@otakit/capacitor-updater 2.3.2 → 3.0.0

package/android/src/main/java/com/otakit/updater/WebViewActivation.java

@@ -0,0 +1,26 @@
+package com.otakit.updater;
+
+final class WebViewActivation {
+
+  @FunctionalInterface
+  interface PathActivator {
+    void activate(String path);
+  }
+
+  private WebViewActivation() {}
+
+  static void activate(
+    String path,
+    String builtinAssetPath,
+    PathActivator setServerBasePath,
+    PathActivator setServerAssetPath
+  ) {
+    // Capacitor's Android setters both switch the hosted files and enqueue the
+    // WebView navigation. Calling WebView.reload() as well causes two navigations.
+    if (path == null || path.isEmpty()) {
+      setServerAssetPath.activate(builtinAssetPath);
+    } else {
+      setServerBasePath.activate(path);
+    }
+  }
+}

package/dist/esm/definitions.d.ts

@@ -15,7 +15,7 @@ export declare enum BundleStatus {
     ERROR = "error"
 }
 export interface BundleInfo {
-    /** Unique bundle identifier */
+    /** Opaque local installation identifier. Separate downloads can have different IDs for the same release. */
     id: string;
     /** Semantic version string */
     version: string;
@@ -154,7 +154,7 @@ export interface OtaKitConfig {
      * Set to 0 or a negative value to disable resume throttling.
      */
     checkInterval?: number;
-    /** Milliseconds to wait for notifyAppReady(). Defaults to 10000. */
+    /** Foreground milliseconds to wait for notifyAppReady(). Pauses while inactive/backgrounded. Defaults to 10000. */
     appReadyTimeout?: number;
     /** Custom event ingest base URL. Hosted default: https://ingest.otakit.app/v1 */
     ingestUrl?: string;
@@ -205,7 +205,7 @@ export interface OtaKitPlugin {
     update(): Promise<void>;
     /**
      * **CRITICAL**: Call this when your app has successfully started.
-     * Must be called within appReadyTimeout (default 10s) or rollback occurs.
+     * Must be called within appReadyTimeout of foreground time (default 10s) or rollback occurs.
      */
     notifyAppReady(): Promise<void>;
     /**

package/dist/esm/definitions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"definitions.d.ts","sourceRoot":"","sources":["../../src/definitions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAE5D;;GAEG;AACH,oBAAY,YAAY;IACtB,+BAA+B;IAC/B,OAAO,YAAY;IACnB,iDAAiD;IACjD,OAAO,YAAY;IACnB,mCAAmC;IACnC,KAAK,UAAU;IACf,wBAAwB;IACxB,OAAO,YAAY;IACnB,yDAAyD;IACzD,KAAK,UAAU;CAChB;AAED,MAAM,WAAW,UAAU;IACzB,+BAA+B;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,8BAA8B;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,iDAAiD;IACjD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,mCAAmC;IACnC,MAAM,EAAE,YAAY,CAAC;IACrB,+CAA+C;IAC/C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iCAAiC;IACjC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qDAAqD;IACrD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gEAAgE;IAChE,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,aAAa;IAC5B,qBAAqB;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,iDAAiD;IACjD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,gFAAgF;IAChF,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,sFAAsF;IACtF,MAAM,EAAE,MAAM,CAAC;IACf,kEAAkE;IAClE,IAAI,EAAE,MAAM,CAAC;IACb,uDAAuD;IACvD,SAAS,EAAE,MAAM,CAAC;IAClB,2EAA2E;IAC3E,QAAQ,CAAC,EAAE,KAAK,GAAG,QAAQ,CAAC;IAC5B;;;;OAIG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,UAAU,CAAC;IACpB,QAAQ,EAAE,UAAU,CAAC;IACrB,MAAM,EAAE,UAAU,GAAG,IAAI,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,MAAM,YAAY,GAAG,KAAK,GAAG,QAAQ,GAAG,cAAc,GAAG,WAAW,CAAC;AAE3E,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,eAAe;IAC9B,8FAA8F;IAC9F,GAAG,EAAE,MAAM,CAAC;IACZ,oFAAoF;IACpF,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,WAAW,CAAC;CACnB;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,gBAAgB,CAAC;IACvB,MAAM,EAAE,aAAa,CAAC;CACvB;AAED,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,kBAAkB,CAAC;IACzB,MAAM,EAAE,aAAa,CAAC;CACvB;AAED,MAAM,MAAM,WAAW,GACnB,mBAAmB,GACnB,wBAAwB,GACxB,0BAA0B,CAAC;AAE/B,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,WAAW,CAAC;CACnB;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,EAAE,UAAU,CAAC;CACpB;AAED,MAAM,MAAM,cAAc,GAAG,sBAAsB,GAAG,oBAAoB,CAAC;AAE3E,MAAM,WAAW,WAAW;IAC1B,mEAAmE;IACnE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,mFAAmF;IACnF,MAAM,EAAE,UAAU,GAAG,QAAQ,CAAC;CAC/B;AAED;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,UAAU,CAAC;CACpB;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,UAAU,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gGAAgG;IAChG,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,eAAe,GACvB,iBAAiB,GACjB,cAAc,GACd,eAAe,GACf,gBAAgB,GAChB,UAAU,CAAC;AAEf;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,gEAAgE;IAChE,KAAK,EAAE,MAAM,CAAC;IACd,kEAAkE;IAClE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,uGAAuG;IACvG,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,2FAA2F;IAC3F,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,oDAAoD;IACpD,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,2GAA2G;IAC3G,aAAa,CAAC,EAAE,YAAY,CAAC;IAC7B;;;;;OAKG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,oEAAoE;IACpE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,iFAAiF;IACjF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yHAAyH;IACzH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4DAA4D;IAC5D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,yEAAyE;IACzE,YAAY,CAAC,EAAE,iBAAiB,EAAE,CAAC;IACnC;;;OAGG;IACH,UAAU,CAAC,EAAE,eAAe,EAAE,CAAC;IAC/B,oEAAoE;IACpE,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED,MAAM,WAAW,YAAY;IAC3B;;OAEG;IACH,QAAQ,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC;IAEjC;;OAEG;IACH,KAAK,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC;IAE9B;;OAEG;IACH,QAAQ,IAAI,OAAO,CAAC,cAAc,CAAC,CAAC;IAEpC;;;;;;OAMG;IACH,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAEvB;;;;;;;;OAQG;IACH,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAExB;;;OAGG;IACH,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAEhC;;;OAGG;IACH,cAAc,IAAI,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IAE7C;;;;;;;OAOG;IACH,UAAU,CAAC,OAAO,EAAE;QAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE/D;;;OAGG;IACH,UAAU,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC;IAEnC;;;;;;;;OAQG;IACH,WAAW,CACT,SAAS,EAAE,iBAAiB,EAC5B,YAAY,EAAE,CAAC,MAAM,EAAE,aAAa,KAAK,IAAI,GAC5C,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACjC,WAAW,CACT,SAAS,EAAE,cAAc,EACzB,YAAY,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,IAAI,GAC/C,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACjC,WAAW,CACT,SAAS,EAAE,eAAe,EAC1B,YAAY,EAAE,CAAC,KAAK,EAAE,kBAAkB,KAAK,IAAI,GAChD,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACjC,WAAW,CACT,SAAS,EAAE,gBAAgB,EAC3B,YAAY,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,IAAI,GAC/C,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACjC,WAAW,CACT,SAAS,EAAE,UAAU,EACrB,YAAY,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,IAAI,GAC/C,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAEjC;;OAEG;IACH,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACrC;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC;IACjC,KAAK,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC;IAC9B,QAAQ,IAAI,OAAO,CAAC,cAAc,CAAC,CAAC;IACpC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACxB,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,cAAc,IAAI,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IAC7C,UAAU,CAAC,OAAO,EAAE;QAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/D,UAAU,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC;IACnC,WAAW,CACT,SAAS,EAAE,eAAe,EAC1B,YAAY,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,GACrC,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACjC,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACrC"}
+{"version":3,"file":"definitions.d.ts","sourceRoot":"","sources":["../../src/definitions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAE5D;;GAEG;AACH,oBAAY,YAAY;IACtB,+BAA+B;IAC/B,OAAO,YAAY;IACnB,iDAAiD;IACjD,OAAO,YAAY;IACnB,mCAAmC;IACnC,KAAK,UAAU;IACf,wBAAwB;IACxB,OAAO,YAAY;IACnB,yDAAyD;IACzD,KAAK,UAAU;CAChB;AAED,MAAM,WAAW,UAAU;IACzB,4GAA4G;IAC5G,EAAE,EAAE,MAAM,CAAC;IACX,8BAA8B;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,iDAAiD;IACjD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,mCAAmC;IACnC,MAAM,EAAE,YAAY,CAAC;IACrB,+CAA+C;IAC/C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iCAAiC;IACjC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qDAAqD;IACrD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gEAAgE;IAChE,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,aAAa;IAC5B,qBAAqB;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,iDAAiD;IACjD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,gFAAgF;IAChF,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,sFAAsF;IACtF,MAAM,EAAE,MAAM,CAAC;IACf,kEAAkE;IAClE,IAAI,EAAE,MAAM,CAAC;IACb,uDAAuD;IACvD,SAAS,EAAE,MAAM,CAAC;IAClB,2EAA2E;IAC3E,QAAQ,CAAC,EAAE,KAAK,GAAG,QAAQ,CAAC;IAC5B;;;;OAIG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,UAAU,CAAC;IACpB,QAAQ,EAAE,UAAU,CAAC;IACrB,MAAM,EAAE,UAAU,GAAG,IAAI,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,MAAM,YAAY,GAAG,KAAK,GAAG,QAAQ,GAAG,cAAc,GAAG,WAAW,CAAC;AAE3E,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,eAAe;IAC9B,8FAA8F;IAC9F,GAAG,EAAE,MAAM,CAAC;IACZ,oFAAoF;IACpF,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,WAAW,CAAC;CACnB;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,gBAAgB,CAAC;IACvB,MAAM,EAAE,aAAa,CAAC;CACvB;AAED,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,kBAAkB,CAAC;IACzB,MAAM,EAAE,aAAa,CAAC;CACvB;AAED,MAAM,MAAM,WAAW,GACnB,mBAAmB,GACnB,wBAAwB,GACxB,0BAA0B,CAAC;AAE/B,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,WAAW,CAAC;CACnB;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,EAAE,UAAU,CAAC;CACpB;AAED,MAAM,MAAM,cAAc,GAAG,sBAAsB,GAAG,oBAAoB,CAAC;AAE3E,MAAM,WAAW,WAAW;IAC1B,mEAAmE;IACnE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,mFAAmF;IACnF,MAAM,EAAE,UAAU,GAAG,QAAQ,CAAC;CAC/B;AAED;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,UAAU,CAAC;CACpB;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,UAAU,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gGAAgG;IAChG,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,eAAe,GACvB,iBAAiB,GACjB,cAAc,GACd,eAAe,GACf,gBAAgB,GAChB,UAAU,CAAC;AAEf;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,gEAAgE;IAChE,KAAK,EAAE,MAAM,CAAC;IACd,kEAAkE;IAClE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,uGAAuG;IACvG,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,2FAA2F;IAC3F,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,oDAAoD;IACpD,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,2GAA2G;IAC3G,aAAa,CAAC,EAAE,YAAY,CAAC;IAC7B;;;;;OAKG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,mHAAmH;IACnH,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,iFAAiF;IACjF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yHAAyH;IACzH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4DAA4D;IAC5D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,yEAAyE;IACzE,YAAY,CAAC,EAAE,iBAAiB,EAAE,CAAC;IACnC;;;OAGG;IACH,UAAU,CAAC,EAAE,eAAe,EAAE,CAAC;IAC/B,oEAAoE;IACpE,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED,MAAM,WAAW,YAAY;IAC3B;;OAEG;IACH,QAAQ,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC;IAEjC;;OAEG;IACH,KAAK,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC;IAE9B;;OAEG;IACH,QAAQ,IAAI,OAAO,CAAC,cAAc,CAAC,CAAC;IAEpC;;;;;;OAMG;IACH,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAEvB;;;;;;;;OAQG;IACH,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAExB;;;OAGG;IACH,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAEhC;;;OAGG;IACH,cAAc,IAAI,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IAE7C;;;;;;;OAOG;IACH,UAAU,CAAC,OAAO,EAAE;QAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE/D;;;OAGG;IACH,UAAU,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC;IAEnC;;;;;;;;OAQG;IACH,WAAW,CACT,SAAS,EAAE,iBAAiB,EAC5B,YAAY,EAAE,CAAC,MAAM,EAAE,aAAa,KAAK,IAAI,GAC5C,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACjC,WAAW,CACT,SAAS,EAAE,cAAc,EACzB,YAAY,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,IAAI,GAC/C,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACjC,WAAW,CACT,SAAS,EAAE,eAAe,EAC1B,YAAY,EAAE,CAAC,KAAK,EAAE,kBAAkB,KAAK,IAAI,GAChD,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACjC,WAAW,CACT,SAAS,EAAE,gBAAgB,EAC3B,YAAY,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,IAAI,GAC/C,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACjC,WAAW,CACT,SAAS,EAAE,UAAU,EACrB,YAAY,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,IAAI,GAC/C,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAEjC;;OAEG;IACH,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACrC;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC;IACjC,KAAK,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC;IAC9B,QAAQ,IAAI,OAAO,CAAC,cAAc,CAAC,CAAC;IACpC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACxB,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,cAAc,IAAI,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IAC7C,UAAU,CAAC,OAAO,EAAE;QAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/D,UAAU,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC;IACnC,WAAW,CACT,SAAS,EAAE,eAAe,EAC1B,YAAY,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,GACrC,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACjC,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACrC"}

package/ios/Sources/UpdaterPlugin/BundleCrypto.swift

@@ -1,10 +1,12 @@
 import CryptoKit
 import Foundation
+import os
 
 enum BundleCryptoError: Error, LocalizedError {
   case noMatchingKey(String)
   case invalidParameter(String)
   case decryptionFailed(String)
+  case insufficientMemory(encryptedBytes: Int64, budgetBytes: Int64)
 
   var errorDescription: String? {
     switch self {
@@ -14,6 +16,8 @@ enum BundleCryptoError: Error, LocalizedError {
       return "invalid bundle encryption parameter: \(name)"
     case let .decryptionFailed(detail):
       return "bundle decryption failed: \(detail)"
+    case let .insufficientMemory(encryptedBytes, budgetBytes):
+      return "insufficient_memory_for_encrypted_bundle; encryptedBytes=\(encryptedBytes); budgetBytes=\(budgetBytes)"
     }
   }
 }
@@ -25,6 +29,25 @@ enum BundleCryptoError: Error, LocalizedError {
 enum BundleCrypto {
   private static let tagLength = 16
   private static let keyLength = 32
+  private static let reserveBytes: Int64 = 32 * 1024 * 1024
+  private static let maximumEncryptedBytes: Int64 = 128 * 1024 * 1024
+
+  static func decryptionMemoryEstimate() -> Int64 {
+    #if targetEnvironment(simulator)
+    // Simulator apps can report zero from os_proc_available_memory(). Host RAM
+    // is only an estimate; keep the same reserve, multiplier, and hard cap.
+    return Int64(clamping: ProcessInfo.processInfo.physicalMemory)
+    #else
+    return Int64(os_proc_available_memory())
+    #endif
+  }
+
+  static func requireMemoryBudget(encryptedBytes: Int64, availableBytes: Int64) throws {
+    let budget = availableBytes <= reserveBytes ? 0 : min(maximumEncryptedBytes, (availableBytes - reserveBytes) / 4)
+    guard encryptedBytes <= budget else {
+      throw BundleCryptoError.insufficientMemory(encryptedBytes: encryptedBytes, budgetBytes: budget)
+    }
+  }
 
   static func unwrapDek(
     kek: Data,
@@ -63,16 +86,25 @@ enum BundleCrypto {
     dek: Data,
     nonceB64: String,
     input: URL,
-    output: URL
+    output: URL,
+    availableBytes: Int64 = BundleCrypto.decryptionMemoryEstimate()
   ) throws {
     guard let nonce = Data(base64Encoded: nonceB64) else {
       throw BundleCryptoError.invalidParameter("nonce")
     }
 
-    let ciphertextWithTag = try Data(contentsOf: input)
-    guard ciphertextWithTag.count > tagLength else {
+    guard dek.count == keyLength, nonce.count == 12 else {
+      throw BundleCryptoError.invalidParameter("key or nonce length")
+    }
+    let attributes = try FileManager.default.attributesOfItem(atPath: input.path)
+    guard let size = attributes[.size] as? NSNumber, size.int64Value > tagLength else {
       throw BundleCryptoError.invalidParameter("ciphertext too short")
     }
+    try requireMemoryBudget(encryptedBytes: size.int64Value, availableBytes: availableBytes)
+    let ciphertextWithTag = try Data(contentsOf: input, options: .mappedIfSafe)
+    guard ciphertextWithTag.count == size.intValue else {
+      throw BundleCryptoError.invalidParameter("ciphertext changed during read")
+    }
 
     do {
       let sealedBox = try AES.GCM.SealedBox(

package/ios/Sources/UpdaterPlugin/BundleInfo.swift

@@ -15,6 +15,19 @@ struct BundleInfo: Codable {
     id == "builtin"
   }
 
+  var attemptId: String? {
+    guard id.hasPrefix("bundle-"), UUID(uuidString: String(id.dropFirst(7))) != nil else { return nil }
+    return id
+  }
+
+  func withStatus(_ status: BundleStatus) -> BundleInfo {
+    BundleInfo(
+      id: id, version: version, runtimeVersion: runtimeVersion, status: status,
+      downloadedAt: downloadedAt, sha256: sha256, path: path, channel: channel,
+      releaseId: releaseId
+    )
+  }
+
   func toDictionary() -> [String: Any] {
     var result: [String: Any] = [
       "id": id,

package/ios/Sources/UpdaterPlugin/BundleStore.swift

@@ -1,6 +1,9 @@
 import Foundation
 
 final class BundleStore {
+  /// Release identity is metadata; an installation must never reuse a live directory.
+  static func newInstallationId() -> String { "bundle-\(UUID().uuidString.lowercased())" }
+
   private enum Keys {
     static let currentBundleId = "otakit_current_bundle_id"
     static let fallbackBundleId = "otakit_fallback_bundle_id"
@@ -10,28 +13,33 @@ final class BundleStore {
     static let overrideChannel = "otakit_override_channel"
   }
 
-  private let defaults = UserDefaults.standard
+  private let defaults: UserDefaults
+  private let rootDirectory: URL
   private let fileManager = FileManager.default
   var appRuntimeVersion: String?
 
-  private lazy var decoder: JSONDecoder = {
+  init(defaults: UserDefaults = .standard, rootDirectory: URL? = nil) {
+    self.defaults = defaults
+    self.rootDirectory = rootDirectory ?? FileManager.default.urls(
+      for: .applicationSupportDirectory,
+      in: .userDomainMask
+    )[0]
+  }
+
+  private var decoder: JSONDecoder {
     let decoder = JSONDecoder()
     decoder.dateDecodingStrategy = .iso8601
     return decoder
-  }()
+  }
 
-  private lazy var encoder: JSONEncoder = {
+  private var encoder: JSONEncoder {
     let encoder = JSONEncoder()
     encoder.dateEncodingStrategy = .iso8601
     return encoder
-  }()
+  }
 
   private(set) lazy var bundlesDirectory: URL = {
-    let appSupport = fileManager.urls(
-      for: .applicationSupportDirectory,
-      in: .userDomainMask
-    ).first!
-    let directory = appSupport.appendingPathComponent(
+    let directory = rootDirectory.appendingPathComponent(
       "otakit_bundles",
       isDirectory: true
     )
@@ -44,11 +52,7 @@ final class BundleStore {
 
   /// Content-addressed file cache for the deltas strategy (`otakit_files/<sha256>`).
   private(set) lazy var filesCacheDirectory: URL = {
-    let appSupport = fileManager.urls(
-      for: .applicationSupportDirectory,
-      in: .userDomainMask
-    ).first!
-    let directory = appSupport.appendingPathComponent(
+    let directory = rootDirectory.appendingPathComponent(
       "otakit_files",
       isDirectory: true
     )
@@ -151,79 +155,106 @@ final class BundleStore {
     return bundles
   }
 
-  func getCurrentBundle() -> BundleInfo {
-    guard
-      let bundleId = defaults.string(forKey: Keys.currentBundleId),
-      let bundle = getBundle(id: bundleId)
-    else {
-      return builtinBundle()
+  private struct CoreState: Codable {
+    var version = 1
+    var currentId: String?
+    var fallbackId: String?
+    var stagedId: String?
+    var lastFailed: BundleInfo?
+  }
+
+  private var stateURL: URL { rootDirectory.appendingPathComponent("otakit-state.json") }
+  private let persistenceLock = NSRecursiveLock()
+
+  private func readCoreState() throws -> CoreState {
+    persistenceLock.lock()
+    defer { persistenceLock.unlock() }
+    if fileManager.fileExists(atPath: stateURL.path) {
+      let state = try decoder.decode(CoreState.self, from: Data(contentsOf: stateURL))
+      guard state.version == 1 else {
+        throw CocoaError(.coderReadCorrupt)
+      }
+      return state
     }
-    return bundle
+    // Existing installations migrate on their first successful state write.
+    let failed = defaults.data(forKey: Keys.lastFailedBundleInfo)
+      .flatMap { try? decoder.decode(BundleInfo.self, from: $0) }
+    return CoreState(
+      currentId: defaults.string(forKey: Keys.currentBundleId),
+      fallbackId: defaults.string(forKey: Keys.fallbackBundleId),
+      stagedId: defaults.string(forKey: Keys.stagedBundleId),
+      lastFailed: failed
+    )
   }
 
-  func getCurrentBundleId() -> String? {
-    defaults.string(forKey: Keys.currentBundleId)
+  private func writeCoreState(_ state: CoreState) throws {
+    try fileManager.createDirectory(at: rootDirectory, withIntermediateDirectories: true)
+    try encoder.encode(state).write(to: stateURL, options: .atomic)
   }
 
-  func setCurrentBundleId(_ id: String?) {
-    if let id {
-      defaults.set(id, forKey: Keys.currentBundleId)
-    } else {
-      defaults.removeObject(forKey: Keys.currentBundleId)
-    }
+  private func mutateCoreState(_ mutation: (inout CoreState) -> Void) throws {
+    persistenceLock.lock()
+    defer { persistenceLock.unlock() }
+    var state = try readCoreState()
+    mutation(&state)
+    try writeCoreState(state)
   }
 
-  func getFallbackBundle() -> BundleInfo {
-    guard
-      let bundleId = defaults.string(forKey: Keys.fallbackBundleId),
-      let bundle = getBundle(id: bundleId)
-    else {
+  func setCoreState(
+    currentId: String?, fallbackId: String?, stagedId: String?, lastFailed: BundleInfo?
+  ) throws {
+    persistenceLock.lock()
+    defer { persistenceLock.unlock() }
+    // Validate an existing state before replacing it; corruption must fail closed.
+    _ = try readCoreState()
+    try writeCoreState(CoreState(
+      currentId: currentId, fallbackId: fallbackId, stagedId: stagedId, lastFailed: lastFailed
+    ))
+  }
+
+  func protectedBundleIds() throws -> Set<String> {
+    let state = try readCoreState()
+    return Set([state.currentId, state.fallbackId, state.stagedId].compactMap { $0 })
+  }
+
+  func getCurrentBundle() -> BundleInfo {
+    guard let id = getCurrentBundleId(), let bundle = getBundle(id: id) else {
       return builtinBundle()
     }
     return bundle
   }
 
-  func getFallbackBundleId() -> String? {
-    defaults.string(forKey: Keys.fallbackBundleId)
+  func getCurrentBundleId() -> String? { (try? readCoreState())?.currentId }
+
+  func setCurrentBundleId(_ id: String?) throws {
+    try mutateCoreState { $0.currentId = id }
   }
 
-  func setFallbackBundleId(_ id: String?) {
-    if let id {
-      defaults.set(id, forKey: Keys.fallbackBundleId)
-    } else {
-      defaults.removeObject(forKey: Keys.fallbackBundleId)
+  func getFallbackBundle() -> BundleInfo {
+    guard let id = getFallbackBundleId(), let bundle = getBundle(id: id) else {
+      return builtinBundle()
     }
+    return bundle
   }
 
-  func getStagedBundleId() -> String? {
-    defaults.string(forKey: Keys.stagedBundleId)
-  }
+  func getFallbackBundleId() -> String? { (try? readCoreState())?.fallbackId }
 
-  func setStagedBundleId(_ id: String?) {
-    if let id {
-      defaults.set(id, forKey: Keys.stagedBundleId)
-    } else {
-      defaults.removeObject(forKey: Keys.stagedBundleId)
-    }
+  func setFallbackBundleId(_ id: String?) throws {
+    try mutateCoreState { $0.fallbackId = id }
   }
 
-  func setLastFailedBundle(_ bundle: BundleInfo?) {
-    if let bundle {
-      if let data = try? encoder.encode(bundle) {
-        defaults.set(data, forKey: Keys.lastFailedBundleInfo)
-      }
-    } else {
-      defaults.removeObject(forKey: Keys.lastFailedBundleInfo)
-    }
+  func getStagedBundleId() -> String? { (try? readCoreState())?.stagedId }
+
+  func setStagedBundleId(_ id: String?) throws {
+    try mutateCoreState { $0.stagedId = id }
   }
 
-  func getLastFailedBundle() -> BundleInfo? {
-    guard let data = defaults.data(forKey: Keys.lastFailedBundleInfo) else {
-      return nil
-    }
-    return try? decoder.decode(BundleInfo.self, from: data)
+  func setLastFailedBundle(_ bundle: BundleInfo?) throws {
+    try mutateCoreState { $0.lastFailed = bundle }
   }
 
+  func getLastFailedBundle() -> BundleInfo? { (try? readCoreState())?.lastFailed }
+
   func getOverrideChannel() -> String? {
     defaults.string(forKey: Keys.overrideChannel)
   }
@@ -249,7 +280,7 @@ final class BundleStore {
     }
   }
 
-  func markStatus(bundleId: String, status: BundleStatus) {
+  func markStatus(bundleId: String, status: BundleStatus) throws {
     guard var bundle = getBundle(id: bundleId) else {
       return
     }
@@ -264,7 +295,7 @@ final class BundleStore {
       channel: bundle.channel,
       releaseId: bundle.releaseId
     )
-    try? saveBundle(bundle)
+    try saveBundle(bundle)
   }
 
   func deleteBundle(id: String) throws {
@@ -272,17 +303,12 @@ final class BundleStore {
       return
     }
 
+    try setCoreState(
+      currentId: getCurrentBundleId() == id ? nil : getCurrentBundleId(),
+      fallbackId: getFallbackBundleId() == id ? nil : getFallbackBundleId(),
+      stagedId: getStagedBundleId() == id ? nil : getStagedBundleId(),
+      lastFailed: getLastFailedBundle()
+    )
     try fileManager.removeItem(at: bundleDirectory(for: id))
-
-    if getStagedBundleId() == id {
-      setStagedBundleId(nil)
-    }
-    if defaults.string(forKey: Keys.currentBundleId) == id {
-      setCurrentBundleId(nil)
-    }
-    if defaults.string(forKey: Keys.fallbackBundleId) == id {
-      setFallbackBundleId(nil)
-    }
   }
-
 }

package/ios/Sources/UpdaterPlugin/CheckFailure.swift

@@ -0,0 +1,41 @@
+import Foundation
+
+/// Bounded diagnostics: never include manifest bodies, URLs, signatures, or key IDs.
+struct CheckFailure {
+  let phase: String
+  let detail: String
+
+  static func from(_ error: Error) -> CheckFailure? {
+    if error is CancellationError { return nil }
+    if let verifier = error as? ManifestVerifierError {
+      let detail: String
+      switch verifier {
+      case .expired: detail = "signature_expired"
+      case .unknownKid: detail = "signature_unknown_key"
+      case .invalidSignature: detail = "signature_invalid"
+      case .missingSignature: detail = "signature_missing"
+      }
+      return CheckFailure(phase: "signature", detail: detail)
+    }
+    if let manifest = error as? ManifestClientError {
+      if case let .httpStatus(status) = manifest {
+        return CheckFailure(phase: "check", detail: "manifest_http_\(status)")
+      }
+      return CheckFailure(phase: "check", detail: "manifest_invalid")
+    }
+    let failure = error as NSError
+    if failure.domain == NSURLErrorDomain {
+      if failure.code == NSURLErrorCancelled { return nil }
+      return CheckFailure(phase: "check", detail: "manifest_network_\(failure.code)")
+    }
+    return CheckFailure(phase: "check", detail: "manifest_check_failed")
+  }
+
+  static func observe<T>(_ operation: () async throws -> T, report: (CheckFailure) throws -> Void) async throws -> T {
+    do { return try await operation() }
+    catch {
+      if let failure = from(error) { try report(failure) }
+      throw error
+    }
+  }
+}

package/ios/Sources/UpdaterPlugin/DeltaAssembler.swift

@@ -47,14 +47,14 @@ final class DeltaAssembler {
   private let maxTotalSize: UInt64 = 500_000_000 // 500 MB
 
   private let cacheDirectory: URL
-  private let downloader: Downloader
+  private let download: (URL) async throws -> URL
   private let fileManager = FileManager.default
 
   private static let builtinSeedMarkerName = "builtin_seed.json"
 
-  init(cacheDirectory: URL, downloader: Downloader) {
+  init(cacheDirectory: URL, downloader: Downloader, fetch: ((URL) async throws -> URL)? = nil) {
     self.cacheDirectory = cacheDirectory
-    self.downloader = downloader
+    self.download = fetch ?? { try await downloader.download(from: $0) }
   }
 
   // MARK: - Canonical file list
@@ -153,36 +153,43 @@ final class DeltaAssembler {
     cacheDirectory.appendingPathComponent(sha256.lowercased(), isDirectory: false)
   }
 
-  private func isCached(_ sha256: String) -> Bool {
-    fileManager.fileExists(atPath: cachePath(for: sha256).path)
+  private func validCached(_ entry: ManifestFileEntry) -> Bool {
+    let file = cachePath(for: entry.sha256)
+    guard let attributes = try? fileManager.attributesOfItem(atPath: file.path),
+          attributes[.type] as? FileAttributeType == .typeRegular,
+          let size = attributes[.size] as? NSNumber,
+          entry.size == nil || size.intValue == entry.size else { return false }
+    return (try? HashUtils.verify(fileURL: file, expectedSha256: entry.sha256)) == true
+  }
+
+  private func discardDamagedCache(_ file: URL) throws {
+    if fileManager.fileExists(atPath: file.path) { try fileManager.removeItem(at: file) }
   }
 
   private func ensureCached(_ entry: ManifestFileEntry) async throws {
-    if isCached(entry.sha256) {
-      return
-    }
+    if validCached(entry) { return }
+    let destination = cachePath(for: entry.sha256)
+    try discardDamagedCache(destination)
 
     guard let url = URL(string: entry.url) else {
       throw DeltaAssemblerError.invalidFileURL(entry.url)
     }
 
-    let temporary = try await downloader.download(from: url)
+    let temporary = try await download(url)
     defer { try? fileManager.removeItem(at: temporary) }
 
-    guard try HashUtils.verify(fileURL: temporary, expectedSha256: entry.sha256) else {
-      throw DeltaAssemblerError.fileHashMismatch(entry.path)
-    }
+    try HashUtils.verifyDownload(fileURL: temporary, expectedSha256: entry.sha256,
+      expectedBytes: entry.size, kind: "file")
 
-    let destination = cachePath(for: entry.sha256)
-    if fileManager.fileExists(atPath: destination.path) {
-      return
-    }
+    if validCached(entry) { return }
+    try discardDamagedCache(destination)
     // Write via temp + rename so a crash mid-copy can never leave a
-    // truncated file at a content-addressed path (exists() implies valid).
+    // truncated file at a content-addressed path. Existing entries are still verified.
     let staging = cacheDirectory.appendingPathComponent(
       ".tmp-\(UUID().uuidString)",
       isDirectory: false
     )
+    defer { try? fileManager.removeItem(at: staging) }
     try fileManager.copyItem(at: temporary, to: staging)
     do {
       try fileManager.moveItem(at: staging, to: destination)
@@ -193,6 +200,8 @@ final class DeltaAssembler {
         throw error
       }
     }
+    try HashUtils.verifyDownload(fileURL: destination, expectedSha256: entry.sha256,
+      expectedBytes: entry.size, kind: "cached file")
   }
 
   // MARK: - Assembly
@@ -228,6 +237,9 @@ final class DeltaAssembler {
       let parent = target.deletingLastPathComponent()
       try fileManager.createDirectory(at: parent, withIntermediateDirectories: true)
       try fileManager.copyItem(at: cachePath(for: entry.sha256), to: target)
+      // Recheck the installed copy if the cache changed during assembly.
+      try HashUtils.verifyDownload(fileURL: target, expectedSha256: entry.sha256,
+        expectedBytes: entry.size, kind: "assembled file")
     }
   }
 

package/ios/Sources/UpdaterPlugin/DeviceEventClient.swift

@@ -4,10 +4,13 @@ enum DeviceEventAction: String {
     case downloaded
     case applied
     case downloadError = "download_error"
+    case checkError = "check_error"
     case rollback
 }
 
 enum DeviceEventClient {
+    private static let delivery = EventDelivery()
+    static func resume() { delivery.resume() }
     static func send(
         ingestUrl: String,
         appId: String,
@@ -18,7 +21,10 @@ enum DeviceEventClient {
         runtimeVersion: String?,
         releaseId: String,
         nativeBuild: String,
-        detail: String?
+        detail: String?,
+        attemptId: String? = nil,
+        phase: String? = nil,
+        lifecycle: String = "unknown"
     ) {
         let sanitizedBase = ingestUrl.replacingOccurrences(
             of: "/+$",
@@ -38,7 +44,11 @@ enum DeviceEventClient {
             "bundleVersion": bundleVersion,
             "releaseId": releaseId,
             "nativeBuild": nativeBuild,
+            "nativeSdkVersion": SDKVersion.value,
+            "lifecycle": lifecycle,
         ]
+        if let attemptId { payload["attemptId"] = attemptId }
+        if let phase { payload["phase"] = phase }
         if let channel, !channel.isEmpty {
             payload["channel"] = channel
         }
@@ -53,14 +63,6 @@ enum DeviceEventClient {
             return
         }
 
-        var request = URLRequest(url: url)
-        request.httpMethod = "POST"
-        request.setValue(appId, forHTTPHeaderField: "X-App-Id")
-        request.setValue("application/json", forHTTPHeaderField: "Content-Type")
-        request.httpBody = body
-        request.timeoutInterval = 10
-
-        // Device events are best-effort and should never block the update flow.
-        URLSession.shared.dataTask(with: request).resume()
+        delivery.enqueue(url: url, appId: appId, body: body)
     }
 }

package/ios/Sources/UpdaterPlugin/DocumentReadyBridge.swift

@@ -0,0 +1,43 @@
+import Foundation
+import WebKit
+
+/// Captures the activation in the document's bridge before application JavaScript runs.
+final class DocumentReadyBridge {
+  private var script: WKUserScript?
+
+  static func source(activationId: String) throws -> String {
+    let quotedId = String(data: try JSONEncoder().encode(activationId), encoding: .utf8)!
+    return """
+    (() => {
+      if (window !== window.top) return;
+      const cap = window.Capacitor;
+      if (!cap || typeof cap.toNative !== 'function') return;
+      const original = cap.toNative;
+      const activationId = \(quotedId);
+      cap.toNative = function(plugin, method, options, callback) {
+        if (plugin === 'OtaKit' && method === 'notifyAppReady') {
+          options = Object.assign({}, options, { _otakitActivationId: activationId });
+        }
+        return original.call(this, plugin, method, options, callback);
+      };
+    })();
+    """
+  }
+
+  func install(on webView: WKWebView, activationId: String) throws {
+    precondition(Thread.isMainThread)
+    let controller = webView.configuration.userContentController
+    let replacement = WKUserScript(
+      source: try Self.source(activationId: activationId),
+      injectionTime: .atDocumentStart, forMainFrameOnly: true
+    )
+    // WebKit has no individual removal API. Preserve every other plugin's scripts and order.
+    if let script {
+      let retained = controller.userScripts.filter { $0 !== script }
+      controller.removeAllUserScripts()
+      for retainedScript in retained { controller.addUserScript(retainedScript) }
+    }
+    controller.addUserScript(replacement)
+    script = replacement
+  }
+}