Add DriveThruCards Integration

.github/actions/test-desktop-tool/action.yml

@@ -2,8 +2,9 @@ name: Desktop tool tests
 description: Test the MPC Autofill CLI / desktop tool
 inputs:
   google-drive-api-key:
-    description: Your Google Drive API key, required for running the database crawler
-    required: true
+    description: Your Google Drive API key. When empty, tests requiring it skip themselves.
+    required: false
+    default: ""
 runs:
   using: composite
   steps:
@@ -30,12 +31,20 @@ runs:
         pip install -r requirements.txt
       shell: bash
     - name: Write Google Drive API credentials to file
+      if: inputs.google-drive-api-key != ''
       uses: jsdaniell/create-json@v1.2.3
       with:
         name: "client_secrets.json"
         json: ${{ inputs.google-drive-api-key }}
         dir: "desktop-tool/"
     - name: Run tests
       working-directory: desktop-tool
-      run: pytest .
+      env:
+        MPC_AUTOFILL_RELEASE_CHECKS: "1"
+      run: |
+        if [[ "$RUNNER_OS" == Linux ]]; then
+          dbus-run-session -- pytest .
+        else
+          pytest .
+        fi
       shell: bash

.github/workflows/build-desktop-tool.yml

@@ -0,0 +1,101 @@
+name: Desktop tool build
+
+on:
+  workflow_dispatch:
+    inputs:
+      version:
+        description: Release version embedded in the executable (for example, 1.1.0)
+        required: true
+        type: string
+
+jobs:
+  test:
+    name: Test on ${{ matrix.os }}
+    runs-on: ${{ matrix.os }}
+    strategy:
+      matrix:
+        os:
+          - macos-latest
+          - ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+      - uses: ./.github/actions/test-desktop-tool
+        with:
+          google-drive-api-key: ${{ secrets.GOOGLE_DRIVE_API_KEY }}
+
+  build:
+    name: Build ${{ matrix.target }}
+    needs: test
+    runs-on: ${{ matrix.os }}
+    defaults:
+      run:
+        working-directory: desktop-tool
+    strategy:
+      matrix:
+        include:
+          - os: macos-latest
+            target: macos-arm
+            filename: autofill-macos-arm.command
+            macos-arch: arm64
+          - os: macos-15-intel
+            target: macos-intel
+            filename: autofill-macos-intel.command
+            macos-arch: x86_64
+          - os: ubuntu-latest
+            target: linux
+            filename: autofill-linux.bin
+            macos-arch: ""
+          - os: windows-latest
+            target: windows
+            filename: autofill-windows.exe
+            macos-arch: ""
+    steps:
+      - uses: actions/checkout@v6
+      - name: Set up Python 3.13
+        uses: actions/setup-python@v6
+        with:
+          python-version: "3.13"
+      - name: Install dependencies
+        run: |
+          python -m pip install --upgrade pip
+          pip install -r requirements.txt
+          python -m pip install imageio
+      - name: Require Google Drive API credentials
+        env:
+          GOOGLE_DRIVE_API_KEY: ${{ secrets.GOOGLE_DRIVE_API_KEY }}
+        shell: bash
+        run: test -n "$GOOGLE_DRIVE_API_KEY" || (echo "Add desktop-tool/client_secrets.json as the GOOGLE_DRIVE_API_KEY repository secret." && exit 1)
+      - name: Write Google Drive API credentials to file
+        uses: jsdaniell/create-json@v1.2.3
+        with:
+          name: client_secrets.json
+          json: ${{ secrets.GOOGLE_DRIVE_API_KEY }}
+          dir: desktop-tool/
+      - name: Build with Nuitka
+        uses: Nuitka/Nuitka-Action@main
+        with:
+          nuitka-version: main
+          working-directory: desktop-tool
+          script-name: autofill.py
+          mode: onefile
+          output-file: ${{ matrix.filename }}
+          # required by the versioned onefile cache directory ({VERSION} in --onefile-tempdir-spec)
+          file-version: ${{ inputs.version }}
+          macos-target-arch: ${{ matrix.macos-arch }}
+      - name: Smoke test bundled executable
+        shell: bash
+        run: |
+          env -u SSL_CERT_FILE -u SSL_CERT_DIR ./build/${{ matrix.filename }} --check-tls
+          if [[ "$RUNNER_OS" == Linux ]]; then
+            help_output=$(dbus-run-session -- ./build/${{ matrix.filename }} --help)
+          else
+            help_output=$(./build/${{ matrix.filename }} --help)
+          fi
+          grep -q MakePlayingCards <<< "$help_output"
+          grep -q DriveThruCards <<< "$help_output"
+          stat -f "%N: %z bytes" build/${{ matrix.filename }} 2>/dev/null || stat -c "%n: %s bytes" build/${{ matrix.filename }}
+      - name: Upload unsigned artifact
+        uses: actions/upload-artifact@v7
+        with:
+          name: ${{ matrix.target }} Unsigned Build
+          path: desktop-tool/build/${{ matrix.filename }}

.github/workflows/desktop-tool-ci.yml

@@ -114,12 +114,17 @@ jobs:
           script-name: autofill.py
           mode: onefile
           output-file: ${{ matrix.FILENAME }}
+          # required by the versioned onefile cache directory ({VERSION} in --onefile-tempdir-spec)
+          file-version: 1.0.${{ github.run_number }}
           macos-sign-notarization: ${{ (matrix.TARGET == 'macos-arm') || (matrix.TARGET == 'macos-intel') }}
           macos-sign-identity: ${{ secrets.MACOS_SIGN_IDENTITY }}
           macos-sign-keyring-filename: "${{ runner.temp }}/app-signing.keychain-db"
           macos-sign-keyring-password: ${{ secrets.KEYCHAIN_PASSWORD }}
           macos-signed-app-name: com.ndepaola.mpc-autofill-${{ matrix.TARGET }}
           macos-target-arch: ${{ matrix.MACOS_ARCH }}
+      - name: Smoke test bundled TLS
+        shell: bash
+        run: env -u SSL_CERT_FILE -u SSL_CERT_DIR ./build/${{ matrix.FILENAME }} --check-tls
       - name: Upload unsigned artifact
         id: upload-unsigned-artifact
         uses: actions/upload-artifact@v7

.github/workflows/test-desktop-tool.yml

@@ -8,6 +8,8 @@ jobs:
   test:
     name: Desktop tool tests
     runs-on: ${{ matrix.os }}
+    env:
+      GOOGLE_DRIVE_API_KEY: ${{ secrets.GOOGLE_DRIVE_API_KEY }}
     strategy:
       matrix:
         include:
@@ -16,6 +18,12 @@ jobs:
     #          - os: ubuntu-latest  # https://github.com/browser-actions/setup-edge/issues/516
     steps:
       - uses: actions/checkout@v6
-      - uses: ./.github/actions/test-desktop-tool
+      # Tests requiring the Google Drive API key skip themselves when it's absent (fork pull
+      # requests), so the rest of the suite still runs.
+      - name: Run desktop tool tests
+        uses: ./.github/actions/test-desktop-tool
         with:
-          google-drive-api-key: ${{ secrets.GOOGLE_DRIVE_API_KEY }}
+          google-drive-api-key: ${{ env.GOOGLE_DRIVE_API_KEY }}
+      - name: Note skipped secret-backed tests for fork pull requests
+        if: env.GOOGLE_DRIVE_API_KEY == ''
+        run: echo "::notice::Tests requiring GOOGLE_DRIVE_API_KEY were skipped because the secret is unavailable to fork pull requests."

.gitignore

@@ -1,6 +1,6 @@
 # Ignore XML files we might use for debugging
 cards.xml
-cards/*
+**/cards/*
 
 # Ignore pyinstaller stuff
 __pycache__/*
@@ -18,6 +18,20 @@ __pycache__/
 # C extensions
 *.so
 
+# Ignore Nuitka package stuff
+**/autofill.dist/*
+**/autofill.build/*
+**/autofill.onefile-build/*
+**/autofill.bin
+autofill.command
+autofill.exe
+autofill-macos-arm.command
+autofill-macos-intel.command
+autofill-windows.exe
+autofill-linux.bin
+nuitka-crash-report.xml
+autofill_crash_log.txt
+
 # Distribution / packaging
 .Python
 build/
@@ -57,6 +71,7 @@ coverage.xml
 .pytest_cache/
 desktop-tool/export/
 desktop-tool/tests/export/
+desktop-tool/tests/cards/
 
 cover/
 
@@ -94,7 +109,7 @@ ipython_config.py
 # pyenv
 #   For a library or package, you might want to ignore these files since the code is
 #   intended to run in multiple environments; otherwise, check them in:
-# .python-version
+.python-version
 
 # pipenv
 #   According to pypa/pipenv#598, it is recommended to include Pipfile.lock in version control.
@@ -115,6 +130,7 @@ celerybeat.pid
 
 # Environments
 .env
+.login
 .venv
 env/
 venv/

.pre-commit-config.yaml

@@ -25,6 +25,7 @@ repos:
     rev: v1.7.0
     hooks:
       - id: mypy
+        language_version: python3.13
         args: [--config-file, mypy.ini, desktop-tool/, MPCAutofill/]
         additional_dependencies: [
             # typing