xteink-apps/apps/AppStore/README.md

AppStore

Installs new Lua apps from one or more public Xteink repositories.

Bootstrap

Copy this directory to /plugins/AppStore on the SD card. On first launch, AppStore creates repositories.txt from repositories.default.txt.

Repository entries use this format:

XTEINK-REPOSITORIES|1
Name|https://host/path/catalog.txt

AppStore downloads each package into /plugins/.install-<AppId>, verifies declared sizes and SHA-256 hashes, requires main.lua, then renames the completed directory into place. Existing apps are left unchanged; updates, including self-update, are not supported yet.

HTTPS is encrypted without peer-certificate authentication. An active network attacker can replace both metadata and payload hashes.