2fc0981195
Two static files behind nginx and a script that writes them. No authentication: there is no account to check against, and the APK carries no secret — the credential in that app is the addon URL, which lives in the device keystore. The APKs are committed rather than stored elsewhere. At ~34MB and a few releases a year that beats standing up artifact storage for one app, and the history is disposable because only the newest artifact is ever fetched. release.py reads the version out of amber-adult's pubspec instead of taking it as an argument. A manifest advertising a build number the APK does not carry is an update the device installs and is then offered again, every launch, forever. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
66 lines
2 KiB
Python
Executable file
66 lines
2 KiB
Python
Executable file
#!/usr/bin/env python3
|
|
"""Publish an APK: copy it in, write the manifest, commit.
|
|
|
|
Reads the version and build number out of amber-adult's pubspec so the two
|
|
cannot drift — a manifest advertising a build number the APK does not carry is
|
|
an update the device installs and is then offered again on every launch.
|
|
"""
|
|
import hashlib
|
|
import json
|
|
import pathlib
|
|
import re
|
|
import shutil
|
|
import subprocess
|
|
import sys
|
|
|
|
HERE = pathlib.Path(__file__).resolve().parent
|
|
PUBSPEC = HERE.parent / "amber-adult" / "pubspec.yaml"
|
|
BASE_URL = "https://media-updates.petruzalekr.cz"
|
|
|
|
|
|
def pubspec_version() -> tuple[str, int]:
|
|
m = re.search(r"^version:\s*([0-9.]+)\+([0-9]+)\s*$",
|
|
PUBSPEC.read_text(encoding="utf-8"), re.M)
|
|
if not m:
|
|
sys.exit(f"no version line in {PUBSPEC}")
|
|
return m.group(1), int(m.group(2))
|
|
|
|
|
|
def main() -> None:
|
|
if len(sys.argv) < 2:
|
|
sys.exit("usage: release.py <apk> [notes]")
|
|
apk = pathlib.Path(sys.argv[1]).resolve()
|
|
notes = sys.argv[2] if len(sys.argv) > 2 else ""
|
|
if not apk.is_file():
|
|
sys.exit(f"no such APK: {apk}")
|
|
|
|
version, build = pubspec_version()
|
|
public = HERE / "public"
|
|
public.mkdir(exist_ok=True)
|
|
name = f"media-{build}.apk"
|
|
dest = public / name
|
|
shutil.copy2(apk, dest)
|
|
|
|
digest = hashlib.sha256(dest.read_bytes()).hexdigest()
|
|
manifest = {
|
|
"version": version,
|
|
"buildNumber": build,
|
|
"notes": notes,
|
|
"sha256": digest,
|
|
"size": dest.stat().st_size,
|
|
"url": f"{BASE_URL}/{name}",
|
|
}
|
|
(public / "manifest.json").write_text(
|
|
json.dumps(manifest, indent=2) + "\n", encoding="utf-8")
|
|
|
|
subprocess.run(["git", "add", "-A"], cwd=HERE, check=True)
|
|
subprocess.run(
|
|
["git", "commit", "-m", f"Release {version}+{build}"],
|
|
cwd=HERE, check=True)
|
|
print(f"staged {name} ({dest.stat().st_size // 1024 // 1024} MB), "
|
|
f"version {version}+{build}")
|
|
print("push to deploy")
|
|
|
|
|
|
if __name__ == "__main__":
|
|
main()
|