feat: harden local shell, SFTP, and desktop session reliability
Finder-launched terminals now inherit a login PATH so tools like ollama resolve, destructive SFTP/editor actions require confirmation, and terminal search plus window dragging work again. SSH forwards and RDP sessions keep listeners and survive reconnect without FastPath crashes. Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
Logan.LiandCursor committed
1 parent
188f3556ed
commit
08696896f9
223 files changed
+13493
-3423
No files matched your search
@@ -0,0 +1,215 @@
|
||||
@echo off
|
||||
setlocal EnableExtensions EnableDelayedExpansion
|
||||
chcp 65001 >nul
|
||||
|
||||
rem OpsXShell v2.1.x native Windows release builder.
|
||||
rem Run this script from Windows x64 with the MSVC Rust toolchain installed.
|
||||
|
||||
cd /d "%~dp0.."
|
||||
set "VERSION_ARG="
|
||||
set "CHECK_MODE=full"
|
||||
set "RUST_TARGET=x86_64-pc-windows-msvc"
|
||||
set "OUTPUT_PLATFORM=windows-x64"
|
||||
|
||||
:parse_args
|
||||
if "%~1"=="" goto args_done
|
||||
set "ARG=%~1"
|
||||
|
||||
if /I "!ARG!"=="-h" goto usage_ok
|
||||
if /I "!ARG!"=="--help" goto usage_ok
|
||||
if /I "!ARG!"=="--quick" (
|
||||
set "CHECK_MODE=quick"
|
||||
shift
|
||||
goto parse_args
|
||||
)
|
||||
if /I "!ARG!"=="--skip-checks" (
|
||||
set "CHECK_MODE=none"
|
||||
shift
|
||||
goto parse_args
|
||||
)
|
||||
if /I "!ARG!"=="win-x64" (
|
||||
shift
|
||||
goto parse_args
|
||||
)
|
||||
if /I "!ARG:~0,4!"=="v2.1" goto set_version_arg
|
||||
if /I "!ARG:~0,4!"=="2.1." goto set_version_arg
|
||||
call :fail "未知参数：!ARG!（使用 scripts\build.bat --help 查看用法）"
|
||||
exit /b 1
|
||||
|
||||
:set_version_arg
|
||||
if defined VERSION_ARG (
|
||||
call :fail "只能指定一个版本号"
|
||||
exit /b 1
|
||||
)
|
||||
set "VERSION_ARG=!ARG!"
|
||||
if /I "!VERSION_ARG:~0,1!"=="v" set "VERSION_ARG=!VERSION_ARG:~1!"
|
||||
shift
|
||||
goto parse_args
|
||||
|
||||
:args_done
|
||||
if /I not "%OS%"=="Windows_NT" (
|
||||
call :fail "build.bat 必须在 Windows 环境运行"
|
||||
exit /b 1
|
||||
)
|
||||
|
||||
for %%C in (node npm npx cargo rustc powershell) do (
|
||||
where %%C >nul 2>nul
|
||||
if errorlevel 1 (
|
||||
call :fail "缺少构建依赖：%%C"
|
||||
exit /b 1
|
||||
)
|
||||
)
|
||||
|
||||
for /f "usebackq delims=" %%V in (`node -p "require('./package.json').version"`) do set "CURRENT_VERSION=%%V"
|
||||
if not defined CURRENT_VERSION (
|
||||
call :fail "无法读取 package.json 版本"
|
||||
exit /b 1
|
||||
)
|
||||
|
||||
if defined VERSION_ARG (
|
||||
set "VERSION=%VERSION_ARG%"
|
||||
) else (
|
||||
set "VERSION=%CURRENT_VERSION%"
|
||||
)
|
||||
|
||||
node -e "if (!/^2\.1\.\d+(?:[.-][0-9A-Za-z.-]+)?$/.test(process.argv[1])) process.exit(1)" "%VERSION%"
|
||||
if errorlevel 1 (
|
||||
call :fail "版本必须是 v2.1.x 语义版本，当前输入：%VERSION%"
|
||||
exit /b 1
|
||||
)
|
||||
|
||||
where rustup >nul 2>nul
|
||||
if not errorlevel 1 (
|
||||
rustup target list --installed | findstr /X /C:"%RUST_TARGET%" >nul
|
||||
if errorlevel 1 (
|
||||
call :fail "Rust target 未安装：%RUST_TARGET%；请先运行 rustup target add %RUST_TARGET%"
|
||||
exit /b 1
|
||||
)
|
||||
)
|
||||
|
||||
if defined VERSION_ARG if /I not "%VERSION%"=="%CURRENT_VERSION%" (
|
||||
call :log "同步版本号到 v%VERSION%"
|
||||
node scripts\set-version.mjs "%VERSION%"
|
||||
if errorlevel 1 exit /b 1
|
||||
)
|
||||
|
||||
node scripts\set-version.mjs --check "%VERSION%"
|
||||
if errorlevel 1 exit /b 1
|
||||
|
||||
if not exist node_modules\ (
|
||||
call :log "安装锁定依赖"
|
||||
call npm ci
|
||||
if errorlevel 1 exit /b 1
|
||||
)
|
||||
|
||||
set "GIT_SHA=unknown"
|
||||
where git >nul 2>nul
|
||||
if not errorlevel 1 (
|
||||
for /f "delims=" %%G in ('git rev-parse --short HEAD 2^>nul') do set "GIT_SHA=%%G"
|
||||
)
|
||||
call :log "OpsXShell v%VERSION% · win-x64 · !GIT_SHA!"
|
||||
|
||||
if /I "%CHECK_MODE%"=="full" (
|
||||
call :log "运行完整发布门禁"
|
||||
call npm run acceptance:full
|
||||
if errorlevel 1 exit /b 1
|
||||
) else if /I "%CHECK_MODE%"=="quick" (
|
||||
call :log "运行快速发布门禁"
|
||||
call npm run acceptance:quick
|
||||
if errorlevel 1 exit /b 1
|
||||
) else (
|
||||
call :log "已按参数跳过构建前门禁"
|
||||
)
|
||||
|
||||
node scripts\release-preflight.mjs windows
|
||||
if errorlevel 1 exit /b 1
|
||||
|
||||
call :log "构建 Windows x86_64 原生安装包"
|
||||
call npx tauri build --ci --target "%RUST_TARGET%"
|
||||
if errorlevel 1 exit /b 1
|
||||
|
||||
set "BUNDLE_ROOT=src-tauri\target\%RUST_TARGET%\release\bundle"
|
||||
node scripts\verify-release.mjs windows "%BUNDLE_ROOT%"
|
||||
if errorlevel 1 exit /b 1
|
||||
|
||||
set "OUTPUT_DIR=%CD%\release\v%VERSION%\%OUTPUT_PLATFORM%"
|
||||
if exist "%OUTPUT_DIR%" rmdir /S /Q "%OUTPUT_DIR%"
|
||||
mkdir "%OUTPUT_DIR%"
|
||||
if errorlevel 1 (
|
||||
call :fail "无法创建输出目录：%OUTPUT_DIR%"
|
||||
exit /b 1
|
||||
)
|
||||
|
||||
set /A ARTIFACT_COUNT=0
|
||||
for %%F in ("%BUNDLE_ROOT%\nsis\*.exe" "%BUNDLE_ROOT%\msi\*.msi" "%BUNDLE_ROOT%\wix\*.msi") do (
|
||||
if exist "%%~fF" (
|
||||
copy /Y "%%~fF" "%OUTPUT_DIR%\%%~nxF" >nul
|
||||
if errorlevel 1 (
|
||||
call :fail "复制安装包失败：%%~fF"
|
||||
exit /b 1
|
||||
)
|
||||
set /A ARTIFACT_COUNT+=1
|
||||
)
|
||||
)
|
||||
|
||||
if "%ARTIFACT_COUNT%"=="0" (
|
||||
call :fail "构建完成但未找到 NSIS/MSI 安装包：%BUNDLE_ROOT%"
|
||||
exit /b 1
|
||||
)
|
||||
|
||||
powershell -NoProfile -ExecutionPolicy Bypass -Command ^
|
||||
"$files = Get-ChildItem -LiteralPath $env:OUTPUT_DIR -File ^| Where-Object { $_.Extension -in '.exe', '.msi' };" ^
|
||||
"$lines = @($files ^| ForEach-Object { (Get-FileHash -Algorithm SHA256 -LiteralPath $_.FullName).Hash.ToLowerInvariant() + ' ' + $_.Name });" ^
|
||||
"[System.IO.File]::WriteAllLines((Join-Path $env:OUTPUT_DIR 'SHA256SUMS.txt'), [string[]]$lines, (New-Object System.Text.UTF8Encoding($false)))"
|
||||
if errorlevel 1 (
|
||||
call :fail "生成 SHA256SUMS.txt 失败"
|
||||
exit /b 1
|
||||
)
|
||||
|
||||
call :log "构建完成：%OUTPUT_DIR%"
|
||||
dir "%OUTPUT_DIR%"
|
||||
echo.
|
||||
echo [build] SHA-256
|
||||
type "%OUTPUT_DIR%\SHA256SUMS.txt"
|
||||
exit /b 0
|
||||
|
||||
:usage_ok
|
||||
call :usage
|
||||
exit /b 0
|
||||
|
||||
:usage
|
||||
echo OpsXShell Windows 原生安装包构建脚本
|
||||
echo.
|
||||
echo 用法：
|
||||
echo scripts\build.bat [v2.1.x] [win-x64] [选项]
|
||||
echo.
|
||||
echo 选项：
|
||||
echo --quick 构建前只运行快速门禁
|
||||
echo --skip-checks 跳过门禁，仅用于本地重复打包
|
||||
echo -h, --help 显示帮助
|
||||
echo.
|
||||
echo 示例：
|
||||
echo scripts\build.bat
|
||||
echo scripts\build.bat v2.1.1
|
||||
echo scripts\build.bat v2.1.2 win-x64 --quick
|
||||
echo.
|
||||
echo 环境要求：
|
||||
echo Windows 10/11 x64、Node.js 18+、Rust MSVC toolchain、
|
||||
echo Visual Studio 2022 Build Tools（Desktop development with C++）、
|
||||
echo Windows 10/11 SDK、WebView2 Runtime。
|
||||
echo.
|
||||
echo 说明：
|
||||
echo - 输出 NSIS/MSI 到 release\v版本\windows-x64 并生成 SHA256SUMS.txt。
|
||||
echo - 脚本不会创建或推送 Git tag，也不会上传 Release。
|
||||
echo - 正式签名需设置 REQUIRE_SIGNING=true 和 Windows 签名环境变量。
|
||||
exit /b 0
|
||||
|
||||
:log
|
||||
echo.
|
||||
echo [build] %~1
|
||||
exit /b 0
|
||||
|
||||
:fail
|
||||
echo.
|
||||
echo [build] ERROR: %~1 1>&2
|
||||
exit /b 1
|
||||
Reference in new issue
Block a user