mirror of
https://github.com/AgentSeal/codeburn.git
synced 2026-04-28 06:59:37 +00:00
495a254338
Introduces mac/ with a native SwiftUI menubar app that replaces the previous SwiftBar plugin entirely. Install via `npx codeburn menubar`, which downloads the .app from GitHub Releases, strips Gatekeeper quarantine, and drops it into ~/Applications. Highlights - mac/ SwiftUI app: agent tabs, Today/7/30/Month/All period switcher, Trend/Forecast/Pulse/Stats/Plan insights, activity + model breakdowns, optimize findings, CSV/JSON export, Star-on-GitHub banner, live 60s refresh, instant currency switching with offline FX cache. - Security: CodeburnCLI argv-based spawn (no shell interpretation), SafeFile symlink guards + O_NOFOLLOW writes, FX rate clamping to [0.0001, 1_000_000], keychain filtered to account == "default", removed byte-window credential log, in-flight refresh guard, POSIX flock on config.json writes, TerminalLauncher validates argv before AppleScript interpolation. - Performance: shared static NumberFormatter (thousands of allocations per popover redraw eliminated), concurrent pipe drain with 20 MB cap + 60s timeout in DataClient, Observation-tracked reactive UI, 5-min payload cache keyed on (period, provider). - CLI: new `codeburn menubar` subcommand that downloads + installs + launches the .app (no clone, no build). New `status --format menubar-json` payload builder. `export` rewritten to produce a folder of one-table-per-file CSVs with a `.codeburn-export` marker so arbitrary -o paths cannot be silently deleted. - Removed: src/menubar.ts (SwiftBar plugin generator), install-menubar / uninstall-menubar subcommands, `status --format menubar` directive output, tests/menubar.test.ts, tests/security/menubar-injection.test.ts. - Release: .github/workflows/release-menubar.yml builds universal binary, assembles .app, ad-hoc signs, zips, uploads on mac-v* tag push. Runs on the free macos-latest runner. Tests - 230 TypeScript tests pass - 10 Swift CapacityEstimator tests pass - TypeScript typecheck clean - Swift release build clean
103 lines
3.2 KiB
Bash
Executable file
103 lines
3.2 KiB
Bash
Executable file
#!/usr/bin/env bash
|
|
# Builds a universal CodeBurnMenubar.app bundle from the SwiftPM target and drops a
|
|
# distributable zip alongside. Used by the GitHub release workflow; also runnable locally.
|
|
#
|
|
# Usage:
|
|
# mac/Scripts/package-app.sh [<version>]
|
|
# Defaults to `dev` if no version is given.
|
|
|
|
set -euo pipefail
|
|
|
|
VERSION="${1:-dev}"
|
|
BUNDLE_NAME="CodeBurnMenubar.app"
|
|
BUNDLE_ID="org.agentseal.codeburn-menubar"
|
|
EXECUTABLE_NAME="CodeBurnMenubar"
|
|
MIN_MACOS="14.0"
|
|
|
|
repo_root() {
|
|
git rev-parse --show-toplevel 2>/dev/null || (cd "$(dirname "$0")/../.." && pwd)
|
|
}
|
|
|
|
ROOT=$(repo_root)
|
|
MAC_DIR="${ROOT}/mac"
|
|
DIST_DIR="${MAC_DIR}/.build/dist"
|
|
|
|
cd "${MAC_DIR}"
|
|
|
|
echo "▸ Cleaning previous dist..."
|
|
rm -rf "${DIST_DIR}"
|
|
mkdir -p "${DIST_DIR}"
|
|
|
|
echo "▸ Building universal binary (arm64 + x86_64)..."
|
|
swift build -c release --arch arm64 --arch x86_64
|
|
|
|
BIN_PATH=$(swift build -c release --arch arm64 --arch x86_64 --show-bin-path)
|
|
BUILT_BINARY="${BIN_PATH}/${EXECUTABLE_NAME}"
|
|
if [[ ! -x "${BUILT_BINARY}" ]]; then
|
|
echo "Binary not found at ${BUILT_BINARY}" >&2
|
|
exit 1
|
|
fi
|
|
|
|
echo "▸ Assembling ${BUNDLE_NAME}..."
|
|
BUNDLE="${DIST_DIR}/${BUNDLE_NAME}"
|
|
mkdir -p "${BUNDLE}/Contents/MacOS"
|
|
mkdir -p "${BUNDLE}/Contents/Resources"
|
|
cp "${BUILT_BINARY}" "${BUNDLE}/Contents/MacOS/${EXECUTABLE_NAME}"
|
|
|
|
cat > "${BUNDLE}/Contents/Info.plist" <<PLIST
|
|
<?xml version="1.0" encoding="UTF-8"?>
|
|
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
|
|
<plist version="1.0">
|
|
<dict>
|
|
<key>CFBundleDevelopmentRegion</key>
|
|
<string>en</string>
|
|
<key>CFBundleDisplayName</key>
|
|
<string>CodeBurn Menubar</string>
|
|
<key>CFBundleExecutable</key>
|
|
<string>${EXECUTABLE_NAME}</string>
|
|
<key>CFBundleIconFile</key>
|
|
<string>AppIcon</string>
|
|
<key>CFBundleIdentifier</key>
|
|
<string>${BUNDLE_ID}</string>
|
|
<key>CFBundleInfoDictionaryVersion</key>
|
|
<string>6.0</string>
|
|
<key>CFBundleName</key>
|
|
<string>${EXECUTABLE_NAME}</string>
|
|
<key>CFBundlePackageType</key>
|
|
<string>APPL</string>
|
|
<key>CFBundleShortVersionString</key>
|
|
<string>${VERSION}</string>
|
|
<key>CFBundleVersion</key>
|
|
<string>${VERSION}</string>
|
|
<key>LSMinimumSystemVersion</key>
|
|
<string>${MIN_MACOS}</string>
|
|
<key>LSUIElement</key>
|
|
<true/>
|
|
<key>NSHighResolutionCapable</key>
|
|
<true/>
|
|
<key>NSHumanReadableCopyright</key>
|
|
<string>© AgentSeal</string>
|
|
</dict>
|
|
</plist>
|
|
PLIST
|
|
|
|
cat > "${BUNDLE}/Contents/PkgInfo" <<'PKG'
|
|
APPL????
|
|
PKG
|
|
|
|
# Ad-hoc sign so macOS treats the bundle as internally consistent. This does NOT give us a
|
|
# recognisable developer name in Finder (that needs the $99 Developer ID cert), but it
|
|
# satisfies macOS's minimum bundle-validity checks on 14+ and prevents some Gatekeeper edge
|
|
# cases on managed Macs.
|
|
echo "▸ Ad-hoc signing..."
|
|
codesign --force --sign - --timestamp=none --deep "${BUNDLE}" 2>/dev/null || true
|
|
codesign --verify --deep --strict "${BUNDLE}" 2>/dev/null || echo " (signature verify skipped)"
|
|
|
|
ZIP_NAME="CodeBurnMenubar-${VERSION}.zip"
|
|
ZIP_PATH="${DIST_DIR}/${ZIP_NAME}"
|
|
echo "▸ Packaging ${ZIP_NAME}..."
|
|
(cd "${DIST_DIR}" && /usr/bin/ditto -c -k --keepParent "${BUNDLE_NAME}" "${ZIP_NAME}")
|
|
|
|
echo ""
|
|
echo "✓ Built ${ZIP_PATH}"
|
|
ls -la "${DIST_DIR}"
|