In-app update check and download path so users learn when a new release exists, instead of watching the GitHub releases page. Deferred from alpha (docs/post-alpha-issues.md item 4); previously blocked on code signing, which has since shipped (#404 Windows Authenticode, #406 Apple notarization) — the signed-manifest prerequisite now exists.
Scope
- Tauri updater with a signed update manifest at a stable URL (decide: GitHub Releases asset vs website bucket)
- Non-Steam builds only — the Steam edition updates via Steam and must not self-update
- Respect the local-first promise: update check is the one sanctioned outbound call, off by default until the user opts in on first run
Acceptance
- Old build notifies within 24h of a new release; download verifies signature before install
- Steam build makes no update calls
- Offline smoke test still passes with updates opted out
From docs/post-alpha-issues.md (Milestone 2 — distribution).
In-app update check and download path so users learn when a new release exists, instead of watching the GitHub releases page. Deferred from alpha (docs/post-alpha-issues.md item 4); previously blocked on code signing, which has since shipped (#404 Windows Authenticode, #406 Apple notarization) — the signed-manifest prerequisite now exists.
Scope
Acceptance
From docs/post-alpha-issues.md (Milestone 2 — distribution).