fix(ci): map FORGEJO_RELEASE_TOKEN via env: block

.forgejo/workflows/release.yml

@@ -7,90 +7,77 @@ on:
   workflow_dispatch:
     inputs:
       version:
-        description: 'Version tag (e.g. v1.0.0)'
+        description: 'Version tag (e.g. v1.0.1)'
         required: false
-        default: 'dev'
+        default: 'v1.0.1'
 
 jobs:
   build:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-host
+    env:
+      FORGEJO_RELEASE_TOKEN: ${{ secrets.FORGEJO_RELEASE_TOKEN }}
+      GOPATH: /usr/local/go
     steps:
-      - uses: actions/checkout@v4
-
-      - name: Set up Go
-        uses: actions/setup-go@v5
-        with:
-          go-version: '1.22'
-
-      - name: Set version
-        id: version
+      - name: Prepare workspace
         run: |
-          if [ "${{ github.event_name }}" = "push" ]; then
-            echo "VERSION=${GITHUB_REF#refs/tags/}" >> $GITHUB_OUTPUT
-          else
-            echo "VERSION=${{ github.event.inputs.version }}" >> $GITHUB_OUTPUT
-          fi
+          export PATH="/usr/local/go/bin:$PATH"
+          go version
+          rm -rf /tmp/ody-build && mkdir -p /tmp/ody-build/dist
+          git clone --depth=1 https://git.wellspr.ing/wellspring/ody-agent.git /tmp/ody-build/src
+          ls /tmp/ody-build/src
 
-      - name: Build Windows
-        working-directory: ody-agent
+      - name: Build all platforms
         run: |
-          GOOS=windows GOARCH=amd64 CGO_ENABLED=0 \
-            go build \
+          export PATH="/usr/local/go/bin:$PATH"
+          cd /tmp/ody-build/src
+          GOOS=windows GOARCH=amd64 CGO_ENABLED=0 go build \
             -ldflags "-s -w -H=windowsgui -X main.defaultServer=https://425.today" \
-            -o ../dist/ody-agent-win.exe .
-
-      - name: Build macOS (Apple Silicon)
-        working-directory: ody-agent
-        run: |
-          GOOS=darwin GOARCH=arm64 CGO_ENABLED=0 \
-            go build \
+            -o /tmp/ody-build/dist/ody-agent-win.exe .
+          GOOS=darwin GOARCH=arm64 CGO_ENABLED=0 go build \
             -ldflags "-s -w -X main.defaultServer=https://425.today" \
-            -o ../dist/ody-agent-mac-arm64 .
-
-      - name: Build macOS (Intel)
-        working-directory: ody-agent
-        run: |
-          GOOS=darwin GOARCH=amd64 CGO_ENABLED=0 \
-            go build \
+            -o /tmp/ody-build/dist/ody-agent-mac-arm64 .
+          GOOS=darwin GOARCH=amd64 CGO_ENABLED=0 go build \
             -ldflags "-s -w -X main.defaultServer=https://425.today" \
-            -o ../dist/ody-agent-mac-amd64 .
-
-      - name: Build Linux
-        working-directory: ody-agent
-        run: |
-          GOOS=linux GOARCH=amd64 CGO_ENABLED=0 \
-            go build \
+            -o /tmp/ody-build/dist/ody-agent-mac-amd64 .
+          GOOS=linux GOARCH=amd64 CGO_ENABLED=0 go build \
             -ldflags "-s -w -X main.defaultServer=https://425.today" \
-            -o ../dist/ody-agent-linux .
+            -o /tmp/ody-build/dist/ody-agent-linux .
+          echo "--- Artifacts ---"
+          ls -lh /tmp/ody-build/dist/
 
-      - name: List artifacts
-        run: ls -lh dist/
-
-      - name: Create release
-        uses: actions/gitea-release@v1
-        with:
-          token: ${{ secrets.FORGEJO_TOKEN }}
-          tag_name: ${{ steps.version.outputs.VERSION }}
-          release_name: "Ody Agent ${{ steps.version.outputs.VERSION }}"
-          body: |
-            ## Ody Agent ${{ steps.version.outputs.VERSION }}
-
-            Desktop agent for WellSpr.ing / NNN.today merchants.
-
-            ### Downloads
-            | Platform | File |
-            |----------|------|
-            | Windows (64-bit) | `ody-agent-win.exe` |
-            | macOS Apple Silicon | `ody-agent-mac-arm64` |
-            | macOS Intel | `ody-agent-mac-amd64` |
-            | Linux (64-bit) | `ody-agent-linux` |
-
-            ### Quick setup
-            1. Download the binary for your platform
-            2. Get your `config.env` from the merchant dashboard → AI Agent tab
-            3. Place both files in the same folder and run the agent
-          files: |
-            dist/ody-agent-win.exe
-            dist/ody-agent-mac-arm64
-            dist/ody-agent-mac-amd64
-            dist/ody-agent-linux
+      - name: Publish Forgejo release
+        run: |
+          export PATH="/usr/local/go/bin:$PATH"
+          FORGEJO_URL="https://git.wellspr.ing"
+          REPO="wellspring/ody-agent"
+          if [ -n "$GITHUB_REF" ] && echo "$GITHUB_REF" | grep -q '^refs/tags/'; then
+            VERSION="${GITHUB_REF#refs/tags/}"
+          else
+            VERSION="v1.0.1"
+          fi
+          echo "Publishing release: $VERSION"
+          echo "Token present: $([ -n "$FORGEJO_RELEASE_TOKEN" ] && echo yes || echo NO)"
+          EXISTING_ID=$(curl -sf "$FORGEJO_URL/api/v1/repos/$REPO/releases/tags/$VERSION" \
+            -H "Authorization: token $FORGEJO_RELEASE_TOKEN" 2>/dev/null \
+            | python3 -c "import sys,json; d=json.load(sys.stdin); print(d.get('id',''))" 2>/dev/null || echo "")
+          if [ -n "$EXISTING_ID" ]; then
+            curl -sf -X DELETE "$FORGEJO_URL/api/v1/repos/$REPO/releases/$EXISTING_ID" \
+              -H "Authorization: token $FORGEJO_RELEASE_TOKEN" && echo "Deleted old release $EXISTING_ID"
+          fi
+          RELEASE=$(curl -sf -X POST "$FORGEJO_URL/api/v1/repos/$REPO/releases" \
+            -H "Authorization: token $FORGEJO_RELEASE_TOKEN" \
+            -H "Content-Type: application/json" \
+            -d "{\"tag_name\":\"$VERSION\",\"name\":\"Ody Agent $VERSION\",\"body\":\"Desktop agent for WellSpr.ing merchants.\",\"draft\":false}")
+          RELEASE_ID=$(echo "$RELEASE" | python3 -c "import sys,json; print(json.load(sys.stdin)['id'])")
+          echo "Release ID: $RELEASE_ID"
+          for f in /tmp/ody-build/dist/*; do
+            FNAME=$(basename "$f")
+            echo "Uploading $FNAME..."
+            curl -sf -X POST \
+              "$FORGEJO_URL/api/v1/repos/$REPO/releases/$RELEASE_ID/assets?name=$FNAME" \
+              -H "Authorization: token $FORGEJO_RELEASE_TOKEN" \
+              -H "Content-Type: application/octet-stream" \
+              --data-binary "@$f"
+            echo "$FNAME uploaded."
+          done
+          echo "Done: $FORGEJO_URL/$REPO/releases/tag/$VERSION"