feat: Electron desktop app, native ffmpeg export, fully static web

- apps/desktop: Electron shell serving the static web build over a
  privileged opencut:// protocol; exports stream frames over IPC to a
  bundled ffmpeg (libx264/libvpx-vp9, BT.709 tagged) with backpressure.
  electron-builder packaging: AppImage, deb, rpm.
- apps/web: dead backend deleted (better-auth, drizzle/pg, upstash,
  botid, freesound proxy, blog, rss, env validation); next build emits
  a zero-env static export; /editor/[project_id] -> /editor?project=.
- Native exporter mirrors SceneExporter; activates when the preload
  bridge is present; web keeps the mediabunny path.
- Docker self-hosting now builds and serves the static export via nginx.
- Release workflow: v* tags publish static web tarball + Linux packages.
- Changelog 0.4.0; README/AGENTS/CONTRIBUTING/roadmap updated.
- GPUI/Rust rewrite parked on branch rust-rewrite.

1 files changed, 21 insertions, 62 deletions

diff --git a/apps/web/Dockerfile b/apps/web/Dockerfile
index a08d9b68..27a9db70 100644
--- a/apps/web/Dockerfile
+++ b/apps/web/Dockerfile
@@ -1,62 +1,21 @@
-FROM oven/bun:alpine AS base

-

-FROM base AS builder

-

-WORKDIR /app

-

-ARG FREESOUND_CLIENT_ID

-ARG FREESOUND_API_KEY

-ARG NEXT_PUBLIC_MARBLE_API_URL=https://api.marblecms.com

-ARG MARBLE_WORKSPACE_KEY=build-placeholder

-

-COPY package.json package.json

-COPY bun.lock bun.lock

-COPY turbo.json turbo.json

-

-COPY apps/web/package.json apps/web/package.json

-RUN bun install

-

-COPY apps/web/ apps/web/

-

-ENV NODE_ENV=production

-ENV NEXT_TELEMETRY_DISABLED=1

-

-# Build-time env stubs to pass zod validation

-ENV DATABASE_URL="postgresql://opencut:opencut@localhost:5432/opencut"

-ENV BETTER_AUTH_SECRET="build-time-secret"

-ENV UPSTASH_REDIS_REST_URL="http://localhost:8079"

-ENV UPSTASH_REDIS_REST_TOKEN="example_token"

-ENV NEXT_PUBLIC_SITE_URL="http://localhost:3000"

-ENV NEXT_PUBLIC_MARBLE_API_URL=$NEXT_PUBLIC_MARBLE_API_URL

-ENV MARBLE_WORKSPACE_KEY=$MARBLE_WORKSPACE_KEY

-

-ENV FREESOUND_CLIENT_ID=$FREESOUND_CLIENT_ID

-ENV FREESOUND_API_KEY=$FREESOUND_API_KEY

-

-WORKDIR /app/apps/web

-RUN bun run build

-

-# Production image

-FROM base AS runner

-WORKDIR /app

-

-ENV NODE_ENV=production

-ENV NEXT_TELEMETRY_DISABLED=1

-

-RUN addgroup --system --gid 1001 nodejs

-RUN adduser --system --uid 1001 nextjs

-

-COPY --from=builder --chown=nextjs:nodejs /app/apps/web/public ./apps/web/public

-COPY --from=builder --chown=nextjs:nodejs /app/apps/web/.next/standalone ./

-COPY --from=builder --chown=nextjs:nodejs /app/apps/web/.next/static ./apps/web/.next/static

-

-RUN chown nextjs:nodejs apps

-

-USER nextjs

-

-EXPOSE 3000

-

-ENV PORT=3000

-ENV HOSTNAME="0.0.0.0"

-

-CMD ["bun", "apps/web/server.js"]

+FROM oven/bun:1 AS builder
+
+WORKDIR /app
+
+COPY . .
+
+RUN bun install --frozen-lockfile
+
+ENV NODE_ENV=production
+ENV NEXT_TELEMETRY_DISABLED=1
+
+WORKDIR /app/apps/web
+RUN bun run build
+
+FROM nginx:alpine AS runner
+
+COPY --from=builder /app/apps/web/out /usr/share/nginx/html
+
+EXPOSE 80
+
+CMD ["nginx", "-g", "daemon off;"]