feat(nix): inline flake + psysonic derivation, wire verify into release

Supersedes PR #203's out-of-tree upstream-src layout now that the Nix build lives in the canonical repo. The flake treats `self` as the source of truth — nothing in flake.nix or psysonic.nix needs a manual version bump per release. flake.nix - `inputs.upstream-src` dropped; `src = self` throughout - Dev shell retains the full WebKitGTK / GStreamer / AppIndicator closure needed for tauri:dev on NixOS (Linux x86_64 + aarch64) nix/psysonic.nix - Version read from package.json (upstreamMeta.version removed) - `srcClean` filter excludes node_modules / dist / target / .git / result / .flatpak-builder - `cargoDeps = rustPlatform.importCargoLock` with empty `outputHashes` — sufficient for our local `[patch.crates-io]` path overrides (cpal-0.15.3, symphonia-format-isomp4) - Wraps the installed binary with LD_LIBRARY_PATH + GST_PLUGIN_PATH + GIO_EXTRA_MODULES + GDK_BACKEND=x11 + WebKit disable flags nix/upstream-sources.json - Reduced to `{ npmDepsHash }`. Placeholder for the initial commit; the verify-nix job rewrites it on every release from the actual `prefetch-npm-deps` output. .github/workflows/release.yml - New `verify-nix` job gated on `create-release` (same as the Tauri builds). Checks out `main`, installs Nix, recomputes `npmDepsHash`, refreshes `flake.lock`, runs `nix build .#psysonic --no-link` as the sanity check, then commits lock + hash updates back to `main` when they changed. - The old standalone `upstream-release-nix.yml` is intentionally not ported; its scheduled re-poll of the upstream release is redundant now that the source lives here. Tarball publishing and Cachix upload remain explicitly out of scope — those ship in a follow-up workflow tied to the cache setup.
2026-07-22 22:45:41 +00:00 · 2026-04-17 22:25:19 +02:00
parent 02c7a3fe22
commit bf93ee17da
5 changed files with 363 additions and 0 deletions
@@ -0,0 +1,121 @@
+{
+  description = ''
+    Psysonic for NixOS / nixpkgs: installable app + dev shell.
+
+    Packages:
+      nix build .#psysonic          # or .#default — desktop app (.desktop + icon)
+      nix profile install .#psysonic
+
+    Run (after build, or from any clone with flake):
+      nix run .#psysonic
+      nix run github:Psychotoxical/psysonic
+
+    Development:
+      nix develop                   # mkShell (Rust/Node/WebKit deps + hooks)
+      nix shell .#devShells.default # same environment without entering subshell semantics
+
+    Release pipeline updates `flake.lock` (nixpkgs pin refresh) and
+    `nix/upstream-sources.json` (npmDepsHash) on every `v*` tag push —
+    see `.github/workflows/release.yml` (verify-nix job). Package version
+    is read from `package.json`; nothing in this file needs manual bumping
+    per release.
+  '';
+
+  inputs = {
+    nixpkgs.url = "github:NixOS/nixpkgs/nixos-unstable";
+  };
+
+  outputs =
+    { self, nixpkgs }:
+    let
+      inherit (nixpkgs) lib;
+      systems = [
+        "x86_64-linux"
+        "aarch64-linux"
+      ];
+      forSystem = f: lib.genAttrs systems f;
+
+      mkShellFor =
+        system:
+        let
+          pkgs = nixpkgs.legacyPackages.${system};
+          gstPlugins = with pkgs.gst_all_1; [
+            gstreamer
+            gst-plugins-base
+            gst-plugins-good
+            gst-plugins-bad
+          ];
+          gstPluginPath = pkgs.lib.makeSearchPath "lib/gstreamer-1.0" gstPlugins;
+        in
+        pkgs.mkShell {
+          packages = with pkgs; [
+            nodejs_22
+            rustc
+            cargo
+            cmake
+            pkg-config
+            openssl
+            gtk3
+            webkitgtk_4_1
+            libsoup_3
+            glib-networking
+            atk
+            cairo
+            gdk-pixbuf
+            glib
+            pango
+            librsvg
+            alsa-lib
+            libayatana-appindicator
+          ]
+          ++ gstPlugins;
+
+          shellHook = ''
+            export LD_LIBRARY_PATH="${pkgs.libayatana-appindicator}/lib''${LD_LIBRARY_PATH:+:$LD_LIBRARY_PATH}"
+            export GST_PLUGIN_PATH="${gstPluginPath}''${GST_PLUGIN_PATH:+:$GST_PLUGIN_PATH}"
+            export GIO_EXTRA_MODULES="${pkgs.glib-networking}/lib/gio/modules''${GIO_EXTRA_MODULES:+:$GIO_EXTRA_MODULES}"
+            export GDK_BACKEND=x11
+            export WEBKIT_DISABLE_COMPOSITING_MODE=1
+            export WEBKIT_DISABLE_DMABUF_RENDERER=1
+            unset CI
+          '';
+
+          OPENSSL_LIB_DIR = "${pkgs.openssl.out}/lib";
+          OPENSSL_INCLUDE_DIR = "${pkgs.openssl.dev}/include";
+        };
+
+      upstreamMeta = lib.importJSON ./nix/upstream-sources.json;
+
+      psysonicFor =
+        system:
+        nixpkgs.legacyPackages.${system}.callPackage ./nix/psysonic.nix {
+          src = self;
+          inherit upstreamMeta;
+        };
+    in
+    {
+      devShells = forSystem (system: { default = mkShellFor system; });
+
+      packages = forSystem (system: {
+        psysonic = psysonicFor system;
+        default = psysonicFor system;
+      });
+
+      apps = forSystem (
+        system:
+        let
+          p = psysonicFor system;
+        in
+        {
+          default = {
+            type = "app";
+            program = lib.getExe p;
+            meta = {
+              inherit (p.meta) description homepage license;
+              mainProgram = "psysonic";
+            };
+          };
+        }
+      );
+    };
+}