mcpctl/scripts/release.sh

#!/bin/bash
# Build, publish, and install mcpctl packages.
#
# Usage:
#   ./release.sh               # Build + publish for native arch only
#   ./release.sh --both-arches # Build + publish for both amd64 and arm64
set -e

SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
PROJECT_ROOT="$(dirname "$SCRIPT_DIR")"
cd "$PROJECT_ROOT"

# Load .env if present
if [ -f .env ]; then
  set -a; source .env; set +a
fi

source "$SCRIPT_DIR/arch-helper.sh"
resolve_arch "${MCPCTL_TARGET_ARCH:-}"
NATIVE_ARCH="$NFPM_ARCH"

BOTH_ARCHES=false
if [[ "${1:-}" == "--both-arches" ]]; then
  BOTH_ARCHES=true
fi

echo "=== mcpctl release ==="
echo "    Native arch: $NATIVE_ARCH"
echo ""

build_and_publish() {
  local arch="$1"
  echo ""
  echo "=== Building for $arch ==="
  MCPCTL_TARGET_ARCH="$arch" bash scripts/build-rpm.sh
  echo ""
  MCPCTL_TARGET_ARCH="$arch" bash scripts/publish-rpm.sh
  MCPCTL_TARGET_ARCH="$arch" bash scripts/publish-deb.sh
}

if [ "$BOTH_ARCHES" = true ]; then
  build_and_publish "amd64"
  build_and_publish "arm64"
else
  build_and_publish "$NATIVE_ARCH"
fi

echo ""

# Install locally for native arch (auto-detect RPM or DEB)
echo "==> Installing locally (${NATIVE_ARCH})..."
if command -v dpkg &>/dev/null && ! command -v dnf &>/dev/null; then
  DEB_FILE=$(ls dist/mcpctl*.deb 2>/dev/null | grep -E "[._]${NATIVE_ARCH}[._]" | head -1)
  sudo dpkg -i "$DEB_FILE" || sudo apt-get install -f -y
else
  # RPM filenames use x86_64/aarch64, not amd64/arm64
  rpm_arch=""
  case "$NATIVE_ARCH" in amd64) rpm_arch="x86_64" ;; arm64) rpm_arch="aarch64" ;; *) rpm_arch="$NATIVE_ARCH" ;; esac
  RPM_FILE=$(ls dist/mcpctl-*.rpm 2>/dev/null | grep -E "[._]${rpm_arch}[._]" | head -1)
  sudo rpm -U --force "$RPM_FILE"
fi

echo ""
echo "==> Installed:"
mcpctl --version
echo ""

# Restart mcplocal so smoke tests run against the new binary
echo "==> Restarting mcplocal..."
systemctl --user restart mcplocal
sleep 2

# Run smoke tests (requires live mcplocal + mcpd)
echo "==> Running smoke tests..."
export PATH="$HOME/.npm-global/bin:$PATH"
if pnpm test:smoke; then
  echo "==> Smoke tests passed!"
elif [ "${MCPCTL_ALLOW_SMOKE_FAILURE:-}" = "1" ]; then
  echo "==> WARNING: Smoke tests failed, continuing (MCPCTL_ALLOW_SMOKE_FAILURE=1)."
else
  # This used to print a warning and exit 0. That is how four broken readiness
  # probes shipped unnoticed on 2026-08-10: the warning scrolled past in the
  # build log and the release reported success. A failing smoke run means
  # something in the live fleet is genuinely broken — say so in the exit code.
  #
  # Note what this does and does not do: smoke runs LAST, against the installed
  # binary, so the package is already published and installed by now. Failing
  # here reports the breakage, it does not prevent it — investigate, do not
  # assume the artifact is bad.
  echo "" >&2
  echo "ERROR: smoke tests failed — the release is published and installed, but" >&2
  echo "       something in the live fleet is broken. Investigate before relying" >&2
  echo "       on this build; do not just re-run." >&2
  echo "" >&2
  echo "  Common causes: mcplocal/mcpd not running, a readiness probe pointing at" >&2
  echo "  a tool the upstream renamed, or an expired credential." >&2
  echo "  Override:      MCPCTL_ALLOW_SMOKE_FAILURE=1 $0" >&2
  echo "" >&2
  exit 1
fi
echo ""

GITEA_PUBLIC_URL="${GITEA_PUBLIC_URL:-https://mysources.co.uk}"
GITEA_OWNER="${GITEA_OWNER:-michal}"
echo "=== Done! ==="
echo "RPM install:"
echo "  sudo dnf config-manager --add-repo ${GITEA_PUBLIC_URL}/api/packages/${GITEA_OWNER}/rpm.repo"
echo "  sudo dnf install mcpctl"
echo ""
echo "DEB install (Debian/Ubuntu):"
echo "  echo \"deb ${GITEA_PUBLIC_URL}/api/packages/${GITEA_OWNER}/debian trixie main\" | sudo tee /etc/apt/sources.list.d/mcpctl.list"
echo "  curl -fsSL ${GITEA_PUBLIC_URL}/api/packages/${GITEA_OWNER}/debian/repository.key | sudo gpg --dearmor -o /etc/apt/keyrings/mcpctl.gpg"
echo "  sudo apt update && sudo apt install mcpctl"