EQMS-1548: TraceX desktop app (#9666)

Signed-off-by: Alexey Zinoviev <[email protected]>

Author: lexiv0re

.github/workflows/main.yml

@@ -26,6 +26,7 @@ env:
     common
     desktop
     desktop-package
+    qms-desktop-package
     dev
     models
     packages
@@ -807,3 +808,108 @@ jobs:
         with:
           name: Huly-Linux
           path: ./desktop-package/deploy/Huly-linux-*.zip
+
+  qms-dist-build:
+    # if: ${{ github.ref == 'refs/heads/main' || startsWith(github.ref, 'refs/tags/v') || startsWith(github.ref, 'refs/tags/s') }}
+    if: ${{ startsWith(github.ref, 'refs/tags/v') || startsWith(github.ref, 'refs/tags/s') }}
+    needs: build
+    runs-on: macos-latest
+    timeout-minutes: 60
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+          filter: tree:0
+          submodules: recursive
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version-file: '.nvmrc'
+
+      - name: Cache node modules
+        uses: actions/cache@v4
+        env:
+          cache-name: node
+        with:
+          path: |
+            common/temp
+          key: ${{ runner.os }}-${{ env.cache-name }}-${{ hashFiles('**/pnpm-lock.yaml') }}
+          restore-keys: |
+            ${{ runner.os }}-${{ env.cache-name }}-${{ hashFiles('**/pnpm-lock.yaml') }}
+
+      - name: Prepare .npmrc for GitHub Packages
+        run: |
+          echo "//npm.pkg.github.com/:_authToken=${{secrets.GITHUB_TOKEN}}" > ~/.npmrc
+
+      - name: Installing...
+        run: node common/scripts/install-run-rush.js install --purge
+      - name: Model version from git tags
+        run: node common/scripts/install-run-rush.js model-version
+      - name: Package
+        run: node common/scripts/install-run-rush.js package --to qms-desktop -v
+      - name: Package JSON
+        run: |
+          cd qms-desktop-package
+          cat ./package.json
+      - name: Install the Apple certificate and provisioning profile
+        env:
+          DEV_ID_P12_BASE64: ${{ secrets.DEV_ID_P12_BASE64 }}
+          DEV_ID_P12_PASSWORD: ${{ secrets.DEV_ID_P12_PASSWORD }}
+          KEYCHAIN_PASSWORD: ${{ secrets.KEYCHAIN_PASSWORD }}
+        run: |
+          # create variables
+          CERTIFICATE_PATH=$RUNNER_TEMP/build_certificate.p12
+          KEYCHAIN_PATH=$RUNNER_TEMP/app-signing.keychain-db
+
+          # import certificate from secret
+          echo -n "$DEV_ID_P12_BASE64" | base64 --decode -o $CERTIFICATE_PATH
+
+          # create temporary keychain
+          security create-keychain -p "$KEYCHAIN_PASSWORD" $KEYCHAIN_PATH
+          security set-keychain-settings -lut 21600 $KEYCHAIN_PATH
+          security unlock-keychain -p "$KEYCHAIN_PASSWORD" $KEYCHAIN_PATH
+
+          # import certificate to keychain
+          security import $CERTIFICATE_PATH -P "$DEV_ID_P12_PASSWORD" -A -t cert -f pkcs12 -k $KEYCHAIN_PATH
+          security set-key-partition-list -S apple-tool:,apple: -k "$KEYCHAIN_PASSWORD" $KEYCHAIN_PATH
+          security list-keychain -d user -s $KEYCHAIN_PATH
+      - name: Build distribution's
+        env:
+          APPLE_ID: ${{ secrets.APPLE_ID }}
+          APPLE_ID_APP_PASS: ${{ secrets.APPLE_ID_APP_PASS }}
+          TEAM_ID: ${{ secrets.TEAM_ID }}
+        run: |
+          cd qms-desktop-package
+          node ../common/scripts/install-run-rushx.js dist --linux --x64
+          node ../common/scripts/install-run-rushx.js dist --windows --x64 --arm64
+          node ../common/scripts/install-run-rushx.js dist-signed --macos --x64 --arm64
+          ./scripts/copy-publish-artifacts.sh ${{ env.PublishTempFolder}}
+      - name: Publish distribution assets and version
+        uses: ryand56/r2-upload-action@latest
+        with:
+          r2-account-id: ${{ secrets.R2_ACCOUNT_ID }}
+          r2-access-key-id: ${{ secrets.R2_ACCESS_KEY_ID }}
+          r2-secret-access-key: ${{ secrets.R2_SECRET_ACCESS_KEY }}
+          r2-bucket: desktop-distro
+          source-dir: qms-desktop-package/${{ env.PublishTempFolder}}
+          destination-dir: ./
+      - name: Upload MacOS
+        uses: actions/upload-artifact@v4
+        with:
+          name: TraceX-MacOS-x64
+          path: ./qms-desktop-package/deploy/TraceX-macos-*-x64.dmg
+      - name: Upload MacOS arm64
+        uses: actions/upload-artifact@v4
+        with:
+          name: TraceX-MacOS-arm64
+          path: ./qms-desktop-package/deploy/TraceX-macos-*-arm64.dmg
+      - name: Upload Windows
+        uses: actions/upload-artifact@v4
+        with:
+          name: TraceX-Windows
+          path: ./qms-desktop-package/deploy/TraceX-windows-*.zip
+      - name: Upload Linux
+        uses: actions/upload-artifact@v4
+        with:
+          name: TraceX-Linux
+          path: ./qms-desktop-package/deploy/TraceX-linux-*.zip

common/config/rush/pnpm-lock.yaml

@@ -1,6 +1,6 @@
-## Automatomatic updates
+## Automatic updates
 
-All builds are published to R2 storage bucket avaialble at https://dist.huly.io
+All builds are published to R2 storage bucket available at https://dist.huly.io
 
 To check the latest auto-updatable distributions see
 

desktop-package/readme.md

@@ -0,0 +1,33 @@
+//
+// Copyright © 2025 Hardcore Engineering Inc.
+//
+// Licensed under the Eclipse Public License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License. You may
+// obtain a copy of the License at https://www.eclipse.org/legal/epl-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+//
+// See the License for the specific language governing permissions and
+// limitations under the License.
+//
+import * as path from 'path'
+import * as fs from 'fs'
+
+interface PackedConfig {
+  server?: string
+  updatesChannelKey?: string
+}
+
+const configPath = path.join(process.resourcesPath, 'config/config.json')
+
+export function readPackedConfig (): PackedConfig | undefined {
+  if (fs.existsSync(configPath)) {
+    try {
+      return JSON.parse(fs.readFileSync(configPath, 'utf8')) as PackedConfig
+    } catch (err) {
+      console.log('Failed to read packed config', err)
+    }
+  }
+}

desktop/src/main/config.ts

@@ -31,7 +31,7 @@ import autoUpdater from './updater'
 import { generateId } from '@hcengineering/core'
 import { DownloadItem } from '@hcengineering/desktop-downloads'
 import { rebuildJumpList, setupWindowsSpecific } from './windowsSpecificSetup'
-
+import { readPackedConfig } from './config'
 
 let mainWindow: BrowserWindow | undefined
 let winBadge: any
@@ -47,6 +47,9 @@ const preloadScriptPath = path.join(app.getAppPath(), 'dist', 'main', 'preload.j
 const defaultWidth = 1440
 const defaultHeight = 960
 
+const packedConfig = readPackedConfig()
+log.info('packed config', packedConfig)
+
 const envPath = path.join(app.getAppPath(), isDev ? '.env-dev' : '.env')
 console.log('do loading env from', envPath)
 dotenvConfig({
@@ -74,7 +77,7 @@ function readServerUrl (): string {
     return process.env.FRONT_URL ?? 'http://huly.local:8087'
   }
 
-  return ((settings as any).get('server', process.env.FRONT_URL) as string) ?? 'https://huly.app'
+  return ((settings as any).get('server') as string) ?? packedConfig?.server ?? process.env.FRONT_URL ?? 'https://huly.app'
 }
 
 // Handle creating/removing shortcuts on Windows when installing/uninstalling.
@@ -94,8 +97,8 @@ const disabledFeatures = [
 
 app.commandLine.appendSwitch('disable-features', disabledFeatures.join(','))
 
-function setupWindowTitleBar(windowOptions: Electron.BrowserWindowConstructorOptions): void {
- if (isWindows) {
+function setupWindowTitleBar (windowOptions: Electron.BrowserWindowConstructorOptions): void {
+  if (isWindows) {
     // on Windows we use frameless window with custom hand-made title bar
     windowOptions.frame = false
   } else {
@@ -269,31 +272,31 @@ const createWindow = async (): Promise<void> => {
     }
   })
 
-  function sendWindowMaximizedMessage(maximized: boolean): void {
+  function sendWindowMaximizedMessage (maximized: boolean): void {
     mainWindow?.webContents.send('window-state-changed', maximized ? 'maximized' : 'unmaximized')
   }
 
   mainWindow.on('blur', () => {
     mainWindow?.webContents.send('window-focus-loss')
-  });
+  })
 
   mainWindow.on('maximize', () => {
     sendWindowMaximizedMessage(true)
-  });
+  })
 
   mainWindow.on('unmaximize', () => {
     sendWindowMaximizedMessage(false)
-  });
+  })
 
   mainWindow.on('enter-full-screen', () => {
     sendWindowMaximizedMessage(true)
-  });
+  })
 
   mainWindow.on('leave-full-screen', () => {
-    if (mainWindow) {
-        sendWindowMaximizedMessage(mainWindow.isMaximized())
+    if (mainWindow != null) {
+      sendWindowMaximizedMessage(mainWindow.isMaximized())
     }
-  });
+  })
 
   if (isMac) {
     mainWindow.on('close', (event) => {
@@ -309,12 +312,12 @@ const createWindow = async (): Promise<void> => {
   }
 }
 
-function sendCommand(cmd: string, ...args: any[]): void {
+function sendCommand (cmd: string, ...args: any[]): void {
   mainWindow?.webContents.send(cmd, ...args)
 }
 
 function activateWindow (): void {
-  if (mainWindow) {
+  if (mainWindow != null) {
     if (mainWindow.isMinimized()) {
       mainWindow.restore()
     }
@@ -373,7 +376,23 @@ ipcMain.on('set-combined-config', (_event: any, config: Config) => {
   setupCookieHandler(config)
 
   const updatesUrl = process.env.DESKTOP_UPDATES_URL ?? config.DESKTOP_UPDATES_URL ?? 'https://dist.huly.io'
-  const updatesChannel = process.env.DESKTOP_UPDATES_CHANNEL ?? config.DESKTOP_UPDATES_CHANNEL ?? 'huly'
+  // NOTE: env format is: default_value;key1:value1;key2:value2...
+  const updatesChannels = (process.env.DESKTOP_UPDATES_CHANNEL ?? config.DESKTOP_UPDATES_CHANNEL ?? 'huly').split(';').map(c => c.trim().split(':'))
+  const updateChannelsMap: Record<string, string> = {}
+  for (const channelInfo of updatesChannels) {
+    if (channelInfo.length === 1) {
+      updateChannelsMap.default = channelInfo[0]
+    } else if (channelInfo.length === 2) {
+      const [key, value] = channelInfo
+      updateChannelsMap[key] = value
+    }
+  }
+
+  const updatesChannelKey = packedConfig?.updatesChannelKey ?? 'default'
+  const updatesChannel = updateChannelsMap[updatesChannelKey] ?? updateChannelsMap.default ?? 'huly'
+
+  log.info('updates channels', updatesChannels)
+  log.info('updates channel', updatesChannelKey, updatesChannel)
 
   autoUpdater.setFeedURL({
     provider: 'generic',
@@ -414,35 +433,35 @@ ipcMain.on('set-front-cookie', function (event: any, host: string, name: string,
 })
 
 ipcMain.handle('window-minimize', () => {
-  mainWindow?.minimize();
-});
+  mainWindow?.minimize()
+})
 
 ipcMain.handle('window-maximize', () => {
-  if (mainWindow) {
+  if (mainWindow != null) {
     if (mainWindow.isMaximized()) {
-      mainWindow.unmaximize();
+      mainWindow.unmaximize()
     } else {
-      mainWindow.maximize();
+      mainWindow.maximize()
     }
   }
-});
+})
 
 ipcMain.handle('window-close', () => {
-  mainWindow?.close();
-});
+  mainWindow?.close()
+})
 
 ipcMain.handle('get-is-os-using-dark-theme', () => {
-  return nativeTheme.shouldUseDarkColors;
-});
+  return nativeTheme.shouldUseDarkColors
+})
 
 ipcMain.handle('menu-action', async (_event: any, action: MenuBarAction) => {
   dipatchMenuBarAction(mainWindow, action)
-});
+})
 
 if (isWindows) {
   ipcMain.on('rebuild-user-jump-list', (_event: any, spares: JumpListSpares) => {
     rebuildJumpList(spares)
-  });
+  })
 }
 
 const gotTheLock = app.requestSingleInstanceLock()