fix: publish desktop latest after artifacts

Author: joo

.github/workflows/release-desktop.yml

@@ -190,3 +190,36 @@ jobs:
             --tag "${{ needs.prepare.outputs.tag }}" \
             --file electron/dist/clovapi-desktop-windows-x64.exe \
             --name clovapi-desktop-windows-x64.exe
+
+  desktop-latest:
+    runs-on: ubuntu-latest
+    needs:
+      - prepare
+      - desktop-mac
+      - desktop-win
+    if: needs.prepare.outputs.publish == 'true'
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v5
+
+      - name: Setup Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.x"
+
+      - name: Install awscli
+        run: pip install --upgrade awscli
+
+      - name: Publish desktop latest marker
+        env:
+          R2_ACCOUNT_ID: ${{ secrets.R2_ACCOUNT_ID }}
+          R2_ACCESS_KEY_ID: ${{ secrets.R2_ACCESS_KEY_ID }}
+          R2_SECRET_ACCESS_KEY: ${{ secrets.R2_SECRET_ACCESS_KEY }}
+          R2_SESSION_TOKEN: ${{ secrets.R2_SESSION_TOKEN }}
+          R2_BUCKET: ${{ secrets.R2_BUCKET }}
+          R2_ARTIFACT_PREFIX: ${{ secrets.R2_ARTIFACT_PREFIX }}
+        run: |
+          set -euo pipefail
+          chmod +x scripts/r2-publish.sh
+          ./scripts/r2-publish.sh desktop-latest \
+            --tag "${{ needs.prepare.outputs.tag }}"

scripts/r2-publish.sh

@@ -12,6 +12,7 @@
 #   ./scripts/r2-publish.sh cli --tag v0.1.12 --dist core/dist
 #   ./scripts/r2-publish.sh install-sh --file landing/public/install.sh
 #   ./scripts/r2-publish.sh desktop --tag v0.1.12 --file electron/dist/foo.dmg --name clovapi-desktop-darwin-universal.dmg
+#   ./scripts/r2-publish.sh desktop-latest --tag v0.1.12
 
 set -euo pipefail
 
@@ -108,9 +109,22 @@ publish_desktop() {
   log "upload desktop ${name} -> ${versioned}"
   aws_r2 cp "$file" "$versioned" --cache-control "public, max-age=31536000, immutable"
   aws_r2 cp "$file" "$latest" --cache-control "no-cache, must-revalidate"
+  log "desktop artifact -> ${PUBLIC_BASE}/desktop/${tag}/${name}"
+}
+
+publish_desktop_latest() {
+  local tag=""
+  while [[ $# -gt 0 ]]; do
+    case "$1" in
+      --tag) tag="$2"; shift 2 ;;
+      *) fail "unknown arg: $1" ;;
+    esac
+  done
+  tag="$(normalize_tag "$tag")"
+
   printf '%s' "$tag" > /tmp/desktop-latest.txt
   aws_r2 cp /tmp/desktop-latest.txt "s3://${R2_BUCKET}/desktop/latest.txt" --cache-control "no-cache, must-revalidate"
-  log "desktop latest -> ${PUBLIC_BASE}/desktop/latest/${name} (${tag})"
+  log "desktop latest.txt -> ${PUBLIC_BASE}/desktop/latest.txt (${tag})"
 }
 
 main() {
@@ -121,8 +135,9 @@ main() {
     cli) publish_cli "$@" ;;
     install-sh) publish_install_sh "$@" ;;
     desktop) publish_desktop "$@" ;;
+    desktop-latest) publish_desktop_latest "$@" ;;
     *)
-      fail "usage: $0 cli|install-sh|desktop ..."
+      fail "usage: $0 cli|install-sh|desktop|desktop-latest ..."
       ;;
   esac
 }