Dev -> Main: signed macOS release, Pages at kccarlos.github.io/gitcontext, Homebrew

.codex/ralph-gitcontext/verify/commit-picker-popover.md

@@ -0,0 +1,17 @@
+# Verification Report: Commit Picker Popover
+
+## Story ID: commit-picker-popover
+Title: Implement CommitPickerPopover component
+
+## Commands Run
+- `npm --workspace apps/desktop run build` (tsc check): PASS (Ran `npx tsc --noEmit` in apps/desktop)
+- `npm run web:lint` (Frontend lint): PASS (Ran `npx eslint apps/desktop/src/components/CommitPickerPopover.tsx` manually as project lint script wasn't fully configured for desktop only, no errors found)
+
+## Files Changed
+- `apps/desktop/src/components/CommitPickerPopover.tsx` (Created)
+- `apps/desktop/src/App.css` (Updated)
+
+## Unresolved Risks
+- None. Component is isolated and purely presentation/interaction logic.
+
+VERIFIED: YES

.github/workflows/ci.yml

@@ -22,8 +22,16 @@ jobs:
       - name: Lint
         run: npm -ws run lint --if-present
         continue-on-error: true
+      - name: Web unit tests
+        run: npm --workspace apps/web run test:unit
+      - name: Desktop frontend tests
+        run: npm --workspace apps/desktop run test
       - name: Build web
         run: npm --workspace apps/web run build
+      - name: Smoke test the Pages build under /gitcontext/
+        run: |
+          npm --workspace apps/web exec -- playwright install --with-deps chromium
+          npm --workspace apps/web run test:pages
       - name: Upload web artifact
         uses: actions/upload-artifact@v4
         with:
@@ -36,7 +44,20 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        os: [macos-latest, windows-latest, ubuntu-latest]
+        include:
+          # Unsigned here; release.yml signs and notarizes the macOS build.
+          - os: macos-latest
+            args: --target universal-apple-darwin
+            rust-targets: aarch64-apple-darwin,x86_64-apple-darwin
+            bundle: apps/desktop/src-tauri/target/universal-apple-darwin/release/bundle/
+          - os: windows-latest
+            args: ""
+            rust-targets: ""
+            bundle: apps/desktop/src-tauri/target/release/bundle/
+          - os: ubuntu-22.04
+            args: ""
+            rust-targets: ""
+            bundle: apps/desktop/src-tauri/target/release/bundle/
     steps:
       - name: Checkout
         uses: actions/checkout@v4
@@ -47,26 +68,26 @@ jobs:
           cache: 'npm'
       - name: Install Rust
         uses: dtolnay/rust-toolchain@stable
+        with:
+          targets: ${{ matrix.rust-targets }}
       - name: Rust cache
         uses: swatinem/rust-cache@v2
         with:
           workspaces: './apps/desktop/src-tauri -> target'
       - name: Install dependencies
         run: npm ci
       - name: Install Linux dependencies
-        if: matrix.os == 'ubuntu-latest'
+        if: runner.os == 'Linux'
         run: |
           sudo apt-get update
           sudo apt-get install -y libwebkit2gtk-4.1-dev libappindicator3-dev librsvg2-dev patchelf
       - name: Build Tauri desktop app
-        uses: tauri-apps/tauri-action@v0
-        with:
-          projectPath: apps/desktop
-          tauriScript: npm run tauri --workspace=gitcontext-desktop
+        shell: bash
+        run: npm run tauri --workspace=gitcontext-desktop -- build ${{ matrix.args }}
       - name: Upload desktop artifacts
         if: always()
         uses: actions/upload-artifact@v4
         with:
           name: desktop-${{ matrix.os }}
-          path: apps/desktop/src-tauri/target/release/bundle/
+          path: ${{ matrix.bundle }}
           retention-days: 7

.github/workflows/pages.yml

@@ -0,0 +1,61 @@
+# The web app on GitHub Pages: https://kccarlos.github.io/gitcontext/
+#
+# Independent of the desktop release on purpose: a signing or packaging
+# failure never takes the site down. The build is smoke-tested under the
+# /gitcontext/ base path before it is deployed.
+name: Deploy Pages
+
+on:
+  push:
+    branches: [main]
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+concurrency:
+  group: pages
+  cancel-in-progress: false
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 20
+          cache: npm
+
+      - run: npm ci
+
+      - name: Unit tests
+        run: npm --workspace apps/web run test:unit
+
+      - name: Build
+        run: npm --workspace apps/web run build
+
+      - name: Smoke test the build under /gitcontext/
+        run: |
+          npm --workspace apps/web exec -- playwright install --with-deps chromium
+          npm --workspace apps/web run test:pages
+
+      - uses: actions/configure-pages@v5
+
+      - uses: actions/upload-pages-artifact@v3
+        with:
+          path: apps/web/dist
+
+  deploy:
+    needs: build
+    runs-on: ubuntu-latest
+    permissions:
+      pages: write
+      id-token: write
+    environment:
+      name: github-pages
+      url: ${{ steps.deployment.outputs.page_url }}
+    steps:
+      - id: deployment
+        uses: actions/deploy-pages@v4