From 7431057f4c94fd21b45119036ac2df0218da55bd Mon Sep 17 00:00:00 2001
From: Braedon Saunders <braedonsaunders@users.noreply.github.com>
Date: Mon, 23 Feb 2026 19:48:38 -0500
Subject: [PATCH] fix(ci): publish only distributable desktop release assets

---
 .github/workflows/desktop-release.yml | 36 ++++++++++++++++++++++++---
 1 file changed, 33 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/desktop-release.yml b/.github/workflows/desktop-release.yml
index 731c725..4668e3f 100644
--- a/.github/workflows/desktop-release.yml
+++ b/.github/workflows/desktop-release.yml
@@ -108,10 +108,40 @@ jobs:
         with:
           path: release-artifacts
 
+      - name: Stage release assets
+        run: |
+          mkdir -p release-files
+          while IFS= read -r -d '' file; do
+            name="$(basename "$file")"
+            dest="release-files/$name"
+            if [ -e "$dest" ]; then
+              echo "Duplicate release asset name: $name"
+              exit 1
+            fi
+            cp "$file" "$dest"
+          done < <(
+            find release-artifacts -type f \
+              \( \
+                -name "*.dmg" -o \
+                -name "*.exe" -o \
+                -name "*.deb" -o \
+                -name "*.rpm" -o \
+                -name "*.AppImage" -o \
+                -name "*.app.tar.gz" \
+              \) \
+              -print0
+          )
+
+          count="$(find release-files -type f | wc -l | tr -d ' ')"
+          if [ "$count" -eq 0 ]; then
+            echo "No distributable release assets found"
+            exit 1
+          fi
+
       - name: Generate checksums
         run: |
-          cd release-artifacts
-          find . -type f -print0 | sort -z | xargs -0 shasum -a 256 > SHA256SUMS.txt
+          cd release-files
+          find . -maxdepth 1 -type f ! -name SHA256SUMS.txt -print0 | sort -z | xargs -0 shasum -a 256 > SHA256SUMS.txt
 
       - name: Create release and upload assets
         uses: softprops/action-gh-release@v2
@@ -122,4 +152,4 @@ jobs:
           fail_on_unmatched_files: true
           generate_release_notes: true
           files: |
-            release-artifacts/**/*
+            release-files/*