Migrate CI to Gitea and improve live map diagnostics

.gitea/workflows/release.yml

@@ -0,0 +1,213 @@
+name: Release
+
+# Publish by pushing a tag to the gitea remote (`git push gitea v0.5.0`)
+# or from the Actions tab → Release → Run workflow (enter a version).
+#
+# Optional repository variables (Settings → Secrets and variables → Actions → Variables):
+#   PANEL_URL      https://panel.example.com — baked into the launcher as the default server
+#   LOCK_PANEL     "1" to stop players from changing the server
+#   LAUNCHER_NAME  Installer / window name (default "SCOPENET Launcher")
+
+on:
+  push:
+    tags: ['v*.*.*']
+  workflow_dispatch:
+    inputs:
+      version:
+        description: 'Version to release (e.g. 0.2.0)'
+        required: true
+
+permissions:
+  contents: read
+  releases: write
+  packages: write
+
+env:
+  CARGO_TERM_COLOR: always
+
+jobs:
+  version:
+    runs-on: linux-build
+    outputs:
+      version: ${{ steps.v.outputs.version }}
+      tag: ${{ steps.v.outputs.tag }}
+    steps:
+      - name: Verify Linux runner
+        run: |
+          test "$(uname -s)" = Linux
+          command -v bash
+      - id: v
+        shell: bash
+        env:
+          INPUT_VERSION: ${{ inputs.version }}
+        run: |
+          if [ "$GITHUB_EVENT_NAME" = "workflow_dispatch" ]; then v="$INPUT_VERSION"; else v="$GITHUB_REF_NAME"; fi
+          v="${v#v}"
+          if ! [[ "$v" =~ ^[0-9]+\.[0-9]+\.[0-9]+(-[0-9A-Za-z.]+)?$ ]]; then echo "::error::'$v' is not a semantic version"; exit 1; fi
+          echo "version=$v" >> "$GITEA_OUTPUT"
+          echo "tag=v$v" >> "$GITEA_OUTPUT"
+
+  launcher:
+    name: Windows installer
+    needs: version
+    runs-on: windows-build
+    steps:
+      - uses: builtin:checkout
+      - name: Verify Windows runner
+        shell: pwsh
+        run: |
+          if (-not $IsWindows) { throw 'windows-build must be a Windows host runner' }
+          foreach ($tool in @('cargo', 'node', 'npm')) {
+            if (-not (Get-Command $tool -ErrorAction SilentlyContinue)) { throw "Missing $tool" }
+          }
+      - uses: dtolnay/rust-toolchain@stable
+      - uses: Swatinem/rust-cache@v2
+        with:
+          key: release
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 22
+          cache: npm
+          cache-dependency-path: launcher/package-lock.json
+
+      - name: Stamp version
+        shell: bash
+        env:
+          VERSION: ${{ needs.version.outputs.version }}
+        run: |
+          sed -i "0,/^version = \".*\"/s//version = \"$VERSION\"/" Cargo.toml
+          node -e "const f='launcher/src-tauri/tauri.conf.json';const c=require('./'+f);c.version=process.env.VERSION;require('fs').writeFileSync(f,JSON.stringify(c,null,2))"
+          node -e "const f='launcher/package.json';const c=require('./'+f);c.version=process.env.VERSION;require('fs').writeFileSync(f,JSON.stringify(c,null,2))"
+
+      - run: npm ci --no-audit --no-fund
+        working-directory: launcher
+
+      - name: Build installer
+        working-directory: launcher
+        shell: bash
+        env:
+          SCOPENET_PANEL_URL: ${{ vars.PANEL_URL }}
+          SCOPENET_LOCK_PANEL: ${{ vars.LOCK_PANEL }}
+          SCOPENET_REPO: ${{ gitea.server_url }}/${{ gitea.repository }}
+          LAUNCHER_NAME: ${{ vars.LAUNCHER_NAME }}
+        run: |
+          if [ -n "$LAUNCHER_NAME" ]; then
+            CONFIG=$(node -e "console.log(JSON.stringify({productName: process.env.LAUNCHER_NAME, app: {windows: [{...require('./src-tauri/tauri.conf.json').app.windows[0], title: process.env.LAUNCHER_NAME}]}}))")
+            npx tauri build --bundles nsis --config "$CONFIG"
+          else
+            npx tauri build --bundles nsis
+          fi
+
+      - name: Collect installer
+        shell: bash
+        run: |
+          mkdir -p out
+          cp target/release/bundle/nsis/*-setup.exe out/
+          ls -la out
+
+      - uses: actions/upload-artifact@v4
+        with:
+          name: windows-installer
+          path: out/*-setup.exe
+          if-no-files-found: error
+
+  panel-image:
+    name: Panel image (Gitea registry)
+    needs: version
+    runs-on: linux-build
+    steps:
+      - uses: builtin:checkout
+      - name: Verify container runner
+        run: |
+          test "$(uname -s)" = Linux
+          command -v docker
+          docker info >/dev/null
+          docker buildx version >/dev/null
+      - name: Image name
+        run: echo "IMAGE=${GITHUB_SERVER_URL#https://}/${GITHUB_REPOSITORY_OWNER,,}/scopenet-mc-panel" >> "$GITEA_ENV"
+      - name: Stamp version
+        run: sed -i "0,/^version = \".*\"/s//version = \"${{ needs.version.outputs.version }}\"/" Cargo.toml
+      - uses: docker/setup-buildx-action@v3
+      - uses: docker/login-action@v3
+        with:
+          registry: gitea.jadonsandbox.com
+          username: ${{ gitea.actor }}
+          password: ${{ secrets.GITEA_TOKEN }}
+      - id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images: ${{ env.IMAGE }}
+          tags: |
+            type=semver,pattern={{version}},value=${{ needs.version.outputs.tag }}
+            type=semver,pattern={{major}}.{{minor}},value=${{ needs.version.outputs.tag }}
+            type=raw,value=latest,enable=${{ !contains(needs.version.outputs.version, '-') }}
+      - uses: docker/build-push-action@v6
+        with:
+          context: .
+          platforms: linux/amd64,linux/arm64
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          cache-from: type=registry,ref=${{ env.IMAGE }}:buildcache
+          cache-to: type=registry,ref=${{ env.IMAGE }}:buildcache,mode=max
+
+  server-integrations:
+    needs: version
+    uses: ./.gitea/workflows/integrations.yml
+    with:
+      version: ${{ needs.version.outputs.version }}
+
+  release:
+    name: Gitea release
+    needs: [version, launcher, panel-image, server-integrations]
+    runs-on: linux-build
+    steps:
+      - name: Verify release runner
+        run: |
+          test "$(uname -s)" = Linux
+          command -v curl
+          command -v jq
+      - uses: actions/download-artifact@v4
+        with:
+          name: windows-installer
+          path: dist
+      - uses: actions/download-artifact@v4
+        with:
+          pattern: server-*
+          merge-multiple: true
+          path: dist
+      - name: Release notes
+        run: |
+          IMAGE="${GITHUB_SERVER_URL#https://}/${GITHUB_REPOSITORY_OWNER,,}/scopenet-mc-panel"
+          cat > notes.md <<NOTES
+          ## Downloads
+
+          **Launcher (Windows):** download the \`-setup.exe\` below and run it. Installed launchers update themselves automatically.
+
+          **Servers:** download \`scopenet-paper\` or the Fabric/Forge JAR for your exact Minecraft version. Keep \`online-mode=true\` and install authlib-injector as documented in \`docs/server-integration.md\`.
+
+          **Admin panel (Docker):**
+          \`\`\`bash
+          docker pull ${IMAGE}:${{ needs.version.outputs.version }}
+          \`\`\`
+          Or with Compose: set \`image: ${IMAGE}:${{ needs.version.outputs.version }}\` in \`docker-compose.yml\` and run \`docker compose up -d\`.
+          NOTES
+      - name: Publish Gitea release and assets
+        env:
+          TOKEN: ${{ secrets.GITEA_TOKEN }}
+          TAG: ${{ needs.version.outputs.tag }}
+          VERSION: ${{ needs.version.outputs.version }}
+        run: |
+          set -euo pipefail
+          command -v curl && command -v jq
+          test -n "$TOKEN" || { echo 'GITEA_TOKEN is unavailable'; exit 1; }
+          api="$GITHUB_SERVER_URL/api/v1/repos/$GITHUB_REPOSITORY/releases"
+          body=$(jq -n --arg tag "$TAG" --arg notes "$(cat notes.md)" --arg sha "$GITHUB_SHA" --argjson pre "$(case "$VERSION" in *-*) echo true;; *) echo false;; esac)" '{tag_name:$tag,name:$tag,body:$notes,target_commitish:$sha,prerelease:$pre}')
+          release=$(curl -fsS -H "Authorization: token $TOKEN" "$api/tags/$TAG") || \
+            release=$(curl --fail-with-body -sS -H "Authorization: token $TOKEN" -H 'Content-Type: application/json' -d "$body" "$api")
+          id=$(printf '%s' "$release" | jq -er '.id')
+          for file in dist/*-setup.exe dist/*.jar; do
+            test -f "$file" || continue
+            if printf '%s' "$release" | jq -e --arg name "$(basename "$file")" '.assets[]? | select(.name == $name)' >/dev/null; then continue; fi
+            curl --fail-with-body -sS -H "Authorization: token $TOKEN" -F "attachment=@$file" "$api/$id/assets?name=$(basename "$file")" >/dev/null
+          done