🔒 Implement build artifact hash verification

.gitignore

@@ -6,6 +6,8 @@ node_modules
 dist
 out
 extras
+# we are using bun, the package-json only exists after running the macos build
+package-json.lock
 
 # Editor directories and files
 .vscode/*

build.sh

@@ -22,7 +22,8 @@ cp ../Relay/dist/relay-x86_64-apple-darwin ./extras/macos/relay || error "Failed
 
 # Clean previous builds
 log "Cleaning previous builds..."
-rm -rf dist
+sudo rm -rf dist
+sudo rm -rf out
 
 # Build Linux version
 log "Building Linux version..."
@@ -43,5 +44,30 @@ VERSION=$(node -p "require('./package.json').version")
 log "Build complete! 🎉"
 echo "📦 Build artifacts:"
 echo "🐧 Linux AppImage: ./dist/Eve-${VERSION}.AppImage"
-echo "🐧 Linux Flatpak: ./dist/Eve-${VERSION}.flatpak"
+echo "🐧 Linux Flatpak: ./dist/Eve-${VERSION}-x86_64.flatpak"
 echo "🍎 macOS ZIP: ./dist/Eve-${VERSION}-mac.zip"
+
+log "Generating SHA256 hashes..."
+echo "🔐 SHA256 Hashes:"
+pushd dist
+for file in "Eve-${VERSION}.AppImage" "Eve-${VERSION}-x86_64.flatpak" "Eve-${VERSION}-mac.zip"; do
+    if [ -f "$file" ]; then
+        shasum -a 256 "$file" | tee "$file.sha256"
+        echo "✅ Generated hash for $file"
+    else
+        echo "⚠️  Missing artifact: $file"
+    fi
+done
+
+log "Generating SHA512 hashes..."
+echo "🔐 SHA512 Hashes:"
+for file in "Eve-${VERSION}.AppImage" "Eve-${VERSION}-x86_64.flatpak" "Eve-${VERSION}-mac.zip"; do
+    if [ -f "$file" ]; then
+        shasum -a 512 "$file" | tee "$file.sha512"
+        echo "✅ Generated hash for $file"
+    else
+        echo "⚠️  Missing artifact: $file"
+    fi
+done
+
+popd