ci: Atomically replace share-svc binary on deploy

scp overwrites in place, which fails with ETXTBSY ("text file busy") on
repeat deploys because systemd is executing /usr/local/bin/share-svc.
Copy to a temp path, chmod, then mv it over the destination so rename(2)
swaps the dir entry without touching the busy inode.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

.gitea/workflows/deploy.yaml

@@ -64,8 +64,16 @@ jobs:
 
       - name: Copy backend binary + unit file
         run: |
+          # Copy to a temp path then atomically rename into place. You can't
+          # overwrite a running executable in place (ETXTBSY / "Text file busy"),
+          # but rename(2) just swaps the directory entry while the old inode keeps
+          # serving the running process until the restart step picks up the new
+          # binary. chmod first so the exec bit survives the rename (scp doesn't
+          # preserve mode without -p).
           scp -i ~/.ssh/deploy_key server/share-svc \
-            "$DEPLOY_USER@$DEPLOY_HOST:/usr/local/bin/share-svc"
+            "$DEPLOY_USER@$DEPLOY_HOST:/usr/local/bin/share-svc.new"
+          ssh -i ~/.ssh/deploy_key "$DEPLOY_USER@$DEPLOY_HOST" \
+            'chmod 0755 /usr/local/bin/share-svc.new && mv -f /usr/local/bin/share-svc.new /usr/local/bin/share-svc'
           scp -i ~/.ssh/deploy_key server/share-svc.service \
             "$DEPLOY_USER@$DEPLOY_HOST:/etc/systemd/system/share-svc.service"
 

src/CharacterSheet.tsx

@@ -192,29 +192,6 @@ function apiURL(path: string) {
   return new URL(path, window.location.href).toString();
 }
 
-// Copy text to the clipboard. navigator.clipboard is only available in a
-// secure context (HTTPS or localhost); over plain HTTP it's undefined, so we
-// fall back to the deprecated execCommand("copy"), which still works there.
-// Must be called from within a user gesture (e.g. a click handler).
-async function copyToClipboard(text: string) {
-  if (navigator.clipboard && window.isSecureContext) {
-    await navigator.clipboard.writeText(text);
-    return;
-  }
-  const ta = document.createElement("textarea");
-  ta.value = text;
-  ta.style.position = "fixed";
-  ta.style.opacity = "0";
-  document.body.appendChild(ta);
-  ta.focus();
-  ta.select();
-  try {
-    document.execCommand("copy");
-  } finally {
-    document.body.removeChild(ta);
-  }
-}
-
 export default function CharacterSheet() {
   const [activeTab, setActiveTab] = useState("main");
   const [urlMode, setUrlMode] = useState(false);
@@ -539,7 +516,7 @@ export default function CharacterSheet() {
       // Backend unreachable: fall back to a self-contained inline ?c= link.
       shareURL = base + "?c=" + (await compressToBase64(json));
     }
-    await copyToClipboard(shareURL);
+    await navigator.clipboard.writeText(shareURL);
     setCopyStatus(true);
     setTimeout(() => setCopyStatus(false), 2000);
   }, [collectData]);