markupr 2.1.8

package/.github/workflows/nightly.yml

@@ -0,0 +1,288 @@
+# =============================================================================
+# markupr Nightly Builds
+# =============================================================================
+# Runs every day at 2am UTC
+# Builds beta versions for testing
+# Uploads to a separate "nightly" release
+# =============================================================================
+
+name: Nightly
+
+on:
+  schedule:
+    # Run at 2am UTC every day
+    - cron: '0 2 * * *'
+  # Allow manual trigger
+  workflow_dispatch:
+    inputs:
+      force-build:
+        description: 'Force build even if no changes'
+        required: false
+        default: 'false'
+        type: boolean
+
+env:
+  NODE_VERSION: '20'
+
+jobs:
+  # ===========================================================================
+  # Check for Changes
+  # ===========================================================================
+  check-changes:
+    name: Check for Changes
+    runs-on: ubuntu-latest
+    outputs:
+      should-build: ${{ steps.check.outputs.should-build }}
+      nightly-version: ${{ steps.version.outputs.nightly-version }}
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v6
+        with:
+          fetch-depth: 2
+
+      - name: Check for changes in last 24 hours
+        id: check
+        run: |
+          # Check if there are commits in the last 24 hours
+          COMMITS=$(git log --since="24 hours ago" --oneline | wc -l)
+
+          if [ "$COMMITS" -gt 0 ] || [ "${{ github.event.inputs.force-build }}" = "true" ]; then
+            echo "should-build=true" >> $GITHUB_OUTPUT
+            echo "Found $COMMITS commits in last 24 hours, building nightly"
+          else
+            echo "should-build=false" >> $GITHUB_OUTPUT
+            echo "No commits in last 24 hours, skipping nightly build"
+          fi
+
+      - name: Generate nightly version
+        id: version
+        if: steps.check.outputs.should-build == 'true'
+        run: |
+          BASE_VERSION=$(node -p "require('./package.json').version")
+          DATE=$(date +%Y%m%d)
+          SHORT_SHA=$(git rev-parse --short HEAD)
+          NIGHTLY_VERSION="${BASE_VERSION}-nightly.${DATE}.${SHORT_SHA}"
+
+          echo "nightly-version=$NIGHTLY_VERSION" >> $GITHUB_OUTPUT
+          echo "Nightly version: $NIGHTLY_VERSION"
+
+  # ===========================================================================
+  # Build macOS Nightly
+  # ===========================================================================
+  build-macos:
+    name: Build macOS Nightly
+    runs-on: macos-latest
+    needs: check-changes
+    if: needs.check-changes.outputs.should-build == 'true'
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v6
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v6
+        with:
+          node-version: ${{ env.NODE_VERSION }}
+          cache: 'npm'
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Update version for nightly
+        run: |
+          npm version ${{ needs.check-changes.outputs.nightly-version }} --no-git-tag-version
+
+      - name: Build application
+        run: npm run build
+
+      # Build unsigned for nightly (no code signing)
+      - name: Package macOS (unsigned)
+        run: npm run package:mac:unsigned
+        env:
+          CSC_IDENTITY_AUTO_DISCOVERY: false
+
+      - name: Rename artifacts with nightly suffix
+        run: |
+          cd release
+          for f in *.dmg *.zip; do
+            if [ -f "$f" ]; then
+              mv "$f" "${f%.*}-nightly.${f##*.}"
+            fi
+          done
+          ls -la
+
+      - name: Upload macOS nightly artifacts
+        uses: actions/upload-artifact@v6
+        with:
+          name: nightly-macos
+          path: |
+            release/*-nightly.dmg
+            release/*-nightly.zip
+          if-no-files-found: error
+          retention-days: 7
+
+  # ===========================================================================
+  # Build Windows Nightly
+  # ===========================================================================
+  build-windows:
+    name: Build Windows Nightly
+    runs-on: windows-latest
+    needs: check-changes
+    if: needs.check-changes.outputs.should-build == 'true'
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v6
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v6
+        with:
+          node-version: ${{ env.NODE_VERSION }}
+          cache: 'npm'
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Update version for nightly
+        run: |
+          npm version ${{ needs.check-changes.outputs.nightly-version }} --no-git-tag-version
+
+      - name: Build application
+        run: npm run build
+
+      # Build unsigned for nightly
+      - name: Package Windows (unsigned)
+        run: npm run package:win
+        env:
+          WIN_CSC_LINK: ''
+
+      - name: Rename artifacts with nightly suffix
+        shell: pwsh
+        run: |
+          cd release
+          Get-ChildItem -Filter "*.exe" | ForEach-Object {
+            $newName = $_.BaseName + "-nightly" + $_.Extension
+            Rename-Item $_.FullName $newName
+          }
+          Get-ChildItem
+
+      - name: Upload Windows nightly artifacts
+        uses: actions/upload-artifact@v6
+        with:
+          name: nightly-windows
+          path: |
+            release/*-nightly.exe
+            release/*-nightly.zip
+          if-no-files-found: error
+          retention-days: 7
+
+  # ===========================================================================
+  # Create/Update Nightly Release
+  # ===========================================================================
+  publish-nightly:
+    name: Publish Nightly Release
+    runs-on: ubuntu-latest
+    needs: [check-changes, build-macos, build-windows]
+    if: needs.check-changes.outputs.should-build == 'true'
+    permissions:
+      contents: write
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v6
+
+      - name: Download all artifacts
+        uses: actions/download-artifact@v7
+        with:
+          path: artifacts
+
+      - name: Display artifact structure
+        run: find artifacts -type f
+
+      - name: Generate nightly release notes
+        run: |
+          cat > NIGHTLY_NOTES.md << 'EOF'
+          ## Nightly Build
+
+          **Version:** ${{ needs.check-changes.outputs.nightly-version }}
+          **Built:** $(date -u +"%Y-%m-%d %H:%M UTC")
+          **Commit:** ${{ github.sha }}
+
+          > **Warning**: Nightly builds are automatically generated from the latest code and may be unstable. Use at your own risk.
+
+          ### Recent Changes
+
+          EOF
+
+          git log --since="24 hours ago" --pretty=format:"- %s (%h)" >> NIGHTLY_NOTES.md || echo "- No changes in last 24 hours" >> NIGHTLY_NOTES.md
+
+          cat >> NIGHTLY_NOTES.md << 'EOF'
+
+          ### Downloads
+
+          | Platform | Download |
+          |----------|----------|
+          | macOS | See assets below |
+          | Windows | See assets below |
+
+          ### Checksums
+
+          ```
+          EOF
+
+          find artifacts -type f \( -name "*.dmg" -o -name "*.exe" -o -name "*.zip" \) -exec sha256sum {} \; >> NIGHTLY_NOTES.md
+
+          echo '```' >> NIGHTLY_NOTES.md
+
+          cat NIGHTLY_NOTES.md
+
+      # Delete existing nightly release if it exists
+      - name: Delete existing nightly release
+        uses: dev-drprasad/delete-tag-and-release@v1.1
+        with:
+          tag_name: nightly
+          delete_release: true
+          github_token: ${{ secrets.GITHUB_TOKEN }}
+        continue-on-error: true
+
+      - name: Create nightly release
+        uses: softprops/action-gh-release@v2
+        with:
+          tag_name: nightly
+          name: markupr Nightly (${{ needs.check-changes.outputs.nightly-version }})
+          body_path: NIGHTLY_NOTES.md
+          draft: false
+          prerelease: true
+          files: |
+            artifacts/nightly-macos/*
+            artifacts/nightly-windows/*
+          fail_on_unmatched_files: false
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Nightly Summary
+        run: |
+          echo "## Nightly Build Summary" >> $GITHUB_STEP_SUMMARY
+          echo "" >> $GITHUB_STEP_SUMMARY
+          echo "**Version:** ${{ needs.check-changes.outputs.nightly-version }}" >> $GITHUB_STEP_SUMMARY
+          echo "**Commit:** ${{ github.sha }}" >> $GITHUB_STEP_SUMMARY
+          echo "" >> $GITHUB_STEP_SUMMARY
+          echo "### Artifacts Published" >> $GITHUB_STEP_SUMMARY
+          find artifacts -type f \( -name "*.dmg" -o -name "*.exe" -o -name "*.zip" \) | while read f; do
+            echo "- $(basename $f)" >> $GITHUB_STEP_SUMMARY
+          done
+
+  # ===========================================================================
+  # Notify on Failure
+  # ===========================================================================
+  notify-failure:
+    name: Notify on Failure
+    runs-on: ubuntu-latest
+    needs: [build-macos, build-windows, publish-nightly]
+    if: failure()
+    steps:
+      - name: Create failure summary
+        run: |
+          echo "## Nightly Build Failed" >> $GITHUB_STEP_SUMMARY
+          echo "" >> $GITHUB_STEP_SUMMARY
+          echo "The nightly build failed. Please check the logs for details." >> $GITHUB_STEP_SUMMARY
+          echo "" >> $GITHUB_STEP_SUMMARY
+          echo "**Run:** ${{ github.run_id }}" >> $GITHUB_STEP_SUMMARY
+          echo "**Commit:** ${{ github.sha }}" >> $GITHUB_STEP_SUMMARY

package/.github/workflows/release.yml

@@ -0,0 +1,318 @@
+# =============================================================================
+# markupr Release Pipeline
+# =============================================================================
+# Triggered on version tags (v*)
+# Builds signed installers for macOS and Windows
+# Creates GitHub Release with changelog and assets
+# =============================================================================
+
+name: Release
+
+on:
+  push:
+    tags:
+      - 'v*'
+
+# Only one release at a time
+concurrency:
+  group: release
+  cancel-in-progress: false
+
+env:
+  NODE_VERSION: '20'
+
+jobs:
+  # ===========================================================================
+  # Validate Release Tag
+  # ===========================================================================
+  validate-tag:
+    name: Validate Release Tag
+    runs-on: ubuntu-latest
+    outputs:
+      version: ${{ steps.version.outputs.version }}
+      is-prerelease: ${{ steps.version.outputs.is-prerelease }}
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v6
+
+      - name: Extract version from tag
+        id: version
+        run: |
+          TAG_VERSION=${GITHUB_REF#refs/tags/v}
+          echo "version=$TAG_VERSION" >> $GITHUB_OUTPUT
+
+          # Check if this is a prerelease (alpha, beta, rc)
+          if [[ "$TAG_VERSION" =~ (alpha|beta|rc) ]]; then
+            echo "is-prerelease=true" >> $GITHUB_OUTPUT
+          else
+            echo "is-prerelease=false" >> $GITHUB_OUTPUT
+          fi
+
+          echo "Release version: $TAG_VERSION"
+
+      - name: Validate version matches package.json
+        run: |
+          PACKAGE_VERSION=$(node -p "require('./package.json').version")
+          TAG_VERSION=${{ steps.version.outputs.version }}
+
+          if [ "$PACKAGE_VERSION" != "$TAG_VERSION" ]; then
+            echo "Error: Tag version ($TAG_VERSION) does not match package.json version ($PACKAGE_VERSION)"
+            exit 1
+          fi
+          echo "Version validated: $TAG_VERSION"
+
+  # ===========================================================================
+  # Build macOS (Intel + Apple Silicon)
+  # ===========================================================================
+  build-macos:
+    name: Build macOS
+    runs-on: macos-latest
+    needs: validate-tag
+    env:
+      APPLE_CERTIFICATE: ${{ secrets.APPLE_CERTIFICATE }}
+      APPLE_CERTIFICATE_PASSWORD: ${{ secrets.APPLE_CERTIFICATE_PASSWORD }}
+      KEYCHAIN_PASSWORD: ${{ secrets.KEYCHAIN_PASSWORD }}
+      APPLE_ID: ${{ secrets.APPLE_ID }}
+      APPLE_PASSWORD: ${{ secrets.APPLE_PASSWORD }}
+      APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v6
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v6
+        with:
+          node-version: ${{ env.NODE_VERSION }}
+          cache: 'npm'
+
+      - name: Install dependencies
+        run: npm ci
+
+      # Cache Electron binaries
+      - name: Cache Electron
+        uses: actions/cache@v5
+        with:
+          path: ~/Library/Caches/electron
+          key: macos-electron-${{ hashFiles('package-lock.json') }}
+          restore-keys: |
+            macos-electron-
+
+      - name: Build application
+        run: npm run build
+
+      # Install certificates for code signing
+      - name: Install Apple certificates
+        if: ${{ env.APPLE_CERTIFICATE != '' }}
+        run: |
+          # Create variables
+          CERTIFICATE_PATH=$RUNNER_TEMP/certificate.p12
+          KEYCHAIN_PATH=$RUNNER_TEMP/app-signing.keychain-db
+
+          # Import certificate
+          echo -n "$APPLE_CERTIFICATE" | base64 --decode -o $CERTIFICATE_PATH
+
+          # Create temporary keychain
+          security create-keychain -p "$KEYCHAIN_PASSWORD" $KEYCHAIN_PATH
+          security set-keychain-settings -lut 21600 $KEYCHAIN_PATH
+          security unlock-keychain -p "$KEYCHAIN_PASSWORD" $KEYCHAIN_PATH
+
+          # Import certificate to keychain
+          security import $CERTIFICATE_PATH -P "$APPLE_CERTIFICATE_PASSWORD" -A -t cert -f pkcs12 -k $KEYCHAIN_PATH
+          security list-keychain -d user -s $KEYCHAIN_PATH
+
+          # Allow codesign to access keychain
+          security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k "$KEYCHAIN_PASSWORD" $KEYCHAIN_PATH
+
+      # Build and sign for macOS
+      - name: Package macOS (signed)
+        if: ${{ env.APPLE_ID != '' && env.APPLE_CERTIFICATE != '' }}
+        run: npx electron-builder --mac --publish never --config electron-builder.yml
+        env:
+          # Code signing
+          APPLE_ID: ${{ secrets.APPLE_ID }}
+          APPLE_PASSWORD: ${{ secrets.APPLE_PASSWORD }}
+          APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}
+          # Notarization
+          APPLE_APP_SPECIFIC_PASSWORD: ${{ secrets.APPLE_PASSWORD }}
+          CSC_LINK: ${{ secrets.APPLE_CERTIFICATE }}
+          CSC_KEY_PASSWORD: ${{ secrets.APPLE_CERTIFICATE_PASSWORD }}
+
+      # Build unsigned if no signing credentials
+      - name: Package macOS (unsigned)
+        if: ${{ env.APPLE_ID == '' || env.APPLE_CERTIFICATE == '' }}
+        run: CSC_IDENTITY_AUTO_DISCOVERY=false npx electron-builder --mac --publish never --config electron-builder.yml
+        env:
+          CSC_IDENTITY_AUTO_DISCOVERY: false
+
+      - name: List build artifacts
+        run: ls -la release/
+
+      - name: Upload macOS artifacts
+        uses: actions/upload-artifact@v6
+        with:
+          name: release-macos
+          path: |
+            release/*.dmg
+            release/*.zip
+            release/*.blockmap
+            release/latest-mac.yml
+          if-no-files-found: error
+          retention-days: 30
+
+  # ===========================================================================
+  # Build Windows
+  # ===========================================================================
+  build-windows:
+    name: Build Windows
+    runs-on: windows-latest
+    needs: validate-tag
+    env:
+      WIN_SIGNING_AVAILABLE: ${{ secrets.WIN_CSC_LINK != '' }}
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v6
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v6
+        with:
+          node-version: ${{ env.NODE_VERSION }}
+          cache: 'npm'
+
+      - name: Install dependencies
+        run: npm ci
+
+      # Cache Electron binaries
+      - name: Cache Electron
+        uses: actions/cache@v5
+        with:
+          path: ~/AppData/Local/electron/Cache
+          key: windows-electron-${{ hashFiles('package-lock.json') }}
+          restore-keys: |
+            windows-electron-
+
+      - name: Build application
+        run: npm run build
+
+      # Build and sign for Windows
+      - name: Package Windows (signed)
+        if: ${{ env.WIN_SIGNING_AVAILABLE == 'true' }}
+        run: npx electron-builder --win --x64 --publish never --config electron-builder.yml
+        env:
+          WIN_CSC_LINK: ${{ secrets.WIN_CSC_LINK }}
+          WIN_CSC_KEY_PASSWORD: ${{ secrets.WIN_CSC_KEY_PASSWORD }}
+
+      # Build unsigned if no signing credentials
+      - name: Package Windows (unsigned)
+        if: ${{ env.WIN_SIGNING_AVAILABLE != 'true' }}
+        run: npx electron-builder --win --x64 --publish never --config electron-builder.yml
+        env:
+          CSC_IDENTITY_AUTO_DISCOVERY: false
+
+      - name: List build artifacts
+        run: dir release
+
+      - name: Upload Windows artifacts
+        uses: actions/upload-artifact@v6
+        with:
+          name: release-windows
+          path: |
+            release/*.exe
+            release/*.msi
+            release/*.zip
+            release/*.blockmap
+            release/latest.yml
+          if-no-files-found: error
+          retention-days: 30
+
+  # ===========================================================================
+  # Create GitHub Release
+  # ===========================================================================
+  create-release:
+    name: Create GitHub Release
+    runs-on: ubuntu-latest
+    needs: [validate-tag, build-macos, build-windows]
+    permissions:
+      contents: write
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
+
+      - name: Download all artifacts
+        uses: actions/download-artifact@v7
+        with:
+          path: artifacts
+
+      - name: Display artifact structure
+        run: find artifacts -type f | head -50
+
+      - name: Generate changelog
+        id: changelog
+        run: |
+          # Get previous tag
+          PREVIOUS_TAG=$(git describe --tags --abbrev=0 HEAD^ 2>/dev/null || echo "")
+          CURRENT_TAG=${{ github.ref_name }}
+
+          echo "## What's Changed" > CHANGELOG.md
+          echo "" >> CHANGELOG.md
+
+          if [ -n "$PREVIOUS_TAG" ]; then
+            echo "Changes since $PREVIOUS_TAG:" >> CHANGELOG.md
+            echo "" >> CHANGELOG.md
+            git log $PREVIOUS_TAG..$CURRENT_TAG --pretty=format:"- %s (%h)" >> CHANGELOG.md
+          else
+            echo "Initial release" >> CHANGELOG.md
+          fi
+
+          echo "" >> CHANGELOG.md
+          echo "" >> CHANGELOG.md
+          echo "## Downloads" >> CHANGELOG.md
+          echo "" >> CHANGELOG.md
+          echo "| Platform | Download |" >> CHANGELOG.md
+          echo "|----------|----------|" >> CHANGELOG.md
+          echo "| macOS (Apple Silicon) | \`markupr-${{ needs.validate-tag.outputs.version }}-arm64.dmg\` |" >> CHANGELOG.md
+          echo "| macOS (Intel) | \`markupr-${{ needs.validate-tag.outputs.version }}-x64.dmg\` |" >> CHANGELOG.md
+          echo "| Windows | \`markupr-Setup-${{ needs.validate-tag.outputs.version }}.exe\` |" >> CHANGELOG.md
+          echo "" >> CHANGELOG.md
+          echo "## Checksums" >> CHANGELOG.md
+          echo "" >> CHANGELOG.md
+          echo "\`\`\`" >> CHANGELOG.md
+          find artifacts -type f \( -name "*.dmg" -o -name "*.exe" -o -name "*.zip" \) -exec sha256sum {} \; >> CHANGELOG.md
+          echo "\`\`\`" >> CHANGELOG.md
+
+          cat CHANGELOG.md
+
+      - name: Create GitHub Release
+        uses: softprops/action-gh-release@v2
+        with:
+          tag_name: ${{ github.ref_name }}
+          name: markupr v${{ needs.validate-tag.outputs.version }}
+          body_path: CHANGELOG.md
+          draft: false
+          prerelease: ${{ needs.validate-tag.outputs.is-prerelease == 'true' }}
+          files: |
+            artifacts/release-macos/*.dmg
+            artifacts/release-macos/*.zip
+            artifacts/release-macos/*.blockmap
+            artifacts/release-macos/*.yml
+            artifacts/release-windows/*.exe
+            artifacts/release-windows/*.msi
+            artifacts/release-windows/*.zip
+            artifacts/release-windows/*.blockmap
+            artifacts/release-windows/*.yml
+          fail_on_unmatched_files: false
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Release Summary
+        run: |
+          echo "## Release Summary" >> $GITHUB_STEP_SUMMARY
+          echo "" >> $GITHUB_STEP_SUMMARY
+          echo "**Version:** v${{ needs.validate-tag.outputs.version }}" >> $GITHUB_STEP_SUMMARY
+          echo "**Prerelease:** ${{ needs.validate-tag.outputs.is-prerelease }}" >> $GITHUB_STEP_SUMMARY
+          echo "" >> $GITHUB_STEP_SUMMARY
+          echo "### Artifacts" >> $GITHUB_STEP_SUMMARY
+          find artifacts -type f \( -name "*.dmg" -o -name "*.exe" -o -name "*.zip" \) | while read f; do
+            echo "- $(basename $f)" >> $GITHUB_STEP_SUMMARY
+          done