Test builds: tool/dev_release.sh builds Linux here and publishes to a dev prerelease that dev builds update from

X.Y.Z-dev.N builds read the dev prerelease's manifest as well as the
stable one and take the newer, so a tester gets each test build through
the normal update and lands back on stable at the release.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

tool/dev_release.sh

@@ -0,0 +1,73 @@
+#!/usr/bin/env bash
+# Build a Linux test build here and publish it to the `dev` prerelease on
+# Gitea, where dev builds update from (see Updater in docs/ARCHITECTURE.md).
+# No tag push, no CI, no commit: the working tree is built as it is.
+# Usage: tool/dev_release.sh [--no-publish]
+# Version: the next patch after the pubspec's, `-dev.N`, N one past the
+# published dev build of that patch (1.1.2 -> 1.1.3-dev.1, -dev.2, ...).
+# Token: RELEASE_TOKEN, else the file ~/.config/watch-together-release-token
+# (a Gitea access token with repository read/write; keep the file 0600).
+# Prints the one-time command that moves a stable install onto test builds.
+set -euo pipefail
+
+PUBLISH=1
+for arg in "$@"; do
+  case "$arg" in
+    --no-publish) PUBLISH=0 ;;
+    *) echo "usage: $0 [--no-publish]" >&2; exit 1 ;;
+  esac
+done
+TOKEN_FILE="$HOME/.config/watch-together-release-token"
+if [[ -z "${RELEASE_TOKEN:-}" && -f "$TOKEN_FILE" ]]; then
+  RELEASE_TOKEN="$(tr -d '[:space:]' <"$TOKEN_FILE")"; export RELEASE_TOKEN
+fi
+if [[ "$PUBLISH" == "1" && -z "${RELEASE_TOKEN:-}" ]]; then
+  echo "error: set RELEASE_TOKEN or write $TOKEN_FILE (or pass --no-publish)" >&2; exit 1
+fi
+
+ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+BASE_URL="https://git.senkochan.moe/Foxyz/sync_replay_project/releases/download/dev"
+
+PUB="$(sed -n 's/^version: \([0-9.]*\).*/\1/p' "$ROOT/apps/desktop/pubspec.yaml")"
+IFS=. read -r MA MI PA <<<"$PUB"
+NEXT="$MA.$MI.$((PA + 1))"
+LAST="$(curl -fsSL "$BASE_URL/manifest.json" 2>/dev/null |
+  python3 -I -c 'import json,sys; print(json.load(sys.stdin)["version"])' 2>/dev/null || true)"
+N=1
+if [[ "$LAST" == "$NEXT-dev."* ]]; then N=$(( ${LAST##*-dev.} + 1 )); fi
+export VERSION="$NEXT-dev.$N"
+echo "building $VERSION (last published: ${LAST:-none})"
+
+"$ROOT/tool/package_linux.sh" --no-upload
+TARBALL="$ROOT/dist/watch-together-$VERSION-linux-x64.tar.gz"
+[[ -f "$TARBALL" ]] || { echo "error: $TARBALL missing" >&2; exit 1; }
+
+NOTES="$(git -C "$ROOT" log -1 --format=%s)"
+[[ -n "$(git -C "$ROOT" status --porcelain --untracked-files=no)" ]] && NOTES="$NOTES (+ uncommitted changes)"
+MANIFEST="$ROOT/dist/manifest.json"
+MANIFEST_VER="$VERSION" \
+MANIFEST_PROTO="$(sed -n 's/.*protoVersion = \([0-9]*\).*/\1/p' "$ROOT/packages/core/lib/src/constants.dart")" \
+MANIFEST_URL="$BASE_URL/$(basename "$TARBALL")" \
+MANIFEST_SHA="$(sha256sum "$TARBALL" | cut -d' ' -f1)" \
+MANIFEST_NOTES="Test build: $NOTES" \
+python3 -I - "$MANIFEST" <<'EOF'
+import json, os, sys
+e = os.environ
+url = e['MANIFEST_URL']
+with open(sys.argv[1], 'w') as f:
+    json.dump({'version': e['MANIFEST_VER'], 'protocol': int(e['MANIFEST_PROTO']),
+               'url': url, 'sha256': e['MANIFEST_SHA'], 'notes': e['MANIFEST_NOTES'],
+               'assets': {'linux-x64': url}}, f, indent=2)
+EOF
+
+if [[ "$PUBLISH" != "1" ]]; then
+  echo "built $TARBALL (not published)"; exit 0
+fi
+dart "$ROOT/tool/release_publish.dart" dev "$TARBALL" "$MANIFEST"
+
+cat <<EOF
+
+Published $VERSION. Dev builds pick it up with their next update check.
+A stable install moves onto test builds once: with the app open, run (bash)
+  p=\$(pgrep -xo watch_together) && d=\$(dirname "\$(readlink /proc/\$p/exe)") && t=\$(mktemp -d) && curl -fsSL $BASE_URL/$(basename "$TARBALL") | tar -xz -C "\$t" --strip-components=1 && cp -rf --remove-destination "\$t"/. "\$d"/ && rm -rf "\$t" && echo "Done: restart the app." || echo "Failed: is the app open?"
+EOF