Feat/tauri desktop

.changeset/fix-presence-reset.md

@@ -0,0 +1,5 @@
+---
+default: patch
+---
+
+Fix presence status resetting to "online".

.github/scripts/build-updater-manifest.mjs

@@ -0,0 +1,64 @@
+// Composes the Tauri updater manifest (latest.json) from the per-platform .sig
+// assets already attached to the release.
+// Required env: TAG, REPO, GH_TOKEN.
+
+import { execSync } from 'node:child_process';
+import { readFileSync, readdirSync, writeFileSync, mkdtempSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+
+const TAG = process.env.TAG;
+const REPO = process.env.REPO;
+if (!TAG || !REPO) {
+  console.error('TAG and REPO env vars are required');
+  process.exit(1);
+}
+const version = TAG.replace(/^v/, '');
+
+const dir = mkdtempSync(join(tmpdir(), 'sable-sigs-'));
+execSync(`gh release download "${TAG}" --repo "${REPO}" --pattern '*.sig' --dir "${dir}"`, {
+  stdio: 'inherit',
+});
+
+const urlFor = (name) =>
+  `https://github.com/${REPO}/releases/download/${TAG}/${encodeURIComponent(name)}`;
+
+const platforms = {};
+let windowsIsNsis = false;
+
+for (const sig of readdirSync(dir).filter((f) => f.endsWith('.sig'))) {
+  const artifact = sig.replace(/\.sig$/, '');
+  const entry = { signature: readFileSync(join(dir, sig), 'utf8').trim(), url: urlFor(artifact) };
+  const name = artifact.toLowerCase();
+
+  if (name.endsWith('.app.tar.gz')) {
+    platforms['darwin-aarch64'] = entry;
+    platforms['darwin-x86_64'] = entry;
+  } else if (name.endsWith('.appimage')) {
+    platforms['linux-x86_64'] = entry;
+  } else if (name.endsWith('-setup.exe') || name.endsWith('.nsis.zip')) {
+    platforms['windows-x86_64'] = entry;
+    windowsIsNsis = true;
+  } else if (name.endsWith('.msi') && !windowsIsNsis) {
+    platforms['windows-x86_64'] = entry;
+  }
+}
+
+if (Object.keys(platforms).length === 0) {
+  console.error('No .sig assets found on the release; nothing to publish.');
+  process.exit(1);
+}
+
+let notes = `Sable ${version}`;
+try {
+  notes =
+    execSync(`gh release view "${TAG}" --repo "${REPO}" --json body -q .body`, {
+      encoding: 'utf8',
+    }).trim() || notes;
+} catch {
+  // keep the default note
+}
+
+const manifest = { version, notes, pub_date: new Date().toISOString(), platforms };
+writeFileSync('latest.json', JSON.stringify(manifest, null, 2));
+console.warn(JSON.stringify(manifest, null, 2));

.github/scripts/set-tauri-version.mjs

@@ -0,0 +1,20 @@
+#!/usr/bin/env node
+/* oxlint-disable no-console */
+
+// Stamps a version into src-tauri/tauri.conf.json, which can drift from the
+// package.json version Knope tags on. Used by tauri-build.yml.
+
+import { readFileSync, writeFileSync } from 'node:fs';
+import process from 'node:process';
+
+const version = process.argv[2];
+if (!version || !/^\d+\.\d+\.\d+/.test(version)) {
+  console.error(`Usage: set-tauri-version.mjs <version>  (got: ${version ?? '<none>'})`);
+  process.exit(1);
+}
+
+const file = 'src-tauri/tauri.conf.json';
+const config = JSON.parse(readFileSync(file, 'utf8'));
+config.version = version;
+writeFileSync(file, `${JSON.stringify(config, null, 2)}\n`);
+console.log(`Set ${file} version to ${version}`);

.github/workflows/tauri-build.yml

@@ -0,0 +1,264 @@
+name: Build desktop apps
+
+on:
+  push:
+    tags: ['v*']
+  workflow_dispatch:
+    inputs:
+      tag:
+        description: 'Release tag to build and attach desktop bundles to (e.g. v1.20.0)'
+        required: true
+        type: string
+
+permissions: {}
+
+concurrency:
+  group: tauri-build-${{ github.event_name == 'workflow_dispatch' && inputs.tag || github.ref_name }}
+  cancel-in-progress: false
+
+jobs:
+  build:
+    name: Build ${{ matrix.name }}
+    runs-on: ${{ matrix.platform }}
+    permissions:
+      contents: write
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - name: macOS
+            platform: macos-latest
+            rust-targets: aarch64-apple-darwin,x86_64-apple-darwin
+            args: --target universal-apple-darwin
+          - name: Windows
+            platform: windows-latest
+            rust-targets: ''
+            args: ''
+          - name: Linux (CEF)
+            platform: ubuntu-22.04
+            rust-targets: ''
+            cef: true
+    env:
+      TAG: ${{ github.event_name == 'workflow_dispatch' && inputs.tag || github.ref_name }}
+      NODE_OPTIONS: --max-old-space-size=8192
+      TAURI_SIGNING_PRIVATE_KEY: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY }}
+      TAURI_SIGNING_PRIVATE_KEY_PASSWORD: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY_PASSWORD }}
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          ref: ${{ github.event_name == 'workflow_dispatch' && inputs.tag || github.ref }}
+          persist-credentials: false
+
+      - name: Wait for release to exist
+        shell: bash
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          for i in $(seq 1 12); do
+            if gh release view "$TAG" >/dev/null 2>&1; then
+              echo "Release $TAG found."
+              exit 0
+            fi
+            echo "Waiting for release $TAG to be published ($i/12)…"
+            sleep 15
+          done
+          echo "Release $TAG was not found." >&2
+          exit 1
+
+      - name: Install Linux build dependencies
+        if: matrix.cef
+        shell: bash
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y \
+            libwebkit2gtk-4.1-dev \
+            libgtk-3-dev \
+            libayatana-appindicator3-dev \
+            librsvg2-dev \
+            libsoup-3.0-dev \
+            libssl-dev \
+            libxdo-dev \
+            build-essential \
+            file \
+            rpm \
+            ruby \
+            ruby-dev
+          sudo gem install --no-document fpm
+
+      - name: Setup app
+        uses: ./.github/actions/setup
+
+      - name: Setup Rust
+        uses: dtolnay/rust-toolchain@2c7215f132e9ebf062739d9130488b56d53c060c # stable
+        with:
+          toolchain: stable
+          targets: ${{ matrix.rust-targets }}
+
+      - name: Cache Rust build
+        uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
+        with:
+          workspaces: src-tauri
+
+      - name: Stamp release version into tauri.conf.json
+        shell: bash
+        run: node .github/scripts/set-tauri-version.mjs "${TAG#v}"
+
+      # --- macOS / Windows: standard wry build via tauri-action ---
+      - name: Build desktop bundles
+        id: tauri
+        if: ${{ !matrix.cef }}
+        uses: tauri-apps/tauri-action@1deb371b0cd8bd54025b384f1cd735e725c4060f # action-v1.0.0
+        with:
+          args: ${{ matrix.args }}
+
+      - name: Attach bundles to release
+        if: ${{ !matrix.cef }}
+        shell: bash
+        env:
+          GH_TOKEN: ${{ github.token }}
+          ARTIFACTS: ${{ steps.tauri.outputs.artifactPaths }}
+        run: |
+          echo "$ARTIFACTS" | jq -r '.[]' | while read -r path; do
+            [ -n "$path" ] || continue
+            echo "Uploading $path"
+            gh release upload "$TAG" "$path" --clobber
+          done
+
+      # --- Linux: CEF runtime, packaged as deb / rpm / AppImage ---
+      - name: Build frontend
+        if: matrix.cef
+        shell: bash
+        run: pnpm build
+
+      - name: Build CEF binary
+        if: matrix.cef
+        shell: bash
+        run: |
+          cargo build --release --features cef --no-default-features \
+            --manifest-path src-tauri/Cargo.toml
+
+      - name: Build native packages
+        if: matrix.cef
+        shell: bash
+        run: |
+          VERSION="${TAG#v}"
+          STAGE="src-tauri/target/release"
+
+          # Binary plus the full CEF runtime (cef-copy-libs is the single source
+          # of truth for the runtime file set).
+          stage_runtime() {
+            local dest="$1"
+            mkdir -p "$dest"
+            cp "$STAGE/sable" "$dest/"
+            scripts/cef-copy-libs.sh release "$dest"
+          }
+
+          write_desktop() {
+            cat > "$1" <<'EOF'
+          [Desktop Entry]
+          Type=Application
+          Name=Sable
+          Comment=A Matrix client
+          Exec=sable %U
+          Icon=sable
+          Terminal=false
+          Categories=Network;InstantMessaging;Chat;
+          StartupWMClass=sable
+          MimeType=x-scheme-handler/sable;x-scheme-handler/moe.sable.app;
+          EOF
+          }
+
+          ROOT="pkgroot"
+          stage_runtime "$ROOT/opt/sable"
+          mkdir -p "$ROOT/usr/bin" "$ROOT/usr/share/applications" \
+                   "$ROOT/usr/share/icons/hicolor/128x128/apps"
+          cat > "$ROOT/usr/bin/sable" <<'EOF'
+          #!/bin/sh
+          exec /opt/sable/sable "$@"
+          EOF
+          chmod 755 "$ROOT/usr/bin/sable"
+          write_desktop "$ROOT/usr/share/applications/sable.desktop"
+          cp src-tauri/icons/128x128.png "$ROOT/usr/share/icons/hicolor/128x128/apps/sable.png"
+
+          COMMON=(-s dir -n sable -v "$VERSION" --iteration 1
+            --description "Sable — a Matrix client"
+            --url "https://sable.moe" --maintainer "SableClient"
+            --category net)
+          # Stable-named deps only: version-suffixed names (e.g. the 24.04 t64
+          # set) would break install on other releases; CEF bundles its own libs.
+          DEB_DEPS=(--depends libwebkit2gtk-4.1-0 --depends libgtk-3-0
+            --depends libnss3 --depends libnspr4 --depends libgbm1
+            --depends libdrm2 --depends libxkbcommon0 --depends xdg-utils)
+          fpm "${COMMON[@]}" -t deb -a amd64 "${DEB_DEPS[@]}" -C "$ROOT" .
+
+          RPM_DEPS=(--depends webkit2gtk4.1 --depends gtk3 --depends nss
+            --depends nspr --depends mesa-libgbm --depends libdrm
+            --depends libxkbcommon --depends xdg-utils)
+          fpm "${COMMON[@]}" -t rpm -a x86_64 "${RPM_DEPS[@]}" -C "$ROOT" .
+
+          APPDIR="Sable.AppDir"
+          stage_runtime "$APPDIR/usr/bin"
+          # nosuid mount: a setuid chrome-sandbox can't work here and would stop
+          # Chromium from starting, so drop it and use the user-namespace sandbox.
+          rm -f "$APPDIR/usr/bin/chrome-sandbox"
+          write_desktop "$APPDIR/sable.desktop"
+          cp src-tauri/icons/128x128.png "$APPDIR/sable.png"
+          cat > "$APPDIR/AppRun" <<'EOF'
+          #!/bin/sh
+          HERE="$(dirname "$(readlink -f "$0")")"
+          exec "$HERE/usr/bin/sable" "$@"
+          EOF
+          chmod 755 "$APPDIR/AppRun"
+
+          curl -fsSL -o appimagetool \
+            https://github.com/AppImage/appimagetool/releases/download/continuous/appimagetool-x86_64.AppImage
+          chmod +x appimagetool
+          # Runner has no FUSE; extract-and-run instead of mounting.
+          APPIMAGE_EXTRACT_AND_RUN=1 ARCH=x86_64 \
+            ./appimagetool "$APPDIR" "Sable_${VERSION}_amd64.AppImage"
+
+      - name: Sign the AppImage for the updater
+        if: ${{ matrix.cef && env.TAURI_SIGNING_PRIVATE_KEY != '' }}
+        shell: bash
+        run: |
+          for f in Sable_*_amd64.AppImage; do
+            [ -e "$f" ] || continue
+            pnpm tauri signer sign "$f"
+          done
+
+      - name: Attach native packages to release
+        if: matrix.cef
+        shell: bash
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          for f in sable_*.deb sable-*.rpm Sable_*_amd64.AppImage Sable_*_amd64.AppImage.sig; do
+            [ -e "$f" ] || continue
+            echo "Uploading $f"
+            gh release upload "$TAG" "$f" --clobber
+          done
+
+  updater-manifest:
+    name: Publish updater manifest
+    needs: build
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    env:
+      TAG: ${{ github.event_name == 'workflow_dispatch' && inputs.tag || github.ref_name }}
+      REPO: ${{ github.repository }}
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          ref: ${{ github.event_name == 'workflow_dispatch' && inputs.tag || github.ref }}
+          persist-credentials: false
+
+      - name: Build and upload latest.json
+        shell: bash
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          node .github/scripts/build-updater-manifest.mjs
+          gh release upload "$TAG" latest.json --clobber

.gitignore

@@ -6,7 +6,7 @@ devAssets
 
 .DS_Store
 .idea
-
+*.code-workspace
 .env
 
 .wrangler
@@ -24,6 +24,33 @@ build.sh
 # the following line was added with the "git ignore" tool by itsrye.dev, version 0.1.0
 .lh
 
+# Tauri
+/build
+/target/
+/gen/schemas
+dist-js
+
+# Gradle / Android build artifacts
+**/android/build/
+**/android/.tauri/
+**/android/.gradle/
+**/.gradle/
+
+# Rust build artifacts
+src-tauri/target/
+# Tauri Android build outputs
+src-tauri/gen/android/app/build/
+# Tauri Apple outputs
+src-tauri/gen/apple/*
+# Tauri Android release keystore
+*.jks
+
+# Tauri-typegen cache
+.typecache
+
+# Worktrees
+.worktrees
+
 # the following line was added with nvim by Shea because its annoying to clear every so often
 .vscode/bookmarks.json