DMG release + auto update setup (#3538)

* desktop updater setup

* setup dmg + gh release codemagic flow

* hardcode ver for testing

* notarize

* fix notarisation

* use issuer instead of issuer-id

* add logging to test

* more logging and use correct cert

* fix cert type

* use MAC_APP_DIRECT cert

* test

* set password empty

* skip automatic signing

* double sign

* sign dmg

* remove sign in entitlement

* typo

* remove sandbox

* hardcode team id and bundle id

* i hate apple

* use provisioning profile

* use provision profile from env

* remove apple sign in entitlement

* last attempt

* don't resign

* verify with timestamp

* simplify signing

* misc

* use xcode us eprofiles

* simplify workflow

* fix yaml

* manual sign

* decode the provisioning profile before using

* use-profiles

* verbose logging

* should work now

* don't force

* remove get-task-allow

* force

* entitlements

* use sparkle

* sign sparkle and related components

* fix tag

* fix sparkle signing

* fix sparkle key import

* sign directly using sparkle

* use signed urls + cleanup the workflow now that it works flawlessly

* change url for update testing

* beautify dmg + bump ver for update testing

* fix version in appcast xml

* pass skip-jenkins for finder timeout

* remove debug echos from flow and cleanup

* dmg ux improvements + new route to download latest release

* upload update zip to gh directly

* remove test ver

Author: mdmohsin7

app/ios/Podfile.lock

@@ -16,6 +16,8 @@ PODS:
     - Flutter
   - connectivity_plus (0.0.1):
     - Flutter
+  - cryptography_flutter_plus (0.2.0):
+    - Flutter
   - device_info_plus (0.0.1):
     - Flutter
   - DKImagePickerController/Core (4.3.9):
@@ -275,6 +277,7 @@ DEPENDENCIES:
   - awesome_notifications (from `.symlinks/plugins/awesome_notifications/ios`)
   - awesome_notifications_core (from `.symlinks/plugins/awesome_notifications_core/ios`)
   - connectivity_plus (from `.symlinks/plugins/connectivity_plus/ios`)
+  - cryptography_flutter_plus (from `.symlinks/plugins/cryptography_flutter_plus/ios`)
   - device_info_plus (from `.symlinks/plugins/device_info_plus/ios`)
   - file_picker (from `.symlinks/plugins/file_picker/ios`)
   - firebase_auth (from `.symlinks/plugins/firebase_auth/ios`)
@@ -362,6 +365,8 @@ EXTERNAL SOURCES:
     :path: ".symlinks/plugins/awesome_notifications_core/ios"
   connectivity_plus:
     :path: ".symlinks/plugins/connectivity_plus/ios"
+  cryptography_flutter_plus:
+    :path: ".symlinks/plugins/cryptography_flutter_plus/ios"
   device_info_plus:
     :path: ".symlinks/plugins/device_info_plus/ios"
   file_picker:
@@ -444,6 +449,7 @@ SPEC CHECKSUMS:
   awesome_notifications: 0f432b28098d193920b11a44cfa9d2d9313a3888
   awesome_notifications_core: 429c28df8746780a474de177e5acde33af87da63
   connectivity_plus: cb623214f4e1f6ef8fe7403d580fdad517d2f7dd
+  cryptography_flutter_plus: 44f4e9e4079395fcbb3e7809c0ac2c6ae2d9576f
   device_info_plus: 21fcca2080fbcd348be798aa36c3e5ed849eefbe
   DKImagePickerController: 946cec48c7873164274ecc4624d19e3da4c1ef3c
   DKPhotoGallery: b3834fecb755ee09a593d7c9e389d8b5d6deed60

app/lib/main.dart

@@ -47,6 +47,7 @@ import 'package:omi/providers/sync_provider.dart';
 import 'package:omi/providers/usage_provider.dart';
 import 'package:omi/providers/user_provider.dart';
 import 'package:omi/services/auth_service.dart';
+import 'package:omi/services/desktop_update_service.dart';
 import 'package:omi/services/notifications.dart';
 import 'package:omi/services/notifications/action_item_notification_handler.dart';
 import 'package:omi/services/services.dart';
@@ -162,6 +163,11 @@ Future _init() async {
     return true;
   };
 
+  // Initialize desktop updater
+  if (PlatformService.isDesktop) {
+    await DesktopUpdateService().initialize();
+  }
+
   await ServiceManager.instance().start();
   return;
 }
@@ -238,7 +244,7 @@ class _MyAppState extends State<MyApp> with WidgetsBindingObserver {
     try {
       final context = MyApp.navigatorKey.currentContext;
       if (context == null) return;
-      
+
       final captureProvider = Provider.of<CaptureProvider>(context, listen: false);
       if (captureProvider.recordingState == RecordingState.stop) {
         await captureProvider.streamSystemAudioRecording();

app/lib/services/desktop_update_service.dart

@@ -0,0 +1,66 @@
+import 'dart:io';
+import 'package:auto_updater/auto_updater.dart';
+import 'package:omi/env/env.dart';
+import 'package:omi/utils/logger.dart';
+import 'package:omi/utils/platform/platform_service.dart';
+
+/// Service to manage desktop application updates using auto_updater
+class DesktopUpdateService {
+  static final DesktopUpdateService _instance = DesktopUpdateService._internal();
+  factory DesktopUpdateService() => _instance;
+  DesktopUpdateService._internal();
+
+  bool _initialized = false;
+
+  String get _platform {
+    if (Platform.isMacOS) return 'macos';
+    if (Platform.isWindows) return 'windows';
+    if (Platform.isLinux) return 'linux';
+    return 'unknown';
+  }
+
+  /// Initialize auto_updater
+  Future<void> initialize() async {
+    if (!PlatformService.isDesktop) {
+      Logger.debug('Desktop updater not supported on this platform');
+      return;
+    }
+
+    if (_initialized) {
+      Logger.debug('Desktop updater already initialized');
+      return;
+    }
+
+    try {
+      final baseUrl = Env.apiBaseUrl;
+      final feedURL = '${baseUrl}v2/desktop/appcast.xml?platform=$_platform';
+
+      // Configure auto_updater
+      await autoUpdater.setFeedURL(feedURL);
+      await autoUpdater.setScheduledCheckInterval(10800); // Check every 3 hours
+
+      // Check for updates in background on startup
+      await autoUpdater.checkForUpdates(inBackground: true);
+
+      _initialized = true;
+    } catch (e, stackTrace) {
+      Logger.handle(e, stackTrace, message: 'Failed to initialize auto updater');
+    }
+  }
+
+  /// Manually check for updates
+  Future<void> checkForUpdates() async {
+    if (!_initialized) {
+      Logger.warning('Auto updater not initialized');
+      return;
+    }
+
+    try {
+      await autoUpdater.checkForUpdates();
+    } catch (e, stackTrace) {
+      Logger.handle(e, stackTrace, message: 'Failed to check for updates');
+    }
+  }
+
+  bool get isAvailable => _initialized;
+}

app/macos/Podfile

@@ -33,6 +33,7 @@ target 'Runner' do
   flutter_install_all_macos_pods File.dirname(File.realpath(__FILE__))
 
   pod 'Mixpanel-swift', :git => 'https://github.com/beastoin/mixpanel-swift.git', :commit => '5fd6584'
+  pod 'Sparkle', '~> 2.0'
 end
 
 post_install do |installer|

app/macos/Runner/Info.plist

@@ -97,8 +97,6 @@
 	<false/>
 	<key>PermissionGroupNotification</key>
 	<string>You need to enable notifications to receive your pro-active feedback.</string>
-	<key>com.apple.security.app-sandbox</key>
-	<true/>
 	<key>com.apple.security.device.audio-input</key>
 	<true/>
 	<key>com.apple.security.files.user-selected.read-only</key>
@@ -110,5 +108,7 @@
 	</array>
 	<key>ITSAppUsesNonExemptEncryption</key>
 	<false/>
+	<key>SUPublicEDKey</key>
+	<string>EYZ94JfSI+WJzZMRUizMwCaQXuB2/EjTSZ382u9XukQ=</string>
 </dict>
 </plist>

app/pubspec.lock

@@ -69,10 +69,10 @@ packages:
     dependency: transitive
     description:
       name: archive
-      sha256: cb6a278ef2dbb298455e1a713bda08524a175630ec643a242c399c932a0a1f7d
+      sha256: "2fde1607386ab523f7a36bb3e7edb43bd58e6edaf2ffb29d8a6d578b297fdbbd"
       url: "https://pub.dev"
     source: hosted
-    version: "3.6.1"
+    version: "4.0.7"
   args:
     dependency: transitive
     description:
@@ -105,6 +105,38 @@ packages:
       url: "https://pub.dev"
     source: hosted
     version: "3.0.0"
+  auto_updater:
+    dependency: "direct main"
+    description:
+      name: auto_updater
+      sha256: "74fd008b021d15e4fc50fb5f1923870e6374ae831bb1168241c23bc35a4e898b"
+      url: "https://pub.dev"
+    source: hosted
+    version: "1.0.0"
+  auto_updater_macos:
+    dependency: transitive
+    description:
+      name: auto_updater_macos
+      sha256: ef9de0daf38d782d2243fe131503a9404d62df762f5386e5360020e43c01867f
+      url: "https://pub.dev"
+    source: hosted
+    version: "1.0.0"
+  auto_updater_platform_interface:
+    dependency: transitive
+    description:
+      name: auto_updater_platform_interface
+      sha256: ed5dff8cea18c58bc5ac787ff9122fedd1644272e02015d28c9b592f8078c5dc
+      url: "https://pub.dev"
+    source: hosted
+    version: "1.0.0"
+  auto_updater_windows:
+    dependency: transitive
+    description:
+      name: auto_updater_windows
+      sha256: "2bba20a71eee072f49b7267fedd5c4f1406c4b1b1e5b83932c634dbab75b80c9"
+      url: "https://pub.dev"
+    source: hosted
+    version: "1.0.0"
   awesome_notifications:
     dependency: "direct main"
     description:
@@ -679,10 +711,10 @@ packages:
     dependency: "direct dev"
     description:
       name: flutter_flavorizr
-      sha256: e9550f67a890b9111ac5a555954f3808cb8c0132ce6dea08e3381964de39b906
+      sha256: "7ac1a53e95d36e96017bbf4aa94023dc652e455de3f0ce9c80e9eaa274c73e81"
       url: "https://pub.dev"
     source: hosted
-    version: "2.2.3"
+    version: "2.4.1"
   flutter_foreground_task:
     dependency: "direct main"
     description:
@@ -829,10 +861,11 @@ packages:
   frame_sdk:
     dependency: "direct main"
     description:
-      name: frame_sdk
-      sha256: afab5eede530d4f215d88bc8eb84d6b0944907bcbde58eee662253029392463b
-      url: "https://pub.dev"
-    source: hosted
+      path: "."
+      ref: master
+      resolved-ref: "78d8ad55354e30759243e29e793f0981f9aa317d"
+      url: "https://github.com/mdmohsin7/frame-sdk-flutter.git"
+    source: git
     version: "0.0.7"
   frontend_server_client:
     dependency: transitive
@@ -955,10 +988,10 @@ packages:
     dependency: "direct main"
     description:
       name: googleapis_auth
-      sha256: af7c3a3edf9d0de2e1e0a77e994fae0a581c525fa7012af4fa0d4a52ed9484da
+      sha256: b81fe352cc4a330b3710d2b7ad258d9bcef6f909bb759b306bf42973a7d046db
       url: "https://pub.dev"
     source: hosted
-    version: "1.4.1"
+    version: "2.0.0"
   gradient_borders:
     dependency: "direct main"
     description:
@@ -1043,10 +1076,10 @@ packages:
     dependency: "direct main"
     description:
       name: image
-      sha256: f31d52537dc417fdcde36088fdf11d191026fd5e4fae742491ebd40e5a8bea7d
+      sha256: "4e973fcf4caae1a4be2fa0a13157aa38a8f9cb049db6529aa00b4d71abc4d928"
       url: "https://pub.dev"
     source: hosted
-    version: "4.3.0"
+    version: "4.5.4"
   image_picker:
     dependency: "direct main"
     description:
@@ -1197,13 +1230,13 @@ packages:
     source: hosted
     version: "1.0.5"
   js:
-    dependency: transitive
+    dependency: "direct overridden"
     description:
       name: js
-      sha256: f2c445dce49627136094980615a031419f7f3eb393237e4ecd97ac15dea343f3
+      sha256: "53385261521cc4a0c4658fd0ad07a7d14591cf8fc33abbceae306ddb974888dc"
       url: "https://pub.dev"
     source: hosted
-    version: "0.6.7"
+    version: "0.7.2"
   json_annotation:
     dependency: "direct main"
     description:
@@ -1296,10 +1329,10 @@ packages:
     dependency: "direct main"
     description:
       name: lottie
-      sha256: "377d87b8dcef640c04717e93afb86a510f0e1117a399ab94dc4b3f39c85eaa87"
+      sha256: "8ae0be46dbd9e19641791dc12ee480d34e1fd3f84c749adc05f3ad9342b71b95"
       url: "https://pub.dev"
     source: hosted
-    version: "3.3.0"
+    version: "3.3.2"
   map_launcher:
     dependency: "direct main"
     description:
@@ -1316,6 +1349,14 @@ packages:
       url: "https://pub.dev"
     source: hosted
     version: "7.3.0"
+  mason_logger:
+    dependency: transitive
+    description:
+      name: mason_logger
+      sha256: "6d5a989ff41157915cb5162ed6e41196d5e31b070d2f86e1c2edf216996a158c"
+      url: "https://pub.dev"
+    source: hosted
+    version: "0.3.3"
   matcher:
     dependency: transitive
     description:
@@ -1368,10 +1409,11 @@ packages:
   mixpanel_flutter:
     dependency: "direct main"
     description:
-      name: mixpanel_flutter
-      sha256: "0ecd870cceed1cf4600c403e5544b88efa65b8fd3f30fad679702d1ae9e0ac15"
-      url: "https://pub.dev"
-    source: hosted
+      path: "."
+      ref: f9234e9
+      resolved-ref: f9234e9e4f94f9f24b88f3775230c11a734ed7cd
+      url: "https://github.com/beastoin/mixpanel-flutter.git"
+    source: git
     version: "2.4.4"
   nested:
     dependency: transitive
@@ -1408,10 +1450,11 @@ packages:
   opus_dart:
     dependency: "direct main"
     description:
-      name: opus_dart
-      sha256: e8ab4774409997af33cbfdfe91a186854ed6458b2fec66b0e52f4434b1af2f7c
-      url: "https://pub.dev"
-    source: hosted
+      path: "."
+      ref: dev
+      resolved-ref: e2202b0f38cf6c9e70ab7807b4cdaa3304b145ec
+      url: "https://github.com/mdmohsin7/opus_dart.git"
+    source: git
     version: "3.0.1"
   opus_flutter:
     dependency: "direct main"
@@ -1679,6 +1722,14 @@ packages:
       url: "https://pub.dev"
     source: hosted
     version: "1.5.1"
+  posix:
+    dependency: transitive
+    description:
+      name: posix
+      sha256: "6323a5b0fa688b6a010df4905a56b00181479e6d10534cecfecede2aa55add61"
+      url: "https://pub.dev"
+    source: hosted
+    version: "6.0.3"
   process:
     dependency: transitive
     description:
@@ -2284,6 +2335,14 @@ packages:
       url: "https://pub.dev"
     source: hosted
     version: "15.0.2"
+  wasm_ffi:
+    dependency: transitive
+    description:
+      name: wasm_ffi
+      sha256: f4539052e4d80575bb4820c836a2d6400af061b71c1605af60ebfb30b7c5369a
+      url: "https://pub.dev"
+    source: hosted
+    version: "2.0.7"
   watcher:
     dependency: transitive
     description: