make the download page dynamic: scan builds, show versions and SHA-256

1 files changed, 437 insertions, 0 deletions

diff --git a/web/index.php b/web/index.php
new file mode 100644
index 0000000..cd77dad
--- /dev/null
+++ b/web/index.php
@@ -0,0 +1,437 @@
+<?php
+declare(strict_types=1);
+
+/**
+ * zagan.bet download page.
+ *
+ * Scans ./bin/client and ./bin/server and renders every build it finds, with
+ * its version, size and SHA-256. No database, no JavaScript, no dependencies.
+ *
+ * Expected file names (anything else is ignored):
+ *
+ *   bin/client/zagan-bet-client-<version>-<platform>-<arch>
+ *   bin/client/zagan-bet-client-<version>-<platform>-<arch>.exe
+ *   bin/server/zagan-bet-server-<version>-<platform>-<arch>
+ *
+ * <version> is MAJOR.MINOR.PATCH, <platform> is linux|windows|macos and
+ * <arch> is x86_64|i686|aarch64. Example:
+ *
+ *   bin/client/zagan-bet-client-3.1.1-linux-x86_64
+ *   bin/server/zagan-bet-server-3.1.1-linux-x86_64
+ *
+ * The hashes are computed per request with hash_file(). That is a few tens of
+ * milliseconds for a handful of builds; add a cache keyed on mtime if the
+ * directory ever grows.
+ */
+
+const KINDS = [
+    'client' => [
+        'title' => 'Client',
+        'hint' => 'Needs a terminal of at least 80×24 cells.',
+    ],
+    'server' => [
+        'title' => 'Server',
+        'hint' => 'Generates its own TLS identity on first run.',
+    ],
+];
+
+const PLATFORMS = [
+    'linux' => 'Linux',
+    'windows' => 'Windows',
+    'macos' => 'macOS',
+];
+
+const ARCHES = [
+    'x86_64' => '64-bit',
+    'i686' => '32-bit',
+    'aarch64' => 'ARM64',
+];
+
+// Newest version first, then 64-bit builds before 32-bit.
+const PLATFORM_ORDER = ['linux' => 0, 'windows' => 1, 'macos' => 2];
+const ARCH_ORDER = ['x86_64' => 0, 'aarch64' => 1, 'i686' => 2];
+
+function e(?string $value): string
+{
+    return htmlspecialchars($value ?? '', ENT_QUOTES | ENT_SUBSTITUTE, 'UTF-8');
+}
+
+function human_size(int $bytes): string
+{
+    if ($bytes >= 1048576) {
+        return number_format($bytes / 1048576, 1) . ' MB';
+    }
+    if ($bytes >= 1024) {
+        return number_format($bytes / 1024) . ' KB';
+    }
+    return $bytes . ' B';
+}
+
+/**
+ * @return array{version:string,platform:string,arch:string,file:string,size:int,mtime:int,sha256:string}|null
+ */
+function read_release(string $kind, string $directory, string $entry): ?array
+{
+    $pattern = '/^zagan-bet-' . preg_quote($kind, '/')
+        . '-v?(\d+\.\d+\.\d+)-([a-z]+)-([a-z0-9_]+)(\.exe)?$/i';
+    if (preg_match($pattern, $entry, $matches) !== 1) {
+        return null;
+    }
+
+    $realDirectory = realpath($directory);
+    $real = realpath($directory . '/' . $entry);
+    if ($realDirectory === false || $real === false) {
+        return null;
+    }
+    // Never serve anything that resolves outside the published directory.
+    if (!str_starts_with($real, $realDirectory . DIRECTORY_SEPARATOR)) {
+        return null;
+    }
+    if (!is_file($real)) {
+        return null;
+    }
+
+    $size = filesize($real);
+    $hash = hash_file('sha256', $real);
+    if ($size === false || $hash === false) {
+        return null;
+    }
+
+    return [
+        'version' => $matches[1],
+        'platform' => strtolower($matches[2]),
+        'arch' => strtolower($matches[3]),
+        'file' => $entry,
+        'size' => $size,
+        'mtime' => filemtime($real) ?: 0,
+        'sha256' => $hash,
+    ];
+}
+
+$base = rtrim(str_replace('\\', '/', dirname($_SERVER['SCRIPT_NAME'] ?? '/')), '/');
+if ($base === '.' || $base === '/') {
+    $base = '';
+}
+
+$releases = [];
+$newest = 0;
+
+foreach (KINDS as $kind => $meta) {
+    $found = [];
+    $directory = __DIR__ . '/bin/' . $kind;
+
+    if (is_dir($directory)) {
+        $entries = scandir($directory);
+        if ($entries !== false) {
+            foreach ($entries as $entry) {
+                if ($entry === '.' || $entry === '..') {
+                    continue;
+                }
+                $release = read_release($kind, $directory, $entry);
+                if ($release === null) {
+                    continue;
+                }
+                $release['href'] = $base . '/bin/' . $kind . '/' . rawurlencode($release['file']);
+                $found[] = $release;
+                $newest = max($newest, $release['mtime']);
+            }
+        }
+    }
+
+    usort($found, static function (array $a, array $b): int {
+        $byVersion = version_compare($b['version'], $a['version']);
+        if ($byVersion !== 0) {
+            return $byVersion;
+        }
+        $byPlatform = (PLATFORM_ORDER[$a['platform']] ?? 9) <=> (PLATFORM_ORDER[$b['platform']] ?? 9);
+        if ($byPlatform !== 0) {
+            return $byPlatform;
+        }
+        $byArch = (ARCH_ORDER[$a['arch']] ?? 9) <=> (ARCH_ORDER[$b['arch']] ?? 9);
+        if ($byArch !== 0) {
+            return $byArch;
+        }
+        return strcmp($a['file'], $b['file']);
+    });
+
+    $releases[$kind] = $found;
+}
+?>
+<!doctype html>
+<html lang="en">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<title>Download · zagan.bet</title>
+<meta name="description" content="Official zagan.bet client and server downloads.">
+<meta http-equiv="Content-Security-Policy" content="default-src 'none'; style-src 'unsafe-inline'; img-src data:">
+<link rel="icon" href="data:,">
+<style>
+  :root {
+    --bg: #0b0e11;
+    --panel: #11171d;
+    --line: #222c35;
+    --text: #dde6ec;
+    --muted: #8b9aa6;
+    --accent: #5fd0e0;
+    --win: #6ee7a0;
+    --radius: 10px;
+  }
+
+  * { box-sizing: border-box; }
+
+  body {
+    margin: 0;
+    background: var(--bg);
+    color: var(--text);
+    font: 16px/1.55 system-ui, -apple-system, "Segoe UI", Roboto, sans-serif;
+  }
+
+  code, pre, .mono {
+    font-family: ui-monospace, "SF Mono", "Cascadia Mono", Menlo, Consolas, monospace;
+  }
+
+  .wrap {
+    max-width: 880px;
+    margin: 0 auto;
+    padding: 3rem 1.25rem 4rem;
+  }
+
+  header { margin-bottom: 2.5rem; }
+
+  h1 {
+    margin: 0 0 .35rem;
+    font: 700 2rem/1.1 ui-monospace, "SF Mono", Menlo, Consolas, monospace;
+    letter-spacing: -.02em;
+  }
+
+  h1 span { color: var(--accent); }
+
+  .tagline { margin: 0; color: var(--muted); }
+
+  .stamp { margin: .6rem 0 0; color: var(--muted); font-size: .8rem; }
+
+  section { margin-top: 2.5rem; }
+
+  h2 {
+    margin: 0 0 .9rem;
+    font-size: .8rem;
+    font-weight: 600;
+    letter-spacing: .12em;
+    text-transform: uppercase;
+    color: var(--muted);
+    border-bottom: 1px solid var(--line);
+    padding-bottom: .6rem;
+  }
+
+  .hint { margin: -.3rem 0 1rem; color: var(--muted); font-size: .9rem; }
+
+  .empty { color: var(--muted); font-size: .9rem; }
+
+  .grid {
+    list-style: none;
+    margin: 0;
+    padding: 0;
+    display: grid;
+    grid-template-columns: repeat(auto-fill, minmax(230px, 1fr));
+    gap: .9rem;
+  }
+
+  .card {
+    background: var(--panel);
+    border: 1px solid var(--line);
+    border-radius: var(--radius);
+    padding: 1rem;
+    display: flex;
+    flex-direction: column;
+    gap: .3rem;
+  }
+
+  .card-head {
+    display: flex;
+    align-items: baseline;
+    justify-content: space-between;
+    gap: .5rem;
+  }
+
+  .card h3 { margin: 0; font-size: 1rem; }
+
+  .ver {
+    font-size: .75rem;
+    color: var(--accent);
+    border: 1px solid var(--line);
+    border-radius: 999px;
+    padding: .1rem .5rem;
+    white-space: nowrap;
+  }
+
+  .card .arch { margin: 0; color: var(--muted); font-size: .85rem; }
+
+  .card .meta { margin: 0; color: var(--muted); font-size: .8rem; }
+
+  .card .btn { margin-top: .7rem; }
+
+  .btn {
+    display: block;
+    text-align: center;
+    text-decoration: none;
+    padding: .55rem .8rem;
+    border-radius: 7px;
+    background: var(--accent);
+    color: #06222a;
+    font-weight: 600;
+    font-size: .92rem;
+  }
+
+  .btn:hover { background: #86e2ee; }
+
+  .btn:focus-visible,
+  summary:focus-visible {
+    outline: 2px solid var(--win);
+    outline-offset: 2px;
+  }
+
+  pre {
+    margin: 0 0 1rem;
+    padding: .85rem 1rem;
+    overflow-x: auto;
+    background: var(--panel);
+    border: 1px solid var(--line);
+    border-radius: var(--radius);
+    font-size: .88rem;
+    line-height: 1.6;
+  }
+
+  pre .c { color: var(--muted); }
+
+  .table-wrap { overflow-x: auto; }
+
+  table {
+    width: 100%;
+    border-collapse: collapse;
+    font-size: .82rem;
+  }
+
+  th, td {
+    text-align: left;
+    padding: .55rem .7rem;
+    border-bottom: 1px solid var(--line);
+    vertical-align: top;
+  }
+
+  th {
+    color: var(--muted);
+    font-weight: 600;
+    font-size: .75rem;
+    letter-spacing: .06em;
+    text-transform: uppercase;
+    white-space: nowrap;
+  }
+
+  td.file { word-break: break-all; }
+  td.sum { word-break: break-all; color: var(--muted); }
+  td.size { white-space: nowrap; color: var(--muted); }
+
+  footer {
+    margin-top: 3rem;
+    padding-top: 1.5rem;
+    border-top: 1px solid var(--line);
+    color: var(--muted);
+    font-size: .88rem;
+  }
+
+  footer p { margin: .6rem 0 0; }
+
+  a { color: var(--accent); }
+</style>
+</head>
+<body>
+<div class="wrap">
+
+  <header>
+    <h1>zagan<span>.bet</span></h1>
+    <p class="tagline">Terminal betting. Slots, roulette, blackjack and crash.</p>
+    <?php if ($newest > 0): ?>
+      <p class="stamp">Builds published <?= e(gmdate('j M Y H:i', $newest)) ?> UTC</p>
+    <?php endif; ?>
+  </header>
+
+  <main>
+    <?php foreach (KINDS as $kind => $meta): ?>
+      <section>
+        <h2><?= e($meta['title']) ?></h2>
+        <p class="hint"><?= e($meta['hint']) ?></p>
+
+        <?php if ($releases[$kind] === []): ?>
+          <p class="empty">Nothing published yet.</p>
+        <?php else: ?>
+          <ul class="grid">
+            <?php foreach ($releases[$kind] as $release): ?>
+              <li class="card">
+                <div class="card-head">
+                  <h3><?= e(PLATFORMS[$release['platform']] ?? ucfirst($release['platform'])) ?></h3>
+                  <span class="ver">v<?= e($release['version']) ?></span>
+                </div>
+                <p class="arch">
+                  <?= e($release['arch']) ?><?php if (isset(ARCHES[$release['arch']])): ?>
+                    · <?= e(ARCHES[$release['arch']]) ?>
+                  <?php endif; ?>
+                </p>
+                <p class="meta"><?= e(human_size($release['size'])) ?></p>
+                <a class="btn" href="<?= e($release['href']) ?>" download>Download</a>
+              </li>
+            <?php endforeach; ?>
+          </ul>
+        <?php endif; ?>
+      </section>
+    <?php endforeach; ?>
+
+    <?php $all = array_merge($releases['client'], $releases['server']); ?>
+    <?php if ($all !== []): ?>
+      <section>
+        <h2>Checksums</h2>
+        <p class="hint">SHA-256 of every published file.</p>
+        <div class="table-wrap">
+          <table>
+            <thead>
+              <tr>
+                <th>File</th>
+                <th>Version</th>
+                <th>Size</th>
+                <th>SHA-256</th>
+              </tr>
+            </thead>
+            <tbody>
+              <?php foreach ($all as $release): ?>
+                <tr>
+                  <td class="file mono"><?= e($release['file']) ?></td>
+                  <td><?= e($release['version']) ?></td>
+                  <td class="size"><?= e(human_size($release['size'])) ?></td>
+                  <td class="sum mono"><?= e($release['sha256']) ?></td>
+                </tr>
+              <?php endforeach; ?>
+            </tbody>
+          </table>
+        </div>
+      </section>
+    <?php endif; ?>
+  </main>
+
+  <footer>
+    <h2>Running it</h2>
+    <pre><code><span class="c"># client (use the file you downloaded)</span>
+chmod +x &lt;downloaded-client&gt;
+./&lt;downloaded-client&gt;</code></pre>
+
+    <pre><code><span class="c"># server: first run creates identity.p12, key.pem and cert.pem</span>
+chmod +x &lt;downloaded-server&gt;
+./&lt;downloaded-server&gt; --init
+./&lt;downloaded-server&gt; -i 0.0.0.0 -p 11525</code></pre>
+
+    <p>Windows: run the <code>.exe</code> from Windows Terminal or another real terminal.</p>
+    <p>Verify a download before running it: <code>sha256sum &lt;file&gt;</code> (Linux) or <code>Get-FileHash &lt;file&gt;</code> (Windows).</p>
+  </footer>
+
+</div>
+</body>
+</html>