@otakit/capacitor-updater 2.2.0 → 2.3.1

package/android/src/main/java/com/otakit/updater/UpdaterPlugin.java

@@ -1124,9 +1124,12 @@ public class UpdaterPlugin extends Plugin {
   private JSObject manifestToJSObject(ManifestClient.LatestManifest latest) {
     JSObject object = new JSObject();
     object.put("version", latest.version);
-    object.put("url", latest.url);
+    if (latest.url != null) {
+      object.put("url", latest.url);
+    }
     object.put("sha256", latest.sha256);
     object.put("size", latest.size);
+    object.put("strategy", latest.strategy);
     if (latest.runtimeVersion != null) {
       object.put("runtimeVersion", latest.runtimeVersion);
     }
@@ -1139,6 +1142,14 @@ public class UpdaterPlugin extends Plugin {
     ManifestClient.LatestManifest latest,
     String targetChannel
   ) throws Exception {
+    if ("deltas".equals(latest.strategy)) {
+      return assembleAndStage(latest, targetChannel);
+    }
+
+    if (latest.url == null) {
+      throw new IllegalStateException("Invalid download URL from manifest");
+    }
+
     return downloadAndStage(
       new URL(latest.url),
       latest.version,
@@ -1151,6 +1162,174 @@ public class UpdaterPlugin extends Plugin {
     );
   }
 
+  private static final String BUNDLE_FILE_LIST_NAME = "otakit_files.json";
+
+  /**
+   * Deltas strategy: fill content-cache misses and assemble the bundle from
+   * the cache, then hand it to the same staging path the zip flow uses.
+   */
+  private BundleInfo assembleAndStage(ManifestClient.LatestManifest manifest, String targetChannel)
+    throws Exception {
+    // Same conservative disk-space guard as the zip path.
+    if (manifest.size > 0) {
+      long requiredSpace = (long) (manifest.size * 2.5);
+      if (getFreeDiskSpace() < requiredSpace) {
+        sendDeviceEvent(
+          "download_error",
+          manifest.version,
+          manifest.runtimeVersion,
+          targetChannel,
+          manifest.releaseId,
+          "insufficient_disk_space"
+        );
+        emitEvent(
+          "downloadFailed",
+          failureEventData(
+            manifest.version,
+            manifest.runtimeVersion,
+            targetChannel,
+            manifest.releaseId,
+            "insufficient_disk_space"
+          )
+        );
+        throw new IllegalStateException("Insufficient disk space");
+      }
+    }
+
+    File assembleDirectory = new File(
+      getContext().getCacheDir(),
+      "otakit-assemble-" + System.currentTimeMillis()
+    );
+
+    try {
+      if (manifest.files == null || manifest.files.isEmpty()) {
+        throw new IllegalStateException("Delta manifest is missing its file list");
+      }
+
+      DeltaAssembler assembler = new DeltaAssembler(
+        store.getFilesCacheDirectory(),
+        allowInsecureUrls
+      );
+      assembler.validate(manifest.files, manifest.sha256);
+      assembler.seedFromBuiltinIfNeeded(getContext(), BUILTIN_ASSET_PATH, store.getNativeBuild());
+      assembler.assemble(manifest.files, assembleDirectory, getContext());
+
+      String bundleId = buildBundleId(manifest.version, manifest.releaseId, manifest.sha256);
+      File destination = coordinator.bundleDirectory(bundleId);
+      if (destination.exists()) {
+        deleteRecursively(destination);
+      }
+      moveDirectory(assembleDirectory, destination);
+
+      // Record this bundle's content hashes for cache pruning.
+      try {
+        org.json.JSONArray hashes = new org.json.JSONArray();
+        for (ManifestClient.ManifestFileEntry entry : manifest.files) {
+          hashes.put(entry.sha256.toLowerCase());
+        }
+        try (
+          FileOutputStream output = new FileOutputStream(
+            new File(destination, BUNDLE_FILE_LIST_NAME)
+          )
+        ) {
+          output.write(hashes.toString().getBytes(StandardCharsets.UTF_8));
+        }
+      } catch (Exception ignored) {}
+
+      BundleInfo info = new BundleInfo(
+        bundleId,
+        manifest.version,
+        manifest.runtimeVersion,
+        BundleStatus.PENDING,
+        System.currentTimeMillis(),
+        manifest.sha256,
+        destination.getAbsolutePath(),
+        targetChannel,
+        manifest.releaseId
+      );
+      java.util.List<String> cleanupBundleIds = coordinator.stageDownloadedBundle(info);
+      coordinator.cleanupBundles(cleanupBundleIds);
+
+      pruneDeltaCache(assembler);
+
+      sendDeviceEvent(
+        "downloaded",
+        manifest.version,
+        manifest.runtimeVersion,
+        targetChannel,
+        manifest.releaseId,
+        null
+      );
+      JSObject stagedData = new JSObject();
+      stagedData.put("bundle", info.toJSObject());
+      emitEvent("updateStaged", stagedData);
+      return info;
+    } catch (Exception e) {
+      sendDeviceEvent(
+        "download_error",
+        manifest.version,
+        manifest.runtimeVersion,
+        targetChannel,
+        manifest.releaseId,
+        e.getMessage()
+      );
+      emitEvent(
+        "downloadFailed",
+        failureEventData(
+          manifest.version,
+          manifest.runtimeVersion,
+          targetChannel,
+          manifest.releaseId,
+          failureReason(e)
+        )
+      );
+      throw e;
+    } finally {
+      if (assembleDirectory.exists()) {
+        try {
+          deleteRecursively(assembleDirectory);
+        } catch (Exception ignored) {}
+      }
+    }
+  }
+
+  /** Keep only cache entries referenced by live bundles (plus the builtin seed). */
+  private void pruneDeltaCache(DeltaAssembler assembler) {
+    java.util.Set<String> referenced = new java.util.HashSet<>();
+    String[] liveBundleIds = new String[] {
+      store.getCurrentBundleId(),
+      store.getFallbackBundleId(),
+      store.getStagedBundleId(),
+    };
+    for (String bundleId : liveBundleIds) {
+      if (bundleId == null) {
+        continue;
+      }
+      File listFile = new File(store.bundleDirectory(bundleId), BUNDLE_FILE_LIST_NAME);
+      if (!listFile.exists()) {
+        continue;
+      }
+      try (FileInputStream input = new FileInputStream(listFile)) {
+        java.io.ByteArrayOutputStream out = new java.io.ByteArrayOutputStream();
+        byte[] buffer = new byte[8192];
+        int read;
+        while ((read = input.read(buffer)) > 0) {
+          out.write(buffer, 0, read);
+        }
+        org.json.JSONArray hashes = new org.json.JSONArray(
+          new String(out.toByteArray(), StandardCharsets.UTF_8)
+        );
+        for (int index = 0; index < hashes.length(); index++) {
+          String hash = hashes.optString(index, null);
+          if (hash != null) {
+            referenced.add(hash.toLowerCase());
+          }
+        }
+      } catch (Exception ignored) {}
+    }
+    assembler.pruneCache(referenced);
+  }
+
   private void moveDirectory(File source, File destination) throws Exception {
     if (source.renameTo(destination)) {
       return;

package/dist/esm/definitions.d.ts

@@ -37,14 +37,16 @@ export interface LatestVersion {
     version: string;
     /** Native compatibility lane for this update. */
     runtimeVersion?: string;
-    /** Download URL */
-    url: string;
-    /** SHA-256 checksum */
+    /** Bundle download URL. Present for the 'zip' strategy; absent for 'deltas'. */
+    url?: string;
+    /** SHA-256 checksum: the zip hash for 'zip', the canonical filesHash for 'deltas'. */
     sha256: string;
-    /** Bundle size in bytes */
+    /** Bundle size in bytes (total decompressed size for 'deltas') */
     size: number;
     /** Release history ID associated with this manifest */
     releaseId: string;
+    /** Update strategy this manifest was published with. Defaults to 'zip'. */
+    strategy?: 'zip' | 'deltas';
     /**
      * True when the release is marked force-immediate: automatic flows apply
      * and reload it on the next lifecycle event regardless of shadow or

package/dist/esm/definitions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"definitions.d.ts","sourceRoot":"","sources":["../../src/definitions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAE5D;;GAEG;AACH,oBAAY,YAAY;IACtB,+BAA+B;IAC/B,OAAO,YAAY;IACnB,iDAAiD;IACjD,OAAO,YAAY;IACnB,mCAAmC;IACnC,KAAK,UAAU;IACf,wBAAwB;IACxB,OAAO,YAAY;IACnB,yDAAyD;IACzD,KAAK,UAAU;CAChB;AAED,MAAM,WAAW,UAAU;IACzB,+BAA+B;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,8BAA8B;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,iDAAiD;IACjD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,mCAAmC;IACnC,MAAM,EAAE,YAAY,CAAC;IACrB,+CAA+C;IAC/C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iCAAiC;IACjC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qDAAqD;IACrD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gEAAgE;IAChE,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,aAAa;IAC5B,qBAAqB;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,iDAAiD;IACjD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,mBAAmB;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,uBAAuB;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,2BAA2B;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,uDAAuD;IACvD,SAAS,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,UAAU,CAAC;IACpB,QAAQ,EAAE,UAAU,CAAC;IACrB,MAAM,EAAE,UAAU,GAAG,IAAI,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,MAAM,YAAY,GAAG,KAAK,GAAG,QAAQ,GAAG,cAAc,GAAG,WAAW,CAAC;AAE3E,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,eAAe;IAC9B,8FAA8F;IAC9F,GAAG,EAAE,MAAM,CAAC;IACZ,oFAAoF;IACpF,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,WAAW,CAAC;CACnB;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,gBAAgB,CAAC;IACvB,MAAM,EAAE,aAAa,CAAC;CACvB;AAED,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,kBAAkB,CAAC;IACzB,MAAM,EAAE,aAAa,CAAC;CACvB;AAED,MAAM,MAAM,WAAW,GACnB,mBAAmB,GACnB,wBAAwB,GACxB,0BAA0B,CAAC;AAE/B,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,WAAW,CAAC;CACnB;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,EAAE,UAAU,CAAC;CACpB;AAED,MAAM,MAAM,cAAc,GAAG,sBAAsB,GAAG,oBAAoB,CAAC;AAE3E,MAAM,WAAW,WAAW;IAC1B,mEAAmE;IACnE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,mFAAmF;IACnF,MAAM,EAAE,UAAU,GAAG,QAAQ,CAAC;CAC/B;AAED;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,UAAU,CAAC;CACpB;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,UAAU,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gGAAgG;IAChG,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,eAAe,GACvB,iBAAiB,GACjB,cAAc,GACd,eAAe,GACf,gBAAgB,GAChB,UAAU,CAAC;AAEf;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,gEAAgE;IAChE,KAAK,EAAE,MAAM,CAAC;IACd,kEAAkE;IAClE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,uGAAuG;IACvG,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,2FAA2F;IAC3F,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,oDAAoD;IACpD,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,2GAA2G;IAC3G,aAAa,CAAC,EAAE,YAAY,CAAC;IAC7B;;;;;OAKG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,oEAAoE;IACpE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,iFAAiF;IACjF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yHAAyH;IACzH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4DAA4D;IAC5D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,yEAAyE;IACzE,YAAY,CAAC,EAAE,iBAAiB,EAAE,CAAC;IACnC;;;OAGG;IACH,UAAU,CAAC,EAAE,eAAe,EAAE,CAAC;IAC/B,oEAAoE;IACpE,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED,MAAM,WAAW,YAAY;IAC3B;;OAEG;IACH,QAAQ,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC;IAEjC;;OAEG;IACH,KAAK,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC;IAE9B;;OAEG;IACH,QAAQ,IAAI,OAAO,CAAC,cAAc,CAAC,CAAC;IAEpC;;;;;;OAMG;IACH,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAEvB;;;;;;;;OAQG;IACH,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAExB;;;OAGG;IACH,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAEhC;;;OAGG;IACH,cAAc,IAAI,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IAE7C;;;;;;;OAOG;IACH,UAAU,CAAC,OAAO,EAAE;QAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE/D;;;OAGG;IACH,UAAU,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC;IAEnC;;;;;;;;OAQG;IACH,WAAW,CACT,SAAS,EAAE,iBAAiB,EAC5B,YAAY,EAAE,CAAC,MAAM,EAAE,aAAa,KAAK,IAAI,GAC5C,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACjC,WAAW,CACT,SAAS,EAAE,cAAc,EACzB,YAAY,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,IAAI,GAC/C,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACjC,WAAW,CACT,SAAS,EAAE,eAAe,EAC1B,YAAY,EAAE,CAAC,KAAK,EAAE,kBAAkB,KAAK,IAAI,GAChD,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACjC,WAAW,CACT,SAAS,EAAE,gBAAgB,EAC3B,YAAY,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,IAAI,GAC/C,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACjC,WAAW,CACT,SAAS,EAAE,UAAU,EACrB,YAAY,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,IAAI,GAC/C,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAEjC;;OAEG;IACH,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACrC;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC;IACjC,KAAK,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC;IAC9B,QAAQ,IAAI,OAAO,CAAC,cAAc,CAAC,CAAC;IACpC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACxB,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,cAAc,IAAI,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IAC7C,UAAU,CAAC,OAAO,EAAE;QAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/D,UAAU,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC;IACnC,WAAW,CACT,SAAS,EAAE,eAAe,EAC1B,YAAY,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,GACrC,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACjC,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACrC"}
+{"version":3,"file":"definitions.d.ts","sourceRoot":"","sources":["../../src/definitions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAE5D;;GAEG;AACH,oBAAY,YAAY;IACtB,+BAA+B;IAC/B,OAAO,YAAY;IACnB,iDAAiD;IACjD,OAAO,YAAY;IACnB,mCAAmC;IACnC,KAAK,UAAU;IACf,wBAAwB;IACxB,OAAO,YAAY;IACnB,yDAAyD;IACzD,KAAK,UAAU;CAChB;AAED,MAAM,WAAW,UAAU;IACzB,+BAA+B;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,8BAA8B;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,iDAAiD;IACjD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,mCAAmC;IACnC,MAAM,EAAE,YAAY,CAAC;IACrB,+CAA+C;IAC/C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iCAAiC;IACjC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qDAAqD;IACrD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gEAAgE;IAChE,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,aAAa;IAC5B,qBAAqB;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,iDAAiD;IACjD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,gFAAgF;IAChF,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,sFAAsF;IACtF,MAAM,EAAE,MAAM,CAAC;IACf,kEAAkE;IAClE,IAAI,EAAE,MAAM,CAAC;IACb,uDAAuD;IACvD,SAAS,EAAE,MAAM,CAAC;IAClB,2EAA2E;IAC3E,QAAQ,CAAC,EAAE,KAAK,GAAG,QAAQ,CAAC;IAC5B;;;;OAIG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,UAAU,CAAC;IACpB,QAAQ,EAAE,UAAU,CAAC;IACrB,MAAM,EAAE,UAAU,GAAG,IAAI,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,MAAM,YAAY,GAAG,KAAK,GAAG,QAAQ,GAAG,cAAc,GAAG,WAAW,CAAC;AAE3E,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,eAAe;IAC9B,8FAA8F;IAC9F,GAAG,EAAE,MAAM,CAAC;IACZ,oFAAoF;IACpF,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,WAAW,CAAC;CACnB;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,gBAAgB,CAAC;IACvB,MAAM,EAAE,aAAa,CAAC;CACvB;AAED,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,kBAAkB,CAAC;IACzB,MAAM,EAAE,aAAa,CAAC;CACvB;AAED,MAAM,MAAM,WAAW,GACnB,mBAAmB,GACnB,wBAAwB,GACxB,0BAA0B,CAAC;AAE/B,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,WAAW,CAAC;CACnB;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,EAAE,UAAU,CAAC;CACpB;AAED,MAAM,MAAM,cAAc,GAAG,sBAAsB,GAAG,oBAAoB,CAAC;AAE3E,MAAM,WAAW,WAAW;IAC1B,mEAAmE;IACnE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,mFAAmF;IACnF,MAAM,EAAE,UAAU,GAAG,QAAQ,CAAC;CAC/B;AAED;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,UAAU,CAAC;CACpB;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,UAAU,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gGAAgG;IAChG,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,eAAe,GACvB,iBAAiB,GACjB,cAAc,GACd,eAAe,GACf,gBAAgB,GAChB,UAAU,CAAC;AAEf;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,gEAAgE;IAChE,KAAK,EAAE,MAAM,CAAC;IACd,kEAAkE;IAClE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,uGAAuG;IACvG,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,2FAA2F;IAC3F,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,oDAAoD;IACpD,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,2GAA2G;IAC3G,aAAa,CAAC,EAAE,YAAY,CAAC;IAC7B;;;;;OAKG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,oEAAoE;IACpE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,iFAAiF;IACjF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yHAAyH;IACzH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4DAA4D;IAC5D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,yEAAyE;IACzE,YAAY,CAAC,EAAE,iBAAiB,EAAE,CAAC;IACnC;;;OAGG;IACH,UAAU,CAAC,EAAE,eAAe,EAAE,CAAC;IAC/B,oEAAoE;IACpE,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED,MAAM,WAAW,YAAY;IAC3B;;OAEG;IACH,QAAQ,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC;IAEjC;;OAEG;IACH,KAAK,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC;IAE9B;;OAEG;IACH,QAAQ,IAAI,OAAO,CAAC,cAAc,CAAC,CAAC;IAEpC;;;;;;OAMG;IACH,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAEvB;;;;;;;;OAQG;IACH,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAExB;;;OAGG;IACH,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAEhC;;;OAGG;IACH,cAAc,IAAI,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IAE7C;;;;;;;OAOG;IACH,UAAU,CAAC,OAAO,EAAE;QAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE/D;;;OAGG;IACH,UAAU,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC;IAEnC;;;;;;;;OAQG;IACH,WAAW,CACT,SAAS,EAAE,iBAAiB,EAC5B,YAAY,EAAE,CAAC,MAAM,EAAE,aAAa,KAAK,IAAI,GAC5C,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACjC,WAAW,CACT,SAAS,EAAE,cAAc,EACzB,YAAY,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,IAAI,GAC/C,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACjC,WAAW,CACT,SAAS,EAAE,eAAe,EAC1B,YAAY,EAAE,CAAC,KAAK,EAAE,kBAAkB,KAAK,IAAI,GAChD,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACjC,WAAW,CACT,SAAS,EAAE,gBAAgB,EAC3B,YAAY,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,IAAI,GAC/C,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACjC,WAAW,CACT,SAAS,EAAE,UAAU,EACrB,YAAY,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,IAAI,GAC/C,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAEjC;;OAEG;IACH,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACrC;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC;IACjC,KAAK,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC;IAC9B,QAAQ,IAAI,OAAO,CAAC,cAAc,CAAC,CAAC;IACpC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACxB,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,cAAc,IAAI,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IAC7C,UAAU,CAAC,OAAO,EAAE;QAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/D,UAAU,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC;IACnC,WAAW,CACT,SAAS,EAAE,eAAe,EAC1B,YAAY,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,GACrC,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACjC,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACrC"}

package/ios/Sources/UpdaterPlugin/BundleStore.swift

@@ -42,6 +42,23 @@ final class BundleStore {
     return directory
   }()
 
+  /// Content-addressed file cache for the deltas strategy (`otakit_files/<sha256>`).
+  private(set) lazy var filesCacheDirectory: URL = {
+    let appSupport = fileManager.urls(
+      for: .applicationSupportDirectory,
+      in: .userDomainMask
+    ).first!
+    let directory = appSupport.appendingPathComponent(
+      "otakit_files",
+      isDirectory: true
+    )
+    try? fileManager.createDirectory(
+      at: directory,
+      withIntermediateDirectories: true
+    )
+    return directory
+  }()
+
   var builtinVersion: String {
     Bundle.main.infoDictionary?["CFBundleShortVersionString"] as? String ?? "0.0.0"
   }

package/ios/Sources/UpdaterPlugin/DeltaAssembler.swift

@@ -0,0 +1,323 @@
+import CryptoKit
+import Foundation
+
+enum DeltaAssemblerError: Error, LocalizedError {
+  case missingFiles
+  case invalidPath(String)
+  case duplicatePath(String)
+  case fileCountExceeded(Int)
+  case totalSizeExceeded(UInt64)
+  case filesHashMismatch
+  case fileHashMismatch(String)
+  case missingIndexHtml
+  case invalidFileURL(String)
+
+  var errorDescription: String? {
+    switch self {
+    case .missingFiles:
+      return "Delta manifest has no files"
+    case let .invalidPath(path):
+      return "Invalid file path in delta manifest: \(path)"
+    case let .duplicatePath(path):
+      return "Duplicate file path in delta manifest: \(path)"
+    case let .fileCountExceeded(count):
+      return "Delta manifest exceeds file count limit: \(count)"
+    case let .totalSizeExceeded(size):
+      return "Delta manifest exceeds total size limit: \(size)"
+    case .filesHashMismatch:
+      return "Delta file list does not match the signed filesHash"
+    case let .fileHashMismatch(path):
+      return "Downloaded file hash mismatch: \(path)"
+    case .missingIndexHtml:
+      return "Delta bundle does not contain index.html"
+    case let .invalidFileURL(url):
+      return "Invalid file download URL: \(url)"
+    }
+  }
+}
+
+/// Assembles a delta-strategy bundle from per-file content-addressed objects.
+///
+/// The content cache (`otakit_files/<sha256>`) is the device-side state:
+/// previous bundles and the builtin seed populate it, and assembling a new
+/// bundle downloads only the cache misses.
+final class DeltaAssembler {
+  // Mirror ZipUtils' extraction limits.
+  private let maxFiles = 10_000
+  private let maxTotalSize: UInt64 = 500_000_000 // 500 MB
+
+  private let cacheDirectory: URL
+  private let downloader: Downloader
+  private let fileManager = FileManager.default
+
+  private static let builtinSeedMarkerName = "builtin_seed.json"
+
+  init(cacheDirectory: URL, downloader: Downloader) {
+    self.cacheDirectory = cacheDirectory
+    self.downloader = downloader
+  }
+
+  // MARK: - Canonical file list
+
+  /// Canonical file list hash — must match the server's computeFilesHash
+  /// (console/lib/delta-files.ts) and the Android mirror byte-for-byte:
+  /// entries sorted by UTF-8 bytes of path, lines "<path>:<sha256 lowercase>",
+  /// joined with "\n", hashed with SHA-256 (hex).
+  static func computeFilesHash(_ entries: [ManifestFileEntry]) -> String {
+    let sorted = entries.sorted { lhs, rhs in
+      let lhsBytes = Array(lhs.path.utf8)
+      let rhsBytes = Array(rhs.path.utf8)
+      for index in 0..<min(lhsBytes.count, rhsBytes.count) {
+        if lhsBytes[index] != rhsBytes[index] {
+          return lhsBytes[index] < rhsBytes[index]
+        }
+      }
+      return lhsBytes.count < rhsBytes.count
+    }
+    let canonical = sorted
+      .map { "\($0.path):\($0.sha256.lowercased())" }
+      .joined(separator: "\n")
+    let digest = SHA256.hash(data: Data(canonical.utf8))
+    return digest.map { String(format: "%02x", $0) }.joined()
+  }
+
+  // MARK: - Validation
+
+  private func isValidEntryPath(_ path: String) -> Bool {
+    if path.isEmpty || path.count > 512 {
+      return false
+    }
+    if path.hasPrefix("/") || path.contains("\\") {
+      return false
+    }
+    for segment in path.split(separator: "/", omittingEmptySubsequences: false) {
+      if segment.isEmpty || segment == "." || segment == ".." {
+        return false
+      }
+    }
+    for scalar in path.unicodeScalars {
+      if scalar.value < 0x20 || scalar.value == 0x7f {
+        return false
+      }
+    }
+    // Metadata files the plugin writes into the bundle directory; an app
+    // file with the same root-level name would be overwritten.
+    if path == "bundle.json" || path == "otakit_files.json" {
+      return false
+    }
+    return true
+  }
+
+  func validate(_ entries: [ManifestFileEntry], expectedFilesHash: String) throws {
+    guard !entries.isEmpty else {
+      throw DeltaAssemblerError.missingFiles
+    }
+    guard entries.count <= maxFiles else {
+      throw DeltaAssemblerError.fileCountExceeded(entries.count)
+    }
+
+    // Key on UTF-8 bytes, not String: Swift compares canonically-equivalent
+    // strings (NFC vs NFD) as equal, which would reject a manifest the
+    // server and Android both accept.
+    var seenPaths = Set<Data>()
+    var totalSize: UInt64 = 0
+    for entry in entries {
+      guard isValidEntryPath(entry.path) else {
+        throw DeltaAssemblerError.invalidPath(entry.path)
+      }
+      guard seenPaths.insert(Data(entry.path.utf8)).inserted else {
+        throw DeltaAssemblerError.duplicatePath(entry.path)
+      }
+      if let size = entry.size, size > 0 {
+        totalSize += UInt64(size)
+        if totalSize > maxTotalSize {
+          throw DeltaAssemblerError.totalSizeExceeded(totalSize)
+        }
+      }
+    }
+
+    guard seenPaths.contains(Data("index.html".utf8)) else {
+      throw DeltaAssemblerError.missingIndexHtml
+    }
+
+    // The signed manifest sha256 is the filesHash; recomputing it here is what
+    // extends signature coverage to every (path, sha256) pair.
+    guard DeltaAssembler.computeFilesHash(entries) == expectedFilesHash.lowercased() else {
+      throw DeltaAssemblerError.filesHashMismatch
+    }
+  }
+
+  // MARK: - Cache
+
+  private func cachePath(for sha256: String) -> URL {
+    cacheDirectory.appendingPathComponent(sha256.lowercased(), isDirectory: false)
+  }
+
+  private func isCached(_ sha256: String) -> Bool {
+    fileManager.fileExists(atPath: cachePath(for: sha256).path)
+  }
+
+  private func ensureCached(_ entry: ManifestFileEntry) async throws {
+    if isCached(entry.sha256) {
+      return
+    }
+
+    guard let url = URL(string: entry.url) else {
+      throw DeltaAssemblerError.invalidFileURL(entry.url)
+    }
+
+    let temporary = try await downloader.download(from: url)
+    defer { try? fileManager.removeItem(at: temporary) }
+
+    guard try HashUtils.verify(fileURL: temporary, expectedSha256: entry.sha256) else {
+      throw DeltaAssemblerError.fileHashMismatch(entry.path)
+    }
+
+    let destination = cachePath(for: entry.sha256)
+    if fileManager.fileExists(atPath: destination.path) {
+      return
+    }
+    // Write via temp + rename so a crash mid-copy can never leave a
+    // truncated file at a content-addressed path (exists() implies valid).
+    let staging = cacheDirectory.appendingPathComponent(
+      ".tmp-\(UUID().uuidString)",
+      isDirectory: false
+    )
+    try fileManager.copyItem(at: temporary, to: staging)
+    do {
+      try fileManager.moveItem(at: staging, to: destination)
+    } catch {
+      try? fileManager.removeItem(at: staging)
+      // A concurrent writer may have won the rename; that's fine.
+      if !fileManager.fileExists(atPath: destination.path) {
+        throw error
+      }
+    }
+  }
+
+  // MARK: - Assembly
+
+  /// Fill cache misses and lay out the bundle directory from the cache.
+  /// `destination` must be an empty/absent directory; entries must be
+  /// validated first.
+  func assemble(entries: [ManifestFileEntry], into destination: URL) async throws {
+    if fileManager.fileExists(atPath: destination.path) {
+      try fileManager.removeItem(at: destination)
+    }
+    try fileManager.createDirectory(at: destination, withIntermediateDirectories: true)
+
+    // Resolve the destination's symlinks ONCE and derive every target from the
+    // resolved base. iOS's temp dir is /var/… (a symlink to /private/var/…);
+    // standardizedFileURL resolved it inconsistently between the base and the
+    // appended path, so the containment check compared /var vs /private/var and
+    // rejected every file. Building targets from the already-resolved base makes
+    // the prefix check exact (mirrors Android's getCanonicalPath() on both sides).
+    let canonicalDestination = destination.resolvingSymlinksInPath()
+    let destinationPrefix = canonicalDestination.path.hasSuffix("/")
+      ? canonicalDestination.path
+      : canonicalDestination.path + "/"
+
+    for entry in entries {
+      try await ensureCached(entry)
+
+      let target = canonicalDestination.appendingPathComponent(entry.path, isDirectory: false)
+      // Defense in depth alongside isValidEntryPath (mirrors ZipUtils).
+      guard target.path.hasPrefix(destinationPrefix) else {
+        throw DeltaAssemblerError.invalidPath(entry.path)
+      }
+      let parent = target.deletingLastPathComponent()
+      try fileManager.createDirectory(at: parent, withIntermediateDirectories: true)
+      try fileManager.copyItem(at: cachePath(for: entry.sha256), to: target)
+    }
+  }
+
+  // MARK: - Builtin seeding
+
+  private struct BuiltinSeed: Codable {
+    let nativeBuild: String
+    let hashes: [String]
+  }
+
+  private var builtinSeedURL: URL {
+    cacheDirectory.appendingPathComponent(DeltaAssembler.builtinSeedMarkerName, isDirectory: false)
+  }
+
+  private func readBuiltinSeed() -> BuiltinSeed? {
+    guard let data = try? Data(contentsOf: builtinSeedURL) else {
+      return nil
+    }
+    return try? JSONDecoder().decode(BuiltinSeed.self, from: data)
+  }
+
+  /// Hash the store-build web assets into the cache once per native build, so
+  /// the first OTA only downloads what changed relative to the binary.
+  /// Best-effort: failures only cost extra downloads.
+  func seedFromBuiltinIfNeeded(builtinDirectory: URL, nativeBuild: String) {
+    if let seed = readBuiltinSeed(), seed.nativeBuild == nativeBuild {
+      return
+    }
+
+    var isDirectory: ObjCBool = false
+    guard fileManager.fileExists(atPath: builtinDirectory.path, isDirectory: &isDirectory),
+          isDirectory.boolValue else {
+      return
+    }
+
+    var hashes: [String] = []
+    let enumerator = fileManager.enumerator(
+      at: builtinDirectory,
+      includingPropertiesForKeys: [.isRegularFileKey],
+      options: [.skipsHiddenFiles]
+    )
+    while let item = enumerator?.nextObject() as? URL {
+      guard let isRegular = try? item.resourceValues(forKeys: [.isRegularFileKey]).isRegularFile,
+            isRegular == true else {
+        continue
+      }
+      guard let sha256 = try? HashUtils.sha256(fileURL: item) else {
+        continue
+      }
+      let destination = cachePath(for: sha256)
+      if !fileManager.fileExists(atPath: destination.path) {
+        let staging = cacheDirectory.appendingPathComponent(
+          ".tmp-\(UUID().uuidString)",
+          isDirectory: false
+        )
+        if (try? fileManager.copyItem(at: item, to: staging)) != nil {
+          if (try? fileManager.moveItem(at: staging, to: destination)) == nil {
+            try? fileManager.removeItem(at: staging)
+          }
+        }
+      }
+      hashes.append(sha256)
+    }
+
+    let seed = BuiltinSeed(nativeBuild: nativeBuild, hashes: hashes)
+    if let data = try? JSONEncoder().encode(seed) {
+      try? data.write(to: builtinSeedURL, options: .atomic)
+    }
+  }
+
+  // MARK: - Eviction
+
+  /// Remove cache entries not referenced by any live bundle and not part of
+  /// the builtin seed. Best-effort.
+  func pruneCache(referencedHashes: Set<String>) {
+    var keep = Set(referencedHashes.map { $0.lowercased() })
+    if let seed = readBuiltinSeed() {
+      keep.formUnion(seed.hashes.map { $0.lowercased() })
+    }
+
+    guard let items = try? fileManager.contentsOfDirectory(atPath: cacheDirectory.path) else {
+      return
+    }
+    for item in items {
+      if item == DeltaAssembler.builtinSeedMarkerName || item.hasPrefix(".tmp-") {
+        continue
+      }
+      if !keep.contains(item.lowercased()) {
+        try? fileManager.removeItem(at: cacheDirectory.appendingPathComponent(item))
+      }
+    }
+  }
+}