Package MathScrap for Windows and Android, with logs, bilingual UI, and CI

.github/workflows/package-ios.yml

@@ -0,0 +1,57 @@
+name: package-ios
+
+# Manual only. A macOS runner is required and this file does not run on push.
+on:
+  workflow_dispatch:
+    inputs:
+      target:
+        description: simulator builds a .app for the iOS Simulator. device exports an IPA only when signing secrets are set.
+        type: choice
+        options:
+          - simulator
+          - device
+        default: simulator
+
+permissions:
+  contents: read
+
+jobs:
+  ios:
+    runs-on: macos-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: dtolnay/rust-toolchain@stable
+        with:
+          toolchain: 1.90.0
+          targets: aarch64-apple-ios,aarch64-apple-ios-sim,x86_64-apple-ios
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 22
+          cache: npm
+      - uses: Swatinem/rust-cache@v2
+        with:
+          workspaces: src-tauri
+      - name: CocoaPods
+        run: brew install cocoapods
+      - run: npm ci
+      - name: Simulator app
+        if: inputs.target == 'simulator'
+        run: bash scripts/package-ios.sh --simulator
+      - name: Signed IPA
+        if: inputs.target == 'device'
+        env:
+          IOS_CERTIFICATE: ${{ secrets.IOS_CERTIFICATE }}
+          IOS_CERTIFICATE_PASSWORD: ${{ secrets.IOS_CERTIFICATE_PASSWORD }}
+          IOS_MOBILE_PROVISION: ${{ secrets.IOS_MOBILE_PROVISION }}
+          APPLE_API_ISSUER: ${{ secrets.APPLE_API_ISSUER }}
+          APPLE_API_KEY: ${{ secrets.APPLE_API_KEY }}
+          APPLE_API_KEY_PATH: ${{ secrets.APPLE_API_KEY_PATH }}
+        run: bash scripts/package-ios.sh --device
+      - uses: actions/upload-artifact@v4
+        if: always() && hashFiles('packaging/out/**') != ''
+        with:
+          name: mathscrap-ios
+          path: |
+            packaging/out/*
+            src-tauri/gen/apple/**/*.app
+          if-no-files-found: warn

.github/workflows/package.yml

@@ -0,0 +1,194 @@
+name: package
+
+on:
+  push:
+    branches:
+      - cursor/mathscrap-packaging-*
+  pull_request:
+    branches:
+      - main
+  workflow_dispatch:
+    inputs:
+      sign_windows:
+        description: Import WINDOWS_CERTIFICATE and sign the EXE
+        type: boolean
+        default: false
+      sign_android:
+        description: Sign the release APK with ANDROID_KEY_* 
+        type: boolean
+        default: false
+
+permissions:
+  contents: read
+
+concurrency:
+  group: package-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 22
+          cache: npm
+      - uses: dtolnay/rust-toolchain@stable
+        with:
+          toolchain: 1.90.0
+      - uses: Swatinem/rust-cache@v2
+        with:
+          workspaces: crates/mathcore
+      - name: Chrome for sheet end-to-end
+        run: |
+          if ! command -v google-chrome >/dev/null 2>&1 && ! command -v google-chrome-stable >/dev/null 2>&1; then
+            sudo apt-get update
+            wget -q -O /tmp/chrome.deb https://dl.google.com/linux/direct/google-chrome-stable_current_amd64.deb
+            sudo apt-get install -y /tmp/chrome.deb
+          fi
+          (google-chrome --version || google-chrome-stable --version)
+      - run: npm ci
+      - run: npm run lint
+      - run: npm run test:rust
+      - run: npm run smoke
+      - run: npm run smoke:ocr
+      - run: npm run smoke:ai
+      - run: npm run test:pack
+      - name: Start the dev server
+        run: |
+          npm run dev > dev-server.log 2>&1 &
+          echo $! > dev-server.pid
+          for _ in $(seq 1 40); do
+            if curl -sf http://127.0.0.1:47321/ >/dev/null; then
+              exit 0
+            fi
+            sleep 2
+          done
+          echo "dev server did not start"
+          cat dev-server.log
+          exit 1
+      - name: Sheet end-to-end
+        env:
+          SHOTS: e2e-shots
+        run: npm run e2e:sheet
+      - name: Per-formula plot end-to-end
+        env:
+          SHOTS: e2e-plots
+        run: npm run e2e
+      - name: Upload failure logs
+        if: failure()
+        uses: actions/upload-artifact@v4
+        with:
+          name: mathscrap-test-failure
+          path: |
+            e2e-shots
+            e2e-plots
+            dev-server.log
+          if-no-files-found: ignore
+
+  web:
+    needs: test
+    if: github.event_name != 'pull_request'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 22
+          cache: npm
+      - run: npm ci
+      - run: npm run pack:web
+      - uses: actions/upload-artifact@v4
+        with:
+          name: mathscrap-web-dist
+          path: dist
+          if-no-files-found: error
+
+  android:
+    needs: test
+    if: github.event_name != 'pull_request'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-java@v4
+        with:
+          distribution: temurin
+          java-version: 17
+      - uses: dtolnay/rust-toolchain@stable
+        with:
+          toolchain: 1.90.0
+          targets: aarch64-linux-android,armv7-linux-androideabi,i686-linux-android,x86_64-linux-android
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 22
+          cache: npm
+      - uses: Swatinem/rust-cache@v2
+        with:
+          workspaces: src-tauri
+      - run: npm ci
+      - name: Debug APK
+        if: github.event_name != 'workflow_dispatch' || inputs.sign_android == false
+        run: bash scripts/package-android.sh --debug --install-sdk
+      - name: Release APK
+        if: github.event_name == 'workflow_dispatch' && inputs.sign_android
+        env:
+          ANDROID_KEY_ALIAS: ${{ secrets.ANDROID_KEY_ALIAS }}
+          ANDROID_KEY_PASSWORD: ${{ secrets.ANDROID_KEY_PASSWORD }}
+          ANDROID_KEY_BASE64: ${{ secrets.ANDROID_KEY_BASE64 }}
+        run: bash scripts/package-android.sh --release --install-sdk
+      - uses: actions/upload-artifact@v4
+        with:
+          name: mathscrap-android
+          path: |
+            packaging/out/*.apk
+            packaging/out/SHA256SUMS
+          if-no-files-found: error
+
+  windows:
+    needs: test
+    if: github.event_name != 'pull_request'
+    runs-on: windows-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: dtolnay/rust-toolchain@stable
+        with:
+          toolchain: 1.90.0
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 22
+          cache: npm
+      - uses: Swatinem/rust-cache@v2
+        with:
+          workspaces: src-tauri
+      - run: npm ci
+      - name: Import Authenticode certificate
+        if: github.event_name == 'workflow_dispatch' && inputs.sign_windows
+        shell: pwsh
+        env:
+          WINDOWS_CERTIFICATE: ${{ secrets.WINDOWS_CERTIFICATE }}
+          WINDOWS_CERTIFICATE_PASSWORD: ${{ secrets.WINDOWS_CERTIFICATE_PASSWORD }}
+        run: |
+          if ([string]::IsNullOrEmpty($env:WINDOWS_CERTIFICATE) -or [string]::IsNullOrEmpty($env:WINDOWS_CERTIFICATE_PASSWORD)) {
+            Write-Error "sign_windows was set but WINDOWS_CERTIFICATE or WINDOWS_CERTIFICATE_PASSWORD is empty."
+            exit 1
+          }
+          New-Item -ItemType Directory -Force -Path certificate | Out-Null
+          Set-Content -Path certificate/tempCert.txt -Value $env:WINDOWS_CERTIFICATE
+          certutil -decode certificate/tempCert.txt certificate/certificate.pfx | Out-Null
+          Remove-Item certificate/tempCert.txt
+          $secure = ConvertTo-SecureString -String $env:WINDOWS_CERTIFICATE_PASSWORD -Force -AsPlainText
+          $imported = Import-PfxCertificate -FilePath certificate/certificate.pfx -CertStoreLocation Cert:\CurrentUser\My -Password $secure
+          "WINDOWS_CERTIFICATE_THUMBPRINT=$($imported.Thumbprint)" | Out-File -FilePath $env:GITHUB_ENV -Append -Encoding utf8
+          Remove-Item -Recurse -Force certificate
+      - name: Unsigned or signed installer
+        shell: bash
+        run: bash scripts/package-windows.sh
+      - uses: actions/upload-artifact@v4
+        with:
+          name: mathscrap-windows
+          path: |
+            packaging/out/*.exe
+            packaging/out/*.msi
+            packaging/out/SHA256SUMS
+          if-no-files-found: error

.gitignore

@@ -34,3 +34,15 @@ ASTER_BG_TASK.md
 edge-mathscrap.png
 screen-check.png
 
+# native shells (generated) and local package output
+src-tauri/target
+src-tauri/gen
+packaging/out
+
+# signing material — never commit
+*.keystore
+*.jks
+*.p12
+*.mobileprovision
+keystore.properties
+