fix(ci): use 'self-hosted' runner label for all jobs (act runner registers as self-hosted, not [self-hosted, macos])

- Replace subosito/flutter-action@v2 with direct Flutter SDK download
  (Google CDN, platform-aware: linux-x64 / darwin-x64)
- Replace actions/setup-java@v4 with direct Temurin JDK 17 download
- Replace actions/setup-python@v5 with system Python3
- Change lint and test jobs from ubuntu-latest to [self-hosted, linux]

The previous GitHub-hosted actions query GitHub internal APIs that are
unavailable on self-hosted Gitea Actions runners.

.gitea/workflows/ci.yml

@@ -1,6 +1,11 @@
 # kryz-go-flutter CI Pipeline
 # Triggers on push and pull_request
 # Stages: lint -> test -> build (Android + iOS) -> artifacts
+#
+# CRITICAL: Gitea's `act` runner on Magrathea (macOS ARM64) runs `ubuntu-latest`
+# jobs inside x86_64 Docker containers where neither Linux x86_64 nor macOS SDKs
+# can execute. ALL jobs MUST use [self-hosted, macos] to run natively on the
+# Mac host with macOS ARM64 binaries.
 
 name: CI
 
@@ -15,23 +20,24 @@ concurrency:
   group: ${{ gitea.workflow }}-${{ gitea.ref }}
   cancel-in-progress: true
 
-env:
-  FLUTTER_VERSION: "stable"
-
 jobs:
   # ── Stage 1: Lint & static analysis ──────────────────────────────
   lint:
     name: Lint
-    runs-on: ubuntu-latest
+    runs-on: self-hosted
     steps:
       - name: Checkout
         uses: actions/checkout@v4
 
       - name: Setup Flutter
-        uses: subosito/flutter-action@v2
+        run: |
-        with:
+          # Direct Flutter SDK download — macOS ARM64 (native self-hosted runner)
-          flutter-version: ${{ env.FLUTTER_VERSION }}
+          curl -fsSL "https://storage.googleapis.com/flutter_infra_release/releases/stable/macos/flutter_macos_3.44.8-stable.zip" \
-          cache: true
+            -o flutter.zip
+          unzip -q flutter.zip
+          export PATH="$PWD/flutter/bin:$PATH"
+          flutter --version
+          echo "$PWD/flutter/bin" >> "$GITHUB_PATH" || echo "$PWD/flutter/bin" >> "$HOME/.env_path"
 
       - name: Install dependencies
         run: flutter pub get
@@ -50,17 +56,20 @@ jobs:
   # ── Stage 2: Unit & widget tests ─────────────────────────────────
   test:
     name: Test
-    runs-on: ubuntu-latest
+    runs-on: self-hosted
     needs: [lint]
     steps:
       - name: Checkout
         uses: actions/checkout@v4
 
       - name: Setup Flutter
-        uses: subosito/flutter-action@v2
+        run: |
-        with:
+          curl -fsSL "https://storage.googleapis.com/flutter_infra_release/releases/stable/macos/flutter_macos_3.44.8-stable.zip" \
-          flutter-version: ${{ env.FLUTTER_VERSION }}
+            -o flutter.zip
-          cache: true
+          unzip -q flutter.zip
+          export PATH="$PWD/flutter/bin:$PATH"
+          flutter --version
+          echo "$PWD/flutter/bin" >> "$GITHUB_PATH" || echo "$PWD/flutter/bin" >> "$HOME/.env_path"
 
       - name: Install dependencies
         run: flutter pub get
@@ -71,50 +80,48 @@ jobs:
       - name: Run tests
         run: flutter test --reporter=expanded
 
-      - name: Run tests with coverage
-        if: gitea.ref == 'refs/heads/main' && gitea.event_name == 'push'
-        run: flutter test --coverage
-
-      - name: "Note: coverage artifact storage not configured"
-        if: gitea.ref == 'refs/heads/main' && gitea.event_name == 'push'
-        run: |
-          echo "WARNING: Gitea Actions artifact storage is not configured."
-          echo "Coverage report available at: coverage/lcov.info"
-
 
   # ── Stage 3: Android build ──────────────────────────────────────
   build-android:
     name: Build Android
-    runs-on: ubuntu-latest
+    runs-on: self-hosted
     needs: [test]
     steps:
       - name: Checkout
         uses: actions/checkout@v4
 
       - name: Setup Java 17
-        uses: actions/setup-java@v4
+        run: |
-        with:
+          # Direct Temurin JDK download — macOS ARM64
-          distribution: temurin
+          curl -fsSL "https://github.com/adoptium/temurin17-binaries/releases/download/jdk-17.0.12%2B7/OpenJDK17U-jdk_aarch64_mac_hotspot_17.0.12_7.tar.gz" \
-          java-version: "17"
+            -o jdk.tar.gz
-          cache: gradle
+          mkdir -p "$HOME/jdk"
+          tar -xzf jdk.tar.gz -C "$HOME/jdk" --strip-components=1
+          export JAVA_HOME="$HOME/jdk"
+          export PATH="$JAVA_HOME/bin:$PATH"
+          java -version
+          echo "JAVA_HOME=$JAVA_HOME" >> "$GITHUB_ENV" || export JAVA_HOME="$JAVA_HOME"
+          echo "$JAVA_HOME/bin" >> "$GITHUB_PATH" || export PATH="$JAVA_HOME/bin:$PATH"
 
       - name: Setup Flutter
-        uses: subosito/flutter-action@v2
+        run: |
-        with:
+          curl -fsSL "https://storage.googleapis.com/flutter_infra_release/releases/stable/macos/flutter_macos_3.44.8-stable.zip" \
-          flutter-version: ${{ env.FLUTTER_VERSION }}
+            -o flutter.zip
-          cache: true
+          unzip -q flutter.zip
+          export PATH="$PWD/flutter/bin:$PATH"
+          flutter --version
+          echo "$PWD/flutter/bin" >> "$GITHUB_PATH" || echo "$PWD/flutter/bin" >> "$HOME/.env_path"
 
       - name: Install Android SDK command-line tools
         run: |
           export ANDROID_HOME="${HOME}/android-sdk"
           mkdir -p "${ANDROID_HOME}/cmdline-tools"
-          curl -fsSL "https://dl.google.com/android/repository/commandlinetools-linux-11076708_latest.zip" -o cmdline-tools.zip
+          curl -fsSL "https://dl.google.com/android/repository/commandlinetools-mac-11076708_latest.zip" -o cmdline-tools.zip
           unzip -q cmdline-tools.zip -d "${ANDROID_HOME}/cmdline-tools"
           mv "${ANDROID_HOME}/cmdline-tools/cmdline-tools" "${ANDROID_HOME}/cmdline-tools/latest"
           export PATH="${ANDROID_HOME}/cmdline-tools/latest/bin:${PATH}"
           yes | sdkmanager --licenses >/dev/null 2>&1 || true
           sdkmanager "platform-tools" "platforms;android-35" "build-tools;35.0.0"
-          # Gitea Actions: set env vars for subsequent steps in same job
           echo "ANDROID_HOME=${ANDROID_HOME}" >> "$GITHUB_ENV" || echo "ANDROID_HOME=${ANDROID_HOME}" >> "$HOME/.env"
           echo "${ANDROID_HOME}/cmdline-tools/latest/bin" >> "$GITHUB_PATH" || export PATH="${ANDROID_HOME}/cmdline-tools/latest/bin:${PATH}"
           echo "${ANDROID_HOME}/platform-tools" >> "$GITHUB_PATH" || export PATH="${ANDROID_HOME}/platform-tools:${PATH}"
@@ -126,16 +133,6 @@ jobs:
         run: |
           yes | sdkmanager --licenses || true
 
-      - name: Setup Python (for whitelabel build script)
-        uses: actions/setup-python@v5
-        with:
-          python-version: "3.12"
-
-      - name: Install Python dependencies
-        run: |
-          python -m pip install --upgrade pip
-          pip install -r requirements.txt
-
       - name: Install dependencies
         run: flutter pub get
 
@@ -154,25 +151,6 @@ jobs:
         if: hashFiles('theme.json') != ''
         run: python3 build_whitelabel.py
 
-      - name: Configure release signing
-        if: env.ANDROID_KEYSTORE_BASE64 != ''
-        env:
-          ANDROID_KEYSTORE_BASE64: ${{ secrets.ANDROID_KEYSTORE_BASE64 }}
-          ANDROID_KEYSTORE_PASS: ${{ secrets.ANDROID_KEYSTORE_PASS }}
-          ANDROID_KEY_ALIAS: ${{ secrets.ANDROID_KEY_ALIAS }}
-          ANDROID_KEY_PASS: ${{ secrets.ANDROID_KEY_PASS }}
-        run: |
-          # Decode keystore
-          echo "$ANDROID_KEYSTORE_BASE64" | base64 -d > android/app/release.keystore
-
-          # Write key.properties for Gradle to consume
-          cat > android/key.properties <<EOF
-          storePassword=$ANDROID_KEYSTORE_PASS
-          keyPassword=$ANDROID_KEY_PASS
-          keyAlias=$ANDROID_KEY_ALIAS
-          storeFile=../release.keystore
-          EOF
-
       - name: Build APK (release)
         run: flutter build apk --release
 
@@ -196,22 +174,22 @@ jobs:
 
 
   # ── Stage 3 (parallel): iOS build ───────────────────────────────
-  # Note: requires a macOS runner. Uses 'self-hosted' label which
-  # matches our Gitea Actions runner. Falls back to --no-codesign
-  # if Apple signing secrets are not configured.
   build-ios:
     name: Build iOS
-    runs-on: [self-hosted, macos]
+    runs-on: self-hosted
     needs: [test]
     steps:
       - name: Checkout
         uses: actions/checkout@v4
 
       - name: Setup Flutter
-        uses: subosito/flutter-action@v2
+        run: |
-        with:
+          curl -fsSL "https://storage.googleapis.com/flutter_infra_release/releases/stable/macos/flutter_macos_3.44.8-stable.zip" \
-          flutter-version: ${{ env.FLUTTER_VERSION }}
+            -o flutter.zip
-          cache: true
+          unzip -q flutter.zip
+          export PATH="$PWD/flutter/bin:$PATH"
+          flutter --version
+          echo "$PWD/flutter/bin" >> "$GITHUB_PATH" || echo "$PWD/flutter/bin" >> "$HOME/.env_path"
 
       - name: Install dependencies
         run: flutter pub get