From a368d043f4d89661911d09ef6a58d949d726e85a Mon Sep 17 00:00:00 2001
From: syui <syui@syui.ai>
Date: Sun, 22 Mar 2026 07:46:58 +0900
Subject: [PATCH] fix: auto-sign unsigned packages in repo-db-update

---
 cfg/repo.sh | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/cfg/repo.sh b/cfg/repo.sh
index 8a6cfd9..c46b687 100755
--- a/cfg/repo.sh
+++ b/cfg/repo.sh
@@ -141,6 +141,16 @@ REPO_NAME="aios"
 REPO_DIR="${HOME}/ai/repo"
 
 cd "$REPO_DIR/x86_64"
+
+# Sign unsigned packages
+for pkg in *.pkg.tar.zst; do
+  [ -f "$pkg" ] || continue
+  if [ ! -f "${pkg}.sig" ]; then
+    echo "Signing $pkg..."
+    gpg --detach-sign --default-key "$GPG_KEY" "$pkg"
+  fi
+done
+
 rm -f "${REPO_NAME}".{db,files}*
 repo-add --sign --key "$GPG_KEY" "${REPO_NAME}.db.tar.gz" *.pkg.tar.zst
 gpg --export "$GPG_KEY" > "$REPO_DIR/aios.gpg"