# Over-the-air (OTA) Updater

This plugin provides over-the-air (OTA) updates for the Web assets of a Tauri app.

It leverages the [CrabNebula Cloud](https://crabnebula.dev/cloud/) to ship the assets.

## Install

_This plugin requires a Rust version of at least **1.75**_

There are three general methods of installation that we can recommend.

1. Use crates.io and npm (easiest, and requires you to trust that our publishing pipeline worked)
2. Pull sources directly from Github using git tags / revision hashes (most secure)
3. Git submodule install this repo in your tauri project and then use file protocol to ingest the source (most secure, but inconvenient to use)

Install the Core plugin by adding the following to your `Cargo.toml` file:

`src-tauri/Cargo.toml`

```toml
[dependencies]
tauri-plugin-ota-updater = "2.0.0-rc"
```

You can install the JavaScript Guest bindings using your preferred JavaScript package manager:

```sh
pnpm add @crabnebula/plugin-ota-updater
# or
npm add @crabnebula/plugin-ota-updater
# or
yarn add @crabnebula/plugin-ota-updater
```

## Configuration

You need a signing key to sign the update bundle. This ensures the integrity of your code can be checked at runtime.
To generate a new signing key run the `generate-keypair` command:

```sh
npx @crabnebula/ota-updater generate-keypair
```

Safely store the private key and DO NOT share it with anyone. It will be required to distribute updates later.

The plugin must be configured with the signing public key and CrabNebula Cloud org/app slug pair:

```json
{
    "plugins": {
        "ota-updater": {
            "orgSlug": "my-org",
            "appSlug": "my-app",
            "pubkey": "<insert-public-key-here>"
        }
    }
}
```

To be able to use the updater from the frontend of your application you need to enable the default permission of the plugin in your capability ( e.g. `capabilities/default.json`):

```json
{
...
  "permissions": [
    "ota-updater:default"
  ]
...
}
```

## Distributing Updates

To distribute updates, build your frontend assets and then run the `upload` command
providing the private key and a CrabNebula Cloud API key as environment variables:

```sh
export PRIVATE_KEY=<insert-private-key-here>
export CN_API_KEY=<insert api-key-here>
npx @crabnebula/ota-updater upload
```

## Usage

First you need to register the core plugin with Tauri:

`src-tauri/src/main.rs`

```rust
fn main() {
    let context = tauri::generate_context!();

    let (ota_plugin, context) = tauri_plugin_ota_updater::init(context);

    tauri::Builder::default()
        .plugin(ota_plugin)
        .run(context)
        .expect("error while running tauri application");
}
```

Afterwards all the plugin's APIs are available through the JavaScript guest bindings:

```javascript
import { check } from "@crabnebula/plugin-ota-updater";
const update = await check()
if (update) {
    await update.apply()
    location.reload()
}
```

## License

Code: (c) 2023 - Present - CrabNebula Ltd.

PolyForm-Noncommercial-1.0.0