mr.zeroandClaude Opus 5
8511ccbef8
**The app is called WarpEngine Client.** "Store" named the thing it opens rather than the
thing you run, and the store is a catalog on a site, not a window on your machine. The
window title, the bundle, the packages and the menu entry follow; the repository already
did. The store being driven is named in the side menu, so the bar stopped repeating it as
a badge — the element stays in the page, hidden, because the window check reads it.
**Every title is listed, including the ones this machine cannot install.** They arrive
from the engine with `installable: false` and a reason, and they are drawn dimmed, with an
*unsupported platform* or *no build for this machine* badge, the engine's own sentence
underneath, and nothing to press: a disabled Install would invite a click that can never
work. They get a category of their own — *Not for this machine* — and they are kept out of
the native/hosted categories and counts, because a title with no build has no mode to be
counted under. An engine older than desktop 1.2.0 is unaffected: a missing `installable`
field reads as installable, which is what those engines mean.
**A build can be pointed at another site's registry:**
make dist STORES_API=https://games.example.org/api/stores
BuildConfiguration reads the packaged package.json, where electron-builder's
extraMetadata writes that address, so a client for somebody else's catalog needs no source
change and nothing set on the user's machine. Precedence is runtime environment, then
build, then ours — three audiences, most specific first.
Also: the scrollbars are the window's own, because the platform's light track down the
side menu of a dark window looked like a mistake.
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
115 lines
4.9 KiB
Bash
Executable File
115 lines
4.9 KiB
Bash
Executable File
#!/bin/sh
|
|
# Attach built packages to the Gitea release for this tag.
|
|
#
|
|
# The local publisher (scripts/release.sh) drives `tea`, which is logged in
|
|
# interactively on a workstation. CI has no such session: it has a token and curl. The
|
|
# two are deliberately separate scripts rather than one with two ways to authenticate —
|
|
# each is short enough to read in full.
|
|
#
|
|
# scripts/ci-upload.sh every package in dist/
|
|
# scripts/ci-upload.sh dist/one.deb just these
|
|
#
|
|
# Authenticates with the `gitea_token` secret when there is one, and otherwise with the
|
|
# credential Woodpecker gives every step for cloning — so a release needs no secret.
|
|
#
|
|
# Creates the release when the tag has none, with RELEASE_NOTES.md as its body. That is
|
|
# the flow: a `vX.Y.Z` tag starts this pipeline, which publishes the release with the
|
|
# Linux and Windows packages in it, and the macOS package is pushed on top afterwards by
|
|
# `make release` from a Mac.
|
|
set -eu
|
|
|
|
FORGE="${FORGE_API:-https://git.teletypegames.org/api/v1}"
|
|
REPO="${REPO:-${CI_REPO:-}}"
|
|
TAG="${TAG:-${CI_COMMIT_TAG:-}}"
|
|
DIST="${DIST:-dist}"
|
|
NOTES="${NOTES:-RELEASE_NOTES.md}"
|
|
|
|
say() { echo "[ci-upload] $*"; }
|
|
die() { echo "[ci-upload] error: $*" >&2; exit 1; }
|
|
|
|
# Who to be. A `gitea_token` secret wins when there is one; otherwise the credential
|
|
# Woodpecker already hands every step for cloning is used, which is an access token of
|
|
# the repository's owner — so publishing needs no secret of its own. Gitea accepts a
|
|
# personal access token as `token …` and an OAuth one as `Bearer …`, and which of the two
|
|
# this is depends on how Woodpecker was set up, so the scheme is probed once rather than
|
|
# assumed.
|
|
TOKEN="${GITEA_TOKEN:-${CI_NETRC_PASSWORD:-}}"
|
|
[ -n "$TOKEN" ] || die "no credential: set GITEA_TOKEN, or run this where Woodpecker provides CI_NETRC_PASSWORD"
|
|
[ -n "$REPO" ] || die "cannot work out the repository — set REPO=owner/name"
|
|
[ -n "$TAG" ] || die "cannot work out the tag — set TAG=v1.2.3"
|
|
|
|
AUTH=""
|
|
for scheme in token Bearer; do
|
|
if curl -fsS -H "Authorization: $scheme $TOKEN" "$FORGE/user" >/dev/null 2>&1; then
|
|
AUTH="Authorization: $scheme $TOKEN"
|
|
say "authenticated with the $scheme scheme"
|
|
break
|
|
fi
|
|
done
|
|
[ -n "$AUTH" ] || die "the credential was refused by $FORGE — it cannot read /user"
|
|
|
|
api() {
|
|
method="$1"; path="$2"; shift 2
|
|
curl -fsS -X "$method" -H "$AUTH" "$FORGE$path" "$@"
|
|
}
|
|
|
|
# Package names contain spaces — "WarpEngine Client Setup 1.5.0.exe" does — so the list
|
|
# lives one path per line in a file and is read with `while IFS= read -r`. A single
|
|
# variable looped over with $list splits on the space and uploads nothing.
|
|
LIST="$(mktemp)"
|
|
trap 'rm -f "$LIST"' EXIT
|
|
if [ "$#" -gt 0 ]; then
|
|
for given in "$@"; do printf '%s\n' "$given"; done > "$LIST"
|
|
else
|
|
# What this pipeline builds. The macOS packages are attached from the Mac that can
|
|
# sign them, so they are not listed here even when they happen to be present.
|
|
find "$DIST" -maxdepth 1 -type f \
|
|
\( -name '*.AppImage' -o -name '*.deb' -o -name '*.exe' \) 2>/dev/null | sort > "$LIST" || true
|
|
fi
|
|
[ -s "$LIST" ] || die "no Linux or Windows packages in $DIST"
|
|
|
|
say "$REPO $TAG"
|
|
|
|
# `curl -f` fails on the 404 a missing release answers, so the lookup is allowed to
|
|
# fail and judged by what came back rather than by its exit status.
|
|
release_id="$(curl -sS -H "$AUTH" "$FORGE/repos/$REPO/releases/tags/$TAG" | jq -r '.id // empty')"
|
|
|
|
if [ -z "$release_id" ]; then
|
|
say "no release for $TAG yet — creating it"
|
|
title="$(jq -r '(.productName // .name) + " " + (.version)' package.json)"
|
|
notes=''
|
|
[ -f "$NOTES" ] && notes="$(cat "$NOTES")"
|
|
# The body goes through jq rather than string concatenation: release notes are
|
|
# markdown with quotes and newlines in them.
|
|
payload="$(jq -n --arg tag "$TAG" --arg title "$title" --arg body "$notes" \
|
|
'{tag_name: $tag, name: $title, body: $body, draft: false, prerelease: false}')"
|
|
release_id="$(api POST "/repos/$REPO/releases" \
|
|
-H 'Content-Type: application/json' -d "$payload" | jq -r '.id // empty')"
|
|
[ -n "$release_id" ] || die "the release for $TAG could not be created"
|
|
else
|
|
say "the release already exists"
|
|
fi
|
|
|
|
while IFS= read -r asset; do
|
|
[ -n "$asset" ] || continue
|
|
[ -f "$asset" ] || die "no such file: $asset"
|
|
name="$(basename "$asset")"
|
|
encoded="$(printf '%s' "$name" | jq -sRr @uri)"
|
|
|
|
# Replace rather than refuse, so re-running a build lands.
|
|
existing="$(api GET "/repos/$REPO/releases/$release_id/assets" |
|
|
jq -r --arg name "$name" '.[] | select(.name == $name) | .id')"
|
|
for id in $existing; do
|
|
say "replacing $name"
|
|
api DELETE "/repos/$REPO/releases/$release_id/assets/$id" >/dev/null
|
|
done
|
|
|
|
say "uploading $name"
|
|
api POST "/repos/$REPO/releases/$release_id/assets?name=$encoded" \
|
|
-F "attachment=@$asset" >/dev/null
|
|
done < "$LIST"
|
|
|
|
say "done:"
|
|
api GET "/repos/$REPO/releases/$release_id" |
|
|
jq -r '.assets[] | " \(.name) \(.size / 1000000 | floor) MB"'
|