projectsend/app/Modules/Platform/Updates/Console/CheckForUpdatesCommand.php

<?php

declare(strict_types=1);

namespace App\Modules\Platform\Updates\Console;

use App\Modules\Platform\Capabilities\Capability;
use App\Modules\Platform\Capabilities\CapabilityRegistry;
use App\Modules\Platform\Settings\Setting;
use App\Modules\Platform\Settings\Settings;
use App\Modules\Platform\Updates\CheckForUpdates;
use Illuminate\Console\Command;

/**
 * Community edition only, once a day. The work itself lives in
 * CheckForUpdates, which the settings screen's "check now" button calls
 * too; this is the scheduled half, and the only thing it adds is the
 * setting that switches the schedule off.
 *
 * That setting governs *this* command and not the service on purpose: an
 * administrator who does not want a daily outbound call should still be
 * able to ask the question themselves.
 *
 * There is still no in-app self-updater — nothing here downloads or
 * applies anything. Applying an update is `update.sh` on a server
 * install, or a new image on a container one.
 */
class CheckForUpdatesCommand extends Command
{
    protected $signature = 'projectsend:check-for-updates';

    protected $description = 'Check for a newer ProjectSend release and notify admins (Community edition, runs daily)';

    public function __construct(
        private readonly Settings $settings,
        private readonly CheckForUpdates $check,
        private readonly CapabilityRegistry $capabilities,
    ) {
        parent::__construct();
    }

    public function handle(): int
    {
        // Ahead of the setting, and deliberately not a setting itself.
        //
        // A Setting says "the operator does not want this". The true
        // statement on a managed installation is "there is nowhere for
        // this to appear and nothing they could do about it": the
        // dashboard's System card is gated on Capability::SystemUpdates
        // (DashboardController), which is Community-only, so the answer
        // this command fetches cannot be drawn on any screen — and the
        // update UI is closed by the same capability, so it could not be
        // acted on if it were. The image is chosen by whoever provisioned
        // the instance.
        //
        // Encoding that as a preference would leave it switchable back on
        // per tenant, which buys a nightly call to GitHub for a number
        // nobody can see, and would leave the reason in a provisioning
        // script rather than beside the code. A self-hosted installation
        // holds the capability and loses nothing: its own setting below
        // still decides.
        if (! $this->capabilities->has(Capability::SystemUpdates)) {
            $this->info('Update checks do not apply to this installation.');

            return self::SUCCESS;
        }

        if ($this->settings->get(Setting::CheckForUpdates) !== true) {
            $this->info('Update checks are disabled.');

            return self::SUCCESS;
        }

        $result = $this->check->run();

        if (! $result['ok']) {
            $this->warn($result['message']);

            return self::FAILURE;
        }

        $this->info($result['message']);

        return self::SUCCESS;
    }
}