packwise-skills 1.0.0

package/sub-skills/embedded/stm32.md

@@ -0,0 +1,160 @@
+# STM32 Embedded Build Sub-Skill
+
+Build firmware for STM32 microcontrollers using STM32CubeIDE, Keil MDK, or PlatformIO.
+
+**Current versions**: STM32CubeIDE 1.17 / STM32CubeMX 6.13 / ARM GCC 13.x (2025-2026)
+
+## When to Use
+
+- Industrial control systems
+- IoT sensor nodes and gateways
+- Motor control applications
+- Medical devices
+- Automotive ECU (non-safety-critical)
+- Consumer electronics firmware
+
+## STM32 Family Overview
+
+| Family | Core | Speed | Flash | Best For |
+|--------|------|-------|-------|----------|
+| STM32F0 | Cortex-M0 | 48MHz | 16-256KB | Cost-sensitive, basic control |
+| STM32F1 | Cortex-M3 | 72MHz | 16-1024KB | General purpose (legacy, very popular) |
+| STM32F4 | Cortex-M4F | 168-200MHz | 512KB-2MB | DSP, audio, mid-range processing |
+| STM32G0 | Cortex-M0+ | 64MHz | 16-512KB | Low power, cost-sensitive |
+| STM32G4 | Cortex-M4F | 170MHz | 128-512KB | Analog-rich, motor control |
+| STM32H7 | Cortex-M7+M4 | 480MHz | 1-2MB | High-performance, display, audio |
+| STM32L0 | Cortex-M0+ | 32MHz | 16-192KB | Ultra-low power |
+| STM32L4 | Cortex-M4F | 80MHz | 256KB-1MB | Low power + performance |
+| STM32U5 | Cortex-M33 | 160MHz | 256KB-2MB | Ultra-low power + security |
+| STM32WB | Cortex-M4+M0+ | 64MHz | 256KB-1MB | Bluetooth LE + application |
+| STM32WL | Cortex-M4+M0+ | 48MHz | 64-256KB | LoRa/LoRaWAN + application |
+| STM32MP1/2 | Cortex-A7/M4 | 650-1200MHz | External | Linux + real-time coprocessor |
+
+## Prerequisites
+
+```bash
+# STM32CubeIDE (all-in-one: editor + compiler + debugger)
+# Download from st.com/stm32cubeide
+
+# OR: ARM GCC toolchain + STM32CubeMX + VS Code
+# ARM GCC:
+sudo apt install gcc-arm-none-eabi    # Linux
+brew install --cask gcc-arm-embedded  # macOS
+
+# STM32CubeMX (pin/peripheral configuration)
+# Download from st.com/stm32cubemx
+
+# OR: PlatformIO (cross-platform build system)
+pip install platformio
+```
+
+## STM32CubeIDE Build
+
+### Project Setup
+
+```
+STM32CubeIDE:
+1. File → New → STM32 Project
+2. Select MCU/Board (e.g., STM32F407VG)
+3. Configure pins in .ioc file (CubeMX integrated)
+4. Generate code
+5. Write application code in Core/Src/main.c
+6. Build: Project → Build All (Ctrl+B)
+7. Debug: Run → Debug (ST-Link/J-Link)
+```
+
+### Build Output
+
+```
+Debug/ or Release/
+├── myproject.elf        ← Debug binary (with symbols)
+├── myproject.hex        ← Intel HEX (for programmer)
+├── myproject.bin        ← Raw binary (for bootloader/OTA)
+└── myproject.map        ← Memory map (linker output)
+```
+
+### Command Line Build
+
+```bash
+# Build with ARM GCC
+arm-none-eabi-gcc -mcpu=cortex-m4 -mthumb -mfloat-abi=hard -mfpu=fpv4-sp-d16 \
+  -O2 -g -Wall \
+  -DSTM32F407xx \
+  -IInc -IDrivers/STM32F4xx_HAL_Driver/Inc \
+  -ICore/Inc \
+  Src/main.c Src/stm32f4xx_it.c \
+  -TSTM32F407VGTX_FLASH.ld \
+  -o build/myproject.elf \
+  -lc -lm -lnosys
+
+# Generate .bin from .elf
+arm-none-eabi-objcopy -O binary build/myproject.elf build/myproject.bin
+
+# Generate .hex from .elf
+arm-none-eabi-objcopy -O ihex build/myproject.elf build/myproject.hex
+
+# Flash with ST-Link
+st-flash write build/myproject.bin 0x08000000
+
+# Flash with J-Link
+JLinkExe -device STM32F407VG -if SWD -speed 4000 -CommandFile flash.jlink
+```
+
+### Flash Size Report
+
+```bash
+arm-none-eabi-size build/myproject.elf
+# Output:
+#    text    data     bss     dec     hex filename
+#   32768    1024    4096   37888    9400 build/myproject.elf
+# text = code + const data (Flash)
+# data = initialized variables (Flash + RAM)
+# bss  = zero-initialized variables (RAM only)
+```
+
+## PlatformIO Build
+
+```ini
+; platformio.ini
+[env:stm32f407vg]
+platform = ststm32
+board = disco_f407vg
+framework = stm32cube    ; or: arduino, cmsis, zephyr
+build_flags = -O2 -DSTM32F407xx
+upload_protocol = stlink
+debug_tool = stlink
+monitor_speed = 115200
+```
+
+```bash
+pio run                    # Build
+pio run -t upload          # Flash
+pio run -t debug           # Debug (GDB + OpenOCD/ST-Link)
+pio device monitor         # Serial monitor
+```
+
+## RTOS Options for STM32
+
+| RTOS | License | RAM (min) | Best For |
+|------|---------|-----------|----------|
+| FreeRTOS | MIT | ~5KB | Most popular, AWS-supported |
+| Zephyr | Apache 2.0 | ~30KB | Full-featured, Linux-like ecosystem |
+| RT-Thread | Apache 2.0 | ~3KB | Chinese ecosystem, IoT-focused |
+| Azure RTOS (ThreadX) | MIT | ~2KB | Microsoft, very small footprint |
+| CMSIS-RTOS2 | Apache 2.0 | N/A | ARM standard API (wraps FreeRTOS/ThreadX) |
+| bare-metal | N/A | 0 | Simple applications, no OS |
+
+## Common Pitfalls
+
+| Issue | Fix |
+|-------|-----|
+| Flash size overflow | Use `-Os` (optimize for size); enable LTO; remove unused HAL modules |
+| RAM overflow | Reduce stack/heap size in linker script; use `.data` and `.bss` sections properly |
+| HardFault crash | Check stack overflow (increase stack size); verify interrupt priorities |
+| Clock misconfiguration | Use CubeMX to configure RCC; verify HSE/HSI oscillator source |
+| Debug connection fails | Check ST-Link firmware; verify SWD pins not reconfigured as GPIO |
+| Peripheral not working | Enable peripheral clock in RCC; check pin AF mapping in CubeMX |
+| Power consumption too high | Use low-power modes (STOP/STANDBY); disable unused peripherals |
+| Bootloader jump fails | Set MSP and PC correctly; disable interrupts before jump |
+| OTA update fails | Verify flash write alignment (usually 256-byte or 1KB pages) |
+| Floating point not working | Use `-mfloat-abi=hard -mfpu=fpv4-sp-d16`; enable FPU in CPACR register |

package/sub-skills/mobile/android.md

@@ -0,0 +1,322 @@
+# Android Native Build Sub-Skill
+
+Build and publish Kotlin/Java native Android applications.
+
+**Current version**: Android 15 (API 35) / AGP 8.7.x / Gradle 8.10+ / JDK 17 (2025-2026)
+
+## When to Use
+
+- Native Android applications (Kotlin recommended, Java supported)
+- Apps requiring deep Android platform integration
+- Apps published to Google Play, Huawei AppGallery, or Xiaomi GetApps
+
+## Prerequisites
+
+```bash
+# JDK 17 (REQUIRED for AGP 8.x)
+# Android Studio (includes JDK 17 bundled as JBR)
+# OR: standalone JDK 17
+
+# Android SDK 35 (via Android Studio SDK Manager)
+# NDK (if using native code)
+
+# Verify
+java -version    # Should show 17.x
+```
+
+## Build
+
+```bash
+./gradlew assembleDebug       # Debug APK
+./gradlew assembleRelease     # Release APK
+./gradlew bundleRelease       # AAB (required by Google Play)
+```
+
+## Required Build Configuration (AGP 8.x)
+
+```kotlin
+// build.gradle.kts (app-level)
+android {
+    namespace = "com.example.myapp"    // REQUIRED since AGP 8.0 (replaces package in AndroidManifest)
+    compileSdk = 35                     // Should match latest API level
+
+    defaultConfig {
+        applicationId = "com.example.myapp"
+        minSdk = 24                     // Android 7.0
+        targetSdk = 35                  // REQUIRED: Google Play mandates API 35 as of 2025
+        versionCode = 1
+        versionName = "1.0.0"
+    }
+}
+```
+
+```xml
+<!-- AndroidManifest.xml — REMOVE package attribute (AGP 8.x) -->
+<manifest xmlns:android="http://schemas.android.com/apk/res/android">
+    <!-- NO package="..." attribute here -->
+</manifest>
+```
+
+### gradle.properties (Modern Defaults)
+
+```properties
+# gradle.properties
+android.useAndroidX=true
+android.nonTransitiveRClass=true
+org.gradle.jvmargs=-Xmx4g -XX:+UseG1GC
+org.gradle.parallel=true
+org.gradle.caching=true
+org.gradle.configuration-cache=true
+```
+
+## Signing (Secure Approach)
+
+### Generate Upload Key
+
+```bash
+keytool -genkey -v -keystore upload-key.jks \
+  -keyalg RSA -keysize 2048 -validity 10000 \
+  -alias upload
+```
+
+### Secure Signing Configuration
+
+```kotlin
+// build.gradle.kts — NEVER hardcode passwords
+signingConfigs {
+    create("release") {
+        storeFile = file(System.getenv("KEYSTORE_PATH") ?: "../keystore/upload-key.jks")
+        storePassword = System.getenv("KEYSTORE_PASSWORD") ?: ""
+        keyAlias = System.getenv("KEY_ALIAS") ?: ""
+        keyPassword = System.getenv("KEY_PASSWORD") ?: ""
+    }
+}
+
+buildTypes {
+    release {
+        signingConfig = signingConfigs.getByName("release")
+        isMinifyEnabled = true
+        isShrinkResources = true
+        proguardFiles(
+            getDefaultProguardFile("proguard-android-optimize.txt"),
+            "proguard-rules.pro"
+        )
+    }
+}
+```
+
+### Play App Signing (Recommended)
+
+Google Play App Signing separates the **upload key** (you hold) from the **signing key** (Google holds):
+
+- **Upload key**: Signs your AAB before uploading. If lost, can be reset in Play Console.
+- **Signing key**: Signs the final APK delivered to users. Google manages this securely.
+- Enroll in Google Play Console → Release → Setup → App signing
+
+## 16KB Page Alignment (Android 15 Requirement)
+
+Android 15 devices may use 16KB memory pages. All native libraries (.so files) must be 16KB aligned.
+
+```kotlin
+// build.gradle.kts
+android {
+    packaging {
+        jniLibs {
+            pageAlignSharedLibs = true    // AGP 8.5+
+        }
+    }
+}
+```
+
+```bash
+# Check alignment
+unzip -l app.apk | grep "\.so$"
+```
+
+**Apps without native code are NOT affected.**
+
+## Network Security Config
+
+```xml
+<!-- res/xml/network_security_config.xml -->
+<?xml version="1.0" encoding="utf-8"?>
+<network-security-config>
+    <base-config cleartextTrafficPermitted="false">
+        <trust-anchors>
+            <certificates src="system" />
+        </trust-anchors>
+    </base-config>
+</network-security-config>
+```
+
+```xml
+<!-- AndroidManifest.xml -->
+<application
+    android:networkSecurityConfig="@xml/network_security_config"
+    ... >
+```
+
+## Android Keystore (Runtime Key Storage)
+
+For storing sensitive data at runtime (tokens, credentials), use Android Keystore — NOT JKS files:
+
+```kotlin
+// EncryptedSharedPreferences (recommended for key-value storage)
+val masterKey = MasterKey.Builder(context)
+    .setKeyScheme(MasterKey.KeyScheme.AES256_GCM)
+    .build()
+
+val securePrefs = EncryptedSharedPreferences.create(
+    context, "secret_prefs", masterKey,
+    EncryptedSharedPreferences.PrefKeyEncryptionScheme.AES256_SIV,
+    EncryptedSharedPreferences.PrefValueEncryptionScheme.AES256_GCM
+)
+```
+
+## Foreground Service Types (Android 14+)
+
+Starting with Android 14 (API 34), every foreground service MUST declare a type:
+
+```xml
+<service
+    android:name=".MyService"
+    android:foregroundServiceType="dataSync" />
+```
+
+Valid types: `camera`, `connectedDevice`, `dataSync`, `health`, `location`, `mediaPlayback`, `microphone`, `phoneCall`, `shortService`, `specialUse`.
+
+## Permissions Policy
+
+```xml
+<!-- Android 13+ notification permission -->
+<uses-permission android:name="android.permission.POST_NOTIFICATIONS" />
+
+<!-- Android 13+ granular media permissions (replaces READ_EXTERNAL_STORAGE) -->
+<uses-permission android:name="android.permission.READ_MEDIA_IMAGES" />
+<uses-permission android:name="android.permission.READ_MEDIA_VIDEO" />
+
+<!-- Use system photo picker instead of READ_MEDIA_IMAGES when possible -->
+<!-- No permission needed: ActivityResultContracts.PickVisualMedia() -->
+```
+
+## Store Publishing Checklist
+
+| Step | Description |
+|------|-------------|
+| 1. Register developer | Google Play ($25 one-time), Huawei (free), Xiaomi (free) |
+| 2. Generate signed AAB | `./gradlew bundleRelease` |
+| 3. Privacy policy | Required URL — must be accessible without login |
+| 4. Data Safety section | Declare all data collection in Play Console (Mandatory) |
+| 5. Data deletion | Apps with account creation MUST provide data deletion option |
+| 6. App icon | 512x512 PNG |
+| 7. Screenshots | Phone + tablet |
+| 8. Description | App name, short description, full description |
+| 9. Content rating | IARC rating questionnaire |
+| 10. Target SDK | Must be API 35 (as of 2025/2026) |
+| 11. Submit review | Google Play typically 1–3 days |
+
+## Build Optimization
+
+### ABI Splits (Reduce APK Size)
+
+```kotlin
+// build.gradle.kts
+android {
+    splits {
+        abi {
+            isEnable = true
+            reset()
+            include("arm64-v8a", "armeabi-v7a", "x86_64")
+            isUniversalApk = false
+        }
+    }
+}
+```
+
+### R8 Code Shrinking
+
+```kotlin
+// build.gradle.kts
+android {
+    buildTypes {
+        release {
+            isMinifyEnabled = true
+            isShrinkResources = true
+            proguardFiles(
+                getDefaultProguardFile("proguard-android-optimize.txt"),
+                "proguard-rules.pro"
+            )
+        }
+    }
+}
+```
+
+### Build Variant Management
+
+```kotlin
+// build.gradle.kts
+android {
+    flavorDimensions += "env"
+    productFlavors {
+        create("dev") {
+            dimension = "env"
+            applicationIdSuffix = ".dev"
+            versionNameSuffix = "-dev"
+        }
+        create("staging") {
+            dimension = "env"
+            applicationIdSuffix = ".staging"
+        }
+        create("prod") {
+            dimension = "env"
+        }
+    }
+}
+```
+
+## CI/CD — GitHub Actions
+
+```yaml
+name: Android Build
+on:
+  push:
+    tags: ['v*']
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-java@v4
+        with:
+          distribution: 'temurin'
+          java-version: '17'
+      - name: Decode Keystore
+        run: echo "${{ secrets.RELEASE_KEYSTORE_BASE64 }}" | base64 --decode > app/release.jks
+      - name: Build AAB
+        env:
+          KEYSTORE_PATH: release.jks
+          KEYSTORE_PASSWORD: ${{ secrets.KEYSTORE_PASSWORD }}
+          KEY_ALIAS: ${{ secrets.KEY_ALIAS }}
+          KEY_PASSWORD: ${{ secrets.KEY_PASSWORD }}
+        run: ./gradlew bundleRelease
+      - uses: actions/upload-artifact@v4
+        with:
+          name: aab
+          path: app/build/outputs/bundle/release/*.aab
+```
+
+## Common Pitfalls
+
+| Issue | Fix |
+|-------|-----|
+| "Namespace not specified" | Add `namespace = "com.example.app"` in build.gradle (AGP 8.x requires it) |
+| Signing error | Check environment variables; never hardcode passwords |
+| ProGuard crash | Add `-keep` rules for models, native modules, serialization |
+| Target SDK rejected | Google Play requires `targetSdk = 35` as of 2025 |
+| 16KB alignment error | Add `pageAlignSharedLibs = true` in build.gradle |
+| Foreground service crash | Declare `foregroundServiceType` in AndroidManifest (API 34+) |
+| Data Safety rejection | Complete Data Safety section in Play Console |
+| Privacy policy rejected | URL must be live, accessible without login, match Data Safety declaration |
+| Cleartext traffic blocked | Android 9+ blocks HTTP by default; use HTTPS or configure network_security_config |
+| `READ_EXTERNAL_STORAGE` not working | Android 13+ uses `READ_MEDIA_IMAGES`/`READ_MEDIA_VIDEO` instead |
+| Play App Signing key lost | Upload key can be reset in Play Console; signing key is managed by Google |

package/sub-skills/mobile/capacitor.md

@@ -0,0 +1,232 @@
+# Capacitor Mobile Build Sub-Skill
+
+Package web applications as native mobile apps using Capacitor.
+
+**Current version**: Capacitor 8.x / Capacitor CLI 8.x (2025-2026)
+
+> ⚠️ **Breaking changes since Capacitor 6**:
+> - **Node.js 22+ required** (was 18+). **JDK 21 required** (was 17). **iOS deployment target 15.0** (was 13.0). **Android minSdk 24** (was 22). **Android compileSdk/targetSdk 36** (was 34).
+> - `android.adjustMarginsForEdgeToEdge` config removed (v8) — use System Bars plugin with CSS `env()` variables.
+> - `bridge_layout_main.xml` renamed to `capacitor_bridge_layout_main.xml` (v8).
+> - Gradle property syntax requires `=` (e.g., `namespace = "com.example"`).
+> - iOS now defaults to SPM (Swift Package Manager) for new projects (v8).
+> - Plugin type aliases removed in v7 (e.g., `AppRestoredResult` → `RestoredListenerEvent`).
+> - Run `npx cap migrate` for automated migration.
+> - See [capacitorjs.com/docs/updating/8-0](https://capacitorjs.com/docs/updating/8-0).
+
+## When to Use
+
+- Have an existing web app (React, Vue, Svelte, Angular, vanilla JS)
+- Need native device access (camera, GPS, filesystem, push notifications)
+- Want a single codebase for web + iOS + Android
+- Don't need deep native UI customization
+
+## Key Features
+
+- **WebView-based** — web app runs inside a native WebView container
+- **Native plugin ecosystem** — camera, geolocation, filesystem, push, biometrics, etc.
+- **Live Updates** — push web content updates without app store review (via `@capacitor/live-updates`)
+- **Progressive adoption** — add Capacitor to existing web projects incrementally
+- **Platform APIs** — access native features via TypeScript-friendly plugin APIs
+
+## Prerequisites
+
+```bash
+# Node.js 22+ (REQUIRED for Capacitor 8)
+# For Android: Android Studio (2025.2.1+) + JDK 21
+# For iOS: Xcode 26+ (macOS only), iOS deployment target 15.0+
+# CocoaPods or SPM (SPM is default for new Capacitor 8 iOS projects)
+```
+
+## Project Setup
+
+```bash
+# Install Capacitor
+npm install @capacitor/core @capacitor/cli
+
+# Initialize (interactive — sets appName, appId, webDir)
+npx cap init
+
+# Add platforms
+npx cap add android
+npx cap add ios
+
+# Install common plugins
+npm install @capacitor/camera @capacitor/geolocation @capacitor/push-notifications
+npm install @capacitor/filesystem @capacitor/haptics @capacitor/share
+npm install @capacitor/local-notifications @capacitor/biometric
+```
+
+## Configuration
+
+```typescript
+// capacitor.config.ts
+import type { CapacitorConfig } from '@capacitor/cli';
+
+const config: CapacitorConfig = {
+  appId: 'com.example.myapp',
+  appName: 'MyApp',
+  webDir: 'dist', // must match your framework's build output directory
+  server: {
+    androidScheme: 'https', // required for modern WebView features
+    // url: 'http://192.168.1.100:5173', // dev mode: live reload from dev server
+    // cleartext: true,                    // dev mode: allow HTTP
+  },
+  android: {
+    buildOptions: {
+      keystorePath: undefined,  // set for release signing
+      keystoreAlias: undefined,
+    },
+  },
+  ios: {
+    scheme: 'MyApp', // Xcode scheme name
+    contentInset: 'automatic',
+  },
+  plugins: {
+    PushNotifications: {
+      presentationOptions: ['badge', 'sound', 'alert'],
+    },
+  },
+};
+
+export default config;
+```
+
+## Build Workflow
+
+```bash
+# 1. Build your web app first
+npm run build  # outputs to dist/
+
+# 2. Copy web assets to native projects
+npx cap copy android
+npx cap copy ios
+
+# 3. Sync (copy + update native dependencies)
+npx cap sync android
+npx cap sync ios
+
+# 4. Open in native IDE for final build
+npx cap open android  # Android Studio
+npx cap open ios      # Xcode
+```
+
+## Android Release Build
+
+```bash
+# Generate signing keystore (first time)
+keytool -genkey -v -keystore android/app/my-release-key.jks \
+  -keyalg RSA -keysize 2048 -validity 10000 -alias my-key
+
+# build.gradle.kts signing config
+signingConfigs {
+    create("release") {
+        storeFile = file("my-release-key.jks")
+        storePassword = System.getenv("KEYSTORE_PASSWORD")
+        keyAlias = "my-key"
+        keyPassword = System.getenv("KEY_PASSWORD")
+    }
+}
+
+# Build AAB (Play Store)
+cd android && ./gradlew bundleRelease
+# Output: android/app/build/outputs/bundle/release/app-release.aab
+
+# Build APK (direct distribution)
+cd android && ./gradlew assembleRelease
+# Output: android/app/build/outputs/apk/release/app-release-unsigned.apk
+```
+
+## iOS Release Build
+
+```bash
+# Open Xcode project
+npx cap open ios
+
+# In Xcode:
+# 1. Select "Any iOS Device" as target
+# 2. Product → Archive
+# 3. Distribute App → App Store Connect / Ad Hoc / Enterprise
+
+# Command line (requires fastlane)
+sudo gem install fastlane
+cd ios/App && fastlane beta  # TestFlight
+```
+
+## Common Pitfalls
+
+| Issue | Fix |
+|-------|-----|
+| White screen after build | Check `webDir` in capacitor.config.ts matches framework output dir (dist/build/www) |
+| Resources not synced | Always run `npx cap copy` or `npx cap sync` AFTER `npm run build` |
+| Plugin not working | Run `npx cap sync` after installing new plugins; check plugin supports your platform |
+| Android build fails | Check JDK version (**21 required for v8**); invalidate caches in Android Studio |
+| iOS build fails | Run `cd ios/App && pod install` after adding plugins; iOS target must be **15.0+** |
+| CORS errors in dev | Set `server.url` to dev server and `server.cleartext: true` in config |
+| Keyboard overlaps input | Install `@capacitor/keyboard` and configure `resize` mode |
+| Status bar issues | Use `@capacitor/status-bar` to configure appearance |
+| Push notifications not received | Verify Google Services (Android) / APNs (iOS) certificates configured correctly |
+| `capacitor.config.ts` not found | Ensure file is in project root; Capacitor 6 requires `.ts` or `.json` |
+| Native module crashes on startup | Check Android `minSdkVersion` (**24+ for v8**) / iOS deployment target (**15.0+ for v8**) |
+| App rejected by Play Store | Ensure `androidScheme: 'https'`; Play Store requires HTTPS in WebView |
+| `bridge_layout_main.xml` not found (v8) | Renamed to `capacitor_bridge_layout_main.xml` |
+| Gradle syntax warning | Use `=` syntax: `namespace = "com.example"` not `namespace "com.example"` |
+| Plugin type not found (v7+) | Type aliases removed: `AppRestoredResult` → `RestoredListenerEvent`, etc. |
+
+## Plugin Management
+
+```bash
+# List installed plugins
+npx cap ls
+
+# Update plugins to latest
+npx cap update android
+npx cap update ios
+
+# Remove a plugin
+npm uninstall @capacitor/camera
+npx cap sync
+```
+
+## CI/CD — GitHub Actions (Android)
+
+```yaml
+# .github/workflows/capacitor-android.yml
+name: Capacitor Android
+on:
+  push:
+    branches: [main]
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: '22'
+      - run: npm ci
+      - run: npm run build
+      - run: npx cap sync android
+      - uses: actions/setup-java@v4
+        with:
+          distribution: 'temurin'
+          java-version: '17'
+      - run: cd android && chmod +x gradlew && ./gradlew assembleRelease
+      - uses: actions/upload-artifact@v4
+        with:
+          name: apk
+          path: android/app/build/outputs/apk/release/*.apk
+```
+
+## Capacitor vs Cordova vs PWA
+
+| Feature | Capacitor 6 | Cordova | PWA |
+|---------|------------|---------|-----|
+| Architecture | Modern WebView + native bridge | Legacy WebView bridge | Browser APIs only |
+| Plugin API | TypeScript-first, Promise-based | Callback-based | Service Worker + Web APIs |
+| Native UI | Yes (custom native views) | Limited | No |
+| Live Updates | Yes (@capacitor/live-updates) | No (without plugin) | Yes (Service Worker) |
+| Web target | Direct (same codebase) | Requires wrapper | Native |
+| Maintenance | Active (Ionic team) | Community | Browser vendors |
+| Learning curve | Low | Low | Lowest |