# tauri-plugin-hdiff-update
Tauri 2 plugin for signed and transactional installed-file updates.
The default permission exposes only:
- `prepare_file_update`
- `launch_file_update`
Preparation verifies the installed source tree, downloads and verifies a
directory patch, applies it to staging, and verifies every target file. Launch
starts a non-elevated supervisor; after the application exits it invokes the
same signed application binary as a constrained elevated worker. The worker
commits managed paths with a journal and rollback backup.
The consuming application must call `maybe_run_file_update_helper` before Tauri
startup, pass the same compile-time configuration to `init(config)`, and call
`confirm_file_update_startup` after setup succeeds. The trusted public-key ring,
application id, main executable, managed paths, and bundled `hpatchz` path never
come from frontend arguments.
See the repository README and commercial directory update specification for the
complete integration contract.