Merge dev-talesam into main

.github/workflows/build-package.yml

@@ -11,33 +11,30 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      # - name: Send Hooks BigLinux Build Package
-      #   shell: bash
-      #   run: |
-      #     if [ -z "$(grep biglinux-package-template pkgbuild/PKGBUILD)" ];then
-      #       curl -X POST -H "Accept: application/json" -H "Authorization: token ${{ secrets.WEBHOOK_TOKEN }}" --data '{"event_type": "${{ github.repository }}", "client_payload": { "branch": "${{ github.ref_name }}", "url": "https://github.com/${{ github.repository }}"}}' https://api.github.com/repos/BigLinux-Package-Build/build-package/dispatches
-      #       curl -X POST -H "Accept: application/json" -H "Authorization: token ${{ secrets.WEBHOOK_TOKEN }}" --data '{"event_type": "${{ github.repository }}", "client_payload": { "branch": "${{ github.ref_name }}", "url": "https://github.com/${{ github.repository }}"}}' https://api.github.com/repos/BigLinux-Package-Build/build-package-ARM/dispatches
-      #     fi
-      #     curl -X POST "https://nebulaapi.nimbusnetwork.dev/webhook" \
-      #       -H "Authorization: token ${{ secrets.WEBHOOK_TOKEN }}" \
-      #       -H "Content-Type: application/json" \
-      #       -d '{
-      #             "event_type": "${{ github.repository }}",
-      #             "branch": "${{ github.ref_name }}",
-      #             "url": "https://github.com/${{ github.repository }}"
-      #           }'
-
-      # - name: Invoke deployment hook
-      #   uses: johannes-huther/webhook.sh@v1
-      #   env:
-      #     webhook_url: https://nebulaapi.nimbusnetwork.dev/webhook
-      #     webhook_secret: ${{ secrets.WEBHOOK_TOKEN }}
-      #     data: '{ "event_type": "${{ github.repository }}", "branch": "${{ github.ref_name }}", "url": "https://github.com/${{ github.repository }}"}'
-                  #xpto28
-
-
-
-
-
-
 
+      - name: Send Hooks BigLinux Build Package
+        shell: bash
+        # Secrets and context go through `env`, never interpolated into the
+        # script body: a `${{ }}` expansion inside `run` is substituted before
+        # bash sees the line, so a branch name containing quotes would break out
+        # of the string. This mirrors the form used by the other BigLinux repos.
+        env:
+          WEBHOOK_TOKEN: ${{ secrets.WEBHOOK_TOKEN }}
+          REPOSITORY: ${{ github.repository }}
+          REF_NAME: ${{ github.ref_name }}
+        run: |
+          # The template repo carries a placeholder PKGBUILD that must never be
+          # dispatched to the build farm. Note the path: `pkgbuild/PKGBUILD` is
+          # the organisation-wide convention, and this grep is exactly why the
+          # PKGBUILD cannot live anywhere else — it used to sit in
+          # `packaging/arch/`, where this check read a non-existent file.
+          if [ -z "$(grep biglinux-package-template pkgbuild/PKGBUILD)" ]; then
+            payload="{\"event_type\": \"${REPOSITORY}\", \"client_payload\": { \"branch\": \"${REF_NAME}\", \"url\": \"https://github.com/${REPOSITORY}\"}}"
+            for repo in build-package build-package-ARM; do
+              curl -X POST \
+                -H "Accept: application/json" \
+                -H "Authorization: token ${WEBHOOK_TOKEN}" \
+                --data "$payload" \
+                "https://api.github.com/repos/BigLinux-Package-Build/${repo}/dispatches"
+            done
+          fi

.gitignore

@@ -24,8 +24,13 @@ PLANNING.md
 .audit
 
 # Packaging build artifacts (makepkg $srcdir/$pkgdir mirror — regenerated by PKGBUILD prepare())
+pkgbuild/src/
+pkgbuild/pkg/
+pkgbuild/*.pkg.tar*
+# Legacy location, kept so a stale checkout does not resurrect these
 packaging/arch/src/
 packaging/arch/pkg/
+packaging/arch/*.pkg.tar*
 
 # Audit scratch (internal pipeline ledger — local only)
 tmp/

AGENTS.md

@@ -99,13 +99,13 @@ scripts/
 
 ## Packaging channels
 
-### Arch (`packaging/arch/PKGBUILD`)
+### Arch (`pkgbuild/PKGBUILD`)
 - Auto-detects a local working tree via `BASH_SOURCE[0]`; falls back to
   `git+${url}.git` when building without one.
 - Version = `$(date +%y.%m.%d)-$(date +%H%M)`, surfaced to the app via the
   `BIGLINUX_WEBAPPS_VERSION` env var at build time.
 - Mirrors the source into `$srcdir/$pkgname` via rsync with `target/`,
-  `.git/`, and `packaging/arch/{pkg,src}/` excluded — do not casually add
+  `.git/`, and `pkgbuild/{pkg,src}/` excluded — do not casually add
   new top-level dirs without extending the exclude list.
 
 ### Flatpak (`packaging/flatpak/br.com.biglinux.webapps.yml`)
@@ -150,9 +150,9 @@ That wraps:
 cargo fmt --check
 cargo clippy --workspace --all-targets --all-features -- -D warnings
 cargo test --workspace
-shellcheck biglinux-webapps/usr/bin/biglinux-webapps-systemd packaging/arch/PKGBUILD
-shfmt -d   biglinux-webapps/usr/bin/biglinux-webapps-systemd packaging/arch/PKGBUILD
-bash -n    biglinux-webapps/usr/bin/biglinux-webapps-systemd packaging/arch/PKGBUILD
+shellcheck biglinux-webapps/usr/bin/biglinux-webapps-systemd pkgbuild/PKGBUILD
+shfmt -d   biglinux-webapps/usr/bin/biglinux-webapps-systemd pkgbuild/PKGBUILD
+bash -n    biglinux-webapps/usr/bin/biglinux-webapps-systemd pkgbuild/PKGBUILD
 ```
 
 Warnings are failures. If the script is missing a tool, install it; do not

ARCHITECTURE.md

@@ -113,7 +113,7 @@ executables are rejected at validation time (INVARIANTS — security).
 
 ## 8. Packaging
 
-`packaging/arch/PKGBUILD`: declares `pkgname=biglinux-webapps`, depends on
+`pkgbuild/PKGBUILD`: declares `pkgname=biglinux-webapps`, depends on
 `gtk4`, `libadwaita`, `webkitgtk-6.0`, `xdg-utils`, `desktop-file-utils`;
 makedepends on `rust`, `cargo`, `gettext`. Local-source detection prefers
 the workspace checkout (`BIGLINUX_WEBAPPS_LOCAL_SOURCE` env, or `Cargo.toml +