Rename to com.quineglobal.drome and publish a Homebrew tap from Forgejo

- Change the bundle identifier to com.quineglobal.drome (Tauri config,
  Flatpak manifest/metainfo, Linux build, Justfile, READMEs). On first
  launch the app moves the old com.quintodrome.desktop data folder over so
  existing users keep their library.
- Ad-hoc sign macOS builds (signingIdentity "-") so the whole bundle is
  signed; the linker-only signature made Gatekeeper report the app as
  "damaged".
- Forgejo desktop workflow: cross-compile the Intel build on the Mac runner,
  drop Windows (no runner), create releases on the pushed tag instead of a
  "v"-less copy, fail on upload errors, and update the Quine/homebrew-quintodrome
  cask after each release.
- Add Flatpak AppStream metainfo and a 512px icon, and document the macOS
  "damaged" workaround in the README and GitHub release notes.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

.gitea/workflows/desktop.yml

@@ -1,11 +1,13 @@
 name: Desktop Release
 
-# Builds the Quintodrome desktop app (Tauri) for macOS (.app/.dmg) and
-# Windows (.exe/.msi), bundling the Navidrome server as a sidecar, and
-# attaches the artifacts to the Gitea release on `v*` tags.
+# Builds the Quintodrome desktop app (Tauri) for macOS (.app/.dmg), bundling
+# the Navidrome server as a sidecar, attaches the artifacts to the Forgejo
+# release on `v*` tags, and updates the Homebrew tap. Windows isn't built here
+# (no Windows runner); the Windows steps below are kept for when one exists.
 #
-# Note: artifacts are unsigned (no Apple/Windows code-signing certs), so users
-# will hit Gatekeeper/SmartScreen prompts.
+# Note: artifacts are not signed with Apple/Windows certs (macOS builds are only
+# ad-hoc signed), so users will hit Gatekeeper/SmartScreen prompts. The
+# Homebrew cask works around Gatekeeper by stripping the quarantine flag.
 
 on:
   push:
@@ -25,10 +27,9 @@ jobs:
         include:
           - os: macos-latest
             target: aarch64-apple-darwin
-          - os: macos-13 # Intel runner
+          # Cross-compiled on the same Mac runner; there is no Intel runner.
+          - os: macos-latest
             target: x86_64-apple-darwin
-          - os: windows-latest
-            target: x86_64-pc-windows-msvc
     runs-on: ${{ matrix.os }}
     steps:
       - uses: actions/checkout@v6
@@ -47,6 +48,8 @@ jobs:
 
       - name: Setup Rust
         uses: dtolnay/rust-toolchain@stable
+        with:
+          targets: ${{ matrix.target }}
 
       - name: Cache Rust build
         uses: Swatinem/rust-cache@v2
@@ -87,6 +90,15 @@ jobs:
             GIT_TAG="dev"
           fi
 
+          if [[ "$RUNNER_OS" == "macOS" ]]; then
+            # Build for the matrix target, not the runner's own arch.
+            case "${{ matrix.target }}" in
+              aarch64-*) export GOARCH=arm64 CC="clang -arch arm64" ;;
+              x86_64-*) export GOARCH=amd64 CC="clang -arch x86_64" ;;
+            esac
+            export CGO_ENABLED=1
+          fi
+
           if [[ "$RUNNER_OS" == "Windows" ]]; then
             export CGO_ENABLED=1
             OUTPUT="navidrome.exe"
@@ -112,14 +124,14 @@ jobs:
         shell: bash
         run: |
           cd desktop
-          npx --yes @tauri-apps/cli@2 build
+          npx --yes @tauri-apps/cli@2 build --target ${{ matrix.target }}
 
       - name: Collect artifacts (macOS)
         if: runner.os == 'macOS'
         shell: bash
         run: |
           mkdir -p dist
-          BUNDLE=desktop/src-tauri/target/release/bundle
+          BUNDLE=desktop/src-tauri/target/${{ matrix.target }}/release/bundle
           ditto -c -k --keepParent "$BUNDLE/macos/Quintodrome.app" "dist/Quintodrome-${{ matrix.target }}.app.zip"
           cp "$BUNDLE"/dmg/*.dmg dist/ 2>/dev/null || true
           ls -la dist
@@ -129,7 +141,7 @@ jobs:
         shell: bash
         run: |
           mkdir -p dist
-          BUNDLE=desktop/src-tauri/target/release/bundle
+          BUNDLE=desktop/src-tauri/target/${{ matrix.target }}/release/bundle
           cp "$BUNDLE"/nsis/*.exe dist/ 2>/dev/null || true
           cp "$BUNDLE"/msi/*.msi dist/ 2>/dev/null || true
           ls -la dist
@@ -160,15 +172,91 @@ jobs:
           TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
           set -euo pipefail
-          TAG="${GITHUB_REF_NAME#v}"
-          RELEASE_ID=$(curl -sS -X POST "$GITHUB_SERVER_URL/api/v1/repos/$GITHUB_REPOSITORY/releases" \
+          # tag_name must be the pushed tag itself (with its "v"), or Forgejo
+          # creates a second tag without it.
+          RELEASE_ID=$(curl -fsS -X POST "$GITHUB_SERVER_URL/api/v1/repos/$GITHUB_REPOSITORY/releases" \
             -H "Authorization: token $TOKEN" \
             -H "Content-Type: application/json" \
-            -d "{\"tag_name\":\"$TAG\",\"name\":\"$TAG\",\"draft\":false}" \
+            -d "{\"tag_name\":\"$GITHUB_REF_NAME\",\"name\":\"${GITHUB_REF_NAME#v}\",\"draft\":false}" \
             | jq -r '.id')
           for f in dist/*; do
-            curl -sS -X POST "$GITHUB_SERVER_URL/api/v1/repos/$GITHUB_REPOSITORY/releases/$RELEASE_ID/assets?name=$(basename "$f")" \
+            curl -fsS -X POST "$GITHUB_SERVER_URL/api/v1/repos/$GITHUB_REPOSITORY/releases/$RELEASE_ID/assets?name=$(basename "$f")" \
               -H "Authorization: token $TOKEN" \
               -H "Content-Type: application/octet-stream" \
               --data-binary @"$f"
           done
+
+  homebrew-tap:
+    name: Update Homebrew tap
+    needs: release
+    runs-on: ubuntu-latest
+    env:
+      TAP_REPO: git@forge.quinefoundation.com:Quine/homebrew-quintodrome.git
+    steps:
+      - uses: actions/download-artifact@v8
+        with:
+          path: dist
+          pattern: desktop-*-apple-darwin
+          merge-multiple: true
+
+      # The app is only ad-hoc signed, so the cask strips the quarantine flag
+      # that Homebrew adds; otherwise Gatekeeper refuses to open it.
+      - name: Write cask
+        run: |
+          set -euo pipefail
+          VERSION="${GITHUB_REF_NAME#v}"
+          ARM_SHA=$(sha256sum dist/Quintodrome-aarch64-apple-darwin.app.zip | cut -d' ' -f1)
+          INTEL_SHA=$(sha256sum dist/Quintodrome-x86_64-apple-darwin.app.zip | cut -d' ' -f1)
+          mkdir -p tap/Casks
+          cat > tap/Casks/quintodrome.rb <<CASK
+          cask "quintodrome" do
+            arch arm: "aarch64", intel: "x86_64"
+
+            version "$VERSION"
+            sha256 arm:   "$ARM_SHA",
+                   intel: "$INTEL_SHA"
+
+            url "$GITHUB_SERVER_URL/$GITHUB_REPOSITORY/releases/download/v#{version}/Quintodrome-#{arch}-apple-darwin.app.zip"
+            name "Quintodrome"
+            desc "Desktop app wrapping the Navidrome music server"
+            homepage "$GITHUB_SERVER_URL/$GITHUB_REPOSITORY"
+
+            app "Quintodrome.app"
+
+            postflight do
+              system_command "/usr/bin/xattr",
+                             args: ["-dr", "com.apple.quarantine", "#{appdir}/Quintodrome.app"]
+            end
+
+            zap trash: [
+              "~/Library/Application Support/com.quineglobal.drome",
+              "~/Library/Application Support/com.quintodrome.desktop",
+            ]
+          end
+          CASK
+          cat tap/Casks/quintodrome.rb
+
+      - name: Push to tap
+        env:
+          SSH_KEY: ${{ secrets.HOMEBREW_TAP_SSH_KEY }}
+        run: |
+          set -euo pipefail
+          if [[ -z "$SSH_KEY" ]]; then
+            echo "::error::HOMEBREW_TAP_SSH_KEY secret is not set (add it under this repo's Settings > Actions > Secrets; its public key needs write access on the tap repo)"
+            exit 1
+          fi
+          mkdir -p ~/.ssh
+          echo "$SSH_KEY" > ~/.ssh/tap_key
+          chmod 600 ~/.ssh/tap_key
+          echo "forge.quinefoundation.com ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID2WBpBywsGATL7IMkvjlYguBfeYOxPstTcsPuH0Xdp3" > ~/.ssh/known_hosts
+          export GIT_SSH_COMMAND="ssh -i ~/.ssh/tap_key -o IdentitiesOnly=yes"
+          git clone "$TAP_REPO" repo
+          mkdir -p repo/Casks
+          cp tap/Casks/quintodrome.rb repo/Casks/
+          cd repo
+          git config user.name "Quintodrome release"
+          git config user.email "noreply@forge.quinefoundation.com"
+          git add Casks/quintodrome.rb
+          git diff --cached --quiet && { echo "Cask unchanged"; exit 0; }
+          git commit -m "quintodrome ${GITHUB_REF_NAME#v}"
+          git push

.github/actions/build-linux/action.yml

@@ -97,10 +97,10 @@ runs:
         mkdir -p dist
         cd desktop/linux
         flatpak-builder --user --force-clean --install-deps-from=flathub \
-          --repo=flatpak-repo flatpak-build flatpak/com.quintodrome.desktop.yml
+          --repo=flatpak-repo flatpak-build flatpak/com.quineglobal.drome.yml
         flatpak build-bundle \
           --runtime-repo=https://flathub.org/repo/flathub.flatpakrepo \
-          flatpak-repo "../../dist/Quintodrome-linux-${{ inputs.arch }}.flatpak" com.quintodrome.desktop
+          flatpak-repo "../../dist/Quintodrome-linux-${{ inputs.arch }}.flatpak" com.quineglobal.drome
 
     - name: Build Snap
       # The runner is Ubuntu 24.04, matching the snap's core24 base, so build

.github/workflows/desktop.yml

@@ -5,8 +5,8 @@ name: Desktop Release
 # the Navidrome server as a sidecar, and attaches the artifacts to the GitHub
 # release on `v*` tags.
 #
-# Note: artifacts are unsigned (no Apple/Windows code-signing certs), so users
-# will hit Gatekeeper/SmartScreen prompts.
+# Note: artifacts are not signed with Apple/Windows certs (macOS builds are only
+# ad-hoc signed), so users will hit Gatekeeper/SmartScreen prompts.
 
 on:
   push:
@@ -185,3 +185,12 @@ jobs:
         with:
           files: dist/*
           generate_release_notes: true
+          body: |
+            ### macOS: "Quintodrome is damaged and can't be opened"
+
+            The app isn't signed with an Apple Developer ID, so macOS blocks downloaded copies. After moving it to `/Applications`, run:
+
+            ```sh
+            xattr -dr com.apple.quarantine /Applications/Quintodrome.app
+            codesign --force --deep -s - /Applications/Quintodrome.app
+            ```

Justfile

@@ -20,9 +20,9 @@ clean-state:
     #!/usr/bin/env bash
     set -euo pipefail
     case "$(uname -s)" in
-      Darwin) dir="$HOME/Library/Application Support/com.quintodrome.desktop" ;;
-      Linux)  dir="${XDG_DATA_HOME:-$HOME/.local/share}/com.quintodrome.desktop" ;;
-      MINGW*|MSYS*|CYGWIN*) dir="${APPDATA:-$HOME/AppData/Roaming}/com.quintodrome.desktop" ;;
+      Darwin) dir="$HOME/Library/Application Support/com.quineglobal.drome" ;;
+      Linux)  dir="${XDG_DATA_HOME:-$HOME/.local/share}/com.quineglobal.drome" ;;
+      MINGW*|MSYS*|CYGWIN*) dir="${APPDATA:-$HOME/AppData/Roaming}/com.quineglobal.drome" ;;
       *) echo "unsupported OS" >&2; exit 1 ;;
     esac
     echo "Removing: $dir"

README.md

@@ -64,6 +64,18 @@ macOS). Cross-platform binaries are built in CI — see
 > Artifacts are unsigned (no Apple/Windows code-signing certs), so users will
 > see Gatekeeper/SmartScreen prompts.
 
+### macOS: "Quintodrome is damaged and can't be opened"
+
+Because the app isn't signed with an Apple Developer ID, macOS blocks
+downloaded copies. After moving the app to `/Applications`, run:
+
+```sh
+xattr -dr com.apple.quarantine /Applications/Quintodrome.app
+codesign --force --deep -s - /Applications/Quintodrome.app
+```
+
+The Homebrew cask strips the quarantine flag automatically on install.
+
 ## Configuration
 
 Environment variables override the defaults:
@@ -77,7 +89,7 @@ Environment variables override the defaults:
 | `QUINTODROME_PUBLIC_URL`    | `http://quintodrome`           | Friendly origin shown in the address bar |
 
 The data folder (database, cache) is always the OS app-data directory
-(e.g. `~/Library/Application Support/com.quintodrome.desktop` on macOS).
+(e.g. `~/Library/Application Support/com.quineglobal.drome` on macOS).
 
 ## Repository layout
 

desktop/README.md

@@ -115,7 +115,7 @@ Environment variables override the defaults:
 | `QUINTODROME_PUBLIC_URL`    | `http://quintodrome`     | Friendly origin shown in the address bar |
 
 The data folder (DB, cache) is always the OS app-data directory
-(e.g. `~/Library/Application Support/com.quintodrome.desktop` on macOS).
+(e.g. `~/Library/Application Support/com.quineglobal.drome` on macOS).
 
 > Note: if a Navidrome server is already running on the configured host/port,
 > the app simply loads it and does **not** start a second instance.

desktop/linux/flatpak/com.quineglobal.drome.metainfo.xml

@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!-- AppStream metadata: gives software centers (GNOME Software, Discover)
+     the app's name, summary and icon when installing the Flatpak. -->
+<component type="desktop-application">
+  <id>com.quineglobal.drome</id>
+  <name>Quintodrome</name>
+  <summary>Desktop app that hosts the Navidrome music server</summary>
+  <metadata_license>CC0-1.0</metadata_license>
+  <project_license>GPL-3.0-only</project_license>
+  <description>
+    <p>
+      Quintodrome wraps Navidrome in a desktop app: it starts a bundled
+      Navidrome server and shows its web UI in a native window.
+    </p>
+  </description>
+  <launchable type="desktop-id">com.quineglobal.drome.desktop</launchable>
+  <url type="homepage">https://github.com/philip-peterson/quintodrome</url>
+  <categories>
+    <category>AudioVideo</category>
+    <category>Audio</category>
+    <category>Player</category>
+  </categories>
+  <content_rating type="oars-1.1"/>
+</component>

desktop/linux/flatpak/com.quineglobal.drome.yml

@@ -1,6 +1,6 @@
 # Repackages the Tauri-built .deb (staged as ../quintodrome.deb by the CI
 # build) into a Flatpak. The GNOME runtime provides webkit2gtk-4.1.
-app-id: com.quintodrome.desktop
+app-id: com.quineglobal.drome
 runtime: org.gnome.Platform
 runtime-version: '49'
 sdk: org.gnome.Sdk
@@ -19,6 +19,12 @@ modules:
     sources:
       - type: file
         path: ../quintodrome.deb
+      - type: file
+        path: com.quineglobal.drome.metainfo.xml
+      # The .deb only carries 32px/128px icons; ship the 512px one too so
+      # software centers get a sharp icon.
+      - type: file
+        path: ../../src-tauri/icons/icon.png
     build-commands:
       - ar -x quintodrome.deb
       - tar -xf data.tar.*
@@ -26,12 +32,18 @@ modules:
       - install -Dm755 usr/bin/quintodrome /app/bin/quintodrome
       - install -Dm755 usr/bin/navidrome /app/bin/navidrome
       - install -Dm644 usr/share/applications/Quintodrome.desktop
-        /app/share/applications/com.quintodrome.desktop.desktop
-      - desktop-file-edit --set-icon=com.quintodrome.desktop
-        /app/share/applications/com.quintodrome.desktop.desktop
+        /app/share/applications/com.quineglobal.drome.desktop
+      - desktop-file-edit --set-icon=com.quineglobal.drome
+        /app/share/applications/com.quineglobal.drome.desktop
       - |
         for icon in usr/share/icons/hicolor/*x*/apps/quintodrome.png; do
           size=$(basename "$(dirname "$(dirname "$icon")")")
           case "$size" in *@*) continue ;; esac
-          install -Dm644 "$icon" "/app/share/icons/hicolor/$size/apps/com.quintodrome.desktop.png"
+          install -Dm644 "$icon" "/app/share/icons/hicolor/$size/apps/com.quineglobal.drome.png"
         done
+      - install -Dm644 icon.png
+        /app/share/icons/hicolor/512x512/apps/com.quineglobal.drome.png
+      # flatpak-builder composes AppStream data (name, summary, icon) from
+      # this; without it installers show only the bare app ID.
+      - install -Dm644 com.quineglobal.drome.metainfo.xml
+        /app/share/metainfo/com.quineglobal.drome.metainfo.xml

desktop/src-tauri/src/server.rs

@@ -72,11 +72,39 @@ pub fn ensure_running(handle: &AppHandle, navidrome: &Navidrome) -> Result<(), S
     Ok(())
 }
 
+/// Bundle identifier used before the rename to com.quineglobal.drome. The app
+/// data folder is named after the identifier, so it moved with the rename.
+const LEGACY_IDENTIFIER: &str = "com.quintodrome.desktop";
+
+/// Moves Navidrome's data (database, cache, backups) from the pre-rename data
+/// folder to `data_folder`, once, so existing users keep their library. Does
+/// nothing if the new folder already exists or there is no old folder.
+fn migrate_legacy_data_folder(data_folder: &std::path::Path) {
+    let Some(legacy) = data_folder.parent().map(|p| p.join(LEGACY_IDENTIFIER)) else {
+        return;
+    };
+    if data_folder.exists() || !legacy.is_dir() {
+        return;
+    }
+    match std::fs::rename(&legacy, data_folder) {
+        Ok(()) => eprintln!(
+            "quintodrome: moved data folder {} -> {}",
+            legacy.display(),
+            data_folder.display()
+        ),
+        Err(err) => eprintln!(
+            "quintodrome: could not move data folder {}: {err}",
+            legacy.display()
+        ),
+    }
+}
+
 fn spawn(handle: &AppHandle, navidrome: &Navidrome) -> Result<(), ServerError> {
     let data_folder = handle
         .path()
         .app_data_dir()
         .map_err(|_| ServerError::DataFolder)?;
+    migrate_legacy_data_folder(&data_folder);
     std::fs::create_dir_all(&data_folder).ok();
 
     let music_folder = match std::env::var_os("QUINTODROME_MUSIC_FOLDER") {

desktop/src-tauri/tauri.conf.json

@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "Quintodrome",
   "version": "0.1.0",
-  "identifier": "com.quintodrome.desktop",
+  "identifier": "com.quineglobal.drome",
   "build": {
     "frontendDist": "../src"
   },
@@ -36,6 +36,9 @@
       "icons/icon.icns",
       "icons/icon.ico"
     ],
-    "externalBin": ["binaries/navidrome"]
+    "externalBin": ["binaries/navidrome"],
+    "macOS": {
+      "signingIdentity": "-"
+    }
   }
 }