chore(release): v1.4.0 prep — version bump, polish, CI artifacts (#170)

* chore(release): v1.4.0 prep — version bump, polish, CI artifacts

Bumps workspace + standalone PSP crates from 1.3.0 to 1.4.0 ahead of
the v1.4.0 release, plus a handful of unrelated polish items.

- File manager: tree-view click hit-test was off by ~title_h in
  windowed Explorer mode because `draw_windowed_explorer` reuses the
  WM titlebar (no inner title bar) but the click handler always
  shifted by `title_h`. Now the offset is keyed off whether the
  current render path actually drew an inner title bar
  (`fullscreen || ViewMode::Dual`). Tests updated to match the
  corrected geometry.
- SDL backend: stop drawing OASIS_OS's software cursor in the
  desktop binary — the host OS already paints one over the SDL
  window, so the in-app cursor was a duplicate. `CursorState`
  position tracking is preserved for diagnostics; only the SDI
  registration + texture upload are skipped. Other backends
  (PSP / UE5 / WASM / screenshot tool) keep their software cursor.
- Docs: add a `WiFi authentication (WPA / WPA2)` section to
  `psp-architecture.md` clarifying that PSP WiFi auth lives in
  firmware/CFW, not OASIS_OS, with operator guidance to use ARK-4
  with a WPA2 plugin for modern networks.
- CI (`main-ci`): the `build-release-binaries` job no longer
  requires a tag — it now runs on every push to main /
  workflow_dispatch and uploads `oasis-binaries`
  (oasis-app, oasis-screenshot, liboasis_ffi.so) alongside the
  existing `psp-artifacts` (OASIS-OS.PBP, oasis-overlay.prx,
  RECOVERY.PBP) already attached on every run. The downstream
  `create-release` job stays tag-gated, so non-release runs only
  publish artifacts to the run, not to a GitHub Release.
- PSP EBOOT assets: refresh `ICON0.PNG` (144×80) and `PIC1.PNG`
  (480×272) — the old icons advertised v0.1. Verified the new
  bytes are baked into `EBOOT.PBP` via `unpack-pbp` round-trip,
  and confirmed the EBOOT still boots cleanly under PPSSPP
  headless (15 s, 3600 frames, WiFi/TCP up, no errors).

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* fix: address AI review feedback (iteration 1)

Automated fix by Claude in response to AI review feedback.

Iteration: 1/5

Co-Authored-By: AI Review Agent <noreply@anthropic.com>

---------

Co-authored-by: AI Agent Bot <ai-agent@localhost>
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Co-authored-by: AI Review Agent <ai-review-agent@localhost>

Author: 4 people

.github/workflows/main-ci.yml

@@ -326,11 +326,15 @@ jobs:
           )" \
             --label "ci-failure,automated" || echo "::warning::Could not create failure issue"
 
-  # -- Build Release Binaries (separate job, depends on CI) ----------------
+  # -- Build Desktop Binaries (separate job, depends on CI) ---------------
+  # Runs on every main-ci trigger — not just tagged releases — so each run
+  # has the desktop linux binaries attached as an `oasis-binaries` artifact
+  # alongside the PSP `psp-artifacts` already uploaded by the `ci` job.
+  # The downstream `create-release` job stays tag-gated; this job only
+  # uploads to the run, it does not publish a GitHub Release.
   build-release-binaries:
-    name: Build Release Binaries
+    name: Build Desktop Binaries
     needs: ci
-    if: startsWith(github.ref, 'refs/tags/v') || github.event.inputs.create_release == 'true'
     runs-on: self-hosted
     timeout-minutes: 30
     steps:
@@ -396,7 +400,11 @@ jobs:
         with:
           name: oasis-binaries
           path: release-binaries/*
-          retention-days: 90
+          # Short retention: this job runs on every main-ci, so artifacts
+          # accumulate quickly. The tag-gated `create-release` job consumes
+          # them immediately, so 7 days is sufficient for that handoff and
+          # for short-term debugging of recent runs.
+          retention-days: 7
 
   # -- Create GitHub Release -----------------------------------------------
   create-release:

Cargo.lock

@@ -49,7 +49,7 @@ exclude = [
 ]
 
 [workspace.package]
-version = "1.3.0"
+version = "1.4.0"
 edition = "2024"
 license = "MIT OR Unlicense"
 repository = "https://github.com/AndrewAltimit/oasis-os"