tauri-plugin-hdiff-update 0.1.3

# tauri-plugin-hdiff-update

Tauri v2 plugin for signed HDiffPatch differential installer updates.

## Install

```toml
[dependencies]
tauri-plugin-hdiff-update = "0.1"
```

Register the plugin:

```rust
tauri::Builder::default()
    .plugin(tauri_plugin_hdiff_update::init())
```

Enable the production permission set:

```json
"hdiff-update:default"
```

The default permission only exposes the production update path:

- `download_and_apply`
- `download_and_install`
- `try_install_with_cached_installer`

The release-lab commands are intentionally excluded from the default permission
set.

## Smart Cached Installer Command

For production apps, prefer this flow:

```text
@tauri-apps/plugin-updater check()
  -> plugin:hdiff-update|try_install_with_cached_installer
  -> if status === "fallback", call update.downloadAndInstall()
```

The smart command never downloads the full installer. It only uses a cached
installer whose computed SHA-256 matches a signed manifest delta source.

```ts
import { Channel, invoke } from "@tauri-apps/api/core";

const onEvent = new Channel();
onEvent.onmessage = (event) => console.log(event);

const result = await invoke("plugin:hdiff-update|try_install_with_cached_installer", {
  options: {
    update: {
      manifestUrl: "https://updates.example.com/latest.json",
      expectedVersion: update.version,
      currentVersion: "0.1.0",
      hpatchzPath: "C:\\Program Files\\xCodex\\resources\\bin\\hpatchz.exe",
      signaturePublicKey: "base64-ed25519-public-key",
      requireSignature: true,
      headers: [{ name: "Authorization", value: "Bearer short-lived-token" }],
    },
    installerArgs: [],
  },
  onEvent,
});

if (result.status === "fallback") {
  await update.downloadAndInstall();
}
```

Seed the cache by copying the installer that installed the app into:

```text
<app-data-dir>/hdiff-update/installers/artifacts/
```