Prepare 0.3.0 release and split Linux/macOS distribution paths

.github/workflows/macos-preview.yml

@@ -0,0 +1,108 @@
+name: macOS Preview
+
+on:
+  pull_request:
+  push:
+    branches:
+      - main
+  workflow_dispatch:
+
+jobs:
+  macos-preview:
+    strategy:
+      fail-fast: false
+      matrix:
+        runner:
+          - macos-14
+          - macos-15
+          - macos-15-intel
+    runs-on: ${{ matrix.runner }}
+
+    steps:
+      - name: Check out repository
+        uses: actions/checkout@v4
+
+      - name: Install Rust toolchain
+        uses: dtolnay/rust-toolchain@stable
+
+      - name: Cache Rust artifacts
+        uses: Swatinem/rust-cache@v2
+
+      - name: Install macOS build tools
+        run: |
+          brew update
+          brew install xcodegen zig
+
+      - name: Run shared Rust validation
+        run: |
+          cargo test -p taskers-control -p taskers-core -p taskers-macos-ffi -p taskers-paths
+
+      - name: Confirm crates.io launcher is blocked on macOS
+        run: |
+          set +e
+          output="$(cargo install --locked --path crates/taskers-launcher 2>&1)"
+          status=$?
+          set -e
+
+          printf '%s\n' "$output"
+
+          if [[ $status -eq 0 ]]; then
+            echo "expected cargo install --path crates/taskers-launcher to fail on macOS" >&2
+            exit 1
+          fi
+
+          grep -F "taskers on crates.io currently supports x86_64 Linux only" <<<"$output"
+          grep -F "Download the macOS DMG" <<<"$output"
+
+      - name: Generate Xcode project
+        run: bash scripts/generate_macos_project.sh
+
+      - name: Build and test Taskers.app
+        run: |
+          mkdir -p build/macos
+          set -o pipefail
+          xcodebuild test \
+            -project macos/Taskers.xcodeproj \
+            -scheme TaskersMac \
+            -configuration Debug \
+            -derivedDataPath build/macos/DerivedData \
+            -resultBundlePath build/macos/Taskers-${{ matrix.runner }}.xcresult \
+            CODE_SIGNING_ALLOWED=NO \
+            CODE_SIGNING_REQUIRED=NO \
+            | tee build/macos/xcodebuild-test-${{ matrix.runner }}.log
+
+      - name: Sign debug app bundle
+        run: bash scripts/sign_macos_app.sh build/macos/DerivedData build/macos/DerivedData/Build/Products/Debug/Taskers.app
+
+      - name: Smoke launch bundled app
+        run: |
+          APP_PATH="build/macos/DerivedData/Build/Products/Debug/Taskers.app"
+          if [[ ! -d "${APP_PATH}" ]]; then
+            echo "expected app bundle at ${APP_PATH}" >&2
+            exit 1
+          fi
+
+          TASKERS_SMOKE_TEST=1 \
+            "${APP_PATH}/Contents/MacOS/Taskers"
+
+      - name: Package signed app
+        if: always()
+        run: |
+          APP_PATH="build/macos/DerivedData/Build/Products/Debug/Taskers.app"
+          if [[ -d "${APP_PATH}" ]]; then
+            ditto -c -k --sequesterRsrc --keepParent \
+              "${APP_PATH}" \
+              "build/macos/Taskers-${{ matrix.runner }}.zip"
+          fi
+
+      - name: Upload build artifacts
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: taskers-macos-${{ matrix.runner }}
+          if-no-files-found: ignore
+          path: |
+            build/macos/Taskers-${{ matrix.runner }}.zip
+            build/macos/Taskers-${{ matrix.runner }}.xcresult
+            build/macos/xcodebuild-test-${{ matrix.runner }}.log
+            build/macos/DerivedData/Logs/Build/*.xcactivitylog

.github/workflows/release-assets.yml

@@ -0,0 +1,179 @@
+name: Release Assets
+
+on:
+  push:
+    tags:
+      - "v*"
+  workflow_dispatch:
+
+permissions:
+  contents: write
+
+jobs:
+  linux-bundle:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Check out repository
+        uses: actions/checkout@v4
+
+      - name: Install Rust toolchain
+        uses: dtolnay/rust-toolchain@stable
+
+      - name: Cache Rust artifacts
+        uses: Swatinem/rust-cache@v2
+
+      - name: Install Linux bundle tools
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y zig xvfb libgtk-4-dev libadwaita-1-dev
+
+      - name: Build Linux bundle
+        run: bash scripts/build_linux_bundle.sh
+
+      - name: Run Linux smoke checks
+        run: |
+          bash scripts/smoke_taskers_ui.sh
+          bash scripts/smoke_taskers_focus_churn.sh
+          bash scripts/smoke_linux_release_launcher.sh
+
+      - name: Upload Linux bundle
+        uses: actions/upload-artifact@v4
+        with:
+          name: linux-bundle
+          path: dist/taskers-linux-bundle-v*.tar.xz
+
+  macos-universal-dmg:
+    runs-on: macos-15
+    env:
+      TASKERS_MACOS_CERTIFICATE_P12_BASE64: ${{ secrets.TASKERS_MACOS_CERTIFICATE_P12_BASE64 }}
+      TASKERS_MACOS_CERTIFICATE_PASSWORD: ${{ secrets.TASKERS_MACOS_CERTIFICATE_PASSWORD }}
+      TASKERS_MACOS_CODESIGN_IDENTITY: ${{ secrets.TASKERS_MACOS_CODESIGN_IDENTITY }}
+      TASKERS_MACOS_NOTARY_APPLE_ID: ${{ secrets.TASKERS_MACOS_NOTARY_APPLE_ID }}
+      TASKERS_MACOS_NOTARY_TEAM_ID: ${{ secrets.TASKERS_MACOS_NOTARY_TEAM_ID }}
+      TASKERS_MACOS_NOTARY_PASSWORD: ${{ secrets.TASKERS_MACOS_NOTARY_PASSWORD }}
+
+    steps:
+      - name: Check out repository
+        uses: actions/checkout@v4
+
+      - name: Install Rust toolchain
+        uses: dtolnay/rust-toolchain@stable
+
+      - name: Cache Rust artifacts
+        uses: Swatinem/rust-cache@v2
+
+      - name: Install macOS build tools
+        run: |
+          brew update
+          brew install xcodegen zig
+
+      - name: Validate macOS release credentials
+        run: |
+          missing=0
+          for name in \
+            TASKERS_MACOS_CERTIFICATE_P12_BASE64 \
+            TASKERS_MACOS_CERTIFICATE_PASSWORD \
+            TASKERS_MACOS_CODESIGN_IDENTITY \
+            TASKERS_MACOS_NOTARY_APPLE_ID \
+            TASKERS_MACOS_NOTARY_TEAM_ID \
+            TASKERS_MACOS_NOTARY_PASSWORD; do
+            if [[ -z "${!name:-}" ]]; then
+              echo "::error::Missing required secret ${name}"
+              missing=1
+            fi
+          done
+
+          if [[ $missing -ne 0 ]]; then
+            exit 1
+          fi
+
+      - name: Install Developer ID certificate
+        run: bash scripts/install_macos_codesign_certificate.sh
+
+      - name: Generate Xcode project
+        run: bash scripts/generate_macos_project.sh
+
+      - name: Build universal Taskers.app
+        run: |
+          xcodebuild build \
+            -project macos/Taskers.xcodeproj \
+            -scheme TaskersMac \
+            -configuration Release \
+            -derivedDataPath build/macos/DerivedData \
+            ARCHS="arm64 x86_64" \
+            ONLY_ACTIVE_ARCH=NO \
+            CODE_SIGNING_ALLOWED=NO \
+            CODE_SIGNING_REQUIRED=NO
+
+      - name: Sign universal Taskers.app
+        run: bash scripts/sign_macos_app.sh
+
+      - name: Build universal DMG
+        run: bash scripts/build_macos_dmg.sh
+
+      - name: Notarize and staple universal DMG
+        run: |
+          version="$(sed -n 's/^version = \"\\(.*\\)\"/\\1/p' Cargo.toml | head -n1)"
+          bash scripts/notarize_macos_dmg.sh "dist/Taskers-v${version}-universal2.dmg"
+
+      - name: Upload universal DMG
+        uses: actions/upload-artifact@v4
+        with:
+          name: macos-universal-dmg
+          path: dist/Taskers-v*-universal2.dmg
+
+  release-manifest:
+    needs:
+      - linux-bundle
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Check out repository
+        uses: actions/checkout@v4
+
+      - name: Download built assets
+        uses: actions/download-artifact@v4
+        with:
+          path: dist
+
+      - name: Flatten downloaded artifacts
+        run: |
+          mkdir -p dist/release
+          find dist -type f -exec cp {} dist/release/ \;
+
+      - name: Build release manifest
+        run: python3 scripts/build_release_manifest.py --dist-dir dist/release
+
+      - name: Upload release manifest
+        uses: actions/upload-artifact@v4
+        with:
+          name: release-manifest
+          path: dist/release/taskers-manifest-v*.json
+
+  upload-github-release:
+    if: startsWith(github.ref, 'refs/tags/v')
+    needs:
+      - release-manifest
+      - macos-universal-dmg
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Download built assets
+        uses: actions/download-artifact@v4
+        with:
+          path: dist
+
+      - name: Flatten downloaded artifacts
+        run: |
+          mkdir -p dist/release
+          find dist -type f -exec cp {} dist/release/ \;
+
+      - name: Create draft GitHub release with assets
+        uses: softprops/action-gh-release@v2
+        with:
+          draft: true
+          files: |
+            dist/release/taskers-manifest-v*.json
+            dist/release/taskers-linux-bundle-v*.tar.xz
+            dist/release/Taskers-v*-universal2.dmg

.gitignore

@@ -1 +1,4 @@
+build/
 dist/
+build/
+macos/Taskers.xcodeproj/