fix: remove arch -arm64 from xcodegen (runner already handles it)

hermes-verify-workflow.sh

@@ -0,0 +1,103 @@
+#!/bin/bash
+# Hermes verification: tabatago iPhone deploy workflow
+PASS=0
+FAIL=0
+
+REPO=/opt/data/projects/tabatago
+WF="$REPO/.gitea/workflows/pr-iphone-deploy.yml"
+DOCS="$REPO/docs/ci-cd-setup.md"
+
+pass() { PASS=$((PASS + 1)); echo "PASS"; }
+fail() { FAIL=$((FAIL + 1)); echo "FAIL"; }
+
+echo "=== Hermes Verify: iPhone Deploy Workflow ==="
+
+echo -n "[1] Workflow exists: "
+test -f "$WF" && pass || fail
+
+echo -n "[2] Workflow has pull_request trigger: "
+grep -q 'pull_request:' "$WF" && pass || fail
+
+echo -n "[3] Workflow has build-deploy job: "
+grep -q 'build-deploy' "$WF" && pass || fail
+
+echo -n "[4] Workflow has wait-approval job: "
+grep -q 'wait-approval' "$WF" && pass || fail
+
+echo -n "[5] runs-on macos: "
+grep -q 'runs-on: macos' "$WF" && pass || fail
+
+echo -n "[6] xcodegen generate: "
+grep -q 'xcodegen generate' "$WF" && pass || fail
+
+echo -n "[7] TabataGo scheme: "
+grep -q 'TabataGo' "$WF" && pass || fail
+
+echo -n "[8] IPHONE_UDID secret: "
+grep -q 'IPHONE_UDID' "$WF" && pass || fail
+
+echo -n "[9] GITEA_TOKEN secret: "
+grep -q 'GITEA_TOKEN' "$WF" && pass || fail
+
+echo -n "[10] LGTM polling: "
+grep -q 'LGTM' "$WF" && pass || fail
+
+echo -n "[11] Merge logic: "
+grep -qi 'merge' "$WF" && pass || fail
+
+echo -n "[12] Docs exist: "
+test -f "$DOCS" && pass || fail
+
+echo -n "[13] Docs covers macOS: "
+grep -q 'macOS' "$DOCS" && pass || fail
+
+echo -n "[14] Docs covers IPHONE_UDID: "
+grep -q 'IPHONE_UDID' "$DOCS" && pass || fail
+
+echo -n "[15] Docs covers GITEA_TOKEN: "
+grep -q 'GITEA_TOKEN' "$DOCS" && pass || fail
+
+echo -n "[16] Docs covers Troubleshooting: "
+grep -q 'Troubleshooting' "$DOCS" && pass || fail
+
+echo -n "[17] PR open on Gitea: "
+PR_CHECK=$(python3 -c "
+import subprocess, json, urllib.request
+remote = subprocess.run(['git','-C','$REPO','remote','get-url','origin'], capture_output=True, text=True).stdout.strip()
+token = remote.split('@')[0].replace('https://', '')
+req = urllib.request.Request(
+    'https://gitea.1000co.fr/api/v1/repos/millianlmx/tabatago/pulls?state=open&head=ci/iphone-deploy-workflow',
+    headers={'Authorization': f'token {token}'}
+)
+with urllib.request.urlopen(req) as resp:
+    prs = json.loads(resp.read())
+pr = prs[0]
+print(f'{pr[\"number\"]}|{pr[\"mergeable\"]}|{pr[\"base\"][\"ref\"]}')
+" 2>/dev/null)
+
+PR_NUM=$(echo "$PR_CHECK" | cut -d'|' -f1)
+if [ -n "$PR_NUM" ]; then
+  echo "PASS (##$PR_NUM)" && PASS=$((PASS + 1))
+else
+  echo "FAIL" && FAIL=$((FAIL + 1))
+fi
+
+echo -n "[18] PR mergeable: "
+MERGEABLE=$(echo "$PR_CHECK" | cut -d'|' -f2)
+if [ "$MERGEABLE" = "True" ]; then
+  echo "PASS" && PASS=$((PASS + 1))
+else
+  echo "FAIL (got: $MERGEABLE)" && FAIL=$((FAIL + 1))
+fi
+
+echo -n "[19] PR targets main: "
+BASE=$(echo "$PR_CHECK" | cut -d'|' -f3)
+if [ "$BASE" = "main" ]; then
+  echo "PASS" && PASS=$((PASS + 1))
+else
+  echo "FAIL (got: $BASE)" && FAIL=$((FAIL + 1))
+fi
+
+echo "========================================="
+echo "Results: $PASS passed, $FAIL failed"
+if [ "$FAIL" -gt 0 ]; then exit 1; else echo "=== ALL VERIFICATIONS PASSED ==="; fi