unified-ble-manager 4.0.26 → 4.0.28

package/CHANGELOG.md

@@ -6,6 +6,31 @@ All notable changes to `unified-ble-manager` are documented here.
 
 No changes yet.
 
+## [4.0.28] - 2026-09-09
+
+### Fixes
+
+- React Native Apple hosts now keep one process-owned CoreBluetooth restoration
+  radio for each immutable native configuration. Reconstructing the TurboModule
+  borrows that radio instead of registering another `CBCentralManager` with the
+  same restoration identifier, avoiding duplicate-restoration ownership and
+  preserving the OS restoration provider across JavaScript runtime replacement.
+- Apple protocol attachments claim callback delivery exclusively and fail closed
+  if another attachment is active. Closing or invalidating an attachment releases
+  only that borrower's scans, subscriptions, pending operations, and non-restored
+  connections; it no longer destroys the process-owned restoration provider.
+
+## [4.0.27] - 2026-09-06
+
+### Fixes
+
+- Tauri continuous scans now pace synthetic peripheral-inventory snapshots at
+  two-second intervals instead of replaying the full inventory four times per
+  second. Real btleplug advertisement events remain event-driven. This keeps
+  discovery live when platform events are silent or closed while sharply reducing
+  bounded IPC pressure without suppressing real `duplicates: "all"` reports.
+  Slow inventory work delays the next poll instead of triggering catch-up bursts.
+
 ## [4.0.26] - 2026-09-06
 
 ### Fixes

package/MIGRATION_4.0.md

@@ -2,7 +2,7 @@
 
 # Migrating from react-native-ble-plx
 
-This source targets `4.0.26`. The `4.0.0` release is a new package and a new contract. It is **not a source-compatible rename**. There is no `new BleManager()` facade, no Base64 characteristic values, and no public transaction IDs.
+This source targets `4.0.28`. The `4.0.0` release is a new package and a new contract. It is **not a source-compatible rename**. There is no `new BleManager()` facade, no Base64 characteristic values, and no public transaction IDs.
 
 This page is for a React Native app that already uses `react-native-ble-plx`. Web, Electron, Node, and Tauri are new hosts — use those pages after you understand the RN rewrite.
 

package/README.md

@@ -18,7 +18,7 @@ root import does not pick a radio. Package SemVer and backend support labels are
 independent: each radio backend keeps its evidence-derived label. See
 [`docs/PLATFORMS.md`](docs/PLATFORMS.md).
 
-This source tree is versioned `4.0.26`. Install the exact version shown in the npm
+This source tree is versioned `4.0.28`. Install the exact version shown in the npm
 registry. During release preparation, the version in `package.json` can be ahead
 of npm until the matching tag-driven workflow publishes it; the registry and
 GitHub release remain authoritative.

package/RELEASE.md

@@ -83,8 +83,8 @@ On release day, set `release_candidate` to the exact candidate required by the
 release plan. RC2, RC3, RC4, `4.0.0-rc.4.1`, and RC5 are already immutable
 once tagged. Stable `4.0.0` through `4.0.20` are immutable. The unpublished
 `v4.0.21` tag is also immutable after its cancelled workflow. `4.0.22`,
-`4.0.23`, `4.0.24`, and `4.0.25` are immutable tagged history. This branch
-prepares `4.0.26`.
+`4.0.23`, `4.0.24`, `4.0.25`, `4.0.26`, and `4.0.27` are immutable tagged
+history. This branch prepares `4.0.28`.
 
 ```sh
 release_candidate=4.0.0-rc.N
@@ -112,6 +112,22 @@ The first stable tag `v4.0.0` is immutable published history. Do not recreate or
 git tag -a v4.0.0 -m "v4.0.0"
 ```
 
+## Releasing 4.0.28
+
+Release `v4.0.28` only from the exact current `main` commit after its canonical
+CI succeeds. Verify `package.json` is `4.0.28`, the worktree is clean, and
+release-note extraction finds `## [4.0.28]`. Push a new annotated `v4.0.28`
+tag; never move the immutable `v4.0.27` tag. Follow the required local validation,
+publish workflow, and registry verification below.
+
+## Releasing 4.0.27
+
+Release `v4.0.27` only from the exact current `main` commit after its canonical
+CI succeeds. Verify `package.json` is `4.0.27`, the worktree is clean, and
+release-note extraction finds `## [4.0.27]`. Push a new annotated `v4.0.27`
+tag; never move the immutable `v4.0.26` tag. Follow the required local validation,
+publish workflow, and registry verification below.
+
 ## Releasing 4.0.26
 
 Release `v4.0.26` only from the exact current `main` commit after its canonical
@@ -508,7 +524,7 @@ a green publish job and a package a consumer can actually install are not the
 same claim.
 
 ```sh
-version=4.0.26
+version=4.0.28
 
 npm view "unified-ble-manager@$version" version
 npm view unified-ble-manager dist-tags --json

package/SBOM.cdx.json

@@ -6,15 +6,15 @@
   "metadata": {
     "component": {
       "type": "library",
-      "bom-ref": "pkg:npm/unified-ble-manager@4.0.26",
+      "bom-ref": "pkg:npm/unified-ble-manager@4.0.28",
       "name": "unified-ble-manager",
-      "version": "4.0.26",
+      "version": "4.0.28",
       "licenses": [
         {
           "expression": "Apache-2.0"
         }
       ],
-      "purl": "pkg:npm/unified-ble-manager@4.0.26"
+      "purl": "pkg:npm/unified-ble-manager@4.0.28"
     },
     "properties": [
       {
@@ -537,7 +537,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:npm/unified-ble-manager@4.0.26",
+      "ref": "pkg:npm/unified-ble-manager@4.0.28",
       "dependsOn": [
         "pkg:npm/%40babel/runtime@7.29.7",
         "pkg:npm/node-addon-api@8.9.0",

package/THIRD_PARTY_LICENSES.json

@@ -4,7 +4,7 @@
   "schemaVersion": "1.0.0",
   "package": {
     "name": "unified-ble-manager",
-    "version": "4.0.26"
+    "version": "4.0.28"
   },
   "source": {
     "method": "pnpm-lock production graph with installed-manifest license audit",

package/docs/ELECTRON.md

@@ -4,7 +4,7 @@
 
 Main owns the radio. The renderer uses a versioned IPC client and never loads a native addon.
 
-This source targets `4.0.26`. Tagged releases ship Node-API v8 prebuilds covering macOS and Windows `arm64`/`x64` for both Node and modern Electron.
+This source targets `4.0.28`. Tagged releases ship Node-API v8 prebuilds covering macOS and Windows `arm64`/`x64` for both Node and modern Electron.
 
 `unified-ble-manager/electron/main` and
 `unified-ble-manager/electron/renderer` are the only Electron entrypoints.

package/docs/EXPO_PLUGIN.md

@@ -7,7 +7,7 @@ start a radio, request runtime permissions during prebuild, or prove physical
 radio/restoration reliability. Expo Go is not a supported BLE execution
 environment because it cannot contain this native module.
 
-Use the v2 plugin options in this `4.0.26` source. Those options match
+Use the v2 plugin options in this `4.0.28` source. Those options match
 the schema introduced at `4.0.0-rc.4`. Expo Go cannot load this native module.
 
 ## Installation and development build

package/docs/GAPS.4.0.md

@@ -14,7 +14,7 @@ This file tracks platform code, CI, package, lab, and live-radio evidence. It do
 
 The clean-baseline contract, unified core, public manager, deterministic backend, TCK, native protocol, first-party backend implementations, host-isolated package exports, SDK/CLI, and legacy-absence gates exist in the 4.0 source. Passing deterministic, compile, ABI, or package tests are implementation proof; they do not become physical-radio support evidence unless a retained record proves the corresponding live scenario.
 
-This source targets `unified-ble-manager@4.0.26`; the npm registry and release
+This source targets `unified-ble-manager@4.0.28`; the npm registry and release
 provenance, not a source version string, determine whether it is published.
 Earlier stable releases remain immutable published history. Backend support labels remain
 evidence-derived. This package does not rewrite the evidence inventory: a backend remains at the support level

package/docs/GETTING_STARTED.md

@@ -4,7 +4,7 @@
 
 This page gets you to a first scan, connect, read, notify, and teardown on React Native. Other hosts are linked at the bottom. The root import does not turn Bluetooth on.
 
-This source targets `4.0.26`; verify the published version in the npm registry.
+This source targets `4.0.28`; verify the published version in the npm registry.
 
 ## Pick a host
 
@@ -38,11 +38,11 @@ request runtime permissions on Android 12+, add
 #### Expo / CNG v2
 
 The Expo v2 schema and `unified-ble-manager/expo` factory are in this source.
-After the npm registry lists `4.0.26`, install that exact version and keep it in
+After the npm registry lists `4.0.28`, install that exact version and keep it in
 your lockfile while validating the native build:
 
 ```sh
-pnpm add unified-ble-manager@4.0.26
+pnpm add unified-ble-manager@4.0.28
 ```
 
 The package does not run in Expo Go.

package/docs/NODE.md

@@ -10,7 +10,7 @@ The root import does not open an adapter. Pick one backend:
 | `unified-ble-manager/node/winrt`         | Windows                                      |
 | `unified-ble-manager/node/bluez`         | Linux (needs `dbus-next@^0.10.2` in the app) |
 
-This source targets `4.0.26`. Tagged releases ship Node-API v8 prebuilds for macOS and Windows on `arm64` and `x64`. A normal install should not compile native code. BlueZ talks D-Bus and has no addon.
+This source targets `4.0.28`. Tagged releases ship Node-API v8 prebuilds for macOS and Windows on `arm64` and `x64`. A normal install should not compile native code. BlueZ talks D-Bus and has no addon.
 
 ## One-call factories
 

package/docs/WEB.md

@@ -6,7 +6,7 @@ Use `unified-ble-manager/web` to run the public UBM manager directly in a browse
 
 The complete runnable TypeScript/Vite application is in [`example-web/`](../example-web/).
 
-This guide targets `4.0.26`. Web Bluetooth support still depends on the browser, operating system, adapter, and peripheral. UBM reports those runtime boundaries; it does not fabricate a fallback backend.
+This guide targets `4.0.28`. Web Bluetooth support still depends on the browser, operating system, adapter, and peripheral. UBM reports those runtime boundaries; it does not fabricate a fallback backend.
 
 ## Requirements
 

package/docs/generated/PLATFORM_SUPPORT.md

@@ -6,7 +6,7 @@ This page is generated by `scripts/docs/generate-platform-support.js` from valid
 
 ## Current package
 
-`unified-ble-manager@4.0.26`
+`unified-ble-manager@4.0.28`
 
 No evidence record is bound to this exact package version and artifact. Consequently, this generated page makes no Preview, Live Preview, Supported, or Reliability-qualified platform claim for the current package.
 

package/ios/NativeProtocol/UnifiedBleProtocolAppleExecution.hpp

@@ -22,7 +22,8 @@ class AppleNativeProtocolExecution final {
 
   AppleNativeProtocolExecution(
       std::shared_ptr<native_protocol::v2::NativeProtocolControlRuntime> runtime,
-      void* radio);
+      void* radio,
+      void* radioBorrower = nullptr);
   ~AppleNativeProtocolExecution();
 
   AppleNativeProtocolExecution(const AppleNativeProtocolExecution&) = delete;

package/ios/NativeProtocol/UnifiedBleProtocolAppleExecution.mm

@@ -191,10 +191,15 @@ namespace unified_ble::apple_protocol {
 
 AppleNativeProtocolExecution::State::State(
     std::shared_ptr<protocol::NativeProtocolControlRuntime> runtimeValue,
-    void* radioValue)
-    : runtime(std::move(runtimeValue)), radio(radioValue) {}
+    void* radioValue,
+    void* radioBorrowerValue)
+    : runtime(std::move(runtimeValue)), radio(radioValue), radioBorrower(radioBorrowerValue) {
+  if (radioBorrower != nullptr) CFRetain(radioBorrower);
+}
 
-AppleNativeProtocolExecution::State::~State() = default;
+AppleNativeProtocolExecution::State::~State() {
+  if (radioBorrower != nullptr) CFRelease(radioBorrower);
+}
 
 namespace {
 
@@ -202,6 +207,10 @@ OwnedCoreBluetoothProtocolRadio* radioFor(const std::shared_ptr<AppleNativeProto
   return (__bridge OwnedCoreBluetoothProtocolRadio*)state->radio;
 }
 
+id radioBorrowerFor(const std::shared_ptr<AppleNativeProtocolExecution::State>& state) {
+  return (__bridge id)state->radioBorrower;
+}
+
 bool boundedBufferCanAdmit(
     const protocol::BoundedNativeEventBuffer& buffer,
     std::size_t recordBytes,
@@ -466,7 +475,10 @@ void failAttachmentAfterTerminalAdmissionFailure(
     notifyJavaScriptFatalSink(state, context, fatalAttachmentGeneration);
     if (releaseRadio) {
       @try {
-        [radioFor(state) releaseProtocolClientWithCompletion:^(NSError* error) {
+        [OwnedCoreBluetoothProtocolRadioOwner
+            releaseBorrowerWithRadio:radioFor(state)
+            delegate:radioBorrowerFor(state)
+            completion:^(NSError* error) {
           if (error != nil) {
             NSLog(@"[UnifiedBleProtocolAppleExecution] %s radio release failed: %@", context, error.localizedDescription);
           }
@@ -1348,7 +1360,10 @@ void dispatchCommand(
     return;
   }
   if (kind == "destroy") {
-    [radio releaseProtocolClientWithCompletion:^(NSError* error) {
+    [OwnedCoreBluetoothProtocolRadioOwner
+        releaseBorrowerWithRadio:radio
+        delegate:radioBorrowerFor(state)
+        completion:^(NSError* error) {
       if (error == nil) static_cast<void>(success(state, command));
       else fail(state, command, "destroyFailed", error);
     }];
@@ -1745,8 +1760,9 @@ void logAppleNativeFailure(const char* context, const std::exception& error) {
 
 AppleNativeProtocolExecution::AppleNativeProtocolExecution(
     std::shared_ptr<protocol::NativeProtocolControlRuntime> runtime,
-    void* radio)
-    : state_(std::make_shared<State>(std::move(runtime), radio)) {}
+    void* radio,
+    void* radioBorrower)
+    : state_(std::make_shared<State>(std::move(runtime), radio, radioBorrower)) {}
 
 AppleNativeProtocolExecution::~AppleNativeProtocolExecution() {
   close();

package/ios/NativeProtocol/UnifiedBleProtocolAppleExecutionState.hpp

@@ -39,11 +39,15 @@ class AppleNativeProtocolExecution::State final : public std::enable_shared_from
     std::optional<native_protocol::v2::ProtocolRecord> error;
   };
 
-  State(std::shared_ptr<native_protocol::v2::NativeProtocolControlRuntime> runtimeValue, void* radioValue);
+  State(
+      std::shared_ptr<native_protocol::v2::NativeProtocolControlRuntime> runtimeValue,
+      void* radioValue,
+      void* radioBorrowerValue = nullptr);
   ~State();
 
   std::shared_ptr<native_protocol::v2::NativeProtocolControlRuntime> runtime;
   void* radio;
+  void* radioBorrower;
   std::shared_ptr<facebook::react::CallInvoker> callInvoker;
   std::shared_ptr<facebook::jsi::Function> eventSink;
   std::shared_ptr<facebook::jsi::Function> fatalSink;

package/ios/Owned/OwnedCoreBluetoothProtocolRadio.swift

@@ -25,6 +25,8 @@ public final class OwnedCoreBluetoothProtocolRadio: NSObject, CBPeripheralDelega
   )
 
   @objc public weak var delegate: OwnedCoreBluetoothProtocolRadioDelegate?
+  let borrowerRelease = OwnedCoreBluetoothBorrowerReleaseCoordinator()
+  var borrowerReleaseRetryScheduled = false
 
   let queue: DispatchQueue
   var central: CBCentralManager!

package/ios/Owned/OwnedCoreBluetoothProtocolRadioCancellation.swift

@@ -256,6 +256,10 @@ extension OwnedCoreBluetoothProtocolRadio {
         completion(error)
         return
       }
+      if error != nil && !destroyRadio {
+        completion(error)
+        return
+      }
       for (identifier, peripheral) in self.peripheralByIdentifier where !restoredIdentifiers.contains(identifier) {
         peripheral.delegate = nil
       }

package/ios/Owned/OwnedCoreBluetoothProtocolRadioOwner.swift

@@ -0,0 +1,149 @@
+// ios/Owned/OwnedCoreBluetoothProtocolRadioOwner.swift
+
+import Foundation
+
+/** Queue-confined attachment/release state, split from CoreBluetooth for executable race tests. */
+final class OwnedCoreBluetoothBorrowerReleaseCoordinator {
+  typealias Completion = (NSError?) -> Void
+
+  enum ReleaseAdmission {
+    case noBorrower
+    case joined
+    case start
+  }
+
+  private var activeBorrower: ObjectIdentifier?
+  private var releasing = false
+  private var completions = [Completion]()
+
+  var releaseInProgress: Bool { releasing }
+
+  func attach(_ candidate: AnyObject) -> Bool {
+    guard activeBorrower == nil, !releasing else { return false }
+    activeBorrower = ObjectIdentifier(candidate)
+    return true
+  }
+
+  func beginRelease(_ candidate: AnyObject, completion: @escaping Completion) -> ReleaseAdmission {
+    guard activeBorrower == ObjectIdentifier(candidate) else { return .noBorrower }
+    completions.append(completion)
+    guard !releasing else { return .joined }
+    releasing = true
+    return .start
+  }
+
+  func finish(_ error: NSError?) -> [Completion] {
+    if error == nil { activeBorrower = nil }
+    releasing = false
+    let pending = completions
+    completions.removeAll()
+    return pending
+  }
+}
+
+extension OwnedCoreBluetoothProtocolRadio {
+  /**
+   * Claims the sole JavaScript event route for this process-owned radio.
+   * A second TurboModule must not steal callbacks from an attached borrower.
+   */
+  @objc public func attachDelegateIfAvailable(_ candidate: OwnedCoreBluetoothProtocolRadioDelegate) -> Bool {
+    queue.sync {
+      guard borrowerRelease.attach(candidate) else { return false }
+      delegate = candidate
+      return true
+    }
+  }
+
+  /**
+   * Releases one borrower without opening an attachment gap during physical
+   * cleanup. Concurrent releases join the same terminal cleanup result.
+   */
+  @objc public func releaseBorrowerIfCurrent(
+    _ candidate: OwnedCoreBluetoothProtocolRadioDelegate,
+    completion: @escaping (NSError?) -> Void
+  ) {
+    queue.async {
+      switch self.borrowerRelease.beginRelease(candidate, completion: completion) {
+      case .noBorrower:
+        completion(nil)
+        return
+      case .joined:
+        return
+      case .start:
+        break
+      }
+      self.releaseProtocolClient { error in
+        if error == nil, let current = self.delegate, current === candidate {
+          self.delegate = nil
+        }
+        let completions = self.borrowerRelease.finish(error)
+        if error != nil {
+          self.scheduleBorrowerReleaseRetry(candidate)
+        }
+        for pendingCompletion in completions {
+          pendingCompletion(error)
+        }
+      }
+    }
+  }
+
+  private func scheduleBorrowerReleaseRetry(_ candidate: OwnedCoreBluetoothProtocolRadioDelegate) {
+    guard !borrowerReleaseRetryScheduled else { return }
+    borrowerReleaseRetryScheduled = true
+    queue.asyncAfter(deadline: .now() + .seconds(1)) {
+      self.borrowerReleaseRetryScheduled = false
+      self.releaseBorrowerIfCurrent(candidate) { _ in }
+    }
+  }
+}
+
+/**
+ * Process lifetime registry for CoreBluetooth centrals selected by immutable
+ * native configuration. React Native may construct its TurboModule more than
+ * once; those modules borrow the same radio rather than registering duplicate
+ * CoreBluetooth restoration identifiers.
+ */
+@objc(OwnedCoreBluetoothProtocolRadioOwner)
+public final class OwnedCoreBluetoothProtocolRadioOwner: NSObject {
+  private struct Configuration: Hashable {
+    let restoreIdentifierKey: String?
+    let showPowerAlert: Bool?
+  }
+
+  private static let lock = NSLock()
+  private static var radios = [Configuration: OwnedCoreBluetoothProtocolRadio]()
+
+  @objc(acquireWithRestoreIdentifierKey:showPowerAlert:)
+  public static func acquire(
+    restoreIdentifierKey: String?,
+    showPowerAlert: NSNumber?
+  ) -> OwnedCoreBluetoothProtocolRadio {
+    let configuration = Configuration(
+      restoreIdentifierKey: restoreIdentifierKey,
+      showPowerAlert: showPowerAlert?.boolValue
+    )
+    lock.lock()
+    defer { lock.unlock() }
+    if let existing = radios[configuration] { return existing }
+    let created = OwnedCoreBluetoothProtocolRadio(
+      restoreIdentifierKey: restoreIdentifierKey,
+      showPowerAlert: showPowerAlert
+    )
+    radios[configuration] = created
+    return created
+  }
+
+  /**
+   * A borrower releases its own radio work only when it still owns callback
+   * delivery. The process-owned central remains available for restoration and
+   * a replacement TurboModule.
+   */
+  @objc(releaseBorrowerWithRadio:delegate:completion:)
+  public static func releaseBorrower(
+    radio: OwnedCoreBluetoothProtocolRadio,
+    delegate: OwnedCoreBluetoothProtocolRadioDelegate,
+    completion: @escaping (NSError?) -> Void
+  ) {
+    radio.releaseBorrowerIfCurrent(delegate, completion: completion)
+  }
+}

package/ios/UnifiedBleProtocolControl.mm

@@ -351,8 +351,8 @@ RCT_EXPORT_MODULE(UnifiedBleProtocolControl)
     _restorationClientId = derived[@"clientId"];
     _restorationHostSessionScope = derived[@"hostSessionScope"];
     NSNumber *showPowerAlert = configuredInfoBool(@"UnifiedBleProtocolShowPowerAlert");
-    _radio = [[OwnedCoreBluetoothProtocolRadio alloc]
-        initWithRestoreIdentifierKey:(
+    _radio = [OwnedCoreBluetoothProtocolRadioOwner
+        acquireWithRestoreIdentifierKey:(
             hasCompleteRestorationConfiguration(
                 _restorationRestoreIdentifier,
                 _restorationNamespace,
@@ -362,10 +362,11 @@ RCT_EXPORT_MODULE(UnifiedBleProtocolControl)
                 ? _restorationRestoreIdentifier
                 : nil)
         showPowerAlert:showPowerAlert];
+    _radioDelegate = [UnifiedBleProtocolAppleRadioDelegate new];
     _execution = std::make_shared<unified_ble::apple_protocol::AppleNativeProtocolExecution>(
         _runtime,
-        (__bridge void *)_radio);
-    _radioDelegate = [UnifiedBleProtocolAppleRadioDelegate new];
+        (__bridge void *)_radio,
+        (__bridge void *)_radioDelegate);
     _radioDelegate.execution = _execution.get();
   }
   return self;
@@ -508,8 +509,13 @@ RCT_EXPORT_MODULE(UnifiedBleProtocolControl)
       return;
     }
   }
+  if (![_radio attachDelegateIfAvailable:_radioDelegate]) {
+    _execution->detachAttachment();
+    _runtime->close(attachment);
+    rejectControl(reject, @"nativeProtocolHandshake", @"The process-owned Apple radio already has an attached protocol client");
+    return;
+  }
   _attachment = [requestedAttachment copy];
-  _radio.delegate = _radioDelegate;
   _execution->receiveAdapterState((__bridge void *)[_radio adapterSnapshot]);
   resolve(@{
     @"nativeProtocol": @2,
@@ -713,14 +719,21 @@ RCT_EXPORT_MODULE(UnifiedBleProtocolControl)
         attachment.backendGeneration(),
         attachment.adapterId(),
         attachment.adapterGeneration());
-    _radio.delegate = nil;
     _radioDelegate.execution = nullptr;
     _execution->detachAttachment();
     if (_runtime->open()) {
       _runtime->close(nativeAttachmentValue);
     }
-    _attachment = nil;
-    resolve(nil);
+    [OwnedCoreBluetoothProtocolRadioOwner releaseBorrowerWithRadio:_radio delegate:_radioDelegate completion:^(NSError *error) {
+      if (error != nil) {
+        rejectControl(reject, @"nativeProtocolClose", error.localizedDescription);
+        return;
+      }
+      if ([_attachment isEqualToDictionary:requestedAttachment]) {
+        _attachment = nil;
+      }
+      resolve(nil);
+    }];
   } catch (const std::exception& error) {
     rejectControl(reject, @"nativeProtocolClose", [NSString stringWithUTF8String:error.what()]);
   }
@@ -728,7 +741,6 @@ RCT_EXPORT_MODULE(UnifiedBleProtocolControl)
 
 - (void)invalidate {
   NSDictionary *attachment = [_attachment copy];
-  _radio.delegate = nil;
   _radioDelegate.execution = nullptr;
   _execution->close();
   BOOL runtimeClosed = !_runtime->open();
@@ -747,9 +759,9 @@ RCT_EXPORT_MODULE(UnifiedBleProtocolControl)
       NSLog(@"[UnifiedBleProtocolControl] native runtime close during invalidation failed with an unknown exception");
     }
   }
-  [_radio destroyWithCompletion:^(NSError *error) {
+  [OwnedCoreBluetoothProtocolRadioOwner releaseBorrowerWithRadio:_radio delegate:_radioDelegate completion:^(NSError *error) {
     if (error != nil) {
-      NSLog(@"[UnifiedBleProtocolControl] radio destruction during invalidation failed: %@", error.localizedDescription);
+      NSLog(@"[UnifiedBleProtocolControl] radio borrower release during invalidation failed: %@", error.localizedDescription);
     }
   }];
   if (runtimeClosed) _attachment = nil;

package/lib/commonjs/implementation-version.js

@@ -7,5 +7,5 @@ exports.UNIFIED_BLE_IMPLEMENTATION_VERSION = void 0;
 // src/implementation-version.ts
 
 /** The one production version stamped into every first-party backend identity. */
-const UNIFIED_BLE_IMPLEMENTATION_VERSION = exports.UNIFIED_BLE_IMPLEMENTATION_VERSION = '4.0.26';
+const UNIFIED_BLE_IMPLEMENTATION_VERSION = exports.UNIFIED_BLE_IMPLEMENTATION_VERSION = '4.0.28';
 //# sourceMappingURL=implementation-version.js.map

package/lib/module/implementation-version.js

@@ -3,5 +3,5 @@
 // src/implementation-version.ts
 
 /** The one production version stamped into every first-party backend identity. */
-export const UNIFIED_BLE_IMPLEMENTATION_VERSION = '4.0.26';
+export const UNIFIED_BLE_IMPLEMENTATION_VERSION = '4.0.28';
 //# sourceMappingURL=implementation-version.js.map

package/lib/typescript/commonjs/src/backends/bluez/bluez-backend-provider.d.ts

@@ -4,7 +4,7 @@ import { type BackendCompatibilityOffer } from '../../backend-contract/primitive
 import { type BluezBusKind, type BluezDbusBoundaryFactory } from './bluez-dbus-contract';
 export declare const BLUEZ_BACKEND_ID = "unified-ble:bluez-dbus";
 export declare const BLUEZ_PLATFORM_ID = "unified-ble:linux-bluez";
-export declare const BLUEZ_IMPLEMENTATION_VERSION = "4.0.26";
+export declare const BLUEZ_IMPLEMENTATION_VERSION = "4.0.28";
 export declare const bluezCompatibility: BackendCompatibilityOffer;
 export interface BluezBackendProviderOptions {
     readonly busKind: BluezBusKind;

package/lib/typescript/commonjs/src/backends/corebluetooth/corebluetooth-identity.d.ts

@@ -1,7 +1,7 @@
 import { type FeatureRegistry } from '../../backend-contract/capabilities';
 export declare const COREBLUETOOTH_BACKEND_ID = "unified-ble:corebluetooth";
 export declare const COREBLUETOOTH_PLATFORM_ID = "unified-ble:macos-corebluetooth";
-export declare const COREBLUETOOTH_IMPLEMENTATION_VERSION = "4.0.26";
+export declare const COREBLUETOOTH_IMPLEMENTATION_VERSION = "4.0.28";
 /** Identity metadata for a direct-GATT boundary that shares this backend core. */
 export interface DirectGattBackendIdentityOptions {
     readonly registeredBackendId: string;

package/lib/typescript/commonjs/src/backends/reactnative/react-native-android-provider.d.ts

@@ -9,7 +9,7 @@ import { ReactNativeAndroidProtocolBoundary } from '../../native-protocol/rn-and
 import { ReactNativeRestorationCoordinator, type ReactNativeRestorationActivation, type ReactNativeRestorationBackendProvider } from './react-native-restoration';
 export declare const REACT_NATIVE_ANDROID_BACKEND_ID = "unified-ble:react-native-android";
 export declare const REACT_NATIVE_ANDROID_PLATFORM_ID = "unified-ble:android-gatt";
-export declare const REACT_NATIVE_ANDROID_IMPLEMENTATION_VERSION = "4.0.26";
+export declare const REACT_NATIVE_ANDROID_IMPLEMENTATION_VERSION = "4.0.28";
 export declare const REACT_NATIVE_ANDROID_DEFAULT_ADAPTER_NATIVE_ID = "android-default-adapter";
 export declare const reactNativeAndroidCompatibility: NativeCompatibilityOffer;
 export interface ReactNativeAndroidBackendProviderOptions {

package/lib/typescript/commonjs/src/backends/reactnative/react-native-apple-provider.d.ts

@@ -3,7 +3,7 @@ import type { Spec as NativeProtocolControl } from '../../NativeUnifiedBleProtoc
 import { type ReactNativeRestorationBackendProvider } from './react-native-restoration';
 export declare const REACT_NATIVE_APPLE_BACKEND_ID = "unified-ble:react-native-apple";
 export declare const REACT_NATIVE_APPLE_PLATFORM_ID = "unified-ble:apple-corebluetooth";
-export declare const REACT_NATIVE_APPLE_IMPLEMENTATION_VERSION = "4.0.26";
+export declare const REACT_NATIVE_APPLE_IMPLEMENTATION_VERSION = "4.0.28";
 export declare const REACT_NATIVE_APPLE_DEFAULT_ADAPTER_NATIVE_ID = "apple-corebluetooth-default-adapter";
 export declare const reactNativeAppleCompatibility: NativeCompatibilityOffer;
 export interface ReactNativeAppleBackendProviderOptions {

package/lib/typescript/commonjs/src/backends/winrt/winrt-provider.d.ts

@@ -3,7 +3,7 @@ import { type BackendCompatibilityOffer } from '../../backend-contract/primitive
 import { type WinRtAdapterRecord, type WinRtBoundary } from './winrt-boundary';
 export declare const WINRT_BACKEND_ID = "unified-ble:winrt";
 export declare const WINRT_PLATFORM_ID = "unified-ble:windows-winrt";
-export declare const WINRT_IMPLEMENTATION_VERSION = "4.0.26";
+export declare const WINRT_IMPLEMENTATION_VERSION = "4.0.28";
 export declare const winRtCompatibility: BackendCompatibilityOffer;
 export interface WinRtBackendProviderOptions {
     readonly boundaryFactory: () => WinRtBoundary;

package/lib/typescript/commonjs/src/implementation-version.d.ts

@@ -1,3 +1,3 @@
 /** The one production version stamped into every first-party backend identity. */
-export declare const UNIFIED_BLE_IMPLEMENTATION_VERSION = "4.0.26";
+export declare const UNIFIED_BLE_IMPLEMENTATION_VERSION = "4.0.28";
 //# sourceMappingURL=implementation-version.d.ts.map

package/lib/typescript/module/src/backends/bluez/bluez-backend-provider.d.ts

@@ -4,7 +4,7 @@ import { type BackendCompatibilityOffer } from '../../backend-contract/primitive
 import { type BluezBusKind, type BluezDbusBoundaryFactory } from './bluez-dbus-contract.js';
 export declare const BLUEZ_BACKEND_ID = "unified-ble:bluez-dbus";
 export declare const BLUEZ_PLATFORM_ID = "unified-ble:linux-bluez";
-export declare const BLUEZ_IMPLEMENTATION_VERSION = "4.0.26";
+export declare const BLUEZ_IMPLEMENTATION_VERSION = "4.0.28";
 export declare const bluezCompatibility: BackendCompatibilityOffer;
 export interface BluezBackendProviderOptions {
     readonly busKind: BluezBusKind;

package/lib/typescript/module/src/backends/corebluetooth/corebluetooth-identity.d.ts

@@ -1,7 +1,7 @@
 import { type FeatureRegistry } from '../../backend-contract/capabilities.js';
 export declare const COREBLUETOOTH_BACKEND_ID = "unified-ble:corebluetooth";
 export declare const COREBLUETOOTH_PLATFORM_ID = "unified-ble:macos-corebluetooth";
-export declare const COREBLUETOOTH_IMPLEMENTATION_VERSION = "4.0.26";
+export declare const COREBLUETOOTH_IMPLEMENTATION_VERSION = "4.0.28";
 /** Identity metadata for a direct-GATT boundary that shares this backend core. */
 export interface DirectGattBackendIdentityOptions {
     readonly registeredBackendId: string;

package/lib/typescript/module/src/backends/reactnative/react-native-android-provider.d.ts

@@ -9,7 +9,7 @@ import { ReactNativeAndroidProtocolBoundary } from '../../native-protocol/rn-and
 import { ReactNativeRestorationCoordinator, type ReactNativeRestorationActivation, type ReactNativeRestorationBackendProvider } from './react-native-restoration.js';
 export declare const REACT_NATIVE_ANDROID_BACKEND_ID = "unified-ble:react-native-android";
 export declare const REACT_NATIVE_ANDROID_PLATFORM_ID = "unified-ble:android-gatt";
-export declare const REACT_NATIVE_ANDROID_IMPLEMENTATION_VERSION = "4.0.26";
+export declare const REACT_NATIVE_ANDROID_IMPLEMENTATION_VERSION = "4.0.28";
 export declare const REACT_NATIVE_ANDROID_DEFAULT_ADAPTER_NATIVE_ID = "android-default-adapter";
 export declare const reactNativeAndroidCompatibility: NativeCompatibilityOffer;
 export interface ReactNativeAndroidBackendProviderOptions {

package/lib/typescript/module/src/backends/reactnative/react-native-apple-provider.d.ts

@@ -3,7 +3,7 @@ import type { Spec as NativeProtocolControl } from '../../NativeUnifiedBleProtoc
 import { type ReactNativeRestorationBackendProvider } from './react-native-restoration.js';
 export declare const REACT_NATIVE_APPLE_BACKEND_ID = "unified-ble:react-native-apple";
 export declare const REACT_NATIVE_APPLE_PLATFORM_ID = "unified-ble:apple-corebluetooth";
-export declare const REACT_NATIVE_APPLE_IMPLEMENTATION_VERSION = "4.0.26";
+export declare const REACT_NATIVE_APPLE_IMPLEMENTATION_VERSION = "4.0.28";
 export declare const REACT_NATIVE_APPLE_DEFAULT_ADAPTER_NATIVE_ID = "apple-corebluetooth-default-adapter";
 export declare const reactNativeAppleCompatibility: NativeCompatibilityOffer;
 export interface ReactNativeAppleBackendProviderOptions {

package/lib/typescript/module/src/backends/winrt/winrt-provider.d.ts

@@ -3,7 +3,7 @@ import { type BackendCompatibilityOffer } from '../../backend-contract/primitive
 import { type WinRtAdapterRecord, type WinRtBoundary } from './winrt-boundary.js';
 export declare const WINRT_BACKEND_ID = "unified-ble:winrt";
 export declare const WINRT_PLATFORM_ID = "unified-ble:windows-winrt";
-export declare const WINRT_IMPLEMENTATION_VERSION = "4.0.26";
+export declare const WINRT_IMPLEMENTATION_VERSION = "4.0.28";
 export declare const winRtCompatibility: BackendCompatibilityOffer;
 export interface WinRtBackendProviderOptions {
     readonly boundaryFactory: () => WinRtBoundary;

package/lib/typescript/module/src/implementation-version.d.ts

@@ -1,3 +1,3 @@
 /** The one production version stamped into every first-party backend identity. */
-export declare const UNIFIED_BLE_IMPLEMENTATION_VERSION = "4.0.26";
+export declare const UNIFIED_BLE_IMPLEMENTATION_VERSION = "4.0.28";
 //# sourceMappingURL=implementation-version.d.ts.map

package/native/PREBUILDS.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "package": "unified-ble-manager@4.0.26",
+  "package": "unified-ble-manager@4.0.28",
   "nodeApiVersion": 8,
   "entries": [
     {
@@ -10,7 +10,7 @@
       "nodeApiVersion": 8,
       "path": "native/electron/corebluetooth/prebuilds/darwin-arm64/unified_ble_corebluetooth.node",
       "bytes": 334128,
-      "sha256": "b03cd5d67fd888092f252466820ea34fa8e7c422f9522736d71f4f65f3eb72cc"
+      "sha256": "02d7a3fa8512799456f97a548803f0342a5974db94e5ff386b90dd3d0f52f4f6"
     },
     {
       "backend": "corebluetooth",
@@ -19,7 +19,7 @@
       "nodeApiVersion": 8,
       "path": "native/electron/corebluetooth/prebuilds/darwin-x64/unified_ble_corebluetooth.node",
       "bytes": 324296,
-      "sha256": "7a4cfad6d5d1073f945c4b2c688edc2343e837096a5e2cfd7d4a17c29bb7cd26"
+      "sha256": "5d58f6b13a8f528daf2a2aed8050199e7d81f7dfc377762f1136601068961ff7"
     },
     {
       "backend": "winrt",
@@ -28,7 +28,7 @@
       "nodeApiVersion": 8,
       "path": "native/electron/winrt/prebuilds/win32-arm64/unified_ble_winrt.node",
       "bytes": 646144,
-      "sha256": "65904b5efa93464fd051ccffd483df7e5e6bfdeb2aea33e6ff45732327021ef2"
+      "sha256": "b7fb722bb9bb0cfc8aacbe27f9d5cc319f83563572173bae6a6a825c6cb58cf3"
     },
     {
       "backend": "winrt",
@@ -37,7 +37,7 @@
       "nodeApiVersion": 8,
       "path": "native/electron/winrt/prebuilds/win32-x64/unified_ble_winrt.node",
       "bytes": 616448,
-      "sha256": "720506eb5798af7d2aa8f42d07e34858fd359fcd58cbe8861c430d633b896af2"
+      "sha256": "fb2775834392cbbb55c666dc5e90d2b2e8dc9242782a3153c797dca5fb05ea8f"
     }
   ]
 }

package/native/tauri/src/btleplug_dispatcher.rs

@@ -32,7 +32,7 @@ const MAX_CORRELATIONS: usize = 256;
 const COMPLETED_CORRELATION_TTL: Duration = Duration::from_secs(30);
 const MAX_QUARANTINE_WORKERS: usize = 4;
 const MAX_QUARANTINE_ATTEMPTS: u32 = 8;
-const SCAN_POLL_INTERVAL: Duration = Duration::from_millis(250);
+const SCAN_POLL_INTERVAL: Duration = Duration::from_secs(2);
 /// Safety bound, not host policy.
 ///
 /// btleplug's CoreBluetooth `disconnect()` never resolves when the peripheral
@@ -1189,7 +1189,7 @@ impl BtleplugDispatcher {
             if started_tx.send(Ok(())).is_err() {
                 return;
             }
-            let mut interval = tokio::time::interval(SCAN_POLL_INTERVAL);
+            let mut interval = scan_poll_interval();
             let mut events_open = true;
             let mut polls: u32 = 0;
             loop {
@@ -4227,6 +4227,12 @@ fn scan_event_peripheral_id(event: CentralEvent) -> Option<btleplug::platform::P
     }
 }
 
+fn scan_poll_interval() -> tokio::time::Interval {
+    let mut interval = tokio::time::interval(SCAN_POLL_INTERVAL);
+    interval.set_missed_tick_behavior(tokio::time::MissedTickBehavior::Delay);
+    interval
+}
+
 fn scan_properties_match(
     properties: &btleplug::api::PeripheralProperties,
     requested_services: &[Uuid],
@@ -5010,7 +5016,7 @@ mod tests {
     use super::error_confirms_device_released;
     use super::{
         characteristic_properties, disconnect_with_state_check, negotiate_ipc_versions, object,
-        released, resolve_disconnect_failure, scan_properties_match_optional,
+        released, resolve_disconnect_failure, scan_poll_interval, scan_properties_match_optional,
         should_clear_peer_owner, string, BtleplugDispatcher, BtleplugDispatcherOptions,
         CallerState, DispatchError, IpcEventSink, QuarantineScheduler,
         DISCONNECT_COMPLETION_TIMEOUT,
@@ -5027,6 +5033,15 @@ mod tests {
         );
     }
 
+    #[tokio::test]
+    async fn scan_inventory_polling_is_paced_without_catch_up_bursts() {
+        assert_eq!(super::SCAN_POLL_INTERVAL, std::time::Duration::from_secs(2));
+        assert_eq!(
+            scan_poll_interval().missed_tick_behavior(),
+            tokio::time::MissedTickBehavior::Delay
+        );
+    }
+
     #[test]
     fn native_dispatch_error_keeps_structured_platform_diagnostics_for_terminals() {
         let error = DispatchError::new("platform.transport", "stream", "tauri.event-send")

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "unified-ble-manager",
-  "version": "4.0.26",
+  "version": "4.0.28",
   "description": "Unified Bluetooth Low Energy manager for React Native, Electron, Tauri, Web, and desktop",
   "packageManager": "pnpm@10.14.0",
   "main": "lib/commonjs/index.js",

package/src/implementation-version.ts

@@ -1,4 +1,4 @@
 // src/implementation-version.ts
 
 /** The one production version stamped into every first-party backend identity. */
-export const UNIFIED_BLE_IMPLEMENTATION_VERSION = '4.0.26'
+export const UNIFIED_BLE_IMPLEMENTATION_VERSION = '4.0.28'

package/unified-ble-manager.podspec

@@ -29,6 +29,7 @@ Pod::Spec.new do |s|
     "ios/Owned/OwnedCoreBluetoothProtocolRadioDescriptors.swift",
     "ios/Owned/OwnedCoreBluetoothProtocolRadio.swift",
     "ios/Owned/OwnedCoreBluetoothProtocolRadioCancellation.swift",
+    "ios/Owned/OwnedCoreBluetoothProtocolRadioOwner.swift",
     "ios/Owned/OwnedCoreBluetoothProtocolRadioSupport.swift",
     "native/protocol/src/**/*.cpp"
   ]