From 1bce1d1ae1a1238406cbff13e5c527b37a871ebf Mon Sep 17 00:00:00 2001
From: TCFDONMEZ <fatih.donmez@atmosware.turkcell.com.tr>
Date: Wed, 30 Sep 2026 10:48:25 +0300
Subject: [PATCH] fix: stage OTA fallback in public downloads

---
 CHANGELOG.md                                  |  7 ++++
 FatihsMG4-unstable-2.2.14.apk.sha256          |  1 +
 app/build.gradle                              |  4 +-
 app/src/unstable/AndroidManifest.xml          |  3 ++
 .../java/com/evsuite/abrp/OtaUpdater.java     | 41 ++++++++++++++++++-
 app/src/unstable/res/xml/ota_file_paths.xml   |  1 +
 6 files changed, 53 insertions(+), 4 deletions(-)
 create mode 100644 FatihsMG4-unstable-2.2.14.apk.sha256

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 843471f..7f78d21 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,6 +4,13 @@ All notable changes to this project are documented here. Format follows
 [Keep a Changelog](https://keepachangelog.com/en/1.1.0/); versions follow
 [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.2.14] - 2026-09-30
+
+### Fixed
+
+- Stage fallback OTA packages in public Downloads and grant the resolved system installer
+  explicit read access, avoiding the MG head unit's private-cache package parse failure.
+
 ## [2.2.13] - 2026-09-30
 
 ### Changed
diff --git a/FatihsMG4-unstable-2.2.14.apk.sha256 b/FatihsMG4-unstable-2.2.14.apk.sha256
new file mode 100644
index 0000000..17679b1
--- /dev/null
+++ b/FatihsMG4-unstable-2.2.14.apk.sha256
@@ -0,0 +1 @@
+2878b084beae8af2bf4295b18b996ac71d0ebcd3b8c11beb5453a3e7eb68f7d2  FatihsMG4-unstable-2.2.14.apk
diff --git a/app/build.gradle b/app/build.gradle
index f960ada..7bb6232 100644
--- a/app/build.gradle
+++ b/app/build.gradle
@@ -34,8 +34,8 @@ android {
         applicationId "com.evsuite.abrp"
         minSdk 27
         targetSdk 36
-        versionCode 30
-        versionName "2.2.13"
+        versionCode 31
+        versionName "2.2.14"
 
         testInstrumentationRunner "androidx.test.runner.AndroidJUnitRunner"
     }
diff --git a/app/src/unstable/AndroidManifest.xml b/app/src/unstable/AndroidManifest.xml
index 67402de..1e4f316 100644
--- a/app/src/unstable/AndroidManifest.xml
+++ b/app/src/unstable/AndroidManifest.xml
@@ -8,6 +8,9 @@
          platform-signed build the platform may install without asking; when it does ask,
          this is what lets the confirmation be raised at all. -->
     <uses-permission android:name="android.permission.REQUEST_INSTALL_PACKAGES" />
+    <uses-permission
+        android:name="android.permission.WRITE_EXTERNAL_STORAGE"
+        android:maxSdkVersion="28" />
 
     <application>
         <provider
diff --git a/app/src/unstable/java/com/evsuite/abrp/OtaUpdater.java b/app/src/unstable/java/com/evsuite/abrp/OtaUpdater.java
index 94fdf08..57f63f7 100644
--- a/app/src/unstable/java/com/evsuite/abrp/OtaUpdater.java
+++ b/app/src/unstable/java/com/evsuite/abrp/OtaUpdater.java
@@ -1,11 +1,14 @@
 package com.evsuite.abrp;
 
 import android.app.PendingIntent;
+import android.content.ClipData;
 import android.content.Context;
 import android.content.Intent;
 import android.content.pm.PackageInstaller;
+import android.content.pm.ResolveInfo;
 import android.net.Uri;
 import android.os.Build;
+import android.os.Environment;
 import android.provider.Settings;
 import android.util.Log;
 
@@ -17,6 +20,7 @@ import org.json.JSONObject;
 
 import java.io.BufferedReader;
 import java.io.File;
+import java.io.FileInputStream;
 import java.io.FileOutputStream;
 import java.io.InputStreamReader;
 import java.io.IOException;
@@ -535,17 +539,41 @@ final class OtaUpdater {
             throw new IllegalStateException("unknown sources permission required");
         }
 
+        File publicApk = copyToPublicDownloads(apk);
         Uri contentUri = FileProvider.getUriForFile(context,
-                context.getPackageName() + ".fileprovider", apk);
+                context.getPackageName() + ".fileprovider", publicApk);
         Intent install = new Intent(Intent.ACTION_VIEW)
                 .setDataAndType(contentUri, "application/vnd.android.package-archive")
                 .addFlags(Intent.FLAG_ACTIVITY_NEW_TASK | Intent.FLAG_GRANT_READ_URI_PERMISSION);
+        install.setClipData(ClipData.newRawUri("EVABRPUploader update", contentUri));
         grantToInstallers(context, contentUri);
         if (install.resolveActivity(context.getPackageManager()) == null) {
             throw new IllegalStateException("No package installer activity");
         }
         context.startActivity(install);
-        Log.i(TAG, "System install UI opened for " + apk.getName());
+        Log.i(TAG, "System install UI opened for " + publicApk.getAbsolutePath());
+    }
+
+    private static File copyToPublicDownloads(File source) {
+        File downloads = Environment.getExternalStoragePublicDirectory(
+                Environment.DIRECTORY_DOWNLOADS);
+        if (downloads == null || (!downloads.isDirectory() && !downloads.mkdirs())) {
+            throw new IllegalStateException("Downloads directory unavailable");
+        }
+        File destination = new File(downloads, "FatihsMG4-OTA-update.apk");
+        try (FileInputStream input = new FileInputStream(source);
+             FileOutputStream output = new FileOutputStream(destination, false)) {
+            byte[] buffer = new byte[64 * 1024];
+            int count;
+            while ((count = input.read(buffer)) != -1) output.write(buffer, 0, count);
+            output.getFD().sync();
+        } catch (IOException e) {
+            throw new IllegalStateException("Could not stage APK in Downloads", e);
+        }
+        if (destination.length() != source.length()) {
+            throw new IllegalStateException("Staged APK size mismatch");
+        }
+        return destination;
     }
 
     private static void grantToInstallers(Context context, Uri uri) {
@@ -559,6 +587,15 @@ final class OtaUpdater {
                 context.grantUriPermission(packageName, uri, Intent.FLAG_GRANT_READ_URI_PERMISSION);
             } catch (Throwable ignored) { }
         }
+        Intent probe = new Intent(Intent.ACTION_VIEW)
+                .setDataAndType(uri, "application/vnd.android.package-archive");
+        for (ResolveInfo info : context.getPackageManager().queryIntentActivities(probe, 0)) {
+            if (info.activityInfo == null) continue;
+            try {
+                context.grantUriPermission(info.activityInfo.packageName, uri,
+                        Intent.FLAG_GRANT_READ_URI_PERMISSION);
+            } catch (Throwable ignored) { }
+        }
     }
 
 }
diff --git a/app/src/unstable/res/xml/ota_file_paths.xml b/app/src/unstable/res/xml/ota_file_paths.xml
index ea61649..4ef41e9 100644
--- a/app/src/unstable/res/xml/ota_file_paths.xml
+++ b/app/src/unstable/res/xml/ota_file_paths.xml
@@ -1,4 +1,5 @@
 <?xml version="1.0" encoding="utf-8"?>
 <paths>
     <cache-path name="ota_cache" path="." />
+    <external-path name="downloads" path="Download/" />
 </paths>