refactor: align project directory architecture

.github/scripts/generate-legacy-update.mjs

@@ -0,0 +1,77 @@
+import { createHash } from "node:crypto";
+import { stat, readFile, writeFile } from "node:fs/promises";
+import { basename, join, resolve } from "node:path";
+
+const assetSpecs = [
+  ["macos-arm64", ".tar.gz"],
+  ["macos-amd64", ".tar.gz"],
+  ["windows-amd64", ".zip"],
+  ["linux-amd64", ".tar.gz"],
+];
+
+function readOptions(args) {
+  const options = new Map();
+  for (let index = 0; index < args.length; index += 2) {
+    const name = args[index];
+    const value = args[index + 1];
+    if (!name?.startsWith("--") || value === undefined) {
+      throw new Error(`invalid argument near ${name ?? "end of command"}`);
+    }
+    options.set(name.slice(2), value);
+  }
+  return options;
+}
+
+function required(options, name) {
+  const value = options.get(name)?.trim();
+  if (!value) throw new Error(`--${name} is required`);
+  return value;
+}
+
+async function sha256(path) {
+  const content = await readFile(path);
+  return createHash("sha256").update(content).digest("hex");
+}
+
+async function main() {
+  const options = readOptions(process.argv.slice(2));
+  const version = required(options, "version").replace(/^v/, "");
+  const repository = required(options, "repository");
+  const assetsDir = resolve(required(options, "assets-dir"));
+  const output = resolve(required(options, "output"));
+  const releaseNotes = options.get("notes")?.trim() || `Cursor BYOK v${version}`;
+
+  if (!/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/.test(version)) {
+    throw new Error(`invalid semantic version: ${version}`);
+  }
+  if (!/^[^/\s]+\/[^/\s]+$/.test(repository)) {
+    throw new Error(`invalid GitHub repository: ${repository}`);
+  }
+
+  const platforms = {};
+  for (const [platform, suffix] of assetSpecs) {
+    const filename = `cursor-byok-${version}-${platform}${suffix}`;
+    const path = join(assetsDir, filename);
+    const info = await stat(path);
+    if (!info.isFile()) throw new Error(`release asset is not a file: ${path}`);
+    platforms[platform] = {
+      url: `https://github.com/${repository}/releases/download/v${version}/${basename(path)}`,
+      size: info.size,
+      checksum: `sha256:${await sha256(path)}`,
+    };
+  }
+
+  const manifest = {
+    version,
+    release_date: new Date().toISOString(),
+    release_notes: releaseNotes,
+    platforms,
+    mandatory: false,
+  };
+  await writeFile(output, `${JSON.stringify(manifest, null, 2)}\n`);
+}
+
+main().catch((error) => {
+  console.error(error instanceof Error ? error.message : String(error));
+  process.exitCode = 1;
+});

.github/scripts/normalize-tauri-update.mjs

@@ -0,0 +1,101 @@
+import { readFile, writeFile } from "node:fs/promises";
+import { resolve } from "node:path";
+import { pathToFileURL } from "node:url";
+
+function readOptions(args) {
+  const options = new Map();
+  for (let index = 0; index < args.length; index += 2) {
+    const name = args[index];
+    const value = args[index + 1];
+    if (!name?.startsWith("--") || value === undefined) {
+      throw new Error(`invalid argument near ${name ?? "end of command"}`);
+    }
+    options.set(name.slice(2), value);
+  }
+  return options;
+}
+
+function required(options, name) {
+  const value = options.get(name)?.trim();
+  if (!value) throw new Error(`--${name} is required`);
+  return value;
+}
+
+export function normalizeTauriUpdate(manifest, release, repository, version) {
+  if (manifest.version !== version) {
+    throw new Error(
+      `updater manifest version ${manifest.version ?? "is missing"}; expected ${version}`,
+    );
+  }
+  if (release.tag_name !== `v${version}`) {
+    throw new Error(
+      `GitHub release tag ${release.tag_name ?? "is missing"}; expected v${version}`,
+    );
+  }
+  if (!manifest.platforms || typeof manifest.platforms !== "object") {
+    throw new Error("updater manifest has no platforms");
+  }
+
+  const assetsBySourceUrl = new Map();
+  const publicAssetUrls = new Set();
+  for (const asset of release.assets ?? []) {
+    if (!asset?.id || !asset?.name) continue;
+    const publicUrl = `https://github.com/${repository}/releases/download/v${version}/${encodeURIComponent(asset.name)}`;
+    assetsBySourceUrl.set(
+      `https://api.github.com/repos/${repository}/releases/assets/${asset.id}`,
+      publicUrl,
+    );
+    if (asset.browser_download_url) {
+      assetsBySourceUrl.set(asset.browser_download_url, publicUrl);
+    }
+    publicAssetUrls.add(publicUrl);
+  }
+
+  for (const [platform, entry] of Object.entries(manifest.platforms)) {
+    if (!entry?.signature || !entry?.url) {
+      throw new Error(`updater platform ${platform} is missing its URL or signature`);
+    }
+    const publicUrl = assetsBySourceUrl.get(entry.url) ?? entry.url;
+    if (!publicAssetUrls.has(publicUrl)) {
+      throw new Error(`updater platform ${platform} references an unknown release asset`);
+    }
+    entry.url = publicUrl;
+  }
+
+  return manifest;
+}
+
+async function main() {
+  const options = readOptions(process.argv.slice(2));
+  const manifestPath = resolve(required(options, "manifest"));
+  const releasePath = resolve(required(options, "release"));
+  const repository = required(options, "repository");
+  const version = required(options, "version").replace(/^v/, "");
+
+  if (!/^[^/\s]+\/[^/\s]+$/.test(repository)) {
+    throw new Error(`invalid GitHub repository: ${repository}`);
+  }
+  if (!/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/.test(version)) {
+    throw new Error(`invalid semantic version: ${version}`);
+  }
+
+  const manifest = JSON.parse(await readFile(manifestPath, "utf8"));
+  const release = JSON.parse(await readFile(releasePath, "utf8"));
+  const normalized = normalizeTauriUpdate(
+    manifest,
+    release,
+    repository,
+    version,
+  );
+  await writeFile(manifestPath, `${JSON.stringify(normalized, null, 2)}\n`);
+}
+
+if (
+  process.argv[1] &&
+  import.meta.url === pathToFileURL(resolve(process.argv[1])).href
+) {
+  main().catch((error) => {
+    console.error(error instanceof Error ? error.message : String(error));
+    process.exitCode = 1;
+  });
+}

.github/workflows/release.yml

@@ -206,7 +206,7 @@ jobs:
         env:
           VERSION: ${{ needs.prepare.outputs.version }}
         run: |
-          node scripts/release/generate-legacy-update.mjs \
+          node .github/scripts/generate-legacy-update.mjs \
             --version "${VERSION}" \
             --repository "${GITHUB_REPOSITORY}" \
             --assets-dir legacy-update \
@@ -231,7 +231,7 @@ jobs:
             -H "Accept: application/octet-stream" \
             "repos/${GITHUB_REPOSITORY}/releases/assets/${asset_id}" \
             > tauri-update/latest.json
-          node scripts/release/normalize-tauri-update.mjs \
+          node .github/scripts/normalize-tauri-update.mjs \
             --manifest tauri-update/latest.json \
             --release tauri-update/release.json \
             --repository "${GITHUB_REPOSITORY}" \