC;;;;;OAKG;IACH,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAEvB;;;;;;;;OAQG;IACH,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAExB;;;;;;;;OAQG;IACH,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAEhC;;OAEG;IACH,KAAK,EAAE,cAAc,CAAC;IAEtB;;OAEG;IACH,WAAW,CACT,KAAK,EAAE,iBAAiB,EACxB,QAAQ,EAAE,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,GAC5C,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAEjC,WAAW,CACT,KAAK,EAAE,kBAAkB,EACzB,QAAQ,EAAE,CAAC,IAAI,EAAE,UAAU,KAAK,IAAI,GACnC,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAEjC,WAAW,CACT,KAAK,EAAE,gBAAgB,EACvB,QAAQ,EAAE,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,GAC3D,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAEjC,WAAW,CACT,KAAK,EAAE,iBAAiB,EACxB,QAAQ,EAAE,CAAC,IAAI,EAAE,aAAa,KAAK,IAAI,GACtC,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAEjC,WAAW,CAAC,KAAK,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAE7F,WAAW,CACT,KAAK,EAAE,UAAU,EACjB,QAAQ,EAAE,CAAC,IAAI,EAAE,UAAU,KAAK,IAAI,GACnC,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAEjC,WAAW,CACT,KAAK,EAAE,UAAU,EACjB,QAAQ,EAAE,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,UAAU,CAAC;QAAC,EAAE,EAAE,UAAU,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,GAC9E,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAEjC;;OAEG;IACH,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACrC;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,IAAI,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;IACvC,QAAQ,IAAI,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IACvC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,aAAa,IAAI,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC3C,UAAU,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;IAC1E,aAAa,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IAC1E,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,gBAAgB,IAAI,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC9C,iBAAiB,CAAC,OAAO,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChE,mBAAmB,IAAI,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IAClD,WAAW,CACT,KAAK,EAAE,iBAAiB,EACxB,QAAQ,EAAE,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,GAC5C,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACjC,WAAW,CACT,KAAK,EAAE,kBAAkB,EACzB,QAAQ,EAAE,CAAC,IAAI,EAAE,UAAU,KAAK,IAAI,GACnC,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACjC,WAAW,CACT,KAAK,EAAE,gBAAgB,EACvB,QAAQ,EAAE,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,GAC3D,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACjC,WAAW,CACT,KAAK,EAAE,iBAAiB,EACxB,QAAQ,EAAE,CAAC,IAAI,EAAE,aAAa,KAAK,IAAI,GACtC,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACjC,WAAW,CAAC,KAAK,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC7F,WAAW,CACT,KAAK,EAAE,UAAU,EACjB,QAAQ,EAAE,CAAC,IAAI,EAAE,UAAU,KAAK,IAAI,GACnC,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACjC,WAAW,CACT,KAAK,EAAE,UAAU,EACjB,QAAQ,EAAE,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,UAAU,CAAC;QAAC,EAAE,EAAE,UAAU,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,GAC9E,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACjC,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACrC"}
+{"version":3,"file":"definitions.d.ts","sourceRoot":"","sources":["../../src/definitions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAE5D;;GAEG;AACH,oBAAY,YAAY;IACtB,+BAA+B;IAC/B,OAAO,YAAY;IACnB,iDAAiD;IACjD,OAAO,YAAY;IACnB,mCAAmC;IACnC,KAAK,UAAU;IACf,wBAAwB;IACxB,OAAO,YAAY;IACnB,yDAAyD;IACzD,KAAK,UAAU;CAChB;AAED,MAAM,WAAW,UAAU;IACzB,+BAA+B;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,8BAA8B;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,iDAAiD;IACjD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,mCAAmC;IACnC,MAAM,EAAE,YAAY,CAAC;IACrB,+CAA+C;IAC/C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iCAAiC;IACjC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qDAAqD;IACrD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gEAAgE;IAChE,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,aAAa;IAC5B,qBAAqB;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,iDAAiD;IACjD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,mBAAmB;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,uBAAuB;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,2BAA2B;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,6DAA6D;IAC7D,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,uDAAuD;IACvD,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,UAAU,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,UAAU,CAAC;IACpB,MAAM,EAAE,UAAU,GAAG,IAAI,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,gBAAiB,SAAQ,WAAW;IACnD,QAAQ,EAAE,UAAU,CAAC;CACtB;AAED,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,aAAa,GAAG,aAAa,GAAG,WAAW,CAAC;AAEtF,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,0DAA0D;IAC1D,KAAK,EAAE,MAAM,CAAC;IACd,kEAAkE;IAClE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,uGAAuG;IACvG,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,wDAAwD;IACxD,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,oEAAoE;IACpE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,6DAA6D;IAC7D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yEAAyE;IACzE,YAAY,CAAC,EAAE,iBAAiB,EAAE,CAAC;IACnC,oEAAoE;IACpE,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED,MAAM,WAAW,cAAc;IAC7B;;;OAGG;IACH,KAAK,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;IAErE;;;OAGG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IAErE;;;;;OAKG;IACH,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAEvB;;OAEG;IACH,WAAW,IAAI,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAEzC;;OAEG;IACH,YAAY,CAAC,OAAO,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE3D;;OAEG;IACH,cAAc,IAAI,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;CAC9C;AAED,MAAM,MAAM,WAAW,GACnB,iBAAiB,GACjB,kBAAkB,GAClB,gBAAgB,GAChB,iBAAiB,GACjB,mBAAmB,GACnB,UAAU,GACV,UAAU,CAAC;AAEf,MAAM,WAAW,YAAY;IAC3B;;OAEG;IACH,QAAQ,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC;IAEjC;;;OAGG;IACH,KAAK,IAAI,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;IAEvC;;;;OAIG;IACH,QAAQ,IAAI,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IAEvC;;;;;OAKG;IACH,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAEvB;;;;;;;;OAQG;IACH,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAExB;;;;;;;;OAQG;IACH,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAEhC;;OAEG;IACH,KAAK,EAAE,cAAc,CAAC;IAEtB;;OAEG;IACH,WAAW,CACT,KAAK,EAAE,iBAAiB,EACxB,QAAQ,EAAE,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,GAC5C,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAEjC,WAAW,CACT,KAAK,EAAE,kBAAkB,EACzB,QAAQ,EAAE,CAAC,IAAI,EAAE,UAAU,KAAK,IAAI,GACnC,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAEjC,WAAW,CACT,KAAK,EAAE,gBAAgB,EACvB,QAAQ,EAAE,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,GAC3D,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAEjC,WAAW,CACT,KAAK,EAAE,iBAAiB,EACxB,QAAQ,EAAE,CAAC,IAAI,EAAE,aAAa,KAAK,IAAI,GACtC,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAEjC,WAAW,CAAC,KAAK,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAE7F,WAAW,CACT,KAAK,EAAE,UAAU,EACjB,QAAQ,EAAE,CAAC,IAAI,EAAE,UAAU,KAAK,IAAI,GACnC,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAEjC,WAAW,CACT,KAAK,EAAE,UAAU,EACjB,QAAQ,EAAE,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,UAAU,CAAC;QAAC,EAAE,EAAE,UAAU,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,GAC9E,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAEjC;;OAEG;IACH,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACrC;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,IAAI,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;IACvC,QAAQ,IAAI,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IACvC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,aAAa,IAAI,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC3C,UAAU,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;IAC1E,aAAa,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IAC1E,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,gBAAgB,IAAI,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC9C,iBAAiB,CAAC,OAAO,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChE,mBAAmB,IAAI,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IAClD,WAAW,CACT,KAAK,EAAE,iBAAiB,EACxB,QAAQ,EAAE,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,GAC5C,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACjC,WAAW,CACT,KAAK,EAAE,kBAAkB,EACzB,QAAQ,EAAE,CAAC,IAAI,EAAE,UAAU,KAAK,IAAI,GACnC,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACjC,WAAW,CACT,KAAK,EAAE,gBAAgB,EACvB,QAAQ,EAAE,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,GAC3D,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACjC,WAAW,CACT,KAAK,EAAE,iBAAiB,EACxB,QAAQ,EAAE,CAAC,IAAI,EAAE,aAAa,KAAK,IAAI,GACtC,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACjC,WAAW,CAAC,KAAK,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC7F,WAAW,CACT,KAAK,EAAE,UAAU,EACjB,QAAQ,EAAE,CAAC,IAAI,EAAE,UAAU,KAAK,IAAI,GACnC,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACjC,WAAW,CACT,KAAK,EAAE,UAAU,EACjB,QAAQ,EAAE,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,UAAU,CAAC;QAAC,EAAE,EAAE,UAAU,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,GAC9E,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACjC,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACrC"}

package/ios/Sources/UpdaterPlugin/BundleInfo.swift

@@ -3,6 +3,7 @@ import Foundation
 struct BundleInfo: Codable {
   let id: String
   let version: String
+  let runtimeVersion: String?
   let status: BundleStatus
   let downloadedAt: Date?
   let sha256: String?
@@ -21,6 +22,10 @@ struct BundleInfo: Codable {
       "status": status.rawValue,
     ]
 
+    if let runtimeVersion {
+      result["runtimeVersion"] = runtimeVersion
+    }
+
     if let downloadedAt {
       result["downloadedAt"] = ISO8601DateFormatter().string(from: downloadedAt)
     }

package/ios/Sources/UpdaterPlugin/BundleStore.swift

@@ -10,6 +10,7 @@ final class BundleStore {
 
   private let defaults = UserDefaults.standard
   private let fileManager = FileManager.default
+  var appRuntimeVersion: String?
 
   private lazy var decoder: JSONDecoder = {
     let decoder = JSONDecoder()
@@ -51,6 +52,7 @@ final class BundleStore {
     BundleInfo(
       id: "builtin",
       version: builtinVersion,
+      runtimeVersion: appRuntimeVersion,
       status: .builtin,
       downloadedAt: nil,
       sha256: nil,
@@ -202,6 +204,7 @@ final class BundleStore {
     bundle = BundleInfo(
       id: bundle.id,
       version: bundle.version,
+      runtimeVersion: bundle.runtimeVersion,
       status: status,
       downloadedAt: bundle.downloadedAt,
       sha256: bundle.sha256,

package/ios/Sources/UpdaterPlugin/ManifestClient.swift

@@ -5,9 +5,8 @@ struct LatestManifest {
   let url: String
   let sha256: String
   let size: Int
-  let minNativeBuild: Int?
+  let runtimeVersion: String?
   let releaseId: String?
-  let signature: ManifestSignature?
 }
 
 struct ManifestSignature {
@@ -44,7 +43,7 @@ enum ManifestClient {
     channel: String?,
     currentVersion: String,
     currentReleaseId: String?,
-    nativeBuild: String,
+    runtimeVersion: String?,
     platform: String,
     allowInsecureUrls: Bool = false,
     manifestKeys: [ManifestKey] = []
@@ -73,7 +72,9 @@ enum ManifestClient {
     if let currentReleaseId, !currentReleaseId.isEmpty {
       request.setValue(currentReleaseId, forHTTPHeaderField: "X-Release-Id")
     }
-    request.setValue(nativeBuild, forHTTPHeaderField: "X-Native-Build")
+    if let runtimeVersion, !runtimeVersion.isEmpty {
+      request.setValue(runtimeVersion, forHTTPHeaderField: "X-Runtime-Version")
+    }
     request.timeoutInterval = 30
 
     let (data, response) = try await URLSession.shared.data(for: request)
@@ -102,21 +103,12 @@ enum ManifestClient {
       throw ManifestClientError.invalidResponse
     }
 
-    var minNativeBuild: Int?
-    if let numeric = object["minNativeBuild"] as? NSNumber {
-      minNativeBuild = numeric.intValue
-    } else if let stringValue = object["minNativeBuild"] as? String {
-      minNativeBuild = Int(stringValue)
-    }
+    let runtimeVersion = (object["runtimeVersion"] as? String)?
+      .trimmingCharacters(in: .whitespacesAndNewlines)
+      .nilIfEmpty
 
-    var signature: ManifestSignature?
-    if let sigObj = object["signature"] as? [String: Any],
-       let kid = sigObj["kid"] as? String,
-       let sig = sigObj["sig"] as? String,
-       let iat = sigObj["iat"] as? Int,
-       let exp = sigObj["exp"] as? Int {
-      signature = ManifestSignature(kid: kid, sig: sig, iat: iat, exp: exp)
-    }
+    let signature = parseSignature(object["signature"])
+    let signatureV2 = parseSignature(object["signatureV2"])
 
     let releaseId = object["releaseId"] as? String
 
@@ -130,22 +122,36 @@ enum ManifestClient {
       print("[UpdateKit] WARNING: No manifest signing keys configured — signature verification is disabled for this request.")
     }
 
-    // Verify manifest signature if signing keys are configured
+    // Verify manifest signature if signing keys are configured.
+    // New manifests carry signatureV2 with runtimeVersion in the signed payload.
+    // Older servers only return the legacy signature field.
     if !manifestKeys.isEmpty {
-      guard let sig = signature else {
+      if let sigV2 = signatureV2 {
+        try ManifestVerifier.verify(
+          appId: appId,
+          channel: channel,
+          platform: platform,
+          version: version,
+          sha256: sha256,
+          size: size,
+          runtimeVersion: runtimeVersion,
+          signature: sigV2,
+          trustedKeys: manifestKeys
+        )
+      } else if let sig = signature {
+        try ManifestVerifier.verifyLegacy(
+          appId: appId,
+          channel: channel,
+          platform: platform,
+          version: version,
+          sha256: sha256,
+          size: size,
+          signature: sig,
+          trustedKeys: manifestKeys
+        )
+      } else {
         throw ManifestVerifierError.missingSignature
       }
-      try ManifestVerifier.verify(
-        appId: appId,
-        channel: channel,
-        platform: platform,
-        version: version,
-        sha256: sha256,
-        size: size,
-        minNativeBuild: minNativeBuild,
-        signature: sig,
-        trustedKeys: manifestKeys
-      )
     }
 
     return LatestManifest(
@@ -153,9 +159,26 @@ enum ManifestClient {
       url: downloadUrl,
       sha256: sha256,
       size: size,
-      minNativeBuild: minNativeBuild,
-      releaseId: releaseId,
-      signature: signature
+      runtimeVersion: runtimeVersion,
+      releaseId: releaseId
     )
   }
+
+  private static func parseSignature(_ rawValue: Any?) -> ManifestSignature? {
+    guard let sigObj = rawValue as? [String: Any],
+          let kid = sigObj["kid"] as? String,
+          let sig = sigObj["sig"] as? String,
+          let iat = sigObj["iat"] as? Int,
+          let exp = sigObj["exp"] as? Int else {
+      return nil
+    }
+
+    return ManifestSignature(kid: kid, sig: sig, iat: iat, exp: exp)
+  }
+}
+
+private extension String {
+  var nilIfEmpty: String? {
+    isEmpty ? nil : self
+  }
 }