chore: release v0.3.9

.github/workflows/binaries.yml

@@ -107,6 +107,13 @@ jobs:
           chmod +x packaging/build_appimage.sh
           ./packaging/build_appimage.sh dist/${{ matrix.artifact_name }}
 
+      - name: Validate Linux release artifacts
+        if: matrix.os == 'ubuntu-22.04'
+        shell: bash
+        run: |
+          chmod +x scripts/validate-release-artifacts.sh
+          ./scripts/validate-release-artifacts.sh
+
       - name: Build Flatpak (Linux)
         if: matrix.os == 'ubuntu-22.04'
         run: |

pyproject.toml

@@ -14,7 +14,7 @@ voxvera = ["templates/**", "src/**", "resources/**", "locales/**", "resources/bi
 
 [project]
 name = "voxvera"
-version = "0.3.8"
+version = "0.3.9"
 description = "VoxVera CLI utilities"
 readme = "README.md"
 authors = [{name = "VoxVera"}]

scripts/validate-release-artifacts.sh

@@ -0,0 +1,110 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+cd "$(dirname "$0")/.."
+
+ARCH="${ARCH_OVERRIDE:-$(uname -m)}"
+if [[ "$ARCH" == "x86_64" ]]; then
+  DEB_ARCH="amd64"
+else
+  DEB_ARCH="$ARCH"
+fi
+
+DEB_PATH="${1:-voxvera/resources/bin/voxvera_$(python3 - <<'PY'
+from voxvera import __version__
+print(__version__)
+PY
+)_${DEB_ARCH}.deb}"
+APPIMAGE_PATH="${2:-voxvera/resources/bin/VoxVera-${ARCH}.AppImage}"
+
+tmpdir="$(mktemp -d)"
+cleanup() {
+  rm -rf "$tmpdir"
+}
+trap cleanup EXIT
+
+json_get() {
+  local file="$1"
+  local key="$2"
+  python3 - "$file" "$key" <<'PY'
+import json
+import sys
+
+path = sys.argv[2].split(".")
+data = json.load(open(sys.argv[1], "r", encoding="utf-8"))
+for part in path:
+    data = data[part]
+if isinstance(data, list):
+    print("\n".join(str(item) for item in data))
+else:
+    print(data)
+PY
+}
+
+require_non_empty_json_field() {
+  local file="$1"
+  local key="$2"
+  local value
+  value="$(json_get "$file" "$key")"
+  if [[ -z "${value// }" ]]; then
+    echo "Expected non-empty JSON field '$key' in $file" >&2
+    exit 1
+  fi
+}
+
+echo "Validating Debian artifact: $DEB_PATH"
+if [[ ! -f "$DEB_PATH" ]]; then
+  echo "Debian package not found: $DEB_PATH" >&2
+  exit 1
+fi
+
+mkdir -p "$tmpdir/deb-root" "$tmpdir/deb-data"
+dpkg-deb -x "$DEB_PATH" "$tmpdir/deb-root"
+
+if [[ ! -x "$tmpdir/deb-root/usr/bin/voxvera" ]]; then
+  echo "Packaged voxvera binary missing from .deb payload" >&2
+  exit 1
+fi
+
+VOXVERA_DIR="$tmpdir/deb-data" \
+  "$tmpdir/deb-root/usr/bin/voxvera" \
+  --config "$tmpdir/deb-data/config.json" \
+  init --non-interactive
+
+if [[ ! -f "$tmpdir/deb-data/config.json" ]]; then
+  echo ".deb validation failed: config.json was not created" >&2
+  exit 1
+fi
+
+if [[ ! -f "$tmpdir/deb-data/host/voxvera/index.html" ]]; then
+  echo ".deb validation failed: built site missing index.html" >&2
+  exit 1
+fi
+
+echo "Validating AppImage artifact: $APPIMAGE_PATH"
+if [[ ! -f "$APPIMAGE_PATH" ]]; then
+  echo "AppImage not found: $APPIMAGE_PATH" >&2
+  exit 1
+fi
+
+chmod +x "$APPIMAGE_PATH"
+"$APPIMAGE_PATH" platform-status --json > "$tmpdir/platform-status.json"
+require_non_empty_json_field "$tmpdir/platform-status.json" "tier_description"
+require_non_empty_json_field "$tmpdir/platform-status.json" "hosting_model"
+
+VOXVERA_DIR="$tmpdir/appimage-data" \
+  "$APPIMAGE_PATH" \
+  --config "$tmpdir/appimage-data/config.json" \
+  init --non-interactive
+
+if [[ ! -f "$tmpdir/appimage-data/config.json" ]]; then
+  echo "AppImage validation failed: config.json was not created" >&2
+  exit 1
+fi
+
+if [[ ! -f "$tmpdir/appimage-data/host/voxvera/index.html" ]]; then
+  echo "AppImage validation failed: built site missing index.html" >&2
+  exit 1
+fi
+
+echo "Release artifact validation passed."

tests/test_integrity.py

@@ -64,6 +64,18 @@ def test_frozen_builds_bundle_support_matrix():
     assert '--add-data "support-matrix.json:."' in build_script
     assert '--add-data "support-matrix.json${SEP}."' in binaries_workflow
 
+
+def test_release_artifact_validation_is_wired_into_binaries_workflow():
+    validation_script = REPO_ROOT / "scripts" / "validate-release-artifacts.sh"
+    binaries_workflow = (REPO_ROOT / ".github" / "workflows" / "binaries.yml").read_text(encoding="utf-8")
+    script_text = validation_script.read_text(encoding="utf-8")
+
+    assert validation_script.exists()
+    assert "scripts/validate-release-artifacts.sh" in binaries_workflow
+    assert "dpkg-deb -x" in script_text
+    assert "platform-status --json" in script_text
+    assert "init --non-interactive" in script_text
+
 def test_locale_completeness():
     """Verify that all non-English locales have the same keys as English."""
     locales_dir = REPO_ROOT / "voxvera" / "locales"

voxvera/__init__.py

@@ -1,7 +1,7 @@
 import sys
 from pathlib import Path
 
-__version__ = "0.3.8"
+__version__ = "0.3.9"
 
 # Add the vendor directory to sys.path ONLY for PyInstaller (frozen) builds.
 # For pip/pipx installs the system/venv packages are correct and the vendored

voxvera/cli.py

@@ -2076,7 +2076,8 @@ def main(argv=None):
         if args.template:
             copy_template(args.template)
             return
-        elif not args.non_interactive:
+        ensure_config_exists(config_path)
+        if not args.non_interactive:
             interactive_update(config_path)
         build_assets(config_path)
     elif args.command == "build":