perf: skip hashes for ineligible configuration stores

.editorconfig

@@ -0,0 +1,9 @@
+root = true
+
+[*]
+charset = utf-8
+end_of_line = lf
+insert_final_newline = true
+
+[*.{c,h,m,mm,cpp,hpp,json,cmake,md,ps1,js}]
+trim_trailing_whitespace = true

.github/ISSUE_TEMPLATE/1_feature_request.yml

@@ -0,0 +1,38 @@
+name: ✨ Feature Request ✨
+description: "💡 Got a great idea? Share your creativity with us!"
+title: "[✨Feature Request]: "
+labels: ['enhancement']
+body:
+  - type: input
+    id: problem
+    attributes:
+      label: 🌈 Feature You'd Like  
+      description: "Briefly describe the feature you'd like to add or improve. Let's make the software even better together!"  
+    validations:
+      required: false
+  - type: textarea
+    id: way-to-solve
+    attributes:
+      label: 🚀 Ideal Solution  
+      description: "What does your perfect solution look like? Feel free to use your imagination - don't worry about technical details!"  
+    validations:
+      required: true
+  - type: textarea
+    id: instead
+    attributes:
+      label: 🤔 Alternative Solutions (Optional)  
+      description: "If you have other ideas, please share them here. The more, the merrier!"  
+    validations:
+      required: false
+  - type: checkboxes
+    id: "latest-version"
+    attributes:
+      label: "✅ Final Step"
+      description: "Before submitting your brilliant idea, please confirm the following:"  
+      options:
+        - label: "🌟 I've checked the latest version and confirmed my requested feature isn't already implemented."
+          required: true
+        - label: "📋 I've reviewed existing feature requests to make sure this isn't a duplicate."
+          required: true
+        - label: "🌍 I've written this request in English so it can be understood by the wider community."
+          required: true

.github/ISSUE_TEMPLATE/2_bug_report.yml

@@ -0,0 +1,57 @@
+name:  🐛 Bug Report 🐛
+description: "🛠️ Found a problem? Let us know here!"
+title: "[🐛Bug]: "
+labels: ["bug"]
+body:
+  - type: input
+    id: "expectation"
+    attributes:
+      label: "✨ What You Expected"
+      description: "How should the software work? Describe what you expected to happen."  
+    validations:
+      required: false
+  - type: textarea
+    id: "describe-the-bug"
+    attributes:
+      label: "❓ What Actually Happened"
+      description: "Oops! Something went wrong? Please tell us what you saw - the more details, the better!"  
+    validations:
+      required: true
+  - type: textarea
+    id: "reproduction-method"
+    attributes:
+      label: "📝 Steps to Reproduce the Issue"
+      description: "Can you tell us how you encountered this bug? List the steps so we can find the problem faster."
+      placeholder: "For example:\n1. Used what feature\n2. Then this happened...\n3. Oops! Problem occurred!"
+    validations:
+      required: false
+  - type: dropdown
+    id: "platform"
+    attributes:
+      label: "📌 Platform"
+      description: "Which platform are you using? For Linux, please select your desktop environment."
+      options:
+        - "Windows"
+        - "macOS"
+        - "Linux - GNOME"
+        - "Linux - KDE Plasma"
+        - "Linux - Xfce"
+        - "Linux - Cinnamon"
+        - "Linux - MATE"
+        - "Linux - LXQt"
+        - "Linux - Niri"
+        - "Linux - Other desktop environment"
+    validations:
+      required: true
+  - type: checkboxes
+    id: "latest-version"
+    attributes:
+      label: "✅ Final Checklist"
+      description: "Before submitting your bug report, please confirm the following:"  
+      options:
+        - label: "⚡ I've confirmed I'm using the latest version, not an older one."
+          required: true
+        - label: "📋 I've checked the FAQ and known issues list to confirm this is a new bug."
+          required: true
+        - label: "🌍 This report is written in English so that more members of the community can read and understand it."
+          required: true

.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,5 @@
+blank_issues_enabled: true
+contact_links:
+  - name: 💬 Questions & Discussions 💬
+    url: https://github.com/vladelaina/BongoCat/discussions
+    about: "🤝 Have a question or want to chat? Join our friendly community discussions!"

.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,24 @@
+## Ciallo～(∠・ω<)⌒★
+
+### 🎉 You are awesome!
+
+Thank you for taking the time to make this project better! We truly value your contribution.💕
+
+---
+
+### 📝 What's changed?
+*(Briefly describe what you did or what problem you fixed)*
+
+> 
+
+---
+
+### 🤝 Don't worry about perfection
+
+**We value your ideas and participation more than perfect code!**
+
+If there are any style, testing, or detail issues, **we will help fix and polish them**. Just submit it, and we'll handle the rest!
+
+---
+
+*Thanks again! Happy to build this with you! 🙌*

.github/gcc-problem-matcher.json

@@ -1,7 +1,7 @@
 {
   "problemMatcher": [
     {
-      "owner": "bongo-cat-gcc",
+      "owner": "bongocat-gcc",
       "pattern": [
         {
           "regexp": "^(.+?):(\\d+):(\\d+):\\s+(warning|error|fatal error):\\s+(.*)$",

.github/scripts/build-unix.sh

@@ -2,7 +2,7 @@
 
 set -uo pipefail
 
-log="${RUNNER_TEMP:-.}/bongo-cat-native-build.log"
+log="${RUNNER_TEMP:-.}/bongocat-native-build.log"
 set +e
 "$@" 2>&1 | tee "$log"
 status=${PIPESTATUS[0]}

.github/scripts/build-windows.ps1

@@ -4,7 +4,7 @@ param(
 )
 
 $tempRoot = if ($env:RUNNER_TEMP) { $env:RUNNER_TEMP } else { '.' }
-$log = Join-Path $tempRoot 'bongo-cat-native-build.log'
+$log = Join-Path $tempRoot 'bongocat-native-build.log'
 $executable = $BuildCommand[0]
 $arguments = if ($BuildCommand.Count -gt 1) { $BuildCommand[1..($BuildCommand.Count - 1)] } else { @() }
 

.github/scripts/check-publish-guards.ps1

@@ -0,0 +1,136 @@
+[CmdletBinding()]
+param([switch]$SelfTest)
+
+$ErrorActionPreference = 'Stop'
+Set-StrictMode -Version Latest
+
+$upstreamGuards = @(
+    "github.repository == 'vladelaina/BongoCat'"
+)
+$workflowDirectory = Join-Path (Split-Path $PSScriptRoot -Parent) 'workflows'
+$sensitiveMarkers = @(
+    'build-store-package.ps1',
+    'CUBISM_SDK_ARCHIVE_URL',
+    'VIRUSTOTAL_API_KEY',
+    'actions/upload-artifact',
+    'softprops/action-gh-release'
+)
+$runtimeArtifactMarkers = @(
+    'build-store-package.ps1',
+    'Upload desktop release',
+    'Upload Microsoft Store MSIX',
+    'Upload Windows desktop release',
+    'Upload Windows portable release',
+    'name: bongocat-release-',
+    'softprops/action-gh-release'
+)
+
+function Get-PublishingGuardFailures {
+    param(
+        [Parameter(Mandatory = $true)][string]$Text,
+        [Parameter(Mandatory = $true)][string]$Label
+    )
+
+    $jobsStart = $Text.IndexOf("jobs:", [StringComparison]::Ordinal)
+    if ($jobsStart -lt 0) { return @() }
+    $jobsText = $Text.Substring($jobsStart)
+    $jobPattern = '(?ms)^  ([A-Za-z0-9_-]+):\s*\r?\n' +
+        '(.*?)(?=^  [A-Za-z0-9_-]+:\s*\r?\n|\z)'
+    $failures = @()
+    $jobMatches = [regex]::Matches($jobsText, $jobPattern)
+    $buildJob = @($jobMatches | Where-Object {
+        $_.Groups[1].Value -eq 'build'
+    } | Select-Object -First 1)
+    $protectedBuild = $buildJob.Count -eq 1 -and
+        $buildJob[0].Value.Contains('-DBONGO_CAT_REQUIRE_CUBISM=ON')
+
+    foreach ($job in $jobMatches) {
+        $jobName = $job.Groups[1].Value
+        $jobText = $job.Value
+        $matched = @($sensitiveMarkers | Where-Object { $jobText.Contains($_) })
+        if ($matched.Count -eq 0) { continue }
+        $guarded = @($upstreamGuards | Where-Object {
+            $jobText.Contains($_)
+        }).Count -gt 0
+        if (-not $guarded) {
+            $failures += "$Label`: job '$jobName' lacks upstream guard; " +
+                "matched $($matched -join ', ')"
+        }
+        $publishesRuntimeArtifacts = @($runtimeArtifactMarkers | Where-Object {
+            $jobText.Contains($_)
+        }).Count -gt 0
+        $usesProtectedBuild = $protectedBuild -and $jobText -match
+            '(?m)^\s+needs:\s*(?:build|\[[^\]]*\bbuild\b[^\]]*\])\s*$'
+        if ($publishesRuntimeArtifacts -and
+            -not $jobText.Contains('-DBONGO_CAT_REQUIRE_CUBISM=ON') -and
+            -not $usesProtectedBuild) {
+            $failures += "$Label`: job '$jobName' publishes artifacts without " +
+                'requiring a Cubism SDK build'
+        }
+    }
+    return $failures
+}
+
+$workflowPaths = @(
+    Get-ChildItem -LiteralPath $workflowDirectory -File |
+        Where-Object { $_.Extension -in @('.yml', '.yaml') } |
+        Sort-Object FullName
+)
+$failures = @()
+$checkedJobs = 0
+$selfTestText = $null
+
+foreach ($path in $workflowPaths) {
+    $text = Get-Content -LiteralPath $path.FullName -Raw
+    $pathFailures = @(Get-PublishingGuardFailures -Text $text -Label $path.Name)
+    $failures += $pathFailures
+    $jobsStart = $text.IndexOf("jobs:", [StringComparison]::Ordinal)
+    if ($jobsStart -ge 0) {
+        $jobsText = $text.Substring($jobsStart)
+        $checkedJobs += @([regex]::Matches($jobsText,
+            '(?ms)^  ([A-Za-z0-9_-]+):\s*\r?\n(.*?)(?=^  [A-Za-z0-9_-]+:\s*\r?\n|\z)') |
+            Where-Object {
+                $jobText = $_.Value
+                @($sensitiveMarkers | Where-Object {
+                    $jobText.Contains($_)
+                }).Count -gt 0
+            }).Count
+    }
+    if (-not $selfTestText -and
+        ($sensitiveMarkers | Where-Object { $text.Contains($_) })) {
+        $selfTestText = $text
+    }
+}
+
+if ($SelfTest) {
+    if (-not $selfTestText) {
+        $failures += 'Self-test could not find a sensitive workflow.'
+    }
+    else {
+        $mutated = $selfTestText
+        foreach ($guard in $upstreamGuards) {
+            $mutated = $mutated.Replace($guard, 'true')
+        }
+        $caught = @(Get-PublishingGuardFailures -Text $mutated -Label 'self-test')
+        if ($caught.Count -eq 0) {
+            $failures += 'Self-test did not reject a removed upstream guard.'
+        }
+        $withoutCubism = $selfTestText.Replace(
+            '-DBONGO_CAT_REQUIRE_CUBISM=ON',
+            '-DBONGO_CAT_REQUIRE_CUBISM=OFF')
+        $cubismFailures = @(Get-PublishingGuardFailures `
+            -Text $withoutCubism -Label 'self-test')
+        if (-not ($cubismFailures -match 'requiring a Cubism SDK build')) {
+            $failures += 'Self-test did not reject an SDK-free artifact job.'
+        }
+    }
+}
+
+if ($failures.Count -gt 0) {
+    Write-Error ("Publishing guard policy failed:`n- " +
+        ($failures -join "`n- "))
+    exit 1
+}
+
+Write-Host "Publishing guard policy passed for $checkedJobs sensitive job(s)."
+if ($SelfTest) { Write-Host 'Publishing guard negative self-tests passed.' }