release(v0.2.0): gate DMG behind appdmg + add license (fix macOS/Linux release legs)

.github/workflows/release.yml

@@ -40,24 +40,9 @@ jobs:
           node-version: 24
           cache: npm
 
-      - name: (macOS) setuptools for node-gyp — appdmg's native deps
-        # maker-dmg's `appdmg` pulls native addons (macos-alias, fs-xattr) that
-        # node-gyp compiles. Python 3.12 (default on macos runners) dropped
-        # distutils, so those builds fail and `npm ci` SILENTLY drops the whole
-        # optional appdmg chain — later surfacing as "Cannot find module
-        # 'appdmg'" when MakerDMG runs. setuptools restores the distutils shim.
-        if: runner.os == 'macOS'
-        run: python3 -m pip install --break-system-packages setuptools
-
       - name: Install dependencies
         run: npm ci
 
-      - name: (macOS) Assert appdmg is installed (fail loud, never silent)
-        # If the native build above still failed, npm would have dropped appdmg
-        # again; catch it here instead of deep inside `electron-forge publish`.
-        if: runner.os == 'macOS'
-        run: node -e "require.resolve('appdmg')"
-
       - name: Publish app (creates/updates a draft release for this tag)
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

forge.config.ts

@@ -14,6 +14,7 @@ import { MakerDeb } from '@electron-forge/maker-deb';
 import { MakerRpm } from '@electron-forge/maker-rpm';
 import { VitePlugin } from '@electron-forge/plugin-vite';
 import { PublisherGithub } from '@electron-forge/publisher-github';
+import { existsSync } from 'node:fs';
 
 // ── Code signing — env-gated, degrades to unsigned builds (audit 1.1) ───────
 // None of these secrets exist in this repo yet, so every branch below is
@@ -91,9 +92,17 @@ console.log(
 // releases (release.yml) and local `make` still build the full installer set.
 const zipOnly = process.env.HELIOX_MAKE_ZIP_ONLY === '1';
 
+// maker-dmg needs the darwin-only native `appdmg`, whose macos-alias/fs-xattr
+// addons don't compile on hosted macOS runners (old native code, no prebuilds),
+// so npm drops the optional chain and MakerDMG throws "Cannot find module
+// 'appdmg'". Build the DMG only where appdmg actually resolved (local mac dev);
+// CI ships the portable mac .zip instead — which is also exactly what
+// Squirrel.Mac auto-update consumes, so the mac update path is unaffected.
+const appdmgAvailable = existsSync('node_modules/appdmg/package.json');
+
 const installerMakers = [
   new MakerSquirrel({ name: 'HelioxIDE', authors: 'Heliox', setupIcon: './assets/icon.ico', ...windowsSigning }),
-  new MakerDMG({ format: 'ULFO', icon: './assets/icon.icns' }),
+  ...(appdmgAvailable ? [new MakerDMG({ format: 'ULFO', icon: './assets/icon.icns' })] : []),
   new MakerDeb({
     options: {
       maintainer: 'Heliox',

package.json

@@ -4,6 +4,7 @@
   "version": "0.2.0",
   "description": "Open-source dashboard for designing agentic flows — compose visually, verify by execution, and export portable flows that run across TypeScript, Java, and Python.",
   "author": "Heliox",
+  "license": "Apache-2.0",
   "main": ".vite/build/index.js",
   "engines": {
     "node": ">=24"