chore(migration): repoint every published link off GitHub
The canonical repo is git.zacharyzhang.com now, so every URL a user can actually reach had to move with it. Self-updater: `PRODUCTION_ENDPOINTS.update_base_url` targets Gitea's `/api/v1/repos/.../releases`, which serves the same wire format GitHub's releases API did — `Release`/asset deserialisation is unchanged. The alpha channel requests `?per_page=30&limit=30` because GitHub reads the page size from `per_page` and Gitea from `limit`, and each ignores the other's, so one URL stays correct on either. Installers: same API base, and the documented one-liners become `https://kigicli.dev/install.{sh,ps1}`. That domain's Worker proxies both files from Gitea raw `main`, so the published install command survives any future forge move without being reprinted everywhere. install.ps1 also drops the GitHub-specific `Accept: application/vnd.github+json`. Everything else user-facing: `/feedback` and the shell's feedback fallback point at the Gitea issue tracker, `/docs` at the Gitea-rendered README, and web_fetch's User-Agent at kigicli.dev. SECURITY.md now routes reports to the issue tracker with a warning to withhold exploitable detail, because Gitea has no equivalent of GitHub's private vulnerability reporting. Comments naming `.github/workflows/release.yml` name `.gitea/` now. Tests assert against these constants rather than literal URLs, so they follow automatically; the one URL-shape assertion (production endpoints are https) still holds. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
This commit is contained in:
1 parent
8bdfb551b6
commit
9fb82291b2
12 files changed
+68
-56
No files matched your search
@@ -29,17 +29,18 @@ const MSG_AUTO_UPDATE_BACKGROUND: &str = "Auto-update running in background.";
|
||||
const MSG_RUN_UPDATE_MANUAL: &str = "Run `kigi update` to get the latest version.";
|
||||
|
||||
/// Manual-install one-liner for this platform's bootstrap installer
|
||||
/// (install.sh / install.ps1 hosted at the repo root, PRD F8).
|
||||
/// (install.sh / install.ps1, PRD F8). Served from kigicli.dev rather than the
|
||||
/// repo host directly, so the published command survives a forge migration.
|
||||
fn manual_install_cmd() -> &'static str {
|
||||
if cfg!(windows) {
|
||||
"irm https://raw.githubusercontent.com/ZacharyZhang-NY/Kigi-CLI/main/install.ps1 | iex"
|
||||
"irm https://kigicli.dev/install.ps1 | iex"
|
||||
} else {
|
||||
"curl -fsSL https://raw.githubusercontent.com/ZacharyZhang-NY/Kigi-CLI/main/install.sh | sh"
|
||||
"curl -fsSL https://kigicli.dev/install.sh | sh"
|
||||
}
|
||||
}
|
||||
|
||||
/// Build a reinstall hint for a known installer type. Every installer is
|
||||
/// "internal" (GitHub Releases) today; the parameter survives so the hint
|
||||
/// "internal" (the repo's Releases) today; the parameter survives so the hint
|
||||
/// stays correct if another backend ever returns.
|
||||
fn reinstall_hint(_installer: &str) -> String {
|
||||
format!("Please reinstall via:\n {}", manual_install_cmd())
|
||||
@@ -694,7 +695,7 @@ pub(crate) fn detect_platform() -> Result<(&'static str, &'static str)> {
|
||||
|
||||
/// Rust target triple for this build — the key that maps a platform to its
|
||||
/// release-asset name. Must stay in lockstep with the five targets built by
|
||||
/// `.github/workflows/release.yml` and the tables in install.sh/install.ps1.
|
||||
/// `.gitea/workflows/release.yml` and the tables in install.sh/install.ps1.
|
||||
pub(crate) fn target_triple() -> Result<&'static str> {
|
||||
let triple = if cfg!(all(target_os = "macos", target_arch = "aarch64")) {
|
||||
"aarch64-apple-darwin"
|
||||
@@ -2604,19 +2605,19 @@ mod tests {
|
||||
// reinstall_hint / manual_install_cmd
|
||||
|
||||
#[test]
|
||||
fn test_reinstall_hint_points_at_repo_install_script() {
|
||||
fn test_reinstall_hint_points_at_published_install_script() {
|
||||
let hint = reinstall_hint("internal");
|
||||
if cfg!(windows) {
|
||||
assert!(hint.contains("irm"), "should suggest irm install: {hint}");
|
||||
assert!(
|
||||
hint.contains("ZacharyZhang-NY/Kigi-CLI/main/install.ps1"),
|
||||
"should reference the repo's install.ps1: {hint}"
|
||||
hint.contains("kigicli.dev/install.ps1"),
|
||||
"should reference the published install.ps1: {hint}"
|
||||
);
|
||||
} else {
|
||||
assert!(hint.contains("curl"), "should suggest curl install: {hint}");
|
||||
assert!(
|
||||
hint.contains("ZacharyZhang-NY/Kigi-CLI/main/install.sh"),
|
||||
"should reference the repo's install.sh: {hint}"
|
||||
hint.contains("kigicli.dev/install.sh"),
|
||||
"should reference the published install.sh: {hint}"
|
||||
);
|
||||
}
|
||||
// Unknown installers fall back to the same hint.
|
||||
@@ -2652,7 +2653,7 @@ mod tests {
|
||||
#[cfg(any(target_arch = "x86_64", target_arch = "aarch64"))]
|
||||
#[test]
|
||||
fn test_release_asset_name_matches_release_workflow_naming() {
|
||||
// Must stay in lockstep with .github/workflows/release.yml, which
|
||||
// Must stay in lockstep with .gitea/workflows/release.yml, which
|
||||
// publishes kigi-<version>-<target-triple>.{tar.gz|zip}.
|
||||
let triple = target_triple().unwrap();
|
||||
assert!(
|
||||
|
||||
@@ -8,9 +8,9 @@ use kigi_shell::util::kigi_home::kigi_home;
|
||||
|
||||
const TTL_SECONDS_BEFORE_AUTO_UPDATE: Duration = Duration::from_secs(60 * 30);
|
||||
|
||||
/// Release channel: this repo's GitHub Releases (PRD F8). The API base is
|
||||
/// resolved through [`kigi_env::update_base_url`] — production default
|
||||
/// `https://api.github.com/repos/ZacharyZhang-NY/Kigi-CLI/releases`,
|
||||
/// Release channel: this repo's Releases (PRD F8). The API base is resolved
|
||||
/// through [`kigi_env::update_base_url`] — production default
|
||||
/// `https://git.zacharyzhang.com/api/v1/repos/ZacharyZhang-NY/Kigi-CLI/releases`,
|
||||
/// overridable via `KIGI_UPDATE_BASE_URL` for mirrors and tests.
|
||||
pub(crate) fn update_base_url() -> String {
|
||||
kigi_env::update_base_url()
|
||||
@@ -167,16 +167,19 @@ async fn fetch_github_json<T: serde::de::DeserializeOwned>(url: &str) -> Result<
|
||||
|
||||
/// Latest release for `channel` from a GitHub-Releases-shaped API at `base`.
|
||||
///
|
||||
/// - `stable` / `enterprise`: `GET {base}/latest` — GitHub's "latest" already
|
||||
/// excludes drafts and pre-releases.
|
||||
/// - `alpha`: `GET {base}?per_page=30` (newest first) and take the semver-max
|
||||
/// non-draft entry. The list includes both pre-releases and stable
|
||||
/// releases, so this preserves the max(alpha, stable) channel semantics —
|
||||
/// alpha users are never stuck behind a newer stable.
|
||||
/// - `stable` / `enterprise`: `GET {base}/latest` — "latest" already excludes
|
||||
/// drafts and pre-releases on both GitHub and Gitea.
|
||||
/// - `alpha`: `GET {base}?per_page=30&limit=30` (newest first) and take the
|
||||
/// semver-max non-draft entry. The list includes both pre-releases and
|
||||
/// stable releases, so this preserves the max(alpha, stable) channel
|
||||
/// semantics — alpha users are never stuck behind a newer stable. GitHub
|
||||
/// reads the page size from `per_page` and Gitea from `limit`; each ignores
|
||||
/// the other's parameter, so sending both keeps one URL valid on either.
|
||||
pub async fn fetch_latest_release_from_base(channel: &str, base: &str) -> Result<Release> {
|
||||
let base = base.trim_end_matches('/');
|
||||
if channel == "alpha" {
|
||||
let releases: Vec<Release> = fetch_github_json(&format!("{base}?per_page=30")).await?;
|
||||
let releases: Vec<Release> =
|
||||
fetch_github_json(&format!("{base}?per_page=30&limit=30")).await?;
|
||||
return releases
|
||||
.into_iter()
|
||||
.filter(|r| !r.draft)
|
||||
|
||||
Reference in new issue
Block a user