native-update 1.4.9 → 3.1.0

package/Readme.md

@@ -7,12 +7,24 @@
 > - ✅ **yarn Workspace Monorepo** - Seamless development with workspace:* references
 > - ✅ **3 Complete Examples** - React+Capacitor frontend, Node.js+Express and Firebase backends in `example-apps/`
 > - ✅ **Native Implementations Complete** - iOS (Swift) and Android (Kotlin) fully implemented
-> - ✅ **Comprehensive Test Suite** - Unit and integration tests with Vitest
 > - ✅ **Development Tools Included** - Bundle creator, signer, and CLI tools
 > - ✅ **Security Features Implemented** - HTTPS enforcement, signatures, checksums
 >
 > **🚀 Try the example apps in `example-apps/` to see all features in action!**
 
+## Current State
+
+- Package version: `3.1.0`
+- Verified on: `2026-05-18`
+- Tests: `134/134` backend PHPUnit via `php artisan test`
+- Build: `yarn build` succeeds (root plugin Rollup + website Vite + Docusaurus docs site)
+- Root package manager is standardized on Yarn, and the root scripts no longer shell out to npm or pnpm
+- Backend: Laravel 13 + Nova 5 — the only backend after v3.0.0 (Firestore removed); identity via Laravel Socialite + Sanctum personal access tokens; RBAC via `spatie/laravel-permission` (roles `super-admin`, `admin`, `user`)
+- Root portfolio info file:
+  - `NATIVE-UPDATE_portfolio-info_2026-06-26.md`
+- Current dated project profile:
+  - `docs/project-profiles/native-update-capacitor-update-platform-project-profile-last-updated-2026-05-19.md`
+
 ## 📚 Documentation
 
 - **[AI Integration Guide](https://nativeupdate.aoneahsan.com/docs/AI-INTEGRATION-GUIDE)** - Quick reference for AI development agents (Claude, Cursor, Copilot)
@@ -61,7 +73,7 @@
 
 ---
 
-A **foundation package** for building a comprehensive update management plugin for Capacitor that combines Live/OTA updates, native app store updates, and in-app review capabilities. This package provides the architecture, interfaces, and documentation but requires additional implementation work.
+A production-oriented Capacitor update platform that combines Live/OTA updates, native app store update flows, in-app reviews, release tooling, dashboard support, example backends, and operational documentation in one ecosystem.
 
 ## 🌐 Dashboard & Management Platform
 
@@ -356,15 +368,19 @@ This repository uses **yarn workspace** for seamless development. All examples r
 - ✅ Rate limiting and compression
 - ✅ Signature verification
 
-#### 2. Firebase Functions Backend
+#### 2. Laravel + Nova SaaS Backend
 
-**[Firebase Backend Example](https://nativeupdate.aoneahsan.com/docs/examples/firebase-backend-example)**
+The canonical backend ships in this monorepo under [`backend/`](./backend) — a
+Laravel 13 + Nova 5 application that powers the hosted Native Update SaaS at
+`api.nativeupdate.aoneahsan.com`. You can use it as a managed service or
+self-host it on any PHP 8.2+ host. Setup is documented in
+[`docs/deployment/PRODUCTION-DEPLOY-CHECKLIST.md`](./docs/deployment/PRODUCTION-DEPLOY-CHECKLIST.md).
 
-- ✅ Serverless architecture with Firebase
-- ✅ Cloud Functions for bundle management
-- ✅ Firestore for bundle metadata
-- ✅ Firebase Storage for bundle hosting
-- ✅ Auto-scaling infrastructure
+- ✅ Google OAuth (Socialite) + Sanctum bearer tokens + spatie/laravel-permission RBAC
+- ✅ MySQL / PostgreSQL bundle metadata + signed download URLs
+- ✅ Per-app API keys + signing keys generated through Nova
+- ✅ Per-bundle rollout percentages + per-device rollout buckets
+- ✅ Google Drive integration so bundle ZIPs stay in your own Drive
 
 **🚀 Get started:** Each example app has its own README with setup instructions.
 
@@ -530,3 +546,13 @@ MIT License - see [LICENSE](./LICENSE) for details.
 - LinkedIn: [linkedin.com/in/aoneahsan](https://linkedin.com/in/aoneahsan)
 - Email: aoneahsan@gmail.com
 - Phone: +923046619706
+
+<!-- project-links:start -->
+## Links
+
+- Live: https://nativeupdate.aoneahsan.com
+- Play Store: https://play.google.com/store/apps/details?id=com.aoneahsan.nativeupdate
+- NPM: https://www.npmjs.com/package/native-update
+
+_URL source of truth: `01-code/projects/project-live-urls.json` (auto-generated — do not hand-edit between these markers)._
+<!-- project-links:end -->

package/android/manifest-additions.xml

@@ -0,0 +1,28 @@
+<!-- 
+    IMPORTANT: These elements MUST be added to your app's AndroidManifest.xml inside the <application> tag
+    when using background update features of the native-update plugin.
+    
+    Without these additions:
+    1. Background updates will crash with ServiceNotFoundException
+    2. Update notification buttons won't work (they'll appear but won't respond to taps)
+    3. Downloads won't continue when app is in background
+    
+    Location: android/app/src/main/AndroidManifest.xml (in your app, not in the plugin)
+-->
+
+<!-- WorkManager service for background updates -->
+<service
+    android:name="androidx.work.impl.foreground.SystemForegroundService"
+    android:foregroundServiceType="dataSync"
+    tools:node="merge" />
+
+<!-- Broadcast receiver for notification actions -->
+<receiver
+    android:name="com.aoneahsan.nativeupdate.NotificationActionReceiver"
+    android:exported="false">
+    <intent-filter>
+        <action android:name="com.aoneahsan.nativeupdate.UPDATE_NOW" />
+        <action android:name="com.aoneahsan.nativeupdate.UPDATE_LATER" />
+        <action android:name="com.aoneahsan.nativeupdate.DISMISS" />
+    </intent-filter>
+</receiver>

package/android/src/main/AndroidManifest.xml

@@ -1,17 +1,13 @@
 <manifest xmlns:android="http://schemas.android.com/apk/res/android">
-    
+
     <!-- Required permissions -->
     <uses-permission android:name="android.permission.INTERNET" />
     <uses-permission android:name="android.permission.ACCESS_NETWORK_STATE" />
-    
-    <!-- Optional permissions (requested at runtime) -->
-    <uses-permission android:name="android.permission.WRITE_EXTERNAL_STORAGE" 
-                     android:maxSdkVersion="28" />
-    
+
     <!-- Background update permissions -->
     <uses-permission android:name="android.permission.WAKE_LOCK" />
     <uses-permission android:name="android.permission.FOREGROUND_SERVICE" />
     <uses-permission android:name="android.permission.POST_NOTIFICATIONS" />
     <uses-permission android:name="android.permission.RECEIVE_BOOT_COMPLETED" />
-    
+
 </manifest>

package/android/src/main/java/com/aoneahsan/nativeupdate/BackgroundNotificationManager.kt

@@ -22,9 +22,12 @@ class BackgroundNotificationManager(
         private const val CHANNEL_ID = "capacitor_native_update"
         private const val CHANNEL_NAME = "App Updates"
         private const val NOTIFICATION_ID = 1001
-        private const val ACTION_UPDATE_NOW = "com.aoneahsan.nativeupdate.UPDATE_NOW"
-        private const val ACTION_UPDATE_LATER = "com.aoneahsan.nativeupdate.UPDATE_LATER"
-        private const val ACTION_DISMISS = "com.aoneahsan.nativeupdate.DISMISS"
+        // Action strings MUST match NotificationActionReceiver's
+        // companion-object constants. They were `UPDATE_NOW` here and
+        // `INSTALL_NOW` there, so every action button silently no-op'd.
+        private const val ACTION_UPDATE_NOW = NotificationActionReceiver.ACTION_INSTALL_NOW
+        private const val ACTION_UPDATE_LATER = NotificationActionReceiver.ACTION_INSTALL_LATER
+        private const val ACTION_DISMISS = NotificationActionReceiver.ACTION_DISMISS
         
         /**
          * Static method to cancel notification from BroadcastReceiver
@@ -259,8 +262,11 @@ class BackgroundNotificationManager(
     ) {
         val actionLabels = preferences.actionLabels ?: ActionLabels.default()
         
-        // Update Now action
-        val updateNowIntent = Intent(ACTION_UPDATE_NOW).apply {
+        // Explicit intents (component set) — Android 8+ blocks implicit
+        // broadcasts to non-exported manifest receivers, which silently
+        // dropped these notifications before this fix.
+        val updateNowIntent = Intent(context, NotificationActionReceiver::class.java).apply {
+            action = ACTION_UPDATE_NOW
             putExtra("update_type", if (appUpdate?.updateAvailable == true) "app_update" else "live_update")
         }
         val updateNowPendingIntent = PendingIntent.getBroadcast(
@@ -269,30 +275,32 @@ class BackgroundNotificationManager(
             updateNowIntent,
             PendingIntent.FLAG_UPDATE_CURRENT or PendingIntent.FLAG_IMMUTABLE
         )
-        
+
         builder.addAction(
             android.R.drawable.ic_menu_upload,
             actionLabels.updateNow ?: "Update Now",
             updateNowPendingIntent
         )
-        
-        // Update Later action
-        val updateLaterIntent = Intent(ACTION_UPDATE_LATER)
+
+        val updateLaterIntent = Intent(context, NotificationActionReceiver::class.java).apply {
+            action = ACTION_UPDATE_LATER
+        }
         val updateLaterPendingIntent = PendingIntent.getBroadcast(
             context,
             2,
             updateLaterIntent,
             PendingIntent.FLAG_UPDATE_CURRENT or PendingIntent.FLAG_IMMUTABLE
         )
-        
+
         builder.addAction(
             android.R.drawable.ic_menu_recent_history,
             actionLabels.updateLater ?: "Later",
             updateLaterPendingIntent
         )
-        
-        // Dismiss action
-        val dismissIntent = Intent(ACTION_DISMISS)
+
+        val dismissIntent = Intent(context, NotificationActionReceiver::class.java).apply {
+            action = ACTION_DISMISS
+        }
         val dismissPendingIntent = PendingIntent.getBroadcast(
             context,
             3,

package/android/src/main/java/com/aoneahsan/nativeupdate/BackgroundUpdatePlugin.kt

@@ -81,6 +81,15 @@ class BackgroundUpdatePlugin : Plugin() {
         val workRequest = OneTimeWorkRequestBuilder<BackgroundUpdateWorker>()
             .setInputData(createWorkData())
             .addTag(WORK_TAG)
+            // Exponential backoff starting at 30s. WorkManager's default
+            // is 10s which hits a failing server too fast and burns
+            // battery on mobile. 30s base, doubled each retry, caps
+            // automatically at WorkManager's internal max (~5 hours).
+            .setBackoffCriteria(
+                BackoffPolicy.EXPONENTIAL,
+                30,
+                TimeUnit.SECONDS
+            )
             .build()
         
         WorkManager.getInstance(context)
@@ -141,6 +150,12 @@ class BackgroundUpdatePlugin : Plugin() {
             .setConstraints(constraints)
             .setInputData(createWorkData())
             .addTag(WORK_TAG)
+            // See triggerBackgroundCheck — same 30s exponential base.
+            .setBackoffCriteria(
+                BackoffPolicy.EXPONENTIAL,
+                30,
+                TimeUnit.SECONDS
+            )
             .build()
         
         WorkManager.getInstance(context)

package/android/src/main/java/com/aoneahsan/nativeupdate/BackgroundUpdateWorker.kt

@@ -17,31 +17,47 @@ class BackgroundUpdateWorker(
     companion object {
         private const val TAG = "BackgroundUpdateWorker"
         private const val NOTIFICATION_ID = 1001
+        // Cap the number of automatic retries for a transient failure
+        // (network error, backend 5xx, etc). WorkManager does not cap
+        // retries natively for our periodic request — without this guard
+        // a persistently-failing server would burn battery indefinitely.
+        // The schedule (with exponential backoff starting at 30s) takes
+        // roughly 30+60+120+240+480 = ~15 minutes across 5 retries, after
+        // which we give up until the next periodic run.
+        private const val MAX_RETRY_ATTEMPTS = 5
     }
-    
+
     override suspend fun doWork(): Result {
         return withContext(Dispatchers.IO) {
             try {
+                if (runAttemptCount >= MAX_RETRY_ATTEMPTS) {
+                    android.util.Log.w(
+                        TAG,
+                        "Giving up after $runAttemptCount retries; will try again on next periodic run"
+                    )
+                    return@withContext Result.failure()
+                }
+
                 val configJson = inputData.getString("config")
                 val config = parseConfig(configJson)
-                
+
                 if (config == null || !config.enabled) {
                     return@withContext Result.failure()
                 }
-                
+
                 val result = performBackgroundCheck(config)
-                
+
                 // Update plugin status
                 updatePluginStatus(result)
-                
+
                 // Send notification if updates found
                 if (result.updatesFound) {
                     sendNotification(result)
                 }
-                
+
                 // Notify listeners
                 notifyListeners(result)
-                
+
                 if (result.success) Result.success() else Result.retry()
             } catch (e: Exception) {
                 android.util.Log.e(TAG, "Background update failed", e)