Release 1.0.5

.claude/commands/bump-version.md

@@ -56,10 +56,6 @@ Correct flow:
       - Use the `mcp__time__get_current_time` MCP tool with timezone `America/New_York` to get accurate timestamp
       - Format: `**Last Updated:** YYYY-MM-DD HH:mm ET (America/New_York)`
 
-   d. **docs/README.md**:
-      - Update any version references in user-facing documentation
-      - Update download links similar to main README.md
-
 5. **Summary**:
    - Show the user which files were updated
    - Display old version → new version
@@ -71,22 +67,22 @@ Correct flow:
 ```
 Current: 1.0.3-alpha.1
 New:     1.0.3-alpha.2
-Updated: package.json, README.md (alpha link), CLAUDE.md timestamp, docs/README.md
+Updated: package.json, README.md (alpha link), CLAUDE.md timestamp
 ```
 
 **Stable Release:**
 ```
 Current: 1.0.3-alpha.5
 Confirm: Ready to release 1.0.3 stable? [User confirms]
 New:     1.0.3
-Updated: package.json, README.md (stable link), CLAUDE.md timestamp, docs/README.md
+Updated: package.json, README.md (stable link), CLAUDE.md timestamp
 ```
 
 **After Stable → Next Alpha:**
 ```
 Current: 1.0.3
 New:     1.0.4-alpha.1
-Updated: package.json, README.md (alpha link), CLAUDE.md timestamp, docs/README.md
+Updated: package.json, README.md (alpha link), CLAUDE.md timestamp
 ```
 
 ## Validation

.gitattributes

@@ -0,0 +1,5 @@
+# Shell scripts and Linux packaging data must keep LF endings regardless of the checkout platform.
+# With core.autocrlf=true on Windows these files would otherwise be checked out with CRLF, and a
+# packaged postinst starting with `#!/bin/bash\r` fails on Linux with "bad interpreter".
+*.sh text eol=lf
+assets/linux/apparmor-profile text eol=lf

.github/workflows/ci.yml

@@ -0,0 +1,138 @@
+name: CI
+
+on:
+  push:
+    branches: [main, alpha]
+  pull_request:
+    branches: [main, alpha]
+  workflow_dispatch:
+    inputs:
+      emulator-ref:
+        description: 'flashforge-emulator-v2 git ref to run the E2E track against'
+        required: false
+        default: 'v0.4.0'
+        type: string
+
+concurrency:
+  group: ci-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  verify:
+    name: Type-check, lint, build, test
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout FlashForgeUI
+        uses: actions/checkout@v4
+
+      - name: Setup pnpm
+        uses: pnpm/action-setup@v4
+        with:
+          version: 10.23.0
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 22
+          cache: 'pnpm'
+
+
+      - name: Install dependencies
+        shell: bash
+        run: pnpm install --frozen-lockfile
+
+      - name: Type check
+        run: pnpm type-check
+
+      - name: Lint
+        run: pnpm lint
+
+      - name: Build (main + renderer + webui)
+        run: pnpm build
+
+      - name: Unit tests
+        run: pnpm test
+
+  e2e-emulator:
+    name: E2E (emulator + WebUI)
+    runs-on: ubuntu-latest
+    needs: verify
+    steps:
+      - name: Checkout FlashForgeUI
+        uses: actions/checkout@v4
+
+      # The emulator lives in a separate public repo and provides the printers this
+      # track drives, so no real hardware is needed. Pinned to a release tag so an
+      # emulator change cannot silently break or silently change this CI; bump the
+      # tag (or dispatch with emulator-ref) to pick up a new emulator release.
+      - name: Checkout flashforge-emulator-v2
+        uses: actions/checkout@v4
+        with:
+          repository: GhostTypes/flashforge-emulator-v2
+          ref: ${{ inputs.emulator-ref || 'v0.4.0' }}
+          path: emulator
+
+      - name: Setup pnpm
+        uses: pnpm/action-setup@v4
+        with:
+          version: 10.23.0
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 22
+          cache: 'pnpm'
+
+
+      - name: Install dependencies
+        shell: bash
+        run: pnpm install --frozen-lockfile
+
+      - name: Install emulator dependencies
+        working-directory: emulator
+        run: npm ci
+        env:
+          # Only the emulator's headless runtime is used here; skip the ~110 MB
+          # Electron binary download. The app-under-test gets its Electron from
+          # this repo's node_modules, not the emulator's.
+          ELECTRON_SKIP_BINARY_DOWNLOAD: '1'
+
+      # The browser track needs the chromium binary itself, not just its system libraries.
+      - name: Install Playwright chromium
+        run: pnpm exec playwright install --with-deps chromium
+
+      # Electron refuses to start if its SUID sandbox helper is not root-owned and
+      # setuid, which is how pnpm unpacks it. Fixing the binary keeps the app launching
+      # exactly as it does for users, rather than weakening it with --no-sandbox.
+      - name: Enable the Electron sandbox helper
+        run: |
+          ELECTRON_DIR="$(dirname "$(node -p "require('electron')")")"
+          sudo chown root:root "$ELECTRON_DIR/chrome-sandbox"
+          sudo chmod 4755 "$ELECTRON_DIR/chrome-sandbox"
+
+      # The suite drives a real Electron window, so CI needs a virtual display.
+      - name: Run emulator E2E track
+        run: xvfb-run --auto-servernum --server-args="-screen 0 1920x1080x24" pnpm test:e2e:electron:emulator
+        env:
+          FF_EMULATOR_ROOT: ${{ github.workspace }}/emulator
+
+      # Browser coverage of the WebUI. It launches the real app with --headless against the
+      # same emulator, so it needs Electron and a display too - hence this job rather than
+      # the fast verify one. Runs even if the Electron track failed, since the two cover
+      # different surfaces and one failing should not hide the other.
+      - name: Run WebUI browser E2E
+        if: success() || failure()
+        run: xvfb-run --auto-servernum --server-args="-screen 0 1920x1080x24" pnpm test:e2e
+        env:
+          FF_EMULATOR_ROOT: ${{ github.workspace }}/emulator
+
+      - name: Upload Playwright artifacts
+        if: failure()
+        uses: actions/upload-artifact@v4
+        with:
+          name: playwright-e2e-artifacts
+          path: |
+            test-results/
+            playwright-report/
+          retention-days: 7
+          if-no-files-found: ignore

.github/workflows/release.yml

@@ -13,13 +13,46 @@ on:
         default: false
 
 jobs:
+  verify:
+    name: Verify (type-check, lint, test)
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout FlashForgeUI
+        uses: actions/checkout@v4
+
+      - name: Setup pnpm
+        uses: pnpm/action-setup@v4
+        with:
+          version: 10.23.0
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 22
+          cache: 'pnpm'
+
+
+      - name: Install dependencies
+        shell: bash
+        run: pnpm install --frozen-lockfile
+
+      - name: Type check
+        run: pnpm type-check
+
+      - name: Lint
+        run: pnpm lint
+
+      - name: Unit tests
+        run: pnpm test
+
   build_and_release:
+    needs: verify
     runs-on: ${{ matrix.os }}
     strategy:
       fail-fast: false
       matrix:
         os: [windows-latest, macos-latest, ubuntu-latest]
-        node-version: [18] # LTS version, good for Electron
+        node-version: [22] # matches the Node runtime Electron 39 bundles
 
     steps:
       - name: Checkout FlashForgeUI
@@ -36,15 +69,6 @@ jobs:
           node-version: ${{ matrix.node-version }}
           cache: 'pnpm'
 
-      - name: Configure GitHub Packages Authentication
-        shell: bash
-        run: |
-          echo "Setting up GitHub Packages authentication"
-          echo "@ghosttypes:registry=https://npm.pkg.github.com" >> .npmrc
-          echo "@parallel-7:registry=https://npm.pkg.github.com" >> .npmrc
-          echo "//npm.pkg.github.com/:_authToken=${{ secrets.GITHUB_TOKEN }}" >> .npmrc
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Install dependencies
         shell: bash
@@ -97,6 +121,7 @@ jobs:
             dist/**/*.dmg
             dist/**/*.AppImage
             dist/**/*.nupkg
+            dist/**/*.blockmap
             dist/*.yml
             !dist/**/elevate.exe
             !dist/win-unpacked/**
@@ -129,7 +154,7 @@ jobs:
         shell: bash
         run: |
           mkdir release_assets
-          find artifacts/ -type f \( -name "*.zip" -o -name "*.deb" -o -name "*.rpm" -o -name "*Setup*.exe" -o -name "FlashForgeUI*.exe" -o -name "*.dmg" -o -name "*.AppImage" -o -name "*.nupkg" -o -name "*.yml" \) | grep -v "elevate.exe" | while IFS= read -r file; do
+          find artifacts/ -type f \( -name "*.zip" -o -name "*.deb" -o -name "*.rpm" -o -name "*Setup*.exe" -o -name "FlashForgeUI*.exe" -o -name "*.dmg" -o -name "*.AppImage" -o -name "*.nupkg" -o -name "*.blockmap" -o -name "*.yml" \) | grep -v "elevate.exe" | while IFS= read -r file; do
             filename=$(basename "$file")
             cp "$file" "release_assets/$filename"
             echo "Copied $file to release_assets/$filename"
@@ -225,6 +250,11 @@ jobs:
         uses: softprops/action-gh-release@v2
         with:
           tag_name: ${{ env.VERSION_TAG }}
+          # Anchor the tag to the dispatched commit. Without this, GitHub creates a
+          # missing tag at the repository DEFAULT branch (main) rather than the ref
+          # the workflow ran on, so releases cut from `alpha` were tagged against
+          # main and did not contain the code that was actually built and shipped.
+          target_commitish: ${{ github.sha }}
           name: ${{ env.RELEASE_NAME }}
           body_path: ${{ env.RELEASE_NOTES_PATH }}
           draft: false

.gitignore

@@ -94,6 +94,7 @@ temp/
 
 # Playwright test artifacts
 test-results/
+playwright-report/
 
 # Editor directories and files
 .vscode/
@@ -132,3 +133,4 @@ debug_logs/*
 hook_debug_log.txt
 __pycache__/
 .pi/session-memory.json
+