nsIDownload
see also nsidownloadmanager nsidownloadprogresslistener nsixpinstallmanagerui ...

nsIUpdateItem
can be null and if supplied must be in the format of "type:hash" (see the types in nsicryptohash and nsixpinstallmanager.initmanagerwithhashes().