max / goingson
5 files changed,
+123 insertions,
-2 deletions
| @@ -14,8 +14,10 @@ | |||
| 14 | 14 | .claude/ | |
| 15 | 15 | .mcp.json | |
| 16 | 16 | ||
| 17 | - | # Release artifacts | |
| 18 | - | dist/ | |
| 17 | + | # Release artifacts (secret signing scripts stay Syncthing-only); Bento build | |
| 18 | + | # recipes are non-secret and tracked. | |
| 19 | + | dist/* | |
| 20 | + | !dist/recipes/ | |
| 19 | 21 | ||
| 20 | 22 | # Archive | |
| 21 | 23 | _archive/ |
| @@ -0,0 +1,19 @@ | |||
| 1 | + | // GoingsOn — iOS / TestFlight release recipe for Bento. | |
| 2 | + | // | |
| 3 | + | // Ports _private/docs/goingson/deploy.md (iOS section). Runs on mbp. | |
| 4 | + | // `release-ios.sh` re-flattens the app icons (ITMS-90717 guard), builds the | |
| 5 | + | // release archive, exports the IPA, and uploads to TestFlight Internal. The | |
| 6 | + | // iOS "publish" IS that upload — there is no local artifact to collect and no | |
| 7 | + | // Bento publish() call. A non-zero exit (or a missing "UPLOAD SUCCEEDED" | |
| 8 | + | // banner, which the script checks for) fails the build step. | |
| 9 | + | ||
| 10 | + | let h = build_host(); | |
| 11 | + | let v = version(); | |
| 12 | + | let r = repo(); | |
| 13 | + | ||
| 14 | + | step("checkout"); | |
| 15 | + | sh_ok(h, "cd " + r + " && git pull --ff-only"); | |
| 16 | + | ||
| 17 | + | step("build"); | |
| 18 | + | sh_ok(h, "cd " + r + " && ./dist/release-ios.sh"); | |
| 19 | + | log("GoingsOn iOS v" + v + " uploaded to TestFlight — appears in App Store Connect within ~30 min."); |
| @@ -0,0 +1,31 @@ | |||
| 1 | + | // GoingsOn — Linux release recipe for Bento (x86_64 on fw13, aarch64 on astra). | |
| 2 | + | // | |
| 3 | + | // One recipe serves both arches: build_host() resolves to whichever native host | |
| 4 | + | // the topology assigns the target, so there is no cross-compilation and no | |
| 5 | + | // hard-coded host name. Ports deploy.md (Linux sections): a signed | |
| 6 | + | // `cargo tauri build` (the Tauri updater key signs the .AppImage.tar.gz for | |
| 7 | + | // OTA), then collect the AppImage + .deb. Bundle paths are arch-independent. | |
| 8 | + | // OTA upload stays manual via the MNW dashboard — no publish() call. | |
| 9 | + | ||
| 10 | + | let h = build_host(); | |
| 11 | + | let v = version(); | |
| 12 | + | let r = repo(); | |
| 13 | + | ||
| 14 | + | step("checkout"); | |
| 15 | + | sh_ok(h, "cd " + r + " && git pull --ff-only"); | |
| 16 | + | ||
| 17 | + | step("build"); | |
| 18 | + | sh_ok(h, "cd " + r + " && . ~/.tauri/passwords.env && " + | |
| 19 | + | "TAURI_SIGNING_PRIVATE_KEY=$HOME/.tauri/goingson.key " + | |
| 20 | + | "TAURI_SIGNING_PRIVATE_KEY_PASSWORD=$GOINGSON_TAURI_PASSWORD " + | |
| 21 | + | "cargo tauri build"); | |
| 22 | + | ||
| 23 | + | step("collect"); | |
| 24 | + | // Resolve concrete paths (collect quotes its source, so a glob would not expand | |
| 25 | + | // for a local host — fw13 is the daemon's own host). | |
| 26 | + | let appimage = sh(h, "ls -t " + r + "/target/release/bundle/appimage/*.AppImage | head -1").stdout_tail.trim(); | |
| 27 | + | if appimage == "" { throw "no .AppImage produced for " + target(); } | |
| 28 | + | collect(h, appimage, "goingson", v); | |
| 29 | + | let deb = sh(h, "ls -t " + r + "/target/release/bundle/deb/*.deb 2>/dev/null | head -1").stdout_tail.trim(); | |
| 30 | + | if deb != "" { collect(h, deb, "goingson", v); } | |
| 31 | + | log("GoingsOn " + target() + " v" + v + " collected."); |
| @@ -0,0 +1,38 @@ | |||
| 1 | + | // GoingsOn — macOS (aarch64) release recipe for Bento. | |
| 2 | + | // | |
| 3 | + | // Ports _private/docs/goingson/deploy.md (macOS section). Runs on the mbp host | |
| 4 | + | // over the in-session ops-agent transport — the only context where the | |
| 5 | + | // Developer ID key is usable (Bento design §7 "THE WALL"). `release-macos.sh | |
| 6 | + | // --keychain` does build + codesign + notarize + staple + a Gatekeeper | |
| 7 | + | // self-check in one pass; we re-verify Gatekeeper here (the proof the publish | |
| 8 | + | // gate requires) and collect the DMG + updater artifacts into Bento's dist | |
| 9 | + | // tree. OTA upload stays manual via the MNW dashboard — no publish() call. | |
| 10 | + | ||
| 11 | + | let h = build_host(); | |
| 12 | + | let v = version(); | |
| 13 | + | let r = repo(); | |
| 14 | + | ||
| 15 | + | step("checkout"); | |
| 16 | + | sh_ok(h, "cd " + r + " && git pull --ff-only"); | |
| 17 | + | ||
| 18 | + | // release-macos.sh: build, sign (ephemeral build keychain), notarize, staple. | |
| 19 | + | step("build"); | |
| 20 | + | sh_ok(h, "cd " + r + " && . ~/.tauri/passwords.env && ./dist/release-macos.sh --keychain"); | |
| 21 | + | ||
| 22 | + | // The DMG name embeds the version; resolve it rather than reconstruct it. | |
| 23 | + | step("verify"); | |
| 24 | + | let dmg = sh(h, "ls -t " + r + "/target/release/bundle/dmg/*.dmg | head -1").stdout_tail.trim(); | |
| 25 | + | if dmg == "" { throw "no .dmg produced under target/release/bundle/dmg/"; } | |
| 26 | + | if !verify_gatekeeper(h, dmg) { | |
| 27 | + | throw "DMG is not Gatekeeper-accepted as Notarized Developer ID: " + dmg; | |
| 28 | + | } | |
| 29 | + | ||
| 30 | + | step("collect"); | |
| 31 | + | collect(h, dmg, "goingson", v); | |
| 32 | + | // Updater artifacts (.app.tar.gz + .sig) for OTA, when the build produced them. | |
| 33 | + | let upd = sh(h, "ls -t " + r + "/target/release/bundle/macos/*.app.tar.gz 2>/dev/null | head -1").stdout_tail.trim(); | |
| 34 | + | if upd != "" { | |
| 35 | + | collect(h, upd, "goingson", v); | |
| 36 | + | collect(h, upd + ".sig", "goingson", v); | |
| 37 | + | } | |
| 38 | + | log("GoingsOn macOS v" + v + " built, notarized, and collected. Upload OTA artifacts via the MNW dashboard."); |
| @@ -0,0 +1,31 @@ | |||
| 1 | + | // GoingsOn — Windows (x86_64) release recipe for Bento. | |
| 2 | + | // | |
| 3 | + | // UNSUPPORTED at launch: Windows binaries ship unsigned (code signing is blocked | |
| 4 | + | // on the Azure certificate-history requirement — see deploy.md). This recipe is | |
| 5 | + | // best-effort and has not been exercised end-to-end through Bento. | |
| 6 | + | // | |
| 7 | + | // Two Windows-specific deviations from the other recipes: | |
| 8 | + | // - The checkout lives at a Windows path, NOT the unix repo() value, so this | |
| 9 | + | // recipe hard-codes it and does not call repo(). | |
| 10 | + | // - Commands run through PowerShell over ssh; quoting is delicate. The | |
| 11 | + | // `passwords.ps1` profile supplies the signing env (mirrors deploy.md). | |
| 12 | + | // The .msi / NSIS .exe globs are handed to collect directly (windows-x86 is a | |
| 13 | + | // remote host, so collect leaves the glob unquoted for the remote shell). | |
| 14 | + | ||
| 15 | + | let h = build_host(); | |
| 16 | + | let v = version(); | |
| 17 | + | let win_repo = "C:/Users/me/Code/Apps/goingson"; | |
| 18 | + | ||
| 19 | + | step("checkout"); | |
| 20 | + | sh_ok(h, "powershell -Command \"cd " + win_repo + "; git pull --ff-only\""); | |
| 21 | + | ||
| 22 | + | step("build"); | |
| 23 | + | sh_ok(h, "powershell -Command \". C:\\Users\\me\\.tauri\\passwords.ps1; " + | |
| 24 | + | "$env:TAURI_SIGNING_PRIVATE_KEY='C:\\Users\\me\\.tauri\\goingson.key'; " + | |
| 25 | + | "$env:TAURI_SIGNING_PRIVATE_KEY_PASSWORD=$env:GOINGSON_TAURI_PASSWORD; " + | |
| 26 | + | "cd " + win_repo + "; cargo tauri build\""); | |
| 27 | + | ||
| 28 | + | step("collect"); | |
| 29 | + | collect(h, win_repo + "/target/release/bundle/msi/*.msi", "goingson", v); | |
| 30 | + | collect(h, win_repo + "/target/release/bundle/nsis/*-setup.exe", "goingson", v); | |
| 31 | + | log("GoingsOn windows/x86_64 v" + v + " collected (unsigned, unsupported)."); |