[Eoic]

Update delivery

Papyrus users currently download replacement installers for each release. Add About → App updates with optional daily checks, notices deferred during reading, and installation-channel-specific delivery:

• Play internal testers update through Google Play. A separate direct APK flavor uses Android confirmation and verifies the installed signing identity.
• Installed Windows builds download a verified installer, wait for normal app exit, upgrade and relaunch. AppImages replace their file atomically. Portable archives retain a manual fallback.
• Releases can publish a signed APT feed once the dedicated key is configured. Web updates activate the waiting offline worker before reloading and defer when other tabs are open.

Packages are selected from fixed Papyrus GitHub release URLs and verified against the release manifest. Library/profile storage and version numbers are unchanged. Existing downloaded installations need one manual upgrade to acquire the updater.

Closes #110. Related requirements: NFR-2_1, NFR-3_1, NFR-3_2, NFR-3_3 and NFR-4_5. Plan, configuration and device acceptance checklist: docs/UPDATE_DELIVERY.md.

Validation and rollout

• Client formatting/analysis passed. Full Flutter suite: 2,040 passed, 19 existing opt-in skips. Browser JavaScript tests: 17 passed.
• Both Android flavors compile after integrating current development. Merged manifest checks confirm Play has no APK installation permission. Web release compilation and offline asset preparation passed.
• E-ink dialog checked in Chrome at desktop and 360px widths. Widget checks cover 100% and 200% text sizes.
• Real signed repository verified with GPG and apt update/package download in isolated Ubuntu.
• Release tooling: 54 tests, with the Linux-only integration skipped on macOS. All five APT tests, including real signing and package-manager consumption, passed in Ubuntu.
• Local Flutter checks preserve the existing reader path override. CI checks the committed Git dependency.
• CI now compiles both Android flavors and exercises the Windows wait-for-exit updater with persisted-library verification. Native CI and final coverage checks are still running.
• No deployment or version bump. APT requires APT_SIGNING_KEY, APT_SIGNING_FINGERPRINT and APT_UPDATES_ENABLED. Play/device and real desktop upgrade acceptance remain rollout gates.

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has insufficient remaining quota. Try requesting a review at a lower effort level.

An organization owner can choose the repository organization as the billing source for reviews requested by members with a paid Copilot license. Learn about Copilot code review billing.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-11-01T02:00:17.962228Z	63d248e	Draft marked ready

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[codecov]

Codecov Report

❌ Patch coverage is 68.10036% with 89 lines in your changes missing coverage. Please review.

Files with missing lines	Patch %	Lines
app/lib/updates/update_platform_io.dart	0.00%	43 Missing ⚠️
app/lib/updates/update_controller.dart	74.41%	22 Missing ⚠️
app/lib/updates/update_settings.dart	80.72%	16 Missing ⚠️
...pp/lib/widgets/profile/about_settings_section.dart	25.00%	3 Missing ⚠️
app/lib/main.dart	60.00%	2 Missing ⚠️
app/lib/updates/update_download.dart	90.00%	2 Missing ⚠️
app/lib/updates/update_release.dart	96.42%	1 Missing ⚠️

📢 Thoughts on this report? Let us know!