native-update 1.4.9 → 3.1.0

package/dist/esm/app-update/app-update-installer.js

@@ -2,7 +2,7 @@ import { Logger } from '../core/logger';
 import { AppUpdateInstallStatus, } from './types';
 export class AppUpdateInstaller {
     constructor(_) {
-        // config parameter is kept for compatibility but not used
+        this.flexibleUpdateInterval = null;
         this.logger = new Logger('AppUpdateInstaller');
         this.currentState = {
             installStatus: AppUpdateInstallStatus.UNKNOWN,
@@ -67,6 +67,13 @@ export class AppUpdateInstaller {
     }
     async cancelUpdate() {
         this.logger.log('Cancelling update');
+        // Stop the simulated download interval. Without this, the interval
+        // runs forever even after cancel because the only previous exit was
+        // a "download finished" branch.
+        if (this.flexibleUpdateInterval) {
+            clearInterval(this.flexibleUpdateInterval);
+            this.flexibleUpdateInterval = null;
+        }
         if (this.currentState.installStatus === AppUpdateInstallStatus.DOWNLOADING) {
             this.updateState(AppUpdateInstallStatus.CANCELED);
         }
@@ -85,22 +92,27 @@ export class AppUpdateInstaller {
         this.logger.log('Update state changed', this.currentState);
     }
     simulateFlexibleUpdate() {
-        // Simulate download progress for web platform
         let downloaded = 0;
-        const totalSize = 50 * 1024 * 1024; // 50MB
-        const chunkSize = 1024 * 1024; // 1MB per tick
-        const interval = setInterval(() => {
+        const totalSize = 50 * 1024 * 1024;
+        const chunkSize = 1024 * 1024;
+        if (this.flexibleUpdateInterval) {
+            clearInterval(this.flexibleUpdateInterval);
+        }
+        this.flexibleUpdateInterval = setInterval(() => {
             downloaded += chunkSize;
             if (downloaded >= totalSize) {
                 downloaded = totalSize;
-                clearInterval(interval);
+                if (this.flexibleUpdateInterval) {
+                    clearInterval(this.flexibleUpdateInterval);
+                    this.flexibleUpdateInterval = null;
+                }
                 this.updateState(AppUpdateInstallStatus.DOWNLOADED);
             }
             const progress = {
                 bytesDownloaded: downloaded,
                 totalBytesToDownload: totalSize,
                 percentComplete: Math.round((downloaded / totalSize) * 100),
-                downloadSpeed: chunkSize, // 1MB/s
+                downloadSpeed: chunkSize,
                 estimatedTime: Math.ceil((totalSize - downloaded) / chunkSize),
             };
             if (this.progressCallback) {
@@ -120,4 +132,3 @@ export class AppUpdateInstaller {
         return !this.isAndroid() && !this.isIOS();
     }
 }
-//# sourceMappingURL=app-update-installer.js.map

package/dist/esm/app-update/app-update-manager.js

@@ -196,4 +196,3 @@ export class AppUpdateManager {
         return Object.assign(Object.assign(Object.assign({}, nativeInfo), serverInfo), { updateAvailable: nativeInfo.updateAvailable || !!serverInfo.availableVersion, availableVersion: serverInfo.availableVersion || nativeInfo.availableVersion });
     }
 }
-//# sourceMappingURL=app-update-manager.js.map

package/dist/esm/app-update/app-update-notifier.js

@@ -97,4 +97,3 @@ export class AppUpdateNotifier {
         }
     }
 }
-//# sourceMappingURL=app-update-notifier.js.map

package/dist/esm/app-update/index.js

@@ -4,4 +4,3 @@ export { AppUpdateInstaller } from './app-update-installer';
 export { AppUpdateNotifier } from './app-update-notifier';
 export { PlatformAppUpdate } from './platform-app-update';
 export * from './types';
-//# sourceMappingURL=index.js.map

package/dist/esm/app-update/platform-app-update.js

@@ -1,5 +1,6 @@
 import { Logger } from '../core/logger';
 import { Capacitor } from '@capacitor/core';
+import { SecurityValidator } from '../core/security';
 export class PlatformAppUpdate {
     constructor(config) {
         this.config = config;
@@ -31,13 +32,19 @@ export class PlatformAppUpdate {
             // Web platform - check configured update URL
             if (this.config.webUpdateUrl) {
                 try {
+                    SecurityValidator.validateDownloadUrl(this.config.webUpdateUrl);
                     const response = await fetch(this.config.webUpdateUrl);
                     const data = await response.json();
                     if (data.version && data.version !== versionInfo.currentVersion) {
                         updateInfo.updateAvailable = true;
                         updateInfo.availableVersion = data.version;
                         updateInfo.releaseNotes = data.releaseNotes;
-                        updateInfo.updateURL = data.downloadUrl;
+                        // Validate downloadUrl scheme — server-controlled value, must
+                        // not be allowed to smuggle javascript: into a later openUrl.
+                        if (data.downloadUrl) {
+                            SecurityValidator.validateStoreUrl(data.downloadUrl);
+                            updateInfo.updateURL = data.downloadUrl;
+                        }
                     }
                 }
                 catch (error) {
@@ -85,8 +92,11 @@ export class PlatformAppUpdate {
         return { url, platform: platform };
     }
     async openUrl(url) {
+        // Reject any non-HTTPS / non-store URL — protects against
+        // `javascript:` payloads handed back from a compromised server.
+        SecurityValidator.validateStoreUrl(url);
         if (typeof window !== 'undefined' && window.open) {
-            window.open(url, '_blank');
+            window.open(url, '_blank', 'noopener,noreferrer');
         }
         else {
             throw new Error('Cannot open URL on this platform');
@@ -126,4 +136,3 @@ export class PlatformAppUpdate {
         return capabilities;
     }
 }
-//# sourceMappingURL=platform-app-update.js.map

package/dist/esm/app-update/types.js

@@ -9,4 +9,3 @@ export var AppUpdateInstallStatus;
     AppUpdateInstallStatus[AppUpdateInstallStatus["CANCELED"] = 6] = "CANCELED";
     AppUpdateInstallStatus[AppUpdateInstallStatus["DOWNLOADED"] = 11] = "DOWNLOADED";
 })(AppUpdateInstallStatus || (AppUpdateInstallStatus = {}));
-//# sourceMappingURL=types.js.map

package/dist/esm/background-update/background-scheduler.js

@@ -307,4 +307,3 @@ export class BackgroundScheduler {
         return 0;
     }
 }
-//# sourceMappingURL=background-scheduler.js.map

package/dist/esm/background-update/index.js

@@ -1,3 +1,2 @@
 export { BackgroundScheduler } from './background-scheduler';
 export { NotificationManager } from './notification-manager';
-//# sourceMappingURL=index.js.map

package/dist/esm/background-update/notification-manager.js

@@ -86,4 +86,3 @@ export class NotificationManager {
         return (_a = this.preferences.vibrationEnabled) !== null && _a !== void 0 ? _a : true;
     }
 }
-//# sourceMappingURL=notification-manager.js.map

package/dist/esm/config/support.js

@@ -7,4 +7,3 @@ export const SUPPORT_CONFIG = {
     label: 'Support the Project',
     description: 'Help us keep native-update free and improving',
 };
-//# sourceMappingURL=support.js.map

package/dist/esm/core/analytics.d.ts

@@ -60,6 +60,19 @@ export declare class Analytics {
 /**
  * Console analytics provider for development
  */
+/**
+ * Default analytics provider that writes events directly to the
+ * browser/native console. Production apps should swap this for a real
+ * provider (Firebase Analytics, Amplitude, Sentry, …) via
+ * `setAnalyticsProvider()`.
+ *
+ * The two `console.*` calls below are intentional and on-brand for this
+ * class — `ConsoleAnalyticsProvider` IS the "send to console" sink. They
+ * are NOT a violation of the centralized-logger rule (which targets
+ * incidental logging, not analytics dispatch). Do not replace with the
+ * Logger — it would create a circular relationship between analytics
+ * and logging surfaces.
+ */
 export declare class ConsoleAnalyticsProvider implements AnalyticsProvider {
     private userId?;
     private properties;

package/dist/esm/core/analytics.js

@@ -111,14 +111,29 @@ export class Analytics {
 /**
  * Console analytics provider for development
  */
+/**
+ * Default analytics provider that writes events directly to the
+ * browser/native console. Production apps should swap this for a real
+ * provider (Firebase Analytics, Amplitude, Sentry, …) via
+ * `setAnalyticsProvider()`.
+ *
+ * The two `console.*` calls below are intentional and on-brand for this
+ * class — `ConsoleAnalyticsProvider` IS the "send to console" sink. They
+ * are NOT a violation of the centralized-logger rule (which targets
+ * incidental logging, not analytics dispatch). Do not replace with the
+ * Logger — it would create a circular relationship between analytics
+ * and logging surfaces.
+ */
 export class ConsoleAnalyticsProvider {
     constructor() {
         this.properties = {};
     }
     async trackEvent(event) {
+        // ConsoleAnalyticsProvider intentionally writes to console — see class header.
         console.log('[Analytics]', event.type, Object.assign(Object.assign({}, event), { userId: this.userId, properties: this.properties }));
     }
     async trackError(error, context) {
+        // ConsoleAnalyticsProvider intentionally writes to console — see class header.
         console.error('[Analytics Error]', {
             error: error.message,
             stack: error.stack,
@@ -134,4 +149,3 @@ export class ConsoleAnalyticsProvider {
         this.properties = Object.assign(Object.assign({}, this.properties), properties);
     }
 }
-//# sourceMappingURL=analytics.js.map

package/dist/esm/core/cache-manager.js

@@ -272,4 +272,3 @@ export class CacheManager {
         }
     }
 }
-//# sourceMappingURL=cache-manager.js.map

package/dist/esm/core/config.d.ts

@@ -1,11 +1,6 @@
 import type { Filesystem } from '@capacitor/filesystem';
 import type { Preferences } from '@capacitor/preferences';
 import type { UpdateStrategy, ChecksumAlgorithm, SecurityConfig } from '../definitions';
-import type { FirestoreConfig } from '../firestore/schema';
-/**
- * Backend type for update checking
- */
-export type BackendType = 'http' | 'firestore';
 export interface PluginConfig {
     filesystem?: typeof Filesystem;
     preferences?: typeof Preferences;
@@ -22,6 +17,12 @@ export interface PluginConfig {
     serverUrl?: string;
     channel?: string;
     appId?: string;
+    /**
+     * API key for authentication with the Native Update backend
+     * Get this from the Native Update dashboard after creating your app
+     * Format: nu_app_xxx or nu_device_xxx
+     */
+    apiKey?: string;
     autoCheck?: boolean;
     autoUpdate?: boolean;
     updateStrategy?: UpdateStrategy;
@@ -38,16 +39,6 @@ export interface PluginConfig {
     packageName?: string;
     webReviewUrl?: string;
     minimumVersion?: string;
-    /**
-     * Backend type for update checking
-     * - 'http': Traditional HTTP server (default)
-     * - 'firestore': Google Firestore (free tier)
-     */
-    backendType?: BackendType;
-    /**
-     * Firestore configuration (required if backendType is 'firestore')
-     */
-    firestore?: FirestoreConfig;
     /**
      * Enable delta updates (binary patching)
      * Reduces download size by 50-90%
@@ -58,21 +49,6 @@ export interface PluginConfig {
      * Allows gradual deployment to a percentage of users
      */
     enableStagedRollouts?: boolean;
-    /**
-     * Enable bundle encryption (AES-256-GCM)
-     * When enabled, downloaded bundles will be decrypted before validation
-     */
-    enableEncryption?: boolean;
-    /**
-     * Encryption key for decrypting bundles
-     * Should be stored securely and not hardcoded in production
-     */
-    encryptionKey?: string;
-    /**
-     * Salt for key derivation (base64 encoded)
-     * Required when using password-based encryption
-     */
-    encryptionSalt?: string;
 }
 export declare class ConfigManager {
     private static instance;

package/dist/esm/core/config.js

@@ -25,6 +25,7 @@ export class ConfigManager {
             serverUrl: '',
             channel: 'production',
             appId: '',
+            apiKey: '',
             autoCheck: true,
             autoUpdate: false,
             updateStrategy: 'background',
@@ -48,15 +49,8 @@ export class ConfigManager {
             packageName: '',
             webReviewUrl: '',
             minimumVersion: '1.0.0',
-            // Firestore backend configuration
-            backendType: 'http',
-            firestore: null,
             enableDeltaUpdates: true,
             enableStagedRollouts: true,
-            // Encryption configuration
-            enableEncryption: false,
-            encryptionKey: '',
-            encryptionSalt: '',
         };
     }
     configure(config) {
@@ -94,4 +88,3 @@ export class ConfigManager {
         return !!(this.config.filesystem && this.config.preferences);
     }
 }
-//# sourceMappingURL=config.js.map

package/dist/esm/core/errors.d.ts

@@ -7,6 +7,7 @@ export declare enum ErrorCode {
     DOWNLOAD_FAILED = "DOWNLOAD_FAILED",
     DOWNLOAD_TIMEOUT = "DOWNLOAD_TIMEOUT",
     INVALID_URL = "INVALID_URL",
+    INSECURE_URL = "INSECURE_URL",
     UNAUTHORIZED_HOST = "UNAUTHORIZED_HOST",
     BUNDLE_TOO_LARGE = "BUNDLE_TOO_LARGE",
     CHECKSUM_MISMATCH = "CHECKSUM_MISMATCH",

package/dist/esm/core/errors.js

@@ -11,6 +11,7 @@ export var ErrorCode;
     ErrorCode["DOWNLOAD_FAILED"] = "DOWNLOAD_FAILED";
     ErrorCode["DOWNLOAD_TIMEOUT"] = "DOWNLOAD_TIMEOUT";
     ErrorCode["INVALID_URL"] = "INVALID_URL";
+    ErrorCode["INSECURE_URL"] = "INSECURE_URL";
     ErrorCode["UNAUTHORIZED_HOST"] = "UNAUTHORIZED_HOST";
     ErrorCode["BUNDLE_TOO_LARGE"] = "BUNDLE_TOO_LARGE";
     // Validation errors
@@ -82,4 +83,3 @@ export class UpdateError extends NativeUpdateError {
         this.name = 'UpdateError';
     }
 }
-//# sourceMappingURL=errors.js.map

package/dist/esm/core/event-emitter.d.ts

@@ -1,6 +1,3 @@
-/**
- * Centralized event emitter for the Native Update plugin
- */
 export declare class EventEmitter {
     private static instance;
     private listeners;

package/dist/esm/core/event-emitter.js

@@ -1,6 +1,12 @@
 /**
- * Centralized event emitter for the Native Update plugin
+ * Centralized event emitter for the Native Update plugin.
+ *
+ * Listener errors are sent to the plugin Logger so they respect the
+ * runtime log-level switch and the secret-redaction filter — never raw
+ * console.* calls. See src/core/logger.ts.
  */
+import { Logger } from './logger';
+const logger = new Logger('NativeUpdate.EventEmitter');
 export class EventEmitter {
     constructor() {
         this.listeners = new Map();
@@ -41,7 +47,7 @@ export class EventEmitter {
                     listener(data);
                 }
                 catch (error) {
-                    console.error(`Error in event listener for ${eventName}:`, error);
+                    logger.error(`Error in event listener for ${eventName}`, error);
                 }
             });
         }
@@ -72,4 +78,3 @@ export class EventEmitter {
         return Array.from(this.listeners.keys());
     }
 }
-//# sourceMappingURL=event-emitter.js.map

package/dist/esm/core/logger.js

@@ -106,4 +106,3 @@ export class Logger {
         this.logWithLevel(LogLevel.ERROR, message, errorData);
     }
 }
-//# sourceMappingURL=logger.js.map

package/dist/esm/core/performance.js

@@ -151,4 +151,3 @@ export class PerformanceMonitor {
         };
     }
 }
-//# sourceMappingURL=performance.js.map

package/dist/esm/core/plugin-manager.js

@@ -56,6 +56,9 @@ export class PluginManager {
             await this.bundleManager.initialize();
             this.downloadManager = new DownloadManager();
             await this.downloadManager.initialize();
+            // Bundle manager needs the download manager so deleteBundle can
+            // also remove the on-disk blob (otherwise old bundles leak forever).
+            this.bundleManager.setDownloadManager(this.downloadManager);
             this.versionManager = new VersionManager();
             await this.versionManager.initialize();
             this.appUpdateManager = new AppUpdateManager({
@@ -217,4 +220,3 @@ export class PluginManager {
         });
     }
 }
-//# sourceMappingURL=plugin-manager.js.map

package/dist/esm/core/security.d.ts

@@ -8,6 +8,17 @@ export declare class SecurityValidator {
      * Validate URL is HTTPS
      */
     static validateUrl(url: string): boolean;
+    /**
+     * Reject any URL that is not HTTPS (or known native-app schemes
+     * `market:` / `itms-apps:` for opening the app store). Throws so
+     * callers can't silently fall through to a `javascript:` payload.
+     */
+    static validateDownloadUrl(url: string): void;
+    /**
+     * Validate URL whose only acceptable schemes are HTTPS, `market:` (Play
+     * Store), or `itms-apps:` (App Store). Used by `openAppStore`.
+     */
+    static validateStoreUrl(url: string): void;
     /**
      * Validate checksum format
      */
@@ -25,7 +36,10 @@ export declare class SecurityValidator {
      */
     calculateChecksum(data: ArrayBuffer): Promise<string>;
     /**
-     * Verify checksum matches expected value
+     * Verify checksum matches expected value.
+     * Fails closed when a checksum is required but missing. Only a configuration
+     * that explicitly disables signature+HTTPS enforcement AND omits the
+     * checksum will skip verification — OTA code paths must always pass one.
      */
     verifyChecksum(data: ArrayBuffer, expectedChecksum: string): Promise<boolean>;
     /**
@@ -33,9 +47,14 @@ export declare class SecurityValidator {
      */
     validateChecksum(data: ArrayBuffer, expectedChecksum: string): Promise<boolean>;
     /**
-     * Verify digital signature using Web Crypto API
+     * Verify digital signature using Web Crypto API.
+     *
+     * Fails closed: if signature verification is enabled (the default), any of
+     * `publicKey`, `enableSignatureValidation`, or `requireSignature` being set
+     * makes a signature mandatory. A missing signature in that state throws —
+     * never silently returns true. Silent-pass was a P0 gap in prior releases.
      */
-    verifySignature(data: ArrayBuffer, signature: string): Promise<boolean>;
+    verifySignature(data: ArrayBuffer, signature: string | null | undefined): Promise<boolean>;
     /**
      * Convert PEM to ArrayBuffer
      */

package/dist/esm/core/security.js

@@ -24,6 +24,33 @@ export class SecurityValidator {
             return false;
         }
     }
+    /**
+     * Reject any URL that is not HTTPS (or known native-app schemes
+     * `market:` / `itms-apps:` for opening the app store). Throws so
+     * callers can't silently fall through to a `javascript:` payload.
+     */
+    static validateDownloadUrl(url) {
+        if (!this.validateUrl(url)) {
+            throw new ValidationError(ErrorCode.INSECURE_URL, `Refusing non-HTTPS URL: ${url}`);
+        }
+    }
+    /**
+     * Validate URL whose only acceptable schemes are HTTPS, `market:` (Play
+     * Store), or `itms-apps:` (App Store). Used by `openAppStore`.
+     */
+    static validateStoreUrl(url) {
+        let parsed;
+        try {
+            parsed = new URL(url);
+        }
+        catch (_a) {
+            throw new ValidationError(ErrorCode.INSECURE_URL, `Invalid URL: ${url}`);
+        }
+        const allowed = ['https:', 'market:', 'itms-apps:'];
+        if (!allowed.includes(parsed.protocol)) {
+            throw new ValidationError(ErrorCode.INSECURE_URL, `Refusing URL scheme ${parsed.protocol}`);
+        }
+    }
     /**
      * Validate checksum format
      */
@@ -54,12 +81,14 @@ export class SecurityValidator {
         return hashArray.map((b) => b.toString(16).padStart(2, '0')).join('');
     }
     /**
-     * Verify checksum matches expected value
+     * Verify checksum matches expected value.
+     * Fails closed when a checksum is required but missing. Only a configuration
+     * that explicitly disables signature+HTTPS enforcement AND omits the
+     * checksum will skip verification — OTA code paths must always pass one.
      */
     async verifyChecksum(data, expectedChecksum) {
         if (!expectedChecksum) {
-            this.logger.warn('No checksum provided for verification');
-            return true; // Allow if no checksum provided
+            throw new ValidationError(ErrorCode.CHECKSUM_MISMATCH, 'Checksum is required but was not provided');
         }
         const actualChecksum = await this.calculateChecksum(data);
         const isValid = actualChecksum === expectedChecksum.toLowerCase();
@@ -78,13 +107,24 @@ export class SecurityValidator {
         return this.verifyChecksum(data, expectedChecksum);
     }
     /**
-     * Verify digital signature using Web Crypto API
+     * Verify digital signature using Web Crypto API.
+     *
+     * Fails closed: if signature verification is enabled (the default), any of
+     * `publicKey`, `enableSignatureValidation`, or `requireSignature` being set
+     * makes a signature mandatory. A missing signature in that state throws —
+     * never silently returns true. Silent-pass was a P0 gap in prior releases.
      */
     async verifySignature(data, signature) {
-        if (!this.configManager.get('enableSignatureValidation')) {
+        const enabled = this.configManager.get('enableSignatureValidation');
+        const requireSignature = this.configManager.get('requireSignature');
+        const publicKey = this.configManager.get('publicKey');
+        const signatureRequired = enabled || requireSignature || !!publicKey;
+        if (!signature) {
+            if (signatureRequired) {
+                throw new ValidationError(ErrorCode.SIGNATURE_INVALID, 'Signature is required but was not provided');
+            }
             return true;
         }
-        const publicKey = this.configManager.get('publicKey');
         if (!publicKey) {
             throw new ValidationError(ErrorCode.SIGNATURE_INVALID, 'Public key not configured for signature validation');
         }
@@ -322,4 +362,3 @@ export class SecurityValidator {
         }
     }
 }
-//# sourceMappingURL=security.js.map

package/dist/esm/definitions.d.ts

@@ -198,8 +198,6 @@ export interface UpdateConfig {
 export interface LiveUpdateConfig {
     appId: string;
     serverUrl?: string;
-    backendType?: 'http' | 'firestore';
-    firestore?: FirestoreConfig;
     channel?: string;
     autoUpdate?: boolean;
     updateStrategy?: UpdateStrategy;
@@ -212,20 +210,6 @@ export interface LiveUpdateConfig {
     optionalInstallMode?: InstallMode;
     maxBundleSize?: number;
     allowedHosts?: string[];
-    /**
-     * Enable bundle encryption (AES-256-GCM)
-     */
-    enableEncryption?: boolean;
-    /**
-     * Encryption key for decrypting bundles
-     * Should be stored securely and not hardcoded
-     */
-    encryptionKey?: string;
-    /**
-     * Salt for key derivation (base64 encoded)
-     * Required when enableEncryption is true
-     */
-    encryptionSalt?: string;
 }
 export interface AppUpdateConfig {
     minimumVersion?: string;
@@ -265,6 +249,12 @@ export interface SecurityConfig {
     enforceHttps?: boolean;
     certificatePinning?: CertificatePinning;
     validateInputs?: boolean;
+    /**
+     * @deprecated since v2. Secure storage is always on. Android uses
+     *   EncryptedSharedPreferences (Keystore-backed), iOS uses Keychain,
+     *   web does not persist sensitive config fields to localStorage.
+     *   Setting this to `false` is ignored.
+     */
     secureStorage?: boolean;
     logSecurityEvents?: boolean;
 }
@@ -316,7 +306,6 @@ export interface DeleteOptions {
     olderThan?: number;
 }
 export interface UpdateOptions {
-    allowDowngrade?: boolean;
     cleanupOldBundles?: boolean;
     keepBundleCount?: number;
 }
@@ -713,18 +702,17 @@ export interface PluginInitConfig {
      * Enable debug logging (default: false)
      */
     enableLogging?: boolean;
-    /**
-     * Backend type for update checks
-     */
-    backendType?: 'http' | 'firestore';
-    /**
-     * Firestore configuration for no-cost manifest reads
-     */
-    firestore?: FirestoreConfig;
     /**
      * Server URL for update checks
      */
     serverUrl?: string;
+    /**
+     * API key bound to this app in the Native Update dashboard. Sent as
+     * the `X-API-Key` header on every request to the backend. As of v2
+     * the plugin does not persist this across sessions — the host app
+     * must pass it on every `initialize()` call.
+     */
+    apiKey?: string;
     /**
      * Update channel
      */
@@ -769,20 +757,6 @@ export interface PluginInitConfig {
      * Review URL fallback for web platforms
      */
     webReviewUrl?: string;
-    /**
-     * Enable bundle encryption (AES-256-GCM)
-     */
-    enableEncryption?: boolean;
-    /**
-     * Encryption key for decrypting bundles
-     * Should be stored securely and not hardcoded
-     */
-    encryptionKey?: string;
-    /**
-     * Salt for key derivation (base64 encoded)
-     * Required when enableEncryption is true
-     */
-    encryptionSalt?: string;
 }
 /**
  * Main plugin interface with initialization
@@ -805,4 +779,3 @@ export interface NativeUpdatePlugin extends NativeUpdateCombinedPlugin, NativeUp
      */
     cleanup(): Promise<void>;
 }
-import type { FirestoreConfig } from './firestore/schema';

package/dist/esm/definitions.js

@@ -102,4 +102,3 @@ export var UpdateErrorCode;
     UpdateErrorCode["NOT_CONFIGURED"] = "NOT_CONFIGURED";
     UpdateErrorCode["UNKNOWN_ERROR"] = "UNKNOWN_ERROR";
 })(UpdateErrorCode || (UpdateErrorCode = {}));
-//# sourceMappingURL=definitions.js.map

package/dist/esm/index.d.ts

@@ -1,14 +1,13 @@
 export { NativeUpdate } from './plugin';
-export type { NativeUpdatePlugin, NativeUpdateCombinedPlugin, NativeUpdateListeners, LiveUpdatePlugin, AppUpdatePlugin, AppReviewPlugin, PluginConfig, UpdateConfig, LiveUpdateConfig, AppUpdateConfig, AppReviewConfig, BundleInfo, BundleStatus, UpdateStrategy, InstallMode, DownloadOptions, DownloadProgressEvent, SyncOptions, SyncResult, DeleteOptions, LatestVersion, ValidateOptions, ValidationResult, CheckForUpdateResult, DownloadUpdateOptions, AppUpdateInfo, OpenAppStoreOptions, ReviewResult, CanRequestReviewResult, UpdateStateChangedEvent, AppUpdateStateChangedEvent, AppUpdateProgressEvent, AppUpdateAvailableEvent, AppUpdateReadyEvent, AppUpdateFailedEvent, AppUpdateNotificationClickedEvent, AppUpdateInstallClickedEvent, BackgroundUpdateProgressEvent, BackgroundUpdateNotificationEvent, UpdateError, UpdateErrorCode, BackgroundUpdatePlugin, BackgroundUpdateConfig, BackgroundUpdateStatus, BackgroundCheckResult, BackgroundUpdateType, NotificationPreferences, NotificationPermissionStatus, NotificationPriority, SecurityConfig, SecurityInfo, CertificatePinning, CertificatePin, PluginInitConfig, PluginListenerHandle, SyncStatus, InstallStatus, UpdateMode, ChecksumAlgorithm, } from './definitions';
-export type { FirestoreConfig } from './firestore/schema';
+export { BackgroundUpdateType, NotificationPriority, UpdateStrategy, UpdateMode, InstallMode, ChecksumAlgorithm, SyncStatus, BundleStatus, InstallStatus, UpdateErrorCode, } from './definitions';
+export type { NativeUpdatePlugin, NativeUpdateCombinedPlugin, NativeUpdateListeners, LiveUpdatePlugin, AppUpdatePlugin, AppReviewPlugin, PluginConfig, UpdateConfig, LiveUpdateConfig, AppUpdateConfig, AppReviewConfig, BundleInfo, DownloadOptions, DownloadProgressEvent, SyncOptions, SyncResult, DeleteOptions, LatestVersion, ValidateOptions, ValidationResult, CheckForUpdateResult, DownloadUpdateOptions, AppUpdateInfo, OpenAppStoreOptions, ReviewResult, CanRequestReviewResult, UpdateStateChangedEvent, AppUpdateStateChangedEvent, AppUpdateProgressEvent, AppUpdateAvailableEvent, AppUpdateReadyEvent, AppUpdateFailedEvent, AppUpdateNotificationClickedEvent, AppUpdateInstallClickedEvent, BackgroundUpdateProgressEvent, BackgroundUpdateNotificationEvent, UpdateError, BackgroundUpdatePlugin, BackgroundUpdateConfig, BackgroundUpdateStatus, BackgroundCheckResult, NotificationPreferences, NotificationPermissionStatus, SecurityConfig, SecurityInfo, CertificatePinning, CertificatePin, PluginInitConfig, PluginListenerHandle, } from './definitions';
+export type { RolloutConfig, RolloutTargetSegments, RolloutSchedule, RolloutTimestamp, DeviceInfo, UpdateCheckResponse, } from './types/rollout';
 export { ErrorCode, NativeUpdateError, ConfigurationError, DownloadError, ValidationError, StorageError, UpdateError as UpdateErrorClass, } from './core/errors';
 export { ConfigManager } from './core/config';
 export { Logger, LogLevel } from './core/logger';
 export { SecurityValidator } from './core/security';
 export { PluginManager } from './core/plugin-manager';
 export { CacheManager } from './core/cache-manager';
-export { CryptoUtils } from './security/crypto';
-export type { EncryptionConfig, EncryptedBundle } from './security/crypto';
 export { BundleManager } from './live-update/bundle-manager';
 export { DownloadManager } from './live-update/download-manager';
 export { VersionManager } from './live-update/version-manager';