Merge pull request #156 from terraphim/autoupdate

Autoupdate

Author: AlexMikhalev

.env.tauri-release

@@ -0,0 +1,14 @@
+# Terraphim AI Release Environment Variables
+# These references point to secrets stored in 1Password
+# Use with: op run --env-file=.env.tauri-release -- <command>
+
+# Tauri signing keys for auto-update
+TAURI_PRIVATE_KEY="op://Terraphim-Deployment/Tauri Update Signing/TAURI_PRIVATE_KEY"
+TAURI_KEY_PASSWORD="op://Terraphim-Deployment/Tauri Update Signing/TAURI_KEY_PASSWORD"
+
+# GitHub release token
+GITHUB_TOKEN="op://Terraphim-Deployment/GitHub Release Token/GITHUB_TOKEN"
+
+# Build configuration
+TAURI_SIGNING_ENABLED="true"
+TAURI_BUILD_TARGET="release"

.github/workflows/ci-optimized.yml

@@ -101,6 +101,18 @@ jobs:
           docker run --rm "${IMAGE_TAG}" rustc --version
           docker run --rm "${IMAGE_TAG}" cargo --version
 
+      - name: Save Docker image
+        run: |
+          IMAGE_TAG="terraphim-builder:${{ github.run_number }}-${{ github.sha }}"
+          docker save "${IMAGE_TAG}" | gzip > terraphim-builder-image.tar.gz
+
+      - name: Upload Docker image artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: terraphim-builder-image
+          path: terraphim-builder-image.tar.gz
+          retention-days: 1
+
   lint-and-format:
     runs-on: ubuntu-latest
     needs: [setup, build-base-image]
@@ -110,6 +122,16 @@ jobs:
       - name: Checkout code
         uses: actions/checkout@v5
 
+      - name: Download Docker image artifact
+        uses: actions/download-artifact@v4
+        with:
+          name: terraphim-builder-image
+          path: .
+
+      - name: Load Docker image
+        run: |
+          docker load < terraphim-builder-image.tar.gz
+
       - name: Run format check
         run: |
           docker run --rm \
@@ -154,6 +176,16 @@ jobs:
           name: frontend-dist
           path: frontend-dist
 
+      - name: Download Docker image artifact
+        uses: actions/download-artifact@v4
+        with:
+          name: terraphim-builder-image
+          path: .
+
+      - name: Load Docker image
+        run: |
+          docker load < terraphim-builder-image.tar.gz
+
       - name: Build Rust project
         run: |
           # Copy frontend dist
@@ -211,6 +243,16 @@ jobs:
       - name: Checkout code
         uses: actions/checkout@v5
 
+      - name: Download Docker image artifact
+        uses: actions/download-artifact@v4
+        with:
+          name: terraphim-builder-image
+          path: .
+
+      - name: Load Docker image
+        run: |
+          docker load < terraphim-builder-image.tar.gz
+
       - name: Run tests
         run: |
           docker run --rm \

.github/workflows/ci-simple.yml

@@ -1,8 +1,9 @@
-name: Publish Tauri
+name: Publish Tauri with Auto-Update
 on:
   push:
     tags:
       - "v*"
+      - "app-v*"
   workflow_dispatch:
 
 jobs:
@@ -15,14 +16,8 @@ jobs:
         include:
           - platform: macos-latest
             webkit-package: ""
-          - platform: ubuntu-18.04
-            webkit-package: "libwebkit2gtk-4.0-dev"
-          - platform: ubuntu-20.04
-            webkit-package: "libwebkit2gtk-4.0-dev"
           - platform: ubuntu-22.04
             webkit-package: "libwebkit2gtk-4.1-dev"
-          - platform: ubuntu-24.04
-            webkit-package: "libwebkit2gtk-4.1-dev"
           - platform: windows-latest
             webkit-package: ""
     env:
@@ -32,31 +27,77 @@ jobs:
     steps:
       - uses: actions/checkout@v5
 
-      - name: setup node
+      - name: Install 1Password CLI
+        uses: 1password/install-cli-action@v1
+
+      - name: Setup Node.js
         uses: actions/setup-node@v5
         with:
           node-version: 20
 
-      - name: install Rust stable
+      - name: Install Rust stable
         uses: dtolnay/rust-toolchain@stable
 
-      - name: install dependencies (ubuntu only)
+      - name: Install dependencies (Ubuntu)
         if: startsWith(matrix.platform, 'ubuntu-')
         run: |
           sudo apt-get update
           sudo apt-get install -y libgtk-3-dev ${{ matrix.webkit-package }} libayatana-appindicator3-dev librsvg2-dev pkg-config
 
-      - name: install frontend dependencies
-        run: yarn install # change this to npm or pnpm depending on which one you use
+      - name: Install frontend dependencies
+        run: yarn install
         working-directory: ${{env.working-directory}}
 
-      - uses: tauri-apps/tauri-action@v0
+      - name: Inject secrets and build with Tauri
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          OP_SERVICE_ACCOUNT_TOKEN: ${{ secrets.OP_SERVICE_ACCOUNT_TOKEN }}
+        working-directory: ${{env.working-directory}}
+        run: |
+          # Inject secrets into Tauri configuration
+          op inject -i src-tauri/tauri.conf.json.template -o src-tauri/tauri.conf.json
+          chmod 600 src-tauri/tauri.conf.json
+
+          # Create environment file for signing
+          cat > .env.ci << 'EOF'
+          TAURI_PRIVATE_KEY="op://Terraphim-Deployment/Tauri Update Signing/TAURI_PRIVATE_KEY"
+          TAURI_KEY_PASSWORD="op://Terraphim-Deployment/Tauri Update Signing/TAURI_KEY_PASSWORD"
+          EOF
+
+          # Build with injected signing keys
+          op run --env-file=.env.ci -- yarn run tauri build
+
+      - name: Generate updater manifest
+        if: matrix.platform == 'ubuntu-22.04'
+        env:
+          OP_SERVICE_ACCOUNT_TOKEN: ${{ secrets.OP_SERVICE_ACCOUNT_TOKEN }}
+        run: |
+          node scripts/generate-latest-json.js
+
+      - name: Upload to GitHub Releases
+        uses: softprops/action-gh-release@v1
         with:
-          tagName: app-v__VERSION__ # the action automatically replaces \_\_VERSION\_\_ with the app version
-          releaseName: "App v__VERSION__"
-          releaseBody: "See the assets to download this version and install."
-          releaseDraft: true
+          files: |
+            desktop/target/release/bundle/**/*.dmg
+            desktop/target/release/bundle/**/*.exe
+            desktop/target/release/bundle/**/*.AppImage
+            desktop/target/release/bundle/**/*.deb
+            desktop/target/release/bundle/**/*.msi
+            latest.json
+          tag_name: ${{ github.ref_name }}
+          name: "Terraphim Desktop ${{ github.ref_name }}"
+          body: |
+            ## Terraphim Desktop ${{ github.ref_name }}
+
+            ### Auto-Update Enabled
+            This release includes automatic update functionality. The desktop application will check for updates automatically and prompt users when new versions are available.
+
+            ### Downloads
+            - **macOS**: Download the `.dmg` file
+            - **Windows**: Download the `.exe` or `.msi` file
+            - **Linux**: Download the `.AppImage` or `.deb` file
+
+            ### Changelog
+            See the commit history for detailed changes in this release.
+          draft: false
           prerelease: false
-          projectPath: ${{env.working-directory}}
+          token: ${{ secrets.GITHUB_TOKEN }}