v2.6.0

.env.example

@@ -1,19 +1,14 @@
+# Encryption keys used during build
 CRYPTO_KEY=
 MAGIC_IV=
 MAGIC_SALT=
 NEW_CRYPTO_KEY=
 
+# Core API endpoints
 NEW_DRIVE_URL=
-DRIVE_API_URL=
-PAYMENTS_URL=
-INTERNXT_DESKTOP_HEADER_KEY=
-
 BRIDGE_URL=
-APP_SEGMENT_KEY=
-APP_SEGMENT_KEY_TEST=
-BUG_REPORTING_URL=
+PAYMENTS_URL=
 NOTIFICATIONS_URL=
-LOCK_REFRESH_INTERVAL=
 
-RUDDERSTACK_KEY=
-RUDDERSTACK_DATA_PLANE_URL=
+# Desktop client identification
+INTERNXT_DESKTOP_HEADER_KEY=

.erb/configs/webpack.config.base.ts

@@ -8,7 +8,6 @@ import webpackPaths from './webpack.paths';
 // Only packages that were in release/app/package.json should be external
 // These are native modules or runtime dependencies that cannot/should not be bundled
 const nativeExternals = [
-  '@gcas/fuse',
   'better-sqlite3',
   'reflect-metadata',
   'typeorm',

.erb/configs/webpack.config.main.prod.ts

@@ -38,11 +38,13 @@ const configuration: webpack.Configuration = {
   },
 
   optimization: {
+    chunkIds: 'deterministic',
     minimizer: [
       new TerserPlugin({
-        parallel: true,
+        parallel: false,
       }),
     ],
+    moduleIds: 'deterministic',
   },
 
   plugins: [

.erb/configs/webpack.config.renderer.prod.ts

@@ -94,13 +94,17 @@ const configuration: webpack.Configuration = {
   },
 
   optimization: {
+    chunkIds: 'deterministic',
     minimize: true,
     minimizer: [
       new TerserPlugin({
-        parallel: true,
+        parallel: false,
+      }),
+      new CssMinimizerPlugin({
+        parallel: false,
       }),
-      new CssMinimizerPlugin(),
     ],
+    moduleIds: 'deterministic',
   },
 
   plugins: [

.erb/scripts/electron-rebuild.js

@@ -8,14 +8,11 @@ if (
   Object.keys(dependencies || {}).length > 0 &&
   fs.existsSync(path.join(webpackPaths.rootPath, 'node_modules'))
 ) {
-  const electronRebuildCmd =
-    './node_modules/.bin/electron-rebuild --sequential --force --types prod,dev,optional --module-dir .';
-  const cmd =
-    process.platform === 'win32'
-      ? electronRebuildCmd.replace(/\//g, '\\')
-      : electronRebuildCmd;
-  execSync(cmd, {
+  execSync(
+    './node_modules/.bin/electron-rebuild --sequential --force --types prod,dev,optional --module-dir .',
+    {
     cwd: webpackPaths.rootPath,
     stdio: 'inherit',
-  });
+    }
+  );
 }

.erb/scripts/start-main-dev.js

@@ -0,0 +1,5 @@
+// Electron 29 runs on Node 20, whose ESM entrypoint loader does not understand
+// .ts files through the CommonJS ts-node/register hook. Keep the dev main
+// process on the repo's CommonJS ts-node path by loading a JS bootstrap first.
+require('ts-node/register/transpile-only');
+require('../../src/apps/main/main.ts');

.eslintrc.js

@@ -1,6 +1,6 @@
 module.exports = {
   extends: ['@internxt/eslint-config-internxt'],
-  ignorePatterns: ['src/infra/schemas.d.ts'],
+  ignorePatterns: ['src/infra/schemas.d.ts', 'assets/assets.d.ts'],
   overrides: [
     {
       files: ['*.ts', '*.tsx'],
@@ -14,7 +14,7 @@ module.exports = {
   ],
   rules: {
     'no-await-in-loop': 'warn',
-    'no-use-before-define': 'warn',
+    '@typescript-eslint/no-use-before-define': ['warn', { functions: false, classes: true, variables: true }],
     'array-callback-return': 'warn',
     'max-len': [
       'warn', // TODO: Change back to 'error' after fixing existing violations

.github/workflows/find-dead-code.yml

@@ -18,7 +18,7 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: 18
+          node-version-file: '.nvmrc'
 
       - name: Install dependencies
         run: npm ci --ignore-scripts

.github/workflows/go-lint.yml

@@ -0,0 +1,25 @@
+name: Golang Lint
+
+on:
+  pull_request:
+    types: [opened, synchronize, reopened]
+
+jobs:
+  lint:
+    name: 🐹 Golang Lint
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Check out Git repository
+        uses: actions/checkout@v4
+
+      - name: Set up Go
+        uses: actions/setup-go@v5
+        with:
+          go-version-file: packages/fuse-daemon/go.mod
+
+      - name: Run golangci-lint
+        uses: golangci/golangci-lint-action@v7
+        with:
+          version: v2.11.4
+          working-directory: packages/fuse-daemon

.github/workflows/go-test.yml

@@ -0,0 +1,23 @@
+name: Golang Test
+
+on:
+  pull_request:
+    types: [opened, synchronize, reopened]
+
+jobs:
+  test:
+    name: 🐹 Golang Test
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Check out Git repository
+        uses: actions/checkout@v4
+
+      - name: Set up Go
+        uses: actions/setup-go@v5
+        with:
+          go-version-file: packages/fuse-daemon/go.mod
+
+      - name: Run tests
+        run: go test ./...
+        working-directory: packages/fuse-daemon

.github/workflows/lint.yml

@@ -16,7 +16,7 @@ jobs:
       - name: Use Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: 18
+          node-version-file: '.nvmrc'
           cache: 'npm'
 
       - name: Install dependencies
@@ -36,7 +36,7 @@ jobs:
       - name: Use Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: 18
+          node-version-file: '.nvmrc'
           cache: 'npm'
 
       - name: Install dependencies
@@ -56,7 +56,7 @@ jobs:
       - name: Use Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: 18
+          node-version-file: '.nvmrc'
           cache: 'npm'
 
       - name: Install dependencies

.github/workflows/publish.yml

@@ -4,27 +4,24 @@ on:
   release:
     types: [published]
   workflow_dispatch:
+    inputs:
+      publish_to_github:
+        description: "Publish artifacts to GitHub release"
+        required: true
+        default: "false"
+        type: choice
+        options:
+          - "false"
+          - "true"
 
 jobs:
   build:
-    runs-on: ubuntu-latest
-    permissions:
-      contents: read
-      id-token: write
-      packages: write
+    runs-on: ubuntu-24.04
+    env:
+      GH_TOKEN: ${{ github.token }}
+      GITHUB_TOKEN: ${{ github.token }}
     steps:
       - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
-        with:
-          node-version: '18.x'
-
-      - name: Create .npmrc file
-        run: |
-          echo "@internxt:registry=https://npm.pkg.github.com/" > .npmrc
-          echo "//npm.pkg.github.com/:_authToken=${{ secrets.GITHUB_TOKEN }}" >> .npmrc
-
-      - name: Install dependencies
-        run: npm ci
 
       - name: Add .env
         run: |
@@ -34,18 +31,109 @@ jobs:
           echo "MAGIC_SALT=${{ secrets.MAGIC_SALT }}" >> .env
           echo "NEW_CRYPTO_KEY=${{ secrets.NEW_CRYPTO_KEY }}" >> .env
           echo "NEW_DRIVE_URL=https://gateway.internxt.com/drive" >> .env
-          echo "DRIVE_API_URL=https://gateway.internxt.com/api" >> .env
           echo "PAYMENTS_URL=https://gateway.internxt.com/payments" >> .env
           echo "INTERNXT_DESKTOP_HEADER_KEY=${{ secrets.INTERNXT_DESKTOP_HEADER_KEY }}" >> .env
           echo "BRIDGE_URL=https://gateway.internxt.com/network" >> .env
-          echo "APP_SEGMENT_KEY=${{ secrets.APP_SEGMENT_KEY }}" >> .env
-          echo "APP_SEGMENT_KEY_TEST=${{ secrets.APP_SEGMENT_KEY_TEST }}" >> .env
-          echo "BUG_REPORTING_URL=https://desktop-bug-reporting.inxt.workers.dev" >> .env
           echo "NOTIFICATIONS_URL=https://notifications.internxt.com" >> .env
-          echo "LOCK_REFRESH_INTERVAL=20000" >> .env
 
-      - name: Build app
-        run: npm run build
+      - name: Build release container image
+        run: docker build -f Dockerfile.release -t internxt-release-builder:24.04 .
+
+      - name: Build app inside container
+        run: |
+          if [[ -z "${GH_TOKEN}" ]]; then
+            echo "GH_TOKEN is empty in workflow context"
+            exit 1
+          fi
+
+          docker run --rm \
+            -e CI=true \
+            -e GH_TOKEN \
+            -e GITHUB_TOKEN \
+            -v "$PWD:/workspace" \
+            -w /workspace \
+            internxt-release-builder:24.04 \
+            bash -lc './scripts/run-release-build-in-container.sh'
+
+      - name: Upload artifacts for smoke tests
+        if: success()
+        uses: actions/upload-artifact@v4
+        with:
+          name: linux-release-artifacts
+          path: |
+            build/*.AppImage
+            build/*.deb
+            build/*.rpm
+            build/*.yml
+
+      - name: Upload build metadata
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: build-metadata
+          path: |
+            build-manifest.json
+            build-checksums.txt
+
+  smoke-test-deb:
+    needs: build
+    runs-on: ${{ matrix.os }}
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [ubuntu-24.04, ubuntu-latest]
+    steps:
+      - name: Download release artifacts
+        uses: actions/download-artifact@v4
+        with:
+          name: linux-release-artifacts
+          path: build
+
+      - name: Install runtime dependencies
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y --no-install-recommends xvfb
+
+      - name: Install deb package for smoke test
+        run: |
+          sudo dpkg -i --force-depends build/*.deb
+          test -x /opt/Internxt/internxt
+
+      - name: Start app in headless mode
+        run: |
+          xvfb-run -a /opt/Internxt/internxt --no-sandbox --version &
+          APP_PID=$!
+          sleep 5 # Allow app to initialize
+          kill $APP_PID
+
+  publish-release:
+    needs: smoke-test-deb
+    if: ${{ github.event_name == 'release' || (github.event_name == 'workflow_dispatch' && inputs.publish_to_github == 'true' && startsWith(github.ref, 'refs/tags/')) }}
+    runs-on: ubuntu-24.04
+    env:
+      GH_TOKEN: ${{ github.token }}
+      GITHUB_TOKEN: ${{ github.token }}
+    permissions:
+      contents: write
+    steps:
+      - name: Validate GitHub token availability
+        run: |
+          if [[ -z "${GH_TOKEN}" ]]; then
+            echo "GH_TOKEN is empty in publish-release context"
+            exit 1
+          fi
 
-      - name: Publish app
-        run: npm run publish
+      - name: Download tested artifacts
+        uses: actions/download-artifact@v4
+        with:
+          name: linux-release-artifacts
+          path: build
+
+      - name: Publish tested artifacts to GitHub release
+        uses: softprops/action-gh-release@v2
+        with:
+          files: |
+            build/*.AppImage
+            build/*.deb
+            build/*.rpm
+            build/*.yml

.github/workflows/sonar-analysis.yml

@@ -17,12 +17,12 @@ jobs:
       - name: Set up Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: 18
+          node-version-file: '.nvmrc'
 
       - name: Install system dependencies
         run: |
           sudo apt-get update
-          sudo apt-get install -y libfuse2 libgtk-3-0 libnotify4 libnss3 libxss1 libxtst6 xdg-utils libatspi2.0-0 libdrm2 libgbm1 libasound2t64
+          sudo apt-get install -y libgtk-3-0 libnotify4 libnss3 libxss1 libxtst6 xdg-utils libatspi2.0-0 libdrm2 libgbm1 libasound2t64
 
       - name: Install dependencies
         run: npm ci --ignore-scripts

.github/workflows/test.yml

@@ -16,13 +16,13 @@ jobs:
       - name: Use Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: 18
+          node-version-file: '.nvmrc'
           cache: 'npm'
 
       - name: Install system dependencies
         run: |
           sudo apt-get update
-          sudo apt-get install -y libfuse2 libgtk-3-0 libnotify4 libnss3 libxss1 libxtst6 xdg-utils libatspi2.0-0 libdrm2 libgbm1 libasound2t64
+          sudo apt-get install -y libgtk-3-0 libnotify4 libnss3 libxss1 libxtst6 xdg-utils libatspi2.0-0 libdrm2 libgbm1 libasound2t64
 
       - name: Install dependencies
         run: npm ci --ignore-scripts
@@ -47,7 +47,7 @@ jobs:
       - name: Use Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: 18
+          node-version-file: '.nvmrc'
           cache: 'npm'
 
       - name: Install dependencies