From e3948a34799d0dedd9bf613b03c30faf8a2ce43f Mon Sep 17 00:00:00 2001
From: Aqil Aziz <gonzes7@gmail.com>
Date: Fri, 22 May 2026 17:54:47 +0700
Subject: [PATCH] ci(release): reject AppImage with bad sharun lib path (#2385)

---
 .../release/strip-appimage-graphics-libs.sh   | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)

diff --git a/scripts/release/strip-appimage-graphics-libs.sh b/scripts/release/strip-appimage-graphics-libs.sh
index 0ac8d3eaa..b7dfeb2cf 100755
--- a/scripts/release/strip-appimage-graphics-libs.sh
+++ b/scripts/release/strip-appimage-graphics-libs.sh
@@ -236,6 +236,24 @@ ensure_sharun_interpreter() {
   return 0
 }
 
+validate_sharun_lib_path() {
+  local appdir="$1"
+  if ! uses_sharun_launcher "$appdir"; then
+    return 0
+  fi
+
+  local lib_path="$appdir/shared/lib/lib.path"
+  if [ ! -s "$lib_path" ]; then
+    echo "[strip-libs] ERROR: sharun AppImage is missing shared/lib/lib.path; refusing to ship an AppImage that exits with 'Interpreter not found!'" >&2
+    exit 1
+  fi
+
+  if grep -E '(^|[+:])/home/runner/|(^|[+:])/__w/' "$lib_path" >/dev/null; then
+    echo "[strip-libs] ERROR: shared/lib/lib.path contains CI runner paths; regenerate it with bundle-relative entries before release." >&2
+    exit 1
+  fi
+}
+
 strip_one_appimage() {
   local img="$1"
   local original
@@ -286,6 +304,7 @@ strip_one_appimage() {
   if ensure_sharun_interpreter "$appdir"; then
     added_loader=1
   fi
+  validate_sharun_lib_path "$appdir"
 
   if [ "$removed" -eq 0 ] && [ "$added_loader" -eq 0 ]; then
     echo "[strip-libs] No graphics libs or missing sharun interpreter found in $original; leaving unchanged."