benecaster_manager_package_rejected

Fires when a package was refused: a missing or wrong signature, a refused download, or a show that has disconnected. Nothing is unpacked, and the refused file has already been deleted. This is the event worth an alert: a refused signature means a zip did not carry Benecaster’s signature.

Order. Each pair fires once, nested: benecaster_manager_addon_before_update → benecaster_manager_package_before_verify → (benecaster_manager_package_verified … benecaster_manager_addon_updated) or (benecaster_manager_package_rejected → benecaster_manager_addon_update_failed). An install fires benecaster_manager_addon_before_install → (benecaster_manager_addon_installed or benecaster_manager_addon_install_failed), with the package actions in between. The Manager’s own update fires only the package actions. Nothing an action returns is read.

Fired by the Benecaster Add-on Manager, not by Benecaster itself, and only while the Manager is active, so no function_exists() guard is needed. No hook can switch the signature check off, change the updates host, change where the download goes or where the site token is sent, or turn a refusal into an install. No argument carries a site token.