feat: app Flutter GameManager (OIDC pocket-id, contrôle serveurs, MOTD live, auto-update) + CI APK signée

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-13 09:13:55 +02:00
parent 2c5476b1db
commit 3286640b37
14 changed files with 969 additions and 0 deletions
@@ -0,0 +1,95 @@
+name: Build APK
+on:
+  push:
+    branches: [main]
+  workflow_dispatch: {}
+
+env:
+  FLUTTER_IMAGE: ghcr.io/cirruslabs/flutter:3.24.5
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Build signed APK (Flutter)
+        run: |
+          set -e
+          RUN="${{ github.run_number }}"
+          NAME="1.0.${RUN}"
+          echo "${{ secrets.ANDROID_KEYSTORE_B64 }}" | base64 -d > "${PWD}/gamemanager.keystore"
+          docker run --rm -v "${PWD}:/app" -w /app \
+            -e KSPW="${{ secrets.ANDROID_KEYSTORE_PASSWORD }}" \
+            -e ALIAS="${{ secrets.ANDROID_KEY_ALIAS }}" \
+            -e BUILD_NAME="${NAME}" -e BUILD_NUMBER="${RUN}" \
+            "${FLUTTER_IMAGE}" bash -euxc '
+              git config --global --add safe.directory /app
+              flutter create --platforms=android --org nfteam --project-name gamemanager .
+              # Permissions Android (internet + auto-install APK)
+              MAN=android/app/src/main/AndroidManifest.xml
+              sed -i "s#<application#<uses-permission android:name=\"android.permission.INTERNET\"/>\n    <uses-permission android:name=\"android.permission.REQUEST_INSTALL_PACKAGES\"/>\n    <application#" "$MAN"
+              # Signature release + schéma de redirection OIDC (patch build.gradle)
+              cat > android/key.properties <<EOF
+storePassword=${KSPW}
+keyPassword=${KSPW}
+keyAlias=${ALIAS}
+storeFile=/app/gamemanager.keystore
+EOF
+              python3 - <<PY
+import re
+p="android/app/build.gradle"; s=open(p).read()
+# charge key.properties en tête
+if "keystoreProperties" not in s:
+    s = ("def keystoreProperties = new Properties()\n"
+         "def keystorePropertiesFile = rootProject.file(\"key.properties\")\n"
+         "if (keystorePropertiesFile.exists()) { keystoreProperties.load(new FileInputStream(keystorePropertiesFile)) }\n\n") + s
+# schéma OIDC pour flutter_appauth
+s = s.replace("defaultConfig {",
+    "defaultConfig {\n        manifestPlaceholders += [appAuthRedirectScheme: \"nfteam.gamemanager\"]", 1)
+# bloc signingConfigs.release
+if "signingConfigs {" not in s:
+    s = re.sub(r"(buildTypes\s*\{)",
+        "signingConfigs {\n        release {\n"
+        "            keyAlias keystoreProperties[\"keyAlias\"]\n"
+        "            keyPassword keystoreProperties[\"keyPassword\"]\n"
+        "            storeFile file(keystoreProperties[\"storeFile\"])\n"
+        "            storePassword keystoreProperties[\"storePassword\"]\n"
+        "        }\n    }\n    \\1", s, count=1)
+# release utilise la clé release
+s = s.replace("signingConfig signingConfigs.debug", "signingConfig signingConfigs.release")
+open(p,"w").write(s)
+print("build.gradle patché")
+PY
+              flutter pub get
+              flutter build apk --release --build-name="${BUILD_NAME}" --build-number="${BUILD_NUMBER}"
+            '
+          cp build/app/outputs/flutter-apk/app-release.apk "gamemanager.apk"
+          cat > version.json <<EOF
+          {"version":"1.0.${RUN}","version_code":${RUN},"notes":"Build CI #${RUN}"}
+          EOF
+
+      - name: Publish Gitea release
+        run: |
+          set -e
+          RUN="${{ github.run_number }}"; TAG="v1.0.${RUN}"
+          API="${GITHUB_SERVER_URL}/api/v1/repos/${GITHUB_REPOSITORY}"
+          AUTH="Authorization: token ${{ secrets.GITHUB_TOKEN }}"
+          REL=$(curl -s -X POST "$API/releases" -H "$AUTH" -H 'Content-Type: application/json' \
+            -d "{\"tag_name\":\"${TAG}\",\"name\":\"GameManager ${TAG}\",\"target_commitish\":\"main\"}")
+          ID=$(echo "$REL" | python3 -c "import sys,json;print(json.load(sys.stdin)['id'])")
+          curl -s -X POST "$API/releases/$ID/assets?name=gamemanager.apk" -H "$AUTH" \
+            -F "attachment=@gamemanager.apk;type=application/vnd.android.package-archive" >/dev/null
+          curl -s -X POST "$API/releases/$ID/assets?name=version.json" -H "$AUTH" \
+            -F "attachment=@version.json;type=application/json" >/dev/null
+          echo "Release ${TAG} publiée"
+
+      - name: Notify ntfy
+        if: always()
+        run: |
+          if [ "${{ job.status }}" = "success" ]; then E="white_check_mark"; P="default"; else E="rotating_light"; P="high"; fi
+          curl -s -H "Authorization: Bearer ${{ secrets.NTFY_TOKEN }}" -H "Title: gamemanager APK — ${{ job.status }}" \
+            -H "Priority: ${P}" -H "Tags: ${E}" \
+            -d "Build APK #${{ github.run_number }} : ${{ job.status }}" \
+            "${{ secrets.NTFY_URL }}/${{ secrets.NTFY_TOPIC }}" || true