chore: import upstream snapshot with attribution

2026-07-13 13:39:47 +08:00
commit 812fb41a11
663 changed files with 92451 additions and 0 deletions
@@ -0,0 +1,60 @@
+name: Deploy MediaGo Docs
+
+on:
+  push:
+    paths:
+      - "docs/**"
+      - ".github/workflows/build-docs.yml"
+    branches: ["master"]
+
+  workflow_dispatch:
+
+permissions:
+  contents: read
+  pages: write
+  id-token: write
+
+concurrency:
+  group: "pages"
+  cancel-in-progress: false
+
+env:
+  BUCKET: downloader-docs
+  ENDPOINT: oss-cn-beijing.aliyuncs.com
+  ACCESS_KEY: LTAI5tDrRjFUAvufpCJioz3b
+  ACCESS_KEY_SECRET: ${{ secrets.ACCESS_KEY_SECRET }}
+
+jobs:
+  build:
+    name: Build Docs
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+
+      - uses: pnpm/action-setup@v5
+        with:
+          version: "10.15.0"
+          run_install: false
+          standalone: true
+
+      - name: Setup Node
+        uses: actions/setup-node@v6
+        with:
+          node-version: "24.14.0"
+          cache: "pnpm"
+
+      - name: Install dependencies
+        run: pnpm install
+
+      - name: Build with Vitepress
+        run: pnpm docs:build
+
+      - name: Install Alibaba Cloud ossutil
+        run: wget http://gosspublic.alicdn.com/ossutil/1.6.10/ossutil64 && chmod +x ossutil64
+
+      - name: Configure Alibaba Cloud ossutil
+        run: ./ossutil64 config -i ${ACCESS_KEY} -k ${ACCESS_KEY_SECRET} -e ${ENDPOINT} -c .ossutilconfig
+
+      - name: Upload the web folder to the chosen OSS bucket
+        run: ./ossutil64 --config-file .ossutilconfig cp ${{ github.workspace }}/docs/.vitepress/dist oss://${BUCKET} -r -f
@@ -0,0 +1,72 @@
+# build.yml
+
+# Workflow's name
+name: Build MediaGo App
+
+# Workflow's trigger
+on:
+  workflow_dispatch:
+
+# Workflow's jobs
+jobs:
+  # job's id
+  release:
+    # job's name
+    name: build and release electron app
+
+    # the type of machine to run the job on
+    runs-on: ${{ matrix.os }}
+
+    # create a build matrix for jobs
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [windows-latest, macos-latest, macos-15-intel, ubuntu-latest]
+
+    # create steps
+    steps:
+      - name: Check out git repository
+        uses: actions/checkout@v6
+
+      - uses: pnpm/action-setup@v5
+        with:
+          version: "10.15.0"
+          run_install: false
+
+      - name: Install Node.js
+        uses: actions/setup-node@v6
+        with:
+          node-version: "24.14.0"
+          cache: "pnpm"
+
+      - name: Install Python
+        uses: actions/setup-python@v6
+        with:
+          python-version: "3.10"
+
+      - name: Setup Go
+        uses: actions/setup-go@v6
+        with:
+          go-version: "1.25.0"
+          cache-dependency-path: |
+            apps/core/go.sum
+
+      - name: Install swag
+        run: go install github.com/swaggo/swag/cmd/swag@latest
+
+      - name: Install dependencies
+        run: pnpm install
+
+      - name: Download third-party deps
+        run: pnpm deps:download
+
+      - name: Build  & release app
+        run: pnpm release:electron
+        env:
+          GH_TOKEN: ${{ secrets.GH_TOKEN }}
+          APP_TD_APPID: ${{ secrets.APP_TD_APPID }}
+
+      - uses: actions/upload-artifact@v6
+        with:
+          name: mediago-${{ matrix.os }}
+          path: apps/electron/release/mediago-*
@@ -0,0 +1,153 @@
+name: Build & Push Docker Image
+
+on:
+  workflow_dispatch:
+    inputs:
+      tag:
+        description: "Image tag to publish under (e.g. 3.5.0 to rebuild a released version, or 3.5.0-fix.1 for a side-by-side). Leave blank for dev-<run_id>."
+        required: false
+        type: string
+      push_latest:
+        description: "Also tag the resulting image as `latest` (use when rebuilding a stable release)."
+        required: false
+        type: boolean
+        default: false
+  push:
+    tags:
+      - "v*"
+
+env:
+  REGISTRY: ghcr.io
+  IMAGE_NAME: ${{ github.repository }}
+  # Docker Hub mirror — same image, different registry. Credentials
+  # come from the DOCKERHUB_USERNAME / DOCKERHUB_TOKEN secrets (token,
+  # not account password). If either secret is empty, the Docker Hub
+  # login step is skipped and only GHCR gets pushed.
+  DOCKERHUB_IMAGE: caorushizi/mediago
+
+jobs:
+  docker:
+    name: Build and push multi-arch image
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v6
+
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v3
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v4
+
+      - name: Login to GitHub Container Registry
+        uses: docker/login-action@v4
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      # GitHub Actions forbids `secrets.*` inside `if:` expressions
+      # directly — it fails with `Unrecognized named-value: 'secrets'`.
+      # The blessed workaround: pull the secret through `env:` (which
+      # IS allowed) inside a single check step, write a boolean to
+      # step outputs, and have every downstream step guard on the
+      # output instead of the raw secret.
+      - name: Detect Docker Hub credentials
+        id: dockerhub
+        env:
+          DOCKERHUB_USERNAME: ${{ secrets.DOCKERHUB_USERNAME }}
+          DOCKERHUB_TOKEN: ${{ secrets.DOCKERHUB_TOKEN }}
+        run: |
+          if [ -n "$DOCKERHUB_USERNAME" ] && [ -n "$DOCKERHUB_TOKEN" ]; then
+            echo "enabled=true" >> "$GITHUB_OUTPUT"
+          else
+            echo "enabled=false" >> "$GITHUB_OUTPUT"
+          fi
+
+      # Only log in (and later push) to Docker Hub when both secrets are
+      # configured. Lets forks / trial runs without Docker Hub
+      # credentials still build-and-push to GHCR.
+      - name: Login to Docker Hub
+        if: steps.dockerhub.outputs.enabled == 'true'
+        uses: docker/login-action@v4
+        with:
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+
+      # Compose the list of target images based on which registries we
+      # actually have credentials for. Without this, metadata-action
+      # would always generate Docker Hub tags and build-push-action
+      # would then fail with 401 on forks that haven't set the secrets.
+      - name: Resolve image targets
+        id: targets
+        run: |
+          {
+            echo "images<<EOF"
+            echo "${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}"
+            if [ "${{ steps.dockerhub.outputs.enabled }}" = "true" ]; then
+              echo "${{ env.DOCKERHUB_IMAGE }}"
+            fi
+            echo "EOF"
+          } >> "$GITHUB_OUTPUT"
+
+      - name: Docker meta
+        id: meta
+        uses: docker/metadata-action@v6
+        with:
+          images: ${{ steps.targets.outputs.images }}
+          tags: |
+            # 1. Manual rebuild with an explicit tag (e.g. `3.5.0`, `3.5.0-fix.1`)
+            type=raw,value=${{ inputs.tag }},enable=${{ inputs.tag != '' }}
+            # 2. Tag push: v1.0.0 → 1.0.0
+            type=semver,pattern={{version}}
+            # 3. `latest`: on stable semver tag pushes, or when the manual
+            #    rebuild explicitly asks for it
+            type=raw,value=latest,enable=${{ (startsWith(github.ref, 'refs/tags/v') && !contains(github.ref, 'beta')) || inputs.push_latest }}
+            # 4. Fallback for manual triggers with no custom tag
+            type=raw,value=dev-${{ github.run_id }},enable=${{ !startsWith(github.ref, 'refs/tags/') && inputs.tag == '' }}
+
+      - name: Build and push
+        uses: docker/build-push-action@v7
+        with:
+          context: .
+          platforms: linux/amd64,linux/arm64
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+          # `metadata-action` already emits the standard OCI labels
+          # (image.title / description / source / licenses / version /
+          # revision / created). `revision` uses github.sha, so two
+          # builds that re-use a tag are distinguishable via
+          # `docker inspect`.
+          labels: ${{ steps.meta.outputs.labels }}
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+
+      - name: Build Summary
+        run: |
+          echo "### 🎉 Docker Image Published" >> $GITHUB_STEP_SUMMARY
+          echo "" >> $GITHUB_STEP_SUMMARY
+          echo "**Registries:**" >> $GITHUB_STEP_SUMMARY
+          echo "- \`${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}\`" >> $GITHUB_STEP_SUMMARY
+          if [ "${{ steps.dockerhub.outputs.enabled }}" = "true" ]; then
+            echo "- \`docker.io/${{ env.DOCKERHUB_IMAGE }}\`" >> $GITHUB_STEP_SUMMARY
+          fi
+          echo "**Platforms:** linux/amd64, linux/arm64" >> $GITHUB_STEP_SUMMARY
+          echo "**Version:** \`${{ steps.meta.outputs.version }}\`" >> $GITHUB_STEP_SUMMARY
+          echo "**Commit:** \`${{ github.sha }}\`" >> $GITHUB_STEP_SUMMARY
+          echo "" >> $GITHUB_STEP_SUMMARY
+          echo "**Tags:**" >> $GITHUB_STEP_SUMMARY
+          echo "${{ steps.meta.outputs.tags }}" | while read tag; do
+            echo "- \`${tag}\`" >> $GITHUB_STEP_SUMMARY
+          done
+          echo "" >> $GITHUB_STEP_SUMMARY
+          echo "**Pull:**" >> $GITHUB_STEP_SUMMARY
+          echo "\`\`\`bash" >> $GITHUB_STEP_SUMMARY
+          echo "docker pull ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ steps.meta.outputs.version }}" >> $GITHUB_STEP_SUMMARY
+          if [ "${{ steps.dockerhub.outputs.enabled }}" = "true" ]; then
+            echo "docker pull ${{ env.DOCKERHUB_IMAGE }}:${{ steps.meta.outputs.version }}" >> $GITHUB_STEP_SUMMARY
+          fi
+          echo "\`\`\`" >> $GITHUB_STEP_SUMMARY