Prepare 0.0.1 OTA release

Add Tauri updater support, signed release automation, and the 0.0.1 version bump.

Author: ComputelessComputer

.github/workflows/release.yml

@@ -0,0 +1,60 @@
+name: Release
+
+on:
+  push:
+    tags:
+      - "v*"
+
+permissions:
+  contents: write
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: false
+
+jobs:
+  release:
+    runs-on: macos-latest
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Setup Bun
+        uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: "1.3.9"
+
+      - name: Setup Rust
+        uses: dtolnay/rust-toolchain@stable
+        with:
+          targets: aarch64-apple-darwin
+
+      - name: Rust cache
+        uses: swatinem/rust-cache@v2
+        with:
+          workspaces: src-tauri -> target
+
+      - name: Install dependencies
+        run: bun install --frozen-lockfile
+
+      - name: Create GitHub release and upload bundles
+        uses: tauri-apps/tauri-action@v0
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          TAURI_SIGNING_PRIVATE_KEY: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY }}
+          TAURI_SIGNING_PRIVATE_KEY_PASSWORD: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY_PASSWORD }}
+        with:
+          tagName: v__VERSION__
+          releaseName: "unsigned {char} v__VERSION__"
+          releaseBody: "See release notes for details and download assets below."
+          releaseDraft: false
+          prerelease: false
+          args: --target aarch64-apple-darwin
+
+      - name: Generate updater manifest
+        run: node scripts/build-updater-manifest.mjs "${GITHUB_REF_NAME#v}"
+
+      - name: Upload updater manifest
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: gh release upload "$GITHUB_REF_NAME" latest.json --clobber

.gitignore

@@ -11,6 +11,7 @@ node_modules
 dist
 dist-ssr
 *.local
+latest.json
 src-tauri/target
 src-tauri/gen
 .codex/

README.md

@@ -30,3 +30,24 @@ If you want `uchar` on your `PATH`:
 ```bash
 ln -sf "/Applications/unsigned {char}.app/Contents/MacOS/uchar" /opt/homebrew/bin/uchar
 ```
+
+## Release
+
+OTA updates are served from GitHub Releases via `latest.json`.
+
+First-time setup:
+
+```bash
+bunx tauri signer generate -w ~/.tauri/unsigned-char.key
+```
+
+Add the same private key to GitHub as `TAURI_SIGNING_PRIVATE_KEY` and, if you used one, its password as `TAURI_SIGNING_PRIVATE_KEY_PASSWORD`.
+
+To ship a version:
+
+```bash
+git tag vX.Y.Z
+git push origin main --follow-tags
+```
+
+The release workflow builds the macOS ARM bundle, uploads the signed updater artifacts, and publishes `latest.json` for future OTA checks.

bun.lock

@@ -1,7 +1,7 @@
 {
   "name": "unsigned-char",
   "private": true,
-  "version": "0.1.0",
+  "version": "0.0.1",
   "license": "MIT",
   "packageManager": "bun@1.3.9",
   "bin": {
@@ -20,6 +20,8 @@
     "@base-ui/react": "^1.3.0",
     "@tanstack/react-router": "^1.168.10",
     "@tauri-apps/api": "^2",
+    "@tauri-apps/plugin-process": "^2",
+    "@tauri-apps/plugin-updater": "^2",
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
     "lucide-react": "^1.7.0",

package.json

@@ -0,0 +1 @@
+Initial public release of unsigned {char}.

release-notes.md

@@ -0,0 +1,47 @@
+import { readdir, readFile, writeFile } from "node:fs/promises";
+import path from "node:path";
+
+const root = process.cwd();
+const version = process.argv[2];
+
+if (!version) {
+  throw new Error("Expected a version argument, e.g. `node scripts/build-updater-manifest.mjs 0.0.1`.");
+}
+
+const releaseNotesPath = path.join(root, "release-notes.md");
+const bundlePath = path.join(
+  root,
+  "src-tauri",
+  "target",
+  "aarch64-apple-darwin",
+  "release",
+  "bundle",
+  "macos",
+);
+const bundleFiles = await readdir(bundlePath);
+const archiveName = bundleFiles.find((file) => file.endsWith(".app.tar.gz"));
+
+if (!archiveName) {
+  throw new Error(`No macOS updater archive found in ${bundlePath}.`);
+}
+
+const signatureName = `${archiveName}.sig`;
+const archiveUrl = `https://github.com/ComputelessComputer/unsigned-char/releases/download/v${version}/${encodeURIComponent(archiveName)}`;
+const signaturePath = path.join(bundlePath, signatureName);
+const notes = await readFile(releaseNotesPath, "utf8");
+const signature = (await readFile(signaturePath, "utf8")).trim();
+
+const manifest = {
+  version,
+  notes: notes.trim(),
+  pub_date: new Date().toISOString(),
+  platforms: {
+    "darwin-aarch64": {
+      signature,
+      url: archiveUrl,
+    },
+  },
+};
+
+const outputPath = path.join(root, "latest.json");
+await writeFile(outputPath, `${JSON.stringify(manifest, null, 2)}\n`);