fix(webicached): conf-driven variant exclusion; fix sttr darwin universal

- TagVariants now applies confVariants from releases.conf as case-folded
  substring matches before package-specific logic, removing the need to
  hardcode simple variant names in Go
- gitea: variants = gogit (excludes Windows gogit builds)
- lsd: variants = msvc (moved from Go to conf)
- pwsh: variants = fxdependent fxdependentWinDesktop appimage
- bun: variants = profile (moved from Go to conf)
- sttr: darwin_all tagged as universal2 so arm64 and amd64 Mac users
  are served; pkg.tar.zst excluded (Arch Linux package format)
- add .claude/ to .gitignore

internal/releases/bun/variants.go

@@ -21,9 +21,6 @@ import (
 func TagVariants(assets []storage.Asset) {
 	for i := range assets {
 		lower := strings.ToLower(assets[i].Filename)
-		if strings.Contains(lower, "-profile") {
-			assets[i].Variants = append(assets[i].Variants, "profile")
-		}
 		if assets[i].Arch == "x86_64" {
 			if strings.Contains(lower, "-baseline") {
 				// Baseline is plain x86_64 — strip the suffix from

internal/releases/lsd/variants.go

@@ -1,14 +1,10 @@
 // Package lsd provides variant tagging for lsd (LSDeluxe) releases.
 //
-// lsd publishes .deb packages and windows-msvc builds alongside
-// the standard archives.
+// lsd publishes .deb packages alongside the standard archives.
+// msvc builds are excluded via releases.conf variants.
 package lsddist
 
-import (
-	"strings"
-
-	"github.com/webinstall/webi-installers/internal/storage"
-)
+import "github.com/webinstall/webi-installers/internal/storage"
 
 // TagVariants tags lsd-specific build variants.
 func TagVariants(assets []storage.Asset) {
@@ -16,8 +12,5 @@ func TagVariants(assets []storage.Asset) {
 		if assets[i].Format == ".deb" {
 			assets[i].Variants = append(assets[i].Variants, "deb")
 		}
-		if strings.Contains(strings.ToLower(assets[i].Filename), "-msvc") {
-			assets[i].Variants = append(assets[i].Variants, "msvc")
-		}
 	}
 }

internal/releases/pwsh/variants.go

@@ -23,15 +23,8 @@ var winVersionRe = regexp.MustCompile(`(?i)-win(?:7|8|81|10|2008|2012|2016)`)
 func TagVariants(assets []storage.Asset) {
 	for i := range assets {
 		lower := strings.ToLower(assets[i].Filename)
-		switch {
-		case strings.Contains(lower, "-fxdependentwindesktop"):
-			assets[i].Variants = append(assets[i].Variants, "fxdependentWinDesktop")
-		case strings.Contains(lower, "-fxdependent"):
-			assets[i].Variants = append(assets[i].Variants, "fxdependent")
-		case winVersionRe.MatchString(lower):
+		if winVersionRe.MatchString(lower) {
 			assets[i].Variants = append(assets[i].Variants, "win-version-specific")
-		case strings.HasSuffix(lower, ".appimage"):
-			assets[i].Variants = append(assets[i].Variants, "appimage")
 		}
 	}
 }

internal/releases/sttr/variants.go

@@ -1,14 +1,8 @@
 // Package sttr provides variant tagging for sttr releases.
 //
-// sttr ships a darwin_all (universal macOS) archive alongside per-arch builds.
-// These universal archives have no arch in the filename — Go classifies them as
-// os="darwin", arch="" which the Node builds-cacher rejects with FORMAT CHANGE
-// (Node's classifier extracts a different arch from "all"). Production Node
-// also stores these as os="", arch="" (unroutable).
-//
-// .sbom.json files are software bill-of-materials metadata — not installable
-// archives. They pass through the format filter (ext="") but should not be
-// served.
+// sttr_Darwin_all.tar.gz is the only macOS release — a universal binary
+// with no arch token. Mark it universal2 so expandUniversal serves it
+// to both arm64 and amd64 Mac users.
 package sttrdist
 
 import (
@@ -17,20 +11,11 @@ import (
 	"github.com/webinstall/webi-installers/internal/storage"
 )
 
-// TagVariants tags sttr-specific build variants for exclusion from legacy export.
+// TagVariants tags sttr-specific build variants.
 func TagVariants(assets []storage.Asset) {
 	for i := range assets {
-		lower := strings.ToLower(assets[i].Filename)
-		// darwin_all / Darwin_all: universal macOS archive with no arch info.
-		// Node's classifier extracts a different result → FORMAT CHANGE.
-		// Production LIVE_cache has these as os="", arch="" (unroutable).
-		if strings.Contains(lower, "darwin_all") {
-			assets[i].Variants = append(assets[i].Variants, "universal-all")
-			continue
-		}
-		// .sbom.json: software bill-of-materials, not an installable archive.
-		if strings.HasSuffix(lower, ".sbom.json") {
-			assets[i].Variants = append(assets[i].Variants, "metadata")
+		if strings.Contains(strings.ToLower(assets[i].Filename), "darwin_all") {
+			assets[i].Arch = "universal2"
 		}
 	}
 }