wiring

.cargo/mutants.toml

@@ -9,6 +9,8 @@ exclude_re = [
     "replace < with <= in rgb_of_hsl",
     "replace < with <= in migrate",
     "replace Rows::fetch_ahead with \\(\\)",
+    "replace Engine::ours with",
+    "replace kept -> Option<i64> with",
 ]
 
 exclude_globs = [

.github/actions/prepare/action.yml

@@ -0,0 +1,43 @@
+name: Prepare the build
+description: Rust toolchain, cache, and the release version stamped into the manifest.
+
+inputs:
+  version:
+    description: Version to stamp into Cargo.toml.
+    required: true
+  targets:
+    description: Rust targets to install, comma separated.
+    required: true
+  cache-key:
+    description: Added to the cache key when one job id builds more than one target.
+    required: false
+    default: ""
+
+runs:
+  using: composite
+  steps:
+    - uses: dtolnay/rust-toolchain@6bed0761d98439e5a578e2877258200ad565ba87 # stable
+      with:
+        targets: ${{ inputs.targets }}
+
+    - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2
+      with:
+        key: ${{ inputs.cache-key }}
+        save-if: false
+
+    - name: Stamp the version
+      shell: bash
+      run: |
+        version="${{ inputs.version }}"
+
+        cargo fetch --locked --offline 2>/dev/null || cargo fetch --locked
+
+        sed -i.bak -e "s/^version = .*/version = \"$version\"/" Cargo.toml
+        rm -f Cargo.toml.bak
+
+        if ! grep -q "^version = \"$version\"\$" Cargo.toml; then
+          echo "::error::could not stamp $version into Cargo.toml"
+          exit 1
+        fi
+
+        cargo update --workspace --offline

.github/actions/sidecar/action.yml

@@ -0,0 +1,33 @@
+name: The panel the app carries
+description: >-
+  `externalBin` in tauri.conf.json makes the binary a build-time requirement of
+  the app, so anything that compiles the workspace — a test, a clippy run —
+  needs it there first, not only a bundle.
+
+inputs:
+  profile:
+    description: debug or release.
+    required: false
+    default: debug
+  target:
+    description: Rust target the panel is built for, empty for the host.
+    required: false
+    default: ""
+
+runs:
+  using: composite
+  steps:
+    - shell: bash
+      env:
+        PY: ${{ runner.os == 'Windows' && 'python' || 'python3' }}
+        PROFILE: ${{ inputs.profile }}
+        TARGET: ${{ inputs.target }}
+      run: |
+        said=""
+        if [ "$PROFILE" = "debug" ]; then
+          said="--debug"
+        fi
+        if [ -n "$TARGET" ]; then
+          said="$said --target $TARGET"
+        fi
+        "$PY" scripts/sidecar.py $said

.github/workflows/bundle.yml

@@ -0,0 +1,129 @@
+name: Bundle
+
+on:
+  push:
+    branches: [main]
+    paths:
+      - "app/src-tauri/installer.nsi"
+      - "app/src-tauri/tauri.conf.json"
+      - "app/src-tauri/Cargo.toml"
+      - "app/src-tauri/build.rs"
+      - "app/package.json"
+      - "scripts/sidecar.py"
+      - "Cargo.toml"
+      - ".github/actions/sidecar/action.yml"
+      - ".github/workflows/bundle.yml"
+      - ".github/workflows/release.yml"
+  pull_request:
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
+
+env:
+  CARGO_TERM_COLOR: always
+
+jobs:
+  # `paths` on the trigger leaves a required check unreported for good; a skipped job counts as met.
+  changes:
+    name: what the branch touched
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    outputs:
+      packaging: ${{ steps.look.outputs.packaging }}
+    steps:
+      - uses: actions/checkout@v7
+        with:
+          fetch-depth: 0
+
+      - id: look
+        env:
+          BASE: ${{ github.event.pull_request.base.sha }}
+        run: |
+          if [ -z "$BASE" ]; then
+            echo "packaging=true" >> "$GITHUB_OUTPUT"
+            exit 0
+          fi
+          watched='^(app/src-tauri/(installer\.nsi|tauri\.conf\.json|Cargo\.toml|build\.rs)'
+          watched+='|app/package\.json|scripts/sidecar\.py|Cargo\.toml$'
+          watched+='|\.github/actions/sidecar/action\.yml$'
+          watched+='|\.github/workflows/(bundle|release)\.yml$)'
+          from=$(git merge-base "$BASE" HEAD)
+          if git diff --name-only --diff-filter=d "$from" HEAD | grep -qE "$watched"; then
+            echo "packaging=true" >> "$GITHUB_OUTPUT"
+          else
+            echo "packaging=false" >> "$GITHUB_OUTPUT"
+          fi
+
+  nsis:
+    name: the installer builds
+    needs: changes
+    if: needs.changes.outputs.packaging == 'true'
+    runs-on: windows-latest
+    timeout-minutes: 45
+    steps:
+      - uses: actions/checkout@v7
+      - uses: dtolnay/rust-toolchain@6bed0761d98439e5a578e2877258200ad565ba87 # stable
+      - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2
+        with:
+          shared-key: bundle
+          save-if: ${{ github.ref == 'refs/heads/main' }}
+
+      - uses: actions/setup-node@v7
+        with:
+          node-version: 22
+          cache: npm
+          cache-dependency-path: app/package-lock.json
+
+      - name: Frontend
+        working-directory: app
+        run: npm ci
+
+      - uses: ./.github/actions/sidecar
+        with:
+          profile: release
+
+      - name: Bundle
+        working-directory: app
+        shell: bash
+        run: npm run tauri build -- --bundles nsis --no-sign
+
+      - name: What the installer was told to do
+        shell: bash
+        run: |
+          setup=$(ls target/release/bundle/nsis/*-setup.exe 2>/dev/null | head -1) || true
+          if [ -z "$setup" ]; then
+            echo "::error::the bundler produced no installer"
+            exit 1
+          fi
+
+          script=$(ls target/release/nsis/*/installer.nsi 2>/dev/null | head -1) || true
+          if [ -z "$script" ]; then
+            echo "::error::makensis ran but left no script behind to read"
+            exit 1
+          fi
+
+          status=0
+          want() {
+            if ! grep -q "$1" "$script"; then
+              echo "::error::the generated installer does not $2"
+              status=1
+            fi
+          }
+          want 'oname=cp-panel.exe' \
+            "lay down the panel; the sidecar was not bundled"
+          want 'StrCpy .INSTDIR ".LOCALAPPDATA.Programs' \
+            "keep the binaries out of the data folder"
+          want '_is1" "UninstallString"' \
+            "look for CopyPaste 2 before copying anything"
+          want 'RmDir /r ".LOCALAPPDATA.${PRODUCTNAME}"' \
+            "point its delete-my-data box at the folder the data is actually in"
+          exit $status
+
+      - name: How big it came out
+        shell: bash
+        run: ls -lh target/release/bundle/nsis/*-setup.exe

.github/workflows/ci.yml

@@ -36,6 +36,8 @@ jobs:
           save-if: ${{ github.ref == 'refs/heads/main' }}
       - uses: taiki-e/install-action@nextest
 
+      - uses: ./.github/actions/sidecar
+
       - run: cargo clippy --workspace --all-targets
       - run: cargo nextest run --workspace --no-tests=pass
       - if: runner.os == 'Windows'