first commit

build-release.sh

@@ -0,0 +1,49 @@
+#!/usr/bin/env bash
+# Full release pipeline: lint, tests, optimised binary, Debian package, source archive, checksums.
+set -euo pipefail
+ROOT="$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")" && pwd)"
+cd "$ROOT"
+fail() { printf 'error: %s\n' "$*" >&2; exit 1; }
+need() { command -v "$1" >/dev/null 2>&1 || fail "$1 is required"; }
+need cargo; need rustc; need python3; need sha256sum; need tar
+
+VERSION="$(sed -n 's/^version = "\(.*\)"/\1/p' Cargo.toml | head -1)"
+HOST="$(rustc -vV | sed -n 's/^host: //p')"
+[[ -f Cargo.lock ]] || fail "Cargo.lock is required for a reproducible release"
+printf 'ActivePush %s release build for %s\n' "$VERSION" "$HOST"
+
+cargo fmt --all -- --check
+cargo clippy --locked --all-targets -- -D warnings
+python3 scripts/check-wbxml-names.py
+if command -v node >/dev/null; then node --check web/app.js; fi
+cargo test --locked --lib --bins
+if command -v cargo-zigbuild >/dev/null 2>&1 && [[ "${GLIBC_TARGET:-2.31}" != "0" ]]; then
+    # portable binary (old glibc baseline)
+    cargo zigbuild --locked --release --target "$(uname -m)-unknown-linux-gnu.${GLIBC_TARGET:-2.31}"
+    BIN="target/$(uname -m)-unknown-linux-gnu/release/active-push"
+else
+    cargo build --locked --release
+    BIN="target/release/active-push"
+fi
+[[ -x "$BIN" ]] || fail "release binary missing"
+"$BIN" --version
+
+rm -rf dist && mkdir -p dist
+ART="active-push-${VERSION}-${HOST}"
+cp "$BIN" "dist/$ART"
+chmod 0755 "dist/$ART"
+(cd dist && sha256sum "$ART" > "$ART.sha256")
+
+if command -v dpkg-deb >/dev/null; then
+    BIN="$BIN" scripts/build-deb.sh --no-build
+else
+    printf 'dpkg-deb not found: skipping .deb\n'
+fi
+
+SRC="dist/active-push-${VERSION}-source.tar.gz"
+tar --exclude=./target --exclude=./data --exclude=./dist --exclude=./.git --exclude=./.env \
+    -czf "$SRC" --transform "s,^\.,active-push-${VERSION}," .
+(cd dist && sha256sum "$(basename "$SRC")" > "$(basename "$SRC").sha256")
+
+printf '\nRelease artifacts:\n'
+ls -1 dist