Enhance update management

Author: dsbilling

docs/contributing.mdx

@@ -51,11 +51,11 @@ GitHub Actions packages macOS (universal DMG) and Windows (NSIS) when you add a
 
 If you already published a GitHub Release for that tag, CI deletes that release (the tag stays) and creates a draft so the files can be uploaded.
 
-The download site lists the newest published release that has installers, including prereleases. The in-app update checker follows the Stable or Pre-release choice in App settings. Drafts are ignored. `/releases/latest` is not used, because that endpoint skips prereleases.
+The download site lists the newest published release that has installers, including prereleases. The packaged app uses electron-updater to download and install that release. Keep these files on the published GitHub release: `latest-mac.yml`, `latest.yml`, `Dagr_<version>.zip`, `Dagr_<version>.exe`, and the matching `.blockmap` files. The in-app update checker follows the Stable or Pre-release choice in App settings. Drafts are ignored. Stable uses published full releases. Pre-release sets `allowPrerelease`.
 
 The GitHub repository must be public for those checks to work in the packaged app. A private repo makes the unauthenticated GitHub API return 404. The website can set `GITHUB_TOKEN` if you still need to read a private repo. The desktop app can use `DAGR_GITHUB_TOKEN` or `GITHUB_TOKEN` for local checks only. Do not ship a token in the app.
 
-Builds are unsigned in this pass.
+Builds are unsigned in this pass. Unsigned macOS builds often cannot replace the running app, so the UI falls back to opening the GitHub DMG. Signing and notarization come later.
 
 ## Download website
 

docs/desktop/preferences.mdx

@@ -27,7 +27,7 @@ The gear on the left rail opens settings for this device.
 
 **Appearance:** Light, Dark, or System.
 
-**Updates:** choose **Stable** or **Pre-release**, then **Check for updates**. A download link appears when a newer GitHub release exists on that channel. A banner also appears after launch if an update is waiting. Automatic checks are skipped when you run the app from source. **Check for updates** still talks to GitHub.
+**Updates:** choose **Stable** or **Pre-release**, then **Check for updates**. The packaged app downloads a newer build in the background. When the file is ready, **Restart to update** applies it. If in-app install cannot run (common on unsigned macOS builds), **Download update** still opens the installer from GitHub. A banner also appears after launch if an update is waiting. Automatic checks are skipped when you run the app from source. **Check for updates** still talks to GitHub.
 
 **Media:** **GIFs on hover only** keeps GIFs still until you move the pointer over them.
 

web/electron/main/index.ts

@@ -1,5 +1,11 @@
 import { Notification, app, BrowserWindow, ipcMain, nativeTheme, shell } from 'electron'
-import { checkForUpdates, openUpdateUrl } from './updates'
+import {
+  checkForUpdates,
+  installDownloadedUpdate,
+  openUpdateUrl,
+  subscribeUpdateState,
+  type UpdateCheckResult,
+} from './updates'
 import { existsSync, readFileSync } from 'node:fs'
 import { fileURLToPath } from 'node:url'
 import path from 'node:path'
@@ -187,6 +193,11 @@ function focusMainWindow() {
   win.focus()
 }
 
+function sendUpdateState(state: UpdateCheckResult) {
+  if (!win || win.isDestroyed()) return
+  win.webContents.send('updates:state', state)
+}
+
 app.whenReady().then(() => {
   configureAboutPanel()
 
@@ -210,6 +221,8 @@ app.whenReady().then(() => {
     return { ok: true, count: next }
   })
 
+  subscribeUpdateState(sendUpdateState)
+
   ipcMain.handle('updates:check', async (_event, payload: unknown) => {
     const body =
       typeof payload === 'object' && payload !== null
@@ -221,6 +234,11 @@ app.whenReady().then(() => {
     })
   })
 
+  ipcMain.handle('updates:install', async (_event, target: unknown) => {
+    const url = typeof target === 'string' ? target : undefined
+    return installDownloadedUpdate(url)
+  })
+
   ipcMain.handle('updates:open', async (_event, target: unknown) => {
     const url = typeof target === 'string' ? target : undefined
     return openUpdateUrl(url)