yunchan/d3ro-voice
1
0
Fork 0
Code Issues Pull requests Projects Releases 3 Packages Wiki Activity Actions

chore: remove duplicate copies of the site, download center and installers (WS-C)

Browse source 
The landing page, download pages, invite page, assetlinks and installers
existed in two or three places; only site/ and the Forgejo feed are served.

- apps/api-server/wwwroot: delete the stale site build, download/invite
  pages, .well-known copy, legacy static admin and 1.0.0 binaries. The API
  no longer serves static files (UseStaticFiles/fallbacks and the apk/zip
  blocker removed); the Next admin is the only admin UI.
- Delete 19 tracked installers/packages (~568 MiB) under site/public/releases,
  apps/web/public/releases and wwwroot/releases; .gitignore blocks them.
- apps/web: delete the download/releases pages, desktop-release.ts, the
  download.html and assetlinks copies, and the accept-invite page (invites
  are only issued to the site's /accept-invite/). e2e specs call the /app
  base path and check the /download redirect instead.
- scripts: delete the retired release/NAS site scripts, drop the web target
  from sync-version, and check assetlinks in site/public only.
- Delete the unused Dockerfile.admin (apps/admin/Dockerfile is used).

Policy: docs/REFACTOR_POLICY.md Wave 3, W3-5 and W3-6.
This commit is contained in:
Yun Chan 2026-09-26 15:48:52 +09:00
parent b6fe588a7c
commit cd9d199dbf
53 changed files with 43 additions and 3278 deletions
Download patch file Download diff file Expand all files Collapse all files

25
scripts/ci/verify-android-app-links.mjs
View file

@ -5,11 +5,8 @@ const PACKAGE_NAME = 'com.d3ro.voice'
const REQUIRED_RELATION = 'delegate_permission/common.handle_all_urls'
const LIVE_URL = 'https://d3ro.chanpaca.net/.well-known/assetlinks.json'
const COMPROMISED_SIGNER_SHA256 = '06eec757722ee7cd3dfbc53202d974aaf0417a7d397f9ef1e5611088ebb2e481'
const SOURCE_PATHS = [
'site/public/.well-known/assetlinks.json',
'apps/web/public/.well-known/assetlinks.json',
'apps/api-server/wwwroot/.well-known/assetlinks.json',
]
// The landing site (site/, Cloudflare Pages) is the only origin that serves assetlinks.
const SOURCE_PATH = 'site/public/.well-known/assetlinks.json'
const releaseIdentity = JSON.parse(
await readFile(resolve('release/android-release-identity.json'), 'utf8'),
)
@ -242,19 +239,9 @@ if (expectedFingerprint && expectedFingerprint === forbiddenUploadFingerprint) {
fail('play_and_upload_certificates_must_differ')
}
const sourceEvidence = []
for (const path of SOURCE_PATHS) {
const document = JSON.parse(await readFile(resolve(path), 'utf8'))
const fingerprints = fingerprintsFromDocument(document, path)
rejectUploadCertificateAssociation(fingerprints, forbiddenUploadFingerprint, path)
sourceEvidence.push({ path, fingerprints })
}
const canonicalFingerprints = sourceEvidence[0].fingerprints
for (const evidence of sourceEvidence.slice(1)) {
if (JSON.stringify(evidence.fingerprints) !== JSON.stringify(canonicalFingerprints)) {
fail(`source_fingerprint_drift_${evidence.path}`)
}
}
const sourceDocument = JSON.parse(await readFile(resolve(SOURCE_PATH), 'utf8'))
const canonicalFingerprints = fingerprintsFromDocument(sourceDocument, SOURCE_PATH)
rejectUploadCertificateAssociation(canonicalFingerprints, forbiddenUploadFingerprint, SOURCE_PATH)
if (expectedFingerprint && !canonicalFingerprints.includes(expectedFingerprint)) {
fail('release_certificate_missing_from_source_assetlinks')
}
@ -291,5 +278,5 @@ console.log(JSON.stringify({
playConsoleAppId: releaseIdentity.playConsoleAppId,
expectedPlayAppSigningCertificateVerified: true,
uploadCertificateExcluded: true,
sourcePaths: SOURCE_PATHS,
sourcePath: SOURCE_PATH,
}, null, 2))