iOpenPod 2.0.4__tar.gz

iopenpod-2.0.4/.editorconfig

@@ -0,0 +1,21 @@
+root = true
+
+[*]
+charset = utf-8
+end_of_line = lf
+insert_final_newline = true
+indent_style = space
+indent_size = 4
+max_line_length = 88
+trim_trailing_whitespace = true
+
+[*.{css,html,js,json,jsonc,yaml,yml}]
+indent_size = 2
+
+[*.md]
+indent_size = 2
+max_line_length = off
+trim_trailing_whitespace = false
+
+[Makefile]
+indent_style = tab

iopenpod-2.0.4/.gitattributes

@@ -0,0 +1,19 @@
+* text=auto
+
+*.py text eol=lf
+*.pyi text eol=lf
+*.toml text eol=lf
+*.json text eol=lf
+*.jsonc text eol=lf
+*.md text eol=lf
+*.yaml text eol=lf
+*.yml text eol=lf
+*.html text eol=lf
+*.css text eol=lf
+*.js text eol=lf
+*.ts text eol=lf
+
+*.ico binary
+*.png binary
+*.webp binary
+*.qm binary

iopenpod-2.0.4/.github/FUNDING.yml

@@ -0,0 +1,2 @@
+github: therealsavi
+ko_fi: johngibbons

iopenpod-2.0.4/.github/ISSUE_TEMPLATE/bug_report.md

@@ -0,0 +1,35 @@
+---
+name: Bug Report
+about: Report a bug with iOpenPod
+title: "[Bug] "
+labels: bug
+assignees: ''
+
+---
+
+**Describe the bug**
+A clear description of what the bug is.
+
+**iPod model**
+e.g., iPod Classic 6th Gen (160GB), iPod Nano 3G
+
+**To reproduce**
+Steps to reproduce the behavior:
+
+1. Go to '...'
+2. Click on '...'
+3. See error
+
+**Expected behavior**
+What you expected to happen.
+
+**Screenshots / logs**
+If applicable, add screenshots and attach `iopenpod.log`.
+
+To find it in iOpenPod: open **Settings > Storage**, then click **Open** next to **Log Location**.
+
+## Environment
+
+- OS: [e.g., Windows 11, Ubuntu 24.04, macOS 15]
+- Python version: [e.g., 3.13.1]
+- iOpenPod version/commit: [e.g., v1.0.0 or commit hash]

iopenpod-2.0.4/.github/ISSUE_TEMPLATE/feature_request.md

@@ -0,0 +1,20 @@
+---
+name: Feature Request
+about: Suggest an idea for iOpenPod
+title: "[Feature] "
+labels: enhancement
+assignees: ''
+
+---
+
+**Is your feature request related to a problem?**
+A clear description of the problem. e.g., "I'm frustrated when..."
+
+**Describe the solution you'd like**
+What you'd like to see happen.
+
+**Describe alternatives you've considered**
+Any alternative solutions or workarounds.
+
+**Additional context**
+Any other context, screenshots, or references.

iopenpod-2.0.4/.github/workflows/flatpak.yml

@@ -0,0 +1,45 @@
+name: Flatpak candidate
+
+on:
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  flatpak:
+    runs-on: ubuntu-24.04
+    timeout-minutes: 60
+    env:
+      QT_QPA_PLATFORM: offscreen
+    steps:
+      - uses: actions/checkout@v4
+      - uses: astral-sh/setup-uv@v6
+        with:
+          version: "0.12.7"
+      - name: Install build and desktop tools
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y flatpak flatpak-builder appstream desktop-file-utils libegl1 libgl1 libdbus-1-3 libxkbcommon0 libxkbcommon-x11-0 libxcb-cursor0 libxcb-icccm4 libxcb-image0 libxcb-keysyms1 libxcb-render-util0 libxcb-xkb1 libpulse0 libasound2t64
+      - run: uv sync --locked --managed-python --no-dev --group packaging
+      - run: uv run --no-sync python scripts/package_app.py freeze
+      - run: uv run --no-sync python scripts/package_app.py linux-stage
+      - name: Validate desktop metadata
+        run: |
+          desktop-file-validate packaging/linux/io.github.therealsavi.iOpenPod.desktop
+          appstreamcli validate --no-net packaging/linux/io.github.therealsavi.iOpenPod.metainfo.xml
+      - name: Install Flatpak SDK
+        run: |
+          flatpak remote-add --user --if-not-exists flathub https://flathub.org/repo/flathub.flatpakrepo
+          flatpak install --user --noninteractive flathub org.freedesktop.Sdk//25.08 org.freedesktop.Platform//25.08
+      - name: Build and check local Flatpak candidate
+        run: |
+          flatpak-builder --user --install --force-clean --repo=build/flatpak-repo build/flatpak packaging/linux/flatpak.json
+          flatpak run --env=QT_QPA_PLATFORM=offscreen io.github.therealsavi.iOpenPod --smoke-test
+          flatpak build-bundle build/flatpak-repo dist/iOpenPod-Linux-x86_64.flatpak io.github.therealsavi.iOpenPod
+          sha256sum dist/iOpenPod-Linux-x86_64.flatpak > dist/iOpenPod-Linux-x86_64.flatpak.sha256
+      - uses: actions/upload-artifact@v4
+        with:
+          name: flatpak-candidate
+          if-no-files-found: error
+          path: dist/*.flatpak*

iopenpod-2.0.4/.github/workflows/health.yml

@@ -0,0 +1,60 @@
+name: Health
+
+on:
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  quality:
+    # Qt 6.9's macOS stubs have known errors (ADR-0094). Keep one authoritative
+    # type check with Windows bindings, and test both Mac architectures below.
+    runs-on: windows-2022
+    timeout-minutes: 20
+    steps:
+      - uses: actions/checkout@v4
+      - uses: astral-sh/setup-uv@v6
+        with:
+          version: "0.12.7"
+          enable-cache: true
+      - run: uv sync --locked --managed-python
+      - run: uv lock --check
+      - run: uv run --no-sync ruff format --check .
+      - run: uv run --no-sync ruff check .
+      - run: uv run --no-sync rumdl check .
+      - run: uv run --no-sync mypy
+
+  health:
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [windows-2022, macos-14, macos-15-intel, ubuntu-24.04]
+    runs-on: ${{ matrix.os }}
+    timeout-minutes: 45
+    env:
+      QT_QPA_PLATFORM: offscreen
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: astral-sh/setup-uv@v6
+        with:
+          version: "0.12.7"
+          enable-cache: true
+
+      - name: Install Linux system dependencies
+        if: runner.os == 'Linux'
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y libegl1 libgl1 libdbus-1-3 libxkbcommon0 libxkbcommon-x11-0 libxcb-cursor0 libxcb-icccm4 libxcb-image0 libxcb-keysyms1 libxcb-render-util0 libxcb-xkb1 libpulse0 libasound2t64 udev
+
+      - name: Install project and dev dependencies
+        if: runner.os != 'macOS'
+        run: uv sync --locked --managed-python --group packaging
+
+      - name: Install macOS environment for the declared deployment target
+        if: runner.os == 'macOS'
+        run: uv run --no-project --managed-python --python 3.12 python scripts/sync_macos_build.py --with-checks
+
+      - name: Test, including 1x/1.5x/2x display probes
+        run: uv run --no-sync pytest

iopenpod-2.0.4/.github/workflows/pages.yml

@@ -0,0 +1,61 @@
+name: Build and deploy Pages
+
+on:
+  push:
+    branches: [main]
+    paths:
+      - "website/**"
+      - "tests/website/check_seo.py"
+      - ".github/workflows/pages.yml"
+  pull_request:
+    paths:
+      - "website/**"
+      - "tests/website/check_seo.py"
+      - ".github/workflows/pages.yml"
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+concurrency:
+  group: pages-${{ github.ref }}
+  cancel-in-progress: false
+
+jobs:
+  build:
+    runs-on: ubuntu-24.04
+    timeout-minutes: 10
+    steps:
+      - uses: actions/checkout@v4
+      - name: Configure Pages
+        if: github.event_name != 'pull_request'
+        uses: actions/configure-pages@v5
+      - name: Build website with Jekyll
+        uses: actions/jekyll-build-pages@v1
+        with:
+          source: ./website
+          destination: ./_site
+      - uses: astral-sh/setup-uv@v6
+        with:
+          version: "0.12.7"
+      - name: Check rendered FAQ and structured data
+        run: uv run --no-project --managed-python --python 3.12 python tests/website/check_seo.py _site
+      - uses: actions/upload-pages-artifact@v4
+        with:
+          path: ./_site
+
+  deploy:
+    if: github.ref == 'refs/heads/main' && github.event_name != 'pull_request'
+    needs: build
+    runs-on: ubuntu-24.04
+    timeout-minutes: 10
+    permissions:
+      pages: write
+      id-token: write
+    environment:
+      name: github-pages
+      url: ${{ steps.deployment.outputs.page_url }}
+    steps:
+      - name: Deploy website
+        id: deployment
+        uses: actions/deploy-pages@v4

iopenpod-2.0.4/.github/workflows/release.yml

@@ -0,0 +1,277 @@
+name: Build and release
+
+on:
+  workflow_dispatch:
+    inputs:
+      publish:
+        description: "Publish to GitHub and PyPI (on main, creates v<pyproject version> after checks pass)"
+        type: boolean
+        default: false
+  push:
+    tags: ["v*"]
+  pull_request:
+    paths:
+      - "packaging/**"
+      - "scripts/package_app.py"
+      - "scripts/package_updates.py"
+      - "scripts/update_feed.py"
+      - "scripts/publish_update_feed.py"
+      - "src/iOpenPod/app/updates/**"
+      - "src/iopenpod_update_helper.py"
+      - "src/storage/host_installation.py"
+      - "src/storage/host_usage.py"
+      - "src/storage/platform/host_install_windows.py"
+      - ".github/workflows/update-feed.yml"
+      - "scripts/check_wheel.py"
+      - "scripts/check_windows_bundle.py"
+      - "scripts/check_macos_bundle.py"
+      - "scripts/sync_macos_build.py"
+      - "scripts/build_windows_sndfile.py"
+      - "scripts/prepare_release_sources.py"
+      - "scripts/assemble_github_release.py"
+      - "scripts/prepare_release.py"
+      - "tests/test_github_release.py"
+      - "tests/test_prepare_release.py"
+      - "src/iopenpod_launcher.py"
+      - "src/iOpenPod/__main__.py"
+      - "src/iOpenPod/assets/**"
+      - "pyproject.toml"
+      - "uv.lock"
+      - "LICENSE"
+      - "COPYING.md"
+      - "ACKNOWLEDGEMENTS.md"
+      - "LICENSES/**"
+      - ".github/workflows/release.yml"
+
+permissions:
+  contents: read
+
+concurrency:
+  group: release-${{ github.ref }}
+  cancel-in-progress: false
+
+jobs:
+  prepare:
+    runs-on: ubuntu-24.04
+    outputs:
+      tag: ${{ steps.release.outputs.tag }}
+      publish: ${{ steps.release.outputs.publish }}
+      create_tag: ${{ steps.release.outputs.create_tag }}
+      signed_updates: ${{ steps.updates.outputs.enabled }}
+      version: ${{ steps.updates.outputs.version }}
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - uses: astral-sh/setup-uv@v6
+        with:
+          version: "0.12.7"
+      - name: Validate release request and tag identity
+        id: release
+        env:
+          PUBLISH_RELEASE: ${{ inputs.publish || false }}
+        run: uv run --no-project --managed-python --python 3.12 python scripts/prepare_release.py
+      - name: Read committed update trust configuration
+        id: updates
+        run: |
+          uv run --no-project --managed-python --python 3.12 python -c 'import json,os,tomllib; from pathlib import Path; keys=json.loads(Path("packaging/update-keys.json").read_text())["public_keys"]; version=tomllib.loads(Path("pyproject.toml").read_text())["project"]["version"]; Path(os.environ["GITHUB_OUTPUT"]).write_text("enabled="+str(bool(keys)).lower()+"\nversion="+version+"\n")'
+
+  native:
+    needs: prepare
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [windows-2022, macos-14, macos-15-intel, ubuntu-24.04]
+    runs-on: ${{ matrix.os }}
+    timeout-minutes: 60
+    env:
+      QT_QPA_PLATFORM: offscreen
+    steps:
+      - uses: actions/checkout@v4
+      - uses: astral-sh/setup-uv@v6
+        with:
+          version: "0.12.7"
+          enable-cache: true
+      - name: Install Linux desktop libraries
+        if: runner.os == 'Linux'
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y libegl1 libgl1 libdbus-1-3 libxkbcommon0 libxkbcommon-x11-0 libxcb-cursor0 libxcb-icccm4 libxcb-image0 libxcb-keysyms1 libxcb-render-util0 libxcb-xkb1 libpulse0 libasound2t64
+      - name: Install locked build environment
+        if: runner.os != 'macOS'
+        run: uv sync --locked --managed-python --no-dev --group packaging
+      - name: Install macOS environment for the declared deployment target
+        if: runner.os == 'macOS'
+        run: uv run --no-project --managed-python --python 3.12 python scripts/sync_macos_build.py
+      - name: Validate release tag before building
+        if: startsWith(github.ref, 'refs/tags/')
+        env:
+          RELEASE_TAG: ${{ github.ref_name }}
+        shell: bash
+        run: uv run --no-sync python scripts/package_app.py check-version "$RELEASE_TAG"
+      - name: Build Python distributions
+        run: uv build --no-build-isolation
+      - name: Check wheel payload and launcher
+        run: uv run --no-sync python scripts/check_wheel.py
+      - name: Build source-audited Windows audio library
+        if: runner.os == 'Windows'
+        run: uv run --no-sync python -m scripts.build_windows_sndfile
+      - name: Build unsigned native candidate
+        run: uv run --no-sync python scripts/package_app.py freeze
+      - name: Check the independent update helper
+        if: runner.os != 'macOS'
+        run: uv run --no-sync python -c "import subprocess,sys; from pathlib import Path; helper=Path('dist/iOpenPod-update'+('.exe' if sys.platform=='win32' else '')).resolve(); subprocess.run([str(helper),'--smoke-test'],check=True,timeout=120)"
+      - name: Check Windows executable manifest and payload
+        if: runner.os == 'Windows'
+        run: uv run --no-sync python scripts/check_windows_bundle.py
+      - name: Check every macOS native slice against the deployment target
+        if: runner.os == 'macOS'
+        run: uv run --no-sync python scripts/check_macos_bundle.py
+      - name: Check Windows bundle outside the checkout
+        if: runner.os == 'Windows'
+        shell: pwsh
+        run: |
+          $executable = (Resolve-Path dist/iOpenPod.exe).Path
+          $report = Join-Path $env:RUNNER_TEMP 'frozen-runtime.txt'
+          $arguments = '--smoke-test --smoke-test-report "' + $report + '"'
+          $process = Start-Process -FilePath $executable -ArgumentList $arguments -WorkingDirectory $env:RUNNER_TEMP -Wait -PassThru -WindowStyle Hidden
+          if (-not (Test-Path -LiteralPath $report)) { throw 'Frozen runtime check did not produce its report' }
+          Get-Content -LiteralPath $report
+          if ($process.ExitCode -ne 0) { throw "Frozen runtime check failed: $($process.ExitCode)" }
+      - name: Check macOS bundle outside the checkout
+        if: runner.os == 'macOS'
+        run: |
+          executable="$PWD/dist/iOpenPod.app/Contents/MacOS/iOpenPod"
+          cd "$RUNNER_TEMP"
+          "$executable" --smoke-test
+      - name: Check Linux bundle outside the checkout
+        if: runner.os == 'Linux'
+        run: |
+          executable="$PWD/dist/iOpenPod/iOpenPod"
+          cd "$RUNNER_TEMP"
+          "$executable" --smoke-test
+      - name: Archive candidate with SHA-256
+        run: uv run --no-sync python scripts/package_app.py archive
+      - name: Check macOS drag-to-Applications disk image
+        if: runner.os == 'macOS'
+        shell: bash
+        run: |
+          set -euo pipefail
+          shopt -s nullglob
+          images=(dist/iOpenPod-*-macOS-*.dmg)
+          test "${#images[@]}" -eq 1
+          mountpoint="$(mktemp -d "$RUNNER_TEMP/iopenpod-dmg.XXXXXX")"
+          cleanup() {
+            hdiutil detach "$mountpoint" >/dev/null 2>&1 || true
+            rmdir "$mountpoint" 2>/dev/null || true
+          }
+          trap cleanup EXIT
+          hdiutil attach -readonly -nobrowse -mountpoint "$mountpoint" "${images[0]}"
+          test -d "$mountpoint/iOpenPod.app"
+          test -L "$mountpoint/Applications"
+          test "$(readlink "$mountpoint/Applications")" = /Applications
+          test -s "$mountpoint/.DS_Store"
+          test -s "$mountpoint/.background/background.png"
+          cmp "$mountpoint/iOpenPod.app/Contents/MacOS/iOpenPod" dist/iOpenPod.app/Contents/MacOS/iOpenPod
+          codesign --verify --deep --strict "$mountpoint/iOpenPod.app"
+      - uses: actions/upload-artifact@v4
+        with:
+          name: candidate-${{ matrix.os }}
+          compression-level: 0
+          if-no-files-found: error
+          path: |
+            dist/*.zip
+            dist/*.dmg
+            dist/*.tar.gz
+            dist/*.whl
+            dist/*.sha256
+            build/packaging/licenses/inventory.json
+            build/packaging/macos-compatibility.json
+
+  publish:
+    if: needs.prepare.outputs.publish == 'true'
+    needs: [prepare, native]
+    runs-on: ubuntu-24.04
+    timeout-minutes: 60
+    permissions:
+      contents: write
+    env:
+      GH_TOKEN: ${{ github.token }}
+      RELEASE_TAG: ${{ needs.prepare.outputs.tag }}
+    steps:
+      - uses: actions/checkout@v4
+      - uses: astral-sh/setup-uv@v6
+        with:
+          version: "0.12.7"
+      - uses: actions/download-artifact@v4
+        with:
+          pattern: candidate-*
+          path: build/candidates
+      - name: Fetch and verify pinned upstream sources
+        run: uv run --no-project --managed-python --python 3.12 python scripts/prepare_release_sources.py --download
+      - name: Assemble and verify the complete release
+        run: uv run --no-project --managed-python --python 3.12 python -m scripts.assemble_github_release --tag "$RELEASE_TAG" --commit "$GITHUB_SHA"
+      - name: Retain checked Python distributions for PyPI
+        uses: actions/upload-artifact@v4
+        with:
+          name: pypi-distributions
+          if-no-files-found: error
+          path: |
+            release-assets/iopenpod-${{ needs.prepare.outputs.version }}-py3-none-any.whl
+            release-assets/iopenpod-${{ needs.prepare.outputs.version }}.tar.gz
+      - name: Retain supporting files as an Actions artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: release-supporting-files
+          compression-level: 0
+          if-no-files-found: error
+          path: |
+            release-assets/*
+            !release-assets/iOpenPod-*.zip
+            !release-assets/iOpenPod-*.dmg
+            !release-assets/iOpenPod-*-Linux-*.tar.gz
+      # GITHUB_TOKEN tag pushes do not trigger another workflow. Publish here,
+      # using the artifacts built and checked for this exact dispatch commit.
+      - name: Create the requested version tag after successful validation
+        if: needs.prepare.outputs.create_tag == 'true'
+        run: gh api --method POST "repos/$GITHUB_REPOSITORY/git/refs" -f "ref=refs/tags/$RELEASE_TAG" -f "sha=$GITHUB_SHA"
+      - name: Upload native archives before making the release public
+        run: |
+          test "$(gh api "repos/$GITHUB_REPOSITORY/commits/$RELEASE_TAG" --jq .sha)" = "$GITHUB_SHA"
+          gh release create "$RELEASE_TAG" --verify-tag --target "$GITHUB_SHA" --draft --title "iOpenPod $RELEASE_TAG" --generate-notes --notes-file packaging/github-release.md release-assets/iOpenPod-*.zip release-assets/iOpenPod-*.dmg release-assets/iOpenPod-*-Linux-*.tar.gz
+          gh release edit "$RELEASE_TAG" --draft=false --latest
+
+  publish-pypi:
+    needs: [prepare, publish]
+    if: needs.prepare.outputs.publish == 'true'
+    runs-on: ubuntu-24.04
+    timeout-minutes: 10
+    environment:
+      name: pypi
+      url: https://pypi.org/project/iOpenPod/
+    permissions:
+      id-token: write
+    steps:
+      - uses: astral-sh/setup-uv@v6
+        with:
+          version: "0.12.7"
+          enable-cache: false
+      - uses: actions/download-artifact@v4
+        with:
+          name: pypi-distributions
+          path: dist
+      # Reuse the assembled distributions; never rebuild under publish credentials.
+      # UV accepts already-published files only when their contents match exactly.
+      - name: Publish checked distributions to PyPI
+        run: uv publish --trusted-publishing always dist/*.whl dist/*.tar.gz
+
+  update-feed:
+    needs: [prepare, publish]
+    if: needs.prepare.outputs.signed_updates == 'true'
+    permissions:
+      contents: write
+    uses: ./.github/workflows/update-feed.yml
+    with:
+      version: ${{ needs.prepare.outputs.version }}
+    # The same-repository signing workflow declares its required key.
+    secrets: inherit

iopenpod-2.0.4/.github/workflows/update-feed.yml

@@ -0,0 +1,54 @@
+name: Publish signed update feed
+
+on:
+  workflow_dispatch:
+    inputs:
+      version:
+        description: "Published stable version, without v (also renews expiry)"
+        required: true
+        type: string
+  workflow_call:
+    inputs:
+      version:
+        required: true
+        type: string
+    secrets:
+      IOPENPOD_UPDATE_PRIVATE_KEY:
+        required: true
+
+permissions:
+  contents: write
+
+concurrency:
+  group: signed-update-feed
+  cancel-in-progress: false
+
+jobs:
+  publish:
+    if: github.event_name != 'pull_request'
+    runs-on: macos-14
+    timeout-minutes: 30
+    steps:
+      - uses: actions/checkout@v4
+      - uses: astral-sh/setup-uv@v6
+        with:
+          version: "0.12.7"
+      - name: Install the locked release-signing environment
+        run: uv sync --locked --no-dev --group packaging
+      - name: Validate the requested version
+        env:
+          UPDATE_VERSION: ${{ inputs.version }}
+        run: uv run --no-sync python -c 'import os; from iOpenPod.app.updates.releases import version_tuple; version_tuple(os.environ["UPDATE_VERSION"])'
+      - name: Download the public native release assets
+        env:
+          GH_TOKEN: ${{ github.token }}
+          UPDATE_VERSION: ${{ inputs.version }}
+        run: |
+          gh release download "v$UPDATE_VERSION" --repo "$GITHUB_REPOSITORY" --dir build/update-archives --pattern "iOpenPod-$UPDATE_VERSION-*.zip"
+          gh release download "v$UPDATE_VERSION" --repo "$GITHUB_REPOSITORY" --dir build/update-archives --pattern "iOpenPod-$UPDATE_VERSION-*.tar.gz"
+      - name: Authenticate, sign, and publish the feeds atomically
+        env:
+          GH_TOKEN: ${{ github.token }}
+          UPDATE_VERSION: ${{ inputs.version }}
+          IOPENPOD_UPDATE_PRIVATE_KEY: ${{ secrets.IOPENPOD_UPDATE_PRIVATE_KEY }}
+        run: uv run --no-sync python -m scripts.publish_update_feed "$UPDATE_VERSION" build/update-archives build/signed-feed