From 55e7aae4242dacd64f0adbaf87779739df53f3c0 Mon Sep 17 00:00:00 2001
From: MrNewb <47620135+MrNewb@users.noreply.github.com>
Date: Sat, 1 Aug 2026 01:35:42 -0400
Subject: [PATCH] ci: ship built UI only and fix webhook workflow

The release package excluded nothing under web/, so releases carried
the vite source, package manifests and configs. Ship web/dist and
web/public only, matching the 0.13.4 asset layout.

The webhook workflow linked to the old The-Order-Of-The-Sacred-Framework
URL, which now only 301s; point it at the current repo's latest
release. It reads just the event payload, so the checkout and jq
install steps were removed and permissions narrowed to contents: read.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
---
 .github/workflows/main.yml    | 13 ++++++-------
 .github/workflows/release.yml |  8 +++++++-
 2 files changed, 13 insertions(+), 8 deletions(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 52cc4c5..79fb8c7 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -4,17 +4,16 @@ on:
   release:
     types: [published]
 
+permissions:
+  contents: read
+
 jobs:
   send-webhook:
     runs-on: ubuntu-latest
 
     steps:
-      - name: Checkout repository
-        uses: actions/checkout@v3
-
-      - name: Install jq
-        run: sudo apt-get update && sudo apt-get install -y jq
-
+      # Reads only the release event payload, so no checkout is needed and jq
+      # is already present on the runner image.
       - name: Send webhook notification
         env:
           WEBHOOK_URL: ${{ secrets.RELEASE_WEBHOOK_URL }}
@@ -57,7 +56,7 @@ jobs:
                       "type": 2,
                       "style": 5,
                       "label": "Get The Latest Community Bridge Release",
-                      "url": "https://github.com/The-Order-Of-The-Sacred-Framework/community_bridge/tree/main"
+                      "url": "https://github.com/TheOrderFivem/community_bridge/releases/latest"
                     }
                   ]
                 }
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 6806385..d21748d 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -84,7 +84,7 @@ jobs:
       - name: Prepare release package
         run: |
           RELEASE_ROOT="release/community_bridge"
-          mkdir -p "$RELEASE_ROOT"
+          mkdir -p "$RELEASE_ROOT/web"
 
           rsync -a \
             --exclude '.git' \
@@ -93,8 +93,14 @@ jobs:
             --exclude '.github' \
             --exclude 'release' \
             --exclude 'node_modules' \
+            --exclude 'web' \
             ./ "$RELEASE_ROOT/"
 
+          # Pre-built web/dist/ is committed; ship the built UI only and leave
+          # the vite source and tooling (src/, package.json, configs) behind.
+          rsync -a web/dist/ "$RELEASE_ROOT/web/dist/"
+          rsync -a web/public/ "$RELEASE_ROOT/web/public/"
+
       - name: Create zip archive
         run: |
           cd release