v0.2.0

scripts/build-release.sh

@@ -4,6 +4,14 @@ set -euo pipefail
 ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
 cd "$ROOT"
 
+# Cargo.lock is generated only for the locked build/test phase. Keep source releases
+# and the working tree clean so the offline/static gate is repeatable.
+cleanup_lockfile() {
+  rm -f "$ROOT/Cargo.lock"
+}
+trap cleanup_lockfile EXIT
+rm -f "$ROOT/Cargo.lock"
+
 if ! command -v cargo >/dev/null 2>&1; then
   echo "error: Rust/Cargo is required" >&2
   exit 1
@@ -19,6 +27,17 @@ if [[ -e "$ROOT/src/web/app.js" || ! -f "$ROOT/src/web/js/manifest.txt" ]]; then
   exit 1
 fi
 
+if command -v python3 >/dev/null 2>&1; then
+  python3 scripts/validate-release-static.py
+else
+  echo "error: python3 is required for static release validation" >&2
+  exit 1
+fi
+
+if [[ ! -f Cargo.lock ]]; then
+  cargo generate-lockfile
+fi
+
 cargo fmt --all
 cargo fmt --all -- --check
 cargo test --locked